From nobody Fri Nov 1 05:00:04 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE749120091 for ; Fri, 1 Nov 2019 05:00:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T4719k99pSsy for ; Fri, 1 Nov 2019 04:59:59 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70115.outbound.protection.outlook.com [40.107.7.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 440AA12002E for ; Fri, 1 Nov 2019 04:59:59 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SfXxep72P/szvrT9ZbAkDuobwzIVsK5Q4bj9L6wDdtbgUzezR7i32oP4/uoE3WoKEm8ll5KkbNQzY0HhfoMVu83eWMSrWK2ONpDFnGtutD2UFK+Cvsaun4MV+afBaUT4/ey+MXPV25wyVQfodop8GJ8hXeemvmDNY9yxPLF9LxiMH25i5bDaDYaFHpO/I1Xp2uvs88NLW8K+SIaGSTpPwg4H7tNpVN1GDSvXPQCaLOqVuhdvapevt4UMv5anPa5nqf5OF8zbgiOgO7Oa7snhgynY8PS9hzuO+4QjwdaxB7+f3khSgKUw76h/0kwUhx0Pi53Oy42ad4iUinHqiRNyMA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dHq2BZOgrxlrzZauOiV+/ImQJJkishtJwY568MqAbfs=; b=VZhrhFgTcOswsRic2DkJp+EzTiXe0wnr53OfN7PDoS5I0tpkCeBWdO9JxorrUap8iQ9sTNKeVNZ/71BVaGq8kCBTVzHvxYR6Gqv6v/XMJWXUqiSzqvxTwrjI6OcTwugR3rRSqBuSC6lqEYIIKKya/KICQ4xQO4bWwb+IdhG0vQD6qe1DXGW0IpM41hWy8M1nPHpNBk1NWFKzud2CxpNtIQC65PoUrkpv7HdJrR++BFGJRRK9ipE26VXIgfKsW1y3TD+lCI7UeEGBu6wXCjt9wqZRx9932I28w6SAMq7kxSYMwIz5HhEi4SWVBDFwFGMNzue/PJp6w0Ll3cHq0CQ29A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia-bell-labs.com; dmarc=pass action=none header.from=nokia-bell-labs.com; dkim=pass header.d=nokia-bell-labs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dHq2BZOgrxlrzZauOiV+/ImQJJkishtJwY568MqAbfs=; b=U5KMDclyL+J/Hmcyt0PfOGsQBToItP7OZXR7cbaaWPl5lTzycrn3txw2I725gW2qYr33vIVKM+DWumMRUdyfhTGLHL5tekBh3OwNHm9YW7KdKu9NvELyvO7LyYsCndngh3+Q0tn67iLTxsVOmUUTMYyo8aZwR5VaX5LDrxNKed8= Received: from AM0PR0702MB3746.eurprd07.prod.outlook.com (52.133.46.159) by AM0PR0702MB3794.eurprd07.prod.outlook.com (52.133.44.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.28; Fri, 1 Nov 2019 11:59:56 +0000 Received: from AM0PR0702MB3746.eurprd07.prod.outlook.com ([fe80::40b2:509f:ad68:932a]) by AM0PR0702MB3746.eurprd07.prod.outlook.com ([fe80::40b2:509f:ad68:932a%5]) with mapi id 15.20.2387.030; Fri, 1 Nov 2019 11:59:56 +0000 From: "Oliver, Ian (Nokia - FI/Espoo)" To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: Dynamic Systems in IETF RATS (was Re: [Rats] 3 Use cases) Thread-Index: AQHVkKtwg7t/O3MMpEyS7kOxpsh9VQ== Date: Fri, 1 Nov 2019 11:59:56 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=ian.oliver@nokia-bell-labs.com; x-originating-ip: [131.228.2.10] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: da8aa4ec-b088-4194-4cbb-08d75ec30349 x-ms-traffictypediagnostic: AM0PR0702MB3794: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 020877E0CB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(346002)(39860400002)(376002)(366004)(136003)(189003)(199004)(66066001)(14444005)(6306002)(76116006)(316002)(236005)(9686003)(74316002)(55016002)(19627405001)(64756008)(66446008)(66556008)(66476007)(54896002)(7736002)(66946007)(8676002)(256004)(476003)(71200400001)(33656002)(4326008)(486006)(71190400001)(966005)(6116002)(606006)(14454004)(25786009)(478600001)(3846002)(81156014)(99286004)(81166006)(52536014)(229853002)(6436002)(6246003)(5660300002)(86362001)(102836004)(26005)(2906002)(105004)(53546011)(186003)(6506007)(7696005)(8936002); DIR:OUT; SFP:1102; SCL:1; SRVR:AM0PR0702MB3794; H:AM0PR0702MB3746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; received-spf: None (protection.outlook.com: nokia-bell-labs.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: zchj3s/RVW+/ywKp/aJgSFkEdL7FCVRhVxfy6rJ8JDbs+K3njckhUKY5bOydiooj9HMt/VvJHuk3sdSnhbyOoubN6zdl2W1y/k4PySRgEX7mvAa2bRDu8GI/jZClbm9QsjifVDddWJn0NiYDYZRX5A81MhsFhtH20M01DJhbWRG4MfIEJxX3ZRzVNoBRlrMxKlBpZ/igFwiZTlWeCK+M7bVNm7vJdpQ5l2epqMsB+zRBk+lMCZAFs0UN1Rz8ScYYqy3IUYZCP570hTZ7sWFAuve2AeZobePC7nhRDxmhpOpxj7SciEGmEARebUVBya4R3mwBPChRzOJM+EhNdnka91IRUGnIFrIST3y7t2IquNwAqTvIGvAXleLNf2Uulg6zq25QHAJcoU8hYFjSsUBngeoFIyAFBTcgVxehqogiXgtC8pfgYw29aZj9zagxV9teRNUJaiRmVc385yl68tcu1cVCpGzy8o3Cgz9kou7vn0M= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR0702MB3746BF95CB34737BD034DD1A8F620AM0PR0702MB3746_" MIME-Version: 1.0 X-OriginatorOrg: nokia-bell-labs.com X-MS-Exchange-CrossTenant-Network-Message-Id: da8aa4ec-b088-4194-4cbb-08d75ec30349 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2019 11:59:56.2383 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: N0sgYNNI+/5h/sv+X4iJC/tM69rUhDt+x6G8hKXDea/8yI8BHd0BQ0a6Q60m+6GbgfBNoSzStyNqB6s4r1hAmvXSh2C0vpgGZKWMjgrK8GQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0702MB3794 Archived-At: Subject: Re: [Rats] Dynamic Systems in IETF RATS (was Re: 3 Use cases) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 12:00:03 -0000 --_000_AM0PR0702MB3746BF95CB34737BD034DD1A8F620AM0PR0702MB3746_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello Michael, If think you got both cases perfect there...actually they are the two use c= ases we are working on, so... But in both cases, regardless of the network, there is a requirement for so= me dynamicity in the "pre known" devices. So for a rail environment the set= of devices (eg: wagons) is known and combinations of those could be precal= culated. For a medical system it becomes much more difficult in that the se= t of devices will potentially change rapidly. Thinking about these cases suggests to me that we would need t concentrate = more on the introduction protocols between attestable device and attestor -= more work to be done here And yes, the nightmare scenario is one where Scotty has to wait for the att= estation server Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Monday, 07 October 2019 15:32 To: Oliver, Ian (Nokia - FI/Espoo) Cc: rats@ietf.org Subject: Dynamic Systems in IETF RATS (was Re: [Rats] 3 Use cases) Oliver, Ian (Nokia - FI/Espoo) wrote: > Dynamic Systems > All current integrity mechanism assume a certain degree of fixed > properties, eg: TPM's CRTM/SRTM, and known configurations. A case > exists where a set of, say, IoT devices each with integrity > measurements are attested by some Edge node. The Edge node may combin= e > the IoT device measurements into a single measurement (eg: Merkel > Tree). If the configuration of IoT device changes, particuarly in > relation to availability of device, then this combined measurement wi= ll > change. This changed measurement however may be a valid configuration= . > For example, in a medical case, the set of measurement devices may be > rapidly changing due to necessity of network provisioning, device > availabiltiy etc, but the permutations of devices may still be valid. So you are describing a system where there is an assembly of devices. I have a few questions and want to offer a two categories: 1) the network's view of the devices is transparent. That is, each device in the assembly is reachable by the network either through L2-bridging, L3-routing (facilited maybe by DHCPv6-PD), or because all devices are just connected to the same "wifi" or LLN. 2) the network's view of the devices is opaque: the network only sees some gateway device and perhaps all interaction is via an application layer g= ateway. Case (2) seems that the layer of indirection means the assembly gateway/controller should probably be a relying party for the devices, and should communicate it's configuration to an attester in order to valida= te it's configuration. The network would see the resulting attestion of the aggregate. I don't see anything surprising or new here. Just a recursive application of RATS. Case (1) is therefore the more interesting case, I think. I imagine, yes, some health care situation where the assembly is the hospit= al room, and the devices are the individual monitors. The room needs to attes= t to it's ability to deal/collect the correct/complete set of information, an= d one can see that the failure (or the deplection) of some device leads to th= e room being "unviable", and requiring attention. I also was thinking about an assembly that is a passenger-rail coach arrang= ed in a set. Each has a series of safety sensors that the engine must interrogate directly. But, it's not necessary for every sensor in every coa= ch to be functional, as there is some redundancy, not just within each vehicle= , but also because there are multiple vehicles. =3D=3D=3D In thinking about this, I also thought of some sf movie (Expanse, Star Trek= , Star Wars), where sensors and sub-systems get blown up/overloaded, and need to be patched. Chewbacca is waiting for the attestation system to agree th= at all parts are installed correctly, and Han and R2D2 are effecting repairs..= . A very dynamical system; but you don't get to lightspeed until is sure it won= 't just kill everyone onboard. ... Scotty: "Captain! I canna give you warp speed until the wee attestations se= ttle." -- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | network architect= [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ --_000_AM0PR0702MB3746BF95CB34737BD034DD1A8F620AM0PR0702MB3746_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello Michael,

If think you got both cases perfect there...actually they are the two use c= ases we are working on, so...


But in both cases, regardless of the network, there is a requirement for so= me dynamicity in the "pre known" devices. So for a rail environme= nt the set of devices (eg: wagons) is known and combinations of those could= be precalculated. For a medical system it becomes much more difficult in that the set of devices will potentially ch= ange rapidly.

Thinking about these cases suggests to me that we would need t concentrate = more on the introduction protocols between attestable device and attestor -= more work to be done here

And yes, the nightmare scenario is one where Scotty has to wait for the att= estation server

Ian


--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237


From: Michael Richardson
Sent: Monday, 07 October 2019 15:32
To: Oliver, Ian (Nokia - FI/Espoo)
Cc: rats@ietf.org
Subject: Dynamic Systems in IETF RATS (was Re: [Rats] 3 Use cases)


Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com> wrote= :
    > Dynamic Systems

    > All current integrity mechanism assume a certain de= gree of fixed
    > properties, eg: TPM's CRTM/SRTM, and known configur= ations. A case
    > exists where a set of, say, IoT devices each with i= ntegrity
    > measurements are attested by some Edge node. The Ed= ge node may combine
    > the IoT device measurements into a single measureme= nt (eg: Merkel
    > Tree). If the configuration of IoT device changes, = particuarly in
    > relation to availability of device, then this combi= ned measurement will
    > change. This changed measurement however may be a v= alid configuration.

    > For example, in a medical case, the set of measurem= ent devices may be
    > rapidly changing due to necessity of network provis= ioning, device
    > availabiltiy etc, but the permutations of devices m= ay still be valid.

So you are describing a system where there is an assembly of devices.
I have a few questions and want to offer a two categories:
1) the network's view of the devices is transparent.  That is, each de= vice
   in the assembly is reachable by the network either through L2-= bridging,
   L3-routing (facilited maybe by DHCPv6-PD), or because all devi= ces are
   just connected to the same "wifi" or LLN.

2) the network's view of the devices is opaque: the network only sees some<= br>    gateway device and perhaps all interaction is via an applicati= on layer gateway.

Case (2) seems that the layer of indirection means the assembly
gateway/controller should probably be a relying party for the devices,
and should communicate it's configuration to an attester in order to valida= te
it's configuration.  The network would see the resulting attestion of = the
aggregate.  I don't see anything surprising or new here. Just a recurs= ive
application of RATS.

Case (1) is therefore the more interesting case, I think.
I imagine, yes, some health care situation where the assembly is the hospit= al
room, and the devices are the individual monitors.  The room needs to = attest
to it's ability to deal/collect the correct/complete set of information, an= d
one can see that the failure (or the deplection) of some device leads to th= e
room being "unviable", and requiring attention.

I also was thinking about an assembly that is a passenger-rail coach arrang= ed
in a set.  Each has a series of safety sensors that the engine must interrogate directly. But, it's not necessary for every sensor in every coa= ch
to be functional, as there is some redundancy, not just within each vehicle= ,
but also because there are multiple vehicles.

=3D=3D=3D

In thinking about this, I also thought of some sf movie (Expanse, Star Trek= ,
Star Wars), where sensors and sub-systems get blown up/overloaded, and need=
to be patched.  Chewbacca is waiting for the attestation system to agr= ee that
all parts are installed correctly, and Han and R2D2 are effecting repairs..= . A
very dynamical system; but you don't get to lightspeed until is sure it won= 't
just kill everyone onboard.  ...
Scotty: "Captain! I canna give you warp speed until the wee attestatio= ns settle."

--
]            &n= bsp;  Never tell me the odds!       = ;          | ipv6 mesh network= s [
]   Michael Richardson, Sandelman Software Works   = ;     | network architect  [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |&nb= sp;  ruby on rails    [
       


--_000_AM0PR0702MB3746BF95CB34737BD034DD1A8F620AM0PR0702MB3746_-- From nobody Fri Nov 1 05:02:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8AD4120091 for ; Fri, 1 Nov 2019 05:02:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N9WkdhnbLeYc for ; Fri, 1 Nov 2019 05:02:03 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50107.outbound.protection.outlook.com [40.107.5.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0330F12002E for ; Fri, 1 Nov 2019 05:02:02 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UvSPo1Urrh2U7aUu5n/bcM4iEtPez3iFn45qHfdza7Ziwq6oOCifrrDd/xaIc7vX9OiCS/qhuULBbUpSkEGQ2rhG6QhT03LAl2fGrRil2gxF1XpLFkvxaX4nvG6QW6IwQlAsWA5dxsDjUBeX1s3m6EHe3xthZdS+MF4L9xYUqjJAlH3EvHfWIc0OrPcCkTGYB+NukyrJrxint0jRz0GIkYXgcBToyu693n/HU2g2T0usrwo2qzfHkWPl9thMuGJHFuTcOKwjA+aYMgYSezl/ZqWFZsFfZGo6YNC8LJ704TFkJLPUxuGZ9PyQxXYrUr7kLDjZ/pBqUKxSPrQ6hXY+wQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pYw7f9Siq/mfL6tWBg2kyqwwsnKgbxzsOyRDPFWGnWk=; b=W4OP1rKO0xLGmkmOWyA8Zd6O/x7WwaEIsgfhiGqKmYak1YVh8X7AHXuiyXwGRkV18XqaMh+ZtWTRq6Y5k2cfmdwPp/q5p6tiHslAW09/5QKY2J96OErCpxyMp/hesii6w7/lmgAItTft5s08SSCgLlNzxT7ao+yuICMaeHuL8KhEbqegZ1iHN365Cs5HyHqGuxprmKSifhc7NsBGZNhST4x+1r/XH0PFKd/evWU85X14nH6htNe1G24ueLpPxAWy2ZII/zV1tgWrsn8TAFHoS94veXQRSmfo1iyqYV7gmZTTuaNTnEETyeZg1nZrg08j9uCCkE4xX4Dxd6oR73KaPA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia-bell-labs.com; dmarc=pass action=none header.from=nokia-bell-labs.com; dkim=pass header.d=nokia-bell-labs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pYw7f9Siq/mfL6tWBg2kyqwwsnKgbxzsOyRDPFWGnWk=; b=la848epR74Jb/s8ov0jxHtmOGF6XXezzj+3yld6XeudB7p4Qld3f6QFyDVmYuTiNqRodZ6tCqiD0Bd+GAWNSzRK4QnpbOoAfd+LPmMSJforw2ESWl872yX4nigJvOtIJoo4yoqBlaWXwSqucYk0XOt5Z0v4PumMyz0a7nptsugA= Received: from AM0PR0702MB3746.eurprd07.prod.outlook.com (52.133.46.159) by AM0PR0702MB3586.eurprd07.prod.outlook.com (52.133.50.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Fri, 1 Nov 2019 12:02:00 +0000 Received: from AM0PR0702MB3746.eurprd07.prod.outlook.com ([fe80::40b2:509f:ad68:932a]) by AM0PR0702MB3746.eurprd07.prod.outlook.com ([fe80::40b2:509f:ad68:932a%5]) with mapi id 15.20.2387.030; Fri, 1 Nov 2019 12:02:00 +0000 From: "Oliver, Ian (Nokia - FI/Espoo)" To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: Data Attestation (was Re: [Rats] 3 Use cases) Thread-Index: AQHVkKv+XyC16AD9kkyupJL/i4K1YA== Date: Fri, 1 Nov 2019 12:02:00 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=ian.oliver@nokia-bell-labs.com; x-originating-ip: [131.228.2.10] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f0cf9ec6-85d6-4a8d-d487-08d75ec34d2b x-ms-traffictypediagnostic: AM0PR0702MB3586: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 020877E0CB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(396003)(346002)(366004)(39860400002)(199004)(189003)(66446008)(66066001)(7736002)(2906002)(71190400001)(105004)(71200400001)(186003)(52536014)(74316002)(3846002)(6116002)(33656002)(476003)(14444005)(256004)(19627405001)(86362001)(486006)(5660300002)(64756008)(14454004)(6246003)(606006)(25786009)(8676002)(81156014)(81166006)(229853002)(478600001)(6436002)(236005)(966005)(316002)(55016002)(7696005)(6506007)(53546011)(102836004)(6306002)(54896002)(8936002)(26005)(76116006)(66946007)(66556008)(66476007)(9686003)(99286004)(4326008); DIR:OUT; SFP:1102; SCL:1; SRVR:AM0PR0702MB3586; H:AM0PR0702MB3746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:0; MX:1; received-spf: None (protection.outlook.com: nokia-bell-labs.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: CB+0VlWVMRlOHF9YeMxD+dtFZOhvhFDHspG2d6xYRqvKjfvGEDpBtDEdG4w/dv+minuJfaZs7m6nxTKztX3Zf3gsSC8GSup0H0hT9e4rX40rUPKJ9/IfnoN42zCklqxzEzTzmN6CjpeFeqnWMGd+IYpQ7nn8Gqwx/kJTGYOFGxcRTQl0FxF7T34eCei29+gQtmN8kmZNEDK7K44D8LjQkmpKKnrIDZteqOFwA2sHrPFVdVoq4en03Yv/OQN1KBrWJmCL6T9c2DjJaM7Ud2PSQFUHxHv1YG5NxGyRQUuyOQY4aeDecA+DKRWJqrcAIJWcnq4GYVfViFmvo3fRiv18ysqp9lqZ+Y9jovwvaLl9sI6RdwkMFUw7fWFMpnzvTIxvA7aHhODdctXcPOf9TaeSc2IdHuFY1KKRvE2zrktuwlo7uTfnoQwjDfbBub3yB1euBvACAvLwUHR1RnEVO2MQbkfOxExArEevyy0MTwWib8g= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR0702MB3746FC1C2A9200D26C0B113E8F620AM0PR0702MB3746_" MIME-Version: 1.0 X-OriginatorOrg: nokia-bell-labs.com X-MS-Exchange-CrossTenant-Network-Message-Id: f0cf9ec6-85d6-4a8d-d487-08d75ec34d2b X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Nov 2019 12:02:00.1306 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: SFoGwN1g/bbnujmgYhGh6YQp/IYhuFGeAkL2BxhtGQWirHGqibanTX4LV8NCVQmrT8sLYmjAJGjh13Z8Ik60BzCPNIL1y/CK7caRFxwsfx4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0702MB3586 Archived-At: Subject: Re: [Rats] Data Attestation (was Re: 3 Use cases) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 12:02:06 -0000 --_000_AM0PR0702MB3746FC1C2A9200D26C0B113E8F620AM0PR0702MB3746_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Use case name: Data Attestation and Provenance Who will use it: End users (though in a hidden manner) Attesting Party: ? Relying Party: ? Attestation type: Passport or Background Check.... yes Claims used: Description: When data is received from a device, it is not only signed by that = device (cf: JWT) but also contains information about the state of the devic= e,. For example, the data structure might be: { data: { DATA, QUOTE }, hash(data), signature(hash(data) = } Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Michael Richardson Sent: Monday, 07 October 2019 14:39 To: Oliver, Ian (Nokia - FI/Espoo) Cc: rats@ietf.org Subject: Data Attestation (was Re: [Rats] 3 Use cases) Oliver, Ian (Nokia - FI/Espoo) wrote: > Data Attestation > A piece of data received from a trusted element may itself contain > information about the configuration of that device when that data was > received. This might be a single measurement or a combination of > measurements over time bounded by a session or transacition. > In this use case we continue the chain-of-trust up from the device > firmware/operating environment to the data. This enables that once a > data packet is received, it's integrity can be checked (cf: JWT) and > this information also be traced to the device that produced that > data. The data and device then can be attested together. This use case seems similar to the the geographic cases, but also to the FI= DO use cases, where one needs to know the state of the device that took the biometric reading in order to know if the biometric is useful. Can I ask you to fill in my template: Use case name: Who will use it: Attesting Party: Relying Party: Attestation type: Passport or Background Check Claims used: Description: -- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | network architect= [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ --_000_AM0PR0702MB3746FC1C2A9200D26C0B113E8F620AM0PR0702MB3746_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
   Use case name:=   Data Attestation and Provenance
   Who will use it:    End users (though in a hidd= en manner)
   Attesting Party:   ?
   Relying Party:    ?
   Attestation type:  Passport or Background Check.... yes    Claims used: 
   Description:

    &nb= sp;   When data is received from a device, it is not only signed = by that device (cf: JWT) but also contains information about the state of t= he device,. For example, the data structure might be:

    { &= nbsp;    data: {     DATA,  QUOTE }= ,   hash(data),  signature(hash(data)  }<= /div>

Ian

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237


From: Michael Richardson
Sent: Monday, 07 October 2019 14:39
To: Oliver, Ian (Nokia - FI/Espoo)
Cc: rats@ietf.org
Subject: Data Attestation (was Re: [Rats] 3 Use cases)


Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com> wrote= :
    > Data Attestation

    > A piece of data received from a trusted element may= itself contain
    > information about the configuration of that device = when that data was
    > received. This might be a single measurement or a c= ombination of
    > measurements over time bounded by a session or tran= sacition.

    > In this use case we continue the chain-of-trust up = from the device
    > firmware/operating environment to the data. This en= ables that once a
    > data packet is received, it's integrity can be chec= ked (cf: JWT) and
    > this information also be traced to the device that = produced that
    > data. The data and device then can be attested toge= ther.

This use case seems similar to the the geographic cases, but also to the FI= DO
use cases, where one needs to know the state of the device that took the biometric reading in order to know if the biometric is useful.

Can I ask you to fill in my template:

   Use case name: 
   Who will use it: 
   Attesting Party: 
   Relying Party: 
   Attestation type:  Passport or Background Check
   Claims used: 
   Description:

--
]            &n= bsp;  Never tell me the odds!       = ;          | ipv6 mesh network= s [
]   Michael Richardson, Sandelman Software Works   = ;     | network architect  [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |&nb= sp;  ruby on rails    [
       

--_000_AM0PR0702MB3746FC1C2A9200D26C0B113E8F620AM0PR0702MB3746_-- From nobody Fri Nov 1 05:08:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 880D9120118 for ; Fri, 1 Nov 2019 05:08:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.989 X-Spam-Level: X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wgV6lFOxQUne for ; Fri, 1 Nov 2019 05:08:24 -0700 (PDT) Received: from mail-lf1-x12e.google.com (mail-lf1-x12e.google.com [IPv6:2a00:1450:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 811C912012C for ; Fri, 1 Nov 2019 05:08:23 -0700 (PDT) Received: by mail-lf1-x12e.google.com with SMTP id b20so7077453lfp.4 for ; Fri, 01 Nov 2019 05:08:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=9D/DrWlsLbun9Ah5nJkAS51N1anKm8sWajNn2fgdFWQ=; b=cao37jU5yRqndOPKD7QEWZdbN/EWCC+xo63uAUDNsE3zaxO9wi/vKsKGatBbF1Vsb8 zfyGJjBvfleSF8edCPOPc1eHyCFwWlKwkNBQqYORa5Ey//ICKaLKLKxCH9x9PfVNgaNP ZIKfsYFbgtHJRB+J/49aBXxU7U+r5fzDOXDin4WrRehR+8DbyYmNFBDYWrUqBynnGL9z QB1Bze1F9wHUz0ZD9eRO9RS/9W4pX4xHRQF0Q8wVblitT+ImQdiQSorfGGQ5zRs1K1LT Iz5vM1wOv1UJdeHcdUVUFmpNe8MYrPWXTDwMrWpmukpp05qAzuj4SkJkOn2IbeNBTwqE wwbQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=9D/DrWlsLbun9Ah5nJkAS51N1anKm8sWajNn2fgdFWQ=; b=YVnBdx08NbaJOo6g+b7KfJ8fgPFmm0AviFoZSfJ9hSlrIBTgtGIoy/ek2GpHSBXewM Ofu5T2M+t1r8ikD3BiDjqPJhmdl95GkpuXit+yJUdMC9tF0gFpJd0SqpgciFj/auVdRF w3if+zrugM9+A22XObi5Xn/lvkavNtmE1jmed9Op/Y9jDH5BdPGC0k68xALy2AWoA81I mgXNrYmnCDSRHfm9cLpS7Pk/+Ep6PJFfzeKg6HaWF+0PKdV+yhsL72tP6PgrHcf43+Ub erKPu9gbiIUGQ3T8+G5Vp/IzWCA7WAgC7nyOaMIGtqCM41Rwlwcqa0LwtrlNzgWvB6nc 0DBA== X-Gm-Message-State: APjAAAUCy6VRGqxKFG5kmFEy2TIcbxia1F1aiEW8Fz1ARZUKgX9tg63C OtBEVTsUzolXarCfjNwDJfZWt/DAtpZ6e45TZ64PQA== X-Google-Smtp-Source: APXvYqxSZdmAlwftkQovkVVW0eyc+18d65k1xmMcfBpT068oJ2b7Dci6F6GDgxUlajPeqhjVgHxlKO8/kukQvc6ZmKQ= X-Received: by 2002:ac2:4ace:: with SMTP id m14mr1585973lfp.130.1572610098318; Fri, 01 Nov 2019 05:08:18 -0700 (PDT) MIME-Version: 1.0 From: H Y Date: Fri, 1 Nov 2019 21:08:06 +0900 Message-ID: To: rats@ietf.org Content-Type: multipart/mixed; boundary="00000000000070f8d7059647d2c1" Archived-At: Subject: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 12:08:27 -0000 --00000000000070f8d7059647d2c1 Content-Type: text/plain; charset="UTF-8" Hi all, I'm Yuhei Hayashi, network security researcher of NTT in Japan. I learned about the existence of RATS WG at IETF 105. I'm interested in the work of RATS WG and I'm trying to understand it. So, I'm firstly trying to understand which drafts contain the standards listed in the charter. I will attach the result of organizing it from my own point of view. I'm glad if you confirm that my understanding is correct, if possible. Thanks, Yuhei -- ---------------------------------- Yuuhei HAYASHI yuuhei.hayashi@gmail.com ---------------------------------- --00000000000070f8d7059647d2c1 Content-Type: application/pdf; name="RATS_drafts.pdf" Content-Disposition: attachment; filename="RATS_drafts.pdf" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_k2g39q2i0 JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFu ZyhqYS1KUCkgL1N0cnVjdFRyZWVSb290IDEyIDAgUi9NYXJrSW5mbzw8L01hcmtlZCB0cnVlPj4+ Pg0KZW5kb2JqDQoyIDAgb2JqDQo8PC9UeXBlL1BhZ2VzL0NvdW50IDEvS2lkc1sgMyAwIFJdID4+ DQplbmRvYmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwv RXh0R1N0YXRlPDwvR1M1IDUgMCBSL0dTNiA2IDAgUj4+L0ZvbnQ8PC9GMSA3IDAgUi9GMiA5IDAg Uj4+L1Byb2NTZXRbL1BERi9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsg MCAwIDk2MCA1NDBdIC9Db250ZW50cyA0IDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3Bh cmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMD4+DQplbmRvYmoNCjQg MCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTk2OD4+DQpzdHJlYW0NCnictVpb b9s2FH434P/AR7tAWN4vQFGgTS/osALd4qEPxR7cxE68JnZnu9i6X79DilSsWBJd5fQhQkx9kr5z +3hIiTz9QJ49e/r+/N0rwp4/Jy9fnZO/xyNGGGWMcSGYJd4wohUj28V49PEJWY9HT99eaHK9G484 ua7BzHAmdQO9fDIe/TYekdfvzwk5eBJPT2JUagtHwxwcHVy9hftxR602RApNjSTCwXlNlKSivqfw nipOpLJUSGKUo9ISwampEXA3ocI9LYejh9Phzvm66s6caapF8zrFFKBrhNWUPUBo66mv2XHuj+5h wlNcjVCaCtdEOKWovb8Hk0dPAc7cJeZwNP7QM0IZqiSx4HahCfC594wDhOPgNBERcIRLG77jhlO4 SoKhDJ4tHeWm+ezspYTo8VJC9HgpIXq8lBA9Xso82rzUFuVkYfJBj4UZ0W1hRnRbmBHdFmZEt4U1 j1PzIEe5ygPBoUIEkcf2VeeTffLYunS+sk4e25bOV7bJY8vS+coyeWxXfr58cP+OuFXZzR0PVZGy 2yjqjrIbbih6s1sIuKw/9gnRE/uE6Il9QvTEPiF6Yp95nKwBycLKB30WJkSPhQnRY2FC9FiYED0W Zh6n1m+KcsqDlN1tFiZEj4UZ0W1hRnRbmBHdFtY8flDHuWFB2dIM12phheizMCF6LEyIHgsTosfC zOPYQk7+iQ2BiQ0BI29hvufkL5LDKIWlXJK7Rlxh4HY8uhiP6umoRtXqzYN5TVQQFN9AMUFtRsnA pJ69QD9khGZXakd1hkbS9TQGbYSN0OzTQ2g9ldWo7NcGKk9nNSr7toHKU1qNyv5toIS3kDa5vQGU Vz4qbDVwaC2Hkfte6QBaDRxaG2Jo64n/AFoNZIYOxuqp8R6VBnI8qscmgT9AVQN11OITk8QdoKqB B0+sZOIAVQ00n5hK7R6VBho+Sf1jnQG53BpO9iEG7gCVBpqo7F/jmiakgQfkqio5IFcNVKhQ/g1+ 9T1jhqpmzI56ZvH01/n6mkwW67M/LqYHrXrsvbmSTBPW0qu/nEF5voH8F2S2DLkA7ToUqAAzQ45p Rbkis7vUy/NQv58mr7ZTNZkv99M/yeyX8ej1rL2Pl9icwEXgW+mpPeb0ESi9hT8yPVOTi8sN/Pt1 USCocAlqLqMUtDvt3evZGzJ1k99fBIazi+mZALJcP2C+n6+vpnIyDy6+gr8d/IhnZtv5Jfz+En+c GAH9KAPFQwMlcxQSUQqqK/tYtcCL9l1t58tArcTJIHOSoQXs4HRW4GKRuSi4sJPMarFfFvg4ZD5Q xVIMdY5HJmMk9AUdXGI673cFRpwhU3IqFuww/3COzMYzKjrL60mJzeNmgCM2SprYeT2u2Pnj5oBj VkaEZnhoxB4n+C1sbOwQ29l8Dkm9+nKzAQW//a9EDVmqNeeU8cGOQhZpzSGZfG/xT8/kpCwAyIKt paXGDvYSslxrJajvTO6iACDrtXaedibQqfUvkBXbcFjqDo2XQBZsI1hcI7Sz2d/MbxfbEiVk1TZa UDd4xhfIam2g/+hModOmfIEs2QZW52rwlC+QVdpAA2IHT/kCWaUttPe6M59PLnlkjbbQ4PvBHb5A 1mgLLb7ozJ/97jIs6242yzCdLdar6xI9ZNG2vqfiSr6SyGLtmKSyM3Kn1b9E1mwnqi22gR5Clmsn 4cLB9S+R5dpp2b2UPrX8JbJgOwcFNzheyHrtnI7buO1s/l3NS3yQFdszTsVw7yArtWemuzk7sdyR 5doLS93wckdWZy9l2BkcWO4KWZ7zfipn1B+zOb8NAVvdlSKmkAU67Me0M3qz2d7FJCoxQhZpblws +nZW79bLMOVvtlM9uZvvV7DY36zJ9IzLyfvN1SL0Abclwsg6LpWM235thMPHOAIGLz9NFmVPImu5 VSrKVbsnv+5K8qmQ5dwaFT89aOdTUgeF3X4bT2UXmX3YRfqyWJc4IUt6yn3hfMioh6RehYZgvp9D upvTsx17k7vK9laKP5btyGqvpA8vrTt893m+W12WXt8gK76CaArfxaiU7xpZ6ZWVVNsuNt/hUSVC 2Fve3of37kPdg6zimumwg9vB5m5z9e0WJKH0ilP/HAnvYFWWcP1zJHxozH6KhHeQOVHCNXZXbogw ltpjQh9Cz7LZh44lbltsStKtkaVbcUW57aIXVgyLZZhaFtvF+jLuqJQIYks4MGO+i2Apuwy2fFsR v2RuZ7Na74PDwlcC4VXKCn5sSrlmkCVdSx7epwz1F7Kea2nC+5QONqCgi1LCG+zXlw4uBEZatgrE NyjFq5KCGuwNFm1i/9Tupa/fPu++fS5Rwt5m8TZssg5NI/RNlrhcf0waIUt6WrkLqLYWRi92u6Dm i23Qg1VZA7C3XEwXsVMX8AZZxfMipp0VwgLeYgu94rFPbye8Wi+DIyU4chVailKALbbIMxVFvp1d 8ZMrbJFnPop8O5tTqtMii3xON1jIc6Q1s0XW/Phlu6P68S2hRZb+JG3cwNR9xG62CJxCX3gXynS9 CSugzfX3qlrDh5Nn6WPJF1s4Exuhm1Vsi+B/XU2wsa0sWYX9kWK1R9Fm1Q9tUVjkiURpHxrwdm/P t5fgvEXVTp7sOeTZxDAT3iE+kuH/551qPw0KZW5kc3RyZWFtDQplbmRvYmoNCjUgMCBvYmoNCjw8 L1R5cGUvRXh0R1N0YXRlL0JNL05vcm1hbC9jYSAxPj4NCmVuZG9iag0KNiAwIG9iag0KPDwvVHlw ZS9FeHRHU3RhdGUvQk0vTm9ybWFsL0NBIDE+Pg0KZW5kb2JqDQo3IDAgb2JqDQo8PC9UeXBlL0Zv bnQvU3VidHlwZS9UcnVlVHlwZS9OYW1lL0YxL0Jhc2VGb250L0FCQ0RFRStZdUdvdGhpYy1Cb2xk L0VuY29kaW5nL1dpbkFuc2lFbmNvZGluZy9Gb250RGVzY3JpcHRvciA4IDAgUi9GaXJzdENoYXIg MzIvTGFzdENoYXIgMTE2L1dpZHRocyAxOTcgMCBSPj4NCmVuZG9iag0KOCAwIG9iag0KPDwvVHlw ZS9Gb250RGVzY3JpcHRvci9Gb250TmFtZS9BQkNERUUrWXVHb3RoaWMtQm9sZC9GbGFncyAzMi9J dGFsaWNBbmdsZSAwL0FzY2VudCA4ODAvRGVzY2VudCAtMTIwL0NhcEhlaWdodCA4ODAvQXZnV2lk dGggOTY0L01heFdpZHRoIDIxOTEvRm9udFdlaWdodCA3MDAvWEhlaWdodCAyNTAvTGVhZGluZyAz MTUvU3RlbVYgOTYvRm9udEJCb3hbIC0xMDAwIC0xMjAgMTE5MSA4ODBdIC9Gb250RmlsZTIgMTk4 IDAgUj4+DQplbmRvYmoNCjkgMCBvYmoNCjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL05h bWUvRjIvQmFzZUZvbnQvQUJDREVFK1l1R290aGljLVJlZ3VsYXIvRW5jb2RpbmcvV2luQW5zaUVu Y29kaW5nL0ZvbnREZXNjcmlwdG9yIDEwIDAgUi9GaXJzdENoYXIgMzIvTGFzdENoYXIgMTIyL1dp ZHRocyAxOTkgMCBSPj4NCmVuZG9iag0KMTAgMCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0b3Iv Rm9udE5hbWUvQUJDREVFK1l1R290aGljLVJlZ3VsYXIvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9B c2NlbnQgODgwL0Rlc2NlbnQgLTEyMC9DYXBIZWlnaHQgODgwL0F2Z1dpZHRoIDk2My9NYXhXaWR0 aCAyMTYxL0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgMzE1L1N0ZW1WIDk2L0Zv bnRCQm94WyAtMTAwMCAtMTIwIDExNjEgODgwXSAvRm9udEZpbGUyIDIwMCAwIFI+Pg0KZW5kb2Jq DQoxMSAwIG9iag0KPDwvVGl0bGUo/v8AUABvAHcAZQByAFAAbwBpAG4AdAAgMNcw7DC8MPMwxjD8 MLcw5zDzKSAvQXV0aG9yKP7/Z5eI1V5zKSAvQ3JlYXRpb25EYXRlKEQ6MjAxOTExMDEyMDQ4MjUr MDknMDAnKSAvTW9kRGF0ZShEOjIwMTkxMTAxMjA0ODI1KzA5JzAwJykgL1Byb2R1Y2VyKP7/AE0A aQBjAHIAbwBzAG8AZgB0AK4AIABQAG8AdwBlAHIAUABvAGkAbgB0AK4AIAAyADAAMQA2KSAvQ3Jl YXRvcij+/wBNAGkAYwByAG8AcwBvAGYAdACuACAAUABvAHcAZQByAFAAbwBpAG4AdACuACAAMgAw ADEANikgPj4NCmVuZG9iag0KMTggMCBvYmoNCjw8L1R5cGUvT2JqU3RtL04gMTg0L0ZpcnN0IDE1 ODkvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAyODA5Pj4NCnN0cmVhbQ0KeJytW21v2zgS/r7A /gd+vDvgYI34DiwW6G3bu6JoUSQB9sPiPiiO0hh1rEBxgPZ+/T0jkrZ3l5Rod4Eisl5mOPPMM0OK o5IRjWhJaBKtEdS0otWCrBatE63ERStkY0WrhDQSV4SSrcA/5bzAbe0J94VReMQL23jRtsIaI6QV DjekE76RQnrhLYQajKCUUCSICLpaHJ2GTkGt1hhCkMT4EiYojCUVjnzfCtKKBxVkyAjlcXRGaOiz MAvGk5M4Qp9vcB36vMVzRrQN/ii4Qzyugnl8H9a2LMc+wlINsxW8NIBCuVYY+K2hzAANA3vYc+O1 0NBnDY4MD8tDn+f77D3LOYCBhwxjAzgtAGgbLSxAaoEpIJASTlh2jZxgnJTDkV2GP4ZR5vsA3bIc 9FkLXKHPwWkHfR7BctDngbxjSCHkACUBLHYZDgvLkCKUFi5LVor7iuUcoID/zuIIJY4h4kjheeMR I+izsB+qlUN0fYMjHkaslcf4niGHPEPR4GGvAD3s9Qw9cXAb/AAa0KUlB93hCCkPjDEiRx/gEcLb MIqOr0CnQQAINNGWIw7DtWv4FvjlgJmDkAeZwBmECPEnjGUaz3z1CJZmIaDYAlKCctMCQCKFuDFD QDSjWB+1TFTmHKQ0/KMWegwsIIBjDEuBvsYyn0A/49qJoPjhWRwE8WwycWSZa0gOy0YRksUSzCRO AmbyFH3JNoMeVjV8C3FRht2ClIZoiBg8IMTHGsdXEDMLthKMs266Bc2OpSTTgBMBSeQa9hRZhEc8 pwoYAa4Rh7JlccWcmLJIAr1JD6KuDA+hEW7JUg4/2C8mlgFVCGC5aXQM4xywIeSOc56zEFKeAwiX fEOcjxo/QBRG30+jI+t8CyQI0HjkBX6AAZLBhKRX7DIyz3NGE7NMT3kMKcPRQbJ5TjJkOPjCKYx0 9I7HYkY5kBtJD2ppvsKEaXgwwyxg8pBhWhEH0Uws4irDgzey4TrB1yQyhpB94KHhXy0TkR21/Jzm CLInyCk8Y3kMCxKSnaLG56y9ccCZ7MS+6S6PCx/ExACaYoOMBDGYqjwiTaM7rnqt5LsTGZEUxEFH 2FiWaa3YI4YHQeFaxrKafWCgARXXNWa04XNkJRQz2TgToB5jMH64gXOOGk75GlfXYBXzEY4Idrnl 8CATQHm2hznLKUvMa8U5wWKKjWTyWh6b84Prw08/rT6xRCOuVter66dut7r59tSvrvfjy3r/Zts/ rj59FnK6/140P//84w+TCIatE6GjyOwor9b7l25703/d/+312N3v/y5W738T7X/FQdlRkYqKPv1J C4vwNHiVlbOVBvz6b3G9Hp76YIO8wAZXtEFGOR7odvialZ6AiuZmlbRJyeusvCoJohbVIfDuzc1b cfXq5lowFvtud9eNd8/iZuzWX8RJfFR2lGYOG9kW3fLL2AQPLgAlGJUVTObeXGXRlCEavgiqqQT1 7oib/i5F/wxKzHcp2fT7+6DH/hXGuO9SMnb756DH/xXGUPNdWv4RtVBWi55l95S0vFieDhNpeLE8 HSgc2nCQRUKl2jKXB8UqJw8VJp8HuiSoLuAxZQt0taYUrmyJrdZyO26+PAzb/0Vl2Zp0tknZDK3W cuQzZbP0bHOyOVqtJRE6m6RqltAqEFoFQqtAaB0IrQOhdSC0LhJaVRBaXUpoVSS0voTQ2fpTrSmG q83Wn2ot+4du249RVbYInW1QNk+rtRzp3GZT9WxzsjlarSXSuc3mqJ6lsw501oHOOtDZBDqbQGcT 6GyKdNYVdNaX0lkX6WwuoHObrT7VmlK4stWnWsv+ef0w3Pe7zeeoLluGzjYqm6nVWo6UltlkPdcc mc3Tai2R0jKbp2aW0iZQ2gRKm0BpGyhtA6VtoLQtUtpUUNpcSmlTpLS9gNIyW4GqNaVwZStQtZav my7qydags63Jpmm1lhMuZzP1bHOyCVqtJXE5m6B2lss2cNkGLtvAZRe47AKXXeCyK3LZVnDZXspl W+TywmtkWNTHpVCcQmLaRYtzSl3tlsUv227zGEmgsgXNmTngXXHHwullOF1xq8KpWThdMQ6+dqvi 7TA+dmk7IluE/ex+hC/uR7iK/Qhf3I9Y8NwX9yN87T7Zu9395Ptm2IkPw12/jSBk5xA/u2Hly3Go 2LDyxaRYAqFIfO8rQegPsc/OC97Nuc1djpIBtsLv4p7Qkt/FbOPt7zrHn57jFKSyU1m9olj0VXYm q1ezH770u6gqO51xN2g2FqEYcj8pHIuc5HbSYnCi5RdEJxp6QZEPtTIWjpg6kUnJ6Kw/NLubfro1 3u273+V6dr7nXtoc0lS2pHEVyFIxa7gjNg9tMWW4y3duymfXKdwlnPW+WK24rVjhfbFoLXpPRUpy b7LO+9vuebOO/mdXWPWqYubr7HqhXs23bhff7HR2/j3foOwMVq/mcbh72cbujc5OC9wBnuVIyGAK +T41lcOxjceZQJoaDs1MAEscKq61qK1doR/mDp2fO6oVpYDl545qNSdzh87PHe3sawO1scaGxtvU vC+CVPF6QOUm4mJ82kvfEGLtTVUoMSlZnDXm8LayhPCncdgP6yFOGzo/bcj5CVrO2FEzIcty0hxa hgVQy01DkrWvSGN/34/9bp0KQ37yqFaXqJ+vwdVqNrt9P3ZrXsTHrl6+Gp9rl8mX4mo1j8dFhsmX Yzn7QkmxBUaxB0axCUaxC0aqHFJVveZ8uYuFzOTL/IKNaobRFa+9Ec1k8GXMLlcaVRurp5fb55fb CES+olfrSvTJV/RqNaf0yVd0tRCaSJ/YcSJdXnOqmlCp8rS5FKJya2qposvIdRlfacq9KtK1q99X z8/9eFIu8qVcz6+By10G0jVrYF1OHE3zaJbbhKRrF3inez4mX8f1/AJPlxcIumYBp8sLuEUAykw0 bSUAha0fk5+MDM1iUe50kWkqsDDlSr6EhSm/iVa3TjZHLOL3LPkZ9NyOjs3PoNVqTkqgzc+g830d io0dip0dMmXO1vRvqNzAWY7TxYva+HFAzKrEqGRx1hhbO/3/cTfE5hcBdn5ZW959J1uzrC131cgu zCz20o2maFl+0Noq+vt3AptfONj5OmrLnLQ1ddSW6+ihU1QCr/x95BJ45URwtdy76cfHzW7YDp+/ iW53J16N64fNvscDY3zBsPkllJtnoyuz0dWwsdwXI7fARleu49V9qMPenM2v+ua7UFRuQ1FNH4rK jahl78ukqO5FdX8mQX55Nt+SonJPimqaUlTuSi3CUO5LUXVjKgNDfpE235SicleKatpSVO5LLcNQ TMOl4hLb1JGvKWDJ4rwzSeO/hrtvOaVx+zHuPoZ9lNjFSBtS6TUmzeVp8kl1NLmcn/6TAd3tts8a EGVPttESF7abu6xI2r0qTBAnEjdj318Nw351NWz7D92TiBv4n7qx3013RewNTAuKpO9w9yMo8L7/ dvivBm+hazfs+9VH/vNmd3c8SWy5BjlX/+m7u34Mv1km/X632252/fVDxxbyhVc7aJgWmPEc71/3 HX5MZ78O45fbYfiyej2sXx5h03Tl+aHv92zkfvWhW4/DyfkvD/h7cv5602EaObkQMD0+G8bBY5/H 7nH1dvMZeRV9/fjy+Pyb4P/2cgzQAftEm3gWv0mOJDrzQ+WzPwQ9+1O7sz9kOvtrkfiVQ2z5x6Z3 agKXGpCpXZYaR7XNgdKmdNpHrd0hS7tUpS2R9DKf3mnT+1zp/SEteNPaLS050uSbZp9j+f3xh/8D PGw5bg0KZW5kc3RyZWFtDQplbmRvYmoNCjE5NyAwIG9iag0KWyAyODUgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDY4NiAwIDAg NzcyIDY0OCA2MzUgNzY0IDAgMzIyIDAgMCAwIDAgMCAwIDAgMCA2OTkgNjU5IDY1OCAwIDAgOTE0 IDAgMCAwIDAgMCAwIDAgMCAwIDU4MiAwIDU1MiA2MTQgNTg4IDM3NiAwIDAgMCAwIDU3MCAwIDAg NjE4IDU5MyA2MTMgMCAzOTIgNTMzIDM4MF0gDQplbmRvYmoNCjE5OCAwIG9iag0KPDwvRmlsdGVy L0ZsYXRlRGVjb2RlL0xlbmd0aCAxNTM0MTcvTGVuZ3RoMSA0NDY1MzY+Pg0Kc3RyZWFtDQp4nOyd CXyU1dn279knC2EpuEuNK2oVlUFBUAQJoGD2ZJLZkkxmz2yZmcySmSSiRUUFRRHBfZe64FJbVBS1 WsV9RdzautSqrVK01qpV+f5haSMFSr/3bXm15/J3cZ9zn+V5znPOuRdjUDQiMoI/9FI9ZXJdxZ7z 9xkkxmc9aH87fWrFNDmwpU70vjepj5xeXVVXsnKX8aL3i2j2jU6va5iSObziaDHMjYum4uyqutFH zeyYO5HGV+jf2h5piy+/6K6LRZN9SSRubk+n9rn9izkjRKuNixgu8MX9kYsPCF4nmvffEBl6ib8t GReT7Cm6paWML/WHc7660E+PE61ZL/LaNQFvm8c0/OA7md9B+9EBFKUL2yqoL6S+fyCSys6Lf05Z O0406UvCsfY295JzV4j27aUiK6+LtGXj3q5hSfrfTf99It5U2/LdrXeK8ZmvqPuibRFvPL+sVHRX zxIxXhGPJVPrj5aA6G78sL9/POGNr/AvOVk0X2ZFTJ+nef7gUrOf992t//lpnq8Z+uW11Cf2P0/6 v63md76W1cOfahk88c8y2Cz9ePqSq3r75StPN7z2uXx9etGZxUn6FolWNoJxpuJvxuulaC3t5UVn bphpAOxf9WtaamQpX6sfWhkio+Vcvmp46CUbNHrTcu19YhA+nfFQphyzUQKXzsaAEtOmud4U7fpD Hvt6PcVd+usnN++zj/DPx2eYitcX68X0vtazj1au3DBpq/HI/i8hZlby9Oa30c6Ab8nzujMlKTsJ hh7WvwnGw2SlYTQcLiuNe4tvwzteKCsH9jdd8e36hjkWM2aazDJMlUl/61f993m3B/1Sad0gQ+LW fwDvErdOK2P+od95csPfyp/IDfqV9H1vo063H/WpMktX/I/j/tvB9/Tt7Hf4LsDkkprNZf0Galp3 3ttseIeDB5QD8JJNrN+o05y+Rf/arczRBafAGQN0P9zB5zcNeHYjdMHlW+m3YIvnOfrlpnfcc1P9 lh15poKCgsL3BeYd6qNz/dtfROG/BmbRdA4oXwPXwS9h40adLvnt/rJuK3M8Da+Dlw3oN+fbfbR7 b5IH0O89pBG2/eNc2uMGlA+F2s06ZP+4g2HH//eCFRQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBS+4zCL5Hf2OygoKCgofDdhFu3r/5555TrzTvp/EfPcSf+813cH rGfCZjmQ2+q3Zd+t1b/vYJ2zdvY7KCgoKCgoKHx3Yd7IT8yiX70T3+GTgeUBfHHL9q3VB4x7ccu5 dvD5azbJ1QO41Wds8Tz6rfd9u75xLoW/wyy6pp39Dt8F8J1e/Xt5A5ftxNfZ3r1cvWX71uoDxq3+ H97LNQO4I/dyzRb3cs3md1ZQUFD4b4dhpYzZ2e/wfYR2BnxMkrqIfLmz3sEwYf19m8vGYqk2mKVa /6FUG0vlzA3vOFuqB/Y3ub9d3zBHH+N2l90Nw+Vv/w7dVCbv7cjz9bNl7AY5S5r0D8NzpEn7riT/ oV/fxn4bys/KWP1V/f3Xf9Bf1xmpDxOj9kOZvSPP/G+C/i4Vy+wITEdqzNtqMzwpc/+T76KgoKDw fx3b+jnrwJ+1bqv/1sZtr5+CgoLCvxvYntGb5UBuq9+WfbdW395ztvWsLcdu6x22fM72nqmgoPDd grJHCgoK/yq4d12b5UBuq9+WfbdW395ztvWsLcdu6x22fM72nqmgoPDvh7IhCgoK/yq4d7HNciC3 1W/Lvlurb+8523rWlmO39Q5bPmd7z1RQUPjfh7IZCjsL7N347bTV/CffRUFB4V+HXuR//Pv73PVJ A3+v4tttWvXfJCgoKCgoKCgoKCh8D2Hewd85VvjXYBb190eY1d8f8W+F+vsjdgx8p9e23abs338b zGLw7ux3UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQ UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQ UFD4vsAs0jWwvJn/rK/C38F3ie3sd1BQUFD4vgHb6t5O2xX/yXdRUFBQUFBQUFBQUFBQUFBQUFBQ UFBQUFBQUFBQUFBQUFBQUFBQUFBQ+GfQjtnZb6CgoKCgoLDD0EED3IuSRiR0H7JYJByQMmpX0TJU vtnc+ZfyjWZjSTu7rL+kXSgy8/0yDeXq00Xq/lCm0Yr4j4ahMg1zB2+F95Rp9BuHhcxlGp4WOgQe VaYxbtJWlGlMm4p1ZRrzpmJbmaZoU5HJijcVk2Wakk3FQpmmdFNxTplm0Kbi/DJN2abixfzRJHKE vC9VyywzpPo9y1FSc4qlSmp+XdUgtY9bZkrtby17SV2NZao0XL73u9JotIyTxoBlV2k6wXKyNNlG TpWmpZZTxOGxjBFHdPJj4nqiqkZau8Yuk9aFliHSFrAMk7b5lrHS9kltrXirLNPF+7ZlN/GlyvcT 3wLLIeLftapOAnMsk6VDb6mVjnst+0okYxkq0T1G7iKxfS27SGfUcoAkDp04SpKHlPskte/IoyX9 RHmPZBdYKiQ3sXyO5I63HCi5GZbdJXeSZT/JVVtqJNdoOVJyTsvBknOVnyE5b/mZkptnGSy5+Zbj JHde+VzpPsFSLt2zLZMk/6DlCCmsLD9feoumPyi9ky1TpC9hOVT67i9fIqcaLAfJ7I8so+S03cbO ltNyx+Tkx1bLeDljWG2dnOGw1MvcIZYRMneRZX85+/Py2+UcjaVEzhlv2VvOfdEyTeaZLUfLeT+f eJicP658hZz/dflKWXSGpU4WvWM5QS5uLJ8nF6+37CmLJ4yMymKXpVEW/7H8a1n8Vfk3smTUviKX 37XvIFk/ZJ8DtVPWHvPkhsPZ86mluf9Vssxp4QgMqxcLJ8xi0AhvK5YfwcNhAIbgWfAC+DN4H3wI PgZfFxn7Q3g8dGpkbDsyCm+AS+Ev4Wvw1/BTkaM5pEcPhyfDBXARXAKfFTmmTSPHdMAuyvMgzzjm bfg+ZOwxX4uM4+XHjYbchHEnQAdsg1dDrsS4L0XG7wr3gDF4Hbxb5Fj6Hct7HZuEc+AjkC9x7Msa Ofb3yD+JTOB0T2DchL0gX21CBGbgmRqZwPtMYK4JP4cPw6fhOsi4iYPhgRD9xBdEjhsKR8IjYSX0 wEvgg/Ap+JLI8XyH4ydp5PhWpA/ynY/noh9/NuTuH883m2SFCcj3mMR7TFoG74CPwzXwDZETxkNu 4gkXikzGLExm3skzYBVkLybfBR+Av4NrIe87BZMwhbVO4b2mMG7Ko/Bl+CuREzkDJx4KT4T0P5E1 TsVuTMUeTOW7TuXbTOXbTK2DdpiG3ZC9nPpTuBKyvgrGVGA4Kg6AzFVBn4rLIXtRQZ+KdyHffdpg jUybjPRC9nDaMo1M51nTOVPTeb/pvPd09n3GLpBvOmMq5JvO4ByedDt8D7LnJ2MHTz4YcjZnckhm ToC98BfwCfhCvz0VmcUaZu0D6TOLMzDrefiWyCl8k1P4xpXY7EpTiVQOR47USGU5uv2Q7G/lqGKp HKuXygnUJxmlcjpyJvpTtFJZg2xgjEMnlW70AdiJLklbDtmLPA05B/1ZjF2AXEj/S01SeR1t3JXK m6nzDSs5Y5X3MM+DPOtR2p6g79PUX6Lvr8xSyToq/wA/Yp4/0/5Xs1SZi6VqhFaqdtdI1V6QPaw6 XCdVY0qkintSNQXdNOozR0hVO+UgDKOPouNOVHUxfrZBqs4qlapFyMv1UnUz+luZ807kz5D3IFcw 3yr6rGH8a4z9jUmq1tL/z9Q/p529qPrKKNV6nVQXlUj1LkVSXa6X6oNMUn0EzuwojVSPhZzbavao +gT6VRikehblSmSDVqqbaee+Vrcg+ZbVXnTYoOow5TjlFPP1UD+V+umMxzZVc2+q5/GsxbRdwTw3 Ub+F9tt4l+WU72Hc/dS5g9W/oIztqn6c+lP0fZE5XkH3BvIts1R/xDxfUMc914heaow6qSmBQ6gP g8NLpIZzUbMfPEgjNTjdmh8hsUs13PmaMVqpOcYgNZPKpKYKfS1sQG9F2pCsrYa11biRnmKp4ZzU JI1Sk0fHma05FZ7Gc+fyzPnMswjJ3am5Cnk9fZYisXU1t5ul5l7kfdR/Qf9V9MWO1jyPfAX5uklq 3uVdPmDMh8h1POtrjdSKWWqLkdiA2qEmqd0byZ2u3Z8yNr/2CJ3UjqWMMaidTv0kvdRiT2rrkTb0 7bRzfmo5P7Wcn1rOeG0Gsie1fehPQ3cmPJfyAvpfQtuVlK9l/E/gbdTvKpbaB9E9bJBa7mftU5Sf ZcxL1F8fLLUfoltXJLV/RX5jkDqDTuqK4WCt1P2AgGhEqdTtR/kgo9SN1kvdWHTjSqQOw1NXi97K GBe6Vo3UYQfrOEN1QWS4SOoy9O9Bfxq6M+F89BdSxxfVLabOt667Esm9rONe1t1E2608+06edS/l +9E9yPyrkE8gX4Cvov8VfHM3qeMO1BOj1ZtLpH4PjdTvrZf6/dEdWCT1nI/6MbSNQz/BIPVTtFI/ jfZZ6LAh9ZyTehdtnI167F+9j3KQfnFkkn55+vdBzn39WcVSfxH6y+h3JfXrTFLPfa2/Ay4fJPWP 0v9p2jkL9W+ie5cyZ6H+Q/p+TP0z9P3v+pVBGvSwVC8Nw7XSgP9vOEQjDYfDI6lzXxt434YJOmk4 ATkVeRJyFqyiHV/Q0Ii0MZ7v3YB9acCnNeSLpOEM5p1PfQFjLoaXwWup32iSBuxKA7auAf/UgK9v eJjx+LaGJ2l/Bvk8fbEzDa8xx9vM/wE6zkUDfqnhY/gZ7V9rpRGf12jSSeMggzQSWzTuQnlPJHa+ cZRGGollGkfTb4xRGicgJ8ET0U+DJ9GGDW88hTF11PFpjZybxla9NLKGxgBzEkc0dtKWYlyWMr6s kTva+GP6nI3uPMoLaV8CL2eea6hfT9vNlO+AP0ePX2rE7zU+RH9iosZVRdL4InJNsTS+wzOw540f 0W8d/T9DfgHxe43rDWI1GcVKjGEdqhXrCI1Yd6O8h06sPywR64/0Yh2D7hiIPbUeh34KsoK+xFjW WYxtRrZA4iurxyTWCGO4s1b8nTVH/170s6mfhTwHXkiZCN/KeqyXmcV6I31uoU78YcXnWvFRVvy4 lXtgxZ5aiXus+Ckr+2bF/li5D9Y34DvUfwfZN+tHkFjC+mmpNGn10mQ2SNMIkojdIXvVxB1p4o40 HaiRJuxp02FwtE6aLMjx6I5Dsm9N2KKmKvT16KxI7koT62rirjT5ae9AErc1xSGxUxOxU1OW9gKy l/7EWE3Ef01nGqXpPPTc+6ZFjLuMOjFr008os84m7lDT3TyLPWt6CPkY/bBTTU+hf65Ymt6g/2/R sbamPyDXUv8L5S/00kwM1cyZbC6iTHzTPAy5m0GaiWma8YXNB5VKM3FE83FaaeYcNuOXmytN0mxF 5zRKM7FQs98szQnqvHszd755Nn3Opn4B9YuoEzM3XwqxVc1XwmvR3UjbLfS5E4nPayaGaOb9m7lb zQ+jI85rXoWO2LX5Ofphs5rxec2cv+bfM34t9Y8hsXbzZ9Sxvc3rtWLTacRGwmgrpcwZtO1KfQ/k SIgNtuEDbeyZjT2zjaaMvbBNpIytsE01iA3fbquG2DYb/s/G/bLh123YZBt+3YZft3EWbd1IzqLt x5TPgedD1mvDLtuW6MR2Bf25W7YbIefRxh7ZiANtnEXbvTznIfoS09lYp20VZc6j7VlIjG8jnrYR L9vepPwOEltowxbasCU2zqWN+MX2JeTO2cnX7WZYAneBnFE7Z9SOn7SXUyemtbNeOz7fTkxjPwpy Tu3kJHbiSju5kJ2124l77RVwJuVqrdjxn3abQez4TzvxoZ2zasd/2om/7F3UsS12bIu9MELsFxaL nX21X8OYpbTdUiZ2bIj9AbPYsZH2p9C/wJwvM9+v4G8pv08/zqJ9LXP+CRKP2bHvdmykQ6MXh8ks jqE6cbAmB3Gig/1z7AuJbR2jjOI4gjJ75xhXJI4KJHmE42QkttGBjXewf45mytw5Rxvzcd8c7J0j hsQ2OnLoyJUcxGKOc+F59CWXcXBGHVfSdoNJHHfAe+nLuXRgBx3EYQ7W4yAXczwHidMd5DaOVyH5 iIP9cpADON5nzEcGcXyKZJ8c7BPppjiNGnGWIAchh2jFOdwkTvbJ+UPqrM2JPXGSFziJh534Xif7 5CT2dGJPnJMgcbFzGv1OhuQVzmqdOFmnE5vpJE5ztlDHtjiJd5ys1RmD7JeTvMeZo8x5dXI3nazb iS9wcmadF1DHfjq5o07uqJP1O4l/nJxdJzmkk/PrvJk6dsaJPXWSozmXM+Y+dNhSJ9/EyTdxPonu OfgyJM92El843ywSJ77Cybl1fqwX5+fouKfOb7Ti0mrExfdwlVAeisSXu3bTiYvv4eJ7uDi3rlGQ b+E6DD2xuGss8jgkOYKLeM9FvOfCJ7o4sy6+h6saybl12ZHsu6uN/uSqrhA6bKwrMVhcp6M/k/LZ SHy96yLKrN+F/3ARm7iugqzddR1jbmI8OawLH+L6GfX7eSY+0cWddRFPuZ6g/IxZXK8axPUmfckT XZxrF+fatQ7+CX7GuK/M0mIskZYfGKVlT720lFM/lLKF8rEmaZmqkRbysxZ8YMssrbSwjhb8e0uj Tlrs1FvpE6RvjDEZdIUiacEntJyHbhH92LuWy+h3FWTPWm4slpafUl4OuYctDyMfg09CbGkLe9Ty BmXirJbf0v4+74ZNaeEOtnxJ23oRHimtxXCQTlqHlUjrD5HE3K3YzVZyh1bOZ+sYSCzbeiwkN2qd Rju2o7WeMnlRqxN9C/V26DdKK3evFR/Xiv1s5Sy2ksO1kl+2LkB/EWMuQcf5a+X8tV5jllZyhtYV 6MmLWx9h7mfQkwO3vkj/V3gnvnfre+g4X63rBkmb6KSNM9VWBEtLpG136iP10obNbztEK21HIC3o 8NFtE5GTkVOLpQ170cY9amuijxO9G/pp64BR2okN2zgzbZyZtnnI85lzEbyMOu/adh0kRmwjRmwj Rmy7m3n47m3YjbYHmetR5lhNGf/V9hZt7zL2Q8b8Ed0n8FPq2L42Yls3/stNfOjGf7mHGMW9R5G4 sQvug6kfTh277Sa+dRM/uYmf3MTkbnyyeyaspr0JvQ0dfstNfOsmvnVzB9wRdORubuyBG3vgzpnE Te7jnkv7vFJxX4q8Aj1xhZs8ws2dd3P23Zx9N/m0+x7mZh/cjyCfYuxqs7ixd+7foyNGd3+M/iud tJNLtBMDtg/RSDu5T/sucDfK+KR2Yor2g/TSzhlq5wy144vaseHt2Lj2Ccjj4WTGT6N+kknaayk3 oeM+t3sZ10GdNbSTU7d3UyZ/aycvaid/a8eGt8+nfAFyIXIxuiuGSjt70n4X/VYgyanbyePaH6Ed n9vO3W1/jTLraMfPtnOe2j8wSPsnZvEYRTycI88gJHGRZ5hWPLvAvaiPhMTrHvJQz/7oRkH8q4d4 wmOhzH3wEC95iG09xOueSvQ1OvGwNx4bkjvhIc/z+CF5nocY0JOkD/viIYby5JHkpx7iPw/xnwd7 7eGue7BVHtbluZzxV1O+ljL+1kPs7iGO8tyDbgX9iC08j0Bss+dxg3ieo/9L1MlPPMQWHtbreYd+ xBQezqHnj4z/FOKrPF/rxavXiNesFS9xvPcHlNlDL3voxXZ58VNefLD3YJ14ybm8R0JLiXixx97p 8BTq2ABvvUG83CUvsZOXvNDLXfJig73Eud4U5QwkfvCyTu9s5mUPveyhl/zWez7jWav3YuSlkPzW y1q9NzPnnUjsmvc+5EPU2UcvsZP3GXT4Y+9LEPvmxQd5f4OOffVy37ys07uO+qfIL2jHB/m00KgX X6lOfEMN4ttrhPjGUB9PfZJJfDMos3e+GmgtE5+/SHzcH18XbcTnPnyJj5zcdw5l3tm3CD32wIf/ 8GGHfdwl383wVnTkVr67kSvgSqP4HqX+FG3YNB/v7HsZvsrzfkOdGMKHH/HhR3zYNh8xn+8T+v+l WPw6ET/xut+kFT+xhH8QkpjdT9zn39Mgfs6k/wCd+A9Bh432j0HHefRzHv2TkcR5/graZqEnL/ET O/gdzEts6w+XiD+PjrX5f4zE5vnnQvIs/3z6X2QWPz7Gz9r8rM3/E3gbY7HR/geN4l9F2zPINSbx v8UYfIufnMpP3uEnF/avLRI/397/jUYCxHiBISIBzleAHDiwt1YCxKuBg4wSGG2QADYuMKFEAjPQ 4xMD+MRAHdIK8YkBcsQAdyjAHQoQmwaizJdiHnLEAL4lQJwTOAP9WXAeZXKnALF5YDFzE98Fruc5 txZJgLwj8DBchf5ZnvcG/Tg3gXcgviXwe7ME/kyZXClIrB3UDZEgMWkQ3xIs10rwAMrEKUFi7CD+ JTgGPe8exD4HiduCxG1B7ECQGDV4EiROCbKOoBVJ4hXERgeJsYMBowTj1DMlEuS9g/PQL4AXwcXU sc/Bq+D19L25/0dq9CUWCy5HR4waXImeeCxInBok/ws+AZ/mncnbg9yHIPFY8G2IjQu+h/4jxnzM HF9QJyYLfm2UUP8P5fD5oVLI3Q8N1UtoV+TuWgntbZLQKJ2EDqd+RP8P7ookhL0OTUXPmkLc+VA9 xF6H7NRb+n92R5l4NMT9D4VgJ+3kDSHufYgzFuL+hM6AnLEQOVSINYfOhws3/tQudKlZQtcjb2Lc Mvr/lDbypxC2PEQsFiIWCxGLhbABIe5S6Dnki/R7zSCht6lz/kLsYQgfFeL8hdbRRowTIsbpIP7s MGilowgOps6eduCjOsjtO/ajTMzQcSjET3XgpzrGGqWDO9TB/emYhp697JgFyRU7atE3Ill7B2vv IO7paDFLR5B5o7QlkBnm7SmSjrnUiSE6iHc6iLc7yBM7roFLB0kHdq1jhUE6HuZZT9KfnKnjZfga 8/6Gvm9B7FkHd6oD29BBDtzxMfU/QfL5Dvayg9gtTE4fxoaHseHhQSYJs4dh7EOY9YXxwWHWFz6Q th9RZj/D2IjwseiO10uYHCpMDhWuRY99CHNOw83M4UYSE4XZxzD+KkxuEcZnhfFZ4Sz9eyjPNkv4 XCR5RfiCYgmTE4avpn4T894O7zZKGN8Uxv+GH0c+BZ9lDHYvTPwc5myG3xskYc5jhLsW0SOJQyPF WomUUSefj7CWCOcxMpI68WgEHxQ50iAR7lxkgl4i2LgI8XTEis6lk0g7OvKhSBg9exFJIfGxkQLy VOr41wi+J3Iu5QVmiXDPIpy3yDIksUOE2CHCvkTIdyIPQGKgyCPMSewfeQa5Gt0rjCevjZDXRsj9 Ipy1yNoyiYpIlH2ImvQSJRaKjoC8f5S9iLIX0b2LJUq+Fz2Uds5YlHwvSnwXHUedvDw6RSfRGSaJ EjtEG7UStaPHn0bZhyg2LxpFJiB7ECVmiPbQ7zQk9ynKPkTPgxdSxu5FF1MmXo3in6LcqSh5XfQm yrcyL74p+nPKKyg/YJToY2aJEmdHibOjr0JsRxSfFP0DzydejX4K/4KefYqSr8c0GomxV6QnEuPM xUqpD0b+QCex3dDtQZ14KbYvEnsZO1gvsdGQ2C82Dj2xXwxbEmPvYhWwCrLmmLVEYtiPmA8Sw8bI aWOcuxh7GMOOxLAjsQLPOZW5zkDih2PE5rFFlC+hjVwiRuwQu9YgsZsoY0NixLMx4tkYsVKMGD1G jB4jRo/9kj7ESLFXqHPfYr9Gh/2I4Ydj3LXYWurcsxh5UuwL+JVW4pzRODYkjg2JEyfGsZnxoXBX 9Kw5Ti4bJ5eN74fEnsS5b3FixDh7HWev48dAcpH4RCT7HT+R8nSDxLGn8RrI/Ys7IflTnDgxTgwV 5wzHu5Dct/hsdHOQxPBx4qY4sW98IeOxK3HuXhw/Hb/ZKHHsZny5XuLkrHH8QvxZJPsbx1bGX6GO z4tjX+KsN87ZjWNT4qwx/rVIp84onSUa6WRtncPh7pSJgTuJgTv3oUws2EmO3nmYXjo5u53sZyfr 6WQvOyu00nmSTjrx3Z3kWJ0N1MkLOx2UyU86WyF2pdNjkE7uZ2cOngqJPTqJeTvPpkxM2HkeZG2d xPWdSyBnuJMYq5M8pfMWuIzx96DDB3Y+jMQfdBITdj5D23PwBdpfpf4GZeKrzneZ40NILNj5Ofwr JB5MGHWSYB8TxCUJ7muC+5rgvibYywR7mcB2JvaHh9CPfUywjwn2McG6E9ifxASzJCpoI+ZPVDJf LboG6rYiSfipc2cT3NlEJ+QMJzLo8iZJ/JgysVaCe5vAByYugNzZBPuYuAqy1sSN6G4xSgKfnyDH THB+E5zdxIN6STxK2+OU8YEJ1pxgzQli4cRq2oiDE6w5gT9MYF8TxGIJYuHEn+BfTJLEVySxUUns bLIYyfqTw5DEZEni/STxZHJ/6gdpJYk/TGJvk9jb5Hjq+MMkcX8Sf5HEXySxUUli/iRxWdJnlCQx WZJ8P5mh/6mMO506/i/JWU3iI5IXor8MiQ9Mssbk9fRZyvhbKZPPJH+GXA7vYRy2N4ntTf4SuYr3 fgFJzJx8FWKfkuQ0SXKaJDlN8iPIGU6yv8m/oCOnSekg+VyK+5lib1PsaaocSf6WGlUmKe5hahJl 7mAK/55iD1OnwBp0DUj8YAo/mHJT9xkkFTFKCrub6oWsLUWulprDM4hjUufpJHUxZG2pK+hLrJla RhvrSd3D+PuRD0Di5RR7lnqW8S9C1pPC/qTISVO/hm/D3zF+LWOxuanPqH8J8fGYAOnS6aSrVCtd 7FcXuWnXHui4m10jTdJ1kEG6sLFdRxdLF2vqmlYqXfW0sY6u5iLp8jA2SHtsiHTNpn0O4+eim8/Y JdTxFV3XUCfW7LqduZZTvp+5nqD+FOUX4BrGvM5c76HjXHVhO7rWGqUL29H1FeVvjJI2QWxHmndM j4Dkkek9yyR9GDriyPRROknj79InlEoau5fmHKUb6EMslcZOpIkj08SRaQ8k+UmHmY+7k+bbp/EB 6W7GnmqWNLY/zZlK4+/SxMzpJYMljc1P34qeO5P+Of347mm+e5q4Mc05Sq9iLu5Jmvwr/TJ1zlL6 dSS2P/2OQdK/px/5V5q8Mc33T38GsRdp7EX6G5EM9p+wTjJGo2TKkMPgcHTYjAz5QQbbn+H+ZDhj mVGUD0Na6DsReQJ68oIMNjJzMvIUJGvPcIcyNugqlkwISc6cSSBzjC/oJYOtyLDWzAIk9jCDn8tw fzLcnwz2PoNfz/yEvrcYJIOvy+DrMtiKzArGkh9kHoPYiszT8Hn6rUauga8yJ2cu8zbjuEOZD5HY iAzxcob1ZrETWQOyCMmZyw6lzFqzxDJZbGN2H51kD0D/I8i+ZrGNWQvt+Lgs+WeWPCiLrchORzeL Mnl1lrw660BHDpRth/j4LGvOYiOzCcrscxYfnyVWy3LPsvi7LPlCFr+QPZfnXUjfi6nzDbKXU74a eS31G2m7BXmbXrLcuey9Bsk+hPylSbLYx+xzRsni47PkeVl8XvZ3SHKELOc3+0f4CfXPaP8Cie3I GTWSIyfKsce5IVrJsbe5kcgDiiRHzpdjnbkJBsmxn7mp6E+CxDA5fHiuDj37mWuhD74uhx/I4Qdy xNA51pjLQHLWHPlQDr+XO5v2+Uj2N3chOnK/3KXoWFvuBuYiLs3dQRmfnrub9vvRPUL9MaPk8Os5 9jT3Ev2xI7nX4K/Q4+9yH7COdbSxnzn2k88q3eRA3eR83SaTdGMXu9nP7t300j1SJ90HUcevdx9m kG7W132MWbqn0G8W7fjx7mbaHOhbqHspk4d3B9Gzrm7ObHeKMoemmzil+1SjdJOHd59N+Xzm4bx2 X0udc9qN/+5eRp2z2v0z6vfQ92HmfBz5PHrOZzf5Qfdv4LuM/SM67mI3d7H7c96T+DPP2cxzD/Ps Ux4flsfe5DmfeeKVPPYmT6ydZ7/yxGH5A0olT46eH0+ZHD1Pjp7H7ucr9JKfWSJ5crc8cUke+5gn b8iHzZJnj/Lcv3wfkvuX5wzm8dV5bH1+nkHyCwdJnpg6j73Js578bYy9iznvRT6IJN/Jr2J+9ieP rclja/LE1fk3KZMz5MkZ8h9RXgc/4XnYzjz2pSB6KbCmAneuUEJ5qE4K2JYCd67AmgrsU4E1FQ5A HqKVArlq4Ug4hjFH05+1FSZRngIrIHamQM5aqBomBWLKAntWIK4shOlLHlHAVxeIwQp80AJ3rYBP K7DWAmstsNYCeWuBnKJALFZYiOTuFYhRClcw/jqIryjciu523od8ooDfLuC3C/jtwiPIx9A/zdz4 jsIa+AbtxCUF8tkC/qPwB8j9K5BjFD6lH2e18CVtfIsezmuPtkh6iE96Bg+WHuxND7FnzyHoxiLx 3z0TS6VnplF6iDV7OKM9zQbpaUN66RtCR0LWE6eM8+whZ+1h0h72tGc2fYije86C51Am3uzh/vXg S3oWoVtikp5rkDfAm4ZKz/2M/QVzP2GWntXINxjzJs99nzLv3/Mx/cgTerAfvfiIXuKrXrNOerEd vcSUvexh755m6SUH7yX36z0SORYSU/USU/USO/eeaJBecvHeU2A1dXxDbz1tTdAJ8Ym9XiR3rjfC 3Ena2b9ectteLkMva+o9A3lusfRiQ3ov0UsfcWof8XnfsQbpwxb3Tac8q0j6mpB26i2w3Sx9EY30 xSHz9RGj9pFX9p1GfQ7yHKP0LUTPd+nD7vZdRvvV6G+gvJQy+WQfeXMfPrePOLXvbvqRZ/U9gB7/ 04ff7SMP6SOO6CP26XuGOj74/7Fx3uFVVWnbv7PTKyo2VE4GdewN2WcfQFHsirpJIYEASSAJKZQE QgmEQJKTU3JO6klITnqsIIKKFewFZURm1FF0RPRVHMeOhVFRHPX9OeGP97q+74+bZ/Wz11pPuR8u WLXkXrVw1Vp8cu0/kf+iTu5Vi0+u/Rp5CPw8SnUJ4LRo1cHD67j/unMAeVXdRYC4UzchSnWTYlUH 56m7njo6X8fZ1WUD9lk3G+QxhryyjryyjphTh8+qq4hTHbpfRx5dt85QHfpf5+F3mlgHvlqHLtTB yet6YlR3O213RapuM+s8QNuD1Nlv3Q7m7aSd/dWxvzp4Uh17q9vL98BR6+Coddh73cFjVY/vrY+O UT36XA93qz8FkFPVkyfXn0Ef/rf+XADnrr+YvgmU0fN69Lwe/lCPjtTDHeqnAXhTfVq06uF29dxh /YIo1RNj6tGL+uWMr0Lig+vxwfX44PpWxrCfenhSPbpRj27Uk2fU30H7PbTdT3kbeIh5O5BP0PY0 87m7+pdpw4bryR/r3wRv0f4+8/9J26f0f0H/N7Gq/ylZ7th4uY8z5D4ROS5C7nOi5Oae3JfGyU2O 6IYDua+h7SYkfNsNJ3ATM93ZSPJEN/HFTdx0w7ndxWAh5SVI8ic33MC9KlJu7su9jjUaaCOHcpNf uMmh3NivuxPJnbl7GDeIHKbvTrCJb9seLfcz9LMn9+uU4UBuOJD7fxLk/oI2/LEbW3aTR7jhQW74 gBt7dv8aoQYlqQEu0MC9NZAjNYxDnj9KDZfTx54aro5Ww02Ub01UA/rWUECZmNiAjTZgUw1V1PGx DbVIN3VPpBrI4Rv47oYO1uuJUwN8rmFjrBqI9Q1wmIanaX8JCX9r2M04bKfhVeaRNzSQNzQQ7xvI 4xuwnwbyvIbP6PsGECsbfkT+Ygh6IU9khDzEFE9CtDzEfA+5kAef5MEneYgrHvTPA2f1nMsY7MpD TPEQUzzonocc18MePdcxF77qgb95sqPkgad78uPkKQMkkp4a2skpPPygh7jhgZd7OiLlCSN7AXmR Z4g+OI0Hv+HBb3jI+TzYkgdb8mBLnh0J8sBrPLsS5UHPPOzRQw7vIYf3kG944Gse9udhf57D4Ajl 3yPkxa687M8LX/NyR15yee9oQ96TaMPGvA7kuBh5yeG97M17aZS8V1C+hjL+wnsjZTta3iwwN07e Uur4B28FgAd417AG+ub10NdGGR3zhpFwNO8wZe7NSyz03guwIS978ZJ7eJ9inefp5/68uxn7N+pw G+87lLk3L/fmxTd44QJedM+LznnhON6fGfebIR8cxxcVKR/8xpcMjqF8YrR8+AwftuXDH/rwGT58 ho/cyncxbfh730Tmcme+KxnP/nzEEx/xxJeBzIqRLzdWPniADx7gW0Qb+/QtAyuZx159xEifn3HY kw+f4cNn+PAZPny/jxzRxx364Nw+uKmPO/Q9wJyHGY+/98HjfOQavj3gb4yBm/rw8z5szYet+cg3 fOTsPmK/7yvqP0cLE5afvfqjYuVPBicb8pPT+rk3P3bm/zNlcin/RWA8MKmTY/jx+X7u0H8dwJ/4 b46UH1/ihwv4ZzIPXufHN/oLacfn++EDfvIMP77Ejy/xk0/6ySf9a6nDCfxu1iPP8qO7fvbt7wLc sx/u6ocL+Mmz/Fui5Mc+/XBXPzbqx0/6sVM/euvfxV7INfyvA2KA/y360F8/+uv/APkR4/CVfnyM /zvW/CFG/t8iBAVRYyRAhxvjDTUmx6sRTt7I/hvZf+PZyAvBJZSdyEmRapwao8YbQTptWaPUWEo7 /r+xnHn4m0b0tpHY1oivbFwXrUbiQCN22Qifa4TLNXYzl301oruN5JCN94B7WYM40LgN+QjYTvkJ 8FSCGl9hjb+z9ju072cufr/xG+Rh1viPoUBEhALw8QB7CCQgk6IUIP8PkP8HuM/AaQA/E4C3Bs6j jb0EnDEKXEEbewlwfwF4aoAcKkDsDhDXAuRQgTz6iNkB4kCA2BaoBOwtUB2rAFw14ItWgD0F4KiB Tsp9zMHnB+4G5BoBuHngAeRD9LGXwFOU4aeBvXwfuVIAOwzAPQLkSwF0MgAfDWCLAWJAAHsMYI8B 8v/Ar8jfYxSMjVAQPxNMSVAQPh50xCmIXwniV4L4zCBcJEjuGyReB6cyFv0MkmcEscFgGmPnMHYe gMcFsb/gIiT8NIjtBckJg+uR7mgF4d9BeGmwjbld1IfouzNWwa3UH2ItuHbwSUA8C77AuF30vcb6 7wLy2yD8Ovgl+JoyOWDw38wjxwjiV1hWTfiVpgQwijo5U9OJEWoaE6cm+FUT/KqJPLAJn9IEv2qC hzRhb03E7ybuq+mqaDXdyPhbmJ8O4FlNs6LUlEdbIWXuq4m9NbG3pgr6sbUm4nZTDfU6xjQggzFq Iu419VIfiFSzC8CDm+E4zdfFqtmmnkl9ZpSasePm+dRZt7k0Ws3E1Gb4fDO221zNmPVIYmqzl3KA fuy3uYNyD2P6WQv9bt4Ur+aHaHuM+rNJaobPNOObmrHR5n3M+ZDf+YRxnwHiTDMctJlY0/w9/YfB kWgRqtUSaaglNkotyZFqgee0cG4tpwJyxxb23LIICY9ugYO1rAL4lRbiYgtxsQUbbAkC9LWlnTr+ pYXY2IIdtpAbtxAXW7DDli30ERdbuOcWfEwLdtjyOOs+g3wOkFu1vET9FebBpVvgZS17qZNftrxP +QNwAMDPWrDTli+Q2GrLfyj/LrWyj9YoQ61xUWrl/lu5/9YTwdgYtZ4VodbzKF+CnECdfLJ1KmOu Rd4Qr9YZtOdQnkOZ/bYups4dt64A6G9rPWvi0FvhZK3ss7U9Wq1wsdZBxsGhW/GhrZvj1Ir/bCX3 b8V/trKv1ueQOxn7CmPJmVu5m9b9gL20foTkXlqxzdaDlNHn1sOxImVTG7G/LRoZG6k27LJtFPXj 6Ds1Rm3kyW1/TlDbhDi1XRGvNvhZGzrblh6ltpmU51KeT7k/WW33RavtEcr4iDZylza+qY1vaoMr tsHt215BEs/a4I1t+I028vi2j5gP52o7yLzv+U14Yrti1B4ntSciR0eq/WTKp9A+NkrtZ1O/AIyP U/sVtF1NmXys/aZktc+iPodyLnIeEv7YDqdvJ09vr6S+gvXgWO21SH+02luZi/60E5/aycfbb6N+ N/3oT/u94IFYtcPj25+m7XnkTsaRi7fDIduJUe3Ep3a4SPs/aN/Pbxxg3MeAc27nnNvxge3fUCcv b/+eefiNEH4jhN6E2F+IHCYEzwodB46PUYh4HYKXhPDxodMjFCJmh+AmIbhJ6KIohYjZIYt2cpkQ 3CSEXwxdTzv3EcpgzexohbiLELwkVEY/ehXC14eqaCOvDWHbIXQqhBGG0KlQGAmnDA0B9CqEjYew nxD7D92bpBB7Dz3B/GcTFNrD98GZQ28z733WwDZCcJDQ57R9RdsPtP1MG3w59LuhDnxjR3yEOpIo HxOnDmJXxxm0wUE64McdF1GfEKsO/GHHFZSvjlfHrVHqyGbsPOpF0eooZ/xK2tZSJk51eEEjfXx/ BwfZ0cV8uGPHXWAT2EI/XKoDu+/A7jvwUx3PMh8779jDGm/Qxn11cF8dxKwOuGMH9t3xKf1fIb+l j3y54zBj4cSd3FUn8biTu+rkrjqx887jaScWd552jDrhUp2XRqtzMhLb7rwhSp23ItPon0GZ2NuZ Rx1d7CxiDPfSCdfvxK91wps6q0FNjDrxaZ3BSHVijJ3wis4NzEUfO7mXTnhiJzyxcyP9WwDcuPMR 1n0coJOdOxPU+Tr9cP3Ot+l/D6CHnR+zBvG38wdwmDKxd0NEpDbEGtqA390wOlYbUmkbB4hTG9jL hvHR2jCRMvvZgM/acCUglmy4hjk3IqeBWwD5y4YsZA7r5DEHXrgBbrFhCWV40wa4xYYa+uqR5Jdd VYa6iC9ddcBN2RevrlCkusgxu4gvXYNJ6tpCOzlMF7y/6zHweIy6diKJyV2vU4bvd72HhOt3YV/d 6FM3/L37TCSxtht/241edbOP7vGR6nbFqBvu3s29dN/MmOm0w4m6Z4Bs6nOi1D0/Wt3w2e7FoByQ a3ZXMq+a9noAoexuYSwcvps76e6jjr51wyG672cc+tWNf+t+kfbdjMffdhMLu9+h/SPm4Ne6iX/d 5MDd5MB//If6sBGncDJlcsjw6AiFiRnhMdEKj4tUGI4aZh/hSyiTg4TJG8OXIacgr6INWw+TP4Y5 /3BWrMLoVngebcXMX0IbehVeRXstY7yU4T9h+GqYGBKG24W7aIcrhLH5MPEyDB8PY+9h7D1MvAzD W8MPstYO+vDfYXhRGB0L70xUGB0LY/9hbCe8n2/5kDIcKXyQ+nf85hHqxMWeiFj1wF17kuLUc2KU evBpPfi0nj9FqAf77zk/Wj2XIl2GeuB3PdxPz/X0TaM9PUE9+OweeF3PQlAB2FMP39cDr+65j/XQ j57HaH8CPEv5hRj17KGPONfzAf1w0J7PATGu51t+B+7ZA7fuJcb1Et96j41V7ylx6iXv6z2L9vNp v4jy+Cj1TopWL3G6F67ZSx7Uix33Eqt7iSu9c0Ae9W7asc3eQcrwjV7iRS/f17uV+jbmP04dftzL t/XuZOzLlIl3vehEL3bZSw7e+wXrf8t4eFEvvLj3lyj1RQD8TF+Cob6UaPWhF32nAM6uj3jQdzrt 6EcfttpHHtMHt+iDU/Y5I9UHn+ybyhziYB/f3Yd+9OF/+mYj4X19+aAA4IP6yliH7+0jvvXBg/se Qj7C3Cdj1LeT/l3UidV9ryaqjzPtI9fs+4j+z+n/jvGH6UOX+/Anfb/Hqj8uQv2JkeonjvUTx/r5 7v6To9WfSjsxrB/u0M/Z9sN9+ychrwL4kv6bkeSZ/XxnP9/Zjy73zwdw3/4F1PEp/QtZp5LfqKXe wDhiV38L9W7q5NH9g/zuRto5+/5tAN3o346E0/c/Q98u+l4Fe2n/B237kXC7fvhQ/wHa4XX9X4Cv +R38ZP9h5rCvfnz/AL5/AN8/EAPiojUwKlYDJ8doYFy8Bjj/AXKvASeYBLDPAfzkwDWMsalnUsfH DMymzn4GFoCSKA1gowP4mAG4yMDKSA1UU0dfB8iZBsgzBog/A4eo4y8GiKWD6OxgjKHBRMop4Fjq JyBPQp4apUG42SC5xiD+b/A8xl1M+6XIydEavCpWg/jrwTTGwTUH4WmDcIPBMmQF4yoB3HoQ7j+I bx7ETw/6QADg8wY7kORMg8SfQXjB4Gbm3U8bPnoQPj24g75nwS7quwF8c/BN1idXH0RnBskHB9nb IHsbhAsNHmQ+exv8CcDxcD8aigX4iqFk6scYGiLPHcIXDhFDhlYj4WlDftqaAIR7iJg/1BWpIexv CPsbugvcA9DjoYeRO2I1hA4PocND6PDQHup7qZNvD+1nPbjZEHc+9BXrfk8drjKEzxrmnIeJi8Mp 8Roeg0yN1DDnOsyZDpOTDo+nH+41jA4PT4rRMHc9fE2UhqfRboMM2mbTlosspn1xrIbJRYeJ78Pr AP53uI01NwAUaxieOXw3bejr8FPMeRHJNw/DK4+kROgIseEIseEI8fkI8fnIGZTPNgwl6o+/JDB0 B/IusA38ICNiFqDNGC0j8nywDNSDn2VETZMRHQ+uBA+Ct2XEHAvOAV/JiJ0OXpYRFwsmg8dlxKeA GuABgzISisCbMhLHgmGwXUbydYDfTT4gI4X+lCWgS8aofBnHRYApIAusAGvBP8DH4FcZo08FFrgW vCjj+CURxgn0n3gDeETGSTHgahknPy1jzE4Zp5wi47RsGWMvBPzu2AKwGnSAAXA74JvGfijDMSHC SHXISF0FjsgYx2+ffrKMM2g74z4ZZ3EWZ/1bxjlzwBYZ57bJOG+HjPOvB9MjjPM3yriAfV5wpowL 2dtFfMfFX8oY/xjYGWGM57wnVIK/gtfBGxHGhLeQ74IPAHuc8JsMc1qEYaYjFwDanLPBBsB+rYmG YbFXVxI4DXA3rsIIw/Up8jvwu4yJ/P5EznByj4zLa8EzgHWhZcYU7mfKVMCdTPk5wrhyvYypN4Nu GdAE46pdgLFXfy3jmqcA33n9ueBuGTew/o2Mm3arjJs505srZNxyooxbj5dhRwHWtl1gIWiSMf2Q jDR0KI27TD8dbAZ/A/+SkcGZZtwiY8ZFoBXsk5HF/KxNMrL55pno4UzGz+ROZ6EHOew9h3PL2Stj Nvc9+58Rxmy+Z85DMuby/XPRo1zuMo/18vi2PO45j/PLewG8Az6TkX8GmAtYI5/7zv9FxjzOcd5J YB44KKOA7yzg+wuWAp+MQr6xyJBRzDkVYzMl3G/p++ALGWXcURlnUNYLaFvInhai1wubATq1kLtY zNktXg6GAGPKOftyvquC+6z40TCWfi9jWTKYJGP5uxHGcs5+xTHgJhmrjo8wVo1HYkurOmVUcT5V 7KEqQ8YaL+Bsqulb+zDgjtf+RUbN5QCdXMdvrrtNxnrWquVb6oLgSRnuKuAG6HEDd+Fh/x7ux7sI vBxh+DhbH7ofQKcDfEOA9oA/wgg8EWEE2V+Q/QSvAdxPkH0HWSPIvoLoadPz4BsZzdRb+N0WxrRw xq2cb2sqwG5bAwCbaP1RRtul4CcZHXxnB/5lQ7uMrtdkdHP/3d/KCI8BaTJ60Mk+7GaQex7cL2Po BIB+D/F9Q+xrCN0Y+qP9cxnDrwL2cBt2f9vFgL3ehi+7nbXvQFfu5G7uQkfvRnc2cq8bGbeR9s2f yNjOnrdzp9szATa3HV3Zzl1tXxVhbMenbWet7Xz/dnR7Ozq7nTvcvhU8APA323cDvn/7GwCd284e dnC3O9j/Dn7nLXzWR/ief5XJ+OSLP97J+lJpZ8XepLSXYnYr/dKUT5VuJ12t9BmORqW32PlK73IE lX7XMT6lb7U8yqh0rjr6dtYR53cjb2dl1jp7lbk56n1l7o47W5n7k7OV+cExX2tGqfNnzdh67HGa 8Vl8m7K2xXx99I2tS4/NVPbVUQeUfUvC08p+7thSzXzVGq1ZzqSjT27lxFx7pWafm3KB5nxqdWlu jJWguekxhzV3XtINI29x5T502SblHo59Vrm/OiYqrzvlZuXtdh2rvA+SH1HeL9Grld9z3DPKfzrm Bs0riK4ZebNr3tDE1zQ/blTCyMNdBVeNTlfBXtcEFU5OOkaFU5IXqnBm4n4VVsZmq3Bn4hgVVYwe UlF1wo0q2pYQVtFHSWccfeprU/Leo+99FUe7jz769eh1uSOPfpVkxieqJDv+fZVmuN4aeQOsNBz7 usoKkl5UWUV8mcqCcTkq2zBqn8r+mviJFiYmN2nhlMTyo2+F2YlVIw+GLa6MWa/Fz+KG//t02JIv o14YeT+s/I6oR1T+RNJ5qii3yrX0hOQXtNSRdL+WnpX4qJbOSnpeS1fH1GlpTXySltkJw1qWMWnr yItjy9Yl3KbKcxy3q9Lp/LcqJ6ccUeUtyaNUmRNdpsoDJ/w+8h7Zctcox8ijZCuPjUvWyhNOnKaV Z514q1Y+dWKFqhzmxaq6OyX16Gtlk6c9pTVXxY7Smhti5h59suy/r5X9/x4q25Z0QGs+Th6n6pOS w0dfK6tNuEPVL580QWvjYjxau/Kk2Vp7X8KdWrsjebLW/iXlz1r7/knLVXPFqF2qWZ/yrWrcsREj T5vVvG35Rp4NG3naLAjl+e/7ZrVfxpyh2m9jElW/7OQVqq9NvELuWSffI3fHydvl3hi1Wu6nnaVq OCdquzxzovfI81VKjjxfO7zyHpvyJ3mnpJwg7+a4KnkfiF8v7+H4WvlmjDn6Nprvp8R8+SPHLJU/ K/6QGqPHNCmQHX2eAm84VyiYkOBQcCxpW/CyxG0KlidsUfDxZJ+CB60fR15TCx6JrTr6pFpK0nNq uiB588jjak214x5W85rkh0eeWWs+mGSrda9dpLYnEw+p7dnEMrW9EPWq2l5MuUdtn0QXqP2khHPU PiY5Ve2nR1Wo/QzXaLVfnnyn2q9KelTtcxPpmJ/w+sgTbaELkxwK3Rx/tULvRb+jzpi4GnWujC1W Z1/iZ9qQOSpO3b2xlx99xW3ZqYcU9kS/qXBP/KsK35dy0f/zntv3UfXqjU45qN6kqE/Ue0xcSL0z Y55S7/PJTvWNOS1DfdMu26f+LXHr1P92XLUGLo56XAMZKbdpMP60FzU4Ly5u5C04aR+uSXgm4ZiA DWYA6Gh6F4DWp28VHgnsBkeEOwKUM0mVMkmTZpCGzWDMjM+E9xHOB7BW9tXgFvDH0yCvCrcDSCtz 6J99rnA5wuMA1ps7D5QLbwNIH3NJsfK6Ab+Tx2/k/SLcDHha+BcwJLwLaBW+BZC+FU4GcJ/CmYDv LdwpnAqAYhfxXUUfCYcCNgHKxcVgBSBVKTkJZIJs4UeAF4SFEwGsURYE/G7ZH/8VilRrIb+ziNRv Eee16AnhOgDp/JIqQCpTTlpefgegr4J9LSUlW0qavpSzXjoLrAY1wlkAfm8ZYypJ0So5o0r2Ucm5 VZKSVR4Q7kE4BuENwFPCFwBSg9V//DNGxq5h/2tuiMABIHORpJJruL817HnNx8LqwVRQC0h51pI6 rb0P7AB/AaS7NW7wDHhbmDb2zH5qg3/YNWA/taSd9csAa7j5fncH2Ajob+C7PXPAV+BrYcqA8/Fu Bg8A7tOHTvnmgp+ECYMsYbvgDWG54DLAGQQfBwcB44LoGlkdxgouAJMAv9+8BrwJGNfKvbc9CTj7 thcAaVLbJ8I+wRhwegR2ieS32+cD9Cp0IbgZvCdsEXAenX3CEIUdAtLSsAegb2HOqYdv68kD3wDO pjcaHAPQs97nhcEB0uj+LYDzGyAdHOBOB+PBvD8eXfzjocX9Mg1ng+w4s1d2ir1I9hjrSdln2Ytl X3L5abInWXNlX+b8UfZyq0P27dbfZd9l1st+xfm2ppvWHZo+3fmbps+73KHpy+1yTV9p3qTptWbz yNOb0x+1xmr6s+aLSjvTmq+0m8xCpU23nlNatl2htAXmOqV5zTeUFjLXKu2V1EuU9pp518iLnWkH 7aVKO5Rxv9JPcZ2s9OvNTUdf8Sy1rlX6InuZ0hebbqVXOemocT6m9IAjoPQO6x2ld5pvKv0RM0/p exxTlb7f3Dvy+Gf6AWu/0n+1Vygj0jpTGTHm08o407pTGROd25UxzfmBMm61rlFGkQ3bWWZXKWOl 40JltJDvZPzF+kkZ/3CNVcb7VqwyPrIuOPqOqFx/V2a09ZIyY//0tjJPSB2vzBOdhcqcZG1V5pX2 GmVONemYZt2lzNlWnzIXZPygzGVOtzJXO+fDo2Lo2Dz2XWW+4mxX5qtmSJn/cB5W5oeZhjK/c6Qo 85DZohmjzD2aMdEZ0oyp9lrNuNFarRkPOf9HWcdYXmVNcLQoa5KjWVnXOkxlXW/FKSvTuVVZ8yde piyPPU9ZA/a6kRdPszanXqqsLU5mfOxoVXZ05sXKjrdrR15BzV5hPqPs1Y4Zyr7b0a7s+1MnKPt5 c5+yX7U9yv7a9mpmsvmuZt5gVmvmQmuVZr5t+zTze7NPsxIdIc0ak2pq1hTbf/RB1VmO6ZqVYzce fVp1wFquWVvM/co5NdWpnLOtmcqZbgeUk+68TzmZrjeVM48sLqfAblbOcitGOR7rc+XcbaUrZ7fZ qpx3zfeU85W1TTm/Oz/S7NNc52i2Zb6v2cXWI5rd71io2c84OjT7Bde5mv3Xsb9q9rt2i+bMtls1 Z7ndpjk1drvmPGxWaM6jVrzm7HSdrzlvOKs1Z/+fftScz1zXam6CNV1zE60/a26K1ay5o6xEzT0n 1Rp5Ezb3XGuXcm3zA+X6zQ+Vu9s8oNy/miuV+6b5kXIPWBHK/ZfzJeV+RvacF2Pdrbyx1hrlXWJW KW+K9YbyrrE7lTfDdbHyCq2nlFfk6FLecutp5a13+pS3yWbafeaWkXdn8/ZM3Ka811Lhuq+nupT3 oeMU5f3TNV55P5plyjtsblXeEXO98hMsWO+F5j+VP975g/In2t3Kv871uvLTLh+n/AJ7vvLLnPuU v8haqPw6Z77yb7fDyr/fulf5j1qLlP83q1P571hvKn+ftVf579s9mvdnZ4fmpTn7odJjP9K8BebG ow/hhh3dmnfX5adr3kPmo5r3knW85r1j/kvz460fNH+U8ybNn2J+ovk32gWaf4tzl+bb5kWaX2D3 an7J2MNHH9Ftd/HHXeazmv+Qc4fmHzIv0/yf7H7N/838VAXHWBeq4DLroAqutN5SwVQrSgU3WFNU cKPjRRXc5FigglLzMxUsc96gggetv6jgry5TBa+Zn6vg9bH/VMEbzi4V/Dv1DBUcNoMqvMXMV2GJ +ZIKS51fq7DMEVZhuTmswgbrOhU2On9SYYf5oApvd76rwk3Ol1W4y2Wp8HtnjopiHD0qGmV+qaLT XE4VneNyqehq8zYVlVn7VHTI/EpFP9q3acFY8wstyDUPakGefacWFJjLtaDKelQLGhx9WuC379aC gL1RC1rte7Sg3dyuBQPOb7TgKWeeFrzkStCCD2Y8pwUH7C0qTrE+UbFjnEPF+ebXKi6xt6q4zNqk 4nL7PhVXTRqt4nrnHSMPDhd3W/NUHHbeqOLnUyereJ/jBBW/Z/2u4u/NBhX/4Jqi4p+saBX/4npN xf9xna4S2Q+qJM75iErirZ9Vkmi9rJJk63GVnGAtU8mp1tsqGWstUUmqs1Elea4rVDLffkgl682w SjY6+lWy2fxGJS/aD6vkFUeJSvaanSr51PxWJd9ZJSqNGHeJSg37EZWOdpyt0lS7UKXjTI9KrzHv V2mu+ReVVluHVFrvSlRpi2uqSvsdgyoddF2p0jscp6r0ZderKn3XMVllyWa/yi4xD6lsiv2oyvLs x1S2yPxOZW4zV2WbzH+r7EnXdSp73jmgsj3O3SrbZ32gsi+cy1T2W9Y4LbzW/F4Ls7LO1sJ8Z0AL l7ve1sJWs04L280ftHDA3qGF+2N+0KKxY/dp0Tjn51p05uVnalG3dbIWPWlWanFc6mVaPNo8rMUT 7ae0ePKkIi2+1zVNiw84lmvxZ1apllxhbtOSMucrWlJuPaYlq61ULWm0UrTkY/tZLfnFWq/yOPt5 lZ+RernKL3buUXm5Y1jllTZJ3Xrz7yofdESqfI/zS5W/Zb+o8v32Syr/KnWKyn8zj6jiWPPnkXej K84Y9aIqrjB/UUW6dZsqZjgfUsUce5cqiuyXVbHC3q2KHtdNqvjG4VTFz5PCWnqq6xYtPdvK0dJp k/q0dKlzsZbeZ+Vp2U2jXtKyHOccLStw3Upq6DhXyzY4arXs4UnbtOx1F9nj7+Z/Rl6prrTMJ1V5 mctW5RX2Hi0/zZWm5ZZ1hEzRsV7L/a5YLW9y3qnlrziStfxVxx1a/i/zVy0/aD6sFZeav2lFvvm7 VhSMW64V25xrteJp+zWteMWVrhXvZP2kFe85M7TiQ/jmim+y/qOVUY47tTLJGaGVyY67yEEdMeSg jru1coa1UStz7de18iXrYa2Ks9/UqrMcF2tVhmOdVhXZe7WqzH5LqyqdhlZ5rLVa1enYqFW7zF0j z2uv2pudqlX7rYu06gPrU606ZH2pVd9bS1WVav1JVS77H6qabN6jqvX2O6pqyb5EVXdkj1fVVnOD qj53btTqS63dWj3ZqtfqXGuUVi82vVpd49ik1XudUVr9mfWeVn/jvFVrznNGao05efL/fcx7qivn 6GPema7ZRx/zLkg9//+83r1mk71Pa+535WrNg/a7WvOEM1rViVa1qsc4Y1Q93nGPqudNTlP1CrNG 1dXOzSNPfVd3OWNVHU69QtX3m2tU/Yy9X9W7Lj+XhDp1nNamWwu0ttdx78iT4Gt3W4Va+6H9nmqO d80nq069WDVXWi+q5lZromrSXIWqmeUqUk1Z9lbSbUe1agLmc6ppd2xRzf0O2g4547QuyvpW6+Lt /9G6ROt/yfsS6CaOrN1bLVned/CCsFqyZLMIY2yruzEYkBcZjEGysQ0SECLjhSULBEjIZiwWY1sG LMfB7FuSYQIkIDskYwhLCFsWHDJJ+PNPGAL5mSxkX5gsLOp3q1sGkklm3nnnvHPeOa/VX99abtW9 VXWr6pYM6q+hLpzvgLp+XDvUqU3HoC6PuwZ1hUIN1E3XPQF1M0x4Sq8SaqFuIRcMdZs0z0PdNs0+ qNur2Qt1XdaLUPemqRvqzpqegroLXAjUfcZjLVe4x6HuG1O1/xfM1fwWWJIszIIlRv4NWMJxofKv mi/JF+6BJffxl2HJKuFeqB9t/QjqS4T7oL4yZzDUzzW1QP39/Eyod03+O9Tv4MdA/V4uDOqPmZD5 pPAA1J8SFkD9GUEB9e9w16H+PY0X6i9pkqH+Iy4c6q+wZqi/zn8A9TdMb4ALNC5wKUyN8m+ou2Ks l8HVlzsDrnj+S3DxptfBNZlPB9dULgJcd3OR4Ko0PQ2ueaaz4JrPRYPrgRwjuBZyUeBaZNoFroe4 GHAtNm0G1xLT2+Bq5LeCq5lvA1cHjyxbc4aAaxd3EFwH+Q3g+i/rx+D6kH8Tlqp4HpYGmV6DpcHW T2DpIOunsLSMi4Wl5VwPLJ3PvQtL3VwfWPoi1xeW9nBx/l97hynRsCzM+pn/d9/V1iuwrL9pLSxj uRdh2VBNJyzLNu2AZWbr57BsrOl5+afhl63WdMGyTq4alp3kMPqO5gVYdll4FJbrNfth+STuLVj+ oOZFWH5YWALL3+VqYPl71i9h+d+5v8Pyi5qJsPx7Lh5WhPFnYEWk9StYoRXqYEUymyv/6PyK6VPG wopHTYdgxefWb2DFVaEeGuI1L0FDPv8sNJRav4OGCi4BGu6aUgsNVdbvoWEFvwkaGoWl0HDW+gM0 nOMSoeEffCOsjNHthJVpggpWWq1XYWUJtwZWzuCehZUzrf+ElW7rj7DyvMkJjf24ftAoCCugcaTQ AI0ONg8al2m6ofHpKc9B42GhERrf0RyAJsXIAGgKEFZCUwSbD008p4amPOtP0FTI3YCm4iknoamM E6Fpmmk2NM3gKqCpihsPTfP5QdC02PozNG3l+kPTf3NJ0HSV00BziOag/6f1+ws90GzkWGgeyWmh Odf6CzTP5XTQPI9LhualAoHmlTwyN/Lr5N/hb95t2gLN+zQvQ/NhYRW4Y4S/gTuJ04ObNa0HdwXf Ce7V/JPgXmv6E7i38xngfoY7Ae6j/Dxwv8lngvu8sBrcH2oOgftr7mNoUfJN0JLIvQwtau4stCSZ WqFltLAGWnI1h6FlsvUatEwVMG269QasmmsVYdUmezas2s7/BVb92XQQVj3L1cKqPaZFsOo09yms eoO3wqobpiZYHcAZ5FcErI7kUmD1LBsDq+fz42D1QsEDqxdzbli9QWiD1R9ojsDqC1wHrP7BtBvW BGuOwhqT0A5rxgtPwprV/Hewpo0bAGt2cANhzRnTw9CqsCmhNVbzCrQOMnVBa7rpCWgdzv8ErQXc YvmFBK2HuHPQepIfCK2nRpZB61ucF1r/yj0Dre/xr0LrFQ0+Ptccg9Yv+M3Q+hVfB63fCGuh9Vse D+w/2oKg9Sf+M2i9JqyD1pv8IvAAXwYewheBR2HaBx4V1wqeCG4weCJ5N3ii+Frw9OFd4OnHPwie JI0BPBphPXhYfiJ4tHwxeIby5eDJ4G6CJ5PXgYcTNshvOPBk81PBk6upAE+eaSt4xnK7wTOe94Gn mEORE/nj4LFys8BTImwEzyRuEHjK+NXgKafFKkw14LFrkMXJTQdPFXcIPHP4x8FzHz8ePPdrosDz IM+AZzGfB56H+VzwPMpNAM/jmmXgqed3gWepsBk8y4UZ4FnBLQFPo9ABnmZTJXjcwhbwPK2ZAp6d fA94nrWFg2e3yQOen7ht0DaMM0LbBO4qtE20RUDbZG4ItNm5NGir4YZC2wJuGLQt5NKhbTH3DrQ9 xWVA224uC9r2cZnQ1snvgLb9nAnaDnIctB3TnIS205pAaLvML4a2GzlD4QnBVA9PTDPdA09csUVC O2eLgvaakU3Q3mKLhvZV3MPQ3sG9D+07HCpo32vKgfYLgheeHGGLgScXczysfYKrh7V7Rm6GtS9r TsHaQ0InrO2xxULHYFsf6Jhoava/p8LNV0DHk9yD0LGeE6DjadMZ6PizLQ46uoQXoONlHtNOmu6H jtPcK9DxN9P70PGBYxR0fMbZoONzfiR0fGt6FdbpHPmwzqB5DdaN4obDugrdNf/LLxzCflg3nc+C dU7N67DuPs0bsO4BjRbWLUr6J6x7l3PBug9zhsG6H7iZ/jdlhHEjYX206SFYH2PaD+tjNZNhvUHz JqyfxR2D9Qu5HFh/nBsF6y/yibD+f7gWWP+F8JL8Ro31N/mzsN7Hx8EGhfAX2BAsdMOGEIGBDWFJ F2BDLDcXNuhs/eQ3b2ywCAdgQ7HwMmx4m58DG4fxLbDRwo2GjXcLh2FjjXAENn4jHIVNCcIrsCnN NBo2DdWcgU2cYydsmsiNgU3l/AXYZOfMsGmdpgc2PWvrD5v22pJg0wGbBjad4nJh03l+Mmz6iMuD Td9x+bDpe81bsDnIxsJmg00Lm0fadLB5nGYkbJ4iRMDmT2x62BKoKYUtQcJx2DKOK4At9/Jvw5aj jkuw5RWbAba8akuBLWc5C2xdZ3oLtm4z9cDWPwknYOtuzVnY+jxbCFtf5j+ErUf5f8DWM8JJ2Hpe kwXbgrhC2DaS3wPbxgunYVuxMB22WblU2DZLeB22rRaCYNtmzduwbYtmF1yL1t6EawbdQYY7kVPI 8CO4LczwUbaB0gtKmJnzhfnMlmJuPbN1VI6N2dlPeAMAwqCsHvCADOhBA7rDgJ4qoN8F6FghlgDu HYCLNOA0BzQA+he4hfTrtwYoaeM6oeQNIR5Ky4VEKF0r9IPS/dwFKP1weAxMWmB9GMp2sRqoyBL0 ULHL9N9Qsce6BCr+IRhg8l6rC6Zc5fuCfar2M3CUWt30K5HLMPWI6UOY9gJ3H/0eo4R+exEGM94w TYMZl61rYcaPnB2P70ImnsO5ffQcPh9P39aNePrm78VTteklPG8KeIQ8Zt1Lz4ILYFa8zkgPhO/j sY2/RI9teOAK5+Pp+esBPDlxe+ih6XM8JZl+xGOR9TDce9Q0F49FmWPxWMSvxzOP6We4/6lJpXi+ sR7Hs4wwlh5ZTtM/QX1PDxHX8dRgfQu9fO496hhPQ+eWewFdVT4bnVHrBeoeXqJu32z0+IS56LVx TvTLrP+DfpmwEF0yQYluEP8xui28WX55zLLDpvvQ62AHQ8Mo03H5jTaN77AFuHkLzeAO4QfgDsnf TffAT+gud53uaN10C/sMtzAbwS2Mexv3E1sA7iI2FW4btkBc+vlm8CSbZvrfd5PH4/pfwRXTRVaB i6wtGBdP4Wm6eG6l6+ZbuGRy3+JKxt2F643uW1xlbH1xlRHCcVnh5tClwYRLA5eNSwObgisAtx3W f2MbgDPWNItO0YOwYQq3Ay1diEQzFk5Raw2mRrkVTYjB/sKJLL0QKRINxroQbcVUS+1iKQ6/tQ3H lrtffkcRjuhIHEehD44ZtwA7xvoF1TeE6vsM1XcbSrfFozibGqtTYXU6J1bHldJK5lG2P1G27ZQt ATkIZoL0wh7Mn0/zd9L8HZJeGPszjT3VG3sWY7YwqRjGdvUGdvcG9vQGnusNPN8b2OsP2EJBSWh2 NZghAAyQDLkwFopgIpTDFKiEWrgH5sMi2A57tQptji7ZsNmww7DTsMewz/CS4ZDhiOFVw+uGM4a3 DecMHxguGi4Pg6zOrBPXQWREnThAHCSmiSZREHPFQrFYLBHLRRGlaVFKgSRlkiSlCqXcDwskKYxf ylaUssvwPEo5IEk5LUl5B6VcMHyEUrySFIJSDJKUTElKPkqxipNEUbz8B58q8Wsc2b4XT1yP6/0o 9t3xeaz3885jAFeuDvLgcPx0x+e73g99z9e/ucb929zbl0F6Jv9h/hXmMdbJ3s2sYItAskrF9mk3 pJwJUk/KZen7x3L9oDUWIMYiBiCK/BiCmOjHMMQkRDmCQ0zxYwSi0g9aRxWiFlGIuMcPK4L+Mtt8 oG9MARw3QAsBqEBs94Pqs9ePzagmIwOuIFXIYLB/tTky0rEeXbIM+ASbsFkG24UUp6UBpwC7H+lO GewhpGjxBrRx9ihStGzDPgwfR/qSjIE1SA8gkHfgbKRHZAy8D+mrMgbitmE4jXgdww8hPSNjIOpm eFvGwGKk7yDOYRj7zvCBjIHYXsMFxEUM25F+hLiM4ely91LQNmZ5ZbBOpJ0y2LuRnpCR1A1wHWQY PIA2LYNZgZSRgWMPok6GAlcKEcdYxLFV4LoiDpKhQFsQ02QoaH4mwoRhmi/IUAxFmitDQfPzETi2 CuQTi2UocDxEHGOxBMNjkKKdiGgninwg30VJgAFxSGMRcRhORJogAQZokPaXAAOSkeoQegwPQJoq AQYMQTpMAgxehzQLgQeEwRuRDpcAg7chzZEAg59GmotAXQc/i7RQAgx+HmmJBBjUjLQMMRnDq5Da JcCgNqTTJcCgtUgrEWjTg6isWgkwiMqaLwHSjiNdiEBbSDuF9GEJkPYm0sclQNpZpEsRyzH8HtKV EiDtb+aqlmlTHfl5uTkjsrMyhxlTU3T91f0S4/rGxkRGhIe5m5saVzasWL5sqat+Sd3jjz36yMOL H3pw0cIFD8yfd/99994zd87sWbU11VUzK513z7hrun3K5IrystISm3XihOLxRePGFg5ko0KCh5DO 0JB8fX5NSNoQ6AwJxWBo2hDiVeV7A6VEr82o9ZpL7briSXZLgVqnc6j1Oq/Zq0yxUFRWu6t6MxxY BZbCslhFcZm+uHSqXWtxO6VMTCn/VUzOH34rzx/yMvnldm+hEWN3xMdK8VvRcb/JLurN1mu9UOJ2 V3eCIgXTzepOIgUC8lsc2BKH3jvTqNfp7TXI2xkEYbpyZz6GwnpDRDsWa9R2R8FMRNUUfTfxh6ba vVpnrWMccgOT4pXusm7g9A/LYadXW6XVelUp+pkldrfOS5x6tT8+yY49RirVbp1ep3U4usVj/Sm3 Xod1MZDXqSdNpZ1m0lQ21X4AZ4O2qdzexRAm35nn6DRgnv0AzkWzlMrQVJpII1oagWKCI9PFBEn8 6gNmAJeUq5QSpHgVtkJKC+pNI1DVzchpUbKgVEmQGX2Bqm6lnGPu5VZiWpCc5pLSpAv7AfveHBJg DjIHm8OYcAZ7myZ1YcpBXHKCCbwQRsKJuhNLTZKSu4mrM9isljlcyGGWNWyquC26Yqr9hTDAYtIT BeXRK22IpZOxGvW37bHUjt1u6SRWo1OySUWKRYvW6DWX2SmnU40WWZA2hFqE1q6vUesdnX36uOdb sAZ9Z6Uq1Wl0y4ZBzUEfNQKNSZFSVKUvdFIONG68izCparLW6Z3pNGJQG1XoLqRjV0m5Ia6TUaR0 EmUKGQ2jse2qMG+IvibPG6rPu5UzBsbIOSqaE6jP85I4uecseos2YY67Sj8T7cRcYp+lrnVUYt1e s77Sq9TnqTuVkIdWnUDQri1at0Vfqa3GpqNa2KYyPQanTu0024zlU+3usGp9tR4bbja7K1E9tbbK oXY7qqSOwE7AKiBtSMDtue6f6gydQSlVtfjo1sJMp36mnEBt/bdps36bUItcd6bpx1NxEiUSdY/X W6qRg6Ky2qtAI9Bpqx3yOEKJNAv/kIncwaTFvpcqd0eN7I0RfwwjeLu9s34dnX0rWkjhxF4bKo+p V5lKbcKu885Ve+91GG+xVHpdM7VubZR+hJ4+pMJjKZzeAAy4qirpVFdRG8GE8Zigtc9EK8MKC53u XsvAYsrUW5K89xt/VSUuUKQcRTMptDleV4nW6dA6nZiKJq1Ta70BSLW1ldQI6CJWIrenBFdSJJXu MiwLDhSq9gbielpbWaPX4dqHaQ6H3PtURyVqB2V2L6jdbr3bS1DFlEJkxupTvarUIkrwnm/UV9bg IFJ52soaqWwhqiv1Dq1NbdHrHMjCpEh9iR2Hq8ZM+qhyozV678JZEZAS7Y5xa7Pd9oNwFy5fytSq yU5cZLVR2kKtNNSVODtpJxTRmAMrkhmDUygjlpfuVO99xs67AlNup0j3PKPMHCTVippNsntLelkC pRsDDxi9TPxwzKSNJ5NwrVZKA0U7LyClCLvXjFalpqW1Xqbc7h8eqXwRLaruHTC5GKZISxzdZHS9 +obK+spCVdIdJt3BKd6gFBxorxJ1kLMDaXNuGwGGUWm5jEJSV24AhlGU1p8jNcTpjyhTaqQ2yZuL lq5quO1W6inU3eIrJbi7OfUUDgcVHyQJoiWkqt1yxbS7VDTz97rCL0m+Q+ldJDXhzuQQ6Q6UdKZ5 cpMCft3x/t47IL4Ccs/p/Be1GdrKRv+s9M+7GrV3tsNYLZdS+VdaLa58uMJWlUp79zScDXpdIK5j 2HycVVpvmRHXdqltjXKvjpdXB2qVpFAPhWhD/gDEgRf04wh9AE4t/Tgvg9FbIX0XAyRIP5ySYP3w ToYE4qpMF6Mo9Kuq9O4qZ7W87WEvw3B1DnU0VNJAB0tj+xBdmsrtAWqlQzKZVO9io9+K5edDxlv5 i+mcDOztySCa576VGSBVt1i2jVT/8yFj0O+Wcgf97wkL8o+mN1jKo6tRatC/F6WQB2i8PFzjGbnm 8fI6gampVW43Xdo674qgMzQsNRrTY1C1bFQy268l9s3jqEoJFR0kpUhRnG6BVB152FJCMSMKeY/J ph2KmVGozTG1zIX3ATzVP2Ts5ZY7AfUOSZHt3J/tLy1b52KjA0OFFE5kKaTwz6RQ/ywN+82q769e HtPgX2fqb1VGN2T9rRpprJOEoUepVAegxFRtFHbXCKk/U1FVjLtHdJLAVD9DAGVgUka43aG96z9d /vEYaQbJVQOH+7cJ3jocDxzr8N/PCfptariU7B/l8FuUJvqnQ0i+NzSf+hl0bwqmBjAUx7fupH/N kdyJOzpGSqJT8c7UBNr3gb1Lwjxjb9nefquVprS/7G9Sy+11mEp76iTdSbwEaUCqjkJNu06SRm18 ntHvVNbR0V0mVbfMqNXOQX8on6BXhBvlHLpVaSl3UKq0yLnR4ZlTWSmtQ9KhIAGPE5OoJ4r+tD5K S3IgRz5a6P1eO+4ByhR7jjrbgV56t3ilv0Neqhjc5BHlbq02Khqz3NoYdNu9DVL3+vP0Uhru4qpU PxdtQQNOTolPa+kEqxEdruJS6pmVTMMjD/VUtG53gbbTrEytrKqk8QId7oluf5a+oMBxRwl09XCR r3Iih0Vyg7A6bww1eAvFXK+5hbpd+gJZ69jbObgtrLozC7BYbyhWDtHF1TK73Nu/GF0K6jJTOGfT HtEXSA81HXrLbKoWzZvtxKeeKvjr9OrZNdSnoucc6mSjd4qsGLLMzaPnx4R8e69a1c65tMDcSirE MlfrbqmRBK2SKqZOj2VuAYWDnr8sXqjA0lPtltl6yxxsKxZzzcRS1N9QpPy2LLo+iUZa0O22VKMj WVmdJ286eCcaJTWUfnv2qo0E9cn3msslAuVSD6BEc2WBw5/kZ5A8CJrjLJB3MxyfEv8xN21IIZ4R 3O5CvbbQ7XRXdouumXR2uzvDwvB44ZRsH42kWzzYovYWrnJ4o5yzyQhqHNTNnFTsjS2dZpdcrdmV 8ro7Rq9D442WPF2osNMDp9TH0qNScuUYNarpVThSLHPKeg/iut4uRr95YOntU3hCcZm/2UW0T273 ojwBKld5w7Dz3FHesB+xB93R+hhtdjod4dh8u0LN+EOMWuH4vXP8nbXL6hdVz/59EXTa61GK30GI jtFTQWckk1Tn4zwkThzvUimgtWhn08ajP1qgk47z6juTu8VLzgJqtqgKZaEuMGWivrD/a4A7v1Lo /X6gqJuMoAZ6J8Otttz6EsGF2SVeQpnQ8dBHebX9Xle7o76ieQ66HEd9TBeVXgMAOMzEkCUQBEbx FeLqUquzD5CfyD+7Aozmbiaga9Dg7MOkHhkYMJIlTEQXY9R2k793hYYi3zfkO4ybu8lXXaHhyPcV +RICaEXIl6jOztUwDBFpCvmcnJJqOOmnp8gxKf0oOQwqpEf89A1yQso/Tk5gzXtyo8gbQMhh5DYA S04gRUXJq0hVksLfdiWnZKOzRr7sCg9HjX4hP3cpqEb/7OrfHzX6kVwFhaRRf6riASaO7MaKh3WT NfvDwlT5wUfJJRRwnuymYrEeUaoHA1e6BgyUAt1dGk12bgx5kbyEbpSRvIS+WAjSXViGxndjnIq4 RNZ0JSRm50aQNZhCMKcLKeXo9Mf3EW+X0ngldzzGfyH0fybPkXIG0CeZRMoggpTjM5JMJlMwbMdn JLESG4ZL8BlJxpNiDE/AZyTMJ5PhEoKBKFICZsR8xHaEkowkOWQUhBGO8ERAmkmyiAlpOhlGMpDi IZoMRTqJZEJ/7NhMkt6VwEbm2kg6jEFcRChgGxmCoSEoIZLkI1c+pCMUGDNjzIwxMyjIWKyrCMJJ AcooRJqLsvORjkZZZghHrrHYOjvkoK45pBwxCVGCsCImIMYjxiIKELmI0YiRCA6RiUhHDIEc5rUu SzbbzZyWySmZnJTJCZkcl8mrMjkmk1dkclQmR2RyWCaHzCLSFyeI7P4JFvaF4na2q1hkO8fNYL3j RHbfOBe7F8PPj7OwzxXtYfcUiezuoh5211gN++xYkf1zocjutIjsnyzt7DNYz9N5CexTBSK7I288 uz2/h92WL7Jb80R2i1lkN5vN7KYxs9iNY0R2w2gLu360yK4bPZntGDWLXTtKZJ8cKbLtIxawTwgW tk0QWY/Qw7YOF9k1w2ewqwUDu0pIYFt4kXVzIttsmsE2mUS20TSLXZklsg1ZPeyKrBns8kyRXZbZ zi7NiGddw0S2Pt3FLkkX2bqhk9nHh+5hHxsqso+miewjae3sw2k2dvEQkTWLDw3Zwz5oFNlFRhe7 0GhkFwwW2QcGsuz8gePZeQP3sPcPFNn7BonsvYNc7D0Dk9i5A0R2Tmo7OztVZGel2tja1Ay2JlXD VqeIbJUhm51pmMVWGkTWaWhn7052sTOSe9i7kkV2ul5kp+nb2ak6G+vQiaxdt4edopvBTtalsxVa kS1nRbaM7WEnsTxbqhHZkv4ia+s/mbUmiezEpMnshPFatnh8D1s0LpEttFhYS244W5CXwebn9bB5 ue3smJw+7OicNHZUzgI2J7udHTliBjsiO4IdLixgszJ62MwMC5uelsIOTXOxaanqxOlDjONZo9I8 H4OD+0WwgwYuYAf2E9kBqSY2NVFkU+L6JU43JJtZffIsNlmfEDddl+BitWw7y8bvYTVxo9ik/ia2 f5zIqocmhrkTMuP6uPvRUDwN9U0cGZfRHGuKqYgWoypimqKatOH6jMLw5LAK3ADMwQEYCUhWVoR1 M9X7xZawJmU3M90cLbYomyLFiAptKOaHJofIzIEYCUxWVUR0M7XIHNEU0s3MxEBIk6qbmYEBVRN0 M3ZzuNgCTcGmoAqFiakI6macmBXUxHQzU18QW5im3EimGpqY6YhaxEzEDIQd4URMfbFJ4XIFkAPE A+XG4u5AEXf4oJJpXtLkTSmjT3PpVK+qCTexqdPsnYSscTSsXg1JecXezDJ7l8LpTMpzFHuradhs lsIuGo6KwnAnw+SX2juVijUOMP72Q2+jn/bGjHcGJSYjueNj9KfIqb0ROY4xcqsG+SK/jt6+iNH4 R1l/lEvuCP9+sd9e3lhcs4vLaEeVetX6vH9hWCg98OqN+wMHcEeYZOkmky2V3cRucRag9IWLHvzX sr26LDT+6+VN8I6RhAf5x7OfPi9BZcVPBiSp4kGtdAL9e9llxMcUvgdEEfPwEi8CkCDSBz6ADwjA y/Ay6UOApMB7cB7egWvwJQmBdwlD4uAQdJEgeAV64B/wBfLOBRF+IIFwijwCG+FjuAQH4H54BLpg J5yCT4gBZoETPwux5JskARbAODgIL6KkqyBSmSjlGJyFc/B35DiN9b4LF7GeL+FHlHuTKEko8vSX Ur+Eq4TqGQfrYTd0Iv8xeA0uoD7Pwl/gqFT6v7Cey/A5fAc/UV7U769Y7ge4gdoHShL+Kml6EM6g zIvwCXwBP0ENarwTvJh6ClM/gW8lvaai3jUwBxZBC+yBl+AwbQFuWvnYBiu2616YB4thKeynbcMW /X90BXwJcfjcCAm9T2UWxMA2OVcJNAXt6jOx+fYTwDdI/KfED76DMifTI34VsAPCmXHiFwoHOhIg foG5tT76F9iv/lWub29vKMgPpRzt8ie3wSqJ1iNW4Zgu+OM2kHgS9H/Q9GvwNezyh7+Gz3B+fCiF v8LwGXDf4utBi3wHnsH50InP42hZB6T0hbDhP4kgySQCyTfoMef8S+af8ANos5/A0zAda6sJOB9w HmfAvWihVbAPdt/B+430vIpoQEtthI5f1bTET1f56cnbWUz4f9Lx/86lSkGEoI18jyM7EhNSbsPX 9R8K/79z1aEddsB2HKndOCL7ceSPoAW8Bh+RWMwNgB4xKzBL9RG62SoIhjB09Iea44IiITQwLDgi PDBCpYoIDFeGhCgCANIz07Oi47PT8YrOyorOiurJHJYRq4vWER0h0YToghU9qtpfNgZ0X/uZaWBO 36y7mR2gvFl/k2Mabj6m+ujnSYEFNz690abKxOdaRfzNbIVakQS/+vc7qk6m1DgsYxj9p1V/FW8w UbgvKCAQYv7CMIpAVZCCgTFjsmKy04dlEIVeQaJ10UzUmLMZxOi7oMq43qh85NpF35e4gWD5hYpL ir7+8uH7VUwgLZxFlaZFdbT4gyOfzGKeGt4uqDJu7mNKKWjJdPFGAN2tArE/Es2hyrDAyEhVIMOo grCCMSg9JjsLayE6rAXbrkhV6FWBCkU1+dx3sdGX0Oy7Rj4ld98VMyEmK32yKuOXN8m7vjQVd+Me kldA8i/u9B2iUo6glFMoJQRiIeLFUGDCQqT6pV7VxsdFRwWqdDoSnaUV+Ogo3RGmD1lxbN+PPb7d vmgS8z5hXA/7+qgyPjjta/PNeNcb4Lz+4Pa1JJEZhT2KdSs/xbpDId4colIoQphQJlCunvYe1b4v jpwfyvdvXGfG3exW9L3+virjvG/6eR+cV3H+es5hPcHQ1xyM9QQHBTHBjL8X7qwlWnnuJjCWmy/7 rtAays/fxAbTsa0VLwTUqyZAMqSaYwiJiY2NiYiMZGOCFKwiND5Y0kiqLDo7PVoa1wBGlxyoio6K j8vSxuo4XbR+gCpQpdcOSI2OEnjaMwEP+n4Y5fvh9D2Vj81+jmQP9q1mHuxmcx+ds9J36IUdHxxA g2SeWql8zExy9m7zfe47sX0l8Z678fKny/KGf/83MpdsuXTY8zDI7SPnJBsJeUHBMNhBY1ADbA45 Rxvyy5u9vaC6SL0XSDKHx8fHhjAxQaqIiKRY2hM4E/AhmyQWNMXq0dJ01CZioqP10brYmPgsXuCF WNVF38/KpIn8+77Df41dlKS6So69VpCeFJ2enPgmFaXQd5NHfDuP33hdkTaOoBn7Lt74CK3mnO+7 m/ln11Yq0nutxom6REBfapuBYWFRUcEROGVRl8wxWbQjsyQDiu4TqArEnghEHVAxLWdCExrJZE0v XUPm+d73HRn3ke97EkH6EsGHXeAr2XbP3cabkcxrzM0RAbW+tK8/xpZPEC8o/wdHLw1SzNFsn8RA MiSRJJI+iiGKpD7BfnPCJSE6JhtvafD0OHh9+8THxccr4+P6ohK65AGpA1Li6HByJgwOMAxI5UwC n6VVvu67OvrCyrE5ljHby0n8rLJnOnw3rm9ebSJBOmfZQ2RYfm7XJN9PVWWbWz8jncpXiohyDD91 /gjTkMQJj1Xv/rRu4aI5R8vbi3MvLxguZCbYHq3d9/oj8+m4jsFeUkozOOolZRCjwtmLyuJI+U02 WscFKH0DfFd8RlXGxWu7AyZfxFI47wN1WIoF1oxLX2hiZGQI2zeUYfwzJ8tvp/LcxxGmI01whGNx hGOEWH8IxzpQ53vV91xzfG7SCM1S33O+N0nigmHapP9F27XARVVt/bPPc2aYGebJMMAI4zAMD5HH MCCSMDxUBCQkRERFRETFB+EjI7KkMjVf+cjwkRoZFRmZIpFpj6t+ZWZeM/N6vV71M6+ZZsbn9Zox m2/vc2ZgeOjFrvdnINGc/Vhr7bX+a63/PkmU/XU1oGRxlMEgCdAqn8JqJ394GvwFFtY7NKzNEQY/ hf+X9hxgFpJnHTJ4Cf48tHXTDPIK1nxx+0Xaj65GVhhEDLDrA6Ue/TSeBn9DhIGSaAwGjYQiRRI9 yfGnk/fTE7BpImNQIWtQanSmIAtrQsqwKcyxcVgVWFUcw2J9WaPjFo8BT4Em1c8eoqqrb03MAxVL P7INLC4YbFOATTU1LU07SqihIBYuhylvvJOU11hWuAoMGO7D2h+PCI6PKbhI9RuwruEjJMWS9vN0 OF1F6AlfuxQAL7FYTnlxnNzD5X0ECXJoeqUCzatzO93WaJ0Xbbkb+EZb227zzQGL577TTix9YsuS s3+qmk6p4n+Aj8PZ11P2jc/ZtQnnBduXl49HksEzprLZhALJxmRXenrKKIqUKQApUcs4X0aYOClJ 2TG30mTjJeGcUqkMclktWg+demfWN18tmLVqTuNX07M3P56cNMo+Ze0oNvu3xi0fNb4OGBD82rN7 yJfatn0+fcoHx6eO4r05XkM+2rUXWkOIXQcMBKfgyGcNqw0kZ+AMEr2KYyQenSdmwgR8ToHRi59T RxrdJKC08KeIo/MdIjJnxKK9g34qhy/D/1tRvX3ZqRsvPdOmvlSdNlgMbu8qGv19GtzXWIuSisC6 Fe+9BtvmA0vhyEX4DFhR/LyKpKImvO0elAqIZTJWznpIcAS1CpbBK0GrtWqRj0AysdoUxmjyqiHF Z8nVq+1EczPIyWeTW8Sbave15VMN+94Gw9C49SgmVKBxPdC4UiChKc6DFQGKk+DNYcuLjBKTyO8g 52dVAroQLgMr4GX40yYIwSt0MRzvsJOqBljL5rZZwDXCOWIukp0WrxQAjZb10EjkDNcRHPCpjRVk o8U+lpcO9tLbM8omlG4syIF3tqRnJUdBSBcfnp1gKy1c33aKvHRgsDXX4U+XuvQzHs3hSehQtFUQ nEbk4Yy2AA+Lgq1wNuJidbxdKhVk8e3l1VuX/uXOS09tW/b97Vu36aoPXmuD5+qWf7DFAfq/sXwf nA1ngvVgLRq/HlbSi9H42AaNdgUACpnMQ8F6yv0oTuPhMsEOC9QKihZmxTtRYjOIFU4l2Dr/f47N m7F2wfufl7Uj+YxaOy85KTNh4ja6uP7TNzfB3+H3O178yHGa+QWuhXP2zyhr/qb0UUGO5C20BjHh ZZeIRAzLMhKAfCAKDE4pcv0pXi0q8pby9DTYOouuaoWXHGvpUoSawgne45+nfkRjhGCP76vRcSBY hxIUDRXM6TUevXh8LqjT43sJHt8UQMWh7QjePsjl7akTt0K35keFhIdWFn09Mq1mwXG4puxm7N5j kSGLig6mJ1VX7gNjqMJhe4MDooabAvrpY0dnLnp7fD7Q5x1Yk270NfvE5GW88GrBKN62L5JXmOPI YhC+oVUqQKhZTsov75CVj4AINyGrxn7NqVhs30pwpq1teeYgyeh572amvv02g5aw3/FqnaxFljvi ZbJ2P7DhRK6MnEyPZDNQFqghAokYItSukROMh4cnJyM8ZTJPggo3mLUUmu1QNO9okUT5P2haazSS gBpBFpNJa1JrsRRMVLRTLv0FWeg6nQ2vcbD6+smKmsWVEv2Q6urCihmeF9Yv2rHy4IV16PufDj33 +MsL3zmMvzM1Oxaa24lbZCv4cUtuBrCg/4w/uupP6KNDXJ9qQE9gix9FXmL38DHQTATaFToZDoP+ SqWPhDb78vEQLT+aBwwIz/NgzoSMw4QRl1KNEa2JQsqzmNQ8jPFywhjy158P32BLdpL6IKrkbBGt 9BDrqS0gJMfDoBfJZaI8NmqNI5U8sKatCXwEfL9TQAW4qS1JjIBX4FAqCw5LfSd0VGYoaEZrBMXt LeQ2Np/H6MpmhPFphKOJpIhOiI8TDHJb3PF4KTAhjJ//+xD64N0n4HW8w5D2Nuq0E6cjOyAQOJVR JEt2wbmUCYEgE2W2WviADYryz4M0EAKSb+XD1puWwEC9uR8KwIGsDeH0v31y8RvgA0/sRaNPQ6Pv RaOLeHwuJhAK6IbPjUa1EutQqUCndhoYCbyenOP4X3jiSsFGe1L2kOfZqCOfwpltV5iK3wvWrQaD wcQXpuMztgmNXNtndE6tcCDHCWeQcgfJRh2Hw447Wo/zuBSPs7MP6NykpHY6LoDX4cRWPEDaCYeF fz4PnfV65Mn7CdhcoVQqpDKZQSGiDJRY2xs250gctLHlqk0dyNwVSAOoHedMi0/GRk7exZ4EjXUK Q2byo9cmFy6a9XfwGF0VAx5xvALfWrMI7D/a9nlzaVzk9wfBFvDd528imYDnke+q7onETUqy+o4T iKMV5zp3bMZIXKOR+wKZyMhx3vJuSJxxmi52SE7rxfarVmNhoBMYh8wbYcLK29msiGUtgGXqQWIS zUglRk6XCJJbGBpZjYzjaGp35rqaTPvHS0a3VSMw/nH0xMNTCsEEagQC7CuLttUOVpyan4OvK6GV nUArk6L4gnC5SCKRyzmpSNYTlyuQe6AQKjcJxsO7/PlgI9hx9u6ds4PLL19eM2NwdELsBITJc+Gl cpRWHScdVqYS+mSllM+zD8ZySEGa24M0F44jpl6vARxC5L4asXvE5MiejhlD8TiVa1p351x/zbSu IDI0ZkDxkNMjUhdVHjw5q1R/3ae51DYgYuDMpMNZw5+a9SGYTH8SB4jUweOnJceGG0pnlrx5rWpG 5dSvE+DljMSSmfbEKENB5fS3Ts2bileZjmTy4b1RONKLjfoQHroDD7NRJ+5uYUpP4Kf80VMX0FMW jMJFIk+jViu3+HqSpLwHCsd5FlYzVib62epUM3ZTRrefqQtz4a9WDKjMHMexNthaeVpHocTdzIhY JgKIIoGU5UwMSQItn4lJS3e9nj2uaev4trsIlHPjdq0YPfaddWPI39qg7tea8ZNrD0SREHuggvaL 1EaEyf2JUHyG/P2lcrk0wNublooMNBes8Oh5htQdQKZ3RC7gcT441PgtmPLqiYJs1XdSZuw3tY9l gPSJ74aYszf7g/yXUusGWpJfGE0N3T5q6JSxH2JUPmxEw6T8dSD+EZVk2JORIV9clOgGbB4TEYrb vtPQShvRSn0FVO4jk6koH85D1Qsq75hf1/V0v3XWb23ZoKjE2HEbTKdDH5+4+XxF6YuPfwLSKVXI hYWzdh2bPekn61dj0utfAZ4gZnMNkk8+mnUlslMNYcSoSKmUAYAmJkTeMi6gE5g7Z2ds7hMiGelQ aKLcwTnZHDxiSPreojHzxtc+ljrEcP58yrzx1sghUaOq6B2TrGE7aoEXGPRqVWxULrnit0ZQCBp3 zyzbc2JqHtZWEVpNPZKBF9IX8h8cpwL+/hJfd2TusiyjxoXL+7vj8iBn0kTVOzbaB01Ybzk5Dh79 e+WUxRUt38yY/IMoNjJ7TFwES5J7p4w7FQ9b6jcAKbBtfu7tWtg6vzZneHHuQqSLD5GFL+CRuY9d 6oGws4oSwHmHE0vqgs1NLmxOLTBE2Vb/+uvlI0fAiGI2eZd40/bmtlyqsbkOZOGzswaN/BWPzdHI tETCeYgoD5bi+JPDJ0BWjM6R/xHQOdUCPwO5t36pOncOZCFsnuvIAHADj82tADdjeL/2MpKZWsDm KjUrVomkvWDzAFztcCJzkxLkxI8dOQZILlcnJg4KukgX75s1KBLua/uCvN1ojchySARUPh5ppA6N 7olQM4/KvURiN1TuxMe8AnjQpHC5LpI4OXPyopkt6HvNzA+nRA/4HH3FR9HVb26Av8Kjm2re3ICM MHZjTWNV+cewuKr8wPczJvDXSmEltRPhWxWyAR6nq1C6qGKV8n4M5yUT98TpcV2QOkJGXZB6dnBG 0tDdE8bOnbDpreHnzw+bXRwdER+Rs4Au3jo+OmTLengd/s/mZwWsvh3m762Y2vLn0sdQvPNFci2n FyJNObE6wSG4jsMeryY3rI5WQJVr/jnp8rn4kjx64U143vEywus33hmehPSDJfgqkmCYcK5DdToN FYqguvhe57o7Su8ZCmrOBKzIHhgUHFSU35SeNG9GM9wz9kzI9onW4NCQKXnvDh1SUbYDDKJK4uoH BEYNDzL56WPGZC3cMWE00Kfujg4enGGx+PhYC0Y+vX4Mxuo7UawayxxDFmS0exJKsViqpBUKoESA XVgkBqBooYpD3VA7tiiE2cnhEK4cnigZOxWebG5mjsF1LY519Z7NniCC3NQC8AvYqaL2Fvq1bjhS 2QNH0q/1iiNBZXsb+/ID13vp+geq94I6NEtD7/Ve0Eu9F9T1veCL7OkmGl3fZ0zJiu9R8QV30TjK PlV8WWWvFV+Q336OrXjIFV92ykOq+FJz29vol3qr+NIvuVV8kTQ55X9c8eWUD6HiC44hjVT824ov 6LXiC449YMkX6W8H0t/g/1rNlzX+l2q+YAuS06T713zZST1qvouRphc8nJrvgode8yUN7ReZM86a LzpNBgPKK0T9NBqh0hso7QVfgr5Ve8mUh1LuJQBpbj/P3PwP6r3MTw9Y7wVX0IxfPrR6L/PlH6j3 kixaw11nvdeJJQ3dqrwdWPJ+NV7m7n9Q4yUntbcxo/pU4xV8thNHMqMMYwKXABG8006cOAFyynpU eckh6DSxfa7yMr/+2yovGYbWevqPVHkpc1+rvCSJtNL2YFVemuh7lZccAitZv4dU5aVsf6jKS15B cnwKrcHj31Z5kTCZpxTXNsHWsRXj3Sq9O4cloHFCkKwO/1cqvUzjQ6v0kjOQB5zwbyq92La7V3rp gcAb/vhKWr7HU1N2Z6cePuxe601f46z1kkR1+3munvdeUUS4XesLgLcZ5cbeBoqK9OZMHh6hKnFH zBeAKj7W1sjecuUAIVN2/RdFt99Tp64qtpbZBibEFG7TXw6aX/ImTFk85ytQQpM/qbZMjQn/cpvf peD5k+pg4ovo18WUIuRCdfneb2dM5PNqMgPE1dbAV9EvpzfDUrffIcs8S89mzOx5HgHLmxhA435m RLTS2kl3oD4ZmZtGZmTnprHnHavJSvyF/8dV7Re5ZXyGl4TwhUQpCqYSw4MTdcHoeWdd29phy1r3 JI95gKwCPL/6q2WPpl9dO2zYIwOvsMdPBzw3MhyhgnF57w1LrJy2CzY/ejqodlxUcEjwpLz61MEz J28HEeic/73bKYedWYctf+TT7llHkG9H1kERO2EltxrtSkX4EsOJELuKA/5eMpm/LTLSn/HxUQzz V+D9udTJfzn32WvGp1SY+j/QflcOfHRozoGykuopb32eefly+tKTX69itp3yrxk5wGQxF+Y1DE2s mPo+/Dz/lPnVsdGWEEtx3o6U+PKSbcBCF2+fEBW25RX4M04eP3acEpLHA2ADeHkc2r8perglEO1/ 9MiFb4wfDXSpu6Is8VnB/P6znllTkEPQRBJ5nQ5iT3b0MALtinBO5inykKE/BrNWjj8TfSj6EH/E sWlH/9HuxbReuher/nR+fbfuBSvp3r1Y9XnHR7t1L2giod3MHWJv8shnEJGB0JksJSM4UCoNJvX6 yOBIpLwO3fFL7xvsAXEqQbWcJVYo3JtZIfXQcaQQnePI5G7QaPayTmj03CIMjUBNTPOItLGZ22Lq UuIzU+9+z/+12tqcgX65nSaBDQOnuoak0e87gROX5AROpD8GTvRBf/h/v56D/4Tf3j1x3f+3298B CgTf+P7sb/86CdvgGfSTP5DdPAc8QMRv317Hb/JxSUSPcv0hWB62Ib6cXO7rRVEmX1MPedwTb6n7 IALmqoDJgn4Z8MLchg5MVv7i/bZNnRwsALbkj90BG1n0YFvt1D2OshFEMt5rfLK/L8P4y9Rqi7+l x17vi+/6onJmX68YEKy7337vgxCZWX90z17OPVvsSrRnRiLxNwDgr9Lru+27Y+/3RZd92vtvDjEY NeLZ5kFXpzsR6NLvb7y08HfN/1anJYio4feTAdnsjk9Nb7jhU6rywWTQaeFqwkzEIVSiiIjTylkZ KxZrVRRl0BrcBMDHpeje4a25L7t+visEngqi76vr8BbRplf3tY2m3kUAeWjtHz69Hrx+dXaxRRsh I7UimbYzzHaB1H1RHTugC+wGKff1St1BOfmACnLbhZawEPF4F1H+8TqJP6Pzd9/FPcgafdgQZXGH +imRCOoH3G9PjElIBF5BEOGH/QJEmAIaH3BfnacP5w0hRAL2ONYEvUYk0hMKhVFv7OFx7pFM9GWP PRIOMPa+W4y/RzpC5j4cv4ryFn/Kz683v3p/lkpf9Jl1jxyHrL/vno86M6DTb77YgjKgm3ANnOvM gEDzwzl7tJboevbc06Y++c03XKkVsNx3M4Nx4rWGngKvvTcsAbz6R70itsuRWGdDR4bpNZqwYIqy hll7jft9ytL6tMfGW2FCJjen6Gh26qInj8O1Zb/ENQmZ3HA7zuQKAHFft+MztMmZ53nH5mfUOPO8 tekBvmbfmMcyFm8oGAX+uD8VPBGKFVHxOk4q1amBCtC0P++QVM440YkTessU+xItaLRmeGVDar7k 6cl7RqYdPkz+877RwoJzzdo33HLNHx7YJ2WhvKwZZTBahIDDiQlEpj0wIqIQgEKxuNDXt3D48EJd eHhKIRUWFRWoKeT03IgRAfIUPlnFqYzzL2VnbbDjnx7okIdOxmhgVLllrAhPC/1OytybTfFUgl4y H+QwuN37pCmlpRnSZm160rzXhw8BluuOxfB5anq+eJfP8CGPwzPACLw+orx0keM4eLzRMyNEp9Jo ouJqokJyR1S/ODRR0+KZG+WDprIOqgoPy0yrfC4ljpKG/ARLYPEt64nRI95YBfRkjmMZXHzW9klW GplO5jp2VzQMT4dffBa3KywwNiMoyEs/aEzmM+8UPjpy6MrkfQOD7RnBwT5+SSMznt44Ojt3KMp9 W+m7nIWN57Nm6R6apQjsEbCpmG1mgCAFZ+m8VEDfTToeBU8BE0GQ9CnqNnqyln9S9AFFo+eEp5To i7M4GtF60BezIWFdjKMobn0cng3sR8+c5ftM8iYR8GSB4IBwcVmJnkRR3xxrtgVZ0AhuXaRkoYt0 gKqHXsC4BPy4DLBQD+vGq7JUMRH5/MhpaOQsobfUpGQ8CKYj++f7ShgbKoFRi6wa6ZWz9GwisVmO 6/Bp3G8C+eAXeOM0hIueBNdxD7iVNPGjeyAZESKJiMAZIxqZZ40KX5ylo4lEWinG0UKmt12jQ4Sn bfzTYiQnESHIyfUk/5zQOiJtFOH4mBwKdOiZk2A5l8zuIPrjGRW+CteMVKASGZsxABdXGHSyjba4 ICECuzpoTKUdJDRug9dcPaB9Pz6f7OwBnT/w8gKEkmRDgEzoJMEvQsFcx3KhkwTScCcJnoew7kV+ 3Yywbgqtm3Sum18x7hExNn6drUQY/xkD+oxK+IwZfSaasQVakD6RLmkjbmgxNKfFfBQGP+3e9kkE V9FSLzjbPr/8LrR9woCI7xuB1BPKBX7sLZh0JDXCoIjsrz9K8Np+l58Vd4TkTWqRJyFy0zbfewFK YEHzogVjXMJZYM7WmUVhDjl5hHTEM2Vw4M+XkcIPO46NH7UKrgXBICX9IpDDVngdfgnCsAbIEC6F /QR5HqwBbzcNdCTVHOl0HTH89QZXez4uTuVEfwqmGbdv4sb23r6JtbraN2QKkCaeW4ybQtvy4FXc FAJU25YVMfBOwKTHnoAncFMIiCY/tvnlKzCbtynkrdmj/Nlj3WzKqLRyFqG3Q7LgDNCBU/jT7T/x 584ffdpD+DQDeO1gLQGkHQZph9Yxzp+ceiIvVYMzuEuj5bs0n8HWtOcA/Qx51iGFP8Cfh/66eQZ5 xQsMAXnOpg/IQ3n/j3MjjAax0qSrgVudTR9FNdbaafIGU8k28BUNxV66H9dfwQnHH8uVxnTC/pwt Ns4ZnjHh0uVcKd4PI/9LP9JRWehoyXRUFoSWDLt4DHwRZnVUL+DajuoFLBOqF9i6T5HnmAr2bUKP 9StRSVz6taAZjQFoKs7tYGGHT4t6bceQlzq7N3MaQEf3Bu/4FPkFl4bmwHhTukepE3d4V6PNym/T ObjRGOuyKjxzGs6r398u5NW7yWVt2z8T8uoD5Bd3Zh7vmafzczXx+8H5M/KtOoNcmIwP+wKligtU uu3HGMdbsoW8fs8Mlmwi77h6M6ACyLv1ZrBl0Ua0w9PI64o+kDntEEsQl89suONo1VpxXzauRbz5 1Y72Cm002P2WXL0KiOZmuGsMb8+b0TilyMOKPuBIfhwxiY4w8h1aI2Dyu2duu8ACOA/4Ai+U98Fy wct+hPZfijyC6AON2HkiXLEauyR+s+gHJh+nTJPHdamqMuUo75qM8i4g2jwiMyUSkIL+GnmZ8t2U Ji9aJaU74pVGKCoJtopCPm80xgCm4h7ZCt3QLeshyPYycjG/ZgWvM29O6cl1jG8SlCRMwV8ydCs6 Mvn3zg+YmZ0pByDaO1MOXkq0Fz8jjkWMS18xZl7MNFPhxoWnvQSCPH9WKBN66hOEwEUfeCk6tezy g6wrETTrhCoj8oGuDFhB5wzbG2yMTO/fs88R6Ovsc1Dx3WE2mN0NZsO38UpO0yb2MLI3LTpPpFgl dp1aIzY37CCcGsGGZ2QPd6JQJ7udiRL47/lzef47QVMF5H4uCUVaV50Y5RdRKooK8ZRJpXpjiN5V JOdRNJ8TatBeGRR3bTaTjTHh/drMbuVhHgB2HmZeY+yCrqXfoI768AW+9NvQUSZmqp3FZO9Evpgs d/Lb+e+HnqvkP4u+EyR1hihAXv1jnt/ua/eQ+Oj1LE1RYlbslhPhFSPRoD8YLBgZjK1sZtyvtzF8 YGY7ArMba93nlJxnrU9KGgh/5FnrQ23N4dk5ZtBM+9w4fOO313aS3hZy8l8nUiqJxJvcAk/niAO8 xXI5m4fOTSNdzmUxDU5UydBdUCWDghSX5aIf0eWDvhkshecQqERxnULRi73oxIdiRkQyHefBbEMh 3WZWa+P4sEUeg2aesX72k4vHUW7ybTOzM/88PIBZHrfygfwXiylQH2Tg0QKVh0atE3jsTZ6MuAc2 VCoZI1aVMQAdLs7y1SdwRtuPzOzfx65bBRLAxBemsXVwN7xWNYf0BxFXCjbx5HZ8mqi5aOTK++PC DsI69SxJwhngFUcr5s7ip4v4p3vBhTb+OYGnThWRRlgE6lqFk1iK/GQz0Q/thFB66j35Kfm4FYjj FjY5xtaBC10RRsFUYPb5BlgvsM8/a54cF/n9IbAFnPz8Taqsk7UOc91Z6/A9wWes5izMkq440ObE gfTqO8JeJqK9tCBL1Hwo5qS+PjKpj6u2gGnfTpPDjsJpddjuGAZvFfNcbZjG3ErtzlhXk5W8z8k1 3xdVfGjKaDCJyuC55ls3DlZ+Nz+H3vTPTtI6PGinWKnYyHkPgZ9i0noAKeM4QevxaEUbeD46wois jGDdMWIAOsJmhBBtguZ5t4pQojvh/HHoiwnnSYPZDbAMgfu7d/4WP+Py5bXlCdEJsUWCNgqQNr7s gREtgT19I8aIOto1l5t/ZJoERvl0e2y4YcqMTkb5PzKGlMxKSozyGyswyqnS6/3XCxT1xO95ivq3 syfrr/l8ONk2ICJ8pl2gqMMtgj6wzR/sjg9tPD4UqOZUHki4g19rgD+NUfx1woI+7en8NEbvWGVY MehnrVNl2FUo3X7m8by09P3Xs8ftcdLF2cIPVuSNfWddPnlXoIuXbNwfTUIqbC6QW5FAGDNWXyyQ V/7Fy0lC55gIeCcCSDnOxAAKaDBapCoRWtzNM8sVe0UBHoEaj0602BHYe0eMVFCH/6Uf2Z4j8MPr Gjr54R5D3fnhH7DLujPNYcvEd0MDszf7wwYX05yPP9R4tKo6whdrXO4ld0eNnfity9GjRR3k8Jgj Y9LrNwA5JodTJWcN7mzyoi0Cmxy28FiZWogsq4nnjcubtGo/sdrlCdVW9+Ex5Q3FbrM7gGztygQf RS7vZIL/eWoenXdPDjk/cyna4U6eI45xpL87juzvwpEx7jgy1onSyTsu1jfKMbuxvqlScqqTMA5s AmH82MxOwrhghevRnvPugSVtnViyC+ubWu8XFbu6tfXykSPww4nCOHY0TpXglUkeTQqtBXTgO/Bk V6I3lQvssJGngcMmYYxqJIUN/FpUnBuaVOB01oklUTjN76B1//N9a8RIhweCkh9j5je87WR+C9qc hkZrFFjeTT60piuOdII8XqI8cghwuQmm8n50bkbSGwc8msDIkipCiG0Dz/JGM4rVSrEbstR1wZZo G12xpTtzW0CX22F+U0UZZm4zB4IzE4fuwYTvzTzhu6I4OmJwRM4CQWqvM3OZmzyK744u0aTM3Jvw gmO1k7tNve7idPPnag4vobA+IcwePpQuuAcXOz7TxYpYh1DmsjP+KzuI3fZ5M5vByLFnQrcVW4ND Q13Ebvil4Nk/YA+yRUj/GGcqesWZ2BQwyjzYnZBNH3QRtkF4c7NwE5nB98xMhN0eZvSf7mecPZPw nq7WTVdoJXPUntMJNfqFdLqYm06LZ8+k/Yg5BDvHPAq/Ysr7kPBWKf4vPvIqUMR0v7fs1vgTfg+u ggMgJ7/QdY8ZpvJ3mZdMzTFEJzTRxSgDk3XQ3ficbDWYqG7x3MO/NaS9jTzqfGuIzi7Brx3hWIqn gnfyuoBJraaMavIovHJoR4QNXrE5Xz5yEt4BIjTKXeoCdfBe7x5RG9EXad25MoVcsnNVSpd3j7Tv b2+jdzu56L52Ke3pyaHJPaRSF5vVxeZWC2x0tZOTSqu2w9sWGP4jvE1ptnsxcsWE5Fd5LvppGILA xBSQ/ihIgW3LYTNaXw7SyDk0iwL7171KglQpOrnoGJB48WRiHq8ACjPSnT4OBxawGHx0vHJybkN+ +pPLNi39GhKk/sfjwG9rgTXCVxMWmZHyOBtlDsh6HR68/ef35j0XHcaU/z6puay+9vXlOYOjYrVq ZBN4BVX356tzaH/CF2CqIhz++WR8hOP4VPJu+O8QWNmoEzDrhKP1hHAzEI+34H68dddogFkQ5TDn k7YIx4lVsFUYCEHNEGGcJe3nmCNsFhEssNe99XpvjVZr9hYxZsrTt1f2uutSUOfJNMYhFccJVVcM fFT8W0uOwH/JH0urPrU4OyIs79EX9i6YGQRXRpBT6nZL18K78NrLtRmJZd+BMYBZ/QxdZDuYm/rF /F2v1/40rWTRvK+Ptn365bn6BhBx9eT7C4Fo9TPCnsm1PbjsmAu/Fn4tbM3JZ0ef5Oa6+Ox6vVZK akQihcKg7c5nB0Z1rDo2Dl+UNVKkxURS+P6sWqW1quIANxceaye20fH9NP4HAuFy+LnZGwQMjNt8 HVhBs0FieHIimM4T28PVwK92BrTmtH1CxZEGD3gT/rXtNDLDI/Dav0D4WSqBcFrhMt4KfTGzXSaX q1QeCpGyB7PdGeiRyXMmpEHK6GpCIlO8A/o9W1E2+8PL8PbRUX9bDu+SuolAdmBMQVQykk35hKZ9 c58KdCjJr0lHLMK0huxRq4ZH43fk6JGmY3ie+73vUDK93KEMwIhQZexJ+WJiYFvYP17MTB4UXZ37 55GpTdvb4L/WPxMAiBCgenN0xqDopZlfZSbvWHcJ7MbEdnlG0pQpcZFhhhEVxTuuLq16atq+PHg6 P+OpcluEzS9r1viNJ56txDZ5Fsmp7h7Mdg6/fskYx9SFw3h4G/4KPGBCBBt16u52phjXPq8gzb/p 4reLRDJfpVLqr5ORpLQXfju+myjoHomapXheO+B/wtp/07EJNugoqZTyqxwGb8BGCWB9OB9/r2yb CdCgwIvVGRtJIOEZ7jfnf/XReDj3U4cIQWLDD3BD2r/qp5JX2+DrcA4Zy5L/REq2tV+kvehq5IMG 4NNmNOLbk/19fNDa/ElOIF52vz2pMgp0NIrVmoJsnXEx1or1ge9PdtYddk8D1V+WjpZkh58kh+Zk zt4wJgu8vfR9Gbfxy2gwedPUM5HBj7RMpjJA1LiRi+1RcMbPEyMKx5tNRbk1oCxakR6tXHHsojZs f3po4AGsh4L287SVrkKnSLhD6emJ71DKVN3vWsV0cQfCHUK+lIrfbmJtfWNZXmw/fULkqCMR/5gF 13w5fVnDZgD2Vk6i5NYbz+c+M33ypvT421mwvuz5v4PE7z6fU8LfND1Pt3Zy3gnCk2FoT0DRIi9P zo8T9+C8q60AuSAXQcEaTaldSYEC/cvChXfgoV98ZrW8M6nwo42n9tnytYMiEldOHr9rM/UV+cJv jcvqaxZ8AcZ+29j2C2jKDTXtqL0AoXMdSbwMgrAvEYu9QVCQPNCb4+Ti7rz37vdI+SRQgCwaF7qh 6BCHP50am3cm/uzQmieazzwxxfeRzSu+ODK37CqbaMv8vgS0RRnXZyedK6wbkbKi6k8LKm8vmv/i E/snDAoNnZ4cB49izaCoTW1A0tG6blRq7nWjkuOsyIeY1KY4q7AYasMj/Qc94284Zz7bcqdlp7nB aJ429p1sNmGnbEftrrYsqmnX25+MSMKz2FBsbuQ58f3sconEg6Z73q/kt87fsESO00oBuhEmAdmd w8dTb4OE25+By3QxHObIJ1X7YQMC3xHgkmvkEiRVncCN99KxMi+Rqis3nuuQHYewh2DsGEjQpoyy /PyVo4b7L4RwqWrhG4tW3z1LF7eUD4ooGPlkySbHFnLd+MQlZx0W4c4l1mA6z5E3odjfj+Y0znt4 6HQpXIhSUFicK6B1QlG2oGFz+4nK8l2rbx+ctbxtSOSjS7Oi+umtAx9dgq0a1GOLXbLwNPzoz2+X Lb5QmxH/bN7T0wqaEuOxZWOEcxVW0uU8h94Xc+gZhkLGTLGkXM9xas/uNzDNWIyc26ooAacr0GpA ZvkdYLnpO7+hoaRwT+1fP+xvW7xmYsGuteXrHH9nfllZ/0LVl/CtY++Bou3b1v4NKA8LkqaGu7Pn e7t3icRqxeKmhg85tW7B7bM/RWeW5NFVN+BRRz2C79vtcWgktv08dRWNZBG8QRC+eRn0IDcvneHD eevy6kXjtkkxA4KDCnPX2ROWVn0FN4+9Etx8LiRwev6dF+a/DxKpwrQDUaGpif2Nvt5heSOffGci riQf3plqNJgMj/2weSLOJGraL1IW5jih529b6mQyhY728gI61kPR87Ylhc+C65TidaG14JOhJp/P uGG+8Szr522LT7GgdO6asnqreesQTKLf7VjZzzfNR+fZKLuVkE7m7wY2giZOkZPp/W7vTLHYVZzM EyXP2nCDp1lLifDrU5wIVnEoGnsJ/gWCf4xyDB/6C1NIICIvcbl8lO1P9Lcr9JJ+KhUt15IUy/b3 Ed6XYlX+P2tXAtbUlbbvufdmD5CQQEhYQ4AAYY/sIiA7AiKioiIqUhUEES0iIiIqKi6lilq11FqL 1lpr+a3j1rq01lqHMtaxTn8eahm3WlvHtmodR8jpf+/NQlZInF8fTWof7vn2c873vudckfKLWE03 QFNGyMW8YzR1XYogUv0hxYQMJXnvwFHXe5vOb7rvSg/tPFQUhTkH+352gyHmexTt7ARilCPCJh2i h29SJaAXNw0eJzYtTMH6GZALnt6t2w+TybtSivaw7oNPyQrR+ucgvZCoPQFIUJJTAMb0dHDgSvl8 Ny4mBzSajzOdrkf8UFOaqNM/Uv1aJ2Jo9pNS/f9WV0TsAcxXF0D3wKqZn74yIT40e3JIoKMYdEl9 5017Py9br05i6sLY9k3uWPERQURwSRNZIwWakqnPqOMTVUaBKEnWlSuRyf7+LKDrz1MtcWtYSNTJ Wxl58pa86wGj5w5LQ/YAl+DjRpjQMAgugrSJkVJBmE8B/ZpNBJzzOvpFOUj720f/eh1+YqxVCBJJ oiVhrFAQzPIBriwZYA3xyTScMiu0Exke/uXzpMPr1wS+A8VH935/CvbATICeAKdhoa3a9X0F2yn6 R9lAFVqAJuszqkjdKJacGa2s9Jf+SeNhdcHbVfaoXNWLIQPQVh16YVGvCvYS+xtD2YNJ2RX/tewj SX5BxUN9VX1w0Ha583vVZ6UN5R5Lyh3NSnw5uQEDlVKkLTMHqIlqOoIy52AEIWobqALhTvAImn5E HFZTtgFe3b+t5wPA+M/ORhuVVG1KAmNUb6o6wPHrg5/cWZkc++s/wCKw+8651+r09cYo/h6ht6ed nAbsEJqdgd6EF6xi562Dj9EbwxLyqI3wvpdmGcqIXM8g5UwMzvAFwYhvsKGcmkuF1OfAyRtphALN xUPas+DW6EGff5OGA0kedyfs3Sl0dbOT0LAe0LApSuJq5+XC3wpKRtIR7Vly7/tMqEwjuUWVXacy WfDk+WpVNMUu6rmae2HbTCzURjMYVr1IZDRZ9YhaHq1UAp+oKL16bktNF+l29cT+lZj7yeuQqCPr w0fqO6gIcFcvnJjVCArhA3hd6HtjcJDYfNrBP23Nw1ULP3+zanaAyk59/r0Cyp4+MM7JXM28lSOX v8S8ZXAFEz609nPUnorXtQ5GSM+lcFR3U1JkYuz2HICX5G3f+AeMnzMQ9xtwTBy9N/v5tNzX1vaC Hbbm6DdZgJkcPb0mVhkqnlQ75+CPja+CjkLYf68mLmaUuKC27OjXddXGFlFQ/On/qrqSB/GH17cL ToDP4AxbPXrzxSFa0U19iaXEyiONlDhBkSYDCkSmMJAYo3pcdMz07ijNmf5oa7J2zTH47axgoZgb Xgh7PvwpnMbj0sVsoQN3MogsEchcmFwWM/7wiKl7BxS+2ATT1GyziT8crCj+7r3ZJNlsK6ye/bc3 X0Hv21q/cCT0z1jGNXoftVsfg0wmduzccT5cbiIqFivliUr9E5BkTEcZnaEbZfYMHeZFNYhJq1At To0domi6rof+rlHuh24fC/xAgf0ZFm3msTVZSUDcsNJflp0a5M8G0WWzNm1ant0KWHdvNq9b13zz Lvw3/Lf2O2A9+7anvrGxvufbZ7pvWP8z2Af3r1gbnbBpQnr1gzg+XTnZ2yPQP/UY5uy5aM0mvMn0 Oernpxo+Sf2NjBetnchTwFmklcYw7O0jnDHMTxLhZ2wlE+60lvYCbDQMreaSa+OFC5tdzsrmTlv7 ZXnxsvLDb5QUwA9sscY5xVFiIdhzXLk1O6l12Vf3G6smZaF7bbTAUKSQ/aVIou4RNhjrSqNF2QkE gR5RgcY20J6406hueOLO1gChFV2a/Nbe6ZOqitZ3TIyvKwoLGR2Wv3DMFhvMQOsYENa9tqHxbz/V l7aCZ6qSrXk5re/kjdlO49pmiiFLOGss4ZvEG0tjs6PcAYhyFIuNraG1yNA5PL2IcNLkjsBWi2xR HUdHx8x+LeBUIbz7bdXMxgXvnaqc0809OmNUEPOsDYZB76zPSH53FITr67rvrqrasKK75J+pcaVY zUvniICYA1IQWZJDjPpsXpAjhnkJg7z0jWJwNs/wCjNbLeHrLEua29PT3dkJ8OI+W0KicSf91Zp2 lRztbW8ECJj80hpziHkvnpxFUBemT5gL18fF8Mze0HVqtip3Ht4CwTev1125ApS9NuiGu8MTqptg TzO8j/+sYoN69NxLa8dHApBkRHgyCuNyPRwDPbR+HDoApj30T97rZqOGWNHiw8tSx1yrq57aTewu bNDw8q7D4zNeVbWiSW3tqi+walT40jWN5K+GEut3oqaNFjKZYQiP5+MS5mNc00yaTuozfbY6FUcu VM5sqDj0+YIS4u8zp86cskXtvo3LL99pqtpY/+W9pqpdsBt2g0gQie562SqmX8+FHE4U5uZmrp47 aVvL5m65s7V6YRun73mnaELN9A27xnV3J1YVh4XEBGUvD7MleQOa21fV9fy0at4WWIDvh/3w6tYJ ea/tHZeAjv3v8xh3QUzzGDCoCFeSh1dtTmQl9/TS7ospkzKu2uLs3s/7oBtW3bs+OhhFbVNrSCs5 kohMIf2bI3J0TPLDsFH+SaPMrVmMYUxzZwJt1bvgrHTZRpm0KG9PfPjs6fvhrZzTfq/v9ZWWZr8R HTazaCuwh09tWc28iNlYHC1xEQkDU+Jmt2Sl9aVvq4oViyRO/smx85emJ6HIS3vfCQkm9gLEvBXH 4HJD1OcEvZ1DvIcYzkOrGzN3h0famgW4oq9vSUoUa0HGxnhlR0eHLdFfB+/shPJG9g5OcuxiFNn5 G9j60tWPMVTh+ThuXOGBTN1alWsu0rV5qYKvAXX95XDN3G5QCxyTeS4SrsA1bGynLeruH1CAuXAP fkMV+Txmztywpadf4PjLVjy2ZoVCZEQMl80OQjgc4+WJ4ZWLmnuYeVJbVUeLQQcI3bH+7F5Czsbv Dl2cMwOud7XJz4f3wNvw9LuteMDgmoYl34FTKO9l64C6uhGr1TAGm+2D0ek+HBTVFjnj1apeh9bm nN+nOgIuwXi0dPAiaLNJ2y54oQs2dOE3QNnLaski9vTkeV8n55AKtneFM5tJxzor6Sy0s5IVP0GB uIQqiN+hoRRZTHf/uc069qqOgosw4SaYbIuC07rgmS7VNUK/5pfVzxuJQwpIL2ZwRKJ4B3v7eE8M C5XFh5rzov4NVHp9X70ri21WvO96eM/uiTmz8tf87g1vg/vt4uCZBfMHN6449NqdKyvnwRxb5jd5 5JN1Dd8+XjEPZB5R1XTNUSo+fR9IQMqH7TXFqOilKzmGuKoRJcBD3Px5uBvPuBtrcxGr7Ku2KZIH FLYHsZ4GHkgUkodMTGK7smkSPk/E40hO/0n8SmIDNq0ep3nQ2K7qf3ACyDJFSoVndIXC00PkxGGX c0A+FedUmJOBruAjSvIPn6nVXn0huuYOfEftDfhKx2iBrQsbesJFujPfU8p96+kbDt4SRxf8GMjf 4h3ikmm//XdbLFY2kI9Wgu05K9dHqNagtaO3L8mEzzaqtuNdql1b/w1y4tAKUPfScxxXr+bbkzXf zs58zecLGWDo9n0Sara15teCT8HJp8D15+fRR27cuPHwdoBtE/vRR7mqU2gAqurFQ+He40dR9ktH EanxdFLnfFehMDUQw2KCUmPMrfzM8Q9E/w+rv/3XlQdfiQqJCl6R/u345FW1V2BL0VVJdvLUB5Gh G5O7c5KXLTwB8uDnttSMougvwwJTCxQ+AU6jZ45f/ZfSaSA1sTou4vDkQN8QUeKM/HV7Z04BOS9b XxmIJxKNeCcJhEEVTK8KIROno+UM+oFKRqx69tCfPMgjI7ZPHbCtF+4A39sSFgXHB/px6XHQ+tKx QM6KE5DZSQmuwK0CpQHEkc0/Vsmiszk0Gkp3orMc/+d/UBqyPCS9wjuuglj1SsudnMudONxyDptV zkZBOYpM1NYV6rdCXVtQpnI9U4FGUH+pe+bq+691PXNHw7ct2Gow+o5f4OAcbrirl3sxfHH3RiFX 4MhyVnKKAa+Y/OrCsBM7TIPhtthTRlSbhHRQ+uMnqk+JCnNt/JZN8WB2AqpUnc3e0BwfPuVYMRoP Tr2EteMoazMRLySJnIGUTokszAlhGd4k40TMwWRKWSoumEjL5XKiM4YORREWJPYaPKkX3pSybM2a 6Z7mVV50jRMhjxovdd9eBu9MyqqZmpPiT2de48H98B/os71rmiqkIuwe9VPPDXRjkt9VuDJP7uXr nRnJ4EX+vjYrUeE3JlNZtRVUAgX17kt1PImQcMT+uA/Xjait2nNjFrQBQ6eN1HqQ6AHZOxHhiHkN 0LVe5TNauqtmNyz4eHfpZI+rklUnTrwqofdZcsjgnfbxaa81/u1hQ8WUnNXKE0AJQo/oRT8P8Vfv 7KPdA/g0dzu+u+GKwKhRb8kvQMY31MVJiTdLQv2DJ4aHJYSkKIMV8y0otOCWX0Z84tvFUxZNb+0Y 34e+gH2Zcu/xeRvfyImV+2HvWFIMXoHcdD/P5oZrv60uf71BP6PpxCohktQpSODDQAQ0hsBAJ6ma vWhJE73zWOSt6mpAR46fgHuYkaE5Bz60oMf+tZXvfrm4bFX1eeAz5Wt5y4LIIIBVL4hRojst+gYP +HV1Rduqv/5aXw7YUfsnptZo4ugbKo4URBxJuRJr4kjmxXeSOVEaRsoiRxGuwv40EPS5TtDIokL4 qLPz1tWrZUkyel/Lak20/0D+/x800b66BR5iw6c176p80O/fLV3CRAwiXEZI5s51tUIyKaAavNEC JbAY0z/8icCb/f0VPc/gFcuRrMqBO9H7AziQ1cL5qGHGBZNnlbgBI8sj0FxTpYxwIr5oATrCVmyd ZM+GbLWg75ZfTERg7d2CtIopE1KChxHu6WAzOnasv6xVdQZtbh03Jiok02jupJhB/kIvJi5EmEKD iKTuSOXzLK29gRGJD0eOdh3tslDVmZcWla5ccOTL6jlNlXgivAp7iJQPRzss5hGzran7p5ULXlvZ /VNTpUbmbzSVgbqpTuEezee640aVYYhTq04QS8JTFtdriTKwDo8oRWiOQhEfnD4q1F80xzhOV7eQ MdnReytzx97Z0yuLNu+cijOz/Txyclrfyo0PlsdjgxaVmTaQDo5vaV31zW/L5+w0jVlProsVMUuG RCQVKEqLMZtdO35cTO+txWctxwRkJsQtvznYDO7fMJQkkZAkxLq8lhquQAlLM5yNDlAMN1u8kgt/ OVickxzTklflKdmzOvBKPpCen5mXkrg5f5a7S9NS12FCWvqgML2iPiFSLvJwdQ6a35bdPzWrrnpM nK+jxN0lfNpGkwz0tsq6DKpQqcOZpNlHkiXLkgYgqX/PnowxzXMLWYr86t7eYazdGfpbJ6RviI1g d7LqwdVO/VUHmX8UW8qbyD9EiBvlH0nqVDqLLE4JUqAkFmpKvAk+GO0aKHAPTLEg7Xb4I2zpnw+q 5j9F+36b9/m6A5ijcQEGTI3AVwfEoIw8dW24OqJ4It5OUhbDZHVEnWKly2SWcg3jS73UZAsplrwf LKqd2bnnvHlRD4AtIOrAzo/fgM/wS3D87zXFtBZLCx94cEB84gDwAtl716ojOU4vpyRWeV1KnSGn /qh9rc5yUqQ76pnnDnpy8DhWpNoDrsBodJrO06aGI8T5HNRcAOEGESi1QRalviRm8ubR4OnfwWUY i04eJuBaB8Ro6Gcg0mDOjrNp7eeleXlLRLRISTbcDFdbFqfwR4HrGo7DP9pb9rfe7J8nPARR4MnP Ti3flpdRkrvyctgwSZ11pnTq+Q/gLXjyyLajb6PvnNtdkLO2/tqvy8seG3jW1WprEoXSYvaufvpU I4uFsNJ58HtizBjKdlZ5EEMZMrJHg5G+xJTkHkpAHsBTkhslywJhE+C+1+MkPDsPd2YrfOsSLuS5 iri7AN7JSnMEAL9O/56MROJHnumkZQMWGaFwq6oJPilNWbfWD20cSEA7wNyUhoWjVCXoYTkID8h7 K19VqpfJ5BqU4tN6CTwZNAFitAYlufvD5TFJRxdIyUk2kifFJt/47lb3YfMqbXm4T/kMoPDWiqQY mID3HOrC5lq0+CEiZOWqXjRHPmNCJZhmkD8phPXDrJqVUNNZyU/OMHOwb5iZ6fRceOjGq7Onjz+e tiPYr39OSryovwi0PKwvK5pwJm9DkDxOWbg3fJhAbgCJi2ZseXNqXrxzSIg8c39yTEkKPLF0zr43 CnPjXRQKeXqmv+yCJqbVuUmeaHezLr6cqBpBSn9HXanuGEj/22A4WPAYLNZbPhuYmlg+N30xcBOX GeRULDF+kHU5pY5vTIqR/UgZKifPRlBnDDWhbjHAP+yfHsy2d3GfAW/P5AhEuL2cW/joPhCX0O0k HCFL6MCZA5yHyclC1SH4derJT9AS1dGs1W+4Ad8ZaN7AGHS+YtLhibFbF6epOhAcqf2zibGZvpNi xwUiIWQnLciHy1WgYnGgXGGCkVvHjiPnCAFfyke3pAF/MNn+UxZt5om1WcnAfdGmANm4tKAANoif N3PLloZxAw8ZoucPUult2P3nsBfuXUlR2jIW/RLnyFBOlnkG+acex5w9F7dswaOeP6Bf/08NvY2c Z7Vyi8m3kJBSezLs7T2cMcxd4uFuPVtNIyit9rLryosXt4jPec+fvu6rihnLKz7YPWvigKtWuAuK LmKbeuWEsj0reWP9Xx+sXDgpG52sE2jIjtRbUah3s3JlrjSat51AIPXwltrEHdNJNfvypHfenjG5 euqGtyeOri8KDx0TNmHRmIFbGqloWwZY9a9vXHn154bSjeCFamp7fu7Gd/PGbMf7zUjmrJHMN4kn o7HZ3u4AeDuKxcbSWcXl0km4TXUUJMTMaQv4pBD2/2PhrJVVh84sLOux6yqJDGKolBpB0TutGSmd SjjYWtfz46rq1saekrvp8XOwIHMeFVBzlizJQazmVrk4YphI6CKyjlulk0zhLEuaf/VqT2cnYM4Y aNeabM0u+qtLdqq80R92NgEUcMxJwEEcSCmSWKg9k8d34PIcLHCddIO9C2+C8P4b9d3dIHrgjGYs nA2Pq/4XvLUG/oj/oUJBI7rZ3Gh88p1miPAkearYydHZaXjukWZEbErNR8vSEq/X10ztUd3TDti9 58j4zFrVGjS9rV11DqsD3WbiwIGyL/n2T667kMl0Q3g8Vxc3VyuZQFoBcPB51azGBYcvVpJ/nz1z dkjt/s0NX91btXBTw2XC17vgZXgZxIJYdLzZbCElkZGySIUcjhcmkXi6eXlay8wh9to6g9ROe2v/ tILFM1p35/T0JC0sDg/tWjGolYkWuWbH6rqrvzSXt8E8/Cjsgz3tE8e3EcXpiU4qM/7H7RFT/+tz ZHQBEMn9ZGnPpZQpGQOdWjPc/OImdMHq+lqjg8FpM6MEEKuKcFLzULFQGOKPYcGBIcFWIRdmWSta SSaf816e6evp4zU996145ZziTvjPvDPybft8vcuyd8eEz566DfAG5mnr2mDMZk+xX7TERSwMTI0r XZ+VdjN9e3WsROTqFJAcW74sPQmcNCO7E1V3iRx1ZXC5EjWPROws0bspb3geiS6Kgm7erE2JYlWl bR49qqND5aj1VyO8tQtKG9lvcJLjlqD0XY9B+lDuDMUPYyh7+DhunD0mvA7dsC2g/lY5bJrfDeqA KNVBLLZz9AxOVbnqhh/wBBVwJ35LFfoi+pUy5boPBrGfzcQvWzM+4UURl812RjgcfSHM8izIE0q6 CTIc7APhO1vP74NPYUPvIbABrh48rZPiSAf8JzxxYCOuHGwAV8Cn4LLFaCWqOp/BZvMwOp3HQVFt 0A7HedBGTKfqILVRmz/4CWTqxj4Gzx2DdcfwW0BsrmqxEDtCd0JvB2JEexaK2rHt7UzyVsc90I51 XHWI3I31q57rDXTqmKrb0jheiA/iT2rnx3Fy8nWwt/d1xzAfqa+POe3McQEMmABaMX64EX71TRLh b3niDfvBw3bx9F/hpsb3X7/b3TT/xTltCssi/1jf8N0fK+aD7KOqBccunjsM3EH6R9sXl4AbZjxB 3nTDoTB5OsJkMXAmwxiT1wVgdf/gPb1gs6S9G6U/+URPROrt5S71MkH5ZUMot7P61ZvOAhKO0g5F L7yMu0T7HxzYxwqQCMXoCTBth/MYcZZgz0CdngToetD5eL+qHG3zOf5q/iZ4T9VARH/TNHgRjJ2A tuiJNxT99po6QESBK4+oA4iDg34RMECc6UaYsy4DZoPPwJnMpIXA/eGL6K4bN3of3R0sHioDhxsm jfNWHUNDUdV1PBbuOdEFPjNnKQUSiihJScJdhcKwQAwLDQoLtaqaWsCBtaFy8EbE+/OiQqKDV6b9 b35y89KvYXPRNcm45GkPo0I3je3JS65fdBJMHIjQxkxx7JWwwNTCIJ8A0ehZeWtPzpkO0pNr4iKO TA70DRONmZW/ft/MqQAxpwODymXC23Yog07nMLkcXT2N0ANjdUEMt9yE7bBQZ6wTAzdwxYmXiiRM 915PEtEUqPFMzQEgXSQd+wP+PpeWIFE6zIK/PeorFshdQhzLgFNZvJgl4tnNedGmH1CFHqADdhap DhJxdGYZ/ALkzkGzVQfhrJj3l41HC/TEHJKSSeyo/Ekp3TlyFsZBWByzmCIpEVDjh/ro4RB22Jy+ tKVl2uBkUh7U/jpHGRDZtnsOvDU5a/GJEjrzOg/uhX9HB/etaaryEmF7nj/A5yvzAqTbIhmOkU9a shPbMpVV7WARCCbflq3LbvLmNh5K3m2l2fWRL1S2jPzVkqPTOF4LStb1VJc2Vv5lT9kUj2uS1adO 1UroO4kxk3eMT2tb+c2/VlROyVmrPAEigfKovs/sEUdivU5YQ8oXOGB8jgPfCNEz3sqYw+7Wx8wv DA9PCElThigGqfKOP7vrnxGf+M6MopriTW8W/IDeg99tHT9+0+7c+AA/bBHhFhFkpvt5rm749vGa irYGPYnoxIwnJSVyYfEYCIvGMDz9psbjKEksYG+n4Q7WqLDc9wa+pIwT0FJ14KslrzTXXAD+U67K 1y+ICkKx6qq4UWjO8wfYrIAnqxdsbf76t4YKwI3qnJS2GDHwB3mrpx1KN/aHKYJGeQL/rHgi/Png wTvXrs1NkpEOoLM58PclB1Qe6O0DryxmGjybun0WZRg9Ww8DU3t3LISw9/btqr89h5cpn7bDdvTX F/8GvnWwDA03lFdMPJOOOhk90yyORT0dffjDXb/YCEXdjxPTFkydkBJKjkArGKxHM5MDZK2q4+j6 TePGRAdnG9UQV9JDQjaXibMRJtscPkW5yASL6jrWpZKTA2ObL9eUNVV9+NWislVVeArshldANIhE JxLDl29d1fNzU+XrTT0Pmqv0o5WHCNXRKhLI+FwBzjfskxmjTECruwGitN4zWhGaG6SID8kYFeov HnxEicPuu5PT/k5pceXULbun447j5B65ORvfzhsdIh+NfUTIdGkgFpxq27T6748byt5ATPzIQXEj m+vhQurYuLYsPyem707NRcrE88bEregfrAe/fGfwLAqbNI03K5AdSnf1SA/z4YNDM3JTYtfnVntK OtYo/joe+H4+a3xq0mv5pe5iP1nMMjcqkpp+mZS+YPmYSLnISyIKqtiafWtq9rJFiXG+TmJ3l/Ag sWizaXTZm2hqFqOhJMEu3u7oyExqnjeJqRhf09dHZQQ99PFBiGyIU7IPshrA9YNGkUXtiuyJyELY uFFkaZAXoE4TNcrSDH9MIKYIqXwwnNJdDG/B5jvloGb+c/TY4+KrO3ahT4lBWQMcUA7fMJoHRNRY HDsWw2Qe0KIn1GB6SImoEyxZOutAh6qEHA50gW0g5r1df9kNn+BX4Lgni2fQUtXDnXoPyEDe2+tM Y4VuYkE9vEOd82MGP8Bmq9pBD1SisymrEU+8BGovAqXh8+wsPE+p/7Scwa6n4K8wCi3WPgqNugii DZ/kZ3HmGR53UA+xJHDDihPw8Y51nRtv3Z7rfEgFCSGyUxe052WW5DVdCaPCbf8nZdM++xD+AI8f be/ajx668GZBTkv9t4+Xv/LUUBaGWa2IZFLHN/35c60ihj/nbTY+pdr+qEH3P1rT/VfL/whu3VOI 8sKlW+GWHlzIdxfb7QW8w25RQgDw79WjqebCVtbDXehOwn4nQW1G0+JoVQp66dUngRM6C1UZRnOY mIwtLovDoLEQozlM3c9XR5Zh737sd713etQ9LdD/aL/yOaDDm43JMTAWv3q4C5NqvBei+js6UV4y oQrMNNA/lOxZm1QPGzrwamMkzYXv/mNp6fQJJ9J3hvjdLkuNF90qAq2Plr8yNf9s3kaFf5xy0jtq l34PkmtKtrw1bXy8KCxEntmZHDM7HR5fNmf/7km5o8WBQfKMLH/ZRUMvccgbf029pO6iqyWoGwwA lc9Ardrwlwf+jocYPoPE75xNIwSjazvhmK4PLtC4nHoyPe/+bHc3R2evUnijFI1xDKFNe/YU+Mzm +zsxnfncuUCm8XXb2Z5jf0frVDu4cAVY5IPOI8y+uhp4RL1Vm6VaTexQqv+sZ2yjd1Bd7Tgkjzqp GTA6zYfLHY2KxeFxo8MNtgbqC6Wt7G1TDTn1xdNkO4P0DY1yIlVlKceR07gVvW8A67KJX3Uvnqg/ 8ScD8kVx0bExi/Demtjo6NiRe+KjszOWv3iyPCOb+KTZEZ+pxE8PPWVRDPleJ601xMQMlkzaQuEW GsOwtw91JrbSwaE+ZmxhuWNupfq02suSJm1HveUK2VE/smvWRBA8kspmO+3FI6up53WyBx+uPucU 6qUc7UqjKe0EAv9wpb8ZTYfvxFurrUGnftlUTacePBlBW8sd/Hs2aeys0ViRJCA1prHZSncAlI5i sbHWepoP3+G3VvNtqqPoaAME4P3TJALw0czIIAaWNoIBLCEDEbbEtQCRI/Hk+619nQMi1KBBgCOG ecgDPBAj0GAouo1xA2v1NcAVwIGRHGyEN/Bt0YuDeKp7Gu72UtSJKQ109pQ661+vZYRGWKuCPloB vh5BA1MUY5stOvCJPUEs+W4SmVAehnG5br5yN12P1txb1ckumZWK6IMg2L9H0sMEHLk2sh5DGeZA sTgTyZoSIAmOEjKZwQiP560I9jZTUyxhJ1bqZYKtjOwkC5jLJBvrpiuxSqHuNQj2CI8TcjjhmETi FxruZ0bH4TAZa/23VIvZ7MrVYTZo90gpZRHL+Y8V2prPLtwJMZtdBliPtemlwYImZ4ITI7lNHyM6 b5P0AUgCMoH0VHxQYqZYKEz0x7BRCYmjLMzl1mFI1mpIYkwZvp4y6bS8DhJjehf2qzEm6StZe6Ip jMkB1I8001uBPZ21ySZOlFWIeUDuohjF4HIVamDKK0ChOwWlBaY0c79ZbMraLDXErjCfkeLWFNPK saUCMQxrKR/HzdRSU8jLWm3WgWW35sOmcgNILAULGlErM1DZb7boxdboRcQyqReXzZYjHI6+bvpr FhMkzdrleIQp0ob+dUTlTBC4npeoMcSqjKgxgQw2m9j70KUcFNWWGjOrMn2Eztp81EPwcMmIOg0h e562zOQsao1JYr5cT39CD08WigrdPYXm5gYd7metBlpcEGdbIb4GL7RJei9kFJJJeiJCFpXIcXKK crC3j3LHMMWoKIUFT4yEJgqsVU6HNq57bIo2fjPSHDEMCNlniwUwagVDzHdOdDGwQ8Te9iKxvfF8 Z4PP8Op+dKRFlwbbtMlTbkgYkkrKGeIZAfyQiHh5WITcjJyWkU8rFbCMjIJWK/QaCTG1Qmm9Kmiv mb2I/CJnLx4xeyEODvpTl0EVNIeoWlsJzSCu6MKRJy8zSOxlW/xKrp4nkvolhCRnuwqFyYEYFpWY HGXtisUCTmttEg6D44Zs1uG4IHWkdLQO36XbYhkGte4mIl7MdvcjoV9HV3fHIehXV1Mp9NfqokOh w/jcER2rQY3//3N0OEzZ2tpJ//gZiTmPdtXDnEP5epjzO9Zk6khQtE26MwntY6i7oR2jWZgjwnI0 j1Gb0dAKzBotX0rokVX34ve6LOLLUsC5zlH6R76uRq9rTmrR62s69Hpfdkb9i9/rCeHTl9MciE/V OItY9lDHhMSyvFguCEvHYDYnr0Vsm76BFDN7qVZMnGEe5u6ghFuePiScjznQG9Org97qE5/hLjIH zIXjYHg/FX/EZqQ5DHxDzPzCiDA1Bo5KtJKrDY09vuOfEZ+0r6SoZsbGjoKbhmj4UkLuIfmJT/jC GBvXSk5HJMT6iDwZyPNiIDwaw/BGDg02bk7iYbHyvIOg18jWvhZR8wJjcw+mmMXQ9Ttn9sfdWc4j xYEppj4UAepP7NPiAg28Pi9RRjp++YvHGknsiZSC/2LDx3pgu4EUJJ+fyOcRpNBD3w3jL6sOH6MP xHcYe0211BCW1x87gEQrWL4jjG0WpVdLoU3WrDrw0w93/eLC9QD7DuPkhJFm4HujuYA6N+bDd2Pi fIRpyPnQ4vfmRDTG80HXx11YnKGd0A3mkf2pxoEDc4xx/qEukY86Q+USJZ8rwfkSZFic35I1DXD/ DYa4P4aoxdWJzfj+bk77vtLiyqLXdhkzAP5ikqOHjPkAhpHmyhKO4G09foBxpcN6NFSBz02LG8we Ig4YjJpAjBo4cpZZyyQwkeknA1LBm2sDu82QCkxrcakRxSDrNkUxiPcZohgYZ4rHiLYzyzgwzlf0 /O0339QnH5jWiwdDVATmcpKKYJQlMjIGPYgsQfi4UZZouQjmi4gRNwFNNZxxMSdTlsILMsQeaxYI 9mSIPRzggvlwl9G6gDqZ6uHozmKYrAt0nAUzQgnMcBiwGsPacsSUzJBtTqpT7wFvitpgHPXOI3pO j+mgq2yPNeuq2MEj2Cwd6aHD3MhfqCkQ+uO6Wzmu0mhU7UyXSZIjumEkWmx+SDSSpErojxhl9bpm eOaEyQKnOnBDg4ZE8U+zJArT9GrRp1S8g76nT6nQl1lklZWIcmQ832Do8+fmDWPw/Air8nZ4JgZ9 g35FJuzxM9y2ZxLgh/ioSRmObhLuXsDXkDL6zEmlmgs3MH44gO4k/HYC1GY2vhpJUjQWPw2c8O4k VSZitJYKIHPJjefKoPEQo7WUhqNhNpPMcDawdEOz9ZmSN+RmoytYdR0tkJcUVIESw3pOnvsPGrGe 28DtMFnPjDagedx6xQLNwzTozoGxQ6QPP5L0Mcsc6UNfG/KEsMvI8aHmgJjk6BItHcSMyy8PXMcN 9x3kjTp+I8f6cFwRYwlo2Xq0ESxaQxvxnaVHGzEXjW2f9nz8DUkicYCrQKUcnUc4vLkGuEd31Gar 1pDRGPvnIGMRPRzxQvyJ/S6x25X7ylyc7bkBUin1Rmx1wyIigmRn07QvPRENvfSE3PDqrqID5EtE CcXkSjm1K6ZL4ONiph2bKaXjR0B2vi8ulTHzwbhP2VLcgc140ZvTA9wBD/BuZty+7OkiFQU64Ni+ rEMrc+PPNE8arKZeZ1KZDJoKseD/dGOHwbHIj2pyoTf0oUf+pxt8f+7eX0AI3FxNWH8Ceof+MfVW L4qfKeaxMCYhAEbmFNVeoPatajBcatRZE2gvzqO27ejv/7r0iF56BBX74qV9JTifwxJjHSAgn+0h ZtrbMQvp4VuJnD67dfA4OAVcrzlCHvjNaXZiCLwP08mXeSUdCZwwLhCQ79/twxdivvR+DaOMRl4q o4sJjIIxMHAutyAVzc4rSKX3q9rQGvIPgiOJf47F/bAA3XvWCM8EO3A4voi9vbuTr8npT+rtaiIb 364238zb1V77vP//2PsOwKiqtO1z7pQ0IoSQhBCEEEiiSEkIARSQGGpC2iSZmknvJKQQQgih9y5F AbGxu1aWVVFk7WtlF123KaDLt2tZ+fWz7Oeiq67A8D/ve+9MEolr/f3x25uHO3PLKe95+zkzzLnu C7urKSW0u9pHyj/k2+rmaluf8pXsvrmaMBpeVd73e9L80jei+xvuCmdSvh7d5sAv7gr3pYQblYnn HzI9a7Zp/7+ltxiUEtw7UOllVAC/IINBTEk6cuWVtD22+t8yITn+xpf2bmhIeiHZXw72vGFY4T0z 285MNj7z+QLP++ZbvGe0e7is8JtmPoHcrtcDweYIs9D23A7h7KlzJ3h1y2vvbvB832RT97S+cfcF e1qbhnimeu6zOy9NGbju3XelkI9Lcfiwp13dDJs8+2njFL948x4eof9Bs7ZvuUw2mWJDTH7xnfta G6fIyOduG50sI8ehnvGYYSbq9dHqKUa1XmyyKQSHX/y5e5RcOownDmy55tzCA1tTqS/F4Rfvl8W7 W19yyF/2Nkvh3Zcd9QBpih0XmzwsPtYvvsve1TOz5VTP2c2eXyqf7ZOB8fKld2Tg2fdupW2u3ak8 yzktR4KaR9QdrQ9F+vXt4+drWd3LmlwsR50QGRvWp/NX6KA8fvGx0Zn7eLvqllUXbldtWuOZ9Qd1 w+v2DXvX/VYR5955+/eet2jD64GhtOF1M8tvO1NAu78Hend/x4jUQ/rF+/arltsTlDds544kKIlV 58wjjYrnRa6/k+sHoL7/F+pzbXWTarlzjHLSdu6F0croLfISrvmSTPVLNa+Cpw68P3wwVWVN9P3C nm9BOSQCsomI824KFmGkjxNN+b6tpt+rVreafuJot62mZar079y5OmsN7VwtW0afu5F2rpZmGbZ9 d/rVlcc8d3vO8L7Up43tPBID6YVXn2gMtAmXsV0maXSfPr+Hy12Kcv3UciYZYgo3hUdAA2RI7LDx ycNiY5Nxzzg0zBjBLRhGhsvIPXNob+lfGcYrUb08/+i6t/QVfzFMrEEPYh9vU/3EUNkqU2Ij5JCR 4296z/OiJ/3SwEvbSjB5YZ1ZoekMZQERpr59TJ06o22BGg+1jE+GBGJDvK7GL77Ofehh2lW6j/Ki ci7Z1OQZlGXZMitxMhTF3/PmssaqxsOnZOALuSc3SfO5d4s8Hz/B21ELltUJyOq0GIkx99d4Yxjm +6qln29HYwo5Rm+f48d7lxb6mA533zn69ne67xw99tKM+kLaOVqekMbO7aizph76yRkZcP3S6PPi cs8Ht9loO+qMoxnX3LbzLU+2YP2rATdGd/MC0Fsgwi9e3U9a1oyUv5aBsrfnn/K50SzBCtQZijmW /8FeXSQYoUkQzIuLDaNLyWeaDJX/WfD8wwWelifU3aFPeXZP++SOGtod+qeeFmWcSfnkJqVa2iIM wUHGS5uny1CZG+T5PMpvwOCIzOShnjOeuyJM/Yfco3hoF+kTysemZvMx3kW6z4P+Mea4cLMqRpKj MUSNGLFxQ5PHJfk+OgkND9M+UDF0LkAaU750J+i+m3w7QZsdNZ41X9hW2uPQtpX23OzdVhrcOaac MDWa72f9DvdydEw3m/QbxkkffbIPOo3GL9kAWjnRddfoU/Wy8ddzNuy/0XP+0LxS0uRjSiRix/38 7c9LDvVVBgQpnX41TMLmk7VuwvrFmrz7+UaH9TM+pazqutnzh/KQRdvs2bBlyady4odRDb+8YI/o vWqfL2ijo2/oRw+M6zuw03p84+tM870fZsWM1yJ2rHJ69FDfzs4Ln2lr+lTb2XnEZbyzs/KG8qbh S7eGzjheShpoaMXI94gw+L7gIGIy9c+7S8eHwXCTTckRYVrfiQeCb9/duaWzoXVizIRlgy/9a+zJ hz97+EDs/ui4auf+LLYFxY1Wj7Ev91MlF6Akx8bDF4XFSpPtC1s4K275lOcj3uTZ89wnT3qi1Dbu An+OYYbb64GggPAAbzyP9zEiHgFWVUKQabL1uGOzydy5vbNUvNs7q/x/hvnfW/39Kv8+wr/rL7J4 96rvmil15krxccpNvFPz0uM979Rsvn//3vN/appz39ZPn6nnfZ7X+fZ5Th4UKZTzVco+U6PfEK/3 DApRgnzyJz7FdyEhVlvfR9dyw7m/mD7ssjfzrbfuOClDjpieqPvM82rXzZzHrdnGmzmzlJ9hXpI8 TF5LGovQYAojdpoau2zNbHimy6bNZIWGaNBpFPFdrXBcDx43NkL9ljt5W9XXGnM6d1wekdd9x+WB +bTjsiH6ze7bNh+Vla534ju3bfY8TbpwwvA383PmDSISWto3XNG0NJYU1GspRAF6JXU1mZ/rss3y vb282ywb13XuynxNXKZdhoUsujn25qspv3YoWX5TzMm+/HpwSnBiX4Ph8t7BvXpFDrm8y68TeP9/ Ok3JTcnj45KThyabhtLIk2P7dVsHCvcb2/0zMHNb98w5zpdev86Z835flm3q9fVycaEY/nz+Ib/L zArizjD479CoKH8zKTIRS5JSTZhySmNEchxZSpL6FhIbE8+hxeR3mW8P5cdkQN91hZ5g+RHtoZyK add0x96JU62XyscNbm035n/98YLdmD1vK0ERYZGDg+5iyxWHYf0rxOWQlskwSJNWSDdfEq8tY4R0 vVY9jvGOL9kcWXU+Q+R9XfZZrsidOGq2bdTw0P6enAv3WYadmyoNp/yOIy6rebbBl2cjW06O9Tvu nRuaMjBfPHcY80UxoNtvRERovzMSz7+5kSyuFJPFNWKmmC2yRZ6wiwJRKipFrZgrmkWraBfPpZQs GN5mnDe8Jb3KWJ3uMjrSbcb89KuHpxivGj4pfZQxIT3WOCx9iDE6vaK8PCppzJio8ePGRdXX1UU1 NTZGXVZaUhIVYjRGzU5P7x81cPDgqOysrKi83NyosL59o6ZNnXpF1BWiy4ahXY+kbl9E6rHE10OP 3wbE5CkpLDYpbCgdBlyF0pFEt+nLjxJPaVolvddUfGgsTbm0Q9JXJumgB7AZtQ6Vo/NQnBtwfNkP bOQkd8gb9u/3/HX//seT8TejAy/ytf2esfs9N9AN84HpHePOiQPyxf30r2oc/XWcm37ggEGMO/fe /v1y6P79j+Fej987PIT2qIJniFrw8z7JHcojB84OpqaVftSNaXpyx2JulZpDH58/wkQYxIEDZ19Q qWH6umhQ4LfQoKMpZdCgoHmBLUFVgdWuIChQYH4QFCjoqsBJQaMCE2KDoD+B0UFfqj+9AgOjRFDQ d9Whr9SjHlSnuxZd+J3LH0iLevx1lL9/jyp0wbc7t3+fCoRI1/kbLdrvxCBDj9d+q2K8mAgNmi7S RKawCCs0qFiUi2pRJxpFi/hjSlXTsGZzfeBcc0lgab6SOy3HnKVMGHaVeWzgOPNlgcMHK4OmRZkH KEWFhWEjR4wIS0xICKuqrAybU1sbFlPgcoX5BQaGGczmsCBFCZs+bVrfsPDIyLC0WbPCMjMywnr3 6hV29eTJsWGxX1eHvrsedflma+wPpEHdfttm8veoOb7v0P7t/5HGBKi/QcVeJ1b7rSjyOlPEVJ/X cYrCLl4HHqchptE8J6bOXBRTnKvkpGaZM5RxMRPMY2LGmuNiLrtUGZgaae6vuAsKQq8YPjx09KhR ofA+oTXV1aHRTocjFNoSGqAooVNTU/uE9ouICJ05Y0Yo3E9ocGBg6KSJE4eGDv1hPI7v+8M/mJ54 v3/sGfm9Kon6TeXvV0eifDpi0n6FKcwXm8izeGMTeRZvbFI9S6PoEHeSZ6noX1lbsq10WX6tdday GROm1aYuG9F/VO1l24YvG1g7KHRZ3wm9ay9ZlmuxBAyJjg6IHTYswOV0BsDTBIQjCAVcv21bQFNt bcAdy5YFXDlhgjkgMDg4YPKkSQHXpKQEGIQIGJOYGBkQ+YN5ltAfSEskJVNJoTi8CZXZL/bLvqua dMGnfNH7vzfdOrPovJi6X4r3PA95TrwwuFdoSECkf0RIkLHonktapw4dHBeddsWt4xKL8q/1vBl3 T+91s2KjY2IyE7ZPGOPMWS/9zCXfo0bKWz2bjG+eGaQE3T9zfduViXvrp3lGPp88Mt0y5vK4iOy8 jJUPl+TL9NGvXZWYaUtKjI2Y5rSsvttl6frt55HQ0UaxSiSlRMwtal4U1a9fc1pqavMIg6HZlZhY 1dhc9cXv6H/Ft4Vp1bJHGXyz0oav+z/ZXjgc3jI9bsjlMbNH3nnl2HLH7p/mZ4Q/GrwtPW5ITIwl cc/E5KL8rbK3Ie5wRMs0tdwdV3E5a0bYI5d0K7dF9lG+6lvILnB4VJplzBXDwOHMFeCwM+cnzGL7 GI3FdxVYPL/+WsVkwFd//1URZef/Yl5gzoCsxorLU/pFRvZLSpJjExP7Sb+ximGE4dJ+AWJKEjAF cgqh40qapJmUTn4bVX7zpxCx4dpiCPg9zMtvU4gBQSbEXOT5+Oq/rJ05afqUffkyvDrvtl2ec2dv 2jxW+g8pyVsgR6emHsz1fFqed9O178iDZ+68btWq7cYn06RxyjhX01VjR0RmdFTsf3tJy/zaX+Xv nH3N3+ZNGD+mf/aiqnuPtjdFed73PClTZD/Sv1vOn/U7ak5kP9ofudllKf38/c3Bwf3Nws9s7mXy j7xEGdDfXx0XRtY5LL8YA38Zsa/6s25f2EgRSbLf+D6P13z8frWsOfuvP8oOOfKGzc/9zPOp57ZP qh4ucnn2GttPe/52boexwvO+HHn2Fs8pGWUa8Oejnp2e4pfvM5Wcab11t+yvTBb8N5WRJRrEpu+E Jxjvyz4yUS4Hdmp41Qulj1KvrGMcvxCG4UC54XbD340DfJjKaDXebnzb+LYpwOQ2bbpo8PeLD+YU DcXfEVsZj5pfM5/3mw44NNzuw3/5j/ZPZ+zrAf/0/2dAQkBbwKMB73gRGMJICWwPfBx4I2hMUIUO HRcNVun4WjjMONUroNfwXu3AZg1/8iI4MLgqeAXjDyouiQEKLrn5ktd7B/swjlHTe0/vPwOePpY+ K3To0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo0KFDhw4dOnTo 0KHj/ytO6dCh48sRonwDzA354Nujb+YPhON9j4fODn2u38x+D3oR1p+xOuzT8BbgTxGFEb/74dF/ uQ4dOnR8BW7u/8vvhLcIkaGRYyIzIrcC+zSc9GJA8AD3gBbG4R5wbsC5qNFRlVH7op714RRhYO+B UwYuBHYOfOVSedGg6CLEzzX8+jviNGHQ4EFXD3IM2gHcpuEDLwYPHlw/eBXjxQsR3R/IiN4QfST6 XS+G9GIkDakfcifwbEyvmCQdOi4CbPhR4UDM0e+Es4Shk4dWDt0w9DXgYxXDpviwdNhLw/5BiJ3S A3YDx+Ii4yridvvwLOPz+Kvi24Fb4v/7stiLBmsvQhzristH6tBxkWAPYbh5eMXwJ6+YBGxTMSLU h40jQ0fWMz7UoePbYtTqUatHm0ZvTAhPuNYHDyGxMfGDMS3AX5PmJf29K8ZWMd5MtiY/N84OPKRi fIkPJye0TniDcOUeHf8JuCoAKLnq+YkjJy7y4WnCpNBJcye9POnlyZGTV01+qSuujmcsvfrZKX5T 6oDbVaT08qEi5dg1YYxlOn60OHnNydShqU2pz041+TCJMX/qI9NMwIRpu6b9uSumD2C4p++e/sKM IUC6hht8eG3mNTMbGU/r+HFjVh8gbdaOWa+kmX1IYJSn7Ut7N+3d9D7pxenbuuEIYbaYfdnszNk7 gXs1fOxFxuiMlRm3Md7V8WNFZjNwKqso6y/ZaT78nJDTO2dFzmc5n1nsljdyc7rhMULe8Lxtef+T 3wQ8q8I6xYf7bJNtuwj2fjp+pFgAPOOIdixyPO7DGYJzqvM652nnaddI1zbX8a4oiGbMLbi74E33 JKBewxEvCsMKFxfeTygK/l+N5m54TMf/Orz6VShOLt7eBUd06NChQ8d/DkqUHxUGlUz4Tqhk3FFy pORvpVcAUzQs8+HhMnNZNKOnv3uBt8oHlZeWb/bhHsZfKwZV5APzKg5VnLpYUJl6EWJTN/zpPxbv 69ChQ4cOHTp06NChQ4cOHTp06NChQ4cOHTp06NChQ4cOHTp06NChQ4cOHTp06NChQ4cOHTp06NCh Q4cOHTp+DKgOJtSMqp05x9mJuicuHtRfp0PHjwaerphr0aFDhw4dOnTo0KFDhw4dOnTo0KFDhw4d OnTo0KHjPwVCiDCpCIOQxgCcV+FQz6Xoiyv1XBH+YpF2bhADxErt3CgG+sqYRH9xk3Zu7lLGT6wX h7Rzf9z/TDsP6HIeJMbJSdp5ry7nwYb1cp52fonvfghodBs/186lCDTZtPNOOkNAWz/ffT8xxjRH O/cXfUwDtfMAPp8qGkWTaBfzRK2oFjVivogWd+MYIxJEopiAs3SRJpzCKmaLbJGKI1pkoFSFGIWz a0Q9EC1yfbVb+KoS75VocwFeqaRTtOL+TPQ1H6VqRTmuUnFVj6f0rOuTkb4nNm6jBXcbRQNqJKKl K0GX2lo+qG5CCaKnVpShZCmOdlzXMhWlXIbuVqDUXH5ah3uNkNq/H9U8lK/mVuYzBTQGarWB65Wi 11Kcj+LxzsfVVWI00MYYJeagZDsoHIneGkFXI+6V8+sclB0tMnmU83CnhWkhjregfBNQj2dqb1U8 5vlMjxPnNGIaA42vlbkbrXGspUtputeI13KmupTpH4HrCi5H7VMLI5g7DdxPE0terVuutVKpXZdy 203Mg7koNZ+fUa0ypoP6JzrqeURUy0uXWqOFuT3vgjtVvjGM8F172+qJO018XYE65bgewfxStUvt d4Svny+OQJVZm6ZZNV/CszZtpFS6HKNpZY2p6JH3VKeezy5D+cvxTrpVpvGlp9ZVGr4tbztbr+CW qjX9JN2cx6Oar9lHTyPw9n4hXRO76ACNRB3LfO6viblZyu2rY63AnTYeeSPb07/TvdJuWlXJcmnU XtVRqeetbDutXJOo9UrT2w6VrEeJf6ejqg9q0CTT2brXQmo1LpP+1LCXqNX4POqrPV91wK6c7AHt VxfYGyYUniqb8vX9XcOEhEMJv0x4JuHeTj/XMKHqs+y8hP9OuC3hOF7fTTib0PjFHhIaFnTsHGOd MScyoTrBydGI/84noa+e/iS8vp8IPH9e9Ma58AsUnwg4+fON55v8t/HzbqX9BaSs/p1STohTYpg4 IU7gLFAEKhZ5nXLccKNhHjhwQnyAp/T6Fl5PUyn5OzlK7jCEyB24+g2entJeve8ntCv1eoD23nn3 FPrGoWw0vGwokw+I32jHCfEIlxrMvTwFPCDOirP0LgPkr9AvwV/+Dm1OFwMMa5XjYgyO6YZ0rd8T iNZDlGjluFJKoDuGl8H5aIwlWvkX7hNKcUVPygzlhgcMpYZthu2GyYZgXEfhzsvgyHq09mvxG2W9 vF++CFoOgpLnDc+Ko8ohpZdyRrYpBUqe9FeKuE/mGhAqYiCBt7SrGN/7KRF6/gwB2UFfefL8WQJK B+LJK4wPkAM8Kl7UWvtU5ZI0i+fF59q998Wn8lHf88EYU8r5z6kP0HtCcaL8ccjyoPIHnMWwLI+K cBEuTysDlN8YnjVYxeQeZXmbDNdkeds3kOUrXWR5BR2GuYaXlefBpaPacUI8zn2M4F6eBEiWZyBF kuWTXWQZDlmGYxRCeRXZ0krldUOSeE1ulTPleGWyzJUWZaJ8SW4wrBXvii1ihXxC3CJ+iRxrrVgl rxXbxJ/lcFDwkVgobhdviCNihdiNVj8WReIt+bo0yz6KEHfLdRjf78UfZYK4Xj4tJ4snxS45RQ6U ZeJdmWiYaSg0zBVr5AZ5rayWU0QBepgPa14pXkCesRFW+7jIElejB8oRVsg4eSX48LpYLDbL6+XP xGpxK+g/phwznDCsIaPi99Eigd9twibfQ6//5ujRprsaLJV7Wivfw/tX1Yd8Nim/J43woQVe6gpI DpwX8+SV8nE5RE6SxTJFTgU+Em1yiCgRS8Rd4g6Mb7lYLYPFOpw3ifvEKnCmWdZCax+AT/uDeEos kWEo+aK4VwnFe7u4Ebw5yNnPavCvWiwTu3HVAa7eKX4OyY0VOxDhl4tJ8JKz0eoI5ETUai3OPxP7 8MyCo1HcK+6VB+Rz4HupiGNbOQWr+P35N0QYbIO0nu4dhHRPiQjk3p+Jz2A3eNXKqvb1ilwjXjEU kI0oryuvKk8bLIYkuU+GoN5BQ39DLPgDDpEWQ4+z5IvyQ7la/gk69R7kvN3QgPu/gAVNNvQXbuE2 uAw5yvPKUeX3sDcvP8HLbvyFLnt5LK8zPCvb5En5KCytXO4ACmSBslIelVeJx+CX/oB2nmMvTBb3 GL3Kx9BzKmM3YyAAbyj+S8Oz4jS80SGxQWyADr4HLAfexftWYIfcqRyC3bwEyzgNe//IcDn4dlJx ywTZITvEKGU1+n8eea8VfugxyOwuSGaSmAJOj+7JU3wbP/9tfLtMEevlb+V0WHWDvEZcK8vF/eKw 2COugz5sBnaJFBkFfdoLC38YWCmS0XYl+LBO7ATWiCp5Ri6BZp4Gnkb5peKkeA2WGgsfWwGdflW4 oIuPEpRQuQBlH4LFW9HSHWIT2toIGtbKdLFNZoubocfXwu7XQ/+vhi4fxNVKcRj+8iOZJW6RM8V2 JQkWWAIqj0Bv70eufz10eZeolpvhRfZBo/+P2AK/s038U/xMnBMzQGcO6/Ua8aZIgfVYUHqF2A9p fAKN+UCRMlO6YE8vinfkAGRVVUqAXCyXwwe1iQWyHdS8Bq83jvpUEmC3L8np4hlxu5wlh8pmUPah 2Cu3iLflCFGK67QuvrqrDHu6IrwCyfSFbOg9WpyBN4e3Fi+wr46GtJ6E1B4gj46nZ3HnV76aLo49 apuBPk3ojCqv+Ep5X+n+b1hPjrD85+PsU7w/gL5O4f0pvktX1Cf0Q/ThUr/zvdJTev6oeFA0w15t mOnZIc1KnDnA2fXwG62iGFd2aLYdfikPGuCGF1uAsyzcs+F6EV6LcBSjRD6yyHyU2Aj/b+X2FqO9 IlGIjNOGszmQAvWwEvfzMVfMgC7Z0Mci5JTV8Jc16NGJvm3CaliPqwpIkHqnFnLxugJ0LuYyFjyz gAonPKAbOtGA/l0ouRtUb0dpK6g7iOsWtFIIjU/HUxtaW4V79bibDy1ai3HkopwV7TRA91wYuQvU FYIat7gB74Xcphs95cKC2tCODRTQbNQBmm9F/QrmTQtaLmKfa0OdPH53gkMFXL+GqW9CvWbQfjNK ZqHPIrR7mDndCl9Rxfdo5MtRswhtbMOoClDbLo7hKhu2U4caVkTwQlCfh8OCq0ZYjAWRwYpys/Fk KeoTpxtgO3twl+b/FvCmCEcuRVOUI56nocR6yINstwTSuQ5jK0OpUuaqGy1Nh7U50R5Jcht6s4FC G65KgAKUoZFZUG8R3nNwloXRFULyxajt5JKV3Nt88LyB9akBtZogiUWgzI6yDrRUBq5loY4VrxZc 23lsxAsX09GMGtksTytabMPrQuaJHWdz0P4ilHKA7rngoIM17m7WRhuP286cc0Bnsphf1GsD01Qt fgKq8+BP0iE90t1iXFvFLNCej7OdeDYH9EATcZXLI7Hx2VzWExuvc9RpPWThiR3PluGZhTm4ENyd C3ppBu7A0yw8rwZHSW7X43o9rpdibMsh/UzoUR1qu3B0IOqRPhLXM8DnTTiI81uZxgymwo2nbi5R xLrkABcX4b2CLdGBkk62TSqxmLWhBE+zeKXGwnzM4XLUYy3L0Y4r0luV6+UoOxcyquI7a9FGLmJH AeoTlxqgz1aUKcJ1OmjPRF9rcKcB41mN56XosZzpXIhWnexTqI9ynOVrFDUhg8nH2KtZTjSaEvRg g/a4WS/s6L8EJZxsRfWo5Wb5peFZHjiUy3azGjTYEQfsLKNyptDCr1nQ8SJEf7ItG48iD+8NkCh5 n0a2tOVsE8XM3fmQVDGktxg95MHLkLZtgO5Z2QYXgrsF6JN6zcRYHHiSDZllg0or24gF9enuEtY6 K9tDnaDstR39UE+1oL+YvWQhRubEK3lCWoPLYw+SjRodoJAoIw+azRpmZ0t2sT/Ix7ubtayCrX0+ erke99fgTgZTZ2G5NoOyW1G6FOdleF4Mv0DWRb5tLSjMAU3zMdY8vNpAF+nKQtR2IjZuxNOV3Msc ULgCT1wYO9lcKetdNThkB/0PsjZtZ9mWsLys6NWFvmax1MjvtuH6JDKJAvZPi9kyHBwVMngkC0AL WXgt61Iu62Uu+lkCebtRYrn4K0ZayhItAxdaqR8ZCf9ZiXqVrDkdbJ9FLEkXrxyu5Tuk0c1oxwkd dkKz6jgikV3naJZQjDaon2m4W8D6YcconTgv5rWZfGiJBZ6rkDV5DtpZyVZOXiIbWuBGyVI8U/lh ZV0sYHpIOh24Wo/2F6N90vcWbqUQdZczbfUcn3aAE6vRyw3orRlnNXilVTsb95GL3omj2Szjdl5D Ixm7MBqik/hcCp40sv3YwPkstjQr6w/1txStbQKnWpnCfPbbBPK0pazN+TwGC/vcPLZRJ2jYAJlY 2WbJ95BHsLCGlZCEZBB85hmMKwP8ymOJklw3sXxngkvUUy48g5Wlma9d2xBDKH6/iPhFlp0NqbRy H3WI2W6WuJszTAdktZulbWW9yObIXYx80MqxxqHZy2LWOgt7lXxwtJAjt5vHXs2SWcwR5nZEzi0o R/6nEkcF7jrY21RAq/awzMpwh9a9GtnSsrVR5aLFFvCjAvKeiUhn1WjJ4DMn+5QqnueRBK6F1JzM t0KM2816Vw1pLkUrzTyWEj5otbCeI6iTqXDzeNpQzg3ttfN6M8UeJ45iUDITTxvRdgbP6jLYA9kg IydGlIn7NPoy1v8K1njSDPLfdox2DerM4fX5LC03seEJ2cFsbsXO2Y2DZeTkLKWSfRdlYgXsA6yc 783DUxeetLEGWjmOUjbjZg5QVJiJp4WoV4cxkTWRn3FxNkU+YhtrUhlGQv5hA8uJtGIRvMAayNrO o7AzraUs1xJEPDWeZ7MHz+D4l6NZdz6eZYCTi9g7pUHbKLtoBL+pnZ+CMzeg9V2oQ/wmi8/l/HEm U25HdM9EC1kcO9s5shSz5y1iqdehDMWOhWzzFD1aQFUeeu9gi7Fy9poDHtUwbRbW8izY61ymzMI2 VY8ntdD4Qsyz8kFPG8quhWwXQVOsbFcrILE8tLUVvsLCnsHCtk1cbmf553JmWsB8dHKOYeeMqYBl 52D7oWhqAyWtHE9WMYV5kI2NswEXZLebvasds948zivrcX09x7K9HIssoHMZ9zVbi8cWLZ8nHOQR 5jCXcjkOLuOxONlWaaUni/P+bM76KC+sRr+tLP3leNbB961MQbGWgRYybZSx5oAKG2tvIZeohXas xxjtnOuRF6RxtqDvbM4OKdIuwHsFe50SjsZu9m0O9u5qPG7AvUzU3Y1aadxuNtp04v4SPJmDvslO aezL2b+mswXY2GepbWdzRmHnVnM5pyvlOUIWXhcwLyycjWdxNkFWtREjKMaTWvhC4vA8jhHZ3K6L 6XHibiHnrS4xFVKrRus0GrK7Yi2nLYQF2nkUpcwVJ2qWMtdtzEc3+OkCvdPBJzV+qRlDE+eOm2Ff 5EMt0LFy1v5i/gxwJ64yuF/KOq3QuHWoUwddyOA52k6NpyWs5ZmQAOnxLp43HOYcwsr5nIv54oDm LuE50GL2pm62+HJwgCIpfZ5In79lMn00QorfG9A7cbWC+b2BOUY8J+nT+lQ1Rr6XfVY1t1aAukVa 5uhmnXkQpZYzh10cpbdofC5naeYxf9ZxfrUUGuoEHcRL8j9LQbmFOWpnD5yHPFyNG21cs4ZnXzQi tT/VWho5UpK10SyqBU+yOAuws52p+YoTT/eA4lKMoZrr5PKcuJR1tYmz32JIKwdWb2E7o7kqeU41 03OzhysGb8jObRyZrKw5NOd8GBJ1MCetXNLCr/QZ5wFQW4GMwcmf6DVrUSQXEiDNqeCxNUEbKMff wd6BtDAdr79lP2tjOnPZkxazvjk4B6jDmCtw1LPvd3CMsnJZynfnwpbs7A8PY4SNKNOAZ6S/5Peq 4Xvq2eqKcE6f8CxB7WqeqdjYn+VxdpLLUsljHtp5ZkF2toQjUh4kTO03sZQrITnSiyLQVY3rJeB/ Ps81SMOLWFZzIZV56ooB+i6XLuh0CcqXQFKF6LVB/Bwlfwb5kc7mg3u78F7Lcs/nzNHJ/lrVNof4 Beq3gu8p2qpHAWfINJ9bIe4HrwpYSyh+bWLprkEP23lG5WBrtaOvTH7PRivqPCWLeyrgmT3l8us4 Xy3ijKlFm+WXsmYTh/L5k0fqgWZ7VezTSXOyeaWCdG4ZaMgQR9F2I/Sqleu0cebSxGOgjDaNszk7 rKSebaCF9ZE0qwzaYAeNFH8pSpfyjCSD4z5lKbNYe9qhLRu1sZOGlfDoluMOzRozOA9exOshhRzr XChjZ2+3kjPJtRjlcpSdxlnL3dDlMk3+LnCuHfSqc2C3NttuZh2ktZI69LcM92jlaDbn6S6Od25e c8mFTlB+V8U2Mps568KcgEZUjrPZnLc7uHwG91nE1p8Nj2tjHtJKUzpHEprFpvGs28r2upa9As0T KZNbwDlgDnszB2fQ6tpELc+5c9grloBbDp7v0WrAfOgyrWWUocV1rD/r0A75eZI9zaKoXivL0Mox 1s2raOvAiQ2cL+VwFM7T5kcF7Hct7Nly2cYoX9jK2UYey2Ux97KcVxxcrFVOzmvJbsq12XMRc66C VymK2CdlsE5RnrGZJV7Afq+BfcsC8I/0rI3jXwm3n8MUVKFcG/NnkzbLWMRrPlW89karL5Qdl8Pf LOIZ0nTQvJVX0Mjz3MnzbDf7D7u2EmMR97BkiyB1mklkiru4p3JfLvEQ5EmrOTSDTefoSWPaBc9H qyN0v5212c6RZylLeRkyddWXtnAvuZw7Z8N+1XUhyqZ28YzWxfmfyrtG0N3OUZr8mJUtqhFXK5hP +ezzF0JDKLe/kTWJtJEyNQfHvhxevaLInK3lEc3sz+iz9DrmF+l2NfNT1SXyspuZvlLUX4M+atBK Ca9ulLPdZbE8vSteTtbezbxS4GI5dHBMngM6KU65OP5UI/tt5rUDi5Z1WTk3IJnO4lmSndcO5nA7 pF+NbHcPMicycfYLzrTycL6Fo0OWlom4OXpSezXMSfKfs8HrXLZkB2tlJZfM0eYWtJJbDm6SLGpZ /7bzfXWVKZt7pIxtL8+UC0BfDvvUSi2/crInohWCzZCoBfLZjfdSlngOr/7N4ZJZbMmNOF/B8xAH 864OOklri8vZGxMNNWzpVvQ2iyWymWvSHGs2r2w7xW2co5bzWsFBeC0353829u0O1tMd4lGUrlFm gNN34Epdi93OGRrl5j8Rj4ufK0+gd8raqtljXceSyGc/kccz6XxtNSJXm4Xb+CyTZUZjnqHlF4s5 u1YjsEVb47HwsxxuS52NpfMdJ3uJGcwRdT6vlsvFaC2c2+fzPChHezaba+dyjk19pnPml880UG8b xSGO8E6mfQvGvho82At50hr6RrbYecpnsAnK2Gnu8wvUO4DylFc2wkuQZ74erW9BC+ugl8sQBeh7 aOQp5/K6lpvjhptpp4yIPAnZSDV/alDElqKuolMuV8K5lQttFHGWkMP2UctP3fy0kKP4HvS6BNrS AvwW75RVUDZ8hNcw1nHGSLPlW+Gf1kBC62BJ7fA9M5gzbthUFcZyEHf2wFO4xT7O1DqYRlrT3Mnj svO66lq0eS16vpXlTViACFiEui7YHWnPtWi/DC0u5zXOObyiRnOFLSi7GnzYhrYp2qorSeTzN3Ge k8UcbmdvTSutzZyNVLPuk3doAUVZLMmFHEWLtejUyLPUXI6BTs6H7fytOPK7M9BfHtt7AX++SqsE C7S15jrcmQ0Kad1kQQ+w8GudliWvgBUVoWQH54lVHJ/KMNICnqW6efWgBF7fwXPDNaA7E3QWYuz1 7IXoe2g78VrEK99Z7GHpu2ob+XkObKYJz3J4btuiRRkr56UZvJZIcauBvUkxZ8VqSSfieTX7MfKp 5cwdWktpYe9lYUumDEjNtHM5s2jhzKaDM0rKpyl/dvNajYM5U6Z94mHn6EZz8jS2Uqq7k2ckBdxC IXss0r92pZo/8aD2y7Q5s4UzY8pD3PxtyWzocxbPQclz16DdHfAiyxFRFgL0CVsbZwANKFHDtM/j NfoWjmC1vNbl5LEXc+5i51xnAdPVytHYos0Y83gOVsGrdxX8iY+6lrycswh1JaIcftPBPplWZx5D fk/Z0yKeAWXzE/XzBgfPR7OZr9m8brkG3CjhvIY8UyH7lSyOUCU837Bw5MnhdnYz/yg2pAHNaOtO zhc3QOMb4R0yeAaXz/llC2dzVmHV/KPT55lc2iwin5/m8b1izoLyhU1DOX9uaOOn+UL9hCudJaSW UVePs7Wy3lr52hp6muYBN3HLNrarXF8pG68kOrSW8rT1qRqMW12XzubIQusA9OmISget0NMKOh2z tDqLuQ/iU63WrroeaNNmZmpssolUXtvJZqrVMRcxV+i9ilfIizgXWwa6HFpGXQD/93/Z+w44O6sy 7+ec90MBXUJYEtgEaRIpilEibSGQQOqU2/udcu/UJJPMTCaTSZ/0XiDSCdIkgFRFpKgIwSiGSECD kQjiigZErKDrEgLz/Z//OXcmIRH5frvf6u6POb97577tvKc+56n/43QqtRwfBVLKWn7nSBOcFULr ppquEXhqMts2zfvzpDG1HNuu1Dnf90VSlgSfT1CP47j0AtdI1cO4vPNeO5IlFS+j9qpAziDKmRTn 2logh5bE3aPIR6dZTyfjV7I2jk+Pc2zVcGRF2Ao5lLuW9avyGskcecsU35z3PFicXI6T8uLUbahs GmY5roHUMIvrRDc+aVD0VfQfnUNJcy6tHbOoR5jH/GeAwlXheypon65287h+JVnvPPl05UbqIG82 0Qab4cqp7VpLziTdm1K9v4qS2ue4lJK998X4K+HvUU2usyDkeu+t5Ihx0on7RP0zpZyyXDPS/l1O c1h6R9jfl/atnfL8RSn36D7lcrxttHc2OIkoyafjkvB5OZoT9m9No/dT5HaSve93ttS4v78kEdRy niU4D5O9JU5ISSOTBHcf55kwx3jclyrueSRH4dO9Z9OkueN9G7Sz/xP+HZXUFySZ10ravROk/Dra 56OV63C/07SrFaaI+bUOT0+kXr6Ga2AN53YZZZ1L6O87jTpCXb8y+K9ndCaoNrQDv9qoU1HtfzXG UAvSJP5WTUgd1w+11zVgtrfTVzlPep+lHipNb/lOPlVP3/ksy5vguHb6wgKeDZE6qfeytoR6TzTS HuzGqHpRNJODcJJInHShlSO3iJrkea+z8zd7m1ybp8AhL0mEeKxSXRM1NF2kXjruVXNUz/I7+TZJ vdhFnPflpFkN1LUkOCtUqmhizIGzv+Ww6jk/jGbcNYUjKsMcneW0gXKqSpwrkUcj+3olWyVPuqg2 6/GkOzXUe8TJNTkvhQR5+iLKuJhjuJotVkNNvkqbi1jaBNfopKclOY7XEGXWWspDNVzbQ6S3Ga7p eVonq/lkjpSvRpyvSpY1znrLYorW4Sq22nJQm0qMsCS59W7qZ7tx/VLlG9Ais2hPX0PdaoL+DzGU exp7PE9ORsfAEvTLleixS5HPeuRW6/UbEbTFQqxbk8gnV1HXHaUtZy57oxr3rWbpVyAtZ+kqyfXH uX6HWfYwR1aeepSc19CH6a0T4rxMUq7K0hYVpkSjc6CMeZSTM1D7UjmfSFOqKTP/jr7roEdBFVvZ 0bQWUusUe2QDrqtvjcp/Sj91tC/nKrUGpVjPcd7IGqTZjq18XxnlJicpdtOiHee6MpVy28Ve2mun ZF4nW7CSqn7oBvDtC3hnBFRfx9B8chWOw1f5eR65+oWUmHT+rPD81GTSj1UYSQVSBzdP0+yvOLnQ LOWSRaRnWUoaec6qvDhdmdN9hnEuSs7Etf04z9XnvdyeIMUsA8ceYatOwEzSKzXUtlbTM6sgTrKe yDI4qSkNjizOnAriPFGUFirXqJpnp0XWc9M5p7UE0zwvFKYmzHnppLzEqZYRtY2E+UnzvgL1Kc4m FOboibLmbl0N+c94UsaQp/Bh3l9aj1SP5aTQtDj7sPMvy/KODr45xLzDzCPEmRjheKvkW0OUayP+ bJz3hPmWECVjvUPHqLOZhljTMCXcsNcGaR9V8ClX4iw5BecfoE9V+BzdcYjjO8QSKPde7t8R5pkQ Z58+Ow6/5rGmUzHOxnOkrMJIW06bxGLMgYWY6yrntFE6raINugPlnk6aPZ52pgT+TwAlKOI9TeQx ljJipFGSXGGSfg1zLVjLkVRNu1e59xbS+swlfxZnSpL/aGR0Rz1GuGrC1Uq4lK2ulKXb64hj5OFC 5OeUQ9NyZ+iD3MU+qqB80kGtoq4Y9eRJsqj/FK75Yfr0OT1vjdfLF8RZv6OeIo6lvjjnucoctbFO q5XhmI1SY12gbK/Udjblq0pvIVS+aiHPOK1MgrolXXFm+RZp4D1FXo95/a7zbExQA+rmUYZtN4vr nONcp1NTVk064LQtec/b1XL2OGtrniWPivNbCjOfVuafoeVF51aU+TTTYpPx+tMsV7QU53iEV8Kk rnGO7jg5kRi530Y+7ShnwltqYrRxJ708Vc/1L+4l1Ax1QOV+ZUuzFRt5rG+5gjFIVVyd1Iq8CG/o 4njJeytEN2uWo61BdX1zMEbr2I5ZelU0UY8XozxRzTzy1H3o6rSA9akmx9IkSeYbR80jfkXRerXT xpGkDrna83EdrG+cc74G4z2Ma9NJbcejv+vFeWA4PuI8tpujSUm2ppP+YpRRU14yDNN6XUGLpvJl 47z8lxGnK06I898b7X1T0p7GleTEOHPfhtJOJQ2swpivJmeUpFXe+SRWsyVVW5bh0+qBUItPC6Xl 2eQ/ZvCNtez1av6u5hoylTpM1cRp38Y5P2ezR0P09Vc972xcVU+GLrwnTr+QGOnRFK+xUL+kFo76 mWjFVpSjjaOojOPsYj8GVC+uelDVQK3F9+2cIVWc1SGu7Q3s6QaO75AM5wxQO20det/xZ+VcW8No r3GkcTHkXk0/2mqUrsyvli4ftUlV0atsDUeUWlpn0s61mO2kLaPyruqqZ2G+zvG2rwrOwSjpiLb+ bNw/nfy1/s5yrOeRbzV9YqbzqazXW2b3kmicLB7yUkm490ykVycQ8VJSap/jOCX5GOXlKZgH+t2G Md3NVu4GnZrNiLe55N7bqadxGja1fM/GHRPY983k5ufhU4XjSThbj3PKXXdTGm3ENZUiu1E3tbkt YF/PYTRkLfVRWdqsna1LfYln0Q8tRwqQo4ZUNdxLSEfT1C7pnC2Ss1Eq2MajOmqMqpCD1q/V2x2y 1Ky2cwRUUweao+yf5iyfQN1Ymvp0bdcJjAqcxLapY95NXC0inPkZzxfGPU1t9JKc00DmuAo6TXaS ujSVlttoS2mjL+80SkZ7J9WVvfucxokqH9aMnHXGdLAmBXIxKXJ36uHSSX5gsqfAWa5JOXK0Th5V zjfMvpzKd7fwPVOZv8pprfTgbUMd5pMLinO8zfM6m5TXssS9FqrV04oSvYjxv67EK1DnKVy5VR/i VnbnbzSHXuNl+MTJZXcxprQZM2MV+rLe8yqRA6TR+xyF/V0XkWLn0abrSZ90NDRyJqa4Kig1qqbm LM/Z1UUbVpQrttLrNs6kOq4QSXrjTyX3ofa1DtJK9QptpbbdrXwpeq9rz5Zz5S7Hp5n212aO8Fby GY4eOnuPs01VkT+Ii9NhOA/VrPR5AaXZP87zW3876TdFiT3FdbqJ+rSkn6Nj+Xyc3v5hXC3z+ooF eH9Y0n6UJ6VPk+E8xhNeExAhVUz5tbSCNKLCayAy3u4SIs2MkteNe21xxHOCqvkaLwlKNSnSxhBX 6QLlvHKujhnSxjRtDUqdxjLvKs6XPCW1FGX6ckrmZX6WuBRlW/cdX4y3jeGxeiM9/I8aG8eY/feT 3h0po+kquQ/9txpz5155hTa+DZgfd2PWXC63yLWMe9SIrv74v0qOPWi17ORzfbkOYmog9U3iyqfl DY3Xkh0ax0UvZWdrmIM2X40Z0UV5vpI2CWdLmi3O/1V5rsW0EcbJ3Yco08ykJFgrzu827We1rsSN mDtZUqUurnBpUgKlBWrhaOJICtP/M+t1J2Xs/bRfp+ZQtziRlN15YXZRFnBetpPw3EwZBRlUfbfS tMi4cRwS5xuturImrv1qZ25lCbP0onCxF86nLUn/mXnkvXWujEDd59HGFkYpJ/gSRemlF8XT5Zy9 WdakQG1OXlw0SgXpyyTqOVwkQT31nfWcOUspty1DT67mOE57H+Uu6g4K1BWUNIkRand0Xb+U3EWC tsRx5MichTREClxDelJDbisnztM4S0l8LvENWkiBEshNfcl0Pk/jbFQKOV4jFTk+t8ic4GiZHwwN npd7TcT+EOlHSDuR7kS6CanDTrOPIt2O9BX7FfN5M8JsNaeai0y9eQu/y0zYXICzITPWDjNFs9QU 7GfMdpzRCLEN8qB8C70UwijeKGoJfB60/cvyGGnUHfo2aTWNpoIrtXJE11BHNpIyZclm6VYu9VWd wPF5Nf3glqKuk9gbKvVrXH89ueo6aubD5KwyMto+gXQ/9fwa0XiPuYdS4hdAgQaiv1fx8z20hUYX 78Hnrb2iy3AWI0P7bhLmjs69u1H2a+VKtPR35BG5DfdEZJcZLueZFtliP3rACMdB7zP1UgKNUuv9 dSCK8X5zfP9v/qspGByciM/gYFDwcXwGmaNAGff6oJSd7AWV5leh/ZQGbWH8XRJX9nsXewA9Qf/T 29C3x8rRZjHo+fH24/bj8hmkEk0cpHG1wYJA7AIrZoER9MW7448XoRSPm01Kj/H0vn/rQCOw/tqB HGHg3Ozjdrc5NhgSHG2fCaL2SaRnfNqC9IyoRvvT702fNXpQvi7P8ihinjRP0jKiEtsTqHHpGV31 6r139d2Y/3eJ+kHdK3di3nfSx2Qjrl0oj5lTQN+/iXuUC74Pc6VTHpUXQW9ukzdlM55aA/owhlxs hhRmIyVXtWuv8PaAmNfcxyjfOb7LReXlPDevXKJ632Uwa9aQQ3Y0JIkWVX6pGxQjQY2C41JuxizV J5pIR+vJu46nLDaPcuqVpEdxaim6vBbQadHS3jK5hrrhGO5W3rlF4r38oZNT60i9nFdghnY3pdyr KPcnaVFN0Iu9xEdmZF/7kJNukp6bqeR3gportRHUkkK3gI7XsY2KXuug/HqYTxXIzUzherOIVq2l 9LZIc6WrpBaxjjKGRmZMoAW5IDdRr93NWqikprrlorjYgyqMaaU8D3AlWAtKNoVrSCdWs6T3WkpQ N17p9cIR9lDIx3jkuTKl2ZZ1bDWl+jNYu9nkyDSSc4akPV8WYs0m0MawghyhiyZpo8RYpCY0Rwki Tn4+R21DB1ctlUiaxMW1pam9b6JeQaW9NSyl0x7F2KNJ2jujXJemivOyUW+KeZT4JnK0qf9byHPk GT8GajiaasgxuIjDiCwCLR6OeVuw95ot5hVzsBkRzLO/Rcqb9cEU+yN8jrX/bEN2sP0n02OPtgPt EPthO1Aj6c16TfZQed60m2+aTjMXvNifzDRzc9BpN5krrcjvzfUmbb6Pz73ma+YLZqNpl+W4o918 KzBmU2DsWVaCc+2J9nA7yPazH7Ibza/saUFnMNAODubLO/Y0G+BaP6yBZ9hbcXSIbLeHIMUV7wJr yS+0hCjNZnMLajHY7DQ7zJvW2mNw9xTQlk+YR81mK/YgexDuHGDfxPetek2+3dNmD8W7d9j/sL8K VtrfBsNBiTYHJ1rQuZ5/t4+b60xlz5tooTuD+fZ+829Yr75k1mNl2mA/Csq13j5rt5rf2T3mY+ZY cxDq1Jc6GamPFHwqON1uta+Y09kSpfQTtIRL7eb7qH1fGoQ2YArORdl+bXej5NoGPpn5OHLpELTL IWhVtCXqd4Zss3HzG/blAvsZO95+1n42SJKaDrNjgzg+SfzK2JW2aGO2zBZstZ1gK21NkNSrTCPt v9pTbY2N2qxdaLts2haCJXY7+r8LLV6PXKvxidpxSFX2k/Y4ezLub7TP2VPw2YS+TNpa24C7GnD9 RnuunR4sDPrb+mC1LQf3oucbcGed/RJyPB+9dDFSt70TfXknnj4drfUzlP9UXK0KzkM9qvG2ejxZ i5FSbbtQuxEo53jkXovPbj3HX7/u/VVrz0M7huwwEftj+y2kZ4JhqO0EvHU+8hqHN+btHTaC2g5F bnl7uj0B95+NdBLKcjKOT8SvETg+y34a3/fi91CMv6NQlqPtOjwxAPPgc3YKynk+rhyDa0vx/mWY KV12MdpvNMZSlf0U2nutnYian22PwF1HYNx8yh6JPv6I/SfMqMPsvyCnwXaVPRhnoijRJ5HjAKSP YlYJ3p5HmbfiPRfaCjsZPVKF942zl6Bvj0cZJ9oNdgxKPBFc4Sko8VB7pr0I5TobpTkJrfQJ9M9I 1uoolPss3DcE7x+B8pxuR2EETLeX4Z2DkeOZuHcUfoVQr+PsObj+WTzVibL2Z0mH4NfRdjTH3Uk4 7oeyD0Sup+J4FdKzSMqfTkO62X5ReVM7BzVAUvkP91EOtCmb4v/XkB5H+lv/S0mPN+11LP/JdBD4 oeeIx0GsHTMYPPQgTeBzR8lZ+JzpUXiYMPYLmBH6HWeqUWSgvc95FKAj3XfPbiIB7ZEPyXPExPgN udfdHh8Dx+Z+Ipbou796gG/FMjnYoSGQyzkYkuU26UNx2rEPitMLwU3BrP8SFKfB+6N7vAvFact7 In287ZE+Nh0AxekFOQOfEorTDqI4HY9x/MJ+KE6ziOL0AlMRR7g3qEf6WlAMLgsux9w6LKgLPnYA FKdtfwXFKbEfitORMkQO7XnZHw3p/b8LvVdCcRrQi+I0cB8Upz3yDXna5/aW50MP2QfF6S3zDdnJ 9DZaqL9c3LNb34HyPmez8jJqtO/4+5j5JNaQY8wx4C3HyDn4nP03x1/ifY2/nSixjr+XOf7090/A 3/4Ov15jjX7L79e1ZoqKE5xt/6xyQdAqw80jZtR73Pcz3leH+75sTg9GokYR2iWj3joZ9bxJVPr8 gUtn+/7H/D1739f3u5SGyvkyjN/n8P9QfA/Dbz3W75H+/Dn+/zD+GurPDd3nvpH87Y5GynkHnjfo oV3/5XLdB+l/Rzr6/SfzL+brZrg5QXrM0UawwhwOKf0d2xLcae+yc2wSXMmFNoeVudKeYwaCmxsG OjDIHGn+D9Kxstt8xgTmIXOcOUheh8T9JtaEQ+UNeQ1n7zWnmX6gsAdDYv2NsfKSvIozJ5r+GMHv qUP4IH2QPkj7pf01Tf/by9P5QfogfZD+m9L0v3L87vP/2Gl673frB+mD9EH6b05tf/cS/OfSrl6E 0F02a7PyPYmZr7oP7b4/ph/FW/hWuV+xR2+Qa+Rx2Si3Mp53hjwvM+V6+bzk5VrQId0vYp7U4fxl 5hh6IqifzRL6CGjc6Vra+zqJB79UFsp3pSDfknXSLbfLdfJlXLtObmQc7g1SL1+SL+JopWzAHetR nm9IEvecI3fKCJz9ujkDZbsUZxS78UF5Te6Xr8oDeGK6OUt24K2PoKSKzXcT7lqFPGuI0He9XIWS qV/bJPxvlttkmdRKJf0HL5Qz5V+5j8UmvFM99QoyRRThrhnPfwN1XC2XIz/1gLtdJqMO3TJGbkZr PIznHsT1m+UPeO8YWYQ8rkdbXC4/MANQqlkoz0q86SF5FnW8XTJyjzyF8m9ipM5K5NNNH6YibVoO KSzqfXujjIpg9J/qeqQFzz1sroAM+gTSQ+Yh4iAfgTRQBtJLoZSesE8gt0dFUcKfhGz6ljlEtori X90mI4Oo/ahLZrQZTTtbgajO1yBdpcjLZoapt5vNKqQDvank+6DpMaRldpl8xCVb65IMcMlOcan3 eqtLIsHje5dY3kHCm+UO9NxyjMvnTdbEzOku4dx8M8TsUI8F+5R9il4L2+2n5esumeuRXpVO+4Z9 Q6/huxA8L3cF54nYC0XMcSLMXf/UJ3NPXzK/sFv1w6OPIR2j32as7dAP2uNqc4O92Vxvb5ZGGcvP IBlkDjIHEfO9H9JtSD1IimN9AERl07g3prKpIKrybX9/XGVpVfTtoPVA+Mpm6t4Iy2Y8MZZ7/hFQ lkteBb2tvRWtfSpa+6L/Ca0tW/Zr7eL/iNZ+x2w2j8uL5nBzh9mAlDaLbZX5Lt41Xw53SRHa1X9E fiAvIun3T/H9G3x+YEahNbaaz5nPylTUfLWZjH74CvpqKup1AdaHtei98TIUM7URbXAR2uI+9MIp oGFNRCJfj7RQIijHTLS0zr5N6L8F8gJyX2VOQn+UgXruBNVsZh8/bD9hFqMFHxLFTlsB+rxanzDD ZaEpRz/FiLC3FlRvKUo2HD10H/ppMfpyqhllnjSfMWPNZNOINnnHXGDKQYuGmyvlT+i5a804WWfH mKdNA2j5t1Gea0FVK7AWxmU9xts4cy36fAPe+pJMxorUiX5bJT0yEqvACKxhd5p1oG8XyHZQknVY 7W4xz8turCl/sB8x4/HuAbJZHjBHq3eDPdrMMZ2oTVKyZiV6/0V5AaWpko12hNlinkdJvi83mwpz splursbYvQxlfMUMk/HmShM24+xo02Bm4vo6U4UnnjdXB2vR0/XmHpMKBtsWM0bRjeyJwcH2NPsh G5h2+zOz0byG3h1sAvNhc6g5zvS32+zjtGA/Z7+H7212j9rc9z5n2p2d3W4NRtsf07ZOu7o90dvR fx0MB21W2zmt5hhLSNoWdhAT7zJWEy2vA4JBtLcfwtTfNgfloOTb7QazyTxnLjILgnq7Bkn9Iy6w TwVZc5P5k02YB80z5k/mKfOS7Wd+bn4dfNj+xvtHHIkRvxSju86ca1rQs7XmGPszzL9jzNvSZo4y 1WYSPvWmw1yH3l6Kefc67j/XVpgrbQX9I+qR5y57hPkqVs5Ws8C8an9hm8y37S7Zht8Hm0exisyw h9m70Q7HyTvmK+Yq87ZtCzbbqfaHwQXBsfhsNneh7Y4wd+Jtz5iX7TF2jh1t/8P+xVyCMgqo0K2o y5/sm6jVHKRRcm/Pd+yRwcko6x/sa8Es+/NgeHC4vS84y/5MpGep/Qraw/Y8Ye+Te4IB9nKzTT5v XjLrseqX/CM22LvMLXaPGYkZPwR1asFnHsbVUrRFi0vIfapda2eac9gSpfQTtIRLS81K289afFw6 osRBBP3tHeA2HjA/0DYoJTO/5HmBNngUnw62pdjDsK6/jbG63Bxu/2IvAHU6T4Yjv++izT6K5xba ZXhbC959ofmsORNphPmkfcR+A295ACv/ffZhHL2tdfLntuk59JurR529385n2Vlu5OzKeSvG6f0s mfMHGRKcEZwcHB8cF3wc6RPBCfiuCBJILfhfEbQGg/Bpsc8Gxr6Ecfc0nt9uf2J/iO+e4MNItcEp SHV2W1CH3yNtO1I/e7E9ynbY4fR3UAu8fvQ3OCS10AcDg6P4f519HnRuJj0yW4gaGqOn+AR6aLqI miw9xTQ2tZLI0FnGB1TQP0wRlNoZdeXQN0O4I0TUvjjRSHI8X0//JPXorWREovrkVxLXIkKOM0fs mDKsUQ18Qr3Vm7nSXUOf0hA90dbQH7eWUdOVjIkOi8NeSRPTxXm+p+nZ1sWoG4dNUcXYkBgxCypw 36Wgf0lQQodSFWVkS8xjMc5jnMZkH32dZnTjXPpapYlAop7XYSKvtnGHNYehkibOrXoBVtF7eiJx S1xErUZDKY5bBz2z1ctqMs87zIwaYqYk6a+v/nSK7zSO/npXM37EYddMkgyjihpQa0VYWuSjJV2E YpZRlHlieCelhL4witiULp4mSe/jWqwrWaKVKNb0fB9JU0lfN/Va7CYCSpqec1FGR7qo2xqsHBlG DkTo96vY9eN5fTZ3QFCPu6LHJVvAOLJZ/B2jd6KOrJmowxJ6lNeztEmPhFDglXpG1CexVrxDX2yN SIvQa22ydDIap4Ox/1PoM617b1UzEkPj7Wro7X4p/fwqGOFQQlFoZ9RkjDiOGgHagfbpYA/kPBpC njEOaSIHaySg+twvYdtG5Gso2zUsQzPW5lXec7OK3s8pyKWtjNrU+bKQqHEpj1iiPs9p8wrymUM8 bRdXryNiFRGHqhlhW8SYephXaxn/0cT4qRIyhiI2tTECJ8YnHBL9GtSiyDjuBP0wwz6G2aFyt+D+ MMdA3kekrmEUUwoliRBnbZ44hMB5KO8C1mQi3q7RjCEbttN7x04d/VhjxNHTGPSL0OYRzLKk+SNn EUaveQ0c3QzG7HQzXjdJ/8tWucZsp8e+O057iqAxS2GiLqin4VyUIAzOKkn/zWbGqk3Gse4RMcHH dHWjHafijU8SD1N3cVvOGdjG6MnPS9RqxKXiTjWz7jEiJqWI4KpxUZdw1jbQq7aDKCZd+K+7H05E OS5DDjFxyCQ6uiaSLk0iqqPWqUikTfVXbWH/RNl/FRK29zD2IE3kaBexnmBc/SjZxjh/lWDn0pO0 lnEIWtMu4pk6XMUsI6LmiuI0NpCWLSBOncPYqyZVuJZeu3pvC/FzFP97Pco3ht62aFPzJfrA1qCV rmREQhM98BcztiDMWGjng1tkTFdS0h6PrEWmm0pib32RtNzhKhYYAetwVB2So46SLGTduaSzivyx kvSrCWW9RXRXgQLjP5P0C87To9R58lYx93Hswzy9+hOMQ5nFSMK091iNes/WL7I1HFpGtcR8jLFi L1Yywkn325jlo4oUeaGRvrwJ+tqGGE/vaJ9GbpdJwrwJDmod+nEW+oXvszdoojd2NWehi6NVWqZR wTrv20FhRpOW1qMtZzIyo42IaW1EmpjHcbGMGG6NrJHDJHLI/bX+u85/HM7CVNajWhy+X4K11FjQ HOOv1MN5CVsoQ2Q7nd2qyVK6PpOoEstB2arYQu2gMIvlLrkBFG4OKe9NshUc/a3oi+vA1budPxwi cMrHjDn0gyjpVVQcjpTD5AtLQkq4VGX0EnboIeVEaHA4fCtQ7gXcX+YZ6vWzjJCu4BhJcVVqEoc6 ugR3rUC5HoGMMcXHgkzDmRzR0nP0xW7F2WlEeKmm5quL69FCH2mTQE2UCmtPuighXfHncsZMwehY wSijFcR8qScyvUYE1RCXMUrU1npG9i2ix7hGlocZUVRHap5jTFuGcaYJzoF2j8WX4SfG6Lws/cFn MG5vJkZ3i0eyyTFmxaGiFTyyVIaU5EZI9IvZbynqxRSHyvn4p8VhUF+EPFSOVBSOAtEEn8DvDnrW 57guOhSiCGvSlxZwFXFxv+HeswV+N0jM75JSoO9+iuMwy9Fc69HU8qS5IbZTgWtFglHVUd5TSfyL iPfFz3EEFMjfRbhLWyexVmZxBHVwLVQct8I+fv2l9TXrj2OcTyWcp6g4fOk+r/+4JP2xizMr5wiM ciSGPf0NM4KqhBhVwmEql7Rfj8KkbmnQ9GoiMOqOH0rT2+nH3u7rnqWGIM82cshptfSy7xTdYceh gaXJszn/eY1OdJxkmvH2igRcYNxminhEyueNQXtEGEepiAi1ErePiSKIVzGCq5GrfYr5NXPFdTHG 1SwP1nl7NmMMSuhSbl+TlLhI4IQfhSm2cJ5RBiXcmiwj/x7w43UmclnDSJAoZpyOOt3vZRkji6Pi cEcdVm0VKUgTRp9DB0r5uNYk8TiKRFSazaNavi3Ovi8j/XSR1G5vCMXAiZJmJWjZa0OuNRzzGjV3 hWg8zTLyRtcy2kTXqIWs2QT2bI6RzZOIEq9rmmqUFUlSecIl5HSbxEW9psXtKFMtDjWmIOleX0BF O3SRqkW2U0wcTmhEHBaWlrqJEXf15ISGox/r8NxFUkLqckhZlftEI4c8Dos7dggqJZyWkOfDK7ku hLl/RdGeaHaDFiVR/yL3vGnAr4kS4a4FzjtxPqiSi8Wczb2EM+zFKtKIGkZt6OrYwH1+XPRtjjNS tXYat6zWijDnYp41q6EM4UbOeFKvInFgHA+q1LyOER5avzGUGHQ3J8UVyvi+ddQ4TVocYrRmLcdB nvjuDhkpwWjkCCNLslJCp0hRBgj5NnTRxWGWplwcflaEqBHKvcwWh8hWxvfOIhV8gJhhijo22vdp FeteZHR+HWfqbMbxLAJH7KIj3arlklJZ3YujQ1oZIaTISJO49/FMxmAVSQvczmpJUqpuciE1RIWs Ib5HmnM+T6pZx7sb2DalGOsQ52FJUprsV8kUebIq8tvVnDcJcTuKTEZu7qPlyTDyXJE7LuTocXsv K+rAQrabo9xjPZb9EuYyA7m1k19twr3LkOZ7auxSnvzxYvLmShnm4okq8vgu5ivF2mZ4X479H+ZY GC0uYstFosdY/yrOnSjrWMG4sHJx++M5PKyJHqEoy5GkcuNFlK3ilD6nEGW93OOJxXwrab103yuV Ca4lt5zmHjV5+8947iZKqStZRheVFCaWRoplbyG2xESOBOXIH8DMuZ1j2qE2JolHX4UWy3n+REeH lqb3b6+9Ob8XtJr60j6a8h3pkeX77YL5SaQxSHmTNTvN5borJvfEfF1e91acp5B+ieP998bcoiUw F9vN9kh7vfxR/miHmplqv5LngmEHsqnst0vlIIyRa/6/6PdXvF/9PiMqL0GLrpGzZf7fedfKF/+f dq28WRQHcLLcgbeOlIXmAvTNQ2aEWWlrzBfNrbbWVJmDzHRTNGVmm7nb/LrXLnCb6UGp/yw/Rl8d 6vei/JK0EhfFBEXZ1fNWzy76w58gLwSD3V7QkNtWy66gznzIecz37Ol5S4z//RaP36CF+lBaon/q dq70ERE/lpOCS/kEn+vZgzPH4U7GQMge86jZhP/98R2V/roPMs4dzNiNg3F0HHLdw4iIkl//9/zO mP2RcrKLuya7tAm/HzX3l+41zaYTtewfFOzd9u4gETSjJvvEwQbnB3XBoUxftf+G76J9IlgfLAsW BKuDPJJeqUI6MzgBo+t12YG3HOx21tTYkt70uBllO/D+l/FLo4eTtMWebmImZifIESjLwTozGEfh 2vxu7h8/VQK2uIuoOAmjQEv+NOQzjY3w7duzG3cduK2fw6xwbf0yjl7GvBjCKIz9W3rn3tRBtpAi HMAa94+3m+zfnKfFf+DdZQ80Tx80F5oVmKe3mI1+nnZhnpajd+42r+49T80lyPsNzD215d+O51Un dBXG0dnBs6DXl/e1ybvfgzl0IM9VtbTH3weteM8/jWPBu7diND/rd1++GhLhLfZ4GUZp4cHgWtNg AtmOUkXRYmsxqtejBR8DP7DY5GSbHWBvwHjTdcavQaRI6m+Q9FxtX0rJ+XKe7kItQ6mnaLftf7sV 7RX2ir/eOu+jBd772fd8t9lg7sAcOQ/1PhWr90rwFsOR2xfQK+dLzoTMWqyNIfMFO9U8YL5u55g2 +Z1Zg7fnzIvmMVDnEXIuZtQ5uDbQhHGl7+6Heffvca6rdDfuGuAsZij7WvkcV/ZSehVJ/+vV7+KJ H+Bb99c+Xh43R5pfem+NBqTDMH6fNEN4p1pmnjZx/Fpr3pBv47+LzsU1+QW+b7SHmZTlMXJ6Wn4v 75jre+NrTzOj7a+smK8xcvlbSH8JTrQP2jPsDnxiNg6eIW7uNe24pxPpR5hf1zPK916zEfV81J4Y nOdsjGaseYR5BnY7vm8NVuL+aeZm24y8N9pB5lfmR/aHyPU0ecd+yv7S1pk37E57o1mM8uy0Z5in bYV93SJ3mzFv236462zzQ1q8TjNp22UPN4uR1yJj7BazyH4ILbnbnojavIRZv1n0nXrvYPNn5Haa WRxsRipHyTbv5QkzwU4IhtsdwZxgtn3V/od9Mfgm6v+K/a39hb0M5X7VvhrEg7j+x68TzBumwhxh B1sTLLQavfaEPRv1+7QdYpfb+4KkecxusJcHN6B2NXIY2/100KRKe589yPYzPzWH24Q5ByvHNnMU erdktVts7jAdaJvrzLnmXNvPnmwPQxpg3kaqByV629TRengunjqKdtNycx1arp/ttkeodVD+jH54 CS36czvK7ASHV6cWV7MDuZbbI2g9DaHfX6M+zO2J5zAbkl56XCJJjwuvupIaIu+EuEfDZEr1M6ib j5NLTnOXhRtQizJaNKZwN9gYdQKdtIIp+k0jNSlTwG07zL3JHqkmRtypKr7Z7SHbINdRJ+jklRh1 uiUkuAi13gly8AVKQA4pVK0Gc7hTch4rRY5l6sBbFuBsGeXCvdEZUl76SnirTMZLgknqWdOS9Hqy pLjdm0J8k0oz6qs1mZgDEUqVU4jm7nCgcrSGKWpZnlJQmOhyRdaqihpvlQvcnnt1PvLPoeUolvIV 4vZEy1NXEaeUmKNWIuJRbScTs/ESohPPJa5Wgu3VzHuX0g7VSUykIi0HTleWEYer5zQPlZT3s9SA uP0DSpajCHWiWb5NZZoF/D+Z+qkm6t2z3Bu5jVoTt/9e0VsUVCNQpF0y4a1LDnU44fexCLMFXEmc PalM3J48cT6vEtoYcYi1VRwZKa8xLJMSqkeMraStt4B6/DjHQhfbvYkYaU5HXdYrVWverdThTqIU rbaqeWz7OEbFPHF7UWX4VMlClfBauXH7yL8uTaH3ohuFSXH7NTt9/DTuzqEt1egRxGPUd6T5zpg4 HMTku3SGYcqp+rbxam8wytVczl1sFmMkKy5IkVK87iu6zsuk4yijllDXS/rYmDiUfYey6bAw4uKQ 392dUVo1Yn4VTuyVnBbX4cLHjFpY1nG3qWbuwDSTuy9Opq3b6c8aqOso0AZURTSPPLUZike7mPNY EWsWgmtr4o4+uv+X7qN5FSXdFuR0HX7fQGQ7h/PxbayqGaLkOezlJdThzGaZ1CqpWFdzJE3dUZL7 /ulo78K5+ZDCC2zfqcTeTBKFcDbxpWpow5/NHtJ50E5aM5eplZaJGMdOK3GzrqEdZB1xBx1uVp3X XcVpn2/kXG8nrlwr56LuQ5MmquFU0X21JtGTVS0oalFWFEPVfMwCrzBWZ7o5hUjDDlXUoZWrJ+QU 1GKitEoJebaduH7ONlwkRaqj3qHgtVB5UowMLS0pqfK7FqmvwBrkvJzaxjx1rHGvl3C9qzbeFPfU a6Smtxyccpb7Gk8gBqGOx1Ue6S8i1b26qWnEcnHUMEb9nhtvSmWy4vbCCxM5pkBb06XEo0lRp5oW tyN4Ca81Qx1JDhLBZeL2/U4T8byEzpiiP0UKvVDa36NkB0iR+saltPdSUpydT0vldpBu5Igv0jaU 4T53zurQQD2Z23m0QAt/rdeZF7y1xu006XYOqSVGspZ6FrWyDr+4Skr4pBnq1LPUVSa9jTpD7dtY 1rRAvV+cmh2HHuz2kYl5/GVHkxTTt8CR8DXablVTNZ3eIHFiRKrF7wrqpmaThkznHhI5jJQ5vVaJ vb+T/n+cY6RvLwhnnUn7da+0a0NpJeyj/KX1LiV9SIxuV4i+fS3c/il6dL6ke98RJfJsaffE0g4T IdLPeO+bYv7tfe8e60td2gVD/a5buTJFvT4sSptNjNfcTiAO67FCHALRFaKYyRMxChswnkLUlhZo PVbc7i6utI30pFC7yWqiRjltrM74SpybROqjFmi3t6zyJx1+5LdzDS1wlOW53rs9C2rId7idL9wO BLXEPm0WtyunrizTaNHIklrV8a0Fcil6vZ4ePBOogc6QxjqNte7hp7tNNHGvw3rOKLeDu5Y2S4vr VBlnNtIjpIZUMkTNtkOiK3J85EkTCsw5Rz4t6nEzXVtPF7cDT4LtmKWusihul/FacZjatTxXzTnj bF1R2jPKaGF7iVEHy9HGec67Iu18DvM/S413mDxIHf0hlpPOduOuaRzF88lj5cHBrOOKMp308Tri knaDNs0nhevG1Zm4FiENzjGFSS8ipD9uj6iEH1+1HiEyRo4hRM1/mJb0MDlYhwgfBrWL0k9Bd3dp AWW+kbyi8p9dbKscR61iRC7wvOBichyTyJPpatQMqbeF+ujV3OmpkVZwXRGWcTWcR0ToDBG71CNA Z/QyWmO7kdMCIm87jjXDFnPIuA4nV+tUSaqq/lqV9P5QKjuFtXS7+0TIV7WI2ydsEdprnJ9BEV9T RWIsE7c/eZQWigpyHTUS8eheUf53v8u5A72inpX5+RzjiChZqd0e327ftr5UQtIP9SJr9VmTIpQY or3H7pxD7K9kr5SO3C5Vel3ppmJ5xu1o80dwBTcwImM+d3MpI9dbYCsV0TeT0MItfky6XdGytJfo fmzTiYqe4f3dnLVzybPOYys7e2ze+xRFaeFMsC/b0M+Ke62lWmG20/6d4YjL8W5tU4cdpqXP2S/7 1lGsZbWXTKTtYQLfkuAodbyWs/RViNsvM8a+dxjZNZRenL9epZdxHG9c7vn0RlLDakpl9axro5fT 6kkZq1j2Jo/e5qzRCfZbRNwuhW4+REkfnD3a+eDV4x1d4nDclb7W07aiHOUkWnyLfnf4Fq78OZYu x5GX5DyLkN9Lkrso8zVxu/3lyKOEOaMaKMNM5ijXt0+gxFEmzhpeK24nm7mkXdWS611vUtydQduu UtweXSGWvNyvvlHatJ3Nx/GGGT7bxJ6YQwkww1o63N6ZlDtKSP1z2D557lqSk9Eo0XTayStoc/2/ 7H19fFTF1f/MvZvNZrNZIkVEMC+AJEIgK0XCS0gCSQgvJpuQhE2AZIEAEXkJYCAIlCgqIKL4HoUC UtRoKU0txTyKfPhoVZRaoEoFkYpa5E0ttUrzUMje+zvznbMJWvs8tE+fz++f53M/d87u3bszZ2bO OXPmzJk5SovcAm+zMj5pLog+VKetqyhty1CHx6FfrYaUK8Nq80qigDJ4d0xkCV+JdchyHv/bTzsP cMSV+TRezeEZyRzoYyqdSVj9CCfRqlhW6jzyRZgDLIcnitr3tFzo2NpThY6kuxz2w9uxkqrm2con 6A7MaObB60P7d0wVFVyTYnDFeKFjWFWCUudgZlLDupiKwqZjCs/Fia41mHfr0871Sc9BeCMuxEpb FXzyZmGcu4X7YTY0ygDk2ARoUtPQtxWwG7RfqgduozadL3SsuELRHpVLc0MBqK2A5IPSj9VZgWrF UXvvBKAxjWqb5U0TxTzfmsa0oTzabocuXoheUlGKatmDSbXoPbyirle91XpiZpssC5/fnS/aT/oe Cx6eg7ZYBY1QUU8teF+NoMugT05Ae5TCR0H7BRWyPlSBsbKAPbn8OCe9lKl+CuvpJfCz0ecWTgKP B1iD1qN3uSjh75Pxe7HQs+UxrKtNAgVMEDqKQyG08UngjPY4XgFQ8XhwWli/L0DeShqPwfNi9h5Q LX0zzcr9ooz5qAj6j4oeNwb/qCMumI01+bHwjC3hGai2+iop8zD+GYD9ZCpHk9hE84z7RQlrhcUs L0vYf0s/DZ/nqE9QKqUeKgFGKl7Ccnhja5+Q8UTxY+FR9lt4vs4B9c+EB5WKw6jW/9V4p6OyVGAc r8VVKB6h7yspraO0QajzKNUpy/WiEeNNPWhlIfhD4b4cPPegGI9oyqqVp4AK1tM76tRLFcdS1UX5 Oy5lSa1afqHQkcJWIcrKeozVJYhgV4dosXU4334WlX47og3MRJ8pj7zboZM9htNBK2FVmof4z8rC puKG3wx7TCnkjY7UUgnOG8ejTTnbBZQOMwsRzOZinFJUMA+yUM1c7oaFSPVbDjR1VQs/vB38PB6F LW/3QbKXsoag+vUWfF4L/SJfhOdwaqYwD7ym48ROFpPZS3gyuGWq0LFkdLzUCnCNH3OnAOKqVQgd KzEILILMz6XQV/RYqiPJq/nSzdBcy3BaqvZ6qoMcK+G5hrbVhDWZMraGBNg76xbkPF6U8Yidi6dK Wy9ADNNaaBfFkD/TEENnPHTBAmjIpTwTmI35hKLbWzHqjENkSX1O93j0io7dcjPjMxH0o/07/Sht KqRFodCRbPwY4cZi1j8OZ9IqS8JS0O8kjDWKhnSUzkKc6aujHWkv9iAo7z7EwGigN5ZgHLiH2qWG eEX55GstSXmHqjgvagR5nP45Az6nAbGVqHAaW65uodJVXI0V8Gyqxnim+GcyRnkdc7UE9i7N+dWo +61IC5l+iuHxofRCrfflY0+tngveLHS8wULWE8PRo7SPro4nVUzlj8K3AGH2DJW/TDyEllbax10Y aRbznGYFJOci6ACT8X4pvPTL2nxTK3ESbSlimeZjLrIYVtUcoSP3TIJGWcqefkoL17G7bhY6bpD2 OymADqaobDR4thb9p+ghX+hdETrm6ShQnKbxWugG2s/NL8Lz8wWY3+bzjCML0m4sni/AP5exXbsI uS/DaF8KapoAK+gs0JCOPToD88K7hI66fhciERfBR6kMOuUUjO+VJIOmwNa2Hv2sZ3t3CW09KMcM pwoaVxVR0O2YuelZpLa9tltWFcWPFDpikNJWbuVoLLPhr7ScWvZWjLbL4Ul7O0pbQO2lIlYEEHN5 KaLkqIg9D0LLnou5SynOop8LqaGtmGPAK5PZgqTo/dvahL5mQCJUQBbdhhZUPDsOb6vIybMJhzlC 2/jDsWbGC+2VWid0VEZF06tEe1y0EUQZSyG/b8XsUNk4S0A5OvbbQjGeZ9sK02zW8gIYNZR+Ugkr to6qUSj02sokfNJxVxUfz0CkYMU9OpKKjno+ijFSrbCScpsN+4TKsRBeU4XYb7Qaep0aRU/iVIA7 RA37xD5JOW6C1+hk6O/aTqz8lyYQ/2gPtSLoDtqbW59GqHaDKFvsvZC0Vbw+UwnLmtI1boPlcDbR veK5J9EKc0QzxrNRot2edDPrLCuR9yzWOmayrhiAp/Ht2CegovbqSNqVmF3mE136EVetGKNsEc8m x4OjFmBOV4yTAybybM5POJVAJo7HeDeJ8NNRaZeB/v14VoGSSyARFlD5y+FTPQVvzRU6rp1ay5kF O77WPUZgpNDrQlpHmoC7QOjTzAugEyzF73dDfhcyNQTB+euFjuFWBN2nGhxVAkk+AZE4/RhtF2PE 85PMVrrKXWKyVHPcx4XeY0HjlTnCHGF0M7qJD9t8cLzqzFH4xSi/ko6iu33Jfk5cJboLab8o3PaL 6qLPrXxyp/I2+U+6EugaHn4Hs+2zOL30bXFMJKp99MKJ0q4zrvuHpXUS16M0gsK8rDTzW6VdokuV lhN+B6V98d3SaIzSVw+iZZU2iFfFayKK7gt0v8bwVZFIeWrPmB7wqVG4ue0QtfVVhJXyFnJKpxiu zlzVJ7LKheJl+YE4Lc7I34q1ciROr98uHWKZvE92Ih6ok/Hiz3KY2CfmyArxijj/nTN+/v5ksGbx M7GR05fpVtf3nZp5pc98/6MzRJbhUjke+d4rXN7Hl73T7sMVTq/8vx9zqvD/DJ/3f+91jK79uMPp 9z+70v9e6fWv//f/V/v91/+9nHau7Prgey99cu0X4jhS/Sx8/swHbemV/vf76jEfuznnQ6LPxz0f nn9hz76TtubJR0i6rhZPkPSuhxT8EY2qT8ubYJ1fQRJxEUnjRnjdP0FysEk8Tem9YqAYJoQxUNrm rca9xk7jFVEq+4k/yV8bQm6WmwwlG1+Vq4xGnDdfqy5zodldNshGvPGLtlPmnxWr5Xx4opxRl9mD /vm5qc6SPyptdaK+dMte4l14wuwwRxs/Mh4w1tt/loPFx3KoDMmRcqPcKV83ZsuXjTXwv5isLuNN 4ym1j52ua+CJwZfYIlcqXwx46d5prKd/1hm75FnjZvmFsOQTVFpSuDTMMPRK9xuI0axsNSvZilcp dPTKYqF9kotFOJqZPiV4jtBryn4eA4sx59Wr8jr+t/pcyNqUvktYZ9azOz80kVLoLuMv+6WELXB6 nj4WmpHeVVXKK0Z6ZlXCdsdS1kb0bop50FEmUm/eQtqqerOGen4t9f/diO2xCHrVDOwBHIWYuZWw As2AblQldFzcauyemoCdPWq1aTI0jOWU43JqqVr4pKhrIzBV9p5HxANEO0uwgy8IO0U5IrKuo9w3 Yc1FRcebhfORasWz9PvzvKKnZqGPC73Tpxb+AHN4hUavJSsdpB67HZQ+txS2t2FC7bPW1tSHeF+B 2ll2D+KPjef9LkqjVtbFe7HTS11LoQf7EatiDWYNZfB9mYqdmDOxBqlmKz+F7qx2jSl/+4exP7Ic fh5F0MemYd1G+ZNUY0YwHaWoXZzKepdHtZiOHaRqRr8Cu7fVanYB4rLkimLo5UHME6ZC5wrCllWF uXtQ6EgbOgZ4Kc97q3m2U4/9BpW81qLjR6nVe70Sugg2snJendB0oSwrtchnLPSqKYhoMhtRme9C NMtq9LuiqdnYXTMT+lYZVtqUH0oNqG0s283y4TlRBM2/nOfcAdRgFNsgS+DFomOmjIVmqddj10Hm rGD6Xwv9uOqy/WclqLXS5LcTDTzX9ry0zc6hPUCCbXOiycw7AawslSJ+ZgB21Olt1rcZ4JOZQscx LRLhCJdVQseSKwM1zBMB3r0QYFvaGNiwJ/H6td7FVwm/H71LL8i+LxN5P9wk9jcJYp5cAftLGfTM INaFKtlLYApWuVfA4j0Z9iO9g6cc84pKWI/LeY2/EpbkCVilLEF8sIngSaXTV7LFQO/fnMbllvNa lNLRG6g9VJ22Y05zH6TRDOjwG+j7YuLAZeAqZd1TPaqiIc7H/PQWrChOgXVuEfWrsn4/0dai+q6A JCz71jWRrQsag7K2zwG2DoXXp/WeKR1x0I80vG9ER4fRJY1n62shWzTDeeejL4owP9RrMdpapT0g SmHbUrL3fur1hzDXug8SWM3mlB/JEvTx42jz0ZgzqlTtHanmVdgK7OBWLVGDMxPmEz3NgYQuh615 HuxYk8ApE2ExKsa6jdpdPAe2qwmI3aP8ChYAt3FYX5iAHaO3YPY+Xeh98WXwfQlgplTANkx1AsQ0 yIxxKD2AHp8AzNQe+BqsLNSjxediluiHnbhc6BWpQhHegxT2VCjB+k6Q6a8c9oogKG4iLDjaQ66c JPM2yu1ZlFEGS+pqYDyevaG0b9Ad4J759PwRnAYwFSdglBLFPUAz1HUoaxyNB0ux21pRivIJuIOo aiNsQZN4XbIENkY/xgS1n84PjLZSmz2OcwzUqlKDUD5jynYxGq2wEla0xeC3STxDVCOp8qR5hFp+ OqSrn6S2jp6tarkMK3DqrIPJNA6qneNK45mOKLRFaEHFsXXotzp6I4i1du2JqPcLl4Mvp4ACpqDd p2AMmML+k2H7gvZxzIc9djLzt5aaanZaw3adm1mClWL/o4qMq0eAIvjGjBHak7GAV4/VeRgzxEje Ozi5ja/GgYvCKyjh+Kd+0R7f/fL1lQLOsT2eamHbJx2ffTxOhlJrHrMgm/2w798HPSnst1aC3dnK b2EiaP5OjCZ3AM9KRAVbgR10SpdYQtdijBQTYL1ZCqtdHtbk/CR9bsFerBKsERRjdWU6VgXL8W2a 0PuPJ0CbqOTTS0rBZ5petUfg7WjZycw3ZaCT8C7gYpySUQBu0Lv+K4T2NpwH+1GhKGEbkfp1mtB7 1EtE2INvPPimAhiVQKqMxu9qJFW283LuBx0FugDWk1JwexnatoKt3TrOZBVWaZUv1DycDrECOk8l rCkVkOuTYPOthA+Vou7VGAm0j+oUaAJ6//EkRGHXcbsmYf1zLk6LUFjUYKRQMnEZqFrrshPb5G4x j5hlIryfWrViASRkAUcGD3t95bSNzEWosVprW4h160qMCfmgxsnwJimFP+hSLqOS85hBWJRCbyvG WSsBRBodD7vqIoxVem9eAKvByxBNVOsByn48BvS5nJ7nUU5q7JqNcyZLEWWwAJrATNi4dIToCuA1 gVpW+QMG6b4dPkvTERdNabVKOtwKK2A9LEKKTuuFOmFlmtB7WCeK8Iqa0hmmQk9eRFc4Qki7D5ee GbR7NuszDtp31ftFgK1fdTjtYymVvwQxTNWpMLMh35fBg/pWyJT54KBSnEmizy4pw7kUpdBkVczs kWIiew3pFYUA2mcmfFYmYhf6DLaSlmBkKIX2MxfS6lZRwlrGRLSjwnIu1ld0FFFltasUeu+/9s8q g1akV+SnYa+30iPm0RtzIe2mgttqWGcqAldWse6lYwSX8MpSBVpmLPSlEsj4APRN7TelPTEUn0zl ls/HGKE9l+/EGLqgzSu4gj4rqquHDqZj5SnNbgH8K8rZF+Y2umaTDF+As43aTz7Qa2ZFwKAAsP1S Kwl3sh5zB/xVyvE5INr9cBRXj+WVlkL4lal4o8oT9W4xCdFz1XxiIWYENVjLDMJmrXYhF8LyvlCM A3ZBoc+JmoS21vtuZ7B3RTliZSurtY6duBB6pz7B5GZInkmw8ipNZ6rQ6/nao3Ic5J72ndNxc4OQ wKr1c4T2ydFz01LWvIqZavWIEeB9z9ra6gfN+MG3CyAL9b710ViHGQPNV7XRTEgD1U45QvsS5rEF W61Sj+W1ar1KrcsqgkRT1HvEOEwXx9+Uw8Xb4nrYSrq3xYNSVhYVAXUyfU6k6yTbhN6m5/vovoRn iXimPx3haFJXiSPyVfStflPt2ruJrvb3T37rsyopUeyzf4+9kfuQi7K2XIX0N4TFL5GHjkv0CVJt oYn/nkvZYttT/eQFtXeO0heQ/oK//YJyfZUulferuNW1l9O9bZ//0bXsn72M9zHfz8COtvFqH6T9 H2pPpa3OP3ZTv6l9ku/bz4mn7Bft8207Lntg92oCWsQt3rrsevJ/6dT3/n93UTsS9s8absRTvFa+ KXcbTrkYO6Eel0fFl8THH4oKWSl/LTeJZFkur5Kb5K/kvfILZYUyPjFCsgznPvawW2SB/ES+aPxQ bjIaabQ9FL7p1yhTENcK2dtMlPPFPBknu5qJNJ94yHjM6GE6zW3mErFbdpM9ZTKlA2SS7EppN0r/ JGuNaOOI4ZHx4jf0bAB+b4fJ/A3fxV5+3v50AJXyCpVTYb5hVsgzwmq7TemWsSKBUrc8T9cZtctX /ifBSnleR5iTHQxB/6fbVDO7J4n38rDCskD8WbSIFsKzozgqrwl/E5dwBuUPlWW+7ffwp58bZ+X1 Mln81XQQVt+Y2+TzsrPxollh3k/fL8knCNuhxkpjJWHwnIxTrWV8Ip4ythvbqXXUSVdBqtsZaqtt Znd9GYYYIZarOqu3ZJN5u3pKpRcgvu1ynD+VDzgUcbKGiuFihCGozFpzgNnTVDpjixgvqZqEw1/p PTfBeGOwkW8UGNnyBrp6m28YZUYX9d3Ij5gVscQcIFzCZSTLEdSX75tr1TnGbVeKOEr3brVHVO4V a40cOZAoZ43cIlbIT8WPaSZhiAdFV+zX3SIM2VV4xFrRhebV28V6+u1R0UnsFy8RtXSl92KNj+jf nWR32Z3+25FmMkeJQ5+Q/cUeKsuQKeimZuGl0uaLXfR0F0nCTvTPszTHfkc8KHdQuevFA3I35byW /nuW8nhbnqA33hZvEPc2GtfJjvJdeqNJrDZmyunyEM3atlGuW8R19K5LYSX99F09s+hzT8L4edGR uNcg6jYUJkZnKegXh4glrb+T2C7X0ltrqNdV7LLukAId6YmD3plC+TTSRXjLfHGMcPxUeuV+sd6o kkVGOrXHN1THT8WfZJYRLz3iGVlBv2fQ2x+R9J1O/bNXHkGtu9C9XGaY8fIF6p3+8oTR3xhoeIwc yuWIPG04ZIvhkpaRo3qLajHHWEi4vgAf4xWiSeyAnqhmOO9TnfWcIZ8wS6dxpFEMgZ2mVAzDWSbb qcYvQavZQe2irFb51OpKN56lPhsPqD0pxg1iphwlmo1m6oUqWUXv7qLv28VPzEGkaxwUc+Q5avVf q9259H0+aRN7Sf+sIn66QLmvka0kPbcTVpvhbVBAOKhL77PKo/70Y2a+EuPvKHpSKgZB91FxeNV5 KjVszxrFs4kAdKFy0vSUPXkM/KxHE2UNp9mxGv3H4Pd8+M9tx3hbRNBPdPIEzb2Vv9xthGkxbBlF yGkM0nzYUKroXWU/2YZVYuW5/BFmSOMon2JoDGuovYNCnxY0mv7zvCiBV2o5ajGbWrmG/jVS7CQ6 UtG71XtbQH36vBB9hkyh0LuTFtP3HfC9X0N9FKD/5VLpmZRrkdA7DMrZ13U11XEKtAhlOXye8FTa 1laeI4+GxruWahgU+sSboAiyPrcU8/jRsOKMwUxnPT2djfefQN61xNsF8AMLEt6qr0rYn1N7/Kkc R+HEkArgXw7sg9jPNx3W08eBh59qn08j/lbxU+wn/+5YpfSI3Vjd2Ye17iNU35HiKiNDNslJxClP GVsQN3KnWIP7HWMr/V6At5SFdCTukaKrGgtI1g7A6HJGnJenSdZfkCZJwUJzNMlqfXWjO1l83j5u fOvq9u3vJC7voR68KP4m+pJMOCl+IDvQqNZVqJz/JqNlT3qjhuR4qiyjEcwhFlGZ/WVf/OOiuIfk VgHl2Y0+3YAxKo9oZkHbiLWgbTwrInjDZRjosTEh/E7bf7rhlzPirxi1Rkq141ndUXT/Dc/UNxfS DiJNvaPf5HHuDH5JEmocUmtLP1T/kmoVvIscKX4pl1ML9qa6qZGVxkwzSGPFNyKNpF4JfH5p+KDb Q3dndfCL+ja5gFIH/6JTt9hpVAtnbl5+qUiatuS2OWLYLbfNmC2KZ06tuVXMnD21ZqqonzN1YQ1J BfVPYdvCScBJOXckeRd/2VMpIkWM+IG4ljSo9qcGSTovSeCuRD3tT00RJTqIq0U3ksXtTx2ETyzh e53ocdnTCBFN+tg1Ik70FNfPnDpnofgQ6SdITyH9EunXSC/MnnFbjbBUKh1I3UhjkXZGet18elP2 QHoD0lSkNyEdinR4HWUn85DmIy1GWo40iHR63WzKbRbS+UjrkP4I6V1I762j7OQ6pI8h3YB0C9JG pNu/1Sv/Veq4glReQWpcQRpxBan536RO6v0fknxZ2uFC7I3U64KeeYgertOYxPoZ/obhqb9/56qx GnZcpeEPnH//Ts/RDP/A8DP1jrzfjDeTzFQzzcw080y/GTCDZrVZY9aZ9eYqc53ZYG42G80ms9nc Y+41D5iHzePmKfOc2WJaDqfD6+jsiHckOVIdaY5MR57D7wg4go5qR42jzlHvWOVY52hwbHY0Opoc zY49jr2OA47DjuOOU45zjhaHFeGM8EZ0joiPSIpIjUiLyIzIi/BHBCKCEdURNRF1EfURqyLWRTRE bI5ojGiKaI7YE7E34kDE4YjjEacizkW0RFhOp9Pr7OyMdyY5U51pzkxnntPvDDiDzmpnjbPOWe9c 5VznbHBudjY6m5zNzj3Ovc4DzsPO485TznPOFqcV6Yz0RnaOjI9MikyNTIvMjMyL9EcGIoOR1ZE1 kXWR9ZGrItdFNkRujmyMbIpsjtwTuTfyQOThyOORpyLPRbZEWi6ny+vq7Ip3JblSXWmuTFeey+8K uIKualeNq85V71rlWudqcG12NbqaXM2uPa69rgOuw67jrlOuc64WlxXljPJGdY6Kj0qKSo1Ki8qM yovyRwWiglHVUTVRdVH1Uaui1kU1RG2OaoxqimqO2hO1N+pA1OGo41Gnos5FtURZbqfb6+7sjncn uVPdae5Md57b7w64g+5qd427zl3vXuVe525wb3Y3upvcze497r3uA+7D7uPuU+5z7ha3Fe2M9kZ3 jo6PTopOjU6LzozOi/ZHB6KD0dXRNdF10fXRq6LXRTdEb45ujG6Kbo7eE703+kD04ejj0aeiz0W3 RFsep8fr6eyJ9yR5Uj1pnkxPnsfvCXiCnmpPjafOU+9Z5VnnafBs9jR6mjzNnj2evZ4DnsOe455T nnOeFo8V44zxxnSOiY9JikmNSYvJjMmL8ccEYoIx1TE1MXUx9TGrYtbFNMRsjmmMaYppjtkTszfm QMzhmOMxp2LOxbTEWF6n1+vt7I33JnlTvWneTG+e1+8NeIPeam+Nt85b713lXedt8G72NnqbvM3e Pd693gPew97j3lPec94Wr9XB2cHboXOH+A5JHVI7pHXI7JDXwd8h0CHYobpDTYc6zSXdJzKsYjiL 4W0a9nAy7MHw1wyZW3u8x/CPDD9n+DXDi8yNboYdGXJ+PYsYljOcybCG4T0M72f4GMONDLcy3MFw F0PGryfj15Px68n49WS8rme8rt/GcC9DliLXf8bwvIa9uPxeXH6v7Qx3M/wtQy6vF7dDksGQ65/E 9U/qw/CHDLMZcnskTWHI7ZI0n+GdDB9iyHgk7WTI+CQxPklcn6QvGbZqmOxhyFI0uS/DYQzzGVYw nMPwRwwfYcj9kMztmMz9kMz0ksz9kfwhwxYNb2D6uqEzwySGaQzzGAYYVjNk+r2BR4QbGhg2Mmxi uIfhAYbHGZ5jaGnY28uQ692b692b692b692b692b6bE300Fvbv/e3O69ud17c7v35nbvze3ex8Gw E8PrGd7EMJdhKUPGow/j0WchQ8anD+PTh/Hpw/j0YXz6MD59fs+Q8erDePVh+u7D+KUwfilMHylM HylMHymMZwq3Vwrjm8LtlsL4pkxnyPimML4pzNcpGxgy3aQwH6cw/aQwvinMhymMbwrjm8L49mU8 +3J79mV8+w5myHzUl/moL/NRX6bfvoxHX6bjvoxPX8anL+PTl+m47ycMv9KwH9NxP6ajfvEMmZ77 MT33Y3rux/Tcj+m5H8u7fkzX/Ziu+61jyPTdbzNDpvN+TOf9mM77sfzqx/Tej+VdP5Z3qSzvUlkO pbIcSuV8Uzm/VM4v9ZSGPh4fbmQ5dSPLqRt5vBjAcmjAkwyfZ8h0dhOXe1NXhiz3bhrKkPO7qZhh s4aDuN8Gcb8N4fKH8PtDWDMcwuPYEG6/IcwPQ5gfhjA/DGH5OOQMQ+6/oTzeDb2LIdPFUKaHoUwP Q5kehrJcG8rjy1Bu33SuZzrXM53bN53rm874p3O90xn/dMY/nfkjnfFPZ/zTGf90xj/9dwyZDtO5 HsNYvx/mYtiFIfPrMObTYdyuw5gPhnF5w7i8YVzeMC5v2BsMmR+HMT8OYz7MYHmRwfyXwfyXwfyX wdp5Bo/3GVx+BvdXBtN7BtN7BtNjBtNjBtNjBtN1BsvxTOa7TB4/MpnfMlMZZjLkWUZmkCGXl8l8 lcn8lMnlZXJ5mUz/mTxeZfJ4kcV8nsV8nsXlZXF5WVxeFpeXxfydxfXN4vKzuPwsLj+L6T6L6SqL x8ss1ieyWJ/IYjyGMx7DGY/hjMdwxmM4y5vhXP5wLn94PUNu7+Hc3sO5/sO5/sO5vYdzew/ncXM4 lz+Cyx/B5Y/g8kewvBvB5Y9geTeC22ME4zOC8RjB8ncE89kIlrcjWN6OOMyQ+2ME90c2938281k2 81c2y4dslifZLL+ymc+zmc+zmc+zmc+zmb+zmb+zuR+yuf2zuf1zWJ/LYTmaw/XO4XbP4f7P4frm cH1zuL453O453O453O453O453O453O45LMdzuPxcLj+Xy8/l+udy/XO5/rlc/1yWL7ncDrmMRy7j kct0mMv45DI+uSxncj9gyHIzl+XNSG7/kUwHI5kPR8Zjhh4hYkUXkShuEDcK2BTwO8HyLhrekq3h wlMarmj5/v9titfwF4ka/odfwze+1vA9ZTIrp/91ahX/3ovy72RsMbYazxiNxvPGNmO70WS8YOww dsbt8lX6Jvum+qb5ZvjW+h7IGoUVgAjhsOh/l9+Uh8O401hh3GXcQ+9kCofo9i9j0834kbHcqDfu MH5iPG08azxn/NT4mfFz4xfGL41fGS8abxp7jbfiXvEFfVN8Vb7pvmrf/b51WaOp3A8It5u+i9s/ uv+ZK7T50iCr16WPQksungu9dmlJaNnFr61ul86q56GDl4Yo2Mr5hkZffDh08dIFvEvv/bd5b7w0 gPLYSPcO5Ke+z7t4NLT44lkqax61yE3htjVWG/caa4z7jCeNTd/fZ2aiOcgcaqabGeZIM+S4Om59 3K6EUQmjE8YkbE6d8N3+LHy38Gjhh4UnC08Vfl34TeF5asM86ruE/zFFJbT14Upj1T/Xj1lvZ+0T RsxjIsKcZu0OLbD2hxqsr0K7rRWhjta20A7bb421P7LL7YftsfYLdoVV3brf7m9VhW/rbOhdO9da ffmzb91LrK/sgdYse6OdbIuQZXezfJT/R9bOULV1PvSlfcTebh0MbbDTrZ2WFWqlsnZZL4Xm2kft HfZ+ewP9d6Y9gO5BdPdnqL4blgN3nDUId5612K624+h/TfSvAdY5y2tvs7PsLXaG1RI6Zq+2Y9tw KreacC+wPrZ99J3wo3pvQHleK07VETc9s5pDs3AfCY22doVqrabQPMKv1no9tNj6mm71rJnu3bgX W6+FalUe9liriPKtsudZ79rdQ4fsa0Iv2VXWa/T9mOVtddkBq8L2hLaK7iLbrrVO0G+v29mWDzDX Srcuhs4S3qftmdZBO5byu2h/Rflea3ck/M6G3rIaQvnWntBa68GQl/B8gPAqp/4aS3g1EE797Rb7 HPpyR6iKvq+13qF3Ylvd1qLW09Zb9Ly29YT9vF1kLWg9YS2hO7t1BbVtlX3MbqZe3mB/bZ+2NoR6 2S7LbTup/Z63e9HzLSqKJ73zld0ivITbarvWftTuGNpDLf4x9dgi+7TobgepbddQPuXWMvsB+zVb WD0pn9WU50e2Ol87TnQUPjGF6KmT/ZL9MfXZVqSb7Qy6q4lGFtvvE2V8LXrajfYAe5e9kzCtshcQ HW6n9JC92P6SWuQkvfMl5XmIyrog+tsXxSB6psroRLyVQlh+TTCBcHXR5/aLMBXXirGip6iyZ1m7 hJtyOU3/O20ftCdaL1H7b6M84uxSayO141fWsdBuopVPiUb3E631ps/H6HcH4ZJB/bxVuKhNDhGl HSVst9jFhNUzqpeJ5qqsL4mu7rZ22Q4rw26wp9vXWAOJzhrsFCvbftNeSxTnt3dTuZvtgdTGu6lN T1OLvk7YbLTP2Z/a8+yO9P0g4fYO1SOF3liBezu19W6q7Qkq8QI9X2Z3p1Y8RP3hon44ae+hNnqL /hVLvPcS8cQxwvFN6pV3Rax1NLTPdloTqdVqqW0X2PsIj68o/yprjXDa54WHcnSLa4lGV9hBqs9K emeu3Y366wTl/RXV883L7t2E65t076Z8dlM/96femklYuamdd9s9ic5PUn16U3kf229ZJ0Nf2dOt C9Sf79udqA1aRDd7uS2oHYZYltWL5Ew21fsI9X8Tce4+qqWLcDasr61rKI/0Nt5S/JRuLVK8pfhB 8RV4R/EV8UsbX6l31PNq6x3FX9aF0JfgK+Ij6h8PeGojtX2V9SZ97m0vpzpnW6utd0NfkYwaSLyy 1vo0dMT6mGTiSctp9w69TnQ90Xoz9DA926J4nuilnLD3EJ+1WumtW0hWbCY66W8vso5SHaZTXxUB 7yzCP4z7Yuss5IK6u1nJwFXdCv9jdgLwD9eJcVfyROFuXQBtadyrrYv2aGsN8W461XUByb3+kA0v kHzdFSqy1rQ2Ej6NkA9023dTzz8QioNsU/fOUIrtCO0iPO+wDtF7Sl68E3oSMkPJlkWtZ5V8II7t BVmxL/Q61f1BosiNRMe7qd5zqc0skoFF1t2hjtSPJFFDDuKoDcQ7ijt3Ee34qE+PqbLpP1PslSQT V9uG/SDJ6ycJ7if6eotqfxDtuQT0o2Seql+L/TVkc4blV7IcMv1ugoeIlsNjwGj67iNZE2ulYBxQ cpzGAPrveeujUDrR3z7RP5Rr976yi+p8wi62tlA/74ecXGC9RZR/iL4fVG1A9cluK6Oa3tkYGoLP i4leD1JNlOwlWWx/JDraXxF9nyP+3EAU7bc22zus16z81ietIr6L6Z7OcDTdeXTn83eCJOXOE3dd Q7T0Ln1uJbnRn+iuFePQ7tBMwmkx0XIW9fd+aqO7adyqVrip+qqbxvEitN8A4rEBVjXwDI+DxdYz bbeqj7ofpjFKjZWzqDzV3iuofy6/m6nPmklaUV7QBcIw/P/vPv8OJG2gk+hFnH/UsoiiLOrzZutL q1ObvnGlY5Dq7380Dik64LFI5f9/45H9jOKRsG4HPe4KxyfI3X80Ril5zOOU6sP/G6v0WPV3fN9I uvM5+vQCjQM77VLCoJpauCe15xD7UauVanottVsC9dJA6sv3qYYu1Pclwq2WZGa6tZ1oeHcbn9FY RfLhGXW38XIL9X+tfQfRfzN9HkR57qQa7aT+2kl5v0PlNxN8nlqrJ9rXaRVbD4dWkKw/QvXOtt3W QOLBBDuB8ppobaHxb7P1KclWH/WJz5pHfNlIbdCPnu8jufMA0dkO0tctu7uVR2UKLQ9JFj4a6kVj xAarNXSB3nm0Tb5cPicI6/LfnSv8K3X4d+BPY7OIsw4S9x20VrYmULtfKwI0TvWiMXc/jV2kF9A4 6Vd6QOhgawr0fBrjwzfG91qSi2pcV2O00t29rU56do0azzFeqzFckB6hxmM9rp4myjlJzw6pMRg6 +MHQRuGzK4gXaE4mFhl3G3cLYTxgPCyk8ajxmHAaDUaDcBkbjY0iymg23hBuY5/xnrjW+NT4VPQ0 Thn/Ka43/mZYIs0UZoQYZkaaHpFtes0EMdrsbqaJieZgc4iYbw4zh4nbzEwzV9SaeWarWGpajk6y v6OzI0WOdvRzZMigI9uRI+c5Rjqq5YLIvMg8+ajrqOuofMxz2HNYPu6t99bLBu/n3s/lE7EyVson Y81YU66PdcW65IbYtbFr5Y9jj8celxs7/qrjr+Smq89cfUZu7jqp6yT5VNzguMFyS9yGuB/Ln8Rt itskn47bGrdVPhP3ctzL8tm438S9Ixvj9se9J59P6JLQVTYljE0YK3+ZUJowXu5ImJAwQe5MmJQw Sb6YsDzhXtmc8FTCM/LXCY0Jz8m3Ey4kXJC/Sbw68Wr5TmKXxC7yt4nXJV4n9ycmJSbJA4lFiUXy YOKcxLnyd4kLEm+T7yUuS6yXv098MfFF+UHSwKSB8mjSI0mb5IepgdSAPJVanlouT6dWpFbIM750 X7Y86xvpy5N/8Y32jZbf+Mb6xsrzvnxfvvyrb5yvVLb4yn0V8qLvUd9j0vY94XvCkL71vqcMw7fN 9zMjynfAd8iI9h31/cG4yvex74/G1b7TvjPGtb4vfF8a3Xx/9v3ZiPP9xfcXI973zY0/NRIGPj3w aePwwBcHvmgcSeua1s34IK1HWg/jw7T8tHzjWNrP035u/GFQ4aBC46PBnQd3No4PfmPwG8bHg08M PmF8MmTakGnGp0P2DNlj/HFo+tB040S6J91jfJa+JX2LcTJrZFaecSprTNZY40yWP2uK8XlWTVa9 Ecp6KOsh05v1SNYjZoes9Vk/NmOzfp71svmDrD9m2WZi4f7C35mZhe8VfmBmFx4r/MwcU3i68LRZ Uvh54V/M0sKWwotmxbhXxr1iTh332rjXzCqi4CIaia7/99jNYOe4Pv7d+Pfij8d/Ev/H+M/iT8Wf if88/sv4cwnXJPoTSxPHJwYSyxLLk99J/m3y/uQDyQeTf5f8bvJ7yYeSf5/8vm+mb5Zvjq/GN9/3 UJZavXQT7+hcpXEn4TqTnnRx0JP/zZtK6xL/UfzH8Z/Gn4g/GX86/mz8F/F/SuicWJhYkjghcWLi pMT/x963QEdRZWtXdxVJaEIIbRAUQgdNBRFJn+L96EoyiBAR6SoE5BERGQZ15leMj0FFQNSo+EJ0 BrFFRGxREVvHUWgQUWwQUVtEHiXiYwqvz+nxgYwySLr+7+yuPikYvXNn/XPvuv9aY6+vq85X5+yz z95fnVPVVcSGivPCF4YvDv8mfEl4Znhh7Ruur7MP2+TrIbdc/yM9K/OvzZVbzf6xkZdr7/lfHXf+ i2ZAUnjkvcj9otnV6vpemP/qeRnqnPjfnQtPTk78mZyYFWP+UV58e4/Qs6jaZ9zyR0fot/rwJIyj FIzfX35kEgf/Zdn/bWikWy91ZDa1S7vlrW75Lbe86cgcXpalvB3fxiPzOcjOJtkn6nHGVz1a1Hvm yGoOXq92V10QfCX4Ql/sSPrngLqFXfeGt4d3hN8Lvx/+U3i/sL6TrEeF9WlHDnOQdauuA7ZFUlEz PaczbdQqQy3Z2dfcOQ8ckUNzw2eGz3JtTiXOVxtzy5c0d6eIPemWpzSH6fglrm165mDub/Gg+dcc 3AM5rQ1wWw1rJv37fxT1jOYmDorXnZrs1ptAjK/2aVGve/MtHLyeMib6V7de9+YFvJ7SRdTr17yA g0b+QV1nT/tFHOTPjezTvH59fZqX/E+A61ceIdfLZ8pnYf0+QalXzlTOVqKKqZyjjFXGKxOVBmWK cr5ygTJN+aUyI7Qi9FjFZdHv8+eib0jzUi/4uYgrg1r59IrGfD4xvmV58HwqHZSQUuFGaghxvvI/ ioiozcs5KCLDlUoRkV7N8f8JUER6y33l/nKdPExpq7RXOitdleHKWcpoZZwyQZmu/Kr8ufJk6LzQ +SGnekz12LAe/Sb6rTueXs309NS/Town2Pw4B41nj1bnUcTjHJzv+le2Q/A9mldzkFI+rOsionhy 85o8eBT9B/zfhVeJVic3Jzl4q5BPO1vwo8CPyvFdv2UJwfds3shBfLNW7PF2Cwfnwwe0E91RBZu3 0aheccsn58qyX7Qb2byDg86XuzRFeN2x2cqDvP7M/7k/41opa95LVv/slkuaP6by2265uPkTKq8X vRQ1f8NBsfmorlzwIfChHN/V0Xrm1SntbT58FKBOZaRynjI1etjtQ83S08vwI245nCv7F+VtS3a2 gMDz9642VPCfZIsI3Jf36joJ/otsgMDrN7HPBf99toTAI/Sif6PgrWwpgde3tF8I/rNsGYHb31HX riUG2RM4iN9dd5yon852JnA7N7HPBP8x7k84uDL8mpiLpW3ZbgRuZ09dmcfPbgReX9LO8vC9CDzG Wa0kn2HEoI8Az/CaWrN2jGiVAZuhI/7at+kNAf7X8z7O9qMof+MZbT8Cr/du3fFuvY+yfIb2df1a tKOy/2sRjYLsEA6K6kK2SmTeztYeBX6N8Bf/V+U7yt/xZHYogY/oR61I8AfBHczxIUUrFfyh7DAC +IqRbI3gl2WHE3jkt2uDBL8hW0/g9g9rBYLfBG5Tjg/J2njB7wW3N8eHJ4cbBH8E3BHXzkH2nEc5 owncTiuto+B3ZscSeP0jWsAT47EEzv/AvnNjuj5L70NUnOhR0ngCH+dZ7EXBr8lOIfAc7axrL/g3 wL3h8u/XCTu+0uwUDsrN3exJUX9fdiqB+/E3dkTw87PTCDyOb2kD89ce8GXGzwLXHrg3eht3Rvtw X2TX3i2sbcfR7VTD72/GXW2e35K9iMC93V7X1sPPJHD+nbqWrK/PXkXg3n7PvvVEaQ6BZ+sb9rLg P8jOJ/D6h9hfBf9RdgGBj+59bbjgV2YXEXj9A+wZwe8AtyPHy9u0Pp7s3kvg9b9hqz3ZWUzg490Q nij4FLhUjpe/0M5xs74qS2+5hK4T9ZqySwl8/PvqTvC0X0Hg7f9DE1eKyPgKAvfjO/as4Ldm4wRe f6XWEt/d4Ha7/Ez2juvH6iytl7VPiXpXZVcRuB976zq69RLE+MLudZ/0eJbeCvN/Kto9B+Y5Yv3y HzRxhYWWCQKPyxf+LwW/MbuRwOt/qY31xHcrgfNRJq70pGR2O4H7tabWvXOCp3SN60+65Rtz5fAE j72dBG7vW22yW29J1qJx/0G0+4DKz7nlW3Ll0ia3HHePPy/sLs7aBG73z9o4wS/NfkMAH30v+qHb fmmW3tZRRrnl6Vl6W6601C035cqDHhL+HKIV/gyP3UMEHseX/C+79X6dpbcNa0/3xPswgfv1gqa6 9eZk6e1Yf8otz3PLR8Q6ckU2K4B1ZMCsAVcPuMajziyBW/1am5iz4uxz6B48/FV+NXfLfxHrwBzH fxSwuoeXhh+SxJ2RdI0TIHDLb2r98/4S4ws/kI9Hrhy61i3PdOgt33DLer0czHJi/fI17H233gyH 3kbqPz0fL7dcLDycCcYLfgU9UumkTArXog7/u7AF0iwn+JPwSQVKO6VcOSk0pXqquV5Ehe6owl+6 fU7JlYN8TuuCcivpKjDHwie1Uo4LTa2eHK6rnerGs9S19EVe7U5Hypp7/ypNdUI0mjYiKlSuMMRo VVJdy+xwidOdwNV5IPqdyP4scHkg+/Iv5KHKuaLVRU4PAo/tWq2baLXA6SnA7yyM6NfRQyLy/FrF N/h+j5U+BG7lI+1Mt95Yh65FIqeIenPAzCHWL7+tDRb8JGcAgfMfavWCvxPcnS7/inaap79BBM5/ quVjMt7hVyu+flG33JArD5gp2s0AM4NYv7xT00U9ncaTnwEnOfyqxnf8/fkzKldWRrjlCQ69d9e/ q1s2HHrf1qwR/cx2RhJ4P79le0U/9N58f5afKXJls6tQ7CRn9FHgiu0QurnqfrPlmqUJfBMd88vv aBHBX+EYBM7PYu+5fdQ69G8LjEOi3igwo4j1y73kaom/URdA1seC+1fCJ5WF5huzjZuMJuMW4zbj frOzWWmqZnfzVHOQea45z7zVXGDebt5lPih8m4p2U13fSqt+J/iRzngC54+ruk+cvZPA/RRw9oZu MlYaj5vDzXpzkhij4Uz4lwJjlNvJwdD1oRur7q1abFxqXGvMMa43lhgPGMvME81ys8IcaA4xx5v8 qmGJxP/P7mOdSf+r4JcC5hXmHEkyrzevl9qYN5o3SsVmk3mL1Na8zbxNKjXvMO+U2psLzQek48xl 5jKpwnzYfFjqZj5ixqWTRI5qnQYC/71Gi34ucjQK3E8BOTLnmvPNm8yl5kPmCqx9p6D+rfCp4d/4 N34Wfqmnf7t/uyTJJTLWdLm9jPsluUwuw9p2vNxRUkLzQvNw/t8QukEqDDWFmqSi0C2hW6XWVfdU 3SO1qfp91e+l4qolVUuktlWxqgekEuMS4xKp1JhpXCO1N64zrpO6GPOMeVK5Md+4Uepq3GzcLHUz bjUWSCcZtxv3SZVGzIhJmvGg8aDU23jIeFjqYzxixKX+xmPGY9JA4wljlTTIbGeeIA0xu5hdpOFm yAxJI8xu5slSvVllVklnmaeYPaRRZk9zgDTaHGwOliabuqlLDWat+QvpPPN0c5g01RxhjpCmmWea 46RfmhPMCdJl5mRzstRonmfyv7uVX/HoX2D53xRn4RhnCoHfYVZVLQXDz6oirHpT/lP4pCL5T9rI qBXdG90XfT/6QfQjcZdoOFN/FrhLNOYaS40VxqNmxBxqtlzVTsfR6VTDH90T/ZNn/ZlGAG/eYC73 rM3TCHyOf14LifWL/m1ZeEXLXQyYq4j1y+u0k8HUS/zvCdQ6F/0/wSeVlr9hrDHWGuuMDcbLxiYj Zbxq7DJ2G5bxnnHA+M7AHafvTfTVCP8v+jf+P4dPavRv878ld5JPkDvLXeRyOSRXyCfJJ8uVsip3 l3vIPeWwzGRNHiz/Vf5e/kE+JP9NPiz/KDfLWdlRJMWn+BVFaaUUKIVKkdJaCShtFFWpUrorpyin Kqcp1QpTeit9lH5Kf2WgMlgZouhKjVKn/EIZqpxRfj9/0l6+tPzB8mXlD5UvL3+4fEX5i+UbQxeE poWmh34VmhW6JrQs9FBoeejh0COheOjR0MrQoQqp4uSKyoqLK35d8Rv+xLzi0oqZFVdWXFX1YHV9 9ZnVZ1WPqj47+kn0i+iX5gbzJfMVcRbxpza+8g1QMH+iOgHMzH/jvxF+qb1SqpRKkjJIwX1K9cjq kZK/dnTtaEk2njSelxQjaSSldsZ64wWsPS8aL0lB4xXjFamDsdnYIh1vbDV2Sp2MPcYeSTXeNfZK VcY+41vpFOOgcVCqNb43fpDqjL+ZJdJQz8w/k8DnxUa2S9yDzaR7F/EcAnchMwm83uVst7j3qHUa jwK/9+gmnxb9zNwk7grHgM+D30sOKH++uuXOpN65gsCvADuGWzwbDW50jpf3aqe7ng13rqKZPSLW qOHOrP8UWKP8B5Wy0ORQQ2hG6MIKf7hG3IHNorvjK/j4UO4gDXOu+ZfDJ3Xw75BPpL81cqp8RJGV XkpfZYByujIsNCn0ywq5ql+1Ef04+h/mi2bLUwjdmUPgv+bt1loJfhi4YTle3q+N8tSfR+D8k9px 7giHEuPzv+aWww49Xx7Q8mtL2Gki8Hava30Fr4HTXH65Viiuy3VwPwVcl8uD5IisV0+onhj9QdgZ 6txC4HZ2aEMEP8RZQOD841o717+Qczv5a7tlLVeuPtct98uVB3Rwy0Ny5XCL3W7OnQRu9y9ayy8W KjjV5S9jO8UvL2Fwx8IntZL7yP0qlOrx5gueO5WFBG7hNa234MeDG+/yN7MvPGfMQgLn72D5JyYB ZxF5fLY4gwaA8YI/GUnLBeVrqid5sr6IwG0t03yCnwlupsvPYeJqyfneuZeD+Ge1Lm7fZcT4as/w ZHkxgdd7SeshfOoHzgt+Vg+UX664XDvVM77FBN52Ctsk2vZxYkcBbcOLwveE3wnv9MRyKYG3vZZ9 INqOBecF73ea/Eu2hb0q2pY7ywi87TdaS4z6gevn8k9o7d0xqw5/cu0LzfGMeQWB11uhtRb8cHDD XX48Wyv4Ps7jBM5/roknac5HzioOztc21LXYGQluZI6Xr2B7BG+AM1x+HHve9a+nQ7+bF6dFDAaB 8YLH4Hr5BvYx+8QzN64mcFvz2X+4tro59C9U/feKer2c5wjcxwl1rcSMPBxcHvwZ4Q/l6fLtotXJ zhoCt/601kmci/Tvj/0tv6+EnCSB1/ujJp7+Ooed9RzEJ7WTPPXXE/gv1ofDLb8DdgPXza3/ldby S313cN1dfpUWFHOQ6mz4SfA5aJI8mb3ANtSOq/N77GwgcDtPaR08/mwk8OicVxcQc9AmuuoZ6Jk7 NhF4+wa20WN3E4Hz57Kk4Ds7KQLn41ob4XcI3E+B+/2qvFVjmlZ7fl3LmnuCs4XA7WzWqj32txA4 fzXb5/pd6myl/PxN1BvgbCPweovYQeHHEHA/BfgRTUffim6Pvh3dGd0t7JQ5aQK3cxv7i9tfZ2J8 hS3PI3uB6eXWu48d9uhhOwfx+7QzPOPbTuDxP6dOrEnOIWcHB9V/Txsm6heDK3b5NVqFJx47CFxX N4VNwfcA18Plvy9/S5xx9EQoKp47O584uzno7neOdr5nptlN4P39nrX8FhoCF3L5GGsWdg46Fgfx n2mmOKPLwHnBZ/gbw2Nql9TmfyvuSKwvnH8aeIJbHuuJyV4Osr1a428HFOPaxw+WuNrJdS3PywPg Am7dF7Xugu8IrqPLT2dbBe939hE4v16rFHwRuCKXn8G2iVVkH/k2Tugp7Ng/CeipfF3o3NDE0JFQ cygrVsDcWyWb3XJJrlw015PnTwi83+e0roIvBVfq8gnteM/88QmB81cyyzPTf0Lg/L3sexHLA85n HMQ/o4knq04WfNblF7IDHvufEcCHxofE/OTsdL7goPq7tVrP+ZIhcP4DbYTge4Lr6fJTWcqzknzF QfwuLX91WkyMr/xtj+6+IvB6D7CWJ+gFzjcEroNJdYVu+yKHnjD6xRNv9HKQg9of0FquwPs53xM4 P4Gt8+j20FHgK9Gv5d+wNHvL0/dhAm+7lDmeNeQwgfN3spb3SoLOEQLn57H9pGOuwB2587R2Yp14 LwOtFQ6qew77Y4sNcEGXP5u1PKkugxbLpNybQYvZ3/LjwIiLvKBxmKFO7A+aWCOQlQAHtZ3NPmw5 p5EHgPg3tH6C3wHdAjRnzNbOE7wF3nL5udrUlhxDuQDZuY591DIHYiQcnL+KvdsSP4yEg/P/h4m1 2Z0x6W0jeYsWFrwN3nb5jdopnn47cxB/C/tS2C8BV+LyC1hG1N8GpW+T6G2jiuu0KYJ/A9kEqP6t 7M+eONAsS/wGrcqTu54cxD+oSSIXm7BCeMBzofRQIkpt9C+esfTioLbnsZcE/zH4j13+IvaGZyy9 CJy/nX0l6u/F2Q+QrqbUtRH8N+C/cflz65QWLUt9CNzOxUz8Ooozrh8H8eezV1rmTakfgfOXMHGe Yn0ZwEF8SuvVss5glQWIn8tsTwx1DvJnfJ2cn9vBECf/jv0guU+SJXqGGL7Pk69hHFTvV+w1T76G cxB/IXvd48NwDuIvYJs9YzQ4iF/CfvToZwYH8RPZeo/OZ3KQz2PrfK5/KyV6ezR60C2nJPrbKdGW c3Gr9KwXlP+e0R3RXVHx5gjuGd7g4LaVbsrJrq3V0nay9a5bXizxFdgnt2h9jGRx0HrvlPP80T0e 7k4/OhYSv8cbogSVE6vPj7p3m7jzo/cblRJh8XbpMw5usXytuc6tN0uidyWiX0n5N6RjvkAeEn/u HY7uj/45b9VXSrUz+dY++rssivvmidPko+fdciu33Oijv4tjviz5fEvpb7Zuk3vLy+U18i75wwKl IFDQRd5V0Ltwc9FJRX2LaoqmBlYFNrd5tc3nbb4qlooDxWXFXYtPKT6F1yoOoF3LZ1fLp82rRX15 G2LpSHHv4qnFc4uXFq8ofrx4RUn/EqPk0pIr2wWKl7Yb2G5ou4bSw+2L23/Y/lCwINgpeFLwtGD/ INUJ1qFdywft0c79tP+w3UDepnhqyaUcqD0yaATHBxuC04IXBS+n7bTgdcEbgncE7wkuAa4LLsMn HlwVfCa4Jrgh+ErwteA7tH0l+H5wfzATPBA8BLwfzAazxyny8oIuiALigPF/XnQSL/PRIDY1BUpR X/RqwH+MoP0h+LGUl/FNXmJkQ/leu4GIZxdenz6IL0onBVa1eRW1jFwd/qGYoDUiwd/i2QaNVEqq 1B2z36lStRSWemPu6Iv5oD/O/UHSYJzpEZzBZ4j/h/p06VJpoXS3dJ+0UnpMelx6QlolPSk9L62V ktI6ab30grRJsqX90seVSyqXVj5X+ULlhsrv1EK1SG2tBtRita3aXg2qHdTj1Y5qJ/UE9US1i1qu dlVDaoV6itpfHaBG1BGqqV6uXqFeqy5Qb1NvV+9Q71TvUheqS9SY+oC6VH1QXabG1c3qFvVV9V31 ffWg+qN6JHyE+ZjCClkJK2XlbAg7nY1kBhvDprDL2Cw2m81j97Dfs1hkZWRV5KnI05HnI2sjmyP7 I19Gvo38GGnWi/ROekg/We+uD9Z1fag+W5+jz9Xn6dfr8/Ub9Dv1u/SF+r36Yv0+/X59lf5UTb+a /jUDagbWDKoZXDOk5vSaYTVn1AyvGVFzZs2omrNrojVTas6vmRadHr0wenG0MXp59Irob6OzoldH r41eH50ffSC6LLo8ujL6ePSJ6KroU9FE9OnoH6Jro0msZ5WYlQY4ZbhzbpIGOwnMuJYUQVnHdiXw GPA48ASwCngS2ITj+4GPHatyCfCcY+mzgeudMn0+tjcAdwH3O2XRi4HrnUR0Puq3wppuSX2xVg1y 4tJE3Pkswn4hSjb6ttGvDdvIqGOjjY02fM4fhDZDsLdAapdtgoUZUntsK+FrFa5ATgV6A32BYbA6 HPwIoB4YibKBmdEExqB8DrZjsR2H7XhsJ2A7EXPuJGAy7ssbsD0P27thaxFwL9ovRr37gJXAY8Dj wBPAKuBJYDXqrQWSwDpgPfACkELbzcAW4FVgK/AasA1tXgfeAN4E0sBO+LEL293AHsAC3gXeA78P eB/4APgQ/v0J+ATHPnOSlfCv8vdOrBI+VsJH5CJRudTJIB+JSvhQuQF4GXU2ofwKkAK2Aq8B29Du dQArR+V21HnbietXOjH9t8As4GrgGuBaYLaT0G/E8ZuxvRW4zUnqdwB3YR+x0hErfTEQQ90HUO9B 8MuAh4DlwMPAChx7BIhj/1FsVwJPoM0q4Glwz6DdH7F9zolFLwFmOploI3A5cAVwAzR0I3CTE482 ATcDt6PeHcCdwF1OKrqQfhsYBF0pQml5lXHt2aSSQYjeRBzlGZ4OTdVDT/XQUxL6saAfC/qxoB8L +rGgHxv6saEfC/qxoR8L+rGhHxv6saERCxqxoBF+viShkSQ0koRGktBIEhpJQgsWtGBBCxa0YEEL FrRgQQsWtGBBCxa0YEELFrRgQwsWtGBBCxa0YEELFrRgQws2tGBDCzY0YCP/FvJvI/8W8s/PxSRy n0TOLeTcQs4t5NxCzi3k3ELObeTcRs5t5NxCzi3k3EbObeTcRs5t5NxGzm3kPImcW8i5jZzbyHUS +bWRXwv5tZBfC/m1kF8L+bWQXxv5tZFfC/m1kV8bebWQVwt5tZFXG3m1kUcLebSQRwt5tJBHC3m0 kUcbebSljsiEjRkpQ+c9nxWG0MzAo2sjujaiayO6NqJrI7p8xrAwY/DR2xg999zGTJSBxzZmoAxm oIw7m1jQBVfAWPf8vs/J0PySgR5s+rsBZXT8HKcP6vQAq2NeqHfr9pDukdqBKcVM2R7bcmS2K1CJ s7oKtk8FepPGbKk/zUYJqCkONSWhpjjUFJPOBm+gbAJjwJ2D7Vhsx2E7HpgATESdScBkoAE4D3bv hs1FpLYE1BaHN3HEI454xBGPOOIRRzziiEccM5KFGcnGjGRjRrIxI9mYkWyoMAEVJqDCBFSYgAoT UGECKoxDhXGoMA4VxqHCOFSYhArjUGEcKoxDhXGoMA4VJqHCJFSYhAqTmJEymJEykg18gvJnyAN8 hCqTUGUcqowjL3HMSjw3ccxKNmYlGwpNQKFxKDQOhcah0DgUGodCk1BoEgpNQqEJKDQBhSah0CQU moRCk1BoEgpNIs9xfS7yPA/AzAClJqHUJGYnC7MTX4HimJ0szE4WZicb6k1CvQmoNw71xqHeONSb hHqTUG8S6k1CvXGoNwn1JjE7WZidLP0pmqHiUHJMfxb7f8QxnGVQcxKzlIVZysIsZWGWsqDuONQd h7pjUHcM6o5B3UmoOwl1JzFLZTBLZXDXVIrIc6Wcg/lpLOYtnt37sK2jmasKpd40g/EZKQMNZaCh DDSTU++57sw2CWgA7qb5jM9EOVWvxvG1KCeBdcB64AWacTLIdQa5ziDXGeQ6gzxnkOcM8pxBnjPI cwZ5TSOvaeQwgxxmkD8LubOQOz6zZJC3DPKWQd4yyFtGX4D4QqOItY1Y8xkigxhnEOMMYpxBjDOI bUbH+Yu48pkhE70U5+RMmhEyiFkGsUkjNmlxHvL5djZGOwMjTeJsSNAI73P4vdVEmuPbodwemIa4 Xefw34emoeZ1TpL28lw7Ol+biMuA4+f8WFrVU1Ib9USnTO3iNKnlTkINYT8ObHHKagYBUVy7LAfW Yt1JwqfCyu+cpNoR6OI0qAMcS42gFfSpXgsvCsGmYceCnSTsJGEnibYW2iYlH45a9J2Qfll5INsE W4nKg9kmtTtq9gBOdVJqT2x7OXG1jxNT+wL9UO6P7QBsB2I7CHWGYBtBWQdq0FstfKhDz9eQH0kV 2lWxCqlYhVSsQipWIRWrkLoaeApIAE8DzwBrYGsttvBQXQesB14AXgS/EXgJeBnAFYSK+UN9Df2/ jr4wP6i7we/B1nKSVRLgA/yADBQCRUBrJ1aFu7yqNk6sphpggAb0BjDGGoyxBmOpqXFSNbXAL5x0 zVAAV201mCNrMD/WjAUwP9aMx/FzAVy11UwEJoGbjG0DMB37v3LiNRfh+MU45+IAxhPFeKIv4Hzc ALwIvAI+BWwGeHb4PFiATMSQ1QyinEJkFyKjGUQydVS+Z+Co7cm3TblMSipyqSOPOvJmIW8W8mYh ZxbyZSFXFmJsIZ4W4mkhnhbiaSF2FmJjITYWYmMhNhZiYyE2FmJjITYWYmMhDhbGa2G8FsZqYawW xmlhjBbGaGFsFsZmYWwWxmZhbFaUX2lwXXOvk9BjGnqMQY8x6DEGXSeh6yR0zbWZhjZjkh81+diS FIsyeN8Ho+0Bph4Kq8doe0gXVh5w+uDo7MqDOCohDj6gO6z3ALD2QbtpxCCmMtjqg2N9gX7g+mM7 ANuB2A6imCRg2YZ+bVjPQL829GtDv2n0lIZ+09BvGvpNQ79p6DcN/aah3zT0m4Z+09BvGvpNI7YJ 6DcN/aah3zT0m4Z+04h3AvFOIN4JxDsB/drQrw39WtCvDf2mkYME9JuGftPQbxr6TUO/aeg3Df2m od80cpRAjhLIUQI5SiBHCeQogRwlkKMEcpSAftPQrwX9WtCvDf3ayFsC+k1Dv2noNw39pqFfC/rl +UwgnwnoN42cJpDTBPSbRl5jNRei7UWU3wTym4CG09BwGnmOIc8x5DmGPCeQ5wTynICGbWjYlhQ+ myDSKVIpV2dfUnV3jLcH2FMxzp7Y9qMaOZXrOF6L7TUoQ+2Iu4W4W4i7hbhbiLuFuFuIewpxTyHu KcQ9hbinEPMUYp5CzFOIeQoxTyHGCxHjhYithbimENcU4mohrinENYW4phDXFOKaQswsxMdCfFKI TwrxSSE+acQnjbikEI8Uxp7C2FMYYwxjXCi0ORsjiNGZWENnYkyS3XMzNw8rUKoFlVrqGZhJz8dV ix97C7G3kPZS2MO6gFpcy7PBDUC9a/m6IFr42Gj+zieroe/R/H0N7DfRPs4X7NeLvZhb18RVo5/v 0x4v19N3gr5T9N1E3zHJF7mAt4l8Qt8XcB77TbQPq/wb5Xraa8Aeb3GE26cy3+PlevpO0HeKvpvo G7V9vemXsN/5p/hv9b/jf1f2y8XyeHmqPBd7fvlWeaPs97+D0lxlFHApPlfT9wrl5VZ+eXyrga0m tXqz1f6CsQWTCm7C566Czdgfiz3+/RY+N9H+5oJd7hHsFwYKbio8rXBa4cHCgwVjC7OF2aKioq5F U4sWF60uWp9rWXiw6LWiL1uXtZ7Senrru1ovab2/dSYQwN5dgbLASGynBPh/7wKHA4fbKPRd3WZU m7ta72+zubh/8ajijcWbi7/C51DbauxvxB6+2w5sO5DYjW2r29a4R/j+lcVftV3c9s2SKSVTijeW XITP5SW3lrzeTmp3fLvKXMsS/mbu78I/ho8wifmYzBTWihWyItaGtaXfeNqzIDuOdWDlrIJ1Z6ew MOvD+rq/+5zFRjODmWwMG8smsMnsPDaFnc8uYNPYr9gMdiG7iF3MfsMuYZeymewy1sguZ1ewq9hv 2Sx2Nf1SdBNrYjezW9itbGHuVyO2lD3IlrNHWJw9Grkg8mhkZeSJyKrI6shTkUTk6cgzkWcjz9Ev SsnIusj6yIbI5sjWyFuR7ZE9kfci+9xfmQ5EfowciTRHHF3WW+mFepHeWg/obfS2eoneTi/V2+vH 6R304/WOeif9BP1EvbNernfVQ3oF/Sp1mt5Lr9bDOtMHuL9QDdPP0Ov1s/RR+tlSgAWdBDsO6Azg iobh6ol1BcI4G7DGM6zxDPO8FAwfdhqZArQCSoH2QBDnyHFAJ+yfAHQGugDlQFcg7DTBShOsNMFK AzuLvwdH51/AP9dp8M9zGsLQOjsNPfYCMDOz/ijXAvXASH61h/oBnI2N5EMMPiTgQwI+xOBDDD7E 4EMMPsTgQww+xOBDDD7E4EPsGB9i8CF3tjfRbFAIP5rgB/ehCT40wYdc//m+G2h+aIu+69FnPfqs R5+N6LMRfdajz3r0GUCfAfQZQJ8B9NOIfuqlk2E9AOuB8F+dWPgH4G/AjwDO9nAzto5nRAXYxxrF sEaxMqADcCK4ELYVwGnoqRdQDXjzg3WZDcY2AtSi56Eo456VnYHyCGzrgZGIX9FRcQ4DWAVhIYFW vEZCzIIxKUCxzsf452LLY8kjWI8x1sN6DNZjsJ7zg/dZepSdv89VA+w1wF4D7DUc5VM+V23/KQv5 VkXHeBODNzE2D1gE3IMaXfxzs7Z/XtZmUSfFxoDFGsbGIfO4PmW4PmUTgakoX4ntPKcPux515gM3 AAvA3QbcDizCsXuAe7H/O2Ax2uCehC0BlqLuQ9iuwLzeCpGK+ef9vR9OI9jG/6IfDcf4EYMfMfjB LTbAYsM/9CO3fvEzsI+fj2sMos37vx7b+cANwCKU7wGWkipGgzGxwrVFmxDahNCmkXzkfuV8akTb RrRtFH7w/pdCA/m1NOCumW3z5z71PA6YSh7EjvGA4gMrCfKiSORrHMUj5Y0iaqW4XbfGP2O3Eq3S aJVG/GM0rnOwHQfvcvGPIf4xNgW1zyeLDewCbKcBlwGNwJU4PgfbudRb/VGxODo/9ei53s0P96DB zU+Mxwn5iVF+eLyaKN58r5GZ2SRpJxczr3ZKBcu1k9fN32umCS2a0KJJ6IJr4qFczFz15WKWj2zT MTHLtV5MSkqQNznteL2RUeJ1EyglqNRyrCiyE1dCuwDcbUY+Bb51Ynp3YBAwmM84kXVOIrIewHVx BNfFEVwXR7YAe1DbAt4F9vO1KBJ3GiNPAQlgLZAE1uF6aj3wEvZfBl4BUsBmYAuwx2mClSZYaYKV hsgBvhbRtZpYiyIrcWwnetwF4K4i8gHKnwJfA9/y9QBXbY1oEyAfYvAhAR8S8CEGH2LwIQYfYvAh Bh9i8CEGH2LwIQYfYsf4EIMPuWvEJvJDrEXwoQk+NMGHXP/5vmN0ndkWfdejz3r0WY8+G9FnI/qs R5/16DOAPgPoM4A+A+inEf141qIIdBZ5GHgEeBRYiRE85hnNH4BngReADcAmHMP9dWQrsBM97AJ2 A968fIBjNrYfU3YbI1+g/Gcgg/JX2H4NfAse9zKRg64eWuK8B7CAd4FPqWZCjJcrg8c6H+Ofi+0B 71p0jNoaed9S6VF2/j5XDbDXAHsNsNdwlE/5XLX9pyzkW4mVJnLYSUWw6keyTkqXnCYdd1Q67qj0 LkB3p49+Cs6FHsCpgAauN9AHGIRjg4Eh2I8AuHrRa7GtA4ah7ghsRwKjgSi0Ilaao84wsdL8Az8a jvEjBj9i8INbaoClhv+yH7k7GbHSoM8E7DfCfgL2E7CfgM1G2GzUh7k5T6CNZ6VBm0byMedXI9o1 ol2j8IX7MAzlqHuO8LuqgHv3JFYa6lmi3mPH9E6xgZUE9wBWPCsNWqS8EUQtPi7PSvNP2RUrDeIf 4+NC/GNo3eDGP6YXoWZrAFeBOq4C9U7ACQCuuXQV2yrqqf6oOBydn3r0Wu/mh/fe4OYnRjEagW0u PzF41PB/2TsT8CiKNGBX0rlIQg4ygYSEgG0GLzQ904Kg3Z2JigavMRERNR6riKLsrqjrha5nXK8V d931GF1AHNhVcURFHBAVHVBgmV2Wq/F2AMVjUEHEC+n/rUoIeCwILI///z+mnq+7urrO73vr6+rJ dE+779nYHhtlbdz6SvMddjquNIqdzdxsYaaVnK3kbO3gQjJx5FYsdFxp2nXWVuq7OmurwVE0xZSm O6403+mNxpHMH7Plf7q175zLzO0q75jzmvM3ih6ip/if/HlpL+W5HUepHSxNWS+5E62mZGiPU0Nb HV76J5ZOqyDfRB3z5C+UyP9G72gPdnLcbW3/1z79pBFszrlFBzveNmO2PZt9zDO9fbxG9WZ8nyff TC5jabVPca4tNKoSP2jPk++VT7SHVuJpGVNnEsST7SGtSrtb6Uv+v0CWHu2NIgwn5BNPySN1vpH4 6PYQ+cE4kjvDzHdqiO9S6R2k/HulEz9f6e/VNWYH8//E+fVfSu+azn/O0v9LnbfsYP5dIv3npOV7 pUfvcIlY20zf7FG2zPst3rrNo7RdDfBkrEHbrgZe9Cc3kyEeELVir47v67V9V+9g9T29w8URolEM EkeJo8Xxokk0ixPFEDFUnCJaOr65d5e4exvf3UuI2WKOeFm8IuaKeWK++KdYIJJisVgiloplwhXL xWvidfGGeFO8Jd5p+6afeLf2ztq7av9ae3ftPVt9629W7Yu1L9Umal+pnVs7r3Z+7T9r/1270L7E vtS+zL7cvsK+8nvfsLvBvsm++Xvfs4vY99t/s8fa4+wJ9kN21J5oT5LfvbMft6fYT9hP2VPbv1/3 6x/5ht314RvCN4ZbwzeFbwvfHv5j+I7wGJEpRqG7WlGN/uQ7ofYV8lnAAwgauqxjtREkZKPTviIH vfYTuej2IJGHfg8WndCxJfLVd5oL0PXhohB9HyE6o/NGUYTeB4kSdH+UKEX/R4su2OB4UYYdmoQP WzSLcuxxouiKTYaIbthlqKjANqeISuzTIrpjo2GiCjv9hu0YQhb2upP+3EUoxm53U8MkbFaN1eTT d89gs2ys9iK9SmCxQmw2j/7Mx2ZFWG0x7S7BZuVY7U3aeovQHbu9wzYl5Pf8VhDyseFKRvQuoRu2 vFOUYM+7RCE2/auowK53iyJse48ox773imps/IDIxs5TiWNr4rNqZ5H/xdoEObE4OefV/pOy2FwU Y/VLRBmWv1T4sP6VogLbjxbV2P9qkSUZELlQcK3IkySIAli4QRTCw02iG0zczPaP9h9FDmzcQakx NpqBkbtEBpzcLbJh5R7O3mffRw0ROyK6ws391AA7ojP0jBNFkiBaj9pRUQ5HE8kzyZ5ETx6xHxGZ MPUYfXjcfpz8U+wpohS+nhBdYOwpWp9qTxUVsDZMZMDbuSIL5kaIPLj7tfDB3sUiE/YuFZrkj7NX hq8UOVB4regEideJfGi8XnSGyBtEEVTeJEqh8jbK3h6+XXSFzj9S/x3hO0RleAycdofKi7B4MSS1 hR6iBp4kuwWit+jdwa7kVVOklilSsxSp2YrUHMWor53RIwlFitRiRWpXRWqFOJZQqUjtrkitUqSW KFKrFak9xEmEXMVroeI1T/HaSZxGqBFnEfLp78UwfRUhX1GrKWrLFbUlitoCMVlMbqdWU9TmKGp9 W1FbrKitUtSWKGoLFbWdFLWdFLVlitocxWsPsZpQo6jtWvun2j9DsGTXp9gtVOwWK3ZLFLsFil1N sVug2NUUuz7FbrFit0SxW6jYLVfsdlfsVil2CxW7BYraMkVtluLVp3jtoXjtYd9i3wJPt9q3ihr7 dvt2tpLdAvtO+0/t1GqK1yzFa7Xi1bcVr8X2ePvBdmqrFLUlitpqRW2h/Xf779T/sP0wtW0huGwr givsJ+0nRaUiuIciuFBRm6WorQr/JvwbkRv+bfi3MN1GsOQ1W/GasxWvxYrXCsVrleK1WvFaqHjN U7x2Epk5E+S9Wu6K/HuxSY8dvXb+yNU0JdfmO1Uyrn5vaudKJnZ8jbnVPUqq495C/sLR6G2vZ+Q9 BcEmp9mxJkjR97g35qesunZhnPJecOd0K0f7nRXeltXOTyq/T8e9W5q9vEsz1V3cKFWzudUdnP0j fU5vfUfH6Ed3rLQSSnPt927fKxlVv4wWkbqSd9BsW+XdW/vZZkq2qhD94V21uodU94Ftd4A7+7cD 67vvl9zpFfHOt6lK79TqeRfGucOfaPwP2tw1De3gnVF7qZ23567dh+/03dCO3wmpUj/53nvzJ0k/ XmLLZzDtx21ec7j6Bbm2z8JkkD431vZZzH/5yxBj/bnqKaTNzyC1PX/UQz17tJd/H/9+/j7+A/ym /0B/X39//wD/IX7bX+8PdTyPdMU2n0ea5P+7/x/+h/2P+B/1T/Y/5o/5H/dP8U/zP+OP+6f7Z/if 9T/nf97/gn+W/0V/ov3ppbn++f6F/sX+pf5lfnfLs0ws8DJ6Z/bWeuf2zuvdqXd+7wLnAMdwAk7Q MZ0Dv/fkkeU4Tr3T4Bz6I88gHe80OSc4g50TnaHOyc4pzqlOS9tzSc4wZ7hznjOi/Tmk6I89iRSe Hp4RfimcCM8OzwnLd5dcjP5yRTU67CQy0GO+yESXnYWGPktFFjrtIrLRa7nIQbcVIhf9Voo8dNxd dELPPUQ+uu4pCtB3L1GIzvcSndH7PqII3e8nitF/H1GCDQ4QpdjBFF2wxYGiDHv0FT5s0l+UY5cB oiu2OUR0wz62qMBG9aISO4VEd2x1pKjCXqxjsdlF9Odi/8X05wr/FdRwi5/7Byw3hv7f67+X/kf8 Yzkb9Ufp1ST/o/Rnsn8y/XnMP4X+TPNPo/Vn/M9S9jn/LFp80f8ibSX8Cbaz/bMZ3Rz/HMq+7H+Z Ec31z6Vv8/3z6clC/0LGsti/mDqX+pdSdpl/GXW6fpfalvuX05M3/G/Q+nr/euLYXeTIpb3ojPU1 USytL3zYv0B0w/4HiC4wYIgyODiQlL5OX1ENCf1EtqRB5MHDANFJMiEKocISnSUZoqtkQ3SHjsNE LoQcTqmBzkBKQYrIgJVBIhNejhE5MHMsecJOmHqOd44X5fDTRD0wJIqg6ERRLEmiD6c4pwgfPJ1K nhanhf6c7pxObWc4ZwgNvs6iP8OcYZQa7gwXpbB2Hj0Z4YwQ3WDuflabY8NjWW2OD4/nHikajooy GJzEWvQf4Ue4j3os/BgrVVgkzxPhJ1ipPhN+hvuoeDguCiBzOvdRM8IzWJ2+FH6JsolwQpRD6mzq nxOew3r1ZZiV70U4v3Zd7TpRWru+dj1UCX8GVEmOy9o5lgRnKmo1RWqWIjVbkZqjGM1VjOb59/Xv C8eS1HxFqs+/v39/7G34Dawrea1QvFYqXgsUr90Vr1X+g/0Hw4ektkRR21lRW6SorfYP9A+EjBP9 Q+D7DP8ZxCW1mqK2QFFb1k6t5FVTvOYoXnMVr3mK13zFa6XitUDxWqJ4LVK8FilScxSjVYrRasWo z/8f/yLalaTmKlJLFKn5itQCRWqZIlVTpJYpUjVFaq4iNV+RWqBILVGkVihSKxWpJYrUMkVnluIy V3FZ5YScEKRKOqsVl2XtREoWNUVhlqKwu6IwV1GYpyjMd4Y4J8GoZLFSsVigWOyuWCxxTnNOo+Yt RGYqFvOcc5xzoPBc51x4lURWKSJLFIVZisLK8MTwRO5ttrCYqcjLVuTlKPLyFHn54WfDz3HvLvmr VPx1V/yVKP46K/6KRGaXofK+qGxo+SqxF/fkP+Mf18f/4aerO9Ry68/QZk/137K2ewn5P5sWUiLq 11gjbXcBu6ndRrWN0ZJsR95zjNp837E7/9pWo7Ta2N5yjJhcE0Xkdve23dZy+z62c/ekO9xe2xjb 7+za47H28e7GEW9zjan6tZvaNbdzvmXH7sR/crv52znfunu07W3n//27i+vt3dXtLl+2acP22v15 vPfuGu92eZafyLQoD9a6ZY7verubtnPP7+VvSnn5XCtakRZCq/Iqu6yF7fVdjXMU4438b8e7vZ7T phxhosN/qlVC26eYu9LupuHbOb9BfktDXZdNNfJR7T3YLV7sp/39v7hC2p6f3GbZXVghta1zdqnt nVoh7dynbluV/39shbQr64ldWSFtb52zC73a5oi2d13YhXa3uULa3jpnF9rd5gppV+bvdtrdJte7 Oo+20e42fdn21jm70u7/jSuk3cjzNldI21vn7EK721wh7cY7r22ukHbfZwzbXiFtb52z83/bXCFl iN/XfV73hSEMzchufyp28xOxFUb39mdi+6hnYgcYIWOgcbQRNk4wBhsnqedhzzDO/C/Pw7Y9DXuJ eh72cuMK48qtnob9izGu4ynYcdaD1sPWZCvW/vTr5idfX7BebH/2dbF69vUda7WVttZZX1ubLM/O VE++/rfnXtueeq1Wz732svew9a2eerXsIzc/7WrLXxweyfg/Fxl1X9R9ITLQgxA56EITUh/ZIgud 5Ils9FJASmejM9tSo5RtF6MLOcuMMs6WG+VsK4wKkYnOulNPL6MXKehO5KK9PqSjQeIDjAHEQ0aI 7UBjIDmPNo6mlbARFnno9QS2g43BohP6PYn4qcapohQ9nya6oOszRBn6PpN0dC7y0fo5nEXzokDq XhSi/QvI+Wvj12x/Y/yGen5r/JZSo4xRbLGI6IxNLqGG3xm/4+ylxqWkX25cTn5sJIqklUQxdrqJ s9hKlGCtv5B/nDGO7XhjPOkPGQ+xjRpRWpxoTBTFWHGc8GHJB9k+bD0sKrHoZNEVq8ZENyw7RVRg 3SdJmWpNZRu34mynW9PJOcOawdmZ1ky2L1gviHIs/yL1vGK9QgoEiO4wsJh0OCD+jvUO8dXWarZp K03OddY6Wvna+lpUQccmtp7liWooyRRVkJItaqElV/ghppPoLakRPeCmM+mwI2okPaIn/JSRp9wu Z9vV7koN3exu5K+0K9nClOgFVdVCPlHdg7M1dg3pvexe5IcysYfkTOiQdgBnoU3sCW8W+Y+0j2Tb aDeSfrR9NNtj7GNo8Vj7WPKHIVH+KuyqzN9nXgOLn9WtFyWKy6y6DXUbRKGiM6vuy7ovRUHdV3Vf Ef+67muRWfdN3TfEN9ZtFJ3qvq37lvimuk3k9+o8qGJWQ0YWHOcaOUaOkO81zMPG+dDc2SiE5gKj yCgW6jl4iGTeY2MfNHc2uhrdOFthVLYznWVUGTVw3xOyOxt7GHtwVjd0yu5p7AkHtUYtKX7DT7w3 3BcZ+xj7QVIf4wBmQp0RYLYEmQNFRl+jL+n9jH4wdJBxEPH+Rn9KyblRbBxsHExbhxiH0BPLsIgz aSlVb9RDvJw5xUaD0UDKocah9OQw4zDaPdw4nLicUVnGEcYRpBxpHElKo9FIK4OMQZQ6yjiKGuR8 yzSOMY4VVWrW+YzjjeNFjdFsNDMT5Az0qRlYbZxonMisGGIMEZVqNvqMocZQ0cM42TiZ+CnMzB5G CzOzXL4VQHRTM7OLmpndjGHMzGo1MyvUzCw3zmdm9jBGMjMrpH/k7IXMyW5qTlaoOemTvpL0y5iN FWo2djdGG1cRv9r4PTmvMa5htl9rXE8/b2CWdmeW3kzPbzFuE12N2407aGWMMYaUO407qedPxp/J f5dxF/2Xc9hn/NX4K7XdbdxNP+8x7iH9XuNe0u8z7iN/xIhQ9n7jfmp+wHiAVv5mjCUuZ75Pzfxq 40HjQVqZYEygLP6b/HL+V1unWi2iv3WadbrYX/mCPazx1nixj/IIe1gTrAlib+sh6yHiUSsqeloT rYnEJ1mTRG/r79bfif/D+gf5uRKQ8zG8Rq18H4LYz3oCr7Gv9RReY2/raWsaKc/gO3rKq4TwW8/i Nfa1nrOe5+wL1izSpe/Yw3rJmiN6WS/jQfa15lpzOTvPmkfZ+dZ8Wvmn9U9SFlgLiCfxL/tZC61F og9eZqnQrWXWcrGn9Sq+Zj/rDesN0t+03qSfb1lvEX/beptS0gf1sVJWirZWWCvoyUprJfFV1ipK vWe9J/ZSHqqP9b71PikfWB/Qkw+tD2n3I+sj4tJz7WGtsdaQ8rH1MSmfWJ/QyqfWp5Raa62lBunX elqfWevJKb1bwPrG+kYcYn1rfSsM5ekCytMNkF8lFnV2hp0h+imvF5DvhhAH2zl4vaCdh7870C7E 3w1Q/q6v8ndBuwv+7mDbh7/rK6+bnK3A0x2oPF1f5ekC8hpKek98XF/l4w6y97Rrifvt3uTcy95L HGDvbe8rDHs/fN9B+D5DHGIHbFOY9oF2P1o5yD6IlP52f+oZYB9M/kPsQ+in9IwBmz9qc2yH/tfb 9aSH7BDpDXYD+Q+1D6XsYfZh1Hy4fTitDLSPIC79aUD50wH2IHsQrRxlH0VZruvkl151gH2cfRx5 pG+tExkZp4s8FkOPZE7LnIXM1/prx2kjtUuzH8iekD1VG5k9P7cld0bugtxluV/mH5rfUnB6wbUF NxXcWzChYHLBtIJZBbNkroIJlNsSRm4JBafnLlBl5hcsKZivzqnzBW8VFhbuW9hYeFzh4MLjOq/o vLGoe1GvommFjUWrij4uziuZVBIvvbU0Wvpk6ezSf5UuL11RqvKUpgu3/qM85dpD6a1Fq2SZwsKi 7lJI2dBFlG7Q+mdPZQSMgX5cmztDHss+MK5l2Q/kLigspOZVsl3ai1Inx2xV3fTnYxVbhS6myvwq oBuOZuQfWnA6vd/YlkcGORJZumRS6a2sIh/R5mvvax/qPXVTP1Dvp/fXB+i27ugN+qH6Yfrh+kD9 CL1RH6QfpR+tH6MP1s/Sz9bP08/XL9av1sfq4/RJ+tP6NP0ZPa5P12fos/WX9Vf0ufo8fb6+UP9U X6uvCxwYaA4MDg4ODg1eGLwseHnw8WAiODs4J/hycG5wXjAZ/FfwP8FFwcXBJcGlwWXB5cFXg68F Xw++EVwVXBf8LPilqZmdzQPMOrOfOdA8wjzSbDQHmUeZR5uDzSHmSeZQ82TzFPNM81rzOvN68y/m veYU8xkz7nxV362+MjQ2ND70YGhC6KFQNDQxNCX0ROjJ0LTQ9NCM0MxQMrSwYWjDyQ2nNJza0NJw WsPpDcMbzm04r2FEw/kNIxt+23Bhw0UN1zVc39Da9H7TR01rmj5v2tD0RdPXTd80bWza1JzVnN3c s1lvrm3et7lP8/7NBzQHmoPNZnPf5kOaLfmrPN6omm/k24KIxYi1iird9Fz9CM+nN3qt+iAvph/F 8dEcH8P+aWQa8gwSR6YjM5CFnF+LrPPc4GDkQs8NjUUe8nyhKPuJyBPITM/XtMbzNWd5seZs+V5f vSelD/NStBbVz/OS+nj5Xl+OUrSdot0UdaeoO0WZFGVSIpOzLr1KiVv0mk2t1DBc78XepK99vbQ+ AGlADkNOoNYTSR+CnISczPEZXkQ/E/kVx2exP5v9MPbnsD+X/XleQh+BnO/F9QvYj2Q/jrrGIxMo P5F8k5CnkWnIM0gcmY7MQJ4l38vIK8hcZB4yH1lE2cXIEmQpsgxxkeWUeRV5DXkdeQNZQT9Wsl+F vIu8h6xGPiD9Q+QjJI2soX+fIOs5t8GLB8NeNNjkRYLNXix4AjIYGeqlsUcseBn7y5GryHM1x79H rkFuQG5EuFsN3oT8AbmNPLd70dA9XiR0H8JdbOh+5AHkb8hYLxaaxPmH2T+KPObFQ48jTxB/ykuH piLTkefI+zz5ZpH+IvISwh1qaDYyh3MvI68Qn8t+HrKAMklkEWnoKrSMvetFmtYin3npps+RDcgX Xro5B4ZykTwv2twJyUeKvUhzCVKKdPESzWXyHhRekiKrg7TNlEn2UoqSRrR3HmfHy/f6wlQjPDXC Uxx+XPhx4ceFHxd+XPhJwU8Kflz4ScGPCz8p+EnBTwpGXBhxYUTOlziMxGEkDiN4H2QGsohzi5El yFJkGeIiy5FXkdeQ15E3kBXUuZL9KuRd5D1kNfIB6R8iHyFpZL2Xwv4u9k9hfxf7y7kYx/ZxbO5i cxebu9jcxeYuNnexeQqbp7B5Cpu72NzF5ilsnsLmKWyewuYpbJ7C5nFs7mLzFDZPYes49k1hXxf7 utjXxb4u9nWxr4t9U9g3hX1d7JvCvins6mJXF7umsGuqSc7rHM/Fji52dLGjix1d7JjCjinsmBLd sEQKj5RW8156haOUZ5DaTaHdFNpNod0U2k2hXekxXDyGHH2K0cuep/BEaXqcwgOl8UDpdm/iwoUk 4Oz2+T1JvsuNdtLwkBJ5EOJT58/yTPLsQ6qNX2hsz7uP+LNeQ0pPPGUv9n2w7P6IyazuSx8GIA2K sZQ+UHmjGDRFoSkOTVFoiugtpJ/B8ZnIr0g7i/3Z7IexPwc5FzmPPCOQ85ELkJHUO446xyvaYtAW pTdR9BFFH1H0EUUfUfQRRR9RPJKLR0rhkVJ4pBQeKYVHSkFhDApjUBiDwhgUxqAwBoVRKIxCYRQK o1AYhcI4FEahMAqFUSiMQmEUCuNQGIfCOBTG8UhpPFJa/xRZz/EG7BDGuzRBYTNeBY+MXaJ4JWmb KF4phVdKQWgMQqMQGoXQKIRGITQKoXEIjUNoHEJjEBqD0DiExiE0DqFxCI1DaBw7R0MPYucJCB4a UuOQGsc7uXgneQWK4p1cvJOLd0pBbxx6Y9Abhd4o9EahNw69ceiNQ28ceqPQG4feON7JxTu5oYXK Q0UhORJaSnwZ51wvDs1xvJSLl3LxUi5eyoXuKHRHoTsC3RHojkB3HLrj0B3HS6XxUmmRA0UxRcpZ +Kez8enSupPke32V5+rLUYPyYNIjpWEoDUNpmGmjd3i7ZxuBXICMU/5MeiJFNQykYMCFARcGXBhw YUB6nDS2TmPrNLZOY+s0dk5j5zR2TmPnNHZOY9ckdk1iwzQ2TGM/F9u52E56ljR2S2O3NHZLY7d0 aDL6fQqZikxXHiKNjtPoOI2O0+g4jW7TIThEr9IzpJvW4RE+Ux4hjc7S6CaJbpId81D629GMdjgj jTMbYmqEk+R7feXYmcs1HPdCRqG/2+SbjYjFicVVbHNajZqvrSotTZqc82erqzpnA3leY6CTfIsU sVZiMVEQXOb5gsu91iDX6eDrns88E7nO8zW0IBexnqlFDuFaJH//IDfIlTC4GFnutQThIfilFzMN L272k+/6JTVJPS71xKknTj1xyrrN8i2qGUH5xna5jYmzg7FNrdQVC05hv5L63kXe8xLB1ew/YG58 wpX6UwTuguvYf8Z+PfvPyfMF+y85/gr5mta+oZ6NXtLsq/oRN/Ez5tkIfsbEz5jDEXyNiWbNEQir H/MChNWPeZEXMS9mfwnyO+RS5DLkCtKvREYjVyGsKkxWFOaNXsK8ibbGkOdPpP+Z/V3ITIQ5Zz6P vIAw10zmmslKwGQlYL7iRRpYvTScgAxGTkSGICch+MiGX3mJhrOQYV6y4RzkYtLpUwP9aaA/DZcj V3D+SoQ+NdCnhqtJ+z37axB8SMPNXrQBChpuZx7ujdho30HqmaMhpAE5gvQjkUZkEOfkm+pysEQE q6bRcgLNjsGiaTSZ+I69h3M2tZW9U8qWceHHljZ2tLGbi91c7OYG5Wp5PYKfQMcu+nTRp4s+XfTp ojsX3bjoxkU3Lrpx0Y2Lblx046IbF9246MFlvC7jdRmry1hdxukyRpcxuozNZWwuY3MZm8vY3Gb5 KwWSa9nrODwm4TECjxF4jMB1HK7jcC3ZTMJmRGSSU44trnTho/cmo92HlEYIa2S0+4hzgzFSH/dG B6ewnwlzzyErqf1dhJUL7CbRQSTIigU9xNBDDH6T1BajtiT6iMGv1EmMmlPwm6L2NPym4DcFv0la SsJvEn6T8JuE3yT8JuE3Cb9J+E3CbxJ+k/CbRLcx+E3CbxJ+k/CbhN8k+o6h7xj6jqHvGPym4DcF vy78puA3iQ1i8JuE3yT8JuE3Cb9J+E3CbxJ+k9goho1i2CiGjWLYKIaNYtgoho1i2CgGv0n4deHX hd8U/KawWwx+k/CbhN8k/Cbh14Vfac8Y9ozBbxKbxrBpDH6T2DXScCtlb1P2jWHfGAwnYTiJnSPY OYKdI9g5hp1j2DkGw6lmeb+UpbzJOviFUkXngYpqVpfYJ4F9ktgngT0SmylH/xF0Pwa9JyTt6N1F 7y56d9G7i95d9O6i9wR6T6D3BHpPoPcEOk+g8wQ6T6DzBDpPoOMx6HgMunXRawK9JtCri14T6DWB XhPoNYFeE+jMRT8u+kmgnwT6SaCfJPpJopcE+kgw9gRjTzDGCGMc08HmaEYgPWAMeuRMjAitfW62 +eEsSHWh1DUzvKhZJd/1S2wMsTEqljDl74pmkkuyPJrYZ+STv86QuaWEs9BrdP4jrxXEWonFREZG o/okaFzmrYS/qDApc2rm84QFhGWEdwjrCBszN2r5Wr6My71WoVVkTtJ05GYV7lYhKgM1TNWe1FbJ PaWnZtVkndcR2t7BK8OtWUuyXkPez1pHWJItCPkEH6E3Qf7Tycl2OCOPiGUfk31M1mvZQ5CZKsxX YbkM1PJ+9ns5Faq+97N9We/nNOc8QJikQjzneWRBzjLCKsLHhC9zvszNJ/gIeq6eE1dHxHKNXCPn +dyDkfEqxFSYKQN1LMidn7tR1baAOhbkyF+6HSd/YVa7QbtRa9XGo4PHtJj2uDZFe0qbqj2tTdOe 1WZqz2nPay9os7SXtIQ2W5sjf9tVm6vN1xZoSe1f2r+1xdoSbam2THO15drb2mr5GZK2RvtUW6ut q1la83XNxhqvp9YzW/6OrfGesdp4P5AdyAnkBvIDBYHyQNdAt0BFoDLQI1AT6BnoFfAHegf2Cuwd 2Cewb2C/QJ/A/oEDAnXyt2QDwcCBgX6BgwL9AwMCdsAJ1AdCgYbAoYFBgSb5uVJgSOCkwCmBUwMt zoXOdc71ziPOo85k51/Ov51FzmLnDedN5y3nbWeFs9JZ5bzrfOh85KSdNc7HzifOp85aZ53zmbPe +dzZ4HzhfOV842x0vnU21WfWa/VZ9dn1OfW59UX1XeUnSfVV9dX1Pet71e9Rv6fIzBzjxbSzWOdk EWslltC4169ZCteaNoGBfyw/89m0QX36E6n5Bo5leiPp8ihfpbcQM1WslViLyNImbNqgcadArtaO 0m2fIsnSLe2lTXVkfqeuiKqhUnuEnkxGYsgU5ElKTWU/DYkTn8F+Jnv8gZZgP4f9AkbwL+TfyH84 XoQs8SLaUoR7Fo0Vk/Yaaa8j8nfntI4+bh7vqLYeez07ziXUuULab6XdVtpspb0t7SxBllLmP8gi r7XXcchg6i76QYkF9GJLqRZKtdCLyA9KdtFOo+UzyHUu+wvZ4+c1/LyGj9fw8dofkJuRLS1EaEHW HqP22OYxiwz1aV2m8YgXM+ZIGxNrJZYw3vNigWzG1cV4gXMvkTqf/WL2b7F/G0khK5APkY/IXc06 V0d6e5HA/kh/0gYgDvF62ZZcCQstkLdpA+vhnoGh8s15pI3iKCLTvXxijQH5q1gy3eSoRcVaiNG3 tpJIiFqHyn53rLK1zflV6c11mR11tag2KgNdvETAh3RFKpFqztSw74XoxGvZ92a/N/v92dex78eY +iMDkEM4tpD2MQUa6MmhyOGkDUQGqRGit44+yr70lH1sP9pyDma+b9mtdNhK+1vadZB6ycx2S/RT mt9cqoVSLfQqIro4N3ox5yauL3ewv4c99/zOQ8hEhPtcJ4ZwZXdSnFuNfORFHO4HnG9J2+TF6jUv Up8l9emMJOUWaRFirc6FXoKjhCN/kSxDXsGE5izctIHrWM/6HtLGpI3iKCLTvXxijaRHVLrJUYuK tRCTNaqSmzbUZ9NiD2njjqujtjm/Kr25LrOjrhbVRqXzKn1h/jpvIm8jKc6sZM/ahHG1OB+w/4j9 Gvbr2K9nzyxgnK2Ms7VeeIl6rtybx1ufQ09ykU6k5SNFaoSMuqOPsi89ZR/bj7ac+xEbb6XfVtrf 0q6GZP2YjX9Q4htllc2lWijVQq/a3iGY98s7BMUv7xAU4pd3CO5K6V/eIbgzrf3yDkGx4981/uUd grv/HYK6qffr+F9/2//5B6n/8Z+gn6ifpA/VT9ZP0c/Qz9R/pQ/Tz9HP1UfoF3T813+CPnEb//df pC/Wl+hL9WW6qy/XX9Vf01/X39BX6Cv1Vfq7+nv6av0D/UP9Iz2tr9E/afuWgL4+eEwwHGwKNgdP 2Oq7AlcFrw7+PnhN8IbgjcHW4E3BPwRvC94euid0XygSuj/0QOhv3/sP/6TQw6FHv/d//udCz4dm hV4MvRSaE3o59Epobmie/N9/aFFocWhJaFnIbf///tof+Q9/TnNuc15zp+b85uLmkubS5i7NZfId gujOFNXor5/IQIcDRCZ6tIWGLh2RhT4bRDY6PVzkoNeBIhfdHiHy0O8g0QkdHy3y0fMxogBdnyAK 0feJojM6P0kUofehogTdnyxK0f8pogs2OEOUYYczhQ9b/EqUY49hois2OUd0wy7nigpsM0JUYp8L RHdsdLGowk5Xsx2rj6U/4/Rx9GeCPkEUY7eJ1PC0PoP+z9Zn0/+X9fmcXagvpFeLdJf+LNeX059X 9Tfozwp9Be2u1FdT6gM9TVtr9DW08on+CdtP9U8Z3Vp9LWXX6esY0Xp9veiGLY8RJdgzLAqxaZOo wK7NogjbniDKse9gUY2Nh4ps7HwhcWxN/KrgVeS/OngNObE4OVuDf6AsNhfFWP0eUYbl7xM+rP83 UYHtx4pq7D9eZEkGRC4UPCTyJAmiABYmiUJ4eFh0g4lH2U4JTRE5sPEEpZ4MPUmpaaFpIgNOpots WJnB2ZmhmdTwXOg50RVunqcG2BGdoeclUSQJovVXQq+IcjiaS555oXn0JBlKikyYWkgfFoUWkX9x aLEoha8loguMLaN1N+SKClh7X2TA20ciC+bWiDy4Wyt8sPeFyIS9r4Um+ePspqZNIgcKs0QnSMwW +dCYIzpDZK4ogsp8UQqVxcIHmSWiK3SWigoI7SIqm8vgVL1DUK/RayCpl96LbR99f3iS7BboffW+ HexKXjVFapkiNUuRmq1IzVGM+toZHaIPgQlJarEitasitUJv0VvgT5LaXZFapUgtUaRWK1J76MP1 4bAieS1UvOYpXjvpI/WRokYfpY+Coev062H6Nv024pJaTVFbrqgtUdQW6M/qz7ZTqylqcxS1vq2o LVbUVilqSxS1hYraToraToraMkVtjuK1h75B3yBqFLVdg8cGj4Ngya5PsVuo2C1W7JYodgsUu5pi t0Cxqyl2fYrdYsVuiWK3ULFbrtjtrtitUuwWKnYLFLVlitosxatP8dpD8dojNDk0GZ4eCz0makKP hx5nK9ktCD0VmtpOraZ4zVK8VitefVvxWhxKhGa3U1ulqC1R1FYragtD80PzqX9BaAG1bSG4bCuC K0JLQ0tFpSK4hyK4UFGbpaitalrXtE7kNn3W9BlMK4IVr9mK15yteC1WvFYoXqsUr9WK10LFa57i te0dgnm/vEPwl3cIbqf8L+8Q3NGSv7xDcPe1+cs7BH9Kyf9v3iEYTKjvLm/+5nLbt5ZfVd9YXhl8 N7g6+H7ww+AnwU+Da4Prg58Hvwh+FfwmuLHjW8x9t/kt5rPMs81h5jnmcPNc8zxzhHm+eYE50rzI vNi8xPydeal5mXmFeaU52rzKvNq85v+wdx3gWRRb+3zZNAiENCAJfIWdlabutzsDCIizs4j0ltA7 oXdCCL2K9N4ERFRsgIhIExERkGaj996lSRORLvxnJ/m5yOVeAzfc6/9fr8/z7jDf7MzuzLvvmT2b e0763zwPZkPZaDaOTWAT2aS//QU0W8G+YivZKraWrWPr2Qb2jZ1g17Br2rXs2nadh/7yuYmdZDez W9gtH/E30F3tVLu73cPuafex+9r97P72gLS/i7aH2SPsUfbo9L+DLviov4ROfCmRJ5ZNLJdYPrFC YkUnhiDO31rc8a+n68GF87gBAnAuv8Md1Ca6CQJxTjfjm8A2ug2CcW53QgjO7y4IxTneDVlwnvdB VpzrA7jvOkgP4v7qBD0B2XHef8R3htP0NO6+ztAzuPs6R89BJK7DJYjCtcD9Hq4H7rNxTa7ie8Wv 9Ffc6V2n13Gnd5PexHeM2/Q2xNE79A7E41opkAfXKzuiznQIwnXzQzCuXVGIwfWrCHlx5SqBC1ev JgTgCtbHX5uyphCGK9gasuPatYFwXL8OkANXLwWicQV74Lm9WF/IjWvXD+Jw/QYgDmQDIRTX8VU8 dxAbBNlwPQdDLlzToXglo9loiMC1HYd9TmAT8NyJbCL2OYlNwt4ms8l4JdPYNBx9AVuAZVx3LK9g K7D9V2wVtsTVx5br2TeQG9c/AaKQAzUgGnlQB2vq2nUhLzKhHgQ5bIBQ5ENDyOJwArIhK5pAdocZ kMvhBsQjO3APjwxpjWe1sdvgWcgUcCFXOkAA8qUzBCNnkrFNip2C/XS1u0JO5E8q9oMcgnBkUU/I 4TAJr6Gf3Q9ikE/9sc0AewBez6v2q9jbIHsQKMivIXg9w+xheNYIewREItdG4ZWMtkdDbuScF3eb aqKKu00tUcN3pIKJBSEaOVgYXMhDHRTkoQmBDhexTdHEohCCjHwR36NKJZaCMGTmS/gexRM57k7L JpbFc8slloOcyNTy2H+FxAq4X62InJUxBOl8Oh/5tIAuQFxBv0JWOTyOTuexw+AAyVpFMjVQMjVI MjVYcjREcjSUnqKnkMcOU7NKpsbQs/QscvE8PY9cdPgaK/kaJ/kaJvkaL/mah16j15DxDmsjJGuz S9aGS9bmZS7mwvWOZFGQk+VhebDssFaRrA2TrI1OZ63DV0XyNVjyNUTyNVTyNavka5zka5jka4Tk a7jka7hkarDkaB7J0bySozFsDBuL4zpMDZFMjZBMzSqZGiaZGi2ZqkimRkumKpKpIZKpWSVTwyRT IyRTYyVT4yRTIyRToyU7AyUvQyQv89jN7ebIVIedeSUvo9MZ6XBRkSwMlCyMlywMkSwMlSzMavey eyNHHS7GSS6GSS7GSy5G2APtgdjz3xgZILkYag+3hyMLR9ojka8OI/NIRkZIFgZKFsYlFkoshO82 f+NigGRekGResGReqGRe1kQr0cZ3d4d/cZJ/8ZJ/EZJ/2SX/wiHAGOi8F5nnS9SFvkAzahP/1f/J XW4mRD76p2MMeepx8WS0F1l6ynHpnMgEmet9/l3vQ/432sHTnLG0N5z08tO6k6ceC1Hex79tjKe8 Hv+O+3jqERv/HZFZ7jV82uvx8DylvfM/rdH+jWNMz3wOPBzn555XRovp8q/GDftdnw+vx30PTSaO 8VD8HhnxpsvTjDcj70OueWauyd/NVZe0vzvIzDH+bs3Ly/+cVc+05//heFnYv+Ppe6r7lPu8ysz1 eJhXXnkfDTPzPh4xV+XlfJV/epqSFiEpk5/Bh+9DPoOZew8Pe+LS5yo9wlYmjfEoLZH/Zd58/YM1 z9wxHqkljmplTv+PHvPBvVDmRAn9u7kaksaqpxf78Oncx9+NMSRd2zPzL2Eexd3pf3sGn8p9TE/j 1NN+48lsW/t3Y3R5Cvb8D/dR/5Z9/f8JH0EG5ur/hI/gj+f5Lx/BY4zxl4/gccb4y0eQ1sNjzsN/ s4/gcWP9PomP4LHX4wl8BI8bw/fP6iN47Ll6Ah/BY6/5E/gIHjdm9p/VR/DYvHoCH8ETzNWf0kfw 2PfxBD6Cx/7/KTyBj+CJtOQxfQRPuOaPN8YTacmfz0fw2HP1X+wjeCLu/uUjyNgYT+Aj+Ne/pfz3 +AgyYa7+FD6CzMhE9ZePIMNj/OUjeJwx/kt8BJl9n/+ffQSZne/nUT6CTF+PR/gIMjuPz3/KR5Dp c/UIH0Gmr/kjfASZnTfrP+UjyHRePcJH8BTm6j/iI8j0+3iEjyCz86I9ykfwVLTkIR/BU1rz34/x VLTk3+8jyPS5+n/sI3gq3P3LR5CxMR7hI8Bn8mnvuwOgVMCYgPEAShWlCgQq1ZRqEKQkKAkQrNRQ akCIUkvpCKFKZ2UM5FPGKeNAKBOUCWArk5RpUFqZrrwN5ZWZykyoorynvAdVnbibUE2ZpcyC6soc ZTUkKGuU76Cd8oNyFFKU48pxGK6cVE7CCOWUchpGKmeVszBa+Un5CcYoF5QrMNZzyxsEk72x3liY acw1PoZ3jU+MT+B941PjU/jAWGgshA+NxcZimGV8ZnwGs43PjRUwx1hprIL5xtfGVlhgbDcuw2rj inEFjhhXjatw1Lhm3IZjxm9mIJw2g804uGTmMZlLMYuaCa68Zg2zhquEWcts6CrJ2/GOrtI8lae6 yvLuvLurHO/Je7rK8968t6sC78snuyryKXyJqzlfype6BvFlfJnrNb6cr3IN5l/zDa6RfDO/4RrP b1m5XF9asVasa68VbxHXPghwOXM9FgoGjMMZzy5nPFjOeIic8T73Z7wW1tdW6mC5rlIPsjgxPcGl NFQaQYDSWGkCWZWmShLWN1Oa49q0UFqCorRSWkOY0kZpi+e2wzXLgmuWjD10UVIgm9JVScVfuynd sH13pTvW9FB6YLmn0hPb9FJ64Vm9lb5Y308ZgPUDlUFY/5oyBDkxVBmO9SOUEVg/UhmJLUcpo7C3 0cpoLI9BZoRKZgRJZgQhMyZhzWRlMl7D68rreF9TlClYMxUZE4KMmY74pvIm1sxQZmD5LeUtbPk2 MilYMilSMilKMilaMqkAMmkO1nykzIUY5WNlHuR0IptCLie2KeRWFiqLINaJcQpxTpRTiFc+V5ZB HuULZTnkd2KeQl4n6im4nbin4HEin2LNOmU9eJ3op+BTvlW+xXG/Q6YWQKb+gGNtVDZizSZlC/J+ q7Id+9mh7AJV2a3sBaLsUw6AphxUDmLLQ8ph/PWIcgSeUY4iy/NLlueULC+ALD+F13Yauf6M5Hp+ yfVY5PoFrLmoXMSWl5RL2PKychlrflZ+xuu/gk9CtOeW5xaEe257bkMOzx3PHSz/5rkLEZ57nnsQ 7nVC3uXwurwBEOFVvArWBHoDsRyEz0+4fH76yOenmHx+/PL5MeTzU0g+P4Z8fvz4/CzD8hfGcqBO TFcoLJ+lZ/FZWgPMWGusw/r1xgYwjW+Mb+E54zvjeyhi/GBsxHM34fNG8XnbgT3sNHZBUWO3sQd/ 3Wvsxfb7jH1Ys9/Yj+UDxgFsc9A4iGcdMo5g/VHjONafMH7E+lPGGXjeOGv8hPXnjfNYf8G4gC0v Ghext0vGJSxfxqfalE+1Lp9qHZ/qa1hz3biO13DDuIH3ddO4iTW38Gk3jN+M3xDvGnex5p5xDwwT TABqukwX+M0AMwAKmQoqQgIqQjC8YIaYIVDSDDVDobiZxcwCL5pZzaxYH2aGQSkzm5kNSpjZzexQ 3Qw3w7Gcw8yBbSLMCCxHmlHwkhltxgB3YuCCZeY2c+O5sag1ArUmL9hORFwo7cTEhZfNfKYKZUxi alDNiZALrzgxcqGsEyUXypnPms/iuc+Zz2O9bvqhvBMvFyqY1KR4hcxkeA1FzaI4ejGzGNa8YJaA imZJsxT29pJpQSVTmKWhsvmy+QpUMcuaZbFlObM8/lrBrABVzYpmRSxXMivhnVY2K+M1VzGr4F1U Natiz9XMaliublbHa04wE7A96iO2r2XWwpraZm28tjpmHayva9bFc+uZ9fCs+mZ9rGlgNsC7a2g2 hFKopO2hN+/AO0ITR0+hrqOnUM/RU0h09BTLfXlfrO/H+2N5AB8IDZxIv1CDv8YHQ00+hA+FhnwY H471I/hIqM9H8dFQi4/hY6ERH8fH47kT+GT8dQqfij1M429AYz6dv4m/zuAzsP1b/C2seZu/jeV3 +DvYZiafiWe9y9/H+g/4LKyfzT/C+rl8HtTmn/BPsX4BX4D1C/lCbLmIL8LeFvPFWF7Cl2A96j7U cXQfcTlfjjVf8i/xGlbwFXhfX/GvsGYlX4V9fs2/RlzD12DNWr4Wy+v4Omy5nq/H3jbwDdh+M98M TfkWvgWa8618KyTxbXwbtODb+Xas38F3QEu+k++EZnwX3wW9+G6+G8t7+B5ss5fvg1Z8Pz8ArZ14 yNDGiYgMbflRfgzaOZGRob0TGxk68FP8NHTkZ/hZ6OlESoZOTqxk6OxES4ZkfplfxrF+5lew/hd+ Fbo4cZMhhV/n1/GqbvAbOO4tfgtHvM1vY80dfhe68nuWC3paAVYgpFpBVgh0s0KtrNDdCrPCoIWV zcqOv4Zb4dDDymHlwHKEFQFJVqQVCa2tKCsKmlnRVjT0smKsGCzntHJCOyuXlQvbo9XE9vFWPNbk sfJAUyuvlRfr3ZYbz/VYHjzLa3mxxmf5oIOVz8oHLS3VUrEfYhFoivuaz9HWjoEIaVlD0i1rbaU2 2rM6aFlDlXpoWUOVRmhTFaUJ2tQAJQltaqjSEq1pqNIaramCdrQdtu+gdEBMRmsagHa0K5YdOxoo bWeQ0getpqL0R6upoNUciKMMRqsZrAxDq6lISxkobWQI2sXJiFOVqXiWYwWDpM0LUeaiVYtU5qFV i1Tmo1WLVBagVYtUFqFVy6IsQasWqSxFqxapLEOrlkVZjlYtUlmBVi2rshKtWqSyFu1ZVmU92rNI tGcb8K4d65XNieaN+4ytylas2YY2LNKJ7I2Wew/asBzKfrRhkcphtF4R0nplU84p59C6bPNsB1e6 7blz35aE+Kr6qoLLV9NXE1zSiuSWViQ32o/PIcZYhlYk1liOViTWWIX2I9pYg/YjyliH9iPW+BYt R6zxPVqOaLQZm7D9FmML4g60HFFoM3Zj2bEZMdJO5DQOo4WINo6hhYhGC3ECRzmNFiKXcQ4tRLS0 CjHSHuRGG3Ad8ZZxC89yFD8n6nsA5EZlV8Anld0jddwjFdwjtdsjVdtjRqFq5zNjULXzmblQtfNJ 1faYcaja+cy8qNpxpgdVO5/pQ9VGzUbVjjM1VO18Zn5U7XizIKp2PqnXHvN51Ot40496nQ/12sDR HXXO68Q3Bzeqc0mseRE1Op8T6xzyOLHOwWuWQY3OZ5ZHdfZJdc4rddkjFdkjtdhj1jRr4q+O8npQ VduBITW0gNTQAqie/UDj/VFDC/KBqKEF+WBUT8KHonqqfDiqZ0E+GnWzIB+LuklQMSdg+0l8EuJU 1E0VFXM6lh3F1KRKPsPfQ30k/EPUR4L6OBtH+Rj1MT+fj/pIpCZqUg0LoAJ+ibiSr8SzHL17BtVt A9Y4uqZLFdOlfulSuXS+DzXL5AdQs0x+CDXL5EdQs0x+DDWrED+BmmXyH1GzTH4aNasQP4uaZfKf ULMK8wuoWaZUK51fQbUqzK+iWpmoVr/inDja9JwT5R2e5/c42nsLUKFMJ+I7POtEfAe/lQUVyrSy ozYZUpuek6qkSz3SpRLpVpwVh786uqOjphDQwYkOApDVdT4sCoLLlK1cE/I375XSAZJbp7RsD8vb JHVq6wpsn9QpyVW1Q1JqJ9c0CJTvb/fAh4dgyAZREAse0KAwGFAMSkFpKA9VoSbUR61qBR0gBXpC fxgMI2E8TIEZ8B7MgfmwBJY/0JMLQiA7REMcbvyegWdxM/MCvAQvQwWoBrWgASRBa+gIXaEXDIAh MAomwFR4C96Hj+BT+Ay+fKCnAAiFcIiBeCznh+eAQnHgUAYqQnWoDQ2hGbSBTpAKvWEgDIXRMBGm wdvwAcyFBbAUVjzQkwJZIAfkhDyQDwrA88CgBFjwClSCBKgDjaA5tIXO0A36wKswDMbAJHgD3oEP 4WNYCJ/DVw/0FAhZIQJyQV5QoSDOeREoCQLKQmVIhLrQGFpAO0iG7tAXBsFwGAuTYTrMhFkwDxbB Mlj5QE9BEAaRkBvcQKAQ+AH3SWBDOagCNaAeNIGW0B66QA/oB6/BCBgHr8Ob8C7Mhk9gMXwBq2B1 UlKH1MBBEodLHCtxssTpEmcmtUppHjhL4jyJiyQuk7hS4rrmzTsmB34vcbvE/RKPSzwn8UqLDm1b B95yMAgkBkvMJjFKYmyLTp07BnkkahILSzQkFpNYqmXP5NSg0hLLS6wqsabE+hKbtkpJah7USmIH iSkSe0rsL3Fwqx5tWwSNlDhe4hSJMyS+J3FOm/adkoLmS1wicbnE1RI3SNzYpnO7zkHbJe6VeFji SYnnJF5u4/R2TeIdB4MDJIZKDJcY0zY1qUNwvESfxPwSn5NIJRZvl/xC8WAusYzEihKrS6wtsWG7 5OIsuJnENhI7SUyV2FviwHbJJYzgoRJHS5wocZrEtyV+gAuSFDxX4gKJSyWukLhG4redkCHBmyXu lLhf4lGJpySe79ShefvgKxJvSLzrYEigxKwSIzp165gSkktiXomqxIISdYlFknG2Q0pKFBLLSqws MVFi3WScyZDGEltIbCcxWWJ3iX27ODhI4nCJYyVOljhd4syUbs16hcySOE/iIonLJK6UuK5r206t Qr6XuFXibokHJR6XeKZrt2ZdQy5KvCrxloOhIDFYYrau3ZK7hkZJjJXokahJLCzRSE1JahFaTCKX WFZiVYm1JTZOxSsPbSWxk8TuEvtLHCpxbPeWKamhUyTOkPiexDkS50tc0h1nMnS5xNUSN0jcKHG7 xL3dU1Jp6GGJJyWek3hZ4jWJd3q3TOmcJUBiqMRwiTES4yX60u3NH2PgH2IAqmHwYxxdqMJ/jFky gHEZwJAMYHwGME8GMG8G0J0BzJ4B9GQAvRlAXwYwLAOYLQMYngEMzQDmyABGZADzZQDVDGBkBjA6 AxjzhxiAu5fcj3XM+VhHF5b+GGMzgEoGMOoPkOAOtjruzJriXjEZd68DcVc2HveJM3HnugB3ZKvh W9gKe+EonIHLcMMFrlBXhCvW5XMVdBmu4i7hKu+q7qqb9pTPrAiOprlcEenH6mnHUE+aluWJSjvm G5umUuretN/V42lHsiz9eDytnZYt7fhC4bS7Kbkg7fdaedOOdWumHetD2rFRYNqx2eG0Y3ORfiyf fpybdmyRLf14N63f1nfT/t0mPO3Ydmlaffsbaf8e0D/t+Gr+tPpX0/89qVTacerGtOP0zWnHGen9 z7gCAe+UhHwBm5VwJYcSoUQqUUq0EqPkVHIpuR+nFvsprrRx3unx/b2mv5wv0Zfg2eHZ6dnl2e3Z 49nr2efZ7zngOegf5x/vzeXN7TnkOew54jnqOeY57jnhOen50XPKc9pzxnPWc87zk+e854LnoueS r5qvhq9RwI8BJwOOB5zwXPb87Lni+cVz1fOr55rnuueG56bnlue2547jr/bc84LjpfYq3kBvkPtF dyl3CXdJt+UW7pfc3P2yu4zbdpd2V3BXcld0V3YnuGu4E9013a+4y7nLusu7q7iruau6q7tbutu6 W7tbudu427vbuTu4O7q7uDu7O7mT3V3dKe5UdyN3E3dTd5K7sbuZu7m7hbuWu467rrueu7a7vruB u6G7l7u3u4+7h7u7u6e7n3uAu6+7v/s19yD3QPer3mBviDfUm8Wb1RvmzebN7g335vBGeCO9Ud5o b4w3pzMv/jB/Nn92X0VfJW81b3VvVW8V3yjfaN/rvim+yb63fdN9b/ne8L3jm+mb45vte983yzfU e9F7wXvee8571nvGN84X7YvyRfgifT6f1+f2eXy9fb18PX09fMN8w/3hvvG+Sb6xvom+ab4Zvvd8 H+rN9M/1ZfoX+nL9S32F/pW+Ul+lr9a/1tfoa/V1+np9g/6N/q3+nf69/oO+Ud+kb9a36Fv1bfp2 fYe+U9+l79b36Hv1ffp+/YB+UD+kH9aP6Ef1Y/px/YR+Uv9RP6Wf1s/oZ/Vz+k/6ef2CflG/pF/W f9av6L/oV/Vf9Wv6df2GflO/pd/W7+i/6Xf1e37wu/wBfsUf6A/yB/tD/KH+LP6s/lh/nD/en8ef 1+/2e/xev8/f2t/G39bfzt/e38Hf0d/J39mf7O/u7+bv6e/h7+/v5x/oH+Af6h/iH+4f5h8p5xa5 55/kn+yf6J/gn+P/yD/bP8u/2L/Iv9T/uf8z/xL/F/5l/sv+K87XDGOe8Ykx3/jUWGAsNBYZi40l xmfGUucbhvMFQ+ak+8r5fmGsdr5fOF8vnG8XzpcL57uF89XC2GRsNrYYW41tzncL56uF883C2Gvs M/YbB4yDxiHH+2QcdbxPxgnjpPFjWpY746zjfTLOGxeMi8Yl47Lxs3HF+MW4avzq+KCMG8ZN57uD ccf4zbhr3DPB8UM53xfSs+OFmllkhrxsZnYz3MxhRjjfDJwvBg/kzIt3vhTcz5zn+JuIqf3TDHrM LGIWvZ9Fr6TjX/pdLr2XHf+SWdbx/psVzIpmJbOyWcWsalYzq8ssezXMmmYtmWmvrlkvLdue2chs bDYxm5pdzVSzm9nd3GPuNfeZ+80D5kHzkHnYPGIeNY+Zx2kJWpK+SEvRlyinFhXUpqXpy7QMLet4 /h2/P+/EO/Nk3oWn8K48lXfj3XkP3pP34r15H97X8fo7Pn+Z2+81Ptjx9ju+fsfT7/j5HS+/4+Pn E/hEPolP5q87Xn7Hx+94+PkM/hZ/m7/DZ/J3HW8V/8DxVvHZfA7/KD1T4CeOt4ov4Av5Ir6YL+Gf 8aX8c76Mf+H4rPgK/pXjpeer+dd8DV/L1zl+K/4N/5Z/x7/nP/CNfJPMNbiVb5P5BnfyXXw33+P4 3B2P+/38g0f5sfs5CE/x046P/Z/mIrzBb/Jb/5uPkN9zfFS/y0oY6viorDDHf26FWzmsCCvSirKi rRgrp8xXGGvFWfEyZ6Hb8qTnLVQtYmnWM1Z+q4BV0CpkFbaetZ6znrd0y28ZlmlRi1lFrKJWMesF q7hVwippvWiVsl6yuGVZwrKt0tYP1kZrk7XZ2mJttbZZ260d1k5rl7Xb2mPttfZZ+60D1kHrkHXY OmodEyBcIkAoIlAEiWARIkJFFpFVhIlsIrsIFzlEhIgUUSJaxIicIpfILWJFnIgXeURe4RZlxCui rCgnyosKoqKoJCqLKqKqqCaqiwSRKGqImqKWqJ2wLWF7wo6EnQm7EnYn7EnYm7AvYX/CgYSDCYcS DjfQG/ibVEOrVixLHzVajVFzqrnU3GqsGqfGq3nUvKpb9ahe1afmU1WVqJr6jJpfLaAWVAuphdVn nTwJqq76VUM1VaoytYhaVC2mvqAWV0uoJdUX1VIya4qlCtVWS6svp2dPKaeWVyuoFWUOlSpqVbWa Wl1NUBPVGmpNtZZa+35OlQZqQ7WR2jg9t0oztbnMr9JKba22Uduq7dT2age1o9pJ7awmqylqqtpN 7a72UHuqvdTeah+1r9pP7a8OUAc6uRLUweoQdag6TB2ujlBHqqPU0eoYdaw6Th2vTlAnqpPUyerr 6hR1qjpNfUOdrs5Q35LZW2aq76rvqe+rH6gfqrPU2eoc9SN1rvqxOk/9RJ2vfqouVBepi9Ulv8vw 8qW6Qv1KXamuUlerX6tr1LXqOnX9A1lfflA3qpvUzeoWdau67R9kgDmkHlaPqEfVY7/LBXPmgWww F+/ng/lFvar+ql5Tr6s31JvqLfW2ekf9Tb2r3iNAXCSAKCSQBJFgEkJCSRaSlYSRbCQ7CSc5SASJ JFEkmsSQnCQXyU1iSRyJJ3lIXuImHuIlPpKPqIQQjTxD8pMCpCApRAqTZ8lz5HmiEz8xiEkoYaQI KUqKkRdIcVKClCQvklLkJcKJRQSxSWnyMilDXiFlSTlSnlQgFUklUplUIVVJNVKdJJBEUoPUJLVI bdKfDCADyatkEHmNDCZDyFAyjAwnI8hIMoqMJmPIWDKOjCcTyEQyiUwmr5MpZCqZRt4g08mbZAZ5 i7xN3iEzybvkPfI++YB8SGaR2WQO+YjMJR+TeeQTMp98ShaQhWQRWUyWkM/IUvI5WUa+IMvJl2QF +YrUISvJKrKafE3WkLVkHVlPNpBvyLfkO/I9+YFsJJvIZrKFbCXbyHayg+wku8husofsJfvIfnKA HNS4ZmpUszSh2Vpp7WWtjPaKVlYrp5XXKmgVtUpaZa2KVlWrplXXErRErYZWU6ul1dbqaHW1elp9 rYHWUGukNdaaaE21JK2Z1lxrobXUWmmttTZaW62d1l7roHXUOmmdtWSti5aiddVStW5ad62H1lPr pfXW+mh9tX5af22ANlB7VRukvaYN1oZoQ7Vh2nBthDaS1CX1SH2NaUW0olox7QWtuFZCK6m9qJXS XiKHyGFyhBwlx8hxcoKcJD+SU+Q0OUPOknPkJ3KeXCAXySVymfxMrpBfyFXyK7lGrpMb5Ca5RW6T O+Q3cpfc00BzaQGaogVqQVqwFqKFalm0rFqYlk3LroVrObQILVKL0qK1GC2nlkvLrcVqcVq8lkfL q7k1j+bVfFo+TdWIpmnPaPm1AlpBrZBWWHtWe057XtM1v2aQBqQhaUQakyakKUkizUhz0oK0JK1I a9KGtCXtSHvSgXQknUhnkky6kBTSlaSSbqQ76UF6aqNIL9Kb9Pnz7NzVBX/t3TOydyd9ST9anlag FWklWtnJOUOr0er381/VorVpHVqX1qP1aQPakDaijWkT2pQm0Wa0OW1BW9JWtDVtQ9vSdrQ97UA7 0k60M02mXWgK7UpTaTfaXebP6kV70z73s2gNpK/SQQ/k0hpOR9CRToYaOoaOpePoeDqBTqST6GT6 Op1Cp9Jp9A06nb5JZ9C36Nv0HTqTvkvfo+/TD+iHdBadTefQj+hc+jGdRz+h8+mndAFdSBfRxXQJ /YwupZ/TZfQLupx+6cTLpivpKrqafk3X0LV0nYyg/w39ln5Hv6c/0I0ylv4WupVuo9vpjvSY+nvo XrqP7peR9Q/Rw/QIPUqP0eP0BD1Jf6SnZKT9s/Qc/YmepxfoxfSY+1foLzLu/jV6nd6gN+ktJ/o+ /Y3epfcYMBcLYAoLZEEsmIWwUJaFZWVhLBvLzsJZDhbhRM9m0SyG5WS5WG4Wy+JYPMvD8jI38zAv 87F8TGWEaewZlp8VYAVZIVaYPcueY8/L2P4GMxlljBVhRVkx9gIrzkqwkuxFVoq9xDizmGA2K81e ZmUeygFQmVVhVVk1Vp0lsERWg9VktR7ICtCANWSNWGPWhDVlSf8gQ0BH1ol1Zsmsy+9yBfR8IFtA //v5Al5jg9kQNpQNY8PZCDaSjWKjnejdbBwbfz+HwOtsCpvKprE32HT2JpvB3mJvs3fYTPYue4+9 zz5gH7JZbDabwz5ic9nHbB77hM1nn7IFbCFbxBazJewztlTmIPiCLWdf3s9EsJp9zdb8LR8B+5Z9 x75nP7CNbBPbzLawrWwb2852sJ1sF9vN9rC9bB/bzw6wg+wQO8yOsKPsGDvOTrCT7Ed2ip1mZ9hZ do79xM6zC+wiu8Qu/19+I2Y/syvsF3aV/cqusevsBrvJbrHb7A77jd1l94pAEVeRgCJKkcAiQUWC i4QUCS2S5a936L/eoR98hxZ1RF1RT9QXDURD531aNBKNRRPRVCSJZqK5aCFailaitWgj2op2or3o IDqKTqKzSBZdRIroKlJFN9Fd9BA9RS/RW/QRfUU/0V8MEAPFq2KQeE0MFkPEUDFMDBcjxEgxSowW Y8RYMU6MFxP+enP/c7+5i4likpgsXhdTxFQx7XfZM995KH/mbDFHfCTmio/FPPGJmC8+Tc+muVgs EZ+JpeJzsUzm1fwyPbPmqvTcmmvFugfya34vfhAbxSaxWWwRW8W29Fybu5xsm2Kv2Cf2iwPioDgk Dosj4qg4Jo6LE+Kk+FGcEqfFGXFWnBM/ifPigrgoLonL4mdxRfwiropfxTVxXdwQN8UtcVvcEb+J u+KeDbbLDrAVO9AOsoPtEDvUzmJntcPsbHZ2O9zOYUfYkXaUHW3H2DntXHZuO9aOs+PtPHZe2217 bK/ts/PZqk1szX7Gzm8XsAvahezC9rP2c/bztm77bcM2bWozu4hd1C5mv2AXt0vYJe0X7VL2Sza3 LVvYtl3aftkuY79il7XL2eXtCnZFu5Jd2a5iV7Wr2dXtBDvxn2TeaSpz7zR/KPtOe7uD3dHuJHPw dEnPwtMtPQ9PL7v3A7l4BspsPK/Zg+0h9tD/Ye9L45uovr9nMknapmmapmmb1Gax5mb2KZS2AkIK iKiIpImASBRREVARERAR2fdNQERARUBkX8pWdihQoOz7KmBFQJYClU0sW3nOvZmGov5/z/Pm+X9+ L3wxc8/3zLnnnnvu+d6ZDA2pP7T+sPrD64/Av8vzX/a+5mzgXOC3wPnAhcDFwKVAaeBy4ErgaqAs 8HvgWuB64EbgZuCW+gus5YE76q+wPghUBB4GqSAd1ASZv/wia2zQGIwLmh79MmvQGkwKJgdTgrag PZgafCKYFnQEnUFX0B18MpgefCroCaKgN8gGuSAfFIKi+mtFGcFq6i8WZQWzgznBp4M1g7WCtSO/ XpQbrBesH2wQfDbYMPjco98yCr4UbBJ8Odg06A/m/cd3UdVC1UOZoRqhrFB2KCf0dKhmqFaoduiZ UJ1Q3ZAvlBuqF6ofahB6NtQw9FyoUej50Av47VXoxVDj0EuhJqGXQ01D/lBeKBAKhl4JNQs1D7UI vRpqGXot1CoUCr0eeiPUOvRmqE3ordDb6Zb0genfpXdN//hNP0VPzaKcVAOqKVVGe+h29Dj6MH1F 49X4NC01bRktU5vpxcxhSrUabR1tM20nbU9dqi5PN05XqKf0Nn1Q/z5FU1rvOxRDWahkygS+BCoH /DWhWvz1X/O8X1I6sLJSiVSidxTIiQRZvWNBthI5yduX0oZtvANVyer9QpWSvG3JOEned8PjeduT NsX7Hmlt3g9Ja/d+RNpU7yekfcL7GWnTYBwjROmkvJTiHRTx30719r7qpbPau6faSw/zslHpMLNM qra3XyTCwREPHdQ4PlA9fKx66B4en/w9mhU8ebxDIn06qrZdVNvP/3G0oRH70ZEsdFJn2VXt+ak6 y16qBw34MHuHRXp2C9ups3djz97+kVkMj9iNiYzQQ/XY+zGPIyKWfR7TD4j4GllpEamKcur+/0NV lFN3qTvUHVIVdwi6S6riLpHvkaogNqQqwte/UKV7pCrKoX03PB6pinLqAamKcqqCVEU59ZBURTlN kaoop2lSFeW05m9VEfbfTvX2vuqls9q7p9rr71URjnBwxEMHNY4PVA8fqx66h8f/S1WE+3RUbbuo tp//42hDI/ajI1nopM6yq9rzU3WWvVQPj6oi3LNb2O5vVRGexfCI3ZjICD1Uj70f8zgiYtnnMf2A iK+RlRaVVaH5hkn4v1cFWMUzJsaEq4IxERSPq4KJJ7IZV0XYBleFev0LVTLjqgDJjKsCj4erAloL rgpoE3FVQGvFVQFtEq4KaJNxVUCb8teqUP23U729r3rprPbuqfb6W1WoEQ6OeOigxvGB6uFj1UP3 8PiPV4Xap6Nq20W1/fwfRxsasR8dyUIndZZd1Z6fqrPspXqIVIXas1vY7q9Voc5ieMRuTGSEHqrH 3o95HBGx7POYfkDE18hKC4qedI1KobKoRlQe1YpqS3WCOhhAjaImUNOoeVQBVUhtp05QV6gK2kyn 01m0j36BeDN69kP7rGcfnPvj2sp9hdLk7iBSs4jUPCK1iEivRqSWEem1iNQqIoUi0usR6Y2I1Doi vUmkcEx7SUx7SExhzSGiOVhFc5RojlTR/EQ0x6toThHNySqaM0Tza+Vs696kNHWvE+kGSFdJJD1I JOTvQ3o3puiJ+8N/A0JpJm6hOlLve36kplNTqWmeGZ6Znlme2Z45nrn/u9r/L/01E4ugWv/RHr2M zqLBaAAaiM6h39B5dAFdRJegx1jSY55nvmeBZ6En37PIs9izxLPUswx6lKLL6Aq6isrQ7+gauo5u oJuQy9HUWroXPZqeRi+lt9BH6Yv0XY1R49RU0zTQNNO003TR9NIM0YzTTNYUak5pyhkDk8YoTB7T Cp6hpjMLmI1aszZdq2hrartoD2sv6pJ16bo6uqa6lrq3dR113XX9dCN043VTdHN0S3VbdEd1Z3RX dLf1Gr1Rr+ib6Dvoe+pH6afoN+p36q9EWaLSoqpF9YsaFzUlak7UmeiG0S2jh0SPi54RvSJ6e/SJ 6CvRFTHmmPSYrJhGMS1j3o/pFTMsZlzM5Jg5MUtjDsfcMJgMbkOmoaGhnaGzYZxhlaHIcDTWG1sz tmFs09hhsaWxFUbJWNPYwNjE2MLYxjjJuNhYbLwSlx6XF9cpbmPcaVOyqZEpaOpsGmUqMBWZjpvO mcrijfHJ8Tnx9eKbxLeMHxQ/Lb4g/qjZavaYW5m7mBeYd5pLzLcTqiU0S+ieMCphesKKhBMWvcVp ESwNLUHL65b3LT0sQyzjLfmWdZadluOWM5YrltvwqGhItIXrPyMArTYjCOf0sCZPhjZEzutUjUI0 ShVNBtFkVNFUI5pqVTTViaZ6FU0m0WRW0dQgmhpVNFlEk1VFk0002VU0OUST80iT+w2eRe6kR7NQ 8G5WLc8J5xzM4TwH8JejMoj8BGiJFCgCqTmW3Pj5xUM9g2XXO6BFj77vEMCjJLnawrlG3ntwruV6 F85vQI9osLBl1CZ9c9z4GUSicgKbiNfw1eS8NJC8VIbrLezVsR7OSjhG19tYk4fPtcIaBx4pGNiA 5xfWBLB9UqCQaCIRKS8BFpUmeI7Ky3DOznuLeMFz2kj+HjFim4djtea1w9q89vhvG/PakqxgC/wE 63YUhnPjws9uL1B+dzccl+LH3rFHJY/Yk+clJUCeUhspuGLyYIb4idUDs86i6uDvpyjNwG8C3HUS lFdUy+akDbo10Dak/K4W0OZBPluSNtmxCjw1chQQf2TObi0e3wV3DMpPxn8VLGtAX7w25aANqPdo d/h7KG4GxmxEfL+q+q5Qfa8E68au17Enx3IyQqzar9rj36hR3iBR5rkpaJtQAdd91dMD1dNqUgOv 4fy5cC6fc6wgvtsT38uwbxfcxcBXOE+tw/5cbxIdvvNbw9+cCayGK69QzwXWkDZPeZOsZRvioQ2x xvN8SNaiEakiE2VVcDYaKyFi1ToyTpi/pZi/dDSpbeAtXZ9ISkTKiEjVIlL1iJQZkWpEpKyIlB2R coj0iG+lmG8waoRvdDLmG51WyTfaRCdV8i0sYb7Rz1TyjTbQT1byjY79C9/uYb7Rdsw32oX5Rj9b lW/QNw3zjbbQaZhv4LUK32gjnYT5RsdivtHWR3yjYzHfaNcjvtE1Md8qZ0b4dg/zDTSP8Y1OwHyj kzHf6Ccw38BLJd/u/YVvdwnf7hG+3cd8g6w8xjecG8w3WqGzMd/oWMw3OrmSb3RaFb6V0xLmG53z P/DtT1qi/iR8w5bNSVsT840W6GzMN+h5D/MN2vuYb7SE+UbnPOIbHYv5RmdX8o2200Il3+in/843 WiK+X1V9V6i+gW90Ncw3OhvzDXT/iW/ldA7mG51JP435Rjw9UD2tJjWA+XYf840WMd/Ad3viexn2 jflG16nCN/CH+Qa6v/CNrkWLmG/Q5mC+wVq2IR7aEGuVb7AWklrfUNmagbjKNYNUngWxBrOtUoOZ plmNz8yLj+6ToFGqaDKIJqOKphrRVKuiqU401atoMokms4qmBtHUqKLJIpqsKppsosmuoskhmpxH GsxSxoNZygiVLIXnqacqWRqWMEuZZytZytiYjEqWMvbHWcqYMUsZFrOUkTFLmZeqshT6CpiljJsR MEuZZ6uylEllnsIsZeyYpUz6I5YydsxSRn7EUqYeZmnlPDBLGTNmKWgeYynjwixlPJilDI9ZCl5U ljLmx1nKxGOWMmbMUiYBsxSy8hhLcW4wS5kcpi5mKWPHLGU8lSwF+whL4XNXFmYp4/tnlmr6Mlma vpilxLI5aethljKZTF3MUsYH+WxJ2gTMUiYLsxT8RVjK2DFLmbqVLGVYJrOSpUzu31nKZBHfr6q+ K1TfwFKmJmYpUxezFEb4DyyFKH2YpUxtJhezlHh6oHpaTWrgNZw/zFKmBmYp+G5PfC/DvjFLmYaP WIr9YZaC7i8sZeozNTBLofVhlsJatiEe2hBrlaWwFllk/nht3yGVC588GXLXzIVxmLZYypgI0tdV P3G7ukA+9mkmMMVKW5AuMYeYqcq7IF1njjPTXPhtwATmkoKrvJhEa1bawdUdcD3fdQfGvc5sUGeB /+eB2cx1pQO0l5jlpKatlFP5gNIxK5mF4Geb8h6s+ARmrmaC8j5YLWSWkcpKw28+FPz/NYFXsC1m LoNVifIRiQOQEo6jROlERlypvrlwUl4Fx3+B2cQUOxaCdJm5CL47g9V05qLyMbSbmCOV3FO6Ar4M EXYjXk4FNsOsLpH6SKt8P+TC/w/RZeYXnBGY92cEXcT+mUsuPJPLEOEFiKQnka/iK8qnMPJZPLJj Bni8TMYDtig9SEYLISLM9h3QfgLX55Hok2F9JaU3eLnEFJDc9CHyGoj8cmArngtotyt9VWmX2gvq UekFlhADxHRd+Ryur8S5ceGMgjawBdpSZjqphn4kbysrM+D6hOCTSn+yRttzn4usq0UZCF5hNUme B4DX6bA+lypXMVBM6eDKMehVHNgGV2cyiyA/g0C6iFeN7CbbcR5wvYQrwtUhXB+uD0lbTCIarEaE 5WEw+gU1W7bADui9HI+gDAH9XGUonJdjO8cckK5HsjqcrPhCWL+dZH2LHflkHbHHESDtJtLI8DXC j+6kHooeve9SviB1WApjjSLxFAV2EZtiZQzJXngGFsdiMuvVOHplNM40M7dydoHd4RFcXcno4Tyl Kfit4TRSw5eUL0mNX1LGgcUSwjr8Bg0+CylfgdVUUrfblPHgF8vb3HhmPxAufk0yDCusTCSrSt69 KBOg1ybI0UwYD88llfAG/79UC2G8feHoHPPAaiGznvD2GxJBsaszWe+iMIMDe8D7QjL7SWT26wkH 1DeQVJbrY6JdoXwHvVYz65UpuHqZ/crUMPuUyTCftcr3cF4f4dYP4Z3C9RFprys/kjUL7wzTyejF gb1w552g7iLTSIXhvM4gXrdF8oN3pW6kFpczv4GnmWotXlZmkTW6pMwmmd+jzCF+F1bWqANyDNW4 l8x8LpkjsN2BI7moVk+aYxZZebw688FiHuHQPMJKEqt7BIl/m7IgPB91BvkEXVZgLFhddV6BfeHI lUXQf1uEKftJ7AtIZeIxyN6hLCa1/qgCl5A4DsOVpWSNVioF0B6EPWIZbplpKitXEG/FzGKIE9+V SkhFd1Kru8rnIKYm/hwE94XWlfeFjHhKGz/GFDCQTxkZcBcwfEskuONH7avUu2CXii7RdY2hyLUE SmscadgddY8gSwSRVctIBNtN2DbDSmlNuyt7uWEfiB0UGSnpMZRMafWLKpFjB6WJLyXSdognRHoP BqkZ0W2jNNEHSK9nKY2evHt0D4Roe0TiS4FxhbiOUXcpevAZqjbVk5pDraG2UHup49QZ6gp1m6bg U5CVdtIcPEHXoRvReXQrui3dnR5Gf0svoAvp7fRB+hR9nr5G39VoNSaNTZOukTQ5mnqaxppmmtaa zpoBmvGaWZpVmiLNbs1RzUXNXcbIOJlqTAOmM9OTGVT1Du0BjlMvUk0840jr94yFTL1IdYFzE6or +az+j++PNaMpTe52Io2tlJhXI9JrESkUkd6ISG9GpLci0jsR6d2I1D4ivReRPohIH/5Djy4RqRuR SOzM51hmej1688z0IZq+VTT9iWZAFc0gohlcRTOUaIZVvstmbkRGmxeRFkSk/Ii0OCItjUgFEWlF RFoVkdZEpHURqTAibYxImyPS1oi0rcrM95KI91WZwwGiOVhFc5hojlTRHCOa41U0J4jmZOXM3b0q R3P3jkh9Ho37v/Rmv0odowMUgySUgQ6SNhNBvULbHM4ZqAWcM/+nfwdwfx6ewYDd9FymJdOGacv0 YSbDc8xx5rbWqs3U5mk7aodpv9Uu0G7XntBe0VboTDq3rpquni5P10bXWTdAN043XbdUt1tXoivT VehNeqde0fv0TfWt9Z30ffSj9VP0+fpC/V59ib5MXxFlinJGKVG+qKZRraM6RfWJGh01JSo/qjBq b1RJVFnUjajyaCpaG+2MrhPdKrpH9IToguiD0ddijDFcTO2YJjEdYnrGjIqZEpMfszFmf8zpmGsG ymA2pBsyDQ0MQUNHQx/DaMMUQ76h0LDXUGIoM1TEmmKdsUqsL7ZpbOvYTrF9YkfHTonNjy2M3Rtb ElsWW2E0GZ1GxegzNjW2NnYy9jGONk4yTjbOMM4x5hsLjHuNV+IMcVxco7i2cQPipsWtizseVxp3 32QzCaY6pqam1qbOpn6msaZppsWmjaaDpjOmG/Ga+LR4Jd4X3zS+dXyn+D7xo+OnxOfHF8bvjS+J L4uvMJvMTrNi9pmbmlubO5n7mEebp5jzzYXmveYSc5m5IsGU4ExQEnwJTRNaJ3RK6JMwOmFKQn5C YcLehJKEsoQKi8nitCgWn6Wppa2lm2WQZbxlhqXAssVy2HLOcitRm2hN9CRmJTZMbJbYNrFb4qDE 8YkzEgsStyQeTjyXeMuqtVqtHmuWtaG1mbWttZt1kHW8dYa1wLrFeth63lpqvZtkSEpNEpJqJzVO apXUMalXUr+ksUnTkhYnbUzan3Q66VoylWxOdidXS66XHEx+O7lL8oDkccnTk5cmFyUfTD6TfCNF k2JJSU/JTGmQEkxpkdIupWNK55RuKT1SeqWMShmbMiFlSsqMlHkp+SlLU1alFKYUpRxMOZNyPqU0 5W5KhU1js9iSbak2py3d5rUJNsWWY6tt89ka2prZWto62Drauti624bYRtjG2sbbJtmm2BbYltpW 2NbYCm1FtmLbTtsJW4ntjO28rdRWZrthu227a6uwa+x6u9FutlvtNnuaXbLXsTewN7O3tXew97D3 svezD7IPs4+yj7NPty+1r7CvsW+0b7Eftp+wl9rL7Dfst+137RWpmlR9qiHVlGpJTU5NTXWmpqd6 U4VUJTUzNSe1dqovtUFqo9TGqU1Tg6ktUlultk59O7VDKtznM6ZkTMv4gaIzvqeMrr7udDdi57EF fIxgEl2SLNcOzAwsokyOwa5+ruHuNux8drlgFp+UMuQ6uW/lrg/MCiyGq0Nc/V0j3G+xC9gVgkV8 Sqou+3Lfzi0MzA4sgatDXQNcI91vswvZlYJVRFINuV7uO7kbAnMCS+HqMNdA1yj3O2w+u0pIFlkp W26Q2zZ3Y2BuYBlcHe4a5PrC3ZZdxK4WbCIvPS03zH03d1NgXqAAro5wDXaNdr/LLmbXCKmiKNWS G+W2yy0KzA8sh6sjXUNcY9zt2CXsWiFNlKVn5Bdy2+duDiwIrKDiHKNcQ11j3e3Zpew6wSlmSHXl xrkdAgsDK+HaF65hri/dHdhl7HrBLVaXcuUmue8F8gOrqGg2mXuXHy5MFOdIK+TNeYmgSeHa8SOE SeJcaaW8Jc9Kxbl6o96sjWvPjxS+EedJq+StGS9kvJiXRH0L1nauAz9K+FacL62Wi/OSQZPKvcd/ IXwnLpDWyNvyUkDzBPc+P1qYLC6U1srb82xUFJvGfcCPEb4X86V18g6wcHAd+bHCFHGRtF7emZcK Fk7uQ/5LYaq4WCqUdwF2cZ34ccI0cYm0Qd4N2M19xH8l/CAulTbKewA/yXXmxwvTxWXSJnkv4HTu Y/5r4UexQCqS98EIT3Fd+AnCDHG5tFnen9cELDxcV36iMFNcIW2RDwBGXDd+kjBLXCltlQ8C9nKf 8N8Is8VVUrF8CKqpD+rLslx3/lthjrha2iYfzmic8RI1GXxz3Kf8d8JccY20XT4SWAt9ea4HP1mY J66VdshHAQvcZ/z3wnxxnbRTPgZY5HryU4QF4nppl3wcsMR9zk8VFoqF0m75J8Ay14ufJuSLG6Q9 8gnACteb/0FYJG6U9sonAWdwffjpwmJxk7RPPkVFuZZyL/EfCb3F0dJkeS7gZVwTvrPQRxwjfS/P A1zAvcx/LPQVx0pT5PmAl3NN+S5CP/FLaaq8APAKzs93FfqL46Rp8kLAK7k8vpswQPxK+kHOB7yK C/CfCAPF8dJ0eRHg1VyQ7y4MEr+WfpQXA17DvcJ/KgwWJ0gz5CWA13LN+B7CEHGiNFNeCngd15z/ TBgqTpJmycsAr+da8D2FYeI30my5AHAh9yr/uTBc/FaaIy8HvIFryfcSRojfSXPlFYA3cq/xvYWR 4mRpnrwS8CauFd9HGCV+L82XVwEu4kJ8X+ELcYq0QF4NeDP3Ot9PGC1OlRbKawBv4d7g+wtjxGlS vgzr49rKteYHCGPFH6RF8jrAxdyb/EDhS3G6tFheD3gb14YfJIwTf5SWyIWAt3Nv8YOFr8QZ0lJ5 A+Ad3Nv8EGG8OFNaJm8EvJN7hx8qfC3OkgrkTYB3cW35YcIEcba0XC6C3Qg+A2Z8lzH13/3p3/3p 3/3p3/3pv2x/0rIb2V3sUfYK2Zce7VGVu5bG9bmr17/71b/71b/71b/71X/BfhXFVuP68j8KS8Qi ab/8M+DqXD9+hrBU3CwdkEsAZ3L9+ZnCMnGLdFD+BXANbgA/SygQt0qH5NOAs7iB/GxhuVgsHZZ/ BZzNDeLnCCvEbdIR+QzgHG4wP1dYKW6XjspnAT/NDeHnCavEHdIx+RzgmtxQfr6wWtwpHZd/A1yL G8YvENaIu6Sf5POAa3PD+YXCWnG3dEK+APgZbgSfL6wT90gn5YuA63Aj+UXCenGvdEq+BLguN4pf LBSK+6Sf5VLAPu4LfomwQdwvlciXAedyo/mlwkbxgPSLfAVwPW4Mv0zYJB6UTstXKQNbny1kT7Pl 3Fi+QCgSD0m/ymVg1YD7kl8ubBYPS2fk3wE/y43jVwhbxCPSWfka4IbcV/xKYat4VDonXwf8HDee XyUUi8ek3+QbgBtxX/OrhW3icem8fBPw89wEfo2wXfxJuiDfAvwCN5FfK+wQT0gX5T8Av8hN4tcJ O8WT0iX5NuDG3Df8emGXeEoqlf8E/BL3LV8o7BZ/li7L5YCbcN/xG4Q9Yol0Rb4D+GVuMr9R2Cv+ Il2V7wJuyn3PbxL2iaelMvkeYD83hS8S9ou/Sr/L9wHncVP5zcIB8Yx0TX4AOMBN47cIB8Wz0nW5 AnCQ+4HfKhwSz0k35IeAX+Gm88XCYfE36aZCAW7G/chvE46I56VbCg24OTeD3y4cFS9IfygawC24 mfwO4Zh4UbqtMIBf5WbxO4Xj4iXpT0ULuCU3m98l/CSWSuWKDvBr3Bx+t3BCvCzdUfSAW3Fz+T3C SfGKdFeJAhzi5vF7hVPiVemeEg34dW4+v0/4WSyT7isxgN/gFvD7hRLxd+mBYgDcmlvIHxB+Ea9J FUos4De5fP6gcFq8Lj1UjIDbcIv4Q8Kv4g2ZUuIAv8Ut5g8LZ8SbMq2YAL/NLeGPCGfFW7JGiQf8 DreUPyqcE/+QGcUMuC23jD8m/CbelrVKAuB3uQL+uHBe/FPWKRbA7bjl/E/CBbFc1iuJgNtzK/gT wkXxjhylWAF34FbyJ4VL4l05WkmCffs99k9uFX9KKBXvyTFKMkXnPQlW73Or+Z+Fy+J92aCkAP6A W8OXCFfEB3Ksgu9dHbm1/C/CVbFCNip2wB9y6/jTQpn4UI5T8J2rE7ee/1X4XaJkk/IE4I+4Qv6M cE2i5XglDXBnbgN/VrguaWSz4oAoPmbvcBv5c8INiZETFCdYdOE28b8JNyWtbFFcEFUH0HXlivjz wi1JJycqbsDduM38BeEPSS9bFRz1J9wW/qJwW4qSk5R0wN25rfwl4U8pWk5WngL8KVfMlwrlUoyc ongA9+C28ZeFO5JBtikI8Gfcdv6KcFeKle2KF3BPbgd/VbgnGeVUhQX8ObeTLxPuS3HyEwoHuBe3 i/9deCCZ5DSFB9yb281fEyqkeNmhCID7cHv468JDySw7FRFm2Zfby98QKSlBdilSHo6wH7ePvynS kkV2KzLg/tx+/paokRLlJxUF8ADuAP+HyEhWOV3JADyQO8jfFrVSkvyUUg3wIO4Q/6eok5Jlj1Id 8GDuMF8u6qUUGSmZgIdwR/g7YpRkk71KDcBDuaP8XTFassuskgV4GHeMvyfGSKkyp2QDHs4d5++L BukJmVdyAI/gfuIfiLFSmiwoTwMeyZ3gK0Sj5JBFpSbgUdxJ/qEYJzllSakF+AvulECJJskly0pt wKO5nwVajJfcsqI8A3gMVyJoRLP0pJyh1KFoF9y32bHsJnY3e4w9w17lfqE0btqtp2jHZopmZ8C6 54EMdxN3DHdZ0ImJkkfOVHJB3wqecI+5fqUYxxbX2bwQoIOu3+C8x3WSornbYPE6+Irn7oBur+tn 0MFu5jZyZUK0mCyxcrbSAMaexO5gD7O/sKXsH9wF6NMS7GBXdEdzpYJWtEhPydUVH+huQqz4mWQ8 u5Xdz55kz7PXubNg/wocLSjaPQBsyiHimRBtEeiaUgy7gf2VvUvRvAb6HocojrjwXWUcu5ndy/7E nmN/534Fy9dA9xW7hd3HnmB/Y69xZ8B6N1gfdp0H6RBcncBuYw+yP7MX2ZvcbzDOA7h6wHUO+rYB C8hYnj2vGaVnv2F3skfYy+xt7iLM3MRVgO1DOCAG0Q4x9oPYNkAvP8zPwF0R9KJVQnINpR7Y3Ad9 AI4gHO9AzAy0rcG+GPr1BdkNNvcAb6Q07CzuOqBrYEXBlZehhX3SHcf9LsSIKRIn5yjPQtRzeJ0Q Kz4hCXJN5TmI+ChPAwO+ZIvYPexx9ixbxp3OewP6RXGXBEZMkNLlakpd8PcS9J3IbmcPsSXsJfYW B1lwPwnj3YJZ2KC9ATZvgr99LnhmcMdyV4UoMUnyyllKfeg5m9cKBjFV4uWnlYaQnRPQuz+lcWx1 QV7zmoPFXF4vGMU0SZRrKY3Az34Xfrb4mi1mD7Cn2AvsDQ4yy0bBEQ1HDBwGOGLhMMIRB4cJjng4 zBTthTX33oEDcuyF/Hghj94HcEDuvZB7FjLE0nAkwGGBIxEOKxxJcEBdsJBnVguHDg49pcktzt32 +PmDfPp7zwXPRc8lT6nnsueK56qnzPO755rnuueG56bnlucPz23Pn55yzx3PXc89z33PA0+F5yGi EI00iEFapEN6FIWiUQwyoFhkRHHIhOKRGSUgC0pEVpSEklEKsiE7SkVPoDTkQE7kQm70JEpHTyEP QsiL4GMB4pGA4IMego0FZaBqqDrKRDVQFspGOehpVBPVQrXRM6gOqot8KBfVQ/VRA/QsaogaoRfQ i6gxegk1QS+jpsiP8lAABdErqBlqjlqglug11AqF0OvoDdQavYnaoLfQ2+gd1Ba9i9qh9qgDeg+9 jz5AHdGHqBPqjD5GXVBX1A19grqjT1EP9BnqiT5HvVBvBJ9NUD/Un3w7ZTAagoaiYWg4GoFGolHo CzQajUFj0ZdoHPoKjUdfowloIpqEvkHfou/QZPQ9moKmomnoBzQd/YhmoJloFpqN5qC5aB6ajxag hSgfLUKL0RK0FC1DBWg5WoFWolVoNVqD1qJ1aD0qRBvQRrQJFaHNaAvaiorRNrQd7UA70S40CO1G e9BetA/tRwfQQXQIHUZH0FF0DB1HP6ET6CQ6hX5GJegXdBr9is6gs1W/XfNP359Bt9Af6Db6E5Wj O+guuofuoweoAj30Ul7aq/EyXq1X59V7o7zR3hivwRvrE3yiT/LJPsWX4avmq+7L9NXwZfmyfTm+ p301fbV8tX3P+Or46vp8vlxfPV99XwPfs76Gvud8jXzP+17wvehr7HvJ18T3sq+pz+/L8wV8Qd8r vma+5r4Wvld9LX2v+Vr5Qr7XfW/4Wvve9LXxveV72/eOr63vXV87X3tfB997/gn+if5J/m/83/q/ 80/2f++f4p/qn+b/wT/d/6N/hn+mf5Z/tn+Of65/nn++f4F/oT/fv8i/2L/Ev9S/zF/gX+5f4V/p X+Vf7V/jX+tf51/vL/Rv8G/0b/IX+Tf7t/i3+ov92/zb/Tv8O/27/Ls959Gr6CP0PIJ954MF1DHH IXcTexPHYccRV5rjqOOY47jL4a/uOJXdTHvTUeL4xXHa8avLlf2BP8NxLvEHx3nHBX9Dx0VHqeOy 44rjqsvtr+bnHWWO313pjmvZMx3XHTccNx23/JmO2447/hqO+44Kf47joZNy0v5aTq1T5/f5n3FG Ow3OWKfRX9vlyb7qjHcmOC3ORKc1a4IzxWlz2p1pTofT6a/jdOV4s2s7n3Q+5UROr5NzeV3wMd8p OEXDJqfkVHKe/z/snQt4FMW276u7oXumZ6anuyfvZGqSEEYJkKmEmgChO4MBUVESCBAe8lDQqFEB EaNGRURFRUVEREGJggiKGBEVFRHZiKiIiKhsRUWNiIjKZqMiRsT7rzw2ui/7nn3PPt8+957Pz+9n SDKPqrX+a61aRU0R6UQZLaRFtDvtSZ3i0dSlpTRBT6JltA89OXtARW/aj55CT6Wn0f7F19LT6Rm0 nA6klXRwxUnFs+hwOoKOpGfSUXQ0HUPH0rMqyujZdBwdH+lCz+HP02p6Pr2AXlhB6EX04oo+dCKd VPxSpCu9pOJkOplOoZfR2qTOkQJ6Ob2CXllxSsWp9Cp6dfEReh29nt5Q0ZnOoDfRW7vnVHSnd3SP nj6Zzj19rv0Y3x3pWZFP51f0qOha4Za/XZGo6BJJVMRzlnSvrehXwSv6V5xWURAviZzcfYMW1bqm nxEv0XbrE8ydyUvhs+XS9e7pTpNzxDnqEld2HbfU7e1mOWc7Pzu/OL+6kqu47VzV9bi663cN13Rt N8lNcdPcDDfsRtwct4Ob53Z0oy6aNLezW+AWutzt7vZwe7olbi/XdRPuSW6Z28ft657s9nNPdc9w T3P7u6e45W6FO8Bt72qu1/W5ATfoWm7ITXZT3XQ306VutpvrdnLz3S5uVzfmMrfI7ebG3WLngPOA s8h5yHnYWeZ85nzufOH8yXnQWewscZY6jziPOo85jztPOE86TznPOM86zzsvOC86LzkbnI3OJuc1 53Vns/OGs8V509nmvOPscD5wPnI+dnY5nzifOo3ObmeP86Wz1/nK2ed87Xzr/NXZ7/zF+cZZ7qxw GpyVzirnaWe185yzxlnrrHPWOy87rzivOludt5y3ne3Ou857zp+d952dzofOmc4oZ7QzxhnrnAVb PoARLsIYH8IoH8Y4lzWPdDnGugKjbcB4V2LEqzDmpzHq1Rj3cxj5Gox9LUa/DuNfj1luwPttxDtu wnv+dibi/bc1j+Cd5jHsaB7FB83jODa7zzC/zzHDL343x28wSzHHA5hrE3x+BF4/Cr8TeF5u9n17 eF+D/71QgA8aCEAFQejAghJC0EIy1JAKPaRDEZluFlRBoYtsKCP3d9oQvuzc7M2CZn8WNnuUC5/+ Ri8OFFMKzfT+nWpOgW6Eak6HegYI5TgHne+c790L3Br3Qvci5wL3YneCc77zg3PI+dE57PzkDnQH uZXuYHeIO9Stcoe5w90R7kj3THeUO9od4451z3LPdse5491z3HPdavc893zEwiPy/jObSDtyNUF3 SjzEO8pHfMRPAsQgQWISi9SQkLhnoPnu+jSSTjJIJskiYULJJJJNLiG5pAPJIx1JlJxATiSdCBbo BI0ZKSAxwkghKSLdCCdxUky6kx6kJykhvYhDXFJKEqQ3mU7KRumkLzmZ9COnkFPJaaQ/OZ2cQQaQ clJBBpJBpJIMJkPIUFJFhpHhZAQZSc4ko8hoMoacS84iu//dkUz6/GuxTK4jM8gE2O4SMpFcQ+b/ /xHbZDnZSd4gb5F7yetkBVlN3iHnkwvIe+RDch6ZRpaQF8h68ip5k7xN3icfk1fIFrKN7CAfkZfJ ZrKRVJO9UFmQWNKAZuXkQnHXkT6wxHSym5T9PnOM0qC7GjIezzqXTB2lQ5EToE+hylIoZgy83mY9 g8wn9WQt+YBkO+NIhOQ4451znHOdarIwb1beHc550JjWPFIP9O2FqjuQi5wa50LnIudiZ4Iz0Znk XOLUOVc5VzvXOFOda50bnRnOTc7Nzi3OTOdW5zbndmeWc4cz27nTmUOuJZeRWnLFcePhPxMB/wnV /5FV/6uzat7t7dJK9dJIqa/U35JhyViik/bkPrKA3A9lP1SaTfaSq9ryLn4+Pu+2vEV5i8nDeQvz 6vMeyHvQvYTsgWqzoTc807mvlDr3t0tzFjhzS3NKc50LnMtLOzrXlXZwpjnTS/Oc+eTK1tx9vbPQ qR+l/is53J1MLnZqnRucu515zl3OPc69zmTnUmeKc5k70Z2EDL+UFB3vk/P/7M+O1x8c73F4pyWw 2l65Ljva8Y3o/fi+y7/rnWs24J3+yfsHjnvvwHFuHTj+3QU1W0ldtCAai3aNdo6yaGE0O5oTzY12 iOZFO0aj0ROiJ0Y7RYui3aJdohz//bOPzMejGL6K7/Px+MLmZ3Y57nP+udcsxOvw5lc+3mPEe3TB q4jXEq8jnnP8x3UB+A8z3yJdZxr2d1lLrMet2uQvMmPWc1xPzc581RqYdEv6U1mjuM+6nPuzmqy3 QoU5PZM+Tfop6w0e4EbqieYZ5jk8mDLSHGA9ws1QEbdSm7jNQ+njQ8+HFiUdTv/JDtjnJtWHv+BJ PDm1m/mq2Zh9KOkLnpI8JS0p/UhGbubjmc/bF/NUnpa0J1nj6ebYUEXyD2n1oUdCK3mG3S9Ul0Jy XuKZSQrP4mFzR9ZQ85Wch+019g+cJo9PfSX1SNqu9NsytmQFs/ak9+GRtKBZbT5pTUlan7QoJYVn pzZmvpKVljXaGh/abN9h78q8KeWT9CHWZTwnN5h8b8rnqX5zddI2npv5jvl1KD3p3PTHMq5I+pZ3 SF3P88J55pSML5Pn2xnpnW3KO8LsJ2T2sF4IvcpPtNcm35CSlPoF75Q23JzH82lKzt28c87K0JvW NrsD75L8Ts5NqZGMhKmaj1tP21JSRfLJvGvK2an5GQMy49aFGbKdyQt4LGdGyhOZB60rUxdndskM ZF0Y2p60LGd42sDMr8MdQvNTe3Fm54XKk09NvilNz5iUcV/m2NQAL+RF5rfWat4tdHVoNufJjanb 0xrT38wakv0Vj6fNTU/wYt7d7pbW3nos6yK7o3158lVp9/gqQo8lz6XFVgnvETo/7RbrCvvR0Acp szON0Hfp92fOyKnmPe35vIT3ShsS2sId2td6lruZ3szrMj4KB81ROetSPguHkiqTdib38F+SMjpH TbEzTuMJu2vqz7x3xoUZfwl50i5PSrHvCtXwkzIuSb81rKTclzUlNJaX8T7pDbwvPzm1PYrBQt6P TuCn5NTyU3NuCV1s5vLTeP/UstB7mSF+Oj8jNc/OTn8/YxgfkNaLl5uF6XryWF6REuQD7eXpfTP6 pXfng0xvVn7awoxTQ3clNWRwM5bzjKnxyvQmPjg4jQ8xr0xJzplrPcmH8ipzU6qRuTfciQ/jw0N9 +Ag+MvkTcz0/M6dz0hOpV+a8mOrho4IHk58kUs1mIjd/2lPOup6XEsV8NqVXxl7ExxrynrixtPme 1cfZE+xJ9hR75nd3q4qbVf+je1X/tVtVD7Lvf3ef6rHbVLVCb6GvMFAY/N3NqeLe1P/o1tR/7c7U MwrLf3db6m/vSm3PVrAGtpKtYk+zt9lf2XfsB3akUC30FOqF/kKjsHPh6YUDCisKqwrNwtRCma1m L7bdr8rWF2b0/hfuN4S/npNyw+9EMn+/bxP+IELDH4U/PrZvE24M7xZ7NuG94a+O7dlEctp2bNr2 a8RuTfhIpEP4aMtejdipoSrVqId6W/ZqaCCSd2ynhia37tRktOzV0Eik4/H2aWgX2pUW0Njf9mm6 UU670x60J+1Fndbdmt5t+zXH9mrETk0kn5bTipbdGjq0ba8m0vnYbs2xvRpaTc9r3qupoReKvRqx UyP2adp2adr2aGid2KGhU+m1dFrLLk0kRm8U+zQRRm+mt0YK6W309kgRvYPOjnSjd0Z4JE7n0Lsi xXRupHukB50X6UnvoffS+ZESeh9dGOlFH4g4EZcuoovpQ3QZfYQ+GimlyyMJ+hhdQR+nDfSJSG/6 JF1Fn6LPRE6KlEX6RPrSNfQFupauo+vpBvoy3Uhfj5xMt9A36Vb6VqQf3dZuou+g94LADHtd5sHw x+2vgAMu95cZ2XSqud86P+2RrI0pEwNPRXJC9ZFY6siU/hmecKM6LUI1SXPSB6dN0aotO/lXbZvn Gs8J3o9TBlA1tZvfpEMD8cC77d83CtKepXVGU/qt6ZOQEVYrJ6k3q7eps9W56r3q/eqD6hL1EXWF ulJ9Wn1OXauuVzeqr6lb1G3qu+r76kfqp+puda/6jXpA/V49rB7RiNZO82h+zdSStDQtS8vW8rQT tS4a07jWQ3O03lpf7VTtDG2gNkQbro3SztLO0c7XLtImaVO0K7SrtWnaDdrN2m3abG2udq92v/ag tkR7RFuhrdSe1p7T1mrrtY3aa9oWbZv2rva+9pH2qbZb26t9ox3QvtcOa0eaP+2hewyP7UnxZHio J9cT9eR7CjxFnmJPiafUU+bp5+nvKfdUeqo8Iz1jPOM81Z4azwTPZE+tp84z1TPdM8Mz0zPLM8cz z7PAU+9Z7FnqWe5p8KzyrPas8azzbPBs8mz2bPVs9+zw7PTs8jR69nj2efZ7DnoOeZo8R72yV/Xq XsNre1O8GV7qzfVGvfneAm+Rt9hb4i31lnn7eft7y72V3irvSO8Y7zhvtbfGO8E72VvrrfNO9U73 zvDO9M7yzvHO8y7w1nsXe5d6l3sbvKu8q71rvOu8G7ybvJu9W73bvTu8O727vI3ePd593v3eg95D 3ibvUV3WVV3XDd3WU/QMneq5elTP1wv0Ir1YL9FL9TK9n95fL9cr9Sp9pD5GH6dX6zX6BH2yXqvX 6VP16foMfaY+S5+jz9MX6PX6Yn2pvlxv0Ffpq/U1+jp9g75J36xv1bfrO/Sd+i69Ud+j79P36wf1 Q3qTftQn+1Sf7jN8ti/Fl+Gjvlxf1JfvK/AV+Yp9Jb5SX5mvn6+/r9xX6avyjfSN8Y3zVftqfBN8 k321vjrfVN903wzfTN8s3xzfPN8CX71vsW+pb7mvwbfKt9q3xrfOt8G3ybfZt9W33bfDt9O3y9fo 2+Pb59vvO+g75GvyHfXLftWv+w2/7U/xZ/ipP9cf9ef7C/xF/mJ/ib/UX+bv5+/vL/dX+qv8I/1j /OP81f4a/wT/ZH+tv84/1T/dP8M/0z/LP8c/z7/AX+9f7F/qX+5v8K/yr/av8a/zb/Bv8m/2b/Vv 9+/w7/Tv8jf69/j3+ff7D/oP+Zv8RwNyQA3oASNgB1ICGQEayA1EA/mBgkBRoDhQEigNlAX6BfoH ygOVgarAyMCYwLhAdaAmMCEwOVAbqAtMDUwPzAjMDMwKzAnMCywI1AcWB5YGlgcaAqsCqwNrAusC GwKbApsDWwPbAzsCOwO7Ao2BPYF9gf2Bg4FDgabAUUM2VEM3DMM2UowMgxq5RtTINwqMIqPYKDFK jTKjn9HfKDcqjSpjpDHGGGdUGzXGBGOyUWvUGVON6cYMY6Yxy5hjzDMWGPXGYmOpsdxoMFYZq401 xjpjg7HJ2GxsNbYbO4ydxi6j0dhj7DP2GweNQ0aTcTQoB9WgHjSCdjAlmBGkwdxgNJgfLAgWBYuD JcHSYFmwX7B/sDxYGawKjgyOCY4LVgdrghOCk4O1wbrg1OD04IzgzOCs4JzgvOCCYH1wcXBpcHmw IbgquDq4JrguuCG4Kbg5uDW4PbgjuDO4K9gY3BPcF9wfPBg8FGwKHjVlrD510zBtM8XMMKmZa0bN fLPALDKLzRKz1Cwz+5n9zXKz0qwyR5pjzHFYO9eYE8zJZq1ZZ041p5szzJnmLHOOOc9cYNabi82l 5nKzwVxlrjbXmOvMDeYmc7O51dxu7jB3mrvMRnOPuc/cbx40D5lN5lFLtlRLtwzLtlKsDItauVbU yrcKrCILq1Cr1Cqz+ln9rXKr0qqyRlpjrHFWtVVjTbAmW7VWnTXVmm7NsGZas6w51jxrgVVvLbaW WsutBmuVtdpaY62zNlibrM3WVmu7tcPaae2yGq091j5rv3XQOmQ1WUdt2VZt3TZs28ZS1aZ2rh21 8+0Cu8gutkvsUrvM7mf3t8vtSrvKHmmPscfZ1XaNPcGebNfadfZUe7o9w55pz7Ln2PPsBXa9vdhe ai+3G+xV9mp0IOvsDfYme7O91d5u77B32rvsRnuPvc/ebx+0D9lN9tGQHFJDesgI2aGUUEaIhnJD 0VB+qCBUFCoOlYRKQ2WhfqH+ofJQZagqNDI0JjQuVB2qCU0ITQ7VhupCU0PTQzNCM4kkXwVuIFLk NHzdCjaDN8Fb+Nmp+LoEPAy2gdVgKrgXXAvmE0kxQBCYwAI2CIEkkAxSQCoeex2YDl4EL4B14Hrw Nn6fBtJBBsgEWSAMKIiAbJADckEHkAc6gig4AZwIOoF80Bl0AV1BAYgBBgrxXo+AR4GY923gZvy8 CHQDHMRBMegOeoCeoAT0Ag5wQSlIgN7gJFAG+oC+4GTQD5wCYDsFNlX6g9PxXsthT/xcfgzcBxYR WX5dXoA/PQgWtv70DbAFbCdSQvxuMWgAK8Dj+NlAvJoOfPh+Gr76iRRrbPFK9kh8fQg8AerxOxVf b2qd7a3gFnAPeBYjuQZgZBHhzVfAc3gdzCryMxDnBjBz+XmwpuW5BRV4/egxtTS/z9+pBTP6n6eW 1/9OMQ/+NylG+A8+k1cC9JPy1a3+PwAeALC9Ap8osL2yDHwGPgdfgD/hsfPwVYwdelLgI2UpwPwU zE3B6yvQlgLdKHht5SnwDIBOFGhAgf0V+EF5CWwAG8Em8BqAfRRoQIFuxQ0gCrSgwPfKO2AH+AB8 BD4Gu8An4FMAzSq7wR7wJdgLvgL7wNfgW/BXjPtGMKM1UveDv4BvwHfge3AQwE4K4kPchqLAPsoq 8DSA/hToWoGGlbUAGlLWg5cBNK+8CqBhBdpVhK4Qc8q74D3wZ/A+2Ak+JFIYrxGGHcLwbxj+DcO/ Yfg3DP+G4d8w/BuGf8Pwbxj+DcO/Yfg3DP+G4d8w/BiGf8Pwbxj+DcO/4TPAAFAOEF9hcapsEKgE g8EQMBRUgWFgOBgBEOfhM8EoMBqIM1FjwVngbDAOjAfngHNBNTgPnA8uADXgQnARuBhMABMBupLw JWAyuBRMAZeBWnA5uAJcCeoA8kAYGgxDk2HEeBjxHRZnuRC3YcRtGLEavqE1/9zSmsegOXnZsVzW nNdEroK/ZGhOhs/kZ1ryk4J8qMA+CmyjiJwHmyiwhzILzAZzAMatwH4KbKfAbgpspsBe4vYlBbZS YCcFNlJgHwW2UWAXcR+TAnsosIUCOyiwgYK5K5i3gjkrmK+C+SqYr4L5KpivgvkqmKci4g3zUqBH BXNSkBMUxKWCvKDcDu4Ad4K7wFxwNxBxh5yrIAcqyOeKyMvI88r9QORD+FWBTxX4U4EvFfhRgQ/F XVIKfKfAbwp8psBfCnylwEcK/KPANwp8oMAHCuyvwP4KbK/A9grsriBuFNheuflYTYli7vLHLXVG 5HKR/0X9iSKHtUMdkRHTMmIiCr1Godco9BqFXqPIbVGR25TW+iHyMWJfRh6QEUsyYlhGvolh/DHY OoY5xGDvGOYRg81jmEsM7x3DfGKwfQw2i93WsrpoXnXAdjL8KsN+Mnwrw4by3JacJSNuZeQdGXEr izy2oeW9E4irmBgLcoeM3CEjd8jIHTJyh4z8ICN/yMgXCWgqAU0lkAsS0FUCuouJuoo8IiN3ysgf MnKJjFwi/4Df1Td/WkmKIacmYIeE0Ogh8CP4CaA2yqiR8hHwCzgKfoVtCJCA3GInpR2ei1wagwYT 0HgCeSkBnSeg8xjybQz6jCGHxJA7EtB4oqJV7wNaNV/RqvtBrdof3Kr/Nn0Pa9X4iFadn9mq9dGt eh/bqvmzW3U/vlX757bq/7zWGLigNQ4ubI2Fi1vjamKr1i5p1dulrZr7R/HRpsVrfqPHab/R5PW/ 0eWMY9o8bhzNao2l2a3xNOf/EFPzW+OqLaYWtsRYBGuECNYIEawRErBdArZLwHYJ2C4hbCdqpqiH om6Kmihqp6iLon6K2ihqaFt9FPVF1EhRY0SdFHVG1EpRa0S9FPVG1ExRc0TdFHVH5DBRe0T9FPVH 1FBRg0QdFXVI1FJRi6Dp5poqapKoq6IuidoqatM/qq9tNUvU2ba6JeptW+0Sdbetfon621rDjluH xTpB1GKxVhD1WKwX/lFNFnVX1OW2OizWHqjRzTW4tR4noMkENJkQuocmE9BkAppMQJMJaDIBbSWg rQS0lYC2EtBWAtpKQFsJaCsBbSWgrQS0lYC2EtBWAtpKQFsJaCsh1rn4PhvfZ+P7bHwfw1hiGEcC 9k7A3lHU5wR0E4bdwrBTGHaKiToNG2a3x58xrtio5k8oSjFoIHYfkUc3kPfYGWxA7LvY96w89kPs UOzH2OHYT7Gm2M+xI7FfYkcZYRKTmcLasfZMYx6mMx/zswAzWJCZzGI2C7EklsxSWCpLY+ksg2Wy LBZmlEVYNsthuawDy2MdWZSdwE5knVg+68y6sK6sgMUYY4WsiHVjnMVZMevOerCerIT1Yg5zWSlL sN7sJFbG+rC+7GTWj53CTmWnsf6sgg1kg1glG8yGsKGsig1jw9lIdiYbxUazMWwsO5uNY+ewc1k1 O4+dzy5gNexCdhG7mE1gE9kkdgmbzC5lU9hlrJZdzq5gV7I6dhW7ml3DprJr2TR2HZvOrmc3sBvZ DHYTu5ndwmayW9lt7HY2i93BZrM72Rx2F5vL7mbz2D3sXjafLWD3sfvZQlbPHmAPskVsMXuILWEP sxHsLHZ67FemsqVsGXuEPcq8bHyiMfF5Ynfii8SexJeJvYmvEvsSXye+SXyb2J/4S+JA4q+Jg4nv Et8nfkgcSvyYOJz4KdGU+DlxJPFL4mjiV/hrBelKY0OPDOkx9IkRM3us7HlPz5W9llU29AzlXFr+ TlWkpCRnTq+beenga8pvH/LR0Jyhh6sKq1YMO2V4zxFqhTXCregw4tPKHwbLg2ND1g89oYpVfTTM GlY9bMWwV0b0GYH4H71c/qH9gfbftz/c/ohK1HaqR/WrppqkpqlZaraap56odlGZytUeqqP2Vvuq p6pnqAPVIepwdZR6lnqOer56kTpJnaJeoV6tTlNv+G/Z6Z2s1Wp12lRtujZDm6nN0uZo87QFWr22 WFuqLdcatFXaam2Ntk7boG3SNmtbte3aDm2ntktr1PZo+5rv9DmkNWlHPbJH/WOn94+d3j92ev/Y 6f2fudNLJCLuMcU6Jyb+1QKsc4i4Yw3rHCLWFuh9iLh9DescgnUOwTqHoFcg6AsI+gJyGKA3aP7X j8T9jegNCHoDgt6AoDeQ0Bvgf5KE3gCNgiShN5CwDpFUoAEP8AId+AB6MSkADBAEJrCADUIgCSSD FJAKsNaVsNaVsNaVMkEWCAMKIiAb5IBc0AHkAfR/0gngRIB1uLhfXeoMuoCuoADEAAOFoAh0Axyg X5SKAfpCCbaRYDMJay5xl764v1zCWktCXyMlQG9wEigDfUBfgN5NQm8lY31HDhA5Fw7FTzq1/Eb8 VEaHIqNrkdG1SLCsdLTVYrCWLKw3oIVmL2BlKsHKMjoa6cfWWaF7lQ63PFYe3fI1F1aU0fHIWJ3K WInK6I5kdD8yuh8ZK08ZK04Zq1IZnZCM1aqMlaiMlaKMVaqMzkjGilHGalVGhySjq5JFN42Vq4wV rSx2XtFZyVjFyhNb3l+ua1GVhK5OOq11rD+2jr1NBZ4W1UnoiKSbWsd/c8vY/zYP4SHRLea0Kg6/ E/YSdmq2ZKdmKzbbSdiiTakS1Cj9/Btv922xugR1Sr+02lSosz8Qu41QqQyVylCprLSoXNgtlnvM 9rGOAK8XEyrq2BIlbX5qjpZvWiJGRIlQtIyVfAzziEX/LyLk3xUF/ybFy0KzQnvwtSz8JuyCOciY p4x5yGInH3ORMRcZz5UxHxnPl8UuOF5Dxrxk8TqYmwwfypifLOIEc5RFFGGestAb5iqLv6/BfGWx q4I5y2KHB/OWhX9hQxnzl6FHGTaQoUMZdpDLAXwqw5+y2OGHv2RoToau5AowEMBW8iBQCWAzGR21 jI5ahu1kdNUyumoZNpTRWcvQqgxbyrClDFvKYicdtpTFDhPsKcOnMmwqw68y7CrDrjLsKsOusvhb B9hVhh1l2FaGXWXYVRZ/kyHsjPFIiF8JY5IQcxLGJCFGJYxLQnxKGJeEeJcQv9IdAHEuzQaIdQkd oYS4leYAaFa6C4j8MhcglqW7AWJYmgeQf6R7gMgp9wLkDWk+QL6QFgDMU0LekO4DyBfS/QA5QkJH KSE/SMgJksgDyCcS8oeEvCHVgwcAcoaErlNaBJAvpMXgIYAcJC0BDwPkHgldiLQMIIYk5CZJxDty ioTuV4LtJXTAEmwvoQuWYH8JnbB0LZgGrgPTwfXgVnADuAXMBPC3dCOYBW4Dt4PHwArwOGgAT4CV 4EmwCjwFngbPgNXgWYBuW0K3La0BL4C14EWwDrwE1oM/AVRX6WWwEbwCNoFXwWvgdYAuXUJnLm0B b4KtAF27hK5dehtsB++Ad8F7YAf4M3gffAB2gg/BR+BjsAt8Aj4Fn4FG8DnYDb4Ae8CXYC8Q+Vnk X1FDkLsk5DMJeUxCDpNETkUulUQuFfkM+VBCDpeQg6VHwXLSnH/F6kCsGv5WX+r++Vwn8qvI6WIl 0Fwf2lYZrauKtjrxX/16ogaJscYQ5zHEeQzxHUNcxxDPMcRxDPEbQ/zGEL8xxG8M8RsTuXB4S+7/ I6f9kdP+X89piAV50Hb5NPE520hm1pLwu3w8P4efWzmo5dRm+IPwzvCH4tQmP59fwGvCu/iF/KLw J1lviBOc/GI+IdwY/jy8m0/kk/jo9PGhRXxy+AtxpjO1W3gvvzT8VfKU8L6MXD6FXxb+mtfyy8Pf 8CvC3/IrxRnP8AFe97cznj+ED4V/DB8O/xRuygqGf+ZX8avDR/g14V/41JZzn/xaPo1fx6dTicr8 en4DVfiNfAa/id+c8gm/hc9sOxXKb+Vj2k6G8rHibCi/jd/OZ1GDBtM78zuoyWeLk6L8Thric2gS v4vP5XfzeTSZprSdG+X30Eyaxe8Vp0f5fL6A38fvpxG+kGbTHJrL6/kDtAPN4w82nyg9gZ5IO/FF ND9j0rEzpXwxf4gv+c250jgtbj1bWtJyupQ/zJeKE6Z8Ge3NH+GP8uWtJ037is8GW8/yx/gK/vjv T53SAbQ8rtAK3pBUmdyDDuRP0EHNJ1CH0KG0ig5rOYea8RfxqWG+kj9JR/NVdEz6rcfOo/Kn+NP0 HP4MPZc/y59r/hRx89nUJLftdCpfQyfwF/ha/iJfx1/i6/mf+AZxYpVvFCdW+Sv0UnFqlW+itfzV SIFZyF9rO73KX0/v3nyC9ZqWM6x8M72Ov0Gn8y38Tb5VnGflb4nzrKlX8m30Jv628SjfTm+mt/B3 6Ex6K3+Xv8d38D+LM678fTpLnHLlH/Cd9E7+oe8n/hH/WJx1pXP5J/xT/hlvpHfzz/luOo9/wb/k e/lX4uQr38e/bv8o/4bO59/SBXw//wu9j97PDwSW0IX+GlrP/8oP8u/49/wHfoj/6J9IH+CH+U+q xJv4z/RBfkSclOW/8KP81zihD8UluoQ+HJfpUu2AfzBdFm8Xbx9XxSnauNZ+B10e3CXO0cY9cW/L Wdq4HvfF/XRlPBA34sG4GbfidjwUT4onx1NaT9k+TZ+Jp9LVnh/jaUEtnk6fbb+YnxXPCGTT5+jz 8cx4Vjwcp3RNPBLPjufEc+kL8Q6qSdfSF/UV8bx4x3iUrqMvxU+In0jX0z/RDfFO8Xz6Mj+bbox3 jneJd40XxGNxFi+MF8W7xXk8Tl+JF9NN8e70VfpavAd9nW6O99K60TfiTtyNl9It8US8N30zflK8 rN2VdGu8T/vO8b7xk+lb8X50W+Wgds+2v0Cdqq713Ek76Yv1h3zpgSqjY2hQ6qVZlXTzPz77q94Q qg9uSh0J23UQZ3/DOzUp/PPxz/623/G/n/0NZKdPQl7aJk3n41ryEa/m57VkIJF/RN5pzjiX8Mn8 UpFbRGbhV/AreZ3IG/waPrUtW4hM0ZYnRJZAdmjOBvwOPpvfyee0RT+/h9/bFul8oYhw/iBf1BLF IlL5spYYbYlK3sCfEPHFV4l44s/w1S3RxNf8feTwl/lG/grfxF/lr/HX+Wb+Rks08Lf4Nv42387f adM9f1+onX8olM53talcaBwK39OicaFv/g3/ViibH/i9moWShY75kTYFx6W4/L/Y+w7oJq70+1ck jbrkblkejQBZgIEZRlgYg0cSphhTPJgaZAi9dzAYMB1C7733GkpI6CWh9957Mb33QCgJ/5mxbEzW 7LJhdxN+/xzOoRxkaTy+33v3u999d5w4A7VOQsRpBkJzwqczxBnqNDnDMjGYiUBnngzciZgT0ZYz zpxFndHOYs4YZ3FniQxsicgSceUsJSLKWVbWR7ZKtl62TXZIli6PlDeQ95Xvlx9XaBR5FPGK2op5 ir2Kh4qfFS8JA5FA1CBSic1KpbKWMlXZTdldpVFpVXGqnqpeqpGqQ6qn6nzqcuqJ6pnqJeof1Uc0 lMalqatprmmjWaFZrTmvuam5rbVo82gjtaW18dpE7XLtFu1W7Q5tus6go3S5dMV1LXRDdRN1c3WL dat0wk9IT+kL6ivoa+ln6W/pHxiUBrVhh2Gn4axxgF9VWZf3VaCe9b4K9Isy6iCqgeZpVNP3lWCw 5FQJweWdeeTdFb2jmnzMBa/UiS547er3laB/7HPBo6RDYNZf9/7pgz7n/mU/TSC7+fH7mHEXw5Ti XZRd/EN38QBIsYfZzXaTPcQebiftWrvOrrcb7Ea7n93fHmAPtAfZLXbKHmoPFn596itNwivEvwcL ryWlrwrN8fWf9n6k9Nk5/b/4/qHCO4jvI76H+PqcXydclfDd7oO52PpsA7Yh25JtxbZm2zjKsG3Z dmx7tgPbiG3CNmWbsy3Yxmwq24XtynZj09jubA+2J9uL7c32Yfuy/dj+7DfsAHYgO4gdzA5hh7LD 2RHsSHYUO5odw45jx7MT2InsJHYyO4Wdyk5jp7Mz2JnsLHY2O4edy85j57ML2IXsInYx+y27hF3K LmOXs9+xK9jv2R/YlewqdjW7hl3LrmPXsxvYjewm9kf2J3Yzu4Xdym5jt7M72J3sLnY3u4fdy+5j 97MH2IPsIfYwe4Q9yh5jj7Mn2JPsNfY6e4O9yd5ib7N32LvsPfY++4B9xD5mn7BP2Wfsc/YF+5L9 hX3FvmbfsG/ZX9nf2HcO4IAO5MAOmUPuUDgIh9KhcqgdGofWoXPoHQaH0eHn8HcEOAIdQY5gR4gj 1GFyhDnMjnAH6bA4KIfVkcuR25HHYXNEOOyOvI58jvyOSEcBR0FHIQftYByFHazD4SjiiHI4HUUd 0Y5i7EP2Z0e8oyzbkU1hO7Gd2dPsGfYse449z15iL7NX2HT2qiPGUdxRwhHr4BweR0lHnKOUo7TD 5XCzp9hh7Fi2GXuBvehxedwej6ekh2IbeuI81T2lPDU8Fo/Vk8uT25PHY/NEeOyevJ58nvyeSE8B T0FPIQ/tYTyFPazH4SniifI4PUU90Z5inhhPcU8JT6yH85T2lPGU9cR7ynkSPOU9FTwVPZU8iR7e U9mT5KniqeoRn3sktM5J4jNgcgFFjqfz7wt992uh534r9Nu/gXdikw1RcpPkjskpyZ2SOyenJndJ 7prcLTktWXS+NEPdUQ/UE/VCfdA3aAAaioahCWgimoSmomloOpqBZqJZaDaag+aieWg+WoAWokVo MfoWLUFL0TK0HH2HVqDv0Q9oJVqFVqONaCfahXajq+gauo5u4Io4EVfGVXA13AaPwKPwGDwZz8Sz 8Vw8Hy/EW3E6voZv4Pv4GX5OxpDFyRJkLMmRLtJNesiSZBxZiixNliHLkvFkOTKBLE9WICuSlchE kicrk0lkFbIqWY2sTtYga5JfkbVIL5lM1ibrkF+Tdcl6ZH2yAdmQbEQ2JpuQTclmZHOyBdmSbEW2 JtuQbcl2ZHuyA9mRTCE7k6lkF7Ir2Y1MI7uTPcieZC+yN9mH7Ev2I+eS88j55AJyIbmIXEx+Sy4h l5LLyOXkd+QK8nvyB3IDuZHcTe4h91ImKoyqRCVSPFWZakY1p1pQLalWVGuqDdWWake1pzpQHakU qhPVmepCPaaeUE+p59TP1AvqldVo9bP6WwOspNVipaxWa6q1i7WrtZu1n7W/9RvrYOsQ63DraOtE 61TrbOs8uj7dkG5EN6ab0E3pZnRzugXdkm5Ft6bb0G3pdnR7ugPdkU6hO9Gd6VS6C92V7kan0d3p HnRPuhfdm+5D96X70f3pb+gB9EB6ED2YHkIPpYfRw+kR9Eh6FD2aHkOPpcfR4+kJ9ER6Ej2ZnkJP pafR0+kZ9Ex6Fj2bnkPPpefR8+kF9EJ6Eb2Y/pZeQi+ll9HL6e/oFfT39A/0SnoVvZpewxgYI+PH +DMBTCATxAQzIUwd5mumLlOPqc80YBoyjZjGTBOmPdOB6cikMF2Zbkwa053pw/Rl+jH9mcHMUGYY M5wZwYxmxjBjmXHMAmYhs4hZzPzArGRWMauZNcxaZh2znnnEPBEdMDn5X5h3HzhgFJIHRvUXcMFU EH07hRNzdMPU+sAPU09yxDT8S3hifE6YrH2rj7ArfSPsSIOlVXG+sEfsFvaHI8JOcEPYBe4IO4C4 1hLCqpxfWJEdjjK/y01qFtv8C0n5kNIy3mdXfEmpH38gZ8OX/yEmd7jj3eXcvLuyu427rbudu727 g7ujO8Xdyd3Zneru4u7q7uZOc3d393BvcG/8HHfUJ+yOcZ5SSduTdiTtTNqVtDtpT9LepH1J+5MO JB1MOpR0OOmI97D3RN1EAFVpQAbkmRlPQP27jCf/j2Y8UcAq7Kqfl/FUEsSBUn8w46kuqAfqg4ag MWgCmkpJPi1AS9AKtAZtQFspB6gD6Cjl8qSCLqAr6AbSQHfQA/QEvUBv0Af0Bf1Af/ANGAAGgkFg MBgChoLhYAQYCUaB0WAMGAvGgfFgApgIJoHJYAqYCqaB6WCGmPwB5oC5YB6YDxaAhWARWAy+BUvA UrAMLAffgRXge/ADWAlWgdVgDVgL1oH1YAPYCDaBH8FPYDPYAraCbWA72AF2gl1gN9gD9oJ9YD84 AA6CQ+AwOAKOgmPgODgBToJT4DQ4A86Cc+A8uAAugkvgMrgC0sFVcA1cBzfATXAL3AZ3wF1wT2Ay D8BD8Ag8Bk/AU/AMPAc/gxfgJfglJ4YDMZRBOVRAAiqhCqqhBmqhDuqhARqhH/SHATAQBsFgGAJD oQmGQTMMhyS0QApaYS6YG+aBNhgB7TAvzAfzw0hYABaEhSANGVgYstABi8Ao6IRFYTQsBmNgcVgC xkIOuqAbemBJGAdLwdKwDCwL42E5mADLwwqwIqwEEyEPK8MkWAVWhdVgdVgD1oRfwVrQC5NhbVgH fg3rwnqwPmwAG8JGsDFsApvCZrA5bAFbwlawNWwD28J2sD3sADvCFNgJdoapsAvsCrvBNNgd9oA9 YS/YG/aBfWE/2B9+AwfAgXAQHAyHwKFwGBwOR8CRcBQcDcfAsXAcHA8nwIlwEpwMp8CpcBqcDmfA mXAWnA3nwLlwHpwPF8CFcBFcDL+FS+BSuAwuh9/BFfB7+ANcCVfB1XANXAvXwfVwA9wIN8Ef4U9w M9wCt8JtcDvcAXfCXXA33AP3wn1wPzwAD8JD8DA8Ao/CY/A4PAFPwlPwNDwDz8Jz8Dy8AC/CS/Ay vALT4VV4DV6HN+BNeAvehnfgXXgP3ocP4EP4CD6GT+BT+Aw+hz/DF/Al/AW+gq/hG/gW/gp/g+8Q QBAhhJEMyZECEUiJVEiNNEiLdEiPDMiI/JA/CkCBKAgFoxAUikwoDJlROCKRBVHIinKh3CgPsqEI ZEd5UT6UH0WiAqggKoRoxKDCiEUOVARFIScqiqJRMRSDiqMSKBZxyIXcyINKojhUCpVGZVBZFI/K oQRUHlVAFVEllIh4VBkloSqoKqqGqqMaqCb6CtVCXpSMaqM66GtUF9VD9VED1BA1Qo1RE9QUNUPN UQvUErVCrVEb1Ba1Q+1RB9QRpaBOqDNKRV1QV9Ttr8PbZaF/M/dPYe65jbn9bMNsw8W0Ntso22jb GNtY2zjbeNsE20TbJNtk2xTbVNu0zJwtMXXLNveDNKecsqRW2Vbb1tjW2tbZ1ts22DbaNtl+tP1k 22zbYttq22bbbtth22nbZdtt22Pba9tn2287YDtoO2Q7bDtiO2o7ZjtuO2E7aTtlO207YztrO2c7 b7tgu2i7ZLtsu2JLt121XbNdt92w3fyiU5PLRJSNiP8Xyck1/83s5LafnJ7c/y+Wn/wnpyd/spL2 qUleUV90P5yLyc3kYWxMBGNn8jL5mPxMJFOAKcgUYmiGYQozLONgijBRjJMpykQzxZiYvzvovzvo DzroBpkpoLFNpW7693mfvnzE2M6xqbFdYrt+kP/ZO7ZPbN/YfrH9/1kSaOzY2HFS3qKYtjg5dkrs 1NhpYpLj3337X7tvFxMxufZcB64jl8J14jpzqVwXrivXjUvjunM9uJ5cL64314fry/Xj+nPfcAO4 gdwgbjA3hBvKDeOGcyO4kdwobjQ3hhvLjePGcxO4idwkbjI3hZvKTeOmczO4mdwsbjY3h5vLzePm cwu4hdwibjH3LbeEW8ot45Zz33EruO+5H7iV3CpuNbeGW8ut49ZzG7iN3CbuR+4nbjO3hdvKbeO2 czu4ndwubje3h9vL7eP2cwe4g9wh7jB3hDvKHeOOcye4k9wp7jR3hjvLnePOcxe4i9wl7jJ3hUvn rnLXuOvcDe4md4u7zd3h7nL3uPvcA+4h94h7zD3hnnLPuOfcz9wL7iX3C/eKe8294d5yv3K/ce9c wAVdyIVdMpfcpXARLqVL5VKL2agunUvvMriMLj+XvyvAFegKcgW7QlyhLpMrzGV2hbtIl8VFuaxi 4qkrj8vminDZXXld+Vz5/+ynA/y11Bq+Ll+Pr8834BvyjfjGfBO+Kd+Mb8634FvyrfjWfBu+Ld+O b8934DvyKXwnvjOfynfhu/Ld+DS+O9+D78n34nvzffi+fD++P/8NP4AfyA/iB/ND+KH8MH44P4If yY/iR/Nj+LH8OH78//bJCP9UiQr0BnmDvWZvuJf0WryU1+rN5c3tzeO1eSO8dm9ebz5vfm+kt4C3 oLeQl/Yy3sKiduU95T3tPeM96z3nPe+94L3oveS97L3iTfde9V7zXvfe8N703vLe9t7x3vXe8973 PvA+9D5Kfl1bUZsQc6NF5QtYctS2clBLsB4bsBH7YX8cgANxEA4W80uErxqLa+CvsBfXxl/jxXgJ Xoa/w9/j9Xgb3iX0DkeFfuG00CdcESrsiXjyFcC6lYXfW31EVctRqUGTc/p0a3yO/U3O3UWlnLho jtySzJFJsvYx9rH2cfbx9gn2ifZJ9sn2KfapOU1ehe8tOOfvLecrE16/EchyvBe5s1TFDE1RVBTf 64mimhgDSkuqoagXJkpaYVVQA8wGd3PUu5RZGleGwiXqW+/VLVHbomCkpGGJ6lWUpFzFwFjUD/XP 6f7jUGzCYdiMSWzBFM6Fc2MbjsB2nBfnw5G4AC6EHTgKO3EMLo5jsQu7cUlcGtfDA/BgPBbPwnPw PLwALxJQ862Am6UCcpZL2FmJV+M1AoJ+wjvwTrwL78Z78AF8EB/Ch/FRfAwfxyfwKXwan8Fn8Tl8 Hl/AF/FlfBVfx7fwbXwH38UPZKGyJfIS8nXyE4pZijnEG2U1FVAVUi3QJOj99If0bw0mg3iuozhI AGPRcDQyG4br4Qa4EW6Cm+EWuBVuh9vjjrgb7oF7437Clc/LhnHxOtcK17kR/4g3C3jfIVzrQXxE uL5TwpU9xI/w4+wVEFEwswbgYqD/CP7/R0npYDLYBJ5/RBf9I0roH1A/0Xg0Ga1Ba9F6lP5P8RXu Q5hVwliebCjLL+GsoIA0GjO4MGYFxBWRMFcUR+NiEvJKCNjjJPR5BPzF4VICBsvgsjgel8MJuDyu gCthHifhqrj6R1HQVkJBJ9wZp+IuuGs2PAzGQ/BQPAwPxyPxaAHV4/B4PAFPxJPwFDwVT8PT8YwP kJ6JnR9yQI+I9T14L96H90t4z0SSiO9LAsKvSBi/mYXye/hBBsrwE9kS2Q+yjbJ9stuye3KXvIo8 RcK+TJFfQSs8ik6KOYpjiguKy0Qxwk2UJdoR3YlxxFRiEbGXeC5UR6SymNKtLKVMUFZT9lZOUU5X blBuVZ5V3lC+FuomVKicoqoEVU1VbVU/1VDVJNVh1Tt1IXWyuoF6lfqEBmpyaeI1CZohmqGaBZpl mmPafNoi2pLaGtrO2unag9pT2lu6OF0f3VLdRd0jvVp/QH9b/1T/yuAnVGFHwzLDccM1cjI5hZxK TiOnkzPImeQscjY5h5pBzaRmUbOpOdRcah41n1pALbTmsdqsza0trC2traytrW2sba3t3JvcO9w7 JQf331OcL3qKIwv9s9VOsU8VeqB/7IA+7H/E7iej9/mjnc9H+p7/Lf99zwWFvfC0rJmsrayL5FJc 6/MpnpZdlKXLbsqeyw3ySHlBeQN5c3kXeXd5X/li0bsoPyM/l+Vf7CnlP0xTzFNsUuxVXFHc8rkZ IWEgIolYydPYhGgh+hqJI0qoVCp1yryZ/kZlD+Vo5U3lC8nnGK2KUzX3eR03q/aqDqkuqp6qLepc kutxmOR7lHyIkvtxm/qI+pr6gcakoTRMlg8yVdPjvRdS80DzVGv0OSId2hLaOJ8vMkU7Tbtcu1q7 NtMfqX3ic0hG6Jy64rrSurK6GroWugFZbsmVol9Sd0JyTFr1EfqCelryTabpZ+ln6xfpz4v+SdGx KHkoLYbqko9yl+GsId04wPjQz9+vql8zvwv+rH9//6X+PwUkBcwI2BL0Lrh8cKXgtiFFQrwhHUNT QseELgpda6pqamcaGqY0Pw2vEr6D/IV8TZmpCOfBokWjqegK4gmR//ms8LOmhF/IpG04GoFGolFo NBqHJuCKAjtIFPhBZYEhVBE4QjWJJdQUeEItgSkkC1yhjsAW6gp8ob7AGBoKnKGxwBqaCryhucAc WgrcoTVuI/AHkUd2EDhEygcsIg13F5hET9xLYBN9cF+BUfTH3wisYiAelI1ZjBC4xSiBXYz5gF9M zsYwZgocY7bAMuYKPGO+wDQW/gOrXuHjHKskbr0WrxOYxwaBe2wS2MdPAv/YgrcKHGR7Nsb9noeI vPtIFvM++Q/cO4ObpAvs5JrAT258wFDuv+co+Kk4+6NCxemZNc3a3drD2pOZKCrJ7jLuqu5q7uru Gu6a7q/ctdxed7K7truO+2t33X+pS4jJmw+/8Pn//7qOP3fenzFRz5ymy76Qyv6cGXrGBD1Nmp/3 Rn1QX7ErRgPRIDQYDZFm6R+sG9JcfTKagqZKk/Xsc/Xfz9TFDmid0ANtQBvRJvQj+gltRlvQVrTN N1/fg/aifWg/OoAOokPoMDqCjqJj6Ba6je6gu+geuo8eoIfoEXqMnqJn6Dn6Gb1AL9Er9Bq9QW/R r+g39A4DDDHCGMuwAquxBmv/1H7r7zX1P7ymyrSyUHIfuZ88TB7JWF+peKoclUCVp3pQPanX1Bur 3Gq3ejNXXdFXYHfao+3F7DH2svZ4ezl7gr05zfumi+LUsATDMS7GzXzFeJlkprawTk9hpjLTmOnM DGYmM4tZwlz1rdxl3YmSfvwZK7h7tHuKe5l7ufs79wr39+4f3Cvdq9yr3Wvca93rxKQ7off6DJUy J9UtJzVP+By58DmvsN72wj5G+Fc3qYP8V92jVejKukr7zb/aaxSwkrBWvl9BMtYIcU3YmON1i66J f+WYwBGVImpGeCNqR7T95El5Dt+7+JN3Vxa7AfEEsqyprKOsqyxNNl42U7ZEtlK2WrZGtlt2W/ZA 9kL2VvabHMsD5GFyqzy3PEJul+eVF5AXkpeQx8o98lLyavIW8o7yVHmavIe8v3yQfJx8vHyOfJHQ MSyVr5Cvk6+Xb5DvlO+VH5Cfkt+R35U/lv8qf6eACrXCoDAqghUhCouikCJG4VJ4FKUUVRQ1FF7F IMUIxUjFaMUixXLFSsV6xUbFVsU+xTnFVcVtQkEoiTDCTFBSWlx+oiBBEw6iCBFFOInihJsoR1Qi eKIm8RWRTNQm6hJNiWZEc6I1sYLYSuwkHhGPiddKuVKhVClLKeOV5ZWVlS2VnZVdlH2V/ZUDlcOV I5XjlCuVq5UblTuVe5XnlfeVj5Uvla+V71RAhVQGVYSqgCpGymXjVZVVNVW1VCmqVFVXVZqqu6q3 qq9qrGqiarlqhWqtap1qh+qY6oTqtOqM6oLqkuqy6ooqXXVNdV11U/VY9Vr1q5pQK9XhQp9jVxdW R6mj1THqWDWnrqBuoG6pbqXupx6gHqgeox6vnqqeoZ6vXqpepl6hXq/eoz6mPqE+o76gvqK+qr6l vq9+ov5Z/Ur9TgM1SIM1Mo1co9b4a4I0dk1hjUPj1MRqymkSNdU0NTRfadprOmhSNL01/TUDNAM1 4zSTNUt8mWnrNFs1OzW7NIc05zTpmnuaV9ogbbi2sLa4NlbLaStrq2q92hbaVtq22nbaDtqp2jna udqF2sXaXdr92sPaI1Ku2W86lU6tC9GF66y6oroyunhdeV19XUtdO10HXW9dH9083VbdDt1O3S7d bt1V3TPdK90bvU5v0Afq8+jz6gvoo/TF9PH6ZH0dfS/9cP0k/WL9Uv1y/Sn9Hf0j/a8GZMAGwmA1 5DdEGgoYChqchhhDaUM1Qw1DbUNdQ0NDT0MvQ3/DIMMIwxTDQsMiw7eG7wwrDesMGwwbDZsM2wy7 DfsNhw3HDScNpw1npESwG4ZbhmcGMYcCaQfpCwl/nszc2T/QCf+93erz9qpPUxb/vZ3p8/alj+qQ +KnlpOWx5YnlqeWZ5bnlZ8sLy0vLL5ZXlteWN5a3ll8tv1neUYCCFKIwJaPkVKi1vLVCVjfwmHn6 eZ0AzC1r9g8axtkMFSObhtE94+yl/JwCZNMv3qsXt7JOYkYSCUR1okaGbuFTLcooaymb+HSLwcrR 2VSLLj7VYrpPt3j6Ec3iiPr4B5pFGU2Spq6mqaa5prWmjU+52JSpXWTTLUTVopI2UVsvS7nI1C2u ZlMu3usWQ3UTJN1iQbZznhG+k56iYpGlV/jUiliDJ0ux2CtpFsnGzsYBxsN+EX6MH+dX1a+eX32/ iX6T/Db7PfQP9M/vz/oP8x/u/yggKWBwwPiALYEwMDKwchAK4oOqB3UKSg8OCy4dfDOECskfQoe0 CukYMjFkdsi+kAMhp0OLhX4fuiZ0c+jN0F9MA01zTfNMp0wvwwqEDQs7HPbIrDSHm++HVwnvHz42 fD6pIAnSYa1orRQ1IWp91HVncWc1Z8ui9qJ1ivYqurno2+hc0fboztHbEo/ygM/PR/IF+IJ8IV4g NHxhnuUdfBE+infyRflovhgfwxfnS/CxPMe7eDfv4UvycXwpvjRfhi8rPmGdT+DF5xKUBPhPUpP/ E1pyA9AQNJL0ZFFNzq4kp3xER85QkQeAYR8oxLN96rD4DOHr4OYX77P/sl32X6rH/stQB0QtoBlK Ffv8D3zX2ecN1z/Rfyl0UJ/huvvbcff/mePO5yH7nUMsO/f8W4n+ryvRoprxWdwTFCoaH12l2OGY pSXOxlpjI2LzxjIlx5V8E1c1rk5co7gucWNL+ZeKLu0u3axMnTKbyu6MN8ePKFctwZywKGFpwvny PcuPr6CqEFQhpsKDirqKQyrerqStlK9STKVSiTBRzGr7+f8II8mYcL/nI6kSExF5SO9sLEScVE8V uMe3YClYAzaCLb458+5sM+aMCfNxabp8JmuyfB3cRmlZZ53ea7Ximafseu2HGu2/c/JJVGw3Skrt drQjR332IkpHN//WWP8vrRZ/2om1Tv/0zFp/8VRaltr72mr/z5+XsTfK8QzJUGaYwGuafiEc4wvi FOKzD1GCz43RVdZHNk42T7Y4KztKVDOuSK6MF3KlXCs3yEPl+eWR8gKSttFK3lbeXd5L3lc+xqe8 irrrTkntOCU/J/9FARRQoVEYFX4KiyKPwq5wKeIVFRW1Ff0k9WOvYn+m+qF4SxgIkrATkUQhoggR S7iIOCKBKE8kEVV8isgoYiaxiFhObCb2EweJw8Qp4ixxiUiXnp78jPg1Sy+pqqyepZmkSarJJOVU 5SzR8aF8qcIquYqQNJQCqmiVRxWnqqhqoGqkaq7qouqapagsUi1WbVZtl3SVI6pbGU+uUOslhYVV F1F71OXUzdT9JK1lkqS2LFYvUS99r7aon6ifaUA2xaWm5iuf6tLCp7v01YyWtJeNmk2ag5pDmpM+ Deae6CDRvNJqtFptaA56TFVtPW1zbQttW22Ktq92kqTNfKddrV2j3ehTaI5I3hKo0+gMOn8dpbNm U2rq6prpWuhSdV10adIzHDJVm3mZuo1uu26n7rTuvu43PZCe0qDUqyQtJ1LScirpq0h6zkifB2Wx flOWD+WNgZC0Ha1P3eEN1Q2NDeMNcw3zDeslpWePpPRcMlwxpBteGVljTWNnY29jP2N/4wDjOONh 4ynjA5/6U0bSf5r4dfab6LfAb63fJb87kgrE+tfy/9q/uX9L/z7+C/x/8n/k/zYgLqBmQGNJE5oc MC1gdsCGgC0BRwJOBLwMjAiMDGQCYwO5wMqBVQJrBXYL7Bs4PnBF4KYgFISDiknKUceglKDUoJ5B R4IuShoSGRwRnD+4eHDp4PjghODywZOC5wRfDk4Pvhn8OMQvxCzpS0xIkZBWIV0lhWlZyI8ZKlPI uZAHoYVCnaFFQyuEVgzlQ5NCq4S2D00LHRA6wqc/XQ69GfrCRJkKmAqZok1xpjKmhqYWph6moaYR pnmmJaZ1pv2mo6ZTpgumy6Y7pruml2HKsNxhBcJKhLULSw3rFtYjbFjYxLC1YRvDDoc9CHtkxmaZ WWkONIebc5tt5ghzXnN+c6SZNhc2s+Yi5ihzUfNI8xzzNvMh8xXzdfN989Nwfbgh3BgeHp47vHp4 //Ah4cPDx4ZPDZ8bPi98fviC8P3hJ8PvkwqSJB3kSSqcoigrlZuyUXYqL5WPyk8VpApRMZSbKvPf V8VgX2FNyliNLmatP+LqI646GevNUmGFEVcWcV2pKKwp+6VVo7ywYmSuFeI6kblKiGtE1Yy1QFgF CKH+PVm1v0iodV+dC1Uu1nc/oaIzalis040ZFeqryebavlJ1+UvV9L6WtudQN5FCxYwUKmWTUB28 UA0ZtbBHqIBXAvr7ZaGek7C+wIfzTIyLCH8bEOhDuIjuDQKyRVzH/g7LIo5FFF/Mwm+8gNx0H2YZ CaUZ+MwJnS8EPMYJOMxEoA9/AvoyUCcgTsJazigbKSAsE10ZyBJxJaJqgYQnkjxBnvQlBF8gL5Pp 5HUx85e8S94j75MPxGRfX6rvC/It+ZsFWKBFblGKibwWrZi9awn0Je1aLJQllyWPxW7JZ4mU0nML WxyWaEuMJVbMxvUl4mZk4Ir5t4mWqhkZt5ZkSx3L15a6lvqWRpYmYoJtRnqtmFQr5tRaUiydpVRa MY+2n6W/ZYBlqGUkZf5IDdAZVSCqxP/tOgCz/i/fvU/S2D//HqZ84nQ9RegGP2m67put/2cn620/ mSd/dKouXGIuqR/t/V7Nyeozj6CT6DS6IHSMV3LsF//u4/7DfZxmmeWk5aLlkuWy5cq/N6mU1KLA D+aVVyQXzGPmCfPUXemzHDCH3UfcR93H3MfdJ9wn3afcp91n3Gfd59zn3RfcF92X3JcBshn95Xl6 2lx5LlousI0Zj1Hv/yx8nt8yZzx5ouZRZ7ky/aIaVoXOhKAbUY2cFQPfOCuFWKlw8lTFF87ECuWK 9Qi8EK7NNZk8Y7xSqoazMkXyuZxVxGR4Z9XETbLnsmfWrX7AWSNXj/DaURpnzZhizlq1bsbsiNI6 azu/jmkcwJapmSsm8Ergq4zs+CidcYR7obN+lD4kn7OhsaKxUWKbxF5Ve0UZnI2dTch0Z1P/MhRV am25Oc4WxkpV9vgt8j8QZZSS5v2crUJem2aUPFOhXvHn1YcG/2pqaK4Qz/IyZyf/xoEz4mzkjahA 8mZUEHmr1DhdPmc343TjbuPV0tViXFEdY2oF3ogKDkpxpjm7k3dNb8VkemdP83pnbzGdPjzI2Tff C7/dzgH+M5yDo0zk/dhE5xDnUGPdoJ/JB5Wia/QuZnEOC75nTHeOcI4sHegc5RztHENZ+cLOsSEr YjZV8KuyyznOOT5gkXNCldpGf/JhlYcVzP5lnVOcUwO65TIZRwWDir/UeFP+ZsUaZFQccs4lH0eF R3XL9/84Ow/3ps29fzMsyfLeO3LMUMJyQI8s2U4glke85UTZmE2BllH2KJuyIVBWmW0pe88UKHsG 2rKh7Fn2LKPsEX5x4PT0XNd5r9/1vn+Fdfvzfe77ZTpGJtkW2hYlPbEtsS1NempbFp5pW570LKtJ jAgu0tVJesH2ZlsrU0gs6ZW2TPsu6bXuctIbfYnhkElqW5tdxH5PmmUlsvZJ72wb5b0Sznx2jrlm Urlql2OHRkMma6/Ztti22rbFKJNO3pZ7a9uBVTGfs+10Dve/ca8lh9h22Xbb9mbnsjO8Z8ihtn3O 2uTXGR7lb7nNbGWKy7b9tgNYNeUjckTMYTuIVc9cTI50jko4tSN/2Q7bjtiOpr6qUV2fl7KIHMd+ MJTZjttOYFANqe2k7ZTtdG5bhziWrmhmO2c7jyGa6+aztosZLnI8xrddLj4uy7FdwVDVMdmQj79v MadDQ99R6lXtbFcN2YZ+qodkSXYxOcF2I6+Bz0fW1O5S9DAfspQn1eI+l/Vi2/iyCgrNJ0MLFAZM qptr+9P2iExJOP7dZ2xPMIXtmdFue2574TXaXsoR+VbbK9tr8xVuOKa0vTWEo9PJKbb3tnJyqkal vakrSv1g+0BVydv70QgeqS+7yP5CVY3ul02neGTdRB/A8i1Zj4ISv76Wtdw9TE/xi2SaCIVSYsxI Scj66pOU1DKakiXaAYZMtjzRD6AUslWUUj5b/pOiKqWKZah9ZANtXUPUaJN3onSGapiZMllWFL6m knSdFMbwgOwYZWZ3WUaR3we9lIWqrVljrCf/CrPIR2jnU3WM9Y1i5QnVkvSM0HRyrnocVtNSxLxU Z+WZqAbswtR3ljBltUyiGlEEVsvymrJRNGXPW6RNp5xUBnsHq62opfhSyVKNE90CdQBLTfyKa4+z dxP1AsMcijG2jCVRXq04/TesXm4nwR7B7iBumE420geSkklCvpEdSwLMmjfXUock1dfCbfWHqSAV MuWRC0mbbhpJUWEqQkUVQHYmtN9cB2soX0HlCOsJ66o2ph/GGnmaK2or+qoHYIR9IZVL5VH5GEja TxX5RmCkcoV6WqKSYPRiNBXH7IaCj60Eqhlpr/iOaIE1jv4Qccn7KZYpz1GtspOp1pkrNJOoNkYJ 1Zb6jGrnz6HaK/+iOrCvjKOoL0hH5rJEWSH6FdWR6kJ9qYmRS7Pu6oaTy4uNykMYQ3Xzvad65lfB 3FQvzEP1Zn9KVBc8u6k+VF+2C9e6eB7Vz2uhvkr43mMusjHVn1wVnWxEsazi9+EizE8NwAK+FtQg LKiDDRexUJJU1qwOgoWZbViEW4Kx1FDLDu516EiSkhph11Ajc3t8rDaozqvtou6ibprm1KjIcWo0 NUZ3kxpHjZfpqRIsh/1KozAEFQ1CByqbDgXUxGQDVkhN+vjVpn0bfkW6qCkmRH6JmkpNC3QMarFm Sj41XTFV2ZFcFx2INadmxSSVX3atoIvUHOr7mBtrLWbErsg1zRxTLx3mqM2OoeZTC6iF5vpkKbVY m53oQVBL9atJL7mB3JQ7ivQlTPbUMqx96CK13G2mVmAdqJXUqvTt1Gr7ZmdTrKNxI9Yp9ZnsG2pd rApVmihGkFnYl5Y+1E/iI+LDebaYh9pIbvU/Yt+RAbs42J7clvqU2mwZS21RdvmHGT9Ebad2sKXG GaFnWDdqp7YvtUt5ytyA2k0lnPlhrHvMlxskI9wwba3ke9Q+qkwSlASo/VgP6gBZRv2C9aR+ow5i vaIuQyF1lDpGnaROYb3JqG+RWuWeId9HXaQukSzWh/qDupboVFA39AJ2lrpl6IHjN+U16jZ1J/db MqY9lb6aukvdo+5TD7B+Gin1J/XIfD4WIH9VLNdy1GO915BFPbFMwAZQz7GB1AvqZfIwqUlqJHOo 957TVHnwbNQmQ011DQHlVNVqbAj7J13VQCZRnu/p6jSEDbNsCF6TITRMHvR18M2WdpF21hRzv6on Zq2kBRq1CsG+tkyjJZpk2X7jIfJIUh2yiJYrPbSispZRjI2klWRT9RV7P9WaRDeDVifKGVo+2Uz6 l/SpvYW0mbQOr4MlDs8WjZWZZMbQYcmyPEp9W+aWMZ4ukAvqyW/FduXmhc56+pEnRI1hDvIgAU9f Tw9a55nK/zX5ILfLM5PfNTeLPKmzIC4oTbwKXqdOU7toI9oLuq2ogf5OJ0nXQHdpLMMp1KTNRDvT yYruvGNwF+ge98q7VzFWMV4xqeL7voY7aK/LDuC9RGvFaHtjz36sJLeh3SMHcsL9OIxnqHIldO2w vQjDvnE/8Dw2eOUt5S2wSUgX8hw7nB2B3mJHIjHhCAFu/ElQt4Avnyqfwo7yCrHJZhI97XWSF6C+ Qpw3wKvRKdEzzGbBWbS2fLt8G1cuKaFT4DTFXLaEHS8/LT+V+0O4h+gSeZFOJS+F+9F1vPneTvJX 8pfy9/J36Fl2IjuF/xh9I1simCIkwoPtE82UaBk2TahgDoR7QR3gpd4fFAWKfG038op3Cb8OcxTa nOgw0FbBNNkV/kbP50IbO5VOy9sZnkY3DC2V3ZTdkt1J7yBG4Qz5IfI6O104SvJesVKxIrLF1Jv5 xvNlhCVv2KHwfHYm1N97DymLZOd57Yd5PRWvFC/Jmxax+24eJ3oaXsEfoTQqDd5nCOa9HV4N1chr 6X1C3pbuUYaUwdB7wbdmhy+JvCsW0KT4Nbza/tynw2aoGtKU1IbNpGnyfqwuO9cngCcK85Q/KUt9 KPsj+SBvJTaLdmQNVpYp9yFrheczAoIMbLakZrC3cDS7PHyXXRa+p/xDeVWyl12RdxA5JFyRt49d SWdYakknqYQqQUbYPST8nG6Cfacs4e6Sj32D3dpESYVm+KNVHVTtA7nsBvIp7WY3RnxuGe0j/3Js joh8Z6Et7CZBY9Uq1UqpQ3qWfCas75tJPmc3I4Wqvao9qsOqQ/xOjkLfeVFn3m4Ih977bmfk8KdB KXQWb43vL/Klu4ZkdH6r0N1IDdlkUdcsnWyKrxy9LGAFc9id2Fx2j2R1FsHug6s6OggzyLcCv/Qr x2RhAR1hf8ufpd6g/imrT1Z77Ed0bfLLrHbSo/k7sHmCB7y5NCsj6Zj6sfqROwQ3NTQztIjZ4VL6 raENnR3UZU00tJPcFc1HY9KJSNxxi3wvXaypobEkWhqaB/nP8+8l0XSOxqGx26okbcwvxxZgC9Ep scbCQ9I+oh6aVpqWuhbscfaEk+eEI93pfLpAOI09Zasm9jGvLcnYYm6fZqlmicCkKdWs12zTbPXL IiPZs85afnVkil9BFxWE+X5sCdxRU9dfF5pBF0tvsucEmxPtDi2mTeJtlNihDPSP3J9tiGCUuJ2k XJunzaVbFkyO1S8Yoe2k7Ygt5x4oCs2ZEov0cmFr/1Buq7+ns1Nkj3aKdjK2QtDQ2dvGh0f5f7Kh /A10eyTVvy9RrREslJxNlGsK9iMt0Wz/LvoLaIxoP1JH+0Fb7pwuov1r/Qfz30RaykvFQdk490xE UPAH3R1b67/JXrdJbDKbAi3WfO5/zN5kb6OvIuU2Jd0rZrOpotV0X+uGCY/Z1FFIWJ3/mr1H93Hr AjXDfvcybH0sK9CI7o+V6vbq9hSmFmwL0O7d9ECkPvaTaGiikBNob2YCTn1VfRXJSmwj+5h9atMV humh9LBA2KaXVsM20V8LDsdI5I1+ZLRR4Q/Q/MDGWIgeQY+0GbJm6QvMbsSK/UyPpsfoZ+lnBkqh cYULCzeJu+m36rfYkqIRweu8m5FzNjP7mh5nS9Zf11+jxzuqJnonhbcDF93Xsa2wFH3sOZErLnwH y4rwwHtsGz3B0NCQJvUGngb59ER0H/1Nrl1eLK0urS9agDZBr7Pv+RO9E4WfS5qrX6rfa3iGzwxt NZJEt4f/ja12rBo9GdtBTxHsx3YKVtHTgmmx6p4R0RlFn0XLbSmGLYbNttT0EL8KQhiOGA5ju6JL DCcNJ0TOor7BJsGM6Gr3B3omPYueje0VmQS0cFZMjO37d4lFUFtA/rvGgt5ApfYRwqbQgvQBRdcd S6MXBWtjMsvD9CnBZfTamEK43lhiHB9cZ6OMk42TJBrTUHodtt9uSP8+pqTXR5/Jh4mXwtroa++x gkhMEzwu3YgdCJ6xvKghTFSE0kv9DYsLRRdMqInP+yXRE6I3wCnI57YMeiO9SVo3ZgjJ6K0hVSiV 3mb2CT6ESPt53jt6e6iW2K/YRO8qXmj8zpZZOC9RHoqZYti/60P0blOpaX0N2LTHtBuqZzpiOmzz ms6YTpuumC6nv4vVTu9szqLLRBmipoLj/LLQevqX0Abplgytez68S5qlaZSCpPBT0BRhiihFnCJJ kabIzIhZbFaZr6UJ00RpYt4w3mbekcT+9emWN7F0lf1HR+W7T/e7ievdj9tVEMmp7KkcRE7z+f9x vfsChSovd/+9My37+3I3tXJP+tealLjavf4/bkeD/sdr3cSt7szKNejfW9A/L3U/3ugmdp494rJP FRbu03Xu7crlJkOaL/22cqmpvMiV165cYWYoGn28uFX+rkpTZatj6mPqPzReTVAzX3NL21k749OV re1fG4ferPfpJ366sJ1hOFp5YTs/sUIkLmyrzU1amLQ8aR1vE+9MovWC5P+z8yKfqaiTaL0kLnVN XBKStjBZm6xO1lkLrM2Sf0xemrzEPNA8AH+Fv8bf4G/xd/h7vBz/kFIlpar5gvmS+bL5qvmG+ab5 lvl2narmP8yHzUfMR83HzGeSyszHzSfMv5tPJcPJVVPLU1+b88ycOV/0c4o8RSF8mqJMUaWoU6ql VE/hpUAVnwgScw9zL3NP+nD6IPoI7zm3wPKTnS/rTZ+wzysmJU76ZHig+rR3hqVK8hvFe3iNZp7y teBW3juoNn2aPiNoJgjLpBGPO1d8gPdWwEc3if+SQoJW9sXuqc4h0tnoAN5hh5k+hz5Hh3J5yWXS AlF2cLmxvfF3QcdYM/4+5IVpV/FOjyP9lvFUaCIfJcYQY4lxxHiihJhATCS+ISYRk4kpxFRiGvEt MZ2YQcwkZhGziTnEd8T3xA/EXGIeMZ9YQCwkFhGLiSXEUmIZsZJYRewgdhG7iT3EXmIfUUbsJw4Q vxC/Er8RB4lDxGHiCHGUOEYcJ04QJ4nfiVPEaeIMcZY4R5wnLhAXiUvEZeIKcZX4g7hGXCduEDeJ W8Rt4g5xl7hH3CceEA+JP4lHxGPiCfGU+It4RjwnXhAviVfEa+IN8ZZ4R7wnyokPoAqoCqqB6oAH IAADBPCBAAiBCIiBBEiBDMiBAqiAGmiBHhiAEZhAEsCAGSQDC6gBaoJaoDbAQQpIBXVAXVAfNABW kAYagkaAAACQwAYoQAM7cAAnSAcZoDFoAjKBCzDADTzAC3wgC/hBAARBCIRBBEQBC2IgG+QADuSC PJAPCkAhKALFoCmIg2agOWgBWoJWoDVoA9qCz0A70B50AJ+DL0BH0Al0Bl3Al6Ar6Aa6gx6gJ+gF eoM+oC/oB74C/cEAMBAMAoPBEDAUDANfg+FgBBgJRoHRYAwYC8aB8aAETAATwTdgEpgMpoCpYBr4 FkwHM8BMMAvMBnPAd+B78AOYC34E88B8sAAsBIvAYrAELAXLwHKwAqwEq8BqsAasBevAelAKfgIb wEawCfwMNoMtYCvYBraDHWAn2AV2gz1gL9gHysB+cABvi3fEO+Gd8S74l3hXvBveHe+B98R74V/h /fEB+EB8ED4YH4IPxYfhX+PD8RH4SHwUPhofg4/Fx+Hj8RJ8Aj4R/wafhE/GKTwdz8Ab403wTNyF M7gb9+Be3IeH8DAewaM4i8fwbDwH5/BcPA/PxwvwQrwIL8ab4nG8Gd4cb4G3xFvhrfE2qU9SFidL kyXm09aW1lbWPGuuuam5gzVsjVjbWFtbN1k3W7dat1m3W3dYd1r3WPday6z7rQesv1p/sx60HrIe sR61HrOesp62nrGetZ63XrBetF6yXrZetV6z3rDest623rHetd6z3rc+tD6yPrY+sT61/mV9Zn1u fWF9aX1tfWt9Zy23fkirmlY9jZcGpyFp/DQ0TWBta233D3Nrwtr60dn6L2PrR1/rvzyt/7a0llgn Wif9h5111n8xsy6qtLImnKyrKn2sf9tYP7qfk0emGdLkPIvsgjmcdiBt/39pAl1sdOm/doGaEJn/ aANl8cohZeW7uTxoADSi8kXcB9iTeNeGmBEn0oxfilZD+6ID0dXolco3XhcFt4XVhJCwh/BnkVp0 sPIF1T7xNYm08p3UEMlMyWlpsnRb5aum24mdtnKLxeGDn9bX1X8vr59WV7T6P/bWvQKJwCWsUrmr /r2qioWf9tR/rKn/2FITS+pbaTvpZunVxHIqb/9xLVUU/2MpdSvbJTZSVcbf22h19eC/F9GZ/9xC dWFd7O8F9F/758G/l8/E7plYPf/73nmjcun8x8rJG8Qbz5vDW85bx9vOO8W7wrvOewVVgYSQFjJC DigTag61htpC3aCR0EboFlwNRmEFrIPrwSTcGA7DLPwZ3A3uDveB+8L94ZFwCTwBngovg1fC++EL 8FX4PvwQfgQ/RSgkjLRC2iDtkD7IcGQyMgWZjSxAtiP7kV+QU8gN5DZyj8/jI3wRX8FX85vwXfwI P85vzR/HX8h/xy9HUVSCKlE1WhPF0fqoHWVQP9ocbYF2Q/ugg9BJ6HR0NroK3YBuR0+ip9Dz6H30 GfpSUF2gEBgEhCBP0FLQTtBB0EXQVdBPMEYwTjBdsFrws+Ct4J0QFkqFMmGK0C30CL3CkLC9sJuw r7C/cIxwgnC6cI7we+EPwh+FK4Wlwn3CX4W/CS8KbwhvC+8JXwnLRbAIFWlEuChNFBPFRS1E/USD RENEw0WjRRNEm0TbRGdEl0VXRM/EcrFVDMScOFecJ24l7ioeI/5G/K14pniWeI54vXij+JD4tPip +IVELlFIkiU1JLikjiRT4pGEJBFJtiRfUiBpJWkj6SjpLJksmSJZIFkoWSE5KjkmuSK5JrkuuSl5 JnkurSrlSVGpWCqRWqQ1pR4pK82VtpEOly6U7pbulf4mvSLrLPtWtlP2i+yy7E/ZI7lfvl9+Tf5Y 0VkxWDFS2Uk5QTlHuUf5SoWpWqqGq6aq3qiXqG+p72ggDaUZrynRnNVW0eZr92nv6xrpeuqW6rbr LulJvV3v13+l76+frJ+mv6y/YahvcBjchtGGSYZ5hleG98aqxt7GecZ1JqWptgk32U05pham/qa1 SWgSnrw8eV3y+eQHlnRLlmV5hok/TFNNsTv5V/FNUXPjAri17EWsQG7IMMsbhHNzm0vfeClmg1ea u0D6O2+n0RHuqkhljidfE7osk8PTM5LFcxVP8+zhVaamykE+tf5OvotvYt7yh1jmisMRIQRBTx0h B+M7pzoJvYNM6j6O7o6OGWSkgXpyRu1YXgbuixiL8tdkpKpmZQ2DxyJNo70ghWS7MzWD0ejdhVlH NX01A6N8zSFkueOwu1/Bl5FfY0X+uHi+e3Skj7bEP0O7gL0cOWaZioxFLnnq6HgZdf3n/fcy6mXU D2VG9ezDwlbOB8770ITCcbGm8O/Bt4Im0WFFYcM29rOinjF+WBDdrphiep1eYowkrwju9CjS+xp7 xOLGJZLzxtcZDcWzBVuF1uJxxTPdxTUEpuvFR1gfG2QL5ExSA/qKPdO+1jHD8YNjo3OOc5VzTfpG x1eyE3zOcQpZ4xYqj6tEcCDWXHXfNde1xLXctdp10HXWdc513nXBddF1yXXZdcV11fWH65rruuuG 66brluu2647rruu+64HroeuR67Hrieup6y/XM9dz1wvXS9cr12vXG9db1zvXe1e56wNThanKVGOq MzwGYmAGYfgMyggYISNixIyEkTIyRs4oGCWjYrSMjtEzBsbImJgkBmPMTDJjYWowNZlaTG0GZ1KY VKYOU5epx9RnGjE2JpOJMiwTY7KZHIZjcpk8Jp8pYAqZIqaYacrEmWZMc6YF05JpxbRm2jBtmc+Y dkx7pgPzOfMF05HpxHRmujBfMl2Zbkx3pgfTk+nF9Gb6MH2ZfsxXTH9mADOQGcQMZoYwQ5lhzNfM cGYEM5IZxYxmxjBjmXHMeKYks3NmJ+QMRAu3CL/JPJC5//9fknPluwoUP3sW27+Qb/AyoiwFqfjM PttbAo3nvvDxBFHNjw5lmIPLMrJUk1UB3UrxZLUS2hvJkD1WP/Nk5x+39HS8S7/KnmR/LzBH+vrr O50Fq1RaZ/OQ0TJFMk5XK6mhbgNSEnBHLbpzgcHscxTWPyl8pPggz5eThvvB5uljnFO8vJC4Bhqa 52Z5J4WNFL1lIcVmWSdZR1mBYWVekqwbdEo2SBqJyJkfoE7hCcJn8poGgbSGvNBTXz7d3hnuIV+D akWI/XP5/NxBzBboofwZO0H+3DvaO4r53ZCT/FqRo4jLbhi3I98r6yrOK9OVOPNAuUG52P5BOUTJ hc8HW/hcvkz+Kv4RxxKoVt5FkVXagW2r8vBKhNmqzdLPJcOK1vm2+DbnW1TfOVjVmXwQUaluq94J L6vdaoe6M1yuvqD+Vb1TudexlT2kEQSm5B/RD8lakH8i6wdp//yH+a8c5cKjmj2aE5rDmrfurvm3 jO+h1ZF5wrnOfO1Y7ZBIacHKyH5nj5A0ZNbxtRu1t7UHdGL2D+d3uiaRP/MJ5wrxed1nyDjdGt02 3VndW/cG9kGhR99ENbjQn6dgH+leim6wTwoD7v1ZU6Eu+tn6TvoHgTuB2wZbrtSQGu1qsAclQXFQ HpSJbmrQIke0n6DMsNhw3XBVIPegvsbiO8EewW5FS5Rnin5BIGNPy33jxPRhxt+MR6W4tLC4gJWm Oz0N/LNNDUzOyCH3ZP/3kUumliafqdi5LRYO9Q8VhwpDkViNWM0aIkGmx8u/xAYUo4rXhlaHViXV TkphCyM9WbdQJ1olqy3Kk+WJJ8Cb1DUkmyUYV6KMpjeHx8GL5A55IDdNt563w13VXiCyQCUFqOCF fYz8oiJd/gh9m/xMkeL5WTHCvgp+otivFNvPKev76uYtV15QXsnbpdKLfnXUU83JT/HM9d1Qp6Cd HAPYMrdbONzSWjW6iFRsVdyBt+jkbDPN6NAu5xfudpqygoaRiZEJmiORHyNz/R7/yIKZijXaCf5v nNGQ3jlY9JX+TKim2FNwMVfvv4Vc422DN+i66QbpxjmVhXLnIffmwvb6uDQFblG4UtK0sEx/KBqL soV/Bqs7dgZNwl1iUXoTkRHNNKwSDjEcM9wqmpXeovgLtIexRTFiXJ9bZNxi+IlVsCJWEPyLhYoX s41Ze6gsgxdalIEUv85QhLZEvkT0/EO+gekRURXIK+MQhWiW7CXkl3eQd5R/Kf9WHBOckx+RH/Z+ roAVOkV/xRLkO8UvklVIHuJQLlT+LChQXlSeV15XPpcohQ9UQ1UjVItUO3h/qkMCnppTd4k0Qruo l2eN0nTV9HI3d7fQTNUc0AqdA/3HdJm6drqOgvGCpbrFAb/ztJQJfKZPDnTVp7hPCdfoL4kvGlj0 APJBXGr42rAEKk0vMGrESmNb43DjUuN+Uz3TdEGpaTbvQmhgaLDpofIHbVN4KFL1v3VhRbJEEbay B/tG3y3kd8y2pzuz06H07yxvMmKcgTNyJi6Jwzgzl8xZuBpcTa4WV5vDuRQulavD1eXqcfW5BpyV S+Maco04ggMcydk4iqM5O+fgnFw6l8E15ppwmZyLYzg35+G8nI/L4vxcgAtyIS7MRbgox3IxLjs7 L1ufczznRM7vOadyTueczTmXcz7nQs7FnEs5lystzx8dz/9heLaUwrPyVKKqXG/+AeYK10FCow1D r7lFstzkfdwUUYTbwpVqR8gGahbC46E+0r4qAi3RdoEXyK6LOKS7fA9vlkEi9wZeRu6GHXLc4JEN kxC53aOvkPX2pnytYEcuJ2rpzYQC4oGSk/Jz9l7aeoFmXAsB5xnDXyI+LiPsRxV/KmGlU3BD8HX4 mnK7Ykj4Idpa+Ux5y9dcf8LSQHgzv6ZvWz4vIvbf9V128NUYNF29xrFSfTXrW3csa76/gSYta4fG mlWmk2g88rHh1u7PIuM0l417+aecYbiltp22OLLJP9E9QHdKeyVyR2eFN0ZFuqOBUCAv0E9POM9r +0dTne/0zUzj9UuiDv2yqIc3Wn8/Wuy+gb4wKNDJ8qihdhEViRY1DBrT/UXNi2KG0vSY4Up0W7Cn b21wrDGvuGqxouhe9HrRW+Hp5JvBByZecc/ovuJuxV2KOxRPSD9X3Cf9kohnGszWD62ogaR/4LeE 5GxYlBxvGG8UJ+IgTsZtcSpOx+1xR9wZT49nxBvHm8Qz4644E3fHPXFv3BfPivvjgbg1nhYPxkPx cDwSj8bZeCyeHc+Jc/HceF48P14QL4wXxYvjTePxeLN483iLeMt4q3jreJtKK/f/3uX9f/B4V6mq gKoGqi6tBlWbW+0qz/K3s2UQbxhvdAX5lFQQ4KwK/pnLW1jBQGsqKGhjpRNhWwUN7eDt5O3m/cI7 zDvCO8Y7WUFHZ3gXKggp8a7gOu9P3l+8Z7znvJe8V7y3lb6XKhVfmUJIDikqiDVBTyaoBlTrk/vl 48uDBlAaRFdQVcICk1npgfFCfihQwbYJympTwVkdoC+gTlCXCt7qCfWB+kL9K6g38e/tiAr+GgON g8ZDJdAEaDo0A5oPLYBWQ6UVVJZwxeyttMUcrKDjk9Ap6CJ0C7pd6Y15CD2FXlV88X60xyToTVhp kJFXUJy2guMSbxtSKmjOCqdVEF1GBdN5YD8cqCQ7Dm4KN4NbwC3h1hWU1xHuUkl6PT6xXsJkORIe BY+t+LUZX8l9EyvIbxY8G/4OXgAvgpdWUuBqeA28Di6FN8Ab4U3wFngXXFZBhr9W8PtB+AT8O3y+ khJvV3LinxWk+AR+Cr+Ey5GqCIQIECmiQPQIVkH6eKW1pi5SH2nwyVxDIXbEgTgRFxJAghV0Gat8 cZFX6aEoRJp+8th8ZM72yOdIF6R7BXv2RQZW8OdYZBxSUkH7Hzl0DvId8n0F+S9AllfQ/xpkLbL+ /7V33tFNHOgWtwlgdU2RRqORNJZMrwYyRcUUq5fRCCRZsui9hN4Sei8BTO+QQCAE0yGYjulgIHQS amihtyR0MPXNjJVs9u3uO7s5e96+P57PkTSeoxkf/WXd+93f/ThlekDQpkfSjqadSDvJadSzaefS LqRdFpyB6yWKNe1Z2ou012lv0t6lfRClCPpVJBInNaxGpBdVElURtKxL5BH5OEUbFkVECU7XthC1 5LRte1FnUfffmz2HioYLXTrjRZOENp05onmi+Zz6zee+R/HNOptE20T7RQdEB0WHRUdFx0VnRBdE l0WPRC9ExYJCLiUQImU5pSzjtLJSUMsaTi+XF1cQNHMNcS0xzSnneuL64gaCfmaELp6EuKmgpFsl HY7O4i7irpyu7iXuw2nrzwTXn2/pGSx4/8PEeeLJnN6eKp4maO7lnOrme3s2ijdz2psnT/aLDwqz ge/FP3BK/KzQ43NRfFlo8vmtx+eB+JH4CafQn4tfiF+KX4lfi9+IP3BqvbREJFFIQEG16yUVJBUl lSVVJbU4Bc/3/PAtP/Uk9SUNJB6JV8JJJgkrCXPaPiZpImnKKfyWgsbvKPkkqfNHSMYIWn+CJE8y TTJDMpNT/fycYr5kodAxskSyTGBfVkvWSNZJCiRbJFsl2yU7JDsleyR7JQckRZJDkmOSU5LTkvOS C5JLkhvcf4XbQnPQC0kx7x1IPkhThO6gMkkXAZIiUlToK6korSStKq0mrS6tKc2U1k72CdWTNkj6 DC6pR+qXNpQ2EvqF+DlJY2kLaXtpB2nH5LSkh7SX4EMMlg6Vjkz2Dn0uHS+dKJ0snSGdJZ2b9CYW Sr+SrpSukq6VrpcWSLdwSoXncnYn3Yqj0mPSE9KT0jPSs9KL0h+ll6RXpDelt6S3pXekd6X3pQ8F ZueZ4GakyFJlpWVlZWkyseBsATK1DJGhMp1ML8NlRplJVk5WUVZVVlOWKasjo2VWmU3oOMqWOWVu mUfGyFhZSNZQFpZFZY1lTWTNZM1lLZLMT0n/UU9ZL1k/WX/BJRkm+CTjZBNlc2RzhVak5bLVyRnQ ZtkW2XZZYXISVCQ7LDsiOyf7UXZZ8FNuym7JHsueyJ4JrUlSuUyulINyODktqix4LXwvbQN5ttwh tCn55AF5KOm/xOQt5C3l7QSaqLvQsMT7doPkwwTv7nP5BPlE+WT5VPlM+SzBoZknny9fKF8sXypf Jl8uXyVfLV8vL5BvEngjvpPpoPyo/Jj8uPyU/Af5Wfk5+UX5Jfl1+S35XflD+a/yJ/Kn8hfy4j+4 gUrB5YEViAIX2nFNigxFOUUFwfOpqqgmdOXWURAKWmFWWAUXyKvwKfyKgIJRBBUNFWHBD0ooGiua /e4KDVQMVQxXjFWMV+QJDtEcxVeCS8RTTisVqxSrFWs4dbBDsU9wjb5XnFWcV1z83T26o7jHO0iK YsVrxRvFO8V7ZarQGVVaWUYpUoqVEsFVApU6pV5pVJqUGcpynI6pJPRJlbRJZSmzlQ6lU+lWMoLv lKOMKePKpsrWynbKDsqOyi7Krkru25qyv3KAcqRyknKKcqZynnKJcqlyrXKTcqtym7JQuUe5V7lP mOAdVB5Wfid0Tv2gPC9QV1cF7opvnXqifKp8DaQBYkABKAEI0AI6QA9UAGoDdQACyAbsgB9ggCDQ CAgDESAKxIA40BRoAbQF2nP6tzPQBegB9AH6AoOAwcBQYDgwEhgP5AGTgMnAFGAqMA2YCcwCvgTy gdXALqAIOAgcAk4D54AfgUvAFeAqcA34CbgO3ABulqRheB8NeAS8AF6CKWAaCIEYWA6sAFYEa4B1 wI9BgtNg2aAT9IBeMAhGOIUeBxNgc7AF2BJsA7YXdEdnTnn0AfuB/cHh4ChwHDgNnA7OBGcJ7UHz wMXgUnAZuBJcDa4FC8AN4EZwE7gdLAR3gHvB/WAReBA8Ch7jNMsZ8Cx4AbwEXgavgNfBe+Cv4CPw GfgcfAm+At+C76BUQdFgkA7KgMpDFaBKUGWoClQDqg19DBGQDXJBbk7T50AxKA4loCZQU6gt1E5w p7tA3aCeUC+oL/QZp4iGQEOhUdBoaExJGgqaBk2HFkALoaVQPrQcWgGthFZBa6HN0BZoK6cQd0J7 oCLoEHQUughdge5Cv0BPoKfQS+gV9BZ6B33gvmeLYDmshTFYB1eEK8FV4epwbdgK22A77IB9sB8O wizcCA7D7eBP4M5wV3gAPBgeCo+D8+CJ8HR4Jjwf/gJewGmzpfAyeCVcAG+AN8Jb4G3wDng3vBfe B++HD8DfwUfhU/Bp+Af4DHwOvsApuB85HXcVvgb/BF/n1Nxt+Ff4KfcN/zn8Ci5WpakkKqlKptKo tCpclamqpaqjylI5VF6Bw2uhaqdqr+qgGsKpvxGqkZwCHKuaqpqumqmaq5qv+kK1gFOE+apVqtWq Naq1qnWqTaqtqkLVTtVu1V7VPtVR1THVSdX3qnOqi6pLqmuqW6o7qgeqn1XFqteqN6q36o/UsFql xtUZ6krqTLVZbVE3UNvVLrVb7VX71SFOY7ZQd1F3VfdRf6oeqB6iHq+epJ6qnqHOV69Qr1VvUG9U 71IfVp9Uf68+q/5RfVV9Tf2T+rr6lvq2+o76rvpX9SP1M/VzPrOh/oCkIKWQ0kgZRIxIEAWiRCBE hagRBNEiBsSImJAMYfJQFamJZCK1EQoxIxbEimQjDmF6ziBBJIQkkGZIC6Ql0pFXvLw/iowVnOIp nPKdg8xHvkIWIYuRJUg+sgxZi6xHCpDtSCGyFzmAHESOIseQ48hp5DxyBbmB3EYeIA+RN8g7TYpG pJFq5MK8w6DBNUZNeU1lTVVNNU2mxqZpqAlrIpqoJkeT0DTmtNQnms6aLpqumh6a3prPNP01AzRD NaM04zR5momaqZppmtmaxZqvNas16zSbNDs0uzX7NQc0B4WZ/ynNGYF7vKq5rrmluaN5oHmteaN5 q3mv+YCWRsuiIlSOKlAQhVEcNaHl0SpoTbQ2SqL1OC1fMn/JRZujbXldj3ZGe6A9Ub6RfCA6GB2O jkBHomPQ8egMdCG6FF2GrkLXouvRjegmdDNaiO5Ad6F70X3oCfQMeh69gF5Gr6BX0Vs8X4m+RF+h b7Qp2lStRJuuNWoraWto6wguez2tXevUurQerVcb0Ua1MW0TbVNtG21nbQ/Bfx+sHaodrR2rzdNO Erz4Odq52nnaBdp87XLtGu027XbtEe1R7THtae057SXtZe0V7VXtde0N7U3tXYHXfKB9qH2sfal9 i5XCJJgCg7AMrAJWGauGVccysVoYgZGYGbNg9TE75sCcmBvzYj4sgAUxFmuINcJiWJzPmWGtsTZY W6ydQH32wwZgI7CxWB42BZuFzcbmY4uwpVg+tgpbjRVgG7DN2FZsG7YdK8QOYEexY9hx7AR2EjuN fY9dwq5i17Ab2G3sQXKKINKJdXKdQofo9H+YbFXTVf/DdIvUmXUWnVMX0DG6qC5X11zXQtdG117X S9db11c3UjdGN0GXp5ukm6ybopuqm637QrdIt1j3tS5ft0z3rW69boNuk26rbptuh26frkj3ne6o 7rjuhO4H3RmBQS3WvdOX1qfpRXqxXibQqLBerUf1emGyUVVfTV9Db9Zb9S59I31YH9Un9I31TfXN 9S30ffR99QP0Q/TD9OP1EwRudZZ+3h/Y1XX69foC/W79Hv1e/RH9Mf1x/Rn9Wf05/RX9Vf0N/c/6 YkOaQWxQGmCD0VDeUMFQ0VDJUMVQw1DLQBgoA53cCvKHnSAlKRXDgZJZrOEHw1nDeZ5hMVw1XDP8 xNMlhlt/ReL9YnhkeGx4IpB4rwzFhteGt4Z3ApFXCv8IL4On4SJcnOTylDiAQzjMUwJJOk+H6/n8 f5LRK49X4DP3SVKvJl4Lr43XwT/GCT7zjtO4uSTtjtfFGyS5PVeS3PPh/iS9F8IbleTC8XiS42ua 5PhaJkm+DvgneGe8K94tyfH1xvvgfQWWjyf5huLD8RECzzcaH4OPxfPwyfgUfCo+A5+Nz8Hn4vPw L/Av8YX4V/giPt2IL8Xz8RX4Sj4niK/F1+Hr8QJ8A74R34Rvxrfg2/FCfCe+C9+N78P340X4QfwQ fgw/jl9Kpq706QaBFiz3V6QgkU4JtGB2uj3dle5OD6SH06PpOXw2ILn5eGD6oL+3veX35E8y9ZN+ Nv3c7wmhn9Kv/5YSMqYayxoVRqVRbdQYUSMmbH0J/ve9L8bRxq+M+cZlxhXGlcZvjXuM+40HjIeN R4wXjdeNt4z3jQ+Nz4wvjcXG16YUk9ykNRlN5U1VTDVMFmEuFzDlmpqYWpl6mz41DTaNMY01jTNN NE0xTTVNM003zTDNNM01LTStMK00rTMVmDaYNpp2mh6Yfja9MBWbXpveZ3yUUTYjLUOcIcmQZsgy lP/ynuS/3ZL8qPzjCqX+D+4//tvtx/zu4yb/1N7j/996/Oe2Hv/bMjz/vlxRpaWVH1curvy+SqqQ AIrUjPL5PyEZ1Kpm6/9UKuc/lUIqyaNmKjLBTCyzQeaczCWZRZkH//yWXkJKyAg5oSCUBECAhIpQ EwihJfSEgcCJdMJIlCMqEVWJakR1ogZRm6hDfEwQBElQhJmwEHWJBoSTcBFuwkv4iQDBEEGCJUJE IyKXSBCNiaZEG6It0ZvoQ3xKDCCGEEOJYcQIYhQxmicAifHEBCKPmEhMJqYR00vIOWIO8SWxkFhC 5BPLiBU8QUWsJtYQ3xIFxAaeMeL5ImIbsZ0o/AMNtJ84QBwmjhDHiZPEaeJ74gLxI3GJuExc5ekL 4gZxk7hF3CHuEQ+Ih8Qj4gnxlHhGPCdeEm+Id3xCn0whS/FZeTKNFJFiUlKSTSdhUkWqSQ2JkloS Iw1kOmnkU95kebICWYms/JcE9V/S0yRFmkkbmUXWJxvw2WTSQTpJD+klfSRDBkmWbEiGyQgZI+Nk gqdbyVZkG55aJTuQn5BdyL7kAJ4uJYeQw8gR5BhyHE+Qknk8MVrCi5LTeUaUnMVToeTXPPXJM5/k cnIFuY7cVMJpkjvJXSVMJrmfPMDzl+SREtKSZytLuEqepyQvkVfIq+Q18iZPPpKPyWc87Ui+5DlH 8g3PNvJEI5VKlabKUCKeU6QUlJICKIiCKRWFUnrKQKXzlCFVhapB1eS5wRJmkOcFqbpUNuXk+b4S qo9qVMLsUblUE6opz+RRLalWVOsS/o5qT3WgOpXQdlQPqjfVh+rL03RUP6o/NYAaSA2mhlGjqNHU GJ5645k3Ko+aRE2hpvEsGzWLmsvzaiVsGrWUWkYtp1ZQK3nyjFpDfUsVUBuoTdRWahtPjVG7qN08 J8ZTYVQRdZA6xLNgv1FgPPnFU1/UTZ7y+o3u4sku6hH1mHrOU1zUO+o9ncozWnRZWkIraJCGaJhW 0yitow00Tht5pomuQFeiK9NV6Jp0Jl2LJmiKpmkLnUXXo7NpO+2i3TRDs3SIbkg34okPOpdO0C3o 9nQnuifdh/6UHkAP4qkFegTPJvA8Aj2enkBPpCfRk+mp9DR6Rkmqn15Hf0uvpzfyCXp6O11I76B3 03voA/Qh+hh9nD5Nf89nkOkL9FX6Lv3GXMYsMsvNiBkz4+aqZpu5rrm+2WGOmRubm5s7mjuZu5j7 mPuZB5tHmT83TzLPMy8yLzEvNa82rzNvNR8znzBfMF80Pzd/sKRaRBa5BbYglnRLBUs1i9lSz5Jt 8VtYS9ySsLSzdLB8Yulp6W8ZaJlqmW2ZZ1lgybcss6yybLJstWy3FFp2WnZZ9lu+sxyznLHctry1 vOfZFytsLW+tYK1stVoD1qC1oTXH2tjazNrJ2tnay9rXOsg6xDrUOtI6xjrNOss63/qFdSWfzbEW Wo9az1ovWh9YH1qfWd/aythwm9WWZatn89j8NsYWssVszWzNbR1sXWyf2QbaBtuG2z635dmm2b6w fWlbYyuwbbLtsH1nO2a7YLtsu2a7bXtr+5BVOistC8pSZWmy9FnpQq9ixazKWVX5/FFWrSwiy5rV ICs7y5HlzvJmBbLYrFBWo7qD6o6qO7buhLrL/qk90iVbpP+dO6T/lf3RinpQPf1/fAt05/pd6i+t n19/ef2V9YvqH/zntjVnT85ekL0xe2v2tuzC7IPZJ7JPZf+QfT77avbD7JfZxdlv7Kn2UnapHbBr 7Kg93Z5hL2+32312v521h+wRe9ye4NME9rb2dvbu9n72gfah9rH2qfbp9tn2OfbF9uX2dfaN9q32 PfYi+xn7OfsN+037PftD+yP7B4fYATmqOKo7ajgsDqejoSPmaObo6Ojq6Obo5fjM0c8xyvG5Y7pj hmOO40vHQsdSx2bHFsceR5HjtOOs45GztFPqVDpVTsSpc5qclNPqrO/MdkadOc6Ozs7OMc6xzjzn JOds5wJnvnOf86TznPOO877zsfOZq7RL7JK41C7UZXBVddV11Xc1cLlcbhfjiruauZq7OrgGuYa4 RrpGuea45rm+ca1zbXVtcxW6zrsuuC66rrhuuu64nrreud67UXcddz13O3d796fuIe7h7jHuSe7p 7pnuue4F7sXur92r3DvdB9wn3Pc8gAfyqD1VPdU9NTy1PLU9Dk8jTxNPb88wz2jPJM9kz2zPPM+X nnWeDZ7dnv2eI56TnoueW57bnnue+55fPY88r73lvLW9tNfqtXs9Xr834I14o96m3rbe9t5PvN29 /bxDvNO8i70F3k3eS9473rveJ96X3ne+j3win9yn8AE+0KfxoT6dT++r6Mv0Zfnq+Zy+Zr7mvva+ Hr5evt6+vr5xvm98y30rfN/6dvlO+c75zvuu+x76nvre+OV+pR/wq/xav86f7i/nL++v7Cf89f0e P+OP+xP+AXz2wz/JP8u/yP+1/xv/Mv9K/2r/Gv96/0b/Nv9u/wF/kf+g/5j/uP+8/5L/tv+e/6H/ mb/Y/y4gCYABXaBiwBywBDwBbyAciARyAy0DrQJtAt0DvQJ9Av0CAwODAkMCEwMzArMCcwKLAysD qwNrAhcD1wP3AvcDPweeB14xUkbGyBmQUTEZTHWmBlObyWIaMA7GxQQZlmnIxJgWTDemJ9Ob+ZT5 jBnNjGcmMpOYacxC5itmEVPAbGa2MXuZIuYwc5Q5yZxiLjCXmevMXeYe8wvzlHnBvGLeB0sFywRF QVlQGzQFKwdrB8kgHbQEGwQdQSbIBkPBRLB7sE+wX7B/cFBweHBqcFZwdnBBMD+4JlgY3BHcHywK XgreCD4LvgoWB9+zZVgJK2OVLMRWZ81sXdbOulgv62MDbIyNs03ZVmxrtg3blu3KdmO7s33Z/uxA dijP6LKj2THs5+w4dgKbx07kSVp2OjuLnc3OYeey89kv2YXsV+wSdjm7gl3JrmIL2A3sRnYTu5nd yhayu9jd7F52P3uAPcR+xx7lSUk+zceeYc+zF9gr7E/sDZ4hZO+y99j77EP2Z/YX9lf2EfuYfcI+ Z1+xxexb9h37nv0QSgmVCn0UKh0SheQhRQgIQSE4hISwkD5kCOEhE58PC1UIVQ1VD9UK1fm7zUIN hE4hvlHIG/KHAqFoKBbKDTUONQk1DTX7393r3lDbMPqPUj//KCUUjoabhpuHW4U7hDuGO4X7hoeH R4bzwtPCi8Jfh78J54cLwtvC28O7w/vDReFD4cPhe+H74YfhX8KvwsXhN+H3kdSIPKKIKCPaSGak VsQccUd8kXAkN9I00izSJtI50jPSKzI4MjQyJjIzsiDydWRLFIqqovqoIVojSkapqDnqjIajLaIL o99EV0RXRXdFd0f3RfdHj0QvRW9F3+ak5JTOMeWUy6mUUyfn45wGOS1zJuTMzVmbszPneM6pnNM5 t3Pu5/yc8zznVc7rnPcxUUwcS4/VigViTCwe6xYbFhsVmxqbE1sVWx0rjBXFLsV+ir2Jg/HKcUfc E/fGA/GW8Vbx9vHx8QXxRfEl8VXxzfED8VPxO/Ff4r/Gi+Nvc4FcPLdibq1cIpfKteQGckO5zXLb 5vbO/Sx3bm5+7re5h3Jv5N7PfZNITaQloIQuQSRiiXiiQ6JTomuiR6J34tPE+MTExJzEosSSxNLE usSuxPHEqcTtRHHi3Z/I5/Cpnj+R0RFSRP969uhP5I5S+J/UlJKfytyjVNsu3Tokj5HeJcf1+N/9 PVp1q2709urch3vu1KtVdWOgVbdWf/9sdSPTqg933tOrXefqRkf/Xl2Sf0WU4kwpnYKklO7Upn1r 7tGnU9t23Xt179otpazTzURTWrfh39uxA3ddSseOrbp1SmndmbtfSusu3P1SOv6P19YRrjUL15qF a+sI19YRrjWnoMJnxIXn8sJzVeG5FHfXWikE944soSm7PPfZq3Nn+PP8UXnumD+vTzFy9yifkvqh Z0pq2SXcq0T4TKkp7VNS0+Zxry/+C9HNc5kNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxOTkgMCBvYmoN ClsgMjg1IDAgMCAwIDAgMCAwIDAgMCAwIDQ3NiAwIDAgNDM1IDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgNjQ5IDAgNjgyIDc0NSAwIDYwOCAwIDAgMjkyIDAgMCAwIDkxOSAw IDAgNjYxIDAgMCAwIDYyOSAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1NTggNTgwIDUxNiA1Nzgg NTU4IDM0NSA1NDggNTgwIDI2MiAwIDUzMCAyNjIgODYxIDU4MCA1NjEgNTgwIDAgMzY0IDUwOSAz NTIgNTgxIDAgMCA0ODkgNDkyIDQ2MF0gDQplbmRvYmoNCjIwMCAwIG9iag0KPDwvRmlsdGVyL0Zs YXRlRGVjb2RlL0xlbmd0aCAxNjk3NTkvTGVuZ3RoMSA1MTkxNjg+Pg0Kc3RyZWFtDQp4nOydB5zU xfn/n+17haModpETFcQgKouAoBQ5QMTrdW93r22/7Xu35XZPQUVFRUQUsaFRjMZCiDGKNRhUsKDY e2KNHdEQo0bk/z444oUgSP78gknm83p9fGaeKTvznZmnyEsUjYj05x96KZ00saLowIsG9hLTxweh fXfq5KIpckRDmRhmzqA+YGppScVBTWsnUw+I5rBHp1ZUTUoMnVwtxhstoik6vaRi+HHT9539uojm Zfo3tgSbIkcG1h0tmtRakehtLYm2gfZlY+4SzcZjRLQJd8QTdB516FrRfJQVKTjT0xSPiEkOFH3u nYzP9wTS7mVjSspFs+lm5r/S62pyGjdMfI75bbQf70WRX9N0MPVLqR/mDbalfv/k4jBzjxZNYmEg 3NK07NLPThZd0WSRB68LNqUiLQt6j6L/cvoPDLramu7ev+YOMX3U9XvuUFPQZTvv0bWi170rYlwW CcfbNh0vXtbTNf/ASMwV6Z/reF80X1PVH53g93ud0KShfUXX7yf4/fzB9/ei/q5o2t3S9W01f3L3 q91rYEPvcX+R3mbpwprlyw/uki+vqQ59JRsvy5meW07VKFrZAsaZcr8bo5ecBbRX5kzfPFMP1H/b pWkokbPlgM0KrfSR4XK+iG5ewZmbNXrTnZqLxSBmvRiPYsoRWyRw6KwMyNN3z/WmaDcNXbVxE8V9 uurT6wYO7Nrt52eZcjfl6sX0lrZ1oFau3TzpMGPXGgeKmZ2s2boa7TR4s6zTTZIFsgPonpaz/l7O yJId9d1VGI6Vys2yXeYZvpT3N6/2jS1y8xqrvy93wWT9vm6Y/o9tBrM07urv65MyW79E1ugLkdfJ BdQv0K6UGfpmcXfptfvL0s39TtxcXmN8h75d/Tvpu2TLt9R+SL2ftGufkVL9L2TV1rl1H0qxbr3M 0C0Vx66ua6frfo01wt097+6C6RCZs6fX8J8E0xTp3FrWb6Zm0c7G0G9Gj3Lp7lwP803plkl4Vnf5 ru/bNfdv09/do3zlNm22f+H32+FiOB/6u+tvdO0TXs3vX9/d717KK7t+f4t+c78ru9c4mfIs+Axc 1GPu4Nb+u7ouBQUFhf8EmH9UH91O/cyu/aZu2O6c76cGs2h/zGf9n4VZNPd2yyfgV1vK2hHft+vu 36b/mO/L2mO3aXvth39H64DzYBCOhOXw+u7yXH7n+u5+8yk/xFw2yp1wRpeuey1dfaPwLpjuMXdX 30qoYlgFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUF BQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQWF/yqYRe6E s+C9cDl8DF6/p9eloKDwvwez6B7Z02tQ+P8H57gb5tjy/w03i6Zfl2/q1r0BX/iB/nfA+7fX9i/8 dvU29W92x7w/JbCnsTvjjvptr217c++p/f2r2Pr/39x+mzTD67rLVhj9ty1MQUFBQUFB4T8e5s3U DDKLYSf99H2+L+sG7941aAZ1S2OP8qBt27dX31HbLvx+7nbIN9m0bIv8fk3bMLerT4+2rnF5XbLn erbOs6vr+hHrHvR/Me/uAmsz7+k1/CeBd/XW9+XNfGnnYzTf9Rj/3O5dzx5/l+bd+C5z/l3vUkFB QeGnDMMImWEatYV7ei3/TdBOg1fKBboRmn476qd7Wr79e9khS3bnGgz5mz7ZLKNyl+FDOberrF8l c/6+Ruv35S6YJn1fN5z4j2369zT6Xf19fa049AvErd9bZuvnyyx9tczWLpPF+hM3bUDv1e4r3s39 hm8pG+8Xr34e/b1yFu2b/bH2DfHr3pNh2uWyiDmu3jq37rlN7+se27REN3vTF7u6rp2u+zbWeIss 3t3z7i6YDpEf/HfCCv8MUz/NqB9qM+TLYpMZGn+6572noBWp3a3z3SLNu3M+BQWF/xts+2eqPXXb lnelTUFBQWFPADs0fGfcUb/ttf3Q3D11W8s9+267rh/TpqCg8N+DbWzG0coeKSgo7Ay8wfadcUf9 ttf2Q3P31G0t9+y77bp+TJuCgsKehbIhCgoKuwreYHhn3FG/7bX90Nw9dVvLPftuu64f06agoPDv hbIZCnsKnKN/m/odPcqdPcpn/WM/Tde/j7v5n+fTHLvNfLvlv/FVUFDYPvSi+ZfH8j4dZtGt33Ef beeO2hUUFBQUFBQUdoSuvx9oT69BQUFh++j53wfv6bX8N8EsP6m/PyJX/f0Ru7Tun/R7UH9/xK6h 598f8c9tyv79EPhuO/17NvbkfP8qsMmL9vQaFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBT+W2AWad8qe5b37KoUFBQUFP5XgQ+6Gc7bSZ9n/l3rUVBQ UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUPgx0B67p1egoKCgoKDwo6CDBngQ JY2IfzkyVyTwiRRQu4qWvvLd1s6PyHeaLSXtrIKukvZSkVM/KNBQLj1LpOLjAo1WxHM89BdomNt3 M7yzQKPfMsyvK9Dwa/7D4bACjbFbO6FAY+ouFhdozN1FW4Emp7voKtDkdhdDBZq87mKyQJPfXZxZ oOnVXZxToCnoLl7CP2pFjpEPpGSpZZqUvm85TspOs5RI2R9KqqT8McupUv6u5SCpKLNMlqprDn5P qo2W0VLttewrtRMs06XWOmCy1N5sOU1sTssIsYUmrhLH4yVl0tg+cqk0XmrpI01eSz9pusgyUpq+ KC8XV4llqrjetuwn7rbCQeKebxkqnn1LKsQ72zJRWvWWcmm913KoBJOWvhI6YMA+Ej7Uso9EQ5bD JXbUuCESH1rolrZDBxwviccLOyU131Ik6XGFsyV9kuUISU+z7C/pUyyDJF1qKZN0teVYSdstR0ra UXiOpF2F50p6rqW3pC+ynCjpeYVzpGOCpVA6ZlnGS2aF5RjJPlh4sZyeM3WFnD7RMknOiFmOkjMe KLxCZhosg2XWp5YhcuZ+I2fJmelRaTm7xjJGzulXXiHn2CyVMqePpb/MWWg5TM7/qnCZXKCx5MkF YywHy4XPWabIXLPleJl317hhcvHowvvk4o2FD8rCcywVsvAdywS5vLpwrly+yXKgLBo7ICSLHJZq WfRZ4UZZ9G3hd3LFkENFrrnz0F6yqc/AI7ST1o16YvPl7NxgqetaSoo5LVyBfpVi4YZZDBphtWL5 GTwaeqEfngc5dctv4f3wIbgKviYy8hB4ErRrZGQLMgR/AbmiIx+Br8I/wA0ix3NJj98bTofz4UJ4 BXxaZFSTRka1wnbKcyG/Mept+AFk7KiNIqNZ/OjhkJcwegK0wSb4c3g7/EZkzL7wABiGS+BykRPo dwLrOiEOZ8OHIV/ihBc1csJHyD+LjOV2j2Xc2IMgX21sECbhuRoZy3rGMtfYu+BKuAauh4wb1xse AdGPe1bkxL5wACRoPbEYOuGVcAV8Ej4vchLf4aTxGjmpEemGfOeTeOgnnQ95+yfxzcbXwBjke4xn HeOXwl/Dx+BL8HWRCWMgL3HCApGJmIWJzDtxGiyBnMXEO+Hv4J/gOsh6J2ESJrHXSaxrEuMmPQpf hG+InMwdOPkoeDKk/8nscTJ2YzL2YDLfdTLfZjLfZnIFrIcJ2AE5y8m/gQ9C9lfEmCIMRxEGqYi5 iuhTdA3kLIroU/Qe5LtP6a2RKRORLsgZTlmqkan81lTu1FTWN5V1T+Xcp+0D+abTJkO+6TTu4SnL 4PuQM5+OHZx+JORunsolOXUsPB3+Hj4On+2ypyIz2MOMgZA+M7gDM56Bb4mcxjc5jW9cjM0uNuVJ 8d7IARopLkQ3CMn5Fg/JleKReikeS328UYqnIk9Ff5pWisuQVYyx6aS4Gb0XRtHFaUsjT0eeiZyN /jzGzkdeSv+rTFK8hDbeSvGt1PmGxdyx4nuYZwW/9Shtj9N3DfXn6fuGWYrZR/HH8FPm+QvtfzNL iTlXSvprpWR/jZQcBDnDkqN1UjIiT0p4JyWT0E2hfmp/KWmh7IMB9CF0vImSdsbPMkjJeflSshB5 jV5KbkV/O3Pegfwt8h7kfcy3mj4vMf5Vxv7RJCXr6P8X6l/RzlmUfGuUUr1OSnPypHSfHCkt1Evp YJOUHoMzO04jpSMh97aUMyqdQL8ig5TOoFyMrNJKaR3tvNfSBiTfstSFDhtUGqAcodzGfJ3UZ1I/ i/HYplLeTelcfmsRbYuZ5xbqt9H+K9ZyN+V7GPcAdd5g6e8pY7tKH6P+JH2fY46X0b2OfMsspZ8y z9fUcc9lopcyo07K8mAf6v3g3nlSxr0oGwQHa6RsKPJnSOxSGW++bIRWykYZpGx8gZSVoC+HVehr kFYkeytjb2XNSGeulHFPyuJGKcug486WzYRn8rtz+M2LmGchkrdTdh3yRvrcjMTWlS0zS9m9yPup /57+q+mLHS17Bvky8jWTlL3HWj5kzCfI9fzWRo2Ui1nKc5HYgPK+Jik/GMmbLj+MMja//BidlI+k jDEon0r9FL2UY0/KK5FW9C20c3/KuT/l3J9y7nh5EnIm5WegPxPdufBCyvPpfyVt11K+gfG/hL+i fmeulK9At9Ig5bzP8icpP82Y56m/1lvKP0G3PkfK/4b8ziAVBp1U5MLeWqnYi4Cof75UDKI82CgV w/VSMRLd6DypwPBUlKOvYYwDXaNGKrCDFdyhCh8ykCMVSfp3oj8T3bnwIvQLqOOLKhZR51tXXIvk XVbwLituoe12fvsOfuteyg+gW8H8q5GPI5+Fr6B/A765n1TwBiqJ0SrNeVJ5gEYqD9ZL5WHojsiR Su5H5QjaRqMfa5DKSVqpnEL7DHTYkEruSaWDNu5GJfav0k3ZR78IMk6/DP3PgNz7yvNypfIy9FfT 71rqS0xSyXut/DW8u5dUPkr/NbRzFyrfRPceZe5C5Sf0/Zz6l+i71vqtQar0MF8vVXtrpQr/XzVU I1VHw2Op816rWG/VWJ1UTUBORp6CnAFLaMcXVFUjrYzne1dhX6rwaVWZHKk6h3kvoj6fMZfDq+EN 1G8ySRV2pQpbV4V/qsLXV61kPL6t6gnan0I+Q1/sTNWrzPE283+IjntRhV+q+hx+SftGrVTj86pN OqnuZZBqYovqfSgfiMTOVw/RSDWxTPVw+o0wSvVY5Hh4Mvop8BTasOHVpzGmgjo+rZp7U92ol2r2 UO1lTuKI6ihtbYxLUcaXVfNGq8+mz/no5lG+lPYr4DXMcz31G2m7lfKv4V3o8UvV+L3qh+hPTFS9 Okeqn0O+lCvV7/Ab2PPqT+m3nv5fIr+G+L3qTQapMRmlhhijpq9WavprpGY/ygfopOaQPKn5mV5q RqAbBbGnNSein4Qsoi8xVs0MxtYhGyDxVY3TJDVBxvBma/B3NWn6n45+FvXzkBfABZQvp4391Fxt lpqb6HMbdeKPGnxuDT6qBj9ewzuowZ7WEPfU4KdqOLca7E8N76HmdfgO9T9Bzq3mU0gsUbMhX2q1 eqk1G6S2P0nE/pCzquWN1PJGao/QSC32tHYYHK6TWgtyDLoTkZxbLbaotgR9JboaJG+lln3V8lZq PbS3IonbaiOQ2KmW2Kk2RXsWeTr9ibFqif9qzzVK7Tz0vPvahYy7mjoxa+0vKbPPWt5Q7XJ+izOr fQi5in7Yqdon0a/NldrX6f8uOvZW+zFyHfW/Uv5aL3XEUHXcybocysQ3df2Q+xmkjpimDl9YNzhf 6ogj6k7USh33sA6/XFdskroadHaj1BEL1XnMUhejztrrePN1s+hzPvVLqF9GnZi5jiSyDltVdy28 Ad1NtN1GnzuQ+Lw6Yog61l/H26pbiY44r241OmLXurX0w2bV4fPquH91HzF+HfXPIbF23ZfUsb11 m7Ri1WnESsJozafMHbTuS/0A5ACIDbbiA62cmZUzsw6njL2wjqOMrbBONogV324thdg2K/7Pyvuy 4tet2GQrft2KX7dyF60dSO6i9WzKF8CLIfu1YpetV+jEupj+vC3rTZD7aOWMrMSBVu6i9V5+5yH6 EtNZ2ad1NWXuo/VpSIxvJZ62Ei9b36T8DhJbaMUWWrElVu6llfjF+g3kzdWTr9ebYR7cB3JH67mj 9fjJ+kLqxLT17Lcen19PTFN/HOSe1pOT1BNX1pML1bP3euLe+iJ4KuVSrdTjP+utBqnHf9YTH9Zz V+vxn/XEX/Xt1LEt9diW+mx/qV+QK/Wca/31jLmZttsKpB4bUv87s9RjI+ufRP8sc77IfG/Adyl/ QD/uYv065vwzJB6rx77XYyNtGr3YTGax9dWJjT3ZiBNtnJ/tUEhsaxtiFNsxlDk72+gcsRUhySNs 05HYRhs23sb52eoo8+ZsTczHe7NxdrYwEttoS6MjV7IRi9kuhPPoSy5j447arqXtFyax/RreS1/u pQ07aCMOs7EfG7mYbS0kTreR29hegeQjNs7LRg5g+4AxnxrEtgHJOdk4J9JNsRs1Ys9D9kL20Yp9 b5PYOSf7IdTZmx17YicvsBMP2/G9ds7JTuxpx57Yx0PiYvsU+k2H5BX2Up3Y2acdm2knTrM3UMe2 2Il37OzVHoacl528x56mzH218zbt7NuOL7BzZ+2XUMd+2nmjdt6onf3biX/s3F07OaSd+2u/lTp2 xo49tZOj2e9mzP3osKV2vomdb2J/At1a+CIkz7YTX9jfzBE7vsLOvbV/rhf7V+h4p/bvtOLQasTB 93DkUe6LxJc79tOJg+/h4Hs4uLeOIZBv4RiGnljcMRJ5IpIcwUG85yDec+ATHdxZB9/DUYrk3jrq kZy7o4n+5KoOPzpsrCPWWxxnoT+X8vlIfL3jMsrs34H/cBCbOK6D7N2xhDG3MJ4c1oEPcfyW+gP8 Jj7RwZt1EE85Hqf8lFkcrxjE8SZ9yRMd3GsH99qxHv4Zfsm4b83SYMyThr2M0nCgXhoKqR9F2UL5 BJM0TNZIA/lZAz6wYYZWGthHA/69oVonDfXUG+njo2+YMUl02RxpwCc0zEO3kH6cXcPV9LsOcmYN N+VKw28o3w15hw0rkavgExBb2sAZNbxOmTir4V3aP2Bt2JQG3mDDN7RtEuEnpTEX9tJJY788aTwE SczdiN1sJHdo5H42joDEso0nQHKjxim0YzsaKymTFzXa0TdQb4EeozTy9hrxcY3Yz0buYiM5XCP5 ZeN89Jcx5kp03L9G7l/j9WZpJGdovA89eXHjw8z9FHpy4Mbn6P8ya+J7N76PjvvVuL6XNIlOmrhT TTkwP0+a9qc+QC9N2PymoVppOgZpQYePbhqHnIicnCtN2Ism3lFTLX3s6Juhh7ZWGKKd2LCJO9PE nWmai7yYORfCq6mz1qYlkBixiRixiRixaTnz8N2bsBtNK5jrUeZ4gTL+q+kt2t5j7CeM+QzdF3AD dWxfE7FtM/6rmfiwGf/V3McozQfkSDN2oflI6kdTx243E982Ez81Ez81E5M345ObT4WltNeit6LD bzUT3zYT3zbzBpqD6MjdmrEHzdiD5rRJmsl9mufQPjdfmq9CLkZPXNFMHtHMm2/m7jdz95vJp5vv YW7Ooflh5JOMfcEszdi75o/QEaM3f47+W520kEu0EAO29NFIC7lPyz5wP8r4pBZiipbBemnhDrVw h1rwRS3Y8BZsXMtY5ElwIuOnUD/FJC3llGvR8Z5bXIxrpc4eWsipWzook7+1kBe1kL+1YMNbLqJ8 CfJS5CJ0i/tKC2fScif97kOSU7eQx7U8TDs+t4W32/IqZfbRgp9t4T61fGiQli/M4jSKOLlHzl5I 4iJnP60494EHUR8Aided5KHOw9ANgfhXJ/GE00KZ9+AkXnIS2zqJ153F6Mt04uRsnFYkb8JJnuf0 QPI8JzGgM04fzsVJDOXMIMlPncR/TuI/J/bayVt3Yquc7Mt5DeN/TvkGyvhbJ7G7kzjKeQ+6++hH bOF8GGKbnY8ZxLmW/s9TJz9xEls42a/zHfoRUzi5h87PGL8B4qucG/Xi0mvEZdaKizjetRdlztDF GbqwXS78lAsf7DpSJy5yLtex0JInLuyxayo8jTo2wFVpEBdvyUXs5CIvdPGWXNhgF3Guq41yEhI/ uNinaxbzcoYuztBFfuu6mPHs1XU58ipIfutir65bmfMOJHbNdT/yIeqco4vYyfUUOvyx63mIfXPh g1x/RMe5unhvLvbpWk99A/Jr2vFBbi006sWdrxN3X4O4D+ov7hHUx1AfbxL3NMqcnbsM1hSI25Mj bt6Pu5024nM3vsRNTu6+gDJrdi9Ejz1w4z/c2GE3b8l9K7wdHbmVeznyPvigUdyPUn+SNmyamzW7 X4Sv8Ht/pE4M4caPuPEjbmybm5jP/QX9/5orHp2Ih3jdY9KKh1jC0wtJzO4h7vMcaBAPd9JzuE48 Q9Fhoz0j0HEfPdxHz0QkcZ6niLYZ6MlLPMQOHhvzEtt6AnniyaBjb56zkdg8zxxInuW5iP6XmcWD j/GwNw978/wS/oqx2GjPCqN4VtP2FPIlk3jeYgy+xUNO5SHv8JALe9bliIdv7/lOI15iPG8fES/3 y0sO7D1YK17iVe9go3iHG8SLjfOOzRPvNPT4RC8+0VuBrIH4RC85opc35OUNeYlNvSHma2MeckQv vsVLnOM9B/15cC5lcicvsbl3EXMT33lv5HduzxEveYd3JVyN/ml+73X6cW+870B8i/cjs3j/Qplc yUes7dP1ER8xqQ/f4ivUiu9wysQpPmJsH/7FNwI9a/dhn33EbT7iNh92wEeM6jsFEqf42IevBkni 5cNG+4ixfV6j+CLUk3niY92+uejnw8vgIurYZ9918Eb6cqd8t9OXWMx3NzpiVN+D6InHfMSpPvI/ 3+NwDWsmb/fxHnzEY763ITbO9z76TxnzOXN8TZ2YzLfRKP6uP5TD5/vzIW/f31cv/n2R+2vFf7BJ /EN04j+aOnmE/7gc8WOv/ZPRsyc/b95fCbHX/nrqnI+fXNdPPOrn/fv9MEo7eYOfd+/njvl5P/5z IHfMTw7lZ8/+iyFxuP/yrj94NIv/RuQtjFtK/99ouv5oUvzYcj+xmJ9YzE8s5scG+HlL/rXI5+j3 qkH8b1Pn/vk5Qz8+ys/986+njRjHT4zTSvzZatBKaw7sTZ0zbcVHtZLbtw6iTMzQehTET7Xip1pH GqWVN9TK+2mdgp6zbJ0ByRVby9FXI9l7K3tvJe5pbTBLq495Q7TFkEnm7cyR1jnUiSFaiXdaibdb yRNbr4c395JW7FrrfQZpXclvPUF/cqbWF+GrzPtH+r4FsWetvKlWbEMrOXDr59T/DMnnWznLVmK3 ADl9ABsewIYHepkkwBkGsA8B9hfABwfYX+AI2n5GmfMMYCMCJ6A7SS8BcqgAOVSgHD32IcA9DdQx RzOSmCjAOQbwVwFyiwA+K4DPCqTo30l5llkCFyLJKwKX5EqAnDDwc+q3MO8yuNwoAXxTAP8beAz5 JHyaMdi9APFzgLsZeL+XBLiPQd5aUI8kDg3maiVYQJ18PshegtzH4ADqxKNBfFDwWIMEeXPBsXoJ YuOCxNPBGnQOnQRb0JEPBQPoOYtgGxIfG8wiZ1LHvwbxPcELKc83S5B3FuS+BZciiR2CxA5BziVI vhP8HSQGCj7MnMT+waeQL6B7mfHktUHy2iC5X5C7FlxXICERCXEOIZNeQsRCof6Q9Yc4ixBnETo4 V0Lke6GjaOeOhcj3QsR3odHUyctDk3QSmmaSELFDqForoXr0+NMQ5xDC5oVCyBjkDELEDKFO+p2J 5D2FOIfQPLiAMnYvtIgy8WoI/xTiTYXI60K3UL6defFNobso30f5d0YJrTJLiDg7RJwdegViO0L4 pNDH/D7xamgD/Ct6zilEvh7WaCTMWZGeSJg7F86n3hu5l07C+6E7gDrxUvhQJPYyfKRewsMhsV94 NHpivzC2JMzZhYtgCWTP4Zo8CWM/wm5IDBsmpw1z78KcYRg7EsaOhLP8zkzmOgeJHw4Tm4cXUr6S NnKJMLFD+AaDhG+hjA0JE8+GiWfDxEphYvQwMXqYGD38CH2IkcIvU+e9hf+ADvsRxg+HeWvhddR5 Z2HypPDX8FutRLijEWxIBBsSIU6MYDMjfeG+6NlzhFw2Qi4bGYTEnkR4bxFixAhnHeGsI6MguUhk HJLzjpxMeapBItjTSBnk/UXskPwpQpwYIYaKcIcj7UjeW2QWutlIYvgIcVOE2DdyKeOxKxHeXgQ/ HbnVKBHsZuRuvUTIWSP4hcjTSM43gq2MvEwdnxfBvkTYb4S7G8GmRNhjZKNIVGeUaJ5Gouwtujfc nzIxcJQYODqQMrFglBw9OkwvUe5ulPOMsp8oZxkt0kr0FJ1E8d1RcqxoFXXywqiNMvlJtBFiV6JO g0R5n9E0nAmJPaLEvNHzKRMTRudB9hYlro9eAbnDUWKsKHlK9Da4lPH3oMMHRlci8QdRYsLoU7St hc/S/gr11ykTX0XfY45PILFg9Cv4N0g8GDPqJMY5xohLYrzXGO81xnuNcZYxzjKG7YwdBofSj3OM cY4xzjHGvmPYn9hYs8SKaCPmjxUzXzm6KurWHIl5qPNmY7zZWBRyh2NJdBmTxM6mTKwV493G8IGx SyBvNsY5xq6D7DV2E7rbjBLD58fIMWPc3xh3N7ZCL7FHaXuMMj4wxp5j7DlGLBx7gTbi4Bh7juEP Y9jXGLFYjFg49mf4V5PE8RVxbFQcOxvPRbL/eD8kMVmceD9OPBk/jPpgrcTxh3HsbRx7Gx9DHX8Y J+6P4y/i+Is4NipOzB8nLou7jRInJouT78eT9J/JuLOo4//i3NU4PiK+AP3VSHxgnD3Gb6TPzYy/ nTL5TPy3yLvhPYzD9saxvfFHkKtZ97NIYub4KxD7FCeniZPTxMlp4p9C7nCc843/FR05TZsOks+1 8T7bONs2zrStEEn+1jakQNp4h23jKfMG2/DvbZxh22mwDF0VEj/Yhh9sa6buNkhb0Cht2N220yF7 ayNXa5vNbxDHtM3TSdvlkL21LaYvsWbbUtrYT9s9jH8A+TtIvNzGmbU9zfjnIPtpw/60kZO2/QG+ Df/E+HWMxea2fUn9G4iPxwRIu04n7flaaee82slN2w9Ax9tsH2CS9sEGacfGth+fK+3sqX1KvrRX 0sY+2utypN3JWB/t4T7SPov22Yyfg+4ixl5BHV/Rfj11Ys32Zcx1N+UHmOtx6k9Sfha+xJjXmOt9 dNyrdmxH+zqjtGM72r+l/J1REiaI7UiwxkR/SB6ZOLBAEsPQEUcmjtNJAn+XmJAvCexegnuUqKIP sVQCO5EgjkwQRyackOQnEWA+3k6Cb5/AByQ6GDvTLAlsf4I7lcDfJYiZE1f0lgQ2P3E7et5M4i76 8d0TfPcEcWOCe5RYzVy8kwT5V+JF6tylxGtIbH/iHYMkPqIf+VeCvDHB9098CbEXCexF4juRJPaf sE6SRqMkC5D94N7osBlJ8oMktj/J+0lyx5JDKA9DWug7DjkBPXlBEhuZnI48Dcnek7yhpBU6ciXp R5IzJ2PINOOzekliK5LsNTkfiT1M4ueSvJ8k7yeJvU/i15O/pO9tBkni65L4uiS2InkfY8kPkqsg tiK5Bj5DvxeQL8FXmJM7l3ybcbyh5CdIbESSeDnJflPYiZQBmYPkzqX6UmavKWKZFLYxNVAnqcPR /wxyrilsY8pCOz4uRf6ZIg9KYStSU9HNoExenSKvTtnQkQOlWiA+PsWeU9jIVIwy55zCx6eI1VK8 sxT+LkW+kMIvpC7k9xbQ93LqfIPUNZR/jryB+k203Yb8lV5SvLnUvQZJPYR8xCQp7GNqrVFS+PgU eV4Kn5f6E5IcIcX9TX0Gv6D+Je1fI7EdaaNG0uREac443Ucrac42PQB5eI6kyfnS7DM91iBpzjM9 Gf0pkBgmjQ9PV6DnPNMN9MHXpfEDafxAmhg6zR7TSUjOmiYfSuP30ufTfhGS800vQEful74KHXtL /4K5iEvTv6aMT08vp/0BdA9TX2WUNH49zZmmn6c/diT9KnwDPf4u/SH7WE8b55nmPPms0kEO1EHO 12EySQd2sYPz7NhPLx0DdNIxmDp+vWOYQTrYX8cos3RMot8M2vHjHXW02dA3UHdRJg/v8KFnXx3c 2Y42ylyaDuKUjplG6SAP7zif8sXMw33tuIE697QD/92xlDp3teO31O+h70rmfAz5DHruZwf5Qccf 4XuM/Qwdb7GDt9jxFesk/sxwNzO8wwznlMGHZbA3Ge5nhnglg73JEGtnOK8McVjm8HzJkKNnxlAm R8+Qo2ew+5kivWROzZMMuVuGuCSDfcyQN2QCZslwRhneX+YMJO8vwx3M4Ksz2PrMXINkLu0lGWLq DPYmw34yv2Lsncx5L3IFknwns5r5OZ8MtiaDrckQV2fepEzOkCFnyHxKeT38gt/DdmawL1nRS5Y9 ZXlz2TzKfXWSxbZkeXNZ9pTlnLLsKXs4cqhWsuSq2WPhCMYcT3/2lh1PeRIsgtiZLDlrtqSfZIkp s5xZlrgyG6AveUQWX50lBsvyQbO8tSw+Lctes+w1y16z5K1ZcoossVj2UiRvL0uMkl3M+CUQX5G9 Hd0y1kM+kcVvZ/HbWfx29mHkKvRrmBvfkX0Jvk47cUmWfDaL/8h+DHl/WXKM7Ab6cVez39DGt+jk vnZqc6ST+KSzd2/pxN50Ent2DkU3Eon/7hyXL52nGqWTWLOTO9pZZ5DOJqSLvn50JGSdEco4z05y 1k4m7eRMO2fRhzi68zx4AWXizU7eXye+pHMhuitM0nk98hfwlr7S+QBjf///2DrP+CirNOxfeZJJ T1CxoTJZxLU35JlnAMWuKOpAEhIIkAQSSKEkkAChZpLJlMykTtqkx4IgYsEK9oKiyC66ihV9FXXt WFgVxVXfvxu+ve+Hy/v0ec45d7lufnJg7VfiteFN5PvM+Yjf/YIy37/hB8aRJ2zAf1QTI6rhV9Xx 0arGd1TDKau5w+pT41VNDl5N7lc9DukAcKpqOFU13Ln6GpuqycWrbwHTqRMbqmfQNwvkAmJi9UIk Nle9lLUr6ef+qsltqzGGavZU7Uc2JqoaH1LdGyM3PNUNP3dPssmNL3ZPoXxzgtyzkHOo54PCeLmX Rsm9DLCeG47qJq90e6j7kA2xcnfQzrm48bvufvpvo30T5bsok0+6yZvdxFw3PNW9g3HkWe5naCf+ uIm7bvIQNzzCDfdx76VODHaTe7nhqm58svsT5L+pk3u58cnub5GHwK8jVJMITrOpBh5ew/3XnA3I q2ouBMSdmvExqpkYpxo4T8311NH5Gs6uJhuwz5rZII8x5JU15JU1xJwafFZNebxq0P0a8uiaDYZq 0P8aL7/TwDrw1Rp0oQZOXtMdq5rbaNsYrZotrHM/bQ9QZ781O5i3k3b2V8P+auBJNeytZh/fA0et gaPWYO81B49VLb631harWvS5Fu5Wewogp6olT64dSx/+t/YcAOeuvYi+8ZTR81r0vBb+UIuO1MId aqcCeFPtdJtq4Xa13GHtwhjVEmNq0YvaSsZXIfHBtfjgWnxwbTNj2E8tPKkW3ahFN2rJM2pvp/0u 2u6jvA08yLwdyMdpe4r53F3ty7Rhw7Xkj7VvgDdp/4D5n9D2Of1f0f9dnGp/SZEnLkGe4wx5TkSO iZLn7Bh5uCfPJfHykCN64ECea2i7EQnf9sAJPMRMTzaSPNFDfPEQNz1wbk8RWER5KZL8yQM38KyK lof78mxgjTrayKE85BcecigP9utpR3Jnnm7GDSCH6LsDbObbttvkeZp+9uR5jTIcyAMH8vyfRHm+ og1/7MGWPeQRHniQBz7gwZ49v0epTsmqgwvUcW915Eh1Y5DnjVDdZfSxp7qrbaq7kfItSapD3+oK KBMT67DROmyqroo6PrbOjfRQ90arjhy+ju+ua2O97njVwefqNsWpjlhfB4epe4r2F5Hwt7rdjMN2 6vYyj7yhjryhjnhfRx5fh/3UkefVfUHfd4BYWfcz8jdD0At5o6PkJaZ4E23yEvO95EJefJIXn+Ql rnjRPy+c1XsOY7ArLzHFS0zxonteclwve/Rex1z4qhf+5s2OkRee7s2Pl7cUkEh619NOTuHlB73E DS+83NsWLW8E2QPIi7yD9MFpvPgNL37DS87nxZa82JIXW/LuSJQXXuPdlSQveuZlj15yeC85vJd8 wwtf87I/L/vzHgZHKP8ZJR925WN/Pviajzvykcv7RhrynUQbNuazI8fEykcO72Nvvkti5Luc8jWU 8Re+Gyi7bPJlgbnx8pVQxz/4ygE8wLeGNdA3n5e+FsromC+ChKP5hihzbz5ioe9ugA352IuP3MP3 JOs8Rz/359vN2H9Sh9v43qHMvfm4Nx++wQcX8KF7PnTOB8fx/cq4Pwz54Tj+mGj54Tf+FHAM5RNt 8uMz/NiWH3/ox2f48Rl+civ/RbTh7/0TmMud+a9gPPvzE0/8xBN/BjIrVv7cOPnhAX54gH8xbezT vxysZB579RMj/QHGYU9+fIYfn+HHZ/jx/X5yRD936Idz++Gmfu7Qfz9zHmI8/t4Pj/OTa/j3gH8y Bm7qx8/7sTU/tuYn3/CTs/uJ/f5vqP9qEyasAHsNxMQpkAJONhQgpw1wbwHsLPB3yuRSgQvBOGBS J8cI4PMD3GHgOoA/CdwUrQC+JAAXCMxkHrwugG8MFNKOzw/ABwLkGQF8SQBfEiCfDJBPBtZRhxME PKxHnhVAdwPsO9AJuOcA3DUAFwiQZwW2xiiAfQbgrgFsNICfDGCnAfQ2sIu9kGsEXgPEgMCb9KG/ AfQ38CHyY8bhKwP4mMAPrPlTrAJ/RAkKovpogA7XJxiqT0lQPZy8nv3Xs//6s5AXgIspO5ATo1V/ ZazqbwDptGWNUH0J7fj/+jLm4W/q0dt6Yls9vrJ+g031xIF67LIePlcPl6vvYi77qkd368kh6+8C d7MGcaB+G/JhsJ3y4+DJRNW/whr/Yu13aN/PXPx+/XfIw6zxX0PBqCgF4eNB9hBMRCbHKEj+HyT/ D3KfwdMAfiYIbw2eSxt7CTpiFbycNvYS5P6C8NQgOVSQ2B0krgXJoYJ59BGzg8SBILEtWAHYW3Bt nIJw1aDfpiB7CsJRg+2Ue5mDzw/eCcg1gnDz4P3IB+ljL8EnKcNPg/v4PnKlIHYYhHsEyZeC6GQQ PhrEFoPEgCD2GMQeg+T/wd+Rf8YqFBelEH4mlJqoEHw8ZI9XCL8Swq+E8JkhuEiI3DdEvA5dyVj0 M0SeEcIGQ9MZO4ex8wA8LoT9hRYj4achbC9EThiqRnpsCsG/Q/DSUAtzO6kP0ndHnEL3UH+QteDa oScA8Sz0PON20fcq678HyG9D8OvQ1+BbyuSAof8wjxwjhF9hWTXgVxoSwQjq5EwNJ0apYVS8GuBX DfCrBvLABnxKA/yqAR7SgL01EL8buK+Gq2xquIHxNzM/HcCzGmbFqCGPtkLK3FcDe2tgbw3l9GNr DcTthvXUaxhThwzFqoG419BDvT9ajU4AD26E4zReF6dGF/VM6jNj1IgdN86nzrqNJTY1ElMb4fON 2G7jWsZUI4mpjT7KQfqx38Y2yt2M6WMt9Ltxc4IaH6TtUerPJKsRPtOIb2rERhvfZc5H/M5njPsC EGca4aCNxJrGH+k/DI7YRKhWU7ShprgYNaVEqwme08S5NZ0KyB2b2HPTYiQ8ugkO1rQK4FeaiItN xMUmbLApBNDXplbq+JcmYmMTdthEbtxEXGzCDpu20kdcbOKem/AxTdhh02Os+zTyWUBu1fQi9VeY B5dugpc17aNOftn0AeUPwQEAP2vCTpu+QmKrTf+l/KfUzD6aYww1x8eomftv5v6bTwSjY9V8ZpSa z6V8MXI8dfLJ5isZcy1ySoKaZ9CeQ3kOZfbbvIQ6d9y8AqC/zbWsiUNvhpM1s8/mVpua4WLNA4yD QzfjQ5u3xKsZ/9lM7t+M/2xmX83PIncy9hXGkjM3czfN+wF7af4Yyb00Y5vNBymjz82H4/73L061 EPtbbMi4aLVgly0jqB9H36mxaiFPbvl7olrGx6vl8gS1wM9a0NmW9Bi1zKQ8l/J8yn0parnXppaH KeMjWshdWvimFr6pBa7YArdveQVJPGuBN7bgN1rI41s+Zj6cq+Ug837kN+GJrYpVa7zUmoQcGa3W kymfQvvoGLWeRf18MC5erZfTdjVl8rHWG1PUOov6HMq5yHlI+GMrnL6VPL21gvoK1oNjtbqRAZta m5mL/rQSn1rJx1tvpX4n/ehP693g/ji1wuNbn6LtOeROxpGLt8IhW4lRrcSnVrhI69u07+c3DjDu U8A5t3LOrfjA1u+ok5e3/sg8/EYYvxFGb8LsL0wOE4ZnhY8Dx8cqTLwOw0vC+Pjw6VEKE7PDcJMw 3CR8YYzCxOywRTu5TBhuEsYvhq+nnfsIZ7Bmtk1h7iIMLwmX0o9ehfH14SrayGvD2HYYnQpjhGF0 KhxBwinDgwC9CmPjYewnzP7DdycrzN7DjzP/mUSF9/B9cObwW8z7gDWwjTAcJPwlbd/Q9hNtv9IG Xw7/aagN39iWEKW2ZMrHxKuN2NU2ljY4SBv8uO1C6uPj1IY/bLuc8tUJarslRm3ZjJ1HfYFNbWWM X0nbOsrEqTYfqKeP72/jINs6mQ93bNsINoOt9MOl2rD7Nuy+DT/V9gzzsfO2PazxOm3cVxv31UbM aoM7tmHfbZ/T/w3ye/rIl9sOMxZO3M5dtROP27mrdu6qHTtvP552YnH7aceoHS7VfolN7ZOQ2Hb7 lBi134KcTv8MysTe9jzq6GL7AsZwL+1w/Xb8Wju8qX0tWB+rdnxaeyha7RhjO7yivYO56GM799IO T2yHJ7Zvon8rgBu3P8y6jwF0sn1notpfox+u3/4W/e8D9LD9U9Yg/rb/BA5TJvZ2REWrI85QB363 Y2ScOtJoGwOIUx3spWOcTR0TKLOfDnxWxxWAWNJxDXNuQE4FNwPyl44sZA7r5DEHXtgBt+hYShne 1AG36FhPXy2S/LKzylAn8aWzBngo+xPUGY5WJzlmJ/GlcyBZnVtpJ4fphPd3Pgoei1XnTiQxufM1 yvD9zveRcP1O7KsLfeqCv3edgSTWduFvu9CrLvbRNS5aXc5YdcHdu7iXrpsYM412OFHXDJBNfU6M uubb1AWf7VoCygC5ZlcF89bSXgsglF1NjIXDd3EnXb3U0bcuOETXfYxDv7rwb10v0L6b8fjbLmJh 1zu0f8wc/FoX8a+LHLiLHJg0ThEjXpEUyuSQkZFRihAzIqNsioyJVgSOGmEfkYspk4NEyBsjlyIn I6+iDVuPkD9GOP9IVpwi6FZkHm1FzF9KG3oVWUW7mzE+yvCfCHw1QgyJwO0inbTDFSLYfIR4GYGP R7D3CPYeIV5G4K2RB1hrB3347wi8KIKORXYmKYKORbD/CLYT2c+3fEQZjhQ5SP0HfvMIdeJid1Sc uuGu3cnx6j4xRt34tG58WvffotSN/XefZ1P3JUinoW74XTf30309fVNpT09UNz67G17XvQiUA/bU zfd1w6u772U99KP7UdofB89Qfj5W3XvoI851f0g/HLT7S0CM6/6e34F7dsOte4hxPcS3nmPj1HNK vHrI+3rOpP082i+kPC5GPRNt6iFO98A1e8iDerDjHmJ1D3GlZw7Io95FO7bZM0AZvtFDvOjh+3ru ob6N+Y9Rhx/38G09Oxn7MmXiXQ860YNd9pCD93zF+t8zHl7UAy/u+S1GvVEAP9ObaKg31aZe9KL3 FMDZ9RIPek+nHf3oxVZ7yWN64Ra9cMpeR7R64ZO9VzKHONjLd/eiH734n97ZSHhfbz4oAPig3lLW 4Xt7iW+98ODeB5EPM/eJWPXupH8XdWJ1794k9XKmveSavR/T/yX9PzD+MH3oci/+pPfPOPXFR6kv KVp9xLE+4lgf3913sk19abQTw/rgDn2cbR/ct28i8iqAL+m7CUme2cd39vGdfehy33wA9+1bSB2f 0reIdSr4DTf1OsYRu/qaqHdRJ4/uG+B3N9HO2fdtA+hG33YknL7vafp20bcX7KP9bdr2I+F2ffCh vgO0w+v6vgLf8jv4yb7DzGFfffj+fnx/P76/PxbE29Q/Ik79J8eqf0yC+jn/fnKvfgeYCLDPfvxk /zWMcVHPpI6P6Z9Nnf30LwTFMerHRvvxMf1wkf6V0epfSx197Sdn6ifP6Cf+9B+ijr/oJ5YOoLMD sYYGkiingmOpn4A8CXlqjAbgZgPkGgP4v4FzGXcR7ZcgJ9k0cFWcBvDXA9MZB9ccgKcNwA0GSpHl jKsAcOsBuP8AvnkAPz3gB0GAzxtoQ5IzDRB/BuAFA1uYdx9t+OgB+PTADvqeAbuo7wbwzYE3WJ9c fQCdGSAfHGBvA+xtAC40cJD57G3gFwDHw/1oMA7gKwZTqB9jaJA8dxBfOEgMGVyNhKcNBmhrABDu QWL+YGe0BrG/QexvcCO4C6DHgw8hd8RpEB0eRIcH0eHBPdT3USffHtzPenCzQe588BvW/ZE6XGUQ nzXEOQ8RF4dSEzQ0CpkWrSHOdYgzHSInHRpHP9xrCB0emhirIe566JoYDU2l3QUyaJtNWy6yiPYl cRoiFx0ivg9tAPjfoRbW7AAo1hA8c+hO2tDXoSeZ8wKSbx6CVx5JjdIRYsMRYsMR4vMR4vORsZTP Mgwl6a8/JDB0O3Ij2AZ+khE1C9BmjJQRfR5YDmrBrzJipsqwJYArwAPgLRmxx4KzwTcy4qaBl2XE x4FJ4DEZCalgPfCCARmJC8AbMpJGgyGwXUbKdYDfTTkgI5X+1KWgU8aIfBnHRYHJIAusAOvA2+BT 8LuMkacCC1wLXpBx/NIo4wT6T5wCHpZxUiy4WsbJT8kYtVPGKafIOC1bxugLAL87ugCsBm2gH9wG +KbRH8mwj48y0uwy0laBIzLG8NunnyxjLG1j75VxJmdx5n9knD0HbJVxTouMc3fIOO96MC3KOG+T jPPZ5/lnyLiAvV3Id1z0tYxxj4KdUcY4znt8BfgHeA28HmWMfxP5HvgQsMfxf8gwp0YZZjpyIaDN MRt0APZrTTAMi706k8FpgLtxFkYZzs+RP4A/ZUzg9ydwhpO6ZVzmBk8D1oWWGZO5n8lXAu5k8q9R xhXVMq68CXTJgCYYV+0CjL36WxnXPAn4zuvPAXfKmML6NzBu6i0ybuJMbyqXcfOJMm45XoYrBrC2 ywkWgQYZ0w7JmI4OTecu008HW8A/wb9lZHCmGTfLmHEhaAbvyshiftZmGdl880z0cCbjZ3Kns9CD HPaew7nl7JMxm/ue/UmUMZvvmfOgjLl8/1z0KJe7zGO9PL4tj3vO4/zyngfvgC9k5I8FcwFr5HPf +b/JmMc5zjsJzAMHZRTwnQV8f8Ey4JdRyDcuMGQUcU5F2Ewx91vyAfhKRil3VMoZlPYA2haxp0Xo 9aJGgE4t4i6WcHZLKsEgYEwZZ1/Gd5Vzn+U/G8ayH2UsTwETZVS+F2VUcvYrjgE3ylh1fJSxahwS W1rVLqOK86liD1UZMtb4AGezlr51DwHueN1LMtZfBtDJDfzmhltlVLOWm2+pCYEnZHiqgAegx3Xc hZf9e7kf32LwcpTh52z96H4QnQ7yDUHag4EoI/h4lBFifyH2E7oGcD8h9h1ijRD7CqGnDc+B72Q0 Um/id5sY08QZN3O+zWkAu20OAmyi+WcZLZeAX2S08Z1t+JeOVhmdr8ro4v67vpcRGQWmy+hGJ3ux mwHueWC/jMETAPo9yPcNsq9BdGPwr/YvZQztBezhVuz+1osAe70VX3Yba9+OrtzB3WxER+9EdzZx r5sYt4n2LZ/J2M6et3On2zMBNrcdXdnOXW1fFWVsx6dtZ63tfP92dHs7OrudO9x+D7gf4G+27wZ8 //bXATq3nT3s4G53sP8d/M6b+KyP8T3/LpXx2Vd/vZP1taafGXejpr8Yu1vpl6R+rnRX8tVKn2Gv V3qTK1/pnfaQ0jce41f6PZZXGRWOVUffzjri+GH47axMt6NHmVtiPlDm7vizlLk/JVuZHx7zrWaU OH7VjHuOPU4zvkhoUda22G+PvrF1ybGZyr465oCyb058StnPHluimXutkZrlSD765FZO7LVXaPY5 qedrzudWp+bGWomamx57WHPnJU8Zfosr98FLNyv3cNwzyv3dPkF5Xak3KW+381jlfZjysPJ+s61W fvdxTyv/qdgpmldgWz/8Zte8wQmvan78iMThh7sKrhqZroJ9zvEqnJR8jAonpyxS4cyk/SqsiMtW 4c6kUVpQPnJQC9Ym3qAF2xIjWvBx8tijT31tTtl39L2vIpvn6KNfj1yXO/zoV3FmQpKKsxM+UEmG 883hN8BKInGvqbQg+QWVlieUqjQUn6PSjhHvqvQfSZ9pUVJKgxZNTio7+laYK6lq+MGwJRWx1Vry DG74f0+HLf065vnh98PKbo95WGWPJ5+r8jKrTMtOSHley+zJ92nZmUmPaNms5Oe0bHVsjZatT0jW clfikJZnTLxn+MWx5RsSb1XF2fbbVOFw/EcVk1KPqOLmlBGqyLGVquLACX8Ov0dW6RxhH36UbOWx 8SlaecKJU7XyzBNv0conTyxXld28SFV3pqYdfa1s0tQnteaquBFaMyV27tEny/73Wtn/76GybckH tObTlDFae1JK5OhrZe7E27X25ZPGa118rFfrVp40W+vuTbxD63akTNK6l1L/rnUfnFSp9ZeP2KX1 1anfa70nLmr4abP1b1n+4WfDhp82C0F5/ve+mfvr2LFyfx+bpNrlJ69QrTvpcnlmnXyXPG0nb5dn U8xqeZ5ylKju7Jjt8s6x7ZH3m9Qceb+1++Q7NvVv8k1OPUG+LfFV8t2fUC3f4QS3/DNGHX0bzf9L Ur4C0aOWKZCVcEj1tlENCmbbzlXwdccKhRIT7QqNJm0LXZq0TaGyxK0KPZbiV+ig9fPwa2qhI3FV R59US01+Vg3np2wZflytwT3mITWuSXlo+Jm1xoPJLjXvcy1QyxNJh9TyTFKpWp6P2auWF1LvUstn tgK1npR4tlpHpaSp9fSYcrWOdY5U62Upd6j1quRH1Do3iY75ia8NP9EWviDZrvBNCVcr/L7tHbXH xq9X+8q4IrX3Jn2hjswR8erqibvs6Ctuy089pIjX9oYi3Ql7Fbk39cL/5z23H2Nq1WNLPaie5JjP 1HNMfFg9M2OfVM9zKQ71jjotQ71TL31XfVvjN6jvrfi16r8o5jH1Z6TeqoGE017QwLz4+OG34KR3 cU3CMwnHBFxgBoCOpncCaH36PcIjgd3giHBHgHImqVImadIM0rAZjJnxhfA+wvkA1sq+GtwM/noa ZK9wO4C0Mof+2ecIlyM8DmC9ufNAmfA2gPQxlxQrrwvwO3n8Rt5vws2Ap4R/AYPCu4Bm4VsA6Vvh JAD3KZwJ+N7CncKpACj2Ar5rwcfCoYDNgHJREVgBSFWKTwKZIFv4EeADEeFEAGuUhgC/W/rXX4Ui 1VrE7ywm9VvMeS1+XLgOQDq/tAqQypSRlpfdDugrZ1/LSMmWkaYv46yXzQKrwXrhLAC/t5wxFaRo FZxRBfuo4NwqSMkqDgj3IByD8AbgSeELAKnB6r/+N0bGrmH/a6ZE4QCQuUhSyTXc3xr2vOZTYfXg SuAGpDzrSJ3W3Qt2gJcA6e56D3gavCVMG3tmP+7QX3YN2I+btLN2OWAND9/vaQObAP11fLd3DvgG fCtMGXA+vi3gfsB9+tEp/1zwizBhkCVsF7wuLBdcCjiD0GPgIGBcCF0jq8NYwflgIuD3G9eANwDj mrn3licAZ9/yPCBNavlM2CcYBU6Pwi6R/HbrfIBehS8AN4H3hS0CzqO9VxiisENAWhrxAvQtwjl1 823deeA7wNn02MAxAD3reU4YHCCN7tsKOL9+0sF+7nQgAcz769HFvx5a3C/TcNTJFW/2yJXqWizX KOsJuc50LZHr4stOk2uiNVeuSx0/y1Vptcl1m/UvuTaatXK94nhL00zrdk2b5vhD0+ZdZte0SleZ pq00b9Q0t9k4/PTmtEes0Zr2jPmCpp9hzdf0G81CTZ9mPavp2a5yTV9obtB0n/m6pofNdZr+StrF mv6quXH4xc7pB13LNP1Qxn1KP8V5stKvNzcffcWzxLpW6Ytdy5W+xPQovcpBx3rHo0oP2oNKb7Pe UXq7+YbSHzbzlL7HfqXS95v7hh//TD9g7Vf6764Vyoi2zlBGrPmUMs6w7lDGBMd2ZUx1fKiMW6xr lLHABdtZ7qpSxkr7BcpoIt/JeMn6RRlvO0cr4wMrThkfW+cffUdUzn8p02a9qMy4v72lzBPSxinz REehMida9yjzCtcaZV5p0jHV2qjM2VavMhdm/KTM5Q6PMlc75sOjYunYMvo9Zb7iaFXmXjOszLcd h5X5UaahzB/sqco8ZDZpxghzj2ZMcIQ140rXOs24wVqtGQ86/o+yjrF8yhpvb1LWRHujsq61m8q6 3opXVqbjHmXNn3Cpsryuecrqd20YfvE0a0vaJcra6mDGp/ZmZdsyL1J2gss9/Apq9grzaWWvts9Q 9p32VmXflzZe2c+Z7yp7r8ur7G9dPs1MMd/TzCnmWs1cZK3SzLdcfs380ezVrCR7WLNGpZmaNdkV OPqg6iz7NM3KcdUffVq136rUrK3mfuWcmuZQzlnWTOVMcwWVk+64VzmZzjeUM48sLqfA1aicSitW OV7rS+XcaaUrZ7fZrJz3zPeV8421TTl/Oj7W7NOcZ2u2ZX6g2UXWw5rdZ1+k2U/b2zT7eec5mv2P 0b9r9nuuJs2Z7WrWnEpXi+asd7VqzkNmueY8YiVozk7neZrzumOt5uz/28+a84XzWs1NtKZpbpL1 d81NtRo1d4SVpLlnp1nDb8LmnmPtUq7L/FC5AfMj5e42Dyj3H+ZK5b5hfqzcA1aUcv/teFG5X5A9 58VadypvtLVGeRebVcqbbL2uvGtc7cqb4bxIeYXWk8pbYO9UXqX1lPKqHX7lbXYx7V5z6/C7s3l7 JmxT3qtpcN3X0pzK+8h+ivI+cY5T3s9mqfIOm/co74hZrfxEC9Z7gfmJ8sc5flL+BFeX8q9zvqb8 6ZeNUX6Ba77ySx3vKn+xtUj5NY585d/miij/Putu5T9iLVb+P6125b9jvaH8d619yv/A1a15f3e0 ad50Rx9UevTHmrfQ3HT0IdyIvUvzNl52uuY9aD6ieS9ax2veO+a/NT/B+knzRzhu1PzJ5meaf4Or QPNvduzSfJd5oeYXuHo0v3j04aOP6LY6+c9G8xnNf9CxQ/MPmZdq/i+uPs3/w/xcBcdYF6jgUuug Cq6w3lTBlVaMCqZYk1Vwg/0FFdxoX6iCEvMLFSx3TFHBA9ZLKviH01TBq+aXKnht9CcqeN3RqYL/ pI1VwWEzpMKbzXwVFpsvqrDE8a0KS+0RFZaZQyqss65TYb3jFxW2mQ+o8DbHeyrc7HhZhbuclgp/ dORoQay9WwtGmF9rwWlOhxac7XRqwdXmrVpQar2rBYfMb7TgZ9etWjja/EoLc82DWpjnukMLC8xK LayyHtHCOnuvFgZcd2ph0LVJC5tdd2lhq7ldC/sd32nhk448LXzRmaiFH854VgsPuLaqKNX6TEX2 MXYV5ZvfqqjYdY+KSq3NKipz3auiqokjVVTruH34weGiLmueiiKOG1T0XNokFb1rP0FF71t/quhH s05FPzknq+gXy6ai35yvqui/ztNVLNcDKo53PKziBOtXFSdZL6s4xXpMxSdYy1V8qvWWikdbS1Wc 5qhXcZ7zchXPdz2o4mozouJN9j4VbzG/U/ELrodU/Iq9WMX7zHYVf25+r+IfrGKVRI25WCWG62GV jLSfpZI0V6FKxphelVxj3qeSXPMllay1Dqmk1pmkkibnlSrpsw+oZMB5hUput5+qkpede1Xynn2S SlPMPpVebB5S6WTXIyrNcz2q0sXmDyr1mLkq3Wz+R6VPOK9T6XOOfpXucexW6bvWhyr9yrFcpX9k jdGia80ftSgr6ywtyncEtajS+ZYWNZs1WtRq/qRF/a4dWrQ/9ictHj36XS0e4/hSi8+47Awt7rJO 1uInzAotiU+7VEtGmoe1ZILrSS2ZNHGBltztnKolB+yVWvKFVaKll5vbtLTU8YqWllmPaulqK01L 661ULf3U9YyW/mZVqyze9ZzKxqZdprKLHHtUVmYfUlmFi6Su2vyXygbs0Srb4/haZW+6XlDZfteL KvsmbbLK/jCPqPxY89fhd6PLx454QeWXm7+pPN26VeUzHA+qfI5rl8oXuF5W+QrXbpV3O29U+Xd2 h8p/nRjRslOdN2vZWVaOlk2d2KtlyxxLtOxeK0/LbxzxopbnOOZoeYHzFlJD+zla3mF3a/lDE7dp +WtOssc/zf8Ov1JdYZlPqOJSp0sVl7v2qPI053RVWtYRMkV7tSoDzjhVNjjuUOUr9hRV7rXfrsp/ m7+r8qD5kFZcYv6hFfnmn1pRMKZSK7Y51mnFU65XteIVZ7pWvJP1i1a878jQio/gmyu+y/qvVsbY 79DKZEeUVqbYN5KD2mPJQe13auUMa5NW5rpe08oXrYe0Kt71hladab9IqzLsG7RqgWufVpW63tSq CoehVV5rnVa12zdp1S5z1/Dz2qv2Zadp1X7rQq360Ppcqw5ZX2vVj9YyVaVZf1OV0/W2qiaZd6mq 2vWOqpqyL1bV7dnjVHWP2aGqLx2btPoSa7dWT7JqtTrXGqHVS0yfVq+3b9bqfY4Yrf7Cel+rv3Pc ov/L3JeHRXFlfZ+q3lilWQS1pavbakBsEaW7qkSJtiK4ELtBQLtxSSOCGy4RDYog7YI07UITo+Ce xIxJdMY0ahI0cUtiokGik2Res5llzGYymSyTmcnrQr3nVjVq8uSd73ue75+vu3517nLuveeee+65 93Y/T9WqQZwCVllHjLj/Yd42wRV8mHehUBJ8mPdsxnzf07tXPW1/H1YdEWbCqnb7B7DqJKeCmnC+ Bmr6cmqoGaZ/BmrcI/KhZrm1FmpquGflR33XbOc0UNPKjIKaI9ZVUHPa/iHUvJ6VigdqxgirC/hy WL1Tf0h+JPjqi3wZrP7U/hHUxgmleKpm0qF2NP8a1E7mh0NtvlAGtU5hDtTOn/pHPG7ra6C2yXoW av36w1B7RI9pP3EhUKfkf4C6UPvHUBfO/x3qIvkdUNeP2wZ1Ous5qBvL3YS6XKEc6mYYH4W6WVY8 pZcJFVBXxYVC3W79n6Buv/45qDuiPwJ1R+2fQF2ntQPqLlufhLprXBjUfc1jLTe4Wqj73jon+ARz Hb8X1gwQ5sIaM/8mrOG4cPmp5muyhYWwZhF/HdZsFiqhfpT9M6jPFxZBfWnWIKhfYN0E9Yv52VDv mfoR1D/Bj4b6I1wE1J+zIvN54WGof11YBvWXBAXUv83dgvp39QGo/1Q/AOo/4yKh/gZjg/pb/AdQ f9v6JnhA7wGPwtooP0PdE2O/Dp7e3CXwJPB/Aw9vvQieqXw6eEq4XuB5iIsCT6n1AHiWWC+DZykX DZ6Hs8zgqeK04FlufRY8j3Ax4Km27gHPGusV8DTy+8DTxLeAZwePLPuyBoPnWe4keE7yO8HzX/Yv wPMx3wlr1TwPa0OsF2BtqP1LWJtq/wrWFnKxsLaI64K1S7l3YK2Pi4O1z3O9YW0XFx982jtMi4Z1 Efavg89919lvwLr+1u2wjuGeh3VD9O2wLtP6BKyz2b+BdeOtf5IfDb9ui/4orGvn5sC68xxG39Yf g3XXhRpYz+qPw/op3FuwfoX+eVh/SlgD69/hymH9u/a/wfqPuI9g/Sf6ybD+Jy4BNkTwl2BDlP07 2GAQ6mDDAGaM/ND5DTOmjYcNNdaXYcM39u9hw89CPTQk6F+Ahmz+GWgosP8IDcVcH2iYOa0CGsrs P0HDBn43NDQKa6Hhsv0f0PAXri80fM43wsYY40HYmCaoYaPd/jNszOe2wsZZ3DOwcbb9n7DRZ/8X bPzQ6obGflw/aBSEDdA4UmiARhczFhrX6Tug8cC0P0LjKaERGt/WnwCvYqQKvCphI3h7Mdng5Tkd eMfa/w3eXO42ePOmnQdvISeCd7p1HnhnccXgLeMmgXcpnwreavsv4N3H9Qfve1wieH/m9NAUpj8Z fLR+f6ELmswcA00jOQM0jbH/NzQt4IzQtIQbAE1rBQqaNvLI3Mi3ys/hbzpk3QtNz+lfgqZTwmbw xQjvgy+RY8HHWNvAV8y3g28L/xj4tlv/AL7H+WHge4p7DXxn+CXg6+QzwPehsAV8H+tfBt/fuS9g k5L3wqa+3EuwScddhk2J1mbYNErYCpvG6E/Bpqn2m7CpRMC0GfbbsHmBXYTNu52ZsPlx/kXY/LT1 JGx+hquAzYety2HzG9xXsPlN3g6bb1u9sEXFmeRXBGyJ4pJgy1wHDVuW8hNgS5Xghy3VnA+27BRa YMsH+tOw5Rq3A7b8w3oItobqz8BWq7ANtk4SHoOtW/gfYWsLlwJbn+AGwtZL1pXQrHAooTlWfxaa U61HoTnd+ig0D+f/Dc3juGr5hQTNL3N/gebz/EBofn1kITS/xQWg+c/cU9D8Lv8KNN/Q4+0b/Tlo /pbfA83f8XXQ/L2wHZp/4PHA/i9HCDT/m/8amm8KrdB8h18OfuALwU/xE8GvsD4HfjXXDP5e3CDw R/E+8Gv5CvDH8R7w9+NXgD9RbwK/XmgDP8NPBr+BzwP/EL4I/MO4O+DP4I3g54Sd8hsO/Jl8CfjH 6IvBP9a6D/zjuUPgn8R3gz+PwyYn86+C387NBX++sAv8U7hU8BfyW8BfRIoVW8vB79Qji5ubAf4y 7mXwz+drwb+InwT+xXot+FfwNPir+bHgX8mPAX8N9yD4a/XrwF/PPwv+tcIe8K8XZoF/A7cG/I3C DvA3WUvB7xP2gv+Afhr4D/Jd4H/GEQn+Q1Y/+P/N7YeWoZwZWh7kfoaWyY5e0DKVGwwtTi4NWsq5 IdCyjBsKLVVcOrRUc29Dy5PcMGg5xFmg5TkuA1ra+Seg5ThnhZaTHAct5/TnoeUNvQZarvPV0HI7 awg8Kljr4dHp1oXw6A1HFGzjHFrYVj7SC9s2OaJh22ZuJWzbwV2FbU+41LDtiDULtl0TAvDYCEcM PFbN8bD9Ua4eth8euQe2v6R/Hba/LLTD9i5HLOwY5IiDHZOtTcH3VPj4YtjxGLcCdrRxAuw4YL0E O552xMOOo8Ix2PESj2nnrYthxxvcWdjxvvUq7PjA9QDs+JpzwI5v+JGw4wfrK9BqdGVDq0l/AVof 4IZDa7HxZvDlFy7hOLTO4C3Q6tZfhNZF+jeh9WG9AVqXJ/4TWt/hPND6cdZQaP0HNzv4powIbiS0 RVsfgbYY63Foi9VPhTaTvhPa5nLnoK2Ky4K2V7kHoO0Tvi+0/ZXbBG3fCi/Ib9Rou8NfhrZuPh52 KoQXYWeo0AE7wwQadkYkXoOdsdwC2Gl09JPfvLEzRzgBO/OEl2DnFX4+7BrKb4JdOdwo2PWQcAp2 lQunYdf3whnY3Uc4C7vTrKNg9xD9JdjNuQ7C7sncaNhdxF+D3U7OBrtb9V2w+xlHf9h9xJEIu084 9LD7dW4M7P6Qnwq7P+PGwu4fuWzY/ZP+LdgT4mBgj8lhgD0jHUbYM0E/EvZME3rBni8dLOzV6Atg b4jwKuydwI2DvZX8Fdh7xvUp7D3rMMHeVxxJsPcylwP7Wq1vwb791i7Y9wfhNdh3SH8Z9v2JyYV9 L/Efw74z/Oew75JwHvZ9qLfA/hAuF/aP5A/D/knCG7A/T5gB++1cMuyfK1yE/VuEENi/R38F9u/V Pws3ow134KbJeJLmXsvKpfkR3F56+AOOgdILSujZS4Wl9N48ro3e90CWgz7YT3gTACKgsB7wgAy4 gwbcE+OetTfgvgtwY4VYA7h2ADppwGkOaADkH7hl5Oe3Bshv4doh/00hAQqKhL5QsF3oBwXHuWtQ 8PHwGJiyzL4SCp9l9FBsEVgoftb6HhQftq+B4s8FE0w9YvfAtJ/53uAsMXwNrgK7j/wkch1KTls/ hunHuEXkd4x88utFBMx60zodZl23b4dZ/+KceHwXMvAczj1HzuFL8fRt34Wnb74ST9XWF/C8KeAR 8pz9CDkLLoO5CUYzORBexWMb/yk5tuGBK5JPIOevh/HkxB0mh6Zv8JRk/Rcei+ynoPKMdQEeizLG 47GIb8Mzj/UXWPzklAI839hfxbOMMJ4cWd4gf0H9hAcG+1u4wefeJXvi6biv5Y7hLpXPxH2o/RrZ GX5KdnzzcLMnLMANG+fGLZn9r7glE6pwNyYocQfEf4E7Ft4mvzdm3SnrItxwMIOg4QHrq/LLbBrf Zsbhui00gS+MT8HFkX+ILH9fkgXuFlnMOsjq9TWuXg4KVy/uCi4lDhUuIA41rhgODXp9vgn8A6yz g6+6Gcuj6y/m8oh/VaB/dYSi3xQOEL+5j7jMt9Bbcj+gE+Nmoqsx/oAOxtEbHYwQiR6Fm0+8ghW9 ApeJXoFJwsnPPQ5t3ztScLJa55LZeRJ2TuOeQCMXotCChdeJoYYSe9yH1kOjvnAOS+9CikJbsVeh mVgriEmsxZG3t+Cwcovl1xPhYI7EIRTicLi4ZagY+7dE3jAi71NE3v3YuiMBm3PosDo1Vmd0Y3Vc AalkCWH7A2F7nLD1QQ4KM0F6Vw/mLyX5B0n+E5JcGHuaxJ7siT2DMUeEVAxjz/YEDvUEDvcE/tgT +FNP4Egw4AgHUNJWjK0BG6hgFAyAQZAGY2Ac5MJEmAz5UATzYSmsgBp4HJ41KAzRhizjANNTpsOm gOkF0wnTS6bTpldM500XTe+ZPjF9broxFCwPW5oszZY2yz5Lu+WY5RXLa5ZLlnct791SdmeItBgm GkWTmCymimniUNEqThTzxWKxRBRRDkOw/ez72i+FhTirV0rt0wYttm807TEdNP3JdMzUcV/7V0wf mD4zfSW177Vsteyw7LEEftU+YPuU1D57X/tjxDxxiugURfH6f/iWiT9KRoEO6FY8+eI4PXffd7X8 fXv1zS//VvPNQIBvEgC+PXTTf+Pnvw3+9tGbXuzcH7DM64p//+r7o/wlbwz7P3xmgRvv7mBsxn/k zUVM+FUKOkwc1f/9c4NeTbeBllkFXzIXmTeZzoHlzFymhJnBuJmHTH4cgSpTi+lRegMzEaTpoTw7 /bZUco40boC2I78DbVAQ5E/HtCC0iDFBmBDZQWmSg7ISpCImBjEYMTmIoYj8ICyIoiAERClifrCu hYilQN7oQ1YBQJsFKEasRJAndUxHPB4EkfPZIHah+LQMuIFUIYNejVQrAzUDhmgZpC+GLBnpBQBG owzUHBgHyIAvsZt7EE9h+lGkBxE4IZmXkeI0NAUw/CrSY4jnMXwR6QsyBpYj7UCcwPBcpC/JGLgA 6WkZAxchfUXGQFz2TOdlDFyO9KKMgdhv0xXEexjOQ/oB4hMMo05MnyE+xzBakekrBPZ74GxZ1QSk 75aHZQyZhhSt19Ik68iyFdEMkIiyWnbIYFBOS6sMpgRpmwwG67egHizoWxOxr5aADMaNtF0G8xDS YzKYmUhfkTFkCtLXZCSiPiyXZDC/IH1XBlOB9D0ZQ7DOWyAD7RVu4Yy6Rcu2cAvH85YS01sAfYAM /VUAkZJBb0BKy0D7BjFMBo36E40yFOiiRRaB9qvohzRZhgK3H2KqDAXOAzFNhgL5xKEyFClIrTIU ZqQ4D0RsR4FyiDg2Itq2Au1JxD6LOD4KnB+iE4G6VEwE6ketBEiJRxqDiMVwH6S9JUCKDmkfCZCi R9pfAqQMQMpIgJQkpKwESElFOlQCDGpFmoHAuTVoJ1JOAgzag3S4BBi0H2mWBBh0AOloCTDoINJs CTDoENJ8CZDahHQKohDDm5AWS4DUrUidEiC1BekMCZC6HelDEiC1DWmZBEglMiyVAGmvIl2GqMLw eaQrJEDaBaQrJUBaJ9JaCZB2GWm9BEh7G+l6CZD2X7ZJTa7kpMaNDRvWr1vrqV9TV7u6ZtXK6kdW LK9a9vDSJYsXVS5cMH/e3IryOWWzS90PzZo5Y3qJ1zltanFRYUG+wz75wbxJEyeMzx3IaMNCB1Pt 4WHZbHZ5WNpgaA8Lx2B42mAqoM4OaKTEgMNsCNgKnMa8Kc6ccTqj0aVjjQFbQJmUQ1A6x1fWk+HC KrAUlsUq8grZvIISpyHH55YyMaXoVzE5f/jdvGAoQGcXOQO5ZozdFx8vxe9GJ/wme2JPNmsIQL7P N6cdFEmYbtO1U1JAlb3JhT1xsYHZZtbIOsuRtz0EIoxF7mwMRfSEKMN4rNHQoYXZiLJpbAcVDJU4 AwZ3hWsCcgOdFJCuwg7g2JVy2B0wlBkMAXUSOzvf6TMGKDerC8anOFFjVKnOZ2SNBperQzzXn3Cz RqyLhrHtLOUtaLdR3sIS5wninL1FzqM0RWe7x7raTZjnPIHT0ial0iSVJJKIgUQgj8KROUqHSPy6 EzYAj5SrlBKkeBn2QkoL6UmjoKyDltO0ckPJUkM23JuVdSjlHFsPtxLTQuQ0j5QmfVAPqHtbmMoW Ygu1RdCRNGqbJB3FlJPolUIpOBZBRVK6diw1RUruoDztoTadzOFBDpssobf4XtPFJc5jEYDFpDs2 NJZ80gbntNN2M3vPHgucqPacdspudks2qUjKMaA1BmyFTsLp1qFFjksbTCzC4GTLdayrPS7OtzQH a2DbS9XJbrNPNgxiDqx2BBqTImliGZvrJhxo3HhNxKSyqQZ3YLbbjEGDNteXS8aulHBDfDutSGqn lEnUKBiFfVdHBMLY8rGBcHbs3ZzRMFrOUZMcDTs2QMXLmsthcwx95vvK2NloJ7Z851xdhasU6w7Y 2NKAkh2ra1fCWLTqPhR2Iqcd7GbsTR5aisOcPx2nEum5wecbZ2i3KZNLy0pJfJwRNeELZrHjxrnu K5Fj8AVspWVu5MhxScw4XzAxhy01zEGVYndRV4UsBktKSJmiEqcvYg47h0WF2my+Uuy2zlDm0vlc ZZKCsTyKBmmDVfd8SNCF0GRmJpVV4K3DALPd7Gw5gcyh36bN/W1CBXLdn8ZOIs1JlJKobxKbMwc5 CErnBBRoXEbDHJdsH5Avze7/lYm6j8mAYypV7tOO7IlRwRhG8PIF5v46Ou9uNJfAjVobIttKQJlM bM1pDCzQBSpd5rsspQHPbIPPoGVHsOQmFR5P4A6oMOApKyUuRE1sDxMmYYLBORutFyvMdft6LA6L KZPvthRYbP5Vlej4qCJsmk4i3Ql48g1ul8HtxlScKkadIaBCaqgoJcZFnGO+3J989NBISn2FWBZc 2KguoEE/XVFazhrRp2KayyVrn8ioROmg0BkAnc/H+gIUipiUi8xYfXJAnTyRELyWmtnSchxE0p6h tFwqm4viStohtelyWKMLWegkSZeoOPRGs8mtzIfWGJiJs02VFO2L8Rkyfc6TMBPdojK5bKobnTee oHIN0lCXoiUTJUwkMRdWJDOGJhFGLC9dyYFF5vaZmqR7KdK1xCwzh0i1omRTnIH8HhaNdGHgYXOA ThiOmaTz1BRcA5TSQBHlqZImonptaFU6UtoQoIucweGRyk8kRXU9AyYXwxTJdZLFy9gjb7gsr9yo WroipCs0KRCShAMdUKIMcraGdOeeEWAYhZbLKCRx5Q5gGJsyBHOkjriDEWVSudQnedEyEG+Jy3kp S6DrEM/m46rpZglcLtJ8iNQQKSFV7ZMrJupSk8zfU0WwJfkKJ9dEqQv3J4dJl0aSmeTJXVL9WvFB 7Z0Qz4KsOWPwQ2yG9LIxOCuD865cF5jnMs+RS6mDHtyAHhU9d1mBtCeYjrOBNWrQj2H3cVYZAoVm XDOkvjXKWp0kewdilVQuC7loQ8EAxEMA2AkUuQFOLXZCgMbo3RB7lAYqhB1OSCg7vJ2mNOjtiTPS Rkago/eVuefIyylqGYbrssgGRi0NdKg0to8Q11TkVOmULslkkgPV5qAVy/dHzHfzq8mc1PRoMoTk +e5mqqTqqmXbSA7eHzGH/G4pX8j/XWMhwdEMhEp5xBslh/znphTyAE2Sh2sSLdc8SfYTmJpc5vMR 19Y+sxeZoRHJ0Zgeg6JlopCZQSlRN7UoSj5pOkRKkaI43TREHHnYksIxQ4u852TTDsdMLUpzTidz 4XVCFOERcw+3rASUOyxJtvNgdrC0bJ3VZheGcgncyJJLEJxJ4cFZGvEbrx+sXh7T0F9nsncrIws9 e7dGEmunInCnqtSpsMVkgxbVNULSZzKKinHfiHZKkxxkUBEGOmmEzxfe4/+J+8cTtw2kLSC4fL9N CNTheOBYR/5+TshvUyOl5OAoR96lJDE4HcKyA+HZZP9C1qZQYgBDcHzrzgd9jrSduE8xUhKZiven 9iG61/S4hCXmnrI9equQpnSw7G9Si5x1mEo0dZ6sJAEKqSrZSKAjqpNaIza+xBzcrNaR0V0nVbfO bDDMx31WNoW7LVwo55OlykC4Q5IlJ+fDDc/80lLJD0mHjT64l5pCdri4T2e1BioLsuQjCxs8DeAa oExyZukyXbj77xBv9HfJrorGRR5R5DMYtNGY5TPE4HEg0CCpN5jHSmm4iquTg1ykBw04OWU+OhvX H6fk/HS5uEX1+XJZQ67P7SvtED2ziRH42iMicHfrllSEdXWIJzfpArmbXQGtex41gux2csh2ZEpe ILZgulNakueVyvNzNGvETkYTd+TBpvIDFDlXoa9ktQFDv4s6n/Y7spPsOeilAZyidJQWMoChBlK9 bDE65obl6+Kvqc7iryydxV92iswpqg8yiMjQm4qx9fIwn1k+Lb58SWTewswxYVQc5g7B3FgqBoqR xmA1gycwH1o+KO7Cai5hNbpOc+f0zk2duztVeZ2rMfBS57edqvDOkZ0fdio8p6loPMY4sBqKisLC YjHz+YTrxenXqY8t14rfp64Wv2e5WvwmdaH4ouVCcfgF3YW8C9MvbLqw+4K6J9B54cML6t14o+sz tcyazD5M3YhtTO0IkVk94jBTk7mNWZUpMiuHi0y1EMU8IojMCqGLWc6LTBW/jVnGeZiHOZFZahWZ JdbDzGKLyCxKNzOVGYeZhRkisyBdZOYPFZl5w0Rm7hCRqUjzMOVpIjMn7TBTlpbMzB4sMqXmLsZt FpmHzIeZWanLmJmpIjNjkMhMHzSXKRkoMq7kuYwzWWSmJXcxUzFcnOJhilJEpjCli5mSJDIFJpHJ ZycxDtZju8LYWZGZzDqYBweITJ5xGDPJKDITjYeZCca5zHjjJCbXMJXJMRxmxhlEJps5zIxlcCiY LsamF5nRiR5mVKLIPJC4jclKzGFG9heZEZk8w1sZhrM6mIx0DzNs6DJmaDrPDErtYlKSrUyySdd3 RpKOYUz9IhhW2a/vjAF9oxljX5ExJPWJn8H02cboFQnxMxLjRaZ/vI7RZfRNmd6Hjxem9yOhBBLq 3Tcrfm1JrC2mOFrUFsd4tV5DJDssN3JARHGH+KktVIUR1QBlcUQHNfy42BThVXZQQ22RYpPSawhP HZYbPjBMZtRgRDNQXdyrgxqBjL28YR0Uj4Ewr7qDyjie0aT2Qgc1mBQFryEUqw0dECIXVWBEMYAu xuOpFUuEeOkOasgxsYn2jomihoOXGooYgeARGYjBCCtiyPNehc2mok5Qfigy53VoRJxdIfnTA5Q3 kFRI7niWCqi9ASgume5sp6itroYtWyBxbF7AX+g8qgAM4vaazi5wtisVW11g/u2XXOQD91334nKI BKj7vlLS3QChVLCIHOgpGYzdjd6fCL+J/5aLfKqWr5Ap8sCKKjlKBTmpYAFC+wCoE/FLQ6LqBuiU adAX0sTriK8QX3Sf7D6ppqXf4snv7OuhEZbjtx7K8evG2ApYhLF6eBnmwhnIxjw3TIUG8MBSKhSW U2GwFGZCEVRDF9jBhbEuSIMSqES+lcjVCM1YxzyspQpraYBN8DDGV2H4MayzBFshOaTm6VhiHizG FmpgHbbxCPJsxNILYAmswLZcEmcNtlgEszBcDXXgxdZyIQ+cUArzke9N+DMVj+1PQ5kqYCHyN8Ae +P/so/obxMJK1S7oAytUu1RHf52rBEw/BoDjA/ffu1PFf2LZXRB5+4h44/9dihCZeFDHS+EFaWRW wQYct+kYP4OaWwwPok5rf6dolUzUSYgwlOknlHokJiTdQzfplQq6RIvGov4MFKCGUIiAKIg4pgQN BemW9Iyhw2KN0UbKSFHRFGUMVXSpK/57l6rj5i90A/3Gnbo7mSrlnfo7HN1wZ7X6s1+maMbd/up2 izoD79sVCXcyFTry8/n9/32p2+kC89BhQ8m/nH+HNOoEWrYCNBBnC6VphVqzolKtgPR0c3Rm+tBh lIJVxPZmOeqQqTzpVKeavtWltNz8+eJFUnqbMow+EiwdcUxNaxREYotcyoigLOYpLK0z5yep6e4Q 6hcClGU9CvUglouGdFsfdXhk2JJKZSSlpaPCI7VRUdrIcGV0KOalxyRkpuMn2kK+5mip4qQElUqT FMvGqlKSkgSVgk5Ppehx3e9QaeO6b5u3pHZ351Jp3e/kUnQqtnnudHVd/fLXuk9RY84ur6+rPkuN xvafoofRV+mnUO7w4wp6eSWKjQqhehs5+uqdLvqpqirSuyJIU15DKTU4HowtOkppq4yK0tDqkHBN hK1SQ8Noc8ZoS0ymVJaSOkxRiuQUVq1R0D9Q3zXvu9P1ZCP1d8pRm22N5UetVtM3zdR33bGqv9xu oBo6z114pXsVStMMWlUvdSLowGiLoag+kZHaPgpbZR+FNtxWqQ3FZkabsRV5ODS0cYBGHa1NiLcY YhNooyElOVor8JaMhHgV3TC1+61P1lbvrD9DjS1a7+ku775+eM/Fg/98d2uNsj6VmnIu0P1p94vH t1POYd1zvvwzNZnyXD1atxD7il5OVYF9DcM519sWAdgy0GHYzbAQqX1ihIaE+GitRm00xkYbDQIf rTV+RZ2k5r148KvT3a93uxtxGzVol//OaTV9+eXuZ7pXvv6Uavat6CMHqMH0MmKB2IayFtsIBZ0t SqG2VSoUoSEhobStMpTocnRQk73R2hFstLL29k+0/c7RRjW94s5PK+6wqr/ItVCLJZsLO6agaRRv NBZCdmpxI1EwMslc6mXIpQO9LZqOCVHFRtoqdbF0aAK2JnXJQgZPLhnLqhUUS5GR6x2LcQsVn2CJ ESj1srV0gn5Jd+BI9/MTx8dTitXXqXH52b2rDNQE0pTij9TJiu7jtx9UHL/yV3N6977bU3FonZ+/ TU1zKY7IWlW+hlJEoFaxz73CbJW9ekFECEQS9d7rs6Tb3nEaNYv9JtqVdPsZFbl2cav3RvfRxkYq l1rf3aSmV83tuLKk7E65as6dg9QwKpX01Y2tPC3ZaYwtVBlCa9R3rVNWJxtt5JRPdzON3UZU5c3H VeTttjT6sjjFG8pc1FEyDLMxESZ7ZUR4XP/JlYa4oXF0WJxOFxemoEPC6L72SlojSSvNx5myPcSg mNFxCWxyipodkJLMaZN4gbOmJLMDNCq1Rt07Dk00QwjMoARqYd/qyLDGbw9MnUiVNHbZhtd8NIqO 2LX/X7ZM91texWhK0/3H7tau5pGrumY5aqn4EQlhwqOZGW+9ptBnnJzDD/uYSNsFccq+OEu0kAip tgScaZGRUQotFRWm6O+oVGjC4xyV4eGSsY4eHX13vkRLU6M32i0KqcGxjiZS8bKg1IM1Z84sLfcu O/hKVYK7vuqZ5sLJMybXvKBOvLP0xH7/l92/tK45c1D1w+3vuke9sabq1NVlD6G+id5ekfR233y1 V/bRaMPtldrw38xXoo8eZeB8lTQlz1fFyTqhq3XKhFn5698TatzdV9+tnt/0yPOtFTMVxqS/epad +mh52Zep3R8eaP6CUm/3FOWhFjZh21fvaSEqKlKhoCO1FB0WGeuojNSodI5K1e9ogeWCgyQ1HR19 v1SKq6uXvXquat76RQfPVle+uDV/YllB3TMPqxNvave9eGDbV5Rm2+pjtO/2d121S19+f3npG0E5 vkcdxAMDg2z9GMpemc6MZmgNo2HCYnT2yhhNmMpeGdajjUxiNiiI8fcU0TslWTIb9Jvf3+k7b1rj tZzqBd2Xr9Yu3lJ9tHPlwvpeJZNX+qY+GE6zV5e7P0rr/u6A/3NK2erZu/n90UdnOBbO3E7mwYOQ Ru9E3fTGcYmLDIuj8ivjcFziqHBtlL0yRKsGadKbzaPvjUtvS28W5wfLWTitMYPeGTM4w5Vs/Omn +tOnKe0Qddy80CEDi69V3K5Q7Kr4jIpCr1PRfVIZpjwEFtyLTQGrTT8wK3xyZaxpnCIrq/8QFS60 Q6yTK4cO0fSfNLmyfy/Z1VjSuzLIaCRkmjNI46Sv8oQfkCINQwJePQnJnFXgBXKXQqghXuBV98ZL Ml7Fr2IpyrCwKZZUc+XK8l0z7BWDzesuXsnP8nqufrFq7mh+xp6ta2vnbquaMnLS2O7lVRPGFo4r Xz5+bNG4Ty4sdLa8UOoYkeVXHloRHzNoWtsfZjkMmWOEuNjIuPjxnLvRPsGevXDyA5x+wPLy0pkH nywtSC8coD89aVzlqpzhE7MX1OZk3m4W1sxMTx45bNK4AWwUGQnc2yqu4UhEQ6ItiqK0imgqVBum iMjHeSopRDLNe7MTR8CKw0Gc+INHXvM5cteeDjxZj7Nw6jvTJq++8z/MfQlcU1f69j333iQkbNnY DIgsIYQQQhIghDXse1hEVEQWRRG8LoDIYAqI1DrWWkt1rFpraWut43S6KNrWDW2p1jLWto5//9Yu X7eZrta2Mx2HkjPfOTdhlQrYzu/7fjRAheSe933Ped/nfZ73Bi752qdXrBrOTZwHnkP5v45zgcUc KN/xuIUMj+KSAlQH+lT2fI7xSm77Yydp9SACimBvb+/Qqm6hVTmimuBC044CAc/RAThyKR56sn7U ceGTAQAvRi8C1DW4E2zeBl+42N4OfqDVsNXaSSqvwGc5N3/+nvS1vSrIRa/K1iPArsNej3Lb8RHC q2Z/i+uDzos/EWAS8xCO8+d6uvoJxJSsgOFjp7DlSI/rAS5KbqxfPMZ4h8sb/Q1I7z6+OjfZae+Z Tbmp7SfmzMuOae+ZU5IX30qrT19NjZl7ZW5eq9UBeS45eoFVg74mGiqsGgSbh+KDViNCVckFxUfE HRceW3TcbotO5rNvbjGj6BzubseXGbrEFfaFbVnhe/S6CC+xKEJoZgiegyc6fI52FAFGkjF7/D3G bWsy8WILs2Xtkbd/V3f/2p5dhZllBZ0oRZYV0OlPdn0CB3Z27H/oU5wNl62vP43yY0fDmWv477ih +oDOpRe6Ns6MCpM7ssrZ2VHIdXWZoDwM50W30dVBNL46ZLa8ehZVh/pnele2jxQHWr3/lL02nLB+ zWmEH7DF4fT/rqm0+5bch9bhTLibBGiLOSAPcPEOSxza9Dx7CPUidK7JfQKmrCS0tSVuaTGd3r6w ZJv1IE3An3bnJuBXa0IefRC9mgohZS8AnCgnrxAPD38vf2kISm0hPCmqzVKbWSIju4HFxqHLDOf4 keQyS2EYyRk467IJZhbVaIk5syYxKircUnQ6I2lFzYuwv8KSevXB1Igo/ZaioymGJeVPADeqWPWK PjStRCmXiUMzk5q3FplvaV5L0mVXhCh8Jcqc+OUdORl41QWElNzL2YtQT4BJQoj4fCdahPYCEHGd eBhk2PEXWqewDx8WjPekaF14hSKcjEWgHZAQ7kpO4ZsKIXzhBc5e2LXUuvSo6zJHQJBHloIifJ3z yDvXUK/uhvcxKoRuTigR8IQFDI+9BAvO7dXPvuWQ0/GFogwi6polbUV59f352R19FYvmRONc8dqK 2IjZuevJAav6SlpcKXkRXcOMzspedA0p4XJU6sKlnNhkoWezBAL7CP3wMO7XS9w9DBKqHZ4Aix76 1FEiErjJP9gCyuCxh/pl/rFnUeoQW2+ARWIfb9dZMXAf6QJ+gCdDw5eAWLZ2weNUN7rKDGKWSQJc XKU0Z4aQyxGgau5QwHBwGUEuQ/gLtxo2YxRsJA0G9tJ6tJXQ5btha1JVQYteKTBoymMjQyVw++YP pUqBq7uHA3LUz/0vZ8U7rHKKj2zWUjesTHyXKiNjBrkNr6Ac2ZmNVsDHJ5fvYGb4XA5pZjiCoZPr BlCYIoFfJBVrPUwutErJXOtlWl0yeLy6lEquxhN/qALTAWwF9kKnUG/y9fEuZHx8hFIvrucdC7Kt IKh+qS4PJXVyv1itmy/3+/779gsXUH0GL7bvO3VbkYZCNutvOn0a5wW8Jtq+piCThxeYbCW/tAiM oydYwG2XZ1M+RWwmxNztbFeHkUKYydtR2IB6ugbG0Rl4egLU43oHx61mgr0jVjPeqP9E/bat21Wp fgE22rCAO06htuNs29N2vBDlMcvWF9p6M0UQ/SMT/2RbXsaCHOZIxPLZ8D8vM1VttfvuLTXDE5d7 nl9aV7f0+Z7Ll488v7S2Fn33LnzjrcOfvQ5cQfSlI387T93yOdtQ+8xpZv75ADjQ1Xnp5n2r81PB YfSko5ff7Rl60uWj6IWy/34e/gDPvXXk8/Po6YZ3erDfW8mvuRa2K5ETcpN0hoAWiXxXMyJnKUnx uPWMXMYjNHq9ykOnUQn7dBgW2b2NHW3ATXQApQiQ2grQyB4n3/1n3U8cWE17BYv2bNwV50mTlS/v EMrdHCQuTju4ZLE1nnytePAr8M/r243WQZL+C2elUQMdKXcoiHh0Vl50CPgJrQ/s+s/H5BKuahTz waObGN5Y5oNCO4Ccr6gJEF68yFX93EJvGujoZ88rcKCOobMhQp2Tl6PQiXBdxfAJBCVIIYG6UooQ 0rQLfRuFoWM5DExb6EcTGeAU3GYGaao9apCdAx8Aa/LhcfUeFTxVQDk82/4dOAdjfux49lD7DWgE 52+24wxLfkC9QBlZBoOg8F+ltfWRbn4FVOVgN2UswzFIR2f6BBsDCWYwHAgT4+CAwJKDC+WK2u+x DAbKYnoQQMn92KyG/M/lgaj6dlB3ACzZuAJ2gup8p0Avkcgx0ENM+kAh58qACtxcBpZFP9NSGPVn /FdIAdFMCKn9aNdLbL2R2NHRRcwxMWLKhY963/FcBob9uNfVsUwG+mYW1d0hS4pdDK8B5V+DO7Lh RVgAngPRtMXvlYIs63JrHZingosomuJj+zqRffuQfVyEODDe4OG2mutgYrijWAv0sn4SkX4WPhMB nUAJfrD+CH/o7ALra+Y9yyWtXlYxZ+nPfLIDlD/SgW04hl61axo8BdVlPQguQ3Unl6y3flFvlWOe ApxEOCBpIp6CTNo4wlMsRdfaPcRTSB0cPPjIWyI+CZxNDBjNU8gDKFIRILEdBYlebJDobcwFChOZ 98eNfkJf7qprHU5+PgrulquN3JkCVxe+mvoB8GqhZTCAc2VQXg4HgEFFfTCgoj4Cncnty03Yh3vQ Cg6xHIXHJByFzg4iAjBHMQyT9oCWt5eXra8/+mVHx+dd5vTizDYuua6u582GautizlLr/gWFGx/N S0G2lqErPT0ZT0E9DfduhN3IlQN7OdX17P0ihJhqQxgIdZrotHn7+tIuLk6056w8xtOTdhLQPmaG 5gmDh3tvdsHDYF4SZW8yJ+cq9oasLu88WpDl1eTEa/5oV0EKSN7YE6eveysOfHqo6ePYiJLee6j4 LakxZbOfwXyFalN/mbkVeMa4CYwPx+nf7uPN0J5aHB3+Pl71PoRNukc6dYriuLoSHAAIAduj89h+ /bZO3YBR4WjGQjIKkPL2WSoPH1latm7J3sNlHl4Lnl6XnTo3s/bRJWrOTeuao/u2fQV/3G55pRv4 9retOfXX5qo3kNe70Dq2Ie95/Rq2Yha1uSW6Z1N2ypystcdjmkvht30rKtuYPwIp5ev3SUdj73tN 1X+Tw2vdD/4dOG9vxfbXoesyI/YjMI5sd3RB9jtKzYwjj4Xlt9kvH8tT6EXUaKqC/Gdlz+Ga8ubF j760wGKp29memVSSzuzHgLzra+D0cMsr5EMDQuAL3nizraH3/aZKdvdIqR12piLY5MHjCcSYrfCd kKaw7Zsp8BQ7rGUL81r6kpuWwi/P11d3rDh4kqlqdSpKY9blpTmQ8vfWVL2nhN92b/sCCHa07r3/ /aQjC/PrKnbiM/8BOgdlLCIJNEkBcJE6CmxghO/ibGa4LkNgJHEUkHdzs+UajEVYHECVuUQlHgQC +JPl2rWizPYcrnip45Gr1YPV1N7qaw9lJmI8VoBQ5cv0IUJNxCMcFGaaERjFz2NEsxKoqKgZIYAg QsLyUBORmjcDAcxvEzFNMZaluCNHMYahmISfoI45dBStaKx6YF56qTKk+URvdsz65guXGxb37+ls bqzcvKSgCn5bm5JgNs1nTHG5CW+crJ694Yn5WRGGDfShptyyvQcrCwKMkeFSNxexe6ax5j5zVn4K 83iap2Xx3IUHD1QVqradzklnLBkxWWkr29OjBx+JXV+mUcRpM7LlQc7Y63uR15ezXmc5CSnHDThK BRwXhK7HcxKG2/tu4JFVUVy0PiOx9UDBnLxEC9fHWlxr1BfntFlp8vzH8dHlVhXLT4AnUd4vm5yf IONaHzs+lp84jlZ4mOUn5CYJJicAnccAcDtJYd+ko2mKLvgsaNoE+45bLKAf9Rot1k1kwCWWpvgn KUOvDl5D6zJNxFOQptYRngLXo8fQaQm08xQBgQi5BwjEHJ98hs8Zz1NI3Gy+Qg8R9pb9dIz99ppf TLh+JzfDcrBFLFLowpTuzVJhsFYd7NZMqw9URqjOn4dfDkLyyoawkOTYhVYVeXmjJjg5doFVaWMr 2MihNbnZ2AqpG5cNXP5w4IbYioniJsmuKilk42YuyU2y0Orjy4w6W9gufJwQvZC9CDncZ/8K5oI6 u7zinrpnXl1eYan74/0ZCQXpzb/PTChMp9Mff/AL+I/tbY8/+BXKUa1LO1af+bCxekPD2fcbWOZi Dzqle9G1xejaLHMhdnV1FnNFLpyZbKFwH1UoRjEXhjtyFyJdcUbe4eoFv1uy71iJxVL1aGt2WlFq 3VO0+slynWrv1m/gD9vvsfEXH8Ooc+1Np/53TRXeJ6nI20VoNY6Yv3Bw4HAJHpfLGcNfzKKG2Auq SABvtLQ0p9cspNNb4EnrfpqAt7pTWO6iA/m0/r/PXZQ0G59j4vS6sJUFR9ISli16Gl4va0k8vyFZ p9esz/tzUmRl6R7ApUoURyJDU+aEBM0Qh2alrN0yO++WqjdJl7kgJNjfTZmTwKzPZrmLdxDayOXs QbsNcxcSzF1IxGYGSCbnLliCAbMXpAfwhF90z03gzs7vTE/s7+fsgdurrctOuC51zktrJp+rBsX4 WruQh2pQz23n4QhXBy5h4+FG8xdDNdHOXaAv5M1tveszk1sPHthsUZ+8UpzXRg5YDR9dJq8Msidm BYrhTvS6EsLlqMSZSzmO5yzslIUH5gyaYD8o2XJNIBEJDJc2gUz46gNnjCLVMZRF3Kxfg0pXPx/X MthNCsFN+HqVZx4w4DyB9uw2lq9AfYWbVMqyFZipEJhH2Aobl3kHumIb7IorN68VJzsY5KXGKKUY 7u/8m4tMQIud+B/R6p/P9WTFOdQ6x0Y3R1I3rbGhK5zT1TLyNXtOWDw1tqLYepmMsxpJtfUHG1tR Rpmq0bmjUAdIT6kDpCfoACk1eYm+TCVPoCHTl2EplYw1ZIBg/0+cAY7M1icSfNQpUq4NDNsn8nGf yJ+gT8RdovB1tk8EqE8EuE8EqE8ECuoCTJwHOmN74kHnPJgIzs6DrfE9sbC9lHI4tRteB5/AmUD+ yKnTe4Ac+oKP4fU9qCKhusJNuUsdmy6Zso4N+gkhN/s30LG5CXetY4NbyNbmO+rYYAIdG9yaupAN SD2h5rwxjf6Q88YEOjaF+kM6ZaL+kE4Z0bGBEdnT96t17L5fp2OTWrQKlyno2GACHZvUTk3IBuA6 uor/ZP0h13+8jk2WE1JO97CO7S2TkQKBA4mFbKl0WL62qdsT9Idgajo2ufk3EbJJchta7fXfWMem XO5CxyZXoJUc+g10bM6T09axyUh07Y7fWMfmdExbxyaL0DqO/dbdIefY3avYJOofOCqWQbN1h2JH gRhFRTzV7lDop+OoxJEJh4AQ3my/fh3IYjBF/efrIyI2QZGR8Djn2igV24dVsQMlcanowzvMrmKP FrHtzSGqUujTf0nF5lz7/0jFJreiSDx2Vyo25TSJik2hKNPlk3eJtGm8ik12oVWdnKaKzXlsEhWb OovWM2F3iFYw3B2CMpShn/1NVewrd69ik63IE1vvQsUmb91RxSZzUU44/Kt6QZq4SxWb7ELn8oPf VMWmnO5CxaYikW+Hu8BJVGwxp0iwdcVybWtLI53eXlK8y6ZggwAUo3rky/vZHpCtMaj/u735m6DG TNr1cVb9poo1eQytM/FXKdY0CWbCT57MKXDIWwD/cfHihIo12YKus+UuFWvOlikp1iQ6paiuT1Gx 5my9O8WaLEY79eCEHWD+1DtAzsG7FKwBuRlZ2TSlDpCzdGK9miR6CDWvBO3OICKP0Jl88oI4wbww Cvi6zohKyuXIpbHpFMe3keGHhlMcQuPBipUeemGfh07YpxshYUYSzIQEmN/Ufg3IZfoQ9VYqZmVx UGCTSCgPCQp0bRS5yoMVcucmGv9Ug37KlAQFNqOfBqOfNolcApUKuUsjre5eqAvp7U1P3WYlyMv3 alRJcQutSvKd32uUyQmlmOS67Rfiy8b+AvJHByHm5bJaQRxhMHmHy2OFcZ6+MsoZOANPoWMjI4wM 8aQaGT8fT1a71elwp4wgAXKHsM+u4o5DiiNwjeM2KVdI+bYE7W6Kj0yOq33GvznnX0fLC1dVPnIL rMreuNvVvLHH4i7RGMNVni3u0jCjJsSzBcsPnfW9HzQsxfLDE1u+Bk7b27wOnj17Fv4dG7pRE5Ic W2VV2wyNWWRV49pBYq6Vl8FW0TBCb5KFObqKnL1dFY2MxFVAu7rSAsqB8vBX0yjxaVDIbd05bs37 bKHHR8leXP2mYJYefgA0HQPbLBbQBLpzOm3GuEntxkg0Bg36ik7cCut20uU4W5ghKT7Q29tr40ax HXGVmBvFdiCLVNgOmngZHucdRjhOSyQRBUQjkW1SOjuGNRbXlDXEONYzJUVVumKmkZkXWtyQHFNU XFwUk9zAIbwz6xlvguU5bLQDMg1Hkx2y1+NgXpwSvpseugOTO4p3WJCl9AtaXDNv09y4OUHy1T3d yZFrlr94vLb0yMOWVXXzOxYl6xOj4eHqmMg04+zF0RHJhpe7S7PqH8hNCg2rHXglpWOHU2bHoRaJ KCQqLNizxU2sjFAr3VroQ40SYXDpvoPlBf4J0VFSiYu7W0Z05aa8DHNK7aPpPpal8xYcerqqQFU0 y+dkTuqKVgwLV7ZhWBi/bmG4wqjNzQoIdKIujA0JDgR5eVP4cEho4gKKSCfaWRoikTATpUSmKQRF pDQ0aH50UUk0iknB7HomNBzFxhRdEEoQoQXRphLuXO90FJK5o0OiUalQNNiTdVfxmCQao+Ahr9Mh V6tULW8s3zIno0ypan75RI6xbe25txsXX3pyy7qGis11qdXwxpKk+Jz4+bVYnnn1ZHX+hifmZkVE dVjb4QtgxRb4Fyw9XKCfbXIThZTuPlRpnmWI1UqlLlJpdvQim1yzO9PznkWlC559elGhuutMTlpd e7oxO3U18vXg9pjWKgy+c9MDAl2p87DJuoX0vQifswNUAv8RTjFvI5ubEDYxeSicZYBNS3Kcl0KE Pjgv6XBaUunwg01LmE27k6p5x+nsVyzRpx/KSy/Nbf1LhKUKfvZWQ3Vn/QvAh/ZsNZzsMqeX5rW9 YbBUws8uNSzuXP3iQ4vmU77yz9obzlxvYtvd/Q9+Dng718Nr6B/rz9p7YPyPDqgHzkUY63XSQCdQ +K4fhxcBiUKPloriQSe0tJAGcAh1CQT9JIfgXvnl+2uovVHxSpLQJ6i4V6wXST1+oD34HCHiVdu7 ayORQZhNagQjjUbHwEBWhY3xL2RiYmxqrNpkZtTApskaMMqchclnW4upGqU3iYb+m0yklZM8LsXl KaIMpE17dxNSJMeddbE8Cu8+9rSjDyq7/GxPbWXLksd6yy2Wuu712SnzMusP0f5Lv3o7zJSmrUmi /jR78YI5B7oehH/jhwdFPZIPLR+stWiNuSZjnioIQdjuh78Gjl123dcP9P2ltbH3wzUVvfA9igJ6 uW9ZSDA4BGoPLZzTDz+FN+GPj29MMVhXb/+X9bOaRbPbnjp7EHXDQExIeZFsNVCg3YW8JRA4KhSO YvGIBhcsLGSCg4dbLVmYmZEBF7mZcbHD8dHa3CiHjenDAKqGNtcIJ3KNeJRrBuAToH0L7O1tbQVX qJaaLy+r83X6JQmHiqrL5hxEDvlcgByy2wxbPmqyaA3mpBjkELvwJ78ID9oOjlUIrwJdmHupWgFe AFV/LEdu+BJ+NeSGHT8B6sOaRcWtB04fwmfsZXTGNqEzpka1JNY0C4ACD48CvUaTX8BNNeYLEiht lpmJDNXypLIh9M7WjaGeTzQZkveYAMtPBRfw6pqUj86PDNMqy9L2JcaUzdsJf8xvkmUYc5lolSq4 Nn13fMT8ovu+HXAt3PC46+wNL7d4ummjtWrPFg83nUGrkrVQJYqjEWGpJepAT3FITtraBwrNt1RL 9MoUfdZCVbCvmzrbVNOWmzEKOtwbzpZcBB02hw1DB5L4AO2VZWzXGY+QgzcAIolEpFTauk833H7G UbwglZkJchymZxNHbYfb+1HONPoeMG//y53ZSa2Hn9jVym1sjn1+Vbw+QrPGfDQ5rqbqAHx/fnN8 f4cpPFyz3vxccmTFgr2AotVnrg21uNesepq4qnpJr0qdG4J6IlXW7T2RXQmjiCuokjXZe9Es234Q +voKIyOHelI/nC4yKZ4BZw+doz1t4Efi2IRx5w51Wvabl514qWahpeapM3MtlmX7NuSlF6ev/BNn f3PM86vj9BFhTeaeFOSKZ7ArEt7cYArXhq03P58UWVH6GHbFkycee/Ab+H2X5SXrd6z0GXGufc3p 99ZU3YcaRVX6vJAgmUSZmfy7B4ryftKcNWmzq5TByCnZCSs2ZKUjnxxG0d+KMoWY8CNSiQRTgEiU qqACAlJSAUjlEupoKkXgq5PHmxklR85z9jDbpVvbMfGwJwm93pZHxw37BOFxH49RnuFNATLR3zUX bH9qTm7NvK3m+GhvD1lAoj5uRbTOZCjvKPr5bE7bLifzPS9YpOKQKAyY3cWhevwVjwy1H9q35Qa8 +ZBFF5a/E/iuMIS217/2fkPVeeA+AnPwMbDBHIw8MQbFyJMiTiJP4PnWQMKEcE6+SQNAII8XaDIF BCapCpkkJXok2ccHIjLMTAQYGiJQJJgZxfDhUNmTh2pM0gRTmSwYSaeTVRqg9Y/V6Xdwza1PNklF Cr0meAb6qgwPU7k3czuWfdavjcjSV6Rx/lS4eP7s/dsegN84aIIi/pAPO643oOyamxSdF4Ky68GK SHV/P+uX/vvClSZjOUoP/ZvCg02xZTg9WF3gNRDu51emUIIDYPmh8pKL8HN4A97a35ka9XPD7u// /QWbbXv/hD1YgnqQw/bpTIRqTL602NGlgZEIGhhHL4nEy5HiuYldGxhPMaqoaxgeobFDGxYgqlQs E2GXRYbUJvbBfqZU8EoHvEpfge0gGZ4GW62QcgBNUMwlVw3s4SxdBVWV8LlK2FBJE4OLFtF4RQMo /9P/L2eWOdX/rZnldy8PzSxffvcXZpZpIvY/cl4f9zuU2wMQes/GnEBoZriZiTblMUHoTGeGRScG BSVGh2VyRDK+RMSiMbtyi+E6DgiWjJBFHjzSpmgaOAaxTXDEGzUqElk5RckJHO5ONeambtUfy0mZ l9tNvxVxFH/zeAT7zz+/+IuC1KP7bIIU951/W68OwE9+fP+9mUDw04eAB1QDV7+cORP+9NOH8N/w Cv4f/Ctg5o/XoRPgwmfhrovb4ptH1Ksuo+7i6yRWrwzhH47zUATqOXUmmVyu0Gr1EnQwZXyNXqAw 5TMKniY6n9HYkZHwHGph+nTDNN8UPCS/822bd3TMYDIrhm2uHy+GTccbalY4+xzTo6ftwtm51sbT /9NQgc/J2H0SbHLXRJiZOIWZ0WjlcXFyrYa+bXuwJ2Qqe+MOLcmd7Yavj5LhUMMyIsNNy3Lrd4Ef r68f0ew+A7wdWLObMPZ6vRYVZxR7rYyvDBJoDfmMlqdMzGeUo2J/brqxv5PIN4kPdk4sAU4r9APC fceeevgLwHvYcpjczMqFJ641VZ4bnyFiUI5Um2YoUSuQghqBqERU9FUpUVEpKuVE8Z/qBphEXJzE Ae9bPZfN3fQhlh7f+h9WenyzZXm763xz85aSHMdpOWLwh6uNldfV8AbWKamxOuXYM2Agwk0z0OmX iKLQIVDrtGYmRCeP0umi5JQIp4G+Yf4MUxrndFPcCRNom5OY3yKOSBxRPo3Tspdb6/DsaJWUM8bG uUQNsZaIMfnL+CaJqGheHlOpyWMCi7XLiiori5ZpiwO5IpNpZR5jwltf2DfC4kzDYsVvr6ne2WFW LLiGrrAJrqrQIcH1s3U2wXXDPTU77ILrmoyU2WnVazKTi9M+HBFcp+VgIRZnS3Y/XZ7vF5MUJZU6 S93ToyrvM2eakxkszvqtWVpV9kvibGt5GCvO+gW6jNt9kUSgSSyXR0hEkagEqSMEivACVIJYgNk3 VHqmV3dG3fJ651qT+tzrWOjtxULv9OrLeFF4bG5RsIqZUBYUxFdIRKqQQgbtI2xTH2YX9EL0ZYpb aviG6DvvgyX4Trpp4YUSVpV+FN9lNzYeGkJhEgcHa8LCVBJRqEbGV2m4ChUrQgn7pg0FRtMndzTh P8RokXt6tsSPV8SpcdFwN/Fl/CCJQiHCbT32/tSz2KS7CDl/Wst1HxBxvhvv9WxCa/KUJURmZfHl ElG0IgUBMEU2+hCp5FiZ77MRouxwYR9uQae6f4ZU/Ammq0f3YncGq79f8fjcOJ0gPC81m4mPsnRk JMXKW/xnxqeY4oJbphcrePiNpKjCRVHhJXltVkfy3KfJsRVWPdnXGalOjFmMCY7b8oPCJJGpIyKw Y3BuiFREKkRyLo6jUTN0nKbpj6mniFkj0wbTNLT36ty8e6wO5Kuf/tU28zA2R+Aezc8kigs1M4EY fwbGBY6CHaxpU8QcnEnmGSbZvsHstEPPpZa6+9ce3V2YuTC/c1cR+jwtc796sutjOPDI+qe6Phma jLiOJyN62cmI29FnuEkm46O2A/cb0Zp8Rq6NUERHKyK0co5IPww57PW3b4rB5dz5DQEmqQUTDlpM ywk1T518fNvf4L92th23fsNpgB/C+HNtjafwUMb4HOth4geGhYpUwxHvQ5n13BTNHDW8MQmgenho tGNadnzTPmfOI+wYyD9BwPjzmI87pvhoM2NGYDE+Vm42y2Pjf5OOaXL6cBJjpzRUMr1TLFe9rFel z1HKZRJVZvJaO9uqzSkPCfYVK3MSlq/PybgdT2tMXmrkADMTHImOtjxSFRkYGKmixjuJRdTCqUZ9 ovdZuPPJjgO+8GM805JbhmdapmU5zc6/9LgsEwCCPMzOv4y10kgEmcSKiKAIVQFjDI9AH+PSF7Ku TzhVTmXCkZlJ4v2iJW1FRfXmguyO1/FAzfQCOzhIvMqMn74Za2E04WtyVoRH68LRx23Gsdrk1BDQ bWM7kxh2BB4Hix/61Eks5g8P9bzp7R97dpoVyDYBJPLxcfUzDk0AqTXVIG58LBOIMIQ++EpJQoQx OgJ9iJTK0AJGGWanAlBDNGS0burZ+JcHhyax/z3YmlxZ0KILGTVW9IE0xDZWNL2M/HP/S1nxDiud 4qOatdS31hUJXaHpmV74PTPGekCNa3GQErW/qB4HqYPUd1mLR+aWJrHxAethsszqhqeaphnV4REo ir03pIudQ8XvjxFi8uBwSMrLs5Dx4rlRXKmzfTjN1kzpE1ElHZqBtg02jYdC+M7Gee1kwAjmgf+0 D7COG7S0zbPSxCJCzHuCTickRCihJRYQJaYwvb4UgFK1upTPL/XxKc3ISC3VupkZrTaV0pRGmpkQ cSnPi5eaZWb8nVKx6mTXINHn29TqMZKkSGgbSZplu9VkiGqJMnhwR8CPfpZIgYUF+XBdGdWBT1RV dLzHVnvV7dvXLF6puAxvFKWvu2TdAYv0oVm5gT6C5d6p8TXb8I2A9wBBPf+hPzjDf9SKm+L8fZsM rVpVUcqK66p6aXuGIsB3ZlLMmjBlpqn6IuXj+wnMg1lfyOE10gN4bG2xfvRRQ2Wcdrl8V1Lc3s0/ AI8H1lkHU0AFfOKS/CW9Ov0PoW4ac2rDTnPSgOKsUZu/QBsm81DnJNXcm52EvNxNqHlLOP0ozh7o rCYTcSZ/jq+XV3xCclIhk+zjQSVwSWd3hY4TLwgV+xjMjB/Ph0eMyFZ6vfCcyiZd3R57tguYxqAb Hmy+1AJORa1ZGBzQLBIqiuKbfl5ln35j2Ok31yClPNC1Sejqr1QEOTfR5h7bJuq5aE6730qTF7dq gt/DU2v7ynTKU6fSUx4chOy0lyl+aO4tKYG9gxTsw/uMQ5SifXaQKyNkqJtLIxYSK4kqk3HhwnSD IX327HRZWlphurO/mXHWeXMLGW8aPbwL07k1ulgzs0DHMxd6ledSISlmhiycQ4WgTcdOA4r0rIbF ylf2o6EfvemGBSqxRGwDlhTJ4+JNJ5FHSYb0fhKMmpJDG403rFy54ToG9JTtGw+0AzE1KhJKsIsB 3rmSUb/LM1YcOSjxmO1XEcjd94cdaTKPzo53SF+voNoU+I9HVtX7BCYYQx4YzKg6UKkL3dxw/wHu KsdkoylRqS6uiCHh8muu8ujY+ML6JnPx3j+s71jAh70qTdjMFtIUlZmhjQSx8BpIEGlKtL7gYdAE yqLCFsL/A7+FPz6yOScegJY24AjoT8oXL/gdfBq6wutz8jaD/O/7r2gShCXy5urFu55++uIN8tLg xSiFflXsA/feC7zALCD6atfgqykpK8EFmcemVSv3Hnr4LP5TnvWElNfLalFKIoOoIhqINuJ3pvSq qrbY2Lbm5rbW1ra5c9tkGRnr2rwdULRw1LzXtVlAZht37TqBa6CZcQXLIxLNTEUEr2C21yIzFZaG wjd7PhU2Lnx4eMP+DkTjQjg6kGwFHgolCiQWFlE+kSjYQNq3N2krWUO3so0K5u2hRBEfCSY1PpiA kgyNGEp4y+O2Zvp5C+hksdGHqmdWl5dHREaWGDPCD9dm5VKUk2dIkHe5NdM/Kjh2S1VxnUk2g1fm 6JeSEK1Jmkn6le5x8Qrxi9Uv0kvdlLH1tQsqYqjrnrNmSktIf/9wjZ/c+vaZc8ze6rq6WyAevjc3 ex9tzA+bCR4HK0HZWXgDfvTIvHlz4BeAsDQDIZC8k+gqXly2Fl6wfvF8ihaoQMk3FzSa2ogMYUVI 7ZfvfnPpBtk/+E6qUlEf+bC3d2IzkAE5cPpi5+CZtLQ60C9zv2/16j2Htr1GnYCN1q2koAce4twc FJBcfP98AKeIe4u9E4FHuB4juJwmhuKyY134jshIOQfBVu6toXch5lTKq+Un+wmSQ9Bl6HnN7PMk JgHNa2Joimhi78tk701DzxWhB/fW0BsRc66qigKsn6sK5AQBaCF1mvsv7iZUy/UmmVAAnHn1DEHz HdYwIr7Amc93FlBOFMfFaRz61g29p4+ER1EKCSeSQxkkEg9Kzv0XPHt6bWt70+vwJEg+29TeuvYM SKSvKyFMBWHw3VRAq7YqAZX2f4n7Fqimrqz/e+4rD0LeITyFECAEDAgBAvKKCIgPEBFfiBURUfEq 8lBK0UZqkelYpdZnHauOpdY61qFVW8darR2t4/h3HMex/fxap/9Op+/WdjquTpeS2/855yYkvNQw 3399i6XGtcK9Z++zn+fs/dsIuriAd5oJQJloK7WbrR1YEUbtbmqiraQVcYe0QCpfx72c6tfFCrGC BSyBe3LwtwEmEgB0oRhjgsTejQe3eTVzo3cD6PjjuT+c41vpEF7dtZe0HujkNXzP2rxUdVpuG+ru YEGvSM22QY2DfJdrRc2cFvEOUWeKQgbcEIHCF0YUhcTb3erHrDKDabgh86R3Q6YDNWSS4o6ZIFno 5OTPlK93gD0gzN3JiagB3ZAaI+7WhHvGqJo5Ripr5qTuPcN9mqg1VMUYhHtiFfsTbspsueDVlMka +UJ+1xsHPz8LMsD+Tv4b/sbuZ8g8SJOR3IzfIEF9DAwjBpQY0iXGV+lCHAPdFr5BN7A/ubszyc2U HAZXJZ2IK0ZmD34C6vMlQTNHCn2++BdQlyazpxN9i9iFvxWCe0IB2cwBhVJGqSFFavgLCOQKym80 /C0mNSYapAK0P0YG/l8HLYaO1gP0NNSIWcefFBoxo9LcjZifXwVVpdTRXe1kgGE5KD0KJru6OPnT 0/J0LaH8SSwZhXgFMtz56od5KZf5NXMyTKybm0KCZEhF/MTcxI2Y1c4apsb5EhgDzJCX4fy/2lfs 6vwSlHR28qf4taAFc3IhfP5hoVeappo5mnaLHn445qEKqqbQmEkuBB93go+QRkup8Uwm24H7M4Ps fiERzYRSK41pFjFE4rvfJicnnv8W6TaNgJoiRalprsuNCBTsC8EW5br8grEYneq+ps56dJhrarai kr/Eb++7GecPum7GnXfcN+NoVeQ/obRn4+omvV0mCmzmRECt8G/mFIhhAscM7tMEtCQT3DyD17mY SO1sOOm+JH6R+a73Np/tuiRmzgx9Bw35KKWKXNwYrGXush/0EqhlmAuCltEBuJPygwG3slRp353v +7a2KmDuu/PFfLdCCh1uChVhWCwl+mZOgvULV+sbUq0uduMXGQz91qC+q3re+y709v9x3YVS1iEv WvFbQyB9DtxRqbNLwkGzXKRvFhN4rxPxTquGotBoS3NjxQQOd+9IhZCfuxorQdLgxkokpXSDSMOe gdnMKLtc7A9ticpfCn8U0F66rKRKcCUuZhthMAoFN9Wqg3G/ViRdIkkwl3vA/OgGdbzVjQjMf4+G zv7cQxHMfrbb1TuZZzcTgbFR6Xa4k2OYei4uvZmLUTRz9jFxMTFxY+x0RGBJMxcYUdjMRfQvmUEh o3C+YUJk9xVx4wjAXSnjrqDRewJrrQjmI5Rnl7A4Rvf7n43Zjxsh8V1bRl6aVivT6SakzR/QCPki umsrjxx1tt9d2zPejZAU8cCWzG1N0zIn5YGncUtmzSrUkvm3S303hNiGUha4K9nQt0LLJJZAAwyU kEXKPsvk0jO4EclwV+A/Is3ACzLmjKenUogT9rNn2UpXnMAg08yS7jgB2VkYJzBGd+ckc8bx/Gm8 EjVeiR8RblfSALl4ghbBLLevwEpI1lHZbipAK9EZAGMccD1EJYE6vqULlF5xOHi54CXO4OcO9hIi DeqehO/HXuI2kwW/FUlE2NWBUBEDAw1yyAg5MEQ0cwaBHSqXPRXKpfoxJsbk/YExDt0imZOOWySZ 8+7eyg1T8h2nZs7q660UdgSvZNgdMQ7cEfS2WSVrPAk8844nycd6H4T1HnVNovgrFHoImVZwP/iJ HkOKdV40QICZzPtcANCXh2mohJLwcw/5T/jm/pZcDRTyfpbc6G3JDQMsOWPs9j53R82Q7nN35p2h TvVP4D2nOcxDf2TJvSTIrdBYeKCqMln9YH1pzoP4i/3BWrj6HUQ86ggMiCGUyjC4DzHQmsRgzinP 4/Ndj2/wmAYlTCP6NN7WBwhET8S1rDPM0aHqAUfOpgj3kTO167HMs6vQWfeaaWeK7MsXvwpSPWfd 007k2xbN/zX/DaLTj17BPsuegnEFtKlAzsCQRk7BH6VEOcCm4kgqEi4JLc6AjKqBfVY4BlYsdR8D Mxt5HpACtC8ge3owD5IYI5sPrTaURi12U35w+/wEN+XyUi7RgTyNxGf9BqTdg05gqaT+Z7pY1uvh 008TWkJ2DMbvpKuHAio4KhK1wTAZBsw6hhXpGajpwonnqEE9j9RGUMjv7UJnqlJt9K2NfDeY1HU5 NDLzbcgj6BPq4DvOEMGE8oRCISaUYvQWIcIEwtJtrisK/CodlAv0unt/RKeL9f74dPG2k3OdLj5D 1YEnx1W5GiPnZaVY1IDDJ5hyfYD4pmBTz8E3HsEoJHIaiBkARQYwkHeMW26QazECDASigrbQfexH XSVLnN3k187jJPJnMLL7HNqusy7U3ni73uU3Cam/v5SgFKF6qFEheuRA+6pP7+dE3dYXO9OhgXnp xX1u9dIl6Fb5Ysfet7BVh2m1ey0mu27AStBC8DriH7wKFI4OWgEyxUO8G3FBTLTAaKndVfsaY9cJ wZlcK9cmRNpXcpEJ6Su5BMGDu66NhwnZXDiZYFC1K/bjASKlkEm5617pb0OHqlp9FZe6upF2j13H 5a9C1erFPx379F2hapXUc9kHHFPcBbMA9BXMggJc59qvYPbYdZCOCmb5f/J/QAWzCIngY6ILxvWb MU7vaHtQoDY4qBFmzk1cMKBpEEyxfhJpIydBkb6n9BiHji5uI0brUbKZGm1LjRR8hkfE2Z9cgLxf gh8/2GFDgLxX2BUZCbyU0vPS1N0RUzLiwI+07d91P94FblDfzKB+oL5QZd+nD4oMTJP7VEDErkJd /p5TgWi49yKDC56Jfs1Ua1RduQK1hKfKWQLqJc7qKQVLyBo5RiKHUT4tVxByOaGgVGIpGHin5s7q USKv807tKf6I43twkc+444XHy5SAlcX8qfjdFv6NKWAVv7EUFFh2x4P8qTCnv05V0InQeqKcnqSE nB6V7SdWsqd691NVgtSXwj24gCvB1a9LxBIxyZBeWT00UDqY2WtU2GClossgSuOFwJv28qPT0l5p KmFuNDj47Qf5PR3LwRp+T6nMGKxSyoyBapTdU7VQvrfCN0D+yZQiwdm78g509QCzQS3O7RFsD7My 4iQG3F3mBtwVU3VPBI/LXAhM/PvXze2TgBX08GX8H4T1c3D9nRiHF/p+CmadFCuGAZknj0cVz4xB p0QSn8r+1B91l+3k3+flpD+Qr9/CI1hebN9a4TPLHy5zd+PuUq3kbN4Crq8X/PMl9iemZNjMnb7U gd+zEr6nG+p9kN1fp4ERi4Zm+14l5O2Q91G2VEYQbAZm64xOyORRfZ2R+gGwdcOB7HK59OnDAjrv f7fLDKEm9un3m9hwidJfInBuAXx7A0bfRVm7Zois3V37l4qy9r6ghf3psbrjlxprnNVMrfPFuaUI ZJdt4Ds9YLzPTEVgvIKvWATfcvTBubsAukstAjUdAEummNoEo5PtGHs3zK7wkxDaQEkczCC1Ua7E NT7ZFaG4L0keIoe3/rIgA2Ho7uqPobsly3r1Ahuc9BbM4j9g6zEa77QihMa7GqHx8mc3HMuy1l3J 5sN+0/RxZsqMs2tw3LkMyvVyd/SH01tKRcBglvDK43X9M3nGu7wFBu/fOVcd37v5a/7O1raT+8Co Pz7efPrG6gUX2eXDAO7imKUNcqYV+qmHzuOVtFYAy20WwHI3YbBcqr01/dgvELRuy+/GtlQA9fnl CxzLDvPfCmcneyF1+93U+auUBFRcHOJ6cvj+GbzOEO2dxAPjC6f3bfkK+G9pPUl23VWBUeDSpccb z36wqorWDQmnK7y3BUelKIuH8YWYCJcTkLOEHOqRXIgvruBdf1AuH3yzecFNM38bI+Fu9ULCpVrI 7nkljyIIXaB3Qegur1rrV1a47LHiAgmW2qMwFrAIuTzrJ4XxvJ8Y/vjDiHtwLo9gqVUu9y94YLEX IG5XkZ06ihBz+R+B1IWYK+TyZTCPPOVCyEW5fEBURPJYGOOOpuq5mORmLhL6irGjYyIjY0aPpUcF FDVzAaPszdyo++Ty983k++XxD87i3dC3aYkY+nZiOoK+Lcnn9uUHIejblxD07TNnJxdg6Nv8+scL 03t39UHfRpn8qXLxE9O4pqpNswvnxMa3nHobA+/+pWnhH59b39I0/5eLplYD7RIMvLsMdXZfdAPv prcLlmM/3IN6ITKXQrskBVqNIOruzF0/OEWF2fsQ6LjMnf4Yutj+0UfZs8ySh8zi6atr957Cq5oN V1UKs/hgu4wABBicwQ9M4PsD4lKtoJzf2AmyTrW18anYV1wWaZiiYfN3+rKQNaOMr5uI8uTvRhmU DxkwRjZzxgH5u7DFOq0BscalD/0/MsZ++LcI2WEA/i2b5ELPXXOoVaM0JSfEedBzXfsDV3Sf/TEO tT+McQgUXOan/lC52AqsxdZ/5Dn9vk0u6NsvoQFaW7tu5blbCPr27Q8bFzJiATAX/t229OVfFuaU FmDA3AKc08OcLRP6RYSJi6x6MHI5MIyA2YB3Tq+/f1Z/YJ41bs+mr/l/bm0T8vqP+dQLGOq2irnr Ach9Y4YXQK7A1ZNMFnMRyhe07WKGFnIqIbNXRnvyem/EW+qkH1ALULjYO+yG63/qfzKrn2J6LXX0 +PI4U7A63gNgmzQRAdhqzVNyOMfkQuq4Fxhufs6SBS+C6MrW3HefyIMsW1dyBIPh8ncRjRLqLNvF joVxB8rq1dDiBagp+KP10w6Z1eNddefgOLPv4rfVOJcsSIqV18qKC1ZjVFv6Dv85CEo2F8zKYctK n5iQe/ky5kY3zFWbhNMmuQq6MJVI2ufCPB7MldsjlTUOgLWlQzyQt3iHVsEn7oXRrOyYv9+gnN6V 0otwjs1rnd8MBWNL7QCp/GGMfCtJv9rJnwTZG98eq4x/HefzbfD53b7n827IWtujAmTtCjmGrKXa wIrsflC3oNIDdSvI3CH4xnof83mEZUu9TlqcF8iLzuuk3DUHj5Gy4YSZsNgDFWxYuExVwgXLWDMl NQGWKeGiAli2r2pGeR4mO8n42f0A5vXuITgG1HbT9z88Eodq4+WOM2fmT1s/cbIqI7PamgB+AMqE aX3T86iLOOO+sq1kvKJOlZ484zJMviV9ybhrVhD7lLBKIonItBu8Vpo0ZhqXxFrY0UMvGfURxI9k 3e5eiAeun/ze8fzpBxBBE32wfHjKELvMRU2KPVShYC1uaixgWDIwCW5MSV+IeBgCHrB85nsB1Q9N bbOQ1a4pvgF2P5JkKZIVuYeoqF1IyBpKZLSR1Xdqe8aZLphcc4C/xDOWgJqWUjWuJ/gfRzglJKTy SrLwiwb4B3zZWZpLajaWjvMaBAxltZcKoS64JgEHkQrWD/gr7Rztr/AT+Uul/iI/BSNRkZ5qbqGB YZhJwIdGNgn4g8GTgEUGG/lBsPOTMNcs4J+/ISz0PBeGcphd6cFQ7oNQ7kNQ1hgpaL6AhoqhEIIy deLQL6zOW3xvF6XfGc+GaOdV/wkDKAvX8u2gOxekXH2Tb8KTZ7RMFRsGY32MlgfFSBtK2blQSutn 57RDISiTqoElbColmszKVHXG8f/l3NlTM7fn+PKajPbareve/XbDUzffAWlgK91mBOW3eCf/7Gfr muZOP5L5aeXUbc+BMLAXhAMSyUQntCFoBo4c5jcIA1GBgH7lcGvkHhxlfJqlwoUwRgOgcA838mbg CNjyytKKyc/99Phz60/z+WDXXZh0TDl8uWHxdywZFV7Qxd/gy/if16dY0BHA5X+AVf9C2RogEKab 5cHIyiIDZRAhlGrGEuaU1pKFYc63N3UCA5q/81WDa04wfBaZNAhfGW4MmcR/hL/snsEDvykKht8M xxjLWrFYB+kM15GyEDsn64exDIwIZ8BmJEXQXMPtJVFFLipKFXCWRcH8h+0nNWGR4qAtk5x3D25i U4PyZMfbgOHmUzKNltXdQLOKMODygs0HzPx//6K3iHrNBDbxazPwTf+UmVu2JIO9MgpP0ELciHbt AeSHEkqaUknADVAMRF1O7uutR1yh3CEm2onj/2ys3jJnxYLn+LfXd4IdLSD+24aleZOOsuS8mcev PT45LMhZzSxx7l8yf9+6jHHQD9HwrTOHRWEWIdE22JiZIbyJ/6ETyHlziPesnkcILfUuXUgYkFW3 hxoMpFIpI4ONxVxwMCmTkuEIi1ltLuHUQ87qUbtIoVidEflYT3u8C82BgX9onVDd/X4DSDs8s0he GFEPmCc/3D61AHSs+IKVXflkKrgVtXEj/82Z1bOm5FN5gJ5euNpSyncf6NKpLZPemDGxFWQmKWhD QfSr772jif37W1mpy9HqawktrfQdm5nq36wOKMqraYSUOzb8dt/csp6ucxcnjq0C5pCKooMvNXOF Yxe8yoY5HYdbuFf5d97Ze+4Q833vl7zt7G/2fbG/ONc1Z/jqfz6552qb7vTBqhZ7NvdRfstK/r3f zKve9csPQQgVZvzi6Recz80ovW3lP15efx6Y3zoioABq6U0eLhCEgmFoBZQMqQLSrxCJQktccJX9 uKCxAqN7w/CEGo3Xkqguh4O/0RL+2O9enlt2dOvFE4aK7JdeXV03Iau2h9pBdt5Vbntl1dLjwHb+ RScLrp3+7b7PdpeMc0+p/tQ1/SnWrvfzUwbHgWIuLk4ZHAPdq0gp8mZGH0KzJ4TWe+Xf7tN5r7ib uuFMZMvyG9dOGB/bULCiatM7i2fLR297/PCx6hkOdmLOso75c8ykKT3j4IwJttTm1G256U+s6JlX fOfJlW3LeopCIoOeK85bWNmNLMlewkIVuicQ+0m1YCo35GQfzwRikVVkhO7RaLMKi6MKDdawfSbz 5+rPjjteP6X+nTlsdvH6say6xu/c5ereampv9fu/Gp9JUD/f4U/RJa7ZPpOIdHs4ERsXF+vvH5uT Exyb5lfMpaUFxyYUc7Gi4DyoffJ+HBLqGnHwNFTHMS1kVQ9G+APwf30JLV0SVpmUEDmlpXZ/bVlH ZPTit0F015q/8hU/rTpZ01a3e9XM9CkFPLduYm5RduXaifYJOfzxf4LUVxfOTLW20YdX6XUpZa3H Fs2MTclL0Oj8A4xXd5WMv7un3FC3clZJ12+Xzs2ZF2U4PWvKo1xO6owpq5eNs/X+atzTh7NSpk+K jFAi/i+BXpqA/A8SEJsDmSDgHyhltFMHzvih+iQBWnCNWxig7STVT5XXzpv5xMTcsNb2tboxcYXn Dm10gHioqRWL0pMnj6st/oXzKFm7rHCSKfJzZ7YQQcH3koHM74dFc4bv0MDoCbx2qf3yp8ZTRhei 844TJ9yrHvWQiM4U9jgUoEfxiwC9/m/38h3A7LhK5tMW3uFsJxM/4nuY7+/9iwxzPZlUD0J1Rj5Q zd/AVLnn/sBvsmaoZbEuZGdTLBuqMkkDKMPUoZCdRd7Izm4eCurU7yM4HP3SsebcdLr77Nq8jLA2 x9qgHXMqysd3OdoCNk6vnDl549pLtOXU9Rxb1Y0JOYsnPwN5W9OSuWN89jJnLlmzKntHXg78JMwB QrOJeuEa9QLec4Ce9Q+QMuqBc4BEA/cW76wGHDGVL6mcs64oJwTurGbPuUObHFdoy+ll6ckTxy2Z swbtasWsrXBPBYTQ9S67o4C+zHcUaNdMoPaX51fuXffe/tolu55578WFq/Kyls/NSktszcyhC5tW /p6/dnYvMrwJrx+t2byf3zG71BA+7tDPv56G6hoII9RwjQcLmmEoaIqhWMlFIdAAixSaEk4xEAs6 GomHyMsfebsiEZDWtgN5W2jH8b0VZa9sOv9mZlH3kcalhWPnv9J1xfkt07SzZ/WyV/k3z+4B0W8d fv7b56fmvYc4XwflyHn/mUCRFOSxFekV6Rx1Z2vD2kttaWXVc+jCtfw+5wWa+Jn4VV4WepbFNY/u fxoRmupaHX+ubZwtIbZuwrMZSY9yr/Afzm1J+8uWiVnxprrCbelJ9TU7gYIqN785Nql0YrTBoI8v yq3dNrPkjvVinq1iWmxUpD4xL7NqfVmRazYP+T6zA0obQoTW+fnJoVUs4YCOlUuKXah/XojQFDLk Qm03YjtcEzLqGtI40RnQ2ylttRfoM8tvyjt79EfHMTv4ndXOljGmVkW136XUfHJVNZgiTLrS0hba guM9NA9IL2MJwXz1mwdk83g0jbUP7gF+JG8bpy6dU7Fukj1odftjmsS4ySe7uxx/sPQsTrUUj19S 3kaWOXcvKigxR39AXutFdQufQ5267p4UJGMpqRsrGqA8BlW8Q2tBoRAXzeu5zj/yU/sBvTo2gv9k CzjzZfuWMLkm8y60PazzLqhJM2XE8vtJHfiaPzUuTF+CMqyfu/lT1FfwDYFunOjAB00KsrmOvihX uxegvnIeqqouW51tokenVOXYx4ftba9gVfK5ajCZttx77bfjUqXLlVZru4267Vxi3vdmJLkevvkH SFv7/RCiRQCmETYYzlLtaqeFnKR3GrXkNecXaoQS/XrVbKqoCp1UQK9OHx081ViOphrf18kPmGo8 0Ne73cIwPh/YkLeIfNM40Pm7yiiw9yDx6g71m2/8gDUNtxwU2Q+3lJ2CuxiwENek41OEmj3/v4oa FvW/OekY2MivRWKcMcWiScejpLRWG93AaeXBaNIxJDx80KRjF+fRyUiaTRi1a3SP3UV2VEgpocZt V/6wcdnTPyiZc3uqa6kkvZ85SMP3OhJJlmYCQiWPzN99OJ5iKEpX/QNLljozyIulvV+Bf/n/RT87 zeS8S9KquelxryTz/lQArzYV5Zqug+9dkSpzAO5ZNBFnD1QHSKXiCCosEipHGFBqg6CX848O8pxU waVjm+AKoL3Fx+ASIbX7mEpEXTCHzZnyZEaqlyi9wUcI8hSdAbJL84wpBe+ao2kLEiK/PpnCcnUB xCuWaP56UtA7kR9eIzpVy7VHm2OncWYzI7Gwo6NIqURWygWHSuQlnF4CIgmGLuHCVYzXopOTcc+i WwcHLdQwBDlwZyDX4b83Bq8XfDQEYdRM45vGcqip1OV+6+9PGvjpxAm+DqmtoLEYZQ/RlWwPM4NY H6h5aEKgNj88EVOxft+XBLLMHSvOJj8GhyjrELOnZ4NSvoeyokkHRDX5MTlhyG9Vg0/5EPyt/qgO 8UQqqj7TIEyDuNRYO5eaGh8TJ06KT7Zz8V5TyhCIzEODr3jNM4PaRYqoB3S8rwF/2rTF+d32DnAN ZDZpo41qzcRo38APZH2He+tBR0HnmnH8nTa+dTBunMUeGB2dlZSUolFlhUhSskx2LotKSbRzKcJJ H8ZO8wkrh7rPVLX70/12Ryn/ydUWbmPzMZA4qb2Bf5S/vW/L6T1f/aHDN+L5p8yg/Nxv+Y/448e2 g0orX/P3P4EZYN2NV9csG7DfCYQNxYAaVVSIJCEK0h1FJoyxcwnCCaPy/MM3ikd7z3Szuma63R+Q Zh7YBPIP7vzzEf4TfmPn10DS6eBZ37b56lv8y7gPqeae/ysHwBiyeXBPuMmu06gsIZLRpjg7ZzJZ RostMXbO0nd65wuVpr6Jcven7U+9d8k855kO36hpct5uwkeng7CP9HapRmUKkcSYyBh0jCrI5UPu zIPBjxb7uFB8bDtQl+KQ3bCFSBJj0sRmm9XO5drIxEw7l+g5v8UwlA/L6r7Z6hQ+6HXNXUenvA+A HtjXJg1UmMIC/n3ox8gJgWzTzdvjooOKRn3vK43UJnA98+BjM3pLqSMOkMpbepugQan8+QRIX00d HqBJY6AmYUmDmjQmOcHOJSdHjRFHJSGVGomkRffNevfM8XuAPr0Mzt97bHHX4x/wVzo6QDxYxL/s G8ltS9748/IFzmpmsbMbJALLQDmMJ0LtcuwbYsUx8XF9LsGXXXWD5d6XlFt8Xgc/yUflubuXqW6C u5L4c4boGvsBjIWjiCyinBhrN4ZopZHiSBkMCENXcmRQAxepJUltJBWdNLGeS4rOrueivYJihCLr Kg5ASATeKLEpA1FiYcBMRQiXMChERtbeRTs+qHMlzl7nEaYY8sLk70G4eomMrXu1bXw6EFceTIyd 220B6x9fevzArgU9QPKPW+0bNrTf+gf/b/7f7s9A8uNfr7SuXdt65a8/9n2ibl7j7/AfdXZYKnZP yqm+maiUjq43R+39FRVo3Lj7IO0Y/BTh6fn9nyN8Iry4h048UolihIkMQv21Cq1fI0eFNsKcRqmk tNSouLx6Lm5UWn2/KiyBcXg6U18N9hDgsRofOUbVz9+ybWbx0lnrts3VlTfMeawuOz0/o+LJsT5w ilnF011rVr5+raV6Vwd90LmTP7iravazB2cWUVbfmER5SZiVmCxkWw0w22rwzrbs9Sjbqn9gttWv wwz4yBgme4VlR31OWmHWgl/H1U24/dK8smWVXS1lE/m/+yJEl8KPLpj17EuzJ79q/Mqx8ti15oXj s8mXfePKkJKj0FAhZAjTyPlrGrkQf6XSP+TBkuOGnk0ZAnrWV11jDMtnb98+p3TR9PYds6dtWJqV NjHrkTXTfVExpuVeRdtmR/Mb1xrnPwV+dO7cM2/mlpdmT9zFRI+UQ6ii00ZMJaz2CEbawIWDBk4d 0sAxonC1OlzE0BGj8+u50RHp9YPaFcd4Bl/2ExwPNq2vusVUOC9OsS96MWXpjO9+UzVj+bzN+x8p b5KMz5i9NDdddMsXMSJemFV0KOpDR/3rV1cvbFtxNKMzP3NqYQPVOVL90kCPMx5bIEoi92/gWLka KZlcrZb7UVrMH+3oelcNtEuOUHUCNt0CcC0u1xCKOqzJPksPqQzPXXv9esOhQ/836Q1fZKayku3Y XeG0klcq9n8AWn20wkwfB4Sa2BpiDZFjjxkd5yfJD17JpUlWcnEJK7n8nLQ4gohLy8lniuc01HNz ihfVc8XeEoNERnnFPbno4ecWie6PZ+szHxskdRlTH5n6aIFtqsEw//kXshOXLXz5xCOl3a3La6qm rZ6RP/2b2WlJudbJM1PGZCcf3lE2fsVTk7Li45dP8oXpNbUZExqfnJwbZB4TqVBIVIqx8aXLczKy Uma0WnWVZRMmb3BMyY15dL/NWlqVEmezllemxDlnxVYXRoWNjrKlBQXL6Bs+7pRHVlWEmRiHuneA REnJmjglpVJRSkqNDZ06rh5jEHhJqZeT9MJu8tUxVnTuqMuxNW3asLoB6H3yhs7vDhZkL3AeJk1H Djiv0t2gdqTWDN24IXsWY9dRYnI0LgIWibFiiiPqcQ+HUJGrfNdl4HEBmK+Gih7bsH6HL/JAs703 KRPI2L4d7BmpBfKDUW8muo+jpWPEfjJKFDimnguURdW76m8xrL4SYT56TaPzXT34T4HF8dP2hgbQ 9JUvFvcuf5mXgcP7+R/p7t6PQTf58Yjll8LRTJDdn6JJZWw9p6RD6zlaILJv23zesqYMX4Sy6l4l FMS2EdMQQaQTpUSaPSyCEoFARbiaCmnkJFQ4/DFYCuo5iyGjHrd4u/oHhUo2DFA95gGjckegnOTi VV3TM5Jkq7vqxlobOnPtttj6dkd1Pcn6IsT7dxxMsRRAXV3oPAp1NXl0ofMa/LfbeY0ykZkjlWvB WiVAayVTUchgNUKDNYS16gPn9eLQf2Kvcjp3LsuG9urJlgaQ5CMbCnKqMQtGRLqXvVK4oi+TXR8o buAIFLsTgcSgoKsPMTC5n6MchMzrq7rTxAvzy7nKzS8+Mh3+3ZCZmp9ZLfztC0NeczS89ufVNY6G 439etbCyauazL8+eXD1z20uzJpEd/2nkbrNHoJwP5nl+DTjpU2gpSqsYNnRXnu8vIFo3dK/+P8r6 ls3dKWR9z05vaKhoqcvJKMyo2JDjC5d6129dU49yvi18DV34DX/wuao527tnFZGWkWqOhDAQGai2 hRCzUiYgoZ4LkEbWu+CSoKU87yroQa5Al+azK1BJ/mthw/IlPulGD3eHN1Om65+Q8SOlCsXZc9E9 lFYfB0PsIH1cnD6IGp1eWs+lY73oH7wMUxYwDDajz0yIXmbZMicx1hy1YNy29DHl0zb/ULwk5aU6 a2ycict9JtUyrbj9bx/64id/MG6KjkizjwoOkhsyUyob7Tm/j9+REJ0+IXxUoCoiM2nWoqx00jxi v9OXp0hEIlkDR6ugSQEqkYogVKJh8hQParAKpSh9NQsYEdhnP0vcurV2fJp43MQb+/c3+OJxS/nP K3h6k7RCfI1UVgACdI9UgnQwVymA8W8gpSSVokZOJ1PCn4DIsfVcJNaSfm7Xk+oPwgv2WVqsy23T Jk7mstObthQWZce945Nb6b35XFlC3LisxWS58+oLKZZC0jJyrxpAJBCF0KsGUxIVjIID/CQqPz+V hNIbM+s5oz6xntP3FwGhiB7fOwvAwog4VORn8/2kI/MuUDmOMFHm7jYg/Zlw7AJ6mUSsULJdb/vE Eb6VrwIyaU4Rfwf8Cjz9IxmjlSuDQqQ/jJwvgcQYogjVIouZJk6nDVRKxVqlUiuW0kH47DUoqZ4L 8s5bUXtB/Jhhp5ZrfGZOOf9+crG9xmgSm03Fo81hMv7L1v2SGJkqau/HvnCH732tK2MMu8AvPrYi igri5cHPZDWC2+DWiG2H4E9gLEIyDZwExiOkhJRIB/gVTyziQSb2lQUhfDa46uwB7/CzgNIXmg+U OB0VZeTaCjJjxDGXyBVxJtnDSFZFN3L+Inkjx6pEIhU7XI6cLKhH/9tjVkT5bB1LQJujhS9taQFt QFyhDY0Uq7PCKn/vi5103GsAbXwH3eWcAqKzq1tCrlfyN2nliHfd6+R4UJ3OfU6OSc9RqEao0+m7 WvZVHC605Hx5uHpOU9Wz/7I31fCnP93Q+vwTFw6tnM/X+CIcRiNgt3b+zfnLJqCw8KeOHwAssBzc uHCGr+7UIytSlz+FOiGTNnKEXyNMtmXEID/apxPum2cjunlOxjgavsoIuQlUgaDNTxzb/m/+9dYr f1+1nJ8S5ouAlP/6Wf4Of3l3Ox3fm9Gx9gtwC3z9H9qEeOhH2CZOQjZxYkoiocTUILPgir/HJAHP vbSvgtDj7AaXeFsriPaF3tRavqXWeZHeDA6O1Cv8fzlxyG7zJT9gyu810F3AxwNqLxqCiCRiIoz8 RpFKnaSJC9AxKv9GLkilgz/BMTn1XExwcj0XPPDIIR5fl7ouuNH1tslzvZ2m0fi6h2x4PRlgzL+9 9ZuoggB6yfnPCowa/bTP+EO+sCLv3k7yDVC+6oYzlzy75B/8EedEeqmz7LMVkwFFHgfPjdj2S122 H8qzTCzos1RGEDLpcIZf0GmMuWJEd9/WiNQUg8+3rJfBWtC1uu53d1tbfwSj+C/sPok3f+7gzBIn KqvN+OIjUjxSGRdORqPsWlIEVZkW0UMcjCIzljzGM0bWZwXmN7XxW8ArvtAXX3vvfdpcC3pGLPlS IpLIIWLsGoLSW22pUTHZ2TFRqTYr66f3Q83r7tl7SpwQ6/pOT4bbR8p18KZjUXMZJhEqA0wMlIYI eu/spyfHRu5fGDs0jeV7InfNizG8MJ//Zmphw4kaVrpdyf+ev02Je3bHR+esi9RT7w1HqJO27LHE zkoUqa1ftOVn7yhLrH8e5INQb1plRBSRSsTCXfSXBsWbzKnWmBhrqtkUz/oH+fcnFhsu71OQ4SyY Bqq7zet0REQ5StbMS0spTJ/ePKV9aDp/caAlbMb+5+bPXjpzw7ZHKHL3rOmbXpxZsJMJH446/uS9 6PW7NrS98/dHFz6LWvRdFOmh5R1lV0SZTdak0NAkq8kcxUKdTEx0UwKpGGbhwAMihCrcTN73kDQx 9MLJxYaq8pbf1VY0LuwG8rydxm3LbEm5/4+3MwFsokwb/7wzk0matmmO5mzuNE3T9E7btEBpoAfQ FihXRS655BwMtS2lVBYRsQgC4gGICCxWRNZ1WRbRdV0UUXeRZV31z99llVVX3RVXWRZdFmkyfHPk mCQzSap+n9pGtM089/u8M7/njWf2/TbsAz7R/V/d1zBi0+rTH/UsBkLn8blTHxqYOu4o6ZViUoc/ sb2SnoloyypIHfLySH0qyni8ImNJyheFwBb1uFnpRg80d80bVt3gmXzXrTy6tRycseuxGVPwWzc+ Nn0fAhMv77p12oMHptYjdfxeIZCt63ve+Gjt4gd66DgbRnrlQ0gEmclqYfcqBCDNU9aFF7s9eXke dzGapkyLKORiUsoSnLHhVYV1ABLpKE/QUej7xIyMuur2eVUlf+JR6J6eBbuOL5u9eskzQDxtZ/Fj XXVVyNzVo4eNrUOyeL2VbbvYe/uWNSc/Xr34atGhGRPviYo2F1UpbKY8o8VkdDl1OqfLaLJER1xw pJw36qinuTalm/qxShv1NJc/2ixtY64dOTJw/nxndSF/gBF7xFce7QvY4It9W9aKou8QG6EqaCFU 6FVBIpNU62qZNaNmuMczvGbGrBbM5DLFFDjGITG3iZHoB6x8dQBYw3fSQl9x99BC/6HKjfy7tbyo pqR+cllRTanlzB25+pbGrt7RtX4eS+wZmNSycOfMts61fQO+Bc+865vV1LTr+HS9ssEzas+MttYq HP19ZemY9rL8itKWKaXOQJUyw6AqqrGabZaaWwQCXtsd2+CY1tq5Y3zbrIU5nu5FVWVt9YsXlpdn ytIUWaYSh3Ja6+olrZVRMeCEDF6JRec0OrRah9GpE7Ddn8D1VKWknpQqyZdgqbxJSvFXSqK/0tJ9 evGejRvvufjpqiefXLxmw9Ot3gX71ybw+4uDNnjkE/sDr8MddzUMO8Su9GqyJzVBOm+mUduN64wG g1GHRMR0JYhPqnsjw5MvJsHMQ4cyTp7klypQ6T+MPns8ymI22mIGs06r12t1ZkOqFgueUCLzKNyA N0meeYU4MjCw8csTxLkEUrmJDiR70A60O4h2WBElXQ4kfV6n1WlpoYKnJCawTiLLJHDWwKAt6qrV ZFYqCyy68mqHsapUq6s2arXGah3KMo3MTVcJmTuBiRBWUNGFNBJdzPrGJ+7mfQen39n90/xhFe6+ gTG1c5/oyKr1jN/ZlcCGF/1H4JH7f0rG28jxhXnUq+8nDcOOTC4uOAJxZ4jW4dD+oAzhk37KvoGF azccavEueLovmcR0htCSsjMkC3KQa1SONx2SivSl+aX5Un34COLgQhtTCBNUvqhqh0LLqkrqqmYt 9VDf+brZXy2Z1b1w7/OLZ65aiLbNmfLg4WnjmNYA3sKrztXNva9+uGbp5jWn/rJmKV9f53A5K/Pc ZMfpdDl+YF8ni+7rJvYxfd2dE3j6unv3HZy08/E5t5Bt3d4ZqGTvjGnbnmxv3IPKebNi5OAacGTr vWtOf7x6/qNRMWSBNN50g06v0eh1BnZWJMhOq7CSiSDeYlHxMb5vYOmfEoTM1S/P+4+Azy5FR/Qo qsssdrpG1el0daNczuLUu8yYx0sURqqyxD9c4u8CWptu7p/WWFd9b9Mqm+HEo6WPtQLpsVvH1Ndu HrvUoi8paOx3JNDH9N6Eunl31FRY5AZzjmfdw553p9bfgQ9z2+QaS06126DbAsV3OPl6V47ZbtPn aDQ5epvdPKQORyij2hvqKYiHfhJEtjm8NTN3YN++L28dLyqZ3PnRRwmq5yP2m1Bf4OrHaWtEG8CV viiJiyCTN0trdRQaXVary1joiCo3CUW1ybDg06rw2Tf8Sx88e8BZX1Pdf2iid8HstsbCfYkKT+B0 a2Hebrg+sG1dvaeiuGV3tJULILM3K9+qNVvz9GazPs8aXfcTC03+FzJy6M9vrPKoE62NK45tyAc5 0i0vACHx9bGdmizn4y8Q/0gk99fNsN32b+I2ogWIijVjiRvghWjJi2lrWwrsDoPFYnDYC4ZgbQQT 2vIciA3QlSdocF7h7z7Ub9TJjdr7jgJbRvk9+sa03Kr+ieNKEoTJaKJ2Wce908Ab/pfsj4vXCxvq NkEcVYVsRKg2JMWqQh0hR53Ry29mb+AAGCDq4Q1ENUjUGl3sDTzk62Vme0J7JerOigOyeLNQEcjO s+ZaLLlWRJQtCpftELRiIZ3tVqn5d3xkOFgUbvQg8dyEIrPSK5/Mk3Od7xPrDneC3XecgN8Byice +dYLf8dr0ZODNaCX6Id+3D13cKrMAUd2sgpe61513n3nU99tvXtg85/B0vmHqy/tnzl1+fQtH1ck sHTDidlTfvMM8U/i9M+2g3mVxLXtGz7w34sT/uCqSe27qV2qi+4A0kRKq8VqCe5OWR2A20zfj7fx LZKILDQ3bEFy3gCP37v8hZc+i1LjeujftwIfyP/pQ0cfIW6inxMlBLFmgYD3ljOxc7Dm2EGgBnWP M/vPYbTEVPzmeDN1epNZqzWb9NGNVaIQltFHq8ss9I4jSjp6x/EZ/L7/8lHwNlEGzw9a9XqUVCJa qt7BYXAtqQj0v9I/zzt2LEFqkxYJXpWxRAX1ib9uV26JQ2vLNThsNochN7aIJuycgQWBqXJEFiTK PAiZWwqqoLoxJS2kKCwkyxRIE3H5ZHumRmGxZLxIfPUwqjE1vPb22ZJyDfpEAuE3BKYTr+U1rrur ED4wOAd+Fqy43R8YC7944NS17sDkcDX4AMLIHTvVPWdCmNBsNZmsZkSoEIZrAbNBd5uV2ZYEMekO PT1CZnwFIOI/nxzitnjLc//4rHM+MRU9894F5CQVBvFev2cj0U16XbJs5uNgerTfTdQncBl1eqqY 6lm7y4RrAPVwh4xF3mT/s38+6DwOehIYc8WDg2dQD3Wfo/vmOuED2E56QiofKoyZkOqImpDKL/Dh +XbnD5qQIvPIopBZZHGTT7Ofipp8GnxDqL5+qQHbjnwSHGsqvpUaa/pLsTTdxR5rKr9+CXvvuw5s O1sbil6zQHbeiSWLzYdbjNbvNbEU0gC5lXsSyR+SXDCfQB8Mjhndhx4K7A6OGd0yBoHCQiMsD5io KVyuCSKTxYeb9OahThAFBRWM9BU9urKWngxyLh/7NTMZtGpy82B7yMacUz8Lk1iWc6InmWUTTfSE BXYEJ3Wm3s2e1Bl8JWzYwRl9W9d1vfCnztvuB/8J7A6N4aDfhkWOSKyi7ergn7Cx2X24zZz7fSZs whJPD/xufN2ipyqWTL0Snpy5U1xffesSb7UwMDVkZ76xmNEc8aCg1wW+iRe11oerszVDmHgJyypi TbIMvhiyafSYSkXE94KwRMwEShs0lZ5AKeafQGmb7MPbxk/inkB540eeQAnr5RMtr2mb09bT5Jlg ts7Zd5CeLDlOTZbg0ZMlt4QmS1YwkyX+opARloTHRkps9NhITWEbPrJmhDs0NtK/rsXrWL2fGhup LPC4p81yuwLt+fNCYyPaDPSBiOUivpTR58HET4Qo1T5cKVelOBESKjwNkUmPwMGQ6HMDVw411s6n pjh+fjDwR3QAVHHlLzWhkQ5lBSc0MoMTGumZPjxdlME/oRG6NlrdsWGn/1Twoqyxils4Ipi6joKZ mJDRExNZMh+elSGNmZh4PWpiIuzO2axJiMH9oQz6nBlz2E/8Bx3w/w08Cf+Sy96MlgxPIEzz4UJU FMcThFUa1ul/LmxFeuygius9zfQKyT1RkJvnw3Mt9h8yURBaF0OTAg/SkwLe0KQA0ReyeaIpAHCN P/riCf/Y6EtG+Ifib0T/bobcX90ROMwSK4rKZ4kSib6sYC2O5e1jS3CqvH3Yh3wcvV8Rko8Hkj/c 3gx7OSQNrXO8/DvPQpca/x425S0hrn3HVBbX7v9dKB7hKGj9n8RTQWgd/I0j39KgTNLXIR49M8uH Z4olvDx6ONGCnLm/IWSqMEQO/s5xFRdUQu5e4/jwkjIfXlJY+gP58LBQ9mVFDzHc9+hHPGVTJ237 ZvySisNLKyju28tw3x8N7g5VhVSgbvAZV26EV1lOXptzlU3Ia4cjErA4bP/nIX/GQda3cViYOdks jp/W5vhwrUo3BH46bM0yNhc90jn4fDhrOaBnVuYirC5KR+6rOHhmnd6H69Q5Q+GZw2KNuAGkDKe8 huaUd8GqjLS0rCzswcHjYQl5IWROOTWQnqzUnHyx3kg20FrDEPnisLCTiffLxo9aaMlPK8gbX+TU ZxBfrj6QlpcptT8xuDPkX5H/2LaaUmyu2JV/qx3REFk524d3gq/BNq7YY/I1lveNyVsu3jckUojj PU20BzaGDBZmdAFXNywMrgbc9C13P8JH34ZjPUTVrgJrQNrM7BybSD5CPyvgCVllKhcyi3CuVaxd UCwNm2gXlICGDRnrTM/IS89QlOsOhnL9jKJcXz+88rYb50Om4yVY2bUjYktxsHrE0qmxVSMRnRpe 92+Pp079L4UNGI+UHuKPKA5aNDaouGjRkKE2BinQQHgjO3URsYoiPLeD0T+42xrZ5z/Gigu+9wzt Mo2wXJvWieu0AkXWnbhBoSX/jlt7E9GULJ4yOqExhw9WtZq+ffiq1uIUqeAlb36lsuWlK4pqLw8q WRLCfwDzbt4ScMLnx92xSUvsD1SQcexp6uqzbz8Dn2VLz44MJss4OEfuFOPkHMOxsS+GX/TPD8sX BSeCAY6KyPT7UdxhXLsfyx2GQuEXNE9I2CKBwLCCXPtVMSShzwTPhtIRiclmkcqdTrnUYjNh6ZJ0 jieoEQ6QuhxIyPzdspVm/vzjKUHgEorxs1tDjN8CIcX4vUZcRqRHH3PZa9dbNMim65fQJSGar5yi +R6dXLLyCVAPDOwoyyD7PEvwqa9UrVBaqHsCFqVCjWVKkz31paWOI/eWT1g7K0juBcS0tNeiSD34 8mMMqbcbvUwaEQoxeT0LdkAwK6OoTz/IkioVJoNIZDAplFIMiX4+oKAun4C/66Yujn7Bgu0y63db adiuas6mXGwn+X/HMljdX3sWA4zC6nY8RWF1XPZJz0SkBjMph1xOymQ28NiHzdUF7RPD0B2iGbrG qsl3+dW0hO8dnLF7dwiZgy8TL+8OInNZlHkIeOv6ntc/vouC41hyiUjJbEE6zmbownUmm1xuM+nQ tAx+Oo4WiIeEOx8m4QafpsQSwKsY8G3xESCe+mjJ7u6RniD4Bp+5fgnpsF1cffvmvt9GELco76mp J8BZ6XJxZrpYrcQwpVqcnhntQeYJJePFeJ6N8d7PpjRG4DXSYYJr4n/tjGBq7H2VEbJCbWFKzeoZ 22Snbujbm8Z6MJP1+1BqtLmGRqRdDRJp5YU1pdYIkRbooE1qGJjcvHDXjEk0gLbw8LsrQwBavWc0 BaBVrkD/EA2gZWdGADT0ZTIeFBRq1rWjlULNqrsY1GyBu0wiFSskphJH9rTWnqUtVdG+UFIkTSam FCsEAoVYiQmQaJJGEczjaGqGdgD8ycBAhCLbSeerDa7ddyDwBrzyrsaaQ/GroM6bKRZ045g4LU2M IQibFwtdiGLD6LdHLjIgGJWKD/mfRn9+PFryLFrytAxMQB3ynZHGLXmE76LfVKBmwVzUO/eysS15 9BWEkPR5TBA0CfPcKSRlWMKQ3tG/mUuxV6pMzJirEFv1AixXLBCIczEU4WavYo3MyVnRlwTXaKrq IJuqGklTVVQC1CTmpzi8LlAoBEP0+nk2GRW+ajQDFck8BVmJGAZKoc/WZ0sVSRioYF7x807+d2jT P3B88azuhY9z4U1NpEwTNve+woBMF/qW8K5pCrXSIjeZ5BalWjGENS2aWlo+8a5ZQWopuKZdjaKU 1I/PmLb9YHvjHuQNUrCDg33gyLaNa177pGfBziifZFLkQBomQlERlsaOlKA7wuwRU/1e+AR/ggKN KA9MuHTe/wyFFLHfr4haI3VKdZELw1xFaqWOe420pEgPMVc913QTolihGoYV2lmyZ3yQFdoyhmKF nE33Oei86oulgt6Z0rACH1ZhjaKCYtaEbJFamCHLEglRsg3LkmXwrgkcBBCTkQMU7jN9QhD3oWxz JQj2iPoYsCfqqlqKNRFIFBqxWiJRizWKqESQRTKBg+JhDHIxFtmhrjks8FpLUd5uuCGwdV19VUVR y+6oq6ooNidbIsiQyEUZGSK5JLouRC4bx+Ew17zCQDcPnAAYcfnYTo3EufcE8QVz5cvNcJ71KjGH aAFpRZoxxHfghahr62iNM1UyRVpmZppCpuLRmJOkYUoofKjfoJMbdRspbMZ9j75BZK/cNHFcMS3A EWIkDci87n8pd694PdZQ188R5WTRpko2R5SHWRhG1VOB/WCAaIA3EB7wCqPhGhpx6Y7p4RVBwiVd LpFmZkoliCidl3Bh8phNs1iyvXI/3ccj1yh45U6w23cCPgyy91HwyofkZa8GMZXv3YVyESmMPXuc 6zsOBfGTZfMOeyL4CZVIB07MiYAmc9mgSUzHpw6SJhmSTGpZ5CNNaOUjVAl8LUiVBNbR68s7wAec NEVChCmSeYz+LF6E7c8cbyYmSs8QCDLSRdELScilITaEUbfU/zUDgiyg/Um+MYN8DGnl/fTYsdBv QzE+yfPKjWpJjkyQKUmTZWbK0uLSK7LmMoQGEuYzQoQGEryO4M/EF2+25qjgea8Sn++GtUqzSfLW e2+Xl2rhJ5nrB+qJz6cIwR3wCVKP06Cnpbe3PFAJn3vmdeL+QC3bRxi5B1QGyYsMSXq6JAMRirnJ C8ZHEcrCxVAWgWZ6eRE998WnNFVx6b0LyK1BE0qWh/iJiC2ouw7pYkxEJZuI1W2FszzISjCqzgiB EbReDAKBQr6bvcKHsL00AVENtSYiIKpL6n14SfUwH179AwgI+qkK89Hs1N1aKlEE9BpFl156ZaLa kWSEBHi/p5n8q+fGN8wr+s2gY+UwT031SvRCR43HU5OMnKhuHrPmxjdrxjSTr4JM8rWB/N3Ie6ys rmFZh3oeUgY18hEVZfkjfHh+mduHl30PoiJFi/ARF3AySyQgMbDkRiDjLBIjJaHP1IhhNEryyKjI ox+CDInRSFF1boajZ1IzWJIsCjjZjmXf0/dczEdS3ydkPlI1ADcTAt5J6no+VuRGCp6P2ICiSNzQ GF6KxF0w0ocXuCt9uHvoFEmqNqAoE+p81mjKZHTN9KXeaiGyKFkk8NEnY4eUAwrIAQ3n41IcxnIf bnQ4fbgjZS4lVe3Z3Ap4K5nfo3mWYclVFIQ1ZDiXuVBXEs5l7i3Lffgtc+f78Ln/F5xLqnZKwsG0 N0zm4WDgumRG/RH4mIeSeyISazLIDtXEczN2fakP19sdMSQiHzeT6vLC4mqQ48lMEc/bjBhKTaU6 QGo1oTicHDiP4XBy5Hk+sqwYfHgOH4eToi4Up/Mo/G4SJVj8zuwh1YB0uhrSZE+BKN2ECFUFPlxF P6BLQPakGsBs8gf8MllViyOCXhhKhCH0vA717EoNS6w+XEI/vIt5dpWq0Yd1wq8mjRuaMEohViIy mqEKaCw3eVThqvPhrooqH17xvcmjVPtRHjIJ3ZosyhISS/6h14M4kimuHiQjmVKtCCzSCXkpBTWj CagUVGNVhKxghxHDRsU1FimzUalGLR87BduTaZyAqWoaku6hDpOPtuJrMVOkrVJ1NzeNBV9IltO8 lNYXQ6qqabQVGH7LIMjO9+HZBpMPN/DwW6mWUznNdy2G25O5M8J9fTUkuV1QHTQljgirq2r24VV1 o3x43Q8iwlJV076saMeM4nynbd5o5qRQNjG2vbJoUuv6j8CRZKtJSiTZl0OpWeF+mYsw4+6XExNm qeY1m0CD/5sshuPItNuHFANKyEl2zbHMmtNc4cPNTpcPd6bMrKXq7/IVnsnjWvARNZ07xowZWQDe TFqfuVi3VGo0wtoFFkAjOSi4AgtZny0FhWSlTp2CS1XRMCX3ZF+YkhPTp3mmoDM/PTc0zTVQIeTl 5OoKbR4fbissjiY/k3N1qarPcHcLrPkip6OV4e5699Pc3T7wdLKo5uPxHhlKBjN1OYbTM8TUZy5O L1UVWRwfsiuZSyN839DuYAiD3RMn+cezo+Il/1KtQREykDlv0yZUjNDPQsYl8xs3MTikXpF1ry6G JEx4r46fJFSk6s4zPbVfMqTht947FxC/CZOG/0jmW34AMYUlh+VrcXDViSET41abhGRiqvsCDnIR /kNSB8cTjc8OPSfjSce4tOQiHVN15H1BEhL5/0nVCROSKdxM+1/afY7sg19PIa+GKmPo3i8XiRnX lw+NxExRswSkJnCkoHESgjMFa7Azi6mi8WQnTwnlJjtTza1Y8hPuSqpvNBF6ZEirPHNPis2Kxt+S imVFU00mhiVFK5OnEsOYDu2utBgyQsNo+tSIKEvcZWZrTY3VXOYuwYxKY2L6lEOBJDTqA60UjQrP XUWpsOrGv3vGUa/Axc2l/ovFpW5rHtN7499rmpqbm9YIsnrHNAda+CnVkG4Z1EQDTfSYxWqHzV5W YrWWlNltDsysNicjeri0S0StIoYYra7y8avfxupCfBpNs0Z2QCWQ2Ss1220lRRpNUQl1Go5CrGBL HrydEStoAr4V2xQtJ/IZF+rqmb0pF9sbZ3QXJ/jKYfF0M6IuKiUltlpJ6UuLeCwexb1yW5yXg4UL YhR5m4+IVcYbPIaPDckvgvSQm+Fj9e6iLrygxG21uksKUL1Cz8/HcgnOy8vOTK+raZ9bVQJeYos/ rgchIuRs2jSanA0dGQm/TQoeUYB89U/l4mjZO2fSB6Ycq86Qo3PYVSq7Q5djiI2d4Fk/nPETT9Zi mxg5w/IemtQUgWzjQoW4EHsyZOR+nREqh+YyzG25VOscM7290uN2eyrbp4/Byp3l34e55VLi+zO4 lt/fkatvburqHVWLbIh2E6odmNyy4PvTuK/FGepaymxuxL92itUyqOw6G+kmnV0liHYtn1vjuM2I UxktwUX28Y/xTv00BuNl362hJnr0XolO2Y2rqHM5VAhbKBe/SBTXG12VxvXAFxjEN74EdVPA7/NR 1jDR1tDqVUqNRqnSa1O1RoQAjr08qmDBwPEyzIpGg+EoK8hPqJQqZVCE4Jk0PJpzac1t9ahrVJC7 M1WeQVVcYdOVFypVFTqlUlehQqPUjjrBkeP6imRUMSNcJOGv8vHFjMCkoGGB9YlpY444Vtpsyh8U x9GygndoFPnp1rqFT/fxCcgCkxFWdbKRKwDFy9lEusLcwlybzpaES+auPdGcMlhaVVJXOZv6XgV/ GuP1TfzEcmtcMJTF8suc3Y7NYS+zlpRYy+wO2w/odnh55uhuhzT4ZR6y+WycAhspzjl47uLOqGgw QDpvhlalyc7WqLTR0cwTCGHyOTaTkF8FT1uMz6ayS9Qpi59eio7EWqrTKrA7aoerVMNrHfaCVDut VCnpuL7rTBJguqDxPgdH7ZmTHJ+O6wRyNQ613mLSqLOz1RqTRT+EToCDp46rWgeiTlKMt/h7cSco RuRzQhavVGm05escRqNDl2+LKQG8gnGS13FhcCEWwo6XzhCLZO+Kjow8yOqV5hqVeqNVo9drrMbY OssvYhylHSffV9zANoeUYXy7FYgofPsGOBEtZwFtSUOexaY1GLQ2S17KluQkuuNEJdhwd/mGCNwd L+zWMOr9G3sI9ebIdHLBppbrlDI9TH/HyfXbKBB8b2yrTBhCWHjMft1Gc+E5QG41mg0GsxHJkefw cuHc/UMMJw5XxSTGVea4w10sYvxvcfKdD/PjP9q+j4soj2txOp3rw2cbRsPl8UVnQ+hMw9djUfPo vZODXjn1IoXRYDQE90xcpDlXP8JBniMPRct8jgNBX8xl0DCQHhN1Bq9EpcnRK5X6HE1ss8EXeCFG Pc6Arsi5hfFRdz4Er/+I3eFHx45xJNt5+nRCduzkexXFDqPLojQYtRaDwaLlKFm8fWEi8h3rj7kJ 9S5xKQTB/31XFAR/kMsmSZD4SCxhkI7sDWkiXqc35uQY9YhOpuMm4rl0iCfkkdkxDQvKZuVv4/Rf hJyPWDeHjPAMnUpDlS5N1A6Ht74GWfq4+GkPYfUclgqeM4hAy6AiYQsGkxUrCyqE3F6jCPLiIpEM wTR2BBblK5FML27VIrDM5MVlIqjOVed2u8rL69RumbyG3naRhZ0q8nYL9RlJsBBEfVaSSu1WKNzB 282YENTP6QOu48C0bgZxBljr8oyaYhXafmyHLduEdnz6QLo0S6iv2PFRN2oSyyRi2EBIBedvuMCV JWDJB38kznX5RyJXr68m+vw2wXm/vW01XgrmIxdvuJCPwIZR96zwUjodI3WaQOqUQZ+lWebVS8Re XCLRQkXmDFGpASI1KrBAsNbhxbUsjdwhjRSWUOfK3BkOtagJNTsGck7fNrlr0VM71q3bclfTyBbv EtT5wsO0Xn/fmi6TCA3uRz4J6oXBq5e8+FbHwsB8wfLA/pmT7318UsONR9maTViz1B2rGQythf+J 9dHeskN2b7ZOjMpkppW4LDMbRoRYB27PEUIlpDbqcuomUjl9O5hBeqmbwh7mjr/Dls1QV8FHvlUe Bfzuf5ZdExALUW2+bM/G3SM0KDz3xUekdqVIIcl4BIOnBmrh01P9X4L/fPBwTcAPo38Q3FFTQqQj KkJc8bh5fHUBuEadSLcByha+iDaRO+Z8qAWaCE2BpnvLCwpaSktbTKaWjAxxi8Y8HtdoxC3YKHHD cNgwHi8vhoVTJk6sap4wGRWLpXkTcGk65RM1tb8MeqaO8gvlHFnoH9JJcgYeY6Y6qM6CygYPx1yH krmPRn7JKNQsCHeziTtESRqI/Nrr+PS+qgrpsgxBXnVx4/tNwxZMvNNqGL1NDiwL6rd0rhoLN+SU OYs3IiOWP+STZpoL8mxyX21hXm6Wr7sTPdiN1IK0KW2/JB79R2fLpCUFNmB/cOaEHKW4Zm91yf97 VagpO/X2h/DFA3PKCk6dIv4RgOC3+8sKRtXOCbjgc5/RryjkP039BSGgGMrGJJiBjOdsyAIVebUK hUxIrr1INoAxsUw9EZcJ00wT8TTaXGQQ17mDJmKe71jCfL+Ug+/HJGuJD/ruOPXKytvvXv7UqZUr jt4/cdz8tp6BDsxwQyq4ckO674WDD10C4h1rnocf8H/97to7T17omfd7ysuHSS/3kJIZyN61Gqqn mGxvdX5+jVBYo1J5agQFbi8uLijw1DSO8uKNjZ4ayOjFIchTU43IS+sRj6imwYvXwJpcL65JY4RX u+tkISfT36hnVfKIt0P3Ox1sr9PTPNRTYHXY13GQscDNfsZD12ybEGiz3bfLFxX/4s7CAslCGEXh us5jb1QtmFKxpH1q4w39pAduKyvqXtjR1g2/fBXULWjf1tHbuwKvLHoTfrb9wSL7n1xAOH7MANH3 /NPaKqfxF8AOlHXZ41Ft2emzf0HPBmadmzhmnd8Pn/vgfKBIcCWH8L1D5/qKwGNz2zaDIggGZVAR 9hJpQ+rsugKvOg0AW24+yMWyNGSjLM4WGCbi6QIhVEfagTIObR03DdR5wtxoJJyj45p+Onk4v7mu aXJZkXDawTNr9dqazaP69GpP0zC3vk9w/1q06Mj8iqLhVbPO0XF4dmNpwfuBIvjMplKnt2ZOoAiF wBUqDEhvv0y8ROc0c/JaAzQWGustyMyUOsl9h7lBig0TZ0lqKxD9BNzlQIRjzZZJeEn9GMQsTs+e gKcHc9lVHkrlOjeliZvxahAPlIbwwOjxI4qrTp689I8VDe+5p7F2atPKVVUdHbVzW4ucpCLLYHMn mJZT6iy5NzpjXVTGIi91o0WPPrdn8zfE1w+u/nngO0En8QlR9sa6rlcvds0NyE+fRmqTpypZlQGE HkQg7DzNjmf8CoOFCFmEaW8hNKCBgL1VtU4Yco90YecD52A39UX+9JybC1EpoiZXKerzOgq8Gkm6 CllJJrRKlZ6GaMylPtysyffhGk5Oj2NuyZEEPUXg6drp/QW5NbN1Uwv3rxzpGVM776mn39m25on+ 55nvL/Yuva/rAP0dnNAt+93iCtcy/e62Mb2bx4383RP9J5ifenfbmtr+7p/+undZf/eBl3qXQQhy BSaEB7Gj/3e6YI8MQRdBW86yNyldDLtIXe6ndXk+/LOkLgd+vWYp8x1C4bU3PxFswFzhMzn13kwx DCMZQrQbzxKmM94l61NNyMeIW2kLvSLD8263Sc+ehW84FtpkZ89irsFetP/GujNYc/BfIADkNy9j /8TskAwqpziYtAwfDmX5cCEsTYMQDIYxBEqTYqgEjb6L4gpiPx6AuBFyBwKEQGFTAAdyLDC3B25r +2cb3NYTmAMf7A48R/4hcLQHEQHnOaIV/iDgAMfOEe8TH7wNfhVwwB8QLedIOWxkK6HETkJOqNSr y3Xmd+FqpwqBu3AhkueUIIjEmYcK9AJ2a08zBDRCQO5aKt3K4F0+B5O0ZFNB1dvQn6h1tRL9rX8R smfRHx6ZWJ+1XF5d3v7WJyArbUlasXPqxUXk/9oOrq47efK2SRvGtUiHDZ/vLiYkxJWiyXKX+9Y8 y9Wr68i10AatD8pZBJVBI7zWaFn1IWH1AkGpq7ALL3FRMlOyhm9ODF1uQP6gwFbpDsp/7pEJ9VnL ZNXl084G5c+fRslP1gGILJd7X3kloklzM6cmAdm6fS9TFcMGHQjrU+0182tDKUPr4vqhmiTRQkCX +1Q0oOVHD2PXsXV0hmSdgCEMXYVjZGa/SbGx9kqB3VGpxq4PnkPdNy6dPIke/nbR0VGONxwQLICQ Q9h1wXX6N+UnMHInBqMwa69K/rKM/MKuEyJAfwks/W3ewOUtbaMhQFbLJuy/mITMG7c3RyoGmcIO HELTRF24LE2cmZaWKUYyEIEkg87Q0LaJXHYok1FvrhAiiEMhqBQgHoVCjdix/xKnTq5au677DeJl MPpU97q1q14Fdeh8J0HUgyLivXqAurY5AdxIvAeKGgnCCQHEgZYge7BFpAaiX1KHxlNSO2RqZE9n J1qSA+v1lH3g57DrQhO9q5KfEGWJsjCAsbQUVNploBII7FX2yjyHHbtObnEuE3Ky8V8PnvQC9x9/ Q3Qi7Yf73bANoA/6L+1yYTrl7HlvQ2TOisERoRybSq7G2d40qVQDaYRdTFmV02uqI5dcJnPDt42F wVvEFrMAlUkFK61gykUiQDz897s7Z055dsTnMyc+vAcYwBPABGBwpL8A5Ad2HV048+jxFQtr1i96 +O43v77v/guvEW8RKyi9QC/p9w2QBNJCCq9YqCTjVSLtwiV0VadCMps5Ft9OXVUG7NSdIvpuNXY9 19S4nThPTCZubqgoEiwaTDv7Gej+pgsXzCF8P186o3nP9Z88tuFl8DKx9Dvib8TxI2c7Fv+L0tcG LpLXXA+lkZZEERQRQSKWJR0yu4z8qgTY9Y7Alx0BcvMELhrga4sCLxlg79Z+4iP6PdAL9HuwfQao 37nhEpxHLwBL6OduXqF/zkTZFoazIdK0ZPtdQo98lZYJQKWA2vhV5jpAJeW7XAd5ZSW11RAqUTX9 fsiz87YddBJ/2eQfixxzgK3E2hp/O+nY1vYdO8rBvgzkuBTk3vNrhcEq0u5ohrFDW7EqzeiM433E Rxfuz1BkY8rzGEHnGPicloWyNe1piYA0t0ASloY2NrU8UqYm5bCHblSTxp7dfvzdn7TotWTTuSRw YMlt+++uHk0auvXfd85/aPod8x4D3g39xPJVxPmvO5aObn6OsfNx8noYGbMab7qArEQCVIBSCRo0 tou2Nmk1GZnaHTf2ChZ2gOM54AKQ9BNXwfs6SmYx0iAYjj1L9onFkNortkD5XSqr1NBFvsnX5eUl gdepLESDctvzbJVUb8cs+GYF9YjDXU6WLYSqXTDTFahRD0CnNK4qnkgMHNyulBc2n5g2rhcML8tC zU32o+dPA0X+3347omIF5u4g3joybZykyewDgns/fHRiI9F3xxdYxrlPJxI2I7ZlM1CeXHVLawMt J3yDzKEBuqfVeyUQkMsBhGQJNWQ8Z0WqLVUymCbETCeRgzSyndWFCOWBdUd68KPEqVP7Th0W/Mv/ JeF55Wf7Lu0fX4f61933C3Jnf3T7qd+NGzaXeD9nxthDT3fhTcPm/ZLOYmQ4aamNjG8lkmxyS9XF nEsZzOIqFuEhzKXv9JipVhmV277Y8mTgsWltl93EJyt8r4P83z6LDO9T/ebQ3B5v7Yq/NvSsBM5n Z8/fvflD4nNa17WkrveHdJULUFQgR9LhdFLZdPqCIV0FSlAZ8ga1pNgFLCHQLXD/DdnDz3Yv/RWo Pv1UAAPv/A97XwNQVZW1fc79Y4ugIAJKij+IKCqiiICKgPiT+ZupIaIhIiJcAeEiERE6pmZkZpY/ aWaOlTGOOWrlkDlqZpav+TmO+ZWf4ziN+VXjNGZf42twfffae627D4jmN/n21sy5j5uzzzn7Z621 115r7X3Ove59beNn68ekWCuqqvQeZR0e+u2rUydsX/Xe7k5TE1/5zfy8EYNydgidCBecdtAi4c0X n1C9daS1Y8fWoZ1dztDWVpfn1zhhF/eYfG1HfQ3FSz3h8ryRYfg+irVdQvxLk0bE9XPFrkqK/0XB joyxVx4tqsjfMSKk011rxwyZmbHFGms54ZgwtLhyRGq3ecMKMpcfnJ3Wouczj9TsyppU5bg7KW9J Zlp30H/ru14BjrlaIF+t+jqauXxa+nhxNPeFX6+IkS9Q+l3qS2MTERgRyx1VbHAgEsaymx/8IKsu y7ox6/T61IHWdzv2a7cpovv/Dbiwu+qNtwL2dA9NG7MoXtOs13dY9to3eQWJ7zPfo6UmR4a27Nx3 AB//SHuhc3iQy9mlr8vZsaXLOSByeJeOHbsMjxxgb8fHziV/YZUCwh7w8XtXSCyiX4Tnty3i5BrJ S+7O+8nVUzA9juXEWo3vDvWV/5Gb5yGXfVNpcGC/CeW7s+/v3i+1V0CQT1DY8bVjU69tuK9zXtHk cU++lpeeOK1Lp7fvH/2gc3DspNHz81Pi6jakPFEzqN9993Tu2NKyt/206N6dRpflbJo94dHO4TkH 3GdWPPwH/eV/uPZkV+Q9VzopYdRw/ZkFI5PuTsyoHJk8YrA++rL76G9mTo6NqRDj4M3HYTOfGVxb ffkFzdfaphl3Ms3aNJqZngUCHwdSCW4HvQLq02fF9x2VkjN6Wf12S07eiJHdOl+sT7T/3XZ12cSc aZN/MTKpffnCysDoyOEHtlZXuU+JiOZrx295rxCX+L9pcXhCGvkDIrwHO49p7GEi1lv9+uv2tPcX Hr3Q+a0wEUX/VVDcHH6Vp5lNn+e02Ly9bRarl6Z+ZaVHDHzpNjZceIxw3R7mrqpfaOl9zr3D/vfv rljaW/6qr3fXLTpbN7TKfbrqeP1e6beuipYb+S2vAAjWbFf1HkA8lNPO2wfxct20iOSgDlyT/Du0 A8m16+Bvj/Bt7XL6RhhjSGHKhfC8GopQzKmGWXtY7cnBcZmnRgyePeopLs7sskHPpibm1ydZsl1J zw4ZzHM2zZ4Z/souV1K8/Ze/qxyS0L6iqrLt6rSpE1NXVFUEV9+Xcf+o6sr3BZ3WFpzOLXyVqMY2 SIxtUIOxjWg8tmJkOS178+P7jkzJTa+AgZ2StooPK+99esTEOVOnLLh78F18WAM2HNi6vOqYx/Is 5TFYJ4hWbKEup82HC8OHohVl2YXF8zLMCzkb7ANLit5xn9i3Eexs1Ovbs5e/WL/m/vGdQodsdb94 73jbslcfyNi44KMXZ+Wufeqjl2aWDhk0d+qg/r3LBw7mXobP86u8/4tkeW12f3+7zWppHswNr6Wh LnOdiDB4GqOTidAP1v/NXrJ2x/z8He63frdBD3+7ZsPfNowbcsqh5Sx0f13RfsmujekTfr38UO2g u7dsK54zfMAD21ZI7fHh0t7E9bLVG17Mi9k1uzFy6hfORRoI08g+qNL9Qv27Nu26tn7IIJtPhyvP zKt8vyL23qwp0ldVcD7Oaj3EdyD9unL96to1iLt1p18QRiPyW3HKaXl50TfI/OLUq3Fxcbh7xd3Y yG61A/qMG9m1Y+egnncPnr1q8thvYt4bEpd+b0SXsKDeqQMyH733bmtFWeSBiiFxUd3yRzyd0OdB 56/1LlPL+v9+5chBPSLyhj+T0Kcwe637MtDY3BbjqHaUcM3iPqa1n9Y8wOZyBgUEBcDX3jih0rNC GHNY/uJFONhvufUAEudUgS23O6rda7Pqy6K7lrfI8n6/31BLaZY+2nbxHndw3VLv8uRhwQMnftxi 6Y7g7SlCMpaz9jBHobRVXJm5SlubSWPVwLMGKy/GJU5KxrN62I7Zsb3GpOZOrLBMqF83c8SY7uFn LCe4lWkfNm5O2tQF9yS3LVtYEdC7xz17tjwl9g7CrHH2MK8wLUDz2eXjbeHeqa/Yh4BFRf+4rjwy 5bzxkDQomM8Xt6P+mp7dPyKhm3uTpbX+V3dtSvvgsXqSNU7ffHXh5uBW3Trq7Z52p3yx8Ol2LVsN vKbp13dY+arXK0drw7WmpV9LPzRiqDW65CQY30kRPQUGBXN79t3O11Jivef6x/RbGGf9W31u5At7 O1sWWTtZ0h6Yee/8xAhbz36Zg5OGtnt+YbrDr+VUf/duaRGW8d7a8uj+ruQW3MxZNK9Sp2a3lDrt YpbiDzhF6DzKD+ahpz1sct0bmWnWuzOtywIsJ+vfCLL8MbC+t6VtgAb7BJYM9OHwS/29koO8hSNv 7qN5+fh4aVbfNu3mB4fAry3GXOpLXwYEr35Tt06WH9z7gaPKvbv9yBPcxNG7jxxZ+MFnYbWdRSxv yfLQ1T25tYeqNkBWG83mG+Rr3GO5JUUQgjemRqzdb0LHbPQSVp1pw3kkOF67S4vRUuEXLrQWEHW2 aN2idVTn5CJn56j4ImdUg2/q3yQSxb05vTVNc6neFKZ5wVP2jvI9AXjqbrvU7kDxnFf2Oae8F+a+ tnLR8b8vKRo3VP9NXs5ru0/+fvdrOXPm5Ly26+RJnsu75+J77q/d732468JhvaUed2K3fmFu4uZH xoyYOsq5Oyb/Pl3f45zxyJyNj04dqw8XNUQrJ3fJVnb/Xo//cOdf3nVfdh85vuuz97j0rec1i+Oq /STXY+Ef7ZYSp7cWCnFwqOZtdzDfYidz3OAfpdBhM4Iv+OBhAyz54PmScIu46Au2O66Or0+wvDe+ 7nP9G5+TwWlxEfXXLDb/jPjI7X3cPtZgd6tudyd1Pan/3Vrq93V1/hNf+11L2pCVY+0T3Lx72wDd VtXb4rDZg9o1m/7AczU9rHarNTDra7keyxU6E671Sw7x9XN1CNACwlu7gkOCWwS0Cg5uFdDC5hXU BuZmjEdxuN7AryuIKBXDUqMO+aMe2WiDKMIeBurT3BO6Co06pPdsmRvwhz3W4VKF4jrFtPcoln5O ald4gvvguCFh/Ya+1z1c7NBpSC3saQ1K7tChs6tV83B/zWV1WNt2DO9itXYJ79jWbuvZbX5kV4sN dmgO1R9WLw9x0v0OxQjKb6DSvwledAjH+NF2QND8rt5D0Izs4OTQr77+ujsPZqo9tgHZMcM42e5O TfBXVxNWGzaRB3dyn87h4So+uX0DnroRU93aOmzIkWGv9v+bHz6tb8mLZQLM8tvnYwdFh9bT9ixb d8dOEUVarDKK9A/zt3Wf4Njp3qGPF2Vs7/AyW5sqs9V9l36BS8O+1ubtddThLWJkiKe47bBZNZfT SvFUeGw4V7Fwr6P0kMNeGJvY3Q0PPjQtxPP7gHb8/xAC8X+ViBD/d02slsDXQynaMG2keHJ8vzZV e0Cbqc3WCrVybWvy3FiLdVRIXkF2VK9S56yozMjupc4ZkeXOYufE0Palzkmhw/z9Sp1D/EsL5xc7 Rwa2LnUODwwpiIosD/UvDAws9A8tj4wqCGlm7RQ+IX36OEfboEJnxy5j750yzdG2mW/8oOQ+DqtW 6HR4901ITOHZ3sHiMbr4S3aB9l/lDqzIUQbeCPE7xkcbfg0oJjA8JjAMEjxZhisBMXAZfidA53dh 11ancygeFo5PoCHp8NsCkOBGrB3rQDnIB/C8Fc5v+PJvTWyFvq6mxv3Hmpq3Y/lneAX/o5+rcfer ca+DC45twyr612vb9GM18C+nP3wq6odt22bV+td/WVOjh9XU7OXX6g42+R+HODJ5ffi4O8my1/xi Kyy12+o6QOuW1tCTfVj/ClkIWuTdXKsVdFi1bdvqjkqCBIm2T5v6KjH3j/+slizSXkp2Ch0pebDY 2VBLGmrIgnylICVRpZGhc/wXBAYu8J8TGlkaVRLi/UNVpHcjzfCoyo+rILf4yvSdUxV34s3++5Y7 qi3WnTf7BvYPsCvFWoX2QnKu0BnUF1dxsbNJncktUToT5YoM9c8NDMz1D410RYWwH6gvN2gLnvy4 2tLEN83vnJZc+/jG76LfYWtyw/fWtR9gS+Zpm5PzjHrRUCfyC0qcqBfz8ko8elEUFRma7z8vMHCe f35oZFTRHXI2TViTH1c1PF/Qv3MKUf+f+BX+O6wF9HV/zaFtddd6rXC0F7svUdpAbSwf3VHJ3RM7 6brfqF6+vqF+HfSxfo5Q7zEtW6QPgPdXUsKsXhP6wmsrI3vAiyv0WqD4m5QkX1ESr67ExHzvyyvy K0Se+14N7oYHejZCmq7t16+gJDFhVNKsed3z8mInD+kW3issbrpt7Nxe8x5Mih+VVODs4dMicia/ 3qdrfHr9hLv6dItyJcaPGjy7iFfod//QruE9w+Kn23ptfHN19bfuL1bMf7P+K3uJ+6w7+cNy16Hz roy6cfa/18/ftebxb90Xqkvf3Gi54E7+iN/60/xpYzZO79Nt9eP/cH/+pLFaybt/LsmA979WcMlW 4BtBINkMbXRyzw6JqVYu2R6+vlMzovwcE0ZN9e7VssWAsfdbQbSdUoZZrV5Ctt2FaMVrTVzb4bU1 +AeS5YINhh+IvqVgw7/vbpza7VavgXlek7ockZXfP3pI/ANTu2Rn97q7f6cO4aG9xlmaRWTmx/Xh lzPC+OUR8R07hLePGmfxCe4WFlHm6D1tZMfQnPgxXbJ9mrcb1yUbxLrmsW/dnz1RJuVzzh3/HxXz D//JxWVHd16vv0x3XEfOl0wbs2la38i33x6RurzObTn250/qe1iOPhEV+Qm8SQTfXz2h9fJ62WER v9XdlluofsmhISFaly5a587eWiemNU92apY2bZOdbZi3T7LTm8k353okGd+TC2hsxuGF9zB4RSrA C9+XEl/HO6Fn6J2frT7w/HX37xbv+6K8cMm8w/bKbT2886ZO6llZPihngsNy9G33FnfZey/as77z 3/lLPUIf/8Kj3z1w4IA1rWra5BX1W22a+9t1owdr4tNXIJHrwoONsEfg6G3iunZdT9FLOFYLvIr4 K8DSATHwpnjactoaaJ1i/aX1I1uubbVtF8cfbZft8fZs+2b7Z/bPHL6OXMcGx4cAL91riFf2bWO7 1xd3EizvJ4paxMeN0aytQM/bxCyODc3e4/hCoF7Ce7BACWLFTfFF86jmec23N/+HT0+fnT6f+Vo5 +voO813he8D3eovhHPktDreoa9lNYErLdS3fMmHifxSf3CYu/bjw6/0Tw0yOl/xOc1wD+Psixgss QrzQAN+2GtiqvNXbAY6AhICjAf/ZOogjpfXE1utbvxdoDxzJMTfwQOD/C4oQSA96LmivCRMmTJgw YcKECRMmTJgwYcKECRMmTJgwYcKECRMmTJgwYcKECRMmTJgwYcKECRMmTJgwYcKECRMmTPw4CB4a /Ns27dt81vbptt+ZMPHPIsTn3wDdvhf7Q/bfNfSuj+76qN2odqcU2qe3/+77EToUcejHQodJHf53 x/s6nuqU3uk/Oq8Ls4bN4PigS7sur4YHhj/dNYBjXoQlojTiM0C3qd3+T/fE/zY8YkRkn8idkTt7 PN5ziQkTJkzcBJt7HmyIXjaBwNtEKsfDvX7N8aHAeYmozgITEIU3RW3Ut7179M7p/VLv09FF0c9F v85xPvqbPgl9svq80OcMh7vvuL4L+r4mcD4mJCbptrE45uCdRL/BP1GsRPz6BvwNEKvdJvpyZMY+ zvErgX2IekD/aMSYm2Jj/0/ifONGxlXHvR0/Jr4yfi3Hgfg/JLRPGJ2wLOEIx+cDBgwoGrBO4P2B loERJkz8D+GhgecHJf1skDmoshHeFjhxe0i0cYxMfJSjRuB3EoObCwxHzLopDiU1TxqR9GTSX5JD krck/yn5evL1lJ4pKSmrUj4Y0nzIeI75Qz5ItaUmChSk/ir1+O2Ch+wP3FGc+2liWEIDVA/7x/D7 fzLIu01UmvgXxDfDvxlROuKzEZ/dLT/PSYwMEXgCccGEiR+Gex4dFTTqxdF9Rx8eM2Jsu7Hrxnlx PDzuj+NLxl++95EJfhwV94Xct2FiqEDNpPhJv5ocw3Hg/iEcrwPSghGvAqZEIJ4x8e+DdO/0kvRT UwdPrcmwZGzLuD5tGMcz045PT5z+1PRvH4DPy5l3ZboyPwTM6DHj8Rl/yOrFsTLri6wvZvYTKESc AWRHI+ab+Jnj7Ky4WY/P+jQnKeex2eGz82Zv4jib65WbnftqrntOGkf1nK/zBuUtEfgkPzo/L782 v9bp55zC8YzAPom57QVmItaY+JfA5YLEgoUFxwrbFU4q/HNRcFESR1HR8qKz81rNmzrvFY7jxV2L ZxRvEPikJKRkWMkCjsMuC0cvgXsQawX+F+IfJn7eKF0yv9n8R8scZdVldQ8eKI8qX87x9UNDH3q/ Iq7i9YfjOZ6pDKtc/UgzgSVVtqrZVeeqzi2YtuDDBR8u7COwSOIX3gLliI9M/JyxaOiiLYvqH532 6P7FLRfvWHxtSRxH5ZLXlrZeOn3pW4/dxTHlsXeXBS7LEah93O/xex/fxPFd9SiOJwT2STzRSWAu ouZfH8tbIxYKnAA8WYY4tCLHg7cknhpt4meG3Fviw5X9GmGWCRMmTNwSr5r4l0L907Oefvdngz+v 0hshVWDSbWIRx4FV36367pn2An0QZQKvIU7cDM+GP5vz7Ppnz6zuvTp79ZU1UWtGc5SvWb7m/No2 a9PWwmfvuhbrRq5bJLBr3RfP+d82pj236U5ifbufKMoa4MMNCRt+Op/tt4n9dwB/MmHChAkTJkyY MGHChAkTJkyYMGHChAkTJkyYMGHChAkTJkyYMGHChAkTJkyYMGHChAkTJkyYMGHChAkTJkz8HPD8 leevvOCzqe2mti8GmzBh4gfg0ObCRjhmwoQJEyZMmDBhwoQJEyZMmDBhwoQJEyZMmDBhwsS/AzRN C9QtmlXTbc14Pocnmde1VvxM5i1aC+0hzFu1jtpjmLdpnT1l7FobbSvmHYYyXjy3H/NMC9FtmG9m yDfX+ut3Y97HkPe1PqY/gvkWnuv+nMYMuwPzuuZtz8K8otOf0xbiue6l9bU/jHmm+dm7Yb6ZyKdq hVqRVq4Va3O02Vqu5uLUv8pTXy1a66PF89w92khtijZJG6WN04bw1FEbzUtla1E8l6I5OTpqEzy1 S8TZLH6cxducz/9CySlaKb8+gvfl4qXmaDOx1Gx+3anN4CWhhPF+r0b3J4v2Svi9Qq2A1+7DW03g NMqWJ3IOingJoG2OlsVLQp1yfj5HUDRDlIGr2bzUXHE3n18r5CN4aw6LBRXQiktQAPxAqwWi3gze 6wyejxK8u/jZAK03R5lAlJbHS5ZzCnvx3go5XYX82kzxN4+X7a2NEbwW8yslghaQfgkvX8Th5Pdk bzmCZ5egZwrPA8fAA/BXKiTdEeVWYigN1wr535mC6hmC/p78PFuUKxJyLRdXgAPop0hogaw7E1uZ heczRNtFQgZzeSmXuAe1sgQd0D/Q4RQcQS2iS9YoEdIuvuFKjoeHnp5zaqsp6RSJ82xeZyY/7ynk JTVN9tvT009jDuSYlaF+5d5EZmXIKZSeybkpFRqT3aTsoY5T5Lrx8t35EXQrC+XSVOuShn9Wtqr1 bNHSbNRP0M1iwZUL50dTHFDvN9I10KADwInkxSX6KxLSnCHal7xm8ytlgvNCMZ9upXszGmjVLDEu hfhXciXzpWLulIqaQC2NJrUDJZ28xK10VNqjAhwZ1TrNkDkoZdCfXGEl5qCco77fCs5utnr8uJDy wVPvL4ifdiEr6fZtX0F89O7oN6PfiX6tsc0riM+5Ou6+6M+jt0R/xP9+EV0XXdi4n+iC+RWr+k4a ntc2enb0FG65xed6DO+vqY/OvYCX5n39utaS5zUvb+1bTWuWV7fnu8RmpeK+4TM1m2lad8ZLqaQz lbSCRuedZIK8JYtpjlZMs+Xwow+/noHlfAx1WvCE5T1HqHsWE+/fekwetUsyefq61KjvRueNE93X vrrN8nF4TODJzXnfibQdknVvOGZimykyEb1w/2ZJLzDw2ihpETxNkEd9JNKSIWnRxnO5hshyRrkR b5bespx1mEpEj61MlbclyqO1uRwrRxCeD5NjRmPhkcs6PKbLpJ3m5fA+Hal97XMlZ5H4ueUg8gZy 2S8T0GwrktesVPYcr/ux1C8NZaQVNRyf68MMaQVPz/PkLes3uPf8jeei/spG11fKe5aapuvfoCOj lQzEWBrvpd94rn2JdZpow7K06fpCn3j+ehzSwY+a1qisQ85LkBnoauN5KfQX56WF17VwfbKf57I+ wcdMl7rkmYvfMy/1c5g4v9Ye8qgdukPz8tJtlk9QRxgXmJdazB2el0W3mJedpMzEUZOyt1ejnC/y /Ckum+m8DZ4sh3lK5SmJX1vEj3z+Wqbx/IM8teP59/mRl9fBvu3hCeaEt9QpDfr6kKejUsYWP37k c0IHub/IE6+vO/m1HTx9y/O5PA3Dds7w8uH8nNtebb3k2wI63IunrTwP9a7yY2d+vMxTHb8O5Vfx /J/4da5TOti7RJzHxTxxe65/Km2Wvo1fH8fTRDkG2j5+7QPkl8vbMpBfS+PpdzzN52kWT6/wtBrl toQnLhftVZ4m8TRS8qDdx1MP5KGetwk2kLerXZN8aLx9/XGedvP8i5JPofucLzvny8rlZl0sxwXS 7Z7f7Ejl/ruSp7/Fjfpf/OP0T/YN5g/ZiBtSgpS7OCZIGoXMwVb24Qn0KEb6HAvMm2Se+PywcNtm nSzHUt+EegpjyO2gdgrPuT/Qjkj90nbJ8dTekPqkHZd9wLl+haeHZVltO+rFFXlff1bmdfCVf+H9 gv+xoQ7VYT/XsN23eOJ2T9is3yIdUAZsCNdtjdt+4UO5/mufoB99EvUSaB3LE+dPm4a09uQpiqfm SOuTUi8Frb/B8uDbQMc3S/og6b+Sc0n480rlk4x+nOzX9eVM+v+whmXIHglf9jy2kd5EuoUt1RfL oxWPwpadkvYMfITjdbRlaPeF3OAYycSca+wjhT3ksrQ8x8u/iTbnaaknYCt0HrOI+IWPifUQ6vsR eQ+SiFMyZLJyn2hdiLqZYDg2pZ9NXTfev3ijHuv7pQ8EGwc2V7+IPm2N9Gsilclk2cKPf5E2VrQF MjiP6Rt+PZhJnxuM4/elyutfof4BXxGY1hhSO0x1mLbIpLeWSdg88N27ZdJcqPfcVltayaTvkclz vq9hso5F36+hP4fkLY/WGObx8xbQAxinN2SC8QTeBf+cTy0dUwTO462GhOOmgS/rjW22McgB8oGq L48OBqP8rqn8Dees4T3jfS2zUfkmyop0UcrXeGwwF0BHyw3nVzBBuQRMdD5QyoNkKuQ6HPMp0lZY oQ0+5y2J0r5AHAD2xQJ9gP2F+Jb7Mq2Wp8Gom6fRPvXjZSrR7oAdewDtE8QuoAPRWB78JsQHX/D0 Mk/gl9+QNsfKx0EHvXuBSZ/9MLb9lGxD745zcZvUeaF798nx1cG3P4i6eEklC8QB9/O0QuqP1pcn 4HcvT9eRFyi7H2MA7v8tU/jxI36cjv2DPT6D/e2V14SMgCaw239k0lbyeMDyDhMxjgXmLMRAYE+5 vbBW8TyPUS05OAdBNutkP4KHkzwtQNlMk2XFvIF+gQeg+yEmYiHtXmlb4T7EfUK2IGOQAcZGFphH M5iwexCzax0ljyKOOY+x1lye/yU/8ljPwn2RbkWdj+XXX2MinoOYSviPYXJ9rI+R/IlxgBiJr0Es XZn0ZxYmYzI+NpZZcr5ZOY0WJmNHiIFAD0VZ0Kk8ni6gzPLRbnD+da47+iuST5AXjEuT8+Mm8/B2 7zWYqxek/MQ8ofMMOYfE3PtazhWRx3kj7l+Q80rMtQuyHCRtDPI6Bq81pqu6aVsA86qxTTDy0JTN oLYa56m8p85FOcae+b8Fr/XB84t4DMajwV547iUY8sMlf9SWsd0GduYijrOGOgKyc6LtyEM9L5B6 LuxxMZ7noP5XMBmHFWBZF9aD9bUDr0PsmYvtct0SNj0L25guy4r4zInlIc4rwzrZOH+L8N5XeK0I 24IyEHfxOSz8Xy7SVID0rke7UIBtAl8fI41ObOsI8rUZ5/pkOfYiD/WXYvsZii7rXuxrER7LsQ8n 0lbMVHx6BGlcgfeB7+UoK6J3Ot4HuhYa5DQZ28D4TdCYifIDewJ2Hew0xIu4fyDaKsD6LgO/QM9u eV/EvAcxFWAdaHMmEzGxSGVYvxR5ehD5WoxtViL/eVg2H2nPQVqAr6NYtxbL7cD+auU8ETJeZej/ ZaxfgPU2YL4cry8yjH2WQeZObGMZk2vFXBwzWCusRF10oexyUa5A31VsA9o6jHJZiddykQ/In8c+ nVj2FNKTjbyDH+iN1zLxPtCyVJbXQ5maJ8WG9nOwvat4PGjog/QLYoyzTOkstAO6UofnK/FeFsrG xZRuk2xI94uQ92LsazvmKUG7bhyXxVjXhW1nYj9AF8bYgv5TWK5C2hBRJs9QnvovxnZoztOYAe8f Y7vEQxrSBvx/zqSuZTM1t3MxFWPbNHddeJ5loHs9jiOVozEoQvor8T7Mb9CZeUh7Np4XMzWvnVi2 yMDbdpRlLtYluwTpGNYnO1pk6H851j9q4AXiDr7eAd/vKQv3MNbw9EnXSf9pLJ41yH+6oU+qu16O K8QSHv04y9Tcq8B2aZ4ALxOY0qcs9BHU7xymdIfqEH2kK0DHJpQBzWeyuUUo42wc84lM6QWUO4Tj QnMXysF6fj/WgzzEQbsNMiG9g/PRBnlcwXbPYh/HsH2YFyex7aPIb66hv2NMzUnqIw/lDToF+r8Q y8C9r5CvMkMdsllphnMoD/ahGvuC+ytxrKczNXermdIZuD4M65PO5DClo+SHsgw0TWbK3xptJum/ 03CtHNsi/wN8VmA90Nd0bHcLHvOw/BWmbOJl5Meo6+uxTaC/EtskP5aFfdHYFmAZGJdLKEdIhUzq EenIYUM7ZFtoHhvnK9AIPtSF8r2EdIJN34H3K5G+cjw/hn0eYWr+kB/awNR8Nvrp3Tgmyw3jQ/EQ 0PE8U3MWrp9EGcJ6qp1BVjnIl3GeLzO0dwbbT0We9zKlKzSnSN/GYx9kb0iHzhv6Iz3JRHnsxL5A /uC305iKfcjPHGLKp0OqQpntR9rTsJ9ipuI9oP0NvHcc69UaaDiJdOzFsvsMvNJYZuER7NxZ7Jds fjXyTLZmMtJANoj0COg5iPlKA180ljRPDjM1p39h4DML80ew7EIcH/KVJFfSK9JBukcxMd2H83NM +T+KIYhXovkkyp3mVSZT/hCukZ3ONPAEscMJbPMw8n0Sy+9lykaX4xjDuKCvFPtrn2KZ/UzZ9pex T2o3B/Nw/yjyRLE72LdThvw15rHtIlag+GqxYZwLsD+Kt9KZ8qfleA99vR7E5NymPvfhvWI8JxsF baahXMjnnsL+Kg1jTnFGHlM2CWRMekr28jCuP8uRdrK3i/G4SY2neN7hYGqOkn2G9IZh/GjuluHx MI7Hp0zZAaoP8QHFfSS7S9jmV0zpKMXSNAep7SwD3alM6T/ZuQKm9IR0DGKxaiy7E+tCbLaGKdv7 shwXId+JaqxFHuSfideyDWNGfgPqgQ5+jHl6jkXxANByDNt7h8lY9Qy2fYqpOItkZIxviKeN2Bbs b8A+zngcKxinVkytZUj3cpmKg402neKWiUzNa+DhAlNxqHEe05qO9Dsd6VuB8t3H1FowExP5ddIP GiPSQeAd7OA5PIIMlhrKk0+rwHNaY9G4k12i+IJsAemZMY6GuBTm2XrWMC4mGVcjXblM2X6qD7IG fj+V+xkiJqN1fZ6hHPH6FVM6ArHOaYN8jbEp1XEaEq3HPkfeeV09FemvwjIZkhYxt1yGfj9mKpbN Zcoeke+pQpu1iSn9WNlojJ14vMLUPopxfUXrqH1M2XUab5J9LVO6V2CoC9cWMRWTbmMevyz2HOG5 rQ+TfqCKKX+VjkeaE2QTQS/2omy2MWUviR/QE1pP0Pop28AHzQ2Q4R6mfM5EpMO4z0NrMZqbRUzF 6aQrZ5jaE/qWqTlAeyYrmIqnoK3zTNmGj7HMMqSvkqm4AOptxbKbDPUrsc9MQx2KSWhP6SJTOrWF KT8O5Veh7Ax6Luw5jAmtsTOZsmukV++yG3WH7FY19ksx2w6m4nyyAZVYpoIp30q6l8GU36Kxon05 0i/ok/afynA8FmK7ZK8zmYol1jMVo5PdzzLIowDlvgdlV4B0wHjsw3yeoSzp8WYsY5xjy5ia+3CN 9oeuYJ8ZeA3qUbxG+gjnMKdxz8WzfzOWqXi2gim7Be3T81to8yhTfoJofZGpvaQyrA/HL1nDuIT4 Ij9IPsK4B0M80v7AQaSJYtzxTNnoCqb8BdGyHsfpiJSfmGPrmdIlirlofMqwTbKLLqxLvGczzzNj wX+B4R6t62g9RGuLApQnrXvPMaUbFCfSeGSxhjbeif1QPL4eE9kXWleTDl82yJXsIfhbWitDArtV w4SdEvtvk/HaMeQDZLsTj2eYsutA21m8R3tY53FMsmR7nrmzDPtayFS8QjZgOlNzh3xiJWu4ZiQe prOG67oCpnwS5DcwtX93hHn20T1x9ko8kg2i+IDWux8zpfcFuE9DNnelge+jqh3xjIxooDX7Mab8 FNlJigloPVVuGNMClH2WoR7F0xTnwfECjo0L5UCJ1lGZTOk37X2SXQQ/s95QjnQI/NfDTOodre8K DONC+1lFWI5sMNnB8ShPilkWM+UPKLaH8Qe9gJgT7CbYo91MzXfSfTinNRjQ+SRruHdIOrPOQMMi 1jDGo7FyGdouxnKnsf9q5tlHFfFIAfJBfiIN6Ya6MDeO4zXaG3KhbEhe55H3Uqb2vpwGGmgvimw4 7VtTHES8E5/Ex0LD9RocozxDW8b1VKWhLvgVmPuTDWXApl9kynbvZ8qn0TygfsuQX1rXkQ648Foa U76PdBH4rDLIkHwA6R6VpbEwyo+e35Bu0pjTXIR2yS+Sj34Hy1HcTM82iFdoD9Z/J1AOFMsD718y ZY8rkL4NmODeZpTF81gPytH6CObgNcNY1hnaP4J0rmPK3xBNtI4Em1louA9twvy4ylS8SWucKqb2 FWhsYdxOI2/kQ+h5H62RoK81ON5LmZonizFtZ1Lfq1FOUGcfU7EWzNXlKKvpTD2/y0O5k61r/JzC ZbjmQtpoj68C6XqQqdijkCmdo7qor2Kdswr5XMWUbaWYEOKZMyhrY0xnfPblQnmvYmpPhPb6iEcn HoE+8K0nmIo1oQ3wq5uYstU0p7JRrg8ztbdA9eBYwxruO9PzNop1KO7Pw3Gjfe1VrOHeMszlT5Fn igmNcSCMzQTki56PZmAC2p83jAnpO9n4F5iKGZbjWEOd06zhOnYFXndiPxuYWnPQfgTZRbJvGwy8 U/9LmdrjgTGOw77SkW+Kcyl+Ij9QjOW479P9mNSJFdgOxdpVSBv5KtKTg6zhnhHFy0DL50zpL41V GVO+F/2HWP+SHaRxyUG5E53kh0j/KJbMwHY2MLUPXYy0U8xm6Msz99ewhs8Lyf5ewbpklyj2OIH3 NxnaOIt9GO0PjR20t58pO0h7GqCHx7BdGlfSd6IplzV8NgNtg45STHmMqWdOUPa8oSyOvUd/yKeB /EEHdzLle08YZHAa2yN+aX8G2nwZy+xjah5lqz7E+8lA30Km9vWPM/XsE3TBLdsTz9QrkAeKV6Ec 7KmcRPmRXtKa1ajjo1nDfdgifFZ4GftdhmNCPpL0keI6oPuUTCL+JDu0X7UnaDbuHdN+3xUDHUUG +gtwDEg2tDd7jCk7VoZjVoDyKGdqnUj7agfw+go80vg+z1QMR/NjsqFto5wO47gBbfnYL8WlZ7Ds VqbW3xMNMoK4G+2UeM+gHMuCbHYytSY/xJTOwnXyayRzijHoPQXw4WuwPbhHdgXoegl5r0S5kL0g W36IKR8Ja57nmIrfad8G7ATFl5kod9qjIZ9FOgXyWcbUXgro9BNMzZfRBrr3Iu9FTL0jVMBULFLG PHu1QnYU28Ga8wJTz2Up5ub6Ib6T0Ad5IV9D++BnUR7HmXrXooypdRtccyMPVI+eyT6HNB5DOj9m ai0MddOZWtvR/g3RC+0anzWsxzKrmHqGjDGpeA5YwdSeDj1v2sOU/Se64L3xF5laX9PaNZ2pdT/Z eXq3yLgXl8saPu+gNTatE04Z2oA6W5jSPbK9ZBdrUUblTD3zoucGUJ78Ke29ZeN90JVhTPle6Gsv tgN270ssX42pGK8RjbQnuJupZ8znmZqvk5HmdUztaRG/tM9COgbvVR5AOZK/oXJFhrrQH+2X0D4P 0W9cN9AaCNq6ypQvoPgAaDvBGj5rIntNex1ki8nGgf4tYspHkw+nOUh1ySe7mLIftGY+iW3DHCGb QLpJ+1PE/yGm3rUgGVAMSnPHGK+SXS3A8aplyubTuNKarRLpwGfgYm4uYmpdQbLehPJbheXHY4I5 s4apZ7jQ7ggm7QONxSKm5hOVodgzG/ctKJ6k2InixvH43hatB8h30nikIV3TWcN3pLJV+8JmVKCc 6pA2ikVHM/UsfQdTc4nG4TxTPgTG/ShTMVOaYbxp3hr3M84wNfdorIA30O11rOG7bHSPZAA6cYmp 9zVoTUrPVaEc2PWdTPlhsu+0XwG+7DhTPhFousLU3kwx3gOdoPUh7fXAeSrKbTLySjEH7R3sNMh4 HeZ3MLVOg37AHq1nKv407r2tYOoduDVM7Q0A3RCrTTD0twJlb1z/0N4yrf+zmXp3hdaMNKcvMGW7 SVeLUW6VKINipD+NqbguE+kHvQPf9QZT61sXa/huCZSvZWqNlYsyBNppP4BiAtIVWq/Bve1MPf8h m5vOlA2hZ9DLmbIj9ByJ7MVCpmJcl+E62SRa21AMQ+uLc0w9MzG+BwHHjVgO2iJ7SPaKbCVc32mg n+JnislontB+Oq0TKaaiMT2NsqZYfSK2Qzad7AfZ22LD9QKUYS1Te8pgN8G+k37Rumc6U36U+CEf RHaa9sPAB49kam1Fsod4ewnmM1jD9QH5Hnpug7GRuJdhGJdVrKH+0Hs7uXhvOY4H+TmjD4H+6D0D mrfGOJB8AqTL+P4DjC+fq5ZF8ij0HvQa/NAipOsIU/qB9cV76TyJ70YMZGqPIRPTMqaeF9Caivon +0XxvNHXTv8v9r4+SMvruu95P3b3RFEZVaOqGsZVraiOJGtUWaOojKsSlShYpcZbstmS7WazWW83 6+16u9nZbk0xYQildL0hDKGYbBDCXiOKJUoJQwlGlBJKKCZmMMYawjCUUA2llFCKVbWq6sii53fv +b3nvC+LjWynyUz3jzP3ee5zn/txzrnnnHvuV3gmzuJYiN8oFxEX/ayckySv8Z+R8G9fQ379DfF9 4n2R+mA4ANI8Lz4eHwz5kxd7rS0d4Xur/d8R0pDXOPZjueyH1HvkE9aXMhv/UtadMzsbsmWz+JgB 3+jXAn3BG+ATyEDOVV4QlwVqt1VmSeYzxL+d866t/aIfgPMvFw3nnJcdsDFvp9Ef7Xrd8rlo+h12 K8cjk1Zn+jjXiK9voM1I/wV9PlvEZcV68fVwnQF/neL8Tpue+oNzjtRZ/N4jzq+0lbvFfZrMkz4L 4IPjE661O5zHPLWx0EHxueNz4nNl3xa3R2ydT5r7OWX4OmbPJw2uift+qDPRNzfmMUpab/CO4d7G gWn9DO2gHeLrAjiGvWrtuC7uc0fItRJv2fc4F4nvbYGuA0bnESuDY6/rBuxbwBXkwmXD9WprH8cG l61Ol+39orhvBnKfdjnnYbvt353i4xf6vziGZn17jQ6UHa+Iz2tSDqFO7AfUPyfFx+fkh3bxvsvv lAXRR8c8AFPi88CQV1Em0rYAXfZZ3UCnE+K6uVt8vuZTkvnIfDqJBncCpCP6C/ordAl9kOhTXI+z UXzdGfULba71BnE+n7p23Op7TnxMgTImxX3B0c/cY3hBOZxzOSo+h8A4ylj6UnoMV8Qn8jtt6ddJ vaymDqEfu8/qudboCP6bENfzG8T5lW3oDWVxjNthdWd9wHdcPxr9qxw30AagndoYR1nWLS6bxkKa M1b+REO7xsR9AdG/TVuIMBLS871X3H/XZXVFGy5ZeVz3RtuU4+PV4rxz1M6ziOtLo07tCXGUWxGf 5KGhAByLcnwwbrR9x+TZcamXi/AzoK+AJw5Z/eg7J/+i7rulfs6CNKdvjOMDzp/G+ZRBcX3F9Xbk sQ3i85nk72gPoK4rxOcyB61+tF+ojyalXnYQ0C8XhHfaC4eyDZf26dJeom1NmcU+E23zRuDYD3m+ Z3m9Im4/tIuvFUXd6HtsszTt4n3gGYtvs/Qd9n2BhW+K9zPK8cXi852o5w3LC7Id/Rp6AOOr18Xn HsasjDGLY7+nf3pA3OfB8Q/bOGwh1w+R1/itEThXtUPc/ovfowykjmQf/bS4/dkhbvsOhXxYPm0T 5jPWUA55hfIQ/7SKz01Rx44YPlmHyJcxL8pU8txQw3fmy7qg7txbSb7Bv6fEeR40xj7qcXHdxn5O nUJc0V9C/jsobn9TV9B+Y71oc0S/A/2p9Omzz8LOBI8dEfeBkA8oB0kbtpPzyFxLwHEY8jgu7lsb bfj/danvUxxrx/aOSL08bnynH4JjgnlW/6ct5BzGkvAv86aPgeNZvse0cVxMW5d+r6gTekPbBsT9 deSZbnF/SqwH603fEuPbxPv5qPgYh3lxnLky5Ndu4SfFx4q0vYfF/Txcj0Q50B3qwbrEeNKUYzPq SfoySLP+UA71H21v6qwu8blq9jGO6fvtX9QvrnXgfwPh3fomz/pKdv85cRvvmNUFPHbN3g+Kry1H yHmsTvG5EsQfFe87kKW0z4+I+/VPGK13ifMSeZg6hLJnpdTWmaY5SPZb6tkop3aKz7nQZ3EnMBTy Yv/jN67viTKhv+Hf4Yb0Iw3xHE9cD3FL5dZ6dE6TH+k1EvJi/rEeI6H8YXGeb8wvQrQpfjnkR36m PmC/o78gyna2lzomyp5Yl2iLUvYPhbR9IQ/Ku/5p8qVMpn4j3pjPz0u9zRdt1zg+AlA30g8xFNIz jv5sypiBUFaj/iZeaP/weX6oC/0qlFeNdYq6iGONOP6OfDgQ8usT99tFe7Zf3KbuD0B8d9Wnq+2R 3y5uZ8Be/WXxNQyU9celfi8n+j5kAmQPxo3vGG1oy3aL76shDibEffuUufDrwOaFboHfZoP4fOlm a/tL4n5xvMNm4vz3qyEN/Dbr7Zm8usX+xXjqZftGPc06AgfjUs/PL4nv1aEPnbb0MvvOdR+ft3/W hnpMGC1QP9o19JVQrkQbfUx8/SLe4bN6UZx32Ue2iI9d1or7dwetvmjHb4n7aDc1lIP8Pmf16rX8 MP5ps2/UeRyP9YS2sg+QLsRVT/j2krjtFG0C0m5AfO3iYMM/aMtGo89L4vqVOOF/zxveX7Lv/9zS vigutyjXesRtji9bGevE51FHQt7sO//K3lHGF8TlBMeLS8XnUckDXM9AHxzH1Fyn32/fOMamHOQ4 nLYmx4i0VyhXKFOIs3bx9S+MR5o3pvmHvv4J8fV0CPdKvXzhmDrakKQf5VKnuL1NnJB/V4n7XriH jjKAfM/nVeJyj/8SRsTttmjjURewbajzGkvLb8DhdcM/+s3lUD/aLcQD/HGwVW5YmyHjNtlzq/13 Rdy2H5D68yEAGPf/jrh8Xm54Rfy45QlZ9W3D3TuGB9haF0OdyaMI0a8x1oL8/bK4jIpj7D5xeUE5 zfF4r/gcW5/VBb4/2FIcN3feBtoa0sS0HQ3Q1vCtrSGvRQ3xCNvDt1hmW0j7PqEEXB42oM3MuS0+ U6e3S73O5LpBrjcCLBQ/V2CzPX9B3PfLvgHeAe+dCXFjVh7tuxX2z1ZxnU8fL2lO24Z7WGiHcHx0 Qnx8MEd8Ppy+yuVSW1Oa1pnB1h638uGDvyLexzkXeF7q/dDk3zHxdY5cBw2Zwv1Yl0NdKJ92idse KJPrvfpszuGa+Lpu6jb6u6mTzoU8jomPmenTnxD3qawRl2PrxdewUAdGHcC1cevF/VhcG0W7+QVx nUw7jfinbYkQfLE4hD3ie5zJM7SlR8VlGfOlPxVl0R/Ofr1Y6tfw0FboCnE9cqvPkzY6+/1g+NYI PeF5MMT1Sf34syekZXxnKLc7pOkSHwN3NcQzLaGjIX+W/YL4GnCko0+wbZr6sO4cy/dKvV3PeOrU L4jb8v0hfiT8093wH+CA3GrfkL8jrkdC3mw/8USdPhjKZR7Rh8D8u8V1+WBIx2+RXvQdcPwQfeDR J8fnuJcs+gbIrwMN+TWmie9sO2k6KPV7PuP8O3HLtk+X94KGdhK/bNM+o4fhGeuM0zwk5BLmE6D/ 4H84JFl2QLZB5u63/+ArOGjvKId+A66FQdpxcb3UHnDVLj5HAnkD25M2X4+VRXuYMr5xPD/QAEPi 80QoZ5O4fbhYXN+TpxC+LvW+WYaI41zwSmsjAPLysPhZcLRPDzfUaTzg5Yi4HCRftFpe/eI6Zb/4 fvYV4uczkWZ94vp4v7ieoL3KvZbt4r7IXeJrcGgX7Be3Pcl3tL04PqGOnRSXk1yj3C4+70GeoiwB n7WJy6ooy/jcG77RN0vdQZuS+qtb6v0cDOkT5D/R9/TdgHJgJMRFmTHQUM5QQ7pGWRBlSkxHXRN5 lvSnbyb6GSgr4lwIdTX5ivkzX/peon4dDfmz/tSRQyFNf0g3JrfKDo6rx0I+TEe9MCTu0+J/pA3b QNugP5RPG6Bb6mXkUCg39vPGvk4+iv+OhvTDDe/dId1Y+EbZTVsD394SH1sNhmfKDq7L5fgtynmm PRbaQh/lWMjnqAHXxDOvmDdtRvIb/18ayon1QTtOi49zuW6G34fCc2+gEWULx0q94nxFepP+0Rf5 vLidMNoAlDfUVUfE/fYIIZ/HxfmLMpDlLJB6Po98SBr2ST3voh5cb8hxHNvK8TplXuwPCwP9xgL0 Sn3/oHykrIu0b6xn7Pdj/n86Nxw0gu6E7uX8DOehIJc557DZ8ETdzvwog8H/i6R+/eRZ8XNSzlp+ Z60chKvEx01LjBY8+4jjK+CqVXzPKfKCju+2elJvrhSfSxwU3ysVeQr6C74Arvk9a+EucduDfhzA cXF91i23nqk5YG3aGvCEvMGL8LW2W75RRo2Kn/WHkGt48P1IoCXl/cHctnRmF8eaxG/UmdS9tFNj /0Xb54nzDPvrBvG9VtF/TN8QdXR7iKcej/bh0oDTqLcZ0hbeZHRZY+lPiY9TufbhmPh6+JMBFwPi azVGDOewOzZavsfE/SL4p83SrRH3d0Y9c8Ly2mU02G113W/paBdwj3eHfWM9KPPjGInP1BGjUq8v ot0c4+J71MHRjo88NNgA/Icyoi+kGwmww/BM25GyBO17TXzf8WuWz6vicni/uH+ba+xJl1Uhz26j x2tWJvd8DIuvfXlN3Ke4P7SVY8lFBjvFzyKeEj/rg34L9PlzVuYpqecb2vvclzUUvtGm4Zh9k7if h/KRfgvqrI3i6/fwfYu4/UP/SZ+VR4j2I32xxBn1IX179F2x3zMt7cK+UB77OW3OZQ3/LA0h9RLz Yj+jzOG8DeUS9SzpNSY+rqO+GQ5lRD3F9UnDId++kK4vhCvCd+oSyqYe8T0HoNceybL7oD3vEj8b drf42ZZb7XnKQry/ZOFUSLstpNtm+eEdfAKdAD7YbrjguhTEcW0e9+2vNpxBZ5CPkdcJi19s71yL t1vcjqPu5HiF65aI6z2WJo5tjxgedhqcMJzw+5SVtzek2W943Gl4GJX6tVzoI6+I81QjRLsacFh8 vcp0EHURZRP7To/Uy7gVoQ2nxXlgm7jteNriuH6BeZy0dgO3kEeQA+fF92/23Aai76s7hLQd4nuE nmm+sb1LrS4XLG6P+LoVyC7a8/RLbTBaUp9Qfowb/XqNznjuFF9XsdtwORTSMaSuRf7bLe0uA8Qv tHCX1I87UQfoyEkLeS7OhNVnteF3g/jc6WpxXcr+QEB711p70C/OWBuBA9oTHeLnV0Tbg3Ya18wy njKDdjSfB8J/pCnzoA1DG4U6qDek6RTXqeTpvoYyIi/T1iTQLiLvdFha5AubFbx9TOr9DrRPO8V9 oYRu8fm+Dgtbxf0ThEXT/Av6Lrbndvun1cptDXl1hrI7xf25rSGvTqNBayi/R9y+ok0IgJ01ZmWz 7lFXUXd1i8uRleEZOCY/ETrE+8UW8T2CXB98Vbw/kke43jz29SGpt6dpywxJvTzgO+z2+eLnL9M+ sLm3mXvj3ic8+cOF73mnjEG6I+6U8QRtyKO2B5/j2G9IlmdICzkFXQR7V3Vhur/psvg9a5/I70mm PpHvEKy7C2a6+s4OsMTKgkzttPXnip94v1a6n+eQAXDXJ247o777xdcbQL/vsnf2iXZxfUS5Bb0a /YmwhYYtD/SVHVLvZ6SMQtxJy4fzh0xHu5bjfNq3tCmPic+ltImPOWjjxTmO80aj/SGONihsco6/ WT59AYwbCXmiLl8Rn6Ol/iV82uLRrq3ie0k41kOaQ0Zj5HfF8PW2lXFcfG8ZdQXkFGUZ2017eI3l vdPyflHcLh62suJYnjKY+pD4Qj7wc3D+GnGwMzoNXxhLhXnYZMvttee14nZ6j7ifHXVdKPU+uB77 Z2Foxxqpty2iTl0nvk61L5QT+ZC2I9p/1tLBNrpo+XANC/0iHH8iHcdyHNfQtom4IZ8Rt0usbu+I +/aAM/LwC1LvH4w+4HHxsXvUXQMhXfTvUWedEF/7Gu2FCXGbH+EucRv5dfExwYTlPT+UQ/mJ9SrK X5XHcv0qKlcqNgYuKT80mT5rsrF/k+ndpqq9Fzmsrrf3p/P36nV7fyCHJbVdcTdY+UFJd8Gme8K0 35a1HSVtb+k3FNbaN+0PJa17Se28Mr6pjCopHXHXbLo3DDLtHYsHz2LNDGx4rA2AXf+TksccxBni sJ8DfRKy+IrR6Jck6f4m8tuefK9cmXYEoDPzVdq78pK4bUe6E9/0XXG8jPdJcVnTZTQDbl8xmk+K 35UDObbIeCT6alaI24pc90Af5UhIj/+fyVChTdYjtf2npV0ZauOWPcYPs8XHqgzfdUg66qPidw9S H307PDP9RvEzNVaZPxF8AT140tKg7dtznXC/b9qbfcDy6bM8sTf4Wcn30V3PNLjTe6HrdOIPA57M 9YmQ7jubJu6O7Ywfdh3/BNr8/UBF6VieymF6nsh3nSFMoPwTbbfG90R36AOOfXc7JD58ysoK/Fk7 i+EO2lXrA/StgVehi+hXgY2k8irdrWp9A/dBpjshsU96jre1xvuzpXbveYu2obnIMrEK27gwXnk/ 9vTqfD93DUcPf49/fl2ynrSxUvk+LW+LyUXgxtZONl3Itmmz9v3mn9B36O9/ILes62naYLDGYK/h 5tqd8UCdnTxdv3nL+mo54FDlVel4hpqf78cVHpV8r+eHpymL42H6FPn+x8ZDR61NeD5gfMRzKQCQ UdAP0BXP2DqQBfYf7CnIq20GhyWvY19j9X7M+ONAlonJHuwRn9fjGJ1jVM6/nBUfMx4XXwtKWc9x Jv8ldImPz6MfnmPeMalfDwC9ALpBJ7xh+aKOV6Te/zAccId0sJmgn2C7TYrbSVxDP2x1xriH+6sH jf/WiZ+zxXzbxX0WZ8XX3HGvPdvQF97jnET069IupK/mfEhH39ky8Tlk2rwj4ZnvtAVHxNdH0t5D HRaJ31WCenOff7+4T50+arRxT6BPj7ivnfZi9G9yPjn62WlvjjS8M4628Ubx8RptO7y/KL5uCG35 nLhPasDw86J4f6F/nrbtKvH1AmdDCBxzjTnq/fVQRsQz8QZ+Oy0+z9BlND8rvj/iuDgfI58jgcZI A5kFP89Cy2NrwBl8MrSBOE+zPeD2oOXP+Y6eUBbHfj3hneMg2mug5TW5dS0Jx370B7Jf8JlzLZSj 560+bZYObTgs7uMjbdEv6JeN/PDvA31if9gr9fM3/Ie0IM/G9fSd4Zm8tLShvPjOscegOI9xPH0k lLtcfGxOnuX/w+L7nhl3MOTDfgK8qL1Qm1fZKm5bI//TgWbs4+Rh+hOiDGkPz51S7+c8Y3bxovIL LXeVv1xcr8wrNlS/XHRVv1gsax4sVjUdLtaWjhcbKvcXNxQWVr6ucV8rtpfvKbZWPltsS+HF4onq aLFK4bTCuMIShV6FNQqTFiJuvDy/OAhAHoTqo8Vw81XN96mivWm4uNI0Vqxr+l/FlepbChf0/ev5 vby4uFJ5uni+aULjjxVXWjr12x8rnNfvCyxEXHMx1iRFT9OV4hLybBkpupqe1Lz1uXqjGKrcX7q3 ur7o0fYsrt6lcWozVNW+qX6mWF19uThZ/aCGX9Q6f6ZYUz5SLKz2Fv2ILz9Q7Cp3Fg9X56bnk82X NC3S/4qmRaj/lK9qeG8xVv5Gsaj6L4tjlatFa/MzxSKElRuKv11Ft5Y7WZlV6kjlF6V7icMUanzT q8UUaFEdKfZUv1SMVH9W8ftjxQLNf7y6sRivdGu6XcXa8mCCZdXzWkcA2vFysRJQvq/YVt1drKo8 UfyblG+3wa7E1zd+RGmreF+l5Z9RmKXwgMKDCnsV7lLoUuhQaFV4qJrvdirknqJd6z2i+H9Y8b1M +op1+j7WcnexGjhRuFvxMdjyccXJ5WIh6NvyYDGR6Hxc8TNQzEv8c6UYVeirvqr/XCnWK68R+hIf TAfKF4knAihPLAZfKMxReE75ZH6NJxrha8X1xBMRkO/HNS/Qfjr4YArXRNA2zrO2PqbwpLZ3bY0P GkDLXA8+iAA+qE4WJxEmXjW+TPRT3mmZXywHn2h/Ufy3gBaT+q1X4XkFpUvxnMJIjiv12jfQf5G+ L7XwVzWcqzCqsEthiaVTniuWK4wrrFQYzN9KKxSW539rgDzbFOYrbLQ8lGeUL4tin9VByysd1HBA YYfCAYV+K6NTYZOFmy3ssnyQ9zOW9ws5fanHnhUXpWrul2X8P6awRWG91RfvF6yOmm9pq4Z7c9ml I1b+Zku3Kf9Tet7ae1ph0vJ5OpfF9CizdNrwBJnwmMIxhSJDqutkzrd0SMOnrE5LrL0oc51Cq5U9 abQDztut/UvsG/K429PV4mbdGpegy8pfmOkKvkh4etLbUOq2+qAeEwpHrF699v+YxS2zOnUaTBlv PW74bzeYo7BW4Vnjg2cMZ8BXn7WzNdOhtNjyfMHyetLaijzPGu4VnyrLMt2ApwXVzMvzLN08ozPq rngvHlFQ+ZT4bau1U+VUcY/VCfg4ZbTsMpw9b/k/Z/UfsTqz/h+y7/MyHlOo/5SesjoATlYzHxPv j4W6P2G4/4Vq4v1U3xMKv2n5thkNthjetQ+rDMnv3VaHuYaPPYYH4H/c8DQ3pJlr7Zljz3sMZyuN PnMtT75/xHC2wspcYDTpsroEXikOG3xS4VFL96T902VxCw13nVa/ZUabPqvrHKvrk7epK3mXfPKR UEfAqMHFXL9Sn4WF1XethZcsfra9rzAaFBlKWpfS6u/9nkI+h+916d7H90ZoTP9nDpoljzO5N/Ki PRuUNt0KNy/eCjV/YwPUxggc24dz0qpqO1eHLOTzUnte6vE35xjcpbD+Ns8hrlb22eyrmPY5xJWP 3lrvGHdHzxfye4IL9fHAL0L4vhpxU/f+UIb0n9rrzR/Q9utYoPmBbJ9/V9/uww11Aah9XzmZQ57d VyvrekPZDe+30PH69OFt08/xEGdQtexxnCV8NIY9lucLGVjfGk6nAcyH1NraAMWHbFz1oUD3rlwX +C2qs41OD93axvKT+bky34H1qS7x9NXnclj50UwrQHqfn2lGWtTwstnCrgzgv2b7zpD5wwfFOiW4 4rwV8ZLqNGL1ZVr0R669GrZ/Rurpc3N+gA0KU7n/4P+6b1O3vqf/N0yfR3nH9P/fwiMLHAe39L+u W98x/0Y6NuZRHp/+/0TPLpMNUzlM/vNpeDvBBYPrDolmDXDz6q3wXeXfyA9R/m24zXOIe7/yL6W/ O9T77unlSoXrbp5Vfn3M5VXzj+c+leYj3/4+85sd8rvP8gP+/7t+h1/kXZl+LeCfdYCvvNVgwTRh /N4zTXxPQ/qehnStIa4x3XTl9DR8b/wGWJgh0Qly7C+G579gz0FuJrA5nhmYgRmYgTuCB/5koHT0 zgHzJCX46w+Jr5vGOjLIQ/jFMZeEPVbPv4+0+A4bZPWdAeYQS9BvWHtzQPzsmA7J8wuYW8VcD/TJ O5L33yMd5/N/yGs7Z2AGZmAGZmAGZuD/IxibgRmYgRmYgRmYgRn4fwjDMzADMzADMzADMzADf3JQ 23cnUrcPr/yPM6S1Bj2S9vKm8HIOa3t947z3R20tBefOu3Jc2je5TvJ9Lzck73XBfrptku93xVwV 9qH8Z8n7OrBWCfM+vItz3PL4R5LXjKyQvCcYefwNhd+0tL+g8Dcl76vBXBTmpHA2wiX7jj1Lqy3d L0ray5jqhD2N2G+E/Sb/wvLD3qjflWyPrbF//0DyvuT/pPAxy3eXtQN13GnPhyTvE8T6mVbJ+wMf kbzPiHcY79Wyf0l8f/NJq9OhjKPSRyTPb520clA37FvB/ppvW7n49y1r28Zp6oJ9NNgrMyC+LxZt mS9+jw6g3XDwitWhW/JdNWjjEwYPG055RiLyXSq+j/SnjBbYm/7LuX2pzrusLLQZe+EXG30nDMcH LfyY4Zb1BL4OiN9xftHw91FL//clzwuO5/fSgwo/J5l/Nhvtt1h9/2v+nmiMvP6aPd8QvxN80MoF b+23slDXHvHzezrEz8zqFt8Xxn1r3eL3PfLMkF5f15PWl17JZZc25HUjaE9l1MJ2ax/goQZ44jZg +/cTn72deSL1VYQfsz75MeMV9PklRufntbxfVQD/dHpYasuQ5l8BheH+qNEdeMG876IMpWMKkyor DkveQzx1521qPPehdv7DQ/ZOnp9t9bCw8l6GtNcL8Kx9t7ByKgPOEijNnuZ/fv9ABsZFvDZtVxix 8t8zQN/F+iDwNvehXbb1P5BvOL+grx5qZw+es73rJhvLJzMk+bIl73MuK/5rZ6Mdy5BwusVoqmnL b2Wo/fdWzi+dv7HT+Ax5PZfDxPdo+1wD7gF/weDd6aGkMqd8wsPatw/cClijijMwGKZ9wJsyL5S3 epj28r0QQq7xPWJ45vspw9G5vIauMpTXAJexdlLlc3le5sEKdM5W22uPcziwLmGHhjgnpLC6YO3n r0nu9z9peD1r53WAd37CyoGM+lnJfR8yEDL3utH6I/bfAusDfyR5DylkLGSQ8kkF9IZc/qKG0Ku/ Yvn/Rs4j7f9+L/+D/pJwifLQ5/6Ohv9EsuwO6y0TTn/OeOsuyfva0Xb0i5vWJqTVvlcG3VVflf+e JD1Vax9k2nkr72COS/hCnaoa/qHx8tuGwxc1/ivaHu3v5d+TdJ5G4lu8Q8Zo/68oP5dn5XNVsAc8 hZcyzZOORLugB37V6gWc/YLRcZbxLuqE9qFNn9UQMuln8ppIfC+NGN6Bf+DnzdyGsurH0icl7e8v YW3eB3P70x1cqAvWOP9DSfqrpH2gDHlWsfV6kJO/LUnel6AnYCvMz7xV+kRua6IR9LLq1DLWcuLs Aezf/5DJOXy7ltdhlrFuE/wPXD5racF7g9lOSvj7dOadEvqS8lXpy7mdjWcVkLfxP3g7nXmDvtOf 6VKyc7Fw/k06d2DL7Xk7neNgvJ3WoP6AvJ3O2/lT5G2sbQdv47wf8BfO/Lkdbyd8fQ/eTvbV25ne ODMoncG2KvM2zg4Cj2JtM/gphbfh7YRn4+0kn35A3k7nFf0p8jbOSgJvp/OSxM5Mug1vp7OU7pC3 S8D3fpPz+Pc+42OuI1f6l+Zn3IO3yk/lOhf31UMTbAmVa00viJ8/0QjftvA9j0NfAk+XgV+cKXO/ JPuwDP21NuMx0VR5rrzAaAO6t1hf2Jv7TpKDTZLX4LdYmh+x/vPvJNsDiN9h4Z7MU8nW/TVLr3lX lHalMxlPJdBn1PoaeAvjoXut7ti/s9L4ScstoO8+bHwBGf4frN4altUuLWl8CTrwiuG+2cpEXpMZ 9+gP5T8v6WyH1B60C3bYroyTVI8zUjsruzw71yPl8W8lj59OWt2go8E/izJOSuPGI+AfrJluNXkx mNNgP0SyER4zelhYGcz9ETIwjX+O5P+Tjb8n4PIjGbflx3MczoUp/mpOn+jyo5LtkX9q3wvDcZvl sdHC0xmn5c3Wb1pyH0jftljf0XqUFX+ln5Z8zv0jhi/QGfwOHrKzHZJcasn0gW5N9HvP6IZ46Mo/ p+E3c1waKy8xe0VlT+Xn9f2PzJ4B/WdbGcrjaU8C8AEdAN2ucrS0M9er9NnMf6Xzxkddxgcrs1xL /x+xsrRflu/R5wv5fKV0HssvVl8u5jbfX6wrzy7mVUaLeU1PFwtb5mTA/u7yA8WH0r7sz9h+7aeK 9vLiYgH2hmN/OfaNc1+6wrDCkL1j/3q/QrvCsMKYwpBCt0KPfVvPfe63S5f2ftfvZ39WYVxhbm3f etivbvvS41702QqDCg/W9p3H/eYvp7MJEmCPPqD6waK7Bp8pxglNN4oJQnVWsZKQzjyw/e3pHAOD 6uPapvtuHinP13bi/IhN+v3p0r3V4WKuQmtzf3G+6UvF6tLu0t3l75Say9+5uafy9eLdpq8V+8qz insq3cU2DZ+rDNyc0vQbFCYVHlOYr7BIYUBhe3W49JSGQwp95WeLxQqPaB4rFfYqXK4+Wlxr/lqx o+num9eaerT+I8W+pqvapje0Hcf0/ZvpfULbMVH5wM3zTas1fncx0TJPv11X+LrmM9fCT+i3K8Xz 1culatM3ijNN95dmNd8o3d30YzffarqvdE/1eFGUv6N4GS6Wa3v2V+/CXt+bw9WidLXaofjcUPRX 71Mcr9c0i5W/dhdbqnNvvqXxA+X7FebfXFp9Mj83H9T2rdP0A8Uq/f6wPq8qXygGK5eLJ8r7FRfr i82Vbxa7m+8tdla+efNK5fjNbZXVN9/U8g9VpLRKy9+l5U6UZ5XuqgyU7tLwHsQ3rSwmlRZztI7n Fe6r3n3zVHW28sek4nBjsafSVbqv8rL2iZ5ircLc6k6t46tpf/IsrccphUeULlPVTcWblSeK/5ho 1QXQcl5OcnndjzyneT+a9ue3aR1WGWzX9/s0XJLPlSh25v3z2INfQp+c1XL15o3KvcUZxf9HFd/z 5ePFXn2/1nxZ+8P9CS+zFR9Pt/wVxcnFYrPSd0/Lg8UBOz/izfKY9oOvFRvL54s9Cvu1PQ9peLH5 Z4qjCgcUJhMfzGoAxClfJJ4IAJ6IoHwyVOOJRvha8U7iiQjKE+CdRPvpALywuB6snTWojiqvkA8a QMvcAj6IAD4Av6RQeZV8qXi+VrlSPNFyb2kO+ERpX9Z+u7Dpfxdtpf9TbNH+tr3p7mKLCuwtLc2a b0fGecoXdUN5iqeEB20b8IN2K073K2xR2KGwW2GfAmhwUWGfwimF6+XzpSc1PKZwXOEDCrPL5zW/ 8zffVnhT30XhEYVBhbJCAdrcjh41vAd8VzsVp7fBZQ1vAVflonjOYK7CMwpPKMyxOIQfVXi2jDNw iqLDYK3Cakv7eYXHLVxXfrV4QaFHoVXhowrPKMy3eITPKcxT6FToNTivcFZhrsJFhacV3lC4oHAi 7INvtn3yT9v7gnC+w6WGvfAP2PtBC20Pffnu+vfS7mq2EwbF70+Bn+xzZlvR18czlV6y72NSf+9d q+WxXPxuDtirOH8KYwz6nqF3e8XvuUf+18TvtFshfuZS/N5nttwSK2dTKGc0wJh9XyV+9hh9lR3i ZykNiJ87jnLWWbtGrB6wmWAHjoufDTxk/05avqcM+sTPKx2yb38ofrdIZygT5S0226jb6rvd8Lrc 7K9h8bOyRsTvhR+wuiE8HfDUK37m1IpAw1Hxc6Fg+16yf29I/V0RA5b+jNSfGdxj9Vwu7kNfE/Ax bO1fKfX31A1au+hf5xl9u+0bxgu/bXhcJ373Qqf4ufLDlu8S8busQIvD9u2o+Llgqy0tz9raEcoc szpxj0y/+J07/Be43Cl+7h3S7bGwV/x8whF7hq4i76OuGAO/bm1YJn43yTqDRZbXG+JnAvY20Ig+ dpTRbTjqE+cnnhk2bOmHDH/E+WjA+zXL76Kle8v+uWS0PCX191LwPLBBcZ/+cfFzrQesfRPi57r1 iZ+xPWjlkTY8e43pKC/OWp4sh3hEXzZfS8oHtN1s/5wKNDsizlfAybZAtxErH/mds7SgzVSoD6BL /B4K0B796YDUn51odMW4PeV/zur4FfGzCldY3qwn+i/vYVomfpfRZkuPMfQ6S8s++xXxvt6dfRE1 fLO+5Ef2uU5rG+XDcnEePyF+7qOOXZPvh3n1BVqQT/qk/h5oto08iPZAJrwhzheXxc8kZN8ALs5b 3FAoa4XU3X+VxoyU18AP+GGxpXvN6kX5T3m5VmpnO5bo7zohfuY7+9EacVl21mhGXlludCYPvife 14nXQfF7hAbFz08cCXSAjoLc+NeSdRvyhZ5YLy4bkA7zaQcsP7TjoLjeoUzpFZ8nZr9eZ/GTFq6y 9jLtkJUBekxYXiPiZ23uC7Qfsu9oxx7DF/TMuNVjtbgc7c3pk0/7b4f6sS9MiJ+FSHz3iPPRIsM/ 4g7n+HQn/Bbxs7fHzAcG38VJ8bMov2J5bwt4IM+fMJ8idRphfahbq/gZ+sesTpyv7gnfXhO/Bwp5 rwxt3CuuCy6Jr0PcYsCzOb8ifnZ8n/lll4nz9D6jPWX1MXF75FD+Bz7FxDevWZoVVpfNUn9HE+CI +F1Ah6zuoN1OwwHlI/C5TvyOJtD4pRA3Ic4v7LND4ueJ0majHbPMaDNsbd1r/8OWez3gDe2lPUZ+ oB2CtkI+vmL/I573cy21tEek/vzdNvMRXxQ/s5JzWEjXKd7PVlm7u8Rl+GVLf0X8PrhB+/c1a2ef +D3xyIsycyCUuV38bFL08x1WZ+puyppBKxcyDG3FeoXu3I6ajjb5Dt91eu82+pyysok/6gU8nxW3 XfqM/pRHQ1bHTeL3kfVb2sfEbUK8H86+8VRWt9F0g9SfDzoifpbqb4if1cv+PiZ+H8eKjMN0pvg+ cV01YO/U73heJy4LR8TvxF4uzlu0G2mr0QYhP1HmdhuOmZb9w+RKas9R4wP2xeGQD/UmyxkWv4uC NiTq9ZI4XxDf7CtID15bZHkuNtofkVvvVKIuNb2ecNkmvvajV9xmowwnn9qYBX7nMubi37B0oDP6 wWqp8SrmOAm1PkT5GWkT+LDG12NWR+CM6wwo11daeSfEeRL0PCauC6DrIeupa2jTE0f94vdFtonf 1UD7a1F453NHCNvE7R7YMZQhqN+2gL9gP9V49IDceh/aotAetp3yjnYD5MZVcRl5TPysdOiF9kBj 5PF5yWMH2Egq50r3SJ5rmxLn4z/MvvNUf+QHe+bdPAeU8u0IdWHfZr9n34zjwRiSnhwfECd94Z22 MenYJvV3kLKfoG3Ph7ogfqP4+B00MLu6NMf4ATprufgdiQPi/Nxpdblu9GKfgm1zPODt7TxPkdZp rAr1HbX3a+J9kfKc/Eh9c8DwOmH/XBC3h2lL0TYdFF+bdCbk3WHthm6l3brc8kA66D3wO/oF+IRn PiDPHeJjvfVSLzvXitsStIVJ2w3i/X63uD27VVx29UnNpqobD6De9KEsCTgj/obFeYP2TF/IYzCk 3W3f94mPCVAmxo0rxc9Q32j1Qxs32TfiCnVZLS73xwONoBegm8+J6xrEc1yNPNuk/r4+6iekAS+1 Wh2RxyWr9yVxHbPc5o3w3y5xW3W1uI1Pvqas3NvwPjrNN9o6lKeUF6Qb4+n/6AvPI4Yf8EC0GZaL r9Gk/4k2GPk+jj2o32m3kt7DhiPmQz8Qx7aUtezjnfbvAnE9SpmDEH0V/H7I0qOPHgjp9omfQ474 3eL3sTPNcADahLRxWBfiuVecr/kP9S3zWi6uw4n/tpCesm+woWzq4IHwX0cDvYbDe5fU2xaNeUV/ 5EgA1rdfXNdekfq+OGF02mr1/ZK4nNwuftY85Rv7Df2XlBft4ndTAS8vit9t8KLU+ypRly3idxxw bNpv8aPiY44hwym/Ix58+7LVqSvgq93iYMu8Iu4jYoi8zUdcZj89Lb6va9DqSb1Gub5MvE+ttrhR cTlHn4qlx5xvkkfs53G8QJ80beqRkM9oCIdC/IocJh8McRjtKspL9GPoeOiJtfYf7CfoBehK2Gv0 WZ2U+j6PPnNeXD+TLqQNx6BD4mONw+J+VOJjvdT3tfHwD8cSK+wf2Kfsh5RXneL3RnQa7fkMunaI 26qIo01Gu2yxeJ+KY789lj/9jiwP8v+41N/HsNZsIOBa7aFkM/WK3z2H/7dYPZcabLO2AZdfMFys FR+v0NeJdBsM9xfE7+6gfUIZutJwuVx8fXzkJ/qmG20utqtPXIZ1hu/LxeUx/VidDXGcixgQtwMR on8ttJC6cb74uKxR7lAeRduQsojyiO2hrKU8i34Atmko5EE9Q1mEcHdD3gN5jWNaH0efOOylFUZr 1A8yDnp7j7i/nPzIOoFOp8R1H/I5aHlQxkcbc9DSEi8RHyh7ItCD+KI9wf/Zz6mnKZ+mwwnLjrY0 dRplSRxz0W4g/pkvaUN6dIY4k0GJdyfFZRV5djykYT+gXUH5Sv0f9Rf95bF9veJ3V64IZQyH/Bh2 Sn3/iXqTc0Wj4uNa6nbKNo6zwBfbjW6nxfkLMq/d6o12vx5o97blN2nthw2yuCFf2kKkG/G+KtCF frqD4r4KyoVu8fHvYAOMiN/J2m915Xhng+Gf4w7kA5kBX8QpawdlM/lnqaUhPtEnODahjD8jfl8M 9SNlHO3rUfE9LKuMdrQjyR/klyXi82crxef4lojfDUT88T/6fVaI+xEj37F/oXzYO1O3gXPiczcH xWVJjzifQqbAZj9sIXmF/Y19GLAo0H3Y8ufcLXAOPoFuPmF4mbLncwasA8dWPeL+sE3W5uVGwwMh /ag9Hwy4p68EeOE4b519I590Sf38C/s+7dFol/E5juFZdpS59EmwzwAWW9guvv+my2gMe67NvtPn 0mZp2d87LNwl3md6rF3jFlKPxPHbYPiXdgD5+WxOk+6G6REfj7xi/y7N62xT3GnxedpdUn+f8Zi4 TqIOpByD3Qs7YYf4vBJwQz8V2gEZcsrWRPdIvY1MfX9BfJyCd9oCUfecddykuwsbgOury39X8j4N +Enfk6JyTJ/nZB0JqDyv7/9M8tncqM9UXt+Y4Jn8X+2909Y0HslrF5lHWsuIUONwXnrNFziVIe3J sb0lNShnHPBua57dW3lEwzfz+tO0BrXIdUz11HbQNsQ64oqOHcvYP6S0LM3NUH7X1rICz1dzvpXT uc1pLaviIO1TwVrTPRa/w9bVa1m3W8dfW8P/g+5NWSx3vn4fY4p3Zfr1+5BzN3P4Xdfvf0fq96Zg ffHv2v6RP7D11rfbm/KM3H79fr/9C3zcbziCz+4Fjf+q5L0qWKt+NOxVWVW/V+V2a/lr6/hnyQ+2 P0XbW8K65Q/L9Gv4wWsNa/jT2voHxdfwX5M7X8P/pvG11qtuf8pn72B/iuLnljX8r+Z2JlxjLSP4 ASF1JGQdZAzwsNr6jPJb+X8qgA5Kk8r+vNa7/C3bR6S4wjr/Mtbcb8n9taL0LWvdK2g/2vGo+F6Y c3mvEOqcQDIOeXY+w0S7LqmtL2o80z+d3z/Hzt5HuUfz3QLxvoZ0b8Ch8G+npZ8Xzu2fY3nO8fcY 1pXb3pD39fry6mA4lNcI80KenfX/pfsOztfnn+5WGJZb74m4IHX3bqT7BeaFdOF7I9TdB0B4IP9f d8dHQ1m1bw15xzsbEm2GcxlNVrcWtrM8DVjbW5THW16xkIBx1xP2rHKn+riGKk9a9maoqg3Xon2+ 5Uj456i90z/QmXUB+sh0banhrwFuqly8eTzLKDwzTHi+N+eLvZiApIMuZUj+YMMx78WovF7P3zU+ PzM9n9/C41Ne1xr/HZHaPRApTfv3ydf974Ovx27D0+3T51eSpt8q/XzT6eJTzQtLnc3txaeazhXf atlafLVld3Gs5ZzKy57i95v3Fr8jf6nY2/TfihvN7xTfal5b7G35drG3eY/G/2UNe/R9t8LvFVMt l4tPyUNqV6wqPtWyo/iiwlTL1eKr0qrvJ0p/XRarPLtPdctCfT+r385qmv+hsvxjGl9Wefichn+r +Jb8dPFftMypBE8ptBUDTRdLn2h+o9Tasq4YaFle+kCCM/qtqmU+rHn1F7/TMpHKm2p5vNTcsk/L vVfzEy1rl9o8j+l/V/X594t9hKatpY5mlbFNZ4p+bfde+SnN6/H/y973QFlZXfee7/7dM3NnoIaY xBATI6jg8EcBE+KQNhU1JpQS3iwemd41GaeTye04GcfJKCVAqQFCCBDCE2MVjITMo5TM4s1yTVg8 OuGx6DyCAWIMUB4FaoxYtGLUSIxNUN7e392/2fteSLSt7erqezPr3P39OX/22WefffbZZ5/zsb43 gevzDPPkTIZrePyuCY9kFsfj+mOZu7ic4+G7mc0cP8M0mMN5PcNlXcG0O8P4fD78PLOMcfg5X7+L 6/Ke8BOubxE3oVsL5/UFzvclLmsrl8s0omlcZlNozdwd/VF2I+PUzHF3cbw8xzvIaXJRe+YMhxv5 /iGl90Doym7kfJ/jeu1neFoh55s5GbVnV/L9UW7LnzO8M/yArwvZadEsrnchu0zjZ5jmH2J4kuuS Y7iF231L+D639WPZa8MPuB0K2SeimdzOBa5jf/a1sCrby/h8P/p8dlP0KRoddmRTzBvLokxmbihk ruP6NHOZD3H8+eGu7NyoIfszpvlzoTW9LZqbfolp/TjHWcLlH+LnfVznNVznc+FkdhzXeSo/XxvN zExlmj4Utme4/3BdGjIFLu9ODs9x+w+Evcx7388MMD7vYZp8gdNv53Cc76czPBj9UeZvuL7nGJ9m xrWVn/dzmW9oOMlhC5d9jOn/CYbPhPncJv2ZMeEHmdHRrMwCvm6L/jD1v7lOU7icSdxHArfJJH6+ kfvIS2Fj5pvMiw1hb/ovmFYb+Pn7uK9MZV6bxmE458vXmc3RR9Jn4r2OfUUdRHTueK12qoatqkd1 F8f0+Ax2Ku4ll7MLoD9fTO96M/0gPv9jwlsManOQbzS9LXpF+NcFGWfi/XesG2Wkji8WaVMSBosh /k6S6Fgy9+ws6lTJniJ+sW42TmnVqvqytAPrZvF+sMtVrxT6blSd+pKi/pXgcUz2mcoaehzqVW/Y rWGc5n2F4r2cStdnLhaWK64SxhbHTqF/SmzHzUXdPtbv5TwD2QP4/qJMF3/QeM+c+KUN46D1k/lL fJ6F6JOyL/DV4hgXz91UN/iX8M7bwgP/Ep59G+odt7v0K27bIGsq/QolzHDXGYVXKBxTnB8mWF9J /FR54DGui9RZxnfmmyTnlWDcZV9jQui0ujiPSHD5suYk89Z4v2hGQ7qo6ycFr/YiXrIfMZI8RI8R fhMdmOcWifuL/Bd/t17osL3YByKZ1zIN432dUseZ/hvFmZFhNcMHWabJ92t7fkN4VQPukf5QZkl4 nOGTHI5x6JXAY862TG/IZ24N7ekvhk0cpweB3y+SwO87Od696eFhZeYajmd5yjd1V6R2hQbGbQ2H Q3z/UGp5uClzPNykcVa7UKzHPSEfX7eEuanbQqPsjZT9WUPv28LabEu4V76tLN83lm/pxnv/yr5h m54k35uMLpfvMMffsNVvLsffsZUg+xRDNDrxl8XvIcffNWWYzIVZ8bdtQzRTYPy9ZtkDuVe/+6zf +JXvPcff8f21+66z7IHkMuJvLBf3bha/1azf6GWcVsbfbf62fZeZ4+4TfOPvMfM8MS5Dvycdf0ta 8JZ9lZJH8TvPl8T7HQVnThd/47mV0x/l8HQYkToWDnKeM+L8tCz95vN8qU/8Tr4NnD//XOrb5wcT q8/vjr/3+y1uv6eZdh+KcRudfJnp8HK4kfPYJ/VL/mn8fed98TekJS1DwZNxmZTq5yB7NGuYTvfF +z774ry6uczjYSbnd6V8Y5rh3qF8R3J9ckV8JN8QXt8WbQ99EmS/ZvJA/D3TLckpof6CsDdcIYHT NHCo4fAwh5VFs8frl3LgpK8f5XBFYiQL5fB6JYfhIZwb4LBD40lo4rDI3UuYGvNod3gq86PQkeoI K5KvhJmJy5gufxUOZkZx/X7MgemUfDrcmsrz8z6+XsuhEHqiHzHeN4dJib3h5sTuMCl6NPRw261N 3xda6NaY72N+1360S4KkSz3MtP0i53t5mJn+Zfzt4gWZT4VdsgdU9mHKnr94D17ZXrt4f1qf7gnV faEppmYcZP/c7lCQ/ZpxkO96Lzv/sgTZRyp76SRtvB9V9x7KvtR4f+ELtt803tfG+crez6E9ebJv UPcOpm8M98b7SQU/CW3FfaLMC+sTO1geSf66x1X2t8Z7AiVPSY+9pzefny84Sp2o1Lbr17MwXsD2 KuNGU3EsH1pTwroP7Mrz9dkTGvcJ1RvgOyV5HiTzv8O6aivZuuw81TPuV/1iJQ3Zj4fW7vy6N8Z5 rBtgXQzPJG49mR9yj+aN9SLYl/MuT9iLsa6sa/Gx/VLmp2JrFht5g0sPW3K5PwloBDs01n2AN3yq sCbQqVBsdNtd3vvI1rX26LtdSquDZL5iWNvxvixYN0V7/ia/F7xvKXuGeoFPOsvK20+2Nt+iz8XG +7C+X0/mm7KRzO9c2nuDtnGXy7uDzBY/T9+vd7TG2gPWhFa6NsM6l7z363eg/f1kvNhI5osiz3aQ +bChL8AHt9OVIe0+10GsNWOdCesjYpcV3hP7xwPadk8orUBPlAGf/YLDH2tk8hzr36fJ/PKwDtVJ tm8Pa07eFwDt6de/cN1NtuYInkT/wro2ZAPeHSfzl1lNtj7bo3XcSbYXQ9KtcXmBjgidrgzwK9qk 072fR7Znqa0sH6xlYs0MPj/oO97PrOBCB5WuuzWR9QG0c5O2Ddb+IOewjjyHbN0W/UJoMUDGj1K+ 2AIfoFK/M+83tLqs/pLW+2FebL26QLYmj7Y+pEHyXKbXBTK/Qbl/nMz3DP4MWNeGzwHkxSKyva3w z9x4kbDNQVnH6Nf27yeTFc1kchn+AJ1k/UfS9Wke6AfwH1tCJkv92irWSzuodO1U3nnfmya9LlCp f1Mjmb1xptKitzj/iddlxH75mtJF+vGDWhdA+M40KMT6OfwwZlOp742Xy3Md3mhD4I/+4NeTG8l4 3PukeJnuxyLISvR99Bk/TnWWpUceup4aCU2Ed8QGepJMXp3UuAOuzdco7CRbUwUd5LqHrG/DZ6+N bC3Wy6DdSm/0f4FbqDj+bi3aBuJ0gg98SKSt+hW2kfm6YI1N8ntDyxkkkysr1PaMPbOQ0x16LX3j NJlvInya8mR+koP6bI/itITMl+2I0kjo3kfmJydj11Ouju0ar0Xr36n5yfVBKpXloPEg2X5B0FP0 AoxHR1zYpTRZTyYTJJ8HyParrtUg70X2SP8TXsd+LvDwYn2nulF8vdJd369pujQ/lLFen2/Tsu9X +npebyLz2YPcv1/pjPFmE5mPFfwYdUyL954eJ+t38EXo0niS5zKy/rCXSvWZLpe3H0+gR0E2Iv0i sr4LPXM+mQ+Dl3Vel0C7Qw9G/YUntihekHmA0M9RHtLgndBsn74X/Uv4ZqvSfD3ZON1J5nsstN1D pqMtIfOHLB+XMa6CXi3att7fDfXC2AT9FmnBF3kyvyfoTl1kPslSB+l3L5Lpz+B1T0uMu5BxkOkt ZDJfaPorMl+4+S6fTVSqb/g5BNoa8qBc7raVxV1ANs6V+/S0uTwwDgjOg658v88eceHjs8Pl1UXW f7u1PtA34FeJ8QlxkRZ+YpDPqAd0FbS7QIxf4O0BKt2jgzmTp5+fn3WR+dh0uffz3D36guA4y71H XXCPtMAHY1kT2bgJfoJeBloKPvAjx74x2W8kfWwrmT68k6wPSH57tLzVei8yu1/bf5/DSW3jQ/1E 2mq/w8HLlXK9FXMdzGe9nO121+VjNGQL2g86hJcpnVTKcz5vvPNzv3qXl3/n9Q7wWrkO7q/Rtzrp 4vNi4Ip5i5ep8IkEn7W4PHw/6nDvy+tYXje5/1wZfl4PFwh97FGy+U057l1l937sBm7enoJ4whPC H08pvsJfwlMiC0VvFh8m0SEfJOtrSC9zfeHT72n5El9kew/ZXjPZv4E9oxvI+hP6jsSVPoG5uLz/ Kpmfr9/ThfSQi+1a7v36Dr6p8g7nIax3ZUM/wDjr9XXkhfn3I2R7U1ZreuzR2KBpHnFpMNaB/7/p 2n25ey/vZFxq0nxgi0CfQNpFZOPaeo0vsF6fSbqbyexCkv4bZHse55Pti1yk9VU/2wh2J9gwuhyO 4KMusv1g3raCvMBjkNUdri7oj2uotK9L6CeThWjDvCsTefl9hR0OtpaVCVkNnRY06yKzb/m9dwuK a32xvit7ZURHP6jvsWdE8BadXPoC5ODzZPJsmea9h0p5R2jYq+nlvfCl8Ppmsr28K8nkivCo6Pav kOlnmE/K+q+sG8G/+6gG7BeVNbT9ZOcu7CWbL0I+yHUj2b6awkWeNVLpPLRJ72eR2RlmUemZAg10 4R5Jb2/CfFyezdF0p8n6WyfZHgnBc4XSfjOZ/GvV93IvOucisu+P76OhszmG9ty0a5thbNzq8gEf SJoXlJ5Ic07LaXHPMU9YrHjd5/A+quVKfo9rOmljkRE7tG1Oku2hxNxU2hk2D+iwmKfgfgVZv1ni rtHXQL9Fiuf9Lr9WF6CHt7lrPJ9HZreDzWIumd7cSKZHwnbT7fKBraudTKb5d3PI+AnpvZ0A8yi5 FjkEWwjsH5L+Nn0n4WYq9bn28yGMxV7n9rY0jHXAE/X1dgh/78dJj7cfI7ye5+c8He458u4oo6fH q83dI8x315DzwoO6Jyb2sR5ORf6TMVvm38KD/RpayfbGrtUysDdHeE3m2SKfnqTS/azACfJcaPqo 5iE47COzm0H3w/iyj2wv4G6NL7rqANn+l1ZXBmy6kN2tLl+0xRJ9JvOr58jsWBL3eHFNPK7PTjK7 Jtq/mUrbtFnbAG3XVKSR+LNfMN/FnMXrYX6u6fU49EHIcj9nLp9HQEf1+jTmEdBzuly8ZirdR4rx BfzU6t4BYs7j+RR4+/ku+A6yADh4G2AH2Z5B39+9Lcfr+4jbWdbWXv/1c6M2srMyUHY3lfYTyJdG Ku2TsJNgfojxHX0F96B/M5netohMdmAOV3D51VPpHleM/bC9QS9ZQGZbwdoX2ncz2XxJ8OstoxN4 x/MabLUHqXStD9AH0Ak83UFme8AcoeDioP4oS96J3o41KD/vQRuhjDatD9aFjijex8j67v1k8kDC LjI+Af+DZw+R6ZOSTmTXg2S2hAWK232uLWEPA73EViK6BMZglI21CYwH0Gd3K+67yXTHfa59sc6x n2zMXqD1uI9MLxsks1vABom1xU1kc30vVz3foy/6+eoexQt7zf+nhk6ys+gEz52aL+Is0nzl+Q6y PVeLFZfFSmupywrN4z668MxFtPUizUN0yCc07CbTNaSOfa5eQj/s04T9dbvmPaD5LyfrV5hveXu6 n1tAhmGugnkgbBaYiy9waTE/QmhxcVeQ7R9E38f4vILM/gO9DW0OHGCzg20I7QwZA9rdq/GxBodz VyBnJGB+Jf1yI5WuSyHsIxtn9ysErVdQqV0EZc8l080EpzyZbJM4Ml7u0nK3Kewjs/e3ubizFeZd GSin3AdDaPQA2XiE8Ux4ZpBsPQXzZtjRF5Od6YH8d5PJE+iF5dDPUfxYjjiNijdCE5XOaXAPmb9d cZL7nYpbh7bhANn6D3hlubbHYjI52651ayP7XhnscH1UaqeCjQ7zZoyR0LMgcwT3erK5FeR2ua7p 7f9oG7QjdFjYS1EO+lm5zg5ZUG67Qj+DfuHtoxjn7y0rv5FK93hDDjeQrSnmycbBPNmcIU+2Nx7t KuPOHLK9pBJkHoo5KOarc8jO75qrZSHuLDJdeg7ZmFjv8sL4hLFwO9mZMnltO/AR2h5y3etZrk3i NTvJE/1RaLBY2x86R5PO72V++KSjWZvlU2IX6nTlgD+gB2LO3+7Sgxe8nQV9b46m+19UnDNLfkdc HnJ/TOmjc6D4zMz1NGSbiHFdrO2E51Lf+8lsXJjvQTeAPiXlYIxBaFE/psVk5yuJLMSY5G0aDTTk Hz8kryWN8B/O08BctpvsPGTIM/gl/YpKdWDMaZY4uqBfCW9tdO3wtNLqcTJ7FMZ/uR8g65eSn8jd QS3jKBlvSBqxLcE/4gjZGaZSdxnfH1X4IJm+Bb8d6EjLyGwJHVqe0CFP9v078AFkHuwH4G0vd7x8 9zZjjAt+LG8jW19Cn25Rei0hsymLLtyn9QEvtlLpnKuT7NuisGNCF7iJbAwCP0D+zyHzbfJ6FuRX m7Y7yvNyrYPsPJluMj1dxiuMP+hrHS4t5jfwBwG+Pm8/N+lycbzvih9fofOB3n7ehHp4PyKv90Ku Q+bjGrICtlbIkxVk+qFvb9AP48AhR7MBMj8Fib++rO06LnKPeUu7u/fzxyYXd95F4jS7tPVkc1z4 zM1TfHZogJ4j+T5Edj7VGjK+RT+WvPxaAPCX9nxY0+bJ5njos2h/wedBsrNC0SdAb9RrBdlZB+hH 3S5u+TwM9PIyE3N28BV4Qp6JfGogO8N9tZYJmwz8Vb0M9SFPF/oP4t3ssmfgD8lL9rE+o3iKnIad V2gnslR0rL3aPjLfOaZxj5CtSaBfdJDZgva4AJvOHjK9BD5P8JeVPGUuspmMP4U/ZAzZSuYDhXVs kcGwnXv761oyXyn0H9DN2y7nkukrs6lUPwX0ummztr9PexPZuAl5gb66gEzWentIwUFvy/F2ROgk vXShbNmrNNlNdn5eL5msbFTaQZc+SSZz7lS6Q8/b4egEvtxBNkeE3R3xJB/YPjaT9cHtZGsGbdpG C7Q9pT1uJRu7YTcC70NO+X61kmzc6CSbm6Pvtri00FG8/amRSvsX5DD65SyXP+Z5WK+ALBaawG7S 7NqigWzOhjK8vRE2FOh+LS7/bqUFZEwj2bxqwOVxiGwsPkTGA2vI9AyU6+eM0ielz/TThf643p4H X7NmpfUCsrN4G138jVQ6rkBug9cOktmED2oe95HZwzA+ybvlZGMl5CVsWVIm/Pr+OxX5bafDo3ye c7FQIOM/2HBQVhOZf7jYXyBDul27HtIyv002Hz6iNG9Qms5XGgA/tFVB4+s+x5Lz3O8l659YC4D9 w9uV7yXz7VtAdiYm0sBnbR6Z3ogxqtw2AftEuZ1iueazgkxWNWh9BjSITH6YTE4OaN0lPWRNH5lf MsbITjL+QkCfxdmN6OcYG4+R2aehJ0mZMxWvAbJ+jfbbo/XoI5s7wGazXOklPDWXbL2xhcxPeS6Z zIYsQgB/4l7wyZPNVyF7JN4sbQvMbXvI+gbm1msV3/lk8mQlmU/jalcm7H/tZGeqS19+UsuEDlSu t7doXvVka06L9Pnthm+8h/jvtW0lT8w/0LdfKOYX+7Pu1HSwkXsfKbT7ETIfVtgJID/n6jPY3UFL jHMYbw9p2cddXbwNAmNqIxnvQ/cDTXeRnUEuaV6j0nn2q1SUS3up9Ew7P5/Ou2ei0zxFpftEoDt0 ktnO2pSWgO3aRvvJ+oSsf21TXMCP0NWEBk/QxXkLugbGzFYynw3ITCljh8Y9TqU6cLm9GjIRbYe5 VhfZ90rk3RKys0WXkNmzfJ/1diQpH2vusH0LPrO0HUXuw74KnUjoAZsifIwwb4Ntya/1YqxB2fAj aCLz4cXY1EGm9wgeR8l0jmNaF6SXNH5uqvwQnzcC+6DonTPJeFLa91tkZ8ZC78N+mUEye6C830Sl a+anyfYU/bhIgwg26o1kcs6tieN8j3gdVcKLF54VMnSGyMfsbBicjSNn9sRBz6vB/dAZIh+6ML83 HtbAvH7+Ujt7RM7ZiQPiNtDQOThyvk7JuTknS/GTfhmfe1JfDMGdjRLT5fSb1O3Wsrp1F89qiUO9 4qD3b7lu73Z1y2tA3HyxzDjf/D+/buFAWYCMwvUBlwfKva4M3+tK44QpVLR5cYjeVcxnKO679JnE Ga189gf6/LSGj1L8jeh4f/5ZxjVY2hgH5lc5T1fOD5Nz0OVbxPG5YyeL+9rj/ixt8EaR/uGHDH9C 8bfE4/P55Owd5vdohu6Fv6nYh+Sb2NFHqHgGW/dvCRPe5L2Ec0U+iQNfx+dAvGgQIa5XjaOPXLvz 6kro/DbGi+tQbv/49wpuPe0CfN9KyJVd5y7y/N8ivNVyy+NdjP4v/P/wHyn8v8Z//6pykc+V/8b1 /c/SHm+n3JaxUuZIGFvPFUN8jbRyLTqgnE0pc7sdVNQF5f52DRvI9sKJLrdXZfKXqTiGi33k81Sc U99FxXMvv6HpNpL5wcu16KLTiufCFnXUVIh6U6yjJy8N3Rw6qSY8mf5FuJHDhPR/CafjM05e5yDn pNwYtqWmhYPx+SjPhzFynsjQ2Sc/1DNK5PyPOeEYhzHpFXH6MXEeciYKzkMpC9nOkI/PU9EzUeIz TTQk3h1q4jKL34zfpWeX7Er9Zdgr54fIOSWZvwqr+boj0xzmDJ01MyrMS4XEOK5fc/KSsIXDNq7b 8vRzoSBnTqRbi99TTz/D5cn5GNNCIf7GeT/DX4a+xI7QNHT+xY/1rAoOxe88n+/H99jjPORcDD0T ozzE32GXb13jm9pytoWGxKXn1+K76ol3n39NzslInDz/qpx3EX8/fd/5Hq7bfq7bbVy3Tq7X2vj7 8aOG9jnCF6mg7fm8tjN8VzDPwny0mWyNxNsT5Rq2rhb3DjavZhc3T7bmj/UOxCvoM8kLdr5CWV4t DjaR2R4KLk55WsS7WB6d7r2nRbNL0+LS+PWYApXSwNv/YAPtLHtW7jPs4/j1Hswzl5PNR2XeKnN0 mcfBzteoUNaN4c8vtnDRbVfotbTnA9p2PNeI5cEMxWUr2VwadkLY9Ba4tmgjW/edS7auinUr0Bn1 EfyeUijzULHlHqTSNXrsCe4mWyt+hoo2H5F3YqsSfnyUzK4Mu4rMn2VOAVuNzEPWkPkQSH73aRk6 14/Px9tF5qMPW4racoa+VdtGth6xR2m5iUrPkMD8fxfZ3P0o2ZrSEqXTbteWYofIk9mDBG6h4jwa PkRS1k36/gkyfgB9YINCHkfI1vlxjYA9yLCngJfhQ4b9qVKm8Jbw0QNK0xVka8uwj0v97iSz+z2h uKzWsuBPsIiM/6XusPOu1jKWka1/rlV87iOzW2zTeLiHfXM7le6hRj9EP4ZtDrZieS6+/w2Odt3W 3kP75mF3w7o1eGMR2VqVvJ/t4qI/Flw8pF9EpWsn7foMfaeZzJaO/CWvvWRyqd3VzcuaZhdgV2p1 90iLa48/6oU13b1U6iuJdUrwm8SHPwBoBVsw8u3WNukhW8eeQyZXQd852p5Y/0Rfgl16Lpmdaw3Z 98VB7w7XtnlHC6wlzyLzCRM8xJ8G/f8pKh3DniY7E6SPzPbYSaW2d4wr+iyWD4LPi1Tq39Z2kXsP G8jGR8SRsurJeBnPt7q0fWS2Z8/zcn8HlfpmFMjGCYx9fg2kkUxm+TgNZP1b8t9G5heBZx5HyPq5 DmfIb4wjkG1YU/C09fvpEDrcNXjVj4OdZQH5tZflDf5E3TCWdbp84bcFnp5fFrfN5Qu6z3PvW10a xIE8wd68AlkfnVdWRjeV7nvyvAO5ir1aGEdgk0VfEFrLfHYfWX+UPX/LFN9DLi54SHR76e+Q+Ui/ SO+FLlgbgizDGAPZOE/rt0fLlbGiQfOZSdavd1LpGnRH2TXko+d7H9DfQW//rqEsr05H7/J+h3yg G6K9WsvitZddt5D1qRa6EH8ExEPbtLu8W6gUR8hl5Nnr8m116cDjvv7IH+tVbWR89rSr31FX7iKy vVASfzcZ3x/VZ9KHy31i55D1Y8nD+1liTQnrHhgDsf9aylvF4WuOjujLX9d32Pu4iEr3tmA9RuLC R13mnvD1e1jzhZyRd8s0T3mH8R46DPZao87fdHh/S+vzsOIpvCuyarvG2UDWf7FeiDmCnxc/Qiaf VpOttXq9R9LsoVI5Df0YOsBqsrXoNrLzfqFXYtyCDIHM8OMVQjuZrJ/vAmQ+2rLD5dtBpecnQcaL znwpFXXrTrVLSBzMH3sUB+jg0lbSP7FeCV4VfGQdEutf8myXli1rv9vIdJgdNNR/Yv/dJ7R8zHfA 6y+S6ZPQc/JkZwlive8IXfwcO4k7h+z7gBijMVetp9LzhrBHaR+ZrwBkD/bBSJknqchLeTL9Dr7E EnfQ4evHNq/jPU82H8FZkeDDBq17t0vfQfbt+H2ax0GlRUHLf1zrNkj2DSnRgXrJdBP0F+G/AbLv NMq4IeMF9jI8R8aLh8jmOJCHa8nO1sGz+8h4D3tJl5H5ZPnxu5NsHRgyU65nuHojjfelwzX05hb3 HLLBv2sqS4e05c/xrNFd+7l/s8uvmWzPRaML5etG6LuQKxgf/Jjmx1DgM5dKdb12Fxdt2OrStbv8 QUfg7/VG0Ab9q1XbfZfSupXsO2CdZD5I6P+it95flh9weJBM9kD+YT4mvAN/591kvrnter9WcZDr HWTfYJbrnQr9mIlxfKfLD3MGtOHzZPM86L9NZQHzBeQNnLrJ5re49zpOl4uL9sA12hx0xrwR7XAx HaO7rPxyvQX6TaGsLB8PccFXPo3nn/llZbS7+L4ftlEpf3o5drF6ez3d8yr4AeOR58OWsjI9XwEf yHTEb3DvYcuCTxCu/Xl1gpPINJzX4GmNeRLsABiHJf5yfQc/9hVk3zpGPZe79FIm9mQ+Subn4n1d oPtvczTDXAm6YgOV7qXF/h/YK+EzCp4EXfOuXdtdHl4/hVxqdM8h3+Y52gBXgTOpVKaBb6DvCd1E DxvUgP0JCDPJ9BaRHw+Snc3WSzaGe5kIPQvzGIHHyHy9YG/Z7+q4hswP6jiZTRI+TBg/MdfDuWKi ewyQjd2Qo5h3QXfO6zPRb8QesZFMn1+uZT+l6U8rDnPJzmZB3/G6NmxJXWT64CGy81YhZwao1A+2 PGBuhHxxbp7U/WGyfTYHyfxwV5D54jaQ8RLmgQWysxUh14QW2zVAzjZSqb+vD4WLPPP9HDKy/Te8 7yzL57tU1Pv79fq7ZLrGA2TjH2jRoPTu07CRbAyX+gqfYe+Y3D+ucJ/SKu+eDyoOsxWv/Zr+Y2Sy AP0P/QT1wngD2zV4cIHeQ14tIju3Fv6l8MVd4N6vdGk6XF6QT5Ap81066O7w851Hpfsv4SMMObeS SvkBe//nufSQM8ADcSCjwNeoZzeZrWO+yxt8i7EJYy/6B86tRtmQRS0uHvLxdp1ul/cKzQf2IG93 BF2wfwJji5fZR5RG28j8nDdr2Kbx9pD5ee8js3ljXgc7C/o05gR+nBeee9QF0X2EdzEP87YxBMzB fRnI2/cfP75CtqBu3r4tMnG/o0OBbL5erkNdTK9qJNvPIu211rXhJrL9skIrmdvvJDsXeYe20Q6y b+uiHbHP4RiZv/A8zW+blo32gd6BtTWUj3kZ9kT69gcPAmf0HewBk7bcSzZfk7aaSxeev4w+D73U y7U82TgO+Snv5lDpHq5W97zNpWlzEOsekElzHE55Kt0bjTbJu1BPtl6LfBrI1htnu7wkzCTzE+4j 2zfZodfevgR7k5cTfvyD/tVFZusHfzWSzc1Xksnsi9HU68kI3k6SV3o5v6Ch9QIN4pMRz307XJxG +q2+RCV+ob8h4L3/rt9vijN0/+KFaeEHChpc7H2YVAxvlv/FcCu5LtAFvlTxN1J/i69VyXcFMxpy 6veScVBDeP/bHF7754W37ANVUxav5iLPKx18syC0XPvvEMaRzX9mUdE/VOTdPPs+qfA6rofgGIr7 /5B/MhnvxXXsuPAbl7Ffd0NpfAnxNy73kZ1Pst/di+wot5X8Rw5T3kKYoEHk06LUmHBnYnjYlGwM m1IfCk2pzeET6YZwKHVj+ON0Y7grfXdYIyH1szAttSm0Za4Mn8huC/MzL4VD2Vkcd3/YltoYVopP VXZCGJ2eEa5LH+Hn4mO1MXwi9RiHs+F0al7RFyoxJ8xMvCdcK99cSi3idOIrNY/HvOGhnp8t4Gdt 6Uy4O3VJuFvySDwRZmXvCnnxjyqHkjb5UpiRWBYOZlti+RuisckPRJ2hM3pvdFnyA+Hr4euJjYnr kzXJx5KPhAF+emV0dXRZNEl/OVZ0JronMTbxRmJsdHn4AT+bFL8xeLXexfdhb5xqUnTV0NNJXMpf czldyQPJfPRseCM6zeHZKETJqDK6MlzPv5XRWf5/NiL+f5XhZ6KziSD/0bAEz04Z8a8nvxB6wvow M9SHL4UH+P9V/n8luiUaFZ6N3jt0l4gS4Xw0O5ro3uNqc+KX0ejo6vCLZAVjdTb5WLQlGpH4bjKf /A7f/zr6HmN7Y+LLiWWMwbe4tkytxGthS6I30ZvcGJd7N9ftWabVY8kPFP8THwm3hx6ps8SKNicf SX4weQXj8yn+r2eM6/n/UzH8eLiZQ/ybCMlPJ5clb0penfx0uCWcDbMjaZtJ4TzHu4Th5YnmxCcT f5D4fabu1dxm+xP/NTFN7hOfTPemFyTbQy5Q4lam+PpwMvlEuMz9TwpPcdjDYVJ0NGxMzI5ujR4N D0fbw4PRy6EvbA8UtoTKsJv/Hw0jot8NKcYvEwb5v5dJvpnzfobjrGW4KWQS56LNIRNNiaZwylTY Gl4IT4YtUWN4nOMkops5ZSIcDDV8vYXj7+f/4Zz7pvAGx30tbIr2h43RVoYHOeeN4Wg4x6WfjF4J D3M+R8J9YU/iuuiK6Olwf9QfVicWR52MdR//FzHZFMNE1MCwLzCnMC7Xccn8PrqUn63ncCgkEhOi S/jJZfxmK2PZF21kKq6OMtHUcGOYFl7mnDLRTcJS0Uqu2XaOJddTw/NMrZeZ658OmxKLoqZEPro2 SjFmz4dXo1sTvxuN47q28bNmjv1CdCzM43yOMwcLc+Y4bIkakpOi/YkpTOfXEjMTsxJXcNstip5P 5BJXJyhxWWJ4olFaK/ww3JfYxpg8ExpDd/heOB6eDivCvaEQClGO6dER2kNrmMN0/Vi4i39vC+v4 SQs/a+F3J7mWL/N9geHB0BwaOJcn+V0+LA+zQ3PiOFNiWeKmsCBaEJ5LvBpOh8XRWv59ge9fCH+d 7OKSXg6LE6PCK1y3HaGf75dwezwffhQWhXujCRy3LzGFS3g6tHEJ3w53cAk38/8svv9s6OJS9oQ/ YczvZi4pcLlN/L4QbgqdYT63UgfjdBfjUOD3cj2Pc5L6tPF/e1yHFsb5Ln7fyOlv49+OuHYSryHM 5bunGeY55TMcZ2d4gnEscC9fzxzTxm/ncR4FxklyLMRXBcb7JD9vDMc4/mp+0xS9L6yK3+fj2PM4 j3PhHsa9jXH8HD89ziV+kzEuhC8w73+R+W8Tlz2b6/4oc9Sj/KaDKS//bZyqle9bmE4tXOtW/n+A 4fNhGZe7I8yI3wkV6jmXZs6xjWN08dNWLncb1/FezqsrpsZxbqk5HOdgjLlIhDaOtzX8TRynk+Ms 5pznc8pm7g9dcV3u4tDA9BZ8GvnpXZznAKe+N2xgHD7NbdHM6Z7m9wcZh/mcSriqi2O0x9f3xned fNfBV22MUy/HW8b3G7jfS+2amZPy3JcGw9+GqfzfXfofvZPfUlTB8NfMDd+OeLTh/5mJjuinUVf0 ucR3Et9JHo3emegPK+KwP7EpfJVx/2r8+wD/PhBf86jAklZGh1Es/V+JTrOk/1WUTN6WvC26Xv8v 43B1eMnGjJL/y8rur2Z51RNeDD8LteEX4R/D1dGwcGc0mvP+VfRPjPNoHjMKLMPHR5+KXuLefA+X +IfRbXGKF1laXxPqWY6/l6/GxONTPfPAF4ZGq+IVj2GhneEYh8Fl8bh2GeIMpXlvPOI9G34Vj1if iZ7l39Mc3sHhn+Jn8oTiZ8PCDfx7c/z0Zh3jno3f3xJu5NGLr3n04lQ8JibCB1m+/o9oPtNvDNdN xloeL5Ofl/EsXB5eZ8ylb8mfDCA5DpdySMjdZz7Jvyl9U/ytDP2J1pCZfsuM+nDVH8/vag91n+v6 7B1hduH2jj8JhTtu77g9/Fn77d0dLHkkZTh/nqV74JALl4R3c4n2NArZUB3eEd4T3u+eyqawmjCC R6EPuKfJUBGGhXeG94Yr3NMU4zOc8R0ZPuiepkNV+J3wrvC+cGUYVbi9vTv8Xfz7k/j3H+LfM/Hv z+Pf1+74bFdHeEN+o1T8Wxn/Do9/L41/R3ZyzOiD8e818e/4+Hdy/PuR+Pf37uHsolvi3xnx7+z4 d2782xj/ttxzB+fWFv92xr/3xL8L498vxb9fuYezi74W/66Lfx+KfzfGv5vj396SVvltv6m38Bu9 hd/EW/hNv4Xf5Jv8Zrj1rw9fCb3DPz78z7nVAz/LMT+MLGIy/JtF+DuXKbwhjkPMBZeHq8L4cEP4 KOtDM/Xt14vwklNF+I6WIrxyh8IDCv9PEY5uVthxYcmjv1GEV41VeL3EidYkRyVrk5OTdcnpyRnJ etYEW5Ltye7kwuTS5KrkuuSGZE+yN9mfHEgOsvZ6OHkieSp5Jnk2eS6VSuVSI1IjU6NStanJqbrU 9NSMVH0qn2pJtae6UwtTS1OrUutSG1I9qd5Uf2ogNZg6kDqcOpE6lTqTOps6l06lc+kR6ZHpUena 9OR0XXp6eka6Pp1Pt6Tb093pheml6VXpdekN6R7W9/rTA+nB9IH04fSJ9Kn0mfTZ9LlMKpPLjMiM zIzK1GYmZ+oy0zMzMvWZfKYl057pzizMLM2syqzLbMj0ZHoz/ZmBzGDmQOZw5kTmVOZM5mzmXDaV zWVHZEdmR2Vrs5Ozddnp2RnZ+mw+25Jtz3ZnF2aXZldl12U3ZHuyvdn+7EB2MHsgezh7InsqeyZ7 NnuOUpSjETSSRlEtTaY6mk4zqJ7y1ELt1E0LaSmtonW0gXqol/ppgAbpAB2mE3SKztBZOleRqshV jKgYWTGqorZickVdxfSKGRX1FfmKlor2iu6KhRVLK1ZVrKvYUNFT0VvRXzFQMVhxoOJwxYmKUxVn Ks5WnKtMVeYqR1SOrBxVWVs5ubKucnrljMr6ynxlS2V7ZXflwsqllasq11VuqOyp7K3srxyoHKw8 UHm48kTlqcozlWcrz1WlqnJVI6pGVo2qqq2aXFVXNb1qRlV9Vb6qpaq9qrtqYdXSqlVV66o2VPVU 9Vb1Vw1UDVYdqDpcdaLqVNWZqrNV53KpXC43IjcyNypXm5ucq8tNz83I1efyuZZce647tzC3NLcq ty63IdeT68315wZyg7kDucO5E7lTuTO5s7lz1anqXPWI6pHVo6prqydX11VPr55RXV+dr26pbq/u rl5YvbR6VfW66g3VPdW91f3VA9WD1QeqD1efqD5Vfab6bPW5mlRNrmZEzciaUTW1NZNr6mqm18yo qa/J17TUtNd01yysWVqzqmZdzYaanpremv6agZrBmgM1h2tO1JyqOVNztubcsNSw3LARw0YOGzWs dtjkYXXDpg+bMax+WH5Yy7D2Yd3DFg5bOmzVsHXavzYp3KrwUYU7i3CU9tdRbdrXKhVeolB7+2jt e6OvV/j7Cj+hsEHhVxT+hcItCvsUble4S+FehScU/lThPyr8ufb5hMJ3K7xG4YcVqhy56lmFLxXh 1VqPq8cr/KhCrffVmxX+g8KfKXyjCK/JKFRZdE2twjqFMxTWK1Q5d027wm6FCxWuUrhBYa/CAYUq F6/Relyj9RijeIy5VOFVCrVeY7ReY7ReYxoVdij8M4VfU6jSfMw2hdoeY36o8O8VKl3GvKpQ6TK2 RqHyxdiPKFS+GKt8MXa2QpXvY7sUfknhf1OofDpW+XPsHoU/Vqh8MVb54Vrlh2snKvw9hbMUNins VPjnCnVcunajQuXLa3cr/JHCnyhU+tfqeFw7XKHyYa3yYa3yYa3iUftxhXMVFhT+qULtJ7XaT2q1 n9Tq+Fir+NQqPrXK37WKV63yRy3we60Ixyme4xTPcR9QqHQap3iOU/zGKX7jlF7jFM9xiue4hxRq +4zT9hmn7TNO8Rqv/Wy8yovxkxVqPxmv/WR8XqH2k/HaT8ZrPxm/VKGWO17LHa/ya7yWP17LH/8D hcon4/9OofLLeJUj45VvJijfTFB8J3xQofLxhFsUav+YoPJhgvaTCSq/Jmi+EzTfiZrvRM13otJh ouY7UeXmRO0nE7WfTNR+MlHpP1H5daLy68RzRXid8tt1ym/XaTtep/39ujkKtd9PUrk6SfvzpL8t wikaf4rGn6Lxp6icmKJyYsqXFaq8mKL0mNKvUPnyBqXXDZrvDYr/DYr/hzXeh5VvP6x8OzWlMKdQ 5evULypU+TBV+8dUHa+marvfqHx6o+Jz46DCwwq1X9QpXnVazzqtZ909CrW+dVrfOpXLdSqX6zS/ OtVj684W4TTFf5riP03l8DSVw9O03GlK52mtCrX8aVruNOWvaSr/p6n8n6bj4bQzCrXcj2q5/5e9 bwGPotjWre5qQ4QYYghvJz0Ik4BIuloMAZJJD3kRI9LdEWN4iIiIyBYRERGRl4iIiIC4kbcRETEi IgICIoqIqBh5iQiIGBERRERkK0K666yqVCqz3e67H9dzvnPvOd98v039s6rWqlWrVlV3V8ZsoTdb +C27lbiKeZedJ65iXcoW8y1bjEu2yIPZIg9mizyYLfJOthi3bDFu2WLcskWesWLFNVlcRf+tDuIq 4sIS/bfEPLfEPLfEPLfEemgJv1tiHC3hd0vEf0T0NyL6GxHrcETkl4jILxHR34job0Toiwh9EbEv iiwRVxE/EaE3IvRGhP8jwv8RYUcXYUcXMR+7iPnYReTXLmJedhHj30XEWRcx3l3EfOoi5lMXkVe6 iPW3i5ivXcT620XsR7qIdTdHrPs5wt85It5yhL9zhL9zRLzlCP05Ir5zxHqbI/JqjsinOWJe5Qi9 OWLdzxHrfq7Yf+QKvblCb67oZ67Y/+UKvblCb67Qmyvu4XJFvOeKPJor8lSuyE+5Qm+u0Jsn9OaJ fU+e6H+eiLM80e880e88oT9P6M8T+vOE/jyhP0/ozxP688R6kSfyeb7I5/kin+eLdSJf5PF8kb/z xf4mX+xv8sX+Jl/kr3zh73zh73zh73zh73yxbuUL/flCf4HQXyD0Fwj9BUJ/gVhHCsT6USD8XyDs KBB2FAg7Ch4TV9H/AtH/AhF3BWLdLBB2FIh46yr831Xs97qK+d5VjENXEQ9dxXh0zeb37xehBNQE BVFrxOaFynl+7fVE9fWOddXXkWr19eH436/3TIfq66uPVF/Xr66+vudXXz+pC/8thXpJVeiP/UD7 SWqZulhdoi5Vl6nl6nJ1hbpSXaWuDmwwbjJuNm4xbjVuM6Ya06yuYEMTsEHzoV40oA1NHa9OUB9S HwaZbKSh5v+2Nc3VB9Ux6lh1nPqs+pz6vPqC+qL6kvqy+or6qvqaukbdqr6nbgu8YfQ1+hn9jQHG QONx4wmrEPR+C7Z1/K1tfw//yscbc/68r17Y51VdKPP6nd/oLb9Q5PWF6/EL+72TF1ax77115312 rRLte6XnV3n9QQbk/lH7/ogLZ6rbuFACmA04y8s1ekvOLwW9h0CvBR7qWONrdbL6qDpFfUydoy78 /THEQdwCZ+DOOBOHcS7Ox57WMDA3sEHvqhfqi9J6/naE7Z32Lnu/fcA+aB+1v7GP2Wfsn+yz4NsC GFP9/zrSdDm2k9RH/rXxtd63PkBqXB66CNf3p3lx/i5vhX/cO+xP8Nr55d4G2tRX6X6q00XUoh/Q Of7Aqgqa7g+ugX/KO0iL/FnR3F9hpH+KWv4EWkbb0xg/3j/nnfE/8Kb7yzzH3+EtoqvpIH+7N5vG +wOgrUN0G53mL/by6CG6kVbQeTTDHwrtDKWdAO3FlZXj/OYcTf10jkLQMZAmsfp0DjX9Kt+gC2gn upgW+Me8LXQyTZQ2FftLOIb7x6DNwcw+v8Kbx/T5J729rI8cwPlLvEKOQ14PbvMcr8BfCtdyKO/3 SuDq8PIyjh7+crhCG7SxnwhoSnP8ebSuN4fGeBNopj+cdoey6bfzf/YGU8cvA93jaKx3il+bej7o Kff3ecvB6qncluPeHn7d483yR3nN/elgy+CqraArz58K5YlejD8TuGlVlRR6Cb4rhHILGMtCLlNS tdYv84r8gqppdLC/38+rmuYXVc3yU6uKuS2naSUd7a+Der1gDMCX3mm6imbSof4GepQeB48coSvo HmoC39c/TPfRJXSifw58vIqOAh/OoQdpnj8GvltOd9FB9DyM3Go6mK6lo2FcRtK9ED3b6AC6Az5j /HV0Oh0HcTSbVtHNoHsPPUfPwL8PcpyDzxF6GPQehusRFAsSw/wd9Cw9BXWPgU820HH+Qap6u6B8 FHxWCfEwECJoP6+7hBbCuG6lx+h2sKWMrqMloH25f9JvDHr7Q5yNgDZG0XYw5ivBjpDfDXq/iQZ8 E8pTwOIiupRugFgPQ1tbof1NdBj08wM6C+QqQKIH+OIg2HMYpKZBD4bQiVBnAUj7oG8AjaOToOfd /TMQb7ug3jT473ma4A+gyyiLrzKI2XjQXw5aJ0KEjwO9k6C1zbSbPxLF0QqURM+jROj3SOj3ZPiU g6+G0FSI43Pw71NQp4zjA8AmbkM5jPtU8O4GmuT3gT73h75q9CSMVFvwzSnoRyaMQyX4OsHvBBrT 6QD/NHBTwGoT2hhDU30HWhkIftsF/qmkLBIO+gHmFxnLGsSv5seyWGaxyGOHxSyLZSbDYrmx345z Rf5sFtMwfxaxWObfl/qrWCzDeFZCrGzg/7b8NhSyur/KW+pPqTrub/L6QKwOhutof4M30z/tDaBJ 3jF/nBfwtwG/wEunCV4VjfM2wpxc6jev6gVyDuSNbbSlnwk6j7F8I2yOk3YP8LfzOchsPwS5gNnK ALbDaCLZF2E3m7fc7grIfzV2F/l7wZ8lENNx4AcdfHCUz8cpXkuwubE/qmoqyE/ncxLA2vR7VG3h eYJhStVByEMjqeH352U2R8u8HD5P2Xwuripn8xJmzzo+R8u8cdDfHB6L8+gI2txvD37bBPknHmQ/ gJjf5ZtVG2CUh0I8HoPrCtqXJvBxHwZzZRPMhZH+WjoE5uwEqtIp4Pd1tICyzLLXW+nP89pD5MXV 5BiIoXk8B5o+z5k8d06G2N4LsV+Tawtpd8hnEPF+P79uVRLPuSxHz4Pczupv9pLAkgpU4I3wK//J T4+qMoi/AjaP/ULIUQbMzW3Ql0x/CPMD6DgtdQz0KyBPWfzfJsit4rPiPM97kAehdJavNbP8yeCj JX+FQb8pRwHqT6IrIK8U+3NgvmwD3eBpbwOMbchfB/GT5NeFsTvuz/LGwTiApVUDmU2sn7yvC7wy 7rv2EEvtYc6xf9WsNSy2alBBqzEP+jQF1iMYQ7DZgpzm/xVWwDq2nJaytvh6W3Otqf9b/rdXnfZD ObQfREMxXIthHp2iqu/INf0f5X02xr+X+2HcWf7n7f0/tgaw2K3Z2/B9zD+5JvA8+PfWBSZTszaA f/8nrQ98ri2hedDbIfBdASAP9BZBLLQA6HQm7PtG+1WgORb81g72HtvoVP889KcveKAfjNdpGKeT EDMbZWyzdYHtZ9hcrpk/K8DuvjzGtsAYLKPsX8MAlRBhK8C6dv4Yf7jXFtaBzVT3M/yDsIfa4vXn 49ED9pTnYC97xI/hfUuEfB/2F8C1OcgdBLC5vgz8EOJ5o72PxPysgDndic/pWMj3bH9bM4ej97YZ /hCO3+55/xmb/wB7We5GSf5i1Au0wCqLuoM157xKylZDtm+c4iG+nsK6yddJAb4n7+6v4mtjc1jr YM8J5c18LWdrXjd/tr8a1mK2pg2DNQz2kNCLFfCZBvxgttfke8glXhEK+GchQnPgXmaFOlGdiJA6 TZ2JFHWW+hSKUWers1GsukBdgC5W16rvorrqB+pu1FStVCtRS/Ub9RfUSv1V9VEHjPBFKAvXwXEo B8djHRXiy3FL1AuHcDvUBxu4A7oNd8Sd0BCchbPQUJyNc9DdOA/noRG4AHdH92EH90DjcAkuQQ/j UtwHTcJ98a3oMTwID0Iz8GA8GM3Ed+Kh6Ek8DN+HZuP78QNoAR6Dx6Bn8Hg8HpXhifgR9Cyegqeg 5/Hj+Am0FM/AM9CL+Ek8F5Xj+fg1tAqvwevRdvwGfgftxO/id9Fn+D38LdqPT+DvURX+Af+oIPwT rlIw9jFVLtEULUmprzXS2iottXaaqXTS2mthJVvL0XKVa7R8baBybZ2COgXKkNj9sfuVu+I+jftU GRo/Nn6scnf8ifgTyrAEJUFR7knACVgZnhCbEKvcmzA1YaoyIuGLhC+U+xJfS3xNGdnw24bfKvc3 692stzIq0DHQUXkgMC8wXxkdWBhYqIwJLA4sVsYG1gfWK+MCHwa2K+MDFYHdykN6E72Z8qh+jV6k TNV76Dco0/Seek9lut5b763M0Mfojyoz9Wf0JcpCfan+gvKcfk4/pzwfbBhsqCwNNgk2UV4IXha8 TFkWTAmmKC8GnaCjlAfvDA5RXgreHbxHeTk4NjhWWRlcE1yjvJqSnpKurEp5MmWh8lpaSVqJ8lZa aVqp8nZan7Q+ymYj08hR3jHyjQLlQ6PQKFQ+MoqMIqXC6GZ0Uz42XKOHssMoNfooe4xZxlPKZ8bT xtPKAWOu8Yxy0Cg3XlK+Mj429ihfG/uNz5UTxmHjK+WUccz4VjljfGecVM4aPxg/KD8bPxo/Kr8Y Pxm/KOeMXw1P8QxKkKoSldRRNXIxqa/WJUkkSb2UNCKN1ETShDRXG5AAuVxtTFqRFDVA2pA2apBc Sa5UWxCDXKVeTtJJuppCOpLOairJIlnqFSSb5KttSVcyUG1PBpE71evJXWSEWkpGkpFqPzKKzFdv IQtJmfowWUyWqI+SF8mL6tT059KfUx9PX5O+Rp3WoVmH5uoTHS7vcLk6o0O3Dt3UmR1e7vCy+mSG nWGrszo26thIfarjux3fVf/c8UjHI+rsTrd2ulV9utOmTpvUOZ0zO2eqczPjMuPUeZllmWXqfCvf KlAXWNdYReoiq7tVrJZZPawb1OetG60+6gvWzVY/9WXrLmus+oo1w5qhvm09aT2pbrbmWvPVd6yX rfXqVuuI9bW62/rG+k79xDplUfWAXWHvUE/au+3P1B/sz+2v1Z/tE/aPKrX/Yp/Hddw33DfwJe5m dzOOh7yQgDSkwfrHPuw5uIZbAXFVcDg/R6shcRQOqfhPpDFSlTh0EeqCYlESQGPnwWDFY+dtc1AM P2MWj0yUQY/CSliJEoELgIYegE6oLkBHmfQcagNIRC1QPFzbgkQqyLWD2ul0O9Tbj5rTsyAZg+rS 46gdWMXaLviv1gd6mH9KQL4Q5GJ+WwafdMFp2MY34BvxTXgAvg0PxHfgu/FIPBo/iMficXgCfgg/ hqfjmXgeXo234K34OD6FzwRHBx80zhk+UUgsSSCXkkTSkFxGWpJU0ppcQdqSdiSNdCCZJEwKyO3k PnI/WUCeJc+TpeQF63qrxLrJ6mt9ZR21Tlrfy1EqRextrxocQ5ZBqTWMUiyy0EiUiWaiDDQMrO7z N2UFxeLb8WT8KN5AGpD25GoyBOo6ULPVH/OclT//apW8K3l38hfJXyZ/lfx18jfJ3yafSD6ZfEpv HOwe7BG8IVgSvDFYmro99aPUitSPU3ek7kzdlbo7dU/qJ6l7jUHGYONO4y7jbmOGxd6e1YU1qrpV RR0Ptg4CpokGzH8mQFuT5EPJh5Mrk48kH00+lnw8+bvk7/VGQTt4fbBnsFewd7BP8CbjduMO40/G EGOoMd3aLmwtvpDObT0nyi0v8DMA6uvV5YuKL2xhZevJ/9Z+Z0/A6yKNeT4a1U/Ak/clHzDYU/K7 QabZf/ZYRI1Js78zJm6w+B+Ni7Ktagj3+0pR3l41jpWNXjwj1oVlJ6ZqMgObU+qPepGQW1HF3/Vg VCMHzBIGLrcZK0JuWRV/55rWXcrNrtrKwOSsTyKJwLcCvo4yr6ri7wFk6yTvN3YYu4wDxufGl8ZX srWZVYcYeGsV1seS7+YhBs7vizSsscbjb5zSbDbjUazHz4G5leLbAV4G7/tLotzd4++XrXnQahIw mG73utUAvsH6WOMa41rRFj9j4n4l6hZ4/KyDNUSUw94EHu8XoiycxMBXlAozo0aHkupNqQHToV2m Fdt/kbUMbw4D79ehSHPJW8Bb1bw6zcQ1Uai09+b9V4BFIe6KC/E1+FrYRTbVCrVrtOs0W3O167Ue WonWU+uj9dVu1m7R+mu3agP1xfoLwbvtn6P6tYCB9+sL/v6beS3V42+QcQHIXQbMRUqmt+i3AImL YJ9t4dzAa8FhNXNUCXll0WBzVGuo6VpQaxWltYyBadUG2Kcl39xbzMDHZiL5BvgI8PEgu/jfAbQT j6/CV+MOOILztALtWq27doNWqt+cVmyE7R+hfcL7285b8s+AeUe7RLtUa64la7cFVgfW6TfpNK2H 8Fohl1CsV2R/6norGHh/PjUjQq6Nx+emul7Gnu5trgGLPfWM+pNRLluJ8XYw8FY+M3Mk73i7GHjs PWFqkm/j7WXg8pPIt0Jrjrefa50p5Vp4hxmYXPJfyC4hF+8d43I7RVn1jvPyO6KcWF3Gak076Gfv JAe0Y5wxm8n2m3onGXj71GwbNfonGTj/I1kh2znqneZgdu8zu0j+LHBnq3nrQKSJjLRY73Q0+Gpw TP1W/U49KWyN8fjJFnVDjafRPh9JsFlepN2k9ZOaTgN7mn+j4ofJsdpx9BED43XFvK66dbTX51nN Pi/rn/PjONiIvKlukvVj/TgG3mPPjJPyp/wAB+vZ4UhA8jv8EAfjd0XqR9nXhoPxOyPxkl/lmxzM 7h1mJ8mv9ttzMPlPI0mSPwbcMcF/Fmkk7dT8dAbO7400kPIn/U4crP/IvDaqnUwO1i/fjBd+OeyH udfXSrlKYCo5q1quVSzk9vv8nEPyD1LuEDCHOKuqP6ina0YauMK/Ahvp79VTgV2B3VE2duNgdaeT cqFjl8/PkBi9RXmPKPcR5Sqfn+kxnpM+aOv3YODtzCAvyfYX+KUczMcfmx0lv93vxcH69nlERj9E Ry8O1o6n+lFj24eD+azKrFs7i/x+HIw/S1ZL/qDfn4PxF8zYKN/352BjopkJUe0P4GD27IhcInkf OL+aDxaRtVH2D+Rg7VxkNq7ZF6AK4P4eYF8Ad9Q74X76INxNV1ozoiJuEAdrTTVtyZf5gzmYVXsi l0b1bhgH690v5CfJL/KHc7B2sFkSZe1wDtaLa8mbUaMzgoO1c96MkfxmfzQH07s7UuulTf44Dib/ M/lR8tv8SRyM/5VURc2waRyMP0NWRtkznYNFxedmgeTX+rM42OhvNHpKfrS/iIPZczDSVPLD/TIO xu+PNBbRuYIzivWylNvoL+VgufY0eVvy+4HbX80nnyN/EfVn+fzkb7CZbI+XjXmy3gq/nIPZeVw9 EdXfVRysX8fN6yW/Fbit1XzyT2RVFL+ag/GnyfIoP2zkYO2cMHtEzfQtHIz/0ewt+XX+Ng7Gf2C2 F3Yv8rdzP7wa1e52DuavtZa4m0GzfbZKKgmTRHmxv4fXWyPKk/29vLxalPv4h3imWifKQ6vLCQmi PK66bJRKvYuBWcxZFb9qNo/y4yEOxn9tyl03Wu5XcjB+KNkt7TrC2tW6RbV7lAPk7AP2F5IvB668 mlffUt8W9af5fI3u9IwoT/D5SUL9waj2TnIwvUtNlgX4Pg6N8s/9Ddg+rkhrovUyLKOLaHEi5xWc HxUR5zhYizaRexyQPM/B9nL1tcvlSjvCr5KAlTZjZMb9GaPg2yvh24vB4qp/CAVdrDXQAnpfvV9a 77R+RsTq526QI8PPkKnfyDViIjDRgLXZWGA8w//+jNUYRvnp1g61q+9UYKZyVsUfmR1qfU5jOBj/ hhkS9QdQfio1sSY2BlF+F9NhgCgPry6rW2Q7o2g8B5ur8+2fpGcm0AQJ8AzugnO0G2UrSbyVKlEe UV3WVkkrmnKt9aK0NOVg1n5n3iB7G+B7kzOyXV5Wxf0nKqU6nwm5sl1ezmotyoNpKitnDK2ZGdXl znOl3pm0LQfTO4p8Lvk5wM0R/DvmlZLvT9txMP4Ls1C025carN1Gc+U4TqbmX4HdP3TVHPsH+xwS 9wNgbft/C+x+oLO+SH9GL9Of1Z/Tl+jP60v1c+ypdPCu4FBpE39mkm5L3/BysCaS+lF+v9qZZdHW UI4F/2f8HwF3qvan9j57v33Q/tw+ZB+2v5S6OvHxTJZ+GgbMMM6q+LB5jeRLaZiD8a+bLaRtfK/V gUTVz+Ngcj+YPavl6EZavc85JeqVVJfdmn3QKfH996JsUX7m1c2WUdsDmBqwqG2oP5IyN8q6Ug6m dY8ZlnwR7cXB+HY4jUkCn4Qc4P5IKChJn+CMdh52JjmTncecuW5zt5UbclPdK9xO7o3uOPdRd4o7 1X3CXSgjrQfUiwZEmpvsFriFrnwKA+PTi4PZn5DylOQLaR8OxjdIeTrKS30k2JOKh52lzrKa1YZz iv6AKGdS/ncD9rew69wJ5XugJ33/F/8fQEXNnCHOEITc+i5kZvcy9zIU5+quji5xW7gtUbyb4qag S93WbhuU6LZ1M1CS29ntjFq4YTeMLncttwtq6ea6eSjF7ep2Ra3da9wbUBu31C1FHdzebm+U4d7k jkEd3fHueNTTnehORL3cSe5k1Nt9zH0M9XUfd6ehm93p7nx0i7vIXYTucp91n0VD3efcJehukRM2 Uf6sjP+1EYvH9OqyA3lWYb8JkA196fc/EgrKVnfgeHwpTsKNcGPcMbBWH6c/pE/SJ+uPBu9JeTLl zylzUualzE/r5Qx17naGOfc4w517nRHOfc5I535nlPOgM86Z4DzkTHQecR51pjhTncedac4TznRn hjPTedKZ5Tzl/NmZ7TztzHMWOs84Zc6zznPOEucF50Wn5t61UozPcZkv+Pl7zZRZyAHG4ayqfpSy QPJDgRtazeOdZmdRv4Dyv1sJ1OwBulP+9wzBFFlvBDAjOKvi+8h+mdVy6CAJltXG6xOdu2Qe7QZs NNg7vPo4MWVWymyQ6QEyDWA9GfyHQUENnAecMc54Z44z31nkNnMDbtDt6Ga6JW5Pd6w7wX3YXeA+ 4y4W/cyg/Fl7BpK7YIsO/RvALtjNcnPcfPchtywqzw/lYB75xnRgZswAvj+saUP/F/8NoKD+6gfq x7gJboqb48twAOs4yM6G4FY4hFNxG9wWG5hgE/8F/4x/wefwr/g8voA9dv5CQ5qiqZqmXaTFaHW0 WO1ira5WTwtpKVqq1lq7QrtSS9OIdpXWXkvXOmgdtc5aphbWsrWI1kXL0fIDc9k5isCCwMLAosAz gbLAs4HFgTcDm/Rb9P76AP02faQ+Ktgy2Cp4R3Bw8E/Be4MjUhamFaZdk3ZtWre06+yj9nH7hLvR fct9R8bbIOjTIBFva0xdzvxhfOYnyDlnARMNmHPOWGeBs9h5XtQprK4TdGTbmXQ4B7Qd2JhWBEwe 8PUh74/4t6Gg+s5a53VnvbPRedvZ7Gxx3nM+cfY6+5wDzhnnJ+cvsgcjeA86yZziAFMDtp/MCKxJ 6yNnaCYd+Tdg96kt8JVWd/uYu1m063Be0eLY83AoF4NVo/4XfwBUGNmXnDUIOeucdaies8F5A8U5 bzpvoXjnHecddKnzrrMVJTrbnD0oyfnU+RS1cD5z9qPLnYPOcdTK+c75EbV3zjpnUWfnZ+cXlOn8 6l6Mwm49Nx6x5yMdYbTiUB5o+legIPbrKo313noffaB+e1AN4jTHyDKyDfleBA0BuSFcVsW7zSzJ p9PRHMA7J9y6ci7lARcNmEt6r5R09013k5wjOXTMvw2YI+ou3Awn4xR8Ba7SsNZOu1rL0HK1PP1W +4j9tbSwGKSLeQ0VDyOfSL4fcP0Efw/ZK2I/TKvfGWfKezZeVs/KOcfffWY0lHOuiE6UYHNuf3C4 mRu1a5jEwbSsN1sCEwQ+BtqZ8rtQUAzuhLNwOK00raf9i2ynBL4r4d+reJGpRN1LTeFg/EhyQPJx dCoH41eZl0nrp/LevC9zgkGn/Q1YTmiP04NaWknajbLFDDqdg7V4N9kj+e7AdRf84+QHoakdncnv dd+IumudycHkvjTFu3fUmM7iFlVKuXZ0HgeTW2bWlx5rD9zvATymVuAYY6bxpLHb2CPHJR2+qwEb l6/iKszaZ4OFwBYKLbvMTMkn0TIOxpeZdSTfArgWgn/JbCCsD3FGUWdJuQBdzMHkPjSvlrslfsJA fSpqPBdzMLlHSM1utAXlbzv1MTVy9AxdxsDkrD6Ri2X9tsC1rebxW2abqPm4jIPxb5tXSD6VlnMw vhd5Q87TDOCiwfaZvclG64aIGjUiyzlY3ffNq6KeiqzgYPwY8qXk29CVHOy59V7zoiibV3Iw+YNm 7VNQAzhD8C+ate8xugHXTfA3kJrnzamU/0Wu+mtU/dUczEelkVp9CXQtB6v/vXmjjIzGwNWAvRk+ b8w1Fkd5cC0Hq/UAOSS06pT/vX+gY5RHN3IwuXIzMcpbGzkY/61ZLLVawNWAaf0lUBHYIVpvSflf 9dapffcSAibEWRUvNi8Wd5fn6Waena6Tcp3oFg4mV0Jel7MlTLf+LmC22BX2x/YOe6e9x94r4+w4 /YCBt7POvFy2kwHc74HlqfHsLBw5Qr4mR6U9jel2DtbOK2YTyevA6YJ/2Wwo+Tzg8gTfl2yWvEYr OBh/2qx9dpTEz+NX80vMesJ/BmcUW765pD7dxcDl3jXTovg9DJw/YOZFxeweDnbX93NAnr1BJt3L weSHk08ln0j3cTB+rRmMsm8fB+NfMwNR/dzHwfj+ZGtU9tzHwfhbyXtinM9Sfq7Aqp0jzfmJxv08 xm+K1I2y4yAHq3/KrH2n0gK4FoKfSdjfvbJfRVXpIVr9PuVNM1XKxgIXW81bvSOxwqeJnFFix4py DOXvV9R3ZUQnAlMDFtEPG65xvYycOHr0d8Ei5zH8HvneJNbN/FciWOsJ/BvF6BHlyaMczNo/k3OS bwlcS8HfSNZFrXjHOBi/wZTnYlBT4JoKfoUp38vTwxDvAM7vNS3JnwT+pOCXm/L9Pj0F/CnBHzNd 2T47X1pX8H3Ipqj+H/9dsPVqIr7fKCYHrTnWXOltfgIksFO2GwYmLNodR8RZLNDE30oZN0StOCc5 mNzT5Ly0dz9YC+D8J2a25H+mpxk4v9KsfVvaGLjG1bx1fQTJiDlDz3DZAWRbVJ/PcDB+tZkcNWZn OBg/j3hS53n+N2PV77m2mWbN6gMz8Xw0+Orj6k3Iq6Yq+qtyVlHlqTEYhSoG3tYZs0+U/VUcjD9k dpXj0AK43wOMQ2C9fqPeU6/SPV2eJaD7wBIA90PPSO1bb8gdHIzvFamDqn+RmPnzZ65zOjlT4zNU c7p6IPmg1jcCwOsleu1MbQOrMAOTv5fsqx1Xfu65+o3ZLCJPl9GzMFcBnH+QHJZ8dfTz8zB4k9m6 NhOgeA7GTyPyXBjk3AQGxgfHmDfXxj/EIoDLjya1b00bg/UMjO9HtkT1q/obxs8ntX70YdYBOL+A UCkfI3rG+MGkonb+Ahcn+D+R2gwcD1y84K8j8q09XQfrCYDzW02jNr6B/1nw15PXotpvwcH42aR2 98B+J7W54EvJ+qh+teRg/AjyWZR/Qgyc326mS/kEGEUGxo8lcj8LObgtA+cfJd/J2N8Eq1YUWOxr bbQszbK/r83MwMfy71Q8hZyMGguTg/F3kh1Sl1ifOb/RlM8gof1ODHysR5s3Sb5671DNjzXlmS3Y ZYQZOP+g2Vfyh4A/VM1bJREs+UrY1QC43tvJh1ExlsPA+cnkRJTePAbObzHb1a76wGmCv4N8FNWv AgbO30bej/JtIQPnB5Htkt8IdxoAbmffiHyvC9mwGwOXX2jK876QmboxcP4W8q7kK2BtruC/kKri m8hbUTHcnYPxU8mpqPEq5mD8ELIzKmZKGDh/M5FPpiC3lTBw/inyi1j996HqZ9RPR/m3HwPvz40R eSqRHoZ7cgCvP4dcEPXXodF8N3S2NqehiQxcrifZENW/6QyMtz+zfxX1lyN+74YzZazuQguiwWO1 rb3L/sT+Rra1EpUzcBt7RMSZabgT4b+XhFvLtqajimjwthK1Zmk32+LsMp2D2L5N0eJlndloTzR4 nRZay8Dr7npRZwWq5HUMUZ6A+GkOW44NXYrOMvC+fmV/J+X470Rp4iwbtM7PQNjitCMdpfD30u7b NfJKJu+PvMugumIxsHZVGvgIKco8/lvB7+M0vACvwjvxgZiEmEYxrfHOmOw6O2PTYiOxRbF31l1b 95N6xfXurfdAvcfrza5XVq+8XjmTqbcaatV+dtZ+6hXHRlgNzvJv6m2qdzKublzruLS4qy/Zfcln l5yJS4tPqH9F/dL6fesPqv/Qpd0u7ZtIEosSSxMHJ96bODbx0cRHmUziE/VO1n54fflJJPV5HeDT GICZk7gocUlieeLKxLWJb/PrysQPE3cmHkj8MvEbwIeJJ+FzJvFcot9Aa1C3QUKDRg2C/JrQ4IoG pEHnBpEGBYArGnSDTzFeENMafABegN7fG5vGyqw34JmimATo48lLzoD90AOwvKh+KSuDjdxK6Nmg uNaX7K7fF7zZmsnzD3gXSml119YrjkuD2lyGf8AnUC69tFsi+32i92HMWkHuToU8fQVKg8x6FWqP rkbpqANkzU6oM8pEWZDf8tH1qAfqyf9fANPRDPQ0WopeQMvQixDfL6E16HW0Dq1HG9AbaDPE3Vfo SKs5rRa0Wt3qjVYbW/0UqhOKDV0cqhuKC10SujSUGGoYahRqHGoSahpqFrosFAglh/RQMNQ61CGU EcoKdQ25oXtCw0MPhKaEHgtNDT0emhZ6IjQ9NCc0LzQ/tCC0MLQotCT0bmhr6L3QZ6HPQ2dDF0JV RhVRiEbqkHiSQAIkk+SSIuKQYtKX3E1GktFkHHmS/JnMy1qaVZ71ctYrWWuyXs96N+urrBNZP2Zd yPLCseEmYT3cMpwa7hwOh3PCo8NjwmPD48LjwxPCD4WnhZ8ITw/PCs8OPx2eGy4Pv5ydnt0hOyO7 Y3an7M7Zmdm52XnZ+dkF2V2zr8nuln1dtp3dN/vm7P72APt2+w57mH2PPdy+zx5p328/YI+3J9jz 7UV2mb3UXma/aJfbL9sr7FfsV+3X7XWw8raCzJZBdViJJqHOdAnKhHIWTYKVphItBbwAWAZ4EVAO eAmwGb7/CnCEVraaA1hNK8OjAeOpHp4A14cATwDmUt2+AzCeLrEngPxFsOepRFcDOkHG6Pkf1J0J mBTVuf7P7DPdszPsy2DbBQGROUwDslQ1MwoygtrMCIg4rnHBJC6jXvegUcfrCm5B0xpAbFAMlkuM DLiBBQhoJ15Rihj1WsZoYjqLSDRxof6/c7oZBkQQJzz5X+p565w6dZavvvc9X51qunqIiXeQL+Ao xdhq3BR9p+g7RRuPNuqeO5ozyqrbRNn2VnpoERWkYXoYQOlgUJvpdTz2H0n5RNBAfhLpFD8uGkET x8eRTiWdRjqdc8cTfWeQP4G74UxwIrG7mfQk0tvpT1l3F/XngXvAEto8BB4GS8Ej4BdgGfWWgzaw AqwEzwCHNmvAWrAOvATWgw202Uj6MngFJMEm7Hid9A2wGbhgC3iT8t+Bt8Db4B3sexf8gT4+9NvC 2Bf+qR8PY2MYG+HDDt+vObHD2BB+FqyifDV4EWBTGDvC2BHeQLuN4GXwG45f9RPWxX7cugRcCi4D l4MrwJW+bV3H+RtIbwQ3+UnrZr/NuhXM4Rh/WfjLmgfi1L+Puj+nfD5YQH4h6QNgEeceBAnKFpMu AQ/RF/qy0Jf1GHUeB78ET/nx2LngPD8ZOx89tIALwUXgWt+OYU/setJWgF2xW6h7K7gNzPGd2Fz9 ycxodJbbrrwdqlNaTFES53yEUsV2nIhTtr0JfTWhL0d/YnAkmAgawCT0MoWajaCJ4+NIp5JOI51O OkPrxUUvLnpx0YuDXhz04qAXB7046MVBFy66cNGFiy5cdOGiCxdduOjCRRcuunDRhYsuPHThogsX XbjowkUXLrrw0IWHLjx04aEHFy24aMFDCy5acNGCgw4c+Hfh34V/F/5d+Hfh34V/D/49+Pfg34V/ F/49+Pfg34N/D/49+Ffz24F/F/5d+Hfh3IFnD55deHbh2YVnF55deHbh2YNnD55dePbgWXHrwm0S bl249eBW8ejCowuPSXhMwmMSHj149ODRY52djlCejgNjMrHA3Gt04p7wtci0IyJ5RCQvE108dDEc FUwFd4B7MvEmhR5SrCTLiYtKM8ehkKn+IEobiBENWj/3cHynKPMtal0pKkj7EjX6gT1FppH0l45O CdTUlolOcXEM56ZQvxGkI5SdiVC2jlAzdJxMEZ1SjOwRnVJEJ/cAR6fEHqKT/Q3RyUaFNiq0UaFN dEoRnVLCA+kI5WYilP0dI5SNQm0UaneIUDYKtVGojUJtFGqjUFtHqNl+yroadIxUN6O2W7Vid49S diZKJVBvIhOl2lBvG+q1Ua+diVI26rXbI9Sj9P8Y5Y8TuZ7kOB2pbNRs7yFKJTJRKo6646g7jrpt 1G2jbpsolSJKpbgHluPNtNYcFNAG26mMztRTtopeAzro6fhMJJsJmjvo4Zu4foc678KF8nvG50Rw bxd/MJfUNRJtPX0dc5iVc2mn5kFVxrYWbDuLkRPYF8/Yp75bc4KOsWXsK8DpxMmrfPXZwunUugqo nEtOfb5SxkqjAmTT11zap+ulWwSNXv4go48/12A2GdV+tZEAa/3q6Gh/UDTmD4otBMv9tlgbc7Mg /InvGN2p2cdvNQ7zXcP0k8bFHF/BSAWUevSToh+Hfhz6cWiboi33Bc6m9L5NnB3eun0ufdnhbdvn GgNpPwgMpsUhpIf6thHx48ZwP2GM4Hgk+cNIR5GOZrwxYCx5kzKLNlFGHUe+Dnsu17a0GUvAQ+Bh sBQ8An4BloFHgQ0eA4+DpxmHKzTawAqwEjwDnmOM58ELYBVYTZkD1jM+dw1jE/k3KN9M6vptAwTI AtkgBxSAQlDkxwcEQNCPR4cC6Seiw0hrAdcZ5Z4Y5VqiUT8ZHQfqQL3vRg8HrKaijZw7DqDS6DQw 3Xeix4MZ9IMyojMpQx3RZnASbc/g+Ezfjs4ifw76Z07FFhPlubYY1xZ7hnnwLHgOMP9jDnXWAMXW OthRHDkiH34ScJ3C90l8HYfnFL5NtqughXoNnPU4a3O2hbOeOBJum+C1CU5TcJqC0xScunDqwakH pyk4dWmZglMPLj14U32n4CcFPyn4ScFPCn5S8OPBTwp+UvCTgp8U/KTgx4MfD348+PHgwoOLFFyk 4CEFDyl4SMFDCh5S8ODBgwcPHjx48ODBgwcPHjx48ODhbw9fp/B1Cl+n8HUKX6fwtYevPXydwtce vvbwcwo/u1F1f0sAbMO/Kfzr4l8X/7r418O/Hv719FxTM6eNOZJkjiSYIwnmSIK51sZca2OutTFf ksyXhGbBE9l6TqEOzUc1fovgt0GUNKP7Jnw2SFwY3uoP4mxLeBtnBFxkgQIYGwhPg8BgvH0I6aGU cdUwYcOEDRMOPSbo0YGJBLPLhY0EvXvMLC8zszxmlmLIYTTHuIk+bgas/QzWfgZrP2MOYO3FjHOY cQ4zzmHGOcw4B0YdGHVg1IFRB0YdGLVh1IFRB0YdGHVg1IHRBIwmYDQBowlmnMeM85hxLjPOY8Y5 sJyAZQeWHWML425jZgnfgXEHxh0Yd2DcgXEHxhMwnoDxBIzbMG7DeALGEzCegPFEdISefQ6zz2X2 ucw8j5nnRcdTPoXzjZzjHoEiHBThoAgXRbgowkYRNopwUEQCRSRQhIMi4tGzaT9LKyOBMmyU4aAM B2XEUUYcZcRRho0yEigjwczzmHmsjvScG4lCVGxVMXW4LhmIqgehmTSPSXhLts9Ki/PjiN+Xc8zs hIcUPKTgIQUPKXhIwYOaWUl4SMJDEh6S8JCEgyQcJOEgCQdJOEji87n4fC6+TuHnJH5O4l81o5L4 N4l/k/g3iX+T+C2Ff1L4J4l/kvgn2e6fmToSqaiT5NqTXGOCa5yrdVzFNbZwBXO5ggQqs7F8rsjJ 3FES+spzUbWLol1jAiWnMCOyybWQa9G5JDnuZNS6klpXMl8OU/e99tpZ8lj1XXkZ1ftj1XdSyLfq PPXIN7Tn4pm6jaw7s1Ve59Rxg97beu/ofavex0WWeZpqY/5B709T5eRbdZ5e1Z7jBp1rJqdafKn6 18cqp44b9N7We0fvW/We2lm1+nO1u7NPzr4x+7XsLTnZOcU503NOzZlNLjvnxpznc7KzX+Nodu7R 4Dy2y/R+Ue6qvOyc6Xmj8mbmvZL3Xv7U/Jn517PNyV9Dfio5tf812/U6vyb/9cwZ8gWB/OsLhhSc XrCtYFv+1ILtBdsLCwv7FZ5aOK9wWeHKdMuCbYXrCz8qqio6ueiMojlF9xa9V5QKBMjNCVQFJpGe HFD/toDPA58Hc/V+aPDo4Jyi94JrikcWH138fPGa4r+y/bNkKPnnybEvGVUySpc+XzK0JJo5o/IX F/+1ZF7JK6Unl55c/HzpLLYLS28s3VgmyrqVhdMtS9V7EHfXfFHzpRQyS+bIXJknC2ShDMoS/amR +oWaLrKr7Cv769+oqdG/FZP+JGmyPFZOkY2ySU6VM+SJ8iR5sjxFniZPl2fKs+TZcpY8R/5QnivP k+fLC2SLvFBeJP9LXiIvlZfpz56ul63yBvnf8kY5N/05lLxf/f6SfFAm5GLzNHOxucRcaj5iLjMf NW3zMfNx80nzKf0ZVZu5wlxpPmuuMV8yf23+xtxsvmn+LvO51VbzC/NL8yvTt3KsPKvAKrSKrIAV tEqsUqvMKrcqrC5WV6ub1d3qYfW0elm9rb5WP6va6q8/5xpiHWoNtWosaR2W+cxrvDXBarAmW0db x4iArPRt2QX0Bn1AX9AP1DAbJGCFIseizMqaz/0WmQvyQDmoAJXMkS6gB/meoDfoA/qCfqDGb6WX VnpppZdmOVl9k1TPv0D2bL85+2q/uQatyyGMyHpPEp3lSI7HgQYwSa1XqR9gNrZoG+LYYGODjQ1x bIhjQxwb4tgQx4Y4NsSxIY4NcWyI72ZDHBvSs71VR4MC7GjFDmVDKza0YkN6/B1jN+v4UMLYDYzZ wJgNjNnCmC2M2cCYDYwZYMwAYwYYM8A4LYzTIA6m9wC9B2r+4cdrPgP/Al8AZnvNV6R+hyvKJx8g DYIq0BX0oqyatD8YwkiHgqGgIz8jOTeGlPsAlrfIwzkeDyZwPJG0AUzCf4W7+LkGcCekB5tWqobd HgXjIqB9vcPH3+Rb5UvlwQausYHe4/Qep/e0HWrM8l36+TpXzfTXTH/N9Ne8i007uCrZrx52tCrc zZo41sTl1eAOcCc1+mTP3u5lX73dkzHfkU2Ucn+X02CelbVkZS1PAKdyfDHp1X5EXkOdn4BrwU2U 3QxuAXdw7k5wF/m7wTza3EN6L7ifugtIFxHX8/CUg6ec3e3wWyht+ZZ2NO9mRxw74tihemymx+Z9 2pG+f6kZGMlW19WEt9X415D+BFwL7uD4TnC/VsWxlDRyhyuhTTVtqmnTom1UdqVtaqFtC21b2u1Q 49+v7tOZe2kgc88s2TH39cjTwKnagvhuFmj/0IutrShs52ua9scuXqSWo/rN1NiffsO0StIqif/j +rqOI52GdWn/x/F/XJ5M7VN0j83yNNLTwQWgBVzM+R+TztajNezii135aWDkhgw/yoLmDD9x5Sf4 iWt+lL9atb9VrkU2bm/T2kn7rKN2yttLlXZ26ObrmmmlRSstWtt1oTSxIO2zjPrSPtvh2dbdfJZu PU8rydbWpLXT0ZocjlRdmyNbH+08V2huYiX0OuBZ2fwAfOzHrYFgNBijIo65wrfNlYA1semANWAt 2ExtF7DON99T9yIz4beYjwIbLAdtYAXrqZXgBfKrwIvAAWvAWrDZb6WXVnpppZdmc6u6F+m1Wvu9 yFzCuU2M+Dp4A7zN8Qfgb+BjdT9g1dZCm4C2IY4NNjbY2BDHhjg2xLEhjg1xbIhjQxwb4tgQx4b4 bjbEsSG9RmzVdrTfi7ChFRtasSE9/o6x43qdWcLYDYzZwJgNjNnCmC2M2cCYDYwZYMwAYwYYM8A4 LYzT4V5kojPzAfAgWAyWcAUPdbiaJ8CT4BnwLFjNuXWkL4FNjPA6eAN05OVtznmkv9fstph/4vjP IMXxX0n/Bj6m/BOOt2X0sNPPm4ELtoAPdE27/XqVMpSvd/j4m3y7teO9aDe1taixRfku/Xydq2b6 a6a/Zvpr3sWmHVyV7FcPO1q132nMz33H5K5vbvcdS/itFk+rFk+rVh8w0I9Y32MuDAKDwTDKakEE jObcGDCWPE+pFqsXaxxpHeAJ1ZpIOgkcC2Jopf1Os8sMa7/T7MOO5t3siGNHHDtUT8301Pyt7Ug/ ybTfaRjTpv8W+rfp36Z/mz5b6LOF9mnObdp0uNPQpkXbmLarhXYttGtpt0XZMJ7jWGaOqKeqQObp qf1Oo0cWevT4bqNr39CLrSyglw53Glrs4kFqqevqcKfZr37b7zT4P66uC//Had2c8X/cKqRmEWAV aLEKtHqAnoA1l2WQDtAjNezih135aWDUhgw/avTmDD9x7aOJpGl+4ljUnIk9X2ZyLeaXHe80u2in /U6jtbNDNzs100rNVmq2tutCaWJiBy2032kyPku32tVn6R6iWk229nT7nWYXa3I4UvVtjmx9tPNc dv4W9cRcGAgsEn1Etfi3/PNTvud77Ufe3uruobXnq/8/3P9RvZ2j7uzDT33L1nHfBqz+/eq0/X6b Lt8PSzpasD/XzXipPduZPvNtrmFHPWX7tx1Xt+voNXX9FqntR+hnkG+BQfijSqfq1+AHUR7JbNbu V5zpxfYdarWxb2NroVVbxpdtvvprOOkt9TV/JfyEtuEsWp/lXwnUXw7SqT7foP6GRmab+7Xr+E6a 2aWHtk61/pY6+4bWyf9c691nvWJhP8Z2OjP0f7R157y2e28t+1W7U1r9N1se71TrK/ezfjoSJNPb jvyudmQit44O+u8bxPXfxWB9+a2HyRL3iLAY2P4NvvS398bob+6NF0eKBnGUmCymiEbRJKaJ6WKG mCma27/Ld5eYt5dv8zlijVgr1omXxHqxQWwUL4tXRFJsEq+LN8Rm4Yot4k3xO/GWeFu8I95Nf/dP /CF8e/iu8E/D88L3dPge4Krw6vCLYSf8Unh9eEN4Y/jl8G/Cr1oXW5dYl1qXWZdbV+z2nbvrrBus G3f75l3cus/6uTXfWmAtsh60EtZia4n6Np71mPWE9Uvrqcz37c7dwzfuro1dF7sldmvsttic2FyR zbWH2XrjNfWbU4OFejNwKFsOHqxhlVDLlocnR4h8vDlSFODRw0QhXh0jivCsKQJ41xJBPDxeFOPl I0UJnm4QpXj7KFGOxyeLCrw+RVTi+UbRBe83iSoYmCa6wsJ00U3/nnl32JgpesBIs+gJK2eIXlh3 Hvu5bLkwdDuW3MVWBlPz6GEJLPWGJ/UG4HJYyoOn1djjwFExLG3Ako2wVApPmxj3dViqgqe3Gesd tp4w9S57T6jv+r3HFoC133Mtf2DrBnu3i3IYvEsUw+JPRXeYnCdKYfMeUQWj94resHq/yIPZp8jD LvlV4VXUXx12qAnH1NwQfpm2sCzK4PliUQnXl4gu8H2F6A7bV4reMP5jkatYFwXwfo0oVNyLIOxf J4pRwA2iGyq4kf1t1m0iHzXModVcC8+girtEFsqYJ/JQxz2c/Zn1M3qIW3HRFaXcRw+oRZSglwWi VGmG0RNWQlShnMXUWWItwZJHrEdENip6FBsesx6j/hPWE6ICRf2ScZ+ynhLdUdYZIgt1nS1yUdg5 ohCVnSu6oLSLRDZKu0TkKLVx9orYFSIfzV0jitDdT0QA7V0rStDfdaIUDd5Cq1tjt4quaPE2ep4T myN6xOaiSvXu0YWwXIZiKtgqRV/RD/6UUoNigBjQrlSlzhytyxKty1ytyzyty3ytyCqtyFIxka1M 67Jc67KbmMTWQxzD1lOrs5dWZ2+tzgqtzj5anX3F8WwFWqPFWqOFWqNF4iS2fuJ0NvV7UhehqqvY AlqpOVqpXbVSK7RSg2KZWJZRao5War5WapVWaqlWarlWam+t1Aqt1GKt1CKt1CKt1BKt1Hyt0b7i Q7Z+WqndwneE70RnSq9VWq/FWq/lWq8VWq9Brdccrdeg1muO1muV1mu51muF1mux1mtXrddeWq+9 tV6LtV6DWqklWqm5WqNVWqN9tUb7WjdZN6Ghm62bRT/rVutW9kqvQet2646MUnO0RnO1RvtojVZp jZZqjZZbC60HmC1Kqb21Uiu0UvtopRZbD1kP0f9Saym97VRtiVZtqfW49bjoYT1pPSl6au321dot 1nrN1XrtHTsvdp4oiJ0fOx81p7WrlJqnlZqvlVqqlVoeuz52A7pUeu2t9dpH67VY67VQ67WIJ6qF 6omqYEvgKlTTb//ujt9412zV+0GsgdVK3PHVb5qpY9Zuen2u7pSR9rW5pc62t3XS99T0tvMeq+7E anWuj3auzFN7GLeVO3CrWnOzRuce7M9VK3I/kL73+020Ta/K4zvXjul+vttKRVuW3L91aHtbZZ+z v2uaXZ+yGNvV6xP1VzXn6rN7uY7MtUe0n6ozqxb1/NmGPzQP+1qndup6vX3Ztz9tfWd/V6Y7dcU6 7TtdQXtPnWjdmSeBTlld/d376NT1duJps1PjdqZtp54zMn3s11NWpk1ntPFveNL6+mcV+9G29RvK 2/TWrGdd8445mHmq2ruPskTcKNDvHu148yj91lFf/cbRQGOQcYgxxBhqDDMixnBjhDHKGG2MNSxj nH4D6fK9voG0xHjIeNhYajxi/MJYZjxq2MZjxuPG08Zyo81YYaw0njGeM543XjBWGasNJ/O+0nrj VWOT8Yax2XB3vrvEwi5rQPaAnAEFAwoHFA0IDAhGh0ZldFi0NhqJDt/tTSMzGo2O28P7RlOijdHj olOj06IzoidEZ0ZPjDan30GKnhE9Kzorek7mnaPEnt46iq2IrYy9EHsx5sTWxNbG1rHCvAC/FYje +K5I5OK/gMjDhyUiHz9WiAJ8WSkK8WdXUYRPe4gAfu2pvsFo9BJZ+LevyMbH1SIHP/cXxfh6oCjB 34NEKT4/RJTh9yGiHN8PFRX4f5iohIOI6AIPw0UVXIwQXeFjlOgGJ6NFd3gZK3rAjSV6ws840QuO LsSGi4yLsOFy43Lq32TwdABTPB3A1r3YHDfmczZhJLBkifELbFhmLMOGR43HseFp42nGWm48Q9vn jFX0v9pYTc+O4bBfY6zhitYaa2m7zljHVaw31mPJq8arWL7J2ERvbxhv0GqzsZneXMOlny3GFmx4 y3iLcbcZ28jDsShSy3dRAtM5okwxLbrCdVD0gOuhogt8S1EF58MpGREdIXrD+khRqJgXQbgfLbIU /6IYBZiiRKlAdEcHR4gAWhhP/QnRCdRHEyIXVRwl8lDG0aIIdRxDnVg0Rg9TolNEN5TSSA+oRZSi l2miTGmG0WdGZ4quKOdE6jRHm7Hk5OjJ9HZK9BSRj5JOx5IzomfQ6qzoWaICVc3ChnOi57BOvC92 H6vI+bH5rA0XxhayukzEeM5CbUtYez4ce4TV5aMxnrCU6qjzROwJnoyWx5azAm2LtfH0tCK2grXn ythKUYYWXxCV6PFFenBijuiGLtcwytrYWtEztg6F9lLP8OGt4a2iS3hbeBu6EUYWXCrV5mnVZmm9 ZmuN5mh1Vmp15mp15mt1FmhdlmtdFhqDjcFwptQZ0OrsahxqHArf0pBwrNTZU6uzl1ZnUKuzt1Zn H2OMMQZ9KI1WaI2WaI2WGnVGnehrTDAmoI9pBs/8xinGKeSVanO0aoNatXlatVlarzlarwVar+Va r4VarwGt115ar0Gt1wqt11Kt11Kt10qt1wKt1D7GRmMjoyu9djX+x3iN0ZVqy7VqK7RqA1q1Qa3a PK3aHK3aPK3aHK3acq3agFZtUKu2Qqu2p1ZtL63aCq3aPK3XSq3XXK3Ucq3UPtG6aB3arY8eLvpq veZppWZpjeZodeZqdfbW6izX6izU6gxEp0ePR8dKo720RoNao721RiuiJ0VPomel1Cyt1Gyt1Eqt 1MLomdEz0ejZ0bNRs9JrH63XCq3RXK3RXrHFscU81yilZmmlZmtd5mtdFmhdFmpdBmLPxJ7jiV3p spfWZW+tywqtyxKty1KRXTlDPRN1mdH1fTGQ5/H/4D/1vxP/oZG/4V5+QMes1p+fpp8K1VMKz436 Wa5F/3/Xt/88dX/HbdB7Wz852mrlp1YlB3LEzLjp561WnpPTI9vkHP0JsnOgx06PnEntf8dq91uM F898Pp7e0nk7c70H8Ir3tQ4/UFevnrL3er5ZXfcBGDewj/OtB8bb/j7+R/5A6brj50d7PH+AYtn2 T/c17n8meh+o692nnlvZmnUEa905xzs/7vZ9PMf7ge2eH+DuoT7RUveMVh1VOu2Ffdmur7NFfX73 773efVnOmK36ews74qdeJaQ/Ee3MuNvP2sf5T7kvN+j7ckRfeUvGggMSxb7dv/+LK6R9xcm9tu3E Cim9zunU2N9phbSv+LzP9v/HVkidWU90ZoX0XT5v/JZW7fWK9nVf6MS4e10h7Wud04lx97pC6sz8 3ce4e9V1Z+fRXsbdayzb1zqnM+P+/7hCOoB63usKaV/rnE6Mu9cV0gF88trrCunAfcaw9xXSvtY5 3/3fXldIWWJ2zT9qPpNC5si8zHurO95Z7SF7Zd5aHaLfWh0t6+QEOVnG5HFyqjxev7F6ijz1G95Y Tb+verF+Y/Uyebm8osP7qnfLBe3vqS4wHzCXmstMO/N+6o53U18wV2feTt2k30591/zQTJlbzc/N 7aZvZet3U7/pzdT0e6l99Jup/a2DrFCH91JNa+KO91Et9Vdef8T1/0Nk1XxW85nIwg9C5OOLHKH8 kSdy8UmhyMMvQUpKZAn7ClnBvlJWUrOL7MLZrrIr+x6yh8jGZ73op7/sTwm+EwV4bwjleJD8aDma fJ2sYz9BTqDmZDmZUWIyJgrx63Hsp8qpogj/Hk/+RHmiqMDPJ4lKfH2K6IK/T6Ucn4sAXj+Ts3he BJXvRTHe/yE1z5Xnsj9Pnkc/58vzadUiW9jDiCiBk4vp4b/kf3H2EnkJ5ZfJy6gPR6JUsSTK4OkG zsKVKIetu6m/QC5gv1AupPxB+SD7hEww4mK5WJTB4gJRBZMPsF9qLhU9YXSZ6AartugOs4+LHrD7 JCVPmU+xbzPb2K8wV1BzpbmSs8+az7J/wXxBdIX51fTzkvkSJShA9EIDmyhHB+TfNd8l/6H5IfuU maLmVnMro3xufi56o47t7H3TF31QSbbojVLyRBi1FAgDxRSJAUo1oi+6KaEc7Yh+Sj2iGv10oU5X qyv7blY3euhudad+T6snezQl+qOqPkK989yXs/2sfpT3t/pTH5WJg5TORAilDeUsahMHozeT+hOt iewbrAbKJ1uT2R9tHc2Ix1jHUD+GEtVfZH0/e3b21Wjxk5ptolzrMrfm05pPRbFWZ27NP2v+KYI1 /6r5F/nPaz4X2TVf1HxB/suaL0VRzVc1X5HfXrOd+n6Nj6qY1SgjFx0XyHyZL9RvGRbCcQA1l8hi 1ByUpbJM6DfVUSTzHo6rUHOJ7Ca7c7aH7JnRdK7sLfuh+2qUXSIPkgdxNiRDtD1YHowOwjJMiSEN 8gPQfakcJA9BSUPkUGZCjRzGbKllDpTKEXIE5SPlSDR0mDyM/Cg5ilZqbpTJMXIMY42VY7HElCZ5 Ji2txslxKF7NnDJZL+spOVwejiVHyCMYd7wcT17NqFx5pDySkolyIiUNsoFRjpJH0WqSnEQPar5l y6PlMaK3nnVVcoqcIvrJJtnETFAzsErPwD5ympzGrJgup4ueejZWyRlyhugrT5AnkJ/JzOwrm5mZ XdV7+6K7npmVemZ2l2cwM/vomdlDz8yu8gfMzL7yR8zMHio+cvYC5mR3PSd76DlZpWIl5ZcyG3vo 2dhLXimvIv9jOZuaV8urme3XyGux8zpmaS9m6Y1YfpO8RXSTt8o5jDJXzqXkdnk7/dwh76T+XfIu 7FdzuEr+VP6U3ubJedh5j7yH8nvlvZT/TP6M+nEZp+198j56vl/ezyg/l/PJq5lfpWd+H/mAfIBR FslFtCV+U1/N/z7miWazGGWeZJ4sDtWx4CBzoblQDNIR4SBzkblIfM980HyQfMJMiGpzsbmY/BJz iRhgPmQ+RP5h82Hqcyeg5qNEjbD6xQJxiPkEUWOw+UuixvfMX5lPU7Kc2FGt7hLCMJ8hagw2nzOf 5+wL5irKVew4yHzRXCv6m+uIIIPN9eZ6zm4wN9B2o7mRUV42X6bkFfMV8kniyyHmq+ZrYghR5g0R MjebW8TB5m+JNYeYb5lvUf62+TZ2vmO+Q/5/zf+llYpBQ0zP9BjrPfM9LPm9+Xvy75vv0+oD8wMx UEeoIeYfzT9S8ifzT1jykfkR4/7Z/DN5FbkOMv9i/oWSv5p/peRv5t8Y5e/m32n1sfkxPai4Vm1+ Ym6jpopuw8wvzC/EWPMr8yshdaQbpiPdaPWlYVFjZVlZYqSOesPUrzeIMVY+Ua/WKiTeDbeKiXej dbwboeNdrVVJvBtjVRHvRqj7Jmd7EOmG60g3Qke6YeoeSnk1MW6EjnGHWQdbYfKGNYCaA62BYqj1 PWuwkNYhxL7DiH1SjLWGWRERsYZbIxnlMOswSkZZo+hntDWG+mOtsdipIuMwi3/0FrWi2D/OGkd5 nVVHeb1VT/3DrcNpe4R1BD2Pt8YzygTrSPIqng7T8XS0dZR1FKNMsibRlvs69VVUHW0dax1LHRVb a0RWVrMoZDG0NPvJ7GfBupzhOZNyZuVcmPdwnp23KmdW3uaCWQXrCrYUvFeYGzg28KPAR8HiYGUw HBwaHBU8PHi4qhM8mlY7t1k7t8BHBVt0i+nBU4PT9Tl9PviD4L3Bp4OvB98Mvlsyu+T6kvnBN0ue Ld1cllsWKKsqG1r+z4pAxVsVn1bmVnar7F85uHJ45XBVp3IM7XZuqn37VvFWmW5D+Zsab1aOrzy2 cnzO8LxV2M8VYEdxwTp1rGzgqt7Le7hgS/DekvmMyrgVn1Z8WparjulZ9409VcHXS2aXBfDEKlVf b3iGo3X44yPsnp+uozeuhONc7H+LNeTSnI05f8z5KFQdioSGh0aGRoVGh6xQNFQfOjx0RGh8aELo yFBD6KjQpNDk0NGhqaHTQ98PzQpdFPpxaH5oQWhJ6Fehp0PLQ22hFaGVoTWhdaGXQutDG0IbQ6+G /h76OLR12PBhTcOm1k6tnVF7Qe2ltZfVPlbr1K6pXVu7rnZ97YbaZO2va/+n9rXaTbWv175Ru7l2 S+1va9+s/V3tW7Xv126t/aT2n5GcSElkaKQmMjIyIXJkZGKkIXJUZFJkcmRqZHrk+MiMyAmRmZFT I9dEfhK5NnJ35N7I45Hlkbbov8Z1H9ezbn7dwroH6hbVPViXqFtc93jdE3VP1j1dt6JuZd2zdcm6 V+tn1J9QP7P+xPrm+pPqT64/q/7s+ln159T/oP5H9efXX1B/Yf1P6q+tb238Y+OfG//S+I/GTxs/ a/y88YvGLxu3N+U25TVVN4Wawk2Dm4Y0Hdo0tGlYU21TpGlE09gmU/1FGr+l3xfqt3zI2eRaRe9Q xPdCR/rVoQa/NXSUnwhN4niyXxU6mvRX4GmwHLSBFWAleJXzH4Otvlc7FVzge3XzwYN+dV2CdDF4 AjzrVzf+xa9uyvUTTXnqd3xD1bQ+AjT4dmiW74YWqt/x5SjF2GrcFH2n6DtFG482KZHNWU9ZJW4L 9dveSg8tof6kEXoYwZnRoD7T63HYP43y6eB48ieQnuLHQ6eC0zg+nfT7pGeQnsm5s/xk6Gzys3wn dA74gd8W+iHpj0gX0B/WhRZRfzFYAn5Fm6fBctAGVoCV4BnqrQMvgfVgA9gIXqPNJvA6eANsBi7Y Qpvfkr4JfgfeAu9hx+9J3wd/AB+AD8GfKP8I/BmkwF+w729gG3186rfVxvxEbaMfr20i5frhw66d oTmxay8lvQxcRfmPwWxwNbgOXA94Wq29Afw3uIXjW/1E3T1+vO5ngKfYuvvA/eDnYL5v1+GDuqWk vwDL/GTdo35b3WPgCY5/Cd9PATRS9xz1n6fuKspXgxfJ85Ratwas5dw68BJl60k3gI309QrtkuA1 6mwCm4Hrxxs/Blv9ZOMnvtf4D/Ap+Axt5Pt2UwG6KiQtAgFQ5sebykEFqPSdpi7qeTSkfoE3t115 O1SntJiiJM75CKWK7bg4A401oa8m9OWgJxc9uejJRU8uekqiJw89eejJRU8eenLRk4eeXLSk9OKi Fxe9uOjFQS8OenHQi4NeHPTioAsXXbjowkUXLrpw0YWLLlx04aILF1246MJFFx66cNGFiy5cdOGi CxddeOjCQxceuvDQg4sWXLTgoQUXLbhowUEHDvy78O/Cvwv/Lvy78O/Cvwf/Hvx78O/Cvwv/Hvx7 8O/Bvwf/Hvyr+e3Avwv/Lvy7cO7AswfPLjy78OzCswvPLjy78OzBswfPLjx78Ky4deE2Cbcu3Hpw q3h04dGFxyQ8JuExCY8ePHrw6InumQjl6ThwVDoWECn2Fp08IsjukWlHRPKISF4munjo4ghU8H2w ECzJxJsUekiJQhRSrTVzOgr5vj+I0gZiRIOOC0vU7/iG+vkWta4M9ScdQtQ4FOwpMk2gz3R0SqCm tkx0ioeaOXcK9U8F6QhlZyKUrSPU2TpOpohOKUb2iE4popN7gKNTYg/Ryf6G6GSjQhsV2qjQJjql iE6p0N9BOkK5mQhlf8cIZaNQG4XaHSKUjUJtFGqjUBuF2ijU1hHqAT9Vtwh0jFSPorb/x96VwEdR ZP03qckkJCEkIUAgmZ6hQQSPTvf0gnfNjAcGRJDhFKNy3yIEREAukSgCigerbhaVxci6HiMqq1nk UAdQWYLIFUAUB+R0kEMEBGS+f78JyCLfGtjE3e9b6F/9q6a6rn7vX+9V1wyVN5mxZ1qpYLmVKgZ7 i8utVAnYWwL2BsHeYLmVCoK9wVMWCh4KTC4Gk4t8a/E5ZqmCYHPwLFaquNxKFYHdRWB3EdgdBLuD YHcQVioCKxWBD3RBmjGuhcCAEmg7Us4zvJuw9Wp6Gp96l1uyfggDTuPD/6brPSizF7qw5F4uc1jw 8D/IA+WsZ4S1DVvPgbGVYWxlPA8yy8c2BGPrjZ6LMb6i8vH1ho3tyzZWQS9uhCGwk1OsUw2RKkKq iFNlSJUhpWCl4bbOukBb01A/Vq68hpEYzTOqWWcuIVWIVJCSPeuiTTzro9M8G+Dvvoi6zK4ID0Zd /vxoE39BtEmgIcI10ZLAtdbZvp43YfFWo+T6aKHnezzzkWipqUdLzGbW2b7IDaOdCNoJoZ0Q2gmh bgR14StwN8JYQn08wRPT0FbQMwfxVrS3DWE72t6BGLz37IXX3AdO7sfnA0h/j/gg4h+ipZ5DCIeR PoK8H1HnKHo9hvTxaJnZlMdSYnZHgKbNngi9EHoj9EHoi9APAasRcwACViNmQbTYHIp4GMJ9CMMR 7kcYGS0yRyE8gDAaYQzyxiFMxDM/jL6mIf0k8p9C/DTCfIQFCAsRFiGA7yb4bsIrm/DK5sfRIj9W E37MU397xB0QOiJ0Qrg7WuLvFi31d0fogdAzWuaH1/MPxT2My48x+TEm/wiEkdGQfxTCA2gHc9uP cfnHotw4hPGo+wg+T4oG/dC5fyrmRGPMkSaw/NdBixLBi7nhQ/AjNMe9m1EmD6EFtNXSOtsXOgqR A/ophq4jkH0pZF0EPUcg29JTLBiCcnm4G8bdIO4Owd0wNYduA9BrADqNQKcR6DQCnZZBp2HoNAyd RqDTMtSMQKdh6DIMvVltR6CfCPQTgX4i0E8E+olAP2HoJwL9RKCfCPQTgX4i0E8Y+glDP2HoJwxd hKGLCHQRgR4i0EMEeohADxHoIQI9hKGHMPQQhh7C0EMYeghDD2HoIQw9hCHvMGQdgawjkHUEso5A 1hHIOgxZhyHrCGQdhqzDkHMEci6DjMOQcRjyjUC+Eci3DPItg3zLIN8w5BuGfMM816yZU4I5Uoo5 Uow5Uow5Uoy5VoK5VoK5VoL5Uor5UsxaCFMcz6kj1tm+kLoLcjMhtybIyQfvA5BZEyrwBJHzJvQx B/F8zB5YX08IM2Qr9LQNAesaaCEELRR5sJ6BJoLQRBCaCKHFYrQYgiaKMbvKoI1itB7GzAqXz6ww ZpaloRB6C5k3gQnNEcAaE6wxWyC0RIBtxYwLYcaFMONCmHEhzLgQNBqCRkPQaAgaDUGjIWg0CI2G oNEQNBqCRkPQaAgaLYZGi6HRYmi0GDMujBkXxowrw4wLY8aFoOViaDkELYfM6eh3DsJ8pBcgLERY hBBCWIywBGWXIsDTQONBaDwIjRdD48XQeDE0XuzvzLMvhNlXhtlXhpkXxswL+/HuAjYUY/aFwIgQ GBECI0JgRBkYUQZGBMGIIBgRAiOKwYhiMCIERhT5J6P+FGZGMZgRBDNCYEYIzCgCM4rAjCIwIwhm FIMZxZh54YD1FmbnOXcADIFtZZv6O87ZipmyDZyJ6bEUeis9OSuhp2LoaBr0U2rNTughAj1EoIcI 9BCBHiLQgzWzSqGHUuihFHoohR5KoYNS6KAUOiiFDkqhg1LIfBpkPg2yjkDOpZBzKeRrzahSyLcU 8i2FfEsh31LILQL5RCCfUsinFPIpPSWfMWyJLKtTimcvxTMW4xmnMY8z8YxD8ATT8ATFYFkQI59G otyjFPOT28HqMjC6zLQhJ9s62xepIUgN4VQpUvBpKPUASj2A+fK95Qt/Li1XRvPk51ZppAqRCpLN lsf7Si/GTcY1na/ZcXPjFuJajmsdrq9xHcB1PO64SBJJVtqKRZbIipstVIRJfD3DV7F1oYW54m3x jRWj9ly7Yu976oqduWtdk+1r7BsRdtoP4FoTT7iScGXiaoTL+gpLxkvcsT4hFd8qvpV9Y3xHhPl8 LeNrvXWhlZ3x2x1Z3N7O+Ez7TkfAMQPXbL5KHAsRljvW4foG13e4jjiOJCThysSlJqiOEv6EVIKe oDsWJlyNMJOvIF/zrQttLE9YlnCcW1uONpY74CHoRdFF3CEeEhNFoZgJGbwhguJNMUe8I+aKv4p3 xftivlggFopF4gPxkQiJxWKJWCo+Fp+IZWK5KBUrxGditVgj1op1okysF5vFDmtPSuwR+8R+cUBZ qxxVjitRl3DF6+/r8/Xt+g59pxFvOIwEI8lINmoZtY06RpZR13AaiuEy3MZFRiPjYqOx0cS4xLjU uMy43NCMXEM3DMNj/M5oZlxhXGlcZVxnSMNr+Ay/cb3Rwmhr7VQZHY1ORhfjDiNfDpYPygnyVfma fF2ukJ/JVXK13CS/lF/JzXKL3Cq/kdvkbvmtjMg98ju5V+6T++UB+b08KH+Qh+Rh+aM8Jo/Ln+QJ b5xXeO3eeK/Dm+BN9da29qa82d4cr8vr9tb3NqC4uGnRoOiOlZodqUKkQuKhaFBZC88rxCw8+HfW LtKJQ7yfVKQcA4+t/DzkW5+SOD8fKZNThUjlk13MOnFIYM2MUoWnasf2paza+eW1Tf5k/kNbRdxC XfEqRvI6QhBhDsLbqDUXMd61RQnSeMcW8xHD1ooQ4iWIl+MJViB8hvA5Pq9CWBMtEmsRsHoX6xE2 Ig/rQrEZzyxOjfHk8w6JjRhrzJP3QnwvBf0Xot9C9FmI/n7uZw3CWtT5HGFVtNDdGqE92k79RY3l GMXPtfJRKx+jKPpFzQxxJ3q+G6XwZigGI4aNF7DxYizCOAS8KQmsrE7roQg9WK0H0Xrw5DOTjff/ 4vRXo0F9iaVjpAqRCunbo0EjHs+VoS/CvY+QuwzxasRfId6MEEbAG6GONz8db35GDlbqKkKjaJFx OcKVyLsKQSLttfqy1vIkjMQTh7CidxnWX6ex1vdD8KnIyo8mIZVnWH9Ty8o38SmfU/lIYWyxmghY E6JU4WnvCeJkea59si3zVFv53EddIyMaMjIRaiPURcjBHQWxG0FFuiHiRogbI74ccS7iZnimKxGu QrgGn/GOcPKZDKxMjesRbkTeTQgt+Akht1NjtMbissZY/unne+DMmZo9TYaF6P/nfiWC1+LMr9Zo xpI/WSsftfIxqiLKkBOjQfkw/MvjiJ9FPAvxSwgvI8xGCCLgTUeGcW8HwrfRIok3GvkT8k5Eg14R LfLaLXnKgch51NIIUoVycDSETyFp/cUgm+XBSMiVJw7Bj7m8TkvHyBuCT0VWfjQJqTzkF3G+iU/5 nMpHymqRa5445I1Hj05Lx6e8ozhZnmufbMs81VY+91FXbsBYMH/llwibEcK4g/WlxPoSz5UvdyH+ FvEexAcQH0SMWYDnLMRzFnopGvLaEMqf1+vASBIQqiEvCSGVnxBPfWqM1lhc1hjLP/187yw6Pk2+ hej/534Fgv1sOv5FjWOslZO18lErH6OKnRmYeOHMQLpwZiDRhTMD/5XaF84MPI9/F84MPK++LpwZ +Gv/bPSsaqrNTn37H/vmvwV/699O7aB2UjurXdS71a5qN7Wn2kvto/ZTB5z6HcAs9eV/8kuAVepq dY26Vl2nlqnr1Q3qRvULdZO6Rd2qfqNuU7erO9Rd6m71WzWi7lH3xn43oB70tPK08bT1BDztTvv1 wGjPGM9YzzjPQ56JnkLPw55HPFM8U33P+v7gK/L90TfD9/wZ3/nP9v3F99oZ3/wv8C30feD70PeR b4lvqe9j3ye+T61fA/hW+db41vnKyr/v33+Wb/wdgYRAjUBaID2QEahpnTcAiZmUDak1IxskdxXF QXrXkYAEJdkhRT/FQ5I3kgPSvIkSINHmlAiptqBqkOwtlATptqJkSLgdpUDKHag6JN2JUiHtzpQG iXehdEj9bsqA5LtSTUi/G2VCAz2pFrTQi2pDE32oDrTRj7KgkQFUF1oZSvWgmTHAF9QXMJIX1Rcx klnqLKoBTb2MFv6qzsPIF6uLMfKl6jLcXamuxHhWqWUYyXp1PUayQd2EkWxRt6DfreoO1NqlRtDX HnUPetmr7gXuU/fhufar+1H3gHoAz3JQPUi1ob1WlAYNtqEUaLEt1YEmA5QKbbajTGi0PWVDq50p HpodjDS0i/Roz2iUH+MZh5LQMUoWeh5BXWiZakDPz1IGdP0Hqgl9P091oO0XKBsan0l2S+uUAL2/ RImW7ikZ2p9NKWDAX6g2WPAacI5vDjnAhrdQ623f26j1ru9dsoEZf6N4sGMe7s73zUcLC3wLqBaY shAtgC1UHXz5iFItzqD3j30fUyaY8wnKfOr7FCMp9ZVSHFi0EmNY5VuF8mt8aygdjFqHfst8ZVQH zNpJNrDrW7KDYXsoESzbTzXBtMMUB6YdJWGxDXdPtD1BDnDOTtXAu3hKAvccVB38S6BUcLAG1QQP 06gWuJhOdcDHDMoK1AQr+cxAVVEVMMatuoGXqZdDfxZTk9WmatNTTLXYKZiX1ZmXduZlPPPSwYzM ZEamqh3VjuCNxcs05mVt9Xb1drAtX80HAyx21mN2ZjM705mdOcxOp9pb7Q1+WBxNYY4mMkerqQPV gaSoQ9Qh4M2D6gSwaoo6BWmLqYKZWouZms5MTVbfV98vZ6pgpjqYqZnM1FRmahozNZuZms5MTWGm VmOmVmOmVmemOpijTvWQeogUZmptz62e1uCZxddM5msK8zWN+ZrOfE1mvgrmazLzVTBfM5mvaczX dOZrCvO1FvO1HvM1m/mawnxNZqZWZ6bamaOZzFEnc9Tpe933Ojj0hu8NUnxv+t4EWnxN9r3jm1vO VMEctTNHc5ijmczRVOZomi/kW4zZYjE1m5mazkzNYaam+Jb5lqH95b7laO1n1lZn1qb6VvtWU5Zv rW8t1WXuOpm7KcxXO/M1u+2Btgcooe33bb8Hm5m7zNR4ZqqDmZrKTE0LJAaSwEuLr9nM1xzmawrz NZH5GjszMPHCmYEXzgy8cGbgObZ04czAite9cGZgxetcODPw9H82KvKE+BfLJ3+vHPut8gb+nfJW zzbPDs9Oz27PHs9ezz7Pfs9Bzw+ew54fPcf4d8tN/+nvlrubPcyeZi+zt9nH7Gv2M/ubA8yBZoE5 1Bxm3mcON+83R5qjzAfM0eYYc1z5r5wnmlPNaeaT5lPm0z//4tmcby4wF5qLzJC52FxiLjU/9rf1 t/O393fwd/R3OuOXznf7u/m7n+X3zkP9w/zD/ff7R/gf8I/2j/GP9Y+L/Qba/4j/Uf8U/9Ty3zw3 PtuvngPXBWTghkDzwM2BvECLQEvrzEDILYS1/RLPErJDfkuxwv/U8yk5IEfrlyMrPCsoEfL8nKpB pmsoCXJda/0ywrOObJDvBoqDjL/AOmuTZxNWVVs9W6k65L0Nbwc7PDuoBuS+Eyuv3Z7dWHnt8eyh DOhgL9WEHvZhXbbfs59qQR/W+8gPnh+wvjvsOUxZ0M2PVNdzzHOM6kFHGiVCT7lUDbpqSrWgr5aU DU3dQnZoqz3FQ2NdcLer2ZUENNaHqkNXfSkV+hpINaCtAsqExu5H3ZHmaMqCrvDmBX2NA443x1My 9PYg6k4wJ1AK9DeR6kCHUykNepyG1p40n0Stp8yn0NrT5tNoZ7o5HWN4znwO/c4x5yANHSM935yP 8gvMRSgJTaPkEvNjyoKu21JN6Btrdui8E3I6+ztTNrR+OyVamqdk6D6fbJb+KQUMuJuqWyygOuBB b0oCF/qgfF9/X5QHJ8gOVgykeDDjXqoGdgxGmQJ/AVoY6h9KtcGUYWgBbKFU8GUE1bA4g97H+MdQ LTBnLMqM84/DSB70P4jWJvgnkANMKsRIHvE/glqP+h+ldLBqCsYw1T8V60RXwIVVpBpQsTZsGGhI NjCtMWWCbZeQHYzTsLo0AgYlWKxDmaaBpngzuiZwDVag1wauJQEOXoe1pwxIqgEu3kAZ4GNztHBz 4GaqDV7moZcWgRZUN9ASDOUzAz1BTxCMmeOZA5zvWQDeWKyNZ9bamK9xzFHB7MxgdtqZnQ5mZwLz Mo15mejZ7tkONlvsTGJ21vLs8uwC8yKeCJhnsbMus7MeszOZ2ZnN7MzxHPIcAsstjqYzR6szR1M9 xz3HyWnaTBu0nm5mUG0z28xG2mKtYNYmM2vjmbU25qtgviYwX9OYr4nM1yTmaz3mazLzNZ35msp8 TWW+ZjBfE5ipOebD5sPo3eJrLfMx83H0brE2jVmbzqxNYtYmM2vjmbWCWRvPrBXM2jRmbRKzNplZ m86srcusrcesTWfWxjNfM5ivdmZqGjM1x9/D3wPc7enHeyXzNZ6ZamOOCmanndmZzexMY3YmMjuT /CP9o8Bji6P1mKPJzNFs5mi6f7x/PFq2mGpjpsYxUzOYqYn+Sf5J4Ohk/2Sw2eJrDvM1nTlqZ47W CzQJNMF7jcVUGzM1jnnpYF4mMC8TmZdJAW/Ajzd2i5f1mJfZzMt05mV15mUqxenjrXciI3JVZxpN nvP3h+f2j98FKuGko3/aR2GVn4PHp7twqorPoYu9N1XVmROxUxU4VYUSs05ROJWuqiep8rMPY99H /lZ9VLE+fovnqPITGn+Lk1iwkq9ifZwpJz5xpYrPMv1N+iiqfA6cea5P1MWnwwz5V88J+4c2z9RH +XNUJgPOPK+HT7gZ8r+/W1ZKn0UxnVemTn4hK953q9w+fqHzPL4srVfa/D/zfCy0b+3ZVuk65RSv KlMfZ/LKxc+RX5nPcRZZ5bG88qrOpsRORKrkOXjmc/AcrNxnOPP8s3JZlZ+oVUl9nM2W5Jd/G1FZ fZxd55Xbx1ltiWW1Kqf9s/d5+lqock4F/YWsCmOsqrqzDqvmOX7RR2G5ba/Ets/K3aKf52CVPEdR jFNV/cZT2b72F30MqQJ//qvrqN9kXf9/Yo+gArL6P7FH8OtyvrBHcA59XNgjOJc+LuwRxFo4199G /BfvEZzr2b7ns0dwzvo4jz2Ccz2z9z91j+CcZXUeewTnrPPz2CM41zOy/1P3CM6ZV+exR3AesvqP 3CM45+c4jz2Ccz0D/Xz2CM7LlpzjHsF56vzc+jgvW/Kft0dwzrL6L94jOC/uXtgjqFgf57FH8K9/ l/Lfs0dQCbL6j9gjqIy/PHVhj6DCfVzYIziXPv5L9ggq+zn/P+8RVPbf9znbHkGl6+MsewSV/Xd7 /l17BJUuq7PsEVS6zs+yR1DZfyfr37VHUOm8OsseQRXI6t+yR1Dpz3GWPYLK/jtoZ9sjqBJbcsYe QRXp/B/7qBJb8tvvEVS6rP4f7xFUCXcv7BFUrI+z7BFgTlb1ujuOro17LO4JInGruJXsoo1oQ/Gi rWhLDtFOtKME0UHcQ4niXvEY1RfTxDTyiSfFk+QXT4vn6HpRJF6gPDFTzKRbxSwxi1pbJ2NSGzFb zKbbxCviA2orPhKfUn/xd/E1FYgtYgtNEt+Ib+hRsV3soMlil9hFU8W34lt6TOwRB+hx5agrnqa7 slxZNFN/VX+N/qS/ob9BL+lv6m9Ssf6W/ha9rL+jv0Oz9b/qf6U/6+/p8+kVfaG+iIL6h/pKmqOv 0vfRB/oB/QBt1g/qB+lr/ZB+jML6T4addhgOoy7tNbIN0yaMpkZbW47Rzmhnu8roYOTbrpb95T22 6+UwOczWXA6Xw203yxFyhC1PjpKjbC3kaDnd1lI+I+faesh35bu2CbJEltgekvPkIttE+aFcapss V8gjtifkUW9t2/veLG+Wbb23nreBbQPF2SxZP06N46ZB4tVZ4g6WeAJL/IFTEu+A/I6iE9Kdxe1U zTp1k2wiX9xJceIucTclia6iG/K7ix7QTU/Ri4ToLfpQsugr+qFuf+isGnQ2GC0MEQWUIoaKYbh7 n7gP5YeL4ci5X9yP9AgxAmVGipGoNUqMRv4YMQ7548UE5D8kCsGJh8Uk5D8qHkX+ZDEZJaeIKWht qpiK9GNgRiIzI56ZEQ9mPI2c6WI6xvB78Xs81zPiGeQ8C8YkgDFFwD+KPyJnhpiB9PPieZR8AUxy MJPSmUkZzKSazKSLwaRXkPMX8SplitfE61TLOnuUalunj1Id8ZZ4m7KsU0iprnUOKdUT74kSyhZ/ E/OokXUqKeVY55KS0zqZlBTrbFLkLBZLyGWdT0pu8Yn4BP1+CqZeDKb+HX0tF8uRUyo+A+9XilVo Z7VYS6pYJ9ZTA7FBfEENxSaxCSW/FF/h7maxmS4SX4PljZjltZjlF4Pl2zG2HeD6Rcz1Rsz1LHB9 D3K+E9+h5F6xFyX3iX3I2S/2Y/wHMBNqKkeVo5SqHFOOUQ3luHIc6Z+UE5SmRJUopbqs/2Jdw2Vz xVGaS7gEcuwuO9LxmD+pPH8e4PnTjOdPLs8fnedPE54/Os+fXMyfEqT/ps8jj3XqKl3Cc+lSzKWP yNRD+mLkL9GXkqF/rH9Cl+mf6svod/rf9eWoW4r55sF8W40W1uhrqam+Ti/D3fX6epTfoG9AzkZ9 I9Jf6F+gzCZ9E2p9qW9G/tf6FuRv1bchf7u+ky7Xd+nfIj+iR5C/R9+Dkt/p36G1vfpepPdhVhs8 qzWe1Rpm9SHkHNYPYwxH9CN4rh/1H5FzFLNd13/SfwKe0E8gJ6pHSTfIIPIYNsNGuUacEUdNDAGL 0BYWwUFXGAlGAl1tJBqJdKVRzahG1xhJRhLyk41kutZIMVLoKqO6UZ1uM1KNVKRrGDVQJs1IQzrd yKDrjJpGJknrlFryGnWMOqibBVvjg63JIb91Zi1db51aSzcY9Q2VbjQaGA2pjXWGLd1knWJLza1z bOlm41LjUtS9zLgc+ZqRS3nWibbUwvAYHozQNEyMoanRFL03M5oh5wrjKmppXG1ci9auM7x0i+Ez rqdWxg3GTXSr0dxojpI3G3m428JoQa2NlkZLpG8xbsGTtjJaYcy3GrfiKVobrdFyG6MN0rcZt2HM bY22KA/7iPIdjA7I6Wh0xNg6GZ2Q39nojLq3G7ejVhejC3LuMO7A0+Ub+XQtLOkAGiUHynvobsue UmfLntLtlj2lgGVPkR4tRyN/jByL9Dg5nu6wzuKldvIhOZHay0L5MOXLR+Qk5D8qJ1MXOUVOpQ7y Mfk43SmnySdQ90k5HXefkc+ihefkH+guWST/iLsz5AyUf14+j5wX5AtIvyhfRJmZciZq/Um+hPxi ORv5f5Z/Qf6r8nXqKN+QbyJ/jpyD/LfkWyj5tnwbrb0j30F6rpyLfNh96mTZfeA8OQ8578v3MYb5 cj6ea4FcgJyFchHa/FB+CPxIfoSckAwhvVguRsklcglaWyqXovwKuYK6ys/kZ9RDrpQrqZv8XH5O PeUquQr5q+Vq6iXXyDXUXa6Va2mkXCfXIV0my1BmvdxAveVG+QX1sU4spr7WmcXUT34tw9TfOruY BlinF9NAuV3uoHvkTrmLRlhnGdMg6zRjutc6z5gGy31yH/raLw8g/3t5kIZYJxtTgTwsD2NUR+QR 9HtUHkWPx+Qx5ByXJ2iojHptNMIb57XTMG+8N4Hu8yZ6k2i4N9mbTD29Kd7quJvqTaX7vTW8NZBO 86ZRN2+6N536eDO8GdTdW9Nbk0Z6M72ZSNfy1qL+3tre2igPr4ny9bz1kJPtzaau3hxvDvKdXifq Kl4FtVxeF3LcXjcN9Nb31qdeXtWrop0G3gbUFeua9+BrH6M09qwJ5Z61o+gIf9YJnjVR3A7Pmiju hE8V4m741DjRDT41UfSCN00UfeBNBfxof5QfKAYCB8ObxsGPDkXa8qN29p3x4gF4TSHGwmsKeM3x 6GUivKZDPAKvKdhT2tlHJsAvTgc+K55FLcsLxrPPSxCvwquli9fh1dJFEF4tXcyBV0sXb8OrVRNz 4dXSxbvwaumiBF6tmpgHr5Yu5sOrJYmF8GrpIgR/liSWwJ+lw58txVNb3ivFOm8b64yVYiVyPocP S7fO3obnLoMPqyE2woeli6/gvdLYe6WI3WI3vMvnyiqylfue46d8SYK7tbs12dzt3e3Jxl6kDnuR OvAf71GmXgIvkqXPgxfJ0hfBf9TUP4L/yNAXw39k6Z/Ac2Tpy+A5asJnlKL8Z/pnwNXwHBnwGeuQ tnxGJvuJWvpX8BA19TA8RE14iK3oZQc8RG19NzxETfYKmewP6sAHHAYe1Y+ilmXxa8G+x1EdWHZB brbsCttxhS24wrZbYautGBmw2vWNTFjt+kZtWO36bLUVoy6sdn0jB1a7rqHAatc33LDasNmw2nWN hrDa9Y1GsNr1jMaw2vXZXivG5bDX9Yxc2Ov6sNc6eresc451Ajk5YZ2vRs41sNH1rdPIKds6jZxc xo2w0fWNPFhnN1vnHLbLCltkhW2xYrQ32uOuZXkVWNX+pLMNvZht6MWwnmOooRwLG9pYjocNbSwn wno2kA/DeqpyEqxnYzkVdrOxfBx2swEs5pMo/7R8Gvgs7KYKi1mEtGUxG7KVvEjOgn1sIF+GfWwA +/hn9PIa7GMjGYR9bMA2sSFbw4thAd8HLpQLUcuydxfBui1FjmXXNLZiGtsvjS2XJjfAZhnyC9gs Q34Jm2XIzbBZhgzDZjWRW2GzDLkNNsuQO2CzmshdsFmG/BY26xK5BzbLYGulyQOwVpfIg7BWBqzV D5CJZZsus85hp8tlVMLfewkWyrDOZKdLrTPZKddbDRbK8FaHbdLZNl3GVklje6SxJdK8db11cdey OxpsSgPSyDobhCjJFkl2kOPG5q3aU6MeIwsG0uA+Bb0G0Ly+3Qb1s9kHdBvUzdZ6YLdhg2zPkZ3f 36LkRuSgFMqgLFKoIV1COjWja+l6yqPW1J66wFb1poFUQCNoLE2kyfQEPUMzaBa9QkGaS/NOa8lG CVSdrJPfXHQRXYrFzBV0Hd1ALagNdaA7qBv1oXtoKI2kcVRIU+hJepaep5foL/Qm/ZXeP62lOEqk VMqkekg3osvIQ1eSpBupJd1GHSmfulNfGkTDaBSNp4dpKj1Fz9ELVEyv0hx6l+af1pKgalSDalE2 1aeL6XIy6Sry0k10C7WlTnQn9aB+dC/dRw/Qg/QIPUZP0x/oRXqZXqO36D1acFpLdkqiNKpNOaRS Y8j8d3Q1+ag5taIAdaa7qCf1p8E0nEbTBJpEj9N0KqKZNJtep7ephBae1lI8JVM61SEnNaAmlEtY J5GfbqZbqR3dTndTLxpAQ+h+GkMP0aM0jX5Pf6Q/0Z/pDXqH/kaL6INu3QYOs09gnMT4OON0xiLG md16F/Swz2Z8nfFtxhLGhYyLe/S4Z7B9GeMqxo2MWxh3Mx7oObBfH/tRC+OJ0cGYwpjBmNVz0L33 xCuMDRkvYdQZmzFe22vE4GHx1zPmMbZmbM/YhbFr74JuPeJ7Mw5kLGAcwTiWcWLv+/v1jJ/M+ATj M4wzGGcxvtJ3wKBu8UHGuYzzGD9gXMq4vO+9/e+NX8W4nvErxm8YdzPu62u1dojxuIWOOMZExlTG zH7Dug101GN0MzZivIzRw3hl/8FXXOmQjDcytmS8jbEjY37/wVeaju6MfRkHMQ5jHMU4vv/gq3TH w4xTGZ9ifI7xBcZiKKSb41XGOYzvMs5n/Ijxk0FgiGMF4xrGjYxfM25njAwa2GOA4wDjEcYTFibY GZMY0wbdd09BQm3GHEaVsTGjxvi7wZB2wtWMPsbmjK0YA4ydB0OSCXcx9mTszziYcTjj6CEWTmCc xPg443TGIsaZBfd1H5kwm/F1xrcZSxgXMi4e2m9Q74RljCsZ1zFuYtzCuHPofd2HJnzHeJDxqIWJ xOhgTBl63+ChiRmMWYwKY0PGSxj1YQXdeiY2Y5SMzRlbM3ZkvGsYRp7Ym3EgYwHjCMaxjBOH9yoY ljiZ8QnGZxhnMM5ifGU4JJkYZJzLOI/xA8aljMuHFwzzJK5iXM/4FeM3jLsZ943qVXBv4iHG4xZW i2NMZExlzCz3N7+O9l/FOFhDxznENljhX8dqFcC6FcCECmC9CmB2BTCnAuisAFavACoVQFcF0F0B TK4AplQAUyuAiRXAGhXAtApg/QqgWgFMrwDWrABm/irGYfVS5xxiG9ZNv45xFcCsCqCoAGb8CjbA qvU2rMa6Yn04GCvW8ViJPYG14UysVudgFfYBfUIraT19TTtpHx2xkS3RlmbLsrltjW267Uqbz5Zn u83WOTazZ7Yky47ZbGnl8W2xOFGJ2a/sjFhc//GYZVLXx+6rW2Jxg5LyeEusXMOUWHzFJbGnuXpO 7H6HnFjcuX0s7kKx+E57LO7+VSzu4SuP88rjV2Nxz5Ty+ESs3T4nYp/7psbifu/G8gcciX0eNzYW P9golv9g+eenr43Fzy6PxUUrYvGM8vZnHKC4F6+m+nErRKqoIdJEusgQNUWmqCVqizrnkot2rhR9 rfd4vLO3z73ZHXC3VVYra5S1yjqlTFmvbFA2Kl8om3Kn5T7hqu2qo3ypfKVsVr5WwsoWZavyjbJN 2a7sUHYqu5TdyrdKRNmjfKfsdbdxt3PfGbct7pu4LXFblX3KfuWA8r1yUPlBOaQcVo4oPypHlWPK cWuPWom6yNqZdgmX3RXvvMZ5rfMq59VOr9PnvM4pnTc4b3T6ndc7WzhvcbZ0tnK2dbZzBpztnTc5 b3Y2d+Y5b3W2cbZ23ubs5ezn7OPs7ezrHODs7xzovMc5xHmvc5BzsHOos8A5zHmn825nV2c3513O 7s4ezp7ODs5Ozs7O250dnV2cdzjznSOdo5wPOO93DneOcI5xjnOOdo51PuSc4BzvfNDlcCW4El3V XEmuZFeKq7or1VXDleZKd2W4aroyXbUsueQm56bkVne3dN/iauO6zdXadat7inuq+/fuZ9zT3S+4 i9zPu//gftE90/2K+8/ul9yz3Q+7vnPtcUVcu127XDvd09w13RnuNHe62+12uZ1uxT3KPdI9wn2/ +xH3pNxU9xPup92Pu59yP+ee4Z7lflnrrr2nlWh/0+Zp72vztQXaQm2R9oH2ofaRFtIWa0u0pdrH 2ifap9oy7e/acq1UW6F9pq3UPtdWaau1NdpabZ1Wpq3XNmgbtS+0TdqX2lfaZu1rLaxt0bZq32jb tO3aDm2ntkvbrX2rRbQ92nfaXm2ftl87oH2vHdR+0A5ph7Uj2o/aUe2Ydlz7STuhRXMp15Yblyty 7bnxuY7chNzE3P9h70vDoyi6trunM9kzSSbbTEgysaqTTGafrhABYboaEGXPjIDIyCL7GvZFloDs m4CIgIqAiOyELeyCgAiI7CIiIiJubCKgD7Jo/KpqOs2gPn7vn++9nu+6nj9dp06fums793T36aRP jDvWbXKb3Znuau4sd7Y7x21x57q7ubu7e7h7unu5e7v7uEvdfd393EPcg93D3EPdZe5R7jHu0e6J 7gnuye5J7qlsbYnvuV91z3HPdr/iXuFe6V7uXube5N7o3uLe6t7srnBvd29z33Tfpm8wPGs8az3l nnWe9Z4Nno2eTZ4Kz2bPFvregr61YJnidtF3Fp499J0FfWNB31fQtxX0XQV9U+E56jnmOe454TlJ 31XQNxX0PYXnrOdzzznPF57zni9pxMlzkUacPN94vvV8F8o957lCI06e654fPTc8P3luem55bnt+ 9vzi+ReNO3nueu7Rdw2e3zy/eyo9f3g5Gnui7xTUnHXR3hiWty7em+A1eBO9SfQ9AX1LEJbJLpO+ HdDy2dEYE/SK/5jXDnmLvNW13Ha1aEzpkQx39WhMyduARvy9Db2NvI29TbxNvc28zb0lLPfdM94W 3pYs/11r73OhHHjett523vbeDt6B3kHewd4h3s+8Z72fe895v/Ce937pveD9ynvR+7X3klRTqiU9 IdWW6kg+SZawpEh1pXpSfakBjfbTWL+v1NfX18/X3zfAN9A3yDfYN8Q31DfM96JvuG+EbySN9NM4 P8u4N843nkb4aXyfRvdpbJ9G9mlc3/eKb7bvVd8c32s0sk/j+jSq71vge8u30LfIt9j3No1Q+ZbS CJVvuW+Fb6Wav28tjVD51vs2+Db6NvkqfJt9W3xbfdt822mcyveebxeNzPv2+Pb69vk+8O2nsSrf Qd8h30e+w76PfUd8R1kGwBO+kywL4Gnfp74zvs9onJ1G2bWsgBd9X2uZAb/3/UDj6v+YIfCu757v flWWQN8fNC71SK7AaBqXkuNozFw2yIlykpwsG+UUOVVOY1kETbJZzmSZBLPlHDWbIJChLMp5cr5c IFvlQtkm22WH7JRdslv2yF5ZkpFcJFeXi+XH5RpyTbmW/IRcW64j+2RZxrIi15U/lo/IR+Vj8nH5 hHxSPiV/Ip+WP5XPyJ/JZ+XP5XPyF/J5+Uv5gnxR/hpzmMc6LOAIrMeROApH4xgci+NwPE7ABpyI k3AyNuIUnIrTcDrOwCZsxpm4Gs7C2bg+fhI3wE/hp3FD3Ag3xk1wU9wMN8cl2I8D+BncArfErfwn /af8n/hP+z/1n/F/5j/r/9x/zv+F/7z/S/+FoCvobt+UXNWKY0aAFJAK0kA6yAAmYAaZoBrIAtkg B1hALngMAACBCPJAPigAVlAIbMBO8yIAF3ADD/ACCSBQBKqDYvA4qAFqglrgCVCbZUKRAQYKqAvq qRlRngJPg4agEcuL0hQ0A81BCfCDAHgGtAAtQSuWJ+U50AYEwfOgLWinZkzpCDqxrCldQTfQHfQA PUEv0Bv0AaWgL+gHBoBBYDAYAoaCYeBFMByMACPBKFAGRoMxNDcCGA8mgIlgEpgMpoCpYBqYDl4G M8BMMAu8AmaDV8Ec8BqYC+aB+eB18AZYAN5iOVkWg7fBEvAOWAreBcvAcrACrASrwGqwBqwF5WAd 2AA2gk2g4pG8LTvBe2AX2A3eB3vAXrAPfAD2gw/Dcrl8DI6Ao+AYOA5OgJP/Jq/Ll+AC+ApcBF8/ kuHlcliOlxtalpefwS/gX+AO+BXcBffAffAA/AZ+B5XgD8hBHuqgACOgHkbCKBgNY2AsjIPxMAEa YCJMgsnQCFNgKkyD6TADmqAZZsJqMAtmwxxogbnwMQgghCLMg/mwAFphIbRBO3RAJ3RBN/RAL5Qg gkWwOiyGj8MasCasBZ+AtWEd6IMyxFCBdWE9WB8+CRvAp+DTsCFsBBvDJrApbAabwxLohwH4DGwB W8JWsAyOhmPgS3AsHAfHwwlwIpwEJ8MpcCqcBqfDl+EMOBPOgq/A2fBVOAe+BufCeXA+fB2+Ad+E C+BbcCFcBBfDt+ES+A5cCt+Fy+ByuAKuhKvgargGroXlcB1cDzfAjXATrICb4Ra4FW6D2+EOuBO+ B3fBZ+Fu+D7cA/fCffADuB9+CA/Ag/AQ/Agehh/DI/AoPAaPwxPwJDwFP4Gn4afwDPwMnoWfw3Pw C3he9IleURJlEYuKWFesJ9YXnxQbiE+JT4sNxUZiY7GJ2FRsJjYXS0S/GBCfEVuILcVW4rNia/E5 sY0YFJ8X24rtxPZiB/EFsaPYSewsdhG7it3E7mIPsafYS+wt9hFLxb5iP7G/OEAcKA4SB4tDxKHi MPFFcbg4QhwpjhLLxNHiGPElcaw4ThwvThAnipPEyeIUcSpsDZ+DbUQkFonVxWLxcbGGWFOsJT4h 1hbrwC/hBfgVvAi/hpfgN/Bb+B38Hv4AL8Mr8Cq8Bq/DH+EN+BO8CW/B2/Bn+Av8F7wDf4V34T14 Hz6Av8HfYSX8Q+REXtSJghgh6sVIMUqMFmPEWDFOjBcTRIOYKCaJyaJRTBFTxTQxXcwQTaJZzBSr iVlitpgjWsRc8TERiFAUxTwxXywQrWKhaBPtokN0ii7RLXpgED4P28J2sD3sAF+AHWEn2Bl2gV1h N9gd9oA9YS/YG/aBpbAv7Af7wwFwIBwEB8MhcCgcJk6DL8LhcMR/zp07WP/fe/f/yb07HAlHSU9L DaVGUmOpCc0xIzWXSrSsVi2lVtKzUmvpOamNFJSel9pK7aT2UgfpBamj1EnqLHWRukrdpO5SD6mn 1EvqLfWRSqW+Uj+pvzRAGigNkgZLQ1hWrBel4dIILTfWGOklaWxYhqzJ0hRpKs1II70szZBmSrOk V6TZ0qvSHOk1aa40T5ovvS69Ib0pLZDekhZKi6TF0tvSEukdaan0rrRMWi6tkFZKq6TV0hpprVQu rZPWSxukjdImqULaLG2RtkrbpO3SDmkn/Xa2tFt6X9oj7ZX2SR9I+9k38w9Kh6SPpMPSx9IR9vX8 49IJ6aR0SvpE/Yr+Z9JZ6XPpHPuW/pfSBekr6aL0tXRJ+kb6VvpO+p59W/+KdFW6Jl2XfpRuqN/Y vy39zL6zf0f6Vbor3ZPuSw+k36TfpUrpD8QhHumQgCKQHkWiKBSNYlAsikPxKAEZUCJKot/QRiko FaWhdJSBTMiMMlE1lIWyUQ6yoFz0GAIIIhHloXxUgKyoENmQHTmQk33R34O8SEIIFaHqqBg9jmqg mqgWegLVRnWQD8kIIwXVRfVQ/T99+b8JaoqaoeaoBPlRAD2DWqCWYbkAguh51Ba1Q+1RB/TCv8kL 0AeVor6oH+r/SIaAYWE5Asq0LAHj0Hg0AU1Ek9BkNAVNRdPQdPr1bjQTzdJyB7yG5qJ5aD56Hb2B 3kQL0FtoIVqEFqO30RL0DlqK3kXL0HK0Aq1Eq9BqtAatReVoHVqPNqCNaBOqQJvRFpZ7YDvagXZq GQj2oL1o38M8BOgQ+ggdRh+jI+goOoaOoxPoJDqFPkGn0afoDPoMnUWfo3PoC3QefYkuoK/QRfQ1 uoS+Qd+i79D36Ad0GV1BV9E1dB39iG6gn9DN/5+fiNEtdBv9jH5B/0J30K/oLrqH7qMH6Df0O6pE fxRxRXyRrkgoiijSF0UWRRVFF8X89xn6v8/Q4c/Q+FncGj+H2+Agfp4+T+O2uB1ujzvgF3BH3Al3 xl1wV9wNd8c9cE/cC/fGfXAp7ov74f54AB6IB+HBeAgeiofhF/FwPAKPxKNwGR6Nx+CX8Fg8Do/H E/BEPAlPxlPwVDwNT8cv4xl4Jp6FX/nvk/t/9pM7no1fxXPwa3gunofnP5ITc9GfsmIuxyvwSrwK r8Zr8FpcjtepOTI34Qq8GW/BW/E2li1zp5ov8301Y+YHeH9Y1szD+GN8BB/Fx/BxfAKfxKfwJ/g0 /pRm0cRn8ef4HP4Cn8df4gv4K3wRf40v4W/wt/g7/D3+AV/GV/BVfA1fxz/iG/gnfBPfwrfxz/gX /C98B/+K7+J7+D5+gH/Dv+NK/IfCKbyiUwQlQtErkUqUEq3EKLFKnBKvJCgGJVFJUpIVo5KipCpp SrqSoZgUs5KpVFOylGwlR7EoucpjClCgIip5Sr5SoFiVQsWm2BWH4lRcilvxKF5FUpBSpFRXipXH lRpKTaWW8oRSW6mj+BRZwYqi1FXqKfWVJ5UGylPK00pDpZHSWGmiNFWaKc2VEsWvBP4h404HlnOn E81eEZZ5p5fSW+mjlLL8O/3VDDyD1Rw8LyrDw/LwjGGZeMYp45UJykRlkjJZmaJMpTl5/sPiNd/4 v/V/5//e/4P/sv+K/6r/mv+6/0f/Df9P/pv+W/7b/p/9v6iZVe/676nZVX/3V/r/CHABPqALCFqm 1ehATCA2EBeIDyQEDA/zrgZSA2mB9EBGwBQwBzID1QJZgexATsASyA08FgABGBADeYH8QEHAGigM 2AJ2NVORO+BRsxUVBaoHigOPB2oEagZqaZmL5AAOKIG6gXqB+oEnH2YxCjQONAk0DTQLNA+U/GMs yhP0BqUgChYFqweLg48HawRrBmsFnwjWDtYJ+oJyEAeVYN1gvWD94JPBBsGngk/T6FWwYbBRsHGw SbBpsFmwebAk6A8Ggs8EWwRbBlsFnw22Dj4XbBMMBp8Ptg22C7YPdgi+EOwIjGAceBMMBP3bN+X4 RUVcDleXa8bd4EW+Kz+bP81f1+XrfLrWus5ChFBLGCmsEK5G6CJqR7SIKI0Yrs/Ul+hn63dHcpGm yEBkT47nIvI7cQJn5NI5A8GyccUErwnX6s9v8/Jf4fTEKpVL4VLypxM5hdVS82cROZXJafmjuYiQ Tf44VUrNf1mV0vI7s37S8ruE+svvxsqM/B6sNOX3YaU5vy8rM/MHs7Ja/ouszCL9xJNR5nD5nCt/ vIbfVUXrqaL0U1sPV1tFknmZOEBmJnG18sdoI5ygIXRXx9FLReivIgwJ9c/+Bi2VIIn5E7U2vVXb AartiL/tbZJmP0NbhVJ1lgPVlkPVWY5UEXQEIyl/stZyUMhOnX0uRc5/SZvFFM1uptbDMBVx1COI UzXLskf0YzWsaVUWmlfc5X77H3jFXe4+d4+7x7ziHqvdZ15xn8kPmFcwG+YVofMvq9ID5hV3Sdkl 1B/zirvc78wr7nKVzCvucn8wr7jLc8wr7vI884q7vO4vXhHC76qi9VRR+qmth6ut/uoVoRFO0BC6 q+PopSL0VxGGhPr/k1eE2vRWbQeotiP+trdJmv0MbRVK1VkOVFsOVWc5UkV46BWhloNCdn/xitAs pmh2M7UehqmIox5BnKpZlj2iH6thTauyqPIK3etC8v/dK4hVomAQDNQrBAOrJVKvEBKZnES9ImRD vUI9/7IqJVGvIFIS9QraH/UKUhqpV5AyhXoFKVOpV5AyjXoFKdOpV5Ay489eoeJ3VdF6qij91NbD 1VZ/8Qp1hBM0hO7qOHqpCP1VhCGh/h/1CrVNb9V2gGo74m97m6TZz9BWoVSd5UC15VB1liNVBM0r 1JaDQnZ/9gp1FlM0u5laD8NUxFGPIE7VLMse0Y/VsKZVWXD8/JtcBlfENeBKuDZcZ66U+MFYbjo3 l1vMreIquN3cIe4cd52r5JN4wBfxPv5phhYvniBlPfE4Ob5EfUt+htPJHzGphSa11KRWmvSsJrXW pOc0qY0mBTXpeU1qq0ntNKk9k0JjOsbGdJSNKaT5hGlOhWnOMM2nYZrPmeZsmOY803wRprnENF9X zbbOz5yuzi0m3SbSj2wkw9hI2N+HjGrE8fNOhP4GhNPN28/15nqK73BLuEXcYnGp+K64TFwurhBX /u9q/5+0183bR7z1b+3zmuZ9kzchb2zeuLxv877L+z7vh7zLeVdIi1msxSpxtbhGXCuWi+vE9eIG caO4ibS4mnct73rej3k38n7Ku5l3K+923s9kLWdwO/mR/Ax+Mb+R38+f4S/z93XxuhydR1dX10LX VTdAN1I3UTdbt0C3W3ded1eIFbIEl1AitCH3UEuENcKeiKQIEOGKqBExIOJ0xGV9uh7oa+ub6Vvr O+p764fox+in6ufoF+pX6Dfq9+vP6C/pr+vvROoi4yNdkU0iu0cOj5weuTByT+ThyOtRxqisKE/U mKjZUQujVkRdiq4f3Tp6YvTs6KXRW6IPRZ+Lvh5dGZMUA2KKYhrEtI7pGTMyZnLM7JgFMStiNsac jrkda4jNjZVi68d2je0XOzt2W+y+2DNx+XE14urHNYubHHc1rjLeEV8jvm58k/hW8R3i58evjz8Q fz0BJJQklCbsSbhoSDc0MAQM/QzTDRWGfYazhm8NNxLjE9MTixNxYpPE1onjExcnViSeSUpNEpPa JA1IWpN0OOlC0p1kT3KL5CHJ05OXJG9JPmeMNOYYbcb6xoDxeWNP4zDjROMcY7nxPeNh41njJeN1 4x1yqxibYgr5v9tPygh3gBxBSFPiJGWQHd9TNS6mcYVp3EzjDtN4mMYTpvEyjTdMIzGNFKZBTIPC NEVMUxSmqc401cM0xUxT/FAjv05nIc9/OAsX/TXzlOSQYzHlcEk24a+VczO5GtEyyb+PSC2plEvv X0TuCSpbOhFt3sP/cfDTXtIsnckRlfQgx5qWLuTYlrSIJhYmdy3WtjiX3oM4uGL/XoYaOptekkWk fM5teYGiZu8iR1dojJaOVFNCjzVDmmzaU8D/Pp1fSOOn9mn+3UyjjcjVmNTtriZ0jq6m5Fi95AWG Que0h7Z4aFtCx5pa0pVqS7rRv2cs6cxWhVrQO9jc7N2htbHQe7enuea5g+i4XM0pOkV0lTB7dr/k 8rO71AYu6jElZIb0jlUksy7iatP/SXG1ILjJ5KqT7HpGtWzJykCujpT1ueaWVqQsIevZmpXp2dsI UoPsCobH5pwbQfu3kCsG15z1/yyxRKQt3Zu7ROtXr9G5of89yRVInw0Y9rMqdqWKvZVYN7I8T5Gy N7Me4tR2nkf/i8bVlo2yJJcjZRPOb/lNRfpdRdrOfOA5un4WupZPZm9h2N0Y9iaKbSFXMYIVWqd2 ITxLe6ajV/7U0H/L+LeTM89wT/p3sLLE1Z7tZQeG0IFZ03n+wfaiAfMiA5fqoqvRyBVkVu20fkL8 vUr5y0cz3ya85RUmuTTJrUkeTfJqkqRJSJOKNKm6JhUz6SHfrlK+kV41vvHplG98VhXfeAOfVsW3 kET5xj9RxTc+ln+sim983J/49oDyjTdTvvEWyje+XjjfSNssyjfeyGdRvhHUML7x8Xwa5RsfR/nG pz7kGx9H+cZbHvKNr0H5VjUzxrcHlG9E8wjf+GTKNz6d8o2vRvlGUKr49uBPfLvP+PaA8e03yjey Ko/wja4N5Rvv4qtTvvFxlG98ehXf+Kwwvt3lHZRvfPG/4duvvIP7lfGNWrZkZQ3KN97GV6d8Iy0f UL6R8jfKN95B+cYXP+QbH0f5xlev4htv5m1VfOMf/yvfeAfDflbFrlSxCd94D+UbX53yjej+iW93 +WLKN17iH6d8Y0i/q0jbmQ9Qvv1G+cbbKd8IdjeGvYliU77xtcP4RvAo34juT3zja/J2yjdSFlO+ kb3swBA6MGuVb2QvHKp/E8/WjaNerhuv8ixANZRtVRrKNN12ehQaPrxOEo0rTONmGneYxsM0njCN l2m8YRqJaaQwDWIaFKYpYpqiME11pqkepilmmuKHGspSQaQsFWxVLCX3U7CKpSGJslSoV8VSwSS4 q1gqmB9lqZBEWSoUUJYKTspSoXE4S0lbG2WpkCvYKEuFeuEsFTIFSFkqmClLBfCQpYKZslRwPmSp gClLq+ZBWSokUZYSzSMsFSyUpYJIWSoUUpYSFJWlQtKjLBUSKUuFJMpSIZmylKzKIyyla0NZKhQL dShLBTNlqSBWsZTYaywlz11FlKWC7+9ZqhstFOlGU5Yyy5asxJSlgiTUoSwVfGQ9W7MymbJUKKIs JXgaSwUzZalQp4qlQoEgVbFUkP/KUqGIYT+rYleq2ISlQg3KUqEOZSnp4R9YSkbpoywVagkyZSlD +l1F2s584Dm6fpSlAqIsJdjdGPYmik1ZKtR/yFKKR1lKdH9iqaAIiLKUlD7KUrKXHRhCB2atspTs RRGbP93bTsxzyZOnwK6aMulH6Ewl9zwivRb+xG0ZQNbjuG6ucMDVmUhXhE+ERa4uRLolnBUWW2g0 YK5wxUW9/AAbbZKrKzn7ETlfbrlH+r0lvK/Ogn5tYLlwy9WdlFeEzcynU7kcVy9OL2wV1hKcg64e ZMfnCit1c109idVaYRPzrCwa+XDRbzQRVGJ7QLhGrC64+rJxkJorNI4LrlLW41Y1cpHD5bvo+H8Q 9goHstcS6ZpwmWD3I1ZLhMuu/qTcK3xaxT3XQFK/RkY4iKGc939AZnWF+UdWVXzIQr89dE34iq4I mfeLrHaZ4gtXLHQm18gIfyAjGc7kH+kZ11DS8ze05+ylBPEa64+wxTWMrehuMiLK9o9IOZicX8VG n0721+EaRVCuCBVsbcqYvIOM/Jr/QzoXoj3kGq1KH6utiD+6RhJLMgYypluuEeT8Vro2FrqiROvf T8qrwhLmDWPYum2tWgHLYFb/wvUS26ND8pPavhpd4wgq2U22zmMJ6hKyP1eqdtF/gNOTM5+RVgf8 B8nZd4V1ZH3GE+ky3TX2a3KIrgP1l5BHWLqH/MPSh5UH2IgmqCOi8mTS+w/qapn8H5HWm2kProlE v9I1iRw3U7vsFUS6pa3qFLbja8n+HWb7eyC7nO0jRZxKpCNMmhY6x/gxhPnDvofxLtfLzA+vkr6m s/Hs83/MbA64ZrLVC83AmL2ezXo7Hb1rBl1pYWXV7PxHQj1YBrLeQ+uU5aJRw8XMh6+4XmE+fsU1 m1hsYKyjETTyLOR6lVgtYn570DWH4FL5YC6d2duMi6+xFSY77JrHdpXFXlxzSau9ZI3eJf3RuWQy 3tBvUa0l/R0PjS57FbFaK+xivH2djeCApR/b730hBvuPEvS1bPbz2ex3MQ6oEUiuyNKfabe43iSt tgu7XAup9wonXItC7HMtIPPZ6XqLHHdp3Ho79Eth6cvKW6532J6FfhmWsN4P+I+RK+9c9VdkMfMw uq5LGepBbX3or9Ig5oubhe8I0ruqL15zLWN7dMW1nK38UdcKhru2ykezyRoTbzzGZr6SzZGwPZuO 5LLqPVnZy9jO091ZTSxWMQ6tYqxkY82dysZ/0LUmNB91BuWsds1F+iK7q87Lfzw0ctc60v6gxpQT bOxrmGfSPthvh2s98/WHHriBjeM0ObOR7dFWVwUpT5HfiE20FBarrNzC0A4I68k46VXpAvPoUtW7 w56DhBr0OYhcF9pVXRfciVxE4kyDP5Y9ZbjJVSD2DSaRK37U8Sq9hfxKRV/QD4zh2LlkLiJ+WuyR qAesZtRqbNfcKcR2L7V1p3IRhiNVrXLJ70DceK2ntEdq6VxE5LqqWvZHnC7xKpMOkfEEWesJRGrB dAc5XfRJ1qoep4tkscfccWS0w7TxZZB+bQm9o+5z/IRLXC1uOLeC28Ht545xZ7lL3HXuDs+Rp6BU Poe3kjvo2nwDvoRvw3fmh/CT+Tf4Nfxu/hB/ij/Pf8/f5O/rInQGnUkHdA5dsQ7rGula6Nrp+unG 6ubolum26fbpjujO6C7r7gvxQo7gEeoK/YThwvjwK7RIOM415JqIs1nZXJxFVqohN4Acm3AD2bP6 38aPdTM4nXyISbOqJOFZTXpOk4Ka1FaT2mvSC5rUSZO6aFI3TeqhSb00qc/ftBigSYOYxMYujKCy MPJh5FkoY5rRYZqXmGZsmGY800wI00ximslVsWzhttbbKk1ao0nlmrRekzZqUoUmbdGkbZq0Q5Pe 06TdmrRHkz7QpA816WDYzI+xER8Pm8NJpjkVpjnNNJ+GaT5jmrNhmnNM80XVzHNHVvWWO0qTyh72 +78U2Q/z47yTnJDnyHPnnWKllEf8lZQtydGd14ocpX/3HiB3RGgGY4/wK4XWQgehs1AmLCD3MWeF OxGpEVJESUTviMkRb0SsiTgUcS7iekSl3qDP1Xv0WF+i76Dvpx+rn61fot+oP6K/oL+hr4w0ROZE uiJ9kc0i20WWRpZFzohcGFkeuTvyWOSFyBuRlVGGqJwoV5QvqllUu6jSqLKoGVELo8qjdkcdi7oQ dSPqdtTdaC46IjonunZ0m+hh0XOjK6JPRd+MiY+xxtSKaRLTPWZ4zPSYhTHlMXtiTsRcjLkZy8Um xYJYKbZubCC2d2xZ7IzYhbHlsbtjj8VeiL0RWxlniMuJc8X54prFtYsrjSuLmxG3MK48bnfcsbgL cTfiKuMN8TnxrnhffLP4dvGl8WXxM+Lnxy+IXxq/Ir48viL+WPz1hNgEa0KDhM4JYxMWJ7yXcDbh asJvBpPBZqhtaGZoZ+hnGGOYZVhsWG/YYzhluGS4nahLzEp0JfoSmyW2SyxNLEuckbgwsTxxd+Kx xAuJNxIrkwxJOUmuJF9Ss6R2SaVJZUkzkhYmlSftTjqWdCHpRlJlsiE5J9mV7EtultwuuTS5LHlG 8sLk8uTdyceSLyTfSK40Gow5RpfRZ2xm7GwcZBxvnGNcaqww7jeeNn5r/CUlIiU1RUwpSqmf0iKl c8qglPEpc1KWplSk7E85nfJtyi+pEampqWJqUWr91BapnVMHpY5PnZO6NLUidX/q6dTvU6+m3k+L TctMs6XVSmuU1iatd9rItDFps9IWp61P25N2Iu1i2s10Lj0pPTfdk47TA+kd0wekj02fnb4kfWP6 vvRT6ZfSb2foMowZIEPKqJsRyGiV0TWjd0a/jEEZwzJGZkzPmJUxN2NhxtKMVRnlGRsztmXsztiX cSrjUsb3GVcz7mdUmnQmoyndlGnKMQFTvslmcpmKTbVMPlN9UwtTa1N3U2/TANMQ00TTVNMs0xzT fNNC0xrTRtMW0w7TbtM+0wHTYdM50wXTJdP3pqumG6bbpjum+6ZKs84caY43J5lTzSZzltlhrm2u a25h7mzubh5mHmkeYx5vnmyebp5tXmLeaN5i3mHeY95vPm0+Z75qvmG+bb5jvm+uzNRlRmbGZhoy jZnpmZmZOZkgMz/TlunKlDKLM2tl+jLrZjbIbJTZLDOQ2SqzTWa7zI6Z3TPJdd690L3Y/TbHu9/i 4i2jc0FuXsGqgorCGJvBbnE4nbX87/rXcYbsCZYxlim5HQpWF2y2Jdkfc7idteUX5F3+Zf715OxE y0uWqbkvFKwp2GIz2qHD6/TJHeXd/uX+DeTsJMtYy7TcjgVrC7baUu15DuTEcif5ff8K/0ZydrJl nGV6bqeC8oJttnR7gaO6s67cWd7jX+nfRM5OsYy3vJzbuWBdwXabyV7oeNxZX+4i7/Wv8leQs1Mt EywzcrsUrC/YYcu02x01nQ3krvI+/2r/ZnJ2mmWiZWZu14INBTttWXan4wnn03I3+QP/Gv8WLiF7 umWSZVZut4KNBe/ZcuxuRx1nI7m7f61/Kzn3smWy5ZXc7gWbCnbZcu1eh+xsIvfwl/u3cdEF6dYu hVNs8+wrHFucH5SkEE2GtWvhVNt8+0rHVuf+klQuwTIqb1SBydqtcJrtdfsqxzbnh+6n3Q1L0rg3 iLXZ2r1wuu0N+2rHdueBknSiybT2KHzZ9qZ9jWOH82BJBtFUs/YsnGFbYF/r2Ok8VGLiogqyrL0K Z9respc73nN+RCyyrb0LZ9kW2tc5djkPl2QSixxrn8JXbIvs6x27nR+TusVaWjjbtti+wfG+8wip 51r7Fr5qe9u+0bHHeZTUH7P2K5xjW2Lf5NjrPEbqwNq/8DXbO/YKxz7ncdIDtA4onGtbat/s+MB5 oqQJsRCtAwvn2d61b3Hsd54k9TzroML5tmX2rY4PnadIPd86uPB123L7NscB5yfEm8ryRhcUWIcU vmFbYd/uOOg87W7kbswtINhW69DCN20r7Tsch5yf+neStoXWYYULbKvsOx0fOc+Qus36YuFbttX2 9xyHnZ+Rut06vHChbY19l+Nj51lSd1hHFC6yrbXvdhxxfk7qTuvIwsW2cvv7jqPOc6Tuso4qfNu2 zr7Hccz5Bam7rWWFS2zr7Xsdx53nuSjLRmvjwr62UfYZjgXOlaS+ydqksJ+tzD7T8ZZzFalXWJsW 9reNts9yLHSuJvXN1maFA2xj7K84FjnXkPoWa/PCgbaX7LMdi51rSX2rtaRwkG2s/VXH285yUt9m 9RcOto2zz3Esca4j9e3WQOEQ23j7a453nOtJfYf1mcKhtgn2uY6lzg2kvtPaonCYbaJ9nuNd50ZS f8/asvBF2yT7fMcy5yZS3/V/2DkT6Ciqbt+fpKGH6qmqOnNSp5PQp7tmklAECFUFBojIkEJExDAp KGJQVD5FRUVARUVFRURBQUEmGSJjRMSAAQKEeQoQIUCAMAcIiBAR3w7q8/Mu1rrfut9b9933livr l+p/9amqfc7eZ3fVXt2H7ymMEN+QJstzlGWgS/j7hBfEN6Up8lxlOejVfC/hRXGc9In8pVIMeg1/ v/CS+Jb0qTxP+Rr093yBMFJ8W5oqz1dWgC7lewsvi+9I0+QFyjeg1/J9hFHieOkzeaGyEvQ6vq8w WnxX+lwuUsA/wfV8P2GM+J40Xf5KWQW6jO8vvCK+L82QFynfgd7APyC8Kk6QvpAXKyWgN/IPCq+J H0gz5SXKatCb+AHCWHGiNEteqqwBXc4PFF4XP5Rmy8uU70Fv5h8S3hAnSXPk5UopZCN4Bmz6SdPP /s5Pf+env/PT3/npf1h+ahRZE9kcqYicu5WX/sxRf2St6OALwRf/zld/56u/89Xf+ep/QL5yRDL4 l4UvxMVSqbxDOQQ6kx8lzBSXSGvlnUoV6Cx+tDBLXCqtk3cph0E348cIs8Vl0np5t3IEtMa/IswR l0tl8h7lKOjm/KvCXLFY2iDvVapBZ/OvCV+KX0sb5QrlGOgW/FhhnrhC2iTvU46Dbsm/LswXv5HK 5f3KCdCt+DeEBeJKabN8QKkBncO/KSwUv5W2yJXKSdCt+XFCkbhK2ir/oJwCrfNvCV+J30nb5IPK adAG/7awSCyRtsuHlDOgTf4dYbG4WtohVylnQbfhxwtLxDXSTvmwcg50W/5dYan4vbRLPqKcR1Tk jkhJ5EjkGv+esEwslXbLR5VaaJXLvy8sF9dKe+Rq5QLodvwEoVhcJ+2VjykXQbfnPxC+FtdLFfJx 5RLoDvxEYYVYJu2TTyh1oPP4D4VvxA3SfrlGuQz6Tn6SsFLcKB2QTypXQHfkPxK+FTdJlfIp5UfQ d/EfC6vEcukH+bRyFXQnfrLwnbhZOiifUX4C3ZmfIpSIW6RD8lnlGugu/CfCanGrVCWfU66D7sp/ KqwRt0mH5fNKPeh8fqrwvbhdOiLXKj+DtvhpQqm4QzoqX1BugO7GfyasFXdK1fJF5RfQd/OfC+vE XdIx+ZJyE3R3frqwXtwtHZfrlF9B38PPEMrEPdIJ+bKKQPfgvxA2iHulGvmKGgX6Xn6msFGskE7K P6rRoHvys4RN4j7plHxVtYG+j58tlIv7pdPyT2oj0L34OcJm8YB0Rr6mNgZ9Pz9X2CJWSmfl66od dAH/pbBV/EE6J9erDtC9+XnCNvGgdF7+WXWC7sPPF7aLh6Ra+YbqAt2XXyDsEKukC/IvKgW6H79Q 2Ckeli7KN1U36P58kbBLPCJdkn9VPaAf4L8SdotHpToFqV7QD/KLhD1itXRZiVJ9oAfwi4W94jHp ihKt+kEP5JcIFeJx6UfFptKgH+KXCvvEE9JVpZHKgH6YXybsF2ukn5TGKgt6EL9cOCCelK4pdjUA +hG+WKgUT0nXFYcaA3ow/7Xwg3haqlecaizk7UcjP/ErhIPiGelnxaXGoahuadCqkP9GOCSelW4o lBoPegi/UqgSz0m/KG614bPrMf5b4bB4XrqpeNRE0I/zq4QjYq30q+JVGz65hvLfCUfFCzJSfGoy 6Cf4EqFavChHKX41BfST/GrhmHhJjlZolQMrnopc59cIx8U62aYwKoYWw/jvhRPiZbmRwqpBsGow 7PsHXyrUiFfkxkpATQX9NL9WOCn+KNuVGLXB6mf4dcIp8arsUGLVdNDD+fXCafEn2anEqU1AP8uX CWfEa7JLiVdDoJ/jNwhnxesypSSoBPTz/EbhnFgvu5VENQx6BL9JOC/+LHuUJDUC+gW+XKgVb8he JVnlQb/IbxYuiL/IPiVFFUC/xG8RLoo3Zb/CqSLokfxW4ZL4q0wrWJWgly/z24Q6CcmMElTlbg0W juK3C5elKJlVUlUF9Gh+h3BFipYDSpqqgh7D7xR+lGxyjJKuNgX9Cr9LuCo1kmOVJmoG6Ff53cJP UmM5TgmpmaBf4/cI1yS7HK8QNQv0WH6vcF1yyAlKWG0G+nW+QqiXnHKiElE10G/w+4SfJZecpPBq c9Bv8vuFGxIlJyuCmg16HH9A+EVyyymKqLYA/RZfKdyUPDKnSGpL0G/zPwi/Sl4ZK7LaCvQ7/EER ST45qChqDujx/CExSvLLqYqqtgb9Ll8lRku0nKY0VXUUFYTP7ch7ke8jWyL7ItWR8/xhFJ0alWpH UdxaFBWZCX7vBq/h0yTVxZ8VG0sBOaRkqW1gfwHc4e4LHkU2bl3wWLfeoHYFT8D/rcEfUBR/FVr0 gXP5+euwb1vwEOyDbJbq4WtFpxQnR5Tmai5c++PIpsieyOHImciP/Ek4phe0g6yY6uTPiI0kVm6i ZKom7LsMtjbck0yMrI/siPwQqYlc4o9B+3uAnigqdQy0uQYWzwJrS2FfPrJFVkeORupRlBANx+4H K/YGGz5VJkTWRrZFDkSORy7wR6Hl/bDvg8i6yPZIZeRE5CJfDa23QOs9wRp4tRvenRTZENkVORQ5 FbnMn4Dr/ALv7gweh2MfgBYwYt0Su/VA9sjkSHlkb+Rs5Cp/Cnru429C218BsEFKBBtHgW2r4SgL +kfx50S7FCMTpZnaFtrcgP13A92BgWCzDbb9oH0ZHPcyvE6FNj+DXoOiI7P5S6AuQisE73SFLeTJ VC9/QXRJ8TKvZKvtwOq5QmPRLSXLotJS7QAWVwhRMAPej5RGtkb2R45Favkj3frCcQ7+tGiTGDld yVANOF9nOPajyMbI7khV5HTkCg+jkJoG17sCvUiAbR206Q/n2x6Ee4ZUN39edEixcljR1DvgyDlC I5GSkmRBaaG2h9GphKNHo2hufRDGtdu90OJLwS56pBRZUlqpeXCeHcGGe4sPI2WRnZGDkZOROh5G NuIAnIALoAA34AG8gA/wAzSKCoPPw9cBGOMwjE8YxjH8CwBjH4axj8AIRaIABmCBABADxAIQFxEY 50gjoDFgR9Ftytps+Ov/IUVRU0MnQ6dCp0NnQmdD50LnQ7WhC6GLoUuhutDl0JXQj6GroZ9C10LX Q/Whn0M3Qr+EboZ+JYhEkWhiI41IY2InDuIkLkIRN/EQL/ERP6EJQ1gSIDEklsSReJJAEkkSSSYp hCOYBEkqSSPppAkJEULCBB4LiEBEAg96BBILaUoySCbJIs2IRpqTbNKCtCStSA5pTXRiEJO0IW3J HSSXtCPtSR7pSO4inUhn0oV0JfnEIt3I3aQ7uYf0IPeSnqQXuZ8UkN6kD+lL+pH+5AHyIBlABpKH yMNkEHmEDCaPkkIyhDxGHidDyZPkKTKM/IM8TZ4hw8mz5DnyPBlBXiAvkpcIPJuQUWT0rV+nvEbG ktfJG+RNMo68Rd4m75Dx5F3yHnmfTCAfkInkQzKJfEQ+JpPJFPIJ+ZRMJdPIZ+RzMp3MIF+QmWQW mU3mkLnkSzKPzCcLyEJSRL4ii8hisoQsJcvIclJMviYryDdkJfmWrCLfkRKymqwh35NSspasI+tJ GdlANpJNpJxsJq+SLWQr2Ua2kx1kJ9lFdpM9ZC+pIPvIfnKAVJIfyEFyiFSRw+QIOUqqybF//nXN 7X4/Q66QH8lV8hO5Rq6TevIzuUF+ITfJr2EUjgpHh23hRuHGYXvYEXaGXWEq7DZFUzJlUzFVs6mZ YWaaWWYzUzObm9lmC7Ol2crMMVubummYptnGbGveYeaa7cz2Zgczz7zT7GjeZXYyO5tdzK5mvmmZ 3cy7ze7mPWYP816zp3mf2cu83ywwe5t9zL5mP7O/+YD5oDnAHGg+ZD5sDjIfMQebj1qTrI+sj63J 1hTrE+tTa6o1zfrM+tyabs2wvrBmWrOs2dYca671pTXPmm8tsBZaRdZX1iJrsbXEWmots5ZbxdbX 1grrG2ul9a21yvrOKrFWW2us761Sa621zlpvlVkbrI3WJqvc2mxtCdWQ+8gT5E4CeWfIArSP253a JbELt4fbG0zhKrh93P4gZ2VyB5v3aHSZq+IOc0e4o8Fg8yFWU+54YDpXw5202nOnuDPcWe4cdz6Y amVYAlfLXQimcxebz+IucXXcZe6KlcVd5a5bzbgb3E0rm/sVIxxltcKNcGPLtFpjJ6awG3usnGCo +XnsxwxmcQDHaJNwPE7AiTgFcxhbOg5mh5vn4DTcBBMcxnwwHITHfCxiifoey1jNvjMo4AycibNw C9wK69l9sYFN3AbfgXNxO9whtavVFufhO3FHfBfulP0y7oy74HzcDXfH91h3ZI/HvfD9uAD3xn1w X9wP98cPWLn4QTwADwzK+CHtGzwID8aP4iEWwo/hx612+An8ZPbqoIKfsjrgYfhp/AweHiMFVfws fg4/b91pdcQv4Bezb+DR+BX8qiXhsfh1/FaLNKsFfrdFuPMwPLHzRHa+djzYyhLxZKulpVhG/k6r jSUH21jN02a2GG7lWZrVybrLUpvnBDu0KHWEHUpil+Y5juPUULoydjb4bF7UK0ZnvV6/od80kBFt 6IZptDVS9Af1n/Vf9F+NKMNmNDLshtOgDI/hM2iDNWKMOCPBSDI4I2ikGU2MkEGMsAEPaYZkqEam oRktjJZGKyPHaG0YRhvjDiPXaGe0NzoYeUZHo4txl9HJuNPINyyjq9HYcBguw214Db/BGAEj1og3 Eo1kAxupRrohGKIhG4rR1MgwsoxmRnMjW7+of6ZP17/QZ+lz9KP6Mf2E/r3+uT5Dn6nP1ufqX+rz 9YX6V/pifam+XP9a/0b/Vv9OX62X6uv0Mn2jvkkv1zfrW/St+g59t16hH9AP6of0Kv2wfkSv1o/r NfpJ/ZR+Wj+jn9XP65f0Wv2Cfk6fpy/Qi/RF+hJ9mV6sr9BX6qv0En2NvlZfr2/Qt+nb9Z36Ln2P vlffp+/XK/Uf9N56H72v3k/vrz8AY/kZWDgdbPwCrJwFds65Zek8sHUBWFsE9i4Ci5eAzcvA6mKw ewVYvhJsXwXWl4D9a6CXpXC9dXDFMrjmP/ek4fo7blmw+5YNFbesOHDLjj97dxT6dwx6eOIvfTwH vWzo40Xoaz34/AZ4/Sb4HYHno2/5vjF43wH+d0EEuCEGvBAFfogDBiIhALEQC9EQD/GQCBGRbKRA VGCIi1SIjPS/xEaDL6Vb3lRv+TPzlke1Bp/+U7zoEDEmxEzbv0TNnRA3DVHTGaKna0Pk6HX6Zf2K 8ahRaAwxHtMfNR43huqD9R/1q/pP+jX9utHNuNvobtxj9DDuNXoa9xm9jPuNAqO30cfoa/Qz+hsP GA8aA4yBxkPGw8Yg4xFjMMyFudG1vetRI/QigqdT5ESuPm7kRh7kRT7kRzRiUCEKNKwzcGu9+gSU iJJQMkpBHMLoSZSKnkLpqAkKIYLCKIJ4JCC4QUfwYIZU1BRloEyUhZohDTVH2agFaolaoRzUGunI QCZqg9qiMSi3D4Xaow4oD92JOqK7UCfUGXVBXVE+slA3dDfqju5BPdC9qCe6D/VC96MC1Bv1QX1R P/QwegAd/++eyajdvzeX0Wg0Fg2FsXsKPYFeQpP/35jbaB6qRJvRdvQx2oQWoGK0Gw1Gj6K96Af0 CBqFZqJv0Rq0AW1FO9F+dAitR1vQDlSBDqK1qBytQ4PQKYgyP2Kiut6KnHSIuNGoHYzEGHQc5f41 c/RxQNwVooFw1MNoZB8KInIoxGdDVJoQMf3A63+Mng9NRtPQKnQApeoDUBCl6QP1h/SH9UFoamh8 6F39EYgxxy1LnRDfLojqJugxvVAfoj+mP64P1Z/Qn9Sf0kfoL+gv6i/pI/WX9df0sfrr+hv6m/o4 /S39bf0dfbz+rv6e/r4+Ab2MnkHD0XO3nQ//lRnwX4j6v7Pq/+msGnqnUYJJmUHTbXp+y7CoP6JQ Y/QJmoI+hcj+wkxFp9ALf+Rd2D8w9HZoemgGmhWaGpoW+iz0ufEUqoGoTYV4gyP1T0ysf9ooQZ+i TzTTzHT9Uf1Zk+ijzSb6KH2MGdIno+d/z92v6FP1aX3s/04ON4ahx/Xh+qv6h/ok/QP9I/1jfZj+ D/1p/RnjCeNJyPCzUdbtfjn/r+673fPB7drBlWbCqJ2KHpEaJpvDn4KW/7uuXFgKV/oX1x+47boD t1l14PZrFxRuQyPCarhpWAlL4YxwZjg1nBZODzcJh8IkHA5HwnxYCGeFm4XlsAZ//2pLEVplwLZB i9A+89aR8m2P+dfOmQnn0W6d+XZtGq4hw1kaztVwnoZjbt9OBuAPer4lajTtYy+nzGQWMsNjTyQ3 ZVZoVHxq8gamW8ybiUtT+mhu5lnNk1LPbA9kprWKORJzPWWz5tV88TzdhX5I88cV0F2ZuRodyNKY +HqN1QKJAwPfBKbHXEu8znrZh2OmcSe0GC02vhm9ga5OvRpzQouLfTohJvFGUnrywuRv2Me1eC0h pibWoSXS/QNW7I8J0wJzA4u0JDYvMCIOpa3WkmNsWorG0RUp99Lr02axK9kfNRw7MH59/I2EqsS3 k7ak+FNqEttpwQQ/PYhezDwdsyZmelyclhpfnbw+JSGlLzMwUM6+y1Ylvx53OLEH84yWlu6P/Tju WLyHLo7ZoaUn76bPBhJjHk6cn/RczHmtSfwaLcSF6KeTTsZOZpMSJRZrBIY9ktyS+TawQePZVbGv xsXEn9CEhF70JE3EcWkfalLaosBWZgfbRJNjd6e9Hh9MakPb6YXMMjYqxortoClxD8aLSV2TmzND kqLZZE3VmqaNjfsquY55Pn5GspzsTRkS2BUzJ61XQrfks1yTwOT41loGGwrkx3aMfT2BSnoy6ZPk /vFeLVPLos8zxVqzwIuB9zQttjp+V0J14taUHqmnteYJExPbaNlaC7ZZQmNmfspjLGGfjX0h4SO3 FZgfOxFnMzlay8DghDeZ59gvAwfi3kv2BS4nfpo8Nm2Q1oqdrOVorRN6BLZoOm7PfK0Zya7k0UkH OT/dJ60k7igXiOkeUxnb0vNUXN80exybdJfWhlXif9baJg1JuhBwJjwbE8d+ECjU7kh6KvEtzhb3 ScrTgf5artYusUhrr3WIbwwfBlO1PDxUuzNtuNYx7c3A43S6dpfWKT43sDc5oHXWusSH2NTE/Un3 aV0TWmv5dGYiFdtfs+L8Wjd2XmL7pLzEFtrdtCtFTJia1DHwQUxRkkY3TVtOO7TuifXaPf5RWg/6 +bjYtInMYu1erSddFu9LPsUJ2n1ar0A77X6tIPYwvUbrnSbFfBX/fNp38U6tj78udjGKKixH0bd+ 7Rmd8opmIhv9dVzrpFMwP1aivQ0rlt5aZ3VhxlcZizOWZiz/y9qqDSur/mfrqv57q6rWZVz5y3qq f66m6sh0ZbozvZn+v6yc2rBu6n+2auq/t2Zql8z8v6yW+s9rpTbOWJBRlLEoY0nGsoydGZcyLmf8 mHEj057pzKQyPZm+TCmzc2bXTCuzZyadGZ8ZnVGc8d0f66tmrMlMavtvrG8I/loRlc7tDib/tW7D HQhi7iB36M+6DVfNHW+o2XCnuNN/1myCaX9UbP6o1zRUa7gbwSbczd9qNQ2VGmzHDuzErt9qNdgb DP1ZqcGxv1dqkn6r1eBgkNyuToNlrGAVN/3fdZpmWMMtcEvcCrfG+u/VmrZ/1Gv+rNU0VGqCIs7H 1m/VGnzvH7WaoPRntebPWg0ehB+5VaspxEMaajUNlZqGOs0fVZo/ajR4REOFBo/EL+NRv1Vpgk3x aw11mmAGfgO/FczEb+N3gln4XfxesBl+P6gFm+MJ+INgNp4YbBFsiScFW+GP8Md4cjAHf4KnBlvj z4J60MDT8Qz8BZ6D5+IvgyaeF2yD5+MFeCEuwl8F2+LFeAleipcH7wjmBtsF2+OV+Fu8CpfgNbgU r8Xr8KZgB7wFb8Xb8PZgHt7R6Al3netR71i2JLmOO9T4OXDAs55cXyoeSdcygxPmpqyLe8K7NJgW mBZsGl8Q1ynJyVXbRwWxI8qhJ96T8LRjEMPG/urY4XzJGXEdiuuK7fHNPDS+19vcu6fxfp+a8DUe 4atPfCvxScgIxbY77G/Y37a/Z59o/9j+qf1z+0z7XPsC+yL7MvsK+yr7Gvs6+0b7FvsO+x77fvtB +xH7cfsp+zn7RfsV+zX7DQdyNHI4HR4H7YhxJDhSHKmOkIN3yI4Mh+Zo6dAdbR3tHR0dXRzdHD0c vRx9HA84HnIMdjzmeNLxtOM5x4uOUY5XHW843na855jo+NjxqeNzx0zHXMcCxyLHMscKxyrHGsc6 x0bHFscOxx7HfsdBxxHHcccpxznHRccVxzXHjVu/9qCcPifrjHMmObEz3Rl2ik7VmeXMduY4TWeu M8/ZyZnv7O7s6Sxw9nMOcA5yFjqHOoc5hztHOEc6xzjHOsc5xzsnOCc5pzinOWc4ZzvnOYucS5zF zpXOEmeps8xZ7tzm3OWscFY6q5zVzhrnGWets8551VnvvOmKdtldlMvnYl1xriQXdqW7wi7Rpbqy XNmuHJfpynXluTq58l3dXT1dBa5+rgGuQa5C11DXMNdw1wjXSNcY11jXONd41wTXJNcU1zTXDNds 1zxXkWuJq9i10lXiKnWVucpd21y7XBWuSleVq9pV4zrjqnXVua666l03qWjKTlGUj2KpOCqJwlQ6 FaZESqWyqGwqhzKpXCqP6kTlU92pnlQB1Y8aQA2iCqmh1DBqODWCGkmNocZS46jx1ARqEjWFmkbN oGZT86giaglVTK2kSqhSqowqp7ZRu6gKqpKqoqqpGuoMVUvVUVepeuqmO9ptd1Nun5t1x7mT3Nid 7g67RbfqznJnu3PcpjvXnefu5M53d3f3dBe4+7kHuAe5C91D3cPcw90j3CPdY9xj3ePc490T3JPc U9zT3DPcs93z3EXuJe5i90p3ibvUXeYud29z73JXuCvdVe5qd437jLvWXee+6q533/REe+weyuPz sJ44T5IHe9I9YY/oUT1ZnmxPjsf05HryPJ08+Z7unp6eAk8/zwDPIE+hZ6hnmGe4Z4RnpGeMZ6xn nGe8Z4JnkmeKZ5pnhme2Z56nyLPEU+xZ6SnxlHrKPOWebZ5dngpPpafKU+2p8Zzx1HrqPFc99Z6b 3miv3Ut5fV7WG+dN8mJvujfsFb2qN8ub7c3xmt5cb563kzff293b01vg7ecd4B3kLfQO9Q7zDveO 8I70jvGO9Y7zjvdO8E7yTvFO887wzvbO8xZ5l3iLvSu9Jd5Sb5m33LvNu8tb4a30VnmrvTXeM95a b533qrfee9MX7bP7KJ/Px/rifEk+7Ev3hX2iT/Vl+bJ9OT7Tl+vL83Xy5fu6+3r6Cnz9fAN8g3yF vqG+Yb7hvhG+kb4xvrG+cb7xvgm+Sb4pvmm+Gb7Zvnm+It8SX7Fvpa/EV+or85X7tvl2+Sp8lb4q X7WvxnfGV+ur81311ftu+qP9dj/l9/lZf5w/yY/96f6wX/Sr/ix/tj/Hb/pz/Xn+Tv58f3d/T3+B v59/gH+Qv9A/1D/MP9w/wj/SP8Y/1j/OP94/wT/JP8U/zT/DP9s/z1/kX+Iv9q/0l/hL/WX+cv82 /y5/hb/SX+Wv9tf4z/hr/XX+q/56/006Gu4+KdpHs3QcnURjOp0O0yKt0ll0Np1Dm3QunUd3ovPp 7nRPuoDuRw+Ae+dCeig9jB5Oj6BH0mPosfQ4ejw9gZ5ET6Gn0TPo2fQ8uoheQhfTK+kSupQuo8vp bfQuuoKupKvoarqGPkPX0nX0VbqevslEM3aGYnwMy8QxSQxm0pkwIzIqk8XAXShjMrlMHtOJyWe6 Mz2ZAqYfM4AZxBQyQ5lhzHBmBDOSGcOMZcYx45kJzCRmCjONmcHMZuYxRcwSpphZyZQwpUwZU85s Y3YxFUwlU8VUMzXMGaaWqWOuMvXMTTaatbMU62NZFm5VWcyms2FWZFU2i81mc1iTzWXz2E5sPtud 7ckWsP3YAewgtpAdyg5jh7Mj2JHsGHYsO44dz05gJ7FT2GnsDHY2O48tYpewxfAEUsKWsmVsObuN 3cVWsJVsFVvN1rBn2Fq2jr3K1rM3A9EBe4AK+AJsIC6QFMCB9EA4IAbUQFYgO5ATMAO5gbxAp0B+ oHugZ6Ag0C8wIDAoUBgYGhgWGB4YERgZGBMYGxiHoqJfAF5FUcG7YLsNKAe2AtthX0fYzgRmATuA YmAk8DHwMjAZRdl8gB+gAQZggQAQA8QCcUA8tB0NjAG+A74FSoBXgJ3wfgKQCCQByUAKwAEYCAKp QBqQDjQBQgABwkAE4AEBEAEJkAEFUIGmQAaQCdeaC3wJNPT7beAN2J8FNAM0oDmQDbQAWgKtgByg NaADBmACbYC2wB1ALtAOaA90APKAOwEYOxuMqa0T0BmuNQ/GE/ZHzwc+Aaaj6OhN0VPg1efA1N/3 bga2ALtQVJuG92YARcACYCHs6wZnowA36FGw9aCoptW/eSW1ALZfAF8B0+A9O2xf/723bwFvAh8B X4MlLwFgWbDBm+uBFXAe6FXwZ6DhewPQ8+hvgJW/HatacP7wn9Fy6zr/IVqgR///Rcum/xAxn/9f ipgG/4HPohcB8DwZ/eLv/r8IfAbA2NvAJzYYe9sc4ChwDDgBfA9tJ8G2wXaIJxv4yDYbgP7ZoG82 OL8NYssGcWODc9uWAssBiBMbxIANxt8GfrCtBkqBdUAZsBGA8bFBDNggbhtWALFBLNjA97bdQAVw ADgIHAKqgMPAEQBi1nYcqAFOAqeA08AZ4CxwHrgEdr8GjP19ptYCF4BzwGXgClAHwDjZYH40rIZi g/GxLQGWARB/NohrG8SwbRUAMWRbA6wFIOZtGwCIYRvErq0hrmDO2fYAe4F9wH6gEvgBRXFwDg7G gQP/cuBfDvzLgX858C8H/uXAvxz4lwP/cuBfDvzLgX858C8H/uXAjxz4lwP/cuBfDvzLdQG6AvkA zC+u4VtldwPdgXuAHsC9QE/gPqAXcD8A85zrDfQB+gIN34nqDzwAPAgMAAYCDwEPA4OAR4DBwKNA ITAEeAx4HBgKPAHAUwn3FDAM+AfwNPAMMBx4FngOeB4YAUAe4CAGOYhJDuY4B/Oba/guF8xbDuYt B3OVe/X3/PPm73kMYi56zp+57FZea8hV4K9oiLlo8Fn08t/ykw3yoQ3GxwZjY2vIeTAmNhgP23jg PWAC8L/Y+w4wKaql7VPn7M5sXnLungGGIXcYThO3p0dAEBWGJcoAknPOOeecc845iAQFREByFhAk 56CCIpJElK/O7KzAvcv9/PR/vPo/Pj4vsuzsbJ86b1W9dbq6Bq+bof0Y2o6h3RjajKG9xPQlhrZi aCeGNmJoH4a2YWgXMY+JoT0Y2oKhHRjagOHaGa6b4ZoZrpfhehmul+F6Ga6X4XoZrpMJf8N1MeQj wzUxjAkM/ZJhXGCjEGMQ4xATEBMRkxDC7zDmMoyBDOM5E3EZ4zybiRDxEPeV4Z4y3E+Ge8lwHxnu oZglxXDvGO4bwz1juF8M94rhHjHcH4Z7w3APGO4BQ/sztD9D2zO0PUO7M/QbhrZnQ1/kFDeunV5I yjMilov4L/KPG2NYGOYRij5N0SfcyFc38tWNfHUjX90Y29witrFQ/hDxGH2fYhyg6EsUfZhivFHx +lW0tYprUNHeKq5DRZuruBYVf7eK61HR9iraTB2ZpC6CqgNtR3FfKdqP4t5StCGdmBSzKPotxbhD 0W+piGM7k363hX6limvB2EExdlCMHRRjB8XYQTE+UIwfFOOFhZyykFMWxgILeWUh71SRVzGOUIyd FOMHxVhCMZbQh/i92cGnlUDFmGqhHSzB0UeIx4gfEZgbKeZI+gzxM+IXxHO0DUEAgibZiYXhz2Is VZGDFnLcwrhkIc8t5LmK8VZFfqoYQ1SMHRZy3PKH+F4+xHl/iPeJIe5XDvE/md/VQxyvEeJ5zRDX a4f4XifE+Xoh3jcIcb9RiP9NQj7QLOQHLUK+0CrkV21CXGsX4luHEOde5x/JXOz1Eh/7vsTJAS/x cvALbqboR6NDvjQ25E/j/4NPTQv5VbJPzUryMQdqBAdqBAdqBAttZ6HtLLSdhbazhO1EzhT5UORN kRNF7hR5UeRPkRtFDk3OjyK/iBwpcozIkyLPiFwpco3IlyLfiJwpco7ImyLviBgmco/InyL/iBwq cpDIoyIPiVwqchFyOphTRU4SeVXkJZFbRW56XX5NzlkizybnLZFvk3OXyLvJ+Uvk31AOSzEPC50g crHQCiIfC73wupws8q7Iy8l5WGgPzNHBHBzKxxZy0kJOWoL3yEkLOWkhJy3kpIWctJBbFnLLQm5Z yC0LuWUhtyzkloXcspBbFnLLQm5ZyC0LuWUhtyzkloXcsoTOxa+d+LUTv3bi1ypei4rXYaG9LbS3 G/OzhbyR0G4S2klCO6kiT6MNneH4d7wutVbwCUVQkQPqDEJrryZfaO9q5dUf1AdaBfWh+kh9rD5R f1Sfqj+pz9Sf1V80ooFGNaaFaeGaXYvQorRoLUaL1eK0eC2VllpLo6XV0mnptQxaRi2TllnLomXV smmSJmsOzall13JoOTWXlktza7m1PFpeLZ+WXyugFdQUTdU0Tdc8WiGNa4ZWWCuiFdWKacW1ElqC ZmpezdJ82htaSa2UVlp7UyujldXe0sppb2t+raKWqFXSKmtVtKpaNa269p4W0GpqtbTa2vtaHa2e Vl9rqDXSGmtNtKZaM6251kJrqbXSWmtttLZaO6291kHrqHXSOmtdtK5aN6271kPrqfXSemt9tL5a P62/NkAbqA3SBmtDtKHaMG24NkIbqY3SRmtjtLHaOG28NkGbqE3SJmtTtKnaNG26NkObqc3SZmtz tLnaPG2+tkBbqC3Samh1tXfU55pNW6wt0ZZqy7RIrYF11bpmXbduWDetW9Zt6yvra+sb64511/rW +s66Z31v3bd+sB5YD61H1mPrifWj9dT6yXpm/Wz9Yj3H/VpJCspq1WdVilZdU2N40bXFphRbW2JJ pdXF0mbvUOFENUfx4tnHlxjKvZV7VRhV5XzV7FWfVNOrraxe9r1iNWz+1DVMf84alys9rEwrq1W2 V81dTat2vnrq6o2rr6y+u0apGuj/tZfTh+H3wh+EPwl/ZiO2MFuELcaWypbOlsmWzea0uWx5bAVs mo3bitoSbD5badtbtndtFW1VbO/Zatnq2hramtpa2traOtq62nra+toG/ldOetvbO9u723vb+9sH 24fbR9vH2yfbp9tn2+fbF9uX21fb19k32jfbt9l32vfYD9iP2I/bT9nP2i/ar9pv2r8OzvR5ZH9q /yWCRtj+Oen956T3n5Pef056//886SVAxBxT1Dmq+NQC1DlEzFhDnUOEtsDah4jpa6hzCOocgjqH YK1AsC4gWBeQJwisDYKffiTmN2JtQLA2IFgbEKwNAGsD/AMAawMsFACwNgDUIWBD2BERiEhEFCIa gbUYxCLiEPGIVIjUiDSItIh0iPSIDIiMCNS6gFoXUOtCVkQ2hISQEQ6EE5EdkQORE+FCYP0HuRF5 EKjDxXx1yI8ogCiIUBAqQkPoCA+iEIIjsF6EwgisCwFtA2gzQM0lZumL+eWAWguwrgEL4UO8gSiJ KIUojcDaDbC2oqjvyD1Cc+CG4r/kTfqO+FeKFQrFqoVi1QJoWfglZDG0FhXWK5+E4C6gMgW0MsWK Bh6HVoXVKzxJei2tnfT/HGhFihUPRXVKUYlSrI4oVj8Uqx+KypOi4qSoSilWQhTVKkUlSlEpUlSp FCsjioqRolqlWCFRrKqoqKZRuVJUtFScvGJlRVHF0jZJv592T2IVYFUH5ULX+jh07cksiEhiHWBF BENC1z806dp/XYfYIVEtZg8xDr8n7CXsFLRk3qAVg3YStkhmKiAb4aeXdrt0ktUB2Qk/h2wq2Pk2 Qpw2IkspspQiSylLYrmwm5rjhe3VXAh8P1WwKFeSlyTvU9Bb7iR5jPASwWiKSl7Fdaju/4OH/Fle 8CcxngrOCu7hXlOxb8IuuAaK66S4DipO8nEtFNdC8Wcprofiz1NxCo7vQXFdVLwPro3iHlJcHxV+ gmukwotwnVTwDddKxf0aXC8Vpyq4ZipOeHDdVOwv2pDi+inykaINKPKQoh1oBQTuKcX9pOKEH/eL Iuco8or6ERURaCuaiKiEQJtRrKgpVtQUbUexqqZYVVO0IcXKmiJXKdqSoi0p2pKKk3S0JRUnTGhP intK0aYU95WiXSnalaJdKdqVirsOaFeKdqRoW4p2pWhXKu5kCDvj9QD6L+A1Afoc4DUB+ijgdQH6 J+B1Afo7oP/CGAT6OYxFoK8DVoSAfgvjEchZmIAQ8WUiAn0ZJiHQh2EyAuMPTEGImDIVgXEDpiEw XsB0BK4TMG7ADATGC5iJwBgBWFECxgfAmAAiDmA8AYwfgHEDZiPmIDBmAFadMA+B8QLmIxYgMAbB QsQiBMYewCoEliDQhwBjEwh/x5gCWP0C2h6wAga0PWAVDGh/wEoY+iD6Ivoh+iMGIEYgBiKGIYYj cL9hEGI0YiRiFGIFYiViFWI1Yg1iLeIDxDrEh4j1iA2IjYhNCKy2Aatt2IzYgtiK+ASxDfEpYjti BwKzK3yG2IXYjdiD2IvYh9iPwCodsDKHQ4jDiCMIrNoBq3b4HHEccQJxEvEF4hTiNOJLxBnEWcQ5 xHnEBcRFxCXEZcQVxFXENcR1xA3ETcQtxG2EiM8i/oocgrELMJ4BxjHAGAYipmIsBRFLRTzDeAgY wwFjMCxDLCfB+CvUgVANv+aX7r891on4KmK6UALB/JCsMkKqIjlP/L9+P5GDxLWq6Ocq+rmK/q2i X6vozyr6sYr+q6L/qui/Kvqviv6rilj4XlLs/yem/RPT/uoxDX2BJh6n5cRzto6s2RZKJ3kD3pA3 qpSY1LUpnZHOSudE1yZvypvx5tJF3oK3lC5lOyg6OHkr3lq6Kl2TrvM2vC2vnblB2nm8vXRD9HRm LCTd5h2kr9J3lL7OkoN35J2kb3hn3kW6w7tKd3k30eMp3ePdf+3xfCg9kh5LT6QfpafZ4qWfeA/e U3rGe0k/895JfZ+8D+/L+/H+MsiUD+ADZcYH8cF8CB+a4RIfxocnd4XyEfz95M5QXkf0hvKRfBQf LcfJ8Znz8zFyKj5WdIrycXJaPl5OxyfwiXwSnyynlzMk943yKXJWORufKrpH+TQ+nc/gM2UHnyU7 5exyDj6bz5Fzyi4+N9hRmlvOI+fl8+R8Wdq+6Cnl8/kCvvClvlJDLhzqLS2e1F3KF/HFosOUL5F9 fClfxpeHOk1Li2eDU2/iK/hKvurVrlO5vFzBYLKfr05XKX1RuSJfIycGO1CryFXlanL1pD7ULN+J p4b5Wv6BXJuvk9/PPOJFPyr/kK+XG/INciO+iX8UfIo42JuazkzuTuWb5dZ8C9/KP+Hb+Kd8O9/B d4qOVb5LdKzy3XIH0bXK98id+V6Hkkrn+5K7V/n+zEWCHay9knpY+QG5Hz8o9+eH+GF+RPSz8qOi nzVjN35MHsI/j1vGj8tD5WH8hDxcHsFP8i/4KX5a9LjyL+XRosuVn+Fn5XH8XPSP/Dy/IHpd5Yn8 Er/Mr/Cr8iR+jV+XJ/Mb/Ba/zb8Sna/8a/5N+DJ+R57G78rT+bf8O3mGPJPfi10oz4ppLs/m3/P7 /Af+gD/kj/jjmDbyHP6E/2gD/pT/JM/lz0SnLP+Z/8KfG0ReYIC8UF5kUHmx/V5MZXmJEWaEGzbR RWvYw0/Jy+Mvij5aI8KITOqlNaKMaCNGXmvEGnFGvJHKSG2kMdIa6Yz0RoZQl+16eYORUd4Y8djI FG83MsubwufzukaWWKf8kfyxkdXIZkiGLG82HIbTyG7kkLcYOW2p5K3yJ1ErDZeRy3DL2+RPjdxG Hnm7vEPeaeQ18smf8XryLiO/UcAoaCiGamiGbniMQgY3DHm3UVjeYxSR98r7jKLyfvmAUcJeSD5o JBim4ZUPGZbhkw8bbxglw7rJR4xS4fmN0sab8lGjjHysUmLYpvBmtt62rRHj5LxR86MWRGeOrRaX K21ixg7ZKskHXt/7axuYdnb8nowBtF1O0fsrnbWD9FPKvb/hp/699zfWmbktxqVj0J/XT4pHvDFv khSBRPwRcScYcdrx9ryDiC0isvCuvBvvLuIG78V7J0cLESmS44SIEhgdgtGAj+Fj+Tg+Ptn7+RQ+ NdnT+Szh4Xwun5fkxcJT+ZIkH03ySr6arxH+xdcJf+Ib+MYkb+Kb/9Vz+Gd8F9/N9/C9fB/fzw/w g0newI/yY/xzfpyfSOY9/1KwnZ8TTOcXk1kuOI4Mv5nEccFvfoffFczm915ls2Cy4DF/lsxgAwxq sCTWGnbB0ySGpsRPI6ORychsZEnmYDIDjZxJvBOcE2xLmWdGYaOIUdQoZhQ3SiRxSzBL8MooJRhl lAnrF7Y+7OOwnWFHwq6E5wuvH94//GD4CVu0LaetrK2WbaFtv+1b20PbY3u8vZy9mr2L/dOIiIga EV0iukf0jIyOjIksGdk7sk/kmMgjkfej8kS9FTUlak7UiqhPoo5FO6K90XWim0W3jl4bvSH6XPTN 6NsxckzOmHwxpWPKxlSIWR2zPWZHzK6YK7HxsY7Y7LHFY5vHjoidErsgdlns+ljcoThHXIG4d+Jq xM2NuxV3Nz4iPip+V/zu+DOpBqeuHNb1hRdEzX3hBXFLk/yA14++z5u88IR4OSVPyPC2kTO8p60v b/y6LviIWNEFH7PhhSfE3Qt1wdPEI2TuX9d+cen/iP1efpog7Obr7ZhkxSwRwophF36XFQ+Rju4s 7qzuzO6M7mxuyR3jjnXHuePdqdyp3Wncad3p3OndstvhzuTOgP/91ldmxleIv2fA10rBn8qU4ut/ 2/tJwd+d0vfF+2fCdxDvI95DvD7l1+FV4WoPQHa9nl5fb6C30FvqrfTWnjf1NnpbvZ3eXm+oN9ab 6M305nojvYveVe+md9d76D31XnpvvY/eV++n99cH6AP1QfpgfYg+VB+mD9dH6KP00foYfaw+Th+v T9Qn6ZP1KfpUfZo+XZ+hz9Rn6bP1OfpcfZ4+X1+gL9QX6Yv1JfpSfZm+XF+hr9RX6av1Nfpa/QN9 nf6hvl7foG/UN+kf6R/rm/Ut+lb9E32b/qm+Xd+h79Q/03fpu/U9+l59n75fP6Af1A/ph/Uj+lH9 mP65flw/oZ/Uv9Cv6df1G/pN/ZZ+W/9K/1r/Rr+j39W/0+/p3+v39R/0B/oj/bH+RP9Rf6r/pD/T f9Z/0Z97iAc81MM8YZ5wj81j90R4Ij1RnmhPjCfWE+eJ96TypPak8aT1pPOk92TwZPRk8mT2ZPFk 9WTzSB7Z4/A4Pdk9OTw5PS5PLo/bk9uTx5PXk8+T31PAU9CjeFSP5tE9Hk8hD/cYnsKeIp6i+rf6 Q09ZTxm9g95R76R31k/rX+pn9LP6Of2ifkm/rF/Rr3qKeYp7SngSPKbH53nDU9JTylPa4/VY+il9 pD5Bb6qf1y/4vD7L5/O94XPoDXwlfVV9pXzVfLLP6cvuy+HL6XP5cvncvty+PL68vny+/L4CvoI+ xaf6NJ/u8/gK+bjP8BX2FfEV9RXzFfeV8CX4TF9p35u+Mr6yvrd85Xxv+97xvesr76vg8/sq+hJ9 lXyVfeJzj7B0ThSfAZOd2FJ8Ov8O1t1PseZ+hvX2L+S5KLKB1mxcs0PNjjU71excs0vNrjW71exe s0dN0fnSlPakvWhv2of2o4PoYDqCjqST6RQ6lc6gM+ksOpvOoXPpPDqfLqAL6SK6mC6hS+kyupyu oCvpKrqarqFr6Qd0Hf2Qrqcb6Ba6m+6he+lVeo1epzfYu6wCq8gqsSqsNRvNxrLxbBqbw+axBWwR W8J2sCvsGrvB7rAf2AOpmFRcKiElSKbklSzJJ70hlZRKSaWlN6UyUlnpLamc9Lb0jvSuVF6qIPml ilKiVEmqLFWRqkrVpOrSe1INKSDVlGpJtaX3pTpSXameVF9qIDWUGkmNpSZSU6mZ1FxqIbWUWkmt pTZSW6md1F7qIHWUOktdpK5SN6m71EPqKfWSekt9pL5SP6m/NEBaIC2UFkmLpSXSUmmZtFxaIa2U VkmrpTXSWukDaZ20Wdoi7ZX2SfsdmR1ZHOUdFRx+R0VHU0czR3NHC0dLRytHa0cbR1tHO0d7RwdH R0cnR2dHV8c9x/eO+44HjoeOR44fnamcqZ1pnGmdklN2OpxOZxdnV2c3Z3fnAOdA5yDnMOdw5yjn OOcU5wznPOdCpZ7SQGmoNFIaK02UpkozpbnSQmmptFJaK22Utko7pb3SQemodFI6K12Urko3pbvS Q+mp9FJ6K32Uvko/pb8yQBmoDFIGK0OUocowZbgyQhmpjFJGK2OUsco4ZbwyQZmoTFImK1OUqco0 ZboyQ5mpzFJmK3OUuco8Zb6yQFmoLFIWK0uUpcoyZbmyQlmprFJWK2uUtcoHyjrlQ2W9skHZqMar qdTUaho1rZpOTa9mUDOqtdX31TpqXbWeWl9toDZUG6mN1XZqe7WD2lHtpnZXe6g91X5qf3WAOlAd po5QR6qj1NHqOHW8OkGdqC5Wl6hL1WXqOvVDdb26Qd2oblI/Uj9Wv1O/Fx0wKfW/qM9f6YCxBXtg Iv8CXTDviL4drUKK3TA1XumHqRvsiGnwl+iJCXXC/Jq3+mFWGoQZaVgwKi7CHLEX88MxzAQ3MAt8 hRlAxFo7RuW8GJE9njf/ZW5S04Rmf5MpH8FpGS9mV/ydpn78jjkbofkfYnKHVdZ6y/JbFa3WVhur rdXOam91sDpanazOVherq9XN6m71sHpavazN1pY/0h31G7JjSV+pxM8SdyXuTtyTuDdxX+L+xAOJ BxMPJR5OPJJ4NPFY4GjgZJ13CUT2IGEkPHnGE4n6lxlPaV4748lBnJhV/9iMpzdISVLqd854qkPq knqkAWlEGpMmwUk+zUkL0pK0Iq1Jm+AcoPakQ3AuTxfSlXQj3UkP0pP0Ir1JH9KX9CP9yQAykAwi g8kQMpQMI8PJCDKKjCZjyFgyjownE8hEMolMJlPIVDKNTCczyEwyi8wWkz/IfLKALCSLyGKyhCwl y8hysoKsJKvIarKGrCUfkHXkQ7KebCAbySbyEfmYbCZbyFbyCdlGPiXbyQ6yk3xGdpHdZA/ZS/aR /eQAOUgOkcPkCDlKjpHPyXFygpwkX5BT5DT5kpwhZ8k5cp5cIBfJJXKZXCFXyTVyndwgN8ktcpt8 Rb4m36CSuUu+Jd+Re+R7cp/8QB6Qh+QReUyepKRwgEEYhIMN7BABkRAF0RADsRAH8ZAKUkMaSAvp ID1kgIyQCTJDFsgK2UACGRzghOyQA3KCC3KBG3JDHsgL+SA/FICCoIAKGujggULAwYDCUASKQjEo DiUgAUzwggU+eANKQikoDW9CGSgLb0E5eBvegXehPFQAP1SERKgElaEKVIVqUB3egxoQgJpQC2rD +1AH6kI9qA8NoCE0gsbQBJpCM2gOLaAltILW0AbaQjtoDx2gI3SCztAFukI36A49oCf0gt7QB/pC P+gPA2AgDILBMASGwjAYDiNgJIyC0TAGxsI4GA8TYCJMgskwBabCNJgOM2AmzILZMAfmwjyYDwtg ISyCxbAElsIyWA4rYCWsgtWwBtbCB7AOPoT1sAE2wib4CD6GzbAFtsInsA0+he2wA3bCZ7ALdsMe 2Av7YD8cgINwCA7DETgKx+BzOA4n4CR8AafgNHwJZ+AsnIPzcAEuwiW4DFfgKlyD63ADbsItuA1f wdfwDdyBu/AtfAf34Hu4Dz/AA3gIj+AxPIEf4Sn8BM/gZ/gFnlNCgVLKaBgNpzZqpxE0kkbRaBpD Y2kcjaepaGqahqal6Wh6moFmpJloZpqFZqXZqERl6qBOmp3moDmpi+aibpqb5qF5aT6anxagBalC VapRnXpoIcqpQQvTIrQoLUaL0xI0gZrUSy3qo2/QkrQULU3fpGVoWfoWLUffpu/Qd2l5WoH6aUWa SCvRyrQKrUqr0er0PVqDBmhNWovWpu/TOrQurUfr0wa0IW1EG9MmtCltRpvTFrQlbUVb0za0LW1H 29MOtCPtRDvTLrQr7Ua7/3V0e1imf5T7b1HuOVLlSO0a6RolprW5xrrGuca7Jrgmuia5JrumuKa6 prmmu2a4ZibP2RJTt1wLXpnmlNIsqfWuDa6Nrk2uj1wfuza7tri2uj5xbXN96tru2uHa6frMtcu1 27XHtde1z7XfdcB10HXIddh1xHXUdcz1ueu464TrpOsL1ynXadeXrjOus65zrvOuC66Lrkuuy64r rquua67rrhuum3/rqclv5iqTq+z/Mjm5+v9xdnKb3zw9eeBfbH7yf3l68m8+Sfutk7z437oezq7m UHOqLjWX6lZzq3nUvGo+Nb9aQC2oKqqqaqquetRCKlcNtbBaRC2qFvungv6ngn6lgq6fPAU0oUmw mv7XeZ+h+YgJnRO6JHRN6PbK/M++Cf0S+icMSBj4nyaBJkxImBictyimLU5LmJ4wI2GmmOT4T93+ 167bxURMs53Z3uxgdjQ7mZ3NLmZXs5vZ3exh9jR7mb3NPmZfs5/Z3xxgDjQHmYPNIeZQc5g53Bxh jjRHmaPNMeZYc5w53pxgTjQnmZPNKeZUc5o53ZxhzjRnmbPNOeZcc54531xgLjQXmYvNJeZSc5m5 3FxhrjRXmavNNeZa8wNznfmhud7cYG40N5kfmR+bm80t5lbzE3Ob+am53dxh7jQ/M3eZu8095l5z n7nfPGAeNA+Zh80j5lHzmPm5edw8YZ40vzBPmafNL80z5lnznHnevGBeNC+Zl80r5lXzmnndvGHe NG+Zt82vzK/Nb8w75l3zW/M78575vXnf/MF8YD40H5mPzSfmj+ZT8yfzmfmz+Yv53Eu84KVe5g3z hnttXrs3whvpjRKzUb2x3jhvvDeVN7U3jTetN503vTeDN6M3kzezN4s3qzebV/LKXofXKSaeenN6 Xd5cXrc3tzePN+9/+9MB/lqnNf46/rr+ev76/gb+hv5G/sb+Jv6m/mb+5v4W/pb+Vv7W/jb+tv52 /vb+Dv6O/k7+zv4u/q7+bv7u/h7+nv5e/t7+Pv6+/n7+/v4B/oH+Qf7B/iH+of5h/uH+Ef6R/lH+ 0f4x/rH+cf7x/gn+if5Jf+4nI/zHk6h0gfSBDIGsgWwBKSAHHAFnIHsgRyBnwBXIFXAHcgfyBPIG 8gXyBwoECgaUgBrQxNlV4FTgdODLwJnA2cC5wPnAhcDFwKXA5cCVwNXAtcD1wI3AzcCtwO3AV4Gv A98E7gTuBr4NfFfzaS1bLbuYGy1Ovoic4tlWCqclLI7Fs1QsNUvD0rJ0LD3LIOaX4E9NYNXYeyzA arH32TK2gq1ia9gH7GO2k+3B2uFzrBdOY51wGT3se/HkK4E6FfDPlq85VUvxpIZOS+m3O8umWN+k XF2UT0mLpqgtpRSVpO4e757gnuie5J7snuKe6p7mnu6ekdKdV1xbhpTXlvKV4eu3kLAUbZHj11PF pDNFcaL44jxRnCYWI6WDp4bivLBC8KywMqlG5pGvUzzvivj1jCvphEucb7043RJnWw7IFzzDEqdX PHhyVQwS6AA6MCX7s0wsM8vCsjKJyczBsrMczMVyMTfLzfKwfCw/K8g8jDODFWPFWQLzMou9wUqz umwwG8YmsLlsPlvIFrOlyJrlyJuVyJzVQe58yDawjcigbWwX2832sL1sHzvEDrMj7Cj7nB1nJ9hJ doqdZl+yM+wsO8fOswvsErvKrrNb7Db7in3N7oZlClsRXiL8o/CTtrm2+fafIqpEksiCkYujy8Wl jjsS9yw+c7x4rqM4KUcm0FF0zEscrsvqs4asMWvKmrOWrC1rxzqw7qwX68sG4JUvfInj4jo34XVu YZ+wT5Hvu/BaD7NjeH2n8Mq+Zd+xey97QK4CyT4Ay0jca/j/J01KJ9PIVvLgNeeiv+ck9HecftJJ dBrdSDfRj+mV/8ivbCGGOYMcy/kSy/IGeVYAmaYwlWlMR8YVCnKuMCvCigaZVwK5ZwbZ50P+lWSl kINvsjKsLHuLlWNvs3dYeeZniawyq/paFrQJsqAT68y6sK6s20t8GMaGsxFsJBvFxrBxyOqJbBKb zKawqWw6m8Fmslls9itMT+bOuhTYI7i+j+1nB9jBIN+TmST4fREZfjnI8Zu/svwbdjeJZez7sBVh 68K2hB0Iux32Tbg3vFJ4xyD3w2x5bYrNZ+tkm287bjtvu2QvarfsZext7T3tE+0z7Evt++0P0Dvy RRSNsCJKRZSLqBLRN2J6xKyIzRE7Is5E3Ih4in6TCT2ncGS5yOqRtSIHRI6InBp5NPJ5VMGomlH1 o9ZHnYyG6OzRZaPLRQ+PHhG9OHpV9PGYPDGFYt6IqRbTOWZWzOGYUzG3YkvG9otdGXsh9ru4qLhD cbfj7sf9GJ8avbBD/Kr4E/HXpGnSdGmGNFOaJc2W5khzpXnSfMdsxxzHXMc8x3zHAsdCxyLHYscS Z06ny9nM2dzZwtnS2crZ2tnG2dbaau2ydgc7uP+5i/O3vosTlum/fdop6lSsgf69Anq1/hHVT1Lt 83srn9fUPX+u/n2hBTEXng5rGtYmrGuwS3FTqE/xdNiFsCthN8MehMeH5wsvEF4/vFl41/Ce4f3D l4nexfAvw8/+2r/YOzj/YaZtoW2rbb/tsu1WqJsR7PH2fPaEYE9jY3tz0ddoPxYBERERsRG5k/sb I3pFjIu4GfEo2OdYJLJkZLNQr+Onkfsjj0ReiLwfJUdlD3Y9jgz2PQb7EIPdjzujjkVdi7obnTna Ea3+2gfZJbrXi17I6LvR92NShToiPTElYkqG+iI7xsyMWR2zIWZTcn9kzPehDslcsUZs8djSsWVi q8U2jx38a7fkh6JfMvZksGPSGZcrrkCcEuyb7BE3N25e3NK4c6J/UnQsBnso5fiqwT7KPfFn4q+k Gpzq29RpUldO3TT1+TR6moFpVqbZljYx7ey029M/z/B2hvIZ2mQslDGQsUOmjpnGZ1qaaVPmypnb Zh6RJSLr/WyVsu2SnkhPHVkduYzDhQsXcRR5Rzwh8qffK/xDdwn/JnfaRtHRdAwdS8fRiXQyexfV QQXUBxVRIVRCjVAlqBKqo06ogUqhJmqF2qgW6qBeqIeKoQFqhkaoGpqgbmiGyqEFaodWrDXqB6Ej 26OG6PiKiujBeqKS6M36oJrox/qjohjIBqGqGMKGvqQsRqO2GIvqYvwr+mLaSwpjDmqMeagyFqDO WIRKY8m/qeq1Ic2xPqitN7GPUHlsRu2xFdXHNtQf29kO1CCfvaS4X+gQobuP/aq8v/g37Z2kTa6g OrmG+uTGKwrlzguNwu6Le3+OTOLumbOHs6ezl7O3OkWcJFtvWpWtKlZVq5pV3XrPqmEFrJpWLau2 9b5V5389lxCTN7/9m9///7P9+I/e70+6o558Nz3sb+LZf+QeetId9B7B++d9aT/aX1TFdAgdSofR 4cF76a/EjeB99Wn/w955RkdxZdFaanXl7q7OuaskQCWRuqFuBSVoUJZa6gZFhIkmmmBjwOSMCCaI nG2wydnYmIxNFNjkYJFMNsFgMJgsEOKpWkLI8/Abz/LMmjXz5heLXwg459S93z53b9lc2Ty/sl5V V/9bTV26AW0uuwNtlW2TbZd9I/tWtkO2U7ZLtrtCX/9O9r3sgOyg7JDssOyI7KjsmOy47ITspuxn 2S3Zbdkvsjuyu7JfZfdk92UPZA9lj2SPZU9kT2XFsueyF7IS2UtZqexVUEBQYJAsKChIHgQH4UFE kOLfet/630z9J89UuUJudhxwHHQcdRwrn690Ep1Mp9Cp9GB6CP2cfhEMBTPBzV9PXWmvgOEZkYlg IplEJolJZlKY95y+CnVRUg2jXQ1cDV1uVzNXc9c7rhZlc3qua57rE9enrvmuBa7PXKtcVysmd6Lb 6+fHf2GCu6e457rXuNe6v3Cvc3/p/sq93v21e4N7o3uTe7PkdFd29/oLlPJt1O1tNK/sz4HK/pzi IFWNJ8zUst8N8N8g/97tMbjsVtbf/735e98aODC9bFa+mSDlM0KaCdve+nNLWxN/b2MiKDQ9NDe0 eWiL0A/+tFL+lr+79D/vbiLdBqQXyPJO8l7y/vKB8hnyBfJV8vXyDfKN8v3yn+V35U/kJfJSKAjS QVYoGKoGhUIMFAbVhupC0VAM1AiKg7KgLlAvqC80EBoM5UNjoenQDGghtLzsxrAaWgdthrZAW6FC 6HvoEHQKugXdhu5DL6FXcCCMwySsho2wCabgunAk3BBuBMfBGXAO3BweCxfAk+Ap8HJ4Lbwe3gJv g3fBB+Bz8FX4ZwRGUMSK2BDa7xZXE6mDOBEWAQiH8EgU4kaSkXTEh+QizZB3kBZIa6QT0hl5D+mO rEN2IYXIPeQ+8hyFUBjF0Dg0CU1Fm6Bd0T5oP3QEmo+OQSeik9Dp6Hp0A7oNLUS/R39E76D30afo c/QVFoDJMBILxWpjkX5fNh/WBMvF8rDeWF+sPzYQG4QNw0Zg07BZ2FpsHbYJ24ztxU5gP2CnsTPY eewidgm7jF3BfsKuYTew+9hz7CWO4ChuL7vnMHg9nMNFPBKPwRvgHvxdvCveDR+Jj8bH4FPxGfg8 fD6+BF+Nr8HX4Vvw7/AT+A/4Gfw8fhm/it/E7+C/4Y/xYvwVEUjIiCBCTkAETmgJA8EQ9QiW4IkY IpnwEllEDtGM+JDoSfQmhhH5xGhiDDGdmEOsqvBM20zsIgqJfcQR4hxxhfiFKFYYFHZFPUWUIkbR QNFEkaloruii6Kb4QNFD0VMxT7FQsUixTLFCsU9xUHFUcczva1aqxJS40qS0K4OVgjJBmaRMVbZV dlX2UPZUDlMOVy5W7lLuVRYq9yn3K68qHyqLlS9UShWp0quqq8JUtVWcKkKVpHpH1VI1VDVRNVu1 QrVatVZ1SnVLdU/1kpSRQSRCBpM1yVpkbbIOyZORZDyZReaQLcjWZDtyCDmUzCfHkgXkXHIZuZxc SX5Bric3k1vJbeR2cje5nzxIHiVPkkXkafKM3xHsOnmTfEhKPhQyxVhV3bJfi15/2X/HCf+xr9Vf +1b9ObL4j32Z/tp36Q85ZNADqoi6T/1GPaAeUo+ox9QT6in1jCqmnlMvqBLqJVVKvaID6EBaRgfR chqizcGpwZ7K28B914O/dhMIrCbv/H8xjLPlFKMKwxhU/vYSOgcHVOEXb+jFzcqXmLWQFCQbySnn FhXUIgHNQztWcIuP0SlVqEW/CmrxaQW3ePAHzOIYfvJ3zCKBaEq0JjoR7xHdifcryMX21+yiCreQ qEW6wqtoU0kuXnOLq1XIxRtuMV45088tllZ55xla8dJTIhaVvKKCVsSQjSqJxfd+ZvGOuo96tPqo JlTj0jTQZGraaNpqZmlma3ZoftXqtTW19bUTtBO193RNdR/rZuh26gP1tfRNDDKDz5Bt+MhwxWg1 xhtvmGhTTZPT1M3UyzTL9LnpgOmQ6bQ5wvyleaN5h/mG+ZlljGWRZbHllOWptbZ1gvWo9Z4Ntdlt d+wZ9nz7NPsSB+xAHGxwWnA6N5Pbwl3jo/gsvqvACC2FocIOoUQMERmxj7jbe9wX4Kvpq+Wr7avj q+srO9D46vnq+1gf8HE+3if4RF+EL9IX5Yv2xfga+Br63L5Gvsa+WF+cL96X4EuUEtZ9KT4pl6Bx QNC/iSb/M1jyuwHtAtr7ebJEk6uS5N5/wJHLKfLogAm/I8SfV9BhKUP4WsCN//g9+//sLfv/1B37 /ww6ILGAzrK+0j3/d3vXVfWGa39y/7LsBvUXtu7+t3H3/9nGXcUO2d9siFU9e/6PRP/LSbREM/7S 2TOgrpAkZkQcjVwdfTYmOCY0JizG1Xh64xexmbEtY9vH9oudFqeNE+Pd8Z0TWiZsTyxMsiUVJGel 2FKWp6xO+TF1SOoMD+YxeCI9d9OUaePSfk5XpIenR6bHeQO9klfb4/+SE0m5wv3mPNLXfxKRziHD qpxCJKV6XtnZY2XA6oCNAdsCdlbozPuraMzlCvNJv7p8plJZvhbws2xg5VunN6xWevNUldf+ntH+ Iy+fJGK7zU9q98j2vpXPXpBdkd34H2P9b5oW/7YXax/9P9+s5Uuv0ipp7/Ng5p//XoZp/9Y3JONd E8rONZ3+Q84Y/0FnCin7UJZSsY3RXz5cPl2+WL6i0jtKohmX/VsZTyAUUkAkZIZqQrWg2n620Q36 ABoEDYVGQFMryKvEXQv9tOMUdA56BgfAgTABq2ENTMHVYQZuCCfBaXALeKSffnwPH3xNP+AShEQc CIPUQuoiAIlBGiKxSAqSijRFMiqIyGRkAbIcWYvsQA4ih5GjyCnkLHIRueJPT36IvKzkJZlodiUz GeinJrPReehn0sYH+hQLwiAM8TOU2piINcJisTTsXaw99h7WD+tfSVSWYyuwHdgeP1c5ht0sT67A VX7CUh8HeCM8Ge+Mj/Szltl+2rICX4WvfkNb8N/wh0RAFeKSSzSroC5dKrjLCGKKn71sI7YTh4kj RFEFg/lF2iAhihWEQqEwv4XHZCraKN5TdFF8oOitGKGY7WczXyg2KDYqtlUQmmP+3ZJAJaEklVol rQyuQmpaKzsruyj7KvspB/ozHF5Tm8WvuY1yj7JQeVp5R1mqCvCnNKAqzM9yavlZTroqw89zJlXs oKxQba/cQ3lBIn62o6igOz4ym+xAziAXkUvILX7S852f9FwkL5NXyGJ1fXWuuo96mHqkOl89Wj1d fVR9Sn23gv4k+PlPR00fzSzNUs0mzUXNLT8Fqq/N07bSvqftqh2uXar9VntPW6KL1eXqOviZ0Bzd J7rPdVt1O3XHdD/onupD9bX0Ln2MvoG+iT5Dn6cfoB+hn6Ffp99ukBmCDBF+ctTL0NvQ1zDEcMxw wc+QHMZQY01jlDHemGRMMaYaZxsXGi8ZrxhvGO+bNCabny+5TMDUzdTfT5jWmL4pp0ymc6a75rpm 3iyYPeY0s8/c1Jxh/tA80DzaXFDBny6Zb5ifWGhLbUtdi2iJtSRY2lm6WAZbxlsKLIstqyybLQct xy2nLOctlyy3LLctT62otZq1tjXa2sPa1zrAOtg6wTrLusm6zXrUetd6zxZkk9tQm95mt1Wz1bCF 2sJsNW21bE5bPVt9G7BxNsE2ybbQttt2xHbZds12x/bArrKTdrXdbq9mz7bn28fZJ9qn2efZF9kX 25fYl9oP2ovsdxyww+FgHUW0nabpYLoaXYNm6DA6nK5J16Hr0pG0m07411OxwBFlM6l8Gl2onD/S 9JGmTvm8WV02YaTJIs2VtLKZctA/NVLLJsbrWSHNiddTQpoRmeWzoGwKIGX936iy95eX9XpFn5d1 udTfI8s6uryHpT7dVt6hFT35nmKEv7u0/m5600t73tI3tco6ZlJZp2wv6w5fWTeU98J3ZR1QXFb9 IyurvoG/1pdW1PnrGpcqvESnr6hwqbq3llW2VNcxf1PLUh1LVXyhsn6Tyir3SkXNuvxVWl6fb6vO J2X1GFtWh68rsKL+yqqvvOrKKs5fa2+vskllFfa6usorS6orqaqW+uvJ4fjBUVThEHzecclxxXFN 8vx13Hb84rjjuCs5+1a4+j5xlDhKqQAqkIIoVHLkpRSS9y6lr3DapSiaCqGqUwwVTtXyu+fWo1hK pCKpGMkbt8IRt9wDV/K/9VKZ5R631DtUS6oV1ZpqS7WnOkoOtuXutZJTreRTS/Wm+vhdaSU/2pFU PjWaGk9Nom1/0APO8i6QKPG/ug8CPvtv/tf7U4z9r/8b9v6T6nrvstvgn1LXK7T1f66y/sGfPif/ oape9iOG+O+jw97QnMp75jFZkey07HzZjfHyW++L/7vH/ZPvccQaqoi6QF2kLlGX/zGl0k+L9L/T Ky/7t2Duu35zPXCn/6UNmKPuY+7j7hPuk+4f3EXuU+7T7jPus+5z7h/d590X3BfdlwJkNdRaqPqQ Gg2rX6DO1+/gaqRWaR/aF2vW8EmOH3KP88kJI7l2mYF8iuE6155P07/g003BtN1xKu0J7/UkRwzW n7crQuY4zqgvx+XwTWiHL4TPkJzh+Uzvdvkj+cPgXZoAPidksL0FR/C5kRF8Xt6NyL2cgm/Bt4rs oKufkBsSqb+sLy73jueU6gL3Mr4tpzKF8+3Uaer23ve9QzOHciTfge/ouMJ30ibQdNym5IV8F3V6 xnea5dpDnNrvNK/hu5meW+Y3PuNpE/Uoe7zxpaWdzZNU3yfnP9J20M+PreG4zukdNziD42bcdGU4 P0D9qXq/+mp8VmRDrldknv46ZzT05gfygxy3LSWSMz0/xLaFHya509sN/IjwJ5r9/GjtfP5jzuK4 E+Plx/Hj1a0Njx1308WcYREUP8H4i/oKX8BPitfzk/kp/FQ62FePn2ZaF7ndo8nYx0/nZ+iW8zMz Wqi1jl8zfvXYtIn8XH6ebkCIRT3ZGJD2LOdF6o20HAcXK+MXOe5zdm5A+NNoinPwi/kljt/4Zfxy xwN+hWc2v9LxKLGhj01ZYq7peOL9yNtWF8ZRjmemQlOJo9h80fHcMsF6yE7y65o0837K0eoJ6o6O En6jprfkme+dR1d3lOp3Rn5rNHLBpqv8Vn4bv90n2M2adhkv+G+pAPosvyNqZNLz2HXcUH4nv4vf 0yTTOyv+NDeM3xsVyo2IidMdyGzBF2ov8vv4/ZRMd4/L90XyB6kg91JuVNRoyVM77SF/mD/CHw1/ Vi3IkhW2hBvnfWUt5I/zJyioGsmf5Iv4U5ntIpW+aG0L/ix/jkKMP9Fn+PMxjbjxFMpfzDuubspf ojD9MfXQ8u+bLyrSKP6ss+g78JetTaz99He5CU3yuIn8tay6CQlcddNObU/6UEipo0ZGZ3Vv77sJ iTm59MnURVorRZoX8L/y97gwyeM/9jT/G6XlH9ki+Mf8k3gb/1SDaLbxz/hi+lLGSErHv7B60mdy U/mXfCk3zag3XTc3C3/FvxICsvaUO4Kn1VGf934nBKbvU88U5FwtKR8gZAZXW4Ckr2/IuozblEVA m6mNaQImKCmboOLqGE4KZMgYQS1lB1jd3lIpP0DQqtcIOs1czdfaQEHvizEkcHVNtazpNl7TVTBb ZRQt2ENW5RYLDnNXrc0zsIlPoL07Q0Zzn6bECyFCqPELW21NfypEk29aKNS01bEpdSf0y6JjUmdy CwzjqOohzRo/NSRm2YW63sXhJSEewRkyWagvsFSNkGKBF0QhImuJKVqIEmK8P1Oh2hra93VeoYGU W2BIpsKlr7jpuPeWlF5gnSc0trX2OYR4kzL6AFU7syu+G9+VwlhncvUtyY5gjtVs9H7MAcqZtSCk JscZrnraWQ4LKUKqPYtbzPHm6ZwgeIQ0IV0L1KdT99E1qXqaVUJTojZRS78x+jBVP66lNlTb1zCQ YiMWC5lClpBNAcc+oVlCPsXpVhmmSykJtnhKFN6hIqw55VkJQgsuouwc0YpqkD4/rZGmn3aF7qzQ pkmw0Na9yjhZeNemEtoJ7YUOSU2FjrqHQifvM9to4T0u0r1CSlZI7y90EboL7xt93PLEW+aR3Mo8 m+4Q1VjokfBS6JUdQMUKvak44SPv11LqQtwuoY/Q19s9o23e50K/+BChv+T37mvENRAGcGvSp9gw KjHvpacZlSQMpJITWgmDqRQzbD1PpTpIdYuaCOVpvJ1Ky1hGeYVhId9mFKceceiE/AijMCqzZ3lq g/6cIULxoaKHsaUwOu24MEYYa74ujBPGqy3CBKqpt79Ra03R1k3d7890yBEKgq1UrjC5/NRmeuF5 xjUSptoRzQVhmjA9uUuKiWqhQ4WZ2mm6LtyX6YOolsIcn8p/smsDnRfmCZ/6Yqm2ysbKRmlXjfPs vc1UZKh3rLBQWCQsputw64WlpiZSHoSw3LKWi+c2cJsyR3MJkpO9sILqmHpeWBlLC6uoTsJqYU30 N8LaiC1Rzakuto1U1/BH6knCl74AYb2UGMElUu+H9BG+Vh5RHs7ifXHCRm5b0j1vCZccoUzpyG0P fyBsCflY2KrrXsUZP1X4RvjWu942K/UR1UPYYeor7NQV0XWFXYLkme+hPvQlZKZwaRnDTTWCbwt7 hUJViipZ2Ef1FPZzhcJ3VC/hgHCQ6p3eyJorHBWOCSeFIuojLj1hiUEfO0uzVzgvXOC8VB/hinBV yqkQrllw7xxD69Q7kQd0V4Wbws+ZMzifqSh6rXBLuC38Ityh+hlJ4VfhHn3Ol8x9r11pyhDuW+Kt icJvIROpgcJjapDwRHgaPJy0kzauqfAy7pRQmnImnVdj9lrWZN00/VpqqPdXMdDKOYS4T8UgEaKG h2xIuapGRJg7mNApYS7ZnexmzMv43lCQuFrEjQY9Qo0ImS6qjMHqfbZD3BFHTa6ZqNHFiVp/WkYe NUrUcc0NlyL66b+QcjNEg5ScYUK5FuRD8kFEK7IFWVPeKeQdeK7iY7VdbUs9rFqRJRhuqmPVjeO6 Q42gXmgb7wcZn6eeievHnVA0gDOgOCQ5rm9cT9EcNw39Pvhgxs642egHmYncSXMI0ghyKdfAXxpc hkaiDesN3dRWw34QHeQX0C2RiokijK7ZWDcxWPuh/BjcHbqd8Sx+j/Zj7Xjt5LLzfbXYlIha3oHy p1gNnxjRIG4fNSGzXkScBmjY2PseJkafqRJDPRHNKGpS7J24+9Z4TWtNK2oy0p076x3pzcdueEch PiIfZ2xf47VyUM00zVTv6HiCmkJz2Kn4KO5HqC/ByAfGG8067HTjLfgZLFTzjWZ7RqlqghgGu7QL vBO84zWnNEWZ8z09FRe482I4d8HTT6wZnx3fVfNM81TzUlOCnfEWeKei97Hn6mX4VIL1DIkooAXF Cmo6oW2839Mb6gQvj5+vzdFmm3pwl+KXoTUbH4W2SDkMohOfrr6EbozrTPDeaaIra4dnulgvdbn6 uvqG+ufoTkoMjtEc4n7yziRGq15qV2tXpW21f9R4Utz7aV7uWgTkWeidDQ2Iv40UpjXJio84LO+l faZ9yl0PUcbeyspQPPCsQvN1Np01/hFCxd/0rIWqZbWO/427Se7WpepSUl/iM+jIBAd3S4mLnLIY XhvxOMFMzdLXEwWSp2aLIveLr5Z3QQIOFxBZuq916xMw72fcnazV1BwxMnGIrlC3F1lHnItJxmOo uarqKR8RY7wrPbe8Kzy3dVd0l1V7vKuyDiKHiFVZe72rxZiQGuRkPaHHYzyxQz2PxYbUJ7oJGbe4 +wlDYk1SkorYGB2j76TvmJzp3cA9EGO9G9MSYtViAvcwckuaIuEMtNW7CW+gX6NfTUaSZ7hHRJ2E 2dxj7xYkV79Hv1t/WH8I7RqZm3BO0U2+C2Kglwk3Y5qi06EwMVH+RcJD7mlsNdWY7Dapt9Kqqaco Pkg0q6cmlGIXcS8+z7uDWuDdrVqbyHr3woGRnYgY7gWeRPaPnELkiGneA9lzDBsMXyf2SexIfYat C36a2IE8mv0t9Tl+R75A9Ko50We4b7gXmwo3t7awtvJFwOvFF9Z3xSYp5sQCawfVLcVCzEcWIO9E 3uBekkuN1YwhUpaG8U724+zbDlFsaow0RvABjo3ZpdQiajE21deAOET2UfQ0tjG2NrfyHveeiJJH wWkfitliDjHdW8TLlAmNi0OCqaUZe43Ljctwu3G98SvjduO2JHXaKO+ZqBpJhrSpSVqxWY4HTaKW wV2MtZJqQbPEPPK69yy+RcruMFEmh3yjKgKKwa5kbuYRfLSyg6rUlGXKFFvnTPHVyck3dTV1oVZm 3NHm0m5VCHkxt23SsIxtSb2iuqbtNk01TaFW4fWiPuJReHTS1zyGbhA7IuFJe6XUGnyx6oyUXJOz D2mNNUnaKb4HjVXsQ2qaXplKo2YqxKR1SQezn6e11qxXpqjHxc5G8Jwr4ofUuqTr3p94Fa/mtVie sXPSfe91703sWVoprxN7+3heny4zjzAPJ47xhnSICEKLvbfFPrHm5OqepNgV1Fe+xOT64gBqvXmP eXdueM72ZDF2lzgIqUN9rRgmJeQkd6QbJ0dZAi0BqtXURu997wPenOsRh4nDkz28hZRRm8QR+GEf hzy3jEqvnzsfWpi80Zcq5oujeGviHEsOHYs4qc3iGHGsZY5ldvJ6aFzu4txNyh6WbZatvCM9DS/O up52lqe9xeI4Ptjyk+WqOD4yUMo7yb2ZfD72J2obTGL3405kKnNLYHUzJvkltV2caK1ndZHxyQ9S ULEA2ytOyozQ5JFBZB3FIqwh9pP3JVoQX0B0VrU0PDW8NMqt7a3tjCoptwedxIf6ZOIU6ltxKr6P 2oGvEaenuHxBcfnps5q1Ty/lw6xbrVv48OhUNABhrUesh6md6cusJ60nFFHN+qY0TIlJXxv7Spwt zhHnUnsUdlwk5viU1N43SSx4KM69SWPBrmFkRD7RHFoUPbDZT5HL08/j63zqkLvRU1NWiOt8WuIr 2wTb+JQvecE2xTZZZbQPE7+k9kVYoz/16cSv0h9phiuXw6b04vhjOWk+Y8pxciO1P+V0yJNqhJQi FL0+qV5eruJHO2ZH5d9JeULiBjgM6czHiBvFTWQtnzVVLW5L1aeGi9vpBPxVKhdxTl4ifpNaQ5mk 3STuzFts+4R3534uJQ/57D7qTfqQuMu+3v5VNdi+274Lqm0/Yj/Mx9tP20/ZL9kvRpf4QqO70Yli oSJG0Rw/jhamfiV+l7qB3Bpjil0I7yQTjfXDkDA0DAsjwhRhyjBVGBmmphFaSevpqy7CpXAp5cPl W+RHJP2rYpdXUroKf5ej8knF/q60vVuuXaUgTf15KgeRUyj6u+3dJxjk39x9ozOtqNzcDffrSa/V JGlr96c/1I4G/+G2rrSrO9uvBr3Rgqpu6pbv6Eo6z25lYUUKS0bFdu5Nv3ITQ2aTM/xKjX8jVxPq V2FmaeuXb9zqftC79E0MPsMxwxVjvDHFuNB4w9TNNKtiy5Z/rXFYaEuCpaBiw3aW9ah/w3ahpEJI G7ayBY7FjpWOL+Wb5KelrBcku2rOi2a2tqaU9SJt6tozHIhrcbAp2BBsduY4WwR/Frw8eBk9iB7I PGOKmefMC6aEecmUMq/CAsIC6R/pC/RF+jJ9jb5O36Bv1gykr9CH6SP0UfoYfdpRSB+nT9A/0EXB cHBgeGl4MZ1FZ9DZis1hmjAt8SBMF6YPM4TJwoLC5GFQ2RFBRfeke9O9xMPRg8Uj8scZi0K+jkDV H4knIj7P41RR4knPIMOp+FkhAcHPtS/hL4yf64rxG1klUKh4SjyNt8A9ajItLjZTuV/+AkexTcqH JIS3iVgaOy1qKDkXGyg/HEmLZ7HH2LCMrOBCMkfRJGWlraPtB7yLrwW6F3li35m3Iy4y+oatKLUA xdix7MfsOHY8O4GdyBawk9jJ7BR2KjuNnc7OYGeys9jZ7Bx2LjuP/YT9lJ3PLmA/Zxeyi9jF7BJ2 KbuMXc6uYFeza9hv2Z3sLnY3u4fdyxay+9j97Hfs9+wB9iB7iD3MHmGPssfY4+wJ9iT7A1vEnmJP s2fYs+w59kf2PHuBvcheYi+zV9ir7E/sNfY6e4O9yf7M3mJvs7+wd9i77K/sPfY++xv7gH3IPmIf s0/Yp+wztph9zr5gS9iXbCn7CgSAQCADQUAOIAADBKAABwRQACVQARKogQZogR4YgAlYgBXYgB04 AAVoEAxCQDVQHdQAoYABYSAc1AS1QB1QFziBC9QD9QELAOAADwQggggQCaJANIgBDUBD4AaNQGMQ C+JAPEgAiSAJJIMUkAo8IA2kAy/wgSagKcgAmSALZIMckAuagTzQHLwDWoCWoBVoDdqAtuBd0A60 Bx1AR9AJdAbvgS6gK+gGuoP3wQegB/gQ9AS9QG/wEegD+oJ+oD8YAAaCQWAwGAKGgmFgOBgBRoJ8 MAqMBmPAWPAxGAfGgwlgIigAk8BkMAVMBdPAdDADzASzwGwwB8wF88An4FMwHywAn4HPwUKwCCwG S8BSsAwsByvASrAKrAZrwFrwBVgHvgRfgfXga7ABbASbwGawBWwF28B28A34FuwAO8EusBvsAXtB IdgH9jPtmC5MV6Yb0515n/mA6cF8yPRkejG9mf7MAGYgM4gZzAxhhjLDmOHMCGYkk8+MYkYzY5ix zMfMOGY8M4GZyBQwk5jJzBRGYKKZGKYB05BxM42YxkwsE8fEMwlMKuNh0ph0xsv4mCZMUyaDyWSy mGwmh8llmjF5THPmHaYF05JpxbRm2jBtmXfDfwtbGkwGq+hTztbONs4sZybdnO7k9DjTnO862zo3 Obc4tzm3O79xfuvc4dzt3OMsdO5z7nd+7zzgPOg85DziPOo85ixynnKedp5xnnP+6DzvvOC86Lzs vOq85rzhvOn82XnLedv5i/Ou857zvvM35wPnQ+cj52PnE+dTZ7HzhbPEWep85Qp0BbnkLtiFuFAX 5sKd7Zwdqji3Sq6t5Z6trx1by/1aX/u0vnFpneAscE7+nTvrnLc4sy7xu7JKnqxr/H6slW6s5d7P waNcVpdGHqL+kfa49rv2vSUT6Hz9C2/NBWrIuqtkAyXKSyGd/91cFjQQyve/iHsFx0nv2hAaiUJa oOsxGdYXG4StxS7533idx28SMgIiehKbFQbFQf8Lqr3KqyrS/05qqGq26hQZTG73v2q6Kem0fi2W gQ9WqK9rK5XXCtUVC6qit+7BVXgjIsCvq1aqqkqiQk+toqZW0VIlJfUF2YHcQl6WlFNNx3K1VJtX RSmN1XWQNFJ9TKU2GmQYUqmIzq6qhZo9Zl+lAvpa/zxYqXxKuqeker5d77zmVzqrqJzywfLx8nny lfIv5d/Ii+SX5D/Jn0EBEAGZIBsUCbmhllBbqB3UAxoFbYRuwDIYg7WwGa4Nc3AD2AN74fZwD/hD uA/cFx4Aj4InwBPhafAKeDW8D/4Rvgz/At+F78EPEAHxIG2Qd5EOSB9kJDIFmYrMRRYh3yD7kO+Q IuQachO5jcpRBFWgWtSANkQboWnoO2hbdBy6GC1BSzEMU2E6zIBVxxisDhaBNcaSsJZYK6wH1gcb jE3GZmJzsTXYBuwb7CRWhJ3DfsEeYU/xIFyLW3EWz8Jb4x3wTnh3/AO8Hz4WH4fPxNfim/EXeAkB EyShJsKIWCKOiCdSiY5ED6IvMYAYS0wkZhLziE+J+cRnxGpiPbGX+J44QJwnrhE3idvEM6JUASsw hfH/sHfeb07Ue98HTM/0SSZTkmyy9LqAkx7YTMqmTbJsthOq0qQI0qUjTWABAekICsoiXVZAYClS Rem9g3QEFZBe78zsHm/Pc9/X9ZxzrnNd5/nh+StmXu/v+/X+ALWADCAbSAJtgIHAUGA4MAoYB0wC NgDlwCngInAJeAiiYCPwbTAB5oJ5YDuwJ/gxOAWcAc4G54DzwLXgenA/eBJ8AD6GUAiDTFA6VAuq C2VCPigC8VALKB8qgNpB70Bdoe7QVGgatBj6EloOHYIOQ5egK9BV6Dr0EHoEV4UlsBIGYQg2w9Vh HxyHc+F34FHwl/D38E74R/gS0h2ZgWxDfkAuIr8hv6NBdA96Bb2HdceGYWPwbvgkfB6+A3+qMWra akZppmuea0u1N7S3CClhJSYSJcRpXRVdvm6X7g7ZhOxDLiW3kBcolrJTQepDahA1lfqUukhdoxvQ DtpLj6M/ob+gn9KvmKpMP+YL5hs9rq+pr6W363P0bfSD9GsMSkMt0zLTN6azprtmlznLvMytV4wk qmHfm/aB14HWzGJZe+RxdgFKu9PQhtHc3Nbwc7+VW+eHcxfDxyXbGEe0J1aHO2K6ovaYp0Znuk3g QuxBnj26Ut8SHxrQUrfyPQo990Ix3LwQjPJqqVT6wBFxcIEzmmPSl1K9tr/jA0dXN8s31E5118zO c9cK8ExR/mp3Hc2crJGy8fKWsb5SDNrirOPmCMpbmHWIGEAMiSmI/fJljgPegQXv8/uyi4JJcJF3 HN9fVxKcpVscv8gfNk+Xj5df8NUlJe56wbPBX9z13Q0imTEq/mthO+dd5x3ppMIJ2S1lx8MvVM1j I4uidHm8Q1GfbEVUFduCTdM/c5UwvGl5eJsPcw1gemcnmVLoLPPM3Ricq9qsblQ8oXi2tzhdpb9a fDAeiIfjBShnaGi7ZM+0r3HMcixwrHfOc650rnatd3yIHFUkHCfkq71q/IgGkIWyW2vueBZ6Sj3L PKs8P3lOe854znrOec57Lnguei55Lnt+9lzxXPVc81z33PDc9Nzy3Pbc8dz1/Or53XPPc9/zwPOH 56Hnkeex54nnqeeZ57nnheel55XntecNV4WrylXj3uIknJSTcXJOwSk5FafmAA7kIA7mEA7lMA7n NJyOIzmKozmG03MGzsilcSbOzKVz1bkaXE2uFlebq8PV5epx9bkGXBPOwmVyMS7OZXMtuBwuweVy eVw+V8AVckVcMdeSS3KtuNZcG64t145rz73Dvct14DpynbjOXBfuPa4r143rzvXg3ud6cr24D7je XB+uL9eP688N4AZyH3KDuMHcEG4oN4wbzo3gRnIfcaO40dwYbiw3jvuYG89N4CZyJZndM7vJT0lt 6k3qKZl7M/f83y/JefI9Bdh3viX299B1fg7Iwlisg32uv0Q6MfFeQKKKEZ878GhCttudpZmqCZEr wKlaXLqTdyP3tA99LfKPmPs4Xroux4/Fjxek8QOCDZzOgpUanbN1hDFPgyaQNQyNyXXykpA3ZibP hIbFHyll1P3C37E3aD7K0nfCrV0fO6f5JREwXRn5whuXHFM3wfohEWwj0g3pihTQK/IMSC/pCWQo zPMot0DaLTpJ/RCtTqvgdLTQ1wCdae8u642uVuoAub0Luih3KLdJ+iv6MD4JfeQf5x/LHadzTM+w HCyJXGO2yD/D62FncRdei7uLr8OX2N/gw/FE9Gy4TcATyFSsVBx0lEpr5J0HGsGd4+9qfJISdQvN RrgLNLLom8CmwMZ8s2a+I645lf82r9Hc1LxUX9R6tQ5td9lr7TntPu02fKdjc3w/oQpNyz9IDc9a nH80awE8KP/X/KeO1+pDxA7iKHGAeOHtmX+DeSVdxX+hXujM143XDefLClbwe5y9I3AkjVTo1utu 6vaSYPxn53yyOf9bflPncvAs2UE+gVxNlpOnyRfedfG7hT6quWZYYTAPi/9OPgGuxe8Xhrx7sqZL e1BzqW7U3dCt0E3akgvTdWI9aXsYCoNhNIwA1wllkSM2ULWbXkJfpS+rUJ8y0Ay8Fe4d7lVUip8q +kEuZfqY7zCTXSOZH5lDcC24sLggDrucvobBufqGeie/3zs1+Bl/Qd9WH9AXO8uzo5FBkeJIYYTP Ts+ung6oMn1+xYV4CBtbvCayKrLSUNNQO17I94l71SSwEqkJ5CF54CTZBm06tBEyJkrwmKu1bILs K9SBhnIzyLWSrd6q9gLALC0pUKoe2z9Gz2Mu9HflC9NDrLbvO2y0faXsPrYHB+1n8AaBennL8HP4 pbztGgrY56ivmZdf27cwcE1bW9nNMTi+2+tVjzK314wrYrHN2C3ZJhKNtyLGRbY73/N2JHYXNOYn 85OIg/zn/MKgLzimYDa2WjcpOMUZi1DOYcCH1KlIddBXcD6XCt6QX5GUy9aRvcih5AQnXog693s3 FnaiknBtWZvCFVDLwt3U/lh2LF74W/gtx7awXr0dBFzNAUaZSa9UD6cP0zeK5rjaFL+n7M20KZYz a3OLmE30t3EsDsRV4T/i0uIl8WZxe2S3WxL5yi0vfubGIpv49+WUYn9giIsHqkj9SEKOAXOQJ9Ig 2hntir6PzgCzVWfQg+gBfxdMhpHYIKxUPh/7AVopz5M78C/x71QF+Hn8LH4VfwTh6ruaEZrRmq80 WyW/aSMqiTah7cE3UfbQLssaS/Qk+npbe9sQ04m9OrVzSPAwmUl2JLuqJqqWkktCQedJmAt1oEyh nlRt7wn1auoCeJ6OK/fK34Bl9Ed0qbTMVcAQIM68y4xiljJ79PX1M1Vl+rmSc5EhkWH6X/EFupay EfKq/9tdWAARLsKK92CfU70iQcdcu8vZwiV1zTc/d2cn6AST0CcMCWMiLWFKmBPpieqJGomaiVqJ 2ok6ibqJeon6iQaJholGiYxE40STRNPE2wk2YUlYE7aEPeFIOBOuhDvRLNE8kZnwJLiEN+FL+BOB RFYimAglwolIIprgE7FEPJGdaNEirwWVcyTnaM7xnBM5J3NO55zJOZtzLud8zoWci+LKc8XG898t PJvLZHPyNEDVRD/FXu5SojNkUzaOPEt8heSadiWmAXxiU6JMNxoZQnwpmyjtDw/QNFWW6HrIFiNX gYT8A3SHZA4Nof7QE/521IHWon3ISKhp7gexp/K19pYKnWprbgJo68+UhsAh0DH0jL2vrn6oVaKN KuH7WFEKHkGa2g9hv+Ey3Km6pvooegXfgg2P/qpsjz/EbwRaU0fNDdXX86sHyvMlPBi8HbjoUGiN 0pna1Y4V2stZM7zZWYuCDYmMrK1Eo6zdJET40PHR9t4O/ATiIrNTccIZlbXVddQV8xuCk72DyRO6 S/wtspFsfQwgD4UiobzQQKqp86xuUKyO8yXVSj+RKo05qK9jPsk46k6s2HtN+ZjGlFPRGF2zyMrH ihqHGVewqHVRNl3myqYvxcrDfQJrwuOZvOKqxVjRL7GrRS/UJ03Xw3f1kuI+sV3FvYp7FHcunuQ6 U9zfdQGQ6IfFG0SWp8tdbxRtpWg8CpiSjZNNkk2TbyfZpCVpTdqS9qQj6Uy6ku5ks2TzZGbSk+SS 3qQv6U8GklnJYDKUbJTMSIaTkWQ0ySdjyXgyO9kimZNMJHOTecn8ZEGyMFmULE62TCaTrZKtk22S bZPtku2T74ir3P/8lve/sONdpSomrRqqurSatNrCapcl5j83W4ZKRkrGpcinJEWAc1L8s1DyZYqB VqcoaL24iVCeoqGtkm2S7yU/SA5IDkoOS46l6OiU5FyKkASv4KrkN8kfkoeSR5InkqeSF+LeS5XU X6ZaikqxFLEK9KSXpktrVG6/VJgHDaUZUluKqoQVmExxB8YvDUpDKbYVKOudFGd1lr4n7SbtkeKt PtL+0gHSQSnqFdLb0Sn++lg6QTpRWiKdJJ0pnSVdJF0sXSUtS1GZsBWzU1yL+SlFx8ekJ6TnpTek N8XdmF+lD6RPU3+8FesxAr2pxQUZNEVxuhTHCW5D7RTNNZJlpIjOnWI6nywoC4lkl5C1lLWStZG1 lbVPUV5XWQ+R9HpXsp6wZDlGNlY2PvW1mShy3+QU+c2RzZXNly2WfSVbKlLgKtlq2TeyMtk62XrZ Btkm2XbZ7hQZ7kvx+0+yo7LjsrMiJd4UOfG3FCnelz2QPZG9lleVS+UqOSzH5JTcmCL9WuJqTT15 A3nDyuUaq9wud8idco88JA+n6DJbNC7yxB2KQnnLyh2bCubsJO8i7yH/IMWeA+RDUvw5Xj5BXpKi /QoOnSefL/8sRf6L5ctS9L9avka+NkWmu0U2/Um+X35IfjjFqCflp+Rn5BfEZOBKBbHKH8ofy5/L X8hfyd8oqoj8qlAoKxlWp9AraivqiiwbUAQV4RTRJhS5iuIU17ZVtEuxbSdFN0XPP5c9hytGils6 ExSTxTWd2Yq5inkp+i1N/UcJyzrrFZsUuxS7FXsV+xT7FQcVJxRnFBcU9xSPFc9EQq4mGiKyFCkD KVaGRVrWpXi5hrKmyMwNlY2VthQ5N1dmKj0iP/PiFk+xspVI0u0rE45uyu7KHimu7q3sm2LrAWLq L6z0DBWz/xHKEuWUFG9PVU4TmfvrFHULuz3rlBtS7C2YJ7uUe8W3gWPK4ykSPynu+JxVXhCXfP62 43NHeU/5IEXoj5SPlU+UT5XPlS+Ub1K0LlEpVJAKFaldr6qpqqWqo6qnapwieGHnR1j5aa7KVHlU QVVIlUImVVyVSLF9gSqpapUi/HYi43dRda3k/I9UY0XWn6gqUU1TfaqakaJ+4Z1inmqhuDHypWqp 6L6sVK1SrVGVqb5TbVRtVm1RbVV9r9qh2q3ao/pBdUB1RHVUdVp1RnVedTX1VbghLgc9Vj0TsgPV G3UVcTtIWpkiYGpCTYp7JbXUtdX11PXVDdSN1BnqJpV7Qs3VnsqcIaAOqiPqFuoccV9IeCdpqW6r 7qTurO5S+VrSS91bzCGGqoerR1XuDn2snqCepJ6i/lQ9Uz2nMptYqP5cvVy9Qr1avVZdpv4uRSqC l7O9Mq3Yrz6gPqQ+rD6hPqk+qz6nPq++qL6mvq6+ob6pvqX+RX1XdHYeimlGFaAqIAFkgBxQiskW AmgBAiABBtADRsAEmIHqQC2gHtAIyACaAjbACbjEjSMO8ANZQBDggTiQDbQAEkAe0BJIAq2BNkDb SuenYv/oA6A3MBD4UExJRog5yXhgEjAbmCOuIn0NrKx8A9oAfAdsBsorX4L2APuAn4BTwDnggpin XAOuA/eBB8BDcTVJDQIgDKIgXvlaVEfMWoRdWg/IgT5xTSkMRsHsyvylAGwLtgM7ijZRT3FhScjt hoAjxOzuY3AiOAmcAk4FZ4AzxYRmLjgPXAguApeAS8GvwRXgSnAtWAauF30jYZNpL7gfPAAeBI+A x8GT4CnwLHgevAJeB2+Bd8HfwQfgH+Bj8Nlf0kBYTHlwiICM4jquGUqHqkM1xcynHlRf3MptCrGQ DbJDTjEFCkFhKAJFIR6KQS2ghJgHFUMtodZ/pkKDoeHQSGgcNAEqEROi2dDnYkokWE7LoRXQSmhV ig62QDvF1OgYdBI6DZ39Mz26Cd0WEiToGfQcegG9gl7DVcXNKAkshRWwElaJqRIKM7AeNsFmOB2u nuKY2uKeVMWalBvmYB/sh7NgXsyd8uECuBBuBb8Dd4Q7w13g7nAPOPW3Bn8ID4JHwZPhT+AZ8Fz4 S3gJvBpeD2+EN8Hl8PfwDnin+IK3F94H/yhuTh2HT4vW1SXRuxJWpx7Af8DPETmiRCAERjCEQhhE j9REmiBNERbhEC8SQXgkhuQgCSQXyUMKkEKkFdIW6YB0SvFvN6Q70gvpi/RDhiBDkeHISGQUMgEp QSYjU5BPkKnINGQGMhP5DClFViLbkD3IXuQH5ChyCjmHnEcuIpeQy8jPyBXkKnKtog0j5GjIPeQx 8gStgspRDKXR6mhNtBbaEG2Kvo2yKQbjUD8aRENoDM1NEXohWoy2Qdui7dB30U4id3RLkUdfdCD6 IToSHY2OR6eh09EZ6ExxPWguughdgi5Fl6Mr0dVoGfotug5dj25Gy9Et6A50F7oH3YvuRw+kmOUE ehI9g55HL6AX0SvobfR39B76EH2EPkGfoi/RV1hVkWhojMHSsRpYTaw2VgerizXEmmBvYyzmwgJY Vorp87ECrBArxpJYK6wD1lFMp7tj72MfYL2xftiAFBENw4Zjo7Ex2NiKNhQ2DZuOLcAWYkuwUuxr bBm2HFuBrcY2YN9hG1OEuBX7HtuD/YDtx85iF7Fb2G/YA+wP7An2FHuJvcLepP6zFTiIUziNM3gt vDZeD2+AN8GduAv34j48jEfwGB7Hc/AE3hHvinfDe+CD8KH4cHw8XoJPwqfjM/B5+Hx8QYrNluBL 8eV4Gf4tvg7/Dt+Eb8G34zvwnfgufDf+I74fP4IfxY/jJ/BT+JkUwZ1Lcdwl/DL+M34lRXM38N/x P1J/+I/wp/gzjVyj0qg1gEanoTRGTYamsaapxq3xaUKih9dW01HTSdNZMyxFfx9pRqUIcJxmqma6 ZoZmjmaeZr5mQYoISzUrNCs1qzSrNWs06zUbNeWarZrtmh2anZr9mgOaw5pjmlOas5rzmsua65qb mjuaXzXPNM81LzQvtW9pca1Ga9Sma2trM7R2rUPr0Xq1AW2WNqSNaLNTjNlW213bQ9tX2187WDtM O0E7WTtV+6m2VLtMu1r7rXaddpt2n/aw9pj2pPac9pL2svZn7RXtde0N7U3tLe3v2nvah9pHQmdD +4aoQlQjJISUUBIqAiJgAiM0hJYgCIowECbCTKSLLw/1iEZEBtGEsBJ2wkE4CY7wia/nPBEjsoli ojXRlmhHdBGIV8hHiXFiUvxJinxnE/OIz4kviEXEl0QpsZRYTawlyojNRDmxg9hN7CX2EweIg8RR 4jRxkbhK3CDuEHeJF8QrXRWdQqfWgeJ7h0Fn1Jl0NXR1dPV09XUZOpeuhS6hy9Xl6fJ1xbqWKZbq quum667roeul66MboPtQN0g3XDdaN15Xopukm6qbppulW6RbrFupW6Nbr9ui267bpdut2yu++R/R nRC9x0u6K7rrupu6O7rnuhe6l7rXujekhJSRChIkIRIlcdJImskaZF2yEdmEtJDNUyxf8f5SRLYh OwhcT3Yje5EfkMIi+WByKDmS/IgcRY4lJ5CfkgvJJeRScgW5mlxLriPXkxvIcnILuY3cQe4kD5En yNPkGfICeZG8RF4X/EryCfmUfEFVoapSKiqNMlG1qYZUUzFlb055KT8VoIJUiMql8qgCKkm1ot6l ulG9xPx9KDWcGkONo0qoyWIWP5uaQ82lFlCl1NfUKmoTtZn6idpPHaCOUqeo89QF6iJ1ibpCXaWu UbdEX/MOdZe6Tz2hXtLVaBUN0RidTtek69D16QZ0Bt2YZmkLbacddCbtpX20n86iQ3SYjtIxOk63 oHPoArpQ6JnR79Dv0h3ojqL1OZAeRH9Ej6NL6E/omfQseh79Bb2ELqVX0CvpMvpbegO9kd5Eb6bL 6d30fvoAfZA+RB+mj9LH6PP0JfoyfZW+Qd+pfEVQMEoGZCCGYPR/edmqzzT4y+uWhbEzDsbPRBme yWOKmDZMW+ZdphPTm+nD9GNGMWOZiUwJM5mZwnzCTGVmMfOZL5hFzGKmlFnKfMOsZb5l1jMbmU3M FmYns4f5kdnPHGQOMceZE6KD+ox5pZfo5XqFXqkHRBsV12v1pF4vvmzU09fXN9Tb9U59QJ+jT+jz 9MX6lvpW+jb6tvq++n76Qfph+hH6CfqJorc6Uz/3L+7qGv1afZl+u/57/Q79T/oD+oP6E/qT+lP6 i/pL+qv6X/XPDHKD0gAbcIPJUMNQ01DLUNtQ19DQ0NjAGqwGW+VVkL/cBKloqRh2V7zFGo4bThpO Cw6L4ZLhsuFnwS4xXP87E+83wz3DfcMD0cR7anhmeG54aXglGnnVjG8ZpUa5UWFUVnp5sBExYkZc sAQq7TzGqBf6/5WOXg1jTaFzX2nqNTI2NjYxNjW+bWSFzrvRZrRXtN2NzYyeSm8vUGnuhY2RSnsv 25hT0Qs3FlZ6fK0qPb52lSZfZ2NXYzdjD+P7lR5fH2NfYz/R5RNMvuHGkcaPRJ9vjHGscZyxxDjF +IlxqvFT4yzjbOMc41zjfONnxoXGz41fCO1G4xJjqXGZcbnQEzSuNq4xrjWWGb81rjOuN24wfmfc bCw3bjVuM2437jTuMu4x7jX+YDxgPGg8X9m60qcZRFuw+t+ZgmyaVbQFuTRvWiAtKy2alkjLS8sX ugGVl48Hpw353663/Nn8qWz9pJ1MO/VnQ+jntCt/awmZqppkJsgEm7QmnYk00eLVl9j/effFNMb0 uanUtNS0zLTc9I3pe9Mu027TPtNPprOmK6brpl9Md00PTU9Mz0zPzVXMoJkym8w1zHXNDc0O8V0u ai4yJ83tzX3M/c1DzWPN48zjzZPMn5inmqeZp5s/Nc8wzzEvNC8zLzevMZeZvzWvM2813zH/an5s fmZ+bn6d/la6LF2erkxXpavTgXT4n76T/D+vJN+rcb9mtf8H7x//z+vHwu3j5D909/j/Xz3+164e /9s6PP++XlHtJXXu13lW53XdqmIDKLdRntD/E5tB7Ru9859q5fynWkgVfdQMKAPNoDM8GbMzvszY k7H3X7/Sy6pZgAVZiIVZhEVZDatlCZZi9ayBNbJprImtztZm67H12QZsQ7YJ25R9m2VZC2tl7ayD bcZ6WD8bYLPYEBthoyzPxtg4m83msEVsMduSbcW+y3Zg+7B92f7sIHYYO5wdwX7EjmbHCAYgO4Gd yJawk9gp7DR2eoU5x85mP2MXsl+ypexSdplgULEr2VXsN2wZ+63gGAl+EbuJ3cyW/8UG2sXuZvex P7EH2cPsUfYYe4Y9x55nL7CXBPuCvcpeY6+zN9nb7B32LnuPfcD+wT5kH7FP2BfsK6Ghb6liqSZ0 5S1yi8KitKgquukW3KKxaC06C2mhLLTFYEmzmISWt6WGpaaltqXOfzeo/7s9bbFa7BaXxW3JtHiE brLFZ/FbgpaQJWzhLTFL3NLCkrDkWgoshZZiwW61tLe8K1irls6Wrpbuln6WQYJdahlmGWH5yDLW Ml4wSC0lgjFa4YtapguOqGWmYIVaFgvWp+B8Wr62LLOssayv8DQtWy3bKpxMyy7LbsG/tPxUYVoK bmWFVyn4lJbzlouWS5bLlmuC+Wi5b3ko2I6WJ4LnaHkhuI2C0WitapVYpVaF4ClaIStsRayYFbdq rKRVbzVY0wTL0FrX2tDaSPAGK5xBwRe0NrNyVr/g91VYfdacCmfPWmRNWlsJTp61nbW99Z0K/87a ydrZ+l6FbWftZe1j7WvtJ9h01oHWD62DrIOtQ60jrKOtY6xjBetNcN6sJdbJ1k+s0wSXzTrTOkfw 1SrcNOsS61Lr19Zl1uWCeWZdZf3GWmb91rreutG6SbDGrNus2wVPTLDCrHuse60/CC7Y3ywwwfwS rC/rNcHy+pvdJZhd1nvW+9ZHgsVlfWV9basqOFo2mU1lg2yoDbPhNq2NtDE2g81oMwlOk62mrbat jq2urZEtw9bYxtqsNpvNYXPbmts4m9cWsGXZeFvclm1rYcsRjA9bka3Y1tbWyfae7QNbX1t/2yDb EMFasH0kuAmCj2CbYJtom2SbbJtim2qbZvu0otVvW2P7xrbWtk5o0Ns228ptW2zbbd/bdtt+sB2w HbQdtR0TOsi2M7ZLtlu2F3apXWEH7YSdthvt9ewuezN7pt1nL7C3tLexd7G/Z+9u72sfaB9qH23/ 2D7ZPtf+hf1L+xL7Svsa+0b7Afsh+xn7Wfsj+xtHVYfCATpwB+FIc9R01HfYHc0dnCPiiDsKHcWO jo7Ojq6ODxwfOgY7pjpmOeY6FjhKHUsdKxzrHRsdmx3ljq2ObY5djh8dBxwnHDccLx2vBffFiTtr OGs66zidzqgz5mzhzHe2dLZ2vufs5uzt7Occ4hzmHO4c5RzrnOac6ZznnO9cLnRznOXO/c6TzrPO O867zofOly6py+hyutyu5q6gK+LiXdmuAldrVxtXZ1d31wDXYNdQ10jXx64S1zTXfNdnrlWuMtd6 1xbXj64DrjOuC67Lrhuul643bolb7sbcGrfOrXenibuKtdx13PWE/pG7sZt1O90eN+f2ubPcIXfU HXdnu3OaDWk2utm4ZhObLf2H7khXXJH+d96Q/mfuR0PNseb6//gV6G6Z3TOXZJZmfp25PHNP5t5/ 7FozN4VbwK3jNnKbuHJuL3eIO8Id505zl7i73BPuGffCW9Vbzav2Il6dl/SmedO9Nbxeb9gb8ca9 2d5cb6G3WGgTeDt4O3p7egd6B3uHe8d5p3qne2d5Z3sXeb/2rvGu8270fu/d4z3hPeW96r3mve29 673nfeNT+jBfXV8DX0Ofw+f3tfAV+Fr7uvh6+N739fYN8A30jfZ97Jvu+9Q32/eZb6FviW+D7zvf 9749vqO+k757folf7Yf9Gj/hZ/xmv9Xv9Gf6OX+eP9/fxd/NP9Y/zl/in+yf5V/gL/Xv9B/2n/Lf 9P/iv+9/GJAElAFVQBsgA4ZAvUCzQGbAEwgEsgJ8oDDQOtAm0DkwJDAsMCowOjA7MDfwVWBNYGNg U6A8cDpwJnA2cDFwLXAz8EfgVeB1FpnVNKt5VsesTln9s4ZljcwamzU5a3rWjKw5WQuyFmUtzlqR tTVrd9ahrNtBJIgFtcF6wQbBhsHGwSZBXzAnmAz2CY4IjglODk4JzgrODX4WXBP8Nrg9uCv4U/Bw 8GzwevBG8Hbwl+DvwXvB56HqoSYhW8gZ8oaCoUgoGsoN5YVahTqEOoW6hnqGBoaGhaaFFoXKQutD 50M3Q7dCD0JPQq/Cb4UVYTAMhZEwGtaFyTAT1odrhTPC7nDzsD/cOtwm3CncK9w73CfcLzw+/FX4 6/Cy8DfhbeEj4VPh0+Er4bvhP8IvImAEjiARTYSKMJG0SPVIjUidCBvJjAQjfKQwUhwZJHQ/IpMj MyNfRBZHvoosjSyPrIysiqyNrItsimyP7I7sieyNHIgcjJyOnI/ciNyO3I08jDyLvIqqomiUidaK 2qOOaDAaiiaiudGiaLto++i70Z7R3tG+0YHRwdEh0WHRSdFPozOjs6OLosujK6OromejV6K3o79E f40+ij7l1TzAgzzKa/h0vgHfkG/Cu3kP7+MDfIyP8y34Ar4t/z7/Ad+H788P4MfwE/hJ/GR+Gr+Q /5z/gi/jN/Cb+B38Hn4fv58/zB/hz/AX+Cv8Lf42/xv/B/+Yf8q/jlWLSWOKGBCjYuZYnViTmCVm izlinpgvxsfisexYcaxnrG9sYOzD2JDYyNjU2MzYrNiCWGlsVaw8tiW2K7Yndj52NfYw9jT2LPY6 Lo2r4kAcjmPxBnF7vFncGw/EQ/FwPBoviBfGW8Xbx9+Jvxvv8F+9nX9olWUUx5+7hi5Bsxkjba4r rRS50uW65AYhgkOXd3wfOc/v3Mq7ze1ett3p3SxERMWS8scfFdVWpA1nok4q/FmJGzVl/UCYIBhI IKLp0FmCsrU5fd9X/9Sg/eEDz3nOe3i+5+X8/znnQSMyaMJqrMFarPd7dPEeNuN9fICt2Ibtfict Psan+AytaMMX+BI78RU6sBf7sB+dOIhDOIwjOIrvcRxd6MZP6MFJ9OJX/O53Svo0H87iHP7An7iA i34PIa7gKvpxDdcxgBv4G//gJm5hEEMYwR2M4i5nPIc/wXN5Hp/IJ/HJPJ9P4QV8Gi/k03kRn+Hz YfxFPptHeJTHHjpZaEEwU8ifKFTGl/AEl1xzy9/gy3gFr3y877ovnbpUPor6eRQlRJIq6E1KUh2l KE2raSNtom30EbXTLtpNe+gg/UA/Ujf10CnqpV/oKvXTNRqgQRqiYRoVITFRTBJPianiZREVcbFI vC5IWFEhKkW1qBerRFasE+vFZvGJ2CF2iWMyXz4jC+V0OUe+IufJuCyVJN+SO+VuuU92yi7ZLX+W PfI3eV5ekiOKqVw1Q72gZqqYmqsWqOVqq2pT36gT6rTqU2fUZdWvrqtbalD9q0Z1nn5SP6+jOqHL tdEZvUG/qz/UrbpTH9DH9Sl9Xl/Qw+ZpM8ssNItNmUmY5SZpas0Ws8O0mw7TaY6ak6bP/GUGzA0z ZEbsZFtkX7JRW2Ln2VdtwnJbaWtss33Httk99jvbay/afjvsQm68y3fPuRKnnXF1Lu0a3UrX7N52 W9x21+raXYf72n3rutxp1+cuuyF3Zwx8jk/1jIHRCSii/88ejYE7Yv4KsftrlrdzahoydQ/8gub7 /nz/e8nKZCYSLsvWt3g2nU1GwolkJvnwaCRcnmzx4ouzK+oj4YVrsg0P/pLHSlkuK2C56eraKm+3 pGtWNGWbGjNsXOmicsmqqv27qTpPx1KpZCbNquq9fKyqwcvHUv+pjQXaeKCNB9pYoI0F2jh7Nqix KLDFgZ0d2Bwva5SVeDdeCyZlF3u1R7yIH/e9Ys/344Us7OUoZqG7q1hoXId3TghqCrFaFhr/uXfe vgdZWd2sDQplbmRzdHJlYW0NCmVuZG9iag0KMjAxIDAgb2JqDQo8PC9UeXBlL1hSZWYvU2l6ZSAy MDEvV1sgMSA0IDJdIC9Sb290IDEgMCBSL0luZm8gMTEgMCBSL0lEWzw1QzQzMDc4MENDNzgwQjQz QTc1MTUxQzUxQjc1MEFCRj48NUM0MzA3ODBDQzc4MEI0M0E3NTE1MUM1MUI3NTBBQkY+XSAvRmls dGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAzOTk+Pg0Kc3RyZWFtDQp4nDXURVOWYRQG4Of7TFJBRQU7 MLC7sbu7u1uwFbsTE7u7C125cMZx5x9wxr/hFl/eS8/iXHNmzr29Q4imoiIR7awQKilBeUziR0zK N/yJSS3Ar5i03zHppTEZZSEko3h2+IRyfMZH/Hv5EgUyv/+/PuA9EkhHDVRHFSRRDVWRhlSkoCYK kYN6qIsMZKIWaiML2aiDZmiKJqiPBmiIXOShERqjPdqhLZqjBVqiFVojH23QA93RDQXogI7ohM7o gq4YhIEYgJ7ohd7og77oh/6YiWEYiiEYjFEYiREYjnEYizEYjUmYiAkYjxmYjmmYjCmYig2YizmY jVlYiAWYj3lYiRVYjkVYjCVYimVYj3VYi1VYjTU4hC3YjE3YiD3YjR0oQjG2Yhu2Yxd24iAOYD/2 ogT7cAXHcBRHcBincBIncBzncBZncBqXcQkXcR6luIAbuI5rKMNV3MUd3MYt3MQ7PMQD3Mc9PMUT PMYjvMQLPMczvMUbvMarqORy8+NyzMupJFn0Nab4Zwh/AdLxXP0NCmVuZHN0cmVhbQ0KZW5kb2Jq DQp4cmVmDQowIDIwMg0KMDAwMDAwMDAxMiA2NTUzNSBmDQowMDAwMDAwMDE3IDAwMDAwIG4NCjAw MDAwMDAxMjUgMDAwMDAgbg0KMDAwMDAwMDE4MSAwMDAwMCBuDQowMDAwMDAwNDU0IDAwMDAwIG4N CjAwMDAwMDI0OTcgMDAwMDAgbg0KMDAwMDAwMjU1MCAwMDAwMCBuDQowMDAwMDAyNjAzIDAwMDAw IG4NCjAwMDAwMDI3NzggMDAwMDAgbg0KMDAwMDAwMzAzNyAwMDAwMCBuDQowMDAwMDAzMjE2IDAw MDAwIG4NCjAwMDAwMDM0NzkgMDAwMDAgbg0KMDAwMDAwMDAxMyA2NTUzNSBmDQowMDAwMDAwMDE0 IDY1NTM1IGYNCjAwMDAwMDAwMTUgNjU1MzUgZg0KMDAwMDAwMDAxNiA2NTUzNSBmDQowMDAwMDAw MDE3IDY1NTM1IGYNCjAwMDAwMDAwMTggNjU1MzUgZg0KMDAwMDAwMDAxOSA2NTUzNSBmDQowMDAw MDAwMDIwIDY1NTM1IGYNCjAwMDAwMDAwMjEgNjU1MzUgZg0KMDAwMDAwMDAyMiA2NTUzNSBmDQow MDAwMDAwMDIzIDY1NTM1IGYNCjAwMDAwMDAwMjQgNjU1MzUgZg0KMDAwMDAwMDAyNSA2NTUzNSBm DQowMDAwMDAwMDI2IDY1NTM1IGYNCjAwMDAwMDAwMjcgNjU1MzUgZg0KMDAwMDAwMDAyOCA2NTUz NSBmDQowMDAwMDAwMDI5IDY1NTM1IGYNCjAwMDAwMDAwMzAgNjU1MzUgZg0KMDAwMDAwMDAzMSA2 NTUzNSBmDQowMDAwMDAwMDMyIDY1NTM1IGYNCjAwMDAwMDAwMzMgNjU1MzUgZg0KMDAwMDAwMDAz NCA2NTUzNSBmDQowMDAwMDAwMDM1IDY1NTM1IGYNCjAwMDAwMDAwMzYgNjU1MzUgZg0KMDAwMDAw MDAzNyA2NTUzNSBmDQowMDAwMDAwMDM4IDY1NTM1IGYNCjAwMDAwMDAwMzkgNjU1MzUgZg0KMDAw MDAwMDA0MCA2NTUzNSBmDQowMDAwMDAwMDQxIDY1NTM1IGYNCjAwMDAwMDAwNDIgNjU1MzUgZg0K MDAwMDAwMDA0MyA2NTUzNSBmDQowMDAwMDAwMDQ0IDY1NTM1IGYNCjAwMDAwMDAwNDUgNjU1MzUg Zg0KMDAwMDAwMDA0NiA2NTUzNSBmDQowMDAwMDAwMDQ3IDY1NTM1IGYNCjAwMDAwMDAwNDggNjU1 MzUgZg0KMDAwMDAwMDA0OSA2NTUzNSBmDQowMDAwMDAwMDUwIDY1NTM1IGYNCjAwMDAwMDAwNTEg NjU1MzUgZg0KMDAwMDAwMDA1MiA2NTUzNSBmDQowMDAwMDAwMDUzIDY1NTM1IGYNCjAwMDAwMDAw NTQgNjU1MzUgZg0KMDAwMDAwMDA1NSA2NTUzNSBmDQowMDAwMDAwMDU2IDY1NTM1IGYNCjAwMDAw MDAwNTcgNjU1MzUgZg0KMDAwMDAwMDA1OCA2NTUzNSBmDQowMDAwMDAwMDU5IDY1NTM1IGYNCjAw MDAwMDAwNjAgNjU1MzUgZg0KMDAwMDAwMDA2MSA2NTUzNSBmDQowMDAwMDAwMDYyIDY1NTM1IGYN CjAwMDAwMDAwNjMgNjU1MzUgZg0KMDAwMDAwMDA2NCA2NTUzNSBmDQowMDAwMDAwMDY1IDY1NTM1 IGYNCjAwMDAwMDAwNjYgNjU1MzUgZg0KMDAwMDAwMDA2NyA2NTUzNSBmDQowMDAwMDAwMDY4IDY1 NTM1IGYNCjAwMDAwMDAwNjkgNjU1MzUgZg0KMDAwMDAwMDA3MCA2NTUzNSBmDQowMDAwMDAwMDcx IDY1NTM1IGYNCjAwMDAwMDAwNzIgNjU1MzUgZg0KMDAwMDAwMDA3MyA2NTUzNSBmDQowMDAwMDAw MDc0IDY1NTM1IGYNCjAwMDAwMDAwNzUgNjU1MzUgZg0KMDAwMDAwMDA3NiA2NTUzNSBmDQowMDAw MDAwMDc3IDY1NTM1IGYNCjAwMDAwMDAwNzggNjU1MzUgZg0KMDAwMDAwMDA3OSA2NTUzNSBmDQow MDAwMDAwMDgwIDY1NTM1IGYNCjAwMDAwMDAwODEgNjU1MzUgZg0KMDAwMDAwMDA4MiA2NTUzNSBm DQowMDAwMDAwMDgzIDY1NTM1IGYNCjAwMDAwMDAwODQgNjU1MzUgZg0KMDAwMDAwMDA4NSA2NTUz NSBmDQowMDAwMDAwMDg2IDY1NTM1IGYNCjAwMDAwMDAwODcgNjU1MzUgZg0KMDAwMDAwMDA4OCA2 NTUzNSBmDQowMDAwMDAwMDg5IDY1NTM1IGYNCjAwMDAwMDAwOTAgNjU1MzUgZg0KMDAwMDAwMDA5 MSA2NTUzNSBmDQowMDAwMDAwMDkyIDY1NTM1IGYNCjAwMDAwMDAwOTMgNjU1MzUgZg0KMDAwMDAw MDA5NCA2NTUzNSBmDQowMDAwMDAwMDk1IDY1NTM1IGYNCjAwMDAwMDAwOTYgNjU1MzUgZg0KMDAw MDAwMDA5NyA2NTUzNSBmDQowMDAwMDAwMDk4IDY1NTM1IGYNCjAwMDAwMDAwOTkgNjU1MzUgZg0K MDAwMDAwMDEwMCA2NTUzNSBmDQowMDAwMDAwMTAxIDY1NTM1IGYNCjAwMDAwMDAxMDIgNjU1MzUg Zg0KMDAwMDAwMDEwMyA2NTUzNSBmDQowMDAwMDAwMTA0IDY1NTM1IGYNCjAwMDAwMDAxMDUgNjU1 MzUgZg0KMDAwMDAwMDEwNiA2NTUzNSBmDQowMDAwMDAwMTA3IDY1NTM1IGYNCjAwMDAwMDAxMDgg NjU1MzUgZg0KMDAwMDAwMDEwOSA2NTUzNSBmDQowMDAwMDAwMTEwIDY1NTM1IGYNCjAwMDAwMDAx MTEgNjU1MzUgZg0KMDAwMDAwMDExMiA2NTUzNSBmDQowMDAwMDAwMTEzIDY1NTM1IGYNCjAwMDAw MDAxMTQgNjU1MzUgZg0KMDAwMDAwMDExNSA2NTUzNSBmDQowMDAwMDAwMTE2IDY1NTM1IGYNCjAw MDAwMDAxMTcgNjU1MzUgZg0KMDAwMDAwMDExOCA2NTUzNSBmDQowMDAwMDAwMTE5IDY1NTM1IGYN CjAwMDAwMDAxMjAgNjU1MzUgZg0KMDAwMDAwMDEyMSA2NTUzNSBmDQowMDAwMDAwMTIyIDY1NTM1 IGYNCjAwMDAwMDAxMjMgNjU1MzUgZg0KMDAwMDAwMDEyNCA2NTUzNSBmDQowMDAwMDAwMTI1IDY1 NTM1IGYNCjAwMDAwMDAxMjYgNjU1MzUgZg0KMDAwMDAwMDEyNyA2NTUzNSBmDQowMDAwMDAwMTI4 IDY1NTM1IGYNCjAwMDAwMDAxMjkgNjU1MzUgZg0KMDAwMDAwMDEzMCA2NTUzNSBmDQowMDAwMDAw MTMxIDY1NTM1IGYNCjAwMDAwMDAxMzIgNjU1MzUgZg0KMDAwMDAwMDEzMyA2NTUzNSBmDQowMDAw MDAwMTM0IDY1NTM1IGYNCjAwMDAwMDAxMzUgNjU1MzUgZg0KMDAwMDAwMDEzNiA2NTUzNSBmDQow MDAwMDAwMTM3IDY1NTM1IGYNCjAwMDAwMDAxMzggNjU1MzUgZg0KMDAwMDAwMDEzOSA2NTUzNSBm DQowMDAwMDAwMTQwIDY1NTM1IGYNCjAwMDAwMDAxNDEgNjU1MzUgZg0KMDAwMDAwMDE0MiA2NTUz NSBmDQowMDAwMDAwMTQzIDY1NTM1IGYNCjAwMDAwMDAxNDQgNjU1MzUgZg0KMDAwMDAwMDE0NSA2 NTUzNSBmDQowMDAwMDAwMTQ2IDY1NTM1IGYNCjAwMDAwMDAxNDcgNjU1MzUgZg0KMDAwMDAwMDE0 OCA2NTUzNSBmDQowMDAwMDAwMTQ5IDY1NTM1IGYNCjAwMDAwMDAxNTAgNjU1MzUgZg0KMDAwMDAw MDE1MSA2NTUzNSBmDQowMDAwMDAwMTUyIDY1NTM1IGYNCjAwMDAwMDAxNTMgNjU1MzUgZg0KMDAw MDAwMDE1NCA2NTUzNSBmDQowMDAwMDAwMTU1IDY1NTM1IGYNCjAwMDAwMDAxNTYgNjU1MzUgZg0K MDAwMDAwMDE1NyA2NTUzNSBmDQowMDAwMDAwMTU4IDY1NTM1IGYNCjAwMDAwMDAxNTkgNjU1MzUg Zg0KMDAwMDAwMDE2MCA2NTUzNSBmDQowMDAwMDAwMTYxIDY1NTM1IGYNCjAwMDAwMDAxNjIgNjU1 MzUgZg0KMDAwMDAwMDE2MyA2NTUzNSBmDQowMDAwMDAwMTY0IDY1NTM1IGYNCjAwMDAwMDAxNjUg NjU1MzUgZg0KMDAwMDAwMDE2NiA2NTUzNSBmDQowMDAwMDAwMTY3IDY1NTM1IGYNCjAwMDAwMDAx NjggNjU1MzUgZg0KMDAwMDAwMDE2OSA2NTUzNSBmDQowMDAwMDAwMTcwIDY1NTM1IGYNCjAwMDAw MDAxNzEgNjU1MzUgZg0KMDAwMDAwMDE3MiA2NTUzNSBmDQowMDAwMDAwMTczIDY1NTM1IGYNCjAw MDAwMDAxNzQgNjU1MzUgZg0KMDAwMDAwMDE3NSA2NTUzNSBmDQowMDAwMDAwMTc2IDY1NTM1IGYN CjAwMDAwMDAxNzcgNjU1MzUgZg0KMDAwMDAwMDE3OCA2NTUzNSBmDQowMDAwMDAwMTc5IDY1NTM1 IGYNCjAwMDAwMDAxODAgNjU1MzUgZg0KMDAwMDAwMDE4MSA2NTUzNSBmDQowMDAwMDAwMTgyIDY1 NTM1IGYNCjAwMDAwMDAxODMgNjU1MzUgZg0KMDAwMDAwMDE4NCA2NTUzNSBmDQowMDAwMDAwMTg1 IDY1NTM1IGYNCjAwMDAwMDAxODYgNjU1MzUgZg0KMDAwMDAwMDE4NyA2NTUzNSBmDQowMDAwMDAw MTg4IDY1NTM1IGYNCjAwMDAwMDAxODkgNjU1MzUgZg0KMDAwMDAwMDE5MCA2NTUzNSBmDQowMDAw MDAwMTkxIDY1NTM1IGYNCjAwMDAwMDAxOTIgNjU1MzUgZg0KMDAwMDAwMDE5MyA2NTUzNSBmDQow MDAwMDAwMTk0IDY1NTM1IGYNCjAwMDAwMDAxOTUgNjU1MzUgZg0KMDAwMDAwMDE5NiA2NTUzNSBm DQowMDAwMDAwMDAwIDY1NTM1IGYNCjAwMDAwMDY2OTQgMDAwMDAgbg0KMDAwMDAwNjkzNCAwMDAw MCBuDQowMDAwMTYwNDQ1IDAwMDAwIG4NCjAwMDAxNjA3MTcgMDAwMDAgbg0KMDAwMDMzMDU3MCAw MDAwMCBuDQp0cmFpbGVyDQo8PC9TaXplIDIwMi9Sb290IDEgMCBSL0luZm8gMTEgMCBSL0lEWzw1 QzQzMDc4MENDNzgwQjQzQTc1MTUxQzUxQjc1MEFCRj48NUM0MzA3ODBDQzc4MEI0M0E3NTE1MUM1 MUI3NTBBQkY+XSA+Pg0Kc3RhcnR4cmVmDQozMzExNzINCiUlRU9GDQp4cmVmDQowIDANCnRyYWls ZXINCjw8L1NpemUgMjAyL1Jvb3QgMSAwIFIvSW5mbyAxMSAwIFIvSURbPDVDNDMwNzgwQ0M3ODBC NDNBNzUxNTFDNTFCNzUwQUJGPjw1QzQzMDc4MENDNzgwQjQzQTc1MTUxQzUxQjc1MEFCRj5dIC9Q cmV2IDMzMTE3Mi9YUmVmU3RtIDMzMDU3MD4+DQpzdGFydHhyZWYNCjMzNTM3Mg0KJSVFT0Y= --00000000000070f8d7059647d2c1-- From nobody Fri Nov 1 05:20:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD259120118 for ; Fri, 1 Nov 2019 05:20:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sbqLUIyZ4KTg for ; Fri, 1 Nov 2019 05:20:51 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DAC112010E for ; Fri, 1 Nov 2019 05:20:49 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA1CKklP004432 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 1 Nov 2019 13:20:47 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 1 Nov 2019 13:20:41 +0100 To: H Y , References: From: Henk Birkholz Message-ID: Date: Fri, 1 Nov 2019 13:20:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 12:20:54 -0000 Hello Yuhei, welcome :) I think your survey is a quite astute representation of the current state. Please note, that the "information-model" I-D was intended to kickstart the discussion about "where do the definitions of information elements go", it might not survive the outcome, or might become the hub document for the information model and how it is supposed to be extended, or absorbed by another doc - that is not clear yet. Also, while EAT is currently placed in the "attestation evidence flow" (Claim) scope and not in the "attestation provision flow" (Assertion) scope, EAT is extendable and it might make sense to create EAT flavors for the other scope later, if required. Current planning also includes to remove architectural text from the EAT I-D, but that requires some resolve (aka WG consensus) on how to proceed with the architecture I-D. Having said that, everything I did not comment on seems to be right where it should be. Other comments? Viele Grüße, Henk On 01.11.19 13:08, H Y wrote: > Hi all, > > I'm Yuhei Hayashi, network security researcher of NTT in Japan. I > learned about the existence of RATS WG at IETF 105. > > I'm interested in the work of RATS WG and I'm trying to understand it. > So, I'm firstly trying to understand which drafts contain the > standards listed in the charter. > > I will attach the result of organizing it from my own point of view. > I'm glad if you confirm that my understanding is correct, if possible. > > Thanks, > Yuhei > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Fri Nov 1 07:25:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A38781200E7 for ; Fri, 1 Nov 2019 07:25:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iunnza740Jj8 for ; Fri, 1 Nov 2019 07:25:05 -0700 (PDT) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76EE5120043 for ; Fri, 1 Nov 2019 07:25:05 -0700 (PDT) Received: from [10.122.0.250] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id QXrKiLDQsyg8JQXrLiNnhi; Fri, 01 Nov 2019 07:25:04 -0700 From: Laurence Lundblade Message-Id: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_CC279F7F-A670-4759-9E9F-1F2FE7B021A7" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 1 Nov 2019 07:25:02 -0700 In-Reply-To: Cc: rats@ietf.org To: H Y References: X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfInoXyeR5Oc2UcU1noyUKoYZs/n0uGD78HfRXwq4025uXftNgp5VxmJlRJfFirAbIWHJZGRw55/bN78LOJlLV4F5OPYi1WZfXjLYjhfzfudj9GkCKXL6 +tJjhdRi5VZ/f0IlGMUBjTwHG9MCQE7/bCIuAE/Rk7TBUqtwYMGCk7kDIvAIQMAvz/kGrss/xSBWSUR5NFs9efU8sB56BmfFbe8= Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 14:25:08 -0000 --Apple-Mail=_CC279F7F-A670-4759-9E9F-1F2FE7B021A7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello, A frame up that works for me is to think about 1) the claims, the = attestation format and its details and 2) the transport / conveyance and = its details. In the TPM/TCG world the claims and attestation format is locked down by = what TPM chips do today. It is a set of registers that hold hash values = used to measure software. In the EAT world, which typically implements = on fully functional CPUs, the claims and attestation format is not at = all locked down and our work is to define it (the eat draft). A lot of the network and router folks have been putting TPMs into their = routers and now need a way to get the TPM output off the router to the = network management center. This world runs off of Yang protocols. The = main interest there is a very specific Yang-based way to move TPM = output. This is the yang, tuda and pubsub drafts. The EAT use cases are more about TEE=E2=80=99s and lining up with = end-user-application-oriented uses like FIDO and the Android key store. = They make use of all the existing transports used by application = protocol (mainly HTTP) so there=E2=80=99s no worry about defining = transport. I think a few of us see EAT as the more general and flexible attestation = format that will eventually replace the TPM format. Because EAT can use = CBOR and COSE which are carefully designed for constrained devices there = is some hope that it can go into TPM-like HW. The architecture draft is trying to tie the two together in a sort of = unified field theory. Seems possible, but hard to me. LL > On Nov 1, 2019, at 5:08 AM, H Y wrote: >=20 > Hi all, >=20 > I'm Yuhei Hayashi, network security researcher of NTT in Japan. I > learned about the existence of RATS WG at IETF 105. >=20 > I'm interested in the work of RATS WG and I'm trying to understand it. > So, I'm firstly trying to understand which drafts contain the > standards listed in the charter. >=20 > I will attach the result of organizing it from my own point of view. > I'm glad if you confirm that my understanding is correct, if possible. >=20 > Thanks, > Yuhei > --=20 > ---------------------------------- > Yuuhei HAYASHI > yuuhei.hayashi@gmail.com > ---------------------------------- > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_CC279F7F-A670-4759-9E9F-1F2FE7B021A7 Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_6BCBA834-41CE-4D2B-82C2-7ED64162049C" --Apple-Mail=_6BCBA834-41CE-4D2B-82C2-7ED64162049C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hello,

A frame up that works for me is to think about 1) the claims, = the attestation format and its details and 2) the transport / conveyance = and its details.

In the TPM/TCG world the claims and attestation format is = locked down by what TPM chips do today. It is a set of registers that = hold hash values used to measure software.  In the EAT world, which = typically implements on fully functional CPUs, the claims and = attestation format is not at all locked down and our work is to define = it (the eat draft).

A lot of the network and router folks have been putting TPMs = into their routers and now need a way to get the TPM output off the = router to the network management center. This world runs off of Yang = protocols. The main interest there is a very specific Yang-based way to = move TPM output. This is the yang, tuda and pubsub drafts.

The EAT use cases are = more about TEE=E2=80=99s and lining up with = end-user-application-oriented uses like FIDO and the Android key store. = They make use of all the existing transports used by application = protocol (mainly HTTP) so there=E2=80=99s no worry about defining = transport.

I = think a few of us see EAT as the more general and flexible attestation = format that will eventually replace the TPM format. Because EAT can use = CBOR and COSE which are carefully designed for constrained devices there = is some hope that it can go into TPM-like HW.

The architecture draft is trying to tie = the two together in a sort of unified field theory. Seems possible, but = hard to me.

LL





On Nov 1, 2019, at 5:08 AM, H Y <yuuhei.hayashi@gmail.com> wrote:

Hi = all,

I'm Yuhei Hayashi, network security = researcher of NTT in Japan. I
learned about the existence = of RATS WG at IETF 105.

I'm interested in = the work of RATS WG and I'm trying to understand it.
So, = I'm firstly trying to understand which drafts contain the
standards listed in the charter.

I= will attach the result of organizing it from my own point of view.
I'm glad if you confirm that my understanding is correct, if = possible.

Thanks,
Yuhei
--
----------------------------------
Yuuhei HAYASHI
yuuhei.hayashi@gmail.com
----------------------------------
<RATS_drafts.pdf>_____________________= __________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_6BCBA834-41CE-4D2B-82C2-7ED64162049C Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="Screen Shot 2019-11-01 at 7.04.08 AM.png" Content-Type: image/png; x-unix-mode=0644; name="Screen Shot 2019-11-01 at 7.04.08 AM.png" Content-Id: <09B1D4B1-6CC4-4A76-852B-736529B4D080> iVBORw0KGgoAAAANSUhEUgAABPsAAAFQCAYAAADJB3u9AAABRGlDQ1BJQ0MgUHJvZmlsZQAAKJFj YGASSSwoyGFhYGDIzSspCnJ3UoiIjFJgf8zAxSAIhEIMEonJxQWOAQE+QCUMMBoVfLvGwAiiL+uC zLoftelScqykkUrYF5ZDbFnMmOpRAFdKanEykP4DxOnJBUUlDAyMKUC2cnlJAYjdAWSLFAEdBWTP AbHTIewNIHYShH0ErCYkyBnIvgFkCyRnJALNYHwBZOskIYmnI7Gh9oIAr4+7QqhPSJBjuKeLKwH3 kgxKUitKQLRzfkFlUWZ6RomCIzCUUhU885L1dBSMDAwtGRhAYQ5R/fkGOCwZxTgQYgViDAwWM4CC DxFi8UA/bJdjYODvQ4ipAf0r4MXAcHBfQWJRItwBjN9YitOMjSBs7u0MDKzT/v//HM7AwK7JwPD3 +v//v7f///93GQMD8y0GhgPfAH+sX33ldaaBAAABnmlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAA PHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNS40 LjAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjIt cmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAg ICAgICAgICB4bWxuczpleGlmPSJodHRwOi8vbnMuYWRvYmUuY29tL2V4aWYvMS4wLyI+CiAgICAg ICAgIDxleGlmOlBpeGVsWERpbWVuc2lvbj4xMjc1PC9leGlmOlBpeGVsWERpbWVuc2lvbj4KICAg ICAgICAgPGV4aWY6UGl4ZWxZRGltZW5zaW9uPjMzNjwvZXhpZjpQaXhlbFlEaW1lbnNpb24+CiAg ICAgIDwvcmRmOkRlc2NyaXB0aW9uPgogICA8L3JkZjpSREY+CjwveDp4bXBtZXRhPgpGjMVWAABA AElEQVR4AexdB5gUxRIucs5JyRkkZ8lIzgIKoiIoqCCICIKACBIUUFEQJCsqSUFBQZAgIkoSlCjC I+cgOefgq7/veq93bnZ3dm/3uDuqvm93Uk+Hf3p6qqsrxPuPiYQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEBAFBINYjED/Wt0AaIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAIKARH2 SUcQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEATiCAIi7IsjD1KaIQgIAoKAICAICAKCgCAg CAgCgoAgIAgIAoKAICAIiLBP+oAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBBHEBBhXxx5 kNIMQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgoScIzl68SVMX7fd0Wc4LAoKAIBDrEejc oiCduXSDvlt+ONa3RRogCAgCgoAdAvHiEfV4+hHadfgS/bTmmF0SOScICAKCQKxHIEXSBNSJ+brN e87Rig0nY317pAGCgCAgCNghkDFtEmrXMK/dpUjnPAr7Ll+7TT/8LhPgSIjJCUFAEIgzCHRoko/O XLgpY12ceaLSEEFAELAioIV9x05fk7HOCo4cCwKCQJxBIH3qxErYt//YFRnr4sxTlYYIAoKAFYG8 2VI5FvaJGa8VPTkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKA ICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQB QUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQB QUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAg IAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06q LQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFB QBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8V ETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIJY2m9pdo+EHgoQzIqVzgDpU+dmI6f uU6/bfqX7tz9z8ddctkbAhPefJQK5UpNCeLHo0tXb1Pf8Ztp+4EL3m6Ra4KALQKh6kvy3tvCLScF AUEgmhGIiWNRooTxqXi+tFQkTxo6c+Embdx5jk5fuBHNyEhxgoAgIAgIAoKAICAIRA8CIRf2VS+V hSoVz0iJmckC3WaB0/8OXKT5q45ETwsfwFIgjPry7cqUMnnE4/2P5XzLN5yINWigDfUrZlUCy2yZ klPGtEnoxq27dOrcDdq69zwtXX+cTrAQMzopf/ZUhMkCKG2qxJQlfVIW9kVnDaSsmIrAwxmTUakC 6Sh/9tT8S0WZ0yWlqzfu0PHT19SE8pe/TqhjXf9Q9KW48N5rfPQ2Jo4Dum6yFQQeJARyZElBzavn oJy8zZYpGSVKFJ8uXblNe49dprV/n6bVW0/R3XthC4oxdSx64rGc1LVlIddjO3zyKrUZuNp1HBN3 gHeDSlkpSaIEXqv3HzN581cdpSPcJiFBQBBwjkCxvGmpZtmHnN8QnhLv3Lzfj9BR5vOEBAFBQBCI qQhESINCUEMwJ/3bF6dkSdyZlMaVs9Gm3ec8MiVJEycgTJ4TJohHV6/foRNnrxOEVVZyms56XyiP H0qfjFKlSEj37hGdPH+drly7E/TifJVRIEcqN0EfKpDroRRBr0eoMsSHd0CHEpSV+4CVwPiWeyQD Pd8oH/UZt4n+3HHGlSQm9gdX5WQnTiIQP148eqpOLurYrIBLEGw2tFDO1IqJ7PxkQXp/2j+sYXvS vBzU/dj+3lvBiMnjgIw11qclx3EVAYxxbzz7CDWtkp3i8yKcSeBFCvIY16hSNtq27wJ1GbFeXY6p Y1HpgunN6hPqn5iFlrduM8MWQ6lTiwKERXMndP7yLZq5VFYgTax88ctmWtl/MBGAYgEWMgKh06wh PPuXg4HcKvcEAQHhxYIAomQR5xEIqbCvSolMkQR9GtG65R+mLxbu1Ydu29E9yiszC33y46930LyV kTUBnabT+YR6W7FoRhrxWllXMecu3aJmvVe4joOx46SMs1yulf4jG2mpNVEMOM6UNikNfaW0Mj/2 Vh0IgmGKYwr7Ylp/8FZ/uRb7EUjH2p2DXy5J1gmkXctSJE1InZoXDKmwLza/91bMYvo4IGON9YnJ cVxFoEPTfNSsmu+JMITzmmLqWHT+8k1dRbW9c/ee7UKyW6L7fIBvh1PC4rhQBAJO+OWI1LL3oCIA gX+gdOXa7UBvlfuCgIDwYkEAUbKI8wgEPsI5gKYOC/Q8UZ3ynlWmk1o0Aa3HOk/reeuxThdd2ySs kWiSVaPRvBbovpMyTp+/Qcv+PKG0Cq8w87d++xlatj52mPC2b5IvkqDv5u27tPvwJeV70MSNFQ7c yPr8rcduieVAEIgiAjAHcyLo08WkTOZ80qbv8Wcbm997aztj+jhgHVusx9b2yLEgEBsRgDuCdg3z Rao6XGjsOXKZrt+867pmfo9j6li05I/jio+AJt+hf6/S1EX76fadmKvV5wLX6Y6FJ3J6W1xN54Rf jqttl3Y5R+ACa8QGSvEs2s6B5iP3BYaAlfeyHgeWq9wlCMQtBEI2+0zBE9uKxTJ6RAv+X2D+ASGO UPARGPLF38HPNBpyNLUDUBxMuLt8uJ7OXAxbkYcZb6vauZTZENTnhQSB+4HAI7nTUN0KWSMVvXXP efr65wO089BFSs4aGY8WyUit6+amhzlgzm3WIgk1xdb33oqLjANWRORYEIh+BKA9bwrxUIPJ8/bQ 9CX7VWWgEVOjdBZ6rkFeSmX4CMbFmDgWwd9v6/4rVd1j69/+41fovS+32Vb/4IkrtuflpCAgCHhG AEL/X/761y1BJZ6/vszuWUzCmHbwhLtPTHnnTIRkXxAQBGIiAiET9sHHiA5m4Knh0PwzhX0vNs1P Odm3XG6Lfzn4UsDkGrTzYNgk2km6b5YdVPfov9rlHqbKbFoM5/jwYQettwPsXHrfsSs0i9P+ey5y wAf4A4BT52olM1NWDhQB071rN+/Q0VPX6I9tp2n28oOUJV0yatcobyS/eNDsg5kfCD4HJ83b7Qoq gfag/SXZqT+i1qVOnojucSJEiNt79DJ9y/lu2nVOV53yZUvlVxmdnyhIBXOkVj52EDl20g+7bZ3I limUnh4rk4XyZk1FebKmJAhpj7Gz2cO86r3z0CXVvhvG6j0qVIyj2bVrmJeADcxGPv1uJyVIEJ9a 1MihNJ3yZktJJ8/eoF0syJ2z4hBBAOKE0F9yPezuW3Az+3bUgj7kAYfaMOvGT5PTfgNGH1oKyZMm YKyJ9jHOqLuVKrCAplWtXJQkcXy16r9wzTFasdGdEbDeYx4H0s/M+2U/5iPQ7anCkSbB8McHZlBr isCM/+ipw/TT2mPUuk5ugoaqU4LpFsaHR9k1ABZFMO7AdB3vAoLUbNh5Vr2bVp+g3t57u/cWmg8Y X8ty5G4I0uHz6Z/95+mrn/az5s4lNX604OtNqmZX4xvaBo2eP/45Td/8fFCNWWabnIyX1jqb92M/ 1OOA+V3wdxx2OtagjPLsWxTjCFaagdsqDmAAZ94mNWVcMf6izRhn56w47OaaAGlRx6dZYIxvAPyY xmPpy/lLNzk40EVasPpopPRm/rIvCEQFAfAQVlqy7rjrFDTkYEWAn5W8jUU6LcakJ5m/Aj8H32p3 OIDbGY6OCx7EdDwCvg/vlN0Y5g/vgXepLQsmEbwM7+SG/51V+er69Hj6EeZBUqrDv9gfMBZumrCv wsrFMyleLRHzOeDPNu85x2PkPltff3jfn+L3HlrfWNQGvwFe8xALCcA7aoJz/4k/7KF/eUHTHzrH 3wCMzU4pWDxelRKZ6RkehzKxtic0oT6YsV0FZbFihu9CM/5maMzis/3Q8dPXVVA18NkI4gL+G36X MUamSZlYPe9dhy/SNBa6QJhpJX+/h/7yy9by5PjBQuAaB1OzvlNZuJ9bCfNVaASbZO3/v/Jcodez RdT7j2/1tn3nqdvIv9Qt/vIbuhxrGYGMS/7wEWZ5a/8+pfgSuHJoXCUb5eIxLQHzov/jMRl+WlEX zDHtCAveT9bMqeaimF9mz5xcjYWYXx769wrhW2I3PzTLxzhshynuC0QOYFdPOScIxHUEQibss5rp fvfrISqRPx3BYb2mOuUeognf73L5TIHGlp1/EkRjxQ+E+xEJ1Uk6PalLxYK0N9sUiRRtKU2KRFSK GTL84KAVAiREzdSUPnUSmty3ooq6qs9hi7JRD/wwWQZzWstDJCfz/FoWDsL8ZQAHLan3aGStoAT8 YUCEV/zg73Dub4fpk1n/U0WXLZzerzKeqJFTTTJ1vSGsMiNGYVLehYMGNK+eM5LQApN+/KqygLMR B1NBYAEI3TQVZ988lYpl0ocEoUZtNss2nwkCrOBXrVRmGj71H8XouW7wsHOPmUAENolvWENXZQaz AE84rB9iMwun/QaTB+CqqSwLOvGxseb9XIM8buaZ127cdSTsC7Sf6frINnYgkD51YrJqnkGQ9xGP H1rQZ7YEUaSnLtpnnvK6D6YMvj8xPlkJZnX4qUkyM1Edh69ze6+9vffW9/bCFX5veQHEdDeAtmGh BkLGgZ9tpefq51Vl6XpAKIUFCvyAQb+Jm13jt9PxcvzcXTo7222oxwH9XQhkHHY61qCMMoUycCT6 iPEG2FmFfRD0YXFB0wHWzDH9kLblRRUEf7ESJtyP8a966czUsMevhMmKkCAQbATstJFhYv/RzB2R BP3Wsr2NRUjbnQVrEPRZCWMQFjhMKsALtHinrGOYv7wHIqaDJ9GUhQWMejzAOQQa0WZgmdMmUWMc +CCTMPbiV44XSHp8ssEtyjomtKNeL0cZ0iQxb2Gtx0RKu9vtJB+s3nrab2GfNQ9Px8Hk8bDIkJcX GzSBBy+aJ60S9pmYQUCCb4PJH+Ie4PJKi4IKz5VbTil+HOOhJggB8MN9fcdvduM3A/ke+ssv63rI VhDwFwGz/+fjfv5U7dxurogg9Edf79u2qN/zPl0Xs4xAxiV/+QhrebV4ro733STM5/EDj/PG6A10 Ntz6SqfBvLrf88UijXvga4vz+Ilf48rZ6YffD7McYDeBT9Zklu8JU8y/IUy0klVeYI7v1rRyLAg8 KAhEfG2D2GJooYARMgnCpl83uGtHYcKCwSLUNOilEpEEfdYy4U8LkYOxEqvprXbFIgn69DW9tZqu 6POethj07QR9dunBLINxCgUNeqkka+JFFvRZywKT98GrZdw+XtY0j1fL7iboM68nYH8Wr7EWFBhP X4QVX2jumZSaPwwTelcgaAlgEhAV+ps1+6xUt4K7X0msMpe09EmsYDmhQPuZk7wlTcxBIEfmiDFC 1wpC44ssPAsGQYvYTtBnzRsTyF7PFbWednwMjRVT0GfeiEjq73cp4yboM69jH5Ngc1IXrPEy1OMA 6h5TxmHUxROBuX7p8fyeLqvziJQKbWwhQSAUCOxnqwcrQRt18lsV1bvP3S8gqs+LnXaCPk+ZYUyw o2DxHnZ5gxe0CvrMdBBCQYNNE0yaBzNfZRX06et2W0/tskvr77lg8nimoE/XA4tFVtICO+t5fQw8 IQAwBX36GraYvL/KvnBNiq7voVmm7AsCgSAAIbh1nnKZA3gginmw5n3+jktR5SNQnlXQZ2KTlwWc /V8obp6iwrlS0+ge5SIJ+twS8QG+H7CcwwKSJ/KEqf0XwVMucl4QeLARCImwryZruWFw03SaNd/+ 2X+BI1G6C/tw3Qzi8Ter5XpSB8Z5/P7ee4GcpkP+0JowNSdwbhWvLA76/G9lVgszFE0QTGktCjAj WB006cdVR+nNTzfSB9O3u7Qvbt66R7vZrA0TfZjqWknXG+ZxMP+A6YZJMJXFysPk+XsImn8mYSCE ZhvInzLMPOz2YbJnarghDTSSYJa8mk3N8HEyCQKB9k28Tzp1epjhWAmCi+rGarr1unm8astJ81Dt Q/DwbL08NGdYDerNwg1oNpnktD/sYLM3qzAR2qXmhAW4mH0X5UCF3BcF2s985SvXYx4COSxuBlBD jEuhIJh//cwmclMW7KUZSw4o8ymzHGinehLYmel87UObzhfZpYFZB8if8dJXObgeynEA+Qc6Djsd a1BGVAnalRDmaULQg3fZTPwt1nyZufSA0qjGtVvGirhOK1tBIBgIbGGezMoPIF9oVXzYtQxNe6eK 4uGMbuqoWAjpTNrClgNDv9qmXB7AnYlJ+9jVynLLQrF5Xe9HlffQ+Xja2gnmIPjUVDxfOqXBpo+h 7Q2NlfH8s5r+Ic26f87QngB8VsNiAnyh9WcGiwolj6fb5+S7Y/fN0Pdja3cdfQtmuHbk9HsYTH7Z rh5yThBwigAsnv6z8FdO531OyvA1LgWTj8C3wAzKpOuH8QaCfk2vtSrsxrvg/BFW5Fi+4YRyD6XT 6S3cncCNg1MCplDecCIvcJqnpBME4jICIVEJMAV4AO939mUF/u04m7DCjxs+5ppqshkTTFUxYPUe t0mdnsoMJFYLNI1jsy/4+rCSk3Rt2STTJJhIwfRMUzxiAV/zCDMpDIwg+NGzrj7CNwF8yYAWrjmq hE7wwQIfVE16rVCOqt/rVEpdxx8GxcY9f3Ud6x2Y5ybhVeDveQv/VyZ93K2sm3BSD6Bghv0pw8zT ut/BsooC9emeYzaqwRNpoc03tmcF5ZtF3wstoFH8nOyYM6QBEwZ/ZeuZgW1QKStBy8ekrBkjPgTm eev+9MUHFI65w/3mmNfxPMBcQyvg0zk7XSZx/vQbROMznze0S0sWSE/AF4RVZJOg1efEp06g/cws S/ZjBwI5DKZG1/ikjb9Pfc3f7Zq/T1M+NltDFO2f2F+k6esPwviJfR51yxJjhHUccUvg5QDM0sDP t9JG9gH4+lNsVsemwVaCsBtjNFwWTOKyYa6rSbtX8Ge81Pd624Z6HIBgIJBx2J+xxlv7nFzLkcV9 zMSCGQS/oNXsRwcCYAR+uejBX46TMiSNIOANASxiwq9tv+fdNTf0PfhOD3yxhBo3Bkza4uZfV6ex biHAhmsOTeCT+k7YrPz/QkMa45mpXT/7l0O0+I9jOnmkbbB4j0gZh5+Aa5dPv9vF/gTv0Sfdy3Pd IwRRELyhPRBQWk2PwbOCZwTtOHBB8VThWSr/0G+O3agP/dpizB3epbTtPQ3fWK740VDweGjjJPYx uI79tebn57eV/RZ6okX8vMbP2UWp2VJiYu9HCRYaJsHtwOApfyvfrx2bFeQAL+58OtoIIS8okO9h MPlls96yLwg4QQD82MhvdiiXALBqusXKFIHwG97KcjouBYuPmLfyCI0NHwcHdCiuXMDo+mGxB/N+ +DGF4M9qsWf1Z405GHynasLcrgG70vrKi7sbK6bghUFO5AC6HNkKAg8qAkHX7IN03urPagUL+zRZ Ax3AbNKqeafTBmObx7JCiBVimL/p33ZmwkzCaiXUsOGHz7LArJgWOErXJnanWNPCl7N5M2+9j4kz tAPtJuhWZ6VQYQ42mYw28l66/rhL0IdjCGVnLz+EXRchOIBVo05fhGN5+GyAZiAYwkUckMCqQZeB /d84IQg2uoz4Uwk6PKWHuUzPZ4oop/We0ng6v4TbatUcqMsfKRB89Vj7ohONAtwbaD/DvUKxC4GM Fn9MqL01iE1UWoQxqQ8vfGAxwBT0Ic8dBy9E8guYLpWzd8taJ9S555gNykk9xrovF+61JlGavkN4 UgbNZAi9IXw0KUO44C/Y42WoxwG04X6PwyaOdvvWaOPQmB/eubTLtQO0sa3jrF0+ck4QiAoCi3mB bBAvCFz14hcSPB/8GyPwhS+Cc3fTrQd4C3MRERqsJiVKyDNJDxRM3sOuCHz/3/1iG2vR3lRaJNCo NQnWIGlThQmyUlnM6U0Lgb2WRV0E+ggFab/JwebxUNeJrKEI4SUCaPzMfNRJDhRlRxBCfDBtu1qE gDbPMsMPNtJj3OrFFjKwZMF3Z+rifZG+aaYpdHR9D+3aIucEAX8RwHvR/ZO/lDUbAgBpoVQw+Q1/ xqVg8BF43+HTHnwZFHNGfhOmoGNig4UPkLkYgmOkH8MLRqY/6y8X7ou0SIkAmJ7IE6ae0st5QUAQ cEfAN2fmnt7nERx5miYdiC6LaESaIOGHo16TEMwD0R2DTRDoacGczhsaZ2+100f2Wwi1oGYNLUT4 HtAEwdurTxZSpr4YbDE5hmAsEMrOA1ttFjKVyJ+WI20mUdE2wSibTDDyNbEMpBzrPWCirOYXENJZ KcxJfCG309D4s9NyO8nMudWvHaIVI8iHJpjiOiWoioMZhD+wFxrnoyJ50tjeCn9Wv208aRtF2fYG PomJBD7AplAPTvJHzdpBj7LJNwSJmsCIOjHhjUo/g4NxodiFgBkdWtfcnJzoc1HZ4r2Hxmk99ikJ 7Rn4QU3LCyOJEsWLpHEcaDl4bzHOaYKGGN499GdNcKZumokc4ffaJEzcQdDOCfZ4GcpxQLfhfo3D unxvWwRFQvRLk+DzCj9MoiF4gAYNxikhQSCUCIDf2bDzHAfsyUMwwbVzjA4t+U7NCtLHrNHijTDp Ax+hJ4fQ6ujCfNVs1oTLwpqqFY3gX8jngE10Vp1/sHkPna/ertx80m1x8Ogpd5/CSJc4nLexCt4b VsxGO/Zf5AWai5H80Hlrky47kC2CiYWCx/uXNddn/XLQUZXgJsdcUMVYZdJZFpwiiqcmCGxxzjTj 098VnSY6voe6LNkKAlFB4AueF3oyLw0Wv+HPuBQMPgLatSahfTsPXXTz5ZcpbZh7JatP633svsq6 gINvwOZd5whzL01ZM3k24/WGqb5ftoKAIOAZgaAL+6wmvBlZo+u7oTU814CvVOPoj0kSha0aeE3o 50XNTPp5m2tyO2LmdjbbKOc2+UVeWuUYfuj6TdyiTOD8KQOOWt9mJ8Xmyq8/90clrR0m0Nqxkl10 R4SRd0p29zu9V6eDABg/RHWCL0VEbzIJAkT4VfyJNQn9IZgKmcI+mJjAfNvqVxBmc9aPlF05dpja pbOeM4Uo1mtyHHMR0Kb8Zg1hThksgnbGSI7o6EnIHaxy7PIxfZj6ez1U42WoxoH7OQ7bYWs9h0UY jFUwb7ESnGb35YUrfDvhlsLUjLKmlWNBIBgIwKQXLlVgatW6dm6lWW9dOKxcIhML+3yXtpa/62aA jubVcxB+VsICxB6eLPpDweA9PJV3jQVTnmgTT17hEkUv2IL39WRuu3HXWU/Z+DwPLRdMfq10lV2p YIEEkYKtFFUeD76pA11UMDV6rPXSx96+O/fze6jrJ1tBwCkCnqw8QslveBuXQsVHmP6Egc0dFuCB rPMhu7EH6aDRbZL7kXkluJYz7jnLkSDwYCAQocYUhPbmYsf1VhVeZJslfVK3n7UoMIxgEoNNNz04 LodJhqcftL72hUeg282afS8O+0M5hzZXKnU9sbqNKET+aK3Bl4EnQZ8TpkiXHegWTJuV7OqvV6ut ae/HMfyvdP3oT1qw+mik4q0flkgJbE6s3HxK+Rg0LzXgVfjKxd399cGZrBOKaj9zUoakiTkIQGvV SnUsUZ2t1/05HtKxpK2gD5MtO+fI/uQdyrShGC/N+gZzHLgf4zAWifwlBC34cMZ2jyZzCCiEaHZC gkB0IQChEoRNXUasjxS8A1plpna8pzod+ddd28tTuuFTtwXVRYKncoJx/hIL2jzxAmb+CBT2zc8H zVN+7UNTDq5SrL/fWQsRFBt5PG8AxNbvobc2ybUHC4H7wW+YCIeCj8DChklaGcQ6BsI/vR1Z77dL I+cEAUEgOAgEVbPPqtXnTxXhN83qz0/fn9jhJMma7gSbimCCbCqkwcG6ndmqLsu6PcFmuvBXM35u UhUcomXNXG5+abB6my97SnbAfNF6q1q50M6b9UVrtFcMeAh8AdMHrMo+VTsXIZKRU8LqiLUMb/ce PxNZUFGITZWh6m1SQXbAbCU7ExZrmlAdQ9j6LfsRNKPfoax7kWWXripY+4O+AL8T6GtmXqY6ucqX y4PJuRMKRj9zUo6kiRkI2Gn2wWdVuUcyKBNxu1rCt1MiZno8rfrqe7DwUY4dHJuE8WrSvD0c0fEK O4n/jxaPqk0pLf6hzPT3cz8q46WTegdrHAj2OGw31ty1DE5mYBO0FWO3E/NvLHJAe7lSsYz8fchN ZTgCs0kVWSt5zq+HzFOyLwiEHIG9rHGHxVH4ktQEDVPwXN4Ii4udn3R35WKmh8Y7fBdP5jHP6lPZ TBfT9mFyDx/UnugCW1DMWXGY/SEfdFmPeEoblfOxlceza3Owv4f+8st2dZJzgoC/CASb3/C3fKSP Ch9h5VOgvVw4l7t7pZPnw1xaWV1b5WW/+VjotCqzWP2K2i2iB9JOO14skHzkHkEgLiEQVGFfbfbX ZxImfruPRPiEMq+VZtNMM0JXRZ7IpOAJLFaNrSZJ1kFB5+MrHUwDzly8QdqXAO6DqYhTYR80EhGE A8wrtoh+CLOqWe9W01VQW60FZ9X+wwCX6+EUbj5nrEI0CJSwQqvJOqjq83rrpAyd1m4LfGEaY/oy RKTd+SuPuLSGUO/WdXK53Q4BGTAIJRXNk5aGsQP6lVtO0lSO6mT1jQZhipVMPzm++oN5L3xdmcI+ 8xr2Mdk4e/Gm9bTtcVT7mW2mcjLGIgAzKkSvRdQxk97tWIqGT/1H9V99Hu8SFkFghn6HhT+t+q3U l2y3+TkKr9W8f8TMHXSaAwaBMJn05rDeNtNoOunveOmpWtExDkR5HGaBhEl236jzFn+c8HmKtkGA gX4x5OWSlM8SQMrME+Zr6AtYBMLYBr85+A3oUEL5ctRpnWhS6bSyFQT8QeC9TqUoa8bkNJVNd/Fd NgV54NcK53af8MEXn3VSZy2vaN40btYQW/eeJwQBgl9S8CdYPIuNLi7KFnL/HiDIEhaGwB8iWrsn P15WfKJ6HJN5PH/bFtXvYVT5ZX/rK+kFATsEospv2OXp9Fww+IjOTxRUfoLXbT+jim3FSilWFw4n z4bxqMd5zDMJ8/z67IpkoWGZVY1dYMES0KQjNv5Qzeue9v2Z93nKQ84LAnEdgaAJ+wrlTE3wI2QS fLuYgizzGrTXoMWmCZOfGqWzqPQwsSVKpS8RVkX6ty+uGEBEv/2UI/uAnKSD0MbUOKxcPBNhUv4t r65CeIUVioJcdziFLsf+377/7YhibPNkTUnT3qmioh3OZsfEmGRhZdYaaRj10D5izl2M7PsOZSHq WF7OD9o5127ewS0uKstaGnDAj7YAj2fr5XFds9txUsYeDwJWnd9fO864YYJBd8wbFejHVUcUxhD+ PWJh4heuDr0jeISIRyRkCGQhiPuTPyxw+g9/FEW4PtVLu5vZoj07jGjKTvqDxuAfdhCNlaTsme0j QP3KDsn9oUD7mT9lSNqYg8Cn3+2iL/pXUlq1ulbQthv6SinFFB04cUUJdLD6iUksyIn/RzhYtxIc 4iMKYt6sqdQ4aGd2b70nuo8DGS891TE6xoEoj8MOvlHWxQq096PXyio/pCULpPMY3VzjAp98CMax ZN0xZpSPse+ySypIy0O8CGWSXZ8xr8u+IBAoApikwlUGhH4I0rCW+SAsdiRPmoAaVsoWqQ8jGIUv Aq9nUkl2bTJzUFU6xQsasHS4xa5Gzl2+yZrMV5XFgzX4l3lvTNq3tuuDV8sorBDFGKZt4GMwEYa7 Aywah9KMLabyeP4+L7uxzZ/vYTD4ZX/rLOkFASsCUeU3rPn5cxwMPgJj2/AuZWg9z8mg+FGzzENu VcAi0Kqtp9S5DbwQDgGcuWj95rNFKBsvGu1lHgbz3TYc6Mkk5Ll0vTO3SeZ92Pdn3me9V44FgQcF gaAJ+0yBGsDDyqwOOW4HJswoTWEf0iAPCAchhKlQJOIuDDT1OagFCIySJifpIGCrzk7MTe0HmGxa zTZ1nojEC8KqNQgRZd9sU5R/6jDSH3xo7T92WZ2H+QQGPdNsGII0vYLxw++Hac/hy6o+OiNEsJs+ sIo+9Ll1VMYR79lMnr9HCVZN5hRRhwvnKmp7IwSsiDwcajJXaGD2WIkFs/h5ovksnDRVxp30BzMv aPdB48pKqMdv4f5vrNc8HQfazzzlJ+djNgL7+J3/aY29digWPawLH2hNSiPKrafWwVQXmjHmu4mI 1PjFZApkvPTUnugYB6I6DjsZa+AaAWbbSdk0WxMirtd16N8RmMLsDIsv+Hmif/ZHRLv3lEbOCwKB IGBq2CFaqjf/kFdYK2/aov0+i/mbNfmgrWpG/cY7Al7LSm0b5CV85z9i7eaYTmv+PhXJ1yq0nU3C 4i6ofZN81OvTjbTnSBjvaKYJxn5M5fH8bVtUv4fB4Jf9rbOkFwSsCESV37Dm589xsPgI8CJQvLEj BFE7yAvcICzSLGTeGEJ5TRD8PdfAXcCnr2ELH6ZOFsPNe/S+E15Mp5WtIPCgIuC+xBoFFKwBNhBW 25vZAkyZrGah8EUE1eDvfzscyZRXV80U2jlJB7OS8d/vcmwWcotXGECX2dTVF0GwN4wdSMOPFghR h7wFdYA5BxhXp+ahduU7KcPuPvMczKvHzdnlqrd5zboPbcbBU7Yq01/rtWAfQxvKanbhqQw46/+E fR2a5KQ/mOmX8uq6XXkbue+i3f5QoP3MnzIkbcxCYOQ3O5Sjev3++6rdlj3ufjHt0iOvqQ4mzHb3 3s9zgYyXnuobHeNAVMdhJ2MNvn9z+Vvmjc5ZTH3NtBCI+CJoPcGXqZAgEAoE9h93JozCAsW7X/yt LCF81QMabZgQOqVm1XK4ma07vS+600HrxSnBf+eQl0s5Te53upjK4/nbkKh+D4PBL/tbZ0kvCFgR iCq/Yc3Pn+NQ8xFnLtykiT/sdqvSlAV7PLrwckvIB8vZimomW64ESk54sUDzlvsEgbiCQNCEfWYY bghQoDXljSAos5r4QqMjCZvVghEczD5c7AQu29j8UpPTdHPZKXKH99aqIBSm1ojOB1uYWmDQQVoQ 8v5y4T66eMVe6INJVp/xmyIFcRj97c5I55AfTH2hAQjmo+eYjQRhlZUwOfz46x0cDTiCwYb/FSv5 KgPpzxv1xvNApDiTMAlFpGGsspur9zoNVumBR7sha0j7adDXLnDeeH6aziuTNn0UtkU7TTrPZjm+ CKvciLoLs2dPfn/0M3991IZIwkp9zVe/0fWAsHnTzsjPwZMJr09MA+hnui6yjX0IYCKCMaLj++vo TzaNt/Z53aL9x68owfTbE7foU17fz+mL99NnrH2LMckkvMfwFfjJ7AghN86ZY4S3Purve4u8rePf pau33ATkus2Bjpdm+/R+dIwDUR2HnY41k+btVr5ereMZcJ3y4156fdRfbuOvuUAGLSl8J8yxVmME jfJZyw7Sm2M3EXyGCgkCoUDg3S+3qX4K4ZEdoV/D8fsz76xS320zjaexCMI70x0KxtGv2EfvWF6A xHYTL7ZZqXyRjOqUv2MYbjJ5D1/3e6qzrs91mOSGLwjjHPYhvIQm9tBXSutkavvP/gsEXm3897tZ 0+Uom5u580RwIQITaV906rw772TnHsAuj1DzeLpMX5hdvHLbbQy7cNmdF0U+SKMJ490lg3+NyvcQ eTrhl3XZshUENAIXmNfB2KQJWvp2ZuW++j/ujyq/4asMT+MSyg4GHwFXVlpzD3mCMJeG+yLwvweY xzUJY13H4esUHwsf8VYCb4mo4oM+/1sFwLQGrvPVXjM/p7yYeY/sCwIPGgLx/mOyazRe7LaD19hd sj0Hs0v4rIrHWwi2nE5AoMkHAR9qgfvMSRHUhuEc+qEMydQEE+q60KCyktN0uA9M2cOcXzZmtBC1 B6sep3llApFm7ZCAEDM3B9nIwiYsSRLHVwwbGF/tMN9aF30MP10wS0H7LrMZLCLXmUwi0sEsJjv7 qUueJCFhBR3OnFEHtCdFskS8/x/BhBYDox15KwP1TsUmY06eB8rLlik55cicgm7fvcd1ueJTpRp+ w5Kx3547nB51tKPk7GAeYddv8mRU+zW0S2d3Dhqc8HOYjlfA8ZwgmMPzd7JK5U9/GPRSSTIDy+Dj /vibK2zL8QdTf/uZHQZyLvQILBhRk6BJ1m3kX0EpLC2/93nYJwl8gWJiCWfzdsJnJ30Jpm14JzFe od8r/5XhAkA9bl5nH3/muOIrX1/vLVwQpOSxJwGPCZ7GcfRtmIaA2UO9zOEJ5QcyXnoCPzrGgaiM w07HGqSDX0N8z47wOHaAx3uNm8bzNo+TVgEvcIGDa0S0Q1ClWyxcwTfw+Onrbs/dE35yXhAAAniv V06oT7+y+5SBn20NCBS8Jw+xcAr9EMJm8Cvoi3aLhSjA01j0eb9KBB/PmiDgQ/Azk+YOr+HmDxCL HN0/2aCS+BrDkMgb7+Htfk91NuuGdxn8GV5gLIqi/fAFDR99moBPi76/uS3EwJ0MfLqa9CovbmLB 1RfByT7GwkB4KeSNOoeCx0PeTjDTmN9l/urKdfdvBvJA/4RZN8z9MPG382cYyPcQeWvyxi/rNLKN /QjA7/f8D2sqrXqr9Y+/rcO3GWOJmovxu26nLOKk/5vlBsJvOCnDblwyy/WHj1g2uo6b+xF8M1Zs +leN25gLY1Fy56GLrqCOZjl2++CLc/F8GFvwxIdOXPXKvzhpr7UctN+JvMB6nxwLArEVAcwLpg6o 7Kj6QfPZB4bHToLvqxZgivCzIwheEG3VjLgalXS4F8JEJ3nqciBog/ALP38IKzla68XTfXB4jZ+V 0G6rRo01DY69laG0cmxWVOzyQXlYHcHPKUHAYAoZ7O6DsOBaWIAmu8tez0FYvPNQhH9Gr4ktF532 G0Q2rc5RoUyCY2tPAkV/MPW3n5l1kP3YiwAEe5svR9ZMsbbISV/CpAfBduwC7ngaN33l6+u9hQDK U//XbUDfthNg4jrKD2S81Hlbt9ExDkRlHHY61iAdNBbtfHR5wxN4gLG20wS3YiXHgkAoEfD0nngq 09NYlIEX8EyC+5bZyxO6Fg1LF0zv8pms02GxVJOvMQzpvPEe3u73VGddNrZ4l638WYY07m3CYgza tWbraTUmQlhnDTAWNlZGtMssw7qPRYCrAfJSus6h4PGQtxPMvGGOPPDdMbWacc5KgXwPzTy88ctm OtkXBDQC+DZb33V9TW+d9H+dFltP46jduKLvc1KGt/uRT1T5CLyjmJMFMi8Dv+iJZ9RtNLdO2mum xz7a78/c3nq/HAsCcRmBoAn74jJI0ra4iUCjSlndAiGglTBdFhIEBAFBQBAQBASB4COAoAsZ00YI x0pwNN7FI2sTfD+BzGs4xiRzNUcBjslkt1A6jM16oaEGk7YMaRKzlUNEoB60Zcvu8y4BZ0xum9RN EBAEBAFBQBAQBGIvAkHz2Rd7IZCaP6gINKma3a3p0CLyFkHaLbEcCAKCgCAgCAgCgoBfCMzmgDJ2 pr8Q8lkFfcgYzt9jumbrDg44Z1dHuHPIyqbPVkEfTNkGfR6YObVfYEtiQUAQEAQEAUFAEHigERBh 3wP9+B/cxoP5hj80k37bfNLWZ5aZRvYFAUFAEBAEBAFBIDAE/uAAXAhShui1dj6wkCu0+f7457QK 2PV1FCI1BlZD/++CCVnvcZto+pL9Xv05w5QUPgo7sVN7X25e/K+F3CEICAKCQNQRwHhmkt3ijHld 9gUBQSBmIyBmvDH7+UjtQoQAfMi8PPwPypQuKd1hvxxn2dQGTvOFBAFBQBAQBAQBQSB0CCDgBn4p OYhY5nTJKAM71YcDeQQzQ9CPk+du+PQJHLraBZYz/KhOnreHPuco2zkQaZcDKyVjX30QaCKgG9oF AR8EmUKCgCAgCMRUBDA3ysWBKeNx5JzL7DN4G0cWFxIEBIHYi4AI+2Lvs5OaRxEBRDfFT0gQEAQE AUFAEBAEoheBKyzcu3LtMu0/Fr3lhrI0CPf8DYYRyvpI3oKAICAI+IPAUY60jp+QICAIxA0ExIw3 bjxHaYUgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIEAi7JNOIAgIAoKAICAICAKCgCAgCAgC goAgIAgIAoKAICAIxBEERNgXRx6kNEMQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBBhn/QB QUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgjiDgMUBH0sQJqHTB9HGkmdIMQUAQEAQiI5Aw QXyOCJlIxrrI0MgZQUAQiCMIcFBFRelSJZaxLo48U2mGICAIREYgVYqwaW2mtEllrIsMj5wRBASB OIJA1ozJHLck3n9MjlNLQkFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBCIsQiIGW+MfTRS MUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBwD8ERNjnH16SWhAQBAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQiLEIiLAvxj4aqZggIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIOAfAh4D dNy79x9duXbbv9wktSAgCAgCsQiB1HDm/B+Pc7fPxKJaS1UFAUFAEPATgSTZ6Pade3T9xh0/b5Tk goAgIAjEDgTiczCilCkS063bd+nGzbuxo9JSS0FAEBAE/EQgPg92CDDphDwK+27euks79551koek EQQEAUEgViJQoURaFvSdIzo1P1bWXyotCAgCgoAjBHJ0octXbtHeg+cdJZdEgoAgIAjENgQSJYxP pYtlofMXb9Cho5diW/WlvoKAICAIOEIgedKEVKxwJkdpxYzXEUySSBAQBAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQiPkIiLAv5j8jqaEgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIOAIARH2 OYJJEgkCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAjEfARH2xfxnJDUUBAQBQUAQEAQEAUFA EBAEBAFBQBAQBAQBQUAQEAQcISDCPkcwSSJBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQSDm IyDCvpj/jKSGgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIwRE2OcIJkkkCAgCgoAgIAgI AoKAICAICAKCgCAgCAgCgoAgIAjEfARE2Bfzn5HUUBAQBAQBQUAQEAQEAUFAEAg6AuPHDKOO7ZvR 9m2bgp63ZCgICAKCgCAgCAgC9w8BEfaFEPujRw/SUy2qUZP6ZahPzxdDWJJkLQgIAoJA8BHYvvsE 1X5mDKUr1otSF+lJHXrN8FjI5Ss3aN+hMx6vy4UwBPYfPkOXGCshdwQqNhtB2Su8Tbv3n3K/IEex CoFrV68QeJ9AaPmyBdSobin6YGjfQG73+54LF87R008+Rm2frkv//fef3/cHckN0leO0bufPn6UZ 0ybS1i1/UYpUqZ3eFildIO0K5J5IBXs50aFdE8V/Hz6030squSQICAKCgCAgCMRdBBIGs2mbNv5B 40YPozt3bttmGy9ePHrvgwmUPXtut+tnTp+kXt1foMuXL/L5eJQhQ0Ya+el0SpkyjPFY+dtSmjJ5 lNs9ng4KFCxC/QeN9HQ5Ws9fPH+ODh3cp8rc+b9t0Vq2FCYICAKhQ6Dnu9/T/J//pv7dGtALrSqG rqD7mPPtO3ep8fPj6dCxc5QyRRJKnTIprfpzr22Nrly9SZlL96UbN2/TT191oUa1itqme9BPDvho Ab03ZgmVL5mL/lzQ+0GHw639EIKePntFBKFuqNz/g/k/fE3ffzfNVZH48eNTShYKFSlaih5v/gxl y57Lde36tatUv3ZxunXzJo1iHq5y1dqua052IHg6e+YUnTx53EnyKKe5ceM6Hdi/W+UDwRN4VCf0 5/pVtGzJPNr5v78JgqRUqdNQ0WKlqUmzp6la9bqRsli9chmtWL6I9uzerspLmSoN5ctXmAoXKU7P t39N3W+96e7dO/TjD9/QvO9n0uHD++nmjRuUPUcuqv5YfWr3QldKnSatuuXixfPUt+dLdI2xt6PE iRPTxCnfU4IE9uz+sqXzCWU9UqQk5c6d35XFlMkjadHCOdSqdXt6us3LrvN659LFC/T1jEm0i3lb tOvChfOUK3c+ypuvENVr2MIWB9wLnhh5Q7h4ip9zihQpqXiJctTq6fZu/SWq7UJZx48eIvSpq1cv 41BIEHCMwPZ/NtOQd17n+exdeqJVW2rT9hXH90pCQUAQiB4E5D11hrP919/ZvZFSrf59Gf2zbWOk 8+aJ48eORBL2gaH4346trmRHjxyg5csWUrMWz6pze/fsUEyVK4GXnStXLnm56uzS9K/G0x9rV1DC hAmp6+v9qWAhmbg6Q05SCQIPBgK7959kLbbTdOjouaA2eNGv22n89JXUtE5x6tSmalDz9jezlev3 ugR9e1cNpiwZU9GpM/aTpjt379Gt23dUETdvhW39LU+nf+71r+jqtVs0ZUQbSp82hT4da7be6o92 gaKKUawBIxorGpPenWhsdsiLwmIrhFpW+nPdSvpmxmR6d/h4qlGzgbp85+5dunM7bLH31q2wvm69 LzYfQyg2Yez7NGPqBDdNQAgNf/t1sfp1eLk7deoSJsi/dYuFniMG0vdzIoSlELqdO3ta/f76cxX9 zELDwUPHUuky7otGQwf3op8WfKvgSpYsOSVJmlQJysCfxo+fgLq89pa6duL4EcJCuyeKnyABCyzu eBT2LWb+G9SoaSu3LI4eOURHjxyk48cOu53HwZZN6+mdt1+lk/9GCGVRzt49/1M/tKn5k89Rz97v UuLESVz379+3i9o/14iAFwSradKko0uXLtDaNb8qnnvluv2u9FFtl6tQ2REEAkDgh7nT6eCBsMXN maz5+gwLvPHe3W9au3o5zfl2qhKmt2jZ9n5XJ1aWLxhG/2MLFeYx9T2NfoS9lxhUYZ9ZVCpe+c2V u4B5ij/uRNmy5XQ7h4NlS+dFOgdmQQv7sufIQw89lM2V5sqVy6SFemAwMmd6yHUNq4pRpfV//E4b /1qjsmnyeGsR9kUVULlfEBAEHCGwZcdR+mn5P5Q2dbL7Luw7cvy8qnPZ4jmVoA8HmVngZ0eo7+q5 PZUQq2r5fHZJHJ/7duEmun37Lo14u0WsFPZ5q/+gNxpTveqPUNGCDzvGQxI6QyAmvTvOahy7UrVr /yq1Yy20mzevs2+3zfTJx4OUIOjdgd1ZULVOaZqB75v85Xy6zUKukqUrxK4GOqjt5AkfEYRtoLr1 mykBQL4CjxCsU375+Ud1bdfOf1w5ffzhAJo3d4Y6bv3Mi9SY+ckCBZH+FG3csIZGDH9bCcze7NGe 5v203mXNgsVvLejr3W84PdGynRKO4fzUL8ZS2rTpXWWYO8t+22Eeqv34CeJTkiRJI53HiYMH99KO 7VuUIBDtcUIQwnV9pTWP0bcUX/4GC/RKlCrP2t+paDdr+AGfFct/Uu3OkuVh6vByD1e2Y0cPVYK+ Qo8UpxEjv6QsD2UlmH0vZKEmcILWqB352y67POScIOAUAQjpf132kys5tI3/XLeKKlZ+zHXufu3s 3rWd1qz6hTDWirAvsKcgGAaGW1TuCgXmMfk9jQpWobg3ZMI+DIrvvT/RZ50PHthD6ARW2rRhLZ05 c5IyZsxC9Ro0Vz+d5rtZX9JHH7ytDvPnL0zTZy3Tlxxt//33GB09fIBNF+5Sjpx5KKshgIQZClZv NWEFEucSJkxEidgcAj5eYKKSJm26SAzUbV7JxnUwVtrEQufjaXvv3l020ThAYKBg3gyTGE8Mj6c8 5LwgIAjEfATu3ftPacplzpCKUiRPHKUKwz/ev6cv0cOZ0ygTW38zu3DpOl26fJ1yZE3n0XRN+5VL xSa8TqhS2TxOktHxkxcJeaZis+CoEvJKmiShI6HgnTv36ODRs5w2uW16mCAjv1zZ0vPk137Sifri OR45cZ4S8MQ020NpPOJn1zaYQjd4rIjdJbdzTjFCXY5yXZImSeRREOuWcYgOnPQns2hfz8JMG4p9 f+sbijrEtjzB12CCiR80+cA7PdOyJrtfuUTr1/2uhF9oU/ESZb02Deayp06eoMRJklC6dBm8pnVy EQz/6VP/0sNZszvSvIFWXSLWNkM7/CGUAU1GEExOe/UZ6ro9e47c9MKL3QiLwyeZvwRBK27BvFlq v3PXvuq6OuC/zCwEa9i4JQv+ilL7to3o8qWL9PX0ydSxcy+VBAI4UM5ceenJVs+rffzB1Pb9jz5z HVt3nPKd+j6t1VepSk3Hz+LzSSOVoO/hrDnoMxbsZsocsdgOU+ZhH05S5o+Lf5pLM6dNYjPgDi4z Zd2u59p1VoI+1CM5m/E+9XQH9dP1sm79bZf1fn2MvnqJzZ7B8/sy2fa3X2GeAJPhTKx8gLmCHZ09 e4quXL5MGTJmcgl27dIFcg5C07PctzNmzEzJknvWiPe3XYHUJbbfs+r3n5Xpd+FHSqh3FdrNSxbN dSzsg/A/OT8D9O37SZjLnjh+lFKnThtpTnrz5g06ffpf5mMS8LuYzdG88zZrbZ/hex56OLvX9+fe vXvKRB+akBgfvL1rKu2pE8wTp3SNE94wQ/p/TxyldOkzEjSefZE3DHzdG4zrGHPgRiBLlqxecQhG WcHKI5R9I1h1RD5x5T0NJiae8vI8o/F0R5DP/7xkvivH5zu85mIc8EIv/3mB61owdsB8dX7pSWrW sDy92ukp6tblGWrRpCJ1erGFyh4d57EqBdxMIoYO7qnONW1Yjn79ZSHVr1mMmjYoS22equ1mxoEM XnyhqXIGXJcnc77MmcHwzpr5GdWqWohat6hO3V9tQy2bVaE6rPUBHzlCgoAgEDcQ2PD3Yar6xMeU 6pE3KG+Vd1zbcVN/d40hm/45ogJgDBy5UDX6m/kb1DGCYvT74EcXECvW7qbidYeqawVrDKY0RXtS I/arp81DXQltdmBm23f4fMpdaYAKuJGLt8gf90MIpul/e/+lNHy+13vfq1M/sWkx0uGH8j0R2pYw z2uEoB6avvpuHcXL+aryUzd7wUYqUH0QZSvfj+vdi8o0fJ927IlI2+qVz1UZ0OoDlagX1k4EB4Fw RtP1G7ep28Dv2EdgH5VXhhK9KWfF/jTys+U6iWuLtiYr0J02bjtMBWsMUuVnLNmH8Ew0wQ9h2Ubv q+eSr+pAta3DQUngQ86ka9dvqXJTFu6hMMzx6NuUtVw/mvVjmOsKJ/WfOmc9xc/VlZ5+9QtX1v5g pG+CoBfmwikK9SA8xyxl+qp9/ZxQFzuCkC1p/tcpUd7XCH3OpCmz1qq6VWj6oXla7T/72pfqOX76 5W+ua077k77BybPQafUW2KKNCXJ3pa07woQo+preOn13/K2vzl+29gjAigJmmKBTPFnTBJ6qUrkc BJNNk+CDbVD/16hWtUL0OPNTDWoVp1bNqyq+ykxn3YcQBTzao6WzUt9eL7kuw5S03bP16bHKBeiJ ppXUtmun1nSM/bTZEUxpUW7DOiWpbo1H6IU2DWnv7siacHb34hwEfZgEYQLfqXNv22QZM2WhosXL qGvfMH+HiWYGFr4893xn2/T5WSuwdp0m6tqC+d+40mBxGQQzWfjGCwWBB13CAjlQoyYtHRUBYdWi n8LMfuHDzBT06QywWP1Sp55qYgsLnBW/LtKXlGscTh3hNQAAQABJREFUHMDHX3QSBLW93+hA9Zg3 R1/B8x/+7pu2/sX97Vcw30Y/rlm1oJpP1KpeSPVz9HcQFAA+/rC/6neN6pRSQftqVyuszJnhb8pK mD9ULpczkvk0lB+qlM/F/Ty/i2/AvbBCerZVLVU+5hB4v3p0fY6uX7/mlrW/7XK7+QE7gKAaVK9B M6rP/idBeM5WTHF+4Y+z1dj0xWefsJXaj/Tk41Wocb3S6jm0e6aeyyco0kKDF+PY+E+H49CN0E8w H8SzR3+1Enxjoo9BuxgE6zcc42fm16xRBapWMY9yvdCyWVWuT2WqV7Ooy1XW7yuWUMcOzdW89smm lal540e53ILKPQGEeSbpvM6fO0P9enfi+WlhlR79d+K4D3jh856ZXGntoq+jj+Lepg3KKizgF1TT wvmzFAaY/2IxBGMy5uTo9wiWpK3qdHq9hVYzIobX5Dk6vjF6O2f2V27vA9LresP9hIkBBLZOMNRl 6q2/zw04jhszVNUDmKF9wBjvJRR7rOTvO2+9/4vPRilMrYFAMcYDi4plstEq9htrEr7PGE9QtqZQ 9A2n/VbXwZ9tTHxP/al/dKaNAcK+H1zthRmBZnxwcuniiGuuRAHuYFBCEBA73yb4CGK1y24g18Xd ZA2/fPkf0Yd0hLXxtm3d4DoGg4lODQKzkzVrZHNlV2LeGTliAI36aGCkMrECMGxILzcfL+Z9si8I CAKxB4G5izZT5RYf0ZoN+5UGXs3KBSn7w2npwJGz1HXAt9Tl7dmqMcmTJaaHMqWmlMmTqGNoasFH Hn4Z0oWt0kMg17TDBPpn13GqVaUQdXy2KpV4JBstXsFO34+c8QoKgm1UbzmKPpjwMx399wKVLpqD GYA8ylwW95esN4z2HDil8kiWNBE9lJk1eFKEad4lSZzQVRcE6vBEV67d5MntPYIwThMEZKDRX6xQ Ai4I0IoXzkqJEyWgzduPUK3Wo1VQD6SBiTDaqwntxnHWLGkpUcIE6jSEVRCcQugErbanmpShxrWL 0TFuE4Km9Bnu7hLi2o1bKv8GbccpzLUPQO1f8LufNlFNrgMERuVK5KK2T1RQ2pLL1+xSAsATpy7q 6lDvYfNUuSn4Gb34dGVq2ag0oc1z+BmDnNT/KqcHA4b7NPmDEe4Bxi1enkwzf/iLMmVISc82L6/6 DvKBxic0Rx/OkkZn77ZNmDC+MiEGjggwY9JCNh9H3f7aeoi0CTeuo+/gGqh44Wxq609/Ujfwn69n odPp7c8r/0ftekwltKv9U5WoZJGwsvV1vXXy7gRSX52/bO0RgFUCTDlB0GbSBOHcvbt3lWBMn4OF xPPPNiAw53fZf1yJkuVUMAcEt3i7zyuR+CB9HyZNvXu+qHzEQbvrxY5vqEuI2tu5Y0vFc0HbrSEL qyBogw+851kACMGISV9Pn6Qi/EJ4BmsRaNZh8tjz9QitOTO93b4WUIFHRUAOX3QgXNgJYYEW3tnd o81noQ2kJ9vQjoQ2DISLXTu3dhMY2OURyLnN7OcPVi4IhFetRj1HWSC4Bp4t6taoqWcBITQdoRUF Mn3+lShZXp2Dz8MZU8e7WdGoCyH6w2QdE9mcufIprT5o2yDwyTv9urqV6G+/mvvdVMIEG/0Y2oIw XU/IPhnRz6d/NU7ljWAk337zBd1g4Rssnh6r1VAJyaHliDmJNXgI0kFIfCv83dIVhN9FBD/EPAXj NAiCA/ThfXt3UrkKVZWfRAiQ4QPRxN3fdukyH8QthG5/rFmh+nides3UuwEtPeD+Owv8rISxDTT7 68+pf99XGPdDhGeQKFEigkl/l46t1PwSaRCIBgQBIcZPk1b88pPqCxCgYyyzUpJkyTh4ZSbWGEyu LsEXZvr0mdQPlmaaMFeF9dnrXZ5VfUBrxWJsgQAa/XXr5j8pT54CVIvHsmLFy6q2fTVljEtz2ZrX C+xnE30oRcpUSqsPffbLz0dzv56ik6rtp5+8p/o6NO4QvAn543sAH/yabvCYBvps4sf03uA3lFYz FkjQHgRL6t61jXItoNNjC7cALz3/uArqA63VsuWrqDEcfXzE+/3ow2Fvmck5mJE9BtA0dIKhW2Z8 4M9zwzuKxalpX45Ti2CFChdTGOM83ss2T9VR8gOzDH/eefM+vV+gUDG1i/x1f8QJ+FCFFiTGi5U8 /pkE4R/qlD9crhGqvuG035p1c7IfU99TJ3W/H2lCZsa7nAeudSzRNqnHm0OocdOnXKcgdYfQDAST EETSrV23Kc3iQROEVS8I0cxob+pCAH+HD+1zMUzIb8q0hUoFGE6mobGXKFFiHkAq04vsXwS+UsAE gRD5rECBImoFE5HGYKagV+MgjISvEtBvKyI+AqXLVqL0PCjbSfCRFgMaHKyCsEr8/ojPVAQzrATP nDZBncdAiMHSG5OoEsqfICAIxEgEYBbaY8hcJVB7+vGyNHVUOxZyhQ25g0b9RINHLaLJX6+mLu2q KwHY7t8H0rCxS+ntD3+kFg1K0ozRL7i1a+nv/1MafPD5tnRGxCRl7cb9VDBvZre01oPPvl5D6zcf VBF1F37VmapVyK+SQPgGLTYIH6FB+N3Elyh39gy067eBNIYFaq+zBl1dXsX98YtXrFn6dXzm3BWC 77/5Uzqx6WtaJVx79PEP6SQH/IDQqXXTsjTuvdYqz8T5uinMVszuTvlzZ3IrZ9LMVerePDky0Orv e7IgMGzSDU1IaJ+NnrKCXu9Q03Ve34zyRw1sSd1frKkivqZLk1wJASEghPBsWJ/H6a1X66vkEFZC QLtl+1H1PD4dEvbNguAW9OOUV0ibLJ89f1UJGnHeSf2RzhM5wQj3/rHpAK3jHwR9W5a8pUyS0Yby TT5UAtT2T1Wkt19r4KkYalavhMIQviEHsw9BEO43tTYX/7ZdCZNxDZqPECJCUFqtQj6cIn/6k7rB +LN7FsZltQuB45OdPlP9AILVzz541prEdVw4Xxby9e5Epb6ugmTHDQFouiECLAQ/WrDjlsA4gGAH /BAEbRM+n6vMU3EZvqcwycTE2EqYoAwe0I19Za1UJmjjJn2neEQszI4eOVgJnRCkAhYhIAjGXnq+ qXILgzy1mS0mPzgGwQ/0WwNGqDojOi6CTGBi7ITgbgUEXtUJaQ1DCL68EUziQFiQPnnymHLnAq3J NmzqCtywiIwJYt36j1P7l16n3DxJ90SDGC+T4lE8FcjDTgNPa+jVrtvEFRTDvNduH9FtQWnZ/DoF ++jzRmgXBKqYbGrq1mOA0tzBRA2Cge/nTKe2z3ehps2f9srr+tMuXZa5BR/d750RrvkHtLAmjf9Q 8f4Q1MFc2t9+BdNraDeBoOXY7Y131D40MceOfo/NynOoYwg4gQX8LmqzQ2hIPtW8eliQlvWrlQBQ Jfbzb93a35Sg5tFKNWjM+G9cd//NiggQbIL8bZcrkwd05xfWzoMQBIJb+JQEwW0BBLiLWTOsQeMn bZFBn8Y4+NEnX6n5It7b9m0bq2f8+4ql6v1tyPdOGDtcRRzf8OcaqlCxuisvrf2GxQGMqVZCpOw5 89eosQxBgiA0RmAfT4T69Og1WEXShnl5al6ggOsqBM7B3BLR1DWhv8LXJua08M1qJUTN7vv2B9Ts iTbqEhZoMG9GcAQzUjeEcqCPRk91uXOAEMlOUxFav1j0ef/jz1kAl1nhBLwwXmBx5r33w+bC6L9Q jMEzwcLIwHcjvheYJ38+6WMW3M+glk89T/CfapIdBnALhu+BEwx1Xv48NywibN+2SY2PI8dMo1Jl HlXZ4HsAX6cQUEITc/iIyTr7KG8rPFqNkiZNpgR9G/5cTVXDI8L/ye41NP3BgkCTEDADBBkHCGNT KPqGv/1WVcbBX0x9Tx1U/b4kCZlmH1b/sHpm/qwv/M+LI7QwIOQDFeeX32RMoKrsD2EAsf7ANJpa e/DZAYEbXg509EHvfaoGVww4Hbu8ycxcXleRGFxwTjtCbfx4hLASKx1YgQNh1VBT3XqP613b7ZJF 3ytGFRdbPPEc4UONNr/a7S2Xjwf4lUHkYiFBQBCInQgs+GWb0pCCNtyEYc+4BH1ozcDujShfrkxK Ow3aZU5I83+Hjp1zM2utXDavW952eY2bulKd7tbhMZegDyfy5sxIg3s2Udd+WLpVaXGpgyD/FciT mX75ppsS9CHrMsVyUJ2qYYtBVnNZb0VPmfWHugxhlhb04cQTDUsRNLwQ5RaCMCtBCxKCPhCEZNBw g+YYNNjgo69P5wjNFmg2PtmwtEr7+7o9aos/zYAjEIQmaB9CuzIY5BQjbfpcpVw+l+9B+Bh8vF5x VQ3TjNquXs3qlVSnoc0Ic2AQhGsX2YejJkS21aT3G9cq6vJlGJX+ZPcsdFnY7tp3UpmWX7l6U2lQ QtCnsTfT+bMflfr6U05cTovJKzRSIIB6kzWSxox6VzW3ZesXXMI7T+3/Jdwly7PtOrmlrVKtDn32 1Y+2gh5YP2ACDM0UCPoKFiqqskcANWjoQYDS9oWIiSl8CtasHSa83rxxnasqEBZiwonr3XsOcvWl mrUb0VAHfqWRESaamPCCoBXoiyC406bNvvwSQrNOEwRIml7r3p/6vP2+0gIDnwm+ET4SR3LQD60B qNPqLXzwmb9FC79Tk0t9XW8hGNUBCBo1aaVP+9zqRXBfbUJGKVkLCHTJaBOe2dRvlhJ8BIIwAX5/ aB82ba2uJsjqpM2f2Sbse2qXza3qVM8+77oEfTgB/4rw+YW5warfl6o0fver9SuViTWCpbzStY/K A3/or/3e+cjlaxFzCAgDtaAPaTDX0EIAUxiKa/6QHheRB+ZamiBE0QJ0f9ul83hQtxGmgc1dEGhT 3j/Xr2K/iGEWEK6L4TtYBBg76VvX/BVBaCpUrKauQtsPhHmeFvDhfdYETeTNm8LGLKcm9fpeT1sI brQgDu8rooBDew5CO1PQh/vrhM9ZPfXFnr3fU3NgWK3h91y7V1SxpvYoTmBxAbR71z9qiz+4eoCm o5UQeHP0uK/Vu4BrUJBp+0IXlQwutTRhH+M9tCv7cN11v8b1lzq9QVhMwXhrag/qe+0w0Nf82frz 3GBWDGr97IuudxzHUDLSPlmhHIRvSrAI3zbIEUBrVoUJ8bCP/qrpNGuO6/gIGCu2bd2oLmlhX6j7 hq5HsLZx5T0NFh6+8glTM/GVKoDrUGmvVDnsg65v14McjvGRXfbzfH1JafThAB+vWsywzQ5XD4aw D6uZTgj+RwayTxgrYXUDwjp8lCHpR0eH7z6o18J5MMwRMBA6oXr1m9MnvMpwi4NxYLUEjGShwsVd Jr3Ip2adMIbTU35amxHXITDcvj1MYwTH5iozBlKsOAoJAoJA7ENg9/4wphBCGUSrNQnjXD3WfJ4w /TTtO3TGvORxv36NIsoUGMKQwo8NptfaP0YvPVPFzfTV7maYu+49eFpdalyrWKQk9VlTEATtroOs 4QehU7AJmodWDCBkA505d9VxcXsOhmE6jwWT8MNnkjb1hZailV5+tor1FOnnAw3MrgNmu13X18y8 nmxUisZ+9TubXs+iRb/+Q11feEw9Qz3hcssggAOnGGVMl1LlDo07mKfqdh8+dl6dz5k1DFdPVYA5 LLCH0BiCvA6tK9GyVTtV8m4dHqMxX/xGMGOGqTM0URev2KGuNa8fJiSMan+yexZmXeGLEAQNxGAI +qJaX1UZ+aOVPOnCTxOsIZ5u8xJPYN7Up2y3mIgdO3pQXStXLvJ7aHcTNP40jZ0w2yXowzlYaYCg 8fHR+2+rff0HLS2QOQk9Ea5ZVoxNY60O8wsyD+iE9EQZWoKmUMXTvZgQJ2eH82ELz5c9JVPnTTNO mOWZBG0wCBrmfjtNCVkhtARvfOnyRRrEGi5WmvZNxPPR1/IXCFtU0cfYIuAAyoX2mT9Rk7VgEu3y RVc5YAQofYaMbkkf4mAAn4ydSX9v+UuZAsL0DEK/V15+kqZ9vZTy5C3olh4HTtsV6cbwEzD1NgnP p1TpR5V5IAQJIH/7lebjoaCAibIvQjDCPewjEuba169fdVn+YC4RKMEsGEIQmFc/1aKaCnIC7VUI TjT52y5934O4PXrkoPK3Hj9BAjeXUpi76vkjlFSeea5jJHigSWkN+gPhNgjzTk2wblu39jflyxLC fAhqfmVLOIyTEBB609zVeTjZNg/XwrNLi3EMwkUESoI/Pi3AvHXbXsu5aPGwxU+d10NZw9qFvovA MHpcrVmnESGAJsxq167+lefX7KOQhVB2PBIs5fR9Ot/SZSqqXdQPGrIQnOsxHVZ0VnyR76MVa6hg SEfDvzE6L2y9YWCmc7Lv5LnhGaIPgapUq6225l/FSo+pQyhDIXCKUy1xMw9P+9XZFQOUjrTGHgKG YtELGFapWltppuIaFs2g8YcFJAhhrZaToeobnuodyPm49J4G0v5A7nEm4Qog56LFSlHvfsM93rll 83o10OgEb/fppHfV4KMP4EQSdud2KwM6jd5C+GZHGJAwoL73wUR2MtrR5fAY/hTgMwCq2WPGf227 umzND75aqj/WgH75+Ud1CWrPJ3nAxEsOKlehivooqAMPf3p1FJexbx6bt+AjLiQICAKxEwEIU0Cm HzqzJWlShQkAz1+8Zp72uA8BzZLpXeml3jNo596T1H/EAnp39GLq06WeyxzT7mZob2kfdVnYL6CV oJ2myWlddPqobOGXEISFHyeEukHbC6R9yNndZ2r82V3X5xBRFwRT4gnTV+nTblv4UdQ04u0WvKod jyZOX63KRx1KFc1OM8e8QEUK+Nb20fn4s7XDCP4a0XdgQlztyZHKbyGEuQj0gfpBSOaLHuc08Hu4 aIW7sA9ad9B4RP9auX6vMqOGJiHqAWEzKNT9CZqweM4IonL67JUoRxkOdX19YR1XrsNP0qM86YX5 JrQpChQq4tLK8NbGc+dOq8VRpEmTzrsgWucDfg3+AMFXQRiESbAmLZyB9QN8ptlRetac0nQ6PHgI JuuBEiaVmBTBN9q/PElzQpjo790TJtzxll5H74Xw1LRq0fcAb5jWtWBNnX7MJ2OBGdptL7H/QquJ MBawndAivh8E8zS7ibinPLTw4vy5s+rZQGjmiXS7smbNaZsEk/dRY2ewwG0RDXiri1rohnmdnWmi 03bZFuThZIrwSKnXWPAG8rdfaSGyr34FAW0v9qsH09pgE54HtKOGDulJBw/sVWbFcNbf9oWuLi0i f9sV7DrGpvy0tlDChAnZFHuoW9X1e4L5op2wzy1x+EGScCGwyePAJBhCcwjMobUGrbpl4RZsjThC d6gJASBHjXjHzdrN3zITJ07quuU/iuDfuvV4h+LHi6/M81ezTzj8IFwaMmycrRDflUn4DnwCaoI1 HgRVWtvQuhCi02kNYlMrWl8L5tbJc8M3Sfuxtauv6Vvx0qULwaweVWHTXYzHkCfgOwUhLjS4oT1f pVpdl7APWs0QxIK0Vp+uSCj7hi4jGNsH4T0NBk5mHiET9pmF2O2bJry4rqX39ml/cCTsQ8fFh9VK eElB5dmB7Q8L19G8uTPY18AMlwQe0X/A/MCPgRNqwqa8WtgHSTpWRzTVZYeuvig9mw9ogglFtRp1 9aFrmzJVGsJKtJAgIAjETgS0BpYnAZqOMPswB8NwSlXK5aUdywfQkt920MeTlysNrCGfLCL4sHuh VdiqqDUvCPPAqILhRF2Q1qQzLDTS9HDmNHo3xm0h4IKmGQSXv33bnSqUyh2pjhB2IaCIE0IgCxDM iT35JDTzgsBr9KBW1JeFq/AB98mUFcqvX9P2E2nPykFK0Oak3KimgWanDvABP4z4gVKlTEoQSGp/ guqkhz8IBCHsW8aCvXMXrtK6zQdUYJKiBR+mRhxxHsI+aP1pLc/aHCUwRfLEKrdQ96evP21PL/ee qXwhPsN+GH9m/5QwUw6UQl3fQOsV2+4rU7aiyz+eP3VPxbyMHn8uXjhP0OzyRQg2AP9XCG4wecII xQuBfwPB/BIEP0XwDWVHEJxp0tpol1kbLioEwRomUatXLaOubGLrTdCFch5m7RcI+1azlmKHl7t7 LFqbOGfLntNrnlhoHvTeGEJEVxAWwq3CPo+FGBcwIYVpJ6ihn8KFh8M1lTChXc/aIVbrHV0MNCvh rw9kusXR180tzKmbNntaBaWzRnA20wV7X2seapNkf/sVfKCBLhpaW3Z1hCATgj5oMr38Si81l4HW 50ccWMDUlHXdy99qEDRznBCEprPm/s7aYivY5/ckFaQG703WbDmoyeOt/X5fnJQZV9No01pYWMFl gR3BnQHcQNlpoNqlt57DQkadek1VgJilbMqLed62vzcStAnrcvTfUBK0aRGFGrzg08++RHXYxBwB KyAggrVbVAkarm/0fpfadehK89l3HfzQw3QUQWTgb9DXmHnFMEVPlz6MT00TvkjjafzWmtYZMkUs 8ES1HXb3O3luMFnW3zolfLR86i6cP+fKGv5rXeTnO++6z9jBOAYtYwRfgSmv1r7Gd7JipRqqf21j X4KQkWABDWQK+0LdN4yqRnk3rr+nUQbIJoPAOWibzJyegvoonHtqwooxBHLmzzRf/dkI263vsdti 5fWVV/tE+uEjqwmM33PsEPi7eatUefo8Bm9N8XjCqOnfE8f0rmsLtWT9osJB9cYNa9U1OAGG01Rf ZKrNwm4fEYusP7ygvgZGX+XIdUFAELh/CMAfHmj1X/tcEWd1bWBa+MvqnerQDK4R/s2ni5ci/Kfp e/QWzETDmkWVD7xnmpVTp83gCjqd3kJgpbXdlq36nz7t2kKTCwSfd4gUfL9J+30xfcihThDk5ckZ xgAiIjF861l/pnDOVzvgMxEEzTX48LPmhWOUaSUIRN9hn4tr5/VSjB18DmotTqT1VH9rPoEez16w UZlcTxj2NP3BdYBw7NdZr9OhP96lTm3CBCK+8q7+aH5lVn2JA28M/XSpCoRRhwV6oEbsmw8ErT+Y K4Oah/v5w36o+xPw/WZsByXg+5XNid/5OIJXQPmeyNO7E+r6eqqPnA9DAJMkbVa4dcufjmGBPybw QdDuG9C3s8vJuxZwgWdLwBNk5G/9mbyT9rG3fdvmSL7u9rPwzinBvQwIJpOefEljEg0zTVANtgAB wVk7JvN2BHMk7ZgfJru+KFnS5GrMQTqt0eLrHut11B08OCJgmny2NR1MTUFmkLj8BSPMvr79eorL osV679QvPlXXMnFU0eqP1bNejnSs/dlpwWykBFE8ARNak9D+LeE+0rS2or/9Smssbueoup58KMLU fONfYfMD+AaH/z4IiRD4wWrCqOuXJnXYN1j7iNTn97IJsCcCT1CpSi32GTebEIAApMv1t12eyojr 5//ZtpEVQA6oedfkL+bRzG+XR/plyBgmUNKaRYFi0piFsKC1HPX3+++mKeEbxjr4cvRFeNagK1cu +0oa6fofLBDGGFWZzToRMBNRv+FyK3Pm4FomYH6MyOmfT12gxiuY6WsNPV0pBGyCyahJ0FoG4Xuh TeP1fBnWgHifTMK3Qfuly5kzYp5vprHbDxRDX88tUeLErkjK68PbYpaPBRIQ4gXo7xKOA3nncZ+V aoQH21iz+helAY7rMEHHQhGeNcyHp34xVgVDQfmme4NQ941AMbe2Mba8p9Z63+/jkAn7dmzfyiGx 33b7wbEwtODwQmsfBjBRgBr6hyO/cPt1e2OgCxsMCp6YJVciHzubNv5BzRqWp5nTJ7K6+x6OAnxQ hfzWt5mhzvWAjmvfzppCk8ePUO3QaRG+2y4iE4SAeKl8EeznNYHRQ2Q5SNURnXgZR4Ia8k53skYf 0+llKwgIArEDgQaPFVHmj9Cm6/XeD4rJ0jUfzNp4ML2EgK3tE4/q06RNahE8AcEmTPphyVYVRdU8 B5NHkNa6Mq+Z+4juCxr52a8EQZkm+AscGC5M6ch+7fQHWV+/H1uNwdoN+yMV37ROmDnfBxOWufwQ 6kSIoqt9z+lz3rY1KxdUPhCPn2T/VyN/cns+uA9CwD0HwnwEwmR24oxVbkLblMmTMF5hJaTg56jJ W/11mqhsISgGfTB+Gf24bJsyQ0ZfgmAMWn9OCH7+IDAGjfwszKFzHY66DELEXWgJIi+YKkPg2bRu GO4qAf+Fuj/h2Qzp2UQVN3zcz17NtnWdNO52706o66vrIFt7BLQGGIJ7YOKnCROMVs2rulyr6PPY QmA3ZPh4ZdoKFy1wwYLF0bLlKis/ZXA4jmiMmLyaBCGg9qeG8+DLILCCj7ppX37qSoqohQPeetV1 7GunHvvO00FC3h3Yg3nDL5SZlL4Pk84OHE1yUP9u6hR8QeuJavdX2xCiId67d1ddwxY86cvtm6k8 MPEyhX3du7ahEcP7uU2QMdEdyeZ3aC80F31FQNb1sm51FF47k8FNvHCNCTS0yv634291q6kxA9+F HcJ9aEM7pD8LYU1rGux/MLSv0lrCzS+8+LoSxGL/L8b7udZ11EI/hG2atv+z2ZUemimhoKGDeyn/ 2DrvKZM/UT63gaMWyvrbr8pz8AXgcfbMKaWBqvOGptGwIb1o3JihCst7/91Tl8w+uW7tb/ZafZwS fhRBc76d6uoveE8QAdVKv/26WEVrNs9r9z9agOpvu8y8HqT9xQvnquaWLltJ+bGE6yjrr054IElo 5FnHHX+wQgAV+GvDeAbBOMipli20x0C7eL7oVPtT3cB/d++EvXcQamqCwG3MqCH6MOAt3v3v50xz E8glTxZmVYJMdX/UBUCL943X2rp8oEK7cOa0ieoyIoRrwrcjcZIkar4+euQQN9w/nzRSCWghPPMn sEmgGDp5blrh5+sZk5QmuG4HfApOnvCROkTgEJPX9ued1/nZbavVqK9Ob9m0XmlWQ5Crv0Fa7jBz 2gSVpnp4Wp1PKPsGyvCFOSIwd+zQXMlAdJ3strHlPbWr+/0858zeKYAagqGbM/vLSHeWZynzCnZG qqlq9Tpu0XX0+YrsdBOCQO28GD4NIJkOlK6zBh4GkzE8WOBnEsrRpr44Dyeh8IkCQgThKewDAx/Q N/tG+HCAKS8YV5Pq1n/cPPS4D0k7nGlChR8fDHRy/Exy4qPQTC/7goAgEP0IDB27hEZ9HqYSr0tP kiQh7Vs1WGnJ9exYmzWnltC4qb/TQo7OW7xwVtrNAiQdAGJQj8YurTvcX65ELpUNBFB5Kr+jrtWq UpA+7NeCPp/F7gbYtLJq+XxUrFBWgkYZtPLANLRsXFoXb7sd0K0hfT1vA51i/3Tlm3xI5Uvm4nE3 AZuAHqCr125RTvYH2J/TxARC3X5c9je9PmgOQYtt/+Gz9L8VA5SfOkThnT53vYqiW6rBMKr+aAGO 8JuGTT4vKg3Ky6ypdmXnKJ/CT7QTvhSR31vvz6dhY5fSvKV/U9niYRMtCIwQ1bZXpzrKNBZYd+43 iwZ8tJB91z2ihLQLWNAGwRu05DJzXpq81V+nicr2jZdrqb5w8OhZGj5uaaSsmtQuRt9OeElpKka6 aJyAKe838ze4zujoyDCVhpYfhMugR0vnjuR3Mjr601uv1qM1G/apPt+u+1TauKhvJBN0V+V5x9u7 Ex31Nesi++4IwIz156XzlF+0Nk/VVhoFWPD1ZbYJ0yREzO38cktlCvkpRwCGRsoLLHAaP2YYwccb XKkULlJCFQgTO+TZpl1n6tZjgDoHbZmGTZ6kBfNmqckWzGbh6B2mlf5ox0H42H/gSOr9RgfFS378 QX8axcHaYNoKYSQc1YM0HwhBUP+BH7OfvVeU/6TuXZ9TGh3QpoNGH6xCQDBrHvrhRIJWiCY4p/8D Wj88eUb6FGyRcozv0Yvkb/QeYqsZ1rxxxMKRzgv+xxDxGFgCG2AE4afVZBA8MnCGVg6sW8D74tui J4k6v4ZNWiptGvirRoA5/DCpxCK4KURoyc75mz/ZRt9Gd9j0FwEq3nqzo1oUz549txJ2wCc3+GAI P55n8z878tUuu3vMc2hPv96d2Oz5fTXf0JY8LVo+59LEgTaRP/0K9W/a/GnlFujLz0crIWbGTA/R ThaSYt7S+pkX1fMuVaqCEuzCfBJYQbgCwSe0bOzo8ebPqr4JZ/qtn6ihBLswH8dk2aoJBR9bSIcg K/nyFaZjxw4pE208t1rhgQL9bZddneL6OQjdtIZt3fDItHZtrt/oCRUgB3NJBLgow4LBQAkBHyaO +0DdDkGYOQf1lqfWxsJiB94LKKrA7QGid/siLHxM/XKscpv1bKtaSpgJs0+0J6qEOT8E/ZPGfUgI HAMB3Cr22YfFA8yptZm8WQ6s4hrVLUmFOcglxgb46cN8/DkevzVhIQTRrPGOQaYAP4CYHyPwjHb/ 9fIrPV3vsb7P2zYqGPp6bi++3IMwNsJn3gvPNVSRjzHeQsMb7cN4b3Xr4M87761d+FbkzpNf+e9E OjMoKnz3jf90uOt204QXJ0PZN5C/L8y/ZkUs9GmMc/obivtMik3vqVnvmLAfVM0+OFEGg+ONwFxp lXp8kHRIc+s9YHzg10ATGAJNKVNFTKycqv3DLwJWuKyE1dGRY6YRPtyaIMhrwIO6SdaoOVDFN6OY Jeb6Wl8eDHbanESvtuk8h304mTp16W3LsMFJ8+McUUtIEBAEYiYChfJlURW7ffsuwdzU/Jk++t57 sylHFG2jhHYw9YSm1J4Dpwmmuz981pHefKWOWwPLFMtBb71aX2lTnTh1UUWc1YE8Xn6mCuXOnkEJ taBlBkFftofS0tRR7ahW5TATTLfMjAMIo7Yu7adMNDGxQiRXaIIl4AlsmxblacuSt1xahfo2HeUV QkEn5ErPWmOa7M65roXna83//beaKV9xqOca1u67fuMWJWRzPRAi+m7hdrRsVJonivc4Uux2+vyb tWqbnM1ue7xUy03Q56185Af/ewiwAWEnNPmmf/+n+u1krTYIVVEOCMJV7OM5z/zhL+WzD4E9cA6C NZO81d+uPnbndH4aG73F+RlcPgS0MENGH5o76WX68uO2hOAaENShj1kF0Do/cwvNPq0ZWrpoDjeh s468i/StGpcxb1P7UepPRv8wM7biAP5g+ifPKwEf3imtgWjeY+57e3cCqa+Z94O8nyhRItV80w+e NzwgXAKZ5p/QLvhy+iJCoAUILKDVBsET+Kr33p+gHLGb9+g8cA58lp7IIhItBF7Pt++qnL5j4gTB DRZn8Tt4cK9KXztc0IH7QW/1/5BatGyrtEtQLnwXId8vZyxW5lTwl4X+5ovA485g8z74d0bZENhg kgtBHyZar3Z7m94ZMtqVTRnmOb/m9Ji8wKQVbYcPK0z6gAmERTNm/0LFirsvZL/9zkeKn0zI2CPw AiaKaDcmcsM+nOSmBYjJvuYvYQVj/SlNSh5LQUt+CtNeqly1lkvTQlc2SdKkysT0zJmTStAHnhb+ t6zRQcHjw+E+/AdC0xHp4KMPgj7UA4vy73/0uVocN/sAJpN4jmg3/FnBpx8m+OhfiJo5ccr3aqKv 6+NPu/Q91i3qin47btJ3ymce6oj+gnqiD/Xo5b7w72+/6sNBCNuz4Bn5wbwb/r9vc0RTzB9wHjTw 3dFKKIRnDsH0hj/XUGU2uUVfAZl9HcdNmrVWwgBoM0GYgfqir341c7F6ZmZfBW7QCoLABoJh+GLE /AFlQgCkyd926fselO2+vbuUhircAdS0jB0mBkWLlVb9COe0mbTu49bniDQJWMgDsrsGf+14liBo g1k139QFmz+MQc93eE3NLfGuwiLMXLTQZel6mVnAZRbeaQjUIECGUOo2CzrRX2DOntAyf/eUF/hG zG3DfmFtyJe/sHJHBfNi+FSbxz774B8ULqowZlkJ48GzbTvxGHpPCbcxNuL7MGXaAlUXMz3cc/Xj MRFjKMyBIfCDpizGXFgFwjWXSZ7qrdP4wlCns9v6em4Qas6cvVyZSvMqBrsLWM/v/GrGii0CeVzA eK+13HT+/rzz+h5P29p1IuQmVVnApwkCUq3lh6BCZcu7y0NC2TdQB1+Y58pTQFU1bz7Pc5nY9J5q 3GPKNh5PqMK4AEuNrt+4Q9t2nracDc4hVPjx4YNNvrbL95QzmCioweNjipdFE6LMQMoLR7dOmDR9 H1SNjxzej3dQrcia5rs6jd4iLRglDMLw+2eWjzT9+77iUjnFYP3Bx1P0ra4tTC/wQz214M91kXcA P3y8gFkCY5eJVwZNW34zrewLAoJAcBGoUIL949w+R3RqfnAztskNpqCIDIqoulrIYpNMnUI00gNH zlL6tMmVQM9Md5iFhgjukT5tCiWgsfMrZ6a37kNIBq0wBD3InT291/ETwq0UyZIws+p7XejGzdtK AGdtm6c8oBV3+eoNSpUiKY+N7hNtjIsQjoYJtTIqc2hrO3A/MIIwUGNhTeOpTtZ0OEY9Dx87zwKz BEr4B599Vrp2/ZbSqEzIAqscD6dzEyyaab3V3w4Pu3PIzw6jdMV6qee/9odekYJxvPDGdJo6Zx09 /XhZ5ffOrJPdPoKdXLt+m59BEtUfzDTAHqvyMOn1Rk77k69n4en6XZ4MXOb3wa6OdvXy9u4gvdP6 2uUdq8/l6MLBWG6w+ft5v5oBk1NooWGC6ITXAr8Dk6BkzLPZEbSeENE2BWvXQWBmJTgWB89lXTgG zwiyToqR/iT7Vk7IQp2HHs7mMhu15otj8J5HjhykzMxnaZ9pqC/6ORZn/SUIrc5ytOEM6TM5cuEC jT1M0NFuXb63MlG3E4wV6g2+0Onitl2eaGOzRuWVK533P/qMaob7IDTTYtwCzwveGoJY6zMw0+p9 9I/jx46ovgENPyd9BBggWAueJZ6ZlbfWeUd1i3kCCEIctA3CM/h5DNNE9P5N86dfIW/w8HheEL7Z 9SVof0LbB2XjOu7Bu+DpvcIzP3rkkNLIRFRSkNkedSL8D5pZCG6Qmv39YU5jN9fQ6f1pl74nNm0T Ma9SulgWdm9xlQ4dveS46ngWiRMlcdOwtbsZ7wYEU+ac1NOYhXfu2rUrtvM/zC+b1CvNfeYWjRn/ jdKssivP0zlo4qLPpWZNKDOKt6/xF/nBxyQWBSCo1z4rcR/6JN4VTd7yAgYga1/HeYwhCXjRJ0uW rJHG6znffqVcFEDTDIo2GEPhnzIzj4nQuPZFwA2m89Co9vSN8VZvM39PGJpprPv+PDe8wxi/8T5i XPA1NvrzzlvrZR6jL2NMtX4rkf+1a9f4fDK3xTjz3lD2DZTjCXNVt6tXfX5HY9t7amIb7P3kSRNS scJhvsd95X1fhH2+KhUbruPD3bR+WR40b6nqvsemJp5UT2NDe6SOgsCDiEB0CvseRHylzcFFAIKq 5IW683fnLo0Z3Ipea/+YqwCYMNdo9Qlt3n6EBr/RWAURcV2UHUEgQGGfABc3EIB2yaudnlKTqcXL tvoUasSNVksrHjQEAhX2RTdO38yYTJ98PEiZzS9YuiFkAu/obpev8qzCPl/pY9r1B/W5xbTnEF31 icnP2x9hX5i9RXShFofKWbTgW5egDysb1WrUjUOtk6YIAoKAICAIxDQEoGEJn3zwp9djyFyaNHO1 MjGGVtzK9XsJ5q7QHO3ctnpMq7rURxAQBO4jAmvYtxuoXv3mIui7j89BihYEgADMXEFwZRUqzVZV gPwFFQF5bkGFM8ZnFleetwj7AuxqmzauU3dCLbdJs6cjqTIHmK3cJggIAoKAICAIeERg2qjnaXj+ pcq3IIKI4AeTbPhvfKZZOerTuS5lypDS4/1yQRAQBB48BDp2flP5+tNmew8eAtJiQSBmIHCUXQnA dz3M5Bs3bRUzKhVNtdB+AWFOH9voQX5use1ZBaO+cel5ixlvgD0CfkquXmFfDCn+z95VgDlxddFb 3N3doTjFtVgpTqE4pVgplFKkUGihFJcCPxQoDsXd3d3d3WFxd1nkf+dmX5iEJDvJCpvl3v02M/Pm 6XmTN5kzV6Ka8mviYTNSTBAQBIIQATHjDUJwpeogRwB+9Z48e0lxlf9GM34Vg7xD0kDIRUDMeEPu 3EjPBAFBIFAQ8BYzXvjvhE81YxTuQAEghFcCv4DwewdflTr4Uwjvsk33PtV5swHhEzoIyfMtZrzB cCFC7Tp6jJjB0JI0IQgIAoKAICAIfIhA1CgRnAYJ+TC3pAgCgoAgIAgIAoLAx0ZAB1352P0I7vZh DYdosN4qn+q8eet8BbTfoWW+XYejCihKUl4QEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAE gg0BIfuCDWppSBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCFoEhOwLWnyldkFAEBAEBAFB QBAQBAQBQUAQEAQEAUFAEBAEBAFBINgQELIv2KCWhgQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEgaBFQMi+oMVXahcEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBIINASH7gg1qaUgQEAQE AUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEAhaBITsC1p8pXZBQBD4hBC4c+8JZSnVi3KV60vv3r0L 0MiPnb5OpeoMpdhZ21OMzO2ocfupXN/jJy/o3KU7Aao7MArPWbafEuf+g37qNDMwqgsxdTjDPcR0 0Is70mvoSkpfrBuNn7nda0YRWNdDgSoDKFm+znT6/C2vGbuZjjb+viJV/PoLunzpvJnsksdLEXjw 4B7V/rY41a/9VYDvbSEFgmdPn5CPz8Vg7c5Vn0v09OnjYG1TGhMEvBkBucd48+xJ30MCAuFCQiek D4KAICAIhAYEnj1/RcfPXOehgOv77DPPRuX7+g1VaDCCLl29R9GiRqQY0SLRlt1n6cnTl5Qg1+/0 4qUvLZvYgsqXzOJZA4FQ6vbdJ3Tj9iO6cv1+INQWMqpwhnvI6J339+L85Tt09uJtvq69YTSBeT1g 7PjOPFJkfWiSa4q8uH//rhAYoWlSHYzlxYvndOH8aT6DF1mfeXpzc1D3x0h6/uwpfV0qG716+ZIG D5tChYqUCvJujB7Rn/4b+w9lzpKTJkxdHuTtSQOCQGhAQO4xoWEWZQwfEwEh+z4m+tK2ICAICAIO ENi866yV6Du7pTsljBedbt15TK/fvKVXvq+5xMtXlq2D4l6X9F3rifT02SsaP6AexYkV9aP13xnu H61D0vBHRUCuB6LtW9fR3NmTqGixr6hq9fofdT6kcUEgsBB4/eYNvfb15epevXoVWNW6rOf582fB 2p7LzsjJDxCQte4DSNxO8ARDT8q43TEXBbp2bkn4bv7ZdRDFiBnLRU45JQh4JwJC9nnnvEmvBQFB IBQjcOWaRVsud7YUTPRhqAkU4QfZOq8dgegrkjctH4eGj9lL95Ov7xsa0LnqRyX7XOEeGnCWMbiH gFwPRKdPHaNtW9ZS9OgxhOxz7/KR3CEYAVzPYyYsIt9XLylHrnzB0tOmzdtR/oJfUpo0GYOlPWnE PQRkrXMPL0e5PcHQkzKO2vY0be3qJfT6tS+1avuXkH2egijlQjQC4rMvRE+PdE4QEARCOgI3lcbd g0fP3ermtZsP6d6Dp07LaFO/6MqE114K5k5NxQump3DhXC/faAP+/cyIf/0xU4ejPG/fvqMLV5SJ n9LaC6hgLGcu3GJTZk/qwhxdVmbRrnwpusLdTJvQurzoc9dlG8Z6ggp3Yxuu9p+/8GX/j+gz5sqM uDNGmMG6g4eZ9v3L48514h/+Ab0e/OtraDzvq7Skrl+7Yvo7cOf2TXr08EGwQYH24KvNjLxSRBB8 rL19+8ZM9iDNc+PGVXr86OEHbQA7nDMjb9++pWtXL7MWi5n89+7epsePH5nJas3jzny+efOafK5c 9Hf+3Zkza0f8djDXVy5fIJjt2ku27LnpizyFKGxYx3oPT5484msZ17RZcdXXqFGjU8FCJShhoiQu q/NVGodmv0Oe9NFl43LSFAKurt27d2/RpYvnCHNjVszOuavr2b4tfN+drRv2eXGM7zryu/qNZCzn CgNjvsDed+ce48lcuNNfYHXzxjV2ZeGs3MuXL9g3KL7TmBOz4motMVMH1jys9/6tX+7OO9oOaN8c 9T8k3W8d9c+b0xzf4bx5RNJ3QUAQEASCAYFRU7dQn39XEbR/4L8od7bk1LVtBactg1jp2HchzVy8 l313IWPyJLGpTZMS9GtTi7+gE2dvUIHKA+i58skHWbb+GAfnwP6icc2oRKEMlKbwX3RZtXloVSfK kiExTtHEOTupUbsp1LN9JUqfOj79OWAJ+0ZDv3JmTkZThzagzOktebmA+jDTH53X3e3ew5epTbc5 dOCYD8GPIfqRKlkcavdjKWrxfTGrv6cazcfRqs0nWKsPbWQv01uRmGEpbJjP6ML2nhQrRmTasP00 teo6h46eusbdCKPOff1lZpoz8geKGiWCy66BmPpr4DLGHP4PIfCBWDRfOhrRu5bqU1xOM4M7Z7T7 SFWwC4HsvbSjJ7XsMlvN11EeL3ws/tKoOPVoV5HQX6OYwf3167cULVNbeqN+GO5a3IG+yJrcWgWC WzTtOJ3yZE9Bu5d0sKZjp+4vE2jGor00tHsNbt/mpOFg4apD9L8x62jH/gv0RpmGQ4Bl68Yl1DVc niKEf//TwJMxXr/1kBr+OoVgBgv/krFjRqGf6hdVb8/NkyZxs3dQ/u2e0+lN3Sh1css8oZ+oO6XC PUL4sPT4xCDrtWT2OjGDv5nrwd3+oe/eJKdOHKHmTb+lly8sLwxWr1xImzet5iHUqNWIWvzyh81w QER17tictqg8eLgBsVGzTmP68aff1HfA9sUEzv87pBetWbnI+pAEAqR23aZUt34zrhftN/yuHEWO HJXmL91BsWLFsWlvxNA+NHnicKpW/Xvq0KmvzTl9sHTxLOrZtS01a9GBkqdIQ6OG/63IpQt8zWTI mIW69/6XUqfJoLNbtwf376JBA/+is6dPqO/Ha4oYMRJlz5GX/ujSn5ImS8n5/hs7mEaPGEDFS5aj v/833loWD3/fVMivHgCv0oB/JrL5sz55/twpFeCiDEWJGpXWbDyukz/YGvudOEky1e/+dOO6D+fL k68I9ewznN6pv797/06bN67ih/OYMWPTTy1/d6h9eeL4IRo84C86dfIowfce1uPESZJTvfrN6dua DazfId2R+XMn08TxQ/khFnkzfZ6dfmj2qz79wdbMfOpCVcrno3v3btNYpVX3x28/8sMo2oAPu88z 5yDj2N2ZM12/3u7bs43+178LnTt7kpNwDRYoWJz6DBijrqkonFa1YgEmN6bNWktp0r7XtluzahGN /LcfE73IGCZsWIoUKTKX+Yw+o5Fj51LGz7O53ddlS2bz9Vi6TCXq1W8U14cPjcni5XtoQL/OrEmL eXL1HTLbR2sjsuMUAbNrnZ4nR9cuvk/jxwwiaImBJNcC/4ztf+9NWbLm0km81XWZnXMz1/PSRTOp Z7dfqW377nztjB7Zn27fusHf71Sp09Nvqh+58xa26QdIxjEq32q1Fus1JkqUqJQzV35eVzEuo+h+ 22PQrddQ+rvPH6bvF6jTLO66fbP3GAQTMjMXWH927tjIWn1oo26NkhQ2XDj1+zMMLVi2m7XZddv2 24cP7/Oaukmtv/rlUYqUaXgNLlm6ImfftGElTZsyio4c3kdv31h++2DtqVX3B7WetqPw4cNbqw2s dQ8Vbly/goYP7c0vOXA/ihAxIpVSfWr7Ww/CfQLizry707d2rRvQ1s1rqNEPran5zx25Lf2BecGa +0KZTC9fc5Bix4nHp8zcb39r24jvdQ0a//LBbw/UW61iQb63LVq+m+InSKSblK0fAu9/0QskgoAg IAgIAqYQGDR2HbXrOZ/zJk4Qk7XsQHBVajTSYXmQN0Wq/Y/2H71CcWNHpZoVv6CnigRbseEY1wPC 6O8/vqHIkcJTogQx6M69p6z5FzFCOKsZL0gqyJNnL5mgAWmhBYQaZMh/G1TZJ0wwZcuUhCN/Hjh2 hUrWGkIXFSEVKaLlx4XZ/uj63dnOW36A6ijSCWa5MD3OnysVE4/Q8AMhdvTUdRrZpzZXifPwR6g1 EIEN+giyKbwi/aAVVqnxSNYMLFk4I6VLGZ92H7rIuF24coeyZnSuIQGtsmLVB9OuAxeV5kYYypUl uXpoD0cH1BwA9xxl+tDeZR0VOZrAFO6OMHj24hWTWfkq9Wcfi4nix6D4caLxfu9hKyme2geZq8Us 7tDaBJGL62XR6sM2ZN/SdUf54X7PoUtMNIMwhmC8OAfJlikpbx193L3/lKr9OJbrAH6Z0iYknxsP aKci/kBex4geiTr+VMZa1N0xQhsOePhcf8DfC1yHJ8/d5LqtlZrYeaquc+Bl75sS15X+V79j1YMM mb5OzOJv5nvoTv9MDDfEZYkYOTLFjRufHqjgG3jzHyFCRIoTJz73M2YsyzVn7HTrlvX4gSZuvAT8 Ix4PjhPGDWGSrna9ptasIM+aNqrCD3p48ChdpjJrmu3Ytp6GDOrORFDL1n9S6rQZ1ANrNG577erF VL1mQ2sd0I5YvnQOX8MgiJwJCBPIrOnjCA8EIHzSpf9cRQ4+x8RXix9rEB4OMDYt69YsoT//aMFj yZotNyVPmZoOH9xDe3ZvoQZ1v6aZ8zdRvHgJKX3GrFxku+o32tFk0NkzJ6wPzZvVwx58HWrZoh6C YC6WLt3nOsnhVvd7xrQxrPUWLlx4SpsuE4Es3Lt7K/3a6nseDzRF4sdPqHBQmhZ3blK/3h0VqZma QAhq2bBuGf35ewtuFw9XWbJ9wYQnND4G9OvEZFjHzv10dpo+ZTTPAxIwzrBqHQZZiIc4R2J2PnXZ lworBMVo3aIujwE+svAQj4dPiB67O3Om69Zb4IL+wg8XsEiWPBUdP3qAMFcYN7CEQPMFD+EgK7XA ZP3P33/iw8JFS3N/DuzbwQ/00ABMmy4jhY9gecnkbl/RHzx8P3v2TDfHW41Jw+/K87WD71Cs2HF5 39F3yJ0+2jQkBw4RMLvW6XlydO2CXJo94z8CUVagUHFeDw7s20nHjx2k9m0a0txFW5mA0x3QdZmZ c7PX8wu/63jsqP+xViHWJHzfz54+zsF12qg1evR/CzlADPqBtahZk6p07Mh+JrQzZsqqCKiIynXD Ef6u1KtZmiZNX8lrin2/7TEIEyasW/cL1GcWd9222XuM2bmIo9ZD3NM0WYf7WoQIkZiEC6dIP2eC 732DumVZ+9byIigPgfyDNideeK3fepqgpdaxXRP+vmO9SZkqHd26eZ2OHtnHL1JA5H/f6GdrE+6u JdaCdjvz5kyi/op0heDFVDx1fzijXHGsWDaP93FvdXfe3elbVnW9gezDiw28ZMOLHC0b1y1nrPFi D+sbxOz9Nlv2PEz2gXhs/nMHdS8Pq6ulDWuXcYCwRImT8RitJ2THioDt61ZrsuwIAoKAICAIOEIA xBpIEcgPdQrR1T296fLOXjRvdFMrmWZfbvS0LUzcQEPp8OrONGtEE1o64SeaOqQhZx0yfgPBpBCa Zqc2dmXtKpz4qmgmOrO5G//nzWHRKOECTj5A9MHPH/qDdrYvbM+EC8hEkEZazPZH5ze7hRZX2x7z mIypXTk3XdnVi9bPbM39gcYYZMz0rXTk5DXeH96rFo8tvNLSgmyY1YaPj637kzXNVm06wURfmWKf 07oZrWh0vzp0YMUftG1BO8qQJgGXcfYxdvo2JvqgZbdhVmvav+J32qHwOL6+C2uKgZTq9PdiLh5Q 3BGReFTfOupa6EPnt/Wg6uUtb/GBs1Hcwb1KmexcdJkfgYcDaOFBg03Lio3H9C5HawZpigAnRfOl tabb70CD78e6hVkr8MiazjRn1A+MS4efLKTE9IV77YvwsdkxjpqyhYk+aGVirnAd3tjXl7UxHVYc CIlmrxOz+Af0egiEIX30KlKph5O5i7bRdw1acF+gwTZv8Tb+h0bYB6JIjN87/01LV+2nBUt3ktZu WDBvik3WBXOnMlFWo7gAAEAASURBVNGXJGkKmj5nPfX+exQNGjqZteyQESQPTIRAwJX+ugqXXbXc 8mJFV3TwwC66jTxKY6HkV861qXV+EH3QTlu8Yi9Nm72Oxk1cwqab0MDZtMGyliMvHtBAOIIAgubi +MlLqFvPoTRj7gaCJiBIT2i8QfLlL8oP9CCuQMBp2b1zk94lEJhGgSN6SLHiXxuTne7DRBeE49JV +xir9h17c16QbyAAflWaGotX7qN5S7azphlOLl44w1ofxjN4YFd+uPtKYblE5R0xZg7jAM0SyML5 U+mcIigheKjT46tStS4tXb2f8/YbOI6x5kx2H2bn064YE33QQIKG44p1h5XmU06bLGbnzKaQ38HO 7RuZ6IN/vOGjZ9Mff/anKTPX0NiJiylFSudrI4rPmDqWa8GDKq5L4NV3gCUtYqRI6ppYaqMFiMwB 6Ss35vdx6+Y1U98hT/pobEf2bRFwd63DfNtfu9D8bfXrX7R87SEaMnw6a/vOmLeBokWLwZp+e3a9 XyOMrZuZc3evZ5gPZ8+RhzWi/1PX68JluwhECALRgMzXsnD+NCb6QDyNHDOXJs9YzWvezHmbCOvz 06ePacSwvjq7zdYeg1JfVXTvfqFqcxd3vNUwc48xOxe//dGH72d4mQIZOXYeH8+ct9Gq/csn7D6m ThrB6y9ehkxVWsFYV2Yv2MLrBcguaOxBg++bb79jjWXc5/oqjWLcT+o3tNxPV61YYFer5TAgawle mkB7HYJ79PwlO2iMIncXKY1hrOdaS9PTeTfTt7LlqzHBB2ITL8mMska9tIN8Xa4q53Hnfluuwrf8 su7unVvqfrvNWC1By9lYr81JOWAEhOyTC0EQEAQEATcQWLPlJEE7Cto/g7p8a31zVa1cTpo5vLHD msbP3MHpnX8pS0kSxrTmQZkokSOw9hI0qwIq0FJbq0ixpIksEcVg/lm6iEWL4fzlO9bqg6o/S9Ye YW0zaCGO7FPHxhy0a5vylFZp5sE33Jxl+619cbWjXwrCBNfoF7FQ7jQ2dTuqY/ikzZzcqnFxNtvV edKkiEfdlXktZIEyZ4VGXEAFZrPN6hVhjUqY7bZvVpqrvHD5rk3V7uBepYxFYwnafTduP+J6oM33 8LFFWwkJy5WZtxa9X6FkFtZk1On2W2hOgpi0J4+hbQq55HPPvggfmx3jDGWmDmnZ8Eur5iUIyEXj m7GWJ58M5A+z14k7+AdyF0N9de069GITUmjP4f+77y2EIDSpjLJ44XQ+hJkPtA60lChZ3kKeqQdS mD1BKlauydvDh/ayRhYfqI+1qywPDcW+/NpGW0aft99C2+1fRfpo8x6YYOYrUJSzXbt6yZp9145N bLqKB+P6Dd9rXUB7o0QpC6kIbR0I0kAmQbZtsZB42N+96z3BD0ISzuchIAqPHLKMyyzZh34PGTHN au70zbf1uF3UBzIK5mDAGho8lb+pg2TlG+r9eGBSDX9S0DbqqIhYo9kYzHKh8QYtyXVrlnLZ3Ts3 s4YKxtamXTfrva1EqfLU22B2ypn9PtyZT2M5PAhrjc/YSsvD3m+e2Tkz1qn3tTYJtEuBuxYQIEYM dLpxe+G85WVK0S/LWJOLFCutXpqFZ62UG9evWtP1TkD6quvA1ux3yJM+GtuR/YAh4OjaBZkOgkWb iKOFuHETUM4v8nNj2kTWvmUzc+7u9ZwsuVo3FOGI9iFxlIa2JpmwJmiZO2si79aq28TaTyRAI+zH n9rzuY0bVvDLAj4wfDjCwHA6SHbNYIWGPZ0Ls52GqTak7vfN1MuDNNZi0AQG8Ye1Ai+rQEzCjNso 0GSHOLseArKW7N61mTXB4fKiecuO1mahPd3pr4H0bQ2Ldran826mbyAUsc5CVvuRcNjHi7X9SkMa Urb8t7x1536Le3e+AsW43ErDyz9otB/Yb7knl69Ync/Lx4cIONdT/TCvpAgCgoAg8MkjoH2/Ffgi NUVXWmNGyZUlmfHQun/m4i3eh6+0fUdsH35hrgqBmWtABdpu0KgySsqkcfgQpsFagqo/p89bxlk4 T9oP+oEfrGWKZaKRU25zUAjdF1db+OYDcXhKmYFmKt6d/dD9UKew1bTZWVkQimcv3ubTFUpm/SDb 10pTEAJNuYsKd5CkAZH8uVLbFE+p/BNCYIIKbTt9nbiDe47MSQlzh+sNRF7jWgUJRDOkVePiNPS/ jbRu2ymCX0KYPa/YcJzPffO1hSTkAxcf0FCFTz2Y2966+9hKKNqbzeoqzI5Rk4VfFbVgrMvDJB1+ I2FWHdhi9jpxB//A7mNory9LNos2qx5nIuVrDgJtEphJRVEmuRAES4DAn9HJ44d5X39YNCye07Vr ljUSWm0pU6Vl8yhoQoAgRLCM9Wst5FRZ9bbfjECbC9FXjQJCDwJtBS0w74VA42Cg8p1mlMuXzvOh kbwspgghjENr7MEROshAPFwVLlKKTadwDlqB0PiDySvMiLXfP2P9jvbRb2gGaQE+eOhBUAt7H2AJ EyXlbE8eP9TZlbmypc/Zc+b9YPxYj/MX+JLr8vG5yGWu+/kFzKoCV+j50pVlUCZ+jsSd+TSW/6Za PePhB/tm5+yDgioBZpQgOGFWV7NqUapZuzFrtoD08E9ixY7DJtF7FGmbPkNmzg4tFVx3IFYTJEz8 QRUB6auxMrPfIU/6aGxH9gOGgKtr9+KFM3RGmc1CO/n586esAYbWsA46EjNz7u71jDXT/vub64sC 3Dy0d6ExHE2th1hHIIWLluKt8aNAweJ8CC3n69d8bEx5ccIVBlwwCD7MYGVs1t25MJZ1to+XI1f9 1ss8eQo7y2ZNB94go7CG3L93hxAwBPLK96U1j3EnIGuJXouzKbLN6JrCWD/67+m8m+0b7suHlFYf 7tPtOvRQ62ZYWq/cSeBawpqq3Si4e7+tUKkm7dy+kTasX65eXvXjF1/rlQkvxoQXePBLKeIYASH7 HOMiqYKAICAIOETgqvJvBokX2/Lw6jCTIfH+w2fWCLLap5rhtHXXqPFnTQyEHe2nD76CIEHZH02E wg+fI4kZ3UJEog9mBGTXyikt6YcOU+nk2ZsceKTnkBXUsUUZ6v6rRdPGUT3QhAMJBkmo/OjZC3wD ajHbF53fzFZjjrwW1D3DvbIy5R02YSMtVz4GjWTfj3WL0GoV2ASYgLBLlyo+HT9znc3IQXz5J+Nm bKc23ecEKEqyozHCj6TGM16c9xj715+AnjdznQTldR/Q/ofG8vB9pAXBJCAwM3rmFxUVfn2cSfz4 iayn8AMfpmR4mw+yDyY895UfQWgvFFSkjqcS0c9Pn14XUQ+04CDQQoDvI0cSx09bBucKK398IIAQ wRKBIPAwB/9v0PAoXPQrK9nXsEkrRQhaTHrNavU5ahtpYcNaXg7Znw/nIF1rj2hfi/ZlokWzrNOY F8jtW9d5ax8MhRMdfHgynw6qMZ3kaM4cFQaRC82m3j3a0cULZ9m0DQFV6jdsadVYclQOacWVhin8 Lo4bPYiJafiOnD1jPD9QFipckrUonZU1ppvtq7GM/b6j7xDyBFYf7duTY88RgM+29spPJLSQAyKO 5jwg17PuS1S/7zqO4TsSLzR8fS0EpKP1weiX9dEjy29eXVdI2TrCCn0LrLlwNE4EF9LEbUz1YsCV LFownYN4AO+AiNm1RL+scbV+494WmPPuqG+lvqpE//u7C99H9+3dQXmV39R1ftqQMMfV4u799ssS ZfnlF8zUoaEKLck1KnAYpHwF0erTuDraCtnnCBVJEwQEAUHACQKasHrwyNwNHPmheQXyaePsNpQv Z6oPaobpJzSfgkOCsj+aANWEj/14tCluYhWExKwUzpOGjq/rQiuVbydEkIU2W49/lrPfvYY1LG+r 7esCmQfNFTzIoy/GaK7Ie0eZYWtBgJXgEE9wh98+kH1rFLF378FT2nngAqG/CN5RvkRWJvug9ac1 E0sVyehvhOJte8/Tj79PZ2wQfbdWpdwcFOay0iAsXvOfAEERSQVA0de6nmtPK8T8QV6+tJC2/tXj 33XiCf6u2nS3f67q+lTO4YEzfPgI/LAxcty8D7TTgEOYz8JYAyDguJz6EQ8/RNDSQDRZ7Z8H/vws moDIFTiiowPCH9/AIY7JPvRfC8xPoUVx6MBuNuXFQwgE5QsoE19EcT2inN/j4RPBISABJfu4EpMf Mf0iGD82aPsZi2oT17jxE3Cy1iJ0lt9YFvuezKd9HUF1DG1G+B7buX0DTZs8mgOswHF/kqTJlXl4 LafNnjxh0TaFvzJEJdbyRe6C1Lnb//ThR916Qx8/KkAfofEuKqgPiD5o1TVt3p41eKNEiaY0hDtZ o5gHpFueXs+6zScGc/bYceKqmNLqz+83EpP9SXVOy/bB/XvWBPim8yYJyrmIHj2mFbeHD+5TIj+N ant84K+ub8/f+HdWbeVuAfcrBLzCi6GffnhPeNmXC8hxjBiW37IPDdrq9vUhKFZQzzvaKFS4BF/3 IONSp0lP8LOLF2Nlyla1dsnd+y3cSyCSOXwOwo8vNNDh8gP32a/KVrHWKzsfIhDmwyRJEQQEAUFA EHCGQLLEsfgUzBG19pjOi0iz9gIiL3WKuJx89NQ19vUHf3/G/+Ai+tCJoOwP/OFBtu45x1Fq+cDv A6a1a7ee5CP74Br44Qkx+qPjBL8P/DgpVyIL+yOsUyUPpxoDVRjzYh94ak3JNVtO2J9mrTgkwl+i ns8PMgVygie4F8ufjs2hEUyk97BVHPiktCL0IOWVbz4ItP6Wrz/K+9/4+fnjAycfK1VQD5CgKP9P t+pUMHdqJkO1n0cnxUwlY56SJrL84Nyy+6xNGUTChTm2WYkTKwpn9blx36bIYb/gLjaJfgeurhNP 8HfUhk7zpH+6rDdtgSnkyZPHAe42fuyDbIGcP3uKzXDwA974ryOd6sZgNqmjyy5dPJNNeHCuXIVq OkugbeHDDgKfaNCgM/ZL72MMRvnSL9jGtq1rlanuZj4F30LR1YNXNvUwAtOlSf/9y1oOGIur6MHG egNjX5sL40ELmjxGgemT9i+YIkVaPqVNVI8dOaDWGl9jdjVflrXbmOjJfBrLB/U+rt2CShvv39Gz 1EPmN9zcvj3bnTYL8hORbkFurFCBFgb+M5Ed68PBPsjpkEB6eEMfnQIcwk94utbhu6Wvq269hrHP uNRpMhCijtqb0wYEArPXM4L36Aiquj29NsGUHSaeWGe1z9RdfuuWzovtLr9AQ/AHqtcF43ln+55g 6EkZZ+17Mhfv27e8rHFWN9JxH9DuAA4d3O006w71kgG/swopdw5tVSAl3AsQ9CRBgsROywT0RJIk KbiKYyoCtP36resOqnnX9eutdrEBk1u44MD9Jrcye9Z+c5HPk/ttBb8XNdu3baD5cyYzxni5pv1T 6vZla4uA7a8W23NyJAgIAoKAIGCHACLDInosCJh+w987O16//RTV/WWCXW7LYaXS2Xjn75FrrL7k dEaYPmpfbDotqLdB1Z+yxTOzKSm06dr3WsA3Yj2W7kobD370QLDVr5ZfJ/NWm9VuV1pnRlmw8hBH MTamwYcfBFFlXUnVsjn49KCx6wkkq5Zzl+5Q1/8t5UNEpdU/9PT5oNy6izv8OYLkhAwaawkCUFpF aIYg4i58AYJAg3k4yKxKX1muM87g5AOkG0T7NMQ+/Pf91nsBdgMsFUpZfHsNm7CJI0yjQlzj9VpN oO37bOfXVWOIiAsZMXkz+1bEPrQ7a7UYj10bMXuduIu/TSN2B+70z66oVx3iLT3klNJ4gk+6gEqR YmW4iskT/7X6DtJ1wgRWP5TqNGxhyguZPeM/NgWGA3r48wtsyZ2nEPt6Q2CNsaP+Z7N+oS2QgNov km67qAoSAjm4fxchSi4e6DTJBr99kGmTR/IWAUWCUwoWKsFRdKG5M2RQD5vxwEzV58oFNkvVjs0R cATaktBqmzxhmLWriDbc5Y+frcfGHU/m01g+KPY3rl/BEZ+NdcOHH8QYQMF4Hvvwy4f7AZy+/69/ FzYBvnf3DkGTbv/e7Wz+aF8muI+9oY/BjUlgtefpWgci4+07y33VuD7Av9hmQ0AMT/vp7vV8/twp +vWX+tbgNNAmmzZ5FDePqLlaEGEdMn3qaHZDoNN9lE+6MSMH8iECcbjzG8kTDD0po/tqv/VkLnT7 Zk2wsa5CEJX3qiEgEgi+Gt8UYZ+Ib15bLBKwxmoBATt0cA99GOjbvCroFAIdIWIttJi14AVBnx7t afjQ3pwUFPOu29JbBDhClGf4hxyq7j2QsuXfa/Xh2JP7LYJ/IFDI69e+6iWa5R4F7X8R1wgEj92Y 6z7IWUFAEBAEvAaBRMoHXP1q+ei/WTuo66BlNHvpfta+2r7vAsWM/t5PlXFAiMI7Zd4ujlSbs2wf KpY/PWtAXb3xkLXgEMThycnB/hJYxjoDsh9U/YGWXLsfSykttJU0fNImWqqi82bLlIROX7hFOnhH t7YVrFp3egyIDLt4zWFq3W0uzVqyj86rKLYnNnShcTO3cXCKInnTcmRXRBSGrzr8+KxeIZcu7nDb pVU5mr5wL92685jyVuzP0WdB0u5SprBPn72iFMof4J8qT3CKJ7jDlHfGovd+gHR0ZZjLQssPRBck f65U/gYuQT6Q1f1GrOb5yPZVb8r+eVK+BmHGGxjSssGX/N2Ab8vPS/SgPGpuj5++zgFAQE7iWjcj TWoXYnIQZsqZS/Vk82CQtiCGQU4axex14gn+xnaM++70z1jO2/a1JhoIsG8q5GdtEGja/dLmT4+G Ar97K5bNZf9439UqTXAcj7f9t2/doINKUwLBPDZuP2tDyuDhBA8OIKEgQaHVh3qhsdFQ9W/E0D40 cfxQDr6RKXN2nGLyCA/R9b7/iVq17cJp+EA0xlSp0zExhGMdMRD78N0Hf4NagtOEF21CIwcRQieM G0JzZ00g+ElEgBA4RtfBO5o2b2fV8IF2RLmK39KShTP5YR9RJxHYBA/B2r+fHoveejKfumxQbeEr C4FRcuTKR2nTZqKrVy8RIj/ivlGydAWnzeKh/9uaDWjOzAm0dvVi/jdmRuCVLt0GB6sptrF97HtD H+377C3Hnq510H7LmTMfRxuF6ea6NUtYs26PIsmh2RtQ8eR63qfI6fJf5aBMmbJxwBD4jcMa+p1a v7Q0adqWta7ga7Thd+U4cizI/mPK9QDyw0S1cdM2OruprScYelLGWWc8mYvMWXIwKTtIEfxrVQTZ qz6XadaCTTbBkYztAZPVqxbyPaxezVKsrY1AT7g/aMGLk0kT/uV1tm6Nkrzuwt0DiNegkmTJUlGl b2rTwnlTec1HgIx4yv8tAmHh3lmrThNuOijm3X5M0B7FWrtk0Uw+BY3IEnZrryf3W1SGl39w7QHB yxv48hNxjYBo9rnGR84KAoKAIPABAqP71qVm9YowOXdMERk7D1wkEFK7l3Rgs9CwYcOoB4v3xRAh 9+CqTlS9fC71Ruqtipx6jBAkAdsoyqS37Q8lbYg+HaEX5JS9WM/5RfHFeUdpupyuQ2+R7m5/dF3G rbM2e/1Wicb+XY8JPQTsgNbZmQu3Caa7C8b+SL81L22shvf7/VGF/c7B7AE+5Z6/eEVwON9URd6F BhXMgkdN3cJEH8xNJw3+nkoWyvhBPcaEBCpIyCGFOcxVUS/MStcrf39hlRlevap56eDKP5g4Mpax jskB7sZ8et+a3zAXOBdWadlB0w7/aE+LJ7hDs09rM+bKktyGKDVG3q1R4QvdjMttiUIZaEj3GhRD EW8gz6Yv3KNM/F4zpgh0ES7c+/6iInfHmDFtQlo3oxXPN7RfgTnw792hMg3q8i33LZz6fvgnjWoW UGRsWdYUBVGMACT4ju1Z2pHnzfgdM3uduIu/dewOrgd3+oexWuuyu1b8w+Fjn0eUuwaNf1HXchjW eIKWk5H4CRfO8s7Y3n8ernuUsfy/X8dAHk2dtUY9CFTk6LTwZccPs2qLB7U63/1oQ/Rh/Ej/6uvK Vii0iZA1wcmO7pPuozFbWPVQC7E/16BRS+rRZzg/6EKTb8XSufx/8eJZJo9K2T2woI5SpSthw1JE EXxajJF34TQ9d95C+pTLrat+OzsXzs+XoD6vG2j+c0fq9NdAih8/ISFgBwg/aB+BpOw/6D/6rkEL nZW3f/zZn6pWr89zgIdX+BwEaTZh6gomD+Efyajp4+58arzt+6k7odN1Pp2OrbM5M+bBPiKFJk6S nH0pwu8eiD4Qyl17DrGahCOfbkO3iQf2DWuX4xRf8zDj7f33KPq5VWeO9ggtlb86/cxaJcijy+l6 kKbFUV+d5dfl9XlrHdbvD75Hlu+Qu33UdcnWfwQ8XetQM64t+HUESYYI3QgkhIAuuHYgeo75wHBs Zs7NXs+6bhBNdes3U0TjWybqoVGWUUXTHj95Ceko5MgLn2nTZq1jU1N1k2btZGjx4lorW76aWqfX Mrms68VWj8O+3zqPfxjqfMatf2WctensHuPuXPzcujNri+F3CqLIvnz5nDXkjH007kNze8KU5Ywp sN2/bwcTfdA469VvJEdjz523MP3aoScTrAjeBFNWX6WNhr5hDsIpDTyjaDz1WI3nHK0lxvPG/Y6d +nIgKx2NfN+ebcqk9yXPJ17MQNydd0/7VqFyTb7/o00QfyCb7cWT+235ijXYTx/qwotAV9ra9u19 qsefqYtbBwu0weD5i9d05ORtmzQ5EAQEAUEgNCGQL7vyv+erNJpuLfJoWCDuzl66TUkTxmSTSlTy 4qWvMgd6x+aqjirFuQtX7jKhFSdWVBvyxpgf/uuiRo6oflzZEiOoH+1qAkiXcZYf7T1++oKiR42k brwGBtKvoNn+6HaMW2dt6jx3VSAMRMYFiWTfX51Hb3ErAjkIrbu0KeMxyaPPQesMAR80Xo7GofM6 2gKviz531Q+4MIo8jGPzsGqf378xGfM7mwvk0dpnMFt2JO7gDt+Qz577qjmMyGMw1ge8YLoCrTl3 BHVevHJP+aAJx/ODshgPfhHAn6SWgIwRWpVPnr0k7csRdQJfZ9eibtO4xdydU9+x+HGj8fzjHMyC IcZ+4tid68Qs/v5dD2b75wpH9D3IJXkLFeTlhTLftvWBaLbd5yqK7rWrl9WDTGwbvzvwkQSTpch+ ZpLG+rTfKJB1jgTX7bVrl+nlixf8UKl9SDnKO3RwTzaHhe+jcZOWOMriMA1BM/AwAPMmo6DtZ8+e KLPdaNYHEuN57KPszetXCURaosRJ2V+TfR59DM0JPCTbP3i8eaO+u8+eqfTIVnJIl3G1ddZv+GLy VZg78gUGrcjw8McV/v3319gGAoXAxCuxeth0NF/GvOj3lSsXKYHSDNFtYa6BW0Dm09X1ott3NnYz c6brwBZaNAhMECNGLNZeBPFsFPu+zJw2lgYP7EogS4aOmGHMypqnFb+2vFCZvWALB2JABnf76ii/ fT+MDdt/hzzpo7G+0L4fXv1eypU1Id2885Qu+fjvg80RHp6sdboeRAqHphzM+fE9we8arA0gOowk uTtzruv273qeO3siDejbiTWKBw2dzC4Pbt28RgmUhh5IeVeC7/v1az68FoIoN/bVWM5Vv435nGFo zGO/76yMqzbtvx/GOs3OBcpgnvAyBGQtfMlBM82MYG5vKNyiKnwdBevAeg0fihGUj0RNtGI8aA/a bkZxtDbgvLvrHsqgftyv0Rbm09mabXbePe0bXHMg+q/99Y8+2gvaMHO/xX2sYplcHBUZ6zTW609R okQKR1kzxTc1dNtfP6aKSCZBQBAQBAQBIAAiLpPSZDJKpIiOH7R0HhBVILP8E0QPdSRcv4PfIc7y oz1n51C/2f446ourepEfJpfaH5+j8sY0/LjUftCM6diHyW0Ku2hx9nlcHWOe0qUyd1P0b0zGdpzN BfI4I/l0eXdwh8ku/h2Jf74LHZVBGuqzD5Ti6NoNyBihXZmAbN/muoMv+om5g7agUexJPn3OnevE LP7+9dds/1zhqPsfkrcgh9IqE1B74YciJw9Gzh4wdB0gX2B65J/ggWn5ktmcrVxF9/zz6Aiz9m2g bWfndF6cj5be9UOyzutIawHnQDL696Ct6zBunfUNRJ4zMk+TcsZ6jPswAdX+qYzpjvbR71Sp0tmc 8u8B2Mx8urpedGPOxm5mznQd2PLDt5NomThv3xc8uEMuXTzH5uRGPKEhA8FDO4gcLe721VF++37o urG1/w550kdjfbLvPwKerHW6VkToxr8W/K4J6Jzruvy7nnU+vUWQIPybEXzfdcAEV/ldXavGcs4w NOax33dWxlWb9t8PY51m5wJlME8gxdwVrPuO7ou6HqzV0KI2Co/HmOC37+g6wSl31z2UwXi071gc OxOz8+5p30Bo2pOazvqCNszcb5cvmcNEHwIm5c1fxFl1km5AwPHTgyGD7AoCgoAgIAgIAoKAICAI CAIfA4FNG1YQtDTCKw27r8pU+RhdkDY/AQQQOfO/sUNYwwf+KdNnzKIi8CZgv1vHVYRLSLMWHZyS rcEBkTf0MThwkDYEAUHg00Rg4fxpPPCvy1VlbfpPEwX3Ri1kn3t4SW5BQBAQBAQBQUAQEAQEgWBC YItfREs44kaQBBFBICgQQKCAIcOn0eSJw+mA8sMF/2UQaO8gCmSN2o2pTNlvgqJp03V6Qx9ND0Yy BioC2g9cWOVXU0QQCI0I+Fy5qIJhnWGN+QqVaoTGIQbJmMRnX5DAKpUKAoKANyAQUJ993jBG6aMg IAgIAhRAn30fE0HfV684uqVZk7SP2VdpO3QgAD9Zjx498NgMOzhQ8IY+BgcOxjYCw2efsT5v2oef NvgzAzntzNTfm8YjfRUEHCGAQEnwjRteuVT4lEV89n3Ksy9jFwQEAUFAEBAEBAFBIJQggB/1n/oP +1AylV4zDPjJQgTlkCze0MeQjF9o6xv8tIX0aza0YS7jCX4ERLvffcxtQ1O5X15KCAKCgCAgCAgC goAgIAgIAoKAICAICAKCgCAgCAgCgkAIQUDIvhAyEdINQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUEgoAgI2RdQBKW8ICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAQQhAQsi+ETIR0QxAQ BAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCCgCQvYFFEEpLwgIAoKAICAICAKCgCAgCAgCgoAg IAgIAoKAICAIhBAEhOwLIRMh3RAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAKKgJB9AUVQ ygsCgoAg4ASBAlUGULJ8nen0+VtOcviffP7yHXr05IX/GSUHI3Ds9HUqVWcoxc7anmJkbkeN208V ZLwAgTv3nlCWUr0oV7m+9O7dOy/o8afTxfPnTtHPzWpS6WKZqESRDNSr26+fzuBlpIKAICAICAL+ IvDf2H/o28qFafHCGf7mlQyCgCAQfAiEC76mpCVBQBAQBD4tBEDU3b77xGOyrsvAJdRr6ErKmyMl 7V7SwSvAGzdjO42ausXa1zBhPqNYMSLzGJrULkRpUsSzngvsHd/Xb6hCgxF06eo9ihY1IsWIFom2 7D4b2M34W9/arSdp5uJ9tO/IZSZ6Y8eMQvlypqRGNQtSpdLZuHyRav+jm3ce0z/dqlOFklk/qHPE 5M00eNx6SpUsLq2Z/ssH55FQo/k4OnDMh4Z0r06+vm/4WnGY0S6xatkc1PmXsnapH/fw2fNXdPzM de4EuL7PPvO/Pz3+WU6T5+2mlg2/pDZNSnABwdV/3NzJ8fq1L7X9pT7duO5DUaJEpahRo9GB/bvc qULyCgKCgCDgNQg8e/qEZkwbQ0cP76eTJ4/Qq5cvKWmyFFSoSCmqWbsxxYkbn9auXkwj/+1HyZKn oiHDp38wtpcvX1DTRlXo6ZMn1PrXv6hY8a8/yLN/3w7q06M9JUmagoaOmEFtW35H9+7d+SCffUKY MGFo0NDJFDtO0P2Wsm/TzPG1q5fJ58oFunHNx0x2uq/G2vyHbwnjmTB1OUWKFFlwNYWcZBIE3ENA yD738JLcgoAgIAgEGwJPn73itl6+eh1sbQa0oUWrDzHJZV/Pmi0nmbyaPqwRffN1DvvTgXK8eddZ K9F3dkt3ShgvOt1ShFpwyevXb6nzgMU0YNRaG+00EFkLVj5Q/4foz1ZlqWf7Stylsxdv09xlBxyS fdMX7iGcx/+pczcpY9qENsO49+ApzV95kN6+fafI1Ci09/Alh7jbFPI7yJoxiaNkr0s7d+kOnbt0 my5csX1AElwDbypB7Gmib97i7fygi4e00CRdO7ek58+f0Z9dB1GMmLFC09BkLIKAIOAGAqdOHqXO HZvRlcsXbEohHf/z5kyi2fM3q3UitiK2LvI/1sdEiZPZ5D90cA+dOnGE01avXOiQ7Nu0YSW3k9iv 7JHDe+nx40c29Tg7ePHiubNTXpOONffihTPcX99Xr5jsE1y9Zvqko16EgJB9XjRZ0lVBQBD4tBDo 9msFKlPsc8qSIbHXDbzjT2Xo95/L0PMXr2jXgYv0a495ipS5S43aTaFi+dNRnFhRA31MV67d5zpz Z0vBRB8OEijCL7ik66Cl1H/kGm6uduXcStusJGXLlISu3XxIs5fu53PQxIOUK5GFtu09T9ACtBeQ vLsPXbImr9p84gOyb8P200z0QWuwQK5USnMyBVUvn8taBjswIYcsmfAT5cry/mEkZvTInB4aPwTX wJ3VmzeucoWZPs/ORB8OQppGSUBHvHb1EoIGY6u2fwnZF1Awpbwg4KUIPHhwj35SmmZPnz7mdaDd bz0pT74iFDFiJDp+7CBNmTiC9uzeQjfUmpgrV36KHDkKvyTYvWsLVf6mjs2o9+3ZZj3eo86/ffuW NdisiWoH6ZCChUvydq56mQLSS8u0KaNoxtQxlDtvYerea5hOps+UtUS8eLYv/6wnvXxHcPXyCZTu h0gExGdfiJwW6ZQgIAh4CwJPnr5kEssT7bsbtx+x1tbDx47f0sIMtWzxzJQ8SWyXcEBzDEQaNMuM gmOYEmsNQeM54z60w2D66nP9gY1GmjGPu/uRI4Vn893ECWKyJh8IJ8iDR89p9eYPCS6cQ3+hlQWt NUcC0szZOeTXvg2jKxNeV+JfPfZl4U8OWmRv3tjia8x39cYD1lxEGsxKZ/zbmPIrEi5K5AiULlV8 6tTyazq+vgt1aVWOi4GUggDzk0pzzyjb9p5js1ydtlqRffaybtspTgIZHDZsGIoQPhwlTRTL5v8z P1vYRPFj2KTDxNmM+Hd9Oqrjle9ruuhz19R1BDNmXA+BKd6Aa2CON6jreqpM2iBRlPmuK4FGCh6C zfpbfPPmNWvFPHr4wGm10F6BaRjyGgXHV30u8YO2Md3R/t27t+jSxXP05Ik5jRlHdSAND+vQ4Ll1 87rpMTqrS9IFAUEg5CHw35jBTPRFjx6DJkxZTmUrfEvx4iek6DFiUv6CX9K/o2fRP8OnUZq0GSl8 hAhMBGIUu3du+mAwRrIPJOIpZQ5slHt3b9O5s5bfQYWKluJTsWLFofgJEln/0Q8IzFuN6WaJPpgS +/hcpOvXrvD6xZX58+Hr68v5zazjeEGCus3k9adZ62lvwNXaWdkRBLwEAdHs85KJkm4KAoJAyEIA Jpm/91tIZy7c5h87kSKGp+oVctE/XatT3NjOtdZAHPUYsoJmL9nHPtv0qOCX79+eNZVvt1Q6iSbN 3cWacDUrfkEzhze2pqcq2IXLXtjeg5r/MYNWbjxOIBuh5dX39yrUrF4R5ctsF3Xss5BA2IAMgjYd TGhB/GgBSfh7v0U0bsY2pYHny8k4P1iNAZppgSnQTgQud+8/JRBjWvRYts7/lX3QgbQESQUfhXmy p+B+dey7UPnA28v+D1EO5Cd8tP3a1PIj+cTZG1Sg8gB6/tIyhmXrj3FwDuRdNK4ZlSiUwVQ9yA+Z OGcn496jXUUmF4dO2MhadPC3t/i/5pZMdp/wrwcMoyuCFuUcSZKEMQn/EGjawcwYhNcaReZlMpjp QmsPUiRvWtq65xxt3HGaQKKB0NOiyT5Nbun0gG7duT7Rlp6/Szt6Ussus2nZ+qOE6wpE9S+NijMW 8NtoFPh07PPvKoImJuY6d7bk1LVtBWMWj/dDKq4eD+gjFYR5VeP6FQkPjJBtW9ZycA7sDxw8gbVN 8GA4ZmR/Wr1yERNhOAe/fjmV1kuHTn0pcZLkSLJKlfL5lE+q2zR2wiL647cfmcjD/MNf0+eZc5A+ v3DZLurXqyPt3L6BXilNFzxs//xLJ6pavT4tXzqH/h3Sm+7euUVhwoalXF8UoJ59h1PcuAms7eDh evyYQcr/0xLCQ7WWzFlyUvvfe1OWrBYNWPRh546NrNWHPHVrlKSw4cJRWOVDasGy3YSHbRCOw4f2 pkXzp1uxiBsvAbVt352++rqKrlq2goAg4MUI4KXDvDmTeQTVazViX3yOhlOwUAlrcsHCJWjLptVK Q28r/wbUL9eeP3uqNAEPUYSIESlNmox08sRh2rVjE69xuvBeP80/rJGpUqXTyYGyhXkwtAKPHN5H b9+84TqhhVir7g/0Q7N2FD58eGs7es1dvHwPDejXmdd5rHlRo0anmnUa048//faBRuKdOzepx19t lO/WnezPEOvztzUa0Gu7lzLWRtzcCam4ujkMyS4IhBgERLMvxEyFdEQQEAS8BYGRU7ZQtR/HcPCF 1MnjMikTLlwYmjp/N/UfZTHjdDYWEH3DFHn0VBEiX3+ZmRAsASTYHmW2WbnxKKt2Gso/ffaSf0Q+ UVujPFOmsS8UsZWvUn9atPowJVQEXfy40ej+w2dM/iFwQ4O2k+m2Iha1fzYQSDV/Gm+shjooMhB9 iRolIiF4BsxA0dbc5Qds8gXGAbTitPajJrxQrx5L2frDWTtRm/eC3IKmHwIuoI/QPgTpWaFUViYL 2/WcTyABIdAiTJQgBkWPGomPI0YIx0QayDRosZmthwurD5BVEARH+Wf8BgqnSAWQeMDcmRw6bjF3 BIYgXf0TPBiULW7R7lu79ZRN9vV+ZN9fbcqzZiA0M7fvfe9DCCQZIjxb6shsUzagB+5cn2hLzx+u xTnL9jPJlzJpHL6Oew9bSSBKjTJo7Dr6qdNMJvqg9ZkscSzlb/AyVWo00pjN4/2QiqvHA/pIBWG6 FjdefKXRZ3lxAY2LOHHi839kRehBq6NZk6o0ecJwunXrOmXMlJWyZsvN6du3rad6NUt/4PfqpXqI hLP71i3qMtGn/eOBNITo842+K0+bN67itmLHjkuPHz2kfr07MkHYvUtrun//LqVNl4nLQIOmU4dm vK8/QPTNnvEfvVA+oQoUKk7FS5ajmMrHFkzx2rdpyNo7yBtHObjHmLTEjBWbj+PFT0ThFOkHGfZP L64LD8sw1StZuiLhYX7dmqW6mGwFAUHAyxHAyw2saZBvvv3O1GgK+Znf4uXC6VPHrGUOHtjF2sjZ suehL0uU5XSQfUbZvWszHxZWQT8CUx4+vE8d2zWhQwd2U+rU6Xm9wroM/3gTxw9ls2Bje3rNbajW 3HVrllDUaNHZ/yBMmSeMG6LWPtvfjEjH+ozxvFEB0dKl/1yth5a6Vyyda6za4/2QiKvHg5GCgkAI QOC9mkAI6Ix0QRAQBASBkI4ACLU/Byzhbrb7sRQN/LMa78O8FOQToqe6kkK50xDIkObfFVUkWwTO Cu27TMV7sJbXOkX8gAA0IzBHnfC/+tSgen56+PgF5a34N5vBgqwDybd8UgvWgpultAhr//wfR6Y9 c+EWpU9t0YKZ50fqLR7fnArmTs1N2mvememHmTzQfIPJM8gY+NSzF2iUQaMQGnuIYAzCbPS0LbT/ 6BUCobp1fjurVtyMRXup7i8TaIgi4lo3LsGYn9rYlYml1l3n0FdFM9lo4A2ftMlUPUYSEv0D4Zg5 fWJaPa0la0QCG2cCXCHpU78nD5zl1enlS2ZR2ps7WXMPhCQIY5giI4ovCMwvC6Sj4gXT03Klqbhq 03HeR1mt1fdF1uRW34S6zoBuPb0+r1y/T6P61qGmdQpzF2q1GM+kMeZQR8oFiQqNPsgPdQrRmH51 +XqYv+Ig1Ws10SWZyoVMfoREXE12PcRkg8bJnIVbaZZ62BvUvwvlL/AlDfxnorV/c2dPpGNH9rMG CCJD5vwiP5+DeW3L5rWYzBsxrC/1HTDGWkbv4OEYmnG16zVl4i6G0gwxyu3bN6lL98FUoVJNZX77 mBrWK6dMfi/Q+rVLmeQbPGwqJUyUhNasWkx//t6cDqogInConzyFZQ3LniMvP7BWq/49+9VC3TDn rflNMdb0gyYOCMDf/ujDzRbOm5If9EeOnfeBRs+Gdcs4z8Ahkyhbdou2Mx6ob9+6wenyIQgIAt6P wOXL53kQEdRLjYQJk5gaEGvlKUINROHunZv5hQcK7t2zncvnUb728LJh9Ij+dPjQXn5JgBclEKxB EGixBabgpQTISryYgCazln+H9GKfg6tWLKDvG/2sk63bWzev0e+d/6Yq1epxWueOzXm9XTBvCq/T OuP8OVPYlQG0nkf/t5DXY2hFdunUQmlib9TZArQNibgGaEBSWBD4yAiIZt9HngBpXhAQBLwLAQRU ALEXL0406vWbJaoqRgCNtLF/16Of6hd1OSCYx4Ik1EQfMsN0tmi+tFwOvvPMytDuNahhjQJMmMSK EZn3URak1boZray+/qARpwNVwPecFhBvkIPHfXQSaxlm/zyp9djTHZB0MIdFZNoqTUbTb70XcFU/ NyhGGdK8N7nT9f9Yt4iVFIKWIoiv8TN38OnOv5S1En1IqFYuJ2u8QVNw5/73Gm+6Lvutp/VgjhaN b8b+7mAKrTG0r99XveEG2QVJlti1f0VjWZCSqBcE366DF/nUlt1n2Tdg4Txp2WwX2p8Qo98+TfaB 1Aps8fT6xLUI83GY7OK/fbPS3LULl+9au4iIzCBMQWQO6vItX7c4ifk0mqlbC3i4ExJx9XAoIbbY 3FkTuW+16jaxEn1ISJospTL9as/nNm5YYdWW4QS/DzyMguiDQHMvbFjb987tOvSkipVr8fWBh8qK lWty3vjKf9bw0bOZ6ENC6TKVrMFCfHwuch58wLy2Xv3mVqIPaTDz1YQkfO+Zlc/IskaePnXUWgRa gtBoEREEBIHQgQBeUkDiJ0hsvS+ZGVmhIiU5m9Fvn/bXB7IPgY2wXkBrcO9eCwmItQprEIhFBAAJ TIkQISKTdkaiD/WXLlOZm3G29rXr0IvdJIRRLgzw/933zTk/fKYaZfVKy++4GrUbW7WroaE9cPBE ypLtC2PWAO2HNFwDNBgpLAh8ZARsf2F95M5I84KAICAIhHQE4KMPUvCL1AQ/fZ4K/MzB9PP6rYes 8XbRx0LyvXxlMSUxU6/Rvx/yQ2OQt8ni2BBTIPWSqeANt+wCInxbPif9O3ETteg8U2mPHVWBJYqr 6L+Z3Pqxyw06+Fi85jDhXwv8zbX5oQR1VxGGHUnTuhaNMOO5Mxct2nILVx1ibTfjufDhwvIhfPz5 J57WU7xgBg6u4V/94RRhh2sBmmsPlOanWdGRdDkqryLCCudJQ9pfX8nCGbiar1UADgii+ELjEUQo tD8h5fzMgPkgkD/cvT7z50pt04OU6hqEgJB9rMhMmEFrIruA+u7g2CjGaMHGdE/2QzKunownpJVB sAqfKxe5W4X9nMsb+1igYHE+hL+o69d8rBp3Os83ftoj+th+q33q6fTEiS2RpBOprTESMNa1BAkT 0/17d+iJChBiL9C4OXP6ON1RmoLPnz9lZ/LIAz+AZqVE6fI0Z+YE6t/nD9q+dT3VUP684Kxfvygx W4/kEwQEgZCLQJQo0bhzjx8/dKuTiKQ7fcpoOnhwt1pXXiq/ni85GAc07DJnzcnEWb4CxZQW8iJl +rqRihb7ivbs3MJt5MpdkINvuNWgyczwuwefeggohPURms2QV74vHdaQJZvFj6k+mSiJZc3FWvlM BWnSAZqu+70owZiMAjcPadJkYG1vY7qn+yEVV0/HI+UEgY+JgJB9HxN9aVsQEAS8DoFLfqQcNPs8 EWg2wTff9n0WsxFP6nBWJpwfAebovKNzAzpXZS2sUVO20tJ1R/k/pwocMW1oQzZfdVSP2TQExYCG FQI1pEuVgHJkTmoTHMS/emAuDbNfCPrmTOxNb+3zBVY99vUaj/HgnyZFPDp66pqV0DKed7WPABsg +9ZsOaGCVJSn9dtOc/YSimiEZFSBO0DigiiDVilwBEEMP4+I9hvYEljXp5EIf+fXSR2YJV5sz747 7ow1pOHqTt9Del4EvfD1tRBmRp93ut/wfafl0aP3wXh0mrtbBM1wJuHstAKRD2a27Vs3YNM5Z+XM prdq+xeF+SwMzZ87hbZuXsP/GTJmoR59hlNq9XArIggIAt6PQLLkKXkQMEmFT05tbuvfyHKpYEQg 9uAT76DykwcfeHgZkiNXPmWdYHkZDFNeC9m3iavbs3srbwPbX5/u66IF02nwgL9MRSvXZey3ESK8 fxn3jix3cARrgv9UCCIHB6WERFyDcrxStyAQlAiIGW9Qoit1CwKCQKhDQAdfcOW/zdWg4WsORB9I nBn/NqZj6/6kyzt7UeWvsrsqFiTnQMgM6VaDLu7owRp3GNtBpUFWqdEoDogRkEa/zJ+e/vj5a/q5 wZcqEMnnbhF9aDdm9MjW6LMbZ7ehZ6f/+eD/xdkhVKdKHpfdDKx6XDaiTqZLZfHVB2ISwUTMijbF hRkvCL1DJ3xY6y1PdsvDB+rRpryrNp2wavWVURp/9lFuzbbpKl9QXp+YC8iDR+a1H1311dW5kIar q7562zmYpWnNNv3wZxzDg/vvXRHEi5fQeCpY9rv80YKJvpSp0lKvfiNp5ryNtHjFXir2ZRm324dZ 3K/KrHjh8l1snozIk3DG306RiXioFxEEBAHvRyBZ8vea6ZtVhF2zAo22vH6muDDl1VF28+R9b56r NZ0vXzpPMBfWZr7QXgtsOXxwD/Xt+RsTfbVV9N1xk5bQgqU7aeS4eQFuCmth+PARuJ7HDjSpA9yA oYKQhquha7IrCHgdAkL2ed2USYcFAUHgYyKQOoUlAMduRc4ggIM7gmiuG3ZYNLem/NOA4B8NASCS J4mtCJ6I7lQVqHkRFRWRX7cvbM8P8ecv33FbQy1QO6QqA5GlsYbGHPy82f8j6q5/Elj1+NfOt8rv HOTUuZuEACKO5N27d4SgKkbJmTkZE6EI0NF98HImCuG/ET4LtYAshUD7T0fuLa80AgNbgvr6RORd yK4DH353jp667vZwdJRqbdJtrCAk4WrsV2jYx4NYPOU/D7JLOaa3l13qoRcSKVJkNrO1Px+UxzCl 2+fnIL9br2Hsvw8aeAjooU3R7NvXxOWTJx+aAuu8IC2b/PgrPzwjPx7anfm/0mVkKwgIAt6BQJq0 GQgvByCIWuvrxNQfkcB19HA9soLab9+uLVYiL3feQvo0r5Xax+fUSSMJAYqSJU9FKVKmseYJrJ0d 2zcQfmcUUlF+2/7Wg4MKJUmaghIoX4QBFax78RMk4moQFMkob968pksXzxqT/N2HBqUWHf1cH2Mb knA19kv2BQFvQ+D904S39Vz6KwgIAoLAR0CgdJFMTMQggm6Pf1ZYe/Dg0XNq2nEa/d53kTXNfgca X1rrS0dvRR5obC1ec8Q+e5AeQzNx1NQtNhFQo0WJqMg+S7NRI1ve4F70uctmx5UajXSb3AzoACqV zsZV/D1yDUcZNtb3/IWvIr9OGpOc7gdWPU4bUCfqfpOXYAINadR+Cg2bsJHQRy0wwc1feQB932aS TuItfkCXLW4JwjFhtiUgSclCGW3ylCqSkQN5gCiEH0QQmFrbzyZjAA+C+vqENmL48GE5IEm/4e+1 J9ZvP8XRlc10f+OOM/wdgi/AfYcvcxGQ1fYSknC171toOEY0W8j0qaPp3Nn330M4nx8zciCfQyAO zENwCrTt3r6zaNwhQq+Wnds3kjONHWgqQhAx0ygwB54/dzL74tLpUSJHtY4J5nuQ69euUPs2DVnb z54I0OVkKwgIAiEXAQQJavFLJ+7g+XOnqFmTqnTRQF6B5BszYgBVLpubjh89YDOQQn4aeqdOHGEf odGixVCBOSy/XXTG/H5+TLGeQAI7Cq9u581rywtoRC/XAv99Qwf30IcB2mofrbNnjmdfqKgM5r1/ dWr5wfrpqCHjS5JDh/ZwligqQrEjs+ngxlXWcUczJmmhAQH/1SJCwyhlDIKAICAIBBICaVPGo8Y1 C9GY6Vup97CVNHf5AY4UC+IBUVVbNS7utKUoikArkjctbdp5hn78fTrNWXaAgzoguuqbN8FrEgbt vZ86zaQuA5eymS36tkQRjiB8iuVPZw3wsWbzSVqy1kJEHj99w0poOR1kIJ5AFN4p83bRlWv3KWfZ Pqpf6VVk3Jh09cZD2rrnHAd+eHJysE1kY0fNB1Y9jurWaSDgxg/4jqo2HUOXlTluq65zqG2Peexv 7/a9J9xX5K1VKbcuYt3CvxwiF2uBv0OjwPy1gPLPB99+EJj4IlBHYEtQX5+IOl2/Wj76b9YO6jpo Gc1eup8QRXr7vgvKbPu9jyBn44IPxxK1/iGQe8AbPgBBJmmTXftyIQVX+36FhuMmTdvSqhUL2Pl7 w+/KEaI/wkfVsSP72YQsUaKk1Lhpm2AfKrQJc+bMR/v37WBztnVrlhAeduEnCwFDHEnmLDmYCBzU vwutVY70r/pcplkLNrH23t+9f6fRw/sT/G6h7i3Kbx8IxVxfFLAGC4F24xY/078L508TfPqJCAKC gHchgBcYNWo34oA8xxShV6tqMY6kC1L/1q3r/L0PEzYswZTfKAgclCp1ekJAIEiu3AXU/ckSQEzn w/oxbfJIfUhB5a8PwYMmTfiXYDJct0ZJjhp+SPkSvHHjqrXtgOzUqNWYliycSbdv3aCaCp/P1dqJ Ne/unVusOY1gHq5k3uxJNHP6ONaiRB8hmkC0LxfcuMo6bj8DchxaEBDNvtAykzIOQUAQCDYERvSu RSCQokWNyGabiKAKTaN6VfNS55Zlrf3Q5oV6ixOTBn9PXxZIT0+fvSJEmYVWUzml2dXvjypczphX 7+utrlgf6+37dMuSbp+O8xGURhUkvJ95aNaMSah6+Vz08PFzmrZgD42dvo1uqmi9SJs98gfOi48M aRIwoYLoqSmSWjRgrCcd7ETwM62NEMH2x66DrJyk+6q3xnwggg6u6sR9gpnrig3HaNyM7byNosx6 2/5Q0obo03VAe8woHtfjIuCJsX69/0XW5HRI9bdJ7UIKqzhM4IJURTRa4Ig5njiovs5u3ULjDdcS BEQWTFDt5Zuvc1iTtMmwNcHJjp5zvXWSzSbZnesTBa2Y22EVVpFxIOTwHzbM+58ao/vWpWb1ivC8 HTt9nXYqk14Q4LuXdCCY+YZVkY2dKYPBjBtm7whQAqIPZtxDulWnz9MlshmDPghJuOo+edtWm1fp re4/ouJOm7WOzcWU3RjBrGuvItTwkFu2fDWaOmstPyjr/NjqOrTjeuM5V+ddlQsX3uIEX+dBPV17 DqEvVKRLOM3ftGGl6tc2gpbIz606c5PGvEj4uXVnjhgM87dDyufVy5fP1XUYjtKmy0QlS1ekJ08e 08rl82nh/GmE4CRI69N/NNeFD5jjgXSGmTBIThFBQBDwTgTad+xNA4dMIkQEjxgxEgf7AVEGX3Ug A/+bvJTSpLXVvMdIS5auYB1wIT+zXmuC2kHACa1BHCNmLPoiz3szX2M+4344P/944f3WOOM5Z/u5 8xZmH6NRo0ZnjWu8kPF97ctrIsgz+4BGei20X5Nxzw5j/X//ewqmzsPHzOY17+nTx7zmY938qeXv 1KZdN+5WWLvfAsa+ps+YmddKaE++Vv3Kku0LatW2qzGLzX5w4irruA30chCKEPi4qeavAABAAElE QVRMfUnfORrP8xev6cjJ245OSZogIAgIAqECgXzZlQ8xX+VM/pZz01tXA8XyeeHKXTaFTZUsLkEz yijwgQaSShM5xnO37z6hW3cfU+rklnKoC5qBiF5rNH0DGRc1ckQbH26u6kV+9EOTMLpN39dv2KwU 9Rvl2fNXBEIK0XqTJ45tQ57pfIhoizHY16nPG7fQUIQvNftxGPMY912NxZgPGofA+vmLVxQnVlTW pjSe1/uO8NLnsA2seox1OtsHbiBQE8aLTjqwi7O8mB8QwDClNvrrM+bX0YkdXU/GfHof2L55887h nOo8zrZmr09X84drC2L/vUAavhdnL92mpAljckASpKEuzI+j/DgPwffk3KU76gHmDaVXUZ6dYWXJ rb7eIQxX3a9g3yZvQfcevFDm8Pfdbhq+7KDdAgLMkcBf0/VrPvxwmDhJcpv1y5gf/vRgZubIZAv5 XJ1HH6BZZ/9QigdGmJHh4dZeYHp3/94dgs8qlMW1gwdU5DWusSiHc/DBB4IQ/rTgjF4LNANhfoao wAkTJmEs9Dm9RaCSyFGifNA/fV62goAgEPQI4GVmrqwJ1X33KV3yce6D00xPoMF77eplwguFePFw r7G8WHBWFlptWFecrW9YJ589e0ZR1DrhbC011q3XK5i52msKGvM52oc7AZilRlD+VUHyQbC+ok6Q mFpcrblY9yBYOx0J1tZnyu9e0mQpraexTkeJEo3vBdZEux3kwf0C/v/MRPUNTlxlHbebLDkMsQhE iRSOsmayBAb0r5NC9vmHkJwXBASBUItAQMm+UAuMDEwQEARCFwIBIPtCFxAyGkFAEAitCAQm2Rda MZJxCQKCgPcj4A7Z9962xvvHLSMQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQ+aQSE7Puk p18GLwgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBCaEBCyLzTNpoxFEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEBAFB4JNGQMi+T3r6ZfCCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCoQkBIftC 02zKWAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQ+aQSE7Pukp18GLwgIAoKAICAICAKCgCAg CAgCgoAgIAgIAoKAIBCaEBCyLzTNpoxFEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFB4JNGQMi+ T3r6ZfCCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCoQkBIftC02zKWAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQEAQ+aQSE7Pukp18GLwgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBCaEBCy LzTNpoxFEBAEQi0Cj5+8oHOX7gRofAWqDKBk+TrT6fO3rPUERr3WygKwc/7yHXqkxijiGIGgxOfN m7fUa+hKSl+sG0VM25rSFP6Ldh+86Lgjn0DqsdPXqVSdoRQ7a3uKkbkdNW4/9RMYtQxREBAEBAFB QBAQBAQBQSA0ISBkX2iaTRmLICAIhEoEnjx9SQly/U7pinal5euPeTxGEEZXbzywkmqBVa/HHfIr 2GXgEkpbpCuVVgRLSBUQkV/VHUZ5KvzN24PHfPzt6oKVh6jgNwO5zG+9F/ib31mGoMZn/KzthDbO XrxNiRLEoGs3H9KZC7eddSdUp/u+fkMVGoyg9dtO0WtFgkaPGpG27D4bqscsgxMEBAFBQBAQBAQB QUAQCH0IhAt9Q5IRCQKCgCAQuhAA6fDK9zUP6uUryzYwRhhU9Trq23etJ9LTZ69o/IB6FCdWVJss SIcE5thsGgiEgzMXbtHarSetNbXtMZc2zGpjPbbfefHSl5r9MZ1u333Cp+4/fEYDOle1z2bqOKjx mTJvN/ejfbPS3Edoe4YLF9ZU30Jbps27ztKlq/comiL5zm7pTgnjRadbdx6HtmHKeAQBQUAQEAQE AUFAEBAEQjkCQvaF8gmW4QkCgoD3IxArRmTaOq8dk2FF8qYNtAEFVb2OOjh76X7y9X3DZJI92dft 1wpUptjnlCVDYkdFQ1zaZ599Rht3nKFT525SxrQJHfYP49VEn8MMbiQGNT5Xrt3n3lQomZW30aNF cqN3oSurxiJ3thRM9GF0CRThJyIICAKCgCAgCAgCgoAgIAh4EwJixutNsyV9FQQEgRCFADSgoPEF c1j/BKaR9x489S8bn3/9+i2bVBrzF8ydmooXTK80rhwv2zduP2Ly6eHj56ba0Jn8q1fnc7X1tG1d ZwxFLpUtnpmSJ4mtkz7Yvn37ji5cucvagR+cdJIAbciLPnfp3bt3TnK4nxwzemT6skA6Ljhm+jan FQyftJnP1a6c22kefcI//Mzgg7o8Ha/2lRg9WkTdpQ+27uIPzEGcBRbhiQ6hD9C687n+wKM5NTMG KxZKs09EEBAEBAFBQBAQBAQBQUAQ8FYERLPPW2dO+i0ICAIfDYEN209Tq65z6Oipa9yHMGE+o6+/ zExzRv5AUaNEsPbr+Qtf6th3Ic1cvNdKeoDQatOkBP3atJQ1H3ZSFexCN5W54Nb5v1KN5uOY2IIG 2e4lHShP9hQcNOGyIk8Orepk1YC7c+8J9RiygmYv2cdldYV5c6Skf3vWpHw5U+kkp1sEY7CvN0WB P+nBow9Jwzgxo9DFHT25LrNtYyyrNp9grT4UzF6mN5uIhlWYXdjek6BdOGnuLmrUbgrVrPgFzRze 2Kavew9fpjbd5tAB5SPv2fNXBExSJYtD7X4sRS2+L8bHuoDG8JLqY8sus2nZ+qNcBmTZL42KU492 FQlzFVBpUqsQa/ZNmruT+nSsTBEj2N5K0WcEuMDYalXKreZ/3wdNmsUPBZ3hE9DxNmg7mRasOkQg rSFFqg2i8OHDUoFcqWj1tF84zR38UeDu/afUpvtcWrT6sLXeDGkSUO8Olal6+VxcZ9zsHZTfyOd0 elM3Sp08Lqfh4/qth5RSfQ8iqD48PjHIOreY99/7LaJxM7YRvlOQRPFj0OCu1ckMmWpmDCfO3qAC lQfQc2V+DVmmfGMiOAdk0bhmVKJQBt6XD0FAEBAEBAFBQBAQBAQBQcAbEHCsIuINPZc+CgKCgCDw ERCAplilxiOZ6CtZOCP9WLcIZf88Ka3YcEwRdO+j5UI7r0i1/9GwCRtZIwlEVoVSWTlARrue85kE NHb/2YtXBD9vZesPZ6JPm7pqX31Pnr0kRE3VZAfKguhD/U8VGQKysWrZHBQ3dlTac+gSVW48yhqI w9iO/b6jekGkxFbEnv5Hv0AIgYzUYrZtmEDC75kW9A/HSRLGovB+fuGeqrFBEwx9Mcq85QeoUNWB tG3vefahBsIlWeJYjA/IvBadZxmzk8YwX6X+NGfZfgLJlzJpHMah97CVNFRhFRjyrSKtQOSB2EIf 7WX4pE2c1KB6AYoS+T35a8xnFj+UcYZPQMcbP240m7mJEysKHydU8w9xG391HSKAydT5u+m1CnRR KHcaNnNG9OdaLcZbtTIxHnw/7H00wswb//BRaFTG7NBnIV/nUaNEpCa1CzFpiGtlrgPsueOGD7Nj iBwpPAcniR7VYsIMAhfXKf7hv09EEBAEBAFBQBAQBAQBQUAQ8CYEbNURvKnn0ldBQBAQBD4CAqs2 nWAyAj7mVk1tae3B9n3nCRpMWkZP20L7j15hzaWt89spcismn5qxaC/V/WUCDRm/gVo3LmFN1+Wg 8QWNJWj/wQQShJszAZkCMqv5d0WtGoUwCc1UvAcTc+u2nmIC0Fl5Z+nQJtSC6KQgcA6fuMpEi043 2/bwXrW4SIS0rZjIQVCLdKni62qcbkEwtu0xj8tAe2vS4O+VxpflltVt8DLqPng5jZm+lbX7smVK YlPPlev3aVTfOtS0TmFOB9EEYghzAlwDKiCG6lXNRyD1YMpb95u81ipheq01+ZrXL0qXldmpIzGL n6Oy9mmejnfgn9UI/3Gy/UYIILJkwk/0RdbkXL0n+A8YtZbNphMniEkbZ7exfh+gYdln2CqKECGs fddNHWtCdfH45gSzcwiIVkSWdiXujuHUxq5MCLdWWrtfFc1Ei/9r7qp6OScICAKCgCAgCAgCgoAg IAiEWAREsy/ETo10TBAQBEIiAsqKlAW+w4ymriBvNBmFDONn7uB8nX8pa0PoVSuXk7W9oNW0c/8F zmP8gKagJqSgeeXMRx/KgASDOavRdBhaeUXzpeUq0ceASv+Ra5joS5ooFpus6vqCuu0la4+wzzdo VY3sU8cG265tylPalPFZYxIafPYytHsNalavCJvswmwXUWYhFy7ftc/q8XGT2gW57KadlkAduiLM O0gm+FfM5CR4B/IGJn5BMV5P8EdQEgiuSSPxjcAf2xa0s2pyciY3PmC6DTl43MdaChqi0Kh1JZ6M wVV9ck4QEAQEAUFAEBAEBAFBQBDwFgREs89bZkr6KQgIAiECAZjLgoBCJNZMxbuzL7gflAaZ0VQV HT1z8Rb3d6HyibbvyGWbvmvzVQScsJemdS3aaPbpro7hb+zQ8avs8wzBQi76WEi+l68s/sdclXV1 DmPsqUyFIdDQg1msvQRV2zD9hBTOk5ZNZo3tgvwpUywTjZxym85dem86rfPkz2XR/tLHKZWPPwgI VpgjB0a02VxZkrMWHLQ3od33vy7VmHwcNXULtwVtSzMSGPgFxXjdxR/BL85dus1DDmz/dt+Wz0n/ TtykzLZn0nKlJdiyYXGef00COsPZ3TE4q0fSBQFBQBAQBAQBQUAQEAQEAW9DQMg+b5sx6a8gIAh8 VARgNrtySkv6ocNUOnn2Jv05YAkTYh1blKHuv1bgvsEkUkfoXbruqNP+atNepxn8OQFTRvjmgwlx YAt86DXtOJ0JMgRWqFImu00TQdk2GtJaifYkqu4EouJCgLV/EilieGuWwIvLSwSSFwSUDtQBs+nz l+8Q/BTCf6IrCUr8AmO87uJ/884jqw++eErrLjBlQOeqrKU5aspWwvcJ/zmzJKNpQxtS5vSJnTbl 7hicViQnBAFBQBAQBAQBQUAQEAQEAS9DQMx4vWzCpLuCgCDw8REonCcNHV/XhZZPakGlVJAOaIz1 +Gc5TZyzkzsHIkqb9MJ32bPT/3zw/+LsEKpTJU+ABgPffyD6Mipz0Rn/NqZj6/6kyzt7UeWvbIk5 TxoZPW0rbdl9lrXqhqnIvvYSlG2jrXixo3GTzsg8bUKdOEEM+64F23Hdb/IQ/PeBuINfueGTN3Hb jWsWtM6/s84ENX7O2jWb7i7+sWJEsUbPvav8FroSrZH38uVrV9ms50BeDulWQ0WC7sGEOvxYHlTR mSs1GsXalNaMdjvujsGuuBwKAoKAICAICAKCgCAgCAgCXouAkH1eO3XScUFAEPiYCICwKFciC62d 0cpK2m3Yfpq7BD9xqVPE5f2jp64xIQRSyPiPaJ8BEfiF27DD0t6UfxqwDzhoOSVPEluZqQYseigC H3RUEVAhAzpXI/gBNIonbX9GFr9rDx8/N1bldD9Ninh8buuec+wDz5gRJqNrt57kJKNvOGOe4NgH qQutR0iXgUtp5cbjrIHW7LsiLpv3BD+XFQbBSXfxx7WttTC37j7nskeI+gvxuXHfJt/hk9dsju0P EPjjL+WvcfvC9kwsQotSa+/Z58Wxu2NwVIekCQKCgCAgCAgCgoAgIAgIAt6IgJB93jhr0mdBQBD4 aAgsWHmIo+waOwAffhBjoIxKpbNx2t8qwMXZixZfZpygPp6/8KU1WyxklU5zdwvCC/+QMxcs/u2w j2jBi9ccwa7H8vOfs+iR8m33ZYH0KgKvJRCFsTJP2kZABcj2veZMjssWz0zQ6IJmX/teCwhmxVq6 Ky1KYBolcgSqXy2/TnZ7e9HnLptBV2o0kl75mtMys28EprwQEE/ABT4dUyWzEL32efWxJ/jpssG1 9QR/lIEMGL2W8dB9BQmaUfm3RKRiiMZnxOTN9ObNW05DHkRNthdoTcIPIghSLdGiRFRkn+UoqroG nIknY3BWl6QLAoKAICAICAKCgCAgCAgC3oRAwFRLvGmk0ldBQBAQBAIBgXEzt6kgAceoSN60lDVj EiY1Vm8+wZpG1StYtLzQDKLwTpm3iyPK5izbh4rlT09JE8WkqzceErTVECjiycnBNgShO90D0YU+ IBrsj79PpznLDtCz569o3bZTVgLFnfp03uu3HtKi1Yf58JCKfpq9TB99irdThzSkHJmTut123hwp FQl5mFp3m0uzluxTuN2lExu6kPa9Z9OIOkiWOBZHde09bCUNn7SJlqrovNkyJaHTitjUgRe6ta1g E+nYvg7/jtdsPkmI2Ao5fvoG+4Hzr4z9+WL501H61AmshGtzf7T6UD6o5s6+bwE59gT/Lq3L0czF +/iaz16mN+XJnpLu3HtCx05ft+lKk9qF2Pwc36PMpXqyyTM0YEEI4xo2CkjUnzrNZM3Jr7/8nLFb oshsEKbAHv4RnYknY3BWl6QLAoKAICAICAKCgCAgCAgC3oSAaPZ502xJXwUBQeCjI9BUaXJBMwmE HTSOQPQlTRSLJg3+nkoWymjtX6wYkengqk5s5vn69VtaseEYjZuxnbdR/s/eVYBHcUThVwju7u7u 7u5SnOIUL1SQYsVpcStS3IsXdwju7u7u7tr532U2e5e75C4CSXgvX253Z0f/nZ3d+fe9N8rk8bdm xa2IPr1Cr94aGXns6HC9RTDKhPbdy1fvCKv+btp1lsop7aqBXatwKnNcBOhjvbUXBvNivcAD/OKB hDH/azLG1bJRJ5Bi0NDbqbT7Xr95R24hQ1rV01wvnOjfqRJNGlSPCT2Ya2JhhvOX7xNMd5dMakGd WpXk9PpHp9dbHR5SmVXDtBr/IUN4PvaQD8yxsTpv4gTRdHS7W51nqFCWOpsjtaxnMdtFv6hQPKP5 lOG7zzadK/gZZbtZl+0o3FF7rSpmOtB10/npU67iD7PZvcs7EVYqfvX6PRPRIPpw3eFTMnpUi3Zn k1p56Y+fy3I/A3F76vxtJo/3r+zMhF/IkCEMzT0Q6jCVhvn3v0v20yS18vHdB885bME/zXRVHW5d bYPGQGPiMGM5IQgIAoKAICAICAKCgCAgCARiBL5TEy9P2yhTRV+/+UDHz1ibnplOy64gIAgIAkEe gdyZoxK9f0R0b5nLbbmmyCeQYSAwsKouiCRHAi2ky9cfMsGl49vGhZkiSEFtEuzK+fsPX9C9h88p WaIYrPmEYR1muJEViaUXQ0B+9sqwF2ZbtnfHzpaNPFAvkHYgJ1MkiWmQijgHMidCuDDk5uZJxiFc C8w579x/RlgN2TcYaZISWnVmgZkw8tMkj/mc7T5WWAYJZM/fIvCG3zp7+UCLM6yDc87iZw8f766d o/batgnH3uWj4zuDv46LLfC4euOR0twEkRrdfMrYR3+/ePU+xYoR0SACYeIOAZZmQXug5eemCM9E 8aJZEeXmeN7tO9sGe1h7l2+QOJeojTKjfqPM3639JAaJukslBQFBQBBwAoFQ6v0hW8Y46oPQS/X8 eeZECokiCAgCgkDQQyB8WDfKmDaWUxUXss8pmCSSICAIBEcE/EL2BUc8pE2CgCAQTBEQsi+YXlhp liAgCGgEhOzTSMhWEBAEgjMCrpB99lUogjM60jZBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQB QSCYIiBkXzC9sNIsQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEgW8PASH7vr1rLi0WBAQBQUAQ EAQEAUFAEBAEBAFBQBAQBAQBQUAQCKYICNkXTC+sNEsQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQE AUHg20NAyL5v75pLiwUBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEASCKQJC9gXTCyvNEgQEAUFA EBAEBAFBQBAQBAQBQUAQEAQEAUFAEPj2EBCy79u75tJiQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEgWCKgJB9wfTCSrMEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEvj0EhOz79q65tFgQEAQE AUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgmCIgZF8wvbDSLEFAEBAEBAFBQBAQBAQBQUAQEAQEAUFA EBAEBIFvDwEh+769ay4tFgQEgW8UgQePXlCGEv0pW7kB9Pnz5wBD4eS521Si7t8ULWNHipy+AzXt ODvAypKMBQFBQBAQBAQBQUAQEAQEAUFAEBAErBFwsz6UI0FAEBAEBAGfEBg9bQvNWLTXYbTWDQrR j3Xy2z3fpMMs2r7vIkWJFJbW/9uOYkSLwPGWrjtK/f9eazeNbeD3ZbNQ93ZlbYN9PH71+h2dOn+b 44Hr++47H5O4HOH9h49UodE4unrzEUWMEIYiRwyr2nvB5XwkgSAgCAgCgoAgIAgIAoKAICAICAKC gO8QELLPd7hJKkFAEPiGEVi/7TQdPH7NIQIXrz6wew4EGEhCrVU3f8VBatOwMMfFOe/yNGeYMU18 82Gg2t+294JB9F3Y3ofixIxE9x485zqu3nSSxs3aRpVKZqKW9QoGqnpLZQQBQUAQEAQEAUFAEBAE BAFBQBAILggI2RdcrqS0QxAQBL44Ap1alaQubUp7KTeS0mazJ3OW7jeIPpyftXifQfZBG7BG+WxW yRLm7s7HK6a1pmwZEhrnokQKZ+wHtp3rtx5zlXJkSsxEHw5iK8IPcuTUDVrlfoKiRg4nZB8jIj+C gCAgCAgCgoAgIAgIAoKAICAI+D8CQvb5P6aSoyAgCHwjCEQIF4aiR7WY4TrT5NmL93O0vh0qUs9h K2nPoct04cp9Spk0FoUO5UYJ4ka1yuY7ZWcLLcC4sSJ7OWcV0ZuDu0qrLkxoNybYvIlmnPrw4RNd ufFQtSu8l7bduf+Mnj57TXFjR1ZmyPYJx2cv3nBekZQJr4ggIAgIAoKAICAICAKCgCAgCAgCgsCX R0DIvi+PuZQoCAgC3yACh05cZ3950aKEp85tStHcZQfo9IU7NHvJPur9WwV/R2T87O3015h1BE07 kIY5MiWiXg7KSZqvB4EU3LG4PdVsNZkuX3/Iafat+J2SJoxOfUetoQXK5BhxtOTKkoTG9KtFubMm 5SC0JW/lIfT67Xs+XqVMdrE4B2Ro9++p459L6PWbd3yMti/fcJz32zYqQn91rsz78iMICAKCgCAg CAgCgoAgIAgIAoKAIOB3BGQ1Xr9jKDkIAoKAIOAjArOVyS6kevmsrMVXt0pOPv53iUXbjw/86Wf4 JHdq3W0eE33xYkehhPGi0oFj16hSk3/slvBKkXBvFElXtsFYJvq0tuK79x+Y6MOCJC/V4h5liqQn LA6CRUX2H71KlZuOJ63JFy5sKNb4ixTBYsIMbUL468N/NKUlCO3EiOEt2n5hw4QyzukFSuxWTAIF AUFAEBAEBAFBQBAQBAQBQUAQEARcRkA0+1yGTBIIAoKAIGBBYNHqw3Tx6n0rOKDp1rZxEauwjx8/ sSYfAutUtpB8P1TNxaa8MOOFOW/e7Mms0vj2ACvuQqMP0qxufpo48AfW0lu85gjV+3k6k3qO8n7w 6AWN6FWDfv2xGN1/+IKghXjt5mNKkiA6tapfiCKED81JYc6btmhf1vRz33GWCcCkCWPQ2S296G9F DP7SayGVKpSWlk9tZRRVs0J2rlf3wcs5/uxRjY1zsiMICAKCgCAgCAgCgoAgIAgIAoKAIOB/CAjZ 539YSk6CgCDwjSFw4uwtwr9Zbt196oXs26gIMRBk0G4rli81R0+RJCabwO47coUX6vAvsm/D9jP0 8PFLgqbd8B7VmehDgdXKZaV5Y5tS1WYTzNW12m/xQ0Em+hAYK0ZEPlencg6rODhAOwrlTkEr1WIb WEVYRBAQBAQBQUAQEAQEAUFAEBAEBAFBIPAgIGRf4LkWUhNBQBAIYgg0/6EAYRVds8SKbll51hwG v3yQmhWzU4gQ3xmnYMoLsm/BykM0sncNCuUW0jjn2x1NvoE8tF0V2Lyir7380R5HAp98R0/dpNv3 ntKLl2/VIh4Wku/tO4uPPkfpJFwQEAQEAUFAEBAEBAFBQBAQBAQBQeDLIiBk35fFW0oTBASBYIRA gjhRKVuGRN626OWrd7Rk7RGOAz93TTrMMuLfvveM92E+u3bLKapUMpNxzrc7N+884aQxo1k083yb j04HLUH45tt18JIOkq0gIAgIAoKAICAICAKCgCAgCAgCgkAgRkDIvkB8caRqgoAgEPQRANEHwg8C 33z4tyez/tvnL2RflEjhOPsnz17ZK8blsB/aTWOiL02KOLxqcOZ08QmLcLTtsUCtqHvM5fwkgSAg CAgCgoAgIAgIAoKAICAICAKCQMAiIGRfwOIruQsCgsA3jsBsj9V2G1TLTR1blvSCxpK1R6n3iFW0 YuNxevr8NWmyzktEJwOw8i5k7+ErhNV0Q4fyHOZPnL3tZC6WaFihd/Puc3wwa2QjypUliZE+UkTL yrpGgBM733lYMD999tqJ2BJFEBAEBAFBQBAQBAQBQUAQEAQEAUHANwiE8E0iSSMICAKCgCDgMwJY lGPjjjMcsVndApQ5XQIv/20aFiY3txC8Su6iVYd9ztSHGKULp6NQoULSsxdvaODY9UbsTbvOErT0 XJFPnz4T/iHnL98zkq7belpp9R03jp3diREtAkc9dOI6vX33wUuy4ZPcqVD14TR/xUEv5yRAEBAE BAFBQBAQBAQBQUAQEAQEAUHAOQQ8VT6ciy+xBAFBQBAQBDwQADk1feEeL3g0qpmHTV7nLjtAHz9+ ovhxolDBXCm8xEMAVr0tVSgdrdl8krCQx4918tuN52wgVsqFFuHU+bup1/BVvPhH1MjhlCnuZaU1 GNbZbDhe+HChud5b95ynFl3m0EJFRr56/Y7cd57ldrmUmYqcM7NFMxArFifL35NxKV4gNQ3u9j1n NWyiO+EcSMHalbyuAuxqeRJfEBAEBAFBQBAQBAQBQUAQEAQEgW8RAdHs+xavurRZEBAE/IQA/NdB oD135cZDL/9Y1AKyZfd53v5QNZfVKrwcaPoBOQfZsf8iffjwyTgTWmnoQfTWOOHDzoQBP1DLegUp QvjQdPLcbdqjTHpBNu5b8TvBzDdkyBCkTWqRlV4FWG/N2c8Y0ZCK5E3FfgeXrjtK0BAsVzQ9Dexa haPZptHH0C60lewZE1HXn8owFljV9+Dxa1Zmy2lTxuUkGVLHs00qx4KAICAICAKCgCAgCAgCgoAg IAgIAk4i8N1nJfbivn7zgY6fuW/vlIQJAoKAIBAsEMidWfm3e/+I6N6yAGnP+w8fWRPOGT98zxVx GCJECCbodGXgM+/jx89WYfqcM1sQhxeu3qcESrMwUkSLVh/yhGkutPa0IAxxI0Zw7Ifv/sMXdO/h c0qWKAanxaMDZGdkle93ZuZQZQrfgxHChWHzZF2Gefvi5Vu6fP0hRY8anhLEtfgYxHnU4fnLNxQt SnhzdNkXBAQBvyKQqA09evKGLlx57NecJL0gIAgIAoESgVDKJUq2jHHo7oOXdPXGs0BZR6mUICAI CAJ+RSB8WDfKmDaWU9mIGa9TMEkkQUAQEARcRwBabs4QfchZk3HmUsKGCWU+dHkfvgDTemgh6sT2 8uQwxzwfJ4W5Mf61gOBz1DZH4TotSMVMaePrQ2OL+grRZ8AhO4KAICAICAKCgCAgCAgCgoAgIAj4 CgEx4/UVbJJIEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAIfAgI2Rf4ronUSBAQBAQBQUAQ EAQEAUFAEBAEBAFBQBAQBAQBQUAQ8BUCQvb5CjZJJAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKA ICAIBD4EhOwLfNdEaiQICAKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCPgKASH7fAWbJBIEBAFB QBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAIfAkL2Bb5rIjUSBAQBQUAQEAQEAUFAEBAEBAFBQBAQ BAQBQUAQEAR8hYCQfb6CTRIJAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAKBDwEh+wLfNZEa CQKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCvkJAyD5fwSaJBAFBQBAQBAQBQUAQEAQEAUFA EBAEBAFBQBAQBASBwIeAm6MqhQoVgpImjOLotIQLAoKAIBD0EfguFJFbVKJohYN+W6QFgoAgIAh4 g0CEcKHkvc4bfOSUICAIBG0EQniosESKGFrGuqB9KaX2goAg4A0Cbm7O6+t991mJN3nJKUFAEBAE BAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAIIgg41Oz78PETPXz0Oog0Q6opCAgCgoDrCMSKEZ4+ qrHu0ZM3rieWFIKAICAIBBEE4sSKQG/ffqAnz94GkRpLNQUBQUAQcA2BECG+I7zXvb90kN4e2+Ba YoktCAgCgkAQQSBE5FgUvviPTtXWIdlHSt/v0ydR+nMKRYkkCAgCQRYB6DbLWBdkL59UXBAQBJxE QMY6J4GSaIKAIBCkEfj88T19fvsySLdBKi8ICAKCgCMEPr+L6OiUl3DnDX69JJUAQUAQEAQEAUFA EBAEBAFBQBAQBAQBQUAQEAQEAUFAEAhMCAjZF5iuhtRFEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAE BAFBQBDwAwJC9vkBPEkqCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgEJgSE7AtMV0PqIggI AoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAI+AEBIfv8AJ4kFQQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEAhMCQvYFpqshdREEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBPyAgJB9fgBP kgoCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoEJASH7AtPVkLoIAoKAICAICAKCgCAgCAgC goAgIAgIAoKAICAICAJ+QEDIPj+AJ0kFAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBIHAhICQ fYHpagSRurx//56WL19Mf48aSgcP7AsUtV60cC4VKpidChbIRvPmzQ4UdQoOlbhw4Rz9M24U/z95 8jg4NOmbaMOKFUsoa+aU1KXzr1btrVi+GGXPloYuXbxgFW574Ci9bTz/Ona2Xv5V3sgRg6lAviw0 d85MX2f56NFDKlo4F5UqWYA+f/7s63yCWkL/6htXr16h58+fB7XmS32/MAIyNnxhwO0U51/3vJ2s JUgQEASCMQJL9pymVK1G0m9T1gTjVhINXryDsv46jmZuPhIg7QyI/K/ce0zPX78NkPpKpoELATf/ qk6DejXo/v17TmX354BhFCJECOrTuyu9ef3GSBMyZAiKGTMWZc2Wk6rXqEOJEycxzmFn0MC+tHnT Rg5zcwtJefMWpC7depGbm/1mgPSZO2cGvX1j6czJkqeg0WMmOYxvVZgcOERgyxZ3atWiEZ+PHDky nTh19atjev78Wbp44TzX6dzZ0w7rLidcQ6Btm2Z07NhhTgQ6o02bX1zLIJjG/vDhAxNF/86eTpcu nac3b95QkqTJqEyZCtS2XXuKGjXaV235w4cP6N69u3Tr5k2reoBgwbnnL55ZhdseOEpvG8+/jp2t l3+Vd03hcPnyJbpx45qvs3z9+hWdO3eG04Ps++6773ydV1BK6B99Y/CgfgTCNWvWHLR67Zag1Pxv rq59enejdWtX0i+/dabatet98fbL2PDFIfdSoH/c814ydRBQv151enD/voOznsGYQ8ycvZDnDHP+ nUEzZ0wxTuJc5ChR1PiSner+0IiSJElqnMOOjo94BQsVoW7d+1idtz3AWP/br23oinpmhArlRsNG jKPUqdPaRpPjII7A1I2HaPqmwxRGzS+71SxCxTIl89IixJm4bj+1KJOLmpbM7uW8BFgj8ODZS7r7 5AXdeOD9O6d1qqB3BOLs0p1HdP3+0wCpvH/n33/BFiYos6eIT1v+bBogdZZMAw8C9lkyX9Rv06b1 Tms3XLl8kU6fOkn79u62W9KGDWtZa2zw0FFUs+YPHOft2zc0+u9h9OnTJyPNoUMHKGmy5FS/QRMj TO/cvHmdOnVoSx8/ftRBTFp07tyD0xiBwWQHk9aundsTXkowgfqjZ78Aa9mL556D9htFpH7+7HlN AqzQr5jxuLEjFcm8gdxChaI//uhLGTJmNmrzJXHXhfpnmT7lZSaF0LdELAh0bN+WFiz4lw/Ch49A YcOGZbJ53IWRFDJkSOrarbdAJQgIAg4QePXKMpa8exe0vyq7u6+nGdMmUanS5ahBw+D5wnzp4nm6 cuWyn4hxB91AggUBLwgcOLCXnj11bsKs30lARuuPkuYMt23dRBMnjKVx/0ylsuUqGqfM8Y8cOUjF ipeifPkKGudtd0AkLl/2nxF87OhhIfsMNILPztpD5+nIpdvcoOZjltKRkT9RxHChrRp4URE6p67f J2xFBIGgisDLN++56u/efwiqTZB6u4BACBfiehs1S5bslCBBIuPfHBlaLuZz8RMkpE8mggjn8aA1 fykDudepQzu6fOkiZ/Xhw0crok/nP3/eLL1rtYVWn5no0yc/fvIk/3RYcNhCg8fdfR3t2rWd1q5b GaBNKlGiDNWp04AqVKxCAweNUF86rR+GAVr4V8h8q9Jk3LlzG2ELDUKzfEncdbn+WaZPeXXq1J3K lK1ATZq2pFq1LMS7rse3uj169JBB9A1Q/f/8xdt07sJtWrNuK98T0aPH+FahkXYLAk4h0KFjN/p3 7mLWzHEqQSCNdPLEMdq4cS3t3bsrkNZQqiUIBC0Edu0+SocOnzX+W7Rsyw0oUKCwEYbzh4+ep0SJ rK1/fmr7G505e4PPTZ02V1kHJVVa96/p119bkXduSGbNnOoQJGhtz5g+yeF5ORE8Ebj39CWNWC7j evC8utKqbjUL0+KudWlB5zoCxjeAgL9p9tma4mRIl4QeP7Z8+Rgx8h8mDMx4bljvab9fsGARmjjZ Qtpt3LiOGjesxcTeu3fvaMmShdS+QxdzUt4PFy48a7EdPLifVeuh4acFD+eF8+fwIbRs7JF+Oq4z W5gwnFWmoTDTypAhM8F01Z6AoDx/7iw9eHBfaQ+mUC8iiVnLxzYufD29V22LFTsOmzPjZeTw4YMU MWJESps2vUPyDNqKMD37qEwIkyVPaZg5v3//jl69emkU80lpM758aTkOHz481xtxHj54QBEiRqJI kSIR8jp9+hQlU7ilSJHKSIsvqmjrk6dPCGlBwMaKFds4jx2YR/TuM4BevnpBZmLDtgzEhUbAtauX KY1qV5w4cRFkV3CNLiuNz+vXr1LSJMnZJBImFo4EfevE8aMUN158SpkytaNo3oY701bgCJNNLa9f v2ZsYcqB/uAT7jodtk8VpqdOnSC3kG6UJk06xtF8Xu/jazVMku/cvUPRokVXfS6j0hwLx6edudaI iHsA/vZu37pJ75SPxfgKp1TqWoZS2olanMmrYqXvmYiHVmOMGDF1UqttQPd7q8ICwcGRI4e4FslT pKRGjZoZNcIHj0mTZxvHjnZwfe8rM6X48RNYmb+jn928eYPvN9x73glMdJ8rDdtYseI4HI+8S+8f 56BlfePGdTaj8qm+KA998vbtmxQmTFiHfcmVeqHf3blzhxImTGR3nDXnBT+jd+7cUnET+8ncFq4q woQO4/DeNZep9zHOQEM2fvyEfipb5+fs9u6d2zze47niG8HYh2df3LhxKbRqs7OC5xmuS0jllgMf +eyN43gGFStWyscs8ZyKqJ5ZUaJEtYqLifvLly84f6sTThyg3966dYP7TNy48b29JsAwjNLa/dpm +U40K1BFcXVs8G1fc9RoGRscIUOE5/4d1a/9Mhbi+uLejBI5qktjoeNaeZ4xv1MiNHLkKHwS7/x4 3/NOwoYLx/XBOyo0+ZIp1z3FiuRmTUF8rK1StYZVcnzIXLd2Fa1etYzwXm5bNiJv3ryB32NBHMaM GZNgUeSKuDLeIC6ekfbGPHtlutLP/fv5a68+wSUsfaJYrL03ZtUealpKKbJEtz/nc9TeN0pb6s7j 55QoZlQKGSLouvf4pN7ZYJYaK0oECh/Gc+7gqN0fPn6iayp+tIhh1b9lzuIorm/D3ynFH42tM55T bqvrEFbN15ypjyvX7b1q6+1Hz/gaO1MPtDeg87fF9MXrd3T36QuKGzUiRQgb2up0pHBhqGSWFFZh 9g5cwfvlm3f04NkrihstEoUJFdJedhzmCg4OM5ETLiHgmE1xKRv/i1yyZBlKlSqNkeGN69eMffMO HtJaFi2aq3d5u3v3Drp27QrvFy5SnCejVhGcPDhz5hSVK1OEMmVIRjWqlafq35dT+0mpxx+/W+Vw V5EyIChTJo9LpUsVpB/qfk/582am1CnjE0xAzWQjCKqM6ZNStqyplXnBGOrX9w9Kmzoh512mVCE+ ZyZCURD8hKDsXDnSU60aFalunaqUN3dG+r5qGa5HhfLFuUxdKRBsqVLE5X/9xbJ5swbsmD9XjrS8 gEW+PJmpYf0aqn2FORkIjJrVK1D6dImpSuVS1KhBTT7OliUVtWnd1Mqs4tTJ45Q2TULKkS0tlSpR QBdL5jKg8YAFM4BDndpVCPk0blSbXrx4YcTHDl5AJk0cS2lSJaDCBXNQvbrVqED+rJRO5Q+/KrYC h+4N69ckkMm1a1WmIoVy8svcWXWtnBVn27p+3WrGEP1JS4f2P3FYzuzpyBnckQ7XA5imS5OIryP2 gR9wwYudWbAYBrBCP8L1qVShuOoTyfiFFPF8KhN9Df6wsmRKwdigDORTskR+dS2y0Cr1UqvFp7wQ r0XzBtxXcQ+YzVhwLqD7PcoIjBLKzfLSA61I77QFdN1z58xAyZLEYh96TRrXUf0gMd+/mTImI31/ Llw4h3JmT0v58mRS90J8vvdA6JkFk5E/unfia4vFNwoVyK7GjgRUvmxR/lhgjhuQ+9BsRB9OlSIe twNjTd7cmWj6tIl8P9uWDWK+Xdvm3C7cN+hLWEhn5cqltlGtjpctXUQpksWhhPGjEMYcLdCiKlO6 EJcPvFCP2jUrEXx72Qr6KMZLjMV5cmXk8W3ggD704aMngW+bxt4xzLhQd9xX6dIm4ufCKeWKwpFg Qv1n/56Ea497HWM36gB/VPigoWXE8EEUP24k+rGptdYsxkWkTRAvMtk+D/AxJkmi6JQ+bWKdDc2f /y/nAz94uE+x+AieMehLGEu0b0EjgTc7a1av4OuTOqXl+qZJlZCvn/545yjp2jUrqWqV0nw9MO4D b7QZeAMPsyxYMIfb1qplYyPY3AYsuIT2AzeMm3jugWjFPdG0SV0e/3EOzwF9DxkZOdgByY77B89p 5I3nF8Za9DOzgKxEPPRTYAicce0njB9tRDt+/IhqWzwaOuRPDluqPkriGP8D/uptxPvWdlwdG3zb 12RscH5sQF/H8wcfoVs2b6ieGYn43sSzA36wQTC5IrCayaEWecL9jbGweNE8tGfPTiML3BsYszH2 4JllK3/92Yvv/a5dfrM95e/H+KiKD6aQ27dveckfFkX44A3FggVqDLUn06datPrgLug7bz5A26Z1 ZrwBlhj/8Q48b+4sypkjHY95GHOw+BMsSuyJK89A3z5/7ZX7rYQ1LZmD4kePRK/ffaD+87c63exd Z65Roa6TKX7jwZT557FqO4gq9/+X4G9Ny6DF2ylynf5Ub9hCHcRb9cinDG1HU5S6f9Kag+etzp2+ cZ9i1PuLkjQbZhVuPvDPfA8rU+bSvWZwOzL9PIbiqfZgO3H9AfWOZy7VUufYDQay+XO238apRSrG UtLmwwl5OBKQQmV7z2Qc6g+3fv7apgEmyP++8v3XaOR/lPjHoZSx3RhK2HQI9Zu/RVkJ2lRIZYDr 9vv0dZS8xXBK03oU45b+p79pzKq9ttnzsTPXTSe8o/wPfv+Xen9RmKAeSZoNpb7zNqt3SsfjaEDn r+umt9tOXqG8nSZQ/CaDKZtaNCRBkyFUfeA8evX2vY5Cc7Ye477WZNRiIww7vsF7xf6zlP23f1R5 Q7ifJFLXpvlY9QHlxWurvF3BwSqhHPgZgRB+ziEAMoDmhxZ8obMn339f0wj+b9F8Yx87C+Z5PrSr Vatldc7ZAxBsIPrw8moWaIhMmfyPQX5BQwBfDtevX2NF6iENHvb9+/Ug80sNtKy09O3TnVc5xYuG FpBZLdQLmV7sBC9iIMnMhJOOu3fPLsKXPbN2mT6nt/oc6g159uwZ/d6xnaGtBvNoSD9VF7xY2L74 4RgTmf79e3A8/Lx56+lnCQsTaDGXUaliSWPBDH0e5JmeHOkwEKe9enbx0gbg0FH5XMQk2ywgIWE2 ZRZMZIG/s+JsWzV29vKFhp935/U5TOxLl8xP+/ft8ZIN/MlUqVRavWha8MQkHeQvrpFZkBf82EB0 vubzeh/n8BKICT9e7G0FX+Lb/dTcIEV8ygvp35qu9WvTtQ7ofm9b98B0nCNnbtYGAikAwtknIgXj AO5TkHLQIoCmLLQknz55Qp1//4VaKCL+l3YtWYsKmr0Q3IstWzS0avbwYQNp6pTxqg+8oqLFSlK5 8pV4IgOfQ/jY8CVWNgVZXFnd2+jPESJEIJhWxYuXgD+udOvawWqsQ+XR9rKlC9N/i+apMecj5cyV h1KkTMWrAWORH+27zaqh6gBaGD+3a8Hpa9epT+kzZOIoWBUSH16OHztCWbJkoxo167LG8PbtWxQB WJAJaJ0X8ADmyOujIvfSpctAr5S2GlYRB5nkrIDkwarG6PPQTkZ78VzAWGRPMA5+X6UMjR0zgsn8 jJmyUI4cuRTh9Z42KR9vJYvnM9xTZPTw/7nJfQO3Ved3WmkA37hxjcnTtcoflVlA/iEvtEcLcIZM njSOQKCB+MR5uFjAByZ8yEEf9ElmzJjMxCNWa4YmS+48+Vj7FNcP7XEkmFCCsIQfXnysq1ixKrcZ Ywzwht8ssyAchCauhxbdBnwEw7W/e/c2a7pDg3rHjq38kadShRIEUjG2ug64FigX9xDO+yT9+/bg +wdaqHV/aMh1hEaZmXSGdm2VyqU5Hp59lStXo5Ily7JWKBaqwPMcAi0jaOaHV/cABO8suK/xr8kF PvEN/bg6Nvi2r8nY4PrYoJ8/GD+hVQutPoyPo0YO4fdZZ7sp3r3a/9qa02bPnpM1fvFRvG7tqobP PFiDRFRlIP/ly60nkrinFqqxF/c+NOEDWvDxU79fx40bz0txGFuwgAdk9uxpXs5fu3aV4I88dOjQ VKduAy/nvQtwZrzBOwRk2NC/qP1vbfidALhiPMF7BT5+a0sCXZYrz0DfPn91Wd/qFlpJWKADMnfb MTp+1frDqz1csOpshb6z6ejlO5QteTyqUygTxYkaibacuKwIwCkEkgiSOYnFwmnDkYtW5MuJa3fp +oOnfG+sOmDtLgjkHzTJMiSOba9of8132d4zVLLHNNpz9jprgxXOkFRpNkaiq/eeUMep6v6faj3X ev3uPWusfT9gLsfRGnTQCLMnCK+nCD4QP4jbuXohe9GMMJ1/0W5TCRhDIy1RzCi8iuyQJTto/Jr9 RlzsgHQr3Ws6jV+7n4nAavnSU5lsqejWo+fUbdYG6jnH3Sq+s9cNibBybTFVD/djl+iDGstwPUBc Dl26k+Zt9/wgbS4goPM3l4X9a/efUO3B81kztUjGpNSkRHbKmCQ2bThyQZHOT4zoL9++4772wsN3 nz7hKt6TNxxk4vrC7YeUJFZUyqc+AIUMGYLmKzxGmszgXcFB10W2/odAoCP74HMOXwa1pDVNaHQY toWLFDNMa64qM1FNpphf3vFCXq58ZXMyp/d79+piTI7wAj9o8CgaMWo8T2CQSegwFpXYv/7sbWj3 wARg2PCxNGPmAoJfOy1z58x0SAjAzLha9drsA0/Hx4uZ1qK6qJxjazIhSZJkdPzkZbp4+S5Nmz6P VyyGeVVH5f8Ik14tIEh/a9+Z/7E6qK1gQoMJCciCLFmz8elwagKEyVNH5aNtxapNtHX7AdK+UhBh 1UpPjTDb/Owd4yUGJhTwoZI0aTIjyvz5nmaOaJf2hQJTs7nzlrJPltamFV/xEqRJRBBZ5i/IpUqV pQ4du/KLq1GAEzvOtjW/IjKAI0zRtECjFGE9e/3pFO4D/upjaDNWrlJdrVx8hWbP+Y8JD+SJCf3s WZaXzNWrluti2Ez6xq2nBP81v/zaibJnz8XnfLrW6PN4gS2tHMbDNH7Ltv20YNFKJiiQAa7LJuXb EeJTXhzJwU9A93sHxQaKYGgLtG79C9cFpBPIm7Y/NfPiz9G2siAvMIbsO3CSdu46whoFiAOyASTf 3v0naNOWvTR23BROCjJf+yxFQC5FlKHfHT1+kebMXUJTps6hzVv3sRkvPg7sUIRXQArGpV49uvD9 CHOog4fP0ML/VtGBQ6f5PkTZ6MunT580qjFOaaqC8MbYstF9Fy1fsZG27zikfLUtouyKADObletE mNw0+7E+lwNSZuiwMXwK5ffp1Y0/qnTt1pvHqb9HT1QY7OVFc2AuC2JJy6yZU5hsw3i4fuNOct+8 h7EDUeqsYLKk8/yhXiM6dOQct3fylH95QmYvn3//nc6mXphUL1q8mtZv2GGMqSDQMAke8FdvTlqo cFEmjtC2HTs8tTi2qg8BWjapxYHMAt+sELN2uz4PTZrMmbPRgYOnub0rVm1ksg79A0SzdwI3A4MG 9OUorVr/TLv3HqOly9bT/oOnCG1PlDiJw+Qg0KD5snrtVu7DGHvwHGnz06+cZsniBQ7T2p6AtizI 0YPKLxfuhz//slxTEKzoS337DaKDh87Qrj1HKVPmrJwcz1ifRGs14/mM5zTqiHuxffsuRtLZs6Yy kYzrtEn1l/ET1SqfasXPMWMnc5zJk/4hmPbCdQTu4TZtLO3Ds3SnGqvxD+y+NXF1bPBtX5OxQX0I 8eXYgI8VeI/FGLZn33Emu9FPndWM1X0aHwAwNqxcvZnzgXsCXP8J4y3jNIiqKupdB7L4P+sP8XiH Y9N4FaeC+iAQ0IIPBzD3xzsRxkV7UlP5InZzc+MPUJh/mGXm9Mn8AbxsuUouWwg5M97osvCBFx/C NK54FwAhiw/BZo1iV5+Bvnn+6jp9y1soi9UvmoXJHGiO/TF7o7dwwCyxuyKSPioCqFedYuTerwlN /KkK7R3akjInjUNPX76hYUt2ch5F1Qq/MIlFGmhgadl8/LLeVcTMRWMfO+sPX+DjCjlTW4WbD/wj X9Sp68z1TCzWyJ+BTo/9mVb2qE+n1LZrjcJc3DS1GvHJa/fMRfP+w+evaGDD0nR1cge6OOE3yqFW ebUV4Npq3HLapMgyEH0r/qhPmZLEsY1m9/jmw2c0sll5OvvPL3R8dFuqmicdx5u68aBV/Knuh5hw TRI7Ku0e3IKm/1KNFnauTZPbWsabf9bsI5j2Qly5bog/ZcMhuqlMd6NECEs7Bjbn/C+otpZwYA4b 0PmjTray8egleqk0+EpkTs74jmpenuu6oW9jShkvum10h8fO4P1E9WtoV0LaVcxLx/7+idb1bkSn xrSjRsWzUWJF/kFcxYETyY+/IhDCX3PzZWZH1cpW+Dpf74dqVEdpyuCrHySO+hJX1mSua87eTZnS YYEILdqUF1+9tMYSfHZ450sKD1jbf5QNQmTDBk/tsX5/DuGV9mrXrkfL1GQVkzf4UINWinkSM0pN PDE5xcp802bMYx9NqB++LmI1V1sB0Td6zCSeSAwfOY4JGh0Hvrsgui3Yf/zkERN/IHQw0UNavMRU VVqO9es3QRSWmDFjUaff/+B/EG62gvNr129jzOpyAgAAQABJREFUsmDJUsvEccLEmWpSd5r9I2Ki Be2M7n/0MfwtQYMCk1RnBXmsXbdd5dGXJkzynIhBmwmELAQvgtrEuX6DplSkaAn2yYKJvPYzhUnq dfV1FQKTHy2Y5E1VhCccva9Y5U7wn+asONvW2EpzAzgmN2GIl1iEYeVFn3DHi5ombfEyOWjwSPYJ U7x4aapbt6FR3QMH9vG+Wcvp1MkTjFNSZWLSuUtPJmYRyacys2XLQafUF7PpakIL7Rp8ZYdPzFq1 fzDK0+aOPuVlJLDZ+RL93qbIQHeI1a4HDhrJpDnIc/RlaPhCU9XWZFFXHuMIxhDcsyCgatWuz6cw zoGQxaQJUklpE+EehVy5eom3+AHBBiLBPKahj+bJk5/jgDgOSFm/fg1rt0WIEJEGqbabF+Zp36Er JU2ajCdGK9UYrGXFMotmR8tW7azuUbhrAPFnS/bBV2V99RzABE0TfcALsnXLJi4fkyB8RNCCsbhC BcuzYI/J5B7+XiFN1eIyIFMhUaNGo+lqbIb2hDOybetm1h5DGb37DORrh3TlK1Sm8ROm281i+tSJ HP5js9bGtUFAkiRJ1ceUbnxuzZoVTGYi3yJFi3OYu0ljGZqKWjA5hlsECAjNgx7jRZmyFXUUY4vx fsHCFYZvq0yZslKhwsX4vL7vjcg2O9u2beYPV/ho1blLD+MsMAPhavZPaZz02MEEH0RC1qzZrU5V rlKNj13pm2jDv3OXGvdAPfVsA06Q3zv3oGbN2/BzCc9B9BHI1Sue9wkH2PnR/ejESQuWiIKPXunS ZzRiz/EgDfGBBfelFlxvlIcx/eBBa00CHedb3ro6Nvimr8nYYOlhvh0b+nu8x8KHJv5beXxUhfaa swKT19n/LmYNVqTBR5yf2loIb/PHBP1sO7B/r9L69sxfvw+VKVOeNQydLdfZePj4BncAILlgEQNL CUjjJi2snj/m/NCG4iVKc5CZ+ASxNneu5d21UeNm5iRO7Tsz3uiMgOscNebheQ6BgkEbD1xhEaPF 1Wegq89fXY5siUKo947+9UowFCDiNh61JuDMGIG8uqHIKGic/VbF8j6G8+FCu1Hl3BZSasdpy32A sOKKiIGs8yDxsG8m+0BGHbtyF8FMFO47b5kPekf2+Ue+0CBEO+DfbcSP5Si0m6fftS7VC1OyONFY W26p0rCzFWiQtSmfm4NjRg6vfJOHsI1CnWeso0W7ThpEH4hQZ2VwkzLUtGR2vi64Nj9XystJrypN NrPM2nSEDzt9X5DiKd9xWirlTssk69v3H2n/+Zsc7Mp1Q4JFu05wupZlchL8OkJAWs7rWItypkzA x+afgM7fXJbe93hdpmtKSxQks5Y8yl2Y+XrqcEdbZ/BGn32sTHVjRApPPWoXNbICJqNbVKBmpXJw mKs4GBnJjr8h4OZvOfkhI3ytNz9kkRUmwyCzMNFwJJj8/jt7Op+GuQBeZsyr80JjzpHALAl+pGyl T9+BPDnShCPO68k09vGSBLMsyBW1oISOh8lO8eKlOBw/IHeKFS9p1O+aMquyFZiDgXDRgnzx0gzR vsCgRYTJFzQ2MNGD7z7EwwQW2nwox1X59bffvaxiBpM8TCpR/hU1cYIZKCbcun0ow2Ju6jl4eldu /YY/Gi9z6dNnYty0ifDTp4/ZBNCstbRi+RLld+yAkaXZfPTatSv8ogYzVC2Y3IMsheBlDcej/x6m T3u79e+2OioMvvp0m0EI4eVTyz3lS0zLddU+SN78BQ0T5QUL/mX/elWqVmftEVfIzEiRIrOW1959 u+mBIksfPXzIi65wIerHch31kevbL9HvXa/Vl0/RsNGP9H21WsrUfDL75gQhDhN/aK1A48xWQMSa BQtLQLDV5B6OMUmIpxbvwD2Ie95Wzp8/yz7s4I8OxPl1D7+m2lzJNr5/HcO0E5Ird14vTtlRZ5D1 V5QmBPo9BH1f7xcoWJjDfPqBhiQEHzNAMOkJE8Kg5QzBJKx7tw68r3903cwTS00wwW+rWaANnTp1 Oqccres88PFCf4DQeWXMlFnvGltLmy3EUwll/mkrWqsQHzngjxbEVmmlfQ3TVPeN6zk67s89u3fy s6+EIkXxrHJX5r8ZlMnv1m2b2AUDTHRBHtpKiuSpvFwb3c/s+c8yp9fjcc6cuR1qLZrj29uHJiS0 r2/fusX9V/udfKtMRpwVboNpESwQwlgkBH3J9h5K4EGQP33m9T6xLa+8ekZMmzqBunb+jTaphcCw wjj6rLmPaQzWKjL22LHDVllgUSblvcHwB2x18hs/0Pefs2ODxtmVviZjg+XZ7duxIZvNBw49LmC8 efHihZfxzV6XTpEitZd4+fIX4qj4MI1nHxbTwXgJdw0gaPFBHOQ5xryVK5Zy3Oo16tjL3s9hIMbM 5BjMb/FxoNPv3b3Nu169xpxuzerlxkIdy9SHKjzT8eEbvv1cFWfGG52nPVzz5i3ApzGmYj6AuZAr z0DfPH91fWRrQQAaW9CQgtkmtPs0SWeLz4XbjzjordKMg6mrWfQ5swll+RypaaXyc6bJPhBQuxQZ CJKkdLaUbAK5XpldggzbpAgVmKbCZDRpbMfzYZTp13xhignJq/zkQnvNLCCRgAXMNi/dfWw+xfuN S2TzEmYOWHfY8v6GsOXd63HbzOd92s9lQ6aBWIUAOyxEETGcxdruwh3LtQC+R2z8BmoCEibJEH1t nL1uWHwEUiyThazlA/UDs++0CWPSgQs3dRBvAzp/q8I8DrDoBsja87ceUo72/1DLsrlYyy62WmTF FXEG74seWOdW/l+xCIojcRUHR/lIuO8RcHx1fJ+nyynxso2v5jFixOQJDF5KYMrpHdGHQvKrlwx8 CcOEAhpjkyb9QzB9gyCvIjaTPD7h8YNVBu0JJsxakwznkT/IJHty44Yn+QRCzjxpQHysqKXlmVo5 0yfR2gvmeAiDBgn8+GkCED6Y4N8Dk8A5yvTVVjvGnN7ePlbktZVVq5bRT2ohjoAgDEDKQRPTlmQy k3fYNx+b6wdNIghWkNOCL5++lYBsq7lOtu3RfdMcB/vhPdrXvHlrOnr4IEE7FQKyFYuUwCclTM5K lfJKHnBE0w+07qAZZTZ3Np32l90v0e/9paJfIBOYakLLDCaMLZUPOvhhhD84mAZCK9M78Y6od/Mg ss3pMfFopHzzQVvia4gmvhzdeyCZIZjwQaCVq+95jI/OCO519Htoe2OMNpOgt9TK0hDkO0ORivYk dmzLuPDmzWt+JiCOs2Xby087dXc2j/vqWaTHUHs4mf25YcVzCO5rfETCeAH/VyB5UX9oP+Kchexb Rz//0lGRVBZC0J4Jr736IwwfoiDmDzccYPOjr2/06DFtzjh3iLGqZ4/OVtrozqX0OVZIBx+1Qpo0 D3zKpWev/owzzLuhuY9/EKgwm0+dOi33W/Q9CM45Enu+vxzF/VbCdd+x1+eBge3YoOO70tdkbPDf sSGsx7iA6+PT2IA4jgTPQC24f/TK2bVq1WN3BdB6B9m3U/nVxJiOsVR/9NDp/GsLH7L4uIM6JU2a nH29am0578qAZh80efHBGwt1QINea2jDisM34tN441OeZlxBpGI+5Moz0DfPX5/q9C2e71e/JG3u PIl9oMF/n+K8vAi04SD3nr5kMsxLBBUQR62IqqVs9lSsoXZDaV+dun6fF5/AohLwLYdz8HcG092O VQs4ZcLrX/nCZyDEETEUOXwYPg/zTVcFmocg5mAWDSIzSzL782pn8zWTS5/JYg2IesGHHmTtIU9y 0TZPrfHnynXD9dHthiabMxLQ+durA0jQJV3rUtsJK+mcIvxgZjtYLQrzW+X8hh9Ke+l8CrOHN1Zq hviEhys4+FQPOe87BAIF2QetLJAZrgomSBUrfc/OtJG2v4fKPvbhWNu7yTRMoDB5thWY/kITSgtM V/GFDGXZSgwPUzuEg4izjffksefXD0eEoW2e9o4LFiqqfKOcYAfCs9VERWvL7Ny5jYkFbcpkL60z YdAeatOqCZuVIT4ckhctVkL5AovCpCK00gJCzBN5+E2B+bOtRFF1wIIIEP0SiX28yPhGvmRbze3D hHv02EleqgyCWJsUwiwSJs9NlV+baVMm0Gr1lRnYQ5Opy++/UinlI80nGT50gEH0ofx69RsrAj0Z bdm80YuzbJ/ycnT+S/V7R+UHxnD0TWjzYZVcyNmzp30k+1xtB1bFBtEHjQn4W4T5IbTNsDCGWZvB 1Xydja8Jr6dqrLMnzzy0q/TkKorSzkb/xkTy8aNHVr4v7aVH2Lh/pvLCPHfUyokYk+bOX2Zo8Or7 CWapM2bOt5sFtPYguN+g1QHizZ52pN3EdgIxBkKc0RxDvGjRoxtthgazMt5FsCFm7bo4ceJwOD5M wV8TFrdwVxpnGke0E5pn+Fhy6OB+fl7BWTzEFbKPEzjxo8fXR489n39OJOMo8JnbSS38hGsNTRq4 O8ACFiAwoY0eGAR9ol//wdS2XXvWuJ80aSybRzdqUEv52jvChJTuM/8tWeNFixBtwHuA7mOBoU2B pQ6ujw1Ruequ9DUZG77e2OBdPzO7d9H9APFr1KzDq/2eV5ro+EC9TC1ABsHY4OoHak7oxA+sI9r9 bK317UQyHmNrqXdQWIdgoY48SqsOC1/hYztIS9+IT+ONvTmFuRzzcwvPCIgrz0DfPH/N5cu+BYGM SqPuhyKZafaWo/TXwm1UIVcaL9DEUmarkGLKH9+8Tp4WPOaI0P7SAjPXPGkS0u4z15V233l69uot n4LfPWjPhVTPGZiaYjVTLKwAqZDTa7l8wvTj13w1afPkpVJhtyNPPeoZN5oncWknmt2gwljdPnlc GvjfdvpzwVbKlSoBFc2YzG5c3waCjISpKhYBWd2rgfIbmMBLVjAB1tfClesGskvn/fSVc2RnQOfv pXEeAdDM3D+sNZuej165hxeJAe7wY1ivSBZHyVwOj+qh/fnouf3+ojN0BQedRrb+i4BXBst/8w/w 3KpWrWG3jGo+mAnABAq+0Gz/U6RIRYlN5lFQocfqh1pAvGBFTJAwZjMqxNusCBUtnG6DZzo49PaL RFZmTW2UtuP2nYcJhKQWvXiH+cXhzu3bhvmojufdFuazehEMmA3DIXnTH1uxiSI08gJKkqgvr1pQ PnzM2f5jwqvbFi9efB2d/feBXIWAGFj83wLjnHc7vmnrdyaiV/tS1GXouuHYFvckSTzbBw0n+A2z bR+IbphzmwVm43AMv3L1JiP49u2bhs9E78rcu8+i2YqEfw0czv0bq8jp1UyNDD12vMvLNq4+/pL9 XpcZFLbhw0cwtHsjmcwQ/aPuGHd2KXIfMnrMZPbflzp1WvbzZ9Yg9o+yHOUB0hgC83DUxyy4F7cr n28QjKEQTJS0ps8+lcYZia0IsHHjp/HkCyusDhnc30iWNKmlfIx5IUO6cf4ow/yv+zNIxrhxLeMF nMKbBWP3hYvnzEEO9+PFt+Rx+NB+L74Yz5w57SUdiCDt6w3+/mwFK4lCoMluvu/1QkpY7VKng4YK CDh87IAJ3JjRw/kjB9IFxEqWWJQCckRpFzvyO8kR7Pxs3ryBiT4sTIUFNFDnxGpBj3ge18BOkq8W hA9v7Tt0oRUr3fl+xQJf0FZG39GLkJxVGpbmfqX3bYk+9DPIcyfMiL9ag79Awa6ODb7pazI2fL2x QXchaGRC69gsemEoEFG4T7RgnMKHasi8ebP54yX2fXo3R5yvIViVF/czTNLbtmnKVcD8Ai6F/CKO xhtznnBlhDmDWeDXEoJnKIhDiCvPQFwLV5+/XIj8eEHgj1pF2d8bNN9mbTrs5Xxy5csOcubGA/ZV By0223+QTGbR5N26Qxd4wQqcK545GYFAgVkkFvsYrlZ5hbZgguiReYVfc3pH+37JN6kigyAgIbGo glmgkaf9Crqy0IM5jy5qkQ8Qosir6d9LeIVc83m/7gNjEFoQaEzaXgMca6IPcVy5brh88dSqxBCs JGwWmFnDbNZWAjp/2/LMx6hvqawpaPkf9ahGgQx8atvJq+Yoft7XWB+8eIsJVkcZuoKDozwk3G8I hPBb8q+fGpMKOGw3Cx6I8BniW8HDWa/yhzzgK2bQwL40YvggdsL/R/dOhokZfNRoaafiYfWvBQvm UM3qFdj3B87hq5xvVx7brRzO58qRnsb/8zev9gl/ejBZ1qI1BqFFoQUq/61bNqY+vbsZE3B9zt42 bDjPFzRoDcIEFJpJjRvW9vJiZy+9b8NKeDhFRvplSxdxfaEhAl9JcOT868+t6Od2LYzsS5cub+xj ZcaGDWoSVustV7aIQxNgI4HHjm/aqjWVkMUURfSCgOiutKkg3uEOghYaOxBovMBnH0x04Wwfq77h K3LVKqUNs8w6tatQ82b1CYQAVs6DvxstMOnQPsO8KzOc6WUb2l7wYbZw4RxjRVGdn956l5eOY7vF S31A93vbMgPTMRYS6ta1Pa+krOsF8qunWpwD1xnaQY5W/tPxXd2CTNPk9uVLli+9yAMam+vXrXI1 O1/Fhw9STDow/vTt3Z3bqjMaPmwAXb58iUmsGqYPLcWKleIo48aOIvMCESCHChbIZrgm0PlgC1Ms LIIDwT2yYcNa3sfq2DDlg6kV7ntgbRaQgNoXGMLh7w6CexZpIJiotm3zo3HPcaA3P0WKlGAtFGiv jP57uBETRORPrZsYx+adcmrlRghWUYRZrhaMrUOH/MWHMPvWRBECNNkHU3+MbSBDNKmuV3b/Rzmd 57hlPcdBDvCnH3xYgTY83GIMHzbQyBUaJh07tKU/+/c0wmx3tPb35SueTswxee3bt7tt1K9yDC3+ mTOmWJHU8N2qr4Fe9EY/Y8aMHkFXVH82C/oOzPTNos2yjynNJW2ybj6PPoAxXi9MYD4XnPZdHRt8 29dkbPg6Y4PuqxjPGtSrYWhL4yMkFsOAVFJWNrYCbTkIPpDjuYGFKPzybm6bv38eY94A10AQPMsg DZRfXt+Is+ONzhvv22ZcoRGNd34IrJe0uPoMdPb5C7KxsXIR0ki9U7v6oUfXLThv4yuSp10Fy1wP K53aSqEMSdlPGhbWGLBwq3o3sY4BElD7N9Nn4F8PAuLosPItB+JE++QrndViIfK30sqClPdmFV6O YPrxS74lFTkEDTaYq8JHobkdAxdto0vKRxtWEq5TKJOpROd3QcZNafc9Ac8Hz15Ro5H/8cq/zufg c8xyygwaMnLZLlVfWFd4CkxxNx/3fK67et3KKjNryIS1+40VfZFnszFLae+5G54FeewFdP5eClQB K5SvwqOX71idiqh8+EEiqGvnnwLiFn4Q7z55QYOU5qAWLAzSbuIq6jXH8r7kKg46H9n6HwJu/pfV 18kJL+sw2R03bqRRATjN96t0796H6tapyhNK+CEZNXKI3Sx79vqLqlUtw5pxMOXt3aurVTxoC/Ts /aexWIXVSScOXioH/Hjw9+3Tnf/NSUAAlfWYWCZIkJBJT+0LR/t9AxmIF2vvJGPGLPwFEKaxIC2q VS3rXXR/OwfNldJqVTaQUpi4Y2KEf7PAEb0WTN6heYgXI8gm5bQe/xBMUvWEkwMc/PimrXmVSQf8 sEGgRQjSF6TDnwOGKdNE73GH2VjF8sVZMwdfjFsq34u2op3Y42UYk8lVK5fZRiE4tNYTU+/KLKYW iQERAUGddb29ZOgR4F1e3vWbgO73juobGMKfKOIAq2uDPEiePKUyd4/MpvXaRLNvv8EGMetf9YUm WO7c+Qjkf6eOPzNp/FqtFgCtCr2itX+V5SgfaGq0at2Ox8Jp0yYyCZcuXXq6qMhH7aC/g1ptVmu2 IZ9f23empYrIB3ldolhepZGWjT+C6HvYUVkwxQLx7+6ufNW1a07r1u9gTTH4fvrrz15MXmNRi8wq PwhWYUSe8PXao2d/Dmv6Y0uaN3cW37OFC+VgbTgQgrjfQJy/eGHxz8aRHfyA6Me9h3yGDvmTVixf zJoeMKd2pL35m2oznNLD9165MkUoa7bsFEppSB86dID92SVIkIiwSJJZsAAPtL8vXLBoHBYu4jlm l1Tj3oC/ehvRNTFoBPjTDia70AKePWsaX+OVK5dS3Djx+OMLyE6sLuxIYG4MzUP0g+JF87CJOcyS 8ewKDAKiuUvnX2nwoH7KRUVJRUqHY419EOgY37V53C+/dOIxE/21ZIn8lDdfAaUhGo/9xe5TGqLo Mxcu3TVWxM6S1dL/QCbnyZVR+feNx6ufY7VuyHj1PMM5kIKVlfliUJa/1TvQJPUx0yzQdNy99zhr qboyNvilr8nY8OXHBvM1h/uYzJlSqLE3K50+dZJ9rGI8bdXmZ3M03i9XvhK/+2pT38Cq1acrDpc4 aB8EC+HZLgik4/m0dXa8MeeDD8BZlBuQTJmzqAW4TvCzAu/4rU24QlPPlWegs89faJOvX7+Gq3Pu 7Bn2ZWqum+yrd5nK+Wi60uoDsWEr8HGH1V97z91EQ5U23soDZylrMstq7iBeTt+4Tz9XzEv9lf8/ LdCOSx0/BvtVQ1hx06IPZRRh1WeeRbMT57xbhRfnzeKXfKFB2E7Vc8iSHTRx3QHC6rxYGAQLLOjF O7oq7Tzt885crrP7MDWe9ks1qtB3FhNkIBUHNSrtbHIf4+E6zFM+D+EnrkDniZQ/XRImF289ek67 z17jxTzuzOjMpKWr162FWoV31pYjrJGYs/14yp4iHmtzok9ggRAsFGKWgM7fXJben6H6KPw95kub SK0YHJuuqMVUsMAM5o9V8qbT0fxli9WZGxTNStPcD3GfWbr3NPcNkNfPX7+lVuVyczmu4uAvlZNM rBAIMM0+7esIHSyCehGwFe2wGeER1QPNJ3FTdvjaRMBsLod01WvWMdTc8fJZo0Zdq+y0o1sQQmHD hrU65+gARNT8hSsIL6VmgZPcrt16G4t24Cvl6jVb2O8a2qoFJF965VNr8ZK1VLOm5esmzmGSoU3N oFlgFq25hTCQSRDkr782coDHDzSHZs5eZNQPbRsx6h+jXoiG+sBJMSSCMjHUorUY9DHqMWXqHF7x VodhW7BgEV54APvwG4UJK8RRG7wrQ7cNvlrMplATlY+63zv3sEuOxFVmuz/Ua8Rl4ge4LfxvFU/O NNYIAz4weQUGEO+usattRX61atcj25WdkyVPgVNcpne4w9xu9dotrOGn68wJPdIWKlTU8NkHbR+t KaLjgORp0bIt9ek7SAd5WybiNm7S3MACidD/YdILjTOIvo+w79t+E9D9HnULrDJ0+Fj2mQYfiyBn QOKA6ANZA5+LWKXXLG6qz0P0/aPPOQrnuB7XSsdB2KjRE3hVQGjuguiCw3OsAN79j76cpe7/nN7j XnWzWSFL52dbF87A9KPP26aH2wOskgtCDx8WoHUHbTqQVVOnzWVXA6ZsWDtt9ZrNPHGCphfISpBy uH/+Uea6GE8htvXCvQIfl9BwAwmuPwLA3xoWVABhBuJOE9q4Drnz5LPSoIY58YJFK7lumGyCBMdH hS5de1HvPgO5XJgD+ySDh/xNcNKO5w7qDv95KGvNmq1McmBsNN/bII7cN+8maOShPGjroeyQIUPw OLJx0y4v9znqUKny90ZV4DdVC3wzajNJ+MSCdoetOLpeiKf9Y5n7h216fTxg4AieTOL5A81iTHyx ki7GP0wyIfbKgsYVPmxgrIH2D8hOaIigz0Lz3rZse3nYC9P18jxn/WU6tLoHzXXS8W23adOmYxcK z9VCWVgw4N/Z09kkGm4VcM9qgcneBvddHBcfj/AxCQuPYKvHYvPzM1OmrOwjDM8hrI4NrXQzCZxK jQkQfKQKqpLCow1wtfHs2TOrf70YD9rm6tjgTF9DvjI2+G1ssMUPmEJCqHEL/Rb/GMO8EzePcRIf c+Di5fPnT6wdjQ/heM9drkziEyVK4iUL3DNmkrt69Tpe4vgUoN9bQoW2vvfN6UJ5PC/1eGA+Z2/f wMTj2azjVKhYhS1xcNxUrdZtKzp/PabantfHzo43Oj4+lrRs1U5p739kXPGsBNm4YtUmL5ZLrjwD oR3uzPMXz288w/CeniBhIl2tb24Ln2wQvTUDgBVOR7eowCQRwhN7rAar47Svkl9prVWlhCocmnwg nPCPRRJAvFS1Q7R8nze9Tk5lsqc09uEnUGv5wY8eNKNcEb/k26N2UW4nCD2YLWOhC2glpowXg+Z0 qEm/VMpnVZVQHmOHXunW6qQ60OdDuXnSDfmUT7l+9Upw1PFKS+7h81e2yYxjnd42f/g1hKYg/rGv BasI7xzUnKrmSUcf1Mc8+DwEAYZteDWG/FQ+j3ENkcaV65ZKkbMr/qjPWIDM2nriCr/j9axTjAY0 KMVVwHueWQI6f3NZ2G9cPBsljhWVTbGnqJWTQfRBk3JCm8pUxNSPNK7m64L0OtxZvIf/WI6Jbr0C 8LaTV5RJ7weqVTCjCi+ALFlcwUGnka3/IfCdmox8tpfdhw+f6P5DxzegvTTmMHwxx1fwsGGVw0xF wNkTaK2heE0E2YtjDsPLN1YbBWFj+3KCF9HX6ly48OGNyY1OC80XlAWSyqeHtE5j3mIiD3NIpMeE 3rZsHRcPaGg2fFQP7FSp0vDkQJ8zb6E9hwkU2o0XLbM4wgRmAZfUpFoBph7+iay0Z8zpgRF8EOGl HD6TYEIMAc6Y8IZSk3+8gNkT4ISViKHhlzpNWvYXhXS4jmHChLa6jvba4F0ZfO1wDcLjGlgmaOY6 IC00IIAzXtzixo1r5dPKHBf7MC2D4+dUym8ZNKsguk76mAMd/LjSVp0FrsHVq1dYqwNEgrkfOMJd p8UW/QOmfHDAD19cSZMmsyLeEAf1unjxPJNHmNjjGprJOcTR4l2ZwAcaV5iYoi+in8HMTPc7MzmB /Bzl5d011fUIyH6vywiobZxYEVTbP9HDx69dLgL97caN64wdtN4c9TvE+/DhI49btoXgPrU3LmE8 e/PmjV2NYKxo+ODBfe4buJf1NQLRYr6uyBvX30y0eFcXe3WzTW+Og/sBWnIgczAm+yQYf0AQAieQ dWZxVC8eu9X4gw9G5vsNadE+aI5hMpggQUKH9wniAi+Mrdo0Vqe3NwbjnD3BPQI3CvAFqJ9ZqDee dY7GVKS5cf0aT6wTJUpsdX3slQGM0E4zoYR4yOcVj59en286H3vXG+f0s9iVtqJPYSxG+1Bv2/Y5 KgsE3/Vr1yi0el5o9xrIA/nZjmP28rAXhjYgXz124dgs+vlk77lijod9jFUYw3FPxI+f0AvO5vjA DRi8efOaoilS2qyxao6HffSta9eucDx8pNKC6wZCRC9+osO/xjZenIiqLR/o8dM3AV68K2ODT31N xgbL5fLt2OAIP+SK+wFie39zoOnH9hkDkhcrw8aPn8DHvt1PLZwHFwRwuQM/ma6KLtvee7/Oi58T 6h60fQbq87Zb3JfQjEd8W8Gz9+3bt8YYbz7v3XPZHE/v+zTeTJ8+ibp1ac+L4sFXtsY1gRqbnPEV iPHS2Wegd89f1Bdl44OWb+ZIur2BYRsixHeE97p35/fQ20OuuTiB77XX795TpHD256xo38dPnwnx zL7fbNuNBTdAlIE0BPkHX3GOBKQRyCqYx5oFZWBl2fCKZAxlQyCZ4zna9498sUAItNZAbILMsSfw 7fdR1dXReaQBHmifLYH0ysMk2rbt5nK8y9+n9PANePXeE3VNP1C0iGF91Eh05brdf/aSr48mZXU7 oeEHAtKeBHT+5jKx0vMThbtut7062bsuvsVbQU1X7z+mN+8+KrIxipf+bK6bKziY08m+NQIhosSh CGXbWgc6OAowss9BeRIsCAgCgkCgQcAvZF+gaYRURBAQBAQBHxD4kmSfD1WR098IAiDps2dNwz6u BwwaQY0aNftGWu5cM23JPudSSSzvEPAL2eddvnJOEBAEBIHAhIArZJ+1WllgaoXURRAQBAQBQUAQ EAQEAUFAEBAEghwCa5S7CWiiQ/u6ShD3WRnkwJcKCwKCgCAgCAgCCgEh+6QbCAKCgCAgCAgCgoAg IAgIAoKAvyGAxdcgZctWNPyz+lvmwSAj7QsxpIevuGDQJGmCICAICAKCQCBDQMx4A9kFkeoIAoLA l0NAzHi/HNZSkiAgCHw9BMSM9+th/62WDD/B8I0XGHxWBsZrAH+E8G8J34HO+BwNjG0IbHUSM97A dkWkPoKAIBAQCLhixuvYa2hA1EzyFAQEAUFAEBAEBAFBQBAQBASBYI0AFudztEBfsG64k43DglpY iE1EEBAEBAFBQBAIKATEjDegkJV8BQFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBASBL4yAkH1f GHApThAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCCgEhOwLKGQlX0FAEBAEBAFBQBAQBAQB QUAQEAQEAUFAEBAEBAFB4AsjIGTfFwZcihMEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAIK ASH7AgpZyVcQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEPjCCAjZ94UBl+IEAUFAEBAEBAFB QBAQBAQBQUAQEAQEAf9A4Nyth1Suz0z6dfJq/8hO8hAEBIFggoCQfcHkQkozBAFB4NtF4O9RQylx wmjUpnXTAAPh0aOHVLRwLipVsgB9/vzZT+WcPXuaatWoSGnTJKTUKeNR+1/bcH4vXrygK1cu+ylv SewzAhXLF6Ps2dLQpYsXfI7sIIZcKwfASPA3gcCXGHNtgfSP+9Y2z+ByvGLFEsqaOSV16fyr0026 evUKPX/+3On4ElEQCMwITNlwkHaevkZPX74JzNV0uW4Pn7+i3B3HU8Euk9S7p8vJA1WC56/fUvIW wyluo0F0/OrdAKvb4MU7KOuv42jm5iMBVoZkHHQQcAs6VZWaCgKCgCAQuBAA4TFxwhg6dGg/HT92 hN6+fUOJkySjEiVKU9MfW1GsWLG/SIUvX7pIHz58oFu3bgRYea9fv6Jz585w/iD7vvvuO1+V9f79 e2pQrwbduHGNIkSISBEjRaK9e3fSy5cvKVOGZIzhrH//Ywx9VYAk8hEBTHIfPnxAz1888zGuvQhy reyhEvzCqlQuRQ/u36M+/QZTyZJlvDRw+vRJNEmNfwkTJaH5C5Z7OY+AFs0a0IkTR6lv/yF287Cb KAgEfokx1xYGv963tvkFp2OMZ/fu3aVbN2861azBg/rRyBGDKWvWHLR67Ran0kik4InAyv1nafCS HU41rlKuNNTp+4JMqNUfsYievnprpAvjFpISxYpCFXOmoSp50lHIEJ7vSCB56g9fRI8VERctQljq V68kZU4ax0hrb2eFqtfI5bvo/cdPVDh9Eupfv6S9aBz2QcVZtOsk79cpnJmqD5xH95+9dBhfnwih 3uMWdq5NsSJH0EG0+fhl+k/ldeTybbpw+xFFVfXNkSI+1S+alcrlSGXEM++grusOnWcC6/T1+xRK YZFYYVEoQ1JqUiIbpUsYyxzdpf3Xb9/TmRsPOM1nUu+e6i+oyhN1/R88e8XVB4kZUHLl3mO6dOcR Xb//NKCKkHyDEAJC9gWhiyVVFQQEgcCDwInjR6lly0aESZ9ZEI7/GdMn07YdBylmTN+/5Jjz9W7/ zt3bfDpt2vRW0dzd19OMaZOoVOly1KBhwGn9WRXqw8HePTsNom/XnqNMiD54cJ8+KrLy/ft3nPrd W88XaB+yk9NfAQG5Vl8B9K9U5OXLl2jViqV2ibolixcQzuP/4sXzlCKF9UTwyZPHtHr1cvr06RNF iRzlK7UgYIoNSmNuwCDw5XNt+1MzevXqJQ0fMY6iRo3mpwq8emWZaL97J88aPwEZDBJff/CUjlyy vEP51Jz0iSzvc5fvPqatJ654ib733A1atPMkFc+cnOZ0qEnhw4TiOBcVaQYSTUvXmetpVc8G+tDL 9s37D/TLpFUGMfTkxRtvyb5Nxy7R/acvKVaUCFRCld1szFKnNfxApkFAGPadv5lGrdhjZb3xSp2/ 9egsgdD7vVpB+qNWUY6PHxBXv01ZTcv2Wj4EI8wtZAh68/oDnbx2j/8nrt1P83+vTWWypcTpb1pu P7JoEocMEYLSJIhphQWuGbAe27IiRYsYzuqcHAgCfkFAyD6/oCdpBQFB4JtEACat1auVYxMgTDr6 9R9MBQsWobDhwtGRwwdp3NiRtH37Frp583qAk32nT52gbVs3sZZcu587WF2PkyeO0caNaylylCiB huy7eesm1zFz5qyG5qMmRJct30Bv1eQrd+58Vu2Qg8CFAPqTXKvAdU0CojbFi5em/fv20LZtm71k D7IEY52WLZs3eiH7du7cZiH6okal7Dly6ahBfhvUxtwgD7hHA1YsX6w+CL2nnj3/9DPZ16FjNypS tDilSZMuuMAj7fAlAj+WysGaeObkaduM4sMFiqTKnDSucSpK+DDGvt65PqUjfVLWDneevKBpGw/R eEVugXwbsWwXda9VREcztrCK2H7qKp1XPvZSxY9hhJt3luw+ZRB95nBH+3O3HeNTNfJnYLLtyMg2 9Pb9RyP66JV7aOzqvVRYadpN/KmKER5CaR/GjRqRj/9auFVpEu428mlTPjelTxSb7jx+QYv3nGIt w6OXPU1PkX/pXjOU9t9DpcUYgjpUzc84Qovvg/rAc/LqPZq99SjN3HSYzt18IGSfQvZvdR0gzcvk pHjRIvG+/sE1hxZnf6X1KWSfRkW2/oGA+OzzDxQlD0FAEPimEBgxfBATfSA9Vq/ZQtVr1KE4ceNR lChR1QSiBM1fuIL+nbvY7kQCpkbQgnn2zHkTSmi8Xb9+1eprqwZ8lPLXB7PaHj37U4IEiXSwv2zv KxO+Z09dMwO4e+c2QaPHkbx4bml3xIiWF0xzvBw5c1P+/IXIzc3771AoAybUzohP9XEmD8RxpUyY c8Pk7uNHz5dtZ8vxr3joEzDrhnmbq+JMH3XmWsH0+9q1q2xibq4DTM6Bj9auMZ8z70MjDObet2/f tNv3zXFl3/8RKF6iFGcK/C9cOGdVwP59u5l40YFbt2zSu8Z2h/rgASlSpASFDBmS980//nGfwKQc fcw7DS1n+rO5Xtj/WmOuM+3RdUWbHT0XdBxs37x5zb5QERf3lLPi7JiHZxny9u4amMv0rzHZnKe9 fe/qH0m5jyhWrBTFj5/QXlJ+vkBrH9dDJHgjEFqZnMaPHsnqX7spiaOIMPO5CGFDewEjijJzBTkD kmtw4zJUVZnwQkCQ2UpkRRYWTJeYg6e5H7I9bRxPXH+A90He+SQwEV590DI+1y2UiaPHiBTeqt6o IyRc6FBW4Zrou6U0zkAGQlqWyUVTf/6ecqZMwJqJyeNGo45VC9D+Ya2oc/WCHAc/I5SJMYi+MKFC 0vI/6rHGX6YkcZhsDBvKjXKkjE8jfixHR0b9RLUKZjTSObNzT2kpuuJ7EGTr1XtPWDPOmfwR5/bj 5/T4xWsfo794/Y4uKpPYl28slifeJXj34SNdu/9Eva94jQVTZGhHJo0djXrXKeY1gh9CQBI6KtdR tsD3htJqtVdXR2kkPGgiIGRf0LxuUmtBQBD4SgiAyJo5YzKX3qRJC0qaLLndmmAiETZsOD4HTcA/ uneiLJlSsBPxQgWyU9rUCah82aJ02KQdozPKnTMDJUsSi2De2rJ5QxU3EeXJlZHTDBrY15iwgYxb qRyTFy5S3Epz7/jxI7zwxdAhf3KWS5cs5GMshjHgr966GIfbmTOmUM7s6bi+6dImonJlitCpUycd xsdkEu2Dz71sWVNT+rSJOf2E8aONNOfPn6U0qeJT3z7dOWzjxnVGnaABBMmbOxMlShCVsICHlvnz /6X4cSOxf6Xly/6jAvmycBnIq3SpgoYfQR0fW2fqY45vu++bMpHH3r27qEzpQpQqRTzKlycTb2vX rMTEli4DRDHa82PTH3QQb0HO4boniBeZNqxfY3UOeCRJFJ1xtTph5+Dx40fUrm1zxhrXENekYIFs tHLlUjuxPYNc7aP2rpXutyBXmjSuQ+nSJFbXNCNlypiMZs2cyoUtXDhH9Y20jA+uYc3qFdjXlmdN iEASoj+lTB6XMcmRLS1ly5KKli1dZI4m+wGMQMaMWQztW2gPm0Xfs7nzWLRwd+3abpjh63jQboYU Vz5MzeLMfWKOb29/zeoV3K8xpqGPpUmVkPs9+j/E1f6s++7XGnN9ao8Zg6dPnlCrFo0cPhd03LVr VlLVKqV5HMqfNzM/Q1KrCfjAAX28XCvfjHm4H/PlyczPJTyfUiSLY4zpuLfxHNLilzEZfh9xnaHV ByleLC8fY4Enex+jMNahXngWOXpOLFgwh8faVi0bc576B/26eNE8nH+B/Fk5ff161X38MKHTy1YQ KKj860FAoNmThsWycvAcpY1n1r7TcQ8rk+KDF24RCLpq+axds+g45u3SPafp9bsPlDZhTMqaPJ75 lNP7IPqQR8Rwoe1qIyIjaKKBAIQ8UiTZ8KU7eR/kYCGPNnOAzU+imFEIpKkzMmXjQUr/09+UsuUI StxsGBXpNoVOKHNgRwKsoF0Yv/FgyvTzGIrnsQVZao/EQht/n76OF8lI03oUJVFloLwxqyxEp7mc bSevUN5OEyh+k8GUTS12kaDJEPaFCFNbLRnajqbYDQayf8RGI/+jxD8OpYztlB/bpkOo3/wtrPGp 405SdYIfx3GtKxrm3TjXcMR/XAYIO0i+3y1lJlJ5+UR4Qpv0+7/UWKbajXKTNBtKfedtZpNszszm B2RkrzmbCPVG/unVFu2Dj0eQhSLBE4EQwbNZ0ipBQBAQBAIGgfPnzhqTjvoNmjhVyPBhA2nqlPE8 YSharCSVK1+JokWLTkeOHKTGDWt5WREQZAe0XkAGYpVBaCEkTJiY440aOYSmTP6Hy8UCIGfO3aS5 85ZaLZgRLlx4ihU7DoWPYHG6HCZMWJ60Iz7K9U5A0GFFQ2iFxYkTl+LFS0BHjx6iRg1q2k0GLa0q lUtz+6A1UrlyNeXfqyzduXOL+vTuRv379eB0YcOqOqg6YVEOSOjQYYw66bCXL1+wNhwmhlqABWTy pHGEiRk0wtKly0ChQoVm34ggi4CVFmfro+Pb27paJvLAdapRrTwv1JIlSzaqUbMu4wfCo0zpgnT3 7h0uKmPGzLzd5L6BSS0+UD8wDYQWG0i/tWtX6mDegvzDRBft9k5Q77KlC9N/i+YpbbqPlDNXHkqR MhWvugtywDtNOlf7qKNrpfvturWr+PrGiBGTQE50/v0XXqzhl3YtWdtQ+5fE5Lpli4ZWzerftwf3 p/Dhw1PdHxpSxYpVWcPGJ8LSKhM58DMC0G7BRwuIrSnvzh1bObx9+y6E8Qa+1Pbv95wwYfzAas+W PEpyXPw4e58YCezszFAfW0CWI//EiZMSCEdoA6Pfjx0zglO42p+/5pjrTHvMMNT7oRotVyatkSNH tvtcQFyQnsBo397dlCpVGr6HcihTalwnrCQ8ccJYc5bGWOTsOIuPNa1bNVHj8WUe7wsUKMxjFzSu 37yxLFSFMR7i1zE5ZqxYBumM/PAMw7Msbpx45BYqFIIMcXdfx+MMNA29e04AB4y1r0yae0jTqEEt OnPmFLvlwPM9XfqMtEn5vr127YpRhuwIAt4hoMkgWzNNnaay0vwDkffo+Wtavs/zw6Y+P3HdAd79 QS20oX3+6XP2tnO3H+fgOoUs7xb24vgUdsJjZVhoJWJBDp8EK8nCryDG945qwRL/EBBuv01eQzce PmPT4gRK2xJkXq3B8+1mDz+BJXtMoz1nrxM0LmGijDTQ8Os4dS21n2r90RQ+CUv3ms5m1tAEBJFa JlsqJmW7zdpAPee4G+WA+Kqtyj2lFhspkhGLjGSnjEli04YjF+iKyl/L63fvGYei3abSEkW6RgoX hkBuQttyiFr0Zfya/ToqDWhYim5N/11pdlrIYH0CfhZjR/EkQ6NHDM/H8aJF5IVOdDzbLcoopsp1 VybjMJvOkDg2ax8OVSTsPI8+YU4DMrFs75mskQkiOosyT8+VKoEiBj9yu/L9Pok1GM1pZD94ICBk X/C4jtIKQUAQ+EIIXLp8kUvCRMaRCZBtVXIp0qVnrz/p6PGLNGfuEpoydQ5t3rqPJ2vQztPmbrbp MGEeNHgUHTpyjvbsO84TNsTRWlLYhzksXrjMkjJlatq56wi1afMrB4Nc3Ln7KP+3av2zOarVPia8 mAhCfqjXiMs9cOg0TZ7yL4EwtCezZ01lgguT7k2b99D4iTNo5uyFNGasRftx8qR/2AQ2kVqxc8fO w9ShY1fOpkiRYkadsmbNbi9rqzBo6mTOnI0OHDxN7qqcFas28gQf+IFY0uJsfXR877bOlgmCq0+v bkxUdu3WW9VtE/09eqK6xnspgyL3oH2icS1UuCiTI0izY4dFoxF12GrSnNq0aYNVtTCBhZQpW8Eq 3PZg3LhRbE4Hknaj+y5avmIjbd9xSF2PRewzLZTNxNic3rd91JyH3r+rFowZMWo87TtwkvthMg/t V5B1IPn27j9Bm7bspbHjpnCSvXt2WS10s2rVMg6fMXMBDRs+liZOnsV5gVgS+bIIFC9p0crbrTT3 QNpAnj9/TsfU6uPQXM6XvyCb3iMcfvu0bN9uIQMzZfL0zenKfaLzsd0+ffqEBg3oy8EYy3bvPUZL l62n/QdP8ZiVKLFlIuXb/vylx1xn22PGASSVT88FEOUgq1av3cr3Gu4hjEttfrI8E7C4ij1xdszD KsyQ3zv34PF+4X+raNLk2RyGDzsrV7kbbiz8Oib/NWA4Pyv0+PXf4tV8vGXbfkI7zQJsnHlOmNPo /S2b3ZkMhSuOBYtW0uAhf9OGjTt5HE2RIqWOJltBwCECMAuduM5C8GRzoGUXLrQb1fYwa53mftgq L6THSrgQ+BL0SbC4yM7T1wir6rpqKmvOG6vuQlLE9f5jsE5zRpFgkIQxIluRg6j/gQs3rf6hpQiN Mu8EBOnQpTs4SqPi2ejsP7/SqbE/0+z2NQgmwbYCohGLnIDAgqnzaRV3ZY/6nKZrjcIcHf4TsUiI lqnKbPro5TuUJHZU2j24BU3/pRqvRDy5bVWO8s+afWzai4ONRy/RS1UnLHay4o/6NKp5edoxsDlt 6NuYUsbzitFNRVCObFZe1fsXOj66rWHKPVVpKmqBubi9tgxrWpbgYzFUSAslg4VbcLxvaCtvyd4p Gw7RzUfPmDhG3dCmCxN+oxJZUugirbbTVftxbUBIrupZn7YPbEbu/ZqweTYwAXnYZ+5mqzRyEDwQ ELIveFxHaYUgIAh8IQSuXrnEJcWLF98LyeaoClWq1iBMTM0Tk9hKyy1PnvycBBpd9qT/n0PYPDeE cn6M/1ZtfuFo8FEVELJt62bWCMEkvnefgUb7yleoTOMnTLdb5Jw5Mzn8l187sd9CHQlpoPEDP04H D3p+3dTnXd0mS56CFihfiHEV7hCQCIUKF+N9aPtp8c/6OFsm/JWBJID25U9tf9NVYTKkQoUqfLxn t+VFFtjCMTzEXS2eomW70gDUAl9TWFwFAqLw4IF9/7d3FnBSVV8cP8RSSyPd3d0dSzcioIQgIggC ipQCgn9CpUFAQUJS6RakuySlpFmWlu7G//md2Tv7ZnZmdxZ2YRfO4bPz6t777vu+t8Psb07IepWq NWXp7mXJovlyqM2nHSiD5Y/TihWryB+s5o9lV/1f9Bl1NVY/fm4bNWoizw/yWjZs1FSaIa8l/og2 Inkt9gI1xVl8z9h+r9DQiNcHD9kYYB+8eeBlo/ZqCZTlFAHItweBb++eXXJyhOEiH2XhIsXEw7Zc eR/ZbxWszRcYPv5iIRqE5PdEBnTxAg9DpFJImDARdf/qG3sLFEoaMnQ0NW/eSva96PP8yt9zPbwe +4XyiidzxJczEASdv0ipXeddGcrd/zmevucdO3ZExqnMld6NVaxUlZ8HL8l3d/7cObObQvM92T6o mxVP5++qu3nfARtreDA8pOFJrqYEXBGYwUUoJrNoB8+wIl3GiWcawmH7vF/OVXPZ18w/lHezf6EO 03Dqun3iKYaw2CxuineYtljO2nxQPFRL50wrwpv1mKfrEMwgVsFSsnjniR3nXH0wiERWG79yN1Xo 9avDT/lekwjXFZShUjE8HSGEft+sEn8GsLWuXSQb/cqinLMt331cOMOjD3kBIaQZ+6p+GUqfNIGE 0CLE2di0tbY5dGVPRKvXZS0+BzwoEVK98/h5aW7O78diqjWUtmiWVA7nMmMP+qgKtaxYQERXCK8d axWTQ2fCMDR27taDco42XOzDVIlG7siZXRraw63N/LBEGDGsbbXCVIJT7RhDDsGeDcrKJnIKmnBi c1yXEZ9AYLk84l+TXoESUAJKIMwIxI4dR8aGR0ZIDXnrDh86ICGdSPx99qxN5Hv8+LHLofIXKOSw P1Wq1LINAQ3hUq6KXDh0COGG+QMQ4V7OY+fKncflaEhiDvtz+RL29nH8ltqLv5F9wBG5oREClTFD ZqkqbJ2E4QFvFGOhOR9Pz4mCKzB4LvXs0dlMRZYINYRZBdrKVWowr6Us9q2UY7if27dtkQqTPizM IRxxDYeOwStww8a14lGFkLS0adNJe1cvCKH29T0th0qWKuOqiUf7QvqMuho0f35HjwRzn7A04h76 4Y/r5ClSSm5K6x/X1Vkg/XXSOPq6eyday+GCH7VsI4VvzB/jrs6p+8KGAIoOoZKuVOXdtE4Evq1b NsrJUIEchtQEsIMH/pYQbYRuG7EPFX2NhfT3xPSzLs3vdyEu5uPO29jaPqTP86t+zw3p9eDaQjJH eGtv376FLl64IL9nyKcJe/TI9f85nr7nQWxFagJ8SZEjZ24Z8+LFCyIC44up5ClSyD68mGsM6/8j cC5P54+2zgbRGiklTp44TqVLFaCWH38q3qIIGVZTAu4ItP15icMhFKkYxgJUmsSOQpi1EUIo86ZP Jp5mKNTxHQtcCC2FtxaspQdefWg3078K7/v+hTmwL6QWlX9fY7DIBu86q7AV1DgJvGPK4YtOeQlL cvGRDzj82BjCXq/evk8POVdeUAYPRVhhzr0KodRqedMltW7KOgqDwIplTS2ebbLh/wKhDh55E1bt plOXb9gPneAiG7ClLGjt4/Bgq0WNElk2EQIMq8jecRASUTG54Jc/U5uqhQkeh0k45NaVFfbPZWiO IZQXBgERBT6cr8m0e5ml3xUbs/K5MzgMg4IpyN8ILz5jeLZOXbKxQOiys/nktY3xjD9HIoTZUw9P 53F0O3wSULEvfN4XnZUSUALhlEDadOllZvAugWDn7Z8XL6jpIn9Sc87Nt8uS0yqo9u6OxbCE0iJc KbQNf6zB8IecJwbBE7nbYKtWBXipOfdNxh5dYWHmj33D4lXMx/mcuK4LF2wfqhBSPGXyBJeXmiRJ wB+MldgDBn8Qnz9/VvJDoSgA8hTCAw/HbGLfCur4eRcWu2yCYHAhvDg3REOYp/fPOtHQekatY5r1 oKorR2WvMWfr3ae/8Jk2daI8V3i2IHwi7DdLlmzOzXU7jAlAsBOxj0PNO3f+msPPN8gZS5S0icoZ M2YWr1Z8WbCJPdUg/kAIgjemVZgK6e+Jq8syX0gkTPiOq8P2faH1PIf1e66n12O/MBcr7ub424wp 1Pub7hKa6qKbx7tcvefBc/uffw7RsKHf02lObYHfy4mclxZfOqAgC7y6Ya/iPTm4C3E1f1d94JmN NBudv/xMqk+jGBYKKrXv0Im6dO3pqovuUwLswVee/7+KRKkTxaOMHOKZh4U8FGIIziAefTlxOaFQ R5/3K9CGg6c5H9wNQg63WoWzBted9py8QMdYjIJXWp0i2YNt764BxLF07KGH/HTwZPPEsqa0vf8i fx1CdI1nHcQ+/Bir3ncawXsxOLvA4aiwRHFsImJw7Y046E58Q9Vj2E2uOGuWpprun3tsX87KAacX 4/EHsW7B1x9cX88AAEAASURBVB9Q+3FLhTGKbQyav4k61S5BPfy94Jy6Omxaw3X/o9D/rI5CI+ba UHk5OLvMhTxMKLUrZsgTaOzmXRszs63LiE9Axb6Ifw/1CpSAEniFBNKnC/gWbeWKP6jeuw2DPXu7 ti1F6EOxhC5dekg4IjznenzdmVauWBZs/1fVIG5c27eRt2579oEvTpy4XGgjGotMj2neguXk7NGF eUPUMonaw/o6Xtd8jLcawoqnTJ3l8jKtDOD5hNAwJM9fw55rt/15oz/yRSFscg+HPkOwWLvWM7Ev HofLwvMNwueN69cpZUqbF6jLybjYGZ6eUfxx3q//IP4j+0uaMX0yjR8/RsKakTx/y7Z98ky5uATd FUYEfFi8gfCBMF6IU/BOxvsXCtEYg1fU9Gm/ct6+NVIJF/vxLOP331hIf09MP+sSnoaw6zcCvHmt x816eHqezZxcLT29Hld9g9oHcbZrlw7yftDqk3ZUp059KZCELxjq16sWVFePju3/e6+0Q3g3qrcb K168lOTZNNuv6z3ZnD+kS4Smb9i0i9atW0Xjfh4lnoso9pI6TTpJTRDS8bT9m0+gc92SL3SRDUvm op5cGMIU6kBILqxZubx28SyogU0RhuqFsry051gGztUHsQ9CWL8m/L4NBTAIy8qeYzB4giFEt5WH nojuhowby5YT+tZ92xeW7tqZ/UbgunmPQ0dcmBknGRe5gEH8gyAJwWtZn2ZUMGPKQL1wzfCKMwav wZ1D23L+vpM0aul2Ws9i7A/zNknocpOyeU2z17KEmGiu59b94MU5iHnm8yFEwrROs7525759T1J/ ZvYduhLhCQR8Covwl6IXoASUgBIIewJZsmaXCqc4E4ouGG8q5zNfu3aVK6g+ltBOE/Y2avQEQi4p eEEgb5kJCXbuG1rbJuzxjofinQm92rtnp8zdOo8jRwJyn5j9+EPeJMQ/yhUMkY/O+ccqcpl+YbV8 XfNJly69XBLyWEWJEjUQAzCxih5oXIVDeWGrOW8fciXCynB+NPzxX5BDFJETbfSoYQSPPVREzpu3 gLRx94JzmHCzv/7a5q6Zy/0IP35dz6jLCfnvRKGRLzt/RUuWrpEPqqj8ee7c2aC66LEwIACvSuQY RYGOYUN+EO+tokVLSoEcc7py5WyhvAg7N5V7IRJa7UV+T6z9sY5CQLB9e3cHeo+SA/zyOp/nkL7n enI95rpCsoRYBeHfx6cK9e03UN5T0nDxkuTJAsJrQzKetS1C7lGNF7+fKDo1ecosKaKDojv40gf7 jYXme7Jhe/uOZ19GmTmEdInzwJt1FueIrVvPVoXevD+GdCxtrwTcEYAAVYer38L6zdpAq/edFJEN ud+CM+RVm+tfyANVe1/W6nDeOhjCVudusRUIcR4TwSQXb9yR3QhVLsV5BWHwejP7ZccLvKCKLgw5 84wHmhkGIqSzwRMRtu3IWclxaD2OkFXkAISZYhoQ8kx+QYyH3IDOP1ahz4zH3ahSvoy0uFcTeq9k Ttm98dAZczhUl/b3Nw/EO8wruT+zrUf8HOaBqsO4j1bDtaG6L2ztgVPWQ7Z9XNEXBi/RlAnjyrq+ vDkEVOx7c+6lXokSUAKvgABCEnv0+J+c6ejRf6henSoS8mNODZFv8KD+VDB/NvaE2S1/GCO0CXb6 lC1/G9ZRuRKegWFpCKOD7edcWu5ESev5y5b1kQTr8NYY9eMw+yGE7X3W9iP7tnWlcuXqsjl61HDy Pe34IQKhqRstVWat/cJq/XXMB+GMyPWEwhpDh3wnf2Rbrw8ioMlbZfYbsQ+VaP/+e4+IGCYnH/5A h/3M1XVhVaraGMtGEC/ly1eSoz+NGUnWoiX4w79UyfxS2MBVdzyfr+sZdZ4PvBnhKQTBxhhC5c0H YWuRG3Ncl2FLAOzNszVz5jQ5mXNeyFKly4lHKn4H4K0Mkcfk8jOze5HfE9PXLOH9ivdg5J6Dx5Ux CFBdOrenAf17R6j3XE+ux1xjSJamcvJpX1tOVfRF/r6+fV8+HPXZ82fy+4hQ7W96dpX//67ylxKo 0LyVqzbfvx/gJYLzhtZ7svn/7GXTYWBOrmz5siV04MA+h0MmTYf1fWfc2FFUt05lWrxonkNb3VAC ISWAUF4YwnchUqGSalC5/sz4EAaRCy9p/NjknLPNtAnJsgFXB87jnxuv7c+LadyfOwmhosYgnqHQ Rpsxi80uQhVZ5LpDBd4S3cbT/G2HHYo7INT2yq179vZBrVTgHHuoRouKsMMWbbU33XDIl1qOWmDf NisVWYCDdxu81HpNX82fucwRoh/mbuT8dNdFuLLmMqxWwJarbgSPb/LXmV641nUWEQyFKlC512qx OYcfzJsFsbCwhFxcA7bj2DmPhq/qn3sP98qIrbiOVqMXuhyjVmGboDv6jx3ixWlOcprzGg6Ys0E2 W/jk5/d2c0SXbwoBDeN9U+6kXocSUAKvjEC16rWkaACKCOxlD5MypQpKfqpYsbzp4sXz8scmQjHj xY8vuYuKFClO27gaa9cuHWnJkgX8R9cDSWAP762wtLz5bB8k8Qd40cK52OMiOSGpfq/e/VyeFt47 9d97n2b+Po2GDB5ASxbPl6IY+OMqTlzX3/Z9/nlXmjvnd6lGW9GnBBUrXpKQo+8Sn/MvrtqJQiIn Tl12qETs8uShtPN1zAcedahG/N2APuLtieIbefxDHA/wH8AQhdtyJeVveve3XyWq5WbKlMUuFJcp W95+DLn7vv/uW/u2EQbtO9ysfPFld1q4cK7cC5/yxSTMEsVLcP6gDPm1Xtcz6jwviJRfdf+CBg3s J2JRzJgxadXK5fI7VaxYSYcCH859dTvsCJT3qUSzZk23n8BZ7IvL7w+mkAcaIcQX4epWe5HfE2t/ rKdLl57e/6CZhAyPHDGYli5dSMn4fQ3FgfAlxcet2kao91xPrseZgSfbCKGGZzAKBFUoV1RSRyBt AMJ4X9YgujVv8YkU0VnM/0fgx2qojDx8xM/8JYXNezm03pPz5isgQvI3vbrRIhba/Pi9YsOm3YRn LzQMOQ7XrFlBRYoWp2zZcsgXJhvW27yKa9Ssaz/FWBb78H8qONTm8Gg1JfCiBJDfDsUQTvoXj/i4 UvBefTjXzE375ZTvlchJnuQHDG5+8Hwb06YWfTB0Dp1jka7r5BX01dRVhNx1V+/ckyITGKN+8Rz2 obKnSkyTOtajThOWE8JAW4ycL4JdZq4i/JALU0BEMvmU4TEWlEG0fJ89FKdxSPB3LDwtYOEwnncM Ea1M/j1rf3ifdahZjAYv2Ey/rNhFqM6bM00SOnHxOv/YvNq+fq+MQ9VdVOFF6PM5rjxcsvsvVCJ7 WkrB3nEXuMjItqN+co2XpnQXkXDK2r20cu8JKp4tNVe6TUK+fC1r2PsNX3zVKWbzxrTOJzTWC2RM Qct2H6NuU1bSPL5+nHPXsLYSguxq/NZchXfa+n0y/0JfjqUCGZPTkXNXCfn5UBAEhUGs1q1+KZq9 5aAIsOV6TOT2KcgramTaxd6U97g4Syq+193eLW3toutvCAH17HtDbqRehhJQAq+WwIDvhnB+ttmS pw4hlPBIwh9SCFuFGLh02VrKyiG/sJGjxhFyGd2/f0+qsG5hT7kKFSpRz1595bhzAYOoXrYPRl5R HT8gRWYBER4z+IGYGJzlzp2POnTsLO3hhYE/iN2JdmasQYN/pGYftmRxzltEIuSOwx8/y5dvkHBS nBcfeIzF5Vxxq9ZspZr8xxC8SdZyFVn80YQlRKTWbdo7CH3m2szSjIOl2We9brMelb/FdTYvf05W fiGdj/OY2A7pOdEH+eVQQAK58uDJBwEUPydOHBN+1j8W0R5Wq3Y92wq/VqxY1b6ePUcurrybXrZR bMMUQrA3cLMCz8Bly9dRrtx5xYsHAjOEvvQZMtLPY3+Var/o6opzaDyjrsZ1dz5zCV6c89HaJlu2 7PIs3blzm+bPmyU5+xDKjOdr3PipppsuXzGBcuz1C+9VGMI0c+bME2gGVavWtO9z9bzj4Iv8ntgH 9V/5/ofhIq6byqlbtmyU6rLv1m8k+9EsNJ5njPMq3nM9uR7Mxd3vl6s5lmRvY+S9jBMnjhQBWjB/ toQ9gwsKUVjfMzF2SN7z8AXCsj8WoZv8/4Iw3rG/TJH/z3LnyScexJ+1+5jP90TahMZ7MgbC/5d4 L4OAgJyEDx4+sF9HSOaPsVy1b9K0BaVOnVZyqcK7GEJfsuQpaOSP4+RLMvSDZeYvaWDm/3fZ0Jc3 ikA0FkFgXpznzZVF9d9vClO4amPdZ9p7ufjcZsJ24dHnXCnVnB+ijDFUzIW4BbNWvjXHXS3NPM11 uWqD6sDbBn5CH5bPJ8IP8vHB4xCiUabkieh/jSvQz+1qO3Sty2HIfw1tQ824D0TLZ8//E68xeNbh U2IhrlI7uEUVasp5CIOzka2qE1jAc+6fc1ckpLc4581bP6ClhJZG4c+9kWRU20jfNCpHo1rXEEEP XoTINwjRFHP9rXMD+rxWcYdTQjzcwteHOT/la0OlYIh6WMaK5kWfVS8qQh86tWCPS9wPhAlP5Kq+ EPogDI7j6y+bM519XHM/TTVfcwBzhYCKH6x7YuALhnh/2370LD148lQ8J931hai6pFdTuV54RG44 6Ct9e3PBmO+5ujMsCntLGksc15u2DvqEKufPxCVD/iOE/6IP/p5oyJ6dW5mN8S40fXT5ZhCIxA+V xfk14KKePn1OV645uuIHHNU1JaAElEDEJ5A0sTcLVM/p2g3XSX49vUKEQMLLwIs/MCRJkkxCYV31 RYgvKq8idxKEMLz9whsFf5BZBTSEMD7lRMImhMg6FkKxYOjvqaFqsJ+fLyVgjwv88eKJQbjz9T3F XnopJBk/+mBeuFZ35xYOfmeksizOldRNFd7bt2+LAOj8B6e763bXHueD5yCKBeADi7N5Oh/nfth+ 0XOavjbhNxqLf6kkh5+rc2Af7j8EVGuYGPaD/32+bzFjxXL7PKGdO8O4KKYArxfnYh3uOGOsl3lG gxoXPOGlZwRaM28IAg8fPpTfAbMPSzzn8PLDM4L8ls58rG11PXgCyZPGZs5P6catgPDo4Hs5tsC9 esAhmrE4rNr5d9e0xHsNzNV7l2ljlngmPP09MX2sS7x/+vH7DZ671KnTuHxfepnn2ZzrVb3nBnc9 Qf1+uZsj8sae9fOjaNGjiciHa8I4OBe+pLKap+95438ZQ316fyUFWH6fudA6BF3iiu4F8tsqiW7a sodQqdlqL/OejHEwb7yvIVQYXpGm0i6OeTp/tIW5a49nEmHh8RPw/2HsNer8fwvem1GF3hRXsY2m r+GBAKri4nPd4+Pb6dGeF0+T8pCFlucsXAXlkYbqrhBTrJVXg2KA9qg+7yo3HMSaGPz5EaGszgax LTrnmDPHJq/ZSx3H/8EeZ4lp++A2zs1dbvOvjYTIenMoqqeegAiR/ZfDcFG9NT4LZZ4Ywkgh9EGk hFcg8uKF1JBz7hR7taVIEMdeeCS4+3GdQ4nh0ZaGz4lrDM4QMn2GKwljvglix3DwALT2hZfjTS4a YtpAvLMa5vWM5+vqnPfZWw4W1DNkHQvruE9nr94UT7v0SRN4/GxduX2P8HylS5LAPuRtnjc8/Jzn jAZg7HflljwLEDWdLss+hq6EXwKR4yUl76rtPZqgin0eYdJGSkAJvIkEQkvsexPZ6DUpASXw5hAI DbHvzaGhV/IyBJArEWke4CGIohz4ssXYvLkzqUP7T8TD/fjJCyzuB/+Ht+mrSyXwsgRCS+x72XmE Zf+q304Vr6y+jX3oi9qO3mtheV4dWwkogfBDICRiX8gl9/BznToTJaAElIASUAJKQAkoASWgBF4R AZ+KlWnkiEHiYVe0cE4O6c5NSTi0G/kB9+3bLbPo9tU3KvS9ovuhp3l7CMADcBuHeCJsFKGXakpA CSiB4Aio2BccIT2uBJSAElACSkAJKAEloASUABdfKUAzfl9AY0YPp21bN9NmzkELQzqKQoWLUsuW bahuvQZKSgkogVAmECdmdDo0qr2EyaKohZoSUAJKIDgCKvYFR0iPKwEloASUgBJQAkpACSgBJSAE UNUdP8jBd/PmDfY0iiqV2xWPElACYUsAVVPVlIASUAKeElCxz1NS2k4JKAEloASUgBJQAkpACSgB IYDiFagYrqYElIASUAJKQAmEPwKBy/6EvznqjJSAElACSkAJKAEloASUgBJQAkpACSgBJaAElIAS 8ICAin0eQNImSkAJKAEloASUgBJQAkpACSgBJaAElIASUAJKICIQULEvItwlnaMSUAJKQAkoASWg BJSAElACSkAJKAEloASUgBLwgICKfR5A0iZKQAkoASWgBJSAElACSkAJKAEloASUgBJQAkogIhBQ sS8i3CWdoxJQAkpACSgBJaAElIASUAJKQAkoASWgBJSAEvCAgIp9HkDSJkpACSgBJaAElIASUAJK QAkoASWgBJSAElACSiAiEFCxLyLcJZ2jElAC4YpAzerlqUD+rHTq5IlwNS+djBJQAkpACSgBJaAE lIASeFsILNj+D2X+dAR1mrjc40v2/fcG3XnwyOP2wTUM7fGCO9/beHzQ/M2U74ufaOq6fcFefoVe v1K2diPpxMXrwbZ90xtEfdMvUK9PCSgBJRDaBM6c8aVr167Snbu3Q3vot2q8pk3q09UrV4K95siR I9PU6XPonXcS028zptDUKRPtfXAsbrx4lC9fAfqgcXNKmzad/RhWTHu0K1W6LPXo+T+H484bDx7c p05ftCPf06fIyysqDR3+E2XJks25mW4rASWgBJSAElACSkAJhCKBpTuP0qAFmz0asVbhrNS1Xim6 evseXb55l85d9ewzef/Z6wnCUYGMKWj9gJYenSuoRqE9XlDnepuPQVA9dek6nb1yK1gMaHv19v1Q FXSDPWk4baBiXzi9MTotJaAElMCbTmDXrh10+1bw/2mDA0Q42Io/l9L+/Xtl3fqyccNa+mXcGPrp 50lUtVpN+yFr+337dlP5CpWoePFS9uPOKxASFy+aZ9+9/++9KvbZaYRspf1nrej+/Xs0jAXT+PET hKyztlYCSkAJKAEl8IoIrNx7gsav3E3VCmamlhULvKKzvlmnCQ2GZ6/eon2nLnoEJkfqxB61c250 7+ET2fX4yVPnQy+0HdrjvdAktJMScENAxT43YHS3ElACSkAJhC2Brdv+psePAsIoxo4dxYLdaCpZ sgyNGj3efvJI7JWXNGky+zZWPmvfiTp06EwPHj6gvXt20bd9viY/P1/64otPaXvxA27FpWlTJ7kV +/777z+aMjngvA4n1I0QE1iyeD49efKEevce4PZ+hHhQ7aAElIASUAJKIJQJ7D9zmVbsPU7xvKOr 2PeCbEOD4ceVClKdotkdZoBwTNjsbo0oT7qAz4LxYkV3aOfpRo8GZcgnbwbKlurFxELn84T2eM7j 67YSeBkCmrPvZehpXyWgBJQAE4B3GkJ7IRZ5YpcvXaSbN2940pTu3bvHItYZevw4QBRz7vjvv5fp 5MnjdPu2ZyEMzv2D2n7+/DmdO+dHFy+eD/b6QnJdOGfChIkoWfIU9p+4cePJVGLGjGXfh+POQh8a xYgZU8J3cQyefFOmzZa+uBcb1q+RdetLlao1ZHPZH4vo+vVr1kP29XXrVpGv72lKkyYdFShQyL7f 1crdu3fp9KmTcn9cHXe37yGLkzjH2bNnCGw9McwXfZ49e+ayeUi5uxrkyZPHMidPn2FwPn/+bLDP hKtz6T4loASUgBJQAhGVwNNnzzmc8AbduPsg0CUgnPT4hWt0+777z2zOnR4/fUZ+V27y/6fORxy3 7z54TCc5jPHew8eOB1xsPefBzrGX3M17D10cDbzrFrdD++DmYHoGxcC0eZFltKhRKEXCOA4/kSJF kqGSxo/tsN87RjS3p7h44w6BlyuLEzM6VcybkVIliuvqsPTzlDMGCO3xrJPC/Th37baEpFr3O6/j fp/59ybdf2TzWnQ+/jLbYOnqWXc1ZnDPxUP2pkSI7bPnwTzsPPgT/j3z5PfC1Tyc9+H5xnk9fb6d +0fkbfXsi8h3T+euBJTAayVw6eJFGjniA1q5YpkIN8gdV6tWPfru+2Gc783LYW4Qefr3602LFs6V fH84mCJFKvqkdTtq82kHh7bYWL5sCQ0Y0FsEJQgw0aPHoJq16lLffgMpQYKEIlgNG/oDwXvqypV/ 7f3z5StIA74fSvnzF7Tvw0qObGno7t07tHnrPhaz0tqPXb58iYoUysHzjUbHT14k86EKYbMD+veR nHeYOyxJkqT0v74/UJ2679n7h/S67B1DeSVr1uzC5caN6yxMXgg0OkJ3jx39h05zLr7Zs2bQp207 BmozeZLNq69ps49oxYo/Ah3Hji1bNtI3PbvSkSOH5ThyAZYrX5F+GT+NYsWK5bIPdv65fCmNHfsj 7d71l120ixXLm1p90pY6d/la+JvOs3h+nT7/lLp26yWi8MQJP8vzVblyNZo81SZqviz3IoVyynOz c/dh6vl1Z1q9eoWESseJE4dafmw7N67NahAEBw3sz8/wPBGAcczbOzYVLVaCvv9hGKVObXuuWrdq RuvXrxavPrSpUL4YReUP8JGjRKG//jokIi32qykBJaAElIASeJ0E/j59iar1nUoPH9tCOuduOUTL dh+TKbWpUpj6vF9e1nO2H0VXbt2jlf9rTs1GzBNhBZ+XkPMtTeJ4NHDeJpq/7TD9y22MISfc0I+q UsFMKcwuh7EOjelAXSb9yR6FJ0SkgWj0adXC1LNhWYrsL3Chw8ZDvtRt8go6fNaW4xjHfFismtap PsWKbvusOX3939Ru7BL64cPKLD5FowFzNtCF63fkM13WlIloCM+jTM50cn7zApFxwOwNNHfrIUL4 LAwCWgn+vDj846p8XfFNU1m6Y/DLZ3W4OMayYBk6DBZGGwt3/EO9Z6wVYQf3J0/apDS+fV324nvH fsbfNuyntszq3WLZ6dfP37Xv94SzvbFlJbTHw9DXWUjuPmUl/bHrqF20zJQ8EfV+vxzVtXg+7uWQ Z7Tb73tJniFcM57HDjWL0SeVCvH9J9pz8gKV7/UrxeZ7e3BUe0oQO6Zl9kTf/r6Whi3aSnjeB39U RY494N+HPr+tkWcDue9gEEfbVS9K7WsUlW3z4u65wO9G/gzJpdnWI34yz0N+/xIEwZjRolLRLKnp x9bVKV0SxzQvl1gwb/vTYtryjx9BHIzvHYNasccn+oXU8DswmHNALtt1jCCIxuOx6vF9H9qyGnlF sX3G/WDIbOZ8jDrXLWn/fTfnuXbnPuXpOIYePH7C7DqI2GyORZSl4yf5iDJrnacSUAJKIBwQ+KjF +yLiZMyYWbzB4O00Y/pkat/uY4fZPX36lOrUrkyTJo4V0aZ27XepYsWqdOnSBfrftz1YBPzGof2U KRPo45aNpdovvMyKFC3OYklUmjd3Jo0ZPVzaQujDePfv3xexqVr1WiJ2IS9diw8b0p07dxzGRDvM w9lD8OnTJyLKILea1aurf99vZHwIWB80/pBq1qwrXmxLly60jxvS67J3DIMVeL09fmz7FjdZMtuH C+tp8AEIBTxg06f/aj0k6/CeXLt2JUWLFo3e/6BZoOPYAW+85s0aitBXqlRZgiiYPUcuWrtmpYQQ u+zEOyFA4n7+tWMbZc6cVVgWLFhY8tn9OHKI5Bq09jX5CUeOGETjfxkj9z527Nj00D/kOTS44xyP Hj2k6lXL0ZIlCwgiX6pUaeS5GTliMEFgtBrCcevVqSLPH7w8c+XOS7gG7Mf1V6xQXIRp9HkncWJK nDiJvTvEaWwnS5qcojqJ4PZGuqIElIASUAJK4BUTiMliWdJ4sUXkwqljsAiRhLfxk9AiiuCPfQgP 9b7/XYQ+I5hAMIPQN/bPnXSPvaogwqFwRMI4MUVkaTR4VqAiAWascj0mESrJQuRL/U48aQdhYuzy nXYK8GxqNGiWCH1lc6Wjj3wKUK60SWjVvhMsaN20t8OYsO/mbqDPxi0Vj75CmVJSDK8odOTcVar/ w+8yH9MBXlNVv51KwxdvFVEwL4fHFs6ckgWVZzJ28W7jxYvQtMfSzNuZQZTIkTxiaB0rLNZXMpMP h88Tb7CcaZJQtKiR6W8WwWr2myb3zpzz3qPH8nn3rn/uPuz3lLMZw7oM7fHgnVfm64k0a9MB/nL4 OYtiqShzikRcWfYatRgx3+69t2jHEar4za+0/ehZeX4h5qZkr0h4+EFE/nLScplm9tRJ+LiXPF/o YzXWv2gmnweG5woGUa1yn8nyTEMge7d4DqqSP7M8Jz2mraLeLAJazd1zgd8NGJ7xGn2nE4R1iH/v l85NSePHofUHT1Npvk6Ie8ZQIbk8/16s2X+KnnL0C+4jPFmHLNxin6dp68kSQh6KvoBf2iTxCR5+ k9fspVajFti7F2G+MAjmzh6H4IU5JU8QR37snSLQinr2RaCbpVNVAkogfBGA997goaOpYcPGMrER wwex51M/giB26uQJypAxk+yfPm0SHdgPj7p0tGjxSkrqL0YtXDCH2rVtSRPG/0yffNJO9t+6dZMG ft9X+sH7rHefAbKOsF+Igqn9vfIKFy7K4kxq+rB5K7tHGcJ5y5QqIB5bmzetJwiAL2p/cLgrbAp7 khUsVETWIVpdsnjNheS6ZIAwfEGuv3v37sq32Hny5Hd5pgZ8n3B/cG+2bt1EJUqUtrebOnmCCLFV q9WSqr/2A5aV9evWiEBXtpwP/T4zQPTctXMHZfS/15bm9lUIphAGITaiarAx3M+fxoygBfNnSw5C s98sIV6iEvDMWYsoMXtVgj8sNLlfuHCOBg4aSU2atpCxP23dXJ5f5Db8pPVnsg8vM2ZMpj2cGxGi 4NTpc6lo0RLYLeHrjRrUErHz++++pV8mTBPPVhxLmzqhiIHz5i+jdOkzYJeaElACSkAJKIFwQyAL iwB7R7QTMaHvzHVUk4W6CewJ5s7g6QPvuXbVi0hoJbyOEP4KsQ755oynHcJ5C375s3j6rT/oKwKg 85jnOTxzRKvq1MLH9pkFQg480yat3i3jo/3qv0/ZRMQ8GWhBD9tnTezfcewcZUqeEKsOhvBhiEPT v3yPBZXYcv7yPSeJ597oP3bQpI71pP3kNXto14nzIjTO6d5IvPlwAKGOtfrPEMHof7+vo6nsPehs rhi8VyKnxwydxwutbXxhnY/FpJldGooHFsSl8r0mCQN4btVn0cqdhZSzu3HM/pcZ78cl20R8TMb3 b1mfD+33GR6gQ1gM9uJICQjPX09dKaGuYD+2XW0WN6PI6b+fu5Hw8+vqPeIRB8GsTpHsNGPD3+J9 ap43NN521E9EvOgsChuPwUn8bIAdxDF4skLogsHrtSWLZD8v/4vaViti3y8H+cXVc4F59mSB8BkL d/CShfccDJ6DlXr/yh6Jl2nogi12j8KJq/bQ+eu3xQNvxbfNCUVYEELcctRCWvP3Sekbkhd4741q XZMal80j3VCFGdWTF7KId+LidWHbqFRuwrOO39mNh05T+dwBn1fnsdcrrGGpXOIlKRsR7CVyBJuv TlcJKAElEG4I9Os/2C70YVIdP+8iQhE+cFjDQH/7barM+fMvutqFPuyoXqM2IT8dvO1277Z9k7tx 4zoJ3UQ+u+5ffSP98IJqpkNYWGzO4h4MobQQA62howizNSIM8uy9jMETDnbw0H77MPDQgiebsZBc l+kTWkuIpwh3/emnkdSieSPq17eXDN3io9Z2kdX5XMjvV8GnsuyGmGUMHm6//267R81b2PiaY9al YQK28OI0VoiFV4RBuzOEYENQswp9aFu7ji18xN29Qpjv5CmzJH9hFA6BfecdWzLp0OTef8BgavZh S0LILn4+bfe5XAY8Ha02edIvsvlxq7b2Zww70qZNR1269pBjy5cvsYfuyg59UQJKQAkoASXwBhGA Zx2EPtg7cWNRVBYT6rPYgrBJI/ThGIQ2hMPCzl4J+LwgO/xfBnHIJCr/IiwXPx1rFZMjZ9ibz5j/ RzHyY0ERXknGIOgZccfswzJDsoS04OvGcn5sJ4nnTV/ULo5Ve3gy1sev3IUFizaF7fPENkIqezYo i1Vawh5R8AB0NlcMnNu8ju2MfO1Lejaxh1rmTZ+MyuVOL1PxvXwjyCmFlHOQg/HBlxlv/vbDMjye KaugWyV/JlrVt4WEny7ffVxy+SHsevjH1Ryeha/ql6H0SRNI2OpC9qqDQayCbTp8xiHUfME22/Gq BTKLwIY209buw4K61ivlIOjVKpJNnvFHT57RzuPnpY31xdVzsZY99JBzEGJ4pzq2L4nRB2G8tVmA hG3+J+Dz5tytB2VfmyqFROjDBrxoIeDCUzWkht8xI/Shb5d6JSkx/07g7zQTro8ckeVZTIfN2mw7 P9bhcYhQYhi8ESOqqWdfRL1zOm8loAReO4G8+WzfxpqJQCxB/rI/li6iCxcC/iNEIQfYnyyG7N+/ 1zSXpZdXVM6VxiEEfr6ybdoWYm86iETB2fHjR+nwoQOE3Hso5nH2rO0/JhPSGlx/d8er16hDv04a R19370RrOZ/bRy3bEDzajOCFfmaunlyXu/O86H7kScSPMYTftmLvyK7deppdLpdNmrSQfsuXLZa8 hxBVFy2aL15zCLFFbj93Vq68j+SoO3niOJVmD0rktmvcpLlDyKq7vtiP0Nnt27fQxQsX6OrVKwRP TNgjDilxZfA8dOURF5rc8zsVIoG3KAwCNIqQIHwYhUR8fU/Jfh8OP3c25CyEIZT6HD9/6TNkdG6i 20pACSgBJaAEIjwBq1eU88UcPX+VDnJVX4gEdzn0EKGhsEecQsWVFXYSLyCIwCCmoLhEbM69h0IS EHRQ9AOegm04p1/zCvlFxHM1ZmbO64Z+ViuZPa1sIjwUXlLIW4YCIzCEZzobKtXC4I2Fa4CIZrWg GFjbvep15LTDtVktjT9TeJ0FZSHlHNRYOPai4yFs9rS/MOmcY9F6ToT0woplTR3omiE0+rB4NWHV bjrlPxZCwOGhh2Ib8B5tXbmQTQzkdRi824yd4CIwMIS/7uOcgFaDuA1DqLCzuXou4D0He8Qefggt tpo5Zg1H9/MXxq3edegDz0PkXYQ3akisQIYUDs0hqpfIlpoQngsR0liTMnnEc3DxX0dYPK0uYuQi FkpxPyAaZ00ZkPPR9IkoSxX7Isqd0nkqASUQIQjE9o4j80RIKQxhuWZ91SrH/+ikgf+LyTNnvLwS Jgz6PxaEdDbn3HwIIQ0L692nv3h6TZs6kTBv/OTMlYfG/DRRQktDel2hPceSJctQmbIVJKw0XboM lCNnbikgEtx54NmHMGpUsDWFOozXGjzcgjLktPvt9wXU+cvP6MSJYzTwh740fNhAat+hE3u3BS0y /jZjCvX+pruEAQd1juCOhTX3GBaB2eRwvMKipBGPrbn4zFzh8WnsJj/vakpACSgBJaAE3hYCKKaA vHoIrX0Zi8Ff/hr7j/6TVQiAC77+gNpzHr5jLPj1m7WeBs3fRJ1ql6Ae/h54po+7ZVyL+Ie8ggit NPnU4PnnbAljx7Lvunk3wJvQvjMCrUT3Z8qaTZAWGpytJ3jR8VDgBWIvLFEcx0Ia1vFNQRVX9w/t 4saKLs1NNWaIXO+VzEmjlm4nhKZC7IPXGkJXEYpemb0GYWhvqj3/uee47HP1YkJ7XR2z7jOCGq4L 4qMrgxcsDKG9Zr6J4gQ8g676vMy+2DFsbMx1YqwaHL4PZgiDX84FepCnEIVrYB+UtoUAy0YEfAl4 V4mAk9cpKwEloATCG4G792yFMRIlsol1ceLElaIPEEvmLVgeqEou5g+PwGjRbP/5xIsXXy7p+o1r QV4acv1JrrhMmalLlx4SXgsvrB5cWdXq8WYGMR55j/2LPJj97pbwKuzXfxALWV9K0ZHx48fQoYP7 pUDFlm37WGQL2XW5O8+L7i9WohR16Ng5xN0RDosci6N+HCqFOooWK0koahIjRkze3yTY8QoXKUYb Nu2idetW0bifR9GmTesJxVJSp0lHjRq57r/zr+3UtUsHCRuA92GdOvUlB9/582epfr1qwZ7T2uB1 cE+QMKF4dEL8u3UL3gA2LwEzr+vXA57VpEmTmt26VAJKQAkoASXwxhP4+McFIvShCECP98pwUYGk 4l0HTyYTKvgyEOC9tXNoW87fd1LEGhQ2+IGLgiCnWpOyeYMd+iYLGMYQehwJ/1j8wf/pEFcc/0e3 5V4z7ZMmsAkxZvtNXr4sZ2c2LzJevFgx7PfmGovIqfw9E53HNmLYzXscGuTCbvnf82SW+4dQXoh9 24+ek7x4qB4Ng7BlQsIheGEdYvCyPs2oYMaUgUaHcAhPO08sMT9vsPIcTj2zayOXXcxYELvNuW/d DzuR+e5D2+/DOxZBEWHF4IDiHbM5lLcIF6v5i0OVo/DfZ/VLuM/16PKCwtlOmy9mOJuUTkcJKAEl EBEIHD921GGaqJK6fdsW2ZcqtS1XC4Q8U1Tj6JHDIipBWLL+GKEPHVHEA7Zv727Of+Y6vBM55rZu 2SjtRo2eIPn7UMghRYpUHHZp8yyUg5aX+AkSyNYFS4EN7Dh82PbNlaWpwyry3H3Z+StasnSNfAA5 c+Y0nTt3VgTKkFyXw6CveQOFMvBBF4U62rezefPV5RyIcePF82hm6FuhQmWaNWcJ1a3XQPqY++Fq AAiD+FDt41OF+vYbKAVP0nChleTJHMMLXPV13hfS58m5/4ts4/k0RWU2blgXaIgN69fIPuSfTJ48 4IOhEZhv33GdryjQQLpDCSgBJaAElMBrIMCRj2Lw7AmJwUtu4yFf6TL+szqSvw/hhqkSxQ0UThuS cZ3b8scOqpQvIy3u1UQ8tHB846GAXGemPcJuEa5rtfUHTssmvMAgqEBcSe4vAq09YEvRYW2PPGsw 5CBMmTCu9VCQ6y/KMMhBX/FBTzl7Oq2QjgfRyXjrbT9y1u1p0rHQC9vGbfAMWg2hp+v877k15x8q LuPZxOfROZsPcSirfwivJR8dhDyIyLDDZ69IOCvmZP0x4pz1nO7WM3DuQBgqQiME2DqOWcc5YVgk 5/x5sK1H/GRpXlAhGKHsITWE1lsN45g8fKkTO37mN8I5Kl1P5OIm4IScj8bz0DpORFpXsS8i3S2d qxJQAuGKQJfO7WnJkgX2OY0YPpCuXbsqnnxVq9Sw769cubqsjx41nHxPO36wevjwAW3csNbetnSZ 8hQ1alTJ5waPMWMoCIHzDejfW3KoIY8a7PSpE6YJrV+3mr36/rBvW1dS+4uPU34dL7nVcAwiFKqv OhtChKdOmci55AK+WfP29haBDG1NUZCQXJfzOV7ndrp06e2VeE/7349mzT8OdkrLly2hAwf2ObQD F5hh4nDQfwMiMOy0ry13I9aRv69v355YDbG9Du7VuEoxbNzYUXSERWtjvr6nacjg72QTFYeNwIcd Jrw3rELNzRx0qQSUgBJQAkrgZQgk9A+ZRBVSE0bpyXjPn//Heb1sLU/65zrDFiqHhoZXH4pkYE5W i805/GDeLMY52z/nrlCDgTPtxTxQKRjVXWH1igV4KNUqnE32oUIvRB1jyBc3YM4G2UQONn8dxhwO chkcQ5yryrdTaJ6/R1mQg73igyHlHNz0XmY85PuDjeT7hurIxuDZWaDTz5J3sSILvxBu4ZnZa/pq FqZMK6IfuBLvKX4WIdY6F5Zo6J+br/dva6SadJrE8alYFluuZjNCNS7WARuxaKs9t6M5hlDbdS4E YnPceVk6ZzrJOYlcgd/zc2WdJ9pCBLT+3lT1zyE57s+dkl8QbXDOVqMXvlCYPMLfF/gXKcFYCIG/ evu+eBDWKJQFu+yGojfIT4miNEMX2hw3PrAIofaGEWxFw3gj2A3T6SoBJRB+CESKFJnafPIh/ZA+ g1RjPXbsiEyuabOWdk8o7Pj88640d87vXLTjHFX0KUHFipck5Oi7xHnj/tqxVQohnDh1WQQjCFHv f9CMpk/7lUaOGExLly6kZEmTS2GPO3fuEKqhwoOqSJHitG3bZg4P7SiC4wOu8rF503q7kOdMqXHj 5hL2u2bNCipbphBF4+qxEG0gyEB4stqZM770VfcvaNDAfoTiCzFjxqRVK5eLyFiMw15NVdiQXJd1 /PCw/kHjD2mLv3dkrtx5XYZXO88TeffAr0jR4pQtWw4CJ3i1QeCqUbOuc3P7NgqbjB41TDwJK5Qr KiHXf+3YRgjjfRF7Hdw7fdmdFsyfLYVFqlUpS/nyFyCvqF60Z88uyUOYMmVq+qJTN4fLyZuvgISU f9OrGxdBmUd+4LVpN8WN67mngMOAuqEElIASUAJKIAwImET+ECVydxhFydjDqCwLFf2a+AR5Nggq xTnh/2auctrxlz9EWHjAnnXrD/pKgYsgO3twcMravbRy7wk5R47USQhVZdew5x0+d9Qplt3lCKi4 mvnTEVJYAAVDkKcvTszo9mq/6NStfimaveUgXeFcauV6TKQCGVPw/+mRaReHLqI9wke7vVva5fju dgbHECGk4JuQq6vW55DJ8GQvwjmo+b/MeN353iCvHvLdFe/6C+Xne3ONBSoIucbgcYlqvYMXbKZf VuziPHPHOXw8CaHohSne8TWHlDvn1mvIefuQ9xFeazBsOwu6qMI7c9MBOX/J7r9QCS7wgoq1F67f oW1H/aR4zKUp3R2qT5t5OS/hpYjxvv19LQ1hAW3prqOUL31yaQYRG9fUka+jf9OKsq81V+Gdtn6f nKvQl2P5uUwugiByC6LwDArXhMTgNdh8xDz6H4t40fj5hrgIQxVsZzbYj8q94AODmF6Tc/lFdFPP voh+B3X+SkAJvHIC8LxD9dc5c5dSRs6ZB+8wCH3e3rElxx1CNa2G8NBVa7ZSTRaE4OW1ds1KgnCE JYS71m3aO3iGff/DcPr8i672yq8QpVCx9d36jWQ/xh45apxUjr1//x5X+V1KWzZv4NDSStSzV185 NeZotUbvNxUxBrn4EL6K+UK0Wr5iowh+yGVnvLKyZcsuc71z5zbNnzdLcvZdufKv7Bs3fqp92JBe l72jmxUwhXlFC/xtteni5d8GYqUnFtXLNpaX/9L0qVGzDpm8ii250rCzmfGt/Zo0bUGpU6dlgXab eD5C6EuWPAWN/HEclSpV1nkI+zaKiSD/YZw4cURghWiGEG3cQxT9cL5XENFgUf0TS9sH8l8JDe52 Lv7nMueIzM8BQoXxg2fCGATeNeu2SSgyPiTu2L6VNvMzF4XDMvBcrl671e7JZ/rgWURlXrRH3sIH 7MXqfK2mrS6VgBJQAkpACbwuAqi42bluSYI4gGq6qEJqihxgTl7+/x+aaqTWeY5rV5tK5UgrIhkq mG7gsF6E3P6vcQVpZvqaPmbbeSzkB8P58YN1WAuuvAvvK4RrTuQCBxD6ILzgnBAjnQ1VWNvXKCpC IwqG3GevKIRvrun3EZlqv+iTOK43bR30iRRmQDEQhE1uYIES//cjt9vWgZ+IKGcd3928TZvgGGZJ mUiaZk+V2HTxaAmRBubFueRcmZkXxEpn8+LPKDDrMVftQ8rZep7QHi9dkgS0dkBLuW+4fxCSIYrB 6+zXjvUoAYulsG8alaNRrWuIaIWCHSioAS85VCX+rXMD+rxWces0ZR3PUrlc6WQdz98HXIXW2VDR eAvf/7pFs9NTjiJCWCvESyxj8efzz6oXdRD6zPU7P89m3C/rlKCJHeqKgAyxDUIiflBwBkJ5XYto jbyXS3o1lWu48+CRPJP4DNn7/fL0fbNKMiQ+dwZnUfk5Rv6/Jd80JYwJT0ecG5WtMZ8fmld2OQR4 mN+9mkWyOVynyw4RYGckBmhx/AyY8dOnz+nKNUdvj4CjuqYElIASiPgEkib2ZvHtOV274TrBrbsr ROgtDHn38BZ6ikNpo0SOQmnSppMPSu76YT/Cb/38zhDGSBA/gYMHoHM/jI22CKdFGC6EQWdD2PDV q1c4119aOY4+8ACEsGTEO2sfiI3IuwehKz6fH2a9HmtbePzBew0CDfIBBhWqGpLrsp7Dum7mjtBY q9BkbfPs2TOubnzP7fVZ22Id1wuvR/BwtidPnjDbR5znMHACahx7+PChy37wyENYNfIgJmWvS3w4 9sQg8J3186No0aOJyIc+uLe4bjxLVrt9+7bwDk4ce1HuOO9TTsBswpCt5zaenq6eN7QD03Nn/QjC IJ5LV8+ZGQ/Xdu6cH3v/3ad06dITxGa1V08gedLY/Dw/pRu3AkLzX/0s9IxKQAkogbAjEDlyJMLn usfHt9OjPa5TmgR3dlTo9P33pggqENWMIS/aMw7vg1jgzhAeeOX2PUrLggo8/vi/P4JgAa861u/s FtRYJt8e+lsN4bgotJEgdgwRdyAIWm38yl3UmQuCVOEwyDndG0l453n2DEPuQIg3QRnymPlducWf YyOJsOg0tL1rUPO2N+IVdwxxnrvMF9VfQ2I4L8KlnZlYx0CuRRx3FpyQvw7eYPAKszJz1z44ztZz WtdDezwzNp4f3Jt4XDjDXbEOtEVFaHi/pWGPzKCeUbQ1z2U0zt1orQCNY84Gfmf49wGhtObZc27j 6XOBfuAEYRJCHK4HefvcGX6X8CxB/DSG/s730hyzLjFfGMbH9cLbESJeuqTxHZ4Dax+sg2PWtiMk lH9hj8ZUgcXz8GiR4yUl76rtPZqain0eYdJGSkAJvIkEXlTsexNZ6DUpASXw5hJQse/Nvbd6ZUpA CdgIhIbYF1FZOot9EfU6dN5K4HUSGLNsB309dRUlix+b/vnpcxHAX+d83J07JGKfZ+4I7s6k+5WA ElACSkAJKAEloASUgBJQAkpACSgBJaAElEAEJTB5zV6ZeQMOZYen65tgKva9CXdRr0EJKAEloASU gBJQAkpACSgBJaAE3joCJnw1apQ3Q6B4626gXvBrJ3Dq0g06ev6qhII3dpHL8LVP8AUn4D5Q+gUH 1G5KQAkoASWgBJSAElACSkAJKAEloASUQNgTaFGhANXmggLID6imBJRAyAlkSJaAzkzozLkfo1F0 zmf4ppiKfW/KndTrUAJKQAkoASWgBJSAElACSkAJKIG3igCKaiSKE7iI21sFQS9WCbwkAVPp+CWH CVfdNYw3XN0OnYwSUAJKQAkoASWgBJSAElACSkAJKAEloASUgBJ4cQIq9r04O+2pBJSAElACSkAJ KAEloASUgBJQAkpACSgBJaAEwhUBFfvC1e3QySgBJaAElIASUAJKQAkoASWgBJSAElACSkAJKIEX J6Bi34uz055KQAkoASWgBJSAElACSkAJKAEloASUgBJQAkogXBFQsS9c3Q6djBJQAkpACSgBJaAE lIASUAJKQAkoASWgBJSAEnhxAir2vTg77akElIASUAJKQAkoASWgBJSAElACSkAJKAEloATCFQEV +8LV7dDJKAEloARejMD169eoXJnCVKliSfrvv/8cBjlzxpfu3LnjsO/Zs2c0YvggKlk8L6VLk4iK FclNe/fuljZ3794lX9/TDu1DsrFkyQLKlycTfdX9C4+6hbS9R4P6N3rZawnJuZzb1qxengrkz0qn Tp5wPuRy+3XO1eWEdKcSUAJKQAkoASXw2ggs2P4PZf50BHWauDzYOQxZuIUSNvmOWo5aEGxbbRA0 gWt37lORLmOp1Ffj+TN10G1f5uiz5//RoPmbKd8XP9E7Tb+n3B1H0+4TF15mSO2rBBwIRHXY0g0l oASUgBKIkAQePLhPx44dkblD7IsUKZKsDxrYT0S9fPkK0rI/19uv7fffphKOwVKmTE2XLl2k06dO UJYs2Sh3zvT06NFDmjZjHvn4VLb38XTl2rWr9O+/l+nC+fMedQlpe48G5Ub37t176Wvx9Fyu2kFk xbXduXvb1WGHfa97rg6T0Q0loASUgBJQAm8RgR7TVtEfu45Rt3dLUZOyeQNd+YXrd6jOgBnkFSUy bfy+FUXl5auwq7fv0eWbd+nc1eA/R5y8eJ2ePntO568F39bd3P8+fYmaj5xPMaNFpZldGlLaJPEd mj7nz5f1f5hJpy5dp14Ny1KDkrnsx9v+vIS2HvGjuLGi06KeTShh7Jj2Y9aVSav30OS1eyl61CjU o0FZKp87vfWwrKPNLyt2UusqhallxQKBjmPHkp1HacWe43TgzGX65+wV8uLx0iSOR6VzpqOPfPJT 9lSJXfbzZOeDR0/oyLmr0vQ/4s/U/C8sbOq6vdR/9noZOtU78ejSjTt0ktkWzJQiLE6nY76FBFTs ewtvul6yElACbw+B+/fvy8U+fvzI4aLnzv1dttu2+5y+6d2f4FUWlT8oPX70mJ48eWzr88ixj8MA EWDj2dOnYXota9aspCm/jqdKlatRsw9bvhSRsJ7rS01OOysBJaAElIASeIMJnGCh7PTlG3T2yi2X V3nv4WM6et4m/jx9/vyViX0uJ+NmJ4QiWI7USdy0CH53lpTvEK4VYt6wRVtp5CfVHTot/usIrfn7 JEWJHJnyZwgQpM5evUW/bdxvjyyZt/UQfVK5kENfs/EnC3T7Tl2UzU9GL6R9Iz6j2DGjmcOyhOB1 mAU8LJ3t6u377Om4jBbtsH3BjeMQXx8+eEqH/P6Vn1/+3EmzujWiKvkzOXcPV9szNx2Q+XSsWYz6 N61Idx88pij+QnIrZnOfRccxbWpSAjfCabi6GJ1MuCSgYl+4vC06KSWgBJRA6BDo3KUHlS1XgbJm ze4woPG686lYRfbHjh1bljFixKRFi1fRIxYHixQp7tAnom3EjRcvTK/l0MH9tHr1n4TzvKzYF9Zz jWj3TuerBJSAElACSkAJeEbgIItcaw+cJu8Y0ahznRKedXLRCh59nWqXoK+mrqQZG/6m7vVLU4qE cewthyzYLOvvlcxJmZIntO+fvfmgXejDTohY7sQ+eyde+ffWPRq+eCt906icdbfb9UdPnlHlPlPo xMVrIjh2rluC6hTNLl58EGEPnfmXpvO8p7Ln4DEWZ8O72Gc8NqsUyCzXbBU9F2w7TE/YU7N/k4oq 9rl9IvRAcARejQ9ycLPQ40pACSiBCEwAIbR+fmfoKXuSWQ3bCOU03nXWY67Wb9+6RefPn3X4wOSq ndl35cq/hD5BWZw4cah8+UqUIkUqh2YmtNSIfNaDBQsVoRIlSrOnX+Dvgx4+fCD5/M6ePUPP+YOV J4Z2aB/cXIMaC2HFYIlcgyGxoK7FOs5lDmOGd2NYGrwrwcE5p6I5Z1BzBcNz5/zo4sXzbvubccJi ibDskyeP0+3bLx4eFBbz0jGVgBJQAkpACYQXAhfZu+7G3QceT+fx02fkd+Um/7/ucReXDYeyCIfP Fv2b+hDCQa2G0Ft43p2/ftuj83zEYbNJ48cmzO3HpdvsQ63Ye4L2+14Wka37u6Xt+7Eya7PNQ60n h/bCdh4/z96BN2Td3UuO1LYw29F/bJe5uWtn3Q9hEEJfdK8otLhXEw4lLke50yYVz74YXlEl/HX4 x9Vo38jPqGGpXNauwa5DeLx172Gw7awNkNsPHqHIvWe1B4+fyn7cW/B3Z3ce2CJo4rBIq6YEwoKA in1hQVXHVAJK4I0mUKRQTkqfNrHkpfuoxfuUPWsaLnCRi3LnSk/Tpk6Sa58z5zcqVCAbFS+am7Jm TkEN6teQ9s5gEDI7oH9vwpjZsqaiwgVzUBbO1dG0SX0RhpzbY3vqlIk8dnbKmzsjZc+WmqpVKUuH Dx9y1ZRmz/6NUiaPS5+2aSHHP+/YhsdPTrdu3pTtOrUqy/b7jerY+6NYR+qU8eno0X/s+/5cvpTq 1qlMmTMmpxLF8lDRwrlknj98/z97qKy9sWVl5szpVJCLVKA95lqhXFHavn2LpUXQqzt2bKUqlUvL ecES52/UoJYIf0H3tB11dS2zZs2gFMniSC7DxYvmSZGS/PmyyH2qXKmUPfdOvsnMAAAdOElEQVSh u/EPHNgnzIYMHiBNFi6YI9vg+v133wbqBtaftm5O2bKkFg7ZsqSkgT/0DSSWuporhORePbtSpgzJ 5BkpmD8b5c+bmRYtnBvoPGYHROZ0ad6hNKkSEOZqNeRqxPNQvWo5625Zb9e2pXCZNHGsbKPoC86N 5wwFV0qXLMDXkFL6mmIuGD9VinjCDu2d7bsBfeR8X3/VyfmQbisBJaAElIASiPAEIOx0m7yCMrQe RlnbjqS0rYZSjs9+pNF/7Ah0bTnbj6IkzX6gK5yLr/mIeZTm4yGUq8NoStVyMPWbtT5IYcgMhjDb qt9Opbjv96emw+aKdxwKeVTIk4Fa+hQ0zSQEFPNK3nwg4bzZ2/1IWdqOIITYBmXGuw9tJq/ZSwib hRmvvgZOXn3I84f8dvG9Y4hXYFYOBYYZAVA2XLy0rFhQvAbBr/+sDS5aOO66ziLqMC5CAmvDufxK 50jr2MCylZoFTwiWntjE1bvlfmVqM5zS8L0r22MiwVPSlcHbEdwHzt8k3o8ZWw+nvJ+PocZDZ0vz pZxHsMq3UyhFi0GyH/c2Ja/3nblOxFMzZpufFlOKjwbRTX9xEd6K2K773W/04fB5sg6vPljxbuNk OzU/KyEVI835dPn2ElCx7+2993rlSkAJvCABCDDwNINgsuLPPyhx4iSUKNE7IqB17/Y5tW7VjD7v 0EaKM2TLlkPOsmXLRmrT+kOHMz558oTq1alCY0YPF4+tXLnzUsGChVk8e0JrOR9cxQrFuWjGSYc+ 48aOkiq3Fy6co6RJk1Hy5Cnp77/3UPNmDRzamY379+/Jt733uVgFDPPEfI3FT5BAtq377t27Kx50 8OKD3bhxnT5u2Zj+2rGNMmfOSjVr1pV5YuwfRw6hX8aNMcM5LBHi+uUXbaUScIEChShatOh05Mhh +qBRXdq/f69DW1cbqNL73rvV6cD+fZQ3b356r8EHcs2bNq1nAbAUXb58yVU3h33O14KDuH+wCeN/ EhEUHoPZs+ckL69odPDA3yLM4v66s5gxY1HiJEkplre3NIkePYadYYIEAWEtpn+Txu/S4sXzKW7c uJQqVRrhMXLEYJo44WfTRJau5tq/7zcE8S1WrFj0QeMPhT2KeSxdutChr3UDHplZs2UXT1M8n1Zb tWq5PA/79u0mPEPG8Myt5mOwbMwCNmzoD3JueKaWK1+RqlWvRbg+9G3xYUO5DhR0ic3eo6j2jGu0 GrwR58z5Xc6XN6/rBNvW9rquBJSAElACSiAiEUBBjMp9JtNYzhEHD653i+fg0NHMhIIeKPrR+7c1 Dpfz4PETevjkKZXrMYkg0MWJGZ0gTMHDazB7541dvtOhvfMGvO2asMCHQhjI44Yw2yTxvOncpK60 4OvGXJwtoAfOjXnFih6NPiyfj+pyuOtdFgoX7gj4IjegteMavPuSsViGnHHjV+6iHcfOyQ9y9eGc VjN55xBOG41zPyPEFzaLQ3uDMnjnoUAH7HfO94dCG0EZjoMdCtB1qVcqqKYeH4Mg22nCcjrHRU1w vSk5ZHkv5xNsOGiWyzHAAzaYK+j+tOwv8ShE6C3CiyFG4t5sO3KWsqZMJLwLZ05J97gPKiWPWRYg /r4TNxbftwAxEvcS24n5XuLHeixhbFvb5AliSxESlxPTnUrADYHAMVpuGupuJaAElIAScCRw+fJF Gj5yLDVs2JjucHhjtapl6PTpUyLEQOSb/ht/O8fhs/Aeg2fdju1bRbxLnyGjDDRjxmTas2cXIdR2 6vS5VLSoLc8KxCd4r/n5+Yqn2C8Tpkl7iFQQ12CNmzSnwUNGyYeeZX8sps/afSwCpBwM4qV3nwGE H3jZweNs6rTZlDt3viB6kAhNTZt9xGJTc8qXL0C06d/vG/ppzAhaMH82fdbetedWkaLFafyE6SKG QZyrUa28iEzjxo6mMT9NdHteiG3/69NDRMeve3xLHTp2lrYQIGvVrEjIlwcWA76z8XA7UBAH4ImW J09+mjxlJiVLnkK84DA/hEdDJKtdp77L3pkyZaEtW/fJ+eHZCBFs9JgJLttiJ0JrBg4aSU2atpA2 8PKDWAcv0E9afyb73L388cciOTRl6mxCmC8M4uulixdk3d1LlSo1RCRdvWoFdenaU5ohBHori87G 1q5ZRbivMHhQIow5fvwE9uewcOGiLE6mpg+bt5JnAO0QzlumVAFhtJlFV1x7HeaEa5k/bxa1aPEJ molhTIRHQwytwQKxmhJQAkpACSiB8EwAAtXfvoG/SLx933XBsklr9hA821C1duX/mlPyBLb8dnO3 HKKWoxbQz8v/orbVitj3m2tHxdwRrapTC64aC2sxYr6IcJPYy6xdddv/9aatWSIa9FP2CFu7/5QI fUt6NZUQVhy35noz7U0Bi1ldG1KRLLZULhCkIEQGZ+Ldx7n/uk9ZSRNW7bYLcQiNzZgs4EtNhK/O 9fcUrF/C9uV2Q67QO2D2BinygXBeCF6uDNfTrHxeYYTCGr2mr5Yqvq7aYt8RLtgBS5UorngRyga/ IGzauZAHqufmTpdUxEfTznkJ4W7Iws2yu3mF/PTjJzVELEURklajFoqw6NzHbEN0zZbqHVrYo4l4 EF6/e59FVS+pAgxhtUDGgOIlEF1HLN5Gc/jZQj5E2AAuxoEfeHbCu282FxPJmz6ZGV6WiZp8Jzn7 /ujdjDIkS+BwTDeUgKcE1LPPU1LaTgkoASXgRKDfgMHUqFETEdxQYKFho6bSImmy5DR77lJ7nrxa td+ld95JLMd8z5yyjzJ50i+y/nGrtnaBBTvSpk3HAk0PObZ8+RLx9MPGxg3rROhBEY1v//eDnBf7 q9eoTWPHTcZqmBjEGohVVqEPJ6pd5105H3LJubL06TPQ9Bnz7Z6E8ET8rP0X0tTZ48y5/4b1a0UU hCecVUjEtdeoYQs53r7N9iHNua+n2xBdZ89ZIkIf+kD0LF2mvHSH4Bpa1p+fExTwiMzfiOPnU66A DEOex+AM32DDDh7ab28K77rsOXLZt12tVK1aQ3YjzBYCHWzfvj0OOffWrFkh+/ECT1JYxUpVuRJc FFmvU/c9+rRtR7vQh51J2KPRiNLmvpvnftfOHQ7XBJEbVqVKdRG0ZUNflIASUAJKQAmEUwIQjf7Y dSzQz6bDrv+/nrZ2n1xJV/Y0M0IfdtQqkk3EH3h8QfBytkEfVaGW7D0Xmf+Px0/HWsWkyRnO8ebO uk9ZIcIavMAg9OVhMSsos316INpv8ZhLyH1zpQmI7giqv/Huu8K57BCeCq++bu+Wcuiy/sApunzz rgheZXKmk2PpkyaQ3HnYMF5/csDFC669fxMfObKOC4ys5kq/7uw45+qDQVi12viVu6lCr18dfsr3 mkRT19nujbWtdR3nu37nAUHY/L5ZJRH6cLw237tfP7d9vrW2t657s7A3s0sjCUOOEjkSJY7rTcgZ CAHXKvShz7vFbCKoH+dNVFMCr5qAeva9auJ6PiWgBN4YAvnzB+RGwUXBC8osjbiHbQg2yVOkpKtX r9iLVCDE0dfXJvz5VKwq/awvCJuEwRvr3Fk/gjBlxBWE+joX1siVO4+1e5isw7MQ+fYuXrgg12JE pEePHrs8X8aMWQLNs3gJW/gHQoBv3bpJ8eI5fmgzA6EYBAwefj172Lz6zLFTJ0/Iqidimenjapkx Q2appGs9Zu6hq/xz1nYhWc/PIcxWM+dAwQ540znfS2vb6ixs/jppHH3dvROtXb2CPmrZhqsr+9iF Xmtb63qOnLklZBjPDIS89z9oxmLxWmkCcRkhxJs3bZB8iwhfNmJf1ao1rcPI+vHjR+nwoQMSNo0Q 4rP8PMIeP7bddzyPGTNlppMnjouX5+dfdJXndumShdKu/nvvy1JflIASUAJKQAmEZwKNSuempuXy Bpqi37836bNxSwPtP8HiIAxi2D4O/7Ra1Cg2n5oz3NfZCmdy9HZDKC8M4uDdB48Deeqt2Gv7TIQ2 i3s2CVboQzuE1Y5bsZO+nLicVnJxjTZVCnFev4x2UQttgjKIV538vfvQztmrD/tm+ofq1iuWXURL 7IM1KJGLdp+4QPO5ouwPzSuTlz8L21HHV5+8GcmH8w2uYY9FePch96ArS+AdU3ZfdPJMLJk9DX1Q JuAz8Kp9JyTP4EPOBRiUoWgJrHDmVIF45w1GSC2VI51bbzt4DCLMGt6bVzjf4b8shsIe871VUwKv moCKfa+auJ5PCSiBN5aAq+q15mKj+ntLme0r7G1lxBJrvjxzHN5bxm6yKAa76B+6mTBhInPolS1/ mzGFen/TnSsL23L/veiJEbJsDDnq3Il9Fy7YvglHSO2UyRNMF4dlkiSefTvt0CmYDXgxwtxVzA2m u0eHY/ifw5Pz9O7TX7wBp02dSKtW/Sk/OXPlkRBo5MsLyiqzRx3y/cGDT8S+jTaxD6G7G9avoRMn jtH2bVsoHXtgHjt2RMJtjciMcREu3Jxz88FjLzhr2LCJhJwjlBdi35bNGyRnJZ5V65jBjaPHlYAS UAJKQAm8LgIZ2SutrL+HmnUOxxPYvMqs+xB+iWIZsD/3BIhx1jZYt3r8OR8z2xDWjP1HHN/qZPA+ gxCIvIArWcxyDvl0ai6b/bgybyT2OpvEYbiYH37gDTihfT0JQXXVx3lfC58CEsqL/Sbk2LSBqLWU Q15hu09eoLY/LzGH6JK/wIVqtav3naRqBTPbj7la6cchreu6j6fDHKqL/H3GK9Ha1hT+8GXxFGG0 yA8Ig9iHH2PV+06jzW48MU0bLC9wdWJYojg2EVE2XvJlytq99BWHPiNPn5oSCA8EbF85hIeZ6ByU gBJQAm8RgQQJE9q9s27duhHoyq2eZUmT2kI14sa1ffN76/arDQXY+dd26tqlgwh9rT5pR0uWrqHt fx2keQtsBR0CTT6IHSjkYCwo0dJ4RiKs9pTvvy5/Nm3Za4Z6Y5cQH/v1H0Q7dh6S3Hvx4seXfIXN mzUMVM3XGYIJ5YVH382bN2jP7p1S4CRr1uzkU7GKNF/DXn9r166S9dKlyzmE7KI6L4Q+eO39PPZX Wr9xJ+3a8w9BRHS29xq8L6IkvABR5GSRfwgv8vl5eXk5N9dtJaAElIASUAIRmkDcWNHtgtOyPs3o 8tSvAv1cmfa1vWDFy1xsmZzp7SG0yIe3/uDpYIeDgDiIveoOju4ghTBQLXe/72UpPgHR0BOzipDW dfRdwkKfEbUQqoxKteZnjSUcd+amgDQk7s6J0OLGZW3eed/N2UiP/SvRWttn5Rx5sGccGRNciK61 n7v1uLFsX+7ecpOP0V0/d/u3Hz1LHccvEybI07i6bws68GN7wrOhpgReFwEV+14XeT2vElACbzUB VKZFbj8YcvE5GzyvYKj8ioq7sOQpUshy756dEn4pG/4vR44EX13N2j4k6+vWrRJPNx+fKtS330Ap FJEmTVpKnsw2H3djIYTUVPQ1bVDUAQYxD/n33Fm6dOnlEDzOokSJKm3R3vqD/Hev00w+vTuvQHxF vsMvO38lQivOe+bMaQ7rPhvk5RctVlLClCGwovovKu6anIQ+PpWlL7z+EB4Mq1otIIQX4dOmmMeo 0RMI+fvgSYiCM7FjB3hnSkd+wTNaisVC2MyZ02nZssWy/q6G8AoHfVECSkAJKIE3iwDyzZn8cfBI g/ed8w8qzoaWffVeGSqfO71497X8cYFHhTZwblSZ/Yor6K7u95F8yez77w06e+XlvzQ2Ibzvc+jz 1kGtA/304PnClu8+Tu4KnEgD/5deDfkLR86Fh/Daaewh52y50yalUjnSyu5+s9bTxRsBXx47t/Vk G5V3YRAq4SloNdzPkBryDSIqpHL+TDSQRVYURcHzkSJB3JAOJe3NZ8zb9x++UH/tpARA4PX+paT3 QAkoASXwFhOoVq2WXP24saPoyJHDdhK+vqdpyODvZBshl+Y//LJlfcRLCuLNqB+H2dtv5pDJz9p+ ZN8O7ZWnT215T077nrQPjfx9ffv2tG+7WsE1NWvynj1P4cWL5+mnn0ZK01q16rnqYt9XomQZ8vaO LdVchw75LlBYLUTA06cC5mPv+ApXTKj1fvZkQ/690DaE0U6dMtGhyrK3t7f9eYgVK1aQp4RHXYUK NlEPzxisdJlysixarITkCkSePYQHQzitVLmaHMMLckriB3b61AlZ4mX9utW0csUf9m3rCqpSwxA6 jErPKNCCfH7Gzp49Qy04LLh5swaBxGrTRpdKQAkoASWgBCIKgWoFbOGpIxZt5eqzNxym/YBzxq3j AhahZRAXJ3aoJ0UhrnIuuOYj5km1Vlfjo+ruRK7s+/CJ7fMb2njH8LKHx8bi9ZcxFOVYzwUuYKhk C888559WlQsR8hZiDgt3BP+FdAoW3zrUsBUqMR6DznMc2rKqjIkKvCW6jZecgE8sXoAQClFQxBND bkDkErzz4BEN4/tnbMMhX6mkbLY9XT71n4f1OUCoc68Zqz0dwqEdiqnAdhw757AfG35cyKXR4Fni peksVAZqrDveagIBCQLeagx68UpACSiBV0+g05fdpaABCndUq1KW8uUvQF5RvWjPnl0SMpsyZWr6 olM3+8RQCRXFDmb+Po3FwAG0ZPF88dxCqGWcuC/2zaF98CBWUBBi9KhhhMIYFcoVlUqwf+3YRufP B+1ZhiG3bNlIeXJnpDx589E/hw8R8vShIMWn7ToGcUaSCr7I/fbdgD7048gh9OfypTxGfulzYP8+ Onr0H2rLVW2/6d0/yHHC8mDefLb5XL50kYoWzsUhssmpVKmy1Kt3v1A5LSoCf9X9Cxo0sJ/kvYsZ MyatWrlcRLhi7LVnQp2DOhlCeRcumGNvUqZ0eVlHUQ54+S1fZsuxgyIi1tyR8CgtUqQ4beOKx127 dKQlSxbQgwcPuKjHeim+YR/QslKtei2pumtCtZ29+uDBupLnDzt29Agh96CaElACSkAJKIGISgBV eFFx9hwXYyjZ/RcqkT2tiHEXuIjEtqN+Umzj0pTu4rEWGtf4TtxYUim2BuelgwiEghbwInM238s3 qNOE5dR/1gbyyZtBzg8PO4TvIr8dqse+jM3dekjCaZGPsHi21C6HwlzL585AKJgxixl9WD6fy3bW nV/ULk6T2asPYqIry54qMU3qWE+uDfkAW4ycL4Jd5hSJWFR8Rqf5uk3OZXgJBmVJ2ePxfS7sMY2r 9n43ZwMt4GIi8TjUGVwRoh1Sg3gI0fAEVw0u1nUc5UyTlJ+Bs3TuBavwoqrvst3HqBvnAJzHc8M9 3TWsrcxt7f7T4jGJOR45d9Wjgi0hvR5t/2YQUM++N+M+6lUoASXwCglE9c9BBmHOau72o41XtGjS 1LTBBsSaNeu2EcJj8eFkx/atBC+9KPxN47v1G9HqtVvJeI9JZ34ZNPhHavZhS86t5i2CF/KwFSla nJYv3yChlFG4EIjxBEQfM8eoluTPDvudrgHHzBxN35LsZYe8cSiuAW+9BfNni2fWyFHjpOKrc2GS qBx2C+vctQe1/PhTvrbnkvsNQl+OHLloMef8S53aFoqBduY8znNs3+FLKUQB0ROefHPn/C4/KCyB a65Rsy66B2nO14LG7s4nx/zvrfM1uTpJ7tz5qEPHzuIVd/nyJdq/f6+D6Orq3BgnMt8jeNLhB/fL mHP7bNmyU02+xjt3bhMKX8yYPplQsAT7xo2faroFuSzPnn3wkITlyp3XHjqObWvYritPS9zf4sVL ifAMsRVFNypUqEQ9e/VFd3JmBIGwNufoM1a/vmMV3gwZM8mzCbE3ZSrXfxyYvrpUAkpACSgBJfCq CJhiD17+RR+cz+sV1fYncxT8380edsYgDm0Z+AnV5cq3T9kbHsIWijRgGSuaF31WvaiD0Ofl/3++ qdRrxjHjYmysGzPtzfmxv3jW1NSviY80GfvnToLo5WzZUyeROSEEdDZXzJ28Zi/9yx5vmOeULwL+ n3bu52rbVNK1stl06Iw0bVAypwMP5/4fcIgvDKKX8XwzrM3S2sc7RjQa1bqGnVka/yrF1ja4hr+G tqFmLB5mTJaQRcf/pLDHKa6MjDtTiCsdD25RxWVVZes4WB/Zqjq1rFiAvFkY/OfcFQnpBd/1A1pS yoRx5V5EsvtD8udH//tnvR9mzDJc2GUQnzdOzOgynzlbDtITDg8e1642odoyPts7m2Hq/Dyg3f8a V5Drw98HyAf4gD0kTbtMKWx5v2PHjMZjh92X/c7z1e2IRyASP0D/uZr206fP6cq1wG8ertrqPiWg BJRARCSQNLE34b3u2o0HIZo+8pk95f/AEVLpbLdv3+Y8ezEDFSVAvrSHDx+KYObcB9sIlT131k+E oNSp0zgIdu7a+/qeomScNw/iCQzzQuglRBerYU4I+bSKM0Fdg7tjT548prN+fhQtejQR+cw58d+I Nf8etuHdBXEQwuMtriaM6ropUqR0W33X1RydrwGehNFYNE2ZMpXD+aztnNfdXYu784Hf3bs270NP cwLeu3eP/Px8KUH8BJQseUAeQ3fnxhwRBg2z3it37dEWXn64f8iZF1z4rgxsecF9e3D/AXnzc2IV F9Hk/v378syYZ8jSzb567dpVgvcp8jRivs73196QV/r17UU/c6h2wUJFJL+g9RjW8SxAqNaiHc5k wnY7edLY/P7zlG7c0tw/YUtaR1cCSuB1EYjMlWfxue7x8e30aI/rdBPu5gbBCJV1IdRYtDyH5gjJ xDmcC1WYRvCaO8OVYhG+myB2DJdVeBHS+ozDPSFqORvGhzl7pCHfHfYZocf0c9feHMcSbVC9Fn1T JYobaGxrW3frmPNz5mOdF0JnH/DYnnjA3X3wWLiZ/hD9Hjx+IqzdnRP3A+08yXkI3hD6IJxBVEPe xJAaznWKPedSsKciBDSYq+vGfnf3A8dgCKv145yImDvmA8NYUFyc5xbU84B+6HP26k0p+pGeK0Vb nz1Ug8ZzZMRYtFd7OwhEjpeUvKu29+hiVezzCJM2UgJK4E0k8KJi35vIQq9JCbwsAYiKBfJlJYiD 3w8cTs2bt3rZIbV/KBFQsS+UQOowSkAJhFsCLyP2hduL0okpASWgBJwIhETsC+xP6jSYbioBJaAE lIASUAJKIDgCyznUF0IfvC/rWMJ5g+unx5WAElACSkAJKAEloASUgBIIXQIq9oUuTx1NCSgBJaAE lMBbSWDlimVy3VWr1qT4HNKspgSUgBJQAkpACSgBJaAElMDrIRDyoPbXM089qxJQAkpACSgBJRCO CQwbPoYGfDfEbV7GcDx1nZoSUAJKQAkoASWgBJSAEnijCKjY90bdTr0YJaAElIASUAKvh0C0aNE5 hDf66zm5nlUJKAEloASUgBJQAkpACSgBOwEN47Wj0BUloASUgBJQAkpACSgBJaAElIASUAJKQAko ASUQsQmo2Bex75/OXgkoASWgBJSAElACSkAJKAEloASUgBJQAkpACdgJqNhnR6ErSkAJKAEloASU gBJQAkpACSgBJaAElIASUAJKIGITULEvYt8/nb0SUAJKQAkoASWgBJSAElACSkAJKAEloASUgBKw E1Cxz45CV5SAElACSkAJKAEloASUgBJQAkpACSgBJaAElEDEJuC2Gm/kyJEoXhytqhexb6/OXgko gaAIRIoUiaJGjazvdUFB0mNKQAm8EQS8vPS97o24kXoRSkAJuCYQybY7apL0FKlgLddtdK8SUAJK IKITiBbT4yuI9B+bx621oRJQAkpACSgBJaAElIASUAJKQAkoASWgBJSAElAC4ZaAhvGG21ujE1MC SkAJKAEloASUgBJQAkpACSgBJaAElIASUAIhI6BiX8h4aWsloASUgBJQAkpACSgBJaAElIASUAJK QAkoASUQbgmo2Bdub41OTAkoASWgBJSAElACSkAJKAEloASUgBJQAkpACYSMgIp9IeOlrZWAElAC SkAJKAEloASUgBJQAkpACSgBJaAElEC4JaBiX7i9NToxJaAElIASUAJKQAkoASWgBJSAElACSkAJ KAElEDIC/wd8Jtz7r9fdQQAAAABJRU5ErkJggg== --Apple-Mail=_6BCBA834-41CE-4D2B-82C2-7ED64162049C-- --Apple-Mail=_CC279F7F-A670-4759-9E9F-1F2FE7B021A7-- From nobody Fri Nov 1 07:46:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AF0C1201A3 for ; Fri, 1 Nov 2019 07:46:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ApKOCsT64nBg for ; Fri, 1 Nov 2019 07:46:44 -0700 (PDT) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C11D8120044 for ; Fri, 1 Nov 2019 07:46:44 -0700 (PDT) Received: from [10.122.0.250] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id QYCIiLHsEyg8JQYCJiNpCP; Fri, 01 Nov 2019 07:46:44 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_62C0D968-DC26-4060-AA27-041839C87AB7" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: Date: Fri, 1 Nov 2019 07:46:42 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfCF0tEHsxm8fchlYK5AqPNAakATCa4toaPqdPftzY8wfdcuCP+IERDpHQnd2Z1Vh9s5+Lc/dg8Ebh96TDfkGLeQJR/G1L04hmzdOPdLlshm0rA1lkPD6 /QRX+e+YTpWeGtq0O+BDlDpPROtXP6y3Jh77yC2txRCjSwtguS2lvjmz Archived-At: Subject: [Rats] EAT material for Singapore X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 14:46:47 -0000 --Apple-Mail=_62C0D968-DC26-4060-AA27-041839C87AB7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi folks, Rather than publish a new EAT draft for Singapore we have pull requests = for you to review. The hope is for consensus on them in Singapore after = which they will be integrated into a new EAT draft published after = Singapore. Here=E2=80=99s the pull requests: Submodules =E2=80=94 This = update unifies submodules and nested EATs so they both occur in the = =E2=80=9Csubmods=E2=80=9D part of a token. It clarifies inheritance = (there is none), simplifies naming of submodules, and defines attachment = type. UEID =E2=80=94 This update = includes a statistical analysis based on the birthday problem to justify = upping the number of its bits required to 256. OEMID =E2=80=94 This = update fills in the details on the use IEEE MA-L and Company IDs to = identify device manufacturers Security Considerations = =E2=80=94 This improves the security considerations section. Boot state and debug =E2=80=94= This update makes the debug state description a 4-state variable rather = than 4 Booleans. Nonce =E2=80=94 This = updates lines up the token identifiers and nonce from JWT, specifically = clarifies that the nonce comes from the relying party. General Claims Characteristics = =E2=80=94 This describes = some conventions and goals when defining new attestation claims. If you click on the links above and then the =E2=80=9CFiles changed=E2=80=9D= tab, you can see the text of each. You can comment in email, but it is = better if you comment in GitHub on the pull request itself so it is more = easily tracked. LL= --Apple-Mail=_62C0D968-DC26-4060-AA27-041839C87AB7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = folks,

Rather than = publish a new EAT draft for Singapore we have pull requests for you to = review. The hope is for consensus on them in Singapore after which they = will be integrated into a new EAT draft published after Singapore. = Here=E2=80=99s the pull requests:

Submodules =E2=80=94 This update unifies submodules = and nested EATs so they both occur in the =E2=80=9Csubmods=E2=80=9D part = of a token. It clarifies inheritance (there is none), simplifies naming = of submodules, and defines attachment type.

UEID =E2=80=94 This update includes a statistical = analysis based on the birthday problem to justify upping the number of = its bits required to 256.

OEMID =E2=80=94 This update fills in the details on = the use IEEE MA-L and Company IDs to identify device = manufacturers

Security = Considerations =E2=80=94 This improves the security = considerations section.

Boot state and debug =E2=80=94 This update makes the = debug state description a 4-state variable rather than 4 = Booleans.

Nonce =E2=80=94 This updates lines up the token = identifiers and nonce from JWT, specifically clarifies that the nonce = comes from the relying party.

General = Claims Characteristics =E2=80=94 This describes some = conventions and goals when defining new attestation claims.

If you click on the links = above and then the =E2=80=9CFiles changed=E2=80=9D tab, you can see the = text of each. You can comment in email, but it is better if you comment = in GitHub on the pull request itself so it is more easily tracked.

LL
= --Apple-Mail=_62C0D968-DC26-4060-AA27-041839C87AB7-- From nobody Fri Nov 1 07:57:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0502120880 for ; Fri, 1 Nov 2019 07:57:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H-RY7L2zn2n3 for ; Fri, 1 Nov 2019 07:57:47 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A8CB12087D for ; Fri, 1 Nov 2019 07:57:47 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA1EvgH9014965 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 1 Nov 2019 15:57:43 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 1 Nov 2019 15:57:37 +0100 To: Laurence Lundblade , H Y CC: References: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> From: Henk Birkholz Message-ID: <0a8eb26e-427d-2edb-e4b4-b0bf17b4075a@sit.fraunhofer.de> Date: Fri, 1 Nov 2019 15:57:37 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 14:57:50 -0000 Hi Laurence, good point. There are basically two primary focuses here, I think: 1.) Evidence that includes Trustworthy Claims about the Attester, and 2.) Evidence that includes Claims about the Trustworthiness of the Attester. In 1.) you can put trust into the Veracity of Evidence due to the attestation Provenance, in 2.) you are given the decision basis for assessing the Trustworthiness/Integrity of the attestation Provenance. Laurence, please correct me if I am wrong, but the current EAT draft focuses on 1.). Is that correct? Viele Grüße, Henk On 01.11.19 15:25, Laurence Lundblade wrote: > Hello, > > A frame up that works for me is to think about 1) the claims, the > attestation format and its details and 2) the transport / conveyance and > its details. > > In the TPM/TCG world the claims and attestation format is locked down by > what TPM chips do today. It is a set of registers that hold hash values > used to measure software.  In the EAT world, which typically implements > on fully functional CPUs, the claims and attestation format is not at > all locked down and our work is to define it (the eat draft). > > A lot of the network and router folks have been putting TPMs into their > routers and now need a way to get the TPM output off the router to the > network management center. This world runs off of Yang protocols. The > main interest there is a very specific Yang-based way to move TPM > output. This is the yang, tuda and pubsub drafts. > > The EAT use cases are more about TEE’s and lining up with > end-user-application-oriented uses like FIDO and the Android key store. > They make use of all the existing transports used by application > protocol (mainly HTTP) so there’s no worry about defining transport. > > I think a few of us see EAT as the more general and flexible attestation > format that will eventually replace the TPM format. Because EAT can use > CBOR and COSE which are carefully designed for constrained devices there > is some hope that it can go into TPM-like HW. > > The architecture draft is trying to tie the two together in a sort of > unified field theory. Seems possible, but hard to me. > > LL > > > > > >> On Nov 1, 2019, at 5:08 AM, H Y > > wrote: >> >> Hi all, >> >> I'm Yuhei Hayashi, network security researcher of NTT in Japan. I >> learned about the existence of RATS WG at IETF 105. >> >> I'm interested in the work of RATS WG and I'm trying to understand it. >> So, I'm firstly trying to understand which drafts contain the >> standards listed in the charter. >> >> I will attach the result of organizing it from my own point of view. >> I'm glad if you confirm that my understanding is correct, if possible. >> >> Thanks, >> Yuhei >> -- >> ---------------------------------- >> Yuuhei HAYASHI >> yuuhei.hayashi@gmail.com >> ---------------------------------- >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Fri Nov 1 08:24:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83514120803 for ; Fri, 1 Nov 2019 08:24:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1MRw9WoFRT-t for ; Fri, 1 Nov 2019 08:24:54 -0700 (PDT) Received: from p3plsmtpa09-03.prod.phx3.secureserver.net (p3plsmtpa09-03.prod.phx3.secureserver.net [173.201.193.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 934121200B8 for ; Fri, 1 Nov 2019 08:24:54 -0700 (PDT) Received: from [10.122.0.250] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id QYnEiq8fn4WodQYnFi0NII; Fri, 01 Nov 2019 08:24:54 -0700 From: Laurence Lundblade Message-Id: <71C1CBBD-74B8-4651-A146-BC4ACD5336AF@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_5F71DDC9-8C4E-4F8D-9811-EA2F9968A0D3" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 1 Nov 2019 08:24:52 -0700 In-Reply-To: <0a8eb26e-427d-2edb-e4b4-b0bf17b4075a@sit.fraunhofer.de> Cc: H Y , rats@ietf.org To: Henk Birkholz References: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> <0a8eb26e-427d-2edb-e4b4-b0bf17b4075a@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfI5uQpenEMzYlGHJkJVkjxjFAcGHOU02VqiUEBGzw0HWYeep+/Ahl8BIwakc9Ot17Y8VP1BPsXgnQG0TaN3Ug7HlOZVqsv8v9VLAc2HkWNqZFjAnfvPV x0DmmZybWWVZ0yppREEzdRIbFYvg55Iu1MdWubj+uSdVTXExa5dL//Eg7vqhTueq5DspKQaxhQZhJW2uveiVh6lC45VqMKHuaSRCxEAueG21aPj+Su0umj06 Rt2jXvPl933uu6MtYuagTw== Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 15:24:57 -0000 --Apple-Mail=_5F71DDC9-8C4E-4F8D-9811-EA2F9968A0D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Henk, good point. Yes, EAT has been focused on 1) below. However it seems we might expand = EAT to 2) especially considering that 2) is not constrained by the TPM. = I=E2=80=99ve added an issue = to the EAT GitHub to = track this possible work. Here=E2=80=99s two examples: The input to the verifier may be software measurements (TPM or EAT = format). The output of the verifier might be a Boolean that the = measurements were correct. Some implicit claims might be made explicit. For example, if the = verifier knows that the device will never send an attestation is the = boot and debug state are not locked down, then the verifier can add = those claims. LL > On Nov 1, 2019, at 7:57 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > good point. There are basically two primary focuses here, I think: >=20 > 1.) Evidence that includes Trustworthy Claims about the Attester, and > 2.) Evidence that includes Claims about the Trustworthiness of the = Attester. >=20 > In 1.) you can put trust into the Veracity of Evidence due to the = attestation Provenance, in 2.) you are given the decision basis for = assessing the Trustworthiness/Integrity of the attestation Provenance. >=20 > Laurence, please correct me if I am wrong, but the current EAT draft = focuses on 1.). Is that correct? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 01.11.19 15:25, Laurence Lundblade wrote: >> Hello, >> A frame up that works for me is to think about 1) the claims, the = attestation format and its details and 2) the transport / conveyance and = its details. >> In the TPM/TCG world the claims and attestation format is locked down = by what TPM chips do today. It is a set of registers that hold hash = values used to measure software. In the EAT world, which typically = implements on fully functional CPUs, the claims and attestation format = is not at all locked down and our work is to define it (the eat draft). >> A lot of the network and router folks have been putting TPMs into = their routers and now need a way to get the TPM output off the router to = the network management center. This world runs off of Yang protocols. = The main interest there is a very specific Yang-based way to move TPM = output. This is the yang, tuda and pubsub drafts. >> The EAT use cases are more about TEE=E2=80=99s and lining up with = end-user-application-oriented uses like FIDO and the Android key store. = They make use of all the existing transports used by application = protocol (mainly HTTP) so there=E2=80=99s no worry about defining = transport. >> I think a few of us see EAT as the more general and flexible = attestation format that will eventually replace the TPM format. Because = EAT can use CBOR and COSE which are carefully designed for constrained = devices there is some hope that it can go into TPM-like HW. >> The architecture draft is trying to tie the two together in a sort of = unified field theory. Seems possible, but hard to me. >> LL >>> On Nov 1, 2019, at 5:08 AM, H Y > wrote: >>>=20 >>> Hi all, >>>=20 >>> I'm Yuhei Hayashi, network security researcher of NTT in Japan. I >>> learned about the existence of RATS WG at IETF 105. >>>=20 >>> I'm interested in the work of RATS WG and I'm trying to understand = it. >>> So, I'm firstly trying to understand which drafts contain the >>> standards listed in the charter. >>>=20 >>> I will attach the result of organizing it from my own point of view. >>> I'm glad if you confirm that my understanding is correct, if = possible. >>>=20 >>> Thanks, >>> Yuhei >>> --=20 >>> ---------------------------------- >>> Yuuhei HAYASHI >>> yuuhei.hayashi@gmail.com >>> ---------------------------------- >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 --Apple-Mail=_5F71DDC9-8C4E-4F8D-9811-EA2F9968A0D3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Henk,

good = point.

Yes, = EAT has been focused on 1) below. However it seems we might expand EAT = to 2) especially considering that 2) is not constrained by the TPM. =  I=E2=80=99ve added an issue to the EAT GitHub to track this possible = work.

Here=E2=80= =99s two examples:

The input to the verifier may be software measurements (TPM = or EAT format). The output of the verifier might be a Boolean that = the measurements were correct.

Some implicit claims might be made = explicit. For example, if the verifier knows that the device = will never send an attestation is the boot and debug state are not = locked down, then the verifier can add those = claims.

LL


On Nov = 1, 2019, at 7:57 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

good point. There are basically = two primary focuses here, I think:

1.) = Evidence that includes Trustworthy Claims about the Attester, and
2.) Evidence that includes Claims about the Trustworthiness = of the Attester.

In 1.) you can put trust = into the Veracity of Evidence due to the attestation Provenance, in 2.) = you are given the decision basis for assessing the = Trustworthiness/Integrity of the attestation Provenance.
Laurence, please correct me if I am wrong, but the current = EAT draft focuses on 1.). Is that correct?

Viele Gr=C3=BC=C3=9Fe,

Henk

On 01.11.19 15:25, Laurence Lundblade = wrote:
Hello,
A frame up that works for me is to think about 1) the claims, = the attestation format and its details and 2) the transport / conveyance = and its details.
In the TPM/TCG world the claims and = attestation format is locked down by what TPM chips do today. It is a = set of registers that hold hash values used to measure software. =  In the EAT world, which typically implements on fully functional = CPUs, the claims and attestation format is not at all locked down and = our work is to define it (the eat draft).
A lot of the = network and router folks have been putting TPMs into their routers and = now need a way to get the TPM output off the router to the network = management center. This world runs off of Yang protocols. The main = interest there is a very specific Yang-based way to move TPM output. = This is the yang, tuda and pubsub drafts.
The EAT use = cases are more about TEE=E2=80=99s and lining up with = end-user-application-oriented uses like FIDO and the Android key store. = They make use of all the existing transports used by application = protocol (mainly HTTP) so there=E2=80=99s no worry about defining = transport.
I think a few of us see EAT as the more general = and flexible attestation format that will eventually replace the TPM = format. Because EAT can use CBOR and COSE which are carefully designed = for constrained devices there is some hope that it can go into TPM-like = HW.
The architecture draft is trying to tie the two = together in a sort of unified field theory. Seems possible, but hard to = me.
LL
On= Nov 1, 2019, at 5:08 AM, H Y <yuuhei.hayashi@gmail.com <mailto:yuuhei.hayashi@gmail.com>> wrote:

Hi all,

I'm Yuhei = Hayashi, network security researcher of NTT in Japan. I
learned about the existence of RATS WG at IETF 105.

I'm interested in the work of RATS WG and I'm = trying to understand it.
So, I'm firstly trying to = understand which drafts contain the
standards listed in = the charter.

I will attach the result of = organizing it from my own point of view.
I'm glad if you = confirm that my understanding is correct, if possible.

Thanks,
Yuhei
--
----------------------------------
Yuuhei = HAYASHI
yuuhei.hayashi@gmail.com <mailto:yuuhei.hayashi@gmail.com>
----------------------------------
<RATS_drafts.pdf>________________________________________= _______
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
_______________________________________________RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


= --Apple-Mail=_5F71DDC9-8C4E-4F8D-9811-EA2F9968A0D3-- From nobody Fri Nov 1 08:38:24 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4B21201EA for ; Fri, 1 Nov 2019 08:38:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xCwljggYmkrt for ; Fri, 1 Nov 2019 08:38:20 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 143A3120232 for ; Fri, 1 Nov 2019 08:38:19 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA1FcGmc018726 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 1 Nov 2019 16:38:17 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 1 Nov 2019 16:38:11 +0100 To: Laurence Lundblade CC: H Y , References: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> <0a8eb26e-427d-2edb-e4b4-b0bf17b4075a@sit.fraunhofer.de> <71C1CBBD-74B8-4651-A146-BC4ACD5336AF@island-resort.com> From: Henk Birkholz Message-ID: <1fe80492-c242-ab64-cebc-b962e6046ac0@sit.fraunhofer.de> Date: Fri, 1 Nov 2019 16:38:10 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <71C1CBBD-74B8-4651-A146-BC4ACD5336AF@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 15:38:23 -0000 Hi Laurence, I'll map that to the terminology that is still consistent between the initial architecture I-D and Dave's condensed architecture I-D. Also a question at the end. > The input to the verifier may be software measurements (TPM or EAT format). That is the Attestation Evidence (that was the only thing I meant when talking about the "two primary focuses". > The output of the verifier might be a Boolean that the measurements were correct. That is (the most simple, but most certainly viable) the Attestation Result. > If the verifier knows that the device will never send an attestation is the boot and debug state are not locked down, then the verifier can add those claims. I do not fully follow you here, I am afraid. Which Claims can be added by the Verifer to what at which time? :) I assume you mean that the Attestation Result can include implicit assertions based on the attestation Provenance - expressed as Claims. I am not really sure, what type of claims you are implying, though. Viele Grüße, Henk On 01.11.19 16:24, Laurence Lundblade wrote: > Hi Henk, > > good point. > > Yes, EAT has been focused on 1) below. However it seems we might expand > EAT to 2) especially considering that 2) is not constrained by the TPM. >  I’ve added an issue  to > the EAT GitHub to track this possible work. > > Here’s two examples: > > The input to the verifier may be software measurements (TPM or EAT > format). The output of the verifier might be a Boolean that the > measurements were correct. > > Some implicit claims might be made explicit. For example, if the > verifier knows that the device will never send an attestation is the > boot and debug state are not locked down, then the verifier can > add those claims. > > > LL > > >> On Nov 1, 2019, at 7:57 AM, Henk Birkholz >> > > wrote: >> >> Hi Laurence, >> >> good point. There are basically two primary focuses here, I think: >> >> 1.) Evidence that includes Trustworthy Claims about the Attester, and >> 2.) Evidence that includes Claims about the Trustworthiness of the >> Attester. >> >> In 1.) you can put trust into the Veracity of Evidence due to the >> attestation Provenance, in 2.) you are given the decision basis for >> assessing the Trustworthiness/Integrity of the attestation Provenance. >> >> Laurence, please correct me if I am wrong, but the current EAT draft >> focuses on 1.). Is that correct? >> >> Viele Grüße, >> >> Henk >> >> On 01.11.19 15:25, Laurence Lundblade wrote: >>> Hello, >>> A frame up that works for me is to think about 1) the claims, the >>> attestation format and its details and 2) the transport / conveyance >>> and its details. >>> In the TPM/TCG world the claims and attestation format is locked down >>> by what TPM chips do today. It is a set of registers that hold hash >>> values used to measure software.  In the EAT world, which typically >>> implements on fully functional CPUs, the claims and attestation >>> format is not at all locked down and our work is to define it (the >>> eat draft). >>> A lot of the network and router folks have been putting TPMs into >>> their routers and now need a way to get the TPM output off the router >>> to the network management center. This world runs off of Yang >>> protocols. The main interest there is a very specific Yang-based way >>> to move TPM output. This is the yang, tuda and pubsub drafts. >>> The EAT use cases are more about TEE’s and lining up with >>> end-user-application-oriented uses like FIDO and the Android key >>> store. They make use of all the existing transports used by >>> application protocol (mainly HTTP) so there’s no worry about defining >>> transport. >>> I think a few of us see EAT as the more general and flexible >>> attestation format that will eventually replace the TPM format. >>> Because EAT can use CBOR and COSE which are carefully designed for >>> constrained devices there is some hope that it can go into TPM-like HW. >>> The architecture draft is trying to tie the two together in a sort of >>> unified field theory. Seems possible, but hard to me. >>> LL >>>> On Nov 1, 2019, at 5:08 AM, H Y >>> > >>>> wrote: >>>> >>>> Hi all, >>>> >>>> I'm Yuhei Hayashi, network security researcher of NTT in Japan. I >>>> learned about the existence of RATS WG at IETF 105. >>>> >>>> I'm interested in the work of RATS WG and I'm trying to understand it. >>>> So, I'm firstly trying to understand which drafts contain the >>>> standards listed in the charter. >>>> >>>> I will attach the result of organizing it from my own point of view. >>>> I'm glad if you confirm that my understanding is correct, if possible. >>>> >>>> Thanks, >>>> Yuhei >>>> -- >>>> ---------------------------------- >>>> Yuuhei HAYASHI >>>> yuuhei.hayashi@gmail.com >>>> >>>> ---------------------------------- >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> > From nobody Fri Nov 1 10:50:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBAE3120DE8 for ; Fri, 1 Nov 2019 10:50:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.298 X-Spam-Level: X-Spam-Status: No, score=-4.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com header.b=aFp2RjOv; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=qualcomm.onmicrosoft.com header.b=fCBwTzHN Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WqYXxhFdT-x6 for ; Fri, 1 Nov 2019 10:50:41 -0700 (PDT) Received: from alexa-out-sd-01.qualcomm.com (alexa-out-sd-01.qualcomm.com [199.106.114.38]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FA1D120DDC for ; Fri, 1 Nov 2019 10:50:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1572630641; x=1604166641; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=ls/+j78FTxWAm1D9X/xcnWEl/LSdA/R4ZY3B4lkF73E=; b=aFp2RjOvbRUm1wHLtfEOXuaM0GBZGNRx5zRO61/ncW2KBr2N6faO37AP gnHRNkHpZpA5Liz/RLiRBxT6S4VlEpf1/E47p1kPCRYyIWyUK6zPo4P91 B+DJaJEqV6tsKhTzy9owaIqHKbE5XeWndCUB60nlkAi08GRLT9atN5Tn6 4=; Received: from unknown (HELO ironmsg04-sd.qualcomm.com) ([10.53.140.144]) by alexa-out-sd-01.qualcomm.com with ESMTP; 01 Nov 2019 10:50:40 -0700 IronPort-SDR: rht/pYfNqoKryU+BFxbBiFcBudM6YVtJX808SSdoVvkmBT3FGaIkVRm1zbdInnNgJ+aoyPk3xW pVSsVEz9YJpeAR6E/gL+Z4Djhqhui35R/oic9+xxlHRSm+jcBFuoospA6tr3r2+rjMPbdx4VJT +zjzcLTNPxgypMoNrQ2KAKETG/89ycCmY1pRFS8FWehLWD2YyNTZtaUU9HTy9owpaHajA6h6/u gil89T010zX1JVpd0pupW4qIQoUThm+Zbolv9mBFsNY1vwXo+LDG3NHknp0Eslq816FWmYF0M2 zi/omdVoJ8fF7RjOVVmMAGwZ Received: from nasanexm03a.na.qualcomm.com ([10.85.0.103]) by ironmsg04-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 01 Nov 2019 10:50:40 -0700 Received: from nasanexm03a.na.qualcomm.com (10.85.0.103) by nasanexm03a.na.qualcomm.com (10.85.0.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 1 Nov 2019 10:50:39 -0700 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (199.106.107.6) by nasanexm03a.na.qualcomm.com (10.85.0.103) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 1 Nov 2019 10:50:39 -0700 Received: from DM5PR02MB3162.namprd02.prod.outlook.com (10.164.155.158) by DM5PR02MB3290.namprd02.prod.outlook.com (10.164.143.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2387.22; Fri, 1 Nov 2019 17:50:38 +0000 Received: from DM5PR02MB3162.namprd02.prod.outlook.com ([fe80::898c:f6ec:7cc0:d77f]) by DM5PR02MB3162.namprd02.prod.outlook.com ([fe80::898c:f6ec:7cc0:d77f%5]) with mapi id 15.20.2408.024; Fri, 1 Nov 2019 17:50:38 +0000 From: Giridhar Mandyam To: "rats@ietf.org" Thread-Topic: [Rats] Agenda Requests Thread-Index: AQHVjZ0814k7EUF9x0eed8qbEhn9Uad2nikQ Date: Fri, 1 Nov 2019 17:50:38 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mandyam@qti.qualcomm.com; x-originating-ip: [199.106.103.58] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8430b806-3fd7-40d0-b862-08d75ef401a9 x-ms-traffictypediagnostic: DM5PR02MB3290: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1186; x-forefront-prvs: 020877E0CB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(136003)(39860400002)(346002)(396003)(199004)(189003)(1730700003)(52536014)(5660300002)(6916009)(66066001)(256004)(26005)(76176011)(790700001)(6116002)(53546011)(102836004)(186003)(316002)(76116006)(6506007)(6436002)(8936002)(14454004)(5640700003)(8676002)(14444005)(81156014)(81166006)(7696005)(4744005)(229853002)(2906002)(54896002)(6306002)(446003)(236005)(99286004)(25786009)(3846002)(71190400001)(7736002)(2501003)(11346002)(55016002)(478600001)(66946007)(476003)(486006)(66446008)(2351001)(66476007)(66556008)(9686003)(74316002)(86362001)(64756008)(33656002)(71200400001)(606006)(6246003)(966005); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR02MB3290; H:DM5PR02MB3162.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:0; MX:1; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: TnCFuPddXE5939t5A2G2NNfiFqi5tLnhkHu4XS8r3Q12bBy1G/m/Qs6vB30Btkt88Xp19dKbn1MaRD742yJkqTJN/HkKDUj9qmU3SocJ4kqP9lNogdIXVQr3mb96Cv1StQ68MXs2IhAOj9IVvRohpdt4WFb//LL4ORV82Gz+ypGLJzxj/UPdLwQWacZ351cGIR4NTWNENdwUL0mTMIsr7N98wnjvtutdhXQJOOwownBIyZB85XiR6sH/0VJGyuHcWGO2+vOnu0KsduMF/meEc6UN47ajy1ZTEYPLmzhHrvZIbCHkg3RAAnep4Fy41FgjMtCu03M4SesPkqx0NKTuhJRWMsip4gDGLekoaB6mY6PAUgq7++4CVu3GYYsbfUtYpWFDw9M1H/MHZ/zJTA/br5W7k9dQ+/5vzc+pUL/x+zUn14Jt0e2YhJO5SrDBntqgAJmbknEHw5GZ+a8FbgeDHjEV2Ydh9IAs7jZn7EN5ETs= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CMPO0+0o7bxAZS+Vp6Vlho6Ogx/WQcgjegkrZZclpSqBa0p8C3aBRO4D/YIhGjufKb+6DqpmNU8lOHwPE7sjFfmWbPkxeSgO9CHVqIWaz1lmxOaHLOkvX1hMjwdFEWv6IISc1tHYuOjmUUWcv09hdad1UHm7BkDOon5cmMty4gueNZ9TischGMeP6j8oJQ8NkEiT/L476ZTYO9H+zRl9+cCVo/vCgO8y9caAKns1Xv/CbbGnQ3qzr6wmGDlkV1qzA8JJXqsuCjtio4gqgA6sH0nogz/A1koa1P/ztB4+NxMLV3INWy789ZdRDcKELGnY8UHE6paW+M3ERqKQVuALcA== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HzqL6/TjCkxVGba4x6tc7tEUmFX/31ghwdrd3cDLs3U=; b=Suwqfs+Mdb89iynmdh+2loUplumeAXxfoQg9L3Few16XBNK/1Gf+VEvSW+TlR3hB3eXUChvCgGL3JJYP1QhoeNzkewcQHpF/RT/nbRmrpaG9SqVgWNztCRgu03bNLimS5nC+0EbDk/qhKOd8XDdgSb5mm1kEk7OYzOJGnvjg41we7PuKodR7BO+l0bUbL4NsMryRpdf0/r9LCOAyi/xBmHvWUdgs7d+tV4Erk8uWwQIx+rw4m5bs3/Bd5OizVqU+6lRthd+8j1ARNCHw28zXjaH+xQsJgSff/3BbmI6sYrHSyICTPkDtOcnUdcX0NV7uNUTm/myyH8BJ7b0xp32RgA== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=qti.qualcomm.com; dmarc=pass action=none header.from=qti.qualcomm.com; dkim=pass header.d=qti.qualcomm.com; arc=none dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.onmicrosoft.com; s=selector2-qualcomm-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HzqL6/TjCkxVGba4x6tc7tEUmFX/31ghwdrd3cDLs3U=; b=fCBwTzHNXNclJEfwLKy636xUOFE0VRfqqyW5U9hfw7AdYNbGJL35nuksc3iqxKA/8cEtnA6OVvLV0BXJEBhbsyEWxYJdc3LgWMndOqGeBhUztH2NcgY8uIH4rRsvaLqcu7AlpVKIu2XOyw8QdqDaw1KzdMeFEOu83zHm6FaDVMs= x-ms-exchange-crosstenant-network-message-id: 8430b806-3fd7-40d0-b862-08d75ef401a9 x-ms-exchange-crosstenant-originalarrivaltime: 01 Nov 2019 17:50:38.7226 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 98e9ba89-e1a1-4e38-9007-8bdabc25de1d x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: bYfmj3b8hNyYE2X0mK8vWqMYUn7VRFrYoYbtKaWqHVlndAFVVoPOHpCalXLbDWhDSgmX9zQ2/FFQXoAxem7JFcPD3ogqVhR1yCNwdcFFclQ= x-ms-exchange-transport-crosstenantheadersstamped: DM5PR02MB3290 x-originatororg: qti.qualcomm.com Content-Type: multipart/alternative; boundary="_000_DM5PR02MB316296DD2FBB624B16FEEC9481620DM5PR02MB3162namp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 17:50:44 -0000 --_000_DM5PR02MB316296DD2FBB624B16FEEC9481620DM5PR02MB3162namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB3b3VsZCByZXF1ZXN0IDUgbWludXRlcyB0byBpbnRyb2R1Y2UgaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9pZC9kcmFmdC1tYW5keWFtLXJhdHMtcXdlc3Rva2VuLTAwLnR4dCBhbmQgc3VtbWFyaXpl IGNsYWltIGRpZmZlcmVuY2VzIGJldHdlZW4gaXQgYW5kIEVBVC4NCg0KVGhhbmtzLA0KDQotR2ly aQ0KDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBLYXRo bGVlbiBNb3JpYXJ0eQ0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDI4LCAyMDE5IDc6MzcgQU0NClRv OiByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBbUmF0c10gQWdlbmRhIFJlcXVlc3RzDQoNCg0KQ0FV VElPTjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0 aW9uLg0KR3JlZXRpbmdzIQ0KDQpUaGlzIGlzIGFuIG9mZmljaWFsIGNhbGwgZm9yIGFnZW5kYSBp dGVtcy4gIFdlIGhhdmUgcmVjZWl2ZWQgc29tZSBhbmQgd2lsbCBiZSBzb3J0aW5nIHRocm91Z2gg dGhvc2UgdG8gcG9zdCBzb29uLCBidXQgd291bGQgbGlrZSB0byBtYWtlIGFuIG9mZmljaWFsIGNh bGwgZm9yIGFnZW5kYSBpdGVtcy4NCg0KLS0NCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCg== --_000_DM5PR02MB316296DD2FBB624B16FEEC9481620DM5PR02MB3162namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5t c29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJ bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUyMA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1z dHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0 aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZh dWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFb ZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxp bms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkkgd291bGQgcmVxdWVzdCA1IG1pbnV0ZXMgdG8gaW50cm9kdWNlIDxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtbWFuZHlhbS1yYXRzLXF3ZXN0b2tlbi0wMC50 eHQiPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9pZC9kcmFmdC1tYW5keWFtLXJhdHMtcXdlc3Rv a2VuLTAwLnR4dDwvYT4gYW5kIHN1bW1hcml6ZSBjbGFpbSBkaWZmZXJlbmNlcyBiZXR3ZWVuIGl0 IGFuZCBFQVQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+LUdpcmk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IFJBVFMg Jmx0O3JhdHMtYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwvYj4NCkthdGhs ZWVuIE1vcmlhcnR5PGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgT2N0b2JlciAyOCwgMjAxOSA3 OjM3IEFNPGJyPg0KPGI+VG86PC9iPiByYXRzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+ IFtSYXRzXSBBZ2VuZGEgUmVxdWVzdHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHA+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1z aXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2s7YmFja2dyb3VuZDojRkZFQjlDIj5DQVVUSU9OPC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjpibGFjaztiYWNrZ3JvdW5kOiNGRkVCOUMiPjogVGhpcyBlbWFpbCBvcmlnaW5h dGVkIGZyb20gb3V0c2lkZSBvZg0KIHRoZSBvcmdhbml6YXRpb24uPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkdyZWV0aW5ncyE8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgaXMgYW4gb2ZmaWNpYWwgY2Fs bCBmb3IgYWdlbmRhIGl0ZW1zLiZuYnNwOyBXZSBoYXZlIHJlY2VpdmVkIHNvbWUgYW5kIHdpbGwg YmUgc29ydGluZyB0aHJvdWdoIHRob3NlIHRvIHBvc3Qgc29vbiwgYnV0IHdvdWxkIGxpa2UgdG8g bWFrZSBhbiBvZmZpY2lhbCBjYWxsIGZvciBhZ2VuZGEgaXRlbXMuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0tIDxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5LYXRobGVlbjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_DM5PR02MB316296DD2FBB624B16FEEC9481620DM5PR02MB3162namp_-- From nobody Fri Nov 1 10:56:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09D9E120D64 for ; Fri, 1 Nov 2019 10:56:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z3A4HT4IlY4L for ; Fri, 1 Nov 2019 10:56:25 -0700 (PDT) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BB7D1200B4 for ; Fri, 1 Nov 2019 10:56:25 -0700 (PDT) Received: from [10.122.1.14] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id Qb9riLvVwyg8JQb9siO1vj; Fri, 01 Nov 2019 10:56:24 -0700 From: Laurence Lundblade Message-Id: <1D27091C-7C72-45CC-B562-AEE44F1296BD@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_77BA8A11-EA31-4CD1-BC50-BA4F559FD3D9" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 1 Nov 2019 10:56:22 -0700 In-Reply-To: <1fe80492-c242-ab64-cebc-b962e6046ac0@sit.fraunhofer.de> Cc: H Y , rats@ietf.org To: Henk Birkholz References: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> <0a8eb26e-427d-2edb-e4b4-b0bf17b4075a@sit.fraunhofer.de> <71C1CBBD-74B8-4651-A146-BC4ACD5336AF@island-resort.com> <1fe80492-c242-ab64-cebc-b962e6046ac0@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfP8TUl2+EWo3Y6KsO5H3FkjbMFXikQAS74MeiJbVGd5qyELUkYD6G1AnvV3M3GtnawaUNUan0Ohb/oslF+V+chpyCq30mp9Kpi0XK5JsHOd6+uP9yaUp sd6yol2v7e0T6cYvOmkSz0aucH/CryoefiKipLbMoTdFMo3aOLw5ZxSRkfgLyAJ2ijq1lOYAoQUOXOGesy6DUFuH2ZeDefCe3NXoaEfXL6eqsdtxc5Yutt79 Lo4rp3E5r5hczlquHOcUhg== Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 17:56:27 -0000 --Apple-Mail=_77BA8A11-EA31-4CD1-BC50-BA4F559FD3D9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 1, 2019, at 8:38 AM, Henk Birkholz = wrote: >=20 > I do not fully follow you here, I am afraid. Which Claims can be added = by the Verifer to what at which time? :) I assume you mean that the = Attestation Result can include implicit assertions based on the = attestation Provenance - expressed as Claims. I am not really sure, what = type of claims you are implying, though. Yes, more details are a good idea. :-) With an example of a chip made by = the fictitious =E2=80=9CAcme Chip Company=E2=80=9D.=20 Acme makes chip model X with HW and boot ROM that: - have an attestation key programmed at the Acme factory - prevent use of the attestation key unless - booted using authenticated sw - all HW debug facilities are turned off Acme operates the verification service itself. When it receives = attestation evidence from chip model X it knows that authenticated boot = was used and all the debug modes are turned off because the attestation = key would not be accessible if that wasn=E2=80=99t true. There would be = no attestation. Further, it knows it is Acme Model X because of the = particular attestation key. They only put that key in Model X device, = not in Model Y or Z devices. So, when Acme=E2=80=99s verification service generates an attestation = result it can include these even though they were not in the attestation = evidence: debug_disable_claim =3D disabled boot_state_claim =3D true They are implicit claims in the attestation evidence made explicit in = the attestation result. I expect there are a number of claims that could and should work this = way. LL= --Apple-Mail=_77BA8A11-EA31-4CD1-BC50-BA4F559FD3D9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Nov 1, 2019, at 8:38 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

I do not fully follow you here, = I am afraid. Which Claims can be added by the Verifer to what at which = time? :) I assume you mean that the Attestation Result can include = implicit assertions based on the attestation Provenance - expressed as = Claims. I am not really sure, what type of claims you are implying, = though.

Yes, more details are a good idea. :-) With = an example of a chip made by the fictitious =E2=80=9CAcme Chip = Company=E2=80=9D. 

Acme makes chip model X with HW and boot ROM that:
- have an attestation key programmed at the Acme = factory
- prevent use of the attestation key = unless
  - booted using authenticated = sw
  - all HW debug facilities are turned = off

Acme = operates the verification service itself. When it receives attestation = evidence from chip model X it knows that authenticated boot was used and = all the debug modes are turned off because the attestation key would not = be accessible if that wasn=E2=80=99t true. There would be no = attestation. Further, it knows it is Acme Model X because of the = particular attestation key. They only put that key in Model X device, = not in Model Y or Z devices.

So, when Acme=E2=80=99s verification = service generates an attestation result it can include these even though = they were not in the attestation evidence:
  • debug_disable_claim =3D = disabled
  • boot_state_claim =3D true

They are implicit = claims in the attestation evidence made explicit in the attestation = result.

I = expect there are a number of claims that could and should work this = way.

LL
= --Apple-Mail=_77BA8A11-EA31-4CD1-BC50-BA4F559FD3D9-- From nobody Fri Nov 1 16:27:29 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8045D1208D2 for ; Fri, 1 Nov 2019 16:27:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DC_PNG_UNO_LARGO=0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oxS-2GoSuEfc for ; Fri, 1 Nov 2019 16:27:24 -0700 (PDT) Received: from mail-lj1-x22b.google.com (mail-lj1-x22b.google.com [IPv6:2a00:1450:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6DF99120861 for ; Fri, 1 Nov 2019 16:27:23 -0700 (PDT) Received: by mail-lj1-x22b.google.com with SMTP id q64so11749514ljb.12 for ; Fri, 01 Nov 2019 16:27:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=V7XmUzgjnE2SId/lxJ2TfHKL09RBXmHlBH9KxBzlkoA=; b=MDmZ7n7c659JEJxWx91hkXFGKcDfrnIfIBbZTvv3ga2rsgopywhopmnrnIudnBfyl6 LwTT+VROiPoOx8syMXzlLq3qI3AcQ5y/glNk93cMvGApBTywLEt29+iWpmXi1gjiG1kf rwt3ErR4wpVLgMYhLP/4FqQ9/xOb5vbiwwSaYuum4Qkfeql1AnUmuptI/zmA7foGdxlo mKakLDCOjPQhH6BHxV6JRmkWl/k22lcqVr4a5kWq3NKwExADgaXxx1rkdqm4QzVDjpZL DmM2CAxOfUDyiTplGTL1hHJaAI1BnMoz0WELa7N09xuOkhz6NxEiJ7qNq2xEFoNgN2/X +eXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=V7XmUzgjnE2SId/lxJ2TfHKL09RBXmHlBH9KxBzlkoA=; b=cK9Ekp5ezt2sqvWnNjOarhMojQWiDj+2vBDkUC/W/qNEpzVwebWdlA9qPCGyu+QfRI PQF7JZFFTuB4UbJu6HjsOa3jzxqo1Yje6ADGRKl+ZpjIdFHSo49QYuzNbyb0GrZUhkvm TT42xMQoYt16lRR/WXahrruROeMNU0s9eQyjRuoiGpAp3eX+KgdMMyqinXBypodGXn3z za7Qr4TS/31GRdUFvqV+V0u6Czc7dHfYBI9rIOEJnKS+y3FVymy+h7v5OAboyNI1+x39 1Bcf6nfbySNiWEeh9ufwl2mCqxb/pWPmYbDAfVFPhIVn3KCszRZGj2STCeNoFCb42wIR ayIw== X-Gm-Message-State: APjAAAW5nPDQfZqUesjp1+bQXXvAdvJoZw4Er7rA4BoPuot+U7hHwxh7 twp6GSScnLvBQqDXh8JRsvA4ounnvvQtt/1XhpJVHhgLJVI= X-Google-Smtp-Source: APXvYqzX/SUk31ZUmdKTd3s3e6x5qKHY98FQHGOdHBR67lhZJUpuypbmd05heicoub/Z1cCJX6LSp1+/CSHnVxlsY3w= X-Received: by 2002:a2e:9107:: with SMTP id m7mr9805695ljg.113.1572650841214; Fri, 01 Nov 2019 16:27:21 -0700 (PDT) MIME-Version: 1.0 References: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> In-Reply-To: <26A6D463-2635-456F-B0F9-78075B07FDC4@island-resort.com> From: H Y Date: Sat, 2 Nov 2019 08:27:09 +0900 Message-ID: To: Laurence Lundblade , henk.birkholz@sit.fraunhofer.de Cc: rats@ietf.org Content-Type: multipart/related; boundary="000000000000bf2d5a0596514e48" Archived-At: Subject: Re: [Rats] About current RATS drafts X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Nov 2019 23:27:26 -0000 --000000000000bf2d5a0596514e48 Content-Type: multipart/alternative; boundary="000000000000bf2d590596514e47" --000000000000bf2d590596514e47 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Henk, Laurence, Thank you for confirming my understandings. Your comments really help me to read current drafts. :-) Thanks, Yuhei 2019=E5=B9=B411=E6=9C=881=E6=97=A5(=E9=87=91) 23:25 Laurence Lundblade : > Hello, > > A frame up that works for me is to think about 1) the claims, the > attestation format and its details and 2) the transport / conveyance and > its details. > > In the TPM/TCG world the claims and attestation format is locked down by > what TPM chips do today. It is a set of registers that hold hash values > used to measure software. In the EAT world, which typically implements o= n > fully functional CPUs, the claims and attestation format is not at all > locked down and our work is to define it (the eat draft). > > A lot of the network and router folks have been putting TPMs into their > routers and now need a way to get the TPM output off the router to the > network management center. This world runs off of Yang protocols. The mai= n > interest there is a very specific Yang-based way to move TPM output. This > is the yang, tuda and pubsub drafts. > > The EAT use cases are more about TEE=E2=80=99s and lining up with > end-user-application-oriented uses like FIDO and the Android key store. > They make use of all the existing transports used by application protocol > (mainly HTTP) so there=E2=80=99s no worry about defining transport. > > I think a few of us see EAT as the more general and flexible attestation > format that will eventually replace the TPM format. Because EAT can use > CBOR and COSE which are carefully designed for constrained devices there = is > some hope that it can go into TPM-like HW. > > The architecture draft is trying to tie the two together in a sort of > unified field theory. Seems possible, but hard to me. > > LL > > > > > > On Nov 1, 2019, at 5:08 AM, H Y wrote: > > Hi all, > > I'm Yuhei Hayashi, network security researcher of NTT in Japan. I > learned about the existence of RATS WG at IETF 105. > > I'm interested in the work of RATS WG and I'm trying to understand it. > So, I'm firstly trying to understand which drafts contain the > standards listed in the charter. > > I will attach the result of organizing it from my own point of view. > I'm glad if you confirm that my understanding is correct, if possible. > > Thanks, > Yuhei > -- > ---------------------------------- > Yuuhei HAYASHI > yuuhei.hayashi@gmail.com > ---------------------------------- > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > --=20 ---------------------------------- Yuuhei HAYASHI 08065300884 yuuhei.hayashi@gmail.com iehuuy_0220@docomo.ne.jp ---------------------------------- --000000000000bf2d590596514e47 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Henk,=C2=A0Laurence,

Thank you for c= onfirming my understandings. Your comments really help me to read current d= rafts. :-)

Thanks,
Yuhei

=
2019=E5=B9= =B411=E6=9C=881=E6=97=A5(=E9=87=91) 23:25 Laurence Lundblade <lgl@island-resort.com>:
Hello,

A frame up that works for= me is to think about 1) the claims, the attestation format and its details= and 2) the transport / conveyance and its details.

In the TPM/TCG world the claims and attestation format is locked down by = what TPM chips do today. It is a set of registers that hold hash values use= d to measure software.=C2=A0 In the EAT world, which typically implements o= n fully functional CPUs, the claims and attestation format is not at all lo= cked down and our work is to define it (the eat draft).

A lot of the network and router folks have been putting TPMs into the= ir routers and now need a way to get the TPM output off the router to the n= etwork management center. This world runs off of Yang protocols. The main i= nterest there is a very specific Yang-based way to move TPM output. This is= the yang, tuda and pubsub drafts.

The EAT use cas= es are more about TEE=E2=80=99s and lining up with end-user-application-ori= ented uses like FIDO and the Android key store. They make use of all the ex= isting transports used by application protocol (mainly HTTP) so there=E2=80= =99s no worry about defining transport.

I think a = few of us see EAT as the more general and flexible attestation format that = will eventually replace the TPM format. Because EAT can use CBOR and COSE w= hich are carefully designed for constrained devices there is some hope that= it can go into TPM-like HW.

The architecture draf= t is trying to tie the two together in a sort of unified field theory. Seem= s possible, but hard to me.

LL





On Nov 1, 2019, at 5:08 AM, H= Y <yuuhei= .hayashi@gmail.com> wrote:

Hi all,

I'm= Yuhei Hayashi, network security researcher of NTT in Japan. I
learned a= bout the existence of RATS WG at IETF 105.

I'm interested in the= work of RATS WG and I'm trying to understand it.
So, I'm firstl= y trying to understand which drafts contain the
standards listed in the = charter.

I will attach the result of organizing it from my own point= of view.
I'm glad if you confirm that my understanding is correct, = if possible.

Thanks,
Yuhei
--
----------------------------= ------
Yuuhei HAYASHI
yuuhei.hayashi@gmail.com
----------------------------= ------
<RATS= _drafts.pdf>_______________________________________________
RA= TS mailing list
RATS@= ietf.org
https://www.ietf.org/mailman/listinfo/rats


--
------------------= ----------------
Yuuhei HAYASHI
08065300884
yuuhei.hayashi@gmail.com
iehuuy_0220@doco= mo.ne.jp
----------------------------------
--000000000000bf2d590596514e47-- --000000000000bf2d5a0596514e48 Content-Type: image/png; name="Screen Shot 2019-11-01 at 7.04.08 AM.png" Content-Disposition: inline; filename="Screen Shot 2019-11-01 at 7.04.08 AM.png" Content-Transfer-Encoding: base64 Content-ID: <16e2947a32662cf04f21> X-Attachment-Id: 16e2947a32662cf04f21 iVBORw0KGgoAAAANSUhEUgAABPsAAAFQCAYAAADJB3u9AAABRGlDQ1BJQ0MgUHJvZmlsZQAAKJFj YGASSSwoyGFhYGDIzSspCnJ3UoiIjFJgf8zAxSAIhEIMEonJxQWOAQE+QCUMMBoVfLvGwAiiL+uC zLoftelScqykkUrYF5ZDbFnMmOpRAFdKanEykP4DxOnJBUUlDAyMKUC2cnlJAYjdAWSLFAEdBWTP AbHTIewNIHYShH0ErCYkyBnIvgFkCyRnJALNYHwBZOskIYmnI7Gh9oIAr4+7QqhPSJBjuKeLKwH3 kgxKUitKQLRzfkFlUWZ6RomCIzCUUhU885L1dBSMDAwtGRhAYQ5R/fkGOCwZxTgQYgViDAwWM4CC DxFi8UA/bJdjYODvQ4ipAf0r4MXAcHBfQWJRItwBjN9YitOMjSBs7u0MDKzT/v//HM7AwK7JwPD3 +v//v7f///93GQMD8y0GhgPfAH+sX33ldaaBAAABnmlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAA PHg6eG1wbWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iWE1QIENvcmUgNS40 LjAiPgogICA8cmRmOlJERiB4bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjIt cmRmLXN5bnRheC1ucyMiPgogICAgICA8cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIgogICAg ICAgICAgICB4bWxuczpleGlmPSJodHRwOi8vbnMuYWRvYmUuY29tL2V4aWYvMS4wLyI+CiAgICAg ICAgIDxleGlmOlBpeGVsWERpbWVuc2lvbj4xMjc1PC9leGlmOlBpeGVsWERpbWVuc2lvbj4KICAg ICAgICAgPGV4aWY6UGl4ZWxZRGltZW5zaW9uPjMzNjwvZXhpZjpQaXhlbFlEaW1lbnNpb24+CiAg ICAgIDwvcmRmOkRlc2NyaXB0aW9uPgogICA8L3JkZjpSREY+CjwveDp4bXBtZXRhPgpGjMVWAABA AElEQVR4AexdB5gUxRIucs5JyRkkZ8lIzgIKoiIoqCCICIKACBIUUFEQJCsqSUFBQZAgIkoSlCjC I+cgOefgq7/veq93bnZ3dm/3uDuqvm93Uk+Hf3p6qqsrxPuPiYQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEBAFBINYjED/Wt0AaIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAIKARH2 SUcQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEATiCAIi7IsjD1KaIQgIAoKAICAICAKCgCAg CAgCgoAgIAgIAoKAICAIiLBP+oAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBBHEBBhXxx5 kNIMQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgoScIzl68SVMX7fd0Wc4LAoKAIBDrEejc oiCduXSDvlt+ONa3RRogCAgCgoAdAvHiEfV4+hHadfgS/bTmmF0SOScICAKCQKxHIEXSBNSJ+brN e87Rig0nY317pAGCgCAgCNghkDFtEmrXMK/dpUjnPAr7Ll+7TT/8LhPgSIjJCUFAEIgzCHRoko/O XLgpY12ceaLSEEFAELAioIV9x05fk7HOCo4cCwKCQJxBIH3qxErYt//YFRnr4sxTlYYIAoKAFYG8 2VI5FvaJGa8VPTkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKA ICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQB QUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQB QUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAg IAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIi7IulD06q LQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8VETkWBAQBQUAQEAQEAUFAEBAEBAFB QBAQBAQBQUAQEARiKQIi7IulD06qLQgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAIWBEQYZ8V ETkWBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEARiKQIJY2m9pdo+EHgoQzIqVzgDpU+dmI6f uU6/bfqX7tz9z8ddctkbAhPefJQK5UpNCeLHo0tXb1Pf8Ztp+4EL3m6Ra4KALQKh6kvy3tvCLScF AUEgmhGIiWNRooTxqXi+tFQkTxo6c+Embdx5jk5fuBHNyEhxgoAgIAgIAoKAICAIRA8CIRf2VS+V hSoVz0iJmckC3WaB0/8OXKT5q45ETwsfwFIgjPry7cqUMnnE4/2P5XzLN5yINWigDfUrZlUCy2yZ klPGtEnoxq27dOrcDdq69zwtXX+cTrAQMzopf/ZUhMkCKG2qxJQlfVIW9kVnDaSsmIrAwxmTUakC 6Sh/9tT8S0WZ0yWlqzfu0PHT19SE8pe/TqhjXf9Q9KW48N5rfPQ2Jo4Dum6yFQQeJARyZElBzavn oJy8zZYpGSVKFJ8uXblNe49dprV/n6bVW0/R3XthC4oxdSx64rGc1LVlIddjO3zyKrUZuNp1HBN3 gHeDSlkpSaIEXqv3HzN581cdpSPcJiFBQBBwjkCxvGmpZtmHnN8QnhLv3Lzfj9BR5vOEBAFBQBCI qQhESINCUEMwJ/3bF6dkSdyZlMaVs9Gm3ec8MiVJEycgTJ4TJohHV6/foRNnrxOEVVZyms56XyiP H0qfjFKlSEj37hGdPH+drly7E/TifJVRIEcqN0EfKpDroRRBr0eoMsSHd0CHEpSV+4CVwPiWeyQD Pd8oH/UZt4n+3HHGlSQm9gdX5WQnTiIQP148eqpOLurYrIBLEGw2tFDO1IqJ7PxkQXp/2j+sYXvS vBzU/dj+3lvBiMnjgIw11qclx3EVAYxxbzz7CDWtkp3i8yKcSeBFCvIY16hSNtq27wJ1GbFeXY6p Y1HpgunN6hPqn5iFlrduM8MWQ6lTiwKERXMndP7yLZq5VFYgTax88ctmWtl/MBGAYgEWMgKh06wh PPuXg4HcKvcEAQHhxYIAomQR5xEIqbCvSolMkQR9GtG65R+mLxbu1Ydu29E9yiszC33y46930LyV kTUBnabT+YR6W7FoRhrxWllXMecu3aJmvVe4joOx46SMs1yulf4jG2mpNVEMOM6UNikNfaW0Mj/2 Vh0IgmGKYwr7Ylp/8FZ/uRb7EUjH2p2DXy5J1gmkXctSJE1InZoXDKmwLza/91bMYvo4IGON9YnJ cVxFoEPTfNSsmu+JMITzmmLqWHT+8k1dRbW9c/ee7UKyW6L7fIBvh1PC4rhQBAJO+OWI1LL3oCIA gX+gdOXa7UBvlfuCgIDwYkEAUbKI8wgEPsI5gKYOC/Q8UZ3ynlWmk1o0Aa3HOk/reeuxThdd2ySs kWiSVaPRvBbovpMyTp+/Qcv+PKG0Cq8w87d++xlatj52mPC2b5IvkqDv5u27tPvwJeV70MSNFQ7c yPr8rcduieVAEIgiAjAHcyLo08WkTOZ80qbv8Wcbm997aztj+jhgHVusx9b2yLEgEBsRgDuCdg3z Rao6XGjsOXKZrt+867pmfo9j6li05I/jio+AJt+hf6/S1EX76fadmKvV5wLX6Y6FJ3J6W1xN54Rf jqttl3Y5R+ACa8QGSvEs2s6B5iP3BYaAlfeyHgeWq9wlCMQtBEI2+0zBE9uKxTJ6RAv+X2D+ASGO UPARGPLF38HPNBpyNLUDUBxMuLt8uJ7OXAxbkYcZb6vauZTZENTnhQSB+4HAI7nTUN0KWSMVvXXP efr65wO089BFSs4aGY8WyUit6+amhzlgzm3WIgk1xdb33oqLjANWRORYEIh+BKA9bwrxUIPJ8/bQ 9CX7VWWgEVOjdBZ6rkFeSmX4CMbFmDgWwd9v6/4rVd1j69/+41fovS+32Vb/4IkrtuflpCAgCHhG AEL/X/761y1BJZ6/vszuWUzCmHbwhLtPTHnnTIRkXxAQBGIiAiET9sHHiA5m4Knh0PwzhX0vNs1P Odm3XG6Lfzn4UsDkGrTzYNgk2km6b5YdVPfov9rlHqbKbFoM5/jwYQettwPsXHrfsSs0i9P+ey5y wAf4A4BT52olM1NWDhQB071rN+/Q0VPX6I9tp2n28oOUJV0yatcobyS/eNDsg5kfCD4HJ83b7Qoq gfag/SXZqT+i1qVOnojucSJEiNt79DJ9y/lu2nVOV53yZUvlVxmdnyhIBXOkVj52EDl20g+7bZ3I limUnh4rk4XyZk1FebKmJAhpj7Gz2cO86r3z0CXVvhvG6j0qVIyj2bVrmJeADcxGPv1uJyVIEJ9a 1MihNJ3yZktJJ8/eoF0syJ2z4hBBAOKE0F9yPezuW3Az+3bUgj7kAYfaMOvGT5PTfgNGH1oKyZMm YKyJ9jHOqLuVKrCAplWtXJQkcXy16r9wzTFasdGdEbDeYx4H0s/M+2U/5iPQ7anCkSbB8McHZlBr isCM/+ipw/TT2mPUuk5ugoaqU4LpFsaHR9k1ABZFMO7AdB3vAoLUbNh5Vr2bVp+g3t57u/cWmg8Y X8ty5G4I0uHz6Z/95+mrn/az5s4lNX604OtNqmZX4xvaBo2eP/45Td/8fFCNWWabnIyX1jqb92M/ 1OOA+V3wdxx2OtagjPLsWxTjCFaagdsqDmAAZ94mNWVcMf6izRhn56w47OaaAGlRx6dZYIxvAPyY xmPpy/lLNzk40EVasPpopPRm/rIvCEQFAfAQVlqy7rjrFDTkYEWAn5W8jUU6LcakJ5m/Aj8H32p3 OIDbGY6OCx7EdDwCvg/vlN0Y5g/vgXepLQsmEbwM7+SG/51V+er69Hj6EeZBUqrDv9gfMBZumrCv wsrFMyleLRHzOeDPNu85x2PkPltff3jfn+L3HlrfWNQGvwFe8xALCcA7aoJz/4k/7KF/eUHTHzrH 3wCMzU4pWDxelRKZ6RkehzKxtic0oT6YsV0FZbFihu9CM/5maMzis/3Q8dPXVVA18NkI4gL+G36X MUamSZlYPe9dhy/SNBa6QJhpJX+/h/7yy9by5PjBQuAaB1OzvlNZuJ9bCfNVaASbZO3/v/Jcodez RdT7j2/1tn3nqdvIv9Qt/vIbuhxrGYGMS/7wEWZ5a/8+pfgSuHJoXCUb5eIxLQHzov/jMRl+WlEX zDHtCAveT9bMqeaimF9mz5xcjYWYXx769wrhW2I3PzTLxzhshynuC0QOYFdPOScIxHUEQibss5rp fvfrISqRPx3BYb2mOuUeognf73L5TIHGlp1/EkRjxQ+E+xEJ1Uk6PalLxYK0N9sUiRRtKU2KRFSK GTL84KAVAiREzdSUPnUSmty3ooq6qs9hi7JRD/wwWQZzWstDJCfz/FoWDsL8ZQAHLan3aGStoAT8 YUCEV/zg73Dub4fpk1n/U0WXLZzerzKeqJFTTTJ1vSGsMiNGYVLehYMGNK+eM5LQApN+/KqygLMR B1NBYAEI3TQVZ988lYpl0ocEoUZtNss2nwkCrOBXrVRmGj71H8XouW7wsHOPmUAENolvWENXZQaz AE84rB9iMwun/QaTB+CqqSwLOvGxseb9XIM8buaZ127cdSTsC7Sf6frINnYgkD51YrJqnkGQ9xGP H1rQZ7YEUaSnLtpnnvK6D6YMvj8xPlkJZnX4qUkyM1Edh69ze6+9vffW9/bCFX5veQHEdDeAtmGh BkLGgZ9tpefq51Vl6XpAKIUFCvyAQb+Jm13jt9PxcvzcXTo7222oxwH9XQhkHHY61qCMMoUycCT6 iPEG2FmFfRD0YXFB0wHWzDH9kLblRRUEf7ESJtyP8a966czUsMevhMmKkCAQbATstJFhYv/RzB2R BP3Wsr2NRUjbnQVrEPRZCWMQFjhMKsALtHinrGOYv7wHIqaDJ9GUhQWMejzAOQQa0WZgmdMmUWMc +CCTMPbiV44XSHp8ssEtyjomtKNeL0cZ0iQxb2Gtx0RKu9vtJB+s3nrab2GfNQ9Px8Hk8bDIkJcX GzSBBy+aJ60S9pmYQUCCb4PJH+Ie4PJKi4IKz5VbTil+HOOhJggB8MN9fcdvduM3A/ke+ssv63rI VhDwFwGz/+fjfv5U7dxurogg9Edf79u2qN/zPl0Xs4xAxiV/+QhrebV4ro733STM5/EDj/PG6A10 Ntz6SqfBvLrf88UijXvga4vz+Ilf48rZ6YffD7McYDeBT9Zklu8JU8y/IUy0klVeYI7v1rRyLAg8 KAhEfG2D2GJooYARMgnCpl83uGtHYcKCwSLUNOilEpEEfdYy4U8LkYOxEqvprXbFIgn69DW9tZqu 6POethj07QR9dunBLINxCgUNeqkka+JFFvRZywKT98GrZdw+XtY0j1fL7iboM68nYH8Wr7EWFBhP X4QVX2jumZSaPwwTelcgaAlgEhAV+ps1+6xUt4K7X0msMpe09EmsYDmhQPuZk7wlTcxBIEfmiDFC 1wpC44ssPAsGQYvYTtBnzRsTyF7PFbWednwMjRVT0GfeiEjq73cp4yboM69jH5Ngc1IXrPEy1OMA 6h5TxmHUxROBuX7p8fyeLqvziJQKbWwhQSAUCOxnqwcrQRt18lsV1bvP3S8gqs+LnXaCPk+ZYUyw o2DxHnZ5gxe0CvrMdBBCQYNNE0yaBzNfZRX06et2W0/tskvr77lg8nimoE/XA4tFVtICO+t5fQw8 IQAwBX36GraYvL/KvnBNiq7voVmm7AsCgSAAIbh1nnKZA3gginmw5n3+jktR5SNQnlXQZ2KTlwWc /V8obp6iwrlS0+ge5SIJ+twS8QG+H7CcwwKSJ/KEqf0XwVMucl4QeLARCImwryZruWFw03SaNd/+ 2X+BI1G6C/tw3Qzi8Ter5XpSB8Z5/P7ee4GcpkP+0JowNSdwbhWvLA76/G9lVgszFE0QTGktCjAj WB006cdVR+nNTzfSB9O3u7Qvbt66R7vZrA0TfZjqWknXG+ZxMP+A6YZJMJXFysPk+XsImn8mYSCE ZhvInzLMPOz2YbJnarghDTSSYJa8mk3N8HEyCQKB9k28Tzp1epjhWAmCi+rGarr1unm8astJ81Dt Q/DwbL08NGdYDerNwg1oNpnktD/sYLM3qzAR2qXmhAW4mH0X5UCF3BcF2s985SvXYx4COSxuBlBD jEuhIJh//cwmclMW7KUZSw4o8ymzHGinehLYmel87UObzhfZpYFZB8if8dJXObgeynEA+Qc6Djsd a1BGVAnalRDmaULQg3fZTPwt1nyZufSA0qjGtVvGirhOK1tBIBgIbGGezMoPIF9oVXzYtQxNe6eK 4uGMbuqoWAjpTNrClgNDv9qmXB7AnYlJ+9jVynLLQrF5Xe9HlffQ+Xja2gnmIPjUVDxfOqXBpo+h 7Q2NlfH8s5r+Ic26f87QngB8VsNiAnyh9WcGiwolj6fb5+S7Y/fN0Pdja3cdfQtmuHbk9HsYTH7Z rh5yThBwigAsnv6z8FdO531OyvA1LgWTj8C3wAzKpOuH8QaCfk2vtSrsxrvg/BFW5Fi+4YRyD6XT 6S3cncCNg1MCplDecCIvcJqnpBME4jICIVEJMAV4AO939mUF/u04m7DCjxs+5ppqshkTTFUxYPUe t0mdnsoMJFYLNI1jsy/4+rCSk3Rt2STTJJhIwfRMUzxiAV/zCDMpDIwg+NGzrj7CNwF8yYAWrjmq hE7wwQIfVE16rVCOqt/rVEpdxx8GxcY9f3Ud6x2Y5ybhVeDveQv/VyZ93K2sm3BSD6Bghv0pw8zT ut/BsooC9emeYzaqwRNpoc03tmcF5ZtF3wstoFH8nOyYM6QBEwZ/ZeuZgW1QKStBy8ekrBkjPgTm eev+9MUHFI65w/3mmNfxPMBcQyvg0zk7XSZx/vQbROMznze0S0sWSE/AF4RVZJOg1efEp06g/cws S/ZjBwI5DKZG1/ikjb9Pfc3f7Zq/T1M+NltDFO2f2F+k6esPwviJfR51yxJjhHUccUvg5QDM0sDP t9JG9gH4+lNsVsemwVaCsBtjNFwWTOKyYa6rSbtX8Ge81Pd624Z6HIBgIJBx2J+xxlv7nFzLkcV9 zMSCGQS/oNXsRwcCYAR+uejBX46TMiSNIOANASxiwq9tv+fdNTf0PfhOD3yxhBo3Bkza4uZfV6ex biHAhmsOTeCT+k7YrPz/QkMa45mpXT/7l0O0+I9jOnmkbbB4j0gZh5+Aa5dPv9vF/gTv0Sfdy3Pd IwRRELyhPRBQWk2PwbOCZwTtOHBB8VThWSr/0G+O3agP/dpizB3epbTtPQ3fWK740VDweGjjJPYx uI79tebn57eV/RZ6okX8vMbP2UWp2VJiYu9HCRYaJsHtwOApfyvfrx2bFeQAL+58OtoIIS8okO9h MPlls96yLwg4QQD82MhvdiiXALBqusXKFIHwG97KcjouBYuPmLfyCI0NHwcHdCiuXMDo+mGxB/N+ +DGF4M9qsWf1Z405GHynasLcrgG70vrKi7sbK6bghUFO5AC6HNkKAg8qAkHX7IN03urPagUL+zRZ Ax3AbNKqeafTBmObx7JCiBVimL/p33ZmwkzCaiXUsOGHz7LArJgWOErXJnanWNPCl7N5M2+9j4kz tAPtJuhWZ6VQYQ42mYw28l66/rhL0IdjCGVnLz+EXRchOIBVo05fhGN5+GyAZiAYwkUckMCqQZeB /d84IQg2uoz4Uwk6PKWHuUzPZ4oop/We0ng6v4TbatUcqMsfKRB89Vj7ohONAtwbaD/DvUKxC4GM Fn9MqL01iE1UWoQxqQ8vfGAxwBT0Ic8dBy9E8guYLpWzd8taJ9S555gNykk9xrovF+61JlGavkN4 UgbNZAi9IXw0KUO44C/Y42WoxwG04X6PwyaOdvvWaOPQmB/eubTLtQO0sa3jrF0+ck4QiAoCi3mB bBAvCFz14hcSPB/8GyPwhS+Cc3fTrQd4C3MRERqsJiVKyDNJDxRM3sOuCHz/3/1iG2vR3lRaJNCo NQnWIGlThQmyUlnM6U0Lgb2WRV0E+ggFab/JwebxUNeJrKEI4SUCaPzMfNRJDhRlRxBCfDBtu1qE gDbPMsMPNtJj3OrFFjKwZMF3Z+rifZG+aaYpdHR9D+3aIucEAX8RwHvR/ZO/lDUbAgBpoVQw+Q1/ xqVg8BF43+HTHnwZFHNGfhOmoGNig4UPkLkYgmOkH8MLRqY/6y8X7ou0SIkAmJ7IE6ae0st5QUAQ cEfAN2fmnt7nERx5miYdiC6LaESaIOGHo16TEMwD0R2DTRDoacGczhsaZ2+100f2Wwi1oGYNLUT4 HtAEwdurTxZSpr4YbDE5hmAsEMrOA1ttFjKVyJ+WI20mUdE2wSibTDDyNbEMpBzrPWCirOYXENJZ KcxJfCG309D4s9NyO8nMudWvHaIVI8iHJpjiOiWoioMZhD+wFxrnoyJ50tjeCn9Wv208aRtF2fYG PomJBD7AplAPTvJHzdpBj7LJNwSJmsCIOjHhjUo/g4NxodiFgBkdWtfcnJzoc1HZ4r2Hxmk99ikJ 7Rn4QU3LCyOJEsWLpHEcaDl4bzHOaYKGGN499GdNcKZumokc4ffaJEzcQdDOCfZ4GcpxQLfhfo3D unxvWwRFQvRLk+DzCj9MoiF4gAYNxikhQSCUCIDf2bDzHAfsyUMwwbVzjA4t+U7NCtLHrNHijTDp Ax+hJ4fQ6ujCfNVs1oTLwpqqFY3gX8jngE10Vp1/sHkPna/ertx80m1x8Ogpd5/CSJc4nLexCt4b VsxGO/Zf5AWai5H80Hlrky47kC2CiYWCx/uXNddn/XLQUZXgJsdcUMVYZdJZFpwiiqcmCGxxzjTj 098VnSY6voe6LNkKAlFB4AueF3oyLw0Wv+HPuBQMPgLatSahfTsPXXTz5ZcpbZh7JatP633svsq6 gINvwOZd5whzL01ZM3k24/WGqb5ftoKAIOAZgaAL+6wmvBlZo+u7oTU814CvVOPoj0kSha0aeE3o 50XNTPp5m2tyO2LmdjbbKOc2+UVeWuUYfuj6TdyiTOD8KQOOWt9mJ8Xmyq8/90clrR0m0Nqxkl10 R4SRd0p29zu9V6eDABg/RHWCL0VEbzIJAkT4VfyJNQn9IZgKmcI+mJjAfNvqVxBmc9aPlF05dpja pbOeM4Uo1mtyHHMR0Kb8Zg1hThksgnbGSI7o6EnIHaxy7PIxfZj6ez1U42WoxoH7OQ7bYWs9h0UY jFUwb7ESnGb35YUrfDvhlsLUjLKmlWNBIBgIwKQXLlVgatW6dm6lWW9dOKxcIhML+3yXtpa/62aA jubVcxB+VsICxB6eLPpDweA9PJV3jQVTnmgTT17hEkUv2IL39WRuu3HXWU/Z+DwPLRdMfq10lV2p YIEEkYKtFFUeD76pA11UMDV6rPXSx96+O/fze6jrJ1tBwCkCnqw8QslveBuXQsVHmP6Egc0dFuCB rPMhu7EH6aDRbZL7kXkluJYz7jnLkSDwYCAQocYUhPbmYsf1VhVeZJslfVK3n7UoMIxgEoNNNz04 LodJhqcftL72hUeg282afS8O+0M5hzZXKnU9sbqNKET+aK3Bl4EnQZ8TpkiXHegWTJuV7OqvV6ut ae/HMfyvdP3oT1qw+mik4q0flkgJbE6s3HxK+Rg0LzXgVfjKxd399cGZrBOKaj9zUoakiTkIQGvV SnUsUZ2t1/05HtKxpK2gD5MtO+fI/uQdyrShGC/N+gZzHLgf4zAWifwlBC34cMZ2jyZzCCiEaHZC gkB0IQChEoRNXUasjxS8A1plpna8pzod+ddd28tTuuFTtwXVRYKncoJx/hIL2jzxAmb+CBT2zc8H zVN+7UNTDq5SrL/fWQsRFBt5PG8AxNbvobc2ybUHC4H7wW+YCIeCj8DChklaGcQ6BsI/vR1Z77dL I+cEAUEgOAgEVbPPqtXnTxXhN83qz0/fn9jhJMma7gSbimCCbCqkwcG6ndmqLsu6PcFmuvBXM35u UhUcomXNXG5+abB6my97SnbAfNF6q1q50M6b9UVrtFcMeAh8AdMHrMo+VTsXIZKRU8LqiLUMb/ce PxNZUFGITZWh6m1SQXbAbCU7ExZrmlAdQ9j6LfsRNKPfoax7kWWXripY+4O+AL8T6GtmXqY6ucqX y4PJuRMKRj9zUo6kiRkI2Gn2wWdVuUcyKBNxu1rCt1MiZno8rfrqe7DwUY4dHJuE8WrSvD0c0fEK O4n/jxaPqk0pLf6hzPT3cz8q46WTegdrHAj2OGw31ty1DE5mYBO0FWO3E/NvLHJAe7lSsYz8fchN ZTgCs0kVWSt5zq+HzFOyLwiEHIG9rHGHxVH4ktQEDVPwXN4Ii4udn3R35WKmh8Y7fBdP5jHP6lPZ TBfT9mFyDx/UnugCW1DMWXGY/SEfdFmPeEoblfOxlceza3Owv4f+8st2dZJzgoC/CASb3/C3fKSP Ch9h5VOgvVw4l7t7pZPnw1xaWV1b5WW/+VjotCqzWP2K2i2iB9JOO14skHzkHkEgLiEQVGFfbfbX ZxImfruPRPiEMq+VZtNMM0JXRZ7IpOAJLFaNrSZJ1kFB5+MrHUwDzly8QdqXAO6DqYhTYR80EhGE A8wrtoh+CLOqWe9W01VQW60FZ9X+wwCX6+EUbj5nrEI0CJSwQqvJOqjq83rrpAyd1m4LfGEaY/oy RKTd+SuPuLSGUO/WdXK53Q4BGTAIJRXNk5aGsQP6lVtO0lSO6mT1jQZhipVMPzm++oN5L3xdmcI+ 8xr2Mdk4e/Gm9bTtcVT7mW2mcjLGIgAzKkSvRdQxk97tWIqGT/1H9V99Hu8SFkFghn6HhT+t+q3U l2y3+TkKr9W8f8TMHXSaAwaBMJn05rDeNtNoOunveOmpWtExDkR5HGaBhEl236jzFn+c8HmKtkGA gX4x5OWSlM8SQMrME+Zr6AtYBMLYBr85+A3oUEL5ctRpnWhS6bSyFQT8QeC9TqUoa8bkNJVNd/Fd NgV54NcK53af8MEXn3VSZy2vaN40btYQW/eeJwQBgl9S8CdYPIuNLi7KFnL/HiDIEhaGwB8iWrsn P15WfKJ6HJN5PH/bFtXvYVT5ZX/rK+kFATsEospv2OXp9Fww+IjOTxRUfoLXbT+jim3FSilWFw4n z4bxqMd5zDMJ8/z67IpkoWGZVY1dYMES0KQjNv5Qzeue9v2Z93nKQ84LAnEdgaAJ+wrlTE3wI2QS fLuYgizzGrTXoMWmCZOfGqWzqPQwsSVKpS8RVkX6ty+uGEBEv/2UI/uAnKSD0MbUOKxcPBNhUv4t r65CeIUVioJcdziFLsf+377/7YhibPNkTUnT3qmioh3OZsfEmGRhZdYaaRj10D5izl2M7PsOZSHq WF7OD9o5127ewS0uKstaGnDAj7YAj2fr5XFds9txUsYeDwJWnd9fO864YYJBd8wbFejHVUcUxhD+ PWJh4heuDr0jeISIRyRkCGQhiPuTPyxw+g9/FEW4PtVLu5vZoj07jGjKTvqDxuAfdhCNlaTsme0j QP3KDsn9oUD7mT9lSNqYg8Cn3+2iL/pXUlq1ulbQthv6SinFFB04cUUJdLD6iUksyIn/RzhYtxIc 4iMKYt6sqdQ4aGd2b70nuo8DGS891TE6xoEoj8MOvlHWxQq096PXyio/pCULpPMY3VzjAp98CMax ZN0xZpSPse+ySypIy0O8CGWSXZ8xr8u+IBAoApikwlUGhH4I0rCW+SAsdiRPmoAaVsoWqQ8jGIUv Aq9nUkl2bTJzUFU6xQsasHS4xa5Gzl2+yZrMV5XFgzX4l3lvTNq3tuuDV8sorBDFGKZt4GMwEYa7 Aywah9KMLabyeP4+L7uxzZ/vYTD4ZX/rLOkFASsCUeU3rPn5cxwMPgJj2/AuZWg9z8mg+FGzzENu VcAi0Kqtp9S5DbwQDgGcuWj95rNFKBsvGu1lHgbz3TYc6Mkk5Ll0vTO3SeZ92Pdn3me9V44FgQcF gaAJ+0yBGsDDyqwOOW4HJswoTWEf0iAPCAchhKlQJOIuDDT1OagFCIySJifpIGCrzk7MTe0HmGxa zTZ1nojEC8KqNQgRZd9sU5R/6jDSH3xo7T92WZ2H+QQGPdNsGII0vYLxw++Hac/hy6o+OiNEsJs+ sIo+9Ll1VMYR79lMnr9HCVZN5hRRhwvnKmp7IwSsiDwcajJXaGD2WIkFs/h5ovksnDRVxp30BzMv aPdB48pKqMdv4f5vrNc8HQfazzzlJ+djNgL7+J3/aY29digWPawLH2hNSiPKrafWwVQXmjHmu4mI 1PjFZApkvPTUnugYB6I6DjsZa+AaAWbbSdk0WxMirtd16N8RmMLsDIsv+Hmif/ZHRLv3lEbOCwKB IGBq2CFaqjf/kFdYK2/aov0+i/mbNfmgrWpG/cY7Al7LSm0b5CV85z9i7eaYTmv+PhXJ1yq0nU3C 4i6ofZN81OvTjbTnSBjvaKYJxn5M5fH8bVtUv4fB4Jf9rbOkFwSsCESV37Dm589xsPgI8CJQvLEj BFE7yAvcICzSLGTeGEJ5TRD8PdfAXcCnr2ELH6ZOFsPNe/S+E15Mp5WtIPCgIuC+xBoFFKwBNhBW 25vZAkyZrGah8EUE1eDvfzscyZRXV80U2jlJB7OS8d/vcmwWcotXGECX2dTVF0GwN4wdSMOPFghR h7wFdYA5BxhXp+ahduU7KcPuPvMczKvHzdnlqrd5zboPbcbBU7Yq01/rtWAfQxvKanbhqQw46/+E fR2a5KQ/mOmX8uq6XXkbue+i3f5QoP3MnzIkbcxCYOQ3O5Sjev3++6rdlj3ufjHt0iOvqQ4mzHb3 3s9zgYyXnuobHeNAVMdhJ2MNvn9z+Vvmjc5ZTH3NtBCI+CJoPcGXqZAgEAoE9h93JozCAsW7X/yt LCF81QMabZgQOqVm1XK4ma07vS+600HrxSnBf+eQl0s5Te53upjK4/nbkKh+D4PBL/tbZ0kvCFgR iCq/Yc3Pn+NQ8xFnLtykiT/sdqvSlAV7PLrwckvIB8vZimomW64ESk54sUDzlvsEgbiCQNCEfWYY bghQoDXljSAos5r4QqMjCZvVghEczD5c7AQu29j8UpPTdHPZKXKH99aqIBSm1ojOB1uYWmDQQVoQ 8v5y4T66eMVe6INJVp/xmyIFcRj97c5I55AfTH2hAQjmo+eYjQRhlZUwOfz46x0cDTiCwYb/FSv5 KgPpzxv1xvNApDiTMAlFpGGsspur9zoNVumBR7sha0j7adDXLnDeeH6aziuTNn0UtkU7TTrPZjm+ CKvciLoLs2dPfn/0M3991IZIwkp9zVe/0fWAsHnTzsjPwZMJr09MA+hnui6yjX0IYCKCMaLj++vo TzaNt/Z53aL9x68owfTbE7foU17fz+mL99NnrH2LMckkvMfwFfjJ7AghN86ZY4S3Purve4u8rePf pau33ATkus2Bjpdm+/R+dIwDUR2HnY41k+btVr5ereMZcJ3y4156fdRfbuOvuUAGLSl8J8yxVmME jfJZyw7Sm2M3EXyGCgkCoUDg3S+3qX4K4ZEdoV/D8fsz76xS320zjaexCMI70x0KxtGv2EfvWF6A xHYTL7ZZqXyRjOqUv2MYbjJ5D1/3e6qzrs91mOSGLwjjHPYhvIQm9tBXSutkavvP/gsEXm3897tZ 0+Uom5u580RwIQITaV906rw772TnHsAuj1DzeLpMX5hdvHLbbQy7cNmdF0U+SKMJ490lg3+NyvcQ eTrhl3XZshUENAIXmNfB2KQJWvp2ZuW++j/ujyq/4asMT+MSyg4GHwFXVlpzD3mCMJeG+yLwvweY xzUJY13H4esUHwsf8VYCb4mo4oM+/1sFwLQGrvPVXjM/p7yYeY/sCwIPGgLx/mOyazRe7LaD19hd sj0Hs0v4rIrHWwi2nE5AoMkHAR9qgfvMSRHUhuEc+qEMydQEE+q60KCyktN0uA9M2cOcXzZmtBC1 B6sep3llApFm7ZCAEDM3B9nIwiYsSRLHVwwbGF/tMN9aF30MP10wS0H7LrMZLCLXmUwi0sEsJjv7 qUueJCFhBR3OnFEHtCdFskS8/x/BhBYDox15KwP1TsUmY06eB8rLlik55cicgm7fvcd1ueJTpRp+ w5Kx3547nB51tKPk7GAeYddv8mRU+zW0S2d3Dhqc8HOYjlfA8ZwgmMPzd7JK5U9/GPRSSTIDy+Dj /vibK2zL8QdTf/uZHQZyLvQILBhRk6BJ1m3kX0EpLC2/93nYJwl8gWJiCWfzdsJnJ30Jpm14JzFe od8r/5XhAkA9bl5nH3/muOIrX1/vLVwQpOSxJwGPCZ7GcfRtmIaA2UO9zOEJ5QcyXnoCPzrGgaiM w07HGqSDX0N8z47wOHaAx3uNm8bzNo+TVgEvcIGDa0S0Q1ClWyxcwTfw+Onrbs/dE35yXhAAAniv V06oT7+y+5SBn20NCBS8Jw+xcAr9EMJm8Cvoi3aLhSjA01j0eb9KBB/PmiDgQ/Azk+YOr+HmDxCL HN0/2aCS+BrDkMgb7+Htfk91NuuGdxn8GV5gLIqi/fAFDR99moBPi76/uS3EwJ0MfLqa9CovbmLB 1RfByT7GwkB4KeSNOoeCx0PeTjDTmN9l/urKdfdvBvJA/4RZN8z9MPG382cYyPcQeWvyxi/rNLKN /QjA7/f8D2sqrXqr9Y+/rcO3GWOJmovxu26nLOKk/5vlBsJvOCnDblwyy/WHj1g2uo6b+xF8M1Zs +leN25gLY1Fy56GLrqCOZjl2++CLc/F8GFvwxIdOXPXKvzhpr7UctN+JvMB6nxwLArEVAcwLpg6o 7Kj6QfPZB4bHToLvqxZgivCzIwheEG3VjLgalXS4F8JEJ3nqciBog/ALP38IKzla68XTfXB4jZ+V 0G6rRo01DY69laG0cmxWVOzyQXlYHcHPKUHAYAoZ7O6DsOBaWIAmu8tez0FYvPNQhH9Gr4ktF532 G0Q2rc5RoUyCY2tPAkV/MPW3n5l1kP3YiwAEe5svR9ZMsbbISV/CpAfBduwC7ngaN33l6+u9hQDK U//XbUDfthNg4jrKD2S81Hlbt9ExDkRlHHY61iAdNBbtfHR5wxN4gLG20wS3YiXHgkAoEfD0nngq 09NYlIEX8EyC+5bZyxO6Fg1LF0zv8pms02GxVJOvMQzpvPEe3u73VGddNrZ4l638WYY07m3CYgza tWbraTUmQlhnDTAWNlZGtMssw7qPRYCrAfJSus6h4PGQtxPMvGGOPPDdMbWacc5KgXwPzTy88ctm OtkXBDQC+DZb33V9TW+d9H+dFltP46jduKLvc1KGt/uRT1T5CLyjmJMFMi8Dv+iJZ9RtNLdO2mum xz7a78/c3nq/HAsCcRmBoAn74jJI0ra4iUCjSlndAiGglTBdFhIEBAFBQBAQBASB4COAoAsZ00YI x0pwNN7FI2sTfD+BzGs4xiRzNUcBjslkt1A6jM16oaEGk7YMaRKzlUNEoB60Zcvu8y4BZ0xum9RN EBAEBAFBQBAQBGIvAkHz2Rd7IZCaP6gINKma3a3p0CLyFkHaLbEcCAKCgCAgCAgCgoBfCMzmgDJ2 pr8Q8lkFfcgYzt9jumbrDg44Z1dHuHPIyqbPVkEfTNkGfR6YObVfYEtiQUAQEAQEAUFAEHigERBh 3wP9+B/cxoP5hj80k37bfNLWZ5aZRvYFAUFAEBAEBAFBIDAE/uAAXAhShui1dj6wkCu0+f7457QK 2PV1FCI1BlZD/++CCVnvcZto+pL9Xv05w5QUPgo7sVN7X25e/K+F3CEICAKCQNQRwHhmkt3ijHld 9gUBQSBmIyBmvDH7+UjtQoQAfMi8PPwPypQuKd1hvxxn2dQGTvOFBAFBQBAQBAQBQSB0CCDgBn4p OYhY5nTJKAM71YcDeQQzQ9CPk+du+PQJHLraBZYz/KhOnreHPuco2zkQaZcDKyVjX30QaCKgG9oF AR8EmUKCgCAgCMRUBDA3ysWBKeNx5JzL7DN4G0cWFxIEBIHYi4AI+2Lvs5OaRxEBRDfFT0gQEAQE AUFAEBAEoheBKyzcu3LtMu0/Fr3lhrI0CPf8DYYRyvpI3oKAICAI+IPAUY60jp+QICAIxA0ExIw3 bjxHaYUgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIEAi7JNOIAgIAoKAICAICAKCgCAgCAgC goAgIAgIAoKAICAIxBEERNgXRx6kNEMQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBBhn/QB QUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgjiDgMUBH0sQJqHTB9HGkmdIMQUAQEAQiI5Aw QXyOCJlIxrrI0MgZQUAQiCMIcFBFRelSJZaxLo48U2mGICAIREYgVYqwaW2mtEllrIsMj5wRBASB OIJA1ozJHLck3n9MjlNLQkFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBCIsQiIGW+MfTRS MUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBwD8ERNjnH16SWhAQBAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQiLEIiLAvxj4aqZggIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIOAfAh4D dNy79x9duXbbv9wktSAgCAgCsQiB1HDm/B+Pc7fPxKJaS1UFAUFAEPATgSTZ6Pade3T9xh0/b5Tk goAgIAjEDgTiczCilCkS063bd+nGzbuxo9JSS0FAEBAE/EQgPg92CDDphDwK+27euks79551koek EQQEAUEgViJQoURaFvSdIzo1P1bWXyotCAgCgoAjBHJ0octXbtHeg+cdJZdEgoAgIAjENgQSJYxP pYtlofMXb9Cho5diW/WlvoKAICAIOEIgedKEVKxwJkdpxYzXEUySSBAQBAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQiPkIiLAv5j8jqaEgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIOAIARH2 OYJJEgkCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAjEfARH2xfxnJDUUBAQBQUAQEAQEAUFA EBAEBAFBQBAQBAQBQUAQEAQcISDCPkcwSSJBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQSDm IyDCvpj/jKSGgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIwRE2OcIJkkkCAgCgoAgIAgI AoKAICAICAKCgCAgCAgCgoAgIAjEfARE2Bfzn5HUUBAQBAQBQUAQEAQEAUFAEAg6AuPHDKOO7ZvR 9m2bgp63ZCgICAKCgCAgCAgC9w8BEfaFEPujRw/SUy2qUZP6ZahPzxdDWJJkLQgIAoJA8BHYvvsE 1X5mDKUr1otSF+lJHXrN8FjI5Ss3aN+hMx6vy4UwBPYfPkOXGCshdwQqNhtB2Su8Tbv3n3K/IEex CoFrV68QeJ9AaPmyBdSobin6YGjfQG73+54LF87R008+Rm2frkv//fef3/cHckN0leO0bufPn6UZ 0ybS1i1/UYpUqZ3eFildIO0K5J5IBXs50aFdE8V/Hz6030squSQICAKCgCAgCMRdBBIGs2mbNv5B 40YPozt3bttmGy9ePHrvgwmUPXtut+tnTp+kXt1foMuXL/L5eJQhQ0Ya+el0SpkyjPFY+dtSmjJ5 lNs9ng4KFCxC/QeN9HQ5Ws9fPH+ODh3cp8rc+b9t0Vq2FCYICAKhQ6Dnu9/T/J//pv7dGtALrSqG rqD7mPPtO3ep8fPj6dCxc5QyRRJKnTIprfpzr22Nrly9SZlL96UbN2/TT191oUa1itqme9BPDvho Ab03ZgmVL5mL/lzQ+0GHw639EIKePntFBKFuqNz/g/k/fE3ffzfNVZH48eNTShYKFSlaih5v/gxl y57Lde36tatUv3ZxunXzJo1iHq5y1dqua052IHg6e+YUnTx53EnyKKe5ceM6Hdi/W+UDwRN4VCf0 5/pVtGzJPNr5v78JgqRUqdNQ0WKlqUmzp6la9bqRsli9chmtWL6I9uzerspLmSoN5ctXmAoXKU7P t39N3W+96e7dO/TjD9/QvO9n0uHD++nmjRuUPUcuqv5YfWr3QldKnSatuuXixfPUt+dLdI2xt6PE iRPTxCnfU4IE9uz+sqXzCWU9UqQk5c6d35XFlMkjadHCOdSqdXt6us3LrvN659LFC/T1jEm0i3lb tOvChfOUK3c+ypuvENVr2MIWB9wLnhh5Q7h4ip9zihQpqXiJctTq6fZu/SWq7UJZx48eIvSpq1cv 41BIEHCMwPZ/NtOQd17n+exdeqJVW2rT9hXH90pCQUAQiB4E5D11hrP919/ZvZFSrf59Gf2zbWOk 8+aJ48eORBL2gaH4346trmRHjxyg5csWUrMWz6pze/fsUEyVK4GXnStXLnm56uzS9K/G0x9rV1DC hAmp6+v9qWAhmbg6Q05SCQIPBgK7959kLbbTdOjouaA2eNGv22n89JXUtE5x6tSmalDz9jezlev3 ugR9e1cNpiwZU9GpM/aTpjt379Gt23dUETdvhW39LU+nf+71r+jqtVs0ZUQbSp82hT4da7be6o92 gaKKUawBIxorGpPenWhsdsiLwmIrhFpW+nPdSvpmxmR6d/h4qlGzgbp85+5dunM7bLH31q2wvm69 LzYfQyg2Yez7NGPqBDdNQAgNf/t1sfp1eLk7deoSJsi/dYuFniMG0vdzIoSlELqdO3ta/f76cxX9 zELDwUPHUuky7otGQwf3op8WfKvgSpYsOSVJmlQJysCfxo+fgLq89pa6duL4EcJCuyeKnyABCyzu eBT2LWb+G9SoaSu3LI4eOURHjxyk48cOu53HwZZN6+mdt1+lk/9GCGVRzt49/1M/tKn5k89Rz97v UuLESVz379+3i9o/14iAFwSradKko0uXLtDaNb8qnnvluv2u9FFtl6tQ2REEAkDgh7nT6eCBsMXN maz5+gwLvPHe3W9au3o5zfl2qhKmt2jZ9n5XJ1aWLxhG/2MLFeYx9T2NfoS9lxhUYZ9ZVCpe+c2V u4B5ij/uRNmy5XQ7h4NlS+dFOgdmQQv7sufIQw89lM2V5sqVy6SFemAwMmd6yHUNq4pRpfV//E4b /1qjsmnyeGsR9kUVULlfEBAEHCGwZcdR+mn5P5Q2dbL7Luw7cvy8qnPZ4jmVoA8HmVngZ0eo7+q5 PZUQq2r5fHZJHJ/7duEmun37Lo14u0WsFPZ5q/+gNxpTveqPUNGCDzvGQxI6QyAmvTvOahy7UrVr /yq1Yy20mzevs2+3zfTJx4OUIOjdgd1ZULVOaZqB75v85Xy6zUKukqUrxK4GOqjt5AkfEYRtoLr1 mykBQL4CjxCsU375+Ud1bdfOf1w5ffzhAJo3d4Y6bv3Mi9SY+ckCBZH+FG3csIZGDH9bCcze7NGe 5v203mXNgsVvLejr3W84PdGynRKO4fzUL8ZS2rTpXWWYO8t+22Eeqv34CeJTkiRJI53HiYMH99KO 7VuUIBDtcUIQwnV9pTWP0bcUX/4GC/RKlCrP2t+paDdr+AGfFct/Uu3OkuVh6vByD1e2Y0cPVYK+ Qo8UpxEjv6QsD2UlmH0vZKEmcILWqB352y67POScIOAUAQjpf132kys5tI3/XLeKKlZ+zHXufu3s 3rWd1qz6hTDWirAvsKcgGAaGW1TuCgXmMfk9jQpWobg3ZMI+DIrvvT/RZ50PHthD6ARW2rRhLZ05 c5IyZsxC9Ro0Vz+d5rtZX9JHH7ytDvPnL0zTZy3Tlxxt//33GB09fIBNF+5Sjpx5KKshgIQZClZv NWEFEucSJkxEidgcAj5eYKKSJm26SAzUbV7JxnUwVtrEQufjaXvv3l020ThAYKBg3gyTGE8Mj6c8 5LwgIAjEfATu3ftPacplzpCKUiRPHKUKwz/ev6cv0cOZ0ygTW38zu3DpOl26fJ1yZE3n0XRN+5VL xSa8TqhS2TxOktHxkxcJeaZis+CoEvJKmiShI6HgnTv36ODRs5w2uW16mCAjv1zZ0vPk137Sifri OR45cZ4S8MQ020NpPOJn1zaYQjd4rIjdJbdzTjFCXY5yXZImSeRREOuWcYgOnPQns2hfz8JMG4p9 f+sbijrEtjzB12CCiR80+cA7PdOyJrtfuUTr1/2uhF9oU/ESZb02Deayp06eoMRJklC6dBm8pnVy EQz/6VP/0sNZszvSvIFWXSLWNkM7/CGUAU1GEExOe/UZ6ro9e47c9MKL3QiLwyeZvwRBK27BvFlq v3PXvuq6OuC/zCwEa9i4JQv+ilL7to3o8qWL9PX0ydSxcy+VBAI4UM5ceenJVs+rffzB1Pb9jz5z HVt3nPKd+j6t1VepSk3Hz+LzSSOVoO/hrDnoMxbsZsocsdgOU+ZhH05S5o+Lf5pLM6dNYjPgDi4z Zd2u59p1VoI+1CM5m/E+9XQH9dP1sm79bZf1fn2MvnqJzZ7B8/sy2fa3X2GeAJPhTKx8gLmCHZ09 e4quXL5MGTJmcgl27dIFcg5C07PctzNmzEzJknvWiPe3XYHUJbbfs+r3n5Xpd+FHSqh3FdrNSxbN dSzsg/A/OT8D9O37SZjLnjh+lFKnThtpTnrz5g06ffpf5mMS8LuYzdG88zZrbZ/hex56OLvX9+fe vXvKRB+akBgfvL1rKu2pE8wTp3SNE94wQ/p/TxyldOkzEjSefZE3DHzdG4zrGHPgRiBLlqxecQhG WcHKI5R9I1h1RD5x5T0NJiae8vI8o/F0R5DP/7xkvivH5zu85mIc8EIv/3mB61owdsB8dX7pSWrW sDy92ukp6tblGWrRpCJ1erGFyh4d57EqBdxMIoYO7qnONW1Yjn79ZSHVr1mMmjYoS22equ1mxoEM XnyhqXIGXJcnc77MmcHwzpr5GdWqWohat6hO3V9tQy2bVaE6rPUBHzlCgoAgEDcQ2PD3Yar6xMeU 6pE3KG+Vd1zbcVN/d40hm/45ogJgDBy5UDX6m/kb1DGCYvT74EcXECvW7qbidYeqawVrDKY0RXtS I/arp81DXQltdmBm23f4fMpdaYAKuJGLt8gf90MIpul/e/+lNHy+13vfq1M/sWkx0uGH8j0R2pYw z2uEoB6avvpuHcXL+aryUzd7wUYqUH0QZSvfj+vdi8o0fJ927IlI2+qVz1UZ0OoDlagX1k4EB4Fw RtP1G7ep28Dv2EdgH5VXhhK9KWfF/jTys+U6iWuLtiYr0J02bjtMBWsMUuVnLNmH8Ew0wQ9h2Ubv q+eSr+pAta3DQUngQ86ka9dvqXJTFu6hMMzx6NuUtVw/mvVjmOsKJ/WfOmc9xc/VlZ5+9QtX1v5g pG+CoBfmwikK9SA8xyxl+qp9/ZxQFzuCkC1p/tcpUd7XCH3OpCmz1qq6VWj6oXla7T/72pfqOX76 5W+ua077k77BybPQafUW2KKNCXJ3pa07woQo+preOn13/K2vzl+29gjAigJmmKBTPFnTBJ6qUrkc BJNNk+CDbVD/16hWtUL0OPNTDWoVp1bNqyq+ykxn3YcQBTzao6WzUt9eL7kuw5S03bP16bHKBeiJ ppXUtmun1nSM/bTZEUxpUW7DOiWpbo1H6IU2DWnv7siacHb34hwEfZgEYQLfqXNv22QZM2WhosXL qGvfMH+HiWYGFr4893xn2/T5WSuwdp0m6tqC+d+40mBxGQQzWfjGCwWBB13CAjlQoyYtHRUBYdWi n8LMfuHDzBT06QywWP1Sp55qYgsLnBW/LtKXlGscTh3hNQAAQABJREFUHMDHX3QSBLW93+hA9Zg3 R1/B8x/+7pu2/sX97Vcw30Y/rlm1oJpP1KpeSPVz9HcQFAA+/rC/6neN6pRSQftqVyuszJnhb8pK mD9ULpczkvk0lB+qlM/F/Ty/i2/AvbBCerZVLVU+5hB4v3p0fY6uX7/mlrW/7XK7+QE7gKAaVK9B M6rP/idBeM5WTHF+4Y+z1dj0xWefsJXaj/Tk41Wocb3S6jm0e6aeyyco0kKDF+PY+E+H49CN0E8w H8SzR3+1Enxjoo9BuxgE6zcc42fm16xRBapWMY9yvdCyWVWuT2WqV7Ooy1XW7yuWUMcOzdW89smm lal540e53ILKPQGEeSbpvM6fO0P9enfi+WlhlR79d+K4D3jh856ZXGntoq+jj+Lepg3KKizgF1TT wvmzFAaY/2IxBGMy5uTo9wiWpK3qdHq9hVYzIobX5Dk6vjF6O2f2V27vA9LresP9hIkBBLZOMNRl 6q2/zw04jhszVNUDmKF9wBjvJRR7rOTvO2+9/4vPRilMrYFAMcYDi4plstEq9htrEr7PGE9QtqZQ 9A2n/VbXwZ9tTHxP/al/dKaNAcK+H1zthRmBZnxwcuniiGuuRAHuYFBCEBA73yb4CGK1y24g18Xd ZA2/fPkf0Yd0hLXxtm3d4DoGg4lODQKzkzVrZHNlV2LeGTliAI36aGCkMrECMGxILzcfL+Z9si8I CAKxB4G5izZT5RYf0ZoN+5UGXs3KBSn7w2npwJGz1HXAt9Tl7dmqMcmTJaaHMqWmlMmTqGNoasFH Hn4Z0oWt0kMg17TDBPpn13GqVaUQdXy2KpV4JBstXsFO34+c8QoKgm1UbzmKPpjwMx399wKVLpqD GYA8ylwW95esN4z2HDil8kiWNBE9lJk1eFKEad4lSZzQVRcE6vBEV67d5MntPYIwThMEZKDRX6xQ Ai4I0IoXzkqJEyWgzduPUK3Wo1VQD6SBiTDaqwntxnHWLGkpUcIE6jSEVRCcQugErbanmpShxrWL 0TFuE4Km9Bnu7hLi2o1bKv8GbccpzLUPQO1f8LufNlFNrgMERuVK5KK2T1RQ2pLL1+xSAsATpy7q 6lDvYfNUuSn4Gb34dGVq2ag0oc1z+BmDnNT/KqcHA4b7NPmDEe4Bxi1enkwzf/iLMmVISc82L6/6 DvKBxic0Rx/OkkZn77ZNmDC+MiEGjggwY9JCNh9H3f7aeoi0CTeuo+/gGqh44Wxq609/Ujfwn69n odPp7c8r/0ftekwltKv9U5WoZJGwsvV1vXXy7gRSX52/bO0RgFUCTDlB0GbSBOHcvbt3lWBMn4OF xPPPNiAw53fZf1yJkuVUMAcEt3i7zyuR+CB9HyZNvXu+qHzEQbvrxY5vqEuI2tu5Y0vFc0HbrSEL qyBogw+851kACMGISV9Pn6Qi/EJ4BmsRaNZh8tjz9QitOTO93b4WUIFHRUAOX3QgXNgJYYEW3tnd o81noQ2kJ9vQjoQ2DISLXTu3dhMY2OURyLnN7OcPVi4IhFetRj1HWSC4Bp4t6taoqWcBITQdoRUF Mn3+lShZXp2Dz8MZU8e7WdGoCyH6w2QdE9mcufIprT5o2yDwyTv9urqV6G+/mvvdVMIEG/0Y2oIw XU/IPhnRz6d/NU7ljWAk337zBd1g4Rssnh6r1VAJyaHliDmJNXgI0kFIfCv83dIVhN9FBD/EPAXj NAiCA/ThfXt3UrkKVZWfRAiQ4QPRxN3fdukyH8QthG5/rFmh+nides3UuwEtPeD+Owv8rISxDTT7 68+pf99XGPdDhGeQKFEigkl/l46t1PwSaRCIBgQBIcZPk1b88pPqCxCgYyyzUpJkyTh4ZSbWGEyu LsEXZvr0mdQPlmaaMFeF9dnrXZ5VfUBrxWJsgQAa/XXr5j8pT54CVIvHsmLFy6q2fTVljEtz2ZrX C+xnE30oRcpUSqsPffbLz0dzv56ik6rtp5+8p/o6NO4QvAn543sAH/yabvCYBvps4sf03uA3lFYz FkjQHgRL6t61jXItoNNjC7cALz3/uArqA63VsuWrqDEcfXzE+/3ow2Fvmck5mJE9BtA0dIKhW2Z8 4M9zwzuKxalpX45Ti2CFChdTGOM83ss2T9VR8gOzDH/eefM+vV+gUDG1i/x1f8QJ+FCFFiTGi5U8 /pkE4R/qlD9crhGqvuG035p1c7IfU99TJ3W/H2lCZsa7nAeudSzRNqnHm0OocdOnXKcgdYfQDAST EETSrV23Kc3iQROEVS8I0cxob+pCAH+HD+1zMUzIb8q0hUoFGE6mobGXKFFiHkAq04vsXwS+UsAE gRD5rECBImoFE5HGYKagV+MgjISvEtBvKyI+AqXLVqL0PCjbSfCRFgMaHKyCsEr8/ojPVAQzrATP nDZBncdAiMHSG5OoEsqfICAIxEgEYBbaY8hcJVB7+vGyNHVUOxZyhQ25g0b9RINHLaLJX6+mLu2q KwHY7t8H0rCxS+ntD3+kFg1K0ozRL7i1a+nv/1MafPD5tnRGxCRl7cb9VDBvZre01oPPvl5D6zcf VBF1F37VmapVyK+SQPgGLTYIH6FB+N3Elyh39gy067eBNIYFaq+zBl1dXsX98YtXrFn6dXzm3BWC 77/5Uzqx6WtaJVx79PEP6SQH/IDQqXXTsjTuvdYqz8T5uinMVszuTvlzZ3IrZ9LMVerePDky0Orv e7IgMGzSDU1IaJ+NnrKCXu9Q03Ve34zyRw1sSd1frKkivqZLk1wJASEghPBsWJ/H6a1X66vkEFZC QLtl+1H1PD4dEvbNguAW9OOUV0ibLJ89f1UJGnHeSf2RzhM5wQj3/rHpAK3jHwR9W5a8pUyS0Yby TT5UAtT2T1Wkt19r4KkYalavhMIQviEHsw9BEO43tTYX/7ZdCZNxDZqPECJCUFqtQj6cIn/6k7rB +LN7FsZltQuB45OdPlP9AILVzz541prEdVw4Xxby9e5Epb6ugmTHDQFouiECLAQ/WrDjlsA4gGAH /BAEbRM+n6vMU3EZvqcwycTE2EqYoAwe0I19Za1UJmjjJn2neEQszI4eOVgJnRCkAhYhIAjGXnq+ qXILgzy1mS0mPzgGwQ/0WwNGqDojOi6CTGBi7ITgbgUEXtUJaQ1DCL68EUziQFiQPnnymHLnAq3J NmzqCtywiIwJYt36j1P7l16n3DxJ90SDGC+T4lE8FcjDTgNPa+jVrtvEFRTDvNduH9FtQWnZ/DoF ++jzRmgXBKqYbGrq1mOA0tzBRA2Cge/nTKe2z3ehps2f9srr+tMuXZa5BR/d750RrvkHtLAmjf9Q 8f4Q1MFc2t9+BdNraDeBoOXY7Y131D40MceOfo/NynOoYwg4gQX8LmqzQ2hIPtW8eliQlvWrlQBQ Jfbzb93a35Sg5tFKNWjM+G9cd//NiggQbIL8bZcrkwd05xfWzoMQBIJb+JQEwW0BBLiLWTOsQeMn bZFBn8Y4+NEnX6n5It7b9m0bq2f8+4ql6v1tyPdOGDtcRRzf8OcaqlCxuisvrf2GxQGMqVZCpOw5 89eosQxBgiA0RmAfT4T69Og1WEXShnl5al6ggOsqBM7B3BLR1DWhv8LXJua08M1qJUTN7vv2B9Ts iTbqEhZoMG9GcAQzUjeEcqCPRk91uXOAEMlOUxFav1j0ef/jz1kAl1nhBLwwXmBx5r33w+bC6L9Q jMEzwcLIwHcjvheYJ38+6WMW3M+glk89T/CfapIdBnALhu+BEwx1Xv48NywibN+2SY2PI8dMo1Jl HlXZ4HsAX6cQUEITc/iIyTr7KG8rPFqNkiZNpgR9G/5cTVXDI8L/ye41NP3BgkCTEDADBBkHCGNT KPqGv/1WVcbBX0x9Tx1U/b4kCZlmH1b/sHpm/qwv/M+LI7QwIOQDFeeX32RMoKrsD2EAsf7ANJpa e/DZAYEbXg509EHvfaoGVww4Hbu8ycxcXleRGFxwTjtCbfx4hLASKx1YgQNh1VBT3XqP613b7ZJF 3ytGFRdbPPEc4UONNr/a7S2Xjwf4lUHkYiFBQBCInQgs+GWb0pCCNtyEYc+4BH1ozcDujShfrkxK Ow3aZU5I83+Hjp1zM2utXDavW952eY2bulKd7tbhMZegDyfy5sxIg3s2Udd+WLpVaXGpgyD/FciT mX75ppsS9CHrMsVyUJ2qYYtBVnNZb0VPmfWHugxhlhb04cQTDUsRNLwQ5RaCMCtBCxKCPhCEZNBw g+YYNNjgo69P5wjNFmg2PtmwtEr7+7o9aos/zYAjEIQmaB9CuzIY5BQjbfpcpVw+l+9B+Bh8vF5x VQ3TjNquXs3qlVSnoc0Ic2AQhGsX2YejJkS21aT3G9cq6vJlGJX+ZPcsdFnY7tp3UpmWX7l6U2lQ QtCnsTfT+bMflfr6U05cTovJKzRSIIB6kzWSxox6VzW3ZesXXMI7T+3/Jdwly7PtOrmlrVKtDn32 1Y+2gh5YP2ACDM0UCPoKFiqqskcANWjoQYDS9oWIiSl8CtasHSa83rxxnasqEBZiwonr3XsOcvWl mrUb0VAHfqWRESaamPCCoBXoiyC406bNvvwSQrNOEwRIml7r3p/6vP2+0gIDnwm+ET4SR3LQD60B qNPqLXzwmb9FC79Tk0t9XW8hGNUBCBo1aaVP+9zqRXBfbUJGKVkLCHTJaBOe2dRvlhJ8BIIwAX5/ aB82ba2uJsjqpM2f2Sbse2qXza3qVM8+77oEfTgB/4rw+YW5warfl6o0fver9SuViTWCpbzStY/K A3/or/3e+cjlaxFzCAgDtaAPaTDX0EIAUxiKa/6QHheRB+ZamiBE0QJ0f9ul83hQtxGmgc1dEGhT 3j/Xr2K/iGEWEK6L4TtYBBg76VvX/BVBaCpUrKauQtsPhHmeFvDhfdYETeTNm8LGLKcm9fpeT1sI brQgDu8rooBDew5CO1PQh/vrhM9ZPfXFnr3fU3NgWK3h91y7V1SxpvYoTmBxAbR71z9qiz+4eoCm o5UQeHP0uK/Vu4BrUJBp+0IXlQwutTRhH+M9tCv7cN11v8b1lzq9QVhMwXhrag/qe+0w0Nf82frz 3GBWDGr97IuudxzHUDLSPlmhHIRvSrAI3zbIEUBrVoUJ8bCP/qrpNGuO6/gIGCu2bd2oLmlhX6j7 hq5HsLZx5T0NFh6+8glTM/GVKoDrUGmvVDnsg65v14McjvGRXfbzfH1JafThAB+vWsywzQ5XD4aw D6uZTgj+RwayTxgrYXUDwjp8lCHpR0eH7z6o18J5MMwRMBA6oXr1m9MnvMpwi4NxYLUEjGShwsVd Jr3Ip2adMIbTU35amxHXITDcvj1MYwTH5iozBlKsOAoJAoJA7ENg9/4wphBCGUSrNQnjXD3WfJ4w /TTtO3TGvORxv36NIsoUGMKQwo8NptfaP0YvPVPFzfTV7maYu+49eFpdalyrWKQk9VlTEATtroOs 4QehU7AJmodWDCBkA505d9VxcXsOhmE6jwWT8MNnkjb1hZailV5+tor1FOnnAw3MrgNmu13X18y8 nmxUisZ+9TubXs+iRb/+Q11feEw9Qz3hcssggAOnGGVMl1LlDo07mKfqdh8+dl6dz5k1DFdPVYA5 LLCH0BiCvA6tK9GyVTtV8m4dHqMxX/xGMGOGqTM0URev2KGuNa8fJiSMan+yexZmXeGLEAQNxGAI +qJaX1UZ+aOVPOnCTxOsIZ5u8xJPYN7Up2y3mIgdO3pQXStXLvJ7aHcTNP40jZ0w2yXowzlYaYCg 8fHR+2+rff0HLS2QOQk9Ea5ZVoxNY60O8wsyD+iE9EQZWoKmUMXTvZgQJ2eH82ELz5c9JVPnTTNO mOWZBG0wCBrmfjtNCVkhtARvfOnyRRrEGi5WmvZNxPPR1/IXCFtU0cfYIuAAyoX2mT9Rk7VgEu3y RVc5YAQofYaMbkkf4mAAn4ydSX9v+UuZAsL0DEK/V15+kqZ9vZTy5C3olh4HTtsV6cbwEzD1NgnP p1TpR5V5IAQJIH/7lebjoaCAibIvQjDCPewjEuba169fdVn+YC4RKMEsGEIQmFc/1aKaCnIC7VUI TjT52y5934O4PXrkoPK3Hj9BAjeXUpi76vkjlFSeea5jJHigSWkN+gPhNgjzTk2wblu39jflyxLC fAhqfmVLOIyTEBB609zVeTjZNg/XwrNLi3EMwkUESoI/Pi3AvHXbXsu5aPGwxU+d10NZw9qFvovA MHpcrVmnESGAJsxq167+lefX7KOQhVB2PBIs5fR9Ot/SZSqqXdQPGrIQnOsxHVZ0VnyR76MVa6hg SEfDvzE6L2y9YWCmc7Lv5LnhGaIPgapUq6225l/FSo+pQyhDIXCKUy1xMw9P+9XZFQOUjrTGHgKG YtELGFapWltppuIaFs2g8YcFJAhhrZaToeobnuodyPm49J4G0v5A7nEm4Qog56LFSlHvfsM93rll 83o10OgEb/fppHfV4KMP4EQSdud2KwM6jd5C+GZHGJAwoL73wUR2MtrR5fAY/hTgMwCq2WPGf227 umzND75aqj/WgH75+Ud1CWrPJ3nAxEsOKlehivooqAMPf3p1FJexbx6bt+AjLiQICAKxEwEIU0Cm HzqzJWlShQkAz1+8Zp72uA8BzZLpXeml3jNo596T1H/EAnp39GLq06WeyxzT7mZob2kfdVnYL6CV oJ2myWlddPqobOGXEISFHyeEukHbC6R9yNndZ2r82V3X5xBRFwRT4gnTV+nTblv4UdQ04u0WvKod jyZOX63KRx1KFc1OM8e8QEUK+Nb20fn4s7XDCP4a0XdgQlztyZHKbyGEuQj0gfpBSOaLHuc08Hu4 aIW7sA9ad9B4RP9auX6vMqOGJiHqAWEzKNT9CZqweM4IonL67JUoRxkOdX19YR1XrsNP0qM86YX5 JrQpChQq4tLK8NbGc+dOq8VRpEmTzrsgWucDfg3+AMFXQRiESbAmLZyB9QN8ptlRetac0nQ6PHgI JuuBEiaVmBTBN9q/PElzQpjo790TJtzxll5H74Xw1LRq0fcAb5jWtWBNnX7MJ2OBGdptL7H/QquJ MBawndAivh8E8zS7ibinPLTw4vy5s+rZQGjmiXS7smbNaZsEk/dRY2ewwG0RDXiri1rohnmdnWmi 03bZFuThZIrwSKnXWPAG8rdfaSGyr34FAW0v9qsH09pgE54HtKOGDulJBw/sVWbFcNbf9oWuLi0i f9sV7DrGpvy0tlDChAnZFHuoW9X1e4L5op2wzy1x+EGScCGwyePAJBhCcwjMobUGrbpl4RZsjThC d6gJASBHjXjHzdrN3zITJ07quuU/iuDfuvV4h+LHi6/M81ezTzj8IFwaMmycrRDflUn4DnwCaoI1 HgRVWtvQuhCi02kNYlMrWl8L5tbJc8M3Sfuxtauv6Vvx0qULwaweVWHTXYzHkCfgOwUhLjS4oT1f pVpdl7APWs0QxIK0Vp+uSCj7hi4jGNsH4T0NBk5mHiET9pmF2O2bJry4rqX39ml/cCTsQ8fFh9VK eElB5dmB7Q8L19G8uTPY18AMlwQe0X/A/MCPgRNqwqa8WtgHSTpWRzTVZYeuvig9mw9ogglFtRp1 9aFrmzJVGsJKtJAgIAjETgS0BpYnAZqOMPswB8NwSlXK5aUdywfQkt920MeTlysNrCGfLCL4sHuh VdiqqDUvCPPAqILhRF2Q1qQzLDTS9HDmNHo3xm0h4IKmGQSXv33bnSqUyh2pjhB2IaCIE0IgCxDM iT35JDTzgsBr9KBW1JeFq/AB98mUFcqvX9P2E2nPykFK0Oak3KimgWanDvABP4z4gVKlTEoQSGp/ guqkhz8IBCHsW8aCvXMXrtK6zQdUYJKiBR+mRhxxHsI+aP1pLc/aHCUwRfLEKrdQ96evP21PL/ee qXwhPsN+GH9m/5QwUw6UQl3fQOsV2+4rU7aiyz+eP3VPxbyMHn8uXjhP0OzyRQg2AP9XCG4wecII xQuBfwPB/BIEP0XwDWVHEJxp0tpol1kbLioEwRomUatXLaOubGLrTdCFch5m7RcI+1azlmKHl7t7 LFqbOGfLntNrnlhoHvTeGEJEVxAWwq3CPo+FGBcwIYVpJ6ihn8KFh8M1lTChXc/aIVbrHV0MNCvh rw9kusXR180tzKmbNntaBaWzRnA20wV7X2seapNkf/sVfKCBLhpaW3Z1hCATgj5oMr38Si81l4HW 50ccWMDUlHXdy99qEDRznBCEprPm/s7aYivY5/ckFaQG703WbDmoyeOt/X5fnJQZV9No01pYWMFl gR3BnQHcQNlpoNqlt57DQkadek1VgJilbMqLed62vzcStAnrcvTfUBK0aRGFGrzg08++RHXYxBwB KyAggrVbVAkarm/0fpfadehK89l3HfzQw3QUQWTgb9DXmHnFMEVPlz6MT00TvkjjafzWmtYZMkUs 8ES1HXb3O3luMFnW3zolfLR86i6cP+fKGv5rXeTnO++6z9jBOAYtYwRfgSmv1r7Gd7JipRqqf21j X4KQkWABDWQK+0LdN4yqRnk3rr+nUQbIJoPAOWibzJyegvoonHtqwooxBHLmzzRf/dkI263vsdti 5fWVV/tE+uEjqwmM33PsEPi7eatUefo8Bm9N8XjCqOnfE8f0rmsLtWT9osJB9cYNa9U1OAGG01Rf ZKrNwm4fEYusP7ygvgZGX+XIdUFAELh/CMAfHmj1X/tcEWd1bWBa+MvqnerQDK4R/s2ni5ci/Kfp e/QWzETDmkWVD7xnmpVTp83gCjqd3kJgpbXdlq36nz7t2kKTCwSfd4gUfL9J+30xfcihThDk5ckZ xgAiIjF861l/pnDOVzvgMxEEzTX48LPmhWOUaSUIRN9hn4tr5/VSjB18DmotTqT1VH9rPoEez16w UZlcTxj2NP3BdYBw7NdZr9OhP96lTm3CBCK+8q7+aH5lVn2JA28M/XSpCoRRhwV6oEbsmw8ErT+Y K4Oah/v5w36o+xPw/WZsByXg+5XNid/5OIJXQPmeyNO7E+r6eqqPnA9DAJMkbVa4dcufjmGBPybw QdDuG9C3s8vJuxZwgWdLwBNk5G/9mbyT9rG3fdvmSL7u9rPwzinBvQwIJpOefEljEg0zTVANtgAB wVk7JvN2BHMk7ZgfJru+KFnS5GrMQTqt0eLrHut11B08OCJgmny2NR1MTUFmkLj8BSPMvr79eorL osV679QvPlXXMnFU0eqP1bNejnSs/dlpwWykBFE8ARNak9D+LeE+0rS2or/9Smssbueoup58KMLU fONfYfMD+AaH/z4IiRD4wWrCqOuXJnXYN1j7iNTn97IJsCcCT1CpSi32GTebEIAApMv1t12eyojr 5//ZtpEVQA6oedfkL+bRzG+XR/plyBgmUNKaRYFi0piFsKC1HPX3+++mKeEbxjr4cvRFeNagK1cu +0oa6fofLBDGGFWZzToRMBNRv+FyK3Pm4FomYH6MyOmfT12gxiuY6WsNPV0pBGyCyahJ0FoG4Xuh TeP1fBnWgHifTMK3Qfuly5kzYp5vprHbDxRDX88tUeLErkjK68PbYpaPBRIQ4gXo7xKOA3nncZ+V aoQH21iz+helAY7rMEHHQhGeNcyHp34xVgVDQfmme4NQ941AMbe2Mba8p9Z63+/jkAn7dmzfyiGx 33b7wbEwtODwQmsfBjBRgBr6hyO/cPt1e2OgCxsMCp6YJVciHzubNv5BzRqWp5nTJ7K6+x6OAnxQ hfzWt5mhzvWAjmvfzppCk8ePUO3QaRG+2y4iE4SAeKl8EeznNYHRQ2Q5SNURnXgZR4Ia8k53skYf 0+llKwgIArEDgQaPFVHmj9Cm6/XeD4rJ0jUfzNp4ML2EgK3tE4/q06RNahE8AcEmTPphyVYVRdU8 B5NHkNa6Mq+Z+4juCxr52a8EQZkm+AscGC5M6ch+7fQHWV+/H1uNwdoN+yMV37ROmDnfBxOWufwQ 6kSIoqt9z+lz3rY1KxdUPhCPn2T/VyN/cns+uA9CwD0HwnwEwmR24oxVbkLblMmTMF5hJaTg56jJ W/11mqhsISgGfTB+Gf24bJsyQ0ZfgmAMWn9OCH7+IDAGjfwszKFzHY66DELEXWgJIi+YKkPg2bRu GO4qAf+Fuj/h2Qzp2UQVN3zcz17NtnWdNO52706o66vrIFt7BLQGGIJ7YOKnCROMVs2rulyr6PPY QmA3ZPh4ZdoKFy1wwYLF0bLlKis/ZXA4jmiMmLyaBCGg9qeG8+DLILCCj7ppX37qSoqohQPeetV1 7GunHvvO00FC3h3Yg3nDL5SZlL4Pk84OHE1yUP9u6hR8QeuJavdX2xCiId67d1ddwxY86cvtm6k8 MPEyhX3du7ahEcP7uU2QMdEdyeZ3aC80F31FQNb1sm51FF47k8FNvHCNCTS0yv634291q6kxA9+F HcJ9aEM7pD8LYU1rGux/MLSv0lrCzS+8+LoSxGL/L8b7udZ11EI/hG2atv+z2ZUemimhoKGDeyn/ 2DrvKZM/UT63gaMWyvrbr8pz8AXgcfbMKaWBqvOGptGwIb1o3JihCst7/91Tl8w+uW7tb/ZafZwS fhRBc76d6uoveE8QAdVKv/26WEVrNs9r9z9agOpvu8y8HqT9xQvnquaWLltJ+bGE6yjrr054IElo 5FnHHX+wQgAV+GvDeAbBOMipli20x0C7eL7oVPtT3cB/d++EvXcQamqCwG3MqCH6MOAt3v3v50xz E8glTxZmVYJMdX/UBUCL943X2rp8oEK7cOa0ieoyIoRrwrcjcZIkar4+euQQN9w/nzRSCWghPPMn sEmgGDp5blrh5+sZk5QmuG4HfApOnvCROkTgEJPX9ued1/nZbavVqK9Ob9m0XmlWQ5Crv0Fa7jBz 2gSVpnp4Wp1PKPsGyvCFOSIwd+zQXMlAdJ3strHlPbWr+/0858zeKYAagqGbM/vLSHeWZynzCnZG qqlq9Tpu0XX0+YrsdBOCQO28GD4NIJkOlK6zBh4GkzE8WOBnEsrRpr44Dyeh8IkCQgThKewDAx/Q N/tG+HCAKS8YV5Pq1n/cPPS4D0k7nGlChR8fDHRy/Exy4qPQTC/7goAgEP0IDB27hEZ9HqYSr0tP kiQh7Vs1WGnJ9exYmzWnltC4qb/TQo7OW7xwVtrNAiQdAGJQj8YurTvcX65ELpUNBFB5Kr+jrtWq UpA+7NeCPp/F7gbYtLJq+XxUrFBWgkYZtPLANLRsXFoXb7sd0K0hfT1vA51i/3Tlm3xI5Uvm4nE3 AZuAHqCr125RTvYH2J/TxARC3X5c9je9PmgOQYtt/+Gz9L8VA5SfOkThnT53vYqiW6rBMKr+aAGO 8JuGTT4vKg3Ky6ypdmXnKJ/CT7QTvhSR31vvz6dhY5fSvKV/U9niYRMtCIwQ1bZXpzrKNBZYd+43 iwZ8tJB91z2ihLQLWNAGwRu05DJzXpq81V+nicr2jZdrqb5w8OhZGj5uaaSsmtQuRt9OeElpKka6 aJyAKe838ze4zujoyDCVhpYfhMugR0vnjuR3Mjr601uv1qM1G/apPt+u+1TauKhvJBN0V+V5x9u7 Ex31Nesi++4IwIz156XzlF+0Nk/VVhoFWPD1ZbYJ0yREzO38cktlCvkpRwCGRsoLLHAaP2YYwccb XKkULlJCFQgTO+TZpl1n6tZjgDoHbZmGTZ6kBfNmqckWzGbh6B2mlf5ox0H42H/gSOr9RgfFS378 QX8axcHaYNoKYSQc1YM0HwhBUP+BH7OfvVeU/6TuXZ9TGh3QpoNGH6xCQDBrHvrhRIJWiCY4p/8D Wj88eUb6FGyRcozv0Yvkb/QeYqsZ1rxxxMKRzgv+xxDxGFgCG2AE4afVZBA8MnCGVg6sW8D74tui J4k6v4ZNWiptGvirRoA5/DCpxCK4KURoyc75mz/ZRt9Gd9j0FwEq3nqzo1oUz549txJ2wCc3+GAI P55n8z878tUuu3vMc2hPv96d2Oz5fTXf0JY8LVo+59LEgTaRP/0K9W/a/GnlFujLz0crIWbGTA/R ThaSYt7S+pkX1fMuVaqCEuzCfBJYQbgCwSe0bOzo8ebPqr4JZ/qtn6ihBLswH8dk2aoJBR9bSIcg K/nyFaZjxw4pE208t1rhgQL9bZddneL6OQjdtIZt3fDItHZtrt/oCRUgB3NJBLgow4LBQAkBHyaO +0DdDkGYOQf1lqfWxsJiB94LKKrA7QGid/siLHxM/XKscpv1bKtaSpgJs0+0J6qEOT8E/ZPGfUgI HAMB3Cr22YfFA8yptZm8WQ6s4hrVLUmFOcglxgb46cN8/DkevzVhIQTRrPGOQaYAP4CYHyPwjHb/ 9fIrPV3vsb7P2zYqGPp6bi++3IMwNsJn3gvPNVSRjzHeQsMb7cN4b3Xr4M87761d+FbkzpNf+e9E OjMoKnz3jf90uOt204QXJ0PZN5C/L8y/ZkUs9GmMc/obivtMik3vqVnvmLAfVM0+OFEGg+ONwFxp lXp8kHRIc+s9YHzg10ATGAJNKVNFTKycqv3DLwJWuKyE1dGRY6YRPtyaIMhrwIO6SdaoOVDFN6OY Jeb6Wl8eDHbanESvtuk8h304mTp16W3LsMFJ8+McUUtIEBAEYiYChfJlURW7ffsuwdzU/Jk++t57 sylHFG2jhHYw9YSm1J4Dpwmmuz981pHefKWOWwPLFMtBb71aX2lTnTh1UUWc1YE8Xn6mCuXOnkEJ taBlBkFftofS0tRR7ahW5TATTLfMjAMIo7Yu7adMNDGxQiRXaIIl4AlsmxblacuSt1xahfo2HeUV QkEn5ErPWmOa7M65roXna83//beaKV9xqOca1u67fuMWJWRzPRAi+m7hdrRsVJonivc4Uux2+vyb tWqbnM1ue7xUy03Q56185Af/ewiwAWEnNPmmf/+n+u1krTYIVVEOCMJV7OM5z/zhL+WzD4E9cA6C NZO81d+uPnbndH4aG73F+RlcPgS0MENGH5o76WX68uO2hOAaENShj1kF0Do/cwvNPq0ZWrpoDjeh s468i/StGpcxb1P7UepPRv8wM7biAP5g+ifPKwEf3imtgWjeY+57e3cCqa+Z94O8nyhRItV80w+e NzwgXAKZ5p/QLvhy+iJCoAUILKDVBsET+Kr33p+gHLGb9+g8cA58lp7IIhItBF7Pt++qnL5j4gTB DRZn8Tt4cK9KXztc0IH7QW/1/5BatGyrtEtQLnwXId8vZyxW5lTwl4X+5ovA485g8z74d0bZENhg kgtBHyZar3Z7m94ZMtqVTRnmOb/m9Ji8wKQVbYcPK0z6gAmERTNm/0LFirsvZL/9zkeKn0zI2CPw AiaKaDcmcsM+nOSmBYjJvuYvYQVj/SlNSh5LQUt+CtNeqly1lkvTQlc2SdKkysT0zJmTStAHnhb+ t6zRQcHjw+E+/AdC0xHp4KMPgj7UA4vy73/0uVocN/sAJpN4jmg3/FnBpx8m+OhfiJo5ccr3aqKv 6+NPu/Q91i3qin47btJ3ymce6oj+gnqiD/Xo5b7w72+/6sNBCNuz4Bn5wbwb/r9vc0RTzB9wHjTw 3dFKKIRnDsH0hj/XUGU2uUVfAZl9HcdNmrVWwgBoM0GYgfqir341c7F6ZmZfBW7QCoLABoJh+GLE /AFlQgCkyd926fselO2+vbuUhircAdS0jB0mBkWLlVb9COe0mbTu49bniDQJWMgDsrsGf+14liBo g1k139QFmz+MQc93eE3NLfGuwiLMXLTQZel6mVnAZRbeaQjUIECGUOo2CzrRX2DOntAyf/eUF/hG zG3DfmFtyJe/sHJHBfNi+FSbxz774B8ULqowZlkJ48GzbTvxGHpPCbcxNuL7MGXaAlUXMz3cc/Xj MRFjKMyBIfCDpizGXFgFwjWXSZ7qrdP4wlCns9v6em4Qas6cvVyZSvMqBrsLWM/v/GrGii0CeVzA eK+13HT+/rzz+h5P29p1IuQmVVnApwkCUq3lh6BCZcu7y0NC2TdQB1+Y58pTQFU1bz7Pc5nY9J5q 3GPKNh5PqMK4AEuNrt+4Q9t2nracDc4hVPjx4YNNvrbL95QzmCioweNjipdFE6LMQMoLR7dOmDR9 H1SNjxzej3dQrcia5rs6jd4iLRglDMLw+2eWjzT9+77iUjnFYP3Bx1P0ra4tTC/wQz214M91kXcA P3y8gFkCY5eJVwZNW34zrewLAoJAcBGoUIL949w+R3RqfnAztskNpqCIDIqoulrIYpNMnUI00gNH zlL6tMmVQM9Md5iFhgjukT5tCiWgsfMrZ6a37kNIBq0wBD3InT291/ETwq0UyZIws+p7XejGzdtK AGdtm6c8oBV3+eoNSpUiKY+N7hNtjIsQjoYJtTIqc2hrO3A/MIIwUGNhTeOpTtZ0OEY9Dx87zwKz BEr4B599Vrp2/ZbSqEzIAqscD6dzEyyaab3V3w4Pu3PIzw6jdMV6qee/9odekYJxvPDGdJo6Zx09 /XhZ5ffOrJPdPoKdXLt+m59BEtUfzDTAHqvyMOn1Rk77k69n4en6XZ4MXOb3wa6OdvXy9u4gvdP6 2uUdq8/l6MLBWG6w+ft5v5oBk1NooWGC6ITXAr8Dk6BkzLPZEbSeENE2BWvXQWBmJTgWB89lXTgG zwiyToqR/iT7Vk7IQp2HHs7mMhu15otj8J5HjhykzMxnaZ9pqC/6ORZn/SUIrc5ytOEM6TM5cuEC jT1M0NFuXb63MlG3E4wV6g2+0Onitl2eaGOzRuWVK533P/qMaob7IDTTYtwCzwveGoJY6zMw0+p9 9I/jx46ovgENPyd9BBggWAueJZ6ZlbfWeUd1i3kCCEIctA3CM/h5DNNE9P5N86dfIW/w8HheEL7Z 9SVof0LbB2XjOu7Bu+DpvcIzP3rkkNLIRFRSkNkedSL8D5pZCG6Qmv39YU5jN9fQ6f1pl74nNm0T Ma9SulgWdm9xlQ4dveS46ngWiRMlcdOwtbsZ7wYEU+ac1NOYhXfu2rUrtvM/zC+b1CvNfeYWjRn/ jdKssivP0zlo4qLPpWZNKDOKt6/xF/nBxyQWBSCo1z4rcR/6JN4VTd7yAgYga1/HeYwhCXjRJ0uW rJHG6znffqVcFEDTDIo2GEPhnzIzj4nQuPZFwA2m89Co9vSN8VZvM39PGJpprPv+PDe8wxi/8T5i XPA1NvrzzlvrZR6jL2NMtX4rkf+1a9f4fDK3xTjz3lD2DZTjCXNVt6tXfX5HY9t7amIb7P3kSRNS scJhvsd95X1fhH2+KhUbruPD3bR+WR40b6nqvsemJp5UT2NDe6SOgsCDiEB0CvseRHylzcFFAIKq 5IW683fnLo0Z3Ipea/+YqwCYMNdo9Qlt3n6EBr/RWAURcV2UHUEgQGGfABc3EIB2yaudnlKTqcXL tvoUasSNVksrHjQEAhX2RTdO38yYTJ98PEiZzS9YuiFkAu/obpev8qzCPl/pY9r1B/W5xbTnEF31 icnP2x9hX5i9RXShFofKWbTgW5egDysb1WrUjUOtk6YIAoKAICAIxDQEoGEJn3zwp9djyFyaNHO1 MjGGVtzK9XsJ5q7QHO3ctnpMq7rURxAQBO4jAmvYtxuoXv3mIui7j89BihYEgADMXEFwZRUqzVZV gPwFFQF5bkGFM8ZnFleetwj7AuxqmzauU3dCLbdJs6cjqTIHmK3cJggIAoKAICAIeERg2qjnaXj+ pcq3IIKI4AeTbPhvfKZZOerTuS5lypDS4/1yQRAQBB48BDp2flP5+tNmew8eAtJiQSBmIHCUXQnA dz3M5Bs3bRUzKhVNtdB+AWFOH9voQX5use1ZBaO+cel5ixlvgD0CfkquXmFfDCn+z95VgDlxddFb 3N3doTjFtVgpTqE4pVgplFKkUGihFJcCPxQoDsXd3d3d3WFxd1nkf+dmX5iEJDvJCpvl3v02M/Pm 6XmTN5kzV6Ka8mviYTNSTBAQBIIQATHjDUJwpeogRwB+9Z48e0lxlf9GM34Vg7xD0kDIRUDMeEPu 3EjPBAFBIFAQ8BYzXvjvhE81YxTuQAEghFcCv4DwewdflTr4Uwjvsk33PtV5swHhEzoIyfMtZrzB cCFC7Tp6jJjB0JI0IQgIAoKAICAIfIhA1CgRnAYJ+TC3pAgCgoAgIAgIAoLAx0ZAB1352P0I7vZh DYdosN4qn+q8eet8BbTfoWW+XYejCihKUl4QEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAE gg0BIfuCDWppSBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCFoEhOwLWnyldkFAEBAEBAFB QBAQBAQBQUAQEAQEAUFAEBAEBAFBINgQELIv2KCWhgQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEgaBFQMi+oMVXahcEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBIINASH7gg1qaUgQEAQE AUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEAhaBITsC1p8pXZBQBD4hBC4c+8JZSnVi3KV60vv3r0L 0MiPnb5OpeoMpdhZ21OMzO2ocfupXN/jJy/o3KU7Aao7MArPWbafEuf+g37qNDMwqgsxdTjDPcR0 0Is70mvoSkpfrBuNn7nda0YRWNdDgSoDKFm+znT6/C2vGbuZjjb+viJV/PoLunzpvJnsksdLEXjw 4B7V/rY41a/9VYDvbSEFgmdPn5CPz8Vg7c5Vn0v09OnjYG1TGhMEvBkBucd48+xJ30MCAuFCQiek D4KAICAIhAYEnj1/RcfPXOehgOv77DPPRuX7+g1VaDCCLl29R9GiRqQY0SLRlt1n6cnTl5Qg1+/0 4qUvLZvYgsqXzOJZA4FQ6vbdJ3Tj9iO6cv1+INQWMqpwhnvI6J339+L85Tt09uJtvq69YTSBeT1g 7PjOPFJkfWiSa4q8uH//rhAYoWlSHYzlxYvndOH8aT6DF1mfeXpzc1D3x0h6/uwpfV0qG716+ZIG D5tChYqUCvJujB7Rn/4b+w9lzpKTJkxdHuTtSQOCQGhAQO4xoWEWZQwfEwEh+z4m+tK2ICAICAIO ENi866yV6Du7pTsljBedbt15TK/fvKVXvq+5xMtXlq2D4l6X9F3rifT02SsaP6AexYkV9aP13xnu H61D0vBHRUCuB6LtW9fR3NmTqGixr6hq9fofdT6kcUEgsBB4/eYNvfb15epevXoVWNW6rOf582fB 2p7LzsjJDxCQte4DSNxO8ARDT8q43TEXBbp2bkn4bv7ZdRDFiBnLRU45JQh4JwJC9nnnvEmvBQFB IBQjcOWaRVsud7YUTPRhqAkU4QfZOq8dgegrkjctH4eGj9lL95Ov7xsa0LnqRyX7XOEeGnCWMbiH gFwPRKdPHaNtW9ZS9OgxhOxz7/KR3CEYAVzPYyYsIt9XLylHrnzB0tOmzdtR/oJfUpo0GYOlPWnE PQRkrXMPL0e5PcHQkzKO2vY0be3qJfT6tS+1avuXkH2egijlQjQC4rMvRE+PdE4QEARCOgI3lcbd g0fP3ermtZsP6d6Dp07LaFO/6MqE114K5k5NxQump3DhXC/faAP+/cyIf/0xU4ejPG/fvqMLV5SJ n9LaC6hgLGcu3GJTZk/qwhxdVmbRrnwpusLdTJvQurzoc9dlG8Z6ggp3Yxuu9p+/8GX/j+gz5sqM uDNGmMG6g4eZ9v3L48514h/+Ab0e/OtraDzvq7Skrl+7Yvo7cOf2TXr08EGwQYH24KvNjLxSRBB8 rL19+8ZM9iDNc+PGVXr86OEHbQA7nDMjb9++pWtXL7MWi5n89+7epsePH5nJas3jzny+efOafK5c 9Hf+3Zkza0f8djDXVy5fIJjt2ku27LnpizyFKGxYx3oPT5484msZ17RZcdXXqFGjU8FCJShhoiQu q/NVGodmv0Oe9NFl43LSFAKurt27d2/RpYvnCHNjVszOuavr2b4tfN+drRv2eXGM7zryu/qNZCzn CgNjvsDed+ce48lcuNNfYHXzxjV2ZeGs3MuXL9g3KL7TmBOz4motMVMH1jys9/6tX+7OO9oOaN8c 9T8k3W8d9c+b0xzf4bx5RNJ3QUAQEASCAYFRU7dQn39XEbR/4L8od7bk1LVtBactg1jp2HchzVy8 l313IWPyJLGpTZMS9GtTi7+gE2dvUIHKA+i58skHWbb+GAfnwP6icc2oRKEMlKbwX3RZtXloVSfK kiExTtHEOTupUbsp1LN9JUqfOj79OWAJ+0ZDv3JmTkZThzagzOktebmA+jDTH53X3e3ew5epTbc5 dOCYD8GPIfqRKlkcavdjKWrxfTGrv6cazcfRqs0nWKsPbWQv01uRmGEpbJjP6ML2nhQrRmTasP00 teo6h46eusbdCKPOff1lZpoz8geKGiWCy66BmPpr4DLGHP4PIfCBWDRfOhrRu5bqU1xOM4M7Z7T7 SFWwC4HsvbSjJ7XsMlvN11EeL3ws/tKoOPVoV5HQX6OYwf3167cULVNbeqN+GO5a3IG+yJrcWgWC WzTtOJ3yZE9Bu5d0sKZjp+4vE2jGor00tHsNbt/mpOFg4apD9L8x62jH/gv0RpmGQ4Bl68Yl1DVc niKEf//TwJMxXr/1kBr+OoVgBgv/krFjRqGf6hdVb8/NkyZxs3dQ/u2e0+lN3Sh1css8oZ+oO6XC PUL4sPT4xCDrtWT2OjGDv5nrwd3+oe/eJKdOHKHmTb+lly8sLwxWr1xImzet5iHUqNWIWvzyh81w QER17tictqg8eLgBsVGzTmP68aff1HfA9sUEzv87pBetWbnI+pAEAqR23aZUt34zrhftN/yuHEWO HJXmL91BsWLFsWlvxNA+NHnicKpW/Xvq0KmvzTl9sHTxLOrZtS01a9GBkqdIQ6OG/63IpQt8zWTI mIW69/6XUqfJoLNbtwf376JBA/+is6dPqO/Ha4oYMRJlz5GX/ujSn5ImS8n5/hs7mEaPGEDFS5aj v/833loWD3/fVMivHgCv0oB/JrL5sz55/twpFeCiDEWJGpXWbDyukz/YGvudOEky1e/+dOO6D+fL k68I9ewznN6pv797/06bN67ih/OYMWPTTy1/d6h9eeL4IRo84C86dfIowfce1uPESZJTvfrN6dua DazfId2R+XMn08TxQ/khFnkzfZ6dfmj2qz79wdbMfOpCVcrno3v3btNYpVX3x28/8sMo2oAPu88z 5yDj2N2ZM12/3u7bs43+178LnTt7kpNwDRYoWJz6DBijrqkonFa1YgEmN6bNWktp0r7XtluzahGN /LcfE73IGCZsWIoUKTKX+Yw+o5Fj51LGz7O53ddlS2bz9Vi6TCXq1W8U14cPjcni5XtoQL/OrEmL eXL1HTLbR2sjsuMUAbNrnZ4nR9cuvk/jxwwiaImBJNcC/4ztf+9NWbLm0km81XWZnXMz1/PSRTOp Z7dfqW377nztjB7Zn27fusHf71Sp09Nvqh+58xa26QdIxjEq32q1Fus1JkqUqJQzV35eVzEuo+h+ 22PQrddQ+rvPH6bvF6jTLO66fbP3GAQTMjMXWH927tjIWn1oo26NkhQ2XDj1+zMMLVi2m7XZddv2 24cP7/Oaukmtv/rlUYqUaXgNLlm6ImfftGElTZsyio4c3kdv31h++2DtqVX3B7WetqPw4cNbqw2s dQ8Vbly/goYP7c0vOXA/ihAxIpVSfWr7Ww/CfQLizry707d2rRvQ1s1rqNEPran5zx25Lf2BecGa +0KZTC9fc5Bix4nHp8zcb39r24jvdQ0a//LBbw/UW61iQb63LVq+m+InSKSblK0fAu9/0QskgoAg IAgIAqYQGDR2HbXrOZ/zJk4Qk7XsQHBVajTSYXmQN0Wq/Y/2H71CcWNHpZoVv6CnigRbseEY1wPC 6O8/vqHIkcJTogQx6M69p6z5FzFCOKsZL0gqyJNnL5mgAWmhBYQaZMh/G1TZJ0wwZcuUhCN/Hjh2 hUrWGkIXFSEVKaLlx4XZ/uj63dnOW36A6ijSCWa5MD3OnysVE4/Q8AMhdvTUdRrZpzZXifPwR6g1 EIEN+giyKbwi/aAVVqnxSNYMLFk4I6VLGZ92H7rIuF24coeyZnSuIQGtsmLVB9OuAxeV5kYYypUl uXpoD0cH1BwA9xxl+tDeZR0VOZrAFO6OMHj24hWTWfkq9Wcfi4nix6D4caLxfu9hKyme2geZq8Us 7tDaBJGL62XR6sM2ZN/SdUf54X7PoUtMNIMwhmC8OAfJlikpbx193L3/lKr9OJbrAH6Z0iYknxsP aKci/kBex4geiTr+VMZa1N0xQhsOePhcf8DfC1yHJ8/d5LqtlZrYeaquc+Bl75sS15X+V79j1YMM mb5OzOJv5nvoTv9MDDfEZYkYOTLFjRufHqjgG3jzHyFCRIoTJz73M2YsyzVn7HTrlvX4gSZuvAT8 Ix4PjhPGDWGSrna9ptasIM+aNqrCD3p48ChdpjJrmu3Ytp6GDOrORFDL1n9S6rQZ1ANrNG577erF VL1mQ2sd0I5YvnQOX8MgiJwJCBPIrOnjCA8EIHzSpf9cRQ4+x8RXix9rEB4OMDYt69YsoT//aMFj yZotNyVPmZoOH9xDe3ZvoQZ1v6aZ8zdRvHgJKX3GrFxku+o32tFk0NkzJ6wPzZvVwx58HWrZoh6C YC6WLt3nOsnhVvd7xrQxrPUWLlx4SpsuE4Es3Lt7K/3a6nseDzRF4sdPqHBQmhZ3blK/3h0VqZma QAhq2bBuGf35ewtuFw9XWbJ9wYQnND4G9OvEZFjHzv10dpo+ZTTPAxIwzrBqHQZZiIc4R2J2PnXZ lworBMVo3aIujwE+svAQj4dPiB67O3Om69Zb4IL+wg8XsEiWPBUdP3qAMFcYN7CEQPMFD+EgK7XA ZP3P33/iw8JFS3N/DuzbwQ/00ABMmy4jhY9gecnkbl/RHzx8P3v2TDfHW41Jw+/K87WD71Cs2HF5 39F3yJ0+2jQkBw4RMLvW6XlydO2CXJo94z8CUVagUHFeDw7s20nHjx2k9m0a0txFW5mA0x3QdZmZ c7PX8wu/63jsqP+xViHWJHzfz54+zsF12qg1evR/CzlADPqBtahZk6p07Mh+JrQzZsqqCKiIynXD Ef6u1KtZmiZNX8lrin2/7TEIEyasW/cL1GcWd9222XuM2bmIo9ZD3NM0WYf7WoQIkZiEC6dIP2eC 732DumVZ+9byIigPgfyDNideeK3fepqgpdaxXRP+vmO9SZkqHd26eZ2OHtnHL1JA5H/f6GdrE+6u JdaCdjvz5kyi/op0heDFVDx1fzijXHGsWDaP93FvdXfe3elbVnW9gezDiw28ZMOLHC0b1y1nrPFi D+sbxOz9Nlv2PEz2gXhs/nMHdS8Pq6ulDWuXcYCwRImT8RitJ2THioDt61ZrsuwIAoKAICAIOEIA xBpIEcgPdQrR1T296fLOXjRvdFMrmWZfbvS0LUzcQEPp8OrONGtEE1o64SeaOqQhZx0yfgPBpBCa Zqc2dmXtKpz4qmgmOrO5G//nzWHRKOECTj5A9MHPH/qDdrYvbM+EC8hEkEZazPZH5ze7hRZX2x7z mIypXTk3XdnVi9bPbM39gcYYZMz0rXTk5DXeH96rFo8tvNLSgmyY1YaPj637kzXNVm06wURfmWKf 07oZrWh0vzp0YMUftG1BO8qQJgGXcfYxdvo2JvqgZbdhVmvav+J32qHwOL6+C2uKgZTq9PdiLh5Q 3BGReFTfOupa6EPnt/Wg6uUtb/GBs1Hcwb1KmexcdJkfgYcDaOFBg03Lio3H9C5HawZpigAnRfOl tabb70CD78e6hVkr8MiazjRn1A+MS4efLKTE9IV77YvwsdkxjpqyhYk+aGVirnAd3tjXl7UxHVYc CIlmrxOz+Af0egiEIX30KlKph5O5i7bRdw1acF+gwTZv8Tb+h0bYB6JIjN87/01LV+2nBUt3ktZu WDBvik3WBXOnMlFWo7gAAEAASURBVNGXJGkKmj5nPfX+exQNGjqZteyQESQPTIRAwJX+ugqXXbXc 8mJFV3TwwC66jTxKY6HkV861qXV+EH3QTlu8Yi9Nm72Oxk1cwqab0MDZtMGyliMvHtBAOIIAgubi +MlLqFvPoTRj7gaCJiBIT2i8QfLlL8oP9CCuQMBp2b1zk94lEJhGgSN6SLHiXxuTne7DRBeE49JV +xir9h17c16QbyAAflWaGotX7qN5S7azphlOLl44w1ofxjN4YFd+uPtKYblE5R0xZg7jAM0SyML5 U+mcIigheKjT46tStS4tXb2f8/YbOI6x5kx2H2bn064YE33QQIKG44p1h5XmU06bLGbnzKaQ38HO 7RuZ6IN/vOGjZ9Mff/anKTPX0NiJiylFSudrI4rPmDqWa8GDKq5L4NV3gCUtYqRI6ppYaqMFiMwB 6Ss35vdx6+Y1U98hT/pobEf2bRFwd63DfNtfu9D8bfXrX7R87SEaMnw6a/vOmLeBokWLwZp+e3a9 XyOMrZuZc3evZ5gPZ8+RhzWi/1PX68JluwhECALRgMzXsnD+NCb6QDyNHDOXJs9YzWvezHmbCOvz 06ePacSwvjq7zdYeg1JfVXTvfqFqcxd3vNUwc48xOxe//dGH72d4mQIZOXYeH8+ct9Gq/csn7D6m ThrB6y9ehkxVWsFYV2Yv2MLrBcguaOxBg++bb79jjWXc5/oqjWLcT+o3tNxPV61YYFer5TAgawle mkB7HYJ79PwlO2iMIncXKY1hrOdaS9PTeTfTt7LlqzHBB2ITL8mMska9tIN8Xa4q53Hnfluuwrf8 su7unVvqfrvNWC1By9lYr81JOWAEhOyTC0EQEAQEATcQWLPlJEE7Cto/g7p8a31zVa1cTpo5vLHD msbP3MHpnX8pS0kSxrTmQZkokSOw9hI0qwIq0FJbq0ixpIksEcVg/lm6iEWL4fzlO9bqg6o/S9Ye YW0zaCGO7FPHxhy0a5vylFZp5sE33Jxl+619cbWjXwrCBNfoF7FQ7jQ2dTuqY/ikzZzcqnFxNtvV edKkiEfdlXktZIEyZ4VGXEAFZrPN6hVhjUqY7bZvVpqrvHD5rk3V7uBepYxFYwnafTduP+J6oM33 8LFFWwkJy5WZtxa9X6FkFtZk1On2W2hOgpi0J4+hbQq55HPPvggfmx3jDGWmDmnZ8Eur5iUIyEXj m7GWJ58M5A+z14k7+AdyF0N9de069GITUmjP4f+77y2EIDSpjLJ44XQ+hJkPtA60lChZ3kKeqQdS mD1BKlauydvDh/ayRhYfqI+1qywPDcW+/NpGW0aft99C2+1fRfpo8x6YYOYrUJSzXbt6yZp9145N bLqKB+P6Dd9rXUB7o0QpC6kIbR0I0kAmQbZtsZB42N+96z3BD0ISzuchIAqPHLKMyyzZh34PGTHN au70zbf1uF3UBzIK5mDAGho8lb+pg2TlG+r9eGBSDX9S0DbqqIhYo9kYzHKh8QYtyXVrlnLZ3Ts3 s4YKxtamXTfrva1EqfLU22B2ypn9PtyZT2M5PAhrjc/YSsvD3m+e2Tkz1qn3tTYJtEuBuxYQIEYM dLpxe+G85WVK0S/LWJOLFCutXpqFZ62UG9evWtP1TkD6quvA1ux3yJM+GtuR/YAh4OjaBZkOgkWb iKOFuHETUM4v8nNj2kTWvmUzc+7u9ZwsuVo3FOGI9iFxlIa2JpmwJmiZO2si79aq28TaTyRAI+zH n9rzuY0bVvDLAj4wfDjCwHA6SHbNYIWGPZ0Ls52GqTak7vfN1MuDNNZi0AQG8Ye1Ai+rQEzCjNso 0GSHOLseArKW7N61mTXB4fKiecuO1mahPd3pr4H0bQ2Ldran826mbyAUsc5CVvuRcNjHi7X9SkMa Urb8t7x1536Le3e+AsW43ErDyz9otB/Yb7knl69Ync/Lx4cIONdT/TCvpAgCgoAg8MkjoH2/Ffgi NUVXWmNGyZUlmfHQun/m4i3eh6+0fUdsH35hrgqBmWtABdpu0KgySsqkcfgQpsFagqo/p89bxlk4 T9oP+oEfrGWKZaKRU25zUAjdF1db+OYDcXhKmYFmKt6d/dD9UKew1bTZWVkQimcv3ubTFUpm/SDb 10pTEAJNuYsKd5CkAZH8uVLbFE+p/BNCYIIKbTt9nbiDe47MSQlzh+sNRF7jWgUJRDOkVePiNPS/ jbRu2ymCX0KYPa/YcJzPffO1hSTkAxcf0FCFTz2Y2966+9hKKNqbzeoqzI5Rk4VfFbVgrMvDJB1+ I2FWHdhi9jpxB//A7mNory9LNos2qx5nIuVrDgJtEphJRVEmuRAES4DAn9HJ44d5X39YNCye07Vr ljUSWm0pU6Vl8yhoQoAgRLCM9Wst5FRZ9bbfjECbC9FXjQJCDwJtBS0w74VA42Cg8p1mlMuXzvOh kbwspgghjENr7MEROshAPFwVLlKKTadwDlqB0PiDySvMiLXfP2P9jvbRb2gGaQE+eOhBUAt7H2AJ EyXlbE8eP9TZlbmypc/Zc+b9YPxYj/MX+JLr8vG5yGWu+/kFzKoCV+j50pVlUCZ+jsSd+TSW/6Za PePhB/tm5+yDgioBZpQgOGFWV7NqUapZuzFrtoD08E9ixY7DJtF7FGmbPkNmzg4tFVx3IFYTJEz8 QRUB6auxMrPfIU/6aGxH9gOGgKtr9+KFM3RGmc1CO/n586esAYbWsA46EjNz7u71jDXT/vub64sC 3Dy0d6ExHE2th1hHIIWLluKt8aNAweJ8CC3n69d8bEx5ccIVBlwwCD7MYGVs1t25MJZ1to+XI1f9 1ss8eQo7y2ZNB94go7CG3L93hxAwBPLK96U1j3EnIGuJXouzKbLN6JrCWD/67+m8m+0b7suHlFYf 7tPtOvRQ62ZYWq/cSeBawpqq3Si4e7+tUKkm7dy+kTasX65eXvXjF1/rlQkvxoQXePBLKeIYASH7 HOMiqYKAICAIOETgqvJvBokX2/Lw6jCTIfH+w2fWCLLap5rhtHXXqPFnTQyEHe2nD76CIEHZH02E wg+fI4kZ3UJEog9mBGTXyikt6YcOU+nk2ZsceKTnkBXUsUUZ6v6rRdPGUT3QhAMJBkmo/OjZC3wD ajHbF53fzFZjjrwW1D3DvbIy5R02YSMtVz4GjWTfj3WL0GoV2ASYgLBLlyo+HT9znc3IQXz5J+Nm bKc23ecEKEqyozHCj6TGM16c9xj715+AnjdznQTldR/Q/ofG8vB9pAXBJCAwM3rmFxUVfn2cSfz4 iayn8AMfpmR4mw+yDyY895UfQWgvFFSkjqcS0c9Pn14XUQ+04CDQQoDvI0cSx09bBucKK398IIAQ wRKBIPAwB/9v0PAoXPQrK9nXsEkrRQhaTHrNavU5ahtpYcNaXg7Znw/nIF1rj2hfi/ZlokWzrNOY F8jtW9d5ax8MhRMdfHgynw6qMZ3kaM4cFQaRC82m3j3a0cULZ9m0DQFV6jdsadVYclQOacWVhin8 Lo4bPYiJafiOnD1jPD9QFipckrUonZU1ppvtq7GM/b6j7xDyBFYf7duTY88RgM+29spPJLSQAyKO 5jwg17PuS1S/7zqO4TsSLzR8fS0EpKP1weiX9dEjy29eXVdI2TrCCn0LrLlwNE4EF9LEbUz1YsCV LFownYN4AO+AiNm1RL+scbV+494WmPPuqG+lvqpE//u7C99H9+3dQXmV39R1ftqQMMfV4u799ssS ZfnlF8zUoaEKLck1KnAYpHwF0erTuDraCtnnCBVJEwQEAUHACQKasHrwyNwNHPmheQXyaePsNpQv Z6oPaobpJzSfgkOCsj+aANWEj/14tCluYhWExKwUzpOGjq/rQiuVbydEkIU2W49/lrPfvYY1LG+r 7esCmQfNFTzIoy/GaK7Ie0eZYWtBgJXgEE9wh98+kH1rFLF378FT2nngAqG/CN5RvkRWJvug9ac1 E0sVyehvhOJte8/Tj79PZ2wQfbdWpdwcFOay0iAsXvOfAEERSQVA0de6nmtPK8T8QV6+tJC2/tXj 33XiCf6u2nS3f67q+lTO4YEzfPgI/LAxcty8D7TTgEOYz8JYAyDguJz6EQ8/RNDSQDRZ7Z8H/vws moDIFTiiowPCH9/AIY7JPvRfC8xPoUVx6MBuNuXFQwgE5QsoE19EcT2inN/j4RPBISABJfu4EpMf Mf0iGD82aPsZi2oT17jxE3Cy1iJ0lt9YFvuezKd9HUF1DG1G+B7buX0DTZs8mgOswHF/kqTJlXl4 LafNnjxh0TaFvzJEJdbyRe6C1Lnb//ThR916Qx8/KkAfofEuKqgPiD5o1TVt3p41eKNEiaY0hDtZ o5gHpFueXs+6zScGc/bYceKqmNLqz+83EpP9SXVOy/bB/XvWBPim8yYJyrmIHj2mFbeHD+5TIj+N ant84K+ub8/f+HdWbeVuAfcrBLzCi6GffnhPeNmXC8hxjBiW37IPDdrq9vUhKFZQzzvaKFS4BF/3 IONSp0lP8LOLF2Nlyla1dsnd+y3cSyCSOXwOwo8vNNDh8gP32a/KVrHWKzsfIhDmwyRJEQQEAUFA EHCGQLLEsfgUzBG19pjOi0iz9gIiL3WKuJx89NQ19vUHf3/G/+Ai+tCJoOwP/OFBtu45x1Fq+cDv A6a1a7ee5CP74Br44Qkx+qPjBL8P/DgpVyIL+yOsUyUPpxoDVRjzYh94ak3JNVtO2J9mrTgkwl+i ns8PMgVygie4F8ufjs2hEUyk97BVHPiktCL0IOWVbz4ItP6Wrz/K+9/4+fnjAycfK1VQD5CgKP9P t+pUMHdqJkO1n0cnxUwlY56SJrL84Nyy+6xNGUTChTm2WYkTKwpn9blx36bIYb/gLjaJfgeurhNP 8HfUhk7zpH+6rDdtgSnkyZPHAe42fuyDbIGcP3uKzXDwA974ryOd6sZgNqmjyy5dPJNNeHCuXIVq OkugbeHDDgKfaNCgM/ZL72MMRvnSL9jGtq1rlanuZj4F30LR1YNXNvUwAtOlSf/9y1oOGIur6MHG egNjX5sL40ELmjxGgemT9i+YIkVaPqVNVI8dOaDWGl9jdjVflrXbmOjJfBrLB/U+rt2CShvv39Gz 1EPmN9zcvj3bnTYL8hORbkFurFCBFgb+M5Ed68PBPsjpkEB6eEMfnQIcwk94utbhu6Wvq269hrHP uNRpMhCijtqb0wYEArPXM4L36Aiquj29NsGUHSaeWGe1z9RdfuuWzovtLr9AQ/AHqtcF43ln+55g 6EkZZ+17Mhfv27e8rHFWN9JxH9DuAA4d3O006w71kgG/swopdw5tVSAl3AsQ9CRBgsROywT0RJIk KbiKYyoCtP36resOqnnX9eutdrEBk1u44MD9Jrcye9Z+c5HPk/ttBb8XNdu3baD5cyYzxni5pv1T 6vZla4uA7a8W23NyJAgIAoKAIGCHACLDInosCJh+w987O16//RTV/WWCXW7LYaXS2Xjn75FrrL7k dEaYPmpfbDotqLdB1Z+yxTOzKSm06dr3WsA3Yj2W7kobD370QLDVr5ZfJ/NWm9VuV1pnRlmw8hBH MTamwYcfBFFlXUnVsjn49KCx6wkkq5Zzl+5Q1/8t5UNEpdU/9PT5oNy6izv8OYLkhAwaawkCUFpF aIYg4i58AYJAg3k4yKxKX1muM87g5AOkG0T7NMQ+/Pf91nsBdgMsFUpZfHsNm7CJI0yjQlzj9VpN oO37bOfXVWOIiAsZMXkz+1bEPrQ7a7UYj10bMXuduIu/TSN2B+70z66oVx3iLT3klNJ4gk+6gEqR YmW4iskT/7X6DtJ1wgRWP5TqNGxhyguZPeM/NgWGA3r48wtsyZ2nEPt6Q2CNsaP+Z7N+oS2QgNov km67qAoSAjm4fxchSi4e6DTJBr99kGmTR/IWAUWCUwoWKsFRdKG5M2RQD5vxwEzV58oFNkvVjs0R cATaktBqmzxhmLWriDbc5Y+frcfGHU/m01g+KPY3rl/BEZ+NdcOHH8QYQMF4Hvvwy4f7AZy+/69/ FzYBvnf3DkGTbv/e7Wz+aF8muI+9oY/BjUlgtefpWgci4+07y33VuD7Av9hmQ0AMT/vp7vV8/twp +vWX+tbgNNAmmzZ5FDePqLlaEGEdMn3qaHZDoNN9lE+6MSMH8iECcbjzG8kTDD0po/tqv/VkLnT7 Zk2wsa5CEJX3qiEgEgi+Gt8UYZ+Ib15bLBKwxmoBATt0cA99GOjbvCroFAIdIWIttJi14AVBnx7t afjQ3pwUFPOu29JbBDhClGf4hxyq7j2QsuXfa/Xh2JP7LYJ/IFDI69e+6iWa5R4F7X8R1wgEj92Y 6z7IWUFAEBAEvAaBRMoHXP1q+ei/WTuo66BlNHvpfta+2r7vAsWM/t5PlXFAiMI7Zd4ujlSbs2wf KpY/PWtAXb3xkLXgEMThycnB/hJYxjoDsh9U/YGWXLsfSykttJU0fNImWqqi82bLlIROX7hFOnhH t7YVrFp3egyIDLt4zWFq3W0uzVqyj86rKLYnNnShcTO3cXCKInnTcmRXRBSGrzr8+KxeIZcu7nDb pVU5mr5wL92685jyVuzP0WdB0u5SprBPn72iFMof4J8qT3CKJ7jDlHfGovd+gHR0ZZjLQssPRBck f65U/gYuQT6Q1f1GrOb5yPZVb8r+eVK+BmHGGxjSssGX/N2Ab8vPS/SgPGpuj5++zgFAQE7iWjcj TWoXYnIQZsqZS/Vk82CQtiCGQU4axex14gn+xnaM++70z1jO2/a1JhoIsG8q5GdtEGja/dLmT4+G Ar97K5bNZf9439UqTXAcj7f9t2/doINKUwLBPDZuP2tDyuDhBA8OIKEgQaHVh3qhsdFQ9W/E0D40 cfxQDr6RKXN2nGLyCA/R9b7/iVq17cJp+EA0xlSp0zExhGMdMRD78N0Hf4NagtOEF21CIwcRQieM G0JzZ00g+ElEgBA4RtfBO5o2b2fV8IF2RLmK39KShTP5YR9RJxHYBA/B2r+fHoveejKfumxQbeEr C4FRcuTKR2nTZqKrVy8RIj/ivlGydAWnzeKh/9uaDWjOzAm0dvVi/jdmRuCVLt0GB6sptrF97HtD H+377C3Hnq510H7LmTMfRxuF6ea6NUtYs26PIsmh2RtQ8eR63qfI6fJf5aBMmbJxwBD4jcMa+p1a v7Q0adqWta7ga7Thd+U4cizI/mPK9QDyw0S1cdM2OruprScYelLGWWc8mYvMWXIwKTtIEfxrVQTZ qz6XadaCTTbBkYztAZPVqxbyPaxezVKsrY1AT7g/aMGLk0kT/uV1tm6Nkrzuwt0DiNegkmTJUlGl b2rTwnlTec1HgIx4yv8tAmHh3lmrThNuOijm3X5M0B7FWrtk0Uw+BY3IEnZrryf3W1SGl39w7QHB yxv48hNxjYBo9rnGR84KAoKAIPABAqP71qVm9YowOXdMERk7D1wkEFK7l3Rgs9CwYcOoB4v3xRAh 9+CqTlS9fC71Ruqtipx6jBAkAdsoyqS37Q8lbYg+HaEX5JS9WM/5RfHFeUdpupyuQ2+R7m5/dF3G rbM2e/1Wicb+XY8JPQTsgNbZmQu3Caa7C8b+SL81L22shvf7/VGF/c7B7AE+5Z6/eEVwON9URd6F BhXMgkdN3cJEH8xNJw3+nkoWyvhBPcaEBCpIyCGFOcxVUS/MStcrf39hlRlevap56eDKP5g4Mpax jskB7sZ8et+a3zAXOBdWadlB0w7/aE+LJ7hDs09rM+bKktyGKDVG3q1R4QvdjMttiUIZaEj3GhRD EW8gz6Yv3KNM/F4zpgh0ES7c+/6iInfHmDFtQlo3oxXPN7RfgTnw792hMg3q8i33LZz6fvgnjWoW UGRsWdYUBVGMACT4ju1Z2pHnzfgdM3uduIu/dewOrgd3+oexWuuyu1b8w+Fjn0eUuwaNf1HXchjW eIKWk5H4CRfO8s7Y3n8ernuUsfy/X8dAHk2dtUY9CFTk6LTwZccPs2qLB7U63/1oQ/Rh/Ej/6uvK Vii0iZA1wcmO7pPuozFbWPVQC7E/16BRS+rRZzg/6EKTb8XSufx/8eJZJo9K2T2woI5SpSthw1JE EXxajJF34TQ9d95C+pTLrat+OzsXzs+XoD6vG2j+c0fq9NdAih8/ISFgBwg/aB+BpOw/6D/6rkEL nZW3f/zZn6pWr89zgIdX+BwEaTZh6gomD+Efyajp4+58arzt+6k7odN1Pp2OrbM5M+bBPiKFJk6S nH0pwu8eiD4Qyl17DrGahCOfbkO3iQf2DWuX4xRf8zDj7f33KPq5VWeO9ggtlb86/cxaJcijy+l6 kKbFUV+d5dfl9XlrHdbvD75Hlu+Qu33UdcnWfwQ8XetQM64t+HUESYYI3QgkhIAuuHYgeo75wHBs Zs7NXs+6bhBNdes3U0TjWybqoVGWUUXTHj95Ceko5MgLn2nTZq1jU1N1k2btZGjx4lorW76aWqfX Mrms68VWj8O+3zqPfxjqfMatf2WctensHuPuXPzcujNri+F3CqLIvnz5nDXkjH007kNze8KU5Ywp sN2/bwcTfdA469VvJEdjz523MP3aoScTrAjeBFNWX6WNhr5hDsIpDTyjaDz1WI3nHK0lxvPG/Y6d +nIgKx2NfN+ebcqk9yXPJ17MQNydd0/7VqFyTb7/o00QfyCb7cWT+235ijXYTx/qwotAV9ra9u19 qsefqYtbBwu0weD5i9d05ORtmzQ5EAQEAUEgNCGQL7vyv+erNJpuLfJoWCDuzl66TUkTxmSTSlTy 4qWvMgd6x+aqjirFuQtX7jKhFSdWVBvyxpgf/uuiRo6oflzZEiOoH+1qAkiXcZYf7T1++oKiR42k brwGBtKvoNn+6HaMW2dt6jx3VSAMRMYFiWTfX51Hb3ErAjkIrbu0KeMxyaPPQesMAR80Xo7GofM6 2gKviz531Q+4MIo8jGPzsGqf378xGfM7mwvk0dpnMFt2JO7gDt+Qz577qjmMyGMw1ge8YLoCrTl3 BHVevHJP+aAJx/ODshgPfhHAn6SWgIwRWpVPnr0k7csRdQJfZ9eibtO4xdydU9+x+HGj8fzjHMyC IcZ+4tid68Qs/v5dD2b75wpH9D3IJXkLFeTlhTLftvWBaLbd5yqK7rWrl9WDTGwbvzvwkQSTpch+ ZpLG+rTfKJB1jgTX7bVrl+nlixf8UKl9SDnKO3RwTzaHhe+jcZOWOMriMA1BM/AwAPMmo6DtZ8+e KLPdaNYHEuN57KPszetXCURaosRJ2V+TfR59DM0JPCTbP3i8eaO+u8+eqfTIVnJIl3G1ddZv+GLy VZg78gUGrcjw8McV/v3319gGAoXAxCuxeth0NF/GvOj3lSsXKYHSDNFtYa6BW0Dm09X1ott3NnYz c6brwBZaNAhMECNGLNZeBPFsFPu+zJw2lgYP7EogS4aOmGHMypqnFb+2vFCZvWALB2JABnf76ii/ fT+MDdt/hzzpo7G+0L4fXv1eypU1Id2885Qu+fjvg80RHp6sdboeRAqHphzM+fE9we8arA0gOowk uTtzruv273qeO3siDejbiTWKBw2dzC4Pbt28RgmUhh5IeVeC7/v1az68FoIoN/bVWM5Vv435nGFo zGO/76yMqzbtvx/GOs3OBcpgnvAyBGQtfMlBM82MYG5vKNyiKnwdBevAeg0fihGUj0RNtGI8aA/a bkZxtDbgvLvrHsqgftyv0Rbm09mabXbePe0bXHMg+q/99Y8+2gvaMHO/xX2sYplcHBUZ6zTW609R okQKR1kzxTc1dNtfP6aKSCZBQBAQBAQBIAAiLpPSZDJKpIiOH7R0HhBVILP8E0QPdSRcv4PfIc7y oz1n51C/2f446ourepEfJpfaH5+j8sY0/LjUftCM6diHyW0Ku2hx9nlcHWOe0qUyd1P0b0zGdpzN BfI4I/l0eXdwh8ku/h2Jf74LHZVBGuqzD5Ti6NoNyBihXZmAbN/muoMv+om5g7agUexJPn3OnevE LP7+9dds/1zhqPsfkrcgh9IqE1B74YciJw9Gzh4wdB0gX2B65J/ggWn5ktmcrVxF9/zz6Aiz9m2g bWfndF6cj5be9UOyzutIawHnQDL696Ct6zBunfUNRJ4zMk+TcsZ6jPswAdX+qYzpjvbR71Sp0tmc 8u8B2Mx8urpedGPOxm5mznQd2PLDt5NomThv3xc8uEMuXTzH5uRGPKEhA8FDO4gcLe721VF++37o urG1/w550kdjfbLvPwKerHW6VkToxr8W/K4J6Jzruvy7nnU+vUWQIPybEXzfdcAEV/ldXavGcs4w NOax33dWxlWb9t8PY51m5wJlME8gxdwVrPuO7ou6HqzV0KI2Co/HmOC37+g6wSl31z2UwXi071gc OxOz8+5p30Bo2pOazvqCNszcb5cvmcNEHwIm5c1fxFl1km5AwPHTgyGD7AoCgoAgIAgIAoKAICAI CAIfA4FNG1YQtDTCKw27r8pU+RhdkDY/AQQQOfO/sUNYwwf+KdNnzKIi8CZgv1vHVYRLSLMWHZyS rcEBkTf0MThwkDYEAUHg00Rg4fxpPPCvy1VlbfpPEwX3Ri1kn3t4SW5BQBAQBAQBQUAQEAQEgWBC YItfREs44kaQBBFBICgQQKCAIcOn0eSJw+mA8sMF/2UQaO8gCmSN2o2pTNlvgqJp03V6Qx9ND0Yy BioC2g9cWOVXU0QQCI0I+Fy5qIJhnWGN+QqVaoTGIQbJmMRnX5DAKpUKAoKANyAQUJ993jBG6aMg IAgIAhRAn30fE0HfV684uqVZk7SP2VdpO3QgAD9Zjx498NgMOzhQ8IY+BgcOxjYCw2efsT5v2oef NvgzAzntzNTfm8YjfRUEHCGAQEnwjRteuVT4lEV89n3Ksy9jFwQEAUFAEBAEBAFBIJQggB/1n/oP +1AylV4zDPjJQgTlkCze0MeQjF9o6xv8tIX0aza0YS7jCX4ERLvffcxtQ1O5X15KCAKCgCAgCAgC goAgIAgIAoKAICAICAKCgCAgCAgCgkAIQUDIvhAyEdINQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUEgoAgI2RdQBKW8ICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAQQhAQsi+ETIR0QxAQ BAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCCgCQvYFFEEpLwgIAoKAICAICAKCgCAgCAgCgoAg IAgIAoKAICAIhBAEhOwLIRMh3RAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAKKgJB9AUVQ ygsCgoAg4ASBAlUGULJ8nen0+VtOcviffP7yHXr05IX/GSUHI3Ds9HUqVWcoxc7anmJkbkeN208V ZLwAgTv3nlCWUr0oV7m+9O7dOy/o8afTxfPnTtHPzWpS6WKZqESRDNSr26+fzuBlpIKAICAICAL+ IvDf2H/o28qFafHCGf7mlQyCgCAQfAiEC76mpCVBQBAQBD4tBEDU3b77xGOyrsvAJdRr6ErKmyMl 7V7SwSvAGzdjO42ausXa1zBhPqNYMSLzGJrULkRpUsSzngvsHd/Xb6hCgxF06eo9ihY1IsWIFom2 7D4b2M34W9/arSdp5uJ9tO/IZSZ6Y8eMQvlypqRGNQtSpdLZuHyRav+jm3ce0z/dqlOFklk/qHPE 5M00eNx6SpUsLq2Z/ssH55FQo/k4OnDMh4Z0r06+vm/4WnGY0S6xatkc1PmXsnapH/fw2fNXdPzM de4EuL7PPvO/Pz3+WU6T5+2mlg2/pDZNSnABwdV/3NzJ8fq1L7X9pT7duO5DUaJEpahRo9GB/bvc qULyCgKCgCDgNQg8e/qEZkwbQ0cP76eTJ4/Qq5cvKWmyFFSoSCmqWbsxxYkbn9auXkwj/+1HyZKn oiHDp38wtpcvX1DTRlXo6ZMn1PrXv6hY8a8/yLN/3w7q06M9JUmagoaOmEFtW35H9+7d+SCffUKY MGFo0NDJFDtO0P2Wsm/TzPG1q5fJ58oFunHNx0x2uq/G2vyHbwnjmTB1OUWKFFlwNYWcZBIE3ENA yD738JLcgoAgIAgEGwJPn73itl6+eh1sbQa0oUWrDzHJZV/Pmi0nmbyaPqwRffN1DvvTgXK8eddZ K9F3dkt3ShgvOt1ShFpwyevXb6nzgMU0YNRaG+00EFkLVj5Q/4foz1ZlqWf7Stylsxdv09xlBxyS fdMX7iGcx/+pczcpY9qENsO49+ApzV95kN6+fafI1Ci09/Alh7jbFPI7yJoxiaNkr0s7d+kOnbt0 my5csX1AElwDbypB7Gmib97i7fygi4e00CRdO7ek58+f0Z9dB1GMmLFC09BkLIKAIOAGAqdOHqXO HZvRlcsXbEohHf/z5kyi2fM3q3UitiK2LvI/1sdEiZPZ5D90cA+dOnGE01avXOiQ7Nu0YSW3k9iv 7JHDe+nx40c29Tg7ePHiubNTXpOONffihTPcX99Xr5jsE1y9Zvqko16EgJB9XjRZ0lVBQBD4tBDo 9msFKlPsc8qSIbHXDbzjT2Xo95/L0PMXr2jXgYv0a495ipS5S43aTaFi+dNRnFhRA31MV67d5zpz Z0vBRB8OEijCL7ik66Cl1H/kGm6uduXcStusJGXLlISu3XxIs5fu53PQxIOUK5GFtu09T9ACtBeQ vLsPXbImr9p84gOyb8P200z0QWuwQK5USnMyBVUvn8taBjswIYcsmfAT5cry/mEkZvTInB4aPwTX wJ3VmzeucoWZPs/ORB8OQppGSUBHvHb1EoIGY6u2fwnZF1Awpbwg4KUIPHhwj35SmmZPnz7mdaDd bz0pT74iFDFiJDp+7CBNmTiC9uzeQjfUmpgrV36KHDkKvyTYvWsLVf6mjs2o9+3ZZj3eo86/ffuW NdisiWoH6ZCChUvydq56mQLSS8u0KaNoxtQxlDtvYerea5hOps+UtUS8eLYv/6wnvXxHcPXyCZTu h0gExGdfiJwW6ZQgIAh4CwJPnr5kEssT7bsbtx+x1tbDx47f0sIMtWzxzJQ8SWyXcEBzDEQaNMuM gmOYEmsNQeM54z60w2D66nP9gY1GmjGPu/uRI4Vn893ECWKyJh8IJ8iDR89p9eYPCS6cQ3+hlQWt NUcC0szZOeTXvg2jKxNeV+JfPfZl4U8OWmRv3tjia8x39cYD1lxEGsxKZ/zbmPIrEi5K5AiULlV8 6tTyazq+vgt1aVWOi4GUggDzk0pzzyjb9p5js1ydtlqRffaybtspTgIZHDZsGIoQPhwlTRTL5v8z P1vYRPFj2KTDxNmM+Hd9Oqrjle9ruuhz19R1BDNmXA+BKd6Aa2CON6jreqpM2iBRlPmuK4FGCh6C zfpbfPPmNWvFPHr4wGm10F6BaRjyGgXHV30u8YO2Md3R/t27t+jSxXP05Ik5jRlHdSAND+vQ4Ll1 87rpMTqrS9IFAUEg5CHw35jBTPRFjx6DJkxZTmUrfEvx4iek6DFiUv6CX9K/o2fRP8OnUZq0GSl8 hAhMBGIUu3du+mAwRrIPJOIpZQ5slHt3b9O5s5bfQYWKluJTsWLFofgJEln/0Q8IzFuN6WaJPpgS +/hcpOvXrvD6xZX58+Hr68v5zazjeEGCus3k9adZ62lvwNXaWdkRBLwEAdHs85KJkm4KAoJAyEIA Jpm/91tIZy7c5h87kSKGp+oVctE/XatT3NjOtdZAHPUYsoJmL9nHPtv0qOCX79+eNZVvt1Q6iSbN 3cWacDUrfkEzhze2pqcq2IXLXtjeg5r/MYNWbjxOIBuh5dX39yrUrF4R5ctsF3Xss5BA2IAMgjYd TGhB/GgBSfh7v0U0bsY2pYHny8k4P1iNAZppgSnQTgQud+8/JRBjWvRYts7/lX3QgbQESQUfhXmy p+B+dey7UPnA28v+D1EO5Cd8tP3a1PIj+cTZG1Sg8gB6/tIyhmXrj3FwDuRdNK4ZlSiUwVQ9yA+Z OGcn496jXUUmF4dO2MhadPC3t/i/5pZMdp/wrwcMoyuCFuUcSZKEMQn/EGjawcwYhNcaReZlMpjp QmsPUiRvWtq65xxt3HGaQKKB0NOiyT5Nbun0gG7duT7Rlp6/Szt6Ussus2nZ+qOE6wpE9S+NijMW 8NtoFPh07PPvKoImJuY6d7bk1LVtBWMWj/dDKq4eD+gjFYR5VeP6FQkPjJBtW9ZycA7sDxw8gbVN 8GA4ZmR/Wr1yERNhOAe/fjmV1kuHTn0pcZLkSLJKlfL5lE+q2zR2wiL647cfmcjD/MNf0+eZc5A+ v3DZLurXqyPt3L6BXilNFzxs//xLJ6pavT4tXzqH/h3Sm+7euUVhwoalXF8UoJ59h1PcuAms7eDh evyYQcr/0xLCQ7WWzFlyUvvfe1OWrBYNWPRh546NrNWHPHVrlKSw4cJRWOVDasGy3YSHbRCOw4f2 pkXzp1uxiBsvAbVt352++rqKrlq2goAg4MUI4KXDvDmTeQTVazViX3yOhlOwUAlrcsHCJWjLptVK Q28r/wbUL9eeP3uqNAEPUYSIESlNmox08sRh2rVjE69xuvBeP80/rJGpUqXTyYGyhXkwtAKPHN5H b9+84TqhhVir7g/0Q7N2FD58eGs7es1dvHwPDejXmdd5rHlRo0anmnUa048//faBRuKdOzepx19t lO/WnezPEOvztzUa0Gu7lzLWRtzcCam4ujkMyS4IhBgERLMvxEyFdEQQEAS8BYGRU7ZQtR/HcPCF 1MnjMikTLlwYmjp/N/UfZTHjdDYWEH3DFHn0VBEiX3+ZmRAsASTYHmW2WbnxKKt2Gso/ffaSf0Q+ UVujPFOmsS8UsZWvUn9atPowJVQEXfy40ej+w2dM/iFwQ4O2k+m2Iha1fzYQSDV/Gm+shjooMhB9 iRolIiF4BsxA0dbc5Qds8gXGAbTitPajJrxQrx5L2frDWTtRm/eC3IKmHwIuoI/QPgTpWaFUViYL 2/WcTyABIdAiTJQgBkWPGomPI0YIx0QayDRosZmthwurD5BVEARH+Wf8BgqnSAWQeMDcmRw6bjF3 BIYgXf0TPBiULW7R7lu79ZRN9vV+ZN9fbcqzZiA0M7fvfe9DCCQZIjxb6shsUzagB+5cn2hLzx+u xTnL9jPJlzJpHL6Oew9bSSBKjTJo7Dr6qdNMJvqg9ZkscSzlb/AyVWo00pjN4/2QiqvHA/pIBWG6 FjdefKXRZ3lxAY2LOHHi839kRehBq6NZk6o0ecJwunXrOmXMlJWyZsvN6du3rad6NUt/4PfqpXqI hLP71i3qMtGn/eOBNITo842+K0+bN67itmLHjkuPHz2kfr07MkHYvUtrun//LqVNl4nLQIOmU4dm vK8/QPTNnvEfvVA+oQoUKk7FS5ajmMrHFkzx2rdpyNo7yBtHObjHmLTEjBWbj+PFT0ThFOkHGfZP L64LD8sw1StZuiLhYX7dmqW6mGwFAUHAyxHAyw2saZBvvv3O1GgK+Znf4uXC6VPHrGUOHtjF2sjZ suehL0uU5XSQfUbZvWszHxZWQT8CUx4+vE8d2zWhQwd2U+rU6Xm9wroM/3gTxw9ls2Bje3rNbajW 3HVrllDUaNHZ/yBMmSeMG6LWPtvfjEjH+ozxvFEB0dKl/1yth5a6Vyyda6za4/2QiKvHg5GCgkAI QOC9mkAI6Ix0QRAQBASBkI4ACLU/Byzhbrb7sRQN/LMa78O8FOQToqe6kkK50xDIkObfFVUkWwTO Cu27TMV7sJbXOkX8gAA0IzBHnfC/+tSgen56+PgF5a34N5vBgqwDybd8UgvWgpultAhr//wfR6Y9 c+EWpU9t0YKZ50fqLR7fnArmTs1N2mvememHmTzQfIPJM8gY+NSzF2iUQaMQGnuIYAzCbPS0LbT/ 6BUCobp1fjurVtyMRXup7i8TaIgi4lo3LsGYn9rYlYml1l3n0FdFM9lo4A2ftMlUPUYSEv0D4Zg5 fWJaPa0la0QCG2cCXCHpU78nD5zl1enlS2ZR2ps7WXMPhCQIY5giI4ovCMwvC6Sj4gXT03Klqbhq 03HeR1mt1fdF1uRW34S6zoBuPb0+r1y/T6P61qGmdQpzF2q1GM+kMeZQR8oFiQqNPsgPdQrRmH51 +XqYv+Ig1Ws10SWZyoVMfoREXE12PcRkg8bJnIVbaZZ62BvUvwvlL/AlDfxnorV/c2dPpGNH9rMG CCJD5vwiP5+DeW3L5rWYzBsxrC/1HTDGWkbv4OEYmnG16zVl4i6G0gwxyu3bN6lL98FUoVJNZX77 mBrWK6dMfi/Q+rVLmeQbPGwqJUyUhNasWkx//t6cDqogInConzyFZQ3LniMvP7BWq/49+9VC3TDn rflNMdb0gyYOCMDf/ujDzRbOm5If9EeOnfeBRs+Gdcs4z8Ahkyhbdou2Mx6ob9+6wenyIQgIAt6P wOXL53kQEdRLjYQJk5gaEGvlKUINROHunZv5hQcK7t2zncvnUb728LJh9Ij+dPjQXn5JgBclEKxB EGixBabgpQTISryYgCazln+H9GKfg6tWLKDvG/2sk63bWzev0e+d/6Yq1epxWueOzXm9XTBvCq/T OuP8OVPYlQG0nkf/t5DXY2hFdunUQmlib9TZArQNibgGaEBSWBD4yAiIZt9HngBpXhAQBLwLAQRU ALEXL0406vWbJaoqRgCNtLF/16Of6hd1OSCYx4Ik1EQfMsN0tmi+tFwOvvPMytDuNahhjQJMmMSK EZn3URak1boZray+/qARpwNVwPecFhBvkIPHfXQSaxlm/zyp9djTHZB0MIdFZNoqTUbTb70XcFU/ NyhGGdK8N7nT9f9Yt4iVFIKWIoiv8TN38OnOv5S1En1IqFYuJ2u8QVNw5/73Gm+6Lvutp/VgjhaN b8b+7mAKrTG0r99XveEG2QVJlti1f0VjWZCSqBcE366DF/nUlt1n2Tdg4Txp2WwX2p8Qo98+TfaB 1Aps8fT6xLUI83GY7OK/fbPS3LULl+9au4iIzCBMQWQO6vItX7c4ifk0mqlbC3i4ExJx9XAoIbbY 3FkTuW+16jaxEn1ISJospTL9as/nNm5YYdWW4QS/DzyMguiDQHMvbFjb987tOvSkipVr8fWBh8qK lWty3vjKf9bw0bOZ6ENC6TKVrMFCfHwuch58wLy2Xv3mVqIPaTDz1YQkfO+Zlc/IskaePnXUWgRa gtBoEREEBIHQgQBeUkDiJ0hsvS+ZGVmhIiU5m9Fvn/bXB7IPgY2wXkBrcO9eCwmItQprEIhFBAAJ TIkQISKTdkaiD/WXLlOZm3G29rXr0IvdJIRRLgzw/933zTk/fKYaZfVKy++4GrUbW7WroaE9cPBE ypLtC2PWAO2HNFwDNBgpLAh8ZARsf2F95M5I84KAICAIhHQE4KMPUvCL1AQ/fZ4K/MzB9PP6rYes 8XbRx0LyvXxlMSUxU6/Rvx/yQ2OQt8ni2BBTIPWSqeANt+wCInxbPif9O3ETteg8U2mPHVWBJYqr 6L+Z3Pqxyw06+Fi85jDhXwv8zbX5oQR1VxGGHUnTuhaNMOO5Mxct2nILVx1ibTfjufDhwvIhfPz5 J57WU7xgBg6u4V/94RRhh2sBmmsPlOanWdGRdDkqryLCCudJQ9pfX8nCGbiar1UADgii+ELjEUQo tD8h5fzMgPkgkD/cvT7z50pt04OU6hqEgJB9rMhMmEFrIruA+u7g2CjGaMHGdE/2QzKunownpJVB sAqfKxe5W4X9nMsb+1igYHE+hL+o69d8rBp3Os83ftoj+th+q33q6fTEiS2RpBOprTESMNa1BAkT 0/17d+iJChBiL9C4OXP6ON1RmoLPnz9lZ/LIAz+AZqVE6fI0Z+YE6t/nD9q+dT3VUP684Kxfvygx W4/kEwQEgZCLQJQo0bhzjx8/dKuTiKQ7fcpoOnhwt1pXXiq/ni85GAc07DJnzcnEWb4CxZQW8iJl +rqRihb7ivbs3MJt5MpdkINvuNWgyczwuwefeggohPURms2QV74vHdaQJZvFj6k+mSiJZc3FWvlM BWnSAZqu+70owZiMAjcPadJkYG1vY7qn+yEVV0/HI+UEgY+JgJB9HxN9aVsQEAS8DoFLfqQcNPs8 EWg2wTff9n0WsxFP6nBWJpwfAebovKNzAzpXZS2sUVO20tJ1R/k/pwocMW1oQzZfdVSP2TQExYCG FQI1pEuVgHJkTmoTHMS/emAuDbNfCPrmTOxNb+3zBVY99vUaj/HgnyZFPDp66pqV0DKed7WPABsg +9ZsOaGCVJSn9dtOc/YSimiEZFSBO0DigiiDVilwBEEMP4+I9hvYEljXp5EIf+fXSR2YJV5sz747 7ow1pOHqTt9Del4EvfD1tRBmRp93ut/wfafl0aP3wXh0mrtbBM1wJuHstAKRD2a27Vs3YNM5Z+XM prdq+xeF+SwMzZ87hbZuXsP/GTJmoR59hlNq9XArIggIAt6PQLLkKXkQMEmFT05tbuvfyHKpYEQg 9uAT76DykwcfeHgZkiNXPmWdYHkZDFNeC9m3iavbs3srbwPbX5/u66IF02nwgL9MRSvXZey3ESK8 fxn3jix3cARrgv9UCCIHB6WERFyDcrxStyAQlAiIGW9Qoit1CwKCQKhDQAdfcOW/zdWg4WsORB9I nBn/NqZj6/6kyzt7UeWvsrsqFiTnQMgM6VaDLu7owRp3GNtBpUFWqdEoDogRkEa/zJ+e/vj5a/q5 wZcqEMnnbhF9aDdm9MjW6LMbZ7ehZ6f/+eD/xdkhVKdKHpfdDKx6XDaiTqZLZfHVB2ISwUTMijbF hRkvCL1DJ3xY6y1PdsvDB+rRpryrNp2wavWVURp/9lFuzbbpKl9QXp+YC8iDR+a1H1311dW5kIar q7562zmYpWnNNv3wZxzDg/vvXRHEi5fQeCpY9rv80YKJvpSp0lKvfiNp5ryNtHjFXir2ZRm324dZ 3K/KrHjh8l1snozIk3DG306RiXioFxEEBAHvRyBZ8vea6ZtVhF2zAo22vH6muDDl1VF28+R9b56r NZ0vXzpPMBfWZr7QXgtsOXxwD/Xt+RsTfbVV9N1xk5bQgqU7aeS4eQFuCmth+PARuJ7HDjSpA9yA oYKQhquha7IrCHgdAkL2ed2USYcFAUHgYyKQOoUlAMduRc4ggIM7gmiuG3ZYNLem/NOA4B8NASCS J4mtCJ6I7lQVqHkRFRWRX7cvbM8P8ecv33FbQy1QO6QqA5GlsYbGHPy82f8j6q5/Elj1+NfOt8rv HOTUuZuEACKO5N27d4SgKkbJmTkZE6EI0NF98HImCuG/ET4LtYAshUD7T0fuLa80AgNbgvr6RORd yK4DH353jp667vZwdJRqbdJtrCAk4WrsV2jYx4NYPOU/D7JLOaa3l13qoRcSKVJkNrO1Px+UxzCl 2+fnIL9br2Hsvw8aeAjooU3R7NvXxOWTJx+aAuu8IC2b/PgrPzwjPx7anfm/0mVkKwgIAt6BQJq0 GQgvByCIWuvrxNQfkcB19HA9soLab9+uLVYiL3feQvo0r5Xax+fUSSMJAYqSJU9FKVKmseYJrJ0d 2zcQfmcUUlF+2/7Wg4MKJUmaghIoX4QBFax78RMk4moQFMkob968pksXzxqT/N2HBqUWHf1cH2Mb knA19kv2BQFvQ+D904S39Vz6KwgIAoLAR0CgdJFMTMQggm6Pf1ZYe/Dg0XNq2nEa/d53kTXNfgca X1rrS0dvRR5obC1ec8Q+e5AeQzNx1NQtNhFQo0WJqMg+S7NRI1ve4F70uctmx5UajXSb3AzoACqV zsZV/D1yDUcZNtb3/IWvIr9OGpOc7gdWPU4bUCfqfpOXYAINadR+Cg2bsJHQRy0wwc1feQB932aS TuItfkCXLW4JwjFhtiUgSclCGW3ylCqSkQN5gCiEH0QQmFrbzyZjAA+C+vqENmL48GE5IEm/4e+1 J9ZvP8XRlc10f+OOM/wdgi/AfYcvcxGQ1fYSknC171toOEY0W8j0qaPp3Nn330M4nx8zciCfQyAO zENwCrTt3r6zaNwhQq+Wnds3kjONHWgqQhAx0ygwB54/dzL74tLpUSJHtY4J5nuQ69euUPs2DVnb z54I0OVkKwgIAiEXAQQJavFLJ+7g+XOnqFmTqnTRQF6B5BszYgBVLpubjh89YDOQQn4aeqdOHGEf odGixVCBOSy/XXTG/H5+TLGeQAI7Cq9u581rywtoRC/XAv99Qwf30IcB2mofrbNnjmdfqKgM5r1/ dWr5wfrpqCHjS5JDh/ZwligqQrEjs+ngxlXWcUczJmmhAQH/1SJCwyhlDIKAICAIBBICaVPGo8Y1 C9GY6Vup97CVNHf5AY4UC+IBUVVbNS7utKUoikArkjctbdp5hn78fTrNWXaAgzoguuqbN8FrEgbt vZ86zaQuA5eymS36tkQRjiB8iuVPZw3wsWbzSVqy1kJEHj99w0poOR1kIJ5AFN4p83bRlWv3KWfZ Pqpf6VVk3Jh09cZD2rrnHAd+eHJysE1kY0fNB1Y9jurWaSDgxg/4jqo2HUOXlTluq65zqG2Peexv 7/a9J9xX5K1VKbcuYt3CvxwiF2uBv0OjwPy1gPLPB99+EJj4IlBHYEtQX5+IOl2/Wj76b9YO6jpo Gc1eup8QRXr7vgvKbPu9jyBn44IPxxK1/iGQe8AbPgBBJmmTXftyIQVX+36FhuMmTdvSqhUL2Pl7 w+/KEaI/wkfVsSP72YQsUaKk1Lhpm2AfKrQJc+bMR/v37WBztnVrlhAeduEnCwFDHEnmLDmYCBzU vwutVY70r/pcplkLNrH23t+9f6fRw/sT/G6h7i3Kbx8IxVxfFLAGC4F24xY/078L508TfPqJCAKC gHchgBcYNWo34oA8xxShV6tqMY6kC1L/1q3r/L0PEzYswZTfKAgclCp1ekJAIEiu3AXU/ckSQEzn w/oxbfJIfUhB5a8PwYMmTfiXYDJct0ZJjhp+SPkSvHHjqrXtgOzUqNWYliycSbdv3aCaCp/P1dqJ Ne/unVusOY1gHq5k3uxJNHP6ONaiRB8hmkC0LxfcuMo6bj8DchxaEBDNvtAykzIOQUAQCDYERvSu RSCQokWNyGabiKAKTaN6VfNS55Zlrf3Q5oV6ixOTBn9PXxZIT0+fvSJEmYVWUzml2dXvjypczphX 7+utrlgf6+37dMuSbp+O8xGURhUkvJ95aNaMSah6+Vz08PFzmrZgD42dvo1uqmi9SJs98gfOi48M aRIwoYLoqSmSWjRgrCcd7ETwM62NEMH2x66DrJyk+6q3xnwggg6u6sR9gpnrig3HaNyM7byNosx6 2/5Q0obo03VAe8woHtfjIuCJsX69/0XW5HRI9bdJ7UIKqzhM4IJURTRa4Ig5njiovs5u3ULjDdcS BEQWTFDt5Zuvc1iTtMmwNcHJjp5zvXWSzSbZnesTBa2Y22EVVpFxIOTwHzbM+58ao/vWpWb1ivC8 HTt9nXYqk14Q4LuXdCCY+YZVkY2dKYPBjBtm7whQAqIPZtxDulWnz9MlshmDPghJuOo+edtWm1fp re4/ouJOm7WOzcWU3RjBrGuvItTwkFu2fDWaOmstPyjr/NjqOrTjeuM5V+ddlQsX3uIEX+dBPV17 DqEvVKRLOM3ftGGl6tc2gpbIz606c5PGvEj4uXVnjhgM87dDyufVy5fP1XUYjtKmy0QlS1ekJ08e 08rl82nh/GmE4CRI69N/NNeFD5jjgXSGmTBIThFBQBDwTgTad+xNA4dMIkQEjxgxEgf7AVEGX3Ug A/+bvJTSpLXVvMdIS5auYB1wIT+zXmuC2kHACa1BHCNmLPoiz3szX2M+4344P/944f3WOOM5Z/u5 8xZmH6NRo0ZnjWu8kPF97ctrIsgz+4BGei20X5Nxzw5j/X//ewqmzsPHzOY17+nTx7zmY938qeXv 1KZdN+5WWLvfAsa+ps+YmddKaE++Vv3Kku0LatW2qzGLzX5w4irruA30chCKEPi4qeavAABAAElE QVRMfUnfORrP8xev6cjJ245OSZogIAgIAqECgXzZlQ8xX+VM/pZz01tXA8XyeeHKXTaFTZUsLkEz yijwgQaSShM5xnO37z6hW3cfU+rklnKoC5qBiF5rNH0DGRc1ckQbH26u6kV+9EOTMLpN39dv2KwU 9Rvl2fNXBEIK0XqTJ45tQ57pfIhoizHY16nPG7fQUIQvNftxGPMY912NxZgPGofA+vmLVxQnVlTW pjSe1/uO8NLnsA2seox1OtsHbiBQE8aLTjqwi7O8mB8QwDClNvrrM+bX0YkdXU/GfHof2L55887h nOo8zrZmr09X84drC2L/vUAavhdnL92mpAljckASpKEuzI+j/DgPwffk3KU76gHmDaVXUZ6dYWXJ rb7eIQxX3a9g3yZvQfcevFDm8Pfdbhq+7KDdAgLMkcBf0/VrPvxwmDhJcpv1y5gf/vRgZubIZAv5 XJ1HH6BZZ/9QigdGmJHh4dZeYHp3/94dgs8qlMW1gwdU5DWusSiHc/DBB4IQ/rTgjF4LNANhfoao wAkTJmEs9Dm9RaCSyFGifNA/fV62goAgEPQI4GVmrqwJ1X33KV3yce6D00xPoMF77eplwguFePFw r7G8WHBWFlptWFecrW9YJ589e0ZR1DrhbC011q3XK5i52msKGvM52oc7AZilRlD+VUHyQbC+ok6Q mFpcrblY9yBYOx0J1tZnyu9e0mQpraexTkeJEo3vBdZEux3kwf0C/v/MRPUNTlxlHbebLDkMsQhE iRSOsmayBAb0r5NC9vmHkJwXBASBUItAQMm+UAuMDEwQEARCFwIBIPtCFxAyGkFAEAitCAQm2Rda MZJxCQKCgPcj4A7Z9962xvvHLSMQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQ+aQSE7Puk p18GLwgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBCaEBCyLzTNpoxFEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEBAFB4JNGQMi+T3r6ZfCCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCoQkBIftC 02zKWAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQ+aQSE7Pukp18GLwgIAoKAICAICAKCgCAg CAgCgoAgIAgIAoKAIBCaEBCyLzTNpoxFEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFB4JNGQMi+ T3r6ZfCCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCoQkBIftC02zKWAQBQUAQEAQEAUFAEBAE BAFBQBAQBAQBQUAQEAQ+aQSE7Pukp18GLwgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAIBCaEBCy LzTNpoxFEBAEQi0Cj5+8oHOX7gRofAWqDKBk+TrT6fO3rPUERr3WygKwc/7yHXqkxijiGIGgxOfN m7fUa+hKSl+sG0VM25rSFP6Ldh+86Lgjn0DqsdPXqVSdoRQ7a3uKkbkdNW4/9RMYtQxREBAEBAFB QBAQBAQBQSA0ISBkX2iaTRmLICAIhEoEnjx9SQly/U7pinal5euPeTxGEEZXbzywkmqBVa/HHfIr 2GXgEkpbpCuVVgRLSBUQkV/VHUZ5KvzN24PHfPzt6oKVh6jgNwO5zG+9F/ib31mGoMZn/KzthDbO XrxNiRLEoGs3H9KZC7eddSdUp/u+fkMVGoyg9dtO0WtFgkaPGpG27D4bqscsgxMEBAFBQBAQBAQB QUAQCH0IhAt9Q5IRCQKCgCAQuhAA6fDK9zUP6uUryzYwRhhU9Trq23etJ9LTZ69o/IB6FCdWVJss SIcE5thsGgiEgzMXbtHarSetNbXtMZc2zGpjPbbfefHSl5r9MZ1u333Cp+4/fEYDOle1z2bqOKjx mTJvN/ejfbPS3Edoe4YLF9ZU30Jbps27ztKlq/comiL5zm7pTgnjRadbdx6HtmHKeAQBQUAQEAQE AUFAEBAEQjkCQvaF8gmW4QkCgoD3IxArRmTaOq8dk2FF8qYNtAEFVb2OOjh76X7y9X3DZJI92dft 1wpUptjnlCVDYkdFQ1zaZ599Rht3nKFT525SxrQJHfYP49VEn8MMbiQGNT5Xrt3n3lQomZW30aNF cqN3oSurxiJ3thRM9GF0CRThJyIICAKCgCAgCAgCgoAgIAh4EwJixutNsyV9FQQEgRCFADSgoPEF c1j/BKaR9x489S8bn3/9+i2bVBrzF8ydmooXTK80rhwv2zduP2Ly6eHj56ba0Jn8q1fnc7X1tG1d ZwxFLpUtnpmSJ4mtkz7Yvn37ji5cucvagR+cdJIAbciLPnfp3bt3TnK4nxwzemT6skA6Ljhm+jan FQyftJnP1a6c22kefcI//Mzgg7o8Ha/2lRg9WkTdpQ+27uIPzEGcBRbhiQ6hD9C687n+wKM5NTMG KxZKs09EEBAEBAFBQBAQBAQBQUAQ8FYERLPPW2dO+i0ICAIfDYEN209Tq65z6Oipa9yHMGE+o6+/ zExzRv5AUaNEsPbr+Qtf6th3Ic1cvNdKeoDQatOkBP3atJQ1H3ZSFexCN5W54Nb5v1KN5uOY2IIG 2e4lHShP9hQcNOGyIk8Orepk1YC7c+8J9RiygmYv2cdldYV5c6Skf3vWpHw5U+kkp1sEY7CvN0WB P+nBow9Jwzgxo9DFHT25LrNtYyyrNp9grT4UzF6mN5uIhlWYXdjek6BdOGnuLmrUbgrVrPgFzRze 2Kavew9fpjbd5tAB5SPv2fNXBExSJYtD7X4sRS2+L8bHuoDG8JLqY8sus2nZ+qNcBmTZL42KU492 FQlzFVBpUqsQa/ZNmruT+nSsTBEj2N5K0WcEuMDYalXKreZ/3wdNmsUPBZ3hE9DxNmg7mRasOkQg rSFFqg2i8OHDUoFcqWj1tF84zR38UeDu/afUpvtcWrT6sLXeDGkSUO8Olal6+VxcZ9zsHZTfyOd0 elM3Sp08Lqfh4/qth5RSfQ8iqD48PjHIOreY99/7LaJxM7YRvlOQRPFj0OCu1ckMmWpmDCfO3qAC lQfQc2V+DVmmfGMiOAdk0bhmVKJQBt6XD0FAEBAEBAFBQBAQBAQBQcAbEHCsIuINPZc+CgKCgCDw ERCAplilxiOZ6CtZOCP9WLcIZf88Ka3YcEwRdO+j5UI7r0i1/9GwCRtZIwlEVoVSWTlARrue85kE NHb/2YtXBD9vZesPZ6JPm7pqX31Pnr0kRE3VZAfKguhD/U8VGQKysWrZHBQ3dlTac+gSVW48yhqI w9iO/b6jekGkxFbEnv5Hv0AIgYzUYrZtmEDC75kW9A/HSRLGovB+fuGeqrFBEwx9Mcq85QeoUNWB tG3vefahBsIlWeJYjA/IvBadZxmzk8YwX6X+NGfZfgLJlzJpHMah97CVNFRhFRjyrSKtQOSB2EIf 7WX4pE2c1KB6AYoS+T35a8xnFj+UcYZPQMcbP240m7mJEysKHydU8w9xG391HSKAydT5u+m1CnRR KHcaNnNG9OdaLcZbtTIxHnw/7H00wswb//BRaFTG7NBnIV/nUaNEpCa1CzFpiGtlrgPsueOGD7Nj iBwpPAcniR7VYsIMAhfXKf7hv09EEBAEBAFBQBAQBAQBQUAQ8CYEbNURvKnn0ldBQBAQBD4CAqs2 nWAyAj7mVk1tae3B9n3nCRpMWkZP20L7j15hzaWt89spcismn5qxaC/V/WUCDRm/gVo3LmFN1+Wg 8QWNJWj/wQQShJszAZkCMqv5d0WtGoUwCc1UvAcTc+u2nmIC0Fl5Z+nQJtSC6KQgcA6fuMpEi043 2/bwXrW4SIS0rZjIQVCLdKni62qcbkEwtu0xj8tAe2vS4O+VxpflltVt8DLqPng5jZm+lbX7smVK YlPPlev3aVTfOtS0TmFOB9EEYghzAlwDKiCG6lXNRyD1YMpb95u81ipheq01+ZrXL0qXldmpIzGL n6Oy9mmejnfgn9UI/3Gy/UYIILJkwk/0RdbkXL0n+A8YtZbNphMniEkbZ7exfh+gYdln2CqKECGs fddNHWtCdfH45gSzcwiIVkSWdiXujuHUxq5MCLdWWrtfFc1Ei/9r7qp6OScICAKCgCAgCAgCgoAg IAiEWAREsy/ETo10TBAQBEIiAsqKlAW+w4ymriBvNBmFDONn7uB8nX8pa0PoVSuXk7W9oNW0c/8F zmP8gKagJqSgeeXMRx/KgASDOavRdBhaeUXzpeUq0ceASv+Ra5joS5ooFpus6vqCuu0la4+wzzdo VY3sU8cG265tylPalPFZYxIafPYytHsNalavCJvswmwXUWYhFy7ftc/q8XGT2gW57KadlkAduiLM O0gm+FfM5CR4B/IGJn5BMV5P8EdQEgiuSSPxjcAf2xa0s2pyciY3PmC6DTl43MdaChqi0Kh1JZ6M wVV9ck4QEAQEAUFAEBAEBAFBQBDwFgREs89bZkr6KQgIAiECAZjLgoBCJNZMxbuzL7gflAaZ0VQV HT1z8Rb3d6HyibbvyGWbvmvzVQScsJemdS3aaPbpro7hb+zQ8avs8wzBQi76WEi+l68s/sdclXV1 DmPsqUyFIdDQg1msvQRV2zD9hBTOk5ZNZo3tgvwpUywTjZxym85dem86rfPkz2XR/tLHKZWPPwgI VpgjB0a02VxZkrMWHLQ3od33vy7VmHwcNXULtwVtSzMSGPgFxXjdxR/BL85dus1DDmz/dt+Wz0n/ TtykzLZn0nKlJdiyYXGef00COsPZ3TE4q0fSBQFBQBAQBAQBQUAQEAQEAW9DQMg+b5sx6a8gIAh8 VARgNrtySkv6ocNUOnn2Jv05YAkTYh1blKHuv1bgvsEkUkfoXbruqNP+atNepxn8OQFTRvjmgwlx YAt86DXtOJ0JMgRWqFImu00TQdk2GtJaifYkqu4EouJCgLV/EilieGuWwIvLSwSSFwSUDtQBs+nz l+8Q/BTCf6IrCUr8AmO87uJ/884jqw++eErrLjBlQOeqrKU5aspWwvcJ/zmzJKNpQxtS5vSJnTbl 7hicViQnBAFBQBAQBAQBQUAQEAQEAS9DQMx4vWzCpLuCgCDw8REonCcNHV/XhZZPakGlVJAOaIz1 +Gc5TZyzkzsHIkqb9MJ32bPT/3zw/+LsEKpTJU+ABgPffyD6Mipz0Rn/NqZj6/6kyzt7UeWvbIk5 TxoZPW0rbdl9lrXqhqnIvvYSlG2jrXixo3GTzsg8bUKdOEEM+64F23Hdb/IQ/PeBuINfueGTN3Hb jWsWtM6/s84ENX7O2jWb7i7+sWJEsUbPvav8FroSrZH38uVrV9ms50BeDulWQ0WC7sGEOvxYHlTR mSs1GsXalNaMdjvujsGuuBwKAoKAICAICAKCgCAgCAgCXouAkH1eO3XScUFAEPiYCICwKFciC62d 0cpK2m3Yfpq7BD9xqVPE5f2jp64xIQRSyPiPaJ8BEfiF27DD0t6UfxqwDzhoOSVPEluZqQYseigC H3RUEVAhAzpXI/gBNIonbX9GFr9rDx8/N1bldD9Ninh8buuec+wDz5gRJqNrt57kJKNvOGOe4NgH qQutR0iXgUtp5cbjrIHW7LsiLpv3BD+XFQbBSXfxx7WttTC37j7nskeI+gvxuXHfJt/hk9dsju0P EPjjL+WvcfvC9kwsQotSa+/Z58Wxu2NwVIekCQKCgCAgCAgCgoAgIAgIAt6IgJB93jhr0mdBQBD4 aAgsWHmIo+waOwAffhBjoIxKpbNx2t8qwMXZixZfZpygPp6/8KU1WyxklU5zdwvCC/+QMxcs/u2w j2jBi9ccwa7H8vOfs+iR8m33ZYH0KgKvJRCFsTJP2kZABcj2veZMjssWz0zQ6IJmX/teCwhmxVq6 Ky1KYBolcgSqXy2/TnZ7e9HnLptBV2o0kl75mtMys28EprwQEE/ABT4dUyWzEL32efWxJ/jpssG1 9QR/lIEMGL2W8dB9BQmaUfm3RKRiiMZnxOTN9ObNW05DHkRNthdoTcIPIghSLdGiRFRkn+UoqroG nIknY3BWl6QLAoKAICAICAKCgCAgCAgC3oRAwFRLvGmk0ldBQBAQBAIBgXEzt6kgAceoSN60lDVj EiY1Vm8+wZpG1StYtLzQDKLwTpm3iyPK5izbh4rlT09JE8WkqzceErTVECjiycnBNgShO90D0YU+ IBrsj79PpznLDtCz569o3bZTVgLFnfp03uu3HtKi1Yf58JCKfpq9TB99irdThzSkHJmTut123hwp FQl5mFp3m0uzluxTuN2lExu6kPa9Z9OIOkiWOBZHde09bCUNn7SJlqrovNkyJaHTitjUgRe6ta1g E+nYvg7/jtdsPkmI2Ao5fvoG+4Hzr4z9+WL501H61AmshGtzf7T6UD6o5s6+bwE59gT/Lq3L0czF +/iaz16mN+XJnpLu3HtCx05ft+lKk9qF2Pwc36PMpXqyyTM0YEEI4xo2CkjUnzrNZM3Jr7/8nLFb oshsEKbAHv4RnYknY3BWl6QLAoKAICAICAKCgCAgCAgC3oSAaPZ502xJXwUBQeCjI9BUaXJBMwmE HTSOQPQlTRSLJg3+nkoWymjtX6wYkengqk5s5vn69VtaseEYjZuxnbdR/s/eVYBHcUThVwju7u7u 7u5SnOIUL1SQYsVpcStS3IsXdwju7u7u7tr532U2e5e75C4CSXgvX253Z0f/nZ3d+fe9N8rk8bdm xa2IPr1Cr94aGXns6HC9RTDKhPbdy1fvCKv+btp1lsop7aqBXatwKnNcBOhjvbUXBvNivcAD/OKB hDH/azLG1bJRJ5Bi0NDbqbT7Xr95R24hQ1rV01wvnOjfqRJNGlSPCT2Ya2JhhvOX7xNMd5dMakGd WpXk9PpHp9dbHR5SmVXDtBr/IUN4PvaQD8yxsTpv4gTRdHS7W51nqFCWOpsjtaxnMdtFv6hQPKP5 lOG7zzadK/gZZbtZl+0o3FF7rSpmOtB10/npU67iD7PZvcs7EVYqfvX6PRPRIPpw3eFTMnpUi3Zn k1p56Y+fy3I/A3F76vxtJo/3r+zMhF/IkCEMzT0Q6jCVhvn3v0v20yS18vHdB885bME/zXRVHW5d bYPGQGPiMGM5IQgIAoKAICAICAKCgCAgCARiBL5TEy9P2yhTRV+/+UDHz1ibnplOy64gIAgIAkEe gdyZoxK9f0R0b5nLbbmmyCeQYSAwsKouiCRHAi2ky9cfMsGl49vGhZkiSEFtEuzK+fsPX9C9h88p WaIYrPmEYR1muJEViaUXQ0B+9sqwF2ZbtnfHzpaNPFAvkHYgJ1MkiWmQijgHMidCuDDk5uZJxiFc C8w579x/RlgN2TcYaZISWnVmgZkw8tMkj/mc7T5WWAYJZM/fIvCG3zp7+UCLM6yDc87iZw8f766d o/batgnH3uWj4zuDv46LLfC4euOR0twEkRrdfMrYR3+/ePU+xYoR0SACYeIOAZZmQXug5eemCM9E 8aJZEeXmeN7tO9sGe1h7l2+QOJeojTKjfqPM3639JAaJukslBQFBQBBwAoFQ6v0hW8Y46oPQS/X8 eeZECokiCAgCgkDQQyB8WDfKmDaWUxUXss8pmCSSICAIBEcE/EL2BUc8pE2CgCAQTBEQsi+YXlhp liAgCGgEhOzTSMhWEBAEgjMCrpB99lUogjM60jZBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQB QSCYIiBkXzC9sNIsQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEgW8PASH7vr1rLi0WBAQBQUAQ EAQEAUFAEBAEBAFBQBAQBAQBQUAQCKYICNkXTC+sNEsQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQE AUHg20NAyL5v75pLiwUBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEASCKQJC9gXTCyvNEgQEAUFA EBAEBAFBQBAQBAQBQUAQEAQEAUFAEPj2EBCy79u75tJiQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEgWCKgJB9wfTCSrMEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEvj0EhOz79q65tFgQEAQE AUFAEBAEBAFBQBAQBAQBQUAQEAQEAUEgmCIgZF8wvbDSLEFAEBAEBAFBQBAQBAQBQUAQEAQEAUFA EBAEBIFvDwEh+769ay4tFgQEgW8UgQePXlCGEv0pW7kB9Pnz5wBD4eS521Si7t8ULWNHipy+AzXt ODvAypKMBQFBQBAQBAQBQUAQEAQEAUFAEBAErBFwsz6UI0FAEBAEBAGfEBg9bQvNWLTXYbTWDQrR j3Xy2z3fpMMs2r7vIkWJFJbW/9uOYkSLwPGWrjtK/f9eazeNbeD3ZbNQ93ZlbYN9PH71+h2dOn+b 44Hr++47H5O4HOH9h49UodE4unrzEUWMEIYiRwyr2nvB5XwkgSAgCAgCgoAgIAgIAoKAICAICAKC gO8QELLPd7hJKkFAEPiGEVi/7TQdPH7NIQIXrz6wew4EGEhCrVU3f8VBatOwMMfFOe/yNGeYMU18 82Gg2t+294JB9F3Y3ofixIxE9x485zqu3nSSxs3aRpVKZqKW9QoGqnpLZQQBQUAQEAQEAUFAEBAE BAFBQBAILggI2RdcrqS0QxAQBL44Ap1alaQubUp7KTeS0mazJ3OW7jeIPpyftXifQfZBG7BG+WxW yRLm7s7HK6a1pmwZEhrnokQKZ+wHtp3rtx5zlXJkSsxEHw5iK8IPcuTUDVrlfoKiRg4nZB8jIj+C gCAgCAgCgoAgIAgIAoKAICAI+D8CQvb5P6aSoyAgCHwjCEQIF4aiR7WY4TrT5NmL93O0vh0qUs9h K2nPoct04cp9Spk0FoUO5UYJ4ka1yuY7ZWcLLcC4sSJ7OWcV0ZuDu0qrLkxoNybYvIlmnPrw4RNd ufFQtSu8l7bduf+Mnj57TXFjR1ZmyPYJx2cv3nBekZQJr4ggIAgIAoKAICAICAKCgCAgCAgCgsCX R0DIvi+PuZQoCAgC3yACh05cZ3950aKEp85tStHcZQfo9IU7NHvJPur9WwV/R2T87O3015h1BE07 kIY5MiWiXg7KSZqvB4EU3LG4PdVsNZkuX3/Iafat+J2SJoxOfUetoQXK5BhxtOTKkoTG9KtFubMm 5SC0JW/lIfT67Xs+XqVMdrE4B2Ro9++p459L6PWbd3yMti/fcJz32zYqQn91rsz78iMICAKCgCAg CAgCgoAgIAgIAoKAIOB3BGQ1Xr9jKDkIAoKAIOAjArOVyS6kevmsrMVXt0pOPv53iUXbjw/86Wf4 JHdq3W0eE33xYkehhPGi0oFj16hSk3/slvBKkXBvFElXtsFYJvq0tuK79x+Y6MOCJC/V4h5liqQn LA6CRUX2H71KlZuOJ63JFy5sKNb4ixTBYsIMbUL468N/NKUlCO3EiOEt2n5hw4QyzukFSuxWTAIF AUFAEBAEBAFBQBAQBAQBQUAQEARcRkA0+1yGTBIIAoKAIGBBYNHqw3Tx6n0rOKDp1rZxEauwjx8/ sSYfAutUtpB8P1TNxaa8MOOFOW/e7Mms0vj2ACvuQqMP0qxufpo48AfW0lu85gjV+3k6k3qO8n7w 6AWN6FWDfv2xGN1/+IKghXjt5mNKkiA6tapfiCKED81JYc6btmhf1vRz33GWCcCkCWPQ2S296G9F DP7SayGVKpSWlk9tZRRVs0J2rlf3wcs5/uxRjY1zsiMICAKCgCAgCAgCgoAgIAgIAoKAIOB/CAjZ 539YSk6CgCDwjSFw4uwtwr9Zbt196oXs26gIMRBk0G4rli81R0+RJCabwO47coUX6vAvsm/D9jP0 8PFLgqbd8B7VmehDgdXKZaV5Y5tS1WYTzNW12m/xQ0Em+hAYK0ZEPlencg6rODhAOwrlTkEr1WIb WEVYRBAQBAQBQUAQEAQEAUFAEBAEBAFBIPAgIGRf4LkWUhNBQBAIYgg0/6EAYRVds8SKbll51hwG v3yQmhWzU4gQ3xmnYMoLsm/BykM0sncNCuUW0jjn2x1NvoE8tF0V2Lyir7380R5HAp98R0/dpNv3 ntKLl2/VIh4Wku/tO4uPPkfpJFwQEAQEAUFAEBAEBAFBQBAQBAQBQeDLIiBk35fFW0oTBASBYIRA gjhRKVuGRN626OWrd7Rk7RGOAz93TTrMMuLfvveM92E+u3bLKapUMpNxzrc7N+884aQxo1k083yb j04HLUH45tt18JIOkq0gIAgIAoKAICAICAKCgCAgCAgCgkAgRkDIvkB8caRqgoAgEPQRANEHwg8C 33z4tyez/tvnL2RflEjhOPsnz17ZK8blsB/aTWOiL02KOLxqcOZ08QmLcLTtsUCtqHvM5fwkgSAg CAgCgoAgIAgIAoKAICAICAKCQMAiIGRfwOIruQsCgsA3jsBsj9V2G1TLTR1blvSCxpK1R6n3iFW0 YuNxevr8NWmyzktEJwOw8i5k7+ErhNV0Q4fyHOZPnL3tZC6WaFihd/Puc3wwa2QjypUliZE+UkTL yrpGgBM733lYMD999tqJ2BJFEBAEBAFBQBAQBAQBQUAQEAQEAUHANwiE8E0iSSMICAKCgCDgMwJY lGPjjjMcsVndApQ5XQIv/20aFiY3txC8Su6iVYd9ztSHGKULp6NQoULSsxdvaODY9UbsTbvOErT0 XJFPnz4T/iHnL98zkq7belpp9R03jp3diREtAkc9dOI6vX33wUuy4ZPcqVD14TR/xUEv5yRAEBAE BAFBQBAQBAQBQUAQEAQEAUHAOQQ8VT6ciy+xBAFBQBAQBDwQADk1feEeL3g0qpmHTV7nLjtAHz9+ ovhxolDBXCm8xEMAVr0tVSgdrdl8krCQx4918tuN52wgVsqFFuHU+bup1/BVvPhH1MjhlCnuZaU1 GNbZbDhe+HChud5b95ynFl3m0EJFRr56/Y7cd57ldrmUmYqcM7NFMxArFifL35NxKV4gNQ3u9j1n NWyiO+EcSMHalbyuAuxqeRJfEBAEBAFBQBAQBAQBQUAQEAQEgW8RAdHs+xavurRZEBAE/IQA/NdB oD135cZDL/9Y1AKyZfd53v5QNZfVKrwcaPoBOQfZsf8iffjwyTgTWmnoQfTWOOHDzoQBP1DLegUp QvjQdPLcbdqjTHpBNu5b8TvBzDdkyBCkTWqRlV4FWG/N2c8Y0ZCK5E3FfgeXrjtK0BAsVzQ9Dexa haPZptHH0C60lewZE1HXn8owFljV9+Dxa1Zmy2lTxuUkGVLHs00qx4KAICAICAKCgCAgCAgCgoAg IAgIAk4i8N1nJfbivn7zgY6fuW/vlIQJAoKAIBAsEMidWfm3e/+I6N6yAGnP+w8fWRPOGT98zxVx GCJECCbodGXgM+/jx89WYfqcM1sQhxeu3qcESrMwUkSLVh/yhGkutPa0IAxxI0Zw7Ifv/sMXdO/h c0qWKAanxaMDZGdkle93ZuZQZQrfgxHChWHzZF2Gefvi5Vu6fP0hRY8anhLEtfgYxHnU4fnLNxQt SnhzdNkXBAQBvyKQqA09evKGLlx57NecJL0gIAgIAoESgVDKJUq2jHHo7oOXdPXGs0BZR6mUICAI CAJ+RSB8WDfKmDaWU9mIGa9TMEkkQUAQEARcRwBabs4QfchZk3HmUsKGCWU+dHkfvgDTemgh6sT2 8uQwxzwfJ4W5Mf61gOBz1DZH4TotSMVMaePrQ2OL+grRZ8AhO4KAICAICAKCgCAgCAgCgoAgIAj4 CgEx4/UVbJJIEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAIfAgI2Rf4ronUSBAQBAQBQUAQ EAQEAUFAEBAEBAFBQBAQBAQBQUAQ8BUCQvb5CjZJJAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKA ICAIBD4EhOwLfNdEaiQICAKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCPgKASH7fAWbJBIEBAFB QBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAIfAkL2Bb5rIjUSBAQBQUAQEAQEAUFAEBAEBAFBQBAQ BAQBQUAQEAR8hYCQfb6CTRIJAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAKBDwEh+wLfNZEa CQKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCvkJAyD5fwSaJBAFBQBAQBAQBQUAQEAQEAUFA EBAEBAFBQBAQBASBwIeAm6MqhQoVgpImjOLotIQLAoKAIBD0EfguFJFbVKJohYN+W6QFgoAgIAh4 g0CEcKHkvc4bfOSUICAIBG0EQniosESKGFrGuqB9KaX2goAg4A0Cbm7O6+t991mJN3nJKUFAEBAE BAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAIIgg41Oz78PETPXz0Oog0Q6opCAgCgoDrCMSKEZ4+ qrHu0ZM3rieWFIKAICAIBBEE4sSKQG/ffqAnz94GkRpLNQUBQUAQcA2BECG+I7zXvb90kN4e2+Ba YoktCAgCgkAQQSBE5FgUvviPTtXWIdlHSt/v0ydR+nMKRYkkCAgCQRYB6DbLWBdkL59UXBAQBJxE QMY6J4GSaIKAIBCkEfj88T19fvsySLdBKi8ICAKCgCMEPr+L6OiUl3DnDX69JJUAQUAQEAQEAUFA EBAEBAFBQBAQBAQBQUAQEAQEAUFAEAhMCAjZF5iuhtRFEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAE BAFBQBDwAwJC9vkBPEkqCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgEJgSE7AtMV0PqIggI AoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAI+AEBIfv8AJ4kFQQEAUFAEBAEBAFBQBAQBAQBQUAQ EAQEAUFAEBAEAhMCQvYFpqshdREEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBPyAgJB9fgBP kgoCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoEJASH7AtPVkLoIAoKAICAICAKCgCAgCAgC goAgIAgIAoKAICAICAJ+QEDIPj+AJ0kFAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBIHAhICQ fYHpagSRurx//56WL19Mf48aSgcP7AsUtV60cC4VKpidChbIRvPmzQ4UdQoOlbhw4Rz9M24U/z95 8jg4NOmbaMOKFUsoa+aU1KXzr1btrVi+GGXPloYuXbxgFW574Ci9bTz/Ona2Xv5V3sgRg6lAviw0 d85MX2f56NFDKlo4F5UqWYA+f/7s63yCWkL/6htXr16h58+fB7XmS32/MAIyNnxhwO0U51/3vJ2s JUgQEASCMQJL9pymVK1G0m9T1gTjVhINXryDsv46jmZuPhIg7QyI/K/ce0zPX78NkPpKpoELATf/ qk6DejXo/v17TmX354BhFCJECOrTuyu9ef3GSBMyZAiKGTMWZc2Wk6rXqEOJEycxzmFn0MC+tHnT Rg5zcwtJefMWpC7depGbm/1mgPSZO2cGvX1j6czJkqeg0WMmOYxvVZgcOERgyxZ3atWiEZ+PHDky nTh19atjev78Wbp44TzX6dzZ0w7rLidcQ6Btm2Z07NhhTgQ6o02bX1zLIJjG/vDhAxNF/86eTpcu nac3b95QkqTJqEyZCtS2XXuKGjXaV235w4cP6N69u3Tr5k2reoBgwbnnL55ZhdseOEpvG8+/jp2t l3+Vd03hcPnyJbpx45qvs3z9+hWdO3eG04Ps++6773ydV1BK6B99Y/CgfgTCNWvWHLR67Zag1Pxv rq59enejdWtX0i+/dabatet98fbL2PDFIfdSoH/c814ydRBQv151enD/voOznsGYQ8ycvZDnDHP+ nUEzZ0wxTuJc5ChR1PiSner+0IiSJElqnMOOjo94BQsVoW7d+1idtz3AWP/br23oinpmhArlRsNG jKPUqdPaRpPjII7A1I2HaPqmwxRGzS+71SxCxTIl89IixJm4bj+1KJOLmpbM7uW8BFgj8ODZS7r7 5AXdeOD9O6d1qqB3BOLs0p1HdP3+0wCpvH/n33/BFiYos6eIT1v+bBogdZZMAw8C9lkyX9Rv06b1 Tms3XLl8kU6fOkn79u62W9KGDWtZa2zw0FFUs+YPHOft2zc0+u9h9OnTJyPNoUMHKGmy5FS/QRMj TO/cvHmdOnVoSx8/ftRBTFp07tyD0xiBwWQHk9aundsTXkowgfqjZ78Aa9mL556D9htFpH7+7HlN AqzQr5jxuLEjFcm8gdxChaI//uhLGTJmNmrzJXHXhfpnmT7lZSaF0LdELAh0bN+WFiz4lw/Ch49A YcOGZbJ53IWRFDJkSOrarbdAJQgIAg4QePXKMpa8exe0vyq7u6+nGdMmUanS5ahBw+D5wnzp4nm6 cuWyn4hxB91AggUBLwgcOLCXnj11bsKs30lARuuPkuYMt23dRBMnjKVx/0ylsuUqGqfM8Y8cOUjF ipeifPkKGudtd0AkLl/2nxF87OhhIfsMNILPztpD5+nIpdvcoOZjltKRkT9RxHChrRp4URE6p67f J2xFBIGgisDLN++56u/efwiqTZB6u4BACBfiehs1S5bslCBBIuPfHBlaLuZz8RMkpE8mggjn8aA1 fykDudepQzu6fOkiZ/Xhw0crok/nP3/eLL1rtYVWn5no0yc/fvIk/3RYcNhCg8fdfR3t2rWd1q5b GaBNKlGiDNWp04AqVKxCAweNUF86rR+GAVr4V8h8q9Jk3LlzG2ELDUKzfEncdbn+WaZPeXXq1J3K lK1ATZq2pFq1LMS7rse3uj169JBB9A1Q/f/8xdt07sJtWrNuK98T0aPH+FahkXYLAk4h0KFjN/p3 7mLWzHEqQSCNdPLEMdq4cS3t3bsrkNZQqiUIBC0Edu0+SocOnzX+W7Rsyw0oUKCwEYbzh4+ep0SJ rK1/fmr7G505e4PPTZ02V1kHJVVa96/p119bkXduSGbNnOoQJGhtz5g+yeF5ORE8Ebj39CWNWC7j evC8utKqbjUL0+KudWlB5zoCxjeAgL9p9tma4mRIl4QeP7Z8+Rgx8h8mDMx4bljvab9fsGARmjjZ Qtpt3LiOGjesxcTeu3fvaMmShdS+QxdzUt4PFy48a7EdPLifVeuh4acFD+eF8+fwIbRs7JF+Oq4z W5gwnFWmoTDTypAhM8F01Z6AoDx/7iw9eHBfaQ+mUC8iiVnLxzYufD29V22LFTsOmzPjZeTw4YMU MWJESps2vUPyDNqKMD37qEwIkyVPaZg5v3//jl69emkU80lpM758aTkOHz481xtxHj54QBEiRqJI kSIR8jp9+hQlU7ilSJHKSIsvqmjrk6dPCGlBwMaKFds4jx2YR/TuM4BevnpBZmLDtgzEhUbAtauX KY1qV5w4cRFkV3CNLiuNz+vXr1LSJMnZJBImFo4EfevE8aMUN158SpkytaNo3oY701bgCJNNLa9f v2ZsYcqB/uAT7jodtk8VpqdOnSC3kG6UJk06xtF8Xu/jazVMku/cvUPRokVXfS6j0hwLx6edudaI iHsA/vZu37pJ75SPxfgKp1TqWoZS2olanMmrYqXvmYiHVmOMGDF1UqttQPd7q8ICwcGRI4e4FslT pKRGjZoZNcIHj0mTZxvHjnZwfe8rM6X48RNYmb+jn928eYPvN9x73glMdJ8rDdtYseI4HI+8S+8f 56BlfePGdTaj8qm+KA998vbtmxQmTFiHfcmVeqHf3blzhxImTGR3nDXnBT+jd+7cUnET+8ncFq4q woQO4/DeNZep9zHOQEM2fvyEfipb5+fs9u6d2zze47niG8HYh2df3LhxKbRqs7OC5xmuS0jllgMf +eyN43gGFStWyscs8ZyKqJ5ZUaJEtYqLifvLly84f6sTThyg3966dYP7TNy48b29JsAwjNLa/dpm +U40K1BFcXVs8G1fc9RoGRscIUOE5/4d1a/9Mhbi+uLejBI5qktjoeNaeZ4xv1MiNHLkKHwS7/x4 3/NOwoYLx/XBOyo0+ZIp1z3FiuRmTUF8rK1StYZVcnzIXLd2Fa1etYzwXm5bNiJv3ryB32NBHMaM GZNgUeSKuDLeIC6ekfbGPHtlutLP/fv5a68+wSUsfaJYrL03ZtUealpKKbJEtz/nc9TeN0pb6s7j 55QoZlQKGSLouvf4pN7ZYJYaK0oECh/Gc+7gqN0fPn6iayp+tIhh1b9lzuIorm/D3ynFH42tM55T bqvrEFbN15ypjyvX7b1q6+1Hz/gaO1MPtDeg87fF9MXrd3T36QuKGzUiRQgb2up0pHBhqGSWFFZh 9g5cwfvlm3f04NkrihstEoUJFdJedhzmCg4OM5ETLiHgmE1xKRv/i1yyZBlKlSqNkeGN69eMffMO HtJaFi2aq3d5u3v3Drp27QrvFy5SnCejVhGcPDhz5hSVK1OEMmVIRjWqlafq35dT+0mpxx+/W+Vw V5EyIChTJo9LpUsVpB/qfk/582am1CnjE0xAzWQjCKqM6ZNStqyplXnBGOrX9w9Kmzoh512mVCE+ ZyZCURD8hKDsXDnSU60aFalunaqUN3dG+r5qGa5HhfLFuUxdKRBsqVLE5X/9xbJ5swbsmD9XjrS8 gEW+PJmpYf0aqn2FORkIjJrVK1D6dImpSuVS1KhBTT7OliUVtWnd1Mqs4tTJ45Q2TULKkS0tlSpR QBdL5jKg8YAFM4BDndpVCPk0blSbXrx4YcTHDl5AJk0cS2lSJaDCBXNQvbrVqED+rJRO5Q+/KrYC h+4N69ckkMm1a1WmIoVy8svcWXWtnBVn27p+3WrGEP1JS4f2P3FYzuzpyBnckQ7XA5imS5OIryP2 gR9wwYudWbAYBrBCP8L1qVShuOoTyfiFFPF8KhN9Df6wsmRKwdigDORTskR+dS2y0Cr1UqvFp7wQ r0XzBtxXcQ+YzVhwLqD7PcoIjBLKzfLSA61I77QFdN1z58xAyZLEYh96TRrXUf0gMd+/mTImI31/ Llw4h3JmT0v58mRS90J8vvdA6JkFk5E/unfia4vFNwoVyK7GjgRUvmxR/lhgjhuQ+9BsRB9OlSIe twNjTd7cmWj6tIl8P9uWDWK+Xdvm3C7cN+hLWEhn5cqltlGtjpctXUQpksWhhPGjEMYcLdCiKlO6 EJcPvFCP2jUrEXx72Qr6KMZLjMV5cmXk8W3ggD704aMngW+bxt4xzLhQd9xX6dIm4ufCKeWKwpFg Qv1n/56Ea497HWM36gB/VPigoWXE8EEUP24k+rGptdYsxkWkTRAvMtk+D/AxJkmi6JQ+bWKdDc2f /y/nAz94uE+x+AieMehLGEu0b0EjgTc7a1av4OuTOqXl+qZJlZCvn/545yjp2jUrqWqV0nw9MO4D b7QZeAMPsyxYMIfb1qplYyPY3AYsuIT2AzeMm3jugWjFPdG0SV0e/3EOzwF9DxkZOdgByY77B89p 5I3nF8Za9DOzgKxEPPRTYAicce0njB9tRDt+/IhqWzwaOuRPDluqPkriGP8D/uptxPvWdlwdG3zb 12RscH5sQF/H8wcfoVs2b6ieGYn43sSzA36wQTC5IrCayaEWecL9jbGweNE8tGfPTiML3BsYszH2 4JllK3/92Yvv/a5dfrM95e/H+KiKD6aQ27dveckfFkX44A3FggVqDLUn06datPrgLug7bz5A26Z1 ZrwBlhj/8Q48b+4sypkjHY95GHOw+BMsSuyJK89A3z5/7ZX7rYQ1LZmD4kePRK/ffaD+87c63exd Z65Roa6TKX7jwZT557FqO4gq9/+X4G9Ny6DF2ylynf5Ub9hCHcRb9cinDG1HU5S6f9Kag+etzp2+ cZ9i1PuLkjQbZhVuPvDPfA8rU+bSvWZwOzL9PIbiqfZgO3H9AfWOZy7VUufYDQay+XO238apRSrG UtLmwwl5OBKQQmV7z2Qc6g+3fv7apgEmyP++8v3XaOR/lPjHoZSx3RhK2HQI9Zu/RVkJ2lRIZYDr 9vv0dZS8xXBK03oU45b+p79pzKq9ttnzsTPXTSe8o/wPfv+Xen9RmKAeSZoNpb7zNqt3SsfjaEDn r+umt9tOXqG8nSZQ/CaDKZtaNCRBkyFUfeA8evX2vY5Cc7Ye477WZNRiIww7vsF7xf6zlP23f1R5 Q7ifJFLXpvlY9QHlxWurvF3BwSqhHPgZgRB+ziEAMoDmhxZ8obMn339f0wj+b9F8Yx87C+Z5PrSr Vatldc7ZAxBsIPrw8moWaIhMmfyPQX5BQwBfDtevX2NF6iENHvb9+/Ug80sNtKy09O3TnVc5xYuG FpBZLdQLmV7sBC9iIMnMhJOOu3fPLsKXPbN2mT6nt/oc6g159uwZ/d6xnaGtBvNoSD9VF7xY2L74 4RgTmf79e3A8/Lx56+lnCQsTaDGXUaliSWPBDH0e5JmeHOkwEKe9enbx0gbg0FH5XMQk2ywgIWE2 ZRZMZIG/s+JsWzV29vKFhp935/U5TOxLl8xP+/ft8ZIN/MlUqVRavWha8MQkHeQvrpFZkBf82EB0 vubzeh/n8BKICT9e7G0FX+Lb/dTcIEV8ygvp35qu9WvTtQ7ofm9b98B0nCNnbtYGAikAwtknIgXj AO5TkHLQIoCmLLQknz55Qp1//4VaKCL+l3YtWYsKmr0Q3IstWzS0avbwYQNp6pTxqg+8oqLFSlK5 8pV4IgOfQ/jY8CVWNgVZXFnd2+jPESJEIJhWxYuXgD+udOvawWqsQ+XR9rKlC9N/i+apMecj5cyV h1KkTMWrAWORH+27zaqh6gBaGD+3a8Hpa9epT+kzZOIoWBUSH16OHztCWbJkoxo167LG8PbtWxQB WJAJaJ0X8ADmyOujIvfSpctAr5S2GlYRB5nkrIDkwarG6PPQTkZ78VzAWGRPMA5+X6UMjR0zgsn8 jJmyUI4cuRTh9Z42KR9vJYvnM9xTZPTw/7nJfQO3Ved3WmkA37hxjcnTtcoflVlA/iEvtEcLcIZM njSOQKCB+MR5uFjAByZ8yEEf9ElmzJjMxCNWa4YmS+48+Vj7FNcP7XEkmFCCsIQfXnysq1ixKrcZ Ywzwht8ssyAchCauhxbdBnwEw7W/e/c2a7pDg3rHjq38kadShRIEUjG2ug64FigX9xDO+yT9+/bg +wdaqHV/aMh1hEaZmXSGdm2VyqU5Hp59lStXo5Ily7JWKBaqwPMcAi0jaOaHV/cABO8suK/xr8kF PvEN/bg6Nvi2r8nY4PrYoJ8/GD+hVQutPoyPo0YO4fdZZ7sp3r3a/9qa02bPnpM1fvFRvG7tqobP PFiDRFRlIP/ly60nkrinFqqxF/c+NOEDWvDxU79fx40bz0txGFuwgAdk9uxpXs5fu3aV4I88dOjQ VKduAy/nvQtwZrzBOwRk2NC/qP1vbfidALhiPMF7BT5+a0sCXZYrz0DfPn91Wd/qFlpJWKADMnfb MTp+1frDqz1csOpshb6z6ejlO5QteTyqUygTxYkaibacuKwIwCkEkgiSOYnFwmnDkYtW5MuJa3fp +oOnfG+sOmDtLgjkHzTJMiSOba9of8132d4zVLLHNNpz9jprgxXOkFRpNkaiq/eeUMep6v6faj3X ev3uPWusfT9gLsfRGnTQCLMnCK+nCD4QP4jbuXohe9GMMJ1/0W5TCRhDIy1RzCi8iuyQJTto/Jr9 RlzsgHQr3Ws6jV+7n4nAavnSU5lsqejWo+fUbdYG6jnH3Sq+s9cNibBybTFVD/djl+iDGstwPUBc Dl26k+Zt9/wgbS4goPM3l4X9a/efUO3B81kztUjGpNSkRHbKmCQ2bThyQZHOT4zoL9++4772wsN3 nz7hKt6TNxxk4vrC7YeUJFZUyqc+AIUMGYLmKzxGmszgXcFB10W2/odAoCP74HMOXwa1pDVNaHQY toWLFDNMa64qM1FNpphf3vFCXq58ZXMyp/d79+piTI7wAj9o8CgaMWo8T2CQSegwFpXYv/7sbWj3 wARg2PCxNGPmAoJfOy1z58x0SAjAzLha9drsA0/Hx4uZ1qK6qJxjazIhSZJkdPzkZbp4+S5Nmz6P VyyGeVVH5f8Ik14tIEh/a9+Z/7E6qK1gQoMJCciCLFmz8elwagKEyVNH5aNtxapNtHX7AdK+UhBh 1UpPjTDb/Owd4yUGJhTwoZI0aTIjyvz5nmaOaJf2hQJTs7nzlrJPltamFV/xEqRJRBBZ5i/IpUqV pQ4du/KLq1GAEzvOtjW/IjKAI0zRtECjFGE9e/3pFO4D/upjaDNWrlJdrVx8hWbP+Y8JD+SJCf3s WZaXzNWrluti2Ez6xq2nBP81v/zaibJnz8XnfLrW6PN4gS2tHMbDNH7Ltv20YNFKJiiQAa7LJuXb EeJTXhzJwU9A93sHxQaKYGgLtG79C9cFpBPIm7Y/NfPiz9G2siAvMIbsO3CSdu46whoFiAOyASTf 3v0naNOWvTR23BROCjJf+yxFQC5FlKHfHT1+kebMXUJTps6hzVv3sRkvPg7sUIRXQArGpV49uvD9 CHOog4fP0ML/VtGBQ6f5PkTZ6MunT580qjFOaaqC8MbYstF9Fy1fsZG27zikfLUtouyKADObletE mNw0+7E+lwNSZuiwMXwK5ffp1Y0/qnTt1pvHqb9HT1QY7OVFc2AuC2JJy6yZU5hsw3i4fuNOct+8 h7EDUeqsYLKk8/yhXiM6dOQct3fylH95QmYvn3//nc6mXphUL1q8mtZv2GGMqSDQMAke8FdvTlqo cFEmjtC2HTs8tTi2qg8BWjapxYHMAt+sELN2uz4PTZrMmbPRgYOnub0rVm1ksg79A0SzdwI3A4MG 9OUorVr/TLv3HqOly9bT/oOnCG1PlDiJw+Qg0KD5snrtVu7DGHvwHGnz06+cZsniBQ7T2p6AtizI 0YPKLxfuhz//slxTEKzoS337DaKDh87Qrj1HKVPmrJwcz1ifRGs14/mM5zTqiHuxffsuRtLZs6Yy kYzrtEn1l/ET1SqfasXPMWMnc5zJk/4hmPbCdQTu4TZtLO3Ds3SnGqvxD+y+NXF1bPBtX5OxQX0I 8eXYgI8VeI/FGLZn33Emu9FPndWM1X0aHwAwNqxcvZnzgXsCXP8J4y3jNIiqKupdB7L4P+sP8XiH Y9N4FaeC+iAQ0IIPBzD3xzsRxkV7UlP5InZzc+MPUJh/mGXm9Mn8AbxsuUouWwg5M97osvCBFx/C NK54FwAhiw/BZo1iV5+Bvnn+6jp9y1soi9UvmoXJHGiO/TF7o7dwwCyxuyKSPioCqFedYuTerwlN /KkK7R3akjInjUNPX76hYUt2ch5F1Qq/MIlFGmhgadl8/LLeVcTMRWMfO+sPX+DjCjlTW4WbD/wj X9Sp68z1TCzWyJ+BTo/9mVb2qE+n1LZrjcJc3DS1GvHJa/fMRfP+w+evaGDD0nR1cge6OOE3yqFW ebUV4Npq3HLapMgyEH0r/qhPmZLEsY1m9/jmw2c0sll5OvvPL3R8dFuqmicdx5u68aBV/Knuh5hw TRI7Ku0e3IKm/1KNFnauTZPbWsabf9bsI5j2Qly5bog/ZcMhuqlMd6NECEs7Bjbn/C+otpZwYA4b 0PmjTray8egleqk0+EpkTs74jmpenuu6oW9jShkvum10h8fO4P1E9WtoV0LaVcxLx/7+idb1bkSn xrSjRsWzUWJF/kFcxYETyY+/IhDCX3PzZWZH1cpW+Dpf74dqVEdpyuCrHySO+hJX1mSua87eTZnS YYEILdqUF1+9tMYSfHZ450sKD1jbf5QNQmTDBk/tsX5/DuGV9mrXrkfL1GQVkzf4UINWinkSM0pN PDE5xcp802bMYx9NqB++LmI1V1sB0Td6zCSeSAwfOY4JGh0Hvrsgui3Yf/zkERN/IHQw0UNavMRU VVqO9es3QRSWmDFjUaff/+B/EG62gvNr129jzOpyAgAAQABJREFUsmDJUsvEccLEmWpSd5r9I2Ki Be2M7n/0MfwtQYMCk1RnBXmsXbdd5dGXJkzynIhBmwmELAQvgtrEuX6DplSkaAn2yYKJvPYzhUnq dfV1FQKTHy2Y5E1VhCccva9Y5U7wn+asONvW2EpzAzgmN2GIl1iEYeVFn3DHi5ombfEyOWjwSPYJ U7x4aapbt6FR3QMH9vG+Wcvp1MkTjFNSZWLSuUtPJmYRyacys2XLQafUF7PpakIL7Rp8ZYdPzFq1 fzDK0+aOPuVlJLDZ+RL93qbIQHeI1a4HDhrJpDnIc/RlaPhCU9XWZFFXHuMIxhDcsyCgatWuz6cw zoGQxaQJUklpE+EehVy5eom3+AHBBiLBPKahj+bJk5/jgDgOSFm/fg1rt0WIEJEGqbabF+Zp36Er JU2ajCdGK9UYrGXFMotmR8tW7azuUbhrAPFnS/bBV2V99RzABE0TfcALsnXLJi4fkyB8RNCCsbhC BcuzYI/J5B7+XiFN1eIyIFMhUaNGo+lqbIb2hDOybetm1h5DGb37DORrh3TlK1Sm8ROm281i+tSJ HP5js9bGtUFAkiRJ1ceUbnxuzZoVTGYi3yJFi3OYu0ljGZqKWjA5hlsECAjNgx7jRZmyFXUUY4vx fsHCFYZvq0yZslKhwsX4vL7vjcg2O9u2beYPV/ho1blLD+MsMAPhavZPaZz02MEEH0RC1qzZrU5V rlKNj13pm2jDv3OXGvdAPfVsA06Q3zv3oGbN2/BzCc9B9BHI1Sue9wkH2PnR/ejESQuWiIKPXunS ZzRiz/EgDfGBBfelFlxvlIcx/eBBa00CHedb3ro6Nvimr8nYYOlhvh0b+nu8x8KHJv5beXxUhfaa swKT19n/LmYNVqTBR5yf2loIb/PHBP1sO7B/r9L69sxfvw+VKVOeNQydLdfZePj4BncAILlgEQNL CUjjJi2snj/m/NCG4iVKc5CZ+ASxNneu5d21UeNm5iRO7Tsz3uiMgOscNebheQ6BgkEbD1xhEaPF 1Wegq89fXY5siUKo947+9UowFCDiNh61JuDMGIG8uqHIKGic/VbF8j6G8+FCu1Hl3BZSasdpy32A sOKKiIGs8yDxsG8m+0BGHbtyF8FMFO47b5kPekf2+Ue+0CBEO+DfbcSP5Si0m6fftS7VC1OyONFY W26p0rCzFWiQtSmfm4NjRg6vfJOHsI1CnWeso0W7ThpEH4hQZ2VwkzLUtGR2vi64Nj9XystJrypN NrPM2nSEDzt9X5DiKd9xWirlTssk69v3H2n/+Zsc7Mp1Q4JFu05wupZlchL8OkJAWs7rWItypkzA x+afgM7fXJbe93hdpmtKSxQks5Y8yl2Y+XrqcEdbZ/BGn32sTHVjRApPPWoXNbICJqNbVKBmpXJw mKs4GBnJjr8h4OZvOfkhI3ytNz9kkRUmwyCzMNFwJJj8/jt7Op+GuQBeZsyr80JjzpHALAl+pGyl T9+BPDnShCPO68k09vGSBLMsyBW1oISOh8lO8eKlOBw/IHeKFS9p1O+aMquyFZiDgXDRgnzx0gzR vsCgRYTJFzQ2MNGD7z7EwwQW2nwox1X59bffvaxiBpM8TCpR/hU1cYIZKCbcun0ow2Ju6jl4eldu /YY/Gi9z6dNnYty0ifDTp4/ZBNCstbRi+RLld+yAkaXZfPTatSv8ogYzVC2Y3IMsheBlDcej/x6m T3u79e+2OioMvvp0m0EI4eVTyz3lS0zLddU+SN78BQ0T5QUL/mX/elWqVmftEVfIzEiRIrOW1959 u+mBIksfPXzIi65wIerHch31kevbL9HvXa/Vl0/RsNGP9H21WsrUfDL75gQhDhN/aK1A48xWQMSa BQtLQLDV5B6OMUmIpxbvwD2Ie95Wzp8/yz7s4I8OxPl1D7+m2lzJNr5/HcO0E5Ird14vTtlRZ5D1 V5QmBPo9BH1f7xcoWJjDfPqBhiQEHzNAMOkJE8Kg5QzBJKx7tw68r3903cwTS00wwW+rWaANnTp1 Oqccres88PFCf4DQeWXMlFnvGltLmy3EUwll/mkrWqsQHzngjxbEVmmlfQ3TVPeN6zk67s89u3fy s6+EIkXxrHJX5r8ZlMnv1m2b2AUDTHRBHtpKiuSpvFwb3c/s+c8yp9fjcc6cuR1qLZrj29uHJiS0 r2/fusX9V/udfKtMRpwVboNpESwQwlgkBH3J9h5K4EGQP33m9T6xLa+8ekZMmzqBunb+jTaphcCw wjj6rLmPaQzWKjL22LHDVllgUSblvcHwB2x18hs/0Pefs2ODxtmVviZjg+XZ7duxIZvNBw49LmC8 efHihZfxzV6XTpEitZd4+fIX4qj4MI1nHxbTwXgJdw0gaPFBHOQ5xryVK5Zy3Oo16tjL3s9hIMbM 5BjMb/FxoNPv3b3Nu169xpxuzerlxkIdy9SHKjzT8eEbvv1cFWfGG52nPVzz5i3ApzGmYj6AuZAr z0DfPH91fWRrQQAaW9CQgtkmtPs0SWeLz4XbjzjordKMg6mrWfQ5swll+RypaaXyc6bJPhBQuxQZ CJKkdLaUbAK5XpldggzbpAgVmKbCZDRpbMfzYZTp13xhignJq/zkQnvNLCCRgAXMNi/dfWw+xfuN S2TzEmYOWHfY8v6GsOXd63HbzOd92s9lQ6aBWIUAOyxEETGcxdruwh3LtQC+R2z8BmoCEibJEH1t nL1uWHwEUiyThazlA/UDs++0CWPSgQs3dRBvAzp/q8I8DrDoBsja87ceUo72/1DLsrlYyy62WmTF FXEG74seWOdW/l+xCIojcRUHR/lIuO8RcHx1fJ+nyynxso2v5jFixOQJDF5KYMrpHdGHQvKrlwx8 CcOEAhpjkyb9QzB9gyCvIjaTPD7h8YNVBu0JJsxakwznkT/IJHty44Yn+QRCzjxpQHysqKXlmVo5 0yfR2gvmeAiDBgn8+GkCED6Y4N8Dk8A5yvTVVjvGnN7ePlbktZVVq5bRT2ohjoAgDEDKQRPTlmQy k3fYNx+b6wdNIghWkNOCL5++lYBsq7lOtu3RfdMcB/vhPdrXvHlrOnr4IEE7FQKyFYuUwCclTM5K lfJKHnBE0w+07qAZZTZ3Np32l90v0e/9paJfIBOYakLLDCaMLZUPOvhhhD84mAZCK9M78Y6od/Mg ss3pMfFopHzzQVvia4gmvhzdeyCZIZjwQaCVq+95jI/OCO519Htoe2OMNpOgt9TK0hDkO0ORivYk dmzLuPDmzWt+JiCOs2Xby087dXc2j/vqWaTHUHs4mf25YcVzCO5rfETCeAH/VyB5UX9oP+Kchexb Rz//0lGRVBZC0J4Jr736IwwfoiDmDzccYPOjr2/06DFtzjh3iLGqZ4/OVtrozqX0OVZIBx+1Qpo0 D3zKpWev/owzzLuhuY9/EKgwm0+dOi33W/Q9CM45Enu+vxzF/VbCdd+x1+eBge3YoOO70tdkbPDf sSGsx7iA6+PT2IA4jgTPQC24f/TK2bVq1WN3BdB6B9m3U/nVxJiOsVR/9NDp/GsLH7L4uIM6JU2a nH29am0578qAZh80efHBGwt1QINea2jDisM34tN441OeZlxBpGI+5Moz0DfPX5/q9C2e71e/JG3u PIl9oMF/n+K8vAi04SD3nr5kMsxLBBUQR62IqqVs9lSsoXZDaV+dun6fF5/AohLwLYdz8HcG092O VQs4ZcLrX/nCZyDEETEUOXwYPg/zTVcFmocg5mAWDSIzSzL782pn8zWTS5/JYg2IesGHHmTtIU9y 0TZPrfHnynXD9dHthiabMxLQ+durA0jQJV3rUtsJK+mcIvxgZjtYLQrzW+X8hh9Ke+l8CrOHN1Zq hviEhys4+FQPOe87BAIF2QetLJAZrgomSBUrfc/OtJG2v4fKPvbhWNu7yTRMoDB5thWY/kITSgtM V/GFDGXZSgwPUzuEg4izjffksefXD0eEoW2e9o4LFiqqfKOcYAfCs9VERWvL7Ny5jYkFbcpkL60z YdAeatOqCZuVIT4ckhctVkL5AovCpCK00gJCzBN5+E2B+bOtRFF1wIIIEP0SiX28yPhGvmRbze3D hHv02EleqgyCWJsUwiwSJs9NlV+baVMm0Gr1lRnYQ5Opy++/UinlI80nGT50gEH0ofx69RsrAj0Z bdm80YuzbJ/ycnT+S/V7R+UHxnD0TWjzYZVcyNmzp30k+1xtB1bFBtEHjQn4W4T5IbTNsDCGWZvB 1Xydja8Jr6dqrLMnzzy0q/TkKorSzkb/xkTy8aNHVr4v7aVH2Lh/pvLCPHfUyokYk+bOX2Zo8Or7 CWapM2bOt5sFtPYguN+g1QHizZ52pN3EdgIxBkKc0RxDvGjRoxtthgazMt5FsCFm7bo4ceJwOD5M wV8TFrdwVxpnGke0E5pn+Fhy6OB+fl7BWTzEFbKPEzjxo8fXR489n39OJOMo8JnbSS38hGsNTRq4 O8ACFiAwoY0eGAR9ol//wdS2XXvWuJ80aSybRzdqUEv52jvChJTuM/8tWeNFixBtwHuA7mOBoU2B pQ6ujw1Ruequ9DUZG77e2OBdPzO7d9H9APFr1KzDq/2eV5ro+EC9TC1ABsHY4OoHak7oxA+sI9r9 bK317UQyHmNrqXdQWIdgoY48SqsOC1/hYztIS9+IT+ONvTmFuRzzcwvPCIgrz0DfPH/N5cu+BYGM SqPuhyKZafaWo/TXwm1UIVcaL9DEUmarkGLKH9+8Tp4WPOaI0P7SAjPXPGkS0u4z15V233l69uot n4LfPWjPhVTPGZiaYjVTLKwAqZDTa7l8wvTj13w1afPkpVJhtyNPPeoZN5oncWknmt2gwljdPnlc GvjfdvpzwVbKlSoBFc2YzG5c3waCjISpKhYBWd2rgfIbmMBLVjAB1tfClesGskvn/fSVc2RnQOfv pXEeAdDM3D+sNZuej165hxeJAe7wY1ivSBZHyVwOj+qh/fnouf3+ojN0BQedRrb+i4BXBst/8w/w 3KpWrWG3jGo+mAnABAq+0Gz/U6RIRYlN5lFQocfqh1pAvGBFTJAwZjMqxNusCBUtnG6DZzo49PaL RFZmTW2UtuP2nYcJhKQWvXiH+cXhzu3bhvmojufdFuazehEMmA3DIXnTH1uxiSI08gJKkqgvr1pQ PnzM2f5jwqvbFi9efB2d/feBXIWAGFj83wLjnHc7vmnrdyaiV/tS1GXouuHYFvckSTzbBw0n+A2z bR+IbphzmwVm43AMv3L1JiP49u2bhs9E78rcu8+i2YqEfw0czv0bq8jp1UyNDD12vMvLNq4+/pL9 XpcZFLbhw0cwtHsjmcwQ/aPuGHd2KXIfMnrMZPbflzp1WvbzZ9Yg9o+yHOUB0hgC83DUxyy4F7cr n28QjKEQTJS0ps8+lcYZia0IsHHjp/HkCyusDhnc30iWNKmlfIx5IUO6cf4ow/yv+zNIxrhxLeMF nMKbBWP3hYvnzEEO9+PFt+Rx+NB+L74Yz5w57SUdiCDt6w3+/mwFK4lCoMluvu/1QkpY7VKng4YK CDh87IAJ3JjRw/kjB9IFxEqWWJQCckRpFzvyO8kR7Pxs3ryBiT4sTIUFNFDnxGpBj3ge18BOkq8W hA9v7Tt0oRUr3fl+xQJf0FZG39GLkJxVGpbmfqX3bYk+9DPIcyfMiL9ag79Awa6ODb7pazI2fL2x QXchaGRC69gsemEoEFG4T7RgnMKHasi8ebP54yX2fXo3R5yvIViVF/czTNLbtmnKVcD8Ai6F/CKO xhtznnBlhDmDWeDXEoJnKIhDiCvPQFwLV5+/XIj8eEHgj1pF2d8bNN9mbTrs5Xxy5csOcubGA/ZV By0223+QTGbR5N26Qxd4wQqcK545GYFAgVkkFvsYrlZ5hbZgguiReYVfc3pH+37JN6kigyAgIbGo glmgkaf9Crqy0IM5jy5qkQ8Qosir6d9LeIVc83m/7gNjEFoQaEzaXgMca6IPcVy5brh88dSqxBCs JGwWmFnDbNZWAjp/2/LMx6hvqawpaPkf9ahGgQx8atvJq+Yoft7XWB+8eIsJVkcZuoKDozwk3G8I hPBb8q+fGpMKOGw3Cx6I8BniW8HDWa/yhzzgK2bQwL40YvggdsL/R/dOhokZfNRoaafiYfWvBQvm UM3qFdj3B87hq5xvVx7brRzO58qRnsb/8zev9gl/ejBZ1qI1BqFFoQUq/61bNqY+vbsZE3B9zt42 bDjPFzRoDcIEFJpJjRvW9vJiZy+9b8NKeDhFRvplSxdxfaEhAl9JcOT868+t6Od2LYzsS5cub+xj ZcaGDWoSVustV7aIQxNgI4HHjm/aqjWVkMUURfSCgOiutKkg3uEOghYaOxBovMBnH0x04Wwfq77h K3LVKqUNs8w6tatQ82b1CYQAVs6DvxstMOnQPsO8KzOc6WUb2l7wYbZw4RxjRVGdn956l5eOY7vF S31A93vbMgPTMRYS6ta1Pa+krOsF8qunWpwD1xnaQY5W/tPxXd2CTNPk9uVLli+9yAMam+vXrXI1 O1/Fhw9STDow/vTt3Z3bqjMaPmwAXb58iUmsGqYPLcWKleIo48aOIvMCESCHChbIZrgm0PlgC1Ms LIIDwT2yYcNa3sfq2DDlg6kV7ntgbRaQgNoXGMLh7w6CexZpIJiotm3zo3HPcaA3P0WKlGAtFGiv jP57uBETRORPrZsYx+adcmrlRghWUYRZrhaMrUOH/MWHMPvWRBECNNkHU3+MbSBDNKmuV3b/Rzmd 57hlPcdBDvCnH3xYgTY83GIMHzbQyBUaJh07tKU/+/c0wmx3tPb35SueTswxee3bt7tt1K9yDC3+ mTOmWJHU8N2qr4Fe9EY/Y8aMHkFXVH82C/oOzPTNos2yjynNJW2ybj6PPoAxXi9MYD4XnPZdHRt8 29dkbPg6Y4PuqxjPGtSrYWhL4yMkFsOAVFJWNrYCbTkIPpDjuYGFKPzybm6bv38eY94A10AQPMsg DZRfXt+Is+ONzhvv22ZcoRGNd34IrJe0uPoMdPb5C7KxsXIR0ki9U7v6oUfXLThv4yuSp10Fy1wP K53aSqEMSdlPGhbWGLBwq3o3sY4BElD7N9Nn4F8PAuLosPItB+JE++QrndViIfK30sqClPdmFV6O YPrxS74lFTkEDTaYq8JHobkdAxdto0vKRxtWEq5TKJOpROd3QcZNafc9Ac8Hz15Ro5H/8cq/zufg c8xyygwaMnLZLlVfWFd4CkxxNx/3fK67et3KKjNryIS1+40VfZFnszFLae+5G54FeewFdP5eClQB K5SvwqOX71idiqh8+EEiqGvnnwLiFn4Q7z55QYOU5qAWLAzSbuIq6jXH8r7kKg46H9n6HwJu/pfV 18kJL+sw2R03bqRRATjN96t0796H6tapyhNK+CEZNXKI3Sx79vqLqlUtw5pxMOXt3aurVTxoC/Ts /aexWIXVSScOXioH/Hjw9+3Tnf/NSUAAlfWYWCZIkJBJT+0LR/t9AxmIF2vvJGPGLPwFEKaxIC2q VS3rXXR/OwfNldJqVTaQUpi4Y2KEf7PAEb0WTN6heYgXI8gm5bQe/xBMUvWEkwMc/PimrXmVSQf8 sEGgRQjSF6TDnwOGKdNE73GH2VjF8sVZMwdfjFsq34u2op3Y42UYk8lVK5fZRiE4tNYTU+/KLKYW iQERAUGddb29ZOgR4F1e3vWbgO73juobGMKfKOIAq2uDPEiePKUyd4/MpvXaRLNvv8EGMetf9YUm WO7c+Qjkf6eOPzNp/FqtFgCtCr2itX+V5SgfaGq0at2Ox8Jp0yYyCZcuXXq6qMhH7aC/g1ptVmu2 IZ9f23empYrIB3ldolhepZGWjT+C6HvYUVkwxQLx7+6ufNW1a07r1u9gTTH4fvrrz15MXmNRi8wq PwhWYUSe8PXao2d/Dmv6Y0uaN3cW37OFC+VgbTgQgrjfQJy/eGHxz8aRHfyA6Me9h3yGDvmTVixf zJoeMKd2pL35m2oznNLD9165MkUoa7bsFEppSB86dID92SVIkIiwSJJZsAAPtL8vXLBoHBYu4jlm l1Tj3oC/ehvRNTFoBPjTDia70AKePWsaX+OVK5dS3Djx+OMLyE6sLuxIYG4MzUP0g+JF87CJOcyS 8ewKDAKiuUvnX2nwoH7KRUVJRUqHY419EOgY37V53C+/dOIxE/21ZIn8lDdfAaUhGo/9xe5TGqLo Mxcu3TVWxM6S1dL/QCbnyZVR+feNx6ufY7VuyHj1PMM5kIKVlfliUJa/1TvQJPUx0yzQdNy99zhr qboyNvilr8nY8OXHBvM1h/uYzJlSqLE3K50+dZJ9rGI8bdXmZ3M03i9XvhK/+2pT38Cq1acrDpc4 aB8EC+HZLgik4/m0dXa8MeeDD8BZlBuQTJmzqAW4TvCzAu/4rU24QlPPlWegs89faJOvX7+Gq3Pu 7Bn2ZWqum+yrd5nK+Wi60uoDsWEr8HGH1V97z91EQ5U23soDZylrMstq7iBeTt+4Tz9XzEv9lf8/ LdCOSx0/BvtVQ1hx06IPZRRh1WeeRbMT57xbhRfnzeKXfKFB2E7Vc8iSHTRx3QHC6rxYGAQLLOjF O7oq7Tzt885crrP7MDWe9ks1qtB3FhNkIBUHNSrtbHIf4+E6zFM+D+EnrkDniZQ/XRImF289ek67 z17jxTzuzOjMpKWr162FWoV31pYjrJGYs/14yp4iHmtzok9ggRAsFGKWgM7fXJben6H6KPw95kub SK0YHJuuqMVUsMAM5o9V8qbT0fxli9WZGxTNStPcD3GfWbr3NPcNkNfPX7+lVuVyczmu4uAvlZNM rBAIMM0+7esIHSyCehGwFe2wGeER1QPNJ3FTdvjaRMBsLod01WvWMdTc8fJZo0Zdq+y0o1sQQmHD hrU65+gARNT8hSsIL6VmgZPcrt16G4t24Cvl6jVb2O8a2qoFJF965VNr8ZK1VLOm5esmzmGSoU3N oFlgFq25hTCQSRDkr782coDHDzSHZs5eZNQPbRsx6h+jXoiG+sBJMSSCMjHUorUY9DHqMWXqHF7x VodhW7BgEV54APvwG4UJK8RRG7wrQ7cNvlrMplATlY+63zv3sEuOxFVmuz/Ua8Rl4ge4LfxvFU/O NNYIAz4weQUGEO+usattRX61atcj25WdkyVPgVNcpne4w9xu9dotrOGn68wJPdIWKlTU8NkHbR+t KaLjgORp0bIt9ek7SAd5WybiNm7S3MACidD/YdILjTOIvo+w79t+E9D9HnULrDJ0+Fj2mQYfiyBn QOKA6ANZA5+LWKXXLG6qz0P0/aPPOQrnuB7XSsdB2KjRE3hVQGjuguiCw3OsAN79j76cpe7/nN7j XnWzWSFL52dbF87A9KPP26aH2wOskgtCDx8WoHUHbTqQVVOnzWVXA6ZsWDtt9ZrNPHGCphfISpBy uH/+Uea6GE8htvXCvQIfl9BwAwmuPwLA3xoWVABhBuJOE9q4Drnz5LPSoIY58YJFK7lumGyCBMdH hS5de1HvPgO5XJgD+ySDh/xNcNKO5w7qDv95KGvNmq1McmBsNN/bII7cN+8maOShPGjroeyQIUPw OLJx0y4v9znqUKny90ZV4DdVC3wzajNJ+MSCdoetOLpeiKf9Y5n7h216fTxg4AieTOL5A81iTHyx ki7GP0wyIfbKgsYVPmxgrIH2D8hOaIigz0Lz3rZse3nYC9P18jxn/WU6tLoHzXXS8W23adOmYxcK z9VCWVgw4N/Z09kkGm4VcM9qgcneBvddHBcfj/AxCQuPYKvHYvPzM1OmrOwjDM8hrI4NrXQzCZxK jQkQfKQKqpLCow1wtfHs2TOrf70YD9rm6tjgTF9DvjI2+G1ssMUPmEJCqHEL/Rb/GMO8EzePcRIf c+Di5fPnT6wdjQ/heM9drkziEyVK4iUL3DNmkrt69Tpe4vgUoN9bQoW2vvfN6UJ5PC/1eGA+Z2/f wMTj2azjVKhYhS1xcNxUrdZtKzp/PabantfHzo43Oj4+lrRs1U5p739kXPGsBNm4YtUmL5ZLrjwD oR3uzPMXz288w/CeniBhIl2tb24Ln2wQvTUDgBVOR7eowCQRwhN7rAar47Svkl9prVWlhCocmnwg nPCPRRJAvFS1Q7R8nze9Tk5lsqc09uEnUGv5wY8eNKNcEb/k26N2UW4nCD2YLWOhC2glpowXg+Z0 qEm/VMpnVZVQHmOHXunW6qQ60OdDuXnSDfmUT7l+9Upw1PFKS+7h81e2yYxjnd42f/g1hKYg/rGv BasI7xzUnKrmSUcf1Mc8+DwEAYZteDWG/FQ+j3ENkcaV65ZKkbMr/qjPWIDM2nriCr/j9axTjAY0 KMVVwHueWQI6f3NZ2G9cPBsljhWVTbGnqJWTQfRBk3JCm8pUxNSPNK7m64L0OtxZvIf/WI6Jbr0C 8LaTV5RJ7weqVTCjCi+ALFlcwUGnka3/IfCdmox8tpfdhw+f6P5DxzegvTTmMHwxx1fwsGGVw0xF wNkTaK2heE0E2YtjDsPLN1YbBWFj+3KCF9HX6ly48OGNyY1OC80XlAWSyqeHtE5j3mIiD3NIpMeE 3rZsHRcPaGg2fFQP7FSp0vDkQJ8zb6E9hwkU2o0XLbM4wgRmAZfUpFoBph7+iay0Z8zpgRF8EOGl HD6TYEIMAc6Y8IZSk3+8gNkT4ISViKHhlzpNWvYXhXS4jmHChLa6jvba4F0ZfO1wDcLjGlgmaOY6 IC00IIAzXtzixo1r5dPKHBf7MC2D4+dUym8ZNKsguk76mAMd/LjSVp0FrsHVq1dYqwNEgrkfOMJd p8UW/QOmfHDAD19cSZMmsyLeEAf1unjxPJNHmNjjGprJOcTR4l2ZwAcaV5iYoi+in8HMTPc7MzmB /Bzl5d011fUIyH6vywiobZxYEVTbP9HDx69dLgL97caN64wdtN4c9TvE+/DhI49btoXgPrU3LmE8 e/PmjV2NYKxo+ODBfe4buJf1NQLRYr6uyBvX30y0eFcXe3WzTW+Og/sBWnIgczAm+yQYf0AQAieQ dWZxVC8eu9X4gw9G5vsNadE+aI5hMpggQUKH9wniAi+Mrdo0Vqe3NwbjnD3BPQI3CvAFqJ9ZqDee dY7GVKS5cf0aT6wTJUpsdX3slQGM0E4zoYR4yOcVj59en286H3vXG+f0s9iVtqJPYSxG+1Bv2/Y5 KgsE3/Vr1yi0el5o9xrIA/nZjmP28rAXhjYgXz124dgs+vlk77lijod9jFUYw3FPxI+f0AvO5vjA DRi8efOaoilS2qyxao6HffSta9eucDx8pNKC6wZCRC9+osO/xjZenIiqLR/o8dM3AV68K2ODT31N xgbL5fLt2OAIP+SK+wFie39zoOnH9hkDkhcrw8aPn8DHvt1PLZwHFwRwuQM/ma6KLtvee7/Oi58T 6h60fQbq87Zb3JfQjEd8W8Gz9+3bt8YYbz7v3XPZHE/v+zTeTJ8+ibp1ac+L4sFXtsY1gRqbnPEV iPHS2Wegd89f1Bdl44OWb+ZIur2BYRsixHeE97p35/fQ20OuuTiB77XX795TpHD256xo38dPnwnx zL7fbNuNBTdAlIE0BPkHX3GOBKQRyCqYx5oFZWBl2fCKZAxlQyCZ4zna9498sUAItNZAbILMsSfw 7fdR1dXReaQBHmifLYH0ysMk2rbt5nK8y9+n9PANePXeE3VNP1C0iGF91Eh05brdf/aSr48mZXU7 oeEHAtKeBHT+5jKx0vMThbtut7062bsuvsVbQU1X7z+mN+8+KrIxipf+bK6bKziY08m+NQIhosSh CGXbWgc6OAowss9BeRIsCAgCgkCgQcAvZF+gaYRURBAQBAQBHxD4kmSfD1WR098IAiDps2dNwz6u BwwaQY0aNftGWu5cM23JPudSSSzvEPAL2eddvnJOEBAEBIHAhIArZJ+1WllgaoXURRAQBAQBQUAQ EAQEAUFAEBAEghwCa5S7CWiiQ/u6ShD3WRnkwJcKCwKCgCAgCAgCCgEh+6QbCAKCgCAgCAgCgoAg IAgIAoKAvyGAxdcgZctWNPyz+lvmwSAj7QsxpIevuGDQJGmCICAICAKCQCBDQMx4A9kFkeoIAoLA l0NAzHi/HNZSkiAgCHw9BMSM9+th/62WDD/B8I0XGHxWBsZrAH+E8G8J34HO+BwNjG0IbHUSM97A dkWkPoKAIBAQCLhixuvYa2hA1EzyFAQEAUFAEBAEBAFBQBAQBASBYI0AFudztEBfsG64k43DglpY iE1EEBAEBAFBQBAIKATEjDegkJV8BQFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBASBL4yAkH1f GHApThAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQCCgEhOwLKGQlX0FAEBAEBAFBQBAQBAQB QUAQEAQEAUFAEBAEBAFB4AsjIGTfFwZcihMEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBAIK ASH7AgpZyVcQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEPjCCAjZ94UBl+IEAUFAEBAEBAFB QBAQBAQBQUAQEAQEAf9A4Nyth1Suz0z6dfJq/8hO8hAEBIFggoCQfcHkQkozBAFB4NtF4O9RQylx wmjUpnXTAAPh0aOHVLRwLipVsgB9/vzZT+WcPXuaatWoSGnTJKTUKeNR+1/bcH4vXrygK1cu+ylv SewzAhXLF6Ps2dLQpYsXfI7sIIZcKwfASPA3gcCXGHNtgfSP+9Y2z+ByvGLFEsqaOSV16fyr0026 evUKPX/+3On4ElEQCMwITNlwkHaevkZPX74JzNV0uW4Pn7+i3B3HU8Euk9S7p8vJA1WC56/fUvIW wyluo0F0/OrdAKvb4MU7KOuv42jm5iMBVoZkHHQQcAs6VZWaCgKCgCAQuBAA4TFxwhg6dGg/HT92 hN6+fUOJkySjEiVKU9MfW1GsWLG/SIUvX7pIHz58oFu3bgRYea9fv6Jz585w/iD7vvvuO1+V9f79 e2pQrwbduHGNIkSISBEjRaK9e3fSy5cvKVOGZIzhrH//Ywx9VYAk8hEBTHIfPnxAz1888zGuvQhy reyhEvzCqlQuRQ/u36M+/QZTyZJlvDRw+vRJNEmNfwkTJaH5C5Z7OY+AFs0a0IkTR6lv/yF287Cb KAgEfokx1xYGv963tvkFp2OMZ/fu3aVbN2861azBg/rRyBGDKWvWHLR67Ran0kik4InAyv1nafCS HU41rlKuNNTp+4JMqNUfsYievnprpAvjFpISxYpCFXOmoSp50lHIEJ7vSCB56g9fRI8VERctQljq V68kZU4ax0hrb2eFqtfI5bvo/cdPVDh9Eupfv6S9aBz2QcVZtOsk79cpnJmqD5xH95+9dBhfnwih 3uMWdq5NsSJH0EG0+fhl+k/ldeTybbpw+xFFVfXNkSI+1S+alcrlSGXEM++grusOnWcC6/T1+xRK YZFYYVEoQ1JqUiIbpUsYyxzdpf3Xb9/TmRsPOM1nUu+e6i+oyhN1/R88e8XVB4kZUHLl3mO6dOcR Xb//NKCKkHyDEAJC9gWhiyVVFQQEgcCDwInjR6lly0aESZ9ZEI7/GdMn07YdBylmTN+/5Jjz9W7/ zt3bfDpt2vRW0dzd19OMaZOoVOly1KBhwGn9WRXqw8HePTsNom/XnqNMiD54cJ8+KrLy/ft3nPrd W88XaB+yk9NfAQG5Vl8B9K9U5OXLl2jViqV2ibolixcQzuP/4sXzlCKF9UTwyZPHtHr1cvr06RNF iRzlK7UgYIoNSmNuwCDw5XNt+1MzevXqJQ0fMY6iRo3mpwq8emWZaL97J88aPwEZDBJff/CUjlyy vEP51Jz0iSzvc5fvPqatJ654ib733A1atPMkFc+cnOZ0qEnhw4TiOBcVaQYSTUvXmetpVc8G+tDL 9s37D/TLpFUGMfTkxRtvyb5Nxy7R/acvKVaUCFRCld1szFKnNfxApkFAGPadv5lGrdhjZb3xSp2/ 9egsgdD7vVpB+qNWUY6PHxBXv01ZTcv2Wj4EI8wtZAh68/oDnbx2j/8nrt1P83+vTWWypcTpb1pu P7JoEocMEYLSJIhphQWuGbAe27IiRYsYzuqcHAgCfkFAyD6/oCdpBQFB4JtEACat1auVYxMgTDr6 9R9MBQsWobDhwtGRwwdp3NiRtH37Frp583qAk32nT52gbVs3sZZcu587WF2PkyeO0caNaylylCiB huy7eesm1zFz5qyG5qMmRJct30Bv1eQrd+58Vu2Qg8CFAPqTXKvAdU0CojbFi5em/fv20LZtm71k D7IEY52WLZs3eiH7du7cZiH6okal7Dly6ahBfhvUxtwgD7hHA1YsX6w+CL2nnj3/9DPZ16FjNypS tDilSZMuuMAj7fAlAj+WysGaeObkaduM4sMFiqTKnDSucSpK+DDGvt65PqUjfVLWDneevKBpGw/R eEVugXwbsWwXda9VREcztrCK2H7qKp1XPvZSxY9hhJt3luw+ZRB95nBH+3O3HeNTNfJnYLLtyMg2 9Pb9RyP66JV7aOzqvVRYadpN/KmKER5CaR/GjRqRj/9auFVpEu428mlTPjelTxSb7jx+QYv3nGIt w6OXPU1PkX/pXjOU9t9DpcUYgjpUzc84Qovvg/rAc/LqPZq99SjN3HSYzt18IGSfQvZvdR0gzcvk pHjRIvG+/sE1hxZnf6X1KWSfRkW2/oGA+OzzDxQlD0FAEPimEBgxfBATfSA9Vq/ZQtVr1KE4ceNR lChR1QSiBM1fuIL+nbvY7kQCpkbQgnn2zHkTSmi8Xb9+1eprqwZ8lPLXB7PaHj37U4IEiXSwv2zv KxO+Z09dMwO4e+c2QaPHkbx4bml3xIiWF0xzvBw5c1P+/IXIzc3771AoAybUzohP9XEmD8RxpUyY c8Pk7uNHz5dtZ8vxr3joEzDrhnmbq+JMH3XmWsH0+9q1q2xibq4DTM6Bj9auMZ8z70MjDObet2/f tNv3zXFl3/8RKF6iFGcK/C9cOGdVwP59u5l40YFbt2zSu8Z2h/rgASlSpASFDBmS980//nGfwKQc fcw7DS1n+rO5Xtj/WmOuM+3RdUWbHT0XdBxs37x5zb5QERf3lLPi7JiHZxny9u4amMv0rzHZnKe9 fe/qH0m5jyhWrBTFj5/QXlJ+vkBrH9dDJHgjEFqZnMaPHsnqX7spiaOIMPO5CGFDewEjijJzBTkD kmtw4zJUVZnwQkCQ2UpkRRYWTJeYg6e5H7I9bRxPXH+A90He+SQwEV590DI+1y2UiaPHiBTeqt6o IyRc6FBW4Zrou6U0zkAGQlqWyUVTf/6ecqZMwJqJyeNGo45VC9D+Ya2oc/WCHAc/I5SJMYi+MKFC 0vI/6rHGX6YkcZhsDBvKjXKkjE8jfixHR0b9RLUKZjTSObNzT2kpuuJ7EGTr1XtPWDPOmfwR5/bj 5/T4xWsfo794/Y4uKpPYl28slifeJXj34SNdu/9Eva94jQVTZGhHJo0djXrXKeY1gh9CQBI6KtdR tsD3htJqtVdXR2kkPGgiIGRf0LxuUmtBQBD4SgiAyJo5YzKX3qRJC0qaLLndmmAiETZsOD4HTcA/ uneiLJlSsBPxQgWyU9rUCah82aJ02KQdozPKnTMDJUsSi2De2rJ5QxU3EeXJlZHTDBrY15iwgYxb qRyTFy5S3Epz7/jxI7zwxdAhf3KWS5cs5GMshjHgr966GIfbmTOmUM7s6bi+6dImonJlitCpUycd xsdkEu2Dz71sWVNT+rSJOf2E8aONNOfPn6U0qeJT3z7dOWzjxnVGnaABBMmbOxMlShCVsICHlvnz /6X4cSOxf6Xly/6jAvmycBnIq3SpgoYfQR0fW2fqY45vu++bMpHH3r27qEzpQpQqRTzKlycTb2vX rMTEli4DRDHa82PTH3QQb0HO4boniBeZNqxfY3UOeCRJFJ1xtTph5+Dx40fUrm1zxhrXENekYIFs tHLlUjuxPYNc7aP2rpXutyBXmjSuQ+nSJFbXNCNlypiMZs2cyoUtXDhH9Y20jA+uYc3qFdjXlmdN iEASoj+lTB6XMcmRLS1ly5KKli1dZI4m+wGMQMaMWQztW2gPm0Xfs7nzWLRwd+3abpjh63jQboYU Vz5MzeLMfWKOb29/zeoV3K8xpqGPpUmVkPs9+j/E1f6s++7XGnN9ao8Zg6dPnlCrFo0cPhd03LVr VlLVKqV5HMqfNzM/Q1KrCfjAAX28XCvfjHm4H/PlyczPJTyfUiSLY4zpuLfxHNLilzEZfh9xnaHV ByleLC8fY4Enex+jMNahXngWOXpOLFgwh8faVi0bc576B/26eNE8nH+B/Fk5ff161X38MKHTy1YQ KKj860FAoNmThsWycvAcpY1n1r7TcQ8rk+KDF24RCLpq+axds+g45u3SPafp9bsPlDZhTMqaPJ75 lNP7IPqQR8Rwoe1qIyIjaKKBAIQ8UiTZ8KU7eR/kYCGPNnOAzU+imFEIpKkzMmXjQUr/09+UsuUI StxsGBXpNoVOKHNgRwKsoF0Yv/FgyvTzGIrnsQVZao/EQht/n76OF8lI03oUJVFloLwxqyxEp7mc bSevUN5OEyh+k8GUTS12kaDJEPaFCFNbLRnajqbYDQayf8RGI/+jxD8OpYztlB/bpkOo3/wtrPGp 405SdYIfx3GtKxrm3TjXcMR/XAYIO0i+3y1lJlJ5+UR4Qpv0+7/UWKbajXKTNBtKfedtZpNszszm B2RkrzmbCPVG/unVFu2Dj0eQhSLBE4EQwbNZ0ipBQBAQBAIGgfPnzhqTjvoNmjhVyPBhA2nqlPE8 YSharCSVK1+JokWLTkeOHKTGDWt5WREQZAe0XkAGYpVBaCEkTJiY440aOYSmTP6Hy8UCIGfO3aS5 85ZaLZgRLlx4ihU7DoWPYHG6HCZMWJ60Iz7K9U5A0GFFQ2iFxYkTl+LFS0BHjx6iRg1q2k0GLa0q lUtz+6A1UrlyNeXfqyzduXOL+vTuRv379eB0YcOqOqg6YVEOSOjQYYw66bCXL1+wNhwmhlqABWTy pHGEiRk0wtKly0ChQoVm34ggi4CVFmfro+Pb27paJvLAdapRrTwv1JIlSzaqUbMu4wfCo0zpgnT3 7h0uKmPGzLzd5L6BSS0+UD8wDYQWG0i/tWtX6mDegvzDRBft9k5Q77KlC9N/i+YpbbqPlDNXHkqR MhWvugtywDtNOlf7qKNrpfvturWr+PrGiBGTQE50/v0XXqzhl3YtWdtQ+5fE5Lpli4ZWzerftwf3 p/Dhw1PdHxpSxYpVWcPGJ8LSKhM58DMC0G7BRwuIrSnvzh1bObx9+y6E8Qa+1Pbv95wwYfzAas+W PEpyXPw4e58YCezszFAfW0CWI//EiZMSCEdoA6Pfjx0zglO42p+/5pjrTHvMMNT7oRotVyatkSNH tvtcQFyQnsBo397dlCpVGr6HcihTalwnrCQ8ccJYc5bGWOTsOIuPNa1bNVHj8WUe7wsUKMxjFzSu 37yxLFSFMR7i1zE5ZqxYBumM/PAMw7Msbpx45BYqFIIMcXdfx+MMNA29e04AB4y1r0yae0jTqEEt OnPmFLvlwPM9XfqMtEn5vr127YpRhuwIAt4hoMkgWzNNnaay0vwDkffo+Wtavs/zw6Y+P3HdAd79 QS20oX3+6XP2tnO3H+fgOoUs7xb24vgUdsJjZVhoJWJBDp8EK8nCryDG945qwRL/EBBuv01eQzce PmPT4gRK2xJkXq3B8+1mDz+BJXtMoz1nrxM0LmGijDTQ8Os4dS21n2r90RQ+CUv3ms5m1tAEBJFa JlsqJmW7zdpAPee4G+WA+Kqtyj2lFhspkhGLjGSnjEli04YjF+iKyl/L63fvGYei3abSEkW6RgoX hkBuQttyiFr0Zfya/ToqDWhYim5N/11pdlrIYH0CfhZjR/EkQ6NHDM/H8aJF5IVOdDzbLcoopsp1 VybjMJvOkDg2ax8OVSTsPI8+YU4DMrFs75mskQkiOosyT8+VKoEiBj9yu/L9Pok1GM1pZD94ICBk X/C4jtIKQUAQ+EIIXLp8kUvCRMaRCZBtVXIp0qVnrz/p6PGLNGfuEpoydQ5t3rqPJ2vQztPmbrbp MGEeNHgUHTpyjvbsO84TNsTRWlLYhzksXrjMkjJlatq56wi1afMrB4Nc3Ln7KP+3av2zOarVPia8 mAhCfqjXiMs9cOg0TZ7yL4EwtCezZ01lgguT7k2b99D4iTNo5uyFNGasRftx8qR/2AQ2kVqxc8fO w9ShY1fOpkiRYkadsmbNbi9rqzBo6mTOnI0OHDxN7qqcFas28gQf+IFY0uJsfXR877bOlgmCq0+v bkxUdu3WW9VtE/09eqK6xnspgyL3oH2icS1UuCiTI0izY4dFoxF12GrSnNq0aYNVtTCBhZQpW8Eq 3PZg3LhRbE4Hknaj+y5avmIjbd9xSF2PRewzLZTNxNic3rd91JyH3r+rFowZMWo87TtwkvthMg/t V5B1IPn27j9Bm7bspbHjpnCSvXt2WS10s2rVMg6fMXMBDRs+liZOnsV5gVgS+bIIFC9p0crbrTT3 QNpAnj9/TsfU6uPQXM6XvyCb3iMcfvu0bN9uIQMzZfL0zenKfaLzsd0+ffqEBg3oy8EYy3bvPUZL l62n/QdP8ZiVKLFlIuXb/vylx1xn22PGASSVT88FEOUgq1av3cr3Gu4hjEttfrI8E7C4ij1xdszD KsyQ3zv34PF+4X+raNLk2RyGDzsrV7kbbiz8Oib/NWA4Pyv0+PXf4tV8vGXbfkI7zQJsnHlOmNPo /S2b3ZkMhSuOBYtW0uAhf9OGjTt5HE2RIqWOJltBwCECMAuduM5C8GRzoGUXLrQb1fYwa53mftgq L6THSrgQ+BL0SbC4yM7T1wir6rpqKmvOG6vuQlLE9f5jsE5zRpFgkIQxIluRg6j/gQs3rf6hpQiN Mu8EBOnQpTs4SqPi2ejsP7/SqbE/0+z2NQgmwbYCohGLnIDAgqnzaRV3ZY/6nKZrjcIcHf4TsUiI lqnKbPro5TuUJHZU2j24BU3/pRqvRDy5bVWO8s+afWzai4ONRy/RS1UnLHay4o/6NKp5edoxsDlt 6NuYUsbzitFNRVCObFZe1fsXOj66rWHKPVVpKmqBubi9tgxrWpbgYzFUSAslg4VbcLxvaCtvyd4p Gw7RzUfPmDhG3dCmCxN+oxJZUugirbbTVftxbUBIrupZn7YPbEbu/ZqweTYwAXnYZ+5mqzRyEDwQ ELIveFxHaYUgIAh8IQSuXrnEJcWLF98LyeaoClWq1iBMTM0Tk9hKyy1PnvycBBpd9qT/n0PYPDeE cn6M/1ZtfuFo8FEVELJt62bWCMEkvnefgUb7yleoTOMnTLdb5Jw5Mzn8l187sd9CHQlpoPEDP04H D3p+3dTnXd0mS56CFihfiHEV7hCQCIUKF+N9aPtp8c/6OFsm/JWBJID25U9tf9NVYTKkQoUqfLxn t+VFFtjCMTzEXS2eomW70gDUAl9TWFwFAqLw4IF9/7d3FnBSVV8cP8RSSyPd3d0dSzcioIQgIggC ipQCgn9CpUFAQUJS6RakuySlpFmWlu7G//md2Tv7ZnZmdxZ2YRfO4bPz6t777vu+t8Psb07IepWq NWXp7mXJovlyqM2nHSiD5Y/TihWryB+s5o9lV/1f9Bl1NVY/fm4bNWoizw/yWjZs1FSaIa8l/og2 Inkt9gI1xVl8z9h+r9DQiNcHD9kYYB+8eeBlo/ZqCZTlFAHItweBb++eXXJyhOEiH2XhIsXEw7Zc eR/ZbxWszRcYPv5iIRqE5PdEBnTxAg9DpFJImDARdf/qG3sLFEoaMnQ0NW/eSva96PP8yt9zPbwe +4XyiidzxJczEASdv0ipXeddGcrd/zmevucdO3ZExqnMld6NVaxUlZ8HL8l3d/7cObObQvM92T6o mxVP5++qu3nfARtreDA8pOFJrqYEXBGYwUUoJrNoB8+wIl3GiWcawmH7vF/OVXPZ18w/lHezf6EO 03Dqun3iKYaw2CxuineYtljO2nxQPFRL50wrwpv1mKfrEMwgVsFSsnjniR3nXH0wiERWG79yN1Xo 9avDT/lekwjXFZShUjE8HSGEft+sEn8GsLWuXSQb/cqinLMt331cOMOjD3kBIaQZ+6p+GUqfNIGE 0CLE2di0tbY5dGVPRKvXZS0+BzwoEVK98/h5aW7O78diqjWUtmiWVA7nMmMP+qgKtaxYQERXCK8d axWTQ2fCMDR27taDco42XOzDVIlG7siZXRraw63N/LBEGDGsbbXCVIJT7RhDDsGeDcrKJnIKmnBi c1yXEZ9AYLk84l+TXoESUAJKIMwIxI4dR8aGR0ZIDXnrDh86ICGdSPx99qxN5Hv8+LHLofIXKOSw P1Wq1LINAQ3hUq6KXDh0COGG+QMQ4V7OY+fKncflaEhiDvtz+RL29nH8ltqLv5F9wBG5oREClTFD ZqkqbJ2E4QFvFGOhOR9Pz4mCKzB4LvXs0dlMRZYINYRZBdrKVWowr6Us9q2UY7if27dtkQqTPizM IRxxDYeOwStww8a14lGFkLS0adNJe1cvCKH29T0th0qWKuOqiUf7QvqMuho0f35HjwRzn7A04h76 4Y/r5ClSSm5K6x/X1Vkg/XXSOPq6eyday+GCH7VsI4VvzB/jrs6p+8KGAIoOoZKuVOXdtE4Evq1b NsrJUIEchtQEsIMH/pYQbYRuG7EPFX2NhfT3xPSzLs3vdyEu5uPO29jaPqTP86t+zw3p9eDaQjJH eGtv376FLl64IL9nyKcJe/TI9f85nr7nQWxFagJ8SZEjZ24Z8+LFCyIC44up5ClSyD68mGsM6/8j cC5P54+2zgbRGiklTp44TqVLFaCWH38q3qIIGVZTAu4ItP15icMhFKkYxgJUmsSOQpi1EUIo86ZP Jp5mKNTxHQtcCC2FtxaspQdefWg3078K7/v+hTmwL6QWlX9fY7DIBu86q7AV1DgJvGPK4YtOeQlL cvGRDzj82BjCXq/evk8POVdeUAYPRVhhzr0KodRqedMltW7KOgqDwIplTS2ebbLh/wKhDh55E1bt plOXb9gPneAiG7ClLGjt4/Bgq0WNElk2EQIMq8jecRASUTG54Jc/U5uqhQkeh0k45NaVFfbPZWiO IZQXBgERBT6cr8m0e5ml3xUbs/K5MzgMg4IpyN8ILz5jeLZOXbKxQOiys/nktY3xjD9HIoTZUw9P 53F0O3wSULEvfN4XnZUSUALhlEDadOllZvAugWDn7Z8XL6jpIn9Sc87Nt8uS0yqo9u6OxbCE0iJc KbQNf6zB8IecJwbBE7nbYKtWBXipOfdNxh5dYWHmj33D4lXMx/mcuK4LF2wfqhBSPGXyBJeXmiRJ wB+MldgDBn8Qnz9/VvJDoSgA8hTCAw/HbGLfCur4eRcWu2yCYHAhvDg3REOYp/fPOtHQekatY5r1 oKorR2WvMWfr3ae/8Jk2daI8V3i2IHwi7DdLlmzOzXU7jAlAsBOxj0PNO3f+msPPN8gZS5S0icoZ M2YWr1Z8WbCJPdUg/kAIgjemVZgK6e+Jq8syX0gkTPiOq8P2faH1PIf1e66n12O/MBcr7ub424wp 1Pub7hKa6qKbx7tcvefBc/uffw7RsKHf02lObYHfy4mclxZfOqAgC7y6Ya/iPTm4C3E1f1d94JmN NBudv/xMqk+jGBYKKrXv0Im6dO3pqovuUwLswVee/7+KRKkTxaOMHOKZh4U8FGIIziAefTlxOaFQ R5/3K9CGg6c5H9wNQg63WoWzBted9py8QMdYjIJXWp0i2YNt764BxLF07KGH/HTwZPPEsqa0vf8i fx1CdI1nHcQ+/Bir3ncawXsxOLvA4aiwRHFsImJw7Y046E58Q9Vj2E2uOGuWpprun3tsX87KAacX 4/EHsW7B1x9cX88AAEAASURBVB9Q+3FLhTGKbQyav4k61S5BPfy94Jy6Omxaw3X/o9D/rI5CI+ba UHk5OLvMhTxMKLUrZsgTaOzmXRszs63LiE9Axb6Ifw/1CpSAEniFBNKnC/gWbeWKP6jeuw2DPXu7 ti1F6EOxhC5dekg4IjznenzdmVauWBZs/1fVIG5c27eRt2579oEvTpy4XGgjGotMj2neguXk7NGF eUPUMonaw/o6Xtd8jLcawoqnTJ3l8jKtDOD5hNAwJM9fw55rt/15oz/yRSFscg+HPkOwWLvWM7Ev HofLwvMNwueN69cpZUqbF6jLybjYGZ6eUfxx3q//IP4j+0uaMX0yjR8/RsKakTx/y7Z98ky5uATd FUYEfFi8gfCBMF6IU/BOxvsXCtEYg1fU9Gm/ct6+NVIJF/vxLOP331hIf09MP+sSnoaw6zcCvHmt x816eHqezZxcLT29Hld9g9oHcbZrlw7yftDqk3ZUp059KZCELxjq16sWVFePju3/e6+0Q3g3qrcb K168lOTZNNuv6z3ZnD+kS4Smb9i0i9atW0Xjfh4lnoso9pI6TTpJTRDS8bT9m0+gc92SL3SRDUvm op5cGMIU6kBILqxZubx28SyogU0RhuqFsry051gGztUHsQ9CWL8m/L4NBTAIy8qeYzB4giFEt5WH nojuhowby5YT+tZ92xeW7tqZ/UbgunmPQ0dcmBknGRe5gEH8gyAJwWtZn2ZUMGPKQL1wzfCKMwav wZ1D23L+vpM0aul2Ws9i7A/zNknocpOyeU2z17KEmGiu59b94MU5iHnm8yFEwrROs7525759T1J/ ZvYduhLhCQR8Covwl6IXoASUgBIIewJZsmaXCqc4E4ouGG8q5zNfu3aVK6g+ltBOE/Y2avQEQi4p eEEgb5kJCXbuG1rbJuzxjofinQm92rtnp8zdOo8jRwJyn5j9+EPeJMQ/yhUMkY/O+ccqcpl+YbV8 XfNJly69XBLyWEWJEjUQAzCxih5oXIVDeWGrOW8fciXCynB+NPzxX5BDFJETbfSoYQSPPVREzpu3 gLRx94JzmHCzv/7a5q6Zy/0IP35dz6jLCfnvRKGRLzt/RUuWrpEPqqj8ee7c2aC66LEwIACvSuQY RYGOYUN+EO+tokVLSoEcc7py5WyhvAg7N5V7IRJa7UV+T6z9sY5CQLB9e3cHeo+SA/zyOp/nkL7n enI95rpCsoRYBeHfx6cK9e03UN5T0nDxkuTJAsJrQzKetS1C7lGNF7+fKDo1ecosKaKDojv40gf7 jYXme7Jhe/uOZ19GmTmEdInzwJt1FueIrVvPVoXevD+GdCxtrwTcEYAAVYer38L6zdpAq/edFJEN ud+CM+RVm+tfyANVe1/W6nDeOhjCVudusRUIcR4TwSQXb9yR3QhVLsV5BWHwejP7ZccLvKCKLgw5 84wHmhkGIqSzwRMRtu3IWclxaD2OkFXkAISZYhoQ8kx+QYyH3IDOP1ahz4zH3ahSvoy0uFcTeq9k Ttm98dAZczhUl/b3Nw/EO8wruT+zrUf8HOaBqsO4j1bDtaG6L2ztgVPWQ7Z9XNEXBi/RlAnjyrq+ vDkEVOx7c+6lXokSUAKvgABCEnv0+J+c6ejRf6henSoS8mNODZFv8KD+VDB/NvaE2S1/GCO0CXb6 lC1/G9ZRuRKegWFpCKOD7edcWu5ESev5y5b1kQTr8NYY9eMw+yGE7X3W9iP7tnWlcuXqsjl61HDy Pe34IQKhqRstVWat/cJq/XXMB+GMyPWEwhpDh3wnf2Rbrw8ioMlbZfYbsQ+VaP/+e4+IGCYnH/5A h/3M1XVhVaraGMtGEC/ly1eSoz+NGUnWoiX4w79UyfxS2MBVdzyfr+sZdZ4PvBnhKQTBxhhC5c0H YWuRG3Ncl2FLAOzNszVz5jQ5mXNeyFKly4lHKn4H4K0Mkcfk8jOze5HfE9PXLOH9ivdg5J6Dx5Ux CFBdOrenAf17R6j3XE+ux1xjSJamcvJpX1tOVfRF/r6+fV8+HPXZ82fy+4hQ7W96dpX//67ylxKo 0LyVqzbfvx/gJYLzhtZ7svn/7GXTYWBOrmz5siV04MA+h0MmTYf1fWfc2FFUt05lWrxonkNb3VAC ISWAUF4YwnchUqGSalC5/sz4EAaRCy9p/NjknLPNtAnJsgFXB87jnxuv7c+LadyfOwmhosYgnqHQ Rpsxi80uQhVZ5LpDBd4S3cbT/G2HHYo7INT2yq179vZBrVTgHHuoRouKsMMWbbU33XDIl1qOWmDf NisVWYCDdxu81HpNX82fucwRoh/mbuT8dNdFuLLmMqxWwJarbgSPb/LXmV641nUWEQyFKlC512qx OYcfzJsFsbCwhFxcA7bj2DmPhq/qn3sP98qIrbiOVqMXuhyjVmGboDv6jx3ixWlOcprzGg6Ys0E2 W/jk5/d2c0SXbwoBDeN9U+6kXocSUAKvjEC16rWkaACKCOxlD5MypQpKfqpYsbzp4sXz8scmQjHj xY8vuYuKFClO27gaa9cuHWnJkgX8R9cDSWAP762wtLz5bB8k8Qd40cK52OMiOSGpfq/e/VyeFt47 9d97n2b+Po2GDB5ASxbPl6IY+OMqTlzX3/Z9/nlXmjvnd6lGW9GnBBUrXpKQo+8Sn/MvrtqJQiIn Tl12qETs8uShtPN1zAcedahG/N2APuLtieIbefxDHA/wH8AQhdtyJeVveve3XyWq5WbKlMUuFJcp W95+DLn7vv/uW/u2EQbtO9ysfPFld1q4cK7cC5/yxSTMEsVLcP6gDPm1Xtcz6jwviJRfdf+CBg3s J2JRzJgxadXK5fI7VaxYSYcCH859dTvsCJT3qUSzZk23n8BZ7IvL7w+mkAcaIcQX4epWe5HfE2t/ rKdLl57e/6CZhAyPHDGYli5dSMn4fQ3FgfAlxcet2kao91xPrseZgSfbCKGGZzAKBFUoV1RSRyBt AMJ4X9YgujVv8YkU0VnM/0fgx2qojDx8xM/8JYXNezm03pPz5isgQvI3vbrRIhba/Pi9YsOm3YRn LzQMOQ7XrFlBRYoWp2zZcsgXJhvW27yKa9Ssaz/FWBb78H8qONTm8Gg1JfCiBJDfDsUQTvoXj/i4 UvBefTjXzE375ZTvlchJnuQHDG5+8Hwb06YWfTB0Dp1jka7r5BX01dRVhNx1V+/ckyITGKN+8Rz2 obKnSkyTOtajThOWE8JAW4ycL4JdZq4i/JALU0BEMvmU4TEWlEG0fJ89FKdxSPB3LDwtYOEwnncM Ea1M/j1rf3ifdahZjAYv2Ey/rNhFqM6bM00SOnHxOv/YvNq+fq+MQ9VdVOFF6PM5rjxcsvsvVCJ7 WkrB3nEXuMjItqN+co2XpnQXkXDK2r20cu8JKp4tNVe6TUK+fC1r2PsNX3zVKWbzxrTOJzTWC2RM Qct2H6NuU1bSPL5+nHPXsLYSguxq/NZchXfa+n0y/0JfjqUCGZPTkXNXCfn5UBAEhUGs1q1+KZq9 5aAIsOV6TOT2KcgramTaxd6U97g4Syq+193eLW3toutvCAH17HtDbqRehhJQAq+WwIDvhnB+ttmS pw4hlPBIwh9SCFuFGLh02VrKyiG/sJGjxhFyGd2/f0+qsG5hT7kKFSpRz1595bhzAYOoXrYPRl5R HT8gRWYBER4z+IGYGJzlzp2POnTsLO3hhYE/iN2JdmasQYN/pGYftmRxzltEIuSOwx8/y5dvkHBS nBcfeIzF5Vxxq9ZspZr8xxC8SdZyFVn80YQlRKTWbdo7CH3m2szSjIOl2We9brMelb/FdTYvf05W fiGdj/OY2A7pOdEH+eVQQAK58uDJBwEUPydOHBN+1j8W0R5Wq3Y92wq/VqxY1b6ePUcurrybXrZR bMMUQrA3cLMCz8Bly9dRrtx5xYsHAjOEvvQZMtLPY3+Var/o6opzaDyjrsZ1dz5zCV6c89HaJlu2 7PIs3blzm+bPmyU5+xDKjOdr3PipppsuXzGBcuz1C+9VGMI0c+bME2gGVavWtO9z9bzj4Iv8ntgH 9V/5/ofhIq6byqlbtmyU6rLv1m8k+9EsNJ5njPMq3nM9uR7Mxd3vl6s5lmRvY+S9jBMnjhQBWjB/ toQ9gwsKUVjfMzF2SN7z8AXCsj8WoZv8/4Iw3rG/TJH/z3LnyScexJ+1+5jP90TahMZ7MgbC/5d4 L4OAgJyEDx4+sF9HSOaPsVy1b9K0BaVOnVZyqcK7GEJfsuQpaOSP4+RLMvSDZeYvaWDm/3fZ0Jc3 ikA0FkFgXpznzZVF9d9vClO4amPdZ9p7ufjcZsJ24dHnXCnVnB+ijDFUzIW4BbNWvjXHXS3NPM11 uWqD6sDbBn5CH5bPJ8IP8vHB4xCiUabkieh/jSvQz+1qO3Sty2HIfw1tQ824D0TLZ8//E68xeNbh U2IhrlI7uEUVasp5CIOzka2qE1jAc+6fc1ckpLc4581bP6ClhJZG4c+9kWRU20jfNCpHo1rXEEEP XoTINwjRFHP9rXMD+rxWcYdTQjzcwteHOT/la0OlYIh6WMaK5kWfVS8qQh86tWCPS9wPhAlP5Kq+ EPogDI7j6y+bM519XHM/TTVfcwBzhYCKH6x7YuALhnh/2370LD148lQ8J931hai6pFdTuV54RG44 6Ct9e3PBmO+5ujMsCntLGksc15u2DvqEKufPxCVD/iOE/6IP/p5oyJ6dW5mN8S40fXT5ZhCIxA+V xfk14KKePn1OV645uuIHHNU1JaAElEDEJ5A0sTcLVM/p2g3XSX49vUKEQMLLwIs/MCRJkkxCYV31 RYgvKq8idxKEMLz9whsFf5BZBTSEMD7lRMImhMg6FkKxYOjvqaFqsJ+fLyVgjwv88eKJQbjz9T3F XnopJBk/+mBeuFZ35xYOfmeksizOldRNFd7bt2+LAOj8B6e763bXHueD5yCKBeADi7N5Oh/nfth+ 0XOavjbhNxqLf6kkh5+rc2Af7j8EVGuYGPaD/32+bzFjxXL7PKGdO8O4KKYArxfnYh3uOGOsl3lG gxoXPOGlZwRaM28IAg8fPpTfAbMPSzzn8PLDM4L8ls58rG11PXgCyZPGZs5P6catgPDo4Hs5tsC9 esAhmrE4rNr5d9e0xHsNzNV7l2ljlngmPP09MX2sS7x/+vH7DZ671KnTuHxfepnn2ZzrVb3nBnc9 Qf1+uZsj8sae9fOjaNGjiciHa8I4OBe+pLKap+95438ZQ316fyUFWH6fudA6BF3iiu4F8tsqiW7a sodQqdlqL/OejHEwb7yvIVQYXpGm0i6OeTp/tIW5a49nEmHh8RPw/2HsNer8fwvem1GF3hRXsY2m r+GBAKri4nPd4+Pb6dGeF0+T8pCFlucsXAXlkYbqrhBTrJVXg2KA9qg+7yo3HMSaGPz5EaGszgax LTrnmDPHJq/ZSx3H/8EeZ4lp++A2zs1dbvOvjYTIenMoqqeegAiR/ZfDcFG9NT4LZZ4Ywkgh9EGk hFcg8uKF1JBz7hR7taVIEMdeeCS4+3GdQ4nh0ZaGz4lrDM4QMn2GKwljvglix3DwALT2hZfjTS4a YtpAvLMa5vWM5+vqnPfZWw4W1DNkHQvruE9nr94UT7v0SRN4/GxduX2P8HylS5LAPuRtnjc8/Jzn jAZg7HflljwLEDWdLss+hq6EXwKR4yUl76rtPZqgin0eYdJGSkAJvIkEQkvsexPZ6DUpASXw5hAI DbHvzaGhV/IyBJArEWke4CGIohz4ssXYvLkzqUP7T8TD/fjJCyzuB/+Ht+mrSyXwsgRCS+x72XmE Zf+q304Vr6y+jX3oi9qO3mtheV4dWwkogfBDICRiX8gl9/BznToTJaAElIASUAJKQAkoASWgBF4R AZ+KlWnkiEHiYVe0cE4O6c5NSTi0G/kB9+3bLbPo9tU3KvS9ovuhp3l7CMADcBuHeCJsFKGXakpA CSiB4Aio2BccIT2uBJSAElACSkAJKAEloASUABdfKUAzfl9AY0YPp21bN9NmzkELQzqKQoWLUsuW bahuvQZKSgkogVAmECdmdDo0qr2EyaKohZoSUAJKIDgCKvYFR0iPKwEloASUgBJQAkpACSgBJSAE UNUdP8jBd/PmDfY0iiqV2xWPElACYUsAVVPVlIASUAKeElCxz1NS2k4JKAEloASUgBJQAkpACSgB IYDiFagYrqYElIASUAJKQAmEPwKBy/6EvznqjJSAElACSkAJKAEloASUgBJQAkpACSgBJaAElIAS 8ICAin0eQNImSkAJKAEloASUgBJQAkpACSgBJaAElIASUAJKICIQULEvItwlnaMSUAJKQAkoASWg BJSAElACSkAJKAEloASUgBLwgICKfR5A0iZKQAkoASWgBJSAElACSkAJKAEloASUgBJQAkogIhBQ sS8i3CWdoxJQAkpACSgBJaAElIASUAJKQAkoASWgBJSAEvCAgIp9HkDSJkpACSgBJaAElIASUAJK QAkoASWgBJSAElACSiAiEFCxLyLcJZ2jElAC4YpAzerlqUD+rHTq5IlwNS+djBJQAkpACSgBJaAE lIASeFsILNj+D2X+dAR1mrjc40v2/fcG3XnwyOP2wTUM7fGCO9/beHzQ/M2U74ufaOq6fcFefoVe v1K2diPpxMXrwbZ90xtEfdMvUK9PCSgBJRDaBM6c8aVr167Snbu3Q3vot2q8pk3q09UrV4K95siR I9PU6XPonXcS028zptDUKRPtfXAsbrx4lC9fAfqgcXNKmzad/RhWTHu0K1W6LPXo+T+H484bDx7c p05ftCPf06fIyysqDR3+E2XJks25mW4rASWgBJSAElACSkAJhCKBpTuP0qAFmz0asVbhrNS1Xim6 evseXb55l85d9ewzef/Z6wnCUYGMKWj9gJYenSuoRqE9XlDnepuPQVA9dek6nb1yK1gMaHv19v1Q FXSDPWk4baBiXzi9MTotJaAElMCbTmDXrh10+1bw/2mDA0Q42Io/l9L+/Xtl3fqyccNa+mXcGPrp 50lUtVpN+yFr+337dlP5CpWoePFS9uPOKxASFy+aZ9+9/++9KvbZaYRspf1nrej+/Xs0jAXT+PET hKyztlYCSkAJKAEl8IoIrNx7gsav3E3VCmamlhULvKKzvlmnCQ2GZ6/eon2nLnoEJkfqxB61c250 7+ET2fX4yVPnQy+0HdrjvdAktJMScENAxT43YHS3ElACSkAJhC2Brdv+psePAsIoxo4dxYLdaCpZ sgyNGj3efvJI7JWXNGky+zZWPmvfiTp06EwPHj6gvXt20bd9viY/P1/64otPaXvxA27FpWlTJ7kV +/777z+aMjngvA4n1I0QE1iyeD49efKEevce4PZ+hHhQ7aAElIASUAJKIJQJ7D9zmVbsPU7xvKOr 2PeCbEOD4ceVClKdotkdZoBwTNjsbo0oT7qAz4LxYkV3aOfpRo8GZcgnbwbKlurFxELn84T2eM7j 67YSeBkCmrPvZehpXyWgBJQAE4B3GkJ7IRZ5YpcvXaSbN2940pTu3bvHItYZevw4QBRz7vjvv5fp 5MnjdPu2ZyEMzv2D2n7+/DmdO+dHFy+eD/b6QnJdOGfChIkoWfIU9p+4cePJVGLGjGXfh+POQh8a xYgZU8J3cQyefFOmzZa+uBcb1q+RdetLlao1ZHPZH4vo+vVr1kP29XXrVpGv72lKkyYdFShQyL7f 1crdu3fp9KmTcn9cHXe37yGLkzjH2bNnCGw9McwXfZ49e+ayeUi5uxrkyZPHMidPn2FwPn/+bLDP hKtz6T4loASUgBJQAhGVwNNnzzmc8AbduPsg0CUgnPT4hWt0+777z2zOnR4/fUZ+V27y/6fORxy3 7z54TCc5jPHew8eOB1xsPefBzrGX3M17D10cDbzrFrdD++DmYHoGxcC0eZFltKhRKEXCOA4/kSJF kqGSxo/tsN87RjS3p7h44w6BlyuLEzM6VcybkVIliuvqsPTzlDMGCO3xrJPC/Th37baEpFr3O6/j fp/59ybdf2TzWnQ+/jLbYOnqWXc1ZnDPxUP2pkSI7bPnwTzsPPgT/j3z5PfC1Tyc9+H5xnk9fb6d +0fkbfXsi8h3T+euBJTAayVw6eJFGjniA1q5YpkIN8gdV6tWPfru+2Gc783LYW4Qefr3602LFs6V fH84mCJFKvqkdTtq82kHh7bYWL5sCQ0Y0FsEJQgw0aPHoJq16lLffgMpQYKEIlgNG/oDwXvqypV/ 7f3z5StIA74fSvnzF7Tvw0qObGno7t07tHnrPhaz0tqPXb58iYoUysHzjUbHT14k86EKYbMD+veR nHeYOyxJkqT0v74/UJ2679n7h/S67B1DeSVr1uzC5caN6yxMXgg0OkJ3jx39h05zLr7Zs2bQp207 BmozeZLNq69ps49oxYo/Ah3Hji1bNtI3PbvSkSOH5ThyAZYrX5F+GT+NYsWK5bIPdv65fCmNHfsj 7d71l120ixXLm1p90pY6d/la+JvOs3h+nT7/lLp26yWi8MQJP8vzVblyNZo81SZqviz3IoVyynOz c/dh6vl1Z1q9eoWESseJE4dafmw7N67NahAEBw3sz8/wPBGAcczbOzYVLVaCvv9hGKVObXuuWrdq RuvXrxavPrSpUL4YReUP8JGjRKG//jokIi32qykBJaAElIASeJ0E/j59iar1nUoPH9tCOuduOUTL dh+TKbWpUpj6vF9e1nO2H0VXbt2jlf9rTs1GzBNhBZ+XkPMtTeJ4NHDeJpq/7TD9y22MISfc0I+q UsFMKcwuh7EOjelAXSb9yR6FJ0SkgWj0adXC1LNhWYrsL3Chw8ZDvtRt8go6fNaW4xjHfFismtap PsWKbvusOX3939Ru7BL64cPKLD5FowFzNtCF63fkM13WlIloCM+jTM50cn7zApFxwOwNNHfrIUL4 LAwCWgn+vDj846p8XfFNU1m6Y/DLZ3W4OMayYBk6DBZGGwt3/EO9Z6wVYQf3J0/apDS+fV324nvH fsbfNuyntszq3WLZ6dfP37Xv94SzvbFlJbTHw9DXWUjuPmUl/bHrqF20zJQ8EfV+vxzVtXg+7uWQ Z7Tb73tJniFcM57HDjWL0SeVCvH9J9pz8gKV7/UrxeZ7e3BUe0oQO6Zl9kTf/r6Whi3aSnjeB39U RY494N+HPr+tkWcDue9gEEfbVS9K7WsUlW3z4u65wO9G/gzJpdnWI34yz0N+/xIEwZjRolLRLKnp x9bVKV0SxzQvl1gwb/vTYtryjx9BHIzvHYNasccn+oXU8DswmHNALtt1jCCIxuOx6vF9H9qyGnlF sX3G/WDIbOZ8jDrXLWn/fTfnuXbnPuXpOIYePH7C7DqI2GyORZSl4yf5iDJrnacSUAJKIBwQ+KjF +yLiZMyYWbzB4O00Y/pkat/uY4fZPX36lOrUrkyTJo4V0aZ27XepYsWqdOnSBfrftz1YBPzGof2U KRPo45aNpdovvMyKFC3OYklUmjd3Jo0ZPVzaQujDePfv3xexqVr1WiJ2IS9diw8b0p07dxzGRDvM w9lD8OnTJyLKILea1aurf99vZHwIWB80/pBq1qwrXmxLly60jxvS67J3DIMVeL09fmz7FjdZMtuH C+tp8AEIBTxg06f/aj0k6/CeXLt2JUWLFo3e/6BZoOPYAW+85s0aitBXqlRZgiiYPUcuWrtmpYQQ u+zEOyFA4n7+tWMbZc6cVVgWLFhY8tn9OHKI5Bq09jX5CUeOGETjfxkj9z527Nj00D/kOTS44xyP Hj2k6lXL0ZIlCwgiX6pUaeS5GTliMEFgtBrCcevVqSLPH7w8c+XOS7gG7Mf1V6xQXIRp9HkncWJK nDiJvTvEaWwnS5qcojqJ4PZGuqIElIASUAJK4BUTiMliWdJ4sUXkwqljsAiRhLfxk9AiiuCPfQgP 9b7/XYQ+I5hAMIPQN/bPnXSPvaogwqFwRMI4MUVkaTR4VqAiAWascj0mESrJQuRL/U48aQdhYuzy nXYK8GxqNGiWCH1lc6Wjj3wKUK60SWjVvhMsaN20t8OYsO/mbqDPxi0Vj75CmVJSDK8odOTcVar/ w+8yH9MBXlNVv51KwxdvFVEwL4fHFs6ckgWVZzJ28W7jxYvQtMfSzNuZQZTIkTxiaB0rLNZXMpMP h88Tb7CcaZJQtKiR6W8WwWr2myb3zpzz3qPH8nn3rn/uPuz3lLMZw7oM7fHgnVfm64k0a9MB/nL4 OYtiqShzikRcWfYatRgx3+69t2jHEar4za+0/ehZeX4h5qZkr0h4+EFE/nLScplm9tRJ+LiXPF/o YzXWv2gmnweG5woGUa1yn8nyTEMge7d4DqqSP7M8Jz2mraLeLAJazd1zgd8NGJ7xGn2nE4R1iH/v l85NSePHofUHT1Npvk6Ie8ZQIbk8/16s2X+KnnL0C+4jPFmHLNxin6dp68kSQh6KvoBf2iTxCR5+ k9fspVajFti7F2G+MAjmzh6H4IU5JU8QR37snSLQinr2RaCbpVNVAkogfBGA997goaOpYcPGMrER wwex51M/giB26uQJypAxk+yfPm0SHdgPj7p0tGjxSkrqL0YtXDCH2rVtSRPG/0yffNJO9t+6dZMG ft9X+sH7rHefAbKOsF+Igqn9vfIKFy7K4kxq+rB5K7tHGcJ5y5QqIB5bmzetJwiAL2p/cLgrbAp7 khUsVETWIVpdsnjNheS6ZIAwfEGuv3v37sq32Hny5Hd5pgZ8n3B/cG+2bt1EJUqUtrebOnmCCLFV q9WSqr/2A5aV9evWiEBXtpwP/T4zQPTctXMHZfS/15bm9lUIphAGITaiarAx3M+fxoygBfNnSw5C s98sIV6iEvDMWYsoMXtVgj8sNLlfuHCOBg4aSU2atpCxP23dXJ5f5Db8pPVnsg8vM2ZMpj2cGxGi 4NTpc6lo0RLYLeHrjRrUErHz++++pV8mTBPPVhxLmzqhiIHz5i+jdOkzYJeaElACSkAJKIFwQyAL iwB7R7QTMaHvzHVUk4W6CewJ5s7g6QPvuXbVi0hoJbyOEP4KsQ755oynHcJ5C375s3j6rT/oKwKg 85jnOTxzRKvq1MLH9pkFQg480yat3i3jo/3qv0/ZRMQ8GWhBD9tnTezfcewcZUqeEKsOhvBhiEPT v3yPBZXYcv7yPSeJ597oP3bQpI71pP3kNXto14nzIjTO6d5IvPlwAKGOtfrPEMHof7+vo6nsPehs rhi8VyKnxwydxwutbXxhnY/FpJldGooHFsSl8r0mCQN4btVn0cqdhZSzu3HM/pcZ78cl20R8TMb3 b1mfD+33GR6gQ1gM9uJICQjPX09dKaGuYD+2XW0WN6PI6b+fu5Hw8+vqPeIRB8GsTpHsNGPD3+J9 ap43NN521E9EvOgsChuPwUn8bIAdxDF4skLogsHrtSWLZD8v/4vaViti3y8H+cXVc4F59mSB8BkL d/CShfccDJ6DlXr/yh6Jl2nogi12j8KJq/bQ+eu3xQNvxbfNCUVYEELcctRCWvP3Sekbkhd4741q XZMal80j3VCFGdWTF7KId+LidWHbqFRuwrOO39mNh05T+dwBn1fnsdcrrGGpXOIlKRsR7CVyBJuv TlcJKAElEG4I9Os/2C70YVIdP+8iQhE+cFjDQH/7barM+fMvutqFPuyoXqM2IT8dvO1277Z9k7tx 4zoJ3UQ+u+5ffSP98IJqpkNYWGzO4h4MobQQA62howizNSIM8uy9jMETDnbw0H77MPDQgiebsZBc l+kTWkuIpwh3/emnkdSieSPq17eXDN3io9Z2kdX5XMjvV8GnsuyGmGUMHm6//267R81b2PiaY9al YQK28OI0VoiFV4RBuzOEYENQswp9aFu7ji18xN29Qpjv5CmzJH9hFA6BfecdWzLp0OTef8BgavZh S0LILn4+bfe5XAY8Ha02edIvsvlxq7b2Zww70qZNR1269pBjy5cvsYfuyg59UQJKQAkoASXwBhGA Zx2EPtg7cWNRVBYT6rPYgrBJI/ThGIQ2hMPCzl4J+LwgO/xfBnHIJCr/IiwXPx1rFZMjZ9ibz5j/ RzHyY0ERXknGIOgZccfswzJDsoS04OvGcn5sJ4nnTV/ULo5Ve3gy1sev3IUFizaF7fPENkIqezYo i1Vawh5R8AB0NlcMnNu8ju2MfO1Lejaxh1rmTZ+MyuVOL1PxvXwjyCmFlHOQg/HBlxlv/vbDMjye KaugWyV/JlrVt4WEny7ffVxy+SHsevjH1Ryeha/ql6H0SRNI2OpC9qqDQayCbTp8xiHUfME22/Gq BTKLwIY209buw4K61ivlIOjVKpJNnvFHT57RzuPnpY31xdVzsZY99JBzEGJ4pzq2L4nRB2G8tVmA hG3+J+Dz5tytB2VfmyqFROjDBrxoIeDCUzWkht8xI/Shb5d6JSkx/07g7zQTro8ckeVZTIfN2mw7 P9bhcYhQYhi8ESOqqWdfRL1zOm8loAReO4G8+WzfxpqJQCxB/rI/li6iCxcC/iNEIQfYnyyG7N+/ 1zSXpZdXVM6VxiEEfr6ybdoWYm86iETB2fHjR+nwoQOE3Hso5nH2rO0/JhPSGlx/d8er16hDv04a R19370RrOZ/bRy3bEDzajOCFfmaunlyXu/O86H7kScSPMYTftmLvyK7deppdLpdNmrSQfsuXLZa8 hxBVFy2aL15zCLFFbj93Vq68j+SoO3niOJVmD0rktmvcpLlDyKq7vtiP0Nnt27fQxQsX6OrVKwRP TNgjDilxZfA8dOURF5rc8zsVIoG3KAwCNIqQIHwYhUR8fU/Jfh8OP3c25CyEIZT6HD9/6TNkdG6i 20pACSgBJaAEIjwBq1eU88UcPX+VDnJVX4gEdzn0EKGhsEecQsWVFXYSLyCIwCCmoLhEbM69h0IS EHRQ9AOegm04p1/zCvlFxHM1ZmbO64Z+ViuZPa1sIjwUXlLIW4YCIzCEZzobKtXC4I2Fa4CIZrWg GFjbvep15LTDtVktjT9TeJ0FZSHlHNRYOPai4yFs9rS/MOmcY9F6ToT0woplTR3omiE0+rB4NWHV bjrlPxZCwOGhh2Ib8B5tXbmQTQzkdRi824yd4CIwMIS/7uOcgFaDuA1DqLCzuXou4D0He8Qefggt tpo5Zg1H9/MXxq3edegDz0PkXYQ3akisQIYUDs0hqpfIlpoQngsR0liTMnnEc3DxX0dYPK0uYuQi FkpxPyAaZ00ZkPPR9IkoSxX7Isqd0nkqASUQIQjE9o4j80RIKQxhuWZ91SrH/+ikgf+LyTNnvLwS Jgz6PxaEdDbn3HwIIQ0L692nv3h6TZs6kTBv/OTMlYfG/DRRQktDel2hPceSJctQmbIVJKw0XboM lCNnbikgEtx54NmHMGpUsDWFOozXGjzcgjLktPvt9wXU+cvP6MSJYzTwh740fNhAat+hE3u3BS0y /jZjCvX+pruEAQd1juCOhTX3GBaB2eRwvMKipBGPrbn4zFzh8WnsJj/vakpACSgBJaAE3hYCKKaA vHoIrX0Zi8Ff/hr7j/6TVQiAC77+gNpzHr5jLPj1m7WeBs3fRJ1ql6Ae/h54po+7ZVyL+Ie8ggit NPnU4PnnbAljx7Lvunk3wJvQvjMCrUT3Z8qaTZAWGpytJ3jR8VDgBWIvLFEcx0Ia1vFNQRVX9w/t 4saKLs1NNWaIXO+VzEmjlm4nhKZC7IPXGkJXEYpemb0GYWhvqj3/uee47HP1YkJ7XR2z7jOCGq4L 4qMrgxcsDKG9Zr6J4gQ8g676vMy+2DFsbMx1YqwaHL4PZgiDX84FepCnEIVrYB+UtoUAy0YEfAl4 V4mAk9cpKwEloATCG4G792yFMRIlsol1ceLElaIPEEvmLVgeqEou5g+PwGjRbP/5xIsXXy7p+o1r QV4acv1JrrhMmalLlx4SXgsvrB5cWdXq8WYGMR55j/2LPJj97pbwKuzXfxALWV9K0ZHx48fQoYP7 pUDFlm37WGQL2XW5O8+L7i9WohR16Ng5xN0RDosci6N+HCqFOooWK0koahIjRkze3yTY8QoXKUYb Nu2idetW0bifR9GmTesJxVJSp0lHjRq57r/zr+3UtUsHCRuA92GdOvUlB9/582epfr1qwZ7T2uB1 cE+QMKF4dEL8u3UL3gA2LwEzr+vXA57VpEmTmt26VAJKQAkoASXwxhP4+McFIvShCECP98pwUYGk 4l0HTyYTKvgyEOC9tXNoW87fd1LEGhQ2+IGLgiCnWpOyeYMd+iYLGMYQehwJ/1j8wf/pEFcc/0e3 5V4z7ZMmsAkxZvtNXr4sZ2c2LzJevFgx7PfmGovIqfw9E53HNmLYzXscGuTCbvnf82SW+4dQXoh9 24+ek7x4qB4Ng7BlQsIheGEdYvCyPs2oYMaUgUaHcAhPO08sMT9vsPIcTj2zayOXXcxYELvNuW/d DzuR+e5D2+/DOxZBEWHF4IDiHbM5lLcIF6v5i0OVo/DfZ/VLuM/16PKCwtlOmy9mOJuUTkcJKAEl EBEIHD921GGaqJK6fdsW2ZcqtS1XC4Q8U1Tj6JHDIipBWLL+GKEPHVHEA7Zv727Of+Y6vBM55rZu 2SjtRo2eIPn7UMghRYpUHHZp8yyUg5aX+AkSyNYFS4EN7Dh82PbNlaWpwyry3H3Z+StasnSNfAA5 c+Y0nTt3VgTKkFyXw6CveQOFMvBBF4U62rezefPV5RyIcePF82hm6FuhQmWaNWcJ1a3XQPqY++Fq AAiD+FDt41OF+vYbKAVP0nChleTJHMMLXPV13hfS58m5/4ts4/k0RWU2blgXaIgN69fIPuSfTJ48 4IOhEZhv33GdryjQQLpDCSgBJaAElMBrIMCRj2Lw7AmJwUtu4yFf6TL+szqSvw/hhqkSxQ0UThuS cZ3b8scOqpQvIy3u1UQ8tHB846GAXGemPcJuEa5rtfUHTssmvMAgqEBcSe4vAq09YEvRYW2PPGsw 5CBMmTCu9VCQ6y/KMMhBX/FBTzl7Oq2QjgfRyXjrbT9y1u1p0rHQC9vGbfAMWg2hp+v877k15x8q LuPZxOfROZsPcSirfwivJR8dhDyIyLDDZ69IOCvmZP0x4pz1nO7WM3DuQBgqQiME2DqOWcc5YVgk 5/x5sK1H/GRpXlAhGKHsITWE1lsN45g8fKkTO37mN8I5Kl1P5OIm4IScj8bz0DpORFpXsS8i3S2d qxJQAuGKQJfO7WnJkgX2OY0YPpCuXbsqnnxVq9Sw769cubqsjx41nHxPO36wevjwAW3csNbetnSZ 8hQ1alTJ5waPMWMoCIHzDejfW3KoIY8a7PSpE6YJrV+3mr36/rBvW1dS+4uPU34dL7nVcAwiFKqv OhtChKdOmci55AK+WfP29haBDG1NUZCQXJfzOV7ndrp06e2VeE/7349mzT8OdkrLly2hAwf2ObQD F5hh4nDQfwMiMOy0ry13I9aRv69v355YDbG9Du7VuEoxbNzYUXSERWtjvr6nacjg72QTFYeNwIcd Jrw3rELNzRx0qQSUgBJQAkrgZQgk9A+ZRBVSE0bpyXjPn//Heb1sLU/65zrDFiqHhoZXH4pkYE5W i805/GDeLMY52z/nrlCDgTPtxTxQKRjVXWH1igV4KNUqnE32oUIvRB1jyBc3YM4G2UQONn8dxhwO chkcQ5yryrdTaJ6/R1mQg73igyHlHNz0XmY85PuDjeT7hurIxuDZWaDTz5J3sSILvxBu4ZnZa/pq FqZMK6IfuBLvKX4WIdY6F5Zo6J+br/dva6SadJrE8alYFluuZjNCNS7WARuxaKs9t6M5hlDbdS4E YnPceVk6ZzrJOYlcgd/zc2WdJ9pCBLT+3lT1zyE57s+dkl8QbXDOVqMXvlCYPMLfF/gXKcFYCIG/ evu+eBDWKJQFu+yGojfIT4miNEMX2hw3PrAIofaGEWxFw3gj2A3T6SoBJRB+CESKFJnafPIh/ZA+ g1RjPXbsiEyuabOWdk8o7Pj88640d87vXLTjHFX0KUHFipck5Oi7xHnj/tqxVQohnDh1WQQjCFHv f9CMpk/7lUaOGExLly6kZEmTS2GPO3fuEKqhwoOqSJHitG3bZg4P7SiC4wOu8rF503q7kOdMqXHj 5hL2u2bNCipbphBF4+qxEG0gyEB4stqZM770VfcvaNDAfoTiCzFjxqRVK5eLyFiMw15NVdiQXJd1 /PCw/kHjD2mLv3dkrtx5XYZXO88TeffAr0jR4pQtWw4CJ3i1QeCqUbOuc3P7NgqbjB41TDwJK5Qr KiHXf+3YRgjjfRF7Hdw7fdmdFsyfLYVFqlUpS/nyFyCvqF60Z88uyUOYMmVq+qJTN4fLyZuvgISU f9OrGxdBmUd+4LVpN8WN67mngMOAuqEElIASUAJKIAwImET+ECVydxhFydjDqCwLFf2a+AR5Nggq xTnh/2auctrxlz9EWHjAnnXrD/pKgYsgO3twcMravbRy7wk5R47USQhVZdew5x0+d9Qplt3lCKi4 mvnTEVJYAAVDkKcvTszo9mq/6NStfimaveUgXeFcauV6TKQCGVPw/+mRaReHLqI9wke7vVva5fju dgbHECGk4JuQq6vW55DJ8GQvwjmo+b/MeN353iCvHvLdFe/6C+Xne3ONBSoIucbgcYlqvYMXbKZf VuziPHPHOXw8CaHohSne8TWHlDvn1mvIefuQ9xFeazBsOwu6qMI7c9MBOX/J7r9QCS7wgoq1F67f oW1H/aR4zKUp3R2qT5t5OS/hpYjxvv19LQ1hAW3prqOUL31yaQYRG9fUka+jf9OKsq81V+Gdtn6f nKvQl2P5uUwugiByC6LwDArXhMTgNdh8xDz6H4t40fj5hrgIQxVsZzbYj8q94AODmF6Tc/lFdFPP voh+B3X+SkAJvHIC8LxD9dc5c5dSRs6ZB+8wCH3e3rElxx1CNa2G8NBVa7ZSTRaE4OW1ds1KgnCE JYS71m3aO3iGff/DcPr8i672yq8QpVCx9d36jWQ/xh45apxUjr1//x5X+V1KWzZv4NDSStSzV185 NeZotUbvNxUxBrn4EL6K+UK0Wr5iowh+yGVnvLKyZcsuc71z5zbNnzdLcvZdufKv7Bs3fqp92JBe l72jmxUwhXlFC/xtteni5d8GYqUnFtXLNpaX/9L0qVGzDpm8ii250rCzmfGt/Zo0bUGpU6dlgXab eD5C6EuWPAWN/HEclSpV1nkI+zaKiSD/YZw4cURghWiGEG3cQxT9cL5XENFgUf0TS9sH8l8JDe52 Lv7nMueIzM8BQoXxg2fCGATeNeu2SSgyPiTu2L6VNvMzF4XDMvBcrl671e7JZ/rgWURlXrRH3sIH 7MXqfK2mrS6VgBJQAkpACbwuAqi42bluSYI4gGq6qEJqihxgTl7+/x+aaqTWeY5rV5tK5UgrIhkq mG7gsF6E3P6vcQVpZvqaPmbbeSzkB8P58YN1WAuuvAvvK4RrTuQCBxD6ILzgnBAjnQ1VWNvXKCpC IwqG3GevKIRvrun3EZlqv+iTOK43bR30iRRmQDEQhE1uYIES//cjt9vWgZ+IKGcd3928TZvgGGZJ mUiaZk+V2HTxaAmRBubFueRcmZkXxEpn8+LPKDDrMVftQ8rZep7QHi9dkgS0dkBLuW+4fxCSIYrB 6+zXjvUoAYulsG8alaNRrWuIaIWCHSioAS85VCX+rXMD+rxWces0ZR3PUrlc6WQdz98HXIXW2VDR eAvf/7pFs9NTjiJCWCvESyxj8efzz6oXdRD6zPU7P89m3C/rlKCJHeqKgAyxDUIiflBwBkJ5XYto jbyXS3o1lWu48+CRPJP4DNn7/fL0fbNKMiQ+dwZnUfk5Rv6/Jd80JYwJT0ecG5WtMZ8fmld2OQR4 mN+9mkWyOVynyw4RYGckBmhx/AyY8dOnz+nKNUdvj4CjuqYElIASiPgEkib2ZvHtOV274TrBrbsr ROgtDHn38BZ6ikNpo0SOQmnSppMPSu76YT/Cb/38zhDGSBA/gYMHoHM/jI22CKdFGC6EQWdD2PDV q1c4119aOY4+8ACEsGTEO2sfiI3IuwehKz6fH2a9HmtbePzBew0CDfIBBhWqGpLrsp7Dum7mjtBY q9BkbfPs2TOubnzP7fVZ22Id1wuvR/BwtidPnjDbR5znMHACahx7+PChy37wyENYNfIgJmWvS3w4 9sQg8J3186No0aOJyIc+uLe4bjxLVrt9+7bwDk4ce1HuOO9TTsBswpCt5zaenq6eN7QD03Nn/QjC IJ5LV8+ZGQ/Xdu6cH3v/3ad06dITxGa1V08gedLY/Dw/pRu3AkLzX/0s9IxKQAkogbAjEDlyJMLn usfHt9OjPa5TmgR3dlTo9P33pggqENWMIS/aMw7vg1jgzhAeeOX2PUrLggo8/vi/P4JgAa861u/s FtRYJt8e+lsN4bgotJEgdgwRdyAIWm38yl3UmQuCVOEwyDndG0l453n2DEPuQIg3QRnymPlducWf YyOJsOg0tL1rUPO2N+IVdwxxnrvMF9VfQ2I4L8KlnZlYx0CuRRx3FpyQvw7eYPAKszJz1z44ztZz WtdDezwzNp4f3Jt4XDjDXbEOtEVFaHi/pWGPzKCeUbQ1z2U0zt1orQCNY84Gfmf49wGhtObZc27j 6XOBfuAEYRJCHK4HefvcGX6X8CxB/DSG/s730hyzLjFfGMbH9cLbESJeuqTxHZ4Dax+sg2PWtiMk lH9hj8ZUgcXz8GiR4yUl76rtPZqain0eYdJGSkAJvIkEXlTsexNZ6DUpASXw5hJQse/Nvbd6ZUpA CdgIhIbYF1FZOot9EfU6dN5K4HUSGLNsB309dRUlix+b/vnpcxHAX+d83J07JGKfZ+4I7s6k+5WA ElACSkAJKAEloASUgBJQAkpACSgBJaAElEAEJTB5zV6ZeQMOZYen65tgKva9CXdRr0EJKAEloASU gBJQAkpACSgBJaAE3joCJnw1apQ3Q6B4626gXvBrJ3Dq0g06ev6qhII3dpHL8LVP8AUn4D5Q+gUH 1G5KQAkoASWgBJSAElACSkAJKAEloASUQNgTaFGhANXmggLID6imBJRAyAlkSJaAzkzozLkfo1F0 zmf4ppiKfW/KndTrUAJKQAkoASWgBJSAElACSkAJKIG3igCKaiSKE7iI21sFQS9WCbwkAVPp+CWH CVfdNYw3XN0OnYwSUAJKQAkoASWgBJSAElACSkAJKAEloASUgBJ4cQIq9r04O+2pBJSAElACSkAJ KAEloASUgBJQAkpACSgBJaAEwhUBFfvC1e3QySgBJaAElIASUAJKQAkoASWgBJSAElACSkAJKIEX J6Bi34uz055KQAkoASWgBJSAElACSkAJKAEloASUgBJQAkogXBFQsS9c3Q6djBJQAkpACSgBJaAE lIASUAJKQAkoASWgBJSAEnhxAir2vTg77akElIASUAJKQAkoASWgBJSAElACSkAJKAEloATCFQEV +8LV7dDJKAEloARejMD169eoXJnCVKliSfrvv/8cBjlzxpfu3LnjsO/Zs2c0YvggKlk8L6VLk4iK FclNe/fuljZ3794lX9/TDu1DsrFkyQLKlycTfdX9C4+6hbS9R4P6N3rZawnJuZzb1qxengrkz0qn Tp5wPuRy+3XO1eWEdKcSUAJKQAkoASXw2ggs2P4PZf50BHWauDzYOQxZuIUSNvmOWo5aEGxbbRA0 gWt37lORLmOp1Ffj+TN10G1f5uiz5//RoPmbKd8XP9E7Tb+n3B1H0+4TF15mSO2rBBwIRHXY0g0l oASUgBKIkAQePLhPx44dkblD7IsUKZKsDxrYT0S9fPkK0rI/19uv7fffphKOwVKmTE2XLl2k06dO UJYs2Sh3zvT06NFDmjZjHvn4VLb38XTl2rWr9O+/l+nC+fMedQlpe48G5Ub37t176Wvx9Fyu2kFk xbXduXvb1WGHfa97rg6T0Q0loASUgBJQAm8RgR7TVtEfu45Rt3dLUZOyeQNd+YXrd6jOgBnkFSUy bfy+FUXl5auwq7fv0eWbd+nc1eA/R5y8eJ2ePntO568F39bd3P8+fYmaj5xPMaNFpZldGlLaJPEd mj7nz5f1f5hJpy5dp14Ny1KDkrnsx9v+vIS2HvGjuLGi06KeTShh7Jj2Y9aVSav30OS1eyl61CjU o0FZKp87vfWwrKPNLyt2UusqhallxQKBjmPHkp1HacWe43TgzGX65+wV8uLx0iSOR6VzpqOPfPJT 9lSJXfbzZOeDR0/oyLmr0vQ/4s/U/C8sbOq6vdR/9noZOtU78ejSjTt0ktkWzJQiLE6nY76FBFTs ewtvul6yElACbw+B+/fvy8U+fvzI4aLnzv1dttu2+5y+6d2f4FUWlT8oPX70mJ48eWzr88ixj8MA EWDj2dOnYXota9aspCm/jqdKlatRsw9bvhSRsJ7rS01OOysBJaAElIASeIMJnGCh7PTlG3T2yi2X V3nv4WM6et4m/jx9/vyViX0uJ+NmJ4QiWI7USdy0CH53lpTvEK4VYt6wRVtp5CfVHTot/usIrfn7 JEWJHJnyZwgQpM5evUW/bdxvjyyZt/UQfVK5kENfs/EnC3T7Tl2UzU9GL6R9Iz6j2DGjmcOyhOB1 mAU8LJ3t6u377Om4jBbtsH3BjeMQXx8+eEqH/P6Vn1/+3EmzujWiKvkzOXcPV9szNx2Q+XSsWYz6 N61Idx88pij+QnIrZnOfRccxbWpSAjfCabi6GJ1MuCSgYl+4vC06KSWgBJRA6BDo3KUHlS1XgbJm ze4woPG686lYRfbHjh1bljFixKRFi1fRIxYHixQp7tAnom3EjRcvTK/l0MH9tHr1n4TzvKzYF9Zz jWj3TuerBJSAElACSkAJeEbgIItcaw+cJu8Y0ahznRKedXLRCh59nWqXoK+mrqQZG/6m7vVLU4qE cewthyzYLOvvlcxJmZIntO+fvfmgXejDTohY7sQ+eyde+ffWPRq+eCt906icdbfb9UdPnlHlPlPo xMVrIjh2rluC6hTNLl58EGEPnfmXpvO8p7Ln4DEWZ8O72Gc8NqsUyCzXbBU9F2w7TE/YU7N/k4oq 9rl9IvRAcARejQ9ycLPQ40pACSiBCEwAIbR+fmfoKXuSWQ3bCOU03nXWY67Wb9+6RefPn3X4wOSq ndl35cq/hD5BWZw4cah8+UqUIkUqh2YmtNSIfNaDBQsVoRIlSrOnX+Dvgx4+fCD5/M6ePUPP+YOV J4Z2aB/cXIMaC2HFYIlcgyGxoK7FOs5lDmOGd2NYGrwrwcE5p6I5Z1BzBcNz5/zo4sXzbvubccJi ibDskyeP0+3bLx4eFBbz0jGVgBJQAkpACYQXAhfZu+7G3QceT+fx02fkd+Um/7/ucReXDYeyCIfP Fv2b+hDCQa2G0Ft43p2/ftuj83zEYbNJ48cmzO3HpdvsQ63Ye4L2+14Wka37u6Xt+7Eya7PNQ60n h/bCdh4/z96BN2Td3UuO1LYw29F/bJe5uWtn3Q9hEEJfdK8otLhXEw4lLke50yYVz74YXlEl/HX4 x9Vo38jPqGGpXNauwa5DeLx172Gw7awNkNsPHqHIvWe1B4+fyn7cW/B3Z3ce2CJo4rBIq6YEwoKA in1hQVXHVAJK4I0mUKRQTkqfNrHkpfuoxfuUPWsaLnCRi3LnSk/Tpk6Sa58z5zcqVCAbFS+am7Jm TkEN6teQ9s5gEDI7oH9vwpjZsqaiwgVzUBbO1dG0SX0RhpzbY3vqlIk8dnbKmzsjZc+WmqpVKUuH Dx9y1ZRmz/6NUiaPS5+2aSHHP+/YhsdPTrdu3pTtOrUqy/b7jerY+6NYR+qU8eno0X/s+/5cvpTq 1qlMmTMmpxLF8lDRwrlknj98/z97qKy9sWVl5szpVJCLVKA95lqhXFHavn2LpUXQqzt2bKUqlUvL ecES52/UoJYIf0H3tB11dS2zZs2gFMniSC7DxYvmSZGS/PmyyH2qXKmUPfdOvsnMAAAdOElEQVSh u/EPHNgnzIYMHiBNFi6YI9vg+v133wbqBtaftm5O2bKkFg7ZsqSkgT/0DSSWuporhORePbtSpgzJ 5BkpmD8b5c+bmRYtnBvoPGYHROZ0ad6hNKkSEOZqNeRqxPNQvWo5625Zb9e2pXCZNHGsbKPoC86N 5wwFV0qXLMDXkFL6mmIuGD9VinjCDu2d7bsBfeR8X3/VyfmQbisBJaAElIASiPAEIOx0m7yCMrQe RlnbjqS0rYZSjs9+pNF/7Ah0bTnbj6IkzX6gK5yLr/mIeZTm4yGUq8NoStVyMPWbtT5IYcgMhjDb qt9Opbjv96emw+aKdxwKeVTIk4Fa+hQ0zSQEFPNK3nwg4bzZ2/1IWdqOIITYBmXGuw9tJq/ZSwib hRmvvgZOXn3I84f8dvG9Y4hXYFYOBYYZAVA2XLy0rFhQvAbBr/+sDS5aOO66ziLqMC5CAmvDufxK 50jr2MCylZoFTwiWntjE1bvlfmVqM5zS8L0r22MiwVPSlcHbEdwHzt8k3o8ZWw+nvJ+PocZDZ0vz pZxHsMq3UyhFi0GyH/c2Ja/3nblOxFMzZpufFlOKjwbRTX9xEd6K2K773W/04fB5sg6vPljxbuNk OzU/KyEVI835dPn2ElCx7+2993rlSkAJvCABCDDwNINgsuLPPyhx4iSUKNE7IqB17/Y5tW7VjD7v 0EaKM2TLlkPOsmXLRmrT+kOHMz558oTq1alCY0YPF4+tXLnzUsGChVk8e0JrOR9cxQrFuWjGSYc+ 48aOkiq3Fy6co6RJk1Hy5Cnp77/3UPNmDRzamY379+/Jt733uVgFDPPEfI3FT5BAtq377t27Kx50 8OKD3bhxnT5u2Zj+2rGNMmfOSjVr1pV5YuwfRw6hX8aNMcM5LBHi+uUXbaUScIEChShatOh05Mhh +qBRXdq/f69DW1cbqNL73rvV6cD+fZQ3b356r8EHcs2bNq1nAbAUXb58yVU3h33O14KDuH+wCeN/ EhEUHoPZs+ckL69odPDA3yLM4v66s5gxY1HiJEkplre3NIkePYadYYIEAWEtpn+Txu/S4sXzKW7c uJQqVRrhMXLEYJo44WfTRJau5tq/7zcE8S1WrFj0QeMPhT2KeSxdutChr3UDHplZs2UXT1M8n1Zb tWq5PA/79u0mPEPG8Myt5mOwbMwCNmzoD3JueKaWK1+RqlWvRbg+9G3xYUO5DhR0ic3eo6j2jGu0 GrwR58z5Xc6XN6/rBNvW9rquBJSAElACSiAiEUBBjMp9JtNYzhEHD653i+fg0NHMhIIeKPrR+7c1 Dpfz4PETevjkKZXrMYkg0MWJGZ0gTMHDazB7541dvtOhvfMGvO2asMCHQhjI44Yw2yTxvOncpK60 4OvGXJwtoAfOjXnFih6NPiyfj+pyuOtdFgoX7gj4IjegteMavPuSsViGnHHjV+6iHcfOyQ9y9eGc VjN55xBOG41zPyPEFzaLQ3uDMnjnoUAH7HfO94dCG0EZjoMdCtB1qVcqqKYeH4Mg22nCcjrHRU1w vSk5ZHkv5xNsOGiWyzHAAzaYK+j+tOwv8ShE6C3CiyFG4t5sO3KWsqZMJLwLZ05J97gPKiWPWRYg /r4TNxbftwAxEvcS24n5XuLHeixhbFvb5AliSxESlxPTnUrADYHAMVpuGupuJaAElIAScCRw+fJF Gj5yLDVs2JjucHhjtapl6PTpUyLEQOSb/ht/O8fhs/Aeg2fdju1bRbxLnyGjDDRjxmTas2cXIdR2 6vS5VLSoLc8KxCd4r/n5+Yqn2C8Tpkl7iFQQ12CNmzSnwUNGyYeeZX8sps/afSwCpBwM4qV3nwGE H3jZweNs6rTZlDt3viB6kAhNTZt9xGJTc8qXL0C06d/vG/ppzAhaMH82fdbetedWkaLFafyE6SKG QZyrUa28iEzjxo6mMT9NdHteiG3/69NDRMeve3xLHTp2lrYQIGvVrEjIlwcWA76z8XA7UBAH4ImW J09+mjxlJiVLnkK84DA/hEdDJKtdp77L3pkyZaEtW/fJ+eHZCBFs9JgJLttiJ0JrBg4aSU2atpA2 8PKDWAcv0E9afyb73L388cciOTRl6mxCmC8M4uulixdk3d1LlSo1RCRdvWoFdenaU5ohBHori87G 1q5ZRbivMHhQIow5fvwE9uewcOGiLE6mpg+bt5JnAO0QzlumVAFhtJlFV1x7HeaEa5k/bxa1aPEJ molhTIRHQwytwQKxmhJQAkpACSiB8EwAAtXfvoG/SLx933XBsklr9hA821C1duX/mlPyBLb8dnO3 HKKWoxbQz8v/orbVitj3m2tHxdwRrapTC64aC2sxYr6IcJPYy6xdddv/9aatWSIa9FP2CFu7/5QI fUt6NZUQVhy35noz7U0Bi1ldG1KRLLZULhCkIEQGZ+Ldx7n/uk9ZSRNW7bYLcQiNzZgs4EtNhK/O 9fcUrF/C9uV2Q67QO2D2BinygXBeCF6uDNfTrHxeYYTCGr2mr5Yqvq7aYt8RLtgBS5UorngRyga/ IGzauZAHqufmTpdUxEfTznkJ4W7Iws2yu3mF/PTjJzVELEURklajFoqw6NzHbEN0zZbqHVrYo4l4 EF6/e59FVS+pAgxhtUDGgOIlEF1HLN5Gc/jZQj5E2AAuxoEfeHbCu282FxPJmz6ZGV6WiZp8Jzn7 /ujdjDIkS+BwTDeUgKcE1LPPU1LaTgkoASXgRKDfgMHUqFETEdxQYKFho6bSImmy5DR77lJ7nrxa td+ld95JLMd8z5yyjzJ50i+y/nGrtnaBBTvSpk3HAk0PObZ8+RLx9MPGxg3rROhBEY1v//eDnBf7 q9eoTWPHTcZqmBjEGohVVqEPJ6pd5105H3LJubL06TPQ9Bnz7Z6E8ET8rP0X0tTZ48y5/4b1a0UU hCecVUjEtdeoYQs53r7N9iHNua+n2xBdZ89ZIkIf+kD0LF2mvHSH4Bpa1p+fExTwiMzfiOPnU66A DEOex+AM32DDDh7ab28K77rsOXLZt12tVK1aQ3YjzBYCHWzfvj0OOffWrFkh+/ECT1JYxUpVuRJc FFmvU/c9+rRtR7vQh51J2KPRiNLmvpvnftfOHQ7XBJEbVqVKdRG0ZUNflIASUAJKQAmEUwIQjf7Y dSzQz6bDrv+/nrZ2n1xJV/Y0M0IfdtQqkk3EH3h8QfBytkEfVaGW7D0Xmf+Px0/HWsWkyRnO8ebO uk9ZIcIavMAg9OVhMSsos316INpv8ZhLyH1zpQmI7giqv/Huu8K57BCeCq++bu+Wcuiy/sApunzz rgheZXKmk2PpkyaQ3HnYMF5/csDFC669fxMfObKOC4ys5kq/7uw45+qDQVi12viVu6lCr18dfsr3 mkRT19nujbWtdR3nu37nAUHY/L5ZJRH6cLw237tfP7d9vrW2t657s7A3s0sjCUOOEjkSJY7rTcgZ CAHXKvShz7vFbCKoH+dNVFMCr5qAeva9auJ6PiWgBN4YAvnzB+RGwUXBC8osjbiHbQg2yVOkpKtX r9iLVCDE0dfXJvz5VKwq/awvCJuEwRvr3Fk/gjBlxBWE+joX1siVO4+1e5isw7MQ+fYuXrgg12JE pEePHrs8X8aMWQLNs3gJW/gHQoBv3bpJ8eI5fmgzA6EYBAwefj172Lz6zLFTJ0/Iqidimenjapkx Q2appGs9Zu6hq/xz1nYhWc/PIcxWM+dAwQ540znfS2vb6ixs/jppHH3dvROtXb2CPmrZhqsr+9iF Xmtb63qOnLklZBjPDIS89z9oxmLxWmkCcRkhxJs3bZB8iwhfNmJf1ao1rcPI+vHjR+nwoQMSNo0Q 4rP8PMIeP7bddzyPGTNlppMnjouX5+dfdJXndumShdKu/nvvy1JflIASUAJKQAmEZwKNSuempuXy Bpqi37836bNxSwPtP8HiIAxi2D4O/7Ra1Cg2n5oz3NfZCmdy9HZDKC8M4uDdB48Deeqt2Gv7TIQ2 i3s2CVboQzuE1Y5bsZO+nLicVnJxjTZVCnFev4x2UQttgjKIV538vfvQztmrD/tm+ofq1iuWXURL 7IM1KJGLdp+4QPO5ouwPzSuTlz8L21HHV5+8GcmH8w2uYY9FePch96ArS+AdU3ZfdPJMLJk9DX1Q JuAz8Kp9JyTP4EPOBRiUoWgJrHDmVIF45w1GSC2VI51bbzt4DCLMGt6bVzjf4b8shsIe871VUwKv moCKfa+auJ5PCSiBN5aAq+q15mKj+ntLme0r7G1lxBJrvjxzHN5bxm6yKAa76B+6mTBhInPolS1/ mzGFen/TnSsL23L/veiJEbJsDDnq3Il9Fy7YvglHSO2UyRNMF4dlkiSefTvt0CmYDXgxwtxVzA2m u0eHY/ifw5Pz9O7TX7wBp02dSKtW/Sk/OXPlkRBo5MsLyiqzRx3y/cGDT8S+jTaxD6G7G9avoRMn jtH2bVsoHXtgHjt2RMJtjciMcREu3Jxz88FjLzhr2LCJhJwjlBdi35bNGyRnJZ5V65jBjaPHlYAS UAJKQAm8LgIZ2SutrL+HmnUOxxPYvMqs+xB+iWIZsD/3BIhx1jZYt3r8OR8z2xDWjP1HHN/qZPA+ gxCIvIArWcxyDvl0ai6b/bgybyT2OpvEYbiYH37gDTihfT0JQXXVx3lfC58CEsqL/Sbk2LSBqLWU Q15hu09eoLY/LzGH6JK/wIVqtav3naRqBTPbj7la6cchreu6j6fDHKqL/H3GK9Ha1hT+8GXxFGG0 yA8Ig9iHH2PV+06jzW48MU0bLC9wdWJYojg2EVE2XvJlytq99BWHPiNPn5oSCA8EbF85hIeZ6ByU gBJQAm8RgQQJE9q9s27duhHoyq2eZUmT2kI14sa1ffN76/arDQXY+dd26tqlgwh9rT5pR0uWrqHt fx2keQtsBR0CTT6IHSjkYCwo0dJ4RiKs9pTvvy5/Nm3Za4Z6Y5cQH/v1H0Q7dh6S3Hvx4seXfIXN mzUMVM3XGYIJ5YVH382bN2jP7p1S4CRr1uzkU7GKNF/DXn9r166S9dKlyzmE7KI6L4Q+eO39PPZX Wr9xJ+3a8w9BRHS29xq8L6IkvABR5GSRfwgv8vl5eXk5N9dtJaAElIASUAIRmkDcWNHtgtOyPs3o 8tSvAv1cmfa1vWDFy1xsmZzp7SG0yIe3/uDpYIeDgDiIveoOju4ghTBQLXe/72UpPgHR0BOzipDW dfRdwkKfEbUQqoxKteZnjSUcd+amgDQk7s6J0OLGZW3eed/N2UiP/SvRWttn5Rx5sGccGRNciK61 n7v1uLFsX+7ecpOP0V0/d/u3Hz1LHccvEybI07i6bws68GN7wrOhpgReFwEV+14XeT2vElACbzUB VKZFbj8YcvE5GzyvYKj8ioq7sOQpUshy756dEn4pG/4vR44EX13N2j4k6+vWrRJPNx+fKtS330Ap FJEmTVpKnsw2H3djIYTUVPQ1bVDUAQYxD/n33Fm6dOnlEDzOokSJKm3R3vqD/Hev00w+vTuvQHxF vsMvO38lQivOe+bMaQ7rPhvk5RctVlLClCGwovovKu6anIQ+PpWlL7z+EB4Mq1otIIQX4dOmmMeo 0RMI+fvgSYiCM7FjB3hnSkd+wTNaisVC2MyZ02nZssWy/q6G8AoHfVECSkAJKIE3iwDyzZn8cfBI g/ed8w8qzoaWffVeGSqfO71497X8cYFHhTZwblSZ/Yor6K7u95F8yez77w06e+XlvzQ2Ibzvc+jz 1kGtA/304PnClu8+Tu4KnEgD/5deDfkLR86Fh/Daaewh52y50yalUjnSyu5+s9bTxRsBXx47t/Vk G5V3YRAq4SloNdzPkBryDSIqpHL+TDSQRVYURcHzkSJB3JAOJe3NZ8zb9x++UH/tpARA4PX+paT3 QAkoASXwFhOoVq2WXP24saPoyJHDdhK+vqdpyODvZBshl+Y//LJlfcRLCuLNqB+H2dtv5pDJz9p+ ZN8O7ZWnT215T077nrQPjfx9ffv2tG+7WsE1NWvynj1P4cWL5+mnn0ZK01q16rnqYt9XomQZ8vaO LdVchw75LlBYLUTA06cC5mPv+ApXTKj1fvZkQ/690DaE0U6dMtGhyrK3t7f9eYgVK1aQp4RHXYUK NlEPzxisdJlysixarITkCkSePYQHQzitVLmaHMMLckriB3b61AlZ4mX9utW0csUf9m3rCqpSwxA6 jErPKNCCfH7Gzp49Qy04LLh5swaBxGrTRpdKQAkoASWgBCIKgWoFbOGpIxZt5eqzNxym/YBzxq3j AhahZRAXJ3aoJ0UhrnIuuOYj5km1Vlfjo+ruRK7s+/CJ7fMb2njH8LKHx8bi9ZcxFOVYzwUuYKhk C888559WlQsR8hZiDgt3BP+FdAoW3zrUsBUqMR6DznMc2rKqjIkKvCW6jZecgE8sXoAQClFQxBND bkDkErzz4BEN4/tnbMMhX6mkbLY9XT71n4f1OUCoc68Zqz0dwqEdiqnAdhw757AfG35cyKXR4Fni peksVAZqrDveagIBCQLeagx68UpACSiBV0+g05fdpaABCndUq1KW8uUvQF5RvWjPnl0SMpsyZWr6 olM3+8RQCRXFDmb+Po3FwAG0ZPF88dxCqGWcuC/2zaF98CBWUBBi9KhhhMIYFcoVlUqwf+3YRufP B+1ZhiG3bNlIeXJnpDx589E/hw8R8vShIMWn7ToGcUaSCr7I/fbdgD7048gh9OfypTxGfulzYP8+ Onr0H2rLVW2/6d0/yHHC8mDefLb5XL50kYoWzsUhssmpVKmy1Kt3v1A5LSoCf9X9Cxo0sJ/kvYsZ MyatWrlcRLhi7LVnQp2DOhlCeRcumGNvUqZ0eVlHUQ54+S1fZsuxgyIi1tyR8CgtUqQ4beOKx127 dKQlSxbQgwcPuKjHeim+YR/QslKtei2pumtCtZ29+uDBupLnDzt29Agh96CaElACSkAJKIGISgBV eFFx9hwXYyjZ/RcqkT2tiHEXuIjEtqN+Umzj0pTu4rEWGtf4TtxYUim2BuelgwiEghbwInM238s3 qNOE5dR/1gbyyZtBzg8PO4TvIr8dqse+jM3dekjCaZGPsHi21C6HwlzL585AKJgxixl9WD6fy3bW nV/ULk6T2asPYqIry54qMU3qWE+uDfkAW4ycL4Jd5hSJWFR8Rqf5uk3OZXgJBmVJ2ePxfS7sMY2r 9n43ZwMt4GIi8TjUGVwRoh1Sg3gI0fAEVw0u1nUc5UyTlJ+Bs3TuBavwoqrvst3HqBvnAJzHc8M9 3TWsrcxt7f7T4jGJOR45d9Wjgi0hvR5t/2YQUM++N+M+6lUoASXwCglE9c9BBmHOau72o41XtGjS 1LTBBsSaNeu2EcJj8eFkx/atBC+9KPxN47v1G9HqtVvJeI9JZ34ZNPhHavZhS86t5i2CF/KwFSla nJYv3yChlFG4EIjxBEQfM8eoluTPDvudrgHHzBxN35LsZYe8cSiuAW+9BfNni2fWyFHjpOKrc2GS qBx2C+vctQe1/PhTvrbnkvsNQl+OHLloMef8S53aFoqBduY8znNs3+FLKUQB0ROefHPn/C4/KCyB a65Rsy66B2nO14LG7s4nx/zvrfM1uTpJ7tz5qEPHzuIVd/nyJdq/f6+D6Orq3BgnMt8jeNLhB/fL mHP7bNmyU02+xjt3bhMKX8yYPplQsAT7xo2faroFuSzPnn3wkITlyp3XHjqObWvYritPS9zf4sVL ifAMsRVFNypUqEQ9e/VFd3JmBIGwNufoM1a/vmMV3gwZM8mzCbE3ZSrXfxyYvrpUAkpACSgBJfCq CJhiD17+RR+cz+sV1fYncxT8380edsYgDm0Z+AnV5cq3T9kbHsIWijRgGSuaF31WvaiD0Ofl/3++ qdRrxjHjYmysGzPtzfmxv3jW1NSviY80GfvnToLo5WzZUyeROSEEdDZXzJ28Zi/9yx5vmOeULwL+ n3bu52rbVNK1stl06Iw0bVAypwMP5/4fcIgvDKKX8XwzrM3S2sc7RjQa1bqGnVka/yrF1ja4hr+G tqFmLB5mTJaQRcf/pLDHKa6MjDtTiCsdD25RxWVVZes4WB/Zqjq1rFiAvFkY/OfcFQnpBd/1A1pS yoRx5V5EsvtD8udH//tnvR9mzDJc2GUQnzdOzOgynzlbDtITDg8e1642odoyPts7m2Hq/Dyg3f8a V5Drw98HyAf4gD0kTbtMKWx5v2PHjMZjh92X/c7z1e2IRyASP0D/uZr206fP6cq1wG8ertrqPiWg BJRARCSQNLE34b3u2o0HIZo+8pk95f/AEVLpbLdv3+Y8ezEDFSVAvrSHDx+KYObcB9sIlT131k+E oNSp0zgIdu7a+/qeomScNw/iCQzzQuglRBerYU4I+bSKM0Fdg7tjT548prN+fhQtejQR+cw58d+I Nf8etuHdBXEQwuMtriaM6ropUqR0W33X1RydrwGehNFYNE2ZMpXD+aztnNfdXYu784Hf3bs270NP cwLeu3eP/Px8KUH8BJQseUAeQ3fnxhwRBg2z3it37dEWXn64f8iZF1z4rgxsecF9e3D/AXnzc2IV F9Hk/v378syYZ8jSzb567dpVgvcp8jRivs73196QV/r17UU/c6h2wUJFJL+g9RjW8SxAqNaiHc5k wnY7edLY/P7zlG7c0tw/YUtaR1cCSuB1EYjMlWfxue7x8e30aI/rdBPu5gbBCJV1IdRYtDyH5gjJ xDmcC1WYRvCaO8OVYhG+myB2DJdVeBHS+ozDPSFqORvGhzl7pCHfHfYZocf0c9feHMcSbVC9Fn1T JYobaGxrW3frmPNz5mOdF0JnH/DYnnjA3X3wWLiZ/hD9Hjx+IqzdnRP3A+08yXkI3hD6IJxBVEPe xJAaznWKPedSsKciBDSYq+vGfnf3A8dgCKv145yImDvmA8NYUFyc5xbU84B+6HP26k0p+pGeK0Vb nz1Ug8ZzZMRYtFd7OwhEjpeUvKu29+hiVezzCJM2UgJK4E0k8KJi35vIQq9JCbwsAYiKBfJlJYiD 3w8cTs2bt3rZIbV/KBFQsS+UQOowSkAJhFsCLyP2hduL0okpASWgBJwIhETsC+xP6jSYbioBJaAE lIASUAJKIDgCyznUF0IfvC/rWMJ5g+unx5WAElACSkAJKAEloASUgBIIXQIq9oUuTx1NCSgBJaAE lMBbSWDlimVy3VWr1qT4HNKspgSUgBJQAkpACSgBJaAElMDrIRDyoPbXM089qxJQAkpACSgBJRCO CQwbPoYGfDfEbV7GcDx1nZoSUAJKQAkoASWgBJSAEnijCKjY90bdTr0YJaAElIASUAKvh0C0aNE5 hDf66zm5nlUJKAEloASUgBJQAkpACSgBOwEN47Wj0BUloASUgBJQAkpACSgBJaAElIASUAJKQAko ASUQsQmo2Bex75/OXgkoASWgBJSAElACSkAJKAEloASUgBJQAkpACdgJqNhnR6ErSkAJKAEloASU gBJQAkpACSgBJaAElIASUAJKIGITULEvYt8/nb0SUAJKQAkoASWgBJSAElACSkAJKAEloASUgBKw E1Cxz45CV5SAElACSkAJKAEloASUgBJQAkpACSgBJaAElEDEJuC2Gm/kyJEoXhytqhexb6/OXgko gaAIRIoUiaJGjazvdUFB0mNKQAm8EQS8vPS97o24kXoRSkAJuCYQybY7apL0FKlgLddtdK8SUAJK IKITiBbT4yuI9B+bx621oRJQAkpACSgBJaAElIASUAJKQAkoASWgBJSAElAC4ZaAhvGG21ujE1MC SkAJKAEloASUgBJQAkpACSgBJaAElIASUAIhI6BiX8h4aWsloASUgBJQAkpACSgBJaAElIASUAJK QAkoASUQbgmo2Bdub41OTAkoASWgBJSAElACSkAJKAEloASUgBJQAkpACYSMgIp9IeOlrZWAElAC SkAJKAEloASUgBJQAkpACSgBJaAElEC4JaBiX7i9NToxJaAElIASUAJKQAkoASWgBJSAElACSkAJ KAElEDIC/wd8Jtz7r9fdQQAAAABJRU5ErkJggg== --000000000000bf2d5a0596514e48-- From nobody Sat Nov 2 04:17:54 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AB08120A61 for ; Sat, 2 Nov 2019 04:17:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D6MHaPu5TzI6 for ; Sat, 2 Nov 2019 04:17:50 -0700 (PDT) Received: from mail-oi1-x22f.google.com (mail-oi1-x22f.google.com [IPv6:2607:f8b0:4864:20::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B0FB121626 for ; Sat, 2 Nov 2019 04:17:29 -0700 (PDT) Received: by mail-oi1-x22f.google.com with SMTP id y194so10312883oie.4 for ; Sat, 02 Nov 2019 04:17:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=i6lgF8unou375bEUgW2oZXRpemPGxZMSltX+9Vxqals=; b=hYtWYqSPQzM8vBBJ2z9t9sbb8CIHCRyPZl+J3tn0gXtbi6F5ZTaI1VQ/fxTuFEjARX 6Xn2W7hkk7/9+c5k5sVC9psuQ/w8b9Ub/gpRj3PmUPOo3FedMZJS9NCnoFCNy7+rp4Dk eG8vJ5yXQGiVEapAGRkVsYrbM1qe1NjZX0hX3iPR4lfEbR1uo3tmjDoinUls2nYA7Z0I 5JRtN+D0K3tRde9xiOTbsBCzOzL5fwT6bXs3kl1N5Iwze6zHJr/tAT7Yes64Y1LJlpls tT9uuMwu1k/WgZd0dggGmm5WSg3ZJOUX5GWQVEKmR5+l9vcnNZvhk8/YEHxOJ7TJxf88 HhFg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=i6lgF8unou375bEUgW2oZXRpemPGxZMSltX+9Vxqals=; b=t3zofRMOyPxUufzwXOjPmp+R/dbRzOAliBTzj0KzGwBSu7ioTsF8Zd6CeH7UUqYkIa M6e6+k0EaLPoKjo8Ha+mQVBxbkNX1ABb4q8NCp+TAkLvYdipxw7MMvLpcJLqQJcSHquO GP2RwCO9F5gmrrodAX7fnMQ9yFmpqxM65hkdhRo214sn5tk9BzYJNviLNdFcNLXm+kix G5jSfc4d6Py4HRPySqhH0BuD6uR4Bg+sokyWaIChPB1FlB6qj11h6bkJcetzq+cnuBaV fOnAmrE8pNv+1vlgPasWsjcNdBFSf0ErsNg6MhTJe3rbDRZeimfzqaLUsFYlvAfbjp3X srzg== X-Gm-Message-State: APjAAAVlXVO4D+cqM/TV0dWSQ99DnqtTHtfXTy52XF/Zx6/NaU8L1mPY t5skwiyfksyLpEjslHtRRAMA4DLzal4doDorHIA= X-Google-Smtp-Source: APXvYqzWmGzxJ7Yc9amBkm27msVPolY3AhbG9q8Nw6QHcpRED8qFEUMLpYDvjm6Wht0IPp04zGBJzdkAC2A9/qyKjOk= X-Received: by 2002:aca:5d8a:: with SMTP id r132mr11927657oib.119.1572693448838; Sat, 02 Nov 2019 04:17:28 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Sat, 2 Nov 2019 07:16:53 -0400 Message-ID: To: Giridhar Mandyam Cc: "rats@ietf.org" Content-Type: multipart/alternative; boundary="0000000000005bd32005965b3a0b" Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 11:17:52 -0000 --0000000000005bd32005965b3a0b Content-Type: text/plain; charset="UTF-8" Thank you, Giri. Your request has been noted. I'll post the proposed agenda on Monday. We are still waiting on some requests, but will post on Monday regardless. Best regards, Kathleen On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam wrote: > I would request 5 minutes to introduce > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and > summarize claim differences between it and EAT. > > > > Thanks, > > > > -Giri > > > > *From:* RATS *On Behalf Of * Kathleen Moriarty > *Sent:* Monday, October 28, 2019 7:37 AM > *To:* rats@ietf.org > *Subject:* [Rats] Agenda Requests > > > > *CAUTION*: This email originated from outside of the organization. > > Greetings! > > > > This is an official call for agenda items. We have received some and will > be sorting through those to post soon, but would like to make an official > call for agenda items. > > > > -- > > > > Best regards, > > Kathleen > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > -- Best regards, Kathleen --0000000000005bd32005965b3a0b Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thank you, Giri.=C2=A0 Your request has been noted.=C2=A0 = I'll post the proposed agenda on Monday.=C2=A0 We are still waiting=C2= =A0on some requests, but will post on Monday regardless.

Best regards,
Kathleen

On Fri, Nov 1, 2019 at 1:50 PM Girid= har Mandyam <mandyam@qti.qua= lcomm.com> wrote:

I would request 5 minutes to introduce https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and summa= rize claim differences between it and EAT.

=C2=A0

Thanks,

=C2=A0

-Giri

=C2=A0

From: RATS <rats-bounces@ietf.org> On Behalf Of = Kathleen Moriarty
Sent: Monday, October 28, 2019 7:37 AM
To: rats@ietf.org=
Subject: [Rats] Agenda Requests

=C2=A0

CAUTION: This email originated from outside of the organization.

Greetings!

=C2=A0

This is an official call for agenda items.=C2=A0 We = have received some and will be sorting through those to post soon, but woul= d like to make an official call for agenda items.

=C2=A0

--

=C2=A0

Best regards,

Kathleen

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000005bd32005965b3a0b-- From nobody Sat Nov 2 04:24:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E38D3121628 for ; Sat, 2 Nov 2019 04:24:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.737 X-Spam-Level: X-Spam-Status: No, score=-1.737 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_05_10=0.26, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rAm81TjkKU2s for ; Sat, 2 Nov 2019 04:24:49 -0700 (PDT) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11FBE121626 for ; Sat, 2 Nov 2019 04:24:49 -0700 (PDT) Received: by mail-ot1-x32b.google.com with SMTP id e17so2059554otk.6 for ; Sat, 02 Nov 2019 04:24:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=r2SyygfviOrIYWrPqactEwTf+oezPJcVNHAkrhK3uTE=; b=PTbd8E5/hKp0wAmjUhqrdJUSyCi5d/4nd/NxMw70TI9Ib/f2EwMZusckWqDBne9h4S gfY9My8gbFC2GpKWWEcC8aEf62ZzOMZTiQNE7U3itI5eXxXVgbB8NkAFpOQ6oW4UPPD+ 1Uz45vJx1dX7vWthlTWXQKhVO3i2a4obcdAseSbTDoloo93JafQSAyUyfibRNGi47j4G ZlM/Okw9UgKpVai5smTzueHgc47Cl5nor3IVNyNWUYdxGUvrZZ4tC9+g9vNCo8JZGVsP UB/GNKZ0ZDyzgTCZX17I/CDEXgFOGjux5mtvrmCzvkoPYuP0HNsSuv4TYqXJy0dVoCw5 oMVg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=r2SyygfviOrIYWrPqactEwTf+oezPJcVNHAkrhK3uTE=; b=Z6ccZ7fxgFzZABqrhIoH/O3nldIBCcnxh/9qHReyyUInnqDz7KDVRsQQlS7Z2dV7EU QwWbj1vZG7eumXOub1w3QIyVGU08md2JR3dtG9hApvG/LnZNfbYE9/XzNSkitjz0T2LR /YhhQuWkM8EXmrjOKsnV69eADLH49bZ3CaJnvk0jiM5eugMsE9nVINBy34H2CXIyFlnY x8dRHKkvSrvu6IOupI8GhuWTvbxXwS/x/nMM4jxX54FGGfpd4D7RxnYIl3GpyewmcC1O 6uBrX340UZPU6ip36XzLBAovi9Ezlb0yAMCNgk8qOSwC7tuKn8t/MyMpHWDpWu8K8uik 2RQg== X-Gm-Message-State: APjAAAWhLqh0sihMksld9VK6Asl92LACBKiYFZHgnVtkSuQ0bzFwAxHs OsFVOxqH08r9s2xIRqAi2PnjaQ7nz2cnVQzemvDPUwNV X-Google-Smtp-Source: APXvYqxwL3ZcgnRjD6yOaXqthgC0XiXBg0q7iuM81eI+dNjjqZU075bEh8hi/8rfSYHD3WpKXpZ6MA8r78Nl8stvuzE= X-Received: by 2002:a9d:7219:: with SMTP id u25mr12109781otj.342.1572693888432; Sat, 02 Nov 2019 04:24:48 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Sat, 2 Nov 2019 07:24:12 -0400 Message-ID: To: Laurence Lundblade Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000008f7f3705965b5411" Archived-At: Subject: Re: [Rats] EAT material for Singapore X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 11:24:51 -0000 --0000000000008f7f3705965b5411 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Rats participants, please read the draft if you haven't yet, plus the pull requests for an informed discussion. Thank you, Kathleen On Fri, Nov 1, 2019 at 10:46 AM Laurence Lundblade wrote: > Hi folks, > > Rather than publish a new EAT draft for Singapore we have pull requests > for you to review. The hope is for consensus on them in Singapore after > which they will be integrated into a new EAT draft published after > Singapore. Here=E2=80=99s the pull requests: > > Submodules =E2=80=94 This u= pdate > unifies submodules and nested EATs so they both occur in the =E2=80=9Csub= mods=E2=80=9D part > of a token. It clarifies inheritance (there is none), simplifies naming o= f > submodules, and defines attachment type. > > UEID =E2=80=94 This update = includes > a statistical analysis based on the birthday problem to justify upping th= e > number of its bits required to 256. > > OEMID =E2=80=94 This update= fills > in the details on the use IEEE MA-L and Company IDs to identify device > manufacturers > > Security Considerations =E2= =80=94 > This improves the security considerations section. > > Boot state and debug =E2=80= =94 This > update makes the debug state description a 4-state variable rather than 4 > Booleans. > > Nonce =E2=80=94 This update= s lines > up the token identifiers and nonce from JWT, specifically clarifies that > the nonce comes from the relying party. > > General Claims Characteristics > =E2=80=94 This describes som= e > conventions and goals when defining new attestation claims. > > If you click on the links above and then the =E2=80=9CFiles changed=E2=80= =9D tab, you can > see the text of each. You can comment in email, but it is better if you > comment in GitHub on the pull request itself so it is more easily tracked= . > > LL > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --0000000000008f7f3705965b5411 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Rats participants, please read the draft if you haven'= t yet, plus the pull requests for an informed discussion.

Thank you,
Kathleen



On F= ri, Nov 1, 2019 at 10:46 AM Laurence Lundblade <lgl@island-resort.com> wrote:
Hi folks,

Rather than publish a new EAT draft for S= ingapore we have pull requests for you to review. The hope is for consensus= on them in Singapore after which they will be integrated into a new EAT dr= aft published after Singapore. Here=E2=80=99s the pull requests:
=
Submodules=C2=A0=E2=80=94 This update unifies submodules and n= ested EATs so they both occur in the =E2=80=9Csubmods=E2=80=9D part of a to= ken. It clarifies inheritance (there is none), simplifies naming of submodu= les, and defines attachment type.

UEID=C2=A0=E2= =80=94 This update includes a statistical analysis based on the birthday pr= oblem to justify upping the number of its bits required to 256.
<= br>
OEMID=C2=A0=E2=80=94 This update fills in the details on t= he use IEEE MA-L and Company IDs to identify device manufacturers

Security Considerations=C2=A0=E2=80=94 This improves the= security considerations section.

Boot state and de= bug=C2=A0=E2=80=94 This update makes the debug state description a 4-st= ate variable rather than 4 Booleans.

Nonce=C2= =A0=E2=80=94 This updates lines up the token identifiers and nonce from JWT= , specifically clarifies that the nonce comes from the relying party.
=

General Claims Characteristics=C2=A0=E2=80=94 This de= scribes some conventions and goals when defining new attestation claims.

If you click on the links above and then the= =E2=80=9CFiles changed=E2=80=9D tab, you can see the text of each. You can= comment in email, but it is better if you comment in GitHub on the pull re= quest itself so it is more easily tracked.

LL
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000008f7f3705965b5411-- From nobody Sat Nov 2 12:14:35 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40AAA12002E for ; Sat, 2 Nov 2019 12:14:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zyyY-OtGGFqR for ; Sat, 2 Nov 2019 12:14:31 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 336DB12006F for ; Sat, 2 Nov 2019 12:13:50 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA2JDkWo027900 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT) for ; Sat, 2 Nov 2019 20:13:48 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sat, 2 Nov 2019 20:13:41 +0100 To: References: From: Henk Birkholz Message-ID: Date: Sat, 2 Nov 2019 20:13:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Nov 2019 19:14:34 -0000 Hi chairs, hi list, we came up with these requests: 05 min Current Status Report (incl. some overall hot-topics) 15 min Use Cases (incl. 5-10min discussion) 30 min Architecture (incl. 10-15min discussion) 10 min C/R YANG Module (incl. scope and title discussion) 15 min C/R Interaction Model (incl. IM for protocol IE discussion) Viele Grüße, Henk On 02.11.19 12:16, Kathleen Moriarty wrote: > Thank you, Giri.  Your request has been noted.  I'll post the proposed > agenda on Monday.  We are still waiting on some requests, but will post > on Monday regardless. > > Best regards, > Kathleen > > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam > > wrote: > > I would request 5 minutes to introduce > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and > summarize claim differences between it and EAT.____ > > __ __ > > Thanks,____ > > __ __ > > -Giri____ > > __ __ > > *From:* RATS > > *On Behalf Of * Kathleen Moriarty > *Sent:* Monday, October 28, 2019 7:37 AM > *To:* rats@ietf.org > *Subject:* [Rats] Agenda Requests____ > > __ __ > > *CAUTION*: This email originated from outside of the organization.____ > > Greetings!____ > > __ __ > > This is an official call for agenda items.  We have received some > and will be sorting through those to post soon, but would like to > make an official call for agenda items.____ > > __ __ > > -- ____ > > __ __ > > Best regards,____ > > Kathleen____ > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > > -- > > Best regards, > Kathleen > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Sat Nov 2 18:30:17 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE6DB120077 for ; Sat, 2 Nov 2019 18:30:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Imavk2cG; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=mHl8Orp3 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pI5rn7ZV2Cmk for ; Sat, 2 Nov 2019 18:30:14 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D0CB112002F for ; Sat, 2 Nov 2019 18:30:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3966; q=dns/txt; s=iport; t=1572744613; x=1573954213; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=yCwYJr5RGyKPFD9lSrkDOOCVqKYgKndo+ovQpeq5HGY=; b=Imavk2cGqMoaq8gc2E5siGMcnBQkWfK3RXoDiPFXmWQjvGNFjbpLdrM6 Ni77UVZYq++mbHHlbdO/7epEs4q0hB7+ihGT+to8Kr3MkVuMvAQmRI8MC S0kSt2SychZWGbMfgrwk+UYoLIKoG8yAhLc5bUq6erqDb0yjnzRUIDNfT c=; IronPort-PHdr: =?us-ascii?q?9a23=3ARx6+jBJs7Aouf6m/odmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeBvKd2lFGcW4Ld5roEkOfQv636EU04qZea+DFnEtRXUg?= =?us-ascii?q?Mdz8AfngguGsmAXEvwJfv1bio1NM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DsAwBOLb5d/4gNJK1kGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBfYFLUAVsWCAECyqEKYNGA4p1ToIQl32BQoEQA1QJAQE?= =?us-ascii?q?BDAEBGAsKAgEBhEACF4NkJDgTAgMLAQEEAQEBAgEFBG2FNwyFUQEBAQEDAQE?= =?us-ascii?q?QCwYRDAEBLAwPAgEGAhEBAwEBAQICIwMCAgIlCxQBAgYIAgQBEiKDAAGCRgM?= =?us-ascii?q?uAQ6WGZBiAoE4iGB1gTKCfgEBBYJJgk4YgX0aAwaBDiiMExiBf4ERJx+CTD6?= =?us-ascii?q?BBAGBXQEBA4ErARIBNoJ5MoIsj36deAqCJIcRjiUbmWWOQogukSkCBAIEBQI?= =?us-ascii?q?OAQEFgWkiZ3FwFRohKgGCQVARFIMGGINbhRSFP3QBgSeLFYIwAQE?= X-IronPort-AV: E=Sophos;i="5.68,261,1569283200"; d="scan'208";a="658108676" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 03 Nov 2019 01:29:57 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id xA31Tvot022917 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 3 Nov 2019 01:29:57 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 2 Nov 2019 20:29:56 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sat, 2 Nov 2019 20:29:56 -0500 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sat, 2 Nov 2019 21:29:56 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MsTXlMh5Z9kLNdynemehAWTlrPoDGYRMQdNE+Y3Dfj/g6smy+f5BxZas/tCKA75KBNzNtOHhrPYOWrioF5w9BCE+dpHljLfmxey70Ivsz+AY9Q77dmyS48QhJLJfPz00a+lxhuIqv6ySXKdQJmyA/bvaZWmrzcJz34ImVAq8cmreEvYXT8/XuGJikfWlGLLexYmX0Yc/pBG6yghqTYauEPGR45vddEZL4nio9MWrpVtxDu4LtBPJkUjUhVvrSCcQNy7Wgmn7DR8W90YVDwfQw+qrwAt0S/u8F2TOmZg69CHBSBmQcPdJZydfe/j0Lz3v2qXqm8rxYqH/FL/TpzeATw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yCwYJr5RGyKPFD9lSrkDOOCVqKYgKndo+ovQpeq5HGY=; b=gcEzS3pbnYmG6Pg1srFtxOK2gjh9N8qlXF3lp+PsUusGm4QzZ0JWqVOfL/Vl6mbG5ozjzeAg068sQPVl1y23Aoghuya1+LnH4BUYRypurEp2Bijv9rvySmolfaYJIhyVdr/q292Rbfc3G8TXEXKArVPEs7foUmSzdIZy9qLxjoMKDsq80oJNeryl6227wY73oYQ0Vj2qwiUiGgBy4/432yW3P7EEm/7eIfAao7HZdWSSlkbgnUtSpPUk0eGI8Ah5o2txFU5IE1ZVOwnma1s1vUFOkKqIZku/FGtPa5edl9YlJ8YwFWXoP1Ool07rYRp1dmEPzsDSGADaJaP/fRCjnA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yCwYJr5RGyKPFD9lSrkDOOCVqKYgKndo+ovQpeq5HGY=; b=mHl8Orp3yptk/XW3PV/ELRgP3Hju9heQXgPwERHuj9QCMB9je+Gb5Fiv1+iK//BFGzJ92W8Hg1iuDuwj/fnMJOC5x+dqh2s65wUh+SVOB+oEoF3ZSOZtg5M0waXGifWSZbaCfBoFtvbFp/DxFN9RTvmczZPaJo3QBKf0Cn3lw6Y= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Sun, 3 Nov 2019 01:29:54 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2408.024; Sun, 3 Nov 2019 01:29:54 +0000 From: "Nancy Cam-Winget (ncamwing)" To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Agenda Requests Thread-Index: AQHVjZ0/ooJmfI/JD0G9SnM4v/f9rad2noIAgAEkUoCAAIU2AP//88YA Date: Sun, 3 Nov 2019 01:29:54 +0000 Message-ID: <6E37E306-7AE2-47A8-8D20-383D486C29EE@cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.f.191014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1002::353] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1f28f384-5054-4e78-0f38-08d75ffd546a x-ms-traffictypediagnostic: MWHPR11MB1791: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4941; x-forefront-prvs: 0210479ED8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(366004)(39860400002)(346002)(376002)(189003)(199004)(45074003)(81166006)(58126008)(186003)(110136005)(2906002)(966005)(6246003)(25786009)(102836004)(14454004)(316002)(6506007)(53546011)(66556008)(46003)(7736002)(256004)(14444005)(6436002)(71200400001)(66946007)(66476007)(64756008)(76176011)(8936002)(305945005)(71190400001)(66446008)(76116006)(91956017)(6116002)(81156014)(8676002)(446003)(11346002)(86362001)(478600001)(2501003)(2616005)(6486002)(476003)(486006)(33656002)(5660300002)(229853002)(6306002)(36756003)(6512007)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1791; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Ex/2+yJAV+kcz30/i1z4TxdmIqpOVs/xiLZF8+9m/MYMcma3sOmPl6WFKteZ69RTdflqFC/oa1Qy4VnX4yOP37LYVQxBfhIqVdbinnaIqhgptiep0lVB1UNO6vprobaldNQucTaMX1wtjh1teHwm4PA1gVep52u8sxEoiJDfDlrxGDGZrM4loLZGGN3mvnKpev7WSrxB5e290x0MrOW2T6Wa1MrJ0gqp9z9ZVTD4sJ7pQ+UtNEr0XIslJwkdwkROWgNHiPQgiOWzsG6orUAlrdfrfb0LAXgGJbnWB7xW4gOpM96agFRAeAtF7InBxpWwiCmwrnki4OBff8XDquuPPrQ8p5EiiVd+aFR/UUMGBChKlVP/fAKNnt/CyzRtJHMeADFY5PQRyvBV8ehCUhIQguLRWOSEjFvO8MEXtKyq6d0FArtutr4XB6LKPbpVqo0aV1bbQMplmNGV3Ej/QuSD1QoogdBKirxE7gERvFc1OG8= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <6760252093BB1A45A9F7E3E966CC734F@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 1f28f384-5054-4e78-0f38-08d75ffd546a X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Nov 2019 01:29:54.2976 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: w4hpOjLt7cVGk591WZ2mrtGkE4iqBuQQROubqqx+sPIsTiUj5qNGctrYUQe/Mb2Cd5wx2pljWFDYY7QJJ1a1ZA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1791 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 01:30:16 -0000 SGkgSGVuaywNCldoZW4geW91IHNheSAid2UiLCBjYW4geW91IHNwZWNpZnkgd2hvIHRoZSBwcmVz ZW50ZXJzIGFyZSBhbmQgaWYgdGhleSB3b3VsZCBwcmVzZW50IGluIHBlcnNvbiBvciByZW1vdGVs eT8NClRoYW5rcywgTmFuY3kNCg0K77u/T24gMTEvMi8xOSwgMTI6MTQsICJSQVRTIG9uIGJlaGFs ZiBvZiBIZW5rIEJpcmtob2x6IiA8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBo ZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCg0KICAgIEhpIGNoYWlycywN CiAgICBoaSBsaXN0LA0KICAgIA0KICAgIHdlIGNhbWUgdXAgd2l0aCB0aGVzZSByZXF1ZXN0czoN CiAgICANCiAgICAwNSBtaW4gQ3VycmVudCBTdGF0dXMgUmVwb3J0IChpbmNsLiBzb21lIG92ZXJh bGwgaG90LXRvcGljcykNCiAgICAxNSBtaW4gVXNlIENhc2VzIChpbmNsLiA1LTEwbWluIGRpc2N1 c3Npb24pDQogICAgMzAgbWluIEFyY2hpdGVjdHVyZSAoaW5jbC4gMTAtMTVtaW4gZGlzY3Vzc2lv bikNCiAgICAxMCBtaW4gQy9SIFlBTkcgTW9kdWxlIChpbmNsLiBzY29wZSBhbmQgdGl0bGUgZGlz Y3Vzc2lvbikNCiAgICAxNSBtaW4gQy9SIEludGVyYWN0aW9uIE1vZGVsIChpbmNsLiBJTSBmb3Ig cHJvdG9jb2wgSUUgZGlzY3Vzc2lvbikNCiAgICANCiAgICBWaWVsZSBHcsO8w59lLA0KICAgIA0K ICAgIEhlbmsNCiAgICANCiAgICANCiAgICANCiAgICANCiAgICBPbiAwMi4xMS4xOSAxMjoxNiwg S2F0aGxlZW4gTW9yaWFydHkgd3JvdGU6DQogICAgPiBUaGFuayB5b3UsIEdpcmkuICBZb3VyIHJl cXVlc3QgaGFzIGJlZW4gbm90ZWQuICBJJ2xsIHBvc3QgdGhlIHByb3Bvc2VkIA0KICAgID4gYWdl bmRhIG9uIE1vbmRheS4gIFdlIGFyZSBzdGlsbCB3YWl0aW5nIG9uIHNvbWUgcmVxdWVzdHMsIGJ1 dCB3aWxsIHBvc3QgDQogICAgPiBvbiBNb25kYXkgcmVnYXJkbGVzcy4NCiAgICA+IA0KICAgID4g QmVzdCByZWdhcmRzLA0KICAgID4gS2F0aGxlZW4NCiAgICA+IA0KICAgID4gT24gRnJpLCBOb3Yg MSwgMjAxOSBhdCAxOjUwIFBNIEdpcmlkaGFyIE1hbmR5YW0gDQogICAgPiA8bWFuZHlhbUBxdGku cXVhbGNvbW0uY29tIDxtYWlsdG86bWFuZHlhbUBxdGkucXVhbGNvbW0uY29tPj4gd3JvdGU6DQog ICAgPiANCiAgICA+ICAgICBJIHdvdWxkIHJlcXVlc3QgNSBtaW51dGVzIHRvIGludHJvZHVjZQ0K ICAgID4gICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaWQvZHJhZnQtbWFuZHlhbS1yYXRzLXF3 ZXN0b2tlbi0wMC50eHQgYW5kDQogICAgPiAgICAgc3VtbWFyaXplIGNsYWltIGRpZmZlcmVuY2Vz IGJldHdlZW4gaXQgYW5kIEVBVC5fX19fDQogICAgPiANCiAgICA+ICAgICBfXyBfXw0KICAgID4g DQogICAgPiAgICAgVGhhbmtzLF9fX18NCiAgICA+IA0KICAgID4gICAgIF9fIF9fDQogICAgPiAN CiAgICA+ICAgICAtR2lyaV9fX18NCiAgICA+IA0KICAgID4gICAgIF9fIF9fDQogICAgPiANCiAg ICA+ICAgICAqRnJvbToqIFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyA8bWFpbHRvOnJhdHMt Ym91bmNlc0BpZXRmLm9yZz4+DQogICAgPiAgICAgKk9uIEJlaGFsZiBPZiAqIEthdGhsZWVuIE1v cmlhcnR5DQogICAgPiAgICAgKlNlbnQ6KiBNb25kYXksIE9jdG9iZXIgMjgsIDIwMTkgNzozNyBB TQ0KICAgID4gICAgICpUbzoqIHJhdHNAaWV0Zi5vcmcgPG1haWx0bzpyYXRzQGlldGYub3JnPg0K ICAgID4gICAgICpTdWJqZWN0OiogW1JhdHNdIEFnZW5kYSBSZXF1ZXN0c19fX18NCiAgICA+IA0K ICAgID4gICAgIF9fIF9fDQogICAgPiANCiAgICA+ICAgICAqQ0FVVElPTio6IFRoaXMgZW1haWwg b3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi5fX19fDQogICAgPiAN CiAgICA+ICAgICBHcmVldGluZ3MhX19fXw0KICAgID4gDQogICAgPiAgICAgX18gX18NCiAgICA+ IA0KICAgID4gICAgIFRoaXMgaXMgYW4gb2ZmaWNpYWwgY2FsbCBmb3IgYWdlbmRhIGl0ZW1zLiAg V2UgaGF2ZSByZWNlaXZlZCBzb21lDQogICAgPiAgICAgYW5kIHdpbGwgYmUgc29ydGluZyB0aHJv dWdoIHRob3NlIHRvIHBvc3Qgc29vbiwgYnV0IHdvdWxkIGxpa2UgdG8NCiAgICA+ICAgICBtYWtl IGFuIG9mZmljaWFsIGNhbGwgZm9yIGFnZW5kYSBpdGVtcy5fX19fDQogICAgPiANCiAgICA+ICAg ICBfXyBfXw0KICAgID4gDQogICAgPiAgICAgLS0gX19fXw0KICAgID4gDQogICAgPiAgICAgX18g X18NCiAgICA+IA0KICAgID4gICAgIEJlc3QgcmVnYXJkcyxfX19fDQogICAgPiANCiAgICA+ICAg ICBLYXRobGVlbl9fX18NCiAgICA+IA0KICAgID4gICAgIF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiAgICAgUkFUUyBtYWlsaW5nIGxpc3QNCiAg ICA+ICAgICBSQVRTQGlldGYub3JnIDxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCiAgICA+ICAgICBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICA+IA0KICAgID4g DQogICAgPiANCiAgICA+IC0tIA0KICAgID4gDQogICAgPiBCZXN0IHJlZ2FyZHMsDQogICAgPiBL YXRobGVlbg0KICAgID4gDQogICAgPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KICAgID4gUkFUUyBtYWlsaW5nIGxpc3QNCiAgICA+IFJBVFNAaWV0Zi5v cmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KICAg ID4gDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCiAgICBSQVRTIG1haWxpbmcgbGlzdA0KICAgIFJBVFNAaWV0Zi5vcmcNCiAgICBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICANCg0K From nobody Sun Nov 3 09:16:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57CC712004A for ; Sun, 3 Nov 2019 09:16:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xaFcWdWthwhs for ; Sun, 3 Nov 2019 09:16:41 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9AC70120018 for ; Sun, 3 Nov 2019 09:16:41 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA3HGWFt016058 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 3 Nov 2019 18:16:33 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 3 Nov 2019 18:16:27 +0100 To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" References: <6E37E306-7AE2-47A8-8D20-383D486C29EE@cisco.com> From: Henk Birkholz Message-ID: <2292e0f4-da75-fbf3-e8e8-d652318c872b@sit.fraunhofer.de> Date: Sun, 3 Nov 2019 18:16:26 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <6E37E306-7AE2-47A8-8D20-383D486C29EE@cisco.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 17:16:44 -0000 Oh - sure! Sorry :) I added them in below. The order of the last 3 items in the request is not fixed, I'd say. Viele Grüße, Henk On 03.11.19 02:29, Nancy Cam-Winget (ncamwing) wrote: > Hi Henk, > When you say "we", can you specify who the presenters are and if they would present in person or remotely? > Thanks, Nancy > > On 11/2/19, 12:14, "RATS on behalf of Henk Birkholz" wrote: > > Hi chairs, > hi list, > > we came up with these requests: > > 05 min Current Status Report (incl. some overall hot-topics) Henk > 15 min Use Cases (incl. 5-10min discussion) Michael > 30 min Architecture (incl. 10-15min discussion) Henk > 10 min C/R YANG Module (incl. scope and title discussion) Eric > 15 min C/R Interaction Model (incl. IM for protocol IE discussion) Henk > > Viele Grüße, > > Henk > > > > > On 02.11.19 12:16, Kathleen Moriarty wrote: > > Thank you, Giri. Your request has been noted. I'll post the proposed > > agenda on Monday. We are still waiting on some requests, but will post > > on Monday regardless. > > > > Best regards, > > Kathleen > > > > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam > > > wrote: > > > > I would request 5 minutes to introduce > > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and > > summarize claim differences between it and EAT.____ > > > > __ __ > > > > Thanks,____ > > > > __ __ > > > > -Giri____ > > > > __ __ > > > > *From:* RATS > > > *On Behalf Of * Kathleen Moriarty > > *Sent:* Monday, October 28, 2019 7:37 AM > > *To:* rats@ietf.org > > *Subject:* [Rats] Agenda Requests____ > > > > __ __ > > > > *CAUTION*: This email originated from outside of the organization.____ > > > > Greetings!____ > > > > __ __ > > > > This is an official call for agenda items. We have received some > > and will be sorting through those to post soon, but would like to > > make an official call for agenda items.____ > > > > __ __ > > > > -- ____ > > > > __ __ > > > > Best regards,____ > > > > Kathleen____ > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > > -- > > > > Best regards, > > Kathleen > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > From nobody Sun Nov 3 10:37:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68963120018 for ; Sun, 3 Nov 2019 10:37:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eyy0D3TByhbG for ; Sun, 3 Nov 2019 10:37:19 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A83DB12008C for ; Sun, 3 Nov 2019 10:37:18 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA3IbAG0020885 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 3 Nov 2019 19:37:11 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 3 Nov 2019 19:37:05 +0100 To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Dave Thaler CC: "rats@ietf.org" References: <20191009145006.r2pjsoo6jxirah64@anna.jacobs.jacobs-university.de> <9379d880-2b7e-6657-c547-b37bb7a9e466@sit.fraunhofer.de> <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: Date: Sun, 3 Nov 2019 19:37:04 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Use case -> architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Nov 2019 18:37:21 -0000 Hi Jürgen, in the RATS WG we split that specific challenge/response interaction (there are others, but this is the best understood one) out into this document: > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ An complementary approach was recently introduced here: > https://datatracker.ietf.org/doc/draft-xia-rats-pubsub-model/ Both types of (and by inference - all) interaction adhere to the same "attestation principles" (which we are currently relabeled to "attestation characteristics" but this is more a matter of finding the most intuitive title here), which are included in one of the architecture documents. I think you highlighted a good question that we should put to a call for consensus: Are attestation characteristics, such as freshness, provenance (often referred to as origination), or veracity defining (or vital) concepts for remote attestation procedures so that they belong into the architecture document? Viele Grüße, Henk On 15.10.19 17:45, Schönwälder, Jürgen wrote: > Henk's architecture discusses 'Attestation Principles' that are not in > Dave's proposal. I guess the WG needs to decide whether to include > them or not. Are these important for understanding or guiding the RATS > work? > > I also like to mention that there are research papers where the remote > attestation process is described more in the form of a challenge > response interaction, where the verifier sends a specific challenge to > a device and the device returns a response that is than evaluated by > the verifier. An example is "compute a hash over certain memory areas > within a certain time limit" and then the device returns the result > and the verifier checks whether it is what is expected. The time > limit is used to control that an infected device can't reasonably > forward the challenge to obtain an answer from an unaffected device > that is then relayed back to the verifier. The question is whether the > architecture includes models where a stimuli is used to trigger the > production of a certain Evidence or whether this is left out of the > architectural picture on purpose. For more details, see for example > (you will find a preprint if you search). From nobody Sun Nov 3 22:27:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2988D1209B0 for ; Sun, 3 Nov 2019 22:27:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NF6meJ3Xx9C5 for ; Sun, 3 Nov 2019 22:26:58 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130088.outbound.protection.outlook.com [40.107.13.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39622120116 for ; Sun, 3 Nov 2019 22:26:58 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MwL0VYpHm75roMrg3mSKfUyv3nlDTKg7BRzE8k9/2vGKlDyf+oqT2uGhfvx9vV0Lc3Kus5bf2/TWm+ppc52SzQRDDTxrGyTCxpPysTuYW3zAh53isj1A76NCa8oWNaEEgUsf+BwWr4j48d0G9z/ozSUv7uacLUUPuT9UzdgpLKREA+8xUpAX8zGbhMhewl0UKG6ezm4cCgqjsaPiWGCl3+nWJAZ0XHcWSC3vK5M17HF48Jdtie/i1Zh0SLVDO3tcl+vLhK0zrWs+O0MGFlePGBrAbFAgqewB8SX3rxeCjc58DlTe+RvGhwSyyAqR1wZYYoKPeAXJ49QCGocS4BcS1Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OdWIwSVqAGScVNehaMaZQ63XmmSKLURp1TpDTmAqkZ8=; b=Efx0EZ0+51qWzT0DhxMLXy9fHPde5cnbywl76FEntP5XAwS4VcoWL+3yL6j08KCnjDEjYxybor62bfO3doCwaS/qaGvzOhaeCguWf27gI65X4D0vADEJK4nXJ7+jWUvRNsB4fx5f1fcGgSGitbl19jdY3qPWBpGRt2yRTQYl0IibqPqg+uOepzuiX7CgvWJ5ahAeqPqW83/+cXv5D2VuK8fC+uZ5zxDEsfKnkgFROXrd5/iRD+QnS5SYoShEnOyySWbReVslicTkTQERb1SMq0d6JXVaTu4McpfMrrOWKKVzAZYu/3rjNCRiZvxg1WKd4rfOQduQv0vJzWrqsEHcBg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OdWIwSVqAGScVNehaMaZQ63XmmSKLURp1TpDTmAqkZ8=; b=UcGvMHmBy2X+IUbRZpjiSZESVc3D6NAECBtTcat2XHPu+FjD+ars7avGTD8tiSA+lADHij8HXGz4DIebYzVVS+o/Yerm4xgOoMFQAriWYwMWNpJIoqXq2P6sN5OnINGaYG+4WbFB179/8/plXVErR5y4rgkn8dql6jiEa8vDZOA= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0452.EURP190.PROD.OUTLOOK.COM (10.161.64.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Mon, 4 Nov 2019 06:26:55 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2408.024; Mon, 4 Nov 2019 06:26:55 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Henk Birkholz CC: Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Use case -> architecture document Thread-Index: AQHVfpUtedcuT2wbS0SCyHTQ7+elcqdSM9uAgAAwqYCAABSIAIAACXkAgAAPgoCACDU2sIABGpkAgB4MXwCAAMZUAA== Date: Mon, 4 Nov 2019 06:26:55 +0000 Message-ID: <20191104062654.e2q7cgz43auzozok@anna.jacobs.jacobs-university.de> References: <20191009145006.r2pjsoo6jxirah64@anna.jacobs.jacobs-university.de> <9379d880-2b7e-6657-c547-b37bb7a9e466@sit.fraunhofer.de> <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> In-Reply-To: Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM0PR0202CA0033.eurprd02.prod.outlook.com (2603:10a6:208:1::46) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0c85a27e-8430-4108-d7dd-08d760effce4 x-ms-traffictypediagnostic: AM5P190MB0452: x-ms-exchange-purlcount: 3 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(39850400004)(346002)(376002)(366004)(199004)(189003)(8676002)(81166006)(8936002)(76176011)(81156014)(305945005)(71190400001)(71200400001)(186003)(14444005)(256004)(6916009)(476003)(486006)(46003)(7736002)(66574012)(1076003)(3450700001)(86362001)(6116002)(2906002)(6486002)(45776006)(11346002)(446003)(229853002)(99286004)(14454004)(316002)(478600001)(66476007)(66446008)(66946007)(66556008)(64756008)(6512007)(6436002)(25786009)(6306002)(386003)(6506007)(53546011)(52116002)(102836004)(54906003)(4326008)(5660300002)(786003)(966005)(561944003)(43066004)(6246003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0452; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: bKslpXEESxE4R8Od6ZGV9QwWSJ+JontRGW+n9xcUoWNfC97Z+o2JUTJOBxjBDvt+p6fN82BGU8sHwj/Ff893VNlsaceSBI/vsZ5CTfER9CvKoRg6L2l8vF5BwIJp/cwfNI93yc3WfSP9tPauYqqbzB6ptjQwHZj0bVPWmv5heszIyOTfJFTx1ZQ/kjY1KjUnnV5r1ukVjki/JHZHBNCEq9Mk2ygVFQskBKCaJ+chkhbOQR9RTks3sOKH7TiqtHOopn8CU9m2sgucYQGHB9Uvmu/KPyTMbyaiRvI8BF/D1Xh3H53qwJwSe2eOybIHk66G+0xq3hH+WSgM9k4fqEuEgMeBrM+gy336Hjz1gx7+mNqzWiUkO4DhF8nMneMC6ihoIfWVCMmMniyXZgA4qqnVJvDhH4uOEznXexxFcWnwbpJtOPb3Ln7oVT1orOARF69sZjFpw7HdSQqJ+lW0w+aOEvmz4+/eGNGTFLuG+xFCKXc= Content-Type: text/plain; charset="iso-8859-1" Content-ID: <71362AB611DBE2469D43EA372E437DDE@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 0c85a27e-8430-4108-d7dd-08d760effce4 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 06:26:55.4259 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: kQL/PXH6273ZsWiqRFd654O9DLkOhNQBrANyL22xY93WvIYos7MDb377Fz2y7DmLgMQN2GHdrzZTZ1uRkPYR2rJxygruzpAiHAG/wg9BFfk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0452 Archived-At: Subject: Re: [Rats] Use case -> architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 06:27:06 -0000 Henk, I prefer having all relevant interaction models in the architecture. Looking at your architecture draft and "attestation characteristics" (aka attestation principles), then I am not sure I do understand all definitions. For me, 'relevance' seems somewhat unclear. Should such terms be defined in an architecture doccument? Probably yes if they are fundamental for understanding the technology and not covered by generally known security terminology. /js On Sun, Nov 03, 2019 at 07:37:04PM +0100, Henk Birkholz wrote: > Hi J=FCrgen, >=20 > in the RATS WG we split that specific challenge/response interaction (the= re > are others, but this is the best understood one) out into this document: >=20 > > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interact= ion-model/ >=20 > An complementary approach was recently introduced here: >=20 > > https://datatracker.ietf.org/doc/draft-xia-rats-pubsub-model/ >=20 > Both types of (and by inference - all) interaction adhere to the same > "attestation principles" (which we are currently relabeled to "attestatio= n > characteristics" but this is more a matter of finding the most intuitive > title here), which are included in one of the architecture documents. >=20 > I think you highlighted a good question that we should put to a call for > consensus: Are attestation characteristics, such as freshness, provenance > (often referred to as origination), or veracity defining (or vital) conce= pts > for remote attestation procedures so that they belong into the architectu= re > document? >=20 > Viele Gr=FC=DFe, >=20 > Henk >=20 >=20 >=20 > On 15.10.19 17:45, Sch=F6nw=E4lder, J=FCrgen wrote: > > Henk's architecture discusses 'Attestation Principles' that are not in > > Dave's proposal. I guess the WG needs to decide whether to include > > them or not. Are these important for understanding or guiding the RATS > > work? > >=20 > > I also like to mention that there are research papers where the remote > > attestation process is described more in the form of a challenge > > response interaction, where the verifier sends a specific challenge to > > a device and the device returns a response that is than evaluated by > > the verifier. An example is "compute a hash over certain memory areas > > within a certain time limit" and then the device returns the result > > and the verifier checks whether it is what is expected. The time > > limit is used to control that an infected device can't reasonably > > forward the challenge to obtain an answer from an unaffected device > > that is then relayed back to the verifier. The question is whether the > > architecture includes models where a stimuli is used to trigger the > > production of a certain Evidence or whether this is left out of the > > architectural picture on purpose. For more details, see for example > > (you will find a preprint if you search). --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Mon Nov 4 12:57:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E33FC12010F for ; Mon, 4 Nov 2019 12:57:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L0GyaxSVs7-3 for ; Mon, 4 Nov 2019 12:57:40 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on071d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe41::71d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54476120800 for ; Mon, 4 Nov 2019 12:57:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bkMDAbr4R9V3yG6m7Tces7+XXB+qEraNB5Fgf3h9uJgJwoufmumQxbo+/3SCxNbZp9VB+0IngzX98RnOsYbcZcUemjl+ck9YZDfvXu3KQt5bKQW0BZ3CZlRFCVCGf+RWlr4mj9nnu8Sr8qSgBPgYPcwT7aQ9EPMWEEf1cjPoQfq0QZRwMTMvok3KFJc4qBtNmZpiubwn+ag2VU1SGoQNmapdoA4mfL7Ku3bcm3b/aRhGqt1eElaPK89FjazctnNGF85biMDTfelh1/+TOCRfVfpl3cVayITT5qoH/ORuJPtXN2981I+jHD/felVZLFkUF5kQ14lO0W0RK5uYAWbmPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x41oOS7jrQ7DW7Zb/9iij3Wbb8GxEHCTBb9oB+6ntvY=; b=Pu0LdZMheUJU87Rv9JBj6zghDc34vM+lCW5Gco/2rfKk9Ye+xmBPIIsUZnhZ9tnhc3pBbeRLXoLf+eP/GXq6cCQNadu2q98tECG44Hyh0DJZayQvbl3WXUkDPXbQxbwHaDY1ZScbT5rYVRGeCOC/vR5WRl06QLbqm3psqszUFxf0euY/f7h5aVfrKPSjh+Z1dxKxRkEnU4lBN73ikzHGdkfAmPiHJIkfhIRrIUIYevXTq5zrCnRk1QsX6AGPEDk3xSEUKvbEY2TYyhu6iv0vc4eVzSp4HY00g4i6dP86pTSJkDokiMsII3nSKNPIAADaXVQJqMYiGUV02263xH+wqQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x41oOS7jrQ7DW7Zb/9iij3Wbb8GxEHCTBb9oB+6ntvY=; b=BYGV6AeM7MwuRUWxemx/LpFtlSipbyo9z2yxYcVEWXhVErJqF222aNSP30pbcTa0W9FFVfi1FyFyEnlozYWvVLlGHV6QQk9gBthtBxcuNdzXtDO1MBlh1yXvshqo9IUi/wNc//iyrghaGtxciNHVwKU34w03gCfRm//7Sx1tofE= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0750.namprd21.prod.outlook.com (10.173.51.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Mon, 4 Nov 2019 20:56:12 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2430.017; Mon, 4 Nov 2019 20:56:12 +0000 From: Dave Thaler To: Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: RIV and the RATS architecture Thread-Index: AdWQISZnKaC7gFC9RTeTGiVYLOxchQDLr02g Date: Mon, 4 Nov 2019 20:56:09 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:2:5e6c:e46e:3572:93d5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: e8face39-3772-455b-c190-08d761696d1a x-ms-traffictypediagnostic: MWHPR21MB0750: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(346002)(39860400002)(376002)(136003)(189003)(199004)(8990500004)(966005)(66556008)(66476007)(66446008)(52536014)(46003)(6666004)(71200400001)(10090500001)(86362001)(71190400001)(6306002)(64756008)(54896002)(6246003)(9686003)(606006)(4326008)(76116006)(66946007)(54906003)(236005)(6436002)(10290500003)(478600001)(14444005)(256004)(55016002)(2906002)(790700001)(6116002)(25786009)(186003)(74316002)(7696005)(76176011)(22452003)(316002)(81156014)(14454004)(99286004)(81166006)(33656002)(486006)(476003)(8936002)(8676002)(11346002)(446003)(7736002)(229853002)(5660300002)(53546011)(6506007)(102836004); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0750; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4FN9crTLn/Kv9EnxPAVJwIhU/VeZtDSDun6JE3Uey2sNkBQTAzWRY7dHJUkj/3Dhz7MdNYYjyKX1rhUic0K/Gby5o4Ef3NVxI7qkVzuoFD9H6HP1Twmuqx2iJyalINXozSOWC4MdaZV4BzpOUyPzarIXPpZXm+XXHa5D9+WkXROTXlmPEQyYBWls3t+/BXxVQotzIG+tMwyfvXlrYvXbpoieABdYvMM6ENRMAbQ8wMeOqc5TGbnXnvRsWpNDnjqYJpM3pgzpGPFBOvjo9eTmjAnaStbpCsNxO/PParX7IeZX9htETdoRs0oP3Wjsaa0xWFncwiZMJUlWifza4oXKDkq+VOvqgA7QqTa/eGPQI0jt97UqasRmDgKwA5+/aZnEgmhrzADw//8ATdmQqzXJB1/iop/X4ez6e75LYUhi0IdT167VIIXsTbnOAqzbHBAY x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784B018797AB320A5B7C54CA37F0MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: e8face39-3772-455b-c190-08d761696d1a X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 20:56:09.0970 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Aq0RBuUvkq2ZXY6GtuOeGs+Nwu5MS7o/UZr82oJwPgiSoY4mIZm1Gz5d1mOTD6GtrNGRA+ZKGfb+5czpKyW3jIw5T8DZBSzicMI8rywxBJs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0750 Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 20:57:50 -0000 --_000_MWHPR21MB0784B018797AB320A5B7C54CA37F0MWHPR21MB0784namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS On Behalf Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools.ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_MWHPR21MB0784B018797AB320A5B7C54CA37F0MWHPR21MB0784namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rat= s-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/htm= l/draft-fedorkow-rats-network-device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools.ietf.org/wg/nea/ has=

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_MWHPR21MB0784B018797AB320A5B7C54CA37F0MWHPR21MB0784namp_-- From nobody Mon Nov 4 13:22:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 558E3120152 for ; Mon, 4 Nov 2019 13:22:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sGOi1PCwPj5O for ; Mon, 4 Nov 2019 13:22:44 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF6B11209F3 for ; Mon, 4 Nov 2019 13:22:43 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA4LMbqA031630 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 4 Nov 2019 22:22:38 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 4 Nov 2019 22:22:32 +0100 To: Dave Thaler , Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Jessica Fitzgerald-McKay References: From: Henk Birkholz Message-ID: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> Date: Mon, 4 Nov 2019 22:22:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 21:22:50 -0000 Hi Dave, Guy, et al. we did a "best fit" matching of use cases with the two message flows "passport" and "back-end", and while it is possible to cluster those with some... leniency, the goal is to provide the basis for mapping by using both roles and message flows in the architecture document. "Passport" and "Back-End" flows really helped to streamline the progress (Thanks Dave). As we (Thomas, Ned, Michael & me, with 'unfortunately' too much input from group members! Thanks all) went through seven examples now (still missing a prominent GP one, I think) we are pretty confident that this works consistently. Sorry again that we did not address all issues raised. The priority stack that is our action item list was in a continuous swirl :) There will be one or more submissions before cut-off. Viele Gre, Henk On 04.11.19 21:56, Dave Thaler wrote: > Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, > Confidential Computing Consortium, and Linux Security Summit were all > co-located) all last week and traveling there/back. > > Responses inline below > > *From:* RATS *On Behalf Of *Guy Fedorkow > *Sent:* Thursday, October 31, 2019 12:27 PM > *To:* Dave Thaler > *Cc:* rats@ietf.org; Thomas Hardjono ; Smith, Ned > ; Henk Birkholz ; > Jessica Fitzgerald-McKay > *Subject:* [Rats] RIV and the RATS architecture > > Hi Dave, > > Thanks for your doc > https://tools.ietf.org/html/draft-thaler-rats-architecture-00 > . > > Do you have a view as to how the TPM-based attestation described in > RIV would fit with the proposed categorization? > > https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-00 > > > Great question. From my reading of > draft-fedorkow-rats-network-device-attestation-00, its a background > check model, as section 2.3 of your doc explains: > >> 3. A Relying Party, which has access to the Verifier to request > >> attestation and to act on results. > > That sentence above is by definition the background check model. > > That is, the Attester talks to the Relying Party, the Relying Party then > requests a background check by consulting a Verifier, > > and will accept whatever answer the Verifier decides. > > There are ways where you could use the passport model for network device > attestation, > > but your document only covers the background check model. > > It doesnt seem to be a passport, since the attester only provides > raw evidence, not a pre-approved passport > > Agreed, from my reading of your document. > > It doesnt seem to be a background check, as its the verifier that > collects and analyzes the evidence. > > If I understand your point here, youre saying that the verifier talks > directly to the attester (e.g., by querying the yang module), without > going back through the relying party, and that that seemed to you to be > different from a classic background check diagram. Did I get your > point correctly? > > If so, then I see it as a variation of the background check model, as > opposed to a separate model per se. > > Im not sure it matters to RIV, as we havent drawn much distinction > between the relying party and the verifier As you say, if theyre on > the same machine, the distinction is almost moot. > > Agree. > > And if theyre not, I think the communication is out of scope for RIV > (if not for RATS). > > I disagree that its out of scope for RATS. > > I have no opinion on whether its out of scope for RIV, since I still > have some confusion on the intended scope of RIV. > > I note that your document constrains its scope (in section 1.5) to only > TPM-based embedded devices, and not other > > types of devices. I couldnt tell if the scope of RIV and the scope of > the draft (which does not have RIV in the name, or in > > section 1.5) are similar or one is a subset of the other. Indeed, the > title of the document is far wider than just TPM-based > > embedded devices, so in that sense the title doesnt match the scoping > in section 1.5. Just explaining why theres not > > enough information for me to have an opinion on verifier-relying party > communication in RIV. > > There can be other network attestation solutions that look quite > different from the flow in your draft > > (and I have no skin in this game, so dont have a bias towards any > solution in particular). For example, > > some other solution might involve a RADIUS server being a Verifier, so > the verifier relying party communication might > > be RADIUS in that example. Theres many ways to construct solutions, > and so I imagine theres probably multiple > > solutions already out there, since the NEA problem is not new even in > the IETF (https://tools.ietf.org/wg/nea/ has > > pointers to RFCs for anyone reading this whos not already aware of it). > > But it would be good ensure the architecture and the applications of > it actually do fit together > > Absolutely. > > Dave > > Thanks > > /guy > > Juniper Business Use Only > From nobody Mon Nov 4 14:29:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1509120A9F for ; Mon, 4 Nov 2019 14:29:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SYaqsHNvw9ZI for ; Mon, 4 Nov 2019 14:29:01 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750094.outbound.protection.outlook.com [40.107.75.94]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6E5A120127 for ; Mon, 4 Nov 2019 14:29:00 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=m7M/47/nAIyxJ8GuGzOZb8JMxds8DvYpOF93aroGVGzSmyM8Mf1ZGUPFDAfF5wOXqS7D4HP1odpPmLAHwl5EoH12ILiyjNA3zksAi1i0/b7Myz63nAYPa5yrEut6YrX6QrEFe21ztx6g+uJAfHHB8WWh1v2U7EqRSQ/KUWFn9wBzKCxKWiDIRnkh57s35QENumQxBYz6Mlm92VhfGy7Xv/UJeUUewnM1rme6GRg4X5MpgTqrUDM+BxjFdisv56UqaTTpkTD1A5y74bpLZnSf7nyeNCJdfxW7OEKIQMxenXn4krJ4LTbffomiVL6+CIAvvMdZ9rmxDIJB/H8mT63IDA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=f8fc4zOz2Y+ezoJWRFybjdbCHN9qOLQRuMOp09XbAZg=; b=At0aBhQLcHKg/mfVkslIEpmUjdJDUHUUicmIcWU7IG3cMIU3SasTmSlxPItvv8TzmtvwADPHX631d4uJfu0ui5FQyvpBCsF0bmC/YXHaJXKTGrEVfImdW+xUL8UMCYpeCNJ3d/pJ+qx9Ux1FiN7MWviqr/2qEHbnRq7BH53Zlu2O8xy96P05gafRc6bZ6IovMIDT4L0LLRjf57Yc7sBs6TgFSZfjK1khD/5FpsXG6wzDxBdvBiVHjWuwkib5xiwx2+rT3nJGkTWtu+8s2DH8UMe8vBWvmHBi1YWAcc3FikxdJvW5pv6Hw09APSmzJT/7wwnei1aVjjWgJXCoYzLdHQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=f8fc4zOz2Y+ezoJWRFybjdbCHN9qOLQRuMOp09XbAZg=; b=cJFsGGQ5QkOD1o/FdSyj2n5y0t12taJvZGyNAi5kLOmkqUG8KC9+X2d9LAbQPY8jnlddqjt8JBl5oWCFgXNgjcxpPfAPhgztq1MjP0glHeRMz2KqkhlXURXLWa4a1jUou2eH5EEL4huRWRyMSCj3g6TNn8RYPwKUPpgXIkwVAKw= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0160.namprd21.prod.outlook.com (10.173.52.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.7; Mon, 4 Nov 2019 22:28:57 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2430.017; Mon, 4 Nov 2019 22:28:57 +0000 From: Dave Thaler To: Henk Birkholz , Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Jessica Fitzgerald-McKay Thread-Topic: [Rats] RIV and the RATS architecture Thread-Index: AdWQISZnKaC7gFC9RTeTGiVYLOxchQDLr02gAAGE9IAAAi3TMA== Date: Mon, 4 Nov 2019 22:28:57 +0000 Message-ID: References: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> In-Reply-To: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T22:28:56.8907863Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=2fafed79-064d-4630-9794-88013d0e4cae; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:2:b11b:e793:787c:bd6b] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4f15475d-9ebb-47f6-0451-08d761766229 x-ms-traffictypediagnostic: MWHPR21MB0160: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0211965D06 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(346002)(376002)(39860400002)(396003)(13464003)(189003)(199004)(10290500003)(6116002)(22452003)(81156014)(66556008)(86362001)(110136005)(966005)(25786009)(64756008)(66946007)(71190400001)(71200400001)(8936002)(99286004)(6246003)(74316002)(66476007)(6506007)(11346002)(305945005)(8990500004)(4326008)(66446008)(7736002)(2906002)(33656002)(76176011)(6306002)(55016002)(316002)(256004)(53546011)(76116006)(5660300002)(14444005)(102836004)(476003)(8676002)(478600001)(486006)(446003)(52536014)(9686003)(186003)(10090500001)(7696005)(81166006)(54906003)(14454004)(46003)(6436002)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0160; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: mrfDsMGFhb545kIKrszSvISKnlqGzY56SjEp7foDcx8lsDMUlcqskPy5tJw4DSfW83nuwfJdZ4ZyYw6AdC7FlaYvnF4ZL9+D/XPc1+eKUqBTEgR6lbqHhrM5mzmNyenj9fXVw3bA6JZA3zQeLmDaZ8Ou8NGBGi6jzJGROHCROw7x+/bfqbkDi2GD0DD4V8BJ0tlbEEYUVy1uzyNhixD3XRy0Kc46hXeZIZ97ODcBPATNFg5xQWF1YRl+HAxbfGHrOn2OoNmW/LAgbN3RgIym+ZmpttFFPJ/9P7J8TrXfk7HkLO1teqteZdhfeK3h1ZCBExGf3x6QikeATC/jkoH8y2MtISF5GYjLY+DZF13rkxgVhMCtNbIsWmLZszFk20B3Wo8ctOdQG0bx6Etw4z9iG5XVh6rqjCvXsQBwWuXfrKTQ1hFTYBPZu3EHUlASzNqk x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4f15475d-9ebb-47f6-0451-08d761766229 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2019 22:28:57.1517 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: WNU84IwRsHr2Wj3IzxXi/vw3Ia47nswOgoc6ZABOz/M9nQQmdDVOZCAF0WnRjXHIclCkyzLrBwrBGLMjGWIeqQrUZOI9T9kWme5hNHGHSnk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0160 Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 Nov 2019 22:29:04 -0000 Thanks Henk for the note. I hope the WG can converge more as I think there is still much confusion, a= nd reviewing updated documents will help people to understand concepts better and see wh= ere there is alignment and where there is still lack of alignment. I haven't gotten any direction from the chairs yet as to whether I should u= pdate my contribution or not, but since there have been specific questions asked on the list (Juergen, Guy, e= tc.), and apparently some mischaracterization in email messages about text in my contribution, I'm inclined to submit an = update unless the chairs tell me otherwise. I am absolutely open to co-authoring, or contributing, or merging, or whate= ver else, going forward. Looking forward to a productive discussion, Dave -----Original Message----- From: RATS On Behalf Of Henk Birkholz Sent: Monday, November 4, 2019 1:23 PM To: Dave Thaler ; Guy Fedorkow Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Jessica Fitzgerald-McKay Subject: Re: [Rats] RIV and the RATS architecture Hi Dave, Guy, et al. we did a "best fit" matching of use cases with the two message flows "passp= ort" and "back-end", and while it is possible to cluster those with some...= leniency, the goal is to provide the basis for mapping by using both roles= and message flows in the architecture document.=20 "Passport" and "Back-End" flows really helped to streamline the progress (T= hanks Dave). As we (Thomas, Ned, Michael & me, with 'unfortunately'=20 too much input from group members! Thanks all) went through seven examples = now (still missing a prominent GP one, I think) we are pretty confident tha= t this works consistently. Sorry again that we did not address all issues raised. The priority stack t= hat is our action item list was in a continuous swirl :) There will be one or more submissions before cut-off. Viele Gr=FC=DFe, Henk On 04.11.19 21:56, Dave Thaler wrote: > Hi Guy, sorry for the delay, I was at a conference (Open Source=20 > Summit, Confidential Computing Consortium, and Linux Security Summit=20 > were all > co-located) all last week and traveling there/back. >=20 > Responses inline below. >=20 > *From:* RATS *On Behalf Of *Guy Fedorkow > *Sent:* Thursday, October 31, 2019 12:27 PM > *To:* Dave Thaler > *Cc:* rats@ietf.org; Thomas Hardjono ; Smith, Ned=20 > ; Henk Birkholz=20 > ; > Jessica Fitzgerald-McKay > *Subject:* [Rats] RIV and the RATS architecture >=20 > Hi Dave, >=20 > =A0 Thanks for your doc > https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftool > s.ietf.org%2Fhtml%2Fdraft-thaler-rats-architecture-00&data=3D02%7C01 > %7Cdthaler%40microsoft.com%7C9dfd693759294a279a9e08d7616d3410%7C72f988 > bf86f141af91ab2d7cd011db47%7C1%7C0%7C637085028413254093&sdata=3Dkc6Y > 4pawY8qtlcCEbuU4jslXVhktsexy8rCHoVv6q%2FE%3D&reserved=3D0 > . >=20 > =A0 Do you have a view as to how the TPM-based attestation described in= =20 > RIV would fit with the proposed categorization? >=20 > https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftool > s.ietf.org%2Fhtml%2Fdraft-fedorkow-rats-network-device-attestation-00& > amp;data=3D02%7C01%7Cdthaler%40microsoft.com%7C9dfd693759294a279a9e08d76 > 16d3410%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63708502841325409 > 3&sdata=3DmTKpVUjdcsj5YLY4yfQMSCUi4JRYxroPFzBlBTMdJW8%3D&reserve > d=3D0=20 > ls.ietf.org%2Fhtml%2Fdraft-fedorkow-rats-network-device-attestation-00 > &data=3D02%7C01%7Cdthaler%40microsoft.com%7C9dfd693759294a279a9e08d7 > 616d3410%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C6370850284132640 > 89&sdata=3DEZTwUJ70nIQCDMwYlmjIN73q8MVZWAQvY%2FeqOOw7prE%3D&rese > rved=3D0> >=20 > Great question. From my reading of > draft-fedorkow-rats-network-device-attestation-00, it's a background=20 > check model, as section 2.3 of your doc explains: >=20 >>=A0=A0 3.=A0 A Relying Party, which has access to the Verifier to request >=20 >>=A0=A0=A0=A0=A0=A0 attestation and to act on results. >=20 > That sentence above is by definition the background check model. >=20 > That is, the Attester talks to the Relying Party, the Relying Party=20 > then requests a background check by consulting a Verifier, >=20 > and will accept whatever answer the Verifier decides. >=20 > There are ways where you could use the passport model for network=20 > device attestation, >=20 > but your document only covers the background check model. >=20 > =A0 It doesn't seem to be a passport, since the attester only provides=20 > raw evidence, not a pre-approved passport >=20 > Agreed, from my reading of your document. >=20 > =A0 It doesn't seem to be a background check, as it's the verifier that= =20 > collects and analyzes the evidence. >=20 > If I understand your point here, you're saying that the verifier talks=20 > directly to the attester (e.g., by querying the yang module), without=20 > going back through the relying party, and that that seemed to you to=20 > be different from a classic "background check" diagram.=A0 Did I get=20 > your point correctly? >=20 > If so, then I see it as a variation of the background check model, as=20 > opposed to a separate model per se. >=20 > =A0 I'm not sure it matters to RIV, as we haven't drawn much=20 > distinction between the relying party and the verifier.=A0 As you say,=20 > if they're on the same machine, the distinction is almost moot. >=20 > Agree. >=20 > And if they're not, I think the communication is out of scope for RIV=20 > (if not for RATS). >=20 > I disagree that it's out of scope for RATS. >=20 > I have no opinion on whether it's out of scope for RIV, since I still=20 > have some confusion on the intended scope of RIV. >=20 > I note that your document constrains its scope (in section 1.5) to=20 > only TPM-based embedded devices, and not other >=20 > types of devices.=A0=A0 I couldn't tell if the scope of RIV and the scope= =20 > of the draft (which does not have RIV in the name, or in >=20 > section 1.5) are similar or one is a subset of the other.=A0=A0 Indeed,=20 > the title of the document is far wider than just TPM-based >=20 > embedded devices, so in that sense the title doesn't match the scoping=20 > in section 1.5. =A0=A0Just explaining why there's not >=20 > enough information for me to have an opinion on verifier-relying party=20 > communication in RIV. >=20 > There can be other network attestation solutions that look quite=20 > different from the flow in your draft >=20 > (and I have no skin in this game, so don't have a bias towards any=20 > solution in particular).=A0=A0 For example, >=20 > some other solution might involve a RADIUS server being a Verifier, so=20 > the verifier - relying party communication might >=20 > be RADIUS in that example.=A0=A0 There's many ways to construct solutions= ,=20 > and so I imagine there's probably multiple >=20 > solutions already out there, since the NEA problem is not new even in=20 > the IETF=20 > (https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftoo > ls.ietf.org%2Fwg%2Fnea%2F&data=3D02%7C01%7Cdthaler%40microsoft.com%7 > C9dfd693759294a279a9e08d7616d3410%7C72f988bf86f141af91ab2d7cd011db47%7 > C1%7C0%7C637085028413264089&sdata=3DExcrMYn5%2Bvd%2FbSz1%2FZ7Wz4KB0D > x%2Bd6KCaU6M2nweXw4%3D&reserved=3D0 has >=20 > pointers to RFCs for anyone reading this who's not already aware of it). >=20 > =A0 But it would be good ensure the architecture and the applications=20 > of it actually do fit together. >=20 > Absolutely. >=20 > Dave >=20 > =A0=A0Thanks >=20 > /guy >=20 > Juniper Business Use Only >=20 _______________________________________________ RATS mailing list RATS@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Frats&data=3D02%7C01%7Cdthaler%40microsoft.= com%7C9dfd693759294a279a9e08d7616d3410%7C72f988bf86f141af91ab2d7cd011db47%7= C1%7C0%7C637085028413264089&sdata=3Dkxj3Z9NJnOFsek3AScAuAtvvi8c4%2B8gKI= pY73qWxq%2FY%3D&reserved=3D0 From nobody Mon Nov 4 16:20:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FDDE1200CD for ; Mon, 4 Nov 2019 16:20:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yr6yLkl3Fbi1 for ; Mon, 4 Nov 2019 16:20:43 -0800 (PST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70EFE120041 for ; Mon, 4 Nov 2019 16:20:43 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Nov 2019 16:20:43 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,268,1569308400"; d="scan'208";a="220285885" Received: from orsmsx103.amr.corp.intel.com ([10.22.225.130]) by FMSMGA003.fm.intel.com with ESMTP; 04 Nov 2019 16:20:42 -0800 Received: from orsmsx114.amr.corp.intel.com (10.22.240.10) by ORSMSX103.amr.corp.intel.com (10.22.225.130) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 4 Nov 2019 16:20:42 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.239]) by ORSMSX114.amr.corp.intel.com ([169.254.8.19]) with mapi id 14.03.0439.000; Mon, 4 Nov 2019 16:20:42 -0800 From: "Smith, Ned" To: Dave Thaler , Henk Birkholz , Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , Jessica Fitzgerald-McKay Thread-Topic: [Rats] RIV and the RATS architecture Thread-Index: AdWQISZnKaC7gFC9RTeTGiVYLOxchQDLr02gABJIfYAAAlH2gP//mRuA Date: Tue, 5 Nov 2019 00:20:42 +0000 Message-ID: References: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T22:28:56.8907863Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=2fafed79-064d-4630-9794-88013d0e4cae; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic x-originating-ip: [10.24.10.69] Content-Type: text/plain; charset="utf-8" Content-ID: <82A7E20E93A2B84EAA230AD62E886A10@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 00:20:46 -0000 U3BlYWtpbmcgYXMgYSBjby1hdXRob3IgdG8gYXJjaGl0ZWN0dXJlLCBJIHRoaW5rIGl0IG1ha2Vz IHNlbnNlIHRvIG1lcmdlIHRoZSB0d28gYXJjaGl0ZWN0dXJlIGRvY3VtZW50cy4gQSBzZWN0aW9u IG9uICd0cnVzdCBtb2RlbCcgc2VlbXMgYXBwcm9wcmlhdGUsIGlmIGZvciBubyBvdGhlciByZWFz b24gdGhhbiB0byBjYXB0dXJlIHJlcXVpcmVtZW50cyB0aGF0IGFyZSBpbiBsaW5lIHdpdGggdGhl IHVzZSBjYXNlcyB3aGljaCBmb2N1cyBvbiBkaXN0cmlidXRlZCBjb21wdXRpbmcgc2NlbmFyaW9z LiBJIHRoaW5rIHRoaXMgaW1wbGllcyBjZW50cmFsaXplZCAiSVQiIGFwcHJvYWNoZXMgbGlrZWx5 IGFyZSB0b28gY29uc3RyYWluaW5nLiBQS0kgbWF5IGJlIHdvcmthYmxlIGdpdmVuIHRvbGVyYW5j ZSBmb3IgbWFueSBDQXMgaW4gYSBXZWIgb2YgdHJ1c3QgbW9kZWwuIE90aGVyIHZpYWJsZSB0cnVz dCBtb2RlbHMgY291bGQgZW1lcmdlIGluY2x1ZGluZyBEZWNlbnRyYWxpemVkIElEIChyZWZlcnJp bmcgdG8gZGlyZWN0aW9uIFczQyBpcyBtb3Zpbmcgd2l0aCByZWJvb3RpbmcgdGhlIFdlYiBvZiBU cnVzdCkuIA0KLU5lZA0KDQrvu79PbiAxMS80LzE5LCAxNDoyOSBQTSwgIkRhdmUgVGhhbGVyIiA8 ZHRoYWxlckBtaWNyb3NvZnQuY29tPiB3cm90ZToNCg0KICAgIFRoYW5rcyBIZW5rIGZvciB0aGUg bm90ZS4NCiAgICANCiAgICBJIGhvcGUgdGhlIFdHIGNhbiBjb252ZXJnZSBtb3JlIGFzIEkgdGhp bmsgdGhlcmUgaXMgc3RpbGwgbXVjaCBjb25mdXNpb24sIGFuZCByZXZpZXdpbmcNCiAgICB1cGRh dGVkIGRvY3VtZW50cyB3aWxsIGhlbHAgcGVvcGxlIHRvIHVuZGVyc3RhbmQgY29uY2VwdHMgYmV0 dGVyIGFuZCBzZWUgd2hlcmUgdGhlcmUgaXMgYWxpZ25tZW50IGFuZA0KICAgIHdoZXJlIHRoZXJl IGlzIHN0aWxsIGxhY2sgb2YgYWxpZ25tZW50Lg0KICAgIA0KICAgIEkgaGF2ZW4ndCBnb3R0ZW4g YW55IGRpcmVjdGlvbiBmcm9tIHRoZSBjaGFpcnMgeWV0IGFzIHRvIHdoZXRoZXIgSSBzaG91bGQg dXBkYXRlIG15IGNvbnRyaWJ1dGlvbiBvciBub3QsIGJ1dA0KICAgIHNpbmNlIHRoZXJlIGhhdmUg YmVlbiBzcGVjaWZpYyBxdWVzdGlvbnMgYXNrZWQgb24gdGhlIGxpc3QgKEp1ZXJnZW4sIEd1eSwg ZXRjLiksIGFuZCBhcHBhcmVudGx5IHNvbWUgbWlzY2hhcmFjdGVyaXphdGlvbg0KICAgIGluIGVt YWlsIG1lc3NhZ2VzIGFib3V0IHRleHQgaW4gbXkgY29udHJpYnV0aW9uLCBJJ20gaW5jbGluZWQg dG8gc3VibWl0IGFuIHVwZGF0ZSB1bmxlc3MgdGhlIGNoYWlycyB0ZWxsIG1lIG90aGVyd2lzZS4N CiAgICANCiAgICBJIGFtIGFic29sdXRlbHkgb3BlbiB0byBjby1hdXRob3JpbmcsIG9yIGNvbnRy aWJ1dGluZywgb3IgbWVyZ2luZywgb3Igd2hhdGV2ZXIgZWxzZSwgZ29pbmcgZm9yd2FyZC4NCiAg ICANCiAgICBMb29raW5nIGZvcndhcmQgdG8gYSBwcm9kdWN0aXZlIGRpc2N1c3Npb24sDQogICAg RGF2ZQ0KICAgIA0KICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgRnJvbTogUkFU UyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSGVuayBCaXJraG9seg0KICAg IFNlbnQ6IE1vbmRheSwgTm92ZW1iZXIgNCwgMjAxOSAxOjIzIFBNDQogICAgVG86IERhdmUgVGhh bGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+OyBHdXkgRmVkb3Jrb3cgPGdmZWRvcmtvdz00MGp1 bmlwZXIubmV0QGRtYXJjLmlldGYub3JnPg0KICAgIENjOiByYXRzQGlldGYub3JnOyBUaG9tYXMg SGFyZGpvbm8gPGhhcmRqb25vQG1pdC5lZHU+OyBTbWl0aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwu Y29tPjsgSmVzc2ljYSBGaXR6Z2VyYWxkLU1jS2F5IDxqbWZtY2theUBnbWFpbC5jb20+DQogICAg U3ViamVjdDogUmU6IFtSYXRzXSBSSVYgYW5kIHRoZSBSQVRTIGFyY2hpdGVjdHVyZQ0KICAgIA0K ICAgIEhpIERhdmUsIEd1eSwgZXQgYWwuDQogICAgDQogICAgd2UgZGlkIGEgImJlc3QgZml0IiBt YXRjaGluZyBvZiB1c2UgY2FzZXMgd2l0aCB0aGUgdHdvIG1lc3NhZ2UgZmxvd3MgInBhc3Nwb3J0 IiBhbmQgImJhY2stZW5kIiwgYW5kIHdoaWxlIGl0IGlzIHBvc3NpYmxlIHRvIGNsdXN0ZXIgdGhv c2Ugd2l0aCBzb21lLi4uIGxlbmllbmN5LCB0aGUgZ29hbCBpcyB0byBwcm92aWRlIHRoZSBiYXNp cyBmb3IgbWFwcGluZyBieSB1c2luZyBib3RoIHJvbGVzIGFuZCBtZXNzYWdlIGZsb3dzIGluIHRo ZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQuIA0KICAgICJQYXNzcG9ydCIgYW5kICJCYWNrLUVuZCIg Zmxvd3MgcmVhbGx5IGhlbHBlZCB0byBzdHJlYW1saW5lIHRoZSBwcm9ncmVzcyAoVGhhbmtzIERh dmUpLiBBcyB3ZSAoVGhvbWFzLCBOZWQsIE1pY2hhZWwgJiBtZSwgd2l0aCAndW5mb3J0dW5hdGVs eScgDQogICAgdG9vIG11Y2ggaW5wdXQgZnJvbSBncm91cCBtZW1iZXJzISBUaGFua3MgYWxsKSB3 ZW50IHRocm91Z2ggc2V2ZW4gZXhhbXBsZXMgbm93IChzdGlsbCBtaXNzaW5nIGEgcHJvbWluZW50 IEdQIG9uZSwgSSB0aGluaykgd2UgYXJlIHByZXR0eSBjb25maWRlbnQgdGhhdCB0aGlzIHdvcmtz IGNvbnNpc3RlbnRseS4NCiAgICANCiAgICBTb3JyeSBhZ2FpbiB0aGF0IHdlIGRpZCBub3QgYWRk cmVzcyBhbGwgaXNzdWVzIHJhaXNlZC4gVGhlIHByaW9yaXR5IHN0YWNrIHRoYXQgaXMgb3VyIGFj dGlvbiBpdGVtIGxpc3Qgd2FzIGluIGEgY29udGludW91cyBzd2lybCA6KQ0KICAgIA0KICAgIFRo ZXJlIHdpbGwgYmUgb25lIG9yIG1vcmUgc3VibWlzc2lvbnMgYmVmb3JlIGN1dC1vZmYuDQogICAg DQogICAgVmllbGUgR3LDvMOfZSwNCiAgICANCiAgICBIZW5rDQogICAgDQogICAgDQogICAgDQog ICAgDQogICAgT24gMDQuMTEuMTkgMjE6NTYsIERhdmUgVGhhbGVyIHdyb3RlOg0KICAgID4gSGkg R3V5LCBzb3JyeSBmb3IgdGhlIGRlbGF5LCBJIHdhcyBhdCBhIGNvbmZlcmVuY2UgKE9wZW4gU291 cmNlIA0KICAgID4gU3VtbWl0LCBDb25maWRlbnRpYWwgQ29tcHV0aW5nIENvbnNvcnRpdW0sIGFu ZCBMaW51eCBTZWN1cml0eSBTdW1taXQgDQogICAgPiB3ZXJlIGFsbA0KICAgID4gY28tbG9jYXRl ZCkgYWxsIGxhc3Qgd2VlayBhbmQgdHJhdmVsaW5nIHRoZXJlL2JhY2suDQogICAgPiANCiAgICA+ IFJlc3BvbnNlcyBpbmxpbmUgYmVsb3cuDQogICAgPiANCiAgICA+ICpGcm9tOiogUkFUUyA8cmF0 cy1ib3VuY2VzQGlldGYub3JnPiAqT24gQmVoYWxmIE9mICpHdXkgRmVkb3Jrb3cNCiAgICA+ICpT ZW50OiogVGh1cnNkYXksIE9jdG9iZXIgMzEsIDIwMTkgMTI6MjcgUE0NCiAgICA+ICpUbzoqIERh dmUgVGhhbGVyIDxkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4NCiAgICA+ ICpDYzoqIHJhdHNAaWV0Zi5vcmc7IFRob21hcyBIYXJkam9ubyA8aGFyZGpvbm9AbWl0LmVkdT47 IFNtaXRoLCBOZWQgDQogICAgPiA8bmVkLnNtaXRoQGludGVsLmNvbT47IEhlbmsgQmlya2hvbHog DQogICAgPiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT47DQogICAgPiBKZXNzaWNh IEZpdHpnZXJhbGQtTWNLYXkgPGptZm1ja2F5QGdtYWlsLmNvbT4NCiAgICA+ICpTdWJqZWN0Oiog W1JhdHNdIFJJViBhbmQgdGhlIFJBVFMgYXJjaGl0ZWN0dXJlDQogICAgPiANCiAgICA+IEhpIERh dmUsDQogICAgPiANCiAgICA+ICAgIFRoYW5rcyBmb3IgeW91ciBkb2MNCiAgICA+IGh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy RnRvb2wNCiAgICA+IHMuaWV0Zi5vcmclMkZodG1sJTJGZHJhZnQtdGhhbGVyLXJhdHMtYXJjaGl0 ZWN0dXJlLTAwJmFtcDtkYXRhPTAyJTdDMDENCiAgICA+ICU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQu Y29tJTdDOWRmZDY5Mzc1OTI5NGEyNzlhOWUwOGQ3NjE2ZDM0MTAlN0M3MmY5ODgNCiAgICA+IGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwODUwMjg0MTMyNTQwOTMmYW1w O3NkYXRhPWtjNlkNCiAgICA+IDRwYXdZOHF0bGNDRWJ1VTRqc2xYVmhrdHNleHk4ckNIb1Z2NnEl MkZFJTNEJmFtcDtyZXNlcnZlZD0wDQogICAgPiA8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZo dG1sJTJGZHJhZnQtdGhhbGVyLXJhdHMtYXJjaGl0ZWN0dXJlLTAwJmFtcDtkYXRhPTAyJTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzlkZmQ2OTM3NTkyOTRhMjc5YTllMDhkNzYxNmQz NDEwJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA4NTAy ODQxMzI1NDA5MyZhbXA7c2RhdGE9a2M2WTRwYXdZOHF0bGNDRWJ1VTRqc2xYVmhrdHNleHk4ckNI b1Z2NnElMkZFJTNEJmFtcDtyZXNlcnZlZD0wPi4NCiAgICA+IA0KICAgID4gICAgRG8geW91IGhh dmUgYSB2aWV3IGFzIHRvIGhvdyB0aGUgVFBNLWJhc2VkIGF0dGVzdGF0aW9uIGRlc2NyaWJlZCBp biANCiAgICA+IFJJViB3b3VsZCBmaXQgd2l0aCB0aGUgcHJvcG9zZWQgY2F0ZWdvcml6YXRpb24/ DQogICAgPiANCiAgICA+IGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2wNCiAgICA+IHMuaWV0Zi5vcmclMkZodG1sJTJG ZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi0wMCYNCiAgICA+ IGFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzlkZmQ2OTM3NTky OTRhMjc5YTllMDhkNzYNCiAgICA+IDE2ZDM0MTAlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2Nk MDExZGI0NyU3QzElN0MwJTdDNjM3MDg1MDI4NDEzMjU0MDkNCiAgICA+IDMmYW1wO3NkYXRhPW1U S3BWVWpkY3NqNVlMWTR5ZlFNU0NVaTRKUll4cm9QRnpCbEJUTWRKVzglM0QmYW1wO3Jlc2VydmUN CiAgICA+IGQ9MCANCiAgICA+IDxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91 dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0b28NCiAgICA+IGxzLmlldGYub3JnJTJGaHRt bCUyRmRyYWZ0LWZlZG9ya293LXJhdHMtbmV0d29yay1kZXZpY2UtYXR0ZXN0YXRpb24tMDANCiAg ICA+ICZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0M5ZGZkNjkz NzU5Mjk0YTI3OWE5ZTA4ZDcNCiAgICA+IDYxNmQzNDEwJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIy ZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA4NTAyODQxMzI2NDANCiAgICA+IDg5JmFtcDtzZGF0 YT1FWlR3VUo3MG5JUUNETXdZbG1qSU43M3E4TVZaV0FRdlklMkZlcU9PdzdwckUlM0QmYW1wO3Jl c2UNCiAgICA+IHJ2ZWQ9MD4NCiAgICA+IA0KICAgID4gR3JlYXQgcXVlc3Rpb24uIEZyb20gbXkg cmVhZGluZyBvZg0KICAgID4gZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRl c3RhdGlvbi0wMCwgaXQncyBhIGJhY2tncm91bmQgDQogICAgPiBjaGVjayBtb2RlbCwgYXMgc2Vj dGlvbiAyLjMgb2YgeW91ciBkb2MgZXhwbGFpbnM6DQogICAgPiANCiAgICA+PiAgIDMuICBBIFJl bHlpbmcgUGFydHksIHdoaWNoIGhhcyBhY2Nlc3MgdG8gdGhlIFZlcmlmaWVyIHRvIHJlcXVlc3QN CiAgICA+IA0KICAgID4+ICAgICAgIGF0dGVzdGF0aW9uIGFuZCB0byBhY3Qgb24gcmVzdWx0cy4N CiAgICA+IA0KICAgID4gVGhhdCBzZW50ZW5jZSBhYm92ZSBpcyBieSBkZWZpbml0aW9uIHRoZSBi YWNrZ3JvdW5kIGNoZWNrIG1vZGVsLg0KICAgID4gDQogICAgPiBUaGF0IGlzLCB0aGUgQXR0ZXN0 ZXIgdGFsa3MgdG8gdGhlIFJlbHlpbmcgUGFydHksIHRoZSBSZWx5aW5nIFBhcnR5IA0KICAgID4g dGhlbiByZXF1ZXN0cyBhIGJhY2tncm91bmQgY2hlY2sgYnkgY29uc3VsdGluZyBhIFZlcmlmaWVy LA0KICAgID4gDQogICAgPiBhbmQgd2lsbCBhY2NlcHQgd2hhdGV2ZXIgYW5zd2VyIHRoZSBWZXJp ZmllciBkZWNpZGVzLg0KICAgID4gDQogICAgPiBUaGVyZSBhcmUgd2F5cyB3aGVyZSB5b3UgY291 bGQgdXNlIHRoZSBwYXNzcG9ydCBtb2RlbCBmb3IgbmV0d29yayANCiAgICA+IGRldmljZSBhdHRl c3RhdGlvbiwNCiAgICA+IA0KICAgID4gYnV0IHlvdXIgZG9jdW1lbnQgb25seSBjb3ZlcnMgdGhl IGJhY2tncm91bmQgY2hlY2sgbW9kZWwuDQogICAgPiANCiAgICA+ICAgIEl0IGRvZXNuJ3Qgc2Vl bSB0byBiZSBhIHBhc3Nwb3J0LCBzaW5jZSB0aGUgYXR0ZXN0ZXIgb25seSBwcm92aWRlcyANCiAg ICA+IHJhdyBldmlkZW5jZSwgbm90IGEgcHJlLWFwcHJvdmVkIHBhc3Nwb3J0DQogICAgPiANCiAg ICA+IEFncmVlZCwgZnJvbSBteSByZWFkaW5nIG9mIHlvdXIgZG9jdW1lbnQuDQogICAgPiANCiAg ICA+ICAgIEl0IGRvZXNuJ3Qgc2VlbSB0byBiZSBhIGJhY2tncm91bmQgY2hlY2ssIGFzIGl0J3Mg dGhlIHZlcmlmaWVyIHRoYXQgDQogICAgPiBjb2xsZWN0cyBhbmQgYW5hbHl6ZXMgdGhlIGV2aWRl bmNlLg0KICAgID4gDQogICAgPiBJZiBJIHVuZGVyc3RhbmQgeW91ciBwb2ludCBoZXJlLCB5b3Un cmUgc2F5aW5nIHRoYXQgdGhlIHZlcmlmaWVyIHRhbGtzIA0KICAgID4gZGlyZWN0bHkgdG8gdGhl IGF0dGVzdGVyIChlLmcuLCBieSBxdWVyeWluZyB0aGUgeWFuZyBtb2R1bGUpLCB3aXRob3V0IA0K ICAgID4gZ29pbmcgYmFjayB0aHJvdWdoIHRoZSByZWx5aW5nIHBhcnR5LCBhbmQgdGhhdCB0aGF0 IHNlZW1lZCB0byB5b3UgdG8gDQogICAgPiBiZSBkaWZmZXJlbnQgZnJvbSBhIGNsYXNzaWMgImJh Y2tncm91bmQgY2hlY2siIGRpYWdyYW0uICBEaWQgSSBnZXQgDQogICAgPiB5b3VyIHBvaW50IGNv cnJlY3RseT8NCiAgICA+IA0KICAgID4gSWYgc28sIHRoZW4gSSBzZWUgaXQgYXMgYSB2YXJpYXRp b24gb2YgdGhlIGJhY2tncm91bmQgY2hlY2sgbW9kZWwsIGFzIA0KICAgID4gb3Bwb3NlZCB0byBh IHNlcGFyYXRlIG1vZGVsIHBlciBzZS4NCiAgICA+IA0KICAgID4gICAgSSdtIG5vdCBzdXJlIGl0 IG1hdHRlcnMgdG8gUklWLCBhcyB3ZSBoYXZlbid0IGRyYXduIG11Y2ggDQogICAgPiBkaXN0aW5j dGlvbiBiZXR3ZWVuIHRoZSByZWx5aW5nIHBhcnR5IGFuZCB0aGUgdmVyaWZpZXIuICBBcyB5b3Ug c2F5LCANCiAgICA+IGlmIHRoZXkncmUgb24gdGhlIHNhbWUgbWFjaGluZSwgdGhlIGRpc3RpbmN0 aW9uIGlzIGFsbW9zdCBtb290Lg0KICAgID4gDQogICAgPiBBZ3JlZS4NCiAgICA+IA0KICAgID4g QW5kIGlmIHRoZXkncmUgbm90LCBJIHRoaW5rIHRoZSBjb21tdW5pY2F0aW9uIGlzIG91dCBvZiBz Y29wZSBmb3IgUklWIA0KICAgID4gKGlmIG5vdCBmb3IgUkFUUykuDQogICAgPiANCiAgICA+IEkg ZGlzYWdyZWUgdGhhdCBpdCdzIG91dCBvZiBzY29wZSBmb3IgUkFUUy4NCiAgICA+IA0KICAgID4g SSBoYXZlIG5vIG9waW5pb24gb24gd2hldGhlciBpdCdzIG91dCBvZiBzY29wZSBmb3IgUklWLCBz aW5jZSBJIHN0aWxsIA0KICAgID4gaGF2ZSBzb21lIGNvbmZ1c2lvbiBvbiB0aGUgaW50ZW5kZWQg c2NvcGUgb2YgUklWLg0KICAgID4gDQogICAgPiBJIG5vdGUgdGhhdCB5b3VyIGRvY3VtZW50IGNv bnN0cmFpbnMgaXRzIHNjb3BlIChpbiBzZWN0aW9uIDEuNSkgdG8gDQogICAgPiBvbmx5IFRQTS1i YXNlZCBlbWJlZGRlZCBkZXZpY2VzLCBhbmQgbm90IG90aGVyDQogICAgPiANCiAgICA+IHR5cGVz IG9mIGRldmljZXMuICAgSSBjb3VsZG4ndCB0ZWxsIGlmIHRoZSBzY29wZSBvZiBSSVYgYW5kIHRo ZSBzY29wZSANCiAgICA+IG9mIHRoZSBkcmFmdCAod2hpY2ggZG9lcyBub3QgaGF2ZSBSSVYgaW4g dGhlIG5hbWUsIG9yIGluDQogICAgPiANCiAgICA+IHNlY3Rpb24gMS41KSBhcmUgc2ltaWxhciBv ciBvbmUgaXMgYSBzdWJzZXQgb2YgdGhlIG90aGVyLiAgIEluZGVlZCwgDQogICAgPiB0aGUgdGl0 bGUgb2YgdGhlIGRvY3VtZW50IGlzIGZhciB3aWRlciB0aGFuIGp1c3QgVFBNLWJhc2VkDQogICAg PiANCiAgICA+IGVtYmVkZGVkIGRldmljZXMsIHNvIGluIHRoYXQgc2Vuc2UgdGhlIHRpdGxlIGRv ZXNuJ3QgbWF0Y2ggdGhlIHNjb3BpbmcgDQogICAgPiBpbiBzZWN0aW9uIDEuNS4gICBKdXN0IGV4 cGxhaW5pbmcgd2h5IHRoZXJlJ3Mgbm90DQogICAgPiANCiAgICA+IGVub3VnaCBpbmZvcm1hdGlv biBmb3IgbWUgdG8gaGF2ZSBhbiBvcGluaW9uIG9uIHZlcmlmaWVyLXJlbHlpbmcgcGFydHkgDQog ICAgPiBjb21tdW5pY2F0aW9uIGluIFJJVi4NCiAgICA+IA0KICAgID4gVGhlcmUgY2FuIGJlIG90 aGVyIG5ldHdvcmsgYXR0ZXN0YXRpb24gc29sdXRpb25zIHRoYXQgbG9vayBxdWl0ZSANCiAgICA+ IGRpZmZlcmVudCBmcm9tIHRoZSBmbG93IGluIHlvdXIgZHJhZnQNCiAgICA+IA0KICAgID4gKGFu ZCBJIGhhdmUgbm8gc2tpbiBpbiB0aGlzIGdhbWUsIHNvIGRvbid0IGhhdmUgYSBiaWFzIHRvd2Fy ZHMgYW55IA0KICAgID4gc29sdXRpb24gaW4gcGFydGljdWxhcikuICAgRm9yIGV4YW1wbGUsDQog ICAgPiANCiAgICA+IHNvbWUgb3RoZXIgc29sdXRpb24gbWlnaHQgaW52b2x2ZSBhIFJBRElVUyBz ZXJ2ZXIgYmVpbmcgYSBWZXJpZmllciwgc28gDQogICAgPiB0aGUgdmVyaWZpZXIgLSByZWx5aW5n IHBhcnR5IGNvbW11bmljYXRpb24gbWlnaHQNCiAgICA+IA0KICAgID4gYmUgUkFESVVTIGluIHRo YXQgZXhhbXBsZS4gICBUaGVyZSdzIG1hbnkgd2F5cyB0byBjb25zdHJ1Y3Qgc29sdXRpb25zLCAN CiAgICA+IGFuZCBzbyBJIGltYWdpbmUgdGhlcmUncyBwcm9iYWJseSBtdWx0aXBsZQ0KICAgID4g DQogICAgPiBzb2x1dGlvbnMgYWxyZWFkeSBvdXQgdGhlcmUsIHNpbmNlIHRoZSBORUEgcHJvYmxl bSBpcyBub3QgbmV3IGV2ZW4gaW4gDQogICAgPiB0aGUgSUVURiANCiAgICA+IChodHRwczovL25h bTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0 b28NCiAgICA+IGxzLmlldGYub3JnJTJGd2clMkZuZWElMkYmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0 aGFsZXIlNDBtaWNyb3NvZnQuY29tJTcNCiAgICA+IEM5ZGZkNjkzNzU5Mjk0YTI3OWE5ZTA4ZDc2 MTZkMzQxMCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTcNCiAgICA+IEMxJTdD MCU3QzYzNzA4NTAyODQxMzI2NDA4OSZhbXA7c2RhdGE9RXhjck1ZbjUlMkJ2ZCUyRmJTejElMkZa N1d6NEtCMEQNCiAgICA+IHglMkJkNktDYVU2TTJud2VYdzQlM0QmYW1wO3Jlc2VydmVkPTAgaGFz DQogICAgPiANCiAgICA+IHBvaW50ZXJzIHRvIFJGQ3MgZm9yIGFueW9uZSByZWFkaW5nIHRoaXMg d2hvJ3Mgbm90IGFscmVhZHkgYXdhcmUgb2YgaXQpLg0KICAgID4gDQogICAgPiAgICBCdXQgaXQg d291bGQgYmUgZ29vZCBlbnN1cmUgdGhlIGFyY2hpdGVjdHVyZSBhbmQgdGhlIGFwcGxpY2F0aW9u cyANCiAgICA+IG9mIGl0IGFjdHVhbGx5IGRvIGZpdCB0b2dldGhlci4NCiAgICA+IA0KICAgID4g QWJzb2x1dGVseS4NCiAgICA+IA0KICAgID4gRGF2ZQ0KICAgID4gDQogICAgPiAgICBUaGFua3MN CiAgICA+IA0KICAgID4gL2d1eQ0KICAgID4gDQogICAgPiBKdW5pcGVyIEJ1c2luZXNzIFVzZSBP bmx5DQogICAgPiANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KICAgIFJBVFMgbWFpbGluZyBsaXN0DQogICAgUkFUU0BpZXRmLm9yZw0K ICAgIGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmYW1w O2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDOWRmZDY5Mzc1OTI5NGEy NzlhOWUwOGQ3NjE2ZDM0MTAlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzEl N0MwJTdDNjM3MDg1MDI4NDEzMjY0MDg5JmFtcDtzZGF0YT1reGozWjlOSm5PRnNlazNBU2NBdUF0 dnZpOGM0JTJCOGdLSXBZNzNxV3hxJTJGWSUzRCZhbXA7cmVzZXJ2ZWQ9MA0KICAgIA0KDQo= From nobody Tue Nov 5 11:33:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0421012004A for ; Tue, 5 Nov 2019 11:33:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ztqjtdiaB0WM for ; Tue, 5 Nov 2019 11:33:06 -0800 (PST) Received: from mail-ot1-x335.google.com (mail-ot1-x335.google.com [IPv6:2607:f8b0:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A6051200F4 for ; Tue, 5 Nov 2019 11:33:06 -0800 (PST) Received: by mail-ot1-x335.google.com with SMTP id t4so7196468otr.1 for ; Tue, 05 Nov 2019 11:33:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Z5DLL6Nqz63Bdtq8sUgLO2IOJUkjkIiQxtMwM2wPYSk=; b=TgdNsaZhR18XSqYrCxnSOelZZyOGxdCiO+8raHoc3gRyXcRfxJyOC54PyF2XIJXfNv uq/lLxqrK5zIbB7apkSGP8wymngnMmmqEL0PgDtTz03cvdofOi/NBgFsgu+d/WRufzLs X4JxBsSZf7gUComba6KPA/pozwghsPka732HlX9cUmYQlC/9B9IJ4m3BbLtpiBcdNEKV Ltmcxvp9vEl7pgeSa0oVsW5viMgSk1AP7tLtSZYOoK8lr+/JsvgeC6/LjeR7Nf8+Zohs eM40Mb9z7aNqq09u0p0YRRNJjnRbx/uYVUT/A3QK/YVVZTrH2DIsXHekpd0pn38NvIzn U0Ng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Z5DLL6Nqz63Bdtq8sUgLO2IOJUkjkIiQxtMwM2wPYSk=; b=iYqr1EPzMB5pD2LGVZMVOEra+LkE3CGkCIVAIu9hJKwDE+n/vLMHdWNP41e2oFWhkP zE9WJzkyUBgLYIlJpGm9JRcS4Ms5zKoQYzGUapjBJD0U3Uhv6jNmLV9yYmGcoeFKHVQM 3d0cXe9pH461DnEG2i9gaFesYvRUtWZ+1rB136WpAir1KNDuZ/ruDPdXlPBEvNqY9FIl XO0zmxPkhH2ma5ViXuwh8oEyqTmxUzGdQXFJRjszA6bF1IaxiwXRMwsnL84GxUjlYaDT 4k6IRus/XIyoYp0RBvDfWeCM+qSWnj04Bi+bbnjGDROTNfESPVknTCpNmjlH2nzizjKv 2/IA== X-Gm-Message-State: APjAAAWK6j/r/XKLgr7ctXXyJnqbwhib4Nx5DvzxWcaNsI4AMOgywJBw F53/ua1XmNgF+VAWmbitIp1tR4sL5R8BO+jACC0vmIy2 X-Google-Smtp-Source: APXvYqzlnv3WR/gRolt/d6Zf9ihthEVbkdmAnAlalBT0pLDH5WpIAlZ67TRk+8T1M8D29hw+zPuv/XFjFPeH/WVi47Y= X-Received: by 2002:a9d:53c4:: with SMTP id i4mr2599489oth.151.1572982385314; Tue, 05 Nov 2019 11:33:05 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Tue, 5 Nov 2019 14:32:29 -0500 Message-ID: To: Henk Birkholz Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000005091bf05969e80b1" Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 19:33:11 -0000 --0000000000005091bf05969e80b1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Nov 2, 2019 at 3:14 PM Henk Birkholz < henk.birkholz@sit.fraunhofer.de> wrote: > Hi chairs, > hi list, > > we came up with these requests: > > 05 min Current Status Report (incl. some overall hot-topics) > Hi Henk, Can your "current status" be tied to a draft? We are tight on time and I didn't work it in yet as it sounds like a chairs item the way this reads. Could you please clarify as I may be missing your intent. Thank you, Kathleen > 15 min Use Cases (incl. 5-10min discussion) > 30 min Architecture (incl. 10-15min discussion) > 10 min C/R YANG Module (incl. scope and title discussion) > 15 min C/R Interaction Model (incl. IM for protocol IE discussion) > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > > > > On 02.11.19 12:16, Kathleen Moriarty wrote: > > Thank you, Giri. Your request has been noted. I'll post the proposed > > agenda on Monday. We are still waiting on some requests, but will post > > on Monday regardless. > > > > Best regards, > > Kathleen > > > > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam > > > wrote: > > > > I would request 5 minutes to introduce > > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and > > summarize claim differences between it and EAT.____ > > > > __ __ > > > > Thanks,____ > > > > __ __ > > > > -Giri____ > > > > __ __ > > > > *From:* RATS > > > *On Behalf Of * Kathleen Moriarty > > *Sent:* Monday, October 28, 2019 7:37 AM > > *To:* rats@ietf.org > > *Subject:* [Rats] Agenda Requests____ > > > > __ __ > > > > *CAUTION*: This email originated from outside of the > organization.____ > > > > Greetings!____ > > > > __ __ > > > > This is an official call for agenda items. We have received some > > and will be sorting through those to post soon, but would like to > > make an official call for agenda items.____ > > > > __ __ > > > > -- ____ > > > > __ __ > > > > Best regards,____ > > > > Kathleen____ > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > > -- > > > > Best regards, > > Kathleen > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --0000000000005091bf05969e80b1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Sat, Nov 2, 2019 at 3:14 PM Henk B= irkholz <henk.birkhol= z@sit.fraunhofer.de> wrote:
Hi chairs,
hi list,

we came up with these requests:

05 min Current Status Report (incl. some overall hot-topics)

Hi Henk,

Can your "curr= ent status" be tied to a draft?=C2=A0 We are tight on time and I didn&= #39;t work it in yet as it sounds like a chairs item the way this reads.=C2= =A0 Could you please clarify as I may be missing your intent.
Thank you,
Kathleen
=C2=A0
15 min Use Cases (incl. 5-10min discussion)
30 min Architecture (incl. 10-15min discussion)
10 min C/R YANG Module (incl. scope and title discussion)
15 min C/R Interaction Model (incl. IM for protocol IE discussion)

Viele Gr=C3=BC=C3=9Fe,

Henk




On 02.11.19 12:16, Kathleen Moriarty wrote:
> Thank you, Giri.=C2=A0 Your request has been noted.=C2=A0 I'll pos= t the proposed
> agenda on Monday.=C2=A0 We are still waiting=C2=A0on some requests, bu= t will post
> on Monday regardless.
>
> Best regards,
> Kathleen
>
> On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam
> <mand= yam@qti.qualcomm.com <mailto:mandyam@qti.qualcomm.com>> wrote:
>
>=C2=A0 =C2=A0 =C2=A0I would request 5 minutes to introduce
>=C2=A0 =C2=A0 =C2=A0https://tools.i= etf.org/id/draft-mandyam-rats-qwestoken-00.txt and
>=C2=A0 =C2=A0 =C2=A0summarize claim differences between it and EAT.____=
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0Thanks,____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0-Giri____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0*From:* RATS <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>= >
>=C2=A0 =C2=A0 =C2=A0*On Behalf Of * Kathleen Moriarty
>=C2=A0 =C2=A0 =C2=A0*Sent:* Monday, October 28, 2019 7:37 AM
>=C2=A0 =C2=A0 =C2=A0*To:* rats@ietf.org <mailto:rats@ietf.org>
>=C2=A0 =C2=A0 =C2=A0*Subject:* [Rats] Agenda Requests____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0*CAUTION*: This email originated from outside of th= e organization.____
>
>=C2=A0 =C2=A0 =C2=A0Greetings!____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0This is an official call for agenda items.=C2=A0 We= have received some
>=C2=A0 =C2=A0 =C2=A0and will be sorting through those to post soon, but= would like to
>=C2=A0 =C2=A0 =C2=A0make an official call for agenda items.____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0-- ____
>
>=C2=A0 =C2=A0 =C2=A0__ __
>
>=C2=A0 =C2=A0 =C2=A0Best regards,____
>
>=C2=A0 =C2=A0 =C2=A0Kathleen____
>
>=C2=A0 =C2=A0 =C2=A0_______________________________________________
>=C2=A0 =C2=A0 =C2=A0RATS mailing list
>=C2=A0 =C2=A0 =C2=A0= RATS@ietf.org <mailto:RATS@ietf.org>
>=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/listi= nfo/rats
>
>
>
> --
>
> Best regards,
> Kathleen
>
> _______________________________________________
> RATS mailing list
> RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats
>

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000005091bf05969e80b1-- From nobody Tue Nov 5 11:47:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 349981200FF for ; Tue, 5 Nov 2019 11:47:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oIcgiE_m3ANt for ; Tue, 5 Nov 2019 11:47:36 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CC1E71200F4 for ; Tue, 5 Nov 2019 11:47:35 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA5JlWBY011478 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 5 Nov 2019 20:47:33 +0100 Received: from [172.18.105.143] (46.183.103.17) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Tue, 5 Nov 2019 20:47:27 +0100 To: Kathleen Moriarty CC: References: From: Henk Birkholz Message-ID: Date: Tue, 5 Nov 2019 20:47:23 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [46.183.103.17] Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 19:47:38 -0000 Hi Kathleen, this is not about a single I-D, but about moving and structuring I-D content across I-Ds. If you can benefit from 5 more minutes, I am happy to give them back and we can try to start that on the list. Viele Grüße, Henk On 05.11.19 20:32, Kathleen Moriarty wrote: > > > On Sat, Nov 2, 2019 at 3:14 PM Henk Birkholz > > wrote: > > Hi chairs, > hi list, > > we came up with these requests: > > 05 min Current Status Report (incl. some overall hot-topics) > > > Hi Henk, > > Can your "current status" be tied to a draft?  We are tight on time and > I didn't work it in yet as it sounds like a chairs item the way this > reads.  Could you please clarify as I may be missing your intent. > > Thank you, > Kathleen > > 15 min Use Cases (incl. 5-10min discussion) > 30 min Architecture (incl. 10-15min discussion) > 10 min C/R YANG Module (incl. scope and title discussion) > 15 min C/R Interaction Model (incl. IM for protocol IE discussion) > > Viele Grüße, > > Henk > > > > > On 02.11.19 12:16, Kathleen Moriarty wrote: > > Thank you, Giri.  Your request has been noted.  I'll post the > proposed > > agenda on Monday.  We are still waiting on some requests, but > will post > > on Monday regardless. > > > > Best regards, > > Kathleen > > > > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam > > > >> > wrote: > > > >     I would request 5 minutes to introduce > > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and > >     summarize claim differences between it and EAT.____ > > > >     __ __ > > > >     Thanks,____ > > > >     __ __ > > > >     -Giri____ > > > >     __ __ > > > >     *From:* RATS >> > >     *On Behalf Of * Kathleen Moriarty > >     *Sent:* Monday, October 28, 2019 7:37 AM > >     *To:* rats@ietf.org > > > >     *Subject:* [Rats] Agenda Requests____ > > > >     __ __ > > > >     *CAUTION*: This email originated from outside of the > organization.____ > > > >     Greetings!____ > > > >     __ __ > > > >     This is an official call for agenda items.  We have received some > >     and will be sorting through those to post soon, but would like to > >     make an official call for agenda items.____ > > > >     __ __ > > > >     -- ____ > > > >     __ __ > > > >     Best regards,____ > > > >     Kathleen____ > > > >     _______________________________________________ > >     RATS mailing list > > RATS@ietf.org > > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > > -- > > > > Best regards, > > Kathleen > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > > -- > > Best regards, > Kathleen From nobody Tue Nov 5 11:51:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AD251200F4 for ; Tue, 5 Nov 2019 11:51:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5oRb5CMhpipj for ; Tue, 5 Nov 2019 11:51:04 -0800 (PST) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D66B1200A4 for ; Tue, 5 Nov 2019 11:51:04 -0800 (PST) Received: by mail-ot1-x32b.google.com with SMTP id m15so9963291otq.7 for ; Tue, 05 Nov 2019 11:51:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=jv8vii89asjC6wQPtbN3mNuRAF5vXRuHo9mdAHp4N2w=; b=jOGWTO6VQDHpFxr7e0OEq2A71rdVAvN4Oev3jQn4Zs4KbGk6s7d12S2h9g2/rd1LlE HSXZCXbzshvj63KwXjMDbxA48en/A0k1YLERtph8b72b7bKOMejEkNw3+UY26VAlu4Ug CKRrZCRAneeI3hWPjxFir9ACfu2Cmco9qMhSsrLd73PtYlMsr2U5PytdnOs6GH6cNmlK YoL2818qfro1P6ZX8Psv0C10Kou5WT2mdfFyZBkZzh/E0zttO/bgJbOebUNICdDz6RAY 60wMCH90BRXnCkrsOrZtRbHw0bNZQ0feyCREzqSASbKsQjjgP2iROPXO6gzkBolpMvUH bjDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=jv8vii89asjC6wQPtbN3mNuRAF5vXRuHo9mdAHp4N2w=; b=tYwKOlprxp7wdZe5qw0ykP8Gd3fAS+xL5QsOh+/ZReGTU5UfXqhsX/3BCBUa861Qql XkyAqhm95HA76NVHdE7aeNW8uRB9wGP9L4w02va3kfbxeZjWAIjNvBXgG9YevDuiv3qS yJ03FkWPDsSLNsjocjys0m/kOZjErQM+OsCF778t/uzNCYjEbp1WvqFKrM2vI6pyJDK3 6ckweDk5rhEx+uOvJKZVgih2gheN0XhveMtGewWzlBMtXUZNXbuwl98C7iypKYMMWzNB RNsGsG3HpgvbVJCnmaRtxV3xX7NhVKpg7Ozjqce6v8yPKNZwWg8WLP2mmuDEyrfoBzWj uvmA== X-Gm-Message-State: APjAAAX/wJO+anlFJQaHLxfJpMcqmy5CSzep32Um8sop+o4mdUsMDvXJ Tp3jrJCMNBAshNC4dBRLdDTflZYnCOBz1k9cYr/yg58q X-Google-Smtp-Source: APXvYqyDLRSq9skZWxco5Rixb2Wc3+7e7m80V/GOkYyVKQGjA+bI0aKHI6lHljQY7vPC4YV0bIUt9Ooilpb0DrxSpUs= X-Received: by 2002:a9d:7219:: with SMTP id u25mr23577636otj.342.1572983463680; Tue, 05 Nov 2019 11:51:03 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Tue, 5 Nov 2019 14:50:27 -0500 Message-ID: To: Henk Birkholz Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="00000000000097208305969ec021" Archived-At: Subject: Re: [Rats] Agenda Requests X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 19:51:07 -0000 --00000000000097208305969ec021 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks, Henk. Please do discuss on the list as that may help the chairs in advance of the session as well well as participants. Best regards, Kathleen On Tue, Nov 5, 2019 at 2:47 PM Henk Birkholz < henk.birkholz@sit.fraunhofer.de> wrote: > Hi Kathleen, > > this is not about a single I-D, but about moving and structuring I-D > content across I-Ds. If you can benefit from 5 more minutes, I am happy > to give them back and we can try to start that on the list. > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > On 05.11.19 20:32, Kathleen Moriarty wrote: > > > > > > On Sat, Nov 2, 2019 at 3:14 PM Henk Birkholz > > > > wrote: > > > > Hi chairs, > > hi list, > > > > we came up with these requests: > > > > 05 min Current Status Report (incl. some overall hot-topics) > > > > > > Hi Henk, > > > > Can your "current status" be tied to a draft? We are tight on time and > > I didn't work it in yet as it sounds like a chairs item the way this > > reads. Could you please clarify as I may be missing your intent. > > > > Thank you, > > Kathleen > > > > 15 min Use Cases (incl. 5-10min discussion) > > 30 min Architecture (incl. 10-15min discussion) > > 10 min C/R YANG Module (incl. scope and title discussion) > > 15 min C/R Interaction Model (incl. IM for protocol IE discussion) > > > > Viele Gr=C3=BC=C3=9Fe, > > > > Henk > > > > > > > > > > On 02.11.19 12:16, Kathleen Moriarty wrote: > > > Thank you, Giri. Your request has been noted. I'll post the > > proposed > > > agenda on Monday. We are still waiting on some requests, but > > will post > > > on Monday regardless. > > > > > > Best regards, > > > Kathleen > > > > > > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandyam > > > > > >= > > > wrote: > > > > > > I would request 5 minutes to introduce > > > https://tools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt an= d > > > summarize claim differences between it and EAT.____ > > > > > > __ __ > > > > > > Thanks,____ > > > > > > __ __ > > > > > > -Giri____ > > > > > > __ __ > > > > > > *From:* RATS > > >> > > > *On Behalf Of * Kathleen Moriarty > > > *Sent:* Monday, October 28, 2019 7:37 AM > > > *To:* rats@ietf.org > > > > > > *Subject:* [Rats] Agenda Requests____ > > > > > > __ __ > > > > > > *CAUTION*: This email originated from outside of the > > organization.____ > > > > > > Greetings!____ > > > > > > __ __ > > > > > > This is an official call for agenda items. We have received > some > > > and will be sorting through those to post soon, but would > like to > > > make an official call for agenda items.____ > > > > > > __ __ > > > > > > -- ____ > > > > > > __ __ > > > > > > Best regards,____ > > > > > > Kathleen____ > > > > > > _______________________________________________ > > > RATS mailing list > > > RATS@ietf.org > > > > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > > > > > > -- > > > > > > Best regards, > > > Kathleen > > > > > > _______________________________________________ > > > RATS mailing list > > > RATS@ietf.org > > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > > > > > -- > > > > Best regards, > > Kathleen > --=20 Best regards, Kathleen --00000000000097208305969ec021 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Thanks, Henk.=C2=A0 Please do discuss on the list as that = may help the chairs in advance of the session as well well as participants.=

Best regards,
Kathleen

On Tue, Nov 5, 20= 19 at 2:47 PM Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
Hi Kathleen,

this is not about a single I-D, but about moving and structuring I-D
content across I-Ds. If you can benefit from 5 more minutes, I am happy to give them back and we can try to start that on the list.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 05.11.19 20:32, Kathleen Moriarty wrote:
>
>
> On Sat, Nov 2, 2019 at 3:14 PM Henk Birkholz
> <henk.birkholz@sit.fraunhofer.de
> <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:
>
>=C2=A0 =C2=A0 =C2=A0Hi chairs,
>=C2=A0 =C2=A0 =C2=A0hi list,
>
>=C2=A0 =C2=A0 =C2=A0we came up with these requests:
>
>=C2=A0 =C2=A0 =C2=A005 min Current Status Report (incl. some overall ho= t-topics)
>
>
> Hi Henk,
>
> Can your "current status" be tied to a draft?=C2=A0 We are t= ight on time and
> I didn't work it in yet as it sounds like a chairs item the way th= is
> reads.=C2=A0 Could you please clarify as I may be missing your intent.=
>
> Thank you,
> Kathleen
>
>=C2=A0 =C2=A0 =C2=A015 min Use Cases (incl. 5-10min discussion)
>=C2=A0 =C2=A0 =C2=A030 min Architecture (incl. 10-15min discussion)
>=C2=A0 =C2=A0 =C2=A010 min C/R YANG Module (incl. scope and title discu= ssion)
>=C2=A0 =C2=A0 =C2=A015 min C/R Interaction Model (incl. IM for protocol= IE discussion)
>
>=C2=A0 =C2=A0 =C2=A0Viele Gr=C3=BC=C3=9Fe,
>
>=C2=A0 =C2=A0 =C2=A0Henk
>
>
>
>
>=C2=A0 =C2=A0 =C2=A0On 02.11.19 12:16, Kathleen Moriarty wrote:
>=C2=A0 =C2=A0 =C2=A0 > Thank you, Giri.=C2=A0 Your request has been = noted.=C2=A0 I'll post the
>=C2=A0 =C2=A0 =C2=A0proposed
>=C2=A0 =C2=A0 =C2=A0 > agenda on Monday.=C2=A0 We are still waiting= =C2=A0on some requests, but
>=C2=A0 =C2=A0 =C2=A0will post
>=C2=A0 =C2=A0 =C2=A0 > on Monday regardless.
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 > Best regards,
>=C2=A0 =C2=A0 =C2=A0 > Kathleen
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 > On Fri, Nov 1, 2019 at 1:50 PM Giridhar Mandy= am
>=C2=A0 =C2=A0 =C2=A0 > <mandyam@qti.qualcomm.com <mailto:mandyam@qti.qualcomm.com>
>=C2=A0 =C2=A0 =C2=A0<mailto:mandyam@qti.qualcomm.com <mailto:mandyam@qti.qualcomm.com>>>
>=C2=A0 =C2=A0 =C2=A0wrote:
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0I would request 5 minutes = to introduce
>=C2=A0 =C2=A0 =C2=A0 > https://t= ools.ietf.org/id/draft-mandyam-rats-qwestoken-00.txt and
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0summarize claim difference= s between it and EAT.____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Thanks,____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0-Giri____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*From:* RATS <rats-bounces@ietf.org
>=C2=A0 =C2=A0 =C2=A0<mailto:rats-bounces@ietf.org> <mailto:rats-bounces@ietf.org
>=C2=A0 =C2=A0 =C2=A0<mailto:rats-bounces@ietf.org>>>
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*On Behalf Of * Kathleen M= oriarty
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*Sent:* Monday, October 28= , 2019 7:37 AM
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*To:* rats@ietf.org <mailto:rats@ietf.org>
>=C2=A0 =C2=A0 =C2=A0<mailto:rats@ietf.org <mailto:rats@ietf.org>>
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*Subject:* [Rats] Agenda R= equests____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0*CAUTION*: This email orig= inated from outside of the
>=C2=A0 =C2=A0 =C2=A0organization.____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Greetings!____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0This is an official call f= or agenda items.=C2=A0 We have received some
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0and will be sorting throug= h those to post soon, but would like to
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0make an official call for = agenda items.____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0-- ____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__ __
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Best regards,____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0Kathleen____
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0__________________________= _____________________
>=C2=A0 =C2=A0 =C2=A0 >=C2=A0 =C2=A0 =C2=A0RATS mailing list
>=C2=A0 =C2=A0 =C2=A0 > RATS@ietf.org <mailto:RATS@ietf.org> <mailto:RATS@ietf.org
>=C2=A0 =C2=A0 =C2=A0<mailto:RATS@ietf.org>>
>=C2=A0 =C2=A0 =C2=A0 > https://www.ietf.org/mailman= /listinfo/rats
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 > --
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 > Best regards,
>=C2=A0 =C2=A0 =C2=A0 > Kathleen
>=C2=A0 =C2=A0 =C2=A0 >
>=C2=A0 =C2=A0 =C2=A0 > _____________________________________________= __
>=C2=A0 =C2=A0 =C2=A0 > RATS mailing list
>=C2=A0 =C2=A0 =C2=A0 > RATS@ietf.org <mailto:RATS@ietf.org>
>=C2=A0 =C2=A0 =C2=A0 > https://www.ietf.org/mailman= /listinfo/rats
>=C2=A0 =C2=A0 =C2=A0 >
>
>=C2=A0 =C2=A0 =C2=A0_______________________________________________
>=C2=A0 =C2=A0 =C2=A0RATS mailing list
>=C2=A0 =C2=A0 =C2=A0= RATS@ietf.org <mailto:RATS@ietf.org>
>=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/listi= nfo/rats
>
>
>
> --
>
> Best regards,
> Kathleen


--

Best regards,
Kathleen
--00000000000097208305969ec021-- From nobody Tue Nov 5 12:17:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A153D120B45 for ; Tue, 5 Nov 2019 12:17:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1TEM0X9Ls3wo for ; Tue, 5 Nov 2019 12:17:13 -0800 (PST) Received: from p3plsmtpa07-01.prod.phx3.secureserver.net (p3plsmtpa07-01.prod.phx3.secureserver.net [173.201.192.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE25F120B7E for ; Tue, 5 Nov 2019 12:17:13 -0800 (PST) Received: from [10.122.1.38] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id S5GKiD677KgoPS5GLiTVf4; Tue, 05 Nov 2019 13:17:13 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_0F0F033C-3AAC-4121-A0B5-7ABD4B8A50A3" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> Date: Tue, 5 Nov 2019 12:17:12 -0800 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfF7Tf4jtjZVppibxeb0GiPi+JsF7/kSGBZOSJd3682AumDApFAAp/JzMHuzDg6uIvEcu9vAwGowdTtSKRzJVR5pJeFUmH+cJsjs1YYlNCVtLRFlTbAVm 9cuyoYJBK82bKBApZS/Ygbx2Zkulmuu4aWvPOngQRORduIsPxWCIRddE Archived-At: Subject: [Rats] Out-of-band key material set up in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 20:17:16 -0000 --Apple-Mail=_0F0F033C-3AAC-4121-A0B5-7ABD4B8A50A3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 An issue I have with both the current architecture documents is that = they do not discuss the need for some out of band key material set up to = make verification work. The manufacturer of the device must put some private key into each = device so that the device can sign attestation evidence. Most likely the = manufacturer also creates the verifying key material, but they may or = may not be the verifier. If they are not the verifier, somehow the = verifier of attestation evidence must have corresponding key material to = verify the signature. This paragraph could be a start of the text. I think this is a critical = part of the architecture because attestation doesn=E2=80=99t work = without it.=20 I do NOT want to specify any details for how this happens in the = architecture doc. It needs to stay at a high level. It stays at a high = level in other places. For example it discusses claims, but doesn=E2=80=99= t defined individual claims. I think there=E2=80=99s a large parallel with HTTPS. HTTPS wouldn=E2=80=99= t work without some out-of-band distribution of certs/keys for = verification. Just like with HTTPS, there are a lot of different business models, = protocols and end-end systems that this out-of-band set can be done. = Here=E2=80=99s a few that are real today and publicly described: - Intel EPID (no X.509, the ECDAA algorithm, a service run exclusively = by Intel for Intel chips for fee) - Android Attestation (buckets of keys distributed to phone makers, = X.509, a verification service run exclusively by Google) - FIDO Metadata service (a 3rd party doing X.509 certificate = distribution for many FIDO vendors) I also know of some that are not publicly described that do not use = X.509, some even using symmetric key material. I think business models will drive architecture in some cases. I also = think the cost of putting keys into chips and devices is a another = driver. A third driver is big IoT back-end service providers like Amazon = and Google. I mention all these only illustrate the variety and thus the futility of = trying to come up with one standard way. However, I think to help the world get their heads around how = attestation works; leaving this out of the architecture would be leaving = a critical part out. LL --Apple-Mail=_0F0F033C-3AAC-4121-A0B5-7ABD4B8A50A3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 An = issue I have with both the current architecture documents is that they = do not discuss the need for some out of band key material set up to make = verification work.

The manufacturer of the device must put some private key into = each device so that the device can sign attestation evidence. Most = likely the manufacturer also creates the verifying key material, but = they may or may not be the verifier.  If they are not the verifier, = somehow the verifier of attestation evidence must have corresponding key = material to verify the signature.

This paragraph could be a start of the = text. I think this is a critical part of the architecture because = attestation doesn=E2=80=99t work without it. 

I do NOT want to specify = any details for how this happens in the architecture doc. It needs to = stay at a high level. It stays at a high level in other places. For = example it discusses claims, but doesn=E2=80=99t defined individual = claims.

I think there=E2=80=99s a large parallel with HTTPS. HTTPS = wouldn=E2=80=99t work without some out-of-band distribution of = certs/keys for verification.

Just like with HTTPS, there are a lot = of different business models, protocols and end-end systems that this = out-of-band set can be done. Here=E2=80=99s a few that are real today = and publicly described:

- Intel EPID (no X.509, the ECDAA algorithm, a service run = exclusively by Intel for Intel chips for fee)
- = Android Attestation (buckets of keys distributed to phone makers, X.509, = a verification service run exclusively by Google)
- = FIDO Metadata service (a 3rd party doing X.509 certificate distribution = for many FIDO vendors)

I also know of some that are not publicly described that do = not use X.509, some even using symmetric key material.

I think business models = will drive architecture in some cases. I also think the cost of putting = keys into chips and devices is a another driver. A third driver is big = IoT back-end service providers like Amazon and Google.

I mention all these only = illustrate the variety and thus the futility of trying to come up with = one standard way.

However, I think to help the world get their heads around how = attestation works; leaving this out of the architecture would be leaving = a critical part out.

LL

= --Apple-Mail=_0F0F033C-3AAC-4121-A0B5-7ABD4B8A50A3-- From nobody Tue Nov 5 14:55:05 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 021D2120C30 for ; Tue, 5 Nov 2019 14:54:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.499 X-Spam-Level: X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Atl5jQ1/; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=dPmXbHLd Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13z3la56W7Yg for ; Tue, 5 Nov 2019 14:54:54 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC73120C01 for ; Tue, 5 Nov 2019 14:54:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5933; q=dns/txt; s=iport; t=1572994494; x=1574204094; h=from:to:subject:date:message-id:mime-version; bh=vnniGW6wNsjrsJRsO0A0AQCiIU5Rw8XLF2QLYBYHIEk=; b=Atl5jQ1/BEgTuoA9GJxcy7rWUdnrAsJhvy7Fiyq9vIeHqEb3JVJdDriN xERGmNk54NQDdWo9U8cJ035CuwoiV6yUqI426G67M3Kybkf8bzBOdzI4H ed9lhE6b7yBToJMVMQs5POz7reCtLhEozyLrxS3gzjdEw5KpnqFSNK3xv 8=; IronPort-PHdr: =?us-ascii?q?9a23=3A0UrEIhTm3mgfKKY3mFLth04MIdpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESXBNfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOioxFcFdVVlq13q6KkNSXs35Yg6arw=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ChFgBe/cFd/5NdJa1mHgELHIFzC4E?= =?us-ascii?q?cL1AFbFggBAsqhCmDRgOKfE6VLIRiglIDVAkBAQEMAQEjCgIBAYRAGYN3JDc?= =?us-ascii?q?GDgIDCwEBBAEBAQIBBQRthTcBC4VqCwYdAQE4EQFKAgQwJwQ1gwABgXlNAy4?= =?us-ascii?q?BDqZEAoE4iGB1gTKCfgEBBYFIQUCCPBiCFwMGgTaMFBiBf4E4H4VsAgMBggq?= =?us-ascii?q?CYzKCLJAAhTwkiRWPBQqCJAOHEo4nG4I8h1uPUo5DgUCGbpEuAgQCBAUCDgE?= =?us-ascii?q?BBYFoI4FYcBUaSwGCQVARFIMGg3OFFIU/dIEokGsBAQ?= X-IronPort-AV: E=Sophos;i="5.68,271,1569283200"; d="scan'208,217";a="658144096" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 05 Nov 2019 22:54:53 +0000 Received: from XCH-RCD-003.cisco.com (xch-rcd-003.cisco.com [173.37.102.13]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xA5MsrEb000407 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 5 Nov 2019 22:54:53 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-RCD-003.cisco.com (173.37.102.13) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 5 Nov 2019 16:54:52 -0600 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 5 Nov 2019 16:54:52 -0600 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 5 Nov 2019 16:54:52 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CdD/QvDrxVo7cj3mEMZcYuYpU2XDg1XliBl+oQWt+FPToMPJCpL5jWsiFhaK4hhD1xiBWAt78xdCkHTBfagqPOxYi/wo4P+oy2vnfamwZDWoSgA4YbQ1eUuvOHn4oLqZRSrE9WjPYysO66TqEO2SBOUW0qKTu6Ky5ykYRAh+aL3fne8rsFn3wvRgkfzHlPH0F3OpqldBNpaFP2fYRvDSjMWyY9wRRQDsQO4cNul1h7/eQC0H4B6A22z6TXSpiu8kW2oHgL5j60FztQxjLtZz1sZqB2knE1gys1jiOy+jos35HdhpgPBnkMVf8LUCgORIH51cLe7FLOYD38ajIZOaWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vnniGW6wNsjrsJRsO0A0AQCiIU5Rw8XLF2QLYBYHIEk=; b=ZBNEj3NT18UZW78irqboHUUnL1sVKCd7ZcpC20ZO9i+PXV5i+X3R9FHdMRRYq+f1yfu4FqB7J+tsD7kR1XvZ23+c+zaD1Mmx38qeGR6/ybN28yYBxEO0II3damY7VrV+QxpAVJJ4BMhTtnJDXbdIFDE4SzMktzA0EZmpv/ZHHDv1SCuptiphFLb0bKji/PWM1ncLlpxZsvYD53m7ksoEQRySgj+0pJiAkudTslIQ1Ca1XB1c5OLCXxZXm7bEIVYaUvO7nKWxiVOOCDwjbxj86JwtF5GyOuOMTW/WMATds2sor175gpoN/W6WOkxBdV4URgXVpOjCGgNOhXO6IKPhYw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vnniGW6wNsjrsJRsO0A0AQCiIU5Rw8XLF2QLYBYHIEk=; b=dPmXbHLdpBaoFmjh5f8VtDPNyQ0h3AAbv1RX9++hccIHbcVWdjlchb/MVnSwfR+aKIpT/bnKAs3UcuQZvqMrJRdN03FIcmLr4u5Cw+G7L6j9LocltNeCQewOJhBZVxLHaUPJO8IcGr42bd5V9pg63esAC7rn0anikhCIVNpbczg= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB1565.namprd11.prod.outlook.com (10.172.54.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Tue, 5 Nov 2019 22:54:51 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2408.024; Tue, 5 Nov 2019 22:54:51 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0Q== Date: Tue, 5 Nov 2019 22:54:51 +0000 Message-ID: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.f.191014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1003::814] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 435b8f4f-1032-4f4d-4c4d-08d762432aaa x-ms-traffictypediagnostic: MWHPR11MB1565: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0212BDE3BE x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(366004)(39860400002)(376002)(396003)(136003)(51914003)(199004)(189003)(76116006)(2906002)(25786009)(6916009)(6506007)(33656002)(91956017)(71200400001)(71190400001)(99286004)(2616005)(6306002)(5640700003)(54896002)(6436002)(6512007)(8936002)(5660300002)(4744005)(476003)(2501003)(8676002)(81156014)(81166006)(256004)(14454004)(6116002)(186003)(2351001)(36756003)(316002)(58126008)(86362001)(6486002)(486006)(46003)(606006)(966005)(66446008)(66946007)(64756008)(66556008)(66476007)(102836004)(7736002)(14444005)(1730700003)(236005)(478600001); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1565; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: vCpsx5B9t2seetnA2D+jmI5CxzIPLwxnwLtmpjcmEPHGOThLkRAuCgW3ovERLwELJeToASxVWjLc2vPTbz3HBXFi8KQaAX97a1eqWiiIZaigbpdGyKP9CNzNbRZ0sEoBqPiKyICxfNhndeFgIO5TF+jOBRGwh+7OWLHrsmGpORIC7N3K04SLxKZN0RcwWS2ermDlqfplq68wtRhZtAUPSWeC8WVKAv6HgYuGRNyW1VBoPL9oDbopq7MI98WQv4A/tmoLxNIP+6f4EFOluWX3m+0NJPZkaxGaJR/wPP3Lyk418RZbU8HrN7HQnfrgo0zPBWeXtUbJRXuNCEuJ0JvS2etww1XSit4pxlFoGrnAyDt7DB5Guc9WRwqb4E+cd+rPYfar6d2gztBePoiwgPegmmHqHEf+iKCsY0S/rwOBKFuZKXW4QTVuGjhSmGKNMdJjSl233TtGaXtvzD6KwbEGQbzMHiBDvM8EqvSdWZr9th4= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_8B173958FC2A4D1DA81CF324AB632CD7ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 435b8f4f-1032-4f4d-4c4d-08d762432aaa X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2019 22:54:51.3389 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DwRoKz5OUzzXnD6om/CvQADbk+YzMnaUf2xsWtRS7ODP5TUcJCWRon/iAlN4aAmS+unvN3eQlMpuQBPEivtWMg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1565 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.13, xch-rcd-003.cisco.com X-Outbound-Node: rcdn-core-11.cisco.com Archived-At: Subject: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 22:55:04 -0000 --_000_8B173958FC2A4D1DA81CF324AB632CD7ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxsLA0KVGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgYW5kIHJlc3BvbnNlcyByZWNlaXZlZCB0aHVz IGZhciBvbiB0aGUgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtYmlya2hv bHotcmF0cy1iYXNpYy15YW5nLW1vZHVsZS8NCmRyYWZ0Lg0KDQpUaGVyZSAgd2FzIGNvbnNlbnN1 cyB0aGF0IHRoZSBmb2N1cyBvZiB0aGUgZHJhZnQgaXMgbW9yZSBhYm91dCBUUE0gYmFzZWQgYXR0 ZXN0YXRpb25zIHNvIHRoZSBkcmFmdCBzaG91bGQgYmUgbW9kaWZpZWQgYWNjb3JkaW5nbHkuICBB IHN1Z2dlc3RlZCB0aXRsZSB3b3VsZCBiZSDigJxZYW5nIE1vZHVsZSBmb3IgVFBNIGJhc2VkIFJl bW90ZSBBdHRlc3RhdGlvbnPigJ0sIHRoZSBmaWxlLCBvbmNlIGFkb3B0ZWQsIHdvdWxkIGJlIHJl bmFtZWQgdG8gZHJhZiAtcmF0cy10cG0teWFuZy1tb2R1bGUNCg0KV2l0aCB0aGlzIHByb3Bvc2Vk IHVwZGF0ZSwgdGhpcyBpcyBhIGNhbGwgZm9yIGFkb3B0aW9uIGZvciB0aGF0IGRyYWZ0IHdpdGgg dGhlIG1vZGlmaWVkIG5hbWUuICBXZSB3b3VsZCBsaWtlIHRvIGNsb3NlIHRoZSBjb25maXJtYXRp b24gYnkgdGhlIEZyaWRheSBvZiB0aGUgSUVURiAxMDYsIGUuZy4gRnJpZGF5IE5vdiAyMiBFT0Qg KElFVEYgdGltZSkuICBJZiB5b3UgaGF2ZSBvYmplY3Rpb25zIG9uIGFkb3B0aW5nIHRoZSBkcmFm dCwgcGxlYXNlIHN0YXRlIHlvdXIgcmF0aW9uYWxlIGFzIHdlbGwuDQoNCldhcm0gcmVnYXJkcywN CiAgICAgICAgICAgICAgICBOYW5jeQ0K --_000_8B173958FC2A4D1DA81CF324AB632CD7ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <589E7F676B9D6D4A8510DB76C805E1DF@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Oi13ZWJraXQt c3RhbmRhcmQ7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KLyogU3R5bGUgRGVm aW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7 bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlw ZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxv d2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4g MS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIj OTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QWxsLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5U aGFua3MgZm9yIHRoZSBmZWVkYmFjayBhbmQgcmVzcG9uc2VzIHJlY2VpdmVkIHRodXMgZmFyIG9u IHRoZQ0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LWJpcmtob2x6LXJhdHMtYmFzaWMteWFuZy1tb2R1bGUvIj5odHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9kdWxlLzwvYT48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5kcmFmdC4mbmJzcDsgPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5UaGVyZSAmbmJzcDt3YXMgY29uc2Vuc3VzIHRoYXQgdGhlIGZvY3VzIG9mIHRo ZSBkcmFmdCBpcyBtb3JlIGFib3V0IFRQTSBiYXNlZCBhdHRlc3RhdGlvbnMgc28gdGhlIGRyYWZ0 IHNob3VsZCBiZSBtb2RpZmllZCBhY2NvcmRpbmdseS4mbmJzcDsgQSBzdWdnZXN0ZWQgdGl0bGUg d291bGQgYmUg4oCcPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90Oy13ZWJraXQtc3RhbmRhcmQmcXVvdDssc2VyaWY7Y29sb3I6YmxhY2siPllhbmcN CiBNb2R1bGUgZm9yIFRQTSBiYXNlZCBSZW1vdGUgQXR0ZXN0YXRpb25zPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij7igJ0sIHRoZSBmaWxlLCBvbmNlIGFkb3B0ZWQsIHdvdWxk IGJlIHJlbmFtZWQgdG8gZHJhZiAtcmF0cy10cG0teWFuZy1tb2R1bGU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPldpdGggdGhpcyBwcm9wb3NlZCB1cGRhdGUsIHRo aXMgaXMgYSBjYWxsIGZvciBhZG9wdGlvbiBmb3IgdGhhdCBkcmFmdCB3aXRoIHRoZSBtb2RpZmll ZCBuYW1lLiZuYnNwOyBXZSB3b3VsZCBsaWtlIHRvIGNsb3NlIHRoZSBjb25maXJtYXRpb24gYnkg dGhlIEZyaWRheSBvZiB0aGUgSUVURiAxMDYsIGUuZy4gRnJpZGF5IE5vdiAyMiBFT0QgKElFVEYg dGltZSkuJm5ic3A7IElmDQogeW91IGhhdmUgb2JqZWN0aW9ucyBvbiBhZG9wdGluZyB0aGUgZHJh ZnQsIHBsZWFzZSBzdGF0ZSB5b3VyIHJhdGlvbmFsZSBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2FybSByZWdhcmRzLCA8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IE5hbmN5IDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_8B173958FC2A4D1DA81CF324AB632CD7ciscocom_-- From nobody Tue Nov 5 15:41:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3E7E120112 for ; Tue, 5 Nov 2019 15:41:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KTnr28v9b96F for ; Tue, 5 Nov 2019 15:41:01 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-eopbgr820129.outbound.protection.outlook.com [40.107.82.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E798D120072 for ; Tue, 5 Nov 2019 15:40:59 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jm7d5XNyosmSqC4LKJkZQ4Q0zRlYF5caI4tbVKcU4AcTC5DvCO8dEhnNs1/dPlKtiM8SQ6nMyhWmWQKKnDtxlGCuVaNB1tZiwwVxYo2ILGEWB775ldgPdJydN3e1Z198+BRJHIJbeduLily56FnZrtOeRrFOarJUpek9/HFb80ZfVn6oXhw5i3PiUC2P+q1yLtAlOrhTYQJ+gZyJOF/p5F7x1siE3zkH396Pkk1pu/GB0AmRQADkb7I49IwuitCInyNFQJHExNwloMvrBZJ8CnFTs+m5cejSo4bIIQ7ekItaqjRfp8/zdeCJjf02fHgFrUhRTic/lSOcBFEpgrVBaQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JIsWEMIGTsFuDQEyrf8bsj4iy1aMaCnB0fHDgQZ6sb4=; b=jVZQKQj4cnQSdbx9MRiI8dEp+gdOBlnIZ4NMDI+9wXb2OhS1BAxqryD4mh7DwON9oTCtea7bdo4EsjvfvenWVnpLMFRtdW44nGsZtsYJAhDL2C/5XMIuzAsVzFXRtd3SVWFe1u0AN4BbJ22kvRtXCcCMoAtcdWC3qeSPTf2UjRc3jpeotuOJu+ymZ4/EFicU5ecxFBucsycgKqQdH+AEbEgS2VQEVS/pdnPyZ9VF+TbKSVT0w4XGdowZYPbGtNpl18g9+XNbEXblZCszJK4eg/9gFVV/25Ye0ZzTTNQlRLzeq2yoxyLCgXc5/zhp8IDJM41DikrVjeUqdcNrBIA3/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JIsWEMIGTsFuDQEyrf8bsj4iy1aMaCnB0fHDgQZ6sb4=; b=S+OpHgJCGim99KxYWiRkg4HK7q0a1qAAUa5mSYt5bcGNtyORLUuuDBipvpJWBTmymLvOEqw2XTF2J8LVAMfYqFD4w0sEL/Exo2orDE9B9PYtjUZwqvTEemR3TPRPMi/DGZPuPjvIVUNg0+jUARVyhTpTTp10cJSLIwz/34gpgzg= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0701.namprd21.prod.outlook.com (10.175.142.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.7; Tue, 5 Nov 2019 23:40:58 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2430.017; Tue, 5 Nov 2019 23:40:58 +0000 From: Dave Thaler To: Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] Out-of-band key material set up in architecture document Thread-Index: AQHVlBYMBOQaoAnhtEytoHyJqQWVrad9Nxtg Date: Tue, 5 Nov 2019 23:40:58 +0000 Message-ID: References: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> In-Reply-To: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-05T23:40:54.3516743Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d26190c7-09c3-4aa3-8a84-91bc793e9e65; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:a:64e2:1981:30de:6ca2] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 3a2f71d9-d6be-432f-1996-08d762499be6 x-ms-traffictypediagnostic: MWHPR21MB0701: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0212BDE3BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(346002)(39860400002)(396003)(376002)(15404003)(199004)(189003)(11346002)(486006)(256004)(14444005)(316002)(9686003)(54896002)(5660300002)(6246003)(33656002)(790700001)(476003)(86362001)(8936002)(81166006)(8676002)(446003)(81156014)(46003)(186003)(4326008)(6116002)(74316002)(64756008)(66946007)(10090500001)(7736002)(66476007)(478600001)(66446008)(66556008)(6306002)(76116006)(6436002)(6506007)(53546011)(99286004)(7696005)(14454004)(2906002)(8990500004)(76176011)(229853002)(6916009)(25786009)(55016002)(22452003)(52536014)(71190400001)(71200400001)(102836004)(10290500003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0701; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: rz/TKGDRPUsOyJBYrLD8Mgng1bI1AdLbvUZS3JpDdaOIwnesyrz1pV40dEEhkRRH7TW2rxXjEZT8EYoqj8WEf2VtdvugPV9B7A/OpDLqbEcnO8d864nuDlTXjw4bDiQANR63RwmXwtVYkSMPjK+Obk9IDXb5JexjTecSb9nPGbscugBOTJnJzq0Sn0bMXoV6GINczgg+O9pt11p6xsuLOuFvutMzE3+ct4amupm3oKWiM2O/EhlBYe8ARBIVs3T2Y7bCc7N7Zua5uDinNYQp1gI3Q6jlD13fmvpHogfrwEMcuE1CNKDoQ9js/J/Fkg/mAG5FIKupt0F2jn/bqMdblMuQSpyT9QF2XmcZmX2Y+aL0JYlb2R6LoftPvJLa7LSTigCj+JEpd9+xu3gjCn8hGVPSmEwQUqzRpUMKfxngiwMujxU5zCV10xgDvkVcEGBE x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784D3762243B2D09E0E6DC8A37E0MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3a2f71d9-d6be-432f-1996-08d762499be6 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Nov 2019 23:40:58.3487 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: O3bITGuIxuGHYbwz3GSC5hTBBjo6bXa5AzQJp3DGVJT8VcXkFfTEY7kBacK+D+YlcugxXaVEyQzgHw9qRJgR6DVVGZz+bogF8Y9aXej4Hb4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0701 Archived-At: Subject: Re: [Rats] Out-of-band key material set up in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Nov 2019 23:41:05 -0000 --_000_MWHPR21MB0784D3762243B2D09E0E6DC8A37E0MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5saW5lIGJlbG934oCmDQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZz4gT24g QmVoYWxmIE9mIExhdXJlbmNlIEx1bmRibGFkZQ0KU2VudDogVHVlc2RheSwgTm92ZW1iZXIgNSwg MjAxOSAxMjoxNyBQTQ0KVG86IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFtSYXRzXSBPdXQtb2Yt YmFuZCBrZXkgbWF0ZXJpYWwgc2V0IHVwIGluIGFyY2hpdGVjdHVyZSBkb2N1bWVudA0KDQpBbiBp c3N1ZSBJIGhhdmUgd2l0aCBib3RoIHRoZSBjdXJyZW50IGFyY2hpdGVjdHVyZSBkb2N1bWVudHMg aXMgdGhhdCB0aGV5IGRvIG5vdCBkaXNjdXNzIHRoZSBuZWVkIGZvciBzb21lIG91dCBvZiBiYW5k IGtleSBtYXRlcmlhbCBzZXQgdXAgdG8gbWFrZSB2ZXJpZmljYXRpb24gd29yay4NCg0KVGhlIG1h bnVmYWN0dXJlciBvZiB0aGUgZGV2aWNlIG11c3QgcHV0IHNvbWUgcHJpdmF0ZSBrZXkgaW50byBl YWNoIGRldmljZSBzbyB0aGF0IHRoZSBkZXZpY2UgY2FuIHNpZ24gYXR0ZXN0YXRpb24gZXZpZGVu Y2UuIE1vc3QgbGlrZWx5IHRoZSBtYW51ZmFjdHVyZXIgYWxzbyBjcmVhdGVzIHRoZSB2ZXJpZnlp bmcga2V5IG1hdGVyaWFsLCBidXQgdGhleSBtYXkgb3IgbWF5IG5vdCBiZSB0aGUgdmVyaWZpZXIu ICBJZiB0aGV5IGFyZSBub3QgdGhlIHZlcmlmaWVyLCBzb21laG93IHRoZSB2ZXJpZmllciBvZiBh dHRlc3RhdGlvbiBldmlkZW5jZSBtdXN0IGhhdmUgY29ycmVzcG9uZGluZyBrZXkgbWF0ZXJpYWwg dG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUuDQoNClRoaXMgcGFyYWdyYXBoIGNvdWxkIGJlIGEgc3Rh cnQgb2YgdGhlIHRleHQuIEkgdGhpbmsgdGhpcyBpcyBhIGNyaXRpY2FsIHBhcnQgb2YgdGhlIGFy Y2hpdGVjdHVyZSBiZWNhdXNlIGF0dGVzdGF0aW9uIGRvZXNu4oCZdCB3b3JrIHdpdGhvdXQgaXQu DQoNCkkgYWdyZWUgdGhhdCBhIHByaXZhdGUga2V5IGlzIG5lZWRlZCBpbiBlYWNoIGRldmljZSBm b3IgYXR0ZXN0YXRpb24gdG8gd29yayAoYXQgbGVhc3QgdXNpbmcgYW55IHRlY2huaXF1ZXMNCkni gJltIGF3YXJlIG9mKS4gU2F5aW5nIOKAnHRoZSBtYW51ZmFjdHVyZXIgbXVzdCBwdXQgaXQgdGhl cmXigJ0sIGlzIGhvd2V2ZXIgSSB0aGluayB0b28gbmFycm93LCBhcyBpdCBpbXBsaWVzIHRoZQ0K bWFudWZhY3R1cmVyIGFjdHVhbGx5IGtub3dzIHRoZSBrZXkuIEluIHNvbWUgYXJndWFibHkgbW9y ZSBzZWN1cmUgZGVzaWducywgdGhlIGRldmljZSBpdHNlbGYgY3JlYXRlcyB0aGUNCmtleSBwYWly IGFuZCB0aGUgbWFudWZhY3R1cmVyIHBlciBzZSBuZXZlciBrbm93cyB0aGUgcHJpdmF0ZSBrZXks IG9ubHkgdGhlIHB1YmxpYyBrZXksIHNvIGl0IHdvdWxkIGJlDQpjb25mdXNpbmcgdG8gc2F5IHRo ZSBtYW51ZmFjdHVyZXIg4oCccHV04oCdIGl0IHRoZXJlLCBvciB0aGF0IHRoZSDigJxtYW51ZmFj dHVyZXIgY3JlYXRlc+KAnSB0aGUga2V5IG1hdGVyaWFsLg0KDQpBcyB5b3Ugc2F5IGJlbG93LCB3 ZSB3YW50IHRoZSBhcmNoIGRvYyB0byBzdGF5IGF0IGEgaGlnaCBsZXZlbCBhbmQgbm90IG92ZXIt c3BlY2lmeSBkZXRhaWxzIGxpa2Ugd2hldGhlciB0aGUNCm1hbnVmYWN0dXJlciBjcmVhdGVzIGEg a2V5IGFuZCBpbnN0YWxscyBpdCBvbiBhIGRldmljZSwgdnMgdGhlIGRldmljZSBjcmVhdGluZyBh IGtleSBwYWlyIGFuZCB0aGUgbWFudWZhY3R1cmVyDQpleHRyYWN0aW5nIHRoZSBwdWJsaWMgKGJ1 dCBub3QgcHJpdmF0ZSkga2V5IGZyb20gdGhlIGRldmljZS4gICBJbiBteSB2aWV3LCB0aG9zZSBh cmUgYm90aCBmaW5lIHRvIG1lbnRpb24gYXMNCmhlbHBmdWwgZXhhbXBsZXMsIGJ1dCBub3QgdG8g Y29uc3RyYWluIGl0IHRvIG9uZSBjYXNlIG9yIHRoZSBvdGhlci4NCg0KRnVydGhlcm1vcmUsIHRo ZSBSQVRTIGNoYXJ0ZXIgZG9lcyBub3QgY29uc3RyYWluIGF0dGVzdGF0aW9uIHRvIG9ubHkgKmhh cmR3YXJlKiBiYXNlZCByb290cyBvZiB0cnVzdC4NClRoZXJlIGFyZSBzb21lIGNhc2VzIHdoZXJl IGl0IG1heSBiZSBpbiBhIGh5cGVydmlzb3Igb3IgYmlvcyBvciBmaXJtd2FyZSBvciB3aGF0ZXZl ciwgYW5kIG9ubHkgYXR0ZXN0DQp0aGluZ3MgYWJvdmUgdGhhdCwgd2l0aCBvYnZpb3VzbHkgYSB3 ZWFrZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgdGhhbiBoYXJkd2FyZS1yb290ZWQgYXR0ZXN0YXRpb24u ICAgQnV0IGFueQ0KcHJvdG9jb2wgbWVjaGFuaXNtcyBzaG91bGQgc3RpbGwgd29yayAobWFpbmx5 IGJlY2F1c2UgaXTigJlzIGFsbW9zdCBpbXBvc3NpYmxlIHRvIHJ1bGUgdGhlbSBvdXQgZXhjZXB0 IHZpYQ0KYSBzZWN1cml0eSBwb2xpY3kgdGhhdCBzYXlzIHdoaWNoIGtleXMgdG8gdHJ1c3QpLCBl dmVuIGlmIGl04oCZcyBub3QgdGhlIHByaW1hcnkgZm9jdXMgd2UgY2FyZSBtb3N0IGFib3V0LiAg VGhlDQpwb2ludCBoZXJlIGJlaW5nIHRoYXQgaW4gc3VjaCBhIGNhc2UgaXQgbWF5IG5vdCBiZSB0 aGUg4oCcbWFudWZhY3R1cmVy4oCdLCBidXQgbWF5IGJlIGFub3RoZXIgZW50aXR5LiAgVGhhdOKA mXMNCmFjdHVhbGx5IHRydWUgaW4gc29tZSBjYXNlcyBldmVuIGZvciBoYXJkd2FyZS1iYXNlZCBy b290cyBvZiB0cnVzdC4NCg0KQXMgZm9yIHlvdXIgY29tbWVudCDigJxzb21laG93IHRoZSB2ZXJp ZmllciBvZiBhdHRlc3RhdGlvbiBldmlkZW5jZSBtdXN0IGhhdmUgY29ycmVzcG9uZGluZyBrZXkg bWF0ZXJpYWwNCnRvIHZlcmlmeSB0aGUgc2lnbmF0dXJl4oCdLCB0aGF04oCZcyB0cnVlLiAgTXkg dGV4dCBoYXMgYSBzZWN0aW9uIG9uIFRydXN0IE1vZGVsIHRoYXQgY292ZXJzIHRoaXMgYXQgYSBo aWdoIGxldmVsLA0Kd2l0aG91dCBleHBsYWluaW5nIHRoZSBrZXkgbWF0ZXJpYWwgKGFuZCBJIGdl dCB5b3VyIHBvaW50IHRoYXQgaXQgc2hvdWxkKSwgc2F5aW5nOg0KDQoNCsOYICBUaGUgVmVyaWZp ZXIgdHJ1c3RzIChvciBtb3JlIHNwZWNpZmljYWxseSwgdGhlIFZlcmlmaWVyJ3Mgc2VjdXJpdHkN Cg0Kw5ggIHBvbGljeSBpcyB3cml0dGVuIGluIGEgd2F5IHRoYXQgY29uZmlndXJlcyB0aGUgVmVy aWZpZXIgdG8gdHJ1c3QpIGENCg0Kw5ggIG1hbnVmYWN0dXJlciwgb3IgdGhlIG1hbnVmYWN0dXJl cidzIGhhcmR3YXJlLCBzbyBhcyB0byBiZSBhYmxlIHRvDQoNCsOYICBldmFsdWF0ZSB0aGUgaGVh bHRoIG9mIHRoYXQgbWFudWZhY3R1cmVyJ3MgZGV2aWNlcy4gIEluIHNvbHV0aW9ucw0KDQrDmCAg d2l0aCB3ZWFrZXIgc2VjdXJpdHksIGEgVmVyaWZpZXIgbWlnaHQgYmUgY29uZmlndXJlZCB0byBp bXBsaWNpdGx5DQoNCsOYICB0cnVzdCBmaXJtd2FyZSBvciBldmVuIHNvZnR3YXJlIChlLmcuLCBh IGh5cGVydmlzb3IpLg0KDQpJbiBvcmRlciB0byB0cnVzdCBzb21ldGhpbmcgaW4gYSBwcm90b2Nv bCBzZW5zZSwgd2UgcmVxdWlyZSB0aGUgYWJpbGl0eSB0byBjcnlwdG9ncmFwaGljYWxseSB2ZXJp ZnkNCnRoYXQgdHJ1c3QgdXNpbmcga2V5IG1hdGVyaWFsLiAgIEkgYWdyZWUgd2l0aCB5b3VyIHBv aW50IHRoYXQgdGhhdCBzaG91bGQgYmUgc3RhdGVkIGV4cGxpY2l0bHkuDQoNClRoYW5rcyBmb3Ig cmFpc2luZyB0aGlzLA0KRGF2ZQ0KDQpJIGRvIE5PVCB3YW50IHRvIHNwZWNpZnkgYW55IGRldGFp bHMgZm9yIGhvdyB0aGlzIGhhcHBlbnMgaW4gdGhlIGFyY2hpdGVjdHVyZSBkb2MuIEl0IG5lZWRz IHRvIHN0YXkgYXQgYSBoaWdoIGxldmVsLiBJdCBzdGF5cyBhdCBhIGhpZ2ggbGV2ZWwgaW4gb3Ro ZXIgcGxhY2VzLiBGb3IgZXhhbXBsZSBpdCBkaXNjdXNzZXMgY2xhaW1zLCBidXQgZG9lc27igJl0 IGRlZmluZWQgaW5kaXZpZHVhbCBjbGFpbXMuDQoNCkkgdGhpbmsgdGhlcmXigJlzIGEgbGFyZ2Ug cGFyYWxsZWwgd2l0aCBIVFRQUy4gSFRUUFMgd291bGRu4oCZdCB3b3JrIHdpdGhvdXQgc29tZSBv dXQtb2YtYmFuZCBkaXN0cmlidXRpb24gb2YgY2VydHMva2V5cyBmb3IgdmVyaWZpY2F0aW9uLg0K DQpKdXN0IGxpa2Ugd2l0aCBIVFRQUywgdGhlcmUgYXJlIGEgbG90IG9mIGRpZmZlcmVudCBidXNp bmVzcyBtb2RlbHMsIHByb3RvY29scyBhbmQgZW5kLWVuZCBzeXN0ZW1zIHRoYXQgdGhpcyBvdXQt b2YtYmFuZCBzZXQgY2FuIGJlIGRvbmUuIEhlcmXigJlzIGEgZmV3IHRoYXQgYXJlIHJlYWwgdG9k YXkgYW5kIHB1YmxpY2x5IGRlc2NyaWJlZDoNCg0KLSBJbnRlbCBFUElEIChubyBYLjUwOSwgdGhl IEVDREFBIGFsZ29yaXRobSwgYSBzZXJ2aWNlIHJ1biBleGNsdXNpdmVseSBieSBJbnRlbCBmb3Ig SW50ZWwgY2hpcHMgZm9yIGZlZSkNCi0gQW5kcm9pZCBBdHRlc3RhdGlvbiAoYnVja2V0cyBvZiBr ZXlzIGRpc3RyaWJ1dGVkIHRvIHBob25lIG1ha2VycywgWC41MDksIGEgdmVyaWZpY2F0aW9uIHNl cnZpY2UgcnVuIGV4Y2x1c2l2ZWx5IGJ5IEdvb2dsZSkNCi0gRklETyBNZXRhZGF0YSBzZXJ2aWNl IChhIDNyZCBwYXJ0eSBkb2luZyBYLjUwOSBjZXJ0aWZpY2F0ZSBkaXN0cmlidXRpb24gZm9yIG1h bnkgRklETyB2ZW5kb3JzKQ0KDQpJIGFsc28ga25vdyBvZiBzb21lIHRoYXQgYXJlIG5vdCBwdWJs aWNseSBkZXNjcmliZWQgdGhhdCBkbyBub3QgdXNlIFguNTA5LCBzb21lIGV2ZW4gdXNpbmcgc3lt bWV0cmljIGtleSBtYXRlcmlhbC4NCg0KSSB0aGluayBidXNpbmVzcyBtb2RlbHMgd2lsbCBkcml2 ZSBhcmNoaXRlY3R1cmUgaW4gc29tZSBjYXNlcy4gSSBhbHNvIHRoaW5rIHRoZSBjb3N0IG9mIHB1 dHRpbmcga2V5cyBpbnRvIGNoaXBzIGFuZCBkZXZpY2VzIGlzIGEgYW5vdGhlciBkcml2ZXIuIEEg dGhpcmQgZHJpdmVyIGlzIGJpZyBJb1QgYmFjay1lbmQgc2VydmljZSBwcm92aWRlcnMgbGlrZSBB bWF6b24gYW5kIEdvb2dsZS4NCg0KSSBtZW50aW9uIGFsbCB0aGVzZSBvbmx5IGlsbHVzdHJhdGUg dGhlIHZhcmlldHkgYW5kIHRodXMgdGhlIGZ1dGlsaXR5IG9mIHRyeWluZyB0byBjb21lIHVwIHdp dGggb25lIHN0YW5kYXJkIHdheS4NCg0KSG93ZXZlciwgSSB0aGluayB0byBoZWxwIHRoZSB3b3Js ZCBnZXQgdGhlaXIgaGVhZHMgYXJvdW5kIGhvdyBhdHRlc3RhdGlvbiB3b3JrczsgbGVhdmluZyB0 aGlzIG91dCBvZiB0aGUgYXJjaGl0ZWN0dXJlIHdvdWxkIGJlIGxlYXZpbmcgYSBjcml0aWNhbCBw YXJ0IG91dC4NCg0KTEwNCg0K --_000_MWHPR21MB0784D3762243B2D09E0E6DC8A37E0MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdy YXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRp bWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYu bXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3At YWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToi VGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29y ZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8N CkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE4MTk2OTE3MDM7DQoJbXNvLWxpc3QtdHlwZTpoeWJy aWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjYwNzU1MTk4MiA3OTY4MTEyNTAgNjc2OTg2OTEg Njc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2 OTg2OTM7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvg5g7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJbXNvLWZhcmVhc3Qt Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZh bWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVs NQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K QGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJn aW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwh LS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3Bp ZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRh dGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8 Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+SW5saW5lIGJlbG934oCmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBSQVRTICZsdDtyYXRzLWJv dW5jZXNAaWV0Zi5vcmcmZ3Q7DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkxhdXJlbmNlIEx1bmRibGFk ZTxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBOb3ZlbWJlciA1LCAyMDE5IDEyOjE3IFBNPGJy Pg0KPGI+VG86PC9iPiByYXRzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFtSYXRzXSBP dXQtb2YtYmFuZCBrZXkgbWF0ZXJpYWwgc2V0IHVwIGluIGFyY2hpdGVjdHVyZSBkb2N1bWVudDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QW4gaXNzdWUgSSBoYXZlIHdp dGggYm90aCB0aGUgY3VycmVudCBhcmNoaXRlY3R1cmUgZG9jdW1lbnRzIGlzIHRoYXQgdGhleSBk byBub3QgZGlzY3VzcyB0aGUgbmVlZCBmb3Igc29tZSBvdXQgb2YgYmFuZCBrZXkgbWF0ZXJpYWwg c2V0IHVwIHRvIG1ha2UgdmVyaWZpY2F0aW9uIHdvcmsuPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MzAuMHB0 O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5UaGUgbWFudWZhY3R1cmVyIG9mIHRoZSBkZXZpY2UgbXVzdCBwdXQg c29tZSBwcml2YXRlIGtleSBpbnRvIGVhY2ggZGV2aWNlIHNvIHRoYXQgdGhlIGRldmljZSBjYW4g c2lnbiBhdHRlc3RhdGlvbiBldmlkZW5jZS4gTW9zdCBsaWtlbHkgdGhlIG1hbnVmYWN0dXJlciBh bHNvIGNyZWF0ZXMgdGhlIHZlcmlmeWluZyBrZXkgbWF0ZXJpYWwsIGJ1dCB0aGV5IG1heSBvciBt YXkNCiBub3QgYmUgdGhlIHZlcmlmaWVyLiAmbmJzcDtJZiB0aGV5IGFyZSBub3QgdGhlIHZlcmlm aWVyLCBzb21laG93IHRoZSB2ZXJpZmllciBvZiBhdHRlc3RhdGlvbiBldmlkZW5jZSBtdXN0IGhh dmUgY29ycmVzcG9uZGluZyBrZXkgbWF0ZXJpYWwgdG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+VGhpcyBwYXJhZ3JhcGggY291bGQgYmUgYSBzdGFydCBvZiB0aGUgdGV4dC4gSSB0aGluayB0 aGlzIGlzIGEgY3JpdGljYWwgcGFydCBvZiB0aGUgYXJjaGl0ZWN0dXJlIGJlY2F1c2UgYXR0ZXN0 YXRpb24gZG9lc27igJl0IHdvcmsgd2l0aG91dCBpdC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5JIGFncmVlIHRo YXQgYSBwcml2YXRlIGtleSBpcyBuZWVkZWQgaW4gZWFjaCBkZXZpY2UgZm9yIGF0dGVzdGF0aW9u IHRvIHdvcmsgKGF0IGxlYXN0IHVzaW5nIGFueSB0ZWNobmlxdWVzPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5J4oCZbSBhd2FyZSBv ZikuIFNheWluZyDigJx0aGUgbWFudWZhY3R1cmVyIG11c3QgcHV0IGl0IHRoZXJl4oCdLCBpcyBo b3dldmVyIEkgdGhpbmsgdG9vIG5hcnJvdywgYXMgaXQgaW1wbGllcyB0aGU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPm1hbnVmYWN0 dXJlciBhY3R1YWxseSBrbm93cyB0aGUga2V5LiBJbiBzb21lIGFyZ3VhYmx5IG1vcmUgc2VjdXJl IGRlc2lnbnMsIHRoZSBkZXZpY2UgaXRzZWxmIGNyZWF0ZXMgdGhlPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5rZXkgcGFpciBhbmQg dGhlIG1hbnVmYWN0dXJlciBwZXIgc2UgbmV2ZXIga25vd3MgdGhlIHByaXZhdGUga2V5LCBvbmx5 IHRoZSBwdWJsaWMga2V5LCBzbyBpdCB3b3VsZCBiZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Y29uZnVzaW5nIHRvIHNheSB0aGUg bWFudWZhY3R1cmVyIOKAnHB1dOKAnSBpdCB0aGVyZSwgb3IgdGhhdCB0aGUg4oCcbWFudWZhY3R1 cmVyIGNyZWF0ZXPigJ0gdGhlIGtleSBtYXRlcmlhbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+QXMgeW91IHNh eSBiZWxvdywgd2Ugd2FudCB0aGUgYXJjaCBkb2MgdG8gc3RheSBhdCBhIGhpZ2ggbGV2ZWwgYW5k IG5vdCBvdmVyLXNwZWNpZnkgZGV0YWlscyBsaWtlIHdoZXRoZXIgdGhlPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5tYW51ZmFjdHVy ZXIgY3JlYXRlcyBhIGtleSBhbmQgaW5zdGFsbHMgaXQgb24gYSBkZXZpY2UsIHZzIHRoZSBkZXZp Y2UgY3JlYXRpbmcgYSBrZXkgcGFpciBhbmQgdGhlIG1hbnVmYWN0dXJlcjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ZXh0cmFjdGlu ZyB0aGUgcHVibGljIChidXQgbm90IHByaXZhdGUpIGtleSBmcm9tIHRoZSBkZXZpY2UuJm5ic3A7 Jm5ic3A7IEluIG15IHZpZXcsIHRob3NlIGFyZSBib3RoIGZpbmUgdG8gbWVudGlvbiBhczxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ aGVscGZ1bCBleGFtcGxlcywgYnV0IG5vdCB0byBjb25zdHJhaW4gaXQgdG8gb25lIGNhc2Ugb3Ig dGhlIG90aGVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5GdXJ0aGVybW9yZSwgdGhlIFJBVFMgY2hhcnRlciBk b2VzIG5vdCBjb25zdHJhaW4gYXR0ZXN0YXRpb24gdG8gb25seSAqPGI+aGFyZHdhcmU8L2I+KiBi YXNlZCByb290cyBvZiB0cnVzdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPlRoZXJlIGFyZSBzb21lIGNhc2VzIHdoZXJlIGl0IG1h eSBiZSBpbiBhIGh5cGVydmlzb3Igb3IgYmlvcyBvciBmaXJtd2FyZSBvciB3aGF0ZXZlciwgYW5k IG9ubHkgYXR0ZXN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj50aGluZ3MgYWJvdmUgdGhhdCwgd2l0aCBvYnZpb3VzbHkgYSB3ZWFr ZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgdGhhbiBoYXJkd2FyZS1yb290ZWQgYXR0ZXN0YXRpb24uJm5i c3A7Jm5ic3A7IEJ1dCBhbnk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnByb3RvY29sIG1lY2hhbmlzbXMgc2hvdWxkIHN0aWxsIHdv cmsgKG1haW5seSBiZWNhdXNlIGl04oCZcyBhbG1vc3QgaW1wb3NzaWJsZSB0byBydWxlIHRoZW0g b3V0IGV4Y2VwdCB2aWE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPmEgc2VjdXJpdHkgcG9saWN5IHRoYXQgc2F5cyB3aGljaCBrZXlz IHRvIHRydXN0KSwgZXZlbiBpZiBpdOKAmXMgbm90IHRoZSBwcmltYXJ5IGZvY3VzIHdlIGNhcmUg bW9zdCBhYm91dC4mbmJzcDsgVGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5wb2ludCBoZXJlIGJlaW5nIHRoYXQgaW4gc3VjaCBh IGNhc2UgaXQgbWF5IG5vdCBiZSB0aGUg4oCcbWFudWZhY3R1cmVy4oCdLCBidXQgbWF5IGJlIGFu b3RoZXIgZW50aXR5LiZuYnNwOyBUaGF04oCZczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+YWN0dWFsbHkgdHJ1ZSBpbiBzb21lIGNh c2VzIGV2ZW4gZm9yIGhhcmR3YXJlLWJhc2VkIHJvb3RzIG9mIHRydXN0LjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij5BcyBmb3IgeW91ciBjb21tZW50IOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnNvbWVob3cg dGhlIHZlcmlmaWVyIG9mIGF0dGVzdGF0aW9uIGV2aWRlbmNlIG11c3QgaGF2ZSBjb3JyZXNwb25k aW5nIGtleSBtYXRlcmlhbDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+dG8gdmVyaWZ5IHRoZSBzaWduYXR1cmXigJ0sIHRoYXTigJlz IHRydWUuJm5ic3A7IE15IHRleHQgaGFzIGEgc2VjdGlvbiBvbiBUcnVzdCBNb2RlbCB0aGF0IGNv dmVycyB0aGlzIGF0IGEgaGlnaCBsZXZlbCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPndpdGhvdXQgZXhwbGFpbmluZyB0aGUga2V5 IG1hdGVyaWFsIChhbmQgSSBnZXQgeW91ciBwb2ludCB0aGF0IGl0IHNob3VsZCksIHNheWluZzo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6 LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj48IVtpZiAhc3VwcG9ydExpc3RzXT48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlm XT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPlRoZSBWZXJpZmllciB0cnVzdHMgKG9yIG1vcmUgc3BlY2lmaWNh bGx5LCB0aGUgVmVyaWZpZXIncyBzZWN1cml0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0 OmwwIGxldmVsMSBsZm8xIj48IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWYiPnBvbGljeSBpcyB3cml0dGVuIGluIGEgd2F5IHRoYXQgY29uZmlndXJlcyB0aGUgVmVyaWZp ZXIgdG8gdHJ1c3QpIGE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZv MSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7DmDxzcGFu IHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8 L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5tYW51ZmFjdHVy ZXIsIG9yIHRoZSBtYW51ZmFjdHVyZXIncyBoYXJkd2FyZSwgc28gYXMgdG8gYmUgYWJsZSB0bzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0i dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj48IVtpZiAhc3VwcG9y dExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpXaW5nZGlu Z3MiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9z cGFuPjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPmV2YWx1YXRlIHRoZSBoZWFsdGggb2YgdGhh dCBtYW51ZmFjdHVyZXIncyBkZXZpY2VzLiZuYnNwOyBJbiBzb2x1dGlvbnM8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50 Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj48c3BhbiBz dHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7DmDxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRp Zl0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj53aXRoIHdlYWtlciBzZWN1cml0eSwgYSBWZXJpZmllciBtaWdo dCBiZSBjb25maWd1cmVkIHRvIGltcGxpY2l0bHk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlz dDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6 SWdub3JlIj7DmDxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj50cnVzdCBmaXJtd2FyZSBvciBldmVuIHNvZnR3YXJlIChlLmcuLCBhIGh5cGVydmlzb3Ip LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj5JbiBvcmRlciB0byB0cnVzdCBzb21ldGhpbmcgaW4gYSBwcm90b2Nv bCBzZW5zZSwgd2UgcmVxdWlyZSB0aGUgYWJpbGl0eSB0byBjcnlwdG9ncmFwaGljYWxseSB2ZXJp Znk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPnRoYXQgdHJ1c3QgdXNpbmcga2V5IG1hdGVyaWFsLiZuYnNwOyZuYnNwOyBJIGFncmVl IHdpdGggeW91ciBwb2ludCB0aGF0IHRoYXQgc2hvdWxkIGJlIHN0YXRlZCBleHBsaWNpdGx5Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5UaGFua3MgZm9yIHJhaXNpbmcgdGhpcyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRhdmU8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSBkbyBOT1Qgd2Fu dCB0byBzcGVjaWZ5IGFueSBkZXRhaWxzIGZvciBob3cgdGhpcyBoYXBwZW5zIGluIHRoZSBhcmNo aXRlY3R1cmUgZG9jLiBJdCBuZWVkcyB0byBzdGF5IGF0IGEgaGlnaCBsZXZlbC4gSXQgc3RheXMg YXQgYSBoaWdoIGxldmVsIGluIG90aGVyIHBsYWNlcy4gRm9yIGV4YW1wbGUgaXQgZGlzY3Vzc2Vz IGNsYWltcywgYnV0IGRvZXNu4oCZdCBkZWZpbmVkDQogaW5kaXZpZHVhbCBjbGFpbXMuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgdGhpbmsg dGhlcmXigJlzIGEgbGFyZ2UgcGFyYWxsZWwgd2l0aCBIVFRQUy4gSFRUUFMgd291bGRu4oCZdCB3 b3JrIHdpdGhvdXQgc29tZSBvdXQtb2YtYmFuZCBkaXN0cmlidXRpb24gb2YgY2VydHMva2V5cyBm b3IgdmVyaWZpY2F0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkp1c3QgbGlrZSB3aXRoIEhUVFBTLCB0aGVyZSBhcmUgYSBsb3Qgb2YgZGlmZmVyZW50 IGJ1c2luZXNzIG1vZGVscywgcHJvdG9jb2xzIGFuZCBlbmQtZW5kIHN5c3RlbXMgdGhhdCB0aGlz IG91dC1vZi1iYW5kIHNldCBjYW4gYmUgZG9uZS4gSGVyZeKAmXMgYSBmZXcgdGhhdCBhcmUgcmVh bCB0b2RheSBhbmQgcHVibGljbHkgZGVzY3JpYmVkOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0gSW50ZWwgRVBJRCAobm8gWC41MDksIHRoZSBFQ0RBQSBh bGdvcml0aG0sIGEgc2VydmljZSBydW4gZXhjbHVzaXZlbHkgYnkgSW50ZWwgZm9yIEludGVsIGNo aXBzIGZvciBmZWUpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+LSBBbmRyb2lkIEF0dGVzdGF0aW9uIChi dWNrZXRzIG9mIGtleXMgZGlzdHJpYnV0ZWQgdG8gcGhvbmUgbWFrZXJzLCBYLjUwOSwgYSB2ZXJp ZmljYXRpb24gc2VydmljZSBydW4gZXhjbHVzaXZlbHkgYnkgR29vZ2xlKTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPi0gRklETyBNZXRhZGF0YSBzZXJ2aWNlIChhIDNyZCBwYXJ0eSBkb2luZyBYLjUwOSBj ZXJ0aWZpY2F0ZSBkaXN0cmlidXRpb24gZm9yIG1hbnkgRklETyB2ZW5kb3JzKTxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgYWxzbyBrbm93IG9mIHNvbWUg dGhhdCBhcmUgbm90IHB1YmxpY2x5IGRlc2NyaWJlZCB0aGF0IGRvIG5vdCB1c2UgWC41MDksIHNv bWUgZXZlbiB1c2luZyBzeW1tZXRyaWMga2V5IG1hdGVyaWFsLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgdGhpbmsgYnVzaW5lc3MgbW9kZWxzIHdpbGwg ZHJpdmUgYXJjaGl0ZWN0dXJlIGluIHNvbWUgY2FzZXMuIEkgYWxzbyB0aGluayB0aGUgY29zdCBv ZiBwdXR0aW5nIGtleXMgaW50byBjaGlwcyBhbmQgZGV2aWNlcyBpcyBhIGFub3RoZXIgZHJpdmVy LiBBIHRoaXJkIGRyaXZlciBpcyBiaWcgSW9UIGJhY2stZW5kIHNlcnZpY2UgcHJvdmlkZXJzIGxp a2UgQW1hem9uIGFuZA0KIEdvb2dsZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj5JIG1lbnRpb24gYWxsIHRoZXNlIG9ubHkgaWxsdXN0cmF0ZSB0aGUgdmFy aWV0eSBhbmQgdGh1cyB0aGUgZnV0aWxpdHkgb2YgdHJ5aW5nIHRvIGNvbWUgdXAgd2l0aCBvbmUg c3RhbmRhcmQgd2F5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+SG93ZXZlciwgSSB0aGluayB0byBoZWxwIHRoZSB3b3JsZCBnZXQgdGhlaXIg aGVhZHMgYXJvdW5kIGhvdyBhdHRlc3RhdGlvbiB3b3JrczsgbGVhdmluZyB0aGlzIG91dCBvZiB0 aGUgYXJjaGl0ZWN0dXJlIHdvdWxkIGJlIGxlYXZpbmcgYSBjcml0aWNhbCBwYXJ0IG91dC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5MTDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_MWHPR21MB0784D3762243B2D09E0E6DC8A37E0MWHPR21MB0784namp_-- From nobody Wed Nov 6 08:58:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8EA83120089 for ; Wed, 6 Nov 2019 08:58:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mG4MkRYt6SpW for ; Wed, 6 Nov 2019 08:58:24 -0800 (PST) Received: from p3plsmtpa12-01.prod.phx3.secureserver.net (p3plsmtpa12-01.prod.phx3.secureserver.net [68.178.252.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F5D6120072 for ; Wed, 6 Nov 2019 08:58:24 -0800 (PST) Received: from [10.122.0.166] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id SOdTiDnOmISIwSOdTiL8RW; Wed, 06 Nov 2019 09:58:24 -0700 From: Laurence Lundblade Message-Id: <5050A16A-68D3-4D6A-859F-EAFF74FAF096@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_149AF028-8C07-4BAB-B5EC-1675FA879DC5" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 6 Nov 2019 08:58:20 -0800 In-Reply-To: Cc: "rats@ietf.org" To: Dave Thaler References: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfCiehx0yMFFP9Rt7ceFJqJ+y/LX0PyBOnEsWUZ4wbHhtMzjOzphMMdA7XGS/l1U/6a6chMTmwVKXB25Lw/hacbT3T4E12iMlV3hx/jd8GzpUwF6L1W6T DDC80cqcg/QFmUxGvAxXzuh835buwCGdvS8PXcfWyMf6hmm/EVwwqErhIdKIJjmQYQY8mehCv+MStN+FsOOcRa5OfHFmJmEQl4c= Archived-At: Subject: Re: [Rats] Out-of-band key material set up in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 16:58:27 -0000 --Apple-Mail=_149AF028-8C07-4BAB-B5EC-1675FA879DC5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 5, 2019, at 3:40 PM, Dave Thaler wrote: >=20 > Inline below=E2=80=A6 > =20 > From: RATS > On = Behalf Of Laurence Lundblade > Sent: Tuesday, November 5, 2019 12:17 PM > To: rats@ietf.org > Subject: [Rats] Out-of-band key material set up in architecture = document > =20 > An issue I have with both the current architecture documents is that = they do not discuss the need for some out of band key material set up to = make verification work. > =20 > The manufacturer of the device must put some private key into each = device so that the device can sign attestation evidence. Most likely the = manufacturer also creates the verifying key material, but they may or = may not be the verifier. If they are not the verifier, somehow the = verifier of attestation evidence must have corresponding key material to = verify the signature. > =20 > This paragraph could be a start of the text. I think this is a = critical part of the architecture because attestation doesn=E2=80=99t = work without it.=20 > =20 > I agree that a private key is needed in each device for attestation to = work (at least using any techniques > I=E2=80=99m aware of). Saying =E2=80=9Cthe manufacturer must put it = there=E2=80=9D, is however I think too narrow, as it implies the > manufacturer actually knows the key. In some arguably more secure = designs, the device itself creates the > key pair and the manufacturer per se never knows the private key, only = the public key, so it would be > confusing to say the manufacturer =E2=80=9Cput=E2=80=9D it there, or = that the =E2=80=9Cmanufacturer creates=E2=80=9D the key material. We could say =E2=80=9Cestablish the signing key=E2=80=9D? Certainly = don=E2=80=99t want to exclude those more secure designs. > =20 > ... > =20 > Furthermore, the RATS charter does not constrain attestation to only = *hardware* based roots of trust. > There are some cases where it may be in a hypervisor or bios or = firmware or whatever, and only attest > things above that, with obviously a weaker level of security than = hardware-rooted attestation. But any > protocol mechanisms should still work (mainly because it=E2=80=99s = almost impossible to rule them out except via > a security policy that says which keys to trust), even if it=E2=80=99s = not the primary focus we care most about. The > point here being that in such a case it may not be the = =E2=80=9Cmanufacturer=E2=80=9D, but may be another entity. That=E2=80=99s= > actually true in some cases even for hardware-based roots of trust. Yes, the =E2=80=9Cmanufacturer=E2=80=9D could be a SW vendor or even the = author of a dumb Android app. We need a much broader term or = description. LL --Apple-Mail=_149AF028-8C07-4BAB-B5EC-1675FA879DC5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Nov 5, 2019, at 3:40 PM, Dave Thaler <dthaler@microsoft.com> wrote:

Inline below=E2=80=A6
 
From: RATS <rats-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Tuesday, November 5, 2019 = 12:17 PM
To: rats@ietf.org
Subject: [Rats] Out-of-band key = material set up in architecture document
 
An issue I have with = both the current architecture documents is that they do not discuss the = need for some out of band key material set up to make verification = work.
 
The manufacturer of the device must put = some private key into each device so that the device can sign = attestation evidence. Most likely the manufacturer also creates the = verifying key material, but they may or may not be the verifier. =  If they are not the verifier, somehow the verifier of attestation = evidence must have corresponding key material to verify the = signature.
 
This paragraph could be a start of the = text. I think this is a critical part of the architecture because = attestation doesn=E2=80=99t work without it. 
 
I agree that a = private key is needed in each device for attestation to work (at least = using any techniques
I=E2=80=99m aware = of). Saying =E2=80=9Cthe manufacturer must put it there=E2=80=9D, is = however I think too narrow, as it implies the
manufacturer actually knows the key. In some = arguably more secure designs, the device itself creates the
key pair and the manufacturer per se never knows = the private key, only the public key, so it would be
confusing to say the manufacturer =E2=80=9Cput=E2=80= =9D it there, or that the =E2=80=9Cmanufacturer creates=E2=80=9D the key = material.

We could say =E2=80=9Cestablish the signing = key=E2=80=9D? Certainly don=E2=80=99t want to exclude those more secure = designs.

 
...
 
Furthermore, the = RATS charter does not constrain attestation to only *hardware* based roots of trust.
There are some cases where it may be in a = hypervisor or bios or firmware or whatever, and only attest
things above that, with obviously a weaker level = of security than hardware-rooted attestation.   But any
protocol mechanisms should still work (mainly = because it=E2=80=99s almost impossible to rule them out except via
a security policy that says which keys to = trust), even if it=E2=80=99s not the primary focus we care most = about.  The
point here being = that in such a case it may not be the =E2=80=9Cmanufacturer=E2=80=9D, = but may be another entity.  That=E2=80=99s
actually true in some cases even for = hardware-based roots of = trust.

Yes, the =E2=80=9Cmanufacturer=E2=80=9D could be a = SW vendor or even the author of a dumb Android app. We need a much = broader term or description.

LL

= --Apple-Mail=_149AF028-8C07-4BAB-B5EC-1675FA879DC5-- From nobody Wed Nov 6 09:14:20 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27B90120875 for ; Wed, 6 Nov 2019 09:14:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gxx_QB0MVZZC for ; Wed, 6 Nov 2019 09:14:15 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EFF2120869 for ; Wed, 6 Nov 2019 09:14:14 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA6HEBP8012671 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 6 Nov 2019 18:14:12 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 6 Nov 2019 18:14:06 +0100 To: Laurence Lundblade , Dave Thaler CC: "rats@ietf.org" , Benjamin Kaduk References: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> <5050A16A-68D3-4D6A-859F-EAFF74FAF096@island-resort.com> From: Henk Birkholz Message-ID: Date: Wed, 6 Nov 2019 18:14:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <5050A16A-68D3-4D6A-859F-EAFF74FAF096@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] Out-of-band key material set up in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 17:14:18 -0000 Hi Dave, hi list, the scope of the architecture was discussed a lot. It is okay to provide a bigger picture here, as the "phasing approach" will allow to talk about the attestation provisioning flows later on. Ben accompanied that decision process and I think he might be able to restate that :) I think we are all in wild agreement here wrt to: > "the manufacturer must put it there”, is however I think too narrow We do not have to be prescriptive about any things here anyways, but to be descriptive or illustrative is very helpful. In this quite prominent scenario: > In some arguably more secure designs, the device itself creates the key pair and the manufacturer per se never knows the private key, only the public key, the manufacturer provisioned something that made this happen (and therefore took measures to render the public key meaningful). Viele Grüße, Henk On 06.11.19 17:58, Laurence Lundblade wrote: > > >> On Nov 5, 2019, at 3:40 PM, Dave Thaler > > wrote: >> >> Inline below… >> *From:*RATS >*On >> Behalf Of*Laurence Lundblade >> *Sent:*Tuesday, November 5, 2019 12:17 PM >> *To:*rats@ietf.org >> *Subject:*[Rats] Out-of-band key material set up in architecture document >> An issue I have with both the current architecture documents is that >> they do not discuss the need for some out of band key material set up >> to make verification work. >> >> The manufacturer of the device must put some private key into each >> device so that the device can sign attestation evidence. Most >> likely the manufacturer also creates the verifying key material, >> but they may or may not be the verifier.  If they are not the >> verifier, somehow the verifier of attestation evidence must have >> corresponding key material to verify the signature. >> >> This paragraph could be a start of the text. I think this is a >> critical part of the architecture because attestation doesn’t work >> without it. >> I agree that a private key is needed in each device for attestation to >> work (at least using any techniques >> I’m aware of). Saying “the manufacturer must put it there”, is however >> I think too narrow, as it implies the >> manufacturer actually knows the key. In some arguably more secure >> designs, the device itself creates the >> key pair and the manufacturer per se never knows the private key, only >> the public key, so it would be >> confusing to say the manufacturer “put” it there, or that the >> “manufacturer creates” the key material. > > We could say “establish the signing key”? Certainly don’t want to > exclude those more secure designs. > >> ... >> Furthermore, the RATS charter does not constrain attestation to only >> **hardware** based roots of trust. >> There are some cases where it may be in a hypervisor or bios or >> firmware or whatever, and only attest >> things above that, with obviously a weaker level of security than >> hardware-rooted attestation.   But any >> protocol mechanisms should still work (mainly because it’s almost >> impossible to rule them out except via >> a security policy that says which keys to trust), even if it’s not the >> primary focus we care most about.  The >> point here being that in such a case it may not be the “manufacturer”, >> but may be another entity.  That’s >> actually true in some cases even for hardware-based roots of trust. > > Yes, the “manufacturer” could be a SW vendor or even the author of a > dumb Android app. We need a much broader term or description. > > LL > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Nov 6 10:53:15 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 619B4120145 for ; Wed, 6 Nov 2019 10:53:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=ddgP3d8P; dkim=pass (1024-bit key) header.d=juniper.net header.b=LcuqMT/1 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RzQ65Hsrk91J for ; Wed, 6 Nov 2019 10:53:11 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8C69120108 for ; Wed, 6 Nov 2019 10:53:11 -0800 (PST) Received: from pps.filterd (m0108160.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA6Iq3W5024302; Wed, 6 Nov 2019 10:53:07 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=CYD3DHaHoD6NG4bZnPvx7KetqaRweO/KB1NxDMyr+qE=; b=ddgP3d8PvnwEEh1kY90OYGVOMzmypQSQxr1Mnq0bVKds1ElreDj6iyUGwQN0kFsKdvIJ iV4DYNm+LMg5v5NMe5pCAaVK/oRlalVrUnsZn5AH3/NSqakD7WE10YA2/BdR7FJXVyUl XlaXqkKPnRludZr20sub1S2+ydPp6zlTV4QKJsUYfE/KVevhusNkevXwZutGGac3an0n 4mtARXAtg75gZ9NsqIehAj6esLmUWPLCmpUE2KxSrkTXgYcvIB0lEvGksRCaJQaInwA0 L/X0iDOMNRqVTVS8ZWxhbnEJYF9uMQrG1UVkrRDH3uRLaG5S8DK2LTh59DMamo+Ww5nn Og== Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp2059.outbound.protection.outlook.com [104.47.49.59]) by mx0b-00273201.pphosted.com with ESMTP id 2w41vjg80v-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 06 Nov 2019 10:53:07 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aZtJDx0mg1tdMtzOTCLHDNIQ8A8KD5iu2z4z0+8VoWoTpizfN6OHsTqlr8a2HxnDvraz2yQYQaB8vHb8VEHJpFM2DwNfUCAfqSQV0VTgzkgcj/e6F/fZIk11ZbFDlVrPx9/TetLR4Vqf7LK2XJzF7Vik5EWlXVvWab1ERwkTxa8fN3aymZS6qjcrL61hsn/CuwPG9c9pK3P3ko57iz3Q6U2THTkgXs8C4ff6hJwfElp4XuxxwrNN+DdwN8sO4lmrRHU1xB5taaj8SvC08ZqIAyLzlgY9Cg9ajH7Kaz1cyiIsATSgrfAK3PKQskX6rr6JQrgvwDXGUC4kurrB3OI2uQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CYD3DHaHoD6NG4bZnPvx7KetqaRweO/KB1NxDMyr+qE=; b=RhnFEmoHcwf8CXI8L1+5phIFNxlHCCLTf7LfxBfbRO864KoljwS/66ZH1df69V5TeYoPLYfQ0NxA/ERaO9NI7UdF0ILOeLcJJzSSS1n8QjWBfXQE+wnBUzGem+7gTUojwcCb0XD4WlIGMFTfOhOR6YUeTOp72htvyOIVN0skodiBV4lr49vaErrS1lD3UKkjHiAIVCPKk1VZaFXu9qx01MLlAYtzzHHvFkuv6uHBJd07egZSD6k5za1jKuFPIGWjm9jaWlIG89bWK7fdX2+cqhCVHot5O339UPVMax2E3FHD9t8hPTzdT8adk6q+7HfmTVE+SMigSgye3DbuhkMKRQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CYD3DHaHoD6NG4bZnPvx7KetqaRweO/KB1NxDMyr+qE=; b=LcuqMT/1Hig4N6gg2C7xqiKjqnh5O5+EqH4sodnRVy9iItJ0UB4R+5uwzkBfD2AhLgqltFQa9Jj6b0JkBpCmWlXhVeDxxQLZjxTVnJbOq3KhUxGd8hIPPx3T3FE7LbrMDPGMiHApw4vWdYKkutfDIhohUpXGNWpuBr1ZNAaeZZk= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4966.namprd05.prod.outlook.com (20.177.229.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Wed, 6 Nov 2019 18:53:04 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2430.020; Wed, 6 Nov 2019 18:53:04 +0000 From: Guy Fedorkow To: Henk Birkholz , Laurence Lundblade , Dave Thaler CC: "rats@ietf.org" , Benjamin Kaduk Thread-Topic: [Rats] Out-of-band key material set up in architecture document Thread-Index: AQHVlBYHfaj0pPUV6EO1nm+V0K/T+qd9PMYAgAEh1gCAAARoAIAAGsGg Content-Class: Date: Wed, 6 Nov 2019 18:53:03 +0000 Message-ID: References: <9B93F41C-3707-4822-B3F5-5F9978872786@island-resort.com> <5050A16A-68D3-4D6A-859F-EAFF74FAF096@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-06T18:53:00.6019783Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=7b2b264b-b456-4f39-b7b4-01ce163a0180; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ac9d1081-f422-4225-5466-08d762ea8df9 x-ms-traffictypediagnostic: BYAPR05MB4966: x-ms-exchange-purlcount: 2 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 02135EB356 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(396003)(136003)(376002)(346002)(189003)(13464003)(199004)(4326008)(110136005)(3846002)(52536014)(76116006)(71200400001)(71190400001)(9686003)(86362001)(66946007)(64756008)(6306002)(66476007)(66556008)(966005)(6246003)(66446008)(55016002)(66066001)(2906002)(14444005)(256004)(478600001)(6436002)(25786009)(186003)(7696005)(76176011)(316002)(33656002)(81166006)(81156014)(54906003)(99286004)(1511001)(11346002)(7736002)(5660300002)(74316002)(229853002)(102836004)(53546011)(6506007)(476003)(305945005)(26005)(446003)(8676002)(8936002)(14454004)(6116002)(486006); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4966; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:3; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: aQcEv3wPtBCoNrtRopiSfpMCB5INmKVC49DQaiRGHHM2zZxUbJ1aVG8w6IL1Rjy2wq+fm4SIwacLXonar5NoZjU7PbHhLCr+8t2gldpMdCpQ6t5+KxQFzm6gleIGCHpCgZvttfLbL+ElEwfSPJ+OV6YIFfeDxnmGdFsDpGJlht1iInjrhTlpSQ4l8JhCDY4W0IcOslSu+gDDBmQJRWrH3XZn+02UxMp0EeGoi4rnu7WJA2XQ6oWwHBXnIvCc2Sj7MZNe8WlttmE0mb+LaRZzd9iAzDFB0BAyIiIo6O17+c2ic5JpLS8wPAUeNssCbqGBvdH/oF5z+JTbtL/S7f1cdURwxs1Ivo1mIKev4WitAADci5LeyAUlVDtlvvqikkTasv2BWh+wwHD5TVNEzfzyk6Jk8hHd6ykavgigFiRHJ15EThh+Jxlo6f+eWr6IohJlTB8ipEhLlW4eYOHYiHn7KjMg9T/SX9+fpC+n/v+QsLA= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: ac9d1081-f422-4225-5466-08d762ea8df9 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2019 18:53:03.8911 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: j5lR1YGmHml+JGrJ+A+V/1ivElVs7NVfvAeQ4f/LU0eirjajBJO9UB1wl3+LRoLjrj2663GTvYLE8B+kJI9s2Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4966 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-06_06:2019-11-06,2019-11-06 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 impostorscore=0 lowpriorityscore=0 bulkscore=0 malwarescore=0 suspectscore=0 adultscore=0 phishscore=0 clxscore=1031 priorityscore=1501 spamscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911060184 Archived-At: Subject: Re: [Rats] Out-of-band key material set up in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 18:53:14 -0000 SGkgRGF2ZSwNCiAgSSBhZ3JlZSB0aGF0IHNvbWUga2luZCBvZiBrZXkgaXMgZXNzZW50aWFsIHRv IGF0dGVzdGF0aW9uLiAgDQogIEkgZG9uJ3Qgd2FudCB0byBtYWtlIGEgc3RhdGVtZW50IG9mIFJB VFMgYXJjaGl0ZWN0dXJlLCBidXQgdGhlIFJJViBkcmFmdCBjYWxscyBmb3IgdGhlIHVzZSBvZiBh IG1hbnVmYWN0dXJlci1pbnN0YWxsZWQgRGV2SUQgY3JlZGVudGlhbC4gIEluIHRoZSBUUE0gd29y bGQsIHRoZSBrZXkgY29ycmVzcG9uZGluZyB0byB0aGUgRGV2SUQgd291bGQgYmUgZ2VuZXJhdGVk IGluc2lkZSB0aGUgVFBNLCBzbyBubyBvbmUgd291bGQgaGF2ZSBhY2Nlc3MgdG8gaXQgKGFzc3Vt aW5nIHlvdSB0cnVzdCB5b3VyIFRQTSB2ZW5kb3IhKS4NCiAgL2d1eQ0KDQoNCg0KSnVuaXBlciBC dXNpbmVzcyBVc2UgT25seQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogUkFU UyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSGVuayBCaXJraG9seg0KU2Vu dDogV2VkbmVzZGF5LCBOb3ZlbWJlciA2LCAyMDE5IDEyOjE0IFBNDQpUbzogTGF1cmVuY2UgTHVu ZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+OyBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNy b3NvZnQuY29tPg0KQ2M6IHJhdHNAaWV0Zi5vcmc7IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQu ZWR1Pg0KU3ViamVjdDogUmU6IFtSYXRzXSBPdXQtb2YtYmFuZCBrZXkgbWF0ZXJpYWwgc2V0IHVw IGluIGFyY2hpdGVjdHVyZSBkb2N1bWVudA0KDQpIaSBEYXZlLA0KaGkgbGlzdCwNCg0KdGhlIHNj b3BlIG9mIHRoZSBhcmNoaXRlY3R1cmUgd2FzIGRpc2N1c3NlZCBhIGxvdC4gSXQgaXMgb2theSB0 byBwcm92aWRlIGEgYmlnZ2VyIHBpY3R1cmUgaGVyZSwgYXMgdGhlICJwaGFzaW5nIGFwcHJvYWNo IiB3aWxsIGFsbG93IHRvIHRhbGsgYWJvdXQgdGhlIGF0dGVzdGF0aW9uIHByb3Zpc2lvbmluZyBm bG93cyBsYXRlciBvbi4gQmVuIGFjY29tcGFuaWVkIHRoYXQgZGVjaXNpb24gcHJvY2VzcyBhbmQg SSB0aGluayBoZSBtaWdodCBiZSBhYmxlIHRvIHJlc3RhdGUgdGhhdCA6KQ0KDQpJIHRoaW5rIHdl IGFyZSBhbGwgaW4gd2lsZCBhZ3JlZW1lbnQgaGVyZSB3cnQgdG86DQoNCj4gInRoZSBtYW51ZmFj dHVyZXIgbXVzdCBwdXQgaXQgdGhlcmXigJ0sIGlzIGhvd2V2ZXIgSSB0aGluayB0b28gbmFycm93 DQoNCldlIGRvIG5vdCBoYXZlIHRvIGJlIHByZXNjcmlwdGl2ZSBhYm91dCBhbnkgdGhpbmdzIGhl cmUgYW55d2F5cywgYnV0IHRvIGJlIGRlc2NyaXB0aXZlIG9yIGlsbHVzdHJhdGl2ZSBpcyB2ZXJ5 IGhlbHBmdWwuDQoNCkluIHRoaXMgcXVpdGUgcHJvbWluZW50IHNjZW5hcmlvOg0KDQo+IEluIHNv bWUgYXJndWFibHkgbW9yZSBzZWN1cmUgZGVzaWducywgdGhlIGRldmljZSBpdHNlbGYgY3JlYXRl cyB0aGUgDQo+IGtleSBwYWlyIGFuZCB0aGUgbWFudWZhY3R1cmVyIHBlciBzZSBuZXZlciBrbm93 cyB0aGUgcHJpdmF0ZSBrZXksIG9ubHkgDQo+IHRoZSBwdWJsaWMga2V5LA0KDQp0aGUgbWFudWZh Y3R1cmVyIHByb3Zpc2lvbmVkIHNvbWV0aGluZyB0aGF0IG1hZGUgdGhpcyBoYXBwZW4gKGFuZCB0 aGVyZWZvcmUgdG9vayBtZWFzdXJlcyB0byByZW5kZXIgdGhlIHB1YmxpYyBrZXkgbWVhbmluZ2Z1 bCkuDQoNClZpZWxlIEdyw7zDn2UsDQoNCkhlbmsNCg0KT24gMDYuMTEuMTkgMTc6NTgsIExhdXJl bmNlIEx1bmRibGFkZSB3cm90ZToNCj4gDQo+IA0KPj4gT24gTm92IDUsIDIwMTksIGF0IDM6NDAg UE0sIERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20gDQo+PiA8bWFpbHRvOmR0aGFs ZXJAbWljcm9zb2Z0LmNvbT4+IHdyb3RlOg0KPj4NCj4+IElubGluZSBiZWxvd+KApg0KPj4gKkZy b206KlJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyA8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRm Lm9yZz4+Kk9uDQo+PiBCZWhhbGYgT2YqTGF1cmVuY2UgTHVuZGJsYWRlDQo+PiAqU2VudDoqVHVl c2RheSwgTm92ZW1iZXIgNSwgMjAxOSAxMjoxNyBQTSAqVG86KnJhdHNAaWV0Zi5vcmcgDQo+PiA8 bWFpbHRvOnJhdHNAaWV0Zi5vcmc+ICpTdWJqZWN0OipbUmF0c10gT3V0LW9mLWJhbmQga2V5IG1h dGVyaWFsIHNldCANCj4+IHVwIGluIGFyY2hpdGVjdHVyZSBkb2N1bWVudCBBbiBpc3N1ZSBJIGhh dmUgd2l0aCBib3RoIHRoZSBjdXJyZW50IA0KPj4gYXJjaGl0ZWN0dXJlIGRvY3VtZW50cyBpcyB0 aGF0IHRoZXkgZG8gbm90IGRpc2N1c3MgdGhlIG5lZWQgZm9yIHNvbWUgDQo+PiBvdXQgb2YgYmFu ZCBrZXkgbWF0ZXJpYWwgc2V0IHVwIHRvIG1ha2UgdmVyaWZpY2F0aW9uIHdvcmsuDQo+Pg0KPj4g ICAgIFRoZSBtYW51ZmFjdHVyZXIgb2YgdGhlIGRldmljZSBtdXN0IHB1dCBzb21lIHByaXZhdGUg a2V5IGludG8gZWFjaA0KPj4gICAgIGRldmljZSBzbyB0aGF0IHRoZSBkZXZpY2UgY2FuIHNpZ24g YXR0ZXN0YXRpb24gZXZpZGVuY2UuIE1vc3QNCj4+ICAgICBsaWtlbHkgdGhlIG1hbnVmYWN0dXJl ciBhbHNvIGNyZWF0ZXMgdGhlIHZlcmlmeWluZyBrZXkgbWF0ZXJpYWwsDQo+PiAgICAgYnV0IHRo ZXkgbWF5IG9yIG1heSBub3QgYmUgdGhlIHZlcmlmaWVyLiDCoElmIHRoZXkgYXJlIG5vdCB0aGUN Cj4+ICAgICB2ZXJpZmllciwgc29tZWhvdyB0aGUgdmVyaWZpZXIgb2YgYXR0ZXN0YXRpb24gZXZp ZGVuY2UgbXVzdCBoYXZlDQo+PiAgICAgY29ycmVzcG9uZGluZyBrZXkgbWF0ZXJpYWwgdG8gdmVy aWZ5IHRoZSBzaWduYXR1cmUuDQo+Pg0KPj4gVGhpcyBwYXJhZ3JhcGggY291bGQgYmUgYSBzdGFy dCBvZiB0aGUgdGV4dC4gSSB0aGluayB0aGlzIGlzIGEgDQo+PiBjcml0aWNhbCBwYXJ0IG9mIHRo ZSBhcmNoaXRlY3R1cmUgYmVjYXVzZSBhdHRlc3RhdGlvbiBkb2VzbuKAmXQgd29yayANCj4+IHdp dGhvdXQgaXQuDQo+PiBJIGFncmVlIHRoYXQgYSBwcml2YXRlIGtleSBpcyBuZWVkZWQgaW4gZWFj aCBkZXZpY2UgZm9yIGF0dGVzdGF0aW9uIA0KPj4gdG8gd29yayAoYXQgbGVhc3QgdXNpbmcgYW55 IHRlY2huaXF1ZXMgSeKAmW0gYXdhcmUgb2YpLiBTYXlpbmcg4oCcdGhlIA0KPj4gbWFudWZhY3R1 cmVyIG11c3QgcHV0IGl0IHRoZXJl4oCdLCBpcyBob3dldmVyIEkgdGhpbmsgdG9vIG5hcnJvdywg YXMgaXQgDQo+PiBpbXBsaWVzIHRoZSBtYW51ZmFjdHVyZXIgYWN0dWFsbHkga25vd3MgdGhlIGtl eS4gSW4gc29tZSBhcmd1YWJseSANCj4+IG1vcmUgc2VjdXJlIGRlc2lnbnMsIHRoZSBkZXZpY2Ug aXRzZWxmIGNyZWF0ZXMgdGhlIGtleSBwYWlyIGFuZCB0aGUgDQo+PiBtYW51ZmFjdHVyZXIgcGVy IHNlIG5ldmVyIGtub3dzIHRoZSBwcml2YXRlIGtleSwgb25seSB0aGUgcHVibGljIGtleSwgDQo+ PiBzbyBpdCB3b3VsZCBiZSBjb25mdXNpbmcgdG8gc2F5IHRoZSBtYW51ZmFjdHVyZXIg4oCccHV0 4oCdIGl0IHRoZXJlLCBvciANCj4+IHRoYXQgdGhlIOKAnG1hbnVmYWN0dXJlciBjcmVhdGVz4oCd IHRoZSBrZXkgbWF0ZXJpYWwuDQo+IA0KPiBXZSBjb3VsZCBzYXkg4oCcZXN0YWJsaXNoIHRoZSBz aWduaW5nIGtleeKAnT8gQ2VydGFpbmx5IGRvbuKAmXQgd2FudCB0byANCj4gZXhjbHVkZSB0aG9z ZSBtb3JlIHNlY3VyZSBkZXNpZ25zLg0KPiANCj4+IC4uLg0KPj4gRnVydGhlcm1vcmUsIHRoZSBS QVRTIGNoYXJ0ZXIgZG9lcyBub3QgY29uc3RyYWluIGF0dGVzdGF0aW9uIHRvIG9ubHkNCj4+ICoq aGFyZHdhcmUqKiBiYXNlZCByb290cyBvZiB0cnVzdC4NCj4+IFRoZXJlIGFyZSBzb21lIGNhc2Vz IHdoZXJlIGl0IG1heSBiZSBpbiBhIGh5cGVydmlzb3Igb3IgYmlvcyBvciANCj4+IGZpcm13YXJl IG9yIHdoYXRldmVyLCBhbmQgb25seSBhdHRlc3QgdGhpbmdzIGFib3ZlIHRoYXQsIHdpdGggDQo+ PiBvYnZpb3VzbHkgYSB3ZWFrZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgdGhhbiBoYXJkd2FyZS1yb290 ZWQgDQo+PiBhdHRlc3RhdGlvbi7CoMKgIEJ1dCBhbnkgcHJvdG9jb2wgbWVjaGFuaXNtcyBzaG91 bGQgc3RpbGwgd29yayAobWFpbmx5IA0KPj4gYmVjYXVzZSBpdOKAmXMgYWxtb3N0IGltcG9zc2li bGUgdG8gcnVsZSB0aGVtIG91dCBleGNlcHQgdmlhIGEgc2VjdXJpdHkgDQo+PiBwb2xpY3kgdGhh dCBzYXlzIHdoaWNoIGtleXMgdG8gdHJ1c3QpLCBldmVuIGlmIGl04oCZcyBub3QgdGhlIHByaW1h cnkgDQo+PiBmb2N1cyB3ZSBjYXJlIG1vc3QgYWJvdXQuwqAgVGhlIHBvaW50IGhlcmUgYmVpbmcg dGhhdCBpbiBzdWNoIGEgY2FzZSANCj4+IGl0IG1heSBub3QgYmUgdGhlIOKAnG1hbnVmYWN0dXJl cuKAnSwgYnV0IG1heSBiZSBhbm90aGVyIGVudGl0eS7CoCBUaGF04oCZcyANCj4+IGFjdHVhbGx5 IHRydWUgaW4gc29tZSBjYXNlcyBldmVuIGZvciBoYXJkd2FyZS1iYXNlZCByb290cyBvZiB0cnVz dC4NCj4gDQo+IFllcywgdGhlIOKAnG1hbnVmYWN0dXJlcuKAnSBjb3VsZCBiZSBhIFNXIHZlbmRv ciBvciBldmVuIHRoZSBhdXRob3Igb2YgYSANCj4gZHVtYiBBbmRyb2lkIGFwcC4gV2UgbmVlZCBh IG11Y2ggYnJvYWRlciB0ZXJtIG9yIGRlc2NyaXB0aW9uLg0KPiANCj4gTEwNCj4gDQo+IA0KPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBSQVRTIG1h aWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMv X19odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCj4gX187IThXb0E2 UmpDODFjIVM3VnVwQVp2cE5Oem0yV2VEQmVrMExyVzB2ZzQwMERRdFkwR0x6eDhndGdCbFhfZ0Jo ZWs0NA0KPiBuQ1BvWDhPRVppTExzJA0KPiANCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnDQpo dHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9yYXRzX187IThXb0E2UmpDODFjIVM3VnVwQVp2cE5Oem0yV2VEQmVrMExyVzB2ZzQw MERRdFkwR0x6eDhndGdCbFhfZ0JoZWs0NG5DUG9YOE9FWmlMTHMkIA0K From nobody Wed Nov 6 10:58:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4259120104 for ; Wed, 6 Nov 2019 10:58:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=VkBhAnvd; dkim=pass (1024-bit key) header.d=juniper.net header.b=HQVJzPg8 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L9ztLhwrF-8X for ; Wed, 6 Nov 2019 10:58:45 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A00F812001A for ; Wed, 6 Nov 2019 10:58:45 -0800 (PST) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA6Iut3R024267; Wed, 6 Nov 2019 10:58:44 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=L+KJqNZnJUz84mBqV296qeI3+xMKso+j3eXwqVwQKxQ=; b=VkBhAnvdIE/CNb7iADbB9cNy0yrkQc/EGkLFcLv9YVmHeFTGp/S8hBUjYEsKKdpfkGAa 5baZUW9Oj0E0d3kbPo6X6c2DGTKmirDY3tTRRZ4nPU3DSZZig2lzCNtU2ujINLM9Lz4I gsbCFwoUgboAoa6y6HS4fLhYgIB0dOhrVd3w/eZgXYCEyU6w3hrV5t2QO1Zo23vhPErC 8WivjnIG0VJqvS93g6bKMCLLlMDT/caMWA5eZC9eUTa2B8l303n/UIp8zacMCQl11uaD KBFIR2mqFeTiG+1e3AlsMhc6w4Nunn9UszwIwXR6akA3+orbUBlbt4w1Yz5JeME0AAjZ iQ== Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp2055.outbound.protection.outlook.com [104.47.49.55]) by mx0a-00273201.pphosted.com with ESMTP id 2w41vb089u-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 06 Nov 2019 10:58:44 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N1bHzE2K67kJ+Zfg7OISyb2VdOkeKyel7KzsV+kTOvmjGEGNBQfFey1TiimknhaYEWOPfPsblmTPxFUF3qfe6Cg6Ss+ii1u04Yw2Nqmt6GwgryKTgeTXE3x1newjdJwcjnPI+qRiNfvcUohfJNlga0vF+CUE7jihEmk2woZWJfQLV0fRoMbDtTu44jXj8CL0E2M2XiUy+6S6IN/uZle7AuOamU37wZmcjVMJhWuDFBQqBVcGhYDI7gA/PDUKTr+VEgxbK4VmmiMu2/mDwA64534qle6bzrSTq8DyaMVhRHYPIuHzDT3YmByiUMCgdRIs+ndz2XnmZmSvBeP26alGSw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L+KJqNZnJUz84mBqV296qeI3+xMKso+j3eXwqVwQKxQ=; b=EB077m97IgGsmK/WnqjmoEgdpT3KzjEeKquoEg8UCgT9dA0z6YJAMnQAIG1yvFMAb6CGyQ9HeJhM/T7FhcX6PAj/50cum9sbsB7btgfVVzwPuJwNrjWAIccol80k0kroiAWqej5Z8CyWPEiGDhB90gPz+ec7+Y+xioYSi5ENOGvoanB6fBGjCSUihHfAYuYrbftzrux3IqRWRk82T/iGcGduabW1Ydt5DhTbMnxHP4x1ICKr70jfCnUjtQpniIf/Blx2BdyonJkS9Zd+q+6PY6zPUM5ZPs0vx3yYpSl4+1B53GlcarB1uzv4rBSjESZGdRxxDqj0j85ehdmKg2/eVg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L+KJqNZnJUz84mBqV296qeI3+xMKso+j3eXwqVwQKxQ=; b=HQVJzPg8rDIL2H5VakQna3aKuSrsu5/Jg63yAw/WRhEqIscfTTSVnBbTvCMYTDKCMI39d324lFiT7ZFwOS7SbZpr21Adnrekj3rWGpVMJOLCFIKjbe/Bj0lfwktxgA3afPq3g4v9pVzpIGCNs5Yfvv88g9rSlu4lFFKx6GRp4iI= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4966.namprd05.prod.outlook.com (20.177.229.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Wed, 6 Nov 2019 18:58:41 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2430.020; Wed, 6 Nov 2019 18:58:41 +0000 From: Guy Fedorkow To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" CC: Puru Kulkarni Thread-Topic: Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+f+mQ Content-Class: Date: Wed, 6 Nov 2019 18:58:41 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> In-Reply-To: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-06T18:58:39.0363622Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c29a8352-ff09-498f-a7ee-def35315b424; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c80b73e6-e288-4dda-1755-08d762eb5700 x-ms-traffictypediagnostic: BYAPR05MB4966: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 02135EB356 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(396003)(136003)(376002)(346002)(189003)(51914003)(199004)(4326008)(110136005)(3846002)(790700001)(52536014)(76116006)(71200400001)(71190400001)(9686003)(86362001)(54896002)(66946007)(64756008)(6306002)(66476007)(66556008)(966005)(6246003)(66446008)(55016002)(66066001)(2906002)(2501003)(14444005)(256004)(478600001)(6436002)(25786009)(186003)(7696005)(76176011)(316002)(236005)(33656002)(81166006)(107886003)(81156014)(99286004)(606006)(11346002)(7736002)(5660300002)(74316002)(229853002)(102836004)(53546011)(6506007)(476003)(26005)(446003)(8676002)(8936002)(561944003)(14454004)(6116002)(486006); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4966; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4Oo6L4B98jQFuoQSWaeKPQ17dkItE2CdbZXBOGKFQrie/7j0eA5+zXhSYCiwLH/S4tnU1y3FLUgpjyCSKOpE5DNT3cst3p1GdB0LJOj2pbHN0q7WkbS6rmaXJN5CyzE2cnceV7VU0aSpQrEOW8SHElzBgPVARa7N4jaYZL5GW9pJxJv+boN9bbZzNoz+/JWC7SfMCp1ztgbqo5q0sYidfaAoMEwhq0cYmvYIbXMcavYjfIwIr3UtLWksnZ8Hg14vsZxPKzu4N9xA3b+gy3ZqGx3ooGui+Ea59BGDUJ5XNNJFFUYQbyauGiMJwebG69e0XzoZ0bTTJGKRHsB+7CI85ruQkyJYY17dyNLnhkTmB+qZqhgGdlfS9Ul25LACr34eNIe04CXG7H/0o765NNHkActEr9IxWxIkIGvgCrtssDMqXwMSsS3AhjN3kzDgr00dTlvp0moZEorDtqf2at11kYzz33ss0YRPJIp/NeTUycc= Content-Type: multipart/alternative; boundary="_000_BYAPR05MB4248A6928B5A113313D282DFBA790BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: c80b73e6-e288-4dda-1755-08d762eb5700 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2019 18:58:41.0825 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: GJkley8F8rO409AP1+2f8YgJDpKszl/9qsDd0ElaouR+YkmakC2zEt3tKs+zc/eiphC99eA2j2Rxq8wIXh2zpA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4966 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-06_06:2019-11-06,2019-11-06 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 clxscore=1015 priorityscore=1501 phishscore=0 malwarescore=0 mlxlogscore=999 impostorscore=0 bulkscore=0 spamscore=0 suspectscore=0 adultscore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911060185 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 18:58:48 -0000 --_000_BYAPR05MB4248A6928B5A113313D282DFBA790BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Nancy, I'm fine with this proposal Thx /guy Juniper Business Use Only From: RATS On Behalf Of Nancy Cam-Winget (ncamwing) Sent: Tuesday, November 5, 2019 5:55 PM To: rats@ietf.org Subject: [Rats] Call for adoption (after draft rename) for Yang module draf= t All, Thanks for the feedback and responses received thus far on the https://data= tracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/ draft. There was consensus that the focus of the draft is more about TPM based at= testations so the draft should be modified accordingly. A suggested title = would be "Yang Module for TPM based Remote Attestations", the file, once ad= opted, would be renamed to draf -rats-tpm-yang-module With this proposed update, this is a call for adoption for that draft with = the modified name. We would like to close the confirmation by the Friday o= f the IETF 106, e.g. Friday Nov 22 EOD (IETF time). If you have objections= on adopting the draft, please state your rationale as well. Warm regards, Nancy --_000_BYAPR05MB4248A6928B5A113313D282DFBA790BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Nancy,

  I’m fi= ne with this proposal

  Thx

/guy

 

 

 

Juniper Business Use Only

From:= RATS <rats-bounces@ietf.org> On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Tuesday, November 5, 2019 5:55 PM
To: rats@ietf.org
Subject: [Rats] Call for adoption (after draft rename) for Yang modu= le draft

 

All,

Thanks for the feed= back and responses received thus far on the https://datatracker.iet= f.org/doc/draft-birkholz-rats-basic-yang-module/

draft.  <= /o:p>

 

There  was con= sensus that the focus of the draft is more about TPM based attestations so = the draft should be modified accordingly.  A suggested title would be = “Yang Module for TPM based Remote Attestations”, the file, once adopted, would be renamed to draf -rats-tpm-y= ang-module

 

With this proposed = update, this is a call for adoption for that draft with the modified name.&= nbsp; We would like to close the confirmation by the Friday of the IETF 106= , e.g. Friday Nov 22 EOD (IETF time).  If you have objections on adopting the draft, please state your rationale as = well.

 

Warm regards, =

   &= nbsp;            Nan= cy

--_000_BYAPR05MB4248A6928B5A113313D282DFBA790BYAPR05MB4248namp_-- From nobody Wed Nov 6 11:44:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED79D1200C7 for ; Wed, 6 Nov 2019 11:44:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CnaIj06vGnsk for ; Wed, 6 Nov 2019 11:44:06 -0800 (PST) Received: from p3plsmtpa06-09.prod.phx3.secureserver.net (p3plsmtpa06-09.prod.phx3.secureserver.net [173.201.192.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 451B2120130 for ; Wed, 6 Nov 2019 11:44:06 -0800 (PST) Received: from [10.122.0.182] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id SRDoi8733tXT2SRDpi74Mc; Wed, 06 Nov 2019 12:44:05 -0700 From: Laurence Lundblade Message-Id: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_22AE0FDF-4386-43BE-8AAC-0D4EBC5EB76E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 6 Nov 2019 11:44:03 -0800 In-Reply-To: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> Cc: "rats@ietf.org" To: "Nancy Cam-Winget (ncamwing)" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfBA9GFVVTfQj7I5zlwtbWHAHhCVjgiawIJcXxWozZNCnKhn0o1Z8uW48nDEPJa9M69gH7oI9H3b+upcTkOGpZiQ/My72kTRUCp4Ikq/HJJP2jwNG052x FMY3E+4x4eMuhCBxt+uFsZ3K1vtWL7Hg0tDv+f4PLvuKSzRvoJjHndEmfkzK+EDQCgrNZDwYuHY41A== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 19:44:10 -0000 --Apple-Mail=_22AE0FDF-4386-43BE-8AAC-0D4EBC5EB76E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I think we have accepted that this WG will do standardization for / = around the following attestation token formats (aka attestation evidence = formats): EAT (lots of detailed work in IETF to define) JWT CWT (possibly also ASN.1 / X.509) TCG (fixed years ago by the TCG) TPM 1.2 signed Quote TPM 2 signed Audit Session I think any conveyance protocol we work on MUST carry all of these. I = don=E2=80=99t think this is hard. If it were hard I wouldn=E2=80=99t say = this. To adopt the YANG module, I think it should be modified to carry = EAT/JWT/CWT and retain its name. It can still have the other = TPM-specific stuff in it for use when in TPM mode, but it should have an = EAT mode too. LL > On Nov 5, 2019, at 2:54 PM, Nancy Cam-Winget (ncamwing) = wrote: >=20 > All, > Thanks for the feedback and responses received thus far on the = https://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/ = > draft. =20 > =20 > There was consensus that the focus of the draft is more about TPM = based attestations so the draft should be modified accordingly. A = suggested title would be =E2=80=9CYang Module for TPM based Remote = Attestations=E2=80=9D, the file, once adopted, would be renamed to draf = -rats-tpm-yang-module > =20 > With this proposed update, this is a call for adoption for that draft = with the modified name. We would like to close the confirmation by the = Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time). If you have = objections on adopting the draft, please state your rationale as well. > =20 > Warm regards,=20 > Nancy=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_22AE0FDF-4386-43BE-8AAC-0D4EBC5EB76E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I think we have accepted that this WG will do = standardization for / around the following attestation token formats = (aka attestation evidence formats):
  • EAT (lots of detailed work in IETF = to define)
    • JWT
    • CWT
    • (possibly also ASN.1 / = X.509)
  • TCG (fixed years ago by the TCG)
    • TPM 1.2 signed Quote
    • TPM 2 = signed Audit Session

I think any conveyance protocol we work on = MUST carry all of these. I don=E2=80=99t think this is hard. If it were = hard I wouldn=E2=80=99t say this.

To = adopt the YANG module, I think it should be modified to carry = EAT/JWT/CWT and retain its name. It can still have the other = TPM-specific stuff in it for use when in TPM mode, but it should have an = EAT mode too.

LL


On Nov 5, 2019, at 2:54 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> wrote:

All,
Thanks for the feedback and = responses received thus far on the https://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang= -module/
draft.  
 
There  was = consensus that the focus of the draft is more about TPM based = attestations so the draft should be modified accordingly.  A = suggested title would be =E2=80=9CYang Module for TPM = based Remote Attestations=E2=80=9D, the file, once adopted, would be renamed to draf = -rats-tpm-yang-module
 
With this = proposed update, this is a call for adoption for that draft with the = modified name.  We would like to close the confirmation by the = Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time).  If you = have objections on adopting the draft, please state your rationale as = well.
 
Warm = regards, 
          &nb= sp;     Nancy 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_22AE0FDF-4386-43BE-8AAC-0D4EBC5EB76E-- From nobody Wed Nov 6 12:09:34 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 87B8F120251 for ; Wed, 6 Nov 2019 12:09:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c68m3GF6z7wN for ; Wed, 6 Nov 2019 12:09:30 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55A051208EA for ; Wed, 6 Nov 2019 12:09:30 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA6K9L52019991 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 6 Nov 2019 21:09:22 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 6 Nov 2019 21:09:16 +0100 To: Guy Fedorkow , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" CC: Puru Kulkarni References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> From: Henk Birkholz Message-ID: Date: Wed, 6 Nov 2019 21:09:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 20:09:33 -0000 I am fine with that proposal as well. Sorry for the latency, noisy inbox syndrome. On 06.11.19 19:58, Guy Fedorkow wrote: > Nancy, > > Im fine with this proposal > > Thx > > /guy > > Juniper Business Use Only > > *From:*RATS *On Behalf Of *Nancy Cam-Winget > (ncamwing) > *Sent:* Tuesday, November 5, 2019 5:55 PM > *To:* rats@ietf.org > *Subject:* [Rats] Call for adoption (after draft rename) for Yang module > draft > > All, > > Thanks for the feedback and responses received thus far on the > https://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/ > > > draft. > > There was consensus that the focus of the draft is more about TPM based > attestations so the draft should be modified accordingly. A suggested > title would be Yang Module for TPM based Remote Attestations, the > file, once adopted, would be renamed to draf -rats-tpm-yang-module > > With this proposed update, this is a call for adoption for that draft > with the modified name. We would like to close the confirmation by the > Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time). If you have > objections on adopting the draft, please state your rationale as well. > > Warm regards, > > Nancy > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Nov 6 12:11:15 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CC291200A4 for ; Wed, 6 Nov 2019 12:11:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VhEqGCHWCkAA for ; Wed, 6 Nov 2019 12:11:11 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37277120058 for ; Wed, 6 Nov 2019 12:11:10 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xA6KB4WY020176 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 6 Nov 2019 21:11:05 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 6 Nov 2019 21:10:59 +0100 To: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> From: Henk Birkholz Message-ID: Date: Wed, 6 Nov 2019 21:10:58 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 20:11:13 -0000 And bad sequence of replies, too... Does that have an impact on the title? I think it does not. Laurence? Viele Grüße, Henk On 06.11.19 20:44, Laurence Lundblade wrote: > I think we have accepted that this WG will do standardization for / > around the following attestation token formats (aka attestation evidence > formats): > > * EAT (lots of detailed work in IETF to define) > o JWT > o CWT > o (possibly also ASN.1 / X.509) > * TCG (fixed years ago by the TCG) > o TPM 1.2 signed Quote > o TPM 2 signed Audit Session > > > I think any conveyance protocol we work on MUST carry all of these. I > don’t think this is hard. If it were hard I wouldn’t say this. > > To adopt the YANG module, I think it should be modified to carry > EAT/JWT/CWT and retain its name. It can still have the other > TPM-specific stuff in it for use when in TPM mode, but it should have an > EAT mode too. > > LL > > >> On Nov 5, 2019, at 2:54 PM, Nancy Cam-Winget (ncamwing) >> > wrote: >> >> All, >> Thanks for the feedback and responses received thus far on >> thehttps://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/ >> draft. >> There  was consensus that the focus of the draft is more about TPM >> based attestations so the draft should be modified accordingly.  A >> suggested title would be “Yang Module for TPM based Remote >> Attestations”, the file, once adopted, would be renamed to draf >> -rats-tpm-yang-module >> With this proposed update, this is a call for adoption for that draft >> with the modified name.  We would like to close the confirmation by >> the Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time).  If >> you have objections on adopting the draft, please state your rationale >> as well. >> Warm regards, >>                 Nancy >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Nov 6 12:24:20 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A07331200A4 for ; Wed, 6 Nov 2019 12:24:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Tm0uer_cU4T for ; Wed, 6 Nov 2019 12:24:16 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2F2212004A for ; Wed, 6 Nov 2019 12:24:16 -0800 (PST) Received: from [10.122.0.182] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id SRqhipu38MfejSRqhiAHT6; Wed, 06 Nov 2019 13:24:15 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: Date: Wed, 6 Nov 2019 12:24:14 -0800 Cc: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> To: Henk Birkholz X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfIwOCKQq91rRzmP0A5sxwlZjH8LsKzbgkApRn6ZFEcY191fbB9gxmn1UuxE8JHq/o5kh7Jt0Xv4pq46obkzeDIQVStWTk+Ziaztc+z81mmjp6AVemqjF uf9fXcY5x2r+jfMpp0ohLdup6VuVpjERF3UrTFayRzSInpp2bUyICLpjjAEynU/0uR4EeofQZZJ0W6LZzT2alqvrsZgq5wcG7N9cXBbS0wQs3qSP/bSNQDKu EmxNiXlZGadOTIvBjXAHCQ== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 20:24:18 -0000 For a version of it that carries EATs, the current name, YANG Module for = Basic Challenge-Response-based Remote Attestation Procedures, = draft-birkholz-rats-basic-yang-module-01 is fine IMO. LL > On Nov 6, 2019, at 12:10 PM, Henk Birkholz = wrote: >=20 > And bad sequence of replies, too... >=20 > Does that have an impact on the title? I think it does not. Laurence? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 06.11.19 20:44, Laurence Lundblade wrote: >> I think we have accepted that this WG will do standardization for / = around the following attestation token formats (aka attestation evidence = formats): >> * EAT (lots of detailed work in IETF to define) >> o JWT >> o CWT >> o (possibly also ASN.1 / X.509) >> * TCG (fixed years ago by the TCG) >> o TPM 1.2 signed Quote >> o TPM 2 signed Audit Session >> I think any conveyance protocol we work on MUST carry all of these. I = don=E2=80=99t think this is hard. If it were hard I wouldn=E2=80=99t say = this. >> To adopt the YANG module, I think it should be modified to carry = EAT/JWT/CWT and retain its name. It can still have the other = TPM-specific stuff in it for use when in TPM mode, but it should have an = EAT mode too. >> LL >>> On Nov 5, 2019, at 2:54 PM, Nancy Cam-Winget (ncamwing) = > wrote: >>>=20 >>> All, >>> Thanks for the feedback and responses received thus far on = thehttps://datatracker.ietf.org/doc/draft-birkholz-rats-basic-yang-module/= >>> draft. >>> There was consensus that the focus of the draft is more about TPM = based attestations so the draft should be modified accordingly. A = suggested title would be =E2=80=9CYang Module for TPM based Remote = Attestations=E2=80=9D, the file, once adopted, would be renamed to draf = -rats-tpm-yang-module >>> With this proposed update, this is a call for adoption for that = draft with the modified name. We would like to close the confirmation = by the Friday of the IETF 106, e.g. Friday Nov 22 EOD (IETF time). If = you have objections on adopting the draft, please state your rationale = as well. >>> Warm regards, >>> Nancy >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Wed Nov 6 12:57:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5375F1201A3 for ; Wed, 6 Nov 2019 12:57:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=NYkodn4J; dkim=pass (1024-bit key) header.d=juniper.net header.b=O+rWBlVp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LPgCu69v5Her for ; Wed, 6 Nov 2019 12:57:13 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2354E1200A4 for ; Wed, 6 Nov 2019 12:57:13 -0800 (PST) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA6KvBLF018300; Wed, 6 Nov 2019 12:57:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=nJRKqmbZZA+hmvzUBaQHwu7/XoTHSTShYUEQlCDwlto=; b=NYkodn4JcKcCm2moRcjHvJS0jkhjGOuZhpX15dLSrCbNB338cUwE7HVrQD+oQCNGLTcc 6gjAo8FUwCDm3yKBpWxLZZZ3jSDICP+h53e8KRcIt/j7jtL7trOG+udzzqOWJi9GHSNP oxSd1xIu8hmGSGoMxQWxKwaKsUMq8uO9RVGv6lYybGX9coOWOcbkvSJCcj0yz6OfvOjz 3TrpRNAFD6zhIm849Jq8Ngs/nPKedf6gCxHLZxyihrcqMGtCG3w5m29p7HQpEMEWRW9H 8SCDqmH/rDB4kTXMvG5KhLdTO9tdmjwabWW8f3xBYVnAXA1FXHeD/DK8um2eCJCBfxjN +g== Received: from nam05-co1-obe.outbound.protection.outlook.com (mail-co1nam05lp2056.outbound.protection.outlook.com [104.47.48.56]) by mx0a-00273201.pphosted.com with ESMTP id 2w41vb0efe-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 06 Nov 2019 12:57:11 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bV3gRVJXxYKskPVRnLFNwOnrXFnvlY0QMgYuCDRuSbOpKUW0KPo1+4apbrw8ciUJTGAADMo6Nbo/atclbrTWX2pX3FA608Q5UT2pi7qRYSauUtc5AhCL0lXavAF5cpfDVLnwAvcMIPw9kJQ62YZfAIk3fyAzHSQLcz5U3YZTAPiSMWNyD9KSM/VVlLNY7gvWDkbjG59YzXA3c/mrplwNArUJ6stIRWrvktQCanjvaGMYSPBA5w+oOK0/4SMNyVomDqTSPpLyB33U8cCCirkWcjN9DIoYFuRdEjHFvWvePfnwQmuvL3v8qdk8/VZbHKcMa1kVAhqL40ewQpvlvgj0EA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nJRKqmbZZA+hmvzUBaQHwu7/XoTHSTShYUEQlCDwlto=; b=Gw6F7MjvHwbsqd6FIM8cNKy6GmD0BhI1qdN7NiUL5SQUcxLOMrMKo2L9wRMMfTjdWw+5S+sJv+XP2OLa1zEui7fPTfi+Ab2ETrlmRNr8cn6BI6MyzlgUmGgVLtFB62ScAnsH1id4nJzbF8RDp5NZczFLtQoG+Ck+pv7Qp0mMjYbPj9a5gFtZYDfwb7QU758NHJ8aahXQkxo+ITSNiq8KKO3wxX3taNGJco/unpikS7DZs6sqr/q1LRIXsUsGH33MgdD2W8K6H3+YkdZL5ZvZuShns4mFHyZfrozMNNUcb0cX2l0Q/9ys9o+aecheeWZJyuU1h6x5PV79Wwjb3uwDGw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nJRKqmbZZA+hmvzUBaQHwu7/XoTHSTShYUEQlCDwlto=; b=O+rWBlVpAvLkBolGoqRyxHBEXTgCpEm/bMElOtGaUuTqNiPZsr3paNywUEOMcYgCgBUYTDHQFT7Sxdm67VABSIr7P6SZUwEYWlr+Dq/PIOU3xxA5z7MF5AZIsx6ceGTSQjvjL4FD5ZERa2HxLZMUePl8ee6YTVcuZkIFC5ZM0kY= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4646.namprd05.prod.outlook.com (52.135.234.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Wed, 6 Nov 2019 20:57:08 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2430.020; Wed, 6 Nov 2019 20:57:08 +0000 From: Guy Fedorkow To: Dave Thaler CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: RIV and the RATS architecture Thread-Index: AdWQISZnKaC7gFC9RTeTGiVYLOxchQDLr02gAGHv6oA= Date: Wed, 6 Nov 2019 20:57:08 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [18.20.141.107] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 32c24d3e-9b3c-491a-c003-08d762fbe313 x-ms-traffictypediagnostic: BYAPR05MB4646: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 02135EB356 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(396003)(376002)(39860400002)(366004)(136003)(199004)(189003)(6436002)(6506007)(316002)(186003)(71200400001)(71190400001)(74316002)(53546011)(6246003)(102836004)(446003)(54906003)(7736002)(476003)(76116006)(256004)(99286004)(76176011)(486006)(66946007)(64756008)(66446008)(66066001)(66556008)(7696005)(66476007)(26005)(6116002)(52536014)(229853002)(3846002)(8676002)(236005)(14444005)(11346002)(9686003)(2906002)(5660300002)(55016002)(6306002)(9326002)(54896002)(33656002)(25786009)(478600001)(8936002)(81166006)(81156014)(86362001)(790700001)(606006)(14454004)(966005)(4326008); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4646; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: h6nWRVkNm7m47PbAErM0vXRlUq7JHUhoXhNqQQ2FKQMV56sxhCKeqX7ARN+Kyp8XnKuhjRgsDeu3WbJdaDoGcF8mzBwBwW3yqgg3IEdMDkhjhCk8Rq7mMzReYqX0oVEKPmzU5UrhAOeRvTFnRE0pDLurG5J9xfk6AoB9sAmhbEC9lRnTso7LFlniIoc0YgVWfLQ61Zbdi4FUfW3hJamYfa8iwM6byj4yS1Ms3IDH4WkEN+hP1iNibIVHIrfEvWgPRIcWxuh6r7cVQYSRvXtI2N8XXDyxAZACsspJXFyi2ZBnkcu0KGRgBAeguPiX9zKW2nfdXSSfBvkxf/pUfl+Lga2kAgAGb8TIvpVvwZRFxAdcFa5Ri+DvEWIF2VnnyodMxx6P2UyX7V6YrHL0Q+poMAYf9Oletoq0U2LFXiscAI3WMar432jiVzw0ZNi7xLYuoM+8I3pFp2oxpcTTgwPsRu9is1upW/t7MG1cITZTFhM= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB42485F30F5B5E23220227E3BBA790BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 32c24d3e-9b3c-491a-c003-08d762fbe313 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2019 20:57:08.1430 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: b/GzNOOumFMhS6KZJZLnD6nfZ6Lgi9dhh7TuNeJrRter7Rki467PLMnqgkxrbbKwI0y39pUVC3dya0PH4Q0QEA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4646 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-06_07:2019-11-06,2019-11-06 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 clxscore=1015 priorityscore=1501 phishscore=0 malwarescore=0 mlxlogscore=999 impostorscore=0 bulkscore=0 spamscore=0 suspectscore=0 adultscore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911060207 Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 20:57:15 -0000 --_000_BYAPR05MB42485F30F5B5E23220227E3BBA790BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dave, Ok, I suppose the model where the verifier communicates directly with the= attested device is a kind of sub-contracted full-service background check.= That's ok with me, as long as no one interprets the diagram as meaning th= at the relying party must somehow insert itself into the exchange between V= erifier and Attester. And I see what you mean about lining up the scope of RIV. The draft has = gone through a number of changes as we've tried to disentangle it from TCG = tribal knowledge. I think the scope is set by a couple factors. The doc as written is clearly limited to TPM-based systems. That's certa= inly not the only way to manage a root of trust, but it's the one that's av= ailable on a lot of gear already, and it's fairly stable and tightly spec'd= . From the TCG side, I'd expect there would be interest in extending the i= deas to other TCG roots of trust such as DICE, but it seems that should be = driven out of TCG. The limitation to Network Equipment is entirely a matter of expedience. = I think the approach would work easily in other embedded applications, alth= ough YANG is likely a fixation only relevant to networking guys. Other dom= ains would presumably need other domain-specific protocols. I'll connect with Jessica to see if we can figure out how to align the na= me and scope a bit better with the rest of the RATS world. Thanks /guy Juniper Business Use Only From: Dave Thaler Sent: Monday, November 4, 2019 3:56 PM To: Guy Fedorkow Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: RE: RIV and the RATS architecture Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS > On Behalf = Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools.ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_BYAPR05MB42485F30F5B5E23220227E3BBA790BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Dave,

  Ok, I suppose the model where the verifier co= mmunicates directly with the attested device is a kind of sub-contracted fu= ll-service background check.  That’s ok with me, as long as no o= ne interprets the diagram as meaning that the relying party must somehow insert itself into the exchange between Verifier and At= tester.

 

  And I see what you mean about lining up the s= cope of RIV.  The draft has gone through a number of changes as weR= 17;ve tried to disentangle it from TCG tribal knowledge.

  I think the scope is set by a couple factors.=

  The doc as written is clearly limited to TPM-= based systems.  That’s certainly not the only way to manage a ro= ot of trust, but it’s the one that’s available on a lot of gear= already, and it’s fairly stable and tightly spec’d.  From= the TCG side, I’d expect there would be interest in extending the ideas = to other TCG roots of trust such as DICE, but it seems that should be drive= n out of TCG.

 

  The limitation to Network Equipment is entire= ly a matter of expedience.  I think the approach would work easily in = other embedded applications, although YANG is likely a fixation only releva= nt to networking guys.  Other domains would presumably need other domain-specific protocols.

 

  I’ll connect with Jessica to see if we = can figure out how to align the name and scope a bit better with the rest o= f the RATS world.

 

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.c= om@dmarc.ietf.org>
Sent: Monday, November 4, 2019 3:56 PM
To: Guy Fedorkow <gfedorkow@juniper.net>
Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/html/draft-fedorkow-rat= s-network-device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools= .ietf.org/wg/nea/ has

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_BYAPR05MB42485F30F5B5E23220227E3BBA790BYAPR05MB4248namp_-- From nobody Wed Nov 6 14:26:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A8F31207FE for ; Wed, 6 Nov 2019 14:26:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=c2j1YDDt; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=mhRdx9pk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q0OlARcZ3z6Q for ; Wed, 6 Nov 2019 14:26:24 -0800 (PST) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D8FB12002F for ; Wed, 6 Nov 2019 14:26:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5359; q=dns/txt; s=iport; t=1573079184; x=1574288784; h=from:to:subject:date:message-id:mime-version; bh=kXr8Kq3g8jkVT/qPrMCiZIZHYEHINdkJ87DPyaoUNo4=; b=c2j1YDDtiKhPS+uLG/S4BerzmBnEsnLQSNcM9izWkSnO4A2JxLb5hYAF G9IJOcIFUKJNwkPCRef24hOPsRjV44gM5EsXK5h48Zb2kqLTNcSjzLXtV apyz2U/GXO2FGDf1ypFVea1QSsbw00iOMFzVOfzCiYyQ7WgvpXhbjbG16 s=; IronPort-PHdr: =?us-ascii?q?9a23=3AVt1yYBCn9aKTtiAt7vjgUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qs03kTRU9Dd7PRJw6rNvqbsVHZIwK7JsWtKMfkuHw?= =?us-ascii?q?QAld1QmgUhBMCfDkiuKvXjajM7GstqX15+9Hb9Ok9QS47z?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CYEQDyR8Nd/5FdJa1lHgELHIMaL1A?= =?us-ascii?q?FbFggBAsqhCmDRgOLAE6Ba5NBhGKCUgNUCQEBAQwBAS0CAQGEWYN3JDgTAgM?= =?us-ascii?q?BAwIDAgEBBAEBAQIBBQRthTcBC4VqER0BATgRAQwOMAIEMBcQBDWDAAGBeU0?= =?us-ascii?q?DLgGnLgKBOIhgdYEygn4BAQWCSYI+GIIXCYE2jBQYgX+BEScME4pfMoIsjUy?= =?us-ascii?q?COYU/mEIKgiQDlTkbmW6OQ5lkAgQCBAUCDgEBBYFpIoFYcBVlAYJBUBEUkDa?= =?us-ascii?q?Dc4pTdIEokGYBAQ?= X-IronPort-AV: E=Sophos;i="5.68,275,1569283200"; d="scan'208,217";a="374226251" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 06 Nov 2019 22:26:23 +0000 Received: from XCH-ALN-013.cisco.com (xch-aln-013.cisco.com [173.36.7.23]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id xA6MQN4Z008290 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Wed, 6 Nov 2019 22:26:23 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-013.cisco.com (173.36.7.23) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 6 Nov 2019 16:26:22 -0600 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 6 Nov 2019 17:26:21 -0500 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 6 Nov 2019 17:26:21 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IgUo0MhAkzYCI6CD2FZG6C5wQGXhl3/3hpdINjDGWD7GljmChB8zHacaPjpfglAqo4k2Z6XL73PyBe1mbFlGHXdGp43omf5m0yGbLDkh7IPC/zfzkH93CPSmvejd3qUwSu8SoQmeT4eFJhbxyhmNUxliMjORF6mTM0l+QmyBVcpY3G94tokVdW4bkJ94puOwriWtfwD5F/Gp/GY9u4BPvFV/2QTRtAbxcFd7zuWkIFV9mJdhgGU5TbbF2fhxtjBmMymDErOi1WLk4MHCsFBrYRjgCSHSZRc+P85ELHCJ++D6V1atPaA/fbvPaZxgfbRrnn+JQc3wCwykQQA2CAAPww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kXr8Kq3g8jkVT/qPrMCiZIZHYEHINdkJ87DPyaoUNo4=; b=XBzF0ribq1ScT/MBzUi+WlYnNeWflw51SaFXU+e2ZuM25Q4VHzML6kQPDF8qakEhAbOB8JLxCIf792HVVmwK5dTQ2Qo2MgLMS/EQegvxkRyMQ30vjUl0gbAktMbzhEUn1AGGTqwU1awbl/S0fvWRPFMSTlQqNke05N+HIZkiT7dA/NkrTbYow3fQz7pXzYKJoHO/EhEvkErjYAjZ3SEUn+EjwJe9rPgAYin+bHOsV5PBIls9gc5saUJQvx+PmRL+rdESL3b1OP1/lhR3zxCY5q+WYTtwc5eBf6sU6+MrmmDCNtMZe7/0ZIuFrdbMOkC2mlksDWdC+1T606bqabldRA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kXr8Kq3g8jkVT/qPrMCiZIZHYEHINdkJ87DPyaoUNo4=; b=mhRdx9pk3LuT95qT5BGs+Th82DYqiXFJ1WjuquCxZvzzNeYhUj25irMiROyRoP6OFVExPxNjuO47Ir4v8mee1fn94NX5y4DNUxChiIoBriFYeb3kN5B0B2qDXI59XXjG1RHQTapd/noO7MEfpKabSz+wVKTzUNNt/PFOs92UlYE= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB1533.namprd11.prod.outlook.com (10.172.55.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.22; Wed, 6 Nov 2019 22:26:20 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2430.020; Wed, 6 Nov 2019 22:26:20 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Moving forward with Architecture work Thread-Index: AQHVlPE2T+0ud1jmNUmYUaZcS0SF1w== Date: Wed, 6 Nov 2019 22:26:20 +0000 Message-ID: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.f.191014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1005::385] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 75d589ee-ccc7-417e-dc4d-08d763085957 x-ms-traffictypediagnostic: MWHPR11MB1533: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6108; x-forefront-prvs: 02135EB356 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(366004)(396003)(376002)(346002)(39860400002)(189003)(199004)(7736002)(36756003)(478600001)(14454004)(99286004)(186003)(46003)(8936002)(25786009)(54896002)(6306002)(6116002)(6916009)(2906002)(316002)(256004)(4744005)(58126008)(71190400001)(81156014)(1730700003)(86362001)(6486002)(6506007)(64756008)(66446008)(66946007)(66556008)(76116006)(5660300002)(102836004)(91956017)(66476007)(2351001)(6512007)(5640700003)(2501003)(8676002)(486006)(71200400001)(2616005)(476003)(81166006)(33656002)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1533; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: BpDyDXcjRptvdvwHRz14RBLvTVmbU6iftTO4/Bf9qrBRZxBJVMwU9i1djt9duYi9W6IUsvL/zApb2pkeK1cKGpkfCBLJCWB8Xp9Upgu+uj8imgItdB7d/lBnEyvpcoztHvhb3ip/J9xWLeqRmhyKC9TtCIz4tpgqzLAdBWU8CC3UkWostdTGP1oE/JBB1BrVf8+P7lnbHkp0UuAE4Sh65kXun9WwNwHLe90uD7pUom90vEO4wsTVGaIl+PpLy8WC/NoJSlmgPydGpdtueZjCaQSj24rB0yF8vw4OatiaJBKB1WoF/dtoYpdYPiuXLaG00FX76zMg7m+aIO//jwFVFDS7SOjk9XlTjErNhdYqe0wwa7o5zC57u8HCIc86oL27PsTq1SA9yrbh9qcABwd5WJ4Mm7guv0c5lUIAggLB1qsVBdaiGLBfNKIV7W+VwvBG x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_8333BFA8C4574710A7A1EFF185D304F0ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 75d589ee-ccc7-417e-dc4d-08d763085957 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2019 22:26:20.4013 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: BLN5C/h+t1rJKLFQ7omf465cHKNuJQU67HO6/dEo2FFWVPFO32Jzv3E/qnevb6G5VKski4F1sMwhfF6rP9s1cw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1533 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.23, xch-aln-013.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: [Rats] Moving forward with Architecture work X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 22:26:28 -0000 --_000_8333BFA8C4574710A7A1EFF185D304F0ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UkFUUyBQYXJ0aWNpcGFudHMsDQpXZSBjb250aW51ZSB0byBoYXZlIGdvb2QgZGlzY3Vzc2lvbiBv biBhcmNoaXRlY3R1cmUgZHJhZnQgY29udGVudCBidXQgbm93IGhhdmUgdHdvIGRyYWZ0cyB0aGF0 IHdpbGwgYmUgaGFyZCB0byBnZXQgY29uc2Vuc3VzIG9uIGVpdGhlciBvbmUuICBXaXRoIGVhY2gg ZHJhZnQgcHJvdmlkaW5nIGdvb2QgYmVuZWZpdHMsIHdlIHByb3Bvc2UgdG8gY3JlYXRlIGEgbmV3 IGFyY2hpdGVjdHVyZSBlZGl0b3JpYWwgdGVhbSB0byBjb21lIHVwIHdpdGggYSBjb252ZXJnZWQg ZHJhZnQgdGhhdCBhZGRyZXNzZXMgdGhlIHJlYWRhYmlsaXR5IGNvbmNlcm5zLCB1c2UgY2FzZXMg YW5kIHRlcm1pbm9sb2d5IGRpc2N1c3NlZCB0aHVzIGZhci4gTWljaGFlbCBSaWNoYXJkc29uLCAg SGVuaywgRGF2ZSBUaGFsZXIgYW5kIE5lZCBoYXZlIGFncmVlZCB0byBiZSB0aGlzIHRlYW0gYW5k IHdpbGwgd29yayBvbiBwdXR0aW5nIG91dCBhIGNvbnZlcmdlZCBkcmFmdCBzb29uLg0KDQpEaXNj dXNzaW9ucyBhcmUgc3RpbGwgZW5jb3VyYWdlZCB0byBlbnN1cmUgYWxsIHVzZSBjYXNlIHNjZW5h cmlvcyBhbmQgd29ya2Zsb3dzIGFyZSBjb25zaWRlcmVkOyBidXQgd2FudGVkIHRvIGVuc3VyZSB3 ZSBoYWQgYSB0YXJnZXRlZCB0ZWFtIHRvIGNvbWUgdXAgd2l0aCBhIHNpbmdsZSBwcm9wb3NlZCBh cmNoaXRlY3R1cmUgZG9jdW1lbnQuDQoNCldhcm0gcmVnYXJkcywgIE5hbmN5IGFuZCBLYXRobGVl bg0KDQo= --_000_8333BFA8C4574710A7A1EFF185D304F0ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bh bi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVk LXNwYWNlO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9o ZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+UkFUUyBQYXJ0aWNpcGFudHMsPC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6Ymxh Y2siPldlIGNvbnRpbnVlIHRvIGhhdmUgZ29vZCBkaXNjdXNzaW9uIG9uJm5ic3A7YXJjaGl0ZWN0 dXJlIGRyYWZ0IGNvbnRlbnQgYnV0IG5vdyBoYXZlIHR3byBkcmFmdHMgdGhhdCB3aWxsIGJlIGhh cmQgdG8gZ2V0IGNvbnNlbnN1cyBvbiBlaXRoZXIgb25lLiZuYnNwOyBXaXRoIGVhY2ggZHJhZnQg cHJvdmlkaW5nIGdvb2QgYmVuZWZpdHMsIHdlIHByb3Bvc2UNCiB0byBjcmVhdGUgYSBuZXcmbmJz cDthcmNoaXRlY3R1cmUgZWRpdG9yaWFsIHRlYW0gdG8gY29tZSB1cCB3aXRoIGEgY29udmVyZ2Vk IGRyYWZ0IHRoYXQgYWRkcmVzc2VzIHRoZSByZWFkYWJpbGl0eSBjb25jZXJucywgdXNlIGNhc2Vz IGFuZCB0ZXJtaW5vbG9neSBkaXNjdXNzZWQgdGh1cyBmYXIuJm5ic3A7TWljaGFlbCBSaWNoYXJk c29uLCAmbmJzcDtIZW5rLCBEYXZlIFRoYWxlciBhbmQgTmVkIGhhdmUgYWdyZWVkIHRvIGJlIHRo aXMgdGVhbSBhbmQgd2lsbCB3b3JrIG9uDQogcHV0dGluZyBvdXQgYSBjb252ZXJnZWQgZHJhZnQg c29vbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RGlzY3Vzc2lvbnMgYXJlIHN0 aWxsIGVuY291cmFnZWQgdG8gZW5zdXJlIGFsbCB1c2UgY2FzZSBzY2VuYXJpb3MgYW5kIHdvcmtm bG93cyBhcmUgY29uc2lkZXJlZDsgYnV0IHdhbnRlZCB0byBlbnN1cmUgd2UgaGFkIGEgdGFyZ2V0 ZWQgdGVhbSB0byBjb21lIHVwIHdpdGggYSBzaW5nbGUgcHJvcG9zZWQgYXJjaGl0ZWN0dXJlIGRv Y3VtZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj4mbmJzcDs8L3NwYW4+PHNwYW4g c3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xvcjpibGFjayI+V2FybSBy ZWdhcmRzLCZuYnNwOyBOYW5jeSBhbmQmbmJzcDtLYXRobGVlbjwvc3Bhbj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_8333BFA8C4574710A7A1EFF185D304F0ciscocom_-- From nobody Wed Nov 6 14:44:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E767120147 for ; Wed, 6 Nov 2019 14:44:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com header.b=gQNN7fN8; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=qualcomm.onmicrosoft.com header.b=DhulPykB Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WxL_fJk_0Hhr for ; Wed, 6 Nov 2019 14:44:01 -0800 (PST) Received: from alexa-out-sd-02.qualcomm.com (alexa-out-sd-02.qualcomm.com [199.106.114.39]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA25912011F for ; Wed, 6 Nov 2019 14:44:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1573080241; x=1604616241; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=v+qGah+SYOG+iybXQGj0LyVu9FchXHuhwjVzVqXFF7U=; b=gQNN7fN8O+HeZtljwf8z2LHjV+xLR5BmxrC4Z/nKtoJdvizpHhUxP5Im TQ6OFqFCoyIRPMLbIARhDz2LReQhtzuXyE8H/QQRKNvGaGa9T9UskTKCX NfPyg1av42nmNHUWCn1MQ+A+m9xaSSpFmojfkG24McPQ6K8jYgP3HudoX Q=; Received: from unknown (HELO ironmsg02-sd.qualcomm.com) ([10.53.140.142]) by alexa-out-sd-02.qualcomm.com with ESMTP; 06 Nov 2019 14:44:01 -0800 IronPort-SDR: J0wpEduWlXE0uI4aBVJCocSa+37lag2lJmvt5RlppWSp/LNPqHcd09hJNDN6rl/415MqnUtuOG kOfOuN2rKGWLlRysvt2bJmefkG46UGBq54wsyyXdHTn+JmhEoobf+xOSlx9eNIKc5aC/kf1AD4 CFx0qHvCyDRaSx7KVf+EdSEIo81gw2fyflD5MPSqTXuhqcGh6RfClmVx34MHOD36Gv/hrBhcop exsXY0Y6B1U+PU/PlELCj/2tnN8fdcYQKjIxzNIY5sdcdEAIrgWXWLyPRraCAmFBYiCV0r+W9i bc5iQ7Z4HLx7TFLLtXJPNPxN Received: from nasanexm03f.na.qualcomm.com ([10.85.0.47]) by ironmsg02-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 06 Nov 2019 14:44:01 -0800 Received: from nasanexm03f.na.qualcomm.com (10.85.0.47) by nasanexm03f.na.qualcomm.com (10.85.0.47) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 6 Nov 2019 14:44:00 -0800 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (199.106.107.6) by nasanexm03f.na.qualcomm.com (10.85.0.47) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 6 Nov 2019 14:44:00 -0800 Received: from BN6PR02MB3153.namprd02.prod.outlook.com (10.161.154.144) by BN6PR02MB2596.namprd02.prod.outlook.com (10.173.142.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Wed, 6 Nov 2019 22:43:59 +0000 Received: from BN6PR02MB3153.namprd02.prod.outlook.com ([fe80::1d7e:e4eb:d413:7ad0]) by BN6PR02MB3153.namprd02.prod.outlook.com ([fe80::1d7e:e4eb:d413:7ad0%6]) with mapi id 15.20.2408.024; Wed, 6 Nov 2019 22:43:59 +0000 From: Giridhar Mandyam To: "rats@ietf.org" Thread-Topic: Moving forward with Architecture work Thread-Index: AQHVlPE2T+0ud1jmNUmYUaZcS0SF16d+vG0A Date: Wed, 6 Nov 2019 22:43:58 +0000 Message-ID: References: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> In-Reply-To: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mandyam@qti.qualcomm.com; x-originating-ip: [199.106.103.59] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1e5e9e53-da6b-48a4-1037-08d7630ad035 x-ms-traffictypediagnostic: BN6PR02MB2596: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 02135EB356 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(39860400002)(136003)(396003)(346002)(189003)(199004)(55016002)(236005)(81166006)(2501003)(52536014)(66066001)(7696005)(14454004)(966005)(26005)(606006)(2906002)(476003)(6916009)(14444005)(9686003)(478600001)(6246003)(316002)(256004)(74316002)(2351001)(76176011)(6506007)(5660300002)(7736002)(54896002)(86362001)(11346002)(186003)(446003)(81156014)(9326002)(53546011)(486006)(1730700003)(71190400001)(8936002)(66946007)(790700001)(5640700003)(3846002)(99286004)(66556008)(71200400001)(66446008)(76116006)(25786009)(66476007)(6116002)(64756008)(6436002)(6306002)(229853002)(33656002)(8676002)(102836004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN6PR02MB2596; H:BN6PR02MB3153.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: /SDwQYKV5Yxvs7vfbStR2n0/ocOTf+YakyD3dBVhJp86gyZuRFhSbRRVf1DO0uxzvt38W35Qv+V7ZSzB1y0UYCEiMVXLnR4hJCcBtVQLzrb1jeBTF/jxi1JGI7PAhzFTdIsGaHJcOgIZ4FNXElfHA7v4jTkvbjrTblJZ8vDs7R2z+bsoP7qANl5c8KlAoTJq+99mLKXRlLCgMUkmPqe4DJV6z4AcUgdF47dvd8icJB4Pc8zb3HNiXRt3pIBhDTTxSG9wb0FK2WhWVJv6MTUdVSX3EZ3wJsvHiQP80HcYm0iFjxvJwZlSNkb4NxWTDtjYDfb57kGzKT+hzii5nddnf73AtmK14n2c9bewrCc7bTqM5AdDyuRnC0qzitgzMJ9bSh6zuAPKpbNCqGqAF1LKioEFOGkJUgAyj9b5k3Oxkk19Q1zkAfVwGqFqZL1PAcad12OTU6PWCh39Jd7T0kisEBbE/SNg+am6Lpg0wrQIQg4= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LtBDY5U/6mKOED6+QmdD3rA7EirwCa48FkjkhORE6PafWVoOyzBT3s/H4G56uoi2atBdj0Zf0wjumJCCywlp/HV0yRhe0OOveUvlFfYjC54lWCLSSHW0VOzMfWGQL8msKGlRa1yQOVdeLOaV7AmkIOMVZ97FYJx00ySJsQnHbUed5Qad6PYXyjnD5ypAlrwTqDtmBndV0onBsE91RQrKSnUKttUBOYRZsjPvF0fpeV1fSymRNYSTlsi1RjDSa6PRZrFCI7Rzrmc7iaofbaRbvtv6HGcVCXU+HE+dtJZnyofG+IboxrqcSpFYZ0alWZljKAWtolhgzcwU8rmqMqX8kg== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W/6bh1RunEMIotTlNX6N3xwRlSEk3beKnZNwzqLr88o=; b=FccR9PxsjtrBY7SF4vV8jF2fuC5l47gS2rsEt4wC5PrdgIpIIJOYDWx3ymPspQWDZf9qYyKVSveVtnGsDDOcYQ4lkuqCRzTbb7M5XiVOA6cjuNRReTGPh7aH8uPxBf522936ZI/a3qxZCGtkrmGKnNjZrQZ+lx1NVIx+vhu+o2FRDkiORWFNm4Ss4+uPKBaSiXg9O6xCE2QoV5HCYOwjlGQQP3nQmSo2CCoIr9V9k/YYs6ti7pwjakUlcAFjGAaoVlhNbcR3vXtwqONoFTPNy9bIOU8NHpS9YLAaZ+ObGl1dknCb8DYMGL9o7uB+pe/+P+vBrj94BesaGNeOfhYfFA== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=qti.qualcomm.com; dmarc=pass action=none header.from=qti.qualcomm.com; dkim=pass header.d=qti.qualcomm.com; arc=none dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.onmicrosoft.com; s=selector1-qualcomm-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W/6bh1RunEMIotTlNX6N3xwRlSEk3beKnZNwzqLr88o=; b=DhulPykBNcxX0w8W0p3r85N4spQ0lQnBugnkvqgymv8hcysP9CNKFdPdtA0eTVkIDfeM7lnd/nALbC5Y+d6nUOd0cC52bVbiJJCdWFEeMV8pjCiU9JB5ln8S0MG7Ma/hV3ENboeoERbZBRNVido2W8eiAsPMe5LhayRM7CQ+ZXo= x-ms-exchange-crosstenant-network-message-id: 1e5e9e53-da6b-48a4-1037-08d7630ad035 x-ms-exchange-crosstenant-originalarrivaltime: 06 Nov 2019 22:43:58.8246 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 98e9ba89-e1a1-4e38-9007-8bdabc25de1d x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: BSHmH0oersGNZXBDnf+ofWGwa5dd9ILZss2YhH0ZUj4ktQBLu9qGUjl9hBCvWzkYyxGwK+JoHLAj9SC+/bmK4F8P0cII94vkgo2quNoaln8= x-ms-exchange-transport-crosstenantheadersstamped: BN6PR02MB2596 x-originatororg: qti.qualcomm.com Content-Type: multipart/alternative; boundary="_000_BN6PR02MB3153C2D372EBB09F05DE497581790BN6PR02MB3153namp_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Moving forward with Architecture work X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Nov 2019 22:44:04 -0000 --_000_BN6PR02MB3153C2D372EBB09F05DE497581790BN6PR02MB3153namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkkgdGhpbmsgdGhpcyBpcyBhIGdvb2Qgd2F5IGZvcndhcmQuDQoNClJlZ2FyZGluZyB0 ZXJtaW5vbG9neSDigJMgSSBiZWxpZXZlIHRoZSBhdHRlc3RhdGlvbiB0ZXJtaW5vbG9neSB0aGF0 IGlzIGV2ZW50dWFsbHkgc3BlY2lmaWVkIHNob3VsZCBiZSBwYXJ0IG9mIHRoZSBJRVRGIHNlY3Vy aXR5IGxleGljb24uICBDYW4gd2UgaGF2ZSBhIGdvYWwgb2YgZXZlbnR1YWxseSB1cGRhdGluZyBo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNDk0OT8NCg0KLUdpcmkgTWFuZHlhbQ0KDQpG cm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBOYW5jeSBDYW0t V2luZ2V0IChuY2Ftd2luZykNClNlbnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgNiwgMjAxOSAyOjI2 IFBNDQpUbzogcmF0c0BpZXRmLm9yZw0KU3ViamVjdDogW1JhdHNdIE1vdmluZyBmb3J3YXJkIHdp dGggQXJjaGl0ZWN0dXJlIHdvcmsNCg0KUkFUUyBQYXJ0aWNpcGFudHMsDQpXZSBjb250aW51ZSB0 byBoYXZlIGdvb2QgZGlzY3Vzc2lvbiBvbiBhcmNoaXRlY3R1cmUgZHJhZnQgY29udGVudCBidXQg bm93IGhhdmUgdHdvIGRyYWZ0cyB0aGF0IHdpbGwgYmUgaGFyZCB0byBnZXQgY29uc2Vuc3VzIG9u IGVpdGhlciBvbmUuICBXaXRoIGVhY2ggZHJhZnQgcHJvdmlkaW5nIGdvb2QgYmVuZWZpdHMsIHdl IHByb3Bvc2UgdG8gY3JlYXRlIGEgbmV3IGFyY2hpdGVjdHVyZSBlZGl0b3JpYWwgdGVhbSB0byBj b21lIHVwIHdpdGggYSBjb252ZXJnZWQgZHJhZnQgdGhhdCBhZGRyZXNzZXMgdGhlIHJlYWRhYmls aXR5IGNvbmNlcm5zLCB1c2UgY2FzZXMgYW5kIHRlcm1pbm9sb2d5IGRpc2N1c3NlZCB0aHVzIGZh ci4gTWljaGFlbCBSaWNoYXJkc29uLCAgSGVuaywgRGF2ZSBUaGFsZXIgYW5kIE5lZCBoYXZlIGFn cmVlZCB0byBiZSB0aGlzIHRlYW0gYW5kIHdpbGwgd29yayBvbiBwdXR0aW5nIG91dCBhIGNvbnZl cmdlZCBkcmFmdCBzb29uLg0KDQpEaXNjdXNzaW9ucyBhcmUgc3RpbGwgZW5jb3VyYWdlZCB0byBl bnN1cmUgYWxsIHVzZSBjYXNlIHNjZW5hcmlvcyBhbmQgd29ya2Zsb3dzIGFyZSBjb25zaWRlcmVk OyBidXQgd2FudGVkIHRvIGVuc3VyZSB3ZSBoYWQgYSB0YXJnZXRlZCB0ZWFtIHRvIGNvbWUgdXAg d2l0aCBhIHNpbmdsZSBwcm9wb3NlZCBhcmNoaXRlY3R1cmUgZG9jdW1lbnQuDQoNCldhcm0gcmVn YXJkcywgIE5hbmN5IGFuZCBLYXRobGVlbg0KDQo= --_000_BN6PR02MB3153C2D372EBB09F05DE497581790BN6PR02MB3153namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5t c29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJ bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJ e21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUy Mg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwv c3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJl ZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0i ZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwv aGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhpLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+SSB0aGluayB0aGlzIGlzIGEgZ29vZCB3YXkgZm9yd2FyZC48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlJlZ2FyZGluZyB0ZXJtaW5vbG9n eSDigJMgSSBiZWxpZXZlIHRoZSBhdHRlc3RhdGlvbiB0ZXJtaW5vbG9neSB0aGF0IGlzIGV2ZW50 dWFsbHkgc3BlY2lmaWVkIHNob3VsZCBiZSBwYXJ0IG9mIHRoZSBJRVRGIHNlY3VyaXR5IGxleGlj b24uJm5ic3A7IENhbiB3ZSBoYXZlIGEgZ29hbCBvZiBldmVudHVhbGx5IHVwZGF0aW5nDQo8L3Nw YW4+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzQ5NDkiPmh0dHBzOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM0OTQ5PC9hPj88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ LUdpcmkgTWFuZHlhbTxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PiBSQVRTICZsdDtyYXRzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7DQo8Yj5PbiBCZWhhbGYgT2YgPC9i Pk5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKTxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXks IE5vdmVtYmVyIDYsIDIwMTkgMjoyNiBQTTxicj4NCjxiPlRvOjwvYj4gcmF0c0BpZXRmLm9yZzxi cj4NCjxiPlN1YmplY3Q6PC9iPiBbUmF0c10gTW92aW5nIGZvcndhcmQgd2l0aCBBcmNoaXRlY3R1 cmUgd29yazxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj5SQVRTIFBhcnRpY2lwYW50 cyw8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtjb2xv cjpibGFjayI+V2UgY29udGludWUgdG8gaGF2ZSBnb29kIGRpc2N1c3Npb24gb24mbmJzcDthcmNo aXRlY3R1cmUgZHJhZnQgY29udGVudCBidXQgbm93IGhhdmUgdHdvIGRyYWZ0cyB0aGF0IHdpbGwg YmUgaGFyZCB0byBnZXQgY29uc2Vuc3VzIG9uIGVpdGhlciBvbmUuJm5ic3A7IFdpdGggZWFjaCBk cmFmdCBwcm92aWRpbmcgZ29vZCBiZW5lZml0cywgd2UgcHJvcG9zZQ0KIHRvIGNyZWF0ZSBhIG5l dyZuYnNwO2FyY2hpdGVjdHVyZSBlZGl0b3JpYWwgdGVhbSB0byBjb21lIHVwIHdpdGggYSBjb252 ZXJnZWQgZHJhZnQgdGhhdCBhZGRyZXNzZXMgdGhlIHJlYWRhYmlsaXR5IGNvbmNlcm5zLCB1c2Ug Y2FzZXMgYW5kIHRlcm1pbm9sb2d5IGRpc2N1c3NlZCB0aHVzIGZhci4mbmJzcDtNaWNoYWVsIFJp Y2hhcmRzb24sICZuYnNwO0hlbmssIERhdmUgVGhhbGVyIGFuZCBOZWQgaGF2ZSBhZ3JlZWQgdG8g YmUgdGhpcyB0ZWFtIGFuZCB3aWxsIHdvcmsgb24NCiBwdXR0aW5nIG91dCBhIGNvbnZlcmdlZCBk cmFmdCBzb29uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5EaXNjdXNzaW9ucyBh cmUgc3RpbGwgZW5jb3VyYWdlZCB0byBlbnN1cmUgYWxsIHVzZSBjYXNlIHNjZW5hcmlvcyBhbmQg d29ya2Zsb3dzIGFyZSBjb25zaWRlcmVkOyBidXQgd2FudGVkIHRvIGVuc3VyZSB3ZSBoYWQgYSB0 YXJnZXRlZCB0ZWFtIHRvIGNvbWUgdXAgd2l0aCBhIHNpbmdsZSBwcm9wb3NlZCBhcmNoaXRlY3R1 cmUgZG9jdW1lbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2NvbG9yOmJsYWNrIj5X YXJtIHJlZ2FyZHMsJm5ic3A7IE5hbmN5IGFuZCZuYnNwO0thdGhsZWVuPC9zcGFuPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BN6PR02MB3153C2D372EBB09F05DE497581790BN6PR02MB3153namp_-- From nobody Wed Nov 6 16:25:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7128E12008F for ; Wed, 6 Nov 2019 16:25:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O3ZQyWxhmAAb for ; Wed, 6 Nov 2019 16:25:52 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800127.outbound.protection.outlook.com [40.107.80.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 672D9120025 for ; Wed, 6 Nov 2019 16:25:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MKiRZGfvF5cc3Xd3tu+VT2AWJKzmK6Ii+NV7NmR1+A//L2YMTfdOSYK67wFGoiVqcTyrKv4phuNoibhBgXSy3dZKOG1PuexlBCH6DOzmc2MPw7NKshE59Vedi6A1q13k26e0gCbGqYJ68uLKL8DwwYnDmDGyToh1FWFSL8QfVpKM5ntgmapiJLFw5kMYe0lCKZO3kJmZoWqEF6eM16Kasih8ZYn8eKVIITLuMYE1Lv1f4B5oyvC3W1+j3ido/77HGZYyRRFD+BS1aEeSmtkQmdca7VL/2HqvK52DtBNB95s2niLG9FAx2cgfz/wr+yjbXlBCqkQYlUe0G3ODn+hEFA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=buXMP1x8J8nGWgsd+w0Llp1gncweTx7E0TyMSTy1+E4=; b=Lxh26v28RpdabBdFYcvkoZ1AqTY5KdofGMuvRTr/9Ep4oSpoXnXMpQe4w3tqWY295ITsd2pp3qi4pvDo4AA+t4GxmzQyT5/Nbuzjp8dqworW1oE83Klf5AudE1y5d5cLR+VMMp9MUMBtx5tIt6BQ5nizAxN0h27wg9GwOwA/KTLcu/dcz3GcEjgjtJQQntF3kf42OpyznKmkwCqQk+uuDqcIYW/cKL1Olh0ncTlgAJ0RQfTEmM07wGXnHdC+TTx+zROjyd383WleiQXwDn/evJeUKfnDqOeP/GdiSD3cJ3YSnMbkA4ryokd0QW51r52VVbNVUVVR+V/WOMSdQiqAqA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=buXMP1x8J8nGWgsd+w0Llp1gncweTx7E0TyMSTy1+E4=; b=Ebv/gyJOdp8C8HPzLkKs0zkcn+cCwwYgZbzMWr2gPHBc5nNoTmCaHT9qHuZERd4qj0lelroDHOjM1efzb9lYJLLAnxR2SPl6kc7djDY/fsTdLm3yeQbHS7lNoqtKbtkp8qmaq8GUW6vrX5ZzGS+wrgzFKw0pQqYv5WqUbDzcuJc= Received: from CY4PR21MB0773.namprd21.prod.outlook.com (10.173.192.19) by CY4PR21MB0693.namprd21.prod.outlook.com (10.175.121.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.12; Thu, 7 Nov 2019 00:25:50 +0000 Received: from CY4PR21MB0773.namprd21.prod.outlook.com ([fe80::cd2a:4051:840f:ecdd]) by CY4PR21MB0773.namprd21.prod.outlook.com ([fe80::cd2a:4051:840f:ecdd%9]) with mapi id 15.20.2451.013; Thu, 7 Nov 2019 00:25:50 +0000 From: Dave Thaler To: Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: Comments on draft-fedorkow-rats-network-device-attestation-00 Thread-Index: AdWVAeYZl01Kj/T7RhKuuFayaZmLkQ== Date: Thu, 7 Nov 2019 00:25:50 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:a:6664:be8c:aeec:e935] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 5c2aba36-c3ab-43fe-1f39-08d763190b17 x-ms-traffictypediagnostic: CY4PR21MB0693: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(396003)(376002)(346002)(39860400002)(366004)(40224003)(199004)(189003)(71200400001)(71190400001)(7736002)(8990500004)(478600001)(5024004)(46003)(14444005)(4326008)(256004)(55016002)(790700001)(186003)(33656002)(8676002)(966005)(102836004)(476003)(99286004)(6306002)(606006)(53546011)(7696005)(25786009)(6436002)(486006)(236005)(10290500003)(6116002)(10090500001)(54906003)(52536014)(74316002)(66946007)(6506007)(54896002)(14454004)(81166006)(2906002)(22452003)(81156014)(8936002)(66476007)(86362001)(5660300002)(64756008)(9686003)(316002)(66556008)(66446008)(76116006); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0693; H:CY4PR21MB0773.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 3HmznzBpUbCC5Dx8HhIRfi9Lcyh/w1x9KS5xbq6RwJROOSUQWjE0rs1cJKSWt7Ef+6VparFvs6UhylJhh4/lfBHnkx3yn7kpvFIEIqiOFa7P/p48s3jjKn8AfpeDYvkEdqbXKk35fLmlF4SxxW7VHFkN7VTPrZ4b3+LickvcI5a9RJy5HMuypePWcucZtTT5ulK59wrBbl/Hac5BbqVLm7/L+kwITPW4Pz0PJjBWiDONeB0nsE6tlVqC593XjOjZZraXBYF2mEaz7phxYmTCeZxeDVa4vtPq4C5oAFNQo9wHMf1yuXIY1cvLrhJIXktun4z/BnFSMaET8mN0RFdCr9mj0HpdMnt3OidV/kzIIUgp38rk8IePHkSJJlZ6504oFPSW2CS7NgLAzZ20acB6XXBGFte9EaTAW4kdndL7MuS87OtIzehsq19JkWlqcY0U x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0773C2CA01797EC8F01CB722A3780CY4PR21MB0773namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 5c2aba36-c3ab-43fe-1f39-08d763190b17 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 00:25:50.6641 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7sbOfW05Y9nkN8raPmDL0VNccgG3elXXhyx3c7sHuHYcSSqpH4Nt2VGVaxd4lGIXK767WGMYyMes2OFCeLpkzuxyezj/iyVr+c0I4ov4hk4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0693 Archived-At: Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 00:25:56 -0000 --_000_CY4PR21MB0773C2CA01797EC8F01CB722A3780CY4PR21MB0773namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable [updated subject line] Here's some comments on draft-fedorkow-rats-network-device-attestation-00, = in addition to the one in the thread copied at bottom... Section 1.2: =D8 o Platform Identity, the mechanism providing trusted identity, can =D8 reassure network managers that the specific devices they ordered =D8 from authorized manufacturers for attachment to their network are =D8 those that were installed, and that they continue to be present in =D8 their network. As part of the mechanism for Platform Identity, =D8 cryptographic proof of the identity of the manufacturer is also =D8 provided. Above is somewhat ambiguous. When it says "the specific devices", is it t= alking about device instances (in the exact serial number or key pair sense), or the same models? I.e.,= I ordered 3 widgets, and I got three widgets (and not three oranges or something else). Is this talking a= bout verifying that they're widgets, or that they're the precise 3 widgets you're expecting? I suspec= t you mean the latter but it's not clear. Assuming you do mean instances, then knowing that they're the spec= ific devices that were ordered presumes some mechanism for learning the public keys of the devices ordered= , prior to their arrival, and this should be called out. Section 2.1 discusses the model where the verifier communicates directly wi= th the attested device. However, it doesn't point out the problems with that model, which is that t= he attested device will see this as unsolicited inbound communication, and hence and sort of host firewall-l= ike behavior will prevent the interrogation from succeeding. Section 1.5 already constrains the scope = to a very narrow scenario, but it's not sufficient, it has to be constrained further to the scenario where= unsolicited inbound communication is permitted. Allowing unsolicited inbound communication opens up other p= otential security and privacy risks that should be discussed in sections 4 and 5. Given the narrowness of the applicability, and the security and privacy ris= ks inherent in the model where the verifier communicates directly with the attested device, it's not obvio= us why this is a good direction to pursue, especially if there might be alternatives that are both more bro= adly applicable, and more secure/private. I have no objection if there are good reasons, but the draft doesn't yet pr= ovide sufficient justification in my view. Thanks, Dave From: Guy Fedorkow Sent: Wednesday, November 6, 2019 12:57 PM To: Dave Thaler Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: RE: RIV and the RATS architecture Hi Dave, Ok, I suppose the model where the verifier communicates directly with the= attested device is a kind of sub-contracted full-service background check.= That's ok with me, as long as no one interprets the diagram as meaning th= at the relying party must somehow insert itself into the exchange between V= erifier and Attester. And I see what you mean about lining up the scope of RIV. The draft has = gone through a number of changes as we've tried to disentangle it from TCG = tribal knowledge. I think the scope is set by a couple factors. The doc as written is clearly limited to TPM-based systems. That's certa= inly not the only way to manage a root of trust, but it's the one that's av= ailable on a lot of gear already, and it's fairly stable and tightly spec'd= . From the TCG side, I'd expect there would be interest in extending the i= deas to other TCG roots of trust such as DICE, but it seems that should be = driven out of TCG. The limitation to Network Equipment is entirely a matter of expedience. = I think the approach would work easily in other embedded applications, alth= ough YANG is likely a fixation only relevant to networking guys. Other dom= ains would presumably need other domain-specific protocols. I'll connect with Jessica to see if we can figure out how to align the na= me and scope a bit better with the rest of the RATS world. Thanks /guy Juniper Business Use Only From: Dave Thaler > Sent: Monday, November 4, 2019 3:56 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS > On Behalf = Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools..ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_CY4PR21MB0773C2CA01797EC8F01CB722A3780CY4PR21MB0773namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

[updated subject line]

 

Here’s some comments on draft-fedorkow-rats-ne= twork-device-attestation-00, in addition to the one in the thread copied at= bottom…

 

Section 1.2:

=
=D8  o  Platform Identit=
y, the mechanism providing trusted identity, can

=D8  reassure network managers that the specific device= s they ordered

=D8  from authorized manufacturers for attachment to th= eir network are

=D8  those that were installed, and that they continue = to be present in

=D8  their network.  As part of the mechanism for = Platform Identity,

=D8  cryptographic proof of the identity of the manufac= turer is also

=D8  provided.

 

Above is somewhat ambiguous.   When it say= s “the specific devices”, is it talking about device instances<= o:p>

(in the exact serial number or key pair sense), or t= he same models?   I.e., I ordered 3 widgets, and I got=

three widgets (and not three oranges or something el= se).  Is this talking about verifying that they’re

widgets, or that they’re the precise 3 widgets= you’re expecting?   I suspect you mean the latter but it&#= 8217;s not

clear.   Assuming you do mean instances, t= hen knowing that they’re the specific devices that were ordered<= /o:p>

presumes some mechanism for learning the public keys= of the devices ordered, prior to their arrival, and

this should be called out.

 

Section 2.1 discusses the model where the verifier c= ommunicates directly with the attested device.

However, it doesn’t point out the problems wit= h that model, which is that the attested device will see this

as unsolicited inbound communication, and hence and = sort of host firewall-like behavior will prevent the

interrogation from succeeding.    Sec= tion 1.5 already constrains the scope to a very narrow scenario, but

it’s not sufficient, it has to be constrained = further to the scenario where unsolicited inbound communication<= /p>

is permitted.   Allowing unsolicited inbou= nd communication opens up other potential security and privacy

risks that should be discussed in sections 4 and 5.<= o:p>

 

Given the narrowness of the applicability, and the s= ecurity and privacy risks inherent in the model where

the verifier communicates directly with the attested= device, it’s not obvious why this is a good direction

to pursue, especially if there might be alternatives= that are both more broadly applicable, and more secure/private.=

 

I have no objection if there are good reasons, but t= he draft doesn’t yet provide sufficient justification

in my view.

 

Thanks,

Dave=

 

From: Guy Fedorkow <gfedorkow=3D40juniper.= net@dmarc.ietf.org>
Sent: Wednesday, November 6, 2019 12:57 PM
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Dave,

  Ok, I suppose the model where the verifier co= mmunicates directly with the attested device is a kind of sub-contracted fu= ll-service background check.  That’s ok with me, as long as no o= ne interprets the diagram as meaning that the relying party must somehow insert itself into the exchange between Verifier and At= tester.

 

  And I see what you mean about lining up the s= cope of RIV.  The draft has gone through a number of changes as weR= 17;ve tried to disentangle it from TCG tribal knowledge.

  I think the scope is set by a couple factors.=

  The doc as written is clearly limited to TPM-= based systems.  That’s certainly not the only way to manage a ro= ot of trust, but it’s the one that’s available on a lot of gear= already, and it’s fairly stable and tightly spec’d.  From= the TCG side, I’d expect there would be interest in extending the ideas = to other TCG roots of trust such as DICE, but it seems that should be drive= n out of TCG.

 

  The limitation to Network Equipment is entire= ly a matter of expedience.  I think the approach would work easily in = other embedded applications, although YANG is likely a fixation only releva= nt to networking guys.  Other domains would presumably need other domain-specific protocols.

 

  I’ll connect with Jessica to see if we = can figure out how to align the name and scope a bit better with the rest o= f the RATS world.

 

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.o= rg>
Sent: Monday, November 4, 2019 3:56 PM
To: Guy Fedorkow <gfedor= kow@juniper.net>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/html/draft-fedorkow-rats-network-= device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools= ..ietf.org/wg/nea/ has

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_CY4PR21MB0773C2CA01797EC8F01CB722A3780CY4PR21MB0773namp_-- From nobody Wed Nov 6 17:18:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BF4312008F for ; Wed, 6 Nov 2019 17:18:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uyg5fj3C90lK for ; Wed, 6 Nov 2019 17:18:24 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-eopbgr820137.outbound.protection.outlook.com [40.107.82.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 85BBF120045 for ; Wed, 6 Nov 2019 17:18:24 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=G9GtYsrgAnfDO6Fk5DUj9Fi+tSk0J6DqEWc0tAMgoWjA08ZohBW2Futb6z2sk8YHsNbOJ2H7JLEJ0wdfh1mOQI2eIHosWyg0qdw3xKebpku1dXLo3ilHHlNzWu8F9Wf5kxRgXcjuJqFwmDrC9w0YfTCrHvbBe5XHhWZFsPgIkVQwwF+5rvbGYIqmczgczFnEBxgwVRcILRMbvLMJc01Cys4L1cXK5PQTHGcQ7H6rz/ahCmzD9KcdXAlnKnOfGcCdQ8TguoxxzQ1D8ECOuaKyjlhSe+BkSxilE+q03GCgz+U5o6W82b+daauySgEX4IkOVKFhxerkAcC1R8IAxWsSvQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=glrhqxMl7JvFgrRa0Q/mo9sg984MohO7WhdrU+u1NW4=; b=T1fFCqj8XWZLEv9B9eNG+KHPD9bkQPrfbHKruQyzmafmEvyKQ+y/4BoC36ps8/1ZQ2S9ONixBLoTXc3cq2MapKlypxIgezJfd8DsDb5i1lZpfwaDHNm7ndFvBBSMZjJ06smoPw2356eOuJXxptHWF50T3rqnDwxFl8grPU8ZRsgA9nGeLZj5dL1ZujDv9WcayTi7G6eAqJFfpV4GK+h0u6wozZoDFWV1erTCfvlQPd/16NcEjJumLviUSwlTRniNuopkIiookHHr5n+QY1dto6QnKZCbihMxBejjy8FPIkN0FpyamUqZIAcyePTqx7tWNwnELpLLe0qka8K5sl2Tig== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=glrhqxMl7JvFgrRa0Q/mo9sg984MohO7WhdrU+u1NW4=; b=bmLmQtwr4No0uMNX06ZHFmU8Bm+P56HOwroZOsf48XkKRxhfDq9E/Jvx4eWHutdk86emqJnzcEcZYHWr1SFxfkv+Wy588C+QG4+EGB0QTfa3mtFzZsHTND4QECQtjmQQfx34LCm4yLY0nkkha8esNHdLlyy1CLjj7J5P7GPjgi0= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0511.namprd21.prod.outlook.com (10.172.95.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.7; Thu, 7 Nov 2019 01:18:22 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2430.023; Thu, 7 Nov 2019 01:18:22 +0000 From: Dave Thaler To: Guy Fedorkow CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: Comments on draft-fedorkow-rats-network-device-attestation-00 Thread-Index: AdWVAeYZl01Kj/T7RhKuuFayaZmLkQABRoFw Date: Thu, 7 Nov 2019 01:18:22 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:b:6663:be8c:aeec:e935] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6bc60fb3-cc8b-4ff6-d325-08d7632061e9 x-ms-traffictypediagnostic: MWHPR21MB0511: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(366004)(136003)(376002)(346002)(189003)(199004)(40224003)(7736002)(4326008)(74316002)(71200400001)(9686003)(71190400001)(54896002)(6306002)(476003)(6246003)(55016002)(46003)(236005)(446003)(6436002)(10090500001)(486006)(11346002)(14444005)(5024004)(256004)(229853002)(66476007)(76116006)(66946007)(66446008)(64756008)(66556008)(790700001)(6116002)(2906002)(8990500004)(606006)(316002)(14454004)(33656002)(54906003)(22452003)(86362001)(7696005)(76176011)(8676002)(53546011)(6506007)(10290500003)(5660300002)(30864003)(52536014)(99286004)(186003)(966005)(8936002)(81166006)(102836004)(478600001)(81156014)(25786009)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0511; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: A/U436JdJqoEx97SusmBtAMkFH3tmktT4dfQff+uTApJ97Pv4YdXTq2rdRqAPCWM7K4GMgfxlrkDpnd2LCfZiWmfaKgdErllo9xWhrfUqm+UmLUnW6pKPH74Z8QkByvLa7V+Lcm7w/Z1/rY5XM1qSQ8W3aJowqjZ5InmX4M6tOoT9az7G/h0rs0wz9MOyqqgQ/0XR8dvOSuRclgasNMitEFVgCf5rWCyN3+Edr3JaWSiMdoTkUynqLEHdaRkVL45PI9pzlpvn00YjjSZRhAFhb1mhmAKEVkuMYqM+pTxyDa7Kn0ztkzRzG8IwnfPb48IyU2z+7gsfNDYYuqzDIRue174pcpr9GXqRTH6gIxAaphEEu5S8ejxPz5uguk1HgJI/fI6F3mPvfSOrOe+/SIyUqUn+gZTyELZ3uizaA5WAOl5wDZtDxq3wD2yjY7a/ncP x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB07845CD7F255A251A403091DA3780MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6bc60fb3-cc8b-4ff6-d325-08d7632061e9 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 01:18:22.7782 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: rGfRP38m1oj71UZX2rm9mbbdpD0OZ7cg5TLm1xzZzKyvt2Uyg8l3t8L/TXqGv1Bii4K9f6p6Kw/Km86dZNlHSgj7lowiiTfLuLe9fMCSurU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0511 Archived-At: Subject: Re: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 01:18:28 -0000 --_000_MWHPR21MB07845CD7F255A251A403091DA3780MWHPR21MB0784namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable And a couple of additional comments on -01 (the subject had -00 in it and p= robably shouldn't have) =B7 Since section 1 scopes the definition of RIV to certain types of= network equipment, I find the term RIV to be overly broad, since it has a name that implies it is remote attestation for= all purposes, which it's apparently not. I would recommend that, like the title of the doc, the term RIV be narrowed= significantly by adding words to indicate its narrow scope. =B7 Section 4 says: In light of these requirements for protecting the privacy of users of the network, the Network Equipment must identify itself, and its boot configuration and measured device state (for example, PCR values), to the Equipment's Administrator, so there's no uncertainty as to what function each device and configuration is configured to carry out . RIV specifically addresses the collection information from enterprise network devices by an enterprise network. However, those two sentences appear to be contradictory. T= he first one talks about the "Equipment's Administrator" whereas the second one talks= about "an enterprise network". Unless you further narrow the scope in section 1.5 to only c= ases where those are the same, you should not assume that the "Equipment's Administrator" a= nd the "enterprise network" are the same organization. =B7 Another point on the same text in section 4 is that it talks abo= ut "boot" configuration and then says "there's no uncertainty as to what function each device and configuration i= s configured to carry out". In order to have "no uncertainty" you either have to remove the word "boot"= , so that it's not just "boot" configuration, but configuration in general, or else constrain your = definition of "embedded" to cases where all configuration and functionality is fixed at boot time. = That's common in embedded, but not universal, depending on your definition of embedded. Currently you= only define "embedded" as "where the device manufacturer ships the software image for the device" but that by itself doesn't mean all functionality is fixed at boot time. E= .g., the configuration might be separate from the software image, and might even be obtained after boot, un= less you scope down your definition of "embedded". =B7 Section 5 says "TPM practices require that these keys be different, as a way of ensuring that a general-purpose signing key cannot be used to spoof an attestation quote." and "To prevent spoofing, the quote generated inside the TPM must by signed by a key that's different from the DevID, called an Attestation Key (AK)." The claim that a split is necessary to prevent spoofing is non-obvious (I k= now I didn't follow it). I would recommend either a) Delete the text about spoofing and just say that's how TPM works, o= r b) Provide an explanation, or c) Reference a publically accessible document that has the explanation= . Dave From: RATS On Behalf Of Dave Thaler Sent: Wednesday, November 6, 2019 4:26 PM To: Guy Fedorkow Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-= 00 [updated subject line] Here's some comments on draft-fedorkow-rats-network-device-attestation-00, = in addition to the one in the thread copied at bottom... Section 1.2: =D8 o Platform Identity, the mechanism providing trusted identity, can =D8 reassure network managers that the specific devices they ordered =D8 from authorized manufacturers for attachment to their network are =D8 those that were installed, and that they continue to be present in =D8 their network. As part of the mechanism for Platform Identity, =D8 cryptographic proof of the identity of the manufacturer is also =D8 provided. Above is somewhat ambiguous. When it says "the specific devices", is it t= alking about device instances (in the exact serial number or key pair sense), or the same models? I.e.,= I ordered 3 widgets, and I got three widgets (and not three oranges or something else). Is this talking a= bout verifying that they're widgets, or that they're the precise 3 widgets you're expecting? I suspec= t you mean the latter but it's not clear. Assuming you do mean instances, then knowing that they're the spec= ific devices that were ordered presumes some mechanism for learning the public keys of the devices ordered= , prior to their arrival, and this should be called out. Section 2.1 discusses the model where the verifier communicates directly wi= th the attested device. However, it doesn't point out the problems with that model, which is that t= he attested device will see this as unsolicited inbound communication, and hence and sort of host firewall-l= ike behavior will prevent the interrogation from succeeding. Section 1.5 already constrains the scope = to a very narrow scenario, but it's not sufficient, it has to be constrained further to the scenario where= unsolicited inbound communication is permitted. Allowing unsolicited inbound communication opens up other p= otential security and privacy risks that should be discussed in sections 4 and 5. Given the narrowness of the applicability, and the security and privacy ris= ks inherent in the model where the verifier communicates directly with the attested device, it's not obvio= us why this is a good direction to pursue, especially if there might be alternatives that are both more bro= adly applicable, and more secure/private. I have no objection if there are good reasons, but the draft doesn't yet pr= ovide sufficient justification in my view. Thanks, Dave From: Guy Fedorkow > Sent: Wednesday, November 6, 2019 12:57 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Dave, Ok, I suppose the model where the verifier communicates directly with the= attested device is a kind of sub-contracted full-service background check.= That's ok with me, as long as no one interprets the diagram as meaning th= at the relying party must somehow insert itself into the exchange between V= erifier and Attester. And I see what you mean about lining up the scope of RIV. The draft has = gone through a number of changes as we've tried to disentangle it from TCG = tribal knowledge. I think the scope is set by a couple factors. The doc as written is clearly limited to TPM-based systems. That's certa= inly not the only way to manage a root of trust, but it's the one that's av= ailable on a lot of gear already, and it's fairly stable and tightly spec'd= . From the TCG side, I'd expect there would be interest in extending the i= deas to other TCG roots of trust such as DICE, but it seems that should be = driven out of TCG. The limitation to Network Equipment is entirely a matter of expedience. = I think the approach would work easily in other embedded applications, alth= ough YANG is likely a fixation only relevant to networking guys. Other dom= ains would presumably need other domain-specific protocols. I'll connect with Jessica to see if we can figure out how to align the na= me and scope a bit better with the rest of the RATS world. Thanks /guy Juniper Business Use Only From: Dave Thaler > Sent: Monday, November 4, 2019 3:56 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS > On Behalf = Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools...ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_MWHPR21MB07845CD7F255A251A403091DA3780MWHPR21MB0784namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

And a couple of additional comments on -01 (the subj= ect had -00 in it and probably shouldn’t have)

 

=B7        Since section 1 scopes the definition of RIV= to certain types of network equipment, I find the term RIV to be

overly broad, since it has a name that implie= s it is remote attestation for all purposes, which it’s apparently no= t.

I would recommend that, like the title of the= doc, the term RIV be narrowed significantly by adding words

to indicate its narrow scope.

 

=B7        Section 4 says:

In light of these
   requirements for protecting the privacy of users of the networ= k, the
   Network Equipment must identify itself, and its boot configura= tion
   and measured device state (for example, PCR values), to the    Equipment's Administrator, so there's no uncertainty as to wha= t
   function each device and configuration is configured to carry = out .

 

RIV specifically addresses = the collection information from enterprise
   network devices by an enterprise network. 

 

        &nbs= p;      However, those two sentences appear to be = contradictory.   The first one talks about
            &nb= sp;  the “Equipment’s Administrator” whereas the sec= ond one talks about “an enterprise network”.

        &nbs= p;      Unless you further narrow the scope in sec= tion 1.5 to only cases where those are the same,

        &nbs= p;      you should not assume that the “Equi= pment’s Administrator” and the “enterprise network”=

        &nbs= p;      are the same organization.

 

=B7        Another point on the same text in section 4 = is that it talks about “boot” configuration and then says
“there’s no uncertainty as to what function each device and con= figuration is configured to carry out”.

In order to have “no uncertainty”= you either have to remove the word “boot”, so that it’s = not just

“boot” configuration, but configu= ration in general, or else constrain your definition of “embeddedR= 21;

to cases where all configuration and function= ality is fixed at boot time.  That’s common in embedded,

but not universal, depending on your definiti= on of embedded.  Currently you only define “embedded”=

as “where the device manufacturer ships the soft= ware image for the device”

but that by itself doesn’t mean all fun= ctionality is fixed at boot time.  E.g., the configuration might be

separate from the software image, and might e= ven be obtained after boot, unless you scope down your

definition of “embedded”.

 

=B7&nbs= p;       Section 5 says

“TPM practices require that these keys = be different, as a way of
   ensuring that a general-purpose signing key cannot be used to = spoof
   an attestation quote.”

and

“To prevent spoofing, the quote generated inside= the TPM must by
   signed by a key that's different from the DevID, called an
   Attestation Key (AK).”

 

The claim that a spl= it is necessary to prevent spoofing is non-obvious (I know I didn’t f= ollow it).  I would recommend either

a)      Delete the text about spoofing and just say that= 217;s how TPM works, or

b)      Provide an explanation, or

c)      Reference a publically accessible document that has= the explanation.

Dave

 

From: RATS <rats-bounces@ietf.org> O= n Behalf Of Dave Thaler
Sent: Wednesday, November 6, 2019 4:26 PM
To: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.org> Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attes= tation-00

 

[updated subject line]

 

Here’s some comments on draft-fedorkow-rats-ne= twork-device-attestation-00, in addition to the one in the thread copied at= bottom…

 

Section 1.2:

=
=D8  o  Platform Identit=
y, the mechanism providing trusted identity, can

=D8  reassure network managers that the specific device= s they ordered

=D8  from authorized manufacturers for attachment to th= eir network are

=D8  those that were installed, and that they continue = to be present in

=D8  their network.  As part of the mechanism for = Platform Identity,

=D8  cryptographic proof of the identity of the manufac= turer is also

=D8  provided.

 

Above is somewhat ambiguous.   When it say= s “the specific devices”, is it talking about device instances<= o:p>

(in the exact serial number or key pair sense), or t= he same models?   I.e., I ordered 3 widgets, and I got=

three widgets (and not three oranges or something el= se).  Is this talking about verifying that they’re

widgets, or that they’re the precise 3 widgets= you’re expecting?   I suspect you mean the latter but it&#= 8217;s not

clear.   Assuming you do mean instances, t= hen knowing that they’re the specific devices that were ordered<= /o:p>

presumes some mechanism for learning the public keys= of the devices ordered, prior to their arrival, and

this should be called out.

 

Section 2.1 discusses the model where the verifier c= ommunicates directly with the attested device.

However, it doesn’t point out the problems wit= h that model, which is that the attested device will see this

as unsolicited inbound communication, and hence and = sort of host firewall-like behavior will prevent the

interrogation from succeeding.    Sec= tion 1.5 already constrains the scope to a very narrow scenario, but

it’s not sufficient, it has to be constrained = further to the scenario where unsolicited inbound communication<= /p>

is permitted.   Allowing unsolicited inbou= nd communication opens up other potential security and privacy

risks that should be discussed in sections 4 and 5.<= o:p>

 

Given the narrowness of the applicability, and the s= ecurity and privacy risks inherent in the model where

the verifier communicates directly with the attested= device, it’s not obvious why this is a good direction

to pursue, especially if there might be alternatives= that are both more broadly applicable, and more secure/private.=

 

I have no objection if there are good reasons, but t= he draft doesn’t yet provide sufficient justification

in my view.

 

Thanks,

Dave=

 

From: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.= org>
Sent: Wednesday, November 6, 2019 12:57 PM
To: Dave Thaler <dthaler= @microsoft.com>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Dave,

  Ok, I suppose the model where the verifier co= mmunicates directly with the attested device is a kind of sub-contracted fu= ll-service background check.  That’s ok with me, as long as no o= ne interprets the diagram as meaning that the relying party must somehow insert itself into the exchange between Verifier and At= tester.

 

  And I see what you mean about lining up the s= cope of RIV.  The draft has gone through a number of changes as weR= 17;ve tried to disentangle it from TCG tribal knowledge.

  I think the scope is set by a couple factors.=

  The doc as written is clearly limited to TPM-= based systems.  That’s certainly not the only way to manage a ro= ot of trust, but it’s the one that’s available on a lot of gear= already, and it’s fairly stable and tightly spec’d.  From= the TCG side, I’d expect there would be interest in extending the ideas = to other TCG roots of trust such as DICE, but it seems that should be drive= n out of TCG.

 

  The limitation to Network Equipment is entire= ly a matter of expedience.  I think the approach would work easily in = other embedded applications, although YANG is likely a fixation only releva= nt to networking guys.  Other domains would presumably need other domain-specific protocols.

 

  I’ll connect with Jessica to see if we = can figure out how to align the name and scope a bit better with the rest o= f the RATS world.

 

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.o= rg>
Sent: Monday, November 4, 2019 3:56 PM
To: Guy Fedorkow <gfedor= kow@juniper.net>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/html/draft-fedorkow-rats-network-= device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools..= .ietf.org/wg/nea/ has

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_MWHPR21MB07845CD7F255A251A403091DA3780MWHPR21MB0784namp_-- From nobody Thu Nov 7 07:26:54 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 417BC120912 for ; Thu, 7 Nov 2019 07:26:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=OiRO7dMk; dkim=pass (1024-bit key) header.d=juniper.net header.b=OGCWylPF Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f9lrPWmbtoOL for ; Thu, 7 Nov 2019 07:26:50 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10543120919 for ; Thu, 7 Nov 2019 07:26:47 -0800 (PST) Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA7FCQVo006052; Thu, 7 Nov 2019 07:26:43 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=2hRluK+lpw+JqyoehkR/yFnlQJ//0Jf7QG87hsSRUWQ=; b=OiRO7dMkVBR9vkplay8KmxmmG0+pFw5nFklIjbrceG94/s7fQVnItAH5qNnw9WSmkoiM XbgJx8MynkAcrnRnkBlWf9PVSWJk/quJgBThxyJvdx6zDCT/W4tI2pX822BajrOGobqe cMh0XATvdxZ42/dyHbMNiIxBIOmjHlkwSCVjv3wwtx0JMGylgPBX4dU2oQ9bZfSPT1kJ ZFrkQ1NHGeR5vU0rhIdbUNHHmh+lDZaBGLEvrShkLP4r92TMReo/tYSPkp6hvhHU3ym+ 00Xv3v+fbAnn3wp4MKvcBxlxxpFzTBKjVYA5UAhX/CHFi96l6TedK23JKKQxFfw5mNlJ tQ== Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp2052.outbound.protection.outlook.com [104.47.49.52]) by mx0b-00273201.pphosted.com with ESMTP id 2w41vm21hv-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 07 Nov 2019 07:26:43 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hie+h7WoIkVzaSPjadplqOlAaOge3Kqur+utt5adOR7oeL4ru7n/wPNr+nh/8CS/CIKz+PFOxGd1WszlDmSSroLuZDoHVXWKZHI90tQU4icKZK7HS0fXkH2ZOPiOagieO55/6t/LSM2wRDFB/+3cZmJ5MdgnhxeBOuZqxoqZLKYIgoRdDu9wy1oXnzftBvhPxwz7daziGSyODaZhs3aW7gFq9o5TrEuaVOGImWZgqFP7myTjTpqce+56e+cwpSNTnth4bOF/l6Ad8rkgVJnQmsNuxf1aUurgsB04dKrxIhlJK0FqcJM7pxK+pCecvxb9w1OPb5mcypecY3K+r7tbmQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2hRluK+lpw+JqyoehkR/yFnlQJ//0Jf7QG87hsSRUWQ=; b=fAIiEbAxheQHbME/MrhGraCnCi8vB0maJ/bFpYOr3hj5UOvnvE96TaUTfXRon0epRNnjrKZxYE46f8traTY3d2KUNPeguAkMmblnoyDICm59eaGfRrddQiXu8z+lYx52b6T/AGZdKDYGKHE04EE9lFGrsFfRAIKyDLSM3VRBliEirIdD7Zr++dImvVsWgq30WdT1rGRImD+jksKhOM7SE4TLgCmK5fzFmi15koqSoQaCn6YjVMuIFIHZnb/oQNNBCMF3MpkF5jBZsXQsFk+flAoWv+ub/yPhYuk1du01cOCoNZt61TCTtAjYJF/gziU3ReJZBE3Ym0Rz6CKnWmZ0dw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2hRluK+lpw+JqyoehkR/yFnlQJ//0Jf7QG87hsSRUWQ=; b=OGCWylPFiqDOU2W/NAEPD+EIJL1kWr4J2jz9piXtyqEVkz7W9kogewaK5UcMrN7trD+rD9lg6+VxrUG3FlAFzMZaZfFxExmXta6OKT2qLT/lsDgtEeviTThQvYj/kTkSQgczupYJuYpAaUXJ96C6orXjIOxVDq/kcEd6A9tmSWI= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB6599.namprd05.prod.outlook.com (20.178.232.220) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.16; Thu, 7 Nov 2019 15:26:41 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 15:26:41 +0000 From: Guy Fedorkow To: "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" Thread-Topic: Moving forward with Architecture work Thread-Index: AQHVlPE2T+0ud1jmNUmYUaZcS0SF16d/1WRg Content-Class: Date: Thu, 7 Nov 2019 15:26:41 +0000 Message-ID: References: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> In-Reply-To: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-07T15:26:38.2153242Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=5ede1978-03e5-4de3-b85f-9016ecedd571; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4fa7b0a8-8687-4b96-01ad-08d76396e3f3 x-ms-traffictypediagnostic: BYAPR05MB6599: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(376002)(366004)(39860400002)(346002)(396003)(199004)(189003)(51444003)(66946007)(476003)(316002)(5660300002)(76176011)(66476007)(81166006)(33656002)(4326008)(6116002)(790700001)(6916009)(486006)(6506007)(52536014)(478600001)(3846002)(7736002)(74316002)(2906002)(14454004)(186003)(6246003)(446003)(71190400001)(8676002)(86362001)(71200400001)(81156014)(99286004)(26005)(66446008)(66066001)(64756008)(229853002)(11346002)(256004)(102836004)(76116006)(66556008)(25786009)(8936002)(6306002)(6436002)(53546011)(7696005)(9686003)(54896002)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB6599; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Gxz1dq7IjS+8AQ8WUOuA3RfOYqYjKeKnLkj7/BqoBrlwwNDuyhKEfUW2Dxf0LNu2wdctA8OjURFFDIqPpmRhhJ3nnTchxhO8l2XXw67s0w4viz1MQEfGfUz8lGBYxa6YaS1Q93uZzM1LpsIRR3vckDIXklO/Nl7TiK+OuTabVQ2Ccb5zNW47FsYbmw+XWDMGCzz3BH6VZGSxvbwvEMiDxHMqDPWJFjKRz/fYoWNqjcNoSsi50G2Zm0zGUYBGiaTNnrWk4pBzhuJ9/sqQCf4Ya8+uAKkozKLJimYvw9+mjBFkuNASnT26NmqSD14P7v2jj7t7oSAIxhWAF2aLbgwpvU58GCGLsCk/s8D2BhKNiADyVDv4jxAP2hq9EU+GE/Omuit9+uUeP3+pwACud/uAzpuMIElDlEO1khZwWZvabfXm3Wp1o97VZRT0C7qg9HqP x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB4248B4A1DDB3BF856EB8B2A7BA780BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 4fa7b0a8-8687-4b96-01ad-08d76396e3f3 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 15:26:41.5473 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +PaBNZ406sTaZELYn4ByE+pZc4ku6vc3LNjRWIvZaymWwpHXZmbxjcW2xJiTrqYFrfRXU0ntHOuL98zOPHqB+w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB6599 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-07_05:2019-11-07,2019-11-07 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxlogscore=999 suspectscore=0 clxscore=1015 phishscore=0 spamscore=0 mlxscore=0 lowpriorityscore=0 bulkscore=0 priorityscore=1501 impostorscore=0 adultscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911070146 Archived-At: Subject: Re: [Rats] Moving forward with Architecture work X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 15:26:52 -0000 --_000_BYAPR05MB4248B4A1DDB3BF856EB8B2A7BA780BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Nancy, I think that's a great way to move forward on this Thanks /guy Juniper Business Use Only From: RATS On Behalf Of Nancy Cam-Winget (ncamwing) Sent: Wednesday, November 6, 2019 5:26 PM To: rats@ietf.org Subject: [Rats] Moving forward with Architecture work RATS Participants, We continue to have good discussion on architecture draft content but now h= ave two drafts that will be hard to get consensus on either one. With each= draft providing good benefits, we propose to create a new architecture edi= torial team to come up with a converged draft that addresses the readabilit= y concerns, use cases and terminology discussed thus far. Michael Richardso= n, Henk, Dave Thaler and Ned have agreed to be this team and will work on = putting out a converged draft soon. Discussions are still encouraged to ensure all use case scenarios and workf= lows are considered; but wanted to ensure we had a targeted team to come up= with a single proposed architecture document. Warm regards, Nancy and Kathleen --_000_BYAPR05MB4248B4A1DDB3BF856EB8B2A7BA780BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Nancy,

  I think that= ’s a great way to move forward on this

  Thanks<= /o:p>

/guy

 

 

 

Juniper Business Use Only

From:= RATS <rats-bounces@ietf.org> On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Wednesday, November 6, 2019 5:26 PM
To: rats@ietf.org
Subject: [Rats] Moving forward with Architecture work

 

RATS Pa= rticipants,

We cont= inue to have good discussion on architecture draft content but now hav= e two drafts that will be hard to get consensus on either one.  With e= ach draft providing good benefits, we propose to create a new architecture editorial team to come up with a converg= ed draft that addresses the readability concerns, use cases and terminology= discussed thus far. Michael Richardson,  Henk, Dave Thaler and N= ed have agreed to be this team and will work on putting out a converged draft soon.

 =

Discussions are still en= couraged to ensure all use case scenarios and workflows are considered; but= wanted to ensure we had a targeted team to come up with a single proposed = architecture document.

 <= /span>

Warm re= gards,  Nancy and Kathleen

 

--_000_BYAPR05MB4248B4A1DDB3BF856EB8B2A7BA780BYAPR05MB4248namp_-- From nobody Thu Nov 7 09:42:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D25161208C3 for ; Thu, 7 Nov 2019 09:42:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PzmQrn0ndSLQ for ; Thu, 7 Nov 2019 09:42:27 -0800 (PST) Received: from p3plsmtpa06-03.prod.phx3.secureserver.net (p3plsmtpa06-03.prod.phx3.secureserver.net [173.201.192.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34697120089 for ; Thu, 7 Nov 2019 09:42:27 -0800 (PST) Received: from [10.122.0.82] ([45.56.150.85]) by :SMTPAUTH: with ESMTPA id SlndigURnsYZfSlndiRxn8; Thu, 07 Nov 2019 10:42:25 -0700 From: Laurence Lundblade Message-Id: <3C6FCA46-F734-463C-9EB0-D3C86EAA86A2@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_64B8D1EF-7F46-4351-8559-68F106270A0A" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 7 Nov 2019 09:42:25 -0800 In-Reply-To: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> Cc: "rats@ietf.org" To: "Nancy Cam-Winget (ncamwing)" References: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfPLwQBgxDtjaii3VmjWOXH5ME++4WZJMpjG7N6A1yk3ATQPZNxUBmf/RoT1u/1K+TUT1svvL/ZL9WU0y9vw7h1d7+UmZmFKrXZZwSJJXa3X38JOE7NYQ 4p1dOnBr30dbBvpoUTXTRVrK4lZIkSs7dEWLJM1aR35fnAzJ+epOf4AFGZpFfbcdrNZQcMNDi4jcKw== Archived-At: Subject: Re: [Rats] Moving forward with Architecture work X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 17:42:29 -0000 --Apple-Mail=_64B8D1EF-7F46-4351-8559-68F106270A0A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Sounds great! LL > On Nov 6, 2019, at 2:26 PM, Nancy Cam-Winget (ncamwing) = wrote: >=20 > RATS Participants, > We continue to have good discussion on architecture draft content but = now have two drafts that will be hard to get consensus on either one. = With each draft providing good benefits, we propose to create a new = architecture editorial team to come up with a converged draft that = addresses the readability concerns, use cases and terminology discussed = thus far. Michael Richardson, Henk, Dave Thaler and Ned have agreed to = be this team and will work on putting out a converged draft soon. > =20 > Discussions are still encouraged to ensure all use case scenarios and = workflows are considered; but wanted to ensure we had a targeted team to = come up with a single proposed architecture document. > =20 > Warm regards, Nancy and Kathleen > =20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_64B8D1EF-7F46-4351-8559-68F106270A0A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Sounds great!

LL

On Nov 6, 2019, at 2:26 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> wrote:

RATS Participants,
We continue to have good discussion on architecture = draft content but now have two drafts that will be hard to get consensus = on either one.  With each draft providing good benefits, we propose = to create a new architecture editorial team to come up with a = converged draft that addresses the readability concerns, use cases and = terminology discussed thus far. Michael Richardson,  Henk, = Dave Thaler and Ned have agreed to be this team and will work on putting = out a converged draft soon.
 
Discussions are still encouraged = to ensure all use case scenarios and workflows are considered; but = wanted to ensure we had a targeted team to come up with a single = proposed architecture document.
 
Warm regards,  Nancy = and Kathleen
 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_64B8D1EF-7F46-4351-8559-68F106270A0A-- From nobody Thu Nov 7 12:56:14 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E72F120980 for ; Thu, 7 Nov 2019 12:56:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEgYhXVaBTXX for ; Thu, 7 Nov 2019 12:56:11 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFD061209A6 for ; Thu, 7 Nov 2019 12:55:51 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id E026B3897B; Thu, 7 Nov 2019 15:52:52 -0500 (EST) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 0DBAF913; Thu, 7 Nov 2019 15:55:50 -0500 (EST) From: Michael Richardson To: "rats\@ietf.org" , =?us-ascii?Q?=3D=3Fiso-8859-1=3FQ=3F?= =?us-ascii?Q?Sch=3DF6nw=3DE4lder=3D2C=5FJ=3DFCrgen=3F=3D?= In-Reply-To: <20191104062654.e2q7cgz43auzozok@anna.jacobs.jacobs-university.de> References: <20191009145006.r2pjsoo6jxirah64@anna.jacobs.jacobs-university.de> <9379d880-2b7e-6657-c547-b37bb7a9e466@sit.fraunhofer.de> <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> <20191104062654.e2q7cgz43auzozok@anna.jacobs.jacobs-university.de> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Use case -> architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 20:56:13 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: > I prefer having all relevant interaction models in the architecture. Do you want exhaustive details, or just enough to say how things differ and then reference another document? > Looking at your architecture draft and "attestation characteristics" > (aka attestation principles), then I am not sure I do understand all > definitions. For me, 'relevance' seems somewhat unclear. Should such > terms be defined in an architecture doccument? Probably yes if they > are fundamental for understanding the technology and not covered by > generally known security terminology. I agree: the major contribution of an architecture document is a set of common terms ... for the components of the architecture. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl3EhNUACgkQgItw+93Q 3WUMrQgAr1TvHhV9rCIKwGvpeRkbou1Cyo05koNkD+n1/addS5sPw833mlHqZrCW IcK+SdzG9Mvn7Ee7EolUUlu/b3Jrg4DP+rPxEojHaCRQKWnRz2JXyHV0s9BrNGgF iv9nAQLKGgpYd81Pwr+jxd7w/8Iha8CKj+eGObZXy1OWfxfFONCIlmcGtgvaEcMB P88pTVV2XU+RNKuos3D6Fo3/qt3srTpv1VAxjo4Ie5s1OhSt3XHaLwX8AKPfzVZV mmg+Cg3YJoVhZdv8v/QlNO65E56MM/4jy92UDuH/UtgnlgKh7rOsFu8RY1vWWX4b lX1iyzieoors+0zEH2yMVrzC0LtO9w== =zC2H -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 7 13:02:04 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 945E41209AD for ; Thu, 7 Nov 2019 13:02:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wu8OK2OgiXvE for ; Thu, 7 Nov 2019 13:01:59 -0800 (PST) Received: from NAM04-BN3-obe.outbound.protection.outlook.com (mail-eopbgr680090.outbound.protection.outlook.com [40.107.68.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B79312096F for ; Thu, 7 Nov 2019 13:01:59 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PSCKOTPus4zsHGZEc7hp/bvyGyuG+vKYbPpGTRQzYSe7cMO+byZLqCUDVe9Qn7pOIYUNFRv1jXDMece/RI4HMBV91vwOQDA+GigZwIbrcCmG3oLd1OZqUuhqvpWMzgH5GfZZLcjRZ7ZSpzQiWqn0hItBBZJlj3st/MbI+co17wKfNiSe914M+PLAzhxUtNMgPe3eZBU3tuGqeaicY5GP//Wfb0fp3qzRx3AGeotXLzJ3fOyGpfeez6vxFvPUi7H7yo0LYf2VMpORz6giELGgs+DdVJdjlpEfL0GoSnx5ie1BMftz5E1evI8xSPGhk4Tv2YMdDUs1ROOkrcFkTR1t2g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0LFxQfhEgGLgpl3Hwin3RKXuliKpnCIJoF++tMd55+4=; b=lCT2FCx0oSXRTQd9hhhBRpdeVIp2pPosDr0CwSt5nGoTojg2O6eXOCsv4P3SUsX5u8p9TK3ybf/W3a4wq4XtmAEMGc2WOuz/2+eYWL7+k3o74UgWAe+Y9809vqRdNuMMy5ZPhW+O8l7bKu3Dchg1//D6NA0r+JmAvEZglXE16ptuTlfgSNcneHuDzbB51AESXE9g7ZCIgdhraJO4NVRtbGfgY5QA1ziCP5Fc5DEZINcd5nEb2/AknBXEHGZANPXqO3ify6a2n592zL1jWE48zXWYyrDhRHxy1KC1h88l3lrTeaYBdHl4yAUcmMiNlSvOEXFZ1SNq/V98qyd9PRfIpg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0LFxQfhEgGLgpl3Hwin3RKXuliKpnCIJoF++tMd55+4=; b=JSfNvhbsCxsDuiOZo1kLF4nczydc8uY9qkBjLDjFCDVKpz/BxCQPA5nNn8grc3zX+ALLvifu4ASjFePzNlIrOO3v45VgZChfWhZv6vY1amIYLqBowtUPc4lv5A4qh2g8OrWpxqHZlZhjRkCI6zYmMIIS5V+UbWoR+hXpL9q7Epc= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0175.namprd21.prod.outlook.com (10.173.52.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.15; Thu, 7 Nov 2019 21:01:54 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%11]) with mapi id 15.20.2451.013; Thu, 7 Nov 2019 21:01:54 +0000 From: Dave Thaler To: Michael Richardson , "rats@ietf.org" , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Thread-Topic: [Rats] Use case -> architecture document Thread-Index: AQHVfpUq2vNYZxzKzkGPZFkm3ao0cadSM9uAgAAwqYCAABSIAIAACXkAgAAPgoCACDU2sIABGpuAgB4MXQCAAMZVgIAFqcQAgAABQjA= Date: Thu, 7 Nov 2019 21:01:54 +0000 Message-ID: References: <20191009145006.r2pjsoo6jxirah64@anna.jacobs.jacobs-university.de> <9379d880-2b7e-6657-c547-b37bb7a9e466@sit.fraunhofer.de> <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> <20191104062654.e2q7cgz43auzozok@anna.jacobs.jacobs-university.de> <20422.1573160150@localhost> In-Reply-To: <20422.1573160150@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-07T21:01:53.3906946Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=2d865ab5-ea98-42ae-ae6e-8336488ac86f; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:2:e5b5:1d22:4f74:1f52] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f5aecb69-252d-4909-d9e8-08d763c5b816 x-ms-traffictypediagnostic: MWHPR21MB0175: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(39860400002)(346002)(136003)(376002)(199004)(189003)(110136005)(33656002)(22452003)(81166006)(316002)(476003)(81156014)(486006)(71190400001)(46003)(71200400001)(6436002)(6246003)(10290500003)(446003)(10090500001)(7696005)(25786009)(76176011)(11346002)(8936002)(256004)(66446008)(64756008)(66556008)(66476007)(66946007)(76116006)(4744005)(8676002)(14454004)(86362001)(55016002)(5660300002)(186003)(52536014)(6506007)(8990500004)(7736002)(6116002)(305945005)(2906002)(229853002)(2501003)(74316002)(102836004)(9686003)(99286004)(478600001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0175; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:3; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: FWItpO5bgVymlzICP/+il/6K0RBUIqKpLEBIVkNig0LwXR2oPvaRACoVKCIGZgR49j7QTA9pjjVET7ODhGi1EOBWrBbeNMB/g2yzBc/YytseEPikMJvs1uxf/CQaJYqdhhhzk9/AVnFxHXSypy0FdYGJuoJhUgeYgOQPXFd/GgRyVtYKdeks/rL2wlEvZLQnUW7ljxIijQMKk6vi3dUEeQafj0DqFjWvCXq0focua5nBo7eIeP4u7MJ99B2CaLI1EGNkwEfxQtigkPHrxrTKZcgAyINNL6hMKuKm/3sYfAFUdRxQlykqzc6PyK5D0gqb/7KOJ+867490qrhlh9R+ydItc/cEZoSIZjO7+DlNNhYxsZhVRXfOwVxP64jlifDFAl/dcP3QytYKLPu+RrTjC30RHIem0z5fyxqCBcDhfRa5swWpxK4OQ27UX6gfJR6M x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f5aecb69-252d-4909-d9e8-08d763c5b816 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 21:01:54.3277 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: GbdOTLdfGfd4LL5f3QSpQiU35AtjVfcvGW9MZotTB1Bj52ob59bUnOtYYCdu5ct9C6kJpkRGnCheV3+GQkc7JMJjLC6W11fxhy4aP5ZAgqs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0175 Archived-At: Subject: Re: [Rats] Use case -> architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 21:02:02 -0000 U2Now7Zud8OkbGRlciwgSsO8cmdlbiB3cm90ZToNCiAgICA+IEkgcHJlZmVyIGhhdmluZyBhbGwg cmVsZXZhbnQgaW50ZXJhY3Rpb24gbW9kZWxzIGluIHRoZSBhcmNoaXRlY3R1cmUuDQoNCk1pY2hh ZWwgUmljaGFyZHNvbiB3cm90ZToNCiAgICA+IERvIHlvdSB3YW50IGV4aGF1c3RpdmUgZGV0YWls cywgb3IganVzdCBlbm91Z2ggdG8gc2F5IGhvdyB0aGluZ3MgZGlmZmVyIGFuZCB0aGVuIHJlZmVy ZW5jZSBhbm90aGVyIGRvY3VtZW50Pw0KDQpQZXJzb25hbGx5IEkgd291bGQgcHJlZmVyIHRoYXQg YW55IGhpZ2ggbGV2ZWwgaW5mbyB0aGF0IGlzIHNvbHV0aW9uIGFnbm9zdGljIGJlIGluIHRoZSBh cmNoIGRvYy4NCkFuZCBhbnkgbG93IGxldmVsIGRldGFpbHMgdGhhdCBhcmUgc29sdXRpb24gc3Bl Y2lmaWMgYmUgaW4gdGhlIGRvYyBmb3IgdGhlIHNwZWNpZmljIHNvbHV0aW9uLg0KDQpEYXZlDQo= From nobody Thu Nov 7 13:05:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10A961200E5 for ; Thu, 7 Nov 2019 13:05:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RkTVkWMWH5mN for ; Thu, 7 Nov 2019 13:05:44 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40089.outbound.protection.outlook.com [40.107.4.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DBCA120058 for ; Thu, 7 Nov 2019 13:05:44 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BIpkDlrIiyv9ppk/6WKIcZEMu5sUepRH2NmAXnrtS8HMDl0zI35QvWwvnyF+e9OUmFoXGZ2gQkLddtEqUyu/h+uYs5iV9LKD7F8H1VZsg9XTZaoRIBmjRpL40Hr4ulHu8o/fGHZFIM1wzwt8UzovGPLMHo7TNtnWxY67OWxsr8RmSKz4qubrOlvCZl50SBrGoGWLqRF0gxxLl0M+G94YLN+i3qhysg6iut7D/ABH8+QLyraZKWKgj3AGoiE4hUr8QIdeBYx/KWeAA5qxCu74Lw3Zve01TK8U5soyd4WtG7gRZAiQ1/8SCNJhsM9Jc9jtgis+2VeEfXzFbtAqrMedOg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FY6EfE1Z1gWFReRrLmDZB3vJOD0AqsKLyZWicOVtnbY=; b=fjKqr0iBqOFjuFuD4QZaJ8IzlcFy/bUvWQHKDrw9NNF0yLR3vZhUvW6CGHHlwZ45CrDFlmjl4z3zZDutZX/FnhBFsZfpnuuoB8BPzZ60am4GNW7IfFEKgBPDpSyeY5YJZJL+8/X28lXCEh86tHFnHHmi5Ql4DPdrrl6qznvbp4Yre5D/FWqVj1Zk78pZoTaWhuVGqcy9++9JNwl1sAl9pGzOAuPJZsf/zaxFwbOu8gls++8nYTEpMdltaPkzyCjyMhGWg8YOaT15xt5gLu9aUG5IuxnRtbV89YAlhXegapm63fXIPWJE3dNb0ziJAJyILNmhEeDsUevusSp8sqYkqA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FY6EfE1Z1gWFReRrLmDZB3vJOD0AqsKLyZWicOVtnbY=; b=FnoWAMowjwNkO22LNU9Z4HHIXpP0vE4Ohs+6U3JQbrjflD9A3X/KLOU3G7liaIZw+Ecz8feYk9rgclTbx5eufWKBSGH3lPXShGcmIivwqusMB37/4PYIjJbulxqIepeQvKhaLNkVdSG8olzb5wYIV9MIirs4b/JDpyXFrcdDfAQ= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0340.EURP190.PROD.OUTLOOK.COM (10.161.92.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Thu, 7 Nov 2019 21:05:42 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2408.028; Thu, 7 Nov 2019 21:05:42 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Use case -> architecture document Thread-Index: AQHVfpUtedcuT2wbS0SCyHTQ7+elcqdSM9uAgAAwqYCAABSIAIAACXkAgAAPgoCACDU2sIABGpkAgB4MXwCAAMZUAIAFqcUAgAACwIA= Date: Thu, 7 Nov 2019 21:05:41 +0000 Message-ID: <20191107210541.3nhd7dtqvultzlfy@anna.jacobs.jacobs-university.de> References: <20191009145006.r2pjsoo6jxirah64@anna.jacobs.jacobs-university.de> <9379d880-2b7e-6657-c547-b37bb7a9e466@sit.fraunhofer.de> <20191015154500.ruv2ie36hsxfb3qq@anna.jacobs.jacobs-university.de> <20191104062654.e2q7cgz43auzozok@anna.jacobs.jacobs-university.de> <20422.1573160150@localhost> In-Reply-To: <20422.1573160150@localhost> Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM4P190CA0017.EURP190.PROD.OUTLOOK.COM (2603:10a6:200:56::27) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e6fa8841-692e-42e8-e4a0-08d763c63f96 x-ms-traffictypediagnostic: AM5P190MB0340: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(346002)(366004)(396003)(376002)(39850400004)(199004)(189003)(6486002)(14454004)(66556008)(476003)(4326008)(46003)(66446008)(5660300002)(25786009)(4744005)(6116002)(305945005)(6512007)(486006)(7736002)(6306002)(66946007)(6436002)(3450700001)(786003)(316002)(1076003)(8676002)(66476007)(11346002)(446003)(64756008)(43066004)(8936002)(66574012)(478600001)(229853002)(256004)(2906002)(81156014)(81166006)(102836004)(76176011)(386003)(52116002)(71190400001)(6506007)(86362001)(6246003)(71200400001)(99286004)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0340; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: LbNQLaU25Xtj3/tE5KmielmklJq/454EEt2m1mwujGXEpAgOf+KKGVoHT6cO98Dd7hye7k/GnOBjr4msRe6dUfjyqL84FG0adDUt0T191aqdkdYw+/WXxAsDMSb9o9oN/qfRgMaTho53vuuFJc9KGxBnqPc+/8/nCCKouR7Vrut33iv9m2uTpn790wAP34ZTDLHND7Rla/ztLg8R75MKTiY4DVjJR0lp9cSgem5w/nulAveP+vyDgG3l8O+kRUX93OdV7UJA+b1uhcK/JDaH2tbiYgxcojGN8qD8X3AKimjQkpvFMXBEXIVnSQwi/xI1JYbYN0LbgrXvxn8+spyrECbqhREJ3axiiclJ0Q8Ax/CdZDqSGTS4WesnI+6MBHxlUOzm9MPvZlQMwxSsmUcT3H191T9DgmqeLRsD5xpJXazrPnSfCAZuKrEGPrU2qwK+q3uhK82CgwlNmb0upyUTlar1i0/BLAfEaYgScH9Oo3A= Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: e6fa8841-692e-42e8-e4a0-08d763c63f96 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 21:05:41.9521 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 0IUIm1v+tZrSC+6uR3qQp/xzVfgQZU/R2aBaGdCuyxBY4Qzlvjc5q+JmqWClZYjnKWlZOtCc+gDaFRLhsVbWTZwuF0sRtQA3qT3mIQg+wU8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0340 Archived-At: Subject: Re: [Rats] Use case -> architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 21:05:47 -0000 On Thu, Nov 07, 2019 at 03:55:50PM -0500, Michael Richardson wrote: >=20 > Sch=F6nw=E4lder, J=FCrgen wrote: > > I prefer having all relevant interaction models in the architecture= . >=20 > Do you want exhaustive details, or just enough to say how things differ a= nd > then reference another document? > I like to know which interaction models exist and how they differ, I am fine to leave the gory details that do not impact the architecture to other documents. (Yes, this is a bit recursive but figuring out what belongs to an architecture document and what not may require finding the sweat point where a meaningful cut can be made.) /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Thu Nov 7 13:32:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9146B12099B for ; Thu, 7 Nov 2019 13:32:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=JZdkVxXm; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=zNGT7uMZ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0NJ6hNA3vLL2 for ; Thu, 7 Nov 2019 13:32:15 -0800 (PST) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9CC7120103 for ; Thu, 7 Nov 2019 13:32:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=12141; q=dns/txt; s=iport; t=1573162335; x=1574371935; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=f0Id/pyM4bI+ZN3mCbcxYyDUev16uwFKzglMI0uEqqk=; b=JZdkVxXm6BiQKgvWatkg5ReNVi3rgsh6QOMLGSNjKFLmEXg+3YyZZ6z7 TGlXETXIrdG3C8Thq0haImBuAd++kMkWJFL0ywqyd/WFTbl7UezdfInI3 EfKpKmI2O3u+F1Q/4ql225nq3z3p+NWde/byTC2ADvgbmNgTd8O8hhoUi E=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3ATlj1jxf/zorMQWqCMnktBPpZlGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwKZD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/YjI9HdhqX15+9Hb9Ok9QS47z?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DdAQA1jcRd/5tdJa1lHQEBAQkBEQU?= =?us-ascii?q?FAYFrBwELAYEbL1AFbCstIAQLKgqHZQOLAk6JQ4tphGKBLoEkA1QCBwEBAQk?= =?us-ascii?q?DAQEYAQoKAgEBhEAChA4kNQgOAgMLAQEEAQEBAgEFBG2FNwELhVICAQMBARA?= =?us-ascii?q?bEwEBLAwPAgEIEi0HAiULFAMOAgQTCAYUgwGBeU0DHw8BAgyoFQKBOIhggie?= =?us-ascii?q?CfgEBBYUIGIIQBwMGgTYBgVKKQRiBQD+BEUaCHi4+gmIBAYFjK4MVgiyNTYh?= =?us-ascii?q?+lz0KgiSDS4I0j12Zco5GmWoCBAIEBQIOAQEFgVQBNoFYcBU7gmxQERSQNoN?= =?us-ascii?q?zhRSFP3SBKI8DAYEOAQE?= X-IronPort-AV: E=Sophos;i="5.68,279,1569283200"; d="p7s'?scan'208,217";a="367996845" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 07 Nov 2019 21:31:54 +0000 Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id xA7LVrkE021395 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 7 Nov 2019 21:31:53 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 7 Nov 2019 15:31:53 -0600 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 7 Nov 2019 15:31:52 -0600 Received: from NAM01-SN1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 7 Nov 2019 15:31:52 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NKXImSam+zz86d26IoQop3+tBaCq2jY85Cb+uTI9AKc9GZtqw4eqwahwpc9VZZVFOB/eBQv7ZACS08F0AcJQc5s2SvXyws3YQItI9HmJpvSWuEUEO9BRt1Wm5KYhKsn+f1NbuO81qWxmXW5JqvOtoYCyKs5SX0M5PBtmTaLjRM+5R02E4Pm4DAvh0anpGEd8JA5mYoNj6/m9QyYrWNR70CCYLrvJh+4XbJBFgYr+mYoFmLHrXUKxrRt1aXNooAfvH1SnmkxUGuUHS+BzcuVrUgfrhc38dSsBHeNk0Elpf9dV10rk57VmB0mV3AiF0gNqb8I3ZUPbWn9yFO4herv49w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4ZLmdq9yBK//sNEsuT6BEtaA4JR1hE8VCQU4HlOB55c=; b=ltaz3OBHkuJ+pvc3odCl+YH6YeR0bxDz0aNp3MiM5rCZvRKOuCyBV8CIWczi0ONdK1AVksy4k6oWaCnKnHvUVvGOLBHYjzQ/flPXMDsic4YpiYtp9BlCBITVTSlYzGhH2Vpgb0Wq8BN4X8Jeg5sFk9RtzNzzPiytyYwGmuCXhs+P7zYO6SIcRPV1f1lI1SKjoByUBKH79nq/FQVi0byX46+BUWEODLsb6GcuzrhtEvB+ww3gbGtX1hQA43FYYfDsGhLpapasztXlABBoIeuLhzudXE67TDW+PmjV7/N6aFVdFlOAlVEXj/iUspJiRgr7UVpb9aY+imp4gzy1YyhKEg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4ZLmdq9yBK//sNEsuT6BEtaA4JR1hE8VCQU4HlOB55c=; b=zNGT7uMZlDZ01Olinm+eXJOCikZwCiFWR70yB616FiLNBfIIcHh0SJu3RuAm2dYTbLMSa5hXHjhezn3BU+s+zSZNUbGflWz1Vfv8/+JlrkGJu5DHdccR+S8js48AhaC3FVzzZdspx9b02QnRWw+fjGyKuvZLgBvJzf9wuGBjy+w= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3786.namprd11.prod.outlook.com (20.179.16.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2408.24; Thu, 7 Nov 2019 21:31:51 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.020; Thu, 7 Nov 2019 21:31:51 +0000 From: "Eric Voit (evoit)" To: "rats@ietf.org" Thread-Topic: [Rats] Moving forward with Architecture work Thread-Index: AQHVlZLBEdFAaV1HBUSdLR5mnivLzaeAOeiw Date: Thu, 7 Nov 2019 21:31:51 +0000 Message-ID: References: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> <3C6FCA46-F734-463C-9EB0-D3C86EAA86A2@island-resort.com> In-Reply-To: <3C6FCA46-F734-463C-9EB0-D3C86EAA86A2@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.69] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 672a20b0-b220-4a5a-7e66-08d763c9e737 x-ms-traffictypediagnostic: DM6PR11MB3786: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0214EB3F68 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(39860400002)(366004)(346002)(396003)(136003)(189003)(199004)(25786009)(71190400001)(76116006)(66616009)(66476007)(66556008)(66446008)(66946007)(64756008)(71200400001)(478600001)(966005)(606006)(99936001)(554214002)(229853002)(6306002)(52536014)(6116002)(5660300002)(790700001)(3846002)(2351001)(2906002)(14454004)(9686003)(2501003)(55016002)(54896002)(102836004)(6436002)(53546011)(86362001)(5640700003)(6506007)(66066001)(81166006)(81156014)(1730700003)(8676002)(256004)(7736002)(26005)(6246003)(236005)(99286004)(11346002)(33656002)(8936002)(7696005)(446003)(6916009)(476003)(76176011)(186003)(74316002)(316002)(486006); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3786; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: vX/1PcEA7DjoZ2krkZt+bqk4xcOQ14yPXnEax4A5HeBt6QxC8tQV9ckQ9ibRkaQrcLpC5KlvGt1M7E0chIfipK4FIbZZChd763C4g8qOgSXnIW6PvhHMs6jLieCAPLIxkBolrvmk+pRaofc9NvCJPkLGYSeJgaoLtKPEL1Z16JOU94ua7Srx3EZkE7COn9QnJiPF7clgeLAY21MC1dhZN5IEBbOSosHHUfChstFjgRpsNl7ypBv7oP7phTFqY+YqTG8HtlwWiBtKu1qT52j6u0msnnu9uTyVILdjvZRq/SO6KlhfRJ+hY/j6kGK22akRf7OXSOAxNiXAUk81aIZqQLsqp205xS9lVbui+EcGFZWWEWvsL88U0jkS2YyU8krCDyTp8Cfa2fMkwegu52ZRD5CjF0csjAK3jpUjV4viEFxMOKPAKn63PT4ZtHEpfnz6 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0809_01D59588.DA322D30" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 672a20b0-b220-4a5a-7e66-08d763c9e737 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2019 21:31:51.4135 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 93tT++RPpj2QXECmoX0wsLVmED1yLFy5ZyAE5eUt4riKlGJ7IikNwfCf8eX2m4a7 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3786 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.26, xch-aln-016.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [Rats] Moving forward with Architecture work X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Nov 2019 21:32:17 -0000 ------=_NextPart_000_0809_01D59588.DA322D30 Content-Type: multipart/alternative; boundary="----=_NextPart_001_080A_01D59588.DA322D30" ------=_NextPart_001_080A_01D59588.DA322D30 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Thanks Nancy, Kathleen, & architecture editorial team. I am looking forward to the converged result. Eric On Nov 6, 2019, at 2:26 PM, Nancy Cam-Winget (ncamwing) > wrote: RATS Participants, We continue to have good discussion on architecture draft content but now have two drafts that will be hard to get consensus on either one. With each draft providing good benefits, we propose to create a new architecture editorial team to come up with a converged draft that addresses the readability concerns, use cases and terminology discussed thus far. Michael Richardson, Henk, Dave Thaler and Ned have agreed to be this team and will work on putting out a converged draft soon. Discussions are still encouraged to ensure all use case scenarios and workflows are considered; but wanted to ensure we had a targeted team to come up with a single proposed architecture document. Warm regards, Nancy and Kathleen _______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats ------=_NextPart_001_080A_01D59588.DA322D30 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks = Nancy, Kathleen, & architecture editorial team.  I am looking = forward to the converged result.

 

Eric

 

On Nov 6, 2019, at 2:26 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> = wrote:

 

RATS Participants,

We continue to have good discussion = on architecture draft content but now have two drafts that will be = hard to get consensus on either one.  With each draft providing = good benefits, we propose to create a new architecture editorial = team to come up with a converged draft that addresses the readability = concerns, use cases and terminology discussed thus far. Michael = Richardson,  Henk, Dave Thaler and Ned have agreed to be this team = and will work on putting out a converged draft soon.

 

Discussions are still = encouraged to ensure all use case scenarios and workflows are = considered; but wanted to ensure we had a targeted team to come up with = a single proposed architecture = document.

 

Warm regards,  Nancy and Kathleen

 

____________= ___________________________________
RATS mailing list
RATS@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/rats">https://www.ietf.org/mailman/listinfo/rats

 

------=_NextPart_001_080A_01D59588.DA322D30-- ------=_NextPart_000_0809_01D59588.DA322D30 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTA3MjEzMTQ4WjAjBgkqhkiG 9w0BCQQxFgQUTORXzEriA4d0NHphXC/9Pcq8mewwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAZb4TMi+RFIK6bHVxM54UldvGCTc7AelYeL1CgX5+n4om1BOCkRYMkLVlhCeYp6YGK 76C0rsN0uxZe2XGth36X474anAlcbRktrypioln/KQOfk24ME96CrBkx9gdRTXZMRU6V5guwI5ZA L0JpjM7UQy/Shfd1P6ZZTl79s4dVxLzVcADcP/GRbMW+dpBKyC7Wh703aSl6SIMemI8i/yymUajD rjwiJXB/AD21eNMu5jCL21sv+1vNU1u+fqtvxAW6BUWOBT/u+6yBARSXSLG0YgKE7xftl4OQsb+1 5PivXbU5x7qTDP7e/zgRDqhxFiBbdGQ83UiVYqZmA9YHQlVQAAAAAAAA ------=_NextPart_000_0809_01D59588.DA322D30-- From nobody Thu Nov 7 18:16:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0B7212006E for ; Thu, 7 Nov 2019 18:16:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gUPfrELr5O6F for ; Thu, 7 Nov 2019 18:16:44 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6639120018 for ; Thu, 7 Nov 2019 18:16:43 -0800 (PST) Received: from lhreml707-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id B425F7EBD12FEE852616 for ; Fri, 8 Nov 2019 02:16:41 +0000 (GMT) Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml707-cah.china.huawei.com (10.201.108.48) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 8 Nov 2019 02:16:41 +0000 Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Fri, 8 Nov 2019 02:16:41 +0000 Received: from DGGEMM402-HUB.china.huawei.com (10.3.20.210) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256) id 15.1.1713.5 via Frontend Transport; Fri, 8 Nov 2019 02:16:40 +0000 Received: from DGGEMM511-MBS.china.huawei.com ([169.254.2.19]) by DGGEMM402-HUB.china.huawei.com ([10.3.20.210]) with mapi id 14.03.0439.000; Fri, 8 Nov 2019 10:16:35 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: Guy Fedorkow , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" Thread-Topic: Moving forward with Architecture work Thread-Index: AQHVlPE2T+0ud1jmNUmYUaZcS0SF16d/1WRggAC1NtA= Date: Fri, 8 Nov 2019 02:16:35 +0000 Message-ID: References: <8333BFA8-C457-4710-A7A1-EFF185D304F0@cisco.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.46] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA113EFdggemm511mbschi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?gb2312?b?tPC4tDogTW92aW5nIGZvcndhcmQgd2l0aCBBcmNoaXRl?= =?gb2312?b?Y3R1cmUgd29yaw==?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 02:16:46 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA113EFdggemm511mbschi_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 WWVzLCBJIGFncmVlcyB3aXRoIHRoaXMgd2F5IGZ1bGx5Lg0KDQpBbmQgSSBhbSB3aWxsaW5nIHRv IGNvbnRyaWJ1dGUgdG8gdGhlIGFyY2hpdGVjdHVyZSByZWxhdGVkIHdvcmsgaWYgcG9zc2libGUs IGxpa2U6IHdlIGhhdmUgb3BlbiBkaXNjdXNzaW9uLCBjb25mIGNhbGwgb3Igb3RoZXIgbWVhbnMu DQoNCreivP7IyzogUkFUUyBbbWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZ10gtPqx7SBHdXkg RmVkb3Jrb3cNCreiy83KsbzkOiAyMDE5xOoxMdTCN8jVIDIzOjI3DQrK1bz+yMs6IE5hbmN5IENh bS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPg0Ks63LzTogcmF0c0BpZXRm Lm9yZw0K1vfM4jogUmU6IFtSYXRzXSBNb3ZpbmcgZm9yd2FyZCB3aXRoIEFyY2hpdGVjdHVyZSB3 b3JrDQoNCk5hbmN5LA0KICBJIHRoaW5rIHRoYXShr3MgYSBncmVhdCB3YXkgdG8gbW92ZSBmb3J3 YXJkIG9uIHRoaXMNCiAgVGhhbmtzDQovZ3V5DQoNCg0KDQoNCkp1bmlwZXIgQnVzaW5lc3MgVXNl IE9ubHkNCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3Vu Y2VzQGlldGYub3JnPj4gT24gQmVoYWxmIE9mIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKQ0K U2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciA2LCAyMDE5IDU6MjYgUE0NClRvOiByYXRzQGlldGYu b3JnPG1haWx0bzpyYXRzQGlldGYub3JnPg0KU3ViamVjdDogW1JhdHNdIE1vdmluZyBmb3J3YXJk IHdpdGggQXJjaGl0ZWN0dXJlIHdvcmsNCg0KUkFUUyBQYXJ0aWNpcGFudHMsDQpXZSBjb250aW51 ZSB0byBoYXZlIGdvb2QgZGlzY3Vzc2lvbiBvbiBhcmNoaXRlY3R1cmUgZHJhZnQgY29udGVudCBi dXQgbm93IGhhdmUgdHdvIGRyYWZ0cyB0aGF0IHdpbGwgYmUgaGFyZCB0byBnZXQgY29uc2Vuc3Vz IG9uIGVpdGhlciBvbmUuICBXaXRoIGVhY2ggZHJhZnQgcHJvdmlkaW5nIGdvb2QgYmVuZWZpdHMs IHdlIHByb3Bvc2UgdG8gY3JlYXRlIGEgbmV3IGFyY2hpdGVjdHVyZSBlZGl0b3JpYWwgdGVhbSB0 byBjb21lIHVwIHdpdGggYSBjb252ZXJnZWQgZHJhZnQgdGhhdCBhZGRyZXNzZXMgdGhlIHJlYWRh YmlsaXR5IGNvbmNlcm5zLCB1c2UgY2FzZXMgYW5kIHRlcm1pbm9sb2d5IGRpc2N1c3NlZCB0aHVz IGZhci4gTWljaGFlbCBSaWNoYXJkc29uLCAgSGVuaywgRGF2ZSBUaGFsZXIgYW5kIE5lZCBoYXZl IGFncmVlZCB0byBiZSB0aGlzIHRlYW0gYW5kIHdpbGwgd29yayBvbiBwdXR0aW5nIG91dCBhIGNv bnZlcmdlZCBkcmFmdCBzb29uLg0KDQpEaXNjdXNzaW9ucyBhcmUgc3RpbGwgZW5jb3VyYWdlZCB0 byBlbnN1cmUgYWxsIHVzZSBjYXNlIHNjZW5hcmlvcyBhbmQgd29ya2Zsb3dzIGFyZSBjb25zaWRl cmVkOyBidXQgd2FudGVkIHRvIGVuc3VyZSB3ZSBoYWQgYSB0YXJnZXRlZCB0ZWFtIHRvIGNvbWUg dXAgd2l0aCBhIHNpbmdsZSBwcm9wb3NlZCBhcmNoaXRlY3R1cmUgZG9jdW1lbnQuDQoNCldhcm0g cmVnYXJkcywgIE5hbmN5IGFuZCBLYXRobGVlbg0KDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F13EA113EFdggemm511mbschi_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

Yes, I agrees with this way fully.

 

And I am willing to contribute to the architecture related work i= f possible, like: we have open discussion, conf call or other means.

 

=B7=A2=BC=FE=C8=CB: RATS [mailto:r= ats-bounces@ietf.org] =B4=FA=B1=ED Guy Fedorkow
=B7=A2=CB=CD=CA=B1=BC=E4:<= /span> 2019=C4=EA11=D4=C27=C8=D5 23:27
=CA=D5=BC=FE=C8=CB: Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
=B3=AD=CB=CD: rats@ietf.org
=D6=F7=CC=E2: Re: [Rats] Moving forward with Architecture work=

 

Nanc= y,

&nbs= p; I think that=A1=AFs a great way to move forward on this

&nbs= p; Thanks

/guy=

 

 

 

Juniper Business= Use Only

F= rom: RATS <rats-bounces@ietf.org> On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Wednesday, November 6, 2019 5:26 PM
To: rats@ietf.org
Subject: [Rats] Moving forward with Architecture work

 

RATS Participants,

We continue to have good discussion on architecture draft cont= ent but now have two drafts that will be hard to get consensus on either on= e.  With each draft providing good benefits, we propose to create a new architecture editorial team to come up wit= h a converged draft that addresses the readability concerns, use cases and = terminology discussed thus far. Michael Richardson,  Henk, Dave T= haler and Ned have agreed to be this team and will work on putting out a converged draft soon.

&nbs= p;

Discussio= ns are still encouraged to ensure all use case scenarios and workflows are = considered; but wanted to ensure we had a targeted team to come up with a s= ingle proposed architecture document.

 =

Warm regards,  Nancy and Kathleen

 

--_000_C02846B1344F344EB4FAA6FA7AF481F13EA113EFdggemm511mbschi_-- From nobody Fri Nov 8 08:10:35 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2893812083F for ; Fri, 8 Nov 2019 08:10:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URI_HEX=0.1, URI_NOVOWEL=0.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=PUkiXf0j; dkim=pass (1024-bit key) header.d=juniper.net header.b=BizbpcSu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vn-VT0SdX0Ig for ; Fri, 8 Nov 2019 08:10:31 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41768120AC6 for ; Fri, 8 Nov 2019 08:10:31 -0800 (PST) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA8G2iM8003876; Fri, 8 Nov 2019 08:10:29 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=t0sF3tpm//S6DlmKL6sPKtuvrML+U/yVv6cdJmfPOO0=; b=PUkiXf0jVhcainA4JzHJR4vk11h2Dk79M0MDxykOB92JQKbJXDONwGoI4Tc3nnfgHzlj pTWcJgD83p6Mz6tzTc3gHiOPZMNhHdB+QgCJABpMgXPNYAoWnVuwzqMMLx3AsI7Irv4P kNpJ4KWxgesBGLmsmkkXfPVpUTVAEQcoXr2EjuWJmUE4NRGZIsb4laek9789720+C0T8 8gy3TlggnTwnxS+doVyVeRktTqAmeYB7TO/mlh/oT1uC9Cm6qoaA9PV0PptZghwJYjKA lk4kjofEkQZtQT9xjQxg1JCKsPp0QJUXCaAFAmCYh6we2s3vrjq2aLVqTsVM5YbeDIDe oA== Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp2051.outbound.protection.outlook.com [104.47.37.51]) by mx0a-00273201.pphosted.com with ESMTP id 2w41vbccn5-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Fri, 08 Nov 2019 08:10:28 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=exOKCK7ccqTxWA8mI90bcdwTftrDRI9i89mFLP3VHQ9ISeKkwBFpLJRfNp/ME+63xjskJd8isX73M1eiprl9ZPhWLT+jw96NXcToD8L3tT3XDZanBvdSd5GJt4/dDExfdpXoxRxExJ9KjRLDndKqpjx9Vx4xfH9UMnM01BCUugwd5zG7h8MPDuyTGcfsZKJKPQq8QVNF5QygSpIRhChZ9+2LPEwu65C14w3xFduQa3wg5VoDdAoz3RUYjiM1liuyC1mbBEPiNhI+fY2tHVB5k8rugGf/SZT3yDORFcCJAZ6nPK13Ee6ov/Oh4kuGCfql0ct7uFkyrDUWEFwsD1qegQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t0sF3tpm//S6DlmKL6sPKtuvrML+U/yVv6cdJmfPOO0=; b=VcLUk5rSvFZ2ipqMXRliiG3EEYnR4aBFcU7P48IMA8O2x+QGMFTsATMAeVchj753Vo2tFpLOk/yyMsn3jr3GPIkq988VKg5n4Hnx4uRaJIuzmWzlfikEqiBR6ZMFCkkYdttNJB1xQgLT6ZmKMKm5vSHACXUDavCMnqpTZ7C/fnAm3dqXFphIN91kV2DaY7S67ZlGQ41GEpmZd2TLJZNQGd9DvsXkhL9JK+un0InDnAO1VY24blzHLEaUcWTRJfpfHekyFYNxn9T9lSvqY7Cqbjjt5J8qW6l/D7KECzTuGra8h5s1lQoOuM6LCUtqLEON0BkTOco/qOcZpUnlJnlOuw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t0sF3tpm//S6DlmKL6sPKtuvrML+U/yVv6cdJmfPOO0=; b=BizbpcSuhaGlCFzw7Vrl5uhtSOOTkTolpNa6a48wmd84j2L98nhRaEZn4LSyi4usffcPxtP14df6w/VjQhuV7sagj4k7RqFHiDVzjMsyhheE7CoEBPY+J4b4ihcikqWc4PbmPcJSNW7rc9fLi4nq5dbSsCtycvkifSZf7h80AeU= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB5432.namprd05.prod.outlook.com (20.177.185.75) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.13; Fri, 8 Nov 2019 16:10:26 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2451.013; Fri, 8 Nov 2019 16:10:26 +0000 From: Guy Fedorkow To: Dave Thaler CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: Comments on draft-fedorkow-rats-network-device-attestation-00 Thread-Index: AdWVAeYZl01Kj/T7RhKuuFayaZmLkQABRoFwAFG+ZHA= Date: Fri, 8 Nov 2019 16:10:26 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8e95344f-5945-4ad8-e99d-08d764662af6 x-ms-traffictypediagnostic: BYAPR05MB5432: x-ms-exchange-purlcount: 3 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0215D7173F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(376002)(396003)(366004)(346002)(40224003)(189003)(199004)(76116006)(6306002)(9686003)(86362001)(7736002)(4326008)(99286004)(6246003)(45080400002)(5660300002)(33656002)(25786009)(52536014)(7696005)(236005)(2906002)(478600001)(55016002)(446003)(54896002)(11346002)(76176011)(66066001)(71200400001)(71190400001)(8936002)(53546011)(66476007)(26005)(476003)(14454004)(81166006)(81156014)(5024004)(606006)(8676002)(66946007)(6116002)(3846002)(256004)(790700001)(102836004)(486006)(66446008)(66556008)(9326002)(6506007)(30864003)(74316002)(186003)(14444005)(64756008)(229853002)(316002)(6436002)(966005)(54906003)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB5432; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kDzE+nqR9kWD+dnEDK0nrOzx42mykrjGHugbmsQSFGZCTVGjbf2+FCI/OcMdTVCPmGrD9386oqCeyiJxDpnjQL9K16KPJLa8LJgeyfQxtbZZWcmmrpV2rS6yU59QTY9Ly88u88fjrPCkMMhBQgOX/q4ay1QIimKZ5Jd2FTcGiViCR+8uN+Paljy23hMriOMVK8t84o+4eY+0vM3RoiVr7gIVB5f3DMTgze+PCdKv8F7aiZDaEiRcRDvJepZDgMvSCEnoMsNxCDwE2RgFYn2v2jV3TJOQ5SEUY8/8+qiaajHx/pp4TwOBWsIHLLQP82jjkr4E1Wc6MI3K8l/fuxM/+uHtNUCRN8KubDWHIHEm6rY4TkUAXEwb+y0ggYqgYrts+cYTklp/dIn5lv+ncoz2TYJttXRe3QeIm0ipJUqcFXpWWPTiP3F1rofWpmjG3o/P x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB42486C2F0A2A47B626AB2659BA7B0BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 8e95344f-5945-4ad8-e99d-08d764662af6 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2019 16:10:26.5672 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +fOpqWiOazKSG4ZrmtX55NC1raXWUUUlglpZDsDcf1ekK6zetTgOYrb7ouwTNvNWs8KwRLuWDzbiFhFebRKzDQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB5432 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-08_05:2019-11-08,2019-11-08 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 bulkscore=0 mlxscore=0 adultscore=0 malwarescore=0 spamscore=0 priorityscore=1501 suspectscore=0 clxscore=1015 mlxlogscore=999 phishscore=0 lowpriorityscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911080160 Archived-At: Subject: Re: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 16:10:34 -0000 --_000_BYAPR05MB42486C2F0A2A47B626AB2659BA7B0BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dave, I'll look at the title and scope again. Within TCG, we'd left it a bit a= mbiguous, as there are a number of applications that it would fit without t= oo much work. But for RATS, I'm fine with being more careful to delineate = where the work as written fits. We'll think of a more-formal way to say this, but as Jessica said, the ac= tual scope of the doc is "things with a TPM that use YANG, and don't do sle= ep/wake cycles". I assume this can't be changed now given that the IETF106 deadline has pa= ssed, but there will be another revision one way or another in which I can = address your other comments. Thanks /guy Juniper Business Use Only From: Dave Thaler Sent: Wednesday, November 6, 2019 8:18 PM To: Guy Fedorkow Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: RE: Comments on draft-fedorkow-rats-network-device-attestation-00 And a couple of additional comments on -01 (the subject had -00 in it and p= robably shouldn't have) * Since section 1 scopes the definition of RIV to certain types of netw= ork equipment, I find the term RIV to be overly broad, since it has a name that implies it is remote attestation for= all purposes, which it's apparently not. I would recommend that, like the title of the doc, the term RIV be narrowed= significantly by adding words to indicate its narrow scope. * Section 4 says: In light of these requirements for protecting the privacy of users of the network, the Network Equipment must identify itself, and its boot configuration and measured device state (for example, PCR values), to the Equipment's Administrator, so there's no uncertainty as to what function each device and configuration is configured to carry out . RIV specifically addresses the collection information from enterprise network devices by an enterprise network. However, those two sentences appear to be contradictory. T= he first one talks about the "Equipment's Administrator" whereas the second one talks= about "an enterprise network". Unless you further narrow the scope in section 1.5 to only c= ases where those are the same, you should not assume that the "Equipment's Administrator" a= nd the "enterprise network" are the same organization. * Another point on the same text in section 4 is that it talks about "b= oot" configuration and then says "there's no uncertainty as to what function each device and configuration i= s configured to carry out". In order to have "no uncertainty" you either have to remove the word "boot"= , so that it's not just "boot" configuration, but configuration in general, or else constrain your = definition of "embedded" to cases where all configuration and functionality is fixed at boot time. = That's common in embedded, but not universal, depending on your definition of embedded. Currently you= only define "embedded" as "where the device manufacturer ships the software image for the device" but that by itself doesn't mean all functionality is fixed at boot time. E= .g., the configuration might be separate from the software image, and might even be obtained after boot, un= less you scope down your definition of "embedded". * Section 5 says "TPM practices require that these keys be different, as a way of ensuring that a general-purpose signing key cannot be used to spoof an attestation quote." and "To prevent spoofing, the quote generated inside the TPM must by signed by a key that's different from the DevID, called an Attestation Key (AK)." The claim that a split is necessary to prevent spoofing is non-obvious (I k= now I didn't follow it). I would recommend either 1. Delete the text about spoofing and just say that's how TPM works, or 2. Provide an explanation, or 3. Reference a publically accessible document that has the explanation. Dave From: RATS > On Behalf = Of Dave Thaler Sent: Wednesday, November 6, 2019 4:26 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-= 00 [updated subject line] Here's some comments on draft-fedorkow-rats-network-device-attestation-00, = in addition to the one in the thread copied at bottom... Section 1.2: ? o Platform Identity, the mechanism providing trusted identity, can * reassure network managers that the specific devices they ordered * from authorized manufacturers for attachment to their network are * those that were installed, and that they continue to be present in * their network. As part of the mechanism for Platform Identity, * cryptographic proof of the identity of the manufacturer is also * provided. Above is somewhat ambiguous. When it says "the specific devices", is it t= alking about device instances (in the exact serial number or key pair sense), or the same models? I.e.,= I ordered 3 widgets, and I got three widgets (and not three oranges or something else). Is this talking a= bout verifying that they're widgets, or that they're the precise 3 widgets you're expecting? I suspec= t you mean the latter but it's not clear. Assuming you do mean instances, then knowing that they're the spec= ific devices that were ordered presumes some mechanism for learning the public keys of the devices ordered= , prior to their arrival, and this should be called out. Section 2.1 discusses the model where the verifier communicates directly wi= th the attested device. However, it doesn't point out the problems with that model, which is that t= he attested device will see this as unsolicited inbound communication, and hence and sort of host firewall-l= ike behavior will prevent the interrogation from succeeding. Section 1.5 already constrains the scope = to a very narrow scenario, but it's not sufficient, it has to be constrained further to the scenario where= unsolicited inbound communication is permitted. Allowing unsolicited inbound communication opens up other p= otential security and privacy risks that should be discussed in sections 4 and 5. Given the narrowness of the applicability, and the security and privacy ris= ks inherent in the model where the verifier communicates directly with the attested device, it's not obvio= us why this is a good direction to pursue, especially if there might be alternatives that are both more bro= adly applicable, and more secure/private. I have no objection if there are good reasons, but the draft doesn't yet pr= ovide sufficient justification in my view. Thanks, Dave From: Guy Fedorkow > Sent: Wednesday, November 6, 2019 12:57 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Dave, Ok, I suppose the model where the verifier communicates directly with the= attested device is a kind of sub-contracted full-service background check.= That's ok with me, as long as no one interprets the diagram as meaning th= at the relying party must somehow insert itself into the exchange between V= erifier and Attester. And I see what you mean about lining up the scope of RIV. The draft has = gone through a number of changes as we've tried to disentangle it from TCG = tribal knowledge. I think the scope is set by a couple factors. The doc as written is clearly limited to TPM-based systems. That's certa= inly not the only way to manage a root of trust, but it's the one that's av= ailable on a lot of gear already, and it's fairly stable and tightly spec'd= . From the TCG side, I'd expect there would be interest in extending the i= deas to other TCG roots of trust such as DICE, but it seems that should be = driven out of TCG. The limitation to Network Equipment is entirely a matter of expedience. = I think the approach would work easily in other embedded applications, alth= ough YANG is likely a fixation only relevant to networking guys. Other dom= ains would presumably need other domain-specific protocols. I'll connect with Jessica to see if we can figure out how to align the na= me and scope a bit better with the rest of the RATS world. Thanks /guy Juniper Business Use Only From: Dave Thaler > Sent: Monday, November 4, 2019 3:56 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS > On Behalf = Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools....ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_BYAPR05MB42486C2F0A2A47B626AB2659BA7B0BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Dave,

  I’ll look at the title and scope again.=   Within TCG, we’d left it a bit ambiguous, as there are a numbe= r of applications that it would fit without too much work.  But for RA= TS, I’m fine with being more careful to delineate where the work as written fits.

  We’ll think of a more-formal way to say= this, but as Jessica said, the actual scope of the doc is “things wi= th a TPM that use YANG, and don’t do sleep/wake cycles”.

  I assume this can’t be changed now= given that the IETF106 deadline has passed, but there will be another revi= sion one way or another in which I can address your other comments.

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.c= om@dmarc.ietf.org>
Sent: Wednesday, November 6, 2019 8:18 PM
To: Guy Fedorkow <gfedorkow@juniper.net>
Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: RE: Comments on draft-fedorkow-rats-network-device-attestat= ion-00

 

And a couple of additional comments on -01 (the subj= ect had -00 in it and probably shouldn’t have)

 

  • Since section 1 scopes the definition of RIV to certain types of netw= ork equipment, I find the term RIV to be

overly broad, since it has a name that implie= s it is remote attestation for all purposes, which it’s apparently no= t.

I would recommend that, like the title of the= doc, the term RIV be narrowed significantly by adding words

to indicate its narrow scope.

 

  • Section 4 says:

In light of these
   requirements for protecting the privacy of users of the networ= k, the
   Network Equipment must identify itself, and its boot configura= tion
   and measured device state (for example, PCR values), to the    Equipment's Administrator, so there's no uncertainty as to wha= t
   function each device and configuration is configured to carry = out .

 

RIV specifically addresses = the collection information from enterprise
   network devices by an enterprise network. 

 

        &nbs= p;      However, those two sentences appear to be = contradictory.   The first one talks about
            &nb= sp;  the “Equipment’s Administrator” whereas the sec= ond one talks about “an enterprise network”.

        &nbs= p;      Unless you further narrow the scope in sec= tion 1.5 to only cases where those are the same,

        &nbs= p;      you should not assume that the “Equi= pment’s Administrator” and the “enterprise network”=

        &nbs= p;      are the same organization.

 

  • Another point on the same text in section 4 is that it talks about &#= 8220;boot” configuration and then says
    “there’s no uncertainty as to what function each device and con= figuration is configured to carry out”.

In order to have “no uncertainty”= you either have to remove the word “boot”, so that it’s = not just

“boot” configuration, but configu= ration in general, or else constrain your definition of “embeddedR= 21;

to cases where all configuration and function= ality is fixed at boot time.  That’s common in embedded,

but not universal, depending on your definiti= on of embedded.  Currently you only define “embedded”=

as “where the device manufacturer ships the soft= ware image for the device”

but that by itself doesn’t mean all fun= ctionality is fixed at boot time.  E.g., the configuration might be

separate from the software image, and might e= ven be obtained after boot, unless you scope down your

definition of “embedded”.

 

  • Section 5 says

“TPM practices require that these keys = be different, as a way of
   ensuring that a general-purpose signing key cannot be used to = spoof
   an attestation quote.”

and

“To prevent spoofing, the quote generated inside= the TPM must by
   signed by a key that's different from the DevID, called an
   Attestation Key (AK).”

 

The claim that a spl= it is necessary to prevent spoofing is non-obvious (I know I didn’t f= ollow it).  I would recommend either

  1. Delete the text about spoofing and just say that’s how TPM work= s, or
  2. Provide an explanation, or
  3. = Reference a publically accessible document that has the explanation.

Dave

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Dave Thaler
Sent: Wednesday, November 6, 2019 4:26 PM
To: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attes= tation-00

 

[updated subject line]

 

Here’s some comments on draft-fedorkow-rats-ne= twork-device-attestation-00, in addition to the one in the thread copied at= bottom…

 

Section 1.2:

=
Ø  o  Platform Id=
entity, the mechanism providing trusted identity, can
  • = reassure network managers that the specific devices they ordered=
  • from authorized manufacturers for attachment to their network a= re
  • those that were installed, and that they continue = to be present in
  • their network.  As part of the = mechanism for Platform Identity,
  • cryptographic proof = of the identity of the manufacturer is also
  • provided.=

 

Above is somewhat ambiguous.   When it say= s “the specific devices”, is it talking about device instances<= o:p>

(in the exact serial number or key pair sense), or t= he same models?   I.e., I ordered 3 widgets, and I got=

three widgets (and not three oranges or something el= se).  Is this talking about verifying that they’re

widgets, or that they’re the precise 3 widgets= you’re expecting?   I suspect you mean the latter but it&#= 8217;s not

clear.   Assuming you do mean instances, t= hen knowing that they’re the specific devices that were ordered<= /o:p>

presumes some mechanism for learning the public keys= of the devices ordered, prior to their arrival, and

this should be called out.

 

Section 2.1 discusses the model where the verifier c= ommunicates directly with the attested device.

However, it doesn’t point out the problems wit= h that model, which is that the attested device will see this

as unsolicited inbound communication, and hence and = sort of host firewall-like behavior will prevent the

interrogation from succeeding.    Sec= tion 1.5 already constrains the scope to a very narrow scenario, but

it’s not sufficient, it has to be constrained = further to the scenario where unsolicited inbound communication<= /p>

is permitted.   Allowing unsolicited inbou= nd communication opens up other potential security and privacy

risks that should be discussed in sections 4 and 5.<= o:p>

 

Given the narrowness of the applicability, and the s= ecurity and privacy risks inherent in the model where

the verifier communicates directly with the attested= device, it’s not obvious why this is a good direction

to pursue, especially if there might be alternatives= that are both more broadly applicable, and more secure/private.=

 

I have no objection if there are good reasons, but t= he draft doesn’t yet provide sufficient justification

in my view.

 

Thanks,

Dave=

 

From: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.= org>
Sent: Wednesday, November 6, 2019 12:57 PM
To: Dave Thaler <dthaler= @microsoft.com>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Dave,

  Ok, I suppose the model where the verifier co= mmunicates directly with the attested device is a kind of sub-contracted fu= ll-service background check.  That’s ok with me, as long as no o= ne interprets the diagram as meaning that the relying party must somehow insert itself into the exchange between Verifier and At= tester.

 

  And I see what you mean about lining up the s= cope of RIV.  The draft has gone through a number of changes as weR= 17;ve tried to disentangle it from TCG tribal knowledge.

  I think the scope is set by a couple factors.=

  The doc as written is clearly limited to TPM-= based systems.  That’s certainly not the only way to manage a ro= ot of trust, but it’s the one that’s available on a lot of gear= already, and it’s fairly stable and tightly spec’d.  From= the TCG side, I’d expect there would be interest in extending the ideas = to other TCG roots of trust such as DICE, but it seems that should be drive= n out of TCG.

 

  The limitation to Network Equipment is entire= ly a matter of expedience.  I think the approach would work easily in = other embedded applications, although YANG is likely a fixation only releva= nt to networking guys.  Other domains would presumably need other domain-specific protocols.

 

  I’ll connect with Jessica to see if we = can figure out how to align the name and scope a bit better with the rest o= f the RATS world.

 

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.o= rg>
Sent: Monday, November 4, 2019 3:56 PM
To: Guy Fedorkow <gfedor= kow@juniper.net>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/html/draft-fedork= ow-rats-network-device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools....ietf.org/= wg/nea/ has

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_BYAPR05MB42486C2F0A2A47B626AB2659BA7B0BYAPR05MB4248namp_-- From nobody Fri Nov 8 09:23:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F0DC120880 for ; Fri, 8 Nov 2019 09:23:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ObFwTpDiDXxG for ; Fri, 8 Nov 2019 09:23:12 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 499D012089D for ; Fri, 8 Nov 2019 09:23:11 -0800 (PST) Received: from dooku.sandelman.ca (unknown [209.87.249.16]) by relay.sandelman.ca (Postfix) with ESMTPS id D261B1F452 for ; Fri, 8 Nov 2019 17:23:07 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 77322EB7; Fri, 8 Nov 2019 12:23:07 -0500 (EST) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> References: <28d293be-d9ed-e1d6-17d1-5416399fb856@sit.fraunhofer.de> Comments: In-reply-to Henk Birkholz message dated "Mon, 04 Nov 2019 22:22:31 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Fri, 08 Nov 2019 12:23:07 -0500 Message-ID: <12652.1573233787@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] RIV and the RATS architecture X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Nov 2019 17:23:17 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Henk Birkholz wrote: > we did a "best fit" matching of use cases with the two message flows > "passport" and "back-end", and while it is possible to cluster those > with some... leniency, the goal is to provide the basis for mapping by > using both roles and message flows in the architecture > document. "Passport" and "Back-End" flows really helped to streamline I think that TUDA won't fit into: Passport or Background Check. =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3FpHsACgkQlUzhVv38 QpBfFwf9FNlBz7Q+K1G4ZHORJ/nAa5SvZuf6pLB5LeVBFKTfsoy3mm1EM6IZJuz7 OHbvXwDayySdue7Pm3T3nDAi71NmEFG49v6CpurkinSvNPq4dy7YCQVUWTkjhCS6 vuuukwlt6XR3GWlB2MhC4X281207jLfCyof9GL51K3x79I8t7W5dDiz7V04dn9JK x3LNLibsqQ5lGaERrbtzpgoyutqYZvFDInFyHMNXv4hw9WYbKUfe8POvneGlshl/ mThL2Jt2iHrkle9pUFj3A2QF+GP8fe1dcYKxN1NnY2wq2onMbMnbfNt+kM/Z3HUP UZ3g8h96rfkSIveN2P6/IN+NR1iC0w== =r/yL -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Nov 10 14:20:36 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DED9A1200B5 for ; Sun, 10 Nov 2019 14:20:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=c59HC9Lh; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=Dgghx2hs Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id So-cUYadSqLJ for ; Sun, 10 Nov 2019 14:20:32 -0800 (PST) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E9C7120020 for ; Sun, 10 Nov 2019 14:20:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4788; q=dns/txt; s=iport; t=1573424432; x=1574634032; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=hIMzBULwHHOc0dZj5RqfcWi7thyxVCjAKShq7cAEkGM=; b=c59HC9LhWwcrI2THdeBrIo6yhe2wCJfaN+YHa3N+1AvyX401rJdgFbnd wEl9PxV4hXy0+3Yx0FsyHGWwL5Ik6RTQ52HbsV9vqHqFpIW2tZR4MhKEy quEmOIRNr8Tifw1B4S6A9KgCHPm5H62s6U1r7tG776au6HlazQoDWIpFN o=; IronPort-PHdr: =?us-ascii?q?9a23=3AoRXf9xZ/d1xAlQOP7/jzT93/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20gabRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavsZCU/A8VEW3du/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AJAAC/jMhd/4wNJK1lGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFqBQEBAQELAYFKUAVsWCAECyqEKYNGA4RahhC?= =?us-ascii?q?COSWYAIEugSQDVAkBAQEMAQEYCwoCAQGEQAIXg3kkNAkOAgMLAQEEAQEBAgE?= =?us-ascii?q?FBG2FNwyFUQEBAQECAQEBEAsGEQwBASUHCwEPAgEGAg4KAgIjAwICAiULFAE?= =?us-ascii?q?QAgQBDQUigwABgkYDDiABDo08kGMCgTiIYHWBMoJ+AQEFgkmCQxiCFwmBDig?= =?us-ascii?q?BjAQPGIF/gREnDBOCTD6CYgEBA4FeF4J5MoIskAyFZ5ghCoIlhxeOLRuCPXK?= =?us-ascii?q?Gb49bjkeBQZg1AgQCBAUCDgEBBYFSOYFYcBUaISoBgkEJRxEUkDaDc4UUhT9?= =?us-ascii?q?0AYEnjXsBAQ?= X-IronPort-AV: E=Sophos;i="5.68,290,1569283200"; d="scan'208";a="361195052" Received: from alln-core-7.cisco.com ([173.36.13.140]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 10 Nov 2019 22:20:31 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id xAAMKV6I028392 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 10 Nov 2019 22:20:31 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 16:20:30 -0600 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 17:20:29 -0500 Received: from NAM03-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sun, 10 Nov 2019 16:20:29 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DymO/eh/GG2bX1x8Fu9jBl+tvzgxsoMBAg6LGacSWjoL+WapdaJOXogvaWgQmV0DOdPNA1FCMGZfEqC35xe7EfmOj8QfYibl95J4F9tQz9JxlB+uI6gTXLuR7wb1cOVrcVtojfcR78YW474y7WXdLFinJTDFG2r3fOonk8Xs86JQ5FF+pCAxRB3zFvndLf14PuK/DIdu9R4R2PisJnIVPLtZHyaZ0m+eDcYrSiYT5zJsnaU9riG4GEoX9eU5Y4DM4GDHrKbUUap72EsTjK5zTj7K1sLhphQrYTYob4wufxQ8fe/JHCaqXViaeLMh6wsHjqoaBTK2WnwKgUCze7laOw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hIMzBULwHHOc0dZj5RqfcWi7thyxVCjAKShq7cAEkGM=; b=bZaiz+MfrcgB8u4cN0FZV84zj4o8zZ4AFrs+8qHvMmF0rM3MxhZOtWGP4RtcBB58SEWZN24R0v8uSQIhjgAtrNBdPTTTz5eQS7gkJ91awwBSyx1Fjb4hQqcibuua/pfG7zo/WYvpEPgFoMbi6BHwW3cGVrXJ+uIPtKZPhbrz/+U0qjfOzyOcsFMqz1UPqnnj9Ere9bSLKlGhg3tJ2Aid7pNs+F6GcaWGHreKwh5dF6419aFRGVr0cIogp6z0jSQK8ebh2W9kRox/U4FeTwKh2XujKp2JUU6Ug9e7xVwBZUs5SKOEDNLLBS+eTqnCsRhn3Tp0DvQA+E3+nrmX5iRM0A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hIMzBULwHHOc0dZj5RqfcWi7thyxVCjAKShq7cAEkGM=; b=Dgghx2hssS8q0XVoAT71sN43vWQlCMjlDvTUQvMbzdNqOxmvw61KHHkk/uzhYS9ZNrrrODs/YRebu8U49j3ZXTuof9I9ThiWpvg/0KNbaY5lcYfGLBhwD0slymKmPNAUAWlzOD1DbiwenycVOIVC+loxhq2hth3ZSS8CB+/PgPk= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB1421.namprd11.prod.outlook.com (10.169.234.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Sun, 10 Nov 2019 22:20:27 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2430.027; Sun, 10 Nov 2019 22:20:27 +0000 From: "Nancy Cam-Winget (ncamwing)" To: Laurence Lundblade , Henk Birkholz CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wA Date: Sun, 10 Nov 2019 22:20:27 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> In-Reply-To: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.f.191014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1005::43a] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7f5a3ba0-1779-4aa7-1fe2-08d7662c3067 x-ms-traffictypediagnostic: MWHPR11MB1421: x-ms-exchange-purlcount: 1 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 02176E2458 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(376002)(346002)(396003)(366004)(189003)(199004)(51914003)(5660300002)(14444005)(33656002)(6116002)(256004)(76116006)(91956017)(8936002)(2906002)(66446008)(8676002)(66946007)(66556008)(66476007)(64756008)(81156014)(81166006)(71200400001)(71190400001)(53546011)(6436002)(6246003)(6506007)(25786009)(99286004)(478600001)(36756003)(6486002)(102836004)(6512007)(4326008)(186003)(86362001)(58126008)(76176011)(316002)(6306002)(110136005)(14454004)(2616005)(229853002)(476003)(966005)(7736002)(446003)(11346002)(305945005)(486006)(46003); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1421; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: rH4S8BMSEI4cTXUFYglfxwg+cEealRXbZhMaJEVOI790i1azvSC1ce1aZKikKzA2Vgd9F1AvRwTaAb4HQEQlFQWMry4Ye0sUyWpZYuZnrcRmWF5FeG/GDPx0nOhqo3UITcFoYG3B3bxmwCexbDAnAygeLlu1kf3GyQ03Pzk1ehlfywegkRWXpmO6V+2TNEiZJrydpN0UD4EcxkKmxhzKC2iw3GY1xhnHflc9WOoBBKR6rBi6hZAblfgPSvVsueYIr8tGDeZnt00S20yX+lU1O6K2JNacwUzpmGdZpPsvUhrjPq8Vfn4UuaZ1wK5GlXDmjanMKH3C/4xm9jwuHyRiUnGYH0Zkfv4MSBlFnboJN0lUr/ZbhSId69fQBZQqv+LR2RRKpt/HbBKpBuIdH7Gw+kzwwX59mWWVMQtoFN0UOxHTNc69+yZtwkQ0PyStWF76tSe/oY1owQQ63s5oYg68UWfkKn2imPrAF7mVCgDD91w= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 7f5a3ba0-1779-4aa7-1fe2-08d7662c3067 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2019 22:20:27.0324 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: d90gC7MTmuFh1saEqmUtfDaf57DD6QoHNcUKOCgDqaRTLwwJ3vkCpXvqcCK3JdEW83Qyizet+LePx2PcjCYYGg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1421 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-7.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Nov 2019 22:20:35 -0000 SGksDQpHaXZlbiB0aGUgZmVlZGJhY2ssIGl0IHdhcyBub3RlZCB0aGF0ICJhcyBpcyIsIHRoZSBk cmFmdCBpcyBtb3JlIGFib3V0IFRQTTsgZXJnbyBmb3IgdGhlIGN1cnJlbnQgYWRvcHRpb24sIGl0 IHdvdWxkIGJlIGdvb2QgdG8ganVzdCBjYWxsIGl0IFRQTSBmb3Igbm93Lg0KQnV0IHllcywgb25j ZSBhZG9wdGVkLCBpZiB3ZSBjYW4gYmVnaW4gdG8gdHJhY2sgaXNzdWVzIGFuZCByZXF1ZXN0cyB0 byBoYXZlIGl0IGluY2x1ZGUgb3RoZXIgY2xhaW1zLCB3ZSBjYW4gY2hhbmdlIHRvIGEgbW9yZSBh cHByb3ByaWF0ZSBuYW1lLg0KDQpTbywgTGF1cmVuY2UsIGFyZSB5b3Ugc3RpbGwgT0sgd2l0aCB0 aGUgYWRvcHRpb24gb2YgdGhlIGN1cnJlbnQgZHJhZnQgd2l0aCBhIHJlbmFtZSBmb3Igbm93Pw0K VGhhbmtzLCBOYW5jeQ0KDQrvu79PbiAxMS82LzE5LCAxMjoyNCBQTSwgIlJBVFMgb24gYmVoYWxm IG9mIExhdXJlbmNlIEx1bmRibGFkZSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYg b2YgbGdsQGlzbGFuZC1yZXNvcnQuY29tPiB3cm90ZToNCg0KICAgIEZvciBhIHZlcnNpb24gb2Yg aXQgdGhhdCBjYXJyaWVzIEVBVHMsIHRoZSBjdXJyZW50IG5hbWUsIFlBTkcgTW9kdWxlIGZvciBC YXNpYyBDaGFsbGVuZ2UtUmVzcG9uc2UtYmFzZWQgUmVtb3RlIEF0dGVzdGF0aW9uIFByb2NlZHVy ZXMsIGRyYWZ0LWJpcmtob2x6LXJhdHMtYmFzaWMteWFuZy1tb2R1bGUtMDEgaXMgZmluZSBJTU8u DQogICAgDQogICAgTEwNCiAgICANCiAgICA+IE9uIE5vdiA2LCAyMDE5LCBhdCAxMjoxMCBQTSwg SGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6DQog ICAgPiANCiAgICA+IEFuZCBiYWQgc2VxdWVuY2Ugb2YgcmVwbGllcywgdG9vLi4uDQogICAgPiAN CiAgICA+IERvZXMgdGhhdCBoYXZlIGFuIGltcGFjdCBvbiB0aGUgdGl0bGU/IEkgdGhpbmsgaXQg ZG9lcyBub3QuIExhdXJlbmNlPw0KICAgID4gDQogICAgPiBWaWVsZSBHcsO8w59lLA0KICAgID4g DQogICAgPiBIZW5rDQogICAgPiANCiAgICA+IE9uIDA2LjExLjE5IDIwOjQ0LCBMYXVyZW5jZSBM dW5kYmxhZGUgd3JvdGU6DQogICAgPj4gSSB0aGluayB3ZSBoYXZlIGFjY2VwdGVkIHRoYXQgdGhp cyBXRyB3aWxsIGRvIHN0YW5kYXJkaXphdGlvbiBmb3IgLyBhcm91bmQgdGhlIGZvbGxvd2luZyBh dHRlc3RhdGlvbiB0b2tlbiBmb3JtYXRzIChha2EgYXR0ZXN0YXRpb24gZXZpZGVuY2UgZm9ybWF0 cyk6DQogICAgPj4gICogRUFUIChsb3RzIG9mIGRldGFpbGVkIHdvcmsgaW4gSUVURiB0byBkZWZp bmUpDQogICAgPj4gICAgICBvIEpXVA0KICAgID4+ICAgICAgbyBDV1QNCiAgICA+PiAgICAgIG8g KHBvc3NpYmx5IGFsc28gQVNOLjEgLyBYLjUwOSkNCiAgICA+PiAgKiBUQ0cgKGZpeGVkIHllYXJz IGFnbyBieSB0aGUgVENHKQ0KICAgID4+ICAgICAgbyBUUE0gMS4yIHNpZ25lZCBRdW90ZQ0KICAg ID4+ICAgICAgbyBUUE0gMiBzaWduZWQgQXVkaXQgU2Vzc2lvbg0KICAgID4+IEkgdGhpbmsgYW55 IGNvbnZleWFuY2UgcHJvdG9jb2wgd2Ugd29yayBvbiBNVVNUIGNhcnJ5IGFsbCBvZiB0aGVzZS4g SSBkb27igJl0IHRoaW5rIHRoaXMgaXMgaGFyZC4gSWYgaXQgd2VyZSBoYXJkIEkgd291bGRu4oCZ dCBzYXkgdGhpcy4NCiAgICA+PiBUbyBhZG9wdCB0aGUgWUFORyBtb2R1bGUsIEkgdGhpbmsgaXQg c2hvdWxkIGJlIG1vZGlmaWVkIHRvIGNhcnJ5IEVBVC9KV1QvQ1dUIGFuZCByZXRhaW4gaXRzIG5h bWUuIEl0IGNhbiBzdGlsbCBoYXZlIHRoZSBvdGhlciBUUE0tc3BlY2lmaWMgc3R1ZmYgaW4gaXQg Zm9yIHVzZSB3aGVuIGluIFRQTSBtb2RlLCBidXQgaXQgc2hvdWxkIGhhdmUgYW4gRUFUIG1vZGUg dG9vLg0KICAgID4+IExMDQogICAgPj4+IE9uIE5vdiA1LCAyMDE5LCBhdCAyOjU0IFBNLCBOYW5j eSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbSA8bWFpbHRvOm5jYW13 aW5nQGNpc2NvLmNvbT4+IHdyb3RlOg0KICAgID4+PiANCiAgICA+Pj4gQWxsLA0KICAgID4+PiBU aGFua3MgZm9yIHRoZSBmZWVkYmFjayBhbmQgcmVzcG9uc2VzIHJlY2VpdmVkIHRodXMgZmFyIG9u IHRoZWh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWJpcmtob2x6LXJhdHMt YmFzaWMteWFuZy1tb2R1bGUvDQogICAgPj4+IGRyYWZ0Lg0KICAgID4+PiBUaGVyZSAgd2FzIGNv bnNlbnN1cyB0aGF0IHRoZSBmb2N1cyBvZiB0aGUgZHJhZnQgaXMgbW9yZSBhYm91dCBUUE0gYmFz ZWQgYXR0ZXN0YXRpb25zIHNvIHRoZSBkcmFmdCBzaG91bGQgYmUgbW9kaWZpZWQgYWNjb3JkaW5n bHkuICBBIHN1Z2dlc3RlZCB0aXRsZSB3b3VsZCBiZSDigJxZYW5nIE1vZHVsZSBmb3IgVFBNIGJh c2VkIFJlbW90ZSBBdHRlc3RhdGlvbnPigJ0sIHRoZSBmaWxlLCBvbmNlIGFkb3B0ZWQsIHdvdWxk IGJlIHJlbmFtZWQgdG8gZHJhZiAtcmF0cy10cG0teWFuZy1tb2R1bGUNCiAgICA+Pj4gV2l0aCB0 aGlzIHByb3Bvc2VkIHVwZGF0ZSwgdGhpcyBpcyBhIGNhbGwgZm9yIGFkb3B0aW9uIGZvciB0aGF0 IGRyYWZ0IHdpdGggdGhlIG1vZGlmaWVkIG5hbWUuICBXZSB3b3VsZCBsaWtlIHRvIGNsb3NlIHRo ZSBjb25maXJtYXRpb24gYnkgdGhlIEZyaWRheSBvZiB0aGUgSUVURiAxMDYsIGUuZy4gRnJpZGF5 IE5vdiAyMiBFT0QgKElFVEYgdGltZSkuICBJZiB5b3UgaGF2ZSBvYmplY3Rpb25zIG9uIGFkb3B0 aW5nIHRoZSBkcmFmdCwgcGxlYXNlIHN0YXRlIHlvdXIgcmF0aW9uYWxlIGFzIHdlbGwuDQogICAg Pj4+IFdhcm0gcmVnYXJkcywNCiAgICA+Pj4gICAgICAgICAgICAgICAgIE5hbmN5DQogICAgPj4+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPj4+ IFJBVFMgbWFpbGluZyBsaXN0DQogICAgPj4+IFJBVFNAaWV0Zi5vcmcgPG1haWx0bzpSQVRTQGll dGYub3JnPg0KICAgID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Jh dHMNCiAgICA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xw0KICAgID4+IFJBVFMgbWFpbGluZyBsaXN0DQogICAgPj4gUkFUU0BpZXRmLm9yZw0KICAgID4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KICAgID4gDQogICAg PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4g UkFUUyBtYWlsaW5nIGxpc3QNCiAgICA+IFJBVFNAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KICAgIA0KICAgIF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgUkFUUyBtYWlsaW5nIGxpc3QN CiAgICBSQVRTQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9yYXRzDQogICAgDQoNCg== From nobody Sun Nov 10 14:44:35 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDC361200FD for ; Sun, 10 Nov 2019 14:44:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eAbVAj_f4BbA for ; Sun, 10 Nov 2019 14:44:32 -0800 (PST) Received: from p3plsmtpa08-04.prod.phx3.secureserver.net (p3plsmtpa08-04.prod.phx3.secureserver.net [173.201.193.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73B54120044 for ; Sun, 10 Nov 2019 14:44:32 -0800 (PST) Received: from [192.168.1.80] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id TvwdiEP0sPReBTvwdiHQBZ; Sun, 10 Nov 2019 15:44:32 -0700 From: Laurence Lundblade Message-Id: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_6241C201-BAE3-4BE2-84CB-E0E55579358A" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sun, 10 Nov 2019 14:44:31 -0800 In-Reply-To: Cc: Henk Birkholz , "rats@ietf.org" To: "Nancy Cam-Winget (ncamwing)" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfJGV1EwpNeq54NlHJ9zcbuxeem7xcHoT/ALikSufl9KqPY3jfCwYATkpYXryOva6Wk4javCNhXifrHpdc3n9Uce8lPV+3BTbyWoSGmz9L2JxmEjaH9Q+ 30VwGLOR5o/r97SFjZYiSZwKseMpSm4c6aq6M3/FAX+EeDpDu6uv7/PDhy0yuPs9RcZgIc0PQXGUs/V+/HSQO6ZqtFq2KzUwo4QAJ/c80N3nIcixAS9upd43 KifrDZc3WQdpG6P2CPwocA== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Nov 2019 22:44:34 -0000 --Apple-Mail=_6241C201-BAE3-4BE2-84CB-E0E55579358A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = wrote: >=20 > So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? > Thanks, Nancy I think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. Remote TPM attestations are useful and necessary the short run, but are = of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. Thus, I am opposed to adoption with the current TPM-only draft. I=E2=80=99= d be OK with the current draft and a promise to add EAT to it. LL --Apple-Mail=_6241C201-BAE3-4BE2-84CB-E0E55579358A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com> = wrote:

So, Laurence, are you still OK = with the adoption of the current draft with a rename for now?
Thanks, = Nancy

I = think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night.

Remote TPM attestations are useful and = necessary the short run, but are of very limited capability. I believe = that EAT will replace TPM attestations in the long run (maybe decades) = because they are far more expressive. I know others believe that = too. 

If = we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like.

It seems = relatively simple to add EAT support (or promise to add EAT support). = Pretty sure I heard Henk agree to add it.

Thus, I am opposed to adoption with the = current TPM-only draft. I=E2=80=99d be OK with the current draft and a = promise to add EAT to it.

LL

= --Apple-Mail=_6241C201-BAE3-4BE2-84CB-E0E55579358A-- From nobody Sun Nov 10 16:24:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A8291200E5 for ; Sun, 10 Nov 2019 16:24:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8w3KjQHeb0DZ for ; Sun, 10 Nov 2019 16:24:19 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5271120026 for ; Sun, 10 Nov 2019 16:24:18 -0800 (PST) Received: from [192.168.42.200] (unknown [209.171.88.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id DD69B3897B for ; Sun, 10 Nov 2019 19:21:14 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr+ietf@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> Date: Mon, 11 Nov 2019 08:21:00 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mnVAspA1I8XE4WR9FL75LNPg7Dt1Gixgt" Archived-At: Subject: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 00:24:21 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --mnVAspA1I8XE4WR9FL75LNPg7Dt1Gixgt Content-Type: multipart/mixed; boundary="eP8MbhcZqm3Op6sEY01aE6yliq7gPausG"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> Subject: clarity on JWT vs YANG-serialization: base64 vs base64url References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> In-Reply-To: --eP8MbhcZqm3Op6sEY01aE6yliq7gPausG Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US When it comes to JWT encapsulation and YANG serialized JSON there are some potential conflicts that I want to bring up.=C2=A0 This is worth a 5= minute discussion at a future meeting (perhaps premature for IETF106). I've posted about this to other lists in the past two weeks, but I don't have the references, and I don't have enough Internet to look them up from here. The specific conflict is that JWT, coming from the web space, uses base64URL encoding for binary objects (signatures..., etc.) while YANG, uses base64 encoding for binary objects.=C2=A0 This is a documentation annoyance, but it will catch at least one implementer. Tolerant decoders might accept both (but neither Python or Ruby base64 decoders are tolerant), but I don't think we can in general, demand that either is acceptable, so we have to say which to use each time. We will just have to be clear going forward, and hit people over the head with this.=C2=A0 I can easily see YANG described data (signatures on= Evidence) from a TPM device being base64 encoded, and then placed into a JWT container which is base64URL signed (for a Claim). --eP8MbhcZqm3Op6sEY01aE6yliq7gPausG-- --mnVAspA1I8XE4WR9FL75LNPg7Dt1Gixgt Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3IqWwACgkQcAKuwszY gEOOMwv/XJ0LO7zrDTcNmAjv85e3EQpnbtHdTht72NXrUzl98YicPGh14O5Of96h 0iujvhvfVs53n/T/x7hcnsL3ciFQdUSHtiXmFXlGLS3jv7E+cyZ1+WgxeNrfJfHO 6QYdk+x9778WpwwjDoJVsWhmeMQMofypnsB7/806cYvbyidvvbRNsv+M6sYgP0JZ PlbAgqynZIdRzBXfNR7ZNqvEC0QoAM+ZR6VszLYMdJhDQXipDRjsQYSF3y/wliY7 Sq6UL+Us4oaqmY5S4CCIIhNg4pQy6OQv65SCVRUJ5c+z/LZGjM7RGibpsyToMCPu 8Ff+wWomByufm8PeR12/L4/cUxY9UFS1mPFu9qmu5eFhG9Bv5krIfdBA0YRiU4s3 Z5F8NP06/aN0OdlMUKP8Y5IOotWZYa1lIKu46hWrCpg+ElbqhwWEKhYgi040wxgE H84PeCQdfFGF+fIdVDqFaW8PsUs8gEGybI7hT56ms3WqYxFcITuCosqhDzIHuHTJ 6ofsQUh0 =R82/ -----END PGP SIGNATURE----- --mnVAspA1I8XE4WR9FL75LNPg7Dt1Gixgt-- From nobody Sun Nov 10 21:20:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9361C120147 for ; Sun, 10 Nov 2019 21:20:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SORBS_WEB=1.5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fYpJPFbhhfNu for ; Sun, 10 Nov 2019 21:20:51 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2522120043 for ; Sun, 10 Nov 2019 21:20:51 -0800 (PST) Received: from [192.168.42.200] (unknown [209.171.88.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 0F4BB3897C for ; Mon, 11 Nov 2019 00:17:30 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr+ietf@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: Date: Mon, 11 Nov 2019 13:20:28 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="JxUAy0MK9funrG3oWmuEieN7zmookGuEb" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 05:20:54 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --JxUAy0MK9funrG3oWmuEieN7zmookGuEb Content-Type: multipart/mixed; boundary="lVmBW6b570IXPnMourIVwmJacdLsBKQaa"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> In-Reply-To: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> --lVmBW6b570IXPnMourIVwmJacdLsBKQaa Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US On 2019-11-11 6:44 a.m., Laurence Lundblade wrote: > >> On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) >> > wrote: >> >> So, Laurence, are you still OK with the adoption of the current draft >> with a rename for now? >> Thanks, Nancy You suggested the name: =E2=80=9CYang Module for TPM based Remote Attestations=E2=80=9D But, I think that it should say instead, "Yang Interface to TPM 2.0" > > I think the value add to the larger RATS effort of adding EAT support > to this YANG protocol is really high. It a core thing to do that helps > bring together the two attestation worlds and make the TPM and EAT > work here less like ships in the night. Can you explain what it would mean to add EAT support for a YANG module? Maybe I'm daft here. The current document is essentially a YANG wrapper around the TPM 2.0 specification.=C2=A0 It's RPC, data in motion. While EAT is primary a JWT/CWT object, which is data-at-rest. I think that you are looking for a way to express non-TCG defined evidence containers. --lVmBW6b570IXPnMourIVwmJacdLsBKQaa-- --JxUAy0MK9funrG3oWmuEieN7zmookGuEb Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3I75wACgkQcAKuwszY gEOujgv9GiGuSPcrcWwkG669Hhwg/8ASvgMf7BEShDkzAb7tbgCo/ma2go3jadyJ NtTwrcdJT4WnwmZDe8DVgaFPMkNkZ8nLmeywA8BJ3FLvJ6JJhwqgknJ6IA0aDojo WMEK/ykKYUSyZ63BgerpQvSbS1/2UWmlW39Db6O4sibfrFOvYZVRiykZTv7cPsi1 /IiP1AYlx9xeOxCKPBGeNBBuy8x415+oeSKdHrz5FFpJv25mErs+jLrJJ1J0DQmk mheFTlsm08groLds9NSMdgSDgpp7L/8oj+OyoM0/Nm+SGJ7YqgWT8B2/Ix1pXZq6 JSPCzfi4/bBxlNjPkqDSixb5R5bJaBRJyXvSF/+BkxcsVrOiad0JbWRFGxd3p/n/ QZCGdF0f3xIWWN7M3K8I2qqDwlm1SyNjSXhyaZ7Nj7YKW8Z4vH7tWBQNX/PIr58Q YphLY8x4s5oI01ELLSB21atbWwCkWDABz8eqUKDoMR9/bcSBHj/huaGqczgWU/xx 5U1YFT2f =TtM/ -----END PGP SIGNATURE----- --JxUAy0MK9funrG3oWmuEieN7zmookGuEb-- From nobody Sun Nov 10 21:40:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 086C71200E9 for ; Sun, 10 Nov 2019 21:40:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=GFhNMq/J; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=oWQ74M2c Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YhljpkllqlKI for ; Sun, 10 Nov 2019 21:40:06 -0800 (PST) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4F99120018 for ; Sun, 10 Nov 2019 21:40:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3178; q=dns/txt; s=iport; t=1573450805; x=1574660405; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=cfkitWjqOvA5SvRzbL/hW3Qsap0lVgxlOiNv2kj2eTw=; b=GFhNMq/Jv09aojPqPS7OUg2TrEVnimHObSCiKLM4K/+Ac0FqVuVA9p7j 0SxQ+jJ2zaOHfMlkJINi+zZhxpYlAqJ7rnSrFEh1fCU6vP1s2VGhwJJLg BJ68j9rA+ABFhr1Atf68tHHEiA+QMSoAEifLkbSxqUoZnWsu3UVD8xewT 8=; IronPort-PHdr: =?us-ascii?q?9a23=3A+XHnTx/Yo4a+lv9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+8ZR7E/fs4iljPUM2b8P9Ch+fM+4HYEW0bqdfk0jgZdYBUER?= =?us-ascii?q?oMiMEYhQslVciOAEjkLfjlRyc7B89FElRi+iLzPA=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BzAADb88hd/5ldJa1lGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBawUBAQELAYFKUAWBRCAECyqEKYNGA4psToFrJZgAgS6?= =?us-ascii?q?BJANUCQEBAQwBAS0CAQGEQAIXg3kkNQgOAgMLAQEEAQEBAgEFBG2FNwyFUQE?= =?us-ascii?q?BAQECARILBhEMAQE4DwIBCBgCAiMDAgICMBQBEAIEARIigwCCRwMOIAGecAK?= =?us-ascii?q?BOIhgdYEygn4BAQWCSYJCGIIXCYEOKAGMBA8YgX+BEScME4JMPoRFF4J5MoI?= =?us-ascii?q?skAyFZ5ghCoIllUQbmXmOR5l2AgQCBAUCDgEBBYFUAzSBWHAVZQGCQVARFJA?= =?us-ascii?q?2DBeDUIpTdIEojW0BAQ?= X-IronPort-AV: E=Sophos;i="5.68,291,1569283200"; d="scan'208";a="361031547" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 11 Nov 2019 05:40:03 +0000 Received: from XCH-ALN-014.cisco.com (xch-aln-014.cisco.com [173.36.7.24]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id xAB5e1lu018827 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 11 Nov 2019 05:40:02 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-ALN-014.cisco.com (173.36.7.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 23:40:00 -0600 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Sun, 10 Nov 2019 23:40:00 -0600 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Sun, 10 Nov 2019 23:40:00 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CagMkdqNw2rEyeCswLkyD5VDLIjTekD1XsxhkS/5RSABsZ08KP6l1hZ0/0w6Feh9zHEuwLkBpdRyIJWkFF48mytJGSD6jUCYvozdIb6CBpYjRVgQfhFRKcTSHOlCUZoYAkf70XiRLtrOUvEy6kUGjVdsmnfkT+QkIGQaCPAECtBHh2BIAW7BLbe0j01nz8rntDpeaCX4LPHAdSuAFDH2lRJv7uT5HYfSmyA22TuUDv7GxE4INmDv4QM2ODa7ZG6422dXlHsqzLl2C+aW0F3xG2W90dWQ2eabL+NitVICMBo91xieXflWn8oo3SRlcCWeJnkqImxqZNmJBmAXUCur1Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cfkitWjqOvA5SvRzbL/hW3Qsap0lVgxlOiNv2kj2eTw=; b=l5soqJ2ndnTS97MvA0B6afIMN1Hr5ypehG66VFqSeKJbLH7lzxZaWzWH4Xv0b0tu2QoUreRbzSJaoSfIhVZymYyXWiKz2nP+RXegn0cyGBPUIyUPrqWq+k3UIefp4WcqFeiuWoxzyFcfGP9wEiIT10AqacEQ740Bu523zMAz3pHCQA7BYLt1ExqtU6BqS7keGwRpxfDUORrnR6WWrb54FLDET+Y+qHnRsUIJchA8ODf7eHzGVXMUs4zJKpF5FrnZGF7RFsyb7lGj13CAnt8g7li2qqUtqkw+FrDdVcrTtha8e58qXQIez6YTo6YFkvZmovlyERrUatCNd0qT45HK/g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cfkitWjqOvA5SvRzbL/hW3Qsap0lVgxlOiNv2kj2eTw=; b=oWQ74M2ce2jJtORQCyTpm8MFYNkiNRJWq7nVeYxodnFdveLaEQXcN0aRHUqqMpBX3b9U1Bgdn946W2Q3Ew891hUSaMXC4mp2WMbRvSTPg0lnPzgPn7lSnyzKx/cifoGhp69zTtGem0KnBl7mpT2r+/AGrz28VpP7EnU38AzbQUE= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB0045.namprd11.prod.outlook.com (10.164.204.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.26; Mon, 11 Nov 2019 05:39:59 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2430.027; Mon, 11 Nov 2019 05:39:59 +0000 From: "Nancy Cam-Winget (ncamwing)" To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAG6hAP//f1YA Date: Mon, 11 Nov 2019 05:39:58 +0000 Message-ID: <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.f.191014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:c0c8:1005::43a] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fb0b8218-823f-4214-9ce9-08d76669972b x-ms-traffictypediagnostic: MWHPR11MB0045: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0218A015FA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(396003)(376002)(136003)(39860400002)(346002)(51444003)(189003)(199004)(4001150100001)(46003)(99286004)(102836004)(76176011)(6506007)(186003)(110136005)(53546011)(58126008)(2906002)(66476007)(316002)(6116002)(2501003)(7736002)(305945005)(91956017)(76116006)(66946007)(33656002)(71190400001)(71200400001)(25786009)(256004)(6246003)(14454004)(8676002)(8936002)(81156014)(81166006)(6436002)(86362001)(478600001)(6486002)(5660300002)(66556008)(64756008)(446003)(66446008)(11346002)(486006)(476003)(2616005)(229853002)(36756003)(6512007); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB0045; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: sStiVLiI45PEcY2KxbeJpLmFLQwMbBDbsjmfRbLTuEHm9/XeTiQrVRcevXtjZv8055yOT7DSkKky4W/sYAjH9IYniSg50M8LKMYiOmdyliT83Xkh9VPWs5M7WN/+pOezSZxsC18AzbhHhJ5lOJCAuBWx+VobbinctN5gkzq9IW7457y659EnxFiQH/YfnI+PFglmK6jI3G+vuvCw2VQ6gYGGAvVNRJFRIBoi0lMALkc3sbqs/AOcyu/gSKg08fUHXark0z+iZuCFyZQq0SoOnUJ/u8eG+WkG5DmxvqVNWT1sNmAHPbFi4ZgwzoLFVIdw/ZS7cihBzS/cdTXD5CXDbK7cJuv3B/pIF1jSLQ5QrtHuK+LrF3I7VK9jKTx3z+gM8ERGrQ9veV4BhCxm7p2M47/p2bCQJlGCiwE48eCwrI2wDzhv4fQ/cXHecc5MOFqE x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <7C5F6586C0F55D45A9ADF785BA9D20DA@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: fb0b8218-823f-4214-9ce9-08d76669972b X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2019 05:39:58.8842 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Cr2EfXCHLlk/hZGVwJWrcAzXnuH+QdCbzhFarACBuaLtua5QMe7QlVa3ZwOiB+DI0iMrt1b1Sl/uC8XI3iMvMA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB0045 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.24, xch-aln-014.cisco.com X-Outbound-Node: rcdn-core-2.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 05:40:08 -0000 SGkgTWljaGFlbCwNClNlZSBjb21tZW50cyBiZWxvdzoNCg0K77u/T24gMTEvMTAvMTksIDk6MjEg UE0sICJSQVRTIG9uIGJlaGFsZiBvZiBNaWNoYWVsIFJpY2hhcmRzb24iIDxyYXRzLWJvdW5jZXNA aWV0Zi5vcmcgb24gYmVoYWxmIG9mIG1jcitpZXRmQHNhbmRlbG1hbi5jYT4gd3JvdGU6DQoNCiAg ICANCiAgICANCiAgICBPbiAyMDE5LTExLTExIDY6NDQgYS5tLiwgTGF1cmVuY2UgTHVuZGJsYWRl IHdyb3RlOg0KICAgID4NCiAgICA+PiBPbiBOb3YgMTAsIDIwMTksIGF0IDI6MjAgUE0sIE5hbmN5 IENhbS1XaW5nZXQgKG5jYW13aW5nKQ0KICAgID4+IDxuY2Ftd2luZ0BjaXNjby5jb20gPG1haWx0 bzpuY2Ftd2luZ0BjaXNjby5jb20+PiB3cm90ZToNCiAgICA+Pg0KICAgID4+IFNvLCBMYXVyZW5j ZSwgYXJlIHlvdSBzdGlsbCBPSyB3aXRoIHRoZSBhZG9wdGlvbiBvZiB0aGUgY3VycmVudCBkcmFm dA0KICAgID4+IHdpdGggYSByZW5hbWUgZm9yIG5vdz8NCiAgICA+PiBUaGFua3MsIE5hbmN5DQog ICAgDQogICAgWW91IHN1Z2dlc3RlZCB0aGUgbmFtZToNCiAgICANCiAgICDigJxZYW5nIE1vZHVs ZSBmb3IgVFBNIGJhc2VkIFJlbW90ZSBBdHRlc3RhdGlvbnPigJ0NCiAgICANCiAgICBCdXQsIEkg dGhpbmsgdGhhdCBpdCBzaG91bGQgc2F5IGluc3RlYWQsICJZYW5nIEludGVyZmFjZSB0byBUUE0g Mi4wIg0KW05DV10gVGhhdCBpcyBhIGZhaXIgcG9pbnQuLi4uLm15IHBvaW50IGlzIHRoYXQgaXQg c2hvdWxkIGJlIG5hbWVkIHRvIHJlZmxlY3QgY29yZSBvZiBkZXNjcmlwdGlvbiB3aGljaCBpcyBi YXNlZCBhcm91bmQgVFBNcy4NCiAgICANCiAgICA+DQogICAgPiBJIHRoaW5rIHRoZSB2YWx1ZSBh ZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBhZGRpbmcgRUFUIHN1cHBvcnQNCiAgICA+ IHRvIHRoaXMgWUFORyBwcm90b2NvbCBpcyByZWFsbHkgaGlnaC4gSXQgYSBjb3JlIHRoaW5nIHRv IGRvIHRoYXQgaGVscHMNCiAgICA+IGJyaW5nIHRvZ2V0aGVyIHRoZSB0d28gYXR0ZXN0YXRpb24g d29ybGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVBVA0KICAgID4gd29yayBoZXJlIGxlc3MgbGlr ZSBzaGlwcyBpbiB0aGUgbmlnaHQuDQogICAgDQogICAgQ2FuIHlvdSBleHBsYWluIHdoYXQgaXQg d291bGQgbWVhbiB0byBhZGQgRUFUIHN1cHBvcnQgZm9yIGEgWUFORyBtb2R1bGU/DQogICAgTWF5 YmUgSSdtIGRhZnQgaGVyZS4NCltOQ1ddLiBIbW1tLCBJIGRpZCBOT1Qgc3RhdGUgdGhhdD8gIEkg dGhpbmsgdGhhdCB3YXMgTGF1cmVuY2UuICBJIHZpZXcgRUFUIGFzIGRlZmluaW5nIGNsYWltcyB0 aGF0IHVzZSAgSldUL0NXVCBkYXRhIHN0cnVjdHVyZXMuDQpJZiB0aGVyZSBhcmUgY2xhaW1zIChu b3QgZm9ybWF0KSB0aGF0IGNhbiBiZSByZXByZXNlbnRlZCBpbiBZYW5nLCB0aGVuIHllcyAoYW5k IEkgdGhpbmsgc29tZSBjYW4pLiAgQnV0IHRoZSAiZ2VuZXJhbCBFQVQiLCBJJ20gbm90DQpzdXJl IGhvdyB0aG9zZSBzdHJ1Y3R1cmVzIG1hcCB0byB0aGUgVFBNIGludGVyZmFjZXMuLi5idXQgdGhl eSBjZXJ0YWlubHkgY291bGQgYmUgcmVwcmVzZW50ZWQgaW4gWUFORy4NCiAgICANCiAgICBUaGUg Y3VycmVudCBkb2N1bWVudCBpcyBlc3NlbnRpYWxseSBhIFlBTkcgd3JhcHBlciBhcm91bmQgdGhl IFRQTSAyLjANCiAgICBzcGVjaWZpY2F0aW9uLiAgSXQncyBSUEMsIGRhdGEgaW4gbW90aW9uLg0K ICAgIA0KICAgIFdoaWxlIEVBVCBpcyBwcmltYXJ5IGEgSldUL0NXVCBvYmplY3QsIHdoaWNoIGlz IGRhdGEtYXQtcmVzdC4NCiAgICBJIHRoaW5rIHRoYXQgeW91IGFyZSBsb29raW5nIGZvciBhIHdh eSB0byBleHByZXNzIG5vbi1UQ0cgZGVmaW5lZA0KICAgIGV2aWRlbmNlIGNvbnRhaW5lcnMuDQpb TkNXXSBJJ20gbm90IHN1cmUgd2h5IHRoZXNlIG9iamVjdCB3b3VsZCBiZSBkYXRhLWF0LXJlc3Q/ ICBJIHZpZXcgdGhlbSBhcyBjbGFpbXMgcmVwcmVzZW50ZWQgaW4gc3BlY2lmaWMgc3RydWN0dXJl cywgZS5nLiBKV1QvQ1dUDQpCdXQgY2FuIGJlIHRyYW5zcG9ydGVkIHVzaW5nIGFueSB0cmFuc3Bv cnQgKGUuZy4gVExTLCBldCBhbCkuLi4uc2ltaWxhciB0byBZQU5HPyAgDQpXaGlsZSBpdCBpcyB0 cnVlIHRoYXQgdGhlIFlBTkcgZHJhZnQgYWxzbyBleHBvc2VzIHRoZSBUUE0gaW50ZXJmYWNlLCBp dCBhbHNvIGNvbnRhaW5zIHRoZSBjbGFpbXMgYWxiZWl0IHRoYXQgYXJlIFRQTSBzcGVjaWZpYy4N ClNvIHBlcmhhcHMgeW91IGFyZSByZWZlcnJpbmcgdG8gdGhlIGludGVyZmFjZSBhc3BlY3Q/DQoN CkJlc3QsIE5hbmN5DQogICAgDQogICAgDQogICAgDQogICAgDQoNCg== From nobody Sun Nov 10 23:20:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E19B120814 for ; Sun, 10 Nov 2019 23:20:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1QMcti0cAcLE for ; Sun, 10 Nov 2019 23:20:40 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-ve1eur03on0721.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe09::721]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 293EE1207FD for ; Sun, 10 Nov 2019 23:20:39 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NUG2jrSjs3HdktDQRvlnbXOT6+UnJEu6H1Zk3Oq7nTv6Z+Yhku/tyhHR0yODwzJTFf8UXM77ByRtKmgmTDKzpAER16LP22OB0WFRhW80s4UPKFr+5fo3BJpKHUx6dBjIt1zxORH8dVj++8Vqifm0citKeXY9eLRmvG5UWrmqgSj6p0DTro0DsGdNpJ1buHQgMg+g8TJFHulG72I34S+48tblCgFEvZoG3Jn55Xbn9WgM5FK44rAKcdHoO5OKBLfI8FNqPXUo922jz4MsmEM8/+Ud7u6szBNJz2PvHy7BafdXvF6U82jLdfzVGPqc/noJCz3152/g2IuyKA2+aBGfsA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q60LDRat4zvmBbx1y1drKXA4+WL34xOBEUlG/8GXxPA=; b=ENjwaiNhbbuJMIbiA6X+OHy1IH3fs4MR3qxP8VN46r75JjJSyxXSAQZ5WOEP0mrU/FzARRKb6R06jLhwTvbOFtkakGEunYkTUPbXvdPwtT0j7a4uaz3HizYuBRxXT50ffano3gj72sfNdPnhkGrlo2FIrPNhKZtYlwradsiXVYJ3i0OY0wxICcaNLXHcaq7TP6EUw6ZEeU6bceBC4Tj3r6WJHnh7+4jt1ONeugrfTf+e+VrTKQsKmiOIoTOM+afZuvs9A7s0n1Mm3hT9RY2W3ffFqMmOiHNJemcRXar2UyBW1xYO/Fc1n/PyNeIRdHSfxpMESJ+dRyTd6g8NP+yb+w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia-bell-labs.com; dmarc=pass action=none header.from=nokia-bell-labs.com; dkim=pass header.d=nokia-bell-labs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q60LDRat4zvmBbx1y1drKXA4+WL34xOBEUlG/8GXxPA=; b=F/E2amZxCvmiIOCDqfxxMIQxItWvQHjOSiVqep9BbCgeQplf0F5Qnkd7gApwZBORiwmKbHrNEXjbm9USlSh8vWXnPn6AaMo+hayaliVl1wDlMUoBezq/p8kMtp+Q7pI2C6Icorv1QWgjOr6VkWZ6P4gqb+n2dI8a2poQqDEwp1Y= Received: from HE1PR0702MB3753.eurprd07.prod.outlook.com (10.167.126.155) by HE1PR0702MB3627.eurprd07.prod.outlook.com (10.167.126.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.20; Mon, 11 Nov 2019 07:20:37 +0000 Received: from HE1PR0702MB3753.eurprd07.prod.outlook.com ([fe80::5ec:cc84:1ba5:85aa]) by HE1PR0702MB3753.eurprd07.prod.outlook.com ([fe80::5ec:cc84:1ba5:85aa%7]) with mapi id 15.20.2451.018; Mon, 11 Nov 2019 07:20:37 +0000 From: "Oliver, Ian (Nokia - FI/Espoo)" To: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmCZhwkNjt4UVOEO6clkLOyiEfKeFkBjG Date: Mon, 11 Nov 2019 07:20:37 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> , <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> In-Reply-To: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=ian.oliver@nokia-bell-labs.com; x-originating-ip: [131.228.2.25] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 542f2498-ef0f-4e21-fe5d-08d76677a650 x-ms-traffictypediagnostic: HE1PR0702MB3627: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0218A015FA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(136003)(396003)(366004)(39860400002)(376002)(189003)(199004)(53546011)(229853002)(54896002)(9686003)(55016002)(6436002)(236005)(66066001)(7696005)(76176011)(102836004)(6506007)(2906002)(86362001)(71190400001)(71200400001)(3846002)(6116002)(186003)(486006)(11346002)(256004)(446003)(476003)(6246003)(66476007)(26005)(66446008)(64756008)(66556008)(4326008)(105004)(25786009)(54906003)(81156014)(76116006)(99286004)(74316002)(7736002)(8676002)(81166006)(5660300002)(14454004)(110136005)(52536014)(8936002)(478600001)(33656002)(316002)(66946007)(19627405001); DIR:OUT; SFP:1102; SCL:1; SRVR:HE1PR0702MB3627; H:HE1PR0702MB3753.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; received-spf: None (protection.outlook.com: nokia-bell-labs.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kOv/+xTu0zJmgkVdsEZSq3eOt81Ch1ssQ8Q0gWBUUUkLiWaQ1r1Yuc7bFJV31umc7g8WHGgAEqUXCk76aeyBgnkGG+NXYXY8LGlziU9MeH3HXH1UDW02ZU/cuO78p84pJR1U/EiDd0RpNWi5VxRQAs9zpTPas4afV38X5h21IZxsOnTyzn8qJ+Le3Y+NK1SMK1+8ZGwsiIREa6hEQ9ZtkcWuwtWH8YuK2FuvKAoJU7N0XGH1izj1uYDutAnahEP9pfTE3fB+LlrvtRunwsLdzEB8lpntO34plWcxm7jafLaSfuFPpoQ4Z4cQ5fw4N5+vpysdBuDo230VUFQ0PcTxzuih5noKyNPFg9gSu0x708OxAviWBtdgaE21AHqE0b8tyVyz6kUFDmlnE1KNOzFO2KU2jjvZf5AVoK3nYVT7ybljmYdCXs+4iWdYLngeX9AS x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR0702MB375366C5F7FE5C497C35D73B8F740HE1PR0702MB3753_" MIME-Version: 1.0 X-OriginatorOrg: nokia-bell-labs.com X-MS-Exchange-CrossTenant-Network-Message-Id: 542f2498-ef0f-4e21-fe5d-08d76677a650 X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2019 07:20:37.1582 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: FVjlKnr51ixDe0GiIfYMxOK+RVjOsWqlVVd9sLkpFHBnMN3PCQZdsrHgQW6XIAJSkSOPkWnYs3IGrb8j6B7OhgoPRsxDkt8MXE7vjo22I8s= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0702MB3627 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 07:20:43 -0000 --_000_HE1PR0702MB375366C5F7FE5C497C35D73B8F740HE1PR0702MB3753_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable > Remote TPM attestations are useful and necessary the short run, but are o= f very limited capability. I believe that > EAT will replace TPM attestatio= ns in the long run (maybe decades) because they are far more expressive. I = know > others believe that too. I would disagree with the statement of "short run" ... TPM is practically t= he only existing standardised (hardware, software, firmware, measurement - = x86 only etc) hardware root of trust in common use, ie: practically all x86= machines, The attestation mechanisms provided are going to be around for = a very long time. >From telco experience, 30 years ago we said SS7 would only be around in the= short term. > Thus, I am opposed to adoption with the current TPM-only draft. I=92d be = OK with the current draft and a promise > to add EAT to it. Agree Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Laurence Lundblade Sent: 11 November 2019 00:44 To: Nancy Cam-Winget (ncamwing) Cc: Henk Birkholz ; rats@ietf.org Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module = draft On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) > wrote: So, Laurence, are you still OK with the adoption of the current draft with = a rename for now? Thanks, Nancy I think the value add to the larger RATS effort of adding EAT support to th= is YANG protocol is really high. It a core thing to do that helps bring tog= ether the two attestation worlds and make the TPM and EAT work here less li= ke ships in the night. Remote TPM attestations are useful and necessary the short run, but are of = very limited capability. I believe that EAT will replace TPM attestations i= n the long run (maybe decades) because they are far more expressive. I know= others believe that too. If we don=92t include EAT in the YANG mode it is sort of like defining HTTP= to only convey HTML to the exclusion of PDF. We=92re defining an attestati= on protocol that can only move one kind of attestation even though we have = consensus on what the other one looks like. It seems relatively simple to add EAT support (or promise to add EAT suppor= t). Pretty sure I heard Henk agree to add it. Thus, I am opposed to adoption with the current TPM-only draft. I=92d be OK= with the current draft and a promise to add EAT to it. LL --_000_HE1PR0702MB375366C5F7FE5C497C35D73B8F740HE1PR0702MB3753_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
> Remote TPM attestations are useful and necessary the short run, b= ut are of very limited capability. I believe that > EAT will replace TPM= attestations in the long run (maybe decades) because they are far more exp= ressive. I know > others believe that too. 

I would disagree with the statement of "short run" ... TPM i= s practically the only existing standardised (hardware, software, firmware,= measurement - x86 only etc) hardware root of trust in common use, ie: prac= tically all x86 machines,  The attestation mechanisms provided are going to be around for a very long time. 

From telco experience, 30 years ago we said SS7 would only be around i= n the short term.

> Thus, I am opposed to adoption with the current TPM-only draft. I= =92d be OK with the current draft and a promise > to add EAT to it.

Agree

Ian

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237


From: Laur= ence Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf= .org <rats@ietf.org>
Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft
 
On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) &l= t;ncamwing@cisc= o.com> wrote:

So, Laurence, are you still OK with the adoption of the current draft with a r= ename for now?
Thanks, Nancy

I think the value add to the larger RATS effort of adding E= AT support to this YANG protocol is really high. It a core thing to do that= helps bring together the two attestation worlds and make the TPM and EAT w= ork here less like ships in the night.

Remote TPM attestations are useful and necessary the short = run, but are of very limited capability. I believe that EAT will replace TP= M attestations in the long run (maybe decades) because they are far more ex= pressive. I know others believe that too. 

If we don=92t include EAT in the YANG mode it is sort of li= ke defining HTTP to only convey HTML to the exclusion of PDF. We=92re defin= ing an attestation protocol that can only move one kind of attestation even= though we have consensus on what the other one looks like.

It seems relatively simple to add EAT support (or promise t= o add EAT support). Pretty sure I heard Henk agree to add it.

Thus, I am opposed to adoption with the current TPM-only dr= aft. I=92d be OK with the current draft and a promise to add EAT to it.

LL

--_000_HE1PR0702MB375366C5F7FE5C497C35D73B8F740HE1PR0702MB3753_-- From nobody Mon Nov 11 01:57:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 818F512080F for ; Mon, 11 Nov 2019 01:57:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3LL_l7kIowWv for ; Mon, 11 Nov 2019 01:57:49 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64E4112081F for ; Mon, 11 Nov 2019 01:57:47 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAB9vcia016321 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 11 Nov 2019 10:57:39 +0100 Received: from [134.102.155.87] (134.102.155.87) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 11 Nov 2019 10:57:33 +0100 To: "Nancy Cam-Winget (ncamwing)" , Michael Richardson , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> From: Henk Birkholz Message-ID: <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> Date: Mon, 11 Nov 2019 10:57:32 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.155.87] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 09:57:53 -0000 Hi all, on one hand, we have to address the overlap between YANG and EAT information elements (statements & Claims) and how to deal with them (one obvious issue, for example, would be potential redundant information model content in two different drafts). On the other hand, Laurence's original point was the payload of conveyance protocols used by RATS. Specializations of this topic are apparently: * Web Tokens via YANG Interfaces, and * YANG modeled data via other conveyance protocols (other than *CONF) that can transport Web Tokens. There are examples of how YANG modeled data is used outside of *CONF protocols, for example MUD. We have to understand and agree about: * this is possible on a technical level, and * this is useful wrt to protocol scope, intent & semantics, I think. This is one items of the 5 minutes slot I gave back. And I am happy to see this on the list. Viele Grüße, Henk On 11.11.19 06:39, Nancy Cam-Winget (ncamwing) wrote: > Hi Michael, > See comments below: > > On 11/10/19, 9:21 PM, "RATS on behalf of Michael Richardson" wrote: > > > > On 2019-11-11 6:44 a.m., Laurence Lundblade wrote: > > > >> On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) > >> > wrote: > >> > >> So, Laurence, are you still OK with the adoption of the current draft > >> with a rename for now? > >> Thanks, Nancy > > You suggested the name: > > “Yang Module for TPM based Remote Attestations” > > But, I think that it should say instead, "Yang Interface to TPM 2.0" > [NCW] That is a fair point.....my point is that it should be named to reflect core of description which is based around TPMs. > > > > > I think the value add to the larger RATS effort of adding EAT support > > to this YANG protocol is really high. It a core thing to do that helps > > bring together the two attestation worlds and make the TPM and EAT > > work here less like ships in the night. > > Can you explain what it would mean to add EAT support for a YANG module? > Maybe I'm daft here. > [NCW]. Hmmm, I did NOT state that? I think that was Laurence. I view EAT as defining claims that use JWT/CWT data structures. > If there are claims (not format) that can be represented in Yang, then yes (and I think some can). But the "general EAT", I'm not > sure how those structures map to the TPM interfaces...but they certainly could be represented in YANG. > > The current document is essentially a YANG wrapper around the TPM 2.0 > specification. It's RPC, data in motion. > > While EAT is primary a JWT/CWT object, which is data-at-rest. > I think that you are looking for a way to express non-TCG defined > evidence containers. > [NCW] I'm not sure why these object would be data-at-rest? I view them as claims represented in specific structures, e.g. JWT/CWT > But can be transported using any transport (e.g. TLS, et al)....similar to YANG? > While it is true that the YANG draft also exposes the TPM interface, it also contains the claims albeit that are TPM specific. > So perhaps you are referring to the interface aspect? > > Best, Nancy > > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 11 02:11:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C94B12082E for ; Mon, 11 Nov 2019 02:11:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UyGsVsCe3wBC for ; Mon, 11 Nov 2019 02:11:26 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3F27120059 for ; Mon, 11 Nov 2019 02:11:26 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xABABNOx016999 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 11 Nov 2019 11:11:24 +0100 Received: from [134.102.155.87] (134.102.155.87) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 11 Nov 2019 11:11:18 +0100 To: Michael Richardson , References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> From: Henk Birkholz Message-ID: Date: Mon, 11 Nov 2019 11:11:18 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.155.87] Archived-At: Subject: Re: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 10:11:30 -0000 Hi Michael, you are bringing up an issue that might look tiny, but I think you are right when you say: "it will catch at least one implementer". And there is no easy fix for his, it seems? JWT is set, and YANG modeled data, such as RFC 7951, is also set. I am not sure that there is a thing such as "tolerant decoders" in practice, I am afraid. In summary, as a last resort I'd agree with you that we need to "hit people over the head with this", extensively. Viele Grüße, Henk On 11.11.19 01:21, Michael Richardson wrote: > > When it comes to JWT encapsulation and YANG serialized JSON there are > some potential conflicts that I want to bring up.  This is worth a 5 > minute discussion at a future meeting (perhaps premature for IETF106). > > I've posted about this to other lists in the past two weeks, but I don't > have the references, and I don't have enough Internet to look them up > from here. > > The specific conflict is that JWT, coming from the web space, uses > base64URL encoding for binary objects (signatures..., etc.) while YANG, > uses base64 encoding for binary objects.  This is a documentation > annoyance, but it will catch at least one implementer. > > Tolerant decoders might accept both (but neither Python or Ruby base64 > decoders are tolerant), but I don't think we can in general, demand that > either is acceptable, so we have to say which to use each time. > > We will just have to be clear going forward, and hit people over the > head with this.  I can easily see YANG described data (signatures on > Evidence) from a TPM device being base64 encoded, and then placed into a > JWT container which is base64URL signed (for a Claim). > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 11 03:37:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54475120100 for ; Mon, 11 Nov 2019 03:37:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.865 X-Spam-Level: X-Spam-Status: No, score=-0.865 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7lYveJZnWOGt for ; Mon, 11 Nov 2019 03:37:07 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFC651200DB for ; Mon, 11 Nov 2019 03:37:07 -0800 (PST) Received: from [192.168.42.250] (unknown [209.52.88.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id CFD463897B for ; Mon, 11 Nov 2019 06:34:02 -0500 (EST) To: "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> From: Michael Richardson Message-ID: Date: Mon, 11 Nov 2019 19:37:01 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 11:37:09 -0000 On 2019-11-11 5:57 p.m., Henk Birkholz wrote: > Hi all, > > on one hand, we have to address the overlap between YANG and EAT > information elements (statements & Claims) and how to deal with them > (one obvious issue, for example, would be potential redundant > information model content in two different drafts). Can you give me an example, but I'm not getting the issue. I think that we will be the first to attempt to use JOSE to sign a JSON serialized YANG object, resulting in a JWT.  Well, technically, it's probably not a JWT, because we aren't going to base64url it and put periods between the pieces, I think.  It's just JOSE, but I don't mind if we call it a JWT. draft-ietf-anima-constrained-voucher does CBOR serialized YANG which is signed with COSE. > On the other hand, Laurence's original point was the payload of > conveyance protocols used by RATS. Specializations of this topic are > apparently: > > * Web Tokens via YANG Interfaces, and > * YANG modeled data via other conveyance protocols (other than *CONF) > that can transport Web Tokens. > > There are examples of how YANG modeled data is used outside of *CONF > protocols, for example MUD. We have to understand and agree about: > > * this is possible on a technical level, and > * this is useful wrt to protocol scope, intent & semantics, I think. > MUD (RFC8520) does it, but so does ANIMA vouchers (RFC8366). Again, data-at-REST described by YANG. But the document in question does not seem to be data-at-rest, but RPC access via *CONF protocols to TPM 2.0 objects, so I feel that you are further muddying this thread by asking the above question. From nobody Mon Nov 11 03:48:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4983E120820 for ; Mon, 11 Nov 2019 03:48:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.865 X-Spam-Level: X-Spam-Status: No, score=-0.865 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oD-k_UoRG33w for ; Mon, 11 Nov 2019 03:48:52 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D3421200DB for ; Mon, 11 Nov 2019 03:48:52 -0800 (PST) Received: from [192.168.42.250] (unknown [209.52.88.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 633733897C; Mon, 11 Nov 2019 06:45:47 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: <086f1aeb-1401-2c95-1abf-bb104d0c13e5@sandelman.ca> Date: Mon, 11 Nov 2019 19:48:45 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="qLH13ywzaOVFOjsNhiQJVuISMVyiPYH8f" Archived-At: Subject: Re: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 11:48:54 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --qLH13ywzaOVFOjsNhiQJVuISMVyiPYH8f Content-Type: multipart/mixed; boundary="rUrls8n6Vl8yjGRq17Y172Etazpwd0mUj"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: <086f1aeb-1401-2c95-1abf-bb104d0c13e5@sandelman.ca> Subject: Re: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> In-Reply-To: --rUrls8n6Vl8yjGRq17Y172Etazpwd0mUj Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US On 2019-11-11 6:11 p.m., Henk Birkholz wrote: > Hi Michael, > > you are bringing up an issue that might look tiny, but I think you are > right when you say: "it will catch at least one implementer". I started a private discussion with Mike Jones and Tim Bray a few weeks ago about a clarifying BCP about always using base64URL in JSON going forward.=C2=A0 (I thought I had posted this to a list.) Or... would an errata be enough?=C2=A0 That would put the current serialization of YANG (RFC7951) on the wrong side of the tracks, which is unfortunate. > And there is no easy fix for his, it seems? JWT is set, and YANG > modeled data, such as RFC 7951, is also set. I am not sure that there > is a thing such as "tolerant decoders" in practice, I am afraid. It's not hard, there are only two characters: =C2=A0 62 is either +(original) or - =C2=A0 63 is either / (original) or _ I was rather surprised that common implementations didn't just accept both already. I stubbed my toe on this when processing Jim Schaad's excellent JOSE reference vectors, and couldn't figure out why one of the public keys was too short, until I learnt that the decoder I was using just stopped when it got an invalid character, and I was using base64 rather than base64url. --rUrls8n6Vl8yjGRq17Y172Etazpwd0mUj-- --qLH13ywzaOVFOjsNhiQJVuISMVyiPYH8f Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3JSp0ACgkQcAKuwszY gEOB/QwAonE1XvaaotbN3rDavgLk5v56wQaY0SqzjOgCUDe+gjuaD8YhBC401a8h staT+WBoLEszJDkpXxIPJhqx/OxGpMPYMIh130PrQdpe7uiJEUgOTnuVsA2/zbz/ WomUzc5xx63lmIYoPOvInH3Zt09DNolM62RaxQ/7VR3h7hHBYcs+R0BnvmNbqBHW UGBC00Ti8DI82WsZ4fEzaJ/NqSGciWBr38p5VyuQ4QRdEi1M5yhLQo5WV99XNt6V bua5PDxMSF/o2D7/TSZcLSzpRzrWlhPVpRbFAJ0rpo2jvIzOJpP1ZBdMgnVAoqYD HIlCFCOB4AYYcX0HTFVH++pA8QUfgHSh38dTbAYKCv3Mw6HuGpZoJLq7mgXlGl3P pBLrCoBvAZbDDJgGDSu5O4ySConK7TPSeJIN0tz+RRe5nL+jxGRJFrozRTvi0NPY orCV8xlFX/ryNFd7PahF4KrMWs77XX7ABmMFZrTs150rGReKBPt+rVGZUIyHOkFb e0ohkPUg =eFFo -----END PGP SIGNATURE----- --qLH13ywzaOVFOjsNhiQJVuISMVyiPYH8f-- From nobody Mon Nov 11 04:14:04 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC30E120114 for ; Mon, 11 Nov 2019 04:14:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2SDOAuXJoX6e for ; Mon, 11 Nov 2019 04:14:00 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A9211200FA for ; Mon, 11 Nov 2019 04:13:59 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xABCDtLC024815 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 11 Nov 2019 13:13:56 +0100 Received: from [134.102.155.87] (134.102.155.87) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 11 Nov 2019 13:13:50 +0100 To: Michael Richardson , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> Date: Mon, 11 Nov 2019 13:13:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.155.87] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 12:14:03 -0000 Hi Michael, please see in-line. On 11.11.19 12:37, Michael Richardson wrote: > > > On 2019-11-11 5:57 p.m., Henk Birkholz wrote: >> Hi all, >> >> on one hand, we have to address the overlap between YANG and EAT >> information elements (statements & Claims) and how to deal with them >> (one obvious issue, for example, would be potential redundant >> information model content in two different drafts). > Examples of the same information elements that are used in different data models via Claims or statements: * EAT Time stamp / YANG clock info * EAT Origination / YANG attestation key cert, or * EAT Uptime / YANG tpm ticks > Can you give me an example, but I'm not getting the issue. > I think that we will be the first to attempt to use JOSE to sign a JSON > serialized YANG object, resulting in a JWT.  Well, technically, it's > probably not a JWT, because we aren't going to base64url it and put > periods between the pieces, I think.  It's just JOSE, but I don't mind > if we call it a JWT. As far as I know, simply wrapping a "JSON serialized YANG object" in JOSE does not create a JWT. RFC 7951 is not based on RFC 7519. The Base64/Base64URL confusion is limited to value representation in JSON serialization, I think. > > draft-ietf-anima-constrained-voucher does CBOR serialized YANG which is > signed with COSE. With CBOR serialization most things more straightforward and a tad bit simpler. I do not think that we have any issues on the binary side of things here. Or am I missing something obvious? > > >> On the other hand, Laurence's original point was the payload of >> conveyance protocols used by RATS. Specializations of this topic are >> apparently: >> >> * Web Tokens via YANG Interfaces, and >> * YANG modeled data via other conveyance protocols (other than *CONF) >> that can transport Web Tokens. >> >> There are examples of how YANG modeled data is used outside of *CONF >> protocols, for example MUD. We have to understand and agree about: >> >> * this is possible on a technical level, and >> * this is useful wrt to protocol scope, intent & semantics, I think. >> > > MUD (RFC8520) does it, but so does ANIMA vouchers (RFC8366). > Again, data-at-REST described by YANG. > > But the document in question does not seem to be data-at-rest, but RPC > access via *CONF protocols to TPM 2.0 objects, so I feel that you are > further muddying this thread by asking the above question. > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 11 04:19:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F3F8120820 for ; Mon, 11 Nov 2019 04:19:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qQubaSavGbYL for ; Mon, 11 Nov 2019 04:19:04 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D3E51200F3 for ; Mon, 11 Nov 2019 04:19:02 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xABCJ0dL025012 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 11 Nov 2019 13:19:01 +0100 Received: from [134.102.155.87] (134.102.155.87) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 11 Nov 2019 13:18:55 +0100 To: Michael Richardson , References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> <086f1aeb-1401-2c95-1abf-bb104d0c13e5@sandelman.ca> From: Henk Birkholz Message-ID: <6c9f7880-e494-c2ac-7325-bdfa05eee712@sit.fraunhofer.de> Date: Mon, 11 Nov 2019 13:18:54 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <086f1aeb-1401-2c95-1abf-bb104d0c13e5@sandelman.ca> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.155.87] Archived-At: Subject: Re: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 12:19:06 -0000 A single reply in-line. On 11.11.19 12:48, Michael Richardson wrote: > > > On 2019-11-11 6:11 p.m., Henk Birkholz wrote: >> Hi Michael, >> >> you are bringing up an issue that might look tiny, but I think you are >> right when you say: "it will catch at least one implementer". > > I started a private discussion with Mike Jones and Tim Bray a few weeks > ago about a clarifying BCP about always using base64URL in JSON going > forward.  (I thought I had posted this to a list.) > Or... would an errata be enough? > That would put the current serialization of YANG (RFC7951) on the wrong > side of the tracks, which is unfortunate. This is what I meant by "not easy". Both are used already. The technical differences (see below) are not that big, I agree. > >> And there is no easy fix for his, it seems? JWT is set, and YANG >> modeled data, such as RFC 7951, is also set. I am not sure that there >> is a thing such as "tolerant decoders" in practice, I am afraid. > > It's not hard, there are only two characters: >   62 is either +(original) or - >   63 is either / (original) or _ > > I was rather surprised that common implementations didn't just accept > both already. > I stubbed my toe on this when processing Jim Schaad's excellent JOSE > reference vectors, and couldn't figure out why one of the public keys > was too short, until I learnt that the decoder I was using just stopped > when it got an invalid character, and I was using base64 rather than > base64url. > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 11 06:02:10 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AADE412088D for ; Mon, 11 Nov 2019 06:02:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yufdpb7BL5J1 for ; Mon, 11 Nov 2019 06:02:07 -0800 (PST) Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F0DE120289 for ; Mon, 11 Nov 2019 06:02:07 -0800 (PST) Received: by mail-wm1-x332.google.com with SMTP id u18so5811819wmc.3 for ; Mon, 11 Nov 2019 06:02:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language:content-transfer-encoding; bh=qRAWg96Kf/w478ZPyPU1JaILuT0JafbDXcCj7K5lP1A=; b=S4LVYzlN9EcU18u87TUyVk3i5nFdi6QwNXeUoi5/wkHR3+32aiyJhwAecYTtKp/Xzo zdo6nV4HYoTvTAhZn7yG3LtLHFhogukSMAcgtJFhz7vf8qXKLgxzRbLGsGkG/kqYS0cn KsvNntciUgUOA+Zy5326wbSaYsFPELc3FbZ4UpOqLNQl3xSzfwr403CAQxFApdn1Flgu 0bBYFEmgGWTq7TJAMs0Wf8KVFYRcE6lSh/AhLbt7CMHYREm5nxdYRl4yrusAVsz9KjXo jKEHudL0soX5W7rG0J3xyVCBd2QYiW7CRzskvK/YYmfE/fsjWOxgTOjJRNp9aoPKvRwi Ar7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=qRAWg96Kf/w478ZPyPU1JaILuT0JafbDXcCj7K5lP1A=; b=MAK+eAGd+LfHmHtlxZFC2bqXYGwfBgfXivtcmhbnMr9X7CpOlKXe25Zf1Kr/wlqz7G cNk2OAbNhUkNJMnGp4jP2khlQa3inPkhNfsMX9U40I9eKdIw0rVE0N56Sj1mtLINQuuD 4iW/oa//lJeev0EmvqsgcN+5Lkw0593T2dJ5h7vyiaTN70rEU7vq2hfO8TgHqRBSioC2 Ys0HxvfBums/CAKtkvGuWUUrdr81vh5rT1r0/OfxSs5o2eI1joCDPlGXb9ZnaJDNrw8r Uy/wjN829F9D7Ar+yvXHSu3iSjK/q3QjQ7IG3xX6cF5Gr8aSQntI0wtwvVHqOnt+h3ct pg/w== X-Gm-Message-State: APjAAAWL7HdtyiY7Cn+Yi6t8mQB2P+hHRpSiMoYwX6bCwzu8eUuOes+M vH5/Dex6SNJyNPk41OlPsWY8c1NA X-Google-Smtp-Source: APXvYqz9kaNi68vQAG9VVrZy9rfNQH/rshqdZfp3czALOpxvUPJRQFuFXBPs2wbbnN+W2iWG6gSzZg== X-Received: by 2002:a1c:7d16:: with SMTP id y22mr19851182wmc.106.1573480925200; Mon, 11 Nov 2019 06:02:05 -0800 (PST) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id j66sm13329090wma.19.2019.11.11.06.02.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 11 Nov 2019 06:02:03 -0800 (PST) To: Henk Birkholz , Michael Richardson , rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <78de3311-e3d1-675a-f373-dec567d31dc6@sandelman.ca> <086f1aeb-1401-2c95-1abf-bb104d0c13e5@sandelman.ca> <6c9f7880-e494-c2ac-7325-bdfa05eee712@sit.fraunhofer.de> From: Anders Rundgren Message-ID: <8ac03e95-480a-53d8-14d3-3bae4937db23@gmail.com> Date: Mon, 11 Nov 2019 15:02:02 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: <6c9f7880-e494-c2ac-7325-bdfa05eee712@sit.fraunhofer.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Rats] clarity on JWT vs YANG-serialization: base64 vs base64url X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 14:02:10 -0000 Having multiple ways to do one thing was never a good idea. COSE would suffice. Regarding the Base64-encoding of X5C objects, the rational was to be PEM compatible which also was a pretty bad idea since X5C simply isn't PEM compatible by a long shot. Both are excellent examples of "design by committee". Anders On 2019-11-11 13:18, Henk Birkholz wrote: > A single reply in-line. > > On 11.11.19 12:48, Michael Richardson wrote: >> >> >> On 2019-11-11 6:11 p.m., Henk Birkholz wrote: >>> Hi Michael, >>> >>> you are bringing up an issue that might look tiny, but I think you are >>> right when you say: "it will catch at least one implementer". >> >> I started a private discussion with Mike Jones and Tim Bray a few weeks >> ago about a clarifying BCP about always using base64URL in JSON going >> forward.  (I thought I had posted this to a list.) >> Or... would an errata be enough? >> That would put the current serialization of YANG (RFC7951) on the wrong >> side of the tracks, which is unfortunate. > > This is what I meant by "not easy". Both are used already. The technical > differences (see below) are not that big, I agree. > >> >>> And there is no easy fix for his, it seems? JWT is set, and YANG >>> modeled data, such as RFC 7951, is also set. I am not sure that there >>> is a thing such as "tolerant decoders" in practice, I am afraid. >> >> It's not hard, there are only two characters: >>   62 is either +(original) or - >>   63 is either / (original) or _ >> >> I was rather surprised that common implementations didn't just accept >> both already. >> I stubbed my toe on this when processing Jim Schaad's excellent JOSE >> reference vectors, and couldn't figure out why one of the public keys >> was too short, until I learnt that the decoder I was using just stopped >> when it got an invalid character, and I was using base64 rather than >> base64url. >> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 11 08:26:42 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BABE512092B for ; Mon, 11 Nov 2019 08:26:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pMuN2uWklkVx for ; Mon, 11 Nov 2019 08:26:39 -0800 (PST) Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A6C2120921 for ; Mon, 11 Nov 2019 08:26:38 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Nov 2019 08:26:38 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,293,1569308400"; d="scan'208";a="197715691" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by orsmga008.jf.intel.com with ESMTP; 11 Nov 2019 08:26:37 -0800 Received: from orsmsx160.amr.corp.intel.com (10.22.226.43) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 11 Nov 2019 08:26:37 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX160.amr.corp.intel.com ([169.254.13.204]) with mapi id 14.03.0439.000; Mon, 11 Nov 2019 08:26:37 -0800 From: "Smith, Ned" To: Henk Birkholz , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAABXMAgABH9wCAABvLgIAACkiA///AhAA= Date: Mon, 11 Nov 2019 16:26:36 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> In-Reply-To: <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.251.18.104] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 16:26:41 -0000 U28gZmFyIHRoZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAiRUFUIiB0byByZWZlciB0byBib3Ro IHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25z LiBXaGVuIGV4dGVuZGluZyBpbmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9yIHNvbWUgb3RoZXIg c2VyaWFsaXphdGlvbiAoZS5nLiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJpbGl0eSBmb3IgYW4g SU0gZXhwcmVzc2lvbiB0byBiZSByZWFsaXplZCBieSBkaWZmZXJlbnQgc2VyaWFsaXphdGlvbnMs IHdoYXQgdGVybSBzaG91bGQgd2UgZ2l2ZSB0byB0aGUgSU0gZGVzY3JpcHRpb24/IA0KDQpUaGUg dGVybSAiQ2xhaW0iIGhhcyBiZWVuIHVzZWQgZXh0ZW5zaXZlbHkuIERvIHdlIHdhbnQgdG8gYWdy ZWUgdG8gdXNlICJjbGFpbSIgdG8gcmVmZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBhbiBJTSBleHBy ZXNzaW9uIGluIFJBVFMgYW5kICJUb2tlbiIgZm9yIGFueSBzZXJpYWxpemF0aW9uIChyZWFsaXph dGlvbikgZXZlbiBpZiBpdCBpc24ndCBhIEpXVCBvciBDV1Q/ICANCg0KVGh4LA0KTmVkDQoNCu+7 v09uIDExLzExLzE5LCA0OjE0IEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiIg PHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9sekBzaXQuZnJh dW5ob2Zlci5kZT4gd3JvdGU6DQoNCiAgICBIaSBNaWNoYWVsLA0KICAgIA0KICAgIHBsZWFzZSBz ZWUgaW4tbGluZS4NCiAgICANCiAgICBPbiAxMS4xMS4xOSAxMjozNywgTWljaGFlbCBSaWNoYXJk c29uIHdyb3RlOg0KICAgID4gDQogICAgPiANCiAgICA+IE9uIDIwMTktMTEtMTEgNTo1NyBwLm0u LCBIZW5rIEJpcmtob2x6IHdyb3RlOg0KICAgID4+IEhpIGFsbCwNCiAgICA+Pg0KICAgID4+IG9u IG9uZSBoYW5kLCB3ZSBoYXZlIHRvIGFkZHJlc3MgdGhlIG92ZXJsYXAgYmV0d2VlbiBZQU5HIGFu ZCBFQVQNCiAgICA+PiBpbmZvcm1hdGlvbiBlbGVtZW50cyAoc3RhdGVtZW50cyAmIENsYWltcykg YW5kIGhvdyB0byBkZWFsIHdpdGggdGhlbQ0KICAgID4+IChvbmUgb2J2aW91cyBpc3N1ZSwgZm9y IGV4YW1wbGUsIHdvdWxkIGJlIHBvdGVudGlhbCByZWR1bmRhbnQNCiAgICA+PiBpbmZvcm1hdGlv biBtb2RlbCBjb250ZW50IGluIHR3byBkaWZmZXJlbnQgZHJhZnRzKS4NCiAgICA+IA0KICAgIA0K ICAgIEV4YW1wbGVzIG9mIHRoZSBzYW1lIGluZm9ybWF0aW9uIGVsZW1lbnRzIHRoYXQgYXJlIHVz ZWQgaW4gZGlmZmVyZW50IA0KICAgIGRhdGEgbW9kZWxzIHZpYSBDbGFpbXMgb3Igc3RhdGVtZW50 czoNCiAgICANCiAgICAqIEVBVCBUaW1lIHN0YW1wIC8gWUFORyBjbG9jayBpbmZvDQogICAgKiBF QVQgT3JpZ2luYXRpb24gLyBZQU5HIGF0dGVzdGF0aW9uIGtleSBjZXJ0LCBvcg0KICAgICogRUFU IFVwdGltZSAvIFlBTkcgdHBtIHRpY2tzDQogICAgDQogICAgPiBDYW4geW91IGdpdmUgbWUgYW4g ZXhhbXBsZSwgYnV0IEknbSBub3QgZ2V0dGluZyB0aGUgaXNzdWUuDQogICAgPiBJIHRoaW5rIHRo YXQgd2Ugd2lsbCBiZSB0aGUgZmlyc3QgdG8gYXR0ZW1wdCB0byB1c2UgSk9TRSB0byBzaWduIGEg SlNPTg0KICAgID4gc2VyaWFsaXplZCBZQU5HIG9iamVjdCwgcmVzdWx0aW5nIGluIGEgSldULiAg V2VsbCwgdGVjaG5pY2FsbHksIGl0J3MNCiAgICA+IHByb2JhYmx5IG5vdCBhIEpXVCwgYmVjYXVz ZSB3ZSBhcmVuJ3QgZ29pbmcgdG8gYmFzZTY0dXJsIGl0IGFuZCBwdXQNCiAgICA+IHBlcmlvZHMg YmV0d2VlbiB0aGUgcGllY2VzLCBJIHRoaW5rLiAgSXQncyBqdXN0IEpPU0UsIGJ1dCBJIGRvbid0 IG1pbmQNCiAgICA+IGlmIHdlIGNhbGwgaXQgYSBKV1QuDQogICAgDQogICAgQXMgZmFyIGFzIEkg a25vdywgc2ltcGx5IHdyYXBwaW5nIGEgIkpTT04gc2VyaWFsaXplZCBZQU5HIG9iamVjdCIgaW4g DQogICAgSk9TRSBkb2VzIG5vdCBjcmVhdGUgYSBKV1QuIFJGQyA3OTUxIGlzIG5vdCBiYXNlZCBv biBSRkMgNzUxOS4gVGhlIA0KICAgIEJhc2U2NC9CYXNlNjRVUkwgY29uZnVzaW9uIGlzIGxpbWl0 ZWQgdG8gdmFsdWUgcmVwcmVzZW50YXRpb24gaW4gSlNPTiANCiAgICBzZXJpYWxpemF0aW9uLCBJ IHRoaW5rLg0KICAgIA0KICAgID4gDQogICAgPiBkcmFmdC1pZXRmLWFuaW1hLWNvbnN0cmFpbmVk LXZvdWNoZXIgZG9lcyBDQk9SIHNlcmlhbGl6ZWQgWUFORyB3aGljaCBpcw0KICAgID4gc2lnbmVk IHdpdGggQ09TRS4NCiAgICANCiAgICBXaXRoIENCT1Igc2VyaWFsaXphdGlvbiBtb3N0IHRoaW5n cyBtb3JlIHN0cmFpZ2h0Zm9yd2FyZCBhbmQgYSB0YWQgYml0IA0KICAgIHNpbXBsZXIuIEkgZG8g bm90IHRoaW5rIHRoYXQgd2UgaGF2ZSBhbnkgaXNzdWVzIG9uIHRoZSBiaW5hcnkgc2lkZSBvZiAN CiAgICB0aGluZ3MgaGVyZS4gT3IgYW0gSSBtaXNzaW5nIHNvbWV0aGluZyBvYnZpb3VzPw0KICAg IA0KICAgID4gDQogICAgPiANCiAgICA+PiBPbiB0aGUgb3RoZXIgaGFuZCwgTGF1cmVuY2UncyBv cmlnaW5hbCBwb2ludCB3YXMgdGhlIHBheWxvYWQgb2YNCiAgICA+PiBjb252ZXlhbmNlIHByb3Rv Y29scyB1c2VkIGJ5IFJBVFMuIFNwZWNpYWxpemF0aW9ucyBvZiB0aGlzIHRvcGljIGFyZQ0KICAg ID4+IGFwcGFyZW50bHk6DQogICAgPj4NCiAgICA+PiAqIFdlYiBUb2tlbnMgdmlhIFlBTkcgSW50 ZXJmYWNlcywgYW5kDQogICAgPj4gKiBZQU5HIG1vZGVsZWQgZGF0YSB2aWEgb3RoZXIgY29udmV5 YW5jZSBwcm90b2NvbHMgKG90aGVyIHRoYW4gKkNPTkYpDQogICAgPj4gdGhhdCBjYW4gdHJhbnNw b3J0IFdlYiBUb2tlbnMuDQogICAgPj4NCiAgICA+PiBUaGVyZSBhcmUgZXhhbXBsZXMgb2YgaG93 IFlBTkcgbW9kZWxlZCBkYXRhIGlzIHVzZWQgb3V0c2lkZSBvZiAqQ09ORg0KICAgID4+IHByb3Rv Y29scywgZm9yIGV4YW1wbGUgTVVELiBXZSBoYXZlIHRvIHVuZGVyc3RhbmQgYW5kIGFncmVlIGFi b3V0Og0KICAgID4+DQogICAgPj4gKiB0aGlzIGlzIHBvc3NpYmxlIG9uIGEgdGVjaG5pY2FsIGxl dmVsLCBhbmQNCiAgICA+PiAqIHRoaXMgaXMgdXNlZnVsIHdydCB0byBwcm90b2NvbCBzY29wZSwg aW50ZW50ICYgc2VtYW50aWNzLCBJIHRoaW5rLg0KICAgID4+DQogICAgPiANCiAgICA+IE1VRCAo UkZDODUyMCkgZG9lcyBpdCwgYnV0IHNvIGRvZXMgQU5JTUEgdm91Y2hlcnMgKFJGQzgzNjYpLg0K ICAgID4gQWdhaW4sIGRhdGEtYXQtUkVTVCBkZXNjcmliZWQgYnkgWUFORy4NCiAgICA+IA0KICAg ID4gQnV0IHRoZSBkb2N1bWVudCBpbiBxdWVzdGlvbiBkb2VzIG5vdCBzZWVtIHRvIGJlIGRhdGEt YXQtcmVzdCwgYnV0IFJQQw0KICAgID4gYWNjZXNzIHZpYSAqQ09ORiBwcm90b2NvbHMgdG8gVFBN IDIuMCBvYmplY3RzLCBzbyBJIGZlZWwgdGhhdCB5b3UgYXJlDQogICAgPiBmdXJ0aGVyIG11ZGR5 aW5nIHRoaXMgdGhyZWFkIGJ5IGFza2luZyB0aGUgYWJvdmUgcXVlc3Rpb24uDQogICAgPiANCiAg ICA+IA0KICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCiAgICA+IFJBVFMgbWFpbGluZyBsaXN0DQogICAgPiBSQVRTQGlldGYub3JnDQogICAgPiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICA+IA0KICAgIA0K ICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAg UkFUUyBtYWlsaW5nIGxpc3QNCiAgICBSQVRTQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQogICAgDQoNCg== From nobody Mon Nov 11 10:11:36 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27B6F1208C4 for ; Mon, 11 Nov 2019 10:11:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYATpGv4qg8b for ; Mon, 11 Nov 2019 10:11:32 -0800 (PST) Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F14812089E for ; Mon, 11 Nov 2019 10:11:31 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by fmsmga107.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Nov 2019 10:11:31 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,293,1569308400"; d="scan'208,217";a="354839762" Received: from orsmsx103.amr.corp.intel.com ([10.22.225.130]) by orsmga004.jf.intel.com with ESMTP; 11 Nov 2019 10:11:30 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX103.amr.corp.intel.com ([169.254.5.179]) with mapi id 14.03.0439.000; Mon, 11 Nov 2019 10:11:30 -0800 From: "Smith, Ned" To: "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAJAygIAAL78A Date: Mon, 11 Nov 2019 18:11:30 +0000 Message-ID: <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.251.18.104] Content-Type: multipart/alternative; boundary="_000_7106C9D38ED1419E81F84CDA799BEDAEintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 18:11:35 -0000 --_000_7106C9D38ED1419E81F84CDA799BEDAEintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmlnaHQuIFRoaXMgaW1wbGllcyB0aGUgUkFUUyDigJx0b2tlbuKAnSBzaG91bGQgc3VwcG9ydCBl eGlzdGluZyDigJxiaW5hcnnigJ0gZm9ybWF0cyBhcyBhbiBlbmNhcHN1bGF0aW9uIChzaWduZWQg YnkgYSBzZWNvbmQgVEEgd2hlcmUgdGhlIFRQTSBpcyBhIGZpcnN0IFRBKSBvciBhcyBhIGNvbnZl eWFuY2UgKHVuc2lnbmVkPykgdG9rZW4uIFBvc3NpYmx5LCB0aGUgb25seSBhZGRlZCB2YWx1ZSBv ZiB0aGUgbGF0dGVyIGlzIGEgdGFnIHRoYXQgaWRlbnRpZmllcyBpdCBhcyBhIFRQTSBiaW5hcnkg Zm9ybWF0Pw0KDQoNCk9uIDExLzEwLzE5LCAyMzoyMSBQTSwgIlJBVFMgb24gYmVoYWxmIG9mIE9s aXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWls dG86cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgaWFuLm9saXZlckBub2tpYS1i ZWxsLWxhYnMuY29tPG1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+PiB3cm90 ZToNCg0KPiBSZW1vdGUgVFBNIGF0dGVzdGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNlc3Nhcnkg dGhlIHNob3J0IHJ1biwgYnV0IGFyZSBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBiZWxp ZXZlIHRoYXQgPiBFQVQgd2lsbCByZXBsYWNlIFRQTSBhdHRlc3RhdGlvbnMgaW4gdGhlIGxvbmcg cnVuIChtYXliZSBkZWNhZGVzKSBiZWNhdXNlIHRoZXkgYXJlIGZhciBtb3JlIGV4cHJlc3NpdmUu IEkga25vdyA+IG90aGVycyBiZWxpZXZlIHRoYXQgdG9vLg0KDQpJIHdvdWxkIGRpc2FncmVlIHdp dGggdGhlIHN0YXRlbWVudCBvZiAic2hvcnQgcnVuIiAuLi4gVFBNIGlzIHByYWN0aWNhbGx5IHRo ZSBvbmx5IGV4aXN0aW5nIHN0YW5kYXJkaXNlZCAoaGFyZHdhcmUsIHNvZnR3YXJlLCBmaXJtd2Fy ZSwgbWVhc3VyZW1lbnQgLSB4ODYgb25seSBldGMpIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4g Y29tbW9uIHVzZSwgaWU6IHByYWN0aWNhbGx5IGFsbCB4ODYgbWFjaGluZXMsICBUaGUgYXR0ZXN0 YXRpb24gbWVjaGFuaXNtcyBwcm92aWRlZCBhcmUgZ29pbmcgdG8gYmUgYXJvdW5kIGZvciBhIHZl cnkgbG9uZyB0aW1lLg0KDQpGcm9tIHRlbGNvIGV4cGVyaWVuY2UsIDMwIHllYXJzIGFnbyB3ZSBz YWlkIFNTNyB3b3VsZCBvbmx5IGJlIGFyb3VuZCBpbiB0aGUgc2hvcnQgdGVybS4NCg0KPiBUaHVz LCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFm dC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlID4gdG8g YWRkIEVBVCB0byBpdC4NCg0KQWdyZWUNCg0KSWFuDQoNCg0KLS0NCg0KRHIuIElhbiBPbGl2ZXIN Cg0KQ3liZXJzZWN1cml0eSBSZXNlYXJjaA0KDQpEaXN0aW5ndWlzaGVkIE1lbWJlciBvZiBUZWNo bmljYWwgU3RhZmYNCg0KTm9raWEgQmVsbCBMYWJzDQoNCiszNTggNTAgNDgzIDYyMzcNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8 bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KU2VudDogMTEgTm92ZW1iZXIgMjAxOSAwMDo0NA0KVG86 IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPg0KQ2M6IEhl bmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+OyByYXRzQGlldGYu Lm9yZyA8cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRp b24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCg0KT24gTm92 IDEwLCAyMDE5LCBhdCAyOjIwIFBNLCBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13 aW5nQGNpc2NvLmNvbTxtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tPj4gd3JvdGU6DQoNClNvLCBM YXVyZW5jZSwgYXJlIHlvdSBzdGlsbCBPSyB3aXRoIHRoZSBhZG9wdGlvbiBvZiB0aGUgY3VycmVu dCBkcmFmdCB3aXRoIGEgcmVuYW1lIGZvciBub3c/DQpUaGFua3MsIE5hbmN5DQoNCkkgdGhpbmsg dGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2VyIFJBVFMgZWZmb3J0IG9mIGFkZGluZyBFQVQgc3Vw cG9ydCB0byB0aGlzIFlBTkcgcHJvdG9jb2wgaXMgcmVhbGx5IGhpZ2guIEl0IGEgY29yZSB0aGlu ZyB0byBkbyB0aGF0IGhlbHBzIGJyaW5nIHRvZ2V0aGVyIHRoZSB0d28gYXR0ZXN0YXRpb24gd29y bGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVBVCB3b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGlu IHRoZSBuaWdodC4NCg0KUmVtb3RlIFRQTSBhdHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVj ZXNzYXJ5IHRoZSBzaG9ydCBydW4sIGJ1dCBhcmUgb2YgdmVyeSBsaW1pdGVkIGNhcGFiaWxpdHku IEkgYmVsaWV2ZSB0aGF0IEVBVCB3aWxsIHJlcGxhY2UgVFBNIGF0dGVzdGF0aW9ucyBpbiB0aGUg bG9uZyBydW4gKG1heWJlIGRlY2FkZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVz c2l2ZS4gSSBrbm93IG90aGVycyBiZWxpZXZlIHRoYXQgdG9vLg0KDQpJZiB3ZSBkb27igJl0IGlu Y2x1ZGUgRUFUIGluIHRoZSBZQU5HIG1vZGUgaXQgaXMgc29ydCBvZiBsaWtlIGRlZmluaW5nIEhU VFAgdG8gb25seSBjb252ZXkgSFRNTCB0byB0aGUgZXhjbHVzaW9uIG9mIFBERi4gV2XigJlyZSBk ZWZpbmluZyBhbiBhdHRlc3RhdGlvbiBwcm90b2NvbCB0aGF0IGNhbiBvbmx5IG1vdmUgb25lIGtp bmQgb2YgYXR0ZXN0YXRpb24gZXZlbiB0aG91Z2ggd2UgaGF2ZSBjb25zZW5zdXMgb24gd2hhdCB0 aGUgb3RoZXIgb25lIGxvb2tzIGxpa2UuDQoNCkl0IHNlZW1zIHJlbGF0aXZlbHkgc2ltcGxlIHRv IGFkZCBFQVQgc3VwcG9ydCAob3IgcHJvbWlzZSB0byBhZGQgRUFUIHN1cHBvcnQpLiBQcmV0dHkg c3VyZSBJIGhlYXJkIEhlbmsgYWdyZWUgdG8gYWRkIGl0Lg0KDQpUaHVzLCBJIGFtIG9wcG9zZWQg dG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sg d2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlIHRvIGFkZCBFQVQgdG8gaXQuDQoN CkxMDQoNCg== --_000_7106C9D38ED1419E81F84CDA799BEDAEintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlJpZ2h0LiBUaGlzIGltcGxpZXMgdGhlIFJBVFMg4oCcdG9rZW7igJ0gc2hv dWxkIHN1cHBvcnQgZXhpc3Rpbmcg4oCcYmluYXJ54oCdIGZvcm1hdHMgYXMgYW4gZW5jYXBzdWxh dGlvbiAoc2lnbmVkIGJ5IGEgc2Vjb25kIFRBIHdoZXJlIHRoZSBUUE0gaXMgYSBmaXJzdCBUQSkg b3IgYXMgYSBjb252ZXlhbmNlICh1bnNpZ25lZD8pIHRva2VuLiBQb3NzaWJseSwgdGhlIG9ubHkg YWRkZWQgdmFsdWUgb2YgdGhlIGxhdHRlciBpcw0KIGEgdGFnIHRoYXQgaWRlbnRpZmllcyBpdCBh cyBhIFRQTSBiaW5hcnkgZm9ybWF0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPk9uIDExLzEwLzE5LCAyMzoyMSBQTSwgJnF1b3Q7UkFUUyBvbiBiZWhh bGYgb2YgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pJnF1b3Q7ICZsdDs8YSBocmVmPSJt YWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9u IGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNv bSI+aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ Jmd0OyBSZW1vdGUgVFBNIGF0dGVzdGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNlc3NhcnkgdGhl IHNob3J0IHJ1biwgYnV0IGFyZSBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBiZWxpZXZl IHRoYXQgJmd0OyBFQVQgd2lsbCByZXBsYWNlIFRQTSBhdHRlc3RhdGlvbnMNCiBpbiB0aGUgbG9u ZyBydW4gKG1heWJlIGRlY2FkZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVzc2l2 ZS4gSSBrbm93ICZndDsgb3RoZXJzIGJlbGlldmUgdGhhdCB0b28uJm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tn cm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5J IHdvdWxkIGRpc2FncmVlIHdpdGggdGhlIHN0YXRlbWVudCBvZiAmcXVvdDtzaG9ydCBydW4mcXVv dDsgLi4uIFRQTSBpcyBwcmFjdGljYWxseSB0aGUgb25seSBleGlzdGluZyBzdGFuZGFyZGlzZWQg KGhhcmR3YXJlLCBzb2Z0d2FyZSwgZmlybXdhcmUsIG1lYXN1cmVtZW50IC0geDg2DQogb25seSBl dGMpIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIHVzZSwgaWU6IHByYWN0aWNhbGx5 IGFsbCB4ODYgbWFjaGluZXMsJm5ic3A7IFRoZSBhdHRlc3RhdGlvbiBtZWNoYW5pc21zIHByb3Zp ZGVkIGFyZSBnb2luZyB0byBiZSBhcm91bmQgZm9yIGEgdmVyeSBsb25nIHRpbWUuJm5ic3A7DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29s b3I6YmxhY2siPkZyb20gdGVsY28gZXhwZXJpZW5jZSwgMzAgeWVhcnMgYWdvIHdlIHNhaWQgU1M3 IHdvdWxkIG9ubHkgYmUgYXJvdW5kIGluIHRoZSBzaG9ydCB0ZXJtLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+Jmd0OyBUaHVzLCBJIGFtIG9wcG9z ZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUg T0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlICZndDsgdG8gYWRkIEVBVCB0 byBpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQ6d2hpdGUi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+QWdyZWU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjti YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFj ayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPklhbjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJTaWduYXR1cmUi Pg0KPGRpdiBpZD0iZGl2dGFnZGVmYXVsdHdyYXBwZXIiPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj4tLSA8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkRyLiBJYW4gT2xpdmVyPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5DeWJlcnNlY3VyaXR5IFJlc2VhcmNoPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5EaXN0aW5ndWlzaGVkIE1lbWJlciBvZiBU ZWNobmljYWwgU3RhZmY8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPk5va2lh IEJlbGwgTGFiczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+JiM0MzszNTgg NTAgNDgzIDYyMzc8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1hbGlnbjpjZW50ZXIiPg0KPGhyIHNpemU9IjAiIHdpZHRo PSI5OSUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8ZGl2IGlkPSJkaXZScGx5RndkTXNnIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPiBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs8YnI+ DQo8Yj5TZW50OjwvYj4gMTEgTm92ZW1iZXIgMjAxOSAwMDo0NDxicj4NCjxiPlRvOjwvYj4gTmFu Y3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpICZsdDtuY2Ftd2luZ0BjaXNjby5jb20mZ3Q7PGJyPg0K PGI+Q2M6PC9iPiBIZW5rIEJpcmtob2x6ICZsdDtoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVy LmRlJmd0OzsgcmF0c0BpZXRmLi5vcmcgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3Vi amVjdDo8L2I+IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFt ZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0PC9zcGFuPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIE5v diAxMCwgMjAxOSwgYXQgMjoyMCBQTSwgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpICZsdDs8 YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tIj5uY2Ftd2luZ0BjaXNjby5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+U28sIExhdXJlbmNlLCBhcmUg eW91IHN0aWxsIE9LIHdpdGggdGhlIGFkb3B0aW9uIG9mIHRoZSBjdXJyZW50IGRyYWZ0IHdpdGgg YSByZW5hbWUgZm9yIG5vdz88YnI+DQpUaGFua3MsIE5hbmN5PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSB0aGluayB0aGUgdmFs dWUgYWRkIHRvIHRoZSBsYXJnZXIgUkFUUyBlZmZvcnQgb2YgYWRkaW5nIEVBVCBzdXBwb3J0IHRv IHRoaXMgWUFORyBwcm90b2NvbCBpcyByZWFsbHkgaGlnaC4gSXQgYSBjb3JlIHRoaW5nIHRvIGRv IHRoYXQgaGVscHMgYnJpbmcgdG9nZXRoZXIgdGhlIHR3byBhdHRlc3RhdGlvbiB3b3JsZHMgYW5k IG1ha2UgdGhlIFRQTSBhbmQgRUFUIHdvcmsNCiBoZXJlIGxlc3MgbGlrZSBzaGlwcyBpbiB0aGUg bmlnaHQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+UmVt b3RlIFRQTSBhdHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVjZXNzYXJ5IHRoZSBzaG9ydCBy dW4sIGJ1dCBhcmUgb2YgdmVyeSBsaW1pdGVkIGNhcGFiaWxpdHkuIEkgYmVsaWV2ZSB0aGF0IEVB VCB3aWxsIHJlcGxhY2UgVFBNIGF0dGVzdGF0aW9ucyBpbiB0aGUgbG9uZyBydW4gKG1heWJlIGRl Y2FkZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVzc2l2ZS4NCiBJIGtub3cgb3Ro ZXJzIGJlbGlldmUgdGhhdCB0b28uJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+SWYgd2UgZG9u4oCZdCBpbmNsdWRlIEVBVCBpbiB0aGUgWUFORyBt b2RlIGl0IGlzIHNvcnQgb2YgbGlrZSBkZWZpbmluZyBIVFRQIHRvIG9ubHkgY29udmV5IEhUTUwg dG8gdGhlIGV4Y2x1c2lvbiBvZiBQREYuIFdl4oCZcmUgZGVmaW5pbmcgYW4gYXR0ZXN0YXRpb24g cHJvdG9jb2wgdGhhdCBjYW4gb25seSBtb3ZlIG9uZSBraW5kIG9mIGF0dGVzdGF0aW9uIGV2ZW4g dGhvdWdoDQogd2UgaGF2ZSBjb25zZW5zdXMgb24gd2hhdCB0aGUgb3RoZXIgb25lIGxvb2tzIGxp a2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SXQgc2Vl bXMgcmVsYXRpdmVseSBzaW1wbGUgdG8gYWRkIEVBVCBzdXBwb3J0IChvciBwcm9taXNlIHRvIGFk ZCBFQVQgc3VwcG9ydCkuIFByZXR0eSBzdXJlIEkgaGVhcmQgSGVuayBhZ3JlZSB0byBhZGQgaXQu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGh1cywgSSBh bSBvcHBvc2VkIHRvIGFkb3B0aW9uIHdpdGggdGhlIGN1cnJlbnQgVFBNLW9ubHkgZHJhZnQuIEni gJlkIGJlIE9LIHdpdGggdGhlIGN1cnJlbnQgZHJhZnQgYW5kIGEgcHJvbWlzZSB0byBhZGQgRUFU IHRvIGl0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkxM PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_7106C9D38ED1419E81F84CDA799BEDAEintelcom_-- From nobody Mon Nov 11 10:23:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16D2E1208C8 for ; Mon, 11 Nov 2019 10:23:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GdWZ41ETdaaQ for ; Mon, 11 Nov 2019 10:23:12 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C25D71208A4 for ; Mon, 11 Nov 2019 10:23:10 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xABIN1CG013895 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 11 Nov 2019 19:23:02 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 11 Nov 2019 19:22:56 +0100 To: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> From: Henk Birkholz Message-ID: <47faa9a4-9bb1-751f-2b5a-71e020659514@sit.fraunhofer.de> Date: Mon, 11 Nov 2019 19:22:54 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 18:23:16 -0000 Laurence provided options as a basis for discussion a while ago. He highlighted that CWT must be signed and illustrated pro & con wrt: * null cipher, * an "unsigned" flavor of CWT * an "arbitrary signature" It might be a valid assumotion that a single "tpm Claim" would have no significant added value, but multiple Claims in a message bundle might (although this might be a solution looking for a problem?). Viele Grüße, Henk On 11.11.19 19:11, Smith, Ned wrote: > Right. This implies the RATS “token” should support existing “binary” > formats as an encapsulation (signed by a second TA where the TPM is a > first TA) or as a conveyance (unsigned?) token. Possibly, the only added > value of the latter is a tag that identifies it as a TPM binary format? > > On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - > FI/Espoo)" on > behalf of ian.oliver@nokia-bell-labs.com > > wrote: > >> Remote TPM attestations are useful and necessary the short run, but are of very limited capability. I believe that > EAT will replace TPM attestations in the long run (maybe decades) because they are far more expressive. > I know > others believe that too. > > I would disagree with the statement of "short run" ... TPM is > practically the only existing standardised (hardware, software, > firmware, measurement - x86 only etc) hardware root of trust in common > use, ie: practically all x86 machines,  The attestation mechanisms > provided are going to be around for a very long time. > > From telco experience, 30 years ago we said SS7 would only be around in > the short term. > >> Thus, I am opposed to adoption with the current TPM-only draft. I’d be OK with the current draft and a promise > to add EAT to it. > > Agree > > Ian > > -- > > Dr. Ian Oliver > > Cybersecurity Research > > Distinguished Member of Technical Staff > > Nokia Bell Labs > > +358 50 483 6237 > > ------------------------------------------------------------------------ > > *From:*Laurence Lundblade > *Sent:* 11 November 2019 00:44 > *To:* Nancy Cam-Winget (ncamwing) > *Cc:* Henk Birkholz ; rats@ietf..org > > *Subject:* Re: [Rats] Call for adoption (after draft rename) for Yang > module draft > > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) > > wrote: > > So, Laurence, are you still OK with the adoption of the current > draft with a rename for now? > Thanks, Nancy > > I think the value add to the larger RATS effort of adding EAT support to > this YANG protocol is really high. It a core thing to do that helps > bring together the two attestation worlds and make the TPM and EAT work > here less like ships in the night. > > Remote TPM attestations are useful and necessary the short run, but are > of very limited capability. I believe that EAT will replace TPM > attestations in the long run (maybe decades) because they are far more > expressive. I know others believe that too. > > If we don’t include EAT in the YANG mode it is sort of like defining > HTTP to only convey HTML to the exclusion of PDF. We’re defining an > attestation protocol that can only move one kind of attestation even > though we have consensus on what the other one looks like. > > It seems relatively simple to add EAT support (or promise to add EAT > support). Pretty sure I heard Henk agree to add it. > > Thus, I am opposed to adoption with the current TPM-only draft. I’d be > OK with the current draft and a promise to add EAT to it. > > LL > From nobody Mon Nov 11 10:36:00 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78883120B85 for ; Mon, 11 Nov 2019 10:35:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ymZdsrZbHr4M for ; Mon, 11 Nov 2019 10:35:54 -0800 (PST) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8FB5120A68 for ; Mon, 11 Nov 2019 10:35:52 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Nov 2019 10:35:52 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,293,1569308400"; d="scan'208";a="213826370" Received: from orsmsx107.amr.corp.intel.com ([10.22.240.5]) by fmsmga001.fm.intel.com with ESMTP; 11 Nov 2019 10:35:52 -0800 Received: from orsmsx154.amr.corp.intel.com (10.22.226.12) by ORSMSX107.amr.corp.intel.com (10.22.240.5) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 11 Nov 2019 10:35:52 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX154.amr.corp.intel.com ([169.254.11.36]) with mapi id 14.03.0439.000; Mon, 11 Nov 2019 10:35:51 -0800 From: "Smith, Ned" To: Henk Birkholz , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAJAygIAAL78AgACJSwD//32CgA== Date: Mon, 11 Nov 2019 18:35:51 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <47faa9a4-9bb1-751f-2b5a-71e020659514@sit.fraunhofer.de> In-Reply-To: <47faa9a4-9bb1-751f-2b5a-71e020659514@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.251.18.104] Content-Type: text/plain; charset="utf-8" Content-ID: <84B0593241A2FA47830E0873FB6450E5@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 18:36:00 -0000 R2l2ZW4gdGhlIGFyY2hpdGVjdHVyZSBzdXBwb3J0cyBoeWJyaWRzIG9mIHBhc3Nwb3J0IGFuZCBi YWNrZ3JvdW5kIGNoZWNrIG1vZGVscywgaXQgc2VlbXMgdGhlcmUgY291bGQgYmUgYSByaWNoIGNv bWJpbmF0aW9uIG9mIGF0dGVzdGVycywgdmVyaWZpZXJzIGFuZCByZWx5aW5nIHBhcnRpZXMgd2hl cmUgcGFydGlhbCByZXN1bHRzIGNvdWxkIGJlIHN1cHBsaWVkIGJ5IFZlcmlmaWVyIEEgdG8gUlAg QiB3aG8gaW4gdHVybiB2ZXJpZmllcyBhcyBWZXJpZmllciBCIGFuZCBwcm9kdWNlcyByZXN1bHRz IEIgZXRjLi4uIElmIHNvLCB0aGVuIHBvc3NpYmx5IGEgVFBNIGVuY2Fwc3VsYXRlZCAiY2xhaW0i IGdldHMgcGFzc2VkIG9uIHRvIG11bHRpcGxlIHZlcmlmaWVycyB1bnRpbCBvbmUgdGhhdCBjYW4g cGFyc2UgYSBUUE0gZW5jYXBzdWxhdGlvbiBpcyBmb3VuZC4gTWF5YmUgdGhpcyBpcyBhIGNvbnRy aXZlZCB1c2UgY2FzZSwgYnV0IGl0IHNlZW1zIHJlYXNvbmFibGUgYmFzZWQgb24gd2hhdCBoYXMg YmVlbiBkaXNjdXNzZWQgc28gZmFyLiBCeSBub3QgYWxsb3dpbmcgYSBUUE0gZW5jYXBzdWxhdGlv biwgaXQgaW1wbGllcyB0aGVyZSBpcyBzb21lIG90aGVyIGVuY2Fwc3VsYXRpb24gYmVzaWRlcyBh ICJUb2tlbiIgdGhhdCBjYXJyaWVzIHRoZSBUUE0gcHJvZHVjZWQgRXZpZGVuY2UuIA0KDQotTmVk DQoNCu+7v09uIDExLzExLzE5LCAxMDoyMyBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIEhlbmsgQmly a2hvbHoiIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+IHdyb3RlOg0KDQogICAgTGF1cmVuY2UgcHJvdmlkZWQgb3B0aW9u cyBhcyBhIGJhc2lzIGZvciBkaXNjdXNzaW9uIGEgd2hpbGUgYWdvLg0KICAgIA0KICAgIEhlIGhp Z2hsaWdodGVkIHRoYXQgQ1dUIG11c3QgYmUgc2lnbmVkIGFuZCBpbGx1c3RyYXRlZCBwcm8gJiBj b24gd3J0Og0KICAgIA0KICAgICogbnVsbCBjaXBoZXIsDQogICAgKiBhbiAidW5zaWduZWQiIGZs YXZvciBvZiBDV1QNCiAgICAqIGFuICJhcmJpdHJhcnkgc2lnbmF0dXJlIg0KICAgIA0KICAgIEl0 IG1pZ2h0IGJlIGEgdmFsaWQgYXNzdW1vdGlvbiB0aGF0IGEgc2luZ2xlICJ0cG0gQ2xhaW0iIHdv dWxkIGhhdmUgbm8gDQogICAgc2lnbmlmaWNhbnQgYWRkZWQgdmFsdWUsIGJ1dCBtdWx0aXBsZSBD bGFpbXMgaW4gYSBtZXNzYWdlIGJ1bmRsZSBtaWdodCANCiAgICAoYWx0aG91Z2ggdGhpcyBtaWdo dCBiZSBhIHNvbHV0aW9uIGxvb2tpbmcgZm9yIGEgcHJvYmxlbT8pLg0KICAgIA0KICAgIFZpZWxl IEdyw7zDn2UsDQogICAgDQogICAgSGVuaw0KICAgIA0KICAgIE9uIDExLjExLjE5IDE5OjExLCBT bWl0aCwgTmVkIHdyb3RlOg0KICAgID4gUmlnaHQuIFRoaXMgaW1wbGllcyB0aGUgUkFUUyDigJx0 b2tlbuKAnSBzaG91bGQgc3VwcG9ydCBleGlzdGluZyDigJxiaW5hcnnigJ0gDQogICAgPiBmb3Jt YXRzIGFzIGFuIGVuY2Fwc3VsYXRpb24gKHNpZ25lZCBieSBhIHNlY29uZCBUQSB3aGVyZSB0aGUg VFBNIGlzIGEgDQogICAgPiBmaXJzdCBUQSkgb3IgYXMgYSBjb252ZXlhbmNlICh1bnNpZ25lZD8p IHRva2VuLiBQb3NzaWJseSwgdGhlIG9ubHkgYWRkZWQgDQogICAgPiB2YWx1ZSBvZiB0aGUgbGF0 dGVyIGlzIGEgdGFnIHRoYXQgaWRlbnRpZmllcyBpdCBhcyBhIFRQTSBiaW5hcnkgZm9ybWF0Pw0K ICAgID4gDQogICAgPiBPbiAxMS8xMC8xOSwgMjM6MjEgUE0sICJSQVRTIG9uIGJlaGFsZiBvZiBP bGl2ZXIsIElhbiAoTm9raWEgLSANCiAgICA+IEZJL0VzcG9vKSIgPHJhdHMtYm91bmNlc0BpZXRm Lm9yZyA8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4gb24gDQogICAgPiBiZWhhbGYgb2Yg aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tIA0KICAgID4gPG1haWx0bzppYW4ub2xpdmVy QG5va2lhLWJlbGwtbGFicy5jb20+PiB3cm90ZToNCiAgICA+IA0KICAgID4+IFJlbW90ZSBUUE0g YXR0ZXN0YXRpb25zIGFyZSB1c2VmdWwgYW5kIG5lY2Vzc2FyeSB0aGUgc2hvcnQgcnVuLCBidXQg YXJlIG9mIHZlcnkgbGltaXRlZCBjYXBhYmlsaXR5LiBJIGJlbGlldmUgdGhhdCA+IEVBVCB3aWxs IHJlcGxhY2UgVFBNIGF0dGVzdGF0aW9ucyAgaW4gdGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVz KSBiZWNhdXNlIHRoZXkgYXJlIGZhciBtb3JlIGV4cHJlc3NpdmUuIA0KICAgID4gSSBrbm93ID4g b3RoZXJzIGJlbGlldmUgdGhhdCB0b28uDQogICAgPiANCiAgICA+IEkgd291bGQgZGlzYWdyZWUg d2l0aCB0aGUgc3RhdGVtZW50IG9mICJzaG9ydCBydW4iIC4uLiBUUE0gaXMgDQogICAgPiBwcmFj dGljYWxseSB0aGUgb25seSBleGlzdGluZyBzdGFuZGFyZGlzZWQgKGhhcmR3YXJlLCBzb2Z0d2Fy ZSwgDQogICAgPiBmaXJtd2FyZSwgbWVhc3VyZW1lbnQgLSB4ODYgb25seSBldGMpIGhhcmR3YXJl IHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIA0KICAgID4gdXNlLCBpZTogcHJhY3RpY2FsbHkgYWxs IHg4NiBtYWNoaW5lcywgIFRoZSBhdHRlc3RhdGlvbiBtZWNoYW5pc21zIA0KICAgID4gcHJvdmlk ZWQgYXJlIGdvaW5nIHRvIGJlIGFyb3VuZCBmb3IgYSB2ZXJ5IGxvbmcgdGltZS4NCiAgICA+IA0K ICAgID4gIEZyb20gdGVsY28gZXhwZXJpZW5jZSwgMzAgeWVhcnMgYWdvIHdlIHNhaWQgU1M3IHdv dWxkIG9ubHkgYmUgYXJvdW5kIGluIA0KICAgID4gdGhlIHNob3J0IHRlcm0uDQogICAgPiANCiAg ICA+PiBUaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0t b25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9t aXNlID4gdG8gYWRkIEVBVCB0byBpdC4NCiAgICA+IA0KICAgID4gQWdyZWUNCiAgICA+IA0KICAg ID4gSWFuDQogICAgPiANCiAgICA+IC0tIA0KICAgID4gDQogICAgPiBEci4gSWFuIE9saXZlcg0K ICAgID4gDQogICAgPiBDeWJlcnNlY3VyaXR5IFJlc2VhcmNoDQogICAgPiANCiAgICA+IERpc3Rp bmd1aXNoZWQgTWVtYmVyIG9mIFRlY2huaWNhbCBTdGFmZg0KICAgID4gDQogICAgPiBOb2tpYSBC ZWxsIExhYnMNCiAgICA+IA0KICAgID4gKzM1OCA1MCA0ODMgNjIzNw0KICAgID4gDQogICAgPiAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0NCiAgICA+IA0KICAgID4gKkZyb206KkxhdXJlbmNlIEx1bmRibGFkZSA8 bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KICAgID4gKlNlbnQ6KiAxMSBOb3ZlbWJlciAyMDE5IDAw OjQ0DQogICAgPiAqVG86KiBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNp c2NvLmNvbT4NCiAgICA+ICpDYzoqIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZy YXVuaG9mZXIuZGU+OyByYXRzQGlldGYuLm9yZyANCiAgICA+IDxyYXRzQGlldGYub3JnPg0KICAg ID4gKlN1YmplY3Q6KiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCBy ZW5hbWUpIGZvciBZYW5nIA0KICAgID4gbW9kdWxlIGRyYWZ0DQogICAgPiANCiAgICA+ICAgICBP biBOb3YgMTAsIDIwMTksIGF0IDI6MjAgUE0sIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKQ0K ICAgID4gICAgIDxuY2Ftd2luZ0BjaXNjby5jb20gPG1haWx0bzpuY2Ftd2luZ0BjaXNjby5jb20+ PiB3cm90ZToNCiAgICA+IA0KICAgID4gICAgIFNvLCBMYXVyZW5jZSwgYXJlIHlvdSBzdGlsbCBP SyB3aXRoIHRoZSBhZG9wdGlvbiBvZiB0aGUgY3VycmVudA0KICAgID4gICAgIGRyYWZ0IHdpdGgg YSByZW5hbWUgZm9yIG5vdz8NCiAgICA+ICAgICBUaGFua3MsIE5hbmN5DQogICAgPiANCiAgICA+ IEkgdGhpbmsgdGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2VyIFJBVFMgZWZmb3J0IG9mIGFkZGlu ZyBFQVQgc3VwcG9ydCB0byANCiAgICA+IHRoaXMgWUFORyBwcm90b2NvbCBpcyByZWFsbHkgaGln aC4gSXQgYSBjb3JlIHRoaW5nIHRvIGRvIHRoYXQgaGVscHMgDQogICAgPiBicmluZyB0b2dldGhl ciB0aGUgdHdvIGF0dGVzdGF0aW9uIHdvcmxkcyBhbmQgbWFrZSB0aGUgVFBNIGFuZCBFQVQgd29y ayANCiAgICA+IGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCiAgICA+IA0KICAg ID4gUmVtb3RlIFRQTSBhdHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVjZXNzYXJ5IHRoZSBz aG9ydCBydW4sIGJ1dCBhcmUgDQogICAgPiBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBi ZWxpZXZlIHRoYXQgRUFUIHdpbGwgcmVwbGFjZSBUUE0gDQogICAgPiBhdHRlc3RhdGlvbnMgaW4g dGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVzKSBiZWNhdXNlIHRoZXkgYXJlIGZhciBtb3JlIA0K ICAgID4gZXhwcmVzc2l2ZS4gSSBrbm93IG90aGVycyBiZWxpZXZlIHRoYXQgdG9vLg0KICAgID4g DQogICAgPiBJZiB3ZSBkb27igJl0IGluY2x1ZGUgRUFUIGluIHRoZSBZQU5HIG1vZGUgaXQgaXMg c29ydCBvZiBsaWtlIGRlZmluaW5nIA0KICAgID4gSFRUUCB0byBvbmx5IGNvbnZleSBIVE1MIHRv IHRoZSBleGNsdXNpb24gb2YgUERGLiBXZeKAmXJlIGRlZmluaW5nIGFuIA0KICAgID4gYXR0ZXN0 YXRpb24gcHJvdG9jb2wgdGhhdCBjYW4gb25seSBtb3ZlIG9uZSBraW5kIG9mIGF0dGVzdGF0aW9u IGV2ZW4gDQogICAgPiB0aG91Z2ggd2UgaGF2ZSBjb25zZW5zdXMgb24gd2hhdCB0aGUgb3RoZXIg b25lIGxvb2tzIGxpa2UuDQogICAgPiANCiAgICA+IEl0IHNlZW1zIHJlbGF0aXZlbHkgc2ltcGxl IHRvIGFkZCBFQVQgc3VwcG9ydCAob3IgcHJvbWlzZSB0byBhZGQgRUFUIA0KICAgID4gc3VwcG9y dCkuIFByZXR0eSBzdXJlIEkgaGVhcmQgSGVuayBhZ3JlZSB0byBhZGQgaXQuDQogICAgPiANCiAg ICA+IFRodXMsIEkgYW0gb3Bwb3NlZCB0byBhZG9wdGlvbiB3aXRoIHRoZSBjdXJyZW50IFRQTS1v bmx5IGRyYWZ0LiBJ4oCZZCBiZSANCiAgICA+IE9LIHdpdGggdGhlIGN1cnJlbnQgZHJhZnQgYW5k IGEgcHJvbWlzZSB0byBhZGQgRUFUIHRvIGl0Lg0KICAgID4gDQogICAgPiBMTA0KICAgID4gDQog ICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CiAgICBSQVRTIG1haWxpbmcgbGlzdA0KICAgIFJBVFNAaWV0Zi5vcmcNCiAgICBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICANCg0K From nobody Mon Nov 11 11:48:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F7B8120A43 for ; Mon, 11 Nov 2019 11:48:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zH-PuWpwHWut for ; Mon, 11 Nov 2019 11:47:59 -0800 (PST) Received: from p3plsmtpa08-09.prod.phx3.secureserver.net (p3plsmtpa08-09.prod.phx3.secureserver.net [173.201.193.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29373120A41 for ; Mon, 11 Nov 2019 11:47:59 -0800 (PST) Received: from [10.141.0.162] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UFfKi6tpsOPjRUFfKisocb; Mon, 11 Nov 2019 12:47:58 -0700 From: Laurence Lundblade Message-Id: <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_FCCED239-E601-4192-B4AE-0588A187A9C9" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 11 Nov 2019 11:47:58 -0800 In-Reply-To: Cc: rats@ietf.org To: Michael Richardson References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfGCmrDU8P+EOTzGMTUAFrkuyOqX7tCPaj0iFccmeiUFOuloXg+y2ho6BqrSKd8HuRUJNNyIGYIae9x6FtGjureMGdtIb0N7iitexNdZULhCFojpXBDt6 NwYiFZ5bSNguGUTfWgbnvwSC9s5XwKtuSoKVI0OiZkuziTXzih7XvssuinU57CtLwdyA8Bpf4OQ3vviMqHzZx0o2wdN6kP3Qc9Q= Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 19:48:07 -0000 --Apple-Mail=_FCCED239-E601-4192-B4AE-0588A187A9C9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Nov 10, 2019, at 9:20 PM, Michael Richardson = wrote: >=20 >>=20 >> I think the value add to the larger RATS effort of adding EAT support >> to this YANG protocol is really high. It a core thing to do that = helps >> bring together the two attestation worlds and make the TPM and EAT >> work here less like ships in the night. >=20 > Can you explain what it would mean to add EAT support for a YANG = module? The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a YANG = expert, but maybe like this: Server Device GetAttestationTypes =E2=80=94> <- TYPE_TPM, TYPE_CWT /* bit flags */ GetAttestation(TYPE_CWT , nonce) =E2=80=94>=20 <=E2=80=94 CWT Token /* a full signed = token */ I assume YANG can carry opaque binary data of moderate size. The yang module information model would have an element for a nonce and = for an opaque EAT. It would not describe any internals of the EAT. The = information model for the EAT is separate in the EAT document. LL =20 --Apple-Mail=_FCCED239-E601-4192-B4AE-0588A187A9C9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 On = Nov 10, 2019, at 9:20 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


I think the value add to the larger RATS effort of adding EAT = support
to this YANG protocol is really high. It a core = thing to do that helps
bring together the two attestation = worlds and make the TPM and EAT
work here less like ships = in the night.

Can you explain what it would mean to add EAT support for a = YANG module?

The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a = YANG expert, but maybe like this:

Server =                     =           Device
GetAttestationTypes = =E2=80=94>
                =                 <- TYPE_TPM, = TYPE_CWT /* bit flags */

GetAttestation(TYPE_CWT , nonce) =E2=80=94> 
        =                     =     <=E2=80=94 CWT Token /* a full signed token = */

I assume YANG = can carry opaque binary data of moderate size.

The yang module = information model would have an element for a nonce and for an opaque = EAT. It would not describe any internals of the EAT. The information = model for the EAT is separate in the EAT document.

LL

                =                 =  

= --Apple-Mail=_FCCED239-E601-4192-B4AE-0588A187A9C9-- From nobody Mon Nov 11 11:52:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD2B5120A01 for ; Mon, 11 Nov 2019 11:52:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 849gg1IyVzpA for ; Mon, 11 Nov 2019 11:52:48 -0800 (PST) Received: from p3plsmtpa08-02.prod.phx3.secureserver.net (p3plsmtpa08-02.prod.phx3.secureserver.net [173.201.193.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 513381209FA for ; Mon, 11 Nov 2019 11:52:38 -0800 (PST) Received: from [10.141.0.162] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UFjpiCA3HSGDjUFjpiQ1D7; Mon, 11 Nov 2019 12:52:37 -0700 From: Laurence Lundblade Message-Id: <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_6EEFEE09-4078-45AB-B62A-2477877FF2AC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 11 Nov 2019 11:52:37 -0800 In-Reply-To: <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> Cc: rats@ietf.org To: Michael Richardson References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfEBu6GzFT9Tq18kIjm4CPf3SF7FYOLiONr8qnAL4XoQ32a8cvDRIxJIyXn3DdahxxxfWuWO1BCQxpMkFzaEm8VWLq7tPY7yRbqlzR7eoISwjZMI5VXiJ 7fBoCMM/Gh5l0L92IaQepSNbgEndcl4yVjAYf44y/KFWxfLKK2rcGDYkPmHVtmBH58CAdCflZ6fVZTL0aU8JTMqgIt+mHjzvaDA= Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 19:52:51 -0000 --Apple-Mail=_6EEFEE09-4078-45AB-B62A-2477877FF2AC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 One more note on this. It seems wrong-headed to try express claims in = YANG. To do that we=E2=80=99d need to invent a YANG signing standard = (YOSE?). Seems like YANG should be thought of as RPC / conveyance / = transport here, not as a way to format a signed attestation token.=20 LL > On Nov 11, 2019, at 11:47 AM, Laurence Lundblade = wrote: >=20 > On Nov 10, 2019, at 9:20 PM, Michael Richardson > wrote: >>=20 >>>=20 >>> I think the value add to the larger RATS effort of adding EAT = support >>> to this YANG protocol is really high. It a core thing to do that = helps >>> bring together the two attestation worlds and make the TPM and EAT >>> work here less like ships in the night. >>=20 >> Can you explain what it would mean to add EAT support for a YANG = module? >=20 > The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a YANG = expert, but maybe like this: >=20 > Server Device > GetAttestationTypes =E2=80=94> > <- TYPE_TPM, TYPE_CWT /* bit flags */ >=20 > GetAttestation(TYPE_CWT , nonce) =E2=80=94>=20 > <=E2=80=94 CWT Token /* a full signed = token */ >=20 > I assume YANG can carry opaque binary data of moderate size. >=20 > The yang module information model would have an element for a nonce = and for an opaque EAT. It would not describe any internals of the EAT. = The information model for the EAT is separate in the EAT document. >=20 > LL >=20 > =20 >=20 --Apple-Mail=_6EEFEE09-4078-45AB-B62A-2477877FF2AC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 One = more note on this. It seems wrong-headed to try express claims in YANG. = To do that we=E2=80=99d need to invent a YANG signing standard (YOSE?). = Seems like YANG should be thought of as RPC / conveyance / transport = here, not as a way to format a signed attestation token. 

LL


On Nov = 11, 2019, at 11:47 AM, Laurence Lundblade <lgl@island-resort.com> wrote:

On Nov 10, 2019, at = 9:20 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


I think the value add to the larger RATS effort of adding EAT = support
to this YANG protocol is really high. It a core = thing to do that helps
bring together the two attestation = worlds and make the TPM and EAT
work here less like ships = in the night.

Can you explain what it would mean to add EAT support for a = YANG module?

The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a = YANG expert, but maybe like this:

Server =                     =           Device
GetAttestationTypes = =E2=80=94>
                =                 <- TYPE_TPM, = TYPE_CWT /* bit flags */

GetAttestation(TYPE_CWT , nonce) =E2=80=94> 
        =                     =     <=E2=80=94 CWT Token /* a full signed token = */

I assume YANG = can carry opaque binary data of moderate size.

The yang module = information model would have an element for a nonce and for an opaque = EAT. It would not describe any internals of the EAT. The information = model for the EAT is separate in the EAT document.

LL

                =                 =  


= --Apple-Mail=_6EEFEE09-4078-45AB-B62A-2477877FF2AC-- From nobody Mon Nov 11 13:27:17 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB99912083A for ; Mon, 11 Nov 2019 13:27:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i4D9Ar9m8i9G for ; Mon, 11 Nov 2019 13:27:13 -0800 (PST) Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3535312006D for ; Mon, 11 Nov 2019 13:27:13 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by orsmga102.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Nov 2019 13:27:11 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,293,1569308400"; d="scan'208,217";a="405365623" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by fmsmga006.fm.intel.com with ESMTP; 11 Nov 2019 13:27:10 -0800 Received: from orsmsx115.amr.corp.intel.com (10.22.240.11) by ORSMSX106.amr.corp.intel.com (10.22.225.133) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 11 Nov 2019 13:27:10 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX115.amr.corp.intel.com ([169.254.4.121]) with mapi id 14.03.0439.000; Mon, 11 Nov 2019 13:27:10 -0800 From: "Smith, Ned" To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAA8mEAgAABTID//5RNgA== Date: Mon, 11 Nov 2019 21:27:09 +0000 Message-ID: <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> In-Reply-To: <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.24.11.50] Content-Type: multipart/alternative; boundary="_000_3310947DEA3141078FF0B917A027C955intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 21:27:16 -0000 --_000_3310947DEA3141078FF0B917A027C955intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WW914oCZcmUgc2F5aW5nIFlBTkcgZmlsbHMgYSBnYXAgdGhhdCBpcyBzaW1pbGFyIHRvIHdoYXQg T3BlbkFQSS9SQU1MIGZpbGxzPw0KDQpJdCBjb3VsZCBiZSBkb2luZyBtb3JlIHRoYW4gdGhpcyBh cyB3ZWxsLCBzdWNoIGFzIGRlZmluaW5nIGNsYWltcyAoYXMgd2FzIHN1Z2dlc3RlZCBpbiBhIHBy ZXZpb3VzIGVtYWlsIGJ5IEkgdGhpbmsgTWljaGFlbCkuIElmIFJBVFMgZGV0ZXJtaW5lZCB0aGF0 IHRoZSB3YXkgdG8gc3BlY2lmeSBhIENsYWltIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCB3YXMg dmlhIENEREwgKG9ubHkpIGFuZCB0aGVyZSBpcyBhIFlBTkcgZXhwcmVzc2lvbiBvZiBpdCwgdGhl biB0aGF0IGltcGxpZXMgYSBDRERMIHRvIFlBTkcgbWFwcGluZyBpcyByZXF1aXJlZC4gKElzIHRo YXQgcmVhc29uYWJsZT8pLg0KDQpPciBSQVRTIHNheXMgdGhhdCBpdCBpcyByZWFzb25hYmxlIHRv IHVzZSBlaXRoZXIvYm90aCBDRERMIGFuZCBZQU5HIGZvciBDbGFpbXMgZXhwcmVzc2lvbnMuIFRo aXMgc3VnZ2VzdHMgdGhlcmUgYXJlIENEREwgYW5kIFlBTkcgbWFwcGluZ3MgdG8gd2hhdGV2ZXIg YXJlIHRoZSB0YXJnZXQgRE1McyAoSk9TRSwgQ09TRSwgREVSLCBzb21ldGhpbmcgZWxzZT8pLiBE b2VzIFlBTkcgc3VwcG9ydCBETUwgbWFwcGluZ3MgdG8gSk9TRSwgQ09TRSBhbmQgREVSIG9yIGp1 c3QgdG8gWUFORz8gRG9lcyBDRERMIHN1cHBvcnQgbWFwcGluZ3MgdG8gREVSIGFuZCBZQU5HIChz b21ldGhpbmcgZWxzZSk/DQoNCklkZWFsbHkgQ0RETCBjYW4gYmUgbWFwcGVkIHRvIG90aGVyIGlu Zm9ybWF0aW9uIG1vZGVsbGluZyBsYW5ndWFnZXMgKGUuZy4gWUFORykgc28gdGhhdCBvbmx5IG9u ZSBub3JtYXRpdmUgZXhwcmVzc2lvbiBuZWVkcyB0byBiZSBjYW5vbml6ZWQuIEhvd2V2ZXIsIHRo YXQgaW1wbGllcyBleHRyYSB3b3JrIG9uIGJlaGFsZiBvZiB0aGUgWUFORyBkcmFmdHMgdG8gY29t ZSB1cCB3aXRoIHRoZSBDRERMIGVxdWl2YWxlbnQuIE1heWJlIHRoYXQgaXMgdW5uZWNlc3Nhcnkg ZXh0cmEgd29yayBmb3IgY29uc2lzdGVuY3kgc2FrZT8gVGhhdCB3b3VsZCBmb3JjZSB0aGUgY29u dmVyc2F0aW9ucyBhcm91bmQgd2hldGhlciDigJh0aW1l4oCZIGFuZCDigJh0aWNrc+KAmSBhcmUg dGhlIHNhbWUgaW5mb3JtYXRpb24gbW9kZWwgZXhwcmVzc2lvbiAoZm9yIGV4YW1wbGUpLg0KDQot TmVkDQoNCk9uIDExLzExLzE5LCAxMTo1MiBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIExhdXJlbmNl IEx1bmRibGFkZSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGll dGYub3JnPiBvbiBiZWhhbGYgb2YgbGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNs YW5kLXJlc29ydC5jb20+PiB3cm90ZToNCg0KT25lIG1vcmUgbm90ZSBvbiB0aGlzLiBJdCBzZWVt cyB3cm9uZy1oZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1zIGluIFlBTkcuIFRvIGRvIHRoYXQg d2XigJlkIG5lZWQgdG8gaW52ZW50IGEgWUFORyBzaWduaW5nIHN0YW5kYXJkIChZT1NFPykuIFNl ZW1zIGxpa2UgWUFORyBzaG91bGQgYmUgdGhvdWdodCBvZiBhcyBSUEMgLyBjb252ZXlhbmNlIC8g dHJhbnNwb3J0IGhlcmUsIG5vdCBhcyBhIHdheSB0byBmb3JtYXQgYSBzaWduZWQgYXR0ZXN0YXRp b24gdG9rZW4uDQoNCkxMDQoNCg0KDQpPbiBOb3YgMTEsIDIwMTksIGF0IDExOjQ3IEFNLCBMYXVy ZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1y ZXNvcnQuY29tPj4gd3JvdGU6DQoNCk9uIE5vdiAxMCwgMjAxOSwgYXQgOToyMCBQTSwgTWljaGFl bCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1jcitpZXRmQHNhbmRl bG1hbi5jYT4+IHdyb3RlOg0KDQoNCkkgdGhpbmsgdGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2Vy IFJBVFMgZWZmb3J0IG9mIGFkZGluZyBFQVQgc3VwcG9ydA0KdG8gdGhpcyBZQU5HIHByb3RvY29s IGlzIHJlYWxseSBoaWdoLiBJdCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwcw0KYnJpbmcg dG9nZXRoZXIgdGhlIHR3byBhdHRlc3RhdGlvbiB3b3JsZHMgYW5kIG1ha2UgdGhlIFRQTSBhbmQg RUFUDQp3b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCg0KQ2FuIHlvdSBl eHBsYWluIHdoYXQgaXQgd291bGQgbWVhbiB0byBhZGQgRUFUIHN1cHBvcnQgZm9yIGEgWUFORyBt b2R1bGU/DQoNClRoZSBFQVQgaXMgYW4gb3BhcXVlIGNodW5rIG9mIGRhdGEgaW4gWUFORy4gSeKA mW0gbm90IGEgWUFORyBleHBlcnQsIGJ1dCBtYXliZSBsaWtlIHRoaXM6DQoNClNlcnZlciAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBEZXZpY2UNCkdldEF0dGVzdGF0aW9uVHlwZXMg4oCU Pg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8LSBUWVBFX1RQTSwgVFlQRV9DV1Qg LyogYml0IGZsYWdzICovDQoNCkdldEF0dGVzdGF0aW9uKFRZUEVfQ1dUICwgbm9uY2UpIOKAlD4N CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPOKAlCBDV1QgVG9rZW4gLyogYSBmdWxs IHNpZ25lZCB0b2tlbiAqLw0KDQpJIGFzc3VtZSBZQU5HIGNhbiBjYXJyeSBvcGFxdWUgYmluYXJ5 IGRhdGEgb2YgbW9kZXJhdGUgc2l6ZS4NCg0KVGhlIHlhbmcgbW9kdWxlIGluZm9ybWF0aW9uIG1v ZGVsIHdvdWxkIGhhdmUgYW4gZWxlbWVudCBmb3IgYSBub25jZSBhbmQgZm9yIGFuIG9wYXF1ZSBF QVQuIEl0IHdvdWxkIG5vdCBkZXNjcmliZSBhbnkgaW50ZXJuYWxzIG9mIHRoZSBFQVQuIFRoZSBp bmZvcm1hdGlvbiBtb2RlbCBmb3IgdGhlIEVBVCBpcyBzZXBhcmF0ZSBpbiB0aGUgRUFUIGRvY3Vt ZW50Lg0KDQpMTA0KDQoNCg0KDQo= --_000_3310947DEA3141078FF0B917A027C955intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvdXJpZXI7DQoJcGFub3NlLTE6MCAwIDAg MCAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgi Ow0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxl IERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFs DQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNv bm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsN CgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xv cjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1v bmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41 aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNl Y3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WW914oCZcmUgc2F5aW5nIFlBTkcg ZmlsbHMgYSBnYXAgdGhhdCBpcyBzaW1pbGFyIHRvIHdoYXQgT3BlbkFQSS9SQU1MIGZpbGxzPzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JdCBjb3VsZCBiZSBkb2luZyBtb3JlIHRoYW4gdGhpcyBh cyB3ZWxsLCBzdWNoIGFzIGRlZmluaW5nIGNsYWltcyAoYXMgd2FzIHN1Z2dlc3RlZCBpbiBhIHBy ZXZpb3VzIGVtYWlsIGJ5IEkgdGhpbmsgTWljaGFlbCkuIElmIFJBVFMgZGV0ZXJtaW5lZCB0aGF0 IHRoZSB3YXkgdG8gc3BlY2lmeSBhIENsYWltIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCB3YXMg dmlhIENEREwgKG9ubHkpIGFuZCB0aGVyZSBpcyBhDQogWUFORyBleHByZXNzaW9uIG9mIGl0LCB0 aGVuIHRoYXQgaW1wbGllcyBhIENEREwgdG8gWUFORyBtYXBwaW5nIGlzIHJlcXVpcmVkLiAoSXMg dGhhdCByZWFzb25hYmxlPykuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9yIFJBVFMgc2F5cyB0 aGF0IGl0IGlzIHJlYXNvbmFibGUgdG8gdXNlIGVpdGhlci9ib3RoIENEREwgYW5kIFlBTkcgZm9y IENsYWltcyBleHByZXNzaW9ucy4gVGhpcyBzdWdnZXN0cyB0aGVyZSBhcmUgQ0RETCBhbmQgWUFO RyBtYXBwaW5ncyB0byB3aGF0ZXZlciBhcmUgdGhlIHRhcmdldCBETUxzIChKT1NFLCBDT1NFLCBE RVIsIHNvbWV0aGluZyBlbHNlPykuIERvZXMgWUFORyBzdXBwb3J0IERNTCBtYXBwaW5ncw0KIHRv IEpPU0UsIENPU0UgYW5kIERFUiBvciBqdXN0IHRvIFlBTkc/IERvZXMgQ0RETCBzdXBwb3J0IG1h cHBpbmdzIHRvIERFUiBhbmQgWUFORyAoc29tZXRoaW5nIGVsc2UpPw0KPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPklkZWFsbHkgQ0RETCBjYW4gYmUgbWFwcGVkIHRvIG90aGVyIGluZm9ybWF0aW9u IG1vZGVsbGluZyBsYW5ndWFnZXMgKGUuZy4gWUFORykgc28gdGhhdCBvbmx5IG9uZSBub3JtYXRp dmUgZXhwcmVzc2lvbiBuZWVkcyB0byBiZSBjYW5vbml6ZWQuIEhvd2V2ZXIsIHRoYXQgaW1wbGll cyBleHRyYSB3b3JrIG9uIGJlaGFsZiBvZiB0aGUgWUFORyBkcmFmdHMgdG8gY29tZSB1cCB3aXRo IHRoZSBDRERMIGVxdWl2YWxlbnQuDQogTWF5YmUgdGhhdCBpcyB1bm5lY2Vzc2FyeSBleHRyYSB3 b3JrIGZvciBjb25zaXN0ZW5jeSBzYWtlPyBUaGF0IHdvdWxkIGZvcmNlIHRoZSBjb252ZXJzYXRp b25zIGFyb3VuZCB3aGV0aGVyIOKAmHRpbWXigJkgYW5kIOKAmHRpY2tz4oCZIGFyZSB0aGUgc2Ft ZSBpbmZvcm1hdGlvbiBtb2RlbCBleHByZXNzaW9uIChmb3IgZXhhbXBsZSkuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPi1OZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+T24gMTEvMTEvMTksIDExOjUyIEFNLCAmcXVvdDtSQVRT IG9uIGJlaGFsZiBvZiBMYXVyZW5jZSBMdW5kYmxhZGUmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0 bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPnJhdHMtYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVo YWxmIG9mDQo8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj5sZ2xAaXNsYW5k LXJlc29ydC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+T25lIG1vcmUgbm90ZSBvbiB0aGlzLiBJdCBzZWVtcyB3cm9uZy1o ZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1zIGluIFlBTkcuIFRvIGRvIHRoYXQgd2XigJlkIG5l ZWQgdG8gaW52ZW50IGEgWUFORyBzaWduaW5nIHN0YW5kYXJkIChZT1NFPykuIFNlZW1zIGxpa2Ug WUFORyBzaG91bGQgYmUgdGhvdWdodCBvZiBhcyBSUEMgLyBjb252ZXlhbmNlIC8gdHJhbnNwb3J0 IGhlcmUsDQogbm90IGFzIGEgd2F5IHRvIGZvcm1hdCBhIHNpZ25lZCBhdHRlc3RhdGlvbiB0b2tl bi4mbmJzcDsgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkxMPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIE5vdiAxMSwgMjAxOSwgYXQgMTE6NDcgQU0sIExhdXJlbmNl IEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGds QGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPk9uIE5vdiAxMCwgMjAxOSwgYXQgOToyMCBQTSwgTWljaGFlbCBSaWNo YXJkc29uICZsdDs8YSBocmVmPSJtYWlsdG86bWNyJiM0MztpZXRmQHNhbmRlbG1hbi5jYSI+bWNy JiM0MztpZXRmQHNhbmRlbG1hbi5jYTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0O2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 b3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQt c2l6ZS1hZGp1c3Q6IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3Bh Y2luZzowcHgiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+ DQpJIHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBhZGRp bmcgRUFUIHN1cHBvcnQ8YnI+DQp0byB0aGlzIFlBTkcgcHJvdG9jb2wgaXMgcmVhbGx5IGhpZ2gu IEl0IGEgY29yZSB0aGluZyB0byBkbyB0aGF0IGhlbHBzPGJyPg0KYnJpbmcgdG9nZXRoZXIgdGhl IHR3byBhdHRlc3RhdGlvbiB3b3JsZHMgYW5kIG1ha2UgdGhlIFRQTSBhbmQgRUFUPGJyPg0Kd29y ayBoZXJlIGxlc3MgbGlrZSBzaGlwcyBpbiB0aGUgbmlnaHQuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNh Ij48YnI+DQpDYW4geW91IGV4cGxhaW4gd2hhdCBpdCB3b3VsZCBtZWFuIHRvIGFkZCBFQVQgc3Vw cG9ydCBmb3IgYSBZQU5HIG1vZHVsZT88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBFQVQgaXMgYW4gb3BhcXVl IGNodW5rIG9mIGRhdGEgaW4gWUFORy4gSeKAmW0gbm90IGEgWUFORyBleHBlcnQsIGJ1dCBtYXli ZSBsaWtlIHRoaXM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPlNlcnZlciAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBEZXZpY2U8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPkdldEF0dGVzdGF0 aW9uVHlwZXMg4oCUJmd0Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q291cmllciI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZsdDstIFRZUEVfVFBNLCBUWVBFX0NXVCAvKiBiaXQgZmxhZ3Mg Ki88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPkdldEF0dGVzdGF0aW9uKFRZUEVfQ1dU PC9zcGFuPiZuYnNwOywmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q291cmllciI+bm9u Y2UpJm5ic3A74oCUJmd0OyZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6Q291cmllciI+Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZsdDvigJQgQ1dUIFRva2VuIC8qIGEgZnVsbCBzaWdu ZWQgdG9rZW4gKi88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPkkgYXNzdW1lIFlBTkcgY2FuIGNhcnJ5IG9wYXF1ZSBiaW5hcnkgZGF0 YSBvZiBtb2RlcmF0ZSBzaXplLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+VGhlIHlhbmcgbW9kdWxlIGluZm9ybWF0aW9uIG1vZGVsIHdvdWxk IGhhdmUgYW4gZWxlbWVudCBmb3IgYSBub25jZSBhbmQgZm9yIGFuIG9wYXF1ZSBFQVQuIEl0IHdv dWxkIG5vdCBkZXNjcmliZSBhbnkgaW50ZXJuYWxzIG9mIHRoZSBFQVQuIFRoZSBpbmZvcm1hdGlv biBtb2RlbCBmb3IgdGhlIEVBVCBpcyBzZXBhcmF0ZSBpbiB0aGUgRUFUIGRvY3VtZW50LjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkxMPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OkNvdXJpZXIiPiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_3310947DEA3141078FF0B917A027C955intelcom_-- From nobody Mon Nov 11 13:32:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 001ED12006D for ; Mon, 11 Nov 2019 13:32:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UGO1gOvvh54G for ; Mon, 11 Nov 2019 13:32:53 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40080.outbound.protection.outlook.com [40.107.4.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6CA8120018 for ; Mon, 11 Nov 2019 13:32:52 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=C50odqYhZa3Cct5qFtclrUr7m6g6eat9lHChoPI9hgVnvL5x+zz1Yx6MN3kDa3sphCKFjMuXgBpResZj+fyxnfqirS9YlRBX5aGfSWJmQLS/CqlgiJEMy071ygearm9cNOcTwoYwOO8Mkxy8ZbDCbQskDb8ZwJaKpefF7C+297d0fVYtMSxGbiQRjJK9uy9KqQclOBKi2dCgfzC/jotNVb14FolzzTAPyV+xh+vYF1k6ftdOJJXQe5M82oQIvewaz7I7WAExccHLbL9gjVGqubQODKPtw04PqDS0UTee4ea/d46Smt6dYPKzqIcnNdnaRaP+yRd4CSvs3YgD8Pj9RA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=K1bSsmgm8OBHKASHtNIvo4zKqePIJ/eyVh9RNlmk9WQ=; b=fUbRK5pqxKEU83ByTwMBAgPkpGJad/RY40c1qK3ojYR2ipOBPK82mRF3sBWALV5YH/fyFCaMPteP9BQY4yNtCe/O/Cte7vQ8fS/lCLxGxQfAl3Rd0/q98iMUOFhQLPxDPuhYEA0fHL2YO+Asfy+t7CRrscNNC/+JCC1Dwgg1J5aFAod5g7H3ZwEAnO8O81CL4TDpDQsHT/tBKyVOu7+vVgj7/0gYgxnxLeHO78f5mU/Y/D5QT5X99UAhrZZU4nKADzziZ1LBphnkiuuww6T9l6409Gtlu1lhB2rIvYhhTMaAxMBOnbkoPdlap0KUHtxJtqwXF2xt1WPtycWTSY2Fyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=K1bSsmgm8OBHKASHtNIvo4zKqePIJ/eyVh9RNlmk9WQ=; b=GJFi4iZJZ76/Nc00QhN9IA0jWoWEuFLeQ91O+NARKWNKvGO04nz89DKywHHlaULcg9kyGL8MVv3lVK6OWKgDABTBN+ZGKw2mbYrNbr7Hn+LNZyPs/l4NsR0FOARk8ioAY27Wsz0YSWyb4Xli9rFTJKn4xMNeZ9OT3OzUwL+ZBjI= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0404.EURP190.PROD.OUTLOOK.COM (10.161.89.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.22; Mon, 11 Nov 2019 21:32:50 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2430.027; Mon, 11 Nov 2019 21:32:50 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: "Smith, Ned" CC: Laurence Lundblade , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAA8mEAgAABTID//5RNgIAAAZaA Date: Mon, 11 Nov 2019 21:32:50 +0000 Message-ID: <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> In-Reply-To: <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM0PR01CA0057.eurprd01.prod.exchangelabs.com (2603:10a6:208:e6::34) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 38f51a2c-4155-433c-2c2d-08d766eeb3d0 x-ms-traffictypediagnostic: AM5P190MB0404: x-ms-exchange-purlcount: 2 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0218A015FA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39850400004)(136003)(376002)(346002)(396003)(189003)(199004)(85182001)(81156014)(478600001)(305945005)(7736002)(229853002)(81166006)(786003)(316002)(6486002)(85202003)(14454004)(8676002)(966005)(1076003)(3450700001)(2906002)(43066004)(6116002)(5660300002)(54906003)(99286004)(25786009)(86362001)(8936002)(476003)(66556008)(446003)(4326008)(6916009)(6436002)(53546011)(386003)(6506007)(6512007)(6306002)(71190400001)(71200400001)(186003)(76176011)(46003)(102836004)(66946007)(66476007)(52116002)(66446008)(6246003)(486006)(11346002)(256004)(64756008)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0404; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: QY4ZmX83S1pk3S00R52DfniikVjsXc29ZKwHHPFQHmn7rRHT0gvUPGmafuyiiWj7oBgA8W9bnjED3oob4TePUV+7ecgCut1EDAjr3wuOlqHpKG9nkt/wYNzINluzFN5Um4Dm2uh7elUmOp7RPiuj5SAh0vIEztZFx+kpuaZh13grIrAoF4dPFawgQaq2YclCtVtg0PoSI343PB75gOGl/vrfA8Pw07hfdkavnL8kFeFJxFTQGiV1ZPz7C/PDFKIAOsf8aVUz6GFtLECDk1KRyxa7kmMLG5NayfBGjPSix7kNES2G0PRo+RMUT3JgoX4eO0lmJnt+MdrMmgQS+0z4ApdmTLkA8NmbN8mMpoAdkeOHb6kEGN/jAEHF4v/G3aUW6zWCqEbLcU7C/BHBw6jPsZzIyyG3vCNNgsFFUBTqwQf8NwO7Rngjk6xQmpB54OZBFKQqy7ccqms7E/SRpHSeY+Al4327xbaJ8FMhu8j71Xg= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 38f51a2c-4155-433c-2c2d-08d766eeb3d0 X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2019 21:32:50.2920 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: S5S+f0Yy2NB4KeBm0zOor2tB8YxkNpHkXozhHcS/7jKXV2qyi3SFyVqsC4f5tl7K2fLrpXfc2red7zfivalyBrJx6FLL0co8VxRV8Ws13vE= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0404 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Nov 2019 21:32:56 -0000 SGksDQoNCndlIGNvbW1vbmx5IGNhbGwgWUFORyBhIGRhdGEgbW9kZWxpbmcgbGFuZ3VhZ2UgYW5k IG5vdCBhbiBpbmZvcm1hdGlvbg0KbW9kZWxpbmcgbGFuZ3VhZ2UuIENhbiBzb21lb25lIGV4cGxh aW4gd2h5IHlvdSB3YW50IHRvIHVzZSBZQU5HPw0KDQovanMNCg0KT24gTW9uLCBOb3YgMTEsIDIw MTkgYXQgMDk6Mjc6MDlQTSArMDAwMCwgU21pdGgsIE5lZCB3cm90ZToNCj4gWW914oCZcmUgc2F5 aW5nIFlBTkcgZmlsbHMgYSBnYXAgdGhhdCBpcyBzaW1pbGFyIHRvIHdoYXQgT3BlbkFQSS9SQU1M IGZpbGxzPw0KPiANCj4gSXQgY291bGQgYmUgZG9pbmcgbW9yZSB0aGFuIHRoaXMgYXMgd2VsbCwg c3VjaCBhcyBkZWZpbmluZyBjbGFpbXMgKGFzIHdhcyBzdWdnZXN0ZWQgaW4gYSBwcmV2aW91cyBl bWFpbCBieSBJIHRoaW5rIE1pY2hhZWwpLiBJZiBSQVRTIGRldGVybWluZWQgdGhhdCB0aGUgd2F5 IHRvIHNwZWNpZnkgYSBDbGFpbSBpbiB0aGUgaW5mb3JtYXRpb24gbW9kZWwgd2FzIHZpYSBDRERM IChvbmx5KSBhbmQgdGhlcmUgaXMgYSBZQU5HIGV4cHJlc3Npb24gb2YgaXQsIHRoZW4gdGhhdCBp bXBsaWVzIGEgQ0RETCB0byBZQU5HIG1hcHBpbmcgaXMgcmVxdWlyZWQuIChJcyB0aGF0IHJlYXNv bmFibGU/KS4NCj4gDQo+IE9yIFJBVFMgc2F5cyB0aGF0IGl0IGlzIHJlYXNvbmFibGUgdG8gdXNl IGVpdGhlci9ib3RoIENEREwgYW5kIFlBTkcgZm9yIENsYWltcyBleHByZXNzaW9ucy4gVGhpcyBz dWdnZXN0cyB0aGVyZSBhcmUgQ0RETCBhbmQgWUFORyBtYXBwaW5ncyB0byB3aGF0ZXZlciBhcmUg dGhlIHRhcmdldCBETUxzIChKT1NFLCBDT1NFLCBERVIsIHNvbWV0aGluZyBlbHNlPykuIERvZXMg WUFORyBzdXBwb3J0IERNTCBtYXBwaW5ncyB0byBKT1NFLCBDT1NFIGFuZCBERVIgb3IganVzdCB0 byBZQU5HPyBEb2VzIENEREwgc3VwcG9ydCBtYXBwaW5ncyB0byBERVIgYW5kIFlBTkcgKHNvbWV0 aGluZyBlbHNlKT8NCj4gDQo+IElkZWFsbHkgQ0RETCBjYW4gYmUgbWFwcGVkIHRvIG90aGVyIGlu Zm9ybWF0aW9uIG1vZGVsbGluZyBsYW5ndWFnZXMgKGUuZy4gWUFORykgc28gdGhhdCBvbmx5IG9u ZSBub3JtYXRpdmUgZXhwcmVzc2lvbiBuZWVkcyB0byBiZSBjYW5vbml6ZWQuIEhvd2V2ZXIsIHRo YXQgaW1wbGllcyBleHRyYSB3b3JrIG9uIGJlaGFsZiBvZiB0aGUgWUFORyBkcmFmdHMgdG8gY29t ZSB1cCB3aXRoIHRoZSBDRERMIGVxdWl2YWxlbnQuIE1heWJlIHRoYXQgaXMgdW5uZWNlc3Nhcnkg ZXh0cmEgd29yayBmb3IgY29uc2lzdGVuY3kgc2FrZT8gVGhhdCB3b3VsZCBmb3JjZSB0aGUgY29u dmVyc2F0aW9ucyBhcm91bmQgd2hldGhlciDigJh0aW1l4oCZIGFuZCDigJh0aWNrc+KAmSBhcmUg dGhlIHNhbWUgaW5mb3JtYXRpb24gbW9kZWwgZXhwcmVzc2lvbiAoZm9yIGV4YW1wbGUpLg0KPiAN Cj4gLU5lZA0KPiANCj4gT24gMTEvMTEvMTksIDExOjUyIEFNLCAiUkFUUyBvbiBiZWhhbGYgb2Yg TGF1cmVuY2UgTHVuZGJsYWRlIiA8cmF0cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJv dW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRv OmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+IHdyb3RlOg0KPiANCj4gT25lIG1vcmUgbm90ZSBvbiB0 aGlzLiBJdCBzZWVtcyB3cm9uZy1oZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1zIGluIFlBTkcu IFRvIGRvIHRoYXQgd2XigJlkIG5lZWQgdG8gaW52ZW50IGEgWUFORyBzaWduaW5nIHN0YW5kYXJk IChZT1NFPykuIFNlZW1zIGxpa2UgWUFORyBzaG91bGQgYmUgdGhvdWdodCBvZiBhcyBSUEMgLyBj b252ZXlhbmNlIC8gdHJhbnNwb3J0IGhlcmUsIG5vdCBhcyBhIHdheSB0byBmb3JtYXQgYSBzaWdu ZWQgYXR0ZXN0YXRpb24gdG9rZW4uDQo+IA0KPiBMTA0KPiANCj4gDQo+IA0KPiBPbiBOb3YgMTEs IDIwMTksIGF0IDExOjQ3IEFNLCBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0 LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQo+IA0KPiBPbiBOb3Yg MTAsIDIwMTksIGF0IDk6MjAgUE0sIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVs bWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PiB3cm90ZToNCj4gDQo+IA0KPiBJ IHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBhZGRpbmcg RUFUIHN1cHBvcnQNCj4gdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJlYWxseSBoaWdoLiBJdCBh IGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwcw0KPiBicmluZyB0b2dldGhlciB0aGUgdHdvIGF0 dGVzdGF0aW9uIHdvcmxkcyBhbmQgbWFrZSB0aGUgVFBNIGFuZCBFQVQNCj4gd29yayBoZXJlIGxl c3MgbGlrZSBzaGlwcyBpbiB0aGUgbmlnaHQuDQo+IA0KPiBDYW4geW91IGV4cGxhaW4gd2hhdCBp dCB3b3VsZCBtZWFuIHRvIGFkZCBFQVQgc3VwcG9ydCBmb3IgYSBZQU5HIG1vZHVsZT8NCj4gDQo+ IFRoZSBFQVQgaXMgYW4gb3BhcXVlIGNodW5rIG9mIGRhdGEgaW4gWUFORy4gSeKAmW0gbm90IGEg WUFORyBleHBlcnQsIGJ1dCBtYXliZSBsaWtlIHRoaXM6DQo+IA0KPiBTZXJ2ZXIgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgRGV2aWNlDQo+IEdldEF0dGVzdGF0aW9uVHlwZXMg4oCUPg0K PiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwtIFRZUEVfVFBNLCBUWVBFX0NXVCAv KiBiaXQgZmxhZ3MgKi8NCj4gDQo+IEdldEF0dGVzdGF0aW9uKFRZUEVfQ1dUICwgbm9uY2UpIOKA lD4NCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA84oCUIENXVCBUb2tlbiAvKiBh IGZ1bGwgc2lnbmVkIHRva2VuICovDQo+IA0KPiBJIGFzc3VtZSBZQU5HIGNhbiBjYXJyeSBvcGFx dWUgYmluYXJ5IGRhdGEgb2YgbW9kZXJhdGUgc2l6ZS4NCj4gDQo+IFRoZSB5YW5nIG1vZHVsZSBp bmZvcm1hdGlvbiBtb2RlbCB3b3VsZCBoYXZlIGFuIGVsZW1lbnQgZm9yIGEgbm9uY2UgYW5kIGZv ciBhbiBvcGFxdWUgRUFULiBJdCB3b3VsZCBub3QgZGVzY3JpYmUgYW55IGludGVybmFscyBvZiB0 aGUgRUFULiBUaGUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIHRoZSBFQVQgaXMgc2VwYXJhdGUgaW4g dGhlIEVBVCBkb2N1bWVudC4NCj4gDQo+IExMDQo+IA0KPiANCj4gDQo+IA0KDQo+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFJBVFMgbWFpbGluZyBs aXN0DQo+IFJBVFNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9yYXRzDQoNCg0KLS0gDQpKdWVyZ2VuIFNjaG9lbndhZWxkZXIgICAgICAgICAgIEphY29i cyBVbml2ZXJzaXR5IEJyZW1lbiBnR21iSA0KUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAg ICBDYW1wdXMgUmluZyAxIHwgMjg3NTkgQnJlbWVuIHwgR2VybWFueQ0KRmF4OiAgICs0OSA0MjEg MjAwIDMxMDMgICAgICAgICA8aHR0cHM6Ly93d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUvPg0K From nobody Mon Nov 11 16:56:42 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB601120072 for ; Mon, 11 Nov 2019 16:56:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fvFuxy3bR-lC for ; Mon, 11 Nov 2019 16:56:39 -0800 (PST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E15D12003F for ; Mon, 11 Nov 2019 16:56:39 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga004.fm.intel.com ([10.253.24.48]) by orsmga105.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 11 Nov 2019 16:56:38 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,294,1569308400"; d="scan'208";a="229132059" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by fmsmga004.fm.intel.com with ESMTP; 11 Nov 2019 16:56:37 -0800 Received: from orsmsx151.amr.corp.intel.com (10.22.226.38) by ORSMSX106.amr.corp.intel.com (10.22.225.133) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 11 Nov 2019 16:56:37 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX151.amr.corp.intel.com ([169.254.7.41]) with mapi id 14.03.0439.000; Mon, 11 Nov 2019 16:56:37 -0800 From: "Smith, Ned" To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Michael Richardson , Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAA8mEAgAABTID//5RNgIAAAZaAgAA47IA= Date: Tue, 12 Nov 2019 00:56:36 +0000 Message-ID: <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> In-Reply-To: <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.24.15.103] Content-Type: text/plain; charset="utf-8" Content-ID: <339873D9AC05D94F86BD9CCEDE591343@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 00:56:41 -0000 WUFORyBJIGFscmVhZHkgYmVpbmcgdXNlZCB0byBkZXNjcmliZSBhdHRlc3RhdGlvbiBmbG93cyBh bmQgYXR0ZXN0YXRpb24gcmVsYXRlZCBkYXRhLiBTbyB0aGUgcmVhc29uIHdoeSBpcyBpdCBpcyBh bHJlYWR5IGRlcGxveWVkLg0KDQpZQU5HIGhhcyBiZWVuIHVzZWQgYXMgYW4gSU0gbGFuZ3VhZ2Ug YnV0IG1vcmUgY29tbW9ubHkgYXMgYSBETUwuIA0KDQpXaGVuIHRyeWluZyB0byB0YWxrIGFib3V0 IGF0dGVzdGF0aW9uICJDbGFpbXMiIGl0IGhlbHBzIGlmIHdlJ3JlIHNwZWFraW5nIHRoZSBzYW1l IGxhbmd1YWdlLiANCg0K77u/T24gMTEvMTEvMTksIDEzOjMzIFBNLCAiUkFUUyBvbiBiZWhhbGYg b2YgU2Now7Zud8OkbGRlciwgSsO8cmdlbiIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhh bGYgb2YgSi5TY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPiB3cm90ZToNCg0KICAg IEhpLA0KICAgIA0KICAgIHdlIGNvbW1vbmx5IGNhbGwgWUFORyBhIGRhdGEgbW9kZWxpbmcgbGFu Z3VhZ2UgYW5kIG5vdCBhbiBpbmZvcm1hdGlvbg0KICAgIG1vZGVsaW5nIGxhbmd1YWdlLiBDYW4g c29tZW9uZSBleHBsYWluIHdoeSB5b3Ugd2FudCB0byB1c2UgWUFORz8NCiAgICANCiAgICAvanMN CiAgICANCiAgICBPbiBNb24sIE5vdiAxMSwgMjAxOSBhdCAwOToyNzowOVBNICswMDAwLCBTbWl0 aCwgTmVkIHdyb3RlOg0KICAgID4gWW914oCZcmUgc2F5aW5nIFlBTkcgZmlsbHMgYSBnYXAgdGhh dCBpcyBzaW1pbGFyIHRvIHdoYXQgT3BlbkFQSS9SQU1MIGZpbGxzPw0KICAgID4gDQogICAgPiBJ dCBjb3VsZCBiZSBkb2luZyBtb3JlIHRoYW4gdGhpcyBhcyB3ZWxsLCBzdWNoIGFzIGRlZmluaW5n IGNsYWltcyAoYXMgd2FzIHN1Z2dlc3RlZCBpbiBhIHByZXZpb3VzIGVtYWlsIGJ5IEkgdGhpbmsg TWljaGFlbCkuIElmIFJBVFMgZGV0ZXJtaW5lZCB0aGF0IHRoZSB3YXkgdG8gc3BlY2lmeSBhIENs YWltIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCB3YXMgdmlhIENEREwgKG9ubHkpIGFuZCB0aGVy ZSBpcyBhIFlBTkcgZXhwcmVzc2lvbiBvZiBpdCwgdGhlbiB0aGF0IGltcGxpZXMgYSBDRERMIHRv IFlBTkcgbWFwcGluZyBpcyByZXF1aXJlZC4gKElzIHRoYXQgcmVhc29uYWJsZT8pLg0KICAgID4g DQogICAgPiBPciBSQVRTIHNheXMgdGhhdCBpdCBpcyByZWFzb25hYmxlIHRvIHVzZSBlaXRoZXIv Ym90aCBDRERMIGFuZCBZQU5HIGZvciBDbGFpbXMgZXhwcmVzc2lvbnMuIFRoaXMgc3VnZ2VzdHMg dGhlcmUgYXJlIENEREwgYW5kIFlBTkcgbWFwcGluZ3MgdG8gd2hhdGV2ZXIgYXJlIHRoZSB0YXJn ZXQgRE1McyAoSk9TRSwgQ09TRSwgREVSLCBzb21ldGhpbmcgZWxzZT8pLiBEb2VzIFlBTkcgc3Vw cG9ydCBETUwgbWFwcGluZ3MgdG8gSk9TRSwgQ09TRSBhbmQgREVSIG9yIGp1c3QgdG8gWUFORz8g RG9lcyBDRERMIHN1cHBvcnQgbWFwcGluZ3MgdG8gREVSIGFuZCBZQU5HIChzb21ldGhpbmcgZWxz ZSk/DQogICAgPiANCiAgICA+IElkZWFsbHkgQ0RETCBjYW4gYmUgbWFwcGVkIHRvIG90aGVyIGlu Zm9ybWF0aW9uIG1vZGVsbGluZyBsYW5ndWFnZXMgKGUuZy4gWUFORykgc28gdGhhdCBvbmx5IG9u ZSBub3JtYXRpdmUgZXhwcmVzc2lvbiBuZWVkcyB0byBiZSBjYW5vbml6ZWQuIEhvd2V2ZXIsIHRo YXQgaW1wbGllcyBleHRyYSB3b3JrIG9uIGJlaGFsZiBvZiB0aGUgWUFORyBkcmFmdHMgdG8gY29t ZSB1cCB3aXRoIHRoZSBDRERMIGVxdWl2YWxlbnQuIE1heWJlIHRoYXQgaXMgdW5uZWNlc3Nhcnkg ZXh0cmEgd29yayBmb3IgY29uc2lzdGVuY3kgc2FrZT8gVGhhdCB3b3VsZCBmb3JjZSB0aGUgY29u dmVyc2F0aW9ucyBhcm91bmQgd2hldGhlciDigJh0aW1l4oCZIGFuZCDigJh0aWNrc+KAmSBhcmUg dGhlIHNhbWUgaW5mb3JtYXRpb24gbW9kZWwgZXhwcmVzc2lvbiAoZm9yIGV4YW1wbGUpLg0KICAg ID4gDQogICAgPiAtTmVkDQogICAgPiANCiAgICA+IE9uIDExLzExLzE5LCAxMTo1MiBBTSwgIlJB VFMgb24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSIgPHJhdHMtYm91bmNlc0BpZXRmLm9y ZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgbGdsQGlzbGFuZC1y ZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiB3cm90ZToNCiAgICA+IA0K ICAgID4gT25lIG1vcmUgbm90ZSBvbiB0aGlzLiBJdCBzZWVtcyB3cm9uZy1oZWFkZWQgdG8gdHJ5 IGV4cHJlc3MgY2xhaW1zIGluIFlBTkcuIFRvIGRvIHRoYXQgd2XigJlkIG5lZWQgdG8gaW52ZW50 IGEgWUFORyBzaWduaW5nIHN0YW5kYXJkIChZT1NFPykuIFNlZW1zIGxpa2UgWUFORyBzaG91bGQg YmUgdGhvdWdodCBvZiBhcyBSUEMgLyBjb252ZXlhbmNlIC8gdHJhbnNwb3J0IGhlcmUsIG5vdCBh cyBhIHdheSB0byBmb3JtYXQgYSBzaWduZWQgYXR0ZXN0YXRpb24gdG9rZW4uDQogICAgPiANCiAg ICA+IExMDQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgPiBPbiBOb3YgMTEsIDIwMTksIGF0 IDExOjQ3IEFNLCBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWls dG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQogICAgPiANCiAgICA+IE9uIE5vdiAx MCwgMjAxOSwgYXQgOToyMCBQTSwgTWljaGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxt YW4uY2E8bWFpbHRvOm1jcitpZXRmQHNhbmRlbG1hbi5jYT4+IHdyb3RlOg0KICAgID4gDQogICAg PiANCiAgICA+IEkgdGhpbmsgdGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2VyIFJBVFMgZWZmb3J0 IG9mIGFkZGluZyBFQVQgc3VwcG9ydA0KICAgID4gdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJl YWxseSBoaWdoLiBJdCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwcw0KICAgID4gYnJpbmcg dG9nZXRoZXIgdGhlIHR3byBhdHRlc3RhdGlvbiB3b3JsZHMgYW5kIG1ha2UgdGhlIFRQTSBhbmQg RUFUDQogICAgPiB3b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCiAgICA+ IA0KICAgID4gQ2FuIHlvdSBleHBsYWluIHdoYXQgaXQgd291bGQgbWVhbiB0byBhZGQgRUFUIHN1 cHBvcnQgZm9yIGEgWUFORyBtb2R1bGU/DQogICAgPiANCiAgICA+IFRoZSBFQVQgaXMgYW4gb3Bh cXVlIGNodW5rIG9mIGRhdGEgaW4gWUFORy4gSeKAmW0gbm90IGEgWUFORyBleHBlcnQsIGJ1dCBt YXliZSBsaWtlIHRoaXM6DQogICAgPiANCiAgICA+IFNlcnZlciAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBEZXZpY2UNCiAgICA+IEdldEF0dGVzdGF0aW9uVHlwZXMg4oCUPg0KICAgID4g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8LSBUWVBFX1RQTSwgVFlQRV9DV1QgLyog Yml0IGZsYWdzICovDQogICAgPiANCiAgICA+IEdldEF0dGVzdGF0aW9uKFRZUEVfQ1dUICwgbm9u Y2UpIOKAlD4NCiAgICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPOKAlCBDV1Qg VG9rZW4gLyogYSBmdWxsIHNpZ25lZCB0b2tlbiAqLw0KICAgID4gDQogICAgPiBJIGFzc3VtZSBZ QU5HIGNhbiBjYXJyeSBvcGFxdWUgYmluYXJ5IGRhdGEgb2YgbW9kZXJhdGUgc2l6ZS4NCiAgICA+ IA0KICAgID4gVGhlIHlhbmcgbW9kdWxlIGluZm9ybWF0aW9uIG1vZGVsIHdvdWxkIGhhdmUgYW4g ZWxlbWVudCBmb3IgYSBub25jZSBhbmQgZm9yIGFuIG9wYXF1ZSBFQVQuIEl0IHdvdWxkIG5vdCBk ZXNjcmliZSBhbnkgaW50ZXJuYWxzIG9mIHRoZSBFQVQuIFRoZSBpbmZvcm1hdGlvbiBtb2RlbCBm b3IgdGhlIEVBVCBpcyBzZXBhcmF0ZSBpbiB0aGUgRUFUIGRvY3VtZW50Lg0KICAgID4gDQogICAg PiBMTA0KICAgID4gDQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgDQogICAgPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gUkFUUyBtYWls aW5nIGxpc3QNCiAgICA+IFJBVFNAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vcmF0cw0KICAgIA0KICAgIA0KICAgIC0tIA0KICAgIEp1ZXJnZW4g U2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNpdHkgQnJlbWVuIGdHbWJIDQog ICAgUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAgICBDYW1wdXMgUmluZyAxIHwgMjg3NTkg QnJlbWVuIHwgR2VybWFueQ0KICAgIEZheDogICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAgPGh0 dHBzOi8vd3d3LmphY29icy11bml2ZXJzaXR5LmRlLz4NCiAgICBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIFJBVFMgbWFpbGluZyBsaXN0DQogICAg UkFUU0BpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v cmF0cw0KICAgIA0KDQo= From nobody Mon Nov 11 17:18:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 942ED120072 for ; Mon, 11 Nov 2019 17:18:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n12mKLVZC3IZ for ; Mon, 11 Nov 2019 17:18:35 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A60C51200FE for ; Mon, 11 Nov 2019 17:18:30 -0800 (PST) Received: from [192.168.42.200] (unknown [209.52.88.203]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 1E4703897A for ; Mon, 11 Nov 2019 20:15:23 -0500 (EST) To: "rats@ietf.org" From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> Date: Tue, 12 Nov 2019 09:18:24 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------89B8059F98A5CC9261401DF0" Content-Language: en-US Archived-At: Subject: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 01:18:38 -0000 This is a multi-part message in MIME format. --------------89B8059F98A5CC9261401DF0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Some of you may know of my obsession (fetish?) with icons for things. I strongly think that good images help us do good marketing.  (6tisch made a nice logo for instance, and I think it has helped) For a presentation I concocted the attached icon for remote attestation. It's in a pull request to the iot-dir at https://github.com/iot-dir/slides/pull/3 URLs: https://github.com/mcr/slides/blob/master/icons/rats.svg https://raw.githubusercontent.com/mcr/slides/master/icons/rats.png And attached in SVG, assuming it gets through the list. The RAT is looking through a telescope at some "code".  Maybe that's more about the RIV use case than some other use cases, but --------------89B8059F98A5CC9261401DF0 Content-Type: image/svg+xml; name="rats.svg" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="rats.svg" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9Im5vIj8+ CjwhLS0gQ3JlYXRlZCB3aXRoIElua3NjYXBlIChodHRwOi8vd3d3Lmlua3NjYXBlLm9yZy8p IC0tPgoKPHN2ZwogICB4bWxuczpkYz0iaHR0cDovL3B1cmwub3JnL2RjL2VsZW1lbnRzLzEu MS8iCiAgIHhtbG5zOmNjPSJodHRwOi8vY3JlYXRpdmVjb21tb25zLm9yZy9ucyMiCiAgIHht bG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIyIK ICAgeG1sbnM6c3ZnPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIKICAgeG1sbnM9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIgogICB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53 My5vcmcvMTk5OS94bGluayIKICAgeG1sbnM6c29kaXBvZGk9Imh0dHA6Ly9zb2RpcG9kaS5z b3VyY2Vmb3JnZS5uZXQvRFREL3NvZGlwb2RpLTAuZHRkIgogICB4bWxuczppbmtzY2FwZT0i aHR0cDovL3d3dy5pbmtzY2FwZS5vcmcvbmFtZXNwYWNlcy9pbmtzY2FwZSIKICAgd2lkdGg9 Ijc0bW0iCiAgIGhlaWdodD0iOTBtbSIKICAgdmlld0JveD0iMCAwIDc0IDkwIgogICB2ZXJz aW9uPSIxLjEiCiAgIGlkPSJzdmc4IgogICBpbmtzY2FwZTp2ZXJzaW9uPSIwLjkyLjEgcjE1 MzcxIgogICBzb2RpcG9kaTpkb2NuYW1lPSJyYXRzLnN2ZyIKICAgaW5rc2NhcGU6ZXhwb3J0 LWZpbGVuYW1lPSIvY29ycC9pZXRmMi9pb3QtZGlyL3NsaWRlcy9pY29ucy9yYXRzLnBuZyIK ICAgaW5rc2NhcGU6ZXhwb3J0LXhkcGk9IjEwMCIKICAgaW5rc2NhcGU6ZXhwb3J0LXlkcGk9 IjEwMCI+CiAgPGRlZnMKICAgICBpZD0iZGVmczIiPgogICAgPGlua3NjYXBlOnBlcnNwZWN0 aXZlCiAgICAgICBpZD0icGVyc3BlY3RpdmUxMCIKICAgICAgIGlua3NjYXBlOnBlcnNwM2Qt b3JpZ2luPSIzNzIuMDQ3MjQgOiAzNTAuNzg3NDEgOiAxIgogICAgICAgaW5rc2NhcGU6dnBf ej0iNzQ0LjA5NDQ4IDogNTI2LjE4MTEyIDogMSIKICAgICAgIGlua3NjYXBlOnZwX3k9IjAg OiAxMDAwLjAwMDEgOiAwIgogICAgICAgaW5rc2NhcGU6dnBfeD0iMCA6IDUyNi4xODExMiA6 IDEiCiAgICAgICBzb2RpcG9kaTp0eXBlPSJpbmtzY2FwZTpwZXJzcDNkIiAvPgogICAgPGxp bmVhckdyYWRpZW50CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQzNzc2Ij4KICAgICAgPHN0 b3AKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6I2Q0YjVhMjtzdG9wLW9wYWNpdHk6MSIK ICAgICAgICAgb2Zmc2V0PSIwIgogICAgICAgICBpZD0ic3RvcDM3NzgiIC8+CiAgICAgIDxz dG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM3MTRjMzU7c3RvcC1vcGFjaXR5OjEi CiAgICAgICAgIG9mZnNldD0iMC42MDgzNDAwOCIKICAgICAgICAgaWQ9InN0b3AzNzgwIiAv PgogICAgICA8c3RvcAogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjojMmUxZjE2O3N0b3At b3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjAuNzE4MTgyOTgiCiAgICAgICAgIGlkPSJz dG9wMzc4MiIgLz4KICAgICAgPHN0b3AKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6Izcx NGMzNTtzdG9wLW9wYWNpdHk6MSIKICAgICAgICAgb2Zmc2V0PSIwLjg1MDgzOTQ0IgogICAg ICAgICBpZD0ic3RvcDM3ODQiIC8+CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9w LWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjEiCiAgICAg ICAgIGlkPSJzdG9wMzc4NiIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGluZWFy R3JhZGllbnQKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDM2OTAiPgogICAgICA8c3RvcAog ICAgICAgICBpZD0ic3RvcDM2OTIiCiAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgc3R5 bGU9InN0b3AtY29sb3I6d2hpdGU7c3RvcC1vcGFjaXR5OjEiIC8+CiAgICAgIDxzdG9wCiAg ICAgICAgIGlkPSJzdG9wMzY5NCIKICAgICAgICAgb2Zmc2V0PSIwLjU2ODE5NDc1IgogICAg ICAgICBzdHlsZT0ic3RvcC1jb2xvcjojN2M3YzdjO3N0b3Atb3BhY2l0eToxIiAvPgogICAg ICA8c3RvcAogICAgICAgICBpZD0ic3RvcDM2OTYiCiAgICAgICAgIG9mZnNldD0iMC44MzA3 NzAwOCIKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6YmxhY2s7c3RvcC1vcGFjaXR5OjEi IC8+CiAgICAgIDxzdG9wCiAgICAgICAgIGlkPSJzdG9wMzY5OCIKICAgICAgICAgb2Zmc2V0 PSIwLjkyNzIwNTk4IgogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjojN2I3YjdiO3N0b3At b3BhY2l0eToxIiAvPgogICAgICA8c3RvcAogICAgICAgICBpZD0ic3RvcDM3MDAiCiAgICAg ICAgIG9mZnNldD0iMSIKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6d2hpdGU7c3RvcC1v cGFjaXR5OjEiIC8+CiAgICA8L2xpbmVhckdyYWRpZW50PgogICAgPGxpbmVhckdyYWRpZW50 CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQzNjIyIj4KICAgICAgPHN0b3AKICAgICAgICAg aWQ9InN0b3AzNjI0IgogICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgIHN0eWxlPSJzdG9w LWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0eToxIiAvPgogICAgICA8c3RvcAogICAgICAgICBp ZD0ic3RvcDM2MjYiCiAgICAgICAgIG9mZnNldD0iMC41Nzk1Mjg4MSIKICAgICAgICAgc3R5 bGU9InN0b3AtY29sb3I6IzdjN2M3YztzdG9wLW9wYWNpdHk6MSIgLz4KICAgICAgPHN0b3AK ICAgICAgICAgaWQ9InN0b3AzNjI4IgogICAgICAgICBvZmZzZXQ9IjAuNzUwNTk1NjMiCiAg ICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOmJsYWNrO3N0b3Atb3BhY2l0eToxIiAvPgogICAg ICA8c3RvcAogICAgICAgICBpZD0ic3RvcDM2MzAiCiAgICAgICAgIG9mZnNldD0iMC44NzA2 NDcxMyIKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6IzdiN2I3YjtzdG9wLW9wYWNpdHk6 MSIgLz4KICAgICAgPHN0b3AKICAgICAgICAgaWQ9InN0b3AzNjMyIgogICAgICAgICBvZmZz ZXQ9IjEiCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0eTox IiAvPgogICAgPC9saW5lYXJHcmFkaWVudD4KICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAg aWQ9ImxpbmVhckdyYWRpZW50MzYwMiI+CiAgICAgIDxzdG9wCiAgICAgICAgIGlkPSJzdG9w MzYwNCIKICAgICAgICAgb2Zmc2V0PSIwIgogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjp3 aGl0ZTtzdG9wLW9wYWNpdHk6MSIgLz4KICAgICAgPHN0b3AKICAgICAgICAgaWQ9InN0b3Az NjA2IgogICAgICAgICBvZmZzZXQ9IjAuNjA4MzQwMDgiCiAgICAgICAgIHN0eWxlPSJzdG9w LWNvbG9yOiM3YzdjN2M7c3RvcC1vcGFjaXR5OjEiIC8+CiAgICAgIDxzdG9wCiAgICAgICAg IGlkPSJzdG9wMzYwOCIKICAgICAgICAgb2Zmc2V0PSIwLjcxODE4Mjk4IgogICAgICAgICBz dHlsZT0ic3RvcC1jb2xvcjpibGFjaztzdG9wLW9wYWNpdHk6MSIgLz4KICAgICAgPHN0b3AK ICAgICAgICAgaWQ9InN0b3AzNjEwIgogICAgICAgICBvZmZzZXQ9IjAuODUwODM5NDQiCiAg ICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM3YjdiN2I7c3RvcC1vcGFjaXR5OjEiIC8+CiAg ICAgIDxzdG9wCiAgICAgICAgIGlkPSJzdG9wMzYxMiIKICAgICAgICAgb2Zmc2V0PSIxIgog ICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjp3aGl0ZTtzdG9wLW9wYWNpdHk6MSIgLz4KICAg IDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIGlkPSJsaW5l YXJHcmFkaWVudDM1ODIiPgogICAgICA8c3RvcAogICAgICAgICBpZD0ic3RvcDM1ODQiCiAg ICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6d2hpdGU7c3Rv cC1vcGFjaXR5OjEiIC8+CiAgICAgIDxzdG9wCiAgICAgICAgIGlkPSJzdG9wMzU4NiIKICAg ICAgICAgb2Zmc2V0PSIwLjUxODgzNDQ3IgogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjoj N2M3YzdjO3N0b3Atb3BhY2l0eToxIiAvPgogICAgICA8c3RvcAogICAgICAgICBpZD0ic3Rv cDM1ODgiCiAgICAgICAgIG9mZnNldD0iMC43NzQzMjI1NyIKICAgICAgICAgc3R5bGU9InN0 b3AtY29sb3I6YmxhY2s7c3RvcC1vcGFjaXR5OjEiIC8+CiAgICAgIDxzdG9wCiAgICAgICAg IGlkPSJzdG9wMzU5MCIKICAgICAgICAgb2Zmc2V0PSIwLjg4NTM3MDU1IgogICAgICAgICBz dHlsZT0ic3RvcC1jb2xvcjojN2I3YjdiO3N0b3Atb3BhY2l0eToxIiAvPgogICAgICA8c3Rv cAogICAgICAgICBpZD0ic3RvcDM1OTIiCiAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAg c3R5bGU9InN0b3AtY29sb3I6d2hpdGU7c3RvcC1vcGFjaXR5OjEiIC8+CiAgICA8L2xpbmVh ckdyYWRpZW50PgogICAgPGxpbmVhckdyYWRpZW50CiAgICAgICBpZD0ibGluZWFyR3JhZGll bnQzNTcwIj4KICAgICAgPHN0b3AKICAgICAgICAgaWQ9InN0b3AzNTcyIgogICAgICAgICBv ZmZzZXQ9IjAiCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0 eToxIiAvPgogICAgICA8c3RvcAogICAgICAgICBpZD0ic3RvcDM1NzQiCiAgICAgICAgIG9m ZnNldD0iMC42MDM2MzA1NCIKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6IzdjN2M3Yztz dG9wLW9wYWNpdHk6MSIgLz4KICAgICAgPHN0b3AKICAgICAgICAgaWQ9InN0b3AzNTc2Igog ICAgICAgICBvZmZzZXQ9IjAuODM2NzUyNDEiCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9y OmJsYWNrO3N0b3Atb3BhY2l0eToxIiAvPgogICAgICA8c3RvcAogICAgICAgICBpZD0ic3Rv cDM1NzgiCiAgICAgICAgIG9mZnNldD0iMC45Mjg2ODUyNSIKICAgICAgICAgc3R5bGU9InN0 b3AtY29sb3I6IzdiN2I3YjtzdG9wLW9wYWNpdHk6MSIgLz4KICAgICAgPHN0b3AKICAgICAg ICAgaWQ9InN0b3AzNTgwIgogICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgIHN0eWxlPSJz dG9wLWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0eToxIiAvPgogICAgPC9saW5lYXJHcmFkaWVu dD4KICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50MzU1MiI+ CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiNmZmZmZmY7c3RvcC1v cGFjaXR5OjE7IgogICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgIGlkPSJzdG9wMzU1NCIg Lz4KICAgICAgPHN0b3AKICAgICAgICAgaWQ9InN0b3AzNTYwIgogICAgICAgICBvZmZzZXQ9 IjAuNzAwMTk1OTEiCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM3ZjdmN2Y7c3RvcC1v cGFjaXR5OjE7IiAvPgogICAgICA8c3RvcAogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjoj MDAwMDAwO3N0b3Atb3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgIGlk PSJzdG9wMzU1NiIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8aW5rc2NhcGU6cGVy c3BlY3RpdmUKICAgICAgIHNvZGlwb2RpOnR5cGU9Imlua3NjYXBlOnBlcnNwM2QiCiAgICAg ICBpbmtzY2FwZTp2cF94PSIwIDogMTE1LjQ2MzI3IDogMSIKICAgICAgIGlua3NjYXBlOnZw X3k9IjAgOiAxMDAwLjAwMDEgOiAwIgogICAgICAgaW5rc2NhcGU6dnBfej0iOTM3LjIxNzUz IDogMTE1LjQ2MzI3IDogMSIKICAgICAgIGlua3NjYXBlOnBlcnNwM2Qtb3JpZ2luPSI0Njgu NjA4NzYgOiA3Ni45NzU1MDkgOiAxIgogICAgICAgaWQ9InBlcnNwZWN0aXZlMTA2IiAvPgog ICAgPGxpbmVhckdyYWRpZW50CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQxMjA3MiI+CiAg ICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM1N2EwZDM7c3RvcC1vcGFj aXR5OjEiCiAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgaWQ9InN0b3AxMjA3NCIgLz4K ICAgICAgPHN0b3AKICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6IzMxNDg1OTtzdG9wLW9w YWNpdHk6MSIKICAgICAgICAgb2Zmc2V0PSIwLjUiCiAgICAgICAgIGlkPSJzdG9wMTIwOTQi IC8+CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM1N2EwZDM7c3Rv cC1vcGFjaXR5OjEiCiAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAgaWQ9InN0b3AxMjA3 NiIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAg IGlkPSJsaW5lYXJHcmFkaWVudDg0OTQiPgogICAgICA8c3RvcAogICAgICAgICBzdHlsZT0i c3RvcC1jb2xvcjp3aGl0ZTtzdG9wLW9wYWNpdHk6MSIKICAgICAgICAgb2Zmc2V0PSIwIgog ICAgICAgICBpZD0ic3RvcDg0OTYiIC8+CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJz dG9wLWNvbG9yOmJsYWNrO3N0b3Atb3BhY2l0eTowIgogICAgICAgICBvZmZzZXQ9IjEiCiAg ICAgICAgIGlkPSJzdG9wODQ5OCIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGlu ZWFyR3JhZGllbnQKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDU3NTciPgogICAgICA8c3Rv cAogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjpibGFjaztzdG9wLW9wYWNpdHk6MSIKICAg ICAgICAgb2Zmc2V0PSIwIgogICAgICAgICBpZD0ic3RvcDU3NTkiIC8+CiAgICAgIDxzdG9w CiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiM3ZjdmN2Y7c3RvcC1vcGFjaXR5OjEiCiAg ICAgICAgIG9mZnNldD0iMC41IgogICAgICAgICBpZD0ic3RvcDU3NjUiIC8+CiAgICAgIDxz dG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOiNiZmJmYmY7c3RvcC1vcGFjaXR5OjEi CiAgICAgICAgIG9mZnNldD0iMC43NSIKICAgICAgICAgaWQ9InN0b3A1NzY3IiAvPgogICAg ICA8c3RvcAogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjojZGZkZmRmO3N0b3Atb3BhY2l0 eToxIgogICAgICAgICBvZmZzZXQ9IjAuODc1IgogICAgICAgICBpZD0ic3RvcDU3NjkiIC8+ CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNvbG9yOndoaXRlO3N0b3Atb3Bh Y2l0eToxIgogICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgIGlkPSJzdG9wNTc2MSIgLz4K ICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIGlkPSJs aW5lYXJHcmFkaWVudDE1MzM2Ij4KICAgICAgPHN0b3AKICAgICAgICAgc3R5bGU9InN0b3At Y29sb3I6YmxhY2s7c3RvcC1vcGFjaXR5OjEiCiAgICAgICAgIG9mZnNldD0iMCIKICAgICAg ICAgaWQ9InN0b3AxNTMzOCIgLz4KICAgICAgPHN0b3AKICAgICAgICAgc3R5bGU9InN0b3At Y29sb3I6YmxhY2s7c3RvcC1vcGFjaXR5OjAiCiAgICAgICAgIG9mZnNldD0iMSIKICAgICAg ICAgaWQ9InN0b3AxNTM0MCIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8bGluZWFy R3JhZGllbnQKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDEyNjQ3Ij4KICAgICAgPHN0b3AK ICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6d2hpdGU7c3RvcC1vcGFjaXR5OjEiCiAgICAg ICAgIG9mZnNldD0iMCIKICAgICAgICAgaWQ9InN0b3AxMjY0OSIgLz4KICAgICAgPHN0b3AK ICAgICAgICAgc3R5bGU9InN0b3AtY29sb3I6IzdmN2Y3ZjtzdG9wLW9wYWNpdHk6MC40OTgw MzkyMiIKICAgICAgICAgb2Zmc2V0PSIwIgogICAgICAgICBpZD0ic3RvcDEyNjU1IiAvPgog ICAgICA8c3RvcAogICAgICAgICBzdHlsZT0ic3RvcC1jb2xvcjpibGFjaztzdG9wLW9wYWNp dHk6MCIKICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAgICBpZD0ic3RvcDEyNjUxIiAvPgog ICAgPC9saW5lYXJHcmFkaWVudD4KICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgaWQ9Imxp bmVhckdyYWRpZW50ODE1MSI+CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxlPSJzdG9wLWNv bG9yOndoaXRlO3N0b3Atb3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAg IGlkPSJzdG9wODE1MyIgLz4KICAgICAgPHN0b3AKICAgICAgICAgc3R5bGU9InN0b3AtY29s b3I6IzdjN2M3YztzdG9wLW9wYWNpdHk6MSIKICAgICAgICAgb2Zmc2V0PSIwLjI1IgogICAg ICAgICBpZD0ic3RvcDE0NDQ1IiAvPgogICAgICA8c3RvcAogICAgICAgICBzdHlsZT0ic3Rv cC1jb2xvcjpibGFjaztzdG9wLW9wYWNpdHk6MSIKICAgICAgICAgb2Zmc2V0PSIwIgogICAg ICAgICBpZD0ic3RvcDEzNTU4IiAvPgogICAgICA8c3RvcAogICAgICAgICBzdHlsZT0ic3Rv cC1jb2xvcjojN2I3YjdiO3N0b3Atb3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjAuNzUi CiAgICAgICAgIGlkPSJzdG9wMTQ0NDciIC8+CiAgICAgIDxzdG9wCiAgICAgICAgIHN0eWxl PSJzdG9wLWNvbG9yOndoaXRlO3N0b3Atb3BhY2l0eToxIgogICAgICAgICBvZmZzZXQ9IjEi CiAgICAgICAgIGlkPSJzdG9wODE1NSIgLz4KICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICA8 bGluZWFyR3JhZGllbnQKICAgICAgIHgxPSIyMjMuMTEzOTEiCiAgICAgICB5MT0iMjI2Ljgx MjMzIgogICAgICAgeDI9IjIyNi4xMTM5MSIKICAgICAgIHkyPSI5OS4zNDEwODciCiAgICAg ICBpZD0ibGluZWFyR3JhZGllbnQ4MTU3IgogICAgICAgeGxpbms6aHJlZj0iI2xpbmVhckdy YWRpZW50ODE1MSIKICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAg ICAgZ3JhZGllbnRUcmFuc2Zvcm09InRyYW5zbGF0ZSgxLjcyOTczNCwwLjEyMjI2NykiIC8+ CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIHgxPSIxODQuNDU2NiIKICAgICAgIHkxPSIx MDMuNTEzMzIiCiAgICAgICB4Mj0iMTgxLjI0OTM0IgogICAgICAgeTI9IjE4NC4yNjE2NyIK ICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDEwODI4IgogICAgICAgeGxpbms6aHJlZj0iI2xp bmVhckdyYWRpZW50MTUzMzYiCiAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVz ZSIgLz4KICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgeDE9Ii01OS43MDE3NTkiCiAgICAg ICB5MT0iMTA5LjU0MzI1IgogICAgICAgeDI9Ii02My41MDQ4NjQiCiAgICAgICB5Mj0iMTY3 LjUxNDYyIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50MTI2MjUiCiAgICAgICB4bGluazpo cmVmPSIjbGluZWFyR3JhZGllbnQxNTMzNiIKICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJT cGFjZU9uVXNlIiAvPgogICAgPGxpbmVhckdyYWRpZW50CiAgICAgICB4MT0iNDg1LjQ2ODE3 IgogICAgICAgeTE9Ijg0LjE4NzQzOSIKICAgICAgIHgyPSI0ODUuMzg2MzIiCiAgICAgICB5 Mj0iMTk4LjI4MDYxIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50MTI2MzMiCiAgICAgICB4 bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQxNTMzNiIKICAgICAgIGdyYWRpZW50VW5pdHM9 InVzZXJTcGFjZU9uVXNlIiAvPgogICAgPGxpbmVhckdyYWRpZW50CiAgICAgICB4MT0iLTYz LjUwNDg2NCIKICAgICAgIHkxPSIxOTIuNjY4MjciCiAgICAgICB4Mj0iLTYyLjkwNDg2MSIK ICAgICAgIHkyPSIxNzMuNjYxMzYiCiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQxMjY1MyIK ICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVudDEyNjQ3IgogICAgICAgZ3JhZGll bnRVbml0cz0idXNlclNwYWNlT25Vc2UiIC8+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAg IHgxPSItMjA2LjE3MTQ5IgogICAgICAgeTE9IjE3MS40ODQ4MiIKICAgICAgIHgyPSI2NTAu ODkzMzciCiAgICAgICB5Mj0iMTcxLjQ4NDgyIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50 MTM1NTAiCiAgICAgICB4bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQxNTMzNiIKICAgICAg IGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIiAvPgogICAgPGxpbmVhckdyYWRpZW50 CiAgICAgICB4MT0iLTU5Ny42OTc3NSIKICAgICAgIHkxPSItMjY5LjkxNTUiCiAgICAgICB4 Mj0iLTk4LjQyMTI5NSIKICAgICAgIHkyPSItMjY5LjkxNTUiCiAgICAgICBpZD0ibGluZWFy R3JhZGllbnQxNTM0NiIKICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVudDE1MzM2 IgogICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiIC8+CiAgICA8bGluZWFy R3JhZGllbnQKICAgICAgIHgxPSItNTkuNzAxNzU5IgogICAgICAgeTE9IjEwOS41NDMyNSIK ICAgICAgIHgyPSItNjMuNTA0ODY0IgogICAgICAgeTI9IjE2Ny41MTQ2MiIKICAgICAgIGlk PSJsaW5lYXJHcmFkaWVudDIwNTYiCiAgICAgICB4bGluazpocmVmPSIjbGluZWFyR3JhZGll bnQxNTMzNiIKICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAg Z3JhZGllbnRUcmFuc2Zvcm09Im1hdHJpeCgwLjQ1NTg4LDAsMCwwLjQ1NTg4LDEwNS42OTcx LC0zOC4zNzc4MikiIC8+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIHgxPSItNjMuNTA0 ODY0IgogICAgICAgeTE9IjE5Mi42NjgyNyIKICAgICAgIHgyPSItNjIuOTA0ODYxIgogICAg ICAgeTI9IjE3My42NjEzNiIKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDIwNjIiCiAgICAg ICB4bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQxMjY0NyIKICAgICAgIGdyYWRpZW50VW5p dHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09Im1hdHJpeCgw LjQ1NTg4LDAsMCwwLjQ1NTg4LDEwNS42OTcxLC0zOC4zNzc4MikiIC8+CiAgICA8bGluZWFy R3JhZGllbnQKICAgICAgIHgxPSItMjA2LjE3MTQ5IgogICAgICAgeTE9IjE3MS40ODQ4MiIK ICAgICAgIHgyPSI2NTAuODkzMzciCiAgICAgICB5Mj0iMTcxLjQ4NDgyIgogICAgICAgaWQ9 ImxpbmVhckdyYWRpZW50MjA2NyIKICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVu dDE1MzM2IgogICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICBn cmFkaWVudFRyYW5zZm9ybT0ibWF0cml4KDAuNDU1ODgsMCwwLDAuNDU1ODgsLTM4Ljk5OTAx LDgxLjAwNTAyKSIgLz4KICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgeDE9IjIxNS41NzUx NSIKICAgICAgIHkxPSItMTMuODgyODk4IgogICAgICAgeDI9IjIxMi45NTY1IgogICAgICAg eTI9IjYzLjAzNTIxMyIKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDU3NjMiCiAgICAgICB4 bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQ1NzU3IgogICAgICAgZ3JhZGllbnRVbml0cz0i dXNlclNwYWNlT25Vc2UiIC8+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIHgxPSIyMjMu NTc5MzkiCiAgICAgICB5MT0iNTguNzY1MTI5IgogICAgICAgeDI9IjIyMy44MTU5IgogICAg ICAgeTI9IjE5LjcxNTAxIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50ODUwOSIKICAgICAg IHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVudDg0OTQiCiAgICAgICBncmFkaWVudFVuaXRz PSJ1c2VyU3BhY2VPblVzZSIKICAgICAgIGdyYWRpZW50VHJhbnNmb3JtPSJtYXRyaXgoMSww LDAsMS4xMzE4MSwwLC04LjAwMjQ2MSkiIC8+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAg IHgxPSIyMjMuNTc5MzkiCiAgICAgICB5MT0iNTguNzY1MTI5IgogICAgICAgeDI9IjIyMy44 MTU5IgogICAgICAgeTI9IjE5LjcxNTAxIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50ODUx MiIKICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVudDg0OTQiCiAgICAgICBncmFk aWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgICAgIGdyYWRpZW50VHJhbnNmb3JtPSJt YXRyaXgoMSwwLDAsMS4yNTg4ODYsMCwtMTQuMDI3OTIpIiAvPgogICAgPGxpbmVhckdyYWRp ZW50CiAgICAgICB4MT0iMjIzLjU3OTM5IgogICAgICAgeTE9IjU4Ljc2NTEyOSIKICAgICAg IHgyPSIyMjMuODE1OSIKICAgICAgIHkyPSIxOS43MTUwMSIKICAgICAgIGlkPSJsaW5lYXJH cmFkaWVudDg1MTUiCiAgICAgICB4bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQ4NDk0Igog ICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICBncmFkaWVudFRy YW5zZm9ybT0ibWF0cml4KDEsMCwwLDEuMTIzNzUyLDAsLTguMTY3OTE2KSIgLz4KICAgIDxp bmtzY2FwZTpwZXJzcGVjdGl2ZQogICAgICAgaWQ9InBlcnNwZWN0aXZlMjUyMyIKICAgICAg IGlua3NjYXBlOnBlcnNwM2Qtb3JpZ2luPSIzNzIuMDQ3MjQgOiAzNTAuNzg3NDEgOiAxIgog ICAgICAgaW5rc2NhcGU6dnBfej0iNzQ0LjA5NDQ4IDogNTI2LjE4MTEyIDogMSIKICAgICAg IGlua3NjYXBlOnZwX3k9IjAgOiAxMDAwLjAwMDEgOiAwIgogICAgICAgaW5rc2NhcGU6dnBf eD0iMCA6IDUyNi4xODExMiA6IDEiCiAgICAgICBzb2RpcG9kaTp0eXBlPSJpbmtzY2FwZTpw ZXJzcDNkIiAvPgogICAgPGlua3NjYXBlOnBlcnNwZWN0aXZlCiAgICAgICBpZD0icGVyc3Bl Y3RpdmUyNTczIgogICAgICAgaW5rc2NhcGU6cGVyc3AzZC1vcmlnaW49IjM3Mi4wNDcyNCA6 IDM1MC43ODc0MSA6IDEiCiAgICAgICBpbmtzY2FwZTp2cF96PSI3NDQuMDk0NDggOiA1MjYu MTgxMTIgOiAxIgogICAgICAgaW5rc2NhcGU6dnBfeT0iMCA6IDEwMDAuMDAwMSA6IDAiCiAg ICAgICBpbmtzY2FwZTp2cF94PSIwIDogNTI2LjE4MTEyIDogMSIKICAgICAgIHNvZGlwb2Rp OnR5cGU9Imlua3NjYXBlOnBlcnNwM2QiIC8+CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAg IGlua3NjYXBlOmNvbGxlY3Q9ImFsd2F5cyIKICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJH cmFkaWVudDM2MjIiCiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQzNjU3IgogICAgICAgZ3Jh ZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICB4MT0iLTUyLjE1Njg3NiIKICAg ICAgIHkxPSItNTEuMjQ3NzI2IgogICAgICAgeDI9Ii01Mi4xNTY4NzYiCiAgICAgICB5Mj0i LTMxLjY4ODg5OCIgLz4KICAgIDxjbGlwUGF0aAogICAgICAgaWQ9ImNsaXBQYXRoIj4KICAg ICAgPGVsbGlwc2UKICAgICAgICAgc3R5bGU9ImZpbGw6IzhhOGE4YTtmaWxsLW9wYWNpdHk6 MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2Ut bWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgog ICAgICAgICBpZD0icGF0aDM4NzEiCiAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDAuNDc2 NzkyMywtMC4zMDg0NDc3LDAuMjk2NTAyNCwwLjQ1ODMyNzQsLTE3NS4zOTg0LC03LjA4MjMw NDUpIgogICAgICAgICBjeD0iLTMxNy44MzA5NiIKICAgICAgICAgY3k9IjEyLjMxODQ2NSIK ICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAgICByeT0iMzAuOTY4MTQ1IiAvPgogICAg PC9jbGlwUGF0aD4KICAgIDxmaWx0ZXIKICAgICAgIGlkPSJmaWx0ZXIiCiAgICAgICBoZWln aHQ9IjIiCiAgICAgICB3aWR0aD0iMiIKICAgICAgIHg9Ii0wLjUiCiAgICAgICB5PSItMC41 Ij4KICAgICAgPGZlR2F1c3NpYW5CbHVyCiAgICAgICAgIHN0ZERldmlhdGlvbj0iNS4wIgog ICAgICAgICBpZD0iZmVHYXVzc2lhbkJsdXI0MDE2IiAvPgogICAgPC9maWx0ZXI+CiAgICA8 ZmlsdGVyCiAgICAgICBpZD0iZmlsdGVyNDQwOCIKICAgICAgIGlua3NjYXBlOmNvbGxlY3Q9 ImFsd2F5cyI+CiAgICAgIDxmZUdhdXNzaWFuQmx1cgogICAgICAgICBpZD0iZmVHYXVzc2lh bkJsdXI0NDEwIgogICAgICAgICBzdGREZXZpYXRpb249IjAuMzQxNjM3MTQiCiAgICAgICAg IGlua3NjYXBlOmNvbGxlY3Q9ImFsd2F5cyIgLz4KICAgIDwvZmlsdGVyPgogICAgPGxpbmVh ckdyYWRpZW50CiAgICAgICB5Mj0iLTMxLjY4ODg5OCIKICAgICAgIHgyPSItMTI3LjEzMjM5 IgogICAgICAgeTE9Ii01MS4yNDc3MjYiCiAgICAgICB4MT0iLTEyNy4xMzIzOSIKICAgICAg IGdyYWRpZW50VHJhbnNmb3JtPSJtYXRyaXgoLTAuNDM2ODUwNSwwLC03Ljg4ODQxODFlLTQs LTEuODc1OTE2NCwtMjU1Ljg4MzYsLTM1LjgxODM3NikiCiAgICAgICBncmFkaWVudFVuaXRz PSJ1c2VyU3BhY2VPblVzZSIKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDQ2NTciCiAgICAg ICB4bGluazpocmVmPSIjbGluZWFyR3JhZGllbnQzNzc2IgogICAgICAgaW5rc2NhcGU6Y29s bGVjdD0iYWx3YXlzIiAvPgogICAgPGxpbmVhckdyYWRpZW50CiAgICAgICB5Mj0iOTIuMTgz Njc4IgogICAgICAgeDI9Ii0xNDQuMDA2NjUiCiAgICAgICB5MT0iOTIuMTgzNjc4IgogICAg ICAgeDE9Ii0xODIuNTQ5MDYiCiAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVz ZSIKICAgICAgIGlkPSJsaW5lYXJHcmFkaWVudDQ2NTkiCiAgICAgICB4bGluazpocmVmPSIj bGluZWFyR3JhZGllbnQzNjkwIgogICAgICAgaW5rc2NhcGU6Y29sbGVjdD0iYWx3YXlzIiAv PgogICAgPGxpbmVhckdyYWRpZW50CiAgICAgICB5Mj0iNTMuMDY2MDI1IgogICAgICAgeDI9 Ii0xMTQuMDkzMTYiCiAgICAgICB5MT0iLTMxLjY4ODg5OCIKICAgICAgIHgxPSItMTE0LjA5 MzE2IgogICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09InJvdGF0ZSgtMzIuODk5NzM5LC0xNzku ODY4MjksNTcuNzQ1MTg4KSIKICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNl IgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50NDY2MSIKICAgICAgIHhsaW5rOmhyZWY9IiNs aW5lYXJHcmFkaWVudDM1NzAiCiAgICAgICBpbmtzY2FwZTpjb2xsZWN0PSJhbHdheXMiIC8+ CiAgICA8bGluZWFyR3JhZGllbnQKICAgICAgIHkyPSI0MC4wMjY4MDYiCiAgICAgICB4Mj0i LTIzNC43MDU5MyIKICAgICAgIHkxPSItMTUuMzg5ODc1IgogICAgICAgeDE9Ii0yMzQuNzA1 OTMiCiAgICAgICBncmFkaWVudFRyYW5zZm9ybT0icm90YXRlKC0zMi44OTk3MzksLTE3OS44 NjgyOSw1Ny43NDUxODgpIgogICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2Ui CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQ0NjYzIgogICAgICAgeGxpbms6aHJlZj0iI2xp bmVhckdyYWRpZW50MzU4MiIKICAgICAgIGlua3NjYXBlOmNvbGxlY3Q9ImFsd2F5cyIgLz4K ICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgeTI9Ii0zMS42ODg4OTgiCiAgICAgICB4Mj0i LTUyLjE1Njg3NiIKICAgICAgIHkxPSItNTEuMjQ3NzI2IgogICAgICAgeDE9Ii01Mi4xNTY4 NzYiCiAgICAgICBncmFkaWVudFRyYW5zZm9ybT0icm90YXRlKC0zMi44OTk3MzksLTE4My45 NjgxOSw2NC43NzY2NjYpIgogICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2Ui CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQ0NjY1IgogICAgICAgeGxpbms6aHJlZj0iI2xp bmVhckdyYWRpZW50MzYyMiIKICAgICAgIGlua3NjYXBlOmNvbGxlY3Q9ImFsd2F5cyIgLz4K ICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgeTI9Ii0zMS42ODg4OTgiCiAgICAgICB4Mj0i LTEyNy4xMzIzOSIKICAgICAgIHkxPSItNTEuMjQ3NzI2IgogICAgICAgeDE9Ii0xMjcuMTMy MzkiCiAgICAgICBncmFkaWVudFRyYW5zZm9ybT0icm90YXRlKC0zMi44OTk3MzksLTE4My45 NjgxOSw2NC43NzY2NjYpIgogICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2Ui CiAgICAgICBpZD0ibGluZWFyR3JhZGllbnQ0NjY3IgogICAgICAgeGxpbms6aHJlZj0iI2xp bmVhckdyYWRpZW50MzYwMiIKICAgICAgIGlua3NjYXBlOmNvbGxlY3Q9ImFsd2F5cyIgLz4K ICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgeTI9Ii0zMS42ODg4OTgiCiAgICAgICB4Mj0i LTEyNy4xMzIzOSIKICAgICAgIHkxPSItNTEuMjQ3NzI2IgogICAgICAgeDE9Ii0xMjcuMTMy MzkiCiAgICAgICBncmFkaWVudFRyYW5zZm9ybT0ibWF0cml4KC0wLjQzNjg1MDUsMCwtNy44 ODg0MTgxZS00LC0xLjg3NTkxNjQsLTE5OC42OTc0MiwtMzUuODE4Mzc2KSIKICAgICAgIGdy YWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAgaWQ9ImxpbmVhckdyYWRpZW50 NDY2OSIKICAgICAgIHhsaW5rOmhyZWY9IiNsaW5lYXJHcmFkaWVudDM3NzYiCiAgICAgICBp bmtzY2FwZTpjb2xsZWN0PSJhbHdheXMiIC8+CiAgPC9kZWZzPgogIDxzb2RpcG9kaTpuYW1l ZHZpZXcKICAgICBpZD0iYmFzZSIKICAgICBwYWdlY29sb3I9IiNmZmZmZmYiCiAgICAgYm9y ZGVyY29sb3I9IiM2NjY2NjYiCiAgICAgYm9yZGVyb3BhY2l0eT0iMS4wIgogICAgIGlua3Nj YXBlOnBhZ2VvcGFjaXR5PSIwLjAiCiAgICAgaW5rc2NhcGU6cGFnZXNoYWRvdz0iMiIKICAg ICBpbmtzY2FwZTp6b29tPSIxLjQiCiAgICAgaW5rc2NhcGU6Y3g9Ijk5LjE3NTYwMSIKICAg ICBpbmtzY2FwZTpjeT0iMjcwLjIyNDciCiAgICAgaW5rc2NhcGU6ZG9jdW1lbnQtdW5pdHM9 Im1tIgogICAgIGlua3NjYXBlOmN1cnJlbnQtbGF5ZXI9ImxheWVyMSIKICAgICBzaG93Z3Jp ZD0iZmFsc2UiCiAgICAgdW5pdHM9Im1tIgogICAgIGlua3NjYXBlOndpbmRvdy13aWR0aD0i MTkxNiIKICAgICBpbmtzY2FwZTp3aW5kb3ctaGVpZ2h0PSIxMDU3IgogICAgIGlua3NjYXBl OndpbmRvdy14PSItMiIKICAgICBpbmtzY2FwZTp3aW5kb3cteT0iLTIiCiAgICAgaW5rc2Nh cGU6d2luZG93LW1heGltaXplZD0iMCIKICAgICBpbmtzY2FwZTpwYWdlY2hlY2tlcmJvYXJk PSJ0cnVlIiAvPgogIDxtZXRhZGF0YQogICAgIGlkPSJtZXRhZGF0YTUiPgogICAgPHJkZjpS REY+CiAgICAgIDxjYzpXb3JrCiAgICAgICAgIHJkZjphYm91dD0iIj4KICAgICAgICA8ZGM6 Zm9ybWF0PmltYWdlL3N2Zyt4bWw8L2RjOmZvcm1hdD4KICAgICAgICA8ZGM6dHlwZQogICAg ICAgICAgIHJkZjpyZXNvdXJjZT0iaHR0cDovL3B1cmwub3JnL2RjL2RjbWl0eXBlL1N0aWxs SW1hZ2UiIC8+CiAgICAgICAgPGRjOnRpdGxlPjwvZGM6dGl0bGU+CiAgICAgIDwvY2M6V29y az4KICAgIDwvcmRmOlJERj4KICA8L21ldGFkYXRhPgogIDxnCiAgICAgaW5rc2NhcGU6bGFi ZWw9IkxheWVyIDEiCiAgICAgaW5rc2NhcGU6Z3JvdXBtb2RlPSJsYXllciIKICAgICBpZD0i bGF5ZXIxIgogICAgIHRyYW5zZm9ybT0idHJhbnNsYXRlKDAsLTIwNykiPgogICAgPGcKICAg ICAgIGlkPSJnNTEwMiIKICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDIuNjQzMDc2NiwwLDAs Mi42NDMwNzY2LC0yOS42MjE5ODcsLTM0OS4wNDM0NCkiPgogICAgICA8dGV4dAogICAgICAg ICBpZD0idGV4dDYzMTYiCiAgICAgICAgIHk9IjIxNy40OTU2NyIKICAgICAgICAgeD0iMTIu MTM3MjM3IgogICAgICAgICBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50 Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNp emU6MC43NzgwOTEwMXB4O2xpbmUtaGVpZ2h0OjEyNSU7Zm9udC1mYW1pbHk6RnJlZU1vbm87 LWlua3NjYXBlLWZvbnQtc3BlY2lmaWNhdGlvbjpGcmVlTW9ubztsZXR0ZXItc3BhY2luZzow cHg7d29yZC1zcGFjaW5nOjBweDtmaWxsOiMwMDAwMDA7ZmlsbC1vcGFjaXR5OjE7c3Ryb2tl Om5vbmU7c3Ryb2tlLXdpZHRoOjAuMDcyOTQ2MDNweDtzdHJva2UtbGluZWNhcDpidXR0O3N0 cm9rZS1saW5lam9pbjptaXRlcjtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICB4bWw6c3Bh Y2U9InByZXNlcnZlIj48dHNwYW4KICAgICAgICAgICBpZD0idHNwYW42MzE4IgogICAgICAg ICAgIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQt d2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTowLjc3ODA5MTAx cHg7Zm9udC1mYW1pbHk6RnJlZU1vbm87LWlua3NjYXBlLWZvbnQtc3BlY2lmaWNhdGlvbjpG cmVlTW9ubztzdHJva2Utd2lkdGg6MC4wNzI5NDYwM3B4IgogICAgICAgICAgIHk9IjIxNy40 OTU2NyIKICAgICAgICAgICB4PSIxMi4xMzcyMzciCiAgICAgICAgICAgc29kaXBvZGk6cm9s ZT0ibGluZSI+MDAwMDAwMCA1MDg5IDQ3NGUgMGEwZCAwYTFhIDAwMDAgMGQwMCA0ODQ5IDUy NDQ8L3RzcGFuPjx0c3BhbgogICAgICAgICAgIGlkPSJ0c3BhbjYzMjAiCiAgICAgICAgICAg c3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWln aHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjAuNzc4MDkxMDFweDtm b250LWZhbWlseTpGcmVlTW9ubzstaW5rc2NhcGUtZm9udC1zcGVjaWZpY2F0aW9uOkZyZWVN b25vO3N0cm9rZS13aWR0aDowLjA3Mjk0NjAzcHgiCiAgICAgICAgICAgeT0iMjE4LjQ2ODI4 IgogICAgICAgICAgIHg9IjEyLjEzNzIzNyIKICAgICAgICAgICBzb2RpcG9kaTpyb2xlPSJs aW5lIj4wMDAwMDEwIDAwMDAgMmMwMiAwMDAwIGU4MDAgMDYwOCAwMDAwIGNjMDAgYmY5MTwv dHNwYW4+PHRzcGFuCiAgICAgICAgICAgaWQ9InRzcGFuNjMyMiIKICAgICAgICAgICBzdHls ZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpu b3JtYWw7Zm9udC1zdHJldGNoOm5vcm1hbDtmb250LXNpemU6MC43NzgwOTEwMXB4O2ZvbnQt ZmFtaWx5OkZyZWVNb25vOy1pbmtzY2FwZS1mb250LXNwZWNpZmljYXRpb246RnJlZU1vbm87 c3Ryb2tlLXdpZHRoOjAuMDcyOTQ2MDNweCIKICAgICAgICAgICB5PSIyMTkuNDQwODkiCiAg ICAgICAgICAgeD0iMTIuMTM3MjM3IgogICAgICAgICAgIHNvZGlwb2RpOnJvbGU9ImxpbmUi PjAwMDAwMjAgMDA2MiAwMDAwIDYyMDYgNDc0YiAwMDQ0IDAwZmYgMDBmZiBhMGZmPC90c3Bh bj48dHNwYW4KICAgICAgICAgICBpZD0idHNwYW42MzI0IgogICAgICAgICAgIHN0eWxlPSJm b250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1h bDtmb250LXN0cmV0Y2g6bm9ybWFsO2ZvbnQtc2l6ZTowLjc3ODA5MTAxcHg7Zm9udC1mYW1p bHk6RnJlZU1vbm87LWlua3NjYXBlLWZvbnQtc3BlY2lmaWNhdGlvbjpGcmVlTW9ubztzdHJv a2Utd2lkdGg6MC4wNzI5NDYwM3B4IgogICAgICAgICAgIHk9IjIyMC40MTM1MSIKICAgICAg ICAgICB4PSIxMi4xMzcyMzciCiAgICAgICAgICAgc29kaXBvZGk6cm9sZT0ibGluZSI+MDAw MDAzMCBhN2JkIDAwOTMgMDAwMCA3MDA5IDU5NDggMDA3MyAwYjAwIDAwODk8L3RzcGFuPjx0 c3BhbgogICAgICAgICAgIGlkPSJ0c3BhbjYzMjYiCiAgICAgICAgICAgc3R5bGU9ImZvbnQt c3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2Zv bnQtc3RyZXRjaDpub3JtYWw7Zm9udC1zaXplOjAuNzc4MDkxMDFweDtmb250LWZhbWlseTpG cmVlTW9ubzstaW5rc2NhcGUtZm9udC1zcGVjaWZpY2F0aW9uOkZyZWVNb25vO3N0cm9rZS13 aWR0aDowLjA3Mjk0NjAzcHgiCiAgICAgICAgICAgeT0iMjIxLjM4NjEyIgogICAgICAgICAg IHg9IjEyLjEzNzIzNyIKICAgICAgICAgICBzb2RpcG9kaTpyb2xlPSJsaW5lIj4wMDAwMDQw IDBiMDAgMDE4OSBjOTM3IGFkY2IgMDAwMCAwNzAwIDQ5NzQgNDU0ZDwvdHNwYW4+PHRzcGFu CiAgICAgICAgICAgaWQ9InRzcGFuNjMyOCIKICAgICAgICAgICBzdHlsZT0iZm9udC1zdHls ZTpub3JtYWw7Zm9udC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1z dHJldGNoOm5vcm1hbDtmb250LXNpemU6MC43NzgwOTEwMXB4O2ZvbnQtZmFtaWx5OkZyZWVN b25vOy1pbmtzY2FwZS1mb250LXNwZWNpZmljYXRpb246RnJlZU1vbm87c3Ryb2tlLXdpZHRo OjAuMDcyOTQ2MDNweCIKICAgICAgICAgICB5PSIyMjIuMzU4NzMiCiAgICAgICAgICAgeD0i MTIuMTM3MjM3IgogICAgICAgICAgIHNvZGlwb2RpOnJvbGU9ImxpbmUiPjAwMDAwNTAgZTMw NyAxZDBhIDJlMTEgYjExOCAwYzQ4IDAwNTIgMjAwMCA0OTAwPC90c3Bhbj48dHNwYW4KICAg ICAgICAgICBpZD0idHNwYW42MzMwIgogICAgICAgICAgIHN0eWxlPSJmb250LXN0eWxlOm5v cm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0 Y2g6bm9ybWFsO2ZvbnQtc2l6ZTowLjc3ODA5MTAxcHg7Zm9udC1mYW1pbHk6RnJlZU1vbm87 LWlua3NjYXBlLWZvbnQtc3BlY2lmaWNhdGlvbjpGcmVlTW9ubztzdHJva2Utd2lkdGg6MC4w NzI5NDYwM3B4IgogICAgICAgICAgIHk9IjIyMy4zMzEzNCIKICAgICAgICAgICB4PSIxMi4x MzcyMzciCiAgICAgICAgICAgc29kaXBvZGk6cm9sZT0ibGluZSI+MDAwMDA2MCA0MTQ0IDc4 NTQgZWNkYSBkOWJkIDY0OTMgN2RkNyBmN2U3IGU3Mzk8L3RzcGFuPjx0c3BhbgogICAgICAg ICAgIGlkPSJ0c3BhbjYzMzIiCiAgICAgICAgICAgc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFs O2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6bm9ybWFsO2ZvbnQtc3RyZXRjaDpu b3JtYWw7Zm9udC1zaXplOjAuNzc4MDkxMDFweDtmb250LWZhbWlseTpGcmVlTW9ubzstaW5r c2NhcGUtZm9udC1zcGVjaWZpY2F0aW9uOkZyZWVNb25vO3N0cm9rZS13aWR0aDowLjA3Mjk0 NjAzcHgiCiAgICAgICAgICAgeT0iMjI0LjMwMzk3IgogICAgICAgICAgIHg9IjEyLjEzNzIz NyIKICAgICAgICAgICBzb2RpcG9kaTpyb2xlPSJsaW5lIj4wMDAwMDcwIDdiZGMgYTk3MyA3 YWJkIDgwZGYgNjM0NiAyMWRmIDA0MDIgMTAyMTwvdHNwYW4+PHRzcGFuCiAgICAgICAgICAg aWQ9InRzcGFuNjMzNCIKICAgICAgICAgICBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9u dC12YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDpub3JtYWw7Zm9udC1zdHJldGNoOm5vcm1h bDtmb250LXNpemU6MC43NzgwOTEwMXB4O2ZvbnQtZmFtaWx5OkZyZWVNb25vOy1pbmtzY2Fw ZS1mb250LXNwZWNpZmljYXRpb246RnJlZU1vbm87c3Ryb2tlLXdpZHRoOjAuMDcyOTQ2MDNw eCIKICAgICAgICAgICB5PSIyMjUuMjc2NTgiCiAgICAgICAgICAgeD0iMTIuMTM3MjM3Igog ICAgICAgICAgIHNvZGlwb2RpOnJvbGU9ImxpbmUiPjAwMDAwODAgOTBkNCBjNDA0IGM4ZTEg M2QxMiAwOWExIGVjMzAgOGYxOSA2MTFkPC90c3Bhbj48dHNwYW4KICAgICAgICAgICBpZD0i dHNwYW42MzM2IgogICAgICAgICAgIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZh cmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0Om5vcm1hbDtmb250LXN0cmV0Y2g6bm9ybWFsO2Zv bnQtc2l6ZTowLjc3ODA5MTAxcHg7Zm9udC1mYW1pbHk6RnJlZU1vbm87LWlua3NjYXBlLWZv bnQtc3BlY2lmaWNhdGlvbjpGcmVlTW9ubztzdHJva2Utd2lkdGg6MC4wNzI5NDYwM3B4Igog ICAgICAgICAgIHk9IjIyNi4yNDkxOSIKICAgICAgICAgICB4PSIxMi4xMzcyMzciCiAgICAg ICAgICAgc29kaXBvZGk6cm9sZT0ibGluZSIgLz48L3RleHQ+CiAgICAgIDxnCiAgICAgICAg IHRyYW5zZm9ybT0ibWF0cml4KDAuMDQzNTU4OTIsMCwwLDAuMDQzNTU4OTIsMTIuMTk1NjY1 LDIxMi4xMjExNCkiCiAgICAgICAgIGlua3NjYXBlOmxhYmVsPSJMYXllciAxIgogICAgICAg ICBpZD0ibGF5ZXIxLTYiPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgc29kaXBvZGk6dHlw ZT0iYXJjIgogICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7 c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjAuODI3MjQ1NzE7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBpZD0icGF0aDIz ODciCiAgICAgICAgICAgc29kaXBvZGk6Y3g9IjE5Mi45NjU3NyIKICAgICAgICAgICBzb2Rp cG9kaTpjeT0iMTk4LjY2OTIiCiAgICAgICAgICAgc29kaXBvZGk6cng9IjEyNi40MjU4NiIK ICAgICAgICAgICBzb2RpcG9kaTpyeT0iMTI2LjQyNTg2IgogICAgICAgICAgIGQ9Ik0gMzE5 LjAzODY5LDIwOC4xMDkzOCBBIDEyNi40MjU4NiwxMjYuNDI1ODYgMCAwIDEgMTgzLjU0Mzc3 LDMyNC43NDM0OCAxMjYuNDI1ODYsMTI2LjQyNTg2IDAgMCAxIDY2Ljg5MDE0MSwxODkuMjY1 MzcgMTI2LjQyNTg2LDEyNi40MjU4NiAwIDAgMSAyMDIuMzUxNDQsNzIuNTkyMjE3IDEyNi40 MjU4NiwxMjYuNDI1ODYgMCAwIDEgMzE5LjA0NDExLDIwOC4wMzY2OSIKICAgICAgICAgICBz b2RpcG9kaTpzdGFydD0iMC4wNzQ3MzkyMjEiCiAgICAgICAgICAgc29kaXBvZGk6ZW5kPSIw LjA3NDE2MjY5MyIKICAgICAgICAgICBzb2RpcG9kaTpvcGVuPSJ0cnVlIgogICAgICAgICAg IHRyYW5zZm9ybT0ibWF0cml4KDEuODEzMjQ2LDAsMCwxLjgxMzI0NiwtOTkuODk0Mzg3LC0x MTAuMjM2MTQpIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVj dG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBpZD0icGF0aDMxODEiCiAgICAgICAgICAg ZD0iTSAyNTAsMjEuMDQ0MTg4IFYgNDc4Ljk1NTgxIgogICAgICAgICAgIHN0eWxlPSJmaWxs Om5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjIu NTtzdHJva2UtbGluZWNhcDpyb3VuZDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1p dGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4K ICAgICAgICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9 IjAiCiAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJv a2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6Mi41O3N0cm9rZS1saW5lY2FwOnJvdW5kO3N0cm9r ZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6 bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGQ9Ik0gNDc4Ljk1NTgxLDI1MCBI IDIxLjA0NDE4OSIKICAgICAgICAgICBpZD0icGF0aDMyMTEiIC8+CiAgICAgICAgPGcKICAg ICAgICAgICBpZD0iZzMyNzYiPgogICAgICAgICAgPGcKICAgICAgICAgICAgIGlkPSJnMzIx NSI+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rv ci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1y dWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGlu ZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0 cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgICBk PSJtIDI0MCwyNzAgaCAyMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMTkxIiAvPgogICAg ICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMxOTMiCiAgICAgICAgICAgICAgIGQ9 Im0gMjQwLDI5MCBoIDIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwt cnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxp bmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtz dHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICAgICAg PHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIK ICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJv a2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tl LWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpu b25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDMxMCBoIDIw IgogICAgICAgICAgICAgICBpZD0icGF0aDMxOTUiIC8+CiAgICAgICAgICAgIDxwYXRoCiAg ICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAg ICAgICAgIGlkPSJwYXRoMzE5NyIKICAgICAgICAgICAgICAgZD0ibSAyNDAsMzMwIGggMjAi CiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ry b2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9r ZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6 bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAg ICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBz dHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9r ZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7 c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNp dHk6MSIKICAgICAgICAgICAgICAgZD0ibSAyNDAsMzUwIGggMjAiCiAgICAgICAgICAgICAg IGlkPSJwYXRoMzE5OSIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5r c2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgz MjAxIgogICAgICAgICAgICAgICBkPSJtIDI0MCwzNzAgaCAyMCIKICAgICAgICAgICAgICAg c3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJv a2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5k O3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFj aXR5OjEiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNv bm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAg ICAgICBkPSJtIDI0MCwzOTAgaCAyMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMjAzIiAv PgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3It Y3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMyMDUiCiAgICAgICAgICAg ICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25l O2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ry b2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGlt aXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAgICAg ICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVy ZT0iMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9k ZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7 c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDQz MCBoIDIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMyMDciIC8+CiAgICAgICAgICAgIDxw YXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAg ICAgICAgICAgICAgIGlkPSJwYXRoMzIwOSIKICAgICAgICAgICAgICAgZD0ibSAyNDAsNDUw IGggMjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5v ZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0 O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNo YXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAgICAgICA8cGF0aAogICAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAw O3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46 cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tl LW9wYWNpdHk6MSIKICAgICAgICAgICAgICAgZD0ibSAyNDAsNDcwIGggMjAiCiAgICAgICAg ICAgICAgIGlkPSJwYXRoMzIxMyIgLz4KICAgICAgICAgIDwvZz4KICAgICAgICAgIDxnCiAg ICAgICAgICAgICB0cmFuc2Zvcm09Im1hdHJpeCgxLDAsMCwtMSwwLDUwMCkiCiAgICAgICAg ICAgICBpZD0iZzMyMjgiPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtz Y2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMy MzAiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDI3MCBoIDIwIgogICAgICAgICAgICAgICBz dHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9r ZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7 c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNp dHk6MSIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29u bmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtm aWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9r ZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0 OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAg ICAgIGQ9Im0gMjQwLDI5MCBoIDIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMyMzIiIC8+ CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1j dXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzIzNCIKICAgICAgICAgICAg ICAgZD0ibSAyNDAsMzEwIGggMjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAg ICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJl PSIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2Rk O3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtz dHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFy cmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgICAgZD0ibSAyNDAsMzMw IGggMjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzIzNiIgLz4KICAgICAgICAgICAgPHBh dGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAg ICAgICAgICAgICAgaWQ9InBhdGgzMjM4IgogICAgICAgICAgICAgICBkPSJtIDI0MCwzNTAg aCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9k ZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7 c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAg ICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAg ICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7 c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpy b3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Ut b3BhY2l0eToxIgogICAgICAgICAgICAgICBkPSJtIDI0MCwzNzAgaCAyMCIKICAgICAgICAg ICAgICAgaWQ9InBhdGgzMjQwIiAvPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAg ICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBpZD0i cGF0aDMyNDIiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDM5MCBoIDIwIgogICAgICAgICAg ICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAw O3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46 cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tl LW9wYWNpdHk6MSIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2Nh cGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6 bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41 O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAg ICAgICAgICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMy NDQiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzI0NiIKICAgICAg ICAgICAgICAgZD0ibSAyNDAsNDMwIGggMjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxs Om5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEu NTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0 ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgog ICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3Vy dmF0dXJlPSIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpl dmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgICAgZD0ibSAy NDAsNDUwIGggMjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzI0OCIgLz4KICAgICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0i MCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMjUwIgogICAgICAgICAgICAgICBkPSJtIDI0 MCw0NzAgaCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6 ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2Fw OmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tl LWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8L2c+CiAg ICAgICAgPC9nPgogICAgICAgIDxnCiAgICAgICAgICAgaWQ9ImczMjUyIgogICAgICAgICAg IHRyYW5zZm9ybT0idHJhbnNsYXRlKDI2MiwtMTIwKSI+CiAgICAgICAgICA8cGF0aAogICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg IHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ry b2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3Vu ZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3Bh Y2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsMjcwIGggMjAiCiAgICAgICAgICAgICBp ZD0icGF0aDMyNTQiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6 Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzI1NiIKICAg ICAgICAgICAgIGQ9Im0gMjQwLDI5MCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6 bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41 O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAg ICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVy ZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7 c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0 cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsMzEwIGgg MjAiCiAgICAgICAgICAgICBpZD0icGF0aDMyNTgiIC8+CiAgICAgICAgICA8cGF0aAogICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg IGlkPSJwYXRoMzI2MCIKICAgICAgICAgICAgIGQ9Im0gMjQwLDMzMCBoIDIwIgogICAgICAg ICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAw MDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2lu OnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9r ZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6 Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAg ICAgZD0ibSAyNDAsMzUwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDMyNjIiIC8+CiAg ICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVy ZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzI2NCIKICAgICAgICAgICAgIGQ9Im0gMjQw LDM3MCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZl bm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1 dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRh c2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0aAogICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg IHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ry b2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3Vu ZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3Bh Y2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsMzkwIGggMjAiCiAgICAgICAgICAgICBp ZD0icGF0aDMyNjYiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6 Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzI2OCIKICAg ICAgICAgICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6 bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41 O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAg ICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVy ZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7 c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0 cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsNDMwIGgg MjAiCiAgICAgICAgICAgICBpZD0icGF0aDMyNzAiIC8+CiAgICAgICAgICA8cGF0aAogICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg IGlkPSJwYXRoMzI3MiIKICAgICAgICAgICAgIGQ9Im0gMjQwLDQ1MCBoIDIwIgogICAgICAg ICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAw MDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2lu OnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9r ZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6 Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAg ICAgZD0ibSAyNDAsNDcwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDMyNzQiIC8+CiAg ICAgICAgPC9nPgogICAgICAgIDxnCiAgICAgICAgICAgaWQ9ImczMzAyIgogICAgICAgICAg IHRyYW5zZm9ybT0icm90YXRlKDkwLDI1MCwyNTApIj4KICAgICAgICAgIDxnCiAgICAgICAg ICAgICBpZD0iZzMzMDQiPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtz Y2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMz MDYiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDI3MCBoIDIwIgogICAgICAgICAgICAgICBz dHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9r ZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7 c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNp dHk6MSIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29u bmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtm aWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9r ZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0 OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAg ICAgIGQ9Im0gMjQwLDI5MCBoIDIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMzMDgiIC8+ CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1j dXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzMxMCIKICAgICAgICAgICAg ICAgZD0ibSAyNDAsMzEwIGggMjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAg ICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJl PSIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2Rk O3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtz dHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFy cmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgICAgZD0ibSAyNDAsMzMw IGggMjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzMxMiIgLz4KICAgICAgICAgICAgPHBh dGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAg ICAgICAgICAgICAgaWQ9InBhdGgzMzE0IgogICAgICAgICAgICAgICBkPSJtIDI0MCwzNTAg aCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9k ZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7 c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAg ICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAg ICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7 c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpy b3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Ut b3BhY2l0eToxIgogICAgICAgICAgICAgICBkPSJtIDI0MCwzNzAgaCAyMCIKICAgICAgICAg ICAgICAgaWQ9InBhdGgzMzE2IiAvPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAg ICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBpZD0i cGF0aDMzMTgiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDM5MCBoIDIwIgogICAgICAgICAg ICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAw O3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46 cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tl LW9wYWNpdHk6MSIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2Nh cGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6 bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41 O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAg ICAgICAgICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgogICAgICAgICAgICAgICBpZD0icGF0aDMz MjAiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzMyMiIKICAgICAg ICAgICAgICAgZD0ibSAyNDAsNDMwIGggMjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxs Om5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEu NTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0 ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgog ICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3Vy dmF0dXJlPSIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpl dmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgICAgZD0ibSAy NDAsNDUwIGggMjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzMyNCIgLz4KICAgICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0i MCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMzI2IgogICAgICAgICAgICAgICBkPSJtIDI0 MCw0NzAgaCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6 ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2Fw OmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tl LWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8L2c+CiAg ICAgICAgICA8ZwogICAgICAgICAgICAgaWQ9ImczMzI4IgogICAgICAgICAgICAgdHJhbnNm b3JtPSJtYXRyaXgoMSwwLDAsLTEsMCw1MDApIj4KICAgICAgICAgICAgPHBhdGgKICAgICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg ICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtz dHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJv dW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1v cGFjaXR5OjEiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDI3MCBoIDIwIgogICAgICAgICAg ICAgICBpZD0icGF0aDMzMzAiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAg IGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIGlkPSJw YXRoMzMzMiIKICAgICAgICAgICAgICAgZD0ibSAyNDAsMjkwIGggMjAiCiAgICAgICAgICAg ICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7 c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpy b3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Ut b3BhY2l0eToxIiAvPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2Fw ZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpu b25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7 c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVy bGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAg ICAgICAgICAgZD0ibSAyNDAsMzEwIGggMjAiCiAgICAgICAgICAgICAgIGlkPSJwYXRoMzMz NCIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVj dG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMzM2IgogICAgICAg ICAgICAgICBkPSJtIDI0MCwzMzAgaCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6 bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41 O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAg ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2 YXR1cmU9IjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2 ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpi dXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1k YXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgICBkPSJtIDI0 MCwzNTAgaCAyMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMzM4IiAvPgogICAgICAgICAg ICA8cGF0aAogICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIw IgogICAgICAgICAgICAgICBpZD0icGF0aDMzNDAiCiAgICAgICAgICAgICAgIGQ9Im0gMjQw LDM3MCBoIDIwIgogICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpl dmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICAgICAgPHBhdGgK ICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAw MDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVq b2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0 cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICAgIGQ9Im0gMjQwLDM5MCBoIDIwIgogICAg ICAgICAgICAgICBpZD0icGF0aDMzNDIiIC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAg ICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAg IGlkPSJwYXRoMzM0NCIKICAgICAgICAgICAgICAgZD0ibSAyNDAsNDEwIGggMjAiCiAgICAg ICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMw MDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5l am9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtz dHJva2Utb3BhY2l0eToxIiAvPgogICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICBp bmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICBzdHlsZT0i ZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0 aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tl LW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIK ICAgICAgICAgICAgICAgZD0ibSAyNDAsNDMwIGggMjAiCiAgICAgICAgICAgICAgIGlkPSJw YXRoMzM0NiIgLz4KICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgaW5rc2NhcGU6 Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMzQ4Igog ICAgICAgICAgICAgICBkPSJtIDI0MCw0NTAgaCAyMCIKICAgICAgICAgICAgICAgc3R5bGU9 ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lk dGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9r ZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEi IC8+CiAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rv ci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1y dWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGlu ZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0 cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgICBk PSJtIDI0MCw0NzAgaCAyMCIKICAgICAgICAgICAgICAgaWQ9InBhdGgzMzUwIiAvPgogICAg ICAgICAgPC9nPgogICAgICAgIDwvZz4KICAgICAgICA8ZwogICAgICAgICAgIHRyYW5zZm9y bT0icm90YXRlKDkwLDE3OS42MjUsNDQwLjM3NSkiCiAgICAgICAgICAgaWQ9ImczMzY0Ij4K ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgaWQ9InBhdGgzMzY2IgogICAgICAgICAgICAgZD0ibSAy NDAsMjcwIGggMjAiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpl dmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICAgIDxwYXRoCiAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtz dHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJv dW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1v cGFjaXR5OjEiCiAgICAgICAgICAgICBkPSJtIDI0MCwyOTAgaCAyMCIKICAgICAgICAgICAg IGlkPSJwYXRoMzM2OCIgLz4KICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2Fw ZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgaWQ9InBhdGgzMzcwIgog ICAgICAgICAgICAgZD0ibSAyNDAsMzEwIGggMjAiCiAgICAgICAgICAgICBzdHlsZT0iZmls bDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDox LjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1p dGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4K ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9k ZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7 c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICBkPSJtIDI0MCwzMzAg aCAyMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzM3MiIgLz4KICAgICAgICAgIDxwYXRoCiAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgaWQ9InBhdGgzMzc0IgogICAgICAgICAgICAgZD0ibSAyNDAsMzUwIGggMjAiCiAgICAg ICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAw MDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpv aW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ry b2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2Fw ZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9u ZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0 cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxp bWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAg ICAgICBkPSJtIDI0MCwzNzAgaCAyMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzM3NiIgLz4K ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgaWQ9InBhdGgzMzc4IgogICAgICAgICAgICAgZD0ibSAy NDAsMzkwIGggMjAiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpl dmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6 YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2Ut ZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICAgIDxwYXRoCiAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtz dHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJv dW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1v cGFjaXR5OjEiCiAgICAgICAgICAgICBkPSJtIDI0MCw0MTAgaCAyMCIKICAgICAgICAgICAg IGlkPSJwYXRoMzM4MCIgLz4KICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2Fw ZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgaWQ9InBhdGgzMzgyIgog ICAgICAgICAgICAgZD0ibSAyNDAsNDMwIGggMjAiCiAgICAgICAgICAgICBzdHlsZT0iZmls bDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDox LjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1p dGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIgLz4K ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9k ZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7 c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICBkPSJtIDI0MCw0NTAg aCAyMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzM4NCIgLz4KICAgICAgICAgIDxwYXRoCiAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgaWQ9InBhdGgzMzg2IgogICAgICAgICAgICAgZD0ibSAyNDAsNDcwIGggMjAiCiAgICAg ICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAw MDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpv aW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ry b2tlLW9wYWNpdHk6MSIgLz4KICAgICAgICA8L2c+CiAgICAgICAgPGcKICAgICAgICAgICBp ZD0iZzMzODgiCiAgICAgICAgICAgdHJhbnNmb3JtPSJ0cmFuc2xhdGUoLTI1OS4yNSwtMTIw KSI+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1 cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2 ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpi dXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1k YXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAs MjcwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDMzOTAiIC8+CiAgICAgICAgICA8cGF0 aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgIGlkPSJwYXRoMzM5MiIKICAgICAgICAgICAgIGQ9Im0gMjQwLDI5MCBoIDIwIgog ICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6 IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxp bmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25l O3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5r c2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxs Om5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEu NTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0 ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAg ICAgICAgICAgZD0ibSAyNDAsMzEwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDMzOTQi IC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1 cnZhdHVyZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzM5NiIKICAgICAgICAgICAgIGQ9 Im0gMjQwLDMzMCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1 bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5l Y2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ry b2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0 aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAw MDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9p bjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJv a2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsMzUwIGggMjAiCiAgICAgICAg ICAgICBpZD0icGF0aDMzOTgiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5r c2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzQw MCIKICAgICAgICAgICAgIGQ9Im0gMjQwLDM3MCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9 ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lk dGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9r ZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEi IC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1 cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2 ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpi dXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1k YXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAs MzkwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDM0MDIiIC8+CiAgICAgICAgICA8cGF0 aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgIGlkPSJwYXRoMzQwNCIKICAgICAgICAgICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgog ICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6 IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxp bmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25l O3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5r c2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxs Om5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEu NTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0 ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAg ICAgICAgICAgZD0ibSAyNDAsNDMwIGggMjAiCiAgICAgICAgICAgICBpZD0icGF0aDM0MDYi IC8+CiAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1 cnZhdHVyZT0iMCIKICAgICAgICAgICAgIGlkPSJwYXRoMzQwOCIKICAgICAgICAgICAgIGQ9 Im0gMjQwLDQ1MCBoIDIwIgogICAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1 bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MS41O3N0cm9rZS1saW5l Y2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ry b2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgICA8cGF0 aAogICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAw MDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9p bjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJv a2Utb3BhY2l0eToxIgogICAgICAgICAgICAgZD0ibSAyNDAsNDcwIGggMjAiCiAgICAgICAg ICAgICBpZD0icGF0aDM0MTAiIC8+CiAgICAgICAgPC9nPgogICAgICAgIDxnCiAgICAgICAg ICAgdHJhbnNmb3JtPSJyb3RhdGUoOTAsNDM5LjYyNSwxODAuMzc1KSIKICAgICAgICAgICBp ZD0iZzM0MTIiPgogICAgICAgICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBpZD0icGF0aDM0MTQiCiAgICAgICAg ICAgICBkPSJtIDI0MCwyNzAgaCAyMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAi CiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9r ZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2Ut bGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5v bmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgIGQ9Im0gMjQwLDI5MCBoIDIwIgog ICAgICAgICAgICAgaWQ9InBhdGgzNDE2IiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAg ICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBpZD0i cGF0aDM0MTgiCiAgICAgICAgICAgICBkPSJtIDI0MCwzMTAgaCAyMCIKICAgICAgICAgICAg IHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ry b2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3Vu ZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3Bh Y2l0eToxIiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwt cnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxp bmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtz dHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgIGQ9 Im0gMjQwLDMzMCBoIDIwIgogICAgICAgICAgICAgaWQ9InBhdGgzNDIwIiAvPgogICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAi CiAgICAgICAgICAgICBpZD0icGF0aDM0MjIiCiAgICAgICAgICAgICBkPSJtIDI0MCwzNTAg aCAyMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7 c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0 cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAg ICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBzdHls ZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13 aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ry b2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6 MSIKICAgICAgICAgICAgIGQ9Im0gMjQwLDM3MCBoIDIwIgogICAgICAgICAgICAgaWQ9InBh dGgzNDI0IiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBpZD0icGF0aDM0MjYiCiAgICAgICAg ICAgICBkPSJtIDI0MCwzOTAgaCAyMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJv a2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1p dDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAi CiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9r ZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2Ut bGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5v bmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgIGQ9Im0gMjQwLDQxMCBoIDIwIgog ICAgICAgICAgICAgaWQ9InBhdGgzNDI4IiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAg ICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBpZD0i cGF0aDM0MzAiCiAgICAgICAgICAgICBkPSJtIDI0MCw0MzAgaCAyMCIKICAgICAgICAgICAg IHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ry b2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjpyb3Vu ZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3Bh Y2l0eToxIiAvPgogICAgICAgICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwt cnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxLjU7c3Ryb2tlLWxp bmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46cm91bmQ7c3Ryb2tlLW1pdGVybGltaXQ6NDtz dHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICAgIGQ9 Im0gMjQwLDQ1MCBoIDIwIgogICAgICAgICAgICAgaWQ9InBhdGgzNDMyIiAvPgogICAgICAg ICAgPHBhdGgKICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAi CiAgICAgICAgICAgICBpZD0icGF0aDM0MzQiCiAgICAgICAgICAgICBkPSJtIDI0MCw0NzAg aCAyMCIKICAgICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7 c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjEuNTtzdHJva2UtbGluZWNhcDpidXR0O3N0 cm9rZS1saW5lam9pbjpyb3VuZDtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIiAvPgogICAgICAgIDwvZz4KICAgICAgICA8cGF0 aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAg ICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtz dHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOm1p dGVyO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0iTSAwLDAgNDAsNDAiCiAgICAg ICAgICAgaWQ9InBhdGgzNDQwIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2Nh cGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDpub25l O2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxcHg7c3Ry b2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tlLW9wYWNpdHk6 MSIKICAgICAgICAgICBkPSJNIDAsNTAwIDQwLDQ2MCIKICAgICAgICAgICBpZD0icGF0aDM0 NDIiIC8+CiAgICAgICAgPHBhdGgKICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3Vy dmF0dXJlPSIwIgogICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5v ZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjFweDtzdHJva2UtbGluZWNhcDpidXR0 O3N0cm9rZS1saW5lam9pbjptaXRlcjtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGQ9 Ik0gNTAwLDUwMCA0NjAsNDYwIgogICAgICAgICAgIGlkPSJwYXRoMzQ0NCIgLz4KICAgICAg ICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAg ICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAw MDAwMDtzdHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVq b2luOm1pdGVyO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0iTSA1MDAsMCA0NjAs NDAiCiAgICAgICAgICAgaWQ9InBhdGgzNDQ2IiAvPgogICAgICAgIDxwYXRoCiAgICAgICAg ICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0i ZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0 aDoxcHg7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tl LW9wYWNpdHk6MSIKICAgICAgICAgICBkPSJNIDMwLDUwIDUwLDMwIgogICAgICAgICAgIGlk PSJwYXRoMzQ0OCIgLz4KICAgICAgICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5l Y3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1 bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5l Y2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOm1pdGVyO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAg ICAgICAgZD0ibSA0NTAsMzAgMjAsMjAiCiAgICAgICAgICAgaWQ9InBhdGgzNDUwIiAvPgog ICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0i MCIKICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9r ZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxcHg7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2Ut bGluZWpvaW46bWl0ZXI7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBkPSJtIDMwLDQ1 MCAyMCwyMCIKICAgICAgICAgICBpZD0icGF0aDM0NTIiIC8+CiAgICAgICAgPHBhdGgKICAg ICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgIHN0 eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tl LXdpZHRoOjFweDtzdHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjptaXRlcjtz dHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGQ9Im0gNDUwLDQ3MCAyMCwtMjAiCiAgICAg ICAgICAgaWQ9InBhdGgzNDU0IiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2Nh cGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDpub25l O2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxcHg7c3Ry b2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tlLW9wYWNpdHk6 MSIKICAgICAgICAgICBkPSJNIDIxMCwyOTAgMTAwLDQwMCIKICAgICAgICAgICBpZD0icGF0 aDM0NTgiIC8+CiAgICAgICAgPHBhdGgKICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3It Y3VydmF0dXJlPSIwIgogICAgICAgICAgIGlkPSJwYXRoMzQ2MCIKICAgICAgICAgICBkPSJN IDIxMCwyMTAgMTAwLDEwMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDpub25lO2ZpbGwtcnVs ZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxcHg7c3Ryb2tlLWxpbmVj YXA6YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tlLW9wYWNpdHk6MSIgLz4KICAg ICAgICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAi CiAgICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6 IzAwMDAwMDtzdHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxp bmVqb2luOm1pdGVyO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0iTSAyOTAsMjEw IDQwMCwxMDAiCiAgICAgICAgICAgaWQ9InBhdGgzNDYyIiAvPgogICAgICAgIDxwYXRoCiAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBp ZD0icGF0aDM0NjQiCiAgICAgICAgICAgZD0iTSAyOTAsMjkwIDQwMCw0MDAiCiAgICAgICAg ICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtz dHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVqb2luOm1p dGVyO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAgICAgICAgPHBhdGgKICAgICAgICAgICBpbmtz Y2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgIHN0eWxlPSJmaWxsOm5v bmU7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjFweDtz dHJva2UtbGluZWNhcDpidXR0O3N0cm9rZS1saW5lam9pbjptaXRlcjtzdHJva2Utb3BhY2l0 eToxIgogICAgICAgICAgIGQ9Ik0gOTAsMTEwIDExMCw5MCIKICAgICAgICAgICBpZD0icGF0 aDM0NjYiIC8+CiAgICAgICAgPHBhdGgKICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3It Y3VydmF0dXJlPSIwIgogICAgICAgICAgIHN0eWxlPSJmaWxsOm5vbmU7ZmlsbC1ydWxlOmV2 ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjFweDtzdHJva2UtbGluZWNhcDpi dXR0O3N0cm9rZS1saW5lam9pbjptaXRlcjtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAg IGQ9Im0gOTAsMzkwIDIwLDIwIgogICAgICAgICAgIGlkPSJwYXRoMzQ2OCIgLz4KICAgICAg ICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAg ICAgICAgICAgc3R5bGU9ImZpbGw6bm9uZTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAw MDAwMDtzdHJva2Utd2lkdGg6MXB4O3N0cm9rZS1saW5lY2FwOmJ1dHQ7c3Ryb2tlLWxpbmVq b2luOm1pdGVyO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0ibSAzOTAsOTAgMjAs MjAiCiAgICAgICAgICAgaWQ9InBhdGgzNDcwIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAg ICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0i ZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0 aDoxcHg7c3Ryb2tlLWxpbmVjYXA6YnV0dDtzdHJva2UtbGluZWpvaW46bWl0ZXI7c3Ryb2tl LW9wYWNpdHk6MSIKICAgICAgICAgICBkPSJtIDM5MCw0MTAgMjAsLTIwIgogICAgICAgICAg IGlkPSJwYXRoMzQ3MiIgLz4KICAgICAgPC9nPgogICAgICA8ZwogICAgICAgICBpZD0iZzQz NTAiCiAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KC0wLjA0NjU3NzgxLDAsMCwwLjA0NjU3 NzgxLDE2LjgxMzQ3LDIyNi4zMDQ0MikiPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5r c2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDoj MWYxZjFmO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0 cm9rZS13aWR0aDoxO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MSIKICAg ICAgICAgICBkPSJtIC0yMDUuMDU3NDYsNjIuODQ1NDM4IGggLTYuODI5ODQgYyAtMTIuNTk4 ODIsLTguNDY3NzEgLTExLjQ1NzkzLC0zMy44NzA4MzkgLTAuNjQ5NDQsLTQyLjMzODU0OCBs IDcuNDM1NjMsLTAuMDI2NzcgeiIKICAgICAgICAgICBpZD0icGF0aDM4NDUiCiAgICAgICAg ICAgc29kaXBvZGk6bm9kZXR5cGVzPSJjY2NjYyIgLz4KICAgICAgICA8ZWxsaXBzZQogICAg ICAgICAgIHJ5PSIzMC45NjgxNDUiCiAgICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAg ICAgIGN5PSIxMi4zMTg0NjUiCiAgICAgICAgICAgY3g9Ii0zMTcuODMwOTYiCiAgICAgICAg ICAgc3R5bGU9ImZpbGw6IzRlMzUyNTtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVy bztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9r ZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGlkPSJwYXRo Mzg0MyIKICAgICAgICAgICB0cmFuc2Zvcm09Im1hdHJpeCgtMC41NzEyMzMyLDAuMDAxMjg1 MjksLTkuOTE1NTU4OGUtNCwtMC42ODQyMTA1LC0zODYuODgwMzcsNTAuNDkzNjM0KSIgLz4K ICAgICAgICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9 IjAiCiAgICAgICAgICAgc3R5bGU9ImZpbGw6dXJsKCNsaW5lYXJHcmFkaWVudDQ2NTcpO2Zp bGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0 aDozLjEzNzg0MjQyO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MSIKICAg ICAgICAgICBkPSJtIC0xNzQuNTM5MTQsNTYuMzI1ODI4IGggLTI5LjMzODI2IGMgLTExLjQx ODM2LC00LjI3NjUyIC0xMS40MDQwNSwtMjUuMDYxNzIxIDAsLTI5LjMzODI0MyBoIDI5LjMz ODI2IHoiCiAgICAgICAgICAgaWQ9InBhdGgzODIxIgogICAgICAgICAgIHNvZGlwb2RpOm5v ZGV0eXBlcz0iY2NjY2MiIC8+CiAgICAgICAgPHJlY3QKICAgICAgICAgICBzdHlsZT0ib3Bh Y2l0eToxO2ZpbGw6dXJsKCNsaW5lYXJHcmFkaWVudDQ2NTkpO2ZpbGwtb3BhY2l0eToxO2Zp bGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAg ICAgICAgaWQ9InJlY3QzNjgwIgogICAgICAgICAgIHdpZHRoPSIzOC41NDI0IgogICAgICAg ICAgIGhlaWdodD0iMTY5LjUwOTg0IgogICAgICAgICAgIHg9Ii0xODIuNTQ5MDYiCiAgICAg ICAgICAgeT0iNy40Mjg3NTc3IiAvPgogICAgICAgIDxyZWN0CiAgICAgICAgICAgc3R5bGU9 ImZpbGw6IzAwMDAwMDtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6 bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGlkPSJyZWN0MzU0OCIKICAg ICAgICAgICB3aWR0aD0iMy4yNTk4MDQ1IgogICAgICAgICAgIGhlaWdodD0iOS43Nzk0MTQy IgogICAgICAgICAgIHg9Ii0xNTUuNjMxNDEiCiAgICAgICAgICAgeT0iLTE0NS4yNjM1NSIK ICAgICAgICAgICB0cmFuc2Zvcm09InJvdGF0ZSgtMzIuODk5NzM5KSIgLz4KICAgICAgICA8 cmVjdAogICAgICAgICAgIHN0eWxlPSJmaWxsOiMwMDAwMDA7ZmlsbC1vcGFjaXR5OjE7Zmls bC1ydWxlOm5vbnplcm87c3Ryb2tlOm5vbmU7c3Ryb2tlLXdpZHRoOjE7c3Ryb2tlLW1pdGVy bGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAg ICAgICBpZD0icmVjdDM1NTAiCiAgICAgICAgICAgd2lkdGg9IjMuMjU5ODA0NSIKICAgICAg ICAgICBoZWlnaHQ9IjkuNzc5NDE0MiIKICAgICAgICAgICB4PSItNTcuODM3Mjc2IgogICAg ICAgICAgIHk9Ii0xNDUuMjYzNTUiCiAgICAgICAgICAgdHJhbnNmb3JtPSJyb3RhdGUoLTMy Ljg5OTczOSkiIC8+CiAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICByeT0iMjkuNjk3OTki CiAgICAgICAgICAgcng9IjIxLjQyMTYwNiIKICAgICAgICAgICBjeT0iMTIuMzE4NDY1Igog ICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAgIHN0eWxlPSJmaWxsOiMwMDAw MDA7ZmlsbC1vcGFjaXR5OjE7ZmlsbC1ydWxlOm5vbnplcm87c3Ryb2tlOm5vbmU7c3Ryb2tl LXdpZHRoOjE7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5Om5vbmU7c3Ry b2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBpZD0icGF0aDM0NzYiCiAgICAgICAgICAgdHJh bnNmb3JtPSJtYXRyaXgoMS4yNDk0ODI1LC0wLjgwODMxODQsMC43NzUwNzU3LDEuMTk4MDk2 NiwyODkuOTgxOSwtMzIzLjE5MTg1KSIgLz4KICAgICAgICA8cGF0aAogICAgICAgICAgIGlu a3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgc3R5bGU9ImZpbGw6 dXJsKCNsaW5lYXJHcmFkaWVudDQ2NjEpO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256 ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDozLjgwMTMwNDE7c3Ryb2tlLW1pdGVybGlt aXQ6NDtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGQ9Im0gLTIyNS4yMjMwOCwtMTku NDMwODEgMTA2Ljc0MzE4LC02OS4wNTQ1NzIgYyAzOC40OTc4MSwtMC45NzM4MDggNjMuNDYw NjE0LDM3LjYxMzE5OCA0Ni4wMzYzODIsNzEuMTYyMTIyIEwgLTE3OS4xODY3LDUxLjczMTMx MSBaIgogICAgICAgICAgIGlkPSJwYXRoMzQ3NCIKICAgICAgICAgICBzb2RpcG9kaTpub2Rl dHlwZXM9ImNjY2NjIiAvPgogICAgICAgIDxlbGxpcHNlCiAgICAgICAgICAgcnk9IjMwLjk2 ODE0NSIKICAgICAgICAgICByeD0iMjEuMTg4NzMiCiAgICAgICAgICAgY3k9IjEyLjMxODQ2 NSIKICAgICAgICAgICBjeD0iLTMxNy44MzA5NiIKICAgICAgICAgICBzdHlsZT0iZmlsbDoj MDAwMDAwO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0 cm9rZS13aWR0aDoxO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25l O3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgaWQ9InBhdGgzNDcyLTMiCiAgICAgICAg ICAgdHJhbnNmb3JtPSJtYXRyaXgoMS4zNDkzMzMxLC0wLjg3MjkxNCwwLjc0MzI4NjEsMS4x NDg5NTY4LDIyMC4yMzU3OSwtMjc3LjIxMjg1KSIgLz4KICAgICAgICA8cGF0aAogICAgICAg ICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgc3R5bGU9 ImZpbGw6dXJsKCNsaW5lYXJHcmFkaWVudDQ2NjMpO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVs ZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDozLjEzNzg0MjQyO3N0cm9rZS1t aXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MTtmaWx0ZXI6dXJsKCNmaWx0ZXI0NDA4KSIK ICAgICAgICAgICBkPSJNIC0zMzEuMzI0MTMsNjguNjIwNjc3IC0yMTMuMzY1LC03LjEwMjI1 MDkgYyAyMi4wMTU2OCwtMS45NzcyMzUyIDQwLjY2MTE3LDI2Ljg0NDU4NzkgMjkuODMyNzgs NDYuMTE0OTE2OSBsIC0xMTcuNjkxMiw3Ni4xMzcwOTQgeiIKICAgICAgICAgICBpZD0icmVj dDM0NjIiCiAgICAgICAgICAgc29kaXBvZGk6bm9kZXR5cGVzPSJjY2NjYyIgLz4KICAgICAg ICA8cGF0aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAg ICAgICAgICAgc3R5bGU9ImZpbGw6IzFmMWYxZjtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6 bm9uemVybztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0 O3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0ibSAtMzM4LjU2ODc2LDY5LjQyNDky NyAyMS44OTYwNCwtMTQuMTY1MDQyIGMgMjYuMjQxNTQsLTEuNDQ2Mzg1IDQ1LjcxODQ3LDI4 LjY2MDY2NiAzMy42NDE5Niw1Mi4wMDMwOTUgbCAtMjEuODk2MDMsMTQuMTY1MDQgeiIKICAg ICAgICAgICBpZD0icmVjdDM0NjkiCiAgICAgICAgICAgc29kaXBvZGk6bm9kZXR5cGVzPSJj Y2NjYyIgLz4KICAgICAgICA8ZWxsaXBzZQogICAgICAgICAgIHJ5PSIzMC45NjgxNDUiCiAg ICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAgICAgIGN5PSIxMi4zMTg0NjUiCiAgICAg ICAgICAgY3g9Ii0zMTcuODMwOTYiCiAgICAgICAgICAgc3R5bGU9ImZpbGw6IzAwMDAwMDtm aWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6bm9uZTtzdHJva2Utd2lk dGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6bm9uZTtzdHJva2Ut b3BhY2l0eToxIgogICAgICAgICAgIGlkPSJwYXRoMzQ2NyIKICAgICAgICAgICB0cmFuc2Zv cm09Im1hdHJpeCgwLjg0MDIxMjMsLTAuNTQzNTUyMywwLjU0MzE2OTEsMC44Mzk2MTk5LC02 MS4zOTMyNjIsLTg3LjY3NDAyNikiIC8+CiAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICBy eT0iMjkuNjk3OTkiCiAgICAgICAgICAgcng9IjIxLjQyMTYwNiIKICAgICAgICAgICBjeT0i MTIuMzE4NDY1IgogICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAgIHN0eWxl PSJmaWxsOiMwMDAwMDA7ZmlsbC1vcGFjaXR5OjE7ZmlsbC1ydWxlOm5vbnplcm87c3Ryb2tl Om5vbmU7c3Ryb2tlLXdpZHRoOjE7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFy cmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBpZD0icGF0aDM0ODgiCiAg ICAgICAgICAgdHJhbnNmb3JtPSJtYXRyaXgoMC4zODMzMDUsLTAuMjQ3OTY4NywwLjE3ODg2 MzYsMC4yNzY0ODM4LDIuMzAyMjc4LC0xODcuMDk2MTQpIiAvPgogICAgICAgIDxwYXRoCiAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBz dHlsZT0iZmlsbDp1cmwoI2xpbmVhckdyYWRpZW50NDY2NSk7ZmlsbC1vcGFjaXR5OjE7Zmls bC1ydWxlOm5vbnplcm87c3Ryb2tlOm5vbmU7c3Ryb2tlLXdpZHRoOjMuODAxMzA0MTtzdHJv a2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0ibSAtMTU3 LjU0OTgxLC05MC41MDAzNzkgMzUuMDQxNzgsLTIyLjY2OTMyMSBjIDExLjU3Mzg1LC0xLjk2 NDc4IDE3LjMzNDUsNi45Mzk5MiAxMC42MjM3OCwxNi40MjIwMzIgbCAtMzUuMDQxNzgsMjIu NjY5MzE4IHoiCiAgICAgICAgICAgaWQ9InBhdGgzNDkwIgogICAgICAgICAgIHNvZGlwb2Rp Om5vZGV0eXBlcz0iY2NjY2MiIC8+CiAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICByeT0i MzAuOTY4MTQ1IgogICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAgICAgICAgICBjeT0iMTIu MzE4NDY1IgogICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAgIHN0eWxlPSJm aWxsOiMwMDAwMDA7ZmlsbC1vcGFjaXR5OjE7ZmlsbC1ydWxlOm5vbnplcm87c3Ryb2tlOm5v bmU7c3Ryb2tlLXdpZHRoOjE7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJva2UtZGFzaGFycmF5 Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBpZD0icGF0aDM0OTIiCiAgICAg ICAgICAgdHJhbnNmb3JtPSJtYXRyaXgoMC4yNTgzNDU1LC0wLjE2NzEyOTUsMC4xNzE1Mjc2 LDAuMjY1MTQzOSwtNzAuMTY3NDAxLC0xNDAuMDE1NzIpIiAvPgogICAgICAgIDxwYXRoCiAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBz dHlsZT0iZmlsbDp1cmwoI2xpbmVhckdyYWRpZW50NDY2Nyk7ZmlsbC1vcGFjaXR5OjE7Zmls bC1ydWxlOm5vbnplcm87c3Ryb2tlOm5vbmU7c3Ryb2tlLXdpZHRoOjMuMTM3ODQyNDI7c3Ry b2tlLW1pdGVybGltaXQ6NDtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGQ9Im0gLTI0 Mi43MjU1NiwtMzQuNjYzNDE4IDg3LjY0MTQ0LC01Ni41NzE2MTIgYyA3LjIyNzMzLC0wLjY0 OTA4OCAxMy4zOTUzNiw4Ljg4NTMzMyA5Ljg0MDYxLDE1LjIxMTQyIGwgLTg3LjU4MTYxLDU2 LjY2NDA5MyB6IgogICAgICAgICAgIGlkPSJwYXRoMzQ5NCIKICAgICAgICAgICBzb2RpcG9k aTpub2RldHlwZXM9ImNjY2NjIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2Nh cGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDojMWYx ZjFmO2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9r ZS13aWR0aDoxO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAg ICAgICBkPSJtIC0yNDguNTM0NzEsLTMxLjY0MDE5OSA3LjE4ODA2LC00LjY1MDExNiBjIDgu NTI2MTQsLTAuNjExNTgzIDE0LjY3Njc1LDguODk1OTA2IDEwLjYyMzc4LDE2LjQyMjAyOCBs IC03LjE4ODA1LDQuNjUwMTE3IHoiCiAgICAgICAgICAgaWQ9InBhdGgzNDk2IgogICAgICAg ICAgIHNvZGlwb2RpOm5vZGV0eXBlcz0iY2NjY2MiIC8+CiAgICAgICAgPGVsbGlwc2UKICAg ICAgICAgICByeT0iMzAuOTY4MTQ1IgogICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAgICAg ICAgICBjeT0iMTIuMzE4NDY1IgogICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAg ICAgIHN0eWxlPSJmaWxsOiMwMDAwMDA7ZmlsbC1vcGFjaXR5OjE7ZmlsbC1ydWxlOm5vbnpl cm87c3Ryb2tlOm5vbmU7c3Ryb2tlLXdpZHRoOjE7c3Ryb2tlLW1pdGVybGltaXQ6NDtzdHJv a2UtZGFzaGFycmF5Om5vbmU7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBpZD0icGF0 aDM0OTgiCiAgICAgICAgICAgdHJhbnNmb3JtPSJtYXRyaXgoMC4yNzU4MjU5LC0wLjE3ODQz OCwwLjE3MTUyNzYsMC4yNjUxNDM5LC0xNTcuNjY5NzUsLTgzLjQwODQ3NSkiIC8+CiAgICAg ICAgPHBhdGgKICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgog ICAgICAgICAgIHN0eWxlPSJmaWxsOnVybCgjbGluZWFyR3JhZGllbnQ0NjY5KTtmaWxsLW9w YWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6My4x Mzc4NDI0MjtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAg ICAgZD0ibSAtMTE3LjM1Mjk2LDU2LjMyNTgyOCBoIC0yOS4zMzgyNiBjIC0xMS40MTgzNiwt NC4yNzY1MiAtMTEuNDA0MDUsLTI1LjA2MTcyMSAwLC0yOS4zMzgyNDMgaCAyOS4zMzgyNiB6 IgogICAgICAgICAgIGlkPSJwYXRoMzczNiIKICAgICAgICAgICBzb2RpcG9kaTpub2RldHlw ZXM9ImNjY2NjIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVj dG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDojMWYxZjFmO2ZpbGwt b3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDox O3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBkPSJt IC0xMjAuMzAyNTQsNjIuODA2NTI1IGggLTYuODI5ODQgYyAtMTIuNTk4ODIsLTguNDY3NzEg LTExLjQ1NzkzLC0zMy44NzA4MzkgLTAuNjQ5NDQsLTQyLjMzODU0OCBsIDcuNDM1NjMsLTAu MDI2NzcgeiIKICAgICAgICAgICBpZD0icGF0aDM3NjYiCiAgICAgICAgICAgc29kaXBvZGk6 bm9kZXR5cGVzPSJjY2NjYyIgLz4KICAgICAgICA8ZWxsaXBzZQogICAgICAgICAgIHJ5PSIz MC45NjgxNDUiCiAgICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAgICAgIGN5PSIxMi4z MTg0NjUiCiAgICAgICAgICAgY3g9Ii0zMTcuODMwOTYiCiAgICAgICAgICAgc3R5bGU9ImZp bGw6IzRlMzUyNTtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6bm9u ZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJyYXk6 bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgIGlkPSJwYXRoMzc1NiIKICAgICAg ICAgICB0cmFuc2Zvcm09Im1hdHJpeCgtMC41NzEyMzMzLDAuMDAxMjg1MjksLTkuOTE1NTU4 OWUtNCwtMC42ODQyMTA1LC0zMDAuOTk1NzEsNTAuNDkzNjM1KSIgLz4KICAgICAgICA8cGF0 aAogICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAg ICAgc3R5bGU9ImZpbGw6IzFmMWYxZjtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVy bztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9r ZS1vcGFjaXR5OjEiCiAgICAgICAgICAgZD0ibSAtMTE0LjIzOTA5LDU5LjU4NTYzMyBoIC00 LjgwNDEyIGMgLTExLjI1NzIxLC03LjE3MTQ5NyAtMTEuNDY3MDksLTI4LjY4NTk4NyAtMC40 NTY4MiwtMzUuODU3NDg2IGwgNS4yMzAyNCwtMC4wMjI2NyB6IgogICAgICAgICAgIGlkPSJw YXRoMzc2NCIKICAgICAgICAgICBzb2RpcG9kaTpub2RldHlwZXM9ImNjY2NjIiAvPgogICAg ICAgIDxlbGxpcHNlCiAgICAgICAgICAgcnk9IjMwLjk2ODE0NSIKICAgICAgICAgICByeD0i MjEuMTg4NzMiCiAgICAgICAgICAgY3k9IjEyLjMxODQ2NSIKICAgICAgICAgICBjeD0iLTMx Ny44MzA5NiIKICAgICAgICAgICBzdHlsZT0iZmlsbDojNzE0YzM1O2ZpbGwtb3BhY2l0eTox O2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1t aXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAg ICAgICAgICAgaWQ9InBhdGgzNzU4IgogICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KC0w LjQ4NTA4NTMsMC4wMDEwODc1NSwtOC40MjAxODYxZS00LC0wLjU3ODk0NzMsLTI2Ny45OTAy OSw0OS4xMzQxMDgpIiAvPgogICAgICAgIDxwYXRoCiAgICAgICAgICAgaW5rc2NhcGU6Y29u bmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICBzdHlsZT0iZmlsbDojMWYxZjFmO2Zp bGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0 aDoxO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLW9wYWNpdHk6MSIKICAgICAgICAgICBk PSJtIC0xMTAuNDI0NDcsNTYuMzI3NTQyIC00LjUzMzQyLDAuMDIzMiBjIC05LjE0NTk5LC0z LjY3MDM5NCAtOS4xNDU5OSwtMjUuNjkyNzY1IDAuNDgxNTEsLTI5LjM2MzE2IGwgNC4wMjA1 NSwtMC4wMTc0MSB6IgogICAgICAgICAgIGlkPSJwYXRoMzczOCIKICAgICAgICAgICBzb2Rp cG9kaTpub2RldHlwZXM9ImNjY2NjIiAvPgogICAgICAgIDxlbGxpcHNlCiAgICAgICAgICAg cnk9IjMwLjk2ODE0NSIKICAgICAgICAgICByeD0iMjEuMTg4NzMiCiAgICAgICAgICAgY3k9 IjEyLjMxODQ2NSIKICAgICAgICAgICBjeD0iLTMxNy44MzA5NiIKICAgICAgICAgICBzdHls ZT0iZmlsbDojNGUzNTI1O2ZpbGwtb3BhY2l0eToxO2ZpbGwtcnVsZTpub256ZXJvO3N0cm9r ZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1taXRlcmxpbWl0OjQ7c3Ryb2tlLWRhc2hh cnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgaWQ9InBhdGgzNzYwIgog ICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KC0wLjQ0ODUxMSw4Ljg5ODEzODllLTQsLTcu Nzg1MzI1ZS00LC0wLjQ3MzY4NDIsLTI1My4zNDAyNiw0Ny43NzQ1ODEpIiAvPgogICAgICAg IDxlbGxpcHNlCiAgICAgICAgICAgcnk9IjMwLjk2ODE0NSIKICAgICAgICAgICByeD0iMjEu MTg4NzMiCiAgICAgICAgICAgY3k9IjEyLjMxODQ2NSIKICAgICAgICAgICBjeD0iLTMxNy44 MzA5NiIKICAgICAgICAgICBzdHlsZT0iZmlsbDojMmUxZjE2O2ZpbGwtb3BhY2l0eToxO2Zp bGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiCiAgICAg ICAgICAgaWQ9InBhdGgzNzYyIgogICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KC0wLjI3 MDAzNjUsNi45MjA3NzQ3ZS00LC00LjY4NzMzNjZlLTQsLTAuMzY4NDIxMSwtMTk2LjYzOTAz LDQ2LjQxNTA1NCkiIC8+CiAgICAgICAgPGcKICAgICAgICAgICBpZD0iZzM4MzYiPgogICAg ICAgICAgPGcKICAgICAgICAgICAgIGlkPSJnMzgzMCI+CiAgICAgICAgICAgIDxnCiAgICAg ICAgICAgICAgIGlkPSJnMzgyNSI+CiAgICAgICAgICAgICAgPGcKICAgICAgICAgICAgICAg ICB0cmFuc2Zvcm09Im1hdHJpeCgxLjI3ODgwODUsMCwwLDEuMjM3NjE1MywyOS4wNzIyNjYs LTcuODY0NjUxNCkiCiAgICAgICAgICAgICAgICAgaWQ9ImczNzcyIj4KICAgICAgICAgICAg ICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0 dXJlPSIwIgogICAgICAgICAgICAgICAgICAgc3R5bGU9ImZpbGw6IzFmMWYxZjtmaWxsLW9w YWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6bm9uZTtzdHJva2Utd2lkdGg6MTtz dHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1vcGFjaXR5OjEiCiAgICAgICAgICAgICAgICAg ICBkPSJtIC0xMDkuNjU4MTUsMzAuNzk0NzQxIGMgMCwwIDUuMDI2NzgsMCA1LjAyNjc4LDku MTk0Mzk3IDAsOS4xOTQzOTYgLTQuODM2MjEsOS4xOTQzOTYgLTQuODM2MjEsOS4xOTQzOTYg eiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoMzc2OCIKICAgICAgICAgICAgICAgICAg IHNvZGlwb2RpOm5vZGV0eXBlcz0iY2NjYyIgLz4KICAgICAgICAgICAgICAgIDxlbGxpcHNl CiAgICAgICAgICAgICAgICAgICByeT0iMzAuOTY4MTQ1IgogICAgICAgICAgICAgICAgICAg cng9IjIxLjE4ODczIgogICAgICAgICAgICAgICAgICAgY3k9IjEyLjMxODQ2NSIKICAgICAg ICAgICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAgICAgICAgICAgc3R5bGU9 ImZpbGw6IzJlMWYxNjtmaWxsLW9wYWNpdHk6MTtmaWxsLXJ1bGU6bm9uemVybztzdHJva2U6 bm9uZTtzdHJva2Utd2lkdGg6MTtzdHJva2UtbWl0ZXJsaW1pdDo0O3N0cm9rZS1kYXNoYXJy YXk6bm9uZTtzdHJva2Utb3BhY2l0eToxIgogICAgICAgICAgICAgICAgICAgaWQ9InBhdGgz NzcwIgogICAgICAgICAgICAgICAgICAgdHJhbnNmb3JtPSJtYXRyaXgoLTAuMTkyNTM4Nyw1 LjU5MTE1OGUtNCwtMy4zNDIxMTU5ZS00LC0wLjI5NzY0MDIsLTE3MC42NDE2NSw0My44NTkx MzIpIiAvPgogICAgICAgICAgICAgIDwvZz4KICAgICAgICAgICAgPC9nPgogICAgICAgICAg PC9nPgogICAgICAgIDwvZz4KICAgICAgICA8ZwogICAgICAgICAgIHRyYW5zZm9ybT0ibWF0 cml4KDAuNTM3MzMyMiwwLDAsMC41MjE0NTg1LC02OS42MzI4MzQsLTczLjU4NTE1OCkiCiAg ICAgICAgICAgaWQ9Imc0MzI2Ij4KICAgICAgICAgIDxlbGxpcHNlCiAgICAgICAgICAgICBy eT0iMzAuOTY4MTQ1IgogICAgICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAgICAgICAg Y3k9IjEyLjMxODQ2NSIKICAgICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAg ICAgdHJhbnNmb3JtPSJtYXRyaXgoMC40NzY3OTIzLC0wLjMwODQ0NzcsMC4yOTY1MDI0LDAu NDU4MzI3NCwtMTc1LjM5ODQsLTcuMDgyMzA0NSkiCiAgICAgICAgICAgICBpZD0icGF0aDQz MjgiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDojOGE4YThhO2ZpbGwtb3BhY2l0eToxO2Zp bGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAg ICAgICAgICA8ZwogICAgICAgICAgICAgaWQ9Imc0MzMwIgogICAgICAgICAgICAgY2xpcC1w YXRoPSJ1cmwoI2NsaXBQYXRoKSI+CiAgICAgICAgICAgIDxnCiAgICAgICAgICAgICAgIGlk PSJnNDMzMiI+CiAgICAgICAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICAgICAgICByeT0i MzAuOTY4MTQ1IgogICAgICAgICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAgICAgICAgICAg ICAgICBjeT0iMTIuMzE4NDY1IgogICAgICAgICAgICAgICAgIGN4PSItMzE3LjgzMDk2Igog ICAgICAgICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDAuNDc2NzkyMywtMC4zMDg0NDc3 LDAuMjk2NTAyNCwwLjQ1ODMyNzQsLTE3NS4zOTg0LC03LjA4MjMwNDUpIgogICAgICAgICAg ICAgICAgIGlkPSJwYXRoNDMzNCIKICAgICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25l O3N0cm9rZTojZmZmZmZmO3N0cm9rZS13aWR0aDoxMDtzdHJva2Utb3BhY2l0eToxO2ZpbHRl cjp1cmwoI2ZpbHRlcikiIC8+CiAgICAgICAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICAg ICAgICByeT0iMzAuOTY4MTQ1IgogICAgICAgICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAg ICAgICAgICAgICAgICBjeT0iMTIuMzE4NDY1IgogICAgICAgICAgICAgICAgIGN4PSItMzE3 LjgzMDk2IgogICAgICAgICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDAuNDc2NzkyMywt MC4zMDg0NDc3LDAuMjk2NTAyNCwwLjQ1ODMyNzQsLTE3NS4zOTg0LC03LjA4MjMwNDUpIgog ICAgICAgICAgICAgICAgIGlkPSJwYXRoNDMzNiIKICAgICAgICAgICAgICAgICBzdHlsZT0i ZmlsbDpub25lO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxMDtzdHJva2Utb3BhY2l0 eToxO2ZpbHRlcjp1cmwoI2ZpbHRlcikiIC8+CiAgICAgICAgICAgIDwvZz4KICAgICAgICAg IDwvZz4KICAgICAgICA8L2c+CiAgICAgICAgPGcKICAgICAgICAgICB0cmFuc2Zvcm09Im1h dHJpeCgwLjUzNzMzMjIsMCwwLDAuNTIxNDU4NiwtMTUzLjk0MjkyLDMxLjE1MDc2NSkiCiAg ICAgICAgICAgaWQ9Imc0MzM4Ij4KICAgICAgICAgIDxlbGxpcHNlCiAgICAgICAgICAgICBy eT0iMzAuOTY4MTQ1IgogICAgICAgICAgICAgcng9IjIxLjE4ODczIgogICAgICAgICAgICAg Y3k9IjEyLjMxODQ2NSIKICAgICAgICAgICAgIGN4PSItMzE3LjgzMDk2IgogICAgICAgICAg ICAgdHJhbnNmb3JtPSJtYXRyaXgoMC40NzY3OTIzLC0wLjMwODQ0NzcsMC4yOTY1MDI0LDAu NDU4MzI3NCwtMTc1LjM5ODQsLTcuMDgyMzA0NSkiCiAgICAgICAgICAgICBpZD0icGF0aDQz NDAiCiAgICAgICAgICAgICBzdHlsZT0iZmlsbDojOGE4YThhO2ZpbGwtb3BhY2l0eToxO2Zp bGwtcnVsZTpub256ZXJvO3N0cm9rZTpub25lO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1taXRl cmxpbWl0OjQ7c3Ryb2tlLWRhc2hhcnJheTpub25lO3N0cm9rZS1vcGFjaXR5OjEiIC8+CiAg ICAgICAgICA8ZwogICAgICAgICAgICAgaWQ9Imc0MzQyIgogICAgICAgICAgICAgY2xpcC1w YXRoPSJ1cmwoI2NsaXBQYXRoKSI+CiAgICAgICAgICAgIDxnCiAgICAgICAgICAgICAgIGlk PSJnNDM0NCI+CiAgICAgICAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICAgICAgICByeT0i MzAuOTY4MTQ1IgogICAgICAgICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAgICAgICAgICAg ICAgICBjeT0iMTIuMzE4NDY1IgogICAgICAgICAgICAgICAgIGN4PSItMzE3LjgzMDk2Igog ICAgICAgICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDAuNDc2NzkyMywtMC4zMDg0NDc3 LDAuMjk2NTAyNCwwLjQ1ODMyNzQsLTE3NS4zOTg0LC03LjA4MjMwNDUpIgogICAgICAgICAg ICAgICAgIGlkPSJwYXRoNDM0NiIKICAgICAgICAgICAgICAgICBzdHlsZT0iZmlsbDpub25l O3N0cm9rZTojZmZmZmZmO3N0cm9rZS13aWR0aDoxMDtzdHJva2Utb3BhY2l0eToxO2ZpbHRl cjp1cmwoI2ZpbHRlcikiIC8+CiAgICAgICAgICAgICAgPGVsbGlwc2UKICAgICAgICAgICAg ICAgICByeT0iMzAuOTY4MTQ1IgogICAgICAgICAgICAgICAgIHJ4PSIyMS4xODg3MyIKICAg ICAgICAgICAgICAgICBjeT0iMTIuMzE4NDY1IgogICAgICAgICAgICAgICAgIGN4PSItMzE3 LjgzMDk2IgogICAgICAgICAgICAgICAgIHRyYW5zZm9ybT0ibWF0cml4KDAuNDc2NzkyMywt MC4zMDg0NDc3LDAuMjk2NTAyNCwwLjQ1ODMyNzQsLTE3NS4zOTg0LC03LjA4MjMwNDUpIgog ICAgICAgICAgICAgICAgIGlkPSJwYXRoNDM0OCIKICAgICAgICAgICAgICAgICBzdHlsZT0i ZmlsbDpub25lO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDoxMDtzdHJva2Utb3BhY2l0 eToxO2ZpbHRlcjp1cmwoI2ZpbHRlcikiIC8+CiAgICAgICAgICAgIDwvZz4KICAgICAgICAg IDwvZz4KICAgICAgICA8L2c+CiAgICAgIDwvZz4KICAgICAgPGcKICAgICAgICAgdHJhbnNm b3JtPSJtYXRyaXgoMC4wMjg4NDk4OCwwLDAsMC4wMzE2ODIzOSwyNC41MTI1MjcsMjMwLjQ1 MjEyKSIKICAgICAgICAgaWQ9Imc0OTc1Ij4KICAgICAgICA8dGl0bGUKICAgICAgICAgICBp ZD0idGl0bGU0ODI0Ij5MYXllciAxPC90aXRsZT4KICAgICAgICA8c3dpdGNoCiAgICAgICAg ICAgaWQ9InN3aXRjaDQ5NzMiPgogICAgICAgICAgPGcKICAgICAgICAgICAgIGlkPSJnNDk3 MSI+CiAgICAgICAgICAgIDxnCiAgICAgICAgICAgICAgIHRyYW5zZm9ybT0icm90YXRlKC0x My4yOTUyLDM0NS44ODcsMjMyLjUzNSkiCiAgICAgICAgICAgICAgIGlkPSJMYXllcl8xIj4K ICAgICAgICAgICAgICA8ZwogICAgICAgICAgICAgICAgIGlkPSJnNDk2OCI+CiAgICAgICAg ICAgICAgICA8bGluZWFyR3JhZGllbnQKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VW5p dHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAgICAgICAgICAgICAgaWQ9IlhNTElEXzFfIgog ICAgICAgICAgICAgICAgICAgeDE9IjQ2NC41MjI4NiIKICAgICAgICAgICAgICAgICAgIHkx PSI5NzkuMzM5NDIiCiAgICAgICAgICAgICAgICAgICB4Mj0iNDY0LjUyMjg2IgogICAgICAg ICAgICAgICAgICAgeTI9Ijk3OS4zMzk0MiIKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50 VHJhbnNmb3JtPSJzY2FsZSgwLjc4NjUwNzQsMS4yNzE0NDM5KSI+CiAgICAgICAgICAgICAg ICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgICAg ICAgICAgICAgc3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAgICAgICAgICAgICAgICAgaWQ9 InN0b3A0ODI2IiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAg ICAgICBvZmZzZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiMwMDAw MDAiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDgyOCIgLz4KICAgICAgICAgICAg ICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAogICAgICAgICAg ICAgICAgICAgc3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNYTUxJRF8xXyk7 ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjA7c3Ryb2tl LWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRlcmxpbWl0OjIuNDE0MjAwMDciCiAgICAgICAg ICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAg ICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9IjIuNDE0MiIKICAgICAgICAgICAgICAgICAg IGQ9Im0gMjYyLjIzODE2LDIxNS4xMzk4OCBjIDIuMzI4MjUsMi41Mzg3OSA0LjM2MzQsMTEu ODE4NDYgNi4xODIxNiwxMC42MjkyNCAyLjAzNjEsLTEuMzQ4NTcgLTMuMTI4MDIsLTUuNzkw NyAtMi40NzMzOSwtOS45OTQ4IDMuODU1NzcsMi4yMjEwNiA4Ljg3Mjg5LDExLjE4NDAyIDEw LjgzNjg4LDkuNTE4NzIgMS44MTYwNCwtMS41MDg5MiAtOS4zMDkzOCwtNy4zNzgzMiAtNi42 MTc3LC0xOS45MTA5MSAxLjAxNzA5LC01LjM5NDMxIDIuMTA5OTgsLTQuNDQxMTUgNC4xNDYw OSwtNS4xNTYyNyAxLjUyNTY5LC0xLjM0ODU3IDMuNzgwODgsLTAuMzE2NzMgNS4wMTYyLDIu MTQxMzkgMS42MDA1OSwzLjA5MzU3IC0zLjE5ODMzLDUuMjM0OTUgLTEuMTYzMTgsNy41MzQ3 MSAzLjcwODgsLTQuNTIwODIgNy4xMjcyLC00LjM2MjQ3IDYuNDcyNTQsLTEzLjI0Nzc0IC0w LjE0NjA2LC0zLjMyOTYgNC44NzM4NCwtMi40NTgxMSA3LjYzNTc0LC0yLjA2MTY5IDguMzYx NjMsMC45NTMxNiAxMS43ODA5Nyw5Ljc1Njc0IDE5LjQ4Nzk4LDkuMjc5NjggMTMuMzA3NTUs MjMuNjQwOTEgMTEuODUzMTEsNjEuMTYzMDEgMTUuMTI1NDUsNTcuMzU0MzIgNC43MjY3OCwt NS42MzMzMyAyLjEwOTEsMC4zMTY3NCAxLjMxMDE1LDEuMjY3OTIgLTMuNzgzNiw0LjUyMjc5 IDYuMjU0MzcsMjEuNDk4NTMgNi44MzUwNiwyNi44MTQxNCAwLDkuOTk0ODIgMi44Mzc3Mywx OS4xOTY3OCA2LjE4MjE5LDI5LjE5MTU5IC01LjAxODk5LDUuNDc1MDEgLTEzLjUyNjY4LDIu MjIyMDggLTMwLjU0Mzk1LDguMTcxMTUgLTguNTA2OCwyLjM3OTQ1IC01LjE2MTQxLC0wLjk1 MjE1IC03Ljg1MzAzLDguODg0MjQgLTEuMDE4OTUsMi42OTcxOCAtMC40MzczNCwzLjMzMjYx IDEuMDE2MTgsMy44MDg2OSAwLjU4MjUyLDIuNTM3ODEgMC44NzU1OCwxLjc0NTAyIDMuNTY1 NDMsMS40MjgyOCA1LjA4OTI2LDIuMDYyNjkgOC41Nzg5NSwtMC44NzM1IDkuNTI0ODcsLTIu NTM4NzkgMS42MDA1MiwwLjYzNTQ0IDIuOTgxOTYsMC40NzYwOCA0LjA3MjExLC0wLjYzNTQz IDUuNjczNjgsMy44ODczMyAxMi43MjU5NSwxLjAzMTg2IDE4LjU0Mzg5LC0yLjYxNzQ2IDYu NjE4NjIsLTIuNjk3MTggNS4wMTg5OCwtMS45MDUzNyAxMC42OTA3OSwtMC43MTQxNSAyLjU0 NTUzLDAuNTU0NzggMi45ODI4OCwxLjE4OTIxIDYuNDAwMzksNC44Mzg1MyAtOS45NjMxLDcu MjE4OTcgLTIzLjcwODAxLDMuODA4NjkgLTM4LjYxNDMyLDUuMjM1OTQgLTIuNDczMzksMC4y MzcwNiAtNC4yOTIxNywwLjU1NDc3IC01LjM4MzI3LDQuMjgzNzUgLTMuODUzMDIsLTAuMDgw NyAtMy44NTMwMiw4LjE3MDE2IC03LjM0NDQ4LDEyLjI5NTU2IDAuNzI4NTgsMS45ODMwMyAz LjA1NDExLDEuOTgzMDMgNS41OTk2NywxLjQyNjI3IC0wLjk0NTAxLDMuODA4NjkgNS4wMTgw NCwwLjU1Njc2IDcuNDg5NjYsMC41NTY3NiAtMC4zNjE1OCw0LjkxNzI0IDEuNzQ2NjQsMi41 Mzc3OCAzLjQ5MTQ4LDMuMzMxNjEgNi43NjI4OCwtMC4zMTc3MiAtMi45ODI5NCwtNi4xMDc0 MiA5LjQ1MzYyLC0zLjcyOCAyLjk4MDE2LDAuMzk2MzkgNC45NDMyLC0wLjMxNjcxIDkuNTI1 NzUsLTMuNjQ4MzEgMTAuNzYyLC00LjUyMjgzIDIxLjA4OTQyLC0xLjUwNzk3IDMxLjU2MDE1 LC00LjI4MzgyIDUuNDU0NTMsLTEuNTA3OSAyLjc2MzgsLTEwLjE1NDE0IDguMzYyNTUsLTgu MjUwNzkgMTEuNTYzNjksNC4xMjU0IDkuODE3MDIsLTEuNTg2NjEgMTEuMDU0MiwtNS4zMTU2 MSAyNC4zNjE3NiwtNS4wNzU2IDc4LjYxMDk5LDIwLjM4OCA1NS40ODU0OCw0OS40MjIyMSAt MTIuODcyMDUsMTYuNTc5MzEgLTYzLjI2NjM5LC02LjY2MjIgLTk0LjMxOCwtNi4xODcxNCAt NTAuNjg2NTgsMS41MDY5NiAtNzUuNjI5ODgsMzQuNzQ1MjcgLTc2LjM1NjcyLDQ1LjYxMzU5 IDIuMzI2NDUsLTAuMjM4MDQgMzYuNzI0MzQsLTUzLjIyNzk0IDExMi43ODg4MiwtMjUuMTQ1 ODcgNzUuOTIwMjYsMjYuODkwODMgMTAyLjg5OTY5LC0yMS40MTk4NyA1OC42MTM1NiwtNzAu MTI1OTUgLTAuODczNzgsLTIuNjk4MTggNS42NzE4MSwxLjUwNjkzIDMuMTI2MjUsLTEuNzQ1 IC0xNC4wMzUyMiwtNS4zMTU2NCAtNC41ODE2NCwtMTEuODk5MTMgLTEwLjI1MzM5LC0xNy4y OTQ0MyA2LjM5OTQ1LC01Ni40ODA4NyA1LjM4MTQ0LC0xMDMuNjAwMzYgLTI1LjM3ODkxLC0x NDkuNjkgLTYuMDM2MSwtOS4yMDI5OSAtMjQuOTQzMzUsLTI1LjYyMjk2IC0yMC4yMTY1NSwt MjcuNjg2NjYgNi4wMzUyMiwtMi42MTc0NyAtOC43OTg5OCwtMC4zMTY3MyAtMTEuNDE2NjUs LTguNzI1ODkgLTIuMzI3MzQsLTcuMjE4OTcgLTEzLjY3MTg4LC0xNy43Njk1NSAtMjYuOTgx MjcsLTIxLjQxNzg3IC04LjQzNDY2LC0xMC44NjgyOTggLTE3LjIzNDU1LC0yNy41MjgyOTQg LTE4LjEwNjUzLC0zMi4xMjg3OTYgLTAuOTQzMTUsLTQuNjAxNDk0IDYuMTA3MzYsMi44NTY1 MjIgLTMuODUzODksLTYuMjY1OCAxNC4zMjU1NywtMjQuMDM3MzI3IC05Ljg5MTAyLC0yNy4y MDk1NjggLTE5LjA1MjQ5LC0yMS44OTQ5MzkgMC4zNjI0OSwtMi41Mzg3ODggLTEuMzgyMzIs LTYuOTc5OTI3IC0xMi41MDY3NywtMS45ODMwMjUgLTMuNTY0NTUsLTEuMTExNTM0IC0yMi4x MDc0NSwtOC41Njg1NDIgLTUxLjkyMzcyLC03Ljg1MzQxNiAwLjE0NzAyLDAgLTEuNDU1Mzgs MC41NTU3NjMgMC4wNzMsLTIuMDYxNzE0IC0xLjA5MDE4LDEuMTEwNTQyIC0xLjM4MTQyLDAu NjMzNDUzIC0xLjIzNjI1LDIuMDYxNzE0IC0xLjUyODQ0LDAgLTEuMzA4NDEsMCAtMi42MTc2 OCwwLjE1OTM2MyAtMS43NDU3NCwtMi45MzQxOTYgLTEuMzgwNTUsLTIuMTQxMzggLTQuMDcx MjcsLTIuOTM0MTk2IDEuODg5OTcsMC43MTUxMjYgMi42MTY3NiwxLjQyODI1MyAyLjc2Mzc4 LDIuNzc2ODMzIC0yLjc2Mzc4LDAgLTYuNDAxMzUsMC4xNTkzNjMgLTkuNjczNzIsMC43MTQx MzQgLTQuMTQ1MTYsMC4zOTY0IC0yLjgzNDk1LDkuMDQzNjI1IDAuNDM3MzYsMTEuODk5MTM5 IDAsMCAwLDUuODcwMzkyIC0wLjgwMDY5LDQuOTE4MjIxIGwgLTUuOTYyMTQsLTIuNjE3NDcg YyAwLDAgNi4wMzYwNywyLjg1NjUwNiA2LjE4MTI2LDMuNTY5NjQxIDAuMTQ1MiwwLjcxNDEy NyAwLjUxMDM3LDIuMjIxMDYyIDAuNjU0NjYsMi44NTU1MTUgLTEuMTYzMjEsMC4yMzgwNDUg LTExLjk5OTIxLDEuODI0NjYxIC0xMS45OTkyMSwxLjgyNDY2MSBsIDExLjk5OTIxLC0xLjAz MTgzNyBjIDEuNzQ2NjMsMy42NDkzMjMgMi45ODE5Niw0LjA0NjcxMSA0LjcyNjc5LDYuNTA0 ODMzIDAsMi43NzY4NCAtMS42NzE3NSw2LjE4NzExMSAxLjgxODc3LDYuOTAyMjM3IDYuMzk5 NDgsNC4zNjI0NSAtNC41MDg1OSwtMS4xOTAyMDggLTAuMjkxMjMsOC41NjY1NDQgMy42MzU3 Miw4LjMyOTQ5OCA3LjEyNjI1LDEuNTg1NjI1IDkuNzQzOTYsMy40ODg5ODMgMTIuNTgwOCw5 LjQ0MTAxNyAxNi42NTI5NCwxNS40Njg3ODUgMjAuNzk4MTEsMjMuNTYwMjM1IDEwLjQ3MTcx LDUuNDc0OTcgMTIuMzYyNjEsMzcuNjgxNDYgMTcuNTI1ODUsNDQuNTA0MDEgLTkuMzgxNSw5 LjM2MTM2IC0zMy45NjA1NCwxNy43Njk1NSAtNDYuMzk1MjMsMjIuMjkwMzYgLTUuMDE3MTUs Mi42OTcxNSAtMTEuNzA3OTMsNy42OTQwNSAtMTQuOTgyMDksMTQuNDM3OTMgLTEuOTYyMTQs NC4wNDU3MyA0LjI5MzExLC0xLjE4OTIzIDUuMDkyMDMsLTIuMDYzNjkgLTAuMTQ1MTcsMy4z MzM1OSAtMy4yMDAyMSwxMi44NTIyOSAtMC4xNDUxNywxNC45OTQ2OSAwLjc5ODg1LC0wLjk1 MjE4IDEuODE2OTQsLTEzLjg4MzE3IDYuODM1LC0xMy4xNjgwNSAxLjE2MzIzLDUuNjMxMzUg LTAuMzYzNCwxMi4zNzMyNSAyLjMyNjQ1LDEyLjg1MDMxIDEuOTYzOTEsMC4zMTc3NCAtMC45 NDUwMiwtMTEuMDI1NjUgNC43Mjk1NCwtMTQuMTIwMjEgMy4yNzIzMiwxLjk4MjA1IDYuOTA2 MiwtNC45MTkyIDkuMzc5NjUsLTQuOTE5MiA1Ljg5MDkzLC0xLjgyNDY4IDEzLjMwNzU2LDQu MTI2NCAxOC4yNTI2Myw0LjEyNjQgMCwxLjgyNDY2IC00LjY1NDcsMy4wOTI1NiAtNy41NjI3 NSw3LjEzODI4IC02LjQ3MzQyLDkuMDQzNjQgLTEyLjcyNTk4LDIyLjIxMjY4IC04LjUwOTU1 LDI5Ljk4ODQgMC44NzI4OSwxLjgyMjY4IDAuODcyODksLTcuMjk5NjUgMS42NzE4MSwtOS45 OTU4IHoiCiAgICAgICAgICAgICAgICAgICBpZD0icGF0aDQ4MzEiIC8+CiAgICAgICAgICAg ICAgICA8bGluZWFyR3JhZGllbnQKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VW5pdHM9 InVzZXJTcGFjZU9uVXNlIgogICAgICAgICAgICAgICAgICAgaWQ9IlhNTElEXzJfIgogICAg ICAgICAgICAgICAgICAgeDE9IjM1NS4wNjgwNSIKICAgICAgICAgICAgICAgICAgIHkxPSI3 ODcuMDExNDEiCiAgICAgICAgICAgICAgICAgICB4Mj0iMzU1LjA2ODA1IgogICAgICAgICAg ICAgICAgICAgeTI9Ijc4Ny4wMTE0MSIKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VHJh bnNmb3JtPSJzY2FsZSgwLjk0MjI3OTk0LDEuMDYxMjU1NykiPgogICAgICAgICAgICAgICAg ICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgICAgICAg ICAgICAgIHN0b3AtY29sb3I9IiM2MTVBNDQiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJz dG9wNDgzMyIgLz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAg ICAgb2Zmc2V0PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjQkZCRkJG IgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4MzUiIC8+CiAgICAgICAgICAgICAg ICA8L2xpbmVhckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAg ICAgICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURfMl8pO2Zp bGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDowO3N0cm9rZS1s aW5lam9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAgICAgICAg ICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAg ICAgICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAgICAgICAgICAgICBk PSJtIDI0Mi4zODY4NiwzOS4wMzIxNDYgYyAzLjM0NTM4LDEuNzQ0OTggNy4yNzMyNSwxNS40 Njg3ODggLTMuODUzOTgsMTMuNDA1MDkgLTAuNTExMjksMS42NjcyOSAtMS4yMzcxNSwxLjgy NTY1MyAtMC43OTk4LDIuODU2NTA2IDIuMzk5NDQsMC44NzM0ODkgMy4xMjYyLDAuODczNDg5 IDUuNzQzODgsMS41MDY5NDMgLTAuMzYzMzYsMC43MTMxMzUgLTAuMTQ2MDQsMC41NTU3NjMg LTAuNTgxNTksMS4wMzA4NTMgLTIuMjU2MSwtMC40NzUwOSAtMy45MjYwNywtMS4yNjc4OTkg LTUuMzA4NDEsLTEuMjY3ODk5IDAsMC45NTExNzIgMC4yOTAzNiwxLjUwNTk0MyAwLjU3OTgs Mi4yOTk3NDQgMi4xODQ4OSwtMC4xNTkzNTUgMS42MDIzOSwtMC4xNTkzNTUgMy40MTkzMywt MC4xNTkzNTUgMS4wMTgwMywwLjk1MzE3MSAtMC4wNzMxLC0wLjc5MjgwOSAwLjI5MTI3LDAu ODczNDg5IC0xLjM4MjM3LDAuMzE3NzE5IC0yLjEwOTE2LDAuMzk2NDA4IC0zLjcxMDYsMC4z OTY0MDggMi4xODQ4OSw4LjQ4ODg2NSAxOS44NTMxNCw5LjUxODcxOSAxOS40MTg1NCwyMC41 NDQzNzYgLTAuMTQ2MDksMy4yNTM5MDYgLTUuODE3MDEsLTQuNTIwODIxIC0xMC44MzU5Nywt NC41MjA4MjEgLTEuNTk4NzMsMCAtMy42MzQ4LDIuMTQxMzg4IC0yLjc2MTkzLDQuMjgyNzc2 IDQuMDcxMjUsMTAuNjMxMjQxIDMuODUzOTUsMC4yMzcwNDUgMTAuNjg4OTMsNC45OTg4OTQg MTMuNTI3NjUsOS4yMDI5ODggMTcuNTk5NzYsMTkuMjc2NDggMjAuMDcxMzgsMjIuNTI4NCAz LjE5ODM5LDAgNC41MDg2MSwtMC41NTQ3NyA3LjQ5MDYsNS4zOTQzMSAtMy44NTQ4NiwtNS4w NzY1OSAtNC41MDg2LC00LjM2MjQ3IC03LjEyNzIsLTQuMTI2NDEgMTEuNTYyNzIsOS41MjA3 MSAxMi41Nzk4NywzNS4zODA3MSAxNi40MzQ3Myw0MS4zMzA3OCAxNi41MDg3MywtMjIuOTI0 NzkgMTguNDcxNzEsLTMzLjU1NDA1IDE1LjkyNjE3LC01OC45Mzc5NjEgNS4xNjE0MSwyMS41 NzcyMTEgLTEuNTk5NjcsMzguMDc2ODUxIC0xMC43NjI5Myw1My40NjY5NjEgMy4zNDYzMSwt My41Njk2MyA5LjgxNTIxLC0xNC43NTU2NiAxMi43OTgwOSwtMjIuMjkxMzUgMS45NjM5OSwt NC45MTgyMiAzLjIwMiwtMjQuNTEzNDEgOC4wMDEwMSwtMjAuOTQyNzggMy42MzU3MSwyLjg1 NTUyIC05LjUyODU0LC0xNy4zNzMxMjEgLTQuNDM3NDEsLTE0Ljc1NTY0NCA3LjcwOTcyLDQu MjA1MDg2IC0xMC45MDYyNSwtMTguNDAzOTkyIDAuNjU0NjYsLTI5LjM1MDk2NCAyLjkxMDc3 LC05LjgzNTQ0MiAzMS40ODg5MywtMTMuNTY0NDQ1IDE4LjI1NDQzLDE0Ljk5NDcwMSAxNy4z MDY3LC0zMy40NzczNjcgLTE3LjIzNTUsLTI2LjAyMDM1OSAtMjAuNTc5OTMsLTE5LjY3Mzg4 NSAtMS42NzM2MSwtMS44MjU2NTMgOS42NzAwNSwtOC41NjY1NDQgLTYuMTA5MTksLTMuODA2 Njg2IC0xNy40NTQ1OSwtMTAuOTQ3OTY4IC00MC40MzQ5LC0xMS4wMjc2NDkgLTYyLjkwMzg4 LC0xMC4wNzY0NzYgeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDgzOCIgLz4KICAg ICAgICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgICAgICAgICAgICAgZ3JhZGll bnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAgICAgICAgICAgICBpZD0iWE1MSURf M18iCiAgICAgICAgICAgICAgICAgICB4MT0iMzMxLjc1MTAxIgogICAgICAgICAgICAgICAg ICAgeTE9IjY0Mi4zNzE3IgogICAgICAgICAgICAgICAgICAgeDI9IjMzMS43NTEwMSIKICAg ICAgICAgICAgICAgICAgIHkyPSI2NDIuMzcxNyIKICAgICAgICAgICAgICAgICAgIGdyYWRp ZW50VHJhbnNmb3JtPSJzY2FsZSgwLjkzMjkxODU5LDEuMDcxOTA0OSkiPgogICAgICAgICAg ICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAg ICAgICAgICAgICAgIHN0b3AtY29sb3I9IiNBNjlGNzciCiAgICAgICAgICAgICAgICAgICAg IGlkPSJzdG9wNDg0MCIgLz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAg ICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIj Q0FBNDhDIgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4NDIiIC8+CiAgICAgICAg ICAgICAgICA8L2xpbmVhckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAg ICAgICAgICAgICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURf M18pO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDowO3N0 cm9rZS1saW5lam9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAg ICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAg ICAgICAgICAgICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAgICAgICAg ICAgICBkPSJtIDI0MC4yMDQ2NywzOS4yNzExOTEgYyAtOS4yMzUzOSwtMC43OTI4MTYgLTMu NjM1NzUsMTMuMDA5Njc0IC0yLjc2Mzc3LDcuNTM1NjkgMS42MDE0NCwtMS44MjU2NjEgMy4y NzIzNCw0LjkxODIyMSA2LjE4MjIxLDMuNzI4MDA0IDIuMTgxMjMsLTAuODczNDg5IDEuOTYy OTksLTEwLjg2NzI5NCAtMy40MTg0NCwtMTEuMjYzNjk0IHoiCiAgICAgICAgICAgICAgICAg ICBpZD0icGF0aDQ4NDUiIC8+CiAgICAgICAgICAgICAgICA8bGluZWFyR3JhZGllbnQKICAg ICAgICAgICAgICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAg ICAgICAgICAgICAgaWQ9IlhNTElEXzRfIgogICAgICAgICAgICAgICAgICAgeDE9IjIzOC4w MTI1MyIKICAgICAgICAgICAgICAgICAgIHkxPSI5NDAuMDMzMiIKICAgICAgICAgICAgICAg ICAgIHgyPSIyMzguMDEyNTMiCiAgICAgICAgICAgICAgICAgICB5Mj0iOTQwLjAzMzIiCiAg ICAgICAgICAgICAgICAgICBncmFkaWVudFRyYW5zZm9ybT0ic2NhbGUoMS4zMjcxNDkzLDAu NzUzNDk0NzMpIj4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAg ICAgb2Zmc2V0PSIwIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjMDAwMDAw IgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4NDciIC8+CiAgICAgICAgICAgICAg ICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAgICAg ICAgICAgICAgc3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAgICAgICAgICAgICAgICAgaWQ9 InN0b3A0ODQ5IiAvPgogICAgICAgICAgICAgICAgPC9saW5lYXJHcmFkaWVudD4KICAgICAg ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBzdHlsZT0iY2xpcC1ydWxlOmV2 ZW5vZGQ7ZmlsbDp1cmwoI1hNTElEXzRfKTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAw MDAwMDtzdHJva2Utd2lkdGg6MDtzdHJva2UtbGluZWpvaW46YmV2ZWw7c3Ryb2tlLW1pdGVy bGltaXQ6Mi40MTQyMDAwNyIKICAgICAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rv ci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgICAgICBzdHJva2UtbWl0ZXJsaW1pdD0i Mi40MTQyIgogICAgICAgICAgICAgICAgICAgZD0ibSAyNTcuOTQ3NzUsNTYuMDA4ODY5IGMg LTQuNjU0NjcsMC45NTMxNzEgLTYuNTQ0NjQsMC40NzUwOSAtMTMuMDE2MjYsOC4wOTI0NTcg MC42NTQ2MSwwIDUuOTYzMDQsLTcuNTM2Njg2IDE0LjI1MzQ1LC03LjEzOTI4NiAtMS4zMDky NywtMC41NTY3NjMgLTAuODcyODcsLTAuNjM2NDQ0IC0xLjIzNzE5LC0wLjk1MzE3MSB6Igog ICAgICAgICAgICAgICAgICAgaWQ9InBhdGg0ODUyIiAvPgogICAgICAgICAgICAgICAgPGxp bmVhckdyYWRpZW50CiAgICAgICAgICAgICAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3Bh Y2VPblVzZSIKICAgICAgICAgICAgICAgICAgIGlkPSJYTUxJRF81XyIKICAgICAgICAgICAg ICAgICAgIHgxPSIyMzUuMDk4NjYiCiAgICAgICAgICAgICAgICAgICB5MT0iMTAxNi41MTM2 IgogICAgICAgICAgICAgICAgICAgeDI9IjIzNS4wOTg2NiIKICAgICAgICAgICAgICAgICAg IHkyPSIxMDE2LjUxMzYiCiAgICAgICAgICAgICAgICAgICBncmFkaWVudFRyYW5zZm9ybT0i c2NhbGUoMS40MjEyMjE1LDAuNzAzNjIwMDgpIj4KICAgICAgICAgICAgICAgICAgPHN0b3AK ICAgICAgICAgICAgICAgICAgICAgb2Zmc2V0PSIwIgogICAgICAgICAgICAgICAgICAgICBz dG9wLWNvbG9yPSIjMDAwMDAwIgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4NTQi IC8+CiAgICAgICAgICAgICAgICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNl dD0iMSIKICAgICAgICAgICAgICAgICAgICAgc3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAg ICAgICAgICAgICAgICAgaWQ9InN0b3A0ODU2IiAvPgogICAgICAgICAgICAgICAgPC9saW5l YXJHcmFkaWVudD4KICAgICAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBz dHlsZT0iY2xpcC1ydWxlOmV2ZW5vZGQ7ZmlsbDp1cmwoI1hNTElEXzVfKTtmaWxsLXJ1bGU6 ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MDtzdHJva2UtbGluZWpvaW46 YmV2ZWw7c3Ryb2tlLW1pdGVybGltaXQ6Mi40MTQyMDAwNyIKICAgICAgICAgICAgICAgICAg IGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgICAgICBz dHJva2UtbWl0ZXJsaW1pdD0iMi40MTQyIgogICAgICAgICAgICAgICAgICAgZD0ibSAyNzgu ODkyMDYsNTIuNTE3OTEgYyAtMi4yNTQzMywwLjA3OTY4IC0yLjU0NTYyLC0yLjg1NjUxNCAt NS4zODI0MiwtMC44NzE0OSA1LjY3MjcsMCA1Ljk2NDkxLDguMzI5NDk4IDEzLjE2MzMsNC4w NDU3MjMgNS4zODA1MywtMC4zOTY0MDggMTMuMzA2NjQsNi43NDE4OSAxMi4xNDQzOCw1LjU1 NDY2NSAtNC4yOTEzMiwtNC42ODExNzUgLTMuNzgxODYsLTkuNTIwNzE0IC0zLjQ5MTQ4LC00 LjY4MTE3NSAwLjA3MjEsMS45ODMwMjUgLTguMjE2NDMsLTEuNzQ0OTggLTguMjE2NDMsLTEu NzQ0OTggMy4wNTUwMiwtMy40MTMyNzcgLTUuNTk5NjcsLTEwLjMxNTUxNCAtOC4yMTczNSwt Mi4zMDI3NDIgeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDg1OSIgLz4KICAgICAg ICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgICAgICAgICAgICAgZ3JhZGllbnRV bml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAgICAgICAgICAgICBpZD0iWE1MSURfNl8i CiAgICAgICAgICAgICAgICAgICB4MT0iMzE1LjE3MDE3IgogICAgICAgICAgICAgICAgICAg eTE9IjczMS45MTc0MiIKICAgICAgICAgICAgICAgICAgIHgyPSIzMTUuMTcwMTciCiAgICAg ICAgICAgICAgICAgICB5Mj0iNzMxLjkxNzQyIgogICAgICAgICAgICAgICAgICAgZ3JhZGll bnRUcmFuc2Zvcm09InNjYWxlKDEuMDU3ODM3OSwwLjk0NTMyNDM5KSI+CiAgICAgICAgICAg ICAgICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAg ICAgICAgICAgICAgc3RvcC1jb2xvcj0iI0ZGRkZGRiIKICAgICAgICAgICAgICAgICAgICAg aWQ9InN0b3A0ODYxIiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAg ICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiNG RkZGRkYiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDg2MyIgLz4KICAgICAgICAg ICAgICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAogICAgICAg ICAgICAgICAgICAgc3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNYTUxJRF82 Xyk7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRoOjA7c3Ry b2tlLWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRlcmxpbWl0OjIuNDE0MjAwMDciCiAgICAg ICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgogICAgICAg ICAgICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9IjIuNDE0MiIKICAgICAgICAgICAgICAg ICAgIGQ9Im0gMjg1Ljg3MjIyLDUxLjk2MzE0NiBjIC0wLjIxNjM3LC0wLjc5MjgxNiAtMi4x MDkxLDAuMDc5NjcgLTEuNzQzMDEsMC43OTI4MDkgMC41MDc2OSwxLjExMDUzNSAyLjU0NDYy LDAuNzkyODA5IDEuNzQzMDEsLTAuNzkyODA5IHoiCiAgICAgICAgICAgICAgICAgICBpZD0i cGF0aDQ4NjYiIC8+CiAgICAgICAgICAgICAgICA8bGluZWFyR3JhZGllbnQKICAgICAgICAg ICAgICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAgICAgICAg ICAgICAgaWQ9IlhNTElEXzdfIgogICAgICAgICAgICAgICAgICAgeDE9IjQ0Ni4zNDk3OSIK ICAgICAgICAgICAgICAgICAgIHkxPSI2NDIuNzQ3MTMiCiAgICAgICAgICAgICAgICAgICB4 Mj0iNDQ2LjM0OTc5IgogICAgICAgICAgICAgICAgICAgeTI9IjY0Mi43NDcxMyIKICAgICAg ICAgICAgICAgICAgIGdyYWRpZW50VHJhbnNmb3JtPSJzY2FsZSgwLjgwMzIxMjY4LDEuMjQ1 MDAwMykiPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBv ZmZzZXQ9IjAiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiM2MTVBNDQiCiAg ICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDg2OCIgLz4KICAgICAgICAgICAgICAgICAg PHN0b3AKICAgICAgICAgICAgICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAgICAgICAgICAg ICAgICBzdG9wLWNvbG9yPSIjQkZCRkJGIgogICAgICAgICAgICAgICAgICAgICBpZD0ic3Rv cDQ4NzAiIC8+CiAgICAgICAgICAgICAgICA8L2xpbmVhckdyYWRpZW50PgogICAgICAgICAg ICAgICAgPHBhdGgKICAgICAgICAgICAgICAgICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9k ZDtmaWxsOnVybCgjWE1MSURfN18pO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAw O3N0cm9rZS13aWR0aDowO3N0cm9rZS1saW5lam9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1p dDoyLjQxNDIwMDA3IgogICAgICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1 cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQx NDIiCiAgICAgICAgICAgICAgICAgICBkPSJtIDMwOC43ODA0LDEyNi42ODg2MiBjIDEwLjYx NjgyLC0yMC44NjIxIDM0LjgzMDY4LC0xMC41NTA1NyAzOC45NzY3NywtOC43MjU5MSAtMC43 OTg4OSwtMS44MjQ2NiAtNy4wNTMyMiwtOS41MTg3MiAtMTkuODUzMTIsLTcuNDU2MDEgNy43 ODA4OSwtMy44MDg2OSAyMS4wODg1LC0zLjg4NzM3IDI3Ljc4MDE1LC0yLjA2MjcxIC01LjA4 OTI5LC05LjA0MzYzIC0yMi44MzQyNiwtMzMuMjM4MzI0IC0xOC45Nzk0LC0zMy4yMzgzMjQg NC40MzQ2OSwwIC00LjI5MTI2LC01LjU1MjY2NiAtMy44NTQ4NiwtMi45MzUxODggMS4zMDg0 Miw3LjA2MDYgLTYuMjUzMzgsMi4yOTk3NDQgLTguOTQ1MDMsMi42MTc0NyAtMS42NzE3Niww LjE1OTM2MyAtMi42MTY3NiwxLjc0NDk4IC01LjUyNzU2LDAuMjM5MDM3IC0xLjUyNjU4LC0w Ljc5MzgwOCAtMC42NTQ2MywtMy42NDkzMyAxLjU5OTY0LC0zLjY0OTMzIDExLjcwNzk1LC0w LjE1OTM1NSAxMi4wMDEwNCwtNi4wMjk3MzkgMTMuMTYzMywtMTEuODIwNDU0IC04LjUwNzY5 LC0xLjUwNjk0MyAtMi4xMDk5NiwtNi43NDM4ODEgLTEwLjY4OTg1LC01LjQ3Mzk4NCAyLjE4 MjE2LDQuNDQyMTMxIDIuNjkwNzQsNy40NTYwMDkgMS4yMzYyNCwxMS42NjEwOTggLTAuOTQ0 MDYsLTIuMjk5NzU1IC0yLjEwOTEsLTguMjUwODEzIC00Ljk0NDA5LC04LjcyNTkwMyAtMi4x MDkxMSwxNC42NzM5ODUgLTQuMDAwMDcsMy43MjgwMDQgLTcuMzQ0NDksNy42OTQwNTcgLTUu MTY0MTgsNi40MjYxNDcgMTAuNjg4OTcsMzEuODEwMDY2IDQuMDAwMDMsMjQuNTEyMzk4IC02 LjE4MjIyLC02Ljc0Mzg2NiAxMC42MTY4MiwyMS41NzgyNDMgMS44ODk5OSwxMy4zMjc0MTMg LTMuODUzOTgsLTMuNDg5OTU4IC0zLjg1Mzk4LDE1LjMxMDQzIC04LjUwNzcyLDI0LjAzNjM0 IHoiCiAgICAgICAgICAgICAgICAgICBpZD0icGF0aDQ4NzMiIC8+CiAgICAgICAgICAgICAg ICA8bGluZWFyR3JhZGllbnQKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VW5pdHM9InVz ZXJTcGFjZU9uVXNlIgogICAgICAgICAgICAgICAgICAgaWQ9IlhNTElEXzhfIgogICAgICAg ICAgICAgICAgICAgeDE9IjM4OS42MjI4MyIKICAgICAgICAgICAgICAgICAgIHkxPSI1Nzcu Nzk1MjMiCiAgICAgICAgICAgICAgICAgICB4Mj0iMzg5LjYyMjgzIgogICAgICAgICAgICAg ICAgICAgeTI9IjU3Ny43OTUyMyIKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VHJhbnNm b3JtPSJzY2FsZSgwLjc5OTc1OTk2LDEuMjUwMzc1MikiPgogICAgICAgICAgICAgICAgICA8 c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgICAgICAgICAg ICAgIHN0b3AtY29sb3I9IiNGRkZGRkYiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9w NDg3NSIgLz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAgICAg b2Zmc2V0PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjRkZGRkZGIgog ICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4NzciIC8+CiAgICAgICAgICAgICAgICA8 L2xpbmVhckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAg ICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURfOF8pO2ZpbGwt cnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDowO3N0cm9rZS1saW5l am9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAgICAgICAgICAg ICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAg ICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAgICAgICAgICAgICBkPSJt IDI0Mi40NTk4Nyw2Ny4xMTMyMTMgYyAtMC4zNjUyMSwxLjU4NzYxNiAtMS4zMDkzLDYuOTgx OTI2IDEuMDE3MDksNC45MjAyMTIgMC45NDU5NCwtMC44NzM0ODIgLTAuNzI4NTUsMS40Mjgy NjEgMi4zMjczOCwxLjU4NjYxNyAwLjg3MTk2LC0wLjg3NDQ4MSAwLC00LjUyMTgxMiAtMy4z NDQ0NywtNi41MDY4MjggeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDg4MCIgLz4K ICAgICAgICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgICAgICAgICAgICAgZ3Jh ZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAgICAgICAgICAgICBpZD0iWE1M SURfOV8iCiAgICAgICAgICAgICAgICAgICB4MT0iNDc5LjE3Mzc3IgogICAgICAgICAgICAg ICAgICAgeTE9IjQ5Mi4yNDI3NyIKICAgICAgICAgICAgICAgICAgIHgyPSI0NzkuMTczNzci CiAgICAgICAgICAgICAgICAgICB5Mj0iNDkyLjI0Mjc3IgogICAgICAgICAgICAgICAgICAg Z3JhZGllbnRUcmFuc2Zvcm09InNjYWxlKDAuNjY2OTc4NzIsMS40OTkyOTgyKSI+CiAgICAg ICAgICAgICAgICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAg ICAgICAgICAgICAgICAgICAgc3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAgICAgICAgICAg ICAgICAgaWQ9InN0b3A0ODgyIiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAg ICAgICAgICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29s b3I9IiMwMDAwMDAiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDg4NCIgLz4KICAg ICAgICAgICAgICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAog ICAgICAgICAgICAgICAgICAgc3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNY TUxJRF85Xyk7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7c3Ryb2tlLXdpZHRo OjA7c3Ryb2tlLWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRlcmxpbWl0OjIuNDE0MjAwMDci CiAgICAgICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3VydmF0dXJlPSIwIgog ICAgICAgICAgICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9IjIuNDE0MiIKICAgICAgICAg ICAgICAgICAgIGQ9Im0gMjU2LjkzMTU1LDc1LjIwNTY2NiBjIDEuNjY5OTUsMS41ODU2MjUg NS4zODA1OCw5LjI4MTY3NyAxLjM4MDUyLDguNTY3NTU4IDUuMzgxNSwzLjAxMzg2MyAxLjQ1 NDQ3LC03LjEzOTMwNSAtMS4zODA1MiwtOC41Njc1NTggeiIKICAgICAgICAgICAgICAgICAg IGlkPSJwYXRoNDg4NyIgLz4KICAgICAgICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAg ICAgICAgICAgICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAg ICAgICAgICAgICBpZD0iWE1MSURfMTBfIgogICAgICAgICAgICAgICAgICAgeDE9IjM2OS4y MDk5IgogICAgICAgICAgICAgICAgICAgeTE9Ijk0My4zMjQzNCIKICAgICAgICAgICAgICAg ICAgIHgyPSIzNjkuMjA5OSIKICAgICAgICAgICAgICAgICAgIHkyPSI5NDMuMzI0MzQiCiAg ICAgICAgICAgICAgICAgICBncmFkaWVudFRyYW5zZm9ybT0ic2NhbGUoMC45NjE1NDk0Miwx LjAzOTk4ODEpIj4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAg ICAgb2Zmc2V0PSIwIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjNjE1QTQ0 IgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4ODkiIC8+CiAgICAgICAgICAgICAg ICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAgICAg ICAgICAgICAgc3RvcC1jb2xvcj0iI0JGQkZCRiIKICAgICAgICAgICAgICAgICAgICAgaWQ9 InN0b3A0ODkxIiAvPgogICAgICAgICAgICAgICAgPC9saW5lYXJHcmFkaWVudD4KICAgICAg ICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBzdHlsZT0iY2xpcC1ydWxlOmV2 ZW5vZGQ7ZmlsbDp1cmwoI1hNTElEXzEwXyk7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMw MDAwMDA7c3Ryb2tlLXdpZHRoOjA7c3Ryb2tlLWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRl cmxpbWl0OjIuNDE0MjAwMDciCiAgICAgICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0 b3ItY3VydmF0dXJlPSIwIgogICAgICAgICAgICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9 IjIuNDE0MiIKICAgICAgICAgICAgICAgICAgIGQ9Im0gMzM0LjU5NjU5LDEwOC45MTkwOCBj IDcuOTk5MTcsMi4zMDA3NSAxNy43NDEzMyw4LjMyOTUgMTYuNzI1MSwxNC4xOTk5IC00MC41 NzczNCwtMzAuNjE5ODY1IC01MS41NTk0MiwzMS4wMTcyNSAtNjEuNTIyNDcsMzMuMzE3OTkg MTcuNjcxODUsLTMuMzMwNiAxOS41NjI3OCwtMTcuNzY5NTQgMjIuMDMzNDUsLTEzLjI0Njcx IC0wLjc5ODg5LDkuOTE3MSAtMjEuNTIzMSwxMi4yOTU1MyAtMjkuMDEzNywxOC4yNDQ2MiA0 LjM2MjU1LC0yLjE0MTM5IDE4LjYxNjkxLC0zLjcyODAyIDIzLjU2MSwwLjc5MjggLTQuOTQ0 MDksLTIuOTM1MTggLTI2LjE3NzczLC0xLjE4OTIxIC0zMi4yODY5NSw1Ljc5MDcyIDAuODAw NzgsMCA2LjkwODExLC0wLjg3MTQ5IDcuNzgwMDMsMCAtNC42NTQ2NCwxLjI2OTg5IC0xOC4z MjM3NiwtMC42MzM0NSAtMjAuNzI1MSw1LjE1NzI2IC0xLjA5MDE1LDIuNjk3MTYgMS42NzM2 NCwxLjE4OTIxIDIuMzI4MjgsMy41Njg2NSAwLjI4OTQzLDEuOTA1MzMgLTQuNjU0NywzLjI1 MjkxIC0yLjkxMDgsNC41MjI4MSA1LjUyODQ3LDMuOTY2MDUgMTguMzk4NzEsNS45NTEwNSAy NS4wODk0NSw4Ljg4NTI1IDEzLjc0NDAyLDYuMTA4NDUgMTIuMzYxNjksNS42MzEzNyAyMS40 NTE5LDExLjY2MTExIDEwLjEwODI4LDUuNjMxMzQgMjMuMjcwNjYsLTIyLjI5MTM1IDUwLjQ2 NjQ5LDIwLjE0Nzk2IC0zLjM0NDQ1LC0yLjMwMDc1IC0zLjM0NDQ1LC0xLjU4NTYyIC01LjY2 OTk4LC0yLjA2MTcxIDQuMjg4NTQsMTEuNTAyNzUgMC45NDQwOSwyMC4zMDczMyAwLjk0NDA5 LDMwLjMwMzE1IDExLjU2Mjc1LC0xMC45NDg5OSAyNC40MzM4NywtNTkuNDk2NzQgMzAuMzIz ODksLTUwLjc2OTgyIDQuNDM2NDksNi41MDM4NCAwLjg3Mzc3LC0yNy4wNTIyMiA0Ljk0NTk1 LC0yMC44NjMxIDYuMzI1NTYsOS43NTY3NiAyLjgzNTkxLC00MC4yMjAyNCAtMy4wNTUwMiwt NDQuNTgzNjkgMi41NDU1Niw2Ljk4MTkxIDQuNzI2OCwxMi44NTEzMSAyLjI1NTIxLDE3LjM3 NDExIC0xLjMwODM4LC00Mi41MTk5OSAtMzUuNTU5MjYsLTQ1LjA1ODc4IC01Mi43MjA4Miwt NDIuNDQxMzEgeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDg5NCIgLz4KICAgICAg ICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgICAgICAgICAgICAgZ3JhZGllbnRV bml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAgICAgICAgICAgICBpZD0iWE1MSURfMTFf IgogICAgICAgICAgICAgICAgICAgeDE9IjU1OC44MTQ2NCIKICAgICAgICAgICAgICAgICAg IHkxPSI3ODkuNDAwMTUiCiAgICAgICAgICAgICAgICAgICB4Mj0iNTU4LjgxNDY0IgogICAg ICAgICAgICAgICAgICAgeTI9Ijc4OS40MDAxNSIKICAgICAgICAgICAgICAgICAgIGdyYWRp ZW50VHJhbnNmb3JtPSJzY2FsZSgwLjY5NjYyOTQ4LDEuNDM1NDgzMykiPgogICAgICAgICAg ICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAg ICAgICAgICAgICAgIHN0b3AtY29sb3I9IiM2MTVBNDQiCiAgICAgICAgICAgICAgICAgICAg IGlkPSJzdG9wNDg5NiIgLz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAg ICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIj QkZCRkJGIgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ4OTgiIC8+CiAgICAgICAg ICAgICAgICA8L2xpbmVhckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAg ICAgICAgICAgICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURf MTFfKTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MDtz dHJva2UtbGluZWpvaW46YmV2ZWw7c3Ryb2tlLW1pdGVybGltaXQ6Mi40MTQyMDAwNyIKICAg ICAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAg ICAgICAgICAgICAgICBzdHJva2UtbWl0ZXJsaW1pdD0iMi40MTQyIgogICAgICAgICAgICAg ICAgICAgZD0ibSAzODcuMzkxMzYsMTM1LjE3NzQ3IGMgNC4yOTAzNywxMy40MDYwNyA4Ljk0 NDE4LDQzLjMxMTgyIDIuNDcyNTMsNDcuNjc2MjYgLTIuMDM2MDcsMS4zNDc1OCAtMS4zMDgz OCwtNS4zMTU2MSAtMi40NzI1MywtMi42MTc0NiAtMS44MTc4Nyw0LjY3OTE3IDAuNDM2NDYs MTkuMzU1MTQgLTMuNzA4NzQsMjMuNzk3MjcgLTEuMjM3MTksMS4zNDg1OSAtMS4wMTgxLC02 LjgyMjU0IC0yLjgzNjgzLC0zLjE3MzIyIC01Ljc0Mzk1LDEwLjg2OTI4IC0xMi42NTI5Miwy My4wMDU0NiAtMTMuMDg3NTIsMjkuNjY4NjcgMTUuNDE1NzcsLTIuNjE3NDYgLTIuNDAxMzEs LTAuODcxNDkgLTQuNzI3NzUsOC42NDcyMyAxMy43NDQ5MywtMS45ODQwMiAxOS45MjUyOSww LjU1NTc2IDI0LjY1MzAxLDYuNzQzODcgLTIzLjg1MzE4LC0xNi4yNjI1OSAtNDEuODg3NTQs MTIuOTI5IC00OC4yODcwOCwzMC45Mzc1OCAtNS42NzI2NiwxNS4xNTEwNiAwLjk0NDEsNDIu NTE4IDcuNjM1NzgsNDguNDY5MDUgNC43MjY4Myw0LjI4NDc5IDIxLjIzMzY3LDUuMjM2OTQg MjMuMDUyNDksMTUuODY2MjEgLTYuNTQzODMsLTEwLjE1MzE3IC0xNC44MzUxMiwtOS44MzU0 NSAtMTguNTQ0OCwtMTAuMzkzMjIgMS40NTYyOSw0LjEyNjQxIDUuMTY0MTUsNy4yMjA5OCA2 Ljc2Mzc5LDkuMDQzNjQgMC43OTk4MywxLjc0NDk3IC03Ljk5OTE1LDMuMjUyOTMgLTIuNzYz NzksNC4zNjI0MyAxNC41NDQ4LDQuMzYyNDkgNi45ODIwNSw2LjU4NTU0IDYuOTgyMDUsOS4y ODE2OCA0LjE0NDI5LC0wLjk1MzE2IDEwLjQ3MDc3LDMuMDEzODggMTQuMjUyNiwtNy4xMzky OCAyLjI1NDI3LC02LjEwODQzIDE0LjI1MzQ0LDMuODg3MzkgMTQuNzYyMDIsLTcuMDU5NjEg MTQuNjE1OTEsLTEyLjM3NTI0IC0xNi4yODk1OCwtMjYuODEyMTYgMTMuNTI1NzksLTQxLjY0 NjQ4IC0xMS43ODA5OCwxMy4zMjU0MSAtNi41NDQ3MSwxNi41NzkzMiAtNi4xODIxOSwyOC40 Nzc0NSAwLjM2NDI4LC04LjY0NzE5IDIyLjE4MDQ4LC0xMC45NDY5NiAxNC45MDgxMSwtMjEu MTc5ODEgMy43ODE4LDIuMjk5NzQgMS43NDU3LDQuMjA1MDggMS43NDU3LDYuOTc5OTIgMy4z NDUzNiwwLjg3MTQ5IDEzLjk2MjI1LC0xMS42NjExIDE1Ljg1MzE0LC0yMS44MTQyNyAwLjcy NzcsMTYuNzM3NjcgLTIzLjkyNTMyLDIyLjkyNTgxIC0xMS42MzU3NywzOC40NzMyOSA2LjAz NjA3LC0xNy4xMzQwOSAyNy41NjEwNCwtNi45MDEyNyAxOS4wNTI0LC0xNC44MzQzNSAtMS41 MjY1OCwtMS41MDY5NSAtMy4xMjcxNywtNS43MTIwMyAtOC44NzIwMSwtNC4zNjI0NSA0LjAw MDkyLC0xLjc0NDk3IDQuNTA4NTgsLTAuMzk2NDMgOS45NjMwOCwyLjQ2MDExIDQuMzY0MzQs LTI2LjE3Nzc2IDQuODcyOTIsLTYyLjgyODMyIC0xLjM4MTQxLC04OC4zNzA2IC0xNS40MTY2 OSwtNjcuMjcwNDUgLTUxLjU1ODUxLC04MS42Mjg3MSAtNDUuNjY4NDYsLTg0LjMyNjg2IDQu Nzk5ODMsLTIuMDYzNjkgLTMuNzA5NjksLTMuMjUyOSAtNS40NTM2MSwtMy45NjcwNSB6Igog ICAgICAgICAgICAgICAgICAgaWQ9InBhdGg0OTAxIiAvPgogICAgICAgICAgICAgICAgPGxp bmVhckdyYWRpZW50CiAgICAgICAgICAgICAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3Bh Y2VPblVzZSIKICAgICAgICAgICAgICAgICAgIGlkPSJYTUxJRF8xMl8iCiAgICAgICAgICAg ICAgICAgICB4MT0iMzIzLjc0OTE1IgogICAgICAgICAgICAgICAgICAgeTE9IjkxNi40NjQx NyIKICAgICAgICAgICAgICAgICAgIHgyPSIyODIuMjgwMzMiCiAgICAgICAgICAgICAgICAg ICB5Mj0iOTE2LjQ2NDE3IgogICAgICAgICAgICAgICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09 InNjYWxlKDEuMDMxODUwNywwLjk2OTEzMjQ0KSI+CiAgICAgICAgICAgICAgICAgIDxzdG9w CiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgICAgICAgICAgICAg c3RvcC1jb2xvcj0iI0ZFRTBCMyIKICAgICAgICAgICAgICAgICAgICAgaWQ9InN0b3A0OTAz IiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZz ZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiM5OTk5OEUiCiAgICAg ICAgICAgICAgICAgICAgIGlkPSJzdG9wNDkwNSIgLz4KICAgICAgICAgICAgICAgIDwvbGlu ZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICAgICAg c3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNYTUxJRF8xMl8pO2ZpbGwtcnVs ZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDowO3N0cm9rZS1saW5lam9p bjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAgICAgICAgICAgICAg ICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgICAg IHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAgICAgICAgICAgICBkPSJtIDI1 OC4zMTIwNywxNzMuMDE2MyBjIC0xMy44ODkxNywzLjA5MzUzIC0xOC4xMDc0LDQuOTE4MjEg LTI2LjgzNDI2LDE2LjM0MDI4IC0wLjM2MjQ3LDIuMDYzNzEgNC43MjY4NCwtMy45NjUwNiA5 LjUyNTc1LC02LjY2MjIxIC0yLjMyNjM3LDIuNTM3NzkgLTIuNjE2NzUsMy4wMTQ4NiAtNC4w NzIxMyw0Ljc1ODg1IC0xLjMwODQsMS45MDMzNSAtMi43NjI4NywxMS43NDE3OSAtMS44MTY5 NiwxMS43NDE3OSAwLjk0NTAxLDAgMC4zNjMzNywtOC40MTAxOSA3LjkyNywtMTIuMjk1NTcg LTAuMTQ1MTUsNC45OTc5MSAtMC44MDA3MywxMy42NDMxMyAwLjcyNzY4LDEzLjQ4NTc3IDEu NDUzNiwtMC4yMzgwNCAtMS41Mjg0MSwtOC4wOTI0NiA0LjA3MTI3LC0xMy4xNjcwNCA1LjA5 MDE4LDMuNDEwMjggNi44MzUwMywtNS4zMTU2MyAxMS4yMDAyOSwtNS43MTIwMiAwLjg3MTk1 LDAgLTEuODkwOSwtMC44NzM1MSAxLjA5MDE1LC00LjEyNjQyIDEuMzA4MzgsLTEuNDI4MjQg LTAuMjE5MTUsLTQuNjgxMTcgLTEuODE4NzksLTQuMzYzNDMgeiIKICAgICAgICAgICAgICAg ICAgIGlkPSJwYXRoNDkwOCIgLz4KICAgICAgICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAog ICAgICAgICAgICAgICAgICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAg ICAgICAgICAgICAgICBpZD0iWE1MSURfMTNfIgogICAgICAgICAgICAgICAgICAgeDE9IjM5 Ni40ODEyNiIKICAgICAgICAgICAgICAgICAgIHkxPSI4MDMuNDQ2NDEiCiAgICAgICAgICAg ICAgICAgICB4Mj0iMzUxLjAxODQ5IgogICAgICAgICAgICAgICAgICAgeTI9IjgwMy40NDY0 MSIKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VHJhbnNmb3JtPSJzY2FsZSgwLjg3NTM3 NDU1LDEuMTQyMzY4MSkiPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAg ICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiNG RUUwQjMiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDkxMCIgLz4KICAgICAgICAg ICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAg ICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjOTk5OThFIgogICAgICAgICAgICAgICAgICAg ICBpZD0ic3RvcDQ5MTIiIC8+CiAgICAgICAgICAgICAgICA8L2xpbmVhckdyYWRpZW50Pgog ICAgICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgICAgIHN0eWxlPSJjbGlwLXJ1 bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURfMTNfKTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJv a2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MDtzdHJva2UtbGluZWpvaW46YmV2ZWw7c3Ryb2tl LW1pdGVybGltaXQ6Mi40MTQyMDAwNyIKICAgICAgICAgICAgICAgICAgIGlua3NjYXBlOmNv bm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgICAgICBzdHJva2UtbWl0ZXJs aW1pdD0iMi40MTQyIgogICAgICAgICAgICAgICAgICAgZD0ibSAyNjAuMTI5OTQsMjIyLjUx NjIyIGMgMS4xNjIzLDQuNzU5ODYgMC4yOTAzMiwtOC4wOTE0NiAyLjMyNzM3LC05LjU5OTQg MC4yOTEyLDIuMzAxNzUgNC41MDg2LDEyLjI5NTU1IDUuNDUzNTUsMTEuMjY1NyAwLjI5MjE3 LC0wLjMxNjc0IC0zLjM0NDQ1LC02LjI2Nzc5IC0zLjQxNzUxLC0xMi45MyAxLjA5MDE4LDMu NzI4MDEgMTAuODM1MDgsMTMuOTYwODQgMTEuNDkwNjYsMTMuMTY4MDQgMS41Mjc0NywtMC40 NzYwOSAtMy42MzU3NCwtMC45NTExNyAtNi4zMjY0OCwtMTEuODk3MTUgLTEuNzQ2NjcsLTcu NTM1NjkgMC43OTg4OSwtMTEuNjYyMTEgMi45ODEwOCwtMTIuNzcyNjMgNS4wMTgwNCwtMS4w MzE4NiAxLjk2MjEzLC0yLjg1NjUyIDcuNDkxNDksMi4yMjAwNiAwLjUwODU0LDAuNzE2MTIg LTAuODAxNywzLjcyODAxIC0xLjc0NjY1LDYuMjY2OCAwLjc5OTgxLDAuMzE3NzIgMi42ODk4 MiwtMi4yMjEwNSA0LjIxNjQsLTMuNzI4IDEuMTYzMjcsLTEuNDI4MjcgMS41MjkzNiwtMi4x NDAzOSAwLjcyODYxLC02LjY2MzIxIDAsLTIuMjk5NzUgMC4xNDYwOSwtNC43NjA4NCAzLjQx NzUxLC00Ljc2MDg0IC0wLjg3Mzc1LC0wLjk1MTE4IC01LjA5MDE4LC00LjEyMzQyIC03Ljky NzAzLC0zLjk2NTA2IC02LjY5MDcsMS44MjQ2NiAtOS40NTM1OCw2LjEwODQzIC0xMC45ODAy Miw4Ljk2Mjk1IC0xLjc0NDgyLDMuMzMyNiAtMTAuMjU0MzcsMTMuNDg2NzYgLTcuNzA4Nzgs MjQuNDMyNzQgeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDkxNSIgLz4KICAgICAg ICAgICAgICAgIDxsaW5lYXJHcmFkaWVudAogICAgICAgICAgICAgICAgICAgZ3JhZGllbnRV bml0cz0idXNlclNwYWNlT25Vc2UiCiAgICAgICAgICAgICAgICAgICBpZD0iWE1MSURfMTRf IgogICAgICAgICAgICAgICAgICAgeDE9IjUxNy45MTcxMSIKICAgICAgICAgICAgICAgICAg IHkxPSI3MTkuMjY5MDQiCiAgICAgICAgICAgICAgICAgICB4Mj0iNTE3LjkxNzExIgogICAg ICAgICAgICAgICAgICAgeTI9IjcxOS4yNjkwNCIKICAgICAgICAgICAgICAgICAgIGdyYWRp ZW50VHJhbnNmb3JtPSJzY2FsZSgwLjY5NDU3MDc1LDEuNDM5NzM4MSkiPgogICAgICAgICAg ICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAg ICAgICAgICAgICAgIHN0b3AtY29sb3I9IiNCRkJGQkYiCiAgICAgICAgICAgICAgICAgICAg IGlkPSJzdG9wNDkxNyIgLz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAg ICAgICAgICAgb2Zmc2V0PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIj NjE1QTQ0IgogICAgICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ5MTkiIC8+CiAgICAgICAg ICAgICAgICA8L2xpbmVhckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAg ICAgICAgICAgICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURf MTRfKTtmaWxsLXJ1bGU6ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MDtz dHJva2UtbGluZWpvaW46YmV2ZWw7c3Ryb2tlLW1pdGVybGltaXQ6Mi40MTQyMDAwNyIKICAg ICAgICAgICAgICAgICAgIGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAg ICAgICAgICAgICAgICBzdHJva2UtbWl0ZXJsaW1pdD0iMi40MTQyIgogICAgICAgICAgICAg ICAgICAgZD0ibSAzMTMuMjg5OTIsMjAzLjg3NDE5IGMgOS44MTUxOCwyMi41MzA0IDExLjI3 MDYsNTAuMjE1MDcgMTQuNDY5ODEsNTQuNjU4MTkgMS4zODMzMSwtMS43NDUgNy4yNzI0Mywt NS4zMTU2MSA1LjY3MzY4LC0yLjkzNjE5IC04LjQzNjUyLDEyLjYxMzI4IC00LjUwOTUyLDEx Ljg5OTE0IDIuMjUzMzksMzEuNDE0NjQgMS4wOTEwOSwtMTEuMzQzMzggNi4yNTUyMiwtMjIu MjEwNjkgMTQuMzI1NTksLTMxLjgxMDA5IDEuMDE4MDQsLTYuNzQxODYgNS4wOTEwOSwtMzQu ODIzOTEgLTAuNTA5NDYsLTM2LjE3MjUgMi44MzQwNCwtMi44NTY1IDkuODkwMDQsNC42MDA1 MSAzLjU2MzYsLTEuNzQ1OTggLTcuOTk4MjMsLTEyLjYxMzI3IC0yMS41OTc5OSwtMjQuOTkw NDggLTM5Ljc3NjYxLC0xMy40MDgwNyB6IgogICAgICAgICAgICAgICAgICAgaWQ9InBhdGg0 OTIyIiAvPgogICAgICAgICAgICAgICAgPGxpbmVhckdyYWRpZW50CiAgICAgICAgICAgICAg ICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgICAgICAgICAgICAgICAg IGlkPSJYTUxJRF8xNV8iCiAgICAgICAgICAgICAgICAgICB4MT0iMzU0LjE4ODE3IgogICAg ICAgICAgICAgICAgICAgeTE9IjEzMDMuMDI5NyIKICAgICAgICAgICAgICAgICAgIHgyPSIz NTQuMTg4MTciCiAgICAgICAgICAgICAgICAgICB5Mj0iMTMwMy4wMjk3IgogICAgICAgICAg ICAgICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09InNjYWxlKDEuMTQ1ODI4MSwwLjg3MjczMTIz KSI+CiAgICAgICAgICAgICAgICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNl dD0iMCIKICAgICAgICAgICAgICAgICAgICAgc3RvcC1jb2xvcj0iIzYxNUE0NCIKICAgICAg ICAgICAgICAgICAgICAgaWQ9InN0b3A0OTI0IiAvPgogICAgICAgICAgICAgICAgICA8c3Rv cAogICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAg IHN0b3AtY29sb3I9IiNCRkJGQkYiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDky NiIgLz4KICAgICAgICAgICAgICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAg ICA8cGF0aAogICAgICAgICAgICAgICAgICAgc3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2Zp bGw6dXJsKCNYTUxJRF8xNV8pO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0 cm9rZS13aWR0aDowO3N0cm9rZS1saW5lam9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoy LjQxNDIwMDA3IgogICAgICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZh dHVyZT0iMCIKICAgICAgICAgICAgICAgICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIi CiAgICAgICAgICAgICAgICAgICBkPSJtIDQxNC44MDYzMywzMTcuNDcxMzQgYyAtMS40NTQ0 NiwxLjM0ODU4IC0xLjAxODAzLDQuMTI2NDEgLTEuNTk5NjQsNi41MDU4MyAtMS4wOTExMiwt Mi4zODA0MyAtMC4zNjM0LC01LjQ3NDk3IDEuNzQ1NzMsLTEwLjk0Nzk3IC03LjU2Mjc0LDEw LjM5MjIyIC0xMi44NzIwNCw3LjEzOTI5IC0xNi4wNzIyMywxNS4zMTE0MSAtMC42NTQ3LDEu NTg1NjMgLTIuMzk5NDgsOS4zNjAzOCAtNi4wMzUyMiwxMS4xODQwMiA3LjM0MzU3LC0xLjUw NTkyIDM1LjE5NTg5LDAuODcyNDkgNTAuMTA0MDEsMTYuNjU5MDIgMy4xOTkzMSwtMS41MDY5 MiAtMS4wOTExLC04LjQ4Njg3IC02LjEwODI1LC0xMy44ODIyIDAuODcxOTgsLTEuODI0NjQg Ny42MzU3NywzLjk2NjEgNi42MTc3NCwwLjk1MjIxIC0xLjMwOTMzLC00LjM2MjQ2IDAuNzk5 OCwtNS45NTEwOCA1LjA5MDE3LC0zLjY0OTMyIDMuMjcyMzQsMS44MjQ2NCAtMy4wNTMxOSwt Ni4zNDc1MSAtMS4zODE0LC02LjM0NzUxIC0xMC40NzE2OCwtNy41MzU3IC0yLjMyNzM0LC0x MS44MjA0MyAtNi42MTc3NCwtMTMuNDg1NzQgLTEuMzgxNDEsMC4zOTYzOSAtMTQuNzYyMDMs LTQuOTE4MjIgLTIwLjc5ODEzLDkuNTE4NyAtMy4wNTQxMSwtMi43NzQ4NCAtNC4yOTA0LC02 LjAyNzc0IC00Ljk0NTA0LC0xMS44MTg0NSB6IgogICAgICAgICAgICAgICAgICAgaWQ9InBh dGg0OTI5IiAvPgogICAgICAgICAgICAgICAgPGxpbmVhckdyYWRpZW50CiAgICAgICAgICAg ICAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgICAgICAgICAgICAg ICAgIGlkPSJYTUxJRF8xNl8iCiAgICAgICAgICAgICAgICAgICB4MT0iMjU4Ljg3MTkyIgog ICAgICAgICAgICAgICAgICAgeTE9IjE2NjAuNTQ1NyIKICAgICAgICAgICAgICAgICAgIHgy PSIyMTIuMzExNzgiCiAgICAgICAgICAgICAgICAgICB5Mj0iMTY2MC41NDU3IgogICAgICAg ICAgICAgICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09InNjYWxlKDEuNTEwOTg3OCwwLjY2MTgx ODcpIj4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAgICAgb2Zm c2V0PSIwIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjRkVFMEIzIgogICAg ICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ5MzEiIC8+CiAgICAgICAgICAgICAgICAgIDxz dG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAgICAgICAgICAg ICAgc3RvcC1jb2xvcj0iIzk5OTk4RSIKICAgICAgICAgICAgICAgICAgICAgaWQ9InN0b3A0 OTMzIiAvPgogICAgICAgICAgICAgICAgPC9saW5lYXJHcmFkaWVudD4KICAgICAgICAgICAg ICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBzdHlsZT0iY2xpcC1ydWxlOmV2ZW5vZGQ7 ZmlsbDp1cmwoI1hNTElEXzE2Xyk7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7 c3Ryb2tlLXdpZHRoOjA7c3Ryb2tlLWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRlcmxpbWl0 OjIuNDE0MjAwMDciCiAgICAgICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3Vy dmF0dXJlPSIwIgogICAgICAgICAgICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9IjIuNDE0 MiIKICAgICAgICAgICAgICAgICAgIGQ9Im0gMzAzLjM5OTg0LDMzNy40NjA5NCBjIDIuNzYx OTMsLTEuNTg1NjMgLTIuNjE3NjgsLTUuOTQ5MDcgOC4yODc2NiwtOC4wMDk3NyAtMi44MzQw OCwzLjQxMDI1IC03Ljk5OTE1LDIuMzAwNzUgLTcuMjcxNDUsMTAuNjI5MjQgNC44MDA3OCwx LjI2Nzg5IDMuMjAwMTksLTguMzI5NDkgMTEuNTYyNzEsLTguNDEwMTggLTMuMDU0MDgsMS41 ODc2MSAtOS4zNzk2MSw4LjcyNjg5IC03LjE5ODM2LDguOTY1OTQgNy4xOTgzNiwwLjg3MTQ5 IDUuMTYyMzIsLTIuMzAxNzYgNy4xOTgzNiwtMy4xNzUyMyAyLjAzNzA1LC0wLjk1MDE3IDEu ODkwOTMsMS4xOTExOSA1LjU5OTY3LC0wLjM5NDQxIDExLjQ5MDY5LDQuNzU3ODcgMTkuNDg5 ODEsLTcuMjk4NjUgMjcuNzA3MTgsLTQuMjA1MTEgLTguNzk5ODksLTYuODIyNTQgMS4yMzcx NiwtMy40OTA5NCAyLjAzNjA4LC0zLjMzMTU3IDAuNzk4OTIsMC4xNTgzNSAtNy43MDk2OSwt Mi45MzQyMSAtOS4zODA1OSwtOS43NTY3OCAtMTAuNDcyNTYsNi4yNjY3OSAtMTQuMTgxMzcs MC44NzE0OSAtMjkuMDE1NTMsNy4wNTk2MyAtOC44NzEwNywzLjcyOTAxIC03Ljc4Mjc1LC0y LjM3OTQ1IC05LjUyNTczLDEwLjYyODI0IHoiCiAgICAgICAgICAgICAgICAgICBpZD0icGF0 aDQ5MzYiIC8+CiAgICAgICAgICAgICAgICA8bGluZWFyR3JhZGllbnQKICAgICAgICAgICAg ICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICAgICAgICAgICAgICAg ICAgaWQ9IlhNTElEXzE3XyIKICAgICAgICAgICAgICAgICAgIHgxPSIyNTQuOTAxMjYiCiAg ICAgICAgICAgICAgICAgICB5MT0iMTgzMS41MDM1IgogICAgICAgICAgICAgICAgICAgeDI9 IjI1NC45MDEyNiIKICAgICAgICAgICAgICAgICAgIHkyPSIxODMxLjUwMzUiCiAgICAgICAg ICAgICAgICAgICBncmFkaWVudFRyYW5zZm9ybT0ic2NhbGUoMS40OTA1OTc5LDAuNjcwODcx NzIpIj4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAgICAgb2Zm c2V0PSIwIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjQ0FBNDhDIgogICAg ICAgICAgICAgICAgICAgICBpZD0ic3RvcDQ5MzgiIC8+CiAgICAgICAgICAgICAgICAgIDxz dG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMSIKICAgICAgICAgICAgICAgICAg ICAgc3RvcC1jb2xvcj0iIzk5OTk4RSIKICAgICAgICAgICAgICAgICAgICAgaWQ9InN0b3A0 OTQwIiAvPgogICAgICAgICAgICAgICAgPC9saW5lYXJHcmFkaWVudD4KICAgICAgICAgICAg ICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBzdHlsZT0iY2xpcC1ydWxlOmV2ZW5vZGQ7 ZmlsbDp1cmwoI1hNTElEXzE3Xyk7ZmlsbC1ydWxlOmV2ZW5vZGQ7c3Ryb2tlOiMwMDAwMDA7 c3Ryb2tlLXdpZHRoOjA7c3Ryb2tlLWxpbmVqb2luOmJldmVsO3N0cm9rZS1taXRlcmxpbWl0 OjIuNDE0MjAwMDciCiAgICAgICAgICAgICAgICAgICBpbmtzY2FwZTpjb25uZWN0b3ItY3Vy dmF0dXJlPSIwIgogICAgICAgICAgICAgICAgICAgc3Ryb2tlLW1pdGVybGltaXQ9IjIuNDE0 MiIKICAgICAgICAgICAgICAgICAgIGQ9Im0gNDUwLjY1NzgxLDMzOS40NDQ5NSBjIC0wLjg3 Mjg3LDEuODI0NjQgLTEuNDUzNTYsMS4zNDg1NyAtNC4zNjI1NSwwLjcxNDE0IC0xLjgxNzg0 LC0wLjIzOTA4IC00LjE0NTE4LDYuOTc5OTIgLTEuMTY0MSwxMi43NzA2MyA3LjEyNzE3LDYu OTgwOTIgMTcuMzgwNjUsMzAuNzgwMTggLTEuNDU0NDksNDMuMTU0NDUgLTEzLjY3MDk2LDgu OTY1OTEgLTQ4LjM1ODI4LC01LjQ3MyAtNzcuNzM3MTksLTkuOTk0ODIgLTMwLjk3OTQ2LC00 Ljc1ODg1IC03Mi4yODQ0OCwxMS4xODUwMyAtODYuMzkxOSwzOC4zMTU4OSAzMC4zMjM5MSwt MzQuMjcwMTQgNjUuNTkyODMsLTMzLjg3Mzc4IDk1LjQ4MjExLC0yNy41MjcyOCA4Mi4zMTg4 NSwzNC45MDQ2MyAxMTcuMzY5NTcsLTguNDg3ODYgNzUuNjI4MTIsLTU3LjQzMzAyIHoiCiAg ICAgICAgICAgICAgICAgICBpZD0icGF0aDQ5NDMiIC8+CiAgICAgICAgICAgICAgICA8bGlu ZWFyR3JhZGllbnQKICAgICAgICAgICAgICAgICAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFj ZU9uVXNlIgogICAgICAgICAgICAgICAgICAgaWQ9IlhNTElEXzE4XyIKICAgICAgICAgICAg ICAgICAgIHgxPSIyNDguNTI5NjgiCiAgICAgICAgICAgICAgICAgICB5MT0iMTgyOS42MDM1 IgogICAgICAgICAgICAgICAgICAgeDI9IjE5Ny40MzA2MyIKICAgICAgICAgICAgICAgICAg IHkyPSIxODI5LjYwMzUiCiAgICAgICAgICAgICAgICAgICBncmFkaWVudFRyYW5zZm9ybT0i c2NhbGUoMS42MTI4MDE1LDAuNjIwMDM5MSkiPgogICAgICAgICAgICAgICAgICA8c3RvcAog ICAgICAgICAgICAgICAgICAgICBvZmZzZXQ9IjAiCiAgICAgICAgICAgICAgICAgICAgIHN0 b3AtY29sb3I9IiNGRUUwQjMiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDk0NSIg Lz4KICAgICAgICAgICAgICAgICAgPHN0b3AKICAgICAgICAgICAgICAgICAgICAgb2Zmc2V0 PSIxIgogICAgICAgICAgICAgICAgICAgICBzdG9wLWNvbG9yPSIjOTk5OThFIgogICAgICAg ICAgICAgICAgICAgICBpZD0ic3RvcDQ5NDciIC8+CiAgICAgICAgICAgICAgICA8L2xpbmVh ckdyYWRpZW50PgogICAgICAgICAgICAgICAgPHBhdGgKICAgICAgICAgICAgICAgICAgIHN0 eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjWE1MSURfMThfKTtmaWxsLXJ1bGU6 ZXZlbm9kZDtzdHJva2U6IzAwMDAwMDtzdHJva2Utd2lkdGg6MDtzdHJva2UtbGluZWpvaW46 YmV2ZWw7c3Ryb2tlLW1pdGVybGltaXQ6Mi40MTQyMDAwNyIKICAgICAgICAgICAgICAgICAg IGlua3NjYXBlOmNvbm5lY3Rvci1jdXJ2YXR1cmU9IjAiCiAgICAgICAgICAgICAgICAgICBz dHJva2UtbWl0ZXJsaW1pdD0iMi40MTQyIgogICAgICAgICAgICAgICAgICAgZD0ibSAzMTku NzYwNjIsMzY1LjA2NzkgYyA3LjU2MzY2LDAuODcxNDkgMi42OTA3NywtMy4yNTE5MiA0Ljc5 OTksLTMuODg3MzkgMi4xMDk5OCwtMC41NTM3NyAxMS4zNDM1NiwyLjIyMTEgMTUuMTk4NDIs LTIuNDU4MSA2LjE4MjIyLC01LjM5NTI5IDE3LjgxNTI4LC0xLjE5MDIxIDIxLjk2MjI4LC01 LjYzMzMzIDEuODE3ODcsLTQuNDQxMTMgMC4yMTczMiwtNC45OTc5MiAtOS4zODMzLC05LjI4 MTY3IC00LjIxNTUxLC0wLjk1MTE4IC0xMS41NjAwNiwxLjc0NDk5IC0xOS44NTA0MywxLjgy NDY0IC04LjA3NDAxLDAuMDc4NyAtMTcuMjM1NDgsLTIuMzc5NDIgLTE4Ljc2Mjk3LDIuNDU5 MTEgLTAuNzk4OTUsMCA5LjIzNjMyLC0xLjI2OTg3IDEwLjEwOTE5LDAuNTU1NzggLTE3Ljc0 NDA1LDAuNDc2MDggLTkuMzA4NDcsLTEuNDI4MjUgLTE3LjU5ODg1LDEyLjA1NzUgNi4yNTUy MiwzLjE3MzI1IDUuNTk4NzMsLTUuNjMzMyA3Ljg1NDg2LC03LjkzMzA4IDEuODE3OSwtMS45 MDUzMyAwLjI4OTQ2LC0yLjUzODc4IDEyLjIxNjQ5LC0wLjQ3NTA5IC0xMy44OTAxLC0wLjcx NDE1IC0xMi42NTI5Miw0Ljk5NjkxIC0xNC4xMDY1LDEwLjYyOTI0IDguNjUzODQsMC43OTI4 MSA0Ljg3MTEyLC01Ljg3MDM5IDkuMDE3MjEsLTYuMTA4NDMgNC40MzQ2MywtMC4zMTc3MiA1 LjY3MDksLTIuOTM1MTggNy45MjcsMCAtMTAuMDM4ODUsLTEuMDI4ODQgLTkuNTI5MzksMy4w OTQ1NyAtOS4zODMzLDguMjUwODIgeiIKICAgICAgICAgICAgICAgICAgIGlkPSJwYXRoNDk1 MCIgLz4KICAgICAgICAgICAgICAgIDxwYXRoCiAgICAgICAgICAgICAgICAgICBzdHlsZT0i Y2xpcC1ydWxlOmV2ZW5vZGQ7ZmlsbDpub25lO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZToj MDAwMDAwO3N0cm9rZS13aWR0aDowO3N0cm9rZS1saW5lam9pbjpiZXZlbDtzdHJva2UtbWl0 ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAgICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVj dG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgICAgIHN0cm9rZS1taXRlcmxpbWl0 PSIyLjQxNDIiCiAgICAgICAgICAgICAgICAgICBkPSJtIDI4OS4yMTk0Miw0MTguMDU4ODEg YyAtMC44NzM3NSwwLjk1MjE1IC0wLjg3Mzc1LDAuOTUyMTUgLTEuNjcyNjcsMS45MDUzMyAt MC44MDA3OCwwLjc5Mjc5IC0wLjgwMDc4LDAuNzkyNzkgMS42NzI2NywtMS45MDUzMyB6Igog ICAgICAgICAgICAgICAgICAgaWQ9InBhdGg0OTUyIiAvPgogICAgICAgICAgICAgICAgPGxp bmVhckdyYWRpZW50CiAgICAgICAgICAgICAgICAgICBncmFkaWVudFVuaXRzPSJ1c2VyU3Bh Y2VPblVzZSIKICAgICAgICAgICAgICAgICAgIGlkPSJYTUxJRF8xOV8iCiAgICAgICAgICAg ICAgICAgICB4MT0iMTIxLjg2NDEyIgogICAgICAgICAgICAgICAgICAgeTE9IjE3ODAuNDEw NCIKICAgICAgICAgICAgICAgICAgIHgyPSIxMjEuODY0MTIiCiAgICAgICAgICAgICAgICAg ICB5Mj0iMTc4MC40MTA0IgogICAgICAgICAgICAgICAgICAgZ3JhZGllbnRUcmFuc2Zvcm09 InNjYWxlKDIuNjEzMDQ5MywwLjM4MjY5NDY2KSI+CiAgICAgICAgICAgICAgICAgIDxzdG9w CiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAgICAgICAgICAgICAgICAgICAg c3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAgICAgICAgICAgICAgICAgaWQ9InN0b3A0OTU0 IiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAgICAgICAgICAgICAgICBvZmZz ZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29sb3I9IiMwMDAwMDAiCiAgICAg ICAgICAgICAgICAgICAgIGlkPSJzdG9wNDk1NiIgLz4KICAgICAgICAgICAgICAgIDwvbGlu ZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAogICAgICAgICAgICAgICAgICAg c3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNYTUxJRF8xOV8pO2ZpbGwtcnVs ZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0aDowO3N0cm9rZS1saW5lam9p bjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3IgogICAgICAgICAgICAgICAg ICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIKICAgICAgICAgICAgICAgICAg IHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAgICAgICAgICAgICBkPSJtIDI1 OC4zMTIwNyw0My40NzQyNzcgYyAtOC45NDUwMiwtMC43OTI4MDkgLTEwLjc2MjAyLC0wLjIz NzA0NSAtMy4zNDQ0NSwwLjcxNDEzNCA0LjE0NTE3LDAgMTQuNDcwOCwyLjIyMTA2OSAzLjM0 NDQ1LC0wLjcxNDEzNCB6IgogICAgICAgICAgICAgICAgICAgaWQ9InBhdGg0OTU5IiAvPgog ICAgICAgICAgICAgICAgPGxpbmVhckdyYWRpZW50CiAgICAgICAgICAgICAgICAgICBncmFk aWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgICAgICAgICAgICAgICAgIGlkPSJYTUxJ RF8yMF8iCiAgICAgICAgICAgICAgICAgICB4MT0iMzE3LjY3OTg3IgogICAgICAgICAgICAg ICAgICAgeTE9IjcxNC42ODA0MiIKICAgICAgICAgICAgICAgICAgIHgyPSIzMTcuNjc5ODci CiAgICAgICAgICAgICAgICAgICB5Mj0iNzE0LjY4MDQyIgogICAgICAgICAgICAgICAgICAg Z3JhZGllbnRUcmFuc2Zvcm09InNjYWxlKDEuMDA0ODExOCwwLjk5NTIxMTI4KSI+CiAgICAg ICAgICAgICAgICAgIDxzdG9wCiAgICAgICAgICAgICAgICAgICAgIG9mZnNldD0iMCIKICAg ICAgICAgICAgICAgICAgICAgc3RvcC1jb2xvcj0iIzAwMDAwMCIKICAgICAgICAgICAgICAg ICAgICAgaWQ9InN0b3A0OTYxIiAvPgogICAgICAgICAgICAgICAgICA8c3RvcAogICAgICAg ICAgICAgICAgICAgICBvZmZzZXQ9IjEiCiAgICAgICAgICAgICAgICAgICAgIHN0b3AtY29s b3I9IiMwMDAwMDAiCiAgICAgICAgICAgICAgICAgICAgIGlkPSJzdG9wNDk2MyIgLz4KICAg ICAgICAgICAgICAgIDwvbGluZWFyR3JhZGllbnQ+CiAgICAgICAgICAgICAgICA8cGF0aAog ICAgICAgICAgICAgICAgICAgc3R5bGU9ImNsaXAtcnVsZTpldmVub2RkO2ZpbGw6dXJsKCNY TUxJRF8yMF8pO2ZpbGwtcnVsZTpldmVub2RkO3N0cm9rZTojMDAwMDAwO3N0cm9rZS13aWR0 aDowO3N0cm9rZS1saW5lam9pbjpiZXZlbDtzdHJva2UtbWl0ZXJsaW1pdDoyLjQxNDIwMDA3 IgogICAgICAgICAgICAgICAgICAgaW5rc2NhcGU6Y29ubmVjdG9yLWN1cnZhdHVyZT0iMCIK ICAgICAgICAgICAgICAgICAgIHN0cm9rZS1taXRlcmxpbWl0PSIyLjQxNDIiCiAgICAgICAg ICAgICAgICAgICBkPSJtIDI2My4xMTEwNSw1Ny4yNzY3NzUgYyAtMS43NDQ4Nyw0LjEyNjM5 NiAtMy45MjYxMSw2LjkwMTI0MSAtOS42NzI3Nyw4LjgwNjU4MyAyLjQwMDM3LC0xLjM0ODU3 OSA3Ljc4MDkzLC0yLjkzNTIwNyA4LjU4MDc2LC05LjU5OTQgMC42NTQ2NCwtMC4wNzg2OCAx LjIzNzE1LDEuMzQ4NTc5IDEuMDkyMDEsMC43OTI4MTcgeiIKICAgICAgICAgICAgICAgICAg IGlkPSJwYXRoNDk2NiIgLz4KICAgICAgICAgICAgICA8L2c+CiAgICAgICAgICAgIDwvZz4K ICAgICAgICAgIDwvZz4KICAgICAgICA8L3N3aXRjaD4KICAgICAgPC9nPgogICAgPC9nPgog IDwvZz4KPC9zdmc+Cg== --------------89B8059F98A5CC9261401DF0-- From nobody Mon Nov 11 17:43:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BD08120110 for ; Mon, 11 Nov 2019 17:43:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A8F59FsobQFd for ; Mon, 11 Nov 2019 17:43:14 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800113.outbound.protection.outlook.com [40.107.80.113]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E184F120025 for ; Mon, 11 Nov 2019 17:43:13 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EQQ/NVqUQJPJfBkxW3A/o1y/DgCFGr1OSdxcelBwhy1PefF6Co80D6pRyX0U+GHjcYWGuEROVrwcvov9yH3skIg3DeDgQCVrZbuOxuu90xt/5DMT4wotj3CgtYD160+ObmHKLHPQtfp86o7UPO8zhjtyWPc913LO6ch26Mn8bKfMg42D4AMGf/bZk6NFyg1Y7WMgNoiUDpt6P7m1dEZd0nSA4coGRNwL08TjGBobhtcrPvRbgPJXi/V7BNdDapjKmSqXfQmRFxh5wUorJHF/sjNQYnekoRVkzotx1zfzSx8f5tmoU1xcuKT0xsiVGy5Z6Hw6Ules61RWBdwkGR5k5A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ypEBxNJLwNEJDNsi2YiCUntaeeO2uWVfowQet8Ip+9k=; b=Hv1Ex41Pxttftsu3DX2oUIk9yL04l3+qMXn0bZxLp+yjRgvNxMJSUdXao9N50+NhxdQRo45n4/38WWD4FnneK0OC1+ChF1pVkOqnVjFcdhIE834UrbIUDEXExuBEVrf4Xzf2Z++GGGkHzqCmNYankfLqw6oTuEJHZWMwXWSZnLWfx+LrFlpmGLORRZ2TnogN/WfkE4FiTK05fwGo+a39TvQ8JYm1bcFihxu8B3ow3pZAeW+02TV4WM3E7Vs9+7mWTAk/vbuTRcUyDPkvGJS6zu/Y3CHSVZVhGoYqdAsLuvBntYMcaRp5dNx1Zr1oF7wbY9J+Uh0XeKjVu7GDxfpoaw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ypEBxNJLwNEJDNsi2YiCUntaeeO2uWVfowQet8Ip+9k=; b=N27Cd1uzYtNhUit6NPoKA9Vdpw6CEecwP+6w8FhLj/dc+lFHssNzuShc44AL+NIpALCx+gY2wFJCvJgZSxXkg5ehhLCszUhCWIp0RvOFA7PWWHkfG9DbE7ckjKWQuUzV8BjSzRZJ1rELWwap1meGpRnpO/YctTgOEvjvRVtceJk= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0703.namprd21.prod.outlook.com (10.175.142.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.15; Tue, 12 Nov 2019 01:43:10 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Tue, 12 Nov 2019 01:43:10 +0000 From: Dave Thaler To: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUA= Date: Tue, 12 Nov 2019 01:43:10 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> In-Reply-To: <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T01:43:10.0511305Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a49e9ecc-8e3e-4bf2-b759-08bb20f89aec; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:7:e15a:2ef4:72e0:1bca] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 729b0312-c630-4036-e867-08d76711acde x-ms-traffictypediagnostic: MWHPR21MB0703: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(376002)(366004)(346002)(396003)(15404003)(199004)(189003)(486006)(11346002)(74316002)(236005)(10090500001)(14454004)(9686003)(6306002)(446003)(476003)(54896002)(7736002)(186003)(55016002)(790700001)(6116002)(8990500004)(81156014)(8676002)(46003)(86362001)(8936002)(52536014)(81166006)(229853002)(5660300002)(71200400001)(71190400001)(25786009)(14444005)(256004)(66476007)(6436002)(478600001)(110136005)(66574012)(66946007)(66556008)(66446008)(64756008)(54906003)(99286004)(6506007)(22452003)(4326008)(76116006)(53546011)(76176011)(33656002)(2906002)(316002)(102836004)(7696005)(10290500003)(6246003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0703; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 3Kode+F0F76StwanmDMO8E+AgW+ybXFO8D/oZxbvMN4YaDlpRosVys3JUR8EtXz2BFPCh2uadePsIFXX7V+EnwjX2nbXW/IOsd8uTT6q9tk12U7+bdIV5R8hv0uzB77aC08u17ZnBF/ruG0sczUXANA+nhp+I0zdD6Z5ehPujb96tdeKTBLQs37EMDrgeHSlWLdKHyyscu4ToLPxzljI4jMyQFQcbMq9iGDe7ugMBwKsfzTvVo1mRg8oI0mKA2FfqDHHYmlAXJyEfOkolu1dMENLMroZEEtzAd5jN8XYLlwKQFvIPgBj0UzMmMXpW+ZZ4gPOqx5bPgOmOcU3DQM4F+jJ3KEBy0d2MdURvl9n81vL2aaiCEwHPmhqOUS4vngH5O5485Crt6zBer9rx2kdxvgGExHKAPBCmp/P+ALiusAFvUnmD96mTxLSpBp1g+ih x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB07844F61BEFAE03F9E7DD290A3770MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 729b0312-c630-4036-e867-08d76711acde X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 01:43:10.6869 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: BMKQmzJep3XOfb10B1BWJu60bC719ybTOYgMC85Jp94Pa7kk231OA451wqAmJy8sHNAZTCCbPI9RJhOD1LsRHRPkmm3Xohym3gzqEmyV0Vg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0703 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 01:43:18 -0000 --_000_MWHPR21MB07844F61BEFAE03F9E7DD290A3770MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QXMgZmFyIGFzIEkgY2FuIHVuZGVyc3RhbmQgZnJvbSBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2lj LXlhbmctbW9kdWxlLTAxIGFuZA0KZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1h dHRlc3RhdGlvbi0wMSwgdGhleSBicmVhayBkb3duIHRoZSB1c2UgY2FzZQ0Kc3BhY2UgYXMgZm9s bG93czoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgUmVxdWlyZW1lbnRzPw0KICAgICAgICAg Ky0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0t LQ0KICAgICAgICAgfCAgUm9UICAgICAgICAgfCBIb3N0IEZpcmV3YWxsIHwgUHJpdmFjeSB8fCAg IFNvbHV0aW9uDQogICAgICAgICB8ICBUeXBlICAgICAgICB8ICAgRW5hYmxlZCAgICAgfCBOZWVk ZWQgIHx8ICAgIFBpZWNlcw0KICAgICAgICAgKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0t LSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAgICAgMSAgfCAgU0dYICAgICAgICAgfCBO byAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgMiAgfCAgU0dYICAgICAgICAgfCBObyAg ICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgMyAgfCAgU0dYICAgICAgICAgfCBZZXMgICAg ICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNCAgfCAgU0dYICAgICAgICAgfCBZZXMgICAgICAg ICAgIHwgWWVzICAgICB8fA0KICAgICAgNSAgfCAgVHJ1c3Rab25lICAgfCBObyAgICAgICAgICAg IHwgTm8gICAgICB8fA0KICAgICAgNiAgfCAgVHJ1c3Rab25lICAgfCBObyAgICAgICAgICAgIHwg WWVzICAgICB8fA0KICAgICAgNyAgfCAgVHJ1c3Rab25lICAgfCBZZXMgICAgICAgICAgIHwgTm8g ICAgICB8fA0KICAgICAgOCAgfCAgVHJ1c3Rab25lICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAg ICB8fA0KICAgICAgOSAgfCAgVFBNICAgICAgICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8 fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9kdWxlLTAxDQogICAgIDEwICB8ICBU UE0gICAgICAgICB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDExICB8ICBUUE0g ICAgICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDEyICB8ICBUUE0gICAg ICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDEzICB8U2VjdXJlRWxlbWVu dCB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE0ICB8U2VjdXJlRWxlbWVudCB8 IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE1ICB8U2VjdXJlRWxlbWVudCB8IFll cyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE2ICB8U2VjdXJlRWxlbWVudCB8IFllcyAg ICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE3ICB8IEZpcm13YXJlICAgICB8IE5vICAgICAg ICAgICAgfCBObyAgICAgIHx8DQogICAgIDE4ICB8IEZpcm13YXJlICAgICB8IE5vICAgICAgICAg ICAgfCBZZXMgICAgIHx8DQogICAgIDE5ICB8IEZpcm13YXJlICAgICB8IFllcyAgICAgICAgICAg fCBObyAgICAgIHx8DQogICAgIDIwICB8IEZpcm13YXJlICAgICB8IFllcyAgICAgICAgICAgfCBZ ZXMgICAgIHx8DQogICAgIC4uLiB8ICAgLi4uICAgICAgICB8ICAgICAgICAgICAgICAgfCAgICAg ICAgIHx8DQoNCkFuZCBkcmFmdC1mZWRvcmtvdy1yYXRzLW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0 aW9uLTAxIGZ1cnRoZXIgc2NvcGVzIGl0c2VsZiBkb3duDQpieSBvbmx5IGJlaW5nIGFwcGxpY2Fi bGUgdG8gY2FzZXMgd2l0aCAiZW1iZWRkZWQiIGFwcHMgb25seSA9IFllcywgYW5kIHdoZXJlDQp0 aGUgc2VjdXJpdHkgcG9saWN5IGlzIG9ubHkgYW4gRXhhY3QgbWF0Y2ggYWdhaW5zdCByZWZlcmVu Y2UgdmFsdWVzID0gWWVzLg0KSSBiZWxpZXZlIHRoYXQgdGhlIHlhbmcgZHJhZnQgZG9lc24ndCBo YXZlIHRob3NlIHR3byByZXN0cmljdGlvbnMsIGZyb20gbXkgcmVhZGluZy4NCkhvd2V2ZXIsIHRo ZSBwb2ludCBpcyB0aGF0IGJvdGggZHJhZnRzIGFyZSBWRVJZIG5hcnJvdywgYW5kIGluIHRoZSB0 YWJsZSBzaG93biBhYm92ZSwNCm9ubHkgYWRkcmVzcyAxIG91dCBvZiAyMCBwb3NzaWJpbGllcyBp biB0aGF0IHNwYWNlLg0KDQpJbiBjb250cmFzdCwgdGhlIFRFRVAgV0cgZGVjaWRlZCB0aGF0IGl0 IHdhcyBub3QgaW50ZXJlc3RlZCBpbiBuYXJyb3cgc2NvcGluZ3MNCihzcGVjaWZpY2FsbHkgc29t ZXRoaW5nIEdsb2JhbCBQbGF0Zm9ybSBzcGVjaWZpYyksIGJ1dCBpbnN0ZWFkIHdhbnRlZCBvbmUg Z2VuZXJhbCBzb2x1dGlvbi4NCg0KSWYgdGhlIFJBVFMgV0cgc3BlbmRzIGVmZm9ydCBvbiBzb21l dGhpbmcgdGhhdCBvbmx5IGFkZHJlc3NlcyBhIHNpbmdsZSByb3cgb3V0IG9mIDIwKyByb3dzLA0K dGhlbiBkbyB3ZSBleHBlY3QgMTkrIG90aGVyIHNvbHV0aW9ucyB0byBhbHNvIGJlIGRvbmUgaW4g dGhlIFdHPyAgT3IgY291bGQgd2Ugd29yayBvbiB0aGluZ3MNCnRoYXQgYXJlIGJyb2FkZXIgYW5k IGhhcHBlbiB0byBhbHNvIHdvcmsgZm9yIHJvdyA5Pw0KDQpJJ3ZlIHNlZW4gb3RoZXJzIGNvbW1l bnRpbmcgb24gdGhlIGZhY3QgdGhhdCB0aGUgWUFORyBtb2R1bGUgb25seSBzdXBwb3J0cyBUUE1z IGFuZCBub3QNCm90aGVyIHRoaW5ncyAoRUFUcyBldGMpLCB3aGljaCB3b3VsZCBqdXN0IGFkZCBz dXBwb3J0IGZvciBhIGNvdXBsZSBtb3JlIHJvd3MsIGJ1dCBzdGlsbCBub3QNCmJlIGdlbmVyYWwu DQoNClBlcnNvbmFsbHksIEkgd291bGQgbXVjaCByYXRoZXIgc2VlIHRoZSBXRyBzcGVuZCBlZmZv cnQgb24gdGhpbmdzIHRoYXQgcmVhbGx5IGFyZSBnZW5lcmljLA0KaS5lLiwgd29yayB3aXRoIG9y IHdpdGhvdXQgaG9zdCBmaXJld2FsbHMsIHdvcmsgd2l0aCBtdWx0aXBsZSBSb1QvVEVFIHR5cGVz LCBldGMuLCByYXRoZXINCnRoYW4gc2VlaW5nIGFuIGV4cGxvc2lvbiBvZiBwb2ludCBzb2x1dGlv bnMuDQoNCkRhdmUNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhh bGYgT2YgU21pdGgsIE5lZA0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAxOSAxMDoxMiBB TQ0KVG86IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSA8aWFuLm9saXZlckBub2tpYS1i ZWxsLWxhYnMuY29tPjsgTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+ OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbT4NCkNjOiBy YXRzQGlldGYub3JnOyBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVy LmRlPg0KU3ViamVjdDogUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQg cmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQNCg0KUmlnaHQuIFRoaXMgaW1wbGllcyB0aGUg UkFUUyDigJx0b2tlbuKAnSBzaG91bGQgc3VwcG9ydCBleGlzdGluZyDigJxiaW5hcnnigJ0gZm9y bWF0cyBhcyBhbiBlbmNhcHN1bGF0aW9uIChzaWduZWQgYnkgYSBzZWNvbmQgVEEgd2hlcmUgdGhl IFRQTSBpcyBhIGZpcnN0IFRBKSBvciBhcyBhIGNvbnZleWFuY2UgKHVuc2lnbmVkPykgdG9rZW4u IFBvc3NpYmx5LCB0aGUgb25seSBhZGRlZCB2YWx1ZSBvZiB0aGUgbGF0dGVyIGlzIGEgdGFnIHRo YXQgaWRlbnRpZmllcyBpdCBhcyBhIFRQTSBiaW5hcnkgZm9ybWF0Pw0KDQoNCk9uIDExLzEwLzE5 LCAyMzoyMSBQTSwgIlJBVFMgb24gYmVoYWxmIG9mIE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0Vz cG9vKSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3Jn PiBvbiBiZWhhbGYgb2YgaWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPG1haWx0bzppYW4u b2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+PiB3cm90ZToNCg0KPiBSZW1vdGUgVFBNIGF0dGVz dGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNlc3NhcnkgdGhlIHNob3J0IHJ1biwgYnV0IGFyZSBv ZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBiZWxpZXZlIHRoYXQgPiBFQVQgd2lsbCByZXBs YWNlIFRQTSBhdHRlc3RhdGlvbnMgaW4gdGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVzKSBiZWNh dXNlIHRoZXkgYXJlIGZhciBtb3JlIGV4cHJlc3NpdmUuIEkga25vdyA+IG90aGVycyBiZWxpZXZl IHRoYXQgdG9vLg0KDQpJIHdvdWxkIGRpc2FncmVlIHdpdGggdGhlIHN0YXRlbWVudCBvZiAic2hv cnQgcnVuIiAuLi4gVFBNIGlzIHByYWN0aWNhbGx5IHRoZSBvbmx5IGV4aXN0aW5nIHN0YW5kYXJk aXNlZCAoaGFyZHdhcmUsIHNvZnR3YXJlLCBmaXJtd2FyZSwgbWVhc3VyZW1lbnQgLSB4ODYgb25s eSBldGMpIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIHVzZSwgaWU6IHByYWN0aWNh bGx5IGFsbCB4ODYgbWFjaGluZXMsICBUaGUgYXR0ZXN0YXRpb24gbWVjaGFuaXNtcyBwcm92aWRl ZCBhcmUgZ29pbmcgdG8gYmUgYXJvdW5kIGZvciBhIHZlcnkgbG9uZyB0aW1lLg0KDQpGcm9tIHRl bGNvIGV4cGVyaWVuY2UsIDMwIHllYXJzIGFnbyB3ZSBzYWlkIFNTNyB3b3VsZCBvbmx5IGJlIGFy b3VuZCBpbiB0aGUgc2hvcnQgdGVybS4NCg0KPiBUaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRp b24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUg Y3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlID4gdG8gYWRkIEVBVCB0byBpdC4NCg0KQWdyZWUN Cg0KSWFuDQoNCg0KLS0NCg0KRHIuIElhbiBPbGl2ZXINCg0KQ3liZXJzZWN1cml0eSBSZXNlYXJj aA0KDQpEaXN0aW5ndWlzaGVkIE1lbWJlciBvZiBUZWNobmljYWwgU3RhZmYNCg0KTm9raWEgQmVs bCBMYWJzDQoNCiszNTggNTAgNDgzIDYyMzcNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1h aWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+Pg0KU2VudDogMTEgTm92ZW1iZXIgMjAxOSAwMDo0 NA0KVG86IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPG1h aWx0bzpuY2Ftd2luZ0BjaXNjby5jb20+Pg0KQ2M6IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hv bHpAc2l0LmZyYXVuaG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIu ZGU+PjsgcmF0c0BpZXRmLi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi4ub3JnPiA8cmF0c0BpZXRmLm9y ZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW1JhdHNdIENhbGwgZm9yIGFk b3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdA0KDQoNCk9u IE5vdiAxMCwgMjAxOSwgYXQgMjoyMCBQTSwgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpIDxu Y2Ftd2luZ0BjaXNjby5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4+IHdyb3RlOg0KDQpT bywgTGF1cmVuY2UsIGFyZSB5b3Ugc3RpbGwgT0sgd2l0aCB0aGUgYWRvcHRpb24gb2YgdGhlIGN1 cnJlbnQgZHJhZnQgd2l0aCBhIHJlbmFtZSBmb3Igbm93Pw0KVGhhbmtzLCBOYW5jeQ0KDQpJIHRo aW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBhZGRpbmcgRUFU IHN1cHBvcnQgdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJlYWxseSBoaWdoLiBJdCBhIGNvcmUg dGhpbmcgdG8gZG8gdGhhdCBoZWxwcyBicmluZyB0b2dldGhlciB0aGUgdHdvIGF0dGVzdGF0aW9u IHdvcmxkcyBhbmQgbWFrZSB0aGUgVFBNIGFuZCBFQVQgd29yayBoZXJlIGxlc3MgbGlrZSBzaGlw cyBpbiB0aGUgbmlnaHQuDQoNClJlbW90ZSBUUE0gYXR0ZXN0YXRpb25zIGFyZSB1c2VmdWwgYW5k IG5lY2Vzc2FyeSB0aGUgc2hvcnQgcnVuLCBidXQgYXJlIG9mIHZlcnkgbGltaXRlZCBjYXBhYmls aXR5LiBJIGJlbGlldmUgdGhhdCBFQVQgd2lsbCByZXBsYWNlIFRQTSBhdHRlc3RhdGlvbnMgaW4g dGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVzKSBiZWNhdXNlIHRoZXkgYXJlIGZhciBtb3JlIGV4 cHJlc3NpdmUuIEkga25vdyBvdGhlcnMgYmVsaWV2ZSB0aGF0IHRvby4NCg0KSWYgd2UgZG9u4oCZ dCBpbmNsdWRlIEVBVCBpbiB0aGUgWUFORyBtb2RlIGl0IGlzIHNvcnQgb2YgbGlrZSBkZWZpbmlu ZyBIVFRQIHRvIG9ubHkgY29udmV5IEhUTUwgdG8gdGhlIGV4Y2x1c2lvbiBvZiBQREYuIFdl4oCZ cmUgZGVmaW5pbmcgYW4gYXR0ZXN0YXRpb24gcHJvdG9jb2wgdGhhdCBjYW4gb25seSBtb3ZlIG9u ZSBraW5kIG9mIGF0dGVzdGF0aW9uIGV2ZW4gdGhvdWdoIHdlIGhhdmUgY29uc2Vuc3VzIG9uIHdo YXQgdGhlIG90aGVyIG9uZSBsb29rcyBsaWtlLg0KDQpJdCBzZWVtcyByZWxhdGl2ZWx5IHNpbXBs ZSB0byBhZGQgRUFUIHN1cHBvcnQgKG9yIHByb21pc2UgdG8gYWRkIEVBVCBzdXBwb3J0KS4gUHJl dHR5IHN1cmUgSSBoZWFyZCBIZW5rIGFncmVlIHRvIGFkZCBpdC4NCg0KVGh1cywgSSBhbSBvcHBv c2VkIHRvIGFkb3B0aW9uIHdpdGggdGhlIGN1cnJlbnQgVFBNLW9ubHkgZHJhZnQuIEnigJlkIGJl IE9LIHdpdGggdGhlIGN1cnJlbnQgZHJhZnQgYW5kIGEgcHJvbWlzZSB0byBhZGQgRUFUIHRvIGl0 Lg0KDQpMTA0KDQo= --_000_MWHPR21MB07844F61BEFAE03F9E7DD290A3770MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNv bm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29y ZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4N CjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9 IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ QXMgZmFyIGFzIEkgY2FuIHVuZGVyc3RhbmQgZnJvbSBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2lj LXlhbmctbW9kdWxlLTAxIGFuZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5kcmFmdC1mZWRvcmtvdy1yYXRzLW5l dHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxLCB0aGV5IGJyZWFrIGRvd24gdGhlIHVzZSBjYXNl PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPnNwYWNlIGFzIGZvbGxvd3M6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgUmVxdWlyZW1lbnRzPzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xh cztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJiM0MzstLS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0tLS0tLS0tJiM0MzstLS0t LS0tLS0mIzQzOyYjNDM7LS0tLS0tLS0tLS0tLS0tPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8Jm5ic3A7IFJvVCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8IEhvc3QgRmlyZXdhbGwgfCBQcml2YWN5IHx8Jm5ic3A7Jm5ic3A7IFNvbHV0aW9uJm5i c3A7Jm5ic3A7Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7fCZuYnNw OyBUeXBlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsm bmJzcDsgRW5hYmxlZCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5lZWRlZCZuYnNwOyB8fCZu YnNwOyZuYnNwOyZuYnNwOyBQaWVjZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0t LS0tLS0tLS0mIzQzOy0tLS0tLS0tLSYjNDM7JiM0MzstLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IDEmbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAyJm5ic3A7IHwmbmJzcDsgU0dYJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDMmbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7fCBZZXMmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNCZuYnNwOyB8Jm5ic3A7IFNH WCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNSZuYnNwOyB8Jm5i c3A7IFRydXN0Wm9uZSZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDYmbmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUm bmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgNyZuYnNwOyB8Jm5ic3A7IFRydXN0Wm9uZSZuYnNwOyZuYnNwOyB8IFllcyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA4Jm5ic3A7 IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA5Jm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2lj LXlhbmctbW9kdWxlLTAxPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAxMCZuYnNwOyB8Jm5ic3A7IFRQTSZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxMSZuYnNwOyB8Jm5ic3A7IFRQTSZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMx RjQ5N0QiPiZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsxMiZuYnNwOyB8Jm5ic3A7IFRQTSZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFll cyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTMmbmJzcDsgfFNlY3VyZUVsZW1lbnQg fCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAx NCZuYnNwOyB8U2VjdXJlRWxlbWVudCB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAxNSZuYnNwOyB8U2VjdXJlRWxlbWVudCB8IFllcyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxNiZuYnNwOyB8U2VjdXJlRWxlbWVu dCB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8IFllcyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDt8fDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpD b25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTcmbmJzcDsg fCBGaXJtd2FyZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE4Jm5ic3A7IHwgRmlybXdhcmUmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgMTkmbmJzcDsgfCBGaXJtd2FyZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAyMCZu YnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAuLi4gfCZuYnNwOyZuYnNwOyAuLi4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJz cDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BbmQgZHJhZnQtZmVkb3Jr b3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi0wMSBmdXJ0aGVyIHNjb3BlcyBpdHNl bGYgZG93bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5ieSBvbmx5IGJlaW5nIGFwcGxpY2FibGUgdG8gY2FzZXMg d2l0aCAmcXVvdDtlbWJlZGRlZCZxdW90OyBhcHBzIG9ubHkgPSBZZXMsIGFuZCB3aGVyZTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj50aGUgc2VjdXJpdHkgcG9saWN5IGlzIG9ubHkgYW4gRXhhY3QgbWF0Y2ggYWdh aW5zdCByZWZlcmVuY2UgdmFsdWVzID0gWWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JIGJlbGlldmUgdGhh dCB0aGUgeWFuZyBkcmFmdCBkb2Vzbid0IGhhdmUgdGhvc2UgdHdvIHJlc3RyaWN0aW9ucywgZnJv bSBteSByZWFkaW5nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Ib3dldmVyLCB0aGUgcG9pbnQgaXMgdGhhdCBi b3RoIGRyYWZ0cyBhcmUgVkVSWSBuYXJyb3csIGFuZCBpbiB0aGUgdGFibGUgc2hvd24gYWJvdmUs PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPm9ubHkgYWRkcmVzcyAxIG91dCBvZiAyMCBwb3NzaWJpbGllcyBpbiB0 aGF0IHNwYWNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SW4gY29udHJh c3QsIHRoZSBURUVQIFdHIGRlY2lkZWQgdGhhdCBpdCB3YXMgbm90IGludGVyZXN0ZWQgaW4gbmFy cm93IHNjb3BpbmdzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPihzcGVjaWZpY2FsbHkgc29tZXRoaW5nIEdsb2Jh bCBQbGF0Zm9ybSBzcGVjaWZpYyksIGJ1dCBpbnN0ZWFkIHdhbnRlZCBvbmUgZ2VuZXJhbCBzb2x1 dGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPklmIHRoZSBSQVRTIFdH IHNwZW5kcyBlZmZvcnQgb24gc29tZXRoaW5nIHRoYXQgb25seSBhZGRyZXNzZXMgYSBzaW5nbGUg cm93IG91dCBvZiAyMCYjNDM7IHJvd3MsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoZW4gZG8gd2UgZXhwZWN0 IDE5JiM0Mzsgb3RoZXIgc29sdXRpb25zIHRvIGFsc28gYmUgZG9uZSBpbiB0aGUgV0c/Jm5ic3A7 IE9yIGNvdWxkIHdlIHdvcmsgb24gdGhpbmdzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoYXQgYXJlIGJyb2Fk ZXIgYW5kIGhhcHBlbiB0byBhbHNvIHdvcmsgZm9yIHJvdyA5PzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+SSd2ZSBzZWVuIG90aGVycyBjb21tZW50aW5nIG9uIHRoZSBmYWN0 IHRoYXQgdGhlIFlBTkcgbW9kdWxlIG9ubHkgc3VwcG9ydHMgVFBNcyBhbmQgbm90PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPm90aGVyIHRoaW5ncyAoRUFUcyBldGMpLCB3aGljaCB3b3VsZCBqdXN0IGFkZCBzdXBw b3J0IGZvciBhIGNvdXBsZSBtb3JlIHJvd3MsIGJ1dCBzdGlsbCBub3Q8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ YmUgZ2VuZXJhbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlBlcnNvbmFs bHksIEkgd291bGQgbXVjaCByYXRoZXIgc2VlIHRoZSBXRyBzcGVuZCBlZmZvcnQgb24gdGhpbmdz IHRoYXQgcmVhbGx5IGFyZSBnZW5lcmljLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5pLmUuLCB3b3JrIHdpdGgg b3Igd2l0aG91dCBob3N0IGZpcmV3YWxscywgd29yayB3aXRoIG11bHRpcGxlIFJvVC9URUUgdHlw ZXMsIGV0Yy4sIHJhdGhlcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj50aGFuIHNlZWluZyBhbiBleHBsb3Npb24g b2YgcG9pbnQgc29sdXRpb25zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ RGF2ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8 L2I+IFJBVFMgJmx0O3JhdHMtYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwv Yj4NClNtaXRoLCBOZWQ8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAx OSAxMDoxMiBBTTxicj4NCjxiPlRvOjwvYj4gT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28p ICZsdDtpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20mZ3Q7OyBMYXVyZW5jZSBMdW5kYmxh ZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs7IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13 aW5nKSAmbHQ7bmNhbXdpbmdAY2lzY28uY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gcmF0c0BpZXRm Lm9yZzsgSGVuayBCaXJraG9seiAmbHQ7aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSZn dDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0 ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQ8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJpZ2h0LiBUaGlzIGltcGxpZXMgdGhlIFJBVFMg4oCcdG9r ZW7igJ0gc2hvdWxkIHN1cHBvcnQgZXhpc3Rpbmcg4oCcYmluYXJ54oCdIGZvcm1hdHMgYXMgYW4g ZW5jYXBzdWxhdGlvbiAoc2lnbmVkIGJ5IGEgc2Vjb25kIFRBIHdoZXJlIHRoZSBUUE0gaXMgYSBm aXJzdCBUQSkgb3IgYXMgYSBjb252ZXlhbmNlICh1bnNpZ25lZD8pIHRva2VuLiBQb3NzaWJseSwg dGhlIG9ubHkgYWRkZWQgdmFsdWUgb2YgdGhlIGxhdHRlciBpcw0KIGEgdGFnIHRoYXQgaWRlbnRp ZmllcyBpdCBhcyBhIFRQTSBiaW5hcnkgZm9ybWF0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIDExLzEwLzE5LCAyMzoyMSBQTSwgJnF1b3Q7UkFU UyBvbiBiZWhhbGYgb2YgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pJnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5v cmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVs bC1sYWJzLmNvbSI+aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xv cjpibGFjayI+Jmd0OyBSZW1vdGUgVFBNIGF0dGVzdGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNl c3NhcnkgdGhlIHNob3J0IHJ1biwgYnV0IGFyZSBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4g SSBiZWxpZXZlIHRoYXQgJmd0OyBFQVQgd2lsbCByZXBsYWNlIFRQTSBhdHRlc3RhdGlvbnMNCiBp biB0aGUgbG9uZyBydW4gKG1heWJlIGRlY2FkZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUg ZXhwcmVzc2l2ZS4gSSBrbm93ICZndDsgb3RoZXJzIGJlbGlldmUgdGhhdCB0b28uJm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9y OmJsYWNrIj5JIHdvdWxkIGRpc2FncmVlIHdpdGggdGhlIHN0YXRlbWVudCBvZiAmcXVvdDtzaG9y dCBydW4mcXVvdDsgLi4uIFRQTSBpcyBwcmFjdGljYWxseSB0aGUgb25seSBleGlzdGluZyBzdGFu ZGFyZGlzZWQgKGhhcmR3YXJlLCBzb2Z0d2FyZSwgZmlybXdhcmUsIG1lYXN1cmVtZW50IC0geDg2 DQogb25seSBldGMpIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIHVzZSwgaWU6IHBy YWN0aWNhbGx5IGFsbCB4ODYgbWFjaGluZXMsJm5ic3A7IFRoZSBhdHRlc3RhdGlvbiBtZWNoYW5p c21zIHByb3ZpZGVkIGFyZSBnb2luZyB0byBiZSBhcm91bmQgZm9yIGEgdmVyeSBsb25nIHRpbWUu Jm5ic3A7DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPkZyb20gdGVsY28gZXhwZXJpZW5jZSwgMzAgeWVhcnMgYWdvIHdl IHNhaWQgU1M3IHdvdWxkIG9ubHkgYmUgYXJvdW5kIGluIHRoZSBzaG9ydCB0ZXJtLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+Jmd0OyBUaHVzLCBJ IGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4g SeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlICZndDsgdG8g YWRkIEVBVCB0byBpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91 bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+QWdyZWU8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtj b2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3 aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPklhbjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xv cjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJT aWduYXR1cmUiPg0KPGRpdiBpZD0iZGl2dGFnZGVmYXVsdHdyYXBwZXIiPg0KPHAgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+LS0gPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+RHIuIElhbiBPbGl2ZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5DeWJlcnNlY3VyaXR5 IFJlc2VhcmNoPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RGlzdGluZ3Vpc2hlZCBNZW1iZXIgb2YgVGVj aG5pY2FsIFN0YWZmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Tm9raWEgQmVsbCBMYWJzPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+JiM0MzszNTggNTAgNDgzIDYyMzc8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4 dC1hbGlnbjpjZW50ZXIiPg0KPGhyIHNpemU9IjEiIHdpZHRoPSI5OSUiIGFsaWduPSJjZW50ZXIi Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+IExhdXJlbmNl IEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGds QGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDs8YnI+DQo8Yj5TZW50OjwvYj4gMTEgTm92ZW1iZXIg MjAxOSAwMDo0NDxicj4NCjxiPlRvOjwvYj4gTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpICZs dDs8YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tIj5uY2Ftd2luZ0BjaXNjby5jb208 L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gSGVuayBCaXJraG9seiAmbHQ7PGEgaHJlZj0ibWFpbHRv OmhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGUiPmhlbmsuYmlya2hvbHpAc2l0LmZyYXVu aG9mZXIuZGU8L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYuLm9yZyI+cmF0c0Bp ZXRmLi5vcmc8L2E+ICZsdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRm Lm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRv cHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0PC9zcGFuPg0K PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIE5vdiAxMCwgMjAxOSwgYXQgMjoyMCBQTSwgTmFuY3kgQ2Ft LVdpbmdldCAobmNhbXdpbmcpICZsdDs8YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29t Ij5uY2Ftd2luZ0BjaXNjby5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5TbywgTGF1cmVuY2UsIGFyZSB5b3Ugc3RpbGwg T0sgd2l0aCB0aGUgYWRvcHRpb24gb2YgdGhlIGN1cnJlbnQgZHJhZnQgd2l0aCBhIHJlbmFtZSBm b3Igbm93Pzxicj4NClRoYW5rcywgTmFuY3k8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JIHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8g dGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBhZGRpbmcgRUFUIHN1cHBvcnQgdG8gdGhpcyBZQU5H IHByb3RvY29sIGlzIHJlYWxseSBoaWdoLiBJdCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxw cyBicmluZyB0b2dldGhlciB0aGUgdHdvIGF0dGVzdGF0aW9uIHdvcmxkcyBhbmQgbWFrZSB0aGUg VFBNIGFuZCBFQVQgd29yaw0KIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5SZW1vdGUgVFBNIGF0 dGVzdGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNlc3NhcnkgdGhlIHNob3J0IHJ1biwgYnV0IGFy ZSBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBiZWxpZXZlIHRoYXQgRUFUIHdpbGwgcmVw bGFjZSBUUE0gYXR0ZXN0YXRpb25zIGluIHRoZSBsb25nIHJ1biAobWF5YmUgZGVjYWRlcykgYmVj YXVzZSB0aGV5IGFyZSBmYXIgbW9yZSBleHByZXNzaXZlLg0KIEkga25vdyBvdGhlcnMgYmVsaWV2 ZSB0aGF0IHRvby4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5JZiB3ZSBkb27igJl0IGluY2x1ZGUgRUFUIGluIHRoZSBZQU5HIG1vZGUgaXQgaXMg c29ydCBvZiBsaWtlIGRlZmluaW5nIEhUVFAgdG8gb25seSBjb252ZXkgSFRNTCB0byB0aGUgZXhj bHVzaW9uIG9mIFBERi4gV2XigJlyZSBkZWZpbmluZyBhbiBhdHRlc3RhdGlvbiBwcm90b2NvbCB0 aGF0IGNhbiBvbmx5IG1vdmUgb25lIGtpbmQgb2YgYXR0ZXN0YXRpb24gZXZlbiB0aG91Z2gNCiB3 ZSBoYXZlIGNvbnNlbnN1cyBvbiB3aGF0IHRoZSBvdGhlciBvbmUgbG9va3MgbGlrZS48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JdCBzZWVtcyByZWxhdGl2 ZWx5IHNpbXBsZSB0byBhZGQgRUFUIHN1cHBvcnQgKG9yIHByb21pc2UgdG8gYWRkIEVBVCBzdXBw b3J0KS4gUHJldHR5IHN1cmUgSSBoZWFyZCBIZW5rIGFncmVlIHRvIGFkZCBpdC48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5UaHVzLCBJIGFtIG9wcG9zZWQg dG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sg d2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBwcm9taXNlIHRvIGFkZCBFQVQgdG8gaXQuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TEw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MWHPR21MB07844F61BEFAE03F9E7DD290A3770MWHPR21MB0784namp_-- From nobody Mon Nov 11 20:17:05 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 130CF1200C3 for ; Mon, 11 Nov 2019 20:17:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMq0pZ3p6kIE for ; Mon, 11 Nov 2019 20:16:59 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7880A12002F for ; Mon, 11 Nov 2019 20:16:59 -0800 (PST) Received: from [10.141.0.126] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UNbuiSj2iMfejUNbuiJcTK; Mon, 11 Nov 2019 21:16:58 -0700 From: Laurence Lundblade Message-Id: <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_AA06634F-59CB-4FF0-B882-631A4442EFD4" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 11 Nov 2019 20:16:58 -0800 In-Reply-To: <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> Cc: =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , Michael Richardson , "rats@ietf.org" To: "Smith, Ned" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfNb0NuyZTdrk/r4gaNK232/3+r73HumdA2NZdD1D7n6pymKbdNCW75GKeWJlWfJqUTZ/hYfndN6TQwuErYL7ZEBbhgx6cwd5nWm4zQQQK6OH/eaKirD0 dz7PlRxAqrYkxAZpM30FpSB71ARI8uSL9o2gow34Mz8rIXKEnD0vCERyNQcoA1MoRKKmP8HnYWcYtnBi134mDf3LF83zZGpenwaFfxT96IOTHS2qyKomYV7m +C2pLlAQQQ4KIuF6N7oLuCEa5QVEbun+MMO+UMPQWLACLS7rKTQM7e5hS9CsJOJu Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 04:17:04 -0000 --Apple-Mail=_AA06634F-59CB-4FF0-B882-631A4442EFD4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 What is most important for me is that the YANG document allow for EAT = tokens as that seems like an important upgrade path / alternative given = that EATs are much more capable. But flip it around. In RATS maybe it should be possible for TPM-based = attestations to go anywhere an EAT goes. You should be able move TPM = attestations around by HTTP, or in TLS extension points or maybe even as = an IMAP extension just like you can with EAT. To some degree FIDO has = done it. It has a pluggable attestation architecture that allows several = formats including TPM-based, Android SafetyNet (which is not Android key = store) and some FIDO-specific schemes that are more EAT like. That seems like it takes you to a clear demarcation between: Self-securing signed attestation token Token conveyance protocol This seems very good in concept. We often separate like this in protocol = design. Then one way to look at the RATS work is in three: EAT Attestation Token TPM Token (that can be carried by HTTP and almost any conceivable = protocol extension) A very specific YANG-based conveyance protocol for routers because = that=E2=80=99s how routers like it and it is important for the RATS work = group constituency. Maybe we=E2=80=99ll find another specific conveyance protocol we=E2=80=99l= l want to address, but in general we don=E2=80=99t have to. All the web = app, IoS app and Android app frameworks will be OK just like they are = today for things like Android KeyStore. If you look at it this way, 1) then EAT is fine as, 2) we need to define = a new "TPM Token" format that is sort of an alternative to EAT, and 3) = the YANG module has to be tweaked so it is a carrier of EATs and TPM = Tokens. (I=E2=80=99m probably glossing over some of the complexity with = YANG and TPMs). TPM Token would not be a general claims carrier like EAT. TPM HW is = super locked down and limited and TPM Token would just do what TPMs can = do. Probably the =E2=80=9Cclaims" amount to a few PCRs. Since the TPM = signing format is fixed, the TPM Token signing format would be fixed. = TPM Token is sort of a serialization of the output of a TPM. (It can=E2=80= =99t be directly COSE as TPM=E2=80=99s can=E2=80=99t do RFC 8152 section = 4.4, the COSE-specific creation of the to-be-signed bytes, when signing; = probably similarly not JOSE). Since TPM Token is simple, will never = change and won=E2=80=99t have extensions we don=E2=80=99t need all the = weight of CDDL or YANG or such and can maybe go directly to JSON, XML or = CBOR. LL > On Nov 11, 2019, at 4:56 PM, Smith, Ned wrote: >=20 > YANG I already being used to describe attestation flows and = attestation related data. So the reason why is it is already deployed. >=20 > YANG has been used as an IM language but more commonly as a DML.=20 >=20 > When trying to talk about attestation "Claims" it helps if we're = speaking the same language.=20 >=20 > =EF=BB=BFOn 11/11/19, 13:33 PM, "RATS on behalf of Sch=C3=B6nw=C3=A4lder= , J=C3=BCrgen" wrote: >=20 > Hi, >=20 > we commonly call YANG a data modeling language and not an = information > modeling language. Can someone explain why you want to use YANG? >=20 > /js >=20 > On Mon, Nov 11, 2019 at 09:27:09PM +0000, Smith, Ned wrote: >> You=E2=80=99re saying YANG fills a gap that is similar to what = OpenAPI/RAML fills? >>=20 >> It could be doing more than this as well, such as defining claims (as = was suggested in a previous email by I think Michael). If RATS = determined that the way to specify a Claim in the information model was = via CDDL (only) and there is a YANG expression of it, then that implies = a CDDL to YANG mapping is required. (Is that reasonable?). >>=20 >> Or RATS says that it is reasonable to use either/both CDDL and YANG = for Claims expressions. This suggests there are CDDL and YANG mappings = to whatever are the target DMLs (JOSE, COSE, DER, something else?). Does = YANG support DML mappings to JOSE, COSE and DER or just to YANG? Does = CDDL support mappings to DER and YANG (something else)? >>=20 >> Ideally CDDL can be mapped to other information modelling languages = (e.g. YANG) so that only one normative expression needs to be canonized. = However, that implies extra work on behalf of the YANG drafts to come up = with the CDDL equivalent. Maybe that is unnecessary extra work for = consistency sake? That would force the conversations around whether = =E2=80=98time=E2=80=99 and =E2=80=98ticks=E2=80=99 are the same = information model expression (for example). >>=20 >> -Ned >>=20 >> On 11/11/19, 11:52 AM, "RATS on behalf of Laurence Lundblade" = on behalf of = lgl@island-resort.com> wrote: >>=20 >> One more note on this. It seems wrong-headed to try express claims in = YANG. To do that we=E2=80=99d need to invent a YANG signing standard = (YOSE?). Seems like YANG should be thought of as RPC / conveyance / = transport here, not as a way to format a signed attestation token. >>=20 >> LL >>=20 >>=20 >>=20 >> On Nov 11, 2019, at 11:47 AM, Laurence Lundblade = > wrote: >>=20 >> On Nov 10, 2019, at 9:20 PM, Michael Richardson = > wrote: >>=20 >>=20 >> I think the value add to the larger RATS effort of adding EAT support >> to this YANG protocol is really high. It a core thing to do that = helps >> bring together the two attestation worlds and make the TPM and EAT >> work here less like ships in the night. >>=20 >> Can you explain what it would mean to add EAT support for a YANG = module? >>=20 >> The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a YANG = expert, but maybe like this: >>=20 >> Server Device >> GetAttestationTypes =E2=80=94> >> <- TYPE_TPM, TYPE_CWT /* bit flags */ >>=20 >> GetAttestation(TYPE_CWT , nonce) =E2=80=94> >> <=E2=80=94 CWT Token /* a full signed = token */ >>=20 >> I assume YANG can carry opaque binary data of moderate size. >>=20 >> The yang module information model would have an element for a nonce = and for an opaque EAT. It would not describe any internals of the EAT. = The information model for the EAT is separate in the EAT document. >>=20 >> LL >>=20 >>=20 >>=20 >>=20 >=20 >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 >=20 > --=20 > Juergen Schoenwaelder Jacobs University Bremen gGmbH > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | = Germany > Fax: +49 421 200 3103 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats >=20 >=20 --Apple-Mail=_AA06634F-59CB-4FF0-B882-631A4442EFD4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
What is most important for me is that the YANG document allow = for EAT tokens as that seems like an important upgrade path / = alternative given that EATs are much more capable.

But flip it around. In = RATS maybe it should be possible for TPM-based attestations to go = anywhere an EAT goes. You should be able move TPM attestations around by = HTTP, or in TLS extension points or maybe even as an IMAP extension just = like you can with EAT. To some degree FIDO has done it. It has a = pluggable attestation architecture that allows several formats including = TPM-based, Android SafetyNet (which is not Android key store) and some = FIDO-specific schemes that are more EAT like.

That seems like it takes you to a clear = demarcation between:
  • Self-securing signed attestation token
  • Token= conveyance protocol

This seems very good in concept. We often separate like this = in protocol design.

Then one way to look at the RATS work is in three:
  1. EAT Attestation = Token
  2. TPM Token (that can be carried by HTTP and = almost any conceivable protocol extension)
  3. A very = specific YANG-based conveyance protocol for routers because that=E2=80=99s= how routers like it and it is important for the RATS work group = constituency.

Maybe we=E2=80=99ll find another specific conveyance protocol = we=E2=80=99ll want to address, but in general we don=E2=80=99t have to. = All the web app, IoS app and Android app frameworks will be OK just like = they are today for things like Android KeyStore.

If you look at it this way, 1) then EAT = is fine as, 2) we need to define a new "TPM Token" format that is sort = of an alternative to EAT, and 3) the YANG module has to be tweaked so it = is a carrier of EATs and TPM Tokens. (I=E2=80=99m probably glossing over = some of the complexity with YANG and TPMs).

TPM Token would not be a general claims = carrier like EAT. TPM HW is super locked down and limited and TPM Token = would just do what TPMs can do. Probably the =E2=80=9Cclaims" amount to = a few PCRs. Since the TPM signing format is fixed, the TPM Token signing = format would be fixed. TPM Token is sort of a serialization of the = output of a TPM. (It can=E2=80=99t be directly COSE as TPM=E2=80=99s = can=E2=80=99t do RFC 8152 section 4.4, the COSE-specific creation of the = to-be-signed bytes, when signing; probably similarly not JOSE). Since = TPM Token is simple, will never change and won=E2=80=99t have extensions = we don=E2=80=99t need all the weight of CDDL or YANG or such and can = maybe go directly to JSON, XML or CBOR.

LL




On Nov 11, 2019, at 4:56 PM, Smith, Ned <ned.smith@intel.com>= wrote:

YANG I already being used to describe attestation flows and = attestation related data. So the reason why is it is already = deployed.

YANG has been used as an IM = language but more commonly as a DML.

When = trying to talk about attestation "Claims" it helps if we're speaking the = same language.

=EF=BB=BFOn 11/11/19, 13:33 = PM, "RATS on behalf of Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" <rats-bounces@ietf.org= on behalf of J.Schoenwaelder@jacobs-university.de> wrote:

   Hi,

   we commonly call YANG a data modeling = language and not an information
=    modeling language. Can someone explain why you want to = use YANG?

   /js

   On Mon, Nov 11, 2019 at = 09:27:09PM +0000, Smith, Ned wrote:
You=E2=80=99re saying YANG fills a gap that is = similar to what OpenAPI/RAML fills?

It = could be doing more than this as well, such as defining claims (as was = suggested in a previous email by I think Michael). If RATS determined = that the way to specify a Claim in the information model was via CDDL = (only) and there is a YANG expression of it, then that implies a CDDL to = YANG mapping is required. (Is that reasonable?).

Or RATS says that it is reasonable to use either/both CDDL = and YANG for Claims expressions. This suggests there are CDDL and YANG = mappings to whatever are the target DMLs (JOSE, COSE, DER, something = else?). Does YANG support DML mappings to JOSE, COSE and DER or just to = YANG? Does CDDL support mappings to DER and YANG (something else)?

Ideally CDDL can be mapped to other = information modelling languages (e.g. YANG) so that only one normative = expression needs to be canonized. However, that implies extra work on = behalf of the YANG drafts to come up with the CDDL equivalent. Maybe = that is unnecessary extra work for consistency sake? That would force = the conversations around whether =E2=80=98time=E2=80=99 and =E2=80=98ticks= =E2=80=99 are the same information model expression (for example).

-Ned

On 11/11/19, = 11:52 AM, "RATS on behalf of Laurence Lundblade" <rats-bounces@ietf.org<mailto:rats-bounces@ietf.org> on behalf of lgl@island-resort.com<mailto:lgl@island-resort.com>> wrote:

One more note on this. It seems wrong-headed = to try express claims in YANG. To do that we=E2=80=99d need to invent a = YANG signing standard (YOSE?). Seems like YANG should be thought of as = RPC / conveyance / transport here, not as a way to format a signed = attestation token.

LL



On Nov 11, 2019, at 11:47 AM, = Laurence Lundblade <lgl@island-resort.com<mailto:lgl@island-resort.com>> wrote:

On Nov 10, 2019, at 9:20 PM, Michael = Richardson <mcr+ietf@sandelman.ca<mailto:mcr+ietf@sandelman.ca>> wrote:


I think the value add to the = larger RATS effort of adding EAT support
to this YANG = protocol is really high. It a core thing to do that helps
bring together the two attestation worlds and make the TPM = and EAT
work here less like ships in the night.

Can you explain what it would mean to add EAT = support for a YANG module?

The EAT is an = opaque chunk of data in YANG. I=E2=80=99m not a YANG expert, but maybe = like this:

Server =             &n= bsp;           &nbs= p;     Device
GetAttestationTypes = =E2=80=94>
=             &n= bsp;           &nbs= p;      <- TYPE_TPM, TYPE_CWT /* bit = flags */

GetAttestation(TYPE_CWT , nonce) = =E2=80=94>
=             &n= bsp;           &nbs= p;      <=E2=80=94 CWT Token /* a full = signed token */

I assume YANG can carry = opaque binary data of moderate size.

The = yang module information model would have an element for a nonce and for = an opaque EAT. It would not describe any internals of the EAT. The = information model for the EAT is separate in the EAT document.

LL





_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


=    --
   Juergen = Schoenwaelder =           Jacobs = University Bremen gGmbH
   Phone: +49 421 = 200 3587         Campus Ring 1 | = 28759 Bremen | Germany
   Fax: =   +49 421 200 3103 =         <https://www.jacobs-university.de/>
=    _______________________________________________
   RATS mailing list
=    RATS@ietf.org
   https://www.ietf.org/mailman/listinfo/rats



= --Apple-Mail=_AA06634F-59CB-4FF0-B882-631A4442EFD4-- From nobody Mon Nov 11 20:19:26 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 863E51200C3 for ; Mon, 11 Nov 2019 20:19:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZzjLUqHS3cPu for ; Mon, 11 Nov 2019 20:19:22 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790101.outbound.protection.outlook.com [40.107.79.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31C5412002F for ; Mon, 11 Nov 2019 20:19:21 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cuTcs+iRW3KK1oU58TyLNbzLYAekjWvE9n0VAnuu7NWCd2NyhPwxSO7SxeX4AjpjN28PVTdEjAZ8eITRQUPmvnAyNXTY1XL5kXetnXpFxPBvSFAvfvn6vj206eKS6FcWOFMqCGSS7FlmQ3h4AuDwda99LOtftgQRyXc6gaUjdso3+FB4hYUTgdJjQRC/6VvrHZXFTC+ukqjK+76flmaldueo6Xyph1r3qWvtWKo2l1rDgWVYyoz5XdZvaOOBXqKDMJaW4JD58Yzx/Mbpug3gagWg3KnqskU/b9LSTmJ23atKPd0Lx6COJLcg6JSwoBxBLnfQxzaLdwTdcVyhXSuXIg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zs5i4QhhU/OpOMBjsPNomhKz6Fm0sM08VFPAXm94WZA=; b=H9v4BbIjAoHVqq8mXzOvjJnN1H+o/rOLB+zzl4uD//xbBTr9t6Vd9CFlIX0MVP/dXNQcQMYaKZGTQ2c7e8vfhij3Meyi3hn9GbaDSRRvvlFceUhNRlxvPl1C+e/t50cDMOK4ui/5Q2xWiZoRvnz1w5/FgwCnfgNMbazclg5iYAm4bbm5XtFwOuUlcf2+xTPwdQHYV+Ex/0wf2b6UtigqhQ3btMr9EEdJq7Ec3HePOvd3/ctCDiCWVwXbftc0H6H6NN6ospBx4MhQ/HIxiZzVYjftbEX2PdXZ7SJa8Qg1qFiEyftvLFqSisnvlXyfsyU6HN2rQcj0gCpjPMsxJ59uNg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zs5i4QhhU/OpOMBjsPNomhKz6Fm0sM08VFPAXm94WZA=; b=imysGxsu1sPrnneKcQ6Pjz9/Nd4ehGpao/njHBzpHxi1fNIJHf9HplEhFPo+kVpxGwS40N1XdLIoxKl67pfKJLnDo/Lw4HxlmHsIWwP2IgtsJEB1L5G27iVcCEwEG5tEUTAxjkuSLJVq/EBqd6NzHzUJ+Jj0vR0kDZTE2398cLY= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0175.namprd21.prod.outlook.com (10.173.52.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.15; Tue, 12 Nov 2019 04:19:18 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Tue, 12 Nov 2019 04:19:18 +0000 From: Dave Thaler To: "Smith, Ned" , Henk Birkholz , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAG6hAP//f1YAgADOEwCAABvMgIAACkiAgABGoACAAMXLwA== Date: Tue, 12 Nov 2019 04:19:18 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T04:19:17.8278687Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=085d92a5-63d6-45d4-b591-38ec79adec87; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [73.59.106.235] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f63408b4-1bc1-49a1-b5b7-08d767277ca7 x-ms-traffictypediagnostic: MWHPR21MB0175: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(39860400002)(376002)(346002)(136003)(189003)(199004)(8936002)(256004)(14454004)(66066001)(74316002)(2501003)(7736002)(478600001)(71200400001)(71190400001)(3846002)(6116002)(790700001)(10290500003)(25786009)(5660300002)(52536014)(99286004)(33656002)(86362001)(10090500001)(55016002)(26005)(6306002)(54896002)(6436002)(9686003)(7696005)(64756008)(476003)(229853002)(486006)(76176011)(76116006)(66556008)(66946007)(66446008)(81166006)(81156014)(8676002)(66476007)(186003)(8990500004)(22452003)(316002)(446003)(102836004)(2906002)(110136005)(11346002)(6506007)(6246003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0175; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: zx9TqzAUkI5bv09q9Rv1zrZT+k1vDSM87GKQ7XOmjTYnAOacuyBlkT2WMKLJMXRd8tioOnwlxi93m/uM25qUO9aNTxqj4qc5rMzhrk2zTeutG25uBiQolKZUSBb7pnhFEKaDJHkXfc7FU5vK89uhCFvKZz7oAABo5fcJk30sPsyNcdQtzgmk/8t6rSN+JA9FvC77k4Gnbv0+tPLHcxsZEVz/aiYypSH0WWX35TRxZMVUtPoCDha6dgOyWk1uUN11ihVZaYHD6N9zvyOxeLuWy0I42WKSWxqR8ybzXo+up8VwMkRD3jt2ldjEW0St4N/TDkJF6Or0VhZ3MVtflElB9qMW0S6IfId7Tj+gP5Y29P6E/JWMrcz5hHVow0bhs+OvMTu62sNhYBi7zPlt51+sptyodFzOiTNhoab/TJb91U03+tVwjnW37IIsnpp434TU x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB078487DA04C7C17F2019E7E6A3770MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f63408b4-1bc1-49a1-b5b7-08d767277ca7 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 04:19:18.8446 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Bw2qWKXQW0mP6voG/5s2H9k1AI1zcreo4OP6OESamtI0zChJDRQJXj9dmqUKlykBVI3KoKCcW3M1Tq4VCo73i5TWUjmDjl+L1KIKowOVlGg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0175 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 04:19:24 -0000 --_000_MWHPR21MB078487DA04C7C17F2019E7E6A3770MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TmVkIFNtaXRoIHdyb3RlOg0KDQo+IFNvIGZhciB0aGUgZ3JvdXAgaGFzIHVzZWQgdGhlIHRlcm0g IkVBVCIgdG8gcmVmZXIgdG8gYm90aCB0aGUgaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2Vy aWFsaXphdGlvbiBleHByZXNzaW9ucy4NCg0KDQoNCkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVy bSBFQVQgKGFuZCBhbnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLCBsaWtlIEpXVCBhbmQg Q1dUKSBvbmx5IGJlIHVzZWQgdG8gcmVmZXIgdG8NCg0KZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJl c3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1vZGVsLg0KDQoNCg0KPiBXaGVuIGV4dGVuZGlu ZyBpbmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9yIHNvbWUgb3RoZXIgc2VyaWFsaXphdGlvbiAo ZS5nLiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJpbGl0eSBmb3IgYW4gSU0NCg0KPiBleHByZXNz aW9uIHRvIGJlIHJlYWxpemVkIGJ5IGRpZmZlcmVudCBzZXJpYWxpemF0aW9ucywgd2hhdCB0ZXJt IHNob3VsZCB3ZSBnaXZlIHRvIHRoZSBJTSBkZXNjcmlwdGlvbj8NCg0KDQoNClRoYXTigJlzIGEg ZmluZSBxdWVzdGlvbiwgYW5kIEkgZG9u4oCZdCBoYXZlIGFueSBzdHJvbmcgcHJlZmVyZW5jZSBy aWdodCBub3csIG90aGVyIHRoYW4gdG8gbm90IHVzZSB0aGUgc2FtZSB0ZXJtIGFzIHNvbWV0aGlu ZyBlbHNlLg0KDQpPZmZoYW5kLCBteSBwcmVmZXJlbmNlIHdvdWxkIGJlIHRvIG5vdCBkZWZpbmUg YSB0ZXJtLCBhbmQganVzdCB1c2UgRXZpZGVuY2UgYW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0 aGUgdGVybXMgZm9yDQoNCmZvcm1hdC1pbmRlcGVuZGVudCBkaXNjdXNzaW9uLiAgSSB0aGluayBp dCBpcyB1c2VmdWwgdG8gZGlzdGluZ3Vpc2ggYmV0d2VlbiBFdmlkZW5jZSB2cyBBdHRlc3RhdGlv biBSZXN1bHRzIGluIG1hbnkgY2FzZXMuDQoNCkFuZCBpZiB5b3UgbmVlZCB0byByZWZlciB0byBi b3RoLCB0aGVuIHdlIGNhbiBhbHdheXMgdXNlIGJvdGggdG9nZXRoZXIsIHN1Y2ggYXMg4oCcRXZp ZGVuY2UgYW5kIEF0dGVzdGF0aW9uIFJlc3VsdHPigJ0uDQoNCg0KDQo+IFRoZSB0ZXJtICJDbGFp bSIgaGFzIGJlZW4gdXNlZCBleHRlbnNpdmVseS4gRG8gd2Ugd2FudCB0byBhZ3JlZSB0byB1c2Ug ImNsYWltIiB0byByZWZlciB0byBhbnl0aGluZyB0aGF0IGlzIGFuIElNDQo+IGV4cHJlc3Npb24g aW4gUkFUUyBhbmQgIlRva2VuIiBmb3IgYW55IHNlcmlhbGl6YXRpb24gKHJlYWxpemF0aW9uKSBl dmVuIGlmIGl0IGlzbid0IGEgSldUIG9yIENXVD8NCg0KDQoNCkkgd291bGQgc2F5IG5vLiBUbyBt ZSwgYSBjbGFpbSBpcyBvbmUgcGFydGljdWxhciBwaWVjZSBvZiBpbmZvcm1hdGlvbiwgd2hlcmUg YSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBlbHNlIGhhcyBhIHNldCBvZiBjbGFpbXMuDQoNCg0K DQpEYXZlDQo= --_000_MWHPR21MB078487DA04C7C17F2019E7E6A3770MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxp Lk1zb1BsYWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6 IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQou TXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5OZWQgU21pdGggd3JvdGU6PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IFNvIGZhciB0aGUgZ3JvdXAgaGFz IHVzZWQgdGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlIGluZm9y bWF0aW9uIG1vZGVsIGFuZCBkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMuPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVybSBFQVQgKGFu ZCBhbnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLCBsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5 IGJlIHVzZWQgdG8gcmVmZXIgdG88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPmRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucywgbm90IHRoZSBpbmZvcm1hdGlvbiBt b2RlbC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBXaGVuIGV4dGVuZGluZyBp bmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9yIHNvbWUgb3RoZXIgc2VyaWFsaXphdGlvbiAoZS5n LiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJpbGl0eSBmb3IgYW4gSU08bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgZXhwcmVzc2lvbiB0byBiZSByZWFsaXplZCBi eSBkaWZmZXJlbnQgc2VyaWFsaXphdGlvbnMsIHdoYXQgdGVybSBzaG91bGQgd2UgZ2l2ZSB0byB0 aGUgSU0gZGVzY3JpcHRpb24/DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5UaGF0 4oCZcyBhIGZpbmUgcXVlc3Rpb24sIGFuZCBJIGRvbuKAmXQgaGF2ZSBhbnkgc3Ryb25nIHByZWZl cmVuY2UgcmlnaHQgbm93LCBvdGhlciB0aGFuIHRvIG5vdCB1c2UgdGhlIHNhbWUgdGVybSBhcyBz b21ldGhpbmcgZWxzZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPk9mZmhhbmQsIG15IHByZWZlcmVuY2Ugd291 bGQgYmUgdG8gbm90IGRlZmluZSBhIHRlcm0sIGFuZCBqdXN0IHVzZSBFdmlkZW5jZSBhbmQgQXR0 ZXN0YXRpb24gUmVzdWx0IGFzIHRoZSB0ZXJtcyBmb3I8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPmZvcm1hdC1p bmRlcGVuZGVudCBkaXNjdXNzaW9uLiZuYnNwOyBJIHRoaW5rIGl0IGlzIHVzZWZ1bCB0byBkaXN0 aW5ndWlzaCBiZXR3ZWVuIEV2aWRlbmNlIHZzIEF0dGVzdGF0aW9uIFJlc3VsdHMgaW4gbWFueSBj YXNlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3Bh biBzdHlsZT0iY29sb3I6YmxhY2siPkFuZCBpZiB5b3UgbmVlZCB0byByZWZlciB0byBib3RoLCB0 aGVuIHdlIGNhbiBhbHdheXMgdXNlIGJvdGggdG9nZXRoZXIsIHN1Y2ggYXMg4oCcRXZpZGVuY2Ug YW5kIEF0dGVzdGF0aW9uIFJlc3VsdHPigJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4mZ3Q7IFRoZSB0ZXJtICZxdW90O0NsYWltJnF1b3Q7IGhhcyBiZWVuIHVzZWQgZXh0 ZW5zaXZlbHkuIERvIHdlIHdhbnQgdG8gYWdyZWUgdG8gdXNlICZxdW90O2NsYWltJnF1b3Q7IHRv IHJlZmVyIHRvIGFueXRoaW5nIHRoYXQgaXMgYW4gSU08YnI+DQomZ3Q7IGV4cHJlc3Npb24gaW4g UkFUUyBhbmQgJnF1b3Q7VG9rZW4mcXVvdDsgZm9yIGFueSBzZXJpYWxpemF0aW9uIChyZWFsaXph dGlvbikgZXZlbiBpZiBpdCBpc24ndCBhIEpXVCBvciBDV1Q/Jm5ic3A7DQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5JIHdvdWxkIHNheSBu by4gVG8gbWUsIGEgY2xhaW0gaXMgb25lIHBhcnRpY3VsYXIgcGllY2Ugb2YgaW5mb3JtYXRpb24s IHdoZXJlIGEg4oCcVG9rZW7igJ0gb3Igd2hhdGV2ZXIgZWxzZSBoYXMgYSBzZXQgb2YgY2xhaW1z LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5EYXZlPG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MWHPR21MB078487DA04C7C17F2019E7E6A3770MWHPR21MB0784namp_-- From nobody Mon Nov 11 21:57:34 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3344712011E for ; Mon, 11 Nov 2019 21:57:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xBFMeRyliDbD for ; Mon, 11 Nov 2019 21:57:30 -0800 (PST) Received: from p3plsmtpa08-06.prod.phx3.secureserver.net (p3plsmtpa08-06.prod.phx3.secureserver.net [173.201.193.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B381D12001E for ; Mon, 11 Nov 2019 21:57:30 -0800 (PST) Received: from [10.141.0.126] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UPBAi3JTQksi3UPBBiA8ln; Mon, 11 Nov 2019 22:57:29 -0700 From: Laurence Lundblade Message-Id: <9D447837-954B-4717-B4EC-22FE9A5EF36B@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_CBCAC51A-46E6-4C73-AE4A-0E46F3125EC2" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 11 Nov 2019 21:57:28 -0800 In-Reply-To: Cc: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz To: Dave Thaler References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfDvNGJ0V4YsxNzja1SDho4M/j4uXXp7oV2KhPUY9PtXeph9mbOi6RhC4GKWu3nY0YRJSQloPO0wpg0vhQyVGm5ftQUSVEPVd2XSv+EB+BNlN1mdu9JKK 26DOG7ulNz1xpZFOIk7gXggfU8aTEL4Ze+NNTcBitkmsVJTJENz/F2XcxODFggMHeI9Kr3Rq0y/HDSvjYTrDmK8MNoBlkTwDtGRv3ZQjwSUbEV7Db4jG1e7O dkTyPE41tZwZnrCLlsq+QLL8eUPij2BaclSqSB5VFo6FIEcsr7Z+PA0uIevOhOHru4F2yzWwjhBPGZnBiJ7KRHHcTgIfUcZ8JjyK0js87vMLADbBEo6WXLEw KyWI7hvPcJnr8Nz8bQk3DmzPioGfOg== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 05:57:33 -0000 --Apple-Mail=_CBCAC51A-46E6-4C73-AE4A-0E46F3125EC2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Clarifying questions and comments. Where did this table come from? Is a firewall here a typical IP-level thing that filter Internet = traffic? (If so, why is that relevant?). Or is it memory protection = between the attestation host (e.g. RoT) and the other parts of the = system? Something else? What is privacy here? Is it the untrackability of attestations because = they use ECDAA, shared keys or such? That is privacy in the web browser = / GDPR sense. One of them is not like the other: Firmware. It typically isn=E2=80=99t = isolated and doesn=E2=80=99t have a CPU. There are other isolating execution environment approaches such as = separate CPUs and virtualization, particularly Microsoft VBS. LL > On Nov 11, 2019, at 5:43 PM, Dave Thaler = wrote: >=20 > Requirements? > +--------------+---------------+---------++--------------- > | RoT | Host Firewall | Privacy || Solution =20 > | Type | Enabled | Needed || Pieces =20 > +--------------+---------------+---------++--------------- > 1 | SGX | No | No || > 2 | SGX | No | Yes || > 3 | SGX | Yes | No || > 4 | SGX | Yes | Yes || > 5 | TrustZone | No | No || > 6 | TrustZone | No | Yes || > 7 | TrustZone | Yes | No || > 8 | TrustZone | Yes | Yes || > 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 > 10 | TPM | No | Yes || > 11 | TPM | Yes | No || > 12 | TPM | Yes | Yes || > 13 |SecureElement | No | No || > 14 |SecureElement | No | Yes || > 15 |SecureElement | Yes | No || > 16 |SecureElement | Yes | Yes || > 17 | Firmware | No | No || > 18 | Firmware | No | Yes || > 19 | Firmware | Yes | No || > 20 | Firmware | Yes | Yes || --Apple-Mail=_CBCAC51A-46E6-4C73-AE4A-0E46F3125EC2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Clarifying questions and comments.

Where did this table come from?

Is a = firewall here a typical IP-level thing that filter Internet traffic? (If = so, why is that relevant?). Or is it memory protection between the = attestation host (e.g. RoT) and the other parts of the system? Something = else?

What is = privacy here? Is it the untrackability of attestations because they use = ECDAA, shared keys or such? That is privacy in the web browser / GDPR = sense.

One of = them is not like the other: Firmware. It typically isn=E2=80=99t = isolated and doesn=E2=80=99t have a CPU.

There are other isolating execution = environment approaches such as separate CPUs and virtualization, = particularly Microsoft VBS.

LL


On Nov = 11, 2019, at 5:43 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

          &nb= sp;            = ; Requirements?
         = +--------------+---------------+---------++---------------
         |  = RoT         | Host Firewall | = Privacy ||   Solution   
         |  = Type        |   = Enabled     | Needed  ||    = Pieces    
         +--------= ------+---------------+---------++---------------
      1  |  = SGX         | = No            | = No      ||
      2  |  = SGX         | = No            | = Yes     ||
      3  |  = SGX         | = Yes           | = No      ||
      4  |  = SGX         | = Yes           | = Yes     ||
      5  |  = TrustZone   | = No            | = No      ||
      6  |  = TrustZone   | = No            | = Yes     ||
      7  |  = TrustZone   | = Yes           | = No      ||
      8  |  = TrustZone   | = Yes           | = Yes     ||
      9  |  = TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01
     10  |  = TPM         | = No            | = Yes     ||
     11  |  = TPM         | = Yes           | = No      ||
   =   12  |  = TPM         | = Yes           | = Yes     ||
     13  |SecureElement | = No            | = No      ||
     14  |SecureElement | = No            | = Yes     ||
     15  |SecureElement | = Yes           | = No      ||
     16  |SecureElement | = Yes           | = Yes     ||
     17  | = Firmware     | = No            | = No      ||
     18  | = Firmware     | = No            | = Yes     ||
     19  | = Firmware     | = Yes           | = No      ||
     20  | = Firmware     | = Yes           | = Yes     = ||

= --Apple-Mail=_CBCAC51A-46E6-4C73-AE4A-0E46F3125EC2-- From nobody Mon Nov 11 23:16:02 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FC5F1200A4 for ; Mon, 11 Nov 2019 23:16:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M5w4y4XAx3c7 for ; Mon, 11 Nov 2019 23:15:55 -0800 (PST) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-am5eur02on062b.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe07::62b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6275E1200A1 for ; Mon, 11 Nov 2019 23:15:55 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=F7KVCUaeGq8wQ+86SMfmBO14Kr+pOl5q+b0m0SFpbGg0FBJAJRDN9v6fLV1ghpJuSm3VX4F4bgvWKLABBmiyMo7q4tQEfHP+kUAIdp/04mtJ0cR6gXFSEob0mPUrX23WiKwjYFvL931vVIllPAFV7NoiXML/yT84Iqc/uJQMZLXpXLfVHn7OdJtFhreKzo2tKEu1HfEigfYNlDMMvkJkaI1zyVOvs/imvVU/bUhZlKJyoVKCliOPQYLaikaAm27F5L6+S4UsCDAidfA9UIsAiJ8AcLCFr2PyBQnj9zxQSK1y7hHVQBRY1VoTROuYlthXS7KYbrkcgkGp0Fh98Ex59A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W5dxn1+L6bBvouVaVCZIaD2JciNHvTRrccOrYpmhuDc=; b=OPQbP2tob8kCkbzLufo6Q63RojUEWA9KLPEIa27DmRKklp1EkczIbSljMUWy60oNs8VKC318uskLhbF2kiFm3QRuarKEphQBhyu0YCjvbPZzTryMMSr+OHjAAeP3VglS8PvR+lo38Z7Hs0q3dHlObn/Vyd0cdTx19by31dr1poODFavbdB4gBwSEUtyBCnjAPwl8wYry5JSeKOkYJzgy+2gLiTL8jaT6XJvsOEWzmtKRDHMsXzBHQqFXVqH7a8laweB8wzQNc7renQF74//Fqb7ayzFR4l8BxqodyQjvDmsPUVKR9fcq/H14Kdm0aANDE40TBNmuuI4otBt1M7g4Ww== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W5dxn1+L6bBvouVaVCZIaD2JciNHvTRrccOrYpmhuDc=; b=EnTm07YRWyCYIbM1ywY3yxXVXO/xgg7oCSuslIAjAy6vUb/Fqk2wVy4xjfprygehnuJb4YWUmDkuOURNcODDNuZzbAb1YVdhvflJDajSIICFGO3Otr0y/wMCLhRGIcl8uUwmxATfZACewKlfLP99bOa4xx+QujMPdmBSqR9ryg0= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0548.EURP190.PROD.OUTLOOK.COM (10.161.66.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Tue, 12 Nov 2019 07:15:52 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2430.027; Tue, 12 Nov 2019 07:15:52 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: "Smith, Ned" CC: Michael Richardson , Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAA8mEAgAABTID//5RNgIAAAZaAgAA47ICAAGn6gA== Date: Tue, 12 Nov 2019 07:15:52 +0000 Message-ID: <20191112071551.kcg2i3gwoljewhbc@anna.jacobs.jacobs-university.de> References: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> In-Reply-To: <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM4PR07CA0036.eurprd07.prod.outlook.com (2603:10a6:205:1::49) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e5045bec-57b0-41fe-7b1f-08d7674026f2 x-ms-traffictypediagnostic: AM5P190MB0548: x-ms-exchange-purlcount: 2 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39850400004)(136003)(366004)(376002)(346002)(199004)(189003)(25786009)(46003)(66946007)(476003)(305945005)(86362001)(11346002)(446003)(66476007)(66556008)(64756008)(66446008)(7736002)(2906002)(102836004)(3450700001)(81166006)(8936002)(99286004)(186003)(43066004)(81156014)(53546011)(316002)(8676002)(786003)(6116002)(478600001)(6506007)(966005)(386003)(14454004)(6436002)(71190400001)(71200400001)(256004)(6246003)(76176011)(6486002)(52116002)(85182001)(4326008)(6306002)(6512007)(486006)(5660300002)(1076003)(85202003)(229853002)(6916009)(54906003)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0548; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 6wGYc/O7vwYaLrQwNCXdbRWpSK81liRCFYT6gz1LzNLp7f8uMEVtMjxVZO2sZQ8yBfYBS5TT36++euJfMuJcV2ydMoX/ecnAu/KJSG81qWTMQRfCYxNIRw1AKNNSx8zlXOXxrOqrN0aMhwS24cMEvQn9HI4WKmAiYnOE+OEfce6J1rujW7VwYt8i2WfBeo0Es/VyVbx38eM/hAinH6oggxeWghEeMYEQ/F6iHoxnqOSFlnSAPyXkqGVqE9k5B2Arsp1DPRheloYcYbngaqTMCuh4etoe1p5chunhC2lUijdwachtm8xZKXpOnEGcNyVmDNvpdxTwe6RTFtvMXXeHtkEILTkek3LZMT2jO11Hyz7pZK8aBL2t+XB18201dg7lKO5EIQYGcl4FerhaShX1/bv/pHViHRp8Izmm9gLu9YzO71QtgJtEU+5Q2NhTTMQVLr9izsBJGx/8kOl3FLXrJNo49EVlDaOkUvsVHuRq5u4= Content-Type: text/plain; charset="utf-8" Content-ID: <56B5DB27708A1A41A993C093CEDBABD6@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: e5045bec-57b0-41fe-7b1f-08d7674026f2 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 07:15:52.6739 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: av03ytHpmiZChClpxkNpEPr/otMjFsCwblk/dNW6tFL0W7wyUv1P+d2Lhp5PaPtjvXkwOUIbgGeMJr6v9n9s0etg1Dpk1t+2pUak5BFWlBs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0548 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 07:16:00 -0000 T24gVHVlLCBOb3YgMTIsIDIwMTkgYXQgMTI6NTY6MzZBTSArMDAwMCwgU21pdGgsIE5lZCB3cm90 ZToNCj4gWUFORyBJIGFscmVhZHkgYmVpbmcgdXNlZCB0byBkZXNjcmliZSBhdHRlc3RhdGlvbiBm bG93cyBhbmQgYXR0ZXN0YXRpb24gcmVsYXRlZCBkYXRhLiBTbyB0aGUgcmVhc29uIHdoeSBpcyBp dCBpcyBhbHJlYWR5IGRlcGxveWVkLg0KDQpEbyB5b3UgaGF2ZSBhbnkgcG9pbnRlcnMgLyByZWZl cmVuY2VzPw0KIA0KPiBZQU5HIGhhcyBiZWVuIHVzZWQgYXMgYW4gSU0gbGFuZ3VhZ2UgYnV0IG1v cmUgY29tbW9ubHkgYXMgYSBETUwuDQoNCkRvIHlvdSBoYXZlIHJlZmVyZW5jZXM/DQoNCj4gV2hl biB0cnlpbmcgdG8gdGFsayBhYm91dCBhdHRlc3RhdGlvbiAiQ2xhaW1zIiBpdCBoZWxwcyBpZiB3 ZSdyZSBzcGVha2luZyB0aGUgc2FtZSBsYW5ndWFnZS4NCg0KL2pzDQoNCj4g77u/T24gMTEvMTEv MTksIDEzOjMzIFBNLCAiUkFUUyBvbiBiZWhhbGYgb2YgU2Now7Zud8OkbGRlciwgSsO8cmdlbiIg PHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgSi5TY2hvZW53YWVsZGVyQGphY29i cy11bml2ZXJzaXR5LmRlPiB3cm90ZToNCj4gDQo+ICAgICBIaSwNCj4gICAgIA0KPiAgICAgd2Ug Y29tbW9ubHkgY2FsbCBZQU5HIGEgZGF0YSBtb2RlbGluZyBsYW5ndWFnZSBhbmQgbm90IGFuIGlu Zm9ybWF0aW9uDQo+ICAgICBtb2RlbGluZyBsYW5ndWFnZS4gQ2FuIHNvbWVvbmUgZXhwbGFpbiB3 aHkgeW91IHdhbnQgdG8gdXNlIFlBTkc/DQo+ICAgICANCj4gICAgIC9qcw0KPiAgICAgDQo+ICAg ICBPbiBNb24sIE5vdiAxMSwgMjAxOSBhdCAwOToyNzowOVBNICswMDAwLCBTbWl0aCwgTmVkIHdy b3RlOg0KPiAgICAgPiBZb3XigJlyZSBzYXlpbmcgWUFORyBmaWxscyBhIGdhcCB0aGF0IGlzIHNp bWlsYXIgdG8gd2hhdCBPcGVuQVBJL1JBTUwgZmlsbHM/DQo+ICAgICA+IA0KPiAgICAgPiBJdCBj b3VsZCBiZSBkb2luZyBtb3JlIHRoYW4gdGhpcyBhcyB3ZWxsLCBzdWNoIGFzIGRlZmluaW5nIGNs YWltcyAoYXMgd2FzIHN1Z2dlc3RlZCBpbiBhIHByZXZpb3VzIGVtYWlsIGJ5IEkgdGhpbmsgTWlj aGFlbCkuIElmIFJBVFMgZGV0ZXJtaW5lZCB0aGF0IHRoZSB3YXkgdG8gc3BlY2lmeSBhIENsYWlt IGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCB3YXMgdmlhIENEREwgKG9ubHkpIGFuZCB0aGVyZSBp cyBhIFlBTkcgZXhwcmVzc2lvbiBvZiBpdCwgdGhlbiB0aGF0IGltcGxpZXMgYSBDRERMIHRvIFlB TkcgbWFwcGluZyBpcyByZXF1aXJlZC4gKElzIHRoYXQgcmVhc29uYWJsZT8pLg0KPiAgICAgPiAN Cj4gICAgID4gT3IgUkFUUyBzYXlzIHRoYXQgaXQgaXMgcmVhc29uYWJsZSB0byB1c2UgZWl0aGVy L2JvdGggQ0RETCBhbmQgWUFORyBmb3IgQ2xhaW1zIGV4cHJlc3Npb25zLiBUaGlzIHN1Z2dlc3Rz IHRoZXJlIGFyZSBDRERMIGFuZCBZQU5HIG1hcHBpbmdzIHRvIHdoYXRldmVyIGFyZSB0aGUgdGFy Z2V0IERNTHMgKEpPU0UsIENPU0UsIERFUiwgc29tZXRoaW5nIGVsc2U/KS4gRG9lcyBZQU5HIHN1 cHBvcnQgRE1MIG1hcHBpbmdzIHRvIEpPU0UsIENPU0UgYW5kIERFUiBvciBqdXN0IHRvIFlBTkc/ IERvZXMgQ0RETCBzdXBwb3J0IG1hcHBpbmdzIHRvIERFUiBhbmQgWUFORyAoc29tZXRoaW5nIGVs c2UpPw0KPiAgICAgPiANCj4gICAgID4gSWRlYWxseSBDRERMIGNhbiBiZSBtYXBwZWQgdG8gb3Ro ZXIgaW5mb3JtYXRpb24gbW9kZWxsaW5nIGxhbmd1YWdlcyAoZS5nLiBZQU5HKSBzbyB0aGF0IG9u bHkgb25lIG5vcm1hdGl2ZSBleHByZXNzaW9uIG5lZWRzIHRvIGJlIGNhbm9uaXplZC4gSG93ZXZl ciwgdGhhdCBpbXBsaWVzIGV4dHJhIHdvcmsgb24gYmVoYWxmIG9mIHRoZSBZQU5HIGRyYWZ0cyB0 byBjb21lIHVwIHdpdGggdGhlIENEREwgZXF1aXZhbGVudC4gTWF5YmUgdGhhdCBpcyB1bm5lY2Vz c2FyeSBleHRyYSB3b3JrIGZvciBjb25zaXN0ZW5jeSBzYWtlPyBUaGF0IHdvdWxkIGZvcmNlIHRo ZSBjb252ZXJzYXRpb25zIGFyb3VuZCB3aGV0aGVyIOKAmHRpbWXigJkgYW5kIOKAmHRpY2tz4oCZ IGFyZSB0aGUgc2FtZSBpbmZvcm1hdGlvbiBtb2RlbCBleHByZXNzaW9uIChmb3IgZXhhbXBsZSku DQo+ICAgICA+IA0KPiAgICAgPiAtTmVkDQo+ICAgICA+IA0KPiAgICAgPiBPbiAxMS8xMS8xOSwg MTE6NTIgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBMYXVyZW5jZSBMdW5kYmxhZGUiIDxyYXRzLWJv dW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9m IGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3Jv dGU6DQo+ICAgICA+IA0KPiAgICAgPiBPbmUgbW9yZSBub3RlIG9uIHRoaXMuIEl0IHNlZW1zIHdy b25nLWhlYWRlZCB0byB0cnkgZXhwcmVzcyBjbGFpbXMgaW4gWUFORy4gVG8gZG8gdGhhdCB3ZeKA mWQgbmVlZCB0byBpbnZlbnQgYSBZQU5HIHNpZ25pbmcgc3RhbmRhcmQgKFlPU0U/KS4gU2VlbXMg bGlrZSBZQU5HIHNob3VsZCBiZSB0aG91Z2h0IG9mIGFzIFJQQyAvIGNvbnZleWFuY2UgLyB0cmFu c3BvcnQgaGVyZSwgbm90IGFzIGEgd2F5IHRvIGZvcm1hdCBhIHNpZ25lZCBhdHRlc3RhdGlvbiB0 b2tlbi4NCj4gICAgID4gDQo+ICAgICA+IExMDQo+ICAgICA+IA0KPiAgICAgPiANCj4gICAgID4g DQo+ICAgICA+IE9uIE5vdiAxMSwgMjAxOSwgYXQgMTE6NDcgQU0sIExhdXJlbmNlIEx1bmRibGFk ZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiB3 cm90ZToNCj4gICAgID4gDQo+ICAgICA+IE9uIE5vdiAxMCwgMjAxOSwgYXQgOToyMCBQTSwgTWlj aGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1jcitpZXRmQHNh bmRlbG1hbi5jYT4+IHdyb3RlOg0KPiAgICAgPiANCj4gICAgID4gDQo+ICAgICA+IEkgdGhpbmsg dGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2VyIFJBVFMgZWZmb3J0IG9mIGFkZGluZyBFQVQgc3Vw cG9ydA0KPiAgICAgPiB0byB0aGlzIFlBTkcgcHJvdG9jb2wgaXMgcmVhbGx5IGhpZ2guIEl0IGEg Y29yZSB0aGluZyB0byBkbyB0aGF0IGhlbHBzDQo+ICAgICA+IGJyaW5nIHRvZ2V0aGVyIHRoZSB0 d28gYXR0ZXN0YXRpb24gd29ybGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVBVA0KPiAgICAgPiB3 b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCj4gICAgID4gDQo+ICAgICA+ IENhbiB5b3UgZXhwbGFpbiB3aGF0IGl0IHdvdWxkIG1lYW4gdG8gYWRkIEVBVCBzdXBwb3J0IGZv ciBhIFlBTkcgbW9kdWxlPw0KPiAgICAgPiANCj4gICAgID4gVGhlIEVBVCBpcyBhbiBvcGFxdWUg Y2h1bmsgb2YgZGF0YSBpbiBZQU5HLiBJ4oCZbSBub3QgYSBZQU5HIGV4cGVydCwgYnV0IG1heWJl IGxpa2UgdGhpczoNCj4gICAgID4gDQo+ICAgICA+IFNlcnZlciAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBEZXZpY2UNCj4gICAgID4gR2V0QXR0ZXN0YXRpb25UeXBlcyDigJQ+DQo+ICAg ICA+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPC0gVFlQRV9UUE0sIFRZUEVfQ1dU IC8qIGJpdCBmbGFncyAqLw0KPiAgICAgPiANCj4gICAgID4gR2V0QXR0ZXN0YXRpb24oVFlQRV9D V1QgLCBub25jZSkg4oCUPg0KPiAgICAgPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IDzigJQgQ1dUIFRva2VuIC8qIGEgZnVsbCBzaWduZWQgdG9rZW4gKi8NCj4gICAgID4gDQo+ICAg ICA+IEkgYXNzdW1lIFlBTkcgY2FuIGNhcnJ5IG9wYXF1ZSBiaW5hcnkgZGF0YSBvZiBtb2RlcmF0 ZSBzaXplLg0KPiAgICAgPiANCj4gICAgID4gVGhlIHlhbmcgbW9kdWxlIGluZm9ybWF0aW9uIG1v ZGVsIHdvdWxkIGhhdmUgYW4gZWxlbWVudCBmb3IgYSBub25jZSBhbmQgZm9yIGFuIG9wYXF1ZSBF QVQuIEl0IHdvdWxkIG5vdCBkZXNjcmliZSBhbnkgaW50ZXJuYWxzIG9mIHRoZSBFQVQuIFRoZSBp bmZvcm1hdGlvbiBtb2RlbCBmb3IgdGhlIEVBVCBpcyBzZXBhcmF0ZSBpbiB0aGUgRUFUIGRvY3Vt ZW50Lg0KPiAgICAgPiANCj4gICAgID4gTEwNCj4gICAgID4gDQo+ICAgICA+IA0KPiAgICAgPiAN Cj4gICAgID4gDQo+ICAgICANCj4gICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gICAgID4gUkFUUyBtYWlsaW5nIGxpc3QNCj4gICAgID4gUkFU U0BpZXRmLm9yZw0KPiAgICAgPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L3JhdHMNCj4gICAgIA0KPiAgICAgDQo+ICAgICAtLSANCj4gICAgIEp1ZXJnZW4gU2Nob2Vud2Fl bGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNpdHkgQnJlbWVuIGdHbWJIDQo+ICAgICBQaG9u ZTogKzQ5IDQyMSAyMDAgMzU4NyAgICAgICAgIENhbXB1cyBSaW5nIDEgfCAyODc1OSBCcmVtZW4g fCBHZXJtYW55DQo+ICAgICBGYXg6ICAgKzQ5IDQyMSAyMDAgMzEwMyAgICAgICAgIDxodHRwczov L3d3dy5qYWNvYnMtdW5pdmVyc2l0eS5kZS8+DQo+ICAgICBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAgICAgUkFUUyBtYWlsaW5nIGxpc3QNCj4gICAg IFJBVFNAaWV0Zi5vcmcNCj4gICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vcmF0cw0KPiAgICAgDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiBSQVRTIG1haWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KDQotLSANCkp1ZXJnZW4g U2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNpdHkgQnJlbWVuIGdHbWJIDQpQ aG9uZTogKzQ5IDQyMSAyMDAgMzU4NyAgICAgICAgIENhbXB1cyBSaW5nIDEgfCAyODc1OSBCcmVt ZW4gfCBHZXJtYW55DQpGYXg6ICAgKzQ5IDQyMSAyMDAgMzEwMyAgICAgICAgIDxodHRwczovL3d3 dy5qYWNvYnMtdW5pdmVyc2l0eS5kZS8+DQo= From nobody Tue Nov 12 00:21:21 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B71F12018D for ; Tue, 12 Nov 2019 00:21:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8N2ku65fefHV for ; Tue, 12 Nov 2019 00:21:16 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 823B4120169 for ; Tue, 12 Nov 2019 00:21:14 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAC8LCVq020877 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 12 Nov 2019 09:21:13 +0100 Received: from [134.102.157.164] (134.102.157.164) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Tue, 12 Nov 2019 09:21:07 +0100 To: Dave Thaler , "Smith, Ned" , Michael Richardson , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <29e641b7-3077-2b7d-8029-631698012c74@sit.fraunhofer.de> Date: Tue, 12 Nov 2019 09:21:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.157.164] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 08:21:19 -0000 Hi Dave, hi all, is it correct that the intent of tokens - in general - is that they have a life-span and are somehow like... certificates, but with a smaller life-cycle? The claims defined by the Web Token RFCs are indicating as such, I'd assume. Having said that, the features we use are the object / tagged map structure, the continuous list of defined Claims & corresponding registry, and the imperative guidance how to use {C|J}OSE. In combination with the fact that all Web Token Claims are optional, we can use these features for purposes other than the original intent of tokens and that is okay. Simply calling them tokens, though, might be confusing to readers that already use tokens? In conveyance protocols for RATS I would like to see at least three things defined and differentiated: * the Interaction Models the protocols use, most prominent, challenge/response, time-based, and subscription, * the Message (Content) that is conveyed, most prominent Evidence, Endorsements, Reference Values (aka Known Good Values), and Attestation Results, and * the Roles between which Messages are conveyed via protocols, most prominent . This is applicable to EAT (specific claim set serializations) and YANG (specific statements serializations, APIs, and conveyance protocols) or others - and unless there are really good reasons against this, I'd consider these definitions/categorizations a MUST. After the discussions we had, I am a bit at a loss how to deal with "the same information elements used in different message types and content" or "how to not use the same term as something else" (aka the Information Model), I have to admit. I do not see a viable solution at the moment. Viele Grüße, Henk On 12.11.19 05:19, Dave Thaler wrote: > Ned Smith wrote: > > > So far the group has used the term "EAT" to refer to both the > information model and data serialization expressions. > > I would rather see the term EAT (and any other terms ending in Token, > like JWT and CWT) only be used to refer to > > data serialization expressions, not the information model. > > > When extending information model to YANG or some other serialization > (e.g. ASN.1). Given the possibility for an IM > > > expression to be realized by different serializations, what term > should we give to the IM description? > > That’s a fine question, and I don’t have any strong preference right > now, other than to not use the same term as something else. > > Offhand, my preference would be to not define a term, and just use > Evidence and Attestation Result as the terms for > > format-independent discussion.  I think it is useful to distinguish > between Evidence vs Attestation Results in many cases. > > And if you need to refer to both, then we can always use both together, > such as “Evidence and Attestation Results”. > > > The term "Claim" has been used extensively. Do we want to agree to > use "claim" to refer to anything that is an IM > > expression in RATS and "Token" for any serialization (realization) > even if it isn't a JWT or CWT? > > I would say no. To me, a claim is one particular piece of information, > where a “Token” or whatever else has a set of claims. > > Dave > From nobody Tue Nov 12 00:22:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 246DE120169 for ; Tue, 12 Nov 2019 00:22:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4e_U2Q4S7lAP for ; Tue, 12 Nov 2019 00:22:54 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9140E120046 for ; Tue, 12 Nov 2019 00:22:54 -0800 (PST) Received: from [192.168.44.20] (unknown [209.52.88.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 7146B3897A; Tue, 12 Nov 2019 03:19:48 -0500 (EST) To: Laurence Lundblade Cc: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> From: Michael Richardson Message-ID: <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> Date: Tue, 12 Nov 2019 16:22:47 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 08:22:57 -0000 On 2019-11-12 3:52 a.m., Laurence Lundblade wrote: > One more note on this. It seems wrong-headed to try express claims in > YANG. To do that we’d need to invent a YANG signing standard (YOSE?). > Seems like YANG should be thought of as RPC / conveyance / transport > here, not as a way to format a signed attestation token. YANG is an information model (think ASN.1).  It is for humans and for code generators, protocol inspectors, etc, it is never bits on the wire. It needs to be expressed somehow (XML, JSON, CBOR), which is akin to BER/DER. XML, JSON and CBOR all have signature standards (maybe more than one). A specific claim could well have a complex set of information that it conveys and that could be expressed in YANG, but I find it difficult to imagine such a thing. From nobody Tue Nov 12 00:28:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DCB0120169 for ; Tue, 12 Nov 2019 00:28:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QfFSebcJCCm9 for ; Tue, 12 Nov 2019 00:28:12 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F5AB120046 for ; Tue, 12 Nov 2019 00:28:12 -0800 (PST) Received: from [192.168.44.20] (unknown [209.52.88.187]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 25D053897A for ; Tue, 12 Nov 2019 03:24:59 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: Date: Tue, 12 Nov 2019 16:28:00 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="yd4IyHGwjIERbk2KBR4XfEXSgBqKZBxHe" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 08:28:15 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --yd4IyHGwjIERbk2KBR4XfEXSgBqKZBxHe Content-Type: multipart/mixed; boundary="OhtbGNxn2OALgbPij77wlFvp6tfD72RQf"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> In-Reply-To: <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> --OhtbGNxn2OALgbPij77wlFvp6tfD72RQf Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US On 2019-11-12 5:27 a.m., Smith, Ned wrote: > > You=E2=80=99re saying YANG fills a gap that is similar to what OpenAPI/= RAML fills? > I don't know what those things are. I might say it was similar to CORBA, but I'd be dating myself and I never really knew CORBA very well. > Ideally CDDL can be mapped to other information modelling languages > (e.g. YANG) so that only one normative expression needs to be > canonized. However, that implies extra work on behalf of the YANG > drafts to come up with the CDDL equivalent. Maybe that is unnecessary > extra work for consistency sake? That would force the conversations > around whether =E2=80=98time=E2=80=99 and =E2=80=98ticks=E2=80=99 are t= he same information model > expression (for example). > CDDL could be used to explain how the YANG serialization to CBOR or JSON worked. But, CDDL is also not a bits-on-the-wire thing, it's also probably human and code generator. (Carsten says that this is not exclusive the case, anymore, but I think having Turing complete information modeling languages is a bad thing, and might lead to Daleks Invasions and Cybermen Kings) I would expect that an RFC or other industry document that detailed a series of claims might use CDDL to describe the contents of the data that made up the details of the claim. But, again, for the code generators (whether human or machine) --OhtbGNxn2OALgbPij77wlFvp6tfD72RQf-- --yd4IyHGwjIERbk2KBR4XfEXSgBqKZBxHe Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3KbRAACgkQcAKuwszY gENyzQv9F5dXKO4p6GqLWVSNXcYfzZ2BELol8Yn2YVBZ5JSEoMmm8XuK5I3f+K8W Pmvnf7752idaPUppOaWRZa33a5WHepttyOq8Kxi5xQFYNaU4jEf3WiguQJoCtDFK OR2Kv0c6TS1hNLttIX89b2P90vs0BFG/3+U5RdEyi/sJBzsmpRmdVTLDeibu7v9A EtSVb7NNQ63X7H3xFkT+qQudrzPFddhaBQbzebGX0+ZGYPppHHn/qdORsPA27Tcy 388JCB/77o6aYvviYJEEEBVammf8lpLkBcQR7mqiZ5aQf2cQgdnxFj8AnkDBgmMR l2HgBJY1FONzGm8vcq1aSGfH5yTqc2uwvwawMtJTkHBrJy9Nf4tG5V6T1nn062JP icAwICgp2EAeTJqoutCEJ7KHaw4NSnVca6z1nS9oAJkjvxXuZAnVtuyyJv6/MA3l K4r94cQsHUT1aTgUDNXWT310s8F36didcIZ0cSv3qqiR6CSJi2HsoUNAzd8nuD3n guqst9sy =arii -----END PGP SIGNATURE----- --yd4IyHGwjIERbk2KBR4XfEXSgBqKZBxHe-- From nobody Tue Nov 12 00:28:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD981120169 for ; Tue, 12 Nov 2019 00:28:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UydEtNZroo93 for ; Tue, 12 Nov 2019 00:28:24 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57217120046 for ; Tue, 12 Nov 2019 00:28:24 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAC8SL64021151 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 12 Nov 2019 09:28:22 +0100 Received: from [134.102.157.164] (134.102.157.164) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Tue, 12 Nov 2019 09:28:16 +0100 To: Laurence Lundblade , "Smith, Ned" CC: Michael Richardson , =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> From: Henk Birkholz Message-ID: Date: Tue, 12 Nov 2019 09:28:15 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.157.164] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 08:28:28 -0000 Hi Laurence, maybe I lack the required background knowledge about YANG here. My question is the following: Is it in-scope for a YANG modules (which typically have a well-defined semantic scope for each statement) to convey opaque EATs via a single statement. Or is it necessary to create YANG statements for each well-defined EAT Claim? Viele Grüße, Henk On 12.11.19 05:16, Laurence Lundblade wrote: > What is most important for me is that the YANG document allow for EAT > tokens as that seems like an important upgrade path / alternative given > that EATs are much more capable. > > But flip it around. In RATS maybe it should be possible for TPM-based > attestations to go anywhere an EAT goes. You should be able move TPM > attestations around by HTTP, or in TLS extension points or maybe even as > an IMAP extension just like you can with EAT. To some degree FIDO has > done it. It has a pluggable attestation architecture that allows several > formats including TPM-based, Android SafetyNet (which is not Android key > store) and some FIDO-specific schemes that are more EAT like. > > That seems like it takes you to a clear demarcation between: > > * Self-securing signed attestation token > * Token conveyance protocol > > > This seems very good in concept. We often separate like this in protocol > design. > > Then one way to look at the RATS work is in three: > > 1. EAT Attestation Token > 2. TPM Token (that can be carried by HTTP and almost any conceivable > protocol extension) > 3. A very specific YANG-based conveyance protocol for routers because > that’s how routers like it and it is important for the RATS work > group constituency. > > > Maybe we’ll find another specific conveyance protocol we’ll want to > address, but in general we don’t have to. All the web app, IoS app and > Android app frameworks will be OK just like they are today for things > like Android KeyStore. > > If you look at it this way, 1) then EAT is fine as, 2) we need to define > a new "TPM Token" format that is sort of an alternative to EAT, and 3) > the YANG module has to be tweaked so it is a carrier of EATs and TPM > Tokens. (I’m probably glossing over some of the complexity with YANG and > TPMs). > > TPM Token would not be a general claims carrier like EAT. TPM HW is > super locked down and limited and TPM Token would just do what TPMs can > do. Probably the “claims" amount to a few PCRs. Since the TPM signing > format is fixed, the TPM Token signing format would be fixed. TPM Token > is sort of a serialization of the output of a TPM. (It can’t be directly > COSE as TPM’s can’t do RFC 8152 section 4.4, the COSE-specific creation > of the to-be-signed bytes, when signing; probably similarly not JOSE). > Since TPM Token is simple, will never change and won’t have extensions > we don’t need all the weight of CDDL or YANG or such and can maybe go > directly to JSON, XML or CBOR. > > LL > > > > >> On Nov 11, 2019, at 4:56 PM, Smith, Ned > > wrote: >> >> YANG I already being used to describe attestation flows and >> attestation related data. So the reason why is it is already deployed. >> >> YANG has been used as an IM language but more commonly as a DML. >> >> When trying to talk about attestation "Claims" it helps if we're >> speaking the same language. >> >> On 11/11/19, 13:33 PM, "RATS on behalf of Schönwälder, Jürgen" >> on behalf of >> J.Schoenwaelder@jacobs-university.de >> > wrote: >> >>    Hi, >> >>    we commonly call YANG a data modeling language and not an information >>    modeling language. Can someone explain why you want to use YANG? >> >>    /js >> >>    On Mon, Nov 11, 2019 at 09:27:09PM +0000, Smith, Ned wrote: >>> You’re saying YANG fills a gap that is similar to what OpenAPI/RAML >>> fills? >>> >>> It could be doing more than this as well, such as defining claims (as >>> was suggested in a previous email by I think Michael). If RATS >>> determined that the way to specify a Claim in the information model >>> was via CDDL (only) and there is a YANG expression of it, then that >>> implies a CDDL to YANG mapping is required. (Is that reasonable?). >>> >>> Or RATS says that it is reasonable to use either/both CDDL and YANG >>> for Claims expressions. This suggests there are CDDL and YANG >>> mappings to whatever are the target DMLs (JOSE, COSE, DER, something >>> else?). Does YANG support DML mappings to JOSE, COSE and DER or just >>> to YANG? Does CDDL support mappings to DER and YANG (something else)? >>> >>> Ideally CDDL can be mapped to other information modelling languages >>> (e.g. YANG) so that only one normative expression needs to be >>> canonized. However, that implies extra work on behalf of the YANG >>> drafts to come up with the CDDL equivalent. Maybe that is unnecessary >>> extra work for consistency sake? That would force the conversations >>> around whether ‘time’ and ‘ticks’ are the same information model >>> expression (for example). >>> >>> -Ned >>> >>> On 11/11/19, 11:52 AM, "RATS on behalf of Laurence Lundblade" >>> >> on >>> behalf of lgl@island-resort.com >>> > wrote: >>> >>> One more note on this. It seems wrong-headed to try express claims in >>> YANG. To do that we’d need to invent a YANG signing standard (YOSE?). >>> Seems like YANG should be thought of as RPC / conveyance / transport >>> here, not as a way to format a signed attestation token. >>> >>> LL >>> >>> >>> >>> On Nov 11, 2019, at 11:47 AM, Laurence Lundblade >>> >> > wrote: >>> >>> On Nov 10, 2019, at 9:20 PM, Michael Richardson >>> >> > wrote: >>> >>> >>> I think the value add to the larger RATS effort of adding EAT support >>> to this YANG protocol is really high. It a core thing to do that helps >>> bring together the two attestation worlds and make the TPM and EAT >>> work here less like ships in the night. >>> >>> Can you explain what it would mean to add EAT support for a YANG module? >>> >>> The EAT is an opaque chunk of data in YANG. I’m not a YANG expert, >>> but maybe like this: >>> >>> Server                               Device >>> GetAttestationTypes —> >>>                                <- TYPE_TPM, TYPE_CWT /* bit flags */ >>> >>> GetAttestation(TYPE_CWT , nonce) —> >>>                                <— CWT Token /* a full signed token */ >>> >>> I assume YANG can carry opaque binary data of moderate size. >>> >>> The yang module information model would have an element for a nonce >>> and for an opaque EAT. It would not describe any internals of the >>> EAT. The information model for the EAT is separate in the EAT document. >>> >>> LL >>> >>> >>> >>> >> >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> >> >>    -- >>    Juergen Schoenwaelder           Jacobs University Bremen gGmbH >>    Phone: +49 421 200 3587         Campus Ring 1 | 28759 Bremen | Germany >>    Fax:   +49 421 200 3103          >>    _______________________________________________ >>    RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> >> > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Tue Nov 12 00:59:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37F321201DE for ; Tue, 12 Nov 2019 00:59:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EXJI7VwUtedT for ; Tue, 12 Nov 2019 00:59:04 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20069.outbound.protection.outlook.com [40.107.2.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1A83120170 for ; Tue, 12 Nov 2019 00:59:03 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SmW0Ng7Kbr7SvJavrraBD+RgYX5dLaARUse/uGFaWt9AloYx6KVIOpVJrt69q6rM5sz5OYt9QoTO5uBBOW6h4ruqrqogMIoCNaazwXryEHhY9kKBrm8FLPSDMOglv8FAqVbgKZyjzX6eaVe0L9wEG2HMFnwY2oVACW855vshjsMK33zNzoAVc2entXqDiFNVgOi1JJfFjQJHZHWhfBBti8WdYkbGuptw2vyBC+sNPyjBn0Jp936e/hkbEjXiHW9KArCTeYrQKLiinCYKamJ7ibOVaf6Vyk0uEDFDCSdx1Mq65hhnExGcjjZiQ+nOfXoypj/Ce5cZZIvQeXB1nXlY+Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VJC/hrrfvT1gGZFt3psBaIxvTHuB4keukYtMp10mras=; b=Wb9bZM6ijf8hQl1leNYDLNHSaouGhaG4Af/szPIdjXGw34TkHKBIGMl9IwS9LRGT2lKn6ISJtawHOte8lW+RHwm4RxcAUz1S8LO6WXe2xz4EOgGnXfYfJKIATYhIMbk8tq46ZOUi9ZTUUv1fcd3DRfdc4xYFgNvLzktDf9BT2IMooHbGT/J749e4dfphyfB1MOQf6NV1t0LP2pAOk7T/MiDzn5ITiQlPg9s+mW21eyyENnUahzgi/O1Mol185nTTsPia+1sKb7cbKucM7wfmniwCfwwGjaA9tdKutiTHzQBbX+MxTuEMWGrfXRz8X8jhiiYv4qIsAxRQUOc3MkwIbQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VJC/hrrfvT1gGZFt3psBaIxvTHuB4keukYtMp10mras=; b=iyUzHqk56988V/ys7OeC7jaNvK394uDMXv98MRv0y7kniq6Rn0VomeXkR7SCHCcVqgV4aRhNlVGpq6UHVi6jFUej/baFevq5b4sPq/0pdd2O1hl+MM/uHj1/tB/oRId0o6q+/GQqIf/iA/nv+1JxNDGCUQLIgpDf4t/VEno8ikE= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0419.EURP190.PROD.OUTLOOK.COM (10.161.62.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.24; Tue, 12 Nov 2019 08:59:01 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2430.027; Tue, 12 Nov 2019 08:59:01 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: Michael Richardson CC: Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmTJd8/lytau3hU+AhCwtIdg/0aeHPHQA Date: Tue, 12 Nov 2019 08:59:01 +0000 Message-ID: <20191112085900.vyir4reiounxccvc@anna.jacobs.jacobs-university.de> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> In-Reply-To: <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM0PR02CA0088.eurprd02.prod.outlook.com (2603:10a6:208:154::29) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c06c9913-d921-4a03-4c76-08d7674e8f8d x-ms-traffictypediagnostic: AM5P190MB0419: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(396003)(136003)(39850400004)(376002)(346002)(366004)(199004)(189003)(66556008)(66946007)(43066004)(2906002)(6436002)(81166006)(81156014)(229853002)(6486002)(8936002)(8676002)(66446008)(64756008)(66476007)(6116002)(99286004)(786003)(54906003)(316002)(1076003)(6246003)(5660300002)(46003)(14454004)(478600001)(52116002)(386003)(4326008)(76176011)(71200400001)(71190400001)(6512007)(85202003)(256004)(25786009)(85182001)(11346002)(446003)(86362001)(6306002)(305945005)(4001150100001)(486006)(3450700001)(7736002)(476003)(53546011)(186003)(6506007)(102836004)(777600001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0419; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: R6HIy1dY6FTaBR1V5a+eGcY5wmCclm05NTWpkHv7nXcINQDajI5kuj9yEp1WKqHhVPO9PJ4FXKA2FCG6PP882Jv+NEasItBGucVmDLhem1I+YU7WmknWp0Ir2BQZrgufexUcrQcBpnMkbcauGv/R9WtUf1Dlr+2/K81syGAtQNV2qErkJX918S2LdKsaak+v6BxplVlGwvdOjzYu2dOcy71JS5NMO7jvkgmzBONwYJrXI6UWKaHCZBKstDLY8XjLABuWHwqUIWVhk/8wvLpqn/SQ4EKdQ03ys8+/EUKxie6nLfCGxUG7eTc4/3Lx8eCaxTQgF2ieYclFsNzQm/bGx+6WTq/jpq5zBiNwUR5RC2LF0j8DYcktGJQSDaYu/f9vMr5a+ZtbL6iwUXaGgXNP9mDQA00lWynyS6ubV3NKxlpa3wzlVqO8YGv3zKDPr0g+a6jcy3T8iyneS0CO+otMPDdWduKoykbf6YLrpzxfQOo= Content-Type: text/plain; charset="utf-8" Content-ID: <68705C18A0F36C4783AB734682B6CF83@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: c06c9913-d921-4a03-4c76-08d7674e8f8d X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 08:59:01.0764 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8nJ5YbLi9X9adx7NQQ4/U4QMoFzd4v+6ESAdEkX5yBSFM27Ap93/OcR6EVwwkaI8JBin1md3w7ZUNu8cpcEdKz2O5To8JcIDUtfZmYM2Ydg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0419 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 08:59:06 -0000 T24gVHVlLCBOb3YgMTIsIDIwMTkgYXQgMDQ6MjI6NDdQTSArMDgwMCwgTWljaGFlbCBSaWNoYXJk c29uIHdyb3RlOg0KPiANCj4gDQo+IE9uIDIwMTktMTEtMTIgMzo1MiBhLm0uLCBMYXVyZW5jZSBM dW5kYmxhZGUgd3JvdGU6DQo+ID4gT25lIG1vcmUgbm90ZSBvbiB0aGlzLiBJdCBzZWVtcyB3cm9u Zy1oZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1zIGluDQo+ID4gWUFORy4gVG8gZG8gdGhhdCB3 ZeKAmWQgbmVlZCB0byBpbnZlbnQgYSBZQU5HIHNpZ25pbmcgc3RhbmRhcmQgKFlPU0U/KS4NCj4g PiBTZWVtcyBsaWtlIFlBTkcgc2hvdWxkIGJlIHRob3VnaHQgb2YgYXMgUlBDIC8gY29udmV5YW5j ZSAvIHRyYW5zcG9ydA0KPiA+IGhlcmUsIG5vdCBhcyBhIHdheSB0byBmb3JtYXQgYSBzaWduZWQg YXR0ZXN0YXRpb24gdG9rZW4uDQo+IA0KPiBZQU5HIGlzIGFuIGluZm9ybWF0aW9uIG1vZGVsICh0 aGluayBBU04uMSkuDQoNCllBTkcgcGVvcGxlIGJlbGlldmUgWUFORyBpcyB1c2VkIHRvIGRlZmlu ZSBkYXRhIG1vZGVscy4NCg0KPiBJdCBpcyBmb3IgaHVtYW5zIGFuZCBmb3IgY29kZSBnZW5lcmF0 b3JzLCBwcm90b2NvbCBpbnNwZWN0b3JzLCBldGMsIGl0DQo+IGlzIG5ldmVyIGJpdHMgb24gdGhl IHdpcmUuDQo+IEl0IG5lZWRzIHRvIGJlIGV4cHJlc3NlZCBzb21laG93IChYTUwsIEpTT04sIENC T1IpLCB3aGljaCBpcyBha2luIHRvDQo+IEJFUi9ERVIuDQoNClRoaXMgaXMgd2hhdCBZQU5HIHBl b3BsZSBjYWxsIGFuIGVuY29kaW5nIChvciByZXByZXNlbnRhdGlvbikgb2YNCmluc3RhbmNlIGRh dGEgKHRoYXQgY29uZm9ybXMgdG8gYSBZQU5HIHNjaGVtYSkuIFlBTkcgdG9kYXkgc3VwcG9ydHMN ClhNTCBhbmQgSlNPTiwgQ0JPUiBpcyBpbiB0aGUgbWFraW5nIChidXQgZm9yIGEgbG9uZyB0aW1l KS4NCg0KPiBYTUwsIEpTT04gYW5kIENCT1IgYWxsIGhhdmUgc2lnbmF0dXJlIHN0YW5kYXJkcyAo bWF5YmUgbW9yZSB0aGFuIG9uZSkuDQo+IEEgc3BlY2lmaWMgY2xhaW0gY291bGQgd2VsbCBoYXZl IGEgY29tcGxleCBzZXQgb2YgaW5mb3JtYXRpb24gdGhhdCBpdA0KPiBjb252ZXlzIGFuZCB0aGF0 IGNvdWxkIGJlIGV4cHJlc3NlZCBpbiBZQU5HLCBidXQgSSBmaW5kIGl0IGRpZmZpY3VsdCB0bw0K PiBpbWFnaW5lIHN1Y2ggYSB0aGluZy4NCg0KL2pzDQoNCi0tIA0KSnVlcmdlbiBTY2hvZW53YWVs ZGVyICAgICAgICAgICBKYWNvYnMgVW5pdmVyc2l0eSBCcmVtZW4gZ0dtYkgNClBob25lOiArNDkg NDIxIDIwMCAzNTg3ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8IDI4NzU5IEJyZW1lbiB8IEdlcm1h bnkNCkZheDogICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAgPGh0dHBzOi8vd3d3LmphY29icy11 bml2ZXJzaXR5LmRlLz4NCg== From nobody Tue Nov 12 01:22:26 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58B9D120052 for ; Tue, 12 Nov 2019 01:22:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W7iFy7mXSXTH for ; Tue, 12 Nov 2019 01:22:22 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFFDE120046 for ; Tue, 12 Nov 2019 01:22:22 -0800 (PST) Received: from [192.168.44.20] (unknown [209.171.88.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 610153897A for ; Tue, 12 Nov 2019 04:18:59 -0500 (EST) To: "rats@ietf.org" From: Michael Richardson Message-ID: <01bbbb92-9b99-7636-50a4-a1b4a37e0903@sandelman.ca> Date: Tue, 12 Nov 2019 17:08:05 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: [Rats] What's to EAT? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 09:22:24 -0000 On 2019-11-12 12:19 p.m., Dave Thaler wrote: > > Ned Smith wrote: > > > So far the group has used the term "EAT" to refer to both the > information model and data serialization expressions. > >   > > I would rather see the term EAT (and any other terms ending in Token, > like JWT and CWT) only be used to refer to > > data serialization expressions, not the information model. > I concur. I'm completely perplexed by that thread about "Call for adoption", so I've changed the subject line, and started a new thread.  > > When extending information model to YANG or some other serialization > (e.g. ASN.1). Given the possibility for an IM > > > expression to be realized by different serializations, what term > should we give to the IM description? > >   > > That’s a fine question, and I don’t have any strong preference right > now, other than to not use the same term as something else. > > Offhand, my preference would be to not define a term, and just use > Evidence and Attestation Result as the terms for > > format-independent discussion.  I think it is useful to distinguish > between Evidence vs Attestation Results in many cases. > > And if you need to refer to both, then we can always use both > together, such as “Evidence and Attestation Results”. > +1 >   > > > The term "Claim" has been used extensively. Do we want to agree to > use "claim" to refer to anything that is an IM > > expression in RATS and "Token" for any serialization (realization) > even if it isn't a JWT or CWT?  > >   > > I would say no. To me, a claim is one particular piece of information, > where a “Token” or whatever else has a set of claims. > >   > I mostly agree. I think that it's okay to say, "The uptime claim is forwarded to the Flu-Flu Processor" rather than saying "The Token containing the uptime claim is forwarded to the Flu-Flu Processor" From nobody Tue Nov 12 01:38:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BF0512024E for ; Tue, 12 Nov 2019 01:38:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.179 X-Spam-Level: X-Spam-Status: No, score=-3.179 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MISSING_HEADERS=1.021, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 22KMyRZlpjfn for ; Tue, 12 Nov 2019 01:38:35 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7828412002E for ; Tue, 12 Nov 2019 01:38:35 -0800 (PST) Received: from [192.168.44.20] (unknown [209.171.88.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id E85C73897C for ; Tue, 12 Nov 2019 04:35:27 -0500 (EST) Cc: "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <20191112085900.vyir4reiounxccvc@anna.jacobs.jacobs-university.de> From: Michael Richardson Message-ID: <9eb2a278-03e5-4926-3270-0d4dc16f5745@sandelman.ca> Date: Tue, 12 Nov 2019 17:38:25 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191112085900.vyir4reiounxccvc@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 09:38:37 -0000 On 2019-11-12 4:59 p.m., Schönwälder, Jürgen wrote: > On Tue, Nov 12, 2019 at 04:22:47PM +0800, Michael Richardson wrote: >> >> On 2019-11-12 3:52 a.m., Laurence Lundblade wrote: >>> One more note on this. It seems wrong-headed to try express claims in >>> YANG. To do that we’d need to invent a YANG signing standard (YOSE?). >>> Seems like YANG should be thought of as RPC / conveyance / transport >>> here, not as a way to format a signed attestation token. >> YANG is an information model (think ASN.1). > YANG people believe YANG is used to define data models. Yes, I mis-spoke. > >> It is for humans and for code generators, protocol inspectors, etc, it >> is never bits on the wire. >> It needs to be expressed somehow (XML, JSON, CBOR), which is akin to >> BER/DER. > This is what YANG people call an encoding (or representation) of > instance data (that conforms to a YANG schema). YANG today supports > XML and JSON, CBOR is in the making (but for a long time). Well, yes, I'm using it on anima-constrained-voucher, and yes, it has been a long time, but we are mostly done, so I think we can say that CBOR is included. From nobody Tue Nov 12 01:45:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E5A212003E for ; Tue, 12 Nov 2019 01:45:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qk2GLOdkTtwA for ; Tue, 12 Nov 2019 01:45:03 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D878120033 for ; Tue, 12 Nov 2019 01:45:03 -0800 (PST) Received: from [192.168.44.20] (unknown [209.171.88.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 376553897C for ; Tue, 12 Nov 2019 04:41:56 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: Date: Tue, 12 Nov 2019 17:44:55 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Qelea0JGUPzuQ8SSTg7uDgaFMbfqMwbCx" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 09:45:05 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Qelea0JGUPzuQ8SSTg7uDgaFMbfqMwbCx Content-Type: multipart/mixed; boundary="j1azIbJbsoCyWCk8ZG9fyAdj4kSQhbFsf"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> In-Reply-To: <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> --j1azIbJbsoCyWCk8ZG9fyAdj4kSQhbFsf Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US On 2019-11-11 8:13 p.m., Henk Birkholz wrote: > Hi Michael, > > please see in-line. > > On 11.11.19 12:37, Michael Richardson wrote: >> >> >> On 2019-11-11 5:57 p.m., Henk Birkholz wrote: >>> Hi all, >>> >>> on one hand, we have to address the overlap between YANG and EAT >>> information elements (statements & Claims) and how to deal with them >>> (one obvious issue, for example, would be potential redundant >>> information model content in two different drafts). >> > > Examples of the same information elements that are used in different > data models via Claims or statements: > > * EAT Time stamp / YANG clock info > * EAT Origination / YANG attestation key cert, or > * EAT Uptime / YANG tpm ticks Those aren't EATs, those are attributes of claims that an EAT could inclu= de. If you are saying that we could write a YANG module describing those claims, and that they could be used to describe both claims of an EAT, but also results from a TPM 1.2/2.0 call, then I understand finally.=C2=A0= =C2=A0 > >> Can you give me an example, but I'm not getting the issue. >> I think that we will be the first to attempt to use JOSE to sign a JSO= N >> serialized YANG object, resulting in a JWT.=C2=A0 Well, technically, i= t's >> probably not a JWT, because we aren't going to base64url it and put >> periods between the pieces, I think.=C2=A0 It's just JOSE, but I don't= mind >> if we call it a JWT. > > As far as I know, simply wrapping a "JSON serialized YANG object" in > JOSE does not create a JWT.=20 A JWT is a triple of three base64URL encoded objects, one of which is a JOSE format signature. We want COSE and JOSE, not CWT and JWT, I think. > >> draft-ietf-anima-constrained-voucher does CBOR serialized YANG which i= s >> signed with COSE. > > With CBOR serialization most things more straightforward and a tad bit > simpler. I do not think that we have any issues on the binary side of > things here. Or am I missing something obvious? In CBOR, binary is not encoded in any special way, so no issues, agreed. If that argues for doing CBOR-only, I personally do not mind, but the WG has been pretty clear about wanting both. --j1azIbJbsoCyWCk8ZG9fyAdj4kSQhbFsf-- --Qelea0JGUPzuQ8SSTg7uDgaFMbfqMwbCx Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3KfxcACgkQcAKuwszY gEPy9wwAg1eB3k6m2Gk9SQmFWHjs5SYTNjl5kg05OU52iPl9/BjbXoxjKDbfq+Ik M21qe5SdHehlZ5WinMkjSU9jJxLtf2osQohrGdiCQj+wYFmNHRe2Ru8nDHbpW6zS +dG/wGSfKFhHV6bk1lmR93D3QeuC75SEPSZq5OLMxJLAhljeA2s222+kT2BqA+/E jFRo/9juThVQSqscPvyNdc+ootUFlzA6jX9amE6FrapVFVEXz9VxqoiF3QVM+egG sNoD2VAywEwWCfUazQ3BnsY6K6s+sbLJfske2LZLB4DjZA+GWu0E9eycI3HgCwma g2RTIelUmiArLAsa5yYJc07I/vaT4F/D8t9jo8LHSK7aWydhuCFTw3cByenNw1UD 7B8lx0jrbx0cQ5aa81KARHa6aqTn7d19npyiI29ASJQH0fFu5KrZ3VgqYrdVfCp2 YQ5WlyA/457ZHm+/qlkhYV6HYmRTX6Cenb2JvL5x+9rYru/CImLtBoA2s893dSEE o96DAfIJ =2uYj -----END PGP SIGNATURE----- --Qelea0JGUPzuQ8SSTg7uDgaFMbfqMwbCx-- From nobody Tue Nov 12 02:11:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C85C12024E for ; Tue, 12 Nov 2019 02:11:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ms3z43gCgh-D for ; Tue, 12 Nov 2019 02:11:50 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B368120125 for ; Tue, 12 Nov 2019 02:10:40 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xACAAb6R027922 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 12 Nov 2019 11:10:38 +0100 Received: from [134.102.157.164] (134.102.157.164) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Tue, 12 Nov 2019 11:10:32 +0100 To: Michael Richardson , References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <23b47242-cb99-2e86-67b3-beb7e0e51599@sit.fraunhofer.de> Date: Tue, 12 Nov 2019 11:10:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.157.164] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 10:11:52 -0000 On 12.11.19 10:44, Michael Richardson wrote: >>>> on one hand, we have to address the overlap between YANG and EAT >>>> information elements (statements & Claims) and how to deal with them >>>> (one obvious issue, for example, would be potential redundant >>>> information model content in two different drafts). >>> >> >> Examples of the same information elements that are used in different >> data models via Claims or statements: >> >> * EAT Time stamp / YANG clock info >> * EAT Origination / YANG attestation key cert, or >> * EAT Uptime / YANG tpm ticks > > Those aren't EATs, those are attributes of claims that an EAT could include. > If you are saying that we could write a YANG module describing those > claims, and that they could be used to describe both claims of an EAT, > but also results from a TPM 1.2/2.0 call, then I understand finally. Yes, that is basically a way to phrase the question, I think. Specialized questions are: do we need to do that? Do we want to do that? Is it technically okay to instead convey opaque EAT blobs via a YANG statement? And yes, those are not EATs :-) I was referring to the information elements and their serialization (statements & Claims) above. >> >>> Can you give me an example, but I'm not getting the issue. >>> I think that we will be the first to attempt to use JOSE to sign a JSON >>> serialized YANG object, resulting in a JWT.  Well, technically, it's >>> probably not a JWT, because we aren't going to base64url it and put >>> periods between the pieces, I think.  It's just JOSE, but I don't mind >>> if we call it a JWT. From nobody Tue Nov 12 08:30:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D50B120827 for ; Tue, 12 Nov 2019 08:30:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XYCrKqqTEa_r for ; Tue, 12 Nov 2019 08:30:29 -0800 (PST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DDAE120836 for ; Tue, 12 Nov 2019 08:30:27 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga008.fm.intel.com ([10.253.24.58]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Nov 2019 08:30:27 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,297,1569308400"; d="scan'208";a="202463413" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by fmsmga008.fm.intel.com with ESMTP; 12 Nov 2019 08:30:26 -0800 Received: from orsmsx157.amr.corp.intel.com (10.22.240.23) by ORSMSX106.amr.corp.intel.com (10.22.225.133) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 12 Nov 2019 08:30:26 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX157.amr.corp.intel.com ([169.254.9.64]) with mapi id 14.03.0439.000; Tue, 12 Nov 2019 08:30:26 -0800 From: "Smith, Ned" To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAG6gAIAA8mEAgAABTID//5RNgIABPsAAgAAArYA= Date: Tue, 12 Nov 2019 16:30:25 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.251.18.104] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 16:30:30 -0000 SXQgd2Fzbid0IG15IGludGVudGlvbiB0byBhc3NlcnQgdGhhdCBDRERMIHdhcyBhICdiaXRzIG9u IHRoZSB3aXJlJyBmb3JtYXQuIA0KDQrvu79PbiAxMS8xMi8xOSwgMDoyOCBBTSwgIlJBVFMgb24g YmVoYWxmIG9mIE1pY2hhZWwgUmljaGFyZHNvbiIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBi ZWhhbGYgb2YgbWNyQHNhbmRlbG1hbi5jYT4gd3JvdGU6DQoNCiAgICANCiAgICANCiAgICBPbiAy MDE5LTExLTEyIDU6MjcgYS5tLiwgU21pdGgsIE5lZCB3cm90ZToNCiAgICA+DQogICAgPiBZb3Xi gJlyZSBzYXlpbmcgWUFORyBmaWxscyBhIGdhcCB0aGF0IGlzIHNpbWlsYXIgdG8gd2hhdCBPcGVu QVBJL1JBTUwgZmlsbHM/DQogICAgPg0KICAgIA0KICAgIEkgZG9uJ3Qga25vdyB3aGF0IHRob3Nl IHRoaW5ncyBhcmUuDQogICAgSSBtaWdodCBzYXkgaXQgd2FzIHNpbWlsYXIgdG8gQ09SQkEsIGJ1 dCBJJ2QgYmUgZGF0aW5nIG15c2VsZiBhbmQgSQ0KICAgIG5ldmVyIHJlYWxseSBrbmV3IENPUkJB IHZlcnkgd2VsbC4NCiAgICANCiAgICA+IElkZWFsbHkgQ0RETCBjYW4gYmUgbWFwcGVkIHRvIG90 aGVyIGluZm9ybWF0aW9uIG1vZGVsbGluZyBsYW5ndWFnZXMNCiAgICA+IChlLmcuIFlBTkcpIHNv IHRoYXQgb25seSBvbmUgbm9ybWF0aXZlIGV4cHJlc3Npb24gbmVlZHMgdG8gYmUNCiAgICA+IGNh bm9uaXplZC4gSG93ZXZlciwgdGhhdCBpbXBsaWVzIGV4dHJhIHdvcmsgb24gYmVoYWxmIG9mIHRo ZSBZQU5HDQogICAgPiBkcmFmdHMgdG8gY29tZSB1cCB3aXRoIHRoZSBDRERMIGVxdWl2YWxlbnQu IE1heWJlIHRoYXQgaXMgdW5uZWNlc3NhcnkNCiAgICA+IGV4dHJhIHdvcmsgZm9yIGNvbnNpc3Rl bmN5IHNha2U/IFRoYXQgd291bGQgZm9yY2UgdGhlIGNvbnZlcnNhdGlvbnMNCiAgICA+IGFyb3Vu ZCB3aGV0aGVyIOKAmHRpbWXigJkgYW5kIOKAmHRpY2tz4oCZIGFyZSB0aGUgc2FtZSBpbmZvcm1h dGlvbiBtb2RlbA0KICAgID4gZXhwcmVzc2lvbiAoZm9yIGV4YW1wbGUpLg0KICAgID4NCiAgICAN CiAgICBDRERMIGNvdWxkIGJlIHVzZWQgdG8gZXhwbGFpbiBob3cgdGhlIFlBTkcgc2VyaWFsaXph dGlvbiB0byBDQk9SIG9yIEpTT04NCiAgICB3b3JrZWQuDQogICAgQnV0LCBDRERMIGlzIGFsc28g bm90IGEgYml0cy1vbi10aGUtd2lyZSB0aGluZywgaXQncyBhbHNvIHByb2JhYmx5IGh1bWFuDQog ICAgYW5kIGNvZGUgZ2VuZXJhdG9yLg0KICAgIChDYXJzdGVuIHNheXMgdGhhdCB0aGlzIGlzIG5v dCBleGNsdXNpdmUgdGhlIGNhc2UsIGFueW1vcmUsIGJ1dCBJIHRoaW5rDQogICAgaGF2aW5nIFR1 cmluZyBjb21wbGV0ZQ0KICAgIGluZm9ybWF0aW9uIG1vZGVsaW5nIGxhbmd1YWdlcyBpcyBhIGJh ZCB0aGluZywgYW5kIG1pZ2h0IGxlYWQgdG8gRGFsZWtzDQogICAgSW52YXNpb25zIGFuZCBDeWJl cm1lbiBLaW5ncykNCiAgICANCiAgICBJIHdvdWxkIGV4cGVjdCB0aGF0IGFuIFJGQyBvciBvdGhl ciBpbmR1c3RyeSBkb2N1bWVudCB0aGF0IGRldGFpbGVkIGENCiAgICBzZXJpZXMgb2YgY2xhaW1z IG1pZ2h0IHVzZSBDRERMIHRvIGRlc2NyaWJlIHRoZSBjb250ZW50cyBvZiB0aGUgZGF0YQ0KICAg IHRoYXQgbWFkZSB1cCB0aGUgZGV0YWlscyBvZiB0aGUgY2xhaW0uDQogICAgQnV0LCBhZ2Fpbiwg Zm9yIHRoZSBjb2RlIGdlbmVyYXRvcnMgKHdoZXRoZXIgaHVtYW4gb3IgbWFjaGluZSkNCiAgICAN CiAgICANCiAgICANCg0K From nobody Tue Nov 12 09:56:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCF03120991 for ; Tue, 12 Nov 2019 09:56:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TjduuDA9pHuN for ; Tue, 12 Nov 2019 09:56:44 -0800 (PST) Received: from p3plsmtpa07-09.prod.phx3.secureserver.net (p3plsmtpa07-09.prod.phx3.secureserver.net [173.201.192.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 001FD12098C for ; Tue, 12 Nov 2019 09:56:43 -0800 (PST) Received: from [10.141.0.10] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UaPCi9zPPM55NUaPCiZsqh; Tue, 12 Nov 2019 10:56:42 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> Date: Tue, 12 Nov 2019 09:56:41 -0800 Cc: rats@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> To: Michael Richardson X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfMyC75vJfXcEXrpEFE/HsAkNqXCWZlsYqzgYywGYLVdy8PgtQFOAZg+bQLxTBf5q5nMi+5/8q+ZxBFW0J+sbVqoQS7rhFXYMxwiLVuy6HwGy6Lyn7TAT MFdM2U9DQw91VqPF+FcD6FMFv8NwI+4b+NevbttBhK7YPLZn8mjDkDQYcI/3Ejm5S8TAWgbag/YJsst7Jgxwuwk8PoEzqsEqKiQ= Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 17:56:46 -0000 > On Nov 12, 2019, at 12:22 AM, Michael Richardson = wrote: >=20 > On 2019-11-12 3:52 a.m., Laurence Lundblade wrote: >> One more note on this. It seems wrong-headed to try express claims in >> YANG. To do that we=E2=80=99d need to invent a YANG signing standard = (YOSE?). >> Seems like YANG should be thought of as RPC / conveyance / transport >> here, not as a way to format a signed attestation token. >=20 > YANG is an information model (think ASN.1).=20 > It is for humans and for code generators, protocol inspectors, etc, it > is never bits on the wire. > It needs to be expressed somehow (XML, JSON, CBOR), which is akin to > BER/DER. > XML, JSON and CBOR all have signature standards (maybe more than one). > A specific claim could well have a complex set of information that it > conveys and that could be expressed in YANG, but I find it difficult = to > imagine such a thing. >=20 Got that one totally wrong. I even knew everything you describe about = YANG. I still think it is better if we just stick to EAT / CWT / JWT claims = described with CDDL as the way we define claims in RATS, except for a = few TPM-specific claims.=20 LL= From nobody Tue Nov 12 10:35:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1980F120A58 for ; Tue, 12 Nov 2019 10:35:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wTabPaRn1JRq for ; Tue, 12 Nov 2019 10:35:46 -0800 (PST) Received: from p3plsmtpa07-10.prod.phx3.secureserver.net (p3plsmtpa07-10.prod.phx3.secureserver.net [173.201.192.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0DC0C120A16 for ; Tue, 12 Nov 2019 10:35:46 -0800 (PST) Received: from [10.141.0.10] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id Ub0yiCAZlaS74Ub0zijd8d; Tue, 12 Nov 2019 11:35:45 -0700 From: Laurence Lundblade Message-Id: <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_76D93500-F5D0-453E-AAA1-B73DF919116E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 12 Nov 2019 10:35:44 -0800 In-Reply-To: Cc: "Smith, Ned" , Michael Richardson , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "rats@ietf.org" To: Henk Birkholz References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfNPPTdXlug89s1+rEC/dkGYw2MGUPbrKMIvxpo2dl1O8jf97WO9E/I9FtR0XbwqaUpq5aXnMmFXafOES2RSrs0WjAdZ9ZmM/BHBLfCskmDIg6XE0Hwxm QCkrEZKFFdeQmmo+YEkzMHru9Svo/386oc+rnVhajMNck5JHImwvUjFtDUptl+vgAsmkLSAlN4vye7M25ChKe/3kdw8XRRxodGi+z040Bop9Ivi2xMg3NHO/ oXlH7TCG/bZr08Q1956sfQTW4kw8+/DABCS3UFVAervkINYuGos1nUYjmSvY1Rqe42mv1HUOwqbEmJfPr0Fj13rKCq6uf9/OPzHh85wxyX0= Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 18:35:49 -0000 --Apple-Mail=_76D93500-F5D0-453E-AAA1-B73DF919116E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 An EAT would show up as a single statement in the RATS YANG module. The = EAT would be opaque in the RATS YANG module. The RATS work group would = not author any YANG to describe the claims described in the EAT = document.=20 The attester side implementation of this would: Have code that creates CWT/COSE/CBOR formatted EAT tokens. This would = probably be new code. Could also be JWT/JOSE/JSON. Not need a TPM Probably re use some existing libraries (JSON or XML or such) to = implement what is described in the RATS YANG Module. That would not be = anything to do with claims, so this part would exist primarily transport = the opaque EAT. I imagine if you were to use X.509 certificates with YANG, it would be = really similar. The EAT is analogous to the X.509 certificate. There = would be no YANG text authored to describe the internals of the X.509 = certificate. What I=E2=80=99ve described so far is what I want in the RATS YANG = Module in order for it to be adopted. The next paragraphs are about the = idea of the TPM Token. One way to describe my proposal is to split the current RATS YANG Module = document into two. A new TPM Token document would be created. It would describe a list of = claims and a signature over those claims. This would be compatible with = TPM signing. It would essentially be a serialization of the output of a = TPM. The RATS YANG Module document would have a large amount of its text = replaced with a single statement that is for the transfer of either an = EAT or a TPM Token. LL My thought is that EATs are opaque to the transport / conveyance = protocol and that the YANG module should just describe a transport pr > On Nov 12, 2019, at 12:28 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > maybe I lack the required background knowledge about YANG here. My = question is the following: Is it in-scope for a YANG modules (which = typically have a well-defined semantic scope for each statement) to = convey opaque EATs via a single statement. Or is it necessary to create = YANG statements for each well-defined EAT Claim? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 12.11.19 05:16, Laurence Lundblade wrote: >> What is most important for me is that the YANG document allow for EAT = tokens as that seems like an important upgrade path / alternative given = that EATs are much more capable. >> But flip it around. In RATS maybe it should be possible for TPM-based = attestations to go anywhere an EAT goes. You should be able move TPM = attestations around by HTTP, or in TLS extension points or maybe even as = an IMAP extension just like you can with EAT. To some degree FIDO has = done it. It has a pluggable attestation architecture that allows several = formats including TPM-based, Android SafetyNet (which is not Android key = store) and some FIDO-specific schemes that are more EAT like. >> That seems like it takes you to a clear demarcation between: >> * Self-securing signed attestation token >> * Token conveyance protocol >> This seems very good in concept. We often separate like this in = protocol design. >> Then one way to look at the RATS work is in three: >> 1. EAT Attestation Token >> 2. TPM Token (that can be carried by HTTP and almost any conceivable >> protocol extension) >> 3. A very specific YANG-based conveyance protocol for routers because >> that=E2=80=99s how routers like it and it is important for the = RATS work >> group constituency. >> Maybe we=E2=80=99ll find another specific conveyance protocol we=E2=80=99= ll want to address, but in general we don=E2=80=99t have to. All the web = app, IoS app and Android app frameworks will be OK just like they are = today for things like Android KeyStore. >> If you look at it this way, 1) then EAT is fine as, 2) we need to = define a new "TPM Token" format that is sort of an alternative to EAT, = and 3) the YANG module has to be tweaked so it is a carrier of EATs and = TPM Tokens. (I=E2=80=99m probably glossing over some of the complexity = with YANG and TPMs). >> TPM Token would not be a general claims carrier like EAT. TPM HW is = super locked down and limited and TPM Token would just do what TPMs can = do. Probably the =E2=80=9Cclaims" amount to a few PCRs. Since the TPM = signing format is fixed, the TPM Token signing format would be fixed. = TPM Token is sort of a serialization of the output of a TPM. (It can=E2=80= =99t be directly COSE as TPM=E2=80=99s can=E2=80=99t do RFC 8152 section = 4.4, the COSE-specific creation of the to-be-signed bytes, when signing; = probably similarly not JOSE). Since TPM Token is simple, will never = change and won=E2=80=99t have extensions we don=E2=80=99t need all the = weight of CDDL or YANG or such and can maybe go directly to JSON, XML or = CBOR. >> LL >>> On Nov 11, 2019, at 4:56 PM, Smith, Ned > wrote: >>>=20 >>> YANG I already being used to describe attestation flows and = attestation related data. So the reason why is it is already deployed. >>>=20 >>> YANG has been used as an IM language but more commonly as a DML. >>>=20 >>> When trying to talk about attestation "Claims" it helps if we're = speaking the same language. >>>=20 >>> =EF=BB=BFOn 11/11/19, 13:33 PM, "RATS on behalf of Sch=C3=B6nw=C3=A4ld= er, J=C3=BCrgen" = on behalf of J.Schoenwaelder@jacobs-university.de = > wrote: >>>=20 >>> Hi, >>>=20 >>> we commonly call YANG a data modeling language and not an = information >>> modeling language. Can someone explain why you want to use YANG? >>>=20 >>> /js >>>=20 >>> On Mon, Nov 11, 2019 at 09:27:09PM +0000, Smith, Ned wrote: >>>> You=E2=80=99re saying YANG fills a gap that is similar to what = OpenAPI/RAML fills? >>>>=20 >>>> It could be doing more than this as well, such as defining claims = (as was suggested in a previous email by I think Michael). If RATS = determined that the way to specify a Claim in the information model was = via CDDL (only) and there is a YANG expression of it, then that implies = a CDDL to YANG mapping is required. (Is that reasonable?). >>>>=20 >>>> Or RATS says that it is reasonable to use either/both CDDL and YANG = for Claims expressions. This suggests there are CDDL and YANG mappings = to whatever are the target DMLs (JOSE, COSE, DER, something else?). Does = YANG support DML mappings to JOSE, COSE and DER or just to YANG? Does = CDDL support mappings to DER and YANG (something else)? >>>>=20 >>>> Ideally CDDL can be mapped to other information modelling languages = (e.g. YANG) so that only one normative expression needs to be canonized. = However, that implies extra work on behalf of the YANG drafts to come up = with the CDDL equivalent. Maybe that is unnecessary extra work for = consistency sake? That would force the conversations around whether = =E2=80=98time=E2=80=99 and =E2=80=98ticks=E2=80=99 are the same = information model expression (for example). >>>>=20 >>>> -Ned >>>>=20 >>>> On 11/11/19, 11:52 AM, "RATS on behalf of Laurence Lundblade" = on behalf = of lgl@island-resort.com = > wrote: >>>>=20 >>>> One more note on this. It seems wrong-headed to try express claims = in YANG. To do that we=E2=80=99d need to invent a YANG signing standard = (YOSE?). Seems like YANG should be thought of as RPC / conveyance / = transport here, not as a way to format a signed attestation token. >>>>=20 >>>> LL >>>>=20 >>>>=20 >>>>=20 >>>> On Nov 11, 2019, at 11:47 AM, Laurence Lundblade = > wrote: >>>>=20 >>>> On Nov 10, 2019, at 9:20 PM, Michael Richardson = > wrote: >>>>=20 >>>>=20 >>>> I think the value add to the larger RATS effort of adding EAT = support >>>> to this YANG protocol is really high. It a core thing to do that = helps >>>> bring together the two attestation worlds and make the TPM and EAT >>>> work here less like ships in the night. >>>>=20 >>>> Can you explain what it would mean to add EAT support for a YANG = module? >>>>=20 >>>> The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a YANG = expert, but maybe like this: >>>>=20 >>>> Server Device >>>> GetAttestationTypes =E2=80=94> >>>> <- TYPE_TPM, TYPE_CWT /* bit flags = */ >>>>=20 >>>> GetAttestation(TYPE_CWT , nonce) =E2=80=94> >>>> <=E2=80=94 CWT Token /* a full = signed token */ >>>>=20 >>>> I assume YANG can carry opaque binary data of moderate size. >>>>=20 >>>> The yang module information model would have an element for a nonce = and for an opaque EAT. It would not describe any internals of the EAT. = The information model for the EAT is separate in the EAT document. >>>>=20 >>>> LL >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>=20 >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >>>=20 >>>=20 >>> -- >>> Juergen Schoenwaelder Jacobs University Bremen gGmbH >>> Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | = Germany >>> Fax: +49 421 200 3103 = >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >>>=20 >>>=20 >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 --Apple-Mail=_76D93500-F5D0-453E-AAA1-B73DF919116E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
An EAT would show up as a single statement in the RATS YANG = module. The EAT would be opaque in the RATS YANG module. The RATS work = group would not author any YANG to describe the claims described in the = EAT document. 

The attester side implementation of this would:
  • Have code that creates = CWT/COSE/CBOR formatted EAT tokens. This would probably be new code. = Could also be JWT/JOSE/JSON.
  • Not need a TPM
  • Probably re use some existing libraries (JSON or XML or such) = to implement what is described in the RATS YANG Module. That would not = be anything to do with claims, so this part would exist primarily = transport the opaque EAT.
I imagine if = you were to use X.509 certificates with YANG, it would be really = similar. The EAT is analogous to the X.509 certificate. There would be = no YANG text authored to describe the internals of the X.509 = certificate.

What I=E2=80=99ve described so far is what I want in the RATS = YANG Module in order for it to be adopted.  The next paragraphs are = about the idea of the TPM Token.



One way to describe my proposal is to = split the current RATS YANG Module document into two.

A new TPM Token document = would be created. It would describe a list of claims and a signature = over those claims. This would be compatible with TPM signing. It would = essentially be a serialization of the output of a TPM.

The RATS YANG Module = document would have a large amount of its text replaced with a single = statement that is for the transfer of either an EAT or a TPM = Token.

LL





My = thought is that EATs are opaque to the transport / conveyance protocol = and that the YANG module should just describe a transport pr

On Nov 12, 2019, at 12:28 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

maybe I lack the required = background knowledge about YANG here. My question is the following: Is = it in-scope for a YANG modules (which typically have a well-defined = semantic scope for each statement) to convey opaque EATs via a single = statement. Or is it necessary to create YANG statements for each = well-defined EAT Claim?

Viele Gr=C3=BC=C3=9Fe= ,

Henk

On = 12.11.19 05:16, Laurence Lundblade wrote:
What is most important for me is that the YANG = document allow for EAT tokens as that seems like an important upgrade = path / alternative given that EATs are much more capable.
But flip it around. In RATS maybe it should be possible for = TPM-based attestations to go anywhere an EAT goes. You should be able = move TPM attestations around by HTTP, or in TLS extension points or = maybe even as an IMAP extension just like you can with EAT. To some = degree FIDO has done it. It has a pluggable attestation architecture = that allows several formats including TPM-based, Android SafetyNet = (which is not Android key store) and some FIDO-specific schemes that are = more EAT like.
That seems like it takes you to a clear = demarcation between:
 * Self-securing signed = attestation token
 * Token conveyance protocol
This seems very good in concept. We often separate like this = in protocol design.
Then one way to look at the RATS work = is in three:
1. EAT Attestation Token
2. = TPM Token (that can be carried by HTTP and almost any conceivable
   protocol extension)
3. A = very specific YANG-based conveyance protocol for routers because
   that=E2=80=99s how routers like it and it = is important for the RATS work
   group = constituency.
Maybe we=E2=80=99ll find another specific = conveyance protocol we=E2=80=99ll want to address, but in general we = don=E2=80=99t have to. All the web app, IoS app and Android app = frameworks will be OK just like they are today for things like Android = KeyStore.
If you look at it this way, 1) then EAT is fine = as, 2) we need to define a new "TPM Token" format that is sort of an = alternative to EAT, and 3) the YANG module has to be tweaked so it is a = carrier of EATs and TPM Tokens. (I=E2=80=99m probably glossing over some = of the complexity with YANG and TPMs).
TPM Token would not = be a general claims carrier like EAT. TPM HW is super locked down and = limited and TPM Token would just do what TPMs can do. Probably the = =E2=80=9Cclaims" amount to a few PCRs. Since the TPM signing format is = fixed, the TPM Token signing format would be fixed. TPM Token is sort of = a serialization of the output of a TPM. (It can=E2=80=99t be directly = COSE as TPM=E2=80=99s can=E2=80=99t do RFC 8152 section 4.4, the = COSE-specific creation of the to-be-signed bytes, when signing; probably = similarly not JOSE). Since TPM Token is simple, will never change and = won=E2=80=99t have extensions we don=E2=80=99t need all the weight of = CDDL or YANG or such and can maybe go directly to JSON, XML or CBOR.
LL
On Nov = 11, 2019, at 4:56 PM, Smith, Ned <ned.smith@intel.com = <mailto:ned.smith@intel.com>> wrote:
YANG I already being used to describe attestation flows and = attestation related data. So the reason why is it is already = deployed.

YANG has been used as an IM = language but more commonly as a DML.

When = trying to talk about attestation "Claims" it helps if we're speaking the = same language.

=EF=BB=BFOn 11/11/19, 13:33 = PM, "RATS on behalf of Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" <rats-bounces@ietf.org= <mailto:rats-bounces@ietf.org> on behalf of J.Schoenwaelder@jacobs-university.de <mailto:J.Schoenwaelder@jacobs-university.de>> = wrote:

   Hi,

   we commonly call YANG a data = modeling language and not an information
   modeling language. Can someone explain why = you want to use YANG?

   /js

   On Mon, Nov 11, 2019 at 09:27:09PM +0000, = Smith, Ned wrote:
You=E2=80=99re saying YANG fills a gap that is similar to = what OpenAPI/RAML fills?

It could be doing = more than this as well, such as defining claims (as was suggested in a = previous email by I think Michael). If RATS determined that the way to = specify a Claim in the information model was via CDDL (only) and there = is a YANG expression of it, then that implies a CDDL to YANG mapping is = required. (Is that reasonable?).

Or RATS = says that it is reasonable to use either/both CDDL and YANG for Claims = expressions. This suggests there are CDDL and YANG mappings to whatever = are the target DMLs (JOSE, COSE, DER, something else?). Does YANG = support DML mappings to JOSE, COSE and DER or just to YANG? Does CDDL = support mappings to DER and YANG (something else)?

Ideally CDDL can be mapped to other information modelling = languages (e.g. YANG) so that only one normative expression needs to be = canonized. However, that implies extra work on behalf of the YANG drafts = to come up with the CDDL equivalent. Maybe that is unnecessary extra = work for consistency sake? That would force the conversations around = whether =E2=80=98time=E2=80=99 and =E2=80=98ticks=E2=80=99 are the same = information model expression (for example).

-Ned

On 11/11/19, 11:52 AM, = "RATS on behalf of Laurence Lundblade" <rats-bounces@ietf.org= <mailto:rats-bounces@ietf.org><mailto:rats-bounces@ietf.org> on behalf of lgl@island-resort.com= <mailto:lgl@island-resort.com><mailto:lgl@island-resort.com>> wrote:

One more note on this. It seems wrong-headed = to try express claims in YANG. To do that we=E2=80=99d need to invent a = YANG signing standard (YOSE?). Seems like YANG should be thought of as = RPC / conveyance / transport here, not as a way to format a signed = attestation token.

LL



On Nov 11, 2019, at 11:47 AM, = Laurence Lundblade <lgl@island-resort.com <mailto:lgl@island-resort.com><mailto:lgl@island-resort.com>> wrote:

On Nov 10, 2019, at 9:20 PM, Michael = Richardson <mcr+ietf@sandelman.ca <mailto:mcr+ietf@sandelman.ca><mailto:mcr+ietf@sandelman.ca>> wrote:


I think the value add to the = larger RATS effort of adding EAT support
to this YANG = protocol is really high. It a core thing to do that helps
bring together the two attestation worlds and make the TPM = and EAT
work here less like ships in the night.

Can you explain what it would mean to add EAT = support for a YANG module?

The EAT is an = opaque chunk of data in YANG. I=E2=80=99m not a YANG expert, but maybe = like this:

Server =             &n= bsp;           &nbs= p;     Device
GetAttestationTypes = =E2=80=94>
          &nb= sp;            = ;        <- TYPE_TPM, = TYPE_CWT /* bit flags */

GetAttestation(TYPE_CWT , nonce) =E2=80=94>
          &nb= sp;            = ;        <=E2=80=94 CWT Token = /* a full signed token */

I assume YANG can = carry opaque binary data of moderate size.

The yang module information model would have an element for a = nonce and for an opaque EAT. It would not describe any internals of the = EAT. The information model for the EAT is separate in the EAT = document.

LL




_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats


   --
   Juergen = Schoenwaelder =           Jacobs = University Bremen gGmbH
   Phone: +49 421 = 200 3587         Campus Ring 1 | = 28759 Bremen | Germany
   Fax: =   +49 421 200 3103 =         <https://www.jacobs-university.de/>
   _____________________________________________= __
   RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats


_______________________________________________RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


= --Apple-Mail=_76D93500-F5D0-453E-AAA1-B73DF919116E-- From nobody Tue Nov 12 10:58:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 394A3120B1C for ; Tue, 12 Nov 2019 10:58:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ea5WT0zPeS9b for ; Tue, 12 Nov 2019 10:58:04 -0800 (PST) Received: from p3plsmtpa09-01.prod.phx3.secureserver.net (p3plsmtpa09-01.prod.phx3.secureserver.net [173.201.193.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EF80120B0E for ; Tue, 12 Nov 2019 10:58:04 -0800 (PST) Received: from [10.141.0.10] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UbMZimmZrnaIyUbMZiAtpV; Tue, 12 Nov 2019 11:58:03 -0700 From: Laurence Lundblade Message-Id: <9AD0AC18-E959-428D-A6C0-D3E8E66A9AB7@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_5CBA44E9-F41F-47F9-84A6-5DA34B180FE4" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 12 Nov 2019 10:58:02 -0800 In-Reply-To: <01bbbb92-9b99-7636-50a4-a1b4a37e0903@sandelman.ca> Cc: "rats@ietf.org" To: Michael Richardson References: <01bbbb92-9b99-7636-50a4-a1b4a37e0903@sandelman.ca> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLmQWr75SXpZR5SQxcPQwT0HspnoEfpap7Sz2cJCiTM5tPxzqdvURW+O30uSVEpeRc67SxmmTbCVY/SKEVX1MBpQnhCv9L03hObUiIqpaVF08F8kbJ8u JmNddINMK11ZkhJ5EGKl3OPcvYjaTYnfCxRXA0C7QQbZTPfCsCFxkXKeUr3lI469zioU5IVHx6yjXohyOo7PXV4ZMsgK7u/qQ1c= Archived-At: Subject: Re: [Rats] What's to EAT? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 18:58:05 -0000 --Apple-Mail=_5CBA44E9-F41F-47F9-84A6-5DA34B180FE4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 12, 2019, at 1:08 AM, Michael Richardson = wrote: >=20 >=20 > On 2019-11-12 12:19 p.m., Dave Thaler wrote: >>=20 >> Ned Smith wrote: >>=20 >>> So far the group has used the term "EAT" to refer to both the >> information model and data serialization expressions. >>=20 >> =20 >>=20 >> I would rather see the term EAT (and any other terms ending in Token, >> like JWT and CWT) only be used to refer to >>=20 >> data serialization expressions, not the information model. >>=20 > I concur. I disagree with that. I don=E2=80=99t think we want one information model for all of RATS.=20 EAT has an information model and data model for what it expresses.=20 The YANG Module has an information and data model for what it expresses. The primary purpose for use of information models (plural!) is so we can = described things like claims once and then have a largely mechanical way = to serialize them in different ways, CBOR and JSON. Note that CWT and JWT don=E2=80=99t use the information model concept. = They are mostly two independently defined and loosely coordinated data = models. We are trying to do different by having a common information = model that covers both. One might argue that CWT and JWT should have = done what we are doing in EAT. LL --Apple-Mail=_5CBA44E9-F41F-47F9-84A6-5DA34B180FE4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 12, 2019, at 1:08 AM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


On 2019-11-12 12:19 p.m., Dave = Thaler wrote:

Ned Smith wrote:

So far the group has used the term "EAT" to = refer to both the
information model and data = serialization expressions.

 

I would rather see the term EAT (and any other = terms ending in Token,
like JWT and CWT) only be used to = refer to

data serialization expressions, = not the information model.

I = concur.

I = disagree with that.

I don=E2=80=99t think we want one information model for all = of RATS. 

EAT has an information model and data model for what it = expresses. 

The YANG Module has an information and data model for what it = expresses.

The = primary purpose for use of information models (plural!) is so we can = described things like claims once and then have a largely mechanical way = to serialize them in different ways, CBOR and JSON.

Note that CWT and JWT = don=E2=80=99t use the information model concept. They are mostly two = independently defined and loosely coordinated data models. We are trying = to do different by having a common information model that covers both. = One might argue that CWT and JWT should have done what we are doing in = EAT.

LL

= --Apple-Mail=_5CBA44E9-F41F-47F9-84A6-5DA34B180FE4-- From nobody Tue Nov 12 11:14:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1C24120845 for ; Tue, 12 Nov 2019 11:14:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=gWL3Q/uc; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=nt2gRSws Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xCd3c_Te8iPp for ; Tue, 12 Nov 2019 11:14:49 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7DB212004D for ; Tue, 12 Nov 2019 11:14:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=38128; q=dns/txt; s=iport; t=1573586088; x=1574795688; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=yVx5+0+DFZTvqc5ssp/06Qu4Rp/j2c7v0ZSrgqjFdbw=; b=gWL3Q/ucUgyboNOj4gSNjzX4X8qrAIqL1hrNzGuo25OeRZxjhZyQZVfc QoCTBjBg6VYdLMo+E6nYvJH6bEJX1szN8Q4sMVyTPBmgdlELpuTV5Us7Z 8SQiTrvU7PvRO8UG65vFBwCpIH3cvyBxIEx39LlHZJiznt5sap9wQL+XO 8=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A/DJXWRxLpBF4rzjXCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5YRyN/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A1RJKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZuIF0r6MNbhbjcxG4JJU1o2t3w=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A3AABOBMtd/5FdJa1mGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFtAgEBAQELAYEbLyknBWwrLSAECyoKhB+DRgO?= =?us-ascii?q?Kc4JemACCUgNUAgcBAQEJAwEBLQIBAYFMgnQCgh0kNwYOAgMLAQEEAQEBAgE?= =?us-ascii?q?FBG2FNwyFUQEBAQECARILBgoTAQE3AQQLAgEIEQQBASEBBgMCAgIwFAkIAgQ?= =?us-ascii?q?BDQUIBg0HgwGBeU0DDhEPAQKkVwKBOIhgdYEygn4BAQWFDBiCEAcJgTYBgVK?= =?us-ascii?q?KQRiBQD+BEUaCTD6EHikVH4JaMoIsjSUPIAORNY8ICoIlg0uCNI9gmXmNEoE?= =?us-ascii?q?1lhCDZgIEAgQFAg4BAQWBaCOBWHAVgydQERSQNgwXgQQBAYJKilN0AYEnjXa?= =?us-ascii?q?BMQGBDgEB?= X-IronPort-AV: E=Sophos;i="5.68,297,1569283200"; d="p7s'?scan'208,217";a="657446293" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Nov 2019 19:14:24 +0000 Received: from XCH-ALN-006.cisco.com (xch-aln-006.cisco.com [173.36.7.16]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id xACJEOwF027654 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 12 Nov 2019 19:14:24 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-006.cisco.com (173.36.7.16) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 13:14:23 -0600 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 13:14:22 -0600 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 12 Nov 2019 13:14:22 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FII3AXlL8z6TaagwsfQdEDp3hyC2KOofkGOnS46j7uB2V+0ZRLHvuz+Mp66mLTh9gjTvKphglXrXnTFFZJw70nnn/jTDt0P2D21ajxOCBaqVvQUtv3f5TSn3LorDME6ZvVCT91N9lFr3/J9VLsf98FKQznd5LYldp8jks5Ac3lC3CDYxYqfiRz3l+ySVdLanXp+RXYJ3DBTrt0sQ1/xuPu8cj32yGFZ+ZW5KVYdaV7MXUHkMeWgN6xjBkzgXi/UJv/BKGtknhvLkH99QEbe0shRonWbTvNteBF7eg4izZOKrMaaiBvT/9z2kyRBnE9uuci9w4ZYKRUI77HBbXv98gw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x6ioyvsNDyNEJHNwhdl1FECZLq3C7M+0Vd9dB9FxSsM=; b=CWuD+q5KGiYYjb+cS0dj1xMaZxHG9VBB7TN9mijUHj/9CoDGUrb6s/CFVwiMPRV1U3kcqptE0blMQUYibfbPyU7x7fRVhhgc2xMXKnSgXMuNY1SsO09ab7/fz/kEpL/jO6mWuDT9kaBcARH61bhYlZfRiDRIai48ITYjh/7/XAmtCKG5DGJZf0h4J6Ftv/PJD7PmN41HNXFKZ2SHexWJM0wwdadFZLjMMQ1GQka3TUDx1hjK1XIWEhqbEouATKr7/v0bEHdFPHH5uj5TvdMHT+7X9brJ6OaT5+1M+JLBcO+Q6Z2MBun9gFVUjU4hCskg6SDjyukxa5DiFuimROxhOQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x6ioyvsNDyNEJHNwhdl1FECZLq3C7M+0Vd9dB9FxSsM=; b=nt2gRSwsFBDkPeRge/Zc1TRkPrBw0T1JU/88yX6h5dDL+8Gk2cqN35H4kx4QPSffyMo4CZ8JKPSf8U1T5WBWbks/0Gjl2kE/3PljRESR9uHtpyJ6Yh7i0vq3XHfAyMqmw4xY8JZB7UM7GXEWl8+oi2m5eULeSQv5uuQfMoxkM+M= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB4012.namprd11.prod.outlook.com (20.176.125.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.26; Tue, 12 Nov 2019 19:14:21 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.027; Tue, 12 Nov 2019 19:14:21 +0000 From: "Eric Voit (evoit)" To: Dave Thaler , "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAASDm4A== Date: Tue, 12 Nov 2019 19:14:21 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T01:43:10.0511305Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a49e9ecc-8e3e-4bf2-b759-08bb20f89aec; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.78] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 22c2229d-54c6-4065-9771-08d767a485fd x-ms-traffictypediagnostic: DM6PR11MB4012: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(39860400002)(136003)(366004)(376002)(346002)(15404003)(199004)(189003)(102836004)(74316002)(2906002)(81166006)(186003)(6436002)(5660300002)(33656002)(7696005)(55016002)(66574012)(6246003)(53546011)(52536014)(66066001)(8676002)(6506007)(4326008)(8936002)(7736002)(14444005)(256004)(86362001)(76176011)(790700001)(6116002)(3846002)(66446008)(26005)(76116006)(66476007)(66616009)(66556008)(64756008)(236005)(9686003)(446003)(54896002)(99286004)(81156014)(66946007)(6306002)(316002)(11346002)(25786009)(54906003)(229853002)(110136005)(14454004)(486006)(476003)(6636002)(71200400001)(478600001)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB4012; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Ck+pxhmjgr4vz9bafwMuj9OSfxFmO5lieyYC++gVPA3JhTAuUY94nvBmhxtEcTX7TaVRkY26qLGwTL0239cm3aRVA5V1LtNWBW4rMHSAQGP4Nf1aPk8yu2+cDbvZu3dlnGNzJ+9q14j+xnW9ldpN2lCbx59Uopei1WiEuuQtJocBcmd3cT1D9yeQP4seaQSsmgSgxa8hDo12sADb/ZtHuNd4yAP/eEf9kJ6gOGxjCD/a3Jmtw/zVyqGE/GsuwnqW3t2WRM/yirqOZwLRjGaLPkKjMq9LRzoRGcfIInNBVIyjl7cU265TagoCdu1LKUSglzFVsgl+ZDJHLqQAnrlOkWLyUxFusex4zxjZzwWcPng8+FXyXZ7d8CzzdhfIQx6WKBCGfJXb5wlKlJntShcS5bcx1HI0nljaVX6cbV26BpbHNZi5FQjaDdtSoWZCEkL4 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0DC3_01D59963.78A79BC0" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 22c2229d-54c6-4065-9771-08d767a485fd X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 19:14:21.5571 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Q3OQPhfLyjGsZ2qgh7B1dGdYhongPQXQYMTR4a8xbvTGsSLPwLbpFkoj2gaqhWex X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB4012 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.16, xch-aln-006.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:14:52 -0000 ------=_NextPart_000_0DC3_01D59963.78A79BC0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0DC4_01D59963.78A79BC0" ------=_NextPart_001_0DC4_01D59963.78A79BC0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable As a network equipment vendor, TEEP environments and EAT format work = highlight interesting futures. And I support these works on that basis. =20 On the other hand, TPMs are embedded today in routers. And they are = integrated to existing network operations applications. However we have = no standardized based industry management model. And therefore today we = see no applications which span equipment vendor types. =20 So the TPM based YANG has immediate applicability, and should be = adopted. =20 =20 Eric =20 From: RATS, November 11, 2019 8:43 PM As far as I can understand from draft-birkholz-rats-basic-yang-module-01 = and draft-fedorkow-rats-network-device-attestation-01, they break down the = use case space as follows: =20 Requirements? +--------------+---------------+---------++--------------- | RoT | Host Firewall | Privacy || Solution =20 | Type | Enabled | Needed || Pieces =20 +--------------+---------------+---------++--------------- 1 | SGX | No | No || 2 | SGX | No | Yes || 3 | SGX | Yes | No || 4 | SGX | Yes | Yes || 5 | TrustZone | No | No || 6 | TrustZone | No | Yes || 7 | TrustZone | Yes | No || 8 | TrustZone | Yes | Yes || 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 10 | TPM | No | Yes || 11 | TPM | Yes | No || 12 | TPM | Yes | Yes || 13 |SecureElement | No | No || 14 |SecureElement | No | Yes || 15 |SecureElement | Yes | No || 16 |SecureElement | Yes | Yes || 17 | Firmware | No | No || 18 | Firmware | No | Yes || 19 | Firmware | Yes | No || 20 | Firmware | Yes | Yes || ... | ... | | || =20 And draft-fedorkow-rats-network-device-attestation-01 further scopes = itself down by only being applicable to cases with "embedded" apps only =3D Yes, and = where the security policy is only an Exact match against reference values =3D = Yes. I believe that the yang draft doesn't have those two restrictions, from = my reading. However, the point is that both drafts are VERY narrow, and in the table = shown above, only address 1 out of 20 possibilies in that space. =20 In contrast, the TEEP WG decided that it was not interested in narrow = scopings (specifically something Global Platform specific), but instead wanted = one general solution. =20 If the RATS WG spends effort on something that only addresses a single = row out of 20+ rows, then do we expect 19+ other solutions to also be done in the WG? Or = could we work on things that are broader and happen to also work for row 9? =20 I've seen others commenting on the fact that the YANG module only = supports TPMs and not other things (EATs etc), which would just add support for a couple more = rows, but still not be general. =20 Personally, I would much rather see the WG spend effort on things that = really are generic, i.e., work with or without host firewalls, work with multiple RoT/TEE = types, etc., rather than seeing an explosion of point solutions. =20 Dave =20 From: RATS > On = Behalf Of Smith, Ned Sent: Monday, November 11, 2019 10:12 AM To: Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade = >; Nancy = Cam-Winget (ncamwing) > Cc: rats@ietf.org ; Henk Birkholz = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft =20 Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support = existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by = a second TA where the TPM is a first TA) or as a conveyance (unsigned?) = token. Possibly, the only added value of the latter is a tag that = identifies it as a TPM binary format? =20 =20 On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - = FI/Espoo)" on = behalf of ian.oliver@nokia-bell-labs.com = > wrote: =20 > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that > EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know > others believe that too.=20 =20 I would disagree with the statement of "short run" ... TPM is = practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common = use, ie: practically all x86 machines, The attestation mechanisms = provided are going to be around for a very long time. =20 =20 >From telco experience, 30 years ago we said SS7 would only be around in = the short term. =20 > Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise > to add EAT to = it. =20 Agree =20 Ian =20 --=20 Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 =20 _____ =20 From: Laurence Lundblade > Sent: 11 November 2019 00:44 To: Nancy Cam-Winget (ncamwing) > Cc: Henk Birkholz >; rats@ietf..org = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft=20 =20 =20 On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = > wrote: =20 So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? Thanks, Nancy =20 I think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. =20 Remote TPM attestations are useful and necessary the short run, but are = of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 =20 If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. =20 It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. =20 Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise to add EAT to it. =20 LL =20 ------=_NextPart_001_0DC4_01D59963.78A79BC0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

As a = network equipment vendor, TEEP environments and EAT format work = highlight interesting futures.=C2=A0 And I support these works on that = basis.

 

On the other hand, TPMs are embedded today in = routers.=C2=A0 And they are integrated to existing network operations = applications.=C2=A0 However we have no standardized based industry = management model.=C2=A0 And therefore today we see no applications which = span equipment vendor types.

 

So the TPM = based YANG has immediate applicability, and should be adopted.=C2=A0 =

 

Eric

 

From: RATS, November 11, 2019 8:43 = PM

As far = as I can understand from draft-birkholz-rats-basic-yang-module-01 = and

draft-fedorkow-rats-network-device-attestation-01= , they break down the use case

space as = follows:

 

=

    &nbs= p;            = ;       = Requirements?

    &nbs= p;    = +--------------+---------------+---------++---------------

    &nbs= p;    |  = RoT         | Host Firewall | = Privacy ||   Solution    =

    &nbs= p;    |  = Type        |   = Enabled     | Needed  ||    = Pieces    

    &nbs= p;    +--------------+---------------+---------++----= -----------

    &nbs= p; 1  |  SGX         | = No            | = No      ||

    &nbs= p; 2  |  SGX         | = No            | = Yes     ||

    &nbs= p; 3  |  SGX         | = Yes           | = No      ||

    &nbs= p; 4  |  SGX         | = Yes           | = Yes     ||

    &nbs= p; 5  |  TrustZone   | = No            | = No      ||

    &nbs= p; 6  |  TrustZone   | = No            | = Yes     ||

    &nbs= p; 7  |  TrustZone   | = Yes           | = No      ||

    &nbs= p; 8  |  TrustZone   | = Yes           | = Yes     ||

    &nbs= p; 9  |  TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01

     = 10  |  TPM         | = No            | = Yes     ||

     = 11  |  TPM         | = Yes           | = No      ||

   =   12  |  = TPM         | = Yes           | = Yes     ||

     = 13  |SecureElement | = No            | = No      ||

     = 14  |SecureElement | = No            | = Yes     ||

     = 15  |SecureElement | = Yes           | = No      ||

     = 16  |SecureElement | = Yes           | = Yes     ||

     = 17  | Firmware     | = No            | = No      ||

     = 18  | Firmware     | = No            | = Yes     ||

     = 19  | Firmware     | = Yes           | = No      ||

     = 20  | Firmware     | = Yes           | = Yes     ||

     = ... |   ...        = |            =   |         = ||

 

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself = down

by only being applicable to cases with = "embedded" apps only =3D Yes, and = where

the security policy is only an Exact match = against reference values =3D Yes.

I believe that the yang = draft doesn't have those two restrictions, from my = reading.

However, the point is that both drafts are VERY = narrow, and in the table shown above,

only address 1 out of 20 = possibilies in that space.

 

In contrast, the TEEP WG = decided that it was not interested in narrow = scopings

(specifically something Global Platform = specific), but instead wanted one general = solution.

 

If the RATS WG spends = effort on something that only addresses a single row out of 20+ = rows,

then do we expect 19+ other solutions to also be = done in the WG?  Or could we work on things

that are broader and = happen to also work for row 9?

 

I've seen others = commenting on the fact that the YANG module only supports TPMs and = not

other things (EATs etc), which would just add = support for a couple more rows, but still not

be = general.

 

Personally, I would much = rather see the WG spend effort on things that really are = generic,

i.e., work with or without host firewalls, work = with multiple RoT/TEE types, etc., rather

than seeing an explosion = of point solutions.

 

Dave

 

From: RATS <rats-bounces@ietf.org> = On Behalf Of Smith, Ned
Sent: Monday, November 11, 2019 = 10:12 AM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs= .com>; Laurence Lundblade <lgl@island-resort.com>; = Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: rats@ietf.org; Henk Birkholz = <henk.birkholz@sit.fraunho= fer.de>
Subject: Re: [Rats] Call for adoption (after = draft rename) for Yang module draft

 

Right. This = implies the RATS =E2=80=9Ctoken=E2=80=9D should support existing = =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by a second = TA where the TPM is a first TA) or as a conveyance (unsigned?) token. = Possibly, the only added value of the latter is a tag that identifies it = as a TPM binary format?

 

 

On 11/10/19, 23:21 PM, "RATS on behalf = of Oliver, Ian (Nokia - FI/Espoo)" <rats-bounces@ietf.org on = behalf of ian.oliver@nokia-bell-labs= .com> wrote:

 

> Remote TPM attestations are = useful and necessary the short run, but are of very limited capability. = I believe that > EAT will replace TPM attestations in the long run = (maybe decades) because they are far more expressive. I know > others = believe that too. 

 

=

I would disagree with the = statement of "short run" ... TPM is practically the only = existing standardised (hardware, software, firmware, measurement - x86 = only etc) hardware root of trust in common use, ie: practically all x86 = machines,  The attestation mechanisms provided are going to be = around for a very long time. 

 

=

From telco experience, 30 years = ago we said SS7 would only be around in the short = term.

 

<= p class=3DMsoNormal style=3D'margin-left:.5in;background:white'>> Thus, I am opposed to = adoption with the current TPM-only draft. I=E2=80=99d be OK with the = current draft and a promise > to add EAT to = it.

 

=

Agree

<= div>

 

=

Ian

 

=

-- =

Dr. Ian Oliver

Cybersecurity = Research

Distinguished Member of Technical = Staff

Nokia Bell Labs

+358 50 483 = 6237

 

=

From: = Laurence Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com>
Cc: Henk Birkholz <henk.birkholz@sit.fraunho= fer.de>; rats@ietf..org = <rats@ietf.org>
Subject: = Re: [Rats] Call for adoption (after draft rename) for Yang module = draft

 

 

On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> = wrote:

 

So, = Laurence, are you still OK with the adoption of the current draft with a = rename for now?
Thanks, = Nancy

 

I think the value add to = the larger RATS effort of adding EAT support to this YANG protocol is = really high. It a core thing to do that helps bring together the two = attestation worlds and make the TPM and EAT work here less like ships in = the night.

 

Remote TPM attestations are = useful and necessary the short run, but are of very limited capability. = I believe that EAT will replace TPM attestations in the long run (maybe = decades) because they are far more expressive. I know others believe = that too. 

 

If we don=E2=80=99t include = EAT in the YANG mode it is sort of like defining HTTP to only convey = HTML to the exclusion of PDF. We=E2=80=99re defining an attestation = protocol that can only move one kind of attestation even though we have = consensus on what the other one looks like.

 

It seems relatively simple = to add EAT support (or promise to add EAT support). Pretty sure I heard = Henk agree to add it.

 

Thus, I am opposed to = adoption with the current TPM-only draft. I=E2=80=99d be OK with the = current draft and a promise to add EAT to = it.

 

LL

 

<= /div>
------=_NextPart_001_0DC4_01D59963.78A79BC0-- ------=_NextPart_000_0DC3_01D59963.78A79BC0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTEyMTkxNDE4WjAjBgkqhkiG 9w0BCQQxFgQUgXqYnAhsleOu4mUmEyILNsNYtjgwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAXR3v6UnlguxwKonSsBEK/S3TzCC6yms8/AxQLhAt6h3gRDZ8EUAeZcQ02EUspgehb C+2BB/eJyDU2VNVoGbSsSX5zDnhfKlFdIpgDvmePU88XdTpcQwVEbfyPhQBvUbfrxeB0HDy7xcTm Ie060lzcnuGboASBLFO+AnmegsCeFRT/5yWKZt33OHUqVdvGSReanc/pUdsMvlqbcF6X5C3u5o93 x3xy8LANIpbbbXtjF7Rb2483rqV5k1t1NeV2Gz7ZGO5VSpSHWCDNLNTobsOViMee0aVYjMIx8exI YrbiWZvhEfIRu1+tGk1NhxxfMGGn3JfvsWweibXn65Ot7OzjAAAAAAAA ------=_NextPart_000_0DC3_01D59963.78A79BC0-- From nobody Tue Nov 12 11:19:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B94E2120851 for ; Tue, 12 Nov 2019 11:19:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t2z69tNbaci3 for ; Tue, 12 Nov 2019 11:19:50 -0800 (PST) Received: from out-7.smtp.github.com (out-7.smtp.github.com [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8BC70120842 for ; Tue, 12 Nov 2019 11:19:50 -0800 (PST) Date: Tue, 12 Nov 2019 11:19:49 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573586389; bh=CS3oylCjJghnNDr6MvLkvPKMYA8JscURVFHyi5W9dFI=; h=Date:From:To:Subject:From; b=PKFGAXA1f2xo+Wg20rWx0O6NlacNeF0Tah/L6M6SRnzJSiFLoggsBxYeY0TCfEsD9 Mh4rKkuZxR8Ho5ZLedFMY4Drfj8QkIirx6vBQmzDUbOYzJH7bBbMyND3KTTLVELmkq TLLEjMM1ODvJ44CWstkNoo02lwCpUfWIm/WvmAHo= From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 34637f: Clarify description of disabled state X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:19:52 -0000 Branch: refs/heads/update_debug_claim Home: https://github.com/ietf-rats-wg/eat Commit: 34637f2ec60ae11fd735584a6bd78ce6e6fc7daa https://github.com/ietf-rats-wg/eat/commit/34637f2ec60ae11fd735584a6bd78ce6e6fc7daa Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Clarify description of disabled state Co-Authored-By: Thomas Fossati From nobody Tue Nov 12 11:20:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8B51120910 for ; Tue, 12 Nov 2019 11:20:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h7RTPmv476PM for ; Tue, 12 Nov 2019 11:20:36 -0800 (PST) Received: from out-22.smtp.github.com (out-22.smtp.github.com [192.30.252.205]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3407F120851 for ; Tue, 12 Nov 2019 11:20:19 -0800 (PST) Date: Tue, 12 Nov 2019 11:20:18 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573586418; bh=wwj7t+ZvTVFY2VWsFRP4W5ptLNJ36PZipQHsHCP4nzs=; h=Date:From:To:Subject:From; b=WxrVh4duRbU8D2N9L+L+ftbWbmI6YfZ714U+SaLAASVpyGPmT3u/Qt6hF6c/Eby6i 6j0Jfqnq6Td66SWzRee0Hxv72L+S25V45aVTQzaySVfUK+huavFT54n5Z4b0lMag6W gtuhRkq6hjq2M8nBfFiRoTrcslSKyvSy5U8tm2iU= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 73e6e4: Script updating gh-pages from 34637f2. [ci skip] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:20:38 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 73e6e46956a055dd52639aadf45dee20fd535bf9 https://github.com/ietf-rats-wg/eat/commit/73e6e46956a055dd52639aadf45dee20fd535bf9 Author: ID Bot Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M index.html M update_debug_claim/draft-ietf-rats-eat.html M update_debug_claim/draft-ietf-rats-eat.txt Log Message: ----------- Script updating gh-pages from 34637f2. [ci skip] From nobody Tue Nov 12 11:20:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C596C120B5E for ; Tue, 12 Nov 2019 11:20:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NbzSBV6Hf3Bk for ; Tue, 12 Nov 2019 11:20:38 -0800 (PST) Received: from out-2.smtp.github.com (out-2.smtp.github.com [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 023A7120A3B for ; Tue, 12 Nov 2019 11:20:23 -0800 (PST) Date: Tue, 12 Nov 2019 11:20:22 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573586422; bh=vYIZ9+8Cl6Ar+SWaqld+ar75Zl1rZlvFSK+b3QBoL18=; h=Date:From:To:Subject:From; b=CC+vLn24m2K2ArCVnOKm8XBK+RpSjl0wNi2R3m/SaWrSPcMfBaQkGotgi5sXQQAYJ 8FHlOlj/LJB3lUmcLaSs4jDMsnsG1QycyAHWognqOo+34fZKphile2Obcp+IvPCsz0 GXTqGSxsOT3GO+YZRl/cODXttWbnS1nMk2hEPaQ0= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 2024f9: Script updating issues at 2019-11-12T19:20:19Z. [c... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:20:43 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 2024f9c944054e998726dd57dda24798c026dd2f https://github.com/ietf-rats-wg/eat/commit/2024f9c944054e998726dd57dda24798c026dd2f Author: ID Bot Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M issues.json M pulls.json Log Message: ----------- Script updating issues at 2019-11-12T19:20:19Z. [ci skip] From nobody Tue Nov 12 11:41:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EA9C120922 for ; Tue, 12 Nov 2019 11:41:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=A+AH0Uix; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=BP4nrdee Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QnlpWAj_fHn5 for ; Tue, 12 Nov 2019 11:41:42 -0800 (PST) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F369B120A0F for ; Tue, 12 Nov 2019 11:41:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=40590; q=dns/txt; s=iport; t=1573587701; x=1574797301; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=wotjzf3fYZ7er1cT0IPT4EYOXosrAwmhEPVreooCJPI=; b=A+AH0Uixha/lYj4mK+/tpYHdaM/AoJ6UBxrmdD8NCdeUSfIuNuiXzZvh 2NX6MlT6uCgvupSytDN5Mng5QZctFq+31Xw4U9H8HpY/4ZwpFnpP5DaUz IUEqiAJWymQR8EFNHWp536JEAgvLRSFqahTRFT/AAiRUy+ZIcW31BRx0e 4=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AdmCJcBZLh2rp3AQmX30eG63/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20Q+bRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavncSs7AOxJVURu+DewNk0GUMs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A3AACOCstd/5xdJa1eBQMaAQEBAQE?= =?us-ascii?q?BAQEBAwEBAQERAQEBAgIBAQEBgW0CAQEBAQsBgRsvJCwFbCstIAQLKgqEH4N?= =?us-ascii?q?GA4pygl5/lwGBQoEQA1QCBwEBAQkDAQEYAQoKAgEBhEACgh0kNwYOAgMBAwI?= =?us-ascii?q?DAgEBBAEBAQIBBQRthQsGJgyFUQEBAQEDAQEQCwYKEwEBJQQDCwENAgIBBgI?= =?us-ascii?q?OAgIDIwEGAwICAhkMCxQDDgIEAQkEBQgGEQODAYF5TQMfDwECDJNfkGMCgTi?= =?us-ascii?q?IYHWBMoE7gUMBAQWFEBiCEAcDBgWBMQGBUopBGIFAP4ERRoIXNT6CYgEBgS4?= =?us-ascii?q?BCwIFAQkYBBEKDAkRgkkygiyNE0EBn1FuCoIlg0uCNIV4RIkkmXmOR5l2AgQ?= =?us-ascii?q?CBAUCDgEBBYFoIyo9cXAVO4JsUBEUiEWHcQkag1AzhGGFP3QBgSeNdg8XgQs?= =?us-ascii?q?BgQ4BAQ?= X-IronPort-AV: E=Sophos;i="5.68,297,1569283200"; d="p7s'?scan'208,217";a="378533430" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Nov 2019 19:41:39 +0000 Received: from XCH-ALN-015.cisco.com (xch-aln-015.cisco.com [173.36.7.25]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id xACJfd76027726 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 12 Nov 2019 19:41:39 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-015.cisco.com (173.36.7.25) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 13:41:38 -0600 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 14:41:36 -0500 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 12 Nov 2019 13:41:36 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Vy0GO2O07cUzlsvA+2xlCNJlWxgl31uAjJKJTgHA3opbTbl9peQaiSpy74QOQ7LFHgNDaQ7YqgGxPQMjii3jwTzM+l0fvhMDZ+c/2VgCzp1x01Pq1aDO+ADiQPh22lcNiM+pGPEC8478IDb3gpaYpZXJ6k7Sbh0BAOQ1djP2fFz/4JUY4gQ/fl+DYOieuQpIQ+Zf3Vg+5GJGGYEy0cOJbOjYHNvrJLsSS5kcf2ac8iyFBdY3Py9Kv9F2ZnSSkyllAa9ksex5rQiasLMphhS3x/2Ynxps+KmYin0CxmE0/YMxmuyWE6Td3+5H7SloJnhe0xKD8tFXyO7kGAv4R4ZCtg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=INaJcrFFqXTqhJbGpD2Jaxn+Uxmye/APcyajSCId2mA=; b=Wm/1/EGAAxaHhL8X1PtwK4P1v47rk11A9UOtSJKzIiX+mezIYl/GwTEKxV+3RMnoiSG7T//xezY3ZxFCL+HzsjFU+I1wfH20IEJff6C/1AHkAXVaqmO2CI8DZGwkxBuf28z7Letzpz3vp70Qe5KLK1YdxSpR/iLgDxKNg3v7i7jkz92ogYL7XdZxSH9YWin+KgNqU+zMpHwlXzyHlL/OxiMpK8iP58cuHr5RtP6A/6zbqy+K0b3+T+DHDT4+4GBf1SAADMohvDE9NEdX1bQor5/MkfeffJQKnkuBjvxkGlb0F7GX/Y/Kt38EoaT+0R5J6XsEP9z7thuLxYAQ3kRiGA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=INaJcrFFqXTqhJbGpD2Jaxn+Uxmye/APcyajSCId2mA=; b=BP4nrdeenLoVhtTMMI2i1x3Px4jIjP+D1JkocFj68PIA0qWD0H8to2GY0T5yp1piybb3iUxxpu8EnfetCbOStRzMdLK2gR6ZfsmnqoPuA+SZz0IzhGiXMZ8zYJaWtsjWQo3g8FnpPgxRyMADadMPVSoqzizQl1cvEDaE7owp7No= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3017.namprd11.prod.outlook.com (20.177.219.219) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.24; Tue, 12 Nov 2019 19:41:35 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.027; Tue, 12 Nov 2019 19:41:35 +0000 From: "Eric Voit (evoit)" To: Laurence Lundblade , Henk Birkholz CC: Michael Richardson , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Smith, Ned" , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmYgL8/lytau3hU+AhCwtIdg/0aeH5+wg Date: Tue, 12 Nov 2019 19:41:35 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> In-Reply-To: <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.78] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: e8554b71-e341-407a-ed79-08d767a853b5 x-ms-traffictypediagnostic: DM6PR11MB3017: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(396003)(136003)(346002)(376002)(39860400002)(189003)(199004)(66476007)(6116002)(66556008)(66446008)(64756008)(2906002)(66616009)(81166006)(229853002)(6436002)(8936002)(8676002)(790700001)(99286004)(3846002)(76116006)(110136005)(54906003)(6246003)(66574012)(316002)(52536014)(5660300002)(81156014)(66946007)(33656002)(561944003)(66066001)(966005)(14454004)(478600001)(7696005)(4326008)(606006)(71200400001)(76176011)(71190400001)(256004)(14444005)(25786009)(236005)(86362001)(9686003)(11346002)(446003)(54896002)(6306002)(74316002)(476003)(55016002)(7736002)(486006)(186003)(6506007)(102836004)(26005)(53546011); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3017; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: pBeQTWYV6BdBRw9DT0GKt/Hca5nyZQFHAwQatYq8tiVuJ3/wJq9jX1hugDoxudGfEuXleZjt/GEJ1sTe5+bHrECIXUI3ExZhaD4SIkdVl8b89HN5OJ7pVMtVPsrRgTpIDgHMjOqGknEG90TBHHI1Z9+aTi1GtufVofM9uq/AwCw9nVWaDn88ZceTq69z9iz3ngM74aRRCBQLW8zaoPbnCVMdZIb/g10GxyioIJRWc8Rd0YnYcSZqEHEfOIRewi4677P7exkBQiqqPkXCB2sc2FYyVBNZHUOd5NWiuhPkK270jEEpc+IZ7Ky+KxXu9EDT1jf0YH7hjsrvYeKwgVFPOxxsG7LzzDrHBCsMmf8CD8eNUhRH3qO0Eyvaeyqh8XhzT+QImtpQZkeF9ab8auewM3WG+XUu+LJrq4avlj9uiC2ZKFuotoecb856U0EA92nq x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0DCA_01D59967.41BC0520" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: e8554b71-e341-407a-ed79-08d767a853b5 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 19:41:35.2313 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: MYWHePYl1MXfQscrumJmdF13zrPklbWIrvaVoc4fhSc3hgq6qEjA2DvO06T3+8wl X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3017 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.25, xch-aln-015.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:41:46 -0000 ------=_NextPart_000_0DCA_01D59967.41BC0520 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0DCB_01D59967.41BC0520" ------=_NextPart_001_0DCB_01D59967.41BC0520 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable With YANG, it is possible to support both opaque transport of = information, as well as extracting that opaque information from a chip = contained within the attester. We will need both supported. =20 =20 For an example of why, consider a local Wireless Access Point which gets = signed GPS location from a chip:=20 * The Wireless Access Point will need to understand the GPS location = because it might only legally be allowed to turn on various radio = frequencies based on the country. * Remote devices might use YANG to ask the Wireless Access Point to only = send signed proof of location if it turns out they are in a particular = geography. =20 YANG models can support both opaque and explicitly typed data, even = within the same model. I expect that will be done in the cases = described below. It is also possible to have opaque data object with = its internals YANG modeled and decipherable by the recipient of that = opaque data. If you want more details on how this can be done, check = out: draft-ietf-netmod-yang-data-ext. =20 Thanks, Eric =20 From: RATS, November 12, 2019 1:36 PM =20 An EAT would show up as a single statement in the RATS YANG module. The = EAT would be opaque in the RATS YANG module. The RATS work group would = not author any YANG to describe the claims described in the EAT = document.=20 =20 The attester side implementation of this would: * Have code that creates CWT/COSE/CBOR formatted EAT tokens. This would = probably be new code. Could also be JWT/JOSE/JSON. * Not need a TPM * Probably re use some existing libraries (JSON or XML or such) to = implement what is described in the RATS YANG Module. That would not be = anything to do with claims, so this part would exist primarily transport = the opaque EAT. I imagine if you were to use X.509 certificates with YANG, it would be = really similar. The EAT is analogous to the X.509 certificate. There = would be no YANG text authored to describe the internals of the X.509 = certificate. =20 What I=E2=80=99ve described so far is what I want in the RATS YANG = Module in order for it to be adopted. The next paragraphs are about the = idea of the TPM Token. =20 =20 =20 One way to describe my proposal is to split the current RATS YANG Module = document into two. =20 A new TPM Token document would be created. It would describe a list of = claims and a signature over those claims. This would be compatible with = TPM signing. It would essentially be a serialization of the output of a = TPM. =20 The RATS YANG Module document would have a large amount of its text = replaced with a single statement that is for the transfer of either an = EAT or a TPM Token. =20 LL =20 =20 =20 =20 =20 My thought is that EATs are opaque to the transport / conveyance = protocol and that the YANG module should just describe a transport pr On Nov 12, 2019, at 12:28 AM, Henk Birkholz = > wrote: =20 Hi Laurence, maybe I lack the required background knowledge about YANG here. My = question is the following: Is it in-scope for a YANG modules (which = typically have a well-defined semantic scope for each statement) to = convey opaque EATs via a single statement. Or is it necessary to create = YANG statements for each well-defined EAT Claim? Viele Gr=C3=BC=C3=9Fe, Henk On 12.11.19 05:16, Laurence Lundblade wrote: What is most important for me is that the YANG document allow for EAT = tokens as that seems like an important upgrade path / alternative given = that EATs are much more capable. But flip it around. In RATS maybe it should be possible for TPM-based = attestations to go anywhere an EAT goes. You should be able move TPM = attestations around by HTTP, or in TLS extension points or maybe even as = an IMAP extension just like you can with EAT. To some degree FIDO has = done it. It has a pluggable attestation architecture that allows several = formats including TPM-based, Android SafetyNet (which is not Android key = store) and some FIDO-specific schemes that are more EAT like. That seems like it takes you to a clear demarcation between: * Self-securing signed attestation token * Token conveyance protocol This seems very good in concept. We often separate like this in protocol = design. Then one way to look at the RATS work is in three: 1. EAT Attestation Token 2. TPM Token (that can be carried by HTTP and almost any conceivable protocol extension) 3. A very specific YANG-based conveyance protocol for routers because that=E2=80=99s how routers like it and it is important for the RATS = work group constituency. Maybe we=E2=80=99ll find another specific conveyance protocol = we=E2=80=99ll want to address, but in general we don=E2=80=99t have to. = All the web app, IoS app and Android app frameworks will be OK just like = they are today for things like Android KeyStore. If you look at it this way, 1) then EAT is fine as, 2) we need to define = a new "TPM Token" format that is sort of an alternative to EAT, and 3) = the YANG module has to be tweaked so it is a carrier of EATs and TPM = Tokens. (I=E2=80=99m probably glossing over some of the complexity with = YANG and TPMs). TPM Token would not be a general claims carrier like EAT. TPM HW is = super locked down and limited and TPM Token would just do what TPMs can = do. Probably the =E2=80=9Cclaims" amount to a few PCRs. Since the TPM = signing format is fixed, the TPM Token signing format would be fixed. = TPM Token is sort of a serialization of the output of a TPM. (It = can=E2=80=99t be directly COSE as TPM=E2=80=99s can=E2=80=99t do RFC = 8152 section 4.4, the COSE-specific creation of the to-be-signed bytes, = when signing; probably similarly not JOSE). Since TPM Token is simple, = will never change and won=E2=80=99t have extensions we don=E2=80=99t = need all the weight of CDDL or YANG or such and can maybe go directly to = JSON, XML or CBOR. LL On Nov 11, 2019, at 4:56 PM, Smith, Ned > wrote: YANG I already being used to describe attestation flows and attestation = related data. So the reason why is it is already deployed. YANG has been used as an IM language but more commonly as a DML. When trying to talk about attestation "Claims" it helps if we're = speaking the same language. =EF=BB=BFOn 11/11/19, 13:33 PM, "RATS on behalf of = Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" on behalf = of J.Schoenwaelder@jacobs-university.de = = > wrote: Hi, we commonly call YANG a data modeling language and not an information modeling language. Can someone explain why you want to use YANG? /js On Mon, Nov 11, 2019 at 09:27:09PM +0000, Smith, Ned wrote: You=E2=80=99re saying YANG fills a gap that is similar to what = OpenAPI/RAML fills? It could be doing more than this as well, such as defining claims (as = was suggested in a previous email by I think Michael). If RATS = determined that the way to specify a Claim in the information model was = via CDDL (only) and there is a YANG expression of it, then that implies = a CDDL to YANG mapping is required. (Is that reasonable?). Or RATS says that it is reasonable to use either/both CDDL and YANG for = Claims expressions. This suggests there are CDDL and YANG mappings to = whatever are the target DMLs (JOSE, COSE, DER, something else?). Does = YANG support DML mappings to JOSE, COSE and DER or just to YANG? Does = CDDL support mappings to DER and YANG (something else)? Ideally CDDL can be mapped to other information modelling languages = (e.g. YANG) so that only one normative expression needs to be canonized. = However, that implies extra work on behalf of the YANG drafts to come up = with the CDDL equivalent. Maybe that is unnecessary extra work for = consistency sake? That would force the conversations around whether = =E2=80=98time=E2=80=99 and =E2=80=98ticks=E2=80=99 are the same = information model expression (for example). -Ned On 11/11/19, 11:52 AM, "RATS on behalf of Laurence Lundblade" = = on behalf = of lgl@island-resort.com = > wrote: One more note on this. It seems wrong-headed to try express claims in = YANG. To do that we=E2=80=99d need to invent a YANG signing standard = (YOSE?). Seems like YANG should be thought of as RPC / conveyance / = transport here, not as a way to format a signed attestation token. LL On Nov 11, 2019, at 11:47 AM, Laurence Lundblade = > wrote: On Nov 10, 2019, at 9:20 PM, Michael Richardson = > wrote: I think the value add to the larger RATS effort of adding EAT support to this YANG protocol is really high. It a core thing to do that helps bring together the two attestation worlds and make the TPM and EAT work here less like ships in the night. Can you explain what it would mean to add EAT support for a YANG module? The EAT is an opaque chunk of data in YANG. I=E2=80=99m not a YANG = expert, but maybe like this: Server Device GetAttestationTypes =E2=80=94> <- TYPE_TPM, TYPE_CWT /* bit flags */ GetAttestation(TYPE_CWT , nonce) =E2=80=94> <=E2=80=94 CWT Token /* a full signed = token */ I assume YANG can carry opaque binary data of moderate size. The yang module information model would have an element for a nonce and = for an opaque EAT. It would not describe any internals of the EAT. The = information model for the EAT is separate in the EAT document. LL _______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats -- Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | = Germany Fax: +49 421 200 3103 _______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats _______________________________________________ RATS mailing list RATS@ietf.org =20 https://www.ietf.org/mailman/listinfo/rats =20 =20 ------=_NextPart_001_0DCB_01D59967.41BC0520 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

With YANG, = it is possible to support both opaque transport of information, as well = as extracting that opaque information from a chip contained within the = attester.=C2=A0 We will need both supported.=C2=A0

 

For an = example of why, consider a local Wireless Access Point which gets signed = GPS location from a chip:

  • The Wireless Access = Point will need to understand the GPS location because it might only = legally be allowed to turn on various radio frequencies based on the = country.
  • Remote devices might = use YANG to ask the Wireless Access Point to only send signed proof of = location if it turns out they are in a particular = geography.

 

YANG models = can support both opaque and explicitly typed data, even within the same = model.=C2=A0 I expect that will be done in the cases described = below.=C2=A0 It is also possible to have opaque data object with its = internals YANG modeled and decipherable by the recipient of that opaque = data.=C2=A0=C2=A0 If you want more details on how this can be done, = check out: draft-ietf-netmod-yang-data-ext.

 

Thanks,
Eric

 

From: RATS, = November 12, 2019 1:36 PM

 

An EAT = would show up as a single statement in the RATS YANG module. The EAT = would be opaque in the RATS YANG module. The RATS work group would not = author any YANG to describe the claims described in the EAT = document. 

 

The attester side implementation of this = would:

  • Have code that creates CWT/COSE/CBOR formatted EAT tokens. = This would probably be new code. Could also be = JWT/JOSE/JSON.
  • Not need a TPM
  • Probably re use some existing libraries (JSON or XML or = such) to implement what is described in the RATS YANG Module. That would = not be anything to do with claims, so this part would exist primarily = transport the opaque EAT.

I imagine if you were to use X.509 certificates with = YANG, it would be really similar. The EAT is analogous to the X.509 = certificate. There would be no YANG text authored to describe the = internals of the X.509 certificate.

 

What I=E2=80=99ve described so far is what I want in = the RATS YANG Module in order for it to be adopted.  The next = paragraphs are about the idea of the TPM = Token.

 

 

 

One way to describe my proposal is to split the = current RATS YANG Module document into two.

 

A = new TPM Token document would be created. It would describe a list of = claims and a signature over those claims. This would be compatible with = TPM signing. It would essentially be a serialization of the output of a = TPM.

 

The RATS YANG Module document would have a large = amount of its text replaced with a single statement that is for the = transfer of either an EAT or a TPM Token.

 

LL

 

 

 

 

 

My = thought is that EATs are opaque to the transport / conveyance protocol = and that the YANG module should just describe a transport = pr



On Nov 12, 2019, at 12:28 AM, Henk Birkholz <henk.birkholz@sit.fraunho= fer.de> wrote:

 

Hi = Laurence,

maybe I lack the required background knowledge about = YANG here. My question is the following: Is it in-scope for a YANG = modules (which typically have a well-defined semantic scope for each = statement) to convey opaque EATs via a single statement. Or is it = necessary to create YANG statements for each well-defined EAT = Claim?

Viele Gr=C3=BC=C3=9Fe,

Henk

On 12.11.19 = 05:16, Laurence Lundblade wrote:

What = is most important for me is that the YANG document allow for EAT tokens = as that seems like an important upgrade path / alternative given that = EATs are much more capable.
But flip it around. In RATS maybe it = should be possible for TPM-based attestations to go anywhere an EAT = goes. You should be able move TPM attestations around by HTTP, or in TLS = extension points or maybe even as an IMAP extension just like you can = with EAT. To some degree FIDO has done it. It has a pluggable = attestation architecture that allows several formats including = TPM-based, Android SafetyNet (which is not Android key store) and some = FIDO-specific schemes that are more EAT like.
That seems like it = takes you to a clear demarcation between:
 * Self-securing = signed attestation token
 * Token conveyance protocol
This = seems very good in concept. We often separate like this in protocol = design.
Then one way to look at the RATS work is in three:
1. EAT = Attestation Token
2. TPM Token (that can be carried by HTTP and = almost any conceivable
   protocol extension)
3. A = very specific YANG-based conveyance protocol for routers = because
   that=E2=80=99s how routers like it and it = is important for the RATS work
   group = constituency.
Maybe we=E2=80=99ll find another specific conveyance = protocol we=E2=80=99ll want to address, but in general we don=E2=80=99t = have to. All the web app, IoS app and Android app frameworks will be OK = just like they are today for things like Android KeyStore.
If you = look at it this way, 1) then EAT is fine as, 2) we need to define a new = "TPM Token" format that is sort of an alternative to EAT, and = 3) the YANG module has to be tweaked so it is a carrier of EATs and TPM = Tokens. (I=E2=80=99m probably glossing over some of the complexity with = YANG and TPMs).
TPM Token would not be a general claims carrier like = EAT. TPM HW is super locked down and limited and TPM Token would just do = what TPMs can do. Probably the =E2=80=9Cclaims" amount to a few = PCRs. Since the TPM signing format is fixed, the TPM Token signing = format would be fixed. TPM Token is sort of a serialization of the = output of a TPM. (It can=E2=80=99t be directly COSE as TPM=E2=80=99s = can=E2=80=99t do RFC 8152 section 4.4, the COSE-specific creation of the = to-be-signed bytes, when signing; probably similarly not JOSE). Since = TPM Token is simple, will never change and won=E2=80=99t have extensions = we don=E2=80=99t need all the weight of CDDL or YANG or such and can = maybe go directly to JSON, XML or = CBOR.
LL

On = Nov 11, 2019, at 4:56 PM, Smith, Ned <ned.smith@intel.com <mailto:ned.smith@intel.com>>= ; wrote:

YANG I already being used to describe attestation flows = and attestation related data. So the reason why is it is already = deployed.

YANG has been used as an IM language but more commonly = as a DML.

When trying to talk about attestation = "Claims" it helps if we're speaking the same = language.

=EF=BB=BFOn 11/11/19, 13:33 PM, "RATS on behalf of = Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>= ; on behalf of J.Schoenwaelder@jaco= bs-university.de <mailto:J.Schoenwaeld= er@jacobs-university.de>> = wrote:

   Hi,

   we commonly = call YANG a data modeling language and not an = information
   modeling language. Can someone explain = why you want to use = YANG?

   /js

   On Mon, Nov = 11, 2019 at 09:27:09PM +0000, Smith, Ned = wrote:

You=E2=80=99re saying YANG fills a gap = that is similar to what OpenAPI/RAML fills?

It could be doing = more than this as well, such as defining claims (as was suggested in a = previous email by I think Michael). If RATS determined that the way to = specify a Claim in the information model was via CDDL (only) and there = is a YANG expression of it, then that implies a CDDL to YANG mapping is = required. (Is that reasonable?).

Or RATS says that it is = reasonable to use either/both CDDL and YANG for Claims expressions. This = suggests there are CDDL and YANG mappings to whatever are the target = DMLs (JOSE, COSE, DER, something else?). Does YANG support DML mappings = to JOSE, COSE and DER or just to YANG? Does CDDL support mappings to DER = and YANG (something else)?

Ideally CDDL can be mapped to other = information modelling languages (e.g. YANG) so that only one normative = expression needs to be canonized. However, that implies extra work on = behalf of the YANG drafts to come up with the CDDL equivalent. Maybe = that is unnecessary extra work for consistency sake? That would force = the conversations around whether =E2=80=98time=E2=80=99 and = =E2=80=98ticks=E2=80=99 are the same information model expression (for = example).

-Ned

On 11/11/19, 11:52 AM, "RATS on behalf = of Laurence Lundblade" <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>= ;<mailto:rats-bounces@ietf.org>= ; on behalf of lgl@island-resort.com <mailto:lgl@island-resort.com>= ;<mailto:lgl@island-resort.com>= ;> wrote:

One more note on this. It seems wrong-headed to try = express claims in YANG. To do that we=E2=80=99d need to invent a YANG = signing standard (YOSE?). Seems like YANG should be thought of as RPC / = conveyance / transport here, not as a way to format a signed attestation = token.

LL



On Nov 11, 2019, at 11:47 AM, Laurence = Lundblade <lgl@island-resort.com <mailto:lgl@island-resort.com>= ;<mailto:lgl@island-resort.com>= ;> wrote:

On Nov 10, 2019, at 9:20 PM, Michael Richardson = <mcr+ietf@sandelman.ca = <mailto:mcr+ietf@sandelman.ca>= ;<mailto:mcr+ietf@sandelman.ca>= ;> wrote:


I think the value add to the larger RATS effort = of adding EAT support
to this YANG protocol is really high. It a core = thing to do that helps
bring together the two attestation worlds and = make the TPM and EAT
work here less like ships in the = night.

Can you explain what it would mean to add EAT support for = a YANG module?

The EAT is an opaque chunk of data in YANG. = I=E2=80=99m not a YANG expert, but maybe like this:

Server =             &= nbsp;           &n= bsp;     Device
GetAttestationTypes = =E2=80=94>
         &n= bsp;           &nb= sp;         <- TYPE_TPM, = TYPE_CWT /* bit flags */

GetAttestation(TYPE_CWT , nonce) = =E2=80=94>
         &n= bsp;           &nb= sp;         <=E2=80=94 = CWT Token /* a full signed token */

I assume YANG can carry = opaque binary data of moderate size.

The yang module information = model would have an element for a nonce and for an opaque EAT. It would = not describe any internals of the EAT. The information model for the EAT = is separate in the EAT = document.

LL





_______________________________________________
RATS= mailing list
RATS@ietf.org = <mailto:RATS@ietf.org>
https://www.ietf.org/= mailman/listinfo/rats



   --
 &nbs= p; Juergen Schoenwaelder =           Jacobs = University Bremen gGmbH
   Phone: +49 421 200 3587 =         Campus Ring 1 | 28759 = Bremen | Germany
   Fax:   +49 421 200 3103 =         <https://www.jacobs-university.= de/>
   ________________________________________= _______
   RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/= mailman/listinfo/rats

_______________________________________________
RATS= mailing list
RATS@ietf.org
https://www.ietf.org/= mailman/listinfo/rats

 

 

------=_NextPart_001_0DCB_01D59967.41BC0520-- ------=_NextPart_000_0DCA_01D59967.41BC0520 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTEyMTk0MTI0WjAjBgkqhkiG 9w0BCQQxFgQUsGLxY/qE1Wc5vBta2A/HlYDzRvcwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQARllNc1FAwvk5/7RNu/64oUTlGih7gDj34Qf4XlmxLfCicDBkLnT20ioAzsBgxw1ob h8wMCT/XcN4qUP2BHFX85J293IvIyID8eMgJI0yjyolduFDM0YhM+rYZXqzz8fS3u2Dd/kSFoqMt 08/mxjYsNbJNHwXlv+jSFZMzn91Ynq6d6YSM8q/l0DwBJcZ2JL1gls+KbL+JT8fzNJpskTM+dO+1 QH/Qtd8jWvpVkBgl4dIzhlioDwWaQDm+A7rmcS4fFhw5KEoVg/0yxSBojoMp7QVI7CKur6X2lr0P TwntMTW4KDHmqWwyMHPuDm4/kjy6tF19Jk8fd16KkYjLjMZ+AAAAAAAA ------=_NextPart_000_0DCA_01D59967.41BC0520-- From nobody Tue Nov 12 11:50:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2B4112004A for ; Tue, 12 Nov 2019 11:50:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ex1xdjihUYz4 for ; Tue, 12 Nov 2019 11:50:37 -0800 (PST) Received: from out-20.smtp.github.com (out-20.smtp.github.com [192.30.252.203]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2AE0F1200F8 for ; Tue, 12 Nov 2019 11:50:37 -0800 (PST) Date: Tue, 12 Nov 2019 11:50:36 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573588236; bh=DDJaF0bzszG1C2MIf14FriSdmb9zIDqL25P7MSlNKiA=; h=Date:From:To:Subject:From; b=VcHrCmBEhexU0OCzzr0+jQJYh0XUVcYpFtCXZ/Y+jevWAuK+N9T4n52x+saq+I4pE VPhKbLZaY42yB/jcgcjbQDRpP0dvDHrmbb6FeX9fPmfMvzVJXuOCdZMh13qWoCD1Vn 1S1V15EIW2KbUjxIE8I0kCZ7Ri9CE7NUODRudYu0= From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 6a52f5: Correct spelling of BlueTooth X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:50:39 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: 6a52f57ace4b3f28d43554c52ddd52a4ab8b57a8 https://github.com/ietf-rats-wg/eat/commit/6a52f57ace4b3f28d43554c52ddd52a4ab8b57a8 Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Correct spelling of BlueTooth Co-Authored-By: Thomas Fossati From nobody Tue Nov 12 11:50:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D9591200F8 for ; Tue, 12 Nov 2019 11:50:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gbGD6LXbZ3dD for ; Tue, 12 Nov 2019 11:50:47 -0800 (PST) Received: from out-23.smtp.github.com (out-23.smtp.github.com [192.30.252.206]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6B3D12004A for ; Tue, 12 Nov 2019 11:50:47 -0800 (PST) Received: from github-lowworker-b19c547.va3-iad.github.net (github-lowworker-b19c547.va3-iad.github.net [10.48.17.66]) by smtp.github.com (Postfix) with ESMTP id AEA546610C6 for ; Tue, 12 Nov 2019 11:50:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573588246; bh=88FMIYV4o2ZEu5fD6giIIdDRGqQWLcKvGKqgzgD90RU=; h=Date:From:To:Subject:From; b=zpJUJSFN3eXcHc3+VwYa33GFLG4+kLAysyQPF6GGqHkkL4NXNGjRwTGl3YCJNfy3U 3ZYN0K/JuNCVp/5D6MJ9eChbtl3+uZOfxbMUhRlj/QG5tU1JJSFHyuogO932xHTW1U DE3yhxY/qSGI93aFKk9tmJTEn3wUg7HXrYC8Fol4= Date: Tue, 12 Nov 2019 11:50:46 -0800 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] fda4a0: Grammar X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:50:49 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: fda4a07f983837d35b5c71d75e32bbb4768f4688 https://github.com/ietf-rats-wg/eat/commit/fda4a07f983837d35b5c71d75e32bbb4768f4688 Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Grammar Co-Authored-By: Thomas Fossati From nobody Tue Nov 12 11:51:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F7FA12011A for ; Tue, 12 Nov 2019 11:51:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V-Tg5wgV8Wbe for ; Tue, 12 Nov 2019 11:51:08 -0800 (PST) Received: from out-17.smtp.github.com (out-17.smtp.github.com [192.30.252.200]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74FCB1200B3 for ; Tue, 12 Nov 2019 11:51:08 -0800 (PST) Date: Tue, 12 Nov 2019 11:51:07 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573588267; bh=nq1CPlnK6m+3fp27D+EJ1EFxszftVZ4Qf/opygQ404o=; h=Date:From:To:Subject:From; b=bZWikVDqoNlYrFLn6mt73iK791sojB0ja1BfuSGt/GbMEv9FMuJzuL/OnmJ680oqY NQAq0GVY4SBahE4Jg8FMkWUA3zHWL3hIQZUROkMMzdPqC5Z+Ejhhr+Pm0ZCUy5pUz8 8h20UtcCUPeNSu/NrBjQUacK1okzFMg8635brlCY= From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 701e0e: Grammar X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:51:10 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: 701e0e80d822f9d380dc02c9486494ead018d548 https://github.com/ietf-rats-wg/eat/commit/701e0e80d822f9d380dc02c9486494ead018d548 Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Grammar Co-Authored-By: Thomas Fossati From nobody Tue Nov 12 11:52:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 492501200F8 for ; Tue, 12 Nov 2019 11:52:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t08thz5HnLsm for ; Tue, 12 Nov 2019 11:52:06 -0800 (PST) Received: from out-21.smtp.github.com (out-21.smtp.github.com [192.30.252.204]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06239120024 for ; Tue, 12 Nov 2019 11:52:06 -0800 (PST) Date: Tue, 12 Nov 2019 11:52:05 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573588325; bh=E+5qhNhkVArtaxv+W3OCEQL27OOhln+wAOypkeHNWro=; h=Date:From:To:Subject:From; b=Nf8leObkhY5WjHqwXj6YRFmlrZ9DIw99s9ZO/OL9y10eZFlMfitjnO3FnwulLA4GD vf1TzuHgo/1oGxUZGvIcGOCdZirCBSfSSCgOUQeDQian8az5wh2ZJrHDacxxVQLw6n 4wNdn0ZCWXXpXVsUqFHFNxRnr8mWqNoNaKiWWphk= From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 1fe90a: Spelling X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:52:07 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: 1fe90a49f0954fbf754fa9d439948ff0bd3846ea https://github.com/ietf-rats-wg/eat/commit/1fe90a49f0954fbf754fa9d439948ff0bd3846ea Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Spelling Co-Authored-By: setrofim From nobody Tue Nov 12 11:52:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8049B120024 for ; Tue, 12 Nov 2019 11:52:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t7mZWjfOXBIc for ; Tue, 12 Nov 2019 11:52:20 -0800 (PST) Received: from out-18.smtp.github.com (out-18.smtp.github.com [192.30.252.201]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D4921200F8 for ; Tue, 12 Nov 2019 11:52:20 -0800 (PST) Received: from github-lowworker-e8b54ca.ac4-iad.github.net (github-lowworker-e8b54ca.ac4-iad.github.net [10.52.23.39]) by smtp.github.com (Postfix) with ESMTP id BB0746E0443 for ; Tue, 12 Nov 2019 11:52:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573588339; bh=jN7HrdfOh4jx2WMPrzh9XhI24UpGi0AUo7m5s5BiXR4=; h=Date:From:To:Subject:From; b=x/gXml4TpXH/X610VQi1rqQfIx6OCqTe1h4pRv8o2fPS/RmIsncF1afJ8XskBNilz c+QtJo0SyIC5H20G8Hs9qwgioCwJMc8zm8WITZSrffqe0UX41HocIMEtKJ61aTnY4I hq+UMKsjP3zLeFWkwloJdVcUwa5EeaGR9iRxDPqE= Date: Tue, 12 Nov 2019 11:52:19 -0800 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] b154dc: Grammar X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 19:52:21 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: b154dc9cc34215d78e721381a041f28bbd627883 https://github.com/ietf-rats-wg/eat/commit/b154dc9cc34215d78e721381a041f28bbd627883 Author: Laurence Lundblade Date: 2019-11-12 (Tue, 12 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Grammar Co-Authored-By: Thomas Fossati From nobody Tue Nov 12 12:22:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18164120887 for ; Tue, 12 Nov 2019 12:22:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hZN3bVWD3Hf7 for ; Tue, 12 Nov 2019 12:22:01 -0800 (PST) Received: from p3plsmtpa09-01.prod.phx3.secureserver.net (p3plsmtpa09-01.prod.phx3.secureserver.net [173.201.193.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 588FA12085E for ; Tue, 12 Nov 2019 12:22:01 -0800 (PST) Received: from [10.141.0.10] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id Ucfoin5ZCnaIyUcfoiB0Yi; Tue, 12 Nov 2019 13:22:00 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_CAA04234-1AD5-4EC7-8DFB-74562A916F48" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 12 Nov 2019 12:21:59 -0800 In-Reply-To: Cc: Dave Thaler , "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz To: "Eric Voit (evoit)" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfDabtjWhaWDoVclU9qyi/GL11ztY8ddDWsLzwpU2V+K9i+zQvJoWkF+MRUtkstQeDpq5/4m2Rp2w0lduSbZPVyNW0wPKfQFYgJb0kWWh9bBoYj51O7Ca WPRYGKGKcVvh6u1cXt2G6V0oTpw/Crf4HzDazAq9zBHJ+HOL5fl/iCcFDMx0WtvphMqKLfabFvdcIGiPxy3dIxCMN+t8hTzTLKvJKXy/Bleud4mvEyQrl55x IauNHe48P7Yes2cimiPKApulhVE/edu18OzFy5McmRmoA/EwWr4/5aeduKSUGreeBpPRpdQnYuOlUVzG+zLJ9j2TbgZjRltphNFdtc76mxM+NhYSuowG3gcn 4bOb9bM1lBy15cEnHHVOVHOoaorTHqw/ZiErT6A+I6jZWO6NfRg= Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 20:22:04 -0000 --Apple-Mail=_CAA04234-1AD5-4EC7-8DFB-74562A916F48 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Here=E2=80=99s three possible versions of the RATS YANG Module: 1) As is today, TPM only, no separation of transport from attestation = token. no EAT 2) As is today + EAT transport. There=E2=80=99s separation of transport = from token format for EAT, but not for TPM attestation 3) Full separation of transport from attestation token. The RATS YANG = modules focuses on transport I want a commitment to 2) or 3) for adoption. I agree that RATS should = support some YANG-based means for attestation for routers. Dave seems to be saying none at all. Which do you want? My guess is one MUST be pursued by RATS. You=E2=80=99d= be happy with 1) and probably 2). 3) is probably still to fuzzy to say. LL > On Nov 12, 2019, at 11:14 AM, Eric Voit (evoit) = wrote: >=20 > As a network equipment vendor, TEEP environments and EAT format work = highlight interesting futures. And I support these works on that basis. > =20 > On the other hand, TPMs are embedded today in routers. And they are = integrated to existing network operations applications. However we have = no standardized based industry management model. And therefore today we = see no applications which span equipment vendor types. > =20 > So the TPM based YANG has immediate applicability, and should be = adopted.=20 > =20 > Eric > =20 > From: RATS, November 11, 2019 8:43 PM >=20 > As far as I can understand from = draft-birkholz-rats-basic-yang-module-01 and > draft-fedorkow-rats-network-device-attestation-01, they break down the = use case > space as follows: > =20 > Requirements? > +--------------+---------------+---------++--------------- > | RoT | Host Firewall | Privacy || Solution =20 > | Type | Enabled | Needed || Pieces =20 > +--------------+---------------+---------++--------------- > 1 | SGX | No | No || > 2 | SGX | No | Yes || > 3 | SGX | Yes | No || > 4 | SGX | Yes | Yes || > 5 | TrustZone | No | No || > 6 | TrustZone | No | Yes || > 7 | TrustZone | Yes | No || > 8 | TrustZone | Yes | Yes || > 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 > 10 | TPM | No | Yes || > 11 | TPM | Yes | No || > 12 | TPM | Yes | Yes || > 13 |SecureElement | No | No || > 14 |SecureElement | No | Yes || > 15 |SecureElement | Yes | No || > 16 |SecureElement | Yes | Yes || > 17 | Firmware | No | No || > 18 | Firmware | No | Yes || > 19 | Firmware | Yes | No || > 20 | Firmware | Yes | Yes || > ... | ... | | || > =20 > And draft-fedorkow-rats-network-device-attestation-01 further scopes = itself down > by only being applicable to cases with "embedded" apps only =3D Yes, = and where > the security policy is only an Exact match against reference values =3D = Yes. > I believe that the yang draft doesn't have those two restrictions, = from my reading. > However, the point is that both drafts are VERY narrow, and in the = table shown above, > only address 1 out of 20 possibilies in that space. > =20 > In contrast, the TEEP WG decided that it was not interested in narrow = scopings > (specifically something Global Platform specific), but instead wanted = one general solution. > =20 > If the RATS WG spends effort on something that only addresses a single = row out of 20+ rows, > then do we expect 19+ other solutions to also be done in the WG? Or = could we work on things > that are broader and happen to also work for row 9? > =20 > I've seen others commenting on the fact that the YANG module only = supports TPMs and not > other things (EATs etc), which would just add support for a couple = more rows, but still not > be general. > =20 > Personally, I would much rather see the WG spend effort on things that = really are generic, > i.e., work with or without host firewalls, work with multiple RoT/TEE = types, etc., rather > than seeing an explosion of point solutions. > =20 > Dave > =20 > From: RATS > On = Behalf Of Smith, Ned > Sent: Monday, November 11, 2019 10:12 AM > To: Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade = >; Nancy Cam-Winget = (ncamwing) > > Cc: rats@ietf.org ; Henk Birkholz = > > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support = existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by = a second TA where the TPM is a first TA) or as a conveyance (unsigned?) = token. Possibly, the only added value of the latter is a tag that = identifies it as a TPM binary format? > =20 > =20 > On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - = FI/Espoo)" on = behalf of ian.oliver@nokia-bell-labs.com = > wrote: > =20 > > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that > EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know > others believe that too.=20 > =20 > I would disagree with the statement of "short run" ... TPM is = practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common = use, ie: practically all x86 machines, The attestation mechanisms = provided are going to be around for a very long time.=20 > =20 > =46rom telco experience, 30 years ago we said SS7 would only be around = in the short term. > =20 > > Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise > to add EAT to = it. > =20 > Agree > =20 > Ian > =20 > -- >=20 > Dr. Ian Oliver >=20 > Cybersecurity Research >=20 > Distinguished Member of Technical Staff >=20 > Nokia Bell Labs >=20 > +358 50 483 6237 >=20 > =20 > From: Laurence Lundblade > > Sent: 11 November 2019 00:44 > To: Nancy Cam-Winget (ncamwing) > > Cc: Henk Birkholz >; rats@ietf..org = > > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > =20 > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = > wrote: > =20 > So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? > Thanks, Nancy > =20 > I think the value add to the larger RATS effort of adding EAT support = to this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. > =20 > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 > =20 > If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. > =20 > It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. > =20 > Thus, I am opposed to adoption with the current TPM-only draft. I=E2=80=99= d be OK with the current draft and a promise to add EAT to it. > =20 > LL > =20 --Apple-Mail=_CAA04234-1AD5-4EC7-8DFB-74562A916F48 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Here=E2=80=99s three possible versions of the RATS YANG = Module:
1) As is today, TPM only, no separation of = transport from attestation token. no EAT
2) As is = today + EAT transport. There=E2=80=99s separation of transport from = token format for EAT, but not for TPM attestation
3) = Full separation of transport from attestation token.  The RATS YANG = modules focuses on transport

I want a commitment to 2) or 3) for = adoption. I agree that RATS should support some YANG-based means for = attestation for routers.

Dave seems to be saying none at all.

Which do you want?  My guess is = one MUST be pursued by RATS. You=E2=80=99d be happy with 1) and probably = 2). 3) is probably still to fuzzy to say.

LL


On Nov 12, 2019, at 11:14 AM, Eric Voit (evoit) <evoit@cisco.com> = wrote:

As a network equipment vendor, TEEP environments and = EAT format work highlight interesting futures.  And I support these = works on that basis.

 

On the other hand, = TPMs are embedded today in routers.  And they are integrated to = existing network operations applications.  However we have no = standardized based industry management model.  And therefore today = we see no applications which span equipment vendor types.

 

So the TPM based YANG = has immediate applicability, and should be adopted. 

 

Eric

 

From: RATS, November 11, 2019 8:43 PM

As far as I can understand from = draft-birkholz-rats-basic-yang-module-01 and

draft-fedorkow-rats-network-device-attestation-01, they break = down the use case

space as = follows:

 

          &nb= sp;            = ; Requirements?

         = +--------------+---------------+---------++---------------

         |  = RoT         | Host Firewall | = Privacy ||   Solution   

         |  = Type        |   = Enabled     | Needed  ||    = Pieces    

         +--------= ------+---------------+---------++---------------

      1  |  = SGX         | = No            | = No      ||

      2  |  = SGX         | = No            | = Yes     ||

      3  |  = SGX         | = Yes           | = No      ||

      4  |  = SGX         | = Yes           | = Yes     ||

      5  |  = TrustZone   | = No            | = No      ||

      6  |  = TrustZone   | = No            | = Yes     ||

      7  |  = TrustZone   | = Yes           | = No      ||

      8  |  = TrustZone   | = Yes           | = Yes     ||

      9  |  = TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01

     10  |  = TPM         | = No            | = Yes     ||

     11  |  = TPM         | = Yes           | = No      ||

     12  |  = TPM         | = Yes           | = Yes     ||

     13  |SecureElement | = No            | = No      ||

     14  |SecureElement | = No            | = Yes     ||

     15  |SecureElement | = Yes           | = No      ||

     16  |SecureElement | = Yes           | = Yes     ||

     17  | = Firmware     | = No            | = No      ||

     18  | = Firmware     | = No            | = Yes     ||

     19  | = Firmware     | = Yes           | = No      ||

     20  | = Firmware     | = Yes           | = Yes     ||

     ... |   = ...        = |             =   |         ||

 

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself = down

by only being applicable to cases = with "embedded" apps only =3D Yes, and where

the security policy is only an Exact = match against reference values =3D Yes.

I believe = that the yang draft doesn't have those two restrictions, from my = reading.

However, the point is that both = drafts are VERY narrow, and in the table shown above,

only address 1 out of 20 possibilies = in that space.

 

In contrast, the TEEP WG decided that = it was not interested in narrow scopings

(specifically something Global = Platform specific), but instead wanted one general solution.

 

If the RATS WG spends effort on = something that only addresses a single row out of 20+ rows,

then do we expect 19+ other solutions = to also be done in the WG?  Or could we work on things

that are broader and happen to also = work for row 9?

 

I've seen others commenting on the = fact that the YANG module only supports TPMs and not

other things (EATs etc), which would = just add support for a couple more rows, but still not

be general.

 

Personally, I would much rather see = the WG spend effort on things that really are generic,

i.e., work with or without host = firewalls, work with multiple RoT/TEE types, etc., rather

than seeing an explosion of point = solutions.

 

Dave

 

From: RATS = <rats-bounces@ietf.org> On Behalf Of = Smith, Ned
Sent: Monday, November = 11, 2019 10:12 AM
To: Oliver, Ian (Nokia = - FI/Espoo) <ian.oliver@nokia-bell-labs.com>; Laurence Lundblade = <lgl@island-resort.com>; Nancy Cam-Winget (ncamwing) = <ncamwing@cisco.com>
Cc: = rats@ietf.org; Henk = Birkholz <henk.birkholz@sit.fraunhofer.de>
Subject: Re: [Rats] Call for adoption (after draft = rename) for Yang module draft

 

Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D = should support existing =E2=80=9Cbinary=E2=80=9D formats as an = encapsulation (signed by a second TA where the TPM is a first TA) or as = a conveyance (unsigned?) token. Possibly, the only added value of the = latter is a tag that identifies it as a TPM binary format?

 

 

On 11/10/19, 23:21 PM, = "RATS on behalf of Oliver, Ian (Nokia - FI/Espoo)" <rats-bounces@ietf.org= on behalf of ian.oliver@nokia-bell-labs.com> wrote:

 

> Remote TPM attestations are useful and necessary = the short run, but are of very limited capability. I believe that > = EAT will replace TPM attestations in the long run (maybe decades) = because they are far more expressive. I know > others believe that = too. 

 

I would disagree with the = statement of "short run" ... TPM is practically the only existing = standardised (hardware, software, firmware, measurement - x86 only etc) = hardware root of trust in common use, ie: practically all x86 = machines,  The attestation mechanisms provided are going to be = around for a very long time. 

 

=46rom telco experience, 30 years ago we said SS7 = would only be around in the short term.

 

> Thus, I am opposed to adoption with the current = TPM-only draft. I=E2=80=99d be OK with the current draft and a promise = > to add EAT to it.

 

Agree

 

Ian

 

-- =

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 = 50 483 6237

 

From: = Laurence Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: = Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf..org <rats@ietf.org>
Subject: Re: [Rats] Call for adoption = (after draft rename) for Yang module draft

 

 

On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> wrote:

 

So, Laurence, are you still OK with the adoption of the = current draft with a rename for now?
Thanks, = Nancy

 

I think the value add to the larger RATS = effort of adding EAT support to this YANG protocol is really high. It a = core thing to do that helps bring together the two attestation worlds = and make the TPM and EAT work here less like ships in the night.

 

Remote TPM = attestations are useful and necessary the short run, but are of very = limited capability. I believe that EAT will replace TPM attestations in = the long run (maybe decades) because they are far more expressive. I = know others believe that too. 

 

If we don=E2=80=99t include EAT in the YANG = mode it is sort of like defining HTTP to only convey HTML to the = exclusion of PDF. We=E2=80=99re defining an attestation protocol that = can only move one kind of attestation even though we have consensus on = what the other one looks like.

 

It seems relatively simple to add EAT support = (or promise to add EAT support). Pretty sure I heard Henk agree to add = it.

 

Thus, I am = opposed to adoption with the current TPM-only draft. I=E2=80=99d be OK = with the current draft and a promise to add EAT to it.

 

LL

 


= --Apple-Mail=_CAA04234-1AD5-4EC7-8DFB-74562A916F48-- From nobody Tue Nov 12 13:26:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09FFC12011D for ; Tue, 12 Nov 2019 13:26:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Eb44fToe; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=a1+yuzcb Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q-6M2pnM3M7e for ; Tue, 12 Nov 2019 13:26:43 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B73671200EB for ; Tue, 12 Nov 2019 13:26:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=48198; q=dns/txt; s=iport; t=1573594003; x=1574803603; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=7VErxCKOOAOlqmcrDTq+3v9cjLsssQSj79h2kPb67UA=; b=Eb44fToemQZsMVjMSOFHWDguP3orRMxRjLp77d0cLVlse7C/rh4dPqTK RHCb/qeCYFxATRR3AjJFQwHE8T692OhHbNbWbMa8Rsw/gbXib/xtwJIyo duYKjgOa5qwgX1yxlGqYt9SELLGKgrwH87SD1oCB22kJkKTMEKcVAM9/B 8=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AR4+NGhPHN0tYvhUraqQl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEuKU/l0fHCIPc7f8My/HbtaztQyQh2d6AqzhDFf4ETB?= =?us-ascii?q?oZkYMTlg0kDtSCDBj2MvnrcwQxHd9JUxlu+HToeUU=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B1AgBHIstd/4UNJK1mGwEBAQEBAQE?= =?us-ascii?q?FAQEBEQEBAwMBAQGBfoEcLyknBWwrLSAECyoKhB+DRgOKc4JemACCUgNUAgc?= =?us-ascii?q?BAQEJAwEBLQIBAYFMgnQCgh0kOBMCAwsBAQQBAQECAQUEbYU3DIVRAQEBAQI?= =?us-ascii?q?BEgsGChMBATcBBAsCAQgOAwQBASEBBgMCAgIwFAkIAgQKBAUIBg0HgwGBeU0?= =?us-ascii?q?DDhEPAQKkXgKBOIhgdYEygn4BAQWFEBiCEAcJgTaBU4pBGIFAP4ERRoJMPoQ?= =?us-ascii?q?eKQwJEA8CAoJWMoIsjSUPIAOBfo83jwgKgiWDS4I0j2CZeY0Sl0WDZgIEAgQ?= =?us-ascii?q?FAg4BAQWBaSKBWHAVgydQERSQNgwXgQQBAYJKilN0AYEnjXaBMQGBDgEB?= X-IronPort-AV: E=Sophos;i="5.68,297,1569283200"; d="p7s'?scan'208,217";a="650117408" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 12 Nov 2019 21:26:40 +0000 Received: from XCH-RCD-013.cisco.com (xch-rcd-013.cisco.com [173.37.102.23]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xACLQe1F021870 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 12 Nov 2019 21:26:40 GMT Received: from xhs-rcd-001.cisco.com (173.37.227.246) by XCH-RCD-013.cisco.com (173.37.102.23) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 15:26:39 -0600 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 15:26:39 -0600 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 12 Nov 2019 15:26:39 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aHERpJsKYuvkA+3OtGwU6mJwsGlHstNX6tLB5YoMssMlZrmTWIcEBMvizRC1AQm3jrMJAOJQNnNLJutTn9AuQ+uKKe/TFVhL7rfhKpKpmNN7SC2S/JgstWr3D7rbmPWwFS16aGppYMPXjGPvomaJWBbmOQKR5J1THi+AZ5g1PmI5US5d50tEwqCjqv4SCB8VLRBukLn4zp8vJ5Z1WMzC2VWvElQBhO5AH9H4eoFdZPU8iwB6ztWHz12IihkGeIgUJAvMCsKaKasW+1+iyMihM6SyeRenZk22cojF1KKrYO2eQT75F0a9Do7TI5J1/yDHNp+TSKJ3FG1X6aLaEyd3dg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xCKm5JEGGUZpJa7fpyfansjP4xfBPE/zvY3ENxtbWqQ=; b=XJG1kCZYZ0w2O490YYoZst+GD9sdK9E39IG/UCFeba5widApMXxUm7lIlYBngZ2khEccFTYTA13J98swfLpsiPfuOjSow1QVvC2S0RgPAcxUfRVrAl6MttKukn1FOnWkQQlzRR10w3DRk+yViMUT9V25WP4dHjLTU80Ly0jt0qr/ovFX+eZyUKqJQmVg9YxMEWbj2BZs8f9UXguEy64dmYRkBN/9OXJgScOAAYavpkSaZS+18/gnBZq3WmJIF9ZRxYFL/WccHQAT9VoPBSkI4e3E/WViCwT0t+gPm1Bx+Wt/Y7G7VAzgCH5yzDRdvrvR9vJC7Zlgijc2gh1sE5jS6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xCKm5JEGGUZpJa7fpyfansjP4xfBPE/zvY3ENxtbWqQ=; b=a1+yuzcbsQhXfxe8sLl16IpMBpLrCyaaIoiQLwFh606FITppMh2vc7FnYlJLOdw2Tk4x5fwoXovQkIaNqIwUTxJjqjkXn36wsOCUr3nij+jdPqRuAoAyiT6CJ5xA7oQVDGmwMCwGexvHZGlzT2bz/8F2MJquUmhut1HGKvuTJz8= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3369.namprd11.prod.outlook.com (20.176.122.208) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.22; Tue, 12 Nov 2019 21:26:36 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.027; Tue, 12 Nov 2019 21:26:36 +0000 From: "Eric Voit (evoit)" To: Laurence Lundblade CC: Dave Thaler , "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAASDm4IAAGIaAgAAFQhA= Date: Tue, 12 Nov 2019 21:26:36 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.78] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9947241a-8e10-4ca6-f643-08d767b6ff9b x-ms-traffictypediagnostic: DM6PR11MB3369: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(376002)(366004)(136003)(39860400002)(346002)(189003)(199004)(15404003)(6306002)(76116006)(476003)(26005)(55016002)(102836004)(66446008)(11346002)(25786009)(316002)(6436002)(446003)(52536014)(236005)(6116002)(486006)(3846002)(9686003)(9326002)(66476007)(66556008)(7736002)(74316002)(53546011)(64756008)(8936002)(229853002)(6506007)(54896002)(81166006)(76176011)(54906003)(33656002)(81156014)(4326008)(478600001)(8676002)(256004)(86362001)(14444005)(5660300002)(6246003)(7696005)(66066001)(66616009)(66574012)(790700001)(14454004)(99286004)(66946007)(6916009)(186003)(2906002)(71190400001)(71200400001); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3369; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: e9eSza5fKZvBgzunDTJlGC/baAHFyj0XXvoTNbhUmXrXn/DYRimCoFcMJO+cvkkDniSfnIijyC5uJ1RlOka3CAcJGST46pQol4S4ZoIR12vx11JdhxaM/JVxIWhEx37h8Du+MdWrsS7zsy+owv5abwLWYr4CQjkRgxHFcuQUeOPCDntoLokoNzlA/JB0HpAJ1Z2AX9xUqywVvHnZ/DybXBcpequ2h48U67aub+XwcG9DiNTbv30HLbDCl6+vkf1hkfXcwVJFZyx67lLh20GliiFjPXnS87JKrA6QZ77crqP2abAvJ5OCn00zLGJ6nrpZH6CXTYH6eBcN6A0S/M0cDvsjAEmdID+CBbLANLr1D1Bny322vDecHDvL4bYDsxxqz5EGwEP98SZIIT0TlxcO0KevCDUKc9DMm+oNJWtRUNWJWBubwKykCj013n7u+o10 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0E66_01D59975.F13651F0" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 9947241a-8e10-4ca6-f643-08d767b6ff9b X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 21:26:36.5145 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ZOUlSdJbl7Yf6K3LzzXZ5zuihrWOD1ZXYhc6N99dfxr+RglWHxSsGp4RpZu/NeQp X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3369 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.23, xch-rcd-013.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 21:26:46 -0000 ------=_NextPart_000_0E66_01D59975.F13651F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0E67_01D59975.F13651F0" ------=_NextPart_001_0E67_01D59975.F13651F0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, =20 From: Laurence Lundblade, November 12, 2019 3:22 PM Here=E2=80=99s three possible versions of the RATS YANG Module: 1) As is today, TPM only, no separation of transport from attestation = token. no EAT 2) As is today + EAT transport. There=E2=80=99s separation of transport = from token format for EAT, but not for TPM attestation 3) Full separation of transport from attestation token. The RATS YANG = modules focuses on transport It depends on what you mean by transport. YANG models are = supposed to be transport agnostic. E.g., information in YANG models is = commonly transported over NETCONF+XML and RESTCONF+JSON. But NETCONF = and RESTCONF themselves are built on transactional interactions which = might or might not align with how EAT information is intended to be = requested and distributed from a source. =20 The nuance for me here is YANG ecosystems exist at the operations = boundary of a piece of network equipment. And EAT at the boundary of a = chip. In both cases some transport structure needs to instigate the = transfer of the desired information. This is the problem I believe you = are referencing when you talk in 3) about the full separation of = transport. =20 =20 I want a commitment to 2) or 3) for adoption. I agree that RATS should = support some YANG-based means for attestation for routers. I certainly would love to see 2) & 3) done too. Personally I = don't need it until routers have chips supporting EAT. As a result, I = don't 1), 2), & 3) should be in single model. The reason is as follows: = I don't know of a customer yet who would pull both TPM2 and EAT from a = single device. So why make the model implementer care to understand a = more complex model than necessary? =20 Dave seems to be saying none at all. It seems that way. And this doesn't makes sense to me.=20 =20 Which do you want? My guess is one MUST be pursued by RATS. = You=E2=80=99d be happy with 1) and probably 2). 3) is probably still to = fuzzy to say. I believe 1) MUST be pursed. I think 2) should be pursed.=20 =20 Eric =20 =20 LL =20 On Nov 12, 2019, at 11:14 AM, Eric Voit (evoit) > wrote: =20 As a network equipment vendor, TEEP environments and EAT format work = highlight interesting futures. And I support these works on that basis. =20 On the other hand, TPMs are embedded today in routers. And they are = integrated to existing network operations applications. However we have = no standardized based industry management model. And therefore today we = see no applications which span equipment vendor types. =20 So the TPM based YANG has immediate applicability, and should be = adopted. =20 =20 Eric =20 From: RATS, November 11, 2019 8:43 PM As far as I can understand from draft-birkholz-rats-basic-yang-module-01 = and draft-fedorkow-rats-network-device-attestation-01, they break down the = use case space as follows: =20 Requirements? +--------------+---------------+---------++--------------- | RoT | Host Firewall | Privacy || Solution =20 | Type | Enabled | Needed || Pieces =20 +--------------+---------------+---------++--------------- 1 | SGX | No | No || 2 | SGX | No | Yes || 3 | SGX | Yes | No || 4 | SGX | Yes | Yes || 5 | TrustZone | No | No || 6 | TrustZone | No | Yes || 7 | TrustZone | Yes | No || 8 | TrustZone | Yes | Yes || 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 10 | TPM | No | Yes || 11 | TPM | Yes | No || 12 | TPM | Yes | Yes || 13 |SecureElement | No | No || 14 |SecureElement | No | Yes || 15 |SecureElement | Yes | No || 16 |SecureElement | Yes | Yes || 17 | Firmware | No | No || 18 | Firmware | No | Yes || 19 | Firmware | Yes | No || 20 | Firmware | Yes | Yes || ... | ... | | || =20 And draft-fedorkow-rats-network-device-attestation-01 further scopes = itself down by only being applicable to cases with "embedded" apps only =3D Yes, and = where the security policy is only an Exact match against reference values =3D = Yes. I believe that the yang draft doesn't have those two restrictions, from = my reading. However, the point is that both drafts are VERY narrow, and in the table = shown above, only address 1 out of 20 possibilies in that space. =20 In contrast, the TEEP WG decided that it was not interested in narrow = scopings (specifically something Global Platform specific), but instead wanted = one general solution. =20 If the RATS WG spends effort on something that only addresses a single = row out of 20+ rows, then do we expect 19+ other solutions to also be done in the WG? Or = could we work on things that are broader and happen to also work for row 9? =20 I've seen others commenting on the fact that the YANG module only = supports TPMs and not other things (EATs etc), which would just add support for a couple more = rows, but still not be general. =20 Personally, I would much rather see the WG spend effort on things that = really are generic, i.e., work with or without host firewalls, work with multiple RoT/TEE = types, etc., rather than seeing an explosion of point solutions. =20 Dave =20 From: RATS > On = Behalf Of Smith, Ned Sent: Monday, November 11, 2019 10:12 AM To: Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade = >; Nancy = Cam-Winget (ncamwing) > Cc: rats@ietf.org ; Henk Birkholz = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft =20 Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support = existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by = a second TA where the TPM is a first TA) or as a conveyance (unsigned?) = token. Possibly, the only added value of the latter is a tag that = identifies it as a TPM binary format? =20 =20 On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - = FI/Espoo)" on = behalf of ian.oliver@nokia-bell-labs.com = > wrote: =20 > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that > EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know > others believe that too.=20 =20 I would disagree with the statement of "short run" ... TPM is = practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common = use, ie: practically all x86 machines, The attestation mechanisms = provided are going to be around for a very long time. =20 =20 >From telco experience, 30 years ago we said SS7 would only be around in = the short term. =20 > Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise > to add EAT to = it. =20 Agree =20 Ian =20 --=20 Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 =20 _____ =20 From: Laurence Lundblade > Sent: 11 November 2019 00:44 To: Nancy Cam-Winget (ncamwing) > Cc: Henk Birkholz >; rats@ietf..org = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft=20 =20 =20 On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = > wrote: =20 So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? Thanks, Nancy =20 I think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. =20 Remote TPM attestations are useful and necessary the short run, but are = of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 =20 If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. =20 It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. =20 Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise to add EAT to it. =20 LL =20 =20 ------=_NextPart_001_0E67_01D59975.F13651F0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hi Laurence,

 

From: Laurence Lundblade, November = 12, 2019 3:22 PM

Here=E2=80=99s three = possible versions of the RATS YANG Module:

1) As is today, TPM only, no separation of transport = from attestation token. no EAT

2) As is today + EAT transport. There=E2=80=99s = separation of transport from token format for EAT, but not for TPM = attestation

3) Full = separation of transport from attestation token.  The RATS YANG = modules focuses on transport

<Eric> It depends on what you mean by = transport.=C2=A0 YANG models are supposed to be transport = agnostic.=C2=A0 E.g., information in YANG models is commonly transported = over NETCONF+XML and RESTCONF+JSON. =C2=A0But NETCONF and RESTCONF = themselves are built on transactional interactions which might or might = not align with how EAT information is intended to be requested and = distributed from a source.

 

The nuance for me here is YANG ecosystems = exist at the operations boundary of a piece of network equipment.=C2=A0 = And EAT at the boundary of a chip.=C2=A0 =C2=A0=C2=A0In both cases some = transport structure needs to instigate the transfer of the desired = information.=C2=A0 This is the problem I believe you are referencing = when you talk in 3) about the full separation of = transport.

 

 

I = want a commitment to 2) or 3) for adoption. I agree that RATS should = support some YANG-based means for attestation for = routers.

<Eric> I certainly would love to see 2) = & 3) done too.=C2=A0 Personally I don't need it until routers have = chips supporting EAT.=C2=A0 As a result, I don't 1), 2), & 3) should = be in single model.=C2=A0 The reason is as follows: =C2=A0I don't know = of a customer yet who would pull both TPM2 and EAT from a single = device.=C2=A0 So why make the model implementer care to understand a = more complex model than necessary?

 

Dave seems to be saying none at all.

<Eric>=C2=A0 It seems that way.=C2=A0 = And this doesn't makes sense to me.

 

Which do you want?  My guess is one MUST be = pursued by RATS. You=E2=80=99d be happy with 1) and probably 2). 3) is = probably still to fuzzy to say.

<Eric> I believe 1) MUST be = pursed.=C2=A0 I think 2) should be pursed.

 

Eric

 

 

LL

 



On Nov 12, 2019, at 11:14 AM, Eric Voit (evoit) <evoit@cisco.com> = wrote:

 

As = a network equipment vendor, TEEP environments and EAT format work = highlight interesting futures.  And I support these works on that = basis.

 

On the other hand, TPMs are embedded today in = routers.  And they are integrated to existing network operations = applications.  However we have no standardized based industry = management model.  And therefore today we see no applications which = span equipment vendor types.

 

So the TPM = based YANG has immediate applicability, and should be adopted.  =

 

Eric

 

From: = RATS, November 11, 2019 8:43 PM

As far as I can understand from = draft-birkholz-rats-basic-yang-module-01 and

draft-fedorkow-rats-network-device-attestation-01= , they break down the use case

space as = follows:

 

=

    &nbs= p;            = ;       = Requirements?

    &nbs= p;    = +--------------+---------------+---------++---------------

    &nbs= p;    |  = RoT         | Host Firewall | = Privacy ||   Solution    =

    &nbs= p;    |  = Type        |   = Enabled     | Needed  ||    = Pieces    

    &nbs= p;    +--------------+---------------+---------++----= -----------

    &nbs= p; 1  |  SGX         | = No            | = No      ||

    &nbs= p; 2  |  SGX         | = No            | = Yes     ||

    &nbs= p; 3  |  SGX         | = Yes           | = No      ||

    &nbs= p; 4  |  SGX         | = Yes           | = Yes     ||

    &nbs= p; 5  |  TrustZone   | = No            | = No      ||

    &nbs= p; 6  |  TrustZone   | = No            | = Yes     ||

    &nbs= p; 7  |  TrustZone   | = Yes           | = No      ||

    &nbs= p; 8  |  TrustZone   | = Yes           | = Yes     ||

    &nbs= p; 9  |  TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01

     = 10  |  TPM         | = No            | = Yes     ||

     = 11  |  TPM         | = Yes           | = No      ||

   =   12  |  = TPM         | = Yes           | = Yes     ||

     = 13  |SecureElement | = No            | = No      ||

     = 14  |SecureElement | = No            | = Yes     ||

     = 15  |SecureElement | = Yes           | = No      ||

     = 16  |SecureElement | = Yes           | = Yes     ||

     = 17  | Firmware     | = No            | = No      ||

     = 18  | Firmware     | = No            | = Yes     ||

     = 19  | Firmware     | = Yes           | = No      ||

     = 20  | Firmware     | = Yes           | = Yes     ||

     = ... |   ...        = |            =   |         = ||

 

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself = down

by only being applicable to cases with = "embedded" apps only =3D Yes, and = where

the security policy is only an Exact match = against reference values =3D Yes.

I believe that the yang = draft doesn't have those two restrictions, from my = reading.

However, the point is that both drafts are VERY = narrow, and in the table shown above,

only address 1 out of 20 = possibilies in that space.

 

In contrast, the TEEP WG = decided that it was not interested in narrow = scopings

(specifically something Global Platform = specific), but instead wanted one general = solution.

 

If the RATS WG spends = effort on something that only addresses a single row out of 20+ = rows,

then do we expect 19+ other solutions to also be = done in the WG?  Or could we work on things

that are broader and = happen to also work for row 9?

 

I've seen others = commenting on the fact that the YANG module only supports TPMs and = not

other things (EATs etc), which would just add = support for a couple more rows, but still not

be = general.

 

Personally, I would much = rather see the WG spend effort on things that really are = generic,

i.e., work with or without host firewalls, work = with multiple RoT/TEE types, etc., rather

than seeing an explosion = of point solutions.

 

Dave

 

From: RATS <rats-bounces@ietf.org> = On Behalf Of Smith, Ned
Sent: Monday, November 11, 2019 = 10:12 AM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs= .com>; Laurence Lundblade <lgl@island-resort.com>; = Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: rats@ietf.org; Henk Birkholz = <henk.birkholz@sit.fraunho= fer.de>
Subject: Re: [Rats] Call for adoption (after = draft rename) for Yang module draft

 

Right. This = implies the RATS =E2=80=9Ctoken=E2=80=9D should support existing = =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by a second = TA where the TPM is a first TA) or as a conveyance (unsigned?) token. = Possibly, the only added value of the latter is a tag that identifies it = as a TPM binary format?

 

 

On 11/10/19, 23:21 PM, "RATS on behalf = of Oliver, Ian (Nokia - FI/Espoo)" <rats-bounces@ietf.org on = behalf of ian.oliver@nokia-bell-labs= .com> wrote:

 

> Remote TPM attestations are useful and = necessary the short run, but are of very limited capability. I believe = that > EAT will replace TPM attestations in the long run (maybe = decades) because they are far more expressive. I know > others = believe that too. 

 

I would disagree with the statement of = "short run" ... TPM is practically the only existing = standardised (hardware, software, firmware, measurement - x86 only etc) = hardware root of trust in common use, ie: practically all x86 = machines,  The attestation mechanisms provided are going to be = around for a very long time. 

 

From telco experience, 30 years ago we said = SS7 would only be around in the short = term.

 

> Thus, I am opposed to adoption with the = current TPM-only draft. I=E2=80=99d be OK with the current draft and a = promise > to add EAT to it.

 

Agree

 

Ian

 

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237

 

From: Laurence Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com>
Cc: Henk Birkholz <henk.birkholz@sit.fraunho= fer.de>; rats@ietf..org = <rats@ietf.org>
Subject: = Re: [Rats] Call for adoption (after draft rename) for Yang module draft =

 

 

On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> = wrote:

 

So, = Laurence, are you still OK with the adoption of the current draft with a = rename for now?
Thanks, = Nancy

 

I think the value add to = the larger RATS effort of adding EAT support to this YANG protocol is = really high. It a core thing to do that helps bring together the two = attestation worlds and make the TPM and EAT work here less like ships in = the night.

 

Remote TPM attestations are = useful and necessary the short run, but are of very limited capability. = I believe that EAT will replace TPM attestations in the long run (maybe = decades) because they are far more expressive. I know others believe = that too. 

 

If we don=E2=80=99t include = EAT in the YANG mode it is sort of like defining HTTP to only convey = HTML to the exclusion of PDF. We=E2=80=99re defining an attestation = protocol that can only move one kind of attestation even though we have = consensus on what the other one looks like.

 

It seems relatively simple = to add EAT support (or promise to add EAT support). Pretty sure I heard = Henk agree to add it.

 

Thus, I am opposed to = adoption with the current TPM-only draft. I=E2=80=99d be OK with the = current draft and a promise to add EAT to = it.

 

LL

 

<= /div>

 

------=_NextPart_001_0E67_01D59975.F13651F0-- ------=_NextPart_000_0E66_01D59975.F13651F0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTEyMjEyNjMxWjAjBgkqhkiG 9w0BCQQxFgQUzKySUyJAx2i6V3474KSW6weOqYkwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQABIU3wyzyogCoNePDyEK5gxLnRBKhDV276b9hluyRZWdaEDR9NJYj/UieYF7AVR2iE PSZr/kj5flRlEqPbTZ8DfLxyVqd+6+IkyBBa3WoUQpKicCX+B9uJLH2Axqaext8bZs38WM63RSfH YbEp7utsqFtPbXp0EvPrI3LUFGhlSspuK2XcZTktTJ1sA/wNZ+bDeI+/QaAwm/EnsTBxrSm2Jbos KeCqe9vhFOq5JKby0s7xvWQmecwsGazyri3lvIcUjfM/xl6FqHtZxOaSCX972P6+2gtUPE7ktsI1 O1jY1xrREjVHwdf2iDr+h7zeifNETh6ow/JqnCyUUH2yPPpgAAAAAAAA ------=_NextPart_000_0E66_01D59975.F13651F0-- From nobody Tue Nov 12 14:42:24 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94AD31200B9 for ; Tue, 12 Nov 2019 14:42:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=oHhLUz0N; dkim=pass (1024-bit key) header.d=juniper.net header.b=E4vWqUMA Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cN9iMtHhLW7k for ; Tue, 12 Nov 2019 14:42:21 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4BCA120018 for ; Tue, 12 Nov 2019 14:42:21 -0800 (PST) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xACMgJGN024538; Tue, 12 Nov 2019 14:42:19 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=CdmvTJsd2IV3KfE1P6utALwMZV8hK84Bn+IeEvviE6w=; b=oHhLUz0N6R+37aHHPqHV9Yz8h9dTlq0SOVR7dhuLEzB0pln6Hfd5GeTdj0rVudgsvcve ypmfqeNIcFtOEFeFYgARcFzxkgPivNwZu4jHWqFSGpEDdYxmyUr7RsnRb6TnWxiKeRZA Z9Pujf9OXWhlBsK3EI6IaEpUTY02hACebLuPjRCx1vVMjmwhqeKeLIVFOwK87EUf6wjW sMn7OAeg7OmqEXcXWr22C0lLiKiBq/7rVmI//dtbGuVrWW0m8cWrTsURMoOrQ1lKezXh NNjqWjwa/BXOEeTlXD9Mm/ebVuit5+U7/ZFr5s2DlXLDDr4K0rFprbNVfcP8uOrLFbHK og== Received: from nam01-bn3-obe.outbound.protection.outlook.com (mail-bn3nam01lp2050.outbound.protection.outlook.com [104.47.33.50]) by mx0a-00273201.pphosted.com with ESMTP id 2w7prnsmnp-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 12 Nov 2019 14:42:19 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OrNC6OWzY7IyOMoJBusingcxJmxf369y0Z2ho/iMeqgeKBbe495V4riVOIHgzRLKZHm3bhDfTV7dpn1qZDjU17dmPqND4vPUAeCFgWRjFJrq2buJGEBLO5gVkWLQzwSDGdy0wCbbQLMh0d3lNnSWIKNYB9I0s4R47CnV0E+nqKUoQIoNp/Fxeul6eFh2E8u9TPodLMHwQS6UZxEKXRStxiW1xsYL0NeUBwfQLOvF/s54cMQw+HTqsLxPhDS7da0ISpADtTFTSpLb4t7TVy9nI3J1gjtIs2AS1swDRIQhPC9Lr5QES4LNkvsh/EDqqaGLoUnOVHhscAEu88o01k3qPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CdmvTJsd2IV3KfE1P6utALwMZV8hK84Bn+IeEvviE6w=; b=WzBQlycgRzkDMEX8P9xnsr9vK5UZ0GDyJtM/DoXZW4yAN9VkaA7CX1+zy8m7xWsPJeieSYO0cZHH+lBDbQIwaOVWoWdEzenGTDECpSMrrJiSzHGwrUcZkiOSTP9btc+a1Vbd/ETtaIB1kQe3GRW+OKttqwFbiAZEuirg1op5MPPFx0w/0EJ6IMFh8be2aSNlKr655ufdRyzFEuAnMco5T7l7he5tY+eGrdOYIjO98svgtWeGroI8G6wCE43ajuaFrUtUpUV7aSE4+dPVb5zXoxVJVNsRIjHwbPZCfJakytUR1n3UjuexZ7NNmtG6K5UkESA9XLawAmcUk6359TAWqg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CdmvTJsd2IV3KfE1P6utALwMZV8hK84Bn+IeEvviE6w=; b=E4vWqUMAvXnELvbXVRjNGG1pe0GwA8xxkB0wn6hW/Pl8b1ukLuQqxSUsq3+X/psOxg6VjPABQ7RhZwtmNVXutCEhf2YrDKyTKK8a/zms6C7O+d0c47iyps19y9tv5aZPWy0AGHK4p6z9lPKNT9XZ66bGTbl4AQVaAJNAjM/vJ8I= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4917.namprd05.prod.outlook.com (52.135.235.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.19; Tue, 12 Nov 2019 22:42:15 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2451.018; Tue, 12 Nov 2019 22:42:15 +0000 From: Guy Fedorkow To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] my hack attempt at a RATS icon Thread-Index: AQHVmPchzE/eC9quFEqFl3t1sNOZHqeIInOg Content-Class: Date: Tue, 12 Nov 2019 22:42:15 +0000 Message-ID: References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> In-Reply-To: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-12T22:42:13.6483982Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=6ba5031b-3304-4b12-b81f-0e51d65485d3; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.12] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 0368b7ff-95dc-4f68-394e-08d767c19142 x-ms-traffictypediagnostic: BYAPR05MB4917: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(366004)(136003)(396003)(376002)(39860400002)(199004)(189003)(13464003)(3846002)(7696005)(76176011)(6116002)(53546011)(6506007)(102836004)(186003)(26005)(966005)(25786009)(110136005)(66066001)(316002)(478600001)(74316002)(14454004)(6246003)(8936002)(5660300002)(2906002)(99286004)(33656002)(66946007)(2501003)(66476007)(66556008)(86362001)(52536014)(66446008)(64756008)(71200400001)(71190400001)(55016002)(6306002)(476003)(305945005)(486006)(11346002)(446003)(6436002)(81156014)(9686003)(81166006)(8676002)(14444005)(256004)(76116006)(5024004)(229853002)(7736002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4917; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: gfLz0+jgL5g4ovteLVMlGFUPA1ZklXqKgQm8f67SElTmz9ofdFu5WYP2jX3s7EqkxDb4eqEHDHCUnXVwchwznNkOaUlFsfV0EM+3TCYVaTNVE0oKO5+zmibzIV5VzgT22SheDTFyZP037C49U39+THD+BEB2ILHZS3FJFBSoTauHQt6GAnwWE7lKOV+Uh5HJriYY36tehxFRie2xrDzyCVaC+GBk6JjhJDUc7wKsfyB//pXUekyMe4KEc1/PWv7o6XounV0v+RT+4XTgd2kuVRpxiudYedhdCQWCWdavJ7JdcAPZ8mYPqH2TLJdZz1K8uLkK4cC+GZ+dVZeXB+YY4xSArHPFDsB66koP+6792MtW/dW+d7wVKlxNohRnkP2ZCALlbbrnsG8uxj20BL/OIjia5xAfuh/C9JSnV/xg/y4d9GkQ8ZrHrvyXTBQKkxhc x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 0368b7ff-95dc-4f68-394e-08d767c19142 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 22:42:15.8222 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: XFzTXrSGg1siddrV8SDS+FEiZ0vAZMJnr1B0WJmdKhkjltXjkBd3uZxDX61ttSIgpe0kkH30bt/Dt0CykxMnKA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4917 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-12_09:2019-11-11,2019-11-12 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 adultscore=0 bulkscore=0 priorityscore=1501 spamscore=0 clxscore=1015 impostorscore=0 mlxscore=0 malwarescore=0 phishscore=0 lowpriorityscore=0 suspectscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911120195 Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 22:42:24 -0000 TWljaGFlbCwNCiAgTWF5IEkgZW5jb3VyYWdlIHlvdXIgb2JzZXNzaW9uISAgSSBraW5kYSBsaWtl IGl0LCBhbHRob3VnaCBpdCdzIGNlcnRhaW5seSB0aGUgbW9zdCBpbnNpZGVyIG9mIGluc2lkZXIg am9rZXMuLi4NCi9ndXkNCg0KDQoNCkp1bmlwZXIgQnVzaW5lc3MgVXNlIE9ubHkNCg0KLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZz4g T24gQmVoYWxmIE9mIE1pY2hhZWwgUmljaGFyZHNvbg0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAx MSwgMjAxOSA4OjE4IFBNDQpUbzogcmF0c0BpZXRmLm9yZw0KU3ViamVjdDogW1JhdHNdIG15IGhh Y2sgYXR0ZW1wdCBhdCBhIFJBVFMgaWNvbg0KDQpTb21lIG9mIHlvdSBtYXkga25vdyBvZiBteSBv YnNlc3Npb24gKGZldGlzaD8pIHdpdGggaWNvbnMgZm9yIHRoaW5ncy4NCkkgc3Ryb25nbHkgdGhp bmsgdGhhdCBnb29kIGltYWdlcyBoZWxwIHVzIGRvIGdvb2QgbWFya2V0aW5nLiAoNnRpc2NoIG1h ZGUgYSBuaWNlIGxvZ28gZm9yIGluc3RhbmNlLCBhbmQgSSB0aGluayBpdCBoYXMgaGVscGVkKQ0K DQpGb3IgYSBwcmVzZW50YXRpb24gSSBjb25jb2N0ZWQgdGhlIGF0dGFjaGVkIGljb24gZm9yIHJl bW90ZSBhdHRlc3RhdGlvbi4NCkl0J3MgaW4gYSBwdWxsIHJlcXVlc3QgdG8gdGhlIGlvdC1kaXIg YXQNCmh0dHBzOi8vZ2l0aHViLmNvbS9pb3QtZGlyL3NsaWRlcy9wdWxsLzMNClVSTHM6DQpodHRw czovL2dpdGh1Yi5jb20vbWNyL3NsaWRlcy9ibG9iL21hc3Rlci9pY29ucy9yYXRzLnN2Zw0KaHR0 cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vcmF3LmdpdGh1YnVzZXJjb250ZW50LmNv bS9tY3Ivc2xpZGVzL21hc3Rlci9pY29ucy9yYXRzLnBuZ19fOyE4V29BNlJqQzgxYyFTTFZsOUZi MllrUG9BM3puVURFM0pQX1VHWE83X2QyWnJvc1JvVFc1MUxqWm1ES0hrSHZOSTk4VVlTLXdwekp1 d2lZJCANCg0KQW5kIGF0dGFjaGVkIGluIFNWRywgYXNzdW1pbmcgaXQgZ2V0cyB0aHJvdWdoIHRo ZSBsaXN0Lg0KDQpUaGUgUkFUIGlzIGxvb2tpbmcgdGhyb3VnaCBhIHRlbGVzY29wZSBhdCBzb21l ICJjb2RlIi7CoCBNYXliZSB0aGF0J3MgbW9yZSBhYm91dCB0aGUgUklWIHVzZSBjYXNlIHRoYW4g c29tZSBvdGhlciB1c2UgY2FzZXMsIGJ1dA0K From nobody Tue Nov 12 14:55:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F5EE1200B9 for ; Tue, 12 Nov 2019 14:55:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M8p2oIi4FP1b for ; Tue, 12 Nov 2019 14:55:46 -0800 (PST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C99F0120018 for ; Tue, 12 Nov 2019 14:55:46 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga002.jf.intel.com ([10.7.209.21]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Nov 2019 14:55:46 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,298,1569308400"; d="scan'208,217";a="216186270" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by orsmga002.jf.intel.com with ESMTP; 12 Nov 2019 14:55:45 -0800 Received: from orsmsx126.amr.corp.intel.com (10.22.240.126) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 12 Nov 2019 14:55:45 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX126.amr.corp.intel.com ([169.254.4.116]) with mapi id 14.03.0439.000; Tue, 12 Nov 2019 14:55:45 -0800 From: "Smith, Ned" To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNA== Date: Tue, 12 Nov 2019 22:55:44 +0000 Message-ID: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.24.15.10] Content-Type: multipart/alternative; boundary="_000_229E0A724B444C9AAD0A142A13020C9Aintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 22:55:49 -0000 --_000_229E0A724B444C9AAD0A142A13020C9Aintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5jbHVkaW5nIERhdmUgVGhhbGVy4oCZcyB0aHJlYWQgZnJvbSBmb3JrZWQgc3ViamVjdCBsaW5l IGluIFsxXS4NCg0KVGhlIGVhdCBkcmFmdCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0 aW9uIGhlYWRpbmcgZm9yIHRoZSBJbmZvcm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBh cmUgdXNlZC4gSSB0aGluayB0aGlzIGlzIE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0 IHRvIOKAnEV2aWRlbmNl4oCdIElNTy4gVGhlIGFyY2hpdGVjdHVyZSBkcmFmdCAoYmlya2hvbHop IHN0cm9uZ2x5IGltcGxpZXMgdGhhdCBFdmlkZW5jZSBpcyBzaWduZWQgKHZlcmlmaWFibGUgb3Ig cHJvdmFibGUpLiBUaGlzIHN1Z2dlc3RzIEV2aWRlbmNlIGlzIGluIGEgc2VyaWFsaXplZCBmb3Jt YXQgKGhlbmNlIGlzbuKAmXQgQ0RETCwgWUFORyBvciBBU04uMSkuIEkgZG9u4oCZdCB0aGluayDi gJxFdmlkZW5jZeKAnSB3b3VsZCBiZSBhcyBwcmVjaXNlIGEgd2F5IHRvIHRhbGsgYWJvdXQgYW4g aW5mb3JtYXRpb24gbW9kZWwgb2JqZWN0IGFzIOKAnENsYWltKHMp4oCdIHdvdWxkIGJlLg0KDQoN Cg0KWUFORyBpcyBub3QgYSBzZXJpYWxpemFibGUgZm9ybWF0IGhlbmNlIGl0IGlzIG1vcmUgYXBw cm9wcmlhdGVseSBhbiBpbmZvcm1hdGlvbiBtb2RlbCBsYW5ndWFnZSBmb3IgdGhlIHB1cnBvc2Vz IG9mIFJBVFMgKElNTykuDQoNCg0KDQpHb2luZyBiYWNrIHRvIHRoZSBvcmlnaW5hbCBxdWVzdGlv bi4gQSBUb2tlbiAoRUFULCBDV1QsIEpXVCkgaXMgYW4gZXhhbXBsZSBvZiBzb21ldGhpbmcgdGhl IGFyY2hpdGVjdHVyZSBjYWxscyBFdmlkZW5jZS4gQ0RETCwgWUFORyBhcmUgZXhwcmVzc2lvbnMg b2Ygc29tZXRoaW5nIHRoYXQgdGhlIGFyY2hpdGVjdHVyZSBzaG91bGQgY2FsbCBDbGFpbXMuIChh Z3JlZT8pDQoNCi1OZWQNCg0KDQoNClsxXSBEYXZlIFRoYWxlciB3cm90ZToNCj4gU28gZmFyIHRo ZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAiRUFUIiB0byByZWZlciB0byBib3RoIHRoZSBpbmZv cm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLg0KDQpJIHdv dWxkIHJhdGhlciBzZWUgdGhlIHRlcm0gRUFUIChhbmQgYW55IG90aGVyIHRlcm1zIGVuZGluZyBp biBUb2tlbiwgbGlrZSBKV1QgYW5kIENXVCkgb25seSBiZSB1c2VkIHRvIHJlZmVyIHRvDQpkYXRh IHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMsIG5vdCB0aGUgaW5mb3JtYXRpb24gbW9kZWwuDQoN Cj4gV2hlbiBleHRlbmRpbmcgaW5mb3JtYXRpb24gbW9kZWwgdG8gWUFORyBvciBzb21lIG90aGVy IHNlcmlhbGl6YXRpb24gKGUuZy4gQVNOLjEpLiBHaXZlbiB0aGUgcG9zc2liaWxpdHkgZm9yIGFu IElNDQo+IGV4cHJlc3Npb24gdG8gYmUgcmVhbGl6ZWQgYnkgZGlmZmVyZW50IHNlcmlhbGl6YXRp b25zLCB3aGF0IHRlcm0gc2hvdWxkIHdlIGdpdmUgdG8gdGhlIElNIGRlc2NyaXB0aW9uPw0KDQpU aGF04oCZcyBhIGZpbmUgcXVlc3Rpb24sIGFuZCBJIGRvbuKAmXQgaGF2ZSBhbnkgc3Ryb25nIHBy ZWZlcmVuY2UgcmlnaHQgbm93LCBvdGhlciB0aGFuIHRvIG5vdCB1c2UgdGhlIHNhbWUgdGVybSBh cyBzb21ldGhpbmcgZWxzZS4NCk9mZmhhbmQsIG15IHByZWZlcmVuY2Ugd291bGQgYmUgdG8gbm90 IGRlZmluZSBhIHRlcm0sIGFuZCBqdXN0IHVzZSBFdmlkZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVz dWx0IGFzIHRoZSB0ZXJtcyBmb3INCmZvcm1hdC1pbmRlcGVuZGVudCBkaXNjdXNzaW9uLiAgSSB0 aGluayBpdCBpcyB1c2VmdWwgdG8gZGlzdGluZ3Vpc2ggYmV0d2VlbiBFdmlkZW5jZSB2cyBBdHRl c3RhdGlvbiBSZXN1bHRzIGluIG1hbnkgY2FzZXMuDQpBbmQgaWYgeW91IG5lZWQgdG8gcmVmZXIg dG8gYm90aCwgdGhlbiB3ZSBjYW4gYWx3YXlzIHVzZSBib3RoIHRvZ2V0aGVyLCBzdWNoIGFzIOKA nEV2aWRlbmNlIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHRz4oCdLg0KDQo+IFRoZSB0ZXJtICJDbGFp bSIgaGFzIGJlZW4gdXNlZCBleHRlbnNpdmVseS4gRG8gd2Ugd2FudCB0byBhZ3JlZSB0byB1c2Ug ImNsYWltIiB0byByZWZlciB0byBhbnl0aGluZyB0aGF0IGlzIGFuIElNDQo+IGV4cHJlc3Npb24g aW4gUkFUUyBhbmQgIlRva2VuIiBmb3IgYW55IHNlcmlhbGl6YXRpb24gKHJlYWxpemF0aW9uKSBl dmVuIGlmIGl0IGlzbid0IGEgSldUIG9yIENXVD8NCg0KSSB3b3VsZCBzYXkgbm8uIFRvIG1lLCBh IGNsYWltIGlzIG9uZSBwYXJ0aWN1bGFyIHBpZWNlIG9mIGluZm9ybWF0aW9uLCB3aGVyZSBhIOKA nFRva2Vu4oCdIG9yIHdoYXRldmVyIGVsc2UgaGFzIGEgc2V0IG9mIGNsYWltcy4NCg0KRGF2ZQ0K DQoNCk9uIDExLzEyLzE5LCAxMTowMCBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIExhdXJlbmNlIEx1 bmRibGFkZSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYu b3JnPiBvbiBiZWhhbGYgb2YgbGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5k LXJlc29ydC5jb20+PiB3cm90ZToNCg0KDQpPbiBOb3YgMTIsIDIwMTksIGF0IDE6MDggQU0sIE1p Y2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBz YW5kZWxtYW4uY2E+PiB3cm90ZToNCg0KDQpPbiAyMDE5LTExLTEyIDEyOjE5IHAubS4sIERhdmUg VGhhbGVyIHdyb3RlOg0KDQoNCk5lZCBTbWl0aCB3cm90ZToNCg0KDQpTbyBmYXIgdGhlIGdyb3Vw IGhhcyB1c2VkIHRoZSB0ZXJtICJFQVQiIHRvIHJlZmVyIHRvIGJvdGggdGhlDQppbmZvcm1hdGlv biBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLg0KDQoNCg0KSSB3b3Vs ZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBvdGhlciB0ZXJtcyBlbmRpbmcgaW4g VG9rZW4sDQpsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJlIHVzZWQgdG8gcmVmZXIgdG8NCg0KZGF0 YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1vZGVsLg0K SSBjb25jdXIuDQoNCkkgZGlzYWdyZWUgd2l0aCB0aGF0Lg0KDQpJIGRvbuKAmXQgdGhpbmsgd2Ug d2FudCBvbmUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIGFsbCBvZiBSQVRTLg0KDQpFQVQgaGFzIGFu IGluZm9ybWF0aW9uIG1vZGVsIGFuZCBkYXRhIG1vZGVsIGZvciB3aGF0IGl0IGV4cHJlc3Nlcy4N Cg0KVGhlIFlBTkcgTW9kdWxlIGhhcyBhbiBpbmZvcm1hdGlvbiBhbmQgZGF0YSBtb2RlbCBmb3Ig d2hhdCBpdCBleHByZXNzZXMuDQoNClRoZSBwcmltYXJ5IHB1cnBvc2UgZm9yIHVzZSBvZiBpbmZv cm1hdGlvbiBtb2RlbHMgKHBsdXJhbCEpIGlzIHNvIHdlIGNhbiBkZXNjcmliZWQgdGhpbmdzIGxp a2UgY2xhaW1zIG9uY2UgYW5kIHRoZW4gaGF2ZSBhIGxhcmdlbHkgbWVjaGFuaWNhbCB3YXkgdG8g c2VyaWFsaXplIHRoZW0gaW4gZGlmZmVyZW50IHdheXMsIENCT1IgYW5kIEpTT04uDQoNCk5vdGUg dGhhdCBDV1QgYW5kIEpXVCBkb27igJl0IHVzZSB0aGUgaW5mb3JtYXRpb24gbW9kZWwgY29uY2Vw dC4gVGhleSBhcmUgbW9zdGx5IHR3byBpbmRlcGVuZGVudGx5IGRlZmluZWQgYW5kIGxvb3NlbHkg Y29vcmRpbmF0ZWQgZGF0YSBtb2RlbHMuIFdlIGFyZSB0cnlpbmcgdG8gZG8gZGlmZmVyZW50IGJ5 IGhhdmluZyBhIGNvbW1vbiBpbmZvcm1hdGlvbiBtb2RlbCB0aGF0IGNvdmVycyBib3RoLiBPbmUg bWlnaHQgYXJndWUgdGhhdCBDV1QgYW5kIEpXVCBzaG91bGQgaGF2ZSBkb25lIHdoYXQgd2UgYXJl IGRvaW5nIGluIEVBVC4NCg0KTEwNCg0K --_000_229E0A724B444C9AAD0A142A13020C9Aintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <1EA2A61D2CDBFA4AB8F6349156F79964@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4 dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQg Q2hhciI7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCglt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXpl OjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25vcm1h bDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25v cm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxT dHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5QbGFpblRleHRD aGFyDQoJe21zby1zdHlsZS1uYW1lOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCI7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhw b3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6 ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2lu OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPkluY2x1ZGluZyBEYXZlIFRoYWxlcuKAmXMgdGhy ZWFkIGZyb20gZm9ya2VkIHN1YmplY3QgbGluZSBpbiBbMV0uDQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAw MDFwdCI+VGhlIGVhdCBkcmFmdCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0aW9uIGhl YWRpbmcgZm9yIHRoZSBJbmZvcm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBhcmUgdXNl ZC4gSSB0aGluayB0aGlzIGlzIE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0IHRvIOKA nEV2aWRlbmNl4oCdIElNTy4gVGhlIGFyY2hpdGVjdHVyZSBkcmFmdA0KIChiaXJraG9seikgc3Ry b25nbHkgaW1wbGllcyB0aGF0IEV2aWRlbmNlIGlzIHNpZ25lZCAodmVyaWZpYWJsZSBvciBwcm92 YWJsZSkuIFRoaXMgc3VnZ2VzdHMgRXZpZGVuY2UgaXMgaW4gYSBzZXJpYWxpemVkIGZvcm1hdCAo aGVuY2UgaXNu4oCZdCBDRERMLCBZQU5HIG9yIEFTTi4xKS4gSSBkb27igJl0IHRoaW5rIOKAnEV2 aWRlbmNl4oCdIHdvdWxkIGJlIGFzIHByZWNpc2UgYSB3YXkgdG8gdGFsayBhYm91dCBhbiBpbmZv cm1hdGlvbiBtb2RlbCBvYmplY3QgYXMNCiDigJxDbGFpbShzKeKAnSB3b3VsZCBiZS4gPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJn aW4tYm90dG9tOi4wMDAxcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij5ZQU5HIGlz IG5vdCBhIHNlcmlhbGl6YWJsZSBmb3JtYXQgaGVuY2UgaXQgaXMgbW9yZSBhcHByb3ByaWF0ZWx5 IGFuIGluZm9ybWF0aW9uIG1vZGVsIGxhbmd1YWdlIGZvciB0aGUgcHVycG9zZXMgb2YgUkFUUyAo SU1PKS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1h cmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAw MDFwdCI+R29pbmcgYmFjayB0byB0aGUgb3JpZ2luYWwgcXVlc3Rpb24uIEEgVG9rZW4gKEVBVCwg Q1dULCBKV1QpIGlzIGFuIGV4YW1wbGUgb2Ygc29tZXRoaW5nIHRoZSBhcmNoaXRlY3R1cmUgY2Fs bHMgRXZpZGVuY2UuIENEREwsIFlBTkcgYXJlIGV4cHJlc3Npb25zIG9mIHNvbWV0aGluZyB0aGF0 IHRoZSBhcmNoaXRlY3R1cmUgc2hvdWxkIGNhbGwNCiBDbGFpbXMuIChhZ3JlZT8pPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPi1OZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJn aW4tYm90dG9tOi4wMDAxcHQiPlsxXSA8c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPg0KRGF2ZSBU aGFsZXIgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mZ3Q7IFNvIGZhciB0aGUgZ3JvdXAgaGFzIHVzZWQg dGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlIGluZm9ybWF0aW9u IG1vZGVsIGFuZCBkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4m bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVybSBFQVQgKGFuZCBh bnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLCBsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJl IHVzZWQgdG8gcmVmZXIgdG88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPmRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNz aW9ucywgbm90IHRoZSBpbmZvcm1hdGlvbiBtb2RlbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+Jmd0OyBXaGVuIGV4dGVuZGluZyBpbmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9y IHNvbWUgb3RoZXIgc2VyaWFsaXphdGlvbiAoZS5nLiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJp bGl0eSBmb3IgYW4gSU08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZndDsgZXhwcmVzc2lvbiB0byBiZSByZWFsaXpl ZCBieSBkaWZmZXJlbnQgc2VyaWFsaXphdGlvbnMsIHdoYXQgdGVybSBzaG91bGQgd2UgZ2l2ZSB0 byB0aGUgSU0gZGVzY3JpcHRpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRo YXTigJlzIGEgZmluZSBxdWVzdGlvbiwgYW5kIEkgZG9u4oCZdCBoYXZlIGFueSBzdHJvbmcgcHJl ZmVyZW5jZSByaWdodCBub3csIG90aGVyIHRoYW4gdG8gbm90IHVzZSB0aGUgc2FtZSB0ZXJtIGFz IHNvbWV0aGluZyBlbHNlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+T2ZmaGFuZCwgbXkgcHJlZmVyZW5jZSB3b3Vs ZCBiZSB0byBub3QgZGVmaW5lIGEgdGVybSwgYW5kIGp1c3QgdXNlIEV2aWRlbmNlIGFuZCBBdHRl c3RhdGlvbiBSZXN1bHQgYXMgdGhlIHRlcm1zIGZvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Zm9ybWF0LWluZGVw ZW5kZW50IGRpc2N1c3Npb24uJm5ic3A7IEkgdGhpbmsgaXQgaXMgdXNlZnVsIHRvIGRpc3Rpbmd1 aXNoIGJldHdlZW4gRXZpZGVuY2UgdnMgQXR0ZXN0YXRpb24gUmVzdWx0cyBpbiBtYW55IGNhc2Vz LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+QW5kIGlmIHlvdSBuZWVkIHRvIHJlZmVyIHRvIGJvdGgsIHRoZW4gd2Ug Y2FuIGFsd2F5cyB1c2UgYm90aCB0b2dldGhlciwgc3VjaCBhcyDigJxFdmlkZW5jZSBhbmQgQXR0 ZXN0YXRpb24gUmVzdWx0c+KAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0 OyBUaGUgdGVybSAmcXVvdDtDbGFpbSZxdW90OyBoYXMgYmVlbiB1c2VkIGV4dGVuc2l2ZWx5LiBE byB3ZSB3YW50IHRvIGFncmVlIHRvIHVzZSAmcXVvdDtjbGFpbSZxdW90OyB0byByZWZlciB0byBh bnl0aGluZyB0aGF0IGlzIGFuIElNPGJyPg0KJmd0OyBleHByZXNzaW9uIGluIFJBVFMgYW5kICZx dW90O1Rva2VuJnF1b3Q7IGZvciBhbnkgc2VyaWFsaXphdGlvbiAocmVhbGl6YXRpb24pIGV2ZW4g aWYgaXQgaXNuJ3QgYSBKV1Qgb3IgQ1dUPyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9y OmJsYWNrIj5JIHdvdWxkIHNheSBuby4gVG8gbWUsIGEgY2xhaW0gaXMgb25lIHBhcnRpY3VsYXIg cGllY2Ugb2YgaW5mb3JtYXRpb24sIHdoZXJlIGEg4oCcVG9rZW7igJ0gb3Igd2hhdGV2ZXIgZWxz ZSBoYXMgYSBzZXQgb2YgY2xhaW1zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5E YXZlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPk9uIDExLzEyLzE5LCAxMTowMCBBTSwgJnF1b3Q7UkFUUyBvbiBiZWhhbGYgb2YgTGF1cmVu Y2UgTHVuZGJsYWRlJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYu b3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFp bHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiBOb3YgMTIsIDIwMTksIGF0IDE6MDggQU0sIE1p Y2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1jciYjNDM7aWV0ZkBzYW5kZWxt YW4uY2EiPm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2E8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OkhlbHZldGljYSI+PGJyPg0KT24gMjAxOS0xMS0xMiAxMjoxOSBwLm0uLCBEYXZlIFRo YWxlciB3cm90ZTo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7Zm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDt0ZXh0LWFsaWduOnN0YXJ0Oy13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDt3b3JkLXNwYWNpbmc6MHB4Ij4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj48YnI+DQpOZWQgU21p dGggd3JvdGU6PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPlNvIGZhciB0aGUgZ3JvdXAgaGFz IHVzZWQgdGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjEyLjBwdDttYXJnaW4tbGVmdDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5pbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxp emF0aW9uIGV4cHJlc3Npb25zLjxicj4NCjxicj4NCiZuYnNwOzxicj4NCjxicj4NCkkgd291bGQg cmF0aGVyIHNlZSB0aGUgdGVybSBFQVQgKGFuZCBhbnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRv a2VuLDxicj4NCmxpa2UgSldUIGFuZCBDV1QpIG9ubHkgYmUgdXNlZCB0byByZWZlciB0bzxicj4N Cjxicj4NCmRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucywgbm90IHRoZSBpbmZvcm1hdGlv biBtb2RlbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPkkgY29uY3VyLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgZGlzYWdyZWUg d2l0aCB0aGF0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PkkgZG9u4oCZdCB0aGluayB3ZSB3YW50IG9uZSBpbmZvcm1hdGlvbiBtb2RlbCBmb3IgYWxsIG9m IFJBVFMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+RUFUIGhhcyBhbiBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBtb2RlbCBmb3Igd2hhdCBp dCBleHByZXNzZXMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+VGhlIFlBTkcgTW9kdWxlIGhhcyBhbiBpbmZvcm1hdGlvbiBhbmQgZGF0YSBtb2Rl bCBmb3Igd2hhdCBpdCBleHByZXNzZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+VGhlIHByaW1hcnkgcHVycG9zZSBmb3IgdXNlIG9mIGluZm9ybWF0aW9u IG1vZGVscyAocGx1cmFsISkgaXMgc28gd2UgY2FuIGRlc2NyaWJlZCB0aGluZ3MgbGlrZSBjbGFp bXMgb25jZSBhbmQgdGhlbiBoYXZlIGEgbGFyZ2VseSBtZWNoYW5pY2FsIHdheSB0byBzZXJpYWxp emUgdGhlbSBpbiBkaWZmZXJlbnQgd2F5cywgQ0JPUiBhbmQgSlNPTi48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5Ob3RlIHRoYXQgQ1dUIGFuZCBKV1QgZG9u 4oCZdCB1c2UgdGhlIGluZm9ybWF0aW9uIG1vZGVsIGNvbmNlcHQuIFRoZXkgYXJlIG1vc3RseSB0 d28gaW5kZXBlbmRlbnRseSBkZWZpbmVkIGFuZCBsb29zZWx5IGNvb3JkaW5hdGVkIGRhdGEgbW9k ZWxzLiBXZSBhcmUgdHJ5aW5nIHRvIGRvIGRpZmZlcmVudCBieSBoYXZpbmcgYSBjb21tb24gaW5m b3JtYXRpb24gbW9kZWwgdGhhdA0KIGNvdmVycyBib3RoLiBPbmUgbWlnaHQgYXJndWUgdGhhdCBD V1QgYW5kIEpXVCBzaG91bGQgaGF2ZSBkb25lIHdoYXQgd2UgYXJlIGRvaW5nIGluIEVBVC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5MTDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_229E0A724B444C9AAD0A142A13020C9Aintelcom_-- From nobody Tue Nov 12 15:33:33 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF9B412011D for ; Tue, 12 Nov 2019 15:33:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XV7upKZmFB-B for ; Tue, 12 Nov 2019 15:33:28 -0800 (PST) Received: from NAM05-DM3-obe.outbound.protection.outlook.com (mail-eopbgr730103.outbound.protection.outlook.com [40.107.73.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5F3D1200B7 for ; Tue, 12 Nov 2019 15:33:28 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YSGK8PzErUR627sE2jf/lsDUaW0a/8hb4k+DIFDCstpxHY8Bd5CRToNS1EOIqYSLG3GK511GzudRR0C4EVPddYruyFl2HVb3elTn5m0MhVSabRok/jC87eLtaly9zJwmPt5ybkyJSeg8HtTin09mMKEeIuSrQf5RUgWHcYw3Q16rl524yzyCcf+wBRXjgrIpP7aoeQmZNx4Lj4EFnF+v2BpOV5JGwUpJnLc0Hba302vEr3VzT5zmoDFnAePQBnYn0M0gJkD7lBuqdW1MxKYorANVSDaag+oS8L8Jc8TjK4MnZZDDCrvXc6S1jISptNrM+MKCxLlqNYAtCekp00LmhQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AFrXjmocKegkcDtZmjaVspDVOi3AcXB5jsM2wrhFtLQ=; b=X8uCIJFH4v72Yn6qkf1RIgtFRJWXc1zTz1d5GHvZp8IdkpTAMHbn7Z4CLOtbjA9ykDJWVjFQJqWzUkemdl0SXwWdp5DOJDlmyN0wMjJFl2fHHhfDAAQ6abMn3v7fleJbWK5qYLoPrKRURcK9rZgkccG1H+NeMBPiJRau1pI95VgQiEpl/fpxEMKMqWfeAXjztu2ptxI8BkWudFCGfzjcEmxHwRTO7GbDQ2lzXaFvylJO7eWmqR2KrA1APo0BDY6IgDQdgyog9dixYgff0dsqiwC0bZvYx6sonQ4kZYpVlRBQzK0WbhHCNp9CCBoiMPHyztCy8cl92X5LhEsSwV6S2A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=AFrXjmocKegkcDtZmjaVspDVOi3AcXB5jsM2wrhFtLQ=; b=BSnrXEHXXZreMNvmqn1xZnIUS8ys0EWJLRC6vD2xZxo6yERnIjTxEFcWDsUUwFB47L5Fsbj8+M0BIrgCOy7LRde1j8K6x4ndDzdujAlzdzxmmm9BuiBWZZH24uSBgqIZUI/KnFJ0oL5+IMn+cUq64C7UesmQn6f4bV4VWzq/tV4= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0829.namprd21.prod.outlook.com (10.173.51.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.11; Tue, 12 Nov 2019 23:33:26 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Tue, 12 Nov 2019 23:33:26 +0000 From: Dave Thaler To: "Smith, Ned" , Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rw Date: Tue, 12 Nov 2019 23:33:26 +0000 Message-ID: References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> In-Reply-To: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T23:33:26.3540800Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a7e8c754-18b3-4068-9621-248da0028d48; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:b:f89a:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: e5325a45-372d-4a42-6371-08d767c8b784 x-ms-traffictypediagnostic: MWHPR21MB0829: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:170; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(346002)(376002)(39860400002)(366004)(136003)(199004)(189003)(256004)(229853002)(86362001)(66476007)(64756008)(9686003)(22452003)(790700001)(71190400001)(99286004)(71200400001)(7696005)(10290500003)(186003)(11346002)(74316002)(14444005)(446003)(66556008)(8990500004)(478600001)(76116006)(236005)(486006)(66946007)(476003)(7736002)(66446008)(6116002)(10090500001)(54896002)(46003)(55016002)(6246003)(81166006)(6306002)(6506007)(81156014)(14454004)(4001150100001)(33656002)(6436002)(5660300002)(102836004)(4326008)(76176011)(8936002)(2906002)(110136005)(53546011)(316002)(25786009)(52536014)(8676002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0829; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: H0tAUTW6cvqi4w9VM1xRM/8PcdBxt7UAJwt8/86mIBZbZrXD1M5U9DoffEOhjmr9KRvL56zAWPWsdlQUSxC9bTqDJnD/RlHPtIFdJjN4zLYLiYp7oCJUb4KjeX93sAPas/RFrBqxkS29pNuhk79Zvko5473gvo15UItAQS8DFx2tv3KwjrmTCMlztmIEFHIyyerPLM6l4K6cA47CgO5f4vecxlrTABuvi4UNNM+jRUy/9C0fzpOh7IqQetHB/ApobTQ9hm8KSlghV0VppWXIpGBuc2bzaNTLCoxpPHGs+qZJGFYjP4lI7g4n0uZd3dl48PiZ/qX1k3isBLLgaKToiW4lnB7zkU0Ltdqpmu8KYV3vz33EvSuzjWyxEkJ+/aawPSL9cMx3dJKHi4E1iOwBxwvfkid9woLz95ooYYUHQkG7Cy5P1H1+TAiq0/28utBU x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784058F591C52EEB31E0736A3770MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: e5325a45-372d-4a42-6371-08d767c8b784 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 23:33:26.4871 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 1jvD5h7nj3wWfIN8kmhoKsDdUw8ipfPTnui6TprM+KY2IfnaQlnfehTiE4PNiTvW7KdmDY6XlJaykFMeiPpfCSi3dNyOBG6xxO8d4AvMw3U= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0829 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 23:33:32 -0000 --_000_MWHPR21MB0784058F591C52EEB31E0736A3770MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFNtaXRo LCBOZWQNClNlbnQ6IFR1ZXNkYXksIE5vdmVtYmVyIDEyLCAyMDE5IDI6NTYgUE0NClRvOiBMYXVy ZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT47IE1pY2hhZWwgUmljaGFyZHNv biA8bWNyK2lldGZAc2FuZGVsbWFuLmNhPg0KQ2M6IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJl OiBbUmF0c10gV2hhdCdzIHRvIEVBVD8gLSB0ZXJtaW5vbG9neSBjbGFyaWZpY2F0aW9uDQoNCg0K SW5jbHVkaW5nIERhdmUgVGhhbGVy4oCZcyB0aHJlYWQgZnJvbSBmb3JrZWQgc3ViamVjdCBsaW5l IGluIFsxXS4NCg0KVGhlIGVhdCBkcmFmdCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0 aW9uIGhlYWRpbmcgZm9yIHRoZSBJbmZvcm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBh cmUgdXNlZC4gSSB0aGluayB0aGlzIGlzIE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0 IHRvIOKAnEV2aWRlbmNl4oCdIElNTy4gVGhlIGFyY2hpdGVjdHVyZSBkcmFmdCAoYmlya2hvbHop IHN0cm9uZ2x5IGltcGxpZXMgdGhhdCBFdmlkZW5jZSBpcyBzaWduZWQgKHZlcmlmaWFibGUgb3Ig cHJvdmFibGUpLiBUaGlzIHN1Z2dlc3RzIEV2aWRlbmNlIGlzIGluIGEgc2VyaWFsaXplZCBmb3Jt YXQgKGhlbmNlIGlzbuKAmXQgQ0RETCwgWUFORyBvciBBU04uMSkuDQoNCg0KDQpTdXJlLCBFdmlk ZW5jZSBpcyBjZXJ0YWlubHkgY29udmV5ZWQgaW4gYSBzZXJpYWxpemVkIGZvcm1hdC4NCg0KDQoN CkkgZG9u4oCZdCB0aGluayDigJxFdmlkZW5jZeKAnSB3b3VsZCBiZSBhcyBwcmVjaXNlIGEgd2F5 IHRvIHRhbGsgYWJvdXQgYW4gaW5mb3JtYXRpb24gbW9kZWwgb2JqZWN0IGFzIOKAnENsYWltKHMp 4oCdIHdvdWxkIGJlLg0KDQoNCg0KWUFORyBpcyBub3QgYSBzZXJpYWxpemFibGUgZm9ybWF0IGhl bmNlIGl0IGlzIG1vcmUgYXBwcm9wcmlhdGVseSBhbiBpbmZvcm1hdGlvbiBtb2RlbCBsYW5ndWFn ZSBmb3IgdGhlIHB1cnBvc2VzIG9mIFJBVFMgKElNTykuDQoNCg0KDQpHb2luZyBiYWNrIHRvIHRo ZSBvcmlnaW5hbCBxdWVzdGlvbi4gQSBUb2tlbiAoRUFULCBDV1QsIEpXVCkgaXMgYW4gZXhhbXBs ZSBvZiBzb21ldGhpbmcgdGhlIGFyY2hpdGVjdHVyZSBjYWxscyBFdmlkZW5jZS4NCg0KDQoNCkZZ SSwgSSAoYW5kIG90aGVycyBJ4oCZdmUgdGFsa2VkIHRvKSBhcmUgZmFyIG1vcmUgaW50ZXJlc3Rl ZCBpbiB0aGUgdXNlIG9mIGEgVG9rZW4gZm9yIHdoYXQgdGhlIGFyY2hpdGVjdHVyZSBjYWxscyBB dHRlc3RhdGlvbiBGb3JtYXQsDQoNCm11Y2ggbGVzcyBpbnRlcmVzdGVkIGluIHN0YW5kYXJkaXpp bmcgd2hhdCB0aGUgYXJjaGl0ZWN0dXJlIGNhbGxzIEV2aWRlbmNlLg0KDQoNCg0KQSBWZXJpZmll ciBjYW4gaGF2ZSBtdWx0aXBsZSBzaW11bHRhbmVvdXMgcHVycG9zZXMsIGFzIG1lbnRpb25lZCBp biBteSBkcmFmdDoNCg0KMSkgICAgIFRvIG1ha2UgcG9saWN5IGRlY2lzaW9ucyB0aGF0IGluY2x1 ZGUgdmVyaWZ5aW5nIEV2aWRlbmNlIHRoYXQgY2hhaW5zIHVwIHRvIGEgbWFudWZhY3R1cmVyLCBh bmQgdGhlbiBnZW5lcmF0aW5nIGFuIEF0dGVzdGF0aW9uIFJlc3VsdA0KDQp3aG9zZSBzZWN1cml0 eSBjaGFpbnMgdXAgdG8gdGhlIFZlcmlmaWVyIChvciB0aGVpciBvcmcpIHJhdGhlciB0aGFuIGV2 ZXJ5IG1hbnVmYWN0dXJlciBvZiBldmVyeSBBdHRlc3Rlciwgc28gdGhhdCB0aGUgUmVseWluZyBQ YXJ0eeKAmXMgcG9saWN5DQoNCmNhbiBiZSBzaW1wbGUgYW5kIGp1c3QgdHJ1c3QgdGhlIFZlcmlm aWVyLg0KDQoyKSAgICAgVG8gYWxsb3cgaGV0ZXJvZ2VuZW91cyBBdHRlc3RlcnMsIHdpdGggZGlm ZmVyZW50IEV2aWRlbmNlIGZvcm1hdHMgKGluY2x1ZGluZyBleGlzdGluZy9wcm9wcmlldGFyeS93 aGF0ZXZlciBvbmVzKSwgdG8gdGFsayB0byBhIGNvbW1vbiBWZXJpZmllciwNCndoaWNoIGNhbiB0 aGVuIHByb3ZpZGUgYSBzdGFuZGFyZCBBdHRlc3RhdGlvbiBGb3JtYXQgdG8gUmVseWluZyBQYXJ0 aWVzLCBzbyB0aGF0IG9uZSBuZWVkIG5vdCBoYXZlIGV2ZXJ5IFJlbHlpbmcgUGFydHkgdW5kZXJz dGFuZCBldmVyeQ0KDQpFdmlkZW5jZSBmb3JtYXQsIG9mIHdoaWNoIG1hbnkgYWxyZWFkeSBleGlz dC4NCg0KDQoNClNvIEkgcGVyc29uYWxseSB3aWxsIGFyZ3VlIGFnYWluc3Qgc2NvcGluZyBFQVQg dG8gb25seSBFdmlkZW5jZSwgYW5kIGZvciBrZWVwaW5nIGl0IGdlbmVyaWMgYW5kIHVzYWJsZSBm b3IgQXR0ZXN0YXRpb24gUmVzdWx0cy4NCg0KKE90aGVycyBJ4oCZdmUgdGFsa2VkIHRvIGJvdGgg aW5zaWRlIGFuZCBvdXRzaWRlIE1pY3Jvc29mdCBzaGFyZSB0aGlzIHZpZXcsIHNvIEnigJltIGFs c28gcmVseWluZyBpdCBhcyBhIG1lc3Nlbmdlciwgbm90IGp1c3QgYW4gYWR2b2NhdGUuKQ0KDQoN Cg0KSWYgdGhlIFdHIGNob29zZXMgdG8gb25seSBzdGFuZGFyZGl6ZSB3aGF0IHdlIG5vdyBjYWxs IEV2aWRlbmNlIGFuZCBpZ25vcmUgQXR0ZXN0YXRpb24gUmVzdWx0cywgdGhlbiBJIGRvbuKAmXQg YmVsaWV2ZSBpdCBtZWV0cyB0aGUgbmVlZHMNCg0Kb2YgZWl0aGVyIE1pY3Jvc29mdCBvciwgSSBz dXNwZWN0LCB0aGUgVEVFUCBXRyB1c2UgY2FzZS4NCg0KDQoNCkRhdmUNCg0KDQoNCkNEREwsIFlB TkcgYXJlIGV4cHJlc3Npb25zIG9mIHNvbWV0aGluZyB0aGF0IHRoZSBhcmNoaXRlY3R1cmUgc2hv dWxkIGNhbGwgQ2xhaW1zLiAoYWdyZWU/KQ0KDQotTmVkDQoNCg0KDQpbMV0gRGF2ZSBUaGFsZXIg d3JvdGU6DQo+IFNvIGZhciB0aGUgZ3JvdXAgaGFzIHVzZWQgdGhlIHRlcm0gIkVBVCIgdG8gcmVm ZXIgdG8gYm90aCB0aGUgaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBl eHByZXNzaW9ucy4NCg0KSSB3b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBv dGhlciB0ZXJtcyBlbmRpbmcgaW4gVG9rZW4sIGxpa2UgSldUIGFuZCBDV1QpIG9ubHkgYmUgdXNl ZCB0byByZWZlciB0bw0KZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGlu Zm9ybWF0aW9uIG1vZGVsLg0KDQo+IFdoZW4gZXh0ZW5kaW5nIGluZm9ybWF0aW9uIG1vZGVsIHRv IFlBTkcgb3Igc29tZSBvdGhlciBzZXJpYWxpemF0aW9uIChlLmcuIEFTTi4xKS4gR2l2ZW4gdGhl IHBvc3NpYmlsaXR5IGZvciBhbiBJTQ0KPiBleHByZXNzaW9uIHRvIGJlIHJlYWxpemVkIGJ5IGRp ZmZlcmVudCBzZXJpYWxpemF0aW9ucywgd2hhdCB0ZXJtIHNob3VsZCB3ZSBnaXZlIHRvIHRoZSBJ TSBkZXNjcmlwdGlvbj8NCg0KVGhhdOKAmXMgYSBmaW5lIHF1ZXN0aW9uLCBhbmQgSSBkb27igJl0 IGhhdmUgYW55IHN0cm9uZyBwcmVmZXJlbmNlIHJpZ2h0IG5vdywgb3RoZXIgdGhhbiB0byBub3Qg dXNlIHRoZSBzYW1lIHRlcm0gYXMgc29tZXRoaW5nIGVsc2UuDQpPZmZoYW5kLCBteSBwcmVmZXJl bmNlIHdvdWxkIGJlIHRvIG5vdCBkZWZpbmUgYSB0ZXJtLCBhbmQganVzdCB1c2UgRXZpZGVuY2Ug YW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9yDQpmb3JtYXQtaW5kZXBlbmRl bnQgZGlzY3Vzc2lvbi4gIEkgdGhpbmsgaXQgaXMgdXNlZnVsIHRvIGRpc3Rpbmd1aXNoIGJldHdl ZW4gRXZpZGVuY2UgdnMgQXR0ZXN0YXRpb24gUmVzdWx0cyBpbiBtYW55IGNhc2VzLg0KQW5kIGlm IHlvdSBuZWVkIHRvIHJlZmVyIHRvIGJvdGgsIHRoZW4gd2UgY2FuIGFsd2F5cyB1c2UgYm90aCB0 b2dldGhlciwgc3VjaCBhcyDigJxFdmlkZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS4N Cg0KPiBUaGUgdGVybSAiQ2xhaW0iIGhhcyBiZWVuIHVzZWQgZXh0ZW5zaXZlbHkuIERvIHdlIHdh bnQgdG8gYWdyZWUgdG8gdXNlICJjbGFpbSIgdG8gcmVmZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBh biBJTQ0KPiBleHByZXNzaW9uIGluIFJBVFMgYW5kICJUb2tlbiIgZm9yIGFueSBzZXJpYWxpemF0 aW9uIChyZWFsaXphdGlvbikgZXZlbiBpZiBpdCBpc24ndCBhIEpXVCBvciBDV1Q/DQoNCkkgd291 bGQgc2F5IG5vLiBUbyBtZSwgYSBjbGFpbSBpcyBvbmUgcGFydGljdWxhciBwaWVjZSBvZiBpbmZv cm1hdGlvbiwgd2hlcmUgYSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBlbHNlIGhhcyBhIHNldCBv ZiBjbGFpbXMuDQoNCkRhdmUNCg0KDQpPbiAxMS8xMi8xOSwgMTE6MDAgQU0sICJSQVRTIG9uIGJl aGFsZiBvZiBMYXVyZW5jZSBMdW5kYmxhZGUiIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRv OnJhdHMtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIGxnbEBpc2xhbmQtcmVzb3J0LmNv bTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCg0KT24gTm92IDEyLCAy MDE5LCBhdCAxOjA4IEFNLCBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5j YTxtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhPj4gd3JvdGU6DQoNCg0KT24gMjAxOS0xMS0x MiAxMjoxOSBwLm0uLCBEYXZlIFRoYWxlciB3cm90ZToNCg0KTmVkIFNtaXRoIHdyb3RlOg0KDQpT byBmYXIgdGhlIGdyb3VwIGhhcyB1c2VkIHRoZSB0ZXJtICJFQVQiIHRvIHJlZmVyIHRvIGJvdGgg dGhlDQppbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25z Lg0KDQoNCg0KSSB3b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBvdGhlciB0 ZXJtcyBlbmRpbmcgaW4gVG9rZW4sDQpsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJlIHVzZWQgdG8g cmVmZXIgdG8NCg0KZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9y bWF0aW9uIG1vZGVsLg0KSSBjb25jdXIuDQoNCkkgZGlzYWdyZWUgd2l0aCB0aGF0Lg0KDQpJIGRv buKAmXQgdGhpbmsgd2Ugd2FudCBvbmUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIGFsbCBvZiBSQVRT Lg0KDQpFQVQgaGFzIGFuIGluZm9ybWF0aW9uIG1vZGVsIGFuZCBkYXRhIG1vZGVsIGZvciB3aGF0 IGl0IGV4cHJlc3Nlcy4NCg0KVGhlIFlBTkcgTW9kdWxlIGhhcyBhbiBpbmZvcm1hdGlvbiBhbmQg ZGF0YSBtb2RlbCBmb3Igd2hhdCBpdCBleHByZXNzZXMuDQoNClRoZSBwcmltYXJ5IHB1cnBvc2Ug Zm9yIHVzZSBvZiBpbmZvcm1hdGlvbiBtb2RlbHMgKHBsdXJhbCEpIGlzIHNvIHdlIGNhbiBkZXNj cmliZWQgdGhpbmdzIGxpa2UgY2xhaW1zIG9uY2UgYW5kIHRoZW4gaGF2ZSBhIGxhcmdlbHkgbWVj aGFuaWNhbCB3YXkgdG8gc2VyaWFsaXplIHRoZW0gaW4gZGlmZmVyZW50IHdheXMsIENCT1IgYW5k IEpTT04uDQoNCk5vdGUgdGhhdCBDV1QgYW5kIEpXVCBkb27igJl0IHVzZSB0aGUgaW5mb3JtYXRp b24gbW9kZWwgY29uY2VwdC4gVGhleSBhcmUgbW9zdGx5IHR3byBpbmRlcGVuZGVudGx5IGRlZmlu ZWQgYW5kIGxvb3NlbHkgY29vcmRpbmF0ZWQgZGF0YSBtb2RlbHMuIFdlIGFyZSB0cnlpbmcgdG8g ZG8gZGlmZmVyZW50IGJ5IGhhdmluZyBhIGNvbW1vbiBpbmZvcm1hdGlvbiBtb2RlbCB0aGF0IGNv dmVycyBib3RoLiBPbmUgbWlnaHQgYXJndWUgdGhhdCBDV1QgYW5kIEpXVCBzaG91bGQgaGF2ZSBk b25lIHdoYXQgd2UgYXJlIGRvaW5nIGluIEVBVC4NCg0KTEwNCg0K --_000_MWHPR21MB0784058F591C52EEB31E0736A3770MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsN CglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IENo YXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4 dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlw ZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5 N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9u dC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47 DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7 cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7 bXNvLWxpc3QtaWQ6NTc5NTYzMDg4Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0 LXRlbXBsYXRlLWlkczo0NjczMzA4NzAgNjc2OTg3MDUgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3 MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3Qg bDA6bGV2ZWwxDQoJe21zby1sZXZlbC10ZXh0OiIlMVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1s b3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBw dDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs MDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6 bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxv d2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGlu O30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAv Pg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxh eW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwv bzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVO LVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPkZyb206PC9iPiBSQVRT ICZsdDtyYXRzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlNtaXRo LCBOZWQ8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgTm92ZW1iZXIgMTIsIDIwMTkgMjo1NiBQ TTxicj4NCjxiPlRvOjwvYj4gTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29y dC5jb20mZ3Q7OyBNaWNoYWVsIFJpY2hhcmRzb24gJmx0O21jciYjNDM7aWV0ZkBzYW5kZWxtYW4u Y2EmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiByYXRzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJlOiBbUmF0c10gV2hhdCdzIHRvIEVBVD8gLSB0ZXJtaW5vbG9neSBjbGFyaWZpY2F0aW9uPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjtt YXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+ DQpJbmNsdWRpbmcgRGF2ZSBUaGFsZXLigJlzIHRocmVhZCBmcm9tIGZvcmtlZCBzdWJqZWN0IGxp bmUgaW4gWzFdLiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTow aW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KVGhlIGVhdCBkcmFm dCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0aW9uIGhlYWRpbmcgZm9yIHRoZSBJbmZv cm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBhcmUgdXNlZC4gSSB0aGluayB0aGlzIGlz IE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0IHRvIOKAnEV2aWRlbmNl4oCdIElNTy4g VGhlIGFyY2hpdGVjdHVyZSBkcmFmdCAoYmlya2hvbHopIHN0cm9uZ2x5IGltcGxpZXMgdGhhdCBF dmlkZW5jZSBpcyBzaWduZWQgKHZlcmlmaWFibGUNCiBvciBwcm92YWJsZSkuIFRoaXMgc3VnZ2Vz dHMgRXZpZGVuY2UgaXMgaW4gYSBzZXJpYWxpemVkIGZvcm1hdCAoaGVuY2UgaXNu4oCZdCBDRERM LCBZQU5HIG9yIEFTTi4xKS4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFy Z2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij5TdXJlLCBFdmlkZW5jZSBpcyBjZXJ0YWlubHkNCjxpPmNvbnZleWVkPC9pPiBpbiBhIHNlcmlh bGl6ZWQgZm9ybWF0LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6 MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAw MXB0Ij4NCkkgZG9u4oCZdCB0aGluayDigJxFdmlkZW5jZeKAnSB3b3VsZCBiZSBhcyBwcmVjaXNl IGEgd2F5IHRvIHRhbGsgYWJvdXQgYW4gaW5mb3JtYXRpb24gbW9kZWwgb2JqZWN0IGFzIOKAnENs YWltKHMp4oCdIHdvdWxkIGJlLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdp bi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJn aW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpZQU5HIGlzIG5vdCBhIHNlcmlh bGl6YWJsZSBmb3JtYXQgaGVuY2UgaXQgaXMgbW9yZSBhcHByb3ByaWF0ZWx5IGFuIGluZm9ybWF0 aW9uIG1vZGVsIGxhbmd1YWdlIGZvciB0aGUgcHVycG9zZXMgb2YgUkFUUyAoSU1PKS4NCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDou NWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQiPg0KR29pbmcgYmFjayB0byB0aGUgb3JpZ2luYWwgcXVlc3Rpb24uIEEgVG9rZW4g KEVBVCwgQ1dULCBKV1QpIGlzIGFuIGV4YW1wbGUgb2Ygc29tZXRoaW5nIHRoZSBhcmNoaXRlY3R1 cmUgY2FsbHMgRXZpZGVuY2UuDQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47 bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRlIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2lu OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5G WUksIEkgKGFuZCBvdGhlcnMgSeKAmXZlIHRhbGtlZCB0bykgYXJlIGZhciBtb3JlIGludGVyZXN0 ZWQgaW4gdGhlIHVzZSBvZiBhIFRva2VuIGZvciB3aGF0IHRoZSBhcmNoaXRlY3R1cmUgY2FsbHMg QXR0ZXN0YXRpb24gRm9ybWF0LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm11Y2ggbGVzcyBpbnRlcmVzdGVkIGluIHN0YW5kYXJkaXpp bmcgd2hhdCB0aGUgYXJjaGl0ZWN0dXJlIGNhbGxzIEV2aWRlbmNlLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1i b3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGlu O21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkEgVmVy aWZpZXIgY2FuIGhhdmUgbXVsdGlwbGUgc2ltdWx0YW5lb3VzIHB1cnBvc2VzLCBhcyBtZW50aW9u ZWQgaW4gbXkgZHJhZnQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0 LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPjEpPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2Vu ZGlmXT48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+VG8gbWFrZSBwb2xpY3kgZGVjaXNpb25z IHRoYXQgaW5jbHVkZSB2ZXJpZnlpbmcgRXZpZGVuY2UgdGhhdCBjaGFpbnMgdXAgdG8gYSBtYW51 ZmFjdHVyZXIsIGFuZCB0aGVuIGdlbmVyYXRpbmcgYW4gQXR0ZXN0YXRpb24gUmVzdWx0PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4t bGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+d2hvc2Ugc2VjdXJpdHkgY2hhaW5zIHVwIHRvIHRoZSBWZXJpZmllciAob3IgdGhlaXIg b3JnKSByYXRoZXIgdGhhbiBldmVyeSBtYW51ZmFjdHVyZXIgb2YgZXZlcnkgQXR0ZXN0ZXIsIHNv IHRoYXQgdGhlIFJlbHlpbmcgUGFydHnigJlzIHBvbGljeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21h cmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmNhbiBiZSBzaW1w bGUgYW5kIGp1c3QgdHJ1c3QgdGhlIFZlcmlmaWVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQ7dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4N CjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48c3BhbiBz dHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4yKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9z cGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlRvIGFsbG93 IGhldGVyb2dlbmVvdXMgQXR0ZXN0ZXJzLCB3aXRoIGRpZmZlcmVudCBFdmlkZW5jZSBmb3JtYXRz IChpbmNsdWRpbmcgZXhpc3RpbmcvcHJvcHJpZXRhcnkvd2hhdGV2ZXIgb25lcyksIHRvIHRhbGsg dG8gYSBjb21tb24gVmVyaWZpZXIsPGJyPg0Kd2hpY2ggY2FuIHRoZW4gcHJvdmlkZSBhIHN0YW5k YXJkIEF0dGVzdGF0aW9uIEZvcm1hdCB0byBSZWx5aW5nIFBhcnRpZXMsIHNvIHRoYXQgb25lIG5l ZWQgbm90IGhhdmUgZXZlcnkgUmVseWluZyBQYXJ0eSB1bmRlcnN0YW5kIGV2ZXJ5PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVm dDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+RXZpZGVuY2UgZm9ybWF0LCBvZiB3aGljaCBtYW55IGFscmVhZHkgZXhpc3QuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47 bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1h cmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+U28gSSBwZXJzb25hbGx5IHdpbGwgYXJndWUgYWdhaW5zdCBzY29waW5nIEVBVCB0byBvbmx5 IEV2aWRlbmNlLCBhbmQgZm9yIGtlZXBpbmcgaXQgZ2VuZXJpYyBhbmQgdXNhYmxlIGZvciBBdHRl c3RhdGlvbiBSZXN1bHRzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPihPdGhlcnMgSeKAmXZlIHRhbGtlZCB0byBib3RoIGluc2lkZSBh bmQgb3V0c2lkZSBNaWNyb3NvZnQgc2hhcmUgdGhpcyB2aWV3LCBzbyBJ4oCZbSBhbHNvIHJlbHlp bmcgaXQgYXMgYSBtZXNzZW5nZXIsIG5vdCBqdXN0IGFuIGFkdm9jYXRlLik8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJn aW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2lu OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5J ZiB0aGUgV0cgY2hvb3NlcyB0byBvbmx5IHN0YW5kYXJkaXplIHdoYXQgd2Ugbm93IGNhbGwgRXZp ZGVuY2UgYW5kIGlnbm9yZSBBdHRlc3RhdGlvbiBSZXN1bHRzLCB0aGVuIEkgZG9u4oCZdCBiZWxp ZXZlIGl0IG1lZXRzIHRoZSBuZWVkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm9mIGVpdGhlciBNaWNyb3NvZnQgb3IsIEkgc3VzcGVj dCwgdGhlIFRFRVAgV0cgdXNlIGNhc2UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+RGF2ZTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1i b3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxl ZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KQ0RETCwgWUFORyBhcmUgZXhwcmVzc2lv bnMgb2Ygc29tZXRoaW5nIHRoYXQgdGhlIGFyY2hpdGVjdHVyZSBzaG91bGQgY2FsbCBDbGFpbXMu IChhZ3JlZT8pPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGlu O21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCi1OZWQ8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6 MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAw MXB0Ij4NClsxXSA8c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkRhdmUgVGhhbGVyIHdyb3RlOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZndDsgU28gZmFyIHRoZSBncm91 cCBoYXMgdXNlZCB0aGUgdGVybSAmcXVvdDtFQVQmcXVvdDsgdG8gcmVmZXIgdG8gYm90aCB0aGUg aW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucy48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5JIHdvdWxkIHJhdGhlciBzZWUgdGhlIHRlcm0gRUFUIChh bmQgYW55IG90aGVyIHRlcm1zIGVuZGluZyBpbiBUb2tlbiwgbGlrZSBKV1QgYW5kIENXVCkgb25s eSBiZSB1c2VkIHRvIHJlZmVyIHRvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+ZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1v ZGVsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZndDsgV2hlbiBleHRlbmRpbmcgaW5mb3Jt YXRpb24gbW9kZWwgdG8gWUFORyBvciBzb21lIG90aGVyIHNlcmlhbGl6YXRpb24gKGUuZy4gQVNO LjEpLiBHaXZlbiB0aGUgcG9zc2liaWxpdHkgZm9yIGFuIElNPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBleHByZXNzaW9uIHRvIGJlIHJlYWxpemVkIGJ5IGRpZmZl cmVudCBzZXJpYWxpemF0aW9ucywgd2hhdCB0ZXJtIHNob3VsZCB3ZSBnaXZlIHRvIHRoZSBJTSBk ZXNjcmlwdGlvbj88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5UaGF04oCZcyBhIGZpbmUgcXVl c3Rpb24sIGFuZCBJIGRvbuKAmXQgaGF2ZSBhbnkgc3Ryb25nIHByZWZlcmVuY2UgcmlnaHQgbm93 LCBvdGhlciB0aGFuIHRvIG5vdCB1c2UgdGhlIHNhbWUgdGVybSBhcyBzb21ldGhpbmcgZWxzZS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5PZmZoYW5kLCBteSBwcmVmZXJl bmNlIHdvdWxkIGJlIHRvIG5vdCBkZWZpbmUgYSB0ZXJtLCBhbmQganVzdCB1c2UgRXZpZGVuY2Ug YW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9yPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+Zm9ybWF0LWluZGVwZW5kZW50IGRpc2N1c3Npb24uJm5ic3A7 IEkgdGhpbmsgaXQgaXMgdXNlZnVsIHRvIGRpc3Rpbmd1aXNoIGJldHdlZW4gRXZpZGVuY2UgdnMg QXR0ZXN0YXRpb24gUmVzdWx0cyBpbiBtYW55IGNhc2VzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPkFuZCBpZiB5b3UgbmVlZCB0byByZWZlciB0byBib3RoLCB0aGVuIHdl IGNhbiBhbHdheXMgdXNlIGJvdGggdG9nZXRoZXIsIHN1Y2ggYXMg4oCcRXZpZGVuY2UgYW5kIEF0 dGVzdGF0aW9uIFJlc3VsdHPigJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFj ayI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBUaGUg dGVybSAmcXVvdDtDbGFpbSZxdW90OyBoYXMgYmVlbiB1c2VkIGV4dGVuc2l2ZWx5LiBEbyB3ZSB3 YW50IHRvIGFncmVlIHRvIHVzZSAmcXVvdDtjbGFpbSZxdW90OyB0byByZWZlciB0byBhbnl0aGlu ZyB0aGF0IGlzIGFuIElNPGJyPg0KJmd0OyBleHByZXNzaW9uIGluIFJBVFMgYW5kICZxdW90O1Rv a2VuJnF1b3Q7IGZvciBhbnkgc2VyaWFsaXphdGlvbiAocmVhbGl6YXRpb24pIGV2ZW4gaWYgaXQg aXNuJ3QgYSBKV1Qgb3IgQ1dUPyZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkkgd291 bGQgc2F5IG5vLiBUbyBtZSwgYSBjbGFpbSBpcyBvbmUgcGFydGljdWxhciBwaWVjZSBvZiBpbmZv cm1hdGlvbiwgd2hlcmUgYSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBlbHNlIGhhcyBhIHNldCBv ZiBjbGFpbXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RGF2ZTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+T24gMTEvMTIvMTksIDExOjAwIEFNLCAmcXVvdDtSQVRTIG9uIGJlaGFsZiBvZiBM YXVyZW5jZSBMdW5kYmxhZGUmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNA aWV0Zi5vcmciPnJhdHMtYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVm PSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIE5vdiAxMiwgMjAxOSwgYXQgMTowOCBB TSwgTWljaGFlbCBSaWNoYXJkc29uICZsdDs8YSBocmVmPSJtYWlsdG86bWNyJiM0MztpZXRmQHNh bmRlbG1hbi5jYSI+bWNyJiM0MztpZXRmQHNhbmRlbG1hbi5jYTwvYT4mZ3Q7IHdyb3RlOjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4N Ck9uIDIwMTktMTEtMTIgMTI6MTkgcC5tLiwgRGF2ZSBUaGFsZXIgd3JvdGU6PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0 Oi41aW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KTmVkIFNtaXRoIHdyb3RlOjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNvIGZhciB0aGUgZ3JvdXAgaGFz IHVzZWQgdGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjEyLjBwdDttYXJnaW4tbGVmdDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPmluZm9ybWF0aW9u IG1vZGVsIGFuZCBkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMuPGJyPg0KPGJyPg0KJm5i c3A7PGJyPg0KPGJyPg0KSSB3b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBv dGhlciB0ZXJtcyBlbmRpbmcgaW4gVG9rZW4sPGJyPg0KbGlrZSBKV1QgYW5kIENXVCkgb25seSBi ZSB1c2VkIHRvIHJlZmVyIHRvPGJyPg0KPGJyPg0KZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Np b25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1vZGVsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv YmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj5JIGNvbmN1ci48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JIGRpc2FncmVlIHdpdGggdGhhdC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JIGRvbuKAmXQg dGhpbmsgd2Ugd2FudCBvbmUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIGFsbCBvZiBSQVRTLiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkVBVCBoYXMg YW4gaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgbW9kZWwgZm9yIHdoYXQgaXQgZXhwcmVzc2Vz LiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRo ZSBZQU5HIE1vZHVsZSBoYXMgYW4gaW5mb3JtYXRpb24gYW5kIGRhdGEgbW9kZWwgZm9yIHdoYXQg aXQgZXhwcmVzc2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPlRoZSBwcmltYXJ5IHB1cnBvc2UgZm9yIHVzZSBvZiBpbmZvcm1hdGlvbiBtb2RlbHMgKHBs dXJhbCEpIGlzIHNvIHdlIGNhbiBkZXNjcmliZWQgdGhpbmdzIGxpa2UgY2xhaW1zIG9uY2UgYW5k IHRoZW4gaGF2ZSBhIGxhcmdlbHkgbWVjaGFuaWNhbCB3YXkgdG8gc2VyaWFsaXplIHRoZW0gaW4g ZGlmZmVyZW50IHdheXMsIENCT1IgYW5kIEpTT04uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Tm90ZSB0aGF0IENXVCBhbmQgSldUIGRvbuKAmXQgdXNlIHRo ZSBpbmZvcm1hdGlvbiBtb2RlbCBjb25jZXB0LiBUaGV5IGFyZSBtb3N0bHkgdHdvIGluZGVwZW5k ZW50bHkgZGVmaW5lZCBhbmQgbG9vc2VseSBjb29yZGluYXRlZCBkYXRhIG1vZGVscy4gV2UgYXJl IHRyeWluZyB0byBkbyBkaWZmZXJlbnQgYnkgaGF2aW5nIGEgY29tbW9uIGluZm9ybWF0aW9uIG1v ZGVsIHRoYXQNCiBjb3ZlcnMgYm90aC4gT25lIG1pZ2h0IGFyZ3VlIHRoYXQgQ1dUIGFuZCBKV1Qg c2hvdWxkIGhhdmUgZG9uZSB3aGF0IHdlIGFyZSBkb2luZyBpbiBFQVQuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MWHPR21MB0784058F591C52EEB31E0736A3770MWHPR21MB0784namp_-- From nobody Tue Nov 12 15:56:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7CC7120857 for ; Tue, 12 Nov 2019 15:56:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kjz40H0uP08k for ; Tue, 12 Nov 2019 15:56:34 -0800 (PST) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-eopbgr760119.outbound.protection.outlook.com [40.107.76.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D747E1201A3 for ; Tue, 12 Nov 2019 15:56:33 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N32Jqo+DNZ+DTzPlK/SjtFqQVexvRINtCKphjqxRU2lDPe6IgQkjsIK+QukG2l5cq3BXVsknxPlVsH8ZGKAXzaDNukU85LhzdRoxtJRTOHF9m4bZIMOsOhfy5MOyt5Z6smRsrmK9mUAwMl7w1DGrTC8N+s7p618R8KFS3CthxHvTmvEG4YQmtYU52oH1GWTLiFYUU5avhg7LMj2N6HEqteiAoxEt7etFsipQg3OB8YrpNL7fRbaHRYhi9DeOzKsb4Hj+1RimZ3ZpzE1fYlPJVhf1F8rwiQwVhPYvzRczevOovmpUbDRPNMT26NP0Xm1aO+gOB3kOtRhM6U+Oj9+n8w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dzVQaqD9LTq7CtZ/+lRib3CNd4GDWjGPvukNJroC3Z0=; b=RgLcmAwBYPB0r4EC6YkZ7CzlCjqypJ0IXSwZBkdZAOkBRmPCFrKR5O5Pxw3/bkfvpvgGxSXVI4J0Bc2GJzevpLt7rpE90y/XnLGglMyF7uVSv5X6eaMz83wjlbRgi5Q4b24mswHDor+ldMMXyUUp9xhiQkecaW6cq/zgBQIdF55Snc9lKka9l68zDiMCvdAofpwykG2C6ONkEqebW277ZqG0ZKbeYumo4njRe3sPcElzbR5LM5ZWHd9gKeqdUQ14O7tvoRLkA/DjHTWOSwKfRcqHGJg749f4ck9/nhq6XgExNhFtsaLJCAAVq5NSZeKk/VtkDm+6ulxprXyGXNsUfA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dzVQaqD9LTq7CtZ/+lRib3CNd4GDWjGPvukNJroC3Z0=; b=QV/VjVMaBrv2GH1LjImDHQyVNDEExJ+FCfWJ8GT2PGthE90kBLeiiXex0ZlmjtQcyahfnQJcYOO69unDnhoZNq8zOHvFRBT+E0YTbSB12b/NLD4VmVwk1I1+cSPdTtc8JUZFPyJRXKiH1v5Xt1xlvkI/LX5U16iZQd7c27pE+jA= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0190.namprd21.prod.outlook.com (10.173.52.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Tue, 12 Nov 2019 23:56:32 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Tue, 12 Nov 2019 23:56:32 +0000 From: Dave Thaler To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? Thread-Index: AQHVmTq1Z/t6HE/PikiMPDD2m5X1vaeINp0g Date: Tue, 12 Nov 2019 23:56:32 +0000 Message-ID: References: <01bbbb92-9b99-7636-50a4-a1b4a37e0903@sandelman.ca> In-Reply-To: <01bbbb92-9b99-7636-50a4-a1b4a37e0903@sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T23:56:32.5440872Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=6f07fa9c-64b0-40f3-8533-4ff7cad56343; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:b:f89a:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 49521508-99c9-408b-8b03-08d767cbf1a3 x-ms-traffictypediagnostic: MWHPR21MB0190: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4303; x-forefront-prvs: 021975AE46 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(346002)(396003)(376002)(366004)(51444003)(199004)(189003)(25786009)(52536014)(229853002)(6506007)(102836004)(6436002)(486006)(81156014)(86362001)(446003)(186003)(4744005)(476003)(11346002)(46003)(66476007)(8936002)(66556008)(8676002)(66446008)(76116006)(66946007)(81166006)(7696005)(71200400001)(71190400001)(99286004)(64756008)(10090500001)(256004)(9686003)(55016002)(6246003)(2501003)(5660300002)(76176011)(22452003)(110136005)(316002)(478600001)(10290500003)(33656002)(8990500004)(7736002)(2906002)(14454004)(6116002)(305945005)(74316002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0190; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: f5xmW8ergtYCn8bs1vpJvr5rCJwAWZPg75RVeZV4fL/DbbxQJqjRz2B7NwhenQtDkX+bFqi+50O+HLRkO/n8eGITnXOcKeniopTG3/SaKIHI/SyNIWmbsPwCwj703lSx7xFQ0hrgyh9Tu6d0fsKoxJngeRxCPio0gbnHfw4lxflVt+mheCFUxO3SyI1b6XHavfUJgOg55cRm0a3vJHZLpJ/W1dblz4w/EhsG6J/nw+41Ita42R9HLP9qec0MFQ0nW/gNH3ejZgXQHG+IDectpDPlQ3TeHbKQmFSkcHf6tKVge5BVw81R0B6s3Jd9V/zgFxvYuxwUY8F25Aa/i9nMgW2O4uGaE/TyOp8xu2kGfMKQ03V1PacRQ9IWxAWdwhZiOqtEBc5S945EQxUj0yGUJ21XK4H7awdTRIsv++6ykvaS8fIYFyRJIsCDXjpksVMM x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 49521508-99c9-408b-8b03-08d767cbf1a3 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Nov 2019 23:56:32.4584 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: GLZxstjfUEGvuA2dGUBxkxzimvfwJqg/2NwjY8CJFZKXJpnak5KaOTsLXCaqx7+7rhgbPcjZLuoE5IHsLTVCnjNxNqRcuiaD61wmL1bMBFA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0190 Archived-At: Subject: Re: [Rats] What's to EAT? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 23:56:40 -0000 TWljaGFlbCBSaWNoYXJkc29uIHdyb3RlOg0KWy4uLl0NCj4gSSB0aGluayB0aGF0IGl0J3Mgb2th eSB0byBzYXksICJUaGUgdXB0aW1lIGNsYWltIGlzIGZvcndhcmRlZCB0byB0aGUgRmx1LUZsdSBQ cm9jZXNzb3IiIHJhdGhlciB0aGFuIHNheWluZyAiVGhlIFRva2VuIGNvbnRhaW5pbmcgdGhlIHVw dGltZSBjbGFpbSBpcyBmb3J3YXJkZWQgdG8gdGhlIEZsdS1GbHUgUHJvY2Vzc29yIg0KDQpJIGFn cmVlLiAgRm9yIHRoZSBzYW1lIHJlYXNvbiBhcyBpdCdzIGJldHRlciB0aGFuIHNheWluZyAoZm9y IGV4YW1wbGUpICJBbiBJUHY2IHBhY2tldCBjb250YWluaW5nIGEgVURQIGRhdGFncmFtIGNvbnRh aW5pbmcgYSBGb28gcHJvdG9jb2wgbWVzc2FnZSBjb250YWluaW5nIGEgY2xhaW0gaXMgZm9yd2Fy ZGVkIHRvIHRoZSBGbHUtRmx1IFByb2Nlc3NvciIuIDopDQpUaGUgdmFyaW91cyBlbnZlbG9wZSBs YXllcnMgYXJlIGZpbmUgdG8gb21pdCB3aGVuIHRhbGtpbmcgc3BlY2lmaWNhbGx5IGFib3V0IGEg cGllY2Ugb2YgaW5mb3JtYXRpb24uDQoNCkRhdmUNCg== From nobody Tue Nov 12 15:59:42 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD6AF12022C for ; Tue, 12 Nov 2019 15:59:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.898 X-Spam-Level: X-Spam-Status: No, score=-6.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f0fQ74UtS60a for ; Tue, 12 Nov 2019 15:59:33 -0800 (PST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6185E120044 for ; Tue, 12 Nov 2019 15:59:33 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga004.fm.intel.com ([10.253.24.48]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Nov 2019 15:59:33 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,298,1569308400"; d="scan'208,217";a="229573629" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by fmsmga004.fm.intel.com with ESMTP; 12 Nov 2019 15:59:32 -0800 Received: from orsmsx111.amr.corp.intel.com (10.22.240.12) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 12 Nov 2019 15:59:32 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX111.amr.corp.intel.com ([169.254.12.253]) with mapi id 14.03.0439.000; Tue, 12 Nov 2019 15:59:32 -0800 From: "Smith, Ned" To: Dave Thaler , Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoIA= Date: Tue, 12 Nov 2019 23:59:31 +0000 Message-ID: <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T23:33:26.3540800Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a7e8c754-18b3-4068-9621-248da0028d48; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic x-originating-ip: [10.24.15.10] Content-Type: multipart/alternative; boundary="_000_4F586E159CF7482487F28E2C20D1AF1Dintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Nov 2019 23:59:41 -0000 --_000_4F586E159CF7482487F28E2C20D1AF1Dintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZSB0aGF0IHRoZSB0aHJlYWQgcmVnYXJkaW5nIOKAnENsYWltc+KAnSwg4oCcVG9rZW5z 4oCdIGFuZCDigJxFdmlkZW5jZeKAnSBsYXJnZWx5IGlzIGFwcGxpY2FibGUgdG8g4oCcQXR0ZXN0 YXRpb24gUmVzdWx0c+KAnS4gTGlrZSBFdmlkZW5jZSwgQXR0ZXN0YXRpb24gUmVzdWx0cyBhcmUg YSBzZXJpYWxpemF0aW9uLiBDbGFpbXMgYXJlIGFsc28gcmVsZXZhbnQgYXMgaW5mb3JtYXRpb24g bW9kZWwgZXhwcmVzc2lvbnMgdGhhdCBtYXkgYmUgcmVhbGl6ZWQgYXMgQXR0ZXN0YXRpb24gUmVz dWx0cyBzZXJpYWxpemF0aW9uLg0KDQpTZWUgbW9yZSBpbmxpbmUgW25tc10uDQoNCk9uIDExLzEy LzE5LCAxNTozMyBQTSwgIkRhdmUgVGhhbGVyIiA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0 bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20+PiB3cm90ZToNCg0KDQoNCkZyb206IFJBVFMgPHJhdHMt Ym91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFNtaXRoLCBOZWQNClNlbnQ6IFR1ZXNkYXks IE5vdmVtYmVyIDEyLCAyMDE5IDI6NTYgUE0NClRvOiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBp c2xhbmQtcmVzb3J0LmNvbT47IE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFu LmNhPg0KQ2M6IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbUmF0c10gV2hhdCdzIHRvIEVB VD8gLSB0ZXJtaW5vbG9neSBjbGFyaWZpY2F0aW9uDQoNCg0KSW5jbHVkaW5nIERhdmUgVGhhbGVy 4oCZcyB0aHJlYWQgZnJvbSBmb3JrZWQgc3ViamVjdCBsaW5lIGluIFsxXS4NCg0KVGhlIGVhdCBk cmFmdCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0aW9uIGhlYWRpbmcgZm9yIHRoZSBJ bmZvcm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBhcmUgdXNlZC4gSSB0aGluayB0aGlz IGlzIE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0IHRvIOKAnEV2aWRlbmNl4oCdIElN Ty4gVGhlIGFyY2hpdGVjdHVyZSBkcmFmdCAoYmlya2hvbHopIHN0cm9uZ2x5IGltcGxpZXMgdGhh dCBFdmlkZW5jZSBpcyBzaWduZWQgKHZlcmlmaWFibGUgb3IgcHJvdmFibGUpLiBUaGlzIHN1Z2dl c3RzIEV2aWRlbmNlIGlzIGluIGEgc2VyaWFsaXplZCBmb3JtYXQgKGhlbmNlIGlzbuKAmXQgQ0RE TCwgWUFORyBvciBBU04uMSkuDQoNCg0KDQpTdXJlLCBFdmlkZW5jZSBpcyBjZXJ0YWlubHkgY29u dmV5ZWQgaW4gYSBzZXJpYWxpemVkIGZvcm1hdC4NCg0KW25tc10gSXQgaXMgYWxzbyBzaWduZWQg aW4gYSBzZXJpYWxpemVkIGZvcm1hdC4NCg0KDQoNCkkgZG9u4oCZdCB0aGluayDigJxFdmlkZW5j ZeKAnSB3b3VsZCBiZSBhcyBwcmVjaXNlIGEgd2F5IHRvIHRhbGsgYWJvdXQgYW4gaW5mb3JtYXRp b24gbW9kZWwgb2JqZWN0IGFzIOKAnENsYWltKHMp4oCdIHdvdWxkIGJlLg0KDQoNCg0KWUFORyBp cyBub3QgYSBzZXJpYWxpemFibGUgZm9ybWF0IGhlbmNlIGl0IGlzIG1vcmUgYXBwcm9wcmlhdGVs eSBhbiBpbmZvcm1hdGlvbiBtb2RlbCBsYW5ndWFnZSBmb3IgdGhlIHB1cnBvc2VzIG9mIFJBVFMg KElNTykuDQoNCg0KDQpHb2luZyBiYWNrIHRvIHRoZSBvcmlnaW5hbCBxdWVzdGlvbi4gQSBUb2tl biAoRUFULCBDV1QsIEpXVCkgaXMgYW4gZXhhbXBsZSBvZiBzb21ldGhpbmcgdGhlIGFyY2hpdGVj dHVyZSBjYWxscyBFdmlkZW5jZS4NCg0KDQoNCkZZSSwgSSAoYW5kIG90aGVycyBJ4oCZdmUgdGFs a2VkIHRvKSBhcmUgZmFyIG1vcmUgaW50ZXJlc3RlZCBpbiB0aGUgdXNlIG9mIGEgVG9rZW4gZm9y IHdoYXQgdGhlIGFyY2hpdGVjdHVyZSBjYWxscyBBdHRlc3RhdGlvbiBGb3JtYXQsDQoNCltubXNd IEkgZG9u4oCZdCBzZWUgdGhlIHRlcm0g4oCcQXR0ZXN0YXRpb24gRm9ybWF04oCdIG9jY3Vycmlu ZyBpbiB0aGUgY3VycmVudCBhcmNoIChlZGl0b3JzIGRyYWZ0KS4gTWF5YmUgdGhpcyBuZWVkcyBk aXNhbWJpZ3VhdGlvbiBmcm9tIHRoZSBjdXJyZW50IHRleHQgdGhhdCB1c2VzIOKAnGZvcm1hdOKA nSBpbiB0aGUgY29udGV4dCBvZiBkZWZpbmluZyBvdGhlciBzdHJ1Y3R1cmVzIOKAkyBpLmUuIEV2 aWRlbmNlLCBSZWZlcmVuY2UgVmFsdWVzIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHRzLg0KDQptdWNo IGxlc3MgaW50ZXJlc3RlZCBpbiBzdGFuZGFyZGl6aW5nIHdoYXQgdGhlIGFyY2hpdGVjdHVyZSBj YWxscyBFdmlkZW5jZS4NCg0KW25tc10gTXkgYXNzdW1wdGlvbiBpcyB0aGF0IGEgY2xhaW0gZm9y bWF0dGVkIGFzIEV2aWRlbmNlIGNvdWxkIGJlIHN5bm9ueW1vdXMgd2l0aCBhIGNsYWltIGZvcm1h dHRlZCBhcyBBdHRlc3RhdGlvbiBSZXN1bHRzIChhbmQgdGhlIHJldmVyc2UgaXMgYWxzbyB0cnVl KS4gVGhpcyBkb2VzbuKAmXQgaW1wbHkgdGhlcmUgY291bGRu4oCZdCBiZSBvdGhlciBmb3JtYXR0 ZWQgRXZpZGVuY2Ugd2l0aCBkaWZmZXJlbnQgZm9ybWF0dGluZyB0aGF0IGlzbuKAmXQgc3VpdGFi bGUgZm9yIHVzZSBhcyBBdHRlc3RhdGlvbiBSZXN1bHRzLiBMaWtld2lzZSwgVmVyaWZpZXJzIGNv dWxkIHByb2R1Y2UgQXR0ZXN0YXRpb24gUmVzdWx0cyB3aXRoIGNsYWltcyB0aGF0IGFyZSBub3Qg YXNzZXJ0ZWQgYnkgYW55IEF0dGVzdGVyLiBCdXQgdGhlIGFyY2hpdGVjdHVyZSB3b3VsZG7igJl0 IGV4cGVjdCAoSSBwcmVzdW1lKSB0byBkZWZpbmUgQXR0ZXN0YXRpb24gUmVzdWx0cyB1c2luZyBh IGZvcm1hdCB0aGF0IGNvdWxkIG5vdCBiZSB1c2VkIGFzIEV2aWRlbmNlLg0KDQoNCg0KQSBWZXJp ZmllciBjYW4gaGF2ZSBtdWx0aXBsZSBzaW11bHRhbmVvdXMgcHVycG9zZXMsIGFzIG1lbnRpb25l ZCBpbiBteSBkcmFmdDoNCg0KMSkgICAgICBUbyBtYWtlIHBvbGljeSBkZWNpc2lvbnMgdGhhdCBp bmNsdWRlIHZlcmlmeWluZyBFdmlkZW5jZSB0aGF0IGNoYWlucyB1cCB0byBhIG1hbnVmYWN0dXJl ciwgYW5kIHRoZW4gZ2VuZXJhdGluZyBhbiBBdHRlc3RhdGlvbiBSZXN1bHQNCg0Kd2hvc2Ugc2Vj dXJpdHkgY2hhaW5zIHVwIHRvIHRoZSBWZXJpZmllciAob3IgdGhlaXIgb3JnKSByYXRoZXIgdGhh biBldmVyeSBtYW51ZmFjdHVyZXIgb2YgZXZlcnkgQXR0ZXN0ZXIsIHNvIHRoYXQgdGhlIFJlbHlp bmcgUGFydHnigJlzIHBvbGljeQ0KDQpjYW4gYmUgc2ltcGxlIGFuZCBqdXN0IHRydXN0IHRoZSBW ZXJpZmllci4NCg0KMikgICAgICBUbyBhbGxvdyBoZXRlcm9nZW5lb3VzIEF0dGVzdGVycywgd2l0 aCBkaWZmZXJlbnQgRXZpZGVuY2UgZm9ybWF0cyAoaW5jbHVkaW5nIGV4aXN0aW5nL3Byb3ByaWV0 YXJ5L3doYXRldmVyIG9uZXMpLCB0byB0YWxrIHRvIGEgY29tbW9uIFZlcmlmaWVyLA0Kd2hpY2gg Y2FuIHRoZW4gcHJvdmlkZSBhIHN0YW5kYXJkIEF0dGVzdGF0aW9uIEZvcm1hdCB0byBSZWx5aW5n IFBhcnRpZXMsIHNvIHRoYXQgb25lIG5lZWQgbm90IGhhdmUgZXZlcnkgUmVseWluZyBQYXJ0eSB1 bmRlcnN0YW5kIGV2ZXJ5DQoNCkV2aWRlbmNlIGZvcm1hdCwgb2Ygd2hpY2ggbWFueSBhbHJlYWR5 IGV4aXN0Lg0KDQoNCg0KU28gSSBwZXJzb25hbGx5IHdpbGwgYXJndWUgYWdhaW5zdCBzY29waW5n IEVBVCB0byBvbmx5IEV2aWRlbmNlLCBhbmQgZm9yIGtlZXBpbmcgaXQgZ2VuZXJpYyBhbmQgdXNh YmxlIGZvciBBdHRlc3RhdGlvbiBSZXN1bHRzLg0KDQooT3RoZXJzIEnigJl2ZSB0YWxrZWQgdG8g Ym90aCBpbnNpZGUgYW5kIG91dHNpZGUgTWljcm9zb2Z0IHNoYXJlIHRoaXMgdmlldywgc28gSeKA mW0gYWxzbyByZWx5aW5nIGl0IGFzIGEgbWVzc2VuZ2VyLCBub3QganVzdCBhbiBhZHZvY2F0ZS4p DQoNCg0KDQpJZiB0aGUgV0cgY2hvb3NlcyB0byBvbmx5IHN0YW5kYXJkaXplIHdoYXQgd2Ugbm93 IGNhbGwgRXZpZGVuY2UgYW5kIGlnbm9yZSBBdHRlc3RhdGlvbiBSZXN1bHRzLCB0aGVuIEkgZG9u 4oCZdCBiZWxpZXZlIGl0IG1lZXRzIHRoZSBuZWVkcw0KDQpvZiBlaXRoZXIgTWljcm9zb2Z0IG9y LCBJIHN1c3BlY3QsIHRoZSBURUVQIFdHIHVzZSBjYXNlLg0KDQoNCg0KRGF2ZQ0KDQoNCg0KQ0RE TCwgWUFORyBhcmUgZXhwcmVzc2lvbnMgb2Ygc29tZXRoaW5nIHRoYXQgdGhlIGFyY2hpdGVjdHVy ZSBzaG91bGQgY2FsbCBDbGFpbXMuIChhZ3JlZT8pDQoNCi1OZWQNCg0KDQoNClsxXSBEYXZlIFRo YWxlciB3cm90ZToNCj4gU28gZmFyIHRoZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAiRUFUIiB0 byByZWZlciB0byBib3RoIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0 aW9uIGV4cHJlc3Npb25zLg0KDQpJIHdvdWxkIHJhdGhlciBzZWUgdGhlIHRlcm0gRUFUIChhbmQg YW55IG90aGVyIHRlcm1zIGVuZGluZyBpbiBUb2tlbiwgbGlrZSBKV1QgYW5kIENXVCkgb25seSBi ZSB1c2VkIHRvIHJlZmVyIHRvDQpkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMsIG5vdCB0 aGUgaW5mb3JtYXRpb24gbW9kZWwuDQoNCj4gV2hlbiBleHRlbmRpbmcgaW5mb3JtYXRpb24gbW9k ZWwgdG8gWUFORyBvciBzb21lIG90aGVyIHNlcmlhbGl6YXRpb24gKGUuZy4gQVNOLjEpLiBHaXZl biB0aGUgcG9zc2liaWxpdHkgZm9yIGFuIElNDQo+IGV4cHJlc3Npb24gdG8gYmUgcmVhbGl6ZWQg YnkgZGlmZmVyZW50IHNlcmlhbGl6YXRpb25zLCB3aGF0IHRlcm0gc2hvdWxkIHdlIGdpdmUgdG8g dGhlIElNIGRlc2NyaXB0aW9uPw0KDQpUaGF04oCZcyBhIGZpbmUgcXVlc3Rpb24sIGFuZCBJIGRv buKAmXQgaGF2ZSBhbnkgc3Ryb25nIHByZWZlcmVuY2UgcmlnaHQgbm93LCBvdGhlciB0aGFuIHRv IG5vdCB1c2UgdGhlIHNhbWUgdGVybSBhcyBzb21ldGhpbmcgZWxzZS4NCk9mZmhhbmQsIG15IHBy ZWZlcmVuY2Ugd291bGQgYmUgdG8gbm90IGRlZmluZSBhIHRlcm0sIGFuZCBqdXN0IHVzZSBFdmlk ZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0IGFzIHRoZSB0ZXJtcyBmb3INCmZvcm1hdC1pbmRl cGVuZGVudCBkaXNjdXNzaW9uLiAgSSB0aGluayBpdCBpcyB1c2VmdWwgdG8gZGlzdGluZ3Vpc2gg YmV0d2VlbiBFdmlkZW5jZSB2cyBBdHRlc3RhdGlvbiBSZXN1bHRzIGluIG1hbnkgY2FzZXMuDQpB bmQgaWYgeW91IG5lZWQgdG8gcmVmZXIgdG8gYm90aCwgdGhlbiB3ZSBjYW4gYWx3YXlzIHVzZSBi b3RoIHRvZ2V0aGVyLCBzdWNoIGFzIOKAnEV2aWRlbmNlIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHRz 4oCdLg0KDQo+IFRoZSB0ZXJtICJDbGFpbSIgaGFzIGJlZW4gdXNlZCBleHRlbnNpdmVseS4gRG8g d2Ugd2FudCB0byBhZ3JlZSB0byB1c2UgImNsYWltIiB0byByZWZlciB0byBhbnl0aGluZyB0aGF0 IGlzIGFuIElNDQo+IGV4cHJlc3Npb24gaW4gUkFUUyBhbmQgIlRva2VuIiBmb3IgYW55IHNlcmlh bGl6YXRpb24gKHJlYWxpemF0aW9uKSBldmVuIGlmIGl0IGlzbid0IGEgSldUIG9yIENXVD8NCg0K SSB3b3VsZCBzYXkgbm8uIFRvIG1lLCBhIGNsYWltIGlzIG9uZSBwYXJ0aWN1bGFyIHBpZWNlIG9m IGluZm9ybWF0aW9uLCB3aGVyZSBhIOKAnFRva2Vu4oCdIG9yIHdoYXRldmVyIGVsc2UgaGFzIGEg c2V0IG9mIGNsYWltcy4NCg0KRGF2ZQ0KDQoNCk9uIDExLzEyLzE5LCAxMTowMCBBTSwgIlJBVFMg b24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxt YWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgbGdsQGlzbGFuZC1yZXNv cnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiB3cm90ZToNCg0KDQpPbiBOb3Yg MTIsIDIwMTksIGF0IDE6MDggQU0sIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVs bWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PiB3cm90ZToNCg0KDQpPbiAyMDE5 LTExLTEyIDEyOjE5IHAubS4sIERhdmUgVGhhbGVyIHdyb3RlOg0KDQpOZWQgU21pdGggd3JvdGU6 DQoNCg0KU28gZmFyIHRoZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAiRUFUIiB0byByZWZlciB0 byBib3RoIHRoZQ0KaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBleHBy ZXNzaW9ucy4NCg0KDQoNCkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVybSBFQVQgKGFuZCBhbnkg b3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLA0KbGlrZSBKV1QgYW5kIENXVCkgb25seSBiZSB1 c2VkIHRvIHJlZmVyIHRvDQoNCmRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucywgbm90IHRo ZSBpbmZvcm1hdGlvbiBtb2RlbC4NCkkgY29uY3VyLg0KDQpJIGRpc2FncmVlIHdpdGggdGhhdC4N Cg0KSSBkb27igJl0IHRoaW5rIHdlIHdhbnQgb25lIGluZm9ybWF0aW9uIG1vZGVsIGZvciBhbGwg b2YgUkFUUy4NCg0KRUFUIGhhcyBhbiBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBtb2RlbCBm b3Igd2hhdCBpdCBleHByZXNzZXMuDQoNClRoZSBZQU5HIE1vZHVsZSBoYXMgYW4gaW5mb3JtYXRp b24gYW5kIGRhdGEgbW9kZWwgZm9yIHdoYXQgaXQgZXhwcmVzc2VzLg0KDQpUaGUgcHJpbWFyeSBw dXJwb3NlIGZvciB1c2Ugb2YgaW5mb3JtYXRpb24gbW9kZWxzIChwbHVyYWwhKSBpcyBzbyB3ZSBj YW4gZGVzY3JpYmVkIHRoaW5ncyBsaWtlIGNsYWltcyBvbmNlIGFuZCB0aGVuIGhhdmUgYSBsYXJn ZWx5IG1lY2hhbmljYWwgd2F5IHRvIHNlcmlhbGl6ZSB0aGVtIGluIGRpZmZlcmVudCB3YXlzLCBD Qk9SIGFuZCBKU09OLg0KDQpOb3RlIHRoYXQgQ1dUIGFuZCBKV1QgZG9u4oCZdCB1c2UgdGhlIGlu Zm9ybWF0aW9uIG1vZGVsIGNvbmNlcHQuIFRoZXkgYXJlIG1vc3RseSB0d28gaW5kZXBlbmRlbnRs eSBkZWZpbmVkIGFuZCBsb29zZWx5IGNvb3JkaW5hdGVkIGRhdGEgbW9kZWxzLiBXZSBhcmUgdHJ5 aW5nIHRvIGRvIGRpZmZlcmVudCBieSBoYXZpbmcgYSBjb21tb24gaW5mb3JtYXRpb24gbW9kZWwg dGhhdCBjb3ZlcnMgYm90aC4gT25lIG1pZ2h0IGFyZ3VlIHRoYXQgQ1dUIGFuZCBKV1Qgc2hvdWxk IGhhdmUgZG9uZSB3aGF0IHdlIGFyZSBkb2luZyBpbiBFQVQuDQoNCkxMDQoNCg== --_000_4F586E159CF7482487F28E2C20D1AF1Dintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLk1zb1BsYWluVGV4dCwgbGkuTXNvUGxhaW5UZXh0LCBk aXYuTXNvUGxhaW5UZXh0DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiUGxhaW4gVGV4dCBDaGFyIjsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4t cmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBp bjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0 eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0Kc3Bhbi5QbGFpblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJQbGFpbiBUZXh0IENoYXIi Ow0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiUGxhaW4gVGV4dCI7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjAN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7 DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAx MS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlv bjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3Qg bDANCgl7bXNvLWxpc3QtaWQ6NTc5NTYzMDg4Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1z by1saXN0LXRlbXBsYXRlLWlkczo0NjczMzA4NzAgNjc2OTg3MDUgNjc2OTg3MTMgNjc2OTg3MTUg Njc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0K QGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC10ZXh0OiIlMVwpIjsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50 Oi05LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxp c3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJv bWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0 b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+ DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBhZ3JlZSB0aGF0IHRo ZSB0aHJlYWQgcmVnYXJkaW5nIOKAnENsYWltc+KAnSwg4oCcVG9rZW5z4oCdIGFuZCDigJxFdmlk ZW5jZeKAnSBsYXJnZWx5IGlzIGFwcGxpY2FibGUgdG8g4oCcQXR0ZXN0YXRpb24gUmVzdWx0c+KA nS4gTGlrZSBFdmlkZW5jZSwgQXR0ZXN0YXRpb24gUmVzdWx0cyBhcmUgYSBzZXJpYWxpemF0aW9u LiBDbGFpbXMgYXJlIGFsc28gcmVsZXZhbnQgYXMgaW5mb3JtYXRpb24gbW9kZWwgZXhwcmVzc2lv bnMgdGhhdCBtYXkNCiBiZSByZWFsaXplZCBhcyBBdHRlc3RhdGlvbiBSZXN1bHRzIHNlcmlhbGl6 YXRpb24uIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5TZWUgbW9yZSBpbmxpbmUgW25tc10uPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPk9uIDExLzEyLzE5LCAxNTozMyBQTSwgJnF1b3Q7RGF2ZSBUaGFsZXImcXVvdDsgJmx0Ozxh IGhyZWY9Im1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20iPmR0aGFsZXJAbWljcm9zb2Z0LmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PGI+RnJvbTo8L2I+IFJBVFMgJmx0O3JhdHMtYm91bmNl c0BpZXRmLm9yZyZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+U21pdGgsIE5lZDxicj4NCjxiPlNl bnQ6PC9iPiBUdWVzZGF5LCBOb3ZlbWJlciAxMiwgMjAxOSAyOjU2IFBNPGJyPg0KPGI+VG86PC9i PiBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs7IE1pY2hh ZWwgUmljaGFyZHNvbiAmbHQ7bWNyJiM0MztpZXRmQHNhbmRlbG1hbi5jYSZndDs8YnI+DQo8Yj5D Yzo8L2I+IHJhdHNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBXaGF0 J3MgdG8gRUFUPyAtIHRlcm1pbm9sb2d5IGNsYXJpZmljYXRpb248bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBp bjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KSW5jbHVkaW5nIERh dmUgVGhhbGVy4oCZcyB0aHJlYWQgZnJvbSBmb3JrZWQgc3ViamVjdCBsaW5lIGluIFsxXS4gPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0 OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpUaGUgZWF0IGRyYWZ0IHVzZXMg4oCcQ2xh aW0ocynigJ0gaW4gdGhlIHNlY3Rpb24gaGVhZGluZyBmb3IgdGhlIEluZm9ybWF0aW9uIE1vZGVs LiBDRERMIGV4cHJlc3Npb25zIGFyZSB1c2VkLiBJIHRoaW5rIHRoaXMgaXMgT0suIFdlIGRvbuKA mXQgbmVlZCB0byBjaGFuZ2UgaXQgdG8g4oCcRXZpZGVuY2XigJ0gSU1PLiBUaGUgYXJjaGl0ZWN0 dXJlIGRyYWZ0IChiaXJraG9seikgc3Ryb25nbHkgaW1wbGllcyB0aGF0IEV2aWRlbmNlIGlzIHNp Z25lZCAodmVyaWZpYWJsZQ0KIG9yIHByb3ZhYmxlKS4gVGhpcyBzdWdnZXN0cyBFdmlkZW5jZSBp cyBpbiBhIHNlcmlhbGl6ZWQgZm9ybWF0IChoZW5jZSBpc27igJl0IENEREwsIFlBTkcgb3IgQVNO LjEpLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4N CjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5TdXJlLCBFdmlkZW5jZSBpcyBjZXJ0YWlubHkg PGk+Y29udmV5ZWQ8L2k+IGluIGEgc2VyaWFsaXplZCBmb3JtYXQuDQo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPltubXNdIEl0IGlzIGFsc28gc2lnbmVkIGluIGEgc2VyaWFsaXplZCBm b3JtYXQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+ DQpJIGRvbuKAmXQgdGhpbmsg4oCcRXZpZGVuY2XigJ0gd291bGQgYmUgYXMgcHJlY2lzZSBhIHdh eSB0byB0YWxrIGFib3V0IGFuIGluZm9ybWF0aW9uIG1vZGVsIG9iamVjdCBhcyDigJxDbGFpbShz KeKAnSB3b3VsZCBiZS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KJm5ic3A7 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1s ZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpZQU5HIGlzIG5vdCBhIHNlcmlhbGl6 YWJsZSBmb3JtYXQgaGVuY2UgaXQgaXMgbW9yZSBhcHByb3ByaWF0ZWx5IGFuIGluZm9ybWF0aW9u IG1vZGVsIGxhbmd1YWdlIGZvciB0aGUgcHVycG9zZXMgb2YgUkFUUyAoSU1PKS4NCjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBp bjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KJm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+DQpHb2luZyBiYWNrIHRvIHRoZSBvcmlnaW5hbCBxdWVzdGlvbi4gQSBUb2tlbiAo RUFULCBDV1QsIEpXVCkgaXMgYW4gZXhhbXBsZSBvZiBzb21ldGhpbmcgdGhlIGFyY2hpdGVjdHVy ZSBjYWxscyBFdmlkZW5jZS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFj aztiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5GWUksIEkgKGFuZCBvdGhlcnMg SeKAmXZlIHRhbGtlZCB0bykgYXJlIGZhciBtb3JlIGludGVyZXN0ZWQgaW4gdGhlIHVzZSBvZiBh IFRva2VuIGZvciB3aGF0IHRoZSBhcmNoaXRlY3R1cmUgY2FsbHMgQXR0ZXN0YXRpb24gRm9ybWF0 LDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt YXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+W25tc10gSSBkb27igJl0IHNlZSB0aGUg dGVybSDigJxBdHRlc3RhdGlvbiBGb3JtYXTigJ0gb2NjdXJyaW5nIGluIHRoZSBjdXJyZW50IGFy Y2ggKGVkaXRvcnMgZHJhZnQpLiBNYXliZSB0aGlzIG5lZWRzIGRpc2FtYmlndWF0aW9uIGZyb20g dGhlIGN1cnJlbnQgdGV4dCB0aGF0IHVzZXMg4oCcZm9ybWF04oCdIGluIHRoZSBjb250ZXh0IG9m IGRlZmluaW5nDQogb3RoZXIgc3RydWN0dXJlcyDigJMgaS5lLiBFdmlkZW5jZSwgUmVmZXJlbmNl IFZhbHVlcyBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0cy4gPG86cD4NCjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm11Y2ggbGVzcyBpbnRlcmVz dGVkIGluIHN0YW5kYXJkaXppbmcgd2hhdCB0aGUgYXJjaGl0ZWN0dXJlIGNhbGxzIEV2aWRlbmNl Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt YXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+W25tc10gTXkgYXNzdW1wdGlvbiBpcyB0 aGF0IGEgY2xhaW0gZm9ybWF0dGVkIGFzIEV2aWRlbmNlIGNvdWxkIGJlIHN5bm9ueW1vdXMgd2l0 aCBhIGNsYWltIGZvcm1hdHRlZCBhcyBBdHRlc3RhdGlvbiBSZXN1bHRzIChhbmQgdGhlIHJldmVy c2UgaXMgYWxzbyB0cnVlKS4gVGhpcyBkb2VzbuKAmXQgaW1wbHkgdGhlcmUgY291bGRu4oCZdCBi ZQ0KIG90aGVyIGZvcm1hdHRlZCBFdmlkZW5jZSB3aXRoIGRpZmZlcmVudCBmb3JtYXR0aW5nIHRo YXQgaXNu4oCZdCBzdWl0YWJsZSBmb3IgdXNlIGFzIEF0dGVzdGF0aW9uIFJlc3VsdHMuIExpa2V3 aXNlLCBWZXJpZmllcnMgY291bGQgcHJvZHVjZSBBdHRlc3RhdGlvbiBSZXN1bHRzIHdpdGggY2xh aW1zIHRoYXQgYXJlIG5vdCBhc3NlcnRlZCBieSBhbnkgQXR0ZXN0ZXIuIEJ1dCB0aGUgYXJjaGl0 ZWN0dXJlIHdvdWxkbuKAmXQgZXhwZWN0IChJIHByZXN1bWUpDQogdG8gZGVmaW5lIEF0dGVzdGF0 aW9uIFJlc3VsdHMgdXNpbmcgYSBmb3JtYXQgdGhhdCBjb3VsZCBub3QgYmUgdXNlZCBhcyBFdmlk ZW5jZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFy Z2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0K PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkEgVmVyaWZpZXIgY2FuIGhhdmUgbXVsdGlwbGUg c2ltdWx0YW5lb3VzIHB1cnBvc2VzLCBhcyBtZW50aW9uZWQgaW4gbXkgZHJhZnQ6PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVm dDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0 OmwwIGxldmVsMSBsZm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPjEpPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5UbyBtYWtlIHBvbGljeSBkZWNp c2lvbnMgdGhhdCBpbmNsdWRlIHZlcmlmeWluZyBFdmlkZW5jZSB0aGF0IGNoYWlucyB1cCB0byBh IG1hbnVmYWN0dXJlciwgYW5kIHRoZW4gZ2VuZXJhdGluZyBhbiBBdHRlc3RhdGlvbiBSZXN1bHQ8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+d2hvc2Ugc2VjdXJpdHkgY2hhaW5zIHVwIHRvIHRoZSBWZXJpZmllciAob3Ig dGhlaXIgb3JnKSByYXRoZXIgdGhhbiBldmVyeSBtYW51ZmFjdHVyZXIgb2YgZXZlcnkgQXR0ZXN0 ZXIsIHNvIHRoYXQgdGhlIFJlbHlpbmcgUGFydHnigJlzIHBvbGljeTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS4waW47 bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5jYW4g YmUgc2ltcGxlIGFuZCBqdXN0IHRydXN0IHRoZSBWZXJpZmllci48L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBp bjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuMGluO21h cmdpbi1ib3R0b206LjAwMDFwdDt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwx IGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9y ZSI+Mik8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlRvIGFsbG93IGhldGVyb2dlbmVvdXMgQXR0ZXN0 ZXJzLCB3aXRoIGRpZmZlcmVudCBFdmlkZW5jZSBmb3JtYXRzIChpbmNsdWRpbmcgZXhpc3Rpbmcv cHJvcHJpZXRhcnkvd2hhdGV2ZXIgb25lcyksIHRvIHRhbGsgdG8gYSBjb21tb24gVmVyaWZpZXIs PGJyPg0Kd2hpY2ggY2FuIHRoZW4gcHJvdmlkZSBhIHN0YW5kYXJkIEF0dGVzdGF0aW9uIEZvcm1h dCB0byBSZWx5aW5nIFBhcnRpZXMsIHNvIHRoYXQgb25lIG5lZWQgbm90IGhhdmUgZXZlcnkgUmVs eWluZyBQYXJ0eSB1bmRlcnN0YW5kIGV2ZXJ5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkV2aWRlbmNlIGZvcm1hdCwg b2Ygd2hpY2ggbWFueSBhbHJlYWR5IGV4aXN0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6 LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PlNvIEkgcGVyc29uYWxseSB3aWxsIGFyZ3VlIGFnYWluc3Qgc2NvcGluZyBFQVQgdG8gb25seSBF dmlkZW5jZSwgYW5kIGZvciBrZWVwaW5nIGl0IGdlbmVyaWMgYW5kIHVzYWJsZSBmb3IgQXR0ZXN0 YXRpb24gUmVzdWx0cy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdp bi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4oT3RoZXJzIEnigJl2ZSB0YWxrZWQgdG8gYm90aCBp bnNpZGUgYW5kIG91dHNpZGUgTWljcm9zb2Z0IHNoYXJlIHRoaXMgdmlldywgc28gSeKAmW0gYWxz byByZWx5aW5nIGl0IGFzIGEgbWVzc2VuZ2VyLCBub3QganVzdCBhbiBhZHZvY2F0ZS4pPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4t bGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SWYgdGhlIFdHIGNob29zZXMgdG8gb25seSBzdGFuZGFy ZGl6ZSB3aGF0IHdlIG5vdyBjYWxsIEV2aWRlbmNlIGFuZCBpZ25vcmUgQXR0ZXN0YXRpb24gUmVz dWx0cywgdGhlbiBJIGRvbuKAmXQgYmVsaWV2ZSBpdCBtZWV0cyB0aGUgbmVlZHM8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0 Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij5vZiBlaXRoZXIgTWljcm9zb2Z0IG9yLCBJIHN1c3BlY3QsIHRoZSBURUVQIFdHIHVzZSBjYXNl Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47 bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47 bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQi Pg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2lu LWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdp bi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpDRERMLCBZQU5HIGFyZSBleHBy ZXNzaW9ucyBvZiBzb21ldGhpbmcgdGhhdCB0aGUgYXJjaGl0ZWN0dXJlIHNob3VsZCBjYWxsIENs YWltcy4gKGFncmVlPyk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bTowaW47bWFyZ2luLWxlZnQ6MS4waW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCi1OZWQ8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6 MS4waW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPg0KWzFdIDxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RGF2ZSBUaGFsZXIg d3JvdGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZndDsgU28gZmFy IHRoZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAmcXVvdDtFQVQmcXVvdDsgdG8gcmVmZXIgdG8g Ym90aCB0aGUgaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNz aW9ucy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkkgd291bGQgcmF0aGVyIHNlZSB0aGUg dGVybSBFQVQgKGFuZCBhbnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLCBsaWtlIEpXVCBh bmQgQ1dUKSBvbmx5IGJlIHVzZWQgdG8gcmVmZXIgdG88L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+ZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGlu Zm9ybWF0aW9uIG1vZGVsLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBXaGVuIGV4 dGVuZGluZyBpbmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9yIHNvbWUgb3RoZXIgc2VyaWFsaXph dGlvbiAoZS5nLiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJpbGl0eSBmb3IgYW4gSU08L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBleHByZXNzaW9uIHRvIGJlIHJl YWxpemVkIGJ5IGRpZmZlcmVudCBzZXJpYWxpemF0aW9ucywgd2hhdCB0ZXJtIHNob3VsZCB3ZSBn aXZlIHRvIHRoZSBJTSBkZXNjcmlwdGlvbj88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xv cjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRo YXTigJlzIGEgZmluZSBxdWVzdGlvbiwgYW5kIEkgZG9u4oCZdCBoYXZlIGFueSBzdHJvbmcgcHJl ZmVyZW5jZSByaWdodCBub3csIG90aGVyIHRoYW4gdG8gbm90IHVzZSB0aGUgc2FtZSB0ZXJtIGFz IHNvbWV0aGluZyBlbHNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5P ZmZoYW5kLCBteSBwcmVmZXJlbmNlIHdvdWxkIGJlIHRvIG5vdCBkZWZpbmUgYSB0ZXJtLCBhbmQg anVzdCB1c2UgRXZpZGVuY2UgYW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9y PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPmZvcm1hdC1pbmRlcGVuZGVu dCBkaXNjdXNzaW9uLiZuYnNwOyBJIHRoaW5rIGl0IGlzIHVzZWZ1bCB0byBkaXN0aW5ndWlzaCBi ZXR3ZWVuIEV2aWRlbmNlIHZzIEF0dGVzdGF0aW9uIFJlc3VsdHMgaW4gbWFueSBjYXNlcy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QW5kIGlmIHlvdSBuZWVkIHRvIHJl ZmVyIHRvIGJvdGgsIHRoZW4gd2UgY2FuIGFsd2F5cyB1c2UgYm90aCB0b2dldGhlciwgc3VjaCBh cyDigJxFdmlkZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS48L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0i Y29sb3I6YmxhY2siPiZndDsgVGhlIHRlcm0gJnF1b3Q7Q2xhaW0mcXVvdDsgaGFzIGJlZW4gdXNl ZCBleHRlbnNpdmVseS4gRG8gd2Ugd2FudCB0byBhZ3JlZSB0byB1c2UgJnF1b3Q7Y2xhaW0mcXVv dDsgdG8gcmVmZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBhbiBJTTxicj4NCiZndDsgZXhwcmVzc2lv biBpbiBSQVRTIGFuZCAmcXVvdDtUb2tlbiZxdW90OyBmb3IgYW55IHNlcmlhbGl6YXRpb24gKHJl YWxpemF0aW9uKSBldmVuIGlmIGl0IGlzbid0IGEgSldUIG9yIENXVD8mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBz dHlsZT0iY29sb3I6YmxhY2siPkkgd291bGQgc2F5IG5vLiBUbyBtZSwgYSBjbGFpbSBpcyBvbmUg cGFydGljdWxhciBwaWVjZSBvZiBpbmZvcm1hdGlvbiwgd2hlcmUgYSDigJxUb2tlbuKAnSBvciB3 aGF0ZXZlciBlbHNlIGhhcyBhIHNldCBvZiBjbGFpbXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHls ZT0iY29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJs YWNrIj5EYXZlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEu MGluIj5PbiAxMS8xMi8xOSwgMTE6MDAgQU0sICZxdW90O1JBVFMgb24gYmVoYWxmIG9mIExhdXJl bmNlIEx1bmRibGFkZSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRm Lm9yZyI+cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPiBvbiBiZWhhbGYgb2YNCjxhIGhyZWY9Im1h aWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+T24gTm92IDEyLCAyMDE5LCBhdCAxOjA4IEFN LCBNaWNoYWVsIFJpY2hhcmRzb24gJmx0OzxhIGhyZWY9Im1haWx0bzptY3ImIzQzO2lldGZAc2Fu ZGVsbWFuLmNhIj5tY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNhPC9hPiZndDsgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDoxLjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+PGJyPg0KT24gMjAxOS0xMS0xMiAxMjoxOSBw Lm0uLCBEYXZlIFRoYWxlciB3cm90ZTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MS4waW4iPg0KPHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCk5lZCBTbWl0aCB3 cm90ZTo8YnI+DQo8YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPlNvIGZhciB0aGUgZ3JvdXAgaGFzIHVz ZWQgdGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEy LjBwdDttYXJnaW4tbGVmdDoxLjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OkhlbHZldGljYSI+aW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXph dGlvbiBleHByZXNzaW9ucy48YnI+DQo8YnI+DQombmJzcDs8YnI+DQo8YnI+DQpJIHdvdWxkIHJh dGhlciBzZWUgdGhlIHRlcm0gRUFUIChhbmQgYW55IG90aGVyIHRlcm1zIGVuZGluZyBpbiBUb2tl biw8YnI+DQpsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJlIHVzZWQgdG8gcmVmZXIgdG88YnI+DQo8 YnI+DQpkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMsIG5vdCB0aGUgaW5mb3JtYXRpb24g bW9kZWwuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+SSBjb25jdXIuPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5JIGRpc2FncmVl IHdpdGggdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPkkgZG9u4oCZdCB0aGluayB3ZSB3YW50IG9uZSBpbmZvcm1hdGlvbiBtb2RlbCBmb3IgYWxs IG9mIFJBVFMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluIj5FQVQgaGFzIGFuIGluZm9ybWF0aW9uIG1vZGVsIGFuZCBkYXRhIG1vZGVsIGZvciB3 aGF0IGl0IGV4cHJlc3Nlcy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MS4waW4iPlRoZSBZQU5HIE1vZHVsZSBoYXMgYW4gaW5mb3JtYXRpb24gYW5kIGRh dGEgbW9kZWwgZm9yIHdoYXQgaXQgZXhwcmVzc2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+VGhlIHByaW1hcnkgcHVycG9zZSBmb3IgdXNlIG9mIGlu Zm9ybWF0aW9uIG1vZGVscyAocGx1cmFsISkgaXMgc28gd2UgY2FuIGRlc2NyaWJlZCB0aGluZ3Mg bGlrZSBjbGFpbXMgb25jZSBhbmQgdGhlbiBoYXZlIGEgbGFyZ2VseSBtZWNoYW5pY2FsIHdheSB0 byBzZXJpYWxpemUgdGhlbSBpbiBkaWZmZXJlbnQgd2F5cywgQ0JPUiBhbmQgSlNPTi48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPk5vdGUgdGhhdCBDV1Qg YW5kIEpXVCBkb27igJl0IHVzZSB0aGUgaW5mb3JtYXRpb24gbW9kZWwgY29uY2VwdC4gVGhleSBh cmUgbW9zdGx5IHR3byBpbmRlcGVuZGVudGx5IGRlZmluZWQgYW5kIGxvb3NlbHkgY29vcmRpbmF0 ZWQgZGF0YSBtb2RlbHMuIFdlIGFyZSB0cnlpbmcgdG8gZG8gZGlmZmVyZW50IGJ5IGhhdmluZyBh IGNvbW1vbiBpbmZvcm1hdGlvbiBtb2RlbCB0aGF0DQogY292ZXJzIGJvdGguIE9uZSBtaWdodCBh cmd1ZSB0aGF0IENXVCBhbmQgSldUIHNob3VsZCBoYXZlIGRvbmUgd2hhdCB3ZSBhcmUgZG9pbmcg aW4gRUFULjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+ TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_4F586E159CF7482487F28E2C20D1AF1Dintelcom_-- From nobody Tue Nov 12 16:06:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5921D1200B5 for ; Tue, 12 Nov 2019 16:06:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xWfjuFJDIr0I for ; Tue, 12 Nov 2019 16:06:55 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750100.outbound.protection.outlook.com [40.107.75.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 947AB120044 for ; Tue, 12 Nov 2019 16:06:54 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gywBg+rXbg2mQ3h95uPlfVTPaV5k5h4rnVRoyoeGZzmb0+jMArOGEcUpiYACrEtIDnBS1nbeGx40kjORHAI41cRGfvQccVC6XystvWDf1C3XNu9Z+Enko3LcGAG2wU/UdJ2cya4/PGD/q/e1YqyGTv19v+DCL+yGzLvZ4kIsYK8U1nKzo+hRuiGa2T6aZeml9nlv2dOAZXxnmd7J1tA6LrDOBofaspXB8zWN8KCwcVE2olYYvlN1NKkjbp4VBlNWWv6M+DhOap1oQvw6mVwB7fJdmNpaBoh35zNQjW9/oDuxlRYUAj7F5qWQXC3n2twivb5wzJ+cX7i1XWDsgMYnXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QWObzK+/T23lwajgvF2JipWMkkeU2dl4XiV4tWH48bM=; b=jFvX5sOzt0osYP+h+LRvd7sPbpv3sNK8m5vlIB7y9HAwRQZSC8FSY6l/kGE4YZLt5bAcARKxQp8EPW/fR5q4T7QTl14cVQ64mT83AyONT5MgBIUSvk2YtToQIvvw2MzBQWomv+VlOUjzZJfnAQVENyfyFbS7XHOcZZ4WJocoo9t62Mt1gG/Xt2762CThpteu8puBl7l4ZqCGrXvc3+HbjArnFaCC3qgPwGDvPCS0LDNglYPmNKYX7xPk1A0Y2DrzemCJM+Xl5+d4+rhmWa7x3r0yWt5DxG49Asfd0x9meFddFMSZLIbwzZvLBY+4/tgIBRCK1tuDIaT6pBpT8nHW+A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QWObzK+/T23lwajgvF2JipWMkkeU2dl4XiV4tWH48bM=; b=gCWSDSt84pUMOIMwVFc6bQH61/lRLRW0nPCdfoC7DsEVFBZd2HrHePHwOqX7Lb18PAYmUoVlr21j6d9xL8iLOdi0nQZUBMflalxklbBNMiCNSxbS5ZZ2fIb7d+X1NjH+N4hRQvzmaEYyPoGWZSOOVI0igSrLQmeZKF1i23jODfY= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0751.namprd21.prod.outlook.com (10.173.51.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.11; Wed, 13 Nov 2019 00:06:51 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Wed, 13 Nov 2019 00:06:51 +0000 From: Dave Thaler To: "Smith, Ned" , Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoICAAAAtIA== Date: Wed, 13 Nov 2019 00:06:51 +0000 Message-ID: References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> In-Reply-To: <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T23:33:26.3540800Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a7e8c754-18b3-4068-9621-248da0028d48; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:0:f8a5:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b5b447fd-a095-4a27-0eea-08d767cd6285 x-ms-traffictypediagnostic: MWHPR21MB0751: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:595; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(136003)(376002)(346002)(366004)(199004)(189003)(71200400001)(76116006)(81156014)(8936002)(81166006)(8676002)(52536014)(790700001)(6116002)(5660300002)(66446008)(66556008)(66946007)(25786009)(33656002)(10290500003)(14454004)(561944003)(478600001)(4001150100001)(229853002)(66476007)(6436002)(236005)(6306002)(54896002)(2906002)(256004)(64756008)(14444005)(55016002)(9686003)(4326008)(6246003)(186003)(8990500004)(10090500001)(71190400001)(74316002)(7736002)(76176011)(102836004)(486006)(446003)(46003)(86362001)(99286004)(110136005)(53546011)(476003)(6506007)(22452003)(316002)(7696005)(11346002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0751; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:3; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: YngtBqiemZXmJfEI7bQfYxqUEeWt/+QDm0gVk9hDE9dLeNtTqPDQ8481ViSk9OS0ej1DpIAeCCq5EDqg85VCEr1UKPVCCywDtvVFXTfEosmJHtVUHG0xC6OHr3xttuZ40FGoPeKbN2j6xRXFBPofwwhAzfvA8cqdaGalA/nrSHUddpucnUGLq0JhQq4onWPkWvqWTViuJaUo9H0L6hO9vm+yfsj1ThmgBlklAtUWdYe2x+egxt8Ali5E+Aenb2bnA6uPNBSjIV7bsV0eFXpyfNmjGVSNlMY2DI+9xDksC+h1BTy/T4DGUS1ZJ5XF6UrG4t06w297t4+DHeKe+XIx+I6wjJo7Wd8zqkuCwRrKG00PpDz6KBJjyVw55irp9TQlcb5Y1w8igiQ+XdgtGOQEyruKx7v2A/FdnfKsrCSqBvtxFH22bymsTNLI7rYSVSlq x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB078439E9EB07E3BB72E15137A3760MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: b5b447fd-a095-4a27-0eea-08d767cd6285 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 00:06:51.3848 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +S3Onp9ZQ95zvH4FnYGnMwiUu08fXkJrDyKi0wiPllTYUOgDAcg4J2+X5tLylqOA821ThZ/BvaQDjeLyn2l6yAFE6Zjr/6d+9kShgguLxK0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0751 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 00:06:59 -0000 --_000_MWHPR21MB078439E9EB07E3BB72E15137A3760MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCkZyb206IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb20+DQpTZW50OiBUdWVzZGF5 LCBOb3ZlbWJlciAxMiwgMjAxOSA0OjAwIFBNDQpUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWlj cm9zb2Z0LmNvbT47IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPjsg TWljaGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+DQpDYzogcmF0c0BpZXRm Lm9yZw0KU3ViamVjdDogUmU6IFtSYXRzXSBXaGF0J3MgdG8gRUFUPyAtIHRlcm1pbm9sb2d5IGNs YXJpZmljYXRpb24NCg0KSSBhZ3JlZSB0aGF0IHRoZSB0aHJlYWQgcmVnYXJkaW5nIOKAnENsYWlt c+KAnSwg4oCcVG9rZW5z4oCdIGFuZCDigJxFdmlkZW5jZeKAnSBsYXJnZWx5IGlzIGFwcGxpY2Fi bGUgdG8g4oCcQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS4gTGlrZSBFdmlkZW5jZSwgQXR0ZXN0YXRp b24gUmVzdWx0cyBhcmUgYSBzZXJpYWxpemF0aW9uLiBDbGFpbXMgYXJlIGFsc28gcmVsZXZhbnQg YXMgaW5mb3JtYXRpb24gbW9kZWwgZXhwcmVzc2lvbnMgdGhhdCBtYXkgYmUgcmVhbGl6ZWQgYXMg QXR0ZXN0YXRpb24gUmVzdWx0cyBzZXJpYWxpemF0aW9uLg0KDQpJIG1vc3RseSBhZ3JlZSB3aXRo IHlvdSB0aGVyZS4gICBJIHdvdWxkIGp1c3Qgc2F5IEF0dGVzdGF0aW9uIFJlc3VsdHMgYXJlIGNv bnZleWVkIHVzaW5nIGEgc2VyaWFsaXphdGlvbi4gIEkgd291bGQgYmUgZmluZSBhbHNvIHVzaW5n IHRoZSB0ZXJtIHRvIHJlZmVyIHRvIHRoZSBpbmZvcm1hdGlvbiwgbm90IGp1c3QgdGhlIHNlcmlh bGl6YXRpb24uDQphcyBpbiBzYXlpbmcg4oCcVGhlIEF0dGVzdGF0aW9uIFJlc3VsdHMgYXJlIHNl cmlhbGl6ZWQgdXNpbmcgZm9ybWF0IFhZWiBhbmQgc2VudCB0byB0aGUgUmVseWluZyBQYXJ0eSB2 aWEgcHJvdG9jb2wgQUJD4oCdLiAgIFN1Y2ggYSBzZW50ZW5jZSB1c2VzIHRoZSB0ZXJtIHRvIGFw cGx5IHRvIHRoZSBpbmZvcm1hdGlvbiBib3RoIGJlZm9yZSBhbmQgYWZ0ZXINCnNlcmlhbGl6YXRp b24uICAgSWYgdGhlIFdHIGNob29zZXMgdG8gZmluZSBpdCB0byBqdXN0IHBvc3Qtc2VyaWFsaXph dGlvbiB0aGF04oCZcyBvayB3aXRoIG1lLCBJIGp1c3QgdGhpbmsgaXTigJlzIG1vcmUgY29udmVu aWVudCBhcyBJIGRlc2NyaWJlZC4NCg0KU2VlIG1vcmUgaW5saW5lIFtubXNdLg0KDQpPbiAxMS8x Mi8xOSwgMTU6MzMgUE0sICJEYXZlIFRoYWxlciIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbTxtYWls dG86ZHRoYWxlckBtaWNyb3NvZnQuY29tPj4gd3JvdGU6DQoNCg0KDQpGcm9tOiBSQVRTIDxyYXRz LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFs ZiBPZiBTbWl0aCwgTmVkDQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAxMiwgMjAxOSAyOjU2IFBN DQpUbzogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxn bEBpc2xhbmQtcmVzb3J0LmNvbT4+OyBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRl bG1hbi5jYTxtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhPj4NCkNjOiByYXRzQGlldGYub3Jn PG1haWx0bzpyYXRzQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtSYXRzXSBXaGF0J3MgdG8gRUFU PyAtIHRlcm1pbm9sb2d5IGNsYXJpZmljYXRpb24NCg0KDQpJbmNsdWRpbmcgRGF2ZSBUaGFsZXLi gJlzIHRocmVhZCBmcm9tIGZvcmtlZCBzdWJqZWN0IGxpbmUgaW4gWzFdLg0KDQpUaGUgZWF0IGRy YWZ0IHVzZXMg4oCcQ2xhaW0ocynigJ0gaW4gdGhlIHNlY3Rpb24gaGVhZGluZyBmb3IgdGhlIElu Zm9ybWF0aW9uIE1vZGVsLiBDRERMIGV4cHJlc3Npb25zIGFyZSB1c2VkLiBJIHRoaW5rIHRoaXMg aXMgT0suIFdlIGRvbuKAmXQgbmVlZCB0byBjaGFuZ2UgaXQgdG8g4oCcRXZpZGVuY2XigJ0gSU1P LiBUaGUgYXJjaGl0ZWN0dXJlIGRyYWZ0IChiaXJraG9seikgc3Ryb25nbHkgaW1wbGllcyB0aGF0 IEV2aWRlbmNlIGlzIHNpZ25lZCAodmVyaWZpYWJsZSBvciBwcm92YWJsZSkuIFRoaXMgc3VnZ2Vz dHMgRXZpZGVuY2UgaXMgaW4gYSBzZXJpYWxpemVkIGZvcm1hdCAoaGVuY2UgaXNu4oCZdCBDRERM LCBZQU5HIG9yIEFTTi4xKS4NCg0KDQoNClN1cmUsIEV2aWRlbmNlIGlzIGNlcnRhaW5seSBjb252 ZXllZCBpbiBhIHNlcmlhbGl6ZWQgZm9ybWF0Lg0KDQpbbm1zXSBJdCBpcyBhbHNvIHNpZ25lZCBp biBhIHNlcmlhbGl6ZWQgZm9ybWF0Lg0KDQoNCg0KWWVzIEkgYWdyZWUgd2l0aCB0aGF0IHBhcnQu ICAgSSB3YXMgdHJ5aW5nIHRvIGp1c3QgbWFrZSB0aGUgcG9pbnQgSSBhcnRpY3VsYXRlZCBtb3Jl IHNwZWNpZmljYWxseSBhdCB0aGUgdG9wIG9mIHRoaXMgcmVzcG9uc2UuICAgQnV0IEkgZG9u4oCZ dCBmZWVsIHN0cm9uZ2x5IGVpdGhlciB3YXkuDQoNCg0KDQpJIGRvbuKAmXQgdGhpbmsg4oCcRXZp ZGVuY2XigJ0gd291bGQgYmUgYXMgcHJlY2lzZSBhIHdheSB0byB0YWxrIGFib3V0IGFuIGluZm9y bWF0aW9uIG1vZGVsIG9iamVjdCBhcyDigJxDbGFpbShzKeKAnSB3b3VsZCBiZS4NCg0KDQoNCllB TkcgaXMgbm90IGEgc2VyaWFsaXphYmxlIGZvcm1hdCBoZW5jZSBpdCBpcyBtb3JlIGFwcHJvcHJp YXRlbHkgYW4gaW5mb3JtYXRpb24gbW9kZWwgbGFuZ3VhZ2UgZm9yIHRoZSBwdXJwb3NlcyBvZiBS QVRTIChJTU8pLg0KDQoNCg0KR29pbmcgYmFjayB0byB0aGUgb3JpZ2luYWwgcXVlc3Rpb24uIEEg VG9rZW4gKEVBVCwgQ1dULCBKV1QpIGlzIGFuIGV4YW1wbGUgb2Ygc29tZXRoaW5nIHRoZSBhcmNo aXRlY3R1cmUgY2FsbHMgRXZpZGVuY2UuDQoNCg0KDQpGWUksIEkgKGFuZCBvdGhlcnMgSeKAmXZl IHRhbGtlZCB0bykgYXJlIGZhciBtb3JlIGludGVyZXN0ZWQgaW4gdGhlIHVzZSBvZiBhIFRva2Vu IGZvciB3aGF0IHRoZSBhcmNoaXRlY3R1cmUgY2FsbHMgQXR0ZXN0YXRpb24gRm9ybWF0LA0KDQpb bm1zXSBJIGRvbuKAmXQgc2VlIHRoZSB0ZXJtIOKAnEF0dGVzdGF0aW9uIEZvcm1hdOKAnSBvY2N1 cnJpbmcgaW4gdGhlIGN1cnJlbnQgYXJjaCAoZWRpdG9ycyBkcmFmdCkuIE1heWJlIHRoaXMgbmVl ZHMgZGlzYW1iaWd1YXRpb24gZnJvbSB0aGUgY3VycmVudCB0ZXh0IHRoYXQgdXNlcyDigJxmb3Jt YXTigJ0gaW4gdGhlIGNvbnRleHQgb2YgZGVmaW5pbmcgb3RoZXIgc3RydWN0dXJlcyDigJMgaS5l LiBFdmlkZW5jZSwgUmVmZXJlbmNlIFZhbHVlcyBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0cy4NCg0K DQoNClNvcnJ5IGZvciB0aGUgY29uZnVzaW9uLCB0aGVyZSBpcyBubyBzaW5nbGUg4oCcYXJjaCBk b2PigJ0uICAgSXTigJlzIGluIG15IGFyY2ggZG9jLCBhbmQgaXTigJlzIGluIHRoZSBzbGlkZXMg YW5kIG1pbnV0ZXMgYW5kIGRpc2N1c3Npb24gZnJvbSBsYXN0IElFVEYgd2hlcmUgZXZlcnlvbmUg YWdyZWVkIG9uIGl0DQoNCihJIGJlbGlldmUgaXQgd2FzIEhlbmvigJlzIHRlcm0gb3JpZ2luYWxs eSwgSSBnb3QgaXQgZnJvbSBIZW5rIGF0IHRoZSBoYWNrYXRob24gOikgdGhlbiByZWdhcmRsZXNz IG9mIHdoZXRoZXIgdGhlIG90aGVyIGFyY2ggZG9jIHByb3Bvc2FsIHVzZXMgdGhlIHRlcm0gb3Ig bm90IOKYug0KDQoNCg0KbXVjaCBsZXNzIGludGVyZXN0ZWQgaW4gc3RhbmRhcmRpemluZyB3aGF0 IHRoZSBhcmNoaXRlY3R1cmUgY2FsbHMgRXZpZGVuY2UuDQoNCltubXNdIE15IGFzc3VtcHRpb24g aXMgdGhhdCBhIGNsYWltIGZvcm1hdHRlZCBhcyBFdmlkZW5jZSBjb3VsZCBiZSBzeW5vbnltb3Vz IHdpdGggYSBjbGFpbSBmb3JtYXR0ZWQgYXMgQXR0ZXN0YXRpb24gUmVzdWx0cyAoYW5kIHRoZSBy ZXZlcnNlIGlzIGFsc28gdHJ1ZSkuDQoNCkFncmVlDQoNCg0KDQpUaGlzIGRvZXNu4oCZdCBpbXBs eSB0aGVyZSBjb3VsZG7igJl0IGJlIG90aGVyIGZvcm1hdHRlZCBFdmlkZW5jZSB3aXRoIGRpZmZl cmVudCBmb3JtYXR0aW5nIHRoYXQgaXNu4oCZdCBzdWl0YWJsZSBmb3IgdXNlIGFzIEF0dGVzdGF0 aW9uIFJlc3VsdHMuDQoNCkFncmVlLiAgIEnigJl2ZSBoZWFyZCBzb21lIHBlb3BsZSBhcmd1aW5n IHRoYXQgdGNnbG9nIGlzIG9uZSBzdWNoIGZvcm1hdCwgYnV0IG90aGVyIG9waW5pb25zIG1heSB2 YXJ5Lg0KDQoNCg0KTGlrZXdpc2UsIFZlcmlmaWVycyBjb3VsZCBwcm9kdWNlIEF0dGVzdGF0aW9u IFJlc3VsdHMgd2l0aCBjbGFpbXMgdGhhdCBhcmUgbm90IGFzc2VydGVkIGJ5IGFueSBBdHRlc3Rl ci4NCg0KQWdyZWUuDQoNCg0KDQpCdXQgdGhlIGFyY2hpdGVjdHVyZSB3b3VsZG7igJl0IGV4cGVj dCAoSSBwcmVzdW1lKSB0byBkZWZpbmUgQXR0ZXN0YXRpb24gUmVzdWx0cyB1c2luZyBhIGZvcm1h dCB0aGF0IGNvdWxkIG5vdCBiZSB1c2VkIGFzIEV2aWRlbmNlLg0KDQpBZ3JlZS4NCg0KDQoNClNv dW5kIGxpa2UgeW91IGFuZCBJIGFyZSBvbiB0aGUgc2FtZSBwYWdlLCBtb2R1bG8gbWlub3IgdGVy bWlub2xvZ3kgcHJlZmVyZW5jZSBhdCB0b3AgdGhhdCBJIGRvbuKAmXQgY29uc2lkZXIgYSBiaWcg ZGVhbCBlaXRoZXIgd2F5Lg0KDQoNCg0KRGF2ZQ0KDQoNCg0KQSBWZXJpZmllciBjYW4gaGF2ZSBt dWx0aXBsZSBzaW11bHRhbmVvdXMgcHVycG9zZXMsIGFzIG1lbnRpb25lZCBpbiBteSBkcmFmdDoN Cg0KMSkgICAgIFRvIG1ha2UgcG9saWN5IGRlY2lzaW9ucyB0aGF0IGluY2x1ZGUgdmVyaWZ5aW5n IEV2aWRlbmNlIHRoYXQgY2hhaW5zIHVwIHRvIGEgbWFudWZhY3R1cmVyLCBhbmQgdGhlbiBnZW5l cmF0aW5nIGFuIEF0dGVzdGF0aW9uIFJlc3VsdA0KDQp3aG9zZSBzZWN1cml0eSBjaGFpbnMgdXAg dG8gdGhlIFZlcmlmaWVyIChvciB0aGVpciBvcmcpIHJhdGhlciB0aGFuIGV2ZXJ5IG1hbnVmYWN0 dXJlciBvZiBldmVyeSBBdHRlc3Rlciwgc28gdGhhdCB0aGUgUmVseWluZyBQYXJ0eeKAmXMgcG9s aWN5DQoNCmNhbiBiZSBzaW1wbGUgYW5kIGp1c3QgdHJ1c3QgdGhlIFZlcmlmaWVyLg0KDQoyKSAg ICAgVG8gYWxsb3cgaGV0ZXJvZ2VuZW91cyBBdHRlc3RlcnMsIHdpdGggZGlmZmVyZW50IEV2aWRl bmNlIGZvcm1hdHMgKGluY2x1ZGluZyBleGlzdGluZy9wcm9wcmlldGFyeS93aGF0ZXZlciBvbmVz KSwgdG8gdGFsayB0byBhIGNvbW1vbiBWZXJpZmllciwNCndoaWNoIGNhbiB0aGVuIHByb3ZpZGUg YSBzdGFuZGFyZCBBdHRlc3RhdGlvbiBGb3JtYXQgdG8gUmVseWluZyBQYXJ0aWVzLCBzbyB0aGF0 IG9uZSBuZWVkIG5vdCBoYXZlIGV2ZXJ5IFJlbHlpbmcgUGFydHkgdW5kZXJzdGFuZCBldmVyeQ0K DQpFdmlkZW5jZSBmb3JtYXQsIG9mIHdoaWNoIG1hbnkgYWxyZWFkeSBleGlzdC4NCg0KDQoNClNv IEkgcGVyc29uYWxseSB3aWxsIGFyZ3VlIGFnYWluc3Qgc2NvcGluZyBFQVQgdG8gb25seSBFdmlk ZW5jZSwgYW5kIGZvciBrZWVwaW5nIGl0IGdlbmVyaWMgYW5kIHVzYWJsZSBmb3IgQXR0ZXN0YXRp b24gUmVzdWx0cy4NCg0KKE90aGVycyBJ4oCZdmUgdGFsa2VkIHRvIGJvdGggaW5zaWRlIGFuZCBv dXRzaWRlIE1pY3Jvc29mdCBzaGFyZSB0aGlzIHZpZXcsIHNvIEnigJltIGFsc28gcmVseWluZyBp dCBhcyBhIG1lc3Nlbmdlciwgbm90IGp1c3QgYW4gYWR2b2NhdGUuKQ0KDQoNCg0KSWYgdGhlIFdH IGNob29zZXMgdG8gb25seSBzdGFuZGFyZGl6ZSB3aGF0IHdlIG5vdyBjYWxsIEV2aWRlbmNlIGFu ZCBpZ25vcmUgQXR0ZXN0YXRpb24gUmVzdWx0cywgdGhlbiBJIGRvbuKAmXQgYmVsaWV2ZSBpdCBt ZWV0cyB0aGUgbmVlZHMNCg0Kb2YgZWl0aGVyIE1pY3Jvc29mdCBvciwgSSBzdXNwZWN0LCB0aGUg VEVFUCBXRyB1c2UgY2FzZS4NCg0KDQoNCkRhdmUNCg0KDQoNCkNEREwsIFlBTkcgYXJlIGV4cHJl c3Npb25zIG9mIHNvbWV0aGluZyB0aGF0IHRoZSBhcmNoaXRlY3R1cmUgc2hvdWxkIGNhbGwgQ2xh aW1zLiAoYWdyZWU/KQ0KDQotTmVkDQoNCg0KDQpbMV0gRGF2ZSBUaGFsZXIgd3JvdGU6DQo+IFNv IGZhciB0aGUgZ3JvdXAgaGFzIHVzZWQgdGhlIHRlcm0gIkVBVCIgdG8gcmVmZXIgdG8gYm90aCB0 aGUgaW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucy4N Cg0KSSB3b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBvdGhlciB0ZXJtcyBl bmRpbmcgaW4gVG9rZW4sIGxpa2UgSldUIGFuZCBDV1QpIG9ubHkgYmUgdXNlZCB0byByZWZlciB0 bw0KZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1v ZGVsLg0KDQo+IFdoZW4gZXh0ZW5kaW5nIGluZm9ybWF0aW9uIG1vZGVsIHRvIFlBTkcgb3Igc29t ZSBvdGhlciBzZXJpYWxpemF0aW9uIChlLmcuIEFTTi4xKS4gR2l2ZW4gdGhlIHBvc3NpYmlsaXR5 IGZvciBhbiBJTQ0KPiBleHByZXNzaW9uIHRvIGJlIHJlYWxpemVkIGJ5IGRpZmZlcmVudCBzZXJp YWxpemF0aW9ucywgd2hhdCB0ZXJtIHNob3VsZCB3ZSBnaXZlIHRvIHRoZSBJTSBkZXNjcmlwdGlv bj8NCg0KVGhhdOKAmXMgYSBmaW5lIHF1ZXN0aW9uLCBhbmQgSSBkb27igJl0IGhhdmUgYW55IHN0 cm9uZyBwcmVmZXJlbmNlIHJpZ2h0IG5vdywgb3RoZXIgdGhhbiB0byBub3QgdXNlIHRoZSBzYW1l IHRlcm0gYXMgc29tZXRoaW5nIGVsc2UuDQpPZmZoYW5kLCBteSBwcmVmZXJlbmNlIHdvdWxkIGJl IHRvIG5vdCBkZWZpbmUgYSB0ZXJtLCBhbmQganVzdCB1c2UgRXZpZGVuY2UgYW5kIEF0dGVzdGF0 aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9yDQpmb3JtYXQtaW5kZXBlbmRlbnQgZGlzY3Vzc2lv bi4gIEkgdGhpbmsgaXQgaXMgdXNlZnVsIHRvIGRpc3Rpbmd1aXNoIGJldHdlZW4gRXZpZGVuY2Ug dnMgQXR0ZXN0YXRpb24gUmVzdWx0cyBpbiBtYW55IGNhc2VzLg0KQW5kIGlmIHlvdSBuZWVkIHRv IHJlZmVyIHRvIGJvdGgsIHRoZW4gd2UgY2FuIGFsd2F5cyB1c2UgYm90aCB0b2dldGhlciwgc3Vj aCBhcyDigJxFdmlkZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS4NCg0KPiBUaGUgdGVy bSAiQ2xhaW0iIGhhcyBiZWVuIHVzZWQgZXh0ZW5zaXZlbHkuIERvIHdlIHdhbnQgdG8gYWdyZWUg dG8gdXNlICJjbGFpbSIgdG8gcmVmZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBhbiBJTQ0KPiBleHBy ZXNzaW9uIGluIFJBVFMgYW5kICJUb2tlbiIgZm9yIGFueSBzZXJpYWxpemF0aW9uIChyZWFsaXph dGlvbikgZXZlbiBpZiBpdCBpc24ndCBhIEpXVCBvciBDV1Q/DQoNCkkgd291bGQgc2F5IG5vLiBU byBtZSwgYSBjbGFpbSBpcyBvbmUgcGFydGljdWxhciBwaWVjZSBvZiBpbmZvcm1hdGlvbiwgd2hl cmUgYSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBlbHNlIGhhcyBhIHNldCBvZiBjbGFpbXMuDQoN CkRhdmUNCg0KDQpPbiAxMS8xMi8xOSwgMTE6MDAgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBMYXVy ZW5jZSBMdW5kYmxhZGUiIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNl c0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGds QGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCg0KT24gTm92IDEyLCAyMDE5LCBhdCAxOjA4 IEFNLCBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYTxtYWlsdG86bWNy K2lldGZAc2FuZGVsbWFuLmNhPj4gd3JvdGU6DQoNCg0KT24gMjAxOS0xMS0xMiAxMjoxOSBwLm0u LCBEYXZlIFRoYWxlciB3cm90ZToNCg0KTmVkIFNtaXRoIHdyb3RlOg0KDQpTbyBmYXIgdGhlIGdy b3VwIGhhcyB1c2VkIHRoZSB0ZXJtICJFQVQiIHRvIHJlZmVyIHRvIGJvdGggdGhlDQppbmZvcm1h dGlvbiBtb2RlbCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLg0KDQoNCg0KSSB3 b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBvdGhlciB0ZXJtcyBlbmRpbmcg aW4gVG9rZW4sDQpsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJlIHVzZWQgdG8gcmVmZXIgdG8NCg0K ZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9uIG1vZGVs Lg0KSSBjb25jdXIuDQoNCkkgZGlzYWdyZWUgd2l0aCB0aGF0Lg0KDQpJIGRvbuKAmXQgdGhpbmsg d2Ugd2FudCBvbmUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIGFsbCBvZiBSQVRTLg0KDQpFQVQgaGFz IGFuIGluZm9ybWF0aW9uIG1vZGVsIGFuZCBkYXRhIG1vZGVsIGZvciB3aGF0IGl0IGV4cHJlc3Nl cy4NCg0KVGhlIFlBTkcgTW9kdWxlIGhhcyBhbiBpbmZvcm1hdGlvbiBhbmQgZGF0YSBtb2RlbCBm b3Igd2hhdCBpdCBleHByZXNzZXMuDQoNClRoZSBwcmltYXJ5IHB1cnBvc2UgZm9yIHVzZSBvZiBp bmZvcm1hdGlvbiBtb2RlbHMgKHBsdXJhbCEpIGlzIHNvIHdlIGNhbiBkZXNjcmliZWQgdGhpbmdz IGxpa2UgY2xhaW1zIG9uY2UgYW5kIHRoZW4gaGF2ZSBhIGxhcmdlbHkgbWVjaGFuaWNhbCB3YXkg dG8gc2VyaWFsaXplIHRoZW0gaW4gZGlmZmVyZW50IHdheXMsIENCT1IgYW5kIEpTT04uDQoNCk5v dGUgdGhhdCBDV1QgYW5kIEpXVCBkb27igJl0IHVzZSB0aGUgaW5mb3JtYXRpb24gbW9kZWwgY29u Y2VwdC4gVGhleSBhcmUgbW9zdGx5IHR3byBpbmRlcGVuZGVudGx5IGRlZmluZWQgYW5kIGxvb3Nl bHkgY29vcmRpbmF0ZWQgZGF0YSBtb2RlbHMuIFdlIGFyZSB0cnlpbmcgdG8gZG8gZGlmZmVyZW50 IGJ5IGhhdmluZyBhIGNvbW1vbiBpbmZvcm1hdGlvbiBtb2RlbCB0aGF0IGNvdmVycyBib3RoLiBP bmUgbWlnaHQgYXJndWUgdGhhdCBDV1QgYW5kIEpXVCBzaG91bGQgaGF2ZSBkb25lIHdoYXQgd2Ug YXJlIGRvaW5nIGluIEVBVC4NCg0KTEwNCg0K --_000_MWHPR21MB078439E9EB07E3BB72E15137A3760MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8qIFN0eWxl IERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFs DQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1z b0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xs b3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWluVGV4dCwgZGl2 Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJp Z2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHls ZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmln aHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsN Cglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CnNwYW4uUGxhaW5UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiUGxhaW4gVGV4dCBDaGFyIjsN Cgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQiOw0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3Qt aWQ6NTc5NTYzMDg4Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRl LWlkczo0NjczMzA4NzAgNjc2OTg3MDUgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3 MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDA6bGV2ZWwx DQoJe21zby1sZXZlbC10ZXh0OiIlMVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlz dCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDUN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9t YW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJ e21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7 DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJ e21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+ PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4 dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxh eW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 Yj5Gcm9tOjwvYj4gU21pdGgsIE5lZCAmbHQ7bmVkLnNtaXRoQGludGVsLmNvbSZndDsNCjxicj4N CjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBOb3ZlbWJlciAxMiwgMjAxOSA0OjAwIFBNPGJyPg0KPGI+ VG86PC9iPiBEYXZlIFRoYWxlciAmbHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0OzsgTGF1cmVu Y2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7OyBNaWNoYWVsIFJpY2hh cmRzb24gJmx0O21jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2EmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBy YXRzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbUmF0c10gV2hhdCdzIHRvIEVB VD8gLSB0ZXJtaW5vbG9neSBjbGFyaWZpY2F0aW9uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkkgYWdyZWUgdGhhdCB0aGUgdGhyZWFkIHJlZ2FyZGluZyDigJxDbGFpbXPigJ0sIOKA nFRva2Vuc+KAnSBhbmQg4oCcRXZpZGVuY2XigJ0gbGFyZ2VseSBpcyBhcHBsaWNhYmxlIHRvIOKA nEF0dGVzdGF0aW9uIFJlc3VsdHPigJ0uIExpa2UgRXZpZGVuY2UsIEF0dGVzdGF0aW9uIFJlc3Vs dHMgYXJlIGEgc2VyaWFsaXphdGlvbi4gQ2xhaW1zIGFyZSBhbHNvIHJlbGV2YW50IGFzIGluZm9y bWF0aW9uDQogbW9kZWwgZXhwcmVzc2lvbnMgdGhhdCBtYXkgYmUgcmVhbGl6ZWQgYXMgQXR0ZXN0 YXRpb24gUmVzdWx0cyBzZXJpYWxpemF0aW9uLiA8bzpwPg0KPC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5JIG1vc3RseSBhZ3JlZSB3aXRoIHlvdSB0aGVyZS4mbmJzcDsgJm5ic3A7SSB3b3VsZCBq dXN0IHNheSBBdHRlc3RhdGlvbiBSZXN1bHRzIGFyZQ0KPGk+Y29udmV5ZWQgPC9pPnVzaW5nIGEg c2VyaWFsaXphdGlvbi4mbmJzcDsgSSB3b3VsZCBiZSBmaW5lIGFsc28gdXNpbmcgdGhlIHRlcm0g dG8gcmVmZXIgdG8gdGhlIGluZm9ybWF0aW9uLCBub3QganVzdCB0aGUgc2VyaWFsaXphdGlvbi48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+YXMgaW4gc2F5aW5nIOKAnFRoZSBBdHRlc3RhdGlvbiBSZXN1bHRzIGFy ZSBzZXJpYWxpemVkIHVzaW5nIGZvcm1hdCBYWVogYW5kIHNlbnQgdG8gdGhlIFJlbHlpbmcgUGFy dHkgdmlhIHByb3RvY29sIEFCQ+KAnS4mbmJzcDsmbmJzcDsgU3VjaCBhIHNlbnRlbmNlIHVzZXMg dGhlIHRlcm0gdG8gYXBwbHkgdG8gdGhlIGluZm9ybWF0aW9uIGJvdGggYmVmb3JlIGFuZCBhZnRl cjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5zZXJpYWxpemF0aW9uLiZuYnNwOyZuYnNwOyBJZiB0aGUgV0cgY2hv b3NlcyB0byBmaW5lIGl0IHRvIGp1c3QgcG9zdC1zZXJpYWxpemF0aW9uIHRoYXTigJlzIG9rIHdp dGggbWUsIEkganVzdCB0aGluayBpdOKAmXMgbW9yZSBjb252ZW5pZW50IGFzIEkgZGVzY3JpYmVk LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5TZWUgbW9yZSBpbmxpbmUgW25tc10uPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+T24gMTEvMTIvMTksIDE1OjMzIFBNLCAmcXVvdDtEYXZl IFRoYWxlciZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS41aW4iPjxiPkZyb206PC9i PiBSQVRTICZsdDs8YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnIj5yYXRzLWJv dW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5TbWl0aCwgTmVkPGJy Pg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE5vdmVtYmVyIDEyLCAyMDE5IDI6NTYgUE08YnI+DQo8 Yj5Ubzo8L2I+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xh bmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDs7IE1pY2hhZWwgUmlj aGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2EiPm1j ciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2E8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0i bWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbUmF0c10gV2hhdCdzIHRvIEVBVD8gLSB0ZXJtaW5vbG9neSBjbGFyaWZpY2F0aW9u PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS41aW47bWFyZ2luLWJvdHRvbTouMDAw MXB0Ij4NCkluY2x1ZGluZyBEYXZlIFRoYWxlcuKAmXMgdGhyZWFkIGZyb20gZm9ya2VkIHN1Ympl Y3QgbGluZSBpbiBbMV0uIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjBpbjttYXJnaW4tbGVmdDoxLjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KVGhlIGVh dCBkcmFmdCB1c2VzIOKAnENsYWltKHMp4oCdIGluIHRoZSBzZWN0aW9uIGhlYWRpbmcgZm9yIHRo ZSBJbmZvcm1hdGlvbiBNb2RlbC4gQ0RETCBleHByZXNzaW9ucyBhcmUgdXNlZC4gSSB0aGluayB0 aGlzIGlzIE9LLiBXZSBkb27igJl0IG5lZWQgdG8gY2hhbmdlIGl0IHRvIOKAnEV2aWRlbmNl4oCd IElNTy4gVGhlIGFyY2hpdGVjdHVyZSBkcmFmdCAoYmlya2hvbHopIHN0cm9uZ2x5IGltcGxpZXMg dGhhdCBFdmlkZW5jZSBpcyBzaWduZWQgKHZlcmlmaWFibGUNCiBvciBwcm92YWJsZSkuIFRoaXMg c3VnZ2VzdHMgRXZpZGVuY2UgaXMgaW4gYSBzZXJpYWxpemVkIGZvcm1hdCAoaGVuY2UgaXNu4oCZ dCBDRERMLCBZQU5HIG9yIEFTTi4xKS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjtt YXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQi Pg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGlu O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS4waW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5TdXJlLCBF dmlkZW5jZSBpcyBjZXJ0YWlubHkgPGk+Y29udmV5ZWQ8L2k+IGluIGEgc2VyaWFsaXplZCBmb3Jt YXQuDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206 MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCltubXNdIEl0IGlz IGFsc28gc2lnbmVkIGluIGEgc2VyaWFsaXplZCBmb3JtYXQuPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAx cHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5ZZXMgSSBhZ3JlZSB3aXRo IHRoYXQgcGFydC4mbmJzcDsmbmJzcDsgSSB3YXMgdHJ5aW5nIHRvIGp1c3QgbWFrZSB0aGUgcG9p bnQgSSBhcnRpY3VsYXRlZCBtb3JlIHNwZWNpZmljYWxseSBhdCB0aGUgdG9wIG9mIHRoaXMgcmVz cG9uc2UuJm5ic3A7Jm5ic3A7IEJ1dCBJIGRvbuKAmXQgZmVlbCBzdHJvbmdseSBlaXRoZXIgd2F5 LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47 bWFyZ2luLWxlZnQ6MS4waW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGlu O21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuNWluO21hcmdpbi1ib3R0b206LjAwMDFw dCI+DQpJIGRvbuKAmXQgdGhpbmsg4oCcRXZpZGVuY2XigJ0gd291bGQgYmUgYXMgcHJlY2lzZSBh IHdheSB0byB0YWxrIGFib3V0IGFuIGluZm9ybWF0aW9uIG1vZGVsIG9iamVjdCBhcyDigJxDbGFp bShzKeKAnSB3b3VsZCBiZS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KJm5i c3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdp bi1sZWZ0OjEuNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpZQU5HIGlzIG5vdCBhIHNlcmlh bGl6YWJsZSBmb3JtYXQgaGVuY2UgaXQgaXMgbW9yZSBhcHByb3ByaWF0ZWx5IGFuIGluZm9ybWF0 aW9uIG1vZGVsIGxhbmd1YWdlIGZvciB0aGUgcHVycG9zZXMgb2YgUkFUUyAoSU1PKS4NCjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDox LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KJm5ic3A7PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuNWluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+DQpHb2luZyBiYWNrIHRvIHRoZSBvcmlnaW5hbCBxdWVzdGlvbi4gQSBUb2tl biAoRUFULCBDV1QsIEpXVCkgaXMgYW4gZXhhbXBsZSBvZiBzb21ldGhpbmcgdGhlIGFyY2hpdGVj dHVyZSBjYWxscyBFdmlkZW5jZS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 YmxhY2s7YmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkZZSSwgSSAoYW5kIG90 aGVycyBJ4oCZdmUgdGFsa2VkIHRvKSBhcmUgZmFyIG1vcmUgaW50ZXJlc3RlZCBpbiB0aGUgdXNl IG9mIGEgVG9rZW4gZm9yIHdoYXQgdGhlIGFyY2hpdGVjdHVyZSBjYWxscyBBdHRlc3RhdGlvbiBG b3JtYXQsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpbbm1zXSBJIGRv buKAmXQgc2VlIHRoZSB0ZXJtIOKAnEF0dGVzdGF0aW9uIEZvcm1hdOKAnSBvY2N1cnJpbmcgaW4g dGhlIGN1cnJlbnQgYXJjaCAoZWRpdG9ycyBkcmFmdCkuIE1heWJlIHRoaXMgbmVlZHMgZGlzYW1i aWd1YXRpb24gZnJvbSB0aGUgY3VycmVudCB0ZXh0IHRoYXQgdXNlcyDigJxmb3JtYXTigJ0gaW4g dGhlIGNvbnRleHQgb2YgZGVmaW5pbmcgb3RoZXIgc3RydWN0dXJlcyDigJMgaS5lLiBFdmlkZW5j ZSwgUmVmZXJlbmNlIFZhbHVlcyBhbmQgQXR0ZXN0YXRpb24NCiBSZXN1bHRzLiA8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1i b3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGlu O21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlNvcnJ5 IGZvciB0aGUgY29uZnVzaW9uLCB0aGVyZSBpcyBubyBzaW5nbGUg4oCcYXJjaCBkb2PigJ0uJm5i c3A7Jm5ic3A7IEl04oCZcyBpbiBteSBhcmNoIGRvYywgYW5kIGl04oCZcyBpbiB0aGUgc2xpZGVz IGFuZCBtaW51dGVzIGFuZCBkaXNjdXNzaW9uIGZyb20gbGFzdCBJRVRGIHdoZXJlIGV2ZXJ5b25l IGFncmVlZA0KIG9uIGl0IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPihJIGJlbGlldmUgaXQgd2FzIEhlbmvigJlzIHRlcm0gb3JpZ2lu YWxseSwgSSBnb3QgaXQgZnJvbSBIZW5rIGF0IHRoZSBoYWNrYXRob24gOikgdGhlbiByZWdhcmRs ZXNzIG9mIHdoZXRoZXIgdGhlIG90aGVyIGFyY2ggZG9jIHByb3Bvc2FsIHVzZXMgdGhlIHRlcm0g b3Igbm90DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncztjb2xvcjoj MUY0OTdEIj5KPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJn aW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdp bi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+bXVjaCBsZXNzIGludGVyZXN0ZWQgaW4gc3RhbmRhcmRpemluZyB3aGF0IHRoZSBh cmNoaXRlY3R1cmUgY2FsbHMgRXZpZGVuY2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206 LjAwMDFwdCI+DQpbbm1zXSBNeSBhc3N1bXB0aW9uIGlzIHRoYXQgYSBjbGFpbSBmb3JtYXR0ZWQg YXMgRXZpZGVuY2UgY291bGQgYmUgc3lub255bW91cyB3aXRoIGEgY2xhaW0gZm9ybWF0dGVkIGFz IEF0dGVzdGF0aW9uIFJlc3VsdHMgKGFuZCB0aGUgcmV2ZXJzZSBpcyBhbHNvIHRydWUpLjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BZ3JlZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW46MGluO21hcmdpbi1ib3R0b206LjAw MDFwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6LjVpbjtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KVGhpcyBkb2VzbuKAmXQgaW1wbHkgdGhlcmUgY291bGRu 4oCZdCBiZSBvdGhlciBmb3JtYXR0ZWQgRXZpZGVuY2Ugd2l0aCBkaWZmZXJlbnQgZm9ybWF0dGlu ZyB0aGF0IGlzbuKAmXQgc3VpdGFibGUgZm9yIHVzZSBhcyBBdHRlc3RhdGlvbiBSZXN1bHRzLjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQi PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BZ3JlZS4mbmJzcDsmbmJzcDsgSeKAmXZlIGhl YXJkIHNvbWUgcGVvcGxlIGFyZ3VpbmcgdGhhdCB0Y2dsb2cgaXMgb25lIHN1Y2ggZm9ybWF0LCBi dXQgb3RoZXIgb3BpbmlvbnMgbWF5IHZhcnkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbjowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0 Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdp bi1ib3R0b206LjAwMDFwdCI+DQpMaWtld2lzZSwgVmVyaWZpZXJzIGNvdWxkIHByb2R1Y2UgQXR0 ZXN0YXRpb24gUmVzdWx0cyB3aXRoIGNsYWltcyB0aGF0IGFyZSBub3QgYXNzZXJ0ZWQgYnkgYW55 IEF0dGVzdGVyLjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BZ3JlZS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjtt YXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCkJ1dCB0aGUgYXJjaGl0ZWN0 dXJlIHdvdWxkbuKAmXQgZXhwZWN0IChJIHByZXN1bWUpIHRvIGRlZmluZSBBdHRlc3RhdGlvbiBS ZXN1bHRzIHVzaW5nIGEgZm9ybWF0IHRoYXQgY291bGQgbm90IGJlIHVzZWQgYXMgRXZpZGVuY2Uu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBp bjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BZ3Jl ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0i bWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5Tb3VuZCBsaWtlIHlvdSBhbmQgSSBhcmUgb24gdGhlIHNhbWUgcGFnZSwg bW9kdWxvIG1pbm9yIHRlcm1pbm9sb2d5IHByZWZlcmVuY2UgYXQgdG9wIHRoYXQgSSBkb27igJl0 IGNvbnNpZGVyIGEgYmlnIGRlYWwgZWl0aGVyIHdheS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4w MDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luOjBpbjttYXJnaW4t Ym90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5EYXZlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVm dDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbTowaW47bWFyZ2luLWxlZnQ6MS4waW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5BIFZlcmlmaWVyIGNhbiBoYXZlIG11bHRpcGxlIHNpbXVs dGFuZW91cyBwdXJwb3NlcywgYXMgbWVudGlvbmVkIGluIG15IGRyYWZ0Ojwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS41 aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0O3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBs ZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6 SWdub3JlIj4xKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+VG8gbWFrZSBwb2xpY3kgZGVjaXNpb25zIHRoYXQg aW5jbHVkZSB2ZXJpZnlpbmcgRXZpZGVuY2UgdGhhdCBjaGFpbnMgdXAgdG8gYSBtYW51ZmFjdHVy ZXIsIGFuZCB0aGVuIGdlbmVyYXRpbmcgYW4gQXR0ZXN0YXRpb24gUmVzdWx0PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDox LjVpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi Pndob3NlIHNlY3VyaXR5IGNoYWlucyB1cCB0byB0aGUgVmVyaWZpZXIgKG9yIHRoZWlyIG9yZykg cmF0aGVyIHRoYW4gZXZlcnkgbWFudWZhY3R1cmVyIG9mIGV2ZXJ5IEF0dGVzdGVyLCBzbyB0aGF0 IHRoZSBSZWx5aW5nIFBhcnR54oCZcyBwb2xpY3k8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuNWluO21hcmdpbi1ib3R0 b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Y2FuIGJlIHNpbXBsZSBh bmQganVzdCB0cnVzdCB0aGUgVmVyaWZpZXIuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjVpbjttYXJnaW4tYm90dG9t Oi4wMDAxcHQ7dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8yIj4NCjwh W2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjIpPHNwYW4g c3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5UbyBhbGxvdyBoZXRlcm9nZW5lb3VzIEF0dGVzdGVycywgd2l0aCBkaWZmZXJl bnQgRXZpZGVuY2UgZm9ybWF0cyAoaW5jbHVkaW5nIGV4aXN0aW5nL3Byb3ByaWV0YXJ5L3doYXRl dmVyIG9uZXMpLCB0byB0YWxrIHRvIGEgY29tbW9uIFZlcmlmaWVyLDxicj4NCndoaWNoIGNhbiB0 aGVuIHByb3ZpZGUgYSBzdGFuZGFyZCBBdHRlc3RhdGlvbiBGb3JtYXQgdG8gUmVseWluZyBQYXJ0 aWVzLCBzbyB0aGF0IG9uZSBuZWVkIG5vdCBoYXZlIGV2ZXJ5IFJlbHlpbmcgUGFydHkgdW5kZXJz dGFuZCBldmVyeTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbTowaW47bWFyZ2luLWxlZnQ6MS41aW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5FdmlkZW5jZSBmb3JtYXQsIG9mIHdoaWNoIG1hbnkgYWxy ZWFkeSBleGlzdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1i b3R0b206MGluO21hcmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90 dG9tOi4wMDAxcHQiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlNvIEkgcGVyc29uYWxs eSB3aWxsIGFyZ3VlIGFnYWluc3Qgc2NvcGluZyBFQVQgdG8gb25seSBFdmlkZW5jZSwgYW5kIGZv ciBrZWVwaW5nIGl0IGdlbmVyaWMgYW5kIHVzYWJsZSBmb3IgQXR0ZXN0YXRpb24gUmVzdWx0cy48 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+KE90aGVycyBJ4oCZdmUgdGFsa2VkIHRvIGJvdGggaW5zaWRlIGFuZCBvdXRz aWRlIE1pY3Jvc29mdCBzaGFyZSB0aGlzIHZpZXcsIHNvIEnigJltIGFsc28gcmVseWluZyBpdCBh cyBhIG1lc3Nlbmdlciwgbm90IGp1c3QgYW4gYWR2b2NhdGUuKTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGlu O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS4waW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21h cmdpbi1sZWZ0OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+SWYgdGhlIFdHIGNob29zZXMgdG8gb25seSBzdGFuZGFyZGl6ZSB3aGF0IHdl IG5vdyBjYWxsIEV2aWRlbmNlIGFuZCBpZ25vcmUgQXR0ZXN0YXRpb24gUmVzdWx0cywgdGhlbiBJ IGRvbuKAmXQgYmVsaWV2ZSBpdCBtZWV0cyB0aGUgbmVlZHM8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEuMGluO21hcmdp bi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+b2YgZWl0aGVy IE1pY3Jvc29mdCBvciwgSSBzdXNwZWN0LCB0aGUgVEVFUCBXRyB1c2UgY2FzZS48L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0 OjEuMGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPg0KPHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0Oi41aW47bWFyZ2luLWJvdHRvbTou MDAwMXB0Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0IiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MGluO21hcmdpbi1sZWZ0OjEu MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+DQpDRERMLCBZQU5HIGFyZSBleHByZXNzaW9ucyBv ZiBzb21ldGhpbmcgdGhhdCB0aGUgYXJjaGl0ZWN0dXJlIHNob3VsZCBjYWxsIENsYWltcy4gKGFn cmVlPyk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFy Z2luLWxlZnQ6MS4waW47bWFyZ2luLWJvdHRvbTouMDAwMXB0Ij4NCi1OZWQ8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGlu O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWxlZnQ6MS4waW47bWFy Z2luLWJvdHRvbTouMDAwMXB0Ij4NCiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBp bjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDoxLjBpbjttYXJnaW4tYm90dG9tOi4wMDAx cHQiPg0KWzFdIDxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+RGF2ZSBUaGFsZXIgd3JvdGU6PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZndDsgU28gZmFyIHRoZSBncm91 cCBoYXMgdXNlZCB0aGUgdGVybSAmcXVvdDtFQVQmcXVvdDsgdG8gcmVmZXIgdG8gYm90aCB0aGUg aW5mb3JtYXRpb24gbW9kZWwgYW5kIGRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucy48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48 c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVybSBFQVQg KGFuZCBhbnkgb3RoZXIgdGVybXMgZW5kaW5nIGluIFRva2VuLCBsaWtlIEpXVCBhbmQgQ1dUKSBv bmx5IGJlIHVzZWQgdG8gcmVmZXIgdG88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+ZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLCBub3QgdGhlIGluZm9ybWF0aW9u IG1vZGVsLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBXaGVuIGV4dGVuZGluZyBp bmZvcm1hdGlvbiBtb2RlbCB0byBZQU5HIG9yIHNvbWUgb3RoZXIgc2VyaWFsaXphdGlvbiAoZS5n LiBBU04uMSkuIEdpdmVuIHRoZSBwb3NzaWJpbGl0eSBmb3IgYW4gSU08L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+Jmd0OyBleHByZXNzaW9uIHRvIGJlIHJlYWxpemVkIGJ5 IGRpZmZlcmVudCBzZXJpYWxpemF0aW9ucywgd2hhdCB0ZXJtIHNob3VsZCB3ZSBnaXZlIHRvIHRo ZSBJTSBkZXNjcmlwdGlvbj88L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlRoYXTigJlzIGEg ZmluZSBxdWVzdGlvbiwgYW5kIEkgZG9u4oCZdCBoYXZlIGFueSBzdHJvbmcgcHJlZmVyZW5jZSBy aWdodCBub3csIG90aGVyIHRoYW4gdG8gbm90IHVzZSB0aGUgc2FtZSB0ZXJtIGFzIHNvbWV0aGlu ZyBlbHNlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5PZmZoYW5kLCBt eSBwcmVmZXJlbmNlIHdvdWxkIGJlIHRvIG5vdCBkZWZpbmUgYSB0ZXJtLCBhbmQganVzdCB1c2Ug RXZpZGVuY2UgYW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9yPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEu MGluIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPmZvcm1hdC1pbmRlcGVuZGVudCBkaXNjdXNz aW9uLiZuYnNwOyBJIHRoaW5rIGl0IGlzIHVzZWZ1bCB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuIEV2 aWRlbmNlIHZzIEF0dGVzdGF0aW9uIFJlc3VsdHMgaW4gbWFueSBjYXNlcy48L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4i PjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+QW5kIGlmIHlvdSBuZWVkIHRvIHJlZmVyIHRvIGJv dGgsIHRoZW4gd2UgY2FuIGFsd2F5cyB1c2UgYm90aCB0b2dldGhlciwgc3VjaCBhcyDigJxFdmlk ZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS48L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxl PSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPiZndDsgVGhlIHRlcm0gJnF1b3Q7Q2xhaW0mcXVvdDsgaGFzIGJlZW4gdXNlZCBleHRlbnNp dmVseS4gRG8gd2Ugd2FudCB0byBhZ3JlZSB0byB1c2UgJnF1b3Q7Y2xhaW0mcXVvdDsgdG8gcmVm ZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBhbiBJTTxicj4NCiZndDsgZXhwcmVzc2lvbiBpbiBSQVRT IGFuZCAmcXVvdDtUb2tlbiZxdW90OyBmb3IgYW55IHNlcmlhbGl6YXRpb24gKHJlYWxpemF0aW9u KSBldmVuIGlmIGl0IGlzbid0IGEgSldUIG9yIENXVD8mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29s b3I6YmxhY2siPkkgd291bGQgc2F5IG5vLiBUbyBtZSwgYSBjbGFpbSBpcyBvbmUgcGFydGljdWxh ciBwaWVjZSBvZiBpbmZvcm1hdGlvbiwgd2hlcmUgYSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBl bHNlIGhhcyBhIHNldCBvZiBjbGFpbXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5EYXZl PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5PbiAx MS8xMi8xOSwgMTE6MDAgQU0sICZxdW90O1JBVFMgb24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRi bGFkZSZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+cmF0 cy1ib3VuY2VzQGlldGYub3JnPC9hPiBvbiBiZWhhbGYgb2YNCjxhIGhyZWY9Im1haWx0bzpsZ2xA aXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjBpbiI+T24gTm92IDEyLCAyMDE5LCBhdCAxOjA4IEFNLCBNaWNoYWVs IFJpY2hhcmRzb24gJmx0OzxhIGhyZWY9Im1haWx0bzptY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNh Ij5tY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNhPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEy LjBwdDttYXJnaW4tbGVmdDoxLjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpPbiAyMDE5 LTExLTEyIDEyOjE5IHAubS4sIERhdmUgVGhhbGVyIHdyb3RlOjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDoxLjBpbiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpOZWQgU21pdGggd3JvdGU6PGJyPg0KPGJyPg0KPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlNvIGZhciB0aGUgZ3JvdXAgaGFzIHVzZWQg dGhlIHRlcm0gJnF1b3Q7RUFUJnF1b3Q7IHRvIHJlZmVyIHRvIGJvdGggdGhlPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBw dDttYXJnaW4tbGVmdDoxLjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5pbmZvcm1hdGlvbiBtb2Rl bCBhbmQgZGF0YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLjxicj4NCjxicj4NCiZuYnNwOzxi cj4NCjxicj4NCkkgd291bGQgcmF0aGVyIHNlZSB0aGUgdGVybSBFQVQgKGFuZCBhbnkgb3RoZXIg dGVybXMgZW5kaW5nIGluIFRva2VuLDxicj4NCmxpa2UgSldUIGFuZCBDV1QpIG9ubHkgYmUgdXNl ZCB0byByZWZlciB0bzxicj4NCjxicj4NCmRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucywg bm90IHRoZSBpbmZvcm1hdGlvbiBtb2RlbC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPkkgY29uY3VyLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+SSBkaXNhZ3JlZSB3aXRoIHRoYXQuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5JIGRvbuKAmXQg dGhpbmsgd2Ugd2FudCBvbmUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIGFsbCBvZiBSQVRTLiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+RUFUIGhh cyBhbiBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0YSBtb2RlbCBmb3Igd2hhdCBpdCBleHByZXNz ZXMuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGlu Ij5UaGUgWUFORyBNb2R1bGUgaGFzIGFuIGluZm9ybWF0aW9uIGFuZCBkYXRhIG1vZGVsIGZvciB3 aGF0IGl0IGV4cHJlc3Nlcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPlRoZSBwcmltYXJ5IHB1cnBvc2UgZm9yIHVzZSBvZiBpbmZvcm1hdGlvbiBtb2Rl bHMgKHBsdXJhbCEpIGlzIHNvIHdlIGNhbiBkZXNjcmliZWQgdGhpbmdzIGxpa2UgY2xhaW1zIG9u Y2UgYW5kIHRoZW4gaGF2ZSBhIGxhcmdlbHkgbWVjaGFuaWNhbCB3YXkgdG8gc2VyaWFsaXplIHRo ZW0gaW4gZGlmZmVyZW50IHdheXMsIENCT1IgYW5kIEpTT04uPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5Ob3RlIHRoYXQgQ1dUIGFuZCBKV1QgZG9u4oCZ dCB1c2UgdGhlIGluZm9ybWF0aW9uIG1vZGVsIGNvbmNlcHQuIFRoZXkgYXJlIG1vc3RseSB0d28g aW5kZXBlbmRlbnRseSBkZWZpbmVkIGFuZCBsb29zZWx5IGNvb3JkaW5hdGVkIGRhdGEgbW9kZWxz LiBXZSBhcmUgdHJ5aW5nIHRvIGRvIGRpZmZlcmVudCBieSBoYXZpbmcgYSBjb21tb24gaW5mb3Jt YXRpb24gbW9kZWwgdGhhdA0KIGNvdmVycyBib3RoLiBPbmUgbWlnaHQgYXJndWUgdGhhdCBDV1Qg YW5kIEpXVCBzaG91bGQgaGF2ZSBkb25lIHdoYXQgd2UgYXJlIGRvaW5nIGluIEVBVC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkxMPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_MWHPR21MB078439E9EB07E3BB72E15137A3760MWHPR21MB0784namp_-- From nobody Tue Nov 12 16:20:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 652C1120803 for ; Tue, 12 Nov 2019 16:20:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.99 X-Spam-Level: X-Spam-Status: No, score=-1.99 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zNfKsBIrTbR4 for ; Tue, 12 Nov 2019 16:20:23 -0800 (PST) Received: from NAM02-BL2-obe.outbound.protection.outlook.com (mail-eopbgr750108.outbound.protection.outlook.com [40.107.75.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0531D12089E for ; Tue, 12 Nov 2019 16:20:22 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DrvJ7QQFEwAtuI9fVRoXgwCC8K2K+2vs6t1PpmtItOJ+LEeQStiVvpo6U0Tu14IQFZ2zoYf24ozwN6t6ycl/iTmdNMqGX7zmj72AP1HJTv+XciODSnw2B3vib0wYG3YaEs+4WEe6cVAuyYjjsvD1gDmT3JldsBxqd4J5ulxplXlPwX1BC0TyOJzPdXKBsj1enjbwmcmbeTOH4cZJ0zwCgUMI/7FJLhO0Dkb4afVr2kZvauD76wHO6QG0bMS6j7W3PRJFpI0P96RABTVk1+alRH7dgK7gxIhKmcD9MAVC13K3abFL4My/AxP5nL/m8aCReFjq53MNuU7iRt235jnKsA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YH5Aal6q1daq08uGW/fw1mmTom2coUerZvx89zukTso=; b=m3Y1/35hvPxZVayqUUSZpgE10+TEb7odWRtoWRi7p4REMcfRZzgRe/vkVil1bZYKH6yFko4tsiH2UOzChoUJho/Y8y71Bj6IUbTUfbY80ZPZY/9/OtdP9VZPHb5J+uaeMb7Ul6hcmKCiF91nPCuXxJjjqW4uRa/XUhDUFWbAKFV8dcvsHN/BrYd2r6oM9Lo2yAjfs2BuqiuMVpQhLjIvsP2zstJBxmps/uKICDQrXx9rP4T6wMZUCDrARnziJqdOf5hPZB/DQVn+Bt7ud+uhSikODCtC1KGGb/ajLMROZr/DRpIwR8EkdN03Ai4vuEgdjRMK7DPgGyUpYzmaXCVtyA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YH5Aal6q1daq08uGW/fw1mmTom2coUerZvx89zukTso=; b=LvYtJYaZFx4O6WPVQeLGaZQgI3lpDHBpq7yu7OlhC7doQgITvrJSumoDQMJF0BRpmnM4Q2i/F8imav0ryGwlssQf6A4qZe5W16OTkWZF82+eGToeDwWR+K85bjuxsmPXaw7qeUzxD0cXtzUsdoOphCPHjqvT59d7cS7AsrnHTH4= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0479.namprd21.prod.outlook.com (10.172.102.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Wed, 13 Nov 2019 00:20:18 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Wed, 13 Nov 2019 00:20:18 +0000 From: Dave Thaler To: Henk Birkholz , "Smith, Ned" , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAG6hAP//f1YAgADOEwCAABvMgIAACkiAgABGoACAAMXLwIAAROUAgAEJ/GA= Date: Wed, 13 Nov 2019 00:20:18 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> <29e641b7-3077-2b7d-8029-631698012c74@sit.fraunhofer.de> In-Reply-To: <29e641b7-3077-2b7d-8029-631698012c74@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-13T00:20:17.9977098Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a718117a-0d30-484d-b198-5f2051e5c452; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:0:f8a5:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f04ae6e5-3795-4da9-895e-08d767cf43b5 x-ms-traffictypediagnostic: MWHPR21MB0479: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4502; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(346002)(376002)(366004)(39860400002)(396003)(189003)(199004)(53754006)(13464003)(2501003)(25786009)(486006)(236005)(476003)(33656002)(6506007)(966005)(6306002)(54896002)(102836004)(53546011)(55016002)(14454004)(7736002)(186003)(478600001)(606006)(9686003)(256004)(10290500003)(6246003)(14444005)(52536014)(10090500001)(6436002)(46003)(99286004)(86362001)(71190400001)(81166006)(11346002)(446003)(8990500004)(74316002)(71200400001)(76116006)(66946007)(22452003)(316002)(8936002)(2906002)(66476007)(66446008)(64756008)(6116002)(66556008)(790700001)(76176011)(81156014)(110136005)(5660300002)(8676002)(7696005)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0479; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Yx4F12U17XvWRPdprrm5HuKkD5FVAU/H4SSns5bEEhzh614LoXH7miaKevCJGPwMvLpUrOgvJYD3pUgiTGaEAFdBPHxJan2Msws+GO5QfpEcUUEWMfwivsbFl/un5i9F2JBjMI2sbzjdZ/RUn4j1r9I88bX7zkHmJdcdOVGxElZLRD+YRzBsYKdHie+sBEdTLZ+c7Olj7Tit41Ev1+f1ywi3NHn1I8CJAFrvb5frzqmV/wtDnyuUdQRSPq8dvqdSInLyT2AYxtuZqzj6jEbTubL+EV57uOErE5yS5BIdIppXZ8JDZ1Yv8THMuHDuFS30Vfhq8B2J6FpNnNIl08cBt42HtpIU01RU24jRj93ezIIfEBcsDvZzpSF6ILee81bh+djRCSjLpJ491ZokJlC7gIu6NCCJyNpVJJlxim9owfulO5+vOHdvrK04bQLcxT8k x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784D315CBA68C8CA0B723E7A3760MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f04ae6e5-3795-4da9-895e-08d767cf43b5 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 00:20:18.6197 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: EA80x3YlMhZt1lUtF7e1NYwRrsDX3IGdsgGlvjbPXjSiCK09rg5KyV9t1TQ+GjqHwycDP2dAwMWGFS79wx77YydRb2PjXUZR21Wnt31lX1E= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0479 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 00:20:35 -0000 --_000_MWHPR21MB0784D315CBA68C8CA0B723E7A3760MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVzcG9uc2UgYmVsb3figKYNCg0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t OiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBIZW5rIEJpcmtob2x6 DQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAxMiwgMjAxOSAxMjoyMSBBTQ0KVG86IERhdmUgVGhh bGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+OyBTbWl0aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwu Y29tPjsgTWljaGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+OyByYXRzQGll dGYub3JnDQpTdWJqZWN0OiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFm dCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdA0KDQoNCg0KSGkgRGF2ZSwNCg0KaGkgYWxs LA0KDQoNCg0KaXMgaXQgY29ycmVjdCB0aGF0IHRoZSBpbnRlbnQgb2YgdG9rZW5zIC0gaW4gZ2Vu ZXJhbCAtIGlzIHRoYXQgdGhleSBoYXZlIGEgbGlmZS1zcGFuIGFuZCBhcmUgc29tZWhvdyBsaWtl Li4uIGNlcnRpZmljYXRlcywgYnV0IHdpdGggYSBzbWFsbGVyIGxpZmUtY3ljbGU/IFRoZSBjbGFp bXMgZGVmaW5lZCBieSB0aGUgV2ViIFRva2VuIFJGQ3MgYXJlIGluZGljYXRpbmcgYXMgc3VjaCwg SSdkIGFzc3VtZS4NCg0KDQoNCkkgdGhpbmsgc28gdG9vLCB5ZXMuDQoNCg0KDQpIYXZpbmcgc2Fp ZCB0aGF0LCB0aGUgZmVhdHVyZXMgd2UgdXNlIGFyZSB0aGUgb2JqZWN0IC8gdGFnZ2VkIG1hcCBz dHJ1Y3R1cmUsIHRoZSBjb250aW51b3VzIGxpc3Qgb2YgZGVmaW5lZCBDbGFpbXMgJiBjb3JyZXNw b25kaW5nIHJlZ2lzdHJ5LCBhbmQgdGhlIGltcGVyYXRpdmUgZ3VpZGFuY2UgaG93IHRvIHVzZSB7 Q3xKfU9TRS4gSW4gY29tYmluYXRpb24gd2l0aCB0aGUgZmFjdCB0aGF0IGFsbCBXZWIgVG9rZW4g Q2xhaW1zIGFyZSBvcHRpb25hbCwgd2UgY2FuIHVzZSB0aGVzZSBmZWF0dXJlcyBmb3IgcHVycG9z ZXMgb3RoZXIgdGhhbiB0aGUgb3JpZ2luYWwgaW50ZW50IG9mIHRva2VucyBhbmQgdGhhdCBpcyBv a2F5LiBTaW1wbHkgY2FsbGluZyB0aGVtIHRva2VucywgdGhvdWdoLCBtaWdodCBiZSBjb25mdXNp bmcgdG8gcmVhZGVycyB0aGF0IGFscmVhZHkgdXNlIHRva2Vucz8NCg0KDQoNCk5vdCBzdXJlIEkg dW5kZXJzdGFuZCB5b3VyIHBvaW50IChlLmcuLCB3aG/igJlzIOKAnHdl4oCdPykuICBDYW4geW91 IHJlcGhyYXNlPw0KDQoNCg0KSW4gY29udmV5YW5jZSBwcm90b2NvbHMgZm9yIFJBVFMgSSB3b3Vs ZCBsaWtlIHRvIHNlZSBhdCBsZWFzdCB0aHJlZSB0aGluZ3MgZGVmaW5lZCBhbmQgZGlmZmVyZW50 aWF0ZWQ6DQoNCg0KDQoqIHRoZSBJbnRlcmFjdGlvbiBNb2RlbHMgdGhlIHByb3RvY29scyB1c2Us IG1vc3QgcHJvbWluZW50LCBjaGFsbGVuZ2UvcmVzcG9uc2UsIHRpbWUtYmFzZWQsIGFuZCBzdWJz Y3JpcHRpb24sDQoNCiogdGhlIE1lc3NhZ2UgKENvbnRlbnQpIHRoYXQgaXMgY29udmV5ZWQsIG1v c3QgcHJvbWluZW50IEV2aWRlbmNlLCBFbmRvcnNlbWVudHMsIFJlZmVyZW5jZSBWYWx1ZXMgKGFr YSBLbm93biBHb29kIFZhbHVlcyksIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHRzLCBhbmQNCg0KKiB0 aGUgUm9sZXMgYmV0d2VlbiB3aGljaCBNZXNzYWdlcyBhcmUgY29udmV5ZWQgdmlhIHByb3RvY29s cywgbW9zdCBwcm9taW5lbnQgLg0KDQoNCg0KVGhpcyBpcyBhcHBsaWNhYmxlIHRvIEVBVCAoc3Bl Y2lmaWMgY2xhaW0gc2V0IHNlcmlhbGl6YXRpb25zKSBhbmQgWUFORyAoc3BlY2lmaWMgc3RhdGVt ZW50cyBzZXJpYWxpemF0aW9ucywgQVBJcywgYW5kIGNvbnZleWFuY2UgcHJvdG9jb2xzKSBvciBv dGhlcnMgLSBhbmQgdW5sZXNzIHRoZXJlIGFyZSByZWFsbHkgZ29vZCByZWFzb25zIGFnYWluc3Qg dGhpcywgSSdkIGNvbnNpZGVyIHRoZXNlIGRlZmluaXRpb25zL2NhdGVnb3JpemF0aW9ucyBhIE1V U1QuDQoNCg0KDQpQZXJzb25hbGx5LCBJIGRvbuKAmXQgc2VlIGEgc3Ryb25nIHJlcXVpcmVtZW50 IHRvIGRpZmZlcmVudGlhdGUgYW4gaW50ZXJhY3Rpb24gbW9kZWwgZnJvbSBhIG1lc3NhZ2UgZGVz Y3JpcHRpb25zLCBpbiBhbnkgY29uY3JldGUgc29sdXRpb24vcHJvdG9jb2wgZG9jdW1lbnQuDQoN CihTb21lIHBlb3BsZSBhcmUganVzdCBjb25mdXNlZCBieSBleHRyYSBjb21wbGV4aXR5IGluIGRv Y3VtZW50cyB0aGF0IGlzbuKAmXQgbmVjZXNzYXJ5IHRvIHVuZGVyc3RhbmQgYW5kIGltcGxlbWVu dCB0aGUgcHJvdG9jb2wsIGFuZCBJ4oCZbSBhbGwgZm9yIGF2b2lkaW5nIGdyYXR1aXRvdXMgY29t cGxleGl0eS4pDQoNCg0KDQpJ4oCZbSBmaW5lIHdpdGggZG9jcyB0aGF0IGRvIHNvLCBhbmQgSeKA mW0gZmluZSB3aXRoIGRvY3MgdGhhdCBkb27igJl0Lg0KDQpJIGFncmVlIGl0IGlzIGltcG9ydGFu dCB0byBkZWZpbmUgd2hpY2ggUm9sZXMgKEF0dGVzdGVyLCBWZXJpZmllciwgUmVseWluZyBQYXJ0 eeKApikgYSBtZXNzYWdlIGlzIGludGVuZGVkIHRvIGdvIGJldHdlZW4uDQoNCkFzIGVsYWJvcmF0 ZWQgb24gaW4gbXkgZG9jLCBJIGRpc2FncmVlIGhvd2V2ZXIgdGhhdCDigJxSZWZlcmVuY2UgVmFs dWVzIChha2EgS25vd24gR29vZCBWYWx1ZXMp4oCdIHNob3VsZCBiZSBhIHRvcC1sZXZlbCBjb25j ZXB0LCBidXQgaXMgZmluZSBhcyBhIGNvbW1vbiBleGFtcGxlLg0KDQpJbiBnZW5lcmFsLCBleGFj dCBtYXRjaCBpcyB0b28gbmFycm93IGEgY29uY2VwdCBmb3IgdGhlIHR5cGVzIG9mIHNlY3VyaXR5 IHBvbGljaWVzIEkgc2VlIHBlb3BsZSB3YW50aW5nIHRvIGRvLCB3aGljaCBtYXkgYmUgZXhhY3Qg bWF0Y2gsIG1heSBiZSBhIHRlc3QgdGhhdCBhIGNsYWltZWQgdmFsdWUgaXMgYSBtZW1iZXIgb2Yg YSBzcGVjaWZpZWQgc2V0IG9mIHZhbHVlcywNCg0KbWF5IGJlIHJhbmdlIGNoZWNrcywgbWF5IGJl IGV2ZW4gbW9yZSBjb21wbGV4IGxvZ2ljLg0KDQoNCg0KQWZ0ZXIgdGhlIGRpc2N1c3Npb25zIHdl IGhhZCwgSSBhbSBhIGJpdCBhdCBhIGxvc3MgaG93IHRvIGRlYWwgd2l0aCAidGhlIHNhbWUgaW5m b3JtYXRpb24gZWxlbWVudHMgdXNlZCBpbiBkaWZmZXJlbnQgbWVzc2FnZSB0eXBlcyBhbmQgY29u dGVudCINCg0Kb3IgImhvdyB0byBub3QgdXNlIHRoZSBzYW1lIHRlcm0gYXMgc29tZXRoaW5nIGVs c2UiIChha2EgdGhlIEluZm9ybWF0aW9uIE1vZGVsKSwgSSBoYXZlIHRvIGFkbWl0LiBJIGRvIG5v dCBzZWUgYSB2aWFibGUgc29sdXRpb24gYXQgdGhlIG1vbWVudC4NCg0KDQoNClNvdW5kcyBsaWtl IG1vcmUgd29yayBpcyBuZWVkZWQgb24gc29sdXRpb25zLg0KDQoNCg0KRGF2ZQ0KDQoNCg0KVmll bGUgR3LDvMOfZSwNCg0KDQoNCkhlbmsNCg0KDQoNCg0KDQpPbiAxMi4xMS4xOSAwNToxOSwgRGF2 ZSBUaGFsZXIgd3JvdGU6DQoNCj4gTmVkIFNtaXRoIHdyb3RlOg0KDQo+DQoNCj4gID4gU28gZmFy IHRoZSBncm91cCBoYXMgdXNlZCB0aGUgdGVybSAiRUFUIiB0byByZWZlciB0byBib3RoIHRoZQ0K DQo+IGluZm9ybWF0aW9uIG1vZGVsIGFuZCBkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lvbnMu DQoNCj4NCg0KPiBJIHdvdWxkIHJhdGhlciBzZWUgdGhlIHRlcm0gRUFUIChhbmQgYW55IG90aGVy IHRlcm1zIGVuZGluZyBpbiBUb2tlbiwNCg0KPiBsaWtlIEpXVCBhbmQgQ1dUKSBvbmx5IGJlIHVz ZWQgdG8gcmVmZXIgdG8NCg0KPg0KDQo+IGRhdGEgc2VyaWFsaXphdGlvbiBleHByZXNzaW9ucywg bm90IHRoZSBpbmZvcm1hdGlvbiBtb2RlbC4NCg0KPg0KDQo+ICA+IFdoZW4gZXh0ZW5kaW5nIGlu Zm9ybWF0aW9uIG1vZGVsIHRvIFlBTkcgb3Igc29tZSBvdGhlcg0KDQo+IHNlcmlhbGl6YXRpb24g KGUuZy4gQVNOLjEpLiBHaXZlbiB0aGUgcG9zc2liaWxpdHkgZm9yIGFuIElNDQoNCj4NCg0KPiAg PiBleHByZXNzaW9uIHRvIGJlIHJlYWxpemVkIGJ5IGRpZmZlcmVudCBzZXJpYWxpemF0aW9ucywg d2hhdCB0ZXJtDQoNCj4gc2hvdWxkIHdlIGdpdmUgdG8gdGhlIElNIGRlc2NyaXB0aW9uPw0KDQo+ DQoNCj4gVGhhdOKAmXMgYSBmaW5lIHF1ZXN0aW9uLCBhbmQgSSBkb27igJl0IGhhdmUgYW55IHN0 cm9uZyBwcmVmZXJlbmNlIHJpZ2h0DQoNCj4gbm93LCBvdGhlciB0aGFuIHRvIG5vdCB1c2UgdGhl IHNhbWUgdGVybSBhcyBzb21ldGhpbmcgZWxzZS4NCg0KPg0KDQo+IE9mZmhhbmQsIG15IHByZWZl cmVuY2Ugd291bGQgYmUgdG8gbm90IGRlZmluZSBhIHRlcm0sIGFuZCBqdXN0IHVzZQ0KDQo+IEV2 aWRlbmNlIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHQgYXMgdGhlIHRlcm1zIGZvcg0KDQo+DQoNCj4g Zm9ybWF0LWluZGVwZW5kZW50IGRpc2N1c3Npb24uICBJIHRoaW5rIGl0IGlzIHVzZWZ1bCB0byBk aXN0aW5ndWlzaA0KDQo+IGJldHdlZW4gRXZpZGVuY2UgdnMgQXR0ZXN0YXRpb24gUmVzdWx0cyBp biBtYW55IGNhc2VzLg0KDQo+DQoNCj4gQW5kIGlmIHlvdSBuZWVkIHRvIHJlZmVyIHRvIGJvdGgs IHRoZW4gd2UgY2FuIGFsd2F5cyB1c2UgYm90aA0KDQo+IHRvZ2V0aGVyLCBzdWNoIGFzIOKAnEV2 aWRlbmNlIGFuZCBBdHRlc3RhdGlvbiBSZXN1bHRz4oCdLg0KDQo+DQoNCj4gID4gVGhlIHRlcm0g IkNsYWltIiBoYXMgYmVlbiB1c2VkIGV4dGVuc2l2ZWx5LiBEbyB3ZSB3YW50IHRvIGFncmVlIHRv DQoNCj4gdXNlICJjbGFpbSIgdG8gcmVmZXIgdG8gYW55dGhpbmcgdGhhdCBpcyBhbiBJTSAgPiBl eHByZXNzaW9uIGluIFJBVFMNCg0KPiBhbmQgIlRva2VuIiBmb3IgYW55IHNlcmlhbGl6YXRpb24g KHJlYWxpemF0aW9uKSBldmVuIGlmIGl0IGlzbid0IGEgSldUDQoNCj4gb3IgQ1dUPw0KDQo+DQoN Cj4gSSB3b3VsZCBzYXkgbm8uIFRvIG1lLCBhIGNsYWltIGlzIG9uZSBwYXJ0aWN1bGFyIHBpZWNl IG9mIGluZm9ybWF0aW9uLA0KDQo+IHdoZXJlIGEg4oCcVG9rZW7igJ0gb3Igd2hhdGV2ZXIgZWxz ZSBoYXMgYSBzZXQgb2YgY2xhaW1zLg0KDQo+DQoNCj4gRGF2ZQ0KDQo+DQoNCg0KDQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpSQVRTIG1haWxpbmcg bGlzdA0KDQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KDQpodHRwczovL25h bTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3 d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZyYXRzJmFtcDtkYXRhPTAyJTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzNmYzk0ZjA3MzA0YjRiZTRlZjJmMDhkNzY3NDk0 ZWQ0JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA5MTQz Njg4MDAwMTIwMCZhbXA7c2RhdGE9eGNIOGpjciUyRkVxZjdldEQlMkJDMyUyQnJtZXUzdEIxJTJG UjNYT2tYRXdRaEVOazdZJTNEJmFtcDtyZXNlcnZlZD0wDQo= --_000_MWHPR21MB0784D315CBA68C8CA0B723E7A3760MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjoj OTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxp Lk1zb1BsYWluVGV4dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6 IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQou TXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0 aW9uMSI+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5SZXNwb25zZSBiZWxvd+KApjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPg0KRnJvbTogUkFU UyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0OyBPbiBCZWhhbGYgT2YgSGVuayBCaXJraG9s ejxicj4NClNlbnQ6IFR1ZXNkYXksIE5vdmVtYmVyIDEyLCAyMDE5IDEyOjIxIEFNPGJyPg0KVG86 IERhdmUgVGhhbGVyICZsdDtkdGhhbGVyQG1pY3Jvc29mdC5jb20mZ3Q7OyBTbWl0aCwgTmVkICZs dDtuZWQuc21pdGhAaW50ZWwuY29tJmd0OzsgTWljaGFlbCBSaWNoYXJkc29uICZsdDttY3ImIzQz O2lldGZAc2FuZGVsbWFuLmNhJmd0OzsgcmF0c0BpZXRmLm9yZzxicj4NClN1YmplY3Q6IFJlOiBb UmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9k dWxlIGRyYWZ0PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkhpIERhdmUsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+aGkgYWxsLDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPmlzIGl0IGNvcnJlY3QgdGhhdCB0aGUgaW50ZW50IG9mIHRva2VucyAtIGlu IGdlbmVyYWwgLSBpcyB0aGF0IHRoZXkgaGF2ZSBhIGxpZmUtc3BhbiBhbmQgYXJlIHNvbWVob3cg bGlrZS4uLiBjZXJ0aWZpY2F0ZXMsIGJ1dCB3aXRoIGEgc21hbGxlciBsaWZlLWN5Y2xlPyBUaGUg Y2xhaW1zIGRlZmluZWQgYnkgdGhlIFdlYiBUb2tlbiBSRkNzIGFyZSBpbmRpY2F0aW5nDQogYXMg c3VjaCwgSSdkIGFzc3VtZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5JIHRoaW5r IHNvIHRvbywgeWVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IYXZpbmcgc2FpZCB0 aGF0LCB0aGUgZmVhdHVyZXMgd2UgdXNlIGFyZSB0aGUgb2JqZWN0IC8gdGFnZ2VkIG1hcCBzdHJ1 Y3R1cmUsIHRoZSBjb250aW51b3VzIGxpc3Qgb2YgZGVmaW5lZCBDbGFpbXMgJmFtcDsgY29ycmVz cG9uZGluZyByZWdpc3RyeSwgYW5kIHRoZSBpbXBlcmF0aXZlIGd1aWRhbmNlIGhvdyB0byB1c2Ug e0N8Sn1PU0UuIEluIGNvbWJpbmF0aW9uIHdpdGgNCiB0aGUgZmFjdCB0aGF0IGFsbCBXZWIgVG9r ZW4gQ2xhaW1zIGFyZSBvcHRpb25hbCwgd2UgY2FuIHVzZSB0aGVzZSBmZWF0dXJlcyBmb3IgcHVy cG9zZXMgb3RoZXIgdGhhbiB0aGUgb3JpZ2luYWwgaW50ZW50IG9mIHRva2VucyBhbmQgdGhhdCBp cyBva2F5LiBTaW1wbHkgY2FsbGluZyB0aGVtIHRva2VucywgdGhvdWdoLCBtaWdodCBiZSBjb25m dXNpbmcgdG8gcmVhZGVycyB0aGF0IGFscmVhZHkgdXNlIHRva2Vucz88bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOmJsYWNrIj5Ob3Qgc3VyZSBJIHVuZGVyc3RhbmQgeW91ciBwb2ludCAoZS5nLiwg d2hv4oCZcyDigJx3ZeKAnT8pLiZuYnNwOyBDYW4geW91IHJlcGhyYXNlPzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5JbiBjb252ZXlhbmNlIHByb3RvY29scyBmb3IgUkFUUyBJIHdvdWxk IGxpa2UgdG8gc2VlIGF0IGxlYXN0IHRocmVlIHRoaW5ncyBkZWZpbmVkIGFuZCBkaWZmZXJlbnRp YXRlZDo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4qIHRoZSBJbnRlcmFjdGlvbiBNb2RlbHMgdGhl IHByb3RvY29scyB1c2UsIG1vc3QgcHJvbWluZW50LCBjaGFsbGVuZ2UvcmVzcG9uc2UsIHRpbWUt YmFzZWQsIGFuZCBzdWJzY3JpcHRpb24sPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+KiB0aGUgTWVzc2FnZSAoQ29udGVudCkg dGhhdCBpcyBjb252ZXllZCwgbW9zdCBwcm9taW5lbnQgRXZpZGVuY2UsIEVuZG9yc2VtZW50cywg UmVmZXJlbmNlIFZhbHVlcyAoYWthIEtub3duIEdvb2QgVmFsdWVzKSwgYW5kIEF0dGVzdGF0aW9u IFJlc3VsdHMsIGFuZDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiogdGhlIFJvbGVzIGJldHdlZW4gd2hpY2ggTWVzc2FnZXMg YXJlIGNvbnZleWVkIHZpYSBwcm90b2NvbHMsIG1vc3QgcHJvbWluZW50IC48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoaXMgaXMgYXBwbGlj YWJsZSB0byBFQVQgKHNwZWNpZmljIGNsYWltIHNldCBzZXJpYWxpemF0aW9ucykgYW5kIFlBTkcg KHNwZWNpZmljIHN0YXRlbWVudHMgc2VyaWFsaXphdGlvbnMsIEFQSXMsIGFuZCBjb252ZXlhbmNl IHByb3RvY29scykgb3Igb3RoZXJzIC0gYW5kIHVubGVzcyB0aGVyZSBhcmUgcmVhbGx5IGdvb2Qg cmVhc29ucyBhZ2FpbnN0IHRoaXMsIEknZA0KIGNvbnNpZGVyIHRoZXNlIGRlZmluaXRpb25zL2Nh dGVnb3JpemF0aW9ucyBhIE1VU1QuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPlBlcnNvbmFsbHks IEkgZG9u4oCZdCBzZWUgYSBzdHJvbmcgcmVxdWlyZW1lbnQgdG8gZGlmZmVyZW50aWF0ZSBhbiBp bnRlcmFjdGlvbiBtb2RlbCBmcm9tIGEgbWVzc2FnZSBkZXNjcmlwdGlvbnMsIGluIGFueSBjb25j cmV0ZSBzb2x1dGlvbi9wcm90b2NvbCBkb2N1bWVudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPihTb21lIHBl b3BsZSBhcmUganVzdCBjb25mdXNlZCBieSBleHRyYSBjb21wbGV4aXR5IGluIGRvY3VtZW50cyB0 aGF0IGlzbuKAmXQgbmVjZXNzYXJ5IHRvIHVuZGVyc3RhbmQgYW5kIGltcGxlbWVudCB0aGUgcHJv dG9jb2wsIGFuZCBJ4oCZbSBhbGwgZm9yIGF2b2lkaW5nIGdyYXR1aXRvdXMgY29tcGxleGl0eS4p PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5 bGU9ImNvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPknigJltIGZpbmUgd2l0aCBk b2NzIHRoYXQgZG8gc28sIGFuZCBJ4oCZbSBmaW5lIHdpdGggZG9jcyB0aGF0IGRvbuKAmXQuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOmJsYWNrIj5JIGFncmVlIGl0IGlzIGltcG9ydGFudCB0byBkZWZpbmUgd2hpY2ggUm9s ZXMgKEF0dGVzdGVyLCBWZXJpZmllciwgUmVseWluZyBQYXJ0eeKApikgYSBtZXNzYWdlIGlzIGlu dGVuZGVkIHRvIGdvIGJldHdlZW4uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5BcyBlbGFib3JhdGVkIG9uIGlu IG15IGRvYywgSSBkaXNhZ3JlZSBob3dldmVyIHRoYXQg4oCcUmVmZXJlbmNlIFZhbHVlcyAoYWth IEtub3duIEdvb2QgVmFsdWVzKeKAnSBzaG91bGQgYmUgYSB0b3AtbGV2ZWwgY29uY2VwdCwgYnV0 IGlzIGZpbmUgYXMgYSBjb21tb24NCjxpPmV4YW1wbGU8L2k+LjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+SW4g Z2VuZXJhbCwgZXhhY3QgbWF0Y2ggaXMgdG9vIG5hcnJvdyBhIGNvbmNlcHQgZm9yIHRoZSB0eXBl cyBvZiBzZWN1cml0eSBwb2xpY2llcyBJIHNlZSBwZW9wbGUgd2FudGluZyB0byBkbywgd2hpY2gg bWF5IGJlIGV4YWN0IG1hdGNoLCBtYXkgYmUgYSB0ZXN0IHRoYXQgYSBjbGFpbWVkIHZhbHVlIGlz IGEgbWVtYmVyIG9mIGEgc3BlY2lmaWVkIHNldCBvZiB2YWx1ZXMsPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5t YXkgYmUgcmFuZ2UgY2hlY2tzLCBtYXkgYmUgZXZlbiBtb3JlIGNvbXBsZXggbG9naWMuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QWZ0ZXIgdGhlIGRpc2N1c3Npb25zIHdl IGhhZCwgSSBhbSBhIGJpdCBhdCBhIGxvc3MgaG93IHRvIGRlYWwgd2l0aCAmcXVvdDt0aGUgc2Ft ZSBpbmZvcm1hdGlvbiBlbGVtZW50cyB1c2VkIGluIGRpZmZlcmVudCBtZXNzYWdlIHR5cGVzIGFu ZCBjb250ZW50JnF1b3Q7DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5vciAmcXVvdDtob3cgdG8gbm90IHVzZSB0aGUgc2Ft ZSB0ZXJtIGFzIHNvbWV0aGluZyBlbHNlJnF1b3Q7IChha2EgdGhlIEluZm9ybWF0aW9uIE1vZGVs KSwgSSBoYXZlIHRvIGFkbWl0LiBJIGRvIG5vdCBzZWUgYSB2aWFibGUgc29sdXRpb24gYXQgdGhl IG1vbWVudC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Tb3VuZHMgbGlrZSBtb3Jl IHdvcmsgaXMgbmVlZGVkIG9uIHNvbHV0aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjayI+RGF2ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5WaWVsZSBHcsO8 w59lLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkhlbms8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5PbiAx Mi4xMS4xOSAwNToxOSwgRGF2ZSBUaGFsZXIgd3JvdGU6PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IE5lZCBTbWl0aCB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7ICZndDsgU28gZmFyIHRoZSBncm91cCBoYXMgdXNlZCB0aGUg dGVybSAmcXVvdDtFQVQmcXVvdDsgdG8gcmVmZXIgdG8gYm90aCB0aGUNCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBpbmZvcm1hdGlvbiBtb2RlbCBhbmQgZGF0 YSBzZXJpYWxpemF0aW9uIGV4cHJlc3Npb25zLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PiZndDsgSSB3b3VsZCByYXRoZXIgc2VlIHRoZSB0ZXJtIEVBVCAoYW5kIGFueSBvdGhlciB0ZXJt cyBlbmRpbmcgaW4gVG9rZW4sDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPiZndDsgbGlrZSBKV1QgYW5kIENXVCkgb25seSBiZSB1c2VkIHRvIHJlZmVyIHRvPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBkYXRhIHNlcmlhbGl6YXRpb24gZXhwcmVzc2lv bnMsIG5vdCB0aGUgaW5mb3JtYXRpb24gbW9kZWwuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyZuYnNwOyAmZ3Q7IFdoZW4gZXh0ZW5kaW5nIGluZm9ybWF0aW9uIG1vZGVsIHRvIFlB Tkcgb3Igc29tZSBvdGhlcg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij4mZ3Q7IHNlcmlhbGl6YXRpb24gKGUuZy4gQVNOLjEpLiBHaXZlbiB0aGUgcG9zc2liaWxpdHkg Zm9yIGFuIElNPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyZuYnNwOyAmZ3Q7IGV4 cHJlc3Npb24gdG8gYmUgcmVhbGl6ZWQgYnkgZGlmZmVyZW50IHNlcmlhbGl6YXRpb25zLCB3aGF0 IHRlcm0NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBzaG91 bGQgd2UgZ2l2ZSB0byB0aGUgSU0gZGVzY3JpcHRpb24/PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+Jmd0OyBUaGF04oCZcyBhIGZpbmUgcXVlc3Rpb24sIGFuZCBJIGRvbuKAmXQgaGF2ZSBh bnkgc3Ryb25nIHByZWZlcmVuY2UgcmlnaHQNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyBub3csIG90aGVyIHRoYW4gdG8gbm90IHVzZSB0aGUgc2FtZSB0ZXJt IGFzIHNvbWV0aGluZyBlbHNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgT2Zm aGFuZCwgbXkgcHJlZmVyZW5jZSB3b3VsZCBiZSB0byBub3QgZGVmaW5lIGEgdGVybSwgYW5kIGp1 c3QgdXNlDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgRXZp ZGVuY2UgYW5kIEF0dGVzdGF0aW9uIFJlc3VsdCBhcyB0aGUgdGVybXMgZm9yPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBmb3JtYXQtaW5kZXBlbmRlbnQgZGlzY3Vzc2lvbi4mbmJz cDsgSSB0aGluayBpdCBpcyB1c2VmdWwgdG8gZGlzdGluZ3Vpc2gNCjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBiZXR3ZWVuIEV2aWRlbmNlIHZzIEF0dGVzdGF0 aW9uIFJlc3VsdHMgaW4gbWFueSBjYXNlcy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPiZndDsgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4m Z3Q7IEFuZCBpZiB5b3UgbmVlZCB0byByZWZlciB0byBib3RoLCB0aGVuIHdlIGNhbiBhbHdheXMg dXNlIGJvdGgNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyB0 b2dldGhlciwgc3VjaCBhcyDigJxFdmlkZW5jZSBhbmQgQXR0ZXN0YXRpb24gUmVzdWx0c+KAnS48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPiZndDsgPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7Jm5ic3A7ICZndDsgVGhlIHRlcm0gJnF1 b3Q7Q2xhaW0mcXVvdDsgaGFzIGJlZW4gdXNlZCBleHRlbnNpdmVseS4gRG8gd2Ugd2FudCB0byBh Z3JlZSB0bw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IHVz ZSAmcXVvdDtjbGFpbSZxdW90OyB0byByZWZlciB0byBhbnl0aGluZyB0aGF0IGlzIGFuIElNJm5i c3A7ICZndDsgZXhwcmVzc2lvbiBpbiBSQVRTDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPiZndDsgYW5kICZxdW90O1Rva2VuJnF1b3Q7IGZvciBhbnkgc2VyaWFsaXph dGlvbiAocmVhbGl6YXRpb24pIGV2ZW4gaWYgaXQgaXNuJ3QgYSBKV1QNCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBvciBDV1Q/PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+Jmd0OyBJIHdvdWxkIHNheSBuby4gVG8gbWUsIGEgY2xhaW0gaXMgb25lIHBh cnRpY3VsYXIgcGllY2Ugb2YgaW5mb3JtYXRpb24sDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPiZndDsgd2hlcmUgYSDigJxUb2tlbuKAnSBvciB3aGF0ZXZlciBlbHNl IGhhcyBhIHNldCBvZiBjbGFpbXMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Jmd0OyBE YXZlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4mZ3Q7IDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+UkFU UyBtYWlsaW5nIGxpc3Q8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxh IGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6d2luZG93dGV4 dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+UkFUU0BpZXRmLm9yZzwvc3Bhbj48L2E+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48YSBocmVmPSJodHRwczovL25hbTA2LnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0 Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZyYXRzJmFtcDthbXA7ZGF0YT0wMiU3QzAxJTdD ZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MzZmM5NGYwNzMwNGI0YmU0ZWYyZjA4ZDc2NzQ5NGVk NCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwOTE0MzY4 ODAwMDEyMDAmYW1wO2FtcDtzZGF0YT14Y0g4amNyJTJGRXFmN2V0RCUyQkMzJTJCcm1ldTN0QjEl MkZSM1hPa1hFd1FoRU5rN1klM0QmYW1wO2FtcDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iY29s b3I6d2luZG93dGV4dDt0ZXh0LWRlY29yYXRpb246bm9uZSI+aHR0cHM6Ly9uYW0wNi5zYWZlbGlu a3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3Jn JTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGcmF0cyZhbXA7YW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFs ZXIlNDBtaWNyb3NvZnQuY29tJTdDM2ZjOTRmMDczMDRiNGJlNGVmMmYwOGQ3Njc0OTRlZDQlN0M3 MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDkxNDM2ODgwMDAx MjAwJmFtcDthbXA7c2RhdGE9eGNIOGpjciUyRkVxZjdldEQlMkJDMyUyQnJtZXUzdEIxJTJGUjNY T2tYRXdRaEVOazdZJTNEJmFtcDthbXA7cmVzZXJ2ZWQ9MDwvc3Bhbj48L2E+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_MWHPR21MB0784D315CBA68C8CA0B723E7A3760MWHPR21MB0784namp_-- From nobody Tue Nov 12 16:22:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D7D21200B5 for ; Tue, 12 Nov 2019 16:22:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BHw7cfH8bNiw for ; Tue, 12 Nov 2019 16:22:51 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790133.outbound.protection.outlook.com [40.107.79.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B024120044 for ; Tue, 12 Nov 2019 16:22:51 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NKzw8MIdw4w8REV4kL0mzk+CIJnGHymuZkQQD+fg7Zji3K9Fpu3xntatRdvWnnJ93D04bIHfjFVbWx2yDlQugmAA/26lJqt2qhQ2cJh91ApD/R1qWls35BRbTeQv3ZBJseVaJWnmIAT+rAohKdPzpTpwRZ4e/0LsiPriFIn4a1eVTokAodYgn95eu99zEvaU1uBWKaRT7rC7rzKSwYtgzvELWdlt2rqlEdzJ47aLKDDAqLNInB8WFLFupWku9Potp5sksFqHG3DtHYKCWJrOP8y1XapPNqrcG2cX0He+r18nsQPO94Mi1RF4XcFN/FJ2gCEApcrKbAiqGe8zCdV/yw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eU2BnO9NBgoQ2XrKcTsqEfrKD3aLfPi4tnS0HaYmXbY=; b=GiNAY8omkDg+cp9Ceou3ETRn3kYoepoxrPGX/OkkpKNI3+ik8DRRVKAqflULsPORDZO2azgpRURRu9ySSS/QNSCnUOiEuQEWlEWbRkxXPeX3fTbenYwywNBslesllwWQ+D0tVT7ssrWK4QTyz4Y7l9gz/K37Fsi8JFCQOORW2M1jc6rjDct97yj1Cd+Br04rluE/hiZPma5sw+2VwmOg3FWimN4rHyJPvf97GC8VYbnWJMkm7+TwxK71m8Nl7sifDd3TYSdt1j98rVhk5PjxmvJAs2VyFB/otMJ5dB60Tj3dYxLrP/WoZECQTs4a4O+/zJAFL8B3cls2VGYs/3SAVA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eU2BnO9NBgoQ2XrKcTsqEfrKD3aLfPi4tnS0HaYmXbY=; b=LXC3mSjNAzs7OwUp9wQ8Ev9DuhVILzcE8mhWyEzy4IjyVL4A2Brirka4ZsnLY/YMlJmKLq2ZsqimmVaBimVtLCo612DggDaXywyWf89lvk0Ev7Jk1UvtCcPrb23gbqBOYwPGjqfmnk6Og2QUGPuFjaNksKJLBhmpG/zGUWj88YE= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0832.namprd21.prod.outlook.com (10.173.51.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.15; Wed, 13 Nov 2019 00:22:50 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Wed, 13 Nov 2019 00:22:50 +0000 From: Dave Thaler To: Michael Richardson , Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAG6hAIAA8mAAgAABTYCAANGYgIABC5pg Date: Wed, 13 Nov 2019 00:22:49 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> In-Reply-To: <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-13T00:22:50.3589235Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a33bd99a-e877-4385-9623-8c0e10fd3e97; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:0:f8a5:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 27a63c0f-5486-48a4-b902-08d767cf9de7 x-ms-traffictypediagnostic: MWHPR21MB0832: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(346002)(39860400002)(396003)(376002)(366004)(199004)(189003)(13464003)(6246003)(186003)(446003)(46003)(10090500001)(22452003)(316002)(4326008)(8990500004)(4001150100001)(55016002)(110136005)(66446008)(66476007)(66556008)(64756008)(66946007)(305945005)(74316002)(52536014)(76116006)(7736002)(11346002)(476003)(486006)(6116002)(9686003)(71190400001)(71200400001)(102836004)(10290500003)(25786009)(33656002)(76176011)(86362001)(8676002)(478600001)(14454004)(256004)(53546011)(7696005)(6436002)(6506007)(2906002)(81156014)(8936002)(81166006)(5660300002)(99286004)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0832; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: XNZINpDQkVvGyF1Ud6dtQewoi+VHhlkecTGfAOIKgA2SHKm+/yjOyorDE2MM7QpWiSpLbfuk+DkLkOUc1jnPzCiBM1KgLcGPkCXTipJq4HJXcoNjjavhSkF3UwhOs2L9UaXjWme5n3wrpqHlBRJt4y8Z5xwollMpl//82apetI7sY8eG6IX5Llqh6Q1P9fNkdsr/fBN/4LKw5nPWlBw7XaVWlMNMS7eG34rSovpnl8WZQ0SJxwgVaTomXVxcJDIhi7r7TYutREXrsJzrF+G8GbUjl7zU51uA8+L0r+udMAAEEsIU+GQjTwewIciJ131Cha2glDS4epRwQ/iST3x6L3rSaYKAjAsWDh4ZwWLEVWLIqAuuFMV0PlpH1DyObFwvN2hrmXkb8qFD46wuJfdqC6dbVJrORuEd6XkhPbvUnerxrZQLzt4lck6CFbUNNQZZ x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 27a63c0f-5486-48a4-b902-08d767cf9de7 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 00:22:50.0055 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 9DU4SmCBEmk0fTvKzcrfDVCSBIDWdIJucem6eNI8P1pCxnx2JTg5puKPgE4Vg4iT3s+L5JdBMUDVG0HfXUvucNzW6XQK3u9hZ7zq5wOzjmU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0832 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 00:22:54 -0000 VGhhbmtzIE1pY2hhZWwsIEkgcmVhbGl6ZSBJIG1heSBoYXZlIGhhZCBzb21lIGNvbmZ1c2lvbiBv biBZQU5HIHRlcm1pbm9sb2d5IChpbiBteSBmaXJzdCByZXNwb25zZSB0byBOZWQpIGFzIHdlbGwg aW4gcmV0cm9zcGVjdC4gDQpZb3VyIGV4cGxhbmF0aW9uIGlzIGdyZWF0IGZvciB1bmRlcnN0YW5k aW5nLg0KDQpUaGFua3MsDQpEYXZlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t OiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBNaWNoYWVsIFJpY2hh cmRzb24NClNlbnQ6IFR1ZXNkYXksIE5vdmVtYmVyIDEyLCAyMDE5IDEyOjIzIEFNDQpUbzogTGF1 cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+DQpDYzogcmF0c0BpZXRmLm9y Zw0KU3ViamVjdDogUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVu YW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQNCg0KT24gMjAxOS0xMS0xMiAzOjUyIGEubS4sIExh dXJlbmNlIEx1bmRibGFkZSB3cm90ZToNCj4gT25lIG1vcmUgbm90ZSBvbiB0aGlzLiBJdCBzZWVt cyB3cm9uZy1oZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1zIGluIA0KPiBZQU5HLiBUbyBkbyB0 aGF0IHdl4oCZZCBuZWVkIHRvIGludmVudCBhIFlBTkcgc2lnbmluZyBzdGFuZGFyZCAoWU9TRT8p Lg0KPiBTZWVtcyBsaWtlIFlBTkcgc2hvdWxkIGJlIHRob3VnaHQgb2YgYXMgUlBDIC8gY29udmV5 YW5jZSAvIHRyYW5zcG9ydCANCj4gaGVyZSwgbm90IGFzIGEgd2F5IHRvIGZvcm1hdCBhIHNpZ25l ZCBhdHRlc3RhdGlvbiB0b2tlbi4NCg0KWUFORyBpcyBhbiBpbmZvcm1hdGlvbiBtb2RlbCAodGhp bmsgQVNOLjEpLiBJdCBpcyBmb3IgaHVtYW5zIGFuZCBmb3IgY29kZSBnZW5lcmF0b3JzLCBwcm90 b2NvbCBpbnNwZWN0b3JzLCBldGMsIGl0IGlzIG5ldmVyIGJpdHMgb24gdGhlIHdpcmUuDQpJdCBu ZWVkcyB0byBiZSBleHByZXNzZWQgc29tZWhvdyAoWE1MLCBKU09OLCBDQk9SKSwgd2hpY2ggaXMg YWtpbiB0byBCRVIvREVSLg0KWE1MLCBKU09OIGFuZCBDQk9SIGFsbCBoYXZlIHNpZ25hdHVyZSBz dGFuZGFyZHMgKG1heWJlIG1vcmUgdGhhbiBvbmUpLg0KQSBzcGVjaWZpYyBjbGFpbSBjb3VsZCB3 ZWxsIGhhdmUgYSBjb21wbGV4IHNldCBvZiBpbmZvcm1hdGlvbiB0aGF0IGl0IGNvbnZleXMgYW5k IHRoYXQgY291bGQgYmUgZXhwcmVzc2VkIGluIFlBTkcsIGJ1dCBJIGZpbmQgaXQgZGlmZmljdWx0 IHRvIGltYWdpbmUgc3VjaCBhIHRoaW5nLg0KDQoNCg== From nobody Tue Nov 12 16:30:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD2331201EF for ; Tue, 12 Nov 2019 16:30:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aRgQwWHG4ISM for ; Tue, 12 Nov 2019 16:30:40 -0800 (PST) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41CA0120044 for ; Tue, 12 Nov 2019 16:30:40 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Nov 2019 16:30:39 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,298,1569308400"; d="scan'208";a="287720077" Received: from orsmsx108.amr.corp.intel.com ([10.22.240.6]) by orsmga001.jf.intel.com with ESMTP; 12 Nov 2019 16:30:38 -0800 Received: from orsmsx151.amr.corp.intel.com (10.22.226.38) by ORSMSX108.amr.corp.intel.com (10.22.240.6) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 12 Nov 2019 16:30:38 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX151.amr.corp.intel.com ([169.254.7.41]) with mapi id 14.03.0439.000; Tue, 12 Nov 2019 16:30:38 -0800 From: "Smith, Ned" To: Michael Richardson , "rats@ietf.org" Thread-Topic: YANG fills a gap that is similar to what OpenAPI/RAML fills? Thread-Index: AQHVmbmScDZkaxQbPECVQGFRAbTVAg== Date: Wed, 13 Nov 2019 00:30:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 x-originating-ip: [10.24.15.10] Content-Type: text/plain; charset="utf-8" Content-ID: <5D6B5E98DECC72409DB3C550915890E0@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Rats] YANG fills a gap that is similar to what OpenAPI/RAML fills? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 00:30:42 -0000 WWVzLCB0aGV5IGFyZSByb3VnaCBhbmFsb2dzLiBSQU1MIGlzIGEgc2NoZW1hIChtZXRhZGF0YSkg dGhhdCBkZXNjcmliZXMgcGF5bG9hZHMgZm9yIFJFU1RmdWwgcmVxdWVzdHMgKGdldCwgcHV0LCBw dXNoLCBkZWxldGUpIGFuZCByZXNwb25zZXMuIEl0IGlzIHJvdWdobHkgQ1JVRCBzZW1hbnRpY3Mu IFRoZSBwYXlsb2FkIGlzIHdoZXJlIHRoZSBjb21wbGV4aXR5IGNhbiBoaWRlLiBQYXlsb2FkcyBj YW4gYmUgZXhwcmVzc2VkIHVzaW5nIGEgZGF0YSBtb2RlbCBsYW5ndWFnZSBzdWNoIGFzIEpTT04u IFJBTUwgYW5kIE9wZW5BUEkgb3JnYW5pemF0aW9ucyBtZXJnZWQgcmVjZW50bHkuIEkgcHJlc3Vt ZSB0aGF0IG1lYW5zIFJBTUwgYW5kIE9wZW5BUEkgd2lsbCBiZWNvbWUgb25lIC0gT3BlbkFQSS1u ZXh0Lg0KDQpJbiB0aGUgY29udGV4dCBvZiBSQVRTLCBFdmlkZW5jZSwgQXR0ZXN0YXRpb24gUmVz dWx0cyAoYW5kIG1heWJlIFJlZmVyZW5jZSBWYWx1ZXM/KSBjb3VsZCBiZSB0aGUgcGF5bG9hZHMg dG8gYSBSQU1ML09wZW5BUEkgZGVzY3JpcHRpb24gb2YgYSBSRVNUZnVsIGludGVyYWN0aW9uLiBU aGUgUkFUUyBpbnRlcmFjdGlvbiBtb2RlbHMgKGUuZy4gUGFzc3BvcnQpIGFsc28gY2FsbGVkICJt ZXNzYWdlIGZsb3ciIGNvdWxkIGJlIHJlYWxpemVkIGluIGEgUkVTVGZ1bCBwcm90b2NvbC4gDQoN CkJvdGggZGF0YSAocGF5bG9hZCkgYW5kIHByb3RvY29sIGNhbiBiZSBtb2RlbGVkIHVzaW5nIElN L0RNIGV4cHJlc3Npb25zIGJlZm9yZSBiZWluZyByZWFsaXplZCBpbiBhICd3aXJlIGZvcm1hdCcu IA0KDQpJIGhhdmVuJ3Qgc2VlbiBDRERMIHVzZWQgdG8gbW9kZWwgcHJvdG9jb2xzLiBCdXQgSSBi ZWxpZXZlIFlBTkcgY2FuIGJlIHVzZWQgZm9yIHRoYXQgcHVycG9zZS4gQm90aCBjYW4gYmUgdXNl ZCB0byBtb2RlbCBkYXRhIChwYXlsb2FkcyBvciBkYXRhIGF0IHJlc3Qgb2JqZWN0cykuIA0KDQrv u79PbiAxMS8xMi8xOSwgMDoyOCBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIE1pY2hhZWwgUmljaGFy ZHNvbiIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgbWNyQHNhbmRlbG1hbi5j YT4gd3JvdGU6DQoNCiAgICA+DQogICAgPiBZb3XigJlyZSBzYXlpbmcgWUFORyBmaWxscyBhIGdh cCB0aGF0IGlzIHNpbWlsYXIgdG8gd2hhdCBPcGVuQVBJL1JBTUwgZmlsbHM/DQogICAgPg0KICAg IA0KICAgIEkgZG9uJ3Qga25vdyB3aGF0IHRob3NlIHRoaW5ncyBhcmUuDQogICAgSSBtaWdodCBz YXkgaXQgd2FzIHNpbWlsYXIgdG8gQ09SQkEsIGJ1dCBJJ2QgYmUgZGF0aW5nIG15c2VsZiBhbmQg SQ0KICAgIG5ldmVyIHJlYWxseSBrbmV3IENPUkJBIHZlcnkgd2VsbC4NCg0K From nobody Tue Nov 12 16:56:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AECFE1200C1 for ; Tue, 12 Nov 2019 16:56:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqZrMp6wP2Qk for ; Tue, 12 Nov 2019 16:56:36 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740097.outbound.protection.outlook.com [40.107.74.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 595C7120091 for ; Tue, 12 Nov 2019 16:56:36 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NbHqbA5PEnz600ATOyv/ICn6GYt2l4uXnbDP2yIq03R75ON7vsceGo1QfUJEpyyzPcUAgRjwHX0S/8l2b/KFbpZgecqbrGxBl4c1nUcq9Q3CsZSeS3AugdotLRpmLY9aFoaVeMzm1MdGfF/fQMKE+Uj3ZdvzKjeKWecULUWjCJHsiphKHU6Y+e8G48qr41boc0q38SQYG8tDYafOzrWTBJiM9qtu2TqbQG5ZDX1tgGkmVVNW3ZiJKssYVmMQVAhnodaPHNKXlCOYHta+qJBc3Wl5io5AGMcn7T5E3+TPdAiwsbtj1xujuEk+KVgXeFy0TRCS5cQWV5JhxPApvU8GRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kwHo10WqoI1TsbtVaNCAhryr57jzyqsPIpH27xH/4jE=; b=Pn6hoqIxxmaM6Uos0gUeQ0+hG67WIYlonwxvN9lHH8rjisFSjyRhHUGZs+wFzcRR0NM01rXzj6mH5vb0+Wgdb6AimepmHC9r5cNPTQYxGRnpuhWrtiqtuWafUsnMkJbk8NsPNj2GpXCyY355R2KV3ZQLtmIv9l4SkrLsuwQWoh+s2OkqL8MKep/7PZ/kDciQ9VPyoIqdAwkUW+Q1l3s/tgoFIRO7wcXLHMouP8y2GGNWKAizTJ78XLz5oOjLRFfdjAfLAjE/dyWIcnEE+LJlk5oKHk1QkwpxhvauQY+/e399ITqj+ttWQg51wN2JLHozExUJzqz6lR1RGXYVQCYbag== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kwHo10WqoI1TsbtVaNCAhryr57jzyqsPIpH27xH/4jE=; b=IbD7VqALGTLCEjimY44hJkzBJUq8v1gdS5WSpgrgRZyDadaWKJVGmQGGA+3av3WdsH0+JIDfdkl2PxDhXz928J7OengzKetjmLfmGeli4YUD4L522oaXmP/S9lxXwfXrJJdqDVlAF+zV2/+rvb8OdgFQgKHsc3RP4IGoN2eBvE8= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0751.namprd21.prod.outlook.com (10.173.51.13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.11; Wed, 13 Nov 2019 00:56:31 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Wed, 13 Nov 2019 00:56:31 +0000 From: Dave Thaler To: Laurence Lundblade CC: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAEfhAIABOB8A Date: Wed, 13 Nov 2019 00:56:31 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <9D447837-954B-4717-B4EC-22FE9A5EF36B@island-resort.com> In-Reply-To: <9D447837-954B-4717-B4EC-22FE9A5EF36B@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-13T00:56:31.2432067Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5eec0ca3-330b-4a6f-9c24-a1fe8c673ce5; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:0:f8a5:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9abf0742-57c4-4370-526c-08d767d452b5 x-ms-traffictypediagnostic: MWHPR21MB0751: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(136003)(366004)(39860400002)(396003)(376002)(346002)(199004)(189003)(52314003)(25584004)(71200400001)(76116006)(6116002)(81156014)(66574012)(8936002)(81166006)(8676002)(52536014)(790700001)(5660300002)(66446008)(66556008)(66946007)(256004)(25786009)(10290500003)(14444005)(14454004)(478600001)(229853002)(66476007)(6436002)(236005)(6306002)(54896002)(2906002)(33656002)(64756008)(55016002)(9686003)(4326008)(6246003)(186003)(8990500004)(10090500001)(71190400001)(74316002)(7736002)(76176011)(606006)(102836004)(486006)(446003)(46003)(86362001)(99286004)(54906003)(53546011)(476003)(6916009)(6506007)(22452003)(316002)(11346002)(7696005)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0751; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: KUY2CrHSAqMnTeG75uiuZPcrxRNLWmFBwumwWYQ4kYV3LU6iNeK4bnZ+uMzlSO09fvKUH+QcLSDFBsWruBbQ/KYnae5jfVrPNqwRGLtCKxbFjXx3NWZ4aani5rSwoJ/Js9LQi6ydcXz42qJCNRunnA0wcOGKWu7gQTVRBWg51xWoMbwvfwowRCdOHR+sxgLqLl8Rx7nEOosKc7GqTiM6V5t2noAaTLjQwHGKTK2zUofShL6/cgkZ8vKBSuvp7N/mNjqDthIiXy7ofF8f+8Vl2lI+tN+oXJEIgP6qo7Nle7FMfs0m68MR97jSyUvdsjgh7saWkgruwRfXIt45Nr8oGWbPxbNBkUpweQyFqXpQa2WCgTvz02bESW4av32tXwG+baqMDVLAui2sMTXTKtgK/Ofr5ZH0zSOIByDGOGlzEhGDkpprr96efthrlKYt1ity x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB07844205580533759AF4C3FAA3760MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9abf0742-57c4-4370-526c-08d767d452b5 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 00:56:31.2727 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: M3lqiq6JRNglXPpH9hEOVXY9X6B/Ukf2ylF3nb+aNWXnGiIBEpf8/6NylxhVPyKUckq7VjcSJRtgkMWtSUnmcNgUNgbwZzUJRS7g9t3vsjo= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0751 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 00:56:40 -0000 --_000_MWHPR21MB07844205580533759AF4C3FAA3760MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QW5zd2VycyB0byBjbGFyaWZ5aW5nIHF1ZXN0aW9uc+KApg0KDQpGcm9tOiBMYXVyZW5jZSBMdW5k YmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClNlbnQ6IE1vbmRheSwgTm92ZW1iZXIgMTEs IDIwMTkgOTo1NyBQTQ0KVG86IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+DQpD YzogU21pdGgsIE5lZCA8bmVkLnNtaXRoQGludGVsLmNvbT47IE9saXZlciwgSWFuIChOb2tpYSAt IEZJL0VzcG9vKSA8aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPjsgTmFuY3kgQ2FtLVdp bmdldCAobmNhbXdpbmcpIDxuY2Ftd2luZ0BjaXNjby5jb20+OyByYXRzQGlldGYub3JnOyBIZW5r IEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPg0KU3ViamVjdDogUmU6 IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBt b2R1bGUgZHJhZnQNCg0KQ2xhcmlmeWluZyBxdWVzdGlvbnMgYW5kIGNvbW1lbnRzLg0KDQpXaGVy ZSBkaWQgdGhpcyB0YWJsZSBjb21lIGZyb20/DQoNCkkgY3JlYXRlZCBpdCBiYXNlZCBvbiBteSBp bnRlcnByZXRhdGlvbiBvZiBzdGF0ZW1lbnRzIG1hZGUgaW4gZHJhZnQtYmlya2hvbHotcmF0cy1i YXNpYy15YW5nLW1vZHVsZSBhbmQNCmRyYWZ0LWZlZG9ya293LXJhdHMtbmV0d29yay1kZXZpY2Ut YXR0ZXN0YXRpb24tMDEgKGFuZCBiYXNlZCBvbiBHdXnigJlzIHJlc3BvbnNlcyBvbiB0aGlzIGxp c3QgdG8gY29uZmlybS9jb3JyZWN0IG15IHVuZGVyc3RhbmRpbmcpLg0KT2YgY291cnNlIHNpbmNl IHRoZXJlIHNlZW1zIHRvIGJlIHNvbWUgY29uZnVzaW9uIGFib3V0IHdoYXQgWUFORyBpcywgbXkg c3RhdGVtZW50IGFib3V0IHRoZSBhcHBsaWNhYmlsaXR5IG9mIHRoZSB5YW5nIGRyYWZ0DQptYXkg b3IgbWF5IG5vdCBiZSBjb3JyZWN0LiAgIEkgd2lsbCBzYXkgSSBiZWxpZXZlIGl0IGlzIGNvcnJl Y3Qgd2hlbiB0aGUgWUFORyBtb2R1bGUgaXMgdXNlZCBieSBhbnkgcHVsbC1iYXNlZCBwcm90b2Nv bCBsaWtlDQpuZXRjb25mIG9yIHJlc3Rjb25mLCB3aGljaCBpcyB0aGUgbW9kZWwgZHJhZnQtZmVk b3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbiBkaXNjdXNzZXMgYXMgSSB1bmRl cnN0YW5kIGl0Lg0KSWYgeW91IGNhbiBlbmNhcHN1bGF0ZSB0aGUgWUFORyBpbmZvcm1hdGlvbiBp bnNpZGUgc29tZSBleGlzdGluZyBpbi1iYW5kIHByb3RvY29sIGxpa2UgODAyLjF4IHRoZW4gaXQg d291bGQgYmUgbW9yZSBhbGlnbmVkDQp3aXRoIHdoYXQgSeKAmW0gYXJndWluZyBzaW5jZSB0aGF0 IHdvdWxkIGJlIHVzYWJsZSBib3RoIHdpdGggYW5kIHdpdGhvdXQgdGhlIHByZXNlbmNlIG9mIGEg aG9zdCBmaXJld2FsbC4NCg0KSXMgYSBmaXJld2FsbCBoZXJlIGEgdHlwaWNhbCBJUC1sZXZlbCB0 aGluZyB0aGF0IGZpbHRlciBJbnRlcm5ldCB0cmFmZmljPyAoSWYgc28sIHdoeSBpcyB0aGF0IHJl bGV2YW50PykuIE9yIGlzIGl0IG1lbW9yeSBwcm90ZWN0aW9uIGJldHdlZW4gdGhlIGF0dGVzdGF0 aW9uIGhvc3QgKGUuZy4gUm9UKSBhbmQgdGhlIG90aGVyIHBhcnRzIG9mIHRoZSBzeXN0ZW0/IFNv bWV0aGluZyBlbHNlPw0KDQpZZXMgaXTigJlzIGEgdHlwaWNhbCBJUC1sZXZlbCB0aGluZy4gIChT ZWUgUkZDIDcyODggZm9yIGxvdHMgb2YgSUFCIGRpc2N1c3Npb24gb24gdGhhdCB0ZXJtLikNCkl0 4oCZcyByZWxldmFudCBiZWNhdXNlIGlmIHRoZSBvbmx5IHdheSBmb3IgYSBSZWx5aW5nIFBhcnR5 IHRvIGdldCBhdHRlc3RhdGlvbiBpbmZvcm1hdGlvbiBpcyB0byBzZXBhcmF0ZWx5IGFzayB0aGUg YXR0ZXN0ZXINCnZpYSBhIGRpZmZlcmVudCBwcm90b2NvbCB0aGF0IHRoZSBhdHRlc3RlciBoYXMg dG8gYWNjZXB0IHVuc29saWNpdGVkIGluYm91bmQgY29tbXVuaWNhdGlvbiBmb3IsIHRoZW4gYSBo b3N0IGZpcmV3YWxsIHdob3NlDQpqb2IgaXQgaXMgdG8gcHJldmVudCB1bnNvbGljaXRlZCBpbmJv dW5kIGNvbW11bmljYXRpb24gd2lsbCBvZiBjb3Vyc2UgcHJldmVudCB0aGF0IHNvbHV0aW9uIGZy b20gd29ya2luZyBhdCBhbGwuDQpXaGVyZWFzIGEgbWVjaGFuaXNtIHRoYXQgcGFzc2VzIGF0dGVz dGF0aW9uIGluZm9ybWF0aW9uIGluIGEgcHJvdG9jb2wgdGhlIEF0dGVzdGVyIGluaXRpYXRlcyBh bnl3YXksIHN1Y2ggYXMgODAyLjF4DQpvciBhbnkgc2ltaWxhciBuZXR3b3JrIGF1dGhlbnRpY2F0 aW9uIHByb3RvY29sLCBzdWNoIGNvbnZleWFuY2Ugd2lsbCB3b3JrIHdpdGggb3Igd2l0aG91dCBh IGZpcmV3YWxsLCBhbmQgc28gYmUgZmFyIG1vcmUNCmJyb2FkbHkgdXNhYmxlIGZvciBuZXR3b3Jr IGF1dGhlbnRpY2F0aW9uLCBhbmQgYmUgdXNhYmxlIGJvdGggYnkgcm91dGVycyBhbmQgbm9uLXJv dXRlcnMsIHdpdGggYSBzaW5nbGUgY29tbW9uIHNvbHV0aW9uLA0KcmF0aGVyIHRoYW4gaGF2aW5n IGEgYnVuY2ggb2YgcG9pbnQgc29sdXRpb25zLg0KDQpXaGF0IGlzIHByaXZhY3kgaGVyZT8gSXMg aXQgdGhlIHVudHJhY2thYmlsaXR5IG9mIGF0dGVzdGF0aW9ucyBiZWNhdXNlIHRoZXkgdXNlIEVD REFBLCBzaGFyZWQga2V5cyBvciBzdWNoPyBUaGF0IGlzIHByaXZhY3kgaW4gdGhlIHdlYiBicm93 c2VyIC8gR0RQUiBzZW5zZS4NCg0KQXNrIEd1eSwgaXTigJlzIGZyb20gaGlzIGRyYWZ0IOKYug0K QnV0IG15IG93biBpbnRlcnByZXRhdGlvbiBpcyB0aGF0IHByaXZhY3kgbWVhbnMgdGhlIG5ldHdv cmsgY2Fubm90IHRlbGwgdGhhdCB0aGUgc3BlY2lmaWMgZGV2aWNlIG5vdyBpcyBCb2LigJlzIG9y IEFsaWNl4oCZcyBkZXZpY2UsDQphbmQgY2Fubm90IHRlbGwgdGhhdCB0aGUgc3BlY2lmaWMgZGV2 aWNlIGlzIHRoZSBzYW1lIGRldmljZSBpdCBzYXcgeWVzdGVyZGF5Lg0KU2VlIHNlY3Rpb24gNSBv ZiBSRkMgNjk3My4NCg0KVmFyaW91cyBzb2x1dGlvbnMgYXQgdmFyaW91cyBsYXllcnMgbWF5IG9y IG1heSBub3QgcHJvdmlkZSB0aGlzIHByb3BlcnR5Lg0KRm9yIGV4YW1wbGUsIE1BQyBhZGRyZXNz IHJhbmRvbWl6YXRpb24gaXMgYW4gZXhhbXBsZSBvZiBhIHRlY2huaXF1ZSB0byB0cnkgdG8gcHJv dmlkZSB0aGlzIHByb3BlcnR5LCBhbmQNCmRyYWZ0LWlldGYtZG5zc2QtcHJpcmVxIGlzIGFuIGV4 YW1wbGUgb2YgSUVURiB3b3JrIG9uIHByb3ZpZGluZyB0aGlzIGZvciBETlMgc2VydmljZSBkaXNj b3ZlcnkuDQpJbnRlbOKAmXMgRVBJRCBhcmd1YWJseSBhZGRyZXNzZXMgdGhpcyBmb3IgdGhlaXIg c2NlbmFyaW9zLCB0aGUgZ2VuZXJhbCBwb2ludCBiZWluZyB0aGF0DQpJdCBpcyBwb3NzaWJsZSB0 byBhdHRlc3QgdG8gdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZSB3aXRob3V0IHJldmVh bGluZyBhIHVuaXF1ZSBkZXZpY2UgaWRlbnRpZmllci4NCldoZXRoZXIgdGhhdOKAmXMgYSByZXF1 aXJlbWVudCBvciBub3QgZGVwZW5kcyBvbiB0aGUgdXNlIGNhc2UsIHRoZSBhZG1pbmlzdHJhdG9y LCB0aGUgZGV2aWNlLCBldGMuDQpCdXQgZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmlj ZS1hdHRlc3RhdGlvbiBpcyBjb25zdHJhaW5lZCBvbmx5IHRvIGNhc2VzIHRoYXQgZG9u4oCZdCBu ZWVkIHByaXZhY3ksDQphbmQgbXkgcmVhZGluZyAocGVyaGFwcyBpbmNvcnJlY3QpIGlzIHRoYXQg ZHJhZnQtYmlya2hvbHotcmF0cy1iYXNpYy15YW5nLW1vZHVsZQ0KYWxzbyBoYXMgdGhhdCBzY29w ZSwgaW4gdGhhdCBpdCByZXZlYWxzIHNvbWUgZGV2aWNlIGlkZW50aWZpZXIuICAgSWYgaXQgaXMg Y2hhbmdlZCBzbyB0aGF0IGlzIG9wdGlvbmFsLA0KdGhlbiBpdHMgYXBwbGljYWJpbGl0eSB3aWRl bnMuICBJIGFtIGp1c3QgYXJndWluZyBmb3IgYnJvYWQgc29sdXRpb25zLCBub3QgbmFycm93IG9u ZXMuDQoNCk9uZSBvZiB0aGVtIGlzIG5vdCBsaWtlIHRoZSBvdGhlcjogRmlybXdhcmUuIEl0IHR5 cGljYWxseSBpc27igJl0IGlzb2xhdGVkIGFuZCBkb2VzbuKAmXQgaGF2ZSBhIENQVS4NCg0KQUxM IG9mIHRoZW0gYXJlIG5vdCBsaWtlIHRoZSBvdGhlcnMuICAgRXZlcnkgb25lIGlzIHVuaXF1ZSBp biBzb21lIHdheS4gIEJ1dCBwZW9wbGUgd2FudCBhdHRlc3RhdGlvbiBpbiBhbGwgb2YgdGhlc2Ug c2NlbmFyaW9zLg0KVGhleSBkb27igJl0IHByb3ZpZGUgdGhlIHNhbWUgZGVncmVlIG9mIHN0cmVu Z3RoLCBidXQgdGhhdCBkb2VzbuKAmXQgbWVhbiB5b3UgY2Fu4oCZdCBoYXZlIGNvbW1vbiBwcm90 b2NvbHMvdGVjaG5pcXVlcy9jbGFpbSBmb3JtYXRzL2V0Yy4NCg0KVGhlcmUgYXJlIG90aGVyIGlz b2xhdGluZyBleGVjdXRpb24gZW52aXJvbm1lbnQgYXBwcm9hY2hlcyBzdWNoIGFzIHNlcGFyYXRl IENQVXMgYW5kIHZpcnR1YWxpemF0aW9uLCBwYXJ0aWN1bGFybHkgTWljcm9zb2Z0IFZCUy4NCg0K QWdyZWUsIHRoZXJlIGFyZSBtb3JlIFJvVCB0eXBlcyBpbiBnZW5lcmFsLCBhbmQgSSBhcmd1ZSBm b3Igc29sdXRpb25zIHRoYXQgY2FuIGVhc2lseSBiZSBleHRlbmRlZCB0byBtb3JlIG9mIHRoZW0u DQooQnkg4oCcRmlybXdhcmXigJ0gSSBtZWFudCB3aGF0IHlvdSBjYWxsIOKAnHZpcnR1YWxpemF0 aW9u4oCdLCBub3QganVzdCBNaWNyb3NvZnQgVkJTIGluIHBhcnRpY3VsYXIsIGJ1dCBqdXN0IHRo ZSBub3Rpb24gdGhhdCBhIGh5cGVydmlzb3Igb3IgZmlybXdhcmUNCnByb3ZpZGVzIHNvbWUgbGV2 ZWwgb2YgYXR0ZXN0YXRpb24gZ3VhcmFudGVlcyBmb3IgaGlnaGVyIGxheWVyIGNvbXBvbmVudHMu KQ0KDQpJIGRpZG7igJl0IG1lbnRpb24gQU1EIGluIHRoZSB0YWJsZSBlaXRoZXIsIGFuZCBBTUQg aGFzIHRoaW5ncyBsaWtlIEFNRC1TRVYgYW5kIHRoZSByZWNlbnRseSBhbm5vdW5jZWQ8aHR0cHM6 Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj15cjU2U2FKXzBRSSZsaXN0PVBMYnpvUi1wTHJMNnJG OEU1eXlrbkp6clZRYUhlWXN6VFImaW5kZXg9MTYmdD0wcz4gU0VWLVNOUCwNCmFuZCBmb3IgUklT Qy1WIHRoZXJl4oCZcyBIZXgtRml2ZeKAmXMgTXVsdGlab25lLiAgRXRjLg0KDQpEYXZlDQoNCkxM DQoNCg0KDQpPbiBOb3YgMTEsIDIwMTksIGF0IDU6NDMgUE0sIERhdmUgVGhhbGVyIDxkdGhhbGVy PTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86ZHRoYWxlcj00MG1pY3Jvc29m dC5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KICAgICAgICAgICAgICAgICAgICAgICAg UmVxdWlyZW1lbnRzPw0KICAgICAgICAgKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSst LS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgfCAgUm9UICAgICAgICAgfCBIb3N0 IEZpcmV3YWxsIHwgUHJpdmFjeSB8fCAgIFNvbHV0aW9uDQogICAgICAgICB8ICBUeXBlICAgICAg ICB8ICAgRW5hYmxlZCAgICAgfCBOZWVkZWQgIHx8ICAgIFBpZWNlcw0KICAgICAgICAgKy0tLS0t LS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAg ICAgMSAgfCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAg MiAgfCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgMyAg fCAgU0dYICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNCAgfCAg U0dYICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNSAgfCAgVHJ1 c3Rab25lICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNiAgfCAgVHJ1c3Ra b25lICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNyAgfCAgVHJ1c3Rab25l ICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgOCAgfCAgVHJ1c3Rab25lICAg fCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgOSAgfCAgVFBNICAgICAgICAgfCBO byAgICAgICAgICAgIHwgTm8gICAgICB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmct bW9kdWxlLTAxDQogICAgIDEwICB8ICBUUE0gICAgICAgICB8IE5vICAgICAgICAgICAgfCBZZXMg ICAgIHx8DQogICAgIDExICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAg IHx8DQogICAgIDEyICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8 DQogICAgIDEzICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQog ICAgIDE0ICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAg IDE1ICB8U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE2 ICB8U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE3ICB8 IEZpcm13YXJlICAgICB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE4ICB8IEZp cm13YXJlICAgICB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE5ICB8IEZpcm13 YXJlICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDIwICB8IEZpcm13YXJl ICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQoNCg== --_000_MWHPR21MB07844205580533759AF4C3FAA3760MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQg NSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglw YW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0 eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNv LXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdp bi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6 MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIs c2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkFuc3dlcnMgdG8gY2xh cmlmeWluZyBxdWVzdGlvbnPigKY8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4g TGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7DQo8YnI+DQo8 Yj5TZW50OjwvYj4gTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAxOSA5OjU3IFBNPGJyPg0KPGI+VG86 PC9iPiBEYXZlIFRoYWxlciAmbHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0Ozxicj4NCjxiPkNj OjwvYj4gU21pdGgsIE5lZCAmbHQ7bmVkLnNtaXRoQGludGVsLmNvbSZndDs7IE9saXZlciwgSWFu IChOb2tpYSAtIEZJL0VzcG9vKSAmbHQ7aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tJmd0 OzsgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpICZsdDtuY2Ftd2luZ0BjaXNjby5jb20mZ3Q7 OyByYXRzQGlldGYub3JnOyBIZW5rIEJpcmtob2x6ICZsdDtoZW5rLmJpcmtob2x6QHNpdC5mcmF1 bmhvZmVyLmRlJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIENhbGwgZm9yIGFk b3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Q2xhcmlmeWluZyBxdWVzdGlvbnMgYW5k IGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5XaGVyZSBk aWQgdGhpcyB0YWJsZSBjb21lIGZyb20/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPkkgY3JlYXRlZCBpdCBiYXNlZCBvbiBteSBpbnRlcnByZXRhdGlvbiBvZiBzdGF0ZW1lbnRz IG1hZGUgaW4NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPmRyYWZ0LWJpcmtob2x6LXJhdHMtYmFzaWMteWFuZy1t b2R1bGUgYW5kDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3Jr LWRldmljZS1hdHRlc3RhdGlvbi0wMSAoYW5kIGJhc2VkIG9uIEd1eeKAmXMgcmVzcG9uc2VzIG9u IHRoaXMgbGlzdCB0byBjb25maXJtL2NvcnJlY3QgbXkgdW5kZXJzdGFuZGluZykuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPk9mIGNvdXJzZSBzaW5jZSB0aGVyZSBzZWVtcyB0byBiZSBzb21lIGNvbmZ1c2lv biBhYm91dCB3aGF0IFlBTkcgaXMsIG15IHN0YXRlbWVudCBhYm91dCB0aGUgYXBwbGljYWJpbGl0 eSBvZiB0aGUgeWFuZyBkcmFmdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5tYXkgb3IgbWF5IG5vdCBiZSBj b3JyZWN0LiZuYnNwOyZuYnNwOyBJIHdpbGwgc2F5IEkgYmVsaWV2ZSBpdCBpcyBjb3JyZWN0IHdo ZW4gdGhlIFlBTkcgbW9kdWxlIGlzIHVzZWQgYnkgYW55IHB1bGwtYmFzZWQgcHJvdG9jb2wgbGlr ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj5uZXRjb25mIG9yIHJlc3Rjb25mLCB3aGljaCBpcyB0aGUgbW9k ZWwgZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbiBkaXNjdXNz ZXMgYXMgSSB1bmRlcnN0YW5kIGl0Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPklmIHlvdSBjYW4gZW5j YXBzdWxhdGUgdGhlIFlBTkcgaW5mb3JtYXRpb24gaW5zaWRlIHNvbWUgZXhpc3RpbmcgaW4tYmFu ZCBwcm90b2NvbCBsaWtlIDgwMi4xeCB0aGVuIGl0IHdvdWxkIGJlIG1vcmUgYWxpZ25lZDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj53aXRoIHdoYXQgSeKAmW0gYXJndWluZyBzaW5jZSB0aGF0IHdvdWxkIGJl IHVzYWJsZSBib3RoIHdpdGggYW5kIHdpdGhvdXQgdGhlIHByZXNlbmNlIG9mIGEgaG9zdCBmaXJl d2FsbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPklzIGEg ZmlyZXdhbGwgaGVyZSBhIHR5cGljYWwgSVAtbGV2ZWwgdGhpbmcgdGhhdCBmaWx0ZXIgSW50ZXJu ZXQgdHJhZmZpYz8gKElmIHNvLCB3aHkgaXMgdGhhdCByZWxldmFudD8pLiBPciBpcyBpdCBtZW1v cnkgcHJvdGVjdGlvbiBiZXR3ZWVuIHRoZSBhdHRlc3RhdGlvbiBob3N0IChlLmcuIFJvVCkgYW5k IHRoZSBvdGhlciBwYXJ0cyBvZiB0aGUgc3lzdGVtPyBTb21ldGhpbmcNCiBlbHNlPzxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5ZZXMgaXTigJlzIGEgdHlwaWNhbCBJUC1sZXZl bCB0aGluZy4mbmJzcDsgKFNlZSBSRkMgNzI4OCBmb3IgbG90cyBvZiBJQUIgZGlzY3Vzc2lvbiBv biB0aGF0IHRlcm0uKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5JdOKAmXMgcmVsZXZhbnQgYmVjYXVzZSBp ZiB0aGUgb25seSB3YXkgZm9yIGEgUmVseWluZyBQYXJ0eSB0byBnZXQgYXR0ZXN0YXRpb24gaW5m b3JtYXRpb24gaXMgdG8gc2VwYXJhdGVseSBhc2sgdGhlIGF0dGVzdGVyPGJyPg0KdmlhIGEgZGlm ZmVyZW50IHByb3RvY29sIHRoYXQgdGhlIGF0dGVzdGVyIGhhcyB0byBhY2NlcHQgdW5zb2xpY2l0 ZWQgaW5ib3VuZCBjb21tdW5pY2F0aW9uIGZvciwgdGhlbiBhIGhvc3QgZmlyZXdhbGwgd2hvc2U8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+am9iIGl0IGlzIHRvIHByZXZlbnQgdW5zb2xpY2l0ZWQgaW5ib3Vu ZCBjb21tdW5pY2F0aW9uIHdpbGwgb2YgY291cnNlIHByZXZlbnQgdGhhdCBzb2x1dGlvbiBmcm9t IHdvcmtpbmcgYXQgYWxsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5XaGVyZWFzIGEgbWVjaGFuaXNtIHRo YXQgcGFzc2VzIGF0dGVzdGF0aW9uIGluZm9ybWF0aW9uIGluIGEgcHJvdG9jb2wgdGhlIEF0dGVz dGVyIGluaXRpYXRlcyBhbnl3YXksIHN1Y2ggYXMgODAyLjF4PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPm9y IGFueSBzaW1pbGFyIG5ldHdvcmsgYXV0aGVudGljYXRpb24gcHJvdG9jb2wsIHN1Y2ggY29udmV5 YW5jZSB3aWxsIHdvcmsgd2l0aCBvciB3aXRob3V0IGEgZmlyZXdhbGwsIGFuZCBzbyBiZSBmYXIg bW9yZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5icm9hZGx5IHVzYWJsZSBmb3IgbmV0d29yayBhdXRoZW50 aWNhdGlvbiwgYW5kIGJlIHVzYWJsZSBib3RoIGJ5IHJvdXRlcnMgYW5kIG5vbi1yb3V0ZXJzLCB3 aXRoIGEgc2luZ2xlIGNvbW1vbiBzb2x1dGlvbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+cmF0aGVyIHRo YW4gaGF2aW5nIGEgYnVuY2ggb2YgcG9pbnQgc29sdXRpb25zLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5XaGF0IGlzIHByaXZhY3kgaGVyZT8g SXMgaXQgdGhlIHVudHJhY2thYmlsaXR5IG9mIGF0dGVzdGF0aW9ucyBiZWNhdXNlIHRoZXkgdXNl IEVDREFBLCBzaGFyZWQga2V5cyBvciBzdWNoPyBUaGF0IGlzIHByaXZhY3kgaW4gdGhlIHdlYiBi cm93c2VyIC8gR0RQUiBzZW5zZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ QXNrIEd1eSwgaXTigJlzIGZyb20gaGlzIGRyYWZ0DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzO2NvbG9yOiMxRjQ5N0QiPko8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5CdXQgbXkg b3duIGludGVycHJldGF0aW9uIGlzIHRoYXQgcHJpdmFjeSBtZWFucyB0aGUgbmV0d29yayBjYW5u b3QgdGVsbCB0aGF0IHRoZSBzcGVjaWZpYyBkZXZpY2Ugbm93IGlzIEJvYuKAmXMgb3IgQWxpY2Xi gJlzIGRldmljZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+YW5kIGNhbm5vdCB0ZWxsIHRoYXQgdGhlIHNw ZWNpZmljIGRldmljZSBpcyB0aGUgc2FtZSBkZXZpY2UgaXQgc2F3IHllc3RlcmRheS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+U2VlIHNlY3Rpb24gNSBvZiBSRkMgNjk3My48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29sb3I6IzFG NEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYToxMDAuMCUiPlZhcmlvdXMgc29sdXRp b25zIGF0IHZhcmlvdXMgbGF5ZXJzIG1heSBvciBtYXkgbm90IHByb3ZpZGUgdGhpcyBwcm9wZXJ0 eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1jb2xvcjojMUY0RTc5 O21zby1zdHlsZS10ZXh0ZmlsbC1maWxsLWFscGhhOjEwMC4wJSI+Rm9yIGV4YW1wbGUsIE1BQyBh ZGRyZXNzIHJhbmRvbWl6YXRpb24gaXMgYW4gZXhhbXBsZSBvZiBhIHRlY2huaXF1ZSB0byB0cnkg dG8gcHJvdmlkZQ0KIHRoaXMgcHJvcGVydHksIGFuZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHls ZS10ZXh0ZmlsbC1maWxsLWNvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxw aGE6MTAwLjAlO2JhY2tncm91bmQ6I0ZGRkRGNSI+ZHJhZnQtaWV0Zi1kbnNzZC1wcmlyZXEgaXMg YW4gZXhhbXBsZSBvZiBJRVRGIHdvcmsgb24gcHJvdmlkaW5nDQogdGhpcyBmb3IgRE5TIHNlcnZp Y2UgZGlzY292ZXJ5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHlsZS10ZXh0ZmlsbC1maWxsLWNv bG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxwaGE6MTAwLjAlO2JhY2tncm91 bmQ6I0ZGRkRGNSI+SW50ZWzigJlzIEVQSUQgYXJndWFibHkgYWRkcmVzc2VzIHRoaXMgZm9yIHRo ZWlyIHNjZW5hcmlvcywgdGhlIGdlbmVyYWwNCiBwb2ludCBiZWluZyB0aGF0PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4 dGZpbGwtZmlsbC1hbHBoYToxMDAuMCU7YmFja2dyb3VuZDojRkZGREY1Ij5JdCBpcyBwb3NzaWJs ZSB0byBhdHRlc3QgdG8gdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZSB3aXRob3V0DQog cmV2ZWFsaW5nIGEgdW5pcXVlIGRldmljZSBpZGVudGlmaWVyLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21z by1zdHlsZS10ZXh0ZmlsbC1maWxsLWNvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZp bGwtYWxwaGE6MTAwLjAlO2JhY2tncm91bmQ6I0ZGRkRGNSI+V2hldGhlciB0aGF04oCZcyBhIHJl cXVpcmVtZW50IG9yIG5vdCBkZXBlbmRzIG9uIHRoZSB1c2UgY2FzZSwgdGhlDQogYWRtaW5pc3Ry YXRvciwgdGhlIGRldmljZSwgZXRjLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHlsZS10ZXh0Zmls bC1maWxsLWNvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxwaGE6MTAwLjAl O2JhY2tncm91bmQ6I0ZGRkRGNSI+QnV0DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4 dGZpbGwtZmlsbC1hbHBoYToxMDAuMCUiPmRyYWZ0LWZlZG9ya293LXJhdHMtbmV0d29yay1kZXZp Y2UtYXR0ZXN0YXRpb24gaXMgY29uc3RyYWluZWQgb25seSB0byBjYXNlcyB0aGF0IGRvbuKAmXQg bmVlZCBwcml2YWN5LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHlsZS10ZXh0ZmlsbC1maWxsLWNv bG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxwaGE6MTAwLjAlIj5hbmQgbXkg cmVhZGluZyAocGVyaGFwcyBpbmNvcnJlY3QpIGlzIHRoYXQNCjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1jb2xvcjojMUY0RTc5O21z by1zdHlsZS10ZXh0ZmlsbC1maWxsLWFscGhhOjEwMC4wJSI+ZHJhZnQtYmlya2hvbHotcmF0cy1i YXNpYy15YW5nLW1vZHVsZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHlsZS10ZXh0ZmlsbC1maWxs LWNvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxwaGE6MTAwLjAlIj5hbHNv IGhhcyB0aGF0IHNjb3BlLCBpbiB0aGF0IGl0IHJldmVhbHMgc29tZSBkZXZpY2UgaWRlbnRpZmll ci4mbmJzcDsmbmJzcDsgSWYgaXQgaXMgY2hhbmdlZA0KIHNvIHRoYXQgaXMgb3B0aW9uYWwsPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28t c3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYToxMDAuMCUiPnRoZW4gaXRzIGFwcGxpY2FiaWxpdHkg d2lkZW5zLiZuYnNwOyBJIGFtIGp1c3QgYXJndWluZyBmb3IgYnJvYWQgc29sdXRpb25zLCBub3Qg bmFycm93IG9uZXMuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHls ZS10ZXh0ZmlsbC1maWxsLWNvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxw aGE6MTAwLjAlO2JhY2tncm91bmQ6I0ZGRkRGNSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uZSBvZiB0aGVtIGlzIG5vdCBsaWtlIHRoZSBv dGhlcjogRmlybXdhcmUuIEl0IHR5cGljYWxseSBpc27igJl0IGlzb2xhdGVkIGFuZCBkb2VzbuKA mXQgaGF2ZSBhIENQVS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+QUxMIG9m IHRoZW0gYXJlIG5vdCBsaWtlIHRoZSBvdGhlcnMuJm5ic3A7Jm5ic3A7IEV2ZXJ5IG9uZSBpcyB1 bmlxdWUgaW4gc29tZSB3YXkuJm5ic3A7IEJ1dCBwZW9wbGUgd2FudCBhdHRlc3RhdGlvbiBpbiBh bGwgb2YgdGhlc2Ugc2NlbmFyaW9zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGV5IGRvbuKAmXQgcHJv dmlkZSB0aGUgc2FtZSBkZWdyZWUgb2Ygc3RyZW5ndGgsIGJ1dCB0aGF0IGRvZXNu4oCZdCBtZWFu IHlvdSBjYW7igJl0IGhhdmUgY29tbW9uIHByb3RvY29scy90ZWNobmlxdWVzL2NsYWltIGZvcm1h dHMvZXRjLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj5UaGVyZSBhcmUgb3RoZXIgaXNvbGF0aW5nIGV4ZWN1dGlvbiBlbnZpcm9ubWVudCBhcHBy b2FjaGVzIHN1Y2ggYXMgc2VwYXJhdGUgQ1BVcyBhbmQgdmlydHVhbGl6YXRpb24sIHBhcnRpY3Vs YXJseSBNaWNyb3NvZnQgVkJTLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5B Z3JlZSwgdGhlcmUgYXJlIG1vcmUgUm9UIHR5cGVzIGluIGdlbmVyYWwsIGFuZCBJIGFyZ3VlIGZv ciBzb2x1dGlvbnMgdGhhdCBjYW4gZWFzaWx5IGJlIGV4dGVuZGVkIHRvIG1vcmUgb2YgdGhlbS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+KEJ5IOKAnEZpcm13YXJl4oCdIEkgbWVhbnQgd2hhdCB5b3UgY2Fs bCDigJx2aXJ0dWFsaXphdGlvbuKAnSwgbm90IGp1c3QgTWljcm9zb2Z0IFZCUyBpbiBwYXJ0aWN1 bGFyLCBidXQganVzdCB0aGUgbm90aW9uIHRoYXQgYSBoeXBlcnZpc29yIG9yIGZpcm13YXJlPGJy Pg0KcHJvdmlkZXMgc29tZSBsZXZlbCBvZiBhdHRlc3RhdGlvbiBndWFyYW50ZWVzIGZvciBoaWdo ZXIgbGF5ZXIgY29tcG9uZW50cy4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj5JIGRpZG7igJl0IG1lbnRpb24gQU1EIGluIHRoZSB0YWJsZSBlaXRoZXIsIGFuZCBB TUQgaGFzIHRoaW5ncyBsaWtlIEFNRC1TRVYgYW5kIHRoZQ0KPGEgaHJlZj0iaHR0cHM6Ly93d3cu eW91dHViZS5jb20vd2F0Y2g/dj15cjU2U2FKXzBRSSZhbXA7bGlzdD1QTGJ6b1ItcExyTDZyRjhF NXl5a25KenJWUWFIZVlzelRSJmFtcDtpbmRleD0xNiZhbXA7dD0wcyI+DQpyZWNlbnRseSBhbm5v dW5jZWQ8L2E+IFNFVi1TTlAsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPmFuZCBmb3IgUklTQy1WIHRoZXJl 4oCZcyBIZXgtRml2ZeKAmXMgTXVsdGlab25lLiZuYnNwOyBFdGMuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5EYXZlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE5vdiAxMSwgMjAxOSwgYXQgNTo0MyBQTSwgRGF2ZSBU aGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5p ZXRmLm9yZyI+ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6IzFGNDk3 RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFJlcXVpcmVtZW50cz88L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7LS0tLS0tLS0tLS0tLS0mIzQzOy0tLS0tLS0t LS0tLS0tLSYjNDM7LS0tLS0tLS0tJiM0MzsmIzQzOy0tLS0tLS0tLS0tLS0tLTwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyBSb1QmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBIb3N0IEZpcmV3YWxsIHwgUHJpdmFj eSB8fCZuYnNwOyZuYnNwOyBTb2x1dGlvbiZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7IFR5cGUmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBFbmFibGVkJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTmVlZGVkJm5ic3A7IHx8Jm5ic3A7Jm5ic3A7Jm5ic3A7IFBp ZWNlcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q291 cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0tLS0tLS0m IzQzOy0tLS0tLS0tLSYjNDM7JiM0MzstLS0tLS0tLS0tLS0tLS08L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OkNvdXJpZXI7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDEmbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAyJm5ic3A7IHwmbmJzcDsgU0dYJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg fCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OkNvdXJpZXI7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDMm bmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5i c3A7Jm5ic3A7fCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgNCZuYnNwOyB8Jm5ic3A7IFNHWCZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNSZuYnNwOyB8Jm5ic3A7IFRy dXN0Wm9uZSZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDYmbmJzcDsgfCZuYnNwOyBUcnVz dFpvbmUmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8fDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNyZuYnNwOyB8Jm5ic3A7IFRydXN0Wm9uZSZu YnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA4Jm5ic3A7IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5i c3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyA5Jm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9kdWxlLTAx PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAxMCZuYnNwOyB8Jm5ic3A7IFRQTSZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxMSZuYnNwOyB8Jm5ic3A7IFRQTSZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsxMiZu YnNwOyB8Jm5ic3A7IFRQTSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgMTMmbmJzcDsgfFNlY3VyZUVsZW1lbnQgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3Vy aWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxNCZuYnNwOyB8U2Vj dXJlRWxlbWVudCB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8 PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAxNSZuYnNwOyB8U2VjdXJlRWxlbWVudCB8IFllcyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpD b3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxNiZuYnNwOyB8 U2VjdXJlRWxlbWVudCB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDt8fDwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgMTcmbmJzcDsgfCBGaXJtd2FyZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDE4Jm5ic3A7IHwgRmlybXdhcmUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg fCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgMTkmbmJzcDsgfCBGaXJtd2FyZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpDb3VyaWVyO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAy MCZuYnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVz Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_MWHPR21MB07844205580533759AF4C3FAA3760MWHPR21MB0784namp_-- From nobody Tue Nov 12 17:03:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AA1B1200C1 for ; Tue, 12 Nov 2019 17:03:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ADTW3Hu_43x2 for ; Tue, 12 Nov 2019 17:03:55 -0800 (PST) Received: from mx0b-00190b01.pphosted.com (mx0b-00190b01.pphosted.com [IPv6:2620:100:9005:57f::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73D39120019 for ; Tue, 12 Nov 2019 17:03:55 -0800 (PST) Received: from pps.filterd (m0050096.ppops.net [127.0.0.1]) by m0050096.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id xAD1282U022609; Wed, 13 Nov 2019 01:03:50 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-id : content-transfer-encoding : mime-version; s=jan2016.eng; bh=kmJG27CPh6bfvY+3DwnxD/adA2sUVd2j16f8DmdacY0=; b=ixfW7lFf5dagGvZcE+kfbZe/k6Q8lV8pvgBEtnnBjR7wUpkrhilGQnBTU9Tg9H1kZty1 bwWCL6LqT6944lUY0pHyv9zLYjeexf/fEiqJEzvhn0HqU4Ye8+NZfOiBaVzGlHUoJHNX h01zOGBF4sYZlC1PfmCTDW6DaIV7fsBtp+aYUGk1st96nj0p6Gq3f2rtprlVDQXl+jKk +qU7G3RQ/vR7UwTXyl9VglDX47UzuxgkhfZr8T9x5P3jvATTo6Sm4ZZqdG8ERyliBv5A MT574uXOV294poU1RS/HDsxl6wPhcqBlTgH4/Fv16vmw4UbS+EnJt0IRZbMdkyIVhY3Q OA== Received: from prod-mail-ppoint5 (prod-mail-ppoint5.akamai.com [184.51.33.60] (may be forged)) by m0050096.ppops.net-00190b01. with ESMTP id 2w5pr99hmf-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 13 Nov 2019 01:03:50 +0000 Received: from pps.filterd (prod-mail-ppoint5.akamai.com [127.0.0.1]) by prod-mail-ppoint5.akamai.com (8.16.0.27/8.16.0.27) with SMTP id xAD12O6m000998; Tue, 12 Nov 2019 17:03:49 -0800 Received: from email.msg.corp.akamai.com ([172.27.123.30]) by prod-mail-ppoint5.akamai.com with ESMTP id 2w5vabq1q6-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 12 Nov 2019 17:03:49 -0800 Received: from USMA1EX-DAG1MB5.msg.corp.akamai.com (172.27.123.105) by usma1ex-dag3mb2.msg.corp.akamai.com (172.27.123.59) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 20:03:48 -0500 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com (172.27.123.103) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 20:03:48 -0500 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com ([172.27.123.103]) by usma1ex-dag1mb3.msg.corp.akamai.com ([172.27.123.103]) with mapi id 15.00.1473.005; Tue, 12 Nov 2019 20:03:48 -0500 From: "Salz, Rich" To: Guy Fedorkow , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] my hack attempt at a RATS icon Thread-Index: AQHVmPcj26nH62/oZkm8XBet0nXK46eIdr+A///TuoA= Date: Wed, 13 Nov 2019 01:03:47 +0000 Message-ID: References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.112.55] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-11-12_10:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=524 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1910280000 definitions=main-1911130002 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-12_10:2019-11-11,2019-11-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=494 impostorscore=0 bulkscore=0 mlxscore=0 adultscore=0 suspectscore=0 malwarescore=0 spamscore=0 lowpriorityscore=0 clxscore=1011 phishscore=0 priorityscore=1501 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911130002 Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 01:03:57 -0000 SXMgdGhlIHJhdCBjbGlwLWFydCBwdWJsaWMgZG9tYWluPw0KDQo= From nobody Tue Nov 12 17:06:49 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C41E4120091 for ; Tue, 12 Nov 2019 17:06:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SEOoDAdWmPHu for ; Tue, 12 Nov 2019 17:06:44 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800092.outbound.protection.outlook.com [40.107.80.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4F80120019 for ; Tue, 12 Nov 2019 17:06:43 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=X8Grd80omvgtxp1lRB9kK8APMrv8YFYkv2+dp+8ehztMDMOvWnf8AsPVIOJRcuDsRlxL3xFAefSBIr3eBH7le8ns6gOrJa8c8/FY9nQ1ZZy7ODxbjY3G7VpXD5JEJ7iqBxOtAbJ7S/8Z0GyNv23ljLpoYU0ukpLASeTcacv0KQOTLaYErlSi9X4Q+6i/5VpsLwYaUMUwfut4sfWxJN1Cz/2+FKFRoWXYVHV0/EWpL31/d7JibGaSdBgx3/eVOm5I/rGvTX9tJGyZxafWrwyLf/wi+ykWgMt48h2yVWrbC8UzW0WEvqvLmMMti9U5tPiKkIzNUBmQgcPrj7PVrGXHEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6kkFhOy4TxuS59YgSiTsebIj0VupU5psEHvd6Eg+7tQ=; b=TCDKrCmZyT3zl5H12wszKKDEbuaHOfhouw0KvEeXiDuu0ynPJJPlAneyGTVJ8Ihi/rU4bTdH1Aysn1TlB46O49XHvCFxXdDO0U2TF72SNd9UEKWBKpwyx+isO2xs32lRVV8lAOzn7HF4mXo5ZxY7YoEnM3VbE53XgkOtuDsH8xE2LS4pah8Sv1cqkM/ySujHCjFXJuBwV9PJPQe4rkjtGj/ixCfG0MYeRd4Exbhuy1VFCMiaP9a6voOKhfGLEVueFvE4sEkgQY6s6qzr/IUfCiGFpNoYyu1PQM5Qcy9wo/5rQBA8FMT2q3S5hIU806ffch2lP+tucHBXE2CBSzU6AA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6kkFhOy4TxuS59YgSiTsebIj0VupU5psEHvd6Eg+7tQ=; b=VcUAUSmSDnWvD06kWjNnSbrEj3XAmEBdOOTvCIQxwFb70qNwx2itLYedFbUqTYBM7Qj5cJF4rLyDGUNO0DrhAHyfIzO9/7FzLunCPPaQXbVMjapSoTDGDqRCIKgB8ci/cHfSdwGHghTdCtr4pFsXq4nwtgBRO0iWGf1Ov8lVxQ0= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0800.namprd21.prod.outlook.com (10.175.142.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.11; Wed, 13 Nov 2019 01:06:42 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Wed, 13 Nov 2019 01:06:42 +0000 From: Dave Thaler To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAG6hAIAA8mAAgAABTYCAAem3UA== Date: Wed, 13 Nov 2019 01:06:41 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> In-Reply-To: <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-13T01:06:42.1510302Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=f976b92f-4ab8-49a2-a593-4f2eb951dafd; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:0:f8a5:16bc:386f:88f5] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9d89c441-91b4-4b30-82b4-08d767d5beb1 x-ms-traffictypediagnostic: MWHPR21MB0800: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5797; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(376002)(346002)(366004)(136003)(396003)(189003)(199004)(4326008)(6246003)(46003)(76176011)(446003)(7696005)(2906002)(11346002)(71200400001)(186003)(53546011)(74316002)(9686003)(102836004)(476003)(486006)(10290500003)(10090500001)(6506007)(6116002)(33656002)(790700001)(6306002)(86362001)(99286004)(55016002)(54896002)(236005)(52536014)(14454004)(66476007)(478600001)(966005)(76116006)(66946007)(71190400001)(8990500004)(229853002)(8936002)(606006)(22452003)(81166006)(66446008)(8676002)(5660300002)(66556008)(81156014)(14444005)(110136005)(256004)(25786009)(7736002)(6436002)(316002)(64756008); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0800; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: HTeYBkyHw2B95h2EisYVXRjFPCzOiARIdU5/o+pDZfNIrx0z88AldHU35XbdyjdoQ5X6jjefiXaAiBKaRuv46H0PbrKFw+PgL1FLrjpWdVh8NynJdBiY5CuCNX6nDYYyvmSInPmfOsW2fleVwprToNlHpDryzxAqTt1QhEL3drMeVR+nS0T98vaNrvmNRhExFGV2PuM+7/AAZ0ggTM97QxSwSKzPD0Yt1H1yAS/iCqX9i99u/PbUkTK8hmwSqU4BLoPBkcvXKZQXFfWmf/slVOaXBNalmG5x3n6RvSuLZwMOlRUL7/KXmORIL0udOqX17lXWX9G+HySrO3AqKLSbCRqj5hzZFFqW3WqVYzORLPrpjfdQ9CmGArT3Mtq6dzTdGSWTb2mzHjpekDm1yiZlzxo2Nlt8U740FYN5vITl5ksGlkyERBFKKGgHvp7/STfX x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784F5159696656707877EB7A3760MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9d89c441-91b4-4b30-82b4-08d767d5beb1 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 01:06:41.9164 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: VupB2w3XpTcr6h1Ki2homZpKrN4wqzCccmkHBJFR0slyYhX+3SU7v4c1lav2z7C9XOPzLP3dhrP5J5kXTyyjm0xdsu5TKHUKD61OsQykvU0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0800 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 01:06:47 -0000 --_000_MWHPR21MB0784F5159696656707877EB7A3760MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Rm9yIG15IHRob3VnaHRzIG9uIHRoZSBtb3JlIGdlbmVyYWwgdG9waWMgaGVyZSwgc2VlIGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC10aGFsZXItcmF0cy1hcmNoaXRlY3R1cmUtMDEj c2VjdGlvbi00DQoNCkhlcmXigJlzIG9uZSByZWxldmFudCBwYXJhZ3JhcGggKGJ1dCB0aGUgb3Ro ZXIgcGFyYWdyYXBocyB0aGVyZSBhcmUgcmVsZXZhbnQgdG9vKToNCiAgIEVzcGVjaWFsbHkgZm9y IGNvbnN0cmFpbmVkIG5vZGVzLCBob3dldmVyLCB0aGVyZSBpcyBhIGRlc2lyZSB0bw0KICAgbWlu aW1pemUgdGhlIGFtb3VudCBvZiBwYXJzaW5nIGNvZGUgbmVlZGVkIGluIGEgUmVseWluZyBQYXJ0 eSwgaW4NCiAgIG9yZGVyIHRvIGJvdGggbWluaW1pemUgZm9vdHByaW50IGFuZCB0byBtaW5pbWl6 ZSB0aGUgYXR0YWNrIHN1cmZhY2UNCiAgIGFyZWEuICBTbyB3aGlsZSBpdCB3b3VsZCBiZSBwb3Nz aWJsZSB0byBlbWJlZCBhIENXVCBpbnNpZGUgYSBKV1QsIG9yDQogICBhIEpXVCBpbnNpZGUgYW4g WC41MDkgZXh0ZW5zaW9uLCBldGMuLCB0aGVyZSBpcyBhIGRlc2lyZSB0byBlbmNvZGUNCiAgIHRo ZSBpbmZvcm1hdGlvbiBuYXRpdmVseSBpbiB0aGUgZm9ybWF0IHRoYXQgaXMgbmF0dXJhbCBmb3Ig dGhlDQogICBSZWx5aW5nIFBhcnR5Lg0KDQpEYXZlDQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNl c0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIExhdXJlbmNlIEx1bmRibGFkZQ0KU2VudDogTW9uZGF5 LCBOb3ZlbWJlciAxMSwgMjAxOSAxMTo1MyBBTQ0KVG86IE1pY2hhZWwgUmljaGFyZHNvbiA8bWNy K2lldGZAc2FuZGVsbWFuLmNhPg0KQ2M6IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbUmF0 c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxl IGRyYWZ0DQoNCk9uZSBtb3JlIG5vdGUgb24gdGhpcy4gSXQgc2VlbXMgd3JvbmctaGVhZGVkIHRv IHRyeSBleHByZXNzIGNsYWltcyBpbiBZQU5HLiBUbyBkbyB0aGF0IHdl4oCZZCBuZWVkIHRvIGlu dmVudCBhIFlBTkcgc2lnbmluZyBzdGFuZGFyZCAoWU9TRT8pLiBTZWVtcyBsaWtlIFlBTkcgc2hv dWxkIGJlIHRob3VnaHQgb2YgYXMgUlBDIC8gY29udmV5YW5jZSAvIHRyYW5zcG9ydCBoZXJlLCBu b3QgYXMgYSB3YXkgdG8gZm9ybWF0IGEgc2lnbmVkIGF0dGVzdGF0aW9uIHRva2VuLg0KDQpMTA0K DQoNCg0KT24gTm92IDExLCAyMDE5LCBhdCAxMTo0NyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIDxs Z2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+IHdyb3Rl Og0KDQpPbiBOb3YgMTAsIDIwMTksIGF0IDk6MjAgUE0sIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNy K2lldGZAc2FuZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PiB3cm90ZToN Cg0KDQpJIHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9ydCBvZiBh ZGRpbmcgRUFUIHN1cHBvcnQNCnRvIHRoaXMgWUFORyBwcm90b2NvbCBpcyByZWFsbHkgaGlnaC4g SXQgYSBjb3JlIHRoaW5nIHRvIGRvIHRoYXQgaGVscHMNCmJyaW5nIHRvZ2V0aGVyIHRoZSB0d28g YXR0ZXN0YXRpb24gd29ybGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVBVA0Kd29yayBoZXJlIGxl c3MgbGlrZSBzaGlwcyBpbiB0aGUgbmlnaHQuDQoNCkNhbiB5b3UgZXhwbGFpbiB3aGF0IGl0IHdv dWxkIG1lYW4gdG8gYWRkIEVBVCBzdXBwb3J0IGZvciBhIFlBTkcgbW9kdWxlPw0KDQpUaGUgRUFU IGlzIGFuIG9wYXF1ZSBjaHVuayBvZiBkYXRhIGluIFlBTkcuIEnigJltIG5vdCBhIFlBTkcgZXhw ZXJ0LCBidXQgbWF5YmUgbGlrZSB0aGlzOg0KDQpTZXJ2ZXIgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgRGV2aWNlDQpHZXRBdHRlc3RhdGlvblR5cGVzIOKAlD4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPC0gVFlQRV9UUE0sIFRZUEVfQ1dUIC8qIGJpdCBmbGFncyAqLw0K DQpHZXRBdHRlc3RhdGlvbihUWVBFX0NXVCAsIG5vbmNlKSDigJQ+DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIDzigJQgQ1dUIFRva2VuIC8qIGEgZnVsbCBzaWduZWQgdG9rZW4gKi8N Cg0KSSBhc3N1bWUgWUFORyBjYW4gY2Fycnkgb3BhcXVlIGJpbmFyeSBkYXRhIG9mIG1vZGVyYXRl IHNpemUuDQoNClRoZSB5YW5nIG1vZHVsZSBpbmZvcm1hdGlvbiBtb2RlbCB3b3VsZCBoYXZlIGFu IGVsZW1lbnQgZm9yIGEgbm9uY2UgYW5kIGZvciBhbiBvcGFxdWUgRUFULiBJdCB3b3VsZCBub3Qg ZGVzY3JpYmUgYW55IGludGVybmFscyBvZiB0aGUgRUFULiBUaGUgaW5mb3JtYXRpb24gbW9kZWwg Zm9yIHRoZSBFQVQgaXMgc2VwYXJhdGUgaW4gdGhlIEVBVCBkb2N1bWVudC4NCg0KTEwNCg0KDQoN Cg0K --_000_MWHPR21MB0784F5159696656707877EB7A3760MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5N c29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9s bG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1z b25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFs dDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87 DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRp bWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIg Lz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVs YXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8 L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJF Ti1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PkZvciBteSB0aG91Z2h0cyBvbiB0aGUgbW9yZSBnZW5lcmFsIHRvcGljIGhlcmUsIHNlZQ0KPGEg aHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXRoYWxlci1yYXRzLWFyY2hp dGVjdHVyZS0wMSNzZWN0aW9uLTQiPg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LXRoYWxlci1yYXRzLWFyY2hpdGVjdHVyZS0wMSNzZWN0aW9uLTQ8L2E+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IZXJl4oCZcyBvbmUgcmVsZXZhbnQgcGFyYWdy YXBoIChidXQgdGhlIG90aGVyIHBhcmFncmFwaHMgdGhlcmUgYXJlIHJlbGV2YW50IHRvbyk6PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOyZu YnNwOyBFc3BlY2lhbGx5IGZvciBjb25zdHJhaW5lZCBub2RlcywgaG93ZXZlciwgdGhlcmUgaXMg YSBkZXNpcmUgdG88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2s7YmFja2dyb3VuZDp3 aGl0ZSI+Jm5ic3A7Jm5ic3A7IG1pbmltaXplIHRoZSBhbW91bnQgb2YgcGFyc2luZyBjb2RlIG5l ZWRlZCBpbiBhIFJlbHlpbmcgUGFydHksIGluPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJs YWNrO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOyZuYnNwOyBvcmRlciB0byBib3RoIG1pbmltaXpl IGZvb3RwcmludCBhbmQgdG8gbWluaW1pemUgdGhlIGF0dGFjayBzdXJmYWNlPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OkNvbnNvbGFzO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOyZuYnNwOyBhcmVh LiZuYnNwOyBTbyB3aGlsZSBpdCB3b3VsZCBiZSBwb3NzaWJsZSB0byBlbWJlZCBhIENXVCBpbnNp ZGUgYSBKV1QsIG9yPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6 d2hpdGUiPiZuYnNwOyZuYnNwOyBhIEpXVCBpbnNpZGUgYW4gWC41MDkgZXh0ZW5zaW9uLCBldGMu LCB0aGVyZSBpcyBhIGRlc2lyZSB0byBlbmNvZGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 YmxhY2s7YmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7Jm5ic3A7IHRoZSBpbmZvcm1hdGlvbiBuYXRp dmVseSBpbiB0aGUgZm9ybWF0IHRoYXQgaXMgbmF0dXJhbCBmb3IgdGhlPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOyZuYnNwOyBSZWx5aW5n IFBhcnR5Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5EYXZlPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBSQVRTICZsdDtyYXRzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7 DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkxhdXJlbmNlIEx1bmRibGFkZTxicj4NCjxiPlNlbnQ6PC9i PiBNb25kYXksIE5vdmVtYmVyIDExLCAyMDE5IDExOjUzIEFNPGJyPg0KPGI+VG86PC9iPiBNaWNo YWVsIFJpY2hhcmRzb24gJmx0O21jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2EmZ3Q7PGJyPg0KPGI+ Q2M6PC9iPiByYXRzQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbUmF0c10gQ2Fs bCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T25lIG1vcmUg bm90ZSBvbiB0aGlzLiBJdCBzZWVtcyB3cm9uZy1oZWFkZWQgdG8gdHJ5IGV4cHJlc3MgY2xhaW1z IGluIFlBTkcuIFRvIGRvIHRoYXQgd2XigJlkIG5lZWQgdG8gaW52ZW50IGEgWUFORyBzaWduaW5n IHN0YW5kYXJkIChZT1NFPykuIFNlZW1zIGxpa2UgWUFORyBzaG91bGQgYmUgdGhvdWdodCBvZiBh cyBSUEMgLyBjb252ZXlhbmNlIC8gdHJhbnNwb3J0IGhlcmUsIG5vdCBhcyBhIHdheSB0byBmb3Jt YXQNCiBhIHNpZ25lZCBhdHRlc3RhdGlvbiB0b2tlbi4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpw PjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE5vdiAxMSwgMjAxOSwgYXQg MTE6NDcgQU0sIExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xh bmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBOb3YgMTAsIDIwMTks IGF0IDk6MjAgUE0sIE1pY2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1jciYj NDM7aWV0ZkBzYW5kZWxtYW4uY2EiPm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2E8L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0O2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 b3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Via2l0LXRleHQt c2l6ZS1hZGp1c3Q6IGF1dG87LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4O3dvcmQtc3Bh Y2luZzowcHgiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0K SSB0aGluayB0aGUgdmFsdWUgYWRkIHRvIHRoZSBsYXJnZXIgUkFUUyBlZmZvcnQgb2YgYWRkaW5n IEVBVCBzdXBwb3J0PGJyPg0KdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJlYWxseSBoaWdoLiBJ dCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwczxicj4NCmJyaW5nIHRvZ2V0aGVyIHRoZSB0 d28gYXR0ZXN0YXRpb24gd29ybGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVBVDxicj4NCndvcmsg aGVyZSBsZXNzIGxpa2Ugc2hpcHMgaW4gdGhlIG5pZ2h0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxi cj4NCkNhbiB5b3UgZXhwbGFpbiB3aGF0IGl0IHdvdWxkIG1lYW4gdG8gYWRkIEVBVCBzdXBwb3J0 IGZvciBhIFlBTkcgbW9kdWxlPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBFQVQgaXMgYW4gb3Bh cXVlIGNodW5rIG9mIGRhdGEgaW4gWUFORy4gSeKAmW0gbm90IGEgWUFORyBleHBlcnQsIGJ1dCBt YXliZSBsaWtlIHRoaXM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj5TZXJ2ZXIgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgRGV2aWNlPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPkdldEF0dGVzdGF0aW9uVHlwZXMg4oCUJmd0 Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj4mbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJmx0Oy0gVFlQRV9UUE0sIFRZUEVf Q1dUIC8qIGJpdCBmbGFncyAqLzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIi PkdldEF0dGVzdGF0aW9uKFRZUEVfQ1dUPC9zcGFuPiZuYnNwOywmbmJzcDs8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q291cmllciI+bm9uY2UpJm5ic3A74oCUJmd0OyZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj4mbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJmx0O+KAlCBDV1QgVG9rZW4gLyogYSBmdWxsIHNpZ25l ZCB0b2tlbiAqLzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYXNzdW1lIFlBTkcgY2FuIGNhcnJ5IG9wYXF1ZSBiaW5h cnkgZGF0YSBvZiBtb2RlcmF0ZSBzaXplLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSB5YW5nIG1vZHVsZSBpbmZvcm1hdGlv biBtb2RlbCB3b3VsZCBoYXZlIGFuIGVsZW1lbnQgZm9yIGEgbm9uY2UgYW5kIGZvciBhbiBvcGFx dWUgRUFULiBJdCB3b3VsZCBub3QgZGVzY3JpYmUgYW55IGludGVybmFscyBvZiB0aGUgRUFULiBU aGUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIHRoZSBFQVQgaXMgc2VwYXJhdGUgaW4gdGhlIEVBVCBk b2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_MWHPR21MB0784F5159696656707877EB7A3760MWHPR21MB0784namp_-- From nobody Tue Nov 12 19:09:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 393F51200F4 for ; Tue, 12 Nov 2019 19:09:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8qkzjsQjxdC for ; Tue, 12 Nov 2019 19:09:51 -0800 (PST) Received: from mx0a-00190b01.pphosted.com (mx0a-00190b01.pphosted.com [IPv6:2620:100:9001:583::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45FB11200CD for ; Tue, 12 Nov 2019 19:09:51 -0800 (PST) Received: from pps.filterd (m0050093.ppops.net [127.0.0.1]) by m0050093.ppops.net-00190b01. (8.16.0.42/8.16.0.42) with SMTP id xAD37JKS000665 for ; Wed, 13 Nov 2019 03:09:50 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=jan2016.eng; bh=WGcDeayG7XaGFUmrWuaKDrSUVRZf+LdAneAIsSm6QbI=; b=WsMVPDAHmXzp+9MIyyrFvkxm1oNVgzn3YquP12loCxqJjYyhND81enJqTyBJZ8/R3O8N YZf1dHrWctx1sjiJSkCl78KdWPiiurUkhmNsBJf7ZbhMkLElbilLCpflLAL8mhuj8VBz cHwPjWXB0r34Nsj/MDbJtew5R671m3GDnuTZj67lB7YoupLFipNA77dWiNUJGZFS58HU H4o1j7AB/pfhbht8CNpaSysZ1zhvOvxrPWa0hWk/KFlz4Gj3p9x92LIdMMapBOrKj3S3 FlcwBAfSptqNs9V+irxkhE4UoRUmyEQfAHDk+K3gStzkxgTZaVkRdv2eo2itL0ZRkQsP HA== Received: from prod-mail-ppoint3 (prod-mail-ppoint3.akamai.com [96.6.114.86] (may be forged)) by m0050093.ppops.net-00190b01. with ESMTP id 2w5p6kjp0q-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 13 Nov 2019 03:09:50 +0000 Received: from pps.filterd (prod-mail-ppoint3.akamai.com [127.0.0.1]) by prod-mail-ppoint3.akamai.com (8.16.0.27/8.16.0.27) with SMTP id xAD31wQ5031318 for ; Tue, 12 Nov 2019 22:09:49 -0500 Received: from email.msg.corp.akamai.com ([172.27.123.31]) by prod-mail-ppoint3.akamai.com with ESMTP id 2w5sp22qes-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT) for ; Tue, 12 Nov 2019 22:09:49 -0500 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com (172.27.123.103) by usma1ex-dag1mb2.msg.corp.akamai.com (172.27.123.102) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 12 Nov 2019 22:09:47 -0500 Received: from USMA1EX-DAG1MB3.msg.corp.akamai.com ([172.27.123.103]) by usma1ex-dag1mb3.msg.corp.akamai.com ([172.27.123.103]) with mapi id 15.00.1473.005; Tue, 12 Nov 2019 22:09:47 -0500 From: "Salz, Rich" To: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoICAAAAtIIAANPyA Date: Wed, 13 Nov 2019 03:09:47 +0000 Message-ID: <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.113.49] Content-Type: multipart/alternative; boundary="_000_71173EC8A16747B9B0F105759D59890Bakamaicom_" MIME-Version: 1.0 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2019-11-12_10:, , signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 spamscore=0 mlxscore=0 mlxlogscore=450 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1910280000 definitions=main-1911130025 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-12_10:2019-11-11,2019-11-12 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 impostorscore=0 bulkscore=0 malwarescore=0 adultscore=0 priorityscore=1501 lowpriorityscore=0 phishscore=0 mlxlogscore=424 clxscore=1015 suspectscore=0 mlxscore=0 spamscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911130026 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 03:09:53 -0000 --_000_71173EC8A16747B9B0F105759D59890Bakamaicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 V2hlbiBJIHNlZSBkaXNjdXNzaW9ucyB1c2luZyB0ZXJtcyBsaWtlIHNlcmlhbGl6YXRpb24gYW5k IGluZm9ybWF0aW9uIG1vZGVsLCBJIHN0YXJ0IHRvIGdldCB0cmF1bWF0aXplZCwgdGhpbmtpbmcg b2Ygd2hhdCBoYXBwZW5lZCB3aGVuIFhNTCB3YXMgc3dpdGNoZWQgZnJvbSBhIHN5bnRheCB0byBh biDigJxpbmZvc2V04oCdIGFuZCB0b29rIFhNTCBTY2hlbWEsIFdTREwsIHdlYiBzZXJ2aWNlcywg YW5kIGV2ZXJ5dGhpbmcgZWxzZSBkb3duIHdpdGggaXQuDQoNClRoZSBJRVRGIGlzIGFib3V0IOKA nGJpdHMgb24gdGhlIHdpcmXigJ0gYW5kIHRoZSBzZW1hbnRpY3Mgb2YgdGhvc2UgYml0cy4NCg== --_000_71173EC8A16747B9B0F105759D59890Bakamaicom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNv UGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IENoYXIiOw0KCW1zby1t YXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3Jt YWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI0DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0 LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4 LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3Jk U2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0K QGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NTc5NTYzMDg4Ow0KCW1zby1saXN0LXR5cGU6aHlicmlk Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczo0NjczMzA4NzAgNjc2OTg3MDUgNjc2OTg3MTMgNjc2 OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3 MTU7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC10ZXh0OiIlMVwpIjsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxl dmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQt aW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93 ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7 fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6 bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdp bi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+DQo8 L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2hlbiBJIHNl ZSBkaXNjdXNzaW9ucyB1c2luZyB0ZXJtcyBsaWtlIHNlcmlhbGl6YXRpb24gYW5kIGluZm9ybWF0 aW9uIG1vZGVsLCBJIHN0YXJ0IHRvIGdldCB0cmF1bWF0aXplZCwgdGhpbmtpbmcgb2Ygd2hhdCBo YXBwZW5lZCB3aGVuIFhNTCB3YXMgc3dpdGNoZWQgZnJvbSBhIHN5bnRheCB0byBhbiDigJxpbmZv c2V04oCdIGFuZCB0b29rIFhNTCBTY2hlbWEsIFdTREwsIHdlYiBzZXJ2aWNlcywgYW5kIGV2ZXJ5 dGhpbmcNCiBlbHNlIGRvd24gd2l0aCBpdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIElF VEYgaXMgYWJvdXQg4oCcYml0cyBvbiB0aGUgd2lyZeKAnSBhbmQgdGhlIHNlbWFudGljcyBvZiB0 aG9zZSBiaXRzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_71173EC8A16747B9B0F105759D59890Bakamaicom_-- From nobody Tue Nov 12 20:08:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 327F81200FE for ; Tue, 12 Nov 2019 20:08:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OjgPr3zWZC3i for ; Tue, 12 Nov 2019 20:08:54 -0800 (PST) Received: from p3plsmtpa06-08.prod.phx3.secureserver.net (p3plsmtpa06-08.prod.phx3.secureserver.net [173.201.192.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B0DC120090 for ; Tue, 12 Nov 2019 20:08:54 -0800 (PST) Received: from [10.141.0.146] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UjxcivstCfTtLUjxdiszEx; Tue, 12 Nov 2019 21:08:53 -0700 From: Laurence Lundblade Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> Date: Tue, 12 Nov 2019 20:08:52 -0800 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfIG1tpVBYwz7aGlPwi4bdzW+WhFu/8FdUglLDHj3xvPZr1biRo7kRk70fAQcmq5uBO+cWV4DxMqNDcs6RaST5uN9v7znKsir1nSv3x+Ften73Hud+zxz RGSpTqIv0KtB+Cd2OUPhKKSksPFw0TitTTQhyKclOfyRUtOXd8hXTSr3 Archived-At: Subject: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 04:08:56 -0000 Here=E2=80=99s evidence that remote TPM attestation is not just for = routers and is used in non-YANG environments: = https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-key-attestation-= v2.0-ps-20150904.html#tpm-attestation. In non-TPM FIDO attestation, the whole attester is in the TEE or such. = In TPM FIDO attestation only the key storage and signing is in the TPM. = There is reliance on components outside of the TPM for the security of = the attestation, so it isn=E2=80=99t the preferred form. This is a reason to consider the TPM Token I=E2=80=99ve mentioned. It = would allow remote TPM-based attestation to be used anywhere there is a = TPM for use cases beyond routers and YANG. LL= From nobody Tue Nov 12 23:12:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20048120851 for ; Tue, 12 Nov 2019 23:12:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bG8vGRf_xo4I for ; Tue, 12 Nov 2019 23:12:48 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30050.outbound.protection.outlook.com [40.107.3.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63B7A12001E for ; Tue, 12 Nov 2019 23:12:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dP6HqAln9RlZpC3so6QN+QPjABUcWNYUvyhBry3gmtoi5GOIJygwQltbO1a+OcPUzlshm8rdlVVqZcnxItR0Gtj0gnr74Rg4P0yxubYtFpyoQsSTy/G8UGnOMctTs65x3kF8I0ItOqaP0afxJAx6UCWFon23D21W4+zZjX+w0hQLFNS0aTT+/polXeLK85l3R7WPXbA08M/nQ/EWqRW2AIGBdG8tAg9v1b8oZXSFDfb0kDHtcPj+B0kTKNSMoV+l6ML6WuJSJE9w9yeYQq6cQOv2FazV5MYo5zVwu9vQGZfAogrLgs1+FOhsvwdsL7eqjrbiGi6sJQc0Irqyq5Erww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3u4lBEe/1wpAj1g7FcB3Erc/BU/V4ohXC9EsfnzgpqI=; b=HumZCnohvRxjXfhPV042c9Syuh4WGLrstloHENP/pszIMkUZrEwgT1Tgi5FxA7pogjtW6uLAPEWMBruQo4E1WXVQKG6ka72ilnYAVedijtQo9yokYyuZSKxmvDZHcuAqhm4BgTzBoxuSqzDp+rbgTAe5/raVJtPzxKVuIxxmdAsWSUzc3FqFd8pl6JbZMnlTzJ29Bb6NAZPIyAQG5pVWC/RIY9SexwUQR1I2Q1s/xshy4tF+FeNYwPUr6g2eOUuP5j5FLIe+2WsQKvt4DUSXniamZyoBuSOG704m1iy+buEW8JAj600YJQkJ5wzd5xzoEGtMsy0yUp/CHQcC4ahaIw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3u4lBEe/1wpAj1g7FcB3Erc/BU/V4ohXC9EsfnzgpqI=; b=SR4KvOwaxKK8d5itNvzP/uB+DSZhpULYCJQmzde+mts54ibe7TK6SdgwZ6hH0xOUv5+kRkOUgyxdHUbCJHSuBmDoOJ9XMQOncJX3Srpm+N0HHga8LzqA9kRu7mt3R8DxWAll3opHwAd+X5iMrNu1MFpALUzbkcg3AYkyoXDcG44= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0419.EURP190.PROD.OUTLOOK.COM (10.161.62.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.24; Wed, 13 Nov 2019 07:12:45 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 07:12:45 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: "Salz, Rich" CC: "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoICAAAAtIIAANPyAgABD4QA= Date: Wed, 13 Nov 2019 07:12:45 +0000 Message-ID: <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> In-Reply-To: <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: FRYP281CA0007.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10::17) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 128572c6-1d4c-43d9-1408-08d76808e1c1 x-ms-traffictypediagnostic: AM5P190MB0419: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39850400004)(346002)(136003)(366004)(396003)(376002)(199004)(189003)(99286004)(6486002)(85182001)(8676002)(1076003)(81166006)(6512007)(316002)(81156014)(786003)(25786009)(43066004)(64756008)(6306002)(66446008)(66556008)(66476007)(66946007)(11346002)(86362001)(85202003)(305945005)(446003)(7736002)(6246003)(186003)(46003)(476003)(52116002)(6916009)(4326008)(76176011)(2906002)(102836004)(386003)(229853002)(486006)(3450700001)(478600001)(6506007)(5660300002)(71190400001)(71200400001)(14454004)(8936002)(6116002)(256004)(6436002)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0419; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 88vHKC54I1av28LXQEWSGkihu0LwPS5y0txhLhPoKAXIrFng3psBGPSgkZ0CVmRZjiZQrdMRGDjRREjNHpCN8cEibAWpwxC+AkFsxi/VaFMlIUc8Bal+VNeWBNeSrM4ho0ABX8FukKiMBdUKXT+NwU5Ar9ZEtHj4s1vtGQLXIDMGp5KnL+6AME0YtrKtJ6gknpHCPQbX7B1Z6pjFAHGhdVoZShR1BEXCUQgvPAkgbAXtLiidR4TVJHIXFkcJAILSufyRliS39ksP/zaMy0pXI8rvpi3QS2t5+4fyFu2ngKElpzOOcjyk7kVW+wfO8faIj8KVg90zhivfDPvISa8vgewkYZFyED9x4zfklnVbPs9TJxt+Gp10pcLqODKKOnn2WX0sHzMCt+rdpNYX2NfRd1Z9rJwzigRo+60B0OjiFYCdWMn2awKLIAZnxorOZ7OS0kivDxyuy/MTF+d78WI9wusUnlP198mqlDHyYZXj/+g= Content-Type: text/plain; charset="utf-8" Content-ID: <794CCCF9DC56D443810CBA28A77C9A3D@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 128572c6-1d4c-43d9-1408-08d76808e1c1 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 07:12:45.4987 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Mb8N2nSCDmyJ5fu5iDg3APC/rss69enbkNYrHZxzgFbpL9Lo1efqu9BHlkdOgs7KDErxC1acAD1xaxAamtZ15OUF/3BEO2ScIJ3hSSRJycs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0419 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 07:12:51 -0000 T24gV2VkLCBOb3YgMTMsIDIwMTkgYXQgMDM6MDk6NDdBTSArMDAwMCwgU2FseiwgUmljaCB3cm90 ZToNCj4gV2hlbiBJIHNlZSBkaXNjdXNzaW9ucyB1c2luZyB0ZXJtcyBsaWtlIHNlcmlhbGl6YXRp b24gYW5kIGluZm9ybWF0aW9uIG1vZGVsLCBJIHN0YXJ0IHRvIGdldCB0cmF1bWF0aXplZCwgdGhp bmtpbmcgb2Ygd2hhdCBoYXBwZW5lZCB3aGVuIFhNTCB3YXMgc3dpdGNoZWQgZnJvbSBhIHN5bnRh eCB0byBhbiDigJxpbmZvc2V04oCdIGFuZCB0b29rIFhNTCBTY2hlbWEsIFdTREwsIHdlYiBzZXJ2 aWNlcywgYW5kIGV2ZXJ5dGhpbmcgZWxzZSBkb3duIHdpdGggaXQuDQo+DQoNCkkgYmVsaWV2ZSB0 aGF0IG5vdCBhZ3JlZWluZyBvbiB0ZXJtaW5vbG9neSBjYXVzZXMgbWlzdW5kZXJzdGFuZGluZ3MN CmFuZCB1bHRpbWF0ZWx5IGRlbGF5cyBwcm9ncmVzcy4NCg0KQ29uY2VybmluZyBJTXMgYW5kIERN cywgaGVyZSBpcyB0aGUgKGV4dGVuZGVkKSBSRkMgMzQ0NCB2aWV3IHRoYXQNCmlzIGNvbW1vbmx5 IHVzZWQgYnkgc29tZSBwYXJ0cyBvZiB0aGUgSUVURjoNCg0KICAgICAgICAgICAgICAgICBJTSAg ICAgICAgICAgICAgIC0tPiBjb25jZXB0dWFsL2Fic3RyYWN0IG1vZGVsDQogICAgICAgICAgICAg ICAgIHwgICAgICAgICAgICAgICAgICAgIGZvciBkZXNpZ25lcnMgYW5kIG9wZXJhdG9ycw0KICAg ICAgKy0tLS0tLS0tLS0rLS0tLS0tLS0tKw0KICAgICAgfCAgICAgICAgICB8ICAgICAgICAgfA0K ICAgICAgRE0gICAgICAgICBETSAgICAgICAgRE0gICAgIC0tPiBjb25jcmV0ZS9kZXRhaWxlZCBt b2RlbA0KICAgICAgfCAgICAgICAgICB8ICAgICAgICAgfCAgICAgICAgICBmb3IgaW1wbGVtZW50 b3JzDQogICArLS0rLS0rICAgKy0tKy0tKy0tKyAgICB8DQogICB8ICAgICB8ICAgfCAgfCAgfCAg fCAgICB8DQogICBFTiAgICBFTiAgRU4gRU4gRU4gRU4gICBFTiAgICAgLS0+IGVuY29kaW5ncyAv IHJlcHJlc2VudGF0aW9uIGZvcm1hdHMNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgZm9yIGluc3RhbmNlIGRhdGENCldpdGggWUFORywgd2UgaGF2ZToNCg0KICAgICAgICAg IFlBTkcgICAgICAgICAgICAgICAgICAgIC0tPiBjb25jcmV0ZS9kZXRhaWxlZCBtb2RlbA0KICAg ICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICBmb3IgaW1wbGVtZW50b3JzDQogICAg ICArLS0tLS0rLS0tLS0rDQogICAgICB8ICAgICB8ICAgICB8DQogICAgIFhNTCAgSlNPTiBbQ0JP Ul0gICAgICAgICAgICAgLS0+IGVuY29kaW5ncyAvIHJlcHJlc2VudGF0aW9uIGZvcm1hdHMNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZm9yIGluc3RhbmNlIGRhdGENCg0K SU1zIHRoYXQgYXJlIG1vcmUgYWJzdHJhY3QgdGhhbiBZQU5HIEkgaGF2ZSBzZWVuIHdyaXR0ZW4g aW5mb3JtYWxseQ0KKGRpYWdyYW1zIHBsdXMgdGV4dCkgb3IgdXNpbmcgYWQtaG9jIHNlbWktZm9y bWFsIG5vdGF0aW9ucy4NCg0KL2pzDQoNCi0tIA0KSnVlcmdlbiBTY2hvZW53YWVsZGVyICAgICAg ICAgICBKYWNvYnMgVW5pdmVyc2l0eSBCcmVtZW4gZ0dtYkgNClBob25lOiArNDkgNDIxIDIwMCAz NTg3ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8IDI4NzU5IEJyZW1lbiB8IEdlcm1hbnkNCkZheDog ICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAgPGh0dHBzOi8vd3d3LmphY29icy11bml2ZXJzaXR5 LmRlLz4NCg== From nobody Wed Nov 13 02:59:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB525120072 for ; Wed, 13 Nov 2019 02:59:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mxj4dah_D9aw for ; Wed, 13 Nov 2019 02:59:34 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AEA7712003F for ; Wed, 13 Nov 2019 02:59:34 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 86DA73897A for ; Wed, 13 Nov 2019 05:56:27 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: Date: Wed, 13 Nov 2019 18:59:30 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 10:59:37 -0000 On 2019-11-13 4:21 a.m., Laurence Lundblade wrote: > Here’s three possible versions of the RATS YANG Module: > 2) As is today + EAT transport. There’s separation of transport from > token format for EAT, but not for TPM attestation So, this YANG model (which an abstraction of an RPC mechanism of RESTCONF, etc.) would have one or more leaves from which a token could be collected by a read operation. Is it arbitrary or specific? Just whatever token the device happens to be able to provide?  JSON/JWT or CBOR/CWT? Both? Or do you want a series of leafs, one per claim type, which returns an EAT when that claim filled in? Do you want to support combinations of claims?  How is a freshness nonce provided for the EAT?  Do we write to another leaf? If so, are there other any other leafs that are writeable?  Will you write the security considerations section for that part? Is it okay for the people who'd like to do things with TPM devices to wait an extra 2-3 years while we sort these things out? > 3) Full separation of transport from attestation token.  The RATS YANG > modules focuses on transport > > I want a commitment to 2) or 3) for adoption. I agree that RATS should > support some YANG-based means for attestation for routers. Wanting to have a transport for EAT tokens doesn't mean that we have to have the TPM YANG model support EAT. It's like you are demanding that the *HTTP* protocol spec must support youtube URLs. From nobody Wed Nov 13 03:04:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E4EF120072 for ; Wed, 13 Nov 2019 03:04:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vsohj-xserSP for ; Wed, 13 Nov 2019 03:04:47 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE29F12003F for ; Wed, 13 Nov 2019 03:04:46 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id B28FD3897A; Wed, 13 Nov 2019 06:01:37 -0500 (EST) To: Laurence Lundblade Cc: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> From: Michael Richardson Message-ID: <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> Date: Wed, 13 Nov 2019 19:04:40 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:04:49 -0000 On 2019-11-13 1:56 a.m., Laurence Lundblade wrote: > > Got that one totally wrong. I even knew everything you describe about YANG. > > I still think it is better if we just stick to EAT / CWT / JWT claims described with CDDL as the way we define claims in RATS, except for a few TPM-specific claims. Nothing I've said is opposed to that. I rather agree.  I don't think that EAT is complex enough to require a definition in YANG. But, that also has nothing to do with whether we'd need a YANG signing standard if we defined them in YANG. We wouldn't, because we'd be signing JSON, CBOR (or XML if someone insisted) using JSOE and COSE. From nobody Wed Nov 13 03:12:03 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B9D21200CD for ; Wed, 13 Nov 2019 03:12:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ejf7CAh_WEq1 for ; Wed, 13 Nov 2019 03:12:00 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37D3A12003F for ; Wed, 13 Nov 2019 03:11:59 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 622FC3897A for ; Wed, 13 Nov 2019 06:08:52 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: <489d5335-74be-9298-d48d-1051a90cbbda@sandelman.ca> Date: Wed, 13 Nov 2019 19:11:55 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:12:02 -0000 On 2019-11-12 4:28 p.m., Henk Birkholz wrote: > Hi Laurence, > > maybe I lack the required background knowledge about YANG here. My > question is the following: Is it in-scope for a YANG modules (which > typically have a well-defined semantic scope for each statement) to > convey opaque EATs via a single statement. Or is it necessary to > create YANG statements for each well-defined EAT Claim? Mostly, i want to answer that: It's not a well formed question. Yes, we can have a YANG leaf called "eat" that is of type binary, and returns some serialization of a EAT. But, I don't think it does anything at all useful. Yes, we can define each claim type in terms of YANG (describing the data in YANG types, so "uptime" would have some kind of interval value, and boottime would have a date type), and then we could use YANG groupings to build composite sets of claims that when serialized as a group, would represent a single token.  We have to do this for each use case I think.  So users of each use case would wind up with their own profile document, and we'd probably share no code at all. With care and a lot of fore-thought the result could be less destructive than the disaster that X500->509->509v3->PKIX->six-broken-profiles-for-specific-applications has given us.  Less destructive in the way that hurricanes tend to be less destructive than asteroid strikes. I have no interest in going that way. From nobody Wed Nov 13 03:14:05 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF85C12003F for ; Wed, 13 Nov 2019 03:14:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oGVO9D3d7Z7W for ; Wed, 13 Nov 2019 03:14:01 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FD301200CD for ; Wed, 13 Nov 2019 03:14:01 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id CB42A3897A for ; Wed, 13 Nov 2019 06:10:54 -0500 (EST) To: rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: Date: Wed, 13 Nov 2019 19:13:54 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="oOo423RDwAeywLeLvUJQmfFWpaY7JF7WA" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:14:04 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --oOo423RDwAeywLeLvUJQmfFWpaY7JF7WA Content-Type: multipart/mixed; boundary="U3yMGxEbCyVKEN7MsZ5ZULoH3scZf0VCe"; protected-headers="v1" From: Michael Richardson To: rats@ietf.org Message-ID: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> In-Reply-To: <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> --U3yMGxEbCyVKEN7MsZ5ZULoH3scZf0VCe Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US On 2019-11-13 2:35 a.m., Laurence Lundblade wrote: > An EAT would show up as a single statement in the RATS YANG module. > The EAT would be opaque in the RATS YANG module. The RATS work group > would not author any YANG to describe the claims described in the EAT > document.=C2=A0 > > The attester side implementation of this would: > > * Have code that creates CWT/COSE/CBOR formatted EAT tokens. This > would probably be new code. Could also be JWT/JOSE/JSON. > * Not need a TPM > * Probably re use some existing libraries (JSON or XML or such) to > implement what is described in the RATS YANG Module. That would > not be anything to do with claims, so this part would exist > primarily transport the opaque EAT. > And the Attester would then use RESTCONF to .... Please fill this sentence, because that's what having EATs in a YANG (RPC, data-in-motion) module means. --U3yMGxEbCyVKEN7MsZ5ZULoH3scZf0VCe-- --oOo423RDwAeywLeLvUJQmfFWpaY7JF7WA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCAAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAl3L5XMACgkQcAKuwszY gEOtLQv9GiT0HTLp+POyfVt5aTVaGFwMEEq7fADNSGcXs/zz/hMN15ylPTCTLLQp fD5TFh2SqaUhllrAnG0PoEaCSO9T737kFBTq5VyCjOklQWRIXbLRiDmHg+BmyYTF n0Nf2ORvRmjwR1E9UlbY5ZBphw6+ZWBjMWdHFEe2A/Zdq76o79AeU1fwCmpc5y88 yS6tDTpxxCOJCTSOJMfFigYYId29wtTcLb6kWJMhvfO9Xj7GYpIiKa/OwQs0uuCq TmQv6r20dlEkeF8wIdlrH1xv+iBe6WqgH0zVfnF8G6azPbcGO/q+QmHIBb+qN9bS K5KupU6Vivy1n3uxiiLxgn6tGLpnVqb5fXEuwGdVqWQdMhsP9nS/La5WxtgubTK9 ek5/zqBwMJNbRlHFlI2mmIT/rqizfXmJ28xK7pU4DZQwq9obOzGSedryt5afRJNb 0iiX8Dgkv4oi8uujBLOyxbmY7/RrmWpqR+r7ClCf1qtFfxltfbSYxIhJUAR0vudE IBP3pCCa =6gns -----END PGP SIGNATURE----- --oOo423RDwAeywLeLvUJQmfFWpaY7JF7WA-- From nobody Wed Nov 13 03:14:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E89301200FF for ; Wed, 13 Nov 2019 03:14:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4n4-FQIvnFi2 for ; Wed, 13 Nov 2019 03:14:26 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0627.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::627]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DF361200CD for ; Wed, 13 Nov 2019 03:14:26 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=SqKPtePLFGnRrhir/6XWnxGhgkOpgdbEWR+SdvQxObK6vLw5N5FZo6X8spLyVmwkLCdCNDLwWKD4EX2fnnAOARueMP8fEc9dG60dBhLXT+G70Qj9RoN4wHKCS84sWSvR8JPYrwW7xJHGPxRRYsV+Nc8nTupc/eNP+TobOxf+dKFhKD67CQqyha7GAHQ7YIvyFYEk7LgFaAzWkumILsKKpO9PbxnAWZyhW6ps2hIXGub6KvAINua1DFTQiEvUvQgLN4iAiF/2SGBvdDsZKPB7SDF7HrHzPMpJNAELbyrSXohvAH0dqknxpsL9W77/0MU1ZLEABoJ4VYeQpmXNRf96qA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uLDtJDFx0Gn06qNI/E5ySzQ0TzquAnUxKyjq7VUBxEU=; b=mmGPLWgkgMWbQ+RVc3Rj/5JtukImeST4i8GdapzztxhmKm4WiPNDh5U+2XnExNvS0VKhXkgssAndTcAk/4DItVEocBouGZxzRDpOXu5hcEZD1RpsQj5D/rCo5A+fIEZTZp8+hkxgH8hqeoldh3r5o4eF0kr/bcVSpGPGKEYLRgGqd5AlZxiH6rCoW2hnU6yZHCB+JgtJUyRspLFJJEklz8lhII/hpDmF8+WnlRyoI2osuyYwACzz/4lXMPUWNb+r3jFabw391iaIkHmFVcsS17ll2vAoiX/hHgn70V0Ry8umQKjHMtdhDFBNDH4eQmNXapLtNRixCyCacC/bb3cuXA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uLDtJDFx0Gn06qNI/E5ySzQ0TzquAnUxKyjq7VUBxEU=; b=eqdnqx6M9B3A1fT4saBrY2sXl7KbrCjwAAVtYd27P/+Jz42pH143OTotppnOfffNsW1iaJ9Fb5u2V77WwrtULWkcjaQirpQS0njOxLhaP+N+Wv6+g4+oZ6fnQrCzLfK88z4D/fSqaFgYM2TBTpEXx+JE5nz1Y0z+NcV9cKCaEhg= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0289.EURP190.PROD.OUTLOOK.COM (10.161.89.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.24; Wed, 13 Nov 2019 11:14:17 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 11:14:17 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Michael Richardson CC: Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmhIl8/lytau3hU+AhCwtIdg/0aeI8tQA Date: Wed, 13 Nov 2019 11:14:17 +0000 Message-ID: <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> References: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> In-Reply-To: <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: BE0P281CA0007.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:a::17) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: b4117e6f-8ce9-495e-f2a6-08d7682a9fc9 x-ms-traffictypediagnostic: AM5P190MB0289: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(376002)(396003)(136003)(39850400004)(189003)(199004)(76176011)(786003)(316002)(43066004)(99286004)(1076003)(25786009)(478600001)(52116002)(6506007)(102836004)(53546011)(476003)(54906003)(7736002)(305945005)(386003)(4326008)(46003)(186003)(8936002)(256004)(6246003)(446003)(11346002)(14454004)(6512007)(6306002)(86362001)(486006)(6486002)(6436002)(229853002)(71190400001)(6116002)(64756008)(66446008)(81156014)(66556008)(66476007)(81166006)(66946007)(5660300002)(8676002)(4001150100001)(71200400001)(2906002)(3450700001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0289; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: MZzJVJsJeaJABtkKR8kIDsLUGLN4rDACrUJsiFJoawSlUqlbLKmn4eDogjA4KsCBl6qMj7HZ/6lYzOfRR5zhGmc8ylQE3cirzm7NPfQg/nog3qXWeVl5Lzk1GoDZOncKBv1Qa7cmLFQR5A5eVD/KziCL8BIIBm0ZN4jXwM2nOed7jaqIqDhQRhbRWI0np8q37l0UKncLHlWXM3sC540Lc9AhjLfpADYCfT7t075x1ZCgagma59E7tZRrd5TdoxUi1oUmupcxBVqEKDxtf8NuKamN3PvYmiYS1ORnb7kOIhFeXdBtfxzf38+4TJKpFojCqXu5YyvKOeP97BaDqWiJspKAUoHvhCzf7i1YQlgj/hRsQjEaQACvWF4xU3tlvy4xBPpOgpfASfGiQL3iMB4zkpic3PkybGKq6s9tqc/KZDA5SQRaHwl72/qnIJvN1Q22AoH+vtEu72DNwLgojN+cmJnXWWjNxh5QhJMt1O+35Gc= Content-Type: text/plain; charset="iso-8859-1" Content-ID: <11074CB553AD294FB8F95A55803E1B42@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: b4117e6f-8ce9-495e-f2a6-08d7682a9fc9 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 11:14:17.6321 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: g7+lwNYDZEWKxzkEYLXeisYyUQlfALGBdH5iliHVZxCvUS5fXpB22lziOXieJLNC48eSyTy1Pe+WHM4HewVHLNSCcUdSj2kFv7IcYoymsv8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0289 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:14:29 -0000 On Wed, Nov 13, 2019 at 07:04:40PM +0800, Michael Richardson wrote: >=20 >=20 > On 2019-11-13 1:56 a.m., Laurence Lundblade wrote: > > > > Got that one totally wrong. I even knew everything you describe about Y= ANG. > > > > I still think it is better if we just stick to EAT / CWT / JWT claims d= escribed with CDDL as the way we define claims in RATS, except for a few TP= M-specific claims.=20 >=20 > Nothing I've said is opposed to that. > I rather agree.=A0 I don't think that EAT is complex enough to require a > definition in YANG. >=20 > But, that also has nothing to do with whether we'd need a YANG signing > standard if we defined them in YANG. > We wouldn't, because we'd be signing JSON, CBOR (or XML if someone > insisted) using JSOE and COSE. > I am still confused but so far for me it may make sense to have the following: - A YANG defined transport for "tokens" which likely treats tokens as opaque objects. - A way to include arbitrary YANG defined data as claims in some form of "tokens" that can carry YANG defined data. There is lots of stuff defined in YANG models that may be reused as claims. - Whether we need a YANG defined "token" format is unclear to me. It is also unclear to me why we would need it specifically for TPMs. While there is a lot of talk here about different kinds of "token" recently, I note that this term is not defined in draft-birkholz-rats-architecture-03.txt nor in draft-thaler-rats-architecture-01.txt. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Wed Nov 13 03:15:17 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B40F12003F for ; Wed, 13 Nov 2019 03:15:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Z0c6u8MVwRh for ; Wed, 13 Nov 2019 03:15:14 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CC8B120013 for ; Wed, 13 Nov 2019 03:15:14 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id 1260D3897A; Wed, 13 Nov 2019 06:12:04 -0500 (EST) To: "Eric Voit (evoit)" , Laurence Lundblade , Henk Birkholz Cc: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , "Smith, Ned" , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <3310947D-EA31-4107-8FF0-B917A027C955@intel.com> <20191111213249.4p7z2ovkvqy2u5go@anna.jacobs.jacobs-university.de> <3C967A22-DBB0-4EA7-923D-B423920EB9BD@intel.com> <0AACCF7B-36A9-4AF9-B18A-BF18DC35986E@island-resort.com> <2F3459F0-0063-4012-933F-F036E75A1331@island-resort.com> From: Michael Richardson Message-ID: Date: Wed, 13 Nov 2019 19:15:08 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:15:16 -0000 On 2019-11-13 3:41 a.m., Eric Voit (evoit) wrote: > > With YANG, it is possible to support both opaque transport of > information, as well as extracting that opaque information from a chip > contained within the attester.  We will need both supported.  > >   > > For an example of why, consider a local Wireless Access Point which > gets signed GPS location from a chip: > > * The Wireless Access Point will need to understand the GPS location > because it might only legally be allowed to turn on various radio > frequencies based on the country. > * Remote devices might use YANG to ask the Wireless Access Point to > only send signed proof of location if it turns out they are in a > particular geography. > Where is the EAT token in this case? Remember that's it's opaque binary. From nobody Wed Nov 13 03:24:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19D6812003F for ; Wed, 13 Nov 2019 03:24:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mkent6bIJ8Ew for ; Wed, 13 Nov 2019 03:24:16 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 131C1120013 for ; Wed, 13 Nov 2019 03:24:15 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id AB7A53897A for ; Wed, 13 Nov 2019 06:21:08 -0500 (EST) To: rats@ietf.org References: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> From: Michael Richardson Message-ID: Date: Wed, 13 Nov 2019 19:24:10 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:24:18 -0000 On 2019-11-13 7:14 p.m., Schönwälder, Jürgen wrote: > On Wed, Nov 13, 2019 at 07:04:40PM +0800, Michael Richardson wrote: >> >> On 2019-11-13 1:56 a.m., Laurence Lundblade wrote: >>> Got that one totally wrong. I even knew everything you describe about YANG. >>> >>> I still think it is better if we just stick to EAT / CWT / JWT claims described with CDDL as the way we define claims in RATS, except for a few TPM-specific claims. >> Nothing I've said is opposed to that. >> I rather agree.  I don't think that EAT is complex enough to require a >> definition in YANG. >> >> But, that also has nothing to do with whether we'd need a YANG signing >> standard if we defined them in YANG. >> We wouldn't, because we'd be signing JSON, CBOR (or XML if someone >> insisted) using JSOE and COSE. >> > I am still confused but so far for me it may make sense to have the > following: > > - A YANG defined transport for "tokens" which likely treats tokens as > opaque objects. okay, and we need this in the same document (the same model?) as the TPM stuff? I think that the process works okay for TPM, because we don't really expect the system that hosts the RESTCONF interface to actually use the RESTCONF interface to talk to the TPM.  We are just providing a gateway to it. From nobody Wed Nov 13 03:25:34 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96FBE120013 for ; Wed, 13 Nov 2019 03:25:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 89u6XMG7ouHu for ; Wed, 13 Nov 2019 03:25:30 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F36912003F for ; Wed, 13 Nov 2019 03:25:30 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xADBPRpc018819 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 13 Nov 2019 12:25:28 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 13 Nov 2019 12:25:22 +0100 To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Michael Richardson CC: "rats@ietf.org" , Laurence Lundblade References: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: Date: Wed, 13 Nov 2019 12:25:21 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:25:33 -0000 One reason for this - and I tried to express that carefully - is that just using the word "token" could be very confusing. We are using "Claim" as a synonym to "Assertion" at the moment. Outside of the IETF that makes a lot of sense. Inside the IETF, we still have to be a bit careful here, as "Claim" is well defined in Web Tokens - and it is a data model term (basically: a specific key value representation). An EAT is a CWT (or JWT, not the point). So both are Claim sets that compose tokens. The architecture is intended to be representation (I am using this term to dance around the sanity rending serialization/encoding words, and to spare Rich some of the pain) agnostic. Claims in the architecture are therefore representation agnostic, too. Claims in tokens - by RFC definition - are not. I am not a super big fan of this compromise, but it found consensus, removed a blocker, and we were able to progress. Viele Grüße, Henk On 13.11.19 12:14, Schönwälder, Jürgen wrote: > While there is a lot of talk here about different kinds of "token" > recently, I note that this term is not defined in > draft-birkholz-rats-architecture-03.txt nor in > draft-thaler-rats-architecture-01.txt. From nobody Wed Nov 13 03:28:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3A2712023E for ; Wed, 13 Nov 2019 03:28:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6U3kWycQSzm0 for ; Wed, 13 Nov 2019 03:28:04 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA40E12003F for ; Wed, 13 Nov 2019 03:28:03 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id A705A3897A; Wed, 13 Nov 2019 06:24:56 -0500 (EST) To: Henk Birkholz , rats@ietf.org References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> <23b47242-cb99-2e86-67b3-beb7e0e51599@sit.fraunhofer.de> From: Michael Richardson Message-ID: <330ab612-ab92-809e-4c22-ac3814ce117c@sandelman.ca> Date: Wed, 13 Nov 2019 19:28:00 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <23b47242-cb99-2e86-67b3-beb7e0e51599@sit.fraunhofer.de> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:28:06 -0000 On 2019-11-12 6:10 p.m., Henk Birkholz wrote: > > > On 12.11.19 10:44, Michael Richardson wrote: >>>>> on one hand, we have to address the overlap between YANG and EAT >>>>> information elements (statements & Claims) and how to deal with them >>>>> (one obvious issue, for example, would be potential redundant >>>>> information model content in two different drafts). >>>> >>> >>> Examples of the same information elements that are used in different >>> data models via Claims or statements: >>> >>> * EAT Time stamp / YANG clock info >>> * EAT Origination / YANG attestation key cert, or >>> * EAT Uptime / YANG tpm ticks >> >> Those aren't EATs, those are attributes of claims that an EAT could >> include. >> If you are saying that we could write a YANG module describing those >> claims, and that they could be used to describe both claims of an EAT, >> but also results from a TPM 1.2/2.0 call, then I understand finally. > > Yes, that is basically a way to phrase the question, I think. > > Specialized questions are: do we need to do that? Do we want to do > that? Is it technically okay to instead convey opaque EAT blobs via a > YANG statement? Sorry to be more pendantic. Do you mean: Is it okay to convey attributes of claims that an EAT could include as blobs in a YANG model? Or you mean: Is it okay to convey a binary serialization (say to CWT) of an EAT in a binary blog in a YANG model? (The answer to both is yes.  I don't know if it's useful) From nobody Wed Nov 13 03:32:35 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B54F12023E for ; Wed, 13 Nov 2019 03:32:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dYf8zprRNrrt for ; Wed, 13 Nov 2019 03:32:32 -0800 (PST) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60058.outbound.protection.outlook.com [40.107.6.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4DFF12001A for ; Wed, 13 Nov 2019 03:32:31 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IldasitvfNj4sTEoNxApRoknikv4qVQ/l9GpNyjfNx8vNXchS1lalJ72bKX6F0JgUQTET7qh+xK+XjPnQw9m0EAzgQncTjnlDLPh5TE6noWDnkfUkaTHSgvhDcwBiU9RsWtlwkvO3EQnNs6AU7un8NPiuOTvIAOOmqXNXas8LtP15a1mHNEono+j+KO/kuQZVIQ59N79KFZexayGCOSJ0WEvDXPEmVNSizVgIX7Dpo0+QXGIORiEMW2AAMQj9tD4dgartOZtI8blXYjmTAD9YMtnfrBtJDdI1BVWI/Srdw5CjtUdN64YejChWsXpDlRbKqdNqS1ilFgXZkfILpm2RQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ONjSlzt6GcT7/NaRaps0yuX/dStHXoTj9GlKQKU34Uw=; b=hqx3ohpLB5jhJu/RvilppK3PwI/GSq/+RuKLN7kiSvSp8afP0phzUnGMltNKWDqX38Cygo+m783jl+zf31cTfz9fYLsz0gFIXYu033cm5HoIEQZdniT5QPx0FfmvK1ztF5TZcZWuUJNNMvVPkxRnrcDm4dQ74HOAEgrd7uoV7vERNjrP+szOGmur67G/EsE97MWUcLPwsnid7o+5c6g0pyUg9g5ydSc4fBQ5NZV76+VDunDlvPV6l1xegQyfbOTFaLdC5mig3t05IkwKWDTJsci0lXhcWCvGgCUfxMeWGVa5brREM/vlut2sXDOI8xsie10rMmGinoXJHpdgI8kEtw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ONjSlzt6GcT7/NaRaps0yuX/dStHXoTj9GlKQKU34Uw=; b=mpz2hi7xCCJwxenDB2znVft3KO82uiCk8lbyyaxOSWeXbbkrtlaw9fGktc3sJ3D7lIexmiW50xIYh4ofDNfDKNgG9o2571wJcofdvcE3Z/Dw6staoc0MIR07cTyBUihZoeofQZ3TQ3nvTiiWjXX0fuQ7q+c/0sEHKr81q7fg8A0= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0484.EURP190.PROD.OUTLOOK.COM (10.161.63.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.25; Wed, 13 Nov 2019 11:32:29 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 11:32:29 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmhIl8/lytau3hU+AhCwtIdg/0aeI8tQAgAACxACAAAJOgA== Date: Wed, 13 Nov 2019 11:32:29 +0000 Message-ID: <20191113113225.wkdkdidca7rgyqt7@anna.jacobs.jacobs-university.de> References: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> In-Reply-To: Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM0PR05CA0044.eurprd05.prod.outlook.com (2603:10a6:208:be::21) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f370114b-480c-48fd-d8ad-08d7682d2a57 x-ms-traffictypediagnostic: AM5P190MB0484: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39850400004)(346002)(376002)(396003)(136003)(51444003)(189003)(199004)(99286004)(386003)(25786009)(46003)(8676002)(316002)(5660300002)(6246003)(102836004)(2906002)(478600001)(7736002)(86362001)(305945005)(53546011)(1076003)(6506007)(786003)(71200400001)(186003)(229853002)(76176011)(71190400001)(64756008)(66556008)(66476007)(8936002)(446003)(6116002)(256004)(66446008)(11346002)(66946007)(476003)(6306002)(81166006)(81156014)(6436002)(14454004)(4001150100001)(43066004)(6486002)(4326008)(3450700001)(52116002)(486006)(6512007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0484; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 42oad6jdWy/0nTXu9U9liJXCrKWyGLEk3R/qGzjUQrD+y94QbLIouZoLXl1SiVDdezR21fs2TQsx+U12BWX6T8ty0oKXXdFgh5hvTDlaWDXNbTYJ0k5WEh1kDwehwUapXNW7uYlfQndWfxjUxxUdN5g+N3oEEd+49UbMa0oR+a3xkZmlk0z3tK9RBVhxXsVr6asR6mcSZQ+opnKeA+iYAMjG1fNfYqRphGkKdITQrNJ1QX3aF13+2FJhPZH5P5MR/DDhcd0D7ZcuFBTmvEKT38xCDlnm/nfcSL4GDID7XiPuoU6OdrAo3e9Ru7KRvuITGO1uE01NAzh7AEr/pR/VV3wQqMPtSDbGOLXuPkDp7WYV1IEhOjYA4oULU1UAqWg7wlC2FqRxwgWxlTqTrfWqdr2jiKuvuegLvL0Spwp2euxOWwSWETC1KUujZ+MFt9H7cngLkGzNx0qEjI/fVAYTz7X22xEsHsTOtSeQ8+Hxi6g= Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: f370114b-480c-48fd-d8ad-08d7682d2a57 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 11:32:29.0970 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Xlli/CjY+mW+bChp8f+cGzkYbdo/IJQWEueL6TB56Vl4RTAUbW4G7MIEXwc6vv4AAWIcEYRwwspd9jOU5AlMrrGrPeGtTbCnWPchx2S8OK0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0484 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:32:35 -0000 On Wed, Nov 13, 2019 at 07:24:10PM +0800, Michael Richardson wrote: >=20 >=20 > On 2019-11-13 7:14 p.m., Sch=F6nw=E4lder, J=FCrgen wrote: > > On Wed, Nov 13, 2019 at 07:04:40PM +0800, Michael Richardson wrote: > >> > >> On 2019-11-13 1:56 a.m., Laurence Lundblade wrote: > >>> Got that one totally wrong. I even knew everything you describe about= YANG. > >>> > >>> I still think it is better if we just stick to EAT / CWT / JWT claims= described with CDDL as the way we define claims in RATS, except for a few = TPM-specific claims.=20 > >> Nothing I've said is opposed to that. > >> I rather agree.=A0 I don't think that EAT is complex enough to require= a > >> definition in YANG. > >> > >> But, that also has nothing to do with whether we'd need a YANG signing > >> standard if we defined them in YANG. > >> We wouldn't, because we'd be signing JSON, CBOR (or XML if someone > >> insisted) using JSOE and COSE. > >> > > I am still confused but so far for me it may make sense to have the > > following: > > > > - A YANG defined transport for "tokens" which likely treats tokens as > > opaque objects. >=20 > okay, and we need this in the same document (the same model?) as the TPM > stuff? Likely not. =20 > I think that the process works okay for TPM, because we don't really > expect the system that hosts the RESTCONF interface to actually use the > RESTCONF interface to talk to the TPM.=A0 We are just providing a gateway > to it. So which applications are using this RESTCONF interface? Can I somehow relate this back to the architecture models? Henk's doc seems to be telling me that the idea is that $something likes to retrieve "evidence" by invoking YANG RPCs. So what is $something and why is the evidence TPM specific? /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Wed Nov 13 03:39:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88C9C12001A for ; Wed, 13 Nov 2019 03:39:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQD1GgckVIfF for ; Wed, 13 Nov 2019 03:39:26 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2999512013F for ; Wed, 13 Nov 2019 03:39:25 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xADBdNc2019104 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 13 Nov 2019 12:39:24 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 13 Nov 2019 12:39:17 +0100 To: Michael Richardson , References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <1DFA7D52-7294-4705-9407-C34F5BC82EA6@cisco.com> <5f57dd25-f561-e07d-4b24-fef05627bac9@sit.fraunhofer.de> <0eb003f7-34c3-af36-74ac-097841d2ac6c@sit.fraunhofer.de> <23b47242-cb99-2e86-67b3-beb7e0e51599@sit.fraunhofer.de> <330ab612-ab92-809e-4c22-ac3814ce117c@sandelman.ca> From: Henk Birkholz Message-ID: Date: Wed, 13 Nov 2019 12:39:17 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <330ab612-ab92-809e-4c22-ac3814ce117c@sandelman.ca> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:39:29 -0000 For convenience of some readers, please find the reply at the bottom. On 13.11.19 12:28, Michael Richardson wrote: > > > On 2019-11-12 6:10 p.m., Henk Birkholz wrote: >> >> >> On 12.11.19 10:44, Michael Richardson wrote: >>>>>> on one hand, we have to address the overlap between YANG and EAT >>>>>> information elements (statements & Claims) and how to deal with them >>>>>> (one obvious issue, for example, would be potential redundant >>>>>> information model content in two different drafts). >>>>> >>>> >>>> Examples of the same information elements that are used in different >>>> data models via Claims or statements: >>>> >>>> * EAT Time stamp / YANG clock info >>>> * EAT Origination / YANG attestation key cert, or >>>> * EAT Uptime / YANG tpm ticks >>> >>> Those aren't EATs, those are attributes of claims that an EAT could >>> include. >>> If you are saying that we could write a YANG module describing those >>> claims, and that they could be used to describe both claims of an EAT, >>> but also results from a TPM 1.2/2.0 call, then I understand finally. >> >> Yes, that is basically a way to phrase the question, I think. >> >> Specialized questions are: do we need to do that? Do we want to do >> that? Is it technically okay to instead convey opaque EAT blobs via a >> YANG statement? > > Sorry to be more pendantic. > Do you mean: Is it okay to convey attributes of claims that an EAT could > include as blobs in a YANG model? > Or you mean: Is it okay to convey a binary serialization (say to CWT) of > an EAT in a binary blog in a YANG model? > > (The answer to both is yes.  I don't know if it's useful) > Isn't that supposedly my job? To the point. I meant: Is it okay to convey a binary serialization (say to CWT) of an EAT in a binary blog in a YANG model? Why am I asking that? (well, actually now you did) YANG modules thrive on well defined semantics for each statement. I just want to make sure that it is okay to convey an unknown composition of Claims (opaque semantics) via the web token format in a YANG module statement. Laurence brought up a good example, I think. If "Identity Document" is good enough. Probably "Attestation Evidence" is good enough, too. To comment on Michael's quote: Do "we need this in the same document (the same model?) as the TPM stuff?". I think "need" would be a very strong word here and therefore I would not recommend to make it mandatory and impose more code on YANG datastores/rpcs. Viele Grüße, Henk From nobody Wed Nov 13 03:44:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4F21120251 for ; Wed, 13 Nov 2019 03:44:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AdtyVltsakaF for ; Wed, 13 Nov 2019 03:44:47 -0800 (PST) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60053.outbound.protection.outlook.com [40.107.6.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B63A12001A for ; Wed, 13 Nov 2019 03:44:46 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aRAob7JQnFE5zw1TwiHtyWyEZcmJrGOKkKWOQ6iL0oDvJ4H8R07oiM9IWQwKrp3VzfjYsiebZNnL0ZvVOOTDeg3OdXdLEWQRN0NYE8JTVoz65qrufFufeHf67RExPfkixqrYfBC3jwViol1Y1/WDMmdejgk824tQ+yL2tRrB3a19zVAw3fm4/2lHShWI7WSM81E8hrVGHYXMcEhm+rWIC3vyY0xDX4oicYkhDysrV8PUT2EDG2LDGz8C8ntke3wiahSTNlNkbTM/R96bfMaDBU/MAWPuSkMsJLY5mqkZN8wM6bWV3rmFPV1ef4F64rHIMrxRPKToNDFW2NlwEQoLRA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B8uVyKW8h9exj9GAerDnZBo3gw+0ULt8Uo/yc0NRe4M=; b=IeH3W/hgsR3aCPREarcgZ0t5K2qU9OW2zb93TM9Js6Kbmx0uOlUkYdsouCI8dhtxyPWh2veLn5qhFPiMFkWG2IJ6e8+NRjzBkzMm0TetMGYZi3MQrXJYx3ZNIlIZ9InfasFrdFgbbXY3CBltuKsGF/zu9zuMAO5PeCwp6DYUUMie/fquXvmS9u9UoI3M6XQ6qaFd2apT3B83kex+zThaZ+PQF1+9HlsqM5bN2AYmFRJzieRZi2vp0JVY+u8BH835MxS/COrO4toFLJzQfAqpFCqYLVcd5rNNw/Wi4/ppN8fHnUYJDPmKTVZQLU6GmnW24tzouai/eF4ywRBYNRfhFg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B8uVyKW8h9exj9GAerDnZBo3gw+0ULt8Uo/yc0NRe4M=; b=Jr0o11RsBS+VGnGvteoCrQBvabZl0BzrqG5THuYgaxYxlt108/540OMcj0KV8Xm9W+hA9fPAP2sXe+j5/Je4QMomTWPe+8kXUfiNEypOd9FEJF6y8KwT4C6k8THViPQPy7iv/+SDyec3DJnZDOT6zW9i4Y3qrNcVgYV723vvgsI= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0484.EURP190.PROD.OUTLOOK.COM (10.161.63.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.25; Wed, 13 Nov 2019 11:44:44 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 11:44:44 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Henk Birkholz CC: Michael Richardson , "rats@ietf.org" , Laurence Lundblade Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmhIl8/lytau3hU+AhCwtIdg/0aeI8tQAgAADGYCAAAVngA== Date: Wed, 13 Nov 2019 11:44:44 +0000 Message-ID: <20191113114441.76bxnne3d7x3vmut@anna.jacobs.jacobs-university.de> References: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> In-Reply-To: Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: FRYP281CA0015.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10::25) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 61113865-42fc-4b23-3349-08d7682ee065 x-ms-traffictypediagnostic: AM5P190MB0484: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39850400004)(346002)(376002)(396003)(136003)(189003)(199004)(52314003)(99286004)(386003)(25786009)(46003)(8676002)(316002)(5660300002)(54906003)(6246003)(102836004)(2906002)(478600001)(7736002)(86362001)(305945005)(1076003)(6506007)(786003)(71200400001)(186003)(229853002)(76176011)(6916009)(71190400001)(64756008)(66556008)(66476007)(8936002)(446003)(6116002)(256004)(66446008)(11346002)(66946007)(476003)(6306002)(81166006)(81156014)(6436002)(14454004)(43066004)(6486002)(4326008)(3450700001)(52116002)(486006)(6512007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0484; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: D5gvG9bjreHuTadIzYpWM45/5m7OBSXn0b+M9l/PV6/ImbH2zcId0DT0P6nBkisZp3yF5AOLypPiIARb9IuSHmYejXptJoIGaUdrL5SdSxVNv+mmKodQMnO6ThdTYT1A1Imed31jFHGGTJ3gyR1vXm4r1a/H/hibYSpJk0FPSTtVQ/DDMyM4LIVVQD58untTWedFVIvnV/Fp6qkCFI7cCwwyuSrT9bmbG/vecgH3z+WFfyGVyXDiSekBoVR1AZLcTEdoRxYzJ0UQ6iNqdBUphgkFr++5T9UpAEpHuIdogV2GAC5UeqwzdPQDsFGZ132jFcEKcXAkbtQeNBhmn7h+tlr8h0f5Sf4MOy8231q7KzPMijvtohojmKTQBtN1cQGgz8bMQjwceWjE4fAEXbRbbGJwetA23IMIy4Qt1LF0EPj0M6dBhAyOd5PwIV7Epjuemyfm2rYXvdXmCJ8axvuDyPow5edJNm6q5tZD7fRKFiM= Content-Type: text/plain; charset="iso-8859-1" Content-ID: <3F21B87E4D559F4D85348711A1051D6F@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 61113865-42fc-4b23-3349-08d7682ee065 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 11:44:44.0186 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 3rB2jEvXJ+DJUgxlUmocyGvDzxdLHKvP8eTi9U0YjaOZ/pD86JBZ60FWZhGxh0ZfBxpMO7zjOLrQsS+/Yz6i/paofGXWEjfIM6WrWV4Kx2k= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0484 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:44:49 -0000 On Wed, Nov 13, 2019 at 12:25:21PM +0100, Henk Birkholz wrote: > One reason for this - and I tried to express that carefully - is that jus= t > using the word "token" could be very confusing. We are using "Claim" as a > synonym to "Assertion" at the moment. Outside of the IETF that makes a lo= t > of sense. Inside the IETF, we still have to be a bit careful here, as > "Claim" is well defined in Web Tokens - and it is a data model term > (basically: a specific key value representation). I looked into JWT and I think I roughly know what they mean by claim. Now we have "assertion" (also not defined in your architecture draft). Hmm. =20 > An EAT is a CWT (or JWT, not the point). So both are Claim sets that comp= ose > tokens. The architecture is intended to be representation (I am using thi= s > term to dance around the sanity rending serialization/encoding words, and= to > spare Rich some of the pain) agnostic. Claims in the architecture are > therefore representation agnostic, too. Claims in tokens - by RFC definit= ion > - are not. To me, it seemed like in JWT, we have 'sets of claims' and then these claim sets are serialized into a string representation ('serialized sets of claims') and the serialization is finally digitally signed and encrypted, giving us a token. This works for me. The notion of "claim sets that compose token" confuses me. If I compose token, I get a "set of tokens". Yes, indirectly I get also a union(?) of the claim sets included in the tokens. Anyway, we need to get terminology worked out or we will not understand what we are doing or worse we agree on something but people interpret the agreement differently... > I am not a super big fan of this compromise, but it found consensus, remo= ved > a blocker, and we were able to progress. Progress is when we all agree on the same thing. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Wed Nov 13 03:55:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2768D12086B for ; Wed, 13 Nov 2019 03:55:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gtmv3qgUUMlT for ; Wed, 13 Nov 2019 03:55:39 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C09AA12029C for ; Wed, 13 Nov 2019 03:55:37 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xADBtYTO019954 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 13 Nov 2019 12:55:35 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 13 Nov 2019 12:55:29 +0100 To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Michael Richardson , "rats@ietf.org" , Laurence Lundblade References: <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com> <0C6940B0-E93F-4274-9D00-DEC4119B8F69@island-resort.com> <85c7c287-48e3-83e7-900e-8e50ce43eba3@sandelman.ca> <147FEACA-56F0-43A0-8F25-639D0613E4BD@island-resort.com> <22fd43c8-7d6e-2dd8-c29a-aa86ee894ff6@sandelman.ca> <20191113111416.22xikah475zyxdro@anna.jacobs.jacobs-university.de> <20191113114441.76bxnne3d7x3vmut@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: Date: Wed, 13 Nov 2019 12:55:29 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191113114441.76bxnne3d7x3vmut@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 11:55:44 -0000 Please find comments and replies in-line. On 13.11.19 12:44, Schönwälder, Jürgen wrote: > On Wed, Nov 13, 2019 at 12:25:21PM +0100, Henk Birkholz wrote: >> One reason for this - and I tried to express that carefully - is that just >> using the word "token" could be very confusing. We are using "Claim" as a >> synonym to "Assertion" at the moment. Outside of the IETF that makes a lot >> of sense. Inside the IETF, we still have to be a bit careful here, as >> "Claim" is well defined in Web Tokens - and it is a data model term >> (basically: a specific key value representation). > > I looked into JWT and I think I roughly know what they mean by claim. > Now we have "assertion" (also not defined in your architecture draft). > Hmm. Yes. I am sorry it is this way. If you have a look at ITU-T 1252 Section 6.6 (free reference here: https://www.itu.int/SG-CP/example_docs/ITU-T-REC/ITU-T-REC_E.pdf) it is not that bad. But that is "outside IETF". Not every Attestation Evidence, Endorsement or (let's not call it Reference Value to address Dave's comment, but) Appraisal Policy? is using "Web Token Claims", they all use Assertions. We will add text that highlights that in the scope of the architecture these are synonyms and not the Web Token Claims. > >> An EAT is a CWT (or JWT, not the point). So both are Claim sets that compose >> tokens. The architecture is intended to be representation (I am using this >> term to dance around the sanity rending serialization/encoding words, and to >> spare Rich some of the pain) agnostic. Claims in the architecture are >> therefore representation agnostic, too. Claims in tokens - by RFC definition >> - are not. > > To me, it seemed like in JWT, we have 'sets of claims' and then these > claim sets are serialized into a string representation ('serialized > sets of claims') and the serialization is finally digitally signed and > encrypted, giving us a token. This works for me. > > The notion of "claim sets that compose token" confuses me. If I compose > token, I get a "set of tokens". Yes, indirectly I get also a union(?) > of the claim sets included in the tokens. Bad wording. Readability. My weak spot as it seems. What I meant was that (literally) a set of Claims in a JSON object compose a Web Token. Very simple nothing more :) I think we mean the same. Please correct me, if I am wrong. > > Anyway, we need to get terminology worked out or we will not > understand what we are doing or worse we agree on something but > people interpret the agreement differently... We are in wild agreement here. > >> I am not a super big fan of this compromise, but it found consensus, removed >> a blocker, and we were able to progress. > > Progress is when we all agree on the same thing. There was. At some point. If it is not anymore, we can make this an issue in the upcoming converged architecture I-D. > > /js > Viele Grüße, Henk From nobody Wed Nov 13 04:10:00 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 484DF120288 for ; Wed, 13 Nov 2019 04:09:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c15vRx4YPpT3 for ; Wed, 13 Nov 2019 04:09:56 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4190412001A for ; Wed, 13 Nov 2019 04:09:56 -0800 (PST) Received: from [192.168.41.2] (unknown [58.212.133.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by tuna.sandelman.ca (Postfix) with ESMTPSA id E06B83897A for ; Wed, 13 Nov 2019 07:06:47 -0500 (EST) To: rats@ietf.org References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> From: Michael Richardson Openpgp: preference=signencrypt Autocrypt: addr=mcr@sandelman.ca; keydata= mQGNBF3EaO8BDADNdcAioLgGWFMLcmR6SuX1ioVH0v1fcprk0Wl1Qc7LCdwqj+QSdv84oNe1 h6lTf+CsmzO+TZtL+2iUzR3WHyXViEJcSHldx2YIfgxGZkzqgqozDj2IoHCU6ezhQz2TwJO7 l6H7fIPBbemIu8qVezwP1azLVq3D+cXZkkOvsFhTiw1bF/WF8lIIAYEbQ4YyYyjk5DS30x59 kxFNSv6om8rqSAKs2epneEWpzybB0J82dBnB4VDDsMmTJWPkszvQoCjCbrvgDAuoRtL5su2V IQWw61O6N5p1mwJ7VQoPDWYyeFH4NrVlL71FwRLueVPle76Oi3ybE2IMUvHZ/e42jVBizlQj 1N/2x7mGk35Zrvz0WHjZLcFJYJkDOnLsMU1smhdRtxNfYf576DTlzQKVcLmNCfOKAWnz4DdQ gRI4pNs24NoxLXl5v5mhDHRX5Me+CuckkFNGSlCXZ5kMXzPPFAV6CwMlm65P1tVJq9td8Uh0 5I5okPcENk5iY+FniqMXamsAEQEAAbQlTWljaGFlbCBSaWNoYXJkc29uIDxtY3JAc2FuZGVs bWFuLmNhPokB1AQTAQgAPhYhBKMP9ag1YAG1i9s8WHACrsLM2IBDBQJdxGjwAhsDBQkB4TOA BQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEHACrsLM2IBDeJ4MAMvUmQjFqXgsg4KhIWQb QBcgNPxrtp9jW/i2m//0zVA2iGxbeTOZD6cmcNDRj153TbSGTEH03oJIeYbdwlOCe5blA6h4 FTEBwt/qX+mjRYKXuA3uvFdEJQJPFcaWFF68rgQMxgLPPUAnTYQ00SqaBEg+Vh4gSh8yOHuU 8VTgenm4JpBdJQx7/7syvIaQilhN2fF25CcA7hArmebkaG691x+cFD60s8ITI9PSf82SVUnp mspJTGptxFxH/GM/kW40iB4tUjZrUSQfTfWIXA/5j005XbVbo1DIYirWWNK0WPVsh51ullzt u37BDVj/SmgbGhvTUXwsBi4b+T2cJHLt+8QT/KM8OA+UA8AlkNPleKtOzxsg5z22m0fzollE Zcw9VIojPKIhTUYU79InmibEUoGfb05MFJM9aXX5BMoJNpKcB92PKI/gMsrxMwH1exs0cY/E K/xYdpFo3rTPw5KSsDkr7ZbqGPgz+QP2H+TLwgLKMFTBlVKpj+oqBnqeEVVrC7kBjQRdxGjv AQwA0T5oxtsQkr3I3FxBi5TkNSh0HZ7ND5xJJkyM6wLAsljLk5KhdcxjTlo6htNjRUuUy1Ld 0bARmezZf5GqKRh6fR7WX9EdYjGm0RbcK3tQ3L61h4p3EOplKgMSoGpGamLSDzRs3SAJu4GF iHfzQ20R0PxBN/CbzWh6ROPcxQ8wwt8G4ZOwU4zXfSmZqZwNp/6xosLCl3TKvFWX6421Vb/L WAOOAz/xSyS0GCUs/grBUfzu95+TTskRk7kkeYSQ//1Oq9srPlIU9lx3Y4jDgPkXIwd9eXOq e7/5y4bQkILGGMIux878DhAED865hPMBuHlkDNzIuo6HhjRkShLBM16yQhK+NJ0WI77+m1FD 7r5QL6iU57zI/B5U03JKZhW0Pm3Bm+RWZPWGVawkPUnvxoMFbw+x1+MnKZgXwRmRmbFsCHhD VmrDKLWXRm9QvTB+k0ZnTdme9ZwSNCn0CXME2rNtOR39Yh6dsWH2nMPvg/G5iUmZyO9Oa01W xhWcXnKA+v+VABEBAAGJAbwEGAEIACYWIQSjD/WoNWABtYvbPFhwAq7CzNiAQwUCXcRo7wIb DAUJAeEzgAAKCRBwAq7CzNiAQwaOC/4olaVHP/npCn2CrtAOstbyytePFmS9NAwdT8A6mA4s +WshPo1DhKEnKnYzW/S0jLf0iqlzT8LUqu2G8f6elGzghRR8WJVn0zH7LVCKMWo/tHE2rWyi Q1zuX9o7ChTodQ8cXx0lM1xdY8v4Amc5fFxyyhJprKZAtiDJ897vv1jP09fWLEBhaDsHqLhg ckQpIoee0Id4FXGt7wxDsPwa64SUUCTYdt98EiLoUY6eAWQnyelgbFU+D/bxkeytmmvWOVr7 UXVMQlEKG7E31G1XQMk6sFATF1dwiH/laLQPLuMYr7owUC+ef/YAWSHMTYeIfwdt/Yd8ngJ8 SFA6Uc+Bjr0i1jdnxS5H3EF4V1FNY2rh4zNPVNj2UrZaShK/XH4hnTJUYL5fo2ygt2ZM98ot 8lIsHGAJQHDl2/EffLsAL85pXDPl8E+nvOUOE1kwmfOgv/oV8z0469qu/hNiEpGp8xKBqGEL NWHd8fH5S9JxVix9Ed34vi9Cyf24iLjiWZBemXw= Message-ID: <17817346-ca7d-9728-7cd2-148c16eb2858@sandelman.ca> Date: Wed, 13 Nov 2019 20:09:50 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-US Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 12:09:58 -0000 On 2019-11-13 9:03 a.m., Salz, Rich wrote: > Is the rat clip-art public domain? Thanks for asking! Yes, I try to be meticulous when I'm grabbing artwork from the Internet. I have a script that wget's stuff and saves it to "credits.txt" so that I have a record! I thought clker had explicit CC statements for each item, but they say things are public domain. (Which actually means that their terms of use are null and void.  Stallman figured that out 40 years ago) Anyway, here are the components: http://www.clker.com/clipart-grey-greedy-rat.html http://www.clker.com/clipart-sniper-optic.html  Given that I put some public domain stuff together, I get to assert a copyright on the collection if I want. So, I'd use:  Attribution-ShareAlike 4.0 International From nobody Wed Nov 13 06:00:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B55012003E for ; Wed, 13 Nov 2019 06:00:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s5L1Drr9chQu for ; Wed, 13 Nov 2019 06:00:25 -0800 (PST) Received: from mail-oi1-x22c.google.com (mail-oi1-x22c.google.com [IPv6:2607:f8b0:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4E6012013A for ; Wed, 13 Nov 2019 06:00:25 -0800 (PST) Received: by mail-oi1-x22c.google.com with SMTP id e9so1824294oif.8 for ; Wed, 13 Nov 2019 06:00:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=QjXlSz6JZng5+pgofnHFMjVDn56d7zME7yMY+yhk1eA=; b=idQZSjrpUvkmj7UqJpMdT84VswIDMxBZBpE9EiB02kAeg8S0CbxyVM4ScpwGPwOntK yWbDRgQaCSM0igeBjKgRcM2smY/XDBq/pdYuUS0VSqsHQ8QRAGrCfrKYgi5EO5NWoaa7 +LU5zKcd8DNhr7WkY+zvshs8Ff+D1ETmWXxdjJLn78UYVczoe7kGHDbKAlLrVjr94XXz 1GbZJQDPyZM5/9SP0tnnYBqgSrq8hO6siYRLLy2cdq3VobeX82zDIzqZr1++uiJh5OLG UFA8otnF9TWipoKekdTYfoTjU+qw7Ru577n1eMK8wqym521ve6RP1oiox1ooxf0dNdsq xw9g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=QjXlSz6JZng5+pgofnHFMjVDn56d7zME7yMY+yhk1eA=; b=OSemEQHurabtMJLobq9Y4HDKZ0pC1hRBHVDBHvqiFol4Vfbq8LN7oDnDAslW8h+Lhe MWbQcM3lPDf0U2UJWW+jpWqtyc5IC6u+t2zSUkTWr6uWCutzB30urCjPtIt+U/7dpwPl Y1apb4SMlGxWJL57pf0/IgRkMRjJnbbDWpGuKepUwCfnLUUIZ3NdTItu5+kPNloLld89 XV62UIm2EXnYojM7bwbbEK9LYhBqwD4nZFX354//ZSbkqxs+VMyfC9NO+YjOZCc3TCzi 8t/768xgtwis7iyyn3LUGA38DlZIknmML6cko0Hu3jVxlUEhUSLn+mQ3b8KKqtKVtzND 3Gpw== X-Gm-Message-State: APjAAAW5D0GrZCU0vfINdmdz+8BSbazALZ+Q5lM5ZEHG72KDt/n4zm41 t1BE+BW7E3GT8I/m9FJxyWcMmT03bc7pT922Mc1kAzuX X-Google-Smtp-Source: APXvYqz+xkjoBqX3oWRE4+39ouxfEeP50HXFmiXL9Pgu2EkWgkDL+P0/X/wmC3S2wSkf9Y9UlRMUCUD5pR+ikCapVQM= X-Received: by 2002:aca:3044:: with SMTP id w65mr3808169oiw.158.1573653624774; Wed, 13 Nov 2019 06:00:24 -0800 (PST) MIME-Version: 1.0 References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> <17817346-ca7d-9728-7cd2-148c16eb2858@sandelman.ca> In-Reply-To: <17817346-ca7d-9728-7cd2-148c16eb2858@sandelman.ca> From: Kathleen Moriarty Date: Wed, 13 Nov 2019 08:59:48 -0500 Message-ID: To: Michael Richardson Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000004df53a05973ac977" Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 14:00:27 -0000 --0000000000004df53a05973ac977 Content-Type: text/plain; charset="UTF-8" Clever, but what about the people that hate rats? I try to dis-associate when I think of the working group. Are there any cute rat images or one that is white? Thanks! Kathleen On Wed, Nov 13, 2019 at 7:10 AM Michael Richardson wrote: > > > On 2019-11-13 9:03 a.m., Salz, Rich wrote: > > Is the rat clip-art public domain? > > Thanks for asking! > Yes, I try to be meticulous when I'm grabbing artwork from the Internet. > I have a script that wget's stuff and saves it to "credits.txt" so that > I have a record! > > I thought clker had explicit CC statements for each item, but they say > things are public domain. > (Which actually means that their terms of use are null and void. > Stallman figured that out 40 years ago) > > Anyway, here are the components: > http://www.clker.com/clipart-grey-greedy-rat.html > http://www.clker.com/clipart-sniper-optic.html > > Given that I put some public domain stuff together, I get to assert a > copyright on the collection if I want. > So, I'd use: Attribution-ShareAlike 4.0 International > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > -- Best regards, Kathleen --0000000000004df53a05973ac977 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Clever, but what about the people that hate rats?=C2=A0 I = try to dis-associate when I think of the working group.=C2=A0 Are there any= cute rat images or one that is white?

Thanks!
Kathleen

On Wed, Nov 13, 2019 at 7:10 AM Michael Richardson <mcr+ietf@sandelman.ca> wrote:=


On 2019-11-13 9:03 a.m., Salz, Rich wrote:
> Is the rat clip-art public domain?

Thanks for asking!
Yes, I try to be meticulous when I'm grabbing artwork from the Internet= .
I have a script that wget's stuff and saves it to "credits.txt&quo= t; so that
I have a record!

I thought clker had explicit CC statements for each item, but they say
things are public domain.
(Which actually means that their terms of use are null and void.=C2=A0
Stallman figured that out 40 years ago)

Anyway, here are the components:
http://www.clker.com/clipart-grey-greedy-rat.html
http://www.clker.com/clipart-sniper-optic.html=C2= =A0

Given that I put some public domain stuff together, I get to assert a
copyright on the collection if I want.
So, I'd use:=C2=A0 Attribution-ShareAlike 4.0 International


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000004df53a05973ac977-- From nobody Wed Nov 13 06:01:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48E9D120169 for ; Wed, 13 Nov 2019 06:01:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FGS3eO34czvW for ; Wed, 13 Nov 2019 06:01:12 -0800 (PST) Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com [IPv6:2607:f8b0:4864:20::334]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B16F12003E for ; Wed, 13 Nov 2019 06:01:12 -0800 (PST) Received: by mail-ot1-x334.google.com with SMTP id m15so1664907otq.7 for ; Wed, 13 Nov 2019 06:01:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=DQA7X/DVFdf6NCKflHR0g762Dyd7j1GWQk1+gDi3vW4=; b=SfIMhbab51Kztmu8s+pAd+7WWAIjsLzXPJcOtK82CtLPAzVnoxuVZ2Dut7gHz3eiRd GtvtfYGMc/bYsn53LQzYx6fz+Lvfg18gHzkwOp1tUmEBV0AvdgTMm4NLMXxukmwNvM3C 0kC0++jTFT8Zr95Q0Ng4zJycQpodaaun8nV0lyInrYyPQF1IuG52YOTev6HE4jQHUvUM c0XxGyA/QxLx9/+OyWEI9vpBixgY8H2uUXmrwRq2qa7CZzttOBSXqpy5ehIY/T7jKgOi ssDzXTU6mrbS4vYtx8EeCa8HTZNKUP3x0eODPZZTpbbrAndgjpltHLOd6NqeuflI04ii ZJhw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=DQA7X/DVFdf6NCKflHR0g762Dyd7j1GWQk1+gDi3vW4=; b=KsK+gtrz72zh42dblsrbL+wiTVqQzHwyscIp4/4vYkUCps6OXInjEIDYqWD4j2efle LS/oytxBEg0USYgn9hYDSrCDG8Xwwy2OEfxha71SgCRe09s+ht0UXV5usb8v1+9boBDV oU2PxSTlAWh+/9/rQkS0cjfmND41/66/gi1RFjovjG9izi70Nze17+gTZAZVcQ0hu3q8 v2MLbxCmlMvQ+g1KpZsRJweTOXPNsPWmjKPiGaKMREY4wP9shlTHqr5VTaFXrSAPt/VH GaD7N0lOou7R1Z2lAtegEomKUOGH31IVG+g12YE2ZzoLafxS/47p5wYdljoqLvEDTQ/8 BGgg== X-Gm-Message-State: APjAAAWBPAjI0iokiPDayeavxcLdzCFNsj9ay7VjljXGmQ/k1AimWUxX XeyNd1FF/bVUwqaViLSjBl8cRkmd/rRGgLwjZn8= X-Google-Smtp-Source: APXvYqxX7ixnjviT37mZHkoiOnhQKKTzFH2exCRXLZPYE72GA3xClpl2W5HnYtKk3tLu4c6Qm+ZbWtrN2E1ngGznoKg= X-Received: by 2002:a9d:5902:: with SMTP id t2mr3514846oth.151.1573653671871; Wed, 13 Nov 2019 06:01:11 -0800 (PST) MIME-Version: 1.0 References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> <17817346-ca7d-9728-7cd2-148c16eb2858@sandelman.ca> In-Reply-To: From: Kathleen Moriarty Date: Wed, 13 Nov 2019 09:00:36 -0500 Message-ID: To: Michael Richardson Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000001c892705973accbf" Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 14:01:14 -0000 --0000000000001c892705973accbf Content-Type: text/plain; charset="UTF-8" Oh, and I know a few artists.... not sure if any would be willing if a cuter image is not available. On Wed, Nov 13, 2019 at 8:59 AM Kathleen Moriarty < kathleen.moriarty.ietf@gmail.com> wrote: > Clever, but what about the people that hate rats? I try to dis-associate > when I think of the working group. Are there any cute rat images or one > that is white? > > Thanks! > Kathleen > > On Wed, Nov 13, 2019 at 7:10 AM Michael Richardson > wrote: > >> >> >> On 2019-11-13 9:03 a.m., Salz, Rich wrote: >> > Is the rat clip-art public domain? >> >> Thanks for asking! >> Yes, I try to be meticulous when I'm grabbing artwork from the Internet. >> I have a script that wget's stuff and saves it to "credits.txt" so that >> I have a record! >> >> I thought clker had explicit CC statements for each item, but they say >> things are public domain. >> (Which actually means that their terms of use are null and void. >> Stallman figured that out 40 years ago) >> >> Anyway, here are the components: >> http://www.clker.com/clipart-grey-greedy-rat.html >> http://www.clker.com/clipart-sniper-optic.html >> >> Given that I put some public domain stuff together, I get to assert a >> copyright on the collection if I want. >> So, I'd use: Attribution-ShareAlike 4.0 International >> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > > > -- > > Best regards, > Kathleen > -- Best regards, Kathleen --0000000000001c892705973accbf Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Oh, and I know a few artists.... not sure if any would be = willing if a cuter image is not available.

On Wed, Nov 13, 2019 at 8:59 AM K= athleen Moriarty <ka= thleen.moriarty.ietf@gmail.com> wrote:
Clever, but what about the p= eople that hate rats?=C2=A0 I try to dis-associate when I think of the work= ing group.=C2=A0 Are there any cute rat images or one that is white?
Thanks!
Kathleen

On Wed, Nov 13, 2019 at 7:10 A= M Michael Richardson <mcr+ietf@sandelman.ca> wrote:


On 2019-11-13 9:03 a.m., Salz, Rich wrote:
> Is the rat clip-art public domain?

Thanks for asking!
Yes, I try to be meticulous when I'm grabbing artwork from the Internet= .
I have a script that wget's stuff and saves it to "credits.txt&quo= t; so that
I have a record!

I thought clker had explicit CC statements for each item, but they say
things are public domain.
(Which actually means that their terms of use are null and void.=C2=A0
Stallman figured that out 40 years ago)

Anyway, here are the components:
http://www.clker.com/clipart-grey-greedy-rat.html
http://www.clker.com/clipart-sniper-optic.html=C2= =A0

Given that I put some public domain stuff together, I get to assert a
copyright on the collection if I want.
So, I'd use:=C2=A0 Attribution-ShareAlike 4.0 International


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen


--

Best regards,
Kathleen
--0000000000001c892705973accbf-- From nobody Wed Nov 13 08:42:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 963BA12095D for ; Wed, 13 Nov 2019 08:42:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v0pHqYHT2F2n for ; Wed, 13 Nov 2019 08:42:07 -0800 (PST) Received: from p3plsmtpa08-02.prod.phx3.secureserver.net (p3plsmtpa08-02.prod.phx3.secureserver.net [173.201.193.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5556E12095C for ; Wed, 13 Nov 2019 08:42:07 -0800 (PST) Received: from [10.141.0.146] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UviYiLZxhSGDjUviYiSGlu; Wed, 13 Nov 2019 09:42:06 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_2A131816-B1BF-467D-B02A-BE22B16C87FB" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 13 Nov 2019 08:42:06 -0800 In-Reply-To: Cc: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" To: Dave Thaler References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <9D447837-954B-4717-B4EC-22FE9A5EF36B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfA8bTGIp7mvj0PWkPAi789MX/IN0bapaWqJGPulQ7SDc2ppTyAzy0W98EJdU2lcbDBzZ1j3JPptiY3BOA7osGqcyrzIkDddgU28J1BSkTJbkxj5ElPYK fbmOpMFoAfP59jTEtozR2tYJoRXgfqVWnjfY1FmY8XnSWlUsF0EJdy7sVHf0eTqkNgTMk2eAL0L1tcht9b6yiX9pb7txObVWIbx9SJcZUZAmB608L4YPMrtQ aumSrx9dLbSuteNn0NE4oLLTY5AwxaoGN+U13VvGQtpmJ7uVhY/ALvksiRg82KXI/r+b+02QMLqrbI9LunGjZ6SfQkyru1wddSrUkdBGWsqrFnQgGiRTNiqx 6qO1q1ZM+k7Lao/1BJHks7ioqQcJYg== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 16:42:10 -0000 --Apple-Mail=_2A131816-B1BF-467D-B02A-BE22B16C87FB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Understood and agree with your firewall and privacy explanations. > On Nov 12, 2019, at 4:56 PM, Dave Thaler = wrote: >=20 > (By =E2=80=9CFirmware=E2=80=9D I meant what you call = =E2=80=9Cvirtualization=E2=80=9D, not just Microsoft VBS in particular, = but just the notion that a hypervisor or firmware provides some level of = attestation guarantees for higher layer components.) I think of firmware as some very basic boot-type software that is in ROM = or in flash memory. When updated, it is usually by some re flashing or = factory reset operation. A hypervisor is definitely not what I think of = as firmware. LL= --Apple-Mail=_2A131816-B1BF-467D-B02A-BE22B16C87FB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Understood and agree with your firewall and privacy = explanations.

On Nov 12, 2019, at 4:56 PM, Dave Thaler = <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

(By =E2=80=9CFirmware=E2=80=9D I = meant what you call =E2=80=9Cvirtualization=E2=80=9D, not just Microsoft = VBS in particular, but just the notion that a hypervisor or = firmware provides some level of attestation = guarantees for higher layer = components.)

I think of firmware as some very basic = boot-type software that is in ROM or in flash memory. When updated, it = is usually by some re flashing or factory reset operation.  A = hypervisor is definitely not what I think of as firmware.

LL
= --Apple-Mail=_2A131816-B1BF-467D-B02A-BE22B16C87FB-- From nobody Wed Nov 13 08:55:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D4841208C8 for ; Wed, 13 Nov 2019 08:55:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URI_HEX=0.1, URI_NOVOWEL=0.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=Mobv/6Lq; dkim=pass (1024-bit key) header.d=juniper.net header.b=AVRUlt2e Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ced6JR4We6nL for ; Wed, 13 Nov 2019 08:55:44 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E6BD12090B for ; Wed, 13 Nov 2019 08:55:44 -0800 (PST) Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xADGgCAT026038; Wed, 13 Nov 2019 08:55:41 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=5kb5quajFcMwg5U057e6LK0hr0SJdeQVDVrQZB9T9PQ=; b=Mobv/6LqEmukYD9pb8nVfTN31Tdg2aP0e+1OslQjSC8pTHdA/+iUJI+jQD6BzuP/QU/z WWSMTVepQi4wmNsedpg1y0WGkmvZxd9aOQ99een5LGl5AAyBhuJ4DmU/Am3VtntR58jp /jvy5HmLR9JH2SsYStqlfsFspj8+vp+Zd56+pzUECvP/2lRsugQuSa4U/eYw2gQgJu3U Ct1YRa8D46c4SLaAjaODKijo9hNvxP1//VCJJLZPs5g9SeK/IIwoZrKtRy5s24yuVZbz 7ma0hYVnP0N6bIkmZ4fKBZwMW+vad45ZwpB8H+ez89h5uW20joJhUUJPUnuPdOF6WSfZ cw== Received: from nam03-dm3-obe.outbound.protection.outlook.com (mail-dm3nam03lp2059.outbound.protection.outlook.com [104.47.41.59]) by mx0a-00273201.pphosted.com with ESMTP id 2w7prpkavg-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 13 Nov 2019 08:55:41 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gv2LGpHfKLMJ9x9NhPXIJ9YTeOgNgUrUhWloj46rn5Bo6Q07xKHe3pdl4ULGeSWs/Q9JD/jzYiLfyutRa7/sXDknMLvpCubRvrq+qpz5n2Tbj93Zqa1R6euPun41Kmfb2at3N7MmFSc9fmIAs1p9irmTfL0y8CxP+tPbt9SmNqaKmSK4lVrCkzxfO2EsjvFXR3fz/8swxQJcqJQ8vsgTZg1KbFDMOn5gmXFWXOfSGDx1HdxFz3Vz/HyiPfxF230BmSrFquGQV4VxiJrLzBP1mj/ye4mXX7VTIyrawhLlOfW55JQSWnFsT0dRaWGqBB/hMAfAsiPI16ZJjCk5GyglmQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5kb5quajFcMwg5U057e6LK0hr0SJdeQVDVrQZB9T9PQ=; b=IfBlpkXFiBfe3nde78c+a/AF5M6CSYr1gg7wDpl727eAt9Sf+I5tVR7gvbNURxSEktFaYJIoj5kBNCr0o252e0D/Jn4Mllp5nJF0k6FLx9kfmF2s2rcU0ww4VAg0mQ7CzXE8wCvMl/NuISLhMs8frM5n6LF/zIuetLDjrjGAhdHJ0US1Y3oMQAwT7ORnUQO8wKzHbe/X2HzQAGSO2yjajeATJcrtjzFNoIH5oBrxV0EkVL0h0kj8RUmqW0TS272a8scj98k48qG9HQT9GxKDrbAz2nSGxfBwD9TXx8msIPWDN9ZGz6BUkhR798yo7rOJRF9CoYFDbX8alV7q41JZLg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5kb5quajFcMwg5U057e6LK0hr0SJdeQVDVrQZB9T9PQ=; b=AVRUlt2eNgz3rkXWAdQTvE+9LW93WVf0TXftobjKS/N2rEVEmYrLkt4K874w/fqxov1QCu1jbz+HZTEwmUit3HAgP8bp3nkbBngTjBXWJ3UbUOIMtNIthAnv4XQ8z0y7fIs8TnxhxKkjrHluBA5RdeENX9cYBxloKC09B+rcZgQ= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB5751.namprd05.prod.outlook.com (20.178.51.205) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.17; Wed, 13 Nov 2019 16:55:38 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2451.023; Wed, 13 Nov 2019 16:55:38 +0000 From: Guy Fedorkow To: Dave Thaler CC: "rats@ietf.org" , Thomas Hardjono , "Smith, Ned" , Henk Birkholz , Jessica Fitzgerald-McKay Thread-Topic: Comments on draft-fedorkow-rats-network-device-attestation-00 Thread-Index: AdWVAeYZl01Kj/T7RhKuuFayaZmLkQABRoFwAFG+ZHAA+zfH4A== Date: Wed, 13 Nov 2019 16:55:38 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=dc0a14cb-52f7-481f-9452-45415e41c007; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-04T20:56:07.9046064Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-10-31T19:26:53.5191743Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c07f85d3-3baa-4bca-9285-7a27b371dd42; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.14] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6fc87750-c770-46c8-94c3-08d7685a4f95 x-ms-traffictypediagnostic: BYAPR05MB5751: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0220D4B98D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(396003)(39860400002)(346002)(366004)(376002)(40224003)(199004)(189003)(476003)(2906002)(99286004)(486006)(33656002)(9326002)(25786009)(66476007)(66946007)(66556008)(66446008)(6506007)(76116006)(9686003)(6306002)(76176011)(64756008)(74316002)(54896002)(55016002)(54906003)(229853002)(6436002)(86362001)(53546011)(11346002)(81156014)(7736002)(236005)(316002)(8676002)(26005)(186003)(446003)(81166006)(7696005)(52536014)(71200400001)(30864003)(606006)(5660300002)(14454004)(6116002)(3846002)(790700001)(256004)(14444005)(102836004)(66066001)(5024004)(6246003)(478600001)(8936002)(966005)(45080400002)(71190400001)(4326008)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB5751; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: LPoOhhE8TfXAyY2UI3zCIHqsOMQhsQChkMomDDWaN75btviRgQEkBqbCaF/iILh7cqpXph07m+3/lemKOzig0sNBE43HCOCFNBdU+wRabrD5i0ks9R9SQkjfE09/vrpdYG1lCgvnIrcyT3wx6Vkn+IMiNx7oKY7esfbxSq7RZtJ4Zflr3Vrb0yRAhtCkCEYYOD/sqUm6IluP1rKR/1GuNy94RUUnaLmJta759HlEteEay1LVrWgEB3uAGRa3zQfwpn27O1Xkqy2+znUa2rOrAqGCWB222/sVU6qm2JwnFB9mUaxD6xIsqPUkM8OGdAAB6WwHDRyXp6ZR2JMRgUzVG9CJdm0MgKTIBSpqOA+b2yi+V/ZfkAYDVnOX39ae1NNM9GbYh6+/rRvdnkeO7QoerPlE+kuLG9oC7utblZ7SOVo/MCXWSsEhYr7pqD8E+tAM x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB424898EBF159057CD41A8E84BA760BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 6fc87750-c770-46c8-94c3-08d7685a4f95 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Nov 2019 16:55:38.6160 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: zdav4Ds85m65UL6KF64eHmBzQ3ACADy8W9eJ0i0HqH3OTTXmfQweckkkVgdw4BQMVDBZLayiYVcWmzwlpckbgg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB5751 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-13_04:2019-11-13,2019-11-13 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxlogscore=999 impostorscore=0 adultscore=0 suspectscore=0 clxscore=1015 priorityscore=1501 spamscore=0 malwarescore=0 bulkscore=0 phishscore=0 mlxscore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911130147 Archived-At: Subject: Re: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 16:55:49 -0000 --_000_BYAPR05MB424898EBF159057CD41A8E84BA760BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dave, I'd like to respond to two points in your original message. I think you asked (indirectly) why RIV calls for separate keys for attest= ation and identity. That's due to a particular TPM anti-spoofing security = principal... Attestation evidence is collected entirely inside the TPM. In the conven= tional Measured Boot flow, the rot of trust measures the first mutable comp= onent, which then measures the second, and so on in a chain. Each time a m= easurement is taken, the TPM "extends" the value into a TPM PCR. Net resul= t is that the measurement showing that a section of code is out of whack is= taken before that code is run, i.e., the hack doesn't have a chance to man= ipulate the end result, because it's measured by something trusted first. To preserve that property, the "quote" that reports the accumulated PCRs = must be signed inside the TPM, so that the attesting system must transfer t= he result to the verifier without modification. Net result is that, even i= f the attesting system is hacked, it can't pretend to be unmodified by clea= ning up the quote before it goes to the verifier. But for that to be true, it must be impossible for the attesting system t= o forge a valid quote. And for that to be true, it must be impossible for = the attesting system to make up a quote from nothing, and convince the TPM = to sign it with the attestation key. And identity key, on the other hand, must sign whatever it's asked to sig= n. The Identity Key signature doesn't say anything about what it was that = got signed, its purpose is to prove that, what ever it was, it got signed b= y the specific TPM. So there's nothing to prevent an attesting system from= making up a quote, and having it signed by an identity key. So that leads= to a desire for separate keys. But you still have to prove that the quote comes from the same device as= the identity (the so-called Asokan man in the middle attack). The TPM has= a mechanism to prove that two keys are resident in the same TPM, but RIV t= akes a simpler approach, but asking whoever provisions the keys (the manufa= cturer by default) to make the attestation key and identity keys at the sam= e time, and put the same identity information into the corresponding two ce= rtificates. So the verifier can look at the identity certificate and the a= ttestation certificate, check that they are both valid signatures from the = appropriate authority (e.g. the manufacturer), check that they have the sam= e model and device serial number, and from there, know that the attestation= result originated on the box that they're trying to attest. There is a secondary detail that makes the issue a bit less black-and-whi= te. For TPM1.2, the roles of attestation and identity keys simply must be = separate, end of story. In TPM2.0, it's possible to use one key for both, = with a tiny probability of something going wrong... that is, an attestatio= n key can sign an external object, as long as it doesn't appear to spoof a = quote. But cryptographers usually then argue that good key management shou= ld use separate keys for separate functions, and we note that some Identity= protocols require keys capable of encryption as well as signing, and so to= simplify the cases, we ended up simply keeping them separate. Apologies for the long-winded response, but I hope that helps clarify the= oblique reference in the RIV doc to two keys for anti-spoofing". I can up= date the doc. There was also a question about scope of the doc. There is actually a re= ason that it's been left a bit ambiguous at TCG. The doc is currently focu= sed on YANG as the external interface for attestation. That's clearly aime= d at networking gear - I don't think anyone else uses YANG. Other applicat= ions, such as attesting the state of large embedded controllers in industri= al gear, would follow the same workflow, but would undoubtedly want some ot= her protocol. It would be a simple job to extend the doc to those use case= s by adding additional protocols, although there are none specifically in t= he pipeline that I know of. The other focus for the doc is TPM. Of course there are other roots of t= rust that might be able to fill the same role, and might use the same workf= low. That's a tougher job to estimate, so we declared it out-of-scope for = now. Oh, and the third restriction, "things that don't sleep"... this is defin= itely not fundamental. The TPM clearly can be used in PCs that sleep, but = getting in and out of sleep and hibernate states is complicated. Large emb= edded devices typically have no application for sleep and hibernate, so we = declared it out of scope for RIV. If someone wants to add it back in, ther= e are no fundamental limitations. For the RATS context, I'm fine with revising the doc to make the scope cl= earer. Let me know if this addresses your questions... And Henk, Ned, let me know if I'm misrepresenting keying policies! Thanks /guy Juniper Business Use Only From: Guy Fedorkow Sent: Friday, November 8, 2019 11:10 AM To: Dave Thaler Cc: rats@ietf.org; Thomas Hardjono ; Smith, Ned ; Henk Birkholz ; Jessica Fitz= gerald-McKay Subject: RE: Comments on draft-fedorkow-rats-network-device-attestation-00 Hi Dave, I'll look at the title and scope again. Within TCG, we'd left it a bit a= mbiguous, as there are a number of applications that it would fit without t= oo much work. But for RATS, I'm fine with being more careful to delineate = where the work as written fits. We'll think of a more-formal way to say this, but as Jessica said, the ac= tual scope of the doc is "things with a TPM that use YANG, and don't do sle= ep/wake cycles". I assume this can't be changed now given that the IETF106 deadline has pa= ssed, but there will be another revision one way or another in which I can = address your other comments. Thanks /guy Juniper Business Use Only From: Dave Thaler > Sent: Wednesday, November 6, 2019 8:18 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: Comments on draft-fedorkow-rats-network-device-attestation-00 And a couple of additional comments on -01 (the subject had -00 in it and p= robably shouldn't have) * Since section 1 scopes the definition of RIV to certain types of netw= ork equipment, I find the term RIV to be overly broad, since it has a name that implies it is remote attestation for= all purposes, which it's apparently not. I would recommend that, like the title of the doc, the term RIV be narrowed= significantly by adding words to indicate its narrow scope. * Section 4 says: In light of these requirements for protecting the privacy of users of the network, the Network Equipment must identify itself, and its boot configuration and measured device state (for example, PCR values), to the Equipment's Administrator, so there's no uncertainty as to what function each device and configuration is configured to carry out . RIV specifically addresses the collection information from enterprise network devices by an enterprise network. However, those two sentences appear to be contradictory. T= he first one talks about the "Equipment's Administrator" whereas the second one talks= about "an enterprise network". Unless you further narrow the scope in section 1.5 to only c= ases where those are the same, you should not assume that the "Equipment's Administrator" a= nd the "enterprise network" are the same organization. * Another point on the same text in section 4 is that it talks about "b= oot" configuration and then says "there's no uncertainty as to what function each device and configuration i= s configured to carry out". In order to have "no uncertainty" you either have to remove the word "boot"= , so that it's not just "boot" configuration, but configuration in general, or else constrain your = definition of "embedded" to cases where all configuration and functionality is fixed at boot time. = That's common in embedded, but not universal, depending on your definition of embedded. Currently you= only define "embedded" as "where the device manufacturer ships the software image for the device" but that by itself doesn't mean all functionality is fixed at boot time. E= .g., the configuration might be separate from the software image, and might even be obtained after boot, un= less you scope down your definition of "embedded". * Section 5 says "TPM practices require that these keys be different, as a way of ensuring that a general-purpose signing key cannot be used to spoof an attestation quote." and "To prevent spoofing, the quote generated inside the TPM must by signed by a key that's different from the DevID, called an Attestation Key (AK)." The claim that a split is necessary to prevent spoofing is non-obvious (I k= now I didn't follow it). I would recommend either 1. Delete the text about spoofing and just say that's how TPM works, or 2. Provide an explanation, or 3. Reference a publically accessible document that has the explanation. Dave From: RATS > On Behalf = Of Dave Thaler Sent: Wednesday, November 6, 2019 4:26 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attestation-= 00 [updated subject line] Here's some comments on draft-fedorkow-rats-network-device-attestation-00, = in addition to the one in the thread copied at bottom... Section 1.2: ? o Platform Identity, the mechanism providing trusted identity, can * reassure network managers that the specific devices they ordered * from authorized manufacturers for attachment to their network are * those that were installed, and that they continue to be present in * their network. As part of the mechanism for Platform Identity, * cryptographic proof of the identity of the manufacturer is also * provided. Above is somewhat ambiguous. When it says "the specific devices", is it t= alking about device instances (in the exact serial number or key pair sense), or the same models? I.e.,= I ordered 3 widgets, and I got three widgets (and not three oranges or something else). Is this talking a= bout verifying that they're widgets, or that they're the precise 3 widgets you're expecting? I suspec= t you mean the latter but it's not clear. Assuming you do mean instances, then knowing that they're the spec= ific devices that were ordered presumes some mechanism for learning the public keys of the devices ordered= , prior to their arrival, and this should be called out. Section 2.1 discusses the model where the verifier communicates directly wi= th the attested device. However, it doesn't point out the problems with that model, which is that t= he attested device will see this as unsolicited inbound communication, and hence and sort of host firewall-l= ike behavior will prevent the interrogation from succeeding. Section 1.5 already constrains the scope = to a very narrow scenario, but it's not sufficient, it has to be constrained further to the scenario where= unsolicited inbound communication is permitted. Allowing unsolicited inbound communication opens up other p= otential security and privacy risks that should be discussed in sections 4 and 5. Given the narrowness of the applicability, and the security and privacy ris= ks inherent in the model where the verifier communicates directly with the attested device, it's not obvio= us why this is a good direction to pursue, especially if there might be alternatives that are both more bro= adly applicable, and more secure/private. I have no objection if there are good reasons, but the draft doesn't yet pr= ovide sufficient justification in my view. Thanks, Dave From: Guy Fedorkow > Sent: Wednesday, November 6, 2019 12:57 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Dave, Ok, I suppose the model where the verifier communicates directly with the= attested device is a kind of sub-contracted full-service background check.= That's ok with me, as long as no one interprets the diagram as meaning th= at the relying party must somehow insert itself into the exchange between V= erifier and Attester. And I see what you mean about lining up the scope of RIV. The draft has = gone through a number of changes as we've tried to disentangle it from TCG = tribal knowledge. I think the scope is set by a couple factors. The doc as written is clearly limited to TPM-based systems. That's certa= inly not the only way to manage a root of trust, but it's the one that's av= ailable on a lot of gear already, and it's fairly stable and tightly spec'd= . From the TCG side, I'd expect there would be interest in extending the i= deas to other TCG roots of trust such as DICE, but it seems that should be = driven out of TCG. The limitation to Network Equipment is entirely a matter of expedience. = I think the approach would work easily in other embedded applications, alth= ough YANG is likely a fixation only relevant to networking guys. Other dom= ains would presumably need other domain-specific protocols. I'll connect with Jessica to see if we can figure out how to align the na= me and scope a bit better with the rest of the RATS world. Thanks /guy Juniper Business Use Only From: Dave Thaler > Sent: Monday, November 4, 2019 3:56 PM To: Guy Fedorkow > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: RE: RIV and the RATS architecture Hi Guy, sorry for the delay, I was at a conference (Open Source Summit, Con= fidential Computing Consortium, and Linux Security Summit were all co-locat= ed) all last week and traveling there/back. Responses inline below... From: RATS > On Behalf = Of Guy Fedorkow Sent: Thursday, October 31, 2019 12:27 PM To: Dave Thaler > Cc: rats@ietf.org; Thomas Hardjono >; Smith, Ned >; Henk Birkholz >; Jessica Fitzgerald-McKay > Subject: [Rats] RIV and the RATS architecture Hi Dave, Thanks for your doc https://tools.ietf.org/html/draft-thaler-rats-archite= cture-00. Do you have a view as to how the TPM-based attestation described in RIV w= ould fit with the proposed categorization? https://tools.ietf.org/html/draft-fedorkow-rats-network-device-attestation-= 00 Great question. From my reading of draft-fedorkow-rats-network-device-attes= tation-00, it's a background check model, as section 2.3 of your doc explai= ns: > 3. A Relying Party, which has access to the Verifier to request > attestation and to act on results. That sentence above is by definition the background check model. That is, the Attester talks to the Relying Party, the Relying Party then re= quests a background check by consulting a Verifier, and will accept whatever answer the Verifier decides. There are ways where you could use the passport model for network device at= testation, but your document only covers the background check model. It doesn't seem to be a passport, since the attester only provides raw ev= idence, not a pre-approved passport Agreed, from my reading of your document. It doesn't seem to be a background check, as it's the verifier that colle= cts and analyzes the evidence. If I understand your point here, you're saying that the verifier talks dire= ctly to the attester (e.g., by querying the yang module), without going bac= k through the relying party, and that that seemed to you to be different fr= om a classic "background check" diagram. Did I get your point correctly? If so, then I see it as a variation of the background check model, as oppos= ed to a separate model per se. I'm not sure it matters to RIV, as we haven't drawn much distinction betw= een the relying party and the verifier... As you say, if they're on the sa= me machine, the distinction is almost moot. Agree. And if they're not, I think the communication is out of scope for RIV (if n= ot for RATS). I disagree that it's out of scope for RATS. I have no opinion on whether it's out of scope for RIV, since I still have = some confusion on the intended scope of RIV. I note that your document constrains its scope (in section 1.5) to only TPM= -based embedded devices, and not other types of devices. I couldn't tell if the scope of RIV and the scope of th= e draft (which does not have RIV in the name, or in section 1.5) are similar or one is a subset of the other. Indeed, the tit= le of the document is far wider than just TPM-based embedded devices, so in that sense the title doesn't match the scoping in s= ection 1.5. Just explaining why there's not enough information for me to have an opinion on verifier-relying party comm= unication in RIV. There can be other network attestation solutions that look quite different = from the flow in your draft (and I have no skin in this game, so don't have a bias towards any solution= in particular). For example, some other solution might involve a RADIUS server being a Verifier, so the = verifier - relying party communication might be RADIUS in that example. There's many ways to construct solutions, and = so I imagine there's probably multiple solutions already out there, since the NEA problem is not new even in the I= ETF (https://tools....ietf.org/wg/nea/ has pointers to RFCs for anyone reading this who's not already aware of it). But it would be good ensure the architecture and the applications of it a= ctually do fit together... Absolutely. Dave Thanks /guy Juniper Business Use Only --_000_BYAPR05MB424898EBF159057CD41A8E84BA760BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Dave,

  I’d like to respond to two points in yo= ur original message.

 

  I think you asked (indirectly) why RIV calls = for separate keys for attestation and identity.  That’s due to a= particular TPM anti-spoofing security principal…

  Attestation evidence is collected entirely in= side the TPM.  In the conventional Measured Boot flow, the rot of trus= t measures the first mutable component, which then measures the second, and= so on in a chain.  Each time a measurement is taken, the TPM “extends” the value into a TPM PCR.  Ne= t result is that the measurement showing that a section of code is out of w= hack is taken before that code is run, i.e., the hack doesn’t have a = chance to manipulate the end result, because it’s measured by something trusted first.

  To preserve that property, the “quote&#= 8221; that reports the accumulated PCRs must be signed inside the TPM, so that the attesting system must transfer the resul= t to the verifier without modification.  Net result is that, even if t= he attesting system is hacked, it can’t pretend to be unmodified by c= leaning up the quote before it goes to the verifier.

  But for that to be true, it must be impossibl= e for the attesting system to forge a valid quote.  And for that to be= true, it must be impossible for the attesting system to make up a quote fr= om nothing, and convince the TPM to sign it with the attestation key.

  And identity key, on the other hand, must sig= n whatever it’s asked to sign.  The Identity Key signature doesn= ’t say anything about what it was that got signed, its purpose is to = prove that, what ever it was, it got signed by the specific TPM.  So there’s nothing to prevent an attesting system from ma= king up a quote, and having it signed by an identity key.  So that lea= ds to a desire for separate keys.

  But  you still have to prove that the qu= ote comes from the same device as the identity (the so-called Asokan man in= the middle attack).  The TPM has a mechanism to prove that two keys a= re resident in the same TPM, but RIV takes a simpler approach, but asking whoever provisions the keys (the manufacturer by defa= ult) to make the attestation key and identity keys at the same time, and pu= t the same identity information into the corresponding two certificates.&nb= sp; So the verifier can look at the identity certificate and the attestation certificate, check that they are both vali= d signatures from the appropriate authority (e.g. the manufacturer), check = that they have the same model and device serial number, and from there, kno= w that the attestation result originated on the box that they’re trying to attest.

 

  There is a secondary detail that makes the is= sue a bit less black-and-white.  For TPM1.2, the roles of attestation = and identity keys simply must be separate, end of story.  In TPM2.0, i= t’s possible to use one key for both, with a tiny probability of something going wrong…  that is, an attestation = key can sign an external object, as long as it doesn’t appear to spoo= f a quote.  But cryptographers usually then argue that good key manage= ment should use separate keys for separate functions, and we note that some Identity protocols require keys capable of encryptio= n as well as signing, and so to simplify the cases, we ended up simply keep= ing them separate.

 

  Apologies for the long-winded response, but I= hope that helps clarify the oblique reference in the RIV doc to two keys f= or anti-spoofing”.  I can update the doc.

 

  There was also a question about scope of the = doc.  There is actually a reason that it’s been left a bit ambig= uous at TCG.  The doc is currently focused on YANG as the external int= erface for attestation.  That’s clearly aimed at networking gear – I don’t think anyone else uses YANG.  Other applic= ations, such as attesting the state of large embedded controllers in indust= rial gear, would follow the same workflow, but would undoubtedly want some = other protocol.  It would be a simple job to extend the doc to those use cases by adding additional protocols, although there = are none specifically in the pipeline that I know of.

  The other focus for the doc is TPM.  Of = course there are other roots of trust that might be able to fill the same r= ole, and might use the same workflow.  That’s a tougher job to e= stimate, so we declared it out-of-scope for now.

  Oh, and the third restriction, “things = that don’t sleep”… this is definitely not fundamental.&nb= sp; The TPM clearly can be used in PCs that sleep, but getting in and out o= f sleep and hibernate states is complicated.  Large embedded devices typically have no application for sleep and hibernate, so we declared it o= ut of scope for RIV.  If someone wants to add it back in, there are no= fundamental limitations.

 

  For the RATS context, I’m fine with rev= ising the doc to make the scope clearer.

 

  Let me know if this addresses your questions&= #8230;

 

  And Henk, Ned, let me know if I’m misre= presenting keying policies!

Thanks

/guy

 

 

 

 

 

 

Juniper Business Use Only

From: Guy Fedorkow
Sent: Friday, November 8, 2019 11:10 AM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardjono <hardjono@mit.edu>; Smith, = Ned <ned.smith@intel.com>; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>; Jessica Fitzgerald-McKay <jmfmckay@gmail.com>
Subject: RE: Comments on draft-fedorkow-rats-network-device-attestat= ion-00

 

Hi Dave,

  I’ll look at the title and scope again.=   Within TCG, we’d left it a bit ambiguous, as there are a numbe= r of applications that it would fit without too much work.  But for RA= TS, I’m fine with being more careful to delineate where the work as written fits.

  We’ll think of a more-formal way to say= this, but as Jessica said, the actual scope of the doc is “things wi= th a TPM that use YANG, and don’t do sleep/wake cycles”.

  I assume this can’t be changed now= given that the IETF106 deadline has passed, but there will be another revi= sion one way or another in which I can address your other comments.

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.o= rg>
Sent: Wednesday, November 6, 2019 8:18 PM
To: Guy Fedorkow <gfedor= kow@juniper.net>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: Comments on draft-fedorkow-rats-network-device-attestat= ion-00

 

And a couple of additional comments on -01 (the subj= ect had -00 in it and probably shouldn’t have)

 

  • Since section 1 scopes the definition of RIV to certain types of netw= ork equipment, I find the term RIV to be

overly broad, since it has a name that implie= s it is remote attestation for all purposes, which it’s apparently no= t.

I would recommend that, like the title of the= doc, the term RIV be narrowed significantly by adding words

to indicate its narrow scope.

 

  • Section 4 says:

In light of these
   requirements for protecting the privacy of users of the networ= k, the
   Network Equipment must identify itself, and its boot configura= tion
   and measured device state (for example, PCR values), to the    Equipment's Administrator, so there's no uncertainty as to wha= t
   function each device and configuration is configured to carry = out .

 

RIV specifically addresses = the collection information from enterprise
   network devices by an enterprise network. 

 

        &nbs= p;      However, those two sentences appear to be = contradictory.   The first one talks about
            &nb= sp;  the “Equipment’s Administrator” whereas the sec= ond one talks about “an enterprise network”.

        &nbs= p;      Unless you further narrow the scope in sec= tion 1.5 to only cases where those are the same,

        &nbs= p;      you should not assume that the “Equi= pment’s Administrator” and the “enterprise network”=

        &nbs= p;      are the same organization.

 

  • Another point on the same text in section 4 is that it talks about &#= 8220;boot” configuration and then says
    “there’s no uncertainty as to what function each device and con= figuration is configured to carry out”.

In order to have “no uncertainty”= you either have to remove the word “boot”, so that it’s = not just

“boot” configuration, but configu= ration in general, or else constrain your definition of “embeddedR= 21;

to cases where all configuration and function= ality is fixed at boot time.  That’s common in embedded,

but not universal, depending on your definiti= on of embedded.  Currently you only define “embedded”=

as “where the device manufacturer ships the soft= ware image for the device”

but that by itself doesn’t mean all fun= ctionality is fixed at boot time.  E.g., the configuration might be

separate from the software image, and might e= ven be obtained after boot, unless you scope down your

definition of “embedded”.

 

  • Section 5 says

“TPM practices require that these keys = be different, as a way of
   ensuring that a general-purpose signing key cannot be used to = spoof
   an attestation quote.”

and

“To prevent spoofing, the quote generated inside= the TPM must by
   signed by a key that's different from the DevID, called an
   Attestation Key (AK).”

 

The claim that a spl= it is necessary to prevent spoofing is non-obvious (I know I didn’t f= ollow it).  I would recommend either

  1. Delete the text about spoofing and just say that’s how TPM work= s, or
  2. Provide an explanation, or
  3. = Reference a publically accessible document that has the explanation.

Dave

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Dave Thaler
Sent: Wednesday, November 6, 2019 4:26 PM
To: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] Comments on draft-fedorkow-rats-network-device-attes= tation-00

 

[updated subject line]

 

Here’s some comments on draft-fedorkow-rats-ne= twork-device-attestation-00, in addition to the one in the thread copied at= bottom…

 

Section 1.2:

=
Ø  o  Platform Id=
entity, the mechanism providing trusted identity, can
  • = reassure network managers that the specific devices they ordered=
  • from authorized manufacturers for attachment to their network a= re
  • those that were installed, and that they continue = to be present in
  • their network.  As part of the = mechanism for Platform Identity,
  • cryptographic proof = of the identity of the manufacturer is also
  • provided.=

 

Above is somewhat ambiguous.   When it say= s “the specific devices”, is it talking about device instances<= o:p>

(in the exact serial number or key pair sense), or t= he same models?   I.e., I ordered 3 widgets, and I got=

three widgets (and not three oranges or something el= se).  Is this talking about verifying that they’re

widgets, or that they’re the precise 3 widgets= you’re expecting?   I suspect you mean the latter but it&#= 8217;s not

clear.   Assuming you do mean instances, t= hen knowing that they’re the specific devices that were ordered<= /o:p>

presumes some mechanism for learning the public keys= of the devices ordered, prior to their arrival, and

this should be called out.

 

Section 2.1 discusses the model where the verifier c= ommunicates directly with the attested device.

However, it doesn’t point out the problems wit= h that model, which is that the attested device will see this

as unsolicited inbound communication, and hence and = sort of host firewall-like behavior will prevent the

interrogation from succeeding.    Sec= tion 1.5 already constrains the scope to a very narrow scenario, but

it’s not sufficient, it has to be constrained = further to the scenario where unsolicited inbound communication<= /p>

is permitted.   Allowing unsolicited inbou= nd communication opens up other potential security and privacy

risks that should be discussed in sections 4 and 5.<= o:p>

 

Given the narrowness of the applicability, and the s= ecurity and privacy risks inherent in the model where

the verifier communicates directly with the attested= device, it’s not obvious why this is a good direction

to pursue, especially if there might be alternatives= that are both more broadly applicable, and more secure/private.=

 

I have no objection if there are good reasons, but t= he draft doesn’t yet provide sufficient justification

in my view.

 

Thanks,

Dave=

 

From: Guy Fedorkow <gfedorkow=3D40juniper.net@dmarc.ietf.= org>
Sent: Wednesday, November 6, 2019 12:57 PM
To: Dave Thaler <dthaler= @microsoft.com>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Dave,

  Ok, I suppose the model where the verifier co= mmunicates directly with the attested device is a kind of sub-contracted fu= ll-service background check.  That’s ok with me, as long as no o= ne interprets the diagram as meaning that the relying party must somehow insert itself into the exchange between Verifier and At= tester.

 

  And I see what you mean about lining up the s= cope of RIV.  The draft has gone through a number of changes as weR= 17;ve tried to disentangle it from TCG tribal knowledge.

  I think the scope is set by a couple factors.=

  The doc as written is clearly limited to TPM-= based systems.  That’s certainly not the only way to manage a ro= ot of trust, but it’s the one that’s available on a lot of gear= already, and it’s fairly stable and tightly spec’d.  From= the TCG side, I’d expect there would be interest in extending the ideas = to other TCG roots of trust such as DICE, but it seems that should be drive= n out of TCG.

 

  The limitation to Network Equipment is entire= ly a matter of expedience.  I think the approach would work easily in = other embedded applications, although YANG is likely a fixation only releva= nt to networking guys.  Other domains would presumably need other domain-specific protocols.

 

  I’ll connect with Jessica to see if we = can figure out how to align the name and scope a bit better with the rest o= f the RATS world.

 

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.o= rg>
Sent: Monday, November 4, 2019 3:56 PM
To: Guy Fedorkow <gfedor= kow@juniper.net>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: RE: RIV and the RATS architecture

 

Hi Guy, sorry for the = delay, I was at a conference (Open Source Summit, Confidential Computing Co= nsortium, and Linux Security Summit were all co-located) all last week and = traveling there/back.

 

Responses inline below= …

 

From: RATS <rats-bounces@ietf.org> On Behalf Of Guy Fedorkow
Sent: Thursday, October 31, 2019 12:27 PM
To: Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>
Cc: rats@ietf.org; Thomas Hardj= ono <hardjono@mit.edu>; Smith= , Ned <ned.smith@intel.com>= ;; Henk Birkholz <hen= k.birkholz@sit.fraunhofer.de>; Jessica Fitzgerald-McKay <jmfmcka= y@gmail.com>
Subject: [Rats] RIV and the RATS architecture

 

Hi Dave,

  Thanks for your do= c https://tools.ietf.org/html/draft-thaler-rats-architecture-00.

  Do you have a view= as to how the TPM-based attestation described in RIV would fit with the pr= oposed categorization?

https://tools.ietf.org/html/draft-fedork= ow-rats-network-device-attestation-00

 

Great question. From m= y reading of draft-fedorkow-rats-network-device-attestation-00, it’s = a background check model, as section 2.3 of your doc explains:

>   3.  A Relying Party, w= hich has access to the Verifier to request

>       att= estation and to act on results.

 

That sentence above is= by definition the background check model.

That is, the Attester = talks to the Relying Party, the Relying Party then requests a background ch= eck by consulting a Verifier,

and will accept whatev= er answer the Verifier decides.

There are ways where y= ou could use the passport model for network device attestation,<= /span>

but your document only= covers the background check model.

 

  It doesn’t s= eem to be a passport, since the attester only provides raw evidence, not a = pre-approved passport

 

Agreed, from my readin= g of your document.

 

  It doesn’t s= eem to be a background check, as it’s the verifier that collects and = analyzes the evidence.

 

If I understand your p= oint here, you’re saying that the verifier talks directly to the atte= ster (e.g., by querying the yang module), without going back through the re= lying party, and that that seemed to you to be different from a classic “background check” diagram.  = Did I get your point correctly?

 

If so, then I see it a= s a variation of the background check model, as opposed to a separate model= per se.

 

  I’m not sure= it matters to RIV, as we haven’t drawn much distinction between the = relying party and the verifier…  As you say, if they’re on= the same machine, the distinction is almost moot. 

 

Agree.

 

And if they’re not,= I think the communication is out of scope for RIV (if not for RATS).

 

I disagree that itR= 17;s out of scope for RATS.

 

I have no opinion on w= hether it’s out of scope for RIV, since I still have some confusion o= n the intended scope of RIV.

I note that your docum= ent constrains its scope (in section 1.5) to only TPM-based embedded device= s, and not other

types of devices. = ;  I couldn’t tell if the scope of RIV and the scope of the draf= t (which does not have RIV in the name, or in

section 1.5) are simil= ar or one is a subset of the other.   Indeed, the title of the do= cument is far wider than just TPM-based

embedded devices, so i= n that sense the title doesn’t match the scoping in section 1.5. &nbs= p; Just explaining why there’s not

enough information for= me to have an opinion on verifier-relying party communication in RIV.=

 

There can be other net= work attestation solutions that look quite different from the flow in your = draft

(and I have no skin in= this game, so don’t have a bias towards any solution in particular).=    For example,

some other solution mi= ght involve a RADIUS server being a Verifier, so the verifier – relyi= ng party communication might

be RADIUS in that exam= ple.   There’s many ways to construct solutions, and so I i= magine there’s probably multiple

solutions already out = there, since the NEA problem is not new even in the IETF (https://tools....ietf.org/= wg/nea/ has

pointers to RFCs for a= nyone reading this who’s not already aware of it).<= /p>

 

  But it would be go= od ensure the architecture and the applications of it actually do fit toget= her…

 

Absolutely.=

 

Dave=

 

  Thanks

/guy

 

 

 

 

 

Juniper Business Use Only

--_000_BYAPR05MB424898EBF159057CD41A8E84BA760BYAPR05MB4248namp_-- From nobody Wed Nov 13 09:49:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BD70120841 for ; Wed, 13 Nov 2019 09:49:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qCSQJPGmnRDb for ; Wed, 13 Nov 2019 09:49:07 -0800 (PST) Received: from p3plsmtpa08-06.prod.phx3.secureserver.net (p3plsmtpa08-06.prod.phx3.secureserver.net [173.201.193.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9739E120836 for ; Wed, 13 Nov 2019 09:49:07 -0800 (PST) Received: from [10.141.0.146] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UwlOiAxeOksi3UwlOiC2lU; Wed, 13 Nov 2019 10:49:06 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_F4CA8A0E-6746-4F02-9A51-B1AD859041DC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 13 Nov 2019 09:49:05 -0800 In-Reply-To: <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> Cc: "Salz, Rich" , "rats@ietf.org" To: =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLuuNaSpR0W5y6BrnlnznOW07NDiRC2OQE7v7ZosFQmrfSbkSUdJbmDh1rFz8tscnMsmPqcBw9FjTpEo1YLTZ6rj6aQDEdUQ5MyqdshVpQg9G+Rhx8KN nK1tgOmEIbtnFvYPMRYDtfHHBjXBMuwwoCoQnzECZU0D/ihS5sRo2HGnDmJrnIPJuH9LxNpoVWJeGFNDFkOLBmjPW3AUtJYb8J6ITIg2rflHvhgQ2Gnfc6hq fCFEm+uZYi/RmtkDWu6ICg== Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 17:49:11 -0000 --Apple-Mail=_F4CA8A0E-6746-4F02-9A51-B1AD859041DC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 12, 2019, at 11:12 PM, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen = wrote: >=20 > Concerning IMs and DMs, here is the (extended) RFC 3444 view that > is commonly used by some parts of the IETF: >=20 > IM --> conceptual/abstract model > | for designers and operators > +----------+---------+ > | | | > DM DM DM --> concrete/detailed model > | | | for implementors > +--+--+ +--+--+--+ | > | | | | | | | > EN EN EN EN EN EN EN --> encodings / representation = formats > for instance data In the EAT draft, the EAT claims information model is in the largely = textual description of each claim. In the EAT draft there is just one EAT claims data model. It is the CDDL = in the EAT draft. Currently there are two claims encodings, CBOR and JSON. Thanks to CDDL, = we get from data model to encoding in a largely mechanical way and there = is little text needed. IM: Text | + | DM: CDDL | +---+--+ | | CBOR JSON I think this is a good, simple and effective way to proceed. (There are a few things wrong with the way this is written up in the = current EAT draft that need to be fixed: - The encodings are mis labeled as the data model - I=E2=80=99m not sure the CDDL is correct) Maybe one more encoding for X.509/ASN.1/DER is added to cover Dave=E2=80=99= s use case. Hopefully it could be by saying how to encode the needed = subset of CDDL into ASN.1/DER. Android Keystore also uses X.509 for = attestations, so this might add motivation. To keep effort down, = CDDL->ASN.1 should just be for EAT and a CDDL subset. I do not think we should try to bring YANG in here. So there is no YANG = expression of EAT claims. (I did see Eric=E2=80=99s GPS use case, but = don=E2=80=99t think it is mainstream enough to motivate the complexity = and large effort to bring YANG into play here). This email is just about the =E2=80=9CEAT claims information model=E2=80=9D= . There can be other separate information models for other parts of = RATS. I don=E2=80=99t think there should be one global RATS information = model that spans all the documents. The gap of sorts here is IANA registered claims, the existing ones and = new ones. There=E2=80=99s no requirement to provide an information model = or CDDL when you register new claims with IANA or even coordinate = between JWT and CWT. LL --Apple-Mail=_F4CA8A0E-6746-4F02-9A51-B1AD859041DC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 12, 2019, at 11:12 PM, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen <J.Schoenwaelder@jacobs-university.de> wrote:

Concerning IMs and DMs, here is = the (extended) RFC 3444 view that
is commonly used by some parts of the IETF:

          &nb= sp;     IM =             &n= bsp; --> conceptual/abstract model
          &nb= sp;     | =             &n= bsp;      for designers and = operators
     +----------+---------+
     | =          | =         |
     DM =         DM =        DM =     --> concrete/detailed model
     | =          | =         | =          for = implementors
  +--+--+   +--+--+--+ =    |
  | =     |   |  |  |  | =    |
  EN =    EN  EN EN EN EN   EN =     --> encodings / representation = formats
          &nb= sp;            = ;            &= nbsp; for instance data

In the EAT draft, the EAT claims information = model is in the largely textual description of each claim.

In the EAT draft there = is just one EAT claims data model. It is the CDDL in the EAT = draft.

Currently= there are two claims encodings, CBOR and JSON. Thanks to CDDL, we get = from data model to encoding in a largely mechanical way and there is = little text needed.


            =     IM: Text
          &= nbsp;     |
      =           +
      =           |
      =           DM: CDDL
  =               |
            = +---+--+
            | =      |
      =      CBOR   JSON


I think this is a good, simple and effective = way to proceed.

(There are a few things wrong with the way this is written up = in the current EAT draft that need to be fixed:
- = The encodings are mis labeled as the data model
- = I=E2=80=99m not sure the CDDL is correct)

Maybe one more encoding for = X.509/ASN.1/DER is added to cover Dave=E2=80=99s use case. Hopefully it = could be by saying how to encode the needed subset of CDDL into = ASN.1/DER. Android Keystore also uses X.509 for attestations, so this = might add motivation. To keep effort down, CDDL->ASN.1 should just be = for EAT and a CDDL subset.

I do not think we should try to bring YANG in here. So there = is no YANG expression of EAT claims. (I did see Eric=E2=80=99s GPS use = case, but don=E2=80=99t think it is mainstream enough to motivate the = complexity and large effort to bring YANG into play here).

This= email is just about the =E2=80=9CEAT claims information model=E2=80=9D. = There can be other separate information models for other parts of RATS. = I don=E2=80=99t think there should be one global RATS information model = that spans all the documents.

The gap of sorts here is IANA = registered claims, the existing ones and new ones. There=E2=80=99s no = requirement to provide an information model or CDDL when you register = new claims with IANA or even coordinate between JWT and CWT.

LL




= --Apple-Mail=_F4CA8A0E-6746-4F02-9A51-B1AD859041DC-- From nobody Wed Nov 13 09:51:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEE33120836 for ; Wed, 13 Nov 2019 09:51:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iWzA9JwxKjUz for ; Wed, 13 Nov 2019 09:51:17 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51C72120841 for ; Wed, 13 Nov 2019 09:51:17 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xADHp66H006768 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 13 Nov 2019 18:51:07 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 13 Nov 2019 18:51:01 +0100 To: Laurence Lundblade , =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: "Salz, Rich" , "rats@ietf.org" References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: <2be3acbe-c2a3-076c-63a2-b5d00a3ba4c2@sit.fraunhofer.de> Date: Wed, 13 Nov 2019 18:51:00 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 17:51:21 -0000 Now I am a bit confused. Didn't you attempt to use CDDL as an information model in the EAT I-D? On 13.11.19 18:49, Laurence Lundblade wrote: > >> On Nov 12, 2019, at 11:12 PM, Schönwälder, Jürgen >> > > wrote: >> >> Concerning IMs and DMs, here is the (extended) RFC 3444 view that >> is commonly used by some parts of the IETF: >> >>                 IM               --> conceptual/abstract model >>                 |                    for designers and operators >>      +----------+---------+ >>      |          |         | >>      DM         DM        DM     --> concrete/detailed model >>      |          |         |          for implementors >>   +--+--+   +--+--+--+    | >>   |     |   |  |  |  |    | >>   EN    EN  EN EN EN EN   EN     --> encodings / representation formats >>                                      for instance data > > In the EAT draft, the EAT claims information model is in the largely > textual description of each claim. > > In the EAT draft there is just one EAT claims data model. It is the CDDL > in the EAT draft. > > Currently there are two claims encodings, CBOR and JSON. Thanks to CDDL, > we get from data model to encoding in a largely mechanical way and there > is little text needed. > > >                 IM: Text >                 | >                 + >                 | >                 DM: CDDL >                 | >             +---+--+ >             |      | >            CBOR   JSON > > > I think this is a good, simple and effective way to proceed. > > (There are a few things wrong with the way this is written up in the > current EAT draft that need to be fixed: > - The encodings are mis labeled as the data model > - I’m not sure the CDDL is correct) > > Maybe one more encoding for X.509/ASN.1/DER is added to cover Dave’s use > case. Hopefully it could be by saying how to encode the needed subset of > CDDL into ASN.1/DER. Android Keystore also uses X.509 for attestations, > so this might add motivation. To keep effort down, CDDL->ASN.1 should > just be for EAT and a CDDL subset. > > I do not think we should try to bring YANG in here. So there is no YANG > expression of EAT claims. (I did see Eric’s GPS use case, but don’t > think it is mainstream enough to motivate the complexity and large > effort to bring YANG into play here). > > This email is just about the “EAT claims information model”. There can > be other separate information models for other parts of RATS. I don’t > think there should be one global RATS information model that spans all > the documents. > > The gap of sorts here is IANA registered claims, the existing ones and > new ones. There’s no requirement to provide an information model or CDDL > when you register new claims with IANA or even coordinate between JWT > and CWT. > > LL > > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Nov 13 10:07:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F8BB120843 for ; Wed, 13 Nov 2019 10:07:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L0wFpKDzzceu for ; Wed, 13 Nov 2019 10:07:04 -0800 (PST) Received: from p3plsmtpa09-05.prod.phx3.secureserver.net (p3plsmtpa09-05.prod.phx3.secureserver.net [173.201.193.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79A311201E4 for ; Wed, 13 Nov 2019 10:07:04 -0800 (PST) Received: from [10.141.0.146] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id Ux2ki3ldQj7SrUx2liH7hC; Wed, 13 Nov 2019 11:07:03 -0700 From: Laurence Lundblade Message-Id: <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_64BB39AF-6DEA-49BA-B68B-9EDCFFFE299B" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 13 Nov 2019 10:07:02 -0800 In-Reply-To: Cc: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz To: Dave Thaler References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfD9lcPYWXpNgaLorV1Jir/NqdcAGXsxmlInUmm75ygnb7Bbx7R6B6Tq/u3iPAbYkbw20Ltrp3SoQly122Z/eHaR4iGmnD/PknIammSnKYLJg5/Rv+Jkj BQPPI6sElrIiPVguot1E79qoD4P453FuVwztP8/ZGmQQroxp6YNKdjR2JxdOL6d56mSOa79ip+hCK7Qswt+68lRv1BZgCLxSSVEtaFrkHE85xK1Tvsr5nOBj DPq0PxKttVH3hwXkd8ZPCcsSyvg15wNvDGc+kqeyXh/hgXlN2yZg91QxyTVWIAWepMtZnvYB2a2pZTmwDAnn44lAt3z5VkiEUnAXghcFkalIsCyHvbpzBrhB SQZaMcmb Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 18:07:09 -0000 --Apple-Mail=_64BB39AF-6DEA-49BA-B68B-9EDCFFFE299B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 My version of technology bases for attestation is something like this: Router/Netconf World Millions of devices. Currently TPM oriented. Long possible transition to = EAT. YANG used to create very specific fine-grained interactions. No = privacy issues. Web Browser World Billions of devices. Current attestation use is primarily WebAuthN / = FIDO. JWT is used heavily for authentication so would be more EAT = oriented, but TPM attestation is supported in FIDO. Larger use of = attestation may evolve. Fine-grained interactions are with WebAPIs = (Javascript) (sort of parallel to YANG for routers). Big privacy issues. Mobile App World Billions of devices. Main attestation use is Android=E2=80=99s Keystore. = This is EAT-like, but based on X.509. Fine grained interactions are = Android APIs. I may be out of date, but so far IoS doesn=E2=80=99t do = attestation. Privacy issues vary by app. IoT World Billions of devices most likely going to trillions. Attestation is a = critical enabling feature in this world. There are lots of protocols and = formats involved. TPMs are too expensive for many of these, but are = probably in use somewhere. No privacy issues for a large portion of this = world. The router world is the smallest, but it is =E2=80=9Cwell represented=E2=80= =9D because this is the IETF. I see EAT as applicable to all these worlds, where the YANG module is = just for the smallish router world. So I mostly agree with Dave about = proportions, however this is the IETF where YANG modules are created. = (Maybe I should go join the W3C world and work on attestations APIs for = browsers after RATS is done). LL > On Nov 11, 2019, at 5:43 PM, Dave Thaler = wrote: >=20 > As far as I can understand from = draft-birkholz-rats-basic-yang-module-01 and > draft-fedorkow-rats-network-device-attestation-01, they break down the = use case > space as follows: > =20 > Requirements? > +--------------+---------------+---------++--------------- > | RoT | Host Firewall | Privacy || Solution =20 > | Type | Enabled | Needed || Pieces =20 > +--------------+---------------+---------++--------------- > 1 | SGX | No | No || > 2 | SGX | No | Yes || > 3 | SGX | Yes | No || > 4 | SGX | Yes | Yes || > 5 | TrustZone | No | No || > 6 | TrustZone | No | Yes || > 7 | TrustZone | Yes | No || > 8 | TrustZone | Yes | Yes || > 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 > 10 | TPM | No | Yes || > 11 | TPM | Yes | No || > 12 | TPM | Yes | Yes || > 13 |SecureElement | No | No || > 14 |SecureElement | No | Yes || > 15 |SecureElement | Yes | No || > 16 |SecureElement | Yes | Yes || > 17 | Firmware | No | No || > 18 | Firmware | No | Yes || > 19 | Firmware | Yes | No || > 20 | Firmware | Yes | Yes || > ... | ... | | || > =20 > And draft-fedorkow-rats-network-device-attestation-01 further scopes = itself down > by only being applicable to cases with "embedded" apps only =3D Yes, = and where > the security policy is only an Exact match against reference values =3D = Yes. > I believe that the yang draft doesn't have those two restrictions, = from my reading. > However, the point is that both drafts are VERY narrow, and in the = table shown above, > only address 1 out of 20 possibilies in that space. > =20 > In contrast, the TEEP WG decided that it was not interested in narrow = scopings > (specifically something Global Platform specific), but instead wanted = one general solution. > =20 > If the RATS WG spends effort on something that only addresses a single = row out of 20+ rows, > then do we expect 19+ other solutions to also be done in the WG? Or = could we work on things > that are broader and happen to also work for row 9? > =20 > I've seen others commenting on the fact that the YANG module only = supports TPMs and not > other things (EATs etc), which would just add support for a couple = more rows, but still not > be general. > =20 > Personally, I would much rather see the WG spend effort on things that = really are generic, > i.e., work with or without host firewalls, work with multiple RoT/TEE = types, etc., rather > than seeing an explosion of point solutions. > =20 > Dave > =20 > From: RATS On Behalf Of Smith, Ned > Sent: Monday, November 11, 2019 10:12 AM > To: Oliver, Ian (Nokia - FI/Espoo) ; = Laurence Lundblade ; Nancy Cam-Winget (ncamwing) = > Cc: rats@ietf.org; Henk Birkholz > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support = existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by = a second TA where the TPM is a first TA) or as a conveyance (unsigned?) = token. Possibly, the only added value of the latter is a tag that = identifies it as a TPM binary format? > =20 > =20 > On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - = FI/Espoo)" on = behalf of ian.oliver@nokia-bell-labs.com = > wrote: > =20 > > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that > EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know > others believe that too.=20 > =20 > I would disagree with the statement of "short run" ... TPM is = practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common = use, ie: practically all x86 machines, The attestation mechanisms = provided are going to be around for a very long time.=20 > =20 > =46rom telco experience, 30 years ago we said SS7 would only be around = in the short term. > =20 > > Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise > to add EAT to = it. > =20 > Agree > =20 > Ian > =20 > -- >=20 > Dr. Ian Oliver >=20 > Cybersecurity Research >=20 > Distinguished Member of Technical Staff >=20 > Nokia Bell Labs >=20 > +358 50 483 6237 >=20 > =20 > From: Laurence Lundblade > > Sent: 11 November 2019 00:44 > To: Nancy Cam-Winget (ncamwing) > > Cc: Henk Birkholz >; rats@ietf..org = > > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > =20 > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = > wrote: > =20 > So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? > Thanks, Nancy > =20 > I think the value add to the larger RATS effort of adding EAT support = to this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. > =20 > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 > =20 > If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. > =20 > It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. > =20 > Thus, I am opposed to adoption with the current TPM-only draft. I=E2=80=99= d be OK with the current draft and a promise to add EAT to it. > =20 > LL > =20 --Apple-Mail=_64BB39AF-6DEA-49BA-B68B-9EDCFFFE299B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
My version of technology bases for attestation is something = like this:

Router/Netconf World
Millions of devices. Currently TPM oriented. Long possible = transition to EAT. YANG used to create very specific fine-grained = interactions. No privacy issues.

Web Browser = World
Billions of devices. Current attestation = use is primarily WebAuthN / FIDO. JWT is used heavily for authentication = so would be more EAT oriented, but TPM attestation is supported in FIDO. = Larger use of attestation may evolve. Fine-grained interactions are with = WebAPIs (Javascript) (sort of parallel to YANG for routers). Big privacy = issues.

Mobile App World
Billions of = devices. Main attestation use is Android=E2=80=99s Keystore. This is = EAT-like, but based on X.509. Fine grained interactions are Android = APIs. I may be out of date, but so far IoS doesn=E2=80=99t do = attestation. Privacy issues vary by app.

IoT World
Billions of devices most likely going to trillions. = Attestation is a critical enabling feature in this world. There are lots = of protocols and formats involved. TPMs are too expensive for many of = these, but are probably in use somewhere. No privacy issues for a large = portion of this world.

The router world is the smallest, but = it is =E2=80=9Cwell represented=E2=80=9D because this is the = IETF.

I see = EAT as applicable to all these worlds, where the YANG module is just for = the smallish router world. So I mostly agree with Dave about = proportions, however this is the IETF where YANG modules are created. =  (Maybe I should go join the W3C world and work on attestations = APIs for browsers after RATS is done).

LL



On Nov 11, 2019, at 5:43 PM, = Dave Thaler <dthaler@microsoft.com> wrote:

As far as I can understand from = draft-birkholz-rats-basic-yang-module-01 and

draft-fedorkow-rats-network-device-attestation-01, they break = down the use case

space as = follows:

 

          &nb= sp;            = ; Requirements?

         = +--------------+---------------+---------++---------------

         |  = RoT         | Host Firewall | = Privacy ||   Solution   

         |  = Type        |   = Enabled     | Needed  ||    = Pieces    

         +--------= ------+---------------+---------++---------------

      1  |  = SGX         | = No            | = No      ||

      2  |  = SGX         | = No            | = Yes     ||

      3  |  = SGX         | = Yes           | = No      ||

      4  |  = SGX         | = Yes           | = Yes     ||

      5  |  = TrustZone   | = No            | = No      ||

      6  |  = TrustZone   | = No            | = Yes     ||

      7  |  = TrustZone   | = Yes           | = No      ||

      8  |  = TrustZone   | = Yes           | = Yes     ||

      9  |  = TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01

     10  |  = TPM         | = No            | = Yes     ||

     11  |  = TPM         | = Yes           | = No      ||

     12  |  = TPM         | = Yes           | = Yes     ||

     13  |SecureElement | = No            | = No      ||

     14  |SecureElement | = No            | = Yes     ||

     15  |SecureElement | = Yes           | = No      ||

     16  |SecureElement | = Yes           | = Yes     ||

     17  | = Firmware     | = No            | = No      ||

     18  | = Firmware     | = No            | = Yes     ||

     19  | = Firmware     | = Yes           | = No      ||

     20  | = Firmware     | = Yes           | = Yes     ||

     ... |   = ...        = |             =   |         ||

 

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself = down

by only being applicable to cases = with "embedded" apps only =3D Yes, and where

the security policy is only an Exact = match against reference values =3D Yes.

I believe = that the yang draft doesn't have those two restrictions, from my = reading.

However, the point is that both = drafts are VERY narrow, and in the table shown above,

only address 1 out of 20 possibilies = in that space.

 

In contrast, the TEEP WG decided that = it was not interested in narrow scopings

(specifically something Global = Platform specific), but instead wanted one general solution.

 

If the RATS WG spends effort on = something that only addresses a single row out of 20+ rows,

then do we expect 19+ other solutions = to also be done in the WG?  Or could we work on things

that are broader and happen to also = work for row 9?

 

I've seen others commenting on the = fact that the YANG module only supports TPMs and not

other things (EATs etc), which would = just add support for a couple more rows, but still not

be general.

 

Personally, I would much rather see = the WG spend effort on things that really are generic,

i.e., work with or without host = firewalls, work with multiple RoT/TEE types, etc., rather

than seeing an explosion of point = solutions.

 

Dave

 

From: = RATS <rats-bounces@ietf.org> On Behalf Of Smith, Ned
Sent: Monday, November 11, 2019 10:12 AM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>; Laurence Lundblade = <lgl@island-resort.com>; Nancy Cam-Winget (ncamwing) = <ncamwing@cisco.com>
Cc: rats@ietf.org; Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Subject: Re: [Rats] Call for adoption (after draft = rename) for Yang module draft

 

Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D = should support existing =E2=80=9Cbinary=E2=80=9D formats as an = encapsulation (signed by a second TA where the TPM is a first TA) or as = a conveyance (unsigned?) token. Possibly, the only added value of the = latter is a tag that identifies it as a TPM binary format?

 

 

On = 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - FI/Espoo)" = <rats-bounces@ietf.org on behalf of ian.oliver@nokia-bell-labs.com> wrote:

 

> Remote TPM attestations are useful and necessary = the short run, but are of very limited capability. I believe that > = EAT will replace TPM attestations in the long run (maybe decades) because they are far more expressive. I = know > others believe that too. 

 

I would disagree with the statement of "short run" ... = TPM is practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common use, ie: practically all x86 = machines,  The attestation mechanisms provided are going to be = around for a very long time. 

 

=46rom telco experience, 30 years ago we said SS7 = would only be around in the short term.

 

> Thus, I am opposed to adoption with the current = TPM-only draft. I=E2=80=99d be OK with the current draft and a promise = > to add EAT to it.

 

Agree

 

Ian

 

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 = 50 483 6237

 

From: Laurence = Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf..org <rats@ietf.org>
Subject: Re: [Rats] Call for adoption (after draft = rename) for Yang module draft

 

 

On Nov = 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com> = wrote:

 

So, Laurence, are you still OK with the adoption of the = current draft with a rename for now?
Thanks, Nancy

 

I = think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work here less like ships in the night.

 

Remote = TPM attestations are useful and necessary the short run, but are of very = limited capability. I believe that EAT will replace TPM attestations in = the long run (maybe decades) because they are far more expressive. I know others believe that too. 

 

If we = don=E2=80=99t include EAT in the YANG mode it is sort of like defining = HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re defining = an attestation protocol that can only move one kind of attestation even = though we have consensus on what the other one looks like.

 

It = seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it.

 

Thus, = I am opposed to adoption with the current TPM-only draft. I=E2=80=99d be = OK with the current draft and a promise to add EAT to it.

 

LL

 


= --Apple-Mail=_64BB39AF-6DEA-49BA-B68B-9EDCFFFE299B-- From nobody Wed Nov 13 11:30:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC0891208AA for ; Wed, 13 Nov 2019 11:30:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8xeR6-Aqx7En for ; Wed, 13 Nov 2019 11:30:02 -0800 (PST) Received: from p3plsmtpa06-07.prod.phx3.secureserver.net (p3plsmtpa06-07.prod.phx3.secureserver.net [173.201.192.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65E241200B4 for ; Wed, 13 Nov 2019 11:30:02 -0800 (PST) Received: from [10.141.0.146] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UyL3ilkCXz03vUyL3i0QNP; Wed, 13 Nov 2019 12:30:02 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: <2be3acbe-c2a3-076c-63a2-b5d00a3ba4c2@sit.fraunhofer.de> Date: Wed, 13 Nov 2019 11:30:01 -0800 Cc: =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Salz, Rich" , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <2be3acbe-c2a3-076c-63a2-b5d00a3ba4c2@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfAA3+9YMZ2LAORcdAJVoZ3nED1G2JiO6Ai7ULF0p0/cCvjw0rzNNF6FQQWBNKDWV+nD1Np2I6HWYxnoOiBfDHS9Dqd/5fAS5sIpGyMP87V92RpQbNAV2 s4zk8IzCPQ55gj3sZXmg1l8a/MZ9J9sHF+dOfw7b1mmeY7rgja1K6RbDBXw+uYPk8KG3Az15UvkhbC4hiZRAMu/tL+c3whLCzQqxiNSmyXH/UcjoUwtMVAyN HlAzlf5AuCn9S4yb3xL4Iinnx2cbnhz1XvvtvhKLr+MD8SP1tZlPqhv0WBhhIO6F Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 19:30:05 -0000 One of the D=E2=80=99s in CDDL is for Data and I think someone told me = that CDDL is for Data Models and that what is currently labeled as the = Data Model in the EAT document is the Encoding. It doesn=E2=80=99t matter much to me what we label the different parts = of the EAT document. Happy to adjust the labeling. However having 1) the = textual claim descriptions, 2) having CDDL as the next level of = description and 3) being able to encode CDDL in JSON and CBOR (and maybe = ASN.1) mechanically does matter to me. LL > On Nov 13, 2019, at 9:51 AM, Henk Birkholz = wrote: >=20 > Now I am a bit confused. Didn't you attempt to use CDDL as an = information model in the EAT I-D? >=20 > On 13.11.19 18:49, Laurence Lundblade wrote: >>> On Nov 12, 2019, at 11:12 PM, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen = > wrote: >>>=20 >>> Concerning IMs and DMs, here is the (extended) RFC 3444 view that >>> is commonly used by some parts of the IETF: >>>=20 >>> IM --> conceptual/abstract model >>> | for designers and operators >>> +----------+---------+ >>> | | | >>> DM DM DM --> concrete/detailed model >>> | | | for implementors >>> +--+--+ +--+--+--+ | >>> | | | | | | | >>> EN EN EN EN EN EN EN --> encodings / representation = formats >>> for instance data >> In the EAT draft, the EAT claims information model is in the largely = textual description of each claim. >> In the EAT draft there is just one EAT claims data model. It is the = CDDL in the EAT draft. >> Currently there are two claims encodings, CBOR and JSON. Thanks to = CDDL, we get from data model to encoding in a largely mechanical way and = there is little text needed. >> IM: Text >> | >> + >> | >> DM: CDDL >> | >> +---+--+ >> | | >> CBOR JSON >> I think this is a good, simple and effective way to proceed. >> (There are a few things wrong with the way this is written up in the = current EAT draft that need to be fixed: >> - The encodings are mis labeled as the data model >> - I=E2=80=99m not sure the CDDL is correct) >> Maybe one more encoding for X.509/ASN.1/DER is added to cover = Dave=E2=80=99s use case. Hopefully it could be by saying how to encode = the needed subset of CDDL into ASN.1/DER. Android Keystore also uses = X.509 for attestations, so this might add motivation. To keep effort = down, CDDL->ASN.1 should just be for EAT and a CDDL subset. >> I do not think we should try to bring YANG in here. So there is no = YANG expression of EAT claims. (I did see Eric=E2=80=99s GPS use case, = but don=E2=80=99t think it is mainstream enough to motivate the = complexity and large effort to bring YANG into play here). >> This email is just about the =E2=80=9CEAT claims information = model=E2=80=9D. There can be other separate information models for other = parts of RATS. I don=E2=80=99t think there should be one global RATS = information model that spans all the documents. >> The gap of sorts here is IANA registered claims, the existing ones = and new ones. There=E2=80=99s no requirement to provide an information = model or CDDL when you register new claims with IANA or even coordinate = between JWT and CWT. >> LL >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 From nobody Wed Nov 13 11:39:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC8DD12084D for ; Wed, 13 Nov 2019 11:39:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id in8bRIbXgLXd for ; Wed, 13 Nov 2019 11:39:36 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30BD2120A7E for ; Wed, 13 Nov 2019 11:39:30 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xADJdKw6011417 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 13 Nov 2019 20:39:21 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 13 Nov 2019 20:39:15 +0100 To: Laurence Lundblade CC: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , "Salz, Rich" , "rats@ietf.org" References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <2be3acbe-c2a3-076c-63a2-b5d00a3ba4c2@sit.fraunhofer.de> From: Henk Birkholz Message-ID: Date: Wed, 13 Nov 2019 20:39:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 19:39:40 -0000 Up to today, I was looking at the CDDL fragments in the EAT I-D with some leniency, as I though the CDDL preludes would not be used, leaving the higher level tree composition features for use as a first draft to create IM statements in well-defined non-English (a good approach to peruse, I thought). If you are using them now as actual CDDL specification fragments, I'll think I have to chime in and provide contribution on how to do that in a compliant manner that will result in a valid overall CDDL ROOT specification in the end. We can talk about that in .sg. It will not take very long, if we do that in concert, I think. Viele Grüße, Henk On 13.11.19 20:30, Laurence Lundblade wrote: > One of the D’s in CDDL is for Data and I think someone told me that CDDL is for Data Models and that what is currently labeled as the Data Model in the EAT document is the Encoding. > > It doesn’t matter much to me what we label the different parts of the EAT document. Happy to adjust the labeling. However having 1) the textual claim descriptions, 2) having CDDL as the next level of description and 3) being able to encode CDDL in JSON and CBOR (and maybe ASN.1) mechanically does matter to me. > > LL > > > > >> On Nov 13, 2019, at 9:51 AM, Henk Birkholz wrote: >> >> Now I am a bit confused. Didn't you attempt to use CDDL as an information model in the EAT I-D? >> >> On 13.11.19 18:49, Laurence Lundblade wrote: >>>> On Nov 12, 2019, at 11:12 PM, Schönwälder, Jürgen > wrote: >>>> >>>> Concerning IMs and DMs, here is the (extended) RFC 3444 view that >>>> is commonly used by some parts of the IETF: >>>> >>>> IM --> conceptual/abstract model >>>> | for designers and operators >>>> +----------+---------+ >>>> | | | >>>> DM DM DM --> concrete/detailed model >>>> | | | for implementors >>>> +--+--+ +--+--+--+ | >>>> | | | | | | | >>>> EN EN EN EN EN EN EN --> encodings / representation formats >>>> for instance data >>> In the EAT draft, the EAT claims information model is in the largely textual description of each claim. >>> In the EAT draft there is just one EAT claims data model. It is the CDDL in the EAT draft. >>> Currently there are two claims encodings, CBOR and JSON. Thanks to CDDL, we get from data model to encoding in a largely mechanical way and there is little text needed. >>> IM: Text >>> | >>> + >>> | >>> DM: CDDL >>> | >>> +---+--+ >>> | | >>> CBOR JSON >>> I think this is a good, simple and effective way to proceed. >>> (There are a few things wrong with the way this is written up in the current EAT draft that need to be fixed: >>> - The encodings are mis labeled as the data model >>> - I’m not sure the CDDL is correct) >>> Maybe one more encoding for X.509/ASN.1/DER is added to cover Dave’s use case. Hopefully it could be by saying how to encode the needed subset of CDDL into ASN.1/DER. Android Keystore also uses X.509 for attestations, so this might add motivation. To keep effort down, CDDL->ASN.1 should just be for EAT and a CDDL subset. >>> I do not think we should try to bring YANG in here. So there is no YANG expression of EAT claims. (I did see Eric’s GPS use case, but don’t think it is mainstream enough to motivate the complexity and large effort to bring YANG into play here). >>> This email is just about the “EAT claims information model”. There can be other separate information models for other parts of RATS. I don’t think there should be one global RATS information model that spans all the documents. >>> The gap of sorts here is IANA registered claims, the existing ones and new ones. There’s no requirement to provide an information model or CDDL when you register new claims with IANA or even coordinate between JWT and CWT. >>> LL >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> > From nobody Wed Nov 13 12:21:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 087391208A4 for ; Wed, 13 Nov 2019 12:21:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HGoYU4CSYlw7 for ; Wed, 13 Nov 2019 12:21:13 -0800 (PST) Received: from p3plsmtpa09-04.prod.phx3.secureserver.net (p3plsmtpa09-04.prod.phx3.secureserver.net [173.201.193.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D617120831 for ; Wed, 13 Nov 2019 12:21:13 -0800 (PST) Received: from [192.168.1.80] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id Uz8TiaShTMx9SUz8Vi8vyf; Wed, 13 Nov 2019 13:21:12 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_C6EAC7A6-6FAA-44BC-AA75-6B70AC84A93F" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: Date: Wed, 13 Nov 2019 12:21:03 -0800 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfB5MerFfJGhQqU4ugWHTcoAxALWCY5IBxqUCixPwnYkDvYWBa6nJCxZ7qkv12BcdZaW7XF1dPo6YA6q7/P6ggDoJpAu6lRnWKqQr/ZFZCKqPRF3xuaQ+ e7yY+szKUeWt+Z4TUTFmvv4jg6uKqQn/Up2MWHyEQSfoXKQw2aH5d4rj Archived-At: Subject: [Rats] More claims? When is EAT done? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 20:21:15 -0000 --Apple-Mail=_C6EAC7A6-6FAA-44BC-AA75-6B70AC84A93F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 One of my requested topics for Singapore is that of which new claims we = should add to the current EAT draft and which ones should be left for = subsequent work. This list here is a bit rough, but I wanted to get it = in front of everyone sooner rather than later for some think / = discussion time before meeting. SW Inventory This claim / set of claims would list SW installed on the device. It = would probably include: Name Version Checksum Who signed it This seems important for a lot of use cases including routers and IoT. = It is important in RIV. This seems like a relatively complex topic. Measurements and Integrity Checks The claims here could either be measurements that need to be checked or = the result of a measurement after comparison with k-g-v. Note that = systems like TIMA check against k-g-v on the device. So claims might = look like: Name Measurement value Measurement result (likely a Boolean) Timestamp This seems important for use cases including routers and mobile phones. = It shows up in RIV. This seems like a relatively complex topic. Public Key The claim would be a public key and its characteristics. Something like = this: The public key How it is protected (TEE, secure element=E2=80=A6) User verification required to use it Other key use and ownership characteristics (Android key store has = implemented many of these) This seems important for the mobile app world, particularly that this is = supported by Android now. FIDO and WeChat pay have options to use the = Android Keystore. This also seems important for IoT on boarding, = particularly establishing a certificate for use with DTLS. Attestation Result An attestation result can be expressed as an EAT. For example a TPM / = YANG interaction between the device and verifier might happen. The = verifier outputs the result in EAT format. This is also likely where = implicit claims are made explicit for the relying party. Interesting = claims here might be: Origination (an existing claim) Certifications received All other existing claims While new claims can be added anytime through the IANA registry, I=E2=80=99= d like to see the EAT document have a very solid set of well thought out = core claims. My inclination is to do the work on all of these, even if = it takes longer to get EAT done. LL --Apple-Mail=_C6EAC7A6-6FAA-44BC-AA75-6B70AC84A93F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 One = of my requested topics for Singapore is that of which new claims we = should add to the current EAT draft and which ones should be left for = subsequent work. This list here is a bit rough, but I wanted to get it = in front of everyone sooner rather than later for some think / = discussion time before meeting.

SW Inventory
This claim / set of claims would list SW installed on the = device. It would probably include:
  • Name
  • Version
  • Checksum
  • Who = signed it
This seems important for a lot of use = cases including routers and IoT. It is important in RIV.
This seems like a relatively complex topic.

Measurements and Integrity Checks
The claims here could either be measurements that need = to be checked or the result of a measurement after comparison with = k-g-v. Note that systems like TIMA check against k-g-v on the device. So = claims might look like:
    Name
  • Measurement value
  • Measurement result (likely a Boolean)
  • Timestamp
This seems important for = use cases including routers and mobile phones. It shows up in = RIV.
This seems like a = relatively complex topic.

Public = Key
The claim would be a public key and its = characteristics. Something like this:
  • The public key
  • How= it is protected (TEE, secure element=E2=80=A6)
  • User = verification required to use it
  • Other key use and = ownership characteristics (Android key store has implemented many of = these)
This seems important for the mobile app = world, particularly that this is supported by Android now. FIDO and = WeChat pay have options to use the Android Keystore. This also seems = important for IoT on boarding, particularly establishing a certificate = for use with DTLS.

Attestation = Result
An attestation result can be = expressed as an EAT. For example a TPM / YANG interaction between the = device and verifier might happen. The verifier outputs the result in EAT = format. This is also likely where implicit claims are made explicit for = the relying party. Interesting claims here might be:
  • Origination (an = existing claim)
  • Certifications received
  • All other existing claims

While new claims can be added = anytime through the IANA registry, I=E2=80=99d like to see the EAT = document have a very solid set of well thought out core claims. My = inclination is to do the work on all of these, even if it takes longer = to get EAT done.

LL

= --Apple-Mail=_C6EAC7A6-6FAA-44BC-AA75-6B70AC84A93F-- From nobody Wed Nov 13 13:12:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 572A81200DF for ; Wed, 13 Nov 2019 13:12:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XszEArLNRgko for ; Wed, 13 Nov 2019 13:12:34 -0800 (PST) Received: from mail-oi1-x235.google.com (mail-oi1-x235.google.com [IPv6:2607:f8b0:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE2AB120046 for ; Wed, 13 Nov 2019 13:12:33 -0800 (PST) Received: by mail-oi1-x235.google.com with SMTP id i185so3164215oif.9 for ; Wed, 13 Nov 2019 13:12:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=my0oGvnJznhKVRYrt0HlTSSF2hhUiWWIo7bqTXZKMWo=; b=qU/67Bg3Bzez/ItAzijtCfS8WiMRY8nbRGSwReRQMasp82aPu42CdobiZkPeO1w1ss fSXPlnoUkmPOBF70P+tyFch3NwaUtHXnnKfYyuDTmjj2cJVMu0Pl6jzb9jv4L5mK64Na 4h/kLBVnuqP2pNNaXTOOoJzdCXByyVebqHhKlXKMei+Dl7V2hfE9NuGYJIKGR7yRD9GD 0VkypKCp0AgkaADNRB9Yg4tY3o/K/UZg2nlJFbJrxweMViR3KR1a43v99MhPIPuP8RP0 5Vdh7P80l0y/SbCpiruss0NuJuKbfEAx46q5s9HUAb9X3ZvwVOu1Z69MDWj3UAhNJAiE Aoqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=my0oGvnJznhKVRYrt0HlTSSF2hhUiWWIo7bqTXZKMWo=; b=hNwPv1d+1KoOwsBsemkazAXRgmts9PIrDnkozyOQXqVSRubsh51wVjpjJB98ewpQJ3 1fKaQKFKb9+j3X5UjqR/yVKKhDt7+JXb7tVtWjKu8jJdz98TBfhHcOopdg0uBkXxW0k+ l3H1LERxdDTwxQKeLgl/iXJgog8iReVxwLZp4FjAQ1p6GW/IQAzUm3kX4WMcseZh+uNh xm3fJocrNF6THRBmAQpD+xtebrKyFI4miOIzbgDFLTUQ/N3wR0M4qD17F3qhYbubYbDf zoil1kT/7s9UdCPg6kSaj+9ubdUYtg9PR1Vg6KYy/AoRxJKAe9qP9yhrEuJZX23TQG9/ mAKA== X-Gm-Message-State: APjAAAWpKebqvxyXI9Vi29LQ3OCokO2v3+UKdy72RBc9pkG/nFQ6DFU7 zQJAxC6/9c0jk64qVUL/6PxGElaSCf3cSCFLdOH029x+ X-Google-Smtp-Source: APXvYqzS517nN12cUf1HygSoyZZYzDqNmylDRy66XuWEasyb6wWqeYQ6UZ57jUpqmA5DhAtZxbU5/q5u4hYG2bUw7N0= X-Received: by 2002:aca:280a:: with SMTP id 10mr518053oix.119.1573679552849; Wed, 13 Nov 2019 13:12:32 -0800 (PST) MIME-Version: 1.0 From: Kathleen Moriarty Date: Wed, 13 Nov 2019 16:11:57 -0500 Message-ID: To: rats@ietf.org Content-Type: multipart/alternative; boundary="000000000000bceea1059740d280" Archived-At: Subject: [Rats] Presenter slides X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 21:12:35 -0000 --000000000000bceea1059740d280 Content-Type: text/plain; charset="UTF-8" Greetings! Please send your slides to myself and Ned. One of us will post them once received. We will both be remote, so please get them to use early in order to avoid any time difference snafus. Thank you! -- Best regards, Kathleen --000000000000bceea1059740d280 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Greetings!

Please send your slides to m= yself=C2=A0and=C2=A0Ned.=C2=A0 One of us will post them once received.=C2= =A0 We will both be remote, so please get them to use early in order to avo= id any time difference snafus.

Thank you!

--

Best regards,
Kathleen
--000000000000bceea1059740d280-- From nobody Wed Nov 13 15:32:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 305E8120837 for ; Wed, 13 Nov 2019 15:32:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z9dyGR15Zcv1 for ; Wed, 13 Nov 2019 15:32:43 -0800 (PST) Received: from mail-oi1-x234.google.com (mail-oi1-x234.google.com [IPv6:2607:f8b0:4864:20::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D3ED8120089 for ; Wed, 13 Nov 2019 15:32:43 -0800 (PST) Received: by mail-oi1-x234.google.com with SMTP id 22so3506385oip.7 for ; Wed, 13 Nov 2019 15:32:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=XMgVfTShp8/y1ycpTCEtCE0VA0AbHs3UffKd7sL3E9A=; b=ggcuw2hZwAZ+IUtwAp9ApRxiCFMXPZNob9aWDpXojN33uEumrIfGk2nPFhCLqfAYBr iePr7qM2nxaPIEmkEgEhzQqY+E8uPpnYAQhbDDcFldgRhHB8PaUCtASlGlLpBg+UYI7A kZERrtP1e5qjE5+xixi1FJH8UBZ/EjsF5ZvDfoPyR/pn0uGzwbPJL44elE/UPbkZK2SQ lG67doRhO8+b7q14kM/2YS0x8Ybe0Mh7e+OP41iV9lcVeuMtT0DiYDvR21jKgK1SBFTL zpTovNhkuSmIblS9j0vSv+/Z2mMZ9D9K6yt1ZZk4cPop2+IMDVujcaBrSrKru+70JaZ6 MoXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=XMgVfTShp8/y1ycpTCEtCE0VA0AbHs3UffKd7sL3E9A=; b=DAtBLlNI/XuYquGB7dYwYCbxv9jPwKQ0v25vzZr9sBYdkHmR+5J5G8Kympd+OPTTNQ hYuSkTM0WpmMTIJkWGg8TMiNHUUqqabLzElEOS7goUM9np+muCSKYl7F8OG/cEUVVidw cl8nJjgNTHtpZ3ct9vwhm+CvIZhpq7ANLkOajKT+MgPSfF+/zE6dLpwrXPzfSi6KyCsn NrzLZtgBcAaMqwvef2QLppf7IhbKYh7hK7GyKfFCFlNb9tiZjLXXmLv1bDFdxmUYbgD3 c4UHn9Lj3ei7dkzdVgfumb8B5UUuAIv6bDbdgQCIF29Byakgd7VzItQTsPzeLt8sD/U6 jH7Q== X-Gm-Message-State: APjAAAVHOkFllKlxaO6ixjQNnoZlU0HAQw2BHzw6arfdB0hGijZSkn/8 L2L8Q8DOm1gMZUNiAJwqQlDmXbBxSLmwz/d+wy8= X-Google-Smtp-Source: APXvYqxhmma/G6o49n0obtC/6osLgayReUDJHzvH1wdeafBr4tI/6VM8cgzI509XC4V4yLZnzygIRl9bHbN8ZaarBhA= X-Received: by 2002:aca:d509:: with SMTP id m9mr999729oig.164.1573687963184; Wed, 13 Nov 2019 15:32:43 -0800 (PST) MIME-Version: 1.0 References: <11d5a25b-1dfe-013c-c677-ad1d17284436@sandelman.ca> <17817346-ca7d-9728-7cd2-148c16eb2858@sandelman.ca> In-Reply-To: From: Kathleen Moriarty Date: Wed, 13 Nov 2019 18:32:07 -0500 Message-ID: To: Michael Richardson Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="000000000000087428059742c897" Archived-At: Subject: Re: [Rats] my hack attempt at a RATS icon X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Nov 2019 23:32:46 -0000 --000000000000087428059742c897 Content-Type: text/plain; charset="UTF-8" On Wed, Nov 13, 2019 at 8:59 AM Kathleen Moriarty < kathleen.moriarty.ietf@gmail.com> wrote: > Clever, but what about the people that hate rats? I try to dis-associate > when I think of the working group. Are there any cute rat images or one > that is white? > White was thinking as a reference to white hat as someone asked. Cute would be better though. > > Thanks! > Kathleen > > On Wed, Nov 13, 2019 at 7:10 AM Michael Richardson > wrote: > >> >> >> On 2019-11-13 9:03 a.m., Salz, Rich wrote: >> > Is the rat clip-art public domain? >> >> Thanks for asking! >> Yes, I try to be meticulous when I'm grabbing artwork from the Internet. >> I have a script that wget's stuff and saves it to "credits.txt" so that >> I have a record! >> >> I thought clker had explicit CC statements for each item, but they say >> things are public domain. >> (Which actually means that their terms of use are null and void. >> Stallman figured that out 40 years ago) >> >> Anyway, here are the components: >> http://www.clker.com/clipart-grey-greedy-rat.html >> http://www.clker.com/clipart-sniper-optic.html >> >> Given that I put some public domain stuff together, I get to assert a >> copyright on the collection if I want. >> So, I'd use: Attribution-ShareAlike 4.0 International >> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > > > -- > > Best regards, > Kathleen > -- Best regards, Kathleen --000000000000087428059742c897 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Nov 13, 2019 at 8:59 AM Kathl= een Moriarty <kathle= en.moriarty.ietf@gmail.com> wrote:
Clever, but what about the peopl= e that hate rats?=C2=A0 I try to dis-associate when I think of the working = group.=C2=A0 Are there any cute rat images or one that is white?

White was thinking as a reference to white hat = as someone asked.

Cute would be better though.=C2= =A0

Thanks!
Kathleen

On Wed, Nov 13, 2019= at 7:10 AM Michael Richardson <mcr+ietf@sandelman.ca> wrote:


On 2019-11-13 9:03 a.m., Salz, Rich wrote:
> Is the rat clip-art public domain?

Thanks for asking!
Yes, I try to be meticulous when I'm grabbing artwork from the Internet= .
I have a script that wget's stuff and saves it to "credits.txt&quo= t; so that
I have a record!

I thought clker had explicit CC statements for each item, but they say
things are public domain.
(Which actually means that their terms of use are null and void.=C2=A0
Stallman figured that out 40 years ago)

Anyway, here are the components:
http://www.clker.com/clipart-grey-greedy-rat.html
http://www.clker.com/clipart-sniper-optic.html=C2= =A0

Given that I put some public domain stuff together, I get to assert a
copyright on the collection if I want.
So, I'd use:=C2=A0 Attribution-ShareAlike 4.0 International


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen


--

Best regards,
Kathleen
--000000000000087428059742c897-- From nobody Thu Nov 14 01:46:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D659A120142 for ; Thu, 14 Nov 2019 01:46:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eotgE34ue2qM for ; Thu, 14 Nov 2019 01:46:15 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88B2712022D for ; Thu, 14 Nov 2019 01:46:14 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAE9kA5g010606 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 14 Nov 2019 10:46:11 +0100 Received: from EXCH2010B.sit.fraunhofer.de ([169.254.2.69]) by EXCH2010CAS2.sit.fraunhofer.de ([141.12.84.171]) with mapi id 14.03.0468.000; Thu, 14 Nov 2019 10:46:05 +0100 From: "Fuchs, Andreas" To: Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] FIDO TPM attestation Thread-Index: AQHVmdgbKKlnQ1ZLsk2cVdcDGcns46eKarF6 Date: Thu, 14 Nov 2019 09:46:04 +0000 Message-ID: <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> In-Reply-To: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [141.12.89.204] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 09:46:18 -0000 The reason for this is that a TEE is a touring-complete execution environme= nt for arbitrary code,=0A= whilst the TPM further has a well-define precise functional logic instead o= f arbitrary code.=0A= Thus only protocols that have the TPM's functional logic in mind can levera= ge it to the fullest and=0A= FIDO unfortunately did not do so.=0A= =0A= However, this fact that the TPM is well-define and precise proposes the big= advantage since it provides=0A= a much higher level of assurance. Not only the execution environment (i.e. = TEE vs TPM chip) is=0A= standardized and CC-evaluated, but the function logic (i.e. TPM command set= ) as well. The FIDO code=0A= running inside a TEE is not standardized (to the level of TPM) and most cer= tainly not CC-evaluated.=0A= =0A= Therefore, the TPM is the preferred solution for anchoring trust with high = assurance levels and it is the=0A= duty of attestation protocols to account for its well-defined functional lo= gic in order to establish maximum=0A= trust in a device or statement.=0A= =0A= Best regards,=0A= Andreas=0A= ________________________________________=0A= From: RATS [rats-bounces@ietf.org] on behalf of Laurence Lundblade [lgl@isl= and-resort.com]=0A= Sent: Wednesday, November 13, 2019 05:08=0A= To: rats@ietf.org=0A= Subject: [Rats] FIDO TPM attestation=0A= =0A= Here=92s evidence that remote TPM attestation is not just for routers and i= s used in non-YANG environments: https://fidoalliance.org/specs/fido-v2.0-p= s-20150904/fido-key-attestation-v2.0-ps-20150904.html#tpm-attestation.=0A= =0A= In non-TPM FIDO attestation, the whole attester is in the TEE or such. In T= PM FIDO attestation only the key storage and signing is in the TPM. There i= s reliance on components outside of the TPM for the security of the attesta= tion, so it isn=92t the preferred form.=0A= =0A= This is a reason to consider the TPM Token I=92ve mentioned. It would allow= remote TPM-based attestation to be used anywhere there is a TPM for use ca= ses beyond routers and YANG.=0A= =0A= LL=0A= _______________________________________________=0A= RATS mailing list=0A= RATS@ietf.org=0A= https://www.ietf.org/mailman/listinfo/rats=0A= From nobody Thu Nov 14 02:11:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7213E1200FB for ; Thu, 14 Nov 2019 02:11:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qWBHzc5NTIGb for ; Thu, 14 Nov 2019 02:11:15 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140085.outbound.protection.outlook.com [40.107.14.85]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4D44120058 for ; Thu, 14 Nov 2019 02:11:14 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=YmDttRMEL10y+ofBu57uGxekOUgdUnv4PyudO/HyX4soXQh4wa9cJsXVJx2hO0JMfHqD1ZRk2JoOkYE8icltVYHLAZnfdWwmMV2W8vNv8iYxYLBqO0PkxYYhNZRD6uY8N23PYjmHXj7q0hMNbdvF0dTEJvX/eyN2EYs1qyy/d8T/nPdAwpUzRyfgaokbhkiUVlGMRIpkOcryVPBe9rrChluOOpW/KfxDL4p16qIjXJf7halhluaXsNWdlOTXgdSUPjmAOL8kOAPuhJKwXk6G2osc9NXyZKeumUPEDWqZueUxD97ZJIpxgnMIPT21CQw+M3w2BhghV3w6ayZ8uo1kJQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=d7TBTeQbx4U/Pxxo48f8js81927KLAKK39qtaCdLBOE=; b=mx/Kg9hZeGwDDXEnUpe01I6UA8FQi+ErWfsaUn3K+izDhX1YVL7VPBjU/AXWSahJInRncqHiBqfQ99B1mLWC75Q9+7p+lcLgbVq2O8CB7y0g0suUtB32YGwv5DRkIY0bkLjkSYXjFAeN0B43WBjg/sZh7XCq4RAxj21xFBCrVT1NkRMV5CNpADruWvNsdsyyGwIg7NTdq8q5zVm9c1pQLJE9AxNK+R9Scho2Y19aS7Ht6xdnfWdc5cuQvrLAHZoHhnI1LvRmBDgMLauTKws5u8Im4mjUXaBxfBPLZR+plIH7LAn/e9xTwILbezkjaptHkjhD7Yq+dE19ylD/u9nnNQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=d7TBTeQbx4U/Pxxo48f8js81927KLAKK39qtaCdLBOE=; b=enhjZb/ZK0YJCCIP4DdM9UlHAEHketpbtymxt9az0pkVV5MT8nVmzt2T5dVehHNjZyfPZrQjKpxxYki2vJj7EEdH0dCBpvVg1n3HaZ6nDsgLYwDOlDz1WyOh9o2A3HdGFoFDeShfKPSDcp0FCtC7QLL++zqQVvSWnBnd3PHiI4I= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0562.EURP190.PROD.OUTLOOK.COM (10.161.81.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.22; Thu, 14 Nov 2019 10:11:11 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.024; Thu, 14 Nov 2019 10:11:10 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: "Fuchs, Andreas" CC: Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] FIDO TPM attestation Thread-Index: AQHVmdgbKKlnQ1ZLsk2cVdcDGcns46eKarF6gAAJSoA= Date: Thu, 14 Nov 2019 10:11:10 +0000 Message-ID: <20191114101109.jap6uy3oahlusopz@anna.jacobs.jacobs-university.de> References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> In-Reply-To: <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM0PR01CA0072.eurprd01.prod.exchangelabs.com (2603:10a6:208:e6::49) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 95828710-81e3-4109-ba46-08d768eaf8c9 x-ms-traffictypediagnostic: AM5P190MB0562: x-ms-exchange-purlcount: 4 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 02213C82F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(39850400004)(346002)(366004)(136003)(199004)(189003)(14444005)(14454004)(76176011)(43066004)(1076003)(8676002)(256004)(229853002)(81156014)(8936002)(81166006)(966005)(786003)(316002)(6486002)(386003)(53546011)(99286004)(6436002)(6512007)(6506007)(85202003)(2906002)(3450700001)(102836004)(86362001)(5660300002)(478600001)(6306002)(71200400001)(71190400001)(486006)(6246003)(64756008)(66946007)(186003)(66476007)(66556008)(25786009)(66446008)(476003)(6116002)(7736002)(4326008)(85182001)(54906003)(46003)(52116002)(446003)(305945005)(11346002)(6916009)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0562; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: IevH3jorTVwTBxWFXt2UDvsiPRITEHFcNWVMVKe/DFiuhrj9nXzkC62KJrzIpwqxyuczqIIiNtQ4rPU4IwgZY+ye1wP5XPmexstuEPHG1EKddjbU1p+x4qQDJfontiezzmTcN/1Ko28qp8nP2m8La0/FU/YfpiQjRP1chlHhJ+9eHiK0SiS8eedBHjc1ybtozy2R9DcUkIn+ycA6a283BlhoMYjUnRe6/jT3mwLXrjYgbnGx1fPSucOR1KqPrnMwyXVWP6TzB9eFHgZECdqS+fLHPvj8a6osOKaNL04BdrxzAMpueOqioGTBFipk/koPMyf2sYXNNFs4tFskpD/6Ayk79L2nHxM9GwY7ba3jWwN32U3zPd8kW9P0SYyLWs/rS7WQogvsLHhSwcJxBHTieTABLMZyzKA6toPrswcLV3/ALbviWwEOQMmAUVfVWnhhrwKnzRpJ8EoS5Qj1tDMPxgkylMtJKY4Gq09INJ+nJmk= Content-Type: text/plain; charset="utf-8" Content-ID: <88F63E23F0175D4C888040ACADE81B99@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 95828710-81e3-4109-ba46-08d768eaf8c9 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 10:11:10.4069 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: WqA/lvsRnoP+T7hR5DIKcKtlVGDcc1ry/Oc91lWS3xps22xxLJ93cDC0dmaWsOWmLnqZtiXx59Srbu+rSldEnnQE2Gzwh3oaAW35j+a3T5Y= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0562 Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 10:11:17 -0000 SSBqdXN0IHJlYWQgdGhpcyBtb3JuaW5nIGFib3V0IDxodHRwOi8vdHBtLmZhaWwvPi4NCg0KL2pz DQoNCk9uIFRodSwgTm92IDE0LCAyMDE5IGF0IDA5OjQ2OjA0QU0gKzAwMDAsIEZ1Y2hzLCBBbmRy ZWFzIHdyb3RlOg0KPiBUaGUgcmVhc29uIGZvciB0aGlzIGlzIHRoYXQgYSBURUUgaXMgYSB0b3Vy aW5nLWNvbXBsZXRlIGV4ZWN1dGlvbiBlbnZpcm9ubWVudCBmb3IgYXJiaXRyYXJ5IGNvZGUsDQo+ IHdoaWxzdCB0aGUgVFBNIGZ1cnRoZXIgaGFzIGEgd2VsbC1kZWZpbmUgcHJlY2lzZSBmdW5jdGlv bmFsIGxvZ2ljIGluc3RlYWQgb2YgYXJiaXRyYXJ5IGNvZGUuDQo+IFRodXMgb25seSBwcm90b2Nv bHMgdGhhdCBoYXZlIHRoZSBUUE0ncyBmdW5jdGlvbmFsIGxvZ2ljIGluIG1pbmQgY2FuIGxldmVy YWdlIGl0IHRvIHRoZSBmdWxsZXN0IGFuZA0KPiBGSURPIHVuZm9ydHVuYXRlbHkgZGlkIG5vdCBk byBzby4NCj4gDQo+IEhvd2V2ZXIsIHRoaXMgZmFjdCB0aGF0IHRoZSBUUE0gaXMgd2VsbC1kZWZp bmUgYW5kIHByZWNpc2UgcHJvcG9zZXMgdGhlIGJpZyBhZHZhbnRhZ2Ugc2luY2UgaXQgcHJvdmlk ZXMNCj4gYSBtdWNoIGhpZ2hlciBsZXZlbCBvZiBhc3N1cmFuY2UuIE5vdCBvbmx5IHRoZSBleGVj dXRpb24gZW52aXJvbm1lbnQgKGkuZS4gVEVFIHZzIFRQTSBjaGlwKSBpcw0KPiBzdGFuZGFyZGl6 ZWQgYW5kIENDLWV2YWx1YXRlZCwgYnV0IHRoZSBmdW5jdGlvbiBsb2dpYyAoaS5lLiBUUE0gY29t bWFuZCBzZXQpIGFzIHdlbGwuIFRoZSBGSURPIGNvZGUNCj4gcnVubmluZyBpbnNpZGUgYSBURUUg aXMgbm90IHN0YW5kYXJkaXplZCAodG8gdGhlIGxldmVsIG9mIFRQTSkgYW5kIG1vc3QgY2VydGFp bmx5IG5vdCBDQy1ldmFsdWF0ZWQuDQo+IA0KPiBUaGVyZWZvcmUsIHRoZSBUUE0gaXMgdGhlIHBy ZWZlcnJlZCBzb2x1dGlvbiBmb3IgYW5jaG9yaW5nIHRydXN0IHdpdGggaGlnaCBhc3N1cmFuY2Ug bGV2ZWxzIGFuZCBpdCBpcyB0aGUNCj4gZHV0eSBvZiBhdHRlc3RhdGlvbiBwcm90b2NvbHMgdG8g YWNjb3VudCBmb3IgaXRzIHdlbGwtZGVmaW5lZCBmdW5jdGlvbmFsIGxvZ2ljIGluIG9yZGVyIHRv IGVzdGFibGlzaCBtYXhpbXVtDQo+IHRydXN0IGluIGEgZGV2aWNlIG9yIHN0YXRlbWVudC4NCj4g DQo+IEJlc3QgcmVnYXJkcywNCj4gQW5kcmVhcw0KPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+IEZyb206IFJBVFMgW3JhdHMtYm91bmNlc0BpZXRmLm9yZ10gb24g YmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSBbbGdsQGlzbGFuZC1yZXNvcnQuY29tXQ0KPiBT ZW50OiBXZWRuZXNkYXksIE5vdmVtYmVyIDEzLCAyMDE5IDA1OjA4DQo+IFRvOiByYXRzQGlldGYu b3JnDQo+IFN1YmplY3Q6IFtSYXRzXSBGSURPIFRQTSBhdHRlc3RhdGlvbg0KPiANCj4gSGVyZeKA mXMgZXZpZGVuY2UgdGhhdCByZW1vdGUgVFBNIGF0dGVzdGF0aW9uIGlzIG5vdCBqdXN0IGZvciBy b3V0ZXJzIGFuZCBpcyB1c2VkIGluIG5vbi1ZQU5HIGVudmlyb25tZW50czogaHR0cHM6Ly9maWRv YWxsaWFuY2Uub3JnL3NwZWNzL2ZpZG8tdjIuMC1wcy0yMDE1MDkwNC9maWRvLWtleS1hdHRlc3Rh dGlvbi12Mi4wLXBzLTIwMTUwOTA0Lmh0bWwjdHBtLWF0dGVzdGF0aW9uLg0KPiANCj4gSW4gbm9u LVRQTSBGSURPIGF0dGVzdGF0aW9uLCB0aGUgd2hvbGUgYXR0ZXN0ZXIgaXMgaW4gdGhlIFRFRSBv ciBzdWNoLiBJbiBUUE0gRklETyBhdHRlc3RhdGlvbiBvbmx5IHRoZSBrZXkgc3RvcmFnZSBhbmQg c2lnbmluZyBpcyBpbiB0aGUgVFBNLiBUaGVyZSBpcyByZWxpYW5jZSBvbiBjb21wb25lbnRzIG91 dHNpZGUgb2YgdGhlIFRQTSBmb3IgdGhlIHNlY3VyaXR5IG9mIHRoZSBhdHRlc3RhdGlvbiwgc28g aXQgaXNu4oCZdCB0aGUgcHJlZmVycmVkIGZvcm0uDQo+IA0KPiBUaGlzIGlzIGEgcmVhc29uIHRv IGNvbnNpZGVyIHRoZSBUUE0gVG9rZW4gSeKAmXZlIG1lbnRpb25lZC4gSXQgd291bGQgYWxsb3cg cmVtb3RlIFRQTS1iYXNlZCBhdHRlc3RhdGlvbiB0byBiZSB1c2VkIGFueXdoZXJlIHRoZXJlIGlz IGEgVFBNIGZvciB1c2UgY2FzZXMgYmV5b25kIHJvdXRlcnMgYW5kIFlBTkcuDQo+IA0KPiBMTA0K PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBSQVRT IG1haWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vcmF0cw0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gUkFUUyBtYWlsaW5nIGxpc3QNCj4gUkFUU0BpZXRmLm9yZw0K PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCg0KLS0gDQpKdWVy Z2VuIFNjaG9lbndhZWxkZXIgICAgICAgICAgIEphY29icyBVbml2ZXJzaXR5IEJyZW1lbiBnR21i SA0KUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAgICBDYW1wdXMgUmluZyAxIHwgMjg3NTkg QnJlbWVuIHwgR2VybWFueQ0KRmF4OiAgICs0OSA0MjEgMjAwIDMxMDMgICAgICAgICA8aHR0cHM6 Ly93d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUvPg0K From nobody Thu Nov 14 02:51:43 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 480B9120088 for ; Thu, 14 Nov 2019 02:51:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6EajSW9z9Qy4 for ; Thu, 14 Nov 2019 02:51:40 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9A69120019 for ; Thu, 14 Nov 2019 02:51:38 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAEApZeZ014495 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 14 Nov 2019 11:51:36 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 14 Nov 2019 11:51:30 +0100 To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , "Fuchs, Andreas" CC: "rats@ietf.org" , Laurence Lundblade References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> <20191114101109.jap6uy3oahlusopz@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: <3c66bb6b-3c53-18df-c9bb-08f88ab38d10@sit.fraunhofer.de> Date: Thu, 14 Nov 2019 11:51:30 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191114101109.jap6uy3oahlusopz@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 10:51:42 -0000 Me too :-) I actually pulled it into content for my slides. It perfectly shows the levels of assurances involved and why people typically choose to build architectures on the RoT assumption. "TPM-Fail" occurred in a physical TPM and a Firmware TPM running in a TEE. The failed primitive is "shielded secret" due to a side-channel attack (timing measurements of crypto - again...). This is an implementation specific attack as only two of many TPM flavors were affected (for now), most are not. What does this tell us? :-) 1.) The quality of a specification does not guarantee equally secure products based on that spec (this will be true for everything RATS, too). 2.) If you use phyiscal TPM, TEE-TPM (so called Firmware TPM), or even non-certifed code in a TEE. All these are never 100% secure. 3.) You need an assumption to build your trust models on (aka provide the basis for decisions what to trust and what not to trust) and these assumption are made for RoT (trusting either the TPM and the TEE-TPM product that failed here was a decision). 4.) In a well-defined trust model, trust can be revoked. I am relatively sure that some entities will come to the conclusion not to trust the "TPM-Fails" anymore. In some given scopes those are not RoT anymore. Having said all that. There are and will be secure TEE software, some of it CC-certified, some not, TPM in phyiscal form, as Firmware TPM, or as virtual TPM - and all of them will never be 100% secure all the time. I think everyone is agreeing that this is always true wrt everything security. In consequence, that is not the point. You can either give up on security or work with the assumptions of RoT here. If you are not assuming and requiring any existing security-procedures as a basis - the whole point of remote attestation procedures would be moot, using... GNU keyrings would be moot :-) And I do not think that is the case. Coming back to Andreas' comment, there is a point to the scope and isolation of trusted primitive functions/services provided by an isolated secure environment. The better the isolation/shielding, the better the external certification, and the better the level "immutability" of the primitive functions/services, the higher the level of assurance is. In average, sans the always reemerging timing side-channel attacks, of course :) Viele Grüße, Henk On 14.11.19 11:11, Schönwälder, Jürgen wrote: > I just read this morning about . > > /js > > On Thu, Nov 14, 2019 at 09:46:04AM +0000, Fuchs, Andreas wrote: >> The reason for this is that a TEE is a touring-complete execution environment for arbitrary code, >> whilst the TPM further has a well-define precise functional logic instead of arbitrary code. >> Thus only protocols that have the TPM's functional logic in mind can leverage it to the fullest and >> FIDO unfortunately did not do so. >> >> However, this fact that the TPM is well-define and precise proposes the big advantage since it provides >> a much higher level of assurance. Not only the execution environment (i.e. TEE vs TPM chip) is >> standardized and CC-evaluated, but the function logic (i.e. TPM command set) as well. The FIDO code >> running inside a TEE is not standardized (to the level of TPM) and most certainly not CC-evaluated. >> >> Therefore, the TPM is the preferred solution for anchoring trust with high assurance levels and it is the >> duty of attestation protocols to account for its well-defined functional logic in order to establish maximum >> trust in a device or statement. >> >> Best regards, >> Andreas >> ________________________________________ >> From: RATS [rats-bounces@ietf.org] on behalf of Laurence Lundblade [lgl@island-resort.com] >> Sent: Wednesday, November 13, 2019 05:08 >> To: rats@ietf.org >> Subject: [Rats] FIDO TPM attestation >> >> Here’s evidence that remote TPM attestation is not just for routers and is used in non-YANG environments: https://fidoalliance.org/specs/fido-v2.0-ps-20150904/fido-key-attestation-v2.0-ps-20150904.html#tpm-attestation. >> >> In non-TPM FIDO attestation, the whole attester is in the TEE or such. In TPM FIDO attestation only the key storage and signing is in the TPM. There is reliance on components outside of the TPM for the security of the attestation, so it isn’t the preferred form. >> >> This is a reason to consider the TPM Token I’ve mentioned. It would allow remote TPM-based attestation to be used anywhere there is a TPM for use cases beyond routers and YANG. >> >> LL >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Nov 14 06:06:08 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85F2C1200EF for ; Thu, 14 Nov 2019 06:06:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eXtS5ojwK_sn for ; Thu, 14 Nov 2019 06:06:04 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140058.outbound.protection.outlook.com [40.107.14.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6AABC120129 for ; Thu, 14 Nov 2019 06:06:04 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OT35IYmo0gA2CDPbyRGj+GUH6aj18PE5iv6EzRKmtosLAaaCMRGyi35iWszZTUQMmLEXWbbiDyiA+e8tvtWJHBoo5S3+hyak8B5gbahQUInt8WRoGJCYsbUzWFmZ2p3gR6KjFIf9cMaXNm8BtX9NikBdszZwPWshmf5rxbfQ+dfwk9XNCRm3QA+2SXIMe5uLR6HekiZwCtQwoLIxFa+GcmJpMBpHQIkKqXyO2w8DbilcbfbvFXuG2zbOY1X1k2TnE5Wl+h0TiaedeK8j7puA42NC51HrKx8S0L3lO190P3FeF3CdMVTQXzoY0YQbNnqwoVf2nQmts5apduN6WrGvuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GFZ5620ZDyLP50xktAwwYB/BnuCUIliXgLjpW/pdfwg=; b=CStcxTRN7I0y/9nX7K5DOLqnneIhS6QXi+k0cido9WLuNdWXbJEcSytdl5moaf7S+chxQAnO71keaJYL6DUZQIUh+1WcJK9oZ4AFkGuFtanE8adBqmY5ZyCLeI+dTnHArzWATF3Oq9ahA0oFq7/JKe+rH+LEDrpiVL7DCsviFcBCJbD0ayX0xHkqX/S9z42UY1TkQZkY3jJr34X2pjYKZcyeGkz/2cJhmozxCdJ3NaC+/kBQLbl8ok/+Rt4DKfE9okOCI79Q1Ps+0CV2yYaNsixTfXsGJaDTx3zvDWE9shFcZeyn3eFkoO/OdC8J0M6VcFsr5aP+KhiXG4HmjwkCrQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GFZ5620ZDyLP50xktAwwYB/BnuCUIliXgLjpW/pdfwg=; b=rBF748tHbAVhsN1WgX3QGemBYSKfTS2iwg3vD2UUzVcefU8YAxCBkd28sQfKikBunEjrLaNbFNGjiBUiE6wCCVEOzE8eP5Jinr1uEcWT65TKq7qdWIVGJEkiz6bGmaEIdwSCxAGAjzXAlhd959NhNrImgnJUofDUb+90ykpFK4s= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0481.EURP190.PROD.OUTLOOK.COM (10.161.64.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23; Thu, 14 Nov 2019 14:06:01 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.024; Thu, 14 Nov 2019 14:06:01 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Laurence Lundblade CC: Dave Thaler , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmk0m8/lytau3hU+AhCwtIdg/0aeKtK4A Date: Thu, 14 Nov 2019 14:06:01 +0000 Message-ID: <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> In-Reply-To: <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM3PR07CA0135.eurprd07.prod.outlook.com (2603:10a6:207:8::21) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 52849fe8-9d3e-4ab2-74c6-08d7690bc79a x-ms-traffictypediagnostic: AM5P190MB0481: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4125; x-forefront-prvs: 02213C82F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(136003)(396003)(39840400004)(366004)(376002)(346002)(199004)(189003)(6306002)(6486002)(386003)(6506007)(6512007)(102836004)(6436002)(478600001)(229853002)(76176011)(52116002)(186003)(3450700001)(6116002)(66946007)(66556008)(66446008)(6916009)(2906002)(54906003)(256004)(5660300002)(786003)(316002)(14454004)(43066004)(71200400001)(71190400001)(64756008)(66476007)(305945005)(1076003)(81166006)(81156014)(486006)(86362001)(25786009)(8676002)(11346002)(446003)(8936002)(66574012)(476003)(99286004)(46003)(6246003)(4326008)(7736002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0481; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Td9mhg3Qbqrnuf1uet+apz+tUhmsj21cNUqtVwlSBl9ozZIXEh+ZhXsh8tEwxLCXgDaIf6LAnW8G5fzO5nWcnN7YKawNGnwvNfsUpIp4Bsj5NKFwEokqisgjBw/arO35LAHAWQ/EyLuPHq1dmRGiPkpMLjz3EBzP+F/pSwHVu0x0vt99OsWVQXF1woh4Xot1o7xx5Q4Q1hDY7s39uMmfSpAkRn6KU8KlacayluACIAb6oY1H2XCwSNZ3wW/PhKvxv8gtZ7T6ziUE2SmaSFzAsGOj1RWazu48iG8VNQZayTXsimuQgwivhxY0Nlm6J/RLE96akUhZbIny9OO1q6dntt88Og45uH+owp3NTtXJGreejP0WxQb3J6TMd35G8rlkyKIhR3oec0t8Tj28aDI9boDgFVVGDm9HXvOsrXBjRRKBCUAYM8c/yDEX5r57vte6 Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 52849fe8-9d3e-4ab2-74c6-08d7690bc79a X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 14:06:01.2888 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: iHTUAIVl8ElvOZ2CoN5+jvCnTbwoVolUvNF/pA8OZWNX21cjeqigSKClGFOOyEgFzNo/A9Bmzr4JO/8GZGwkMoHvlNlMQSlOImapFGi9LVI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0481 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 14:06:07 -0000 On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade wrote: >=20 > I see EAT as applicable to all these worlds, where the YANG module is jus= t for the smallish router world. So I mostly agree with Dave about proporti= ons, however this is the IETF where YANG modules are created. (Maybe I sho= uld go join the W3C world and work on attestations APIs for browsers after = RATS is done). > If EAT is the common format for "token", then it does not make sense to me to define a YANG version of it. It may make sense to carry EAT token over protocols such as NETCONF or RESTCONF and to have a YANG module defining this may make sense for the networking device world. This is then a definition of an interaction protocol, but not the token format itself. If EAT is the common format for "token", then it may make sense to be able to include "claims" that are YANG defined data. That may be an extension of the core EAT definition (but EAT would have to allow for such an extension to work). There is a lot of formally defined data in YANG modules that would be convenient to reuse as claims in a networking world. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Thu Nov 14 06:11:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98AFD12029C for ; Thu, 14 Nov 2019 06:11:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hNrOv69147F9 for ; Thu, 14 Nov 2019 06:11:42 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20078.outbound.protection.outlook.com [40.107.2.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45DD912025D for ; Thu, 14 Nov 2019 06:11:42 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RgbAMYsGzSYLfn4tA3/1u07pm2RvpVp/o6hLeqyEeexGVwlSH0ZN5j8yj7tA1u+zlFNs9AF4RJVAo9W1D6W9TUiqcilI+Myz9an5UpboZMgiDY751+8lRRbatZz9aMTxDChz8WbKdBMFIKxXQu6Trs2YAoxZwtIZoAsTUEKL+FOlKWFlCPjxFTg7f5R3SA8VylyBoGnPrkTiu4xqHhUbYmDIZky1Pz6+UKYya5Fd6msvrtEhwXu4Ml6IDyyRybMhLU83ALhI177NOOvEGMhXt6yjFLNQayo1Q9kqFSzA1gUfi/lcnVFBNWA4l8OUoUBXZrWj39roJgABFUHgryPISw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I5DGwyEFnOfqVGtW/Jg26vTNtdo9XrWj1HExPpvK3tc=; b=feuN4xRqUxHrF7nNOcoZQPTL+68vDra+Yeq3xy2muqOC5EKHUp8ibFKyDh6yxwkQTkdDZmE6niuvh109r4SPy9l3nfhGmt9/NvIvGGy3tUydvKFqGbZGmXyBIRE82urti1x7SUOcx8PTm8lPQH2zcXbB/ToCEhQxOtS1B+Rl3pbGZIoVSWGlHNhfkGVT6CyRT5T6m+LVCNkzB5V4eEaDjCGrjdf+k5B3zoKHcCPz7BwOLoRiuna4nUjFHq19A3HwOnbKb3dR3QfJoD5UCWTtT2Z/cj0VhsaGlD+j1SiKft3BuTVy3M8tdQ5T5jsO16rpfK1ydvgxKNm/UwTctbyOWw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I5DGwyEFnOfqVGtW/Jg26vTNtdo9XrWj1HExPpvK3tc=; b=Cq0InkgUq4WC7bJXcFsraO5o3Y2n5zCyUIBb0iD9lGQq7eCOMOV+P20nKwkp2XV572v7Xndo6u2WHAn1tgPvZQgF/itooPd8QRqp014rYbx3m26ZT/VJucdGQfuqZl9UgjtwedRnvhhX3T0GFGktxopUunhqfsefeXpvzrwik+U= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0385.EURP190.PROD.OUTLOOK.COM (10.161.63.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Thu, 14 Nov 2019 14:11:39 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.024; Thu, 14 Nov 2019 14:11:39 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Laurence Lundblade CC: "Salz, Rich" , "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoICAAAAtIIAANPyAgABD4QCAALHLgIABVZQA Date: Thu, 14 Nov 2019 14:11:39 +0000 Message-ID: <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> In-Reply-To: Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM4PR07CA0002.eurprd07.prod.outlook.com (2603:10a6:205:1::15) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 06f550e0-ab28-4572-057f-08d7690c9126 x-ms-traffictypediagnostic: AM5P190MB0385: x-ms-exchange-purlcount: 1 x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3044; x-forefront-prvs: 02213C82F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(136003)(366004)(39850400004)(396003)(346002)(199004)(189003)(64756008)(66946007)(6306002)(478600001)(305945005)(4744005)(1076003)(81166006)(71200400001)(71190400001)(81156014)(52116002)(8676002)(6486002)(14454004)(446003)(2906002)(5660300002)(8936002)(6916009)(6246003)(476003)(229853002)(11346002)(6436002)(6512007)(6116002)(6506007)(386003)(25786009)(102836004)(46003)(3450700001)(256004)(76176011)(43066004)(86362001)(186003)(7736002)(486006)(66476007)(54906003)(99286004)(4326008)(66556008)(316002)(786003)(66446008); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0385; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kozTU+87tcYg2eLIT2Z6wY+cG+zplZvretvuMVXoccdhYOgOIgbrbR2wUY9ZEpa8BoWk6M3JkMMXNMM0ZCCiyCrUWFVoLrbItn1/DVNjQqpMQJnvYdSVpn/YxXLmKh6Q9akJkqhx4/97i0go4aCxjYDaZ3ngQZBwQ34X7zTLLXFHNqmrOhEpch4I9VSVKxfTRr30P0HdZhLbYah3itsl3YikqFtWwwzAchKpp7VTITlR/NGcPIqWG8x2aqO03l8Qzyyrtsir0D7Z0uJPpDLWxxM2PYEZv3ibEfYKyNx+mnZLg4MrNqfssKEqMbX3CnHXZHxJJmehanJOFAgmh6NGnX2EeuffBniEqlFU0/7CzSu1KRB0XqNR8qnjlRjb3IJN68LbVkPcG5L0v+fzK0UmDvrl5gr5bIi0aBc364mdGqjspBjjuOgRuT4A7Dm/0R//WYPa8eVS21hvOrKgRzTzpLOPu9WlR8eVC/kFWqeA2PM= Content-Type: text/plain; charset="iso-8859-1" Content-ID: <23CC4BC3DD4B8B40916ADB4253BFD070@EURP190.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 06f550e0-ab28-4572-057f-08d7690c9126 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 14:11:39.3955 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: b3xvuRTFbhimFxrV5ZVhWD2TnE+kaQhRRgCHA6TiWcy/ubratWJkAOjwsxo8X92OobaIUcyPIdVDGsh1hN5Ffw6jG0wqD8TOtPbw7pUHVMA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0385 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 14:11:46 -0000 On Wed, Nov 13, 2019 at 09:49:05AM -0800, Laurence Lundblade wrote: >=20 > Currently there are two claims encodings, CBOR and JSON. Thanks to CDDL, = we get from data model to encoding in a largely mechanical way and there is= little text needed. >=20 >=20 > IM: Text > | > + > | > DM: CDDL > | > +---+--+ > | | > CBOR JSON >=20 >=20 > I think this is a good, simple and effective way to proceed. This basic model works for me. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Thu Nov 14 07:03:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90533120274 for ; Thu, 14 Nov 2019 07:03:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HVIFcVFMYKUp for ; Thu, 14 Nov 2019 07:03:09 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4241012025D for ; Thu, 14 Nov 2019 07:03:08 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAEF2xM6027965 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 14 Nov 2019 16:03:00 +0100 Received: from [192.168.16.50] (79.234.112.245) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 14 Nov 2019 16:02:54 +0100 To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: Dave Thaler , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> Date: Thu, 14 Nov 2019 16:02:53 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.112.245] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 15:03:12 -0000 Hi Jürgen, I think this is very useful input. On the list, Laurence and I already started to discuss Claims for "YANG modeled data" and Claims for "TPM modled data" (referred to as tpm tokens recently). The remaining questions are about: What do you think is the upcoming/TBD impact on the current YANG module for challenge-response RATS? Leveraging YANG modeled data comes up again and again. Maybe there is good approach here. The TPM Interface based YANG Module does not simply convey native TPM structure, but decomposes them down the values that are useful and common on the management plane because the building blocks themselves have well defined semantics (always ensuring canonical re-composition). Viele Grüße, Henk On 14.11.19 15:06, Schönwälder, Jürgen wrote: > On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade wrote: >> >> I see EAT as applicable to all these worlds, where the YANG module is just for the smallish router world. So I mostly agree with Dave about proportions, however this is the IETF where YANG modules are created. (Maybe I should go join the W3C world and work on attestations APIs for browsers after RATS is done). >> > > If EAT is the common format for "token", then it does not make sense > to me to define a YANG version of it. It may make sense to carry EAT > token over protocols such as NETCONF or RESTCONF and to have a YANG > module defining this may make sense for the networking device world. > This is then a definition of an interaction protocol, but not the > token format itself. > > If EAT is the common format for "token", then it may make sense to be > able to include "claims" that are YANG defined data. That may be an > extension of the core EAT definition (but EAT would have to allow for > such an extension to work). There is a lot of formally defined data in > YANG modules that would be convenient to reuse as claims in a > networking world. > > /js > From nobody Thu Nov 14 07:51:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B291A120113 for ; Thu, 14 Nov 2019 07:51:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TwXXXytvPZqm for ; Thu, 14 Nov 2019 07:51:09 -0800 (PST) Received: from p3plsmtpa06-10.prod.phx3.secureserver.net (p3plsmtpa06-10.prod.phx3.secureserver.net [173.201.192.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A57FB1200BA for ; Thu, 14 Nov 2019 07:51:09 -0800 (PST) Received: from [10.141.0.58] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id VHOmiGKNcww7JVHOminPND; Thu, 14 Nov 2019 08:51:09 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_56A87F96-1E59-4751-B2AF-AF11775BA164" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 14 Nov 2019 07:51:08 -0800 In-Reply-To: <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> Cc: "rats@ietf.org" To: "Fuchs, Andreas" References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfIpRGz7ufhaAmzr/cZKYgTmw6HRjKKzsFHDq2Q0L9HH5LoFy74f4MRWd/hsb3cPGFjrSX/qthPt4GvlDn9aUBceMcXhBZOReeweeoAf7uWzk+aR1iRjI cF//j9zYNrUattLyj90Ecxk8iMsO17XElsnSWUye++jcxx9/Dl2nnbQly2wtxayu8EO0vlkuPJgUfne70FOTL7RNjmqsuxWa/M4= Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 15:51:12 -0000 --Apple-Mail=_56A87F96-1E59-4751-B2AF-AF11775BA164 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas = wrote: >=20 > The FIDO code running inside a TEE is not standardized (to the level = of TPM) and most certainly not CC-evaluated. That=E2=80=99s not true. The FIDO L3 and L3+ Certification program = is CC (Common Criteria) based (AVA_VAN.3 and = AVA_VAN.4). =20 Many FIDO authenticators run on secure elements which provides roughly = equivalent security to a TPM, however since the full authenticator = protocol runs on the turing-complete secure element the full FIDO = protocol is secured, not just the key storage. Here=E2=80=99s one = . Global Platform offers a CC-based certification program for TEE=E2=80=99s = . FIDO is working on a certification program that will make use of = that. BSI has published a CC-based protection profile for FIDO = . Android Keystore=E2=80=99s now supports StrongBox = , which puts the keys = in a secure element. Qualcomm=E2=80=99s Snapdragon mobile phone chip has a secure-element = like subsystem = (not the TEE) that is = CC-certified. TEE and TEE-like offerings are stronger than they used to be, particular = by supporting memory encryption. Turing complete security products come in a range of security levels all = the way up the security level offered by a TPM. EAT implementations can = be just as secure and certified as TPM attestation. LL --Apple-Mail=_56A87F96-1E59-4751-B2AF-AF11775BA164 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 14, 2019, at 1:46 AM, Fuchs, Andreas <andreas.fuchs@sit.fraunhofer.de> wrote:

The FIDO code running inside a TEE is not = standardized (to the level of TPM) and most certainly not = CC-evaluated.

That=E2=80=99s not true.

The FIDO L3 and L3+ = Certification program is CC (Common Criteria) based (AVA_VAN.3 = and AVA_VAN.4).  

Many FIDO = authenticators run on secure elements which provides roughly equivalent = security to a TPM, however since the full authenticator protocol runs on = the turing-complete secure element the full FIDO protocol is secured, = not just the key storage. Here=E2=80=99s one.

Global Platform offers a CC-based certification program for TEE=E2=80=99s<= /a>. FIDO is working on a certification program that will make use of = that.

BSI = has published a CC-based protection profile for FIDO.

Android Keystore=E2=80=99s now = supports StrongBox, which puts the keys in a secure = element.

Qualcomm=E2=80=99s Snapdragon mobile phone chip has a secure-element like subsystem (not the TEE) that is = CC-certified.

TEE and TEE-like offerings are stronger than they used to be, = particular by supporting memory encryption.

Turing complete security = products come in a range of security levels all the way up the security = level offered by a TPM. EAT implementations can be just as secure and = certified as TPM attestation.

LL



= --Apple-Mail=_56A87F96-1E59-4751-B2AF-AF11775BA164-- From nobody Thu Nov 14 08:02:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C17F5120A05 for ; Thu, 14 Nov 2019 08:02:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=YPTVSFTB; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=Xbovg7ky Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MNJjiNCOBTkx for ; Thu, 14 Nov 2019 08:02:13 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A325120951 for ; Thu, 14 Nov 2019 08:02:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8718; q=dns/txt; s=iport; t=1573747331; x=1574956931; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=rYB4W3MpgFlLoh9a7vW/lsDgc2PoKyrnkbQ9YKgrbOQ=; b=YPTVSFTBxY19PYT/jJbJoMXeNAnjXFsAwAx1cyDGNDwMWSdh4QtZV3Fa f+Wj8fOKHFva8J0ayZZIyhFJgS4D1w/Kq2kNHfx9w5okkIFfwgbt/PORs c9prBYFbxJPtIsmh5y69aX6EwHaCRjBHA/CT4g4q3mHAOz+3XF2VALAts Q=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3ASe+GCBQtBU7jURfi7G8SFtBXn9psv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESUDdfA8/wRje3QvuigQmEG7Zub+FE6OJ1XH1?= =?us-ascii?q?5g640NmhA4RsuMCEn1NvnvOiEkG8VefFRk5Hq8d0NSHZW2ag=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AGAABpec1d/5tdJa1lGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgWoEAQEBAQELAYFKUAVsKy0gBAsqCoQ?= =?us-ascii?q?fg0YDhFqGGIJemACBLoEkA1QCBwEBAQkDAQEYCwoCAQGEQAKCICQ0CQ4CAws?= =?us-ascii?q?BAQQBAQECAQUEbYU3DIVRAQEBAQIBAQEQCwYdAQEsCwEECwIBBgIYDR0CAgI?= =?us-ascii?q?lCyUCBAENBQgGFIMBgXlNAw4RDwECDJZhkGMCgTiIYHWBMoJ+AQEFhREYghA?= =?us-ascii?q?HAwaBNgGBUopCGIFAP4ERRoJMPoJiAQGBYxWCeTKCLI9ZOZ0ibgqCKoNMgjS?= =?us-ascii?q?PZ5oEjkeaBAIEAgQFAg4BAQWBUjmBWHAVO4JsUBEUgjeOYwwXg1CFFIU/dIE?= =?us-ascii?q?oj2EBgQ4BAQ?= X-IronPort-AV: E=Sophos;i="5.68,304,1569283200"; d="p7s'?scan'208";a="665666638" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 14 Nov 2019 16:02:05 +0000 Received: from XCH-ALN-014.cisco.com (xch-aln-014.cisco.com [173.36.7.24]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id xAEG25rB022751 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 14 Nov 2019 16:02:05 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-ALN-014.cisco.com (173.36.7.24) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 14 Nov 2019 10:02:04 -0600 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 14 Nov 2019 10:02:03 -0600 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 14 Nov 2019 11:02:03 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=c4tf9uaHbkyJtBfBgaTgb26s0QZHfBRqDda/cJjnRfWz2DBd0+298F2vBa6hGi/U3JXaUuec8oKgOLsIRdfzdGHc6z7IR9QgEeUUlZ8sx5qqGNH6hgtnXTT9TmiP8i+GxGKk2+j7Nrdku2UbB5Mi3H87JwUNvaYfo1VjvQsilU4nyRIZtn78YGvZcZVa3FkUdn3XjHU/Q6QdKfF940pd//kzdSDBdPyemzvPSTxQi52PclWdpTQ+FTOhveRBzmMhKtP1/AOM0LDVIiExbbNnekLM8NagSErL4yksPUINeA9mMOHPl4eV/LjCsgLq08Z4YtxA3HdMjb6D84JYRbSuJw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LKaf2+D4/XVEDELYlIx+qMbJ+urSF3L5ErbN3jzFecM=; b=TroavO4P4EbO+czz52W3D/fc88+AodqDXB4kjggsw2l6t563sgpziG7uloj7su0FKMVl/C9BARqHW147Vii9TXw1tFhHxLgPhVjFscafVw3hCAGdmEJM2ErK5jMVL70CYmGu0sd+L7UH8dUReYZHnVIOPdihAPgSEGu3xPI7/VKxexCUso97nSP7Jl+mnvbsYcKjFkkrCwSxC/eYH5+t+1ES+OXYy67MBmR2Y/46j452Gd/ALX/bOpReGRsSC14lsOlrMZjNokCTCobhc8NhMqY3GCVVW+igDMcp0njlks2Z+t2Dc5JbO4lAjk0V5l1w6wW2D1Zf96/fksQN8ElGvw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LKaf2+D4/XVEDELYlIx+qMbJ+urSF3L5ErbN3jzFecM=; b=Xbovg7kyOAfOSoWDOZtm/pvERZZfprpXzo8yN+3nFscXs8oK6TZOXe9NIhWq5c910ZM0pXjan4TxYNi6WE5Doz5KQ5emWBORzloQcZlOv8JmIe/H8iPqwC3UNdVrj8YD5wPxCOOapISKV46UcJ7iumq6JdHHFWH2HprMzzMdrmU= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB4266.namprd11.prod.outlook.com (52.132.249.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.25; Thu, 14 Nov 2019 16:02:02 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.028; Thu, 14 Nov 2019 16:02:02 +0000 From: "Eric Voit (evoit)" To: Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmvyW8/lytau3hU+AhCwtIdg/0aeKzjHA Date: Thu, 14 Nov 2019 16:02:02 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> In-Reply-To: <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a8ed95f8-9a2d-4763-8a0c-08d7691bfcdc x-ms-traffictypediagnostic: DM6PR11MB4266: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-forefront-prvs: 02213C82F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(376002)(136003)(396003)(366004)(189003)(199004)(2906002)(6306002)(256004)(33656002)(71190400001)(229853002)(52536014)(71200400001)(66066001)(81166006)(66946007)(66616009)(81156014)(64756008)(5660300002)(66446008)(76116006)(8936002)(8676002)(66574012)(7736002)(305945005)(74316002)(6436002)(186003)(55016002)(99286004)(7696005)(76176011)(26005)(486006)(6246003)(66556008)(66476007)(4326008)(478600001)(110136005)(316002)(54906003)(9686003)(14454004)(3846002)(25786009)(86362001)(102836004)(966005)(476003)(6506007)(11346002)(446003)(53546011)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB4266; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: doKxsDab4cO+Q6DvskwwzoKdX9aIEFANt7Qzm5JX2Y7MX0MKs95GDrxN/l5zHzmlT0R3gC9zDYXCVeyCV3+T0G8Wp73SUOvOYE974on9gThc6mrflSj6tJ8uMe4cW01+VqjVZWcFDhTzXYe+EidL++C22I4aKYmQMrKZXl4ENJphQLr9YvbSo/elreBXdCjv5R/JIeRDS4vOEewuqZFwp2maqkbj3UR2B+VnuijSm+nfE0cPXqtscQajUKsO/ZQKI4wj0bydynTnwzt2BeGdOfTG28ABqeYroTxfW5XOgkwvDsmouHcVtaFhvC0hmUn++GQdKaM0FA9I0iVaI5x26fdMJG2ETV9XrW4L6u1CMa7aISm7QC8nfLitB0rMTkgCRKdn2YlslSNYgmYhGKMmjWKMAiO2B/0/Qb2vlQd/uV2rHkntASN7affk7fKQT4aR Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_002B_01D59ADA.EF7507B0" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a8ed95f8-9a2d-4763-8a0c-08d7691bfcdc X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 16:02:02.2110 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: BXJPb54x0x2SUp38RBXEK1PVXKZtfgJYSdPEMYhG9DEYjmBC6XJ0DqHc5L37nJ8m X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB4266 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.24, xch-aln-014.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 16:02:17 -0000 ------=_NextPart_000_002B_01D59ADA.EF7507B0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi J=C3=BCrgen, Hi Henk, What routers need is exactly what you said. =20 - currently: the retrieval of TPM originated/signed quotes. =20 - in the future: the retrieval EAT Tokens Knowing when to retrieve these items is a function of the value of = specific claims inside those structures. For example, I might want to = use RFC-8641 to make a YANG Subscription to a router so that I will be = pushed the latest TPM quote when a specific PCR changes. For this to = work in the router world, we must have the structures of Quotes/Tokens = exposed by a YANG model. Eric > Hi J=C3=BCrgen, >=20 > I think this is very useful input. >=20 > On the list, Laurence and I already started to discuss Claims for = "YANG > modeled data" and Claims for "TPM modled data" (referred to as tpm = tokens > recently). >=20 > The remaining questions are about: What do you think is the = upcoming/TBD > impact on the current YANG module for challenge-response RATS? >=20 > Leveraging YANG modeled data comes up again and again. Maybe there is > good approach here. >=20 > The TPM Interface based YANG Module does not simply convey native TPM > structure, but decomposes them down the values that are useful and > common on the management plane because the building blocks themselves > have well defined semantics (always ensuring canonical = re-composition). >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: > > On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade wrote: > >> > >> I see EAT as applicable to all these worlds, where the YANG module = is just > for the smallish router world. So I mostly agree with Dave about = proportions, > however this is the IETF where YANG modules are created. (Maybe I = should > go join the W3C world and work on attestations APIs for browsers after = RATS > is done). > >> > > > > If EAT is the common format for "token", then it does not make sense > > to me to define a YANG version of it. It may make sense to carry EAT > > token over protocols such as NETCONF or RESTCONF and to have a YANG > > module defining this may make sense for the networking device world. > > This is then a definition of an interaction protocol, but not the > > token format itself. > > > > If EAT is the common format for "token", then it may make sense to = be > > able to include "claims" that are YANG defined data. That may be an > > extension of the core EAT definition (but EAT would have to allow = for > > such an extension to work). There is a lot of formally defined data = in > > YANG modules that would be convenient to reuse as claims in a > > networking world. > > > > /js > > >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats ------=_NextPart_000_002B_01D59ADA.EF7507B0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTE0MTYwMTU4WjAjBgkqhkiG 9w0BCQQxFgQU1POL9KfwArAHFuVWECRmUnU73ccwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAa+egVA4Z0o7PpD6IAi9PI9LA69yKuBZkUjyT+mfdZVqyt4g/69nljd4ppcBWqCQf9 L/aCk+4gG68Rsh8DME5r5jUUxi61fN2lOuua5SaaAlbz9UPcXlnzUyRrh+S2Iq8swzNbB2HcV3rE fAqs5+kv1Idsi8XebJ9Y5PIFe83DpT4ZAG3/e+QyvWEZ2zhIDTMWBrR0O4JJTMbR1w0sXrsWX9l+ 7B092rPpf55q8tpn/qp5WBtzjT65eNs/BAuqn5LKcHOIsQRd+iTT3s/2okjfiqIprrGW0Yo6IBRy nozX5cYqDIxhhicPoBRIitopt78+wZ9cF1FfWNwWlwG4Na0FAAAAAAAA ------=_NextPart_000_002B_01D59ADA.EF7507B0-- From nobody Thu Nov 14 08:18:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C14B1120129 for ; Thu, 14 Nov 2019 08:18:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z4bLdT0HK22J for ; Thu, 14 Nov 2019 08:18:06 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5822A120113 for ; Thu, 14 Nov 2019 08:18:05 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAEGI2ZY031949 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 14 Nov 2019 17:18:03 +0100 Received: from EXCH2010B.sit.fraunhofer.de ([169.254.2.69]) by EXCH2010CAS2.sit.fraunhofer.de ([141.12.84.171]) with mapi id 14.03.0468.000; Thu, 14 Nov 2019 17:17:57 +0100 From: "Fuchs, Andreas" To: Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] FIDO TPM attestation Thread-Index: AQHVmdgbKKlnQ1ZLsk2cVdcDGcns46eKarF6gABXgwCAABRmCA== Date: Thu, 14 Nov 2019 16:17:56 +0000 Message-ID: <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de>, In-Reply-To: Accept-Language: en-US, de-DE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [141.12.89.204] Content-Type: multipart/alternative; boundary="_000_9F48E1A823B03B4790B7E6E69430724D0163BD5B5CEXCH2010Bsitf_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 16:18:10 -0000 --_000_9F48E1A823B03B4790B7E6E69430724D0163BD5B5CEXCH2010Bsitf_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable We were talking about FIDO as one of many applications running in a TEE. They rely on correctness of other TEE-apps and/or the TEE kernel (or should I rather say TEE operating system). Thus a turing complete solut= ion (maybe even with loadable apps) and OS cannot be as secure as a special-pur= pose functional logic security provider. Also, by design an on-chip TEE offering cannot be as secure as a physically separated chip that incorporates smartcard technologies. You also highlight this by providing yubikey as example which is both; a separate SC-like chip and fixed functional logic (similar to TPMs). To conclude: fixed functional logic and separate chips have higher assuranc= e levels than turing-complete (loadable) areas of the main cpu. And to your original point: TPMs are the preferred solution for attestation in contrast to to a TEE-based approach, just as YubiKeys et al are preferre= d for FIDO in contrast to a TEE-based approach. ________________________________ From: Laurence Lundblade [lgl@island-resort.com] Sent: Thursday, November 14, 2019 16:51 To: Fuchs, Andreas Cc: rats@ietf.org Subject: Re: [Rats] FIDO TPM attestation On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas > wrote: The FIDO code running inside a TEE is not standardized (to the level of TPM= ) and most certainly not CC-evaluated. That=92s not true. The FIDO L3 and L3+ Certification program is CC (Com= mon Criteria) based (AVA_VAN.3 and AVA_VAN.4). Many FIDO authenticators run on secure elements which provides roughly equi= valent security to a TPM, however since the full authenticator protocol run= s on the turing-complete secure element the full FIDO protocol is secured, = not just the key storage. Here=92s one. Global Platform offers a CC-based certification program for TEE=92s. F= IDO is working on a certification program that will make use of that. BSI has published a CC-based protection profile for FIDO. Android Keystore=92s now supports StrongBox, which puts the keys in a secure element. Qualcomm=92s Snapdragon mobile phone chip has a secure-element like subsyst= em (not the TEE) that is CC-cer= tified. TEE and TEE-like offerings are stronger than they used to be, particular by= supporting memory encryption. Turing complete security products come in a range of security levels all th= e way up the security level offered by a TPM. EAT implementations can be ju= st as secure and certified as TPM attestation. LL --_000_9F48E1A823B03B4790B7E6E69430724D0163BD5B5CEXCH2010Bsitf_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
We were talking about FIDO as one of many applications running in a TE= E.
They rely on correctness of other TEE-apps and/or the TEE kernel
(or should I rather say TEE operating system). Thus a turing complete = solution
(maybe even with loadable apps) and OS cannot be as secure as a specia= l-purpose
functional logic security provider.

Also, by design an on-chip TEE offering cannot be as secure as a physi= cally
separated chip that incorporates smartcard technologies. You also high= light
this by providing yubikey as example which is both; a separate SC-like= chip
and fixed functional logic (similar to TPMs).

To conclude: fixed functional logic and separate chips have higher ass= urance
levels than turing-complete (loadable) areas of the main cpu.

And to your original point: TPMs are the preferred solution for attest= ation
in contrast to to a TEE-based approach, just as YubiKeys et al are pre= ferred
for FIDO in contrast to a TEE-based approach.

From: Laurence Lundblade [lgl@island-reso= rt.com]
Sent: Thursday, November 14, 2019 16:51
To: Fuchs, Andreas
Cc: rats@ietf.org
Subject: Re: [Rats] FIDO TPM attestation


On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas <andreas.fuchs@sit.fraunhofer.de> wrote:

The FIDO code running inside a TEE is not standardized (to the level of TPM) and most certainly = not CC-evaluated.

That=92s not true.

The FIDO L3 and L3+ Certification progr= am is CC (Common Criteria) based (AVA_VAN.3 and AVA_VAN.4).  

Many FIDO authenticators run on secure elements which provi= des roughly equivalent security to a TPM, however since the full authentica= tor protocol runs on the turing-complete secure element the full FIDO proto= col is secured, not just the key storage. Here=92s one.

Global Platform offers a CC-based certification program = for TEE=92s. FIDO is working on a certification program that will make use of that.

BSI has published a CC-based protection profile for FIDO.

Android Keystore=92s now supports StrongBox, which puts the keys in a secure element.

Qualcomm=92s Snapdragon mobile phone chip has a secure-element like subsystem (not the TEE) that is CC-certified.

TEE and TEE-like offerings are stronger than they used to b= e, particular by supporting memory encryption.

Turing complete security products come in a range of securi= ty levels all the way up the security level offered by a TPM. EAT implement= ations can be just as secure and certified as TPM attestation.

LL



--_000_9F48E1A823B03B4790B7E6E69430724D0163BD5B5CEXCH2010Bsitf_-- From nobody Thu Nov 14 11:57:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E96111200CD for ; Thu, 14 Nov 2019 11:57:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YWeG5QeDWXc5 for ; Thu, 14 Nov 2019 11:57:04 -0800 (PST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0215812007A for ; Thu, 14 Nov 2019 11:57:03 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga105.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Nov 2019 11:57:02 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,305,1569308400"; d="scan'208";a="235804989" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by fmsmga002.fm.intel.com with ESMTP; 14 Nov 2019 11:57:01 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX110.amr.corp.intel.com ([169.254.10.52]) with mapi id 14.03.0439.000; Thu, 14 Nov 2019 11:57:01 -0800 From: "Smith, Ned" To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Salz, Rich" , "rats@ietf.org" Thread-Topic: [Rats] What's to EAT? - terminology clarification Thread-Index: AQHVmaxQg/JbqfbFf0mfD9c0xlySNKeIK3rwgAALoICAAAAtIIAANPyAgABD4QCAATfogIABVZSA///aYQA= Date: Thu, 14 Nov 2019 19:57:00 +0000 Message-ID: <6D4432CB-3C86-4B86-AAF2-B9B057735615@intel.com> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> In-Reply-To: <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.107] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 19:57:06 -0000 UHJvdG9jb2xzIGFuZCBiaW5kaW5nIG9mIGRhdGEgdG8gcHJvdG9jb2wgY2FuIHVzZSBhIHByb3Rv Y29sIG1vZGVsbGluZyAoUE0pIGxhbmd1YWdlIChlLmcuIFJBTUwpLiBBbm90aGVyIHRocmVhZCBj aXRlZCBSRkMtODY0MSB3aGljaCB1c2VzIFlBTkcgdG8gZGVmaW5lIHN1YnNjcmlwdGlvbiBwcm90 b2NvbCBpbnRlcmFjdGlvbiBzdWdnZXN0cyBZQU5HIGNhbiBiZSB1c2VkIGZvciBwcm90b2NvbCBt b2RlbGluZy4gSW50ZXJlc3RpbmdseSwgUkZDLTg2NDIgdXNlcyBtb3N0bHkgWE1MIGVuY29kaW5n IChFTikgb3Igc3RydWN0dXJlZCB0ZXh0IChJTSkgZm9yIG1vc3Qgb2YgaXRzIGV4YW1wbGVzLiAN Cg0KWUFORyBmaXRzIGFzIGEgRE0gYW5kIGEgUE0uDQpSQU1MIGlzIGEgUE0gZm9yIFJFU1QuICh0 aG91Z2ggbWF5IG5vdCBiZSBpbnRlcmVzdGluZyBpbiB0ZXJtcyBvZiBjdXJyZW50IGRyYWZ0cyku DQpYTUwgaXMgYW4gRU4gdGhhdCBjYW4gYmUgYWRkZWQuIChUaG91Z2ggaXQgbWF5IG5vdCBtYWtl IHNlbnNlIHRvIGFzc3VtZSBDRERMIGFzIGFuIFhNTCBlbmNvZGluZykuDQoNCu+7v09uIDExLzE0 LzE5LCA2OjEyIEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgU2Now7Zud8OkbGRlciwgSsO8cmdlbiIg PHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgSi5TY2hvZW53YWVsZGVyQGphY29i cy11bml2ZXJzaXR5LmRlPiB3cm90ZToNCg0KICAgIE9uIFdlZCwgTm92IDEzLCAyMDE5IGF0IDA5 OjQ5OjA1QU0gLTA4MDAsIExhdXJlbmNlIEx1bmRibGFkZSB3cm90ZToNCiAgICA+IA0KICAgID4g Q3VycmVudGx5IHRoZXJlIGFyZSB0d28gY2xhaW1zIGVuY29kaW5ncywgQ0JPUiBhbmQgSlNPTi4g VGhhbmtzIHRvIENEREwsIHdlIGdldCBmcm9tIGRhdGEgbW9kZWwgdG8gZW5jb2RpbmcgaW4gYSBs YXJnZWx5IG1lY2hhbmljYWwgd2F5IGFuZCB0aGVyZSBpcyBsaXR0bGUgdGV4dCBuZWVkZWQuDQog ICAgPiANCiAgICA+IA0KICAgID4gICAgICAgICAgICAgICAgIElNOiBUZXh0DQogICAgPiAgICAg ICAgICAgICAgICAgfA0KICAgID4gICAgICAgICAgICAgICAgICsNCiAgICA+ICAgICAgICAgICAg ICAgICB8DQogICAgPiAgICAgICAgICAgICAgICAgRE06IENEREwNCiAgICA+ICAgICAgICAgICAg ICAgICB8DQogICAgPiAgICAgICAgICAgICArLS0tKy0tKw0KICAgID4gICAgICAgICAgICAgfCAg ICAgIHwNCiAgICA+ICAgICAgICAgICAgQ0JPUiAgIEpTT04NCiAgICA+IA0KICAgID4gDQogICAg PiBJIHRoaW5rIHRoaXMgaXMgYSBnb29kLCBzaW1wbGUgYW5kIGVmZmVjdGl2ZSB3YXkgdG8gcHJv Y2VlZC4NCiAgICANCiAgICBUaGlzIGJhc2ljIG1vZGVsIHdvcmtzIGZvciBtZS4NCiAgICANCiAg ICAvanMNCiAgICANCiAgICAtLSANCiAgICBKdWVyZ2VuIFNjaG9lbndhZWxkZXIgICAgICAgICAg IEphY29icyBVbml2ZXJzaXR5IEJyZW1lbiBnR21iSA0KICAgIFBob25lOiArNDkgNDIxIDIwMCAz NTg3ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8IDI4NzU5IEJyZW1lbiB8IEdlcm1hbnkNCiAgICBG YXg6ICAgKzQ5IDQyMSAyMDAgMzEwMyAgICAgICAgIDxodHRwczovL3d3dy5qYWNvYnMtdW5pdmVy c2l0eS5kZS8+DQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICBSQVRTIG1haWxpbmcgbGlzdA0KICAgIFJBVFNAaWV0Zi5vcmcNCiAg ICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICANCg0K From nobody Thu Nov 14 12:00:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19DC9120932 for ; Thu, 14 Nov 2019 12:00:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I3Gvk7ti7kog for ; Thu, 14 Nov 2019 12:00:47 -0800 (PST) Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0013C12096F for ; Thu, 14 Nov 2019 12:00:46 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga103.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Nov 2019 12:00:46 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,305,1569308400"; d="scan'208";a="235806339" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by fmsmga002.fm.intel.com with ESMTP; 14 Nov 2019 12:00:45 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX110.amr.corp.intel.com ([169.254.10.52]) with mapi id 14.03.0439.000; Thu, 14 Nov 2019 12:00:45 -0800 From: "Smith, Ned" To: "Eric Voit (evoit)" , Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAJAygIAAL78AgAEETQCAAqU5AIABTv6AgAAP44CAABCHAP//vJUA Date: Thu, 14 Nov 2019 20:00:45 +0000 Message-ID: <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.107] Content-Type: text/plain; charset="utf-8" Content-ID: <0B545A5939EF9448942718258FD652B2@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 20:00:56 -0000 QEVyaWMgVm9pdCAoZXZvaXQpIElzIHRoaXMgc3VnZ2VzdGluZyB0aGF0IFJBVFMgYXJjaGl0ZWN0 dXJlIHNob3VsZCBkZWZpbmUgYSB0b2tlbi1saWtlIERNIHN0cnVjdHVyZSB0aGF0IGlzIGEgKnJl cXVlc3QqICJ0b2tlbiIgaGF2aW5nIG9ubHkgdGFncyBpZGVudGlmeWluZyBpbnRlcmVzdGluZyBj bGFpbXMgd2hpbGUgYSAqcmVzcG9uc2UqICJ0b2tlbiIgd291bGQgaGF2ZSBjbGFpbXMgd2l0aCBk YXRhIHZhbHVlcyBwb3B1bGF0ZWQ/DQoNCu+7v09uIDExLzE0LzE5LCA4OjAyIEFNLCAiRXJpYyBW b2l0IChldm9pdCkiIDxldm9pdEBjaXNjby5jb20+IHdyb3RlOg0KDQogICAgSGkgSsO8cmdlbiwN CiAgICBIaSBIZW5rLA0KICAgIA0KICAgIFdoYXQgcm91dGVycyBuZWVkIGlzIGV4YWN0bHkgd2hh dCB5b3Ugc2FpZC4gIA0KICAgICAtIGN1cnJlbnRseTogdGhlIHJldHJpZXZhbCBvZiBUUE0gb3Jp Z2luYXRlZC9zaWduZWQgcXVvdGVzLiAgIA0KICAgICAtIGluIHRoZSBmdXR1cmU6IHRoZSByZXRy aWV2YWwgRUFUIFRva2Vucw0KICAgIA0KICAgIEtub3dpbmcgd2hlbiB0byByZXRyaWV2ZSB0aGVz ZSBpdGVtcyBpcyBhIGZ1bmN0aW9uIG9mIHRoZSB2YWx1ZSBvZiBzcGVjaWZpYyBjbGFpbXMgaW5z aWRlIHRob3NlIHN0cnVjdHVyZXMuICBGb3IgZXhhbXBsZSwgSSBtaWdodCB3YW50IHRvIHVzZSBS RkMtODY0MSB0byBtYWtlIGEgWUFORyBTdWJzY3JpcHRpb24gdG8gYSByb3V0ZXIgc28gdGhhdCBJ IHdpbGwgYmUgcHVzaGVkIHRoZSBsYXRlc3QgVFBNIHF1b3RlIHdoZW4gYSBzcGVjaWZpYyBQQ1Ig Y2hhbmdlcy4gIEZvciB0aGlzIHRvIHdvcmsgaW4gdGhlIHJvdXRlciB3b3JsZCwgd2UgbXVzdCBo YXZlIHRoZSBzdHJ1Y3R1cmVzIG9mIFF1b3Rlcy9Ub2tlbnMgZXhwb3NlZCBieSBhIFlBTkcgbW9k ZWwuDQogICAgDQogICAgRXJpYw0KICAgIA0KICAgID4gSGkgSsO8cmdlbiwNCiAgICA+IA0KICAg ID4gSSB0aGluayB0aGlzIGlzIHZlcnkgdXNlZnVsIGlucHV0Lg0KICAgID4gDQogICAgPiBPbiB0 aGUgbGlzdCwgTGF1cmVuY2UgYW5kIEkgYWxyZWFkeSBzdGFydGVkIHRvIGRpc2N1c3MgQ2xhaW1z IGZvciAiWUFORw0KICAgID4gbW9kZWxlZCBkYXRhIiBhbmQgQ2xhaW1zIGZvciAiVFBNIG1vZGxl ZCBkYXRhIiAocmVmZXJyZWQgdG8gYXMgdHBtIHRva2Vucw0KICAgID4gcmVjZW50bHkpLg0KICAg ID4gDQogICAgPiBUaGUgcmVtYWluaW5nIHF1ZXN0aW9ucyBhcmUgYWJvdXQ6IFdoYXQgZG8geW91 IHRoaW5rIGlzIHRoZSB1cGNvbWluZy9UQkQNCiAgICA+IGltcGFjdCBvbiB0aGUgY3VycmVudCBZ QU5HIG1vZHVsZSBmb3IgY2hhbGxlbmdlLXJlc3BvbnNlIFJBVFM/DQogICAgPiANCiAgICA+IExl dmVyYWdpbmcgWUFORyBtb2RlbGVkIGRhdGEgY29tZXMgdXAgYWdhaW4gYW5kIGFnYWluLiBNYXli ZSB0aGVyZSBpcw0KICAgID4gZ29vZCBhcHByb2FjaCBoZXJlLg0KICAgID4gDQogICAgPiBUaGUg VFBNIEludGVyZmFjZSBiYXNlZCBZQU5HIE1vZHVsZSBkb2VzIG5vdCBzaW1wbHkgY29udmV5IG5h dGl2ZSBUUE0NCiAgICA+IHN0cnVjdHVyZSwgYnV0IGRlY29tcG9zZXMgdGhlbSBkb3duIHRoZSB2 YWx1ZXMgdGhhdCBhcmUgdXNlZnVsIGFuZA0KICAgID4gY29tbW9uIG9uIHRoZSBtYW5hZ2VtZW50 IHBsYW5lIGJlY2F1c2UgdGhlIGJ1aWxkaW5nIGJsb2NrcyB0aGVtc2VsdmVzDQogICAgPiBoYXZl IHdlbGwgZGVmaW5lZCBzZW1hbnRpY3MgKGFsd2F5cyBlbnN1cmluZyBjYW5vbmljYWwgcmUtY29t cG9zaXRpb24pLg0KICAgID4gDQogICAgPiBWaWVsZSBHcsO8w59lLA0KICAgID4gDQogICAgPiBI ZW5rDQogICAgPiANCiAgICA+IE9uIDE0LjExLjE5IDE1OjA2LCBTY2jDtm53w6RsZGVyLCBKw7xy Z2VuIHdyb3RlOg0KICAgID4gPiBPbiBXZWQsIE5vdiAxMywgMjAxOSBhdCAxMDowNzowMkFNIC0w ODAwLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6DQogICAgPiA+Pg0KICAgID4gPj4gSSBzZWUg RUFUIGFzIGFwcGxpY2FibGUgdG8gYWxsIHRoZXNlIHdvcmxkcywgd2hlcmUgdGhlIFlBTkcgbW9k dWxlIGlzIGp1c3QNCiAgICA+IGZvciB0aGUgc21hbGxpc2ggcm91dGVyIHdvcmxkLiBTbyBJIG1v c3RseSBhZ3JlZSB3aXRoIERhdmUgYWJvdXQgcHJvcG9ydGlvbnMsDQogICAgPiBob3dldmVyIHRo aXMgaXMgdGhlIElFVEYgd2hlcmUgWUFORyBtb2R1bGVzIGFyZSBjcmVhdGVkLiAgKE1heWJlIEkg c2hvdWxkDQogICAgPiBnbyBqb2luIHRoZSBXM0Mgd29ybGQgYW5kIHdvcmsgb24gYXR0ZXN0YXRp b25zIEFQSXMgZm9yIGJyb3dzZXJzIGFmdGVyIFJBVFMNCiAgICA+IGlzIGRvbmUpLg0KICAgID4g Pj4NCiAgICA+ID4NCiAgICA+ID4gSWYgRUFUIGlzIHRoZSBjb21tb24gZm9ybWF0IGZvciAidG9r ZW4iLCB0aGVuIGl0IGRvZXMgbm90IG1ha2Ugc2Vuc2UNCiAgICA+ID4gdG8gbWUgdG8gZGVmaW5l IGEgWUFORyB2ZXJzaW9uIG9mIGl0LiBJdCBtYXkgbWFrZSBzZW5zZSB0byBjYXJyeSBFQVQNCiAg ICA+ID4gdG9rZW4gb3ZlciBwcm90b2NvbHMgc3VjaCBhcyBORVRDT05GIG9yIFJFU1RDT05GIGFu ZCB0byBoYXZlIGEgWUFORw0KICAgID4gPiBtb2R1bGUgZGVmaW5pbmcgdGhpcyBtYXkgbWFrZSBz ZW5zZSBmb3IgdGhlIG5ldHdvcmtpbmcgZGV2aWNlIHdvcmxkLg0KICAgID4gPiBUaGlzIGlzIHRo ZW4gYSBkZWZpbml0aW9uIG9mIGFuIGludGVyYWN0aW9uIHByb3RvY29sLCBidXQgbm90IHRoZQ0K ICAgID4gPiB0b2tlbiBmb3JtYXQgaXRzZWxmLg0KICAgID4gPg0KICAgID4gPiBJZiBFQVQgaXMg dGhlIGNvbW1vbiBmb3JtYXQgZm9yICJ0b2tlbiIsIHRoZW4gaXQgbWF5IG1ha2Ugc2Vuc2UgdG8g YmUNCiAgICA+ID4gYWJsZSB0byBpbmNsdWRlICJjbGFpbXMiIHRoYXQgYXJlIFlBTkcgZGVmaW5l ZCBkYXRhLiBUaGF0IG1heSBiZSBhbg0KICAgID4gPiBleHRlbnNpb24gb2YgdGhlIGNvcmUgRUFU IGRlZmluaXRpb24gKGJ1dCBFQVQgd291bGQgaGF2ZSB0byBhbGxvdyBmb3INCiAgICA+ID4gc3Vj aCBhbiBleHRlbnNpb24gdG8gd29yaykuIFRoZXJlIGlzIGEgbG90IG9mIGZvcm1hbGx5IGRlZmlu ZWQgZGF0YSBpbg0KICAgID4gPiBZQU5HIG1vZHVsZXMgdGhhdCB3b3VsZCBiZSBjb252ZW5pZW50 IHRvIHJldXNlIGFzIGNsYWltcyBpbiBhDQogICAgPiA+IG5ldHdvcmtpbmcgd29ybGQuDQogICAg PiA+DQogICAgPiA+IC9qcw0KICAgID4gPg0KICAgID4gDQogICAgPiBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gUkFUUyBtYWlsaW5nIGxpc3QN CiAgICA+IFJBVFNAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmF0cw0KICAgIA0KDQo= From nobody Thu Nov 14 12:42:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56D29120072 for ; Thu, 14 Nov 2019 12:42:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=X7Q3QnhS; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=fyLIz1g2 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e9q40GJADAKg for ; Thu, 14 Nov 2019 12:42:48 -0800 (PST) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4645E1200A1 for ; Thu, 14 Nov 2019 12:42:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10195; q=dns/txt; s=iport; t=1573764166; x=1574973766; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=05kIcu2DKqkkReYhEqoAop1Tw3Soqip+6oz+CMpd4bc=; b=X7Q3QnhSHKDyvfKPbf/s+OfJsGuCFqHUYfxbYFdjkbHqJIXqjXowJcyV ZAzOGb4ZYUpqj9hnsvGyusO+1yil+Hw/ZaNb9I/cjUzytCTjhHPOc4gUG 0aN09U3/oUo2A2CY9OYR3Ckp02PL+9qCgcRCt/am6ZMQk3qXQG4lO+R96 I=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AuF5Ybxaw+X5LA9GelhAVH0P/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el20Q+bRp3VvvRDjeee87vtX2AN+96giDgDa9QNMn?= =?us-ascii?q?1NksAKh0olCc+BB1f8KavncSs7AOxJVURu+DewNk0GUMs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AOAABsu81d/5tdJa1mGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFrBAEBAQELAYFKUAVsKy0gBAsqCoQfg0YDinK?= =?us-ascii?q?CXpgAgS6BJANUAgcBAQEJAwEBGAsKAgEBhEACgiAkNQgOAgMLAQEEAQEBAgE?= =?us-ascii?q?FBG2FNwyFUQEBAQEDAQEQCwYdAQEsCwEPAgEGAhIGDAEdAgICJQsXDgIEAQ0?= =?us-ascii?q?FCAYUgwGBeU0DHw8BAgyWPJBjAoE4iGB1gTKCfgEBBYUaGIIQBwMGgTYBgVK?= =?us-ascii?q?KQhiBQD+BEUaCTD6CYgEBgWMVgnkygiyQEp0ibgqCKoNMgjSPZ5oEjkeaBAI?= =?us-ascii?q?EAgQFAg4BAQWBUwE3gVhwFTuCbFARFII3jmMMF4NQhRSFP3SBKI9JAYEOAQE?= X-IronPort-AV: E=Sophos;i="5.68,305,1569283200"; d="p7s'?scan'208";a="372916991" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 14 Nov 2019 20:42:44 +0000 Received: from XCH-RCD-010.cisco.com (xch-rcd-010.cisco.com [173.37.102.20]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id xAEKgi8r003870 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 14 Nov 2019 20:42:44 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-010.cisco.com (173.37.102.20) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 14 Nov 2019 14:42:44 -0600 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 14 Nov 2019 14:42:43 -0600 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 14 Nov 2019 14:42:43 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VsUpWk3ilzyjKDhMYnEITezQeaf8sVLVpSDfTZ0PaMUbeDmz/uuHc+f6yaslSCdp2cBWf5Lc19FryxCvWq1i47Rx1MEPNsS544RJ1lCLoqVda/QPI6S5APszG5RNd/wDTLdsL73JeixYyOBFpheLmmSix3FjOLRtRjSZ7+JMZrxGn2s337sUbKE3zQkGyPSfbB/YlRrahsHovlgA3RfGZMtVklcYbPFbjb0808qC+zgXMpE8Cozwo8k09bsDQ4pnqkqNFgdq7m2P5TQDYGv4EQCNtKhYufWHMzuQVxU0pXbwiIwoSmv/ZCvAYUL9Se8Je/3aFBmI+EhxZcnmqbfvzA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sy5ynjqf1JtoZ9mPQlnNPp7AL1P0lYCusEnMzROnu9k=; b=aTCNpL5TbSWKN2U28BcV0tTOp7fKNFcTg2p/mkXXvWuYoOCpBsFlJ5pV8zAnFtHs6KKEcg8guofJf43YBq3l2qYxXg77xdDFZ+fm3hpIsmyQT8L6vSmoc7FCrcLvIo2sBHJACZzJo0bdN3u6ux8JIPesepOhAlAAq+VlOAgKgnGUtpv4foJa6vCnSJKUNriZQWBKO7OGPOdwMOd7l5P/z6/IaCWurjI8Ni32g0oS+ML8f0JeLM9KrDHsFRmTV2GZExNEVfiHq6M5zexG+tpLtqBxvJtsbTgK7dheHkVGEvRp698TNomw8xO1lq/yeMsl5CNhiN3Pl4s+FnzLhBJQLA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sy5ynjqf1JtoZ9mPQlnNPp7AL1P0lYCusEnMzROnu9k=; b=fyLIz1g2J64QAQeBvqCwwqIF/sm44XCZf6sMpYxhuI+yOeier50Dmi4XEoAfb9HGl1gvkfvinh72tcaJhjTT8mw8cQgq31FiwZfSbDSZ6LjADOScU1AJAtqVwF9OBWxUdz9qJGU7C6IyFt4T687RhbM6Zj+LhPEPz4XfDHuu26E= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB4297.namprd11.prod.outlook.com (52.132.248.93) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23; Thu, 14 Nov 2019 20:42:42 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2430.028; Thu, 14 Nov 2019 20:42:42 +0000 From: "Eric Voit (evoit)" To: "Smith, Ned" , Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmvyW8/lytau3hU+AhCwtIdg/0aeKzjHAgABIPICAAABN4A== Date: Thu, 14 Nov 2019 20:42:42 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> In-Reply-To: <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 8de0fc2d-ae6d-4734-5e8d-08d769433252 x-ms-traffictypediagnostic: DM6PR11MB4297: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2887; x-forefront-prvs: 02213C82F8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(39860400002)(396003)(136003)(376002)(346002)(199004)(189003)(6436002)(74316002)(4326008)(2906002)(478600001)(9686003)(3846002)(6116002)(6306002)(14454004)(966005)(6246003)(66574012)(86362001)(55016002)(66616009)(66946007)(316002)(229853002)(25786009)(66476007)(52536014)(110136005)(71200400001)(71190400001)(5660300002)(66446008)(64756008)(54906003)(11346002)(446003)(486006)(476003)(186003)(33656002)(99286004)(66556008)(7696005)(53546011)(6506007)(76176011)(102836004)(8936002)(8676002)(256004)(66066001)(14444005)(81156014)(81166006)(7736002)(305945005)(26005)(76116006); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB4297; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: /BjPLSQOU5DFHH/xSYiHDBUHaq0csvMyhBaEPUVeUMy1Su5wEw0F4OwSc78QKsFRshCWYd0tD8m4j/1r1e95lpxus3rDUh+x/SrgJq/CPEJsB9REwgyGIXsUN0nO5owrqD/HaxisfH+l8s3ZMPZibxuuDdkYDDRr2Q2Z3E36zTN02fkyxr4sfRxWeiQQXLfRudh3m6pLVk7iXUyGhrOFFSznUuD+fhgyKsLlFFgq/yfx9ckQT8ah58SX2ECNQs4u5BX01IEctFi8U0NVMlXg6298skauNBVpOWYwc1Dvavxx2RRkeIEzvWv6D6bYHgXSF8vregRRk4DQB9vN1ywDfx1jq7nYOd9o0Orwu10jN3DJfWbjZL1a2KXsHwXicyCus3RPhhp5e4zSN9ZfH3wiZv2tuppAwQIWt9aIeKR1ZDlcpMArctZqWH5hzTsqQqdl Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_00AE_01D59B01.FC692740" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 8de0fc2d-ae6d-4734-5e8d-08d769433252 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Nov 2019 20:42:42.3199 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: D/p0zjhqlWNAmSYtt6lNt3f8V/7++LpMHVKxoaTENeMkjSVc3u9UK0Ivy6V7qfVI X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB4297 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.20, xch-rcd-010.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Nov 2019 20:42:50 -0000 ------=_NextPart_000_00AE_01D59B01.FC692740 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable My belief is that a Relying Party will rarely want the full universe of = signed claims coming from some Attester's chip. We need ways to = pre-filter the results. How would we do this without a model? To fill this need, I always hoped that EAT claims could become leafs of = some future YANG data model. This would allow GET and SUBSCRIBE = requests to be made to an Attester. What would be returned to the = Relying Party would be the signed results of interest from some chip = within the Attester. =20 I have no position on whether the WG wants to integrate GET and = SUBSCRIBE requests so that they can provision claims are ultimately = placed within the EAT token. Eric > @Eric Voit (evoit) Is this suggesting that RATS architecture should = define a > token-like DM structure that is a *request* "token" having only tags > identifying interesting claims while a *response* "token" would have = claims > with data values populated? >=20 > =EF=BB=BFOn 11/14/19, 8:02 AM, "Eric Voit (evoit)" = wrote: >=20 > Hi J=C3=BCrgen, > Hi Henk, >=20 > What routers need is exactly what you said. > - currently: the retrieval of TPM originated/signed quotes. > - in the future: the retrieval EAT Tokens >=20 > Knowing when to retrieve these items is a function of the value of = specific > claims inside those structures. For example, I might want to use = RFC-8641 to > make a YANG Subscription to a router so that I will be pushed the = latest TPM > quote when a specific PCR changes. For this to work in the router = world, we > must have the structures of Quotes/Tokens exposed by a YANG model. >=20 > Eric >=20 > > Hi J=C3=BCrgen, > > > > I think this is very useful input. > > > > On the list, Laurence and I already started to discuss Claims = for "YANG > > modeled data" and Claims for "TPM modled data" (referred to as = tpm > tokens > > recently). > > > > The remaining questions are about: What do you think is the > upcoming/TBD > > impact on the current YANG module for challenge-response RATS? > > > > Leveraging YANG modeled data comes up again and again. Maybe = there > is > > good approach here. > > > > The TPM Interface based YANG Module does not simply convey = native > TPM > > structure, but decomposes them down the values that are useful = and > > common on the management plane because the building blocks > themselves > > have well defined semantics (always ensuring canonical = re-composition). > > > > Viele Gr=C3=BC=C3=9Fe, > > > > Henk > > > > On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: > > > On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade > wrote: > > >> > > >> I see EAT as applicable to all these worlds, where the YANG = module is > just > > for the smallish router world. So I mostly agree with Dave about > proportions, > > however this is the IETF where YANG modules are created. (Maybe = I > should > > go join the W3C world and work on attestations APIs for browsers = after > RATS > > is done). > > >> > > > > > > If EAT is the common format for "token", then it does not make = sense > > > to me to define a YANG version of it. It may make sense to = carry EAT > > > token over protocols such as NETCONF or RESTCONF and to have a > YANG > > > module defining this may make sense for the networking device = world. > > > This is then a definition of an interaction protocol, but not = the > > > token format itself. > > > > > > If EAT is the common format for "token", then it may make = sense to be > > > able to include "claims" that are YANG defined data. That may = be an > > > extension of the core EAT definition (but EAT would have to = allow for > > > such an extension to work). There is a lot of formally defined = data in > > > YANG modules that would be convenient to reuse as claims in a > > > networking world. > > > > > > /js > > > > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats >=20 ------=_NextPart_000_00AE_01D59B01.FC692740 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTE0MjA0MTMwWjAjBgkqhkiG 9w0BCQQxFgQUv3eGHAx71l/C/LWWi17lMx2tslswSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQA8sqhPVqW4F1clCnJ13aRi2mOJq3XxLCQ2zIpCiYoZ+/0NK/Y+88xeSKnHw0tGB++u tT9rLFKZgVIcsPY2HuRnWFoaVjb15TCiDU3asFY9D8DdIIUn3Mn3VsZFiB9+0vABBylQQIRlb+9+ Y0t7FA1wVXzJcAF40XAIg+ZYBStt9Z1lLXmLsunCITjzs6iqC2R6bojjR9iErkV+ZYqSVrkxH3+f eQftVc/uzSlpe7MOCqWXnbVK2+zA5IjaznY+2D9ezl2qAunC5i3Lma2ksaOpvnTflJ+kXFn69CzM ZTSxnmGBNr0SXG5U5l6CJuPZI4k6aPuvHnpYFuKQQ56L9mNkAAAAAAAA ------=_NextPart_000_00AE_01D59B01.FC692740-- From nobody Thu Nov 14 16:44:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CCC812007A for ; Thu, 14 Nov 2019 16:44:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2hRSXq662n10 for ; Thu, 14 Nov 2019 16:44:13 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B640120059 for ; Thu, 14 Nov 2019 16:44:13 -0800 (PST) Received: from lhreml706-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 539209BFF8AD6199C79C; Fri, 15 Nov 2019 00:44:09 +0000 (GMT) Received: from DGGEMM424-HUB.china.huawei.com (10.1.198.41) by lhreml706-cah.china.huawei.com (10.201.108.47) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 15 Nov 2019 00:44:08 +0000 Received: from DGGEMM531-MBS.china.huawei.com ([169.254.6.245]) by dggemm424-hub.china.huawei.com ([10.1.198.41]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 08:44:03 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+BqGAgAAHhQCAAAO1AIAGacyAgAAGuYCAAJAygIAAtdsAgAB+MgCAAqU4AIABTv6AgAE2YJA= Date: Fri, 15 Nov 2019 00:44:02 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> In-Reply-To: <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.45.30.144] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?utf-8?b?562U5aSNOiAgQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVy?= =?utf-8?q?_draft_rename=29_for_Yang_module_draft?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 00:44:15 -0000 SGkgYWxsLA0KSSB0b3RhbGx5IGFncmVlIHdpdGggSnVyZ2VuIHRoYXQgUkFUUyBmb3IgbmV0d29y ayBkZXZpY2VzIGlzIG5vdCBvbmx5IHRoZSB0b2tlbiBmb3JtYXQsIGJ1dCBhbHNvIGFuIGludGVy YWN0aW9uIHByb3RvY29sLiBTbyB0aGUgbmV0Y29uZiArIFlBTkcgcHJvdmlkZSBhIHZlcnkgZ29v ZCBzb2x1dGlvbiBzZXQuDQpPbmUgZXhhbXBsZSBpcyB0aGF0IHdlIG1heSBuZWVkIHRoZSB5YW5n IHB1Yi9zdWIgJiBwdXNoIG1lY2hhbmlzbSBmb3IgdGhlIHJlbW90ZSBhdHRlc3RhdGlvbiBmb3Ig c29tZSByZWFzb24uIElmIHlvdSBhcmUgaW50ZXJlc3RlZCwgd2UgaGF2ZSBhIG5ldyBpbmRpdmlk dWFsIGRyYWZ0IGFib3V0IGl0Og0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXhp YS1yYXRzLXB1YnN1Yi1tb2RlbC0wMQ0KDQpCLlIuDQpGcmFuaw0KDQotLS0tLemCruS7tuWOn+S7 ti0tLS0tDQrlj5Hku7bkuro6IFJBVFMgW21haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddIOS7 o+ihqCBTY2g/bnc/bGRlciwgSsO8cmdlbg0K5Y+R6YCB5pe26Ze0OiAyMDE55bm0MTHmnIgxNOaX pSAyMjowNg0K5pS25Lu25Lq6OiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0 LmNvbT4NCuaKhOmAgTogU21pdGgsIE5lZCA8bmVkLnNtaXRoQGludGVsLmNvbT47IEhlbmsgQmly a2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+OyBOYW5jeSBDYW0tV2luZ2V0 IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbT47IE9saXZlciwgSWFuIChOb2tpYSAtIEZJ L0VzcG9vKSA8aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPjsgRGF2ZSBUaGFsZXIgPGR0 aGFsZXJAbWljcm9zb2Z0LmNvbT47IHJhdHNAaWV0Zi5vcmcNCuS4u+mimDogUmU6IFtSYXRzXSBD YWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJh ZnQNCg0KT24gV2VkLCBOb3YgMTMsIDIwMTkgYXQgMTA6MDc6MDJBTSAtMDgwMCwgTGF1cmVuY2Ug THVuZGJsYWRlIHdyb3RlOg0KPiANCj4gSSBzZWUgRUFUIGFzIGFwcGxpY2FibGUgdG8gYWxsIHRo ZXNlIHdvcmxkcywgd2hlcmUgdGhlIFlBTkcgbW9kdWxlIGlzIGp1c3QgZm9yIHRoZSBzbWFsbGlz aCByb3V0ZXIgd29ybGQuIFNvIEkgbW9zdGx5IGFncmVlIHdpdGggRGF2ZSBhYm91dCBwcm9wb3J0 aW9ucywgaG93ZXZlciB0aGlzIGlzIHRoZSBJRVRGIHdoZXJlIFlBTkcgbW9kdWxlcyBhcmUgY3Jl YXRlZC4gIChNYXliZSBJIHNob3VsZCBnbyBqb2luIHRoZSBXM0Mgd29ybGQgYW5kIHdvcmsgb24g YXR0ZXN0YXRpb25zIEFQSXMgZm9yIGJyb3dzZXJzIGFmdGVyIFJBVFMgaXMgZG9uZSkuDQo+DQoN CklmIEVBVCBpcyB0aGUgY29tbW9uIGZvcm1hdCBmb3IgInRva2VuIiwgdGhlbiBpdCBkb2VzIG5v dCBtYWtlIHNlbnNlIHRvIG1lIHRvIGRlZmluZSBhIFlBTkcgdmVyc2lvbiBvZiBpdC4gSXQgbWF5 IG1ha2Ugc2Vuc2UgdG8gY2FycnkgRUFUIHRva2VuIG92ZXIgcHJvdG9jb2xzIHN1Y2ggYXMgTkVU Q09ORiBvciBSRVNUQ09ORiBhbmQgdG8gaGF2ZSBhIFlBTkcgbW9kdWxlIGRlZmluaW5nIHRoaXMg bWF5IG1ha2Ugc2Vuc2UgZm9yIHRoZSBuZXR3b3JraW5nIGRldmljZSB3b3JsZC4NClRoaXMgaXMg dGhlbiBhIGRlZmluaXRpb24gb2YgYW4gaW50ZXJhY3Rpb24gcHJvdG9jb2wsIGJ1dCBub3QgdGhl IHRva2VuIGZvcm1hdCBpdHNlbGYuDQoNCklmIEVBVCBpcyB0aGUgY29tbW9uIGZvcm1hdCBmb3Ig InRva2VuIiwgdGhlbiBpdCBtYXkgbWFrZSBzZW5zZSB0byBiZSBhYmxlIHRvIGluY2x1ZGUgImNs YWltcyIgdGhhdCBhcmUgWUFORyBkZWZpbmVkIGRhdGEuIFRoYXQgbWF5IGJlIGFuIGV4dGVuc2lv biBvZiB0aGUgY29yZSBFQVQgZGVmaW5pdGlvbiAoYnV0IEVBVCB3b3VsZCBoYXZlIHRvIGFsbG93 IGZvciBzdWNoIGFuIGV4dGVuc2lvbiB0byB3b3JrKS4gVGhlcmUgaXMgYSBsb3Qgb2YgZm9ybWFs bHkgZGVmaW5lZCBkYXRhIGluIFlBTkcgbW9kdWxlcyB0aGF0IHdvdWxkIGJlIGNvbnZlbmllbnQg dG8gcmV1c2UgYXMgY2xhaW1zIGluIGEgbmV0d29ya2luZyB3b3JsZC4NCg0KL2pzDQoNCi0tIA0K SnVlcmdlbiBTY2hvZW53YWVsZGVyICAgICAgICAgICBKYWNvYnMgVW5pdmVyc2l0eSBCcmVtZW4g Z0dtYkgNClBob25lOiArNDkgNDIxIDIwMCAzNTg3ICAgICAgICAgQ2FtcHVzIFJpbmcgMSB8IDI4 NzU5IEJyZW1lbiB8IEdlcm1hbnkNCkZheDogICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAgPGh0 dHBzOi8vd3d3LmphY29icy11bml2ZXJzaXR5LmRlLz4NCg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYu b3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCg== From nobody Thu Nov 14 16:48:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AC33120072 for ; Thu, 14 Nov 2019 16:48:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JJr5DKAeJWsn for ; Thu, 14 Nov 2019 16:48:51 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4B57120059 for ; Thu, 14 Nov 2019 16:48:50 -0800 (PST) Received: from lhreml702-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 29F0CB4DF98EF3C2A612; Fri, 15 Nov 2019 00:48:49 +0000 (GMT) Received: from DGGEMM402-HUB.china.huawei.com (10.3.20.210) by lhreml702-cah.china.huawei.com (10.201.108.43) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 15 Nov 2019 00:48:48 +0000 Received: from DGGEMM531-MBS.china.huawei.com ([169.254.6.245]) by DGGEMM402-HUB.china.huawei.com ([10.3.20.210]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 08:48:41 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "Eric Voit (evoit)" , Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+BqGAgAAHhQCAAAO1AIAGacyAgAAGuYCAAJAygIAAtdsAgAB+MgCAAqU4AIABTv6AgAAP5ICAABCHAIABGRQA Date: Fri, 15 Nov 2019 00:48:41 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.45.30.144] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?utf-8?b?562U5aSNOiAgQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVy?= =?utf-8?q?_draft_rename=29_for_Yang_module_draft?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 00:48:55 -0000 SGkgRXJpYywNCllvdSBhcmUgZXhhY3RseSBleHByZXNzaW5nIG15IG1pbmQgaGVyZX5+DQoNCkIu Ui4NCkZyYW5rDQoNCi0tLS0t6YKu5Lu25Y6f5Lu2LS0tLS0NCuWPkeS7tuS6ujogUkFUUyBbbWFp bHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZ10g5Luj6KGoIEVyaWMgVm9pdCAoZXZvaXQpDQrlj5Hp gIHml7bpl7Q6IDIwMTnlubQxMeaciDE15pelIDA6MDINCuaUtuS7tuS6ujogSGVuayBCaXJraG9s eiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT47IFNjaMO2bnfDpGxkZXIsIErDvHJn ZW4gPEouU2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZT47IExhdXJlbmNlIEx1bmRi bGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0K5oqE6YCBOiBOYW5jeSBDYW0tV2luZ2V0IChu Y2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbT47IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0Vz cG9vKSA8aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPjsgU21pdGgsIE5lZCA8bmVkLnNt aXRoQGludGVsLmNvbT47IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+OyByYXRz QGlldGYub3JnDQrkuLvpopg6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRy YWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCkhpIErDvHJnZW4sDQpIaSBIZW5r LA0KDQpXaGF0IHJvdXRlcnMgbmVlZCBpcyBleGFjdGx5IHdoYXQgeW91IHNhaWQuICANCiAtIGN1 cnJlbnRseTogdGhlIHJldHJpZXZhbCBvZiBUUE0gb3JpZ2luYXRlZC9zaWduZWQgcXVvdGVzLiAg IA0KIC0gaW4gdGhlIGZ1dHVyZTogdGhlIHJldHJpZXZhbCBFQVQgVG9rZW5zDQoNCktub3dpbmcg d2hlbiB0byByZXRyaWV2ZSB0aGVzZSBpdGVtcyBpcyBhIGZ1bmN0aW9uIG9mIHRoZSB2YWx1ZSBv ZiBzcGVjaWZpYyBjbGFpbXMgaW5zaWRlIHRob3NlIHN0cnVjdHVyZXMuICBGb3IgZXhhbXBsZSwg SSBtaWdodCB3YW50IHRvIHVzZSBSRkMtODY0MSB0byBtYWtlIGEgWUFORyBTdWJzY3JpcHRpb24g dG8gYSByb3V0ZXIgc28gdGhhdCBJIHdpbGwgYmUgcHVzaGVkIHRoZSBsYXRlc3QgVFBNIHF1b3Rl IHdoZW4gYSBzcGVjaWZpYyBQQ1IgY2hhbmdlcy4gIEZvciB0aGlzIHRvIHdvcmsgaW4gdGhlIHJv dXRlciB3b3JsZCwgd2UgbXVzdCBoYXZlIHRoZSBzdHJ1Y3R1cmVzIG9mIFF1b3Rlcy9Ub2tlbnMg ZXhwb3NlZCBieSBhIFlBTkcgbW9kZWwuDQoNCkVyaWMNCg0KPiBIaSBKw7xyZ2VuLA0KPiANCj4g SSB0aGluayB0aGlzIGlzIHZlcnkgdXNlZnVsIGlucHV0Lg0KPiANCj4gT24gdGhlIGxpc3QsIExh dXJlbmNlIGFuZCBJIGFscmVhZHkgc3RhcnRlZCB0byBkaXNjdXNzIENsYWltcyBmb3IgDQo+ICJZ QU5HIG1vZGVsZWQgZGF0YSIgYW5kIENsYWltcyBmb3IgIlRQTSBtb2RsZWQgZGF0YSIgKHJlZmVy cmVkIHRvIGFzIA0KPiB0cG0gdG9rZW5zIHJlY2VudGx5KS4NCj4gDQo+IFRoZSByZW1haW5pbmcg cXVlc3Rpb25zIGFyZSBhYm91dDogV2hhdCBkbyB5b3UgdGhpbmsgaXMgdGhlIA0KPiB1cGNvbWlu Zy9UQkQgaW1wYWN0IG9uIHRoZSBjdXJyZW50IFlBTkcgbW9kdWxlIGZvciBjaGFsbGVuZ2UtcmVz cG9uc2UgUkFUUz8NCj4gDQo+IExldmVyYWdpbmcgWUFORyBtb2RlbGVkIGRhdGEgY29tZXMgdXAg YWdhaW4gYW5kIGFnYWluLiBNYXliZSB0aGVyZSBpcyANCj4gZ29vZCBhcHByb2FjaCBoZXJlLg0K PiANCj4gVGhlIFRQTSBJbnRlcmZhY2UgYmFzZWQgWUFORyBNb2R1bGUgZG9lcyBub3Qgc2ltcGx5 IGNvbnZleSBuYXRpdmUgVFBNIA0KPiBzdHJ1Y3R1cmUsIGJ1dCBkZWNvbXBvc2VzIHRoZW0gZG93 biB0aGUgdmFsdWVzIHRoYXQgYXJlIHVzZWZ1bCBhbmQgDQo+IGNvbW1vbiBvbiB0aGUgbWFuYWdl bWVudCBwbGFuZSBiZWNhdXNlIHRoZSBidWlsZGluZyBibG9ja3MgdGhlbXNlbHZlcyANCj4gaGF2 ZSB3ZWxsIGRlZmluZWQgc2VtYW50aWNzIChhbHdheXMgZW5zdXJpbmcgY2Fub25pY2FsIHJlLWNv bXBvc2l0aW9uKS4NCj4gDQo+IFZpZWxlIEdyw7zDn2UsDQo+IA0KPiBIZW5rDQo+IA0KPiBPbiAx NC4xMS4xOSAxNTowNiwgU2Now7Zud8OkbGRlciwgSsO8cmdlbiB3cm90ZToNCj4gPiBPbiBXZWQs IE5vdiAxMywgMjAxOSBhdCAxMDowNzowMkFNIC0wODAwLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3Jv dGU6DQo+ID4+DQo+ID4+IEkgc2VlIEVBVCBhcyBhcHBsaWNhYmxlIHRvIGFsbCB0aGVzZSB3b3Js ZHMsIHdoZXJlIHRoZSBZQU5HIG1vZHVsZSANCj4gPj4gaXMganVzdA0KPiBmb3IgdGhlIHNtYWxs aXNoIHJvdXRlciB3b3JsZC4gU28gSSBtb3N0bHkgYWdyZWUgd2l0aCBEYXZlIGFib3V0IA0KPiBw cm9wb3J0aW9ucywgaG93ZXZlciB0aGlzIGlzIHRoZSBJRVRGIHdoZXJlIFlBTkcgbW9kdWxlcyBh cmUgY3JlYXRlZC4gIA0KPiAoTWF5YmUgSSBzaG91bGQgZ28gam9pbiB0aGUgVzNDIHdvcmxkIGFu ZCB3b3JrIG9uIGF0dGVzdGF0aW9ucyBBUElzIA0KPiBmb3IgYnJvd3NlcnMgYWZ0ZXIgUkFUUyBp cyBkb25lKS4NCj4gPj4NCj4gPg0KPiA+IElmIEVBVCBpcyB0aGUgY29tbW9uIGZvcm1hdCBmb3Ig InRva2VuIiwgdGhlbiBpdCBkb2VzIG5vdCBtYWtlIHNlbnNlIA0KPiA+IHRvIG1lIHRvIGRlZmlu ZSBhIFlBTkcgdmVyc2lvbiBvZiBpdC4gSXQgbWF5IG1ha2Ugc2Vuc2UgdG8gY2FycnkgRUFUIA0K PiA+IHRva2VuIG92ZXIgcHJvdG9jb2xzIHN1Y2ggYXMgTkVUQ09ORiBvciBSRVNUQ09ORiBhbmQg dG8gaGF2ZSBhIFlBTkcgDQo+ID4gbW9kdWxlIGRlZmluaW5nIHRoaXMgbWF5IG1ha2Ugc2Vuc2Ug Zm9yIHRoZSBuZXR3b3JraW5nIGRldmljZSB3b3JsZC4NCj4gPiBUaGlzIGlzIHRoZW4gYSBkZWZp bml0aW9uIG9mIGFuIGludGVyYWN0aW9uIHByb3RvY29sLCBidXQgbm90IHRoZSANCj4gPiB0b2tl biBmb3JtYXQgaXRzZWxmLg0KPiA+DQo+ID4gSWYgRUFUIGlzIHRoZSBjb21tb24gZm9ybWF0IGZv ciAidG9rZW4iLCB0aGVuIGl0IG1heSBtYWtlIHNlbnNlIHRvIA0KPiA+IGJlIGFibGUgdG8gaW5j bHVkZSAiY2xhaW1zIiB0aGF0IGFyZSBZQU5HIGRlZmluZWQgZGF0YS4gVGhhdCBtYXkgYmUgDQo+ ID4gYW4gZXh0ZW5zaW9uIG9mIHRoZSBjb3JlIEVBVCBkZWZpbml0aW9uIChidXQgRUFUIHdvdWxk IGhhdmUgdG8gYWxsb3cgDQo+ID4gZm9yIHN1Y2ggYW4gZXh0ZW5zaW9uIHRvIHdvcmspLiBUaGVy ZSBpcyBhIGxvdCBvZiBmb3JtYWxseSBkZWZpbmVkIA0KPiA+IGRhdGEgaW4gWUFORyBtb2R1bGVz IHRoYXQgd291bGQgYmUgY29udmVuaWVudCB0byByZXVzZSBhcyBjbGFpbXMgaW4gDQo+ID4gYSBu ZXR3b3JraW5nIHdvcmxkLg0KPiA+DQo+ID4gL2pzDQo+ID4NCj4gDQo+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFJBVFMgbWFpbGluZyBsaXN0DQo+ IFJBVFNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9y YXRzDQo= From nobody Thu Nov 14 23:38:46 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6892120113 for ; Thu, 14 Nov 2019 23:38:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqG61SPaiU5n for ; Thu, 14 Nov 2019 23:38:35 -0800 (PST) Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-eopbgr690109.outbound.protection.outlook.com [40.107.69.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 583CF120112 for ; Thu, 14 Nov 2019 23:38:34 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PxcYK5SaESi+MwTXAzfvF489zKBt0KA8Is3SKoc1mS/wbqF3Ustvf0iGhCot/51SFRBFmlgiZCKEn1TBJnov+1SqgbmwJRlGjyNGFVbnSInHl5gjm7l8wsfTfgJRZ+g3ht7Id4v9bpe24zDvLreR0R0OtGj3L2BX8Qut+zOZeTBoOrOLeSxPux8cdklvUgGXcPP/BuqkOz/BuyTYs0t/bQlNX/WUxK5W77q+6CK5sIca5BV446hUUEfkM9uLxNq4IHa9EYTBKa231GzhLArxHDpCWlLw8/ZTkHgV71e5PFNeZqgIUYI2XSCKRRmo/tBK6NmcFsiGQZ55Fl097OrDFw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a5gnuDjgwLVh8xFGYpf6Fk/xSTgXEhrCA889naqpoDk=; b=YwZoDbLCM3yHlzcPDfpSb8ENQeYKod1VVAFi7MqVUQGjtXLnF0YVRBAui6eWy4SH3vCm1fR1z8OdY0UNq04RQYoVhVIC5Rdf/yGLFNogUJ2Fx+6Q4Ey46PZoYjRJbMedgQIMJk6mdcBtLpn2wNjEG2IDo0zitGh8M29uFmVLGZrpVf3SkM7JUXxMPrA+2x4bjx4zw4182CY+vVtKeQtf+HhiLMAUPmoePVZLia2HvjENA6Rj0fZuskWUcgbURD8oqLybkvkIOWCxi7HsCf7yuoiPprSOCOQOweYMfMft2K5Q1nd3YGin3F9fmPZXziczX+g9CW3774VlsO7WC+6GHg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=a5gnuDjgwLVh8xFGYpf6Fk/xSTgXEhrCA889naqpoDk=; b=ioVMA3gwlB80bmINvL9Ssurxu/ROWs+Pf4DPdVAFG9GSm12oXEcUDKRAb0coWRlLYPVLzeRTEhtprqd6zsz19AKgV4dG7/jYPyvfX7h6KpPsC1KlpSBK7wWMbsc2Jz+olwwofq5SgFiCo4PWZVZ6kwY1UaPhaxvzJ2D6A1uqpCc= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0797.namprd21.prod.outlook.com (10.175.135.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Fri, 15 Nov 2019 07:38:32 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Fri, 15 Nov 2019 07:38:32 +0000 From: Dave Thaler To: Laurence Lundblade CC: "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQ Date: Fri, 15 Nov 2019 07:38:32 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> In-Reply-To: <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-14T20:24:13.3496979Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=096a2af9-9408-49d1-8867-8c9a9004dfea; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [116.84.110.153] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 0f880aed-91a1-4b39-1e9d-08d7699ed107 x-ms-traffictypediagnostic: MWHPR21MB0797: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 02229A4115 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(376002)(366004)(396003)(346002)(199004)(189003)(15404003)(52536014)(11346002)(7736002)(446003)(478600001)(33656002)(66946007)(66574012)(14454004)(10090500001)(8990500004)(486006)(6436002)(81166006)(8936002)(229853002)(81156014)(5660300002)(74316002)(6916009)(476003)(8676002)(6506007)(54906003)(64756008)(66556008)(10290500003)(316002)(790700001)(6116002)(86362001)(3846002)(25786009)(66066001)(6246003)(22452003)(236005)(102836004)(14444005)(7696005)(99286004)(76116006)(4326008)(66476007)(256004)(76176011)(9686003)(6306002)(2906002)(26005)(54896002)(55016002)(186003)(66446008)(71200400001)(71190400001)(53546011); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0797; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: eTxlywdGzdHTQyNe8yb5c7NhtMrdjFBQ64sPX/+BzSbvcEaA6uLz51Er2p5vDrJwh0LFpSSXR4F27HgEDUndEzbF5ycEuzT2/a+VUjtakN+DufgXSYZ6sv0Z0ypf488c0LMIApjOH8GZMK1yMqmPt2eqfu2EQKYxO13iMR7tOOXIR7hPz5xlg5nVXTxz8bPWOl2TlTqXjI5zjO3TGWQRKDYZiFrneTWccAvyxg2zaeElG1zdoWNI4L27v0vqdZToOqasLMGJL0/uKwgE1uRN+pFJSSthwX4ANxABiWF4NFPdbc/3hK5Z+gjaU+lJPFrlKlc0z2+PtSGoB2ZPjZLk2QsK2wx1u26vcSisaks4L+bvPUY4GAWDLIchCL2psHN/6V/kwjlU8nIz3QcbeCmV4ihm9BQgP5cHuOLQ9jaqrYF3tP4pJi4WKTwnzjy28OXt x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB07840B6CF7BEE0A11ABE54BFA3700MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0f880aed-91a1-4b39-1e9d-08d7699ed107 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2019 07:38:32.8038 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: CHNpI0CwAFIRQbuEMVV6+z851ORbzout/eQ6j7Sd9BQy7uUZFwENH9NeomFIeoMEor8Cn1DEs4hXwOuGXEoKA6vXfZbY/DyiLlwt/eg267o= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0797 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 07:38:41 -0000 --_000_MWHPR21MB07840B6CF7BEE0A11ABE54BFA3700MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TmV0Y29uZiBpcyBub3QgdGhlIG9ubHkgcHJvdG9jb2wgc3VwcG9ydGVkIGJ5IHJvdXRlcnMuDQpS b3V0ZXJzIGFsc28gc3VwcG9ydCBJUHY0LCBJUHY2LCBsaW5rLWxheWVyIHByb3RvY29scyBzdWNo IGFzIEV0aGVybmV0LCByb3V0aW5nIHByb3RvY29scywgb2Z0ZW4gdGhpbmdzIGxpa2UgREhDUCBy ZWxheSwgUkFESVVTLCBldGMuDQoNCkkgaGF2ZSBub3QgeWV0IHNlZW4gYSBjb21wZWxsaW5nIHJl YXNvbiB0byB1c2UgYSBwdWxsLWJhc2VkIG1lY2hhbmlzbSBpbnN0ZWFkIG9mIGEgcHVzaC1iYXNl ZCBtZWNoYW5pc20gdmlhIGFub3RoZXIgcHJvdG9jb2wgdGhlIHJvdXRlcnMgYWxyZWFkeSBzdXBw b3J0Lg0KVGhlIG9ubHkgcmVhc29uIEnigJl2ZSBoZWFyZCBzbyBmYXIgaXMg4oCcYmVjYXVzZSB0 aGV5IHN1cHBvcnQgbmV0Y29uZiBhbmQgd2XigJlyZSB1c2VkIHRvIGl04oCdLCB0byB3aGljaCB0 aGUgY291bnRlciBhcmd1bWVudCBpcyBhcyBhYm92ZToNCnRoZXkgc3VwcG9ydCBvdGhlciB0aGlu Z3MgdG9vIGFuZCB3ZeKAmXJlIHVzZWQgdG8gdGhlbSB0b28uDQoNCkluIG9yZGVyIHRvIGtub3cg d2hvIHRvIHB1bGwgZGF0YSBmcm9tLCB0aGUgVmVyaWZpZXIgaGFzIHRvIGhhdmUgc29tZSBpbmRp Y2F0aW9uIGZyb20gdGhlIEF0dGVzdGVyIHRoYXQgdHJpZ2dlcnMgdGhlIGF0dGVzdGF0aW9uIHJl cXVlc3QNCmluZGljYXRlZCBhcyBTdGVwIDEgaW4gZHJhZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3Jr LWRldmljZS1hdHRlc3RhdGlvbi4gIFNvIGluIHJlYWxpdHksIHRoZXJlIGhhcyB0byBiZSBhIHN0 ZXAgYmVmb3JlIHN0ZXAgMSwNCndoZXJlYnkgdGhlIEF0dGVzdGVyIGRvZXMgc29tZXRoaW5nIHRo YXQgbWFrZXMgdGhlIEF0dGVzdGVyIGRpc2NvdmVyYWJsZSBieSB0aGUgVmVyaWZpZXIuICAgVGhh dCBzdGVwIGNvdWxkIGhhdmUgaW5jbHVkZWQgdGhlIEVBVCBvciB0aGUgVFBNIGRhdGENCmV4cHJl c3NlZCBpbiB0aGUgWUFORyBkcmFmdCwgb3Igd2hhdGV2ZXIgZWxzZSwgYW5kIHRoZW4geW914oCZ dmUgYXZvaWRlZCB0aGUgbmVlZCBmb3IgbmV0Y29uZiwgYW5kIHJlZHVjZWQgdGhlIG51bWJlciBv ZiByb3VuZCB0cmlwcywNCmltcHJvdmluZyBsYXRlbmN5IGFuZCBiYW5kd2lkdGguDQoNCklmIHRo ZXJlIGlzIGEgY29tcGVsbGluZyByZWFzb24gdG8gc3VwcG9ydCBhIHB1bGwtYmFzZWQgbWVjaGFu aXNtLCBhbmQgd2UgZ2V0IGNvbnNlbnN1cyB0aGF0IHdlIG5lZWQgaXQsIHRoZW4gZ3JlYXQuDQpC dXQgc28gZmFyIEkgaGF2ZW7igJl0IGhlYXJkIG9uZS4NCg0KRGF2ZQ0KDQpGcm9tOiBMYXVyZW5j ZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClNlbnQ6IFdlZG5lc2RheSwgTm92 ZW1iZXIgMTMsIDIwMTkgMTA6MDcgQU0NClRvOiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3Nv ZnQuY29tPg0KQ2M6IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb20+OyBPbGl2ZXIsIElh biAoTm9raWEgLSBGSS9Fc3BvbykgPGlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbT47IE5h bmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPjsgcmF0c0BpZXRm Lm9yZzsgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4NClN1 YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkg Zm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCk15IHZlcnNpb24gb2YgdGVjaG5vbG9neSBiYXNlcyBm b3IgYXR0ZXN0YXRpb24gaXMgc29tZXRoaW5nIGxpa2UgdGhpczoNCg0KUm91dGVyL05ldGNvbmYg V29ybGQNCk1pbGxpb25zIG9mIGRldmljZXMuIEN1cnJlbnRseSBUUE0gb3JpZW50ZWQuIExvbmcg cG9zc2libGUgdHJhbnNpdGlvbiB0byBFQVQuIFlBTkcgdXNlZCB0byBjcmVhdGUgdmVyeSBzcGVj aWZpYyBmaW5lLWdyYWluZWQgaW50ZXJhY3Rpb25zLiBObyBwcml2YWN5IGlzc3Vlcy4NCg0KV2Vi IEJyb3dzZXIgV29ybGQNCkJpbGxpb25zIG9mIGRldmljZXMuIEN1cnJlbnQgYXR0ZXN0YXRpb24g dXNlIGlzIHByaW1hcmlseSBXZWJBdXRoTiAvIEZJRE8uIEpXVCBpcyB1c2VkIGhlYXZpbHkgZm9y IGF1dGhlbnRpY2F0aW9uIHNvIHdvdWxkIGJlIG1vcmUgRUFUIG9yaWVudGVkLCBidXQgVFBNIGF0 dGVzdGF0aW9uIGlzIHN1cHBvcnRlZCBpbiBGSURPLiBMYXJnZXIgdXNlIG9mIGF0dGVzdGF0aW9u IG1heSBldm9sdmUuIEZpbmUtZ3JhaW5lZCBpbnRlcmFjdGlvbnMgYXJlIHdpdGggV2ViQVBJcyAo SmF2YXNjcmlwdCkgKHNvcnQgb2YgcGFyYWxsZWwgdG8gWUFORyBmb3Igcm91dGVycykuIEJpZyBw cml2YWN5IGlzc3Vlcy4NCg0KTW9iaWxlIEFwcCBXb3JsZA0KQmlsbGlvbnMgb2YgZGV2aWNlcy4g TWFpbiBhdHRlc3RhdGlvbiB1c2UgaXMgQW5kcm9pZOKAmXMgS2V5c3RvcmUuIFRoaXMgaXMgRUFU LWxpa2UsIGJ1dCBiYXNlZCBvbiBYLjUwOS4gRmluZSBncmFpbmVkIGludGVyYWN0aW9ucyBhcmUg QW5kcm9pZCBBUElzLiBJIG1heSBiZSBvdXQgb2YgZGF0ZSwgYnV0IHNvIGZhciBJb1MgZG9lc27i gJl0IGRvIGF0dGVzdGF0aW9uLiBQcml2YWN5IGlzc3VlcyB2YXJ5IGJ5IGFwcC4NCg0KSW9UIFdv cmxkDQpCaWxsaW9ucyBvZiBkZXZpY2VzIG1vc3QgbGlrZWx5IGdvaW5nIHRvIHRyaWxsaW9ucy4g QXR0ZXN0YXRpb24gaXMgYSBjcml0aWNhbCBlbmFibGluZyBmZWF0dXJlIGluIHRoaXMgd29ybGQu IFRoZXJlIGFyZSBsb3RzIG9mIHByb3RvY29scyBhbmQgZm9ybWF0cyBpbnZvbHZlZC4gVFBNcyBh cmUgdG9vIGV4cGVuc2l2ZSBmb3IgbWFueSBvZiB0aGVzZSwgYnV0IGFyZSBwcm9iYWJseSBpbiB1 c2Ugc29tZXdoZXJlLiBObyBwcml2YWN5IGlzc3VlcyBmb3IgYSBsYXJnZSBwb3J0aW9uIG9mIHRo aXMgd29ybGQuDQoNClRoZSByb3V0ZXIgd29ybGQgaXMgdGhlIHNtYWxsZXN0LCBidXQgaXQgaXMg 4oCcd2VsbCByZXByZXNlbnRlZOKAnSBiZWNhdXNlIHRoaXMgaXMgdGhlIElFVEYuDQoNCkkgc2Vl IEVBVCBhcyBhcHBsaWNhYmxlIHRvIGFsbCB0aGVzZSB3b3JsZHMsIHdoZXJlIHRoZSBZQU5HIG1v ZHVsZSBpcyBqdXN0IGZvciB0aGUgc21hbGxpc2ggcm91dGVyIHdvcmxkLiBTbyBJIG1vc3RseSBh Z3JlZSB3aXRoIERhdmUgYWJvdXQgcHJvcG9ydGlvbnMsIGhvd2V2ZXIgdGhpcyBpcyB0aGUgSUVU RiB3aGVyZSBZQU5HIG1vZHVsZXMgYXJlIGNyZWF0ZWQuICAoTWF5YmUgSSBzaG91bGQgZ28gam9p biB0aGUgVzNDIHdvcmxkIGFuZCB3b3JrIG9uIGF0dGVzdGF0aW9ucyBBUElzIGZvciBicm93c2Vy cyBhZnRlciBSQVRTIGlzIGRvbmUpLg0KDQpMTA0KDQoNCg0KT24gTm92IDExLCAyMDE5LCBhdCA1 OjQzIFBNLCBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVy QG1pY3Jvc29mdC5jb20+PiB3cm90ZToNCg0KQXMgZmFyIGFzIEkgY2FuIHVuZGVyc3RhbmQgZnJv bSBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9kdWxlLTAxIGFuZA0KZHJhZnQtZmVk b3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi0wMSwgdGhleSBicmVhayBkb3du IHRoZSB1c2UgY2FzZQ0Kc3BhY2UgYXMgZm9sbG93czoNCg0KICAgICAgICAgICAgICAgICAgICAg ICAgUmVxdWlyZW1lbnRzPw0KICAgICAgICAgKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0t LSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgfCAgUm9UICAgICAgICAgfCBI b3N0IEZpcmV3YWxsIHwgUHJpdmFjeSB8fCAgIFNvbHV0aW9uDQogICAgICAgICB8ICBUeXBlICAg ICAgICB8ICAgRW5hYmxlZCAgICAgfCBOZWVkZWQgIHx8ICAgIFBpZWNlcw0KICAgICAgICAgKy0t LS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0K ICAgICAgMSAgfCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAg ICAgMiAgfCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAg MyAgfCAgU0dYICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNCAg fCAgU0dYICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNSAgfCAg VHJ1c3Rab25lICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNiAgfCAgVHJ1 c3Rab25lICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNyAgfCAgVHJ1c3Ra b25lICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgOCAgfCAgVHJ1c3Rab25l ICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgOSAgfCAgVFBNICAgICAgICAg fCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlh bmctbW9kdWxlLTAxDQogICAgIDEwICB8ICBUUE0gICAgICAgICB8IE5vICAgICAgICAgICAgfCBZ ZXMgICAgIHx8DQogICAgIDExICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBObyAg ICAgIHx8DQogICAgIDEyICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAg IHx8DQogICAgIDEzICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8 DQogICAgIDE0ICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQog ICAgIDE1ICB8U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAg IDE2ICB8U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE3 ICB8IEZpcm13YXJlICAgICB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE4ICB8 IEZpcm13YXJlICAgICB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE5ICB8IEZp cm13YXJlICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDIwICB8IEZpcm13 YXJlICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIC4uLiB8ICAgLi4uICAg ICAgICB8ICAgICAgICAgICAgICAgfCAgICAgICAgIHx8DQoNCkFuZCBkcmFmdC1mZWRvcmtvdy1y YXRzLW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxIGZ1cnRoZXIgc2NvcGVzIGl0c2VsZiBk b3duDQpieSBvbmx5IGJlaW5nIGFwcGxpY2FibGUgdG8gY2FzZXMgd2l0aCAiZW1iZWRkZWQiIGFw cHMgb25seSA9IFllcywgYW5kIHdoZXJlDQp0aGUgc2VjdXJpdHkgcG9saWN5IGlzIG9ubHkgYW4g RXhhY3QgbWF0Y2ggYWdhaW5zdCByZWZlcmVuY2UgdmFsdWVzID0gWWVzLg0KSSBiZWxpZXZlIHRo YXQgdGhlIHlhbmcgZHJhZnQgZG9lc24ndCBoYXZlIHRob3NlIHR3byByZXN0cmljdGlvbnMsIGZy b20gbXkgcmVhZGluZy4NCkhvd2V2ZXIsIHRoZSBwb2ludCBpcyB0aGF0IGJvdGggZHJhZnRzIGFy ZSBWRVJZIG5hcnJvdywgYW5kIGluIHRoZSB0YWJsZSBzaG93biBhYm92ZSwNCm9ubHkgYWRkcmVz cyAxIG91dCBvZiAyMCBwb3NzaWJpbGllcyBpbiB0aGF0IHNwYWNlLg0KDQpJbiBjb250cmFzdCwg dGhlIFRFRVAgV0cgZGVjaWRlZCB0aGF0IGl0IHdhcyBub3QgaW50ZXJlc3RlZCBpbiBuYXJyb3cg c2NvcGluZ3MNCihzcGVjaWZpY2FsbHkgc29tZXRoaW5nIEdsb2JhbCBQbGF0Zm9ybSBzcGVjaWZp YyksIGJ1dCBpbnN0ZWFkIHdhbnRlZCBvbmUgZ2VuZXJhbCBzb2x1dGlvbi4NCg0KSWYgdGhlIFJB VFMgV0cgc3BlbmRzIGVmZm9ydCBvbiBzb21ldGhpbmcgdGhhdCBvbmx5IGFkZHJlc3NlcyBhIHNp bmdsZSByb3cgb3V0IG9mIDIwKyByb3dzLA0KdGhlbiBkbyB3ZSBleHBlY3QgMTkrIG90aGVyIHNv bHV0aW9ucyB0byBhbHNvIGJlIGRvbmUgaW4gdGhlIFdHPyAgT3IgY291bGQgd2Ugd29yayBvbiB0 aGluZ3MNCnRoYXQgYXJlIGJyb2FkZXIgYW5kIGhhcHBlbiB0byBhbHNvIHdvcmsgZm9yIHJvdyA5 Pw0KDQpJJ3ZlIHNlZW4gb3RoZXJzIGNvbW1lbnRpbmcgb24gdGhlIGZhY3QgdGhhdCB0aGUgWUFO RyBtb2R1bGUgb25seSBzdXBwb3J0cyBUUE1zIGFuZCBub3QNCm90aGVyIHRoaW5ncyAoRUFUcyBl dGMpLCB3aGljaCB3b3VsZCBqdXN0IGFkZCBzdXBwb3J0IGZvciBhIGNvdXBsZSBtb3JlIHJvd3Ms IGJ1dCBzdGlsbCBub3QNCmJlIGdlbmVyYWwuDQoNClBlcnNvbmFsbHksIEkgd291bGQgbXVjaCBy YXRoZXIgc2VlIHRoZSBXRyBzcGVuZCBlZmZvcnQgb24gdGhpbmdzIHRoYXQgcmVhbGx5IGFyZSBn ZW5lcmljLA0KaS5lLiwgd29yayB3aXRoIG9yIHdpdGhvdXQgaG9zdCBmaXJld2FsbHMsIHdvcmsg d2l0aCBtdWx0aXBsZSBSb1QvVEVFIHR5cGVzLCBldGMuLCByYXRoZXINCnRoYW4gc2VlaW5nIGFu IGV4cGxvc2lvbiBvZiBwb2ludCBzb2x1dGlvbnMuDQoNCkRhdmUNCg0KRnJvbTogUkFUUyA8cmF0 cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhh bGYgT2YgU21pdGgsIE5lZA0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAxOSAxMDoxMiBB TQ0KVG86IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSA8aWFuLm9saXZlckBub2tpYS1i ZWxsLWxhYnMuY29tPG1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+PjsgTGF1 cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQt cmVzb3J0LmNvbT4+OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2Nv LmNvbTxtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tPj4NCkNjOiByYXRzQGlldGYub3JnPG1haWx0 bzpyYXRzQGlldGYub3JnPjsgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5o b2Zlci5kZTxtYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4+DQpTdWJqZWN0 OiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZ YW5nIG1vZHVsZSBkcmFmdA0KDQpSaWdodC4gVGhpcyBpbXBsaWVzIHRoZSBSQVRTIOKAnHRva2Vu 4oCdIHNob3VsZCBzdXBwb3J0IGV4aXN0aW5nIOKAnGJpbmFyeeKAnSBmb3JtYXRzIGFzIGFuIGVu Y2Fwc3VsYXRpb24gKHNpZ25lZCBieSBhIHNlY29uZCBUQSB3aGVyZSB0aGUgVFBNIGlzIGEgZmly c3QgVEEpIG9yIGFzIGEgY29udmV5YW5jZSAodW5zaWduZWQ/KSB0b2tlbi4gUG9zc2libHksIHRo ZSBvbmx5IGFkZGVkIHZhbHVlIG9mIHRoZSBsYXR0ZXIgaXMgYSB0YWcgdGhhdCBpZGVudGlmaWVz IGl0IGFzIGEgVFBNIGJpbmFyeSBmb3JtYXQ/DQoNCg0KT24gMTEvMTAvMTksIDIzOjIxIFBNLCAi UkFUUyBvbiBiZWhhbGYgb2YgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pIiA8cmF0cy1i b3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBv ZiBpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208bWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEt YmVsbC1sYWJzLmNvbT4+IHdyb3RlOg0KDQo+IFJlbW90ZSBUUE0gYXR0ZXN0YXRpb25zIGFyZSB1 c2VmdWwgYW5kIG5lY2Vzc2FyeSB0aGUgc2hvcnQgcnVuLCBidXQgYXJlIG9mIHZlcnkgbGltaXRl ZCBjYXBhYmlsaXR5LiBJIGJlbGlldmUgdGhhdCA+IEVBVCB3aWxsIHJlcGxhY2UgVFBNIGF0dGVz dGF0aW9ucyBpbiB0aGUgbG9uZyBydW4gKG1heWJlIGRlY2FkZXMpIGJlY2F1c2UgdGhleSBhcmUg ZmFyIG1vcmUgZXhwcmVzc2l2ZS4gSSBrbm93ID4gb3RoZXJzIGJlbGlldmUgdGhhdCB0b28uDQoN Ckkgd291bGQgZGlzYWdyZWUgd2l0aCB0aGUgc3RhdGVtZW50IG9mICJzaG9ydCBydW4iIC4uLiBU UE0gaXMgcHJhY3RpY2FsbHkgdGhlIG9ubHkgZXhpc3Rpbmcgc3RhbmRhcmRpc2VkIChoYXJkd2Fy ZSwgc29mdHdhcmUsIGZpcm13YXJlLCBtZWFzdXJlbWVudCAtIHg4NiBvbmx5IGV0YykgaGFyZHdh cmUgcm9vdCBvZiB0cnVzdCBpbiBjb21tb24gdXNlLCBpZTogcHJhY3RpY2FsbHkgYWxsIHg4NiBt YWNoaW5lcywgIFRoZSBhdHRlc3RhdGlvbiBtZWNoYW5pc21zIHByb3ZpZGVkIGFyZSBnb2luZyB0 byBiZSBhcm91bmQgZm9yIGEgdmVyeSBsb25nIHRpbWUuDQoNCkZyb20gdGVsY28gZXhwZXJpZW5j ZSwgMzAgeWVhcnMgYWdvIHdlIHNhaWQgU1M3IHdvdWxkIG9ubHkgYmUgYXJvdW5kIGluIHRoZSBz aG9ydCB0ZXJtLg0KDQo+IFRodXMsIEkgYW0gb3Bwb3NlZCB0byBhZG9wdGlvbiB3aXRoIHRoZSBj dXJyZW50IFRQTS1vbmx5IGRyYWZ0LiBJ4oCZZCBiZSBPSyB3aXRoIHRoZSBjdXJyZW50IGRyYWZ0 IGFuZCBhIHByb21pc2UgPiB0byBhZGQgRUFUIHRvIGl0Lg0KDQpBZ3JlZQ0KDQpJYW4NCg0KLS0N CkRyLiBJYW4gT2xpdmVyDQpDeWJlcnNlY3VyaXR5IFJlc2VhcmNoDQpEaXN0aW5ndWlzaGVkIE1l bWJlciBvZiBUZWNobmljYWwgU3RhZmYNCk5va2lhIEJlbGwgTGFicw0KKzM1OCA1MCA0ODMgNjIz Nw0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogTGF1cmVuY2UgTHVu ZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNv bT4+DQpTZW50OiAxMSBOb3ZlbWJlciAyMDE5IDAwOjQ0DQpUbzogTmFuY3kgQ2FtLVdpbmdldCAo bmNhbXdpbmcpIDxuY2Ftd2luZ0BjaXNjby5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4+ DQpDYzogSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZTxtYWls dG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4+OyByYXRzQGlldGYuLm9yZzxtYWls dG86cmF0c0BpZXRmLi5vcmc+IDxyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPj4N ClN1YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFt ZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCg0KT24gTm92IDEwLCAyMDE5LCBhdCAyOjIwIFBN LCBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbTxtYWlsdG86 bmNhbXdpbmdAY2lzY28uY29tPj4gd3JvdGU6DQoNClNvLCBMYXVyZW5jZSwgYXJlIHlvdSBzdGls bCBPSyB3aXRoIHRoZSBhZG9wdGlvbiBvZiB0aGUgY3VycmVudCBkcmFmdCB3aXRoIGEgcmVuYW1l IGZvciBub3c/DQpUaGFua3MsIE5hbmN5DQoNCkkgdGhpbmsgdGhlIHZhbHVlIGFkZCB0byB0aGUg bGFyZ2VyIFJBVFMgZWZmb3J0IG9mIGFkZGluZyBFQVQgc3VwcG9ydCB0byB0aGlzIFlBTkcgcHJv dG9jb2wgaXMgcmVhbGx5IGhpZ2guIEl0IGEgY29yZSB0aGluZyB0byBkbyB0aGF0IGhlbHBzIGJy aW5nIHRvZ2V0aGVyIHRoZSB0d28gYXR0ZXN0YXRpb24gd29ybGRzIGFuZCBtYWtlIHRoZSBUUE0g YW5kIEVBVCB3b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCg0KUmVtb3Rl IFRQTSBhdHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVjZXNzYXJ5IHRoZSBzaG9ydCBydW4s IGJ1dCBhcmUgb2YgdmVyeSBsaW1pdGVkIGNhcGFiaWxpdHkuIEkgYmVsaWV2ZSB0aGF0IEVBVCB3 aWxsIHJlcGxhY2UgVFBNIGF0dGVzdGF0aW9ucyBpbiB0aGUgbG9uZyBydW4gKG1heWJlIGRlY2Fk ZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVzc2l2ZS4gSSBrbm93IG90aGVycyBi ZWxpZXZlIHRoYXQgdG9vLg0KDQpJZiB3ZSBkb27igJl0IGluY2x1ZGUgRUFUIGluIHRoZSBZQU5H IG1vZGUgaXQgaXMgc29ydCBvZiBsaWtlIGRlZmluaW5nIEhUVFAgdG8gb25seSBjb252ZXkgSFRN TCB0byB0aGUgZXhjbHVzaW9uIG9mIFBERi4gV2XigJlyZSBkZWZpbmluZyBhbiBhdHRlc3RhdGlv biBwcm90b2NvbCB0aGF0IGNhbiBvbmx5IG1vdmUgb25lIGtpbmQgb2YgYXR0ZXN0YXRpb24gZXZl biB0aG91Z2ggd2UgaGF2ZSBjb25zZW5zdXMgb24gd2hhdCB0aGUgb3RoZXIgb25lIGxvb2tzIGxp a2UuDQoNCkl0IHNlZW1zIHJlbGF0aXZlbHkgc2ltcGxlIHRvIGFkZCBFQVQgc3VwcG9ydCAob3Ig cHJvbWlzZSB0byBhZGQgRUFUIHN1cHBvcnQpLiBQcmV0dHkgc3VyZSBJIGhlYXJkIEhlbmsgYWdy ZWUgdG8gYWRkIGl0Lg0KDQpUaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUg Y3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFm dCBhbmQgYSBwcm9taXNlIHRvIGFkZCBFQVQgdG8gaXQuDQoNCkxMDQoNCg0K --_000_MWHPR21MB07840B6CF7BEE0A11ABE54BFA3700MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNv bm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFw dDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBz cGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIg ZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+TmV0Y29uZiBpcyBub3QgdGhlIG9ubHkgcHJvdG9jb2wgc3VwcG9ydGVkIGJ5 IHJvdXRlcnMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlJvdXRlcnMgYWxzbyBzdXBwb3J0IElQdjQsIElQdjYs IGxpbmstbGF5ZXIgcHJvdG9jb2xzIHN1Y2ggYXMgRXRoZXJuZXQsIHJvdXRpbmcgcHJvdG9jb2xz LCBvZnRlbiB0aGluZ3MgbGlrZSBESENQIHJlbGF5LCBSQURJVVMsIGV0Yy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkgaGF2ZSBub3QgeWV0IHNlZW4gYSBjb21wZWxsaW5n IHJlYXNvbiB0byB1c2UgYSBwdWxsLWJhc2VkIG1lY2hhbmlzbSBpbnN0ZWFkIG9mIGEgcHVzaC1i YXNlZCBtZWNoYW5pc20gdmlhIGFub3RoZXIgcHJvdG9jb2wgdGhlIHJvdXRlcnMgYWxyZWFkeSBz dXBwb3J0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5UaGUgb25seSByZWFzb24gSeKAmXZlIGhlYXJkIHNvIGZh ciBpcyDigJxiZWNhdXNlIHRoZXkgc3VwcG9ydCBuZXRjb25mIGFuZCB3ZeKAmXJlIHVzZWQgdG8g aXTigJ0sIHRvIHdoaWNoIHRoZSBjb3VudGVyIGFyZ3VtZW50IGlzIGFzIGFib3ZlOjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MUY0OTdEIj50aGV5IHN1cHBvcnQgb3RoZXIgdGhpbmdzIHRvbyBhbmQgd2XigJlyZSB1c2VkIHRv IHRoZW0gdG9vLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SW4gb3JkZXIg dG8ga25vdyB3aG8gdG8gcHVsbCBkYXRhIGZyb20sIHRoZSBWZXJpZmllciBoYXMgdG8gaGF2ZSBz b21lIGluZGljYXRpb24gZnJvbSB0aGUgQXR0ZXN0ZXIgdGhhdCB0cmlnZ2VycyB0aGUgYXR0ZXN0 YXRpb24gcmVxdWVzdA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmluZGljYXRlZCBhcyBTdGVwIDEgaW4gZHJh ZnQtZmVkb3Jrb3ctcmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi4mbmJzcDsgU28gaW4g cmVhbGl0eSwgdGhlcmUgaGFzIHRvIGJlIGEgc3RlcCBiZWZvcmUgc3RlcCAxLDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj53aGVyZWJ5IHRoZSBBdHRlc3RlciBkb2VzIHNvbWV0aGluZyB0aGF0IG1ha2VzIHRoZSBB dHRlc3RlciBkaXNjb3ZlcmFibGUgYnkgdGhlIFZlcmlmaWVyLiZuYnNwOyZuYnNwOyBUaGF0IHN0 ZXAgY291bGQgaGF2ZSBpbmNsdWRlZCB0aGUgRUFUIG9yIHRoZSBUUE0gZGF0YTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5leHByZXNzZWQgaW4gdGhlIFlBTkcgZHJhZnQsIG9yIHdoYXRldmVyIGVsc2UsIGFuZCB0 aGVuIHlvdeKAmXZlIGF2b2lkZWQgdGhlIG5lZWQgZm9yIG5ldGNvbmYsIGFuZCByZWR1Y2VkIHRo ZSBudW1iZXIgb2Ygcm91bmQgdHJpcHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmltcHJvdmluZyBsYXRlbmN5 IGFuZCBiYW5kd2lkdGguPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JZiB0 aGVyZSBpcyBhIGNvbXBlbGxpbmcgcmVhc29uIHRvIHN1cHBvcnQgYSBwdWxsLWJhc2VkIG1lY2hh bmlzbSwgYW5kIHdlIGdldCBjb25zZW5zdXMgdGhhdCB3ZSBuZWVkIGl0LCB0aGVuIGdyZWF0Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5CdXQgc28gZmFyIEkgaGF2ZW7igJl0IGhlYXJkIG9uZS48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkRhdmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xn bEBpc2xhbmQtcmVzb3J0LmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgTm92 ZW1iZXIgMTMsIDIwMTkgMTA6MDcgQU08YnI+DQo8Yj5Ubzo8L2I+IERhdmUgVGhhbGVyICZsdDtk dGhhbGVyQG1pY3Jvc29mdC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBTbWl0aCwgTmVkICZsdDtu ZWQuc21pdGhAaW50ZWwuY29tJmd0OzsgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pICZs dDtpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20mZ3Q7OyBOYW5jeSBDYW0tV2luZ2V0IChu Y2Ftd2luZykgJmx0O25jYW13aW5nQGNpc2NvLmNvbSZndDs7IHJhdHNAaWV0Zi5vcmc7IEhlbmsg Qmlya2hvbHogJmx0O2hlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGUmZ3Q7PGJyPg0KPGI+ U3ViamVjdDo8L2I+IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJl bmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+TXkgdmVyc2lvbiBvZiB0ZWNobm9sb2d5IGJhc2VzIGZvciBhdHRl c3RhdGlvbiBpcyBzb21ldGhpbmcgbGlrZSB0aGlzOjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi1sZWZ0OjMwLjBwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+Um91dGVy L05ldGNvbmYgV29ybGQ8L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5NaWxsaW9ucyBvZiBkZXZpY2VzLiBDdXJyZW50bHkgVFBNIG9yaWVudGVk LiBMb25nIHBvc3NpYmxlIHRyYW5zaXRpb24gdG8gRUFULiBZQU5HIHVzZWQgdG8gY3JlYXRlIHZl cnkgc3BlY2lmaWMgZmluZS1ncmFpbmVkIGludGVyYWN0aW9ucy4gTm8gcHJpdmFjeSBpc3N1ZXMu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi PldlYiBCcm93c2VyIFdvcmxkPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+QmlsbGlvbnMgb2YgZGV2aWNlcy4gQ3VycmVudCBhdHRlc3RhdGlv biB1c2UgaXMgcHJpbWFyaWx5IFdlYkF1dGhOIC8gRklETy4gSldUIGlzIHVzZWQgaGVhdmlseSBm b3IgYXV0aGVudGljYXRpb24gc28gd291bGQgYmUgbW9yZSBFQVQgb3JpZW50ZWQsIGJ1dCBUUE0g YXR0ZXN0YXRpb24gaXMgc3VwcG9ydGVkIGluIEZJRE8uIExhcmdlciB1c2Ugb2YgYXR0ZXN0YXRp b24gbWF5IGV2b2x2ZS4gRmluZS1ncmFpbmVkDQogaW50ZXJhY3Rpb25zIGFyZSB3aXRoIFdlYkFQ SXMgKEphdmFzY3JpcHQpIChzb3J0IG9mIHBhcmFsbGVsIHRvIFlBTkcgZm9yIHJvdXRlcnMpLiBC aWcgcHJpdmFjeSBpc3N1ZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPk1vYmlsZSBBcHAgV29ybGQ8L2I+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CaWxsaW9ucyBvZiBkZXZpY2VzLiBN YWluIGF0dGVzdGF0aW9uIHVzZSBpcyBBbmRyb2lk4oCZcyBLZXlzdG9yZS4gVGhpcyBpcyBFQVQt bGlrZSwgYnV0IGJhc2VkIG9uIFguNTA5LiBGaW5lIGdyYWluZWQgaW50ZXJhY3Rpb25zIGFyZSBB bmRyb2lkIEFQSXMuIEkgbWF5IGJlIG91dCBvZiBkYXRlLCBidXQgc28gZmFyIElvUyBkb2VzbuKA mXQgZG8gYXR0ZXN0YXRpb24uIFByaXZhY3kgaXNzdWVzIHZhcnkgYnkgYXBwLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Jb1QgV29ybGQ8 L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5C aWxsaW9ucyBvZiBkZXZpY2VzIG1vc3QgbGlrZWx5IGdvaW5nIHRvIHRyaWxsaW9ucy4gQXR0ZXN0 YXRpb24gaXMgYSBjcml0aWNhbCBlbmFibGluZyBmZWF0dXJlIGluIHRoaXMgd29ybGQuIFRoZXJl IGFyZSBsb3RzIG9mIHByb3RvY29scyBhbmQgZm9ybWF0cyBpbnZvbHZlZC4gVFBNcyBhcmUgdG9v IGV4cGVuc2l2ZSBmb3IgbWFueSBvZiB0aGVzZSwgYnV0IGFyZSBwcm9iYWJseSBpbiB1c2Ugc29t ZXdoZXJlLg0KIE5vIHByaXZhY3kgaXNzdWVzIGZvciBhIGxhcmdlIHBvcnRpb24gb2YgdGhpcyB3 b3JsZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhlIHJvdXRlciB3b3JsZCBpcyB0aGUgc21hbGxlc3QsIGJ1dCBp dCBpcyDigJx3ZWxsIHJlcHJlc2VudGVk4oCdIGJlY2F1c2UgdGhpcyBpcyB0aGUgSUVURi48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBzZWUg RUFUIGFzIGFwcGxpY2FibGUgdG8gYWxsIHRoZXNlIHdvcmxkcywgd2hlcmUgdGhlIFlBTkcgbW9k dWxlIGlzIGp1c3QgZm9yIHRoZSBzbWFsbGlzaCByb3V0ZXIgd29ybGQuIFNvIEkgbW9zdGx5IGFn cmVlIHdpdGggRGF2ZSBhYm91dCBwcm9wb3J0aW9ucywgaG93ZXZlciB0aGlzIGlzIHRoZSBJRVRG IHdoZXJlIFlBTkcgbW9kdWxlcyBhcmUgY3JlYXRlZC4gJm5ic3A7KE1heWJlIEkgc2hvdWxkIGdv IGpvaW4gdGhlDQogVzNDIHdvcmxkIGFuZCB3b3JrIG9uIGF0dGVzdGF0aW9ucyBBUElzIGZvciBi cm93c2VycyBhZnRlciBSQVRTIGlzIGRvbmUpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBOb3YgMTEsIDIwMTksIGF0 IDU6NDMgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3Nv ZnQuY29tIj5kdGhhbGVyQG1pY3Jvc29mdC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5BcyBmYXIgYXMgSSBjYW4gdW5kZXJzdGFuZCBmcm9tIGRyYWZ0LWJpcmtob2x6LXJhdHMt YmFzaWMteWFuZy1tb2R1bGUtMDEgYW5kPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmRyYWZ0LWZlZG9ya293LXJh dHMtbmV0d29yay1kZXZpY2UtYXR0ZXN0YXRpb24tMDEsIHRoZXkgYnJlYWsgZG93biB0aGUgdXNl IGNhc2U8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+c3BhY2UgYXMgZm9sbG93czo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29s YXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSZXF1aXJlbWVudHM/PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0tLS0tLS0mIzQz Oy0tLS0tLS0tLSYjNDM7JiM0MzstLS0tLS0tLS0tLS0tLS08L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwmbmJzcDsgUm9UJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHwgSG9zdCBGaXJld2FsbCB8IFByaXZhY3kgfHwmbmJzcDsmbmJzcDsgU29sdXRp b24mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdE Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8 Jm5ic3A7IFR5cGUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZu YnNwOyZuYnNwOyBFbmFibGVkJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTmVlZGVkJm5ic3A7 IHx8Jm5ic3A7Jm5ic3A7Jm5ic3A7IFBpZWNlcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjNDM7LS0tLS0tLS0tLS0tLS0mIzQzOy0t LS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0tJiM0MzsmIzQzOy0tLS0tLS0tLS0tLS0tLTwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgMSZuYnNwOyB8Jm5ic3A7IFNHWCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDImbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdE Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMyZuYnNwOyB8Jm5ic3A7IFNHWCZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDt8IFllcyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5v Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA0Jm5ic3A7IHwmbmJz cDsgU0dYJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwg WWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA1Jm5ic3A7 IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0 OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNiZuYnNwOyB8Jm5ic3A7IFRydXN0 Wm9uZSZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyA3Jm5ic3A7IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5ic3A7IHwg WWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDgm bmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDkmbmJzcDsgfCZuYnNwOyBUUE0mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8IGRyYWZ0LWJpcmtob2x6LXJhdHMt YmFzaWMteWFuZy1tb2R1bGUtMDE8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDEwJm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDExJm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOzEyJm5ic3A7IHwmbmJzcDsgVFBN Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxMyZuYnNwOyB8U2VjdXJlRWxl bWVudCB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDE0Jm5ic3A7IHxTZWN1cmVFbGVtZW50IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE1Jm5ic3A7IHxTZWN1cmVFbGVtZW50IHwgWWVzJm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwg Tm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE2Jm5ic3A7IHxTZWN1cmVF bGVtZW50IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwO3x8PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxNyZu YnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBO byZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTgmbmJzcDsgfCBGaXJtd2Fy ZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyAxOSZuYnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IDIwJm5ic3A7IHwgRmlybXdhcmUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZ ZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC4uLiB8Jm5ic3A7Jm5ic3A7IC4uLiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 ICZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFuZCBkcmFmdC1m ZWRvcmtvdy1yYXRzLW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxIGZ1cnRoZXIgc2NvcGVz IGl0c2VsZiBkb3duPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmJ5IG9ubHkgYmVpbmcgYXBwbGljYWJsZSB0byBj YXNlcyB3aXRoICZxdW90O2VtYmVkZGVkJnF1b3Q7IGFwcHMgb25seSA9IFllcywgYW5kIHdoZXJl PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPnRoZSBzZWN1cml0eSBwb2xpY3kgaXMgb25seSBhbiBFeGFjdCBtYXRj aCBhZ2FpbnN0IHJlZmVyZW5jZSB2YWx1ZXMgPSBZZXMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkgYmVsaWV2 ZSB0aGF0IHRoZSB5YW5nIGRyYWZ0IGRvZXNuJ3QgaGF2ZSB0aG9zZSB0d28gcmVzdHJpY3Rpb25z LCBmcm9tIG15IHJlYWRpbmcuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhvd2V2ZXIsIHRoZSBwb2ludCBpcyB0 aGF0IGJvdGggZHJhZnRzIGFyZSBWRVJZIG5hcnJvdywgYW5kIGluIHRoZSB0YWJsZSBzaG93biBh Ym92ZSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+b25seSBhZGRyZXNzIDEgb3V0IG9mIDIwIHBvc3NpYmlsaWVz IGluIHRoYXQgc3BhY2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JbiBj b250cmFzdCwgdGhlIFRFRVAgV0cgZGVjaWRlZCB0aGF0IGl0IHdhcyBub3QgaW50ZXJlc3RlZCBp biBuYXJyb3cgc2NvcGluZ3M8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+KHNwZWNpZmljYWxseSBzb21ldGhpbmcg R2xvYmFsIFBsYXRmb3JtIHNwZWNpZmljKSwgYnV0IGluc3RlYWQgd2FudGVkIG9uZSBnZW5lcmFs IHNvbHV0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SWYgdGhlIFJB VFMgV0cgc3BlbmRzIGVmZm9ydCBvbiBzb21ldGhpbmcgdGhhdCBvbmx5IGFkZHJlc3NlcyBhIHNp bmdsZSByb3cgb3V0IG9mIDIwJiM0Mzsgcm93cyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+dGhlbiBkbyB3ZSBl eHBlY3QgMTkmIzQzOyBvdGhlciBzb2x1dGlvbnMgdG8gYWxzbyBiZSBkb25lIGluIHRoZSBXRz8m bmJzcDsgT3IgY291bGQgd2Ugd29yayBvbiB0aGluZ3M8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+dGhhdCBhcmUg YnJvYWRlciBhbmQgaGFwcGVuIHRvIGFsc28gd29yayBmb3Igcm93IDk/PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JJ3ZlIHNlZW4gb3RoZXJzIGNvbW1lbnRpbmcgb24gdGhl IGZhY3QgdGhhdCB0aGUgWUFORyBtb2R1bGUgb25seSBzdXBwb3J0cyBUUE1zIGFuZCBub3Q8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+b3RoZXIgdGhpbmdzIChFQVRzIGV0YyksIHdoaWNoIHdvdWxkIGp1c3QgYWRk IHN1cHBvcnQgZm9yIGEgY291cGxlIG1vcmUgcm93cywgYnV0IHN0aWxsIG5vdDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5iZSBnZW5lcmFsLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UGVy c29uYWxseSwgSSB3b3VsZCBtdWNoIHJhdGhlciBzZWUgdGhlIFdHIHNwZW5kIGVmZm9ydCBvbiB0 aGluZ3MgdGhhdCByZWFsbHkgYXJlIGdlbmVyaWMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmkuZS4sIHdvcmsg d2l0aCBvciB3aXRob3V0IGhvc3QgZmlyZXdhbGxzLCB3b3JrIHdpdGggbXVsdGlwbGUgUm9UL1RF RSB0eXBlcywgZXRjLiwgcmF0aGVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoYW4gc2VlaW5nIGFuIGV4cGxv c2lvbiBvZiBwb2ludCBzb2x1dGlvbnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5EYXZlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4w cHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5G cm9tOjwvYj4gUkFUUyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+ cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+U21pdGgs IE5lZDxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIE5vdmVtYmVyIDExLCAyMDE5IDEwOjEyIEFN PGJyPg0KPGI+VG86PC9iPiBPbGl2ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykgJmx0OzxhIGhy ZWY9Im1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20iPmlhbi5vbGl2ZXJAbm9r aWEtYmVsbC1sYWJzLmNvbTwvYT4mZ3Q7OyBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9 Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4m Z3Q7OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgJmx0OzxhIGhyZWY9Im1haWx0bzpuY2Ft d2luZ0BjaXNjby5jb20iPm5jYW13aW5nQGNpc2NvLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9i PiA8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT47IEhlbmsg Qmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVy LmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9hPiZndDs8YnI+DQo8Yj5TdWJq ZWN0OjwvYj4gUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1l KSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlJpZ2h0LiBUaGlzIGltcGxpZXMgdGhlIFJBVFMg4oCcdG9rZW7igJ0gc2hvdWxkIHN1 cHBvcnQgZXhpc3Rpbmcg4oCcYmluYXJ54oCdIGZvcm1hdHMgYXMgYW4gZW5jYXBzdWxhdGlvbiAo c2lnbmVkIGJ5IGEgc2Vjb25kIFRBIHdoZXJlIHRoZSBUUE0gaXMgYSBmaXJzdCBUQSkgb3IgYXMg YSBjb252ZXlhbmNlICh1bnNpZ25lZD8pIHRva2VuLiBQb3NzaWJseSwgdGhlIG9ubHkgYWRkZWQg dmFsdWUgb2YgdGhlIGxhdHRlciBpcw0KIGEgdGFnIHRoYXQgaWRlbnRpZmllcyBpdCBhcyBhIFRQ TSBiaW5hcnkgZm9ybWF0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPk9uIDExLzEwLzE5LCAyMzoyMSBQTSwgJnF1b3Q7UkFUUyBvbiBiZWhhbGYgb2Yg T2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86 cmF0cy1ib3VuY2VzQGlldGYub3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFs ZiBvZg0KPGEgaHJlZj0ibWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbSI+aWFu Lm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5k OndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jmd0OyBSZW1vdGUgVFBNIGF0 dGVzdGF0aW9ucyBhcmUgdXNlZnVsIGFuZCBuZWNlc3NhcnkgdGhlIHNob3J0IHJ1biwgYnV0IGFy ZSBvZiB2ZXJ5IGxpbWl0ZWQgY2FwYWJpbGl0eS4gSSBiZWxpZXZlIHRoYXQgJmd0OyBFQVQgd2ls bCByZXBsYWNlIFRQTSBhdHRlc3RhdGlvbnMgaW4gdGhlIGxvbmcNCiBydW4gKG1heWJlIGRlY2Fk ZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVzc2l2ZS4gSSBrbm93ICZndDsgb3Ro ZXJzIGJlbGlldmUgdGhhdCB0b28uJm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFj a2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0Ij5JIHdvdWxkIGRpc2FncmVlIHdpdGggdGhlIHN0YXRlbWVudCBvZiAmcXVv dDtzaG9ydCBydW4mcXVvdDsgLi4uIFRQTSBpcyBwcmFjdGljYWxseSB0aGUgb25seSBleGlzdGlu ZyBzdGFuZGFyZGlzZWQgKGhhcmR3YXJlLCBzb2Z0d2FyZSwgZmlybXdhcmUsIG1lYXN1cmVtZW50 IC0geDg2IG9ubHkgZXRjKQ0KIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIHVzZSwg aWU6IHByYWN0aWNhbGx5IGFsbCB4ODYgbWFjaGluZXMsJm5ic3A7IFRoZSBhdHRlc3RhdGlvbiBt ZWNoYW5pc21zIHByb3ZpZGVkIGFyZSBnb2luZyB0byBiZSBhcm91bmQgZm9yIGEgdmVyeSBsb25n IHRpbWUuJm5ic3A7DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQi PkZyb20gdGVsY28gZXhwZXJpZW5jZSwgMzAgeWVhcnMgYWdvIHdlIHNhaWQgU1M3IHdvdWxkIG9u bHkgYmUgYXJvdW5kIGluIHRoZSBzaG9ydCB0ZXJtLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFja2dy b3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dCI+Jmd0OyBUaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVudCBU UE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQgYSBw cm9taXNlICZndDsgdG8gYWRkIEVBVCB0byBpdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdCI+QWdyZWU8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjti YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQiPklhbjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2IGlkPSJTaWduYXR1cmUiPg0KPGRpdiBpZD0iZGl2dGFnZGVmYXVsdHdyYXBwZXIiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4iPg0KPHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmIj4tLSA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFy Z2luLWxlZnQ6LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkRyLiBJYW4gT2xpdmVyPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4i Pg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5DeWJlcnNlY3VyaXR5IFJlc2VhcmNoPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4iPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj5EaXN0aW5ndWlzaGVkIE1lbWJlciBvZiBUZWNobmljYWwgU3RhZmY8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6 LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPk5va2lhIEJlbGwgTGFiczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+JiM0MzszNTggNTAgNDgzIDYyMzc8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2VudGVyIiBzdHlsZT0idGV4dC1hbGlnbjpj ZW50ZXIiPg0KPGhyIHNpemU9IjEiIHdpZHRoPSI5OSUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPkZyb206PC9iPiBMYXVyZW5jZSBMdW5kYmxhZGUg Jmx0OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVz b3J0LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+U2VudDo8L2I+IDExIE5vdmVtYmVyIDIwMTkgMDA6NDQ8 YnI+DQo8Yj5Ubzo8L2I+IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSAmbHQ7PGEgaHJlZj0i bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbSI+bmNhbXdpbmdAY2lzY28uY29tPC9hPiZndDs8YnI+ DQo8Yj5DYzo8L2I+IEhlbmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9h PiZndDs7DQo8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLi5vcmciPnJhdHNAaWV0Zi4ub3JnPC9h PiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0Zi5vcmc8L2E+Jmd0 Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRl ciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdA0KPG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBw dCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i Pk9uIE5vdiAxMCwgMjAxOSwgYXQgMjoyMCBQTSwgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcp ICZsdDs8YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tIj5uY2Ftd2luZ0BjaXNjby5j b208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj5TbywgTGF1cmVuY2UsIGFyZSB5b3Ugc3RpbGwgT0sgd2l0aCB0aGUgYWRvcHRp b24gb2YgdGhlIGN1cnJlbnQgZHJhZnQgd2l0aCBhIHJlbmFtZSBmb3Igbm93Pzxicj4NClRoYW5r cywgTmFuY3k8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj5JIHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVm Zm9ydCBvZiBhZGRpbmcgRUFUIHN1cHBvcnQgdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJlYWxs eSBoaWdoLiBJdCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwcyBicmluZyB0b2dldGhlciB0 aGUgdHdvIGF0dGVzdGF0aW9uIHdvcmxkcyBhbmQgbWFrZSB0aGUgVFBNIGFuZCBFQVQgd29yaw0K IGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5SZW1vdGUgVFBNIGF0dGVzdGF0aW9ucyBhcmUgdXNl ZnVsIGFuZCBuZWNlc3NhcnkgdGhlIHNob3J0IHJ1biwgYnV0IGFyZSBvZiB2ZXJ5IGxpbWl0ZWQg Y2FwYWJpbGl0eS4gSSBiZWxpZXZlIHRoYXQgRUFUIHdpbGwgcmVwbGFjZSBUUE0gYXR0ZXN0YXRp b25zIGluIHRoZSBsb25nIHJ1biAobWF5YmUgZGVjYWRlcykgYmVjYXVzZSB0aGV5IGFyZSBmYXIg bW9yZSBleHByZXNzaXZlLg0KIEkga25vdyBvdGhlcnMgYmVsaWV2ZSB0aGF0IHRvby4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JZiB3ZSBkb27i gJl0IGluY2x1ZGUgRUFUIGluIHRoZSBZQU5HIG1vZGUgaXQgaXMgc29ydCBvZiBsaWtlIGRlZmlu aW5nIEhUVFAgdG8gb25seSBjb252ZXkgSFRNTCB0byB0aGUgZXhjbHVzaW9uIG9mIFBERi4gV2Xi gJlyZSBkZWZpbmluZyBhbiBhdHRlc3RhdGlvbiBwcm90b2NvbCB0aGF0IGNhbiBvbmx5IG1vdmUg b25lIGtpbmQgb2YgYXR0ZXN0YXRpb24gZXZlbiB0aG91Z2gNCiB3ZSBoYXZlIGNvbnNlbnN1cyBv biB3aGF0IHRoZSBvdGhlciBvbmUgbG9va3MgbGlrZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JdCBzZWVtcyByZWxhdGl2ZWx5IHNpbXBsZSB0byBhZGQg RUFUIHN1cHBvcnQgKG9yIHByb21pc2UgdG8gYWRkIEVBVCBzdXBwb3J0KS4gUHJldHR5IHN1cmUg SSBoZWFyZCBIZW5rIGFncmVlIHRvIGFkZCBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5UaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0 aGUgY3VycmVudCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBk cmFmdCBhbmQgYSBwcm9taXNlIHRvIGFkZCBFQVQgdG8gaXQuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9k eT4NCjwvaHRtbD4NCg== --_000_MWHPR21MB07840B6CF7BEE0A11ABE54BFA3700MWHPR21MB0784namp_-- From nobody Fri Nov 15 06:38:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BF37120873 for ; Fri, 15 Nov 2019 06:38:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=iVmtuMyT; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=KcHYKjWq Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gLJD7P5J0IVi for ; Fri, 15 Nov 2019 06:38:34 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67B3C120013 for ; Fri, 15 Nov 2019 06:38:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=51210; q=dns/txt; s=iport; t=1573828714; x=1575038314; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=nEAUopt///krPfxGbhLohjaxHJvgSR0qDICFqgZyeQI=; b=iVmtuMyTNMICHg/S8bOWibWgcgkrLLWUWHni2SVDK8LOMDS8Gbw2qTd0 ChLgffkZR4/fiKN/ZkknO89zgTRvBDoQQhTBAB8mNh9qSzW/ojH7doeP3 zcXPEOOi8WLt4YonLuNBykRxjusvEu1xYrG5Xlgx8TBXWl3FhPLhcgGsS c=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3Al0t4JBG6G2Dn/X7qjYRdXp1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4w3A3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNV?= =?us-ascii?q?cejNkO2QkpAcqLE0r+efP0aC0mNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B5CQAquM5d/4UNJK1kGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYF+gRwvTgIFbCstIAQLKgqEH4NGA4pygl6YAIJ?= =?us-ascii?q?SA1QCBwEBAQkDAQEtAgEBgUyCdAKCIyQ4EwIDCwEBBAEBAQIBBQRthTcMhVE?= =?us-ascii?q?BAQEBAgESCAMGChMBATcBBAsCAQgRBAEBDRQBBgMCAgIwFAkIAgQBDQUIBg0?= =?us-ascii?q?HgwGBeU0DDhEPAQKkTQKBOIhgdYEygn4BAQWFGxiCEAcJgTaBU4pCGIFAP4E?= =?us-ascii?q?RRoJMPoQeKQwJHwSCVjKCLI0ogjI5jwqPDAqCKoNNgjSGPYkqmg6NE4E1lh+?= =?us-ascii?q?DaQIEAgQFAg4BAQWBaSKBWHAVgydQERSRGgwXg1CKU3QBgSeNfoExAYEOAQE?= X-IronPort-AV: E=Sophos;i="5.68,308,1569283200"; d="p7s'?scan'208,217";a="651799951" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Nov 2019 14:38:16 +0000 Received: from XCH-ALN-007.cisco.com (xch-aln-007.cisco.com [173.36.7.17]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xAFEcFVK015879 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 15 Nov 2019 14:38:15 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-007.cisco.com (173.36.7.17) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 15 Nov 2019 08:38:14 -0600 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 15 Nov 2019 09:38:12 -0500 Received: from NAM04-BN3-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 15 Nov 2019 08:38:12 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ecHhb5wfwCjUJZLPlkEIEYlUvTDhCHP/PMLjdar5A3E0sdYu+duAEWAeLGPeF+Zg8i66q93UKdluTSehFJ5TlTQYlpBt5SUvioZ5u3aYZUjgPihmOMddI1/XADRJFyS5l9Mzpr5XsREmV80vePExjyl9aBGAGmgZB0cQy6+rCdP4BISxdD8KpJhkRbexhRNCmjiz/HZXJwVM1B11aQHXb/HxYV5ZE4qdYJqxSQ4VgOVd4u88VZdB+KsVnBeJfiJg4aHYbg0X/rI8cICZK1Oaja3Vuk8DzKt9zrGNE+DdbJTnzgm3TrvHKMiNCv/6b2MaxqdDV2nrQD3a/VkO7U614A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sbIyEoNPBSk5l8+lAMi/tvdLDCs1C992aUzpHL8FAn4=; b=VNA1JadPIGiwaSsQukLmgLNj8/g2tvWndYjGZNjYmlfjqwU3yyuvcB8Wg5SOATeYAE7skY+7qIjuQK1AUXS56tVlOt60qV9ssAQwjLtMzp5J0tRc/8FIzpSrrAGKKtwak3/TD1RhAli1esiXjRuFKBiMGnLUXqMZg6ejEScQ1h3zLmFHoGgz+aDPvFRzW2h14RGgeNcsxGaSRmG5VoJ0nuqqHPJLhDHluPs5nGoXO43h7xY4cc1aYiOgufSNIVrwcd9dpL6j/He7rMzHpBLaV+8TW71wsr4vbEJcPD+BWU18eY5FH09/YlsyMj+CBxGBxu0+vAmw/TdEguJItyY/Lg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sbIyEoNPBSk5l8+lAMi/tvdLDCs1C992aUzpHL8FAn4=; b=KcHYKjWqUAAN1L+nbQ/bHK6nle0XrBmfXSvfwWHH/r/rHefMcyfngS0ktx5Tf8lItfAbtFXCIMcjATapT36jvtT1Fwqz6C+2r38FFobPt/OJ8S3RcL6WXEcRGq7QWF6kIbqnGXo7jrVwbuXNYCmHEvO2ZtSb8/eFnW2xeal2yIc= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3356.namprd11.prod.outlook.com (20.176.120.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Fri, 15 Nov 2019 14:38:11 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2451.029; Fri, 15 Nov 2019 14:38:11 +0000 From: "Eric Voit (evoit)" To: Dave Thaler , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgAEmbJA= Date: Fri, 15 Nov 2019 14:38:11 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-14T20:24:13.3496979Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=096a2af9-9408-49d1-8867-8c9a9004dfea; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 98299d03-e6c5-4400-7357-08d769d9709f x-ms-traffictypediagnostic: DM6PR11MB3356: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 02229A4115 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(346002)(366004)(39860400002)(136003)(396003)(189003)(199004)(15404003)(110136005)(8676002)(478600001)(229853002)(55016002)(256004)(6436002)(14454004)(316002)(3846002)(14444005)(81166006)(81156014)(54896002)(6306002)(790700001)(45080400002)(6116002)(26005)(186003)(8936002)(7736002)(53546011)(52536014)(486006)(66574012)(9686003)(74316002)(236005)(476003)(99286004)(66556008)(2906002)(446003)(64756008)(76176011)(71190400001)(71200400001)(102836004)(66616009)(66446008)(76116006)(25786009)(66066001)(54906003)(6506007)(66946007)(7696005)(6246003)(5660300002)(11346002)(33656002)(4326008)(86362001)(66476007); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3356; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4zzjSdHyeoRtcaOkX6TYhtoPiMeaCK2pakUrp217DA6GYXQjuWxihMqTCsVMp9HldF5Xf54umz1flghVTsh4eSw16w1VWnw+7Ac6LAc4Rs2pH4cqvKGWPSS650O9/FD17T7WEZWtmfjZubCkZ16GbFeRljDOHmV22eo6t5en/zM3s9W+kuoS2B/LD0gLp0flcPvKA2FhDNl16rBEvy2kBMkDeZHziM3sMqs72f70UR6EtXbov9A0rxUQvTntLT03Yu8P8i0K+dY4IV06h2+ntfTzpTBDhCtbNzos2lHMaZWdAJBdOQ/Oz9Jz3iOn1aYdez0IinBkVRy23Sqwog6tdCmkHLcHSTM+LTUzJ+ZlaLnpAxTMzWgkiAmqacav9OUoFyGxn7TYWAuhpey5mx+ilCfvS9syr7o6pGg5HRKJjxdfGDbwWyEcjpNFMU+C7Ynd Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_01E9_01D59B98.6288BB80" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 98299d03-e6c5-4400-7357-08d769d9709f X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2019 14:38:11.4072 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: V1wWPp30P6BXF7GXA9dUR8nqoIb5DSDSAdVaktvQLR3EASx01AtvlXEyLXVLWLFS X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3356 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.17, xch-aln-007.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 14:38:38 -0000 ------=_NextPart_000_01E9_01D59B98.6288BB80 Content-Type: multipart/alternative; boundary="----=_NextPart_001_01EA_01D59B98.6288BB80" ------=_NextPart_001_01EA_01D59B98.6288BB80 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Dave Thaler, November 15, 2019 2:39 AM Netconf is not the only protocol supported by routers. Routers also support IPv4, IPv6, link-layer protocols such as Ethernet, = routing protocols, often things like DHCP relay, RADIUS, etc. Below I would have said " Router/YANG" below rather than = "Router/NETCONF". =20 =20 I have not yet seen a compelling reason to use a pull-based mechanism = instead of a push-based mechanism via another protocol the routers = already support. Router vendors want push-based mechanisms too. And NETCONF does = push. See RFC-8640 and RFC-5277. =20 The only reason I=E2=80=99ve heard so far is =E2=80=9Cbecause they = support netconf and we=E2=80=99re used to it=E2=80=9D, to which the = counter argument is as above: they support other things too and we=E2=80=99re used to them too. There is piles of documentation in the IETF and beyond detailing = the reasoning and extent of consolidation on YANG for network = management. IETF, IEEE, MEF, OpenConfig, and others forums are = defining these. I wouldn't expect another anytime soon. =20 =20 NETCONF can support YANG. Other transports can support YANG. The = current draft under an adoption call does not specifically reference = NETCONF. =20 In order to know who to pull data from, the Verifier has to have some = indication from the Attester that triggers the attestation request=20 indicated as Step 1 in draft-fedorkow-rats-network-device-attestation. = So in reality, there has to be a step before step 1, whereby the Attester does something that makes the Attester discoverable = by the Verifier. That step could have included the EAT or the TPM data expressed in the YANG draft, or whatever else, and then you=E2=80=99ve = avoided the need for netconf, and reduced the number of round trips, improving latency and bandwidth. It is already possible to subscribe to existing proprietary YANG = attestation models. This requires zero extra round-trips. The push = can be leave the Attester in <1 sec. =20 If there is a compelling reason to support a pull-based mechanism, and = we get consensus that we need it, then great. But so far I haven=E2=80=99t heard one. A YANG model supports both push and pull. Application vendors = want a standard attestation model. That is why you have many network = vendors authoring this YANG draft under the adoption call. =20 Honestly I don't understand the push-back. This should be a = no-brainer. =20 /Eric =20 Dave =20 From: Laurence Lundblade >=20 Sent: Wednesday, November 13, 2019 10:07 AM To: Dave Thaler > Cc: Smith, Ned >; = Oliver, Ian (Nokia - FI/Espoo) >; Nancy Cam-Winget (ncamwing) = >; rats@ietf.org = ; Henk Birkholz > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft =20 My version of technology bases for attestation is something like this: =20 Router/Netconf World Millions of devices. Currently TPM oriented. Long possible transition to = EAT. YANG used to create very specific fine-grained interactions. No = privacy issues. =20 Web Browser World Billions of devices. Current attestation use is primarily WebAuthN / = FIDO. JWT is used heavily for authentication so would be more EAT = oriented, but TPM attestation is supported in FIDO. Larger use of = attestation may evolve. Fine-grained interactions are with WebAPIs = (Javascript) (sort of parallel to YANG for routers). Big privacy issues. =20 Mobile App World Billions of devices. Main attestation use is Android=E2=80=99s Keystore. = This is EAT-like, but based on X.509. Fine grained interactions are = Android APIs. I may be out of date, but so far IoS doesn=E2=80=99t do = attestation. Privacy issues vary by app. =20 IoT World Billions of devices most likely going to trillions. Attestation is a = critical enabling feature in this world. There are lots of protocols and = formats involved. TPMs are too expensive for many of these, but are = probably in use somewhere. No privacy issues for a large portion of this = world. =20 The router world is the smallest, but it is =E2=80=9Cwell = represented=E2=80=9D because this is the IETF. =20 I see EAT as applicable to all these worlds, where the YANG module is = just for the smallish router world. So I mostly agree with Dave about = proportions, however this is the IETF where YANG modules are created. = (Maybe I should go join the W3C world and work on attestations APIs for = browsers after RATS is done). =20 LL =20 =20 =20 On Nov 11, 2019, at 5:43 PM, Dave Thaler > wrote: =20 As far as I can understand from draft-birkholz-rats-basic-yang-module-01 = and draft-fedorkow-rats-network-device-attestation-01, they break down the = use case space as follows: =20 Requirements? +--------------+---------------+---------++--------------- | RoT | Host Firewall | Privacy || Solution =20 | Type | Enabled | Needed || Pieces =20 +--------------+---------------+---------++--------------- 1 | SGX | No | No || 2 | SGX | No | Yes || 3 | SGX | Yes | No || 4 | SGX | Yes | Yes || 5 | TrustZone | No | No || 6 | TrustZone | No | Yes || 7 | TrustZone | Yes | No || 8 | TrustZone | Yes | Yes || 9 | TPM | No | No || = draft-birkholz-rats-basic-yang-module-01 10 | TPM | No | Yes || 11 | TPM | Yes | No || 12 | TPM | Yes | Yes || 13 |SecureElement | No | No || 14 |SecureElement | No | Yes || 15 |SecureElement | Yes | No || 16 |SecureElement | Yes | Yes || 17 | Firmware | No | No || 18 | Firmware | No | Yes || 19 | Firmware | Yes | No || 20 | Firmware | Yes | Yes || ... | ... | | || =20 And draft-fedorkow-rats-network-device-attestation-01 further scopes = itself down by only being applicable to cases with "embedded" apps only =3D Yes, and = where the security policy is only an Exact match against reference values =3D = Yes. I believe that the yang draft doesn't have those two restrictions, from = my reading. However, the point is that both drafts are VERY narrow, and in the table = shown above, only address 1 out of 20 possibilies in that space. =20 In contrast, the TEEP WG decided that it was not interested in narrow = scopings (specifically something Global Platform specific), but instead wanted = one general solution. =20 If the RATS WG spends effort on something that only addresses a single = row out of 20+ rows, then do we expect 19+ other solutions to also be done in the WG? Or = could we work on things that are broader and happen to also work for row 9? =20 I've seen others commenting on the fact that the YANG module only = supports TPMs and not other things (EATs etc), which would just add support for a couple more = rows, but still not be general. =20 Personally, I would much rather see the WG spend effort on things that = really are generic, i.e., work with or without host firewalls, work with multiple RoT/TEE = types, etc., rather than seeing an explosion of point solutions. =20 Dave =20 From: RATS > On = Behalf Of Smith, Ned Sent: Monday, November 11, 2019 10:12 AM To: Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade = >; Nancy = Cam-Winget (ncamwing) > Cc: rats@ietf.org ; Henk Birkholz = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft =20 Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support = existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by = a second TA where the TPM is a first TA) or as a conveyance (unsigned?) = token. Possibly, the only added value of the latter is a tag that = identifies it as a TPM binary format? =20 =20 On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - = FI/Espoo)" on = behalf of ian.oliver@nokia-bell-labs.com = > wrote: =20 > Remote TPM attestations are useful and necessary the short run, but = are of very limited capability. I believe that > EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know > others believe that too.=20 =20 I would disagree with the statement of "short run" ... TPM is = practically the only existing standardised (hardware, software, = firmware, measurement - x86 only etc) hardware root of trust in common = use, ie: practically all x86 machines, The attestation mechanisms = provided are going to be around for a very long time. =20 =20 >From telco experience, 30 years ago we said SS7 would only be around in = the short term. =20 > Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise > to add EAT to = it. =20 Agree =20 Ian =20 --=20 Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 =20 _____ =20 From: Laurence Lundblade > Sent: 11 November 2019 00:44 To: Nancy Cam-Winget (ncamwing) > Cc: Henk Birkholz >; rats@ietf..org = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft=20 =20 =20 On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) = > wrote: =20 So, Laurence, are you still OK with the adoption of the current draft = with a rename for now? Thanks, Nancy =20 I think the value add to the larger RATS effort of adding EAT support to = this YANG protocol is really high. It a core thing to do that helps = bring together the two attestation worlds and make the TPM and EAT work = here less like ships in the night. =20 Remote TPM attestations are useful and necessary the short run, but are = of very limited capability. I believe that EAT will replace TPM = attestations in the long run (maybe decades) because they are far more = expressive. I know others believe that too.=20 =20 If we don=E2=80=99t include EAT in the YANG mode it is sort of like = defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re = defining an attestation protocol that can only move one kind of = attestation even though we have consensus on what the other one looks = like. =20 It seems relatively simple to add EAT support (or promise to add EAT = support). Pretty sure I heard Henk agree to add it. =20 Thus, I am opposed to adoption with the current TPM-only draft. = I=E2=80=99d be OK with the current draft and a promise to add EAT to it. =20 LL =20 =20 ------=_NextPart_001_01EA_01D59B98.6288BB80 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

From: Dave Thaler, November 15, 2019 2:39 = AM

Netconf = is not the only protocol supported by routers.

Routers also support = IPv4, IPv6, link-layer protocols such as Ethernet, routing protocols, = often things like DHCP relay, RADIUS, etc.

<Eric> Below I would have said " = Router/YANG" below rather than = "Router/NETCONF".=C2=A0=C2=A0

 

I have not yet seen a compelling reason to use a = pull-based mechanism instead of a push-based mechanism via another = protocol the routers already support.

<Eric> Router vendors want push-based mechanisms = too.=C2=A0 And NETCONF does push.=C2=A0 See RFC-8640 and = RFC-5277.

 

The only reason = I=E2=80=99ve heard so far is =E2=80=9Cbecause they support netconf and = we=E2=80=99re used to it=E2=80=9D, to which the counter argument is as = above:

they support other things too and we=E2=80=99re = used to them too.

<Eric> = There is piles of documentation in the IETF and beyond detailing the = reasoning and extent of consolidation on YANG for network = management.=C2=A0 =C2=A0=C2=A0IETF, IEEE, MEF, OpenConfig, and others = forums are defining these.=C2=A0 I wouldn't expect another anytime = soon.=C2=A0

 

NETCONF can support YANG. Other transports can support = YANG.=C2=A0=C2=A0 The current draft under an adoption call does not = specifically reference NETCONF.

 

In order to know who to pull data from, the = Verifier has to have some indication from the Attester that triggers the = attestation request

indicated as Step 1 in = draft-fedorkow-rats-network-device-attestation.  So in reality, = there has to be a step before step 1,

whereby the Attester = does something that makes the Attester discoverable by the = Verifier.   That step could have included the EAT or the TPM = data

expressed in the YANG draft, or whatever else, = and then you=E2=80=99ve avoided the need for netconf, and reduced the = number of round trips,

improving latency and = bandwidth.

<Eric> It is = already possible to subscribe to existing proprietary YANG attestation = models.=C2=A0 This requires zero extra round-trips.=C2=A0 =C2=A0The push = can be leave the Attester in <1 sec.

 

If there is a compelling reason to support a = pull-based mechanism, and we get consensus that we need it, then = great.

But so far I haven=E2=80=99t heard = one.

<Eric> A YANG model = supports both push and pull. =C2=A0Application vendors want a standard = attestation model.=C2=A0 That is why you have many network vendors = authoring this YANG draft under the adoption call.

 

Honestly I = don't understand the push-back.=C2=A0=C2=A0 This should be a = no-brainer.

 

/Eric

 

Dave

 

From: Laurence Lundblade <lgl@island-resort.com> =
Sent: Wednesday, November 13, 2019 10:07 AM
To: = Dave Thaler <dthaler@microsoft.com>
Cc: Smith, Ned <ned.smith@intel.com>; Oliver, = Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs= .com>; Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>; rats@ietf.org; Henk Birkholz <henk.birkholz@sit.fraunho= fer.de>
Subject: Re: [Rats] Call for adoption (after = draft rename) for Yang module draft

 

My = version of technology bases for attestation is something like this:

 

Router/Netconf = World

Millions of = devices. Currently TPM oriented. Long possible transition to EAT. YANG = used to create very specific fine-grained interactions. No privacy = issues.

 

Web Browser World

Billions of devices. Current attestation use is = primarily WebAuthN / FIDO. JWT is used heavily for authentication so = would be more EAT oriented, but TPM attestation is supported in FIDO. = Larger use of attestation may evolve. Fine-grained interactions are with = WebAPIs (Javascript) (sort of parallel to YANG for routers). Big privacy = issues.

 

Mobile App World

Billions of devices. Main attestation use is = Android=E2=80=99s Keystore. This is EAT-like, but based on X.509. Fine = grained interactions are Android APIs. I may be out of date, but so far = IoS doesn=E2=80=99t do attestation. Privacy issues vary by = app.

 

IoT World

Billions of devices most likely going to trillions. = Attestation is a critical enabling feature in this world. There are lots = of protocols and formats involved. TPMs are too expensive for many of = these, but are probably in use somewhere. No privacy issues for a large = portion of this world.

 

The router world is the smallest, but it is = =E2=80=9Cwell represented=E2=80=9D because this is the = IETF.

 

I = see EAT as applicable to all these worlds, where the YANG module is just = for the smallish router world. So I mostly agree with Dave about = proportions, however this is the IETF where YANG modules are created. =  (Maybe I should go join the W3C world and work on attestations = APIs for browsers after RATS is done).

 

LL

 

 

 

On Nov 11, 2019, at 5:43 PM, Dave Thaler <dthaler@microsoft.com> = wrote:

 

As far as I can = understand from draft-birkholz-rats-basic-yang-module-01 = and

draft-fedorkow-rats-network-device-attestation-01= , they break down the use case

space as = follows:

 

=

    &nbs= p;            = ;       = Requirements?

    &nbs= p;    = +--------------+---------------+---------++---------------

    &nbs= p;    |  = RoT         | Host Firewall | = Privacy ||   Solution    =

    &nbs= p;    |  = Type        |   = Enabled     | Needed  ||    = Pieces    

    &nbs= p;    +--------------+---------------+---------++----= -----------

    &nbs= p; 1  |  SGX         | = No            | = No      ||

    &nbs= p; 2  |  SGX         | = No            | = Yes     ||

    &nbs= p; 3  |  SGX         | = Yes           | = No      ||

    &nbs= p; 4  |  SGX         | = Yes           | = Yes     ||

    &nbs= p; 5  |  TrustZone   | = No            | = No      ||

    &nbs= p; 6  |  TrustZone   | = No            | = Yes     ||

    &nbs= p; 7  |  TrustZone   | = Yes           | = No      ||

    &nbs= p; 8  |  TrustZone   | = Yes           | = Yes     ||

    &nbs= p; 9  |  TPM         | = No            | = No      || = draft-birkholz-rats-basic-yang-module-01

     = 10  |  TPM         | = No            | = Yes     ||

     = 11  |  TPM         | = Yes           | = No      ||

   =   12  |  = TPM         | = Yes           | = Yes     ||

     = 13  |SecureElement | = No            | = No      ||

     = 14  |SecureElement | = No            | = Yes     ||

     = 15  |SecureElement | = Yes           | = No      ||

     = 16  |SecureElement | = Yes           | = Yes     ||

     = 17  | Firmware     | = No            | = No      ||

     = 18  | Firmware     | = No            | = Yes     ||

     = 19  | Firmware     | = Yes           | = No      ||

     = 20  | Firmware     | = Yes           | = Yes     ||

     = ... |   ...        = |            =   |         = ||

 

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself = down

by only being applicable to cases with = "embedded" apps only =3D Yes, and = where

the security policy is only an Exact match = against reference values =3D Yes.

I believe that the yang = draft doesn't have those two restrictions, from my = reading.

However, the point is that both drafts are VERY = narrow, and in the table shown above,

only address 1 out of 20 = possibilies in that space.

 

In contrast, the TEEP WG = decided that it was not interested in narrow = scopings

(specifically something Global Platform = specific), but instead wanted one general = solution.

 

If the RATS WG spends = effort on something that only addresses a single row out of 20+ = rows,

then do we expect 19+ other solutions to also be = done in the WG?  Or could we work on things

that are broader and = happen to also work for row 9?

 

I've seen others = commenting on the fact that the YANG module only supports TPMs and = not

other things (EATs etc), which would just add = support for a couple more rows, but still not

be = general.

 

Personally, I would much = rather see the WG spend effort on things that really are = generic,

i.e., work with or without host firewalls, work = with multiple RoT/TEE types, etc., rather

than seeing an explosion = of point solutions.

 

Dave

 

From: RATS <rats-bounces@ietf.org> = On Behalf Of Smith, Ned
Sent: Monday, November 11, 2019 = 10:12 AM
To: Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs= .com>; Laurence Lundblade <lgl@island-resort.com>; = Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
Cc: rats@ietf.org; Henk Birkholz = <henk.birkholz@sit.fraunho= fer.de>
Subject: Re: [Rats] Call for adoption (after = draft rename) for Yang module draft

 

Right. This = implies the RATS =E2=80=9Ctoken=E2=80=9D should support existing = =E2=80=9Cbinary=E2=80=9D formats as an encapsulation (signed by a second = TA where the TPM is a first TA) or as a conveyance (unsigned?) token. = Possibly, the only added value of the latter is a tag that identifies it = as a TPM binary format?

 

 

On 11/10/19, 23:21 PM, "RATS on behalf = of Oliver, Ian (Nokia - FI/Espoo)" <rats-bounces@ietf.org on = behalf of ian.oliver@nokia-bell-labs= .com> wrote:

 

> Remote TPM attestations are useful and = necessary the short run, but are of very limited capability. I believe = that > EAT will replace TPM attestations in the long run (maybe = decades) because they are far more expressive. I know > others = believe that too. 

 

I would disagree with the statement of = "short run" ... TPM is practically the only existing = standardised (hardware, software, firmware, measurement - x86 only etc) = hardware root of trust in common use, ie: practically all x86 = machines,  The attestation mechanisms provided are going to be = around for a very long time. 

 

From telco experience, 30 years ago we said = SS7 would only be around in the short = term.

 

> Thus, I am opposed to adoption with the = current TPM-only draft. I=E2=80=99d be OK with the current draft and a = promise > to add EAT to it.

 

Agree

 

Ian

 

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical = Staff

Nokia Bell Labs

+358 50 483 6237

 

From: Laurence Lundblade <lgl@island-resort.com>
Sent: 11 November 2019 00:44
To: Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com>
Cc: Henk Birkholz <henk.birkholz@sit.fraunho= fer.de>; rats@ietf..org = <rats@ietf.org>
Subject: = Re: [Rats] Call for adoption (after draft rename) for Yang module draft =

 

 

On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com> = wrote:

 

So, = Laurence, are you still OK with the adoption of the current draft with a = rename for now?
Thanks, = Nancy

 

I think the value add to = the larger RATS effort of adding EAT support to this YANG protocol is = really high. It a core thing to do that helps bring together the two = attestation worlds and make the TPM and EAT work here less like ships in = the night.

 

Remote TPM attestations are = useful and necessary the short run, but are of very limited capability. = I believe that EAT will replace TPM attestations in the long run (maybe = decades) because they are far more expressive. I know others believe = that too. 

 

If we don=E2=80=99t include = EAT in the YANG mode it is sort of like defining HTTP to only convey = HTML to the exclusion of PDF. We=E2=80=99re defining an attestation = protocol that can only move one kind of attestation even though we have = consensus on what the other one looks like.

 

It seems relatively simple = to add EAT support (or promise to add EAT support). Pretty sure I heard = Henk agree to add it.

 

Thus, I am opposed to = adoption with the current TPM-only draft. I=E2=80=99d be OK with the = current draft and a promise to add EAT to = it.

 

LL

 

<= /div>

 

------=_NextPart_001_01EA_01D59B98.6288BB80-- ------=_NextPart_000_01E9_01D59B98.6288BB80 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTE1MTQzODA2WjAjBgkqhkiG 9w0BCQQxFgQUWouwh2dESTFAzG5TtzxZ3EsdsdwwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAFC6/OAZrnPtkHj3WbnCUezT52hXp3ZT8GihzcYiH/4QTB3pgPr7pM3d1ru1nIE8VX gbpGIsbCuqGpBQBhTGnNamyn8eeDMCzy1aPDaLVIs06RwG7iqfxQUs1GLSDrNzJ4GOLmbuHVlrsn dPdt95tcDkWFRluWxnQNiVgMfauWbp+C6vjHyaxm4LrFEcba58sXW6+g26p22EhhV/Mg3iJVloTb uwyVRVh844chkS+ILiBR1w/2TH4KaduH7/Wjlr94lL1YTZbAZZLPgpBmHCJyXI2G5LxLhAkoySKE JAokYkZ6f8GNabl6Ml0Fgqs4P2VOZCNzXFNGZ3pVdFcQItuwAAAAAAAA ------=_NextPart_000_01E9_01D59B98.6288BB80-- From nobody Fri Nov 15 09:57:20 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3645B12092C for ; Fri, 15 Nov 2019 09:57:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VEuEaPXm8MIU for ; Fri, 15 Nov 2019 09:57:14 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D96D120926 for ; Fri, 15 Nov 2019 09:57:14 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAFHv0fV027655 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 15 Nov 2019 18:57:01 +0100 Received: from [31.133.150.211] (31.133.150.211) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 15 Nov 2019 18:56:54 +0100 To: "Eric Voit (evoit)" , Dave Thaler , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> From: Henk Birkholz Message-ID: Date: Fri, 15 Nov 2019 18:56:50 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.150.211] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 17:57:18 -0000 Hi Dave, I'd like to highlight and elaborate on a very specific topic here: Yes, routers (or network equipment ranging from AS routing to access layer distribution) most defiantly use "IPv4, IPv6, link-layer protocols such as Ethernet, routing protocols, often things like DHCP relay, RADIUS". I am in total agreement with that. This is (in itself) obviously true. I'd dare to say every RATS solution will be using IPv4, IPv6, Industrial/Automotive EtherNet (please note the spelling) and various routing protocols & AAA solutions. That is true, too. I'd like to add to that (with the exception of everything carrying EAP et. al. - that is an interesting path to explore) that it is very obvious that of course layer 2/3 & layer 4 solutions are involved always. But that this natural, yet coincidental, fact has an impact on all of rats RATS - via meaningful, structured synergized solution that are base on these assumption - seems like a non sequitur to me. Please help me understand. Yes, the afore mentioned heterogeneous mix of things is used - literally by basically everything. RATS TUDA for example could use ICMP Echo Requests. Is it possible? In Yokohama we concluded - sure! Is it an academic exercise and therefore a solution looking for a problem - probably yes. What I am trying to say is: DHCP (via options), AAA (via extension) are used in the scope of routing equipment - sure! - and can be augmented with useful and believable evidence/attestation results about trustworthiness about a remote peer. But is that a reason to not pursue the near term target of creating a unified procedure to establish unified trust relationships wrt trustworthiness between interconnected network equipment? No. It is actually very important to do this today. This neither implies niche solutions nor does it imply a lack of extensible later. I am literally confuzzled by the notion that this approach is not addressing an immediate need today in a meaningful manner. Dave, could you please elaborate why this is not useful, or counterproductive, or not in scope? I find your table to be a misrepresentation of the actual current relevance due to its initial column being types of RoT. Please help me to understand what you are trying to say here. Viele Grüße, Henk On 15.11.19 15:38, Eric Voit (evoit) wrote: > *From:* Dave Thaler, November 15, 2019 2:39 AM > > Netconf is not the only protocol supported by routers. > > Routers also support IPv4, IPv6, link-layer protocols such as Ethernet, > routing protocols, often things like DHCP relay, RADIUS, etc. > > Below I would have said " Router/YANG" below rather than > "Router/NETCONF". > > I have not yet seen a compelling reason to use a pull-based mechanism > instead of a push-based mechanism via another protocol the routers > already support. > > Router vendors want push-based mechanisms too.  And NETCONF does > push.  See RFC-8640 and RFC-5277. > > The only reason I’ve heard so far is “because they support netconf and > we’re used to it”, to which the counter argument is as above: > > they support other things too and we’re used to them too. > > There is piles of documentation in the IETF and beyond detailing > the reasoning and extent of consolidation on YANG for network > management.    IETF, IEEE, MEF, OpenConfig, and others forums are > defining these.  I wouldn't expect another anytime soon. > > NETCONF can support YANG. Other transports can support YANG.   The > current draft under an adoption call does not specifically reference > NETCONF. > > In order to know who to pull data from, the Verifier has to have some > indication from the Attester that triggers the attestation request > > indicated as Step 1 in draft-fedorkow-rats-network-device-attestation. > So in reality, there has to be a step before step 1, > > whereby the Attester does something that makes the Attester discoverable > by the Verifier.   That step could have included the EAT or the TPM data > > expressed in the YANG draft, or whatever else, and then you’ve avoided > the need for netconf, and reduced the number of round trips, > > improving latency and bandwidth. > > It is already possible to subscribe to existing proprietary YANG > attestation models.  This requires zero extra round-trips.   The push > can be leave the Attester in <1 sec. > > If there is a compelling reason to support a pull-based mechanism, and > we get consensus that we need it, then great. > > But so far I haven’t heard one. > > A YANG model supports both push and pull.  Application vendors > want a standard attestation model.  That is why you have many network > vendors authoring this YANG draft under the adoption call. > > Honestly I don't understand the push-back.   This should be a no-brainer. > > /Eric > > Dave > > *From:* Laurence Lundblade > > *Sent:* Wednesday, November 13, 2019 10:07 AM > *To:* Dave Thaler > > *Cc:* Smith, Ned >; > Oliver, Ian (Nokia - FI/Espoo) >; Nancy Cam-Winget (ncamwing) > >; rats@ietf.org > ; Henk Birkholz > > *Subject:* Re: [Rats] Call for adoption (after draft rename) for Yang > module draft > > My version of technology bases for attestation is something like this: > > *Router/Netconf World* > > Millions of devices. Currently TPM oriented. Long possible > transition to EAT. YANG used to create very specific fine-grained > interactions. No privacy issues. > > *Web Browser World* > > Billions of devices. Current attestation use is primarily WebAuthN / > FIDO. JWT is used heavily for authentication so would be more EAT > oriented, but TPM attestation is supported in FIDO. Larger use of > attestation may evolve. Fine-grained interactions are with WebAPIs > (Javascript) (sort of parallel to YANG for routers). Big privacy issues. > > *Mobile App World* > > Billions of devices. Main attestation use is Android’s Keystore. > This is EAT-like, but based on X.509. Fine grained interactions are > Android APIs. I may be out of date, but so far IoS doesn’t do > attestation. Privacy issues vary by app. > > *IoT World* > > Billions of devices most likely going to trillions. Attestation is a > critical enabling feature in this world. There are lots of protocols > and formats involved. TPMs are too expensive for many of these, but > are probably in use somewhere. No privacy issues for a large portion > of this world. > > The router world is the smallest, but it is “well represented” because > this is the IETF. > > I see EAT as applicable to all these worlds, where the YANG module is > just for the smallish router world. So I mostly agree with Dave about > proportions, however this is the IETF where YANG modules are created. >  (Maybe I should go join the W3C world and work on attestations APIs > for browsers after RATS is done). > > LL > > On Nov 11, 2019, at 5:43 PM, Dave Thaler > wrote: > > As far as I can understand from > draft-birkholz-rats-basic-yang-module-01 and > > draft-fedorkow-rats-network-device-attestation-01, they break down > the use case > > space as follows: > >                         Requirements? > >          +--------------+---------------+---------++--------------- > >          |  RoT         | Host Firewall | Privacy ||   Solution > >          |  Type        |   Enabled     | Needed  ||    Pieces > >          +--------------+---------------+---------++--------------- > >       1  |  SGX         | No            | No      || > >       2  |  SGX         | No            | Yes     || > >       3  |  SGX         | Yes           | No      || > >       4  |  SGX         | Yes           | Yes     || > >       5  |  TrustZone   | No            | No      || > >       6  |  TrustZone   | No            | Yes     || > >       7  |  TrustZone   | Yes           | No      || > >       8  |  TrustZone   | Yes           | Yes     || > >       9  |  TPM         | No            | No      || > draft-birkholz-rats-basic-yang-module-01 > >      10  |  TPM         | No            | Yes     || > >      11  |  TPM         | Yes           | No      || > >      12  |  TPM         | Yes           | Yes     || > >      13  |SecureElement | No            | No      || > >      14  |SecureElement | No            | Yes     || > >      15  |SecureElement | Yes           | No      || > >      16  |SecureElement | Yes           | Yes     || > >      17  | Firmware     | No            | No      || > >      18  | Firmware     | No            | Yes     || > >      19  | Firmware     | Yes           | No      || > >      20  | Firmware     | Yes           | Yes     || > >      ... |   ...        |               |         || > > And draft-fedorkow-rats-network-device-attestation-01 further scopes > itself down > > by only being applicable to cases with "embedded" apps only = Yes, > and where > > the security policy is only an Exact match against reference values > = Yes. > > I believe that the yang draft doesn't have those two restrictions, > from my reading. > > However, the point is that both drafts are VERY narrow, and in the > table shown above, > > only address 1 out of 20 possibilies in that space. > > In contrast, the TEEP WG decided that it was not interested in > narrow scopings > > (specifically something Global Platform specific), but instead > wanted one general solution. > > If the RATS WG spends effort on something that only addresses a > single row out of 20+ rows, > > then do we expect 19+ other solutions to also be done in the WG?  Or > could we work on things > > that are broader and happen to also work for row 9? > > I've seen others commenting on the fact that the YANG module only > supports TPMs and not > > other things (EATs etc), which would just add support for a couple > more rows, but still not > > be general. > > Personally, I would much rather see the WG spend effort on things > that really are generic, > > i.e., work with or without host firewalls, work with multiple > RoT/TEE types, etc., rather > > than seeing an explosion of point solutions. > > Dave > > *From:* RATS > > *On Behalf Of *Smith, Ned > *Sent:* Monday, November 11, 2019 10:12 AM > *To:* Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade > >; Nancy > Cam-Winget (ncamwing) > > *Cc:* rats@ietf.org ; Henk Birkholz > > > *Subject:* Re: [Rats] Call for adoption (after draft rename) for > Yang module draft > > Right. This implies the RATS “token” should support existing > “binary” formats as an encapsulation (signed by a second TA where > the TPM is a first TA) or as a conveyance (unsigned?) token. > Possibly, the only added value of the latter is a tag that > identifies it as a TPM binary format? > > On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - > FI/Espoo)" on > behalf of ian.oliver@nokia-bell-labs.com > > wrote: > > > Remote TPM attestations are useful and necessary the short run, but are of very limited capability. I believe that > EAT will replace TPM attestations in the long run (maybe decades) because they are far more expressive. I know > others believe that too. > > I would disagree with the statement of "short run" ... TPM is > practically the only existing standardised (hardware, software, > firmware, measurement - x86 only etc) hardware root of trust in > common use, ie: practically all x86 machines,  The attestation > mechanisms provided are going to be around for a very long time. > > From telco experience, 30 years ago we said SS7 would only be > around in the short term. > > > Thus, I am opposed to adoption with the current TPM-only draft. I’d be OK with the current draft and a promise > to add EAT to it. > > Agree > > Ian > > -- > > Dr. Ian Oliver > > Cybersecurity Research > > Distinguished Member of Technical Staff > > Nokia Bell Labs > > +358 50 483 6237 > > ------------------------------------------------------------------------ > > *From:* Laurence Lundblade > > *Sent:* 11 November 2019 00:44 > *To:* Nancy Cam-Winget (ncamwing) > > *Cc:* Henk Birkholz >; rats@ietf..org > > > *Subject:* Re: [Rats] Call for adoption (after draft rename) for > Yang module draft > > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) > > wrote: > > So, Laurence, are you still OK with the adoption of the current > draft with a rename for now? > Thanks, Nancy > > I think the value add to the larger RATS effort of adding EAT > support to this YANG protocol is really high. It a core thing to do > that helps bring together the two attestation worlds and make the > TPM and EAT work here less like ships in the night. > > Remote TPM attestations are useful and necessary the short run, but > are of very limited capability. I believe that EAT will replace TPM > attestations in the long run (maybe decades) because they are far > more expressive. I know others believe that too. > > If we don’t include EAT in the YANG mode it is sort of like defining > HTTP to only convey HTML to the exclusion of PDF. We’re defining an > attestation protocol that can only move one kind of attestation even > though we have consensus on what the other one looks like. > > It seems relatively simple to add EAT support (or promise to add EAT > support). Pretty sure I heard Henk agree to add it. > > Thus, I am opposed to adoption with the current TPM-only draft. I’d > be OK with the current draft and a promise to add EAT to it. > > LL > From nobody Fri Nov 15 10:40:54 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 674C012008C for ; Fri, 15 Nov 2019 10:40:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KrfRpC9skV0P for ; Fri, 15 Nov 2019 10:40:49 -0800 (PST) Received: from p3plsmtpa08-05.prod.phx3.secureserver.net (p3plsmtpa08-05.prod.phx3.secureserver.net [173.201.193.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9877C120013 for ; Fri, 15 Nov 2019 10:40:49 -0800 (PST) Received: from [10.141.0.74] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id VgWWiO3hrcNOHVgWWihbJT; Fri, 15 Nov 2019 11:40:48 -0700 From: Laurence Lundblade Message-Id: <39F4565A-F807-4DB2-B024-6BD2BC906DC5@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_8E29825C-74EC-4FBF-8239-800D8FF80298" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 15 Nov 2019 10:40:48 -0800 In-Reply-To: <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> Cc: "rats@ietf.org" To: "Fuchs, Andreas" References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfMqyTSBm/ho0gpp2waKH1K6Whl5Lrve/DiQyIpuQ5e4vV9AWTDWR0SE+gq7W1EyYt4g3D0YQndT87ARD7ltht1QnjqxebG916XlZiZ8QqvGxcTKZIYvr kNA3PMGvpgwDQ54Dz1zSKnR9XG0imimd/fikJ1ANyijqq8LM00ApP4by9UQAlgmqBOIVoatf8h0KbvdiDUyOvZZg/ZaylYecTW8= Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 18:40:52 -0000 --Apple-Mail=_8E29825C-74EC-4FBF-8239-800D8FF80298 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Andreas, Here=E2=80=99s the frame up as I see it for EAT and FIDO from most = secure to least. I believe EAT implementations can eventually be as = secure as a TPM and we want to design EAT so such high-security = implementations will eventually be in the market. Hardware-Only (No SW!) EAT with a small number of claims (HW Version, HW OEM, boot / debug = state, simple TPM-like measurement) is possible in pure HW.=20 Pretty sure many TPMs are implemented in pure HW. Certifiable to very high levels. FIDO is too complex for pure HW. Secure Element and similar EAT with a lot of claims Simpler FIDO implementations without biometrics. Some may consider this less secure than pure HW because complexity is = higher, but I don=E2=80=99t think there is an absolute rule here. Pretty sure this can be CC certified at the same level as HW only. Separate CPU You can add a CPU like an Arm Cortex M3 to your circuit board or to your = SoC. Some of off-the-shelf CPUs even have some HW defenses (the SC = version of the M3). It can run some super simple SW, simpler than a = secure element. EAT with a lot of claims Most all FIDO I=E2=80=99d peg security and certifiability as somewhere between the = secure element and the TEE depending on the HW design. Both can be = pretty high. TEE, SGX, VBS EAT with a lot of claims Most all FIDO Usually cannot implement advanced HW chip defenses because these are a = mode of super-fast large CPUs and these defense would slow them down to = much and consume too much power. Not certifiable at the same levels as the above, but still certifiable = in pretty thorough ways like the CC-based GP TEE PP (link below) SW complexity is a lot higher so either certification cost is higher or = certification is less thorough Don=E2=80=99t disagree with anything in your latest comment. :-) LL > On Nov 14, 2019, at 8:17 AM, Fuchs, Andreas = wrote: >=20 > We were talking about FIDO as one of many applications running in a = TEE. > They rely on correctness of other TEE-apps and/or the TEE kernel > (or should I rather say TEE operating system). Thus a turing complete = solution > (maybe even with loadable apps) and OS cannot be as secure as a = special-purpose > functional logic security provider. >=20 > Also, by design an on-chip TEE offering cannot be as secure as a = physically > separated chip that incorporates smartcard technologies. You also = highlight > this by providing yubikey as example which is both; a separate SC-like = chip > and fixed functional logic (similar to TPMs). >=20 > To conclude: fixed functional logic and separate chips have higher = assurance > levels than turing-complete (loadable) areas of the main cpu. >=20 > And to your original point: TPMs are the preferred solution for = attestation > in contrast to to a TEE-based approach, just as YubiKeys et al are = preferred > for FIDO in contrast to a TEE-based approach. >=20 > From: Laurence Lundblade [lgl@island-resort.com = ] > Sent: Thursday, November 14, 2019 16:51 > To: Fuchs, Andreas > Cc: rats@ietf.org > Subject: Re: [Rats] FIDO TPM attestation >=20 >=20 >> On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas = > wrote: >>=20 >> The FIDO code running inside a TEE is not standardized (to the level = of TPM) and most certainly not CC-evaluated. >=20 >=20 > That=E2=80=99s not true. >=20 > The=C2=A0FIDO L3 and L3+ Certification program = is CC (Common Criteria) based (AVA_VAN.3 and = AVA_VAN.4). =20 >=20 > Many FIDO authenticators run on secure elements which provides roughly = equivalent security to a TPM, however since the full authenticator = protocol runs on the turing-complete secure element the full FIDO = protocol is secured, not just the key storage. Here=E2=80=99s one = . >=20 > Global Platform offers a CC-based certification program for TEE=E2=80=99= s = . FIDO is working on a certification program that will make use of = that. >=20 > BSI has published a CC-based protection profile for FIDO = . >=20 > Android Keystore=E2=80=99s now supports StrongBox = , which puts the keys = in a secure element. >=20 > Qualcomm=E2=80=99s Snapdragon mobile phone chip has a secure-element = like subsystem = (not the TEE) that is = CC-certified. >=20 > TEE and TEE-like offerings are stronger than they used to be, = particular by supporting memory encryption. >=20 > Turing complete security products come in a range of security levels = all the way up the security level offered by a TPM. EAT implementations = can be just as secure and certified as TPM attestation. >=20 > LL --Apple-Mail=_8E29825C-74EC-4FBF-8239-800D8FF80298 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi Andreas,

Here=E2=80=99s the frame up as I see it for EAT  and = FIDO from most secure to least. I believe EAT implementations can = eventually be as secure as a TPM and we want to design EAT so such = high-security implementations will eventually be in the = market.

Hardware-Only (No SW!)
  • EAT with a small number of claims (HW Version, = HW OEM, boot / debug state, simple TPM-like measurement) is possible in = pure HW. 
  • Pretty sure many TPMs are implemented = in pure HW.
  • Certifiable to very high levels.
  • FIDO is too complex for pure HW.

Secure Element and similar
  • EAT with a lot of claims
  • Simpler FIDO implementations without biometrics.
  • Some may consider this less secure than pure HW because = complexity is higher, but I don=E2=80=99t think there is an absolute = rule here.
  • Pretty sure this can be CC certified at = the same level as HW only.

Separate CPU
You can add a CPU like = an Arm Cortex M3 to your circuit board or to your SoC. Some of = off-the-shelf CPUs even have some HW defenses (the SC version of the = M3). It can run some super simple SW, simpler than a secure = element.
  • EAT= with a lot of claims
  • Most all FIDO
  • I=E2=80=99d peg security and certifiability as somewhere = between the secure element and the TEE depending on the HW design. Both = can be pretty high.


TEE, SGX, VBS
  • EAT with a lot of claims
  • Most all FIDO
  • Usually cannot implement = advanced HW chip defenses because these are a mode of super-fast large = CPUs and these defense would slow them down to much and consume too much = power.
  • Not certifiable at the same levels as the = above, but still certifiable in pretty thorough ways like the CC-based = GP TEE PP (link below)
  • SW complexity is a lot higher = so either certification cost is higher or certification is less = thorough

Don=E2=80=99t disagree with anything in your latest comment. = :-)

LL



On Nov = 14, 2019, at 8:17 AM, Fuchs, Andreas <andreas.fuchs@sit.fraunhofer.de> wrote:

We = were talking about FIDO as one of many applications running in a = TEE.
They rely on correctness of other TEE-apps = and/or the TEE kernel
(or should I rather say TEE = operating system). Thus a turing complete solution
(maybe even with loadable apps) and OS cannot be as secure as = a special-purpose
functional logic security = provider.

Also, = by design an on-chip TEE offering cannot be as secure as a = physically
separated chip that incorporates = smartcard technologies. You also highlight
this by = providing yubikey as example which is both; a separate SC-like = chip
and fixed functional logic (similar to = TPMs).

To = conclude: fixed functional logic and separate chips have higher = assurance
levels than = turing-complete (loadable) areas of the main cpu.
And to your original point: TPMs are = the preferred solution for attestation
in contrast = to to a TEE-based approach, just as YubiKeys et al are = preferred
for FIDO in contrast to a TEE-based = approach.

From: Laurence Lundblade [lgl@island-resort.com]
Sent: Thursday, November 14, 2019 = 16:51
To: Fuchs, Andreas
Cc: rats@ietf.org
Subject: Re: [Rats] FIDO TPM = attestation


On Nov = 14, 2019, at 1:46 AM, Fuchs, Andreas <andreas.fuchs@sit.fraunhofer.de> wrote:

The FIDO code running inside a TEE is not standardized (to the level of = TPM) and most certainly not = CC-evaluated.

That=E2=80=99s not true.

The FIDO L3 and L3+ = Certification program is CC (Common Criteria) based (AVA_VAN.3 = and AVA_VAN.4).  

Many FIDO = authenticators run on secure elements which provides roughly equivalent = security to a TPM, however since the full authenticator protocol runs on = the turing-complete secure element the full FIDO protocol is secured, = not just the key storage. Here=E2=80=99s = one.

Global Platform = offers a CC-based certification program for TEE=E2=80=99s. FIDO = is working on a certification program that will make use of = that.

BSI = has published a CC-based protection profile for = FIDO.

Android Keystore=E2=80=99s now supports StrongBox, which puts = the keys in a secure element.

Qualcomm=E2=80=99s Snapdragon mobile = phone chip has a secure-element like = subsystem (not the TEE) that is CC-certified.

TEE and TEE-like = offerings are stronger than they used to be, particular by supporting = memory encryption.

Turing complete security products come = in a range of security levels all the way up the security level offered = by a TPM. EAT implementations can be just as secure and certified as TPM = attestation.

LL

= --Apple-Mail=_8E29825C-74EC-4FBF-8239-800D8FF80298-- From nobody Fri Nov 15 11:13:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 734EE1209BF for ; Fri, 15 Nov 2019 11:13:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9xY3Uuwuv-nL for ; Fri, 15 Nov 2019 11:13:50 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81114120A3D for ; Fri, 15 Nov 2019 11:13:50 -0800 (PST) Received: from [10.141.0.74] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id Vh2QiucA5MfejVh2SiRd2n; Fri, 15 Nov 2019 12:13:48 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: Date: Fri, 15 Nov 2019 11:13:46 -0800 Cc: "Smith, Ned" , Henk Birkholz , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> To: "Eric Voit (evoit)" X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfH/ktVRj273FyuuHixHX5fb+7jC9vk6GAyKqc5YV+g6I9PgptgtVcRgk/yleJo1AqStEW6eJEy1JphwWIdENACBa44A2SR0qNLWCDBpLNce29f9rr8cj /5XLVLp+30aXGaM15mMmsZTHp42Z91WScVDdhe+Oz3tcHy+jf2F5vaA9G0I1qmk5OeFwvtihTljkN+ISxQYG4n/mmpfrF9HTuYVeW3msUH5ZXXuPGFr2PSDn mrGVkKXBqTo0uTfiMgphSDBmxrJug4Cbv4Ae+MlY7elPxC3GjjhgJZ5L/l3O2fwZ0BFZn7XPmEg/o3XJ0Gb/Wn3DaV7dN8w0qOkWvjYaQYRqUkSoPM5YAeYW Sv5AAkxS0GchykLVimvJNyBl6haGxibszpmQ72BzVFim1dhU7ChM5WdUfypX3vbhbLfpw1sQ Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 19:13:54 -0000 Here=E2=80=99s a try at an analogy of EAT Tokens with X.509 = Certificates. For both the core of the definition is of the signed serialized data = format. A set of fields / claims is defined in the core standard. That = core standard is solely focused on the definition of those fields / = claims and shouldn't get intertwined with other protocol definitions. However, other protocols may decide to have fields that are the same as, = maybe even defined in terms of the fields / claims in the token / = certificate. Those definitions are probably normative references to the = fields / claims in the core token / certificate standard. TLS makes = normative references to PKIX this way in section 4.2.5. I think this is = perfectly reasonable things to do. So, I have no trouble with some EAT claims being used in YANG designs, = but I=E2=80=99d like it to be by reference to EAT. I=E2=80=99d also like = EAT to only use CDDL for the data model and nothing else. I think trying for a single information model that is common to EAT and = YANG designs is too big, too much intertwining and is scary. It will = lead to schedule interlocks between the documents. Another reason is that I view router / YANG use of attestation as only = one (well-represented) use case for EAT. YANG-based use cases = shouldn=E2=80=99t be central to EAT's design. If we were to intertwine = with YANG, maybe we should intertwine with JavaScript and a bunch of IoT = protocols too. LL > On Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) = wrote: >=20 > My belief is that a Relying Party will rarely want the full universe = of signed claims coming from some Attester's chip. We need ways to = pre-filter the results. How would we do this without a model? >=20 > To fill this need, I always hoped that EAT claims could become leafs = of some future YANG data model. This would allow GET and SUBSCRIBE = requests to be made to an Attester. What would be returned to the = Relying Party would be the signed results of interest from some chip = within the Attester. =20 >=20 > I have no position on whether the WG wants to integrate GET and = SUBSCRIBE requests so that they can provision claims are ultimately = placed within the EAT token. >=20 > Eric >=20 >> @Eric Voit (evoit) Is this suggesting that RATS architecture should = define a >> token-like DM structure that is a *request* "token" having only tags >> identifying interesting claims while a *response* "token" would have = claims >> with data values populated? >>=20 >> =EF=BB=BFOn 11/14/19, 8:02 AM, "Eric Voit (evoit)" = wrote: >>=20 >> Hi J=C3=BCrgen, >> Hi Henk, >>=20 >> What routers need is exactly what you said. >> - currently: the retrieval of TPM originated/signed quotes. >> - in the future: the retrieval EAT Tokens >>=20 >> Knowing when to retrieve these items is a function of the value of = specific >> claims inside those structures. For example, I might want to use = RFC-8641 to >> make a YANG Subscription to a router so that I will be pushed the = latest TPM >> quote when a specific PCR changes. For this to work in the router = world, we >> must have the structures of Quotes/Tokens exposed by a YANG model. >>=20 >> Eric >>=20 >>> Hi J=C3=BCrgen, >>>=20 >>> I think this is very useful input. >>>=20 >>> On the list, Laurence and I already started to discuss Claims for = "YANG >>> modeled data" and Claims for "TPM modled data" (referred to as tpm >> tokens >>> recently). >>>=20 >>> The remaining questions are about: What do you think is the >> upcoming/TBD >>> impact on the current YANG module for challenge-response RATS? >>>=20 >>> Leveraging YANG modeled data comes up again and again. Maybe there >> is >>> good approach here. >>>=20 >>> The TPM Interface based YANG Module does not simply convey native >> TPM >>> structure, but decomposes them down the values that are useful and >>> common on the management plane because the building blocks >> themselves >>> have well defined semantics (always ensuring canonical = re-composition). >>>=20 >>> Viele Gr=C3=BC=C3=9Fe, >>>=20 >>> Henk >>>=20 >>> On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: >>>> On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade >> wrote: >>>>>=20 >>>>> I see EAT as applicable to all these worlds, where the YANG module = is >> just >>> for the smallish router world. So I mostly agree with Dave about >> proportions, >>> however this is the IETF where YANG modules are created. (Maybe I >> should >>> go join the W3C world and work on attestations APIs for browsers = after >> RATS >>> is done). >>>>>=20 >>>>=20 >>>> If EAT is the common format for "token", then it does not make = sense >>>> to me to define a YANG version of it. It may make sense to carry = EAT >>>> token over protocols such as NETCONF or RESTCONF and to have a >> YANG >>>> module defining this may make sense for the networking device = world. >>>> This is then a definition of an interaction protocol, but not the >>>> token format itself. >>>>=20 >>>> If EAT is the common format for "token", then it may make sense to = be >>>> able to include "claims" that are YANG defined data. That may be an >>>> extension of the core EAT definition (but EAT would have to allow = for >>>> such an extension to work). There is a lot of formally defined data = in >>>> YANG modules that would be convenient to reuse as claims in a >>>> networking world. >>>>=20 >>>> /js >>>>=20 >>>=20 >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >>=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Fri Nov 15 11:31:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89D18120A97 for ; Fri, 15 Nov 2019 11:31:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hLg4-1qggrdj for ; Fri, 15 Nov 2019 11:31:09 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F201B1209E5 for ; Fri, 15 Nov 2019 11:30:44 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAFJUZVG000567 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 15 Nov 2019 20:30:36 +0100 Received: from [31.133.150.211] (31.133.150.211) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 15 Nov 2019 20:30:30 +0100 To: Laurence Lundblade , "Eric Voit (evoit)" CC: "Smith, Ned" , =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> From: Henk Birkholz Message-ID: <29ab5ec2-789a-fff8-14ac-07ebbf9e918a@sit.fraunhofer.de> Date: Fri, 15 Nov 2019 20:30:25 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.150.211] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 19:31:16 -0000 Hi Laurence, I would like to highlight this quote: > I’d also like EAT to only use CDDL for the data model and nothing else This is a significant change of turn. I would like to get more background about why you are not intending to use CDDL as an information model anymore and also why you think using CDDL as a data model specification is helpful to define Claims. I can see the point that CDDL was not done when CWT was done. And I think that would be a good argument. Alas, I am more at a loss now how we intend to deal with the IM aspect in RATS now. The thing we tried to propose initially was an English description. That did not find consensus and CDDL seemed to be the new approach. What are we doing now, if you are proposing to down-level CDDL to data model again, creates a vacuum. Are we going back to English text es we initially proposed? In retrospect, why are you dropping the approach your were advocating for quite some time? My concern is that this accumulation of changes in a lot of places has the exact opposite effect of expedition - which was the primary incentive for the initial proposal, I think? Having said that, cddl is literally a data definition language. I just think it is hard to argue why we are changing horses do close to the finish line. I do not object on a technical level, I just want to highlight that is a significant change of direction. Viele Grüße, Henk On 15.11.19 20:13, Laurence Lundblade wrote: > Here’s a try at an analogy of EAT Tokens with X.509 Certificates. > > For both the core of the definition is of the signed serialized data format. A set of fields / claims is defined in the core standard. That core standard is solely focused on the definition of those fields / claims and shouldn't get intertwined with other protocol definitions. > > However, other protocols may decide to have fields that are the same as, maybe even defined in terms of the fields / claims in the token / certificate. Those definitions are probably normative references to the fields / claims in the core token / certificate standard. TLS makes normative references to PKIX this way in section 4.2.5. I think this is perfectly reasonable things to do. > > So, I have no trouble with some EAT claims being used in YANG designs, but I’d like it to be by reference to EAT. I’d also like EAT to only use CDDL for the data model and nothing else. > > I think trying for a single information model that is common to EAT and YANG designs is too big, too much intertwining and is scary. It will lead to schedule interlocks between the documents. > > Another reason is that I view router / YANG use of attestation as only one (well-represented) use case for EAT. YANG-based use cases shouldn’t be central to EAT's design. If we were to intertwine with YANG, maybe we should intertwine with JavaScript and a bunch of IoT protocols too. > > LL > > > > >> On Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) wrote: >> >> My belief is that a Relying Party will rarely want the full universe of signed claims coming from some Attester's chip. We need ways to pre-filter the results. How would we do this without a model? >> >> To fill this need, I always hoped that EAT claims could become leafs of some future YANG data model. This would allow GET and SUBSCRIBE requests to be made to an Attester. What would be returned to the Relying Party would be the signed results of interest from some chip within the Attester. >> >> I have no position on whether the WG wants to integrate GET and SUBSCRIBE requests so that they can provision claims are ultimately placed within the EAT token. >> >> Eric >> >>> @Eric Voit (evoit) Is this suggesting that RATS architecture should define a >>> token-like DM structure that is a *request* "token" having only tags >>> identifying interesting claims while a *response* "token" would have claims >>> with data values populated? >>> >>> On 11/14/19, 8:02 AM, "Eric Voit (evoit)" wrote: >>> >>> Hi Jürgen, >>> Hi Henk, >>> >>> What routers need is exactly what you said. >>> - currently: the retrieval of TPM originated/signed quotes. >>> - in the future: the retrieval EAT Tokens >>> >>> Knowing when to retrieve these items is a function of the value of specific >>> claims inside those structures. For example, I might want to use RFC-8641 to >>> make a YANG Subscription to a router so that I will be pushed the latest TPM >>> quote when a specific PCR changes. For this to work in the router world, we >>> must have the structures of Quotes/Tokens exposed by a YANG model. >>> >>> Eric >>> >>>> Hi Jürgen, >>>> >>>> I think this is very useful input. >>>> >>>> On the list, Laurence and I already started to discuss Claims for "YANG >>>> modeled data" and Claims for "TPM modled data" (referred to as tpm >>> tokens >>>> recently). >>>> >>>> The remaining questions are about: What do you think is the >>> upcoming/TBD >>>> impact on the current YANG module for challenge-response RATS? >>>> >>>> Leveraging YANG modeled data comes up again and again. Maybe there >>> is >>>> good approach here. >>>> >>>> The TPM Interface based YANG Module does not simply convey native >>> TPM >>>> structure, but decomposes them down the values that are useful and >>>> common on the management plane because the building blocks >>> themselves >>>> have well defined semantics (always ensuring canonical re-composition). >>>> >>>> Viele Grüße, >>>> >>>> Henk >>>> >>>> On 14.11.19 15:06, Schönwälder, Jürgen wrote: >>>>> On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade >>> wrote: >>>>>> >>>>>> I see EAT as applicable to all these worlds, where the YANG module is >>> just >>>> for the smallish router world. So I mostly agree with Dave about >>> proportions, >>>> however this is the IETF where YANG modules are created. (Maybe I >>> should >>>> go join the W3C world and work on attestations APIs for browsers after >>> RATS >>>> is done). >>>>>> >>>>> >>>>> If EAT is the common format for "token", then it does not make sense >>>>> to me to define a YANG version of it. It may make sense to carry EAT >>>>> token over protocols such as NETCONF or RESTCONF and to have a >>> YANG >>>>> module defining this may make sense for the networking device world. >>>>> This is then a definition of an interaction protocol, but not the >>>>> token format itself. >>>>> >>>>> If EAT is the common format for "token", then it may make sense to be >>>>> able to include "claims" that are YANG defined data. That may be an >>>>> extension of the core EAT definition (but EAT would have to allow for >>>>> such an extension to work). There is a lot of formally defined data in >>>>> YANG modules that would be convenient to reuse as claims in a >>>>> networking world. >>>>> >>>>> /js >>>>> >>>> >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >>> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > From nobody Fri Nov 15 12:25:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D686512008F for ; Fri, 15 Nov 2019 12:25:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DS0JDeuWeEue for ; Fri, 15 Nov 2019 12:25:07 -0800 (PST) Received: from mail-ot1-x332.google.com (mail-ot1-x332.google.com [IPv6:2607:f8b0:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33240120227 for ; Fri, 15 Nov 2019 12:25:07 -0800 (PST) Received: by mail-ot1-x332.google.com with SMTP id 5so9110696otk.1 for ; Fri, 15 Nov 2019 12:25:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=/BlKUHQ2ryP6zt7VOBaOVHMRNJmNsWxUDIX0DQY86H8=; b=Jtqv0W4AURyYx+dgMBivTYeG1QDi3ZnUWxkGIRwiWffyRh5AHCxKto9Yjsgia9cqxR uFwRGhd+DBXfCvpds08gVoDqkaj4gY36cayR3PA2a4zpBpiTiDXOLZGbQ0997R26ZdBk ZXBkEO8afjres+JGIihFLvA9Xmme+fbO60euk/wnN7WQQQXtFyUpmE2CdsgF95/rD5CL 4oua+05WgMqtFHZ42K1anmJ6G2FGInK+J1rvL9u/uOA9PGrX/sBZ++zm6JVo9sSX4huu kHgWtrskQkj5gh3E+tcpIhlsl4DHNXqF9Cw6/mT+JdgBsH4hEe0inY69VdmmEKGBlFKB R94Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=/BlKUHQ2ryP6zt7VOBaOVHMRNJmNsWxUDIX0DQY86H8=; b=YvTq6+0vMgGafspegVzEPBvZmMM3Jy8j3A58JYevPZlxCUb7voqIMRCZGuVB3oj9n3 uRnoCDcEHkyFND+Et3N3P+Bq+2fs0QRbiU4Juqbwa/veCvjMQjPmeeTII/MnRr7yhecH UFtjqz1XrOcMizBWug5fz56LKYnoTosG9NoYeCK2n3lZfFRdk7C9BAzR7JBHBy17/DWd /VmDlZSNu8uZ0xBytCqGS/fcIYKApsJZIb/aBo/ZvfQg9MDaH7W623BZgY88A32KZIL0 U2fi+e/6WtL8qZs8KV+hYvxxjdh26IHpwfZ945yvd5YL5zuZ+8/ATCQt0TylcdSdmMte GtRg== X-Gm-Message-State: APjAAAWxGWxhRVgXuJ8DYVRotdM/lzOMCT4pBHTBpFfjkvs5k4p0RPjX aLxWqfnZw7gdfseyCZdUh/9AwoofggT6cCemQcmUSJTR X-Google-Smtp-Source: APXvYqzFh6PDv6aZXFpmeUEHS9jRXy11ZXgb3xzjliDEF86+NqD3TotCr51fQWYPr9Ya329CPKpWH75hdrZnxPunNZk= X-Received: by 2002:a9d:6841:: with SMTP id c1mr4561718oto.224.1573849506429; Fri, 15 Nov 2019 12:25:06 -0800 (PST) MIME-Version: 1.0 From: Kathleen Moriarty Date: Fri, 15 Nov 2019 15:24:30 -0500 Message-ID: To: rats@ietf.org Content-Type: multipart/alternative; boundary="000000000000c2c060059768645c" Archived-At: Subject: [Rats] Slides - Please send ASAP! X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 20:25:09 -0000 --000000000000c2c060059768645c Content-Type: text/plain; charset="UTF-8" Greetings! If you are planning to present in a RATS session this coming week, please submit your slides to the chairs by Sunday afternoon, Singapore time. -- Best regards, Kathleen --000000000000c2c060059768645c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Greetings!

If you are planning to prese= nt in a RATS session this coming week, please submit your slides to the cha= irs by Sunday afternoon, Singapore time.

--=

Best regards,
Kathleen
--000000000000c2c060059768645c-- From nobody Fri Nov 15 12:46:46 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EA84120130 for ; Fri, 15 Nov 2019 12:46:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ABy6KMhOu3Wv for ; Fri, 15 Nov 2019 12:46:41 -0800 (PST) Received: from p3plsmtpa07-02.prod.phx3.secureserver.net (p3plsmtpa07-02.prod.phx3.secureserver.net [173.201.192.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E78A212006F for ; Fri, 15 Nov 2019 12:46:40 -0800 (PST) Received: from [10.141.0.74] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id ViUIiJ3y3BN3vViUJijvAN; Fri, 15 Nov 2019 13:46:39 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_A7363E08-7525-4573-BC49-ECCB7DAF3CD6" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 15 Nov 2019 12:46:38 -0800 In-Reply-To: <29ab5ec2-789a-fff8-14ac-07ebbf9e918a@sit.fraunhofer.de> Cc: "Eric Voit (evoit)" , "Smith, Ned" , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" To: Henk Birkholz References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> <29ab5ec2-789a-fff8-14ac-07ebbf9e918a@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLarWFX6ArrhIGeix+LfUZ40huJ4bepfw68Qs4ktIo2vuH2c1gcoeUeyh9DDhgmgMcbs6z41Wk4ynIWHvY35FEcizBLjuXwr+QhQBdQtB4csVnmlBqPx jAu8+D9C1PrfaVzipn92uTfm1AAxiNORLd0rEKhazB8HBS6k/NDoqdutsCVm7yczT1jTGghrUDt9kIm86kx+0VXXeea3pXVHoAsk+hJKJfYudBnJPpvTOvwH nAtoKwbCbyPT+nqCRKex7h8vkwHfcFSPpHSIIl4gB12pp8ykH0I7kA77HHNAZTBNfp38dECoIZoDFVEIbCi7GyEed0xV7hc2A3laaQAFH10tog74yMd2Lgln O1W0LGlDakj4N4PZw5pIvw9Cmuly/wPqdIkDhtuCnq/eYCez7VJrEv/kB+YswOSLzQ85oTH/ Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 20:46:45 -0000 --Apple-Mail=_A7363E08-7525-4573-BC49-ECCB7DAF3CD6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I want to do it like the current EAT document (current draft=E2=80=99s = labeling of info and data model aside) Normative definitional text per claim CDDL per claim Largely mechanical rules to go from CDDL to CBOR & JSON. The subtleties of info vs data model escape me (and don=E2=80=99t seem = that critical to me for the work at hand). The main thing I care about = is that we one main definition of a claim that is not replicated and it = can mechanically to go CBOR, JSON and maybe other serializations. You can tell me how to label 1, 2, and 3 however you want and I=E2=80=99ll= probably just use that in the EAT doc. Also, by this I meant >> I=E2=80=99d also like EAT to only use CDDL for the data model and = nothing else no YANG for the primal definition of claims and no YANG in the EAT = document (see my other recent email with the X.509 analogy for = suggestion on how to integrate with YANG expression of claims). LL > On Nov 15, 2019, at 11:30 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > I would like to highlight this quote: >=20 >> I=E2=80=99d also like EAT to only use CDDL for the data model and = nothing else >=20 > This is a significant change of turn. I would like to get more = background about why you are not intending to use CDDL as an information = model anymore and also why you think using CDDL as a data model = specification is helpful to define Claims. >=20 > I can see the point that CDDL was not done when CWT was done. And I = think that would be a good argument. >=20 > Alas, I am more at a loss now how we intend to deal with the IM aspect = in RATS now. The thing we tried to propose initially was an English = description. That did not find consensus and CDDL seemed to be the new = approach. What are we doing now, if you are proposing to down-level CDDL = to data model again, creates a vacuum. Are we going back to English text = es we initially proposed? In retrospect, why are you dropping the = approach your were advocating for quite some time? >=20 > My concern is that this accumulation of changes in a lot of places has = the exact opposite effect of expedition - which was the primary = incentive for the initial proposal, I think? >=20 > Having said that, cddl is literally a data definition language. I just = think it is hard to argue why we are changing horses do close to the = finish line. I do not object on a technical level, I just want to = highlight that is a significant change of direction. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 > On 15.11.19 20:13, Laurence Lundblade wrote: >> Here=E2=80=99s a try at an analogy of EAT Tokens with X.509 = Certificates. >> For both the core of the definition is of the signed serialized data = format. A set of fields / claims is defined in the core standard. That = core standard is solely focused on the definition of those fields / = claims and shouldn't get intertwined with other protocol definitions. >> However, other protocols may decide to have fields that are the same = as, maybe even defined in terms of the fields / claims in the token / = certificate. Those definitions are probably normative references to the = fields / claims in the core token / certificate standard. TLS makes = normative references to PKIX this way in section 4.2.5. I think this is = perfectly reasonable things to do. >> So, I have no trouble with some EAT claims being used in YANG = designs, but I=E2=80=99d like it to be by reference to EAT. I=E2=80=99d = also like EAT to only use CDDL for the data model and nothing else. >> I think trying for a single information model that is common to EAT = and YANG designs is too big, too much intertwining and is scary. It will = lead to schedule interlocks between the documents. >> Another reason is that I view router / YANG use of attestation as = only one (well-represented) use case for EAT. YANG-based use cases = shouldn=E2=80=99t be central to EAT's design. If we were to intertwine = with YANG, maybe we should intertwine with JavaScript and a bunch of IoT = protocols too. >> LL >>> On Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) = wrote: >>>=20 >>> My belief is that a Relying Party will rarely want the full universe = of signed claims coming from some Attester's chip. We need ways to = pre-filter the results. How would we do this without a model? >>>=20 >>> To fill this need, I always hoped that EAT claims could become leafs = of some future YANG data model. This would allow GET and SUBSCRIBE = requests to be made to an Attester. What would be returned to the = Relying Party would be the signed results of interest from some chip = within the Attester. >>>=20 >>> I have no position on whether the WG wants to integrate GET and = SUBSCRIBE requests so that they can provision claims are ultimately = placed within the EAT token. >>>=20 >>> Eric >>>=20 >>>> @Eric Voit (evoit) Is this suggesting that RATS architecture should = define a >>>> token-like DM structure that is a *request* "token" having only = tags >>>> identifying interesting claims while a *response* "token" would = have claims >>>> with data values populated? >>>>=20 >>>> =EF=BB=BFOn 11/14/19, 8:02 AM, "Eric Voit (evoit)" = wrote: >>>>=20 >>>> Hi J=C3=BCrgen, >>>> Hi Henk, >>>>=20 >>>> What routers need is exactly what you said. >>>> - currently: the retrieval of TPM originated/signed quotes. >>>> - in the future: the retrieval EAT Tokens >>>>=20 >>>> Knowing when to retrieve these items is a function of the value = of specific >>>> claims inside those structures. For example, I might want to use = RFC-8641 to >>>> make a YANG Subscription to a router so that I will be pushed the = latest TPM >>>> quote when a specific PCR changes. For this to work in the router = world, we >>>> must have the structures of Quotes/Tokens exposed by a YANG model. >>>>=20 >>>> Eric >>>>=20 >>>>> Hi J=C3=BCrgen, >>>>>=20 >>>>> I think this is very useful input. >>>>>=20 >>>>> On the list, Laurence and I already started to discuss Claims for = "YANG >>>>> modeled data" and Claims for "TPM modled data" (referred to as tpm >>>> tokens >>>>> recently). >>>>>=20 >>>>> The remaining questions are about: What do you think is the >>>> upcoming/TBD >>>>> impact on the current YANG module for challenge-response RATS? >>>>>=20 >>>>> Leveraging YANG modeled data comes up again and again. Maybe there >>>> is >>>>> good approach here. >>>>>=20 >>>>> The TPM Interface based YANG Module does not simply convey native >>>> TPM >>>>> structure, but decomposes them down the values that are useful and >>>>> common on the management plane because the building blocks >>>> themselves >>>>> have well defined semantics (always ensuring canonical = re-composition). >>>>>=20 >>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>=20 >>>>> Henk >>>>>=20 >>>>> On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: >>>>>> On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade >>>> wrote: >>>>>>>=20 >>>>>>> I see EAT as applicable to all these worlds, where the YANG = module is >>>> just >>>>> for the smallish router world. So I mostly agree with Dave about >>>> proportions, >>>>> however this is the IETF where YANG modules are created. (Maybe I >>>> should >>>>> go join the W3C world and work on attestations APIs for browsers = after >>>> RATS >>>>> is done). >>>>>>>=20 >>>>>>=20 >>>>>> If EAT is the common format for "token", then it does not make = sense >>>>>> to me to define a YANG version of it. It may make sense to carry = EAT >>>>>> token over protocols such as NETCONF or RESTCONF and to have a >>>> YANG >>>>>> module defining this may make sense for the networking device = world. >>>>>> This is then a definition of an interaction protocol, but not the >>>>>> token format itself. >>>>>>=20 >>>>>> If EAT is the common format for "token", then it may make sense = to be >>>>>> able to include "claims" that are YANG defined data. That may be = an >>>>>> extension of the core EAT definition (but EAT would have to allow = for >>>>>> such an extension to work). There is a lot of formally defined = data in >>>>>> YANG modules that would be convenient to reuse as claims in a >>>>>> networking world. >>>>>>=20 >>>>>> /js >>>>>>=20 >>>>>=20 >>>>> _______________________________________________ >>>>> RATS mailing list >>>>> RATS@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/rats >>>>=20 >>>=20 >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >=20 --Apple-Mail=_A7363E08-7525-4573-BC49-ECCB7DAF3CD6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = want to do it like the current EAT document (current draft=E2=80=99s = labeling of info and data model aside)
  1. Normative definitional text per = claim
  2. CDDL per claim
  3. Largely = mechanical rules to go from CDDL to CBOR & JSON.

The = subtleties of info vs data model escape me (and don=E2=80=99t seem that = critical to me for the work at hand). The main thing I care about is = that we one main definition of a claim that is not replicated and it can = mechanically to go CBOR, JSON and maybe other serializations.

You can tell me = how to label 1, 2, and 3 however you want and I=E2=80=99ll probably just = use that in the EAT doc.


Also, by this I = meant

I=E2=80=99d also like EAT to only use CDDL for the data model = and nothing else

no YANG for the primal definition of claims and no YANG in = the EAT document (see my other recent email with the X.509 analogy for = suggestion on how to integrate with YANG expression of = claims).

LL




On Nov 15, 2019, at 11:30 AM, Henk Birkholz = <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

I would like to highlight this = quote:

I=E2=80=99d also like EAT to only use CDDL for the data model = and nothing else

This is a = significant change of turn. I would like to get more background about = why you are not intending to use CDDL as an information model anymore = and also why you think using CDDL as a data model specification is = helpful to define Claims.

I can see the = point that CDDL was not done when CWT was done. And I think that would = be a good argument.

Alas, I am more at a = loss now how we intend to deal with the IM aspect in RATS now. The thing = we tried to propose initially was an English description. That did not = find consensus and CDDL seemed to be the new approach. What are we doing = now, if you are proposing to down-level CDDL to data model again, = creates a vacuum. Are we going back to English text es we initially = proposed? In retrospect, why are you dropping the approach your were = advocating for quite some time?

My concern = is that this accumulation of changes in a lot of places has the exact = opposite effect of expedition - which was the primary incentive for the = initial proposal, I think?

Having said = that, cddl is literally a data definition language. I just think it is = hard to argue why we are changing horses do close to the finish line. I = do not object on a technical level, I just want to highlight that is a = significant change of direction.

Viele = Gr=C3=BC=C3=9Fe,

Henk


On 15.11.19 20:13, Laurence Lundblade = wrote:
Here=E2=80=99s = a try at an analogy of EAT Tokens with X.509 Certificates.
For both the core of the definition is of the signed = serialized data format. A set of fields / claims is defined in the core = standard. That core standard is solely focused on the definition of = those fields / claims and shouldn't get intertwined with other protocol = definitions.
However, other protocols may decide to have = fields that are the same as, maybe even defined in terms of the fields =  / claims in the token / certificate. Those definitions are = probably normative references to the fields / claims in the core token / = certificate standard. TLS makes normative references to PKIX this way in = section 4.2.5. I think this is perfectly reasonable things to do.
So, I have no trouble with some EAT claims being used in YANG = designs, but I=E2=80=99d like it to be by reference to EAT. I=E2=80=99d = also like EAT to only use CDDL for the data model and nothing else.
I think trying for a single information model that is common = to EAT and YANG designs is too big, too much intertwining and is scary. = It will lead to schedule interlocks between the documents.
Another reason is that I view router / YANG use of = attestation as only one (well-represented) use case for EAT. YANG-based = use cases shouldn=E2=80=99t be central to EAT's design. If we were to = intertwine with YANG, maybe we should intertwine with JavaScript and a = bunch of IoT protocols too.
LL
On Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) = <evoit@cisco.com> = wrote:

My belief is that a Relying Party = will rarely want the full universe of signed claims coming from some = Attester's chip.   We need ways to pre-filter the results. =  How would we do this without a model?

To fill this need, I always hoped that EAT claims could = become leafs of some future YANG data model.  This would allow GET = and SUBSCRIBE requests to be made to an Attester.  What would be = returned to the Relying Party would be the signed results of interest = from some chip within the Attester.

I have = no position on whether the WG wants to integrate GET and SUBSCRIBE = requests so that they can provision claims are ultimately placed within = the EAT token.

Eric

@Eric Voit (evoit) Is = this suggesting that RATS architecture should define a
token-like DM structure that is a *request* "token" having = only tags
identifying interesting claims while a = *response* "token" would have claims
with data values = populated?

=EF=BB=BFOn 11/14/19, 8:02 AM, = "Eric Voit (evoit)" <evoit@cisco.com> wrote:

=    Hi J=C3=BCrgen,
   Hi = Henk,

   What routers need = is exactly what you said.
    - = currently: the retrieval of TPM originated/signed quotes.
=     - in the future: the retrieval EAT Tokens

   Knowing when to retrieve = these items is a function of the value of specific
claims = inside those structures.  For example, I might want to use RFC-8641 = to
make a YANG Subscription to a router so that I will be = pushed the latest TPM
quote when a specific PCR changes. =  For this to work in the router world, we
must have = the structures of Quotes/Tokens exposed by a YANG model.
   Eric

Hi J=C3=BCrgen,

I think this is very useful input.

On the list, Laurence and I already started to = discuss Claims for "YANG
modeled data" and Claims for "TPM = modled data" (referred to as tpm
tokens
recently).

The remaining questions are about: What do you = think is the
upcoming/TBD
impact on the current = YANG module for challenge-response RATS?

Leveraging YANG modeled data comes up again and again. Maybe = there
is
good approach here.

The TPM Interface based YANG Module does not simply convey = native
TPM
structure, but decomposes them down the values = that are useful and
common on the management plane because = the building blocks
themselves
have well defined = semantics (always ensuring canonical re-composition).

Viele Gr=C3=BC=C3=9Fe,

Henk

On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, = J=C3=BCrgen wrote:
On = Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade
wrote:

I see EAT as applicable to all = these worlds, where the YANG module is
just
for the smallish router = world. So I mostly agree with Dave about
proportions,
however this is the IETF where YANG modules are = created.  (Maybe I
should
go join the W3C world = and work on attestations APIs for browsers after
RATS
is done).


If EAT is the common format for = "token", then it does not make sense
to me to define a = YANG version of it. It may make sense to carry EAT
token = over protocols such as NETCONF or RESTCONF and to have a
YANG
module = defining this may make sense for the networking device world.
This is then a definition of an interaction protocol, but not = the
token format itself.

If = EAT is the common format for "token", then it may make sense to be
able to include "claims" that are YANG defined data. That may = be an
extension of the core EAT definition (but EAT would = have to allow for
such an extension to work). There is a = lot of formally defined data in
YANG modules that would be = convenient to reuse as claims in a
networking world.

/js


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


= --Apple-Mail=_A7363E08-7525-4573-BC49-ECCB7DAF3CD6-- From nobody Fri Nov 15 14:23:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D1571208D1 for ; Fri, 15 Nov 2019 14:23:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=j6KV1hLR; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=0mlj+Xeu Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cSNFFUBDU9IR for ; Fri, 15 Nov 2019 14:23:26 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81327120864 for ; Fri, 15 Nov 2019 14:23:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=31945; q=dns/txt; s=iport; t=1573856606; x=1575066206; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=+Fpd4oMqkF9tU13VTCQDhoUqn2VgJnahvvmv4mCAmhU=; b=j6KV1hLR6WeTA6Rh5uTMrXurRaXIsoZ78MrCK6rVyaYdJfrIkr6pGNPA z6BbOWdYJ8mYyz2f19B/zBOHjvCWv645CelFdgY+g/Z6zTQeKmT6XvOn8 tAW4l4bmKEgQc0EaQ/HcxVGF4/tl5Mi0S/z7+3n8Kfa6NsAuANAVWuMps I=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AB5A50BV1HHNtxE1+qkzKZbn0S8PV8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSANWJ8OpK3uzRta2oGXcN55qMqjgjSNRNTF?= =?us-ascii?q?dE7KdehAk8GIiAAEz/IuTtank3AsNDSHdu/mqwNg5eH8OtL1A=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B/AAABJM9d/5tdJa1kGgEBAQEBAQE?= =?us-ascii?q?BAQMBAQEBEQEBAQICAQEBAYFtAgEBAQELAYEbLyQsBWwrLSAECyoKhB+DRgO?= =?us-ascii?q?Kc06CEJgAgUKBEANUAgcBAQEJAwEBGAEKCgIBAYRAAoIjJDcGDgIDCwEBBAE?= =?us-ascii?q?BAQIBBQRthTcMhVEBAQEBAwEBEAsGChMBASwLAQ8CAQYCDgQDDwETBwMCAgI?= =?us-ascii?q?lCxQDDgIEAQ0FCAYUgwGBeU0DHw8BAgyVDJBkAoE4iGB1gTKCfgEBBYUgGII?= =?us-ascii?q?QBwMGgTYBgVKKQhiBQD+BEUaCTD6CYgEBgS4BEgEhFRYJgloygiyPWjmPCo4?= =?us-ascii?q?ebgqCKoNNgjSPZ5oOjkiaCAIEAgQFAg4BAQWBaCNncXAVO4JsUBEUgjeOYww?= =?us-ascii?q?Xg1CFFIU/dAGBJ44WgSIBgQ4BAQ?= X-IronPort-AV: E=Sophos;i="5.68,309,1569283200"; d="p7s'?scan'208,217";a="651994889" Received: from rcdn-core-4.cisco.com ([173.37.93.155]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 15 Nov 2019 22:23:24 +0000 Received: from XCH-RCD-006.cisco.com (xch-rcd-006.cisco.com [173.37.102.16]) by rcdn-core-4.cisco.com (8.15.2/8.15.2) with ESMTPS id xAFMNOu8007088 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 15 Nov 2019 22:23:24 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-006.cisco.com (173.37.102.16) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 15 Nov 2019 16:23:24 -0600 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Fri, 15 Nov 2019 17:23:22 -0500 Received: from NAM04-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Fri, 15 Nov 2019 16:23:22 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ntks2HdHtCt9iH651nIjIzgMKlTqRXou1wSzBHiBQO96OFOGzlL//OlNZbu/N25xmx1a9mMWE+V+pEUfmx5Y/nnxtGcNGvD8zVs3Sy8z43i9rBmWVu3YkSmj6X1wDVw4Jhqgzr7eFlH19JHCikYd56rKPSvbqJYwEloPC8XBLKlv8IM58RLiEFpa11mUhYMN9m4+i8y5RRIEYghoSlyvni5mL/bQhgfss+4UZPTjRBqfwqYXkksaj5WPh6F0pDavqvWaZQgeiqjQVpPrgHPesxVCOIOY7d0VewyDm/ihsEoKq8BelSSO0vrySJQhfaSdECUbvq2gVykSdNemhKcF3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cmWVyfwrr6Zx/FGvQaVp63jRCTCeSQaVjQUDFz+H1ew=; b=er/V1ZCF961DKRIs3KH6dFfhBUAoXzlFn3Q6uck87u3kR7HhrmW30mZSEbIevvrqDdrHWsIB8S/uampAbS8cLbexuw6ClSO4hHq7W3jJqwS6XAw0+aFkiqXFF9C4o/+oCVqxgbkIadGWgdEvsaZoZWWXozt2wEPOwL5UdRTc1H1o8u5uacv1sd3OzAKDgIqBKz6Pt3hCkAO0JCgnz62kHTTIPVAagi0Nx9sVv1+rlWYYBHtqKLSDxjJtOxoh3mdGD7fMtbQUo8N4Gcllsdtn3Bcx81XjFVyB7f7/m6TOFFZk/k+i/zpNxZ0fXPneTKI07i02DjkInzGKGSiI8E0lBQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cmWVyfwrr6Zx/FGvQaVp63jRCTCeSQaVjQUDFz+H1ew=; b=0mlj+Xeu4FGJ+vIQ4z/20NYV9bEHqzsbJGLoDK82Tc5veP3j7cqdmlLWDPparRdArJAemd8NfFHLRah8EdSnGn5BnI1MnKXVfvdggqDqAOCqgjKMk25Nws5luGTovu8VwyXb5d5nQ0hU09qsrRdr1UNMK28obkxORJ3dYebEKws= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3497.namprd11.prod.outlook.com (20.177.219.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23; Fri, 15 Nov 2019 22:23:21 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2451.029; Fri, 15 Nov 2019 22:23:21 +0000 From: "Eric Voit (evoit)" To: Laurence Lundblade , Henk Birkholz CC: "Smith, Ned" , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVmvyW8/lytau3hU+AhCwtIdg/0aeKzjHAgABIPICAAABN4IABhOcAgAAEp4CAABVMAIAAA4fw Date: Fri, 15 Nov 2019 22:23:21 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> <29ab5ec2-789a-fff8-14ac-07ebbf9e918a@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [173.38.117.91] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 4dc8d594-157e-404c-cae3-08d76a1a6c33 x-ms-traffictypediagnostic: DM6PR11MB3497: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:883; x-forefront-prvs: 02229A4115 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(376002)(39860400002)(346002)(396003)(136003)(366004)(189003)(199004)(51444003)(54906003)(71190400001)(71200400001)(316002)(76176011)(561944003)(26005)(76116006)(966005)(6246003)(3846002)(74316002)(186003)(256004)(66616009)(86362001)(33656002)(6506007)(486006)(4326008)(478600001)(102836004)(25786009)(229853002)(6436002)(14444005)(446003)(14454004)(11346002)(53546011)(476003)(7736002)(7696005)(66476007)(52536014)(81166006)(790700001)(6116002)(8676002)(81156014)(5660300002)(66946007)(66574012)(99286004)(6306002)(110136005)(606006)(9686003)(54896002)(66066001)(236005)(55016002)(66556008)(64756008)(2906002)(66446008)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3497; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: mL2yJ96jdvw/mRcETPht6pMa3FDewbDwAv4BJXE7YjahvrrZXuJ76G8Z46phWaUBuCyPoSGiZcEA6kcomh3x9PfZvw00sZUmlQ6XqntlTS1JOKywmc58MSH5Y+fH34rmV99tTgxEv11qR6ew+7YBz5/L0J+KevUVIcnM4gmLQgHW4FzubyB0g+tcw6K3wFztsZfVqO4q5mgWpFL2Rt/uaKyKpuVz0tuVghCAoGrp1WuZRDOVKS2HIpopYbju1b2gcr7JIttgJg4pj2wKN66j2eTc1gKcJuUgDL4S+oTILHnUKSCPxX4VdE8Wrj36VdoqAR2ZA/Mc3hjZM5Fdc4AyisQdCPKPTNrGJWI5zv6/cm94BkYcFdoaZ36lVaMC5vOkG2aOfAnTPYvJeXguexKgAzicm2Jkj2xiAIqVkQSXbpNTI5HE0SP0B/HLSRzf/wyA Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0424_01D59BD8.D2774250" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 4dc8d594-157e-404c-cae3-08d76a1a6c33 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Nov 2019 22:23:21.2652 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: AOrI9QdYmUXNCnV+crY9dUS9ThRtNxQjGgzgw2Ym2kwuCDMgG/jkbKLgGufVYiLe X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3497 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.16, xch-rcd-006.cisco.com X-Outbound-Node: rcdn-core-4.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Nov 2019 22:23:30 -0000 ------=_NextPart_000_0424_01D59BD8.D2774250 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0425_01D59BD8.D2774250" ------=_NextPart_001_0425_01D59BD8.D2774250 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Laurence Lundblade, November 15, 2019 3:47 PM To: Henk Birkholz =20 I want to do it like the current EAT document (current draft=E2=80=99s = labeling of info and data model aside) 1. Normative definitional text per claim 2. CDDL per claim 3. Largely mechanical rules to go from CDDL to CBOR & JSON. =20 The subtleties of info vs data model escape me (and don=E2=80=99t seem = that critical to me for the work at hand). The main thing I care about = is that we one main definition of a claim that is not replicated and it = can mechanically to go CBOR, JSON and maybe other serializations. =20 You can tell me how to label 1, 2, and 3 however you want and = I=E2=80=99ll probably just use that in the EAT doc. =20 =20 Also, by this I meant =20 I=E2=80=99d also like EAT to only use CDDL for the data model and = nothing else =20 no YANG for the primal definition of claims and no YANG in the EAT = document (see my other recent email with the X.509 analogy for = suggestion on how to integrate with YANG expression of claims). =20 This is fine with me. Let's expose EAT claims within YANG objects when = somebody needs this. =20 Eric =20 =20 LL =20 =20 =20 On Nov 15, 2019, at 11:30 AM, Henk Birkholz = > wrote: =20 Hi Laurence, I would like to highlight this quote: I=E2=80=99d also like EAT to only use CDDL for the data model and = nothing else This is a significant change of turn. I would like to get more = background about why you are not intending to use CDDL as an information = model anymore and also why you think using CDDL as a data model = specification is helpful to define Claims. I can see the point that CDDL was not done when CWT was done. And I = think that would be a good argument. Alas, I am more at a loss now how we intend to deal with the IM aspect = in RATS now. The thing we tried to propose initially was an English = description. That did not find consensus and CDDL seemed to be the new = approach. What are we doing now, if you are proposing to down-level CDDL = to data model again, creates a vacuum. Are we going back to English text = es we initially proposed? In retrospect, why are you dropping the = approach your were advocating for quite some time? My concern is that this accumulation of changes in a lot of places has = the exact opposite effect of expedition - which was the primary = incentive for the initial proposal, I think? Having said that, cddl is literally a data definition language. I just = think it is hard to argue why we are changing horses do close to the = finish line. I do not object on a technical level, I just want to = highlight that is a significant change of direction. Viele Gr=C3=BC=C3=9Fe, Henk On 15.11.19 20:13, Laurence Lundblade wrote: Here=E2=80=99s a try at an analogy of EAT Tokens with X.509 = Certificates. For both the core of the definition is of the signed serialized data = format. A set of fields / claims is defined in the core standard. That = core standard is solely focused on the definition of those fields / = claims and shouldn't get intertwined with other protocol definitions. However, other protocols may decide to have fields that are the same as, = maybe even defined in terms of the fields / claims in the token / = certificate. Those definitions are probably normative references to the = fields / claims in the core token / certificate standard. TLS makes = normative references to PKIX this way in section 4.2.5. I think this is = perfectly reasonable things to do. So, I have no trouble with some EAT claims being used in YANG designs, = but I=E2=80=99d like it to be by reference to EAT. I=E2=80=99d also like = EAT to only use CDDL for the data model and nothing else. I think trying for a single information model that is common to EAT and = YANG designs is too big, too much intertwining and is scary. It will = lead to schedule interlocks between the documents. Another reason is that I view router / YANG use of attestation as only = one (well-represented) use case for EAT. YANG-based use cases = shouldn=E2=80=99t be central to EAT's design. If we were to intertwine = with YANG, maybe we should intertwine with JavaScript and a bunch of IoT = protocols too. LL On Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) > wrote: My belief is that a Relying Party will rarely want the full universe of = signed claims coming from some Attester's chip. We need ways to = pre-filter the results. How would we do this without a model? To fill this need, I always hoped that EAT claims could become leafs of = some future YANG data model. This would allow GET and SUBSCRIBE = requests to be made to an Attester. What would be returned to the = Relying Party would be the signed results of interest from some chip = within the Attester. I have no position on whether the WG wants to integrate GET and = SUBSCRIBE requests so that they can provision claims are ultimately = placed within the EAT token. Eric @Eric Voit (evoit) Is this suggesting that RATS architecture should = define a token-like DM structure that is a *request* "token" having only tags identifying interesting claims while a *response* "token" would have = claims with data values populated? =EF=BB=BFOn 11/14/19, 8:02 AM, "Eric Voit (evoit)" > wrote: Hi J=C3=BCrgen, Hi Henk, What routers need is exactly what you said. - currently: the retrieval of TPM originated/signed quotes. - in the future: the retrieval EAT Tokens Knowing when to retrieve these items is a function of the value of = specific claims inside those structures. For example, I might want to use = RFC-8641 to make a YANG Subscription to a router so that I will be pushed the latest = TPM quote when a specific PCR changes. For this to work in the router = world, we must have the structures of Quotes/Tokens exposed by a YANG model. Eric Hi J=C3=BCrgen, I think this is very useful input. On the list, Laurence and I already started to discuss Claims for "YANG modeled data" and Claims for "TPM modled data" (referred to as tpm tokens recently). The remaining questions are about: What do you think is the upcoming/TBD impact on the current YANG module for challenge-response RATS? Leveraging YANG modeled data comes up again and again. Maybe there is good approach here. The TPM Interface based YANG Module does not simply convey native TPM structure, but decomposes them down the values that are useful and common on the management plane because the building blocks themselves have well defined semantics (always ensuring canonical re-composition). Viele Gr=C3=BC=C3=9Fe, Henk On 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen wrote: On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade wrote: I see EAT as applicable to all these worlds, where the YANG module is just for the smallish router world. So I mostly agree with Dave about proportions, however this is the IETF where YANG modules are created. (Maybe I should go join the W3C world and work on attestations APIs for browsers after RATS is done). =20 If EAT is the common format for "token", then it does not make sense to me to define a YANG version of it. It may make sense to carry EAT token over protocols such as NETCONF or RESTCONF and to have a YANG module defining this may make sense for the networking device world. This is then a definition of an interaction protocol, but not the token format itself. If EAT is the common format for "token", then it may make sense to be able to include "claims" that are YANG defined data. That may be an extension of the core EAT definition (but EAT would have to allow for such an extension to work). There is a lot of formally defined data in YANG modules that would be convenient to reuse as claims in a networking world. /js _______________________________________________ RATS mailing list RATS@ietf.org =20 https://www.ietf.org/mailman/listinfo/rats =20 _______________________________________________ RATS mailing list RATS@ietf.org =20 https://www.ietf.org/mailman/listinfo/rats =20 =20 ------=_NextPart_001_0425_01D59BD8.D2774250 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

From: Laurence Lundblade, November 15, 2019 = 3:47 PM
To: Henk Birkholz = <henk.birkholz@sit.fraunhofer.de>

 

I want to do = it like the current EAT document (current draft=E2=80=99s labeling of = info and data model aside)

  1. Normative definitional text per claim
  2. CDDL per claim
  3. Largely mechanical rules to go from CDDL to CBOR & = JSON.

 

The subtleties of info vs data model escape me (and = don=E2=80=99t seem that critical to me for the work at hand). The main = thing I care about is that we one main definition of a claim that is not = replicated and it can mechanically to go CBOR, JSON and maybe other = serializations.

 

You can tell me how to label 1, 2, and 3 however you = want and I=E2=80=99ll probably just use that in the EAT = doc.

 

 

Also, by this I meant

 

I=E2=80=99d also like EAT to only use CDDL for the = data model and nothing else

 

no YANG for the primal definition of claims and no = YANG in the EAT document (see my other recent email with the X.509 = analogy for suggestion on how to integrate with YANG expression of = claims).

 

This is fine with = me.=C2=A0 Let's expose EAT claims within YANG objects when somebody = needs this.

 

Eric

 

 

LL

 

 

 



On Nov 15, 2019, at 11:30 AM, Henk Birkholz <henk.birkholz@sit.fraunho= fer.de> wrote:

 

Hi = Laurence,

I would like to highlight this = quote:


I=E2=80=99d also like EAT to only use CDDL for the = data model and nothing else


This is a significant change of turn. I would like = to get more background about why you are not intending to use CDDL as an = information model anymore and also why you think using CDDL as a data = model specification is helpful to define Claims.

I can see the = point that CDDL was not done when CWT was done. And I think that would = be a good argument.

Alas, I am more at a loss now how we intend = to deal with the IM aspect in RATS now. The thing we tried to propose = initially was an English description. That did not find consensus and = CDDL seemed to be the new approach. What are we doing now, if you are = proposing to down-level CDDL to data model again, creates a vacuum. Are = we going back to English text es we initially proposed? In retrospect, = why are you dropping the approach your were advocating for quite some = time?

My concern is that this accumulation of changes in a lot of = places has the exact opposite effect of expedition - which was the = primary incentive for the initial proposal, I think?

Having said = that, cddl is literally a data definition language. I just think it is = hard to argue why we are changing horses do close to the finish line. I = do not object on a technical level, I just want to highlight that is a = significant change of direction.

Viele = Gr=C3=BC=C3=9Fe,

Henk


On 15.11.19 20:13, Laurence = Lundblade wrote:

Here=E2=80=99s a try at an analogy of EAT Tokens with = X.509 Certificates.
For both the core of the definition is of the = signed serialized data format. A set of fields / claims is defined in = the core standard. That core standard is solely focused on the = definition of those fields / claims and shouldn't get intertwined with = other protocol definitions.
However, other protocols may decide to = have fields that are the same as, maybe even defined in terms of the = fields  / claims in the token / certificate. Those definitions are = probably normative references to the fields / claims in the core token / = certificate standard. TLS makes normative references to PKIX this way in = section 4.2.5. I think this is perfectly reasonable things to do.
So, = I have no trouble with some EAT claims being used in YANG designs, but = I=E2=80=99d like it to be by reference to EAT. I=E2=80=99d also like EAT = to only use CDDL for the data model and nothing else.
I think trying = for a single information model that is common to EAT and YANG designs is = too big, too much intertwining and is scary. It will lead to schedule = interlocks between the documents.
Another reason is that I view = router / YANG use of attestation as only one (well-represented) use case = for EAT. YANG-based use cases shouldn=E2=80=99t be central to EAT's = design. If we were to intertwine with YANG, maybe we should intertwine = with JavaScript and a bunch of IoT protocols = too.
LL

On = Nov 14, 2019, at 12:42 PM, Eric Voit (evoit) <evoit@cisco.com> wrote:

My = belief is that a Relying Party will rarely want the full universe of = signed claims coming from some Attester's chip.   We need ways = to pre-filter the results.  How would we do this without a = model?

To fill this need, I always hoped that EAT claims could = become leafs of some future YANG data model.  This would allow GET = and SUBSCRIBE requests to be made to an Attester.  What would be = returned to the Relying Party would be the signed results of interest = from some chip within the Attester.

I have no position on whether = the WG wants to integrate GET and SUBSCRIBE requests so that they can = provision claims are ultimately placed within the EAT = token.

Eric


@Eric Voit (evoit) Is this suggesting that RATS = architecture should define a
token-like DM structure that is a = *request* "token" having only tags
identifying interesting = claims while a *response* "token" would have claims
with = data values populated?

=EF=BB=BFOn 11/14/19, 8:02 AM, "Eric = Voit (evoit)" <evoit@cisco.com> = wrote:

   Hi J=C3=BCrgen,
   Hi = Henk,

   What routers need is exactly what you = said.
    - currently: the retrieval of TPM = originated/signed quotes.
    - in the future: = the retrieval EAT Tokens

   Knowing when to = retrieve these items is a function of the value of specific
claims = inside those structures.  For example, I might want to use RFC-8641 = to
make a YANG Subscription to a router so that I will be pushed the = latest TPM
quote when a specific PCR changes.  For this to work = in the router world, we
must have the structures of Quotes/Tokens = exposed by a YANG = model.

   Eric


Hi = J=C3=BCrgen,

I think this is very useful input.

On the = list, Laurence and I already started to discuss Claims for = "YANG
modeled data" and Claims for "TPM modled = data" (referred to as tpm

tokens

recently).

The remaining questions are about: = What do you think is the

upcoming/TBD

impact on the current YANG module for = challenge-response RATS?

Leveraging YANG modeled data comes up = again and again. Maybe there

is

good = approach here.

The TPM Interface based YANG Module does not = simply convey native

TPM

structure, but decomposes them down the values that = are useful and
common on the management plane because the building = blocks

themselves

have = well defined semantics (always ensuring canonical = re-composition).

Viele Gr=C3=BC=C3=9Fe,

Henk

On = 14.11.19 15:06, Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen = wrote:

On = Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence = Lundblade

wrote:


I see EAT as applicable to all these worlds, where = the YANG module = is

just

for = the smallish router world. So I mostly agree with Dave = about

proportions,

however this is the IETF where YANG modules are = created.  (Maybe I

should

go = join the W3C world and work on attestations APIs for browsers = after

RATS

is = done).

 


If EAT is the common format for "token", = then it does not make sense
to me to define a YANG version of it. It = may make sense to carry EAT
token over protocols such as NETCONF or = RESTCONF and to have a

YANG

module defining this may make sense for = the networking device world.
This is then a definition of an = interaction protocol, but not the
token format itself.

If EAT = is the common format for "token", then it may make sense to = be
able to include "claims" that are YANG defined data. = That may be an
extension of the core EAT definition (but EAT would = have to allow for
such an extension to work). There is a lot of = formally defined data in
YANG modules that would be convenient to = reuse as claims in a
networking = world.

/js


_______________________________________________
= RATS mailing list
RATS@ietf.org
https://www.ietf.org/= mailman/listinfo/rats

 


_______________________________________________
= RATS mailing list
RATS@ietf.org
https://www.ietf.org/= mailman/listinfo/rats

 

 

------=_NextPart_001_0425_01D59BD8.D2774250-- ------=_NextPart_000_0424_01D59BD8.D2774250 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTE1MjIxOTIyWjAjBgkqhkiG 9w0BCQQxFgQUUhAYlj/f0kqVbMtuf8yMCWKG1A8wSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAVqBXALb7Owlg/zSiF1zYyDV63MD6M7yGGERoq8i9/6L5jIJGoSJw4dpwpHvXYS93n s0dRpdTMeXBBg2hsBkg6kbMCv0T4uz3G8z3oCB8WZFIkc0UQ7GarE0DJ2tWAD6Valgoxse2T4IGb jeu6hOdG+DICzhLW2rCYXW3yuG4SngOGA8a75Atz5ejDdLrRCk5ioVDgS+xdCNFDj+Z4gQ9Ldnng OSRM66YKxHIXuoP2sHn+T3bF24zPNYakcrh0E8SnTfnHBuQnAp+dv0zQkQH0MxWNFdK0mTTg6WA5 QKdsliG1YFooX6r61zuhC2Ns+5xM47RK/tlW/5BhCycbSpUvAAAAAAAA ------=_NextPart_000_0424_01D59BD8.D2774250-- From nobody Fri Nov 15 16:58:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E372120088 for ; Fri, 15 Nov 2019 16:58:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vhPkot_eF084 for ; Fri, 15 Nov 2019 16:58:44 -0800 (PST) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92D55120052 for ; Fri, 15 Nov 2019 16:58:40 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2019 16:58:39 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,310,1569308400"; d="scan'208,217";a="208574469" Received: from orsmsx102.amr.corp.intel.com ([10.22.225.129]) by orsmga006.jf.intel.com with ESMTP; 15 Nov 2019 16:58:39 -0800 Received: from orsmsx124.amr.corp.intel.com (10.22.240.120) by ORSMSX102.amr.corp.intel.com (10.22.225.129) with Microsoft SMTP Server (TLS) id 14.3.439.0; Fri, 15 Nov 2019 16:58:39 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX124.amr.corp.intel.com ([169.254.2.83]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 16:58:39 -0800 From: "Smith, Ned" To: Laurence Lundblade , "Fuchs, Andreas" CC: "rats@ietf.org" Thread-Topic: [Rats] FIDO TPM attestation Thread-Index: AQHVmdgWfl9UYBF/L0GX4QO5u8BdHaeK8xUAgABl/wCAAAd9AIABukAA///jdAA= Date: Sat, 16 Nov 2019 00:58:38 +0000 Message-ID: References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> <39F4565A-F807-4DB2-B024-6BD2BC906DC5@island-resort.com> In-Reply-To: <39F4565A-F807-4DB2-B024-6BD2BC906DC5@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.107] Content-Type: multipart/alternative; boundary="_000_DEEF16A1024047139C397C590744493Fintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 00:58:47 -0000 --_000_DEEF16A1024047139C397C590744493Fintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyB0aHJlYWQgaWxsdXN0cmF0ZXMgdGhlIG5lZWQgZm9yIGF0dGVzdGF0aW9uLiBCdXQgYWxz byB0aGUgbmVlZCBmb3IgcHJvdmVuYW5jZSAob2YgdGhlIGF0dGVzdGluZyBlbnZpcm9ubWVudCku DQoNClRoZXJlIGFyZSBtYW55IHdheXMgdG8gaW1wbGVtZW50IOKAnHNlY3VyaXR54oCdIHRoYXQg aGF2ZSBkaWZmZXJlbnQgdHJ1c3R3b3J0aGluZXNzIHByb3BlcnRpZXMuDQoNClJBVFMgY2xhaW1z IGRlZmluaXRpb24gbWlnaHQgY29uc2lkZXIgaG93IGJlc3QgdG8gZXhwcmVzcyBzdWNoIHByb3Bl cnRpZXMuIEZvciBleGFtcGxlLCBpZiBpdCBpcyBDQyBjZXJ0aWZpZWQuDQoNCkF0dGVzdGF0aW9u IGZ1bmN0aW9uYWxpdHkgKGFuZCBub3RoaW5nIG1vcmU/KSBpZGVhbGx5IGlzIGhlbGQgdG8gdGhl IGhpZ2hlc3Qgc3RhbmRhcmRzIGZvciBjb3JyZWN0IGltcGxlbWVudGF0aW9uIGFuZCBkZXNpZ24g c28gdGhhdCBpdCBjYW4gYmUgdHJ1c3RlZCB0byByZXBvcnQgb24gdGhlIHRhcmdldCBvZiBhdHRl c3RhdGlvbi4NCg0KSWYgd2UgcmVmZXIgdG8gdGhlIOKAnEF0dGVzdGF0aW9uIGZ1bmN0aW9uYWxp dHnigJ0gYXMgdGhlIOKAnGF0dGVzdGluZyBlbnZpcm9ubWVudOKAnSBhbmQgdGhlIHRhcmdldCBv ZiBhdHRlc3RhdGlvbiBhcyB0aGUg4oCcYXR0ZXN0ZWQgZW52aXJvbm1lbnTigJ0gdGhlbiBSQVRT IGRyYWZ0cyBjYW4gZGlzdGluZ3Vpc2ggYmV0d2VlbiB3aGljaCBjbGFpbXMgYXJlIOKAnHRydXN0 ZWTigJ0gdnMgd2hpY2ggY2xhaW1zIGFyZSDigJxhdHRlc3RlZOKAnSBieSBhIGdpdmVuIGVuZHBv aW50Lg0KDQpTb21ldGhpbmcgbGlrZSBhIHZlbmRvciBpc3N1ZWQgY2VydGlmaWNhdGUgKHdpdGgg ZW1iZWRkZWQgcHJpdmF0ZSBrZXkpIGlzIGEgd2F5IHRvIHByb3ZpZGUgcHJvdmVuYW5jZSBvZiB0 aGUgYXR0ZXN0aW5nIGVudmlyb25tZW50IGFuZCBhbiBvcHBvcnR1bml0eSB0byBpbmNsdWRlIHRy dXN0d29ydGhpbmVzcyBjbGFpbXMgKGUuZy4gQ0MgY2VydGlmaWVkKS4gVGhlc2UgY2xhaW1zIGNh biBiZSBhc3NlcnRlZCBieSBhIHZlbmRvciwgYnkgaW5jbHVkaW5nIHRoZW0gaW4gc29tZXRoaW5n IHNpZ25lZCBieSB0aGUgdmVuZG9yIChlLmcuIGNlcnRpZmljYXRlLCBtYW5pZmVzdCkuIEdpdmVu IFJBVFMgV0cgaGFzIGRlY2lkZWQgdG8gd2FpdCB0byBkZWZpbmUgY2xhaW1zIGZvciDigJxhdHRl c3RpbmcgZW52aXJvbm1lbnRz4oCdIOKAkyBzaW5jZSB0aGV5IGFyZSBjbGFpbXMgYXNzZXJ0ZWQg YnkgdmVuZG9ycyAvIG1hbnVmYWN0dXJlcnMuIE1heWJlIHRoYXQgd29yayBpc27igJl0IGEgaGln aCBwcmlvcml0eS4NCg0KSW4gZWl0aGVyIGNhc2UsIGl0IGRvZXNu4oCZdCBtYWtlIHNlbnNlIGZv ciBSQVRTIFdHIChvdXRzaWRlIG9mIGdhaW5pbmcgdGVjaG5pY2FsIGNvbnRleHQpIHRvIHJhdGlv bmFsaXplIHdoaWNoIHRlY2hub2xvZ3kgaXMgbW9yZS9sZXNzIHNlY3VyZS4gVGhpcyBpcyBhIHBv bGljeSBkZWNpc2lvbiBhcHBsaWVkIGJ5IFZlcmlmaWVycyBhbmQgUmVseWluZyBQYXJ0aWVzLiBS QVRTIFdHIHNob3VsZCB0aGluayBhYm91dCB3aGF0IGNsYWltcyBzaG91bGQgYmUgZXhwcmVzc2Vk IGFuZCBob3cgYmVzdCB0byBpbnN0YW50aWF0ZSB0aGVtIElNSE8uDQoNCi1OZWQNCg0KRnJvbTog UkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgTGF1cmVuY2UgTHVuZGJs YWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+DQpEYXRlOiBGcmlkYXksIE5vdmVtYmVyIDE1LCAy MDE5IGF0IDEwOjQxIEFNDQpUbzogIkZ1Y2hzLCBBbmRyZWFzIiA8YW5kcmVhcy5mdWNoc0BzaXQu ZnJhdW5ob2Zlci5kZT4NCkNjOiAicmF0c0BpZXRmLm9yZyIgPHJhdHNAaWV0Zi5vcmc+DQpTdWJq ZWN0OiBSZTogW1JhdHNdIEZJRE8gVFBNIGF0dGVzdGF0aW9uDQoNCkhpIEFuZHJlYXMsDQoNCkhl cmXigJlzIHRoZSBmcmFtZSB1cCBhcyBJIHNlZSBpdCBmb3IgRUFUICBhbmQgRklETyBmcm9tIG1v c3Qgc2VjdXJlIHRvIGxlYXN0LiBJIGJlbGlldmUgRUFUIGltcGxlbWVudGF0aW9ucyBjYW4gZXZl bnR1YWxseSBiZSBhcyBzZWN1cmUgYXMgYSBUUE0gYW5kIHdlIHdhbnQgdG8gZGVzaWduIEVBVCBz byBzdWNoIGhpZ2gtc2VjdXJpdHkgaW1wbGVtZW50YXRpb25zIHdpbGwgZXZlbnR1YWxseSBiZSBp biB0aGUgbWFya2V0Lg0KDQpIYXJkd2FyZS1Pbmx5IChObyBTVyEpDQrCtyAgICAgICAgIEVBVCB3 aXRoIGEgc21hbGwgbnVtYmVyIG9mIGNsYWltcyAoSFcgVmVyc2lvbiwgSFcgT0VNLCBib290IC8g ZGVidWcgc3RhdGUsIHNpbXBsZSBUUE0tbGlrZSBtZWFzdXJlbWVudCkgaXMgcG9zc2libGUgaW4g cHVyZSBIVy4NCsK3ICAgICAgICAgUHJldHR5IHN1cmUgbWFueSBUUE1zIGFyZSBpbXBsZW1lbnRl ZCBpbiBwdXJlIEhXLg0KwrcgICAgICAgICBDZXJ0aWZpYWJsZSB0byB2ZXJ5IGhpZ2ggbGV2ZWxz Lg0KwrcgICAgICAgICBGSURPIGlzIHRvbyBjb21wbGV4IGZvciBwdXJlIEhXLg0KDQpTZWN1cmUg RWxlbWVudCBhbmQgc2ltaWxhcg0KwrcgICAgICAgICBFQVQgd2l0aCBhIGxvdCBvZiBjbGFpbXMN CsK3ICAgICAgICAgU2ltcGxlciBGSURPIGltcGxlbWVudGF0aW9ucyB3aXRob3V0IGJpb21ldHJp Y3MuDQrCtyAgICAgICAgIFNvbWUgbWF5IGNvbnNpZGVyIHRoaXMgbGVzcyBzZWN1cmUgdGhhbiBw dXJlIEhXIGJlY2F1c2UgY29tcGxleGl0eSBpcyBoaWdoZXIsIGJ1dCBJIGRvbuKAmXQgdGhpbmsg dGhlcmUgaXMgYW4gYWJzb2x1dGUgcnVsZSBoZXJlLg0KwrcgICAgICAgICBQcmV0dHkgc3VyZSB0 aGlzIGNhbiBiZSBDQyBjZXJ0aWZpZWQgYXQgdGhlIHNhbWUgbGV2ZWwgYXMgSFcgb25seS4NCg0K U2VwYXJhdGUgQ1BVDQpZb3UgY2FuIGFkZCBhIENQVSBsaWtlIGFuIEFybSBDb3J0ZXggTTMgdG8g eW91ciBjaXJjdWl0IGJvYXJkIG9yIHRvIHlvdXIgU29DLiBTb21lIG9mIG9mZi10aGUtc2hlbGYg Q1BVcyBldmVuIGhhdmUgc29tZSBIVyBkZWZlbnNlcyAodGhlIFNDIHZlcnNpb24gb2YgdGhlIE0z KS4gSXQgY2FuIHJ1biBzb21lIHN1cGVyIHNpbXBsZSBTVywgc2ltcGxlciB0aGFuIGEgc2VjdXJl IGVsZW1lbnQuDQrCtyAgICAgICAgIEVBVCB3aXRoIGEgbG90IG9mIGNsYWltcw0KwrcgICAgICAg ICBNb3N0IGFsbCBGSURPDQrCtyAgICAgICAgIEnigJlkIHBlZyBzZWN1cml0eSBhbmQgY2VydGlm aWFiaWxpdHkgYXMgc29tZXdoZXJlIGJldHdlZW4gdGhlIHNlY3VyZSBlbGVtZW50IGFuZCB0aGUg VEVFIGRlcGVuZGluZyBvbiB0aGUgSFcgZGVzaWduLiBCb3RoIGNhbiBiZSBwcmV0dHkgaGlnaC4N Cg0KDQpURUUsIFNHWCwgVkJTDQrCtyAgICAgICAgIEVBVCB3aXRoIGEgbG90IG9mIGNsYWltcw0K wrcgICAgICAgICBNb3N0IGFsbCBGSURPDQrCtyAgICAgICAgIFVzdWFsbHkgY2Fubm90IGltcGxl bWVudCBhZHZhbmNlZCBIVyBjaGlwIGRlZmVuc2VzIGJlY2F1c2UgdGhlc2UgYXJlIGEgbW9kZSBv ZiBzdXBlci1mYXN0IGxhcmdlIENQVXMgYW5kIHRoZXNlIGRlZmVuc2Ugd291bGQgc2xvdyB0aGVt IGRvd24gdG8gbXVjaCBhbmQgY29uc3VtZSB0b28gbXVjaCBwb3dlci4NCsK3ICAgICAgICAgTm90 IGNlcnRpZmlhYmxlIGF0IHRoZSBzYW1lIGxldmVscyBhcyB0aGUgYWJvdmUsIGJ1dCBzdGlsbCBj ZXJ0aWZpYWJsZSBpbiBwcmV0dHkgdGhvcm91Z2ggd2F5cyBsaWtlIHRoZSBDQy1iYXNlZCBHUCBU RUUgUFAgKGxpbmsgYmVsb3cpDQrCtyAgICAgICAgIFNXIGNvbXBsZXhpdHkgaXMgYSBsb3QgaGln aGVyIHNvIGVpdGhlciBjZXJ0aWZpY2F0aW9uIGNvc3QgaXMgaGlnaGVyIG9yIGNlcnRpZmljYXRp b24gaXMgbGVzcyB0aG9yb3VnaA0KDQpEb27igJl0IGRpc2FncmVlIHdpdGggYW55dGhpbmcgaW4g eW91ciBsYXRlc3QgY29tbWVudC4gOi0pDQoNCkxMDQoNCg0KDQoNCk9uIE5vdiAxNCwgMjAxOSwg YXQgODoxNyBBTSwgRnVjaHMsIEFuZHJlYXMgPGFuZHJlYXMuZnVjaHNAc2l0LmZyYXVuaG9mZXIu ZGU8bWFpbHRvOmFuZHJlYXMuZnVjaHNAc2l0LmZyYXVuaG9mZXIuZGU+PiB3cm90ZToNCg0KV2Ug d2VyZSB0YWxraW5nIGFib3V0IEZJRE8gYXMgb25lIG9mIG1hbnkgYXBwbGljYXRpb25zIHJ1bm5p bmcgaW4gYSBURUUuDQpUaGV5IHJlbHkgb24gY29ycmVjdG5lc3Mgb2Ygb3RoZXIgVEVFLWFwcHMg YW5kL29yIHRoZSBURUUga2VybmVsDQoob3Igc2hvdWxkIEkgcmF0aGVyIHNheSBURUUgb3BlcmF0 aW5nIHN5c3RlbSkuIFRodXMgYSB0dXJpbmcgY29tcGxldGUgc29sdXRpb24NCihtYXliZSBldmVu IHdpdGggbG9hZGFibGUgYXBwcykgYW5kIE9TIGNhbm5vdCBiZSBhcyBzZWN1cmUgYXMgYSBzcGVj aWFsLXB1cnBvc2UNCmZ1bmN0aW9uYWwgbG9naWMgc2VjdXJpdHkgcHJvdmlkZXIuDQoNCkFsc28s IGJ5IGRlc2lnbiBhbiBvbi1jaGlwIFRFRSBvZmZlcmluZyBjYW5ub3QgYmUgYXMgc2VjdXJlIGFz IGEgcGh5c2ljYWxseQ0Kc2VwYXJhdGVkIGNoaXAgdGhhdCBpbmNvcnBvcmF0ZXMgc21hcnRjYXJk IHRlY2hub2xvZ2llcy4gWW91IGFsc28gaGlnaGxpZ2h0DQp0aGlzIGJ5IHByb3ZpZGluZyB5dWJp a2V5IGFzIGV4YW1wbGUgd2hpY2ggaXMgYm90aDsgYSBzZXBhcmF0ZSBTQy1saWtlIGNoaXANCmFu ZCBmaXhlZCBmdW5jdGlvbmFsIGxvZ2ljIChzaW1pbGFyIHRvIFRQTXMpLg0KDQpUbyBjb25jbHVk ZTogZml4ZWQgZnVuY3Rpb25hbCBsb2dpYyBhbmQgc2VwYXJhdGUgY2hpcHMgaGF2ZSBoaWdoZXIg YXNzdXJhbmNlDQpsZXZlbHMgdGhhbiB0dXJpbmctY29tcGxldGUgKGxvYWRhYmxlKSBhcmVhcyBv ZiB0aGUgbWFpbiBjcHUuDQoNCkFuZCB0byB5b3VyIG9yaWdpbmFsIHBvaW50OiBUUE1zIGFyZSB0 aGUgcHJlZmVycmVkIHNvbHV0aW9uIGZvciBhdHRlc3RhdGlvbg0KaW4gY29udHJhc3QgdG8gdG8g YSBURUUtYmFzZWQgYXBwcm9hY2gsIGp1c3QgYXMgWXViaUtleXMgZXQgYWwgYXJlIHByZWZlcnJl ZA0KZm9yIEZJRE8gaW4gY29udHJhc3QgdG8gYSBURUUtYmFzZWQgYXBwcm9hY2guDQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpGcm9tOiBMYXVyZW5jZSBMdW5kYmxhZGUgW2xn bEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPl0NClNlbnQ6 IFRodXJzZGF5LCBOb3ZlbWJlciAxNCwgMjAxOSAxNjo1MQ0KVG86IEZ1Y2hzLCBBbmRyZWFzDQpD YzogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0 c10gRklETyBUUE0gYXR0ZXN0YXRpb24NCg0KT24gTm92IDE0LCAyMDE5LCBhdCAxOjQ2IEFNLCBG dWNocywgQW5kcmVhcyA8YW5kcmVhcy5mdWNoc0BzaXQuZnJhdW5ob2Zlci5kZTxtYWlsdG86YW5k cmVhcy5mdWNoc0BzaXQuZnJhdW5ob2Zlci5kZT4+IHdyb3RlOg0KDQpUaGUgRklETyBjb2RlIHJ1 bm5pbmcgaW5zaWRlIGEgVEVFIGlzIG5vdCBzdGFuZGFyZGl6ZWQgKHRvIHRoZSBsZXZlbCBvZiBU UE0pIGFuZCBtb3N0IGNlcnRhaW5seSBub3QgQ0MtZXZhbHVhdGVkLg0KDQpUaGF04oCZcyBub3Qg dHJ1ZS4NCg0KVGhlIEZJRE8gTDMgYW5kIEwzKyBDZXJ0aWZpY2F0aW9uIHByb2dyYW08aHR0cHM6 Ly9maWRvYWxsaWFuY2Uub3JnL2NlcnRpZmljYXRpb24vYXV0aGVudGljYXRvci1jZXJ0aWZpY2F0 aW9uLWxldmVscy9hdXRoZW50aWNhdG9yLWxldmVsLTMvPiBpcyBDQyAoQ29tbW9uIENyaXRlcmlh KSBiYXNlZCAoQVZBX1ZBTi4zIGFuZCBBVkFfVkFOLjQpLg0KDQpNYW55IEZJRE8gYXV0aGVudGlj YXRvcnMgcnVuIG9uIHNlY3VyZSBlbGVtZW50cyB3aGljaCBwcm92aWRlcyByb3VnaGx5IGVxdWl2 YWxlbnQgc2VjdXJpdHkgdG8gYSBUUE0sIGhvd2V2ZXIgc2luY2UgdGhlIGZ1bGwgYXV0aGVudGlj YXRvciBwcm90b2NvbCBydW5zIG9uIHRoZSB0dXJpbmctY29tcGxldGUgc2VjdXJlIGVsZW1lbnQg dGhlIGZ1bGwgRklETyBwcm90b2NvbCBpcyBzZWN1cmVkLCBub3QganVzdCB0aGUga2V5IHN0b3Jh Z2UuIEhlcmXigJlzIG9uZTxodHRwczovL3d3dy55dWJpY28uY29tL3Byb2R1Y3RzL3l1YmlrZXkt aGFyZHdhcmUveXViaWtleSUyMG5lby8+Lg0KDQpHbG9iYWwgUGxhdGZvcm0gb2ZmZXJzIGEgQ0Mt YmFzZWQgY2VydGlmaWNhdGlvbiBwcm9ncmFtIGZvciBURUXigJlzPGh0dHBzOi8vd3d3LmNvbW1v bmNyaXRlcmlhcG9ydGFsLm9yZy9maWxlcy9wcGZpbGVzL2Fuc3NpLXByb2ZpbF9QUC0yMDE0XzAx LnBkZj4uIEZJRE8gaXMgd29ya2luZyBvbiBhIGNlcnRpZmljYXRpb24gcHJvZ3JhbSB0aGF0IHdp bGwgbWFrZSB1c2Ugb2YgdGhhdC4NCg0KQlNJIGhhcyBwdWJsaXNoZWQgYSBDQy1iYXNlZCBwcm90 ZWN0aW9uIHByb2ZpbGUgZm9yIEZJRE88aHR0cHM6Ly93d3cuY29tbW9uY3JpdGVyaWFwb3J0YWwu b3JnL2ZpbGVzL3BwZmlsZXMvcHAwMDk2YV9wZGYucGRmPi4NCg0KQW5kcm9pZCBLZXlzdG9yZeKA mXMgbm93IHN1cHBvcnRzIFN0cm9uZ0JveDxodHRwczovL3Byb2FuZHJvaWRkZXYuY29tL2FuZHJv aWQta2V5c3RvcmUtd2hhdC1pcy10aGUtZGlmZmVyZW5jZS1iZXR3ZWVuLXN0cm9uZ2JveC1hbmQt aGFyZHdhcmUtYmFja2VkLWtleXMtNGMyNzZlYTc4ZmQwPiwgd2hpY2ggcHV0cyB0aGUga2V5cyBp biBhIHNlY3VyZSBlbGVtZW50Lg0KDQpRdWFsY29tbeKAmXMgU25hcGRyYWdvbiBtb2JpbGUgcGhv bmUgY2hpcCBoYXMgYSBzZWN1cmUtZWxlbWVudCBsaWtlIHN1YnN5c3RlbTxodHRwczovL3d3dy5x dWFsY29tbS5jb20vbmV3cy9yZWxlYXNlcy8yMDE5LzA2LzI1L3F1YWxjb21tLXNuYXBkcmFnb24t ODU1LWJlY29tZXMtZmlyc3QtbW9iaWxlLXNvYy1yZWNlaXZlLXNtYXJ0LWNhcmQ+IChub3QgdGhl IFRFRSkgdGhhdCBpcyBDQy1jZXJ0aWZpZWQuDQoNClRFRSBhbmQgVEVFLWxpa2Ugb2ZmZXJpbmdz IGFyZSBzdHJvbmdlciB0aGFuIHRoZXkgdXNlZCB0byBiZSwgcGFydGljdWxhciBieSBzdXBwb3J0 aW5nIG1lbW9yeSBlbmNyeXB0aW9uLg0KDQpUdXJpbmcgY29tcGxldGUgc2VjdXJpdHkgcHJvZHVj dHMgY29tZSBpbiBhIHJhbmdlIG9mIHNlY3VyaXR5IGxldmVscyBhbGwgdGhlIHdheSB1cCB0aGUg c2VjdXJpdHkgbGV2ZWwgb2ZmZXJlZCBieSBhIFRQTS4gRUFUIGltcGxlbWVudGF0aW9ucyBjYW4g YmUganVzdCBhcyBzZWN1cmUgYW5kIGNlcnRpZmllZCBhcyBUUE0gYXR0ZXN0YXRpb24uDQoNCkxM DQoNCg0K --_000_DEEF16A1024047139C397C590744493Fintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAw IDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRo IjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIg NDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwg ZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6 bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNv SHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBs ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9y bWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1t YXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxT dHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQN Cgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFn ZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGlu IDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0K LyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MjEyMzUzNjYx Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxOTQ2NjkyNzA7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBO ZXciOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iO30NCkBsaXN0IGww OmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1s ZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDoy LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2Rpbmdz O30NCkBsaXN0IGwwOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNp LWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxl dmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74KnOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4w cHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZl bC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDo0LjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30N CkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjI4OTI5MDIzMTsNCgltc28tbGlzdC10ZW1wbGF0ZS1p ZHM6MjAyNTUxNjM3MDt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBs aXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWJpZGktZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxp c3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3Qt aWQ6MTQyMTIxOTMxNTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTkyMDIzMDU3Mjt9DQpAbGlz dCBsMjpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwyOmxldmVsMg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21h biI7fQ0KQGxpc3QgbDI6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6 bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6bGV2ZWw1DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7 fQ0KQGxpc3QgbDI6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6bGV2 ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDI6bGV2ZWw5DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDMNCgl7bXNvLWxpc3QtaWQ6MjA0MzI0MzY0NDsNCgltc28t bGlzdC10ZW1wbGF0ZS1pZHM6MTMxNDMwMTgyMDt9DQpAbGlzdCBsMzpsZXZlbDENCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1p bHk6U3ltYm9sO30NCkBsaXN0IGwzOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpi dWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJ bXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDM6bGV2ZWwz DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw0DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxp c3QgbDM6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw3DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0KQGxpc3QgbDM6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7 bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHls ZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQi IHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0 IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgdGhyZWFkIGls bHVzdHJhdGVzIHRoZSBuZWVkIGZvciBhdHRlc3RhdGlvbi4gQnV0IGFsc28gdGhlIG5lZWQgZm9y IHByb3ZlbmFuY2UgKG9mIHRoZSBhdHRlc3RpbmcgZW52aXJvbm1lbnQpLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5UaGVyZSBhcmUgbWFueSB3YXlzIHRvIGltcGxlbWVudCDigJxzZWN1cml0eeKA nSB0aGF0IGhhdmUgZGlmZmVyZW50IHRydXN0d29ydGhpbmVzcyBwcm9wZXJ0aWVzLg0KPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlJBVFMgY2xhaW1zIGRlZmluaXRpb24gbWlnaHQgY29uc2lkZXIg aG93IGJlc3QgdG8gZXhwcmVzcyBzdWNoIHByb3BlcnRpZXMuIEZvciBleGFtcGxlLCBpZiBpdCBp cyBDQyBjZXJ0aWZpZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkF0dGVzdGF0aW9uIGZ1bmN0 aW9uYWxpdHkgKGFuZCBub3RoaW5nIG1vcmU/KSBpZGVhbGx5IGlzIGhlbGQgdG8gdGhlIGhpZ2hl c3Qgc3RhbmRhcmRzIGZvciBjb3JyZWN0IGltcGxlbWVudGF0aW9uIGFuZCBkZXNpZ24gc28gdGhh dCBpdCBjYW4gYmUgdHJ1c3RlZCB0byByZXBvcnQgb24gdGhlIHRhcmdldCBvZiBhdHRlc3RhdGlv bi4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JZiB3ZSByZWZlciB0byB0aGUg4oCcQXR0ZXN0 YXRpb24gZnVuY3Rpb25hbGl0eeKAnSBhcyB0aGUg4oCcYXR0ZXN0aW5nIGVudmlyb25tZW504oCd IGFuZCB0aGUgdGFyZ2V0IG9mIGF0dGVzdGF0aW9uIGFzIHRoZSDigJxhdHRlc3RlZCBlbnZpcm9u bWVudOKAnSB0aGVuIFJBVFMgZHJhZnRzIGNhbiBkaXN0aW5ndWlzaCBiZXR3ZWVuIHdoaWNoIGNs YWltcyBhcmUg4oCcdHJ1c3RlZOKAnSB2cyB3aGljaCBjbGFpbXMgYXJlIOKAnGF0dGVzdGVk4oCd DQogYnkgYSBnaXZlbiBlbmRwb2ludC4gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNvbWV0aGlu ZyBsaWtlIGEgdmVuZG9yIGlzc3VlZCBjZXJ0aWZpY2F0ZSAod2l0aCBlbWJlZGRlZCBwcml2YXRl IGtleSkgaXMgYSB3YXkgdG8gcHJvdmlkZSBwcm92ZW5hbmNlIG9mIHRoZSBhdHRlc3RpbmcgZW52 aXJvbm1lbnQgYW5kIGFuIG9wcG9ydHVuaXR5IHRvIGluY2x1ZGUgdHJ1c3R3b3J0aGluZXNzIGNs YWltcyAoZS5nLiBDQyBjZXJ0aWZpZWQpLiBUaGVzZSBjbGFpbXMgY2FuIGJlIGFzc2VydGVkIGJ5 DQogYSB2ZW5kb3IsIGJ5IGluY2x1ZGluZyB0aGVtIGluIHNvbWV0aGluZyBzaWduZWQgYnkgdGhl IHZlbmRvciAoZS5nLiBjZXJ0aWZpY2F0ZSwgbWFuaWZlc3QpLiBHaXZlbiBSQVRTIFdHIGhhcyBk ZWNpZGVkIHRvIHdhaXQgdG8gZGVmaW5lIGNsYWltcyBmb3Ig4oCcYXR0ZXN0aW5nIGVudmlyb25t ZW50c+KAnSDigJMgc2luY2UgdGhleSBhcmUgY2xhaW1zIGFzc2VydGVkIGJ5IHZlbmRvcnMgLyBt YW51ZmFjdHVyZXJzLiBNYXliZSB0aGF0IHdvcmsgaXNu4oCZdCBhDQogaGlnaCBwcmlvcml0eS4g PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIGVpdGhlciBjYXNlLCBpdCBkb2VzbuKAmXQgbWFr ZSBzZW5zZSBmb3IgUkFUUyBXRyAob3V0c2lkZSBvZiBnYWluaW5nIHRlY2huaWNhbCBjb250ZXh0 KSB0byByYXRpb25hbGl6ZSB3aGljaCB0ZWNobm9sb2d5IGlzIG1vcmUvbGVzcyBzZWN1cmUuIFRo aXMgaXMgYSBwb2xpY3kgZGVjaXNpb24gYXBwbGllZCBieSBWZXJpZmllcnMgYW5kIFJlbHlpbmcg UGFydGllcy4gUkFUUyBXRyBzaG91bGQgdGhpbmsgYWJvdXQNCiB3aGF0IGNsYWltcyBzaG91bGQg YmUgZXhwcmVzc2VkIGFuZCBob3cgYmVzdCB0byBpbnN0YW50aWF0ZSB0aGVtIElNSE8uPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi1OZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2Vz QGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNs YW5kLXJlc29ydC5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPkZyaWRheSwgTm92ZW1iZXIgMTUs IDIwMTkgYXQgMTA6NDEgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90O0Z1Y2hzLCBBbmRyZWFzJnF1 b3Q7ICZsdDthbmRyZWFzLmZ1Y2hzQHNpdC5mcmF1bmhvZmVyLmRlJmd0Ozxicj4NCjxiPkNjOiA8 L2I+JnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZndDs8YnI+DQo8 Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSBGSURPIFRQTSBhdHRlc3RhdGlvbjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IaSBBbmRyZWFzLDxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkhlcmXigJlzIHRo ZSBmcmFtZSB1cCBhcyBJIHNlZSBpdCBmb3IgRUFUICZuYnNwO2FuZCBGSURPIGZyb20gbW9zdCBz ZWN1cmUgdG8gbGVhc3QuIEkgYmVsaWV2ZSBFQVQgaW1wbGVtZW50YXRpb25zIGNhbiBldmVudHVh bGx5IGJlIGFzIHNlY3VyZSBhcyBhIFRQTSBhbmQgd2Ugd2FudCB0byBkZXNpZ24gRUFUIHNvIHN1 Y2ggaGlnaC1zZWN1cml0eSBpbXBsZW1lbnRhdGlvbnMgd2lsbA0KIGV2ZW50dWFsbHkgYmUgaW4g dGhlIG1hcmtldC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48Yj5IYXJkd2FyZS1Pbmx5IChObyBTVyEpPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50 Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5FQVQgd2l0aCBhIHNt YWxsIG51bWJlciBvZiBjbGFpbXMgKEhXIFZlcnNpb24sIEhXIE9FTSwgYm9vdCAvIGRlYnVnIHN0 YXRlLCBzaW1wbGUgVFBNLWxpa2UgbWVhc3VyZW1lbnQpIGlzIHBvc3NpYmxlIGluIHB1cmUgSFcu Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6 MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lm ICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9u dDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5k aWZdPlByZXR0eSBzdXJlIG1hbnkgVFBNcyBhcmUgaW1wbGVtZW50ZWQgaW4gcHVyZSBIVy48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0 LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48 c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+Q2VydGlm aWFibGUgdG8gdmVyeSBoaWdoIGxldmVscy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAg bGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3Jl Ij7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+RklETyBpcyB0b28gY29tcGxleCBmb3IgcHVyZSBIVy48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj5TZWN1cmUg RWxlbWVudCBhbmQgc2ltaWxhcjwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47 bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNv LWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+RUFUIHdpdGggYSBsb3Qgb2YgY2xh aW1zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4w aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwxIGxldmVsMSBsZm8yIj4NCjwhW2lmICFz dXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5 bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3 LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZd PlNpbXBsZXIgRklETyBpbXBsZW1lbnRhdGlvbnMgd2l0aG91dCBiaW9tZXRyaWNzLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5k ZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3Rz XT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFu IHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5Tb21lIG1heSBj b25zaWRlciB0aGlzIGxlc3Mgc2VjdXJlIHRoYW4gcHVyZSBIVyBiZWNhdXNlIGNvbXBsZXhpdHkg aXMgaGlnaGVyLCBidXQgSSBkb27igJl0IHRoaW5rIHRoZXJlIGlzIGFuIGFic29sdXRlIHJ1bGUg aGVyZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDox LjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPg0KPCFbaWYg IXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250 OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRp Zl0+UHJldHR5IHN1cmUgdGhpcyBjYW4gYmUgQ0MgY2VydGlmaWVkIGF0IHRoZSBzYW1lIGxldmVs IGFzIEhXIG9ubHkuPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48Yj5TZXBhcmF0ZSBDUFU8L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+WW91IGNhbiBhZGQgYSBD UFUgbGlrZSBhbiBBcm0gQ29ydGV4IE0zIHRvIHlvdXIgY2lyY3VpdCBib2FyZCBvciB0byB5b3Vy IFNvQy4gU29tZSBvZiBvZmYtdGhlLXNoZWxmIENQVXMgZXZlbiBoYXZlIHNvbWUgSFcgZGVmZW5z ZXMgKHRoZSBTQyB2ZXJzaW9uIG9mIHRoZSBNMykuIEl0IGNhbiBydW4gc29tZSBzdXBlciBzaW1w bGUgU1csIHNpbXBsZXIgdGhhbiBhIHNlY3VyZQ0KIGVsZW1lbnQuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4 dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwyIGxldmVsMSBsZm8zIj4NCjwhW2lmICFzdXBwb3J0 TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+ PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkVBVCB3 aXRoIGEgbG90IG9mIGNsYWltczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMiBsZXZlbDEg bGZvMyI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PC9zcGFuPjwhW2VuZGlmXT5Nb3N0IGFsbCBGSURPPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0 OmwyIGxldmVsMSBsZm8zIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Okln bm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPknigJlkIHBlZyBzZWN1cml0eSBhbmQgY2VydGlm aWFiaWxpdHkgYXMgc29tZXdoZXJlIGJldHdlZW4gdGhlIHNlY3VyZSBlbGVtZW50IGFuZCB0aGUg VEVFIGRlcGVuZGluZyBvbiB0aGUgSFcgZGVzaWduLiBCb3RoIGNhbiBiZSBwcmV0dHkgaGlnaC48 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPlRFRSwgU0dYLCBWQlM8L2I+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4t bGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzQiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxl PSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48 IVtlbmRpZl0+RUFUIHdpdGggYSBsb3Qgb2YgY2xhaW1zPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1s aXN0OmwzIGxldmVsMSBsZm80Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0K PC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPk1vc3QgYWxsIEZJRE88bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDot LjI1aW47bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzQiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+VXN1YWxseSBjYW5ub3Qg aW1wbGVtZW50IGFkdmFuY2VkIEhXIGNoaXAgZGVmZW5zZXMgYmVjYXVzZSB0aGVzZSBhcmUgYSBt b2RlIG9mIHN1cGVyLWZhc3QgbGFyZ2UgQ1BVcyBhbmQgdGhlc2UgZGVmZW5zZSB3b3VsZCBzbG93 IHRoZW0gZG93biB0byBtdWNoIGFuZCBjb25zdW1lIHRvbyBtdWNoIHBvd2VyLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50 Oi0uMjVpbjttc28tbGlzdDpsMyBsZXZlbDEgbGZvNCI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5Ob3QgY2VydGlmaWFi bGUgYXQgdGhlIHNhbWUgbGV2ZWxzIGFzIHRoZSBhYm92ZSwgYnV0IHN0aWxsIGNlcnRpZmlhYmxl IGluIHByZXR0eSB0aG9yb3VnaCB3YXlzIGxpa2UgdGhlIENDLWJhc2VkIEdQIFRFRSBQUCAobGlu ayBiZWxvdyk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVm dDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDMgbGV2ZWwxIGxmbzQiPg0KPCFb aWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJm b250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtl bmRpZl0+U1cgY29tcGxleGl0eSBpcyBhIGxvdCBoaWdoZXIgc28gZWl0aGVyIGNlcnRpZmljYXRp b24gY29zdCBpcyBoaWdoZXIgb3IgY2VydGlmaWNhdGlvbiBpcyBsZXNzIHRob3JvdWdoPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+RG9u4oCZdCBkaXNhZ3Jl ZSB3aXRoIGFueXRoaW5nIGluIHlvdXIgbGF0ZXN0IGNvbW1lbnQuIDotKTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkxMPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJyPg0KPGJyPg0KPG86cD48 L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+T24gTm92IDE0LCAyMDE5LCBhdCA4OjE3IEFNLCBGdWNocywgQW5kcmVhcyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmFuZHJlYXMuZnVjaHNAc2l0LmZyYXVuaG9mZXIuZGUiPmFuZHJlYXMu ZnVjaHNAc2l0LmZyYXVuaG9mZXIuZGU8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj5XZSB3ZXJlIHRhbGtp bmcgYWJvdXQgRklETyBhcyBvbmUgb2YgbWFueSBhcHBsaWNhdGlvbnMgcnVubmluZyBpbiBhIFRF RS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPlRoZXkgcmVseSBv biBjb3JyZWN0bmVzcyBvZiBvdGhlciBURUUtYXBwcyBhbmQvb3IgdGhlIFRFRSBrZXJuZWw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPihvciBzaG91bGQgSSByYXRo ZXIgc2F5IFRFRSBvcGVyYXRpbmcgc3lzdGVtKS4gVGh1cyBhIHR1cmluZyBjb21wbGV0ZSBzb2x1 dGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+KG1heWJlIGV2 ZW4gd2l0aCBsb2FkYWJsZSBhcHBzKSBhbmQgT1MgY2Fubm90IGJlIGFzIHNlY3VyZSBhcyBhIHNw ZWNpYWwtcHVycG9zZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+ ZnVuY3Rpb25hbCBsb2dpYyBzZWN1cml0eSBwcm92aWRlci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFo b21hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVv dDssc2Fucy1zZXJpZiI+QWxzbywgYnkgZGVzaWduIGFuIG9uLWNoaXAgVEVFIG9mZmVyaW5nIGNh bm5vdCBiZSBhcyBzZWN1cmUgYXMgYSBwaHlzaWNhbGx5PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OyxzYW5zLXNlcmlmIj5zZXBhcmF0ZWQgY2hpcCB0aGF0IGluY29ycG9yYXRlcyBzbWFy dGNhcmQgdGVjaG5vbG9naWVzLiBZb3UgYWxzbyBoaWdobGlnaHQ8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPnRoaXMgYnkgcHJvdmlkaW5nIHl1YmlrZXkgYXMgZXhh bXBsZSB3aGljaCBpcyBib3RoOyBhIHNlcGFyYXRlIFNDLWxpa2UgY2hpcDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+YW5kIGZpeGVkIGZ1bmN0aW9uYWwgbG9naWMg KHNpbWlsYXIgdG8gVFBNcykuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNl cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPlRv IGNvbmNsdWRlOiBmaXhlZCBmdW5jdGlvbmFsIGxvZ2ljIGFuZCBzZXBhcmF0ZSBjaGlwcyBoYXZl IGhpZ2hlciBhc3N1cmFuY2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2Vy aWYiPmxldmVscyB0aGFuIHR1cmluZy1jb21wbGV0ZSAobG9hZGFibGUpIGFyZWFzIG9mIHRoZSBt YWluIGNwdS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+QW5kIHRvIHlvdXIg b3JpZ2luYWwgcG9pbnQ6IFRQTXMgYXJlIHRoZSBwcmVmZXJyZWQgc29sdXRpb24gZm9yIGF0dGVz dGF0aW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj5pbiBjb250 cmFzdCB0byB0byBhIFRFRS1iYXNlZCBhcHByb2FjaCwganVzdCBhcyBZdWJpS2V5cyBldCBhbCBh cmUgcHJlZmVycmVkPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OyxzYW5zLXNlcmlmIj5m b3IgRklETyBpbiBjb250cmFzdCB0byBhIFRFRS1iYXNlZCBhcHByb2FjaC48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1hbGlnbjpjZW50ZXIiPg0KPHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 LHNlcmlmIj4NCjxociBzaXplPSIwIiB3aWR0aD0iODklIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bh bj48L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwRjQ2ODYyNyI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0 b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW4iPg0KPGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9z cGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+TGF1cmVuY2UNCiBMdW5kYmxh ZGUgWzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVz b3J0LmNvbTwvYT5dPGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlRodXJzZGF5LCBOb3ZlbWJlciAxNCwgMjAxOSAxNjo1MTxi cj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+RnVjaHMsIEFuZHJlYXM8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3Jn Ij5yYXRzQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW1JhdHNdIEZJRE8gVFBNIGF0dGVz dGF0aW9uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssc2VyaWYiPk9uIE5vdiAxNCwgMjAxOSwgYXQgMTo0NiBBTSwgRnVjaHMs IEFuZHJlYXMgJmx0OzxhIGhyZWY9Im1haWx0bzphbmRyZWFzLmZ1Y2hzQHNpdC5mcmF1bmhvZmVy LmRlIiB0YXJnZXQ9Il9ibGFuayI+YW5kcmVhcy5mdWNoc0BzaXQuZnJhdW5ob2Zlci5kZTwvYT4m Z3Q7DQogd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6SGVsdmV0aWNhIj5UaGUgRklETyBjb2RlJm5ic3A7cnVubmluZyBpbnNpZGUgYSBURUUg aXMgbm90IHN0YW5kYXJkaXplZCAodG8gdGhlIGxldmVsIG9mIFRQTSkgYW5kIG1vc3QgY2VydGFp bmx5IG5vdCBDQy1ldmFsdWF0ZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij5UaGF04oCZcyBub3QgdHJ1ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tbGVmdDozMC4wcHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+VGhlPGEgaHJlZj0iaHR0cHM6Ly9maWRvYWxsaWFuY2Uub3JnL2NlcnRpZmljYXRp b24vYXV0aGVudGljYXRvci1jZXJ0aWZpY2F0aW9uLWxldmVscy9hdXRoZW50aWNhdG9yLWxldmVs LTMvIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPkZJRE8NCiBMMyBhbmQgTDMmIzQzOyBDZXJ0aWZpY2F0aW9uIHByb2dyYW08 L2E+Jm5ic3A7aXMgQ0MgKENvbW1vbiBDcml0ZXJpYSkgYmFzZWQgKEFWQV9WQU4uMyBhbmQgQVZB X1ZBTi40KS4gJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPk1hbnkgRklETyBhdXRoZW50aWNhdG9ycyBydW4gb24g c2VjdXJlIGVsZW1lbnRzIHdoaWNoIHByb3ZpZGVzIHJvdWdobHkgZXF1aXZhbGVudCBzZWN1cml0 eSB0byBhIFRQTSwgaG93ZXZlciBzaW5jZSB0aGUgZnVsbCBhdXRoZW50aWNhdG9yIHByb3RvY29s DQogcnVucyBvbiB0aGUgdHVyaW5nLWNvbXBsZXRlIHNlY3VyZSBlbGVtZW50IHRoZSBmdWxsIEZJ RE8gcHJvdG9jb2wgaXMgc2VjdXJlZCwgbm90IGp1c3QgdGhlIGtleSBzdG9yYWdlLiZuYnNwOzxh IGhyZWY9Imh0dHBzOi8vd3d3Lnl1Ymljby5jb20vcHJvZHVjdHMveXViaWtleS1oYXJkd2FyZS95 dWJpa2V5JTIwbmVvLyIgdGFyZ2V0PSJfYmxhbmsiPkhlcmXigJlzIG9uZTwvYT4uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+R2xvYmFsIFBsYXRmb3JtIG9mZmVycyBhJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly93 d3cuY29tbW9uY3JpdGVyaWFwb3J0YWwub3JnL2ZpbGVzL3BwZmlsZXMvYW5zc2ktcHJvZmlsX1BQ LTIwMTRfMDEucGRmIiB0YXJnZXQ9Il9ibGFuayI+Q0MtYmFzZWQgY2VydGlmaWNhdGlvbg0KIHBy b2dyYW0gZm9yIFRFReKAmXM8L2E+LiBGSURPIGlzIHdvcmtpbmcgb24gYSBjZXJ0aWZpY2F0aW9u IHByb2dyYW0gdGhhdCB3aWxsIG1ha2UgdXNlIG9mIHRoYXQuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5CU0kgaGFzIHB1Ymxpc2hlZCBhIENDLWJh c2VkIHByb3RlY3Rpb24mbmJzcDs8YSBocmVmPSJodHRwczovL3d3dy5jb21tb25jcml0ZXJpYXBv cnRhbC5vcmcvZmlsZXMvcHBmaWxlcy9wcDAwOTZhX3BkZi5wZGYiIHRhcmdldD0iX2JsYW5rIj5w cm9maWxlIGZvcg0KIEZJRE88L2E+LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssc2VyaWYiPkFuZHJvaWQgS2V5c3RvcmXigJlzIG5vdyBzdXBwb3J0cyZuYnNwOzxhIGhyZWY9 Imh0dHBzOi8vcHJvYW5kcm9pZGRldi5jb20vYW5kcm9pZC1rZXlzdG9yZS13aGF0LWlzLXRoZS1k aWZmZXJlbmNlLWJldHdlZW4tc3Ryb25nYm94LWFuZC1oYXJkd2FyZS1iYWNrZWQta2V5cy00YzI3 NmVhNzhmZDAiIHRhcmdldD0iX2JsYW5rIj5TdHJvbmdCb3g8L2E+LA0KIHdoaWNoIHB1dHMgdGhl IGtleXMgaW4gYSBzZWN1cmUgZWxlbWVudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LHNlcmlmIj5RdWFsY29tbeKAmXMgU25hcGRyYWdvbiBtb2JpbGUgcGhvbmUgY2hpcCBo YXMgYSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vd3d3LnF1YWxjb21tLmNvbS9uZXdzL3JlbGVhc2Vz LzIwMTkvMDYvMjUvcXVhbGNvbW0tc25hcGRyYWdvbi04NTUtYmVjb21lcy1maXJzdC1tb2JpbGUt c29jLXJlY2VpdmUtc21hcnQtY2FyZCIgdGFyZ2V0PSJfYmxhbmsiPnNlY3VyZS1lbGVtZW50DQog bGlrZSBzdWJzeXN0ZW08L2E+Jm5ic3A7KG5vdCB0aGUgVEVFKSB0aGF0IGlzIENDLWNlcnRpZmll ZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5URUUgYW5kIFRF RS1saWtlIG9mZmVyaW5ncyBhcmUgc3Ryb25nZXIgdGhhbiB0aGV5IHVzZWQgdG8gYmUsIHBhcnRp Y3VsYXIgYnkgc3VwcG9ydGluZyBtZW1vcnkgZW5jcnlwdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UdXJpbmcgY29tcGxldGUg c2VjdXJpdHkgcHJvZHVjdHMgY29tZSBpbiBhIHJhbmdlIG9mIHNlY3VyaXR5IGxldmVscyBhbGwg dGhlIHdheSB1cCB0aGUgc2VjdXJpdHkgbGV2ZWwgb2ZmZXJlZCBieSBhIFRQTS4gRUFUIGltcGxl bWVudGF0aW9ucyBjYW4NCiBiZSBqdXN0IGFzIHNlY3VyZSBhbmQgY2VydGlmaWVkIGFzIFRQTSBh dHRlc3RhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5M TDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_DEEF16A1024047139C397C590744493Fintelcom_-- From nobody Fri Nov 15 17:25:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEFC012006E for ; Fri, 15 Nov 2019 17:25:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XpY5_I6VmZeV for ; Fri, 15 Nov 2019 17:25:07 -0800 (PST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC01D120019 for ; Fri, 15 Nov 2019 17:25:06 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2019 17:25:06 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,310,1569308400"; d="scan'208,217";a="236271889" Received: from orsmsx108.amr.corp.intel.com ([10.22.240.6]) by fmsmga002.fm.intel.com with ESMTP; 15 Nov 2019 17:25:06 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX108.amr.corp.intel.com ([169.254.2.82]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 17:25:05 -0800 From: "Smith, Ned" To: "Eric Voit (evoit)" , Dave Thaler , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Henk Birkholz , "rats@ietf.org" Thread-Topic: Push vs. pull - was Re: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVnBytdi1GDcdJAEOFY4UvzSbYPA== Date: Sat, 16 Nov 2019 01:25:05 +0000 Message-ID: <6CBB62C4-A357-4F9E-8B78-46E6C64CC32A@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-14T20:24:13.3496979Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=096a2af9-9408-49d1-8867-8c9a9004dfea; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic x-originating-ip: [10.24.10.107] Content-Type: multipart/alternative; boundary="_000_6CBB62C4A3574F9E8B7846E6C64CC32Aintelcom_" MIME-Version: 1.0 Archived-At: Subject: [Rats] Push vs. pull - was Re: Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 01:25:12 -0000 --_000_6CBB62C4A3574F9E8B7846E6C64CC32Aintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyB0aHJlYWQgc2VlbWVkIHRvIHNwbGl0IGludG8gc29tZXRoaW5nIGRpZmZlcmVudCBmb2xs b3dpbmcgSGVuaydzIHBvc3QgYWJvdXQgMyBob3VycyBhZnRlciBFcmlj4oCZcyBwb3N0Lg0KSeKA mW0gcmVuYW1pbmcgdGhpcyB0aHJlYWQgUHVzaCB2cy4gcHVsbC4NCg0KSSB0aGluayBJIGhlYXJk IHRoZSBmb2xsb3dpbmcgdGhpbmdzOg0KDQogICogICBUaGVyZSBpcyBhIHJlcXVpcmVtZW50IHRv IHN1cHBvcnQgYm90aCBwdXNoIGFuZCBwdWxsIGluIG9yZGVyIGZvciBhIOKAnHN0YW5kYXJkaXpl ZCBhcHByb2FjaCB0byBhdHRlc3RhdGlvbuKAnSB0byBiZSBtZWFuaW5nZnVsIHRvIChhdCBsZWFz dCkgdGhlIG5ldHdvcmtpbmcgaW5mcmFzdHJ1Y3R1cmUgY29tbXVuaXR5Lg0KICAqICAgSW4gYSBw dXNoIG1vZGVsLCB0aGUgQXR0ZXN0ZXIgbmVlZHMgdG8ga25vdyB3aGF0IEV2aWRlbmNlIHRvIHB1 c2ggKGFuZCB3aGVuKSB0byBhdm9pZCBjb25mdXNpbmcgdGhlIFZlcmlmaWVyIChvciBhdCBsZWFz dCB0byBhdm9pZCB1bm5lY2Vzc2FyaWx5IHdhc3RpbmcgYmFuZHdpZHRoIC8gcmVzb3VyY2VzKS4N CiAgKiAgIEluIGEgcHVsbCBtb2RlbCwgdGhlIFZlcmlmaWVyIG5lZWRzIGEgd2F5IHRvIGRpc2Nv dmVyIGlmIGFuIEF0dGVzdGVyIGhhcyB0aGUgYWJpbGl0eSB0byBhdHRlc3QsIGFuZCBpZiBzbywg d2hhdCBjbGFpbXMgYXJlIGFwcHJvcHJpYXRlIGZvciBpdCB0byByZXF1ZXN0LiBWZXJpZmllciBh bHNvIG5lZWRzIGEgd2F5IHRvIHNlbGVjdCB0aGUgbW9zdCByZWxldmFudCBFdmlkZW5jZS4NClRo ZXNlIHJlcXVpcmVtZW50cyBob2xkIGZvciBWZXJpZmllciB0byBSZWx5aW5nIFBhcnR5IGludGVy YWN0aW9ucyBhcyB3ZWxsLCBleGNlcHQgdGhlIHRvcGljIG9mIGludGVyYWN0aW9uIGlzIOKAnEF0 dGVzdGF0aW9uIFJlc3VsdHPigJ0gcmF0aGVyIHRoYW4gRXZpZGVuY2UuDQoNCkZyb206ICJFcmlj IFZvaXQgKGV2b2l0KSIgPGV2b2l0QGNpc2NvLmNvbT4NCkRhdGU6IEZyaWRheSwgTm92ZW1iZXIg MTUsIDIwMTkgYXQgNjozOCBBTQ0KVG86IERhdmUgVGhhbGVyIDxkdGhhbGVyPTQwbWljcm9zb2Z0 LmNvbUBkbWFyYy5pZXRmLm9yZz4sIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNv cnQuY29tPg0KQ2M6IE5hbmN5IENhbS1XaW5nZXQgPG5jYW13aW5nQGNpc2NvLmNvbT4sICJPbGl2 ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykiIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5j b20+LCAiU21pdGgsIE5lZCIgPG5lZC5zbWl0aEBpbnRlbC5jb20+LCBIZW5rIEJlcmtob2x6IDxo ZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiwgInJhdHNAaWV0Zi5vcmciIDxyYXRzQGll dGYub3JnPg0KU3ViamVjdDogUkU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJh ZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQNCg0KRnJvbTogRGF2ZSBUaGFsZXIsIE5v dmVtYmVyIDE1LCAyMDE5IDI6MzkgQU0NCk5ldGNvbmYgaXMgbm90IHRoZSBvbmx5IHByb3RvY29s IHN1cHBvcnRlZCBieSByb3V0ZXJzLg0KUm91dGVycyBhbHNvIHN1cHBvcnQgSVB2NCwgSVB2Niwg bGluay1sYXllciBwcm90b2NvbHMgc3VjaCBhcyBFdGhlcm5ldCwgcm91dGluZyBwcm90b2NvbHMs IG9mdGVuIHRoaW5ncyBsaWtlIERIQ1AgcmVsYXksIFJBRElVUywgZXRjLg0KPEVyaWM+IEJlbG93 IEkgd291bGQgaGF2ZSBzYWlkICIgUm91dGVyL1lBTkciIGJlbG93IHJhdGhlciB0aGFuICJSb3V0 ZXIvTkVUQ09ORiIuDQoNCkkgaGF2ZSBub3QgeWV0IHNlZW4gYSBjb21wZWxsaW5nIHJlYXNvbiB0 byB1c2UgYSBwdWxsLWJhc2VkIG1lY2hhbmlzbSBpbnN0ZWFkIG9mIGEgcHVzaC1iYXNlZCBtZWNo YW5pc20gdmlhIGFub3RoZXIgcHJvdG9jb2wgdGhlIHJvdXRlcnMgYWxyZWFkeSBzdXBwb3J0Lg0K PEVyaWM+IFJvdXRlciB2ZW5kb3JzIHdhbnQgcHVzaC1iYXNlZCBtZWNoYW5pc21zIHRvby4gIEFu ZCBORVRDT05GIGRvZXMgcHVzaC4gIFNlZSBSRkMtODY0MCBhbmQgUkZDLTUyNzcuDQoNClRoZSBv bmx5IHJlYXNvbiBJ4oCZdmUgaGVhcmQgc28gZmFyIGlzIOKAnGJlY2F1c2UgdGhleSBzdXBwb3J0 IG5ldGNvbmYgYW5kIHdl4oCZcmUgdXNlZCB0byBpdOKAnSwgdG8gd2hpY2ggdGhlIGNvdW50ZXIg YXJndW1lbnQgaXMgYXMgYWJvdmU6DQp0aGV5IHN1cHBvcnQgb3RoZXIgdGhpbmdzIHRvbyBhbmQg d2XigJlyZSB1c2VkIHRvIHRoZW0gdG9vLg0KPEVyaWM+IFRoZXJlIGlzIHBpbGVzIG9mIGRvY3Vt ZW50YXRpb24gaW4gdGhlIElFVEYgYW5kIGJleW9uZCBkZXRhaWxpbmcgdGhlIHJlYXNvbmluZyBh bmQgZXh0ZW50IG9mIGNvbnNvbGlkYXRpb24gb24gWUFORyBmb3IgbmV0d29yayBtYW5hZ2VtZW50 LiAgICBJRVRGLCBJRUVFLCBNRUYsIE9wZW5Db25maWcsIGFuZCBvdGhlcnMgZm9ydW1zIGFyZSBk ZWZpbmluZyB0aGVzZS4gIEkgd291bGRuJ3QgZXhwZWN0IGFub3RoZXIgYW55dGltZSBzb29uLg0K DQpORVRDT05GIGNhbiBzdXBwb3J0IFlBTkcuIE90aGVyIHRyYW5zcG9ydHMgY2FuIHN1cHBvcnQg WUFORy4gICBUaGUgY3VycmVudCBkcmFmdCB1bmRlciBhbiBhZG9wdGlvbiBjYWxsIGRvZXMgbm90 IHNwZWNpZmljYWxseSByZWZlcmVuY2UgTkVUQ09ORi4NCg0KSW4gb3JkZXIgdG8ga25vdyB3aG8g dG8gcHVsbCBkYXRhIGZyb20sIHRoZSBWZXJpZmllciBoYXMgdG8gaGF2ZSBzb21lIGluZGljYXRp b24gZnJvbSB0aGUgQXR0ZXN0ZXIgdGhhdCB0cmlnZ2VycyB0aGUgYXR0ZXN0YXRpb24gcmVxdWVz dA0KaW5kaWNhdGVkIGFzIFN0ZXAgMSBpbiBkcmFmdC1mZWRvcmtvdy1yYXRzLW5ldHdvcmstZGV2 aWNlLWF0dGVzdGF0aW9uLiAgU28gaW4gcmVhbGl0eSwgdGhlcmUgaGFzIHRvIGJlIGEgc3RlcCBi ZWZvcmUgc3RlcCAxLA0Kd2hlcmVieSB0aGUgQXR0ZXN0ZXIgZG9lcyBzb21ldGhpbmcgdGhhdCBt YWtlcyB0aGUgQXR0ZXN0ZXIgZGlzY292ZXJhYmxlIGJ5IHRoZSBWZXJpZmllci4gICBUaGF0IHN0 ZXAgY291bGQgaGF2ZSBpbmNsdWRlZCB0aGUgRUFUIG9yIHRoZSBUUE0gZGF0YQ0KZXhwcmVzc2Vk IGluIHRoZSBZQU5HIGRyYWZ0LCBvciB3aGF0ZXZlciBlbHNlLCBhbmQgdGhlbiB5b3XigJl2ZSBh dm9pZGVkIHRoZSBuZWVkIGZvciBuZXRjb25mLCBhbmQgcmVkdWNlZCB0aGUgbnVtYmVyIG9mIHJv dW5kIHRyaXBzLA0KaW1wcm92aW5nIGxhdGVuY3kgYW5kIGJhbmR3aWR0aC4NCjxFcmljPiBJdCBp cyBhbHJlYWR5IHBvc3NpYmxlIHRvIHN1YnNjcmliZSB0byBleGlzdGluZyBwcm9wcmlldGFyeSBZ QU5HIGF0dGVzdGF0aW9uIG1vZGVscy4gIFRoaXMgcmVxdWlyZXMgemVybyBleHRyYSByb3VuZC10 cmlwcy4gICBUaGUgcHVzaCBjYW4gYmUgbGVhdmUgdGhlIEF0dGVzdGVyIGluIDwxIHNlYy4NCg0K SWYgdGhlcmUgaXMgYSBjb21wZWxsaW5nIHJlYXNvbiB0byBzdXBwb3J0IGEgcHVsbC1iYXNlZCBt ZWNoYW5pc20sIGFuZCB3ZSBnZXQgY29uc2Vuc3VzIHRoYXQgd2UgbmVlZCBpdCwgdGhlbiBncmVh dC4NCkJ1dCBzbyBmYXIgSSBoYXZlbuKAmXQgaGVhcmQgb25lLg0KPEVyaWM+IEEgWUFORyBtb2Rl bCBzdXBwb3J0cyBib3RoIHB1c2ggYW5kIHB1bGwuICBBcHBsaWNhdGlvbiB2ZW5kb3JzIHdhbnQg YSBzdGFuZGFyZCBhdHRlc3RhdGlvbiBtb2RlbC4gIFRoYXQgaXMgd2h5IHlvdSBoYXZlIG1hbnkg bmV0d29yayB2ZW5kb3JzIGF1dGhvcmluZyB0aGlzIFlBTkcgZHJhZnQgdW5kZXIgdGhlIGFkb3B0 aW9uIGNhbGwuDQoNCkhvbmVzdGx5IEkgZG9uJ3QgdW5kZXJzdGFuZCB0aGUgcHVzaC1iYWNrLiAg IFRoaXMgc2hvdWxkIGJlIGEgbm8tYnJhaW5lci4NCg0KL0VyaWMNCg0KRGF2ZQ0KDQpGcm9tOiBM YXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFu ZC1yZXNvcnQuY29tPj4NClNlbnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgMTMsIDIwMTkgMTA6MDcg QU0NClRvOiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVy QG1pY3Jvc29mdC5jb20+Pg0KQ2M6IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb208bWFp bHRvOm5lZC5zbWl0aEBpbnRlbC5jb20+PjsgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28p IDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208bWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEt YmVsbC1sYWJzLmNvbT4+OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNp c2NvLmNvbTxtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tPj47IHJhdHNAaWV0Zi5vcmc8bWFpbHRv OnJhdHNAaWV0Zi5vcmc+OyBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlPG1haWx0bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPj4NClN1YmplY3Q6 IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlh bmcgbW9kdWxlIGRyYWZ0DQoNCk15IHZlcnNpb24gb2YgdGVjaG5vbG9neSBiYXNlcyBmb3IgYXR0 ZXN0YXRpb24gaXMgc29tZXRoaW5nIGxpa2UgdGhpczoNCg0KUm91dGVyL05ldGNvbmYgV29ybGQN Ck1pbGxpb25zIG9mIGRldmljZXMuIEN1cnJlbnRseSBUUE0gb3JpZW50ZWQuIExvbmcgcG9zc2li bGUgdHJhbnNpdGlvbiB0byBFQVQuIFlBTkcgdXNlZCB0byBjcmVhdGUgdmVyeSBzcGVjaWZpYyBm aW5lLWdyYWluZWQgaW50ZXJhY3Rpb25zLiBObyBwcml2YWN5IGlzc3Vlcy4NCg0KV2ViIEJyb3dz ZXIgV29ybGQNCkJpbGxpb25zIG9mIGRldmljZXMuIEN1cnJlbnQgYXR0ZXN0YXRpb24gdXNlIGlz IHByaW1hcmlseSBXZWJBdXRoTiAvIEZJRE8uIEpXVCBpcyB1c2VkIGhlYXZpbHkgZm9yIGF1dGhl bnRpY2F0aW9uIHNvIHdvdWxkIGJlIG1vcmUgRUFUIG9yaWVudGVkLCBidXQgVFBNIGF0dGVzdGF0 aW9uIGlzIHN1cHBvcnRlZCBpbiBGSURPLiBMYXJnZXIgdXNlIG9mIGF0dGVzdGF0aW9uIG1heSBl dm9sdmUuIEZpbmUtZ3JhaW5lZCBpbnRlcmFjdGlvbnMgYXJlIHdpdGggV2ViQVBJcyAoSmF2YXNj cmlwdCkgKHNvcnQgb2YgcGFyYWxsZWwgdG8gWUFORyBmb3Igcm91dGVycykuIEJpZyBwcml2YWN5 IGlzc3Vlcy4NCg0KTW9iaWxlIEFwcCBXb3JsZA0KQmlsbGlvbnMgb2YgZGV2aWNlcy4gTWFpbiBh dHRlc3RhdGlvbiB1c2UgaXMgQW5kcm9pZOKAmXMgS2V5c3RvcmUuIFRoaXMgaXMgRUFULWxpa2Us IGJ1dCBiYXNlZCBvbiBYLjUwOS4gRmluZSBncmFpbmVkIGludGVyYWN0aW9ucyBhcmUgQW5kcm9p ZCBBUElzLiBJIG1heSBiZSBvdXQgb2YgZGF0ZSwgYnV0IHNvIGZhciBJb1MgZG9lc27igJl0IGRv IGF0dGVzdGF0aW9uLiBQcml2YWN5IGlzc3VlcyB2YXJ5IGJ5IGFwcC4NCg0KSW9UIFdvcmxkDQpC aWxsaW9ucyBvZiBkZXZpY2VzIG1vc3QgbGlrZWx5IGdvaW5nIHRvIHRyaWxsaW9ucy4gQXR0ZXN0 YXRpb24gaXMgYSBjcml0aWNhbCBlbmFibGluZyBmZWF0dXJlIGluIHRoaXMgd29ybGQuIFRoZXJl IGFyZSBsb3RzIG9mIHByb3RvY29scyBhbmQgZm9ybWF0cyBpbnZvbHZlZC4gVFBNcyBhcmUgdG9v IGV4cGVuc2l2ZSBmb3IgbWFueSBvZiB0aGVzZSwgYnV0IGFyZSBwcm9iYWJseSBpbiB1c2Ugc29t ZXdoZXJlLiBObyBwcml2YWN5IGlzc3VlcyBmb3IgYSBsYXJnZSBwb3J0aW9uIG9mIHRoaXMgd29y bGQuDQoNClRoZSByb3V0ZXIgd29ybGQgaXMgdGhlIHNtYWxsZXN0LCBidXQgaXQgaXMg4oCcd2Vs bCByZXByZXNlbnRlZOKAnSBiZWNhdXNlIHRoaXMgaXMgdGhlIElFVEYuDQoNCkkgc2VlIEVBVCBh cyBhcHBsaWNhYmxlIHRvIGFsbCB0aGVzZSB3b3JsZHMsIHdoZXJlIHRoZSBZQU5HIG1vZHVsZSBp cyBqdXN0IGZvciB0aGUgc21hbGxpc2ggcm91dGVyIHdvcmxkLiBTbyBJIG1vc3RseSBhZ3JlZSB3 aXRoIERhdmUgYWJvdXQgcHJvcG9ydGlvbnMsIGhvd2V2ZXIgdGhpcyBpcyB0aGUgSUVURiB3aGVy ZSBZQU5HIG1vZHVsZXMgYXJlIGNyZWF0ZWQuICAoTWF5YmUgSSBzaG91bGQgZ28gam9pbiB0aGUg VzNDIHdvcmxkIGFuZCB3b3JrIG9uIGF0dGVzdGF0aW9ucyBBUElzIGZvciBicm93c2VycyBhZnRl ciBSQVRTIGlzIGRvbmUpLg0KDQpMTA0KDQoNCg0KT24gTm92IDExLCAyMDE5LCBhdCA1OjQzIFBN LCBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jv c29mdC5jb20+PiB3cm90ZToNCg0KQXMgZmFyIGFzIEkgY2FuIHVuZGVyc3RhbmQgZnJvbSBkcmFm dC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9kdWxlLTAxIGFuZA0KZHJhZnQtZmVkb3Jrb3ct cmF0cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi0wMSwgdGhleSBicmVhayBkb3duIHRoZSB1 c2UgY2FzZQ0Kc3BhY2UgYXMgZm9sbG93czoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgUmVx dWlyZW1lbnRzPw0KICAgICAgICAgKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0t LS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgfCAgUm9UICAgICAgICAgfCBIb3N0IEZp cmV3YWxsIHwgUHJpdmFjeSB8fCAgIFNvbHV0aW9uDQogICAgICAgICB8ICBUeXBlICAgICAgICB8 ICAgRW5hYmxlZCAgICAgfCBOZWVkZWQgIHx8ICAgIFBpZWNlcw0KICAgICAgICAgKy0tLS0tLS0t LS0tLS0tKy0tLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0rKy0tLS0tLS0tLS0tLS0tLQ0KICAgICAg MSAgfCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgMiAg fCAgU0dYICAgICAgICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgMyAgfCAg U0dYICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNCAgfCAgU0dY ICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNSAgfCAgVHJ1c3Ra b25lICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgNiAgfCAgVHJ1c3Rab25l ICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgNyAgfCAgVHJ1c3Rab25lICAg fCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAgOCAgfCAgVHJ1c3Rab25lICAgfCBZ ZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAgOSAgfCAgVFBNICAgICAgICAgfCBObyAg ICAgICAgICAgIHwgTm8gICAgICB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmctbW9k dWxlLTAxDQogICAgIDEwICB8ICBUUE0gICAgICAgICB8IE5vICAgICAgICAgICAgfCBZZXMgICAg IHx8DQogICAgIDExICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8 DQogICAgIDEyICB8ICBUUE0gICAgICAgICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQog ICAgIDEzICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAg IDE0ICB8U2VjdXJlRWxlbWVudCB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE1 ICB8U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE2ICB8 U2VjdXJlRWxlbWVudCB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE3ICB8IEZp cm13YXJlICAgICB8IE5vICAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDE4ICB8IEZpcm13 YXJlICAgICB8IE5vICAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIDE5ICB8IEZpcm13YXJl ICAgICB8IFllcyAgICAgICAgICAgfCBObyAgICAgIHx8DQogICAgIDIwICB8IEZpcm13YXJlICAg ICB8IFllcyAgICAgICAgICAgfCBZZXMgICAgIHx8DQogICAgIC4uLiB8ICAgLi4uICAgICAgICB8 ICAgICAgICAgICAgICAgfCAgICAgICAgIHx8DQoNCkFuZCBkcmFmdC1mZWRvcmtvdy1yYXRzLW5l dHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxIGZ1cnRoZXIgc2NvcGVzIGl0c2VsZiBkb3duDQpi eSBvbmx5IGJlaW5nIGFwcGxpY2FibGUgdG8gY2FzZXMgd2l0aCAiZW1iZWRkZWQiIGFwcHMgb25s eSA9IFllcywgYW5kIHdoZXJlDQp0aGUgc2VjdXJpdHkgcG9saWN5IGlzIG9ubHkgYW4gRXhhY3Qg bWF0Y2ggYWdhaW5zdCByZWZlcmVuY2UgdmFsdWVzID0gWWVzLg0KSSBiZWxpZXZlIHRoYXQgdGhl IHlhbmcgZHJhZnQgZG9lc24ndCBoYXZlIHRob3NlIHR3byByZXN0cmljdGlvbnMsIGZyb20gbXkg cmVhZGluZy4NCkhvd2V2ZXIsIHRoZSBwb2ludCBpcyB0aGF0IGJvdGggZHJhZnRzIGFyZSBWRVJZ IG5hcnJvdywgYW5kIGluIHRoZSB0YWJsZSBzaG93biBhYm92ZSwNCm9ubHkgYWRkcmVzcyAxIG91 dCBvZiAyMCBwb3NzaWJpbGllcyBpbiB0aGF0IHNwYWNlLg0KDQpJbiBjb250cmFzdCwgdGhlIFRF RVAgV0cgZGVjaWRlZCB0aGF0IGl0IHdhcyBub3QgaW50ZXJlc3RlZCBpbiBuYXJyb3cgc2NvcGlu Z3MNCihzcGVjaWZpY2FsbHkgc29tZXRoaW5nIEdsb2JhbCBQbGF0Zm9ybSBzcGVjaWZpYyksIGJ1 dCBpbnN0ZWFkIHdhbnRlZCBvbmUgZ2VuZXJhbCBzb2x1dGlvbi4NCg0KSWYgdGhlIFJBVFMgV0cg c3BlbmRzIGVmZm9ydCBvbiBzb21ldGhpbmcgdGhhdCBvbmx5IGFkZHJlc3NlcyBhIHNpbmdsZSBy b3cgb3V0IG9mIDIwKyByb3dzLA0KdGhlbiBkbyB3ZSBleHBlY3QgMTkrIG90aGVyIHNvbHV0aW9u cyB0byBhbHNvIGJlIGRvbmUgaW4gdGhlIFdHPyAgT3IgY291bGQgd2Ugd29yayBvbiB0aGluZ3MN CnRoYXQgYXJlIGJyb2FkZXIgYW5kIGhhcHBlbiB0byBhbHNvIHdvcmsgZm9yIHJvdyA5Pw0KDQpJ J3ZlIHNlZW4gb3RoZXJzIGNvbW1lbnRpbmcgb24gdGhlIGZhY3QgdGhhdCB0aGUgWUFORyBtb2R1 bGUgb25seSBzdXBwb3J0cyBUUE1zIGFuZCBub3QNCm90aGVyIHRoaW5ncyAoRUFUcyBldGMpLCB3 aGljaCB3b3VsZCBqdXN0IGFkZCBzdXBwb3J0IGZvciBhIGNvdXBsZSBtb3JlIHJvd3MsIGJ1dCBz dGlsbCBub3QNCmJlIGdlbmVyYWwuDQoNClBlcnNvbmFsbHksIEkgd291bGQgbXVjaCByYXRoZXIg c2VlIHRoZSBXRyBzcGVuZCBlZmZvcnQgb24gdGhpbmdzIHRoYXQgcmVhbGx5IGFyZSBnZW5lcmlj LA0KaS5lLiwgd29yayB3aXRoIG9yIHdpdGhvdXQgaG9zdCBmaXJld2FsbHMsIHdvcmsgd2l0aCBt dWx0aXBsZSBSb1QvVEVFIHR5cGVzLCBldGMuLCByYXRoZXINCnRoYW4gc2VlaW5nIGFuIGV4cGxv c2lvbiBvZiBwb2ludCBzb2x1dGlvbnMuDQoNCkRhdmUNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3Vu Y2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhhbGYgT2Yg U21pdGgsIE5lZA0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAxOSAxMDoxMiBBTQ0KVG86 IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSA8aWFuLm9saXZlckBub2tpYS1iZWxsLWxh YnMuY29tPG1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+PjsgTGF1cmVuY2Ug THVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0 LmNvbT4+OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbTxt YWlsdG86bmNhbXdpbmdAY2lzY28uY29tPj4NCkNjOiByYXRzQGlldGYub3JnPG1haWx0bzpyYXRz QGlldGYub3JnPjsgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5k ZTxtYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4+DQpTdWJqZWN0OiBSZTog W1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1v ZHVsZSBkcmFmdA0KDQpSaWdodC4gVGhpcyBpbXBsaWVzIHRoZSBSQVRTIOKAnHRva2Vu4oCdIHNo b3VsZCBzdXBwb3J0IGV4aXN0aW5nIOKAnGJpbmFyeeKAnSBmb3JtYXRzIGFzIGFuIGVuY2Fwc3Vs YXRpb24gKHNpZ25lZCBieSBhIHNlY29uZCBUQSB3aGVyZSB0aGUgVFBNIGlzIGEgZmlyc3QgVEEp IG9yIGFzIGEgY29udmV5YW5jZSAodW5zaWduZWQ/KSB0b2tlbi4gUG9zc2libHksIHRoZSBvbmx5 IGFkZGVkIHZhbHVlIG9mIHRoZSBsYXR0ZXIgaXMgYSB0YWcgdGhhdCBpZGVudGlmaWVzIGl0IGFz IGEgVFBNIGJpbmFyeSBmb3JtYXQ/DQoNCg0KT24gMTEvMTAvMTksIDIzOjIxIFBNLCAiUkFUUyBv biBiZWhhbGYgb2YgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pIiA8cmF0cy1ib3VuY2Vz QGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBpYW4u b2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208bWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1s YWJzLmNvbT4+IHdyb3RlOg0KDQo+IFJlbW90ZSBUUE0gYXR0ZXN0YXRpb25zIGFyZSB1c2VmdWwg YW5kIG5lY2Vzc2FyeSB0aGUgc2hvcnQgcnVuLCBidXQgYXJlIG9mIHZlcnkgbGltaXRlZCBjYXBh YmlsaXR5LiBJIGJlbGlldmUgdGhhdCA+IEVBVCB3aWxsIHJlcGxhY2UgVFBNIGF0dGVzdGF0aW9u cyBpbiB0aGUgbG9uZyBydW4gKG1heWJlIGRlY2FkZXMpIGJlY2F1c2UgdGhleSBhcmUgZmFyIG1v cmUgZXhwcmVzc2l2ZS4gSSBrbm93ID4gb3RoZXJzIGJlbGlldmUgdGhhdCB0b28uDQoNCkkgd291 bGQgZGlzYWdyZWUgd2l0aCB0aGUgc3RhdGVtZW50IG9mICJzaG9ydCBydW4iIC4uLiBUUE0gaXMg cHJhY3RpY2FsbHkgdGhlIG9ubHkgZXhpc3Rpbmcgc3RhbmRhcmRpc2VkIChoYXJkd2FyZSwgc29m dHdhcmUsIGZpcm13YXJlLCBtZWFzdXJlbWVudCAtIHg4NiBvbmx5IGV0YykgaGFyZHdhcmUgcm9v dCBvZiB0cnVzdCBpbiBjb21tb24gdXNlLCBpZTogcHJhY3RpY2FsbHkgYWxsIHg4NiBtYWNoaW5l cywgIFRoZSBhdHRlc3RhdGlvbiBtZWNoYW5pc21zIHByb3ZpZGVkIGFyZSBnb2luZyB0byBiZSBh cm91bmQgZm9yIGEgdmVyeSBsb25nIHRpbWUuDQoNCkZyb20gdGVsY28gZXhwZXJpZW5jZSwgMzAg eWVhcnMgYWdvIHdlIHNhaWQgU1M3IHdvdWxkIG9ubHkgYmUgYXJvdW5kIGluIHRoZSBzaG9ydCB0 ZXJtLg0KDQo+IFRodXMsIEkgYW0gb3Bwb3NlZCB0byBhZG9wdGlvbiB3aXRoIHRoZSBjdXJyZW50 IFRQTS1vbmx5IGRyYWZ0LiBJ4oCZZCBiZSBPSyB3aXRoIHRoZSBjdXJyZW50IGRyYWZ0IGFuZCBh IHByb21pc2UgPiB0byBhZGQgRUFUIHRvIGl0Lg0KDQpBZ3JlZQ0KDQpJYW4NCg0KLS0NCkRyLiBJ YW4gT2xpdmVyDQpDeWJlcnNlY3VyaXR5IFJlc2VhcmNoDQpEaXN0aW5ndWlzaGVkIE1lbWJlciBv ZiBUZWNobmljYWwgU3RhZmYNCk5va2lhIEJlbGwgTGFicw0KKzM1OCA1MCA0ODMgNjIzNw0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRl IDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpT ZW50OiAxMSBOb3ZlbWJlciAyMDE5IDAwOjQ0DQpUbzogTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdp bmcpIDxuY2Ftd2luZ0BjaXNjby5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4+DQpDYzog SGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZTxtYWlsdG86aGVu ay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4+OyByYXRzQGlldGYuLm9yZzxtYWlsdG86cmF0 c0BpZXRmLi5vcmc+IDxyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPj4NClN1Ympl Y3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9y IFlhbmcgbW9kdWxlIGRyYWZ0DQoNCg0KT24gTm92IDEwLCAyMDE5LCBhdCAyOjIwIFBNLCBOYW5j eSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbTxtYWlsdG86bmNhbXdp bmdAY2lzY28uY29tPj4gd3JvdGU6DQoNClNvLCBMYXVyZW5jZSwgYXJlIHlvdSBzdGlsbCBPSyB3 aXRoIHRoZSBhZG9wdGlvbiBvZiB0aGUgY3VycmVudCBkcmFmdCB3aXRoIGEgcmVuYW1lIGZvciBu b3c/DQpUaGFua3MsIE5hbmN5DQoNCkkgdGhpbmsgdGhlIHZhbHVlIGFkZCB0byB0aGUgbGFyZ2Vy IFJBVFMgZWZmb3J0IG9mIGFkZGluZyBFQVQgc3VwcG9ydCB0byB0aGlzIFlBTkcgcHJvdG9jb2wg aXMgcmVhbGx5IGhpZ2guIEl0IGEgY29yZSB0aGluZyB0byBkbyB0aGF0IGhlbHBzIGJyaW5nIHRv Z2V0aGVyIHRoZSB0d28gYXR0ZXN0YXRpb24gd29ybGRzIGFuZCBtYWtlIHRoZSBUUE0gYW5kIEVB VCB3b3JrIGhlcmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC4NCg0KUmVtb3RlIFRQTSBh dHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVjZXNzYXJ5IHRoZSBzaG9ydCBydW4sIGJ1dCBh cmUgb2YgdmVyeSBsaW1pdGVkIGNhcGFiaWxpdHkuIEkgYmVsaWV2ZSB0aGF0IEVBVCB3aWxsIHJl cGxhY2UgVFBNIGF0dGVzdGF0aW9ucyBpbiB0aGUgbG9uZyBydW4gKG1heWJlIGRlY2FkZXMpIGJl Y2F1c2UgdGhleSBhcmUgZmFyIG1vcmUgZXhwcmVzc2l2ZS4gSSBrbm93IG90aGVycyBiZWxpZXZl IHRoYXQgdG9vLg0KDQpJZiB3ZSBkb27igJl0IGluY2x1ZGUgRUFUIGluIHRoZSBZQU5HIG1vZGUg aXQgaXMgc29ydCBvZiBsaWtlIGRlZmluaW5nIEhUVFAgdG8gb25seSBjb252ZXkgSFRNTCB0byB0 aGUgZXhjbHVzaW9uIG9mIFBERi4gV2XigJlyZSBkZWZpbmluZyBhbiBhdHRlc3RhdGlvbiBwcm90 b2NvbCB0aGF0IGNhbiBvbmx5IG1vdmUgb25lIGtpbmQgb2YgYXR0ZXN0YXRpb24gZXZlbiB0aG91 Z2ggd2UgaGF2ZSBjb25zZW5zdXMgb24gd2hhdCB0aGUgb3RoZXIgb25lIGxvb2tzIGxpa2UuDQoN Ckl0IHNlZW1zIHJlbGF0aXZlbHkgc2ltcGxlIHRvIGFkZCBFQVQgc3VwcG9ydCAob3IgcHJvbWlz ZSB0byBhZGQgRUFUIHN1cHBvcnQpLiBQcmV0dHkgc3VyZSBJIGhlYXJkIEhlbmsgYWdyZWUgdG8g YWRkIGl0Lg0KDQpUaHVzLCBJIGFtIG9wcG9zZWQgdG8gYWRvcHRpb24gd2l0aCB0aGUgY3VycmVu dCBUUE0tb25seSBkcmFmdC4gSeKAmWQgYmUgT0sgd2l0aCB0aGUgY3VycmVudCBkcmFmdCBhbmQg YSBwcm9taXNlIHRvIGFkZCBFQVQgdG8gaXQuDQoNCkxMDQoNCg0K --_000_6CBB62C4A3574F9E8B7846E6C64CC32Aintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <43BC29DE226BA346ADBCCA4628D2031E@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAw IDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRo IjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0K YTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29s b3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5N c29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVy cGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBs aS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJp b3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4t Ym90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxl LW5hbWU6bXNvbm9ybWFsOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltYXJnaW46MGluOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9 DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxT dHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5 bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0 aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4w aW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERl ZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1pZDo3NDY4MDY5MzY7DQoJbXNvLWxp c3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi05ODIyMjYxNjAgLTE4OTky Njc4IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5 IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQt YXQ6NDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDA6bGV2 ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpv Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9 DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGww OmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwN Cgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxp bms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgdGhyZWFkIHNlZW1lZCB0byBzcGxpdCBpbnRvIHNvbWV0 aGluZyBkaWZmZXJlbnQgZm9sbG93aW5nIEhlbmsncyBwb3N0IGFib3V0IDMgaG91cnMgYWZ0ZXIg RXJpY+KAmXMgcG9zdC4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SeKA mW0gcmVuYW1pbmcgdGhpcyB0aHJlYWQgUHVzaCB2cy4gcHVsbC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSB0aGluayBJIGhlYXJkIHRoZSBmb2xsb3dpbmcgdGhpbmdzOjxvOnA+PC9vOnA+PC9w Pg0KPHVsIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgdHlwZT0iZGlzYyI+DQo8bGkgY2xhc3M9Ik1z b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwx IGxmbzEiPlRoZXJlIGlzIGEgcmVxdWlyZW1lbnQgdG8gc3VwcG9ydCBib3RoIHB1c2ggYW5kIHB1 bGwgaW4gb3JkZXIgZm9yIGEg4oCcc3RhbmRhcmRpemVkIGFwcHJvYWNoIHRvIGF0dGVzdGF0aW9u 4oCdIHRvIGJlIG1lYW5pbmdmdWwgdG8gKGF0IGxlYXN0KSB0aGUgbmV0d29ya2luZyBpbmZyYXN0 cnVjdHVyZSBjb21tdW5pdHkuDQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFy YWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj5J biBhIHB1c2ggbW9kZWwsIHRoZSBBdHRlc3RlciBuZWVkcyB0byBrbm93IHdoYXQgRXZpZGVuY2Ug dG8gcHVzaCAoYW5kIHdoZW4pIHRvIGF2b2lkIGNvbmZ1c2luZyB0aGUgVmVyaWZpZXIgKG9yIGF0 IGxlYXN0IHRvIGF2b2lkIHVubmVjZXNzYXJpbHkgd2FzdGluZyBiYW5kd2lkdGggLyByZXNvdXJj ZXMpLjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJt YXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPkluIGEgcHVsbCBtb2RlbCwg dGhlIFZlcmlmaWVyIG5lZWRzIGEgd2F5IHRvIGRpc2NvdmVyIGlmIGFuIEF0dGVzdGVyIGhhcyB0 aGUgYWJpbGl0eSB0byBhdHRlc3QsIGFuZCBpZiBzbywgd2hhdCBjbGFpbXMgYXJlIGFwcHJvcHJp YXRlIGZvciBpdCB0byByZXF1ZXN0LiBWZXJpZmllciBhbHNvIG5lZWRzIGEgd2F5DQogdG8gc2Vs ZWN0IHRoZSBtb3N0IHJlbGV2YW50IEV2aWRlbmNlLjxvOnA+PC9vOnA+PC9saT48L3VsPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhlc2UgcmVxdWlyZW1lbnRzIGhvbGQgZm9yIFZlcmlmaWVyIHRv IFJlbHlpbmcgUGFydHkgaW50ZXJhY3Rpb25zIGFzIHdlbGwsIGV4Y2VwdCB0aGUgdG9waWMgb2Yg aW50ZXJhY3Rpb24gaXMg4oCcQXR0ZXN0YXRpb24gUmVzdWx0c+KAnSByYXRoZXIgdGhhbiBFdmlk ZW5jZS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0 REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj4mcXVvdDtFcmljIFZvaXQgKGV2b2l0KSZxdW90OyAmbHQ7ZXZv aXRAY2lzY28uY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5GcmlkYXksIE5vdmVtYmVyIDE1LCAy MDE5IGF0IDY6MzggQU08YnI+DQo8Yj5UbzogPC9iPkRhdmUgVGhhbGVyICZsdDtkdGhhbGVyPTQw bWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyZndDssIExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7 bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxicj4NCjxiPkNjOiA8L2I+TmFuY3kgQ2FtLVdpbmdl dCAmbHQ7bmNhbXdpbmdAY2lzY28uY29tJmd0OywgJnF1b3Q7T2xpdmVyLCBJYW4gKE5va2lhIC0g RkkvRXNwb28pJnF1b3Q7ICZsdDtpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20mZ3Q7LCAm cXVvdDtTbWl0aCwgTmVkJnF1b3Q7ICZsdDtuZWQuc21pdGhAaW50ZWwuY29tJmd0OywgSGVuayBC ZXJraG9seiAmbHQ7aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSZndDssICZxdW90O3Jh dHNAaWV0Zi5vcmcmcXVvdDsgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDog PC9iPlJFOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9y IFlhbmcgbW9kdWxlIGRyYWZ0PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdp bi1sZWZ0Oi41aW4iPg0KPGI+RnJvbTo8L2I+IERhdmUgVGhhbGVyLCBOb3ZlbWJlciAxNSwgMjAx OSAyOjM5IEFNPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPk5ldGNvbmYgaXMgbm90 IHRoZSBvbmx5IHByb3RvY29sIHN1cHBvcnRlZCBieSByb3V0ZXJzLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Um91dGVycyBhbHNvIHN1cHBvcnQgSVB2NCwgSVB2Niwg bGluay1sYXllciBwcm90b2NvbHMgc3VjaCBhcyBFdGhlcm5ldCwgcm91dGluZyBwcm90b2NvbHMs IG9mdGVuIHRoaW5ncyBsaWtlIERIQ1AgcmVsYXksIFJBRElVUywgZXRjLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4m bHQ7RXJpYyZndDsgQmVsb3cgSSB3b3VsZCBoYXZlIHNhaWQgJnF1b3Q7IFJvdXRlci9ZQU5HJnF1 b3Q7IGJlbG93IHJhdGhlciB0aGFuICZxdW90O1JvdXRlci9ORVRDT05GJnF1b3Q7LiZuYnNwOyZu YnNwOw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkgaGF2 ZSBub3QgeWV0IHNlZW4gYSBjb21wZWxsaW5nIHJlYXNvbiB0byB1c2UgYSBwdWxsLWJhc2VkIG1l Y2hhbmlzbSBpbnN0ZWFkIG9mIGEgcHVzaC1iYXNlZCBtZWNoYW5pc20gdmlhIGFub3RoZXIgcHJv dG9jb2wgdGhlIHJvdXRlcnMgYWxyZWFkeSBzdXBwb3J0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbHQ7RXJpYyZn dDsgUm91dGVyIHZlbmRvcnMgd2FudCBwdXNoLWJhc2VkIG1lY2hhbmlzbXMgdG9vLiZuYnNwOyBB bmQgTkVUQ09ORiBkb2VzIHB1c2guJm5ic3A7IFNlZSBSRkMtODY0MCBhbmQgUkZDLTUyNzcuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlRoZSBvbmx5IHJlYXNv biBJ4oCZdmUgaGVhcmQgc28gZmFyIGlzIOKAnGJlY2F1c2UgdGhleSBzdXBwb3J0IG5ldGNvbmYg YW5kIHdl4oCZcmUgdXNlZCB0byBpdOKAnSwgdG8gd2hpY2ggdGhlIGNvdW50ZXIgYXJndW1lbnQg aXMgYXMgYWJvdmU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj50aGV5 IHN1cHBvcnQgb3RoZXIgdGhpbmdzIHRvbyBhbmQgd2XigJlyZSB1c2VkIHRvIHRoZW0gdG9vLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj4mbHQ7RXJpYyZndDsgVGhlcmUgaXMgcGlsZXMgb2YgZG9jdW1lbnRhdGlvbiBp biB0aGUgSUVURiBhbmQgYmV5b25kIGRldGFpbGluZyB0aGUgcmVhc29uaW5nIGFuZCBleHRlbnQg b2YgY29uc29saWRhdGlvbiBvbiBZQU5HIGZvciBuZXR3b3JrIG1hbmFnZW1lbnQuJm5ic3A7ICZu YnNwOyZuYnNwO0lFVEYsIElFRUUsIE1FRiwgT3BlbkNvbmZpZywgYW5kIG90aGVycyBmb3J1bXMg YXJlIGRlZmluaW5nIHRoZXNlLiZuYnNwOw0KIEkgd291bGRuJ3QgZXhwZWN0IGFub3RoZXIgYW55 dGltZSBzb29uLiZuYnNwOyA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5ORVRDT05GIGNhbiBzdXBwb3J0IFlB TkcuIE90aGVyIHRyYW5zcG9ydHMgY2FuIHN1cHBvcnQgWUFORy4mbmJzcDsmbmJzcDsgVGhlIGN1 cnJlbnQgZHJhZnQgdW5kZXIgYW4gYWRvcHRpb24gY2FsbCBkb2VzIG5vdCBzcGVjaWZpY2FsbHkg cmVmZXJlbmNlIE5FVENPTkYuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPkluIG9yZGVyIHRvIGtub3cgd2hvIHRvIHB1bGwgZGF0YSBmcm9tLCB0aGUgVmVyaWZp ZXIgaGFzIHRvIGhhdmUgc29tZSBpbmRpY2F0aW9uIGZyb20gdGhlIEF0dGVzdGVyIHRoYXQgdHJp Z2dlcnMgdGhlIGF0dGVzdGF0aW9uIHJlcXVlc3QNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+aW5kaWNhdGVkIGFzIFN0ZXAgMSBpbiBkcmFmdC1mZWRvcmtvdy1yYXRz LW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLiZuYnNwOyBTbyBpbiByZWFsaXR5LCB0aGVyZSBo YXMgdG8gYmUgYSBzdGVwIGJlZm9yZSBzdGVwIDEsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj53aGVyZWJ5IHRoZSBBdHRlc3RlciBkb2VzIHNvbWV0aGluZyB0aGF0IG1h a2VzIHRoZSBBdHRlc3RlciBkaXNjb3ZlcmFibGUgYnkgdGhlIFZlcmlmaWVyLiZuYnNwOyZuYnNw OyBUaGF0IHN0ZXAgY291bGQgaGF2ZSBpbmNsdWRlZCB0aGUgRUFUIG9yIHRoZSBUUE0gZGF0YTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ZXhwcmVzc2VkIGluIHRoZSBZ QU5HIGRyYWZ0LCBvciB3aGF0ZXZlciBlbHNlLCBhbmQgdGhlbiB5b3XigJl2ZSBhdm9pZGVkIHRo ZSBuZWVkIGZvciBuZXRjb25mLCBhbmQgcmVkdWNlZCB0aGUgbnVtYmVyIG9mIHJvdW5kIHRyaXBz LDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+aW1wcm92aW5nIGxhdGVu Y3kgYW5kIGJhbmR3aWR0aC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jmx0O0VyaWMmZ3Q7IEl0IGlzIGFscmVhZHkg cG9zc2libGUgdG8gc3Vic2NyaWJlIHRvIGV4aXN0aW5nIHByb3ByaWV0YXJ5IFlBTkcgYXR0ZXN0 YXRpb24gbW9kZWxzLiZuYnNwOyBUaGlzIHJlcXVpcmVzIHplcm8gZXh0cmEgcm91bmQtdHJpcHMu Jm5ic3A7ICZuYnNwO1RoZSBwdXNoIGNhbiBiZSBsZWF2ZSB0aGUgQXR0ZXN0ZXIgaW4gJmx0OzEg c2VjLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JZiB0aGVy ZSBpcyBhIGNvbXBlbGxpbmcgcmVhc29uIHRvIHN1cHBvcnQgYSBwdWxsLWJhc2VkIG1lY2hhbmlz bSwgYW5kIHdlIGdldCBjb25zZW5zdXMgdGhhdCB3ZSBuZWVkIGl0LCB0aGVuIGdyZWF0Ljwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+QnV0IHNvIGZhciBJIGhhdmVu4oCZ dCBoZWFyZCBvbmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZsdDtFcmljJmd0OyBBIFlBTkcgbW9kZWwgc3VwcG9y dHMgYm90aCBwdXNoIGFuZCBwdWxsLiAmbmJzcDtBcHBsaWNhdGlvbiB2ZW5kb3JzIHdhbnQgYSBz dGFuZGFyZCBhdHRlc3RhdGlvbiBtb2RlbC4mbmJzcDsgVGhhdCBpcyB3aHkgeW91IGhhdmUgbWFu eSBuZXR3b3JrIHZlbmRvcnMgYXV0aG9yaW5nIHRoaXMgWUFORyBkcmFmdCB1bmRlciB0aGUgYWRv cHRpb24gY2FsbC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5Ib25lc3RseSBJIGRvbid0IHVuZGVyc3RhbmQg dGhlIHB1c2gtYmFjay4mbmJzcDsmbmJzcDsgVGhpcyBzaG91bGQgYmUgYSBuby1icmFpbmVyLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPi9FcmljPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPkRhdmU8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGI+RnJv bTo8L2I+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQt cmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsNCjxicj4NCjxiPlNlbnQ6 PC9iPiBXZWRuZXNkYXksIE5vdmVtYmVyIDEzLCAyMDE5IDEwOjA3IEFNPGJyPg0KPGI+VG86PC9i PiBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+IFNtaXRoLCBOZWQg Jmx0OzxhIGhyZWY9Im1haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tIj5uZWQuc21pdGhAaW50ZWwu Y29tPC9hPiZndDs7IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSAmbHQ7PGEgaHJlZj0i bWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbSI+aWFuLm9saXZlckBub2tpYS1i ZWxsLWxhYnMuY29tPC9hPiZndDs7IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSAmbHQ7PGEg aHJlZj0ibWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbSI+bmNhbXdpbmdAY2lzY28uY29tPC9hPiZn dDs7DQo8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT47IEhl bmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVu YW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPk15IHZlcnNpb24gb2YgdGVjaG5vbG9neSBiYXNlcyBmb3IgYXR0ZXN0YXRpb24g aXMgc29tZXRoaW5nIGxpa2UgdGhpczo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi1sZWZ0OjMwLjBwdDtt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPlJv dXRlci9OZXRjb25mIFdvcmxkPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk1pbGxpb25zIG9mIGRl dmljZXMuIEN1cnJlbnRseSBUUE0gb3JpZW50ZWQuIExvbmcgcG9zc2libGUgdHJhbnNpdGlvbiB0 byBFQVQuIFlBTkcgdXNlZCB0byBjcmVhdGUgdmVyeSBzcGVjaWZpYyBmaW5lLWdyYWluZWQgaW50 ZXJhY3Rpb25zLiBObyBwcml2YWN5IGlzc3Vlcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48Yj5XZWIgQnJvd3NlciBXb3JsZDwvYj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5CaWxsaW9ucyBvZiBkZXZpY2VzLiBDdXJyZW50IGF0dGVzdGF0aW9uIHVzZSBpcyBw cmltYXJpbHkgV2ViQXV0aE4gLyBGSURPLiBKV1QgaXMgdXNlZCBoZWF2aWx5IGZvciBhdXRoZW50 aWNhdGlvbiBzbyB3b3VsZCBiZSBtb3JlIEVBVCBvcmllbnRlZCwgYnV0IFRQTSBhdHRlc3RhdGlv biBpcyBzdXBwb3J0ZWQgaW4gRklETy4gTGFyZ2VyIHVzZSBvZiBhdHRlc3RhdGlvbg0KIG1heSBl dm9sdmUuIEZpbmUtZ3JhaW5lZCBpbnRlcmFjdGlvbnMgYXJlIHdpdGggV2ViQVBJcyAoSmF2YXNj cmlwdCkgKHNvcnQgb2YgcGFyYWxsZWwgdG8gWUFORyBmb3Igcm91dGVycykuIEJpZyBwcml2YWN5 IGlzc3Vlcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 Yj5Nb2JpbGUgQXBwIFdvcmxkPC9iPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkJpbGxpb25zIG9mIGRl dmljZXMuIE1haW4gYXR0ZXN0YXRpb24gdXNlIGlzIEFuZHJvaWTigJlzIEtleXN0b3JlLiBUaGlz IGlzIEVBVC1saWtlLCBidXQgYmFzZWQgb24gWC41MDkuIEZpbmUgZ3JhaW5lZCBpbnRlcmFjdGlv bnMgYXJlIEFuZHJvaWQgQVBJcy4gSSBtYXkgYmUgb3V0IG9mIGRhdGUsIGJ1dCBzbyBmYXIgSW9T IGRvZXNu4oCZdCBkbyBhdHRlc3RhdGlvbi4gUHJpdmFjeQ0KIGlzc3VlcyB2YXJ5IGJ5IGFwcC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj5Jb1QgV29y bGQ8L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QmlsbGlvbnMgb2YgZGV2aWNlcyBtb3N0IGxpa2Vs eSBnb2luZyB0byB0cmlsbGlvbnMuIEF0dGVzdGF0aW9uIGlzIGEgY3JpdGljYWwgZW5hYmxpbmcg ZmVhdHVyZSBpbiB0aGlzIHdvcmxkLiBUaGVyZSBhcmUgbG90cyBvZiBwcm90b2NvbHMgYW5kIGZv cm1hdHMgaW52b2x2ZWQuIFRQTXMgYXJlIHRvbyBleHBlbnNpdmUgZm9yIG1hbnkgb2YgdGhlc2Us IGJ1dCBhcmUgcHJvYmFibHkNCiBpbiB1c2Ugc29tZXdoZXJlLiBObyBwcml2YWN5IGlzc3VlcyBm b3IgYSBsYXJnZSBwb3J0aW9uIG9mIHRoaXMgd29ybGQuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhlIHJvdXRlciB3b3JsZCBp cyB0aGUgc21hbGxlc3QsIGJ1dCBpdCBpcyDigJx3ZWxsIHJlcHJlc2VudGVk4oCdIGJlY2F1c2Ug dGhpcyBpcyB0aGUgSUVURi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5JIHNlZSBFQVQgYXMgYXBwbGljYWJsZSB0byBhbGwgdGhlc2Ugd29ybGRzLCB3aGVy ZSB0aGUgWUFORyBtb2R1bGUgaXMganVzdCBmb3IgdGhlIHNtYWxsaXNoIHJvdXRlciB3b3JsZC4g U28gSSBtb3N0bHkgYWdyZWUgd2l0aCBEYXZlIGFib3V0IHByb3BvcnRpb25zLCBob3dldmVyIHRo aXMgaXMgdGhlIElFVEYgd2hlcmUgWUFORyBtb2R1bGVzIGFyZSBjcmVhdGVkLiAmbmJzcDsoTWF5 YmUNCiBJIHNob3VsZCBnbyBqb2luIHRoZSBXM0Mgd29ybGQgYW5kIHdvcmsgb24gYXR0ZXN0YXRp b25zIEFQSXMgZm9yIGJyb3dzZXJzIGFmdGVyIFJBVFMgaXMgZG9uZSkuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbiI+DQombmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5PbiBOb3YgMTEsIDIwMTksIGF0IDU6NDMgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBo cmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj5kdGhhbGVyQG1pY3Jvc29mdC5jb208 L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFzIGZhciBhcyBJIGNhbiB1bmRlcnN0YW5kIGZyb20g ZHJhZnQtYmlya2hvbHotcmF0cy1iYXNpYy15YW5nLW1vZHVsZS0wMSBhbmQ8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmRyYWZ0LWZlZG9ya293LXJhdHMtbmV0d29yay1k ZXZpY2UtYXR0ZXN0YXRpb24tMDEsIHRoZXkgYnJlYWsgZG93biB0aGUgdXNlIGNhc2U8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnNwYWNlIGFzIGZvbGxvd3M6PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSZXF1aXJlbWVudHM/PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzstLS0tLS0t LS0tLS0tLSYjNDM7LS0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0mIzQzOyYjNDM7LS0tLS0t LS0tLS0tLS0tPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCZuYnNwOyBSb1QmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCBIb3N0IEZpcmV3YWxsIHwgUHJpdmFjeSB8fCZuYnNwOyZuYnNwOyBTb2x1dGlv biZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDt8Jm5ic3A7IFR5cGUmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBFbmFibGVkJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHwgTmVlZGVkJm5ic3A7IHx8Jm5ic3A7Jm5ic3A7Jm5ic3A7IFBpZWNlcyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0t LS0tLS0mIzQzOy0tLS0tLS0tLSYjNDM7JiM0MzstLS0tLS0tLS0tLS0tLS08L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxJm5ic3A7IHwmbmJzcDsgU0dYJm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IDImbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDMmbmJzcDsgfCZuYnNw OyBTR1gmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7fCBZ ZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDQmbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA1Jm5i c3A7IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IDYmbmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDcmbmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUmbmJzcDsmbmJzcDsgfCBZZXMm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IDgmbmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUmbmJzcDsmbmJzcDsg fCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyA5Jm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fCBkcmFmdC1iaXJraG9sei1yYXRzLWJhc2ljLXlhbmct bW9kdWxlLTAxPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTAmbmJzcDsgfCZuYnNwOyBU UE0mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDExJm5ic3A7IHwmbmJzcDsgVFBNJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNv bGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsxMiZuYnNwOyB8Jm5i c3A7IFRQTSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDEzJm5ic3A7IHxTZWN1cmVFbGVtZW50IHwgTm8mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IDE0Jm5ic3A7IHxTZWN1cmVFbGVtZW50IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxNSZuYnNwOyB8 U2VjdXJlRWxlbWVudCB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjoj MUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTYmbmJzcDsgfFNlY3VyZUVsZW1lbnQg fCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgfCBZZXMmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7fHw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyAxNyZuYnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE4Jm5ic3A7IHwgRmlybXdhcmUmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE5Jm5ic3A7IHwgRmlybXdhcmUmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8fDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDIwJm5ic3A7IHwgRmlybXdhcmUm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfHw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAuLi4gfCZuYnNwOyZuYnNwOyAu Li4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAmbmJzcDsmbmJzcDt8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHx8PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFuZCBkcmFmdC1mZWRv cmtvdy1yYXRzLW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxIGZ1cnRoZXIgc2NvcGVzIGl0 c2VsZiBkb3duPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5ieSBvbmx5 IGJlaW5nIGFwcGxpY2FibGUgdG8gY2FzZXMgd2l0aCAmcXVvdDtlbWJlZGRlZCZxdW90OyBhcHBz IG9ubHkgPSBZZXMsIGFuZCB3aGVyZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+dGhlIHNlY3VyaXR5IHBvbGljeSBpcyBvbmx5IGFuIEV4YWN0IG1hdGNoIGFnYWluc3Qg cmVmZXJlbmNlIHZhbHVlcyA9IFllcy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPkkgYmVsaWV2ZSB0aGF0IHRoZSB5YW5nIGRyYWZ0IGRvZXNuJ3QgaGF2ZSB0aG9zZSB0 d28gcmVzdHJpY3Rpb25zLCBmcm9tIG15IHJlYWRpbmcuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5Ib3dldmVyLCB0aGUgcG9pbnQgaXMgdGhhdCBib3RoIGRyYWZ0cyBh cmUgVkVSWSBuYXJyb3csIGFuZCBpbiB0aGUgdGFibGUgc2hvd24gYWJvdmUsPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5vbmx5IGFkZHJlc3MgMSBvdXQgb2YgMjAgcG9z c2liaWxpZXMgaW4gdGhhdCBzcGFjZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SW4g Y29udHJhc3QsIHRoZSBURUVQIFdHIGRlY2lkZWQgdGhhdCBpdCB3YXMgbm90IGludGVyZXN0ZWQg aW4gbmFycm93IHNjb3BpbmdzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4oc3BlY2lmaWNhbGx5IHNvbWV0aGluZyBHbG9iYWwgUGxhdGZvcm0gc3BlY2lmaWMpLCBidXQg aW5zdGVhZCB3YW50ZWQgb25lIGdlbmVyYWwgc29sdXRpb24uPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPklmIHRoZSBSQVRTIFdHIHNwZW5kcyBlZmZvcnQgb24gc29tZXRoaW5nIHRoYXQg b25seSBhZGRyZXNzZXMgYSBzaW5nbGUgcm93IG91dCBvZiAyMCYjNDM7IHJvd3MsPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj50aGVuIGRvIHdlIGV4cGVjdCAxOSYjNDM7 IG90aGVyIHNvbHV0aW9ucyB0byBhbHNvIGJlIGRvbmUgaW4gdGhlIFdHPyZuYnNwOyBPciBjb3Vs ZCB3ZSB3b3JrIG9uIHRoaW5nczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+dGhhdCBhcmUgYnJvYWRlciBhbmQgaGFwcGVuIHRvIGFsc28gd29yayBmb3Igcm93IDk/PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkndmUgc2VlbiBvdGhlcnMgY29tbWVudGluZyBv biB0aGUgZmFjdCB0aGF0IHRoZSBZQU5HIG1vZHVsZSBvbmx5IHN1cHBvcnRzIFRQTXMgYW5kIG5v dDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+b3RoZXIgdGhpbmdzIChF QVRzIGV0YyksIHdoaWNoIHdvdWxkIGp1c3QgYWRkIHN1cHBvcnQgZm9yIGEgY291cGxlIG1vcmUg cm93cywgYnV0IHN0aWxsIG5vdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+YmUgZ2VuZXJhbC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+UGVyc29uYWxseSwg SSB3b3VsZCBtdWNoIHJhdGhlciBzZWUgdGhlIFdHIHNwZW5kIGVmZm9ydCBvbiB0aGluZ3MgdGhh dCByZWFsbHkgYXJlIGdlbmVyaWMsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5pLmUuLCB3b3JrIHdpdGggb3Igd2l0aG91dCBob3N0IGZpcmV3YWxscywgd29yayB3aXRo IG11bHRpcGxlIFJvVC9URUUgdHlwZXMsIGV0Yy4sIHJhdGhlcjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+dGhhbiBzZWVpbmcgYW4gZXhwbG9zaW9uIG9mIHBvaW50IHNv bHV0aW9ucy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+RGF2ZTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj5Gcm9tOjwvYj4gUkFUUyAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsN CjxiPk9uIEJlaGFsZiBPZiA8L2I+U21pdGgsIE5lZDxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXks IE5vdmVtYmVyIDExLCAyMDE5IDEwOjEyIEFNPGJyPg0KPGI+VG86PC9iPiBPbGl2ZXIsIElhbiAo Tm9raWEgLSBGSS9Fc3BvbykgJmx0OzxhIGhyZWY9Im1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJl bGwtbGFicy5jb20iPmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbTwvYT4mZ3Q7OyBMYXVy ZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20i PmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4mZ3Q7OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2lu ZykgJmx0OzxhIGhyZWY9Im1haWx0bzpuY2Ftd2luZ0BjaXNjby5jb20iPm5jYW13aW5nQGNpc2Nv LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiA8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9y ZyI+cmF0c0BpZXRmLm9yZzwvYT47IEhlbmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpo ZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBDYWxsIGZvciBh ZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQ8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+UmlnaHQuIFRoaXMgaW1wbGllcyB0aGUgUkFUUyDi gJx0b2tlbuKAnSBzaG91bGQgc3VwcG9ydCBleGlzdGluZyDigJxiaW5hcnnigJ0gZm9ybWF0cyBh cyBhbiBlbmNhcHN1bGF0aW9uIChzaWduZWQgYnkgYSBzZWNvbmQgVEEgd2hlcmUgdGhlIFRQTSBp cyBhIGZpcnN0IFRBKSBvciBhcyBhIGNvbnZleWFuY2UgKHVuc2lnbmVkPykgdG9rZW4uIFBvc3Np Ymx5LCB0aGUgb25seSBhZGRlZA0KIHZhbHVlIG9mIHRoZSBsYXR0ZXIgaXMgYSB0YWcgdGhhdCBp ZGVudGlmaWVzIGl0IGFzIGEgVFBNIGJpbmFyeSBmb3JtYXQ/PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+T24gMTEvMTAvMTksIDIzOjIxIFBNLCAmcXVvdDtSQVRT IG9uIGJlaGFsZiBvZiBPbGl2ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykmcXVvdDsgJmx0Ozxh IGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPnJhdHMtYm91bmNlc0BpZXRmLm9y ZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86aWFuLm9saXZlckBub2tpYS1iZWxs LWxhYnMuY29tIj5pYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MS4waW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29s b3I6YmxhY2siPiZndDsgUmVtb3RlIFRQTSBhdHRlc3RhdGlvbnMgYXJlIHVzZWZ1bCBhbmQgbmVj ZXNzYXJ5IHRoZSBzaG9ydCBydW4sIGJ1dCBhcmUgb2YgdmVyeSBsaW1pdGVkIGNhcGFiaWxpdHku IEkgYmVsaWV2ZSB0aGF0ICZndDsgRUFUIHdpbGwgcmVwbGFjZSBUUE0gYXR0ZXN0YXRpb25zDQog aW4gdGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVzKSBiZWNhdXNlIHRoZXkgYXJlIGZhciBtb3Jl IGV4cHJlc3NpdmUuIEkga25vdyAmZ3Q7IG90aGVycyBiZWxpZXZlIHRoYXQgdG9vLiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Nv bG9yOmJsYWNrIj5JIHdvdWxkIGRpc2FncmVlIHdpdGggdGhlIHN0YXRlbWVudCBvZiAmcXVvdDtz aG9ydCBydW4mcXVvdDsgLi4uIFRQTSBpcyBwcmFjdGljYWxseSB0aGUgb25seSBleGlzdGluZyBz dGFuZGFyZGlzZWQgKGhhcmR3YXJlLCBzb2Z0d2FyZSwgZmlybXdhcmUsIG1lYXN1cmVtZW50IC0N CiB4ODYgb25seSBldGMpIGhhcmR3YXJlIHJvb3Qgb2YgdHJ1c3QgaW4gY29tbW9uIHVzZSwgaWU6 IHByYWN0aWNhbGx5IGFsbCB4ODYgbWFjaGluZXMsJm5ic3A7IFRoZSBhdHRlc3RhdGlvbiBtZWNo YW5pc21zIHByb3ZpZGVkIGFyZSBnb2luZyB0byBiZSBhcm91bmQgZm9yIGEgdmVyeSBsb25nIHRp bWUuJm5ic3A7DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47YmFja2dyb3VuZDp3aGl0ZSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjBpbjtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbSB0ZWxjbyBleHBlcmllbmNlLCAzMCB5ZWFycyBh Z28gd2Ugc2FpZCBTUzcgd291bGQgb25seSBiZSBhcm91bmQgaW4gdGhlIHNob3J0IHRlcm0uPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47YmFja2dyb3Vu ZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPiZndDsg VGh1cywgSSBhbSBvcHBvc2VkIHRvIGFkb3B0aW9uIHdpdGggdGhlIGN1cnJlbnQgVFBNLW9ubHkg ZHJhZnQuIEnigJlkIGJlIE9LIHdpdGggdGhlIGN1cnJlbnQgZHJhZnQgYW5kIGEgcHJvbWlzZSAm Z3Q7IHRvIGFkZCBFQVQgdG8gaXQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47 YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjtiYWNrZ3JvdW5kOndoaXRlIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+QWdyZWU8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Y29sb3I6YmxhY2siPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjti YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFj ayI+SWFuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJT aWduYXR1cmUiPg0KPGRpdiBpZD0iZGl2dGFnZGVmYXVsdHdyYXBwZXIiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+LS0gPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEu MGluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+RHIuIElhbiBPbGl2ZXI8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW4iPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LHNlcmlmIj5DeWJlcnNlY3VyaXR5IFJlc2VhcmNoPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+RGlzdGluZ3Vpc2hlZCBNZW1iZXIgb2YgVGVjaG5pY2FsIFN0YWZmPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyxzZXJpZiI+Tm9raWEgQmVsbCBMYWJzPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+JiM0MzszNTggNTAgNDgzIDYyMzc8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYg Y2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47 dGV4dC1hbGlnbjpjZW50ZXIiPg0KPGhyIHNpemU9IjAiIHdpZHRoPSI4MSUiIGFsaWduPSJjZW50 ZXIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgaWQ9ImRpdlJwbHlGd2RNc2ciPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48Yj5Gcm9tOjwvYj4gTGF1cmVu Y2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj5s Z2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0Ozxicj4NCjxiPlNlbnQ6PC9iPiAxMSBOb3ZlbWJl ciAyMDE5IDAwOjQ0PGJyPg0KPGI+VG86PC9iPiBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykg Jmx0OzxhIGhyZWY9Im1haWx0bzpuY2Ftd2luZ0BjaXNjby5jb20iPm5jYW13aW5nQGNpc2NvLmNv bTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBIZW5rIEJpcmtob2x6ICZsdDs8YSBocmVmPSJtYWls dG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSI+aGVuay5iaXJraG9sekBzaXQuZnJh dW5ob2Zlci5kZTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi4ub3JnIj5yYXRz QGlldGYuLm9yZzwvYT4gJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGll dGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBDYWxsIGZvciBh ZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQNCjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjEuMGluIj5PbiBOb3YgMTAsIDIwMTksIGF0IDI6MjAgUE0sIE5hbmN5IENhbS1X aW5nZXQgKG5jYW13aW5nKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbSI+ bmNhbXdpbmdAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZl dGljYSI+U28sIExhdXJlbmNlLCBhcmUgeW91IHN0aWxsIE9LIHdpdGggdGhlIGFkb3B0aW9uIG9m IHRoZSBjdXJyZW50IGRyYWZ0IHdpdGggYSByZW5hbWUgZm9yIG5vdz88YnI+DQpUaGFua3MsIE5h bmN5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuMGluIj5JIHRoaW5rIHRoZSB2YWx1ZSBhZGQgdG8gdGhlIGxhcmdlciBSQVRTIGVmZm9y dCBvZiBhZGRpbmcgRUFUIHN1cHBvcnQgdG8gdGhpcyBZQU5HIHByb3RvY29sIGlzIHJlYWxseSBo aWdoLiBJdCBhIGNvcmUgdGhpbmcgdG8gZG8gdGhhdCBoZWxwcyBicmluZyB0b2dldGhlciB0aGUg dHdvIGF0dGVzdGF0aW9uIHdvcmxkcyBhbmQgbWFrZSB0aGUgVFBNIGFuZCBFQVQgd29yaw0KIGhl cmUgbGVzcyBsaWtlIHNoaXBzIGluIHRoZSBuaWdodC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPlJlbW90ZSBUUE0gYXR0ZXN0YXRpb25zIGFyZSB1c2Vm dWwgYW5kIG5lY2Vzc2FyeSB0aGUgc2hvcnQgcnVuLCBidXQgYXJlIG9mIHZlcnkgbGltaXRlZCBj YXBhYmlsaXR5LiBJIGJlbGlldmUgdGhhdCBFQVQgd2lsbCByZXBsYWNlIFRQTSBhdHRlc3RhdGlv bnMgaW4gdGhlIGxvbmcgcnVuIChtYXliZSBkZWNhZGVzKSBiZWNhdXNlIHRoZXkgYXJlIGZhciBt b3JlIGV4cHJlc3NpdmUuDQogSSBrbm93IG90aGVycyBiZWxpZXZlIHRoYXQgdG9vLiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+SWYgd2UgZG9u 4oCZdCBpbmNsdWRlIEVBVCBpbiB0aGUgWUFORyBtb2RlIGl0IGlzIHNvcnQgb2YgbGlrZSBkZWZp bmluZyBIVFRQIHRvIG9ubHkgY29udmV5IEhUTUwgdG8gdGhlIGV4Y2x1c2lvbiBvZiBQREYuIFdl 4oCZcmUgZGVmaW5pbmcgYW4gYXR0ZXN0YXRpb24gcHJvdG9jb2wgdGhhdCBjYW4gb25seSBtb3Zl IG9uZSBraW5kIG9mIGF0dGVzdGF0aW9uIGV2ZW4gdGhvdWdoDQogd2UgaGF2ZSBjb25zZW5zdXMg b24gd2hhdCB0aGUgb3RoZXIgb25lIGxvb2tzIGxpa2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5JdCBzZWVtcyByZWxhdGl2ZWx5IHNpbXBsZSB0byBh ZGQgRUFUIHN1cHBvcnQgKG9yIHByb21pc2UgdG8gYWRkIEVBVCBzdXBwb3J0KS4gUHJldHR5IHN1 cmUgSSBoZWFyZCBIZW5rIGFncmVlIHRvIGFkZCBpdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPlRodXMsIEkgYW0gb3Bwb3NlZCB0byBhZG9wdGlvbiB3 aXRoIHRoZSBjdXJyZW50IFRQTS1vbmx5IGRyYWZ0LiBJ4oCZZCBiZSBPSyB3aXRoIHRoZSBjdXJy ZW50IGRyYWZ0IGFuZCBhIHByb21pc2UgdG8gYWRkIEVBVCB0byBpdC48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDox LjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkxMPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4i PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_6CBB62C4A3574F9E8B7846E6C64CC32Aintelcom_-- From nobody Fri Nov 15 18:13:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64AB6120059 for ; Fri, 15 Nov 2019 18:13:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zP9HjHc_v0Re for ; Fri, 15 Nov 2019 18:13:15 -0800 (PST) Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E067120046 for ; Fri, 15 Nov 2019 18:13:05 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2019 18:13:04 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,310,1569308400"; d="scan'208";a="208307960" Received: from orsmsx103.amr.corp.intel.com ([10.22.225.130]) by orsmga003.jf.intel.com with ESMTP; 15 Nov 2019 18:13:04 -0800 Received: from orsmsx151.amr.corp.intel.com (10.22.226.38) by ORSMSX103.amr.corp.intel.com (10.22.225.130) with Microsoft SMTP Server (TLS) id 14.3.439.0; Fri, 15 Nov 2019 18:13:04 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX151.amr.corp.intel.com ([169.254.7.41]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 18:13:03 -0800 From: "Smith, Ned" To: Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Michael Richardson , Laurence Lundblade , "rats@ietf.org" Thread-Topic: terminology: claims and tokens was Re: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVnCNggHPX9j+SzkiHH+EvpER1/w== Date: Sat, 16 Nov 2019 02:13:02 +0000 Message-ID: <47D47C56-75B2-4892-AB9D-41C693E2BB3D@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.107] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Rats] terminology: claims and tokens was Re: Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 02:13:17 -0000 UmVuYW1pbmcgdGhpcyB0aHJlYWQgc2luY2UgaXQgc2VlbXMgdG8gaGF2ZSBkaXZlcmdlZC4NCg0K V2hhdCBJIHRoaW5rIEkgaGVhcmQgaXMgdGhhdCB0aGUgdGVybWlub2xvZ3kgc2hvdWxkIGRpc2Ft YmlndWF0ZSBiZXR3ZWVuIHNvbWV0aGluZyB0aGF0IGlzIGEgZGF0YSBtb2RlbCAvIGluZm9ybWF0 aW9uIG1vZGVsIGV4cHJlc3Npb24gKGUuZy4gY2xhaW0gLSBhdCBsZWFzdCBmb3Igbm93KSBhbmQg c29tZXRoaW5nIHRoYXQgaXMgYW4gZW5jb2Rpbmcgb2YgdGhlIERNIGV4cHJlc3Npb24gKGUuZy4g dG9rZW4pLiBJcyB0aGVyZSBicm9hZCBhZ3JlZW1lbnQgdGhhdCB3aGVuIHRoZSB0ZXJtICd0b2tl bicgaXMgdXNlZCBpdCByZWZlcnMgdG8gYSAid2lyZS1mb3JtYXQiIHJlYWxpemF0aW9uIG9mIENs YWltPyANCg0KVGhpcyBkZWZpbml0aW9uIG9mIENsYWltIG1heSBub3QgYmUgdW5pdmVyc2FsbHkg c2hhcmVkIHdpdGhpbiB0aGUgSUVURi4gSXMgdGhpcyB0cnVlPyBJZiBub3QsIHdoYXQgaXMgdGhl IHdpcmUtZm9ybWF0IGRlZmluaXRpb24gb2YgY2xhaW0/DQoNCk11bHRpcGxpY2l0eSB0ZXJtaW5v bG9neSBpcyBhbm90aGVyIGFyZWEgb2YgYW1iaWd1aXR5LiBUaGVyZSBhcmUgdHdvIHBsdXJhbHMg Zm9yIGNsYWltIG5hbWVseSAiQ2xhaW1zIiBhbmQgInNldCBvZiBjbGFpbSIgb3IgInNldCBvZiBj bGFpbXMiIC0gSSBkb24ndCBrbm93IGlmIHRoZXNlIGFyZSBpbnRlbmRlZCB0byBiZSBzeW5vbnlt cyBvciBpZiAic2V0IG9mIGNsYWltcyIgaGFzIG11bHRpcGxlIGRpbWVuc2lvbnMgb2YgcGx1cmFs aXR5LiANCg0KSXQgc2hvdWxkIGZvbGxvdyB0aGF0IFRva2VucywgInNldCBvZiBUb2tlbiIgYW5k ICJzZXQgb2YgVG9rZW5zIiBhcyBleHByZXNzaW9ucyBvZiBwbHVyYWxpdHkgYXJlIHRoZSBzYW1l IGFzIGZvciBjbGFpbXMgZXQuYWwuIG9ubHkgd2l0aCB0aGUgYWRkZWQgcmVxdWlyZW1lbnQgdGhh dCB0aGVyZSBpcyBhIHdpcmUtZm9ybWF0IHJlcHJlc2VudGF0aW9uIG9mIGl0LiANCg0KVGhlIEVB VCBkcmFmdCBkZWZpbmVzIGNsYWltcyB0aGF0IGFyZSBwbHVyYWxzIG9mIGNsYWltIC0gbmFtZWx5 ICJuZXN0ZWQgRUFUcyIgYW5kICJzdWJtb2RzIi4gDQpJdCBpcyBwcm9iYWJseSBjb3JyZWN0IHRv IHNheSB0aGF0IGEgbmVzdGVkX0VBVCAoY2xhaW0gb3IgdG9rZW4pIGlzIGEgInNldCBvZiB0b2tl bnMiLiBBcyBuZWFyIGFzIEkgY2FuIHRlbGwsIHRoZSBkcmFmdCBpcyBkZWZpbmluZyB0aGUgY29u dGVudHMgb2YgdGhlIG5lc3RlZF9FQVQgY2xhaW0gYXMgYSBzdHJ1Y3R1cmUgdGhhdCBpcyBpbiBh IHdpcmUtZm9ybWF0LiBJdCBpcyByZWFzb25hYmxlIHRvIGFzc3VtZSB0aGF0IHRoZSBuZXN0ZWRf RUFUIGNsYWltIGNvdWxkIGJlIHJlYWxpemVkIGFzIGEgdG9rZW4gKGltcGx5aW5nIHRoZSBvdXRl ciBtb3N0IGxheWVyIGZvcm1hdHRpbmcgbmVlZHMgdG8gYmUgYXBwbGllZCkuDQoNCkkgZG9uJ3Qg dGhpbmsgSSBmdWxseSBjb21wcmVoZW5kIHRoZSBzdWJtb2RzIGNsYWltIHNvIEkgbWF5IG5vdCBy ZXByZXNlbnQgaXQgY29ycmVjdGx5LiBJdCBhcHBlYXJzIHRvIGJlIGEgc2V0IG9mIGNsYWltcyAo b3IgYXQgbGVhc3QgYSBzZXQgb2YgbmFtZXMgdGhhdCBjb3JyZXNwb25kcyB0byBjbGFpbXMpIHRo YXQgY2FuIGJlIHJlYWxpemVkIGFzIGEgdG9rZW4uIEluIHRoaXMgZXhwcmVzc2lvbiwgdGhlIHNl dCBvZiBjbGFpbXMgYXJlIHJlYWxpemVkIGFzIGEgc2V0IG9mIHN0cmluZ3MgcmF0aGVyIHRoYW4g YSBzZXQgb2YgdG9rZW5zLiANCg0KQXJlIHRoZXJlIFlBTkcgZXhwcmVzc2lvbnMgdGhhdCBleGhp Yml0IHNpbWlsYXIgb3IgcmVsZXZhbnQgcHJvcGVydGllcyBpbiB0ZXJtcyBvZiBDbGFpbSB2cy4g VG9rZW4gYW5kIHRoZWlyIHBsdXJhbHM/DQoNClRoYW5rcywNCk5lZA0KDQrvu79PbiAxMS8xMy8x OSwgMzo1NSBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIEhlbmsgQmlya2hvbHoiIDxyYXRzLWJvdW5j ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+ IHdyb3RlOg0KDQogICAgUGxlYXNlIGZpbmQgY29tbWVudHMgYW5kIHJlcGxpZXMgaW4tbGluZS4N CiAgICANCiAgICBPbiAxMy4xMS4xOSAxMjo0NCwgU2Now7Zud8OkbGRlciwgSsO8cmdlbiB3cm90 ZToNCiAgICA+IE9uIFdlZCwgTm92IDEzLCAyMDE5IGF0IDEyOjI1OjIxUE0gKzAxMDAsIEhlbmsg Qmlya2hvbHogd3JvdGU6DQogICAgPj4gT25lIHJlYXNvbiBmb3IgdGhpcyAtIGFuZCBJIHRyaWVk IHRvIGV4cHJlc3MgdGhhdCBjYXJlZnVsbHkgLSBpcyB0aGF0IGp1c3QNCiAgICA+PiB1c2luZyB0 aGUgd29yZCAidG9rZW4iIGNvdWxkIGJlIHZlcnkgY29uZnVzaW5nLiBXZSBhcmUgdXNpbmcgIkNs YWltIiBhcyBhDQogICAgPj4gc3lub255bSB0byAiQXNzZXJ0aW9uIiBhdCB0aGUgbW9tZW50LiBP dXRzaWRlIG9mIHRoZSBJRVRGIHRoYXQgbWFrZXMgYSBsb3QNCiAgICA+PiBvZiBzZW5zZS4gSW5z aWRlIHRoZSBJRVRGLCB3ZSBzdGlsbCBoYXZlIHRvIGJlIGEgYml0IGNhcmVmdWwgaGVyZSwgYXMN CiAgICA+PiAiQ2xhaW0iIGlzIHdlbGwgZGVmaW5lZCBpbiBXZWIgVG9rZW5zIC0gYW5kIGl0IGlz IGEgZGF0YSBtb2RlbCB0ZXJtDQogICAgPj4gKGJhc2ljYWxseTogYSBzcGVjaWZpYyBrZXkgdmFs dWUgcmVwcmVzZW50YXRpb24pLg0KICAgID4gDQogICAgPiBJIGxvb2tlZCBpbnRvIEpXVCBhbmQg SSB0aGluayBJIHJvdWdobHkga25vdyB3aGF0IHRoZXkgbWVhbiBieSBjbGFpbS4NCiAgICA+IE5v dyB3ZSBoYXZlICJhc3NlcnRpb24iIChhbHNvIG5vdCBkZWZpbmVkIGluIHlvdXIgYXJjaGl0ZWN0 dXJlIGRyYWZ0KS4NCiAgICA+IEhtbS4NCiAgICANCiAgICBZZXMuIEkgYW0gc29ycnkgaXQgaXMg dGhpcyB3YXkuIElmIHlvdSBoYXZlIGEgbG9vayBhdCBJVFUtVCAxMjUyIFNlY3Rpb24gDQogICAg Ni42IChmcmVlIHJlZmVyZW5jZSBoZXJlOiANCiAgICBodHRwczovL3d3dy5pdHUuaW50L1NHLUNQ L2V4YW1wbGVfZG9jcy9JVFUtVC1SRUMvSVRVLVQtUkVDX0UucGRmKSBpdCBpcyANCiAgICBub3Qg dGhhdCBiYWQuIEJ1dCB0aGF0IGlzICJvdXRzaWRlIElFVEYiLiBOb3QgZXZlcnkgQXR0ZXN0YXRp b24gDQogICAgRXZpZGVuY2UsIEVuZG9yc2VtZW50IG9yIChsZXQncyBub3QgY2FsbCBpdCBSZWZl cmVuY2UgVmFsdWUgdG8gYWRkcmVzcyANCiAgICBEYXZlJ3MgY29tbWVudCwgYnV0KSBBcHByYWlz YWwgUG9saWN5PyBpcyB1c2luZyAiV2ViIFRva2VuIENsYWltcyIsIHRoZXkgDQogICAgYWxsIHVz ZSBBc3NlcnRpb25zLiBXZSB3aWxsIGFkZCB0ZXh0IHRoYXQgaGlnaGxpZ2h0cyB0aGF0IGluIHRo ZSBzY29wZSANCiAgICBvZiB0aGUgYXJjaGl0ZWN0dXJlIHRoZXNlIGFyZSBzeW5vbnltcyBhbmQg bm90IHRoZSBXZWIgVG9rZW4gQ2xhaW1zLg0KICAgIA0KICAgID4gICANCiAgICA+PiBBbiBFQVQg aXMgYSBDV1QgKG9yIEpXVCwgbm90IHRoZSBwb2ludCkuIFNvIGJvdGggYXJlIENsYWltIHNldHMg dGhhdCBjb21wb3NlDQogICAgPj4gdG9rZW5zLiBUaGUgYXJjaGl0ZWN0dXJlIGlzIGludGVuZGVk IHRvIGJlIHJlcHJlc2VudGF0aW9uIChJIGFtIHVzaW5nIHRoaXMNCiAgICA+PiB0ZXJtIHRvIGRh bmNlIGFyb3VuZCB0aGUgc2FuaXR5IHJlbmRpbmcgc2VyaWFsaXphdGlvbi9lbmNvZGluZyB3b3Jk cywgYW5kIHRvDQogICAgPj4gc3BhcmUgUmljaCBzb21lIG9mIHRoZSBwYWluKSBhZ25vc3RpYy4g Q2xhaW1zIGluIHRoZSBhcmNoaXRlY3R1cmUgYXJlDQogICAgPj4gdGhlcmVmb3JlIHJlcHJlc2Vu dGF0aW9uIGFnbm9zdGljLCB0b28uIENsYWltcyBpbiB0b2tlbnMgLSBieSBSRkMgZGVmaW5pdGlv bg0KICAgID4+IC0gYXJlIG5vdC4NCiAgICA+IA0KICAgID4gVG8gbWUsIGl0IHNlZW1lZCBsaWtl IGluIEpXVCwgd2UgaGF2ZSAnc2V0cyBvZiBjbGFpbXMnIGFuZCB0aGVuIHRoZXNlDQogICAgPiBj bGFpbSBzZXRzIGFyZSBzZXJpYWxpemVkIGludG8gYSBzdHJpbmcgcmVwcmVzZW50YXRpb24gKCdz ZXJpYWxpemVkDQogICAgPiBzZXRzIG9mIGNsYWltcycpIGFuZCB0aGUgc2VyaWFsaXphdGlvbiBp cyBmaW5hbGx5IGRpZ2l0YWxseSBzaWduZWQgYW5kDQogICAgPiBlbmNyeXB0ZWQsIGdpdmluZyB1 cyBhIHRva2VuLiBUaGlzIHdvcmtzIGZvciBtZS4NCiAgICA+IA0KICAgID4gVGhlIG5vdGlvbiBv ZiAiY2xhaW0gc2V0cyB0aGF0IGNvbXBvc2UgdG9rZW4iIGNvbmZ1c2VzIG1lLiBJZiBJIGNvbXBv c2UNCiAgICA+IHRva2VuLCBJIGdldCBhICJzZXQgb2YgdG9rZW5zIi4gWWVzLCBpbmRpcmVjdGx5 IEkgZ2V0IGFsc28gYSB1bmlvbig/KQ0KICAgID4gb2YgdGhlIGNsYWltIHNldHMgaW5jbHVkZWQg aW4gdGhlIHRva2Vucy4NCiAgICANCiAgICBCYWQgd29yZGluZy4gUmVhZGFiaWxpdHkuIE15IHdl YWsgc3BvdCBhcyBpdCBzZWVtcy4gV2hhdCBJIG1lYW50IHdhcyANCiAgICB0aGF0IChsaXRlcmFs bHkpIGEgc2V0IG9mIENsYWltcyBpbiBhIEpTT04gb2JqZWN0IGNvbXBvc2UgYSBXZWIgVG9rZW4u IA0KICAgIFZlcnkgc2ltcGxlIG5vdGhpbmcgbW9yZSA6KSBJIHRoaW5rIHdlIG1lYW4gdGhlIHNh bWUuIFBsZWFzZSBjb3JyZWN0IG1lLCANCiAgICBpZiBJIGFtIHdyb25nLg0KICAgIA0KICAgID4g DQogICAgPiBBbnl3YXksIHdlIG5lZWQgdG8gZ2V0IHRlcm1pbm9sb2d5IHdvcmtlZCBvdXQgb3Ig d2Ugd2lsbCBub3QNCiAgICA+IHVuZGVyc3RhbmQgd2hhdCB3ZSBhcmUgZG9pbmcgb3Igd29yc2Ug d2UgYWdyZWUgb24gc29tZXRoaW5nIGJ1dA0KICAgID4gcGVvcGxlIGludGVycHJldCB0aGUgYWdy ZWVtZW50IGRpZmZlcmVudGx5Li4uDQogICAgDQogICAgV2UgYXJlIGluIHdpbGQgYWdyZWVtZW50 IGhlcmUuDQogICAgDQogICAgPiANCiAgICA+PiBJIGFtIG5vdCBhIHN1cGVyIGJpZyBmYW4gb2Yg dGhpcyBjb21wcm9taXNlLCBidXQgaXQgZm91bmQgY29uc2Vuc3VzLCByZW1vdmVkDQogICAgPj4g YSBibG9ja2VyLCBhbmQgd2Ugd2VyZSBhYmxlIHRvIHByb2dyZXNzLg0KICAgID4gDQogICAgPiBQ cm9ncmVzcyBpcyB3aGVuIHdlIGFsbCBhZ3JlZSBvbiB0aGUgc2FtZSB0aGluZy4NCiAgICANCiAg ICBUaGVyZSB3YXMuIEF0IHNvbWUgcG9pbnQuIElmIGl0IGlzIG5vdCBhbnltb3JlLCB3ZSBjYW4g bWFrZSB0aGlzIGFuIA0KICAgIGlzc3VlIGluIHRoZSB1cGNvbWluZyBjb252ZXJnZWQgYXJjaGl0 ZWN0dXJlIEktRC4NCiAgICANCiAgICA+IA0KICAgID4gL2pzDQogICAgPiANCiAgICANCiAgICBW aWVsZSBHcsO8w59lLA0KICAgIA0KICAgIEhlbmsNCiAgICANCiAgICBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIFJBVFMgbWFpbGluZyBsaXN0DQog ICAgUkFUU0BpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vcmF0cw0KICAgIA0KDQo= From nobody Fri Nov 15 18:37:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5207A1200F1 for ; Fri, 15 Nov 2019 18:37:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id II1x9QT5G9Lc for ; Fri, 15 Nov 2019 18:37:09 -0800 (PST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E966120088 for ; Fri, 15 Nov 2019 18:37:09 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Nov 2019 18:37:09 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,310,1569308400"; d="scan'208";a="236285083" Received: from orsmsx101.amr.corp.intel.com ([10.22.225.128]) by fmsmga002.fm.intel.com with ESMTP; 15 Nov 2019 18:37:09 -0800 Received: from orsmsx111.amr.corp.intel.com (10.22.240.12) by ORSMSX101.amr.corp.intel.com (10.22.225.128) with Microsoft SMTP Server (TLS) id 14.3.439.0; Fri, 15 Nov 2019 18:37:09 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX111.amr.corp.intel.com ([169.254.12.253]) with mapi id 14.03.0439.000; Fri, 15 Nov 2019 18:37:08 -0800 From: "Smith, Ned" To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Michael Richardson CC: "rats@ietf.org" Thread-Topic: interaction model and token opacity was Re: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVnCa9Gk1umARWmkGVqcopiBC2wA== Date: Sat, 16 Nov 2019 02:37:07 +0000 Message-ID: <7A120109-ED2A-46F5-A419-9AA30D96357C@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.107] Content-Type: text/plain; charset="utf-8" Content-ID: <66908322A61DC547B42C3D347563EE40@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Rats] interaction model and token opacity was Re: Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 02:37:11 -0000 Q2hhbmdpbmcgdGhlIG5hbWUgc2luY2UgdGhlIHRocmVhZCBzZWVtcyB0byBoYXZlIGRpdmVyZ2Vk Lg0KDQpUaGVyZSBzZWVtcyB0byBiZSBhIHJlcXVpcmVtZW50IHRoYXQgYSBZQU5HIGV4cHJlc3Np b24gY291bGQgY29udGFpbiBhIFJBVFMgJ3Rva2VuJyBzaW5jZSB0aGUgd2lyZS1mb3JtYXQgc3Ry dWN0dXJlIChiaXRzIHRoYXQgYXJlIHNpZ25lZCkgd291bGQgbm90IGJlIFlBTkcuIFlBTkcgd291 bGQgdHJlYXQgdGhlICd0b2tlbicgYXMgYW4gb3BhcXVlIHN0cnVjdHVyZS4NCg0KQWxzbywgWUFO RyBjYW4gYmUgdXNlZCB0byBtb2RlbCBwcm90b2NvbCBvciBtZXNzYWdlIGZsb3cgaW50ZXJhY3Rp b25zLiBTaW5jZSBZQU5HIGlzIGEgbW9kZWxpbmcgbGFuZ3VhZ2UsIHRoZXJlIGlzIGFuIGVuY29k aW5nIChYTUw/KSBvdXRwdXQgdGhhdCBpcyBpbnB1dCBpbnRvIGFuIGludGVycHJldGVyKD8pIHRo YXQgaW1wbGVtZW50cyB0aGUgcHJvdG9jb2wgc3RhdGUgbWFjaGluZS4gSSBwcmVzdW1lIFJFU1RD T05GIG9yIE5FVENPTkYgYXJlIGV4YW1wbGVzIG9mIHByb3RvY29sIHN0YXRlIG1hY2hpbmVzIHRo YXQgYWNjZXB0IGVuY29kaW5ncyBvZiBhIFlBTkcgcHJvdG9jb2wgZXhwcmVzc2lvbj8NCg0KVGhl IFJBVFMgJ3Rva2VuJyBpcyBvcGFxdWUgdG8gdGhlIHByb3RvY29sIHN0YXRlIG1hY2hpbmUgZXhj ZXB0IGFzIGEgYmxvY2sgdXNlZCB0byBjb25zdHJ1Y3QgYSBwYXlsb2FkIGZvciBhIFJFU1RDT05G IG9yIE5FVENPTkYgZGVmaW5lZCBwcm90b2NvbCBmcmFtZS4NCg0KSWYgdGhlIGF0dGVzdGF0aW9u ICd0b2tlbicgaXMgb2J0YWluZWQgZnJvbSBhIFRQTSwgaXQgaXMgc3RpbGwgbWVhbmluZ2Z1bCB0 byByZWZlciB0byBpcyBhcyBhICd0b2tlbicgc2luY2UgaXQgY29udGludWVzIHRvIGJlIGFuIG9w YXF1ZSBzdHJ1Y3R1cmUgaW4gdGhlIGFib3ZlIGNvbnRleHQuICg/Pz8pDQoNClRoZSBhcmNoaXRl Y3R1cmUgc2hvdWxkIGJlIGFibGUgdG8gZGlzYW1iaWd1YXRlIGJldHdlZW4gdG9rZW5zIHRoYXQg YXJlIHJlYWxpemVkIHVzaW5nIGEgVFBNIHZzLiB0b2tlbnMgcmVhbGl6ZWQgYXMgYSBKV1Qgb3Ig Q1dUIGVuY29kaW5nLiBUaGlzIHJlcXVpcmVtZW50IG1heSBleHBhbmQgdG8gb3RoZXIgdmVuZG9y IHNwZWNpZmljIHRva2VuIGVuY29kaW5ncyBpbiBvcmRlciB0byBzYXRpc2Z5IGNvbXBhdGliaWxp dHkgbmVlZHMgLSBhdCBsZWFzdCBhcyB0aGV5IGV4aXN0IGJldHdlZW4gQXR0ZXN0ZXIgYW5kIFZl cmlmaWVyLg0KDQpIb3dldmVyLCBpdCBtYXkgYmUgYXBwcm9wcmlhdGUgZm9yIHRoZSBhcmNoaXRl Y3R1cmUgdG8gbGltaXQgdGhlIFZlcmlmaWVyIHRvIFJlbHlpbmcgUGFydHkgaW50ZXJhY3Rpb24g dG8gYSBzaW5nbGUgdG9rZW4gZW5jb2Rpbmcgc3VjaCBhcyBDV1QuICAoPz8/KQ0KDQotTmVkDQoN Cu+7v09uIDExLzEzLzE5LCAzOjMyIEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgU2Now7Zud8OkbGRl ciwgSsO8cmdlbiIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgSi5TY2hvZW53 YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPiB3cm90ZToNCg0KICAgIE9uIFdlZCwgTm92IDEz LCAyMDE5IGF0IDA3OjI0OjEwUE0gKzA4MDAsIE1pY2hhZWwgUmljaGFyZHNvbiB3cm90ZToNCiAg ICA+IA0KICAgID4gDQogICAgPiBPbiAyMDE5LTExLTEzIDc6MTQgcC5tLiwgU2Now7Zud8OkbGRl ciwgSsO8cmdlbiB3cm90ZToNCiAgICA+ID4gT24gV2VkLCBOb3YgMTMsIDIwMTkgYXQgMDc6MDQ6 NDBQTSArMDgwMCwgTWljaGFlbCBSaWNoYXJkc29uIHdyb3RlOg0KICAgID4gPj4NCiAgICA+ID4+ IE9uIDIwMTktMTEtMTMgMTo1NiBhLm0uLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6DQogICAg PiA+Pj4gR290IHRoYXQgb25lIHRvdGFsbHkgd3JvbmcuIEkgZXZlbiBrbmV3IGV2ZXJ5dGhpbmcg eW91IGRlc2NyaWJlIGFib3V0IFlBTkcuDQogICAgPiA+Pj4NCiAgICA+ID4+PiBJIHN0aWxsIHRo aW5rIGl0IGlzIGJldHRlciBpZiB3ZSBqdXN0IHN0aWNrIHRvIEVBVCAvIENXVCAvIEpXVCBjbGFp bXMgZGVzY3JpYmVkIHdpdGggQ0RETCBhcyB0aGUgd2F5IHdlIGRlZmluZSBjbGFpbXMgaW4gUkFU UywgZXhjZXB0IGZvciBhIGZldyBUUE0tc3BlY2lmaWMgY2xhaW1zLiANCiAgICA+ID4+IE5vdGhp bmcgSSd2ZSBzYWlkIGlzIG9wcG9zZWQgdG8gdGhhdC4NCiAgICA+ID4+IEkgcmF0aGVyIGFncmVl LiAgSSBkb24ndCB0aGluayB0aGF0IEVBVCBpcyBjb21wbGV4IGVub3VnaCB0byByZXF1aXJlIGEN CiAgICA+ID4+IGRlZmluaXRpb24gaW4gWUFORy4NCiAgICA+ID4+DQogICAgPiA+PiBCdXQsIHRo YXQgYWxzbyBoYXMgbm90aGluZyB0byBkbyB3aXRoIHdoZXRoZXIgd2UnZCBuZWVkIGEgWUFORyBz aWduaW5nDQogICAgPiA+PiBzdGFuZGFyZCBpZiB3ZSBkZWZpbmVkIHRoZW0gaW4gWUFORy4NCiAg ICA+ID4+IFdlIHdvdWxkbid0LCBiZWNhdXNlIHdlJ2QgYmUgc2lnbmluZyBKU09OLCBDQk9SIChv ciBYTUwgaWYgc29tZW9uZQ0KICAgID4gPj4gaW5zaXN0ZWQpIHVzaW5nIEpTT0UgYW5kIENPU0Uu DQogICAgPiA+Pg0KICAgID4gPiBJIGFtIHN0aWxsIGNvbmZ1c2VkIGJ1dCBzbyBmYXIgZm9yIG1l IGl0IG1heSBtYWtlIHNlbnNlIHRvIGhhdmUgdGhlDQogICAgPiA+IGZvbGxvd2luZzoNCiAgICA+ ID4NCiAgICA+ID4gLSBBIFlBTkcgZGVmaW5lZCB0cmFuc3BvcnQgZm9yICJ0b2tlbnMiIHdoaWNo IGxpa2VseSB0cmVhdHMgdG9rZW5zIGFzDQogICAgPiA+ICAgb3BhcXVlIG9iamVjdHMuDQogICAg PiANCiAgICA+IG9rYXksIGFuZCB3ZSBuZWVkIHRoaXMgaW4gdGhlIHNhbWUgZG9jdW1lbnQgKHRo ZSBzYW1lIG1vZGVsPykgYXMgdGhlIFRQTQ0KICAgID4gc3R1ZmY/DQogICAgDQogICAgTGlrZWx5 IG5vdC4NCiAgICAgDQogICAgPiBJIHRoaW5rIHRoYXQgdGhlIHByb2Nlc3Mgd29ya3Mgb2theSBm b3IgVFBNLCBiZWNhdXNlIHdlIGRvbid0IHJlYWxseQ0KICAgID4gZXhwZWN0IHRoZSBzeXN0ZW0g dGhhdCBob3N0cyB0aGUgUkVTVENPTkYgaW50ZXJmYWNlIHRvIGFjdHVhbGx5IHVzZSB0aGUNCiAg ICA+IFJFU1RDT05GIGludGVyZmFjZSB0byB0YWxrIHRvIHRoZSBUUE0uICBXZSBhcmUganVzdCBw cm92aWRpbmcgYSBnYXRld2F5DQogICAgPiB0byBpdC4NCiAgICANCiAgICBTbyB3aGljaCBhcHBs aWNhdGlvbnMgYXJlIHVzaW5nIHRoaXMgUkVTVENPTkYgaW50ZXJmYWNlPyBDYW4gSSBzb21laG93 DQogICAgcmVsYXRlIHRoaXMgYmFjayB0byB0aGUgYXJjaGl0ZWN0dXJlIG1vZGVscz8gSGVuaydz IGRvYyBzZWVtcyB0byBiZQ0KICAgIHRlbGxpbmcgbWUgdGhhdCB0aGUgaWRlYSBpcyB0aGF0ICRz b21ldGhpbmcgbGlrZXMgdG8gcmV0cmlldmUNCiAgICAiZXZpZGVuY2UiIGJ5IGludm9raW5nIFlB TkcgUlBDcy4gU28gd2hhdCBpcyAkc29tZXRoaW5nIGFuZCB3aHkgaXMNCiAgICB0aGUgZXZpZGVu Y2UgVFBNIHNwZWNpZmljPw0KICAgIA0KICAgIC9qcw0KICAgIA0KICAgIC0tIA0KICAgIEp1ZXJn ZW4gU2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZlcnNpdHkgQnJlbWVuIGdHbWJI DQogICAgUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAgICBDYW1wdXMgUmluZyAxIHwgMjg3 NTkgQnJlbWVuIHwgR2VybWFueQ0KICAgIEZheDogICArNDkgNDIxIDIwMCAzMTAzICAgICAgICAg PGh0dHBzOi8vd3d3LmphY29icy11bml2ZXJzaXR5LmRlLz4NCiAgICANCiAgICBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIFJBVFMgbWFpbGluZyBs aXN0DQogICAgUkFUU0BpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmF0cw0KICAgIA0KDQo= From nobody Sat Nov 16 01:33:03 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D38012010E for ; Sat, 16 Nov 2019 01:33:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AYWUUYwuU1ds for ; Sat, 16 Nov 2019 01:33:00 -0800 (PST) Received: from out-19.smtp.github.com (out-19.smtp.github.com [192.30.252.202]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 729F3120059 for ; Sat, 16 Nov 2019 01:33:00 -0800 (PST) Received: from github-lowworker-19d82f6.ac4-iad.github.net (github-lowworker-19d82f6.ac4-iad.github.net [10.52.16.75]) by smtp.github.com (Postfix) with ESMTP id A1E58520DC1 for ; Sat, 16 Nov 2019 01:32:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573896779; bh=tlmozs2V95A6/iLpdnhctCIiYWHpdi1V0qFU9SJh5V8=; h=Date:From:To:Subject:From; b=1N8pCCHD0xegHIOh0WBkN1rzRMk2Pgh5iyPPGLwwQri/CXvVmXSQq0Z9RiFerCGyi qwXjbd3FEYkrIoVnZtmRO2qKuskq5SyoLBzX/x1C3SSvZtHwk+c0OxaEmBvyb8Foll T1hoqubDd5KZIFVGMT6IjEH82SLjFjqhz6LZgEBw= Date: Sat, 16 Nov 2019 01:32:59 -0800 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] a1ec96: Typographic errors in OEM ID section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 09:33:02 -0000 Branch: refs/heads/update_oui Home: https://github.com/ietf-rats-wg/eat Commit: a1ec9649c0562f6076ae71d52695ed4db327e447 https://github.com/ietf-rats-wg/eat/commit/a1ec9649c0562f6076ae71d52695ed4db327e447 Author: Laurence Lundblade Date: 2019-11-16 (Sat, 16 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Typographic errors in OEM ID section From nobody Sat Nov 16 01:33:23 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA5DE12010E for ; Sat, 16 Nov 2019 01:33:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j-4IZX9uHEyA for ; Sat, 16 Nov 2019 01:33:19 -0800 (PST) Received: from out-9.smtp.github.com (out-9.smtp.github.com [192.30.254.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE1E012008B for ; Sat, 16 Nov 2019 01:33:19 -0800 (PST) Date: Sat, 16 Nov 2019 01:33:18 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573896799; bh=ju+FEdFEaGhRF1ZTcP8hWd6dHr1xId/WvaTwBBfKiJY=; h=Date:From:To:Subject:From; b=cGk8rZyd3T+GQEiNdXdqQHy3peQXSZHmwJzDI/wnOz2egObPqQX8RyXLJWs9hZeAf Xp+183sx0EFlyX/k1zahe6b484AqgYv7rYSV/2nTS1cXFdbRm7Ud2IZqJwftNZFChN xsugnwsggR4lpj2aAm43ADhX+UCsnQITh0JT8tRQ= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 9eaceb: Script updating gh-pages from a1ec964. [ci skip] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 09:33:21 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 9eaceb8b5df80847c90ab08f29f8245a566f09a8 https://github.com/ietf-rats-wg/eat/commit/9eaceb8b5df80847c90ab08f29f8245a566f09a8 Author: ID Bot Date: 2019-11-16 (Sat, 16 Nov 2019) Changed paths: M index.html M update_oui/draft-ietf-rats-eat.html M update_oui/draft-ietf-rats-eat.txt Log Message: ----------- Script updating gh-pages from a1ec964. [ci skip] From nobody Sat Nov 16 01:33:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1530E120180 for ; Sat, 16 Nov 2019 01:33:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CXJciaf0ULNL for ; Sat, 16 Nov 2019 01:33:23 -0800 (PST) Received: from out-23.smtp.github.com (out-23.smtp.github.com [192.30.252.206]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A769612008B for ; Sat, 16 Nov 2019 01:33:23 -0800 (PST) Date: Sat, 16 Nov 2019 01:33:22 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1573896802; bh=ULMP022G+OOod5a3zqnrt3LCgIULcrWrxE55L7AgXCE=; h=Date:From:To:Subject:From; b=aAyl/m7dCz/htTeSesxH8lg29CbJDN4qMvcum0P711BgdBmrzywQsMmppWiCCZbd4 g+uyU5XCEEQJ7VDKxKw3ElAe60qhyoQn5peaKp5+gFU/1VM6NNOMHTDzP4H6tiKxm/ /pRpNbqXgy4b76n1QyEPXYkGqOznzp6A0r/drNiY= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 546140: Script updating issues at 2019-11-16T09:33:19Z. [c... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 09:33:28 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 54614083b397c46702c19605915b7338929544e8 https://github.com/ietf-rats-wg/eat/commit/54614083b397c46702c19605915b7338929544e8 Author: ID Bot Date: 2019-11-16 (Sat, 16 Nov 2019) Changed paths: M issues.json Log Message: ----------- Script updating issues at 2019-11-16T09:33:19Z. [ci skip] From nobody Sat Nov 16 02:13:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 607F3120019 for ; Sat, 16 Nov 2019 02:13:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HYFltd_8gJ9r for ; Sat, 16 Nov 2019 02:13:05 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 695F9120119 for ; Sat, 16 Nov 2019 02:13:05 -0800 (PST) Received: from lhreml701-cah.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 0AB5DDBF086A55A7D5A1 for ; Sat, 16 Nov 2019 10:13:03 +0000 (GMT) Received: from DGGEMM406-HUB.china.huawei.com (10.3.20.214) by lhreml701-cah.china.huawei.com (10.201.108.42) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 16 Nov 2019 10:13:02 +0000 Received: from DGGEMM531-MBS.china.huawei.com ([169.254.6.245]) by DGGEMM406-HUB.china.huawei.com ([10.3.20.214]) with mapi id 14.03.0439.000; Sat, 16 Nov 2019 18:12:58 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "rats@ietf.org" Thread-Topic: Another RATS message flow model for consideration: Thread-Index: AdWcZLOLxoSOwSr8Rf6Q6jmW1MwH1g== Date: Sat, 16 Nov 2019 10:12:57 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.32.53] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA3964EDGGEMM531MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] Another RATS message flow model for consideration: X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 10:13:07 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA3964EDGGEMM531MBSchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi RATS architecture design team and all, In addition to the current passport model and background check model. I thi= nk there is a third message flow model possibly for us to consider: Attester < -------------------- > verifier < ------------------------------= -- > relying party Evidence attestation results The key point of the above model is that verifier has independent connectio= n with attester and relying party respectively, and there are two independe= nt message exchanges between the attester and verifier, between the verifie= r and the relying party. Of course, if needed, there can be some trigger co= ndition and interaction between these two connections. The relative advantage of the above model is simple, and each role only see= what he needs to see, like: evidence is only seen by relying party, attest= ation results is seen by attester. I am wondering whether the architecture draft will consider it? B.R. Frank --_000_C02846B1344F344EB4FAA6FA7AF481F13EA3964EDGGEMM531MBSchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi RATS architecture design tea= m and all,

In addition to the current pass= port model and background check model. I think there is a third message flo= w model possibly for us to consider:

Attester < -----------------= --- > verifier < -------------------------------- > relying party<= o:p>

     &= nbsp;      Evidence      =          attestation results

 

The key point of the above mode= l is that verifier has independent connection with attester and relying par= ty respectively, and there are two independent message exchanges between th= e attester and verifier, between the verifier and the relying party. Of course, if needed, there can be some tr= igger condition and interaction between these two connections.

The relative advantage of the a= bove model is simple, and each role only see what he needs to see, like: ev= idence is only seen by relying party, attestation results is seen by attest= er.

 

I am wondering whether the arch= itecture draft will consider it?

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F13EA3964EDGGEMM531MBSchi_-- From nobody Sat Nov 16 02:16:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 92029120122 for ; Sat, 16 Nov 2019 02:16:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GJ3bvE-iRM53 for ; Sat, 16 Nov 2019 02:16:49 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2713120119 for ; Sat, 16 Nov 2019 02:16:48 -0800 (PST) Received: from LHREML712-CAH.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 4162CFDD5CDFC5873BEE for ; Sat, 16 Nov 2019 10:16:47 +0000 (GMT) Received: from lhreml721-chm.china.huawei.com (10.201.108.72) by LHREML712-CAH.china.huawei.com (10.201.108.35) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 16 Nov 2019 10:16:46 +0000 Received: from lhreml721-chm.china.huawei.com (10.201.108.72) by lhreml721-chm.china.huawei.com (10.201.108.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Sat, 16 Nov 2019 10:16:46 +0000 Received: from DGGEMM421-HUB.china.huawei.com (10.1.198.38) by lhreml721-chm.china.huawei.com (10.201.108.72) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Sat, 16 Nov 2019 10:16:46 +0000 Received: from DGGEMM531-MBS.china.huawei.com ([169.254.6.245]) by dggemm421-hub.china.huawei.com ([10.1.198.38]) with mapi id 14.03.0439.000; Sat, 16 Nov 2019 18:16:39 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "rats@ietf.org" Thread-Topic: Another RATS message flow model for consideration: Thread-Index: AdWcZLOLxoSOwSr8Rf6Q6jmW1MwH1gAAe8Vg Date: Sat, 16 Nov 2019 10:16:39 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.32.53] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA39666DGGEMM531MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?gb2312?b?tPC4tDogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBt?= =?gb2312?b?b2RlbCBmb3IgY29uc2lkZXJhdGlvbjo=?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 10:16:50 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA39666DGGEMM531MBSchi_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 T29wcywgU29tZSBmaXhlcyBvZiB0aGUgYmVsb3cgdGV4dDoNCg0KDQq3orz+yMs6IFJBVFMgW21h aWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddILT6se0gWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3Jr IFN0YW5kYXJkICYgUGF0ZW50IERlcHQpDQq3osvNyrG85DogMjAxOcTqMTHUwjE2yNUgMTg6MTMN CsrVvP7IyzogcmF0c0BpZXRmLm9yZw0K1vfM4jogW1JhdHNdIEFub3RoZXIgUkFUUyBtZXNzYWdl IGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246DQoNCkhpIFJBVFMgYXJjaGl0ZWN0dXJlIGRl c2lnbiB0ZWFtIGFuZCBhbGwsDQpJbiBhZGRpdGlvbiB0byB0aGUgY3VycmVudCBwYXNzcG9ydCBt b2RlbCBhbmQgYmFja2dyb3VuZCBjaGVjayBtb2RlbC4gSSB0aGluayB0aGVyZSBpcyBhIHRoaXJk IG1lc3NhZ2UgZmxvdyBtb2RlbCBwb3NzaWJseSBmb3IgdXMgdG8gY29uc2lkZXI6DQpBdHRlc3Rl ciA8IC0tLS0tLS0tLS0tLS0tLS0tLS0tID4gdmVyaWZpZXIgPCAtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLSA+IHJlbHlpbmcgcGFydHkNCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBFdmlkZW5jZSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGF0dGVzdGF0aW9uIHJl c3VsdHMNCg0KVGhlIGtleSBwb2ludCBvZiB0aGUgYWJvdmUgbW9kZWwgaXMgdGhhdCB2ZXJpZmll ciBoYXMgaW5kZXBlbmRlbnQgY29ubmVjdGlvbiB3aXRoIGF0dGVzdGVyIGFuZCByZWx5aW5nIHBh cnR5IHJlc3BlY3RpdmVseSwgYW5kIHRoZXJlIGFyZSB0d28gaW5kZXBlbmRlbnQgbWVzc2FnZSBl eGNoYW5nZXMgYmV0d2VlbiB0aGUgYXR0ZXN0ZXIgYW5kIHZlcmlmaWVyLCBiZXR3ZWVuIHRoZSB2 ZXJpZmllciBhbmQgdGhlIHJlbHlpbmcgcGFydHkuIE9mIGNvdXJzZSwgaWYgbmVlZGVkLCB0aGVy ZSBjYW4gYmUgc29tZSB0cmlnZ2VyIGNvbmRpdGlvbiBhbmQgaW50ZXJhY3Rpb24gYmV0d2VlbiB0 aGVzZSB0d28gY29ubmVjdGlvbnMuDQpUaGUgcmVsYXRpdmUgYWR2YW50YWdlIG9mIHRoZSBhYm92 ZSBtb2RlbCBpcyBzaW1wbGUsIGFuZCBlYWNoIHJvbGUgb25seSBzZWUgd2hhdCBoZSBuZWVkcyB0 byBzZWUsIGxpa2U6IGV2aWRlbmNlIGlzIG5vdCBzZWVuIGJ5IHRoZSByZWx5aW5nIHBhcnR5LCBh dHRlc3RhdGlvbiByZXN1bHRzIGlzIG5vdCBzZWVuIGJ5IHRoZSBhdHRlc3Rlci4NCg0KSSBhbSB3 b25kZXJpbmcgd2hldGhlciB0aGUgYXJjaGl0ZWN0dXJlIGRyYWZ0IHdpbGwgY29uc2lkZXIgaXQ/ DQoNCkIuUi4NCkZyYW5rDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F13EA39666DGGEMM531MBSchi_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

Oops, S= ome fixes of the below text:

&n= bsp;

 

=B7=A2=BC=FE=C8=CB: RATS [mailto:rats-bounces@ietf.org] =B4=FA=B1=ED Xialiang (Frank, Network Standard &= ; Patent Dept)
=B7=A2=CB=CD=CA=B1=BC=E4:<= /span> 2019=C4=EA11=D4=C216=C8=D5 18:13
=CA=D5=BC=FE=C8=CB: rats@ietf.org
=D6=F7=CC=E2: [Rats] Another RATS message flow model for consideration:

 

Hi RATS architecture design tea= m and all,

In addition to the current pass= port model and background check model. I think there is a third message flo= w model possibly for us to consider:

Attester < -----------------= --- > verifier < -------------------------------- > relying party<= o:p>

     &= nbsp;       &nb= sp;            =      Evidence      = ;                    = ;    attestation results

 

The key point of the above mode= l is that verifier has independent connection with attester and relying par= ty respectively, and there are two independent message exchanges between th= e attester and verifier, between the verifier and the relying party. Of course, if needed, there can be some tr= igger condition and interaction between these two connections.

The relative advantage of the a= bove model is simple, and each role only see what he needs to see, like: ev= idence is not seen by the relying party, attestation results is not seen by the attester.<= /o:p>

 

I am wondering whether the arch= itecture draft will consider it?

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F13EA39666DGGEMM531MBSchi_-- From nobody Sat Nov 16 02:34:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2B4F120026 for ; Sat, 16 Nov 2019 02:34:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Un7hVjxsVZZP for ; Sat, 16 Nov 2019 02:34:53 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58B09120019 for ; Sat, 16 Nov 2019 02:34:53 -0800 (PST) Received: from lhreml701-cah.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 51CE7522C36C7388AC45 for ; Sat, 16 Nov 2019 10:34:51 +0000 (GMT) Received: from DGGEMM404-HUB.china.huawei.com (10.3.20.212) by lhreml701-cah.china.huawei.com (10.201.108.42) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 16 Nov 2019 10:34:51 +0000 Received: from DGGEMM531-MBS.china.huawei.com ([169.254.6.245]) by DGGEMM404-HUB.china.huawei.com ([10.3.20.212]) with mapi id 14.03.0439.000; Sat, 16 Nov 2019 18:34:45 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "rats@ietf.org" Thread-Topic: A quick question about different message flow models of RATS architecture: Thread-Index: AdWcaLSXt4ZnbTW/T8mp21C+ZFHK2A== Date: Sat, 16 Nov 2019 10:34:45 +0000 Message-ID: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.32.53] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA39686DGGEMM531MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] A quick question about different message flow models of RATS architecture: X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 10:34:55 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA39686DGGEMM531MBSchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, >From my understanding, background check model is suitable for device onboar= ding stage for network access control, and passport model is suitable for d= evice running time permission of specific service request. If the above understanding makes sense to certain level, is it possible a n= etwork will use both of them, but for different life circle stage of device= ? B.R. Frank --_000_C02846B1344F344EB4FAA6FA7AF481F13EA39686DGGEMM531MBSchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

From my understanding, backgrou= nd check model is suitable for device onboarding stage for network access c= ontrol, and passport model is suitable for device running time permission o= f specific service request.

If the above understanding make= s sense to certain level, is it possible a network will use both of them, b= ut for different life circle stage of device?

 

B.R.

Frank

--_000_C02846B1344F344EB4FAA6FA7AF481F13EA39686DGGEMM531MBSchi_-- From nobody Sat Nov 16 02:46:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A991120026 for ; Sat, 16 Nov 2019 02:46:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZClJqVlspz-z for ; Sat, 16 Nov 2019 02:46:48 -0800 (PST) Received: from NAM04-CO1-obe.outbound.protection.outlook.com (mail-eopbgr690123.outbound.protection.outlook.com [40.107.69.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 339F8120019 for ; Sat, 16 Nov 2019 02:46:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hGCbsFCGhNCgtiTLlFeDVQJadoO5l44PQnHSB9UF1wYsNhbSQtwC84ewA2JtCfOaKFjHJupCrClegk4HI0hl00bkqwhzbegbvdcRWLnMqFtWlBF65Q2715ydnsZ+sMRTjUo04xW6jwCkpBhLX/Tcn0wrFU5skbKLVm4upUjJUrcRsUUDC13kzvZiyMQMjRnXvFRwLDUdCkSJL2qpFpkHfmR3w1whnY+PVwFhHk+v+2E4SH8TiwqqTocExjNrMFMqqPlKo3JwWkvz9zbVnAwz0k8Potdx7rfEniF3UEhTb1JXDq5SVs6O/QZxJxiHc1zXpoh2N66FTEZ7QSIlIq6liw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n0WsxxzXtCNXs8gaN+z/FGizoEHtX1JHlSCpoMExcoM=; b=CrygskJohJbnfu0OrODAVf4Oik/tTeu+wuUp8qgpHtGzRBm1XFV4sg9XNvh7QpfuMrFMoKeZn+9mCI/t4U0xxMx3mT+13cBogHMeaQ7GZ2DAqJzrAL00B0XBv2I50DW9tH2xJWgWPwrj1XIcxGaKMnGUwfEOTlX9yzeMIuOy5Ldcn9lkM5WH6780s5igeXRJTAbg8kWETaIpOS7MCC1PaUtRvrPMIDE0USpxZBo+rV0j01wcNVNxH+zHIEPsR12DSoSh9M0W5scVQCrgvOusFbVDos+zgzXRODVyZsf/W6//87OBXVapIsjDuXKGJKfa9Tsi3q7qCxCGo2yEXxDqHw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n0WsxxzXtCNXs8gaN+z/FGizoEHtX1JHlSCpoMExcoM=; b=MqwxS9xCna3oX5sDADZrKwm7HY9h9g7InJSjZ965mV+sGrDWGhF1GtpIVgZDFhgnIA8z7UX9BrMAEsMiXyph2dM8Xx9ejwv1grdleTlA/Mlvd98K47MzjSptstNTQNVt+QQdhY5wFzetAkbREcM37WFMgaP6EECpPXPsA9o05tM= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0287.namprd21.prod.outlook.com (10.173.53.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Sat, 16 Nov 2019 10:46:44 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2474.001; Sat, 16 Nov 2019 10:46:43 +0000 From: Dave Thaler To: "Xialiang (Frank, Network Standard & Patent Dept)" , "rats@ietf.org" Thread-Topic: A quick question about different message flow models of RATS architecture: Thread-Index: AdWcaLSXt4ZnbTW/T8mp21C+ZFHK2AAAhnRA Date: Sat, 16 Nov 2019 10:46:43 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-16T10:46:42.8603535Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=7a5776cf-c5e1-4ffe-9495-36cf0d00eda8; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:67c:1232:144:c826:a42f:69af:2a0a] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 39b932b6-a134-468c-cc31-08d76a82456d x-ms-traffictypediagnostic: MWHPR21MB0287: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 02234DBFF6 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(396003)(366004)(39860400002)(136003)(199004)(189003)(71190400001)(256004)(22452003)(110136005)(2420400007)(5660300002)(25786009)(54896002)(6436002)(81156014)(81166006)(9686003)(15650500001)(486006)(478600001)(2906002)(10290500003)(6306002)(476003)(14454004)(10090500001)(66476007)(66946007)(66446008)(55016002)(52536014)(8990500004)(64756008)(66556008)(2501003)(102836004)(229853002)(74316002)(7736002)(6116002)(8936002)(46003)(8676002)(76176011)(53546011)(86362001)(6246003)(790700001)(33656002)(11346002)(186003)(7110500001)(316002)(99286004)(7696005)(71200400001)(6506007)(76116006)(14444005)(446003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0287; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 8WGUYpal0ywErTKRdVanIAVOFcgvIhKVuL5zaWRekPsKcbG2kim4t91KbRTIxeamSOgBc0lW3av8Kfb4q1F2tCnH6SFemeElh6Hg7Pc2PpvAM/evjGKefkOf4g/MZPkE43W+vOVyj8m2BOGhLwflyTYfqZWcmhg4JX8Hk9Dm3aKFVMH7tx621XjhkFNNDIRKILV++OgYo7uqrzlJlgSYGiKjKi6KmZbjRYaq8+5riuBEM+WZeyaRGFLdqv2G7uKD7tBcqvGaT99Jgd6T7qcnGJPppwsIrbMBeCDxe8wNgyyPJDkChyaU4OtKcfUWMw/ogGuUp3LRKAA7A5PPuULZQQMX0+dn1ytRNUVMU2dwE0hqFRG9/1fJYKomqailTOC45rRqLvKWAdIrWHRhcTG81RbUKyEyC4F6oJ4WELlOtLiQIYJjkShlKbvdIw59oGX0 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB0784D0B25BF3687DAF7C752EA3730MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 39b932b6-a134-468c-cc31-08d76a82456d X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2019 10:46:43.7781 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: uLZ9LyawYts8AVwrhbCSkYm1F9bcUPCoJNMNWDRAAeIT2TD61mzyxox97Jds6a0mhFubw0EyFEtr6yx+QQ1WjOgTLXX+FmpCY8Z7t40LBIY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0287 Archived-At: Subject: Re: [Rats] A quick question about different message flow models of RATS architecture: X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 10:46:51 -0000 --_000_MWHPR21MB0784D0B25BF3687DAF7C752EA3730MWHPR21MB0784namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Both models are potentially suitable for initial onboarding in different si= tuations/topologies, and both models are potentially suitable for runtime p= ermission. But yes it is possible that different models are used by the same network f= or different life stages of devices, or for different devices for the same = stage. Whether that's desirable or not is a different question (to which I don't k= now the answer), but yes it is possible. From: RATS On Behalf Of Xialiang (Frank, Network St= andard & Patent Dept) Sent: Saturday, November 16, 2019 6:35 PM To: rats@ietf.org Subject: [Rats] A quick question about different message flow models of RAT= S architecture: Hi, >From my understanding, background check model is suitable for device onboar= ding stage for network access control, and passport model is suitable for d= evice running time permission of specific service request. If the above understanding makes sense to certain level, is it possible a n= etwork will use both of them, but for different life circle stage of device= ? B.R. Frank --_000_MWHPR21MB0784D0B25BF3687DAF7C752EA3730MWHPR21MB0784namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Both = models are potentially suitable for initial onboarding in different situati= ons/topologies, and both models are potentially suitable for runtime permis= sion.

=  

But y= es it is possible that different models are used by the same network for di= fferent life stages of devices, or for different devices for the same stage= .

Wheth= er that’s desirable or not is a different question (to which I don= 217;t know the answer), but yes it is possible.

=  

From: = RATS <rats-bounces@ietf.org> On Behalf Of Xialiang (Frank, Network Standard & Patent Dept) Sent: Saturday, November 16, 2019 6:35 PM
To: rats@ietf.org
Subject: [Rats] A quick question about different message flow models= of RATS architecture:

 =

Hi,<= /o:p>

From my u= nderstanding, background check model is suitable for device onboarding stag= e for network access control, and passport model is suitable for device run= ning time permission of specific service request.

If the ab= ove understanding makes sense to certain level, is it possible a network wi= ll use both of them, but for different life circle stage of device?

&nbs= p;

B.R.=

Frank

--_000_MWHPR21MB0784D0B25BF3687DAF7C752EA3730MWHPR21MB0784namp_-- From nobody Sat Nov 16 05:12:52 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A667F120145 for ; Sat, 16 Nov 2019 05:12:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2qm1S6PPLzJL for ; Sat, 16 Nov 2019 05:12:49 -0800 (PST) Received: from mail-ot1-x330.google.com (mail-ot1-x330.google.com [IPv6:2607:f8b0:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FAEA12013F for ; Sat, 16 Nov 2019 05:12:49 -0800 (PST) Received: by mail-ot1-x330.google.com with SMTP id u13so10482565ote.0 for ; Sat, 16 Nov 2019 05:12:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=GCBLD8K+Liae5qYYvCbh8lCpur/CQjRRZGZAt4rmx+w=; b=ldDmFMRegZFnDuLw7hWrSnKTExsp3lla6lAV/xdlEt1zJLC5+Qas7Bnd9tCQSqQJ/Z IKMRR1yH7curoEBkMcC4CTLRJj0XQZFK+DTYbECPGe0iXotBQI8ImzwMfP+NXXwKW5td KkhG0rt+lxloxWCo6lKpbPdpgyE6MaexufHw9/i3WBD+9KMZQACXnRhp7RzvPXEcTvfZ pyAcQMGhuGr/i9OrJ3CXfArYxfzSQQWExjEUdFi99LDwSx/A9SIAgG1Ps+wDzuH+tAhd 4RYLY3i+jFcyQqqLX/pL5yMz5/yOYY6IXlA8Tl+NIGTiWZUn/7k6FJ00Ax9mFeSaS10b Sx5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=GCBLD8K+Liae5qYYvCbh8lCpur/CQjRRZGZAt4rmx+w=; b=CcqkspYbDdYhlWndGt/8LVUoTmZfk9gTf9ZhTTtT94elL3uTcAnSHKNLkF4Sk1SVT5 XvOXkiuXTDlAcGvbt/0vS4E3ZrM8JpIjD3+xXx5EFDL17KBB6L/6CbOL3T5vQeH8pshj IEdFBkmXDQSMuqL+cKjwXctiRB6DHoy7C1ikEmlQgQBNkbQmz6xbktJ+2IBTPwsfIZQG Yg5VruLkmTZCyZQnFxiyW8alvKAf5irBW7JxBqL7AbbStJV+2fF9I0SY9XGGvveFBo0n w7V0hMMOP9z0NakAWc+oDib9zN0jepK+WOOKsFKwccH1hRODdKsmJtCXx0Aqco7hJ4NS YMCA== X-Gm-Message-State: APjAAAW8givGooV1kKog+qLQ/uUepUe4MzS1cI0lQRvRA8XdVYc5J7aw OQwh5mUTrXfUYnIEtKtkMxthmLuMVjqfk7e8O6BMiZIX X-Google-Smtp-Source: APXvYqz1oY3wdwHLQwRRl5CU9A+75QLV9ETuXpcS/fVZYpZKAnds4kt7AaI1olM7pG7y/ZhvTbY3nzUfmuvX1cmwgI4= X-Received: by 2002:a05:6830:121a:: with SMTP id r26mr15422496otp.114.1573909968425; Sat, 16 Nov 2019 05:12:48 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Sat, 16 Nov 2019 08:12:12 -0500 Message-ID: To: rats@ietf.org Content-Type: multipart/alternative; boundary="000000000000939614059776789e" Archived-At: Subject: Re: [Rats] Presenter slides X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Nov 2019 13:12:51 -0000 --000000000000939614059776789e Content-Type: text/plain; charset="UTF-8" Reminder: please get your slides in ASAP, ideally within the next 24 hours so that Ned and I can post them in advance of the sessions. It is helpful for anyone for which English is a second language to have them posted with enough time to review prior to the session. We've only received one set thus far. Thank you! Kathleen On Wed, Nov 13, 2019 at 4:11 PM Kathleen Moriarty < kathleen.moriarty.ietf@gmail.com> wrote: > Greetings! > > Please send your slides to myself and Ned. One of us will post them once > received. We will both be remote, so please get them to use early in order > to avoid any time difference snafus. > > Thank you! > > -- > > Best regards, > Kathleen > -- Best regards, Kathleen --000000000000939614059776789e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Reminder: please get your slides in ASAP, ideally within t= he next 24 hours so that Ned and I can post them in advance of the sessions= .=C2=A0 It is helpful for anyone for which English is a second language to = have them posted with enough time to review prior to the session.

<= /div>
We've only received one set thus far.

= Thank you!
Kathleen

On Wed, Nov 13, 2019 at 4:11 PM Ka= thleen Moriarty <kat= hleen.moriarty.ietf@gmail.com> wrote:
Greetings!

Please send your slides to myself=C2=A0and=C2=A0Ned.=C2=A0 One of us will = post them once received.=C2=A0 We will both be remote, so please get them t= o use early in order to avoid any time difference snafus.

Thank you!

--
=

Best regards,
Kathleen


--

Best regards,
Kathleen
--000000000000939614059776789e-- From nobody Sat Nov 16 19:49:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A98F6120839 for ; Sat, 16 Nov 2019 19:49:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZBsD_p-OaMor for ; Sat, 16 Nov 2019 19:49:26 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8FA6120046 for ; Sat, 16 Nov 2019 19:49:26 -0800 (PST) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:128:2472:ebff:feda:c977]) by relay.sandelman.ca (Postfix) with ESMTPS id 211181F451 for ; Sun, 17 Nov 2019 03:49:25 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 2F7F811E2; Sun, 17 Nov 2019 11:49:23 +0800 (CST) From: Michael Richardson To: rats@ietf.org X-Attribution: mcr X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Date: Sun, 17 Nov 2019 11:49:23 +0800 Message-ID: <13437.1573962563@dooku.sandelman.ca> Archived-At: Subject: [Rats] RATS architecture design team side meeting X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Nov 2019 03:49:29 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable <#secure method=3Dpgpmime mode=3Dsign> The WG chairs have formed a Design Team for a unified architecture document. The Design Team includes: Dave Thaler, Ned Smith, Henk Birkholz and myself. We have had some discussions during the Hackathon. The design team will operate in an open fashion (all WG participants are welcome to attend our calls), and we will have two side meetings at IETF106. We have reserved the Sophia room at 8:30am on Tuesday. (It's a room way bigger for our needs, so we will pick a corner and sit in a circle) Location: =E2=80=8Bhttps://datatracker.ietf.org/meeting/106/floor-plan?room=3Dsop= hia#raffles-city-convention-center (The TEEP meeting occurs in that room starting at 10am) There is a webex setup at: Meeting number (access code): 202 461 239 Meeting password: MKhT9paH (65489724 from phones) Tuesday, November 19, 2019 8:30 am | (UTC+08:00) Kuala Lumpur, Singapore | 1 hr 30 mins https://cisco.webex.com/cisco/j.php?MTID=3Dm21529340671ba5cb619b176dbbb6= 5dd4 {we believe that this will be 4:30pm in Pacific, but please check} We have reserved a second meeting at 8:30am on Wednesday, in the Olivia roo= m, same webex, but hope not to need it. Our goal in this meeting is to arrive at a proposed Tables of Contents for the Architecture document, which we will bring to the group meeting on Frid= ay for discussion. The design team will be establishing a weekly conference-call meeting time, likely using whereby.com and hackmd. -- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: text/calendar; charset=utf-8 Content-Disposition: attachment; filename=architecture.ics Content-Transfer-Encoding: quoted-printable Content-Description: design team BEGIN:VCALENDAR PRODID:-//Microsoft Corporation//Outlook 10.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VTIMEZONE TZID:Asia/Kuala_Lumpur TZURL:http://tzurl.org/zoneinfo-outlook/Asia/Kuala_Lumpur X-LIC-LOCATION:Asia/Kuala_Lumpur BEGIN:STANDARD TZOFFSETFROM:+0800 TZOFFSETTO:+0800 TZNAME:+08 DTSTART:19700101T000000 END:STANDARD END:VTIMEZONE BEGIN:VEVENT DTSTAMP:20191117T032432Z ATTENDEE;CN=3D"Nancy =F0=9F=90=A1Cam-Winget";ROLE=3DREQ-PARTICIPANT;RSVP=3D= FALSE:MAILTO:ncamwing@cisco.com ORGANIZER;CN=3D"Cisco Webex":MAILTO:messenger@webex.com DTSTART;TZID=3DAsia/Kuala_Lumpur:20191119T083000 DTEND;TZID=3DAsia/Kuala_Lumpur:20191119T100000 LOCATION:https://cisco.webex.com/cisco TRANSP:OPAQUE SEQUENCE:1573961072 UID:dd9c2601-09c2-4f47-b89a-81b124e1da52 DESCRIPTION:\n\nJOIN WEBEX MEETING\nhttps://cisco.webex.com/cisco/j.php?MTI= D=3Dm21529340671ba5cb619b176dbbb65dd4\nMeeting number (access code): 202 46= 1 239\n\nHost key: 940046\n\nMeeting password: MKhT9paH (65489724 from phon= es)\n\n\n\nJOIN BY PHONE\n+1-408-525-6800 Call-in toll number (US/Canada)\n= Tap here to call (mobile phones only, hosts not supported): tel:%2B1-408-52= 5-6800,,*01*202461239%2365489724%23*01*\n+1-866-432-9903 Call-in toll-free = number (US/Canada)\nTap here to call (mobile phones only, hosts not support= ed): tel:%2B1-866-432-9903,,*01*202461239%2365489724%23*01*\n\nGlobal call-= in numbers\nhttps://cisco.webex.com/cisco/globalcallin.php?MTID=3Dm6f032b11= 925fabad756fdc4fb71c683d\n\nToll-free calling restrictions\nhttps://www.web= ex.com/pdf/tollfree_restrictions.pdf\n\n\nJOIN FROM A VIDEO SYSTEM OR APPLI= CATION\nDial sip:202461239@cisco.webex.com\nYou can also dial 173.243.2.68 = and enter your meeting number.\n\n\nJoin using Microsoft Lync or Microsoft = Skype for Business\nDial sip:202461239.cisco@lync.webex.com\n\n\n\nCan't jo= in the meeting? Contact support here:\nhttps://cisco.webex.com/cisco/mc\n\n= \nIMPORTANT NOTICE: Please note that this Webex service allows audio and ot= her information sent during the session to be recorded, which may be discov= erable in a legal matter. You should inform all meeting attendees prior to = recording if you intend to record the meeting.\n X-ALT-DESC;FMTTYPE=3Dtext/html:\n\n\n \n \n
&= nbsp;
\n \n\n\n\n \n \n \n \n \n \n \n \n
\n When it's time, join the Webex = meeting here.\n
 
\n = Meeting number (access= code): 202 461 239\n
\n \= n \n \n \n
\n Host key: 940046\n
\n <= tr>
Meeting password:<= /FONT>MKhT9paH = (65489724 from phones)
\n\n \n = \n \n \n \n
 
\n \n \n \n \n \n \n \n
Join meeting
\n\n \n=  
 
\n\n 
<= FONT SIZE=3D"3" COLOR=3D"#666666" FACE=3D"arial">Join by phone  = ;
+1-408-525-6800 Call-in toll number (US/Canada)   += 1-866-432-9903 Call-in toll-free number (US/Canada)   <= BR>Global call-= in numbers  |  Toll-free calling restrictions 


\n= \n
 <= /td>
\n\nJoin from a video system or application<= BR>Dial 202461239@cisco.webex.com 
You can also dial 173.243.2.68 and enter your = meeting number.  
 
\n\n
Join using Mi= crosoft Lync or Microsoft Skype for Business
Dial 202461239.cisco@lync.webex.com<= /a>
\n\n \n \n \n \n \n \n
 
Need help? Go to http://h= elp.webex.com\n
 
\n
\n SUMMARY:MC Default PRIORITY:5 CLASS:PUBLIC BEGIN:VALARM TRIGGER:-PT5M ACTION:DISPLAY DESCRIPTION:Reminder END:VALARM END:VEVENT END:VCALENDAR --=-=-=-- From nobody Sun Nov 17 06:41:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1414D12010C for ; Sun, 17 Nov 2019 06:41:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8kDPSBq4eNx for ; Sun, 17 Nov 2019 06:41:33 -0800 (PST) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70072.outbound.protection.outlook.com [40.107.7.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 201F51200FA for ; Sun, 17 Nov 2019 06:41:33 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fF8QhOrqvcJNXcqnVJ6FFWphbUFzX57Y4UoCfVfRRu6V3CY+ho0z6vih/+hrxH2os+CbUA6QBeDUqz2Mx/xzYsYa/PgCB0nqYg2PSuvV/XyGqULmDAevShPazIKGKTtgHyhSg2Oc0hkGa2mnrqwAd3tGqQiYvBRhJU+QxUipr7vldlok5nGe+P/PjxbTgGFDjShIvrS9Wc18uEWHKuhiUzZsnZ252oteDZJ86qOsZSgPM/y/qQZr0Sj5hqxwDgSk4bq88SFx9t9UG+PLqIaI6F+jSCZ54hEHX3DZWEM345E141/+DBheB+fb0ZyMdKnlGfHwwaOs/NcDs6S+QKiw0A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Y5yH4fiHi6I7r0aDw/auY8dFFt/jZm5lDuHTVQqrsXw=; b=HEy33Nm+d927+gPvkzktrCpb2il9CS0P/nCj5b/Re3EcQKdep55bsCDEieK52giYr/7xyObKQ7d2z2cCHHAzb7Z+77xBaloPDOXnD62+Tgm7T3I+nNLR001khTfq0C98F+d7DNt5cAgUKdQzP89lfl7YbWY8+vC3gYaZzvj/NGyqsjpnbwVe/GNvrLtND0S+YOF2kiVrXY0bijFvhEaCsyzHxT82d/1JHspL4O4K1EfCikYj+aPUHNDFh5Hfh+ybVniVyrCYs+91C+9TlhlFTHfryE8Z6pjrIsBrdpjZ2sm424+SxnXEoRWbgaSh9Y2QqVsoY40Kg3ENrbyM21yHhQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Y5yH4fiHi6I7r0aDw/auY8dFFt/jZm5lDuHTVQqrsXw=; b=SRfLa3lx9nzfZ1red7JV43+JJFMS+qFY0Zci4Zkyxp5z3IFPPsKcEWt0dJZQsHypX2OAGEp6b78UP5heg6wIGWymeTPExIzXkwNLM2vfPYqpAJBOelhkJ/7WGeIvTteNMGWS7ulSIEbveCFRzzmjNEfWfyNrF0IxRLT5C9F1qQY= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0451.EURP190.PROD.OUTLOOK.COM (10.161.65.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.29; Sun, 17 Nov 2019 14:41:30 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.029; Sun, 17 Nov 2019 14:41:30 +0000 From: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= To: Dave Thaler CC: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4A= Date: Sun, 17 Nov 2019 14:41:29 +0000 Message-ID: <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> In-Reply-To: Reply-To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM3PR07CA0116.eurprd07.prod.outlook.com (2603:10a6:207:7::26) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9768b680-d4ce-4c65-d7a1-08d76b6c3bb2 x-ms-traffictypediagnostic: AM5P190MB0451: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 02243C58C6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(396003)(39850400004)(366004)(376002)(346002)(189003)(199004)(81156014)(4326008)(11346002)(6436002)(81166006)(256004)(446003)(85202003)(486006)(102836004)(71190400001)(229853002)(71200400001)(6506007)(316002)(786003)(386003)(99286004)(186003)(6486002)(85182001)(43066004)(478600001)(6246003)(25786009)(305945005)(8936002)(6512007)(6306002)(86362001)(7736002)(3450700001)(54906003)(2906002)(1076003)(52116002)(66476007)(5660300002)(76176011)(6116002)(66946007)(64756008)(476003)(66446008)(8676002)(46003)(14454004)(66556008)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0451; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: nhAx7layCKSgG38xKe8PQISGZJdAPSWxsd/ZFkF0/dDXeYtdJkb9aKyz0SvsuY+8ocEthLUvZGCwzTD1GCcqpZEAkpAZf3zh+clhGXU5+Q5Wox7Lp4Tmgc33p6BqE6CiF/q/9Bo9kQaRznMk5LpBE9eJr9gpJKDJCscbQNLhnStl+ZjbhP2A2eDCaZBbnjLbtnPcAZuJIBHbLb0Eeshda+f1wq5zfuZf5s9VxPxkNTjhQO+ydCdKQDD56z8VkMrGPfv54WnMeMPBiZ85RGnZQJf3EooPRxF8SUS8xyTJZ6w/uPecM2weg4Q+mZsBX3RPViYuYFH/sgxr/u4VcngZrzmD/F83vLm2EGNPc3ZjHYRjZ+BX0wXLjjzK0uUwhZlk8/3BR8b3BISV2kM30MF7zJF/5w+uezh4MvH2xcagqxXkFEDXvOw1evyUbx9ww/xd Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 9768b680-d4ce-4c65-d7a1-08d76b6c3bb2 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Nov 2019 14:41:30.0199 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: OwNpX8qfJ0rsBOpH3buaLOO6ccEMUXckxFEUJuaaSpvncQplt6plvt2sPCnBobz6wTx75Sb42JcS2fnzrbL47PvpggCW80kVimEJM0aWsT4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0451 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Nov 2019 14:41:36 -0000 T24gRnJpLCBOb3YgMTUsIDIwMTkgYXQgMDc6Mzg6MzJBTSArMDAwMCwgRGF2ZSBUaGFsZXIgd3Jv dGU6DQo+IA0KPiBJZiB0aGVyZSBpcyBhIGNvbXBlbGxpbmcgcmVhc29uIHRvIHN1cHBvcnQgYSBw dWxsLWJhc2VkIG1lY2hhbmlzbSwgYW5kIHdlIGdldCBjb25zZW5zdXMgdGhhdCB3ZSBuZWVkIGl0 LCB0aGVuIGdyZWF0Lg0KPiBCdXQgc28gZmFyIEkgaGF2ZW7igJl0IGhlYXJkIG9uZS4NCj4NCg0K SSBob3BlIEkgZ2V0IHRoZSB0ZXJtaW5vbG9neSByaWdodC4uLg0KDQpSZXNlYXJjaCBwYXBlcnMg SSBoYXZlIHNlZW4gb2Z0ZW4gdXNlIGEgY2hhbGxlbmdlIHJlc3BvbnNlIG1vZGVsIHdoZXJlDQp0 aGUgJ3ZlcmlmaWVyJyBzZW5kcyBhIHNwZWNpZmljIGNoYWxsZW5nZSB0aGF0IHRoZSAnYXR0ZXN0 ZXInIGhhcyB0bw0KYW5zd2VyIChvZnRlbiB3aXRoIHRpbWUgY29uc3RyYWludHMsIG1pbmltaXpp bmcgdGhlIGNoYW5jZSB0byByZWxheQ0KdGhlIGNoYWxsZW5nZSBhbmQgc3VjaCB0aGluZ3MpLiBJ IHRoaW5rIEkgcG9pbnRlZCB0aGlzIG91dCBiZWZvcmUuDQoNClBlcmhhcHMgUkFUUyBkb2VzIG5v dCBuZWVkIHRoaXMgZm9ybSBvZiBjaGFsbGVuZ2UgcmVzcG9uc2UgYXR0ZXN0YXRpb24NCmFuZCBw ZXJoYXBzIFJBVFMgaXMgZmluZSB3aXRoIHRoZSBhc3N1bXB0aW9uIHRoYXQgdGhlIGF0dGVzdGVy IHNvbWVob3cNCmtub3dzIHdoaWNoIGNsYWltcyBhIHZlcmlmaWVyIG5lZWRzLiBCdXQgdGhlbiBp dCB3b3VsZCBiZSBuaWNlIHRvDQpzcGVsbCB0aGlzIG91dCBjbGVhcmx5IHNvIHRoYXQgcGVvcGxl IGxvb2tpbmcgZm9yIGNoYWxsZW5nZSByZXNwb25zZQ0KYXR0ZXN0YXRpb24gYXR0ZXN0YXRpb24g Zmxvd3Mga25vdyB0aGF0IFJBVFMgaXMgbm90IGZvciB0aGVtLg0KDQovanMNCg0KLS0gDQpKdWVy Z2VuIFNjaG9lbndhZWxkZXIgICAgICAgICAgIEphY29icyBVbml2ZXJzaXR5IEJyZW1lbiBnR21i SA0KUGhvbmU6ICs0OSA0MjEgMjAwIDM1ODcgICAgICAgICBDYW1wdXMgUmluZyAxIHwgMjg3NTkg QnJlbWVuIHwgR2VybWFueQ0KRmF4OiAgICs0OSA0MjEgMjAwIDMxMDMgICAgICAgICA8aHR0cHM6 Ly93d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUvPg0K From nobody Sun Nov 17 18:15:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4605D12083A for ; Sun, 17 Nov 2019 18:15:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.163 X-Spam-Level: X-Spam-Status: No, score=0.163 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_ONLY_12=2.059, HTML_IMAGE_RATIO_02=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ihZGllBZ1Oi9 for ; Sun, 17 Nov 2019 18:15:07 -0800 (PST) Received: from p3plsmtpa07-01.prod.phx3.secureserver.net (p3plsmtpa07-01.prod.phx3.secureserver.net [173.201.192.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B436120048 for ; Sun, 17 Nov 2019 18:15:07 -0800 (PST) Received: from dhcp-96dc.meeting.ietf.org ([31.133.150.220]) by :SMTPAUTH: with ESMTPA id WWZCi0ZvIqGFCWWZEiS8R2; Sun, 17 Nov 2019 19:15:05 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_F42D8772-A82F-4B5A-8B62-40E2CB297916" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: <4C4AA705-101B-499E-ACFB-AEC801042A61@island-resort.com> Date: Mon, 18 Nov 2019 10:15:01 +0800 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfGg97dEaYTRXOoSiOwomIBlan5vhBJh3HQ/7wVtO5RPWX7dNXCS9Ec4GAVY/Bc7Pi57LnNQCUKYCH5Wvb55GyIFnCjddS2NSE2jduCDNSUh01zRLEqkX E1y41pO9rJAZZKcV0td0L+FyFAQCQiLiZZ/SOO8sbidPRaiEtFoGVRUVwC520c+cha4hzejt/r1DsA== Archived-At: Subject: [Rats] Frame up for RATS work areas X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 02:15:08 -0000 --Apple-Mail=_F42D8772-A82F-4B5A-8B62-40E2CB297916 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Here=E2=80=99s a graphic trying to depict some different environments = where attestation may be used. Ideally, RATS would address everything in the graph providing some = attestation solution regardless technology. Today we have drafts to address two of the four areas, the ones without = a =E2=80=9C?=E2=80=9D. LL --Apple-Mail=_F42D8772-A82F-4B5A-8B62-40E2CB297916 Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_B8F9D2CE-F005-44E2-9033-A04FD2FD8002" --Apple-Mail=_B8F9D2CE-F005-44E2-9033-A04FD2FD8002 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Here=E2=80=99s a graphic trying to depict some different = environments where attestation may be used.

Ideally, RATS would address everything = in the graph providing some attestation solution regardless = technology.

Today we have drafts to address two of the four areas, the = ones without a =E2=80=9C?=E2=80=9D.

LL




= --Apple-Mail=_B8F9D2CE-F005-44E2-9033-A04FD2FD8002 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-1.png Content-Type: image/png; x-unix-mode=0666; name="PastedGraphic-1.png" Content-Id: <974492B7-A1E7-48EC-81D0-6D135C224721@meeting.ietf.org> iVBORw0KGgoAAAANSUhEUgAAByoAAAMUCAYAAADjYKCYAAAMJWlDQ1BJQ0MgUHJvZmlsZQAASImV lwdYU8kWgOeWVBJaIAJSQm+CFOnSa6RKFWyEJJBQYkgIKnZkUcG1oCKCFVkVsa0FkMWGvSyCvT8U UVHWxYINlTdJAF393nvfO/nm3j9nzpw552Tu5A4AajEcsTgbVQcgR5QniQ0NYE1ITmGROgEVqAMy /OhxuFKxf0xMBIAydP+nvLsBEPn9qp3c18/9/1U0eHwpFwAkBnIaT8rNgXwQANyVK5bkAUDogXrT 6XliyEQYJdCSwAAhm8k5Q8nuck5TcoTCJj42EHIqAGQahyPJAEBVHhcrn5sB/aguhewg4glFkJsh +3AFHB7kz5BH5eRMg6xmBdkq7Ts/Gf/wmTbsk8PJGGZlLgohBwml4mzOzP+zHP9bcrJlQ3OYwkYT SMJi5TnL65Y1LVzONMjnRGlR0ZA1IV8T8hT2cn4ikIUlDNp/4EoDYc0AEwCUxuMEhUPWh2wiyo6K GNT7pAtD2JBh7dF4YR47XjkW5UmmxQ76R2fwpcFxQ8yRKOaS25TIshL8B31uFPDZQz6bCgTxSco4 0bZ8YWIUZFXI96RZceGDNs8LBIFRQzYSWaw8ZvibYyBdEhKrtMHMcqRDeWGeAiE7apAj8gTxYcqx 2BQuRxGbDuRMvnRCxFCcPH5QsDIvrJAvShiMHysT5wXEDtrXiLNjBu2xZn52qFxvArlVmh83NLY3 Dy42Zb44EOfFxCtjw7UyOeNilDHgNiACBIIgwAIy2NLANJAJhK09DT3wm7InBHCABGQAPrAb1AyN SFL0iOA1DhSAvyDxgXR4XICilw/yof7LsFZ5tQPpit58xYgs8ARyDggH2fC7TDFKNDxbIngMNcKf ZufCWLNhk/f9pGOpDemIwcQgYhgxhGiN6+E+uBceAa9+sDnh7rjHUFzf7AlPCO2ER4TrhA7C7anC QskPkbNAJOiAMYYMZpf2fXa4BfTqggfg3tA/9I0zcT1gh4+BM/njvnBuF6j9PlbZcMbfajnoi+JA QSkjKH4Uqx8jULVRdRn2Iq/U97VQxpU2XK3A4Z4f8wj8rn48eA//0RJbjB3AzmInsPNYM9YAWNgx rBG7hB2R8/DaeKxYG0OzxSriyYJ+hD/NxxmcU141qUOdQ7fD58E+kMefkSd/WAKniWdKhBmCPJY/ 3K35LLaIaz+K5eTg6AGAfO9Xbi1vmIo9HWFe+KbLPQ6ARwlUZnzTceAedPgJAIx333Smr+GyXwHA kTauTJKv1OHyCwH+q6jBJ0UXGMK9ywpm5ARcgRfwA8FgHIgG8SAZTIF1FsB1KgHTwWywABSDUrAC rAGVYBPYCnaA3WA/aADN4AQ4Ay6CNnAd3IVrpQu8AL3gHehHEISE0BEGoosYIeaILeKEuCM+SDAS gcQiyUgqkoGIEBkyG1mIlCJlSCWyBalFfkcOIyeQ80g7cht5iHQjr5FPKIbSUC3UALVAR6PuqD8a jsajk9EMNBctQIvQZWgFWo3uQuvRE+hF9Dragb5A+zCAqWBMzBizw9yxQCwaS8HSMQk2FyvByrFq bA/WBH/pq1gH1oN9xIk4A2fhdnC9huEJOBfPxefiS/FKfAdej5/Cr+IP8V78K4FO0CfYEjwJbMIE QgZhOqGYUE7YRjhEOA2fnS7COyKRyCRaEt3gs5dMzCTOIi4lbiDuJR4nthM7iX0kEkmXZEvyJkWT OKQ8UjFpHWkX6RjpCqmL9IGsQjYiO5FDyClkEbmQXE7eST5KvkJ+Su6nqFPMKZ6UaAqPMpOynFJD aaJcpnRR+qkaVEuqNzWemkldQK2g7qGept6jvlFRUTFR8VAZryJUma9SobJP5ZzKQ5WPNE2aDS2Q Nokmoy2jbacdp92mvaHT6RZ0P3oKPY++jF5LP0l/QP+gylC1V2Wr8lTnqVap1qteUX2pRlEzV/NX m6JWoFaudkDtslqPOkXdQj1QnaM+V71K/bD6TfU+DYaGo0a0Ro7GUo2dGuc1nmmSNC00gzV5mkWa WzVPanYyMIYpI5DBZSxk1DBOM7q0iFqWWmytTK1Srd1arVq92praY7QTtWdoV2kf0e5gYkwLJpuZ zVzO3M+8wfw0wmCE/wj+iCUj9oy4MuK9zkgdPx2+TonOXp3rOp90WbrBulm6K3UbdO/r4Xo2euP1 putt1Dut1zNSa6TXSO7IkpH7R97RR/Vt9GP1Z+lv1b+k32dgaBBqIDZYZ3DSoMeQaehnmGm42vCo YbcRw8jHSGi02uiY0XOWNsuflc2qYJ1i9RrrG4cZy4y3GLca95tYmiSYFJrsNblvSjV1N003XW3a YtprZmQWaTbbrM7sjjnF3N1cYL7W/Kz5ewtLiySLRRYNFs8sdSzZlgWWdZb3rOhWvla5VtVW16yJ 1u7WWdYbrNtsUBsXG4FNlc1lW9TW1VZou8G2fRRhlMco0ajqUTftaHb+dvl2dXYP7Zn2EfaF9g32 L0ebjU4ZvXL02dFfHVwcsh1qHO46ajqOcyx0bHJ87WTjxHWqcrrmTHcOcZ7n3Oj8aoztGP6YjWNu uTBcIl0WubS4fHF1c5W47nHtdjNzS3Vb73bTXcs9xn2p+zkPgkeAxzyPZo+Pnq6eeZ77Pf/2svPK 8trp9Wys5Vj+2Jqxnd4m3hzvLd4dPiyfVJ/NPh2+xr4c32rfR36mfjy/bX5P/a39M/13+b8McAiQ BBwKeB/oGTgn8HgQFhQaVBLUGqwZnBBcGfwgxCQkI6QupDfUJXRW6PEwQlh42Mqwm2wDNpddy+4d 5zZuzrhT4bTwuPDK8EcRNhGSiKZINHJc5KrIe1HmUaKohmgQzY5eFX0/xjImN+aP8cTxMeOrxj+J dYydHXs2jhE3NW5n3Lv4gPjl8XcTrBJkCS2JaomTEmsT3ycFJZUldUwYPWHOhIvJesnC5MYUUkpi yraUvonBE9dM7JrkMql40o3JlpNnTD4/RW9K9pQjU9WmcqYeSCWkJqXuTP3MieZUc/rS2Gnr03q5 gdy13Bc8P95qXjffm1/Gf5runV6W/izDO2NVRrfAV1Au6BEGCiuFrzLDMjdlvs+KztqeNZCdlL03 h5yTmnNYpCnKEp2aZjhtxrR2sa24WNyR65m7JrdXEi7ZJkWkk6WNeVrwJfuSzEr2i+xhvk9+Vf6H 6YnTD8zQmCGacWmmzcwlM58WhBT8NgufxZ3VMtt49oLZD+f4z9kyF5mbNrdlnum8onld80Pn71hA XZC14M9Ch8KywrcLkxY2FRkUzS/q/CX0l7pi1WJJ8c1FXos2LcYXCxe3LnFesm7J1xJeyYVSh9Ly 0s9LuUsv/Or4a8WvA8vSl7Uud12+cQVxhWjFjZW+K3eUaZQVlHWuilxVv5q1umT12zVT15wvH1O+ aS11rWxtR0VEReM6s3Ur1n2uFFRerwqo2rtef/2S9e838DZc2ei3cc8mg02lmz5tFm6+tSV0S321 RXX5VuLW/K1PahJrzv7m/lvtNr1tpdu+bBdt79gRu+NUrVtt7U79ncvr0DpZXfeuSbvadgftbtxj t2fLXube0n1gn2zf899Tf7+xP3x/ywH3A3sOmh9cf4hxqKQeqZ9Z39sgaOhoTG5sPzzucEuTV9Oh P+z/2N5s3Fx1RPvI8qPUo0VHB44VHOs7Lj7ecyLjRGfL1Ja7JyecvHZq/KnW0+Gnz50JOXPyrP/Z Y+e8zzWf9zx/+IL7hYaLrhfrL7lcOvSny5+HWl1b6y+7XW5s82hrah/bfvSK75UTV4OunrnGvnbx etT19hsJN27dnHSz4xbv1rPb2bdf3cm/0393/j3CvZL76vfLH+g/qP6X9b/2drh2HHkY9PDSo7hH dzu5nS8eSx9/7ip6Qn9S/tToae0zp2fN3SHdbc8nPu96IX7R31P8l8Zf619avTz4t9/fl3on9Ha9 krwaeL30je6b7W/HvG3pi+l78C7nXf/7kg+6H3Z8dP949lPSp6f90z+TPld8sf7S9DX8672BnIEB MUfCUbwKYLCh6ekAvN4OAD0Zvju0AUCdqDybKQRRnicVBP4TK89vCnEFYLsfAAnzAYiA7ygbYTOH TIN3+St4vB9AnZ2H26BI052dlL5o8MRC+DAw8MYAAFITAF8kAwP9GwYGvtTAYG8DcDxXeSaUi/wM utleTm1dL8GP8m81wHEmzd75nwAAAAlwSFlzAAAWJQAAFiUBSVIk8AAAAWJpVFh0WE1MOmNvbS5h ZG9iZS54bXAAAAAAADx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9 IlhNUCBDb3JlIDUuNC4wIj4KICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9y Zy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6 YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6ZXhpZj0iaHR0cDovL25zLmFkb2JlLmNvbS9leGlm LzEuMC8iPgogICAgICAgICA8ZXhpZjpVc2VyQ29tbWVudD5TY3JlZW5zaG90PC9leGlmOlVzZXJD b21tZW50PgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgPC9yZGY6UkRGPgo8L3g6eG1wbWV0 YT4KbszeLgAAQABJREFUeAHs3QmYJVV9MO4zGzODDAMoiCDLmDCTBIEEQaMioMin7I8LICiCiahB /esHiAYSRT6TL7LFRCUKRsEoMIImgoARDYKAUcAEEP+BGGSJBFkHBmGWnpnv/hqrp6q67u273+6+ bz1P963l1FneU1W3bp2qUzPW1YZkIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQB8FZvYx LUkRIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBgVEBDpQ2BAAECBAgQIECAAAECBAgQIECA AAECBAgQIECAAIG+C2io7Du5BAkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQ0FBpGyBAgAAB AgQIECBAgAABAgQIECBAgAABAgQIECBAoO8CGir7Ti5BAgQIECBAgAABAgQIECBAgAABAgQIECBA gAABAgQ0VNoGCBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBDou4CGyr6TS5AAAQIECBAgQIAA AQIECBAgQIAAAQIECBAgQIAAAQ2VtgECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBPouoKGy 7+QSJECAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBAQ6VtgAABAgQIECBAgAABAgQIECBAgAAB AgQIECBAgACBvgtoqOw7uQQJECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIENBQaRsgQIAAAQIE CBAgQIAAAQIECBAgQIAAAQIECBAgQKDvAhoq+04uQQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAA AQIENFTaBggQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQ6LuAhsq+k0uQAAECBAgQIECAAAEC BAgQIECAAAECBAgQIECAAAENlbYBAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgT6LjC77ylK kAABAgQIECBAgAABAgQIECBAgACBlgQuuOCCdPvtt4+uc8opp6RNN920pfUFJkCgNYGRkZE0c+bM 0b/W1pw6oW+++eZ08cUXj2b4LW95S9ptt92mTubllACBaSMwY11tmDalURACBAgQIECAAAECBAgQ IECAAAEC00zgnnvuSYsWLRor1dKlS9Nhhx02Nm2EQL8FTj311PTxj398LNm1a9emGTNmjE1P5ZG4 XB4NlNmw5557pmuvvTabnFafe+21V7ruuuvGyrRixYo0d+7csWkjBAgQ6IeAhsp+KEuDAAECBAgQ IECAAAECvxGIi1/Z/aJxQa+di3pxh38Ms2cPXyc5zzzzTIryR9nnz5//G9XmPuIi6sqVK0cDz5kz Z0K/SCfSi7TigmW7F+4mU52HwYMPPpgeeOCBtGzZslHDKNdWW22VtthiiwlNmpNuLVTk6bTTTkvX XHNNWrBgQXr3u9+dDjrooNYiEXpaCdgmxldnuTEhjOp9f2THyThGtvo9EfFmx8l58+aNSyOWd2vI NwT1Kt7Ia/4YXM57u9/D5XiGcXr77bdP995771jR16xZU2jcG1swBUdim8lvn9ttt12KmwWm4/Dw ww+Pfv9nZfvYxz6WTq01QhsIECDQT4H1t4b0M1VpEZimAvFjYPny5aMXM1otYpyUx/rZD4qJ1o+L Jlla2Y+IidapWh4nX5F2/MV4O0PkJf46HSIPccEkup347ne/m2644YbR8ZjXjfjbyV/kKU7Q4kfh gQcemC6//PJ2orHONBKwTUyjylQUAgQIDEAgzm/iwtesWbNG/2L8Xe96V0s5iYuq0cgWf7vssktL 6071wGeccUbacMMN08Ybbzz6GedozQ5x7hzusX78hV98r9cb4pw0wmRpxQX7I488sl7wuvMnQ51H OeM8Ni4qh8HWW2+ddt9997TvvvumPfbYY3Q85kV5oyvJcI7fJf0afvKTn4w+lRNPdFxxxRXp4IMP blg3/cqXdAYnYJso2sfxK//E0+mnnz6uATFbI363ZsfJ2Kfj93SzQ1wTyB8n809wRhzxnZN9f3Xj M8tbr+KNPMe1hfz3bjnfsSy+V+PYF9/Hd911V6xmaEJg4cKFTYQSZLILbL755ikaYrMhnpJt9/pg FodPAgQItCqgobJVMeEJ1BFw0aS9C2UumtTZoMyetAIumkzaqpExAgQITAmB4447blw+zzvvvPTZ z3523PyqGeWGtSeeeKIq2LSd9+pXv7pQtrhw3+wTDvGUXn6Ii3Jxgbre8Md//MfjFl100UUt30A3 6DqPBsq4MB+Nf/knX8YV7jcz4inLk046abSh48QTT6wXrKvz40nK8lDvSbFyuG5O52/i7Ga84nr2 ibY4fpWPYfVsJss2US9//Z6f714z0n7Pe95TNwv3339/YdmqVasK061MTIeGqBNOOKGpIsexL76P lyxZMtpoGY3Dhukj4PjeuC6/8IUvFALceOONhWkTBAgQ6LVA/V9lvU5Z/ASmmYCLJim1eqHMRZPm dwIn1c1btRqyVVsXTVoVFp4AAQIEmhF43/veN9bVXqPwg2i8aZSffi/bbbfd0iabbFJI9pBDDilM V03E04HRyJgfvvOd7+QnC+PRY8ltt91WmJdNXHXVVdloR5/9qPN44jQaKNsdzjrrrKYb0dtNI9Z7 xSteMW71OEfr5xBd3+Wfurrgggv6mfy0Tqsd28mwTUyWSonG3dgXsyFusogukvsxlH/j33fffV1N 9qmnnhqNr1fxtpvZaLSMp+lj2zVMfYF2jkFTv9StlWDvvfcurFB1k1UhgAkCBAh0WWD4XmjSZUDR EcgEsosmcUKbDXHR5NZbb80mKz+7fdGkG+9yiYsm73znOyd8B08nF8rK79eoxGkwM36oRTc0733v exuE6nxRvR/InZS91VzFSXW8Lygbzj///HT00Udnkz47EGjHdjJsEx0U2aoECBAgMIkF3v/+96dz zz13EudwcmTt6quvHu2qNMtNNCjGd3p0XVZv+MAHPlBYFBf6Fy9eXJiXn/jmN7+ZnyyMRz1145w7 Iu1lnUc3r1VPUO68887pnHPOSbvuuuvY+f7q1atHw8b2l28QiTz+4he/iI+eDi972cvSEUccke64 447RdD7xiU80fNq1F5kJg/zw0EMP5SeNdyDQju1k2CY6KHJXV/3hD39YiK/8dGVhYY8nolvUquNK JBvvuo3jS36Id9296U1vqnsjzg477DAavFfx5vOSjX/mM59Jb3jDG1I8aRp/8f0R3ytVrvE7PBqK +/n7P8unz+4JtHMM6l7qUyOmeJftnnvuOdbFdJxbxU1b7b6be2qUWi4JEJhMAhoqJ1NtyMuUF3DR pLkqdNGkOacslJPqTKL7n+3YumjS/XoQIwECBAg8KxBdzn3yk58c7XKOSX2BqhsE3/zmN6drr722 cqW40Ba2+aHR05QRrtxNbH7duEgfNxvOnz8/P7ut8V7Vebyjrqox4Ze//GXaaqutxuU1LkRGw+2Z Z545+hc9n3TyJOa4BCaYERdIL7zwwglCWTxMAraJ9bV98sknr5+ojfVz3ywkXJuIG0Ia3RQSDZX5 p9HjnY9Vx5x+xVtOJ6ajkTKfpzj2vfKVr0ynnnpqimNnvCc3P1xyySXpsMMOy88yTmBaCkR37/l3 4ca5UrduzJqWYApFgEBXBXT92lVOkQ27QHbRJO8QF03qDb26aFIvvVbmx0WTxx9/vJVVmgrb6KJJ PH0aPxDiok90uxR/+Ysm0f3TZZdd1lQ63QqU/UCOvMWfk7RuyU7deGwTU7fu5JwAAQJTQaDc9dZU yPMg8hg3COaHuLBW79z1lFNOyQdNEz1NGfHke0mJ95sde+yxhTi++MUvFqY7meh2nd9+++3jLrRH d7nxVFD+4nyjPMc575o1a1I8eXT88cc3CmoZAQI9FIjfwPmGg0hq00037WGK3Y26k/djNspJJ/E2 Wvdb3/rWuO7F4529BgLDIFA+H4mblwwECBDol4AnKvslLZ2hESg/VZldNKn6MdGNiyZPPvlk4Q7x uGjSre5Q4yRloq5rW6nYehdNHnvssaa7Uskumvzd3/3d6J2QraQvLAECBAgQIEBgsglcf/31aY89 9hjLVjyJEl3gNeqWdCxwmyPxNOD9998/9u6tuDEsGrC23HLLprvbjEav6Jlg1qxZKW7iyQ/Lly9P d95551iXYb/1W7/V9Qvr2Q2C+QbFOAcuP5U3MjIyrivTiZ6m/MIXvpAvzmhDXbxHLf9U5p/92Z+1 fc7d6zqPrtvKQyvn29m6cdNgt35XZHE2+owGmWhAqNqm8ut1e9uLdKNbx0cffTSfTPrVr341Oh3L s6HZ7h+jsfu//uu/xrq7jCfQooG82S706pUx9t2f//znKX4DRpy//du/3XCfjXzEOwbjSdoY4p17 0btNu+83DItHHnkkPfjgg6Nli/he8IIX1I2vU9tYv5ltIquf/Gc3jnMRX726iGX9ONaVn4wu3zQR +TB0V+BHP/pRWrJkyVikUQexHcQxsRtDp/tlP7fJuLk+zknimBPD1ltvPXosa/ZY2A2vTvblTo9B jfKfPx7Hsb0b5zqD/u4ofzfE9cxubvuNPC0jQIBAqh20DQQIdFmgdsdy/Jod+6u9b2VcCrULO2PL s7C1CzrjwuVnnH766YV1aj8418U62frxGWk3O9S6ZSmsW7toUpiO+BrlqXbCUghf+/HdMOmyS8Qf cUz2IfK4YsWKdVFnjYbaXed1w9VO7NfddNNN68I4PmsXixpFNboss6ldsCw41+7qH1seYbJwE0ZY CxDpZvmIvET9RtmaHeqV8emnn14X+czijHCNhsjHL37xi9HwsU6sG0btDmFQe4/QaDxRvihXo/gy s3ZtY/1mtomq8oRV5C/KHX+R39iXJzLLx1WvHiJMO9taPm7jBAgQINBbgfL5V3ynlOc1Op+L8Plz v4nOv/KlWbp06ei5Yn798nitkWv0eym/Xnm8nIdf1L7TY4jPyE85zmw6vve6OZS/xyOd8vd/7f1o hfw045XlN/uMPJfLHMvi3KOZoVy/vazzOMfI8p19htNkH8q+sR1WDeVwnW57tZtMx3llblWfjbaf yFv591o5jlg/6qjRUK+M8RugHF9MR/j8EPUdflVh8/Nq773Pr9ZwPM574zdtfv3yeO3p20JeOrUt O9TbJsoZ79ZxLuIt56HT7a2c12amy9tUM8fR8jEny3cz6ZXL3Gibr4qvk7Sr4svmdRJvq+vGsb28 fZf3syxfzX52a78s109Wt/EZdVXOdzbdzHaTL0v8Pm0UX3b8KB9rWvlNm0+varzTfbnbx6DwiGEi m1ato07L+3lWb9lnpN3r747RwtX+1W6GKGxH2TaWLfdJgACBXgloqOyVrHiHWsBFk/HV76LJ+obr 7GQzPuudxHZ6Up2vgcly4tutH2f5sg3jRZN+/TjNOxsnQIAAge4JlC+YxnG96qJonAtUDeXvgezC WVXYbF58X+bPP5oZj4tm9YZyHuKiXTRSNBNvdnGzXtytzi/fCBcX2LIhLpiW8zTRhb64IJdfJ7tB LOIsX7zLL8vSrPrsZ52XG5MaNXpX5XVQ88rbVL3tuhyu022v2e02v01U3bwYDeT5MBONRwN6vaGq jOV6zcefNQzEeuGWXzbReGybEw1Vv20bxRvHmxg6tS071Nsmsvx3+zgX8Zbz0On2luW1lc/y8aOZ G17L67TS0FAu80Tu5bJ0knY5rvx0J/G2um7VthQu7QyxXhg22mfKyyK/9YZy/fRim6y9bqep/JZd oxzZ8ahe/puZX+VfNipPV52zdPsYFOWNc5hy2lXTzZ7rTIbvjnKdRANxvkzhaCBAgEA/BDRU9kNZ GkMp4KJJsdrLP65dNFnfcFl1EtvpSXWmPxlOfLv94ywr27BeNOnHj9PM2CcBAgQIdF+gfGEvu6h3 wAEHFC4MxUWiqqH8PTDRReSJLviVz1nzF6eqLvxFnsp5yK/TzHizTyJWlb88r+p8IGtIKl9sm8gq 4i43RsZF4GyIi/3l8mXLGn32s87L+avX4N0ov4NYVt6m6tVVOVy5vBNNl7e9ds65yz7RW0ZVurFv xW+gqn07wte7+NtqGbNjSNwAWS8fsQ3W29djP6k3VG3zWRr14suOG53alh3qbROR914c5yLech6y sjf7Wd7eIs5Wh3JaWX03iqd8zIl6bHYol7mRe1WcnaRdFV82r5N4W103jvtl9ywfrX52e78s1085 nxNNT7RNVn2nThRn/ljQzPbZyLCb+3I3j0H5Mk7kkS2fyHqyfHeU66O8/cd3mIEAAQL9EKj+9duP lKVBYJoLVJ3guWiyvnHORZP1FnEiWz6J7fSkOnavyXLi2+0fZ1G2Yb5o0usfp+FrIECAAIHeCZQv mGYX9aq+t6saMsrfAxNdRI7l2UWz7DOe5oqLgdkQeaj3BEXV0zvlPGTxxmdczMsuise5b9U5TTTe dHMoX0DM3PL5ivGJnqasKlc5n63GGev3q86rtqHs90e5HJNtumxfb7suh8vXRzvbXsQX5+GxnZcb tmM7jZv+Ynn2F8bloWofyzdwR/ioh3IXiZH3/H6YxduojLFOnFvHthz7cWxbET6G/D4cFvF7q1z/ Uc7y/hJx1hvyvtl4pJMNceyI1xjk48waKju1LTvU2yYiL1V1ED5531aPcxFvOQ+ZQXy2s71FnK0M UX/lNJtZv3zMmejYl48znPJpNnLPr5eNl9POvg+y5e1+dhJvq+vGttOJQb6M3d4ve71N5sudjcex MbaLGOJYmPfM7/sRPguXN2hlvJv7crePQZlHfHZj/68q6yC+O8r1Uz6XaPUYUI7PNAECBJoVqH9G 2mwMwhEgUFegfNLmosn6xrnyj+a6iANeUP4hUO8krRyu05PYTk+qg22ynPh2+8dZlC3vm40Py0WT bm9r4WkgQIAAgf4J5C/wxXdY/qJe1TvoyudM5e+BeucmUaK4QJx9T2afjW4Wq+qJId+VaqZUzkMW d70GyKrGyoijW0P5BsE4By/fKNXIKctHNLhkZYnPuFhdHsoXsJt50qBfdV5V3/ntq1yWqINYHp9V f9my8nq9mI708/b16qscLlunG9teXIDP4ovP7Ldbo/JWmecbx8rrlp+urEqjXhnrmWRpRLrRGBrb fqOh3PgVZa3aTsr7UIQrX0TPp5PtG1Vlase27FCv/FV10I3jXJStnIds++jG9pa3qzdeLls9g/L6 5WNO5Lt8bSIrS/6zKkyzaWZ5KKcdZejG0Em8raxb3lbDp+q7oNkydXu/7OU2Wf4ujbLXa+SOGxLy 2042XnUsadaqvL1HnN3al8v1WnWcKuezl9ZVZR3Ud0cz5e6kXsvxmyZAgEA9AQ2V9WTMJ9AFgfKJ nosm6xsqG53oxAlhLI/Pqr9sWReqaMIoyien9X6olcNlJ+rd+BHbzkn1ZDrx7faPs2G/aNLLbW3C HUIAAgQIEOhYoHzBNH9OFOPZOUT2WW4oLH8P1Ds3iYyWn+Aqx1VVmLgomKWdfU7UWBrhGsVdznOE z5e7Kh+tzqu6wJ7lPz7rXWzNp1P2inOw8lA+L2umLP2q83J3bY22japtLe+VH48G3F4P5W2kXt7L 4SKf3dr2yn7Zk4GNyl5ueGx0UT3iKd8MUFXOqjI2s501ymd5WfxGyddxVQNkebutel1FOd7ysSJb 3o5t2aHKKuIv77eNtocsP80c5yJsOQ/d3N6yvDT6bMct4ivXXb6uWx2v514v3+W043dpN4ZO4i2v W7W9Rx7L128yq25/X9XzaGa/7OU2WT6eTbQvRWNfZpR9dmLVy325nX2pn9aT7bsj9vusTuOzk3qt t72bT4AAgbKAhsqyiGkCXRZw0WTd6J23+ZOcRj92XDQZvwG2c1Jd/pEx2U58x5fy2TnN/Dgr/9Ac tosmvfzBVK9ezCdAgACB7gmUv8fKF3/iey1/3hTj0biRDeXvgXrnVeVwEU9VN65ZvNln1XrlRr5y mDjfnWgoX4Csd6F4onjqLa93gTnKXc8oH1f5KbNGZSrXz0TnWf2q8/I5Y6Rbb6i6qa1crmy6mQa7 euk0O7+8TdWrs3K4RvWUpd3stlf2m6jcVb9bIn8TDVG2zDY+y8eAchkjTLcae7K8lY8z5fir8tDo aZ8s3nqfrdpGPOU8VG0T5TBh1a3jXFUeurm91bPKzy/foDnRNpmtWz7m5Le3Vser3LN0qj7LaZe3 rap1mpnXSbzldeM3Z3RnGn+xL0RvBlG3VTb5XnuayWcnYSbaLyPu8jbfrW2yHG9YVN2sUy7fRMez cvh601Xpd3Nf7sYxqFvWU+G7o7zPRP0YCBAg0GuBmbUvHwMBAj0UuO666+rGXjupS4sXL667PBaM jIykfBy1k6O0+eabj1unat6//Mu/jAvX7IyZM2em2olyIfh5552Xli9fXpjXzsTChQvrrnbffffV XVZecM0115RnTZrpqKdzzz23bn5mzJiRahdNCssffPDBwnS7E7WTyHTFFVcUVt9nn30K0+WJBQsW pNges+Hee+9NEc9EQ+2HZ4ptpVvD6173ukJUq1atKkzXvhRT7UJkYd5b3vKWwnTVxOzZs6tm92xe 5DO/30ZCn/zkJydMr6qe7r777obrDXJba5gxCwkQIECgLYGjjz563HoHHnjguHkTzVi2bFkhSHxf bLrppoV5VRNxjlK74amwaIMNNihMlye23Xbb8qxx04cddlhhXvk7PhauXLkyPfDAA+nhhx+u+xfL q85RdtpppxRlrBq+853vVM0uzLvqqqsK0yeffHJhOj9RayzIT6baRe7CdKsT3arzVtJ9wQte0Erw SRu2W9teNwqYbX+xfdb7i3PERr+FqvIR5+jbb7991aK25z311FMN133kkUcKyyMPc+fOLcybDBP9 PM5Fefu9vd14441dYa41OqRa96Wjx6o4XjX6qz1F15U0J3MkF110UTr88MNH/4455ph01llnpfK2 FPmPY/1BBx3Ut6JMtF9WZaSX22TVNaZyHlo9npXXz6bL/r08Z8nSbPWzV9ZT4buj/J3Qqp3wBAgQ aEagv1dum8mRMASmmUB20aR84hXF7MVFk5NOOmlMMH6A3HrrrWPTrY7ERZM4cc8PcaHs2muvzc/q 6viwXTTJN2ZVXbDrBm7+xLdefHFRstUfGS6a1NNM437otvpDK9/Q3K2Lw/3Y1uqLWEKAAAECrQjU nqJJe+yxx9gqcQy/5557WmqseOKJJ8bWj5FWvucPPfTQwk1Pl1xySfrQhz5UiC8/UU4rv6yV8SVL lqS4WWqiIS64n3rqqeOChVNckM8Pcb4y0Y2BEf79739/frX0vve9rzCdn4hl+XPuuIkqGlk7acjp Rp3n8xjj5Zu78ssjr7UnTFL5/DPOO2pPiI77DZBfdzKNd2vba6dM5ZsM4/deN2/gy/LUyr6brRMN pT/5yU/St771rRQ3d8Z+lbeq+m2arRuftSeM85MtHT8KK/Z4Il+mSKoVq1aPcxF/Ob2Y18thww03 7Er0cSPGVltt1XRccYPyMA/x2+1HP/pRU98drTh1ul9WpdWtbbL2xHQh+vJ3aWFhDybK5ej1vtxO Ecp5bCeOWGcyf3fUK9O8efPqLTKfAAECXRPQUNk1ShERqC/goknRxkWToke3pybziW+nP85cNBm/ tXTrB9P4mM0hQIAAgUEJvPKVrxzt6SDfaLf33nuPNlY2m6fyjS7lm88axXP77bcXFv/O7/xOYbpX E81emFy0aFFlFqpuELz88ssrw+ZnRo8heetY9vjjj4/+5cM1Gr/44otT1ZORjdbJL+tGnc+ZMycf 5eh4lC16zqga6jVc7L///lXBzRuQQCvnevHE5sc//vHRv25m921ve1s3o+taXFPxONe1wrcQUfmG hEarxjY0DEPcxJIfXvziF6dovI7jXzNPEubXnWi8V/vlROm2svxXv/pVIXgrx53Cim1O2JfbhGuw Wjfr8NFHH617LtEgCxYRIECgJQENlS1xCUygPQEXTVw0aW/LmdxrtXLi26sfZy6aTO5tRO4IECBA oH2B6PJv6623HosgGtKiATHOK9sZWulSbqONNiok8R//8R996f5um222afgUYJapRmWJrtnyT4vV a6TL4orPL3/5y/nJ0fG8/biFFTM++MEPdtRQGVF2WufPe97zxuXs+9//fst1V74xbFykZtQVyHoy qRugtGC//fbr2lOYcb7diyc6S1me1JONjg3ljA/qOFfOh+n+C8TrS7rdnXK9UkyV/bLcUFivPP2a P2z78iC/O5qp0xe+8IXNBBOGAAECHQl078ViHWXDygSmv0C5P/tOLprEhZN6f2XJuGjS6VB+N0Z2 oSy6C21mqHfRpJl182FcNMlrtDYeJ76t/B1xxBFdu9CR/TiLu7uHdej0h9awuik3AQIEhlkgnnYr v886pqN3gnaGSy+9tOnVyk+TvOIVr2h63U4CRjeVUb44d6j3F8vf+973dpLMuHUbdfM6LnCdGdE4 Gk9hdjJ0Wudxbl7uru/tb397J1mybgOB8lNq8YRW9iRus58XXnhhgxRaW1T1Lr1432B08Ru/o2Lf yfav6D65leErX/lKK8EHFnYqHOdawSm/L7hbXcG2kgdhOxPo5X7ZWc4ar91sDweNY2l/6XTbl/MS k+27I5+3euPDfhNMPRfzCRDoroCGyu56io1AVwVcNOkq59BENtlOfHv548xFk6HZrBWUAAECQykQ DXf5IRrDWrl4l1+3lZ4Qvva1r+VXLTzZWVjQg4mJboSbaHmrWXrggQdaXaVu+L/5m7+pu6zZBZ3W +Sc+8YlCUrHN3HDDDYV5Jroj8IIXvKA7EXUhlmiAzL/jPKK86aab0rnnnjv6bsLZs2en2Hey/ad8 M0I5C+XfE60cP8px9XO6lXwO8jjXrEn5KbeoT8PUEej2ftnLkpePZ41e19PLfGRxT7d9OStXfJat 88smw3jcKDbo+p8MDvJAgED/BTRU9t9cigSaEnDRpCkmgSoEJtOJb7d/nLloUlHhZhEgQIDAtBWI HjhOOOGEQvkOP/zwwnS9iS233LKwKBqs4n2FEw0jIyMp3q+eHwb9ZEU+L90eP/vsswtRxpNm9Z7m LM8///zzC+t2o/eITuo8MnPggQcW8hQTe+yxR4p6NbQmMNHTa+VGpOh1ZuXKla0l0qXQ9913XyGm ePp6t912K8xrZaLczV+U7ZlnnmklioZhJ7JtuHJu4XQ/zpXfO9tK402OyeiABLq9X/ayGPH9Vh6a 6SWgXMZyHM1O93tf7tYxqNny5cNNpu+OfL6y8aptwROVmY5PAgR6KaChspe64ibQgYCLJh3gTfNV JzqpnkwnvuUfLi6aNN44h+3icGMNSwkQIEAgBE4//fRKiIneZ1R1Uanc6FkV8ec///nC7OjOctNN Ny3Mmy4TcTHurLPOKhTnAx/4QGG60cRhhx02bvE999wzbl6rM9qt80gnnpgrN6DG/GjwaLYRrdw4 EusP4xDvsWs0hHXsH/nhb//2b/OTfRsvn/9XNVjnM3PrrbfmJ8eNxxOY5eEzn/lMeda46Ztvvrmp GyImsh0XcZ0Z0/04V36FSjQYx42ghqkh0O39speljn2p3HX4RL0EHHnkkYV3QneSv37vy906BrVT 5sn03VGV/wcffLAwu/w9V1hoggABAl0U0FDZRUxREeiWgIsm1ZIumjzrMtFJ9WQ68e32jzMXTar3 DXMJECBAYPoKxMW7qoaneEJyomHp0qWFIOedd1767ne/W5iXn7j99ttT+dUDX/3qV/NBptX4T3/6 00J5ovG3lUbZ+fPnj2uoOvnkkwtxtjPRSZ1HekcffXRlsvPmzWuqG9hrrrmmcv1hm1luxK4qf3n/ OOmkk9Jdd91VFbQwLxqbutmDTrnXkchHveHUU09NcSyYaCg3TDYqW5Rnr732Srvvvvu4xv+qdJqx rVqvat50Ps7F77ryTSm//vWvqxjMm4QCvdgve1nMU045pRB99BJQ7zgVjZQXXXRRIXynE/3cl7t5 DGqn3JPlu6Mq7+XrTcccc0xVMPMIECDQdQENlV0nFSGBzgVcNKk2dNHkWZdmTqony4lvL36cuWhS vX+YS4AAAQLTV6Bew9NEJT700EPHBdl3333Tu971rpTv0i26hD3xxBPHPU0RK7/yla8cF8d0mfGn f/qnhaKU3+9YWFhn4tOf/nRhSVy4reo2rRCoiYl26zyL+umnn85GC5/RDWw0fkRjVTRMx3bw8MMP j47HvFjWbPfChYinwUTV6xPiYnw0wkW3p/FOwzDKD1X7x5IlS9IZZ5wxrqvUiCcaMWP/mzVr1ui7 X7vxBG7kp9xVa8zL8h7jMcR+vssuu6Rmuyh+97vf/eyKuf9Z2SKuKE98fvaznx0tT9Zl9KJFi3Jr PDvaju24SOrMmO7HufI21q1tpg6n2V0U6MV+2cXsjYvqjW9847h5W2+9dbr88stH9/fo/Se+N+KG nm43UkbCvdyXe3kMGofWxIzyfh2rZMfXcjfbvfzuqMrq1VdfXZj9kpe8pDBtggABAj0TqP2IMhAg 0AeBWjca62o78thf7S6luqkecMABY+FinVrDTN2w9RZcdtllhTgintoJTiF4OU9r1qwpLK83kS9H frzWJUS9Vcbm1y6ajMtXPo7ae4HW1V7cve6xxx5b99BDD42Ox7x8mGy81i3WWLy9GgmzLL34rFfG ZsPl8xn1mo+73jZRjjvWOeKII9ZFfYVn7c7DdWFUHvJxZ+NhFuvkh4jnzjvvXHfssceO5acqL+V8 1LPIx7169eqxOLM8ZHnPwj355JPryttiFrYqH1VxRvgoW8QV5YnPsm/taZQsybHPcpkinix/9WzL 69RzKIfLyhTOsX1nQ+S11hXfOKcIXzWU462Xfn7dskWVaz68cQIECBDonUD5O6/Z86/rr7++8rsi 4ms0xHlV9h3U6md8R1UNk/m7qOxb7zuv6nwi//1cVe6qeVXx3HTTTYWg5Tz1us6zxFesWNF23ee3 lWE55w63cl3lHbLxzDf7jG0sW1b1WXsiru7yqu2znf0r8hLnsFXpR5ka5SHWqcpHxBm/M6ribDSv 6ndJxNWqbSsOvTjORZ5byUOEj6Hb593lOojfDRMNZet69VsVTztlzsfTSdr5eMrjncTbybrlfLQ6 3e39sp36aWWbjN/MjfbviZY1+/1Wz7FX+3KkV94OqsqSz1evrWO/rMpDNq/Rcbtqn24nv/nyZuNx fSHLQ3y2c26UxeWTAAECrQh4orJ21DUQmEwCcZfaFVdcUchS3A3b6rDffvuNW+WWW24ZN6+dGbUL ZZWrLVy4sHJ+fmZ0kVW7aJKfVRiPO3xrJ5Bps802S1tsscXoeLN3/RYimkYTcWd7mOSHuIMx7sSO 91XGXe9VRrWT1/wqo+PRZVOsE3HGnZDxGfHE3XvNdAE1LsIJZkRXrbUfZ4VQWd7jju7Iw8Ybb5xq P0gKYRpNRJzlbmEifJQt4oryxGe567oqj3ZtG+UvWxZxV5UrnGP7juXxF3mtekq2dnE4i8onAQIE CBAYfbKxdvFonET5fdDlADvttFPl91E5XHm6dsNOWrBgQXn2tJm+6qqrCmWJ7hVb6fY1WznOS+Id 3PmhmXeB5sPXG48nLtqp8yy+uXPnjj7dWWs4yma1/Bnncd0qT8uJD2CF8nZRlYXaBZfC7O233z79 8pe/LMzLTzTqprmZ30/5uBqNl3tUycLG+Wg5D7WGi2xxw894D2uzYSOi2F4/+tGPVsbZjm1lRBUz p/NxLp6Czw9///d/n5/s+nh5++56AkMWYS/2y14SxtP8zR7z49hQu7m8q9np5b7cy2NQOwiT5bsj n/e4Hhnvws0P7Zwb5dc3ToAAgWYFNFQ2KyUcgT4JlE+eXDSphnfRZLxL+UflZDnx7cWPMxdNxte/ OQQIECAwNQRe9rKXFTIaN600O9x9993jGsW+/OUvT7h6XPirPfmXJmqwikaGWq8co41bcXNZs8OL X/ziCYNuvvnmhTDPec5zCtPdmthmm20KUdVrCCp3rdaMYyHi3ES5IafcKDSIOs9lL51a66406j9u 9Crf/JYPl43XendJ0fVbrHPhhRemeGdmv4dmtqnIUzPhWtn2ttpqqxQ3t8VvsKqh9nTp6I1m5WWx Xu1JoqYa9WI/i/fOxs2bzVwAbqaMkZ84lsTvgUb7edRt3Az33ve+t1CERvtjhI2G2HKDfD6C2K5q TxKn6Ja03vbSrm2WzkQOvT7ORT4mykOEaWV7i/ATDeVtJI4v5eNXOY7yMadR/ZbXLX8n1TuGltfL pps9Bmfhm/3sJN5OPJrNX71wvdovs/R6sU2eeeaZKW5Or3ccjP09jgnl40iWp04/e7Uv9/oYFOVu df+fDN8d+fr693//9/xkqvUGVZg2QYAAgZ4K1E5kDQQI9EGg3J1rve4Tyl27RBeu7Q7lbjNqJ5SF qPJdfdYONOO6hi0ELk1Elx61H6txO/HYXzt5je6yosyRt3xcVeNhWLtosi7W6ddQ7j4j8lA1NBsu v265rqOr20ZDdO9R+7FQ6dSoS66oq9oFtMr18s61iybroquX6CasaminjPl4ahdN6uYhXLPu5fJ5 msik9gNp3HaYXz+2q3L3a/k8ZeOt2LbjENtso/JHnsO/mX2onfRb3dYyF58ECBAg0BuB+G6Ov0EN 0b15fIdG1+/xF9+37ZxftVqO+A7rR7mbTScLF5+dDllc9crXqlWn+Wm0fuQ1zrtiG/hF7fwyPuO3 Sb1zwEZxdXtZs07Nhsvyl9VPNt3MZ3iETeZTr26r4srWzfaxiCPMW9nWWi1jOR+RXtRv5CHSr8p/ zGs1T3G8iDgj7thuquIt56U8nfk0Y9uuQ7eOc5H3VvPQzvZWNspPR3ev+d848Zt4oqHTPLRa5nx+ Ok07H1d+vJN4O1k3n4dOx7u1X7ZaP+2WP/aj/HGk6nui3bibtezmvpyl2ctjUCceWb4G9d1R7qo4 rikaCBAg0C+BGZFQ7YTHQIBAHwRid4u/eneZZlnIwsXdd+U7GrMwzX5mcUX4qnRrJ1GjUVUtazaN boWLvD711FNp+fLladWqVWmDDTZIcTd/dFUaXVcNcmjWqdlwWVmy+mnFf+XKlenRRx8djSJ84i7X ZtfP1g3nGDbaaKPRbt3is9ltrdUyjiaU+xf1G/mPOo50t9xyy3H5jzRa2f4jfMT5+OOPj243YdKK S5a9zCemJ7Jt1yHugI58ZnUQd0nHX3Qd18rQavrtbGut5EdYAgQIECBAgAABAgS6L/DAAw+krbfe eizieLr12muvHZs2QoAAgW4IlK8JZddluhG3OAgQIDCRgIbKiYQsJ0CAAAECBAgQIECAAAECBAgQ IDAggbixMd+tdO0p+JZvdBxQ1iVLgMAUEIiuuxctWjSW03hXaXQDbCBAgEC/BPr/sol+lUw6BAgQ IECAAAECBAgQIECAAAECBKa4wOc///lCCb7//e8Xpk0QIECgE4GTTz65sPopp5xSmDZBgACBXgt4 orLXwuInQIAAAQIECBAgQIAAAQIECBAg0KZAvMYh/7qPTTbZZPR1Em1GZzUCBAiMCYyMjKQ5c+aM Te+8887p1ltvHZs2QoAAgX4IeKKyH8rSIECAAAECBAgQIECAAAECBAgQINCGQLw77vTTTx9bM7qB ja4aDQQIEOhUoPzE9iWXXNJplNYnQIBAywIaKlsmswIBAgQIECBAgAABAgQIECBAgACB/gnEO+Py w49//OP8pHECBAi0JXDVVVeNrXfAAQekxYsXj00bIUCAQL8EdP3aL2npECBAgAABAgQIECBAgAAB AgQIEOhAILqBjScsDQQIEOiWQBxXYnBs6ZaoeAgQaFVAQ2WrYsITIECAAAECBAgQIECAAAECBAgQ IECAAAECBAgQINCxgK5fOyYUAQECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECrQpoqGxVTHgC BAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBDoW0FDZMaEICBAgQIAAAQIECBAgQIAAAQIECBAg QIAAAQIECBBoVUBDZatiwhMgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAg0LGAhsqOCUVAgAAB AgQIECBAgAABAgQIECBAgAABAgQIECBAgECrAhoqWxUTngABAgQIECBAgAABAgQIECBAgAABAgQI ECBAgACBjgU0VHZMKAICBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBFoV0FDZqpjwBAgQIECA AAECBAgQIECAAAECBAgQIECAAAECBAh0LKChsmNCERAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIE CBAg0KqAhspWxYQnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQKBjAQ2VHROKgAABAgQIECBA gAABAgQIECBAgAABAgQIECBAgACBVgU0VLYqJjwBAgQIECBAgAABAgQIECBAgAABAgQIECBAgAAB Ah0LzO44BhEQmAYCu7757GlQCkUgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECLQv8JNLj29/5TbW 9ERlG2hWIUCAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECgMwFPVHbmZ+1pJnD+R187zUqkOAQI EJgeAsec9t3Rglz7pWOnR4GUggABAgQIECBAgAABAgQIECBAgMAkEtjrHecNJDeeqBwIu0QJECBA gAABAgQIECBAgAABAgQIECBAgAABAgQIDLeAhsrhrn+lJ0CAAAECBAgQIECAAAECBAgQIECAAAEC BAgQIDAQAQ2VA2GXKAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIHhFtBQOdz1r/QECBAgQIAA AQIECBAgQIAAAQIECBAgQIAAAQIEBiKgoXIg7BIlQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAg MNwCGiqHu/6VngABAgQIECBAgAABAgQIECBAgAABAgQIECBAgMBABDRUDoRdogQIECBAgAABAgQI ECBAgAABAgQIECBAgAABAgSGW0BD5XDXv9ITIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQGIiA hsqBsEuUAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAwHALaKgc7vpXegIECBAgQIAAAQIECBAg QIAAAQIECBAgQIAAAQIDEdBQORB2iRIgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAYbgENlcNd /0pPgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAYCACGioHwi5RAgQIECBAgAABAgQIECBAgAAB AgQIECBAgAABAsMtoKFyuOtf6QkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgMREBD5UDYJUqA AAECBAgQIECAAAECBAgQIECAAAECBAgQIEBguAU0VA53/Ss9AQIECBAgQIAAAQIECBAgQIAAAQIE CBAgQIAAgYEIaKgcCLtECRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECAy3gIbK4a5/pSdAgAAB AgQIECBAgAABAgQIECBAgAABAgQIECAwEAENlQNhlygBAgQIECBAgAABAgQIECBAgAABAgQIECBA gACB4RbQUDnc9a/0BAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAYioKFyIOwSJUCAAAECBAgQ IECAAAECBAgQIECAAAECBAgQIDDcAhoqh7v+lZ4AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIDA QAQ0VA6EXaIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEhltAQ+Vw17/SEyBAgAABAgQIECBA gAABAgQIECBAgAABAgQIEBiIgIbKgbBLlAABAgQIECBAgAABAgQIECBAgAABAgQIECBAgMBwC2io HO76V3oCBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECAxHQUDkQdokSIECAAAECBAgQIECAAAEC BAgQIECAAAECBAgQGG4BDZXDXf9KT4AAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQGAgAhoqB8Iu UQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQLDLaChcrjrX+kJECBAgAABAgQIECBAgAABAgQI ECBAgAABAgQIDERAQ+VA2CVKgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAYLgFNFQOd/0rPQEC BAgQIECAAAECBAgQIECAAAECBAgQIECAAIGBCGioHAi7RAkQIECAAAECBAgQIECAAAECBAgQIECA AAECBAgMt4CGyuGuf6UnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgMBABDZUDYZcoAQIECBAg QIAAAQIECBAgQIAAAQIECBAgQIAAgeEW0FA53PWv9AQIECBAgAABAgQIECBAgAABAgQIECBAgAAB AgQGIqChciDsEiVAgAABAgQIECBAgAABAgQIECBAgAABAgQIECAw3AIaKoe7/pWeAAECBAgQIECA AAECBAgQIECAAAECBAgQIECAwEAENFQOhF2iBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBIZb QEPlcNe/0hMgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAYiICGyoGwS5QAAQIECBAgQIAAAQIE CBAgQIAAAQIECBAgQIDAcAtoqBzu+ld6AgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgMR0FA5 EHaJEiBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEBhuAQ2Vw13/Sk+AAAECBAgQIECAAAECBAgQ IECAAAECBAgQIEBgIAIaKgfCLlECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECwy2goXK461/p CRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECAxEQEPlQNglSoAAAQIECBAgQIAAAQIECBAgQIAA AQIECBAgQGC4BTRUDnf9Kz0BAgQIECBAgAABAgQIECBAgAABAgQIECBAgACBgQhoqBwIu0QJECBA gAABAgQIECBAgAABAgQIECBAgAABAgQIDLeAhsrhrn+lJ0CAAAECBAgQIECAAAECBAgQIECAAAEC BAgQIDAQAQ2VA2GXKAECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIHhFtBQOdz1r/QECBAgQIAA AQIECBAgQIAAAQIECBAgQIAAAQIEBiKgoXIg7BIlQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAg MNwCGiqHu/6VngABAgQIECBAgAABAgQIECBAgAABAgQIECBAgMBABDRUDoRdogQIECBAgAABAgQI ECBAgAABAgQIECBAgAABAgSGW0BD5XDXv9ITIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQGIiA hsqBsEuUAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAwHALaKgc7vpXegIECBAgQIAAAQIECBAg QIAAAQIECBAgQIAAAQIDEdBQORB2iRIgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAYbgENlcNd /0pPgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAYCACGioHwi5RAgQIECBAgAABAgQIECBAgAAB AgQIECBAgAABAsMtoKFyuOtf6QkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgMREBD5UDYJUqA AAECBAgQIECAAAECBAgQIECAAAECBAgQIEBguAU0VA53/Ss9AQIECBAgQIAAAQIECBAgQIAAAQIE CBAgQIAAgYEIaKgcCLtECRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECAy3gIbK4a5/pSdAgAAB AgQIECBAgAABAgQIECBAgAABAgQIECAwEAENlQNhlygBAgQIECBAgAABAgQIECBAgAABAgQIECBA gACB4RbQUDnc9a/0BAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAYioKFyIOwSJUCAAAECBAgQ IECAAAECBAgQIECAAAECBAgQIDDcAhoqh7v+lZ4AAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIDA QAQ0VA6EXaIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEhltg9nAXv/ul/+53v5u+/e1vpyef fDK9//3vTzvttFP3ExEjAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgSkuoKGyyxX4zne+M917 772jsV5yySXp8ccf73IKoiNAgAABAgQIECBAgAABAgQIECBAgAABAgQIECAw9QV0/drlOly4cOFY jNtuu+3YuBECBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBNYLaKhcb9H1sSeeeKLrcYqQAAEC BAgQIECAAAECBAgQIECAAAECBAgQIECAwHQQ0FA5HWpRGQgQIECAAAECBAgQIECAAAECBAgQIECA AAECBAhMMQENlVOswmSXAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAwHQQ0FA5HWpRGQgQIECA AAECBAgQIECAAAECBAgQIECAAAECBAhMMQENlT2ssIULF/YwdlETIECAAAECBAgQIECAAAECBAgQ IECAAAECBAgQmLoCs6du1id/zu+77770ta99LT3zzDM9yexRRx2VZs7U1twTXJESIECAAAECBAgQ IECAAAECBAgQIECAAAECBAj0VEBDZQ95ly1blg4//PCepfDyl788LV68uGfxi5gAAQIECBAgQIAA AQIECBAgQIAAAQIECBAgQIBArwQ8jtcr2T7Eu8EGG/QhFUkQIECAAAECBAgQIECAAAECBAgQIECA AAECBAgQ6L6Ahsrum/YtxlWrVvUtLQkRIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQ6KaArl+7 qVkR12WXXVYxtzuzdthhh+5EJBYCBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECfRbQUNlD8J13 3jkddNBBPUxB1AQIECBAgAABAgQIECBAgAABAgQIECBAgAABAgSmpoCuX3tYb0888UQPYxc1AQIE CBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgakroKFy6tadnBMgQIAAAQIECBAgQIAAAQIECBAgQIAA AQIECBCYsgIaKqds1ck4AQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgakroKFyitbdyMjIFM25 bBMgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBISUPlFNoKli9fns4444w0Y8aMNGfOnHTPPfdM odzLKgECBAgQIECAAAECBAgQIECAAAECBAgQIECAAIH1ArPXjxrrhsATTzwxFk1+fGxmiyMrV65M 3/zmN9O73/3utGzZshbXFpwAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIDA5BTQUNnlern88svT BRdcMBrr+973vrZiX7duXbrxxhvTcccdl2677ba24rASAQIECBAgQIAAAQIECBAgQIAAAQIECBAg QIAAgcksoKGyy7Wz0047pTPPPLOtWKMr15NPPjlddNFFTa2/wQYbNBVOIAIECBAgQIAAAQIECBAg QIAAAQIECBAgQIAAAQKTTcA7KgdcI48//ng69dRTR987uWjRoqYaKU8//fT02GOPpa222mrAuZc8 AQIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgfYEPFHZnltHa8V7Jy+++OL0wQ9+sOn3Tp5wwgnp +OOP1zjZkbyVCRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEJouAhgZHxp0AAEAASURBVMo+1cTa tWvTv/zLv6RocGzlvZNLly5Nhx12WJ9yKRkCBAgQIECAAAECBAgQIECAAAECBAgQIECAAAEC/RHQ 9WuPne+666504IEHplmzZqV99913wkbK7bbbrpCjPfbYozBtggABAgQIECBAgAABAgQIECBAgAAB AgQIECBAgMB0ENBQ2YNafPjhh9OJJ544+t7JJUuWpCuuuKJhKnvuuWe66aabUjx1ec899xTCrlq1 qjBtggABAgQIECBAgAABAgQIECBAgAABAgQIECBAgMB0END1a5dr8V3velc677zzJox15513Tmed dVZ6zWtek2bOXN9eHI2VBgIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQLTXUBDZZdr+Ec/+lHd GKNb19NPPz0dcsghae7cuZXhZsyYUTnfTAIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQLTSUBD ZR9q89hjj02f/vSn6zZO9iELkiBAgAABAgQIECBAgAABAgQIECBAgAABAgQIECAwqQTW9zk6qbI1 vTITXcG+4x3vSLfffntat27d9Cqc0hAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBBoQ0BDZRto jVbZZJNNKhdfdNFFKd5LGe+jPPLII9Ndd91VGc5MAgQIECBAgAABAgQIECBAgAABAgQIECBAgAAB AsMgoKGyy7V87bXXpptuuintueeedWOORsslS5akeB/liSeemB544IGxsN5ROUZhhAABAgQIECBA gAABAgQIECBAgAABAgQIECBAYBoLaKjsQeXutttuKRosV69enS677LK03Xbb1U3lrLPOSltvvfVo o+Wpp57qScu6UhYQIECAAAECBAgQIECAAAECBAgQIECAAAECBAhMJwENlT2szdmzZ6eDDjoo3XPP PenJJ59Mp59+esPUPv7xj48+adkwkIUECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEpoGAhso+ VeKCBQvShz70obRu3br0y1/+Mh177LFNpbxo0aJx3cM2taJABAgQIECAAAECBAgQIECAAAECBAgQ IECAAAECBCaxgIbKAVTOVlttlc4999zRRsvbbrstHXDAAQ1zUe4e9uGHH24Y3kICBAgQIECAAAEC BAgQIECAAAECBAgQIECAAAECk11AQ+WAa2innXZK3/rWt9KaNWvS1VdfnXbeeeeGOYruYbfYYovR d1quXLmyYVgLCRAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECExWAQ2Vk6RmZs6cmV772temW2+9 NT399NPp/PPPT5tssknD3N17770Nl1tIgAABAgQIECBAgAABAgQIECBAgAABAgQIECBAYLIKaKic hDUzf/78dPTRR6fHH388PfTQQ+ljH/tYZS432GCDyvlmEiBAgAABAgQIECBAgAABAgQIECBAgAAB AgQIEJjsAhoqJ3kNbb755unUU08dfZ/lnXfemY444ohJnmPZI0CAAAECBAgQIECAAAECBAgQIECA AAECBAgQIDCxgIbKiY0mTYjFixenCy+8cPR9lk8++WTafvvtJ03eZIQAAQIECBAgQIAAAQIECBAg QIAAAQIECBAgQIBAKwIaKlvRmiRh432WCxYsmCS5kQ0CBAgQIECAAAECBAgQIECAAAECBAgQIECA AAECrQtoqGzdzBoECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECHQoMLvD9a1eErj55pvTueee Ozo33i251VZblUJ0NrnXXnuNPk15//33p1tuuSXNnq0KOxO1NgECBAgQIECAAAECBAgQIECAAAEC BAgQIECAwCAEtHJ1Wf3Nb35zuvfee0djjUbKaKxsNDzzzDOji+fNm5dmzJjRKGhau3Ztuu6668bC 3H333SneW2kgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgMNUEdP3a5RpbuHDhWIzPec5zxsar Ri644IK04YYbjv4tWrSoKkhhXrkhc4MNNigsN0GAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBg qghoqBxgTT311FMDTF3SBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAYnoKFycPZSJkCAAAEC BAgQIECAAAECBAgQIECAAAECBAgQIDC0Ahoqh7bqFZwAAQIECBAgQIAAAQIECBAgQIAAAQIECBAg QIDA4AQ0VA7OXsoECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAAQIEhlZAQ+XQVr2CEyBAgAABAgQI ECBAgAABAgQIECBAgAABAgQIEBicgIbKwdlLmQABAgQIECBAgAABAgQIECBAgAABAgQIECBAgMDQ CmioHNqqV3ACBAgQIECAAAECBAgQIECAAAECBAgQIECAAAECgxPQUNlD+w033LBh7BtttNHY8oUL F46N1xuZMWNGvUXmEyBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEJhSArOnVG6nWGbPPffc9PTT T9fN9Ve+8pWxZffdd18644wzxqarRn79619XzTaPAAECBAgQIECAAAECBAgQIECAAAECBAgQIECA wJQT0FDZwyq77bbb0kknndRUCsuWLWs6bFMRCkSAAAECBAgQIECAAAECBAgQIECAAAECBAgQIEBg Egvo+nUSV46sESBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEJiuAp6o7HLNbrPNNimepOzH8Pzn P78fyUiDQEsCa1auSCtWrU4zZs1KaeasNH/e3DTZ3q66bu1IGlmzrqVy1QqT5syplamFoSWLdWvS 6pG1LcTeKGjreW0Um2UECBAgQIDAcAqMrHgqrRhpteyz00YbzWtppRXLHknLlj+TaidbKc2el573 vE1S3R+qIyvSU61nqk5+Ws9rnYjMJkCAAAECBAgQIECAAIE2Ber+/mszvqFf7bLLLks//OEPe+6w aNGiNH/+/J6nIwECrQg8+vMb0mvedFxhld979xnpwuP+16RprPzvf7siHXDMyYU8NjvxtWt+lJZs 1tyFt9YsRtJXPrRfOuPqh5rNyoThLrz6X9OOWzhGTAglAAECBAgQIFApcPc3P5J+/6hzKpdNNPPv bn4gvXXxRhMFG13+4LWfTIsP+oti2OMuTo/91f4VjZVPpa++bav0J1cWg3cy9akfPpD+aMfm8tpJ OtYlQIAAAQIECBAgQIAAgWoBDZXVLm3PnTlzZnrlK1/Z9vpWJDB1BUbSVZ87dVz2f/b5L6WH/3jf tMXc5p+rXLd2be2JxzW1uLr9ZOBI+u5XPzUuj83OWLGq2UcKWrdoNuZm89pJv969828298IRIECA AAECgxV4Kn3/ovYaKSPfTz7T7JnNU+l7f1dqpIwIzvls+vFH9k+v2CQmisPK4mTHU3M7jkEEBAgQ IECAAAECBAgQINCJQCfXsjtJ17oECEwzgXUrHklLK58I/Fm66We/bLq0qx77efr9P/iDtNtuu9X+ dk1fvf4/m163mYCd3J0RTafNDO1YLL/nyWaibjrMr5tuVC1G2Wv/YmqmCBAgQIAAgckq0EkDXtON iY/ckj5T+XTkD9Jl195dSbPy3srZbc98+OlmG1XbTsKKBAgQIECAAAECBAgQINBAoJNr9g2itYgA gWETuPe2G9N9dQr9yXOuSvued2zaoM7y/Ow1I8VLW08uX5Vf3PXx4//6i2m/39s6rRpp9M7KaKKc k7Z4fnPdgrVuMTv90bnfTK977KnaM6TjhzlzRtLpBx+ers8teudpf5sO/v1t0+rV45tP19byus1W C3Khmx/tt3/zOROSAAECBAgQGKTA4Z/6RvrgSzZPTzc8NYuFG6Yddqx4FLIi83dd8410R8X8mHXO ud9PHznkRakY00bp0Au+l3b4n6drZzvjhzlzlqUvvf6otDS3aP/T/iH9fy/dpHbOlJv5m9HVtby+ eKdiCuNDmUOAAAECBAgQIECAAAECvRTQUNlLXXETGBqBlekbp3+ybmmf+PFl6VdP/3HaZsOqZri6 q/VlwW4v3jFtsUVz751sLkPtWTxnsy3T4s3qpbAmvXzfLdL1uSdWX/Pyl6XtuprvemmbT4AAAQIE CBBI6eUv2yPtuGM3z5keSVee/aX6tD84L9344NvT/lsWf7I+b/Hu6bWL6622Iv1i/5SW5p7S/F/7 vi69oqv5rpe2+QQIECBAgAABAgQIECDQjsDkazVopxTWIUBgoAIjT/x3uuA/V4zl4S0n/3X6qw++ cWw61Z61/Pa/drcL11zkHY2OrO1ud1+9sRj/tGe3890RopUJECBAgACBaS+wcmT9uV43Cjty9zXp o7nHKV91yj+kvz/+Vbmo70hfvvLO3HQzo+PP67qd72ZyIQwBAgQIECBAgAABAgQINC+gobJ5q7oh V65cmXbZZZd0+eWXp3Xrxjco1F2xywvWrl2bvva1r43m5Zlnnuly7KIjUF/gZzd+p7DwgFe/Iu25 7wGFeV84559So60ytt81td1nxTO/Lqy37MlfpzVpXYrl2d8Ad7NC3qomumFRFW+v53XXf11a+fST 6X/++7505513jv7d9fNfpF899FhasXptr4sifgIECBAgQGAKCPzbP3+9kMsDD3xd2u+AfQvzrjzv W+nBwhwTBAgQIECAAAECBAgQIDDdBIr96Ey30vWpPP/zP/+TbrvttnTwwQePpnjCCSekU045JW26 6aZ9ycEDDzyQTj311HTeeeeNpXf//fenxYvr9ok0Fs4Igc4FnkoXfuRzuWj2SdtvPi89Z90OaY/a 3Ot/s2TFf16Y7nvsf6clm41/U+WDt1+dXve2E3NxrB+9+C+PTRf/5frpGFv40vekq8/7kzS3OHsS THVuMYhCdM9/Vfrpj3+QPnv6yenG3BO25TLt86Z3pg+855ha17XtvUezHJ9pAgQIECBAYKoJ3J2+ /uFc/6zpHWmfJfPSRiP7psPTR9e/Y/KOv0jfu+sD6a2Lu9nl7FSzkl8CBAgQIECAAAECBAhMbwFP VPagfs8666y02WabjTZUnnHGGenhhx/uairx5NM999yTTjzxxDRjxoy09dZbFxopu5qYyAhMIPD0 g/ekq3JhDj750LTxjNqMmRunQz/4+tySlL5x9b8XprOJxx++Jxtt6vOJH1+Xnlg5uKeX62WyGxb1 4u7l/G74r13xSDp+l93TW489vmEjZZTje1//Qjp43z3SF6/6t9qzsgYCBAgQIEBg2ASeuvX76Zxc oXc85Y1pcdxCO29JOvz4HXNLUrrwH39SmDZBgAABAgQIECBAgAABAtNLQENlF+rzBS94QWUsy5Yt SyeddFLaYostRhsUo3vYaLi8+eab0+OPP55GRsa/QyUfUXQjG2GiofOGG24YfWpy++23T7NmzUqL Fi1K0SBab3jRi15Ub5H5BLoosC79+Kp/KMT3llf//m+mZ6SX7ndkYdnFf3lxerKiZar1A9EOacHc aA2dTEN3LAZRok791614KL3zZfuk71Vmftu0ww7VT0H8zUeOSZ+76rbKtcwkQIAAAQIEpqvASPrX f1zfE0yU8tgDX/Kbws5Of/iGtxcK/oO/WJruavyzqRDeBAECBAgQIECAAAECBAhMLQFdv3ahvubO nTv6bsq77rorHXrooaPdwFZFG93DRsNl1bDddtuNzX7iiSdSNHK2OmyyySbpkksuSa997WtbXVV4 Au0JrF2WLvnUt3PrHpIWbTF/bHrD5/9W2q82tf6Jy++lu365PO32wmKXn0v2Pjpde82b0oxZs9OD d34/HXbsn4/Fsc+7P5E+dtSeac3qNWPzZs9bkNanMja7rZEZM2e1td64lbpkMS7ePszozH9V+tz7 35xuKeXzvaf9bTrida9IG82bk6JJee3qFem/fvqv6fhjPpDuy4X93EeOSq9/xU1p0cLxXQLnghkl QIAAAQIEBi0wu0s/HVfckZaefUeuNMenfXfcaGx6ox1fl45LH849cfmldOW/fTwt3n2TsTBGCBAg QIAAAQIECBAgQGD6CHTp1+b0AemkJPFOyFtvvXX0ackPf/jDLXXHeu+997ad9AEHHJDOPvts76Rs W9CK7Qo8fvfPxt5BGXEcddob0ob5yGZslA497ah01UfXP3X5fy/+Qbr0xP1HG6/Ggs7cIG1S6y45 hvm/vWRsdoz87u8sTgsXLCzM6+bEUfv+Udp3363rRrmqduPAiw88Nh17yEuLeS6t0TWLUrx9mezA /+kH///0uR8/UcjmmV+5Mu27U9F05px5aYc/2Dv90/WXp7ftcVD6WW6Nz33jxvTJd+ydm2OUAAEC BAgQmGwCH3754ena/Ys3mxXyuHx5WrDvSenvPrhXavQj85EffXv9OyhrEbzqtAPSNvmIZr8oHXza q9I5H/3B2NyPfuXG9L7d928Y71hgIwQIECBAgAABAgQIECAwpQQa/YacUgWZTJnddNNN07nnnps+ //nPp5/+9Kfp05/+dEuNls2UZc8990x//ud/nvbee+80u1t3NzeTsDAExgTWpH+58K/GpmLkoFcV 3ykU83Z61UG1/+sbKn/+D5emxz6wf3runFg6flhT6hJ5ZGWv+/r6Wbr66nyz2fg8/XvaNR1Ta6is /8xfbyzG56T3c1rzH0lXnftnhUy9/oN/M66RMh9g1oJt019/5ZPpdW/78Njsb3/qy+lDR+6Vnjfp uvMdy6IRAgQIECBAIP0gXXnlRAwHpjNqDZX1n31cka75yl8UIjly/50K0zGx6/611wfkGirTl76c /u0v9k+7r3/wctw6ZhAgQIAAAQIECBAgQIDA1BRo/dVkU7OcA8n1jBkz0k477TTaaBnvm3zyySdr DSJXpxNOOCHtvPPOTecpuoU94ogj0tKlS9NDDz2U1q5dm6699trRLl41UjbNKGCXBdatfDRd+vX1 nXjO2+HItO1m45vyNthsm3RIIe1b0k/+48HCnMk+sfLxxo2lw2RRqKu1y9MVuW0glr3rja8oBKma 2HLHl6U9CgtuSfc//FRhjgkCBAgQIEBgCgo8NkGel/0knb80F2bHU9I+i8e/y3re4j3T8blgKV2Z rrju/sIcEwQIECBAgAABAgQIECAwPQQ8UdnHelywYMFo42L+HZLR6Lh69eq0atWqQk422GCDNGfO nDRzprbkAoyJSSPwy5/9sNB95zF/fGCd90ZumA7/q/ekb37kc2N5P/2C76ZXn/m2SdF910Hv/tN0 8G7b1fbB9e/AHMvo6MhI2nTL323wNGVK08WiWO6Jp1YtX1Z4N+W8HY5OL2zmXZMzN06vP+q30/X/ 8POxRGbOjjdZGggQIECAAIHJKvCq4z6ZjnnJxrVzpno5XJk2euHeDZ6mTOnua5fWnstcP+z/9ten LddP5sa2SW/45P7p7A+vf4Tz7C9fl07c/63JQ5U5JqMECBAgQIAAAQIECBCYBgIaKgdcidEQOXfu 3NG/AWdF8gRaEFiVLj/nrFz4bdOBe/1ebro4+nt7HZi2TZ9L2fOXD11dezp4xVvTVvMG3zj11re8 Mf1uxZOgxRI0mpo+Fo1KWbVs5JlfF2bP3XRBw/d4rg88K/3OH76x1iPw6WOzbvy3e9Mu+43vOngs gBECBAgQIEBgoAJv+qN3pEMrnn5sPlPL0j+f+6Vc8B3T29+wS266OLrLG96edqw1VN6Rzb7yM+lf H3lreu3zshk+CRAgQIAAAQIECBAgQGA6CGionA61qAwE+iywZvkD6XM/fqKQ6uqnHk0PPbW2MC+b mJlWjzVSPjvvvnTNzXent+7xW1mQgX0++zTz+C5rm83QdLJotsxZuBkziw3NBx+4a8MnT7P14vOJ X2bN1s/O3XbLhfnFxgkQIECAAIFJJrDymRW1HI3vprXZbI7cf236cP5xyljx0bvSHY+urowiXmc+ 1kg5GuKOtPSf70qvfeviyvBmEiBAgAABAgQIECBAgMDUFNBQOTXrTa4JDFTgrpuuLqV/X3rDvvuU 5jWe/NtPfTO9eY/j09zGwSb9Uhbrq2j1inrd564Pk43NmheXH9cP9z0YDd8vXD/DGAECBAgQIDCt BO64+qJSee5Ib3n5bqV5jSeXfubK9H9rDZUeqmzsZCkBAgQIECBAgAABAgSmkoAXIE6l2pJXApNC 4Ol00f/+TMc5WfGfF6T/fqLuS446jr8/EbDIO1/13VvTSH5Gg/ENF2xeWPo7LypOFxaaIECAAAEC BKa4wP3pHz+4/n2TbRfmjo+ma+6OJzsNBAgQIECAAAECBAgQIDBdBDRUTpeaVA4CfRJ45qF70ze7 lNY/fr/YoVeXou1bNCyK1Csff6zWyW8zw0j69+svLQTcbOFGhWkTBAgQIECAwPQReOqO69LZXSrO +Zfd3qWYREOAAAECBAgQIECAAAECk0FA16+ToRbkgcAUEvj3a/6pkNt3nnZ+ev8hf5DWrVtXmF+e mDFjRvrP67+a3vze08cW/cNHl6b3HPwHaaPiqw7HlsfI7LmT936KflsUYPo00ch//qZbppfU8nHL b/Ky4j8vTL9afmLafsGshrlbt/Kx9E9fL76jcqP5vo4aollIgAABAgSmsMAt37qwkPv9T/teuviD u6eRkcZ9McyePTvd8dVj08v/ZOnY+j/46NfT3e/bPb3IqcOYiRECBAgQIECAAAECBAhMZYHJ2wIw lVXlncB0FVj7RLrkLy8ulG7/vXccnY6GyEZ/Eei3d3112raw9lXpv371VGFOeeKRh5eXZ02O6QFY DKLgDf1nzx33Vsm/u/TGCbP5HzdclX6WC7Xwpe9J2yzcIDfHKAECBAgQIDBtBFbckb7xFz8oFOdN B+80Oh0NkY3+ItCO+xyenj3bzKI4J/3zHcuyCZ8ECBAgQIAAAQIECBAgMMUFNFRO8QqUfQL9FHji /jvT93IJztvhyLRVCw1MMzZ8Xjr4pQtzMaR0wTd+lIrPYhYPSxf/5bfS04U1ujsxe2Z7t+P3x6K7 ZW0uthb8Z2yU3nnexwrRfvtT70tX3/7Lwrz8xOP33pLe8r+Lnb99/MQ3Jc2UeSXjBAgQIEBg8gnM nT2vrUw98pOr05fya+54SnrVi1qIa8vd0rGvykeQ0pcvurnp92IX1zRFgAABAgQIECBAgAABApNN oL0r9JOtFPJDgEAfBNak6y75ZCGddx53cJpfmDPRxAZpv+M+nD7z45PHAn7v899Iy96zT9r0N+1j 859X7E401d6I+Wfn7J7+z7GvT7NXP53u/OnN6Wf/85z05kP+MHXjAHb5FVenGbttn9aM5ah6ZGRk bdrhxTuljeZERvtjUZ2T3s5t1X/b3fZJe6SPp+tz2TrxbfunIz74ifTHb9wnbbbx/DQzrU3PPPVE uuHKi9KJf3luLmSMHpr+cMkWpXkmCRAgQIAAgckm8J1Lvp62vXfTtGqCjK2uvbB6p33+V3rRRnGm tiLdsPSjhTX2r53TbVmYM9HEJmnvdx2X0g/OGQt4xzlL0x2nvjbt0kJ759jKRggQIECAAAECBAgQ IEBgUgl04zr/pCqQzBAg0BuBdSsfT//4Dz8vRP7al/xWYbqZia1/b/f0e7WA67v+vD7ddvejaa/f fu6zq89ckF6z7xbplqsfGovue5//sxR/64f90oEH/2HDd1uuD1scK78J6aJP/Vm6qBik7tT7/vpr 6djXLEl9s6ibkx4uaNV/5sL0l5edl/Y8+NhCpkZda7aNh99LV1z/py02djeO0VICBAgQIECgOwIr S9FcefafpCtL8+pN7v+pH6aL/6jWYeuy29NFhccpUzpi7yX1Vqs7/0V7HZxelc5J6zuQXZr+8Uf/ J+2yV2tNnnUTsIAAAQIECBAgQIAAAQIEBiZQ7ONvYNmQMAECk13gf372o3RLLpPzdji6pW5fs1Vn zH1uevObim+qPPPC7+e675qd3nTS32bB63yuSmuK/cXWCVeePSM9d8uNyzObnt5i0+eMhu2fxfqs lRtY1y/p9ljr/gu3e2n6/mUXtJiRfdLVP/xqeuGCWS2uJzgBAgQIECDQe4HZ6bnPbz+V5z/32T43 7r/268XGzR1PS69spdvXLAub7JqOOTybePbz7K/8IFW96bzcwFpcyxQBAgQIECBAgAABAgQITDYB DZWTrUbkh8AkFRhZXbzs89FT3pzmtpXXWem1R/95Yc0VTz5TmJ6/xe+m6//50vSaHar78/rAXx2V Nm7r6DUrveygEwpptTLx/AXPXnTrp8Wz+YsG1vzTB9umjef37q2O7fhvut3vp3/78XXpr0/7UCo2 QxeFF7709ekz51+abrr17LTFhm1VYjFCUwQIECBAgEAPBOalXQ86re14F22y4ei6q1cVz/GO+8j+ 6XltxTovvfodpfwsr+qENhpYa09yjg07pq0WVJ9PjgUxQoAAAQIECBAgQIAAAQIDFZixrjYMNAcS JzAJBHZ989mjuTj/o6+dBLmZvFlYt3YkjdQeZZwxa3aaPXNGRxldt3ZtLa5n3ww5e86cVB3burRy xa/T8iefrr3lMKU5c+el52y4Udpg9D2RHSXf8cr9t0hpbc1/Tc1/5uw5aVY1WMflKkbQrn9tvad/ nZ546tdp1arai6rSrDRvw/lpw+c8J204d04xCVMEmhQ45rTvjoa89kvFboabXF0wAgQIEBiQwMiK p9KK6Bpi9ry00bzO3jwysmJFLa5n+5mYt9FGdd9XvqKWZgSbPW+j1GGSA1KTLAECBAgQIECAAAEC BPovsNc7zhtN9CeXHt/XxDv7pdjXrEqMAIFBC8yYOTt1q41wxsyZtbgmeqJuRppbu8AUf5Nt6L9F SjNr/hOSdRWqXf/aerUG5S1qfwYCBAgQIEBguAWisbBbZwSz59UaO5vgnDcJzx2byLYgBAgQIECA AAECBAgQGEqBiVoJhhJFoQkQIECAAAECBAgQIECAAAECBAgQIECAAAECBAgQ6K2Ahsre+oqdAAEC BAgQIECAAAECBAgQIECAAAECBAgQIECAAIEKAQ2VFShmESBAgAABAgQIECBAgAABAgQIECBAgAAB AgQIECDQWwENlb31FTsBAgQIECBAgAABAgQIECBAgAABAgQIECBAgAABAhUCGiorUMwiQIAAAQIE CBAgQIAAAQIECBAgQIAAAQIECBAgQKC3Ahoqe+srdgIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAA AQIEKgQ0VFagmEWAAAECBAgQIECAAAECBAgQIECAAAECBAgQIECAQG8FNFT21lfsBAgQIECAAAEC BAgQIECAAAECBAgQIECAAAECBAhUCGiorEAxiwABAgQIECBAgAABAgQIECBAgAABAgQIECBAgACB 3gpoqOytr9gJECBAgAABAgQIECBAgAABAgQIECBAgAABAgQIEKgQmF0xz6w+CSxfvjzdeeed6e67 704PP/xwS6k+/fTT6YQTTkgzZ2prbglOYAIECBAgQIAAAQIECBAgQIAAAQIECBAgQIAAgUkhoKFy ANVw1113pZe97GVp2bJlHaV+yCGHpMWLF3cUh5UJECBAgAABAgQIECBAgAABAgQIECBAgAABAgQI DELA43h9Vr/gggvSkiVLOm6kjGxvsMEGfc695AgQIECAAAECBAgQIECAAAECBAgQIECAAAECBAh0 R0BDZXccm4rlgQceSMccc0xTYQUiQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAgMJ0FdP3ax9rd b7/9xqW2ySabpE996lNp1113Tc997nPHLW80Y6uttmq02DICBAgQIECAAAECBAgQIECAAAECBAgQ IECAAAECk1ZAQ2WfqmbdunXptttuK6S2dOnSdNhhhxXmmSBAgAABAgQIECBAgAABAgQIECBAgAAB AgQIECAwDAIaKvtUy9FQmR+OOOKIadVIOTIykh5//PH04IMPpl/96lfpscceS/Pnzx8t8jPPPJM2 22yz9PznPz9tueWWaeONN05z587NcxgnQIAAAQIECBAgQIAAAQIECBAgQIAAAQIECBAYMgENlX2q 8BkzZhRSOvPMMwvTU23i4YcfTldeeWX64he/mK677rq2sr/zzjunt73tbenQQw9N2223XSobtRWp lQgQIECAAAECBAgQIECAAAECBAgQIECAAAECBKaEwMwpkctpmMlf/OIXU65Ud911VzryyCNHGxS3 2GKLdMwxx7TdSBmFj65wTzrppLRo0aI0c+bMtNdee6UbbrghlZ8+nXJQMkyAAAECBAgQIECAAAEC BAgQIECAAAECBAgQIDChgIbKCYm6EyCeFownCLPhs5/9bDY6qT+j29YzzjhjtHFyyZIl6aKLLupZ fuPJzD322GO00fLEE09My5cv71laIiZAgAABAgQIECBAgAABAgQIECBAgAABAgQIEBisgK5f++j/ iU98Ih188MGjKUaD3/HHH5922223Puag+aTifZNHHXVUuuKKK5peKRpid9xxx7R48eLRpySzd1RG N7HxF09k3nHHHaNPUk4U6VlnnZXib88990yXXnpp2nzzzSdaxfJeC6wbSc88syqNrFmXZs2ameZu OD/NaiHNNatXpJWr16a1tXVmz5qb5s2tv/aalSvSilWr04xZtTAzZ6X58+amYufJzSe8bu3IaJ5j jRmzZqfZM1uMad2atHLVyP9j716go6ruxY//8n5AMgkxAVNLoDXBagGh4AsaRAm3XgSsQhDQS6yA XsFVFIJWrIBtbU2C4hW4Aj4ItiCIVnlc0YhKDCgveVVaoEKSCn+bIEmIhIS8/rOPzOScycxkJo/J TPLda03P2fvs1/kcpWvxc+8t6pTZoOAQCXCzuWWm6v3LSsqk7FyZ2bFKAoKDzfMJFlOkSSJMERIe EmSpyhUBBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgU4hQKDSg5959OjR2qpKteWpSoMHDxa1BWyv Xr20vLf8jwoqqq1dnaVRo0bJAw88IDfccIPExMRoqyCd1bd9VlNTI0VFRZKXlyerV692GBBVqyzV XM6ePSvR0dG23ZD3oMCXW5fIpMdfs47Y864n5K9PTRBX/hCpLc+XgUPHWtuKXC0f7V0rMXZic9/+ c4fcctdDurrm2g9kypqHRrodrCw6+qmkpM409DVxVqY8et9ICTaUOsjUn5NHr/25bLv0OC4lXd7L useld9aaVF+QI3/bK9nL/le27v7SwSDfF4cm3iRz7p8sI4ZdL9HhdmCctuYhAggggAACCCCAAAII IIAAAggggAACCCCAAAK+J8DWrx7+ZgcOHJCoqCjrqOp8xsOHD2vnMqqzGd35WTtp5Zvq6mq7PWZk ZGjBRTXHzZs3iwq8qpWO6nxJd1NgYKDEx8dLamqq1pfq89SpUzJ//ny7XZWVldktp9BzAvGJgw2D Fb71jPzjmwpDmf1MvWx7/X8Mj0zXJUtXu7G4GnnvpQWGuipzZPlrUlyl1jS6k2rkg5VPN2qwdnG6 ZH/090bldgtqaqVU96Cq7IK2IlRX5OC2Xr7a/6H0H3SDTEyb2WSQUnVSeXyn/P7xGXLzjYPkuXUf SZWDnilGAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQKCjCLgfYeoob94O76HOpZw8ebKUlupDH6Kt slTBPnd/auVjW6SLFy9au1UrJ1UAUQUS09PT23QLVhW4XLBggTaWWmmqxrYk/ZwsZVw9KxB95UCZ lBhqGPSRrLelxlDSOFNX8bW8uNyyJvH758/NnywhjatKfeUZWZdTZOfJEdlz5JSdcudFjua25JGn 5ZtKFwKf5p1nw2yGaPIPzfoL8penx8idabNtWrqezX7mEVn90VHXG1ATAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAAEfFGjy79x98J28dsqZmZmizqZsrXT+/PnW6srQj9qKNicnRyoqKrTVjiqA6Omk 5qBWbao5qLkkJiZ6egqM10ggTKb/6TlDaVFOpnx1tiGwbXh4KZO7bokU6h6YrntQ+l0RqStpuC04 tNNQt+GJyLPL3hPnI+lrf3/veFvaI/L82u3auZONW7WgpL5Cnpv+H5Lxlv6Nv+9vQMpEWb3+bfn0 s89l794v5Iu9e2X3rh3ywZZ35Q9PzJCeNsOeKT5rU0IWAQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AIGOJUCgsmN9z1Z7mxEjRkhYmO1aslbr3uWO1BzUXPz8/FxuQ8W2E7C3qnLOkv+TWgdD1ld+I4sW bzU8fW7+PQ7Oh6yStzOeNdTVZ8p2b5R/V9Tpi9y4bwgDWu62Lv61nChzN/TpbMha2bToXsnebbtN 8VD5a06erMp6XPr3+bFEhodJUFCABAQFSUhoV+l+RS+5fcJ02XRgj2xY9YI1YFkh5uWcJAQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEOrCA4wVHHfil2+vV0tLSZNWqVWIymVo8BXVmY0xMTIv7oQME 3BP4flXlmrsesjYrfGu+FP76P6W3KdhaZrnZ8+5rhhWS36+mjLA8Nlxryr6W7OOV1rK7n3herq34 VB5f/PalskLZ+vlxmXZLH2sd128aVjg23Ik8+Lv18l7WPdIafxCWFeyTJ1//p2FKoYmT5MP1j0mE K/9JiF+wJA64WTbt3Sm7P90hl/30J4a+yCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg0NEEWuPv 5zuaSZu9jzp/Uf06SiopKZF9+/ZJ9+7dpaqqSgYNGtRRXo33cCKgVlVOMZ9VqQ8qPvGXT2TNQyNF v+61vqpInn/mDUNPjldTihzZ+YGh7qjhN8mPL5q3iLUGKkVeXvaO3HPLY43OjTQ0dJi5VdaunyAT U6dba6itaw9/PVYGXGE/eGqt2OTNBXll9sM2tW6VD1wNUupbBnWR624ZqS/hHgEEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQACBDingyjqfDvnivFTLBbp16yYpKSnSr18/GTx4sNTVNXdbzpbPhR48KRAm 9y9abBjwyPIX5V/lxg1gD2xdJ0d0tZytphT5TtY8/pKu9q3SKzZUusQnylBdaeXxNVLYxJmYuuo2 t1Xyg8QBkp4SZyh/cNZKuWAocT9T/vU/DIFb1cPKjQvExJ+w7mPSAgEEEEAAAQQQQAABBBBAAAEE EEAAAQQQQKDTCPDX6J3mU7fui9oGJRMSEsTfn3+cWlfZe3szJVyrrapsmGGhLN2wsyFbXSIvPvVy Q95852w1ZcU3+fKervaYJ8ZLpFqe6R8p42f9QvdE5O2cA4a865kLUmc+HXPCE0sMTSqPZ8v2w98Y ytzL1MtnG183NAlNnCL9E8yrQUkIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDgUIDIkkMaHjgT 8PPTb/Ipkp6e7qw6zzqcQONVlVsXL5OiqnrtTfP3fyz7dO/sfDVlvex+zxjou3v4tZda+8l1t03S 9STyhnk72XPfD2ModyVTZ170GdTtSvn9vVcaqj92T0az+xTzesy85dsM/S2cP0lCDCVkEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBBAwFaAQKWtiIfz6pzH9evXy6RJk6R///7ab9iwYdpVlalnqo63 pfp6Y6QoMzPT26bIfNpYoPGqyiPy7o5j5lEvyEvTFhpGd7aaUupK5c3FW3X1x0rvuDBrPrz7j+U2 a07dbJNjp8oNJa5mvv8DL0BGPbRYehoabZN1Hx81lLiaqav4VvYbKv9MBiV1N5SQQQABBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAgcYCBCobm3ikJD8/X6Kjo0Wd8zhhwgRZu3atHDp0SPvl5uZqV1Wm nqk6qu7hw4c9MjdXBlHbvCYnJ1urFhQUaEFVawE3nUCg8arKl5e9KcePHjJs4+p8NaVIyYkjkqfT uvfpX0q4Li9+XWX80/fqS+SPb3wqxlC54XGTGf/wH8pvn7jbUG/JI89aV4QaHjSRqTxXJoU2dfz8 jSuO9Y/rzWe5VlfXame6qi2UbX+11dXmspa8nX407hFAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQ 8F4BApXt8G3U6sPevXtLaWmpy6Oruv369ZPp06e73KatK37wwQeGIVRQdenSpYYyMh1bwJQw0HBW ZeXxN2VcqvGfUaerKaVWPlrzJwPS6J9fY8irTN+fjzaU/fP1DXK22lDkdua6O6fLzwyt9smiNfqQ qeGhw4xtUNJ03WDpGuSguvnszvsHDJBBgwbKAPPV3m/goEHm8mtlxz+LHXRCMQIIIIAAAggggAAC CCCAAAIIIIAAAggggAACHUOAQKWHv6PaynXu3LnNHnXlypXaNrHN7qAVG4aEhEhFRYWhx5kzZ2rb 1l64cEHU9rDu/AwdkfERgRC5f9GLDufa1GrK+qpvZcNbDesRQxMnSc9uwY36C+72QxlrKN0nX/zj G0OJ25mgGJm31Pjv4tbFMyW/3HyQZQtSiClMAhy0r/i20HB2p4NqWvGe40XOHvMMAQQQQAABBBBA AAEEEEAAAQQQQAABBBBAAAGfFyBQ6cFPWFNTo23lajtkQkKCLFmyRI4ePSpnz56VU6dOSVFRkeTk 5MjEiRNtq2vbxHrDNrBq9eT999/faH5qC9vw8HBR28O68ysuZgVZI0wfKDAl9DesqtRP+YX590jj sGNDjVNHPpMjDVlJu/92aTidUvfAvBnshD89qC+QjOwPpcZQ4n7mx0PG2px/KfLw8++Y13m2JAU6 bBwW1d3mbEyHVSXE8SOeIIAAAggggAACCCCAAAIIIIAAAggggAACCCDQIQS8JlB57Ngx8fPza9Of OudRjVFSUtIuH2/58uWNxlVBPXVe5YwZMyQpKUk7izI+Pl5iY2NlxIgRsmbNGqmsrDScB6k60Z8P 2ahTDxWoLWzVOZqtlc6fP99aXdGPRwXsr6pUqymvuSLCyUwuyqZli3TPe8rtw67W5Y23Vw+73RDk K8pZJ0WVLTzL0Xz+5Zz1iw0DFb71tPz9G+NKYUOFJjJFOX+TCgfT8guNleycD+T99983/D4w/0cJ ry+d30TPPEYAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAoGMJeE2gcuTIkW0uazkTsqysrM3HsjeA Cuzpk1o12bdvX32R3Xu1xer27du1MyotFdS7tFfA1TIHrghYBEwJfRutqsx6cpLT1ZS15aflpd3G fxerv/tWW02s/t2w/X37XbU0bBKrRi6Uj/eesEyh2dfL+twkU68zGdo/9NtsuWgocZwJCLRdQfml lH7naE1mgHSL6y49evQw/LrHxclVVzc+m9PxqDxBAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQMD3 BWz/hr3d3shkMgYK2m0ibTRwXV2dFBQUWHvPyMjQVk1aC1y42b17t4SGhlprqq1hU1NTrXlP36Sl pcmqVaukNb6dCh7HxMR4+hUYr9UEgiSuV6TI8UprjyEhQdZ7ezfH9uTYFBfKL1NutSlznv2fxe/K uKGPtnCb1BCZ+of/lZdTJlkHK9v9kuwrmCw39vSXC9ZS+zfBUT1kqPlRnvVxoez/5/+TngOusJa4 clNr3hqahAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAZxLwmkClPfSoqCixrIK097y5ZV26dGlu 02a3U1vO6tPkyZP1WZfu1crKfv36idouViV94NOlDlq50oIFC0T9SAjYF6izX6yVVsjaR5Y4ee7a o8rj2fJ12Uz5scnZSZhN9xUWd5U8dVdPefqthjWbs2a/LNvXTnVwZqauT/8ucmNKnOTlFFkLn/nD X2TkhseabmttwQ0CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAp1PwGu2frVHr4JyJ0+elPr6+lb9 qfMf2zudPn26vafA+Ai0m8CFogJ5t5VG/+snX7ZCTwFyxyNLDf2oIOhH+//hwmrNQLll8iybtmvk 86NnDGVkEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAwCjgNYHKefPmGWdmzuXm5krv3r0lOjpa Nm3aJGr71I6S4uPjO8qr8B4IuC1w4ON3DG2mPr1KDh48KAcOHHD6U3U2LJ1raPv6U+vku3pDUbMy ARE9ZeUTdxva/mbaNNlmKLGfie8/VNv+Vf90Vup8OVPVChPTd8o9AggggAACCCCAAAIIIIAAAggg gAACCCCAAAIdSMBrApXqrEV13qG9pLZ/HTNmjAQEBMj06dOluLjYXjWfKlPnSzYnWbZ9bU5b2iDg FQJ1ZfLmM28YpvKfN1+j5dUWyc5+qtKVA4dLT0Pr9+Srf39nKGlu5ro7p8vPrI0bRklMbDgb1vpY f+Nvklk2AVR1auWt182WM5Wu/QcWAYFevRO3/m25RwABBBBAAAEEEEAAAQQQQAABBBBAAAEEEECg VQS8JlCp3mbKlCnaqkkVxFPnU9pLK1eulLi4OOnVq5fs2LFD2xLWXj1vK1PBF7WVrSWlpaVJTU2N JevSNTs721DvpptuMuTJIOALAmX/OmpYpRiaOEni3Thj0i/8Mhlzncnwqtlv75JWWbsYFCO/sQYc C61jHD9eab13dJM49JcyttHDbXLr9WNl19GvpbbRM31BvXz9z6P6Au4RQAABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEOjwAl4VqFTaKqA3YsQIKSkpkaKiIpk4caLdj1BQUCBDhw4Vf39/mTNnjpSXl9ut 502FttvbqrMyL1y44NIUVVBWBTf1aeDAgfqsV9yr80TVitfDhw9rgWQ1746wAtYrcDvEJGol981n DW8y9aExEmYoaSoTLLc99Jih0rblb0upawsXDe3sZRKHjJbb7D1osixcFnz2vm5FpqVBoUxPHSUD +0+UP7+7Vb4q+JeUlJVJ6dkz8q+CryTn3TdkYv9r5ZfTfmtpwBUBBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAgU4h4HWBSr26CuStWbNGqqurHW4Lq+ovWrRIIiMjpX///rJ37159F151P378eMN81Ja2 4eHhWqBVBfNsz+CsqqrS3ke9lwrK6lNycrKEhbkX3tG3b+17Nf9hw4ZpgWO14lWtHlVzVj+Vt303 Nf7SpUu1d1+wYIHPrIxtbbfO1l99VYn89fV/Gl57xM9+bMi7kvnB1YPlakPFPDl04ltDSbMzfpEy Z/1iu81DTEF2yy2F/uE95JVd2xwEOo9I5lOPyZ1jbpebzf/+Dht+q9w+5k6Z89Qf5YilA921SnfP LQIIIIAAAggggAACCCCAAAIIIIAAAggggAACHVHAqwOVFvBA89ltaltYtVpPndGo30LVUkdd1bPB gwdrqzIzMzNdXq2o76Mt79Vq0by8vEZDqECrCuapMzj15/OFhoZq72PvXMrNmzc36qe9CpS1mn9u bq7LU1DfcubMmVqQeeHChZKVleVyWyp6p4ArGxn/vyO7ZJ9u+qGJU9za9tXS1C8kRsbd1XCGpCrP WvOJ2M7BNu/qosvL+gyRmTbby6oxzuWXS1N9+IVeJn86uFuWPj1LNWlWGv/Ab2XqiO/P7WxWBzRC AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQMAHBHwiUKl37Nu3rxw8eFDOnTsns2fP1j8y3M+dO1db rahW+altSL0lDRkyRJYsWdKi6agzPCMiIlrUR2s1VqsilbW7SQVk9d+vOX24Oyb121LAT2J6ROoG 6CmRYcG6/Pe3NdXGdYJPzRsnIY1quVIQICOmGLdKrTxnu41ygPS6ZqiuszAJDNBlnd4Gy7Rlm+Xh u24w1Hp63lhp/FaGKpcyITJ07H2yf/dO+cvK/5G7UgbYq2Qou+PeB+WVP2+Qnbu/kCcfGiddnS/e NLQlgwACCCCAAAIIIIAAAggggAACCCCAAAIIIICALwr4mVe21fvixC1zVtPftm2bqG1V1VaqzpIK EE6dOlVCQpoXGnHWt7vPjh07Jn369HG3mZw6dUri4+PdbtcWDdS5oGrLXdukzhX91a9+pVmrs0RV qq2t1baF1ddV55B269bNWqSCz+0VgB047jltHqueGmGdDzfuC9TV1Zi/db34BwZJgJ/99vXmOjXm On4BgRLo76CS/aaNSuvr6sx91WrlgUFBYq+3WvPW0WoVZKB5Tub4uNvp+z8iVQ9qxbPbza0N1HtX nD9vXuldJTXmefv7B5r/LAqSoJBQCQsNsTt3a2NuEEBA0p7+UFPY/to0NBBAAAEEEEAAAQQQQAAB BBBAAAEEEECglQWG3bdS6/GLDY+2cs/Ou/O5FZW2r6NW5o0YMUJU0EsF8UaNGmVbxZpXW42q7VRV 3fZOSUlJ2la2R48elWnTpklUVJTdKaly9Vxt/6oCJt4SpFSTVVu26pMKUKrzRNW5ouqbmEwm/eNG 99HR0Yay/Px8Q56M7wmo4FuQOWDoKEip3sjvUp2WBim/78tfG0+N6SiGGGB+pj13VKEJ5u+3Y25Z kNLy3l0iTHKZeZvkHj16mLdLvkz7dyScIGUTX4DHCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAh1V wOcDlfoPo4J46uzGOvNqpYyMDP0jw31ZWZkh354ZFbBcsWKFFjxV81YrD1WwT11VXgVV1XO15a23 JXW2piWpc0NVgFKdJ+pOSk5OtlbfunWr9Z4bBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACB ji3QoQKV6lNduHBBli1bJs8884zPfTm1csvf318L9qmryntrUkFUffrww++35NOXuXKfmprqSjXq IIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIdDAB95a/efHLHz58WNTWrrm5uU3OMiYmpsk6 VHAuYBtEveyyy5w34CkCCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACOgGfXlGpVk9mZmZq Kw/V1qPOgpQJCQmyceNGbUvViIgIHQG37SmgtrUlIYAAAggggAACCCCAAAIIIIAAAggggAACCCCA AAIIdD4Bn1xR6c7qydmzZ8u8efMkOjraI183Pz9fysvLpaqqSjtXMiQkxDCu2jLVdjWioYIbmdbq x40hHVYtLS1tlnFhYaHDPnmAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDQcQV8JlCpVk8u WbJE5s6d2+TXUKsrX3nlFfnZz37WakHBJgc1Vzh9+rT07t3bULW+vt6aHzZsmNNVn9aKLt4UFRVJ bGysi7Vbt5oKkqpVqgUFBVrHd9xxh2zfvt2tQTZt2iQqwGlJ48ePt9xyRQABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQ6OACXr/1q1o9qQJ84eHhTQYpMzIypKKiQg4ePCiDBg3yaJBS/XNy5MiR Rv+4qBWUlqQPylnKWnI9f/58S5q3uO3IkSOtfahtdxcsWGDNN3Vz7NgxGTNmjKGayWQy5MkggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgh0XAGvDFS6c/ZkcnKyHD16VNTKxfT0dAkLC2u3r9W9 e3enY5eVlTl97msPly1bZpjywoULte1fd+zYITU1NaLf1rW6ulorU1vjTpo0Sfr06WNoO3HixGZt HWvohAwCCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggIDPCHjV1q9q61QVsFKr85pKq1atkrvv vltsz4Bsql1bPr/iiisM3autUf39G2LBM2bMkKVLl0prrBxUQc+YmBjDeJ7OBAYGysaNGw0rI9Wq 0aFDhzaaSmhoaKMyfYHaqpeEAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDQeQS8JlCpVtrZ nu9o+xlUEPOZZ56RXr162T7yinzVIvspAABAAElEQVR0dLTU1taKZUvWiIgIw7zUik/160hp9OjR orbcdeXsUEfvfejQoXZdCetoXpQjgAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgi0nUDDcr+2 G8Olnp944glrvaioKFE/lfr16yd5eXna1q5r1qzx2iClZfJqBaUKUNoGKS3PO+JVBV/V9rvuJrXi 9Ny5c9K3b193m1IfAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEDAxwW8ZkXll19+aaVU24eq NGrUKJk1a5Z2v2nTJu3aGv9z++23i5+fX2t0RR+XBJKSkrRgsloZu2TJEtmwYYMUFBQ08lGB53vu uUcmT54s8fHxjZ5TgAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg0DkEvCZQaY97y5Yton6t ndTqPxVY83Sqq6uTb7/9VtTZjmqb2Oak8vJyrVlYWJjWT3P6aMs2alverKws7afGqa+vtw5HcNhK wQ0CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg0OkFvGbrV09+ieDgYE8OZx1rwIABEhcXJ926 dZPMzExruas3arViZGSk9gsKCpKamhpXm7ZbPRWctPzabRIMjAACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAggg4HUCXhOovP766z2Gc/HiRY+N1ZoDXX755Ybudu3aZciTQQABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQMBXBLxm69cVK1bI9OnTpaqqqs3tEhMT23yMthggJCRE1BmPhw4d0rrf uXOnDBkypC2Gok8EEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE2lTAawKV6i0HDRrUpi/b ETovLCz02tdQ52eq8z9PnDghxcXFbs2zoqJCZs+eLf7+XrPI1635UxkBBBBAAAEEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQMA9Aa8KVLo3dd+uHR4e7tYLqJWm8+bNk9LSUrfaeaLysWPHRG3d29K5jR07 VpKSkjwxZcZAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBoZwEClW30AbKzs2XWrFliMpms IxQUFFjvZ86cKZmZmda8s5uysjK7QcDhw4c7a+aRZ+o909LSWmWs4ODgVumHThBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBLxfgEBlG32j+fPna8FFZ6sM9YHL5kxj4MCBzWnWam1Onz7dakHK VpsUHSGAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCPiEgFcHKuvr6+XMmTNSUlIi0dHR2vWH P/yhhIWF+QRuW05yz5497X6e42233dboFaOiomTx4sWigqgxMTGNnjsriI+Pd/aYZwh4tYD686rO PEN/Pz/xa4+Z1tdK9cUaqTef8xoUFNQ+c2iP92ZMBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAZ8V 8MpAZU1NjTz00EOycuVKh7BLliyRGTNmOHze3g/GjRsnixYtatVpJCQkiOr3d7/7XbsHa1VQ5tCh Q4b3W7dunaSmphrKyCDQ8QXqZd+7S+RXT7186VVvldz9z4nJ34NvXlcmMwYkS96lIXve9ZS889Rd EuDBKYjUS0V5mRTmn5CTX5+Wb745Ld9+e07Cw01y5VU/kauv/on06B4jge0SxfUoBIMhgAACCCCA AAIIIIAAAggggAACCCCAAAIIuCjgdYHK4uJiiYuLa3L66oxH9Tt37pxEREQ0Wd/TFbKysrQzKP3M q6ssqX///tbg3uzZs0XV8dWkApX6NHHiRIKUehDuO5FAtXyx+U3d+5ZKTa0568lApXkt5wXdDMr+ dVbUFDwTqKyXgsM7ZeE9D8k+3Rzs314tL/75T5LcN8H+Y0oRQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEOpWAR/8qvSlZtZLSlSClvp/IyEi5cEH/V/T6p+17rw9S2s6ke/futkU+lbd9N18OuvoUPJP1 QgF/CTOFGObVHn+w2m6I7ak5nN7/fzLGpSClIjoiD98zRha+tk1qDGJkEEAAAQQQQAABBBBAAAEE EEAAAQQQQAABBDqjgKf+Ltsl2zvuuMOleraVbrjhBtsi8h4WOHnypIdHZDgEEPAGgZJvCm2m0VPu vvdBefrppyV91nQZkBhq81zk7cWPyrq8443KKUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBDoXAJe E6isqqqSLVu2GPT79esnRUVForYZtfzUVq+jRo0y1FNnJZ4+fdpQ5o2ZAwcOaO+j3ik9Pd0bp+jy nNSKSnVmpiUtXbrUcssVAQQ6kYCpR7z2tqbrxsmbW7bJvgOb5Ddz/lvGjh0r99w3Q1Zt+Fw+3Jgt PW1MMmYslpI6m0KyCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAp1KwGsClZ9++qkBXgUpDx48KLGx sYZydR7l5s2bJSMjw1Cuzkj09qSCe+p9bN/J2+ftaH4vv/yy9dHatWtl79691jw3CCDQOQSuuHaU 5OXtlO0rfytJV1wmgQ3H8l4CMP+5l3CtrM95wwYkTz7Ym29TRhYBBBBAAAEEEEAAAQQQQAABBBBA AAEEEECgMwl4TaDy6NGjBvfdu3cb8rYZ2xWJBQUFtlXIt7HAiBEjJDk52TrK4MGDJT8/35rnBgEE OoGAX6BERHSRRvFJm1cPi7tKMh+41VB69tvzhjwZBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgc4l EOgtr7tixQrrVNSWoiEhIda8o5ucnBxJSUnRHqtAZV1dnfj7e03s1dG0tfKamho5ceKEfPbZZ9p2 sE4rO3g4e/bsNn1f5alWgTpLW7dulfDwcGuV3r17i9qK96c//am1zNWbpsZytR/qIYCANwr4ydA7 p4gs32ad3Nvb9su0264Rr/k/IuvMuEEAAQQQQAABBBBAAAEEEEAAAQQQQAABBBDwhIBX/v2w/uxD ZwhXX321s8de+2zBggWycOHCFs9PnQGXlJTU4n7sdTBp0iRR27k2J6lte5uT1NmdHWVb3Oa8vy+1 qau+KBdrzQcM+gWY/6OCIN1qunr5ruysFBd/a35eL8GhXSUmNk4iw4McvJ6qXyolpaVSUXnRXD9c LuveQyJCHdV30I1WXC9VFeVy9mypnDt/QSvxCwgWU6RJTNFREhrU/P+IobqyXIr+fUa+M89RxF8i TN3ksrgYCb7UZY2zaemeNbj5SZD5P8YI0D2zf2t+J/P5veZjesU/IEiCg5puYb8fB6X1tfLduVL5 trhEKmtrtUphXaKk22XdpGuzvoGDcS4V+/kb/y+n74/iXDBw3idPEUAAAQQQQAABBBBAAAEEEEAA AQQQQAABBHxXwPi3xl7yHqmpqV4yk9afxrBhwyQ3N7dVOg4ODm6Vfux18uWXX9orbtOy8+fPE6hs U+FW6ryuRKYOuln2Xepu9fufSf8e4XL267/L72alyUfHKxsNNCBlqmT9foZcFtoQLCw111/opP5z 5vrddPUbdWotuCh/2/2pLM14QnbaGdtS7da7psqvH0yThLgIS1GT1/KiE5IxL0027i6zW/d3S/8i o4f+RCIiQ+0+1xfWlufLwKFjrUX3/WmNzDKvJnSc6uWDZZMkffmRS1V+Jp/sfVWimxPDtR2k7oJ8 9v478szjf5JC22eX8qbrxsjy+Y/IT67o5qCG+8W267OPnykXFR71yv8jcv/1aIEAAggggAACCCCA AAIIIIAAAggggAACCCDgpkBD1MDNhm1ZvaKioi27b7e+jx071mpBSrXqNCYmps3epazMfmCmzQak Y58SCNPNNti/Rv72UbYMH3W33SClqro/52W59fqp8k2leWmgOTS1+90VMqyJ+sPN9Ysqzas2naS6 yjPyaP/BMnnao06DlKqLbW+9LGNShsqr7+0XNYumUuH+92Voyi8dBilV+9/OmCz3zZkvq95yFO5r GKXq/HcNGfNd05tb18rpE2cMbVojU11+WmYMuEEedBKkVOOU7d4od48aLi++u9slL1fmVvC3vYZq /zn4KoKUBhEyCCCAAAIIIIAAAggggAACCCCAAAIIIIBA5xLwyoUs+jMPnX2OoCDj0iJvP59y2rRp jV5n1apVolZZmkwm+cMf/iCLFi3S6qjyMWPGiDrLsrq6Wq655hopNW+PaUn5+fmW2za5pqenS2Zm pjavNhnAplMVGG3LwKvNcGRbUeDulJ+72Ns+uffJ5+SBa76T3y1+24U2+2Tyk6vlvaw0u8Gs+soi mXp9inVlp7HDnpKYWCTH7aywfOHxNKmS1+W/b3O8RXFZwT4ZnTbX2KWD3P6cTdqT0MRQqbQznqWZ n7/tekLLE8fX1v4Duq7iG/mvobeJZY2mZeTQxJtk0i0Dxa/ia3nl9Xcsxdr15aemSWTEGzLllp8Y yt3O1JXJ8keeMzSL72Ey5MkggAACCCCAAAIIIIAAAggggAACCCCAAAIIdC6B1v578FbRW7Fihbiy qnL//v2G8dTZj126dDGU2WbU9qJPPfWUeDqoWW8+ZM52y9da85lw+nn07t3bOt2UlBSJjo625ouL i0UfmJ0+fboop7ZKM2bMEPUjIeCOQJx5i9fVv71fekSGSdV3xbLs0XGSrds2tShntfwup6FH2/or F06Wl3OKrBWKcp6Xr8vvlV4RtmczXpSXHh7XKEg54+n/kYn/cZN2vqIKC9ZVV8pXf/tcHk37tWGL 05cev1d+cdMe6W2yt33yd/LHMb+yzsFyk7nyDUke0EdCAs3napb8P1n1zH3WuSaag5T2gqKWtt5x vSiv/DrVJkj5M/lrzmL5UVykdYozH35U1j47VzLe+txa9twjT8t/7FojPULdD7ZqnVSfk//9zTjZ Zu1R3dwqw6+9wlBCBgEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQKBzCXhloPLQoUMyd65rq5n0n2vh woX6rMP7SZMmSVJSksPnbfFABSr1KS8vzxCk1D9T9xcvXjQUBQYGysmTJ8USzFy5cqU8++yzhmCm oQEZBDwscOes52TefbdaVz+GRsTJoys2S9G1P5f37MzFXv2HM9+SUzb1dxw8Ib2GJhp6qPjm7/KS LgCqHmb9+f8kpe8PDPX8g0IlccDN8k7eJrln6GhDkO6lt3fKs/fdbKivMmUFRxrNd9WWT2XAFQ3B vIhuV8jDWR/I0Pdek7THX/CBIKVIxTfHZInBbKjk7FoicTbBR/8Qk0x+aql0CZ8g81//5yWfI7Jp 5z9kmourKi+UFcvX35yV6ouVcuzILpn/zNJGzll/niuRzYx7NuqMAgQQQAABBBBAAAEEEEAAAQQQ QAABBBBAAAGfFPDKMyrbWjI42N4qqrYd1c/P+DfygwYNcnvAXr16SXJysrXdV199Zb3nBoH2FPiF OUj5pC5IaZ2LX6Q8uHK+NWu5cVb/IZv658qNQXuRGnlvxZOWrrTrL2a90ChIqa8QENFTnv/zs/oi 2bp4tZypMv4HBOr8zNw3jfV+MWuJIUjZ0ImfDLjtV/LG8481FHntXa1s+7PxOzz75982ClI2TD9Q Rj/w/TbUlrLX134itl/C8sxwNW/xOiN5hIxLTZWJ9/yX3SDlo8//xfy9ehiakUEAAQQQQAABBBBA AAEEEEAAAQQQQAABBBDofAJeE6hUZzB2ptRUsPTUqVN2OVLNf/lvSR9//LHltl2udXV1orakLSkp afb45eXlon7qLE6SbwqEJk6SBeYgpe3mrJa3ib/S+O92U/Vje/WxNNWub2/bbw5N6lJduWx5q1BX IDL9zpsMeXuZHtdcL0MND/bJv4q/M5RI3Tn5q3UV4fePfjX2emMdm9xPbhknD17n5WctmrdeNb7X rXLjNc4DhQER8Yb3Ktu9R85X27y8vWxtnb1Sreya68bJhvdzzedd/tRhHR4ggAACCCCAAAIIIIAA AggggAACCCCAAAIIdB4Br9n69S9/+YvHzkRUKxM9nWy3fj1z5ozExsYaptGnT0OAZunSpTJkyBDD c2/LDBgwQNQ2vSplZGRIenq6W1PMz8+3bmWrGlZXV4va4pbkWwKRvbpLkJMpB0fFaQHCvEt1mqof Ft1Dfmauu+9S/aqyC6IPfV0sL7U+U1VCE6fIFXbPmrzUgeXiHym/uPdKydMFIv0DjSudVdUwS33t OlZ+EN3UCmx/iTCFGFp5X0YvqMyuMH+zevO/c4YQsGHagQG1Etic9zJHrPWGoYljZcOyWRITGSHh oc7+STEMTwYBBBBAAAEEEEAAAQQQQAABBBBAAAEEEECgEwh4TVRIbY3q7YG5lvzz4O/vL1FRUVJa Wqp18/nnn8vo0aMNXfbv39+aX7t2raxevbpR4O7JJ5+01vH1m8svv9zwCrt27erQ/wwYXrYDZarK XFlm1/DCTdYP8DcEulRL/dLvmgvnGzoz34VER0jjcKOhyqVMgFx1w50ir2dYH+7cXyD9b2tY8Vlf eUHOWp+KxKX8SGyOcNQ99Z3bCyXfGIK7lcez5cYB2R55gZDoH8rlcd2sZ5d6ZFAGQQABBBBAAAEE EEAAAQQQQAABBBBAAAEEEPAJAf3f//vEhH15kvfff791+g8//LD13nJju8LyyiuvlAsXLmiP1Tar kyZNsgY6VWFcXJylqU9eQ0JCpF+/fta579y503rPDQKOBPz8jWHJMbcPlKbWPFr6Kjtl3DK2Zw/j lq0XzhXLEUtl87XJoKqurm/d9mzGdI0rW13tYMztgwhSuopFPQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAoJMJeM2Kyg8//FC2bt0q586dExXE69u3b4f7FFOmTJFFixZp71VQUCDHjh2TpKQkw3tOmzZN Vq5caa0THh5uWImpr3znnebVYT6eCguNgSMffx2m3w4C1ZW1Lo8aYLP1aOE3Zea2V1jb+/l77o/E wBDPjWV9QetNoXn710T5oTXf1M2/5KpbJknXZuzc2iXY1TByU3PgOQIIIIAAAggggAACCCCAAAII IIAAAggggEBHE2jPvyk3WE6dOlVU8E6lN998U0pKSgzPO0LGNvg6cuRIUec06tMLL7xgDVRayi3b xVry6pqcnCwRERH6ona9VwFVd1JVVZXMmzfPsELUnfbURcAi8N6HByV9wnUurdoLjzCeC3vVj4x5 P8Mms+ZtZU3NiMxZJmZzra+rN5T8/R8FUn9LHxe3rTU0dTtTX2c8i9J03Uz5aOU0l8zcHswcN/5+ HbjbLWmAAAIIIIAAAggggAACCCCAAAIIIIAAAggg0MkEvCZQaTI1bMHYs2dztiX0jS936NAh63an KjBbX18v6nxOSwoLC5M9e/bI4MGDLUV2rx9//LHd8rYqzM7OllmzZon+O1kCy2rMmTNnSmZmpkvD l5WV2Q1QDh8+3KX2VEJAL1BVclbUKZlN/2FWIwfyNuibSjdTV0M+9LIeMtRckneptCjnH1Jhji9G NvwraqjvTiakS6SoP9ksa4j3ms/HVPP2xHrDsKjL5WrzWPptbd2Zu1t1A0NkwHUm2bdbrVYV6dnD e/6DCrfeg8oIIIAAAggggAACCCCAAAIIIIAAAggggAACbS7Q9N/tt/kUGg+gAlkdNalVlbW1tVJd XS3B5i0R9UFKyzsPGjRIioqK5L777pMtW7ZYirVrRkaGpKenG8o8kZk/f74WXLS3utMyvj5waSlz 5zpw4EB3qlO3kwqERfeQn5nffd+l9688vkb+XT5HekUEOBWprzor77xlCRN+X7VrmM0fgY1WA74n 3557WiJNzsKJ1XIq/5zTsdXDgC4mQ6BSxLjKsXEH1VLkQr+N2zUu8QsOkjBdcdnuj+RM5VTpEdoK EVhdv9qtX7g8vDJXHrYtJ48AAggggAACCCCAAAIIIIAAAggggAACCCCAgI2Av02erAcE/P39JSQk xG6Q0jJ8bGysbN68WVtxqQKbdXV12n17BCktc2rLq1pFqlxICDQpYF6x13Cq5Pe1/3fDziab/WPH e4YVhabrHpQf2gYgg7pIckqcoa+3PjlsyBszNfJ/y+bJmuOVxmJ7udo6w5aoZbv/zxwsNG4H29Cs Vra9liHZrvTb0MjxnX+4tsqxocIR+evHbbu+Uq0WVz8SAggggAACCCCAAAIIIIAAAggggAACCCCA AAKOBIgMOZLxonIVwLO38tKTUxw3blyrD5eQkCCzZ8+WiooKUatISQi4JODXVaaunG+ounXxTMk5 fMpQps+UFOyTux95Tl8kC+fcZWfb1WC5JfW/DfVef+pX8vcie6cuVsmmZXPlN8u3Geo7zAQGiTEE WihZr+ZI41DeRXPwM10eXfy2w67cfxAiE+csNDR76fFJcujrpleCSnWleYX3GbnYeKKG/iwZtXL1 qXHXy7XXXqv9Hng62xCgtdTjigACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAgUoP/jOgVkUWFxdL SUlJs0ctLy8X9aupaWrbyGYPYbdhVlaWdVWnZaVUv379rHVVwNFS7uo1Pz9fVL/qXE4SAu4I9Bx0 q3aWpL7NnHv+U/702iYpLquQWm01X61UlJ+VnHVL5eYxv9JXNd+Plxv6GMOGlgo/7D9UO8/RklfX u1NS5ZP9x6XSvGVzdVWl/LvgH/LIuGR50tUgperEHGC9908Pqjtr2rY8XX677B05W15h3g76ohR9 fUweH/dz14Of1p6avrksabDcZlPt3lE/l9ff+0zKKqp0AdN6qVXBya/zZcNri6X/oOslJeVW+du/ v7NpbT9bcPATeVe3EvTzt56TY99U2K9MKQIIIIAAAggggAACCCCAAAIIIIAAAggggECnFrA5oM07 LEwmk3dMpJVnMWDAADl06JDWa3POmlSBvd69e1tnpc65DAz03Cd0tqqze/fu1nlxg0CbC/ib5JmN KyV5zDTDUGsXPynq5zxdLVvyfmM4s1Ff3y8kTp5eOk/GzfiDrrhQfp3W8lXFVw//pfmcypekUNfz puXzRf3aPJkDpU++v1be+4+JhqGyHn9Qsi6VJCYmyvHjxw3PLRnnJ4BaaolUffdtQ0a76ymmLkE2 ZWQRQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEBDxXJTLDe3CwkJZv369XLhgb7tFNzpyUPXee+/1 yfMQL7/8csMb7dq1S4YMGWIoI4OAJwRs/82sa2LQtqhvSrhOPtmYbV4tOaWJ0fWPb5Wcz7IkLtz5 YvLEoXfJ0ie+khnPvKFvbPf+0ef/IuOuDZWbht9lfe7Iwy+0h6x6a7ncctcD1rqObh57/g0Ze22Q S/2qPlwx7trjatmZ86ZMTRlvOK/TMgdHQUr1PDIs2FLN6dU/ONzmeaGUna8SiSBYaQNDFgEEEEAA AQQQQAABBBBAAAEEEEAAAQQQ6PQCXhmoLC0tlQkTJrTZx7nxxhslKSmpzfpvq45DQkJEbbdqWZW5 c+fOdg1UHjhwQM6cOaO9bmxsbFu9Nv16nYC/ROnmFNsnVpyvtvM3rF50v34Ph/1HJ1wr+3fnyidb N8nzT2UaVirqpiim634hf3hoqlw/INHOuZT6mpb7ABk64XF579oU+d28GbJTt5WppcaAlP+ShXOn S0JchFw8+09LsXZ1FgaNufIGycv5q2TMS5ONu8sM7VTG2O9R3fMwcdyv69+kS1ySrN27U3Z/+oE8 /8gCuwFLy6DXmN3SpoyXGwddKxGhrv3fxY8H3mreOjdD1+9Y+VFcV0uXXBFAAAEEEEAAAQQQQAAB BBBAAAEEEEAAAQQQsAq49jfP1uod4yY42LWVQd74tmq1qbcktRUsAUpv+RoenId529XnDnwh1TVq 3aC/BAU5D1OKuf7SNqzvH2KSW8beY/5NlqqK81L23Xm5eLHaPLcACQ0Pk/AuXSQ8pDmr+fwkvs8g +d8Nn5v7LZeycxVy0Xw2bFBwqEREmiQ8tKHP4G5XyoH9+6Wmtlb8A4MkwM/594iI+5H8bmWuPFX5 nZSUfqf1GxgYKl2jTNLV0G8f1/p195sEdZHrbvmlrD14h1RXXjC/23dSffGi1JrNgoLNbmFdpUuX MAn0b+JF7Lymf3gPWXtgn1RWqXN0/SQoNMRhoNlOc4oQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE OpFApwxUXjT/hXx7p/Bw2+0Rnc+oqqpK5s2bJ2q1KQmBdhfwMwe0mgpQ6ifZ1vW1sfwkJLyreVvX 1l69p/qNNPcbqX+jRvd+/uagrfnnTgoKNc+3h/P5utyvu8baRFUgMVwuM/9aNfkFSqiLKzBbdVw6 QwABBBBAAAEEEEAAAQQQQAABBBBAAAEEEPApAa8NVG7cuLHNIBMTE9usb0vH2dnZMmvWLDGZTJYi KSgosN7PnDlTMjMzrXlnN2VlZXYDlMOHD3fWrF2elZSUSE5Ojrzzzjvy5ZdfanOIiorS5n/NNdfI HXfcISkpKRIdHd0u82NQBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAAB7xDwykClOodx9OjR 3iHUzFnMnz9fC845WwGpD1w2Z5iBAwc2p1mbtMnPz5cBAwbYDahaBlRna65du1bLquBlbm6u9O3b 1/KYKwIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQCcScG+fQg/BqBWEJOcCe/bsEX83t5l0 3mPzn6qVob1793YapLTtXQVwVUB6+vTpto/II4AAAggggAACCCCAAAIIIIAAAggggAACCCCAAAII dAIBrwxUdgT3cePGtfprJCQkyOzZs6WiokIGDRrU6v03p8P169fL3Llzm9NUa7Ny5UqZNGlSs9vT EAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAwDcFCFS20XfLysqSuro6qa+vt/7UCkJLUgFH /TNX7tX2qqrfsLAwSzfteq2pqZEJEyY0moMKqC5ZskSOHj0qZ8+elVOnTklRUZF2duXEiRMb1Vfb wR4+fLhROQUIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIdV8Arz6jsKNx+fn4OX6V79+4O n/nKg+XLlzeaqjqH0vbcyejoaK3eiBEjRP1ee+01GTlypHZGpaWD5ORkKSkpsWS5IoAAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIdHABVlR28A/clq+nzqbUJ7Vq0jZIqX9uuQ8JCZHt27drZ1Ra ytSZlQQqLRpcEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAIGOL+A1KyrLysqs2vp7a2EHuDlw 4ICcOXNGe5PY2FiffiO1rW1BQYH1HTIyMsTdd9q9e7eEhoZa+8jJyZHU1FRrnhsEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAIGOK+A1gcpNmzZJdna2Jj1z5swOKa62gnU3mKdWGapgXmVlpURF RYmz7WQ9iWY7j8mTJ7s9vFpZqc7tVNvFqqQPfLrdGQ0QQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQR8SsBrtn5VW4ZmZWVpv169evkUojuTraqqkvz8fDl9+rTTZuvXr9eCkt26dZPw8HBRV39/ f5kzZ47Tdu31sKn3aa95MS4CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggIB3CnhNoLIlPCqw GR0drQX2vPmcQxWkVKsje/fuLT/4wQ/k2LFjdl9bnf04YcIEu88WLVqkvavdh+1YGB8f346jMzQC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggICvCfh8oNJyVmJpaalm783nW/7xj380/PPxox/9 yJBXGRVonTt3bqNyfYF6V29bWanOl2xOsmz72py2tEEAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEEPBdAZ8PVNqelejNn2LVqlXW6WVkZEhgYOMjQu+9915rHcvN/PnzZdSoUZasdlUrK1WQtr2S clfnS1pSWlqa1NTUWLIuXS1nkloq33TTTZZbrggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAA Ah1cwOcDlb7yfSwrPy3znTlzpuXWer1w4YJs2bLFmlc3586dkwULFsjmzZvFdtXiF198Yajr6cy8 efMMQ8bGxop6B1fSjh07RAU39WngwIH6LPcIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAId WIBApYc+ru3Kz5CQkEYjv/rqq4aydevWSUREhLVsxIgRkpCQYM1//PHH1vv2uBk/frxhWLUlbXh4 uLYtbXFxcaMVn+qMzr1790r//v1l6NChhrbJyckSFhZmKCODAAIIIIAAAggggAACCCCAAAIIIIAA AggggAACCCDQcQUIVLbTt7UNXKpp2K6ytA0Eqjrp6enq4hVJvUNeXl6juahtaePi4iQgIEBUHcsv NDRUBg8eLPbOpVQrRkkIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAKdR4BApYe+dX19vWGk goICQ379+vWGvDqX0l4ws2vXroZ67Z0ZMmSILFmypEXTUFva6leOtqgzGiOAAAIIIIAAAggggAAC CCCAAAIIIIAAAggggAACCPiEAIFKD30mf39/w7atAwYMsJ7nePjwYZkwYYJhJrNnzzbkLZn333/f cus11xkzZsjRo0ebNZ9Tp06J2tKWhAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg0LkECFR6 8HtnZGRYR7Oc56hWTfbr189arm7UeY32VhiqVZlr16611r3qqqus9+19k5SUJGp+KmA5bdo0iYqK sjslVa6eq+1fVf34+Hi79ShEAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBDo2AIdLlB58eJF r/1iqampLs3N0XmNtuU333yzS/15spIKWK5YsUJKSkqkrq5Oamtrpbq6WruqvCpXz/v27evJaTEW AggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAlwkEetl83J6OWpG4Z88e+fLLLyUsLEwSExPd 7sOTDc6dOyeRkZEOh1QrDe2tplRBvjFjxhja2atnqNDOGfVt1E9te0tCAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQAABBBBAQC/g84FK9TKDBg3SfvoX89Z7FVxUQcfVq1fLq6++KgUFBdpU09LS5LHH HtOCrfbmXlhYaCjOy8sz5MkggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg4EsCHSJQ6Uvg aq5qleGUKVO0n6tz79WrlxQVFWnbqEZHRzsMaLraH/UQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQaE8BApXtqe/m2LGxsW62oDoCCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAAC3inA 4YHe+V2YFQIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIdWoAVle38eevr6+XMmTPyzTff yLlz57TZJCUlCasn2/nDMDwCCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggECbCvhkoLK8vFyO Hj0qJ06ckOLiYreAKioqZPbs2eLv376LSdW8x40bJ7m5uXbnX1tb22iOS5culZMnT0rXrl1l/vz5 2lmXdhtTiAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggICXC/hUoPLYsWNy/fXXS2lpaYtY x44dK2rVYnulzMxMmTt3rlvDq5WXM2fOtLbp0qWLpKenW/PcIIAAAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIOBLAu27rNANqezsbOnTp0+Lg5RqyODgYDdGbt2qalWku0FKNQM/Pz9tJahlNs3p w9KWKwIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAALtLeATgcrTp09LWlpae1u1eHy1Za1+ VaSlw4kTJ0pOTo4kJCRYiuxe582bZyhX/ZEQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQ 8EUBn9j69bbbbmtkGxUVJYsXL5aBAwdKTExMo+fOCuLj4509brNnCxcuNPStApSrV6+WwMDvP4PJ ZDI8t81ER0cbivLz86Vv376GMjIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAII+IKA1wcq 1dmMhw4dMliuW7dOUlNTDWW+kFm0aJF1mv369ZM1a9ZY867eJCcnS25urlZ969atBCpdhaMeAggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAVwl4/davKlCpT2oVoi8GKevq6vSvIR9++KEh72rG F9/d1XejHgIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQOcR8PoVlX5+foavkZWVZcj7Ssb2 PS677DKvnnpJSYl2bmZYWJhH5nnhwgUZN26c+Pt7fezcIx4MggACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAgh0dAGvD1TafoCTJ09Ke50xaTuX9sivWLHCI8M+9thjsnLlSo+MZRnk6NGjkpSUZMly RQABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQ6MACXr98Ta1EVOc5WtLSpUsttz59LS0tbdb8 CwsLm9XO3UYffPCBu01aXD84OLjFfdABAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAbwh4 faBSMf7+97+3aq5du1b27t1rzfvKjQq4JiQkWKd7xx13WO9dvdm0aZPoA5zjx493tanb9UaOHOl2 m5Y26NKlS0u7oD0CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggICPCPjE1q+jR4/WVlUeOnRI Yx08eLCoLWB79erlI8zfT1MF/yzbqebm5sqCBQu0nysvcezYMRkzZoyhqslkMuRbM/PCCy/IlClT JCQkxGG36ll+fn6jec2ePVtrW1VV1aitCrSmpKQYytV37du3r6GMDAIIIIAAAggggAACCCCAAAII IIAAAggggAACCCCAQMcW8IlApfoEBw4ckG7dullXFPbu3VtUgOunP/2p219IrW5sj7Rs2TJroFKN v3DhQlEBwc2bN8v1118v+m1dq6urJSAgQL7++mt54oknRK0k1aeJEydKdHS0vqhV78PCwmTIkCFN 9vnHP/7RUGfJkiUyY8YMQ5ltpqKiQsLDw63Famtf9b6BgT7zj6N17twggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAgg0T8AnIkPqXModO3ZYg5SWV9WfXWkpc+VaVFQksbGxrlRt1ToqELdx40bD CkS1wnDo0KGNxgkNDW1Upi945ZVX9Nl2uVffRB9AVSspmwpSqomqIOi5c+ckMjLSOm+1Fa4K2JIQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQ6h4BPnFGZmZlpCIi19NOcP3++pV00u73axjYj I6PZ7VVDtZJUBfvaO02ePNk6haioKMnKyrLmm7qJiIiQnJwca7UtW7ZIeXm5Nc8NAggggAACCCCA AAIIIIAAAggggAACCCCAAAIIIIBAxxbwiUBlR/sE6enpcvToUbdfKyEhQVuJ6A3nOdbX10tBQYH1 HZqzGnLEiBHW9upm9erVhjwZBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBjivgE1u/pqWl yapVq8RkMrX4S5SVlUlMTEyL+2lpB0lJSaKCffn5+aLOddywYYMh8GfpX21ve88994havRgfH28p 9rqrOjO0OUm9n1ohqpI6u5KEAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDQOQR8IlC5YMEC Ub+OmHr16qVtmWrZNlUFLy3Jz8/Pcuv113379jUrkFpYWOj178YEEUAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAAEEWl+ArV9b37RFPargpOXXoo483Pjhhx92e8TTp09LaWmp2+1ogAACCCCAAAII IIAAAggggAACCCCAAAIIIIAAAggg4PsCBCo9+A3r6uqkuLhYSkpKmj1qeXm5qF9NTU2z+2iNhiqY qrZttSR1XmUv8+pQV+eltrz9wQ9+YGmuXW+66SZDngwCCCCAAAIIIIAAAggggAACCCCAAAIIIIAA AggggEDHFSBQ6cFvO2DAAImLi5Nu3bpJZmam2yOr4F5kZKT2CwoKcjko6PZALjZ45ZVXDDVVsFLN a86cOdrZm1VVVdo5nKqSCtKqAOuOHTtk2LBhYu9MyxtvvNHQHxkEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAIGOK+ATZ1Ta41erEnNycuSdd96RL7/8UqsSFRWlbSV6zTXXyB133CEpKSkSHR1t r7lPll1++eWGee/atUuGDBliKPNkZtCgQZKcnCy5ubmGYRctWiTq505atWqV+PsTN3fHjLoIIIAA AggggAACCCCAAAIIIIAAAggggAACCCCAgC8L+FygUq0qVCsTnZ1teOjQIVm7dq32XVTwUgXS+vbt 68vfSZt7SEiItt2qej+Vdu7c2a6BSjWHTz75RFsdqVZTNjdNmzZNpkyZ0tzmtEMAAQQQQAABBBBA AAEEEEAAAQQQQAABBBBAAAEEEPBBAZ9awqa2S1VbhjoLUtp+A1VXnaU4ffp020c+mS8sLPSqeauz KlXweN26dc2aV15enqxYsaJZbWmEAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDguwI+E6hc v369zJ07t9nSK1eulEmTJjW7fWs3DA8Pd6tLdd6jOvvRnSCtWwO0sHJqaqp2HuXRo0dl/vz5WnBY rWbVJ5VXW8Wq5ydPntTqt+fWtfq5cY8AAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIOBZAb96 c/LskO6PVlNTI0FBQY0aJiQkSHp6unYWZWxsrFy4cEGrd/DgQXn11Vet27/qG6ptUz2xDWx2drbM mjVLTCaTdXjb7VHV/F1JZWVldgOUe/bsEXVOJKnlAgPHPad1suqpES3vjB4QQAABBFpdIO3pD7U+ t782rdX7pkMEEEAAAQQQQAABBBBAAAEEEEAAAQQ6u8Cw+1ZqBF9seNSjFD5xRuXy5csbodgLOEZH R2v1RowYIer32muvyciRI7UzKi0dqBV9JSUllmybXdWqQbX60dkKSNvApbuTGThwoLtNqI8AAggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAVwj4xNav6mxKfSoqKnJpVWRISIhs375d24bU0l4F Dj0RqLSM11ZXtZrS398nPl9bEdAvAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIICADwt4faSr rq5O9CsPMzIyRG3z6k7avXu3oXpOTo4h3xaZcePGtXq3aqvY2bNnS0VFBVu+trouHSKAAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCHhSwOu3fvXz8zN4TJ482ZB3JaNWVvbr10/UdrEq6QOfrrRv Tp2srCxRK0H18+/fv791DirgqOp0pFReXi5Hjx6VEydOSHFxsVuvpoKvyoRVom6xURkBBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAAQQQ8FkBrw9U2sqePn1a4uPjbYu9Mq8PUtpOsHv37rZFPps/duyY XH/99U7P43Tl5caOHStJSUmuVKUOAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAjwt4/dav tr6+EqS0nXdHzWdnZ0ufPn1aHKRUPsHBwR2VifdCAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAAB BBCwEfC5FZXqfMkpU6bYvEbTWcu2r03XbLsaX3zxhajVh4GBgZKYmNisgdT2qiqFhYVp/TSrk1Zq pFa3pqWltVJvdIMAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIINCZBLw+UKm2T9WfL6kCY+qc ShXsczWpVX/6dNNNN+mzHrsfOHCg9YzKjIwMSU9Pd2vs/Px86d27t7VNdXW1Ww7Whq10c9tttzXq KSoqShYvXizqXWNiYho9d1bAallnOjxDAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBDqWgOvR vnZ873nz5smECROsM4iNjRW1mk+tKmwq7dixo9GqPxVE88V0+eWXG6a9a9cuGTJkiKHMU5n6+npr 0NUy5rp16yQ1NdWS5YoAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIICAQwGfOKNy/Pjxhhco LS2V8PBwmTNnjhQXF0tdXZ3heVVVlezdu1f69+8vQ4cONTxLTk52KcBpaOQlmZCQEG11qWU6O3fu tNx6/KoClfo0ceJEgpR6EO4RQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQScCvhEoFJt/5qX l9foRRYtWiRxcXESEBAgqo7lFxoaKoMHD2604k91sHnz5kb9+FJBYWGhV0xXWetTVlaWPss9Aggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAk4FfCJQqd5AbXG6ZMkSpy/T1MOcnByJiIhoqppH nqsVoe4ktUpUrSBVq0m9MZ08edIbp8WcEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEvFTA J86otNjNmDFDUlJSpE+fPpYil6+nTp2S+Ph4l+u3tGJ2drbMmjVLTCaTtauCggLr/cyZMyUzM9Oa d3ZTVlZmN0A5fPhwZ83a9JlaUdmvXz/rqtWlS5e223mZbfqidI4AAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIINAmAj4VqFQCSUlJos5HPHbsmKjtRt988027QbyoqChRZ1s+/PDD0rdv3zbBc9bp /PnztXk5WwGpD1w668vRs4EDBzp65JHy3//+9zJmzBhtrLVr18qjjz4qgwYN8sjYDIIAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIODbAj4XqLRwq4DlihUrtJ8KXKpfXV2d+Pv7W8+qtNTtiNc9 e/Zo79qe7zZ69GjDqkp1LqjaArZXr17tOS3GRgABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQ 8AEBnzmj0pml2oZUBSgDAwOtgUpn9T3xbNy4ca0+TEJCgsyePVsqKiq8ZuXigQMHRK1etaTevXvL 4cOHtcCxJYDs6tXSB1cEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAIGOL9AhApXe+JnUtrRq hac+SKfOdLQkFXDUP3PlPj8/X9vuNiwszNJNu17VuZSTJ09utPWuek8VOHb3V1xc3K7vw+AIIIAA AggggAACCCCAAAIIIIAAAggggAACCCCAAAKeE/DZrV89R9T8kdRKT0epe/fujh75THlmZqa09JxN /cueP39eYmNj9UXcI4AAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIdFABrwpU1tTUtDmz2h62 IyRl1VHepSN8D94BAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEDAPQGvidoNGzZMcnNz3Zt9 M2tXV1e3S5BPned45swZbdbNWTlYXl4uL730ksydO1fr4+TJk9KrV69mKrS8WVpamqxatUpMJlOL OysrK5OYmJgW90MHCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACviHgNYHK0tJSj4mdOHFC kpKSPDaeZSC1Fay7Acqqqip599135YEHHmh0FqSl3/a6LliwQNSPhAACCCCAAAIIIIAAAggggAAC CCCAAAIIIIAAAggggIC7Av7uNmir+mpFXWunqKgou10GBwfbLfeWwvr6etmxY4f0799fQkNDZcKE CV4XpPQWK+aBAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCDgmwJes6LyxRdflOXLl0tkZGSL JePj4yUnJ0cOHTrU4r482UF+fr488cQTsnbtWpeG9faAq0svQSUEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAIFOKeA1gcrRo0eL+rVGWr9+vSxatEjUikrbLWVVWXue62j7fiUlJfLCCy/IwoUL bR85zGdkZMjUqVMlOjraYR0eIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIODNAl4TqGwN JBWgVNukWpJtkHLUqFGyceNGy+N2u6pzJ9944w2ZNWtWo0Cqo0nNnj1bHn30UVGrRUkIIIAAAggg gAACCCCAAAIIIIAAAggggAACCCCAAAII+LpAhwhUqvMchw4d6vBbqFWU+/fvb9eVlHV1dfLRRx+J Cji6syXtunXrJDU11eG7ecuDmpoaOXHihHz22WdSVFTUrGkpG39/rzk2tVnvQCMEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAHXBHw6UKnOdBwwYIDTVYl5eXkyZMgQ1zTaoNaxY8e0lZBbtmxx qfeEhAQpKCiw1nUWgLVWauebBQsWuLV1raPpjh07VpKSkhw9phwBBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQKADCfjk8rXy8nIZNmyY9O7d22GQctWqVVJfX98uQcri4mKZM2eO+Pn5SZ8+faSp IGVycrLs2bNH1KpLFXzVp4sXL+qzXnevvoM752s6e4Hg4GBnj3mGAAIIIIAAAggggAACCCCAAAII IIAAAggggAACCCDQgQR8KlCpthedPn26REZGSm5urt3PoLYPra2tlSlTpth93taFan5xcXGyaNEi p0P169dPcnJytLlu375dBg0apAU2VbDSV5JaLeroO7j7DmolaUxMjLvNqI8AAggggAACCCCAAAII IIAAAggggAACCCCAAAIIIOCjAj4TqFy6dKkEBQXJypUr7VKPGjVKKioqJCsrq13POdy1a5fd+alC FYxTZ05WVlbKwYMHZcSIEY3mqlZh+kqaNm1ao6mqlawnT56Us2fPaudxWiqoclWmzq88deqUqHND 9UmtJI2IiNAXcY8AAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIINCBBbz+jMoPP/xQUlJSHH4C FfzbuXOnxMfHO6zT3g9UQO/FF1+UkJCQ9p5Kq42vttW1XU2pVrL6+zfEvtXWvJakvmF0dLQlK2p7 XBV4tiS1EnXFihWWLFcEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAIEOLtAQVfKyF1XbiqrA lrMgpTrXUa3E8+YgpWJVq0Dvu+8+OXz4sHZuppdRN2s6KlCpT3l5eYYgpf6Zurc9azMwMFBbeWmp p4xKSkosWa4IIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIdXMDrApUqWNW/f3/p06ePlJaW 2uVX26eqQJk619Hbku2Wppb5rV27VtS5lGrF4aRJk0QFYn052W5R25xv0atXL0lOTrYyfPXVV9Z7 bhBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBDq2gFcFKufMmSPdunWTQ4cO2VWfP3++qO1F U1NT7T73hsLt27eLWumpD8DZzksFLVUgVgX71DufPn3aWsU2AGh98P/ZuxPwqKq7j+O/7IEkhABh iQhi2ZSlYqNYoSgVXIqAUBBQW3GXgiugbeUt+BarslWq1K0KVEQWX6kIVgVEERGEKrJYAQWCguxJ gEBCksl778BM7p3MTBbCLJnv+Mwz55x77lk+d/CZzH/OuSGeiI+P9ztC876U3h7Wa7l8+XJvVShD AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBCogQIhE6icNm2aJk+e7JXYvMdjYWGhxo0b53d7 sikLRAAAQABJREFUUa8nB6HQXF1oBizNMS9cuFDmfTR9Pcw5n3POOc6gpTm/cFlp6bn168GDB8tM 0QzGuh7m9eWBAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAgEsg1pUI9uvEiRO9DuG5555T r1699N///lcFBQVe61S2sCrblFa2D7O+eR/G3r17O59Hjx7VCy+8oEceecRnU48//rjMZzg8zC1s zW1uXdvzrl692jlP69jNLXxdD3MV6T//+U+niavMfB0zZow1SxoBBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQCBCBEImUJmamuqVfMSIETKf1fnYsWOHzPsjBvKRkpKi0aNHO5/mVq/m6smXX365 3CG0aNFCI0eO1MMPP6yMjIxy6weywh133OFeBXvfffeVCVSmp6fbhtOyZUtnwLlWrVpyOBy65ZZb 3IFOs2LDhg1t9ckggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgjUXIGQ2fq15hKXnZkZcHzp pZdkbp9q3o/TXDHq7+G5PeyBAwf8VQ/YsVtvvdXdV1ZWltdta81te10Ps07t2rWVlpammJgYmass rY/+/ftbs6QRQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQRqsEDIBCrbtWsXMOaTJ08GrK/y OurQoYMWLVqk4uJiLVmyRB07dvR7irk1rLnyMCoqqtq2wvXboZ+D5titj6uvvtqadaanTp1apsy1 Xaz1QLdu3WSuOuWBAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCAQGQIhs/Xr66+/ruHDhwdE vVWrVgHppzKdmPd87NGjh7766iudOHFC8+bN04MPPmjbGtWzPXOFYuvWrT2LA5o3V4S6gqvmeMxV omYQ1fUwt3ldu3atLrnkEleR19fly5d7LacQAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEECg ZgqETKDSDG516dKlZipXclZmcM/cVtV8mtu8Tps2TeZKSs9HfHy8Z1HA8+aqSnM1aGFhoczxWIOU rsFkZmZq//79uu2227R48WJXsfN1woQJzvt22grJIIAAAggggAACCCCAAAIIIIAAAggggAACCCCA AAII1HiBkNn6tcZLV3GC6enpGjdunHOl4pYtWzRkyJAqtnT2TjNXgyYkJHgNUrp6NedhbnFrrrg0 A5sOh8OZHj16tKsKrwgggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAhEkQKAyjC62uc3r7Nmz nYG+I0eO6Lzzzguj0ZcO1Qxselt5WVqDFAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQE0X IFAZhlfYDPSlpKSE4cgZMgIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAKnBAhU8k5AAAEE EEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAIGACxCoDDg5HSKAAAIIIIAAAggggAACCCCAAAII IIAAAggggAACCCCAAIFK3gMIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBBwAQKVASen QwQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQIFDJewABBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQAABBAIuQKAy4OR0iAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACBCp5 DyCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQMAFCFQGnJwOEUAAAQQQQAABBBBAAAEE EEAAAQQQQAABBBBAAAEEEECAQCXvAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQCLgA gcqAk9MhAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggQqOQ9gAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAggggAACARcgUBlwcjpEAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AAEClbwHEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAg4AIEKgNOTocIIIAAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIECgkvcAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAA AggEXIBAZcDJ6RABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBAhU8h5AAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBBAAIGACxCoDDg5HSKAAAIIIIAAAggggAACCCCAAAIIIIAAAggg gAACCCCAAIFK3gMIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBBwAQKVASenQwQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQIFDJewABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBAIuQKAy4OR0iAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACBCp5DyCAAAII IIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQMAFCFQGnJwOEUAAAQQQQAABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEECAQCXvAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQCLgAgcqAk9Mh AggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggQqOQ9gAACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAggggAACARcgUBlwcjpEAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEClbwH EEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAg4AIEKgNOTocIIIAAAggggAACCCCAAAII IIAAAggggAACCCCAAAIIIECgkvcAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggEXIBA ZcDJ6RABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBAhU8h5AAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQAABBBBAAIGACxCoDDg5HSKAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCA AIFK3gMIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBBwAQKVASenQwQQQAABBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAAQQQIFDJewABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAAB BAIuQKAy4OR0iAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACBCp5DyCAAAIIIIAAAggg gAACCCCAAAIIIIAAAggggAACCCCAQMAFCFQGnJwOEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEEECAQCXvAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQCLgAgcqAk9MhAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggQqOQ9gAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAA AggggAACARcgUBlwcjpEAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEClbwHEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAg4AIEKgNOTocIIIAAAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIECgkvcAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggEXIBAZcDJ6RAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBAhU8h5AAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAIGACxCoDDg5HSKAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAIFK3gMI IIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBBwAQKVASenQwQQQAABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQIFDJewABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBAIuQKAy 4OR0iAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACBCp5DyCAAAIIIIAAAggggAACCCCA AAIIIIAAAggggAACCCCAQMAFCFQGnJwOEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAg qsR4wIBApAtcPGBKpBMwfwQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEIhwgS/efDigAqyoDCg3 nSGAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAgCkQCwMCCJQK3Dq4d2mGFAIIIIBAyAjM nPOOcyzPP35ryIyJgSCAAAIIIIAAAggggAACCCCAAAIIIFBTBIaNnRmUqbCiMijsdIoAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIIBAZAsQqIzs68/sEUAAAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAAAEEEAiKAIHKoLDTKQIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAKRLUCgMrKvP7NH AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAICgCBCqDwk6nCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAggggAACCES2AIHKyL7+zB4BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBoAgQ qAwKO50igAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgggENkCBCoj+/ozewQQQAABBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAAQSCIkCgMijsdIoAAggggAACCCCAAAIIIIAAAggggAACCCCAAAII IIBAZAsQqIzs68/sEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEAiKAIHKoLDTKQIIIIAA AggggAACCCCAAAIIIIAAAggggAACCCCAAAKRLUCgMrKvP7NHAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAICgCBCqDwk6nCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCES2AIHKyL7+ zB4BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBoAgQqAwKO50igAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAgggENkCBCoj+/ozewQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQSC IkCgMijsdIoAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAZAsQqIzs68/sEUAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEAiKAIHKoLDTKQIIIIAAAggggAACCCCAAAIIIIAAAggggAAC CCCAAAKRLUCgMrKvP7NHAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAICgCBCqDwk6nCCCA AAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCES2AIHKyL7+zB4BBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQACBoAgQqAwKO50igAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgggENkCBCoj +/ozewQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQSCIkCgMijsdIoAAggggAACCCCAAAII IIAAAggggAACCCCAAAIIIIBAZAsQqIzs68/sEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE EAiKAIHKoLDTKQIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAKRLUCgMrKvP7NHAAEEEEAA AQQQQAABBBBAAAEEEEAAAQQQQAABBBBAICgCBCqDwk6nCCCAAAIIIIAAAggggAACCCCAAAIIIIAA AggggAACCES2AIHKyL7+zB4BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBoAgQqAwKO50i gAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgggENkCBCoj+/ozewQQQAABBBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQSCIkCgMijsdIoAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAZAsQ qIzs68/sEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEAiKAIHKoLDTKQIIIIAAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAKRLUCgMrKvP7NHAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAICgCBCqDwk6nCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCES2AIHKyL7+zB4BBBBA AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBoAgQqAwKO50igAACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAgggENkCBCoj+/ozewQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQSCIkCgMijs dIoAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAZAsQqIzs68/sEUAAAQQQQAABBBBAAAEE EEAAAQQQQAABBBBAAAEEEAiKAIHKoLDTKQIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAKR LUCgMrKvP7NHAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAICgCBCqDwk6nCCCAAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCES2AIHKyL7+zB4BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQACBoAgQqAwKO50igAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgggENkCsZE9fWYfaIGj R49qy5Yt2r59uw4cOFCp7o8fP66RI0cqOpr4eqXgqIwAAggggAACCCCAAAIIIIAAAggggAACCCCA AAIIhKAAgcoQvCg1cUhbt25V586dlZOTc0bT69u3r1q3bn1GbXAyAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIBA8AVYmhb8a1DjRzBz5ky1adPmjIOUJlR8fHyN92KCCCCAAAIIIIAAAggggAAC CCCAAAIIIIAAAggggEAkCBCojISrHMQ57tmzR0OHDg3iCOgaAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAAAEEEEAgFAXY+jUUr0oNGtN1111XZjZ169bVM888o4svvlj169cvc9xfQUZGhr/DHEMAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEAgTAQKVYXKhwnGYJSUl2rBhg23oc+fO1Y033mgrI4MA AggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBB5Amz9GnnXPGAzNgOV1seQIUMIUlpBSCOAAAII IIAAAggggAACCCCAAAIIIIAAAggggAACESxAoDKCL/7ZnnpUVJSti0mTJtnyZBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBCJXgEBl5F77gM98x44dAe+TDhFAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQQAABBEJTgEBlaF6XGjEqc0Vlx44d3XOZNm2aO00CAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAAAEEEEAgsgUIVEb29T/rsx8/fry7jzfeeEPr1q1z50kggAACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAghErgCBysi99gGZee/evW2rKi+55BLt3LkzIH3TCQIIIIAAAggggAACCCCAAAIIIIAA AggggAACCCCAQOgKEKgM3WtTY0a2fv161a1b1z2fFi1aaOPGjSopKan0090ICQQQQAABBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAgbAWiA3r0TP4kBcw70v56aefKicnxzZW670rbQfKyezfv1/p6enl 1OIwAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAqAsQqAz1KxTm45s4caKysrKqbRZ5eXkE KqtNk4YQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgeAJsPVr8OzpGQEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQAABBBBAAIGIFWBFZcRe+sBMfOjQoZoxY4ZSU1PPuMPc3FzVr1//jNuhAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgeALEKgM/jWo0SMYN26czCcPBBBAAAEEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBKwCbP1q1SCNAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIB ESBQGRBmOkEAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAasAgUqrBmkEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEAiIAPeoDAgznVgFsrOztWTJEv3rX//S5s2bnYfq1q2rnJwc tWvXTjfccIN69uyptLQ062mkEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEapAAgcoadDFD fSo7d+5Up06dnAFJX2PdsGGD3njjDedhM3i5YsUKdejQwVd1yhFAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQQAABBMJUgK1fw/TChduwJ06cqBYtWvgNUnrOyVxh2bFjR919992eh8gjgAACCCCAAAII IIAAAggggAACCCCAAAIIIIAAAgiEuQCByjC/gOEw/Hnz5umRRx6p8lBffvll3XTTTVU+nxMRQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQRCT4BAZehdkxo1oqKiIg0aNKjMnJo3b67nnntOW7Zs 0eHDh7V7927t37/fee/KIUOGlKlvbge7cePGMuUUIIAAAggggAACCCCAAAIIIIAAAggggAACCCCA AAIIhKcA96gMz+sWNqN+8cUXy4zVvA+l530n09LSnPV69Ogh8zl9+nRdffXVzntUuhro1q2bsrOz XVleEUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEwliAFZVhfPHCYejmvSmtD3PVpGeQ0nrc lU5ISNDHH3/svEelq8y8ZyWBSpcGrwgggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAeAsQqAzv 6xfSo3c4HMrKynKPccKECUpPT3fnK5L4/PPPbdWWLFliy5NBAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBAITwECleF53cJi1FFRUbZx3nzzzbZ8RTLmysqOHTu6q1oDn+5CEggggAACCCCAAAII IIAAAggggAACCCCAAAIIIIAAAmEnQKAy7C5Z+A54z5494Tt4Ro4AAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIFCtAgQqq5WTxvwJZGRk+DvMMQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAA gQgSIFAZQRc72FOt6v0lN2zYEOyh0z8CCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggEA1CxCo rGZQmisVMO9Rab2/5NChQ1VUVFRaoQKpmTNn2mpdfvnltjwZBBBAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQQACB8BQgUBme1y1sRv3YY4/Zxpqenq4TJ07YynxlPv30U5nBTevj4osvtmZJI4AAAggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIhKkAgcowvXDhMuyBAwfahpqTk6PatWtr1KhROnDggBwO h+14QUGB1q1bp5/+9Kfq2rWr7Vi3bt1Uq1YtWxkZBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQ QACB8BQgUBme1y1sRm1u/7py5coy4508ebIaNmyomJgYmXVcz8TERF1yySXydl/KRYsWlWmHAgQQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgfAUIFAZntctrEbdpUsXPffcc2c05iVLliglJeWM 2uBkBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACB0BEgUBk616JGj2T48OHasmVLlea4e/du 9ejRo0rnchICCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggEBoChCoDM3rUiNH1bp1a5WUlDgD lnfddZfq1q3rdZ5muXnc3P7VrJ+RkeG1HoUIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAALh KxAbvkNn5OEqYAYsX3rpJefTDESaT4fDoejoaPe9KsN1bowbAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAAAEEEECgYgIEKivmRK2zJBAVFeUMTppBSh4IIIAAAggggAACCCCAAAIIIIAAAggggAACCCCA AAKRI0B0KHKuNTNFAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAIGQECFSGzKVgIAgggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAghEjgBbv0bOtT5rM925c6eOHj2qgoICdejQQQkJCba+ zPtPmlu8VsejutqpjrHQBgIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQNUFCFRW3Y4zDYE9 e/aoRYsWNouSkhJ3/oorrtCKFSvc+TNN7N+/X+np6WfaDOcjgAACCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAggEWYCtX4N8AcK9+6+//rrMFMwVlK5HTk6OK1ktr3l5edXSDo0ggAACCCCAAAIIIIAA AggggAACCCCAAAIIIIAAAggEV4BAZXD9w773Ro0a+Z1Dbm6u3+McRAABBBBAAAEEEEAAAQQQCDGB kmIVncxXYVGhSvfLCbExMhwEEEAAAQQQQAABBBCoEQJs/VojLmPwJtG0aVNb582bN1d0dGn8e/jw 4Zo2bZpSU1Nt9aqSMYOe9evXr8qpnIMAAggggAACCCCAAAIIIFARAcchjejYRutO120+8GW9Mbaf Sv/Kq0gj4VrHoRPHsrVr53fa+f1u7f3xe2UfPqJatdLUsm0HtW13oRo3aqCYqHCdH+NGAAEEEEAA AQQQQCD0BAhUht41CasRpaWlqbi4WK4tWVNSUmzjHz16tMwnDwQQQAABBBBAAAEEEAhxAXMVXXHp bRzObLRRio0t++dmiaNQvrowf/AYFRVlPCsXErO3GaUYo9/qiyM5VFxU7F5VGB0Tp+iqNh4A3zO7 Zq6zHSpwJY3XnF2HVGy8Vu6qWBoIi6RDWZs+1vjBA7Wx3PFeqr/OeVE/b39uuTWpgAACCCCAAAII IIAAAuULlP3LsfxzqIGATcD8QsEzQGmrQCZyBIrzdOxIngqNbzKiY2JVO62e4iox+8L8wzp+okjm 12Nx8alKTkqoxNlURQABBBBAAAEEEKi6QKH+OfIi/f2DfVVvwuPMfy7/Qa3TE92lezYtVP/Bt7vz vhKJrX6hIb1/rZ5XX6vzmjbwGyDb+837umHAzR5NtdbUNxeoc1v/t6nwOKlMNu/AJt3T/Up963Hk 1fd26MKm9h9oelTxkj37vl46rXKR56fwqsZmqzyAAJ+4+8v/06DfDKtgr5/rocGd1Pfh+Rp9e3fx pUoF2aiGAAIIIIAAAggggIAPAT5T+4ChGAEEKi/ww/v3atL0NaUndntKT9/XX55fdJRWKE05Dr6n 0cPuLy1QZz302mtqXvrdluUYSQQQQAABBBBAAIHqFiiq5gbtK/AKtfTVP1Soh/xtn2j6FPMpJba6 U/NeG6+Gyd7+dC3UBy897KXNrXpgQDstWLNPTZJivByvQFFJtv7HS5DSPHPpup1GoLJDBRqxVzm7 vva+yFVO4PDeHR4ntNavhw5Wm5ZNdPRwlj585xlt3pZvq/P2lIFq2fpzDex6vq2cDAIIIIAAAggg gAACCFROwP63Y+XOpTYC5Qo4HA4dOHBA2dnZ5db1VeHo0aMyn0VF1f2nva8eKa+qQN1ml9lPXfF7 /WdHnr3Ma65YXy+aZj/SrqfqE6S0m5BDAAEEEEAAAQTOosCRHbnV2npegblhaOmjKp/m87f9Q30u 66Ydh+1BIler/tqcv+RrV7VKv+7Z/IlW+TgrOSHexxH/xWfb13/vHPUnULdxU+fh1M73atZ73+jT jas0etT96nPDQN18+yi9smCX3lm8WBkejUy+d7yOVNduyR5tk0UAAQQQQAABBBBAIFIEvP0sNVLm zjwDINCpUydt2LDB2dOECRMqfb/KnTt3qkWLFu6RFhYWer3XjbsCiaAKJLcfqOuaTdW/d5UOY968 9/WzR/2vqnRkf6R3F28pPclI9bn5eiXbSsgggAACCCCAAAIInD2BON35ympdn33c61arsbEFmtCr u9ZZBnDb+P/TdZ3OMX5QWDZS4zBuAHBuRpKltspskfnA1KXq2bGRcc/7EuM+kAU6fuyodnyzRs+P +YP22M7cqiHdRmrZhmlK8vipbekftK2NM7Y6z2rRKlE7jNVvs8e8oDv6lD3H1rTXzAm99deHnEcS W3VQ/rZTdy00g1T2cXk92Ufh2ff10THFFRA496KBWra6j2onJ/u4v2m00pt31uvLl6l796ssLS7U srXfq19n7ldpQSGJAAIIIIAAAggggEClBEr/rqvUaVRGIDACTZo0sXW0Zs0adenSxVZGJpQEGqrL bQ/o349PLR3Uut/rq929dOk5vjeA3frvZ+xf+rQbo8ta1SttgxQCCCCAAAIIIIDAWRdIrtdULX1+ BCvWpVc30jrLPSy7d/m5mqVXbXWhOZmfdbxQDTzOb9m2o3r2vUnzJ9+tyTPet8x5rj5Y+3s/AaFT QUrzhB/dZ83VVzvG6/KfpLlLKpIoOLxNs9acWl3qClKa51U9SHmq10D7VmSu1DktEBWnpOS4cjlq pXfQuGHXa9zzi9x1sw8fd6dJIIAAAggggAACCCCAQOUFPH6PWvkGOAOBsymQkJCgjh07urtYtWqV O00iNAVOraq0j232W8tVaC8qzR1ZrYULPFdT9lXt0hqkEEAAAQQQQAABBIIuUHbVZFGxz094FRqt z/OjkjRw1Au6wVgZaX288NL78rfVq2TeV/BWYwVk6TaxT097u5xzrD2YaYdWvGHcHNP9aK3HJv69 zJaf7sPVlqh+32obGg1ZBKL1i1/fa8lLby/5TyXfY7bTySCAAAIIIIAAAgggEPECBCoj/i0Q+gC7 dln2EQ394TJCnVpVaYNYcb++3ltgK3Jltn8wzf7rdOdqylTXYV4RQAABBBBAAAEEIlIgRb979g3b zHPXrFKe30jlVl03cJiutJy174NR2nusbBDQUsWWLDn5o2ZaVsuldr5dXTLb2D+v2s4IpYxDBXnZ 2vvDDm395mvn89vvvtOBA4dU4GV73uoaubltb0H+cRWczJejpJxWS4p1LGe/dn231T3GH374Ucfz T5ZzYulhh7u/k/LsLv/YIe083bY598M5R4zQc/U+omPsKy8v/EkjxVRvF7SGAAIIIIAAAggggEBE CbD1a0Rd7uBOtnbtyq2RKygo0GOPPaacnJzgDpzeKy1grqrsY9yrcqElxjz9vZWaMvQq+z2P8tbp 3blrbO33udnPasriPOUe2KejJ47qRO4RFRv3PopPqKWk9HNVr0E9I1exhyM/V8dPFksxCaqdlGQb 0/GD27V3736dLDJWCMTWUmqDZmrQuGGF23aPoDBP2ft368gRc5xGV0ZbiSlpSqlbX3FevsmIiUuw jcPdDgkEEEAAAQQQQCBCBRJqe/54rZaiy/mpba2UDA0cf68+Mu5P6Xq8tXSz7r+hgyvr9/Xbzxfp W0uNRx/qp5S43ZaSUEwWaNOaZXr+qbv1H8tqUs+RXjHwD7rvd/eoaXp13Qm+WMvnjNcfxj/r7iq1 81Na/MqdZe5HKkeePnt/niaOHu0z6Jva+TY9+/gf1Lqpz/2HjQWvB3TPRRfo1F1DpVeX/qALGyfq yN5vNOmxXvrg9Ja97gE5E5fquTenK7NtI3txFXNRHudtP3jq8z5frnjAkEUAAQQQQAABBBBAoIIC fJauIBTVyheYOXOmHnzwQaWmln6hkJWV5T5xxIgRmjhxojvvL5Gbm+s1QNm9e3d/p3EsZAQa6tI7 H9DCP1nuVbn4GX19/ZVq36A0Spe19BXbF0HyupqyQPv+u1xrl76upSvsQU37dNuox/Cx6nllpnzf DdM4o3CzXv1NP206fXL/CV+qW4skHduxTO/OHKZVm+2tnsp1Vv/HnlC3i5p5O2gvy9+lz9/6m2Yv WGgvLy/XbbIm3te78gHR8trlOAIIIIAAAgggEKYC8bXrOLdcLb035IkyK+g8p1ZYHKtOPW6WLIHK 2Ub6jj7TlFROkFM6qn/e+5ilyauUeWF9OQ7ttJSFVtKR/6NGZXZQRW6Q8fH8J2U+h0/8ULdc11Ge AbfKzuzzfz1lC1Ka51/ds1OZIGXhsV166LKLta6cDnLXTNdvr52u28a/p7tvyPQ5Putn/fiYk9q4 bJbueuD3flr/XCMGtNOjL3ymfl1b+alXsUM7Nqy2Vbzm0gvLzNlWgQwCCCCAAAIIIIAAAgj4FSBQ 6ZeHg5URGDt2rDO46G8FpDVwWZm2XXUvvvhiV5LXEBdIvsBzVeUWvfvBWrW/6bJTI8/frCWzltlm UWY1ZeF2vf/Etfq31+Ch7VQjs0VLp92kpWv+V+MfHSx/vxO33u0oMSZPWUue0l9fmuvZoCW/Rm89 0UN7hy/QjVe2s5Tbk4UHP9GLw+6wB1/tVXzmMlIqt+LYZ0McQAABBBBAAAEEaohAwdFDHqvv0hRT TnTNUexQdPL5GtI5VW+4V9fN1Vc7xuvyn6T5lTnyw3otsdS45uEHVccIbp6wlIVSsiR/t+7J/Kl7 daF9bK3VotUu7fCywnLa6F8a94//WLdf5/tzrb2tsrktK6fr/jF/tR1oPvDvum/wz2xlRXm7dJsR pLSuUjUrJLa6TgN6GH8XnNiuWTNm2s6ZPuZa1UlZpSFXtbaVe8vc0v18b8Vey56+9+fquOIH/aSe 9a8Br1V9FzoO6eUHxtqON2lcx5YngwACCCCAAAIIIIAAApUTKPc3pZVrjtoInD2BtWvXGls98ZY9 e8LV3fKpVZXWVvcsmKbteadK9q2b417V6Czxspoyd/MC70HKZp3VPvMqZXhb4LjuT3p35XZrt37T s0d2LSdIWXr6qmn99Pnu0xMoLT6VKt6uRV6ClBmZg9Sj31C19zZWSxt7duZW+/1zLM2TRAABBBBA AAEEwk5gw6fv2cac2vkCJZQTqJRz0/0E9R/xlO3cp6e9Lb+3tzRCd4tfedB2ztAb7EE328GgZwo0 bXi3MkHKu8f/n5au26PPNq3SGwt+0Kr13+u11153rky1Dvml0VdoV45xq4MqPPZsWqhb7x1tO9MM Ur429kbF20oL9I/7u3sEKa/SvOXb9dGC1zRi+HCNGDVZq77YquEDu9vOnPrAgzqQbysqN5PY6k7N WbpNn27cr0+/yNLzU6eUOefJN9aUuyq3zEmugqJs/X1UN4/Vq4OMXVeauGrwigACCCCAAAIIIIAA AlUQIOpTBTRO8S4wYMAA7wfOoLR58+YaOXKkjh8/rszMzDNoiVODIXBqVaW15zX6cNVWo2C/Vk21 r2Ass5rSqFWYb7k/abM+uvHR+Xp8xkY9M/k13fno83pk8lb95dnZusIjCLhq6hwdNG8MWdlHs6G6 c8JHenrOfzVxxkoNv3tomRZmL/nCa0Dxhw//bvwu3froo+HPfqlHHv2zrr/pj7pz8n/1h8fGWCs4 0zdNXqm/vGI8H+vvf8vaMmdSgAACCCCAAAII1FyBgsPGfSU9Vuz16p1Z4S02z+3wC1nvSrnvg1Ha e8zhE6zoWJamzs9yH0/t/Gc1rWcPu7kPhkAib++XmuVeMXpqQE/P2aTbb7hCyYnx7m1To437pLfq dI3mrV6tlh7jfuUt+xamHodt2ZLTuZysVeo/+HbbMe9BSilv70bNsI2xjxavm6tm6fYViNHx9fSb sbP1yFDrCsrP9e9Pzb8bKvboPux1LVnwlM5rbK66jVZMfJI6XfVbTZ/6uK2BTc/PlJ+3ga3uiZy9 +vabr/XfTV/o7TlTddlFrfTPD/bZ6jw9Z5ySomxFZBBAAAEEEEAAAQQQQKCSAgQqKwlGdd8CkyZN ksPhUElJifvZsWNH9wlmwNF6rCLpnTt3ymy3Vq1a7nZIhJNA2VWVm957R9vWv2cP6nlZTWnOst6F fXVFt0G68bFFmjh5ki43trZKTbLelUaq3ThT/f53tscXL98rv5I/EM/o9Tf9ZfIf1b5FhhJiYhSX 1FCtev5Rj97dxw6++G3tK9N2nnZ9ar8n5W+eeUKtGidZzo1Ro4t+qzEjh1rKpK3bj6l2nYaqHWcr JoMAAggggAACCNR4gdgYbx+AHDqQtUZDul3hMf+r9NvrL/Io85ONbagbh11vq/DWUt/3E/hq6Qxb 3UcfGhDC9w43Vn++ONw23mseXqAr2je2lVkzscktNWHOi9YivT/lOWWftBX5zJixODN4fG0v+2dj X0FKc2Xr0ln329r7y5ynVd/nrqtx6nPvDFv912cvM9a5lv+45uH5emL4NV6v1wXdB8v+c9c842/W 8ts0bkyq+7u21y0Duum2wVfryfF/LnPSA1M/MczTy5RTgAACCCCAAAIIIIAAApUTIFBZOS9qlyMQ FeX756SNGjUq52wO10SB5AuGqI91xeOuFzXtifG2qXpbTWlWiK5jBCHv+7Muv6i11y8e3I0kddKV vdq4s9Iy7drvY4tWSy1XMqPf83po6LXydpfIJlfeXebLjWLP1ZqF+/SD9XsvI/B6wTn2gKqrrwY/ 62trb93OHRX6AsZ1Pq8IIIAAAggggEBNEZgz7039Z80qrTWeq1d+ZKxae0XD+zVT7169PO5NKY19 7RnVja3MzKPV9cb7bCfMHvOC8rwFqYyg1HTjWOmjjy65MIQDUI4cLbGs/jTHfVv/y0qH7yOVcWE3 2+dQ8zPz7gp8Zq7brL4KjXtN3uERPPYdpDQGUHRIi2ZYV0QOKtc0Nrm5bjHuLep65K75SMf979dr 3OtypP54e3f5/GIjuo66DWzuatJ4XaZ92RXYU9bh+YG/tIk2ne/V7KXfGffQvKC0kBQCCCCAAAII IIAAAghUWaBSf+pVuRdORACBCBaop0vvHK2Ff5ro3cDHakrvlX2Vxqj+eWagcou7QlFxOd9quGo2 e0D33HSV70Bo3Dm6oJu0boXrhFNB0KbNLKsli0/oiOuw+ZrR0Hd7J/ZqnbXuzt3OQKW39QTWaqQR QAABBBBAAIGaJvDu8/fr3QpMavjED3Vtp8rfB7BWelv9ymi/tI+5+mrHeF3+kzRbr3u+/sj2+Wzg mOFK8Rn5sp0alEzBkUO2e1MmtvqDMupW4NNkdD31NLZXXWcJIEZX4BuBrPl3qft8+1T9BimdVe0R 4cRW5xufj0tUVOT7M3pMdJHiU80ll7n2zvzkUls0UYyf4zJ67dD1dmn+WHetojK/OnQfKk1ER9lu y2De/3L2S6OVlpKiWsbWujwQQAABBBBAAAEEEECg+gQq8GdJ9XVGS5EnsH79eh08eNA58fT0EP5V cuRdmoDOOPmCXxurKidq4a6y3fa/ua/XlYxla/ovKS6s+ApKW0sN68vnDlTOiknKaGtscbWidGvX coOge3K83sfS2VxMA7U3EptOD6Jl+9bVMv/TzfGCAAIIIIAAAgjUGIHEVgP00rNPq3XT0lV2lZtc koa88ITevfcx92lPT3tb/zdlqOVelyc0/6+PuI+biUHXd7LlQy1TlH/MNqSEeqnue1LaDpTJxKjt ZbdKM0o9Vn/5gy68zrozSZmTvBRcpVfH3ih/4boT2bttwdT8bU/qyo5PemnrzIryc30HPs+sZfvZ CfVaqmF6fcv7xn6cHAIIIIAAAggggAACCFRdgEBl1e04swIC5lawBCgrAFXjq/hYVWmspsxsVbEv nhz5+7Xn243a/t167d31rfYf+kHHj5bC7dlVupqytLQCqRMVqFNelcSmat3OCD66tn/d/Lq+2TtQ P21c9vfdP3z8gjtI6Wy2dkp5rXMcAQQQQAABBBCooQKt1alzU8vcknX+BRfo4su6qsOF7ZRer04F A3CWJjySLTN/ZdzL/DF9e7p83wejtPfYb9U0+dSSyfwDW/XGmtIVfI2unqTGp495NBUy2egY++02 evXO9L2bh8eoc37Ybis5t3EdW94zk9gqUfnbPLdKXaaFy7YaW5+29qzuJ2/WtW4F66eq+9BRYw1m aDx69e5MkDI0LgWjQAABBBBAAAEEEKiBAgQqa+BFZUoIhKJA8gV9y6yq7DPo+vJXExbu11fvPqvp s+aG4rROjylVra4cJG12jXGLpt/3qO6c/Ee1b1bvdJ0C/bDyOU2avsw2j0vbn2fLk0EAAQQQQAAB BCJF4NWlH+rCxv73tjhTi6jEDPUz7lE40XJPx7eWbtb9N3Qwmnboo3l/tXXx2PC+YReQKsz3fT9F 2+SMTGyifYvY7/eaNzDwva2uGaS8dOA4dW6wRc8+/4a7uakPXK4O72WpfVPL7RDcR70lthr3k+zg pyfPc7bpgh6/U+0Q+cYiOcHf+lHPsZNHAAEEEEAAAQQQQACBygiEyMf+ygyZuuEqYN6PZPv27frs s8+0f//+Kk1j5MiRio4O4RvGVGlWkXJSkpIbGnO1bP8am5jgf/KF27Xopmu11H+tkDja5LJe0jRX oNIc0kL9Y6SxXWy7q5RZX9qzYpn2eI605/PKtN7r0vM4eQQQQAABBBBAoEYLVDzAVnWGGPW84xkj UNnP3cTsMS/ojr7TVLvwR816fpG73Nj0Ve3OT7PkwyP5wZIv9cDgn1UowFo7xR6UbNXC9aM633PN yq2nZ8aO10YjUPmRpdqd196ud7+Yq3peYniO4kJLTSm181Na/MqdFRqj7cRgZRwlKghW3/SLAAII IIAAAggggECECRCojLALHqzpjhs3To8//vgZd9+3b1+1bt36jNuhgVAR8HdPmTz9Z3rZIGX7fv+r X3a9XA3r11dC/Kn/hcXExer7t0for7PsqxUDOcusD2d6727zMq3zdiRztMbecZUIu3vDoQwBBBBA AAEEEKg+gTrndNSVRnMfuZucq627n1La7mXuLWHNQ0Mn/k5J9l1V3WeEcqLg8AGZId/y/7gv1PqV r9qmUr9u+bchyM89bqw9TdWfV67UL7p2tZy/TEOGTdXCVx6Q588Pa9c919hyVzZfy4mhn4yppfad U7Xx9LbA5zau6MrR0J8aI0QAAQQQQAABBBBAINQE+I481K5IDRzPFVdcUS1BSpMmPt7Lz3VroBlT MgTyv9VnS+wSfcau1J03Ddb5zZopOSlJcXEJzme0YhRfO3hfHjiyP9Fc25aubdS+nX3s7lyzq9Rn 5AJNfPQupZW9haW7GgkEEEAAAQQQQACBahKIStXNEx+xNfbQfb/Vw3c8bClrrb7d2lryoZuslXaO zI1rXY/8bZN14JjDlfX5WnJyvxZbtsA1K9ZOrNgHUvNekXF122r+a8/b2s9d82c9N+dzW5mZiTL+ bqtlKc1d85ayPW91aTkecsmoFD3wyndavemg89mzU9OQGyIDQgABBBBAAAEEEECgpgiU/6PLmjJT 5hEUga1bt2rFihXV0nfz5s1V31hFxyMyBAp+/K/9F9jdntIv2pt7x4beo/Dobsu2rp310GuvqXli sY5n71Pu0WwVGz9xjzF+lZ1Yt75S66SyijL0LiEjQgABBBBAAIEaLnBBt/7K0AT3Z7b8bZ+40+bU mw8crUZJFQvaBZ3K+FzZ2BjERstAXp63Ro/f/nNLSdnk15/8y/b5OrXzn3VOXfs9K8uedarEtdD0 3E79NW7YYo2zbJk7f/yvdPlFW/XztpZtZKOTbSsSpc/1zvItuv26Nr66CMnykpJTAeCoKH7jHZIX iEEhgAACCCCAAAII1AgBPm3XiMsYupO46667ygxuxowZ2rFjhw4fPizznpOuh1lulpn3r9y9e7fq 1q3rOuR83blzp1JSyt+ayHYSmfAV8PieqP1P2sj31yjFyj2wL2hzzdm+2dL3GmXtMO/BGqPaaRlq 0qydmrZoZ7yerzSClBYnkggggAACCCCAQOAEYpOa64arG/ns8PdDw2hLfmOF6B2vTLHN5f0pvfXx pr22MmvmcNYq3fHAWGuRxowe4Ofzta2qJROja383VT0tJWbyoQHXa49tVWctDRk91VbrpdFd9PUP R21lXjNFJ3TwwAEVmss4g/QwV5/+qV9T/bxDQ+fz/senc8/KIF0LukUAAQQQQAABBBCo+QIEKmv+ NQ7aDEtKSsqspiw2lpbdeuutOu+885SWlqYWLVq4x9ezZ09nWXp6ujIyMnTA+OPU+rj77rutWdI1 XcC80Y7lsWn6e8q25EuTBdpm3J/yhQVrSosCnKrbvJWtx7f+1FXPPTtZK5bM0ecfvaX/rH5Pm9Z9 om2bVmv7f7/Sj7t36Vh+ge0cMggggAACCCCAAAJnUyBO195tD+6V9nar2jSrU5oNg9R5l/RSpsc4 Hx3cXlNefUeHco7JYawELCkp1oljB/TBnAn6Va8+HrXv16Vt0z3KKpg1AqVjV682VqhaH1vV/7L/ 0XFLcLFhm1/oSmsVI337tS0059+f6UjeCZVWdajYCE4e+OE7vfnqE7rsonN1ffcL9M2+PI+zA5fd 8eV7+mBb6V61n88fre/2luYDNxJ6QgABBBBAAAEEEECg5guw9WvNv8ZBm6EZqLQ+Vq5cqeho37Hx kydPWqsrNjbWufLSFcx8+eWX9fTTTzuDmbaKZGqkQELDlmppzOxb9+xe1MszWuiuwX2VdvpeOscP fqXVrwzUwnXuSkFJJDS5TJcbPa+y9P7tihf17QpLgZdkRrd71Kf/nWp7TqqXoxQhgAACCCCAAAII VKdAw9aZzuCe50fH3039nWq79jatzg7PZlvR9TV+8Vu6tld/Wy/zptymeb7ise6al+pfq8cowZ2v fCI2uaVeePN19Rlws+XkF3X/37vppeHXnLrVgRHQHLN0iT7qYV9/+czo3nrm9FktWnXQjm3WTWxL m/PYYKX0QABSBUaA1/5orTrJfH1iNyGHAAIIIIAAAggggED1CPiOGlVP+7QSwQJRUfa/9jMzPX/z Wz6OufKyW7du7orfffedO02ihgskddCVvexz3LP493r8NxfouaeH6bmRrfXHYcEPUjpHmNhaNz7/ N/tgK5DbYwQzX3jwEi1at6sCtamCAAIIIIAAAggEV6DoDLs/0/O9dV+pNo3g3s1j7vBo5lJd1+Un HmXByVZqLsYQ6zbvpncXL67kYAdp0Zp31DjZ/1cBnnt/2H+CeqrLhm17arKH56bnb9a670r3QUlu 3EnLln/k/AGit4H6ClKadZMT472dUmYLVm9j83piJQqjE5I9am/VkWOeKh5VyCKAAAIIIIAAAggg gECVBPz/dVKlJjkJAe8C8fHe/9B01TbvS+ntceONN7qLly9f7k6TCD+Byn35kqD2Ny/SFV6m+e26 ZfrWI7Z33d2jfX4B4tmE56ZNHrvMelavQD5PXy163V6vWR9dN+gB9eg1VJf3HKTMbn2UmXmVxxZZ p05Z+vRwfZN95qOwD4AcAggggAACCCBQnQLRqp9xkaXB1j4DSe6CHa0AAEAASURBVJZKlmSMzmt/ jSUvJcSf6Zo5zzYvVb2URFsfnplLrr/L9nms+7CRauD/FEXH2CukpMR5NlsN+ar51mveWau+2Kq/ jH/SNi/PAaV2Hqy/vrZan2yapgZJ5blHK8XSQKMLGhp3X/f2iFaXwX/S7R73/jxxwv6pPym9vWat 36G/TX223M/rbYxxPvHCv7V03V41q+vNuaJjKx1vQrJ1NhV73/2k03UeY71HzRsmlTZKCgEEEEAA AQQQQAABBKpNgL1Lqo2ShjwFPLd+PXjwoMz7T1ofbdq0cWenTZumLl26uPMkappArJLSrHNqo9Ra 9i99rEed6bjW6jdnpc5f9Kymz5pb5rBZ0LLnaPXu/1s1b7BbB16a6K6TGO/rf29xst2BKCNJ3r4C cTdkJKJr1bJm5dn2wdVPafpiyz0y243W2P+5S2lev9Ep0MH/LtacP/3esq3tFm3YnKW2Xc+39UMG AQQQQAABBBAIHYEY9R31uno/XCiHw/h8FBOnaPsGKuUMNVq/vH2KVg19uorne2u+8m2aW5a+tXGf ioodijJuSxET7fUDm62zhHrttNp9TqxxTqUmbmvLd6bqvtHx9fTLG+4ynneoIO+Yjh7P08mCQqOr GCXUrqWk5GTj86v/H43axmWsPJ1yer5SlPOWHLbjtkyS7p6yWXc6Tr8vomON23148YlN0aVXDdGs TYNUmH9cR4+aYyyQwxhjXEKsEmulqLYx1nJtKzW2UwM9v/NvtWrDkEq972KTmmnWxh9V4HSMVlxi 4qntbG1zJ4MAAggggAACCCCAAALVIRBlBJPOxk4p1TE22qgBAmlpacrJyXHOZOHCherdu7dtVgcO HFDDhg3dZYWFhWX+ELa2MWHCBI0ePdpdv7oSFw84dSOXWwfbx1dd7dNOqUBhYZ4cxuLB6DgjQFj+ 90KlJxbnKTd7n/GlxgkVGz/Sjk9IUUrDc4xf8lsaKS5QQWGR81fvcf4aP11PilVCYsXuzuN73Hu0 aOCVWuoeaWcNf+U1tbJFQ90H3Ync9ZM19okX3fn2ty3Qnb9q586TQAABu8DMOe84C55//Fb7AXII IIAAAggggAACCCCAAAIIIIAAAgggcMYCw8bOdLbxxZsPn3FblWmArV8ro0XdSgvccccd7nPuu+8+ d9qV8Fxh2bJlS504ccJ52GH8VPumm25yBzrNQmtQ09UGr+ElEGcEKBMSKxmkNKcYk6TUBueraYt2 at6qnZo0a2YPUjrrJJxq21+Q0lKvokFK8xSf487P1l6zguuR2U/nlROkNKsmJtlXk3puR+tqjlcE EEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBGqqAIHKmnplQ2Ret95auvIlKytLW7duLTOyu+66y11m 1qldu7bMVZQxMTF644033MfMRP/+/W15MggEXcBY0GkLOZ44JnOjLf8P456W7021VTkvw7Yvru0Y GQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEaqIAgcqaeFVDaE4dOnSwjebqq6+25c3M1Kn2gI1Z 5tou1ky7Ht26dVNKSooryysCISNgWw25ebxenf2ODh4p8Dq+wiNbteqlwZq9wnq4s1o2b2QtII0A AggggAACCCCAAAIIIIAAAggggAACCCCAQI0XiK3xM2SCQRfYsGGDOnbs6ByHuWLSvC1qVFSUe1y1 atXS2rVrdckll7jLvCWWL1/urZgyBIIrENdWXfu10aYFW9zj+HbBSI1fYGTbXaUrWrdXapJ0PHuv 9u5cr02bS+u5Trj8gcfVNs1yr03XAV4RQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEKjBAqyorMEX N1SmZq6qLC4uVn5+vsz7TlqDlK4xZmZmav/+/erVq5eryP06YcIEZ3AzOpq3qxuFRAgJxKjtoGm6 rp2XIW1epo8XTNXCWVO1dPFc70HKu+drQNfzvZxMEQIIIIAAAggggAACCCCAAAIIIIAAAggggAAC NVuAFZU1+/qGzOzMIGNCQoLf8aSnp2vRokXOOq6Apregpt9GOIhAMARimumacRvVbv0CffSvP2nd 5vIHkdnvf3Xldb3VNM1YbskDAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAIEIFCBQGYEXPRymzOrJ cLhKjNEukKCmFw3WLcZzUN5h5eYcVN6RIzpZfELFRadqxifVU520JkpNq6c4dnq185FDAAEEEEAA AQQQQAABBBBAAAEEEEAAAQQQiDgBApURd8kDO2FzZeShQ4cUGxurtLS0KnV+9OhR53nmvSzNdngg EOoCcUZAsoH5PCfUR8r4EEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBAIngA3/QuefUT03KlTJzVs 2FD16tXTxIkTKz3nnTt3qk6dOs5nXFyciopOL02rdEucgAACCCCAAAIIIIAAAggggAACCCCAAAII IIAAAgggEEoCBCpD6WowljICTZo0sZWtWbPGlieDAAIIIIAAAggggAACCCCAAAIIIIAAAggggAAC CCAQngIEKsPzukXMqBMSEtSxY0f3fFetWuVOk0AAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE EAhfAQKV4XvtImbku3btipi5MlEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAIFIECFRGypUO gXnWrl27UqMoKCjQqFGjlJOTU6nzqIwAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIBD6ArGh P0RGGC4CM2fO1IMPPqjU1FT3kLOystzpESNGaOLEie68v0Rubq7XAGX37t39ncYxBBBAAAEEEEAA AQQQQAABBBBAAAEEEEAAAQQQQACBMBEgUBkmFyochjl27FhncNHfCkhr4LIqc7r44ourchrnIIAA AggggAACCCCAAAIIIIAAAggggAACCCCAAAIIhJgAW7+G2AVhOL4F1q5dq+ho3rK+hTiCAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCISPAFGf8LlWIT/SAQMGVPsYmzdvrpEjR+r48ePKzMys9vZp EAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAIDgCBCqD414je500aZIcDodKSkrcz44dO7rn agYcrccqkt65c6fMdmvVquVuhwQCCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggED4CxCoDP9r GFIziIqK8jmeRo0a+TzGAQQQQAABBBBAAAEEEEAAgWoQKClW0cl8FRYVqqQamqOJsyTAdTpLsDSL AAIIIIAAAgggEG4CseE2YMaLAAII1AQBR3Gxio2JxMTEKCi/GCkuUEF+vopjYpWYmBScMdSEC8kc EEAAAQQQQACBUBJwHNKIjm207vSYmg98WW+M7cdnvVC6RuZYasR1cujEsWzt2vmddn6/W3t//F7Z h48YuyGlqWXbDmrb7kI1btRAMb5/yxxqV4XxIIAAAggggAACCARJgEBlkOAjpdv169fr4MGDzumm p6dHyrSZJwJ+BIq1/e0R+tusZafrDNKjs/+sJnF+TqnuQ4VbNeum691fYKnbZE28r7cCOYTqnhLt IYAAAggggMDZFCg2AhI5OnQoW7lHjxgdxSs5JUUpqWlKTa1DIOJs0le6bYcKLOfk7Drk/HHcGf8w rihXHy6ap8+++k5JSfXV+aoBuqxTCxGDsmBXKnmWrlOlxlDVyg5lbfpY4wcP1MZym7hUf53zon7e /txya1IBAQQQQAABBBBAIHIFCFRG7rUPyMzNrWArG6DMzs42VnglKt9Y7VW3bl352042IJOgkyoL OArzVGguG3Q+YhWXmFCNv+YuVqHxHnGcbj06LklxMaczIf1yTHu/dAUpzYEe1EnTKKBRwkLlW40O Gdcp0EOw9k8aAQQQQAABBEJUoEBfrXxXj997l/b4GeEtD7+oITf2Vv3keD+1OBQogQSPjqojmHgw a5X+OOYP7pbnzFiu99a/q7p8o+A2qWzibFynyo6hKvV3f/l/GvSbYRU89XM9NLiT+j48X6Nv7y7e LhVkoxoCCCCAAAIIIBBhAnxOjLALHozpFhQU6Mcff1R8fLwyMjJ8DmHevHkaNGhQmeMjR47UpEmT ypRTENoC2eun6fEnpnoMso36PDZNv7yomUd55bLHd72jV433xbcep934l9W6vFU9j9JQy8YqtpZ9 TMGIrybah6BgjMFjCGQRQAABBBBAIIQESvJ/1MjMDlpVgTHNmnKPzOeMpVlq2zipAmdQpaICJQ7j dgEO86d5UYqNDd6f7z9u9Vw710IxZ7xMs6IK1AslgcN7d3gMp7V+PXSw2rRsoqOHs/ThO89o8zbb zyL19pSBatn6cw3ser7HuWQRQAABBBBAAAEEEFA1Lm5CEwEvAmaQ0lwd2aJFC51zzjnaunWrl1rS xIkTvQYpzcqTJ09WWlqa1/MoDFWBPG173zNIaY51ixY+0UObst3LLCs/geLtWuQlSGk29MXX31e+ Pc5AAAEEEEAAAQQQ8BA4qj9VMEhpPfGjL3das6TPUKDg8Gb9vGMjdb2oifFsrPkrt59hi1U/vVGL Cz1O3mEEUD2KyEaEQN3GTZ3zTO18r2a9940+3bhKo0fdrz43DNTNt4/SKwt26Z3Fi+X5E+XJ947X Ed4zEfEeYZIIIIAAAggggEBlBfgNZGXFqF8pgSeffNJW//zzy/6C0tzq9ZFHHrHV88zk5ORo1KhR nsXkQ1igyM/YPlqxyc9R/4eyv1zg85f9iXHB+5W5/1FzFAEEEEAAAQQQCB+B9f9+Xks8htt16HP6 9+pdWrVxv1Ybz0/W7dBrcxaoSyvPfRo8TiRbZQFHsX1V2tGj5mb9wXmkn3+ZHhw2StdcPUBXXv1b TXptmlL56B2cixHkXs+9aKCWrd6p914Zr5ZNG3i5R2200pt31uvLrbe7MAe9UMvW8sPSIF8+ukcA AQQQQAABBEJSgEBlSF6WmjOoGTNmuCczYcIEr9sV/eY3v3HXcSXGjh2rXr16ubLOV3NlpcO57ZGt mEyICpR+b9HGPcKMZqeS3856U/uq9D3LYW1c9OKpRppZ2nX3QAIBBBBAAAEEEEDgzARO6OM3T3/e Ot1Q34cXaOKowUpLrq3oKONPSOMZl5iiVu1/ockLsjT/zbfVQa3VtcPpD3tnNgDODkGBqPgGGjz8 93p8ygt6asoUde3UwtiMlkdECkTFKSk5udzrXyu9g8YNu95GlH34uC1PBgEEEEAAAQQQQAABU4BA Je+DsyZgBhWzsrLc7Y8YMcKddiVOnDihxca2MNbHkSNHNG7cOC1atEhLlth/y/3FF19Yq5IOC4Et 7lHucafmau2W/e5cRROFuz/SW5tP197lrd2KtkQ9BBBAAAEEEEAAAa8CRUe1aU2u5dCluueWX/gJ SsTo3LZd9PKmVWrfNMVyHkkEEIhsgWj94tf32gjeXvIf+dt5x1aZDAIIIIAAAggggEDECJQueoqY KTPRQAlERdl/Y5uQkFCm61dffdVWNnfuXKWklH7B0aNHDzVv3twd8Fy+fLkyMzNt55AJB4E2yuzZ VOuWlG7/s3Txh+rZfrDKvit8zadY3y2ZbjnYRtfddq2+mj5VpQFQy2GSCCCAAAIIIIAAApUXiI7y +HzW2NgVpfLN+D/DoYK8XGVn5+jIsRPOqtFxCUqtU1d1jHvTJ8RW/Pe0jqICFRYZ9z+PjlV8fLwl oOrQsZyDOnjokE4WliihVh3Va9BQKUnxPoZm1j+snNwcHT9x0qifpPqNmig50Vd9H824ikuKdSz3 kA4fylF+4anQTO3kNGMM9VW7nDYdDmM+UTE6cTzP1ZrzNTv3mBzGf3KUuMujjHoef3a5j7kSpbVl uB/SgYPZzjma5vXqp6tu3ToV+gVziaNQhScLVRJtrKiNT/R5ju9rIuUfO6S9+8xrUqTK9u+aj/PV GMsR43odOXrcFFFsTLxqJyc5V/rFGO9hz0dUtOHkWVjV/Blc26p2KRXrxLEcHTpUeu1S69RRnVTj 30t8Jf+BBnD80TFxtilf+JNGirGVkEEAAQQQQAABBBBAwPg8DwICgRLwDFya/Xqushw4cGCZ4Ywe PbpMvTKVKAhxgS06/xePKckIVH7sGum6P+mbgwP10wYV/FM170stXVy6ilLtbtZF7eP1b1d7VXot 1vHs3Tp8cL+O5Z36kkyxtZRcp6HqNjzH+GKqgmPz6LvgyC4d2L1HxwrM/W3jVCs1Q+lNm6n26b/T K/MrYkd+ro6fNL6siolRQlKq0Vp5D2NOxhd/5vdb0fFJxhdhFQ8Fl9ey83hxgXIPZCnn4GGdKDq1 f298UiOlNTpHaXWSKtQElRBAAAEEEEAghAWMIFiBbXjfKP+kVKdabkVZYKzWXKbnn7pb/9lmv/+i tcsrBv5B9/3uHjVNT7YWl007Duieiy7QxtNHXl36gy5snKjDP3ylJ+7rpU+99NHx6jF6+i/3Ky2x NBiabdQf76f+BKN+XUv9sgOxlDjy9Nn78zTR+BvG14/pUjvfpmcf/4NaN61nOfFUcs+mheo/+PYy 5WbB/PHXGE/7odTOf9Y7rwyTv3Cq+Yn22IEtmvD7X+kD22pZV1uX6rk3pyuzbSNXQdlXxyHd3bGN 27r5wJf1+th+Zb9Q8HFNjuz9RpMe61X1/l0jKsrVO/98Tk9M+aurpEKv5njfMMZbetUrdJq90hle W3tjFc05tGPTMv3P4CH61scpHa8epbFj7tc59Wr7qHG6OAjj9wwObz94xAi58kWU/wvFUQQQQAAB BBBAIPIECFRG3jUP2IxLSqy/3ZVzVeR5553n7n/evHnutJkw70vpLZiZbNz/gkf4C8TWuUAX39JZ H89a457MJ59u0k/7/tSd95fYt3aO7Y/zK67/pdLjV/o7xc+xXG1bOU8fL5ioTbt8V2vZ7R716Hub 2jYr+yWSt7OO7Vqmd18dplWu7Wk9KvUYPlu/urKDEsr5DsF1muPge3p42P2urFretkAjftXOnS+b KNamGRfoH4tdR67SqNeeV9Pq+GKxcL82LfmH3p0+w+eXbmo3SL+5eZh+1irDNQBeEUAAAQQQQCDc BIyVZ6X7m5iD36q7/jhD86cM9RsMK2+ajvwfNSqzg1aVV9E4/vH8J53P4RM/1C3XdfS7Es76k6z4 mJPauOwV3fXAWJ+9bPhgvK774DO9s26u0hOLtfpfU/XgmL/4rX+tUX/xujdUv5xgZeGxXXrosou1 zmdrpw7krpmu3147XbeNf09335Bpm1/2vm3lnG0/nLvmHR07OUz1fEQqE1NP6suVr2v4vQ/YT7Tl PteIAe306AufqV/XVrYjpRmHbaVtzq5Dsv+1V1qz7DWZZVyT35dWKJOqSP9S4bEduu2yS2x/E5Rp ykfB+Q3q+DhSseLquLYV68laq0BvTbpdE2a8by0sk97wwST9+oPvtWzjNCV5RgZP1w7O+KUdG1bb xnvNpReWDW7bapBBAAEEEEAAAQQQiESBM/pBYSSCMeeKC0QbWwKZ27a6Hp06dZJ5T0rzsXHjRg0a NMh1yPk6cuRIW96Vef99/3+YuerxGtoC+cWJat7lRtsgv531pvadWpRnKy+b2aO10xZaiq/SJT9t KJ00ft5fyYfjyFeaN/ASTZvqP0hpNvvtihf1wsjLNOvddc4tpfx1tW/1ZI0Z6TtIaZ67dNpNmvT0 Y1q2wl9LpccKj+aUZoxU+fHGfB3ZZzulWjKFB1dr1k1d9Q9/QUqzp81z9dofr9Q/3l5drle1DIxG EEAAAQQQQKD6BaLr6rKB/9/encBHVd39H/8SsrMkIGtUFmuCKItQKigYQHB7oriUvSq4oRZUKkSf KhWxrmxPqQsIBcEFUFDKJsoiAopEKGjAKnGBROHPJiSEACEh+d87MJO5k5nJJCSTyeRzX69p7rn3 3LO8z2CT+c05p+h3eLOC/StHq99jr+voKXORzdIfhSf36AGPQcoEtYx3/1vOa8nX6M0VHr4B5qYZ d/S8yGuQsuiRNbrvyZe0cFay1yClc/57nnzL6956+TkZRhCteJAyMv5G3fHQON0xdEhRcWfP3hxz g+avSbNcL/0f6B3kaTXbSMN1/8qnSwhSFlX/8oNX6qfDnme6FuU8c+YhJmbJdmZMvAUpi7J7rb/w iP7mJkjZ7rpheuixp40vyrl/D9lL37p1T5l/Py2vsbW3xdefv2z7oFiQMjL+auP99JSb99Mh5ZlT Fd0cldV+GbNwZ7h8aaBpk3MLGLvpHpcQQAABBBBAAAEEgkCg9H8HBUGn6YL/BMaPH++oLDMzU9HR 0bZZk+3atXNcN08SExMte1Pab5qzMufNm2dP6pJLLnGcc1LFBE4bC542SFQfy4TA97R554ESO3L8 h+Va7ZQr7rYhusBYA9WnGKfTczq6RbPu7efhm/ytFNfMOXPR+ZY3B2vWR98UXXA5O/bdW3px0hsu V90n925ZcmZGooe6LE+VYeXZ8p4mX3Bkk9546K7iMwOa9dJVSQ+o+7W9LE02EzveuUtzV/n+oWKx AriAAAIIIIAAApUoUFO3PfpusfrNgNd1HRtp6Zr/6GRp1rE3FpJ9bXiiY8lQe8HDnvtAq7fs1Zc7 Nmreol+18etf9Pbb78p1XYbpyd2VkVnq3/rU2FjidfHnu/Xl9gP6bFOq+nWOsVdt+7nfmIU2cfJb jmuu+QdfZ10G1QzW7jvmKVCbq3890tNlpl8vvb/2Z3226G2NGD5cI0ZP0sataRrer6ejTvNkyqMj ddApNti65wh9vP57ffL5j5o981VL3p4PzdaqTT9ohXHf/lqVMtYy09H5gZMuS99Gxt+n+at/0BeG yRdb0zV1ymTn7LbzF+eleJwpWSxzKS+cS/3ffjpXn1nq66N/f75H0ye/oCH3PKLXFmXog4UfWHKY iXeMMVi/ZbeWzbirjDP5ym9sizXO64VsTb/zEUuOF97eqrWLjBVWhv/F9n7atP3/6YPFK9XVFqRt oDC3fztUUvvzj+j10Ykuf3cNUOLlTS19IoEAAggggAACCCCAgClAoJL3QYUK9O9vnUHnqbJly5a5 veV6vUePHm7zcbEqCJifaMWo3Q1DLY1dvfxTl32QLLeNRI52fDzBcrFX9w6WtG+JLK2fPFg7XDJ3 uuOfGjNzmyYvWKrHJ6Vp8tub9JdRycU+JNvxZj99sy/X5WkzmaFVT7tsFmRcvfHRuXru7e80ef52 jfvHW7qxU9GjtoBoRlE6cM+ytGnKXcU+dLtv0uf6x6Sp6j90lG4bNlWTZ3+s/omtLN3YMv0l/XDU cokEAggggAACCFQRgbDYSzRnmvX3L3vTn3/0evW4vIHe/vc65fgwwzJn3za947Iv4svzd+ieW7sb +4GHO5Y9DTH2CY/vcL3e37RJF9srO/tz5oebXK54T97y2AJ9MHmkGsfWNr4kGaLI2nEa9a8t6uHh MXf5HzF+33HN/+XXu92WkLNvu2Zb+tjHWCr2PTVraJ09FhJeX3eOnavHhyY4lfOVVnzhNKsyJEKx 9RsoJjbWmGl6qVM+qfUlrVWndj3VM+7bX3U8Tae0PCn1fOhdrVr0klo0qaeahklNYy/zDr3u0ptT xlly7pg6Rx7jsZacpUucW/152jDXGlSdt36amsQ6LzIbovMv6a4FxrYHzse2nUcUHllbYSHOV30/ L9ex9b1aKf+E9jnlTxj6lnp2aOb492K7VSNM5/+uoyYtStfnX7/idtlXf7X/ROY+/fj9f/Xdjq1a PH+Kulwer7dWWpd6eXn+M27b6NRNThFAAAEEEEAAAQSqqUAZf12vplrl3O20tDTb7EJzX8aKetWr V89W9pEjR8q59b4Xd/So92hFamqq29mUBQUF6tOnj6WiOnWsO+ZYbpKoEgINLk9SG+eWbnla3x/y sE6Rka/AWHZ07nqnBy4bo9bnO38o4XTPy2nursX60GWSX+8nVuuOW25Qg7q1HN/aCImsr+Zd7tfo qVOLfUj2yadfFavh2HefaJ3L1dtf2KTru3UyPnyrqZCaEYo5v4uuf+I7PXL3mffz3gyXBwI0mbtr hd63mPXRIzOnqk0zY9ldpyOk1kW66uH5uvNap4tK0boUy8PONzlHAAEEEEAAgQAXaNXtbs17+18e W/namD+qlzHDcv6KL3XS00RDY/2L5W8Mt5Rx/WOL1L1NE8s150Ro7Ys1fr51pYpPJr+qI6ecc3k+ v94IUj5xT8/is+dq1NOwmdZgl1mKt/wPuuTPznY3s/O0Vr/ziKVBL8x/2djP0nLJKRGmPg/OdkpL 785d43alkILT1vryT5VqKqujDrOPzw+/XsaCJMWO1j0Hyun7dMb9HBl/hpXrcc71FxxTmlMgOKbz 33WBh005L2zfw9KfT775scxLvkoVN7YlAofUsMyUPT+qljVIaSmgpkJD3X2046f2G0u8PtKtje7o m6i7B16nF5/7u6V1ZuLRKRuMf/cNi13nAgIIIIAAAggggAACpoC732aR8ZPAddddV+E1mcutmkdW VlaF1+WpAjO4aAYdZ8+ebVvi1dy30nyNHTtWx48fV9u2bd0+mpFhjeZ8/vnnbvNxsYoJRLZRtyTr 7LsNX7jOcyzq0y9fzC5KGGfdb+qtaMsVXxLGrMxl1lmPcbfN1E2dPK+/GtKgl/70xFBL4XsXzVV6 jvOlXP20wTrbIO62t5QYX98509nzmrrofyZq9DDr3qxuMgbIpVx9v+ppS1u6P/GYLqprueSUML6V f/s/ndLGErBf/EfHLVdIIIAAAggggEBVEmjZ4VZtSEnVQ0P7emz2P5JvVo92V+n7X7OL5ynI1KoF 6Zbrd9/exZJ2l4i7NNESbJLWaM8Byy9h7h5TZPwoPWkEKT39kXt+/OWW50rK3/iiyyz5F6/6T/F9 KvN/07LZTjMiNUB/uNR7QCa0dnPd4bQUbVbKZzpethikpX3uEiX1USF1lWjZk3SN9h9xWovWXaGl uFYu9Rfkyfnd1bh1c7ld5dRoV+GpbMuWBb8Yy+16/kpkCR2pzLEtKLSsOrN26l/1X3f/xrx1wV/t L/As3Krzg5q7+icN6tXaW0u5hwACCCCAAAIIIFDNBTz9DVfNWfzT/ZgY6z4p/qm1cmoxZ4wOGTJE 69at0+7du22vZ555RlFRUR4b1KJFCx04cEB79uyxBTS7du3qMS83qpJATbW85k+WBv/4zkLtt35h /Mz9vDRteCfFKW8fdWnvunOR021Pp3m7tW299Wava66wXnCTqtf+lmIfkqXvdQr65/2ozausD/Yo YVnaC64drdutn3lZCwiU1EnXvg0o0T6kwZXWvn37pQ6X3+dcgSJDOxBAAAEEEKhWAmG14jRk9DSt Xr9FQ/vd4qHvaRp6Q0tt+cm6ikvu0d8se1NGxv9VcbHu5vW5FBtSX9dalkc1vmEb6pLHTTKmZVOP ASwze0RsU8vvdiXlj6p3vpy/Unky67ib/Rut0w8j4y8yZi4WKj8/z+OrsCBf4TEep1y66VnZL5XU RxmtbdvtHksF+ac9B54sGX1IVET9+7/b63mWZEi0Zcyuu/b3bmeS+tB0I0sljm1ojK607JOapnuM f2OTZy1VZo6P04v91X6X2Z/mXqQfrt2ptcYetHNmPqeLmlSfzz18e1+RCwEEEEAAAQQQQMBVwIc/ 91wfIV2RArHGXiT2WZDlWU+tWrXKszi/ldWwofdvI/utIVRUrgIRza7RjXpaKxylvqfNOx/WTW2s S4oe+Wah5RvRFw8YqKY+fLblKPbsSd5vv1j3pmyWrFZNfFg+Nuxitb1W2uIcjHT5r6b1I6YHjD/E Syo3VJGe4/OuTa/EtMvX+ps1U6TxffTck54jj2E1jT08q0TfKpGVqhFAAAEEEKiiArXrt9CDY2fq nlEvaPGcyZo0dWaxnoy45U/6aOtHsq/KmX/ymCVPRP0YL8tXOmetqUu6DJFmP+W4uGnbr7r0Ruuq HI6bZ09OZrn8/uKawSVdYv6QmpblN83Ha7iUceLIHksw9uQPLxozTF90yVV5yRL7WMFNK5f6jaBd e2MG6vazy79mpczS3syhahbr8ou50Zcda96yjEetc/hycOWObYT+NOZ9TV/Z3TJC70++W+8bKxh3 7/dXPXDvELW8oEGx96T9gcpqf0T9i9Wo4XnFl1+2N4yfCCCAAAIIIIAAAgi4CDCj0gWkspPt2rXT rl27VFhYWK4vAn6VPbLUbxVopMuH97FcWr38U8vyRtJhbVs225Ln6h4dLGlfEwUnziyB7MhvLEfs 23/8ItQowdrOtO9+dRSjY4dlKbnT+arjaR2qoqeqxFnuge+swd2MCRo3uLWeuLODx9djg7vpwy1V ons0EgEEEEAAAQTKKBBeu7H6DX9Zn67faJmdeKa4rzTlnQ2OWYchNa1hvaSbO/k8uy3z158tLbyw icf15y35Kj+RUIYmZDvMyvBwNXgkQtfePcapn2nq322YMg46B8JPG/tYfqD7k8c75ZN6d2puSZ9b wr9jG1H/Mq34+CO5W09m3YIXNfiGS9Tztju146cDPnbLP+1PurkzQUofR4RsCCCAAAIIIIAAAmcE in8FERm/CTz11FMaMMC6X9369evVsmVLmTMr33rrLSUlJSkkxLeQit8afo4VmUHYQ4cOad++fTp6 9KittISEBBFMPUfYKvZ44459dbGW6Ed7u7c8re8P9VP7BmcifXkZn2nJt/abxs9Oz+qSs/ecrvp2 6hI8vLjDxT7vc3nq0H5LHefVr+NI52buKmq/efWE41YQnpgzGHaWsl/Hyr4nUClrIjsCCCCAAAII +Fcgun6CXtm6Qw93bGNZAWPTFzt1+p6r3QYq8k76vqRoaKR1GY1f9pl/NzT1byfLVFuasVdm21K0 9Ae17v1nRfOXuVftVl16u9xfov49lyimcx8lNqut/yyYq70uORKGztPvGlrXP3HJUsqk/8e23gVX 6MOvd+nLVQv1l+TkYu09+cMK3XfLCg1+7mM9fGsnj7Mrzzzon/bXjggv1k4uIIAAAggggAACCCDg TYA/h7zpVPC9/v3768SJExo6dGixmszlX/v0OTOT6/7779fzzz9f5QN5Bw8eVN++fWUGY90dp429 UFyDsq+99ppthmnt2rU1duxYmXtdcgSJQN0OujpR+tHp7bDhix1qf0t7o4OntfPTNy0dvTHpmmJL b1kylCbhbj9MT89bPyPTb4ezi3LW9PMf4WEujSlqiR/OjCBls1Zuv9HtvvKdim7bX+eV52dD7ivi KgIIIIAAAghUkkCN8CZ6fvmHuj7pdkcLslK26YSxtV8dN9+1XLlqmx4d+Hu3QUxHAWdPoutYg5Lx Leu7ZgmIdMFp6y+WMZ1f0vKZ9/nUx4DoQBVpxNer5rltaVbKEi113tL+bK7G1z2rN0ZdW0Lgzm2R josBM7ahdXTljXdr0/UDlZ6WqpkTBmvl2WVw7Y2dO+YGdWn7g674XT37Jfmt/QWFLivjOJrACQII IIAAAggggAACPgkQqPSJqeIyDRkyRHfddZfWrFmjfv36ud2fcsaMGTJfzZs317vvvqurrrqqygXs JkyYoMcff7xUkObMyxEjRjieMffZTHbzLVJHBk6qmECE4m8wvhW8foKj3T++s1D7b2qvxie36bPl zrP3Bujy1tb9Kx0PleHkxx0/KrdvJ58Cn+HRjS01NIkr+uM/RC6ByvLen9Fl0sHhPb+oQAk+Lltr aXbpE6dPWZ+57Fm9/MxAn8ysD5JCAAEEEEAAgWAWiKwT69K9SIV4+G5h7uGDttUWSv4jNE9ffz7L Uu55sUWrWlhuVHIiOvZCY5UQ48t3ldyOYK4+P2eXnrUs6ZqgKzvv15cuwTrTIDL+Rj339LO6qkPL c/6dOeDGNiRKzS/prGdn/qBHft2ukTf0srzv/vbCB5Ygud/aXzNKbZz2EL2wSa1gfjvSNwQQQAAB BBBAAIEKEHDzPdcKqIUivQqYswR79+6tI0eO6MCBAxo0aJDb/Onp6erWrZtt1uHo0aOVne00s8vt E4Fx0ZwVWdogpdly02XUqFGOTpSlDMfDnASkQPRF16u7pWXv6eufD+vQtsWWP7ovvruvGrss32p5 rLSJ7N900qdncvTL90ssOevGxDjSYU1bWfdm2vKzMl2Ci47MZTgJq9PQMoNx7+6DPra7DJW5PBJx 3qW2D91cLpNEAAEEEEAAAQS8CkTGN1Do2UBlVL3z1dYp98kfJungMWO6ZQlH4akDWr4g3ZIrOrI8 fxm0FH1OiRrh4XL+rlpWyoc64tsvmqWuNzTcQwS41CVVrQfyjh92Wtb1Cn389Ub9nxGsW5fys5at 3a7Fq1ONn9/p0y2/au2it9WtHIKUppA/x7Z0IxKiBhe01+xNmyx/K0g5lm0X/Nb+GnX06MyftGnH Idvr2g4XlK475EYAAQQQQAABBBCo9gIEKgPsLWDu0zh37lzl5eVp9uzZHls3adIk1a1bV+3bt9eW LVs85qvsG2Yw1XlWpL09ZjB21apVtlmi9mvufpr7eDofVSU469xmzr0I1GymP9zdy5JhxbRHNWvK e07XWqnHlW2c0qU/jWjUWpYSMqZo9yEfIoo53+krp6VpzZprRTnNATCKsH4ONVv7DuaW0MAcHTlQ Qpazt0NiLnT58MFllmOxYnJ0zMeyiz3qeiEqSpZVW79drgxzaygOBBBAAAEEEAhqgVPH9is9fa/y fezllpWLLDkj6jeUI6RozLRqYrkrzXjfzTqdLnn+u+Hfli+txXT+u86Prcwl8F0a6JwMqW2bTVZ0 6SstXeu8MkjRnXM9O3iwanxR9Vz76fr8rztTnS59pYw9mUY6RBG16qpBw6Zq3CTO+NlQ0ZGR57TU q1MlZ079OLbF6vbhQmjt83WNMZPRfuQedvlX6+f2FxYWyHxxIIAAAggggAACCCBQWgEClaUV81P+ 0NBQmcvCmsufpqamql27dm5rNu/94Q9/sM0+NJdXNfe8DKRj3LhxluaYAUozCGsGY81ZpDFOs9Ms Gc8m6tUrWmbTvLR79+6zd/gRLAJxV/a1BuMyUpy+MW30MnGYWtVzfNxVtm6H1Sv2IdknKzeXWNav G+dbPiTTZWPUuklE0XORF+jSTkVJ82xDynbrBUsqR9/MvlcrMiwXPSeMPY8sgdBvF3gJFuZqx9xR WuJr2Z5rPXMnrKkuusw5U4rWff6t8wXOEUAAAQQQQCDoBPI0/+lrNCCpnZLuHaPd+46o0Esff9mx QqOee8WSY0Dfq4v2Z6wRo3tnTrbc/2TyzVq3Y5/lmnPicPpG3fvoWOdLGpPcVwEapjTaGaVByVMs 7Z2e3FX//dWHoGL+CR06eFB5HpGdviBn1LDguQ8VWH/tWbpdYYm4i1tbyh6WdLGeGDfJ2D5lpb74 /DNt3bZF3+7YoZ9/SlOGsQrRb4cPKzffJWhnKcHXREWOrfc25BzcqffnL9aRHOseqM5PFeTs06dO y99G1I9xWe7WP+03Z0A/fdsFurJtI9vrkXFvsmel80BxjgACCCCAAAIIIFCiAIHKEokqP0Pbtm31 zTff6OjRo5alUF1bZi6NGh0dre7du2v7dm/BEtcnKy5tzvy0H2aw1QxQmkHY0hyJiYmO7B9//LHj nJPgEAip10U9XIJ9zj3r07vruX8wZczc7PLoAOditXfRXVq2xXNUL+u7tzRxunXZ19639la0pZQY JXS1lvvjO4P1VUaOJdeZxGH9Z/ZAvWnZe9NNNudLYXV0nnNaO7XkwzXGPpWuR5YRAO2rfy0qeYaC 65Oe0/X1+1sfsNze8eZt2vjDYcs1t4mTh/X/Mn7WcR8mrbp9nosIIIAAAgggUGkC9vBOVso0Dewd r563Pag1n2/W/oO/6XjOceN1RL/+9I1eGddP/Qbe6dLOARpwfSvLtRZ/SLIulW/cfWJgG02etVS/ ZR5TgW0W1mmdOHZQK+eP1/8k9bE8Lz2iKy5p6HItsJKNWl2tHi5NuueGlpq/4ksdzTnhFOwt0Gkj OHnw15+0cNbz6nL5hbqpZ2t9v9/d745GCPS8OMvSudIbeva1ZTqRn6fcnN+UmvKRFvw7xefZry5N rDLJWg3idZVLa9cteFFPPTpYox7sqz/feYPuHdhDg2+5Sv2Tfq+kxAR1v7yJHjGCmXsOH3d5snTJ ihrbklrx85bFmvzcvbqxc1NNn/+R7d9KUTy7QEcP/qin7rja8gXPCzu2LPqSwNkK/NH+Xds+1sof ir5e+dWCZP20ryhdUl+5jwACCCCAAAIIIIBA6SJGeFWqQJ06dTRx4kSZMyfXrFmjfv36KTPTXPbG eqxfv94xA/PVV1/Vfffdp4gIp1lg1uwVlioosIZTVq9eXaa6+vfvL7NPHMEqUEutrn9U2mL9JvqZ 3g5Vu4T65dLxBp3vND4ke0/OCyWvfrm39t32km64pocaN4wxlinL1/Ej6dr52XS9/Z41SCk9qqsv jyvWlgYdbjH2cnzPMvNy7qiBOjbqOV1x+cUKO52rzIyvtOpfj8hLXLRYubYLZ5fGXffmGsf9vcsf 0ut6SX+8qYfq166pzF++1Lppj2ij55ir49nSnsS07WfsIfqG1jk9+P6TXfTr3VPV/cpOaljP/q3t 08o7maXDv6Rp5+aF+nDRGbs+4zfrmpZFy1E5FcMpAggggAACCASkQIhqx1gWf9fJHxbqqQcX+tTa d9ZOUK0Ql6wh5+m55R/qhqTbLTfen3y33rdOtrTcP5O4Qv/eNEb+/0vGTVO8XTJmjo5ZvUqf9b7W kusfyTfrH2evtIxvq10/uP8yqce1Q0JidfV1jbV95X5HuWunDtXaqY6kcTJESbd0duwL6nwnaM5D z9PETRt1VRfXcKX3Hn5lBDP/aLxenr9D3ds08Z7Z092KGltP9bm5Puu5uzTruTM3WnW+RjtTPnWT 6wq9eG+v4kvf+qH9ucaXDKxHgurW5qMmqwkpBBBAAAEEEEAAAW8C/PboTSdA79WoUcO2bOqRI0e0 d+9eDRs2TMuXL3fbWnN/SPN12Fj+xnUZVbcPlONFs53OR4MGDZyTnCPgEIi57FojiDjFEkQ0b7YZ 1lcNPH5y43jct5OwBN36bLK2PD3Bkn/Hov/VDuvWSpb7ZxKd9eDUB+U25Fark/44fIBefu09p+eM mY+T+sk11OmUwefTC7oNUZwRqNzr9MSPy/9XL7v/J++UqxxOjUDp9eNf0rrH/9dS2MY3H9LGN89c imvWSnsz3O/DxP/BWNhIIIAAAgggUAUEaqrvE8u07es/aK3TDKmSG95L89e+qRYNrWtP2J+LbZ6o j4y/V/4nKcl+yYefA7Qs5Z9qUCzyaX3UdXfwolln1nz2VEXlr92kg9as/UwP9Oxh+QKbvV5PQUrz fu3IcHs2l59h6vfXuXp9ZS+X687JkzptdtrpT6/S9tG5NG/nvpbraz5vdVnv5WnFnFcslyLjjZmU A7oq+7dDyj6Ro5ycYzqVlWkEdRdafm82H3pi4O36d8oGNalVtj8sKmZsVWx5VOf37oWXdrH0155w H6SUpi+fq4bW7xjYH1FFtd9eQUhEbfvp2Z9pOnrMeBcQrHRxIYkAAggggAACCCDgScD1+66e8nE9 QAXi4uK0bNkymbMXx48f77GVWVlZHu8F+o3p06cHehNpnxsB+7Jhbm4Vv2QEEa8a0Nnlemd175zg cu3ckrVb369xzz5bykIG6JHps3WJl4hp0x5j9GCx9ruvptOwBXruH0VLIpu5vK6QWreLHhib7L4w l6tXDVvkc9muizF5akN0y9v1grGE88UuddmTnoKU5v2YKA+fltgf5icCCCCAAAIIBJxASGRTvbgo XYuXr9XdQ4d4bV9k/I16aeZnWr/9PY9BSnsB9Zt31sataXrhuRet+5PbM5z9GdN5oP7v7U3asOM1 I0hZUmApRHWcnm/cupGxQoa3I8QyO7P0+eO8ll+rYRu98/Uu/XPKKx5/d7K3rpXRz+enrdDqLfvU LNbzDpxRDdtr5ep16hrv/veq4RMeUG3LX/WlNZEiajsrGulwd4q+lutrPrtEyfX/sm2B/j51nuOB mM5/04oPp6m/sfTwvcP/opGjx+ipsS9p3ORp+nDHfi1d/omLf5o273D+2p+jKJ9Pyn9svTuZwf3V 67fo/hL+DQ54aKpWGu+hds1jvfal/NtfVN3vOtzo4v2AmjeqVZSBMwQQQAABBBBAAAEEShCoUWgc JeThdoALnDhxQrNmzdKYMWPcLgVrNn/Xrl1q0aKFX3tivrVCQor+anY3q7N9+/ZKTU21tev06dOW /PbGmjNB7UvcmsHY5GTfgjb253352bHvmXWnhgy82Zfs5ClR4LS+nztU0xx7JhozEs1gXz13H3qc Kazg0BpNfOghxzeg45KmavTQXip6BxWvNG/PUiWPHOW40Wn4Mt3Ro+TgZkHOz9q2er7WvDPbUZ+j EPvJZX10+w3GcrFd2rvsS2nP4PrztPZ/vUBL335aOzJc70lxnR5Qn0F365Jm9WVtdy+NfnuqLnD/ 2ZOjoGMZa/TRLGMm47eOS44Ta9kfGib2GZB9jLInFi87L03vD75JG+0lXDtJE4bd7H0v0JN7tWPD PH02/Q23swTsRcUZbp163Kh2HbupQd2AX6jN3mx+VgGBOfOX2lo5dZz3D82rQFdoIgIIIFC1BArz dMKYrZZz4qRO5eaphrHffHh4pGrXrmsEtMq6fkKBscfiMWUfz7GVKSP8FxEdpVq1aysyPLx0PoWn lX/a3HKihkKNtpV4VHR+RwMKjKXxjys72+xjrrHHeE2FRYQqMqqOoo2+1gxxmgLpeMbbSYFOnczR sezjtv3KQ8MiDK+6Cgt189tyaftoVFtQkGe8pJCaYfLYNF/L9TWfU3c915+tv7VpqVWOvFdo6ZaP PM4etGc78P0y9ek71J7UsAlf6J4bWznS53ZSTmPrq5OR74Txb+Vk7gnlHs81/g2GK9r4txJdq7Zq lvZtZOt4ObXfGdH470Su8d8H4x2ksMhIr3/DOT/GOQIIIIAAAggggEBgCTw0do6tQVsXPubXhhGo 9Ct3+Va2fft227KuvuzfePToUZl7XPr7MIOj6enptmoTExO1bt06SxNKClQuXbpUffr0cTxTUQFX ApUO4nI9ycvLUYExVS8krJbCPMcoi+o09nPMzTPmYtYMVYTx4YtPh+OZSOMZXypxLvW0sSflfmVl HzE+QDLngBofvEUbHx7FnqeYWmX9FrBZ5h5lZWbrVH6+akbUUZ3Yxoqpay2vIC9Xeafzfbc52+zc o3t1+DejvWbZoXVU67zGqleWsu1uRp8jIn20trXhtHKP/mb78kCe8WHJaeP5mhFhioxuoDoxMWUY A+fx4BwBzwIEKj3bcAcBBBBAAIGgFcg/oPsvv1T23T0bX/dPLZo8uMRA2LFfP1PvG/o6WIYagcoH yy1Q6SiWEwQQQAABBBBAAAEEgkqgsgKVPnzlNKicq3xnzNmTr776qh5//PES+9K8eXO98sorSjL2 gnGe2Vjig+WY4brrrtOMGTNsJZoB1Weeecb28qWKtLQ0S5DSfCbGCIRwVB2BMCNA6X2anktfakYo wniV6ijLM44Kaiq6Xpzt5bh0zidmmc2Ml/eCQoxArM/BWKeiIurGqanx8nb4VHaZ3YwZD3UbqbHx 4kAAAQQQQAABBBBAoEIFjOmdzn8dnDS2NDG3LHAzj9SpGXlaOrNo1RXzxmUt6zvd5xQBBBBAAAEE EEAAAQQCScD77/eB1NJq3hZz9mT37t2NZYKiSwxSjho1SuYyq7t379bNN99caUFKc8hef/11y8iN GzdO5lKuX3zxhfKNGWEZGRmO+3l5ebZrZrsHDx6sVq1aOe6ZJ4MGDbI9a7lIAgEEEEAAAQQQQAAB BBBAIGgFcp16lpXyN02ctULHTpqroRQ/8k8e0vyJQzVlwZlVfc7kuELxFxKoLK7FFQQQQAABBBBA AAEEAkOAGZWBMQ5uW1Ga2ZPt2rXTzJkz9fvf/141atRwW15lXDT3iVmyZIllZqS532S3bt2KNSfS 2MvC22H2jwMBBBBAAAEEEEAAAQQQQKCaCIScp0GP3abtkxc5Orx48p1aPNlYbadzH/XverUa1o/Q wT0Z2rF1rb5M+Y8jn/3kqZlvqEmt0m4RYX+anwgggAACCCCAAAIIIFDRAgQqK1q4DOWXZu/J8ePH 2/apjIqKKkNN/nnEnNVpttOX5Wo9tSg1NVWB3EdP7eY6AggggAACCCCAAAIIIIBAWQVCdM3dE9Xv i0+1ICXLUkhWyhLNMF7ejlFTNuimzhd6y8I9BBBAAAEEEEAAAQQQqGQBln6t5AGwV2/OnpwwYYJt NqQ5O9Lcz9HTkZiYqJ07d6qwsFDJyclVIoBnttNsc2kPc5/No0ePqm3btqV9lPwIIIAAAggggAAC CCCAAAJVXaBGjEbNTNN7CxerR+cYn3pzx2NvaEXKXvXr1VqBs96QT00nEwIIIIAAAggggAAC1U6A GZWVPOR79+617b3oLTBpb+Ls2bM1cOBARURE2C9VqZ8JCQm24Kq5B+Wrr76qhQsXKj3dee+QM90x A7V33HGH/vSnPykuLq5K9ZHGIoAAAggggAACCCCAAAIIlLdATTW/pKtemvmTTp86oexjR3Us+7hO 5Z9Ufl6hrbLo2jGKia2nWrWiFUJ0srwHgPIQQAABBBBAAAEEEKgwAQKVFUZbcsFmwK5ly5ZeMw4a NEgvvPCCWrRo4TVfVbpp9mXixIm2l9luc2ao/Qik/TXtbeInAggggAACCCCAAAIIIIBAYAjUDI9S bH3zFRjtoRUIIIAAAggggAACCCBwbgIEKs/N75yefvLJJx3Px8bG2s4zMzNlzih8/fXX1bVrV8f9 YD4hOBnMo0vfEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAH3AgQq3bv45eq3337rqMcMUJpH UlKSRo4caTtfunSp7Wd5/M9NN91k2/+yPMoqTRkFBQX67bffFBoaqnr16pXmUUfe7Oxs23lUVJSt HMcNThBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBKqsAIHKABu65cuXy3yV97Fz506Ze0T6 ++jQoYNSU1Nt1Y4fP17JycmlaoLr8rh5eXkEK0slSGYEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAIDAFQgKzWbSqvAXCw8PLu0i/lNe0aVNLPSkpKZY0CQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAgaopQKCyEsetc+fOfqv91KlTfqurPCuKiIiw7dlpL3Pjxo32U34igAACCCCAAAIIIIAA AggggAACCCCAAAIIIIAAAghUYQGWfq3EwZs+fbqGDRum3NzcCm9FfHx8hddRURVkZGRUVNGUiwAC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAgggUEkCBCorCd5ebadOneynQf8zOjq6VH00A7hPPfWU MjMzS/UcmRFAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBAJfgEBl4I9RlWnhnDlzNHLkSMXE xDjanJ6e7jgfMWKEJkyY4Eh7O8nKynIboOzZs6e3x7iHAAIIIIAAAggggAACCCCAAAIIIIAAAggg gAACCCBQRQQIVFaRgaoKzRw7dqwtuOhtBqRz4LIsferYsWNZHuMZBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQACBABMICbD20BwEPAps3rxZISG8ZT0CcQMBBBBAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQqEICRH0CbLAKCwt18OBBpaWlOX6eOHEiwFrpvjl9+/Z1f+McrjZv3lyjRo3S8ePHVZ32 8zwHMh5FAAEEEEAAAQQQQAAbFgzQAAAWzUlEQVQBBBBAAAEEEEAAAQQQQAABBKqEAIHKABmm/Px8 DRs2zDZjsFGjRmrVqpXsP6Ojo1WjRg299tprAdJa982YOHGiCgoKZAZb7a927do5MpsBR/t1X3/u 3r1bZrlRUVGOcjhBAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBCo+gIEKgNgDM0ZlGFhYZox Y4bX1owYMcIWsMzOzvaarzJvmgFVT0fjxo093eI6AggggAACCCCAAAIIIIAAAggggAACCCCAAAII IIBANRMgUFnJA27OpDRnTpbmqFu3rqrKcrCl6Rd5EUAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEqo9AaPXpamD29NZbby1Tw7p06aJvvvmmTM/686GtW7fa9tsMDQ1VfHx8maq2zyA1l381y+FA AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBCo+gLMqKzEMczNzdXy5cstLTD3dDxw4IBlL8ej R48qKSnJki81NVV79+61XAvERMeOHXXppZcqISFBEyZMKHUTzT0qzRmk5stcHtecgcqBAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCCBQ9QUIVFbiGG7YsMFSuxmkNGdJNmzY0HK9Tp06WrZsmcaP H2+5PmjQIEs6GBNNmza1dCslJcWSJoEAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIFA1BQhU VuK47dy501L7V199ZUm7JpKTky2X0tPTLelgTERERMgM4NqPjRs32k/5iQACCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAgggUIUFCFRW4uBNnz7dUXvz5s1lBuVKOlatWuXIYgYqCwoKHOlgPcnIyAjW rtEvBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQKDaChCoDJChNwOVvhzmfo9V9YiOji5V0809 PEePHq3MzMxSPUdmBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQACBwBcIDfwmVo8W9u/fv8p3 dM6cORo5cqRiYmIcfXFennbEiBGaMGGC4563k6ysLLcByp49e3p7jHsIIIAAAggggAACCCCAAAII IIAAAggggAACCCCAAAJVRIBAZYAM1PHjxwOkJWVvxtixY23BRW8zIJ0Dl2WpqWPHjmV5jGcQQAAB BBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQCTIClXwNkQHxdFjUsLMzS4pCQ6jOEmzdvVnXqr2Wg SSCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACQSbAjMoAGdDp06fLl1mV27Zts7T4mWeeUa1a tSzXXBM5OTl6+umnKzzI17dvX02aNMm1+nNKm3t3muX+/e9/V1RU1DmVxcMIIIAAAggggAACCCCA AAIIIIAAAggggAACCCCAAAKBI0CgMkDGIjU1VY8//nipWzNu3Difnhk8eLASEhJ8ylvWTBMnTrTt QVmjRg1HEe3bt5fZN/MYNWqUzDwcCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCFSfdUOr +ViHh4f7RcA5SOlaYePGjV0vkUYAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEKimAgQqK3Hg L7vsskqsvepVnZ+fX/UaTYsRQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQTcCrD0q1sW/1x8 9913NXz4cL9U1qJFC7/U41rJ119/rUOHDtkuN2zY0PV2iens7GxNmzbNsSzurl27VFl9KbGxZEAA AQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEPBZgEClz1Tln9FcJrVr167lX3AAlWj2sbQBytzc XC1evFgPPPCAMjMzA6g3NAUBBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQKC8BAhUlpck5ZyT QGFhoTZu3Kg///nPSk1NPaeyeBgBBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQCDwBQhUVuIY rV69Wh9//LGOHj2qhx9+WG3btq3E1lRO1bt379aTTz6pefPm+dSA8PBwn/KRCQEEEEAAAQQQQAAB BBBAAAEEEEAAAQQQQAABBBBAILAFCFRW4vjcd999Sk9Pt7VgwYIFOnLkSCW2xn9Vm/2cMmWKxo0b 53Ol48ePl+lVr149n58hIwIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAQOAKEKisxLGJiYlx 1N6sWTPHeTCemPtOzp8/XyNHjvR538lRo0bpscceU1xcXDCS0CcEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAoFoLEKgMkOHPysoKkJaUXzMKCgr06aefygw4lmbfyffee0/9+/cvv4ZQEgIIIIAA AggggAACCCCAAAIIIIAAAggggAACCCCAQMAJhARci2hQlRdIS0vTTTfdpJo1a+raa68tMUjZvHlz S5+7detmSZNAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBAIPgEClcE3ppXSo4MHD2r06NGq UaOGWrVqpeXLl3ttR2JiojZv3ixz1uXu3bsteU+dOmVJk0AAAQQQQAABBBBAAAEEEEAAAQQQQAAB BBBAAAEEEAg+AZZ+Db4x9XuPhg0bphkzZpRYb7t27TRp0iRdc801CgkpipGbwUoOBBBAAAEEEEAA AQQQQAABBBBAAAEEEEAAAQQQQACB6iVAoDJAxjsmJiZAWlL6ZqSkpHh8yFzWdfz48brlllsUERHh Np85C5MDAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEECgegkQqAyQ8c7IyND777+vEydOVEiL 7rzzTsssxgqpxKnQ+++/X6+88orH4KRTVk4RQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQSq oQCBygAZ9MzMTA0YMKDCWnPllVcqISGhwsp3LdhcCvbYsWP661//qjZt2tj2rnTNQxoBBBBAAAEE EEAAAQQQQAABBBBAAAEEEEAAAQQQQKD6ChRtFFh9DapFz8PDwyusn7GxsW7Lnjdvnsx9Kc39KAcP Hqy0tDS3+biIAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCBQ/QQIVFaTMT916lSF9XTdunXa vHmzEhMTPdZhBi1btWplm1k5evRo7d2715GXPSodFJwggAACCCCAAAIIIIAAAggggAACCCCAAAII IIAAAtVGgKVfA2iolyxZUmGtiY+Pr7CyzYI7deokM2CZn5+vFStW6OGHH1Z6errbOidNmiTzZR5j x461zbZ0m5GLCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACQStAoDJAhtZcIvXmm28OkNaU vRmhoaG2fph9yc7O1rRp0/T44497LHDcuHEyXxwIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCA AALVS4ClXwNkvLOysgKkJeXXjDp16ig5OVmFhYXas2eP7r//fp8Kb9mypVyXh/XpQTIhgAACCCCA AAIIIIAAAggggAACCCCAAAIIIIAAAghUGQEClVVmqKp2Q+Pi4jR9+nRb0DI1NVVJSUleO2QuDXv+ +efb9rR85plndPDgQa/5uYkAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIFC1BAhUVq3xCorW tm3bVsuWLdPp06e1atUqmcveejvMpWEbNWpkC1rm5uZ6y8o9BBBAAAEEEEAAAQQQQAABBBBAAAEE EEAAAQQQQACBKiJAoLKKDFQwNjMkJES9e/fWN998o+PHj2v27NmKjY312tX09HSv97mJAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCCBQNQQIVFaNcQr6VkZFRWnIkCE6cuSIDhw4oLFjx7rtc3h4 uNvrXEQAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEKhaAgQqK3G8srKyHLU7nzsuVtOThg0b ytyXsrCwUDt37tSgQYOqqQTdRgABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQSCVyA0eLsW+D1b unSp5syZY2voiBEjAr/BldDChIQEzZ07V++8845ycnJUp06dSmgFVSKAAAIIIIAAAggggAACCCCA AAIIIIAAAggggAACCJS3AIHK8hYtRXlt27bVxIkTS/FE9c1q7mdJkLL6jj89RwABBBBAAAEEEEAA AQQQQAABBBBAAAEEEEAAgeATYOnX4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBA wAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAAC CCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAA AggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKB CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAA AggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASf AIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAA AggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCA AAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQA AggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCA AAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQ qAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCA AAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg gAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCA AAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK 4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAII IIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAII IIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4 IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAII IIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAAC CASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAII IIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAAC CCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfAIHK4BtT eoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBAwAsQqAz4IaKBCCCAAAIIIIAAAggggAAC CCCAAAIIIIAAAggggAACCASfAIHK4BtTeoQAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIBA wAsQqAz4IaKBCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCASfQI1C4wi+btEjBEon0LHv 5NI9QG4EEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAIMgEti58zK89YkalX7mpDAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEETAFmVPI+QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQAABvwswo9Lv5FSIAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIEKnkPIIAAAggg gAACCCCAAAIIIIAAAggggAACCCCAAAIIIICA3wUIVPqdnAoRQAABBBBAAAEEEEAAAQQQQAABBBBA AAEEEEAAAQQQQIBAJe8BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBDwuwCBSr+TUyEC CCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCBCo5D2AAAIIIIAAAggggAACCCCAAAIIIIAA AggggAACCCCAAAJ+FyBQ6XdyKkQAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQKVvAcQ QAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQMDvAgQq/U5OhQgggAACCCCAAAIIIIAAAggg gAACCCCAAAIIIIAAAgggQKCS9wACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCPhdgECl 38mpEAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEECFTyHkAAAQQQQAABBBBAAAEEEEAA AQQQQAABBBBAAAEEEEAAAb8LEKj0OzkVIoAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAA gUreAwgggAACCCCAAAIIIIAAAggggAACCCCAAAIIIIAAAggg4HcBApV+J6dCBBBAAAEEEEAAAQQQ QAABBBBAAAEEEEAAAQQQQAABBBAgUMl7AAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEE /C5AoNLv5FSIAAIIIIAAAggggAACCCCAAAIIIIAAAggggAACCCCAAAIEKnkPIIAAAggggAACCCCA AAIIIIAAAggggAACCCCAAAIIIICA3wUIVPqdnAoRQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAA AQQQQIBAJe8BBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAAQQQQAABBBDwuwCBSr+TUyECCCCAAAII IIAAAggggAACCCCAAAIIIIAAAggggAACCBCo5D2AAAIIIIAAAggggAACCCCAAAIIIIAAAggggAAC CCCAAAJ+FyBQ6XdyKkQAAQQQQAABBBBAAAEEEEAAAQQQQAABBBBAAAEEEEAAgf8PByly/oHh6p0A AAAASUVORK5CYII= --Apple-Mail=_B8F9D2CE-F005-44E2-9033-A04FD2FD8002-- --Apple-Mail=_F42D8772-A82F-4B5A-8B62-40E2CB297916-- From nobody Sun Nov 17 20:30:15 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19134120848 for ; Sun, 17 Nov 2019 20:30:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z9u4DnEKfmXC for ; Sun, 17 Nov 2019 20:30:12 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 28F64120096 for ; Sun, 17 Nov 2019 20:30:12 -0800 (PST) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:128:1ca0:aaff:fe40:7c9]) by relay.sandelman.ca (Postfix) with ESMTPS id 3C9C91F450 for ; Mon, 18 Nov 2019 04:30:10 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 8D55910EF; Mon, 18 Nov 2019 12:30:08 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> Comments: In-reply-to =?us-ascii?Q?=3D=3Fiso-8859-1=3FQ=3FSch=3DF6nw=3DE4l?= =?us-ascii?Q?der=3D2C=5FJ=3DFCrgen=3F=3D?= message dated "Thu, 14 Nov 2019 14:11:39 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Mon, 18 Nov 2019 12:30:08 +0800 Message-ID: <24439.1574051408@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 04:30:14 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable If we are going to use JWT/CWT for the security of EATs, then I am skeptical that CDDL (or any other Data Modeling language) brings anything to the tabl= e. What we need are clear semantic descriptions of claims. Often we will need some anciliary data associated with the claim, and sometimes that data will be more complex than a single binary blob. In tho= se cases, a bit of CDDL will benefit us. I don't think that a YANG model will help us at all for this. =2D-=20 ] Never tell me the odds! | ipv6 mesh network= s [=20 ] Michael Richardson, Sandelman Software Works | network architect= [=20 ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [=20 =09 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3SHlAACgkQlUzhVv38 QpCr9gf/ZfkO6hb+eRLOa5Kl81HbnOE3Sul3ATceHYtK4hDpZPNVlNXxGnR6V69A g3m5I13fUF8cjDk1lvTbo6cCaJ0Tvd/n9xQK9QqXRe3jFqap8SVeNNaWo4vk77/z PT3HBYz+IxIhPp+ZeBukU2nit8fSKdgJPOjNHwUxmsdZcOvyfBP/45FEZX9RiW7n XVzn5ZZU5Az5lVeje9RSReHUIK3r1WrQzi4c2fhtHhB27HQFkxTfekd3D1fHjcq0 KsvmR7ekp+Rt8mTjpNxsNhuthHB3Zy7NV3yBzdtylhrruzyc++mqrXBXQZjX9rn4 cC87OCcrqUh+LPOLX7DHSJ6BPR540A== =+uPx -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Nov 17 21:31:17 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16A1A12088E for ; Sun, 17 Nov 2019 21:31:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t39UCZji0hgQ for ; Sun, 17 Nov 2019 21:31:12 -0800 (PST) Received: from p3plsmtpa09-07.prod.phx3.secureserver.net (p3plsmtpa09-07.prod.phx3.secureserver.net [173.201.193.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D673D1208E5 for ; Sun, 17 Nov 2019 21:31:12 -0800 (PST) Received: from dhcp-96dc.meeting.ietf.org ([31.133.150.220]) by :SMTPAUTH: with ESMTPA id WZczi6zpnoPMbWZd0itHBp; Sun, 17 Nov 2019 22:31:11 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <24439.1574051408@dooku.sandelman.ca> Date: Mon, 18 Nov 2019 13:31:08 +0800 Cc: "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <8C37D486-D4CD-414D-962B-31993C5991B6@island-resort.com> References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> <24439.1574051408@dooku.sandelman.ca> To: Michael Richardson X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfGGT4wcM12U3JvjDujTuoSsT5EHFmhxwtXGmgNvEU9JD0YtOlDyJCJ5voBYdGt7xBOeVHnsB8FxoE2tNsmrvSn3qJvEd3JnBPB6XT4u/lHUnQZVQU3op cLcsxeeGtaZTqVvHLPSpH93gtEOViwln0C2XmchyE3eNsNqVZ3d9kYk7PRDFo3yy+EL9EYn7alwMRrpdabAbmbOwtpgXha8NiOVRfKLYcYXyhAIOXBtAUTQI Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 05:31:16 -0000 Seems to me that the CDDL in the EAT draft is working well to define = claims that are mechanically serialized into JSON or CBOR and added to = JWT and CWT. Isn=E2=80=99t that the end of the story? Is there a problem with the EAT = doc? LL > On Nov 18, 2019, at 12:30 PM, Michael Richardson = wrote: >=20 >=20 > If we are going to use JWT/CWT for the security of EATs, then I am = skeptical > that CDDL (or any other Data Modeling language) brings anything to the = table. >=20 > What we need are clear semantic descriptions of claims. > Often we will need some anciliary data associated with the claim, and > sometimes that data will be more complex than a single binary blob. = In those > cases, a bit of CDDL will benefit us. >=20 > I don't think that a YANG model will help us at all for this. >=20 > --=20 > ] Never tell me the odds! | ipv6 mesh = networks [=20 > ] Michael Richardson, Sandelman Software Works | network = architect [=20 > ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on = rails [=20 > =09 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Sun Nov 17 21:44:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B72A212085E for ; Sun, 17 Nov 2019 21:44:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q3etuOkPT72k for ; Sun, 17 Nov 2019 21:44:05 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 834B7120152 for ; Sun, 17 Nov 2019 21:44:04 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAI5i0aL031070 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 18 Nov 2019 06:44:01 +0100 Received: from [31.133.159.37] (31.133.159.37) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 18 Nov 2019 06:43:55 +0100 To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" References: <229E0A72-4B44-4C9A-AD0A-142A13020C9A@intel.com> <4F586E15-9CF7-4824-87F2-8E2C20D1AF1D@intel.com> <71173EC8-A167-47B9-B0F1-05759D59890B@akamai.com> <20191113071244.onqdgo2roqt7efb6@anna.jacobs.jacobs-university.de> <20191114141138.dipzizem6a6wh6cr@anna.jacobs.jacobs-university.de> <24439.1574051408@dooku.sandelman.ca> <8C37D486-D4CD-414D-962B-31993C5991B6@island-resort.com> From: Henk Birkholz Message-ID: Date: Mon, 18 Nov 2019 06:43:51 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <8C37D486-D4CD-414D-962B-31993C5991B6@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.159.37] Archived-At: Subject: Re: [Rats] What's to EAT? - terminology clarification X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 05:44:08 -0000 I think the question was: what value does it add? At the moment you cannot utilize it, and the structure is a bit... loose. The latter can be remediated by creating a "how to create CDDL IM subsections" in a core document and tighten that a bit - so I see no real problem there (if it is about IM, I seem to have misunderstood the "CDDL is solely used fo DM now" quote). The former is the thing Michael is inquiring about, I think. It reads as a DM and then it provides the "TLA"s for JWT and lables for cbor as tstr longer that 3 characters (which is a bit unusual). Therefore it cannot be mechanically serialized at the moment, I think. I am willing to chime in here, but I might also circling back to the latter item above. Maybe both the former and the latter items are more connected than is obvious and that is still unclear? Viele Grüße, Henk On 18.11.19 06:31, Laurence Lundblade wrote: > Seems to me that the CDDL in the EAT draft is working well to define claims that are mechanically serialized into JSON or CBOR and added to JWT and CWT. > > Isn’t that the end of the story? Is there a problem with the EAT doc? > > LL > > >> On Nov 18, 2019, at 12:30 PM, Michael Richardson wrote: >> >> >> If we are going to use JWT/CWT for the security of EATs, then I am skeptical >> that CDDL (or any other Data Modeling language) brings anything to the table. >> >> What we need are clear semantic descriptions of claims. >> Often we will need some anciliary data associated with the claim, and >> sometimes that data will be more complex than a single binary blob. In those >> cases, a bit of CDDL will benefit us. >> >> I don't think that a YANG model will help us at all for this. >> >> -- >> ] Never tell me the odds! | ipv6 mesh networks [ >> ] Michael Richardson, Sandelman Software Works | network architect [ >> ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ >> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Sun Nov 17 22:45:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94FAB12089E for ; Sun, 17 Nov 2019 22:45:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jxjkbIyR2gGX for ; Sun, 17 Nov 2019 22:45:43 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF52F1200B3 for ; Sun, 17 Nov 2019 22:45:41 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAI6jbxm001986 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 18 Nov 2019 07:45:38 +0100 Received: from [31.133.159.37] (31.133.159.37) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 18 Nov 2019 07:45:32 +0100 To: "Smith, Ned" , Laurence Lundblade , "Fuchs, Andreas" CC: "rats@ietf.org" References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> <39F4565A-F807-4DB2-B024-6BD2BC906DC5@island-resort.com> From: Henk Birkholz Message-ID: <1412ac1d-29fd-38ef-c2b3-d8ff74d672af@sit.fraunhofer.de> Date: Mon, 18 Nov 2019 07:45:27 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.159.37] Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 06:45:46 -0000 iotdir hat on. As maps are not multimaps it can be useful to do kinder these proposals: 1.) If a value is a primitive or simple type, just use that. Qualifiers are collapsed in claims. Results in computational explosion and a big increase in registered claims. 2.) If a value requires one ore more qualifiers aggregate these in an array of well-defined sequence. 3.) If there are "token-wide" applicable qualifiers, make them the root structure and bundle claims in corresponding sub-claim-sets. 4.) If there are various sets of of qualifying claims for each core EAT claim, enumerate these identifiers and create a composite of 3.) and 4.): use an array - first item is the value to be qualified, the second item is either a) an array of indexes/labels of qualifiers or b) a sub-claim-set of qualifying claims for the claim to be qualified. 5.) If all qualifiers always apply to all claims in an EAT, add an "header" claim-set with appropriate map members (or a single claim with an array value including appropriate label/indexes) to the private part of the COSE header. Sorry, if this sounds a bit complicated. It actually isn't. But 1-5 highlights that there are a) various ways to approach this and b) that adding a selection of various qualifiers to each individual claim has to be well structured and requires thinking ahead. Viele Grüße, Henk On 16.11.19 01:58, Smith, Ned wrote: > This thread illustrates the need for attestation. But also the need for > provenance (of the attesting environment). > > There are many ways to implement “security” that have different > trustworthiness properties. > > RATS claims definition might consider how best to express such > properties. For example, if it is CC certified. > > Attestation functionality (and nothing more?) ideally is held to the > highest standards for correct implementation and design so that it can > be trusted to report on the target of attestation. > > If we refer to the “Attestation functionality” as the “attesting > environment” and the target of attestation as the “attested environment” > then RATS drafts can distinguish between which claims are “trusted” vs > which claims are “attested” by a given endpoint. > > Something like a vendor issued certificate (with embedded private key) > is a way to provide provenance of the attesting environment and an > opportunity to include trustworthiness claims (e.g. CC certified). These > claims can be asserted by a vendor, by including them in something > signed by the vendor (e.g. certificate, manifest). Given RATS WG has > decided to wait to define claims for “attesting environments” – since > they are claims asserted by vendors / manufacturers. Maybe that work > isn’t a high priority. > > In either case, it doesn’t make sense for RATS WG (outside of gaining > technical context) to rationalize which technology is more/less secure. > This is a policy decision applied by Verifiers and Relying Parties. RATS > WG should think about what claims should be expressed and how best to > instantiate them IMHO. > > -Ned > > *From: *RATS on behalf of Laurence Lundblade > > *Date: *Friday, November 15, 2019 at 10:41 AM > *To: *"Fuchs, Andreas" > *Cc: *"rats@ietf.org" > *Subject: *Re: [Rats] FIDO TPM attestation > > Hi Andreas, > > Here’s the frame up as I see it for EAT  and FIDO from most secure to > least. I believe EAT implementations can eventually be as secure as a > TPM and we want to design EAT so such high-security implementations will > eventually be in the market. > > *Hardware-Only (No SW!)* > > ·EAT with a small number of claims (HW Version, HW OEM, boot / debug > state, simple TPM-like measurement) is possible in pure HW. > > ·Pretty sure many TPMs are implemented in pure HW. > > ·Certifiable to very high levels. > > ·FIDO is too complex for pure HW. > > *Secure Element and similar* > > ·EAT with a lot of claims > > ·Simpler FIDO implementations without biometrics. > > ·Some may consider this less secure than pure HW because complexity is > higher, but I don’t think there is an absolute rule here. > > ·Pretty sure this can be CC certified at the same level as HW only. > > *Separate CPU* > > You can add a CPU like an Arm Cortex M3 to your circuit board or to your > SoC. Some of off-the-shelf CPUs even have some HW defenses (the SC > version of the M3). It can run some super simple SW, simpler than a > secure element. > > ·EAT with a lot of claims > > ·Most all FIDO > > ·I’d peg security and certifiability as somewhere between the secure > element and the TEE depending on the HW design. Both can be pretty high. > > *TEE, SGX, VBS* > > ·EAT with a lot of claims > > ·Most all FIDO > > ·Usually cannot implement advanced HW chip defenses because these are a > mode of super-fast large CPUs and these defense would slow them down to > much and consume too much power. > > ·Not certifiable at the same levels as the above, but still certifiable > in pretty thorough ways like the CC-based GP TEE PP (link below) > > ·SW complexity is a lot higher so either certification cost is higher or > certification is less thorough > > Don’t disagree with anything in your latest comment. :-) > > LL > > > > On Nov 14, 2019, at 8:17 AM, Fuchs, Andreas > > wrote: > > We were talking about FIDO as one of many applications running in a TEE. > > They rely on correctness of other TEE-apps and/or the TEE kernel > > (or should I rather say TEE operating system). Thus a turing > complete solution > > (maybe even with loadable apps) and OS cannot be as secure as a > special-purpose > > functional logic security provider. > > Also, by design an on-chip TEE offering cannot be as secure as a > physically > > separated chip that incorporates smartcard technologies. You also > highlight > > this by providing yubikey as example which is both; a separate > SC-like chip > > and fixed functional logic (similar to TPMs). > > To conclude: fixed functional logic and separate chips have higher > assurance > > levels than turing-complete (loadable) areas of the main cpu. > > And to your original point: TPMs are the preferred solution for > attestation > > in contrast to to a TEE-based approach, just as YubiKeys et al are > preferred > > for FIDO in contrast to a TEE-based approach. > > ------------------------------------------------------------------------ > > *From:*Laurence Lundblade [lgl@island-resort.com > ] > *Sent:*Thursday, November 14, 2019 16:51 > *To:*Fuchs, Andreas > *Cc:*rats@ietf.org > *Subject:*Re: [Rats] FIDO TPM attestation > > On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas > > wrote: > > The FIDO code running inside a TEE is not standardized (to the > level of TPM) and most certainly not CC-evaluated. > > That’s not true. > > TheFIDO L3 and L3+ Certification program >  is > CC (Common Criteria) based (AVA_VAN.3 and AVA_VAN.4). > > Many FIDO authenticators run on secure elements which provides > roughly equivalent security to a TPM, however since the full > authenticator protocol runs on the turing-complete secure > element the full FIDO protocol is secured, not just the key > storage. Here’s one > . > > Global Platform offers a CC-based certification program for > TEE’s > . > FIDO is working on a certification program that will make use of > that. > > BSI has published a CC-based protection profile for FIDO > . > > Android Keystore’s now supports StrongBox > , > which puts the keys in a secure element. > > Qualcomm’s Snapdragon mobile phone chip has a secure-element > like subsystem >  (not > the TEE) that is CC-certified. > > TEE and TEE-like offerings are stronger than they used to be, > particular by supporting memory encryption. > > Turing complete security products come in a range of security levels > all the way up the security level offered by a TPM. EAT > implementations can be just as secure and certified as TPM attestation. > > LL > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Sun Nov 17 22:49:29 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D36941208B5 for ; Sun, 17 Nov 2019 22:49:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eyQ_UVFyThv7 for ; Sun, 17 Nov 2019 22:49:24 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9DDE1200B3 for ; Sun, 17 Nov 2019 22:49:23 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAI6nLXX002017 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 18 Nov 2019 07:49:22 +0100 Received: from [31.133.159.37] (31.133.159.37) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 18 Nov 2019 07:49:16 +0100 To: "Smith, Ned" , Laurence Lundblade , "Fuchs, Andreas" CC: "rats@ietf.org" References: <62DD1AD3-6F1A-4B2B-8236-10ECCE254443@island-resort.com> <9F48E1A823B03B4790B7E6E69430724D0163BD29CD@EXCH2010B.sit.fraunhofer.de> <9F48E1A823B03B4790B7E6E69430724D0163BD5B5C@EXCH2010B.sit.fraunhofer.de> <39F4565A-F807-4DB2-B024-6BD2BC906DC5@island-resort.com> From: Henk Birkholz Message-ID: Date: Mon, 18 Nov 2019 07:49:08 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.159.37] Archived-At: Subject: Re: [Rats] FIDO TPM attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 06:49:27 -0000 There should be "hints" (this a common and often used concept) that provide qualification to Attestation Evidence with respect to its intended protection. Policies should be able to decide how and why to rely on these protection hints, I think. Hints could be implied by signature semantics, though. If not they should be made explicit. Viele Grüße, Henk On 16.11.19 01:58, Smith, Ned wrote: [..] > In either case, it doesn’t make sense for RATS WG (outside of gaining > technical context) to rationalize which technology is more/less secure. > This is a policy decision applied by Verifiers and Relying Parties. RATS > WG should think about what claims should be expressed and how best to > instantiate them IMHO. > > -Ned > > *From: *RATS on behalf of Laurence Lundblade > > *Date: *Friday, November 15, 2019 at 10:41 AM > *To: *"Fuchs, Andreas" > *Cc: *"rats@ietf.org" > *Subject: *Re: [Rats] FIDO TPM attestation > > Hi Andreas, > > Here’s the frame up as I see it for EAT  and FIDO from most secure to > least. I believe EAT implementations can eventually be as secure as a > TPM and we want to design EAT so such high-security implementations will > eventually be in the market. > > *Hardware-Only (No SW!)* > > ·EAT with a small number of claims (HW Version, HW OEM, boot / debug > state, simple TPM-like measurement) is possible in pure HW. > > ·Pretty sure many TPMs are implemented in pure HW. > > ·Certifiable to very high levels. > > ·FIDO is too complex for pure HW. > > *Secure Element and similar* > > ·EAT with a lot of claims > > ·Simpler FIDO implementations without biometrics. > > ·Some may consider this less secure than pure HW because complexity is > higher, but I don’t think there is an absolute rule here. > > ·Pretty sure this can be CC certified at the same level as HW only. > > *Separate CPU* > > You can add a CPU like an Arm Cortex M3 to your circuit board or to your > SoC. Some of off-the-shelf CPUs even have some HW defenses (the SC > version of the M3). It can run some super simple SW, simpler than a > secure element. > > ·EAT with a lot of claims > > ·Most all FIDO > > ·I’d peg security and certifiability as somewhere between the secure > element and the TEE depending on the HW design. Both can be pretty high. > > *TEE, SGX, VBS* > > ·EAT with a lot of claims > > ·Most all FIDO > > ·Usually cannot implement advanced HW chip defenses because these are a > mode of super-fast large CPUs and these defense would slow them down to > much and consume too much power. > > ·Not certifiable at the same levels as the above, but still certifiable > in pretty thorough ways like the CC-based GP TEE PP (link below) > > ·SW complexity is a lot higher so either certification cost is higher or > certification is less thorough > > Don’t disagree with anything in your latest comment. :-) > > LL > > > > On Nov 14, 2019, at 8:17 AM, Fuchs, Andreas > > wrote: > > We were talking about FIDO as one of many applications running in a TEE. > > They rely on correctness of other TEE-apps and/or the TEE kernel > > (or should I rather say TEE operating system). Thus a turing > complete solution > > (maybe even with loadable apps) and OS cannot be as secure as a > special-purpose > > functional logic security provider. > > Also, by design an on-chip TEE offering cannot be as secure as a > physically > > separated chip that incorporates smartcard technologies. You also > highlight > > this by providing yubikey as example which is both; a separate > SC-like chip > > and fixed functional logic (similar to TPMs). > > To conclude: fixed functional logic and separate chips have higher > assurance > > levels than turing-complete (loadable) areas of the main cpu. > > And to your original point: TPMs are the preferred solution for > attestation > > in contrast to to a TEE-based approach, just as YubiKeys et al are > preferred > > for FIDO in contrast to a TEE-based approach. > > ------------------------------------------------------------------------ > > *From:*Laurence Lundblade [lgl@island-resort.com > ] > *Sent:*Thursday, November 14, 2019 16:51 > *To:*Fuchs, Andreas > *Cc:*rats@ietf.org > *Subject:*Re: [Rats] FIDO TPM attestation > > On Nov 14, 2019, at 1:46 AM, Fuchs, Andreas > > wrote: > > The FIDO code running inside a TEE is not standardized (to the > level of TPM) and most certainly not CC-evaluated. > > That’s not true. > > TheFIDO L3 and L3+ Certification program >  is > CC (Common Criteria) based (AVA_VAN.3 and AVA_VAN.4). > > Many FIDO authenticators run on secure elements which provides > roughly equivalent security to a TPM, however since the full > authenticator protocol runs on the turing-complete secure > element the full FIDO protocol is secured, not just the key > storage. Here’s one > . > > Global Platform offers a CC-based certification program for > TEE’s > . > FIDO is working on a certification program that will make use of > that. > > BSI has published a CC-based protection profile for FIDO > . > > Android Keystore’s now supports StrongBox > , > which puts the keys in a secure element. > > Qualcomm’s Snapdragon mobile phone chip has a secure-element > like subsystem >  (not > the TEE) that is CC-certified. > > TEE and TEE-like offerings are stronger than they used to be, > particular by supporting memory encryption. > > Turing complete security products come in a range of security levels > all the way up the security level offered by a TPM. EAT > implementations can be just as secure and certified as TPM attestation. > > LL > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Nov 18 00:36:05 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76F0A1208FE for ; Mon, 18 Nov 2019 00:35:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Eu2BfRbw; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=Y6U35N+L Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lGyzWgW4HX8v for ; Mon, 18 Nov 2019 00:35:55 -0800 (PST) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A57381200CE for ; Mon, 18 Nov 2019 00:35:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7623; q=dns/txt; s=iport; t=1574066155; x=1575275755; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=pY1JFk8qLbcp7rAYArqi6j/ozPffoOInuNZe9IWptIY=; b=Eu2BfRbwVZE98LApOlG6gKy139R6Pl3CRP3F0kBOeoe7YzU7p7luZX2t g0TDkymMVLxYnXb2OzyIwYAH/1cyZ04s2iDCEl2h21cuv3Ca5QukrwpTq tMTTaEz8R2Kl3zseKFRxtTjg4KD2WC2Qen2nF3vGH9Zx3FBkpuoGbfHxS o=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AGSEYqxGcvt/1+OWZOuDMoJ1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e4w3A3SRYuO7fVChqKWqK3mVWEaqbe5+HEZON0pNV?= =?us-ascii?q?cejNkO2QkpAcqLE0r+efP0aC0mNM9DT1RiuXq8NBsdFQ=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AKAACfVtJd/5NdJa1iAxkBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAREBAQEBAQEBAQEBAYFrAwEBAQEBCwGBSlAFbCstIAQLKgq?= =?us-ascii?q?EIINGA4pxgl6YAIEugSQDVAIHAQEBCQMBARgIDQIBAYRAAoIjJDUIDgIDCwE?= =?us-ascii?q?BBAEBAQIBBQRthTcMhVEBAQEBAQEBAQEQCwYdAQEsCwEECQICAQgQBQMqAgI?= =?us-ascii?q?CGQwLJQIEAQ0FCAYUgwGBeU0DDhEPAQIMoxMCgTiIYHWBMoJ+AQEFgUhBgnc?= =?us-ascii?q?YghAHAwYFgTEBgVKKQhiBQD+BEUaCTD6CYgEBAYFiFQomgkkygiyNSIISOZ4?= =?us-ascii?q?aCoIqg06CNI9omhGOSJoIAgQCBAUCDgEBBYFUAzSBWHAVO4JsUBEUkRqDczO?= =?us-ascii?q?EYYU/dAGBJ4wpATNbAQE?= X-IronPort-AV: E=Sophos;i="5.68,319,1569283200"; d="p7s'?scan'208";a="382617014" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 18 Nov 2019 08:35:54 +0000 Received: from XCH-RCD-009.cisco.com (xch-rcd-009.cisco.com [173.37.102.19]) by rcdn-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xAI8ZsWb017548 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 18 Nov 2019 08:35:54 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-009.cisco.com (173.37.102.19) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 18 Nov 2019 02:35:53 -0600 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 18 Nov 2019 03:35:52 -0500 Received: from NAM05-DM3-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 18 Nov 2019 02:35:52 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MkZ5NE+sHh0Ts1Za6ObSMCAZNf3U4J+po8/Ch3ejpVqP6xTUjv9JSAcDoM0XiKjKpibS2ptDCPRQqpPwVBrCCEnvvuGYAkh6Jna1Ma+XBijT+cw4kRH2Hlcad+SNHX2WvK/yF/AYF+cui9VpNPDO9GixkX5J6movasEuyF9k+PCbTRCCyIKPVaqLMDPJZkaVPfzDIRM27NyU/NejpOWiUfoMpq2AvEDJFQ/pM+4+9bRxiUfi0vO6MgnFmhJJwIWSPonf3FhqwoLeBIucejhfzn5Czz4zw6qMK2heV8RGUZu/Quz2V5UbJqlTlnH2Tk6ibxI8Fk4A/gSrKFpESg0bNA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HdCGAxNpAcyjdCBkAjQO+sDu11M6IONJJaYH3FMlQOg=; b=gSWoNFht2jVow0bPb6BwEHQHjEU4tacmFqvT6hRfvxcVBSu/CbGWvognQ8ZeBuTJG1+CIrlrNFHeK6fd+fzoRTObOyk5DMQ63aC6aq9e1HEKjj0EkTe2g9kB3gppCK12/JQLXIgMB52uIpeKaRz8VRE9bqRpGS7l6DAqsy4jitm6RjayBxrcgcWo4ftC3Dx7ZXFhcdCYhvz6brE1e/UwhyLDO8WQicI2Jx/jdpVYvKHNwiiDfK1sURc6RFm+uZbUHQ9DSUmTUbF9W667PJDHtUFH7qfvtXGzqINIBmSVsowWFWwFP7EeciOyS+83b81Lwrtwk5SRZ0ilIrzoIqUE2A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HdCGAxNpAcyjdCBkAjQO+sDu11M6IONJJaYH3FMlQOg=; b=Y6U35N+LLy7Acr6KfmUr/2MTc/ntQNvUF5BPovddTHZJeK71aGNIcBg7+HxDFGH7VsbpbUvYMmT7fex4w9KIhVWpCOsp4r1CdybfKpG2sowrgSkpDqYSMC9pGQ1CxB5WTQhwHAVQK8KLMCpg1aOZKqeNiiTTHWIQyBh1Hx6Tqi8= Received: from DM6PR11MB4154.namprd11.prod.outlook.com (20.176.126.215) by DM6PR11MB3483.namprd11.prod.outlook.com (20.176.123.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.28; Mon, 18 Nov 2019 08:35:51 +0000 Received: from DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f]) by DM6PR11MB4154.namprd11.prod.outlook.com ([fe80::64fd:c810:5c47:243f%3]) with mapi id 15.20.2451.029; Mon, 18 Nov 2019 08:35:51 +0000 From: "Eric Voit (evoit)" To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Dave Thaler CC: "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAASp20A== Date: Mon, 18 Nov 2019 08:35:51 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com; x-originating-ip: [108.31.49.36] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: dffee5b5-7d69-41a0-fd8e-08d76c0251f6 x-ms-traffictypediagnostic: DM6PR11MB3483: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(396003)(366004)(346002)(376002)(39860400002)(136003)(199004)(189003)(99286004)(26005)(5660300002)(33656002)(186003)(478600001)(256004)(14444005)(66574012)(966005)(8676002)(486006)(316002)(6506007)(76116006)(476003)(446003)(7696005)(102836004)(11346002)(54906003)(110136005)(81166006)(81156014)(8936002)(9686003)(229853002)(66066001)(4326008)(76176011)(55016002)(6306002)(6116002)(14454004)(6246003)(3846002)(52536014)(71190400001)(71200400001)(66616009)(66556008)(66476007)(66446008)(64756008)(66946007)(2906002)(86362001)(74316002)(305945005)(25786009)(6436002)(7736002); DIR:OUT; SFP:1101; SCL:1; SRVR:DM6PR11MB3483; H:DM6PR11MB4154.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 1sqled+m2psN99+NbRQ77Q5Pf79y3OUUqNfcqsdxGgDWYPKoXKmfnWmXI+YT2MSFYvYk3QooS77LWrVD6BB/M8ahldlNZo2HhRgANNYqMSK7GQ/joHKFZsAPeJUaoKP0asbIOj75lbExz+yRnZsJRm81orsi9McABUIIYAAmCiIn2v4vGf6YvaIi2g2rkDzd6zmhF2+0plssH2Yxl7Y4LkHzOqCrLXlSQkzIC2PBwbqF1E5rxezr3q2kVaxa++3evHr/ev6B5n/zyoiiRbGYST7Ad+feKUICfRVN/Czng3GsVbO0v+gExoyJCLhChNA3fDYCKuiKrTgGEH3VWEQW88TI56Ld4qFbeytp+wt1iVhES5hGGaHviSoCsplp2rGVc1nA07S2knpsuwZKY6dvO/qgqWzTm8pKf+VOZ7DTdnEy0JTSKb4wzvMhdFpSfzHp Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0561_01D59DC1.3790C0A0" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: dffee5b5-7d69-41a0-fd8e-08d76c0251f6 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 08:35:51.6150 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7aONVF3b9vDRN7A5fQ0hEwVYaLtBJ4OEO9+OZcs5w87dgS7zYUZvpcK0fc8Htk/d X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR11MB3483 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.19, xch-rcd-009.cisco.com X-Outbound-Node: rcdn-core-11.cisco.com Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:36:04 -0000 ------=_NextPart_000_0561_01D59DC1.3790C0A0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable > From: Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen, November 17, 2019 9:41 AM >=20 > On Fri, Nov 15, 2019 at 07:38:32AM +0000, Dave Thaler wrote: > > > > If there is a compelling reason to support a pull-based mechanism, = and we > get consensus that we need it, then great. > > But so far I haven=E2=80=99t heard one. > > >=20 > I hope I get the terminology right... >=20 > Research papers I have seen often use a challenge response model where > the 'verifier' sends a specific challenge that the 'attester' has to = answer > (often with time constraints, minimizing the chance to relay the = challenge > and such things). I think I pointed this out before. >=20 > Perhaps RATS does not need this form of challenge response attestation = and > perhaps RATS is fine with the assumption that the attester somehow = knows > which claims a verifier needs. But then it would be nice to spell this = out > clearly so that people looking for challenge response attestation = attestation > flows know that RATS is not for them. Commercial products which do challenge/response type remote attestation = currently exist. E.g.: = https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/applic= ation-policy-infrastructure-controller-enterprise-module/1-5-x/integrity_= verification/release-notes_ver_275/Cisco_IV_App_RN_1_5_0_275.pdf=20 I am hoping that RATS supports such applications. Eric > /js >=20 > -- > Juergen Schoenwaelder Jacobs University Bremen gGmbH > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > Fax: +49 421 200 3103 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats ------=_NextPart_000_0561_01D59DC1.3790C0A0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTkxMTE4MDgzNTI2WjAjBgkqhkiG 9w0BCQQxFgQU7+9k8Qw8QUqRR3DDUkP8m7ehSZcwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAqwIdia1Du4mtGDn6/z8ZYWWu1Fr15Oxht24axS5ZQpNBYEpvVKzjihDl7yoykEq/o Ct6MC7BGvFfzwtKreY02NL/92v7ft+AzC37xXef04nTnJg+dPvOapuQ8/xWMMx91Ka4P8OhU1e6+ M+XjxKj0MlStgeIxWSxLCuegI952KCKeMMYlC+qdRCVVDxM+D5cWQ3J+2U+cDSYPfEAWo8FnFNF1 lYUVNrDUd6/zfSntwd9EoJHKi0ZPtLv1u+3oYwb9QdWIjXG/HN+9q8YunF7OsyivDKBPuYk//Y3a 22oHomHnX35bJtYtmfXLWclVsMkqOk4CQp/dA+tiMUY3IURaAAAAAAAA ------=_NextPart_000_0561_01D59DC1.3790C0A0-- From nobody Mon Nov 18 00:52:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC4F712084F for ; Mon, 18 Nov 2019 00:52:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pDsOZpEw_b7r for ; Mon, 18 Nov 2019 00:52:28 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740133.outbound.protection.outlook.com [40.107.74.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A1551200C3 for ; Mon, 18 Nov 2019 00:52:28 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Gq1MVPoklK9ikp34+E54ciwM4wMZtb1dWwa/TzbvwWFr2vf4b4f4efIIptxAfRxoow8io4t78e3WollZBMr/v4GWCwm/YNVp0yGC9n8BsWB7ngZIRToLzU0i8zg4riDVBOL8JSvAkaAil1lOMpFy9znf/7ImUgLdDicS8jHIXPiQnqh7/qK8lMP+w4ZnIFAGi+QP0d1w/DwjD8TlIJaYoblt3wnG3KuQC0w0jk+c1upKBoxyyEsChiGU4tJOMgGJQe1hmCBIvDT/PpKIwe2/kqIY8fbtiy7/nfn6BULEfLwFZeM24gmsl2mR4gxKr/qh5K5Qg2epLNS2KMNmlVhnqg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vzIZH/cFGB24JzkJDOtKbTJjkC1swQcXZkyoAEKbFgA=; b=IzSDHLGfedzgmA1F/bZ2EyE44SQWdhXULKBiDA4uPRCAP7ZkGNbxsxrnKqEVVOU/iBTfd0YVgzzTnc4p5pqpRb+fYO9ZJQtnykWOu3kqGd81SG3RBBVwdg8hVQD/wOXKN76PQ//NqrB1FLNWwPsM6yqLQU4sUo9+jdHpymPnKnje4TC5BkQ7z9J5UiwUicmVNV4vJkd7A7A5va2rkUrZ8bHjHVSkMUs19Y6kOPbWlFTCgZKB+WtsnXo2azyirK0jElf7GsXjO5RyIQQtgwWX9mtQOD6XWFlRnbwXTZQaTN0AJVBaWBtcg35w4pfK/TNbAoNwoNpDcp36txysMiwJMQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vzIZH/cFGB24JzkJDOtKbTJjkC1swQcXZkyoAEKbFgA=; b=JcuREgcUwI5VSo0COS5wNfyGWdvMquCgEgHAsD1h+Vp4CVfPUIzasuTAX1Y6dnquH3F66NYu4T0hJ8krZlqNH3HfguDI7/N0+HvphsD2eKhFGWCQY/dk4cOq9meChinJ5DdQTSAe6PmcyZAlEh9DmaUSL2hnIqLu69J2lMA2fR8= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0142.namprd21.prod.outlook.com (10.173.52.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.4; Mon, 18 Nov 2019 08:52:26 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.004; Mon, 18 Nov 2019 08:52:26 +0000 From: Dave Thaler To: =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAAS4Y4A== Date: Mon, 18 Nov 2019 08:52:26 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-18T08:52:25.0862728Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=2684d425-ab6c-41fc-9f6f-9668e8157b15; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [31.133.156.163] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 0ac8cf54-5ea4-4a91-279c-08d76c04a2de x-ms-traffictypediagnostic: MWHPR21MB0142: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(136003)(346002)(396003)(376002)(52314003)(189003)(199004)(13464003)(3846002)(6116002)(22452003)(8990500004)(81156014)(81166006)(316002)(8676002)(6916009)(33656002)(4326008)(54906003)(66946007)(74316002)(7736002)(14454004)(66066001)(10290500003)(66476007)(66556008)(64756008)(76116006)(66446008)(305945005)(8936002)(2906002)(478600001)(186003)(26005)(99286004)(71190400001)(256004)(86362001)(71200400001)(6506007)(10090500001)(76176011)(6436002)(52536014)(102836004)(6306002)(25786009)(55016002)(9686003)(7696005)(6246003)(446003)(11346002)(229853002)(476003)(486006)(53546011)(5660300002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0142; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: +8Yo0X8k3duDF5fmE7cTajeihE40zPxsxtDz4+zIm1IZ1iMemuf3B9vM67ie1UamdNE+GhczCrn5g3Qxdrs90E9igwJqRxerV0u9/AfXbx2jNkNmJjug1eUZvJOYKmB1MCzj8ltn3nq+12lhfB2w5vp/pZa7OsusqhH8fVhBKyBOTWHoyvBnwWvurad+gU77npzp0bmCVwEph3bHvKsXjfINhPvBVCQ2ArdbOGytVnQk+/eoOSoioz+kl4AKRtRrgP8KMQsFuqUc4KoKDUzQcQFTEy1Zh9sWxuWLx1e/zPO3ZSFywG+ZhedP0J1SixDBEXyw3z0EQgsUJcdyn2jGKTR2GrKnoYZIS20BU4h5wlTa6OoTvPjU7Ts9CF/gs8TuyYYiJJUKWPGJKKngcjgEG03D9nVK5Ax2myh6JKdUjfx5gMwuCl3tT0wvOxZOoaylTLeUaVxxWT6Ee1i2JYhN92QCu+K8Bk41a6rbyGiDzDc= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0ac8cf54-5ea4-4a91-279c-08d76c04a2de X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 08:52:26.3062 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ZtWcqdkkijqpxkWgqUrOMu/EdzdGbUpu19gb3yJgdCVE+WKp+oSKH3cg5H6v6sA23yRUdrK08TMO+Usb0b3iPWFv89nqEcsYu8bTAy8OhFw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0142 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:52:31 -0000 Q2hhbGxlbmdlIHJlc3BvbnNlIGNhbiBiZSBkb25lIGluIGEgcHJvdG9jb2wgaW5pdGlhdGVkIGJ5 IHRoZSBBdHRlc3Rlciwgd2hldGhlciB0aGUgQXR0ZXN0ZXIgdGFsa3MgZGlyZWN0bHkgdG8gdGhl IFZlcmlmaWVyIChwYXNzcG9ydCBtb2RlbCksDQpvciBpbmRpcmVjdGx5IHZpYSBhIFJlbHlpbmcg UGFydHkgKG5vcm1hbCBiYWNrZ3JvdW5kIGNoZWNrIG1vZGVsKSwgd2l0aG91dCBoYXZpbmcgdGhl IGRldmljZSBuZWVkaW5nIHRvIHJ1biBhIHNlcnZlciBvZiBzb21lIHNvcnQgbGlrZSBuZXRjb25m IG9yIHJlc3Rjb25mLg0KDQpBdCB0aGUgaGFja2F0aG9uLCBOYW5jeSBwcm92aWRlZCB0aGUgZmly c3QgYWN0dWFsIGFuc3dlciB0byBteSBxdWVzdGlvbiBJJ3ZlIHNlZW4sIHNvIEknbGwgdHJ5IHRv IHN1bW1hcml6ZSBpdCBoZXJlLg0KSSdtIGFsc28gZ29pbmcgdG8gdXNlICJkZXZpY2UgaW5pdGlh dGVkIiBpbnN0ZWFkIG9mICJwdXNoIiwgYW5kICJ2ZXJpZmllciBpbml0aWF0ZWQiIGluc3RlYWQg b2YgInB1bGwiIGluIGNhc2Ugb3RoZXJzIGhhdmUgZGlmZmVyZW50IGRlZmluaXRpb25zIG9mIHB1 c2gvcHVsbCB0aGFuIEkgaW50ZW5kLg0KDQpIZXJlJ3MgdGhlIHR3byBjYXNlcyBJJ3ZlIGhlYXJk IGZvciBkZXZpY2UgYXR0ZXN0YXRpb25zIHRoYXQgYXJlIHZlcmlmaWVyIGluaXRpYXRlZCAob3Ig Im5ldHdvcmsgaW5pdGlhdGVkIiBpZiB5b3UgcHJlZmVyIHNpbmNlIHRoZXNlIGFyZSBuZXR3b3Jr IHVzZSBjYXNlcyk6DQpDYXNlIDEpIFRoZSBuZXR3b3JrIG5vdGljZXMgYW5vbWFsb3VzIHRyYWZm aWMgY29taW5nIGZyb20gYSBkZXZpY2UgYWxyZWFkeSBvbiB0aGUgbmV0d29yaywgd2hpY2ggdHJp Z2dlcnMgYSB2ZXJpZmllciB0byBhc2sgdGhlIGRldmljZSB0byBhdHRlc3QgdG8gaXRzIGhlYWx0 aCAod2hpY2ggbWF5IGhhdmUgY2hhbmdlZCBzaW5jZSBpdCB3YXMgbGFzdCBhdHRlc3RlZCkuICBI ZXJlIHRoZXJlIG1pZ2h0IGV2ZW4gYmUgbm8gUmVseWluZyBQYXJ0eSBpbnZvbHZlZCBwZXIgc2Uu IA0KQ2FzZSAyKSBUaGUgbmV0d29yayBoYXMgbm90IG5vdGljZWQgYW55dGhpbmcgb2RkLCBidXQg d2FudHMgdG8gcHJvYWN0aXZlbHkgcXVlcnkgYSBkZXZpY2UgYW55d2F5LCBlLmcuLCBiZWNhdXNl IHRoZSBuZXR3b3JrJ3MgYXBwcmFpc2FsIHBvbGljeSBvZiB3aGF0IGlzIGNvbnNpZGVyZWQgdHJ1 c3R3b3J0aHkgaGFzIGp1c3QgY2hhbmdlZC4gIEFnYWluIHRoZXJlIG1pZ2h0IGV2ZW4gYmUgbm8g UmVseWluZyBQYXJ0eSBpbnZvbHZlZC4NCg0KSXQgd2FzIGFsc28gcG9pbnRlZCBvdXQgYXQgdGhl IGhhY2thdGhvbiB0aGF0IHVzaW5nIGEgTDIgcHJvdG9jb2wgbGlrZSBFQVAgdG8gdHJpZ2dlciB0 aGUgZGV2aWNlIHRvIGF0dGVzdCwgY2FuIHdvcmsgaW4gY2FzZXMgd2hlcmUgYSBob3N0IGZpcmV3 YWxsIGlzIHByZXNlbnQuDQpIb3dldmVyLCBub3QgYWxsIGRldmljZXMvbGlua3MgdXNlIEVBUC4N Cg0KRGF2ZQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogU2Now7Zud8OkbGRl ciwgSsO8cmdlbiA8Si5TY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPiANClNlbnQ6 IFN1bmRheSwgTm92ZW1iZXIgMTcsIDIwMTkgMTA6NDEgUE0NClRvOiBEYXZlIFRoYWxlciA8ZHRo YWxlckBtaWNyb3NvZnQuY29tPg0KQ2M6IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPjsgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpIDxuY2Ftd2luZ0BjaXNjby5j b20+OyBPbGl2ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykgPGlhbi5vbGl2ZXJAbm9raWEtYmVs bC1sYWJzLmNvbT47IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb20+OyBIZW5rIEJpcmto b2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9yZw0KU3Vi amVjdDogUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBm b3IgWWFuZyBtb2R1bGUgZHJhZnQNCg0KT24gRnJpLCBOb3YgMTUsIDIwMTkgYXQgMDc6Mzg6MzJB TSArMDAwMCwgRGF2ZSBUaGFsZXIgd3JvdGU6DQo+IA0KPiBJZiB0aGVyZSBpcyBhIGNvbXBlbGxp bmcgcmVhc29uIHRvIHN1cHBvcnQgYSBwdWxsLWJhc2VkIG1lY2hhbmlzbSwgYW5kIHdlIGdldCBj b25zZW5zdXMgdGhhdCB3ZSBuZWVkIGl0LCB0aGVuIGdyZWF0Lg0KPiBCdXQgc28gZmFyIEkgaGF2 ZW7igJl0IGhlYXJkIG9uZS4NCj4NCg0KSSBob3BlIEkgZ2V0IHRoZSB0ZXJtaW5vbG9neSByaWdo dC4uLg0KDQpSZXNlYXJjaCBwYXBlcnMgSSBoYXZlIHNlZW4gb2Z0ZW4gdXNlIGEgY2hhbGxlbmdl IHJlc3BvbnNlIG1vZGVsIHdoZXJlIHRoZSAndmVyaWZpZXInIHNlbmRzIGEgc3BlY2lmaWMgY2hh bGxlbmdlIHRoYXQgdGhlICdhdHRlc3RlcicgaGFzIHRvIGFuc3dlciAob2Z0ZW4gd2l0aCB0aW1l IGNvbnN0cmFpbnRzLCBtaW5pbWl6aW5nIHRoZSBjaGFuY2UgdG8gcmVsYXkgdGhlIGNoYWxsZW5n ZSBhbmQgc3VjaCB0aGluZ3MpLiBJIHRoaW5rIEkgcG9pbnRlZCB0aGlzIG91dCBiZWZvcmUuDQoN ClBlcmhhcHMgUkFUUyBkb2VzIG5vdCBuZWVkIHRoaXMgZm9ybSBvZiBjaGFsbGVuZ2UgcmVzcG9u c2UgYXR0ZXN0YXRpb24gYW5kIHBlcmhhcHMgUkFUUyBpcyBmaW5lIHdpdGggdGhlIGFzc3VtcHRp b24gdGhhdCB0aGUgYXR0ZXN0ZXIgc29tZWhvdyBrbm93cyB3aGljaCBjbGFpbXMgYSB2ZXJpZmll ciBuZWVkcy4gQnV0IHRoZW4gaXQgd291bGQgYmUgbmljZSB0byBzcGVsbCB0aGlzIG91dCBjbGVh cmx5IHNvIHRoYXQgcGVvcGxlIGxvb2tpbmcgZm9yIGNoYWxsZW5nZSByZXNwb25zZSBhdHRlc3Rh dGlvbiBhdHRlc3RhdGlvbiBmbG93cyBrbm93IHRoYXQgUkFUUyBpcyBub3QgZm9yIHRoZW0uDQoN Ci9qcw0KDQotLSANCkp1ZXJnZW4gU2Nob2Vud2FlbGRlciAgICAgICAgICAgSmFjb2JzIFVuaXZl cnNpdHkgQnJlbWVuIGdHbWJIDQpQaG9uZTogKzQ5IDQyMSAyMDAgMzU4NyAgICAgICAgIENhbXB1 cyBSaW5nIDEgfCAyODc1OSBCcmVtZW4gfCBHZXJtYW55DQpGYXg6ICAgKzQ5IDQyMSAyMDAgMzEw MyAgICAgICAgIDxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuamFjb2JzLXVuaXZlcnNpdHkuZGUlMkYmYW1wO2RhdGE9 MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDNmRkZGQ1ODc4MWY2NDUzMDEyZWEw OGQ3NmI2YzQwYjMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdD NjM3MDk1OTg1MDEzMDQ5ODQzJmFtcDtzZGF0YT0wTG9FVWxSOTZOaCUyQkFRZlZ1ZmU3RVdEN3lZ N3FRa0x5a2xacGhtbHRiOGMlM0QmYW1wO3Jlc2VydmVkPTA+DQo= From nobody Mon Nov 18 00:59:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A3AC12087D for ; Mon, 18 Nov 2019 00:59:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zh_uB0op7WQx for ; Mon, 18 Nov 2019 00:59:19 -0800 (PST) Received: from p3plsmtpa09-07.prod.phx3.secureserver.net (p3plsmtpa09-07.prod.phx3.secureserver.net [173.201.193.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3E55120854 for ; Mon, 18 Nov 2019 00:59:19 -0800 (PST) Received: from dhcp-96dc.meeting.ietf.org ([31.133.150.220]) by :SMTPAUTH: with ESMTPA id WcsNi7oS7oPMbWcsPitOJN; Mon, 18 Nov 2019 01:59:19 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_9F17434C-5AB2-47DF-A025-2E1C2976C105" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Mon, 18 Nov 2019 16:59:15 +0800 In-Reply-To: Cc: =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" To: Dave Thaler References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfOgIu5Ex6qnE50ZdmHxbylcUnu3rSMM6UA47BSDBmQjGqhhUH18wDMBdx7owN0ay91KM73UX+T99muNUgU1ErVgyD2C2G5AMIYnQt7hw2b1k0OlQbpbD nzNCYW/uARiURwfZH+wPta2oAG1j69aGsBmFpJFrqQ74DTmv2FRIf6mIcQmd2JHMHJI4sOpdYnCNz3yEXnq8AEJ2njfjfhSexitGM/kw4ZM6Vy1iq2yVzMsx YAyoloUEPQThudlfpHMyiDRirDYsMr39GU+pvOsR85N1frwHjSqexJHTijm+HwAXLFw4srpLhDIVSVv8pV/S9HNxZg63fVCsqA9KP/LGz09R0yIik4WUeYKP spy/cSOVYvZSvxV1n8mONT82vrCtq0zM13mnZLTPTvBil+s9uuCIz4MnbhNyf86lO6o1KS9Qn42CwA0lHfeL5Wu5u5bRfQ== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 08:59:22 -0000 --Apple-Mail=_9F17434C-5AB2-47DF-A025-2E1C2976C105 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 18, 2019, at 4:52 PM, Dave Thaler = wrote: >=20 > Case 1) The network notices anomalous traffic coming from a device = already on the network, which triggers a verifier to ask the device to = attest to its health (which may have changed since it was last = attested). Here there might even be no Relying Party involved per se.=20= > Case 2) The network has not noticed anything odd, but wants to = proactively query a device anyway, e.g., because the network's appraisal = policy of what is considered trustworthy has just changed. Again there = might even be no Relying Party involved. I would call the network the relying party. Attestation always has a = relying party because there would be no point if no one cared (if a tree = falls in a forest=E2=80=A6) LL --Apple-Mail=_9F17434C-5AB2-47DF-A025-2E1C2976C105 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 18, 2019, at 4:52 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

Case 1) The network notices = anomalous traffic coming from a device already on the network, which = triggers a verifier to ask the device to attest to its health (which may = have changed since it was last attested).  Here there might even be = no Relying Party involved per se. 
Case 2) The network has not = noticed anything odd, but wants to proactively query a device anyway, = e.g., because the network's appraisal policy of what is considered = trustworthy has just changed.  Again there might even be no Relying = Party involved.

I = would call the network the relying party. Attestation always has a = relying party because there would be no point if no one cared (if a tree = falls in a forest=E2=80=A6)

LL


= --Apple-Mail=_9F17434C-5AB2-47DF-A025-2E1C2976C105-- From nobody Mon Nov 18 01:04:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBAB1120104 for ; Mon, 18 Nov 2019 01:04:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lfzx-z8lF979 for ; Mon, 18 Nov 2019 01:04:03 -0800 (PST) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-eopbgr820120.outbound.protection.outlook.com [40.107.82.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1AE2F120047 for ; Mon, 18 Nov 2019 01:04:03 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gJSGHtn+aeP7dkMGOjfe7L0Awln5EEENol/z/rpVby/+Tf7YWzLUAqQDjy7P95h+SHf+2brDUrLEP8f5iY+p321hzp92PaJPJROjy7v7Z0FXU0UYztA3+KlMeT/YzdPyup0HrRQQT/egwLZxBJKPMvfLqLJSZxBc2jtktBw+9NKhkFSEQX7DoXy1KQy/3WlFx6PfDZJboCyxZ0sFnOMhPHeTZsyWq2s/G4l4c5eFSFxsN9uxS7G23lOpsBi06zI7DOLfmChH7rdIiMl7wWXzOPivLDf23hmSYwvceJ+ISUVBZdTHTBOIGF0G0chmMeDYUkSbS13BWcoNcDvJdxTreg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ko1/ZeKLRDTrm33ZFMKXGUfEscUIqyQlBI9XNAc3BtE=; b=cTqaSLMj4iyGqXW82tsKqBROqu6NKiiwC2v4ZYRFW9gKrvs4S/jjnDIC54AauqOu+RyMpNDKffVsJmiTtBEGLXTgRxAr3pj3hoMXffDNp8zTNkg4VxIj4WKYz9cTIA7/IJWNesWfhgw/Hr/TaPFmUXKt0xc8nk9m0xhZitbdqZaf4Ok9nhydUMiIZMODaOVG0l1ZNEyMd3skkVYLj5yyMB/rlg1dzXLJvwM6rvjin02DXiASd45Weg0PnMBOTlToQSHJbQxEOyIOYsIHAogD6tRaFHq1rN90oftD/gsuKrEkRNtDwZ4Id/nGbnY1dZOksUjTfy3mdHkvHM8IlWyflw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ko1/ZeKLRDTrm33ZFMKXGUfEscUIqyQlBI9XNAc3BtE=; b=Jy0prTAFReitpoUhUuU3Mh98niK3FRM3iWH1nPq9Z3gtT7O4nvuWQi1beNJArQbUB3igAEevYS+OH5QorFwH02tyCMywQa0Rnt9bvAshCtThrOl3TEF++lndDvHOgGJo6nXRNIodnhboM00vBytzwGAhNKe2oFm68op5XemPwv8= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0639.namprd21.prod.outlook.com (10.175.141.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Mon, 18 Nov 2019 09:04:01 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.004; Mon, 18 Nov 2019 09:04:01 +0000 From: Dave Thaler To: Laurence Lundblade CC: =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAAS4Y4IAABJ6AgAAA1fA= Date: Mon, 18 Nov 2019 09:04:01 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-18T09:04:00.0925803Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5c584a7f-72ef-4b89-ae69-fae01f29d259; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [31.133.156.163] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6ef479ed-660b-46de-520a-08d76c064144 x-ms-traffictypediagnostic: MWHPR21MB0639: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(396003)(366004)(346002)(376002)(136003)(39860400002)(189003)(199004)(52314003)(6436002)(81156014)(229853002)(6116002)(8676002)(790700001)(3846002)(14454004)(186003)(81166006)(486006)(2906002)(6916009)(66556008)(25786009)(71190400001)(71200400001)(66476007)(7736002)(4326008)(76176011)(7696005)(66446008)(64756008)(256004)(102836004)(53546011)(6506007)(86362001)(236005)(26005)(76116006)(52536014)(74316002)(8936002)(99286004)(9686003)(6306002)(66066001)(66946007)(54896002)(55016002)(5660300002)(22452003)(6246003)(11346002)(446003)(8990500004)(33656002)(478600001)(10090500001)(476003)(10290500003)(316002)(54906003)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0639; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SoKiHhF8xf304oUkxBdcaXPrUnP9wA7iS8C9ddR5i790tGi8vdJDdsdX8cUopLkYPtpnufefGKIxkZLG6T8PjMaQs+sEm1e6qkQzbdP55wCetL9Qu/hpwbloAEcIum9SCd4KmF3AQ5yoZIuJbL+PExnKQb7zyA9C2AzXLMDMky8hhYjIp5VxZtiecHCY99fcnM104xC8+6IAuqW50Qc5bU+dxUhPHwmU+PpZXKorMMb37EZVtYVe+TbrJK0KwydOcUinAitNhxWVkOZ37TXJ7MdAVTaZQcsVpDKLiteok53AMOuuIdA1S1wbRaAJqesuIC76iPp85KjzXuZ1JytgVGxDnIMYlzTzo5EhnagACiND923USCAqS21RUUg1I8jeK7idqoPaj9t4baxLRl8SQrW1tIQHYVnYOTv685QcE9QjWBIyIDN92LVC/6oLQ9hS x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB078427872BAEEBA45B34E589A34D0MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6ef479ed-660b-46de-520a-08d76c064144 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 09:04:01.5675 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: YgiyOWiXm2a6y+n+9wzwAFg2XB+8z9EnGOY4PDuWt0E5LOOl0PPT++zUGdBwHOFBESjbxewMhhYt8DX2flRnTPG1+ZxuyjGBl/0ra7TJUME= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0639 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:04:06 -0000 --_000_MWHPR21MB078427872BAEEBA45B34E589A34D0MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SWYgYWxsIHlvdSBkbyBpcyBsb2csIHRoZW4gdGhlcmUgaXMgbm8gZW5mb3JjZW1lbnQsIGFuZCBz aW5jZSB0aGUgZGV2aWNlIGRvZXNu4oCZdCB0YWxrIHRvIHRoZSBsb2csIHlvdSBjYW7igJl0IGNh bGwgdGhlIGxvZyBhIOKAnFJlbHlpbmcgUGFydHnigJ0uDQpJIGRpZG7igJl0IHNheSB0aGVyZSB3 YXMgbmV2ZXIgYSBSZWx5aW5nIFBhcnR5IChpZiB5b3UgZG8gZW5mb3JjZW1lbnQgYW5kIGtpY2sg dGhlIGRldmljZSBvZmYgdGhlIG5ldHdvcmsgb3Igc29tZXRoaW5nIHRoZW4geWVzIHRoZXJl4oCZ cyBhIFJlbHlpbmcgUGFydHkpLCBJIHNhaWQg4oCcbWlnaHQgYmUgbm/igJ0uDQpTbyBJIGRpc2Fn cmVlIHdpdGgg4oCcQXR0ZXN0YXRpb24gYWx3YXlzIGhhcyBhIHJlbHlpbmcgcGFydHnigJ0gYmFz ZWQgb24gbXkgZGlzY3Vzc2lvbiB3aXRoIE5hbmN5Lg0KQmVmb3JlIHRoZSBoYWNrYXRob24gSSB3 b3VsZCBoYXZlIGFncmVlZCB3aXRoIHRoYXQgc3RhdGVtZW50IOKYug0KDQpGcm9tOiBMYXVyZW5j ZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClNlbnQ6IE1vbmRheSwgTm92ZW1i ZXIgMTgsIDIwMTkgNDo1OSBQTQ0KVG86IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5j b20+DQpDYzogIlNjaMO2bnfDpGxkZXIsIErDvHJnZW4iIDxKLlNjaG9lbndhZWxkZXJAamFjb2Jz LXVuaXZlcnNpdHkuZGU+OyBTbWl0aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwuY29tPjsgSGVuayBC aXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT47IE5hbmN5IENhbS1XaW5n ZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPjsgT2xpdmVyLCBJYW4gKE5va2lhIC0g RkkvRXNwb28pIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+OyByYXRzQGlldGYub3Jn DQpTdWJqZWN0OiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5h bWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdA0KDQoNCk9uIE5vdiAxOCwgMjAxOSwgYXQgNDo1MiBQ TSwgRGF2ZSBUaGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1h aWx0bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KDQpD YXNlIDEpIFRoZSBuZXR3b3JrIG5vdGljZXMgYW5vbWFsb3VzIHRyYWZmaWMgY29taW5nIGZyb20g YSBkZXZpY2UgYWxyZWFkeSBvbiB0aGUgbmV0d29yaywgd2hpY2ggdHJpZ2dlcnMgYSB2ZXJpZmll ciB0byBhc2sgdGhlIGRldmljZSB0byBhdHRlc3QgdG8gaXRzIGhlYWx0aCAod2hpY2ggbWF5IGhh dmUgY2hhbmdlZCBzaW5jZSBpdCB3YXMgbGFzdCBhdHRlc3RlZCkuICBIZXJlIHRoZXJlIG1pZ2h0 IGV2ZW4gYmUgbm8gUmVseWluZyBQYXJ0eSBpbnZvbHZlZCBwZXIgc2UuDQpDYXNlIDIpIFRoZSBu ZXR3b3JrIGhhcyBub3Qgbm90aWNlZCBhbnl0aGluZyBvZGQsIGJ1dCB3YW50cyB0byBwcm9hY3Rp dmVseSBxdWVyeSBhIGRldmljZSBhbnl3YXksIGUuZy4sIGJlY2F1c2UgdGhlIG5ldHdvcmsncyBh cHByYWlzYWwgcG9saWN5IG9mIHdoYXQgaXMgY29uc2lkZXJlZCB0cnVzdHdvcnRoeSBoYXMganVz dCBjaGFuZ2VkLiAgQWdhaW4gdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5aW5nIFBhcnR5IGlu dm9sdmVkLg0KDQpJIHdvdWxkIGNhbGwgdGhlIG5ldHdvcmsgdGhlIHJlbHlpbmcgcGFydHkuIEF0 dGVzdGF0aW9uIGFsd2F5cyBoYXMgYSByZWx5aW5nIHBhcnR5IGJlY2F1c2UgdGhlcmUgd291bGQg YmUgbm8gcG9pbnQgaWYgbm8gb25lIGNhcmVkIChpZiBhIHRyZWUgZmFsbHMgaW4gYSBmb3Jlc3Ti gKYpDQoNCkxMDQoNCg0K --_000_MWHPR21MB078427872BAEEBA45B34E589A34D0MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7 bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1h cmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxl ZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21h biIsc2VyaWY7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6 YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0K CWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0 LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4 LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3Jk U2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYi IC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl bGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0K PC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0i RU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rp b24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij5JZiBhbGwgeW91IGRvIGlzIGxvZywgdGhlbiB0aGVyZSBpcyBubyBlbmZvcmNlbWVudCwgYW5k IHNpbmNlIHRoZSBkZXZpY2UgZG9lc27igJl0IHRhbGsgdG8gdGhlIGxvZywgeW91IGNhbuKAmXQg Y2FsbCB0aGUgbG9nIGEg4oCcUmVseWluZyBQYXJ0eeKAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SSBk aWRu4oCZdCBzYXkgdGhlcmUgd2FzIG5ldmVyIGEgUmVseWluZyBQYXJ0eSAoaWYgeW91IGRvIGVu Zm9yY2VtZW50IGFuZCBraWNrIHRoZSBkZXZpY2Ugb2ZmIHRoZSBuZXR3b3JrIG9yIHNvbWV0aGlu ZyB0aGVuIHllcyB0aGVyZeKAmXMgYSBSZWx5aW5nIFBhcnR5KSwgSSBzYWlkDQog4oCcbWlnaHQg YmUgbm/igJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlNvIEkgZGlzYWdyZWUgd2l0aCDigJxBdHRlc3Rh dGlvbiBhbHdheXMgaGFzIGEgcmVseWluZyBwYXJ0eeKAnSBiYXNlZCBvbiBteSBkaXNjdXNzaW9u IHdpdGggTmFuY3kuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkJlZm9yZSB0aGUgaGFja2F0aG9uIEkgd291 bGQgaGF2ZSBhZ3JlZWQgd2l0aCB0aGF0IHN0YXRlbWVudA0KPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncztjb2xvcjojMUY0OTdEIj5KPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1y ZXNvcnQuY29tJmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgTm92ZW1iZXIgMTgsIDIw MTkgNDo1OSBQTTxicj4NCjxiPlRvOjwvYj4gRGF2ZSBUaGFsZXIgJmx0O2R0aGFsZXJAbWljcm9z b2Z0LmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+ICZxdW90O1NjaMO2bnfDpGxkZXIsIErDvHJnZW4m cXVvdDsgJmx0O0ouU2Nob2Vud2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZSZndDs7IFNtaXRo LCBOZWQgJmx0O25lZC5zbWl0aEBpbnRlbC5jb20mZ3Q7OyBIZW5rIEJpcmtob2x6ICZsdDtoZW5r LmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlJmd0OzsgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdp bmcpICZsdDtuY2Ftd2luZ0BjaXNjby5jb20mZ3Q7OyBPbGl2ZXIsIElhbiAoTm9raWEgLSBGSS9F c3BvbykgJmx0O2lhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbSZndDs7DQogcmF0c0BpZXRm Lm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChh ZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE5vdiAxOCwgMjAxOSwgYXQgNDo1 MiBQTSwgRGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpkdGhhbGVyPTQwbWljcm9zb2Z0 LmNvbUBkbWFyYy5pZXRmLm9yZyI+ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5v cmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+Q2FzZSAxKSBUaGUgbmV0d29yayBub3RpY2VzIGFub21hbG91cyB0 cmFmZmljIGNvbWluZyBmcm9tIGEgZGV2aWNlIGFscmVhZHkgb24gdGhlIG5ldHdvcmssIHdoaWNo IHRyaWdnZXJzIGEgdmVyaWZpZXIgdG8gYXNrIHRoZSBkZXZpY2UgdG8gYXR0ZXN0IHRvIGl0cyBo ZWFsdGggKHdoaWNoIG1heSBoYXZlDQogY2hhbmdlZCBzaW5jZSBpdCB3YXMgbGFzdCBhdHRlc3Rl ZCkuICZuYnNwO0hlcmUgdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5aW5nIFBhcnR5IGludm9s dmVkIHBlciBzZS48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGJyPg0KQ2FzZSAyKSBUaGUgbmV0d29yayBoYXMgbm90IG5vdGljZWQgYW55dGhpbmcgb2Rk LCBidXQgd2FudHMgdG8gcHJvYWN0aXZlbHkgcXVlcnkgYSBkZXZpY2UgYW55d2F5LCBlLmcuLCBi ZWNhdXNlIHRoZSBuZXR3b3JrJ3MgYXBwcmFpc2FsIHBvbGljeSBvZiB3aGF0IGlzIGNvbnNpZGVy ZWQgdHJ1c3R3b3J0aHkgaGFzIGp1c3QgY2hhbmdlZC4gJm5ic3A7QWdhaW4gdGhlcmUgbWlnaHQg ZXZlbiBiZSBubyBSZWx5aW5nIFBhcnR5IGludm9sdmVkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHdvdWxkIGNh bGwgdGhlIG5ldHdvcmsgdGhlIHJlbHlpbmcgcGFydHkuIEF0dGVzdGF0aW9uIGFsd2F5cyBoYXMg YSByZWx5aW5nIHBhcnR5IGJlY2F1c2UgdGhlcmUgd291bGQgYmUgbm8gcG9pbnQgaWYgbm8gb25l IGNhcmVkIChpZiBhIHRyZWUgZmFsbHMgaW4gYSBmb3Jlc3TigKYpPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_MWHPR21MB078427872BAEEBA45B34E589A34D0MWHPR21MB0784namp_-- From nobody Mon Nov 18 01:09:24 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A85612087D for ; Mon, 18 Nov 2019 01:09:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FfG5vmEmC2v6 for ; Mon, 18 Nov 2019 01:09:19 -0800 (PST) Received: from NAM05-CO1-obe.outbound.protection.outlook.com (mail-eopbgr720124.outbound.protection.outlook.com [40.107.72.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1367C1200CC for ; Mon, 18 Nov 2019 01:09:19 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H51V2MpVKQ6FWe7sVRcGNdLeh7ugx6nK2KhSFXbO3PF7vL5OeaMeGuOtpuSHXMRWOZidbp+MASSR7fsCiA90khoGg/d47kfB+EvO+iFgZItSSIoLqCODJLSrHF3FBL/hrEgrVJkWt3gTrrmXsodgY8gE1VJLcGAP4yV4998ZCNMrIbCpTQdvfDEtZnKbA2QBUZD4+mqO08Ig0rgDD/WppRsiGloa9JCJXnUx6pfd85h54kf1zXPw6taRJzSeYn92vBGlgBpEt4pQfiPkCgGAKSmnN4GfRBXwS2BXMdvF1N/SRhSxQe8EZgyrPD7NLTvEkt3lCdez1uId+jwEtwspjg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=65zcRjVGyvCsjpB0n/mex+F7KdK+JEU3a9q4qCorQsA=; b=Hx/pO2DuibYowFBvgtkkNBgudWZjVasVurIrSZfTq3v+t02eBSN3iZoJqidWTuVa82zkUZJwYF43nb/QlnrWx4XZXt0imF0FcaI2CE8iwo/XtoVRQKxJQRvGRpNhBMraUSNB77c3yo7HHo6QTRrndiZm6dH5f45ZLXpcAz8G4LqESNMo6CamRRNWVUDvB4Plvyl9WGCYHMZaAS46eKBe0jPgfb2WLz3D5/KIctgOjDoOUjv82H7OVn0djl9CVhU/U9mfjNhbwt+x6COXFqeY3qUCs6RJ2w4n5wR0S4dFGKvF3M9R5tvIxgCX9T1q9ptAF22+OvaK4/276sVH7g2m4w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=65zcRjVGyvCsjpB0n/mex+F7KdK+JEU3a9q4qCorQsA=; b=RzSB225JbwHMSl5+FcYmaf2YOYMFlJe/2CxTxOrnnaBs1oQg39lqqYZgrOfxxqr58nUm35dgqt2A6A+i9GKx+5bmfe5z8RHs3ybCks0S8Jbxz8gvtHk7BfDWDmEhaB1/5Le4urRUEabh2+22eru8gbxky6L/vDVn1xwa5jAHZ90= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0639.namprd21.prod.outlook.com (10.175.141.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Mon, 18 Nov 2019 09:09:17 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.004; Mon, 18 Nov 2019 09:09:17 +0000 From: Dave Thaler To: Laurence Lundblade CC: "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Oliver, Ian (Nokia - FI/Espoo)" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAAS4Y4IAABJ6AgAAA1fCAAAGl0A== Date: Mon, 18 Nov 2019 09:09:17 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-18T09:04:00.0925803Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5c584a7f-72ef-4b89-ae69-fae01f29d259; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [31.133.156.163] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 771bd4df-d957-4a8e-8482-08d76c06fd91 x-ms-traffictypediagnostic: MWHPR21MB0639: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(346002)(376002)(136003)(39860400002)(189003)(199004)(52314003)(2940100002)(66574012)(6436002)(81156014)(229853002)(6116002)(8676002)(790700001)(3846002)(14454004)(186003)(81166006)(486006)(2906002)(6916009)(66556008)(25786009)(71190400001)(71200400001)(66476007)(7736002)(4326008)(76176011)(7696005)(66446008)(64756008)(256004)(102836004)(53546011)(6506007)(86362001)(236005)(26005)(76116006)(52536014)(74316002)(8936002)(99286004)(9686003)(6306002)(66066001)(66946007)(54896002)(55016002)(5660300002)(22452003)(6246003)(11346002)(446003)(8990500004)(33656002)(478600001)(10090500001)(476003)(10290500003)(316002)(54906003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0639; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lhmySQ3HMq/lT28QEvD7Zoedv164Hzaqf+PFzA1exlt8b+pNTXd62eDjIXBnaud1TChMl2oCTWIE8uRc7kyimzh6NBSh4Eau2nlzsoNfDiZ0rfDEeHyEcR+/hLQ60Fb6aWDKYww11w/fpMqTxFasHWuP1Ev3cBTEHCnf7hdFpCibb++YdQd8PgvzYq2jhyy40vWTIB9TojcAmFYBzWy1xjNLlN4aoYgxU+4HmQIfnrvlAYeTXWSlhcr9cbPpgnKQpAgtLJ1WI0fxZXH6sL7sbAnd9h6MxcMvSZSucFZP8np6KRaW27p80xTlxtAls1ApqqqsOsaQhGPMFpl2vCVkL9EzVo16V/fQZbLwOHz0KD2QDhEcgy4O0IewbT8JrT8W/GSbakmBPXAviuoXY5M/YR1n1DtK0YqLihbCqtyI83RAARx3BM4Cg5IyWqnYtYCW x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MWHPR21MB07848E815323D3414344263FA34D0MWHPR21MB0784namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 771bd4df-d957-4a8e-8482-08d76c06fd91 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 09:09:17.5480 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: xiYCEDsVg/2y/efhintCtrYTW8SPCEOx0HGg9dO+hLj+z4GVD+VxsigmhZGqCZ+4lrNDrWC5O6JP8TukNTV3QfFfxuvaklT5YIJ3go6uVz8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0639 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:09:22 -0000 --_000_MWHPR21MB07848E815323D3414344263FA34D0MWHPR21MB0784namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkbyB0aGluayBpdCB3b3VsZCBiZSB1c2VmdWwgdG8ga2VlcCB5b3VyIHN0YXRlbWVudCB0cnVl LCBzbyBJIHdpbGwgdGhpbmsgYWJvdXQgaG93IHRvIGRlZmluZSBSZWx5aW5nIFBhcnR5IHNpbmNl IEkgc3VzcGVjdCB0aGVyZeKAmXMgYSB3YXkgYXJvdW5kIGl0IHRoYXQgd2Ugd291bGQgYm90aCBs aWtlLg0KDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBE YXZlIFRoYWxlcg0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSA1OjA0IFBNDQpUbzog TGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+DQpDYzogU21pdGgsIE5l ZCA8bmVkLnNtaXRoQGludGVsLmNvbT47IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0 LmZyYXVuaG9mZXIuZGU+OyBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNp c2NvLmNvbT47IHJhdHNAaWV0Zi5vcmc7ICJTY2jDtm53w6RsZGVyLCBKw7xyZ2VuIiA8Si5TY2hv ZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPjsgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkv RXNwb28pIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+DQpTdWJqZWN0OiBSZTogW1Jh dHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVs ZSBkcmFmdA0KDQpJZiBhbGwgeW91IGRvIGlzIGxvZywgdGhlbiB0aGVyZSBpcyBubyBlbmZvcmNl bWVudCwgYW5kIHNpbmNlIHRoZSBkZXZpY2UgZG9lc27igJl0IHRhbGsgdG8gdGhlIGxvZywgeW91 IGNhbuKAmXQgY2FsbCB0aGUgbG9nIGEg4oCcUmVseWluZyBQYXJ0eeKAnS4NCkkgZGlkbuKAmXQg c2F5IHRoZXJlIHdhcyBuZXZlciBhIFJlbHlpbmcgUGFydHkgKGlmIHlvdSBkbyBlbmZvcmNlbWVu dCBhbmQga2ljayB0aGUgZGV2aWNlIG9mZiB0aGUgbmV0d29yayBvciBzb21ldGhpbmcgdGhlbiB5 ZXMgdGhlcmXigJlzIGEgUmVseWluZyBQYXJ0eSksIEkgc2FpZCDigJxtaWdodCBiZSBub+KAnS4N ClNvIEkgZGlzYWdyZWUgd2l0aCDigJxBdHRlc3RhdGlvbiBhbHdheXMgaGFzIGEgcmVseWluZyBw YXJ0eeKAnSBiYXNlZCBvbiBteSBkaXNjdXNzaW9uIHdpdGggTmFuY3kuDQpCZWZvcmUgdGhlIGhh Y2thdGhvbiBJIHdvdWxkIGhhdmUgYWdyZWVkIHdpdGggdGhhdCBzdGF0ZW1lbnQg4pi6DQoNCkZy b206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xA aXNsYW5kLXJlc29ydC5jb20+Pg0KU2VudDogTW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSA0OjU5 IFBNDQpUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbTxtYWlsdG86ZHRoYWxl ckBtaWNyb3NvZnQuY29tPj4NCkNjOiAiU2Now7Zud8OkbGRlciwgSsO8cmdlbiIgPEouU2Nob2Vu d2FlbGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZTxtYWlsdG86Si5TY2hvZW53YWVsZGVyQGphY29i cy11bml2ZXJzaXR5LmRlPj47IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb208bWFpbHRv Om5lZC5zbWl0aEBpbnRlbC5jb20+PjsgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQu ZnJhdW5ob2Zlci5kZTxtYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4+OyBO YW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgPG5jYW13aW5nQGNpc2NvLmNvbTxtYWlsdG86bmNh bXdpbmdAY2lzY28uY29tPj47IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSA8aWFuLm9s aXZlckBub2tpYS1iZWxsLWxhYnMuY29tPG1haWx0bzppYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFi cy5jb20+PjsgcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcg bW9kdWxlIGRyYWZ0DQoNCg0KT24gTm92IDE4LCAyMDE5LCBhdCA0OjUyIFBNLCBEYXZlIFRoYWxl ciA8ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9 NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQoNCkNhc2UgMSkgVGhlIG5l dHdvcmsgbm90aWNlcyBhbm9tYWxvdXMgdHJhZmZpYyBjb21pbmcgZnJvbSBhIGRldmljZSBhbHJl YWR5IG9uIHRoZSBuZXR3b3JrLCB3aGljaCB0cmlnZ2VycyBhIHZlcmlmaWVyIHRvIGFzayB0aGUg ZGV2aWNlIHRvIGF0dGVzdCB0byBpdHMgaGVhbHRoICh3aGljaCBtYXkgaGF2ZSBjaGFuZ2VkIHNp bmNlIGl0IHdhcyBsYXN0IGF0dGVzdGVkKS4gIEhlcmUgdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBS ZWx5aW5nIFBhcnR5IGludm9sdmVkIHBlciBzZS4NCkNhc2UgMikgVGhlIG5ldHdvcmsgaGFzIG5v dCBub3RpY2VkIGFueXRoaW5nIG9kZCwgYnV0IHdhbnRzIHRvIHByb2FjdGl2ZWx5IHF1ZXJ5IGEg ZGV2aWNlIGFueXdheSwgZS5nLiwgYmVjYXVzZSB0aGUgbmV0d29yaydzIGFwcHJhaXNhbCBwb2xp Y3kgb2Ygd2hhdCBpcyBjb25zaWRlcmVkIHRydXN0d29ydGh5IGhhcyBqdXN0IGNoYW5nZWQuICBB Z2FpbiB0aGVyZSBtaWdodCBldmVuIGJlIG5vIFJlbHlpbmcgUGFydHkgaW52b2x2ZWQuDQoNCkkg d291bGQgY2FsbCB0aGUgbmV0d29yayB0aGUgcmVseWluZyBwYXJ0eS4gQXR0ZXN0YXRpb24gYWx3 YXlzIGhhcyBhIHJlbHlpbmcgcGFydHkgYmVjYXVzZSB0aGVyZSB3b3VsZCBiZSBubyBwb2ludCBp ZiBubyBvbmUgY2FyZWQgKGlmIGEgdHJlZSBmYWxscyBpbiBhIGZvcmVzdOKApikNCg0KTEwNCg0K DQo= --_000_MWHPR21MB07848E815323D3414344263FA34D0MWHPR21MB0784namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7 bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1h cmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxl ZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21h biIsc2VyaWY7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6 YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwt cmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3 RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsN CgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0i Ymx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkkgZG8gdGhpbmsg aXQgd291bGQgYmUgdXNlZnVsIHRvIGtlZXAgeW91ciBzdGF0ZW1lbnQgdHJ1ZSwgc28gSSB3aWxs IHRoaW5rIGFib3V0IGhvdyB0byBkZWZpbmUgUmVseWluZyBQYXJ0eSBzaW5jZSBJIHN1c3BlY3Qg dGhlcmXigJlzIGEgd2F5IGFyb3VuZCBpdCB0aGF0IHdlIHdvdWxkDQogYm90aCBsaWtlLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gUkFUUyAmbHQ7cmF0cy1ib3Vu Y2VzQGlldGYub3JnJmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5EYXZlIFRoYWxlcjxicj4NCjxi PlNlbnQ6PC9iPiBNb25kYXksIE5vdmVtYmVyIDE4LCAyMDE5IDU6MDQgUE08YnI+DQo8Yj5Ubzo8 L2I+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gU21pdGgsIE5lZCAmbHQ7bmVkLnNtaXRoQGludGVsLmNvbSZndDs7IEhlbmsg Qmlya2hvbHogJmx0O2hlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGUmZ3Q7OyBOYW5jeSBD YW0tV2luZ2V0IChuY2Ftd2luZykgJmx0O25jYW13aW5nQGNpc2NvLmNvbSZndDs7IHJhdHNAaWV0 Zi5vcmc7ICZxdW90O1NjaMO2bnfDpGxkZXIsIErDvHJnZW4mcXVvdDsgJmx0O0ouU2Nob2Vud2Fl bGRlckBqYWNvYnMtdW5pdmVyc2l0eS5kZSZndDs7IE9saXZlciwgSWFuIChOb2tpYSAtIEZJL0Vz cG9vKSAmbHQ7aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tJmd0Ozxicj4NCjxiPlN1Ympl Y3Q6PC9iPiBSZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUp IGZvciBZYW5nIG1vZHVsZSBkcmFmdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5JZiBhbGwgeW91IGRv IGlzIGxvZywgdGhlbiB0aGVyZSBpcyBubyBlbmZvcmNlbWVudCwgYW5kIHNpbmNlIHRoZSBkZXZp Y2UgZG9lc27igJl0IHRhbGsgdG8gdGhlIGxvZywgeW91IGNhbuKAmXQgY2FsbCB0aGUgbG9nIGEg 4oCcUmVseWluZyBQYXJ0eeKAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SSBkaWRu4oCZdCBzYXkgdGhl cmUgd2FzIG5ldmVyIGEgUmVseWluZyBQYXJ0eSAoaWYgeW91IGRvIGVuZm9yY2VtZW50IGFuZCBr aWNrIHRoZSBkZXZpY2Ugb2ZmIHRoZSBuZXR3b3JrIG9yIHNvbWV0aGluZyB0aGVuIHllcyB0aGVy ZeKAmXMgYSBSZWx5aW5nIFBhcnR5KSwgSSBzYWlkDQog4oCcbWlnaHQgYmUgbm/igJ0uPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjQ5N0QiPlNvIEkgZGlzYWdyZWUgd2l0aCDigJxBdHRlc3RhdGlvbiBhbHdheXMgaGFz IGEgcmVseWluZyBwYXJ0eeKAnSBiYXNlZCBvbiBteSBkaXNjdXNzaW9uIHdpdGggTmFuY3kuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPkJlZm9yZSB0aGUgaGFja2F0aG9uIEkgd291bGQgaGF2ZSBhZ3JlZWQg d2l0aCB0aGF0IHN0YXRlbWVudA0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OldpbmdkaW5ncztjb2xvcjojMUY0OTdEIj5KPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQt cmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsNCjxicj4NCjxiPlNlbnQ6 PC9iPiBNb25kYXksIE5vdmVtYmVyIDE4LCAyMDE5IDQ6NTkgUE08YnI+DQo8Yj5Ubzo8L2I+IERh dmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj5kdGhh bGVyQG1pY3Jvc29mdC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gJnF1b3Q7U2Now7Zud8Ok bGRlciwgSsO8cmdlbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkouU2Nob2Vud2FlbGRlckBq YWNvYnMtdW5pdmVyc2l0eS5kZSI+Si5TY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRl PC9hPiZndDs7IFNtaXRoLCBOZWQgJmx0OzxhIGhyZWY9Im1haWx0bzpuZWQuc21pdGhAaW50ZWwu Y29tIj5uZWQuc21pdGhAaW50ZWwuY29tPC9hPiZndDs7IEhlbmsgQmlya2hvbHogJmx0OzxhIGhy ZWY9Im1haWx0bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6 QHNpdC5mcmF1bmhvZmVyLmRlPC9hPiZndDs7DQogTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcp ICZsdDs8YSBocmVmPSJtYWlsdG86bmNhbXdpbmdAY2lzY28uY29tIj5uY2Ftd2luZ0BjaXNjby5j b208L2E+Jmd0OzsgT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28pICZsdDs8YSBocmVmPSJt YWlsdG86aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tIj5pYW4ub2xpdmVyQG5va2lhLWJl bGwtbGFicy5jb208L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRz QGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIENhbGwgZm9yIGFk b3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1i b3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE5vdiAxOCwgMjAx OSwgYXQgNDo1MiBQTSwgRGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpkdGhhbGVyPTQw bWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyI+ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1h cmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtI ZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+Q2FzZSAxKSBUaGUgbmV0d29yayBub3RpY2VzIGFu b21hbG91cyB0cmFmZmljIGNvbWluZyBmcm9tIGEgZGV2aWNlIGFscmVhZHkgb24gdGhlIG5ldHdv cmssIHdoaWNoIHRyaWdnZXJzIGEgdmVyaWZpZXIgdG8gYXNrIHRoZSBkZXZpY2UgdG8gYXR0ZXN0 IHRvIGl0cyBoZWFsdGggKHdoaWNoIG1heSBoYXZlDQogY2hhbmdlZCBzaW5jZSBpdCB3YXMgbGFz dCBhdHRlc3RlZCkuICZuYnNwO0hlcmUgdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5aW5nIFBh cnR5IGludm9sdmVkIHBlciBzZS48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGJyPg0KQ2FzZSAyKSBUaGUgbmV0d29yayBoYXMgbm90IG5vdGljZWQgYW55 dGhpbmcgb2RkLCBidXQgd2FudHMgdG8gcHJvYWN0aXZlbHkgcXVlcnkgYSBkZXZpY2UgYW55d2F5 LCBlLmcuLCBiZWNhdXNlIHRoZSBuZXR3b3JrJ3MgYXBwcmFpc2FsIHBvbGljeSBvZiB3aGF0IGlz IGNvbnNpZGVyZWQgdHJ1c3R3b3J0aHkgaGFzIGp1c3QgY2hhbmdlZC4gJm5ic3A7QWdhaW4gdGhl cmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5aW5nIFBhcnR5IGludm9sdmVkLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J IHdvdWxkIGNhbGwgdGhlIG5ldHdvcmsgdGhlIHJlbHlpbmcgcGFydHkuIEF0dGVzdGF0aW9uIGFs d2F5cyBoYXMgYSByZWx5aW5nIHBhcnR5IGJlY2F1c2UgdGhlcmUgd291bGQgYmUgbm8gcG9pbnQg aWYgbm8gb25lIGNhcmVkIChpZiBhIHRyZWUgZmFsbHMgaW4gYSBmb3Jlc3TigKYpPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_MWHPR21MB07848E815323D3414344263FA34D0MWHPR21MB0784namp_-- From nobody Mon Nov 18 01:17:24 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A62F712095B for ; Mon, 18 Nov 2019 01:17:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id izpIl1VbQasM for ; Mon, 18 Nov 2019 01:17:14 -0800 (PST) Received: from p3plsmtpa08-04.prod.phx3.secureserver.net (p3plsmtpa08-04.prod.phx3.secureserver.net [173.201.193.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39D33120959 for ; Mon, 18 Nov 2019 01:17:14 -0800 (PST) Received: from dhcp-96dc.meeting.ietf.org ([31.133.150.220]) by :SMTPAUTH: with ESMTPA id Wd9hiv0V3nTAyWd9iiaAG4; Mon, 18 Nov 2019 02:17:12 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_392137E7-C72F-4C06-A95B-4F330B269C48" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Mon, 18 Nov 2019 17:17:08 +0800 In-Reply-To: Cc: "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Oliver, Ian (Nokia - FI/Espoo)" To: Dave Thaler References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfEVQl5vlnvdEKAqRENWCVVqKZOyCRH/tAGLmyac1KOfWX/fv/d4C33jbjZ3MBND6Cd4UU8+09SKDERWoxXSKhdL/fZeNFiSyjUPuiDoQlr3+11UEi09+ 24Tl9tdMOaOLCigoHkmR1eOwJ8conuwQVugH1nAzeveVZSZw+UO+PHH13NNZ7AZTRXj4s2gSF9Xh+fWQp6Uib4LthkB4NC5i/Q0wiu11BSwaBs/TqoDHJecn O3sS9O2nQARvNzgaOrYpOF0ZjQV0XdSnMHz4w2lk7CzY9Xi+oXaa0pqfQzmxlkOhTH3wHVFq4mtm1rXwQ3BpTXcgpivdLEX/3PWiOoYI/UzMPQoOpes3HRnd N1S6ln/JmmvOaR+zC5zx3OPJpiUTYDZTTajHMkd4MWcPdMEQjRtyWQ45pRz30tPLN52UsTxBGHIjnlLGRRuqhAAsKaPwrA== Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:17:23 -0000 --Apple-Mail=_392137E7-C72F-4C06-A95B-4F330B269C48 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 If a tree falls in a forest, even if no one hears it, there is a log. LL > On Nov 18, 2019, at 5:09 PM, Dave Thaler = wrote: >=20 > I do think it would be useful to keep your statement true, so I will = think about how to define Relying Party since I suspect there=E2=80=99s = a way around it that we would both like. > =20 > From: RATS > On = Behalf Of Dave Thaler > Sent: Monday, November 18, 2019 5:04 PM > To: Laurence Lundblade > > Cc: Smith, Ned >; = Henk Birkholz >; Nancy Cam-Winget (ncamwing) = >; rats@ietf.org = ; "Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" = >; Oliver, Ian (Nokia - = FI/Espoo) > > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > If all you do is log, then there is no enforcement, and since the = device doesn=E2=80=99t talk to the log, you can=E2=80=99t call the log a = =E2=80=9CRelying Party=E2=80=9D. > I didn=E2=80=99t say there was never a Relying Party (if you do = enforcement and kick the device off the network or something then yes = there=E2=80=99s a Relying Party), I said =E2=80=9Cmight be no=E2=80=9D. > So I disagree with =E2=80=9CAttestation always has a relying party=E2=80= =9D based on my discussion with Nancy. > Before the hackathon I would have agreed with that statement J > =20 > From: Laurence Lundblade >=20 > Sent: Monday, November 18, 2019 4:59 PM > To: Dave Thaler > > Cc: "Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen" = >; Smith, Ned = >; Henk Birkholz = >; Nancy Cam-Winget (ncamwing) = >; Oliver, Ian (Nokia - = FI/Espoo) >; rats@ietf.org = > Subject: Re: [Rats] Call for adoption (after draft rename) for Yang = module draft > =20 > =20 > On Nov 18, 2019, at 4:52 PM, Dave Thaler = > wrote: > =20 > Case 1) The network notices anomalous traffic coming from a device = already on the network, which triggers a verifier to ask the device to = attest to its health (which may have changed since it was last = attested). Here there might even be no Relying Party involved per se.=20= > Case 2) The network has not noticed anything odd, but wants to = proactively query a device anyway, e.g., because the network's appraisal = policy of what is considered trustworthy has just changed. Again there = might even be no Relying Party involved. > =20 > I would call the network the relying party. Attestation always has a = relying party because there would be no point if no one cared (if a tree = falls in a forest=E2=80=A6) > =20 > LL > =20 > =20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_392137E7-C72F-4C06-A95B-4F330B269C48 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
If a tree falls in a forest, even if no one hears it, there = is a log.

LL




On Nov = 18, 2019, at 5:09 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

I do think it would be = useful to keep your statement true, so I will think about how to define = Relying Party since I suspect there=E2=80=99s a way around it that we = would both like.
 
From: RATS <rats-bounces@ietf.org> On Behalf = Of Dave Thaler
Sent: Monday, November 18, 2019 = 5:04 PM
To: Laurence Lundblade <lgl@island-resort.com>
Cc: Smith, Ned <ned.smith@intel.com>; = Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com>; rats@ietf.org; "Sch=C3=B6nw=C3=A4lder, = J=C3=BCrgen" <J.Schoenwaelder@jacobs-university.de>; Oliver, Ian = (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs.com>
Subject: Re: [Rats] Call for = adoption (after draft rename) for Yang module draft
 
If = all you do is log, then there is no enforcement, and since the device = doesn=E2=80=99t talk to the log, you can=E2=80=99t call the log a = =E2=80=9CRelying Party=E2=80=9D.
I didn=E2=80=99t say there was never a Relying Party (if you = do enforcement and kick the device off the network or something then yes = there=E2=80=99s a Relying Party), I said =E2=80=9Cmight be no=E2=80=9D.
So I disagree with = =E2=80=9CAttestation always has a relying party=E2=80=9D based on my = discussion with Nancy.
Before the hackathon I would have agreed with that = statement J
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: Monday, November 18, 2019 = 4:59 PM
To: Dave Thaler <dthaler@microsoft.com>
Cc: "Sch=C3=B6nw=C3=A4lder, = J=C3=BCrgen" <J.Schoenwaelder@jacobs-university.de>; Smith, Ned = <ned.smith@intel.com>; = Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; Nancy Cam-Winget = (ncamwing) <ncamwing@cisco.com>; Oliver, Ian (Nokia - FI/Espoo) = <ian.oliver@nokia-bell-labs.com>; rats@ietf.org
Subject: Re: [Rats] Call for = adoption (after draft rename) for Yang module draft
 
 
On Nov 18, 2019, at 4:52 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> wrote:
 
Case 1) The network = notices anomalous traffic coming from a device already on the network, = which triggers a verifier to ask the device to attest to its health = (which may have changed since it was last attested).  Here there = might even be no Relying Party involved per se. 
Case 2) The = network has not noticed anything odd, but wants to proactively query a = device anyway, e.g., because the network's appraisal policy of what is = considered trustworthy has just changed.  Again there might even be = no Relying Party involved.
 
I would = call the network the relying party. Attestation always has a relying = party because there would be no point if no one cared (if a tree falls = in a forest=E2=80=A6)
 
LL
 
 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_392137E7-C72F-4C06-A95B-4F330B269C48-- From nobody Mon Nov 18 01:56:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF99F12008D for ; Mon, 18 Nov 2019 01:56:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ih2-2QPaxLx5 for ; Mon, 18 Nov 2019 01:56:29 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1237120043 for ; Mon, 18 Nov 2019 01:56:27 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAI9uIpr013766 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 18 Nov 2019 10:56:19 +0100 Received: from [31.133.159.37] (31.133.159.37) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 18 Nov 2019 10:56:13 +0100 To: Dave Thaler , =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , "rats@ietf.org" References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: <8744b6ab-8fa5-ee13-6cbf-ccc4d8aea999@sit.fraunhofer.de> Date: Mon, 18 Nov 2019 10:56:09 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.159.37] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 09:56:31 -0000 How is a nonce included as a proof of freshness in this scenario= Viele Grüße, Henk On 18.11.19 09:52, Dave Thaler wrote: > Challenge response can be done in a protocol initiated by the Attester, From nobody Mon Nov 18 02:04:16 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67B9F120874 for ; Mon, 18 Nov 2019 02:04:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=jacobsuniversity.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31uNrdK74ABY for ; Mon, 18 Nov 2019 02:04:13 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130045.outbound.protection.outlook.com [40.107.13.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1BEA12086E for ; Mon, 18 Nov 2019 02:04:12 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IfoUFEnBH6DzqtOy6TS8Gkx8mkoUgsBOumPcIjuycaqmC+vCT0RddIPJRZBEB1O+732mopC5I0H4c9ogAVGonTcrXsxOjRh5sVgqO74QxA5y3H4MipxwRaMwjfvc7wq8h3BC4jMO0X0GsPZsWx5BODoxre0I7FDadXQAQUS+yaROsstfuUts77Vsy/xO1XiB5pP9zNMmxzkpVUvSpt7y2XRw8EnHQ+w0YnpWBVA2cKTB/+yHilLIlCffBwQSIJ7ViBV+39s3Jqu+a6SX13iyZ3LFQnAvl0z5gARVZb7S0OMyQ2A9idMLxPGESOyIoe49PeOLtbEczAM8scko2edPWw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cAkiu2Yzy0at9mxtYTu1JL9m7PUr3Ro4j86yKc4819M=; b=bWkCv3rOJtkjlUHmbAi3VDze1JLt5o/7qD1ywBQfZ8SWm+Z56zgrtMMwQB2gsE3H7ZewSrCxSlNTlUKXYHKLuYu8H278dzv8ncnENEiMcBcPpeCUDWq6a9il55m2g3IeCga7j986DSzh3P57tlFQw2uLKpj2mmeRj9R2bJcOOS0HtijL+0fW9R8oI6wIimKQSx/FEc8epyxW2rutf6u3fkSCNKHFknh4XGoRqrhxsVUdumYrqXuoMiK0K008ZUXeL8SBTGMJkiiOlSRDZfzVv5asMNDgbOFVtSiNEefPAetiSwIgHVJeWCWmbEHiNsDxVy71jzZ4iAD4SHRP3pSX2A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=jacobs-university.de; dmarc=pass action=none header.from=jacobs-university.de; dkim=pass header.d=jacobs-university.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jacobsuniversity.onmicrosoft.com; s=selector2-jacobsuniversity-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=cAkiu2Yzy0at9mxtYTu1JL9m7PUr3Ro4j86yKc4819M=; b=EBs/F4vUc9lk5Taiwy0Zctcc4L0suc0SEc9vtHoXx/Mn0jr4Le91kOFIpsDYeq8B07YIvGDm4lnrlCIVOG47bRZ3LgK28vOIp3+YGJ/HY3eeUCPSsCXhxRZZm9MsgsL40uUU8RqwFejX9J+WUA0LQxCXgfBJKO5kzpfj6Wl0CWo= Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (10.161.65.11) by AM5P190MB0354.EURP190.PROD.OUTLOOK.COM (10.161.89.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.28; Mon, 18 Nov 2019 10:04:09 +0000 Received: from AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff]) by AM5P190MB0482.EURP190.PROD.OUTLOOK.COM ([fe80::6c6c:2cd2:11dd:2aff%5]) with mapi id 15.20.2451.029; Mon, 18 Nov 2019 10:04:09 +0000 From: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= To: Dave Thaler CC: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAAS4Y4IAAFr8A Date: Mon, 18 Nov 2019 10:04:09 +0000 Message-ID: <20191118100408.kzazms6r7cn7garu@anna.jacobs.jacobs-university.de> References: <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: Reply-To: =?iso-8859-1?Q?Sch=F6nw=E4lder=2C_J=FCrgen?= Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: AM3PR07CA0069.eurprd07.prod.outlook.com (2603:10a6:207:4::27) To AM5P190MB0482.EURP190.PROD.OUTLOOK.COM (2603:10a6:206:1d::11) authentication-results: spf=none (sender IP is ) smtp.mailfrom=J.Schoenwaelder@jacobs-university.de; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [2001:638:709:5::7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7399beae-4416-4e87-6884-08d76c0ea78c x-ms-traffictypediagnostic: AM5P190MB0354: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39850400004)(136003)(366004)(346002)(396003)(376002)(199004)(189003)(4326008)(316002)(8936002)(54906003)(86362001)(102836004)(305945005)(7736002)(186003)(6506007)(386003)(1511001)(3450700001)(6116002)(46003)(476003)(6486002)(76176011)(52116002)(2906002)(71200400001)(229853002)(71190400001)(6436002)(6512007)(6306002)(256004)(786003)(11346002)(446003)(486006)(66476007)(66446008)(66556008)(66946007)(6916009)(14454004)(81166006)(25786009)(81156014)(6246003)(8676002)(478600001)(99286004)(5660300002)(43066004)(64756008)(1076003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5P190MB0354; H:AM5P190MB0482.EURP190.PROD.OUTLOOK.COM; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: jacobs-university.de does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 0QJE38nDr5R1c/Soh9lbNfqY6wwKR+y3iAc2RfVe2NLwdpfglxOg0iSBsi3hc4A+eUpJvklJca/jW4+BLJYHnXBb9xt1Rgs1kp/H+y9FDGZ6w1fiMJD1a3qJwTpCHuKazXj4oSgO6XGCERNDFJoaZe67sKSgWN1lW8v2KzADRUpTx9k97UKVfT/6afndP+eymfgvHCO1vgydsy+hiibSsWHc7x//d1TgUaH6zR3l9bI++906FIrgr8Ln8hA9v4Yf9DrfnV2LoU7wrwqZPn2JNmY1tO+OgOZSSDKccHTz/upB2PWdairIQumx4LdiwKsTk2TVgEvIAuFxRQEdhTzWAqH2xq6YgVFaBVVFlfoIEPGL/S8lgqFaIk5z76fIya16T0WMXPy6fi04li+zZBOQZJvh/97f3fOHu8X9JhNeH90bRhHfn6oaU3Gsr7onKONT Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: jacobs-university.de X-MS-Exchange-CrossTenant-Network-Message-Id: 7399beae-4416-4e87-6884-08d76c0ea78c X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 10:04:09.4332 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f78e973e-5c0b-4ab8-bbd7-9887c95a8ebd X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: VqoIpjPOy0dot6GxQMCJGMJSl6OWxWL/s2c7WyqJtxNA/MYAiyVliYcVOzoQCotly4Jlyy4Jl1VGuvA2XJfSJ6K9rMHqUrqCnemXd16kCF4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5P190MB0354 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 10:04:15 -0000 On Mon, Nov 18, 2019 at 08:52:26AM +0000, Dave Thaler wrote: > Challenge response can be done in a protocol initiated by the Attester, w= hether the Attester talks directly to the Verifier (passport model), > or indirectly via a Relying Party (normal background check model), withou= t having the device needing to run a server of some sort like netconf or re= stconf. > I asked about a challenge/response interaction model in the architecture; how communication is done should not be relevant for the architecture. Disclaimer: While I have been somewhat involved in the design of yang / restconf / netconf, that does not mean I believe these technologies are always a good fit. (I specifically asked why people believe YANG is a good fit for TPM since this appeared to be a rather surprising use of YANG to me.) I am not here to push yang or netconf or restconf, I am here because I am interested in remote attestations. /js --=20 Juergen Schoenwaelder Jacobs University Bremen gGmbH Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany Fax: +49 421 200 3103 From nobody Mon Nov 18 02:09:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D08461207FE for ; Mon, 18 Nov 2019 02:09:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2g-5Hr44VbJZ for ; Mon, 18 Nov 2019 02:09:48 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1C56120289 for ; Mon, 18 Nov 2019 02:09:46 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAIA9djh014181 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 18 Nov 2019 11:09:40 +0100 Received: from [31.133.159.37] (31.133.159.37) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Mon, 18 Nov 2019 11:09:34 +0100 To: Dave Thaler , =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , "rats@ietf.org" References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> From: Henk Birkholz Message-ID: Date: Mon, 18 Nov 2019 11:09:30 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [31.133.159.37] Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 10:09:50 -0000 OH - I see, you want to include a call home feature in the ecosystem of interaction models. There be dragons, though. On 18.11.19 09:52, Dave Thaler wrote: > triggers a verifier to ask the device to attest to its health From nobody Mon Nov 18 02:34:03 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16C88120851 for ; Mon, 18 Nov 2019 02:34:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4YasGPCrw6Xs for ; Mon, 18 Nov 2019 02:34:01 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDC461200DF for ; Mon, 18 Nov 2019 02:34:00 -0800 (PST) Received: from dooku.sandelman.ca (dhcp-8d1f.meeting.ietf.org [31.133.141.31]) by relay.sandelman.ca (Postfix) with ESMTPS id 6EDC51F450 for ; Mon, 18 Nov 2019 10:33:59 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 9EB3010F5; Mon, 18 Nov 2019 18:33:58 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> Comments: In-reply-to Laurence Lundblade message dated "Mon, 18 Nov 2019 16:59:15 +0800." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Mon, 18 Nov 2019 18:33:58 +0800 Message-ID: <5993.1574073238@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 10:34:02 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable >> Case 1) The network notices anomalous traffic coming from a device >> already on the network, which triggers a verifier to ask the device = to >> attest to its health (which may have changed since it was last >> attested). Here there might even be no Relying Party involved per s= e. >> Case 2) The network has not noticed anything odd, but wants to >> proactively query a device anyway, e.g., because the network's >> appraisal policy of what is considered trustworthy has just changed. >> Again there might even be no Relying Party involved. Laurence Lundblade wrote: > I would call the network the relying party. Attestation always has a > relying party because there would be no point if no one cared (if a > tree falls in a forest=E2=80=A6) I would be even more specific to say that the network's Policy Enforcement Point is the relying party.=20 =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3Sc5YACgkQlUzhVv38 QpB+HwgAiFuEyaM2SdQwQcD004einXeeEoKz+iprEOuf68fB/bVz4Kz+AnODGleT X0b7QJPeOZXYxGTkdwtNjJsZtGD/Gdg5aQOCtmXjqrME+As3S1jrun8TaQQ2v+N+ 71jmRnRWFm+Yqeb1GUu6RB4k4fg9/9QtjYyo4yxGIKXgmE6wm0+NOGvsWRMLx0K+ EoVTrn4Vnbg+IFu8M6wUAj1A+iUvUsGQKSudne+C44NdW8UMXQo0d9VLJAoajEnU mWJZbvXoYeqB2MaxOUCHpeOZfJwif3naj9GWS/hjuBw6pESNmEdyYalpMUNOl2kq vyBDB29BqDHo4g6YcYxjxWo1hP4kKQ== =nkx5 -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Nov 18 02:39:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC1B2120851 for ; Mon, 18 Nov 2019 02:39:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cewGIxdgIX2S for ; Mon, 18 Nov 2019 02:39:29 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22BF41200DF for ; Mon, 18 Nov 2019 02:39:29 -0800 (PST) Received: from lhreml705-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 22008EB4B3CB2C6B7EB6; Mon, 18 Nov 2019 10:39:27 +0000 (GMT) Received: from lhreml711-chm.china.huawei.com (10.201.108.62) by lhreml705-cah.china.huawei.com (10.201.108.46) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 18 Nov 2019 10:39:26 +0000 Received: from lhreml711-chm.china.huawei.com (10.201.108.62) by lhreml711-chm.china.huawei.com (10.201.108.62) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Mon, 18 Nov 2019 10:39:26 +0000 Received: from DGGEMM403-HUB.china.huawei.com (10.3.20.211) by lhreml711-chm.china.huawei.com (10.201.108.62) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Mon, 18 Nov 2019 10:39:26 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.140]) by DGGEMM403-HUB.china.huawei.com ([10.3.20.211]) with mapi id 14.03.0439.000; Mon, 18 Nov 2019 18:39:22 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+BqGAgAAHhQCAAAO1AIAGacyAgAAGuYCAAJAygIAAtdsAgAB+MgCAAqU4AIACdRAAgAOa1oCAATDOAIAAAeiAgAAadwCAAIeEoA== Date: Mon, 18 Nov 2019 10:39:21 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> <5993.1574073238@dooku.sandelman.ca> In-Reply-To: <5993.1574073238@dooku.sandelman.ca> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.41.150] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?utf-8?b?562U5aSNOiAgQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVy?= =?utf-8?q?_draft_rename=29_for_Yang_module_draft?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 10:39:31 -0000 UG9saWN5IEVuZm9yY2VtZW50IFBvaW50IG9yIFBvbGljeSBEZWNpc2lvbiBQb2ludD8NCg0KLS0t LS3pgq7ku7bljp/ku7YtLS0tLQ0K5Y+R5Lu25Lq6OiBSQVRTIFttYWlsdG86cmF0cy1ib3VuY2Vz QGlldGYub3JnXSDku6PooaggTWljaGFlbCBSaWNoYXJkc29uDQrlj5HpgIHml7bpl7Q6IDIwMTnl ubQxMeaciDE45pelIDE4OjM0DQrmlLbku7bkuro6IHJhdHNAaWV0Zi5vcmcNCuS4u+mimDogUmU6 IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBt b2R1bGUgZHJhZnQNCg0KDQogICAgPj4gQ2FzZSAxKSBUaGUgbmV0d29yayBub3RpY2VzIGFub21h bG91cyB0cmFmZmljIGNvbWluZyBmcm9tIGEgZGV2aWNlDQogICAgPj4gYWxyZWFkeSBvbiB0aGUg bmV0d29yaywgd2hpY2ggdHJpZ2dlcnMgYSB2ZXJpZmllciB0byBhc2sgdGhlIGRldmljZSB0bw0K ICAgID4+IGF0dGVzdCB0byBpdHMgaGVhbHRoICh3aGljaCBtYXkgaGF2ZSBjaGFuZ2VkIHNpbmNl IGl0IHdhcyBsYXN0DQogICAgPj4gYXR0ZXN0ZWQpLiAgSGVyZSB0aGVyZSBtaWdodCBldmVuIGJl IG5vIFJlbHlpbmcgUGFydHkgaW52b2x2ZWQgcGVyIHNlLg0KDQogICAgPj4gQ2FzZSAyKSBUaGUg bmV0d29yayBoYXMgbm90IG5vdGljZWQgYW55dGhpbmcgb2RkLCBidXQgd2FudHMgdG8NCiAgICA+ PiBwcm9hY3RpdmVseSBxdWVyeSBhIGRldmljZSBhbnl3YXksIGUuZy4sIGJlY2F1c2UgdGhlIG5l dHdvcmsncw0KICAgID4+IGFwcHJhaXNhbCBwb2xpY3kgb2Ygd2hhdCBpcyBjb25zaWRlcmVkIHRy dXN0d29ydGh5IGhhcyBqdXN0IGNoYW5nZWQuDQogICAgPj4gQWdhaW4gdGhlcmUgbWlnaHQgZXZl biBiZSBubyBSZWx5aW5nIFBhcnR5IGludm9sdmVkLg0KDQpMYXVyZW5jZSBMdW5kYmxhZGUgPGxn bEBpc2xhbmQtcmVzb3J0LmNvbT4gd3JvdGU6DQogICAgPiBJIHdvdWxkIGNhbGwgdGhlIG5ldHdv cmsgdGhlIHJlbHlpbmcgcGFydHkuIEF0dGVzdGF0aW9uIGFsd2F5cyBoYXMgYQ0KICAgID4gcmVs eWluZyBwYXJ0eSBiZWNhdXNlIHRoZXJlIHdvdWxkIGJlIG5vIHBvaW50IGlmIG5vIG9uZSBjYXJl ZCAoaWYgYQ0KICAgID4gdHJlZSBmYWxscyBpbiBhIGZvcmVzdOKApikNCg0KSSB3b3VsZCBiZSBl dmVuIG1vcmUgc3BlY2lmaWMgdG8gc2F5IHRoYXQgdGhlIG5ldHdvcmsncyBQb2xpY3kgRW5mb3Jj ZW1lbnQgUG9pbnQgaXMgdGhlIHJlbHlpbmcgcGFydHkuIA0KDQoNCi0tDQpNaWNoYWVsIFJpY2hh cmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYT4sIFNhbmRlbG1hbiBTb2Z0d2FyZSBXb3JrcyAg LT0gSVB2NiBJb1QgY29uc3VsdGluZyA9LQ0KDQoNCg0K From nobody Mon Nov 18 03:06:45 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40BA212091C for ; Mon, 18 Nov 2019 03:06:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5POcPcAHBZ7q for ; Mon, 18 Nov 2019 03:06:42 -0800 (PST) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-eopbgr770119.outbound.protection.outlook.com [40.107.77.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 434C7120919 for ; Mon, 18 Nov 2019 03:06:42 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=knGgz7GmI0TzALg78bMcLxeSaku2BSjQL9E9zOMbw9rpGub4UGwYWw5E6dbkCLVDjqSmOTxLt7mxszWmSqNtvgdXIwp3W0bAeH7DNVRCV2fTj8dEze4Cka/eCernHYVcmVw1QHklEJ5ZNqYZvxQjGPCUEkYbWKCQcnOHQgrjtO1mXFa82rbfVMDrv9l7Wphuri3EhWEGJ0HA0HAokDey0SoxvL/9Oh+wIdRQAAMuk3qQquYmz+aAhsQzVNovjY41j1JeF/xwMVW9jTaBAiskFaX6ISVzBTyucyVWijx8lS3bJVDBJz6XPTiVc6kNY9Z6H5IoZKn5L40DsEnIGsWECQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ax+XKkcjNfYD4ny/Mw3G49LNiVz7uCQYXgSgxw/rkig=; b=XcN2DgGUAmNxp6m6Dx1Xj8MJ5OAtVtnvUXTQ+StJUO+s+yNVpWpQ4sU3bYwEhLnCxf2FlC+dv5BAk8qCXgEYFOVXkIzXWaJutoRKevnKxRwRMY7/R1BLiwfSbl7IC1ZueNJdve6mcqNAtFpM6lpgpjwMLviEOeWvW4b8gk2TdKvnAx5+UXPkMAs+GxNsU7RCALqBfvEadulVUmbfRC39R7foaTCoGeDLGcR1ZP9l4Y6qNszQv2gw0yU11FONQwuJX/BjE/lJMPvkWbZ91AQ/RQe04QVoHYgvittQUq5XUCDMeJqvVZJZtqj62+oHAKOKUzj/2oLpZe1Y81TyyKKfpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ax+XKkcjNfYD4ny/Mw3G49LNiVz7uCQYXgSgxw/rkig=; b=ibOmgj4h1QiqMwzkN64gX2lp7WO3FLftREX82QSYOEyqI4X9u6kiGyJV56AoX2XmpbjGnCq2FoNwV2/CtNrFzPn5RuqKqOoYGq4I0VW8VFxBaW3ghDqJFcFUV+MHK+WrRQzRZ29+gLpkrw7Pn3F75i3rIGcpj0CnLmcBUtolhkw= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0638.namprd21.prod.outlook.com (10.175.141.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.4; Mon, 18 Nov 2019 11:06:40 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.004; Mon, 18 Nov 2019 11:06:40 +0000 From: Dave Thaler To: Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Laurence Lundblade , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgARYS4CAAS4Y4IAAFISAgAATJEA= Date: Mon, 18 Nov 2019 11:06:40 +0000 Message-ID: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> <8744b6ab-8fa5-ee13-6cbf-ccc4d8aea999@sit.fraunhofer.de> In-Reply-To: <8744b6ab-8fa5-ee13-6cbf-ccc4d8aea999@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-18T11:06:39.0126392Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=70429ec1-7083-45f3-b710-53eb27380a30; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [31.133.156.163] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cd3a8b4a-8515-4922-bc09-08d76c176392 x-ms-traffictypediagnostic: MWHPR21MB0638: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(39860400002)(136003)(366004)(346002)(13464003)(199004)(189003)(9686003)(8936002)(8676002)(86362001)(81166006)(81156014)(6436002)(4326008)(8990500004)(99286004)(33656002)(10090500001)(6246003)(66066001)(256004)(966005)(316002)(14454004)(305945005)(7736002)(71200400001)(10290500003)(52536014)(71190400001)(66946007)(66556008)(2906002)(66476007)(76116006)(54906003)(74316002)(64756008)(66446008)(5660300002)(478600001)(110136005)(3846002)(76176011)(6506007)(446003)(486006)(476003)(11346002)(186003)(25786009)(26005)(229853002)(22452003)(7696005)(102836004)(6116002)(53546011)(6306002)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0638; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: /5Fw+ycTIP7ohsaqYNfdaN+vwsu0B/FS+N4j+P2MZ6bg2CBn6881BMT3C679QjYkwTX0qcH/+4Tg4Kregrv1GTMCxss+V8vemXhJahQ7g9e5jFpUpOPBwu3R/Eu87xuFLFRQeom+dj6zK94zrP5zs/c/cwSxK/F6LgNK/JkXYDwVVUw2sFYAljp0EQeJ0iWq9pKYf2ybbdJ+ycHv9gR7wpAYBqJ7t8vX0GiMDk3+IP4rm2uYe78tUYUS9rv7DjWg864JezhlgVb8Gn0UzHNeJiAQ6IzUHtwkykkgSdDPpdkvFtpq+JuNswrIecbX3Xx/BgowwK+4/fK4R2bBITRmGVq+mnOMws+FB3pQfBStcz4IR4GjpkgxNZsvgvxFr/hvEhHUKJLU8qgDVd03RtMil/nTUabY4QH1VF0ULfeKf2PGyKHiWaK64TmMf5m2oC7J2YjSRn2uUbRu5x5vNHbTfRhYPwUDZRme1IvEnHBSgSg= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: cd3a8b4a-8515-4922-bc09-08d76c176392 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 11:06:40.5863 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8Ry+lmtP88/ynYUbVC0q583ubUZ5eevrUoU5nyQ7bPP9BSJInVmlNvFNxjCWgCvq6MBpj2OCn6VN3enBF/aPKsImM/A11wspLBZkJxaxbkk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0638 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 11:06:44 -0000 VGhlcmUgYXJlIG1hbnkgd2F5cywgYW5kIHdlIHNob3VsZG4ndCBjb25zdHJhaW4gdGhlbiBpbiB0 aGUgYXJjaGl0ZWN0dXJlLCBpZiB3ZSB3YW50IGV4aXN0aW5nIHByb3RvY29scyB0byBiZSB1c2Fi bGUuDQoNCkJ1dCBmb3IgZXhhbXBsZSwgYSAzLXdheSBoYW5kc2hha2U6DQoxKSBEZXZpY2Ugc2Vu ZHMgbWVzc2FnZSB0byBvdGhlciBzaWRlIChSZWx5aW5nIHBhcnR5IG9yIFZlcmlmaWVyKQ0KMikg T3RoZXIgc2lkZSByZXNwb25kcyB3aXRoIGEgbm9uY2UNCjMpIERldmljZSBzZW5kcyBhdHRlc3Rh dGlvbiB0aGF0IGluY2x1ZGVzIHRoZSBub25jZQ0KDQpEYXZlDQoNCi0tLS0tT3JpZ2luYWwgTWVz c2FnZS0tLS0tDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBP ZiBIZW5rIEJpcmtob2x6DQpTZW50OiBNb25kYXksIE5vdmVtYmVyIDE4LCAyMDE5IDU6NTYgUE0N ClRvOiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPjsgU2Now7Zud8OkbGRlciwg SsO8cmdlbiA8Si5TY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPg0KQ2M6IE5hbmN5 IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdpbmdAY2lzY28uY29tPjsgT2xpdmVyLCBJYW4g KE5va2lhIC0gRkkvRXNwb28pIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20+OyBTbWl0 aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwuY29tPjsgTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNs YW5kLXJlc29ydC5jb20+OyByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW1JhdHNdIENhbGwg Zm9yIGFkb3B0aW9uIChhZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdA0K DQpIb3cgaXMgYSBub25jZSBpbmNsdWRlZCBhcyBhIHByb29mIG9mIGZyZXNobmVzcyBpbiB0aGlz IHNjZW5hcmlvPQ0KDQpWaWVsZSBHcsO8w59lLA0KDQpIZW5rDQoNCk9uIDE4LjExLjE5IDA5OjUy LCBEYXZlIFRoYWxlciB3cm90ZToNCj4gQ2hhbGxlbmdlIHJlc3BvbnNlIGNhbiBiZSBkb25lIGlu IGEgcHJvdG9jb2wgaW5pdGlhdGVkIGJ5IHRoZSBBdHRlc3RlciwNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRT QGlldGYub3JnDQpodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZy YXRzJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2QwMjkyNjJh M2Y2YjQ2ZWViMGYyMDhkNzZjMGQ5OThhJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRi NDclN0MxJTdDMCU3QzYzNzA5NjY3Nzk4ODIyMzc0OSZhbXA7c2RhdGE9ZTNlazFvdThrS0VyZFY3 U0o3cnliNHlNbXNFUlpMMTklMkJmJTJCZTRhVXlHUW8lM0QmYW1wO3Jlc2VydmVkPTANCg== From nobody Mon Nov 18 04:08:20 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D479312090D for ; Mon, 18 Nov 2019 04:08:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8NCjCBwxqGYr for ; Mon, 18 Nov 2019 04:08:15 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-eopbgr790109.outbound.protection.outlook.com [40.107.79.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C7DA1208E5 for ; Mon, 18 Nov 2019 04:08:14 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PSDI1/X37us3NSBLODYLpdPSnWrhkPPi9Kudufs0HeTpHNYfyEBFFdYRlZiqQCgvrcsX3pZu5QPM/ZEt7yEHv8zWsO8w6HjfdludmB8k7al2loZoDuP5JwZf/0UAwFJNcCBSBQeicdYLZH94AnfIGgKrcoaLfTmm4P3lKdhUFWFqgkLr+IrFm/HNrtt9XhImaQceLBmicJBETazgTBGu7jZ7hqjF35M6FnynsCmWZ5QYvLs+FI0ZsbjPAHaaeZIcoQ2WOdhvtL4kB15dxJ5RCRMDDiytBq/OCxgkkVMZawzRhQud32LMqMJrLcuUvFKGyRODf6RhE63v/rv/NlFOnQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JHT7ccpxsTbbssuGk1IO8EE1WQ+yavlN9CrbnSZI5N8=; b=UfNwQ6M9dxrQUSPPfQvYZZyzfigT6SaZMzpI1GE/0lUzBBnQRMQPMU31rAEYNc80SBbvtoC0FTxMdtWKlY6hT4EKUfyTMEanR614YBbmKIfivAzEQgcHRfqqJ4xfETLIYG3jbtlbAFXBXCqghdMUzGURN00CWtD8JChNIfgSf4bj4pvJ0rDHtxkKXmDTmpZg9uZ53IGzShKWsFdd6GssPQnCnb3HqcPR0Qqbpktpcqk9XBi6vVDXt0kD5EMEAY6dodpGj0SJyRNp2YroX+nl6KuHQngelvXORjEqqq5Xz5LHcC7AyipCwDMrM0R6XUqrE7EmwZIEierUudwuLdmgvg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=JHT7ccpxsTbbssuGk1IO8EE1WQ+yavlN9CrbnSZI5N8=; b=QpkCRx+9vDA7X3DgAwznhGNN2h3c9sGOQmY6pkWGZ5fhj4nzlUbhe39Pw/YxbvYnNXabnC40RfRGSbgQvPazYCya0mBxfYTpiJKPMjKUee5tjE596pFz1YrjNOfoZ9YrbRJcf7A1B0XM2rAz2mfu6FnsP/TmlqifRbUV8YkjUxU= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0781.namprd21.prod.outlook.com (10.173.51.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.6; Mon, 18 Nov 2019 12:08:13 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.004; Mon, 18 Nov 2019 12:08:13 +0000 From: Dave Thaler To: "Eric Voit (evoit)" , "Smith, Ned" , Henk Birkholz , =?utf-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= , Laurence Lundblade CC: "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABTv6AgAAP44CAABCHAIAAQrKAgAALuQCABbjv8A== Date: Mon, 18 Nov 2019 12:08:13 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> <59707a99-8cec-2005-b1ee-72f171234cbe@sit.fraunhofer.de> <5C6D6C7C-05DC-4103-9A80-A029F0151996@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-18T12:08:11.0767510Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=3b204ce2-18fa-4cb3-b3d2-00300265d317; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [31.133.156.163] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8073ebd1-c129-41b9-ff44-08d76c1ffcb5 x-ms-traffictypediagnostic: MWHPR21MB0781: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(346002)(376002)(136003)(396003)(189003)(199004)(5660300002)(102836004)(256004)(76116006)(9686003)(478600001)(6436002)(66946007)(81166006)(71190400001)(66066001)(305945005)(7736002)(26005)(8676002)(229853002)(25786009)(10290500003)(71200400001)(81156014)(86362001)(14454004)(99286004)(4326008)(486006)(52536014)(7696005)(8936002)(33656002)(76176011)(3846002)(6116002)(6246003)(54906003)(8990500004)(74316002)(55016002)(4744005)(6506007)(22452003)(11346002)(64756008)(446003)(10090500001)(66476007)(66556008)(186003)(316002)(66446008)(2906002)(110136005)(476003); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0781; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: BsMAtNvMlJUaTnBAXiN3Lkpcv4UkN5BZLSC7HwyJrj1lsA8SBL09e35gyIfD1MIdn1EPrWDoYvePkNPK4kKbita66vCtwtE6IzgUeGI6lVtdP0owSP5cbrXvHNthhDmVqr+4myGLLHF8Wc32ybZTRCTTdVTet8uzwtTRV4nxlgXzR7ToAoSGKsuKZ3bnghm53wGBTECfR2dlFaioWt4S2xNhbQBX3kNnehUJblXja19K/qTechP3ZKBBu2cMEFg1RfQ9k9LrRPBebtzTmJyRnMJXYLjLcn0JpgdcfUV0ePVqVDNaNZqA1eKPDnFrCGDyHmBD8lcxXDu9vYbXj0e7YxA59GGlNiwx3EO2/RESZRpnfc+M6KforZGrfA7HmItC2pwrLXYt1xLuuw7trxDON2x/ldgERcI1Llq6p31eEe8/UFR6566ukrZSOy8dq70i x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8073ebd1-c129-41b9-ff44-08d76c1ffcb5 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 12:08:13.4676 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: R2KFYAy3C8eY4eP9kXoT5KMqLGNMFd3zoby01J7JTy1iITA7fgIf2aOaDfB7x6/kkeqyqUqJcgL2j5S3Aoo3nUFEsGiHSFc/sSX/BQOBCVI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0781 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 12:08:17 -0000 RXJpYyBWb2l0IHdyb3RlOg0KPiBNeSBiZWxpZWYgaXMgdGhhdCBhIFJlbHlpbmcgUGFydHkgd2ls bCByYXJlbHkgd2FudCB0aGUgZnVsbCB1bml2ZXJzZSBvZiBzaWduZWQgY2xhaW1zIGNvbWluZyBm cm9tIHNvbWUgQXR0ZXN0ZXIncyBjaGlwLiAgIFdlIG5lZWQgd2F5cyB0byBwcmUtZmlsdGVyIHRo ZSByZXN1bHRzLiAgSG93IHdvdWxkIHdlIGRvIHRoaXMgd2l0aG91dCBhIG1vZGVsPw0KDQpCZWNh dXNlIFJlbHlpbmcgUGFydGllcyBkb24ndCBwYXJzZSBjbGFpbXMgZnJvbSBBdHRlc3RlcnMgYXQg YWxsLg0KQXR0ZXN0ZXJzIHNlbmQgZXZpZGVuY2UgdG8gYSBWZXJpZmllciwgd2hpY2ggZ2VuZXJh dGVzIEF0dGVzdGF0aW9uIFJlc3VsdHMgdGhhdCBhcmUgcGFyc2VkIGJ5IFJlbHlpbmcgUGFydGll cy4NClRoZXJlZm9yZSB0aGUgZmlsdGVyIG9yIHRyYW5zbGF0aW9uIGlzIHBhcnQgb2YgdGhlIFZl cmlmaWVyJ3Mgam9iLg0KDQpEYXZlDQogDQoNCg== From nobody Mon Nov 18 04:43:33 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D35C31200F6 for ; Mon, 18 Nov 2019 04:43:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N3FNnPaTTHGY for ; Mon, 18 Nov 2019 04:43:29 -0800 (PST) Received: from mail-oi1-x230.google.com (mail-oi1-x230.google.com [IPv6:2607:f8b0:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83BDC1200EB for ; Mon, 18 Nov 2019 04:43:29 -0800 (PST) Received: by mail-oi1-x230.google.com with SMTP id m193so15175747oig.0 for ; Mon, 18 Nov 2019 04:43:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=77bxHGTSpqp7/XkxYH1XpEd1wlcr/Q8gK6BHik3Ju7c=; b=D5KeJK9z9RaW7b74lR5GFw4xyF/ebvqoqpYBaoc8d9eLpU6X+TlwnW1/jeVkorVpfp fgmj2yfo/+3g2O5LfXDoNp3D03cwvz3QTaW1JAxJOvI4yt1rb8r+6cWn8xHLqD+7D0hx LGHSk4UplfFnSGxhVnSlLQ6eLzNrfRoBxFk81W5ywDvAq++FHaAaQh/v03YWhCd1gieS ikJ1RnKAIOghyrx+SiHYBmGL14u2yYyp6PrQnHeBI8lxhMmtJlhAOkRNvDTsD71ftPE3 /0pWBwd4hyjFUgHPvzsPw7R98LicSJ2QkBxq1FSvHUlpDL+AmGXx72FK/vxRCETlTudl GNGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=77bxHGTSpqp7/XkxYH1XpEd1wlcr/Q8gK6BHik3Ju7c=; b=IfS7wUCZobNhDdZppolE7TLGrTPbp61wWoF19yNlgzHSNVPdbGR39mHaQ0Lu18hUoD /OhItOIufryY/lEn/d9Qoo1Ri/mO/vlIUM9aXSdQ1I+mu/a/wcR8t0rEu9G0pjivW51L IfIWsTHwUzLZVnXwhAfYHHnUMpt26Rs4AACUK5/d1paq0Fy5xuVYTAEEBpAtmOVF1xtS m9g031HxbnbwJtBztxv24PEBsJXAkVrckm54RWM8u/CsQuGCgMyuT8T01eW6eZ0Iim9p JM5p+11m/SxokFJFofy993eQEXnRugIqUmYlOkME0C10uTkk26aEPjJzfN68dxSnL7zg EACA== X-Gm-Message-State: APjAAAVtc+uvdWHsbMCslzZHbVDDiDAEAgX3YYCjqRECv6zGc9AZZqNN J/P4d61v42NJP7WTREj+LkPMddxbh1kci0ldZzs= X-Google-Smtp-Source: APXvYqw/ErDY3wJJcK+Tk6Gcfo07xKej4HuGPY8/XSohDbRKPct4088CA3kwNYxOTv0RvbXRBAz4rnHpDGTlSzR2iP0= X-Received: by 2002:a54:400d:: with SMTP id x13mr10924247oie.119.1574081008859; Mon, 18 Nov 2019 04:43:28 -0800 (PST) MIME-Version: 1.0 References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> In-Reply-To: <20191114140600.itrr5mjiysgutsj5@anna.jacobs.jacobs-university.de> From: Kathleen Moriarty Date: Mon, 18 Nov 2019 07:42:52 -0500 Message-ID: To: =?UTF-8?B?U2Now7Zud8OkbGRlciwgSsO8cmdlbg==?= Cc: Laurence Lundblade , "Smith, Ned" , Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , Dave Thaler , "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000617cf405979e4b26" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 12:43:32 -0000 --000000000000617cf405979e4b26 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable In reading this thread, I do hope we don't spend a lot of time on the definition of a token. I think it's been stated pretty clearly in this thread, so let's just get it down in a document and move on. I did see one place mention a set of claims is a token (the point in the thread argued that and I agree as it's more than just claims). A token is some data, some claims, and a signature. I think it was Jurgen's previous message to this one that had a pretty good definition. Also on the point of binary - when I present anything that has to do with JOSE and COSE, this is one of the things I start out with as the differences between the two as well as COSE being designed for constrained devices, so it's more compact. Perhaps stating a preference for CWT with this justification makes sense to someone else's point about not supporting multiple formats. This would continue to support multiple formats for EATs, but would set a recommendation. I won't go as far as to say a Mandatory to implement as that doesn't make sense in a full JSON environment where you wouldn't want to introduce COSE. Sorry for the top post. This was a long thread to catch up on and the other points from my thoughts were addressed. Thanks, Kathleen On Thu, Nov 14, 2019 at 9:06 AM Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen < J.Schoenwaelder@jacobs-university.de> wrote: > On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lundblade wrote: > > > > I see EAT as applicable to all these worlds, where the YANG module is > just for the smallish router world. So I mostly agree with Dave about > proportions, however this is the IETF where YANG modules are created. > (Maybe I should go join the W3C world and work on attestations APIs for > browsers after RATS is done). > > > > If EAT is the common format for "token", then it does not make sense > to me to define a YANG version of it. It may make sense to carry EAT > token over protocols such as NETCONF or RESTCONF and to have a YANG > module defining this may make sense for the networking device world. > This is then a definition of an interaction protocol, but not the > token format itself. > > If EAT is the common format for "token", then it may make sense to be > able to include "claims" that are YANG defined data. That may be an > extension of the core EAT definition (but EAT would have to allow for > such an extension to work). There is a lot of formally defined data in > YANG modules that would be convenient to reuse as claims in a > networking world. > > /js > > -- > Juergen Schoenwaelder Jacobs University Bremen gGmbH > Phone: +49 421 200 3587 Campus Ring 1 | 28759 Bremen | Germany > Fax: +49 421 200 3103 > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --000000000000617cf405979e4b26 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
In reading this thread, I do hope we don't spend a lot= of time on the definition=C2=A0of a token.=C2=A0 I think it's been sta= ted pretty clearly in this thread, so let's just get it down in a docum= ent and move on.=C2=A0 I did see one place mention a set of claims is a tok= en (the point in the thread argued that and I agree as it's more than j= ust claims).=C2=A0 A token is some data, some claims, and a signature.=C2= =A0 I think it was Jurgen's previous message to this one that had a pre= tty good definition.

Also on the point of binary - when = I present anything that has to do with JOSE and COSE, this is one of the th= ings I start out with as the differences between the two as well as COSE be= ing designed for constrained devices, so it's more compact.=C2=A0 Perha= ps stating a preference for CWT with this justification makes sense to some= one else's point about not supporting multiple formats.=C2=A0 This woul= d continue to support multiple formats for EATs, but would set a recommenda= tion.=C2=A0 I won't go as far as to say a Mandatory to implement as tha= t doesn't make sense in a full JSON environment=C2=A0where you wouldn&#= 39;t want to introduce COSE.

Sorry for the top pos= t.=C2=A0 This was a long thread to catch up on and the other points from my= thoughts were addressed.

Thanks,
Kathle= en

On Thu, Nov 14, 2019 at 9:06 AM Sch=C3=B6nw=C3=A4lder, J=C3=BCrgen = <J.Schoenwaelder= @jacobs-university.de> wrote:
On Wed, Nov 13, 2019 at 10:07:02AM -0800, Laurence Lun= dblade wrote:
>
> I see EAT as applicable to all these worlds, where the YANG module is = just for the smallish router world. So I mostly agree with Dave about propo= rtions, however this is the IETF where YANG modules are created.=C2=A0 (May= be I should go join the W3C world and work on attestations APIs for browser= s after RATS is done).
>

If EAT is the common format for "token", then it does not make se= nse
to me to define a YANG version of it. It may make sense to carry EAT
token over protocols such as NETCONF or RESTCONF and to have a YANG
module defining this may make sense for the networking device world.
This is then a definition of an interaction protocol, but not the
token format itself.

If EAT is the common format for "token", then it may make sense t= o be
able to include "claims" that are YANG defined data. That may be = an
extension of the core EAT definition (but EAT would have to allow for
such an extension to work). There is a lot of formally defined data in
YANG modules that would be convenient to reuse as claims in a
networking world.

/js

--
Juergen Schoenwaelder=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Jacobs Univer= sity Bremen gGmbH
Phone: +49 421 200 3587=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Campus Ring 1 | 28= 759 Bremen | Germany
Fax:=C2=A0 =C2=A0+49 421 200 3103=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<https://www.jacobs-university.de/>

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--000000000000617cf405979e4b26-- From nobody Mon Nov 18 04:46:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36249120853 for ; Mon, 18 Nov 2019 04:46:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qKFe0T73hrgW for ; Mon, 18 Nov 2019 04:46:53 -0800 (PST) Received: from mail-ot1-x32b.google.com (mail-ot1-x32b.google.com [IPv6:2607:f8b0:4864:20::32b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35D261200EB for ; Mon, 18 Nov 2019 04:46:53 -0800 (PST) Received: by mail-ot1-x32b.google.com with SMTP id u13so14378677ote.0 for ; Mon, 18 Nov 2019 04:46:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=jDnMlqL0eF7mI68Qby0n4nye8kN0h2M+oB2giVPVIyg=; b=e/rMGfxZXSElKNNllOnScD2iuvlNw1TlpFAXnuS8mACn9ZsK3pFg1a6jZKJsIyUZgm KHfnbEpGGShvsf2sfZr+4xxC2S6Urlv7UBK8x9k8C98jKweljxfr/e0XKDjUYOO913JK 6EUu1LCVbwVi0HqXLN1YCqUlFiXUw28b3JZIxeSIYyetceaFSsnWtnZiavJ9H1dZBH3u POhPqEOh5/jWBlR7JX5IY8mqYX0F9TLZHxH5BIkqILFKbBzyo3j2CYsSV8UjdUONv7It TBSdZIR8H9v/bSBC0mn5jpcCrIYe8LeIykvfANGManLruHibaGqKoRVUaYR/czYrDlK9 FRpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=jDnMlqL0eF7mI68Qby0n4nye8kN0h2M+oB2giVPVIyg=; b=TGqVHfRcYswYbJbzV+NYzGE7IjipTRw6bnjdosWyBbTExuoNo3IoYu4JLx8IdPk8oO 840KZzEP5GNXkSBeltzny2wztuU2o7E+swU2/YbgfuIec9gHPeuhFtCOJEk0ZVn+pxRx OKyVDgao5LyIIFipFoGAheNnDp0szSptlH/gSBmQwjx235aS7R6FPy00vitJnMc2gjLT xSgklk3dhhVgaP2/lP8RfQchfwXkdPsBlUYnATMEeAlT9TmoKvKiZ0auVeyQWJ1rHFT/ PNeeoaI2abaLIQH39aQzGT1di3WB1oQY7GWVFKDuJ0U5EFagNUPPOOMDGSgli3hPVBa5 sFwA== X-Gm-Message-State: APjAAAUWTZ3DiWGOxwN9C//CUzqfp4my+5FQB7P4XJ1XUWJTRfmFNigr At9uINFmsU04bVT7XDWcUXyvn0yKxyi28czUXXMv1F0D X-Google-Smtp-Source: APXvYqxVA0c0naJ9T95MGhOrHdwt+zd8qd/yAODq/0hun19gehBiMrFc8hddsHkk19ND/Raf0UxNxi5dJU5CVuvpe9U= X-Received: by 2002:a9d:5902:: with SMTP id t2mr2648069oth.151.1574081212516; Mon, 18 Nov 2019 04:46:52 -0800 (PST) MIME-Version: 1.0 References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> In-Reply-To: From: Kathleen Moriarty Date: Mon, 18 Nov 2019 07:46:15 -0500 Message-ID: To: "Eric Voit (evoit)" Cc: Dave Thaler , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" , "Oliver, Ian (Nokia - FI/Espoo)" , "Smith, Ned" , Henk Birkholz , "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000850e5e05979e5772" Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 12:46:57 -0000 --000000000000850e5e05979e5772 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Nov 15, 2019 at 9:38 AM Eric Voit (evoit) wrote: > *From:* Dave Thaler, November 15, 2019 2:39 AM > > Netconf is not the only protocol supported by routers. > > Routers also support IPv4, IPv6, link-layer protocols such as Ethernet, > routing protocols, often things like DHCP relay, RADIUS, etc. > > Below I would have said " Router/YANG" below rather than > "Router/NETCONF". > > > > I have not yet seen a compelling reason to use a pull-based mechanism > instead of a push-based mechanism via another protocol the routers alread= y > support. > > Router vendors want push-based mechanisms too. And NETCONF does > push. See RFC-8640 and RFC-5277. > > > > The only reason I=E2=80=99ve heard so far is =E2=80=9Cbecause they suppor= t netconf and > we=E2=80=99re used to it=E2=80=9D, to which the counter argument is as ab= ove: > > they support other things too and we=E2=80=99re used to them too. > > There is piles of documentation in the IETF and beyond detailing > the reasoning and extent of consolidation on YANG for network management. > IETF, IEEE, MEF, OpenConfig, and others forums are defining these. I > wouldn't expect another anytime soon. > > > > NETCONF can support YANG. Other transports can support YANG. The curren= t > draft under an adoption call does not specifically reference NETCONF. > > > > In order to know who to pull data from, the Verifier has to have some > indication from the Attester that triggers the attestation request > > indicated as Step 1 in draft-fedorkow-rats-network-device-attestation. S= o > in reality, there has to be a step before step 1, > > whereby the Attester does something that makes the Attester discoverable > by the Verifier. That step could have included the EAT or the TPM data > > expressed in the YANG draft, or whatever else, and then you=E2=80=99ve av= oided the > need for netconf, and reduced the number of round trips, > > improving latency and bandwidth. > > It is already possible to subscribe to existing proprietary YANG > attestation models. This requires zero extra round-trips. The push can > be leave the Attester in <1 sec. > > > > If there is a compelling reason to support a pull-based mechanism, and we > get consensus that we need it, then great. > > But so far I haven=E2=80=99t heard one. > > A YANG model supports both push and pull. Application vendors wan= t > a standard attestation model. That is why you have many network vendors > authoring this YANG draft under the adoption call. > > > > Honestly I don't understand the push-back. This should be a no-brainer. > Agreed, seems like an unnecessary rat hole. The conversation should move on. Thanks, Kathleen > > > /Eric > > > > Dave > > > > *From:* Laurence Lundblade > *Sent:* Wednesday, November 13, 2019 10:07 AM > *To:* Dave Thaler > *Cc:* Smith, Ned ; Oliver, Ian (Nokia - FI/Espoo) < > ian.oliver@nokia-bell-labs..com >; Nancy > Cam-Winget (ncamwing) ; rats@ietf.org; Henk Birkholz = < > henk.birkholz@sit.fraunhofer.de> > *Subject:* Re: [Rats] Call for adoption (after draft rename) for Yang > module draft > > > > My version of technology bases for attestation is something like this: > > > > *Router/Netconf World* > > Millions of devices. Currently TPM oriented. Long possible transition to > EAT. YANG used to create very specific fine-grained interactions. No > privacy issues. > > > > *Web Browser World* > > Billions of devices. Current attestation use is primarily WebAuthN / FIDO= . > JWT is used heavily for authentication so would be more EAT oriented, but > TPM attestation is supported in FIDO. Larger use of attestation may evolv= e. > Fine-grained interactions are with WebAPIs (Javascript) (sort of parallel > to YANG for routers). Big privacy issues. > > > > *Mobile App World* > > Billions of devices. Main attestation use is Android=E2=80=99s Keystore. = This is > EAT-like, but based on X.509. Fine grained interactions are Android APIs.= I > may be out of date, but so far IoS doesn=E2=80=99t do attestation. Privac= y issues > vary by app. > > > > *IoT World* > > Billions of devices most likely going to trillions. Attestation is a > critical enabling feature in this world. There are lots of protocols and > formats involved. TPMs are too expensive for many of these, but are > probably in use somewhere. No privacy issues for a large portion of this > world. > > > > The router world is the smallest, but it is =E2=80=9Cwell represented=E2= =80=9D because > this is the IETF. > > > > I see EAT as applicable to all these worlds, where the YANG module is jus= t > for the smallish router world. So I mostly agree with Dave about > proportions, however this is the IETF where YANG modules are created. > (Maybe I should go join the W3C world and work on attestations APIs for > browsers after RATS is done). > > > > LL > > > > > > > > On Nov 11, 2019, at 5:43 PM, Dave Thaler wrote: > > > > As far as I can understand from draft-birkholz-rats-basic-yang-module-01 > and > > draft-fedorkow-rats-network-device-attestation-01, they break down the us= e > case > > space as follows: > > > > Requirements? > > +--------------+---------------+---------++--------------- > > | RoT | Host Firewall | Privacy || Solution > > | Type | Enabled | Needed || Pieces > > +--------------+---------------+---------++--------------- > > 1 | SGX | No | No || > > 2 | SGX | No | Yes || > > 3 | SGX | Yes | No || > > 4 | SGX | Yes | Yes || > > 5 | TrustZone | No | No || > > 6 | TrustZone | No | Yes || > > 7 | TrustZone | Yes | No || > > 8 | TrustZone | Yes | Yes || > > 9 | TPM | No | No || > draft-birkholz-rats-basic-yang-module-01 > > 10 | TPM | No | Yes || > > 11 | TPM | Yes | No || > > 12 | TPM | Yes | Yes || > > 13 |SecureElement | No | No || > > 14 |SecureElement | No | Yes || > > 15 |SecureElement | Yes | No || > > 16 |SecureElement | Yes | Yes || > > 17 | Firmware | No | No || > > 18 | Firmware | No | Yes || > > 19 | Firmware | Yes | No || > > 20 | Firmware | Yes | Yes || > > .... | ... | | || > > > > And draft-fedorkow-rats-network-device-attestation-01 further scopes > itself down > > by only being applicable to cases with "embedded" apps only =3D Yes, and > where > > the security policy is only an Exact match against reference values =3D Y= es. > > I believe that the yang draft doesn't have those two restrictions, from m= y > reading. > > However, the point is that both drafts are VERY narrow, and in the table > shown above, > > only address 1 out of 20 possibilies in that space. > > > > In contrast, the TEEP WG decided that it was not interested in narrow > scopings > > (specifically something Global Platform specific), but instead wanted one > general solution. > > > > If the RATS WG spends effort on something that only addresses a single ro= w > out of 20+ rows, > > then do we expect 19+ other solutions to also be done in the WG? Or coul= d > we work on things > > that are broader and happen to also work for row 9? > > > > I've seen others commenting on the fact that the YANG module only support= s > TPMs and not > > other things (EATs etc), which would just add support for a couple more > rows, but still not > > be general. > > > > Personally, I would much rather see the WG spend effort on things that > really are generic, > > i.e., work with or without host firewalls, work with multiple RoT/TEE > types, etc., rather > > than seeing an explosion of point solutions. > > > > Dave > > > > *From:* RATS *On Behalf Of *Smith, Ned > *Sent:* Monday, November 11, 2019 10:12 AM > *To:* Oliver, Ian (Nokia - FI/Espoo) >; Laurence Lundblade < > lgl@island-resort.com>; Nancy Cam-Winget (ncamwing) > *Cc:* rats@ietf.org; Henk Birkholz > *Subject:* Re: [Rats] Call for adoption (after draft rename) for Yang > module draft > > > > Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D should support exist= ing =E2=80=9Cbinary=E2=80=9D > formats as an encapsulation (signed by a second TA where the TPM is a fir= st > TA) or as a conveyance (unsigned?) token. Possibly, the only added value = of > the latter is a tag that identifies it as a TPM binary format? > > > > > > On 11/10/19, 23:21 PM, "RATS on behalf of Oliver, Ian (Nokia - FI/Espoo)"= < > rats-bounces@ietf.org on behalf of ian.oliver@nokia-bell-labs..com > > wrote: > > > > > Remote TPM attestations are useful and necessary the short run, but are > of very limited capability. I believe that > EAT will replace TPM > attestations in the long run (maybe decades) because they are far more > expressive. I know > others believe that too. > > > > I would disagree with the statement of "short run" ... TPM is practically > the only existing standardised (hardware, software, firmware, measurement= - > x86 only etc) hardware root of trust in common use, ie: practically all x= 86 > machines, The attestation mechanisms provided are going to be around for= a > very long time. > > > > From telco experience, 30 years ago we said SS7 would only be around in > the short term. > > > > > Thus, I am opposed to adoption with the current TPM-only draft. I=E2=80= =99d be > OK with the current draft and a promise > to add EAT to it. > > > > Agree > > > > Ian > > > > -- > > Dr. Ian Oliver > > Cybersecurity Research > > Distinguished Member of Technical Staff > > Nokia Bell Labs > > +358 50 483 6237 > > > ------------------------------ > > *From:* Laurence Lundblade > *Sent:* 11 November 2019 00:44 > *To:* Nancy Cam-Winget (ncamwing) > *Cc:* Henk Birkholz ; rats@ietf..org < > rats@ietf.org> > *Subject:* Re: [Rats] Call for adoption (after draft rename) for Yang > module draft > > > > > > On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) < > ncamwing@cisco.com> wrote: > > > > So, Laurence, are you still OK with the adoption of the current draft wit= h > a rename for now? > Thanks, Nancy > > > > I think the value add to the larger RATS effort of adding EAT support to > this YANG protocol is really high. It a core thing to do that helps bring > together the two attestation worlds and make the TPM and EAT work here le= ss > like ships in the night. > > > > Remote TPM attestations are useful and necessary the short run, but are o= f > very limited capability. I believe that EAT will replace TPM attestations > in the long run (maybe decades) because they are far more expressive. I > know others believe that too. > > > > If we don=E2=80=99t include EAT in the YANG mode it is sort of like defin= ing HTTP > to only convey HTML to the exclusion of PDF. We=E2=80=99re defining an at= testation > protocol that can only move one kind of attestation even though we have > consensus on what the other one looks like. > > > > It seems relatively simple to add EAT support (or promise to add EAT > support). Pretty sure I heard Henk agree to add it. > > > > Thus, I am opposed to adoption with the current TPM-only draft. I=E2=80= =99d be OK > with the current draft and a promise to add EAT to it. > > > > LL > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --000000000000850e5e05979e5772 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Nov 15, 2019 at 9:38 AM Eric = Voit (evoit) <evoit@cisco.com>= wrote:

From: Dave Thaler, November = 15, 2019 2:39 AM

Netconf is not the only protocol supported by routers.<= u>

Routers also support IPv4, IPv6, link-layer protocols such as Ethernet, r= outing protocols, often things like DHCP relay, RADIUS, etc.<= /span>

<Eric> Below I would have said "= ; Router/YANG" below rather than "Router/NETCONF".=C2=A0=C2= =A0

=C2=A0

I have not yet seen a= compelling reason to use a pull-based mechanism instead of a push-based me= chanism via another protocol the routers already support.

<Eric> Router vendors want push-based m= echanisms too.=C2=A0 And NETCONF does push.=C2=A0 See RFC-8640 and RFC-5277= .

=C2=A0

The only reason I=E2=80= =99ve heard so far is =E2=80=9Cbecause they support netconf and we=E2=80=99= re used to it=E2=80=9D, to which the counter argument is as above:

they support other things too and we=E2=80=99re used to them too.

<Eric> There is piles of docum= entation in the IETF and beyond detailing the reasoning and extent of conso= lidation on YANG for network management.=C2=A0 =C2=A0=C2=A0IETF, IEEE, MEF,= OpenConfig, and others forums are defining these.=C2=A0 I wouldn't exp= ect another anytime soon.=C2=A0

=C2=A0

NETCONF can support YANG. Othe= r transports can support YANG.=C2=A0=C2=A0 The current draft under an adopt= ion call does not specifically reference NETCONF.

=C2=A0

In order to know who to pull data from, the Verif= ier has to have some indication from the Attester that triggers the attesta= tion request

indicated as Step 1 in draft-fedorkow-rats-network-d= evice-attestation.=C2=A0 So in reality, there has to be a step before step = 1,

whereby the Attester does something that makes the Attester dis= coverable by the Verifier.=C2=A0=C2=A0 That step could have included the EA= T or the TPM data

expressed in the YANG draft, or whatever else, a= nd then you=E2=80=99ve avoided the need for netconf, and reduced the number= of round trips,

improving latency and bandwidth.

<Eric> It is already possible to subsc= ribe to existing proprietary YANG attestation models.=C2=A0 This requires z= ero extra round-trips.=C2=A0 =C2=A0The push can be leave the Attester in &l= t;1 sec.

=C2=A0

If there is a com= pelling reason to support a pull-based mechanism, and we get consensus that= we need it, then great.

But so far I haven=E2=80=99t heard one.

<Eric> A YANG model sup= ports both push and pull.=C2=A0 Application vendors want a standard attesta= tion model.=C2=A0 That is why you have many network vendors authoring this = YANG draft under the adoption call.

=C2=A0

Honestly I don't unders= tand the push-back.=C2=A0=C2=A0 This should be a no-brainer.


Agreed, seems like an unnecessary rat hol= e.=C2=A0 The conversation should move on.=C2=A0=C2=A0

<= div>Thanks,
Kathleen
=C2=A0

=C2=A0

/Eric

=C2=A0<= u>

Dave<= u>

=C2=A0

From: Laurence Lundblad= e <lgl@island= -resort.com>
Sent: Wednesday, November 13, 2019 10:07 AM<= br>To: Dave Thaler <dthaler@microsoft.com>
Cc: Smith, Ned <ned.smith@intel.com<= /a>>; Oliver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs..com>= ;; Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>; rats@ietf.org; Henk Birkholz <henk.birkholz@sit.fraunh= ofer.de>
Subject: Re: [Rats] Call for adoption (after draf= t rename) for Yang module draft

=C2=A0

My version of = technology bases for attestation is something like this:

<= /u>=C2=A0

Router/Netconf World

Millions of devices. Currently TPM oriented. L= ong possible transition to EAT. YANG used to create very specific fine-grai= ned interactions. No privacy issues.

=C2=A0

Web Browser World

B= illions of devices. Current attestation use is primarily WebAuthN / FIDO. J= WT is used heavily for authentication so would be more EAT oriented, but TP= M attestation is supported in FIDO. Larger use of attestation may evolve. F= ine-grained interactions are with WebAPIs (Javascript) (sort of parallel to= YANG for routers). Big privacy issues.

=C2=A0

<= b>Mobile App World

B= illions of devices. Main attestation use is Android=E2=80=99s Keystore. Thi= s is EAT-like, but based on X.509. Fine grained interactions are Android AP= Is. I may be out of date, but so far IoS doesn=E2=80=99t do attestation. Pr= ivacy issues vary by app.

=C2=A0

IoT World

Billions of devices mo= st likely going to trillions. Attestation is a critical enabling feature in= this world. There are lots of protocols and formats involved. TPMs are too= expensive for many of these, but are probably in use somewhere. No privacy= issues for a large portion of this world.

=C2=A0

The router world is the smallest, but it is =E2=80=9Cwell re= presented=E2=80=9D because this is the IETF.

=C2=A0

I see EAT as applicable to all these worlds, where the YANG module is j= ust for the smallish router world. So I mostly agree with Dave about propor= tions, however this is the IETF where YANG modules are created. =C2=A0(Mayb= e I should go join the W3C world and work on attestations APIs for browsers= after RATS is done).

=C2=A0

LL

=C2=A0

=C2=A0

=C2=A0

On Nov 11, 2019, at 5:= 43 PM, Dave Thaler <dthaler@microsoft.com> wrote:

=C2=A0

As far as I can understand from draft-bir= kholz-rats-basic-yang-module-01 and

draft-fedorkow-rats-network-de= vice-attestation-01, they break down the use case

<= p class=3D"MsoNormal">space as follows= :

=C2=A0

=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Requirements?

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= +--------------+---------------+---------++---------------

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0 RoT= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Host Firewall | Privacy = ||=C2=A0=C2=A0 Solution=C2=A0=C2=A0=C2=A0

= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0|=C2=A0 Type=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0 Enabled=C2=A0=C2=A0=C2=A0= =C2=A0 | Needed=C2=A0 ||=C2=A0=C2=A0=C2=A0 Pieces=C2=A0=C2=A0=C2=A0=C2=A0 <= /span>

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0+--------------+---------------+---------++---------------<= u>

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 1=C2=A0 |=C2=A0 SGX= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 2=C2= =A0 |=C2=A0 SGX=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0=C2= =A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0 3=C2=A0 |=C2=A0 SGX=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0= | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 4=C2=A0 |=C2=A0 SGX=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 5=C2=A0 |=C2=A0 TrustZone=C2=A0=C2=A0 | No=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 6=C2=A0 |=C2=A0 TrustZone=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2= =A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 7=C2=A0= |=C2=A0 TrustZone=C2=A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 8=C2=A0 |=C2=A0 TrustZone=C2= =A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= | Yes=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 9=C2=A0 |=C2=A0 TPM=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 || draft-birkholz-rats-basi= c-yang-module-01

=C2=A0=C2=A0=C2=A0=C2=A0 10= =C2=A0 |=C2=A0 TPM=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0= =C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2= =A0 11=C2=A0 |=C2=A0 TPM=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | = Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 ||

= =C2=A0=C2=A0 =C2= =A0=C2=A012=C2=A0 |=C2=A0 TPM=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes= =C2=A0=C2=A0=C2=A0=C2=A0 ||

= =C2=A0=C2=A0=C2= =A0=C2=A0 13=C2=A0 |SecureElement | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ||=

=C2=A0=C2=A0=C2=A0=C2=A0 14=C2=A0 |SecureElement | = No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes= =C2=A0=C2=A0=C2=A0=C2=A0 ||

= =C2=A0=C2=A0=C2= =A0=C2=A0 15=C2=A0 |SecureElement | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0 16=C2=A0 |SecureElement | Yes=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0 =C2= =A0=C2=A0=C2=A0||

=C2=A0=C2=A0=C2=A0=C2=A0 17= =C2=A0 | Firmware=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = ||

=C2=A0=C2=A0=C2=A0=C2=A0 18=C2=A0 | Firmwa= re=C2=A0=C2=A0=C2=A0=C2=A0 | No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0 ||<= /u>

=C2=A0=C2=A0=C2=A0=C2=A0 19=C2=A0 | Firmware=C2=A0=C2=A0=C2=A0= =C2=A0 | Yes=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | = No=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=C2= =A0=C2=A0=C2=A0 20=C2=A0 | Firmware=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | Yes=C2=A0=C2=A0=C2=A0= =C2=A0 ||

=C2=A0=C2=A0=C2=A0=C2=A0 .... |=C2= =A0=C2=A0 ...=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0|=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ||

=C2=A0=

And = draft-fedorkow-rats-network-device-attestation-01 further scopes itself dow= n

by only being applicable to cases with "embedded" apps= only =3D Yes, and where

the security policy is only an Exact matc= h against reference values =3D Yes.

I believe that the yang draft = doesn't have those two restrictions, from my reading.<= /u>

However,= the point is that both drafts are VERY narrow, and in the table shown abov= e,

only address 1 out of 20 possibilies in that space.

= =C2=A0

In contrast, the TEEP WG decided that it was not interested= in narrow scopings

(specifically something Global Platform specif= ic), but instead wanted one general solution.

=C2=A0=

If t= he RATS WG spends effort on something that only addresses a single row out = of 20+ rows,

then do we expect 19+ other solutions to also be done= in the WG?=C2=A0 Or could we work on things

that are broader and = happen to also work for row 9?

=C2=A0

I've seen other= s commenting on the fact that the YANG module only supports TPMs and not

other things (EATs etc), which would just add support for a couple m= ore rows, but still not

be general.

=C2=A0<= u>

Perso= nally, I would much rather see the WG spend effort on things that really ar= e generic,

i.e., work with or without host firewalls, work with mu= ltiple RoT/TEE types, etc., rather

than seeing an explosion of poi= nt solutions.

=C2=A0

Dave

=C2=A0

From: RATS <rats-bounces@ietf.org> On Behalf Of Smit= h, Ned
Sent: Monday, November 11, 2019 10:12 AM
To: Oli= ver, Ian (Nokia - FI/Espoo) <ian.oliver@nokia-bell-labs..com>; Laurence = Lundblade <lg= l@island-resort.com>; Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com>
= Cc: rats@ietf.org; Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Subject: R= e: [Rats] Call for adoption (after draft rename) for Yang module draft

=C2=A0

Right. This implies the RATS =E2=80=9Ctoken=E2=80=9D sh= ould support existing =E2=80=9Cbinary=E2=80=9D formats as an encapsulation = (signed by a second TA where the TPM is a first TA) or as a conveyance (uns= igned?) token. Possibly, the only added value of the latter is a tag that i= dentifies it as a TPM binary format?

=C2=A0

=C2=A0

On 11/10/19, 23:= 21 PM, "RATS on behalf of Oliver, Ian (Nokia - FI/Espoo)" <rats-bounces@ietf.o= rg on behalf of ian.oliver@nokia-bell-labs..com> wrote:

=C2= =A0

> Remote TP= M attestations are useful and necessary the short run, but are of very limi= ted capability. I believe that > EAT will replace TPM attestations in th= e long run (maybe decades) because they are far more expressive. I know >= ; others believe that too.=C2=A0

=C2=A0

I would disagree with the statement of "short run" ... TP= M is practically the only existing standardised (hardware, software, firmwa= re, measurement - x86 only etc) hardware root of trust in common use, ie: p= ractically all x86 machines,=C2=A0 The attestation mechanisms provided are = going to be around for a very long time.=C2=A0

=C2=A0

<= p class=3D"MsoNormal" style=3D"margin-left:0.5in;background:white">From telco experience, 30 years ago we said SS7 woul= d only be around in the short term.

=C2=A0

> Thus, I am opposed to adoption with the current TPM-only draft. I=E2= =80=99d be OK with the current draft and a promise > to add EAT to it.

=C2=A0

Agree<= u>

=C2=A0

Ian

=

=C2=A0

-- =

Dr. Ian O= liver

Cybersecurity Research

Distinguished Member of Technical Staff=

= Nokia Bell Labs

+358 50 483 6237

=

=C2=A0

From: Laurence Lundblade <lgl@island-resort.com>
Sent:= 11 November 2019 00:44
To: Nancy Cam-Winget (ncamwing) <ncamwing@cisco.com&g= t;
Cc: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf..org <rats@ietf.org>
S= ubject: Re: [Rats] Call for adoption (after draft rename) for Yang modu= le draft

=C2=A0

=C2=A0

On Nov 10, 2019, at 2:20 PM, Nancy Cam-Winget (ncamwing) <= ;ncamwing@cisco.com= > wrote:

=C2=A0

So, Laurence, are you still OK with the adoption of the current dra= ft with a rename for now?
Thanks, Nancy

=C2=A0<= u>

I = think the value add to the larger RATS effort of adding EAT support to this= YANG protocol is really high. It a core thing to do that helps bring toget= her the two attestation worlds and make the TPM and EAT work here less like= ships in the night.

=C2=A0

Remote TPM attestations are useful and = necessary the short run, but are of very limited capability. I believe that= EAT will replace TPM attestations in the long run (maybe decades) because = they are far more expressive. I know others believe that too.=C2=A0<= u>

=C2= =A0

If we don=E2=80=99t include EAT in the YANG mode it is sort of like= defining HTTP to only convey HTML to the exclusion of PDF. We=E2=80=99re d= efining an attestation protocol that can only move one kind of attestation = even though we have consensus on what the other one looks like.

=C2=A0<= u>

It seems relatively simple to add EAT support (or promise to add EAT su= pport). Pretty sure I heard Henk agree to add it.

=C2=A0<= /p>

Thus, I am= opposed to adoption with the current TPM-only draft. I=E2=80=99d be OK wit= h the current draft and a promise to add EAT to it.

=

=C2=A0

LL

= =C2=A0

=C2=A0

___= ____________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--000000000000850e5e05979e5772-- From nobody Mon Nov 18 08:25:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1A55120111 for ; Mon, 18 Nov 2019 08:25:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KCWxEnpfv9xJ for ; Mon, 18 Nov 2019 08:25:35 -0800 (PST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A43312007A for ; Mon, 18 Nov 2019 08:25:35 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Nov 2019 08:25:34 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,320,1569308400"; d="scan'208,217";a="407442988" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by fmsmga006.fm.intel.com with ESMTP; 18 Nov 2019 08:25:34 -0800 Received: from orsmsx160.amr.corp.intel.com (10.22.226.43) by ORSMSX106.amr.corp.intel.com (10.22.225.133) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 18 Nov 2019 08:25:34 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX160.amr.corp.intel.com ([169.254.13.204]) with mapi id 14.03.0439.000; Mon, 18 Nov 2019 08:25:33 -0800 From: "Smith, Ned" To: "Xialiang (Frank, Network Standard & Patent Dept)" , "rats@ietf.org" Thread-Topic: =?utf-8?B?W1JhdHNdIOetlOWkjTogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2Rl?= =?utf-8?Q?l_for_consideration:?= Thread-Index: AQHVnizNPQKKKNhUk0ik7vfZORuaAg== Date: Mon, 18 Nov 2019 16:25:33 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.254.0.106] Content-Type: multipart/alternative; boundary="_000_AE350A78D48C4183BDEC82DA4EE8A49Fintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] =?utf-8?b?562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93?= =?utf-8?q?_model_for_consideration=3A?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 16:25:37 -0000 --_000_AE350A78D48C4183BDEC82DA4EE8A49Fintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyDigJxhcmNoaXRlY3R1cmFsIG1vZGVs4oCdIHBhcmFsbGVscyB0aGUgcm9sZXMgbWVzc2Fn ZSBmbG93LiBJIHRoaW5rIGl0IGNvdWxkIGJlIHZpZXdlZCBhcyBhIHRoaXJkIG1vZGVsIHNvbWV0 aGluZyBsaWtlIGEgcHViLXN1YiBicm9rZXIgd2hlcmUgUmVseWluZyBQYXJ0aWVzIHN1YnNjcmli ZSB0byBWZXJpZmllciAoYnJva2VyKSB0byByZWNlaXZlIEF0dGVzdGF0aW9uIFJlc3VsdHMgYW5k IEF0dGVzdGVycyBwdWJsaXNoIHRvIFZlcmlmaWVyIChicm9rZXIpIHdoZW4gYSBjaGFuZ2UgdG8g dGhlIEV2aWRlbmNlIGlzIGZvdW5kLg0KDQpBIHB1Yi1zdWIgbW9kZWwgbWlnaHQgdHJlYXQgQ2xh aW1zIGFzIHB1Yi1zdWIgVG9waWNzIHRoYXQgY2FuIGJlIHN1YnNjcmliZWQgdG8gb3IgcHVibGlz aGVkIHRvLg0KDQpJIGdldCB0aGF0IHNvbWUgcHViLXN1YiBhcmNoaXRlY3R1cmVzIGVsaW1pbmF0 ZSB0aGUgYnJva2VyIGFzIGEgZGlzdGluY3QgZW50aXR5LCBidXQgY29uY2VwdHVhbGx5IHRoZSBt b2RlbCBpc27igJl0IGZ1bmRhbWVudGFsbHkgZGlmZmVyZW50IHRoYW4gaWYgdGhlcmUgd2VyZSBh IGNlbnRyYWwgYnJva2VyLg0KDQotTmVkDQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRm Lm9yZz4gb24gYmVoYWxmIG9mICJYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJiBQ YXRlbnQgRGVwdCkiIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPg0KRGF0ZTogU2F0dXJkYXks IE5vdmVtYmVyIDE2LCAyMDE5IGF0IDI6MTcgQU0NClRvOiAicmF0c0BpZXRmLm9yZyIgPHJhdHNA aWV0Zi5vcmc+DQpTdWJqZWN0OiBbUmF0c10g562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBm bG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOg0KDQpPb3BzLCBTb21lIGZpeGVzIG9mIHRoZSBi ZWxvdyB0ZXh0Og0KDQoNCuWPkeS7tuS6ujogUkFUUyBbbWFpbHRvOnJhdHMtYm91bmNlc0BpZXRm Lm9yZ10g5Luj6KGoIFhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmIFBhdGVudCBE ZXB0KQ0K5Y+R6YCB5pe26Ze0OiAyMDE55bm0MTHmnIgxNuaXpSAxODoxMw0K5pS25Lu25Lq6OiBy YXRzQGlldGYub3JnDQrkuLvpopg6IFtSYXRzXSBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1v ZGVsIGZvciBjb25zaWRlcmF0aW9uOg0KDQpIaSBSQVRTIGFyY2hpdGVjdHVyZSBkZXNpZ24gdGVh bSBhbmQgYWxsLA0KSW4gYWRkaXRpb24gdG8gdGhlIGN1cnJlbnQgcGFzc3BvcnQgbW9kZWwgYW5k IGJhY2tncm91bmQgY2hlY2sgbW9kZWwuIEkgdGhpbmsgdGhlcmUgaXMgYSB0aGlyZCBtZXNzYWdl IGZsb3cgbW9kZWwgcG9zc2libHkgZm9yIHVzIHRvIGNvbnNpZGVyOg0KQXR0ZXN0ZXIgPCAtLS0t LS0tLS0tLS0tLS0tLS0tLSA+IHZlcmlmaWVyIDwgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0gPiByZWx5aW5nIHBhcnR5DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRXZp ZGVuY2UgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhdHRlc3RhdGlvbiByZXN1bHRzDQoN ClRoZSBrZXkgcG9pbnQgb2YgdGhlIGFib3ZlIG1vZGVsIGlzIHRoYXQgdmVyaWZpZXIgaGFzIGlu ZGVwZW5kZW50IGNvbm5lY3Rpb24gd2l0aCBhdHRlc3RlciBhbmQgcmVseWluZyBwYXJ0eSByZXNw ZWN0aXZlbHksIGFuZCB0aGVyZSBhcmUgdHdvIGluZGVwZW5kZW50IG1lc3NhZ2UgZXhjaGFuZ2Vz IGJldHdlZW4gdGhlIGF0dGVzdGVyIGFuZCB2ZXJpZmllciwgYmV0d2VlbiB0aGUgdmVyaWZpZXIg YW5kIHRoZSByZWx5aW5nIHBhcnR5LiBPZiBjb3Vyc2UsIGlmIG5lZWRlZCwgdGhlcmUgY2FuIGJl IHNvbWUgdHJpZ2dlciBjb25kaXRpb24gYW5kIGludGVyYWN0aW9uIGJldHdlZW4gdGhlc2UgdHdv IGNvbm5lY3Rpb25zLg0KVGhlIHJlbGF0aXZlIGFkdmFudGFnZSBvZiB0aGUgYWJvdmUgbW9kZWwg aXMgc2ltcGxlLCBhbmQgZWFjaCByb2xlIG9ubHkgc2VlIHdoYXQgaGUgbmVlZHMgdG8gc2VlLCBs aWtlOiBldmlkZW5jZSBpcyBub3Qgc2VlbiBieSB0aGUgcmVseWluZyBwYXJ0eSwgYXR0ZXN0YXRp b24gcmVzdWx0cyBpcyBub3Qgc2VlbiBieSB0aGUgYXR0ZXN0ZXIuDQoNCkkgYW0gd29uZGVyaW5n IHdoZXRoZXIgdGhlIGFyY2hpdGVjdHVyZSBkcmFmdCB3aWxsIGNvbnNpZGVyIGl0Pw0KDQpCLlIu DQpGcmFuaw0K --_000_AE350A78D48C4183BDEC82DA4EE8A49Fintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgR290aGljIjsNCglwYW5vc2UtMToyIDExIDYgOSA3IDIgNSA4 IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1pbmdMaVU7DQoJcGFub3NlLTE6MiAy IDUgOSAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1h dGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1pY3Jvc29mdCBZYUhlaSI7DQoJcGFub3NlLTE6MiAxMSA1 IDMgMiAyIDQgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNaWNyb3NvZnQg WWFIZWkiO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxATVMgR290aGljIjsNCglwYW5v c2UtMToyIDExIDYgOSA3IDIgNSA4IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QE1pbmdMaVUiOw0KCXBhbm9zZS0xOjIgMSA2IDkgMCAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVm aW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7 bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1hbGlnbjpqdXN0aWZ5 Ow0KCWZvbnQtc2l6ZToxMC41cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwg c3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29s b3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwg bGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFs Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMjVpbiAxLjBpbiAxLjI1aW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJv ZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xh c3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+VGhpcyDigJxhcmNoaXRlY3R1cmFsIG1vZGVs4oCdIHBhcmFsbGVscyB0 aGUgcm9sZXMgbWVzc2FnZSBmbG93LiBJIHRoaW5rIGl0IGNvdWxkIGJlIHZpZXdlZCBhcyBhIHRo aXJkIG1vZGVsIHNvbWV0aGluZyBsaWtlIGEgcHViLXN1YiBicm9rZXIgd2hlcmUgUmVseWluZyBQ YXJ0aWVzIHN1YnNjcmliZSB0byBWZXJpZmllciAoYnJva2VyKSB0byByZWNlaXZlIEF0dGVzdGF0 aW9uDQogUmVzdWx0cyBhbmQgQXR0ZXN0ZXJzIHB1Ymxpc2ggdG8gVmVyaWZpZXIgKGJyb2tlcikg d2hlbiBhIGNoYW5nZSB0byB0aGUgRXZpZGVuY2UgaXMgZm91bmQuDQo8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkEgcHViLXN1YiBtb2RlbCBtaWdodCB0cmVhdCBD bGFpbXMgYXMgcHViLXN1YiBUb3BpY3MgdGhhdCBjYW4gYmUgc3Vic2NyaWJlZCB0byBvciBwdWJs aXNoZWQgdG8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JIGdl dCB0aGF0IHNvbWUgcHViLXN1YiBhcmNoaXRlY3R1cmVzIGVsaW1pbmF0ZSB0aGUgYnJva2VyIGFz IGEgZGlzdGluY3QgZW50aXR5LCBidXQgY29uY2VwdHVhbGx5IHRoZSBtb2RlbCBpc27igJl0IGZ1 bmRhbWVudGFsbHkgZGlmZmVyZW50IHRoYW4gaWYgdGhlcmUgd2VyZSBhIGNlbnRyYWwgYnJva2Vy LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+LU5lZDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5SQVRTICZs dDtyYXRzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiAmcXVvdDtYaWFsaWFuZyAo RnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZsdDtmcmFu ay54aWFsaWFuZ0BodWF3ZWkuY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5TYXR1cmRheSwgTm92 ZW1iZXIgMTYsIDIwMTkgYXQgMjoxNyBBTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7cmF0c0BpZXRm Lm9yZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W1Jh dHNdIDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVv dDtNUyBHb3RoaWMmcXVvdDs7Y29sb3I6YmxhY2siPuetlOWkjTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+OiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93 IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPk9vcHMsIFNvbWUgZml4ZXMgb2YgdGhlIGJlbG93IHRl eHQ6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNF MUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1hbGlnbjpsZWZ0 Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7l j5E8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5Lu25Lq6PC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDss c2Fucy1zZXJpZiI+Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KIFJBVFMg W21haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddIDwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuS7o+ihqDwv c3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KPC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkm cXVvdDssc2Fucy1zZXJpZiI+WGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7 IFBhdGVudCBEZXB0KTxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTpNaW5nTGlVIj7lj5E8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+6YCBPC9zcGFu PjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlV Ij7ml7bpl7Q8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3Nv ZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+DQogMjAxOTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuW5tDwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3Nv ZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+MTE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7mnIg8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlh SGVpJnF1b3Q7LHNhbnMtc2VyaWYiPjE2PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5pelPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZx dW90OyxzYW5zLXNlcmlmIj4NCiAxODoxMzxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuaUtuS7tuS6 ujwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhl aSZxdW90OyxzYW5zLXNlcmlmIj4gcmF0c0BpZXRmLm9yZzxicj4NCjwvc3Bhbj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsi PuS4uzwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6TWluZ0xpVSI+6aKYPC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+Ojwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KIFtSYXRzXSBBbm90aGVyIFJBVFMg bWVzc2FnZSBmbG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0ibGVmdCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1hbGlnbjpsZWZ0Ij4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IaSBSQVRT IGFyY2hpdGVjdHVyZSBkZXNpZ24gdGVhbSBhbmQgYWxsLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkluIGFkZGl0aW9uIHRvIHRo ZSBjdXJyZW50IHBhc3Nwb3J0IG1vZGVsIGFuZCBiYWNrZ3JvdW5kIGNoZWNrIG1vZGVsLiBJIHRo aW5rIHRoZXJlIGlzIGEgdGhpcmQgbWVzc2FnZSBmbG93IG1vZGVsIHBvc3NpYmx5IGZvciB1cyB0 byBjb25zaWRlcjo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5BdHRlc3RlciAmbHQ7IC0tLS0tLS0tLS0tLS0tLS0tLS0tICZndDsg dmVyaWZpZXIgJmx0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSAmZ3Q7IHJlbHlp bmcgcGFydHk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPg0KJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PC9z cGFuPkV2aWRlbmNlICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIHN0eWxlPSJjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj5hdHRlc3RhdGlv biByZXN1bHRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhlIGtleSBwb2ludCBvZiB0aGUgYWJvdmUgbW9k ZWwgaXMgdGhhdCB2ZXJpZmllciBoYXMgaW5kZXBlbmRlbnQgY29ubmVjdGlvbiB3aXRoIGF0dGVz dGVyIGFuZCByZWx5aW5nIHBhcnR5IHJlc3BlY3RpdmVseSwgYW5kIHRoZXJlIGFyZSB0d28gaW5k ZXBlbmRlbnQgbWVzc2FnZSBleGNoYW5nZXMgYmV0d2VlbiB0aGUgYXR0ZXN0ZXIgYW5kIHZlcmlm aWVyLCBiZXR3ZWVuDQogdGhlIHZlcmlmaWVyIGFuZCB0aGUgcmVseWluZyBwYXJ0eS4gT2YgY291 cnNlLCBpZiBuZWVkZWQsIHRoZXJlIGNhbiBiZSBzb21lIHRyaWdnZXIgY29uZGl0aW9uIGFuZCBp bnRlcmFjdGlvbiBiZXR3ZWVuIHRoZXNlIHR3byBjb25uZWN0aW9ucy4NCjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSByZWxh dGl2ZSBhZHZhbnRhZ2Ugb2YgdGhlIGFib3ZlIG1vZGVsIGlzIHNpbXBsZSwgYW5kIGVhY2ggcm9s ZSBvbmx5IHNlZSB3aGF0IGhlIG5lZWRzIHRvIHNlZSwgbGlrZTogZXZpZGVuY2UgaXMNCjxiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5ub3Q8L3NwYW4+IDwvYj5zZWVuIGJ5IDxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj4NCnRoZSA8L3NwYW4+cmVseWluZyBwYXJ0eSwgYXR0ZXN0YXRp b24gcmVzdWx0cyBpcyA8Yj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+bm90DQo8L3NwYW4+ PC9iPnNlZW4gYnkgPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoZSA8L3NwYW4+YXR0ZXN0 ZXIuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSBhbSB3b25kZXJpbmcgd2hldGhlciB0aGUgYXJjaGl0ZWN0 dXJlIGRyYWZ0IHdpbGwgY29uc2lkZXIgaXQ/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Qi5SLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkZy YW5rPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AE350A78D48C4183BDEC82DA4EE8A49Fintelcom_-- From nobody Mon Nov 18 12:00:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 346ED120B3D for ; Mon, 18 Nov 2019 12:00:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=QePvy+nS; dkim=pass (1024-bit key) header.d=juniper.net header.b=S+iDuE6q Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id foWyoLs3FqAR for ; Mon, 18 Nov 2019 12:00:00 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CACFD120B3B for ; Mon, 18 Nov 2019 12:00:00 -0800 (PST) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xAIJuw5H019072; Mon, 18 Nov 2019 11:59:58 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=UOHIxqut9D6is8gQQCHooji7TfGEsXYE3Ru5pxHI23g=; b=QePvy+nStZLOpfrL+NjLNsSeoY85vLnhgF3Sz80maJGH07/z/DlPyv4804KvIYmDfi8s 3lgLvVFvSnJPWkVcRK+ER/qUPu3QHTV2uXlIqLUiLtxzztnWIs2l3QTzuS7QOWV4kBaM 247gou+3lI9AFju72P43NekjuSlkJvf1lgUY4u9I2iOh75EwkRfK8jZ7nFMwQeYXQAKz pgEh8oCmJ0/mkYg3KdtsN1aIGhMBmXGf1ELPHJLRAjAe4dXBEIGjzLMDux3vKOLg44kZ tmr7Y3B5X5zS/VWRac7VeaW3+Pv8JYqFtrAPQ+q1w/HLN7t4qM3nMaUOdlYFWAwHaDzX 4Q== Received: from nam04-sn1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2052.outbound.protection.outlook.com [104.47.44.52]) by mx0a-00273201.pphosted.com with ESMTP id 2wah8pk872-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 18 Nov 2019 11:59:57 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EVr0bmLkdWQktBoBuHYRL9Jx73FSDq/HhiBFyo7QT9uaFUC/GHiRTL7FSrkky8sR4Av9tKiQNLeM28hoaCjyKPmx33khw3uuzCrEoqX9ObREQAczyH7yKg60i5ug3wjq5y1T8m09edbLRX/r53L3rj4z0tzl3B3v9PiFZsRsNce1ZEfCPL/GR6htmp4zXuQLdsTZg+2IT9aSmdsN6kqC1NJRhprFL5nZhDSqFXuBPmZca6FJZsafwLL35YblPJ6K568JX+GEvB0ah8rhTSYVV5Eui+aljsbqPFzVZ2oLBt/3MJ5nx3HDTpZhp7RYRoaFhekkHYyo9Rr16XRv95A0sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UOHIxqut9D6is8gQQCHooji7TfGEsXYE3Ru5pxHI23g=; b=EW6Q5VCXuoEkEcvyFF2oNzbB5woed3LvRGs2olAIykK+Z6znClRYp+Ch7xRmG9j7/lsfUtA6ohfNFz0nJl2ym/YaqPAJbWJ+lXn+Psre0PMh/H7PSJC6PUZp22/jJB+x1R/C2uAo3pkaj0jgulHmPP66JJPfVKLKpkdhyNbOXPZmhaVIVfoM1e2SNAeP66pXco0WfpZos4zgkgLl0nn4N2cOYIox7/u9y2OcGjjzLdwnWxtBSP9EW45cRcp2n6gMmqBts8jtNB447qpU7TDa47yxJfrLLmP1UCpV33mClCKUXsAZbYRMfZ2iLCSDV+OAK4uilFpDKksCeKDkam+yFA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UOHIxqut9D6is8gQQCHooji7TfGEsXYE3Ru5pxHI23g=; b=S+iDuE6qA+R2w9B/BvgLVO1/DfvSl0xkIoC3jxAmJzVi2pSzht671ve26KvEGA5KUc0uWP4bDNG4Q8jlBsCtUG65zbyEKSZatA77HFBBtijd8da1+mT1pD4FA/KMnIQOzqkUhzcxtDARX/05dC6YWi49Lf7PLYd19ipDYfu+e44= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4423.namprd05.prod.outlook.com (52.135.211.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.8; Mon, 18 Nov 2019 19:59:55 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::dd02:9d00:19f6:b4e%6]) with mapi id 15.20.2474.012; Mon, 18 Nov 2019 19:59:55 +0000 From: Guy Fedorkow To: Dave Thaler , "Smith, Ned" , "Oliver, Ian (Nokia - FI/Espoo)" , Laurence Lundblade , "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" , Henk Birkholz Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCACkfwcA== Content-Class: Date: Mon, 18 Nov 2019 19:59:55 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=9381b09f-5c8c-495e-9366-6883fd25afee; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-18T15:13:16.7265260Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-12T01:43:10.0511305Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=a49e9ecc-8e3e-4bf2-b759-08bb20f89aec; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [76.14.1.154] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d5abcba7-245c-46fe-f68b-08d76c61e227 x-ms-traffictypediagnostic: BYAPR05MB4423: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0225B0D5BC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(39860400002)(346002)(366004)(136003)(189003)(15404003)(199004)(66574012)(3846002)(99286004)(74316002)(7736002)(76116006)(6116002)(790700001)(71200400001)(316002)(110136005)(54906003)(86362001)(52536014)(66066001)(14454004)(26005)(25786009)(6246003)(478600001)(33656002)(256004)(229853002)(4326008)(14444005)(486006)(8936002)(81166006)(66476007)(55016002)(6306002)(64756008)(66446008)(66556008)(76176011)(71190400001)(81156014)(476003)(7696005)(6436002)(11346002)(5660300002)(8676002)(186003)(446003)(6506007)(53546011)(2906002)(66946007)(102836004)(9686003)(54896002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4423; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: OzIN8tbQ3GD+HJbyi0L0uJUOJWzrXGUbdAV8c0wP90KLeJGTjq6frF8b2AvoVhVNHyqaD68A/bll0Qtk/g87aRhFVnI4dKedlU2rMnv0wcDl003IDj5vsEwlch/L/+bcngPxxceZb5o87gTigwWdMEkq/laqKtFVmt57oJShLI/McLKIc+8rljG3BwROJT88wNzkvt7XhfEcru7/A9uUFD0U8n73gQbWYDZSeu/+Q6v7k5pJ2YP9TXTgBj61EY8KuB3R1poWZRe2ZycR+u+EcDbUtapFyxIdeYRzyu81vXu0j5DF4EKzLx49V/WFQT8Bs7Yo4ZvZF16m8IAvBQLvXvgWunro8xPBYNuv63as9Yr0KcSHmeNiRshU2rUTUU1gl06hR66bwIHPnkaMLn5100Fd9yoeCsAO7QXyLSR1tU/BBxFnW4ZWVym02Iohgfyb x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB42483709CE65A1344DB5C0A6BA4D0BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: d5abcba7-245c-46fe-f68b-08d76c61e227 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Nov 2019 19:59:55.6832 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6O1Nru3AYVzLN1OdFIy4tOdOuGuwdD9fEbTYo31O5gQIq3kLJSMCIlGKVVuS6+Y6qYfux0ubZN8xqQMGMs43TQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4423 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-18_06:2019-11-15,2019-11-18 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 priorityscore=1501 clxscore=1011 spamscore=0 adultscore=0 phishscore=0 lowpriorityscore=0 bulkscore=0 mlxlogscore=999 malwarescore=0 suspectscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911180171 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 20:00:05 -0000 --_000_BYAPR05MB42483709CE65A1344DB5C0A6BA4D0BYAPR05MB4248namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 ICBJIGtub3cgSeKAmW0gcmVzcG9uZGluZyB0byBhIG1lc3NhZ2UgZnJvbSB0aGUgYW5jaWVudCBw YXN0LCBidXQgSeKAmWQgbGlrZSB0byB0cnkgdG8gY2xhcmlmeSBhIGNvdXBsZSBvZiB0aGUgY2hh cmFjdGVyaXphdGlvbnMgb2YgUklWLg0KICBJdOKAmXMgdHJ1ZSB0aGF0IEkgYXNrZWQgRGF2ZSB3 aGV0aGVyIHRoZSByZWx5aW5nIHBhcnR5IHdhcyByZXF1aXJlZCB0byBzaHV0dGxlIGluZm9ybWF0 aW9uIGJldHdlZW4gdGhlIGF0dGVzdGVyIGFuZCB0aGUgdmVyaWZpZXIsIGFzIHNob3duIGluIHRo ZSBCYWNrZ3JvdW5kIENoZWNrIG1vZGVsLiAgSWYgdGhlIHR3byBhcmUgcHJvY2Vzc2VzIG9uIHRo ZSBzYW1lIG5ldHdvcmsgbWFuYWdlbWVudCBtYWNoaW5lLCBzdWNoIGEgcmVxdWlyZW1lbnQgc2Vl bXMgb2RkLiAgQnV0IGlmIHRoZXkgaGF2ZSBkaWZmZXJlbnQgbmV0d29yayByZWFjaGFiaWxpdHkg ZHVlIHRvIHNlcGFyYXRlIG1hY2hpbmVzIGFuZCBmaXJld2FsbHMgYW5kIGFsbCwgdGhlbiBvZiBj b3Vyc2UgdGhlIHJlbHlpbmcgcGFydHkgY2FuIHByb3h5IGluZm9ybWF0aW9uIHRvIHRoZSBWZXJp Zmllci4gIFdlIHNwZWNpZmljYWxseSBhdm9pZGVkIGRpc3Rpbmd1aXNoaW5nIHRoZSB0d28gcm9s ZXMgaW4gdGhlIFJJViBkcmFmdCwgYnV0IEkgZG9u4oCZdCB0aGluayB0aGF0IGNhbiBiZSB0YWtl biB0byBtZWFuIHRoYXQgdGhlIHNvbHV0aW9uIGNhbm5vdCB3b3JrIHdpdGggZmlyZXdhbGxzLiAg QnV0IGxldCBtZSBrbm93IGlmIHRoZXJlIHdhcyBzb21lIG90aGVyIHJlc3RyaWN0aW9uIHRoYXQg bW90aXZhdGVkIHRoZSB0YWJsZSBlbnRyeQ0KICBUaGUgbm9uLXByaXZhY3kgY2xhdXNlIGluIHRo ZSBSSVYgZHJhZnQgaXMgYWxzbyBjb2luY2lkZW50YWwuICBUaGUgVFBNIGhhcyBhIHdpZGUgcmFu Z2Ugb2YgbWVjaGFuaXNtcyB0byBkZWFsIHdpdGggZGVncmVlcyBvZiBwcml2YWN5IGV4cGVjdGF0 aW9ucywgYWxsIG9mIHdoaWNoIHJlbGF0ZSB0byBrZXkgcHJvdmlzaW9uaW5nLiAgRm9yIHJvdXRl cnMsIHdlIGhhdmVu4oCZdCBzZWVuIGEgbmVlZCBmb3IgY29tcGxleCBtZWFzdXJlcyB0byBoaWRl IGlkZW50aXR5LCBhbmQgaW4gZmFjdCBJIHRoaW5rIG1vc3Qgb3BlcmF0b3JzIHdvdWxkIG5vdCB3 YW50IHJvdXRlcnMgd2l0aCBhIHNlY3JldCBpZGVudGl0eSBvbiB0aGVpciBuZXR3b3JrLiAgQnV0 IGlmIHNvbWVvbmUgZG9lcyB3YW50IHByZXNlcnZhdGlvbiBvZiBwcml2YWN5LCB0aGV5IGNhbiBj aGFuZ2UgdG8gTG9jYWwgRGV2SUQga2V5cyBhbmQgY29vcmRpbmF0ZSB0aG9zZSBrZXlzIGJldHdl ZW4gZGV2aWNlIGFuZCB2ZXJpZmllciB1c2luZyB3aGF0ZXZlciBhcHByb2FjaCB0aGV5IHdhbnQu ICBJIGRvbuKAmXQgdGhpbmsgaXQgaGFzIGFueSBpbXBhY3Qgb24gdGhlIFJJViB3b3JrZmxvdy4N CiAgQnV0IEkgc2hvdWxkIHByb2JhYmx5IHNheSBtb3JlIGV4cGxpY2l0bHkgc29tZXdoZXJlIGlu IHRoZSBkcmFmdCB0aGF0IHdl4oCZZCB3YW50IHRvIHRoZSBzb2x1dGlvbiB0byB3b3JrIHdpdGgg emVybyB0b3VjaCBwcm92aXNpb25pbmcsIHN1Y2ggYXMgUkZDIDg1NzIuICBUaGF04oCZcyBub3Qg 4oCYcmVxdWlyZWTigJkgZm9yIFJJViwgYnV0IG1heSBoZWxwIGV4cGxhaW4gdHdvIHRoaW5nczoN Cg0KICAqICAgc1pUUCBhc3N1bWVzIHRoZSBkZXZpY2UgY2FuIGlkZW50aWZ5IGl0c2VsZi4gIEhl bmNlIHRoZSBub24tcHJpdmFjeS1wcmVzZXJ2aW5nIHN0YXRlbWVudCwgYW5kIHRoZSByZXF1ZXN0 IHRoYXQgbWFudWZhY3R1cmVycyBwcmUtcHJvdmlzaW9uIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlv biBrZXlzLg0KICAqICAgc1pUUCByZXF1aXJlcyB0aGF0IHRoZSBkZXZpY2UgYW5ub3VuY2UgaXRz ZWxmIHNvIHRoYXQgaXQgY2FuIGJlIGNvbmZpZ3VyZWQuICBCeSB0aGUgdGltZSBpdCB3b3VsZCBi ZSBwb3NzaWJsZSB0byBkbyBhdHRlc3RhdGlvbiwgdGhlIGRldmljZSBoYXMgYWxyZWFkeSByZXZl YWxlZCBpdHMgcHJlc2VuY2UuICBBbmQgaW5kZWVkIG9uZSBtaWdodCBsaW5rIHRoZSB0d28g4oCT IEkgZG9u4oCZdCB0aGluayBpdOKAmXMgcGFydCBvZiBhbnlvbmXigJlzIHNwZWMsIGJ1dCBhIFpU UCBwcm92aXNpb25pbmcgc3lzdGVtIG1pZ2h0IHdlbGwgd2FudCB0byBydW4gc29mdHdhcmUgaW50 ZWdyaXR5IGF0dGVzdGF0aW9uIG9uY2UgaXTigJlzIGZpZ3VyZWQgb3V0IHdoYXQgdGhlIGRldmlj ZSBpcyBhbmQgd2hldGhlciBpdCBoYXMgYSBwbGF1c2libGUgdG8gcmVhc29uIHRvIHdhbnQgdG8g Y29ubmVjdC4gIEJ1dCBhZ2FpbiwgdGhhdCBzZWVtcyBvdXQgb2Ygc2NvcGUgdG8gdGhlIGRyYWZ0 Lg0KICBGaW5hbGx5LCBJIGRvbuKAmXQgc2VlIFlBTkcgYXMgdGhlIGV4Y2x1c2l2ZSBwcm90b2Nv bCBmb3IgVFBNLWJhc2VkIGF0dGVzdGF0aW9uOyBpdCBoYXBwZW5zIHRvIGJlIHRoZSBvbmUgdGhh dOKAmXMgYWxyZWFkeSB0aGVyZSBmb3Igcm91dGVycywgYW5kIGl04oCZcyBhIGxvdCBlYXNpZXIg dG8gZ2V0IHNvbWVvbmUgdG8gYWRkIGEgWUFORyBtb2RlbCB0byB0aGVpciByb3V0ZXIgZm9yIG5l dHdvcmsgbWFuYWdlbWVudCwgdGhhbiB0byBjb252aW5jZSB0aGVtIHRvIGJyaW5nIGluIGEgbmV3 IHByb3RvY29sIHN1aXRlLg0KICBCdXQgZm9yIG90aGVyIGFwcGxpY2F0aW9ucywgWUFORyB3b3Vs ZG7igJl0IGJlIHRoZSByaWdodCB0aGluZ+KApiAgSW5kdXN0cmlhbCBJb1QgcHJvYmFibHkgd291 bGQgYXNrIGZvciBhdHRlc3RhdGlvbiB2aWEgYSBwcm90b2NvbCBJ4oCZdmUgbmV2ZXIgaGVhcmQg b2Yg8J+YiiAgQW5kIEkgdGhpbmsgdGhlcmUgd291bGQgYmUgZGlmZmVyZW50IHByb3RvY29scyBt b3JlIHN1aXRhYmxlIHRvIGVuZCB1c2VyIGNvbXB1dGluZywgc3VjaCBhcyBsYXB0b3BzIGFuZCBz ZXJ2ZXJzLiAgR2xhZCB0byB0YWxrIGl0IG92ZXIgaWYgc29tZW9uZSB3YW50cyB0byBleHRlbmQg dGhlIHNjb3BlLg0KDQogIFRoYW5rcyBmb3IgcmVhZGluZyBhIGxvbmcgcmVzcG9uc2XigKYgIExl dCBtZSBrbm93IGlmIHRoaXMgaXMgY2xhcmlmeWluZyBvciBtdWRkeWluZyENCi9ndXkNCg0KDQoN Cg0KSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGll dGYub3JnPiBPbiBCZWhhbGYgT2YgRGF2ZSBUaGFsZXINClNlbnQ6IE1vbmRheSwgTm92ZW1iZXIg MTEsIDIwMTkgODo0MyBQTQ0KVG86IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRlbC5jb20+OyBP bGl2ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykgPGlhbi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJz LmNvbT47IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPjsgTmFuY3kg Q2FtLVdpbmdldCAobmNhbXdpbmcpIDxuY2Ftd2luZ0BjaXNjby5jb20+DQpDYzogcmF0c0BpZXRm Lm9yZzsgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4NClN1 YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkg Zm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCkFzIGZhciBhcyBJIGNhbiB1bmRlcnN0YW5kIGZyb20g ZHJhZnQtYmlya2hvbHotcmF0cy1iYXNpYy15YW5nLW1vZHVsZS0wMSBhbmQNCmRyYWZ0LWZlZG9y a293LXJhdHMtbmV0d29yay1kZXZpY2UtYXR0ZXN0YXRpb24tMDEsIHRoZXkgYnJlYWsgZG93biB0 aGUgdXNlIGNhc2UNCnNwYWNlIGFzIGZvbGxvd3M6DQoNCiAgICAgICAgICAgICAgICAgICAgICAg IFJlcXVpcmVtZW50cz8NCiAgICAgICAgICstLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0r LS0tLS0tLS0tKystLS0tLS0tLS0tLS0tLS0NCiAgICAgICAgIHwgIFJvVCAgICAgICAgIHwgSG9z dCBGaXJld2FsbCB8IFByaXZhY3kgfHwgICBTb2x1dGlvbg0KICAgICAgICAgfCAgVHlwZSAgICAg ICAgfCAgIEVuYWJsZWQgICAgIHwgTmVlZGVkICB8fCAgICBQaWVjZXMNCiAgICAgICAgICstLS0t LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tKystLS0tLS0tLS0tLS0tLS0NCiAg ICAgIDEgIHwgIFNHWCAgICAgICAgIHwgTm8gICAgICAgICAgICB8IE5vICAgICAgfHwNCiAgICAg IDIgIHwgIFNHWCAgICAgICAgIHwgTm8gICAgICAgICAgICB8IFllcyAgICAgfHwNCiAgICAgIDMg IHwgIFNHWCAgICAgICAgIHwgWWVzICAgICAgICAgICB8IE5vICAgICAgfHwNCiAgICAgIDQgIHwg IFNHWCAgICAgICAgIHwgWWVzICAgICAgICAgICB8IFllcyAgICAgfHwNCiAgICAgIDUgIHwgIFRy dXN0Wm9uZSAgIHwgTm8gICAgICAgICAgICB8IE5vICAgICAgfHwNCiAgICAgIDYgIHwgIFRydXN0 Wm9uZSAgIHwgTm8gICAgICAgICAgICB8IFllcyAgICAgfHwNCiAgICAgIDcgIHwgIFRydXN0Wm9u ZSAgIHwgWWVzICAgICAgICAgICB8IE5vICAgICAgfHwNCiAgICAgIDggIHwgIFRydXN0Wm9uZSAg IHwgWWVzICAgICAgICAgICB8IFllcyAgICAgfHwNCiAgICAgIDkgIHwgIFRQTSAgICAgICAgIHwg Tm8gICAgICAgICAgICB8IE5vICAgICAgfHwgZHJhZnQtYmlya2hvbHotcmF0cy1iYXNpYy15YW5n LW1vZHVsZS0wMQ0KICAgICAxMCAgfCAgVFBNICAgICAgICAgfCBObyAgICAgICAgICAgIHwgWWVz ICAgICB8fA0KICAgICAxMSAgfCAgVFBNICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAg ICB8fA0KICAgICAxMiAgfCAgVFBNICAgICAgICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8 fA0KICAgICAxMyAgfFNlY3VyZUVsZW1lbnQgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0K ICAgICAxNCAgfFNlY3VyZUVsZW1lbnQgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAg ICAxNSAgfFNlY3VyZUVsZW1lbnQgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAx NiAgfFNlY3VyZUVsZW1lbnQgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAxNyAg fCBGaXJtd2FyZSAgICAgfCBObyAgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAxOCAgfCBG aXJtd2FyZSAgICAgfCBObyAgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAxOSAgfCBGaXJt d2FyZSAgICAgfCBZZXMgICAgICAgICAgIHwgTm8gICAgICB8fA0KICAgICAyMCAgfCBGaXJtd2Fy ZSAgICAgfCBZZXMgICAgICAgICAgIHwgWWVzICAgICB8fA0KICAgICAuLi4gfCAgIC4uLiAgICAg ICAgfCAgICAgICAgICAgICAgIHwgICAgICAgICB8fA0KDQpBbmQgZHJhZnQtZmVkb3Jrb3ctcmF0 cy1uZXR3b3JrLWRldmljZS1hdHRlc3RhdGlvbi0wMSBmdXJ0aGVyIHNjb3BlcyBpdHNlbGYgZG93 bg0KYnkgb25seSBiZWluZyBhcHBsaWNhYmxlIHRvIGNhc2VzIHdpdGggImVtYmVkZGVkIiBhcHBz IG9ubHkgPSBZZXMsIGFuZCB3aGVyZQ0KdGhlIHNlY3VyaXR5IHBvbGljeSBpcyBvbmx5IGFuIEV4 YWN0IG1hdGNoIGFnYWluc3QgcmVmZXJlbmNlIHZhbHVlcyA9IFllcy4NCkkgYmVsaWV2ZSB0aGF0 IHRoZSB5YW5nIGRyYWZ0IGRvZXNuJ3QgaGF2ZSB0aG9zZSB0d28gcmVzdHJpY3Rpb25zLCBmcm9t IG15IHJlYWRpbmcuDQpIb3dldmVyLCB0aGUgcG9pbnQgaXMgdGhhdCBib3RoIGRyYWZ0cyBhcmUg VkVSWSBuYXJyb3csIGFuZCBpbiB0aGUgdGFibGUgc2hvd24gYWJvdmUsDQpvbmx5IGFkZHJlc3Mg MSBvdXQgb2YgMjAgcG9zc2liaWxpZXMgaW4gdGhhdCBzcGFjZS4NCg0KSW4gY29udHJhc3QsIHRo ZSBURUVQIFdHIGRlY2lkZWQgdGhhdCBpdCB3YXMgbm90IGludGVyZXN0ZWQgaW4gbmFycm93IHNj b3BpbmdzDQooc3BlY2lmaWNhbGx5IHNvbWV0aGluZyBHbG9iYWwgUGxhdGZvcm0gc3BlY2lmaWMp LCBidXQgaW5zdGVhZCB3YW50ZWQgb25lIGdlbmVyYWwgc29sdXRpb24uDQoNCklmIHRoZSBSQVRT IFdHIHNwZW5kcyBlZmZvcnQgb24gc29tZXRoaW5nIHRoYXQgb25seSBhZGRyZXNzZXMgYSBzaW5n bGUgcm93IG91dCBvZiAyMCsgcm93cywNCnRoZW4gZG8gd2UgZXhwZWN0IDE5KyBvdGhlciBzb2x1 dGlvbnMgdG8gYWxzbyBiZSBkb25lIGluIHRoZSBXRz8gIE9yIGNvdWxkIHdlIHdvcmsgb24gdGhp bmdzDQp0aGF0IGFyZSBicm9hZGVyIGFuZCBoYXBwZW4gdG8gYWxzbyB3b3JrIGZvciByb3cgOT8N Cg0KSSd2ZSBzZWVuIG90aGVycyBjb21tZW50aW5nIG9uIHRoZSBmYWN0IHRoYXQgdGhlIFlBTkcg bW9kdWxlIG9ubHkgc3VwcG9ydHMgVFBNcyBhbmQgbm90DQpvdGhlciB0aGluZ3MgKEVBVHMgZXRj KSwgd2hpY2ggd291bGQganVzdCBhZGQgc3VwcG9ydCBmb3IgYSBjb3VwbGUgbW9yZSByb3dzLCBi dXQgc3RpbGwgbm90DQpiZSBnZW5lcmFsLg0KDQpQZXJzb25hbGx5LCBJIHdvdWxkIG11Y2ggcmF0 aGVyIHNlZSB0aGUgV0cgc3BlbmQgZWZmb3J0IG9uIHRoaW5ncyB0aGF0IHJlYWxseSBhcmUgZ2Vu ZXJpYywNCmkuZS4sIHdvcmsgd2l0aCBvciB3aXRob3V0IGhvc3QgZmlyZXdhbGxzLCB3b3JrIHdp dGggbXVsdGlwbGUgUm9UL1RFRSB0eXBlcywgZXRjLiwgcmF0aGVyDQp0aGFuIHNlZWluZyBhbiBl eHBsb3Npb24gb2YgcG9pbnQgc29sdXRpb25zLg0KDQpEYXZlDQoNCg== --_000_BYAPR05MB42483709CE65A1344DB5C0A6BA4D0BYAPR05MB4248namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSBF bW9qaSI7DQoJcGFub3NlLTE6MiAxMSA1IDIgNCAyIDQgMiAyIDM7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywg c3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7 DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJs aW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlz dFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0 Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTow aW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25v cm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1z b25vcm1hbDsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4t Ym90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpwLm1zaXBmb290 ZXIzMGIzZDUzOCwgbGkubXNpcGZvb3RlcjMwYjNkNTM4LCBkaXYubXNpcGZvb3RlcjMwYjNkNTM4 DQoJe21zby1zdHlsZS1uYW1lOm1zaXBmb290ZXIzMGIzZDUzODsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4 cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMg Ki8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjEyNDk4NTA2NDQ7DQoJbXNvLWxpc3QtdGVtcGxh dGUtaWRzOjI3MDI4Nzc2Njt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30N CkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNp LWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVs Ng0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWIt c3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxl dmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4w cHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjE5ODAx MDgwMzI7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0x NjI2OTg2ODc0IC0xMTQxNzEyNzc4IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4Njkx IDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwxOmxldmVsMQ0K CXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ6LTsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OkNhbGli cmk7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1p bHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBs aXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxl dmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2lu Z2RpbmdzO30NCkBsaXN0IGwxOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2lu LWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRt YXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4N CjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRh PSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJv ZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyZuYnNwO0kga25vdyBJ 4oCZbSByZXNwb25kaW5nIHRvIGEgbWVzc2FnZSBmcm9tIHRoZSBhbmNpZW50IHBhc3QsIGJ1dCBJ 4oCZZCBsaWtlIHRvIHRyeSB0byBjbGFyaWZ5IGEgY291cGxlIG9mIHRoZSBjaGFyYWN0ZXJpemF0 aW9ucyBvZiBSSVYuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsg SXTigJlzIHRydWUgdGhhdCBJIGFza2VkIERhdmUgd2hldGhlciB0aGUgcmVseWluZyBwYXJ0eSB3 YXMgcmVxdWlyZWQgdG8gc2h1dHRsZSBpbmZvcm1hdGlvbiBiZXR3ZWVuIHRoZSBhdHRlc3RlciBh bmQgdGhlIHZlcmlmaWVyLCBhcyBzaG93biBpbiB0aGUgQmFja2dyb3VuZCBDaGVjayBtb2RlbC4m bmJzcDsgSWYgdGhlIHR3byBhcmUgcHJvY2Vzc2VzIG9uIHRoZSBzYW1lIG5ldHdvcmsgbWFuYWdl bWVudCBtYWNoaW5lLA0KIHN1Y2ggYSByZXF1aXJlbWVudCBzZWVtcyBvZGQuJm5ic3A7IEJ1dCBp ZiB0aGV5IGhhdmUgZGlmZmVyZW50IG5ldHdvcmsgcmVhY2hhYmlsaXR5IGR1ZSB0byBzZXBhcmF0 ZSBtYWNoaW5lcyBhbmQgZmlyZXdhbGxzIGFuZCBhbGwsIHRoZW4gb2YgY291cnNlIHRoZSByZWx5 aW5nIHBhcnR5IGNhbiBwcm94eSBpbmZvcm1hdGlvbiB0byB0aGUgVmVyaWZpZXIuJm5ic3A7IFdl IHNwZWNpZmljYWxseSBhdm9pZGVkIGRpc3Rpbmd1aXNoaW5nIHRoZSB0d28gcm9sZXMgaW4NCiB0 aGUgUklWIGRyYWZ0LCBidXQgSSBkb27igJl0IHRoaW5rIHRoYXQgY2FuIGJlIHRha2VuIHRvIG1l YW4gdGhhdCB0aGUgc29sdXRpb24gY2Fubm90IHdvcmsgd2l0aCBmaXJld2FsbHMuJm5ic3A7IEJ1 dCBsZXQgbWUga25vdyBpZiB0aGVyZSB3YXMgc29tZSBvdGhlciByZXN0cmljdGlvbiB0aGF0IG1v dGl2YXRlZCB0aGUgdGFibGUgZW50cnk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOyBUaGUgbm9uLXByaXZhY3kgY2xhdXNlIGluIHRoZSBSSVYgZHJhZnQgaXMgYWxz byBjb2luY2lkZW50YWwuJm5ic3A7IFRoZSBUUE0gaGFzIGEgd2lkZSByYW5nZSBvZiBtZWNoYW5p c21zIHRvIGRlYWwgd2l0aCBkZWdyZWVzIG9mIHByaXZhY3kgZXhwZWN0YXRpb25zLCBhbGwgb2Yg d2hpY2ggcmVsYXRlIHRvIGtleSBwcm92aXNpb25pbmcuJm5ic3A7IEZvciByb3V0ZXJzLCB3ZSBo YXZlbuKAmXQgc2VlbiBhIG5lZWQgZm9yIGNvbXBsZXgNCiBtZWFzdXJlcyB0byBoaWRlIGlkZW50 aXR5LCBhbmQgaW4gZmFjdCBJIHRoaW5rIG1vc3Qgb3BlcmF0b3JzIHdvdWxkIG5vdCB3YW50IHJv dXRlcnMgd2l0aCBhIHNlY3JldCBpZGVudGl0eSBvbiB0aGVpciBuZXR3b3JrLiZuYnNwOyBCdXQg aWYgc29tZW9uZSBkb2VzIHdhbnQgcHJlc2VydmF0aW9uIG9mIHByaXZhY3ksIHRoZXkgY2FuIGNo YW5nZSB0byBMb2NhbCBEZXZJRCBrZXlzIGFuZCBjb29yZGluYXRlIHRob3NlIGtleXMgYmV0d2Vl biBkZXZpY2UgYW5kDQogdmVyaWZpZXIgdXNpbmcgd2hhdGV2ZXIgYXBwcm9hY2ggdGhleSB3YW50 LiZuYnNwOyBJIGRvbuKAmXQgdGhpbmsgaXQgaGFzIGFueSBpbXBhY3Qgb24gdGhlIFJJViB3b3Jr Zmxvdy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyBCdXQgSSBz aG91bGQgcHJvYmFibHkgc2F5IG1vcmUgZXhwbGljaXRseSBzb21ld2hlcmUgaW4gdGhlIGRyYWZ0 IHRoYXQgd2XigJlkIHdhbnQgdG8gdGhlIHNvbHV0aW9uIHRvIHdvcmsgd2l0aCB6ZXJvIHRvdWNo IHByb3Zpc2lvbmluZywgc3VjaCBhcyBSRkMgODU3Mi4mbmJzcDsgVGhhdOKAmXMgbm90IOKAmHJl cXVpcmVk4oCZIGZvciBSSVYsIGJ1dCBtYXkgaGVscCBleHBsYWluIHR3byB0aGluZ3M6PG86cD48 L286cD48L3A+DQo8dWwgc3R5bGU9Im1hcmdpbi10b3A6MGluIiB0eXBlPSJkaXNjIj4NCjxsaSBj bGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDps MSBsZXZlbDEgbGZvMyI+c1pUUCBhc3N1bWVzIHRoZSBkZXZpY2UgY2FuIGlkZW50aWZ5IGl0c2Vs Zi4mbmJzcDsgSGVuY2UgdGhlIG5vbi1wcml2YWN5LXByZXNlcnZpbmcgc3RhdGVtZW50LCBhbmQg dGhlIHJlcXVlc3QgdGhhdCBtYW51ZmFjdHVyZXJzIHByZS1wcm92aXNpb24gaWRlbnRpdHkgYW5k IGF0dGVzdGF0aW9uIGtleXMuPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFn cmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMyI+c1pU UCByZXF1aXJlcyB0aGF0IHRoZSBkZXZpY2UgYW5ub3VuY2UgaXRzZWxmIHNvIHRoYXQgaXQgY2Fu IGJlIGNvbmZpZ3VyZWQuJm5ic3A7IEJ5IHRoZSB0aW1lIGl0IHdvdWxkIGJlIHBvc3NpYmxlIHRv IGRvIGF0dGVzdGF0aW9uLCB0aGUgZGV2aWNlIGhhcyBhbHJlYWR5IHJldmVhbGVkIGl0cyBwcmVz ZW5jZS4mbmJzcDsgQW5kDQogaW5kZWVkIG9uZSBtaWdodCBsaW5rIHRoZSB0d28g4oCTIEkgZG9u 4oCZdCB0aGluayBpdOKAmXMgcGFydCBvZiBhbnlvbmXigJlzIHNwZWMsIGJ1dCBhIFpUUCBwcm92 aXNpb25pbmcgc3lzdGVtIG1pZ2h0IHdlbGwgd2FudCB0byBydW4gc29mdHdhcmUgaW50ZWdyaXR5 IGF0dGVzdGF0aW9uIG9uY2UgaXTigJlzIGZpZ3VyZWQgb3V0IHdoYXQgdGhlIGRldmljZSBpcyBh bmQgd2hldGhlciBpdCBoYXMgYSBwbGF1c2libGUgdG8gcmVhc29uIHRvIHdhbnQgdG8gY29ubmVj dC4mbmJzcDsNCiBCdXQgYWdhaW4sIHRoYXQgc2VlbXMgb3V0IG9mIHNjb3BlIHRvIHRoZSBkcmFm dC48bzpwPjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyBGaW5h bGx5LCBJIGRvbuKAmXQgc2VlIFlBTkcgYXMgdGhlIGV4Y2x1c2l2ZSBwcm90b2NvbCBmb3IgVFBN LWJhc2VkIGF0dGVzdGF0aW9uOyBpdCBoYXBwZW5zIHRvIGJlIHRoZSBvbmUgdGhhdOKAmXMgYWxy ZWFkeSB0aGVyZSBmb3Igcm91dGVycywgYW5kIGl04oCZcyBhIGxvdCBlYXNpZXIgdG8gZ2V0IHNv bWVvbmUgdG8gYWRkIGEgWUFORyBtb2RlbCB0byB0aGVpciByb3V0ZXIgZm9yIG5ldHdvcmsgbWFu YWdlbWVudCwNCiB0aGFuIHRvIGNvbnZpbmNlIHRoZW0gdG8gYnJpbmcgaW4gYSBuZXcgcHJvdG9j b2wgc3VpdGUuJm5ic3A7IDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7Jm5ic3A7QnV0IGZvciBvdGhlciBhcHBsaWNhdGlvbnMsIFlBTkcgd291bGRu4oCZdCBiZSB0 aGUgcmlnaHQgdGhpbmfigKYmbmJzcDsgSW5kdXN0cmlhbCBJb1QgcHJvYmFibHkgd291bGQgYXNr IGZvciBhdHRlc3RhdGlvbiB2aWEgYSBwcm90b2NvbCBJ4oCZdmUgbmV2ZXIgaGVhcmQgb2YNCjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNl cmlmIj4mIzEyODUyMjs8L3NwYW4+Jm5ic3A7IEFuZCBJIHRoaW5rIHRoZXJlIHdvdWxkIGJlIGRp ZmZlcmVudCBwcm90b2NvbHMgbW9yZSBzdWl0YWJsZSB0byBlbmQgdXNlciBjb21wdXRpbmcsIHN1 Y2ggYXMgbGFwdG9wcyBhbmQgc2VydmVycy4mbmJzcDsgR2xhZCB0byB0YWxrIGl0IG92ZXIgaWYg c29tZW9uZSB3YW50cyB0byBleHRlbmQgdGhlIHNjb3BlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDsgVGhhbmtzIGZvciByZWFkaW5nIGEgbG9uZyByZXNwb25zZeKApiZuYnNwOyBMZXQg bWUga25vdyBpZiB0aGlzIGlzIGNsYXJpZnlpbmcgb3IgbXVkZHlpbmchPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4vZ3V5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0ibXNpcGZvb3RlcjMwYjNkNTM4IiBhbGlnbj0iY2VudGVyIiBzdHlsZT0i bWFyZ2luOjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQ7dGV4dC1hbGlnbjpjZW50ZXIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtjb2xvcjpibGFjayI+SnVuaXBlciBCdXNpbmVzcyBV c2UgT25seTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gUkFUUyAmbHQ7cmF0cy1i b3VuY2VzQGlldGYub3JnJmd0OyA8Yj5PbiBCZWhhbGYgT2YgPC9iPg0KRGF2ZSBUaGFsZXI8YnI+ DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBOb3ZlbWJlciAxMSwgMjAxOSA4OjQzIFBNPGJyPg0KPGI+ VG86PC9iPiBTbWl0aCwgTmVkICZsdDtuZWQuc21pdGhAaW50ZWwuY29tJmd0OzsgT2xpdmVyLCBJ YW4gKE5va2lhIC0gRkkvRXNwb28pICZsdDtpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb20m Z3Q7OyBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs7IE5h bmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSAmbHQ7bmNhbXdpbmdAY2lzY28uY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gcmF0c0BpZXRmLm9yZzsgSGVuayBCaXJraG9seiAmbHQ7aGVuay5iaXJraG9s ekBzaXQuZnJhdW5ob2Zlci5kZSZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBD YWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJh ZnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5BcyBmYXIgYXMgSSBjYW4gdW5kZXJzdGFuZCBmcm9tIGRyYWZ0LWJpcmto b2x6LXJhdHMtYmFzaWMteWFuZy1tb2R1bGUtMDEgYW5kPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmRyYWZ0LWZl ZG9ya293LXJhdHMtbmV0d29yay1kZXZpY2UtYXR0ZXN0YXRpb24tMDEsIHRoZXkgYnJlYWsgZG93 biB0aGUgdXNlIGNhc2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+c3BhY2UgYXMgZm9sbG93czo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBSZXF1aXJlbWVudHM/PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tLS0tLS0tJiM0MzstLS0tLS0tLS0t LS0tLS0mIzQzOy0tLS0tLS0tLSYjNDM7JiM0MzstLS0tLS0tLS0tLS0tLS08bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsgUm9UJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgSG9zdCBGaXJld2FsbCB8IFByaXZhY3kgfHwmbmJzcDsmbmJz cDsgU29sdXRpb24mbmJzcDsmbmJzcDsmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDt8Jm5ic3A7IFR5cGUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCZuYnNwOyZuYnNwOyBFbmFibGVkJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTmVl ZGVkJm5ic3A7IHx8Jm5ic3A7Jm5ic3A7Jm5ic3A7IFBpZWNlcyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyYjNDM7LS0tLS0tLS0tLS0t LS0mIzQzOy0tLS0tLS0tLS0tLS0tLSYjNDM7LS0tLS0tLS0tJiM0MzsmIzQzOy0tLS0tLS0tLS0t LS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgMSZuYnNwOyB8Jm5ic3A7IFNHWCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDImbmJzcDsgfCZuYnNwOyBTR1gmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8 IFllcyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xv cjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMyZuYnNwOyB8Jm5ic3A7 IFNHWCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDt8IFll cyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA0Jm5i c3A7IHwmbmJzcDsgU0dYJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyA1Jm5ic3A7IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBO byZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgNiZuYnNwOyB8Jm5i c3A7IFRydXN0Wm9uZSZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA3Jm5ic3A7IHwmbmJzcDsgVHJ1c3Rab25lJm5ic3A7 Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IDgmbmJzcDsgfCZuYnNwOyBUcnVzdFpvbmUmbmJzcDsmbmJzcDsgfCBZZXMmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZ ZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDkmbmJzcDsgfCZuYnNwOyBU UE0mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBObyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8IGRyYWZ0LWJpcmto b2x6LXJhdHMtYmFzaWMteWFuZy1tb2R1bGUtMDE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDEwJm5ic3A7IHwmbmJzcDsgVFBNJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDExJm5ic3A7IHwmbmJzcDsg VFBNJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVz Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29u c29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOzEyJm5ic3A7IHwm bmJzcDsgVFBNJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxMyZuYnNwOyB8 U2VjdXJlRWxlbWVudCB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDE0Jm5ic3A7IHxTZWN1cmVFbGVtZW50IHwgTm8mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZZXMm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE1Jm5ic3A7IHxTZWN1cmVFbGVtZW50IHwg WWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDE2Jm5ic3A7 IHxTZWN1cmVFbGVtZW50IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwO3x8 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAxNyZuYnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCBObyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8fDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpD b25zb2xhcztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMTgmbmJzcDsg fCBGaXJtd2FyZSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8IE5vJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHx8PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAxOSZuYnNwOyB8IEZpcm13YXJlJm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHwgWWVzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwgTm8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IDIwJm5ic3A7IHwgRmlybXdhcmUmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCBZ ZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgfCBZZXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29s YXM7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC4uLiB8Jm5ic3A7Jm5i c3A7IC4uLiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7ICZuYnNwOyZuYnNwO3wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfHw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFu ZCBkcmFmdC1mZWRvcmtvdy1yYXRzLW5ldHdvcmstZGV2aWNlLWF0dGVzdGF0aW9uLTAxIGZ1cnRo ZXIgc2NvcGVzIGl0c2VsZiBkb3duPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmJ5IG9ubHkgYmVpbmcgYXBwbGlj YWJsZSB0byBjYXNlcyB3aXRoICZxdW90O2VtYmVkZGVkJnF1b3Q7IGFwcHMgb25seSA9IFllcywg YW5kIHdoZXJlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoZSBzZWN1cml0eSBwb2xpY3kgaXMgb25seSBhbiBF eGFjdCBtYXRjaCBhZ2FpbnN0IHJlZmVyZW5jZSB2YWx1ZXMgPSBZZXMuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PkkgYmVsaWV2ZSB0aGF0IHRoZSB5YW5nIGRyYWZ0IGRvZXNuJ3QgaGF2ZSB0aG9zZSB0d28gcmVz dHJpY3Rpb25zLCBmcm9tIG15IHJlYWRpbmcuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhvd2V2ZXIsIHRoZSBw b2ludCBpcyB0aGF0IGJvdGggZHJhZnRzIGFyZSBWRVJZIG5hcnJvdywgYW5kIGluIHRoZSB0YWJs ZSBzaG93biBhYm92ZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+b25seSBhZGRyZXNzIDEgb3V0IG9mIDIwIHBv c3NpYmlsaWVzIGluIHRoYXQgc3BhY2UuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj5JbiBjb250cmFzdCwgdGhlIFRFRVAgV0cgZGVjaWRlZCB0aGF0IGl0IHdhcyBub3QgaW50 ZXJlc3RlZCBpbiBuYXJyb3cgc2NvcGluZ3M8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+KHNwZWNpZmljYWxseSBz b21ldGhpbmcgR2xvYmFsIFBsYXRmb3JtIHNwZWNpZmljKSwgYnV0IGluc3RlYWQgd2FudGVkIG9u ZSBnZW5lcmFsIHNvbHV0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ SWYgdGhlIFJBVFMgV0cgc3BlbmRzIGVmZm9ydCBvbiBzb21ldGhpbmcgdGhhdCBvbmx5IGFkZHJl c3NlcyBhIHNpbmdsZSByb3cgb3V0IG9mIDIwJiM0Mzsgcm93cyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+dGhl biBkbyB3ZSBleHBlY3QgMTkmIzQzOyBvdGhlciBzb2x1dGlvbnMgdG8gYWxzbyBiZSBkb25lIGlu IHRoZSBXRz8mbmJzcDsgT3IgY291bGQgd2Ugd29yayBvbiB0aGluZ3M8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ dGhhdCBhcmUgYnJvYWRlciBhbmQgaGFwcGVuIHRvIGFsc28gd29yayBmb3Igcm93IDk/PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JJ3ZlIHNlZW4gb3RoZXJzIGNvbW1lbnRp bmcgb24gdGhlIGZhY3QgdGhhdCB0aGUgWUFORyBtb2R1bGUgb25seSBzdXBwb3J0cyBUUE1zIGFu ZCBub3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+b3RoZXIgdGhpbmdzIChFQVRzIGV0YyksIHdoaWNoIHdvdWxk IGp1c3QgYWRkIHN1cHBvcnQgZm9yIGEgY291cGxlIG1vcmUgcm93cywgYnV0IHN0aWxsIG5vdDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5iZSBnZW5lcmFsLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+UGVyc29uYWxseSwgSSB3b3VsZCBtdWNoIHJhdGhlciBzZWUgdGhlIFdHIHNwZW5kIGVm Zm9ydCBvbiB0aGluZ3MgdGhhdCByZWFsbHkgYXJlIGdlbmVyaWMsPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPmku ZS4sIHdvcmsgd2l0aCBvciB3aXRob3V0IGhvc3QgZmlyZXdhbGxzLCB3b3JrIHdpdGggbXVsdGlw bGUgUm9UL1RFRSB0eXBlcywgZXRjLiwgcmF0aGVyPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoYW4gc2VlaW5n IGFuIGV4cGxvc2lvbiBvZiBwb2ludCBzb2x1dGlvbnMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5EYXZlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BYAPR05MB42483709CE65A1344DB5C0A6BA4D0BYAPR05MB4248namp_-- From nobody Mon Nov 18 13:33:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BB61120B5C for ; Mon, 18 Nov 2019 13:33:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tcI2mfpo24mZ for ; Mon, 18 Nov 2019 13:33:21 -0800 (PST) Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2DF05120B56 for ; Mon, 18 Nov 2019 13:33:21 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga101.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Nov 2019 13:33:20 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.68,321,1569308400"; d="scan'208,217";a="380792868" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by orsmga005.jf.intel.com with ESMTP; 18 Nov 2019 13:33:20 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX106.amr.corp.intel.com ([169.254.1.150]) with mapi id 14.03.0439.000; Mon, 18 Nov 2019 13:33:20 -0800 From: "Smith, Ned" To: Laurence Lundblade , Dave Thaler CC: Henk Birkholz , "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" , =?utf-8?B?IlNjaMO2bnfDpGxkZXIsIErDvHJnZW4i?= , "Oliver, Ian (Nokia - FI/Espoo)" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAJAygIAAL78AgAEETQCAAqU5AIACdRAAgAOa1YCAATDPAIAAAeiAgAABVYCAAAF4gIAAAjIAgABHkgA= Date: Mon, 18 Nov 2019 21:33:19 +0000 Message-ID: <1C54B922-276A-46A8-AFF9-04A2E6829EF5@intel.com> References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.254.0.106] Content-Type: multipart/alternative; boundary="_000_1C54B922276A46A8AFF904A2E6829EF5intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Nov 2019 21:33:26 -0000 --_000_1C54B922276A46A8AFF904A2E6829EF5intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIGxvZyBpcyBtZXJlbHkgYSB3YXkgdG8gZGVmZXIgYWN0aW9ucyB0YWtlbiBieSBhIFJlbHlp bmcgUGFydHkuIFByZXN1bWFibHksIHRoZXJlIGlzIG5vdCByZWFzb24gdG8gbG9nIHNvbWV0aGlu ZyBpZiB0aGUgbG9nIGlzIG5ldmVyIHByb2Nlc3NlZC4NCg0KVGhlIFJvbGVzIHdvcmtmbG93IGlz buKAmXQgbmVjZXNzYXJpbHkgdGltZSBkZXBlbmRlbnQgd2hpbGUgcG9zc2libHkgdGhlIGFyY2gg bW9kZWxzIChwYXNzcG9ydCwgQkdDKSBhcmU/DQoNCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8 bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KRGF0ZTogTW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBh dCAxOjE3IEFNDQpUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJj LmlldGYub3JnPg0KQ2M6ICJTbWl0aCwgTmVkIiA8bmVkLnNtaXRoQGludGVsLmNvbT4sIEhlbmsg QmVya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+LCBOYW5jeSBDYW0tV2lu Z2V0IDxuY2Ftd2luZ0BjaXNjby5jb20+LCAicmF0c0BpZXRmLm9yZyIgPHJhdHNAaWV0Zi5vcmc+ LCAiIlNjaMO2bnfDpGxkZXIsIErDvHJnZW4iIiA8Si5TY2hvZW53YWVsZGVyQGphY29icy11bml2 ZXJzaXR5LmRlPiwgIk9saXZlciwgSWFuIChOb2tpYSAtIEZJL0VzcG9vKSIgPGlhbi5vbGl2ZXJA bm9raWEtYmVsbC1sYWJzLmNvbT4NClN1YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRp b24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCklmIGEgdHJl ZSBmYWxscyBpbiBhIGZvcmVzdCwgZXZlbiBpZiBubyBvbmUgaGVhcnMgaXQsIHRoZXJlIGlzIGEg bG9nLg0KDQpMTA0KDQoNCg0KDQoNCk9uIE5vdiAxOCwgMjAxOSwgYXQgNTowOSBQTSwgRGF2ZSBU aGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpkdGhh bGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KDQpJIGRvIHRoaW5r IGl0IHdvdWxkIGJlIHVzZWZ1bCB0byBrZWVwIHlvdXIgc3RhdGVtZW50IHRydWUsIHNvIEkgd2ls bCB0aGluayBhYm91dCBob3cgdG8gZGVmaW5lIFJlbHlpbmcgUGFydHkgc2luY2UgSSBzdXNwZWN0 IHRoZXJl4oCZcyBhIHdheSBhcm91bmQgaXQgdGhhdCB3ZSB3b3VsZCBib3RoIGxpa2UuDQoNCkZy b206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYu b3JnPj4gT24gQmVoYWxmIE9mIERhdmUgVGhhbGVyDQpTZW50OiBNb25kYXksIE5vdmVtYmVyIDE4 LCAyMDE5IDU6MDQgUE0NClRvOiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0 LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4NCkNjOiBTbWl0aCwgTmVkIDxuZWQu c21pdGhAaW50ZWwuY29tPG1haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tPj47IEhlbmsgQmlya2hv bHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+PjsgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpIDxuY2Ftd2lu Z0BjaXNjby5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4+OyByYXRzQGlldGYub3JnPG1h aWx0bzpyYXRzQGlldGYub3JnPjsgIlNjaMO2bnfDpGxkZXIsIErDvHJnZW4iIDxKLlNjaG9lbndh ZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGU8bWFpbHRvOkouU2Nob2Vud2FlbGRlckBqYWNvYnMt dW5pdmVyc2l0eS5kZT4+OyBPbGl2ZXIsIElhbiAoTm9raWEgLSBGSS9Fc3BvbykgPGlhbi5vbGl2 ZXJAbm9raWEtYmVsbC1sYWJzLmNvbTxtYWlsdG86aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMu Y29tPj4NClN1YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVyIGRyYWZ0 IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNCklmIGFsbCB5b3UgZG8gaXMgbG9nLCB0 aGVuIHRoZXJlIGlzIG5vIGVuZm9yY2VtZW50LCBhbmQgc2luY2UgdGhlIGRldmljZSBkb2VzbuKA mXQgdGFsayB0byB0aGUgbG9nLCB5b3UgY2Fu4oCZdCBjYWxsIHRoZSBsb2cgYSDigJxSZWx5aW5n IFBhcnR54oCdLg0KSSBkaWRu4oCZdCBzYXkgdGhlcmUgd2FzIG5ldmVyIGEgUmVseWluZyBQYXJ0 eSAoaWYgeW91IGRvIGVuZm9yY2VtZW50IGFuZCBraWNrIHRoZSBkZXZpY2Ugb2ZmIHRoZSBuZXR3 b3JrIG9yIHNvbWV0aGluZyB0aGVuIHllcyB0aGVyZeKAmXMgYSBSZWx5aW5nIFBhcnR5KSwgSSBz YWlkIOKAnG1pZ2h0IGJlIG5v4oCdLg0KU28gSSBkaXNhZ3JlZSB3aXRoIOKAnEF0dGVzdGF0aW9u IGFsd2F5cyBoYXMgYSByZWx5aW5nIHBhcnR54oCdIGJhc2VkIG9uIG15IGRpc2N1c3Npb24gd2l0 aCBOYW5jeS4NCkJlZm9yZSB0aGUgaGFja2F0aG9uIEkgd291bGQgaGF2ZSBhZ3JlZWQgd2l0aCB0 aGF0IHN0YXRlbWVudCDimLoNCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5k LXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpTZW50OiBNb25kYXks IE5vdmVtYmVyIDE4LCAyMDE5IDQ6NTkgUE0NClRvOiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNy b3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20+Pg0KQ2M6ICJTY2jDtm53w6Rs ZGVyLCBKw7xyZ2VuIiA8Si5TY2hvZW53YWVsZGVyQGphY29icy11bml2ZXJzaXR5LmRlPG1haWx0 bzpKLlNjaG9lbndhZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGU+PjsgU21pdGgsIE5lZCA8bmVk LnNtaXRoQGludGVsLmNvbTxtYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbT4+OyBIZW5rIEJpcmto b2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPG1haWx0bzpoZW5rLmJpcmtob2x6 QHNpdC5mcmF1bmhvZmVyLmRlPj47IE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSA8bmNhbXdp bmdAY2lzY28uY29tPG1haWx0bzpuY2Ftd2luZ0BjaXNjby5jb20+PjsgT2xpdmVyLCBJYW4gKE5v a2lhIC0gRkkvRXNwb28pIDxpYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208bWFpbHRvOmlh bi5vbGl2ZXJAbm9raWEtYmVsbC1sYWJzLmNvbT4+OyByYXRzQGlldGYub3JnPG1haWx0bzpyYXRz QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtSYXRzXSBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIg ZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQNCg0KDQpPbiBOb3YgMTgsIDIwMTks IGF0IDQ6NTIgUE0sIERhdmUgVGhhbGVyIDxkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5p ZXRmLm9yZzxtYWlsdG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3 cm90ZToNCg0KQ2FzZSAxKSBUaGUgbmV0d29yayBub3RpY2VzIGFub21hbG91cyB0cmFmZmljIGNv bWluZyBmcm9tIGEgZGV2aWNlIGFscmVhZHkgb24gdGhlIG5ldHdvcmssIHdoaWNoIHRyaWdnZXJz IGEgdmVyaWZpZXIgdG8gYXNrIHRoZSBkZXZpY2UgdG8gYXR0ZXN0IHRvIGl0cyBoZWFsdGggKHdo aWNoIG1heSBoYXZlIGNoYW5nZWQgc2luY2UgaXQgd2FzIGxhc3QgYXR0ZXN0ZWQpLiAgSGVyZSB0 aGVyZSBtaWdodCBldmVuIGJlIG5vIFJlbHlpbmcgUGFydHkgaW52b2x2ZWQgcGVyIHNlLg0KQ2Fz ZSAyKSBUaGUgbmV0d29yayBoYXMgbm90IG5vdGljZWQgYW55dGhpbmcgb2RkLCBidXQgd2FudHMg dG8gcHJvYWN0aXZlbHkgcXVlcnkgYSBkZXZpY2UgYW55d2F5LCBlLmcuLCBiZWNhdXNlIHRoZSBu ZXR3b3JrJ3MgYXBwcmFpc2FsIHBvbGljeSBvZiB3aGF0IGlzIGNvbnNpZGVyZWQgdHJ1c3R3b3J0 aHkgaGFzIGp1c3QgY2hhbmdlZC4gIEFnYWluIHRoZXJlIG1pZ2h0IGV2ZW4gYmUgbm8gUmVseWlu ZyBQYXJ0eSBpbnZvbHZlZC4NCg0KSSB3b3VsZCBjYWxsIHRoZSBuZXR3b3JrIHRoZSByZWx5aW5n IHBhcnR5LiBBdHRlc3RhdGlvbiBhbHdheXMgaGFzIGEgcmVseWluZyBwYXJ0eSBiZWNhdXNlIHRo ZXJlIHdvdWxkIGJlIG5vIHBvaW50IGlmIG5vIG9uZSBjYXJlZCAoaWYgYSB0cmVlIGZhbGxzIGlu IGEgZm9yZXN04oCmKQ0KDQpMTA0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQpSQVRTIG1haWxpbmcgbGlzdA0KUkFUU0BpZXRmLm9yZzxtYWlsdG86 UkFUU0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0 cw0KDQo= --_000_1C54B922276A46A8AFF904A2E6829EF5intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <1C025F03266C9E41BA8F273A0F5F77A2@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAg MCAwIDAgMCAwIDAgMCAwO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0 aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5t c29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1z dHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIGxv ZyBpcyBtZXJlbHkgYSB3YXkgdG8gZGVmZXIgYWN0aW9ucyB0YWtlbiBieSBhIFJlbHlpbmcgUGFy dHkuIFByZXN1bWFibHksIHRoZXJlIGlzIG5vdCByZWFzb24gdG8gbG9nIHNvbWV0aGluZyBpZiB0 aGUgbG9nIGlzIG5ldmVyIHByb2Nlc3NlZC4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUg Um9sZXMgd29ya2Zsb3cgaXNu4oCZdCBuZWNlc3NhcmlseSB0aW1lIGRlcGVuZGVudCB3aGlsZSBw b3NzaWJseSB0aGUgYXJjaCBtb2RlbHMgKHBhc3Nwb3J0LCBCR0MpIGFyZT8NCjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzoz LjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZy b206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr Ij5MYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs8YnI+DQo8 Yj5EYXRlOiA8L2I+TW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBhdCAxOjE3IEFNPGJyPg0KPGI+ VG86IDwvYj5EYXZlIFRoYWxlciAmbHQ7ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0 Zi5vcmcmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDtTbWl0aCwgTmVkJnF1b3Q7ICZsdDtuZWQu c21pdGhAaW50ZWwuY29tJmd0OywgSGVuayBCZXJraG9seiAmbHQ7aGVuay5iaXJraG9sekBzaXQu ZnJhdW5ob2Zlci5kZSZndDssIE5hbmN5IENhbS1XaW5nZXQgJmx0O25jYW13aW5nQGNpc2NvLmNv bSZndDssICZxdW90O3JhdHNAaWV0Zi5vcmcmcXVvdDsgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7LCAm cXVvdDsmcXVvdDtTY2jDtm53w6RsZGVyLCBKw7xyZ2VuJnF1b3Q7JnF1b3Q7ICZsdDtKLlNjaG9l bndhZWxkZXJAamFjb2JzLXVuaXZlcnNpdHkuZGUmZ3Q7LCAmcXVvdDtPbGl2ZXIsIElhbiAoTm9r aWEgLSBGSS9Fc3BvbykmcXVvdDsNCiAmbHQ7aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29t Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW1JhdHNdIENhbGwgZm9yIGFkb3B0aW9uIChh ZnRlciBkcmFmdCByZW5hbWUpIGZvciBZYW5nIG1vZHVsZSBkcmFmdDxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JZiBhIHRyZWUgZmFsbHMgaW4g YSBmb3Jlc3QsIGV2ZW4gaWYgbm8gb25lIGhlYXJzIGl0LCB0aGVyZSBpcyBhIGxvZy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5MTDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiBOb3Yg MTgsIDIwMTksIGF0IDU6MDkgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWlsdG86ZHRo YWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPmR0aGFsZXI9NDBtaWNyb3NvZnQu Y29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JIGRvIHRoaW5rIGl0 IHdvdWxkIGJlIHVzZWZ1bCB0byBrZWVwIHlvdXIgc3RhdGVtZW50IHRydWUsIHNvIEkgd2lsbCB0 aGluayBhYm91dCBob3cgdG8gZGVmaW5lIFJlbHlpbmcgUGFydHkgc2luY2UgSSBzdXNwZWN0IHRo ZXJl4oCZcyBhIHdheSBhcm91bmQgaXQgdGhhdCB3ZSB3b3VsZCBib3RoIGxpa2UuPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxi PkZyb206PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj5SQVRTICZsdDs8YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnIj48c3BhbiBz dHlsZT0iY29sb3I6cHVycGxlIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24NCiBC ZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9iPkRhdmUgVGhhbGVyPGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1vbmRheSwgTm92ZW1iZXIgMTgsIDIwMTkgNTowNCBQ TTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+TGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFu ZC1yZXNvcnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5sZ2xAaXNsYW5kLXJlc29y dC5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlNtaXRoLCBOZWQgJmx0OzxhIGhyZWY9Im1haWx0 bzpuZWQuc21pdGhAaW50ZWwuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5uZWQuc21p dGhAaW50ZWwuY29tPC9zcGFuPjwvYT4mZ3Q7OyBIZW5rIEJpcmtob2x6ICZsdDs8YSBocmVmPSJt YWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSI+PHNwYW4gc3R5bGU9ImNvbG9y OnB1cnBsZSI+aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZTwvc3Bhbj48L2E+Jmd0OzsN CiBOYW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykgJmx0OzxhIGhyZWY9Im1haWx0bzpuY2Ftd2lu Z0BjaXNjby5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm5jYW13aW5nQGNpc2NvLmNv bTwvc3Bhbj48L2E+Jmd0Ozs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xv cjpwdXJwbGUiPnJhdHNAaWV0Zi5vcmc8L3NwYW4+PC9hPjsgJnF1b3Q7U2Now7Zud8OkbGRlciwN CiBKw7xyZ2VuJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Si5TY2hvZW53YWVsZGVyQGphY29i cy11bml2ZXJzaXR5LmRlIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5KLlNjaG9lbndhZWxk ZXJAamFjb2JzLXVuaXZlcnNpdHkuZGU8L3NwYW4+PC9hPiZndDs7IE9saXZlciwgSWFuIChOb2tp YSAtIEZJL0VzcG9vKSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlhbi5vbGl2ZXJAbm9raWEtYmVsbC1s YWJzLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aWFuLm9saXZlckBub2tpYS1iZWxs LWxhYnMuY29tPC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJlOiBbUmF0c10gQ2FsbCBmb3Ig YWRvcHRpb24gKGFmdGVyIGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5JZiBhbGwgeW91IGRvIGlzIGxvZywgdGhlbiB0aGVy ZSBpcyBubyBlbmZvcmNlbWVudCwgYW5kIHNpbmNlIHRoZSBkZXZpY2UgZG9lc27igJl0IHRhbGsg dG8gdGhlIGxvZywgeW91IGNhbuKAmXQgY2FsbCB0aGUgbG9nIGEg4oCcUmVseWluZyBQYXJ0eeKA nS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkkgZGlkbuKAmXQgc2F5IHRoZXJlIHdhcyBuZXZl ciBhIFJlbHlpbmcgUGFydHkgKGlmIHlvdSBkbyBlbmZvcmNlbWVudCBhbmQga2ljayB0aGUgZGV2 aWNlIG9mZiB0aGUgbmV0d29yayBvciBzb21ldGhpbmcgdGhlbiB5ZXMgdGhlcmXigJlzIGEgUmVs eWluZyBQYXJ0eSksIEkgc2FpZCDigJxtaWdodCBiZSBub+KAnS48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPlNvIEkgZGlzYWdyZWUgd2l0aCDigJxBdHRlc3RhdGlvbiBhbHdheXMgaGFzIGEgcmVs eWluZyBwYXJ0eeKAnSBiYXNlZCBvbiBteSBkaXNjdXNzaW9uIHdpdGggTmFuY3kuPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5CZWZvcmUgdGhlIGhhY2thdGhvbiBJIHdvdWxkIGhhdmUgYWdyZWVk IHdpdGggdGhhdCBzdGF0ZW1lbnQ8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3M7Y29s b3I6IzFGNDk3RCI+Sjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJt YWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5s Z2xAaXNsYW5kLXJlc29ydC5jb208L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1vbmRheSwgTm92ZW1iZXIgMTgs IDIwMTkgNDo1OSBQTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+RGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpkdGhh bGVyQG1pY3Jvc29mdC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmR0aGFsZXJAbWlj cm9zb2Z0LmNvbTwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+JnF1b3Q7U2Now7Zud8OkbGRlciwgSsO8 cmdlbiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkouU2Nob2Vud2FlbGRlckBqYWNvYnMtdW5p dmVyc2l0eS5kZSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+Si5TY2hvZW53YWVsZGVyQGph Y29icy11bml2ZXJzaXR5LmRlPC9zcGFuPjwvYT4mZ3Q7OyBTbWl0aCwgTmVkICZsdDs8YSBocmVm PSJtYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ bmVkLnNtaXRoQGludGVsLmNvbTwvc3Bhbj48L2E+Jmd0OzsNCiBIZW5rIEJpcmtob2x6ICZsdDs8 YSBocmVmPSJtYWlsdG86aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSI+PHNwYW4gc3R5 bGU9ImNvbG9yOnB1cnBsZSI+aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZTwvc3Bhbj48 L2E+Jmd0OzsgTmFuY3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpICZsdDs8YSBocmVmPSJtYWlsdG86 bmNhbXdpbmdAY2lzY28uY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5uY2Ftd2luZ0Bj aXNjby5jb208L3NwYW4+PC9hPiZndDs7DQogT2xpdmVyLCBJYW4gKE5va2lhIC0gRkkvRXNwb28p ICZsdDs8YSBocmVmPSJtYWlsdG86aWFuLm9saXZlckBub2tpYS1iZWxsLWxhYnMuY29tIj48c3Bh biBzdHlsZT0iY29sb3I6cHVycGxlIj5pYW4ub2xpdmVyQG5va2lhLWJlbGwtbGFicy5jb208L3Nw YW4+PC9hPiZndDs7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5yYXRzQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtSYXRzXSBDYWxs IGZvciBhZG9wdGlvbiAoYWZ0ZXIgZHJhZnQgcmVuYW1lKSBmb3IgWWFuZyBtb2R1bGUgZHJhZnQ8 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+T24gTm92IDE4LCAyMDE5LCBhdCA0 OjUyIFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNyb3Nv ZnQuY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5kdGhhbGVy PTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzwvc3Bhbj48L2E+Jmd0Ow0KIHdyb3RlOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Q2FzZSAxKSBUaGUgbmV0d29yayBub3Rp Y2VzIGFub21hbG91cyB0cmFmZmljIGNvbWluZyBmcm9tIGEgZGV2aWNlIGFscmVhZHkgb24gdGhl IG5ldHdvcmssIHdoaWNoIHRyaWdnZXJzIGEgdmVyaWZpZXIgdG8gYXNrIHRoZSBkZXZpY2UgdG8g YXR0ZXN0IHRvIGl0cyBoZWFsdGgNCiAod2hpY2ggbWF5IGhhdmUgY2hhbmdlZCBzaW5jZSBpdCB3 YXMgbGFzdCBhdHRlc3RlZCkuICZuYnNwO0hlcmUgdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5 aW5nIFBhcnR5IGludm9sdmVkIHBlciBzZS48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KQ2FzZSAyKSBUaGUgbmV0d29yayBoYXMgbm90IG5vdGlj ZWQgYW55dGhpbmcgb2RkLCBidXQgd2FudHMgdG8gcHJvYWN0aXZlbHkgcXVlcnkgYSBkZXZpY2Ug YW55d2F5LCBlLmcuLCBiZWNhdXNlIHRoZSBuZXR3b3JrJ3MgYXBwcmFpc2FsIHBvbGljeSBvZiB3 aGF0IGlzIGNvbnNpZGVyZWQgdHJ1c3R3b3J0aHkgaGFzIGp1c3QgY2hhbmdlZC4gJm5ic3A7QWdh aW4gdGhlcmUgbWlnaHQgZXZlbiBiZSBubyBSZWx5aW5nIFBhcnR5IGludm9sdmVkLjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+SSB3b3VsZCBjYWxs IHRoZSBuZXR3b3JrIHRoZSByZWx5aW5nIHBhcnR5LiBBdHRlc3RhdGlvbiBhbHdheXMgaGFzIGEg cmVseWluZyBwYXJ0eSBiZWNhdXNlIHRoZXJlIHdvdWxkIGJlIG5vIHBvaW50IGlmIG5vIG9uZSBj YXJlZCAoaWYgYSB0cmVlIGZhbGxzDQogaW4gYSBmb3Jlc3TigKYpPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ TEw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhIj5fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NClJBVFMgbWFpbGluZyBsaXN0PGJyPg0KPC9z cGFuPjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjpwdXJwbGUiPlJBVFNAaWV0Zi5vcmc8 L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0 aWNhIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9yYXRzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYTtjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vcmF0czwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_1C54B922276A46A8AFF904A2E6829EF5intelcom_-- From nobody Tue Nov 19 00:28:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 099AF12009C for ; Tue, 19 Nov 2019 00:28:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=bKNmAiCa; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=7H6KXFGw Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k1_sbHGLSDT6 for ; Tue, 19 Nov 2019 00:28:12 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10052.outbound.protection.outlook.com [40.107.1.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E149512026E for ; Tue, 19 Nov 2019 00:28:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4yz5HDM40BNb1mxQWZfCtGHDt8TIoerzmYlC+8oOrRM=; b=bKNmAiCaQuiSE5UQdAnAyCuyF08dtjp41UFznbL8hgnQg0JIDu4Lg2ypGYB6/sv8QLMgxXrZBN0BcqcPiECCedwL0uFiqTewalBkwHrisLuESR4gGF4IL+0djt4UiYANaAqAN9E+89PBfR4LqnJ8/962L5WToj0LHULemuxp2SM= Received: from VI1PR0802CA0022.eurprd08.prod.outlook.com (2603:10a6:800:aa::32) by AM5PR0802MB2388.eurprd08.prod.outlook.com (2603:10a6:203:9f::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.30; Tue, 19 Nov 2019 08:28:09 +0000 Received: from AM5EUR03FT052.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e08::207) by VI1PR0802CA0022.outlook.office365.com (2603:10a6:800:aa::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23 via Frontend Transport; Tue, 19 Nov 2019 08:28:09 +0000 Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com; Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT052.mail.protection.outlook.com (10.152.17.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23 via Frontend Transport; Tue, 19 Nov 2019 08:28:08 +0000 Received: ("Tessian outbound 0cf06bf5c60e:v33"); Tue, 19 Nov 2019 08:28:08 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 4af103f2826d528c X-CR-MTA-TID: 64aa7808 Received: from 0f41af51f99b.1 (cr-mta-lb-1.cr-mta-net [104.47.5.56]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id E8687A01-2DB1-4A3C-9931-69505D7BE20A.1; Tue, 19 Nov 2019 08:28:03 +0000 Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02lp2056.outbound.protection.outlook.com [104.47.5.56]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 0f41af51f99b.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 19 Nov 2019 08:28:02 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=T74+XE8EWDV0kw1sky8o5bJdfMTcS3mFWi8glYgawyGT+ZeV3R4tEAG0lLrKgDrp8CDWkNLTE9wWoMO753HuvkUqoKXnH/cE0gJDT2Ff6qoXHLo9WtWyysgb9IubVg1/gwacs4beQ+vUJUNy8oBUVJfoN5UJfqm43ScbfaLlDhEkclXjtQT8+pi5G5Jzcrxwz0Z88RDJ418QnMLkWZFOjWNBoPJog6s19FtCoureOqgGr8IPgfAV5rzi7i6OayZ/Q4ZfIeNFooJLVJc2OzNsSiihKR2JoQbr6TygIeO48YwUE+td1e8//ygWYK1/12vR8B8mSQhau0+E2jv9PZok4A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5n9Ppno2c0/RaoZeUNJpcQ2JHlX7rhc2Q3PrfERTTZY=; b=f74keOyCeorz/JHdX5o7XSFhIuxCz7bv6nbz/oJUmosqzbAy9tiPf+3U/PlJT06Zh0/A+oycGn/dLzqmt12HtMP9fB9X7RkHneNCUCuVC7mDZe5w4HLtARUbCC8Vo3kT0iLWs1rUg1iiyXJfRJDI1J+9bqSt98ulmRt/2p5f10D3oIYESu1LncUTHpFi2qhVV3xQODYpKlfVCU2PMd5kh37jYqVCkAnFNKN1VA5hFvKc1l7P6//HlqbWJfk8wG6aOCaVOX/O3MIc/oWCU0d7A/+0JOxLPzwgvmrztZjmoj7v8UMIEStDCpbnDGQysIhLlJp7D5D7tBkrLyV/kn7jfw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5n9Ppno2c0/RaoZeUNJpcQ2JHlX7rhc2Q3PrfERTTZY=; b=7H6KXFGw1liYXO6z9LZ1geSZyVFZtjTId8wGiAJYtM5mGdUYQDDZuaYg/6Ub0Pm8ZcQM2zzrn1eaws0pDrQXW7w61fgMbusgsPx4Vn5YlpQbXHAMgq1pk4If33k0q3Fi6bNRlOygn+Yx9PO7c33DpUDfRPGdS6uv8A9+/5VLgkU= Received: from VI1PR08MB5360.eurprd08.prod.outlook.com (52.133.245.74) by VI1PR08MB3582.eurprd08.prod.outlook.com (20.177.62.82) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.26; Tue, 19 Nov 2019 08:28:01 +0000 Received: from VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d]) by VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d%7]) with mapi id 15.20.2451.031; Tue, 19 Nov 2019 08:28:01 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: Public Key Claims in JWT / CWT Thread-Index: AdWesrZcQRS0paB2QjWLhI91hn0Sgw== Date: Tue, 19 Nov 2019 08:28:01 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 0505bdf4-d055-4310-b0b7-41ff6082a70f.0 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.155.170] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 91ed92b9-c5b6-41a9-28a7-08d76cca689d X-MS-TrafficTypeDiagnostic: VI1PR08MB3582:|AM5PR0802MB2388: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:7219; x-forefront-prvs: 022649CC2C X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(979002)(4636009)(376002)(136003)(346002)(396003)(39860400002)(366004)(199004)(189003)(53754006)(52536014)(486006)(476003)(2351001)(14454004)(54896002)(5640700003)(25786009)(6436002)(9686003)(66946007)(66476007)(26005)(6916009)(71190400001)(6506007)(66066001)(966005)(33656002)(76116006)(478600001)(790700001)(6116002)(3846002)(186003)(86362001)(71200400001)(6306002)(74316002)(66556008)(66446008)(102836004)(256004)(64756008)(2501003)(7736002)(55016002)(81166006)(81156014)(7696005)(8936002)(5660300002)(99286004)(316002)(1730700003)(2906002)(8676002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB3582; H:VI1PR08MB5360.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 0N+UuKMzmhYqbLZE4xY/RkVFEGrDjcjx0xZBRNg1RoEEDDVL9p24fy2W4XlfiYEQj0iFIx+gPExx57TSrvqFyi1Rc7uX+29heQ2z1TdORYpDyDc2tGnrfbHY0UQIt5ebMP43GI5J2DQBx0jIQoNg7TRIbb53Dd7t3bu5wVyAK2Mxs5V+I0PwXlMjiOgI2hFwn6QzwzGBsJ3nov0QZnjpPhRTJL4XWmHW5iXe1G3+erbTmf7gPMGE4Gpu9zz3nf+FWW4VdfvxNgWtEtEWOIyAi+OBpJVwno97Rhrl/SfGMkIXzq63ucl8/8ov9mf7w2+1yQNh+M26cGaVs4QMpYZcf9hAjeB0VlwO1aCIOJiOHM6h/bGNez76czOZbZBtPIlGt0UOeOvqboTO8c6HUVh7cHDihvvvEpN5vYcbi0VQzu4hZEzQO1zMUBC8Ow9M+nK4 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_VI1PR08MB5360C0CFC1DFF09B020468B5FA4C0VI1PR08MB5360eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3582 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT052.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(979002)(4636009)(39860400002)(346002)(376002)(396003)(136003)(1110001)(339900001)(53754006)(189003)(199004)(40434004)(2501003)(86362001)(33656002)(5660300002)(336012)(22756006)(54896002)(5640700003)(9686003)(2351001)(6306002)(16586007)(66066001)(55016002)(3846002)(6116002)(790700001)(36906005)(316002)(5024004)(14444005)(70586007)(70206006)(25786009)(26826003)(478600001)(2906002)(7736002)(126002)(81156014)(6506007)(26005)(52536014)(966005)(8936002)(71190400001)(76130400001)(8676002)(356004)(486006)(1730700003)(476003)(81166006)(6916009)(14454004)(186003)(74316002)(7696005)(105606002)(102836004)(99286004)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5PR0802MB2388; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; MX:1; A:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: d34d7add-23b7-4572-12d6-08d76cca63e5 X-MS-Exchange-PUrlCount: 3 X-Forefront-PRVS: 022649CC2C X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: Hko979+Owodiv4s8bj4wlgWOLCtQI0l2OY9m47Fn1PkR3pfnkkyr+mmz3zNNxSgELkIVeGT+fqs55AHZOriGPPkth/isPt5RonVUP0fP8cI3u7SmMoSIdcw7jlpofxFPr8dfkpIRcXgOaAhAM1D2HzH88WNyHPaOhy2k/iG1LnZDnXvuMNMm9VjLb3d1fHyWnYTbFK0SlSEQp5WFuA3wsKsYcqM3VNP1iyKotNScUDV2rcq8FMZ+45UMGsXsQbQaVfN946YMcW5EVmbsNqT33VozHtt0JpbXHBgL6x7v9bWaXKcGDjMS4l/z6ZgHgoHgbWUqoHypw5q2gG5WkeyHYFgP5DWbrqsSIHEVKL69OQf4DEehR5cVSKR/Sg/Vd0gkf7ydDuMuR1l5hxqj31nsjlOUzaz0fOrKE1vg4XD+SPGGHswlK+J7WqydmYUV0kN2gi5p7YLNTok2NK5k2q3Yt/+12fUkOTHczoRlVYDNAy0= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Nov 2019 08:28:08.9987 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 91ed92b9-c5b6-41a9-28a7-08d76cca689d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0802MB2388 Archived-At: Subject: [Rats] Public Key Claims in JWT / CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 08:28:17 -0000 --_000_VI1PR08MB5360C0CFC1DFF09B020468B5FA4C0VI1PR08MB5360eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, Here is some background info to the discussions today in the RATS WG meetin= g. With RFC 7800 we added the "cnf" claim to the JWT to contain members used t= o identify the proof-of-possession key. It re-uses the work done for JSON Web Key, including key ids, JWK Thumbprin= ts, symmetric as well as asymmetric keys. This claim has been registered with IANA at https://www.iana.org/assignment= s/jwt/jwt.xhtml Later, after working on CWT we created the corresponding functionality for = https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-11. It aims to provide functionality equivalent to RFC 7800. The spec re-uses t= he "COSE_Key" and "Encrypted_COSE_Key" structures defined in RFC 8392. draft-ietf-ace-cwt-proof-of-possession-11 is in the RFC Editor Queue and th= e IANA registry value for cnf is already available in https://www.iana.org/= assignments/cwt/cwt.xhtml These specs are implemented and deployed. I would be surprised if you cannot reuse this functionality in the EAT toke= n for offering proof-of-possession functionality. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR08MB5360C0CFC1DFF09B020468B5FA4C0VI1PR08MB5360eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

Here is some background info to the discussions toda= y in the RATS WG meeting.

 

With RFC 7800 we added the "cnf" claim to = the JWT to contain members used to identify the proof-of-possession key.

It re-uses the work done for JSON Web Key, including= key ids, JWK Thumbprints, symmetric as well as asymmetric keys.

This claim has been registered with IANA at https://= www.iana.org/assignments/jwt/jwt.xhtml

 

Later, after working on CWT we created the correspon= ding functionality for https://tools.ietf.org/html/draft-ietf-ace-cwt-proof= -of-possession-11.

It aims to provide functionality equivalent to RFC 7= 800. The spec re-uses the "COSE_Key" and "Encrypted_COSE_Key= " structures defined in RFC 8392.

draft-ietf-ace-cwt-proof-of-possession-11 is in the = RFC Editor Queue and the IANA registry value for cnf is already available i= n https://www.iana.org/assignments/cwt/cwt.xhtml

 

These specs are implemented and deployed.=

 

I would be surprised if you cannot reuse this functi= onality in the EAT token for offering proof-of-possession functionality.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR08MB5360C0CFC1DFF09B020468B5FA4C0VI1PR08MB5360eurp_-- From nobody Tue Nov 19 03:05:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22B0C1208F6 for ; Tue, 19 Nov 2019 03:05:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.963 X-Spam-Level: X-Spam-Status: No, score=-0.963 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com header.b=L3WN69hi; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=qualcomm.onmicrosoft.com header.b=tbxC0r/5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IYRcg3WnZ-KD for ; Tue, 19 Nov 2019 03:05:53 -0800 (PST) Received: from alexa-out-sd-01.qualcomm.com (alexa-out-sd-01.qualcomm.com [199.106.114.38]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C602712080A for ; Tue, 19 Nov 2019 03:05:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1574161553; x=1605697553; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=hkSagm+MX44qMt+YGGU7x4mAh5Kgl5c3xNQxBeS2I78=; b=L3WN69hinvIJnf1uhMe+/ebISSocqxBCQuJS+5SFgpN7pZjUQ4mLZVGa shBjh4JTrv8kC9uF6UsaFKwigb6DJkdL0MlLiSJyYrF68pXwNwrEv2a0J 3EV6SBZabGC8AtgfmmAeCiukxCjrnQk4SRyntnf0tUZnfIb1l0NOu68LL I=; Received: from unknown (HELO ironmsg05-sd.qualcomm.com) ([10.53.140.145]) by alexa-out-sd-01.qualcomm.com with ESMTP; 19 Nov 2019 03:05:53 -0800 IronPort-SDR: RF/vMxMP36CwFNqgzlHrHUOYzha+IkHngmg+h492IwSqoUEg1MMmjlBFgyloF9pu4BYSwo4rDJ 5Lgp6Va05lf+8eURYK5iayygZDnkPDObWgJoDZ+jyNua2loF4Z5EPiZUbpJK4ABoE2JeHzlMPO x9iryqUDaD5EBFubmLAvduccNrNh1tfXZmAxfo0erjit7ne3mGWzGMOQzeldwdO0YFW9R2qBXA JD+tfEvjYZ2I9ykFYmWbBTZdTBxzbMMUTOSBq16nWtA4wHnjGYxaoKzt4r5zLAb4NOXtCBMR4t AbmiHZbRE413aT1ZySW2PK2E Received: from nasanexm03b.na.qualcomm.com ([10.85.0.98]) by ironmsg05-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 19 Nov 2019 03:05:53 -0800 Received: from APSANEXR01B.ap.qualcomm.com (10.85.0.37) by nasanexm03b.na.qualcomm.com (10.85.0.98) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 19 Nov 2019 03:05:53 -0800 Received: from nasanexm03d.na.qualcomm.com (10.85.0.91) by APSANEXR01B.ap.qualcomm.com (10.85.0.37) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Tue, 19 Nov 2019 03:05:49 -0800 Received: from NAM01-BN3-obe.outbound.protection.outlook.com (199.106.107.6) by nasanexm03d.na.qualcomm.com (10.85.0.91) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Tue, 19 Nov 2019 03:05:49 -0800 Received: from BYAPR02MB4422.namprd02.prod.outlook.com (52.135.238.159) by BYAPR02MB5541.namprd02.prod.outlook.com (20.178.1.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.29; Tue, 19 Nov 2019 11:05:48 +0000 Received: from BYAPR02MB4422.namprd02.prod.outlook.com ([fe80::2c02:e958:405f:da7b]) by BYAPR02MB4422.namprd02.prod.outlook.com ([fe80::2c02:e958:405f:da7b%4]) with mapi id 15.20.2451.031; Tue, 19 Nov 2019 11:05:47 +0000 From: Giridhar Mandyam To: "rats@ietf.org" Thread-Topic: Public Key Claims in JWT / CWT Thread-Index: AdWesrZcQRS0paB2QjWLhI91hn0SgwAFgUJA Date: Tue, 19 Nov 2019 11:05:47 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=mandyam@qti.qualcomm.com; x-originating-ip: [101.100.166.67] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f8c09108-ca26-4f34-2fdc-08d76ce06e8c x-ms-traffictypediagnostic: BYAPR02MB5541: x-ms-exchange-purlcount: 4 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:5516; x-forefront-prvs: 022649CC2C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(136003)(396003)(346002)(39860400002)(366004)(40434004)(189003)(53754006)(199004)(25786009)(966005)(14454004)(478600001)(76176011)(7696005)(53546011)(76116006)(6506007)(102836004)(256004)(14444005)(5024004)(52536014)(9686003)(476003)(54896002)(6306002)(55016002)(236005)(790700001)(3846002)(486006)(6116002)(66066001)(6246003)(2351001)(229853002)(446003)(74316002)(606006)(5640700003)(7736002)(11346002)(6436002)(316002)(99286004)(8676002)(5660300002)(81166006)(1730700003)(81156014)(6916009)(2501003)(71200400001)(64756008)(8936002)(66946007)(66446008)(66556008)(86362001)(186003)(66476007)(71190400001)(26005)(33656002)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR02MB5541; H:BYAPR02MB4422.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 1pvwtUjVYXqZb1B7nME+LeDEnQqh2jJ6pF+zsY2nVdR9SnvmSu1RfeC9X/dGixOQmhFgRBjFKbiFkJPVq8drthHgYWFpZCQ2ndjZoJnq37F80fAQBit39jwv9vpbUQk0N8UuHTyTso5x/uA4iCH4N2/B/ztByfRMgMvxZ3P0fAC0M0pAod18M8PYiq2FLaHqxfpDvdrQDik7FKp8G2KOC91OjBOXzsX3wvXNDNcZ6MaiPUFIZINPb//zqUKNY4mYxMPS32+sEw48bTXQxVPhu9+JXTaNeNUmNYhDm0MzmA4HSmgiDKN1PFReclJYusn8ptOLk3hWvXnFMBU17bjovOdtaXPC0H1akC/DcddrnWDam2gL/HnNY8jQ8SL6CO5HJXLbrH7w4OLz0/hDQJJGQMhu2UPefhZ8qkUertJb3oDHeM9teB/hvuCqYyEognnASbt8Kc+IwdqaL7jtBVR+kPsBeQjmOcwXcpGBs50y+gg= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Bzpwv5aE+6eGrZ++HonnlzgEpE+j6c4axBk2qHnxd99CXgRu2r3KOHYgH/vui2U1zWD+hKppF/H89qfJFvWSrBKBSfNZdU6ZLaufptUb18uN52v9YRU9sitQVcVCn+eEot5uxK8JWmteGEA6lfLDxmcvK16Ue5YnJYV6u+jlm0svvkgKa78E0FBilN2q+mkuLf3bimOLof6qsohEyvwio82Zq+cfPpLpEL2euftU7wH2pZcOBjfGiZ8ikbSASTy9Ar8KT1AYt2zALsuopzNUQqc1DQWUdsqgzfCeGgvV7jmvq+CCyyAuCBG5jTDN/q/uKUM/tnBldNGL0y6iX0WP5g== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jOUGzgE3BrQ00J5WBoRGUBluOUr9uMPO4iqr6LycFVM=; b=N3KCLMbnYMvdP1iXzFBGQnm6S8NykPaYArQz17vY/1n5/f/zCbec3ovksetJrq1+TxReopwReC8F0nep+HC9289ByfKBRL4AKjNmxR0zPMKKS4+rD4fc6ayGRr4Q4v61ec3MSS+geAPch2WRHxLkUImAXr9EmIm2G/NFSL185KKMitGM3/1np1HV++mLyRUteokQ4o4vopX1elAyFaoHdTFBw0zWu+1JQMh8v4MEMhScgIO16ryIfDZwmZzunlwh7HX26sm0dlWl3DAyH5m7yPXA21ood0dc+f8vesJDSVmDVFiCLucJBOiAFMbZsGWK592Y0JCWLP/9IFN7RMrOZQ== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=qti.qualcomm.com; dmarc=pass action=none header.from=qti.qualcomm.com; dkim=pass header.d=qti.qualcomm.com; arc=none dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.onmicrosoft.com; s=selector1-qualcomm-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jOUGzgE3BrQ00J5WBoRGUBluOUr9uMPO4iqr6LycFVM=; b=tbxC0r/5v5VOdea1+RrFzcKok5iomI4UYruWPqIgHOgwFIpJ8m7NuZbEoYFZhuLDCmCr5l1ZIfvFo9W58ZjWbmO1Rn8Oyhh+xxJvrLO+4NffJ9ZGHhTnwU+Xlcc67oayAjKeeBm8WIO9rNxJcEqZVNBfiZFz2vb0nGUVZpKnYsY= x-ms-exchange-crosstenant-network-message-id: f8c09108-ca26-4f34-2fdc-08d76ce06e8c x-ms-exchange-crosstenant-originalarrivaltime: 19 Nov 2019 11:05:47.8430 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 98e9ba89-e1a1-4e38-9007-8bdabc25de1d x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: wxOhQz4UI6UQl1y6emfsmU2cMua+oyiqMdHFM0K2Usxu0vmiGmk1lIaeY4GrB0U+8Hcz7MMm/R3ATB/IkIcTEXVpp7zdaxZkqzhtyJiFv6Y= x-ms-exchange-transport-crosstenantheadersstamped: BYAPR02MB5541 Content-Type: multipart/alternative; boundary="_000_BYAPR02MB4422339307455094F1D1C0EF814C0BYAPR02MB4422namp_" MIME-Version: 1.0 X-OriginatorOrg: qti.qualcomm.com Archived-At: Subject: Re: [Rats] Public Key Claims in JWT / CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 11:05:55 -0000 --_000_BYAPR02MB4422339307455094F1D1C0EF814C0BYAPR02MB4422namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks Hannes. I don't know if 'cnf' semantics would actually cover something like FIDO's = Credential ID (see https://www.w3.org/TR/webauthn/#terminology for definiti= on), which would also be a candidate for public key attestation. For insta= nce, would a Cred ID be designated as a 'kid' as per the ACE PoP spec, or w= ould there need to be a custom claim? -Giri From: RATS On Behalf Of Hannes Tschofenig Sent: Tuesday, November 19, 2019 12:28 AM To: rats@ietf.org Subject: [Rats] Public Key Claims in JWT / CWT CAUTION: This email originated from outside of the organization. Hi all, Here is some background info to the discussions today in the RATS WG meetin= g. With RFC 7800 we added the "cnf" claim to the JWT to contain members used t= o identify the proof-of-possession key. It re-uses the work done for JSON Web Key, including key ids, JWK Thumbprin= ts, symmetric as well as asymmetric keys. This claim has been registered with IANA at https://www.iana.org/assignment= s/jwt/jwt.xhtml Later, after working on CWT we created the corresponding functionality for = https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-11. It aims to provide functionality equivalent to RFC 7800. The spec re-uses t= he "COSE_Key" and "Encrypted_COSE_Key" structures defined in RFC 8392. draft-ietf-ace-cwt-proof-of-possession-11 is in the RFC Editor Queue and th= e IANA registry value for cnf is already available in https://www.iana.org/= assignments/cwt/cwt.xhtml These specs are implemented and deployed. I would be surprised if you cannot reuse this functionality in the EAT toke= n for offering proof-of-possession functionality. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_BYAPR02MB4422339307455094F1D1C0EF814C0BYAPR02MB4422namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks Hannes. 

 

I don’t know if ‘cnf’ semantics wo= uld actually cover something like FIDO’s Credential ID (see https://www.w3.org/= TR/webauthn/#terminology for definition), which would also be a candida= te for public key attestation.  For instance, would a Cred ID be desig= nated as a ‘kid’ as per the ACE PoP spec, or would there need to be a custom claim?

 

-Giri

 

From: RATS <rats-bounces@ietf.org> O= n Behalf Of Hannes Tschofenig
Sent: Tuesday, November 19, 2019 12:28 AM
To: rats@ietf.org
Subject: [Rats] Public Key Claims in JWT / CWT

 

CAUTION: This email originated from outside of the organization.

Hi all,

 

Here is some background info to the discussions toda= y in the RATS WG meeting.

 

With RFC 7800 we added the "cnf" claim to = the JWT to contain members used to identify the proof-of-possession key.

It re-uses the work done for JSON Web Key, including= key ids, JWK Thumbprints, symmetric as well as asymmetric keys.

This claim has been registered with IANA at https://www.iana.org/assignments/jwt/jwt.xhtml

 

Later, after working on CWT we created the correspon= ding functionality for https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-1= 1.

It aims to provide functionality equivalent to RFC 7= 800. The spec re-uses the "COSE_Key" and "Encrypted_COSE_Key= " structures defined in RFC 8392.

draft-ietf-ace-cwt-proof-of-possession-11 is in the = RFC Editor Queue and the IANA registry value for cnf is already available i= n https://www.iana= .org/assignments/cwt/cwt.xhtml

 

These specs are implemented and deployed.=

 

I would be surprised if you cannot reuse this functi= onality in the EAT token for offering proof-of-possession functionality.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any= attachments are confidential and may also be privileged. If you are not th= e intended recipient, please notify the sender immediately and do not discl= ose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Th= ank you.

--_000_BYAPR02MB4422339307455094F1D1C0EF814C0BYAPR02MB4422namp_-- From nobody Tue Nov 19 05:20:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2C8C120830 for ; Tue, 19 Nov 2019 05:20:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hCInP9iC8C3R for ; Tue, 19 Nov 2019 05:20:53 -0800 (PST) Received: from p3plsmtpa09-05.prod.phx3.secureserver.net (p3plsmtpa09-05.prod.phx3.secureserver.net [173.201.193.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4866712087E for ; Tue, 19 Nov 2019 05:20:53 -0800 (PST) Received: from [172.16.134.137] ([101.100.166.3]) by :SMTPAUTH: with ESMTPA id X3R4iZeMItxfMX3R5iRKFH; Tue, 19 Nov 2019 06:20:52 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_B9F03291-DAA0-4C67-98E6-EC9F4923BD1C" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Tue, 19 Nov 2019 21:20:49 +0800 In-Reply-To: Cc: "rats@ietf.org" To: Hannes Tschofenig References: X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfBFic+72/grZPLw58K9LyO81+nu6jB+cQOO71a8z7K/a8+6ceJr9NL+DLd/j3oFmFmXh4s6mDv1Rl81nqwI1U/5oxkZIFZBHf7F08Hd9Jkq/luvvdbyP peTz49dNTxwHGckhViGbPbNLYKDM1dPGk1wfQj2a+y0NhcLEBm47rLno5UYIIolSq/vMo3+8Ko9W7tsgX1l5nW13P7a+C6NkOp4= Archived-At: Subject: Re: [Rats] Public Key Claims in JWT / CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 13:20:56 -0000 --Apple-Mail=_B9F03291-DAA0-4C67-98E6-EC9F4923BD1C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Aware of these and wouldn=E2=80=99t think of doing it any other way, but = I think we need a little glue, like IANA registrations at a minimum. If we want augment this stuff that already exists with things like key = ID and key usage like the Android key store has, then we=E2=80=99ll need = to do more. I don=E2=80=99t have a strong opinion on how far we go yet. Probably the combo of COSE_Key + proof-of-possesion gives us a = CBOR-based CSR, but I=E2=80=99m not quite sure if that covers the use = case(s) unless we think it through.=20 Also, someone might actually want a true PKCS10 for compatibility = reasons. I think including pub keys also begs questions about the attestation = context Giri has brought up. LL > On Nov 19, 2019, at 4:28 PM, Hannes Tschofenig = wrote: >=20 > Hi all,=20 > =20 > Here is some background info to the discussions today in the RATS WG = meeting. > =20 > With RFC 7800 we added the "cnf" claim to the JWT to contain members = used to identify the proof-of-possession key. > It re-uses the work done for JSON Web Key, including key ids, JWK = Thumbprints, symmetric as well as asymmetric keys. > This claim has been registered with IANA at = https://www.iana.org/assignments/jwt/jwt.xhtml = > =20 > Later, after working on CWT we created the corresponding functionality = for = https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-11 = . > It aims to provide functionality equivalent to RFC 7800. The spec = re-uses the "COSE_Key" and "Encrypted_COSE_Key" structures defined in = RFC 8392. > draft-ietf-ace-cwt-proof-of-possession-11 is in the RFC Editor Queue = and the IANA registry value for cnf is already available in = https://www.iana.org/assignments/cwt/cwt.xhtml = > =20 > These specs are implemented and deployed. > =20 > I would be surprised if you cannot reuse this functionality in the EAT = token for offering proof-of-possession functionality. > =20 > Ciao > Hannes > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. = _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_B9F03291-DAA0-4C67-98E6-EC9F4923BD1C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Aware= of these and wouldn=E2=80=99t think of doing it any other way, but I = think we need a little glue, like IANA registrations at a minimum.

If we want augment this = stuff that already exists with things like key ID and key usage like the = Android key store has, then we=E2=80=99ll need to do more. I don=E2=80=99t= have a strong opinion on how far we go yet.

Probably the combo of COSE_Key + = proof-of-possesion gives us a CBOR-based CSR, but I=E2=80=99m not quite = sure if that covers the use case(s) unless we think it = through. 

Also, someone might actually want a true PKCS10 for = compatibility reasons.

I think including pub keys also begs questions about the = attestation context Giri has brought up.

LL






On Nov 19, 2019, at 4:28 PM, Hannes = Tschofenig <Hannes.Tschofenig@arm.com> wrote:

Hi = all, 
 
Here is = some background info to the discussions today in the RATS WG = meeting.
 
With RFC 7800 we added the "cnf" claim to the JWT to contain = members used to identify the proof-of-possession key.
It = re-uses the work done for JSON Web Key, including key ids, JWK = Thumbprints, symmetric as well as asymmetric keys.
This = claim has been registered with IANA at https://www.iana.org/assignments/jwt/jwt.xhtml
 
Later, = after working on CWT we created the corresponding functionality for https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possess= ion-11.
It aims to provide functionality equivalent to RFC 7800. The = spec re-uses the "COSE_Key" and "Encrypted_COSE_Key" structures defined = in RFC 8392.
draft-ietf-ace-cwt-proof-of-possession-11 is in the RFC = Editor Queue and the IANA registry value for cnf is already available = in https://www.iana.org/assignments/cwt/cwt.xhtml
 
These = specs are implemented and deployed.
 
I would be surprised if you cannot = reuse this functionality in the EAT token for offering = proof-of-possession functionality.
 
Ciao
Hannes
 
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you. = _______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_B9F03291-DAA0-4C67-98E6-EC9F4923BD1C-- From nobody Tue Nov 19 05:26:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ADA91208BB for ; Tue, 19 Nov 2019 05:26:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kfxQ91aL4J4o for ; Tue, 19 Nov 2019 05:26:04 -0800 (PST) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F717120887 for ; Tue, 19 Nov 2019 05:26:04 -0800 (PST) Received: from [172.16.134.137] ([101.100.166.3]) by :SMTPAUTH: with ESMTPA id X3VGidRslPKeXX3W6iOZUr; Tue, 19 Nov 2019 06:26:03 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_8D48C109-F8FB-48F7-A318-19FB57AFB4BE" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: Date: Tue, 19 Nov 2019 21:26:02 +0800 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfHf2I8SqRRLEHGQeC2Ifo0i0Yb5E+o67nVSBqbRyDwPQEnslnL0k+okTXTZ+9H342ea4KYFFaSI81r/WO4YtztlTF1IJsst3oCb1dZqiwsyx1tgOQBYR pD4gTE6qSHbvScA0apC6RRM1M8Etm5ZArad+2VvnOm3VWMpEYYv10h9y Archived-At: Subject: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 13:26:05 -0000 --Apple-Mail=_8D48C109-F8FB-48F7-A318-19FB57AFB4BE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Fundamentally, I think there are two ways that an attestation verifier = comes to know that a device / entity is running approved SW and will = behave as desired. TPM based Originates in the PC world where the end user had to be able to choose = the system SW Has a TPM that performs a general measuring function Has an attestation signing key for signing measurements that is kept = secret by the TPM TPM is generic as it can be used for PC=E2=80=99s, routers, IoT devices Authenticated boot is optional Uses a staged boot architecture where each stage must measure (hash) the = following stage Hashes fed into the TPM TPM generates the attestation of the registers holding the hashes Device cost raised by cost of TPM part The verifier must run a parallel set of measurements (hashes) Verifier is complex Authenticated Boot based Origins in mobile phone, TEE and DRM world where the user can NOT choose = the system SW Authenticated boot is required Uses a boot ROM that really is a ROM, probably in silicon (not flash), = that can NOT be changed Boot ROM verifies the SW that is loaded, particular the top privilege = (e.g. kernel) SW A good implementation has anti-rollback to prevent old versions of SW = from being run Has an attestation signing key that is programmed in fuses or possibly = in flash Has a HW block that prevents access to the attestation key unless = authenticated boot succeeds Only top privilege SW can use it Attestations are created in the top-privilege SW Simply signing a nonce proves the device is running approved SW Easy to add other claims in =E2=80=94> EAT Device cost raised by need for secure key provisioning in the factory Verifier is very simple Just needs to verify the signature and nonce Both provide acceptable security for their use cases and are broadly in = use. RATS needs to support both. LL= --Apple-Mail=_8D48C109-F8FB-48F7-A318-19FB57AFB4BE Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Fundamentally, I think there are two ways that an attestation = verifier comes to know that a device / entity is running approved SW and = will behave as desired.

TPM based
  • Originates in the PC world where = the end user had to be able to choose the system SW
  • Has= a TPM that performs a general measuring function
    • Has an attestation signing key for signing measurements that = is kept secret by the TPM
    • TPM is generic as it can be = used for PC=E2=80=99s, routers, IoT devices
  • Authenticated boot is optional
  • Uses a = staged boot architecture where each stage must measure (hash) the = following stage
    • Hashes fed into the = TPM
    • TPM generates the attestation of the registers = holding the hashes
  • Device cost raised by cost of = TPM part
  • The verifier must run a parallel set of = measurements (hashes)
    • Verifier is = complex

Authenticated Boot based
  • Origins in mobile = phone, TEE and DRM world where the user can NOT choose the system = SW
  • Authenticated boot is required
    • Uses a boot ROM that really is a ROM, probably = in silicon (not flash), that can NOT be changed
    • Boot = ROM verifies the SW that is loaded, particular the top privilege (e.g. = kernel) SW
    • A good implementation has anti-rollback to = prevent old versions of SW from being run
  • Has an = attestation signing key that is programmed in fuses or possibly in = flash
    • Has a HW block that prevents = access to the attestation key unless authenticated boot succeeds
    • Only top privilege SW can use it
  • Attestations are created in the top-privilege SW
    • Simply signing a nonce proves the device is = running approved SW
    • Easy to add other claims in = =E2=80=94> EAT
  • Device cost raised by need for = secure key provisioning in the factory
  • Verifier is = very simple
    • Just needs to verify the = signature and nonce

Both provide acceptable security = for their use cases and are broadly in use.

RATS needs to support both.

LL
= --Apple-Mail=_8D48C109-F8FB-48F7-A318-19FB57AFB4BE-- From nobody Tue Nov 19 06:36:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3F7F12096F for ; Tue, 19 Nov 2019 06:36:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fiadDroM60H1 for ; Tue, 19 Nov 2019 06:36:01 -0800 (PST) Received: from mail-ot1-x331.google.com (mail-ot1-x331.google.com [IPv6:2607:f8b0:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3B4D120935 for ; Tue, 19 Nov 2019 06:36:00 -0800 (PST) Received: by mail-ot1-x331.google.com with SMTP id 94so18007949oty.8 for ; Tue, 19 Nov 2019 06:36:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=mvv5+nFe7ELQgvYmvgdRoGEDKGhnmBIsdEEC/vkQGPI=; b=iHsT7bPsKWqvdMF5tI+BGTReo/uAmAytw5aZcSoBLgBGfGkaLwdbVMi/gcs75i13SP BqMT8dfMDpnYF87iWi6wI49l+MMSEkrmV1DTqpX1dfLponAABWIQF67TgBqzXNvfae72 q1CYTJ4IDTDCVgdt0fpWwi8u/Pj1PKjUtuXG3/2I5MgVeEVKZb/GjpdnNUVQYYfR9y30 qg/nCmXr2XJ+DE7X5OZT/idugUybSoL26HbqRt4lbMho9FfAo8zx+YcPZ0DyCHPDR2xz m0Y9zq/AxTyivyplD8aVq1ygOXJ5JK0ElQk19uxl4S5qs1GlZiayeQViggcHZ9YcFQLY wKcw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=mvv5+nFe7ELQgvYmvgdRoGEDKGhnmBIsdEEC/vkQGPI=; b=UijZWSKTlwqapNpwjlAUydOQZ42AiWFtcCMJL/a+0ZnctrejCrFEkBJ0/dEOxYW0gs ewd5FX0G4cC0Bs3vamXjFpuqlN/Y32MWXoFx8Xe4jOBqa2XzvzdSh7j3B2Tx/DdXZWv/ x9d6yYthzq6QEm9kLmizDcXY70bD7Jj1Km4CSubNr49fYAKDSnj47C5VcZgyLchQS7Wk D7k533+JkJQNagPXwSEkqWNEA3AjNftR2+uhGFLsxL5l/mUnk9vHpvvtOtNeGlUcb95C a6EOOyhdjzb+/Y32wHwVm4FWW8Q+MaVqU47+sj+TCOj8FvhyxzcUhStefCzAS5fjzkkw 0bdg== X-Gm-Message-State: APjAAAUmgnj61n2lPZeBM3m5HuZrZIVzjYmLKSecwKdx3cjSuOSiFcWN pJGDQSqiblZs5GCbqJoBkWDPNWRl9dLpFG2bsp0= X-Google-Smtp-Source: APXvYqyjhi40eOBd2jsCXHG8EKFL7pUIFhw8gojLxv5JiD/xPYDR7HtoH3luEeDCqMFmyp/Nx90uWIWnREv36HKgJcM= X-Received: by 2002:a9d:17ca:: with SMTP id j68mr3962235otj.250.1574174159993; Tue, 19 Nov 2019 06:35:59 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Kathleen Moriarty Date: Tue, 19 Nov 2019 09:35:23 -0500 Message-ID: To: Laurence Lundblade Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000009f02890597b3fb0a" Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 14:36:08 -0000 --0000000000009f02890597b3fb0a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, Where does the code signing example fit in that you gave as it's not really an attestation, but could be useful in the format of an EAT/CWT? This questions considers the CoSWID discussion as well as another example you had in your slides later (which was really the same) on just validating the code was signed by the expected private key? Should that be called an attestation or just using the format for signing? You might add claims in above what's in the CoSWID and use the nesting of EAT/subdomains as well as perform remote verification. Thanks, Kathleen On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade wrote: > Fundamentally, I think there are two ways that an attestation verifier > comes to know that a device / entity is running approved SW and will beha= ve > as desired. > > *TPM based* > > - Originates in the PC world where the end user had to be able to > choose the system SW > - Has a TPM that performs a general measuring function > - Has an attestation signing key for signing measurements that is > kept secret by the TPM > - TPM is generic as it can be used for PC=E2=80=99s, routers, IoT d= evices > - Authenticated boot is optional > - Uses a staged boot architecture where each stage must measure (hash) > the following stage > - Hashes fed into the TPM > - TPM generates the attestation of the registers holding the hashes > - Device cost raised by cost of TPM part > - The verifier must run a parallel set of measurements (hashes) > - Verifier is complex > > > *Authenticated Boot based* > > - Origins in mobile phone, TEE and DRM world where the user can NOT > choose the system SW > - Authenticated boot is required > - Uses a boot ROM that really is a ROM, probably in silicon (not > flash), that can NOT be changed > - Boot ROM verifies the SW that is loaded, particular the top > privilege (e.g. kernel) SW > - A good implementation has anti-rollback to prevent old versions > of SW from being run > - Has an attestation signing key that is programmed in fuses or > possibly in flash > - Has a HW block that prevents access to the attestation key unless > authenticated boot succeeds > - Only top privilege SW can use it > - Attestations are created in the top-privilege SW > - Simply signing a nonce proves the device is running approved SW > - Easy to add other claims in =E2=80=94> EAT > - Device cost raised by need for secure key provisioning in the factor= y > - Verifier is very simple > - Just needs to verify the signature and nonce > > > Both provide acceptable security for their use cases and are broadly in > use. > > RATS needs to support both. > > LL > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --0000000000009f02890597b3fb0a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,

Where does the code signin= g example fit in that you gave as it's not really an attestation, but c= ould be useful in the format of an EAT/CWT?=C2=A0 =C2=A0This questions cons= iders the CoSWID discussion as well as another example you had in your slid= es later (which was really the same) on just validating the code was signed= by the expected private key?=C2=A0 Should that be called an attestation or= just using the format for signing?=C2=A0 You might add claims in=C2=A0abov= e=C2=A0what's in the CoSWID and use the nesting of EAT/subdomains as we= ll as perform remote verification.

Thanks,
Kathleen

On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade <lgl@island-resort.com> wrote:<= br>
Fundamentally, I think there are two ways that an= attestation verifier comes to know that a device / entity is running appro= ved SW and will behave as desired.

TPM based
  • Originates in the PC world where the end user had to be able = to choose the system SW
  • Has a TPM that performs a general measuring= function
    • Has an attestation signing key for signing measuremen= ts that is kept secret by the TPM
    • TPM is generic as it can be used = for PC=E2=80=99s, routers, IoT devices
  • Authenticated boot is o= ptional
  • Uses a staged boot architecture where each stage must measu= re (hash) the following stage
    • Hashes fed into the TPM
    • T= PM generates the attestation of the registers holding the hashes
    <= li>Device cost raised by cost of TPM part
  • The verifier must run a p= arallel set of measurements (hashes)
    • Verifier is complex

Authenticated Boot based
  • Origins in mobile phone, TEE and DRM world where the user can NOT = choose the system SW
  • Authenticated boot is required
    • Use= s a boot ROM that really is a ROM, probably in silicon (not flash), that ca= n NOT be changed
    • Boot ROM verifies the SW that is loaded, particula= r the top privilege (e.g. kernel) SW
    • A good implementation has anti= -rollback to prevent old versions of SW from being run
  • Has an = attestation signing key that is programmed in fuses or possibly in flash
    • Has a HW block that prevents access to the attestation key unless= authenticated boot succeeds
    • Only top privilege SW can use it
      • <= /ul>
    • Attestations are created in the top-privilege SW
      • Simply= signing a nonce proves the device is running approved SW
      • Easy to a= dd other claims in =E2=80=94> EAT
    • Device cost raised by nee= d for secure key provisioning in the factory
    • Verifier is very simpl= e
      • Just needs to verify the signature and nonce

Both provide acceptable security for their use case= s and are broadly in use.

RATS needs to support bo= th.

LL
________________________________= _______________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000009f02890597b3fb0a-- From nobody Tue Nov 19 07:25:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C99A6120105 for ; Tue, 19 Nov 2019 07:25:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sOo03NLb2UD1 for ; Tue, 19 Nov 2019 07:25:07 -0800 (PST) Received: from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com [IPv6:2a00:1450:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CFAC1200F4 for ; Tue, 19 Nov 2019 07:25:07 -0800 (PST) Received: by mail-wr1-x42b.google.com with SMTP id b18so22889434wrj.8 for ; Tue, 19 Nov 2019 07:25:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=48FI9PCOSBhdlg3qALRDbe19wHyA98u0cr3pWwgqEIs=; b=DDoup4RW3oN9VfNJ7scn194miTp6eT9EHPBAlCCosEzvm3imljxWXTb27zbfSM1zB3 MLTR15g/C93gRbDMCFckpcgo9YjCYnXzgTZIeYkL1rrbrTJZ6g4QFCVwctHgSe20cNoE WjRHBBOVZi+r3P1VKm2do9fAPCauAJDZh+ACLt/ElxTpSyg7eQx9jjS2I/LrPNiwZhml vopn59rB7sb6ZLRvO7Ln3Ww8jHsFDqJfHY3++o55zvwspmcletnbKmrYrcF7XxvLLBl+ CF5eBj74NxwTDqNV9wHN1HNrgEmkZzEB36SYLXB+agp0N9GhRH8TSVkoAQ6TEkVzPehr eYKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=48FI9PCOSBhdlg3qALRDbe19wHyA98u0cr3pWwgqEIs=; b=YhlLVctJdIks3fhmQlcewN8Gz/iPwNyXrC7JD/fSVLy9anT8EGLt9zAjPAAGKwoVlQ n9Gu+K6X+xJRijCmz2bwgdXVN0uQAzTEobc/DWElwn87PWXhrPkg4xzphwF5zb55Y4ta lDMMm12ko3uJW1+EzEMl3cl6lZ2R/wunEqblYSnT5gr+zBU3fQc0OxtgAMgQRY7Cfox2 akUjwIwK0zviZL2gEebbMKC9au9PEs3ZsaoHL2CxmaZn9J0FrzqxCZ9jf+MZae5poUuK KPZi1d2K14YrU+o6uO8/cEu72XlbmPnlOXu9/ySVodYhlqoKPbbEU+E6KPnZgjwaGowu BYrA== X-Gm-Message-State: APjAAAVIlLq134er2Dy/Y5RiaJuTY9uXGN2vUN4xxBTmDvHjf6aLB3cR rkFdsTTIM2cYDn5CNhP8n6TmnLL3zJY= X-Google-Smtp-Source: APXvYqxQSYf6LFvTh4r8ZHSI8Zmj3d2J8pkaGr4SgER3RqTfo/t/4BBpphXPZ8R3Nrra8XcCADA7QQ== X-Received: by 2002:adf:b1cb:: with SMTP id r11mr1568982wra.246.1574177105105; Tue, 19 Nov 2019 07:25:05 -0800 (PST) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id a206sm3567889wmf.15.2019.11.19.07.25.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Nov 2019 07:25:04 -0800 (PST) To: Laurence Lundblade , rats@ietf.org References: From: Anders Rundgren Message-ID: Date: Tue, 19 Nov 2019 16:25:01 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------F67B58567BC9FCAE97472E71" Content-Language: en-US Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Nov 2019 15:25:12 -0000 This is a multi-part message in MIME format. --------------F67B58567BC9FCAE97472E71 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 2019-11-19 14:26, Laurence Lundblade wrote: > Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired. Yes, it seems that the IETF activity around trusted computing for unknown reasons intends ignoring the attested-session-key-scheme where sub-attestations are based on rolling MACs. FWIW, this is one of the pillars of the Open Banking Wallet concept although it is not mentioned in this writeup: https://github.com/cyberphone/doc/blob/gh-pages/payments/dual-mode-open-banking-api.md#background Thanx, Anders https://github.com/ietf-teep/architecture/issues/52 > > *TPM based* > > * Originates in the PC world where the end user had to be able to choose the system SW > * Has a TPM that performs a general measuring function > o Has an attestation signing key for signing measurements that is kept secret by the TPM > o TPM is generic as it can be used for PC’s, routers, IoT devices > * Authenticated boot is optional > * Uses a staged boot architecture where each stage must measure (hash) the following stage > o Hashes fed into the TPM > o TPM generates the attestation of the registers holding the hashes > * Device cost raised by cost of TPM part > * The verifier must run a parallel set of measurements (hashes) > o Verifier is complex > > > *Authenticated Boot based* > > * Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW > * Authenticated boot is required > o Uses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed > o Boot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW > o A good implementation has anti-rollback to prevent old versions of SW from being run > * Has an attestation signing key that is programmed in fuses or possibly in flash > o Has a HW block that prevents access to the attestation key unless authenticated boot succeeds > o Only top privilege SW can use it > * Attestations are created in the top-privilege SW > o Simply signing a nonce proves the device is running approved SW > o Easy to add other claims in —> EAT > * Device cost raised by need for secure key provisioning in the factory > * Verifier is very simple > o Just needs to verify the signature and nonce > > > Both provide acceptable security for their use cases and are broadly in use. > > RATS needs to support both. > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --------------F67B58567BC9FCAE97472E71 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
On 2019-11-19 14:26, Laurence Lundblade wrote:
Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired.

Yes, it seems that the IETF activity around trusted computing for unknown reasons intends ignoring the attested-session-key-scheme where sub-attestations are based on rolling MACs.
FWIW, this is one of the pillars of the Open Banking Wallet concept although it is not mentioned in this writeup:
https://github.com/cyberphone/doc/blob/gh-pages/payments/dual-mode-open-banking-api.md#background

Thanx,
Anders
https://github.com/ietf-teep/architecture/issues/52


TPM based
  • Originates in the PC world where the end user had to be able to choose the system SW
  • Has a TPM that performs a general measuring function
    • Has an attestation signing key for signing measurements that is kept secret by the TPM
    • TPM is generic as it can be used for PC’s, routers, IoT devices
  • Authenticated boot is optional
  • Uses a staged boot architecture where each stage must measure (hash) the following stage
    • Hashes fed into the TPM
    • TPM generates the attestation of the registers holding the hashes
  • Device cost raised by cost of TPM part
  • The verifier must run a parallel set of measurements (hashes)
    • Verifier is complex

Authenticated Boot based
  • Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW
  • Authenticated boot is required
    • Uses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed
    • Boot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW
    • A good implementation has anti-rollback to prevent old versions of SW from being run
  • Has an attestation signing key that is programmed in fuses or possibly in flash
    • Has a HW block that prevents access to the attestation key unless authenticated boot succeeds
    • Only top privilege SW can use it
  • Attestations are created in the top-privilege SW
    • Simply signing a nonce proves the device is running approved SW
    • Easy to add other claims in —> EAT
  • Device cost raised by need for secure key provisioning in the factory
  • Verifier is very simple
    • Just needs to verify the signature and nonce

Both provide acceptable security for their use cases and are broadly in use.

RATS needs to support both.

LL

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

--------------F67B58567BC9FCAE97472E71-- From nobody Tue Nov 19 17:07:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C882C12010F for ; Tue, 19 Nov 2019 17:07:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fKtWPLeZlxm9 for ; Tue, 19 Nov 2019 17:07:02 -0800 (PST) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C999120144 for ; Tue, 19 Nov 2019 17:07:02 -0800 (PST) Received: from dhcp-9fd9.meeting.ietf.org ([31.133.159.217]) by :SMTPAUTH: with ESMTPA id XESRigM9tPKeXXESTiPNnr; Tue, 19 Nov 2019 18:07:02 -0700 From: Laurence Lundblade Message-Id: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_50F4386F-32D1-49A7-9DFE-7CE59C43E490" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Wed, 20 Nov 2019 09:06:58 +0800 In-Reply-To: Cc: rats@ietf.org To: Kathleen Moriarty References: X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfIYPPFc1UDkPU6qteQqefW0JLj6r7f5w5ZwMkdgvg08MXCrGTmEm12lmbEQDJDIXdsHyCq6HSj7Gq+zwYylYKpBww7QEs8rIFIEZlnJtl7d+GECvD1wy WsBDZPj6/kMtOl1eczZyvLywFDFt41a1+caHKX8uOlvypF1WcrpB6AtzgRhqOYQlNL5mZr3BILE1MM0a1wQJJiI6kbAQ93WFYsBuOj2g26+uWpQTyElsAMwM Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 01:07:06 -0000 --Apple-Mail=_50F4386F-32D1-49A7-9DFE-7CE59C43E490 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Kathleen, Not sure I=E2=80=99m following your thought completely.=20 =46rom what I know of Authenticated Boot, the code signing formats are = usually proprietary and idiosyncratic. The first stages of it are likely = in true ROM (chip metal layer) and can be very architecture and system = specific and would not use CoSWID or EAT.=20 My comments below are about getting a system booted up to state where it = known to behave as desired. Once it is up then signed CoSWIDs in EATs would come into play. They can = be trusted because the attester and system SW known to have booted up = correctly. Knowing who signed some SW listed in a CoSWID is only of = value if you know the system SW did signature checking when it loaded = the SW it listed. For example, everyone knows how Android app signing = works, so listing the signer of an Android app is good useful = information. Hope that makes sense in relation to your comment. LL > On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty = wrote: >=20 > Hi Laurence, >=20 > Where does the code signing example fit in that you gave as it's not = really an attestation, but could be useful in the format of an EAT/CWT? = This questions considers the CoSWID discussion as well as another = example you had in your slides later (which was really the same) on just = validating the code was signed by the expected private key? Should that = be called an attestation or just using the format for signing? You = might add claims in above what's in the CoSWID and use the nesting of = EAT/subdomains as well as perform remote verification. >=20 > Thanks, > Kathleen >=20 > On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade = > wrote: > Fundamentally, I think there are two ways that an attestation verifier = comes to know that a device / entity is running approved SW and will = behave as desired. >=20 > TPM based > Originates in the PC world where the end user had to be able to choose = the system SW > Has a TPM that performs a general measuring function > Has an attestation signing key for signing measurements that is kept = secret by the TPM > TPM is generic as it can be used for PC=E2=80=99s, routers, IoT = devices > Authenticated boot is optional > Uses a staged boot architecture where each stage must measure (hash) = the following stage > Hashes fed into the TPM > TPM generates the attestation of the registers holding the hashes > Device cost raised by cost of TPM part > The verifier must run a parallel set of measurements (hashes) > Verifier is complex >=20 > Authenticated Boot based > Origins in mobile phone, TEE and DRM world where the user can NOT = choose the system SW > Authenticated boot is required > Uses a boot ROM that really is a ROM, probably in silicon (not flash), = that can NOT be changed > Boot ROM verifies the SW that is loaded, particular the top privilege = (e.g. kernel) SW > A good implementation has anti-rollback to prevent old versions of SW = from being run > Has an attestation signing key that is programmed in fuses or possibly = in flash > Has a HW block that prevents access to the attestation key unless = authenticated boot succeeds > Only top privilege SW can use it > Attestations are created in the top-privilege SW > Simply signing a nonce proves the device is running approved SW > Easy to add other claims in =E2=80=94> EAT > Device cost raised by need for secure key provisioning in the factory > Verifier is very simple > Just needs to verify the signature and nonce >=20 > Both provide acceptable security for their use cases and are broadly = in use. >=20 > RATS needs to support both. >=20 > LL > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = >=20 >=20 > --=20 >=20 > Best regards, > Kathleen > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_50F4386F-32D1-49A7-9DFE-7CE59C43E490 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Kathleen,

Not sure = I=E2=80=99m following your thought completely. 

=46rom what I know = of Authenticated Boot, the code signing formats are usually proprietary = and idiosyncratic. The first stages of it are likely in true ROM (chip = metal layer) and can be very architecture and system specific and would = not use CoSWID or EAT. 

My = comments below are about getting a system booted up to state where it = known to behave as desired.

Once it = is up then signed CoSWIDs in EATs would come into play. They can be = trusted because the attester and system SW known to have booted up = correctly. Knowing who signed some SW listed in a CoSWID is only of = value if you know the system SW did signature checking when it loaded = the SW it listed. For example, everyone knows how Android app signing = works, so listing the signer of an Android app is good useful = information.

Hope that makes sense = in relation to your comment.

LL


On Nov = 19, 2019, at 10:35 PM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:

Hi Laurence,

Where does the code signing example fit in that you gave as = it's not really an attestation, but could be useful in the format of an = EAT/CWT?   This questions considers the CoSWID discussion as = well as another example you had in your slides later (which was really = the same) on just validating the code was signed by the expected private = key?  Should that be called an attestation or just using the format = for signing?  You might add claims in above what's in the = CoSWID and use the nesting of EAT/subdomains as well as perform remote = verification.

Thanks,
Kathleen

On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade = <lgl@island-resort.com> wrote:
Fundamentally, I think there are two ways that = an attestation verifier comes to know that a device / entity is running = approved SW and will behave as desired.

TPM based
  • Originates in the PC world = where the end user had to be able to choose the system SW
  • Has a TPM that performs a general measuring function
    • Has an attestation signing key for signing = measurements that is kept secret by the TPM
    • TPM is = generic as it can be used for PC=E2=80=99s, routers, IoT = devices
  • Authenticated boot is optional
  • Uses a staged boot architecture where each stage must measure = (hash) the following stage
    • Hashes fed = into the TPM
    • TPM generates the attestation of the = registers holding the hashes
  • Device cost raised = by cost of TPM part
  • The verifier must run a parallel = set of measurements (hashes)
    • Verifier = is complex

Authenticated Boot based
  • Origins in mobile phone, TEE = and DRM world where the user can NOT choose the system SW
  • Authenticated boot is required
    • Uses a boot ROM that really is a ROM, probably in silicon = (not flash), that can NOT be changed
    • Boot ROM = verifies the SW that is loaded, particular the top privilege (e.g. = kernel) SW
    • A good implementation has anti-rollback to = prevent old versions of SW from being run
  • Has an = attestation signing key that is programmed in fuses or possibly in = flash
    • Has a HW block that prevents = access to the attestation key unless authenticated boot succeeds
    • Only top privilege SW can use it
  • Attestations are created in the top-privilege SW
    • Simply signing a nonce proves the device is = running approved SW
    • Easy to add other claims in = =E2=80=94> EAT
  • Device cost raised by need for = secure key provisioning in the factory
  • Verifier is = very simple
    • Just needs to verify the = signature and nonce

Both provide acceptable security = for their use cases and are broadly in use.

RATS needs to support both.

LL
_______________________________________________ RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
_______________________________________________
RATS = mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_50F4386F-32D1-49A7-9DFE-7CE59C43E490-- From nobody Tue Nov 19 18:00:15 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7443612012C for ; Tue, 19 Nov 2019 18:00:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GnszLwEBBUXM for ; Tue, 19 Nov 2019 18:00:11 -0800 (PST) Received: from mail-ot1-x32a.google.com (mail-ot1-x32a.google.com [IPv6:2607:f8b0:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23D2012002F for ; Tue, 19 Nov 2019 18:00:11 -0800 (PST) Received: by mail-ot1-x32a.google.com with SMTP id c14so12831511oth.2 for ; Tue, 19 Nov 2019 18:00:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=emAfh9t8E0UlQNsW9M5mj+R1g53tYV6muMvR4T2SULc=; b=baCWmoobqMFe6UnBGrnSbaM89taPsUXJzP9YUSJE9p13NotkjFy87Q7SDnSyP0UgDv xyjrDSUqVosBxL5X3bwWFPHXY2TrnaC5PBsCMuE4x7EI9QKwdn4J1cddexMbOBO9jE/D I+dhvTCBaXIfGs962jJsBED7Gui9aa79ObZplSQMO6cMCESZI0Ff8u8LSXnpWAFxhGN7 UD0owfImJT1LCCpu/tjNpUp8PLT58Jrj9gAqkeCjFIEJO0p6Y+zkmxYs8e6W834mX5T5 NtoyI2ZJ/ZAQmjAmtqJif50ASL6c0T//ZbVd3BUEJ4JXFN+TAdW/qnXJkxQKTXkJWXeR AZDQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=emAfh9t8E0UlQNsW9M5mj+R1g53tYV6muMvR4T2SULc=; b=qYcSCM5CPzQJ3JRvoFIHcBt4KhFNiSbnoiYWZeoFALGAH7oiJPqk4VJ5dmXw5debdQ aZSVhe5GmgJKDWufPpFynhY/0Sj2ZJq5TEYcCik9VIXBxX25xcD7S7O1NJTPgtqz7nrX 5RiNZyhdf4wkHNp/AkuNWDUXcLatFO82KRwSIe74Q/o/OnwTdL1TX+1twXbMeu6IPFF6 cRbrzQ9VgDupgJfrSBvU2GjrQF11pxF21PuZY+r1K/JhgEGEFMam71AOWUg5I263JgGl oj3gSd2Wbt04WMoV4HDgQYXMy11YDfENys7qAWtrM3Rga6DSlzZM9V7IpPydTdDQHBCx rgoA== X-Gm-Message-State: APjAAAVrepZBRhxKgefxeKhQjvWWYLCaxQreUsTBLgywg6gtAcmkcqr7 T91L7eIiGgyA3fv3t3KK5Voji0/w/7+BYrjqvhs= X-Google-Smtp-Source: APXvYqwYS7cKUALTMWeg5/FhPwGoxeDDWN47p9vOOwbGwvQ7Cdcaa++uxkI/TCtSPhLJVqdRICpT0FitQldQRiKsGtU= X-Received: by 2002:a9d:17ca:: with SMTP id j68mr48637otj.250.1574215210473; Tue, 19 Nov 2019 18:00:10 -0800 (PST) MIME-Version: 1.0 References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> In-Reply-To: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> From: Kathleen Moriarty Date: Tue, 19 Nov 2019 20:59:33 -0500 Message-ID: To: Laurence Lundblade Cc: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000006b9e260597bd8a8f" Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 02:00:13 -0000 --0000000000006b9e260597bd8a8f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, I read your message as there only being 2 types of attestation as opposed to what you stated in your follow on email, which better maps to the restricted set in your first message. Thanks, Kathleen On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade wrote: > Hi Kathleen, > > Not sure I=E2=80=99m following your thought completely. > > From what I know of Authenticated Boot, the code signing formats are > usually proprietary and idiosyncratic. The first stages of it are likely = in > true ROM (chip metal layer) and can be very architecture and system > specific and would not use CoSWID or EAT. > > My comments below are about getting a system booted up to state where it > known to behave as desired. > > Once it is up then signed CoSWIDs in EATs would come into play. They can > be trusted because the attester and system SW known to have booted up > correctly. Knowing who signed some SW listed in a CoSWID is only of value > if you know the system SW did signature checking when it loaded the SW it > listed. For example, everyone knows how Android app signing works, so > listing the signer of an Android app is good useful information. > > Hope that makes sense in relation to your comment. > > LL > > > On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty < > kathleen.moriarty.ietf@gmail.com> wrote: > > Hi Laurence, > > Where does the code signing example fit in that you gave as it's not > really an attestation, but could be useful in the format of an EAT/CWT? > This questions considers the CoSWID discussion as well as another exampl= e > you had in your slides later (which was really the same) on just validati= ng > the code was signed by the expected private key? Should that be called a= n > attestation or just using the format for signing? You might add claims > in above what's in the CoSWID and use the nesting of EAT/subdomains as we= ll > as perform remote verification. > > Thanks, > Kathleen > > On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade > wrote: > >> Fundamentally, I think there are two ways that an attestation verifier >> comes to know that a device / entity is running approved SW and will beh= ave >> as desired. >> >> *TPM based* >> >> - Originates in the PC world where the end user had to be able to >> choose the system SW >> - Has a TPM that performs a general measuring function >> - Has an attestation signing key for signing measurements that is >> kept secret by the TPM >> - TPM is generic as it can be used for PC=E2=80=99s, routers, IoT = devices >> - Authenticated boot is optional >> - Uses a staged boot architecture where each stage must measure >> (hash) the following stage >> - Hashes fed into the TPM >> - TPM generates the attestation of the registers holding the hashe= s >> - Device cost raised by cost of TPM part >> - The verifier must run a parallel set of measurements (hashes) >> - Verifier is complex >> >> >> *Authenticated Boot based* >> >> - Origins in mobile phone, TEE and DRM world where the user can NOT >> choose the system SW >> - Authenticated boot is required >> - Uses a boot ROM that really is a ROM, probably in silicon (not >> flash), that can NOT be changed >> - Boot ROM verifies the SW that is loaded, particular the top >> privilege (e.g. kernel) SW >> - A good implementation has anti-rollback to prevent old versions >> of SW from being run >> - Has an attestation signing key that is programmed in fuses or >> possibly in flash >> - Has a HW block that prevents access to the attestation key >> unless authenticated boot succeeds >> - Only top privilege SW can use it >> - Attestations are created in the top-privilege SW >> - Simply signing a nonce proves the device is running approved SW >> - Easy to add other claims in =E2=80=94> EAT >> - Device cost raised by need for secure key provisioning in the >> factory >> - Verifier is very simple >> - Just needs to verify the signature and nonce >> >> >> Both provide acceptable security for their use cases and are broadly in >> use. >> >> RATS needs to support both. >> >> LL >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > > > -- > > Best regards, > Kathleen > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > --=20 Best regards, Kathleen --0000000000006b9e260597bd8a8f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,

I read your message as the= re only being=C2=A02 types of attestation as opposed to what you stated in = your follow on email, which=C2=A0better maps to the restricted set in your = first message.

Thanks,
Kathleen

On = Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade <lgl@island-resort.com> wrote:
Hi Kathleen,

Not sure I=E2=80=99m following your t= hought completely.=C2=A0

From what I know of = Authenticated Boot, the code signing formats are usually proprietary and id= iosyncratic. The first stages of it are likely in true ROM (chip metal laye= r) and can be very architecture and system specific and would not use CoSWI= D or EAT.=C2=A0

My comments below are about gettin= g a system booted up to state where it known to behave as desired.

Once it is up then signed CoSWIDs in EATs would come into = play. They can be trusted because the attester and system SW known to have = booted up correctly. Knowing who signed some SW listed in a CoSWID is only = of value if you know the system SW did signature checking when it loaded th= e SW it listed. For example, everyone knows how Android app signing works, = so listing the signer of an Android app is good useful information.

Hope that makes sense in relation to your comment.
<= div>
LL


On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty <kathleen.moriarty.iet= f@gmail.com> wrote:

Hi Laurence,
=
Where does the code signing example fit in that you gave as = it's not really an attestation, but could be useful in the format of an= EAT/CWT?=C2=A0 =C2=A0This questions considers the CoSWID discussion as wel= l as another example you had in your slides later (which was really the sam= e) on just validating the code was signed by the expected private key?=C2= =A0 Should that be called an attestation or just using the format for signi= ng?=C2=A0 You might add claims in=C2=A0above=C2=A0what's in the CoSWID = and use the nesting of EAT/subdomains as well as perform remote verificatio= n.

Thanks,
Kathleen

On Tue, Nov 19,= 2019 at 8:26 AM Laurence Lundblade <lgl@island-resort.com> wrote:
Fundamentally, I think th= ere are two ways that an attestation verifier comes to know that a device /= entity is running approved SW and will behave as desired.

TPM based
  • Originates in the PC world where the = end user had to be able to choose the system SW
  • Has a TPM that perf= orms a general measuring function
    • Has an attestation signing ke= y for signing measurements that is kept secret by the TPM
    • TPM is ge= neric as it can be used for PC=E2=80=99s, routers, IoT devices
    Authenticated boot is optional
  • Uses a staged boot architecture whe= re each stage must measure (hash) the following stage
    • Hashes fe= d into the TPM
    • TPM generates the attestation of the registers holdi= ng the hashes
  • Device cost raised by cost of TPM part
  • T= he verifier must run a parallel set of measurements (hashes)
    • Ve= rifier is complex

Authenticated = Boot based
  • Origins in mobile phone, TEE and DRM world= where the user can NOT choose the system SW
  • Authenticated boot is = required
    • Uses a boot ROM that really is a ROM, probably in sili= con (not flash), that can NOT be changed
    • Boot ROM verifies the SW t= hat is loaded, particular the top privilege (e.g. kernel) SW
    • A good= implementation has anti-rollback to prevent old versions of SW from being = run
  • Has an attestation signing key that is programmed in fuses= or possibly in flash
    • Has a HW block that prevents access to th= e attestation key unless authenticated boot succeeds
    • Only top privi= lege SW can use it
  • Attestations are created in the top-privile= ge SW
    • Simply signing a nonce proves the device is running appro= ved SW
    • Easy to add other claims in =E2=80=94> EAT
  • D= evice cost raised by need for secure key provisioning in the factory
    • Verifier is very simple
    • Just needs to verify the signature an= d nonce

Both provide acceptable sec= urity for their use cases and are broadly in use.

= RATS needs to support both.

LL
________= _______________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
_______________________________________________
RATS mailing list
RATS@ietf.org
https://= www.ietf.org/mailman/listinfo/rats



--

Best regards,<= /div>
Kathleen
--0000000000006b9e260597bd8a8f-- From nobody Wed Nov 20 02:19:25 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDECF1208EE for ; Wed, 20 Nov 2019 02:19:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=jTOuhT5r; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=7a7LpjgO Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CQHrTAISbgCE for ; Wed, 20 Nov 2019 02:19:21 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140088.outbound.protection.outlook.com [40.107.14.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB2891208DE for ; Wed, 20 Nov 2019 02:19:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W7A8EoA+aX8QwOdzardvGSY5T1BqIG4woTO0RRD+2w0=; b=jTOuhT5rxejRMHG6DOKdYNhTU5pM3p+hdKEyNY3WkZpv/QjWLUrFbtdyncDhiIl43WTM0USdEyKurKKTxulAvaC2VEfulAKQW+jVFUkwBFE37mas0cTrAgwzjMuRqsMUE8HRxqPg0biVgjpdaz541XTrf0HJYULVaSYWxep9684= Received: from VE1PR08CA0031.eurprd08.prod.outlook.com (2603:10a6:803:104::44) by AM4PR08MB2804.eurprd08.prod.outlook.com (2603:10a6:205:d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.27; Wed, 20 Nov 2019 10:19:18 +0000 Received: from AM5EUR03FT064.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e08::209) by VE1PR08CA0031.outlook.office365.com (2603:10a6:803:104::44) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Wed, 20 Nov 2019 10:19:18 +0000 Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com; Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT064.mail.protection.outlook.com (10.152.17.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.23 via Frontend Transport; Wed, 20 Nov 2019 10:19:18 +0000 Received: ("Tessian outbound dbe0f0961e8c:v33"); Wed, 20 Nov 2019 10:19:17 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 9aad8da01cfe0d2a X-CR-MTA-TID: 64aa7808 Received: from 7ea2a37c8a98.1 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.8.54]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 4CC3AD02-7097-4100-92AB-136C7B22293A.1; Wed, 20 Nov 2019 10:19:12 +0000 Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-am5eur03lp2054.outbound.protection.outlook.com [104.47.8.54]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 7ea2a37c8a98.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384); Wed, 20 Nov 2019 10:19:12 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mg5Ux51Zn9H3zdnMH0tJha5yLEF2+viaJxu+JhlSfRxiMvRLuorEwoVsJo1LIoxyCDfBQIDpQR1IA9VRRaqj50kU6EAiF/xgMBKalogfMNydf1456E0DazJU2MqWvqkz6bmMOTV5Pw0kyJyeX7+6qF4Lev2EbCwzUDIoNTgNJkERt3OGu2z9Y1BDr1WcM58N5fnnluFzeDbB+No2cLabHqfFFzMTyQnYBw1ocsuoNYHtzuHFkMRN1RMGjbpKQOYDMBpSWgM764nXe9Ap3ggLkkjYrbTwIjd+mr4P5xWQyr/UjIyeHtaSSyHmvthsUB63Nr+oYg6fUpeE/cPqHezU0Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jN8KR44iUu9pPCknbmkVyleyWybfEx9nCcTqqqFzLdU=; b=nRSolgAVPNrGnta0af8ATBI5UNuHZUXTa938VGTukw8ZkoEo+vgU1EuRUDxvnhtq5g/qIZCErTIQMYZYzrcQPAKqOLkoCNqcZMhYuX8Qlfrug2M9NIwJdHLGN6Jr3m+4kmrF38NghgT1NCDaWbYhebs/ttSkv3BUIs6zdvmqC13EfSELEi7+oNYIVpOJfjYd3se5XCQYssqTzTVqc29KmpyG5cWMp5kRLHtsKJbGQzawkfS/1cpjgzpRdAlQnIVqQ9BUqBHi1WO7ZJ9GK3Y+CK+ead2BSQcJysfcxEfVLz1b5/z5B372X8EgGX0IoPntuhzGXvnrIwchIcYoXDd0PQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jN8KR44iUu9pPCknbmkVyleyWybfEx9nCcTqqqFzLdU=; b=7a7LpjgO2aON75wC0WkL0WNTvT0bS4b1c/2cxV81/e7ZnksQzl7idWVayMui1jltlFA6wlIgOJ4Ts1XXSGkX0Bo7kM9k+2IDBSxwfaSQSV/jDYZfEmBq8VgBPHekANSr92jPwtW/t0OG6IoPfRdOqoBJfeIROf39kFD+T9iWBTE= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (20.179.18.151) by AM6PR08MB3655.eurprd08.prod.outlook.com (20.177.113.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2451.30; Wed, 20 Nov 2019 10:19:11 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::8855:3670:214e:4791]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::8855:3670:214e:4791%6]) with mapi id 15.20.2451.031; Wed, 20 Nov 2019 10:19:10 +0000 From: Thomas Fossati To: "rats@ietf.org" Thread-Topic: New Version Notification for draft-tschofenig-rats-psa-token-04.txt Thread-Index: AQHVn4rPht5Co1ASTUKvF3m7KeafVKeT2M8A Date: Wed, 20 Nov 2019 10:19:10 +0000 Message-ID: <4F9BCD33-0AE2-4B49-A4AD-0583D4151423@arm.com> References: <157424465772.30503.3541189170417759929.idtracker@ietfa.amsl.com> In-Reply-To: <157424465772.30503.3541189170417759929.idtracker@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1e.0.191013 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; x-originating-ip: [217.140.106.50] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: e62d25b5-3346-432e-c155-08d76da31a10 X-MS-TrafficTypeDiagnostic: AM6PR08MB3655:|AM4PR08MB2804: X-MS-Exchange-PUrlCount: 6 X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:7219; x-forefront-prvs: 02272225C5 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(396003)(376002)(346002)(366004)(39860400002)(136003)(189003)(199004)(6506007)(305945005)(25786009)(8676002)(6306002)(11346002)(1730700003)(14454004)(66946007)(66476007)(66446008)(64756008)(15650500001)(66556008)(8936002)(6436002)(316002)(58126008)(966005)(413944005)(2501003)(5660300002)(478600001)(71190400001)(71200400001)(6916009)(76116006)(6486002)(6512007)(5640700003)(91956017)(476003)(2473003)(6116002)(3846002)(26005)(102836004)(2906002)(76176011)(86362001)(7736002)(186003)(66574012)(229853002)(4001150100001)(99286004)(2616005)(2351001)(256004)(14444005)(66066001)(36756003)(486006)(446003)(81156014)(81166006)(33656002)(53546011); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB3655; H:AM6PR08MB4231.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: ln3DAoCnciRkzkq1i2Mkq2O91bX1gAVFkVAaIht53E8QAnGnabh5Ho1h6YaE1KYyR0s7QnrH+hnzYZB3W33eqvfh5yOtGuH9EWj5K/wBh4CMeAkZBcHQZY5B4mqUxVLhdtL49EXGF/GVgEFOR7J1FxQS9ZQ/2tdI41pN6QS6E9BXd1GcgbTTkis5nV+8AJv8B/IhhGu+trzndHmrSPLyLkNjH2hPjD0x9Q2YflWpAFcJcku+CDYHKGeeIFuzKs5kbKwWzAfijP4TDr9Vx8506qlajVPD6hTf17fGPjoIutr1vzCYEkM0SaiDhPEVuD9H3AZ2c5hd6pnLtoYAFdRZt0rlsAmhwEA05DoZ/UYO4804Q4JOpI4J6rS754akV9ti7q/2VqhECvBRnUZl9UkrttwgOTNHsa7n9gc2YbRLOoiwLxqkkkvFKJicpZ/qslSde8TwelrHI0YTADKW7YNUZaVVcxfgkgzpzbLBW2AlBuA= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <2427FFD64986C7478ECD3FFA0C2498C5@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3655 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT064.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(376002)(39860400002)(396003)(346002)(1110001)(339900001)(199004)(189003)(40434004)(33656002)(76130400001)(486006)(25786009)(2473003)(36756003)(6306002)(6486002)(6512007)(229853002)(47776003)(23676004)(476003)(76176011)(126002)(5640700003)(15650500001)(58126008)(2486003)(36906005)(2501003)(336012)(2906002)(6116002)(316002)(2351001)(3846002)(66066001)(8936002)(436003)(66574012)(5024004)(14444005)(11346002)(186003)(53546011)(6506007)(14454004)(99286004)(446003)(305945005)(6916009)(4001150100001)(22756006)(413944005)(478600001)(26826003)(5660300002)(8676002)(356004)(81156014)(1730700003)(966005)(102836004)(105606002)(50466002)(70586007)(70206006)(26005)(86362001)(2616005)(7736002)(81166006); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR08MB2804; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: d85d94d1-c98c-43cc-e2f5-08d76da315d7 X-Forefront-PRVS: 02272225C5 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: mUL8wwnU1DFIBDQw4w/0S9sgD3qbfLI58qN9iLq6CigJsxNA+GmO1xM04xSvqh1/es5DPYUDu1RkMGUKuqRgAEcwWbVeJZGIXNxkcNtDkTaaIAbIQYgDV1ZYSVPD61allF4XDQNxnfpC2xgQnRKW2BmyQXJu96Dbjhsa/FAiuz9IMpEKtGQv94AtPmMNHdRQkpLrL9Pph9ILntD0oOanB6rn+Kvad8aM7xCjpgvmiuvkA79O5o3DjoJT9Q2FmVGfZT/1JPMn7RX4jbKbqAwR2ZGCjwxoff5GzrRPh4ZcHPl49HTqdRoxiyyrwtwnQk87DinwETOf0TfunNbbqV4qffXzmhamB2Q12tY29YuVr6POrqvyF6SqWM27VPPXjcIzBO0eCPDUNms1MY1WdbbOtMdi1kMAQu8XpdZYHF+ivXSyPMUM9Fvr/KNeWGtBMoIFj8lqw/kDsc2KHqCKWaxbm9XP9h/RuyEewcYiNS6hrJw= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Nov 2019 10:19:18.0056 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e62d25b5-3346-432e-c155-08d76da31a10 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR08MB2804 Archived-At: Subject: [Rats] FW: New Version Notification for draft-tschofenig-rats-psa-token-04.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 10:19:24 -0000 RGVhciBhbGwsDQoNClRoaXMgLTA0IGlzIGEgY2xvbmUgb2YgdGhlIDEuMC4xIHJlbGVhc2Ugb2Yg dGhlIFBTQSBBdHRlc3RhdGlvbiBBUEkuDQoNClRoaXMgaXMgbm93IGEgc3RhYmxlIHNwZWMgdGhh dCdzIGltcGxlbWVudGVkIGluIFRGLU0gWzFdLg0KDQpUaGUgaWRlYSBpcyB0byBnZXQgdGhpcyBw dWJsaXNoZWQgdGhyb3VnaCB0aGUgaW5kZXBlbmRlbnQgc3VibWlzc2lvbnMNCnN0cmVhbS4NCg0K Rm9yIGFueSBxdWVzdGlvbiwgZmVlbCBmcmVlIHRvIGNvbnRhY3QgdXMuDQoNCkEgc2hvcnQgc3Vt bWFyeSBvZiB0aGUgY2hhbmdlcyBmcm9tIHRoZSBwcmV2aW91cyByZWxlYXNlOg0KDQogKiBSZWNv bW1lbmQgdHlwZSBieXRlIDB4MDEgZm9yIGFybV9wc2FfVUVJRDsNCiAqIFJlbW92ZSBlcnJvbmVv dXMgZ3VpZGFuY2UgcmVnYXJkaW5nIEVBVCdzIG9yaWdpbmF0aW9uIGNsYWltIC0NCiAgIGl0IHNo b3VsZCBub3QgYmUgdXNlZCB0byBmaW5kIGEgdmVyaWZpY2F0aW9uIHNlcnZpY2U7DQogKiBSZW1v dmUgbm9ybWF0aXZlIHJlZmVyZW5jZSB0byBFQVQgc28gdGhhdCB0aGUgUFNBIGRvYyBjYW4gbW92 ZQ0KICAgZm9yd2FyZCBvbiBpdHMgb3duLg0KDQpDaGVlcnMhDQoNClsxXSBodHRwczovL2dpdC50 cnVzdGVkZmlybXdhcmUub3JnL3RydXN0ZWQtZmlybXdhcmUtbS5naXQvDQoNCk9uIDIwLzExLzIw MTksIDEwOjExLCAiaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIiA8aW50ZXJuZXQtZHJhZnRzQGll dGYub3JnPiB3cm90ZToNCj4NCj4gQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXRzY2hvZmVu aWctcmF0cy1wc2EtdG9rZW4tMDQudHh0DQo+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0 ZWQgYnkgVGhvbWFzIEZvc3NhdGkgYW5kIHBvc3RlZCB0byB0aGUNCj4gSUVURiByZXBvc2l0b3J5 Lg0KPg0KPiBOYW1lOiAgICAgICAgIGRyYWZ0LXRzY2hvZmVuaWctcmF0cy1wc2EtdG9rZW4NCj4g UmV2aXNpb246ICAgICAwNA0KPiBUaXRsZTogICAgICAgICAgICAgICAgQXJtJ3MgUGxhdGZvcm0g U2VjdXJpdHkgQXJjaGl0ZWN0dXJlIChQU0EpIEF0dGVzdGF0aW9uIFRva2VuDQo+IERvY3VtZW50 IGRhdGU6ICAgICAgICAyMDE5LTExLTIwDQo+IEdyb3VwOiAgICAgICAgICAgICAgICBJbmRpdmlk dWFsIFN1Ym1pc3Npb24NCj4gUGFnZXM6ICAgICAgICAgICAgICAgIDE3DQo+IFVSTDogICAgICAg ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJhZnQtdHNjaG9mZW5p Zy1yYXRzLXBzYS10b2tlbi0wNC50eHQNCj4gU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXRzY2hvZmVuaWctcmF0cy1wc2EtdG9rZW4vDQo+IEh0 bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtdHNjaG9mZW5p Zy1yYXRzLXBzYS10b2tlbi0wNA0KPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tl ci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC10c2Nob2ZlbmlnLXJhdHMtcHNhLXRva2VuDQo+IERp ZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtdHNj aG9mZW5pZy1yYXRzLXBzYS10b2tlbi0wNA0KPg0KPiBBYnN0cmFjdDoNCj4gICAgVGhlIGluc2Vj dXJpdHkgb2YgSW9UIHN5c3RlbXMgaXMgYSB3aWRlbHkga25vd24gYW5kIGRpc2N1c3NlZA0KPiAg ICBwcm9ibGVtLiAgVGhlIEFybSBQbGF0Zm9ybSBTZWN1cml0eSBBcmNoaXRlY3R1cmUgKFBTQSkg aXMgYmVpbmcNCj4gICAgZGV2ZWxvcGVkIHRvIGFkZHJlc3MgdGhpcyBjaGFsbGVuZ2UgYnkgbWFr aW5nIGl0IGVhc2llciB0byBidWlsZA0KPiAgICBzZWN1cmUgSW9UIHN5c3RlbXMuDQo+DQo+ICAg IFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIHRva2VuIGZvcm1hdCBhbmQgY2xhaW1zIHVzZWQgaW4g dGhlDQo+ICAgIGF0dGVzdGF0aW9uIEFQSSBvZiB0aGUgQXJtIFBsYXRmb3JtIFNlY3VyaXR5IEFy Y2hpdGVjdHVyZSAoUFNBKS4NCj4NCj4gICAgQXQgaXRzIGNvcmUsIHRoZSBDV1QgKENPU0UgV2Vi IFRva2VuKSBmb3JtYXQgaXMgdXNlZCBhbmQgcG9wdWxhdGVkDQo+ICAgIHdpdGggYSBzZXQgb2Yg Y2xhaW1zLCBpbiBhIHdheSBzaW1pbGFyIHRvIEVBVCAoRW50aXR5IEF0dGVzdGF0aW9uDQo+ICAg IFRva2VuKS4gIFRoaXMgc3BlY2lmaWNhdGlvbiBkZXNjcmliZXMgd2hhdCBjbGFpbXMgYXJlIHVz ZWQgYnkgUFNBDQo+ICAgIGNvbXBsaWFudCBzeXN0ZW1zIGFuZCB3aGF0IGhhcyBiZWVuIGltcGxl bWVudGVkIHdpdGhpbiBBcm0gVHJ1c3RlZA0KPiAgICBGaXJtd2FyZS1NLg0KPg0KPg0KPg0KPg0K PiBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0 aGUgdGltZSBvZiBzdWJtaXNzaW9uDQo+IHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBk aWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQo+DQo+IFRoZSBJRVRGIFNlY3Jl dGFyaWF0DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFu ZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmls ZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlm eSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRz IHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9y IGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Wed Nov 20 13:11:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0496D1201C6 for ; Wed, 20 Nov 2019 13:11:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F8E6oGs3rpFU for ; Wed, 20 Nov 2019 13:11:53 -0800 (PST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03C3712018D for ; Wed, 20 Nov 2019 13:11:52 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga002.jf.intel.com ([10.7.209.21]) by orsmga105.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Nov 2019 13:11:51 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,223,1571727600"; d="scan'208,217";a="218810544" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by orsmga002.jf.intel.com with ESMTP; 20 Nov 2019 13:11:51 -0800 Received: from orsmsx161.amr.corp.intel.com (10.22.240.84) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 20 Nov 2019 13:11:51 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX161.amr.corp.intel.com ([169.254.4.96]) with mapi id 14.03.0439.000; Wed, 20 Nov 2019 13:11:51 -0800 From: "Smith, Ned" To: Kathleen Moriarty , Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] Two types of secure attestation Thread-Index: AQHVntzp4M6ZJzqVJUiVsZ6c2vuAXaeTFYmAgACwdgCAAA6xgIAAu9YA Date: Wed, 20 Nov 2019 21:11:50 +0000 Message-ID: <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.158] Content-Type: multipart/alternative; boundary="_000_34EB67FDE76A413287C4C89EA70C9365intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 21:11:56 -0000 --_000_34EB67FDE76A413287C4C89EA70C9365intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlcmUgYXJlIHNvbWUgbWlzcmVwcmVzZW50YXRpb25zIGluIHRoZSBhbmFseXNpcyBiZWxvdyAo SeKAmWxsIGNvbW1lbnQgaW5saW5lIGJlbG93IHVzaW5nIFtubXNdIGRlbGltaXRlcnMpLiBJbiBn ZW5lcmFsLCBJIGRvbuKAmXQgc2VlIGF0dGVzdGF0aW9uIHR5cGVzIGFzIGJlaW5nIGJpbmFyeS4g RGF2ZSBUaGFsZXLigJlzIGNoYXJ0IC8gdHJ1dGggdGFibGUgaW4gYW5vdGhlciB0aHJlYWQgc2Vl bXMgdG8gc3VnZ2VzdCB0aGlzIGFzIHdlbGwgZ2l2ZW4gdGhlcmUgYXJlIG1hbnkgZGlmZmVyZW50 IHR5cGVzIG9mIGF0dGVzdGluZyBlbnZpcm9ubWVudHMgKGFrYSByb290cyBvZiB0cnVzdCkuDQoN Ckl0IG1pZ2h0IG1ha2Ugc2Vuc2UgdG8gaGF2ZSBkaXNjdXNzaW9uIGFyb3VuZCBjbGFpbXMgdGhh dCBhcHBseSB0byBhdHRlc3RpbmcgZW52aXJvbm1lbnRzIHZzLiBjbGFpbXMgdGhhdCBhcHBseSB0 byBhdHRlc3RlZCBlbnZpcm9ubWVudHM/IFRoZSBpbXBvcnRhbnQgc2VjdXJpdHkgcHJvcGVydHkg b2YgYXR0ZXN0aW5nIGVudmlyb25tZW50cyBpcyB0aGV5IG9mdGVuIGFyZSByZWdhcmRlZCBhcyDi gJx0cnVzdGVk4oCdIG1lYW5pbmcgdGhlcmUgaXNu4oCZdCBzb21lIG90aGVyIGF0dGVzdGluZyBl bnZpcm9ubWVudCB0aGF0IHZvdWNoZXMgZm9yIGl0Lg0KDQpBc3NvY2lhdGluZyBjbGFpbXMgdG8g YXR0ZXN0aW5nIGVudmlyb25tZW50cyBvZnRlbiB0YWtlcyBhIGRpZmZlcmVudCBmcm9tIGF0dGVz dGF0aW9uIChhcyByZXByZXNlbnRlZCBieSB0aGUgcm9sZXMgLyBhcmNoIG1vZGVscyk7IG5hbWVs eSB1c2luZyBjZXJ0aWZpY2F0ZXMgaXNzdWVkIGJ5IHByb2R1Y3QgdmVuZG9ycyAod2hhdCB0aGUg YXJjaCBoYXMgY2FsbGVkIOKAmGFzc2VydGVyc+KAmSkuIENlcnRpZmljYXRlcyB0eXBpY2FsbHkg Y29udGFpbiBpZGVudGl0eSBjbGFpbXMgYnV0IGNvdWxkIGNvbnRhaW4gYWRkaXRpb25hbCBjbGFp bXMuIFZlbmRvcnMgY291bGQgYWxzbyBzaWduIGFzc2VydCBjbGFpbXMgYnkgc2lnbmluZyBhIGRv Y3VtZW50IHRoYXQgYXNzZXJ0cyB0aGVtLiBUaGVzZSBjb3VsZCBiZSBtYW5pZmVzdHMsIGF0dHJp YnV0ZSBjZXJ0cywgaWRlbnRpdHkgY2VydHMgd2l0aCBjbGFpbXMgZXh0ZW5zaW9ucyBhbmQgcG9z c2libHkgZXZlbiBKV1QvQ1dUICh0b2tlbnMpLiBJIGhhdmVu4oCZdCBzZWVuIGEgdXNlIGNhc2Ug Zm9yIHZlbmRvciBpc3N1ZWQgdG9rZW5zIGhvd2V2ZXIuIFBvc3NpYmx5IFBLSSB3aWxsIHRyYW5z aXRpb24gZnJvbSBYLjUwOSBiYXNlZCB0byBUb2tlbiBiYXNlZCBhdCBzb21lIHBvaW50IGluIHRo ZSBmdXR1cmUsIGJ1dCBJIGV4cGVjdCBpdCB3aWxsIHRha2UgYSB3aGlsZS4gVmVuZG9ycyBpc3N1 aW5nIChzaWduaW5nKSBtYW5pZmVzdHMgc2VlbXMgcmVhc29uYWJsZSBzaW5jZSBtYW55IGFscmVh ZHkgY3JlYXRlIG1hbmlmZXN0cyBmb3Igc29mdHdhcmUgZGlzdHJpYnV0aW9uIGFsc28gY2FsbGVk IHBhY2thZ2VzIC8gYnVuZGxlcy4gVGhlIHdvcmtmbG93IGZvciDigJhyZWZlcmVuY2UgdmFsdWVz 4oCZIHdvdWxkIG5vdCBiZSBtdWNoIGRpZmZlcmVudCB0aGFuIGZvciBjcmVhdGluZyBhIFNXIHVw ZGF0ZSBtYW5pZmVzdC4NCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBi ZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwu Y29tPg0KRGF0ZTogVHVlc2RheSwgTm92ZW1iZXIgMTksIDIwMTkgYXQgNjowMCBQTQ0KVG86IExh dXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KQ2M6ICJyYXRzQGlldGYu b3JnIiA8cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0c10gVHdvIHR5cGVzIG9mIHNl Y3VyZSBhdHRlc3RhdGlvbg0KDQpIaSBMYXVyZW5jZSwNCg0KSSByZWFkIHlvdXIgbWVzc2FnZSBh cyB0aGVyZSBvbmx5IGJlaW5nIDIgdHlwZXMgb2YgYXR0ZXN0YXRpb24gYXMgb3Bwb3NlZCB0byB3 aGF0IHlvdSBzdGF0ZWQgaW4geW91ciBmb2xsb3cgb24gZW1haWwsIHdoaWNoIGJldHRlciBtYXBz IHRvIHRoZSByZXN0cmljdGVkIHNldCBpbiB5b3VyIGZpcnN0IG1lc3NhZ2UuDQoNClRoYW5rcywN CkthdGhsZWVuDQoNCk9uIFR1ZSwgTm92IDE5LCAyMDE5IGF0IDg6MDcgUE0gTGF1cmVuY2UgTHVu ZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNv bT4+IHdyb3RlOg0KSGkgS2F0aGxlZW4sDQoNCk5vdCBzdXJlIEnigJltIGZvbGxvd2luZyB5b3Vy IHRob3VnaHQgY29tcGxldGVseS4NCg0KRnJvbSB3aGF0IEkga25vdyBvZiBBdXRoZW50aWNhdGVk IEJvb3QsIHRoZSBjb2RlIHNpZ25pbmcgZm9ybWF0cyBhcmUgdXN1YWxseSBwcm9wcmlldGFyeSBh bmQgaWRpb3N5bmNyYXRpYy4gVGhlIGZpcnN0IHN0YWdlcyBvZiBpdCBhcmUgbGlrZWx5IGluIHRy dWUgUk9NIChjaGlwIG1ldGFsIGxheWVyKSBhbmQgY2FuIGJlIHZlcnkgYXJjaGl0ZWN0dXJlIGFu ZCBzeXN0ZW0gc3BlY2lmaWMgYW5kIHdvdWxkIG5vdCB1c2UgQ29TV0lEIG9yIEVBVC4NCg0KTXkg Y29tbWVudHMgYmVsb3cgYXJlIGFib3V0IGdldHRpbmcgYSBzeXN0ZW0gYm9vdGVkIHVwIHRvIHN0 YXRlIHdoZXJlIGl0IGtub3duIHRvIGJlaGF2ZSBhcyBkZXNpcmVkLg0KDQpPbmNlIGl0IGlzIHVw IHRoZW4gc2lnbmVkIENvU1dJRHMgaW4gRUFUcyB3b3VsZCBjb21lIGludG8gcGxheS4gVGhleSBj YW4gYmUgdHJ1c3RlZCBiZWNhdXNlIHRoZSBhdHRlc3RlciBhbmQgc3lzdGVtIFNXIGtub3duIHRv IGhhdmUgYm9vdGVkIHVwIGNvcnJlY3RseS4gS25vd2luZyB3aG8gc2lnbmVkIHNvbWUgU1cgbGlz dGVkIGluIGEgQ29TV0lEIGlzIG9ubHkgb2YgdmFsdWUgaWYgeW91IGtub3cgdGhlIHN5c3RlbSBT VyBkaWQgc2lnbmF0dXJlIGNoZWNraW5nIHdoZW4gaXQgbG9hZGVkIHRoZSBTVyBpdCBsaXN0ZWQu IEZvciBleGFtcGxlLCBldmVyeW9uZSBrbm93cyBob3cgQW5kcm9pZCBhcHAgc2lnbmluZyB3b3Jr cywgc28gbGlzdGluZyB0aGUgc2lnbmVyIG9mIGFuIEFuZHJvaWQgYXBwIGlzIGdvb2QgdXNlZnVs IGluZm9ybWF0aW9uLg0KDQpIb3BlIHRoYXQgbWFrZXMgc2Vuc2UgaW4gcmVsYXRpb24gdG8geW91 ciBjb21tZW50Lg0KDQpMTA0KDQoNCg0KT24gTm92IDE5LCAyMDE5LCBhdCAxMDozNSBQTSwgS2F0 aGxlZW4gTW9yaWFydHkgPGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPG1haWx0bzpr YXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIaSBMYXVyZW5jZSwN Cg0KV2hlcmUgZG9lcyB0aGUgY29kZSBzaWduaW5nIGV4YW1wbGUgZml0IGluIHRoYXQgeW91IGdh dmUgYXMgaXQncyBub3QgcmVhbGx5IGFuIGF0dGVzdGF0aW9uLCBidXQgY291bGQgYmUgdXNlZnVs IGluIHRoZSBmb3JtYXQgb2YgYW4gRUFUL0NXVD8gICBUaGlzIHF1ZXN0aW9ucyBjb25zaWRlcnMg dGhlIENvU1dJRCBkaXNjdXNzaW9uIGFzIHdlbGwgYXMgYW5vdGhlciBleGFtcGxlIHlvdSBoYWQg aW4geW91ciBzbGlkZXMgbGF0ZXIgKHdoaWNoIHdhcyByZWFsbHkgdGhlIHNhbWUpIG9uIGp1c3Qg dmFsaWRhdGluZyB0aGUgY29kZSB3YXMgc2lnbmVkIGJ5IHRoZSBleHBlY3RlZCBwcml2YXRlIGtl eT8gIFNob3VsZCB0aGF0IGJlIGNhbGxlZCBhbiBhdHRlc3RhdGlvbiBvciBqdXN0IHVzaW5nIHRo ZSBmb3JtYXQgZm9yIHNpZ25pbmc/ICBZb3UgbWlnaHQgYWRkIGNsYWltcyBpbiBhYm92ZSB3aGF0 J3MgaW4gdGhlIENvU1dJRCBhbmQgdXNlIHRoZSBuZXN0aW5nIG9mIEVBVC9zdWJkb21haW5zIGFz IHdlbGwgYXMgcGVyZm9ybSByZW1vdGUgdmVyaWZpY2F0aW9uLg0KDQpUaGFua3MsDQpLYXRobGVl bg0KDQpPbiBUdWUsIE5vdiAxOSwgMjAxOSBhdCA4OjI2IEFNIExhdXJlbmNlIEx1bmRibGFkZSA8 bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC4uY29tPj4gd3Jv dGU6DQpGdW5kYW1lbnRhbGx5LCBJIHRoaW5rIHRoZXJlIGFyZSB0d28gd2F5cyB0aGF0IGFuIGF0 dGVzdGF0aW9uIHZlcmlmaWVyIGNvbWVzIHRvIGtub3cgdGhhdCBhIGRldmljZSAvIGVudGl0eSBp cyBydW5uaW5nIGFwcHJvdmVkIFNXIGFuZCB3aWxsIGJlaGF2ZSBhcyBkZXNpcmVkLg0KDQpUUE0g YmFzZWQNCsK3ICAgICAgICAgT3JpZ2luYXRlcyBpbiB0aGUgUEMgd29ybGQgd2hlcmUgdGhlIGVu ZCB1c2VyIGhhZCB0byBiZSBhYmxlIHRvIGNob29zZSB0aGUgc3lzdGVtIFNXDQpbbm1zXSBOb3Qg c3VyZSB3aGF0IHJlbGV2YW5jZSB0byBhdHRlc3RhdGlvbiBzaG91bGQgYmUgYXNjcmliZWQgYmVj YXVzZSBvZiBob3cgVFBNcyBvcmlnaW5hdGVkLg0KwrcgICAgICAgICBIYXMgYSBUUE0gdGhhdCBw ZXJmb3JtcyBhIGdlbmVyYWwgbWVhc3VyaW5nIGZ1bmN0aW9uDQoNCiAgICAgICAgKiAgIEhhcyBh biBhdHRlc3RhdGlvbiBzaWduaW5nIGtleSBmb3Igc2lnbmluZyBtZWFzdXJlbWVudHMgdGhhdCBp cyBrZXB0IHNlY3JldCBieSB0aGUgVFBNDQpvICAgIFRQTSBpcyBnZW5lcmljIGFzIGl0IGNhbiBi ZSB1c2VkIGZvciBQQ+KAmXMsIHJvdXRlcnMsIElvVCBkZXZpY2VzDQpbbm1zXSBQcm9maWxlcyBm b3IgaG93IHRvIGFkYXB0IFRQTSBmb3IgdXNlIGluIHNwZWNpZmljIHBsYXRmb3JtIGNsYXNzZXMg aXMgZ2VuZXJhbGx5IHJlcXVpcmVkLg0KwrcgICAgICAgICBBdXRoZW50aWNhdGVkIGJvb3QgaXMg b3B0aW9uYWwNCltubXNdIEkgdGhpbmsgdGhlIGluZHVzdHJ5IGFsc28gdXNlcyB0aGUgdGVybSDi gJhzZWN1cmUgYm9vdOKAmS4gVFBNIHN1cHBvcnRzIGF0dGVzdGF0aW9uIChvZiB0aGUgYm9vdCBz ZXF1ZW5jZSkgd2hpbGUgYSBzZWN1cmUgYm9vdCBhcHByb2FjaCBkb2VzbuKAmXQgaW1wbHkgYXR0 ZXN0YXRpb24gaXMgbmVlZGVkL3VzZWQuDQpbbm1zXSBCb290IGJlaGF2aW9yIGlzIG1vcmUgYSBw cm9wZXJ0eSBvZiB0aGUgUm9vdCBvZiBUcnVzdCBmb3IgTWVhc3VyZW1lbnQgKFJUTSkgdGhhbiBh IFRQTS4gVGhlcmUgYXJlIG1hbnkgdHlwZXMgb2YgUlRNIHRlY2hub2xvZ3kgbW9zdCBzaW1wbHkg aXQgaXMgYSBib290IFJPTS4NCsK3ICAgICAgICAgVXNlcyBhIHN0YWdlZCBib290IGFyY2hpdGVj dHVyZSB3aGVyZSBlYWNoIHN0YWdlIG11c3QgbWVhc3VyZSAoaGFzaCkgdGhlIGZvbGxvd2luZyBz dGFnZQ0KW25tc10gQm9vdCBhcmNoaXRlY3R1cmUgaXMgZGV0ZXJtaW5lZCBieSB0aGUgdHlwZSBv ZiBkZXZpY2UgLyBwbGF0Zm9ybSBub3QgdGhlIFRQTS4gU3RhZ2VkIGJvb3Qgc2VxdWVuY2VzIGFy ZSBmYWlybHkgY29tbW9uIGFjcm9zcyB0aGUgaW5kdXN0cnkuIEhlbmNlIHRoZSB0ZXJtIOKAmGJv b3RzdHJhcOKAmS4NCm8gICAgSGFzaGVzIGZlZCBpbnRvIHRoZSBUUE0NCm8gICAgVFBNIGdlbmVy YXRlcyB0aGUgYXR0ZXN0YXRpb24gb2YgdGhlIHJlZ2lzdGVycyBob2xkaW5nIHRoZSBoYXNoZXMN CsK3ICAgICAgICAgRGV2aWNlIGNvc3QgcmFpc2VkIGJ5IGNvc3Qgb2YgVFBNIHBhcnQNCltubXNd IE5vdCBzdXJlIGhvdyB0aGlzIGlzIHJlbGV2YW50IHRvIFJBVFMNCsK3ICAgICAgICAgVGhlIHZl cmlmaWVyIG11c3QgcnVuIGEgcGFyYWxsZWwgc2V0IG9mIG1lYXN1cmVtZW50cyAoaGFzaGVzKQ0K byAgICBWZXJpZmllciBpcyBjb21wbGV4DQpbbm1zXSBhcyBjb21wYXJlZCB0byB3aGF0Pw0KDQpB dXRoZW50aWNhdGVkIEJvb3QgYmFzZWQNCsK3ICAgICAgICAgT3JpZ2lucyBpbiBtb2JpbGUgcGhv bmUsIFRFRSBhbmQgRFJNIHdvcmxkIHdoZXJlIHRoZSB1c2VyIGNhbiBOT1QgY2hvb3NlIHRoZSBz eXN0ZW0gU1cNCsK3ICAgICAgICAgQXV0aGVudGljYXRlZCBib290IGlzIHJlcXVpcmVkDQpvICAg IFVzZXMgYSBib290IFJPTSB0aGF0IHJlYWxseSBpcyBhIFJPTSwgcHJvYmFibHkgaW4gc2lsaWNv biAobm90IGZsYXNoKSwgdGhhdCBjYW4gTk9UIGJlIGNoYW5nZWQNCltubXNdIFRoaXMgaXMgdHJ1 ZSBmb3IgcGxhdGZvcm1zIHVzaW5nIGEgVFBNIGFzIHdlbGwuDQpvICAgIEJvb3QgUk9NIHZlcmlm aWVzIHRoZSBTVyB0aGF0IGlzIGxvYWRlZCwgcGFydGljdWxhciB0aGUgdG9wIHByaXZpbGVnZSAo ZS5nLiBrZXJuZWwpIFNXDQpbbm1zXSBWZXJpZmljYXRpb24gaW1wbGllcyB0aGUgYWJpbGl0eSB0 byBkZXRlcm1pbmUgYm9vdCBjb2RlIGludGVncml0eS4gVGhpcyBpcyBjb21tb24gdG8gcGxhdGZv cm1zIHRoYXQgdXNlIGEgVFBNLg0KbyAgICBBIGdvb2QgaW1wbGVtZW50YXRpb24gaGFzIGFudGkt cm9sbGJhY2sgdG8gcHJldmVudCBvbGQgdmVyc2lvbnMgb2YgU1cgZnJvbSBiZWluZyBydW4NCsK3 ICAgICAgICAgSGFzIGFuIGF0dGVzdGF0aW9uIHNpZ25pbmcga2V5IHRoYXQgaXMgcHJvZ3JhbW1l ZCBpbiBmdXNlcyBvciBwb3NzaWJseSBpbiBmbGFzaA0KW25tc10gVGhpcyBpcyBjb21tb25seSB0 cnVlIGZvciBUUE0gYmFzZWQgYXR0ZXN0YXRpb24gaW1wbGVtZW50YXRpb25zLg0KbyAgICBIYXMg YSBIVyBibG9jayB0aGF0IHByZXZlbnRzIGFjY2VzcyB0byB0aGUgYXR0ZXN0YXRpb24ga2V5IHVu bGVzcyBhdXRoZW50aWNhdGVkIGJvb3Qgc3VjY2VlZHMNCltubXNdIFRoaXMgaXMgYWxzbyB0cnVl IGZvciBzb2x1dGlvbnMgdGhhdCB3aXNoIHRvIGltcGxlbWVudCBzZWN1cmUgYm9vdCB1c2luZyBh IFRQTS4NCm8gICAgT25seSB0b3AgcHJpdmlsZWdlIFNXIGNhbiB1c2UgaXQNCltubXNdIFRQTSBh dHRlc3RhdGlvbiBrZXlzIGhhdmUgcmVzdHJpY3Rpb25zIG9uIHVzZSBhcyB3ZWxsLg0KwrcgICAg ICAgICBBdHRlc3RhdGlvbnMgYXJlIGNyZWF0ZWQgaW4gdGhlIHRvcC1wcml2aWxlZ2UgU1cNCm8g ICAgU2ltcGx5IHNpZ25pbmcgYSBub25jZSBwcm92ZXMgdGhlIGRldmljZSBpcyBydW5uaW5nIGFw cHJvdmVkIFNXDQpbbm1zXSBUaGUgc2VjdXJpdHkgcHJvcGVydGllcyBvZiB0aGUgc2lnbmluZyBr ZXkgKGF0dGVzdGF0aW9uIGtleSkgYXJlIGEgZnVuY3Rpb24gb2YgdGhlIGNsYWltcyB0aGF0IHRo ZSBtYW51ZmFjdHVyZXJzIG1ha2UgYWJvdXQgdGhlIGVudmlyb25tZW50IHRoYXQgcHJvdGVjdHMg dGhlIGtleS4gVGhpcyBpcyB0cnVlIGZvciBUUE0gYXMgd2VsbCBhcyBhbnkgb3RoZXIgcm9vdCBv ZiB0cnVzdCAvIGF0dGVzdGluZyBlbnZpcm9ubWVudC4NCm8gICAgRWFzeSB0byBhZGQgb3RoZXIg Y2xhaW1zIGluIOKAlD4gRUFUDQpbbm1zXSByZWxhdGl2ZSB0byB3aGF0Pw0KwrcgICAgICAgICBE ZXZpY2UgY29zdCByYWlzZWQgYnkgbmVlZCBmb3Igc2VjdXJlIGtleSBwcm92aXNpb25pbmcgaW4g dGhlIGZhY3RvcnkNCsK3ICAgICAgICAgVmVyaWZpZXIgaXMgdmVyeSBzaW1wbGUNCm8gICAgSnVz dCBuZWVkcyB0byB2ZXJpZnkgdGhlIHNpZ25hdHVyZSBhbmQgbm9uY2UNCltubXNdIFRoZSB2ZXJp ZmllciBpcyBhbHNvIGludGVncmF0ZWQgaW50byB0aGUgYm9vdCBjb2RlLiBUaGVzZSB2ZXJpZmll cnMgbmVlZCB0byBiZSBwcm92aXNpb25lZCB3aXRoIGJvb3Qgc3RhdGUgcG9saWNpZXMgYW5kIHNv IGZvcnRoLiBTZWN1cmUgYm9vdCBpcyBhbiBleGFtcGxlIG9mIHRoZSBjb21iaW5pbmcgb2YgQXR0 ZXN0ZXIgYW5kIFZlcmlmaWVyIHJvbGVzLg0KDQpCb3RoIHByb3ZpZGUgYWNjZXB0YWJsZSBzZWN1 cml0eSBmb3IgdGhlaXIgdXNlIGNhc2VzIGFuZCBhcmUgYnJvYWRseSBpbiB1c2UuDQoNClJBVFMg bmVlZHMgdG8gc3VwcG9ydCBib3RoLg0KW25tc10gSW4gd2hhdCB3YXlzIGRvZXMgUkFUUyBub3Qg c3VwcG9ydCBib3RoPw0KDQpMTA0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRT QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQoN Cg0KLS0NCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpSQVRTIG1haWxpbmcgbGlzdA0KUkFUU0BpZXRmLm9y ZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vcmF0cw0KDQoNCg0KLS0NCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCg== --_000_34EB67FDE76A413287C4C89EA70C9365intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <44AE2FD3E922B241BC3DDF29A6F46ED0@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21z by1saXN0LWlkOjY1NjAzNTAyMzsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTkyOTUwMDIxMjt9 DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5n ZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3Qg bDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MjEzMjA4NTkwMTsN Cgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTMwODM3OTEyMjt9DQpAbGlzdCBsMTpsZXZlbDENCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDE6 bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7 fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2 ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K b2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+ PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0i cHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5UaGVyZSBhcmUgc29tZSBtaXNyZXByZXNlbnRhdGlvbnMgaW4gdGhlIGFuYWx5c2lzIGJlbG93 IChJ4oCZbGwgY29tbWVudCBpbmxpbmUgYmVsb3cgdXNpbmcgW25tc10gZGVsaW1pdGVycykuIElu IGdlbmVyYWwsIEkgZG9u4oCZdCBzZWUgYXR0ZXN0YXRpb24gdHlwZXMgYXMgYmVpbmcgYmluYXJ5 LiBEYXZlIFRoYWxlcuKAmXMgY2hhcnQgLyB0cnV0aCB0YWJsZSBpbiBhbm90aGVyIHRocmVhZCBz ZWVtcyB0byBzdWdnZXN0DQogdGhpcyBhcyB3ZWxsIGdpdmVuIHRoZXJlIGFyZSBtYW55IGRpZmZl cmVudCB0eXBlcyBvZiBhdHRlc3RpbmcgZW52aXJvbm1lbnRzIChha2Egcm9vdHMgb2YgdHJ1c3Qp Lg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkl0IG1pZ2h0IG1ha2Ugc2Vuc2UgdG8gaGF2ZSBk aXNjdXNzaW9uIGFyb3VuZCBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3RpbmcgZW52aXJvbm1l bnRzIHZzLiBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3RlZCBlbnZpcm9ubWVudHM/IFRoZSBp bXBvcnRhbnQgc2VjdXJpdHkgcHJvcGVydHkgb2YgYXR0ZXN0aW5nIGVudmlyb25tZW50cyBpcyB0 aGV5IG9mdGVuIGFyZSByZWdhcmRlZCBhcyDigJx0cnVzdGVk4oCdDQogbWVhbmluZyB0aGVyZSBp c27igJl0IHNvbWUgb3RoZXIgYXR0ZXN0aW5nIGVudmlyb25tZW50IHRoYXQgdm91Y2hlcyBmb3Ig aXQuIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Bc3NvY2lhdGluZyBjbGFpbXMgdG8gYXR0ZXN0 aW5nIGVudmlyb25tZW50cyBvZnRlbiB0YWtlcyBhIGRpZmZlcmVudCBmcm9tIGF0dGVzdGF0aW9u IChhcyByZXByZXNlbnRlZCBieSB0aGUgcm9sZXMgLyBhcmNoIG1vZGVscyk7IG5hbWVseSB1c2lu ZyBjZXJ0aWZpY2F0ZXMgaXNzdWVkIGJ5IHByb2R1Y3QgdmVuZG9ycyAod2hhdCB0aGUgYXJjaCBo YXMgY2FsbGVkIOKAmGFzc2VydGVyc+KAmSkuIENlcnRpZmljYXRlcw0KIHR5cGljYWxseSBjb250 YWluIGlkZW50aXR5IGNsYWltcyBidXQgY291bGQgY29udGFpbiBhZGRpdGlvbmFsIGNsYWltcy4g VmVuZG9ycyBjb3VsZCBhbHNvIHNpZ24gYXNzZXJ0IGNsYWltcyBieSBzaWduaW5nIGEgZG9jdW1l bnQgdGhhdCBhc3NlcnRzIHRoZW0uIFRoZXNlIGNvdWxkIGJlIG1hbmlmZXN0cywgYXR0cmlidXRl IGNlcnRzLCBpZGVudGl0eSBjZXJ0cyB3aXRoIGNsYWltcyBleHRlbnNpb25zIGFuZCBwb3NzaWJs eSBldmVuIEpXVC9DV1QNCiAodG9rZW5zKS4gSSBoYXZlbuKAmXQgc2VlbiBhIHVzZSBjYXNlIGZv ciB2ZW5kb3IgaXNzdWVkIHRva2VucyBob3dldmVyLiBQb3NzaWJseSBQS0kgd2lsbCB0cmFuc2l0 aW9uIGZyb20gWC41MDkgYmFzZWQgdG8gVG9rZW4gYmFzZWQgYXQgc29tZSBwb2ludCBpbiB0aGUg ZnV0dXJlLCBidXQgSSBleHBlY3QgaXQgd2lsbCB0YWtlIGEgd2hpbGUuIFZlbmRvcnMgaXNzdWlu ZyAoc2lnbmluZykgbWFuaWZlc3RzIHNlZW1zIHJlYXNvbmFibGUgc2luY2UgbWFueQ0KIGFscmVh ZHkgY3JlYXRlIG1hbmlmZXN0cyBmb3Igc29mdHdhcmUgZGlzdHJpYnV0aW9uIGFsc28gY2FsbGVk IHBhY2thZ2VzIC8gYnVuZGxlcy4gVGhlIHdvcmtmbG93IGZvciDigJhyZWZlcmVuY2UgdmFsdWVz 4oCZIHdvdWxkIG5vdCBiZSBtdWNoIGRpZmZlcmVudCB0aGFuIGZvciBjcmVhdGluZyBhIFNXIHVw ZGF0ZSBtYW5pZmVzdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3Jn Jmd0OyBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkgJmx0O2thdGhsZWVuLm1vcmlhcnR5 LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBOb3ZlbWJlciAx OSwgMjAxOSBhdCA2OjAwIFBNPGJyPg0KPGI+VG86IDwvYj5MYXVyZW5jZSBMdW5kYmxhZGUgJmx0 O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPiZxdW90O3JhdHNAaWV0 Zi5vcmcmcXVvdDsgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJl OiBbUmF0c10gVHdvIHR5cGVzIG9mIHNlY3VyZSBhdHRlc3RhdGlvbjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IaSBMYXVyZW5jZSwgPG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgcmVhZCB5b3VyIG1lc3NhZ2UgYXMg dGhlcmUgb25seSBiZWluZyZuYnNwOzIgdHlwZXMgb2YgYXR0ZXN0YXRpb24gYXMgb3Bwb3NlZCB0 byB3aGF0IHlvdSBzdGF0ZWQgaW4geW91ciBmb2xsb3cgb24gZW1haWwsIHdoaWNoJm5ic3A7YmV0 dGVyIG1hcHMgdG8gdGhlIHJlc3RyaWN0ZWQgc2V0IGluIHlvdXIgZmlyc3QgbWVzc2FnZS48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5UaGFua3MsPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj5PbiBUdWUsIE5vdiAxOSwgMjAxOSBhdCA4OjA3IFBNIExhdXJlbmNlIEx1 bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlz bGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxi bG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEu MHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJp Z2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkhpIEthdGhsZWVuLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+Tm90IHN1cmUgSeKAmW0gZm9sbG93aW5nIHlvdXIgdGhvdWdodCBjb21wbGV0ZWx5LiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5G cm9tIHdoYXQgSSBrbm93IG9mIEF1dGhlbnRpY2F0ZWQgQm9vdCwgdGhlIGNvZGUgc2lnbmluZyBm b3JtYXRzIGFyZSB1c3VhbGx5IHByb3ByaWV0YXJ5IGFuZCBpZGlvc3luY3JhdGljLiBUaGUgZmly c3Qgc3RhZ2VzIG9mIGl0IGFyZSBsaWtlbHkgaW4gdHJ1ZSBST00gKGNoaXAgbWV0YWwgbGF5ZXIp IGFuZCBjYW4gYmUgdmVyeSBhcmNoaXRlY3R1cmUgYW5kIHN5c3RlbQ0KIHNwZWNpZmljIGFuZCB3 b3VsZCBub3QgdXNlIENvU1dJRCBvciBFQVQuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TXkgY29tbWVudHMgYmVsb3cgYXJlIGFib3V0IGdldHRp bmcgYSBzeXN0ZW0gYm9vdGVkIHVwIHRvIHN0YXRlIHdoZXJlIGl0IGtub3duIHRvIGJlaGF2ZSBh cyBkZXNpcmVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i Pk9uY2UgaXQgaXMgdXAgdGhlbiBzaWduZWQgQ29TV0lEcyBpbiBFQVRzIHdvdWxkIGNvbWUgaW50 byBwbGF5LiBUaGV5IGNhbiBiZSB0cnVzdGVkIGJlY2F1c2UgdGhlIGF0dGVzdGVyIGFuZCBzeXN0 ZW0gU1cga25vd24gdG8gaGF2ZSBib290ZWQgdXAgY29ycmVjdGx5LiBLbm93aW5nIHdobyBzaWdu ZWQgc29tZSBTVyBsaXN0ZWQgaW4gYSBDb1NXSUQgaXMgb25seSBvZg0KIHZhbHVlIGlmIHlvdSBr bm93IHRoZSBzeXN0ZW0gU1cgZGlkIHNpZ25hdHVyZSBjaGVja2luZyB3aGVuIGl0IGxvYWRlZCB0 aGUgU1cgaXQgbGlzdGVkLiBGb3IgZXhhbXBsZSwgZXZlcnlvbmUga25vd3MgaG93IEFuZHJvaWQg YXBwIHNpZ25pbmcgd29ya3MsIHNvIGxpc3RpbmcgdGhlIHNpZ25lciBvZiBhbiBBbmRyb2lkIGFw cCBpcyBnb29kIHVzZWZ1bCBpbmZvcm1hdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5Ib3BlIHRoYXQgbWFrZXMgc2Vuc2UgaW4gcmVsYXRpb24gdG8g eW91ciBjb21tZW50LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+T24gTm92IDE5LCAyMDE5LCBhdCAxMDozNSBQTSwgS2F0 aGxlZW4gTW9yaWFydHkgJmx0OzxhIGhyZWY9Im1haWx0bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRm QGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwu Y29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PkhpIExhdXJlbmNlLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+V2hl cmUgZG9lcyB0aGUgY29kZSBzaWduaW5nIGV4YW1wbGUgZml0IGluIHRoYXQgeW91IGdhdmUgYXMg aXQncyBub3QgcmVhbGx5IGFuIGF0dGVzdGF0aW9uLCBidXQgY291bGQgYmUgdXNlZnVsIGluIHRo ZSBmb3JtYXQgb2YgYW4gRUFUL0NXVD8mbmJzcDsgJm5ic3A7VGhpcyBxdWVzdGlvbnMgY29uc2lk ZXJzIHRoZSBDb1NXSUQgZGlzY3Vzc2lvbiBhcyB3ZWxsIGFzIGFub3RoZXIgZXhhbXBsZQ0KIHlv dSBoYWQgaW4geW91ciBzbGlkZXMgbGF0ZXIgKHdoaWNoIHdhcyByZWFsbHkgdGhlIHNhbWUpIG9u IGp1c3QgdmFsaWRhdGluZyB0aGUgY29kZSB3YXMgc2lnbmVkIGJ5IHRoZSBleHBlY3RlZCBwcml2 YXRlIGtleT8mbmJzcDsgU2hvdWxkIHRoYXQgYmUgY2FsbGVkIGFuIGF0dGVzdGF0aW9uIG9yIGp1 c3QgdXNpbmcgdGhlIGZvcm1hdCBmb3Igc2lnbmluZz8mbmJzcDsgWW91IG1pZ2h0IGFkZCBjbGFp bXMgaW4mbmJzcDthYm92ZSZuYnNwO3doYXQncyBpbiB0aGUgQ29TV0lEIGFuZA0KIHVzZSB0aGUg bmVzdGluZyBvZiBFQVQvc3ViZG9tYWlucyBhcyB3ZWxsIGFzIHBlcmZvcm0gcmVtb3RlIHZlcmlm aWNhdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5U aGFua3MsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiBUdWUsIE5vdiAxOSwgMjAxOSBhdCA4OjI2IEFN IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0 Li5jb20iIHRhcmdldD0iX2JsYW5rIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0OyB3cm90 ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBw dDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+RnVuZGFtZW50YWxseSwgSSB0aGlu ayB0aGVyZSBhcmUgdHdvIHdheXMgdGhhdCBhbiBhdHRlc3RhdGlvbiB2ZXJpZmllciBjb21lcyB0 byBrbm93IHRoYXQgYSBkZXZpY2UgLyBlbnRpdHkgaXMgcnVubmluZyBhcHByb3ZlZCBTVyBhbmQg d2lsbCBiZWhhdmUgYXMgZGVzaXJlZC4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48Yj5UUE0gYmFzZWQ8L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWlu O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1z by1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPk9yaWdpbmF0ZXMgaW4gdGhlIFBD IHdvcmxkIHdoZXJlIHRoZSBlbmQgdXNlciBoYWQgdG8gYmUgYWJsZSB0byBjaG9vc2UgdGhlIHN5 c3RlbSBTVzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5bbm1zXSBOb3Qg c3VyZSB3aGF0IHJlbGV2YW5jZSB0byBhdHRlc3RhdGlvbiBzaG91bGQgYmUgYXNjcmliZWQgYmVj YXVzZSBvZiBob3cgVFBNcyBvcmlnaW5hdGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDps MCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25v cmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5IYXMgYSBUUE0gdGhhdCBwZXJmb3JtcyBhIGdlbmVy YWwgbWVhc3VyaW5nIGZ1bmN0aW9uDQo8bzpwPjwvbzpwPjwvcD4NCjx1bCB0eXBlPSJkaXNjIj4N Cjx1bCB0eXBlPSJjaXJjbGUiPg0KPHVsIHR5cGU9InNxdWFyZSI+DQo8bGkgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1yaWdodDouNWluO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21zby1saXN0OmwwIGxldmVsMyBsZm8xIj4NCkhhcyBh biBhdHRlc3RhdGlvbiBzaWduaW5nIGtleSBmb3Igc2lnbmluZyBtZWFzdXJlbWVudHMgdGhhdCBp cyBrZXB0IHNlY3JldCBieSB0aGUgVFBNPG86cD48L286cD48L2xpPjwvdWw+DQo8L3VsPg0KPC91 bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDot LjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3 LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPlRQTSBpcyBnZW5lcmljIGFzIGl0IGNhbiBiZSB1 c2VkIGZvciBQQ+KAmXMsIHJvdXRlcnMsIElvVCBkZXZpY2VzPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPltubXNdIFByb2ZpbGVzIGZvciBob3cgdG8gYWRhcHQgVFBNIGZv ciB1c2UgaW4gc3BlY2lmaWMgcGxhdGZvcm0gY2xhc3NlcyBpcyBnZW5lcmFsbHkgcmVxdWlyZWQu PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47 dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBw b3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJv bCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBw dCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkF1 dGhlbnRpY2F0ZWQgYm9vdCBpcyBvcHRpb25hbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj5bbm1zXSBJIHRoaW5rIHRoZSBpbmR1c3RyeSBhbHNvIHVzZXMgdGhlIHRlcm0g 4oCYc2VjdXJlIGJvb3TigJkuIFRQTSBzdXBwb3J0cyBhdHRlc3RhdGlvbiAob2YgdGhlIGJvb3Qg c2VxdWVuY2UpIHdoaWxlIGEgc2VjdXJlIGJvb3QgYXBwcm9hY2ggZG9lc27igJl0IGltcGx5IGF0 dGVzdGF0aW9uIGlzIG5lZWRlZC91c2VkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj5bbm1zXSBCb290IGJlaGF2aW9yIGlzIG1vcmUgYSBwcm9wZXJ0eSBvZiB0aGUgUm9v dCBvZiBUcnVzdCBmb3IgTWVhc3VyZW1lbnQgKFJUTSkgdGhhbiBhIFRQTS4gVGhlcmUgYXJlIG1h bnkgdHlwZXMgb2YgUlRNIHRlY2hub2xvZ3kgbW9zdCBzaW1wbHkgaXQgaXMgYSBib290IFJPTS48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0 ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBv cnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9s Ij48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0 ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+VXNl cyBhIHN0YWdlZCBib290IGFyY2hpdGVjdHVyZSB3aGVyZSBlYWNoIHN0YWdlIG11c3QgbWVhc3Vy ZSAoaGFzaCkgdGhlIGZvbGxvd2luZyBzdGFnZQ0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPltubXNdIEJvb3QgYXJjaGl0ZWN0dXJlIGlzIGRldGVybWluZWQgYnkgdGhl IHR5cGUgb2YgZGV2aWNlIC8gcGxhdGZvcm0gbm90IHRoZSBUUE0uIFN0YWdlZCBib290IHNlcXVl bmNlcyBhcmUgZmFpcmx5IGNvbW1vbiBhY3Jvc3MgdGhlIGluZHVzdHJ5LiBIZW5jZSB0aGUgdGVy bSDigJhib290c3RyYXDigJkuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttYXJnaW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwy IGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5k aWZdPkhhc2hlcyBmZWQgaW50byB0aGUgVFBNPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87bWFyZ2luLWxlZnQ6MS41aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0Omww IGxldmVsMiBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj5vPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFu PjwhW2VuZGlmXT5UUE0gZ2VuZXJhdGVzIHRoZSBhdHRlc3RhdGlvbiBvZiB0aGUgcmVnaXN0ZXJz IGhvbGRpbmcgdGhlIGhhc2hlczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PC9zcGFuPjwhW2VuZGlmXT5EZXZpY2UgY29zdCByYWlzZWQgYnkgY29zdCBvZiBUUE0gcGFydDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5bbm1zXSBOb3Qgc3VyZSBob3cg dGhpcyBpcyByZWxldmFudCB0byBSQVRTPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxl dmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+ wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwv c3Bhbj48L3NwYW4+PCFbZW5kaWZdPlRoZSB2ZXJpZmllciBtdXN0IHJ1biBhIHBhcmFsbGVsIHNl dCBvZiBtZWFzdXJlbWVudHMgKGhhc2hlcykNCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDps MCBsZXZlbDIgbGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5 bGU9Im1zby1saXN0Oklnbm9yZSI+bzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bh bj48IVtlbmRpZl0+VmVyaWZpZXIgaXMgY29tcGxleDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5bbm1zXSBhcyBjb21wYXJlZCB0byB3aGF0PzxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPkF1dGhlbnRpY2F0ZWQgQm9vdCBiYXNl ZDwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwx IGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7Ctzxz cGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFu Pjwvc3Bhbj48IVtlbmRpZl0+T3JpZ2lucyBpbiBtb2JpbGUgcGhvbmUsIFRFRSBhbmQgRFJNIHdv cmxkIHdoZXJlIHRoZSB1c2VyIGNhbiBOT1QgY2hvb3NlIHRoZSBzeXN0ZW0gU1c8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVu dDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBz dHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+QXV0aGVudGljYXRl ZCBib290IGlzIHJlcXVpcmVkIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDIg bGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1s aXN0Oklnbm9yZSI+bzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRp Zl0+VXNlcyBhIGJvb3QgUk9NIHRoYXQgcmVhbGx5IGlzIGEgUk9NLCBwcm9iYWJseSBpbiBzaWxp Y29uIChub3QgZmxhc2gpLCB0aGF0IGNhbiBOT1QgYmUgY2hhbmdlZDxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj5bbm1zXSBUaGlzIGlzIHRydWUgZm9yIHBsYXRmb3JtcyB1 c2luZyBhIFRQTSBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDIg bGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1s aXN0Oklnbm9yZSI+bzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRp Zl0+Qm9vdCBST00gdmVyaWZpZXMgdGhlIFNXIHRoYXQgaXMgbG9hZGVkLCBwYXJ0aWN1bGFyIHRo ZSB0b3AgcHJpdmlsZWdlIChlLmcuIGtlcm5lbCkgU1c8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+W25tc10gVmVyaWZpY2F0aW9uIGltcGxpZXMgdGhlIGFiaWxpdHkgdG8g ZGV0ZXJtaW5lIGJvb3QgY29kZSBpbnRlZ3JpdHkuIFRoaXMgaXMgY29tbW9uIHRvIHBsYXRmb3Jt cyB0aGF0IHVzZSBhIFRQTS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztt YXJnaW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwyIGxm bzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlz dDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZd PkEgZ29vZCBpbXBsZW1lbnRhdGlvbiBoYXMgYW50aS1yb2xsYmFjayB0byBwcmV2ZW50IG9sZCB2 ZXJzaW9ucyBvZiBTVyBmcm9tIGJlaW5nIHJ1bjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDps MSBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25v cmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bh bj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5IYXMgYW4gYXR0ZXN0YXRpb24gc2lnbmluZyBrZXkg dGhhdCBpcyBwcm9ncmFtbWVkIGluIGZ1c2VzIG9yIHBvc3NpYmx5IGluIGZsYXNoDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+W25tc10gVGhpcyBpcyBjb21tb25seSB0 cnVlIGZvciBUUE0gYmFzZWQgYXR0ZXN0YXRpb24gaW1wbGVtZW50YXRpb25zLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50 Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDIgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+bzxzcGFuIHN0eWxlPSJmb250 OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8 L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+SGFzIGEgSFcgYmxvY2sgdGhhdCBwcmV2ZW50 cyBhY2Nlc3MgdG8gdGhlIGF0dGVzdGF0aW9uIGtleSB1bmxlc3MgYXV0aGVudGljYXRlZCBib290 IHN1Y2NlZWRzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPltubXNdIFRo aXMgaXMgYWxzbyB0cnVlIGZvciBzb2x1dGlvbnMgdGhhdCB3aXNoIHRvIGltcGxlbWVudCBzZWN1 cmUgYm9vdCB1c2luZyBhIFRQTS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttYXJnaW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwy IGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5k aWZdPk9ubHkgdG9wIHByaXZpbGVnZSBTVyBjYW4gdXNlIGl0PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPltubXNdIFRQTSBhdHRlc3RhdGlvbiBrZXlzIGhhdmUgcmVzdHJp Y3Rpb25zIG9uIHVzZSBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZl bDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3 PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3Nw YW4+PC9zcGFuPjwhW2VuZGlmXT5BdHRlc3RhdGlvbnMgYXJlIGNyZWF0ZWQgaW4gdGhlIHRvcC1w cml2aWxlZ2UgU1cgPG86cD4NCjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJn aW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwyIGxmbzIi Pg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPlNp bXBseSBzaWduaW5nIGEgbm9uY2UgcHJvdmVzIHRoZSBkZXZpY2UgaXMgcnVubmluZyBhcHByb3Zl ZCBTVzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5bbm1zXSBUaGUgc2Vj dXJpdHkgcHJvcGVydGllcyBvZiB0aGUgc2lnbmluZyBrZXkgKGF0dGVzdGF0aW9uIGtleSkgYXJl IGEgZnVuY3Rpb24gb2YgdGhlIGNsYWltcyB0aGF0IHRoZSBtYW51ZmFjdHVyZXJzIG1ha2UgYWJv dXQgdGhlIGVudmlyb25tZW50IHRoYXQgcHJvdGVjdHMgdGhlIGtleS4gVGhpcyBpcw0KIHRydWUg Zm9yIFRQTSBhcyB3ZWxsIGFzIGFueSBvdGhlciByb290IG9mIHRydXN0IC8gYXR0ZXN0aW5nIGVu dmlyb25tZW50LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1s ZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDIgbGZvMiI+DQo8 IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9y ZSI+bzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+RWFzeSB0 byBhZGQgb3RoZXIgY2xhaW1zIGluIOKAlCZndDsgRUFUPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPltubXNdIHJlbGF0aXZlIHRvIHdoYXQ/PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWlu O21zby1saXN0OmwxIGxldmVsMSBsZm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1z by1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkRldmljZSBjb3N0IHJhaXNlZCBi eSBuZWVkIGZvciBzZWN1cmUga2V5IHByb3Zpc2lvbmluZyBpbiB0aGUgZmFjdG9yeTxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5k ZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3Rz XT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFu IHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5WZXJpZmllciBp cyB2ZXJ5IHNpbXBsZSA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJn aW4tbGVmdDoxLjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwyIGxmbzIi Pg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkp1 c3QgbmVlZHMgdG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUgYW5kIG5vbmNlPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPltubXNdIFRoZSB2ZXJpZmllciBpcyBhbHNvIGludGVn cmF0ZWQgaW50byB0aGUgYm9vdCBjb2RlLiBUaGVzZSB2ZXJpZmllcnMgbmVlZCB0byBiZSBwcm92 aXNpb25lZCB3aXRoIGJvb3Qgc3RhdGUgcG9saWNpZXMgYW5kIHNvIGZvcnRoLiBTZWN1cmUgYm9v dCBpcyBhbiBleGFtcGxlIG9mIHRoZSBjb21iaW5pbmcNCiBvZiBBdHRlc3RlciBhbmQgVmVyaWZp ZXIgcm9sZXMuIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PkJvdGggcHJvdmlkZSBhY2NlcHRhYmxlIHNlY3VyaXR5IGZvciB0aGVpciB1c2UgY2FzZXMgYW5k IGFyZSBicm9hZGx5IGluIHVzZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj5SQVRTIG5lZWRzIHRvIHN1cHBvcnQgYm90aC48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPltubXNdIEluIHdoYXQgd2F5cyBkb2VzIFJBVFMgbm90IHN1cHBv cnQgYm90aD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5M TDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj4NClJBVFMgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRv OlJBVFNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5SQVRTQGlldGYub3JnPC9hPjxicj4NCjxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cyIgdGFyZ2V0 PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvYT48 bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPi0tIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5LYXRobGVlbjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86 UkFUU0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPlJBVFNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9hPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj4tLSA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+S2F0aGxlZW48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_34EB67FDE76A413287C4C89EA70C9365intelcom_-- From nobody Wed Nov 20 14:18:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D929120820 for ; Wed, 20 Nov 2019 14:18:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.898 X-Spam-Level: X-Spam-Status: No, score=-6.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dD7y3pOUlWNn for ; Wed, 20 Nov 2019 14:18:35 -0800 (PST) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7818412081E for ; Wed, 20 Nov 2019 14:18:35 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga002.jf.intel.com ([10.7.209.21]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Nov 2019 14:18:35 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,223,1571727600"; d="scan'208,217";a="218836905" Received: from orsmsx104.amr.corp.intel.com ([10.22.225.131]) by orsmga002.jf.intel.com with ESMTP; 20 Nov 2019 14:18:34 -0800 Received: from orsmsx152.amr.corp.intel.com (10.22.226.39) by ORSMSX104.amr.corp.intel.com (10.22.225.131) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 20 Nov 2019 14:18:34 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX152.amr.corp.intel.com ([169.254.8.219]) with mapi id 14.03.0439.000; Wed, 20 Nov 2019 14:18:34 -0800 From: "Smith, Ned" To: "Xialiang (Frank, Network Standard & Patent Dept)" , "rats@ietf.org" Thread-Topic: =?utf-8?B?W1JhdHNdIOetlOWkjTogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2Rl?= =?utf-8?Q?l_for_consideration:?= Thread-Index: AQHVnizNPQKKKNhUk0ik7vfZORuaAqeUpIsA Date: Wed, 20 Nov 2019 22:18:34 +0000 Message-ID: <13A31581-D28E-490F-9C09-1C356855A46E@intel.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.158] Content-Type: multipart/alternative; boundary="_000_13A31581D28E490F9C091C356855A46Eintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] =?utf-8?b?562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93?= =?utf-8?q?_model_for_consideration=3A?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Nov 2019 22:18:37 -0000 --_000_13A31581D28E490F9C091C356855A46Eintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxzbywgdGhlIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1yYXRz LXB1YnN1Yi1tb2RlbC8gb21pdHMgZGlzY3Vzc2lvbiBvZiBwdWItc3ViIGJldHdlZW4gVmVyaWZp ZXIgYW5kIFJlbHlpbmcgUGFydGllcy4gUHJlc3VtYWJseSwgdGhlcmUgY2FuIGJlIG11bHRpcGxl IHJlbHlpbmcgcGFydGllcyB0aGF0IHVzZSBhIGNvbW1vbiB2ZXJpZmllci4gVGhlIEF0dGVzdGF0 aW9uIFJlc3VsdHMgcmVzdWx0aW5nIGZyb20gdGhlIGludGVyYWN0aW9ucyBiZXR3ZWVuIEF0dGVz dGVycyBhbmQgVmVyaWZpZXIgYmVjb21lIHB1Yi1zdWIg4oCcdG9waWNz4oCdIGZvciBzdWJzY3Jp cHRpb24gYnkgUmVseWluZyBQYXJ0aWVzLg0KDQpTb21lIGF0dGVudGlvbiBzaG91bGQgYmUgZ2l2 ZW4gdG8gdGhlIHVzZSBjYXNlIGFuZCBhcmNoaXRlY3R1cmFsIG1vZGVscy4gUHJlc3VtYWJseSwg dGhlcmUgaXMgYSBkZXBlbmRlbmN5IC8gb3JkZXJpbmcgdGhhdCByZWx5aW5nIHBhcnR5IGVuZm9y Y2VzIG92ZXIgdGhlIGRhdGEgaXQgb2J0YWlucyAoc3Vic2VxdWVudGx5PykgZnJvbSB0aGUgQXR0 ZXN0ZXIuIE90aGVyd2lzZSwgYWN0aW5nIG9uIHVuLWF0dGVzdGVkIGRhdGEgY291bGQgaW1wbHkg YSB3ZWFrbmVzcyBpbiB0aGUgZGF0YSBmbG93IG1vZGVsLiBGb3IgZXhhbXBsZSwgYSBSZWx5aW5n IFBhcnR5IG1pZ2h0IGV4cGVjdCB0byByZWNlaXZlIGEgcHVibGljYXRpb24gb2YgYW4gQXR0ZXN0 YXRpb24gUmVzdWx0cyB0b3BpYyBhcyBhbiBhZGRpdGlvbmFsIGNvbmRpdGlvbiB3aGVuIGJlaW5n IG5vdGlmaWVkIGFib3V0IGEgZGF0YSB0b3BpYyBvcmlnaW5hdGluZyBmcm9tIHRoZSBzYW1lIGF0 dGVzdGVkIGVudmlyb25tZW50Lg0KDQpUaGUgY3VycmVudCBkcmFmdCBkb2VzbuKAmXQgYWRlcXVh dGVseSBhZGRyZXNzZXMgdGhlIHNlY3VyaXR5IHJlbGV2YW50IGNvbnNpZGVyYXRpb25zIGdpdmVu IGEgcHViLXN1YiBkZXBsb3ltZW50IHRoYXQgaW5jb3Jwb3JhdGVzIGF0dGVzdGF0aW9uIElNTy4N Ci1OZWQNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2Yg IlNtaXRoLCBOZWQiIDxuZWQuc21pdGhAaW50ZWwuY29tPg0KRGF0ZTogTW9uZGF5LCBOb3ZlbWJl ciAxOCwgMjAxOSBhdCA4OjI1IEFNDQpUbzogIlhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFu ZGFyZCAmIFBhdGVudCBEZXB0KSIgPGZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20+LCAicmF0c0Bp ZXRmLm9yZyIgPHJhdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1JhdHNdIOetlOWkjTogQW5v dGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KVGhpcyDi gJxhcmNoaXRlY3R1cmFsIG1vZGVs4oCdIHBhcmFsbGVscyB0aGUgcm9sZXMgbWVzc2FnZSBmbG93 LiBJIHRoaW5rIGl0IGNvdWxkIGJlIHZpZXdlZCBhcyBhIHRoaXJkIG1vZGVsIHNvbWV0aGluZyBs aWtlIGEgcHViLXN1YiBicm9rZXIgd2hlcmUgUmVseWluZyBQYXJ0aWVzIHN1YnNjcmliZSB0byBW ZXJpZmllciAoYnJva2VyKSB0byByZWNlaXZlIEF0dGVzdGF0aW9uIFJlc3VsdHMgYW5kIEF0dGVz dGVycyBwdWJsaXNoIHRvIFZlcmlmaWVyIChicm9rZXIpIHdoZW4gYSBjaGFuZ2UgdG8gdGhlIEV2 aWRlbmNlIGlzIGZvdW5kLg0KDQpBIHB1Yi1zdWIgbW9kZWwgbWlnaHQgdHJlYXQgQ2xhaW1zIGFz IHB1Yi1zdWIgVG9waWNzIHRoYXQgY2FuIGJlIHN1YnNjcmliZWQgdG8gb3IgcHVibGlzaGVkIHRv Lg0KDQpJIGdldCB0aGF0IHNvbWUgcHViLXN1YiBhcmNoaXRlY3R1cmVzIGVsaW1pbmF0ZSB0aGUg YnJva2VyIGFzIGEgZGlzdGluY3QgZW50aXR5LCBidXQgY29uY2VwdHVhbGx5IHRoZSBtb2RlbCBp c27igJl0IGZ1bmRhbWVudGFsbHkgZGlmZmVyZW50IHRoYW4gaWYgdGhlcmUgd2VyZSBhIGNlbnRy YWwgYnJva2VyLg0KDQotTmVkDQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZz4g b24gYmVoYWxmIG9mICJYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJiBQYXRlbnQg RGVwdCkiIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPg0KRGF0ZTogU2F0dXJkYXksIE5vdmVt YmVyIDE2LCAyMDE5IGF0IDI6MTcgQU0NClRvOiAicmF0c0BpZXRmLm9yZyIgPHJhdHNAaWV0Zi5v cmc+DQpTdWJqZWN0OiBbUmF0c10g562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1v ZGVsIGZvciBjb25zaWRlcmF0aW9uOg0KDQpPb3BzLCBTb21lIGZpeGVzIG9mIHRoZSBiZWxvdyB0 ZXh0Og0KDQoNCuWPkeS7tuS6ujogUkFUUyBbbWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZ10g 5Luj6KGoIFhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmIFBhdGVudCBEZXB0KQ0K 5Y+R6YCB5pe26Ze0OiAyMDE55bm0MTHmnIgxNuaXpSAxODoxMw0K5pS25Lu25Lq6OiByYXRzQGll dGYub3JnDQrkuLvpopg6IFtSYXRzXSBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZv ciBjb25zaWRlcmF0aW9uOg0KDQpIaSBSQVRTIGFyY2hpdGVjdHVyZSBkZXNpZ24gdGVhbSBhbmQg YWxsLA0KSW4gYWRkaXRpb24gdG8gdGhlIGN1cnJlbnQgcGFzc3BvcnQgbW9kZWwgYW5kIGJhY2tn cm91bmQgY2hlY2sgbW9kZWwuIEkgdGhpbmsgdGhlcmUgaXMgYSB0aGlyZCBtZXNzYWdlIGZsb3cg bW9kZWwgcG9zc2libHkgZm9yIHVzIHRvIGNvbnNpZGVyOg0KQXR0ZXN0ZXIgPCAtLS0tLS0tLS0t LS0tLS0tLS0tLSA+IHZlcmlmaWVyIDwgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0g PiByZWx5aW5nIHBhcnR5DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRXZpZGVuY2Ug ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhdHRlc3RhdGlvbiByZXN1bHRzDQoNClRoZSBr ZXkgcG9pbnQgb2YgdGhlIGFib3ZlIG1vZGVsIGlzIHRoYXQgdmVyaWZpZXIgaGFzIGluZGVwZW5k ZW50IGNvbm5lY3Rpb24gd2l0aCBhdHRlc3RlciBhbmQgcmVseWluZyBwYXJ0eSByZXNwZWN0aXZl bHksIGFuZCB0aGVyZSBhcmUgdHdvIGluZGVwZW5kZW50IG1lc3NhZ2UgZXhjaGFuZ2VzIGJldHdl ZW4gdGhlIGF0dGVzdGVyIGFuZCB2ZXJpZmllciwgYmV0d2VlbiB0aGUgdmVyaWZpZXIgYW5kIHRo ZSByZWx5aW5nIHBhcnR5LiBPZiBjb3Vyc2UsIGlmIG5lZWRlZCwgdGhlcmUgY2FuIGJlIHNvbWUg dHJpZ2dlciBjb25kaXRpb24gYW5kIGludGVyYWN0aW9uIGJldHdlZW4gdGhlc2UgdHdvIGNvbm5l Y3Rpb25zLg0KVGhlIHJlbGF0aXZlIGFkdmFudGFnZSBvZiB0aGUgYWJvdmUgbW9kZWwgaXMgc2lt cGxlLCBhbmQgZWFjaCByb2xlIG9ubHkgc2VlIHdoYXQgaGUgbmVlZHMgdG8gc2VlLCBsaWtlOiBl dmlkZW5jZSBpcyBub3Qgc2VlbiBieSB0aGUgcmVseWluZyBwYXJ0eSwgYXR0ZXN0YXRpb24gcmVz dWx0cyBpcyBub3Qgc2VlbiBieSB0aGUgYXR0ZXN0ZXIuDQoNCkkgYW0gd29uZGVyaW5nIHdoZXRo ZXIgdGhlIGFyY2hpdGVjdHVyZSBkcmFmdCB3aWxsIGNvbnNpZGVyIGl0Pw0KDQpCLlIuDQpGcmFu aw0K --_000_13A31581D28E490F9C091C356855A46Eintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgR290aGljIjsNCglwYW5vc2UtMToyIDExIDYgOSA3IDIgNSA4 IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1pbmdMaVU7DQoJcGFub3NlLTE6MiAy IDUgOSAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1h dGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1pY3Jvc29mdCBZYUhlaSI7DQoJcGFub3NlLTE6MiAxMSA1 IDMgMiAyIDQgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNaWNyb3NvZnQg WWFIZWkiO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxATVMgR290aGljIjsNCglwYW5v c2UtMToyIDExIDYgOSA3IDIgNSA4IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QE1pbmdMaVUiOw0KCXBhbm9zZS0xOjIgMSA2IDkgMCAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVm aW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7 bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1hbGlnbjpqdXN0aWZ5 Ow0KCWZvbnQtc2l6ZToxMC41cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwg c3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29s b3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwg bGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFs Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4 dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsN CgltYXJnaW46MS4waW4gMS4yNWluIDEuMGluIDEuMjVpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJF Ti1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5BbHNvLCB0aGUgPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv ZHJhZnQteGlhLXJhdHMtcHVic3ViLW1vZGVsLyI+DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC14aWEtcmF0cy1wdWJzdWItbW9kZWwvPC9hPiBvbWl0cyBkaXNjdXNzaW9u IG9mIHB1Yi1zdWIgYmV0d2VlbiBWZXJpZmllciBhbmQgUmVseWluZyBQYXJ0aWVzLiBQcmVzdW1h Ymx5LCB0aGVyZSBjYW4gYmUgbXVsdGlwbGUgcmVseWluZyBwYXJ0aWVzIHRoYXQgdXNlIGEgY29t bW9uIHZlcmlmaWVyLiBUaGUgQXR0ZXN0YXRpb24gUmVzdWx0cyByZXN1bHRpbmcgZnJvbSB0aGUg aW50ZXJhY3Rpb25zDQogYmV0d2VlbiBBdHRlc3RlcnMgYW5kIFZlcmlmaWVyIGJlY29tZSBwdWIt c3ViIOKAnHRvcGljc+KAnSBmb3Igc3Vic2NyaXB0aW9uIGJ5IFJlbHlpbmcgUGFydGllcy4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U29tZSBhdHRlbnRpb24g c2hvdWxkIGJlIGdpdmVuIHRvIHRoZSB1c2UgY2FzZSBhbmQgYXJjaGl0ZWN0dXJhbCBtb2RlbHMu IFByZXN1bWFibHksIHRoZXJlIGlzIGEgZGVwZW5kZW5jeSAvIG9yZGVyaW5nIHRoYXQgcmVseWlu ZyBwYXJ0eSBlbmZvcmNlcyBvdmVyIHRoZSBkYXRhIGl0IG9idGFpbnMgKHN1YnNlcXVlbnRseT8p IGZyb20gdGhlIEF0dGVzdGVyLg0KIE90aGVyd2lzZSwgYWN0aW5nIG9uIHVuLWF0dGVzdGVkIGRh dGEgY291bGQgaW1wbHkgYSB3ZWFrbmVzcyBpbiB0aGUgZGF0YSBmbG93IG1vZGVsLiBGb3IgZXhh bXBsZSwgYSBSZWx5aW5nIFBhcnR5IG1pZ2h0IGV4cGVjdCB0byByZWNlaXZlIGEgcHVibGljYXRp b24gb2YgYW4gQXR0ZXN0YXRpb24gUmVzdWx0cyB0b3BpYyBhcyBhbiBhZGRpdGlvbmFsIGNvbmRp dGlvbiB3aGVuIGJlaW5nIG5vdGlmaWVkIGFib3V0IGEgZGF0YSB0b3BpYyBvcmlnaW5hdGluZw0K IGZyb20gdGhlIHNhbWUgYXR0ZXN0ZWQgZW52aXJvbm1lbnQuIDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIGN1cnJlbnQgZHJhZnQgZG9lc27igJl0IGFkZXF1 YXRlbHkgYWRkcmVzc2VzIHRoZSBzZWN1cml0eSByZWxldmFudCBjb25zaWRlcmF0aW9ucyBnaXZl biBhIHB1Yi1zdWIgZGVwbG95bWVudCB0aGF0IGluY29ycG9yYXRlcyBhdHRlc3RhdGlvbiBJTU8u PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPi1OZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAj QjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0 OyBvbiBiZWhhbGYgb2YgJnF1b3Q7U21pdGgsIE5lZCZxdW90OyAmbHQ7bmVkLnNtaXRoQGludGVs LmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+TW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBhdCA4 OjI1IEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDtYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3Rh bmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZsdDtmcmFuay54aWFsaWFuZ0BodWF3ZWku Y29tJmd0OywgJnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZndDs8 YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSA8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7O2NvbG9yOmJsYWNr Ij7nrZTlpI08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2si PjogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5U aGlzIOKAnGFyY2hpdGVjdHVyYWwgbW9kZWzigJ0gcGFyYWxsZWxzIHRoZSByb2xlcyBtZXNzYWdl IGZsb3cuIEkgdGhpbmsgaXQgY291bGQgYmUgdmlld2VkIGFzIGEgdGhpcmQgbW9kZWwgc29tZXRo aW5nIGxpa2UgYSBwdWItc3ViIGJyb2tlciB3aGVyZSBSZWx5aW5nIFBhcnRpZXMgc3Vic2NyaWJl IHRvIFZlcmlmaWVyDQogKGJyb2tlcikgdG8gcmVjZWl2ZSBBdHRlc3RhdGlvbiBSZXN1bHRzIGFu ZCBBdHRlc3RlcnMgcHVibGlzaCB0byBWZXJpZmllciAoYnJva2VyKSB3aGVuIGEgY2hhbmdlIHRv IHRoZSBFdmlkZW5jZSBpcyBmb3VuZC4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5BIHB1Yi1zdWIgbW9kZWwgbWlnaHQgdHJlYXQgQ2xhaW1zIGFzIHB1Yi1zdWIgVG9waWNz IHRoYXQgY2FuIGJlIHN1YnNjcmliZWQgdG8gb3IgcHVibGlzaGVkIHRvLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JIGdldCB0aGF0IHNvbWUgcHViLXN1YiBhcmNoaXRlY3R1 cmVzIGVsaW1pbmF0ZSB0aGUgYnJva2VyIGFzIGEgZGlzdGluY3QgZW50aXR5LCBidXQgY29uY2Vw dHVhbGx5IHRoZSBtb2RlbCBpc27igJl0IGZ1bmRhbWVudGFsbHkgZGlmZmVyZW50IHRoYW4gaWYg dGhlcmUgd2VyZSBhIGNlbnRyYWwgYnJva2VyLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij4tTmVkPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3Vu Y2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgJnF1b3Q7WGlhbGlhbmcgKEZyYW5rLCBOZXR3 b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVudCBEZXB0KSZxdW90OyAmbHQ7ZnJhbmsueGlhbGlhbmdA aHVhd2VpLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+U2F0dXJkYXksIE5vdmVtYmVyIDE2LCAy MDE5IGF0IDI6MTcgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90O3JhdHNAaWV0Zi5vcmcmcXVvdDsg Jmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPltSYXRzXSA8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGlj JnF1b3Q7O2NvbG9yOmJsYWNrIj7nrZTlpI08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPjogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3Ig Y29uc2lkZXJhdGlvbjo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPk9vcHMsIFNvbWUgZml4ZXMgb2YgdGhlIGJlbG93IHRleHQ6PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIGFs aWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1hbGlnbjpsZWZ0Ij48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7lj5E8L3Nw YW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O01TIEdvdGhpYyZxdW90OyI+5Lu25Lq6PC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1z ZXJpZiI+Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KIFJBVFMgW21haWx0 bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddIDwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuS7o+ihqDwvc3Bhbj48 L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWlj cm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDss c2Fucy1zZXJpZiI+WGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVu dCBEZXB0KTxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTpNaW5nTGlVIj7lj5E8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+6YCBPC9zcGFuPjwvYj48 Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7ml7bp l7Q8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwvYj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFI ZWkmcXVvdDssc2Fucy1zZXJpZiI+DQogMjAxOTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuW5tDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFI ZWkmcXVvdDssc2Fucy1zZXJpZiI+MTE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7mnIg8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1 b3Q7LHNhbnMtc2VyaWYiPjE2PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5pelPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90Oyxz YW5zLXNlcmlmIj4NCiAxODoxMzxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuaUtuS7tuS6ujwvc3Bh bj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90 OyxzYW5zLXNlcmlmIj4gcmF0c0BpZXRmLm9yZzxicj4NCjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuS4uzwv c3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6TWlu Z0xpVSI+6aKYPC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+Ojwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWljcm9z b2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPg0KIFtSYXRzXSBBbm90aGVyIFJBVFMgbWVzc2Fn ZSBmbG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjEuMGluO3RleHQtYWxpZ246bGVmdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkhpIFJBVFMgYXJj aGl0ZWN0dXJlIGRlc2lnbiB0ZWFtIGFuZCBhbGwsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkluIGFkZGl0aW9uIHRvIHRoZSBj dXJyZW50IHBhc3Nwb3J0IG1vZGVsIGFuZCBiYWNrZ3JvdW5kIGNoZWNrIG1vZGVsLiBJIHRoaW5r IHRoZXJlIGlzIGEgdGhpcmQgbWVzc2FnZSBmbG93IG1vZGVsIHBvc3NpYmx5IGZvciB1cyB0byBj b25zaWRlcjo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+QXR0ZXN0ZXIgJmx0OyAtLS0tLS0tLS0tLS0tLS0tLS0tLSAmZ3Q7IHZl cmlmaWVyICZsdDsgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gJmd0OyByZWx5aW5n IHBhcnR5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MS4waW4iPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+DQombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8L3Nw YW4+RXZpZGVuY2UgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPmF0dGVzdGF0aW9u IHJlc3VsdHM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPlRoZSBrZXkgcG9pbnQgb2YgdGhlIGFib3ZlIG1v ZGVsIGlzIHRoYXQgdmVyaWZpZXIgaGFzIGluZGVwZW5kZW50IGNvbm5lY3Rpb24gd2l0aCBhdHRl c3RlciBhbmQgcmVseWluZyBwYXJ0eSByZXNwZWN0aXZlbHksIGFuZCB0aGVyZSBhcmUgdHdvIGlu ZGVwZW5kZW50IG1lc3NhZ2UgZXhjaGFuZ2VzIGJldHdlZW4gdGhlIGF0dGVzdGVyIGFuZCB2ZXJp ZmllciwgYmV0d2Vlbg0KIHRoZSB2ZXJpZmllciBhbmQgdGhlIHJlbHlpbmcgcGFydHkuIE9mIGNv dXJzZSwgaWYgbmVlZGVkLCB0aGVyZSBjYW4gYmUgc29tZSB0cmlnZ2VyIGNvbmRpdGlvbiBhbmQg aW50ZXJhY3Rpb24gYmV0d2VlbiB0aGVzZSB0d28gY29ubmVjdGlvbnMuDQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+VGhlIHJl bGF0aXZlIGFkdmFudGFnZSBvZiB0aGUgYWJvdmUgbW9kZWwgaXMgc2ltcGxlLCBhbmQgZWFjaCBy b2xlIG9ubHkgc2VlIHdoYXQgaGUgbmVlZHMgdG8gc2VlLCBsaWtlOiBldmlkZW5jZSBpcw0KPGI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm5vdDwvc3Bhbj4gPC9iPnNlZW4gYnkgPHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPg0KdGhlIDwvc3Bhbj5yZWx5aW5nIHBhcnR5LCBhdHRlc3Rh dGlvbiByZXN1bHRzIGlzIDxiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5ub3QNCjwvc3Bh bj48L2I+c2VlbiBieSA8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+dGhlIDwvc3Bhbj5hdHRl c3Rlci48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkkgYW0gd29uZGVyaW5nIHdoZXRoZXIgdGhlIGFyY2hp dGVjdHVyZSBkcmFmdCB3aWxsIGNvbnNpZGVyIGl0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Qi5SLjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEu MGluIj5GcmFuazxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_13A31581D28E490F9C091C356855A46Eintelcom_-- From nobody Wed Nov 20 16:23:59 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 870321200A3 for ; Wed, 20 Nov 2019 16:23:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1QvyofPIfsjq for ; Wed, 20 Nov 2019 16:23:55 -0800 (PST) Received: from NAM03-DM3-obe.outbound.protection.outlook.com (mail-eopbgr800117.outbound.protection.outlook.com [40.107.80.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EB6B120090 for ; Wed, 20 Nov 2019 16:23:55 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=g6WaNfwQqrsnvB41/vKaRCu2mEDUspn2rmX36G4uI9kbAhF17KIkMjV4FdpHS1RzYR6odz/KgW5yb0CDTwXVDsLaCqbsCB/7Fa3E4imKpduMBEzVhbDvHXqLo+JCx8GJX28l1n8J6+oob18TmkstN0w24RZN6L6jsvCfTsqJRHZTZsnITkjYmnS4xBK5HyuPfbIIXNweZTcusvFsfIUCwEnne+Uu4Sc5bWW+++tIgmLG8eqglivpD4jfwlvlN4b0UIuDcJsFo8j4Ol6rkJ1nW/876ypNkmFcTsa3u8/NRqebiCq+SLsMAZj1226owFDqRHybHJ7IpHJn8SflTzRNxQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mA6bQyrtv7hSBZpJfwREuJX3JULPfRlV9/S1T+AtoWw=; b=SUlakYvSmfVKrAq2vQulud2CzNgTvjM+/iWa++sLYKDIYpzc+mz3ilRBXeCKHMB3AK0UD3X7eLCYSZFEk9y8EgaNBZ5ccRiBLO31gsCgmwbRI60HKHx/AZiiOU1nOvnYXk6LOIY3/wKGRHCIFNaxU87z/qWKEjY5wMxotvoVKMuygm3FcUwwEut1h1P6tMm7ZdjnTbm8H4SGdAsDD8OfaxL5ofuLcJmPEnOaMDeF1ior8hY5Qgk25NhZXWef1xXswwfg/e6vXplp2If5InqY8kgrXhhFLRiIRautqlrrLuORChXlAkAsLKLT6cPTTrRCAWJ80zU0poD+8vMK+i11WA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mA6bQyrtv7hSBZpJfwREuJX3JULPfRlV9/S1T+AtoWw=; b=D2P73y9JjaZdbxbAo84Eppp7GU9siRi4HnecHqkojuKgImSEmt2zkmQfvRyYHig4eZSmnKwYAatPYbSVNssoinSs5w4IUF+cIpGhnzS/IevLml+vG/lENCH6P/SWQv0asqZKA06dGM72aFrNwStViW9nWX5RxMxmlwlca40h4rg= Received: from MWHPR21MB0784.namprd21.prod.outlook.com (10.173.51.150) by MWHPR21MB0287.namprd21.prod.outlook.com (10.173.53.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.4; Thu, 21 Nov 2019 00:23:53 +0000 Received: from MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439]) by MWHPR21MB0784.namprd21.prod.outlook.com ([fe80::8d41:8f86:8654:8439%12]) with mapi id 15.20.2495.006; Thu, 21 Nov 2019 00:23:53 +0000 From: Dave Thaler To: "rats@ietf.org" Thread-Topic: [Rats] RATS architecture design team side meeting Thread-Index: AQHVnPoGdRMLXy1KR0WaSeKe6lBXuqeUyUCw Date: Thu, 21 Nov 2019 00:23:53 +0000 Message-ID: References: <13437.1573962563@dooku.sandelman.ca> In-Reply-To: <13437.1573962563@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-21T00:23:54.4027079Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c97ff408-4628-4089-9382-d92bda66b07e; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:67c:370:128:1d0a:cd6a:8e99:42cb] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d5eac5e8-da0b-49c7-5df6-08d76e19172e x-ms-traffictypediagnostic: MWHPR21MB0287: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-forefront-prvs: 0228DDDDD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(346002)(39860400002)(136003)(376002)(13464003)(189003)(199004)(486006)(6506007)(99286004)(10090500001)(53546011)(76176011)(14444005)(256004)(71200400001)(71190400001)(478600001)(7696005)(5660300002)(22452003)(46003)(6246003)(11346002)(52536014)(10290500003)(316002)(476003)(102836004)(186003)(6116002)(6436002)(446003)(14454004)(66556008)(5640700003)(74316002)(9686003)(6306002)(86362001)(2906002)(2351001)(25786009)(966005)(33656002)(8936002)(81166006)(76116006)(66946007)(305945005)(66476007)(66446008)(7736002)(2501003)(81156014)(16799955002)(8676002)(8990500004)(64756008)(6916009)(1730700003)(55016002)(229853002); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0287; H:MWHPR21MB0784.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kOKIiS8qeX16KOtYNIOsDDYazQrqi5tFwMQvKLJPq76sXnlRWLjWcAfwA4JNs5bSodEKXRN8kgUATE/x4fz8/kvzdKOzZUcMV5X0L22pERrnJzCpFKhCRMrpQXEujji0msALlb6q8B/kSFsAO2/NbmwqXjiSvmhdhE4fBB6/0xjv1SYY+4Xr2i6C4Q+qpXKQ/GhiQiIp2ITLoPbhhgEZhBhK4ll/KAI6EVCNWLlVZxmb+LyrWPLCLPerwgknmJYLYRQGZDlaoCQE8ntv8jlv0blyPHzHKx0KbwP/AXy21LQiPv02oujdgS4KU3JIRtv4S6LjTe1Op2V9EpUkhFiWoSKoedgYI+ipp96K8QvRYKSLZNNcGAvD5ajghxwNCYm6Be14GcPHGYkKmQPkx9O04Td6jt83g+plXuRYv6HwG4B8lqwZtQm/2Q+POpUswQCjbs7cUg+Rprn/I7Jb3ICPxL9XLLuSqMXX8izFeXrCXs0= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: d5eac5e8-da0b-49c7-5df6-08d76e19172e X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 00:23:53.6977 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PEqLiWPyzXspfaQtKFirfkFYozkA1yu6dZYiDXTXTNU9qFoHOJB6BVLl4RkW0gOiDF+RPj/SUDEHNDaBh3wBl3oWGw8QjwtSs73a1ArNYHk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0287 Archived-At: Subject: Re: [Rats] RATS architecture design team side meeting X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 00:23:57 -0000 U29tZSBvZiB1cyBhcmUgbWVldGluZyBpbiBhIGNvcm5lciBvZiBDb2xseWVyIDg6MzBhbSB0aGlz IG1vcm5pbmcgdG8gZmluaXNoIGEgdG9waWMgb3IgdHdvIHdlIGRpZG4ndCBnZXQgdG8gb24gVHVl c2RheSwNCmFuZCB3b3JrIG9uIHRoZSBzbGlkZXMgZm9yIHRoZSBhcmNoIGRyYWZ0IHByZXNlbnRh dGlvbi4NCg0KQW55b25lIGVsc2UgaXMgd2VsY29tZSwgdGhvdWdoIEkgZXhwZWN0IHRoZSByZWFs IHRlY2huaWNhbCBkaXNjdXNzaW9uIG5lZWRzIHRvIGJlIGluIHRoZSBXRyBtZWV0aW5nLg0KDQpE YXZlDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5j ZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBNaWNoYWVsIFJpY2hhcmRzb24NClNlbnQ6IFN1bmRh eSwgTm92ZW1iZXIgMTcsIDIwMTkgMTE6NDkgQU0NClRvOiByYXRzQGlldGYub3JnDQpTdWJqZWN0 OiBbUmF0c10gUkFUUyBhcmNoaXRlY3R1cmUgZGVzaWduIHRlYW0gc2lkZSBtZWV0aW5nDQoNCg0K PCNzZWN1cmUgbWV0aG9kPXBncG1pbWUgbW9kZT1zaWduPg0KDQpUaGUgV0cgY2hhaXJzIGhhdmUg Zm9ybWVkIGEgRGVzaWduIFRlYW0gZm9yIGEgdW5pZmllZCBhcmNoaXRlY3R1cmUgZG9jdW1lbnQu DQpUaGUgRGVzaWduIFRlYW0gaW5jbHVkZXM6IERhdmUgVGhhbGVyLCBOZWQgU21pdGgsIEhlbmsg Qmlya2hvbHogYW5kIG15c2VsZi4NCldlIGhhdmUgaGFkIHNvbWUgZGlzY3Vzc2lvbnMgZHVyaW5n IHRoZSBIYWNrYXRob24uDQpUaGUgZGVzaWduIHRlYW0gd2lsbCBvcGVyYXRlIGluIGFuIG9wZW4g ZmFzaGlvbiAgKGFsbCBXRyBwYXJ0aWNpcGFudHMgYXJlIHdlbGNvbWUgdG8gYXR0ZW5kIG91ciBj YWxscyksIGFuZCB3ZSB3aWxsIGhhdmUgdHdvIHNpZGUgbWVldGluZ3MgYXQgSUVURjEwNi4NCg0K V2UgaGF2ZSByZXNlcnZlZCB0aGUgU29waGlhIHJvb20gYXQgODozMGFtIG9uIFR1ZXNkYXkuDQoo SXQncyBhIHJvb20gd2F5IGJpZ2dlciBmb3Igb3VyIG5lZWRzLCBzbyB3ZSB3aWxsIHBpY2sgYSBj b3JuZXIgYW5kIHNpdCBpbiBhDQpjaXJjbGUpDQogICBMb2NhdGlvbjoNCiAgICDigItodHRwczov L25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYl MkZkYXRhdHJhY2tlci5pZXRmLm9yZyUyRm1lZXRpbmclMkYxMDYlMkZmbG9vci1wbGFuJTNGcm9v bSUzRHNvcGhpYSUyM3JhZmZsZXMtY2l0eS1jb252ZW50aW9uLWNlbnRlciZhbXA7ZGF0YT0wMiU3 QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NkODc3ZDJjMTkxMGQ0NTczY2IyYTA4ZDc2 YjExMjgyMyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2Mzcw OTU1OTM3NDcxOTczOTAmYW1wO3NkYXRhPXNheU5zYyUyRkg3Z21ObnJOT2x1YUZIRkZYd1drNEZ3 Wnk3TWVSWXRSWkNzdyUzRCZhbXA7cmVzZXJ2ZWQ9MA0KKFRoZSBURUVQIG1lZXRpbmcgb2NjdXJz IGluIHRoYXQgcm9vbSBzdGFydGluZyBhdCAxMGFtKQ0KDQpUaGVyZSBpcyBhIHdlYmV4IHNldHVw IGF0Og0KDQogICBNZWV0aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAyMDIgNDYxIDIzOQ0KICAg TWVldGluZyBwYXNzd29yZDogTUtoVDlwYUggKDY1NDg5NzI0IGZyb20gcGhvbmVzKQ0KICAgVHVl c2RheSwgTm92ZW1iZXIgMTksIDIwMTkNCiAgIDg6MzAgYW0gIHwgIChVVEMrMDg6MDApIEt1YWxh IEx1bXB1ciwgU2luZ2Fwb3JlICB8ICAxIGhyIDMwIG1pbnMNCiAgIGh0dHBzOi8vbmFtMDYuc2Fm ZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmNpc2NvLndl YmV4LmNvbSUyRmNpc2NvJTJGai5waHAlM0ZNVElEJTNEbTIxNTI5MzQwNjcxYmE1Y2I2MTliMTc2 ZGJiYjY1ZGQ0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2Q4 NzdkMmMxOTEwZDQ1NzNjYjJhMDhkNzZiMTEyODIzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA5NTU5Mzc0NzE5NzM5MCZhbXA7c2RhdGE9UWVsdUNCbmhZ M1E1ZGwzYzJOVVhybTBxN256bnJhRHNkQ1lnVXVWbGtMOCUzRCZhbXA7cmVzZXJ2ZWQ9MA0KICAg e3dlIGJlbGlldmUgdGhhdCB0aGlzIHdpbGwgYmUgNDozMHBtIGluIFBhY2lmaWMsIGJ1dCBwbGVh c2UgY2hlY2t9DQoNCldlIGhhdmUgcmVzZXJ2ZWQgYSBzZWNvbmQgbWVldGluZyBhdCA4OjMwYW0g b24gV2VkbmVzZGF5LCBpbiB0aGUgT2xpdmlhIHJvb20sIHNhbWUgd2ViZXgsIGJ1dCBob3BlIG5v dCB0byBuZWVkIGl0Lg0KDQpPdXIgZ29hbCBpbiB0aGlzIG1lZXRpbmcgaXMgdG8gYXJyaXZlIGF0 IGEgcHJvcG9zZWQgVGFibGVzIG9mIENvbnRlbnRzIGZvciB0aGUgQXJjaGl0ZWN0dXJlIGRvY3Vt ZW50LCB3aGljaCB3ZSB3aWxsIGJyaW5nIHRvIHRoZSBncm91cCBtZWV0aW5nIG9uIEZyaWRheSBm b3IgZGlzY3Vzc2lvbi4NCg0KVGhlIGRlc2lnbiB0ZWFtIHdpbGwgYmUgZXN0YWJsaXNoaW5nIGEg d2Vla2x5IGNvbmZlcmVuY2UtY2FsbCBtZWV0aW5nIHRpbWUsIGxpa2VseSB1c2luZyB3aGVyZWJ5 LmNvbSBhbmQgaGFja21kLg0KDQotLQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5k ZWxtYW4uY2E+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgIC09IElQdjYgSW9UIGNvbnN1bHRp bmcgPS0NCg0K From nobody Wed Nov 20 16:35:02 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B042B1200B5 for ; Wed, 20 Nov 2019 16:34:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvNnYd1eT2bt for ; Wed, 20 Nov 2019 16:34:54 -0800 (PST) Received: from p3plsmtpa08-03.prod.phx3.secureserver.net (p3plsmtpa08-03.prod.phx3.secureserver.net [173.201.193.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34A0E12006B for ; Wed, 20 Nov 2019 16:34:54 -0800 (PST) Received: from dhcp-94ba.meeting.ietf.org ([31.133.148.186]) by :SMTPAUTH: with ESMTPA id XaQtis3yCsalvXaQuiCgA9; Wed, 20 Nov 2019 17:34:53 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_84C47E89-9D40-47FF-8873-6668659E3810" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> Date: Thu, 21 Nov 2019 08:34:50 +0800 To: sacm@ietf.org, rats@ietf.org X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfGFB8zJSNCa1cnvRtvxEe/M/OqmrZ68ODfoFUznc/AYTpuo5z4bMzmVJDErql4qpr5ndMnt38x9ZUFci8x2MKorFspVz/LSv/nycCziiw5skOKtxanDR r7VsMasXE3cm0C+zWH3e9M3U43XiIWxR9wTpd1iafHQcdPuveCtBUWWUV8xblm9TUmhmwjdfyqCmw4Ouj55oq2TJ/7LyJpaan/Y= Archived-At: Subject: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 00:34:56 -0000 --Apple-Mail=_84C47E89-9D40-47FF-8873-6668659E3810 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, I=E2=80=99m not on the SACM list, but did look at the archive. Hopefully = I=E2=80=99m not out of sync. My thought is to register one claim for CWT that is an entire CoSWID (in = CDDL the concise-swid-tag). That way CoSWID can grow and develop on its own without lots of adds and = subtracts to the CWT registry. It has its own IANA registry with its own = experts and such. Seems like the coupling / factoring is about right. This would also be the way I=E2=80=99d like to have it in EAT = attestation. We=E2=80=99ve done a mini version of this with the location = claim . Then if you just want to sign a CoSWID CWT style, this works pretty well = too. It has a slight overhead compared to having all the CoSWID data = items as direct CWT claims in that it will have an additional map layer, = but that is only about three bytes. LL --Apple-Mail=_84C47E89-9D40-47FF-8873-6668659E3810 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi,

I=E2=80= =99m not on the SACM list, but did look at the archive. Hopefully I=E2=80=99= m not out of sync.

My thought is to register one claim for CWT that is an entire = CoSWID (in CDDL the concise-swid-tag).

That way CoSWID can grow and develop on = its own without lots of adds and subtracts to the CWT registry. It has = its own IANA registry with its own experts and such. Seems like the = coupling / factoring is about right.

This would also be the way I=E2=80=99d = like to have it in EAT attestation. We=E2=80=99ve done a mini version of = this with the location claim.

Then if you just want to sign a CoSWID = CWT style, this works pretty well too. It has a slight overhead compared = to having all the CoSWID data items as direct CWT claims in that it will = have an additional map layer, but that is only about three = bytes.

LL

= --Apple-Mail=_84C47E89-9D40-47FF-8873-6668659E3810-- From nobody Wed Nov 20 17:00:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51D781208DD; Wed, 20 Nov 2019 17:00:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dXAgdDTT2BZc; Wed, 20 Nov 2019 17:00:42 -0800 (PST) Received: from mail-vk1-xa32.google.com (mail-vk1-xa32.google.com [IPv6:2607:f8b0:4864:20::a32]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A38D12006B; Wed, 20 Nov 2019 17:00:42 -0800 (PST) Received: by mail-vk1-xa32.google.com with SMTP id o82so319891vka.5; Wed, 20 Nov 2019 17:00:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=bHs9NvyWolOpttPLYskuFMpDvDhZY0EhI44Q1/6y4l4=; b=nSgydnWW8hu02n/6x7t39KYuoJ90NBlh0VXfEty/FTVdu5BLmlv9S1I7hfRC70gBUm Q4defNz1czjEb2LFtYQ+tkOvyj4JsYBaDK2/dh9fGEznMO9tsu8gY+qPGHRtLrdQieMx iqQ6BYkscn/hZC/Bd4eOaY5HVy9PxFTbBhQJpTuFZtg5ntbLFDM06PdcRvgQ+kLh3IR3 ybEpdM7GqvB3GDdbFo60H9uv5np7ovgkYojj3NbLwlROtoei+HJT3g4rxW7zVX46AfXT 7cHx8jJVtd0GscXeXQot3Nhi+mNZPZ7RXh8ch05/u1Esf5mLnRn6fKwWjLXDFgsKYNR7 xzpg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=bHs9NvyWolOpttPLYskuFMpDvDhZY0EhI44Q1/6y4l4=; b=P+TO8NEzBduDQjX0eSbsZpMWEk7qvSGjPPdHQpbuE7Q+9ei7TIYf/d9A8M2wu6xMGk bmAgSLCQqeWIUbuacrwVF8Vi8tAWKfZAhITaqAHY2hxcRaa/NixHEKnsxMulaLXXr2k2 ybeatVI1qLFksqrTX5HSmm2sgblhjHK8KPKTauu/hXmMQAPQCnapjZgxRSDaT4fhtFcS As8Xy4TY0SkJ8p6n4u0d83XEJmxxlHlxuDdQrAG2KcI8ZJ1FCEPvquW/rXETpqL2esWQ h2ZZYvZ9VUvU5VdxpVPa91Tr1wurk6E8IvLPdBNlgdd4HOBjBxHZMgMSY/myxYhxWr1Z 8lGw== X-Gm-Message-State: APjAAAX3QHDh7XV+Sq7jvcJLTpHl57jN1hqpbP8SFQhG6K89/+E1oLlc 6lM/iMCWbM58Y2gyA9Kt5RtGI+fWWslanKiVzS0= X-Google-Smtp-Source: APXvYqxGha799YxNuWXMzS4ANmPN3g/cJ3wvs4x1T+CXVNW/pHGZmRw9FT0TNUMRPPrWW0MJglG7S4icWv28rIkEUOs= X-Received: by 2002:a05:6122:1181:: with SMTP id x1mr690625vkn.25.1574298040260; Wed, 20 Nov 2019 17:00:40 -0800 (PST) MIME-Version: 1.0 References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> In-Reply-To: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> From: Ira McDonald Date: Wed, 20 Nov 2019 20:00:28 -0500 Message-ID: To: Laurence Lundblade , Ira McDonald Cc: sacm , rats@ietf.org Content-Type: multipart/alternative; boundary="00000000000075dde70597d0d35a" Archived-At: Subject: Re: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 01:00:44 -0000 --00000000000075dde70597d0d35a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, That seems like a good suggestion for a simple way to integrate CoSWID content into EAT. Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Co-Chair - TCG Metadata Access Protocol SG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com PO Box 221 Grand Marais, MI 49839 906-494-2434 On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade wrote: > Hi, > > I=E2=80=99m not on the SACM list, but did look at the archive. Hopefully = I=E2=80=99m not > out of sync. > > My thought is to register one claim for CWT that is an entire CoSWID (in > CDDL the concise-swid-tag). > > That way CoSWID can grow and develop on its own without lots of adds and > subtracts to the CWT registry. It has its own IANA registry with its own > experts and such. Seems like the coupling / factoring is about right. > > This would also be the way I=E2=80=99d like to have it in EAT attestation= . We=E2=80=99ve > done a mini version of this with the location claim > . > > Then if you just want to sign a CoSWID CWT style, this works pretty well > too. It has a slight overhead compared to having all the CoSWID data item= s > as direct CWT claims in that it will have an additional map layer, but th= at > is only about three bytes. > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --00000000000075dde70597d0d35a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,

That seems like= a good suggestion for a simple way to integrate CoSWID content
i= nto EAT.

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-= Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata= Access Protocol SG
Chair - Linux Foundation Open= Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - I= EEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP = & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gma= il.com
PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434


On W= ed, Nov 20, 2019 at 7:35 PM Laurence Lundblade <lgl@island-resort.com> wrote:
Hi,

I=E2=80=99m not on the SACM list, but did look = at the archive. Hopefully I=E2=80=99m not out of sync.

=
My thought is to register one claim for CWT that is an entire CoSWID (= in CDDL the=C2=A0concise-swid-tag).

That way CoSWID = can grow and develop on its own without lots of adds and subtracts to the C= WT registry. It has its own IANA registry with its own experts and such. Se= ems like the coupling / factoring is about right.

= This would also be the way I=E2=80=99d like to have it in EAT attestation. = We=E2=80=99ve done a mini version of this with the=C2=A0l= ocation claim.

Then if you just want to sign a= CoSWID CWT style, this works pretty well too. It has a slight overhead com= pared to having all the CoSWID data items as direct CWT claims in that it w= ill have an additional map layer, but that is only about three bytes.
=

LL

__________________________= _____________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--00000000000075dde70597d0d35a-- From nobody Wed Nov 20 18:11:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 728E1120975; Wed, 20 Nov 2019 18:11:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.997 X-Spam-Level: X-Spam-Status: No, score=-0.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YFx_Fzf-FPe6; Wed, 20 Nov 2019 18:11:26 -0800 (PST) Received: from mail-oi1-x235.google.com (mail-oi1-x235.google.com [IPv6:2607:f8b0:4864:20::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17B66120991; Wed, 20 Nov 2019 18:11:26 -0800 (PST) Received: by mail-oi1-x235.google.com with SMTP id n14so1720737oie.13; Wed, 20 Nov 2019 18:11:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=THCuxbnIoTirOD842I/K5zD2I7J654zGJTSzfQKwgbI=; b=FFhXqzUMled5U7M4OI/N34htaQ4Fzn5BMT+VTSdGCit43EvxFGyG+H74aPAAAvnT+t 2hstw2PO2MAU8sKccceiePZuRCqDA7H7XA8fEq+zpeTw4KSZ0rHUK93RgAbmq/OUdmrG ekmiAHG0YhBxqa0/p5ijfwffRMFESZ/ZniCOQI9M/GKLTty7CpzIwPpy7jUAw9UeE9G/ LrAEv7AY1ZLHJb+T3Cu4Gx0SS1y3PCjHOMiWZ+4VrQ3U+pbmW3cu3SXdveD9mVJzQGVr TlyLheipYkNiJ20Y8NVCEPCBpPtQxjkBLJTHQZry5sJTPCPIgVsCtA7AhRjMCXWHH5vU TySQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=THCuxbnIoTirOD842I/K5zD2I7J654zGJTSzfQKwgbI=; b=IxNoq1PsryK8ylb/Tqt9Avg6Yx70S7V1C7qBhVEkdU7poDskN1DuA/CqBjc6IoYIaW DVcEpRDIh8oOffvgsrRZHzDAkXNeEAHFJlYhmRiTThekklPU28SdO6A/4qt0QyIh2Sfx l6GtRk8kolqVZYk6Sewrt7fCvqtbSIHFpMlsThJRR1sHma5WGNcYDN/hiCxU3SZZO8ka xIGD1BeUZVTYJaZki6Pnp0bhAjhDVjx2nEdiP7P7z9oE8Nw2QpZRTY2dzTXJAmiBpyHQ zdRRxKLgVTp1ml2tQusDEhF8Clajf8V18ZLuk3rMIhtrW4364PDTVFQ0yaS6hayfccsY otSg== X-Gm-Message-State: APjAAAXdTsvK7sQKVT22UTxNwfowVKPNVlTWdpYnXSuWJ43ZdKUxNaNJ YbHh5tgEoW3kbrfFldK9f5ynCIuLC+HEECXLVm2P7gdG X-Google-Smtp-Source: APXvYqxiVammz0VtyYWNrkK2AX0Vm2/4x18YX+jCIEPGVrItgMjuVwwgR5yPSiWjlyDWa1NiwFaKIUXAMrNotFupMTg= X-Received: by 2002:aca:d509:: with SMTP id m9mr5376308oig.164.1574302285361; Wed, 20 Nov 2019 18:11:25 -0800 (PST) MIME-Version: 1.0 References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> In-Reply-To: From: Kathleen Moriarty Date: Wed, 20 Nov 2019 21:10:49 -0500 Message-ID: To: Ira McDonald Cc: Laurence Lundblade , rats@ietf.org, sacm Content-Type: multipart/alternative; boundary="0000000000007cf6cf0597d1d06a" Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 02:11:30 -0000 --0000000000007cf6cf0597d1d06a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Great, thanks Laurence. If that's easier I think having the CoSWID in one claim should be ok and would have the same result as the suggestion I made. Changing the CoSWID format is a big enough process that it shouldn't happen very often. Best regards, Kathleen On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald wrote: > Hi Laurence, > > That seems like a good suggestion for a simple way to integrate CoSWID > content > into EAT. > > Cheers, > - Ira > > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Co-Chair - TCG Metadata Access Protocol SG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > PO Box 221 Grand Marais, MI 49839 906-494-2434 > > > > On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade > wrote: > >> Hi, >> >> I=E2=80=99m not on the SACM list, but did look at the archive. Hopefully= I=E2=80=99m not >> out of sync. >> >> My thought is to register one claim for CWT that is an entire CoSWID (in >> CDDL the concise-swid-tag). >> >> That way CoSWID can grow and develop on its own without lots of adds and >> subtracts to the CWT registry. It has its own IANA registry with its own >> experts and such. Seems like the coupling / factoring is about right. >> >> This would also be the way I=E2=80=99d like to have it in EAT attestatio= n. We=E2=80=99ve >> done a mini version of this with the location claim >> . >> >> Then if you just want to sign a CoSWID CWT style, this works pretty well >> too. It has a slight overhead compared to having all the CoSWID data ite= ms >> as direct CWT claims in that it will have an additional map layer, but t= hat >> is only about three bytes. >> >> LL >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > --=20 Best regards, Kathleen --0000000000007cf6cf0597d1d06a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Great, thanks Laurence.=C2=A0 If that's easier I think= having the CoSWID in one claim should be ok and would have the same result= as the suggestion I made.=C2=A0 Changing the CoSWID format is a big enough= process that it shouldn't happen very often.

Best r= egards,
Kathleen

On Wed, Nov 20, 2019 at 8:00 PM Ira McDonal= d <blueroofmusic@gmail.com> wrote:
Hi Laurence,

That seems like a = good suggestion for a simple way to integrate CoSWID content
into= EAT.

Cheers,
- Ira

=
=

On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade <lgl@island-resort.com> = wrote:
Hi,<= div>
I=E2=80=99m not on the SACM list, but did look at the ar= chive. Hopefully I=E2=80=99m not out of sync.

My t= hought is to register one claim for CWT that is an entire CoSWID (in CDDL t= he=C2=A0concise-= swid-tag).

That way CoSWID can grow = and develop on its own without lots of adds and subtracts to the CWT regist= ry. It has its own IANA registry with its own experts and such. Seems like = the coupling / factoring is about right.

This woul= d also be the way I=E2=80=99d like to have it in EAT attestation. We=E2=80= =99ve done a mini version of this with the=C2=A0location = claim.

Then if you just want to sign a CoSWID = CWT style, this works pretty well too. It has a slight overhead compared to= having all the CoSWID data items as direct CWT claims in that it will have= an additional map layer, but that is only about three bytes.
LL

__________________________________= _____________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--

Best regards,
Kathleen
--0000000000007cf6cf0597d1d06a-- From nobody Wed Nov 20 18:31:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 399761208AA for ; Wed, 20 Nov 2019 18:31:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YBgr-syiSwVp for ; Wed, 20 Nov 2019 18:31:52 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76C3B120077 for ; Wed, 20 Nov 2019 18:31:51 -0800 (PST) Received: from LHREML713-CAH.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id D6B18DA160A11EFCF293; Thu, 21 Nov 2019 02:31:49 +0000 (GMT) Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by LHREML713-CAH.china.huawei.com (10.201.108.36) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 21 Nov 2019 02:31:49 +0000 Received: from lhreml704-chm.china.huawei.com (10.201.108.53) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Thu, 21 Nov 2019 02:31:49 +0000 Received: from DGGEMM422-HUB.china.huawei.com (10.1.198.39) by lhreml704-chm.china.huawei.com (10.201.108.53) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA_P256) id 15.1.1713.5 via Frontend Transport; Thu, 21 Nov 2019 02:31:48 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.140]) by dggemm422-hub.china.huawei.com ([10.1.198.39]) with mapi id 14.03.0439.000; Thu, 21 Nov 2019 10:31:44 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "Smith, Ned" , "rats@ietf.org" Thread-Topic: =?utf-8?B?W1JhdHNdIOetlOWkjTogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2Rl?= =?utf-8?Q?l_for_consideration:?= Thread-Index: AQHVnizNPQKKKNhUk0ik7vfZORuaAqeUpIsAgABCTkA= Date: Thu, 21 Nov 2019 02:31:44 +0000 Message-ID: References: <13A31581-D28E-490F-9C09-1C356855A46E@intel.com> In-Reply-To: <13A31581-D28E-490F-9C09-1C356855A46E@intel.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.44.23] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA623D5dggemm511mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?utf-8?b?562U5aSNOiAg562U5aSNOiBBbm90aGVyIFJBVFMgbWVz?= =?utf-8?q?sage_flow_model_for_consideration=3A?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 02:31:54 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA623D5dggemm511mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTmVkLA0KVGhhbmtzIGZvciB0aGUgZ29vZCBpbnNpZ2h0cywgcGxlYXNlIHNlZSBteSByZXNw b25zZXMgaW5saW5lIGZvciB5b3VyIDIgZW1haWxzIGJlbG93Og0KDQrlj5Hku7bkuro6IFNtaXRo LCBOZWQgW21haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tXQ0K5Y+R6YCB5pe26Ze0OiAyMDE55bm0 MTHmnIgyMeaXpSA2OjE5DQrmlLbku7bkuro6IFhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFu ZGFyZCAmIFBhdGVudCBEZXB0KSA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbT47IHJhdHNAaWV0 Zi5vcmcNCuS4u+mimDogUmU6IFtSYXRzXSDnrZTlpI06IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZs b3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246DQoNCkFsc28sIHRoZSBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWEtcmF0cy1wdWJzdWItbW9kZWwvIG9taXRzIGRpc2N1 c3Npb24gb2YgcHViLXN1YiBiZXR3ZWVuIFZlcmlmaWVyIGFuZCBSZWx5aW5nIFBhcnRpZXMuIFBy ZXN1bWFibHksIHRoZXJlIGNhbiBiZSBtdWx0aXBsZSByZWx5aW5nIHBhcnRpZXMgdGhhdCB1c2Ug YSBjb21tb24gdmVyaWZpZXIuIFRoZSBBdHRlc3RhdGlvbiBSZXN1bHRzIHJlc3VsdGluZyBmcm9t IHRoZSBpbnRlcmFjdGlvbnMgYmV0d2VlbiBBdHRlc3RlcnMgYW5kIFZlcmlmaWVyIGJlY29tZSBw dWItc3ViIOKAnHRvcGljc+KAnSBmb3Igc3Vic2NyaXB0aW9uIGJ5IFJlbHlpbmcgUGFydGllcy4N CltGcmFua106IGdvb2QgcG9pbnQuIEFuZCB0aGF0IHB1Yi9zdWIgbWF5YmUgaXMgbm90IHRoZSBu ZXRjb25mL3lhbmcgYmFzZWQsIGNhbiBiZSBvdGhlciBtZXRob2RzLCBsaWtlOiBhdG9tLCB4bXBw IGFuZCBodHRwLWJhc2VkLiBXZSBoYXZlIG5vdCBjb25zaWRlcmVkIHRoaXMgcG9pbnQgcmlnaHQg bm93LCBpdCBjYW4gYmUgaW4gdGhpcyBkcmFmdCBsYXRlciBvciBkaXNjdXNzIGluIG90aGVyIGRy YWZ0IGlmIHRoZSBXRyBhcmUgaW50ZXJlc3RlZC4NCg0KU29tZSBhdHRlbnRpb24gc2hvdWxkIGJl IGdpdmVuIHRvIHRoZSB1c2UgY2FzZSBhbmQgYXJjaGl0ZWN0dXJhbCBtb2RlbHMuIFByZXN1bWFi bHksIHRoZXJlIGlzIGEgZGVwZW5kZW5jeSAvIG9yZGVyaW5nIHRoYXQgcmVseWluZyBwYXJ0eSBl bmZvcmNlcyBvdmVyIHRoZSBkYXRhIGl0IG9idGFpbnMgKHN1YnNlcXVlbnRseT8pIGZyb20gdGhl IEF0dGVzdGVyLiBPdGhlcndpc2UsIGFjdGluZyBvbiB1bi1hdHRlc3RlZCBkYXRhIGNvdWxkIGlt cGx5IGEgd2Vha25lc3MgaW4gdGhlIGRhdGEgZmxvdyBtb2RlbC4gRm9yIGV4YW1wbGUsIGEgUmVs eWluZyBQYXJ0eSBtaWdodCBleHBlY3QgdG8gcmVjZWl2ZSBhIHB1YmxpY2F0aW9uIG9mIGFuIEF0 dGVzdGF0aW9uIFJlc3VsdHMgdG9waWMgYXMgYW4gYWRkaXRpb25hbCBjb25kaXRpb24gd2hlbiBi ZWluZyBub3RpZmllZCBhYm91dCBhIGRhdGEgdG9waWMgb3JpZ2luYXRpbmcgZnJvbSB0aGUgc2Ft ZSBhdHRlc3RlZCBlbnZpcm9ubWVudC4NCltGcmFua106IHRoZXJlIG1heSAgYmUuIEJ1dCBJIGhv cGUgbm90IGFzIGl0IHdpbGwgaW50cm9kdWNlIGNvbXBsZXhpdHkuIElmIHdlIHJlYWxseSBuZWVk IHRvIGRlYWwgd2l0aCBpdCwgYSBzaW1wbGUgd2F5IGlzIHRvIGxlYXZlIGl0IHRvIHRoZSBSZWx5 aW5nIFBhcnR5IHdpdGggc29tZSBjYWNoZSBtZWNoYW5pc20uDQoNClRoZSBjdXJyZW50IGRyYWZ0 IGRvZXNu4oCZdCBhZGVxdWF0ZWx5IGFkZHJlc3NlcyB0aGUgc2VjdXJpdHkgcmVsZXZhbnQgY29u c2lkZXJhdGlvbnMgZ2l2ZW4gYSBwdWItc3ViIGRlcGxveW1lbnQgdGhhdCBpbmNvcnBvcmF0ZXMg YXR0ZXN0YXRpb24gSU1PLg0KW0ZyYW5rXTogc3VyZSwgZGVmaW5pdGVseSB3aWxsIGRvIGl0IGlu IHRoZSBmdXR1cmUgaXRlcmF0aW9ucy4gSXMgdGhlcmUgYW55IGJpZyBzZWN1cml0eSBpc3N1ZXMg aW4geW91ciBtaW5kIG5vdz8gSSBhbSBhbHdheXMgY3VyaW91c35+DQoNCi1OZWQNCg0KRnJvbTog UkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+ PiBvbiBiZWhhbGYgb2YgIlNtaXRoLCBOZWQiIDxuZWQuc21pdGhAaW50ZWwuY29tPG1haWx0bzpu ZWQuc21pdGhAaW50ZWwuY29tPj4NCkRhdGU6IE1vbmRheSwgTm92ZW1iZXIgMTgsIDIwMTkgYXQg ODoyNSBBTQ0KVG86ICJYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJiBQYXRlbnQg RGVwdCkiIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPG1haWx0bzpmcmFuay54aWFsaWFuZ0Bo dWF3ZWkuY29tPj4sICJyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPiIgPHJhdHNA aWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtSYXRzXSDnrZTl pI06IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246DQoN ClRoaXMg4oCcYXJjaGl0ZWN0dXJhbCBtb2RlbOKAnSBwYXJhbGxlbHMgdGhlIHJvbGVzIG1lc3Nh Z2UgZmxvdy4gSSB0aGluayBpdCBjb3VsZCBiZSB2aWV3ZWQgYXMgYSB0aGlyZCBtb2RlbCBzb21l dGhpbmcgbGlrZSBhIHB1Yi1zdWIgYnJva2VyIHdoZXJlIFJlbHlpbmcgUGFydGllcyBzdWJzY3Jp YmUgdG8gVmVyaWZpZXIgKGJyb2tlcikgdG8gcmVjZWl2ZSBBdHRlc3RhdGlvbiBSZXN1bHRzIGFu ZCBBdHRlc3RlcnMgcHVibGlzaCB0byBWZXJpZmllciAoYnJva2VyKSB3aGVuIGEgY2hhbmdlIHRv IHRoZSBFdmlkZW5jZSBpcyBmb3VuZC4NCiAgICAgICAgICAgICAgICBbRnJhbmtdOiBpdOKAmXMg YSB1c2UgY2FzZSBhbmQgYSB2ZXJ5IGdvb2Qgb25lLCB0aGFua3N+fiBBbmQgdGhlcmUgY2FuIGJl IG1vcmUgdXNlIGNhc2VzLiBBbm90aGVyIGV4YW1wbGUgaXMgc2ltcGx5IHBlcmlvZGljYWxseSBy ZXF1ZXN0L3Jlc3BvbnNlIG1lc3NhZ2UgZmxvdyBiZXR3ZWVuIGVhY2ggcGFpcnMuDQoNCiAgICAg ICAgICAgICAgICBCLlIuDQogICAgICAgICAgICAgICAgRnJhbmsNCg0KQSBwdWItc3ViIG1vZGVs IG1pZ2h0IHRyZWF0IENsYWltcyBhcyBwdWItc3ViIFRvcGljcyB0aGF0IGNhbiBiZSBzdWJzY3Jp YmVkIHRvIG9yIHB1Ymxpc2hlZCB0by4NCg0KSSBnZXQgdGhhdCBzb21lIHB1Yi1zdWIgYXJjaGl0 ZWN0dXJlcyBlbGltaW5hdGUgdGhlIGJyb2tlciBhcyBhIGRpc3RpbmN0IGVudGl0eSwgYnV0IGNv bmNlcHR1YWxseSB0aGUgbW9kZWwgaXNu4oCZdCBmdW5kYW1lbnRhbGx5IGRpZmZlcmVudCB0aGFu IGlmIHRoZXJlIHdlcmUgYSBjZW50cmFsIGJyb2tlci4NCg0KLU5lZA0KDQpGcm9tOiBSQVRTIDxy YXRzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJl aGFsZiBvZiAiWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICYgUGF0ZW50IERlcHQp IiA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbTxtYWlsdG86ZnJhbmsueGlhbGlhbmdAaHVhd2Vp LmNvbT4+DQpEYXRlOiBTYXR1cmRheSwgTm92ZW1iZXIgMTYsIDIwMTkgYXQgMjoxNyBBTQ0KVG86 ICJyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPiIgPHJhdHNAaWV0Zi5vcmc8bWFp bHRvOnJhdHNAaWV0Zi5vcmc+Pg0KU3ViamVjdDogW1JhdHNdIOetlOWkjTogQW5vdGhlciBSQVRT IG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KT29wcywgU29tZSBmaXhl cyBvZiB0aGUgYmVsb3cgdGV4dDoNCg0KDQrlj5Hku7bkuro6IFJBVFMgW21haWx0bzpyYXRzLWJv dW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQg JiBQYXRlbnQgRGVwdCkNCuWPkemAgeaXtumXtDogMjAxOeW5tDEx5pyIMTbml6UgMTg6MTMNCuaU tuS7tuS6ujogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4NCuS4u+mimDogW1Jh dHNdIEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246DQoN CkhpIFJBVFMgYXJjaGl0ZWN0dXJlIGRlc2lnbiB0ZWFtIGFuZCBhbGwsDQpJbiBhZGRpdGlvbiB0 byB0aGUgY3VycmVudCBwYXNzcG9ydCBtb2RlbCBhbmQgYmFja2dyb3VuZCBjaGVjayBtb2RlbC4g SSB0aGluayB0aGVyZSBpcyBhIHRoaXJkIG1lc3NhZ2UgZmxvdyBtb2RlbCBwb3NzaWJseSBmb3Ig dXMgdG8gY29uc2lkZXI6DQpBdHRlc3RlciA8IC0tLS0tLS0tLS0tLS0tLS0tLS0tID4gdmVyaWZp ZXIgPCAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSA+IHJlbHlpbmcgcGFydHkNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFdmlkZW5jZSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIGF0dGVzdGF0aW9uIHJlc3VsdHMNCg0KVGhlIGtleSBwb2ludCBvZiB0aGUgYWJv dmUgbW9kZWwgaXMgdGhhdCB2ZXJpZmllciBoYXMgaW5kZXBlbmRlbnQgY29ubmVjdGlvbiB3aXRo IGF0dGVzdGVyIGFuZCByZWx5aW5nIHBhcnR5IHJlc3BlY3RpdmVseSwgYW5kIHRoZXJlIGFyZSB0 d28gaW5kZXBlbmRlbnQgbWVzc2FnZSBleGNoYW5nZXMgYmV0d2VlbiB0aGUgYXR0ZXN0ZXIgYW5k IHZlcmlmaWVyLCBiZXR3ZWVuIHRoZSB2ZXJpZmllciBhbmQgdGhlIHJlbHlpbmcgcGFydHkuIE9m IGNvdXJzZSwgaWYgbmVlZGVkLCB0aGVyZSBjYW4gYmUgc29tZSB0cmlnZ2VyIGNvbmRpdGlvbiBh bmQgaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGVzZSB0d28gY29ubmVjdGlvbnMuDQpUaGUgcmVsYXRp dmUgYWR2YW50YWdlIG9mIHRoZSBhYm92ZSBtb2RlbCBpcyBzaW1wbGUsIGFuZCBlYWNoIHJvbGUg b25seSBzZWUgd2hhdCBoZSBuZWVkcyB0byBzZWUsIGxpa2U6IGV2aWRlbmNlIGlzIG5vdCBzZWVu IGJ5IHRoZSByZWx5aW5nIHBhcnR5LCBhdHRlc3RhdGlvbiByZXN1bHRzIGlzIG5vdCBzZWVuIGJ5 IHRoZSBhdHRlc3Rlci4NCg0KSSBhbSB3b25kZXJpbmcgd2hldGhlciB0aGUgYXJjaGl0ZWN0dXJl IGRyYWZ0IHdpbGwgY29uc2lkZXIgaXQ/DQoNCkIuUi4NCkZyYW5rDQo= --_000_C02846B1344F344EB4FAA6FA7AF481F13EA623D5dggemm511mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiTVMgR290aGljIjsNCglwYW5vc2UtMToyIDExIDYgOSA3IDIgNSA4IDIgNDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1pbmdMaVU7DQoJcGFub3NlLTE6MiAxIDYgOSAw IDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0K CXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk65b6u6L2v6ZuF6buROw0KCXBhbm9zZS0xOjIgMTEgNSAzIDIgMiA0IDIg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5a6L5L2TIjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5b6u6L2v 6ZuF6buRIjsNCglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OiJcQE1TIEdvdGhpYyI7DQoJcGFub3NlLTE6MiAxMSA2IDkgNyAyIDUgOCAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNaW5nTGlVIjt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCgl0ZXh0LWFsaWduOmp1c3Rp Znk7DQoJdGV4dC1qdXN0aWZ5OmludGVyLWlkZW9ncmFwaDsNCglmb250LXNpemU6MTAuNXB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93 ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29u b3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFu LkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHls ZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDkwLjBwdCA3Mi4wcHQgOTAu MHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHls ZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQi IHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0 IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFk Pg0KPGJvZHkgbGFuZz0iWkgtQ04iIGxpbms9IiMwNTYzQzEiIHZsaW5rPSIjOTU0RjcyIj4NCjxk aXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkhpIE5lZCw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9y OiMxRjQ5N0QiPlRoYW5rcyBmb3IgdGhlIGdvb2QgaW5zaWdodHMsIHBsZWFzZSBzZWUgbXkgcmVz cG9uc2VzIGlubGluZSBmb3IgeW91ciAyIGVtYWlscyBiZWxvdzo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9hPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1 b3Q7LHNhbnMtc2VyaWYiPuWPkeS7tuS6ujxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bh bj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4gU21pdGgsIE5lZCBbbWFp bHRvOm5lZC5zbWl0aEBpbnRlbC5jb21dDQo8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMt c2VyaWYiPuWPkemAgeaXtumXtDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4gMjAxOTwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDss c2Fucy1zZXJpZiI+5bm0PHNwYW4gbGFuZz0iRU4tVVMiPjExPC9zcGFuPuaciDxzcGFuIGxhbmc9 IkVOLVVTIj4yMTwvc3Bhbj7ml6U8c3BhbiBsYW5nPSJFTi1VUyI+DQogNjoxOTxicj4NCjwvc3Bh bj48Yj7mlLbku7bkuro8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0i RU4tVVMiPiBYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJmFtcDsgUGF0ZW50IERl cHQpICZsdDtmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tJmd0OzsgcmF0c0BpZXRmLm9yZzxicj4N Cjwvc3Bhbj48Yj7kuLvpopg8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiPiBSZTogW1JhdHNdIDwvc3Bhbj4NCuetlOWkjTxzcGFuIGxhbmc9IkVOLVVTIj46 IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246PG86cD48 L286cD48L3NwYW4+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBhbGlnbj0ibGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdCI+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QWxzbywgdGhlIDxhIGhy ZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1yYXRzLXB1YnN1 Yi1tb2RlbC8iPg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQteGlhLXJh dHMtcHVic3ViLW1vZGVsLzwvYT4gb21pdHMgZGlzY3Vzc2lvbiBvZiBwdWItc3ViIGJldHdlZW4g VmVyaWZpZXIgYW5kIFJlbHlpbmcgUGFydGllcy4gUHJlc3VtYWJseSwgdGhlcmUgY2FuIGJlIG11 bHRpcGxlIHJlbHlpbmcgcGFydGllcyB0aGF0IHVzZSBhIGNvbW1vbiB2ZXJpZmllci4gVGhlIEF0 dGVzdGF0aW9uIFJlc3VsdHMgcmVzdWx0aW5nIGZyb20gdGhlIGludGVyYWN0aW9ucw0KIGJldHdl ZW4gQXR0ZXN0ZXJzIGFuZCBWZXJpZmllciBiZWNvbWUgcHViLXN1YiDigJx0b3BpY3PigJ0gZm9y IHN1YnNjcmlwdGlvbiBieSBSZWx5aW5nIFBhcnRpZXMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPltGcmFua106IGdvb2QgcG9pbnQuIEFuZCB0aGF0IHB1Yi9zdWIgbWF5YmUgaXMgbm90 IHRoZSBuZXRjb25mL3lhbmcgYmFzZWQsIGNhbiBiZSBvdGhlciBtZXRob2RzLCBsaWtlOiBhdG9t LCB4bXBwIGFuZCBodHRwLWJhc2VkLiBXZSBoYXZlIG5vdCBjb25zaWRlcmVkIHRoaXMgcG9pbnQg cmlnaHQgbm93LCBpdCBjYW4gYmUgaW4gdGhpcyBkcmFmdA0KIGxhdGVyIG9yIGRpc2N1c3MgaW4g b3RoZXIgZHJhZnQgaWYgdGhlIFdHIGFyZSBpbnRlcmVzdGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Tb21lIGF0 dGVudGlvbiBzaG91bGQgYmUgZ2l2ZW4gdG8gdGhlIHVzZSBjYXNlIGFuZCBhcmNoaXRlY3R1cmFs IG1vZGVscy4gUHJlc3VtYWJseSwgdGhlcmUgaXMgYSBkZXBlbmRlbmN5IC8gb3JkZXJpbmcgdGhh dCByZWx5aW5nIHBhcnR5IGVuZm9yY2VzIG92ZXIgdGhlIGRhdGEgaXQgb2J0YWlucyAoc3Vic2Vx dWVudGx5PykgZnJvbQ0KIHRoZSBBdHRlc3Rlci4gT3RoZXJ3aXNlLCBhY3Rpbmcgb24gdW4tYXR0 ZXN0ZWQgZGF0YSBjb3VsZCBpbXBseSBhIHdlYWtuZXNzIGluIHRoZSBkYXRhIGZsb3cgbW9kZWwu IEZvciBleGFtcGxlLCBhIFJlbHlpbmcgUGFydHkgbWlnaHQgZXhwZWN0IHRvIHJlY2VpdmUgYSBw dWJsaWNhdGlvbiBvZiBhbiBBdHRlc3RhdGlvbiBSZXN1bHRzIHRvcGljIGFzIGFuIGFkZGl0aW9u YWwgY29uZGl0aW9uIHdoZW4gYmVpbmcgbm90aWZpZWQgYWJvdXQgYSBkYXRhDQogdG9waWMgb3Jp Z2luYXRpbmcgZnJvbSB0aGUgc2FtZSBhdHRlc3RlZCBlbnZpcm9ubWVudC4gPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiB0aGVyZSBtYXkmbmJzcDsgYmUuIEJ1dCBJIGhvcGUg bm90IGFzIGl0IHdpbGwgaW50cm9kdWNlIGNvbXBsZXhpdHkuIElmIHdlIHJlYWxseSBuZWVkIHRv IGRlYWwgd2l0aCBpdCwgYSBzaW1wbGUgd2F5IGlzIHRvIGxlYXZlIGl0IHRvIHRoZSBSZWx5aW5n IFBhcnR5IHdpdGggc29tZSBjYWNoZSBtZWNoYW5pc20uPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZSBjdXJyZW50 IGRyYWZ0IGRvZXNu4oCZdCBhZGVxdWF0ZWx5IGFkZHJlc3NlcyB0aGUgc2VjdXJpdHkgcmVsZXZh bnQgY29uc2lkZXJhdGlvbnMgZ2l2ZW4gYSBwdWItc3ViIGRlcGxveW1lbnQgdGhhdCBpbmNvcnBv cmF0ZXMgYXR0ZXN0YXRpb24gSU1PLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+W0ZyYW5r XTogc3VyZSwgZGVmaW5pdGVseSB3aWxsIGRvIGl0IGluIHRoZSBmdXR1cmUgaXRlcmF0aW9ucy4g SXMgdGhlcmUgYW55IGJpZyBzZWN1cml0eSBpc3N1ZXMgaW4geW91ciBtaW5kIG5vdz8gSSBhbSBh bHdheXMgY3VyaW91c35+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi1OZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNt Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJv bToNCjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2NvbG9yOmJsYWNrIj5SQVRTICZsdDs8YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYu b3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBvbiBiZWhhbGYgb2YgJnF1b3Q7U21p dGgsIE5lZCZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm5lZC5zbWl0aEBpbnRlbC5jb20iPm5l ZC5zbWl0aEBpbnRlbC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5Nb25kYXksIE5vdmVt YmVyIDE4LCAyMDE5IGF0IDg6MjUgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90O1hpYWxpYW5nIChG cmFuaywgTmV0d29yayBTdGFuZGFyZCAmYW1wOyBQYXRlbnQgRGVwdCkmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tIj5mcmFuay54aWFsaWFuZ0BodWF3 ZWkuY29tPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRz QGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJh dHNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW1JhdHNdIDwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3Ro aWMmcXVvdDs7Y29sb3I6YmxhY2siPuetlOWkjTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjogQW5vdGhlciBSQVRTIG1lc3NhZ2Ug ZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij5UaGlzIOKAnGFyY2hpdGVjdHVyYWwgbW9kZWzigJ0gcGFyYWxsZWxzIHRoZSByb2xlcyBt ZXNzYWdlIGZsb3cuIEkgdGhpbmsgaXQgY291bGQgYmUgdmlld2VkIGFzIGEgdGhpcmQgbW9kZWwg c29tZXRoaW5nIGxpa2UgYSBwdWItc3ViIGJyb2tlciB3aGVyZSBSZWx5aW5nIFBhcnRpZXMgc3Vi c2NyaWJlDQogdG8gVmVyaWZpZXIgKGJyb2tlcikgdG8gcmVjZWl2ZSBBdHRlc3RhdGlvbiBSZXN1 bHRzIGFuZCBBdHRlc3RlcnMgcHVibGlzaCB0byBWZXJpZmllciAoYnJva2VyKSB3aGVuIGEgY2hh bmdlIHRvIHRoZSBFdmlkZW5jZSBpcyBmb3VuZC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7W0ZyYW5rXTogaXTigJlz IGEgdXNlIGNhc2UgYW5kIGEgdmVyeSBnb29kIG9uZSwgdGhhbmtzfn4gQW5kIHRoZXJlIGNhbiBi ZSBtb3JlIHVzZSBjYXNlcy4gQW5vdGhlciBleGFtcGxlIGlzIHNpbXBseSBwZXJpb2RpY2FsbHkg cmVxdWVzdC9yZXNwb25zZSBtZXNzYWdlIGZsb3cgYmV0d2VlbiBlYWNoIHBhaXJzLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Qi5SLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEZyYW5rPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QSBwdWItc3ViIG1vZGVsIG1pZ2h0IHRyZWF0IENs YWltcyBhcyBwdWItc3ViIFRvcGljcyB0aGF0IGNhbiBiZSBzdWJzY3JpYmVkIHRvIG9yIHB1Ymxp c2hlZCB0by48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPkkgZ2V0IHRoYXQgc29tZSBwdWItc3ViIGFyY2hpdGVjdHVyZXMgZWxpbWlu YXRlIHRoZSBicm9rZXIgYXMgYSBkaXN0aW5jdCBlbnRpdHksIGJ1dCBjb25jZXB0dWFsbHkgdGhl IG1vZGVsIGlzbuKAmXQgZnVuZGFtZW50YWxseSBkaWZmZXJlbnQgdGhhbiBpZiB0aGVyZSB3ZXJl IGEgY2VudHJhbA0KIGJyb2tlci48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi1OZWQ8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6NzIuMHB0Ij48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7PGEgaHJlZj0ibWFp bHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsg b24gYmVoYWxmIG9mICZxdW90O1hpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmYW1w OyBQYXRlbnQgRGVwdCkmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpmcmFuay54aWFsaWFuZ0Bo dWF3ZWkuY29tIj5mcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRl OiA8L2I+U2F0dXJkYXksIE5vdmVtYmVyIDE2LCAyMDE5IGF0IDI6MTcgQU08YnI+DQo8Yj5Ubzog PC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9h PiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0Zi5vcmc8 L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5bUmF0c10gPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90Oztjb2xvcjpi bGFjayI+562U5aSNPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdDtjb2xvcjpibGFjayI+OiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZvciBj b25zaWRlcmF0aW9uOjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4m bmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Pb3BzLCBTb21lIGZpeGVzIG9m IHRoZSBiZWxvdyB0ZXh0Ojwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgYWxpZ249ImxlZnQiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1h bGlnbjpsZWZ0Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpN aW5nTGlVIj7lj5E8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5Lu25Lq6PC9zcGFuPjwvYj48Yj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 5b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xp u5EmcXVvdDssc2Fucy1zZXJpZiI+DQogUkFUUyBbPGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNl c0BpZXRmLm9yZyI+bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDwvc3Bhbj4NCjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhp YyZxdW90OyI+5Luj6KGoPC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+DQo8L3Nw YW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+WGlhbGlhbmcgKEZyYW5r LCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVudCBEZXB0KTxicj4NCjwvc3Bhbj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7lj5E8L3NwYW4+ PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01T IEdvdGhpYyZxdW90OyI+6YCBPC9zcGFuPjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7ml7bpl7Q8L3NwYW4+PC9iPjxiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/p m4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90 OyxzYW5zLXNlcmlmIj4NCiAyMDE5PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5bm0PC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/p m4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+MTE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7mnIg8L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+ rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4xNjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuaXpTwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPg0KIDE4OjEzPGJyPg0KPC9zcGFuPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhp YyZxdW90OyI+5pS25Lu25Lq6PC9zcGFuPjwvYj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNh bnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+ DQo8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT48YnI+DQo8 L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 TVMgR290aGljJnF1b3Q7Ij7kuLs8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5Ok1pbmdMaVUiPumimDwvc3Bhbj48L2I+PGI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mb hem7kSZxdW90OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7 LHNhbnMtc2VyaWYiPg0KIFtSYXRzXSBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZv ciBjb25zaWRlcmF0aW9uOjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0 IiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0O3RleHQtYWxpZ246bGVmdCI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5IaSBSQVRTIGFy Y2hpdGVjdHVyZSBkZXNpZ24gdGVhbSBhbmQgYWxsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9 IkVOLVVTIj5JbiBhZGRpdGlvbiB0byB0aGUgY3VycmVudCBwYXNzcG9ydCBtb2RlbCBhbmQgYmFj a2dyb3VuZCBjaGVjayBtb2RlbC4gSSB0aGluayB0aGVyZSBpcyBhIHRoaXJkIG1lc3NhZ2UgZmxv dyBtb2RlbCBwb3NzaWJseSBmb3IgdXMgdG8gY29uc2lkZXI6PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4g bGFuZz0iRU4tVVMiPkF0dGVzdGVyICZsdDsgLS0tLS0tLS0tLS0tLS0tLS0tLS0gJmd0OyB2ZXJp ZmllciAmbHQ7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tICZndDsgcmVseWluZyBw YXJ0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPHNwYW4gc3R5 bGU9ImNvbG9yOiMxRjQ5N0QiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PC9zcGFuPkV2aWRlbmNlICZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOzxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsNCjwvc3Bhbj5hdHRlc3RhdGlvbiByZXN1bHRzPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFu Zz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUga2V5 IHBvaW50IG9mIHRoZSBhYm92ZSBtb2RlbCBpcyB0aGF0IHZlcmlmaWVyIGhhcyBpbmRlcGVuZGVu dCBjb25uZWN0aW9uIHdpdGggYXR0ZXN0ZXIgYW5kIHJlbHlpbmcgcGFydHkgcmVzcGVjdGl2ZWx5 LCBhbmQgdGhlcmUgYXJlIHR3byBpbmRlcGVuZGVudCBtZXNzYWdlIGV4Y2hhbmdlcyBiZXR3ZWVu IHRoZSBhdHRlc3Rlcg0KIGFuZCB2ZXJpZmllciwgYmV0d2VlbiB0aGUgdmVyaWZpZXIgYW5kIHRo ZSByZWx5aW5nIHBhcnR5LiBPZiBjb3Vyc2UsIGlmIG5lZWRlZCwgdGhlcmUgY2FuIGJlIHNvbWUg dHJpZ2dlciBjb25kaXRpb24gYW5kIGludGVyYWN0aW9uIGJldHdlZW4gdGhlc2UgdHdvIGNvbm5l Y3Rpb25zLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPlRoZSByZWxhdGl2ZSBh ZHZhbnRhZ2Ugb2YgdGhlIGFib3ZlIG1vZGVsIGlzIHNpbXBsZSwgYW5kIGVhY2ggcm9sZSBvbmx5 IHNlZSB3aGF0IGhlIG5lZWRzIHRvIHNlZSwgbGlrZTogZXZpZGVuY2UgaXMNCjxiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj5ub3Q8L3NwYW4+IDwvYj5zZWVuIGJ5IDxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj4NCnRoZSA8L3NwYW4+cmVseWluZyBwYXJ0eSwgYXR0ZXN0YXRpb24gcmVz dWx0cyBpcyA8Yj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+bm90DQo8L3NwYW4+PC9iPnNl ZW4gYnkgPHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPnRoZSA8L3NwYW4+YXR0ZXN0ZXIuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFu IGxhbmc9IkVOLVVTIj5JIGFtIHdvbmRlcmluZyB3aGV0aGVyIHRoZSBhcmNoaXRlY3R1cmUgZHJh ZnQgd2lsbCBjb25zaWRlciBpdD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPkIuUi48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij48 c3BhbiBsYW5nPSJFTi1VUyI+RnJhbms8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F13EA623D5dggemm511mbxchi_-- From nobody Wed Nov 20 20:07:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B72D120959 for ; Wed, 20 Nov 2019 20:07:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8YzbIRnF2KCS for ; Wed, 20 Nov 2019 20:07:08 -0800 (PST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11544120944 for ; Wed, 20 Nov 2019 20:07:08 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Nov 2019 20:07:07 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,224,1571727600"; d="scan'208,217";a="407055485" Received: from orsmsx104.amr.corp.intel.com ([10.22.225.131]) by fmsmga005.fm.intel.com with ESMTP; 20 Nov 2019 20:07:07 -0800 Received: from orsmsx153.amr.corp.intel.com (10.22.226.247) by ORSMSX104.amr.corp.intel.com (10.22.225.131) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 20 Nov 2019 20:07:07 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX153.amr.corp.intel.com ([169.254.12.169]) with mapi id 14.03.0439.000; Wed, 20 Nov 2019 20:07:07 -0800 From: "Smith, Ned" To: "Xialiang (Frank, Network Standard & Patent Dept)" , "rats@ietf.org" Thread-Topic: =?utf-8?B?562U5aSNOiBbUmF0c10g562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBm?= =?utf-8?Q?low_model_for_consideration:?= Thread-Index: AQHVoCEjYz3HXCcnak+MxQp16YN1Yw== Date: Thu, 21 Nov 2019 04:07:07 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.252.139.205] Content-Type: multipart/alternative; boundary="_000_D40636FE747248519A167618ADFA1545intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] =?utf-8?b?562U5aSNOiAg562U5aSNOiBBbm90aGVyIFJBVFMgbWVz?= =?utf-8?q?sage_flow_model_for_consideration=3A?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 04:07:10 -0000 --_000_D40636FE747248519A167618ADFA1545intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIHNlY3VyaXR5IGNvbmNlcm4gaXMgcGFydGlhbGx5IHJhaXNlZCBieSB0aGUgcHJldmlvdXMg cGFyYWdyYXBoLCBuYW1lbHkgdGhhdCB0aGUgUlAgc2hvdWxkbuKAmXQgdGFrZSBhY3Rpb24gb3Ig Y29uc3VtZSBkYXRhIGZyb20gYW4gQXR0ZXN0ZXIgYmVmb3JlIHJlY2VpdmluZyBhbmQgZXZhbHVh dGluZyB0aGUgYXR0ZXN0YXRpb24gRXZpZGVuY2UgYXMgdGhlIHBvaW50IG9mIGF0dGVzdGF0aW9u IGlzIHRvIGxlbmQgY3JlZGliaWxpdHkgYW5kIHZlcmFjaXR5IHRvIHRoZSBkYXRhLiBUaGlzIGlz IGEgZ2VuZXJhbGl6YXRpb24gdGhhdCBjb3VsZCBiZSBpbnZhbGlkYXRlZCBieSB1c2UgY2FzZSBv ciBkZXBsb3ltZW50IHNwZWNpZmljIGNpcmN1bXN0YW5jZXMsIGJ1dCBzZWVtcyB0byBtYWtlIHNl bnNlIGFzIGEgZ3VpZGluZyBwcmluY2lwbGUuIFRoZSBjb25zaWRlcmF0aW9uIGlzIHRoYXQgaWYg dGhlIHBlcmNlcHRpb24gb2YgYWRkZWQgY29tcGxleGl0eSBjYXVzZXMgaW1wbGVtZW50ZXJzIHRv IGlnbm9yZSB0aGUgZXhwZWN0YXRpb24gdGhhdCBkYXRhIGlzbuKAmXQgdHJ1c3R3b3J0aHkgdW50 aWwgdGhlIHNvdXJjZSBvZiB0aGUgZGF0YSAoYXR0ZXN0ZWQgZW52aXJvbm1lbnQpIGhhcyBiZWVu IGF0dGVzdGVkIHRoZW4gaXQgaXMgYSBzZWN1cml0eSBjb25zaWRlcmF0aW9uLiBEYXRhIFNIT1VM RCBiZSBwcmVzdW1lZCB0byBiZSB1bnRydXN0ZWQgdW50aWwgcHJvdmVuIHRydXN0d29ydGh5Lg0K DQpGcm9tOiAiWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICYgUGF0ZW50IERlcHQp IiA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbT4NCkRhdGU6IFdlZG5lc2RheSwgTm92ZW1iZXIg MjAsIDIwMTkgYXQgNjozMSBQTQ0KVG86ICJTbWl0aCwgTmVkIiA8bmVkLnNtaXRoQGludGVsLmNv bT4sICJyYXRzQGlldGYub3JnIiA8cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IOetlOWkjTogW1Jh dHNdIOetlOWkjTogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJh dGlvbjoNCg0KSGkgTmVkLA0KVGhhbmtzIGZvciB0aGUgZ29vZCBpbnNpZ2h0cywgcGxlYXNlIHNl ZSBteSByZXNwb25zZXMgaW5saW5lIGZvciB5b3VyIDIgZW1haWxzIGJlbG93Og0KDQrlj5Hku7bk uro6IFNtaXRoLCBOZWQgW21haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tXQ0K5Y+R6YCB5pe26Ze0 OiAyMDE55bm0MTHmnIgyMeaXpSA2OjE5DQrmlLbku7bkuro6IFhpYWxpYW5nIChGcmFuaywgTmV0 d29yayBTdGFuZGFyZCAmIFBhdGVudCBEZXB0KSA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbT47 IHJhdHNAaWV0Zi5vcmcNCuS4u+mimDogUmU6IFtSYXRzXSDnrZTlpI06IEFub3RoZXIgUkFUUyBt ZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246DQoNCkFsc28sIHRoZSBodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWEtcmF0cy1wdWJzdWItbW9kZWwvIG9t aXRzIGRpc2N1c3Npb24gb2YgcHViLXN1YiBiZXR3ZWVuIFZlcmlmaWVyIGFuZCBSZWx5aW5nIFBh cnRpZXMuIFByZXN1bWFibHksIHRoZXJlIGNhbiBiZSBtdWx0aXBsZSByZWx5aW5nIHBhcnRpZXMg dGhhdCB1c2UgYSBjb21tb24gdmVyaWZpZXIuIFRoZSBBdHRlc3RhdGlvbiBSZXN1bHRzIHJlc3Vs dGluZyBmcm9tIHRoZSBpbnRlcmFjdGlvbnMgYmV0d2VlbiBBdHRlc3RlcnMgYW5kIFZlcmlmaWVy IGJlY29tZSBwdWItc3ViIOKAnHRvcGljc+KAnSBmb3Igc3Vic2NyaXB0aW9uIGJ5IFJlbHlpbmcg UGFydGllcy4NCltGcmFua106IGdvb2QgcG9pbnQuIEFuZCB0aGF0IHB1Yi9zdWIgbWF5YmUgaXMg bm90IHRoZSBuZXRjb25mL3lhbmcgYmFzZWQsIGNhbiBiZSBvdGhlciBtZXRob2RzLCBsaWtlOiBh dG9tLCB4bXBwIGFuZCBodHRwLWJhc2VkLiBXZSBoYXZlIG5vdCBjb25zaWRlcmVkIHRoaXMgcG9p bnQgcmlnaHQgbm93LCBpdCBjYW4gYmUgaW4gdGhpcyBkcmFmdCBsYXRlciBvciBkaXNjdXNzIGlu IG90aGVyIGRyYWZ0IGlmIHRoZSBXRyBhcmUgaW50ZXJlc3RlZC4NCg0KU29tZSBhdHRlbnRpb24g c2hvdWxkIGJlIGdpdmVuIHRvIHRoZSB1c2UgY2FzZSBhbmQgYXJjaGl0ZWN0dXJhbCBtb2RlbHMu IFByZXN1bWFibHksIHRoZXJlIGlzIGEgZGVwZW5kZW5jeSAvIG9yZGVyaW5nIHRoYXQgcmVseWlu ZyBwYXJ0eSBlbmZvcmNlcyBvdmVyIHRoZSBkYXRhIGl0IG9idGFpbnMgKHN1YnNlcXVlbnRseT8p IGZyb20gdGhlIEF0dGVzdGVyLiBPdGhlcndpc2UsIGFjdGluZyBvbiB1bi1hdHRlc3RlZCBkYXRh IGNvdWxkIGltcGx5IGEgd2Vha25lc3MgaW4gdGhlIGRhdGEgZmxvdyBtb2RlbC4gRm9yIGV4YW1w bGUsIGEgUmVseWluZyBQYXJ0eSBtaWdodCBleHBlY3QgdG8gcmVjZWl2ZSBhIHB1YmxpY2F0aW9u IG9mIGFuIEF0dGVzdGF0aW9uIFJlc3VsdHMgdG9waWMgYXMgYW4gYWRkaXRpb25hbCBjb25kaXRp b24gd2hlbiBiZWluZyBub3RpZmllZCBhYm91dCBhIGRhdGEgdG9waWMgb3JpZ2luYXRpbmcgZnJv bSB0aGUgc2FtZSBhdHRlc3RlZCBlbnZpcm9ubWVudC4NCltGcmFua106IHRoZXJlIG1heSAgYmUu IEJ1dCBJIGhvcGUgbm90IGFzIGl0IHdpbGwgaW50cm9kdWNlIGNvbXBsZXhpdHkuIElmIHdlIHJl YWxseSBuZWVkIHRvIGRlYWwgd2l0aCBpdCwgYSBzaW1wbGUgd2F5IGlzIHRvIGxlYXZlIGl0IHRv IHRoZSBSZWx5aW5nIFBhcnR5IHdpdGggc29tZSBjYWNoZSBtZWNoYW5pc20uDQoNClRoZSBjdXJy ZW50IGRyYWZ0IGRvZXNu4oCZdCBhZGVxdWF0ZWx5IGFkZHJlc3NlcyB0aGUgc2VjdXJpdHkgcmVs ZXZhbnQgY29uc2lkZXJhdGlvbnMgZ2l2ZW4gYSBwdWItc3ViIGRlcGxveW1lbnQgdGhhdCBpbmNv cnBvcmF0ZXMgYXR0ZXN0YXRpb24gSU1PLg0KW0ZyYW5rXTogc3VyZSwgZGVmaW5pdGVseSB3aWxs IGRvIGl0IGluIHRoZSBmdXR1cmUgaXRlcmF0aW9ucy4gSXMgdGhlcmUgYW55IGJpZyBzZWN1cml0 eSBpc3N1ZXMgaW4geW91ciBtaW5kIG5vdz8gSSBhbSBhbHdheXMgY3VyaW91c35+DQoNCi1OZWQN Cg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNA aWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgIlNtaXRoLCBOZWQiIDxuZWQuc21pdGhAaW50ZWwuY29t PG1haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tPj4NCkRhdGU6IE1vbmRheSwgTm92ZW1iZXIgMTgs IDIwMTkgYXQgODoyNSBBTQ0KVG86ICJYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQg JiBQYXRlbnQgRGVwdCkiIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPG1haWx0bzpmcmFuay54 aWFsaWFuZ0BodWF3ZWkuY29tPj4sICJyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3Jn PiIgPHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtS YXRzXSDnrZTlpI06IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVy YXRpb246DQoNClRoaXMg4oCcYXJjaGl0ZWN0dXJhbCBtb2RlbOKAnSBwYXJhbGxlbHMgdGhlIHJv bGVzIG1lc3NhZ2UgZmxvdy4gSSB0aGluayBpdCBjb3VsZCBiZSB2aWV3ZWQgYXMgYSB0aGlyZCBt b2RlbCBzb21ldGhpbmcgbGlrZSBhIHB1Yi1zdWIgYnJva2VyIHdoZXJlIFJlbHlpbmcgUGFydGll cyBzdWJzY3JpYmUgdG8gVmVyaWZpZXIgKGJyb2tlcikgdG8gcmVjZWl2ZSBBdHRlc3RhdGlvbiBS ZXN1bHRzIGFuZCBBdHRlc3RlcnMgcHVibGlzaCB0byBWZXJpZmllciAoYnJva2VyKSB3aGVuIGEg Y2hhbmdlIHRvIHRoZSBFdmlkZW5jZSBpcyBmb3VuZC4NCiAgICAgICAgICAgICAgICBbRnJhbmtd OiBpdOKAmXMgYSB1c2UgY2FzZSBhbmQgYSB2ZXJ5IGdvb2Qgb25lLCB0aGFua3N+fiBBbmQgdGhl cmUgY2FuIGJlIG1vcmUgdXNlIGNhc2VzLiBBbm90aGVyIGV4YW1wbGUgaXMgc2ltcGx5IHBlcmlv ZGljYWxseSByZXF1ZXN0L3Jlc3BvbnNlIG1lc3NhZ2UgZmxvdyBiZXR3ZWVuIGVhY2ggcGFpcnMu DQoNCiAgICAgICAgICAgICAgICBCLlIuDQogICAgICAgICAgICAgICAgRnJhbmsNCg0KQSBwdWIt c3ViIG1vZGVsIG1pZ2h0IHRyZWF0IENsYWltcyBhcyBwdWItc3ViIFRvcGljcyB0aGF0IGNhbiBi ZSBzdWJzY3JpYmVkIHRvIG9yIHB1Ymxpc2hlZCB0by4NCg0KSSBnZXQgdGhhdCBzb21lIHB1Yi1z dWIgYXJjaGl0ZWN0dXJlcyBlbGltaW5hdGUgdGhlIGJyb2tlciBhcyBhIGRpc3RpbmN0IGVudGl0 eSwgYnV0IGNvbmNlcHR1YWxseSB0aGUgbW9kZWwgaXNu4oCZdCBmdW5kYW1lbnRhbGx5IGRpZmZl cmVudCB0aGFuIGlmIHRoZXJlIHdlcmUgYSBjZW50cmFsIGJyb2tlci4NCg0KLU5lZA0KDQpGcm9t OiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9y Zz4+IG9uIGJlaGFsZiBvZiAiWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICYgUGF0 ZW50IERlcHQpIiA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbTxtYWlsdG86ZnJhbmsueGlhbGlh bmdAaHVhd2VpLmNvbT4+DQpEYXRlOiBTYXR1cmRheSwgTm92ZW1iZXIgMTYsIDIwMTkgYXQgMjox NyBBTQ0KVG86ICJyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPiIgPHJhdHNAaWV0 Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+Pg0KU3ViamVjdDogW1JhdHNdIOetlOWkjTogQW5v dGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KT29wcywg U29tZSBmaXhlcyBvZiB0aGUgYmVsb3cgdGV4dDoNCg0KDQrlj5Hku7bkuro6IFJBVFMgW21haWx0 bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddIOS7o+ihqCBYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsg U3RhbmRhcmQgJiBQYXRlbnQgRGVwdCkNCuWPkemAgeaXtumXtDogMjAxOeW5tDEx5pyIMTbml6Ug MTg6MTMNCuaUtuS7tuS6ujogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4NCuS4 u+mimDogW1JhdHNdIEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVy YXRpb246DQoNCkhpIFJBVFMgYXJjaGl0ZWN0dXJlIGRlc2lnbiB0ZWFtIGFuZCBhbGwsDQpJbiBh ZGRpdGlvbiB0byB0aGUgY3VycmVudCBwYXNzcG9ydCBtb2RlbCBhbmQgYmFja2dyb3VuZCBjaGVj ayBtb2RlbC4gSSB0aGluayB0aGVyZSBpcyBhIHRoaXJkIG1lc3NhZ2UgZmxvdyBtb2RlbCBwb3Nz aWJseSBmb3IgdXMgdG8gY29uc2lkZXI6DQpBdHRlc3RlciA8IC0tLS0tLS0tLS0tLS0tLS0tLS0t ID4gdmVyaWZpZXIgPCAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSA+IHJlbHlpbmcg cGFydHkNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBFdmlkZW5jZSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIGF0dGVzdGF0aW9uIHJlc3VsdHMNCg0KVGhlIGtleSBwb2ludCBv ZiB0aGUgYWJvdmUgbW9kZWwgaXMgdGhhdCB2ZXJpZmllciBoYXMgaW5kZXBlbmRlbnQgY29ubmVj dGlvbiB3aXRoIGF0dGVzdGVyIGFuZCByZWx5aW5nIHBhcnR5IHJlc3BlY3RpdmVseSwgYW5kIHRo ZXJlIGFyZSB0d28gaW5kZXBlbmRlbnQgbWVzc2FnZSBleGNoYW5nZXMgYmV0d2VlbiB0aGUgYXR0 ZXN0ZXIgYW5kIHZlcmlmaWVyLCBiZXR3ZWVuIHRoZSB2ZXJpZmllciBhbmQgdGhlIHJlbHlpbmcg cGFydHkuIE9mIGNvdXJzZSwgaWYgbmVlZGVkLCB0aGVyZSBjYW4gYmUgc29tZSB0cmlnZ2VyIGNv bmRpdGlvbiBhbmQgaW50ZXJhY3Rpb24gYmV0d2VlbiB0aGVzZSB0d28gY29ubmVjdGlvbnMuDQpU aGUgcmVsYXRpdmUgYWR2YW50YWdlIG9mIHRoZSBhYm92ZSBtb2RlbCBpcyBzaW1wbGUsIGFuZCBl YWNoIHJvbGUgb25seSBzZWUgd2hhdCBoZSBuZWVkcyB0byBzZWUsIGxpa2U6IGV2aWRlbmNlIGlz IG5vdCBzZWVuIGJ5IHRoZSByZWx5aW5nIHBhcnR5LCBhdHRlc3RhdGlvbiByZXN1bHRzIGlzIG5v dCBzZWVuIGJ5IHRoZSBhdHRlc3Rlci4NCg0KSSBhbSB3b25kZXJpbmcgd2hldGhlciB0aGUgYXJj aGl0ZWN0dXJlIGRyYWZ0IHdpbGwgY29uc2lkZXIgaXQ/DQoNCkIuUi4NCkZyYW5rDQo= --_000_D40636FE747248519A167618ADFA1545intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiTVMgR290aGljIjsNCglwYW5vc2UtMToyIDExIDYgOSA3IDIgNSA4 IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1pbmdMaVU7DQoJcGFub3NlLTE6MiAy IDUgOSAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1h dGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1pY3Jvc29mdCBZYUhlaSI7DQoJcGFub3NlLTE6MiAxMSA1 IDMgMiAyIDQgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNaWNyb3NvZnQg WWFIZWkiO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxATVMgR290aGljIjsNCglwYW5v c2UtMToyIDExIDYgOSA3IDIgNSA4IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QE1pbmdMaVUiOw0KCXBhbm9zZS0xOjIgMSA2IDkgMCAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVm aW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7 bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJdGV4dC1hbGlnbjpqdXN0aWZ5 Ow0KCWZvbnQtc2l6ZToxMC41cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwg c3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29s b3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwg bGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFs Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4w cHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxl MTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpz cGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHls ZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMjVpbiAx LjBpbiAxLjI1aW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZs aW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhlIHNlY3VyaXR5IGNvbmNl cm4gaXMgcGFydGlhbGx5IHJhaXNlZCBieSB0aGUgcHJldmlvdXMgcGFyYWdyYXBoLCBuYW1lbHkg dGhhdCB0aGUgUlAgc2hvdWxkbuKAmXQgdGFrZSBhY3Rpb24gb3IgY29uc3VtZSBkYXRhIGZyb20g YW4gQXR0ZXN0ZXIgYmVmb3JlIHJlY2VpdmluZyBhbmQgZXZhbHVhdGluZyB0aGUgYXR0ZXN0YXRp b24gRXZpZGVuY2UgYXMgdGhlDQogcG9pbnQgb2YgYXR0ZXN0YXRpb24gaXMgdG8gbGVuZCBjcmVk aWJpbGl0eSBhbmQgdmVyYWNpdHkgdG8gdGhlIGRhdGEuIFRoaXMgaXMgYSBnZW5lcmFsaXphdGlv biB0aGF0IGNvdWxkIGJlIGludmFsaWRhdGVkIGJ5IHVzZSBjYXNlIG9yIGRlcGxveW1lbnQgc3Bl Y2lmaWMgY2lyY3Vtc3RhbmNlcywgYnV0IHNlZW1zIHRvIG1ha2Ugc2Vuc2UgYXMgYSBndWlkaW5n IHByaW5jaXBsZS4gVGhlIGNvbnNpZGVyYXRpb24gaXMgdGhhdCBpZiB0aGUgcGVyY2VwdGlvbg0K IG9mIGFkZGVkIGNvbXBsZXhpdHkgY2F1c2VzIGltcGxlbWVudGVycyB0byBpZ25vcmUgdGhlIGV4 cGVjdGF0aW9uIHRoYXQgZGF0YSBpc27igJl0IHRydXN0d29ydGh5IHVudGlsIHRoZSBzb3VyY2Ug b2YgdGhlIGRhdGEgKGF0dGVzdGVkIGVudmlyb25tZW50KSBoYXMgYmVlbiBhdHRlc3RlZCB0aGVu IGl0IGlzIGEgc2VjdXJpdHkgY29uc2lkZXJhdGlvbi4gRGF0YSBTSE9VTEQgYmUgcHJlc3VtZWQg dG8gYmUgdW50cnVzdGVkIHVudGlsIHByb3ZlbiB0cnVzdHdvcnRoeS48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+JnF1b3Q7WGlhbGlhbmcg KEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVudCBEZXB0KSZxdW90OyAmbHQ7ZnJh bmsueGlhbGlhbmdAaHVhd2VpLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+V2VkbmVzZGF5LCBO b3ZlbWJlciAyMCwgMjAxOSBhdCA2OjMxIFBNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDtTbWl0aCwg TmVkJnF1b3Q7ICZsdDtuZWQuc21pdGhAaW50ZWwuY29tJmd0OywgJnF1b3Q7cmF0c0BpZXRmLm9y ZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhp YyZxdW90Oztjb2xvcjpibGFjayI+562U5aSNPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrIj46IFtSYXRzXQ0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90Oztjb2xvcjpibGFjayI+ 562U5aSNPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj46 IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRpb246PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgTmVk LDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+VGhhbmtzIGZvciB0aGUg Z29vZCBpbnNpZ2h0cywgcGxlYXNlIHNlZSBteSByZXNwb25zZXMgaW5saW5lIGZvciB5b3VyIDIg ZW1haWxzIGJlbG93Ojwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbjt0ZXh0LWFsaWduOmxlZnQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmIj7lj5Hku7bk uro6PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+IFNtaXRoLCBOZWQgW21haWx0 bzpuZWQuc21pdGhAaW50ZWwuY29tXQ0KPGJyPg0KPGI+5Y+R6YCB5pe26Ze0OjwvYj4gMjAxOeW5 tDEx5pyIMjHml6UgNjoxOTxicj4NCjxiPuaUtuS7tuS6ujo8L2I+IFhpYWxpYW5nIChGcmFuaywg TmV0d29yayBTdGFuZGFyZCAmYW1wOyBQYXRlbnQgRGVwdCkgJmx0O2ZyYW5rLnhpYWxpYW5nQGh1 YXdlaS5jb20mZ3Q7OyByYXRzQGlldGYub3JnPGJyPg0KPGI+5Li76aKYOjwvYj4gUmU6IFtSYXRz XSDnrZTlpI06IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVyYXRp b246PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWFsaWduOmxl ZnQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BbHNvLCB0aGUN CjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhpYS1yYXRz LXB1YnN1Yi1tb2RlbC8iPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXhp YS1yYXRzLXB1YnN1Yi1tb2RlbC88L2E+IG9taXRzIGRpc2N1c3Npb24gb2YgcHViLXN1YiBiZXR3 ZWVuIFZlcmlmaWVyIGFuZCBSZWx5aW5nIFBhcnRpZXMuIFByZXN1bWFibHksIHRoZXJlIGNhbiBi ZSBtdWx0aXBsZSByZWx5aW5nIHBhcnRpZXMgdGhhdA0KIHVzZSBhIGNvbW1vbiB2ZXJpZmllci4g VGhlIEF0dGVzdGF0aW9uIFJlc3VsdHMgcmVzdWx0aW5nIGZyb20gdGhlIGludGVyYWN0aW9ucyBi ZXR3ZWVuIEF0dGVzdGVycyBhbmQgVmVyaWZpZXIgYmVjb21lIHB1Yi1zdWIg4oCcdG9waWNz4oCd IGZvciBzdWJzY3JpcHRpb24gYnkgUmVseWluZyBQYXJ0aWVzLg0KPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiBnb29kIHBvaW50LiBBbmQgdGhhdCBwdWIv c3ViIG1heWJlIGlzIG5vdCB0aGUgbmV0Y29uZi95YW5nIGJhc2VkLCBjYW4gYmUgb3RoZXIgbWV0 aG9kcywgbGlrZTogYXRvbSwgeG1wcCBhbmQgaHR0cC1iYXNlZC4gV2UgaGF2ZSBub3QgY29uc2lk ZXJlZCB0aGlzIHBvaW50IHJpZ2h0IG5vdywgaXQgY2FuIGJlDQogaW4gdGhpcyBkcmFmdCBsYXRl ciBvciBkaXNjdXNzIGluIG90aGVyIGRyYWZ0IGlmIHRoZSBXRyBhcmUgaW50ZXJlc3RlZC48L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+U29tZSBhdHRlbnRpb24gc2hvdWxkIGJl IGdpdmVuIHRvIHRoZSB1c2UgY2FzZSBhbmQgYXJjaGl0ZWN0dXJhbCBtb2RlbHMuIFByZXN1bWFi bHksIHRoZXJlIGlzIGEgZGVwZW5kZW5jeSAvIG9yZGVyaW5nIHRoYXQgcmVseWluZyBwYXJ0eSBl bmZvcmNlcyBvdmVyIHRoZSBkYXRhIGl0IG9idGFpbnMgKHN1YnNlcXVlbnRseT8pDQogZnJvbSB0 aGUgQXR0ZXN0ZXIuIE90aGVyd2lzZSwgYWN0aW5nIG9uIHVuLWF0dGVzdGVkIGRhdGEgY291bGQg aW1wbHkgYSB3ZWFrbmVzcyBpbiB0aGUgZGF0YSBmbG93IG1vZGVsLiBGb3IgZXhhbXBsZSwgYSBS ZWx5aW5nIFBhcnR5IG1pZ2h0IGV4cGVjdCB0byByZWNlaXZlIGEgcHVibGljYXRpb24gb2YgYW4g QXR0ZXN0YXRpb24gUmVzdWx0cyB0b3BpYyBhcyBhbiBhZGRpdGlvbmFsIGNvbmRpdGlvbiB3aGVu IGJlaW5nIG5vdGlmaWVkIGFib3V0DQogYSBkYXRhIHRvcGljIG9yaWdpbmF0aW5nIGZyb20gdGhl IHNhbWUgYXR0ZXN0ZWQgZW52aXJvbm1lbnQuIDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+W0ZyYW5rXTogdGhlcmUgbWF5Jm5ic3A7IGJlLiBCdXQgSSBob3BlIG5vdCBh cyBpdCB3aWxsIGludHJvZHVjZSBjb21wbGV4aXR5LiBJZiB3ZSByZWFsbHkgbmVlZCB0byBkZWFs IHdpdGggaXQsIGEgc2ltcGxlIHdheSBpcyB0byBsZWF2ZSBpdCB0byB0aGUgUmVseWluZyBQYXJ0 eSB3aXRoIHNvbWUgY2FjaGUgbWVjaGFuaXNtLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij5UaGUgY3VycmVudCBkcmFmdCBkb2VzbuKAmXQgYWRlcXVhdGVseSBhZGRyZXNzZXMg dGhlIHNlY3VyaXR5IHJlbGV2YW50IGNvbnNpZGVyYXRpb25zIGdpdmVuIGEgcHViLXN1YiBkZXBs b3ltZW50IHRoYXQgaW5jb3Jwb3JhdGVzIGF0dGVzdGF0aW9uIElNTy48L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPltGcmFua106IHN1cmUsIGRlZmluaXRlbHkgd2lsbCBk byBpdCBpbiB0aGUgZnV0dXJlIGl0ZXJhdGlvbnMuIElzIHRoZXJlIGFueSBiaWcgc2VjdXJpdHkg aXNzdWVzIGluIHlvdXIgbWluZCBub3c/IEkgYW0gYWx3YXlzIGN1cmlvdXN+fjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tTmVkPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0K PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFU UyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+cmF0cy1ib3VuY2Vz QGlldGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mICZxdW90O1NtaXRoLCBOZWQmcXVvdDsgJmx0 OzxhIGhyZWY9Im1haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tIj5uZWQuc21pdGhAaW50ZWwuY29t PC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+TW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBhdCA4 OjI1IEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDtYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3Rh bmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZnJhbmsu eGlhbGlhbmdAaHVhd2VpLmNvbSI+ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbTwvYT4mZ3Q7LCAm cXVvdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT4mcXVv dDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPiZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSA8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7O2NvbG9yOmJs YWNrIj7nrZTlpI08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPjogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjo8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPlRoaXMg4oCcYXJjaGl0ZWN0dXJhbCBtb2RlbOKAnSBwYXJhbGxlbHMgdGhlIHJvbGVzIG1l c3NhZ2UgZmxvdy4gSSB0aGluayBpdCBjb3VsZCBiZSB2aWV3ZWQgYXMgYSB0aGlyZCBtb2RlbCBz b21ldGhpbmcgbGlrZSBhIHB1Yi1zdWIgYnJva2VyIHdoZXJlIFJlbHlpbmcgUGFydGllcyBzdWJz Y3JpYmUgdG8gVmVyaWZpZXINCiAoYnJva2VyKSB0byByZWNlaXZlIEF0dGVzdGF0aW9uIFJlc3Vs dHMgYW5kIEF0dGVzdGVycyBwdWJsaXNoIHRvIFZlcmlmaWVyIChicm9rZXIpIHdoZW4gYSBjaGFu Z2UgdG8gdGhlIEV2aWRlbmNlIGlzIGZvdW5kLg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtbRnJh bmtdOiBpdOKAmXMgYSB1c2UgY2FzZSBhbmQgYSB2ZXJ5IGdvb2Qgb25lLCB0aGFua3N+fiBBbmQg dGhlcmUgY2FuIGJlIG1vcmUgdXNlIGNhc2VzLiBBbm90aGVyIGV4YW1wbGUgaXMgc2ltcGx5IHBl cmlvZGljYWxseSByZXF1ZXN0L3Jlc3BvbnNlIG1lc3NhZ2UgZmxvdyBiZXR3ZWVuIGVhY2gNCiBw YWlycy48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO0IuUi48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0Qi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBGcmFuazwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkEgcHViLXN1YiBtb2RlbCBtaWdodCB0cmVhdCBDbGFpbXMg YXMgcHViLXN1YiBUb3BpY3MgdGhhdCBjYW4gYmUgc3Vic2NyaWJlZCB0byBvciBwdWJsaXNoZWQg dG8uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuMGluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SSBnZXQgdGhhdCBzb21l IHB1Yi1zdWIgYXJjaGl0ZWN0dXJlcyBlbGltaW5hdGUgdGhlIGJyb2tlciBhcyBhIGRpc3RpbmN0 IGVudGl0eSwgYnV0IGNvbmNlcHR1YWxseSB0aGUgbW9kZWwgaXNu4oCZdCBmdW5kYW1lbnRhbGx5 IGRpZmZlcmVudCB0aGFuIGlmIHRoZXJlIHdlcmUgYSBjZW50cmFsIGJyb2tlci48L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tTmVkPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuNWluIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPlJBVFMgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPnJhdHMt Ym91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJlaGFsZiBvZiAmcXVvdDtYaWFsaWFuZyAoRnJh bmssIE5ldHdvcmsgU3RhbmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZsdDs8YSBocmVm PSJtYWlsdG86ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbSI+ZnJhbmsueGlhbGlhbmdAaHVhd2Vp LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlNhdHVyZGF5LCBOb3ZlbWJlciAxNiwgMjAx OSBhdCAyOjE3IEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDs8YSBocmVmPSJtYWlsdG86cmF0c0Bp ZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRz QGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+W1Jh dHNdIDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVv dDtNUyBHb3RoaWMmcXVvdDs7Y29sb3I6YmxhY2siPuetlOWkjTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+OiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93 IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjVpbiI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj48 c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+T29wcywgU29tZSBmaXhlcyBvZiB0aGUgYmVsb3cg dGV4dDo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS41aW4iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgYWxpZ249ImxlZnQiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjVpbjt0ZXh0LWFsaWdu OmxlZnQiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5Ok1pbmdM aVUiPuWPkTwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7ku7bkuro8L3NwYW4+PC9iPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZx dW90OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+DQog UkFUUyBbPGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnJhdHMt Ym91bmNlc0BpZXRmLm9yZzwvYT5dIDwvc3Bhbj4NCjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5Luj6KGoPC9zcGFuPjwv Yj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNy b3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhlaSZxdW90Oyxz YW5zLXNlcmlmIj5YaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJmFtcDsgUGF0ZW50 IERlcHQpPGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5Ok1pbmdMaVUiPuWPkTwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7pgIE8L3NwYW4+PC9iPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5Ok1pbmdMaVUiPuaXtumX tDwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhl aSZxdW90OyxzYW5zLXNlcmlmIj4NCiAyMDE5PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5bm0PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29mdCBZYUhl aSZxdW90OyxzYW5zLXNlcmlmIj4xMTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuaciDwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVv dDssc2Fucy1zZXJpZiI+MTY8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7ml6U8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7LHNh bnMtc2VyaWYiPg0KIDE4OjEzPGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5pS25Lu25Lq6PC9zcGFu PjwvYj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtN aWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1zZXJpZiI+Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TWljcm9zb2Z0IFlhSGVpJnF1b3Q7 LHNhbnMtc2VyaWYiPg0KPGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0Zi5v cmc8L2E+PGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5Li7PC9zcGFuPjwvYj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTpNaW5nTGlVIj7popg8L3NwYW4+PC9iPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O01pY3Jvc29m dCBZYUhlaSZxdW90OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNaWNyb3NvZnQgWWFIZWkmcXVvdDssc2Fucy1z ZXJpZiI+DQogW1JhdHNdIEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNp ZGVyYXRpb246PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS41aW47dGV4dC1h bGlnbjpsZWZ0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjVpbiI+SGkgUkFUUyBhcmNoaXRlY3R1cmUgZGVzaWduIHRlYW0g YW5kIGFsbCw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjVpbiI+SW4gYWRkaXRpb24gdG8gdGhlIGN1cnJlbnQgcGFzc3BvcnQgbW9kZWwg YW5kIGJhY2tncm91bmQgY2hlY2sgbW9kZWwuIEkgdGhpbmsgdGhlcmUgaXMgYSB0aGlyZCBtZXNz YWdlIGZsb3cgbW9kZWwgcG9zc2libHkgZm9yIHVzIHRvIGNvbnNpZGVyOjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj5BdHRlc3Rl ciAmbHQ7IC0tLS0tLS0tLS0tLS0tLS0tLS0tICZndDsgdmVyaWZpZXIgJmx0OyAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSAmZ3Q7IHJlbHlpbmcgcGFydHk8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjVpbiI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IDxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj5FdmlkZW5jZSAmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+YXR0ZXN0YXRpb24gcmVzdWx0czxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDox LjVpbiI+VGhlIGtleSBwb2ludCBvZiB0aGUgYWJvdmUgbW9kZWwgaXMgdGhhdCB2ZXJpZmllciBo YXMgaW5kZXBlbmRlbnQgY29ubmVjdGlvbiB3aXRoIGF0dGVzdGVyIGFuZCByZWx5aW5nIHBhcnR5 IHJlc3BlY3RpdmVseSwgYW5kIHRoZXJlIGFyZSB0d28gaW5kZXBlbmRlbnQgbWVzc2FnZSBleGNo YW5nZXMgYmV0d2VlbiB0aGUgYXR0ZXN0ZXIgYW5kIHZlcmlmaWVyLCBiZXR3ZWVuDQogdGhlIHZl cmlmaWVyIGFuZCB0aGUgcmVseWluZyBwYXJ0eS4gT2YgY291cnNlLCBpZiBuZWVkZWQsIHRoZXJl IGNhbiBiZSBzb21lIHRyaWdnZXIgY29uZGl0aW9uIGFuZCBpbnRlcmFjdGlvbiBiZXR3ZWVuIHRo ZXNlIHR3byBjb25uZWN0aW9ucy4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj5UaGUgcmVsYXRpdmUgYWR2YW50YWdlIG9mIHRo ZSBhYm92ZSBtb2RlbCBpcyBzaW1wbGUsIGFuZCBlYWNoIHJvbGUgb25seSBzZWUgd2hhdCBoZSBu ZWVkcyB0byBzZWUsIGxpa2U6IGV2aWRlbmNlIGlzDQo8Yj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+bm90PC9zcGFuPiA8L2I+c2VlbiBieSA8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ DQp0aGUgPC9zcGFuPnJlbHlpbmcgcGFydHksIGF0dGVzdGF0aW9uIHJlc3VsdHMgaXMgPGI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm5vdA0KPC9zcGFuPjwvYj5zZWVuIGJ5IDxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj50aGUgPC9zcGFuPmF0dGVzdGVyLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjVp biI+SSBhbSB3b25kZXJpbmcgd2hldGhlciB0aGUgYXJjaGl0ZWN0dXJlIGRyYWZ0IHdpbGwgY29u c2lkZXIgaXQ/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MS41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuNWluIj5CLlIuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS41aW4iPkZyYW5rPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_D40636FE747248519A167618ADFA1545intelcom_-- From nobody Wed Nov 20 20:11:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D074120831 for ; Wed, 20 Nov 2019 20:11:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.997 X-Spam-Level: X-Spam-Status: No, score=-0.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0UTZ9fOWeHyb for ; Wed, 20 Nov 2019 20:11:55 -0800 (PST) Received: from mail-wr1-x429.google.com (mail-wr1-x429.google.com [IPv6:2a00:1450:4864:20::429]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70274120220 for ; Wed, 20 Nov 2019 20:11:54 -0800 (PST) Received: by mail-wr1-x429.google.com with SMTP id b18so2582987wrj.8 for ; Wed, 20 Nov 2019 20:11:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=1XQwpJPlrpzwRjnwpatI8sqVqccOurvGY3wlb0tgsgY=; b=EyufH8S+8Ejw1u8NlimRrCQJJ9G/BdlbCmFStXTBrIvc7mjn7rl0OSJz4tx4yutP1K DdXECie5oaMhnXDD31/eOdcjTC5L48ip0j7Q2K/9AzG3snAOFjD7Gl/GFfJ8p4Phbe4Q kFGTZZaF1ERICjPOuqq6xpl3pPCoBKYftkM9KWYklUjAxsjWwyJLAMEpxha33B6E5RDo GG9LKYUhjJifFRU+lUsW1/YUtUD3dCiyNUq+ytTDtEHYRe7DeNpnwHfka1pSMYOZeeTe hRx46LSY1l9Q9pdzeyiPgvYsa5L4UayEg2jMLPGvUHWJdF66ccqfzrMGdHnlFKNWgeUX o5Rg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=1XQwpJPlrpzwRjnwpatI8sqVqccOurvGY3wlb0tgsgY=; b=iqK1dfcZ7w1hwfzURWhIiVdOQ/wFa98q+yYnH3SdyJDMGVwePCWiv6wrkSUovLp404 m4wjCHizykY/lfn+EslcIDb+wSexqymgxvJzkPDNRjFv6P7S9yrTGtzSGVz350lru9ps 8oDfZz33tRF3zRcSXKcWwvpD3yeYThiuDn9G5Ix86IVykYY70l3VFNnJFpTJsJj66xko Di73yz452AGhfmUHBLo9zj9R2jM9nK+1hsPdKgCz7Pw3G8KqcL+XgFABDHSQN7uKDfkP iCpUoQ4Y2mF1edphdAfItEUwuVfk+RQ/YXT1eJy48B/HK6uPRRTkW0qnFMSGGovZz7tH +Evg== X-Gm-Message-State: APjAAAXwFZUXIBvM7YIKBidwDYUPANyWnD6IgBh9G0XAwvIfHDSXGBTo qlBZqd/jBy1rC8z28LOPHEwSm4TEo94= X-Google-Smtp-Source: APXvYqwColxrurtECpn0Q4Q0Y1E9U5Qh4WADwy0tWtDPxoyN8SEHcjaEpO5Zgmpwi+J8h2jLDBXt3Q== X-Received: by 2002:adf:f290:: with SMTP id k16mr8281171wro.224.1574309512619; Wed, 20 Nov 2019 20:11:52 -0800 (PST) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id 16sm8151251wmf.0.2019.11.20.20.11.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Nov 2019 20:11:51 -0800 (PST) To: "Smith, Ned" , Kathleen Moriarty , Laurence Lundblade Cc: "rats@ietf.org" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> From: Anders Rundgren Message-ID: <30effd67-f6ab-3899-808e-db724a33b9b0@gmail.com> Date: Thu, 21 Nov 2019 05:11:47 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> Content-Type: multipart/alternative; boundary="------------225D22B5243C7A81A112B539" Content-Language: en-US Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 04:11:57 -0000 This is a multi-part message in MIME format. --------------225D22B5243C7A81A112B539 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit And then you have the outcome/action of an attestation which I guess currently is "Pass" or "Fail". As shown in https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf "Pass" may very well return a more sophisticated result, enabling a protected API in a session a bit similar to TLS. Anders On 2019-11-20 22:11, Smith, Ned wrote: > > There are some misrepresentations in the analysis below (I’ll comment inline below using [nms] delimiters). In general, I don’t see attestation types as being binary. Dave Thaler’s chart / truth table in another thread seems to suggest this as well given there are many different types of attesting environments (aka roots of trust). > > It might make sense to have discussion around claims that apply to attesting environments vs. claims that apply to attested environments? The important security property of attesting environments is they often are regarded as “trusted” meaning there isn’t some other attesting environment that vouches for it. > > Associating claims to attesting environments often takes a different from attestation (as represented by the roles / arch models); namely using certificates issued by product vendors (what the arch has called ‘asserters’). Certificates typically contain identity claims but could contain additional claims. Vendors could also sign assert claims by signing a document that asserts them. These could be manifests, attribute certs, identity certs with claims extensions and possibly even JWT/CWT (tokens). I haven’t seen a use case for vendor issued tokens however. Possibly PKI will transition from X.509 based to Token based at some point in the future, but I expect it will take a while. Vendors issuing (signing) manifests seems reasonable since many already create manifests for software distribution also called packages / bundles. The workflow for ‘reference values’ would not be much different than for creating a SW update manifest. > > *From: *RATS on behalf of Kathleen Moriarty > *Date: *Tuesday, November 19, 2019 at 6:00 PM > *To: *Laurence Lundblade > *Cc: *"rats@ietf.org" > *Subject: *Re: [Rats] Two types of secure attestation > > Hi Laurence, > > I read your message as there only being 2 types of attestation as opposed to what you stated in your follow on email, which better maps to the restricted set in your first message. > > Thanks, > > Kathleen > > On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade > wrote: > > Hi Kathleen, > > Not sure I’m following your thought completely. > > From what I know of Authenticated Boot, the code signing formats are usually proprietary and idiosyncratic. The first stages of it are likely in true ROM (chip metal layer) and can be very architecture and system specific and would not use CoSWID or EAT. > > My comments below are about getting a system booted up to state where it known to behave as desired. > > Once it is up then signed CoSWIDs in EATs would come into play. They can be trusted because the attester and system SW known to have booted up correctly. Knowing who signed some SW listed in a CoSWID is only of value if you know the system SW did signature checking when it loaded the SW it listed. For example, everyone knows how Android app signing works, so listing the signer of an Android app is good useful information. > > Hope that makes sense in relation to your comment. > > LL > > > > On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty > wrote: > > Hi Laurence, > > Where does the code signing example fit in that you gave as it's not really an attestation, but could be useful in the format of an EAT/CWT?   This questions considers the CoSWID discussion as well as another example you had in your slides later (which was really the same) on just validating the code was signed by the expected private key? Should that be called an attestation or just using the format for signing?  You might add claims in above what's in the CoSWID and use the nesting of EAT/subdomains as well as perform remote verification. > > Thanks, > > Kathleen > > On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade > wrote: > > Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired. > > *TPM based* > > ·Originates in the PC world where the end user had to be able to choose the system SW > > [nms] Not sure what relevance to attestation should be ascribed because of how TPMs originated. > > ·Has a TPM that performs a general measuring function > > + Has an attestation signing key for signing measurements that is kept secret by the TPM > > oTPM is generic as it can be used for PC’s, routers, IoT devices > > [nms] Profiles for how to adapt TPM for use in specific platform classes is generally required. > > ·Authenticated boot is optional > > [nms] I think the industry also uses the term ‘secure boot’. TPM supports attestation (of the boot sequence) while a secure boot approach doesn’t imply attestation is needed/used. > > [nms] Boot behavior is more a property of the Root of Trust for Measurement (RTM) than a TPM. There are many types of RTM technology most simply it is a boot ROM. > > ·Uses a staged boot architecture where each stage must measure (hash) the following stage > > [nms] Boot architecture is determined by the type of device / platform not the TPM. Staged boot sequences are fairly common across the industry. Hence the term ‘bootstrap’. > > oHashes fed into the TPM > > oTPM generates the attestation of the registers holding the hashes > > ·Device cost raised by cost of TPM part > > [nms] Not sure how this is relevant to RATS > > ·The verifier must run a parallel set of measurements (hashes) > > oVerifier is complex > > [nms] as compared to what? > > *Authenticated Boot based* > > ·Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW > > ·Authenticated boot is required > > oUses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed > > [nms] This is true for platforms using a TPM as well. > > oBoot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW > > [nms] Verification implies the ability to determine boot code integrity. This is common to platforms that use a TPM. > > oA good implementation has anti-rollback to prevent old versions of SW from being run > > ·Has an attestation signing key that is programmed in fuses or possibly in flash > > [nms] This is commonly true for TPM based attestation implementations. > > oHas a HW block that prevents access to the attestation key unless authenticated boot succeeds > > [nms] This is also true for solutions that wish to implement secure boot using a TPM. > > oOnly top privilege SW can use it > > [nms] TPM attestation keys have restrictions on use as well. > > ·Attestations are created in the top-privilege SW > > oSimply signing a nonce proves the device is running approved SW > > [nms] The security properties of the signing key (attestation key) are a function of the claims that the manufacturers make about the environment that protects the key. This is true for TPM as well as any other root of trust / attesting environment. > > oEasy to add other claims in —> EAT > > [nms] relative to what? > > ·Device cost raised by need for secure key provisioning in the factory > > ·Verifier is very simple > > oJust needs to verify the signature and nonce > > [nms] The verifier is also integrated into the boot code. These verifiers need to be provisioned with boot state policies and so forth. Secure boot is an example of the combining of Attester and Verifier roles. > > Both provide acceptable security for their use cases and are broadly in use. > > RATS needs to support both. > > [nms] In what ways does RATS not support both? > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > -- > > Best regards, > > Kathleen > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > -- > > Best regards, > > Kathleen > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --------------225D22B5243C7A81A112B539 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
And then you have the outcome/action of an attestation which I guess currently is "Pass" or "Fail".

As shown in https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf "Pass" may very well return a more sophisticated result, enabling a protected API in a session a bit similar to TLS.

Anders

On 2019-11-20 22:11, Smith, Ned wrote:

There are some misrepresentations in the analysis below (I’ll comment inline below using [nms] delimiters). In general, I don’t see attestation types as being binary. Dave Thaler’s chart / truth table in another thread seems to suggest this as well given there are many different types of attesting environments (aka roots of trust).

 

It might make sense to have discussion around claims that apply to attesting environments vs. claims that apply to attested environments? The important security property of attesting environments is they often are regarded as “trusted” meaning there isn’t some other attesting environment that vouches for it.

 

Associating claims to attesting environments often takes a different from attestation (as represented by the roles / arch models); namely using certificates issued by product vendors (what the arch has called ‘asserters’). Certificates typically contain identity claims but could contain additional claims. Vendors could also sign assert claims by signing a document that asserts them. These could be manifests, attribute certs, identity certs with claims extensions and possibly even JWT/CWT (tokens). I haven’t seen a use case for vendor issued tokens however. Possibly PKI will transition from X.509 based to Token based at some point in the future, but I expect it will take a while. Vendors issuing (signing) manifests seems reasonable since many already create manifests for software distribution also called packages / bundles. The workflow for ‘reference values’ would not be much different than for creating a SW update manifest.

 

From: RATS <rats-bounces@ietf.org> on behalf of Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Tuesday, November 19, 2019 at 6:00 PM
To: Laurence Lundblade <lgl@island-resort.com>
Cc: "rats@ietf.org" <rats@ietf.org>
Subject: Re: [Rats] Two types of secure attestation

 

Hi Laurence,

 

I read your message as there only being 2 types of attestation as opposed to what you stated in your follow on email, which better maps to the restricted set in your first message.

 

Thanks,

Kathleen

 

On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade <lgl@island-resort.com> wrote:

Hi Kathleen,

 

Not sure I’m following your thought completely. 

 

From what I know of Authenticated Boot, the code signing formats are usually proprietary and idiosyncratic. The first stages of it are likely in true ROM (chip metal layer) and can be very architecture and system specific and would not use CoSWID or EAT. 

 

My comments below are about getting a system booted up to state where it known to behave as desired.

 

Once it is up then signed CoSWIDs in EATs would come into play. They can be trusted because the attester and system SW known to have booted up correctly. Knowing who signed some SW listed in a CoSWID is only of value if you know the system SW did signature checking when it loaded the SW it listed. For example, everyone knows how Android app signing works, so listing the signer of an Android app is good useful information.

 

Hope that makes sense in relation to your comment.

 

LL

 



On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:

 

Hi Laurence,

 

Where does the code signing example fit in that you gave as it's not really an attestation, but could be useful in the format of an EAT/CWT?   This questions considers the CoSWID discussion as well as another example you had in your slides later (which was really the same) on just validating the code was signed by the expected private key?  Should that be called an attestation or just using the format for signing?  You might add claims in above what's in the CoSWID and use the nesting of EAT/subdomains as well as perform remote verification.

 

Thanks,

Kathleen

 

On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade <lgl@island-resort.com> wrote:

Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired.

 

TPM based

·         Originates in the PC world where the end user had to be able to choose the system SW

[nms] Not sure what relevance to attestation should be ascribed because of how TPMs originated.

·         Has a TPM that performs a general measuring function

      • Has an attestation signing key for signing measurements that is kept secret by the TPM

o    TPM is generic as it can be used for PC’s, routers, IoT devices

[nms] Profiles for how to adapt TPM for use in specific platform classes is generally required.

·         Authenticated boot is optional

[nms] I think the industry also uses the term ‘secure boot’. TPM supports attestation (of the boot sequence) while a secure boot approach doesn’t imply attestation is needed/used.

[nms] Boot behavior is more a property of the Root of Trust for Measurement (RTM) than a TPM. There are many types of RTM technology most simply it is a boot ROM.

·         Uses a staged boot architecture where each stage must measure (hash) the following stage

[nms] Boot architecture is determined by the type of device / platform not the TPM. Staged boot sequences are fairly common across the industry. Hence the term ‘bootstrap’.

o    Hashes fed into the TPM

o    TPM generates the attestation of the registers holding the hashes

·         Device cost raised by cost of TPM part

[nms] Not sure how this is relevant to RATS

·         The verifier must run a parallel set of measurements (hashes)

o    Verifier is complex

[nms] as compared to what?

 

Authenticated Boot based

·         Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW

·         Authenticated boot is required

o    Uses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed

[nms] This is true for platforms using a TPM as well.

o    Boot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW

[nms] Verification implies the ability to determine boot code integrity. This is common to platforms that use a TPM.

o    A good implementation has anti-rollback to prevent old versions of SW from being run

·         Has an attestation signing key that is programmed in fuses or possibly in flash

[nms] This is commonly true for TPM based attestation implementations.

o    Has a HW block that prevents access to the attestation key unless authenticated boot succeeds

[nms] This is also true for solutions that wish to implement secure boot using a TPM.

o    Only top privilege SW can use it

[nms] TPM attestation keys have restrictions on use as well.

·         Attestations are created in the top-privilege SW

o    Simply signing a nonce proves the device is running approved SW

[nms] The security properties of the signing key (attestation key) are a function of the claims that the manufacturers make about the environment that protects the key. This is true for TPM as well as any other root of trust / attesting environment.

o    Easy to add other claims in —> EAT

[nms] relative to what?

·         Device cost raised by need for secure key provisioning in the factory

·         Verifier is very simple

o    Just needs to verify the signature and nonce

[nms] The verifier is also integrated into the boot code. These verifiers need to be provisioned with boot state policies and so forth. Secure boot is an example of the combining of Attester and Verifier roles.

 

Both provide acceptable security for their use cases and are broadly in use.

 

RATS needs to support both.

[nms] In what ways does RATS not support both?

 

LL

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


 

--

 

Best regards,

Kathleen

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

 


 

--

 

Best regards,

Kathleen


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

--------------225D22B5243C7A81A112B539-- From nobody Wed Nov 20 20:30:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ECBA120963; Wed, 20 Nov 2019 20:29:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id inyemS0g_yGt; Wed, 20 Nov 2019 20:29:51 -0800 (PST) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl2gcc02on2105.outbound.protection.outlook.com [40.107.89.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 035CD12095C; Wed, 20 Nov 2019 20:29:50 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WOJkjjUgU+VNgQcMGUuI/8iYFJhvGl7rHObGbUPhO7JBqEBKYob1k29bCVzJH1FpvOKy4QEwpINH2O5cugjmTO5ZiAQ+KMa/YM4x51UMaVZc0zOGRU6ZbAgtcUHcOL71Co0mOjPx5+Gp9P0f1lUCeweMBp1qVc7mMnLBJddeVAoCKk0WoV8dXFjPyZuo7HqjLpr+GLXVWV+eBvtMSDCF0mJNQJjXwtnbLcPaN7xUI73zTbMIwEotAEHbtWxX8vLgwFPbW60Unq5wznn8wEzZj/WfT1dWB/JzOd5NRswai/AmC+7Dv/CZC5irBbjvmFFSY53KmoEQF9IBvytEtf12PQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0/fBb7i5L58f7HucHy70SVhsxXE2qr9+LVHCi1fOQ1M=; b=JfKjWYhiZtmzOc/qMFjNpvruuoN+LU54+OGALCrLxfQ5ALCSUOh/B3csjDCoiUxcLa8Cpqsysbw7484yRJl4KMauWjgsCAYakv0Qf5ImQlPAUfp6n7dzHFp0xdHO93vhDD/lJiKOREtltFlUpVCCwyF9hTgev+jua8+TBaUe+BABxz3NxT15uazirsOlf2/GjTmNjnGPDD7fa0j/xjQaaSNVMTQkOXXSLnVhEyEQa7ehsXek2zu6qgX136AdVCt7jPB0m7rRFngM3krP+uOWMQMdJLhnZfe4VrYrUsCrScTbDFrpDF0gOl+DT+EqWObYpuNz/cBdfx8ZM0wGwWgo2g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0/fBb7i5L58f7HucHy70SVhsxXE2qr9+LVHCi1fOQ1M=; b=yvIS65RqRwjGFnTN5p+PvIfH1Zjdd+mW/Vh6HrNaCX7vFTCsUT2bp/4/D9bnauE9nanciLej8shoCLrhsHiZbhxE5XO4WemIWNpET/QtiEnjaHMXqY5XmJAuYv5m7Ns19AsEI1Eh9cckFVZCYjAhMoCI9+Ydsg7AEZFr4fSzjyY= Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7PR09MB2690.namprd09.prod.outlook.com (52.135.242.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.18; Thu, 21 Nov 2019 04:29:49 +0000 Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2474.019; Thu, 21 Nov 2019 04:29:48 +0000 From: "Waltermire, David A. (Fed)" To: Kathleen Moriarty , Ira McDonald CC: "rats@ietf.org" , sacm , Laurence Lundblade Thread-Topic: [sacm] [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAcinV4l/iw9i0usrObSRdkD+6eU4bqAgAAkxTI= Date: Thu, 21 Nov 2019 04:29:48 +0000 Message-ID: References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [129.6.223.126] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: e4dc4e00-ebfe-42e2-3f2d-08d76e3b71e0 x-ms-traffictypediagnostic: BN7PR09MB2690: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 0228DDDDD7 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(396003)(39860400002)(346002)(376002)(189003)(199004)(316002)(110136005)(19273905006)(54906003)(99286004)(105004)(102836004)(76176011)(7696005)(4326008)(54896002)(6306002)(6436002)(55016002)(486006)(236005)(53546011)(14444005)(256004)(9686003)(71190400001)(6246003)(25786009)(478600001)(8676002)(8936002)(81166006)(81156014)(76116006)(66476007)(7736002)(2906002)(66446008)(71200400001)(52536014)(74316002)(966005)(14454004)(6506007)(91956017)(229853002)(64756008)(66556008)(19627405001)(66574012)(446003)(476003)(11346002)(26005)(186003)(86362001)(66946007)(66066001)(5660300002)(3846002)(6116002)(33656002)(606006)(563064011); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR09MB2690; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: c47x5D2Y5B21F5Dhw/mf+++SciC1JlHPZYnrSyOGh9P0myQudnk4XXI5DF6o+asLIyaUPH5AUgE4ERHMecnMu2JwT+PyKtDG8yVqqA+GxYL4+yPwW1n9p3RMokEIYVCgXrDDwfq3Mq/5AYAe80FUs8misazW6xC+M0Hb8qH4y2CG0cFNKG5k73Lb834XXEvVZyPQmGiati1leE6iqCqTcYLMWbpxMHSpZLGCo8tf8mWnlB9hTCxKORdj0t5/nkg8dcoaMwmSWqMwsXaCPXJQIKW78zB1xxei8WY2gUTBBnu1ckUT3u8ma2sSgib9/6tZlLnTRq9Fp4O30a2mpkmBh7fLV2vZ/6HGngj4i/FV41dz+wYJFRCQxOXqWAVVaV6EPgNB7UJgRkV1ZfadvwFcKkXaz2uG4mb9Q/ZUFWu+mZw9q6vTEljtfnpCPew5GM4hSepnqB84hbzsXTCGKHP6yHcT44LGrpr8oiL7r9/e/bY= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN7PR09MB2819D797B89183218BEFA823F04E0BN7PR09MB2819namp_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: e4dc4e00-ebfe-42e2-3f2d-08d76e3b71e0 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 04:29:48.4774 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ccvkW+QKu7uOLgPu4Lu7f7huj+AyNqb41xsulYnuB0CyrWw4fHZXifmlfr6MHJ5iQVNdBCugU9Yv6bK34cuQjQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR09MB2690 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 04:29:53 -0000 --_000_BN7PR09MB2819D797B89183218BEFA823F04E0BN7PR09MB2819namp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable It sounds like having a CWT claim that contains an entire CoSWID is a path = forward. It may also make sense to do something similar for ISO SWID tags. Am I right in thinking that this CWT work can be done in RATS, referencing = CoSWID once it is published as a normative reference? This would allow CoSW= ID to go forward to the IESG, while the CoSWID CWT claim is worked in paral= lel in RATS. Kathleen, if this is true, does this way forward address your CWT-related c= omments? Regards, Dave ________________________________ From: sacm on behalf of Kathleen Moriarty Sent: Wednesday, November 20, 2019 9:10 PM To: Ira McDonald Cc: rats@ietf.org ; sacm ; Laurence Lundblade= Subject: Re: [sacm] [Rats] CoSWID and EAT and CWT Great, thanks Laurence. If that's easier I think having the CoSWID in one = claim should be ok and would have the same result as the suggestion I made.= Changing the CoSWID format is a big enough process that it shouldn't happ= en very often. Best regards, Kathleen On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald > wrote: Hi Laurence, That seems like a good suggestion for a simple way to integrate CoSWID cont= ent into EAT. Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Co-Chair - TCG Metadata Access Protocol SG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com PO Box 221 Grand Marais, MI 49839 906-494-2434 On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade > wrote: Hi, I=92m not on the SACM list, but did look at the archive. Hopefully I=92m no= t out of sync. My thought is to register one claim for CWT that is an entire CoSWID (in CD= DL the concise-swid-tag). That way CoSWID can grow and develop on its own without lots of adds and su= btracts to the CWT registry. It has its own IANA registry with its own expe= rts and such. Seems like the coupling / factoring is about right. This would also be the way I=92d like to have it in EAT attestation. We=92v= e done a mini version of this with the location claim. Then if you just want to sign a CoSWID CWT style, this works pretty well to= o. It has a slight overhead compared to having all the CoSWID data items as= direct CWT claims in that it will have an additional map layer, but that i= s only about three bytes. LL _______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm -- Best regards, Kathleen --_000_BN7PR09MB2819D797B89183218BEFA823F04E0BN7PR09MB2819namp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
It sounds like having a CWT claim that contains an entire CoSWID is a= path forward. It may also make sense to do something similar for ISO SWID = tags.

Am I right in thinking that this CWT work can be done in RATS, refere= ncing CoSWID once it is published as a normative reference? This would allo= w CoSWID to go forward to the IESG, while the CoSWID CWT claim is worked in= parallel in RATS.

Kathleen, if this is true, does this way forward address your CWT-rel= ated comments?

Regards,
Dave





From: sacm <sacm-bounces= @ietf.org> on behalf of Kathleen Moriarty <kathleen.moriarty.ietf@gma= il.com>
Sent: Wednesday, November 20, 2019 9:10 PM
To: Ira McDonald <blueroofmusic@gmail.com>
Cc: rats@ietf.org <rats@ietf.org>; sacm <sacm@ietf.org>;= Laurence Lundblade <lgl@island-resort.com>
Subject: Re: [sacm] [Rats] CoSWID and EAT and CWT
 
Great, thanks Laurence.  If that's easier I think hav= ing the CoSWID in one claim should be ok and would have the same result as = the suggestion I made.  Changing the CoSWID format is a big enough pro= cess that it shouldn't happen very often.

Best regards,
Kathleen

On Wed, Nov 20, 2019 at 8:00 PM Ira= McDonald <blueroofmusic@gmai= l.com> wrote:
Hi Laurence,

That seems like a good suggestion for a simple way to integrate CoSWID= content
into EAT.

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/hi= ghnorthinc
mailto: bluero= ofmusic@gmail.com
PO Box 221  Grand Marais, MI 49839  906-494-2434



On Wed, Nov 20, 2019 at 7:35 PM Lau= rence Lundblade <lgl@island-resort.com> wrote:
Hi,

I=92m not on the SACM list, but did look at the archive. Hopefully I= =92m not out of sync.

My thought is to register one claim for CWT that is an entire CoSWID (= in CDDL the concise-swid-tag).

That way CoSWID can grow and develop on its own without lots of adds a= nd subtracts to the CWT registry. It has its own IANA registry with its own= experts and such. Seems like the coupling / factoring is about right.

This would also be the way I=92d like to have it in EAT attestation. W= e=92ve done a mini version of this with the location claim.

Then if you just want to sign a CoSWID CWT style, this works pretty we= ll too. It has a slight overhead compared to having all the CoSWID data ite= ms as direct CWT claims in that it will have an additional map layer, but t= hat is only about three bytes.

LL

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/li= stinfo/rats
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--

Best regards,
Kathleen
--_000_BN7PR09MB2819D797B89183218BEFA823F04E0BN7PR09MB2819namp_-- From nobody Wed Nov 20 20:33:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8E5C12095D for ; Wed, 20 Nov 2019 20:33:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZOyA2olpaRW for ; Wed, 20 Nov 2019 20:33:51 -0800 (PST) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71DD7120963 for ; Wed, 20 Nov 2019 20:33:51 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Nov 2019 20:33:51 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,224,1571727600"; d="scan'208,217";a="200988051" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by orsmga008.jf.intel.com with ESMTP; 20 Nov 2019 20:33:50 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX105.amr.corp.intel.com ([169.254.2.158]) with mapi id 14.03.0439.000; Wed, 20 Nov 2019 20:33:50 -0800 From: "Smith, Ned" To: Anders Rundgren , Kathleen Moriarty , Laurence Lundblade CC: "rats@ietf.org" Thread-Topic: [Rats] Two types of secure attestation Thread-Index: AQHVntzp4M6ZJzqVJUiVsZ6c2vuAXaeTFYmAgACwdgCAAA6xgIAAu9YAgAD7cYD//4AMgA== Date: Thu, 21 Nov 2019 04:33:49 +0000 Message-ID: References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <30effd67-f6ab-3899-808e-db724a33b9b0@gmail.com> In-Reply-To: <30effd67-f6ab-3899-808e-db724a33b9b0@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.251.3.188] Content-Type: multipart/alternative; boundary="_000_BFECEE8E3E83475A9C3A8033F4A9E9F4intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 04:33:55 -0000 --_000_BFECEE8E3E83475A9C3A8033F4A9E9F4intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIFRVREEgZHJhZnQgbWlnaHQgc2F0aXNmeSBzZXNzaW9uIGF0dGVzdGF0aW9uIHNlbWFudGlj cy4gVGhlcmUgbWF5IGJlIG90aGVycy4NCg0KRnJvbTogQW5kZXJzIFJ1bmRncmVuIDxhbmRlcnMu cnVuZGdyZW4ubmV0QGdtYWlsLmNvbT4NCkRhdGU6IFdlZG5lc2RheSwgTm92ZW1iZXIgMjAsIDIw MTkgYXQgODoxMSBQTQ0KVG86ICJTbWl0aCwgTmVkIiA8bmVkLnNtaXRoQGludGVsLmNvbT4sIEth dGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4sIExhdXJl bmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KQ2M6ICJyYXRzQGlldGYub3Jn IiA8cmF0c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0c10gVHdvIHR5cGVzIG9mIHNlY3Vy ZSBhdHRlc3RhdGlvbg0KDQpBbmQgdGhlbiB5b3UgaGF2ZSB0aGUgb3V0Y29tZS9hY3Rpb24gb2Yg YW4gYXR0ZXN0YXRpb24gd2hpY2ggSSBndWVzcyBjdXJyZW50bHkgaXMgIlBhc3MiIG9yICJGYWls Ii4NCg0KQXMgc2hvd24gaW4gaHR0cHM6Ly9jeWJlcnBob25lLmdpdGh1Yi5pby9kb2MvcmVzZWFy Y2gvc2Vzc2lvbi1iYXNlZC1yZW1vdGUtYXR0ZXN0YXRpb24ucGRmICJQYXNzIiBtYXkgdmVyeSB3 ZWxsIHJldHVybiBhIG1vcmUgc29waGlzdGljYXRlZCByZXN1bHQsIGVuYWJsaW5nIGEgcHJvdGVj dGVkIEFQSSBpbiBhIHNlc3Npb24gYSBiaXQgc2ltaWxhciB0byBUTFMuDQoNCkFuZGVycw0KDQpP biAyMDE5LTExLTIwIDIyOjExLCBTbWl0aCwgTmVkIHdyb3RlOg0KVGhlcmUgYXJlIHNvbWUgbWlz cmVwcmVzZW50YXRpb25zIGluIHRoZSBhbmFseXNpcyBiZWxvdyAoSeKAmWxsIGNvbW1lbnQgaW5s aW5lIGJlbG93IHVzaW5nIFtubXNdIGRlbGltaXRlcnMpLiBJbiBnZW5lcmFsLCBJIGRvbuKAmXQg c2VlIGF0dGVzdGF0aW9uIHR5cGVzIGFzIGJlaW5nIGJpbmFyeS4gRGF2ZSBUaGFsZXLigJlzIGNo YXJ0IC8gdHJ1dGggdGFibGUgaW4gYW5vdGhlciB0aHJlYWQgc2VlbXMgdG8gc3VnZ2VzdCB0aGlz IGFzIHdlbGwgZ2l2ZW4gdGhlcmUgYXJlIG1hbnkgZGlmZmVyZW50IHR5cGVzIG9mIGF0dGVzdGlu ZyBlbnZpcm9ubWVudHMgKGFrYSByb290cyBvZiB0cnVzdCkuDQoNCkl0IG1pZ2h0IG1ha2Ugc2Vu c2UgdG8gaGF2ZSBkaXNjdXNzaW9uIGFyb3VuZCBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3Rp bmcgZW52aXJvbm1lbnRzIHZzLiBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3RlZCBlbnZpcm9u bWVudHM/IFRoZSBpbXBvcnRhbnQgc2VjdXJpdHkgcHJvcGVydHkgb2YgYXR0ZXN0aW5nIGVudmly b25tZW50cyBpcyB0aGV5IG9mdGVuIGFyZSByZWdhcmRlZCBhcyDigJx0cnVzdGVk4oCdIG1lYW5p bmcgdGhlcmUgaXNu4oCZdCBzb21lIG90aGVyIGF0dGVzdGluZyBlbnZpcm9ubWVudCB0aGF0IHZv dWNoZXMgZm9yIGl0Lg0KDQpBc3NvY2lhdGluZyBjbGFpbXMgdG8gYXR0ZXN0aW5nIGVudmlyb25t ZW50cyBvZnRlbiB0YWtlcyBhIGRpZmZlcmVudCBmcm9tIGF0dGVzdGF0aW9uIChhcyByZXByZXNl bnRlZCBieSB0aGUgcm9sZXMgLyBhcmNoIG1vZGVscyk7IG5hbWVseSB1c2luZyBjZXJ0aWZpY2F0 ZXMgaXNzdWVkIGJ5IHByb2R1Y3QgdmVuZG9ycyAod2hhdCB0aGUgYXJjaCBoYXMgY2FsbGVkIOKA mGFzc2VydGVyc+KAmSkuIENlcnRpZmljYXRlcyB0eXBpY2FsbHkgY29udGFpbiBpZGVudGl0eSBj bGFpbXMgYnV0IGNvdWxkIGNvbnRhaW4gYWRkaXRpb25hbCBjbGFpbXMuIFZlbmRvcnMgY291bGQg YWxzbyBzaWduIGFzc2VydCBjbGFpbXMgYnkgc2lnbmluZyBhIGRvY3VtZW50IHRoYXQgYXNzZXJ0 cyB0aGVtLiBUaGVzZSBjb3VsZCBiZSBtYW5pZmVzdHMsIGF0dHJpYnV0ZSBjZXJ0cywgaWRlbnRp dHkgY2VydHMgd2l0aCBjbGFpbXMgZXh0ZW5zaW9ucyBhbmQgcG9zc2libHkgZXZlbiBKV1QvQ1dU ICh0b2tlbnMpLiBJIGhhdmVu4oCZdCBzZWVuIGEgdXNlIGNhc2UgZm9yIHZlbmRvciBpc3N1ZWQg dG9rZW5zIGhvd2V2ZXIuIFBvc3NpYmx5IFBLSSB3aWxsIHRyYW5zaXRpb24gZnJvbSBYLjUwOSBi YXNlZCB0byBUb2tlbiBiYXNlZCBhdCBzb21lIHBvaW50IGluIHRoZSBmdXR1cmUsIGJ1dCBJIGV4 cGVjdCBpdCB3aWxsIHRha2UgYSB3aGlsZS4gVmVuZG9ycyBpc3N1aW5nIChzaWduaW5nKSBtYW5p ZmVzdHMgc2VlbXMgcmVhc29uYWJsZSBzaW5jZSBtYW55IGFscmVhZHkgY3JlYXRlIG1hbmlmZXN0 cyBmb3Igc29mdHdhcmUgZGlzdHJpYnV0aW9uIGFsc28gY2FsbGVkIHBhY2thZ2VzIC8gYnVuZGxl cy4gVGhlIHdvcmtmbG93IGZvciDigJhyZWZlcmVuY2UgdmFsdWVz4oCZIHdvdWxkIG5vdCBiZSBt dWNoIGRpZmZlcmVudCB0aGFuIGZvciBjcmVhdGluZyBhIFNXIHVwZGF0ZSBtYW5pZmVzdC4NCg0K RnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPjxtYWlsdG86cmF0cy1ib3VuY2VzQGll dGYub3JnPiBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVuLm1vcmlhcnR5 LmlldGZAZ21haWwuY29tPjxtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20+ DQpEYXRlOiBUdWVzZGF5LCBOb3ZlbWJlciAxOSwgMjAxOSBhdCA2OjAwIFBNDQpUbzogTGF1cmVu Y2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+PG1haWx0bzpsZ2xAaXNsYW5kLXJl c29ydC5jb20+DQpDYzogInJhdHNAaWV0Zi5vcmciPG1haWx0bzpyYXRzQGlldGYub3JnPiA8cmF0 c0BpZXRmLm9yZz48bWFpbHRvOnJhdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1JhdHNdIFR3 byB0eXBlcyBvZiBzZWN1cmUgYXR0ZXN0YXRpb24NCg0KSGkgTGF1cmVuY2UsDQoNCkkgcmVhZCB5 b3VyIG1lc3NhZ2UgYXMgdGhlcmUgb25seSBiZWluZyAyIHR5cGVzIG9mIGF0dGVzdGF0aW9uIGFz IG9wcG9zZWQgdG8gd2hhdCB5b3Ugc3RhdGVkIGluIHlvdXIgZm9sbG93IG9uIGVtYWlsLCB3aGlj aCBiZXR0ZXIgbWFwcyB0byB0aGUgcmVzdHJpY3RlZCBzZXQgaW4geW91ciBmaXJzdCBtZXNzYWdl Lg0KDQpUaGFua3MsDQpLYXRobGVlbg0KDQpPbiBUdWUsIE5vdiAxOSwgMjAxOSBhdCA4OjA3IFBN IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNs YW5kLXJlc29ydC5jb20+PiB3cm90ZToNCkhpIEthdGhsZWVuLA0KDQpOb3Qgc3VyZSBJ4oCZbSBm b2xsb3dpbmcgeW91ciB0aG91Z2h0IGNvbXBsZXRlbHkuDQoNCkZyb20gd2hhdCBJIGtub3cgb2Yg QXV0aGVudGljYXRlZCBCb290LCB0aGUgY29kZSBzaWduaW5nIGZvcm1hdHMgYXJlIHVzdWFsbHkg cHJvcHJpZXRhcnkgYW5kIGlkaW9zeW5jcmF0aWMuIFRoZSBmaXJzdCBzdGFnZXMgb2YgaXQgYXJl IGxpa2VseSBpbiB0cnVlIFJPTSAoY2hpcCBtZXRhbCBsYXllcikgYW5kIGNhbiBiZSB2ZXJ5IGFy Y2hpdGVjdHVyZSBhbmQgc3lzdGVtIHNwZWNpZmljIGFuZCB3b3VsZCBub3QgdXNlIENvU1dJRCBv ciBFQVQuDQoNCk15IGNvbW1lbnRzIGJlbG93IGFyZSBhYm91dCBnZXR0aW5nIGEgc3lzdGVtIGJv b3RlZCB1cCB0byBzdGF0ZSB3aGVyZSBpdCBrbm93biB0byBiZWhhdmUgYXMgZGVzaXJlZC4NCg0K T25jZSBpdCBpcyB1cCB0aGVuIHNpZ25lZCBDb1NXSURzIGluIEVBVHMgd291bGQgY29tZSBpbnRv IHBsYXkuIFRoZXkgY2FuIGJlIHRydXN0ZWQgYmVjYXVzZSB0aGUgYXR0ZXN0ZXIgYW5kIHN5c3Rl bSBTVyBrbm93biB0byBoYXZlIGJvb3RlZCB1cCBjb3JyZWN0bHkuIEtub3dpbmcgd2hvIHNpZ25l ZCBzb21lIFNXIGxpc3RlZCBpbiBhIENvU1dJRCBpcyBvbmx5IG9mIHZhbHVlIGlmIHlvdSBrbm93 IHRoZSBzeXN0ZW0gU1cgZGlkIHNpZ25hdHVyZSBjaGVja2luZyB3aGVuIGl0IGxvYWRlZCB0aGUg U1cgaXQgbGlzdGVkLiBGb3IgZXhhbXBsZSwgZXZlcnlvbmUga25vd3MgaG93IEFuZHJvaWQgYXBw IHNpZ25pbmcgd29ya3MsIHNvIGxpc3RpbmcgdGhlIHNpZ25lciBvZiBhbiBBbmRyb2lkIGFwcCBp cyBnb29kIHVzZWZ1bCBpbmZvcm1hdGlvbi4NCg0KSG9wZSB0aGF0IG1ha2VzIHNlbnNlIGluIHJl bGF0aW9uIHRvIHlvdXIgY29tbWVudC4NCg0KTEwNCg0KDQoNCg0KT24gTm92IDE5LCAyMDE5LCBh dCAxMDozNSBQTSwgS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21h aWwuY29tPG1haWx0bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4+IHdyb3RlOg0K DQpIaSBMYXVyZW5jZSwNCg0KV2hlcmUgZG9lcyB0aGUgY29kZSBzaWduaW5nIGV4YW1wbGUgZml0 IGluIHRoYXQgeW91IGdhdmUgYXMgaXQncyBub3QgcmVhbGx5IGFuIGF0dGVzdGF0aW9uLCBidXQg Y291bGQgYmUgdXNlZnVsIGluIHRoZSBmb3JtYXQgb2YgYW4gRUFUL0NXVD8gICBUaGlzIHF1ZXN0 aW9ucyBjb25zaWRlcnMgdGhlIENvU1dJRCBkaXNjdXNzaW9uIGFzIHdlbGwgYXMgYW5vdGhlciBl eGFtcGxlIHlvdSBoYWQgaW4geW91ciBzbGlkZXMgbGF0ZXIgKHdoaWNoIHdhcyByZWFsbHkgdGhl IHNhbWUpIG9uIGp1c3QgdmFsaWRhdGluZyB0aGUgY29kZSB3YXMgc2lnbmVkIGJ5IHRoZSBleHBl Y3RlZCBwcml2YXRlIGtleT8gIFNob3VsZCB0aGF0IGJlIGNhbGxlZCBhbiBhdHRlc3RhdGlvbiBv ciBqdXN0IHVzaW5nIHRoZSBmb3JtYXQgZm9yIHNpZ25pbmc/ICBZb3UgbWlnaHQgYWRkIGNsYWlt cyBpbiBhYm92ZSB3aGF0J3MgaW4gdGhlIENvU1dJRCBhbmQgdXNlIHRoZSBuZXN0aW5nIG9mIEVB VC9zdWJkb21haW5zIGFzIHdlbGwgYXMgcGVyZm9ybSByZW1vdGUgdmVyaWZpY2F0aW9uLg0KDQpU aGFua3MsDQpLYXRobGVlbg0KDQpPbiBUdWUsIE5vdiAxOSwgMjAxOSBhdCA4OjI2IEFNIExhdXJl bmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJl c29ydC4uY29tPj4gd3JvdGU6DQpGdW5kYW1lbnRhbGx5LCBJIHRoaW5rIHRoZXJlIGFyZSB0d28g d2F5cyB0aGF0IGFuIGF0dGVzdGF0aW9uIHZlcmlmaWVyIGNvbWVzIHRvIGtub3cgdGhhdCBhIGRl dmljZSAvIGVudGl0eSBpcyBydW5uaW5nIGFwcHJvdmVkIFNXIGFuZCB3aWxsIGJlaGF2ZSBhcyBk ZXNpcmVkLg0KDQpUUE0gYmFzZWQNCsK3ICAgICAgICAgT3JpZ2luYXRlcyBpbiB0aGUgUEMgd29y bGQgd2hlcmUgdGhlIGVuZCB1c2VyIGhhZCB0byBiZSBhYmxlIHRvIGNob29zZSB0aGUgc3lzdGVt IFNXDQpbbm1zXSBOb3Qgc3VyZSB3aGF0IHJlbGV2YW5jZSB0byBhdHRlc3RhdGlvbiBzaG91bGQg YmUgYXNjcmliZWQgYmVjYXVzZSBvZiBob3cgVFBNcyBvcmlnaW5hdGVkLg0KwrcgICAgICAgICBI YXMgYSBUUE0gdGhhdCBwZXJmb3JtcyBhIGdlbmVyYWwgbWVhc3VyaW5nIGZ1bmN0aW9uDQrCpyAg SGFzIGFuIGF0dGVzdGF0aW9uIHNpZ25pbmcga2V5IGZvciBzaWduaW5nIG1lYXN1cmVtZW50cyB0 aGF0IGlzIGtlcHQgc2VjcmV0IGJ5IHRoZSBUUE0NCm8gICAgVFBNIGlzIGdlbmVyaWMgYXMgaXQg Y2FuIGJlIHVzZWQgZm9yIFBD4oCZcywgcm91dGVycywgSW9UIGRldmljZXMNCltubXNdIFByb2Zp bGVzIGZvciBob3cgdG8gYWRhcHQgVFBNIGZvciB1c2UgaW4gc3BlY2lmaWMgcGxhdGZvcm0gY2xh c3NlcyBpcyBnZW5lcmFsbHkgcmVxdWlyZWQuDQrCtyAgICAgICAgIEF1dGhlbnRpY2F0ZWQgYm9v dCBpcyBvcHRpb25hbA0KW25tc10gSSB0aGluayB0aGUgaW5kdXN0cnkgYWxzbyB1c2VzIHRoZSB0 ZXJtIOKAmHNlY3VyZSBib2904oCZLiBUUE0gc3VwcG9ydHMgYXR0ZXN0YXRpb24gKG9mIHRoZSBi b290IHNlcXVlbmNlKSB3aGlsZSBhIHNlY3VyZSBib290IGFwcHJvYWNoIGRvZXNu4oCZdCBpbXBs eSBhdHRlc3RhdGlvbiBpcyBuZWVkZWQvdXNlZC4NCltubXNdIEJvb3QgYmVoYXZpb3IgaXMgbW9y ZSBhIHByb3BlcnR5IG9mIHRoZSBSb290IG9mIFRydXN0IGZvciBNZWFzdXJlbWVudCAoUlRNKSB0 aGFuIGEgVFBNLiBUaGVyZSBhcmUgbWFueSB0eXBlcyBvZiBSVE0gdGVjaG5vbG9neSBtb3N0IHNp bXBseSBpdCBpcyBhIGJvb3QgUk9NLg0KwrcgICAgICAgICBVc2VzIGEgc3RhZ2VkIGJvb3QgYXJj aGl0ZWN0dXJlIHdoZXJlIGVhY2ggc3RhZ2UgbXVzdCBtZWFzdXJlIChoYXNoKSB0aGUgZm9sbG93 aW5nIHN0YWdlDQpbbm1zXSBCb290IGFyY2hpdGVjdHVyZSBpcyBkZXRlcm1pbmVkIGJ5IHRoZSB0 eXBlIG9mIGRldmljZSAvIHBsYXRmb3JtIG5vdCB0aGUgVFBNLiBTdGFnZWQgYm9vdCBzZXF1ZW5j ZXMgYXJlIGZhaXJseSBjb21tb24gYWNyb3NzIHRoZSBpbmR1c3RyeS4gSGVuY2UgdGhlIHRlcm0g 4oCYYm9vdHN0cmFw4oCZLg0KbyAgICBIYXNoZXMgZmVkIGludG8gdGhlIFRQTQ0KbyAgICBUUE0g Z2VuZXJhdGVzIHRoZSBhdHRlc3RhdGlvbiBvZiB0aGUgcmVnaXN0ZXJzIGhvbGRpbmcgdGhlIGhh c2hlcw0KwrcgICAgICAgICBEZXZpY2UgY29zdCByYWlzZWQgYnkgY29zdCBvZiBUUE0gcGFydA0K W25tc10gTm90IHN1cmUgaG93IHRoaXMgaXMgcmVsZXZhbnQgdG8gUkFUUw0KwrcgICAgICAgICBU aGUgdmVyaWZpZXIgbXVzdCBydW4gYSBwYXJhbGxlbCBzZXQgb2YgbWVhc3VyZW1lbnRzIChoYXNo ZXMpDQpvICAgIFZlcmlmaWVyIGlzIGNvbXBsZXgNCltubXNdIGFzIGNvbXBhcmVkIHRvIHdoYXQ/ DQoNCkF1dGhlbnRpY2F0ZWQgQm9vdCBiYXNlZA0KwrcgICAgICAgICBPcmlnaW5zIGluIG1vYmls ZSBwaG9uZSwgVEVFIGFuZCBEUk0gd29ybGQgd2hlcmUgdGhlIHVzZXIgY2FuIE5PVCBjaG9vc2Ug dGhlIHN5c3RlbSBTVw0KwrcgICAgICAgICBBdXRoZW50aWNhdGVkIGJvb3QgaXMgcmVxdWlyZWQN Cm8gICAgVXNlcyBhIGJvb3QgUk9NIHRoYXQgcmVhbGx5IGlzIGEgUk9NLCBwcm9iYWJseSBpbiBz aWxpY29uIChub3QgZmxhc2gpLCB0aGF0IGNhbiBOT1QgYmUgY2hhbmdlZA0KW25tc10gVGhpcyBp cyB0cnVlIGZvciBwbGF0Zm9ybXMgdXNpbmcgYSBUUE0gYXMgd2VsbC4NCm8gICAgQm9vdCBST00g dmVyaWZpZXMgdGhlIFNXIHRoYXQgaXMgbG9hZGVkLCBwYXJ0aWN1bGFyIHRoZSB0b3AgcHJpdmls ZWdlIChlLmcuIGtlcm5lbCkgU1cNCltubXNdIFZlcmlmaWNhdGlvbiBpbXBsaWVzIHRoZSBhYmls aXR5IHRvIGRldGVybWluZSBib290IGNvZGUgaW50ZWdyaXR5LiBUaGlzIGlzIGNvbW1vbiB0byBw bGF0Zm9ybXMgdGhhdCB1c2UgYSBUUE0uDQpvICAgIEEgZ29vZCBpbXBsZW1lbnRhdGlvbiBoYXMg YW50aS1yb2xsYmFjayB0byBwcmV2ZW50IG9sZCB2ZXJzaW9ucyBvZiBTVyBmcm9tIGJlaW5nIHJ1 bg0KwrcgICAgICAgICBIYXMgYW4gYXR0ZXN0YXRpb24gc2lnbmluZyBrZXkgdGhhdCBpcyBwcm9n cmFtbWVkIGluIGZ1c2VzIG9yIHBvc3NpYmx5IGluIGZsYXNoDQpbbm1zXSBUaGlzIGlzIGNvbW1v bmx5IHRydWUgZm9yIFRQTSBiYXNlZCBhdHRlc3RhdGlvbiBpbXBsZW1lbnRhdGlvbnMuDQpvICAg IEhhcyBhIEhXIGJsb2NrIHRoYXQgcHJldmVudHMgYWNjZXNzIHRvIHRoZSBhdHRlc3RhdGlvbiBr ZXkgdW5sZXNzIGF1dGhlbnRpY2F0ZWQgYm9vdCBzdWNjZWVkcw0KW25tc10gVGhpcyBpcyBhbHNv IHRydWUgZm9yIHNvbHV0aW9ucyB0aGF0IHdpc2ggdG8gaW1wbGVtZW50IHNlY3VyZSBib290IHVz aW5nIGEgVFBNLg0KbyAgICBPbmx5IHRvcCBwcml2aWxlZ2UgU1cgY2FuIHVzZSBpdA0KW25tc10g VFBNIGF0dGVzdGF0aW9uIGtleXMgaGF2ZSByZXN0cmljdGlvbnMgb24gdXNlIGFzIHdlbGwuDQrC tyAgICAgICAgIEF0dGVzdGF0aW9ucyBhcmUgY3JlYXRlZCBpbiB0aGUgdG9wLXByaXZpbGVnZSBT Vw0KbyAgICBTaW1wbHkgc2lnbmluZyBhIG5vbmNlIHByb3ZlcyB0aGUgZGV2aWNlIGlzIHJ1bm5p bmcgYXBwcm92ZWQgU1cNCltubXNdIFRoZSBzZWN1cml0eSBwcm9wZXJ0aWVzIG9mIHRoZSBzaWdu aW5nIGtleSAoYXR0ZXN0YXRpb24ga2V5KSBhcmUgYSBmdW5jdGlvbiBvZiB0aGUgY2xhaW1zIHRo YXQgdGhlIG1hbnVmYWN0dXJlcnMgbWFrZSBhYm91dCB0aGUgZW52aXJvbm1lbnQgdGhhdCBwcm90 ZWN0cyB0aGUga2V5LiBUaGlzIGlzIHRydWUgZm9yIFRQTSBhcyB3ZWxsIGFzIGFueSBvdGhlciBy b290IG9mIHRydXN0IC8gYXR0ZXN0aW5nIGVudmlyb25tZW50Lg0KbyAgICBFYXN5IHRvIGFkZCBv dGhlciBjbGFpbXMgaW4g4oCUPiBFQVQNCltubXNdIHJlbGF0aXZlIHRvIHdoYXQ/DQrCtyAgICAg ICAgIERldmljZSBjb3N0IHJhaXNlZCBieSBuZWVkIGZvciBzZWN1cmUga2V5IHByb3Zpc2lvbmlu ZyBpbiB0aGUgZmFjdG9yeQ0KwrcgICAgICAgICBWZXJpZmllciBpcyB2ZXJ5IHNpbXBsZQ0KbyAg ICBKdXN0IG5lZWRzIHRvIHZlcmlmeSB0aGUgc2lnbmF0dXJlIGFuZCBub25jZQ0KW25tc10gVGhl IHZlcmlmaWVyIGlzIGFsc28gaW50ZWdyYXRlZCBpbnRvIHRoZSBib290IGNvZGUuIFRoZXNlIHZl cmlmaWVycyBuZWVkIHRvIGJlIHByb3Zpc2lvbmVkIHdpdGggYm9vdCBzdGF0ZSBwb2xpY2llcyBh bmQgc28gZm9ydGguIFNlY3VyZSBib290IGlzIGFuIGV4YW1wbGUgb2YgdGhlIGNvbWJpbmluZyBv ZiBBdHRlc3RlciBhbmQgVmVyaWZpZXIgcm9sZXMuDQoNCkJvdGggcHJvdmlkZSBhY2NlcHRhYmxl IHNlY3VyaXR5IGZvciB0aGVpciB1c2UgY2FzZXMgYW5kIGFyZSBicm9hZGx5IGluIHVzZS4NCg0K UkFUUyBuZWVkcyB0byBzdXBwb3J0IGJvdGguDQpbbm1zXSBJbiB3aGF0IHdheXMgZG9lcyBSQVRT IG5vdCBzdXBwb3J0IGJvdGg/DQoNCkxMDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KUkFUUyBtYWlsaW5nIGxpc3QNClJBVFNAaWV0Zi5vcmc8bWFpbHRv OlJBVFNAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Jh dHMNCg0KDQotLQ0KDQpCZXN0IHJlZ2FyZHMsDQpLYXRobGVlbg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGll dGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9yYXRzDQoNCg0KDQotLQ0KDQpCZXN0IHJlZ2FyZHMsDQpLYXRobGVlbg0KDQoN Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KUkFU UyBtYWlsaW5nIGxpc3QNCg0KUkFUU0BpZXRmLm9yZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQoNCg0K --_000_BFECEE8E3E83475A9C3A8033F4A9E9F4intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <79E5E673BFEBD84C846D61D333AF6B95@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFs MA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJn aW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJl Zm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvbnNvbGFzO30NCnNwYW4uRW1h aWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1 bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpA cGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEu MGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7 fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NjU2MDM1 MDIzOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotOTI5NTAwMjEyO30NCkBsaXN0IGwwOmxldmVs MQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3Rv cDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3IjsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlz dCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBs MDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMQ0KCXttc28tbGlzdC1pZDoxMTQ0MDgzNjcxOw0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotNTA5ODE3ODgwO30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZv bnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28tYmlkaS1m b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDkN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMg0KCXttc28tbGlzdC1pZDoyMTMyMDg1OTAx Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMzA4Mzc5MTIyO30NCkBsaXN0IGwyOmxldmVsMQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0K CW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDI6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDox LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3IjsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBs MjpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDQNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5n czt9DQpAbGlzdCBsMjpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5z aS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjps ZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0 Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAu MHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9 DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQot LT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5r PSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoZSBUVURBIGRyYWZ0IG1pZ2h0IHNhdGlzZnkgc2Vzc2lvbiBhdHRlc3RhdGlvbiBzZW1h bnRpY3MuIFRoZXJlIG1heSBiZSBvdGhlcnMuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkFuZGVycyBSdW5kZ3JlbiAm bHQ7YW5kZXJzLnJ1bmRncmVuLm5ldEBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldl ZG5lc2RheSwgTm92ZW1iZXIgMjAsIDIwMTkgYXQgODoxMSBQTTxicj4NCjxiPlRvOiA8L2I+JnF1 b3Q7U21pdGgsIE5lZCZxdW90OyAmbHQ7bmVkLnNtaXRoQGludGVsLmNvbSZndDssIEthdGhsZWVu IE1vcmlhcnR5ICZsdDtrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbSZndDssIExhdXJl bmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxicj4NCjxiPkNjOiA8 L2I+JnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7cmF0c0BpZXRmLm9yZyZndDs8YnI+DQo8 Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSBUd28gdHlwZXMgb2Ygc2VjdXJlIGF0dGVzdGF0aW9u PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkFu ZCB0aGVuIHlvdSBoYXZlIHRoZSBvdXRjb21lL2FjdGlvbiBvZiBhbiBhdHRlc3RhdGlvbiB3aGlj aCBJIGd1ZXNzIGN1cnJlbnRseSBpcyAmcXVvdDtQYXNzJnF1b3Q7IG9yICZxdW90O0ZhaWwmcXVv dDsuPGJyPg0KPGJyPg0KQXMgc2hvd24gaW4gPGEgaHJlZj0iaHR0cHM6Ly9jeWJlcnBob25lLmdp dGh1Yi5pby9kb2MvcmVzZWFyY2gvc2Vzc2lvbi1iYXNlZC1yZW1vdGUtYXR0ZXN0YXRpb24ucGRm Ij4NCmh0dHBzOi8vY3liZXJwaG9uZS5naXRodWIuaW8vZG9jL3Jlc2VhcmNoL3Nlc3Npb24tYmFz ZWQtcmVtb3RlLWF0dGVzdGF0aW9uLnBkZjwvYT4gJnF1b3Q7UGFzcyZxdW90OyBtYXkgdmVyeSB3 ZWxsIHJldHVybiBhIG1vcmUgc29waGlzdGljYXRlZCByZXN1bHQsIGVuYWJsaW5nIGEgcHJvdGVj dGVkIEFQSSBpbiBhIHNlc3Npb24gYSBiaXQgc2ltaWxhciB0byBUTFMuPGJyPg0KPGJyPg0KQW5k ZXJzPGJyPg0KPGJyPg0KT24gMjAxOS0xMS0yMCAyMjoxMSwgU21pdGgsIE5lZCB3cm90ZTo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+VGhlcmUgYXJlIHNvbWUgbWlzcmVwcmVzZW50YXRpb25zIGluIHRoZSBhbmFs eXNpcyBiZWxvdyAoSeKAmWxsIGNvbW1lbnQgaW5saW5lIGJlbG93IHVzaW5nIFtubXNdIGRlbGlt aXRlcnMpLiBJbiBnZW5lcmFsLCBJIGRvbuKAmXQgc2VlIGF0dGVzdGF0aW9uIHR5cGVzIGFzIGJl aW5nIGJpbmFyeS4gRGF2ZSBUaGFsZXLigJlzIGNoYXJ0IC8gdHJ1dGggdGFibGUgaW4gYW5vdGhl cg0KIHRocmVhZCBzZWVtcyB0byBzdWdnZXN0IHRoaXMgYXMgd2VsbCBnaXZlbiB0aGVyZSBhcmUg bWFueSBkaWZmZXJlbnQgdHlwZXMgb2YgYXR0ZXN0aW5nIGVudmlyb25tZW50cyAoYWthIHJvb3Rz IG9mIHRydXN0KS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkl0IG1pZ2h0IG1ha2Ugc2Vuc2UgdG8gaGF2 ZSBkaXNjdXNzaW9uIGFyb3VuZCBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3RpbmcgZW52aXJv bm1lbnRzIHZzLiBjbGFpbXMgdGhhdCBhcHBseSB0byBhdHRlc3RlZCBlbnZpcm9ubWVudHM/IFRo ZSBpbXBvcnRhbnQgc2VjdXJpdHkgcHJvcGVydHkgb2YgYXR0ZXN0aW5nIGVudmlyb25tZW50cyBp cyB0aGV5IG9mdGVuIGFyZQ0KIHJlZ2FyZGVkIGFzIOKAnHRydXN0ZWTigJ0gbWVhbmluZyB0aGVy ZSBpc27igJl0IHNvbWUgb3RoZXIgYXR0ZXN0aW5nIGVudmlyb25tZW50IHRoYXQgdm91Y2hlcyBm b3IgaXQuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5Bc3NvY2lhdGluZyBjbGFpbXMgdG8gYXR0ZXN0aW5n IGVudmlyb25tZW50cyBvZnRlbiB0YWtlcyBhIGRpZmZlcmVudCBmcm9tIGF0dGVzdGF0aW9uIChh cyByZXByZXNlbnRlZCBieSB0aGUgcm9sZXMgLyBhcmNoIG1vZGVscyk7IG5hbWVseSB1c2luZyBj ZXJ0aWZpY2F0ZXMgaXNzdWVkIGJ5IHByb2R1Y3QgdmVuZG9ycyAod2hhdCB0aGUgYXJjaCBoYXMg Y2FsbGVkIOKAmGFzc2VydGVyc+KAmSkuDQogQ2VydGlmaWNhdGVzIHR5cGljYWxseSBjb250YWlu IGlkZW50aXR5IGNsYWltcyBidXQgY291bGQgY29udGFpbiBhZGRpdGlvbmFsIGNsYWltcy4gVmVu ZG9ycyBjb3VsZCBhbHNvIHNpZ24gYXNzZXJ0IGNsYWltcyBieSBzaWduaW5nIGEgZG9jdW1lbnQg dGhhdCBhc3NlcnRzIHRoZW0uIFRoZXNlIGNvdWxkIGJlIG1hbmlmZXN0cywgYXR0cmlidXRlIGNl cnRzLCBpZGVudGl0eSBjZXJ0cyB3aXRoIGNsYWltcyBleHRlbnNpb25zIGFuZCBwb3NzaWJseQ0K IGV2ZW4gSldUL0NXVCAodG9rZW5zKS4gSSBoYXZlbuKAmXQgc2VlbiBhIHVzZSBjYXNlIGZvciB2 ZW5kb3IgaXNzdWVkIHRva2VucyBob3dldmVyLiBQb3NzaWJseSBQS0kgd2lsbCB0cmFuc2l0aW9u IGZyb20gWC41MDkgYmFzZWQgdG8gVG9rZW4gYmFzZWQgYXQgc29tZSBwb2ludCBpbiB0aGUgZnV0 dXJlLCBidXQgSSBleHBlY3QgaXQgd2lsbCB0YWtlIGEgd2hpbGUuIFZlbmRvcnMgaXNzdWluZyAo c2lnbmluZykgbWFuaWZlc3RzIHNlZW1zIHJlYXNvbmFibGUNCiBzaW5jZSBtYW55IGFscmVhZHkg Y3JlYXRlIG1hbmlmZXN0cyBmb3Igc29mdHdhcmUgZGlzdHJpYnV0aW9uIGFsc28gY2FsbGVkIHBh Y2thZ2VzIC8gYnVuZGxlcy4gVGhlIHdvcmtmbG93IGZvciDigJhyZWZlcmVuY2UgdmFsdWVz4oCZ IHdvdWxkIG5vdCBiZSBtdWNoIGRpZmZlcmVudCB0aGFuIGZvciBjcmVhdGluZyBhIFNXIHVwZGF0 ZSBtYW5pZmVzdC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5SQVRTIDxh IGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPg0KJmx0O3JhdHMtYm91bmNlc0Bp ZXRmLm9yZyZndDs8L2E+IG9uIGJlaGFsZiBvZiBLYXRobGVlbiBNb3JpYXJ0eSA8YSBocmVmPSJt YWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20iPg0KJmx0O2thdGhsZWVuLm1v cmlhcnR5LmlldGZAZ21haWwuY29tJmd0OzwvYT48YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwg Tm92ZW1iZXIgMTksIDIwMTkgYXQgNjowMCBQTTxicj4NCjxiPlRvOiA8L2I+TGF1cmVuY2UgTHVu ZGJsYWRlIDxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPiZsdDtsZ2xAaXNs YW5kLXJlc29ydC5jb20mZ3Q7PC9hPjxicj4NCjxiPkNjOiA8L2I+PGEgaHJlZj0ibWFpbHRvOnJh dHNAaWV0Zi5vcmciPiZxdW90O3JhdHNAaWV0Zi5vcmcmcXVvdDs8L2E+IDxhIGhyZWY9Im1haWx0 bzpyYXRzQGlldGYub3JnIj4NCiZsdDtyYXRzQGlldGYub3JnJmd0OzwvYT48YnI+DQo8Yj5TdWJq ZWN0OiA8L2I+UmU6IFtSYXRzXSBUd28gdHlwZXMgb2Ygc2VjdXJlIGF0dGVzdGF0aW9uPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+SGkgTGF1 cmVuY2UsIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkkgcmVhZCB5 b3VyIG1lc3NhZ2UgYXMgdGhlcmUgb25seSBiZWluZyZuYnNwOzIgdHlwZXMgb2YgYXR0ZXN0YXRp b24gYXMgb3Bwb3NlZCB0byB3aGF0IHlvdSBzdGF0ZWQgaW4geW91ciBmb2xsb3cgb24gZW1haWws IHdoaWNoJm5ic3A7YmV0dGVyIG1hcHMgdG8gdGhlIHJlc3RyaWN0ZWQgc2V0IGluIHlvdXIgZmly c3QgbWVzc2FnZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPk9uIFR1ZSwgTm92IDE5LCAyMDE5IGF0 IDg6MDcgUE0gTGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFu ZC1yZXNvcnQuY29tIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjEuMGluIj5IaSBLYXRobGVlbiwgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDox LjBpbiI+Tm90IHN1cmUgSeKAmW0gZm9sbG93aW5nIHlvdXIgdGhvdWdodCBjb21wbGV0ZWx5LiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPkZyb20gd2hhdCBJIGtub3cgb2YgQXV0aGVudGljYXRlZCBCb290LCB0aGUgY29kZSBzaWdu aW5nIGZvcm1hdHMgYXJlIHVzdWFsbHkgcHJvcHJpZXRhcnkgYW5kIGlkaW9zeW5jcmF0aWMuIFRo ZSBmaXJzdCBzdGFnZXMgb2YgaXQgYXJlIGxpa2VseSBpbiB0cnVlIFJPTSAoY2hpcCBtZXRhbCBs YXllcikgYW5kIGNhbiBiZSB2ZXJ5IGFyY2hpdGVjdHVyZSBhbmQgc3lzdGVtDQogc3BlY2lmaWMg YW5kIHdvdWxkIG5vdCB1c2UgQ29TV0lEIG9yIEVBVC4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBp biI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPk15IGNvbW1lbnRzIGJlbG93IGFyZSBhYm91 dCBnZXR0aW5nIGEgc3lzdGVtIGJvb3RlZCB1cCB0byBzdGF0ZSB3aGVyZSBpdCBrbm93biB0byBi ZWhhdmUgYXMgZGVzaXJlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPk9uY2UgaXQgaXMgdXAgdGhlbiBzaWduZWQgQ29TV0lEcyBpbiBFQVRzIHdvdWxk IGNvbWUgaW50byBwbGF5LiBUaGV5IGNhbiBiZSB0cnVzdGVkIGJlY2F1c2UgdGhlIGF0dGVzdGVy IGFuZCBzeXN0ZW0gU1cga25vd24gdG8gaGF2ZSBib290ZWQgdXAgY29ycmVjdGx5LiBLbm93aW5n IHdobyBzaWduZWQgc29tZSBTVyBsaXN0ZWQgaW4gYSBDb1NXSUQgaXMgb25seSBvZg0KIHZhbHVl IGlmIHlvdSBrbm93IHRoZSBzeXN0ZW0gU1cgZGlkIHNpZ25hdHVyZSBjaGVja2luZyB3aGVuIGl0 IGxvYWRlZCB0aGUgU1cgaXQgbGlzdGVkLiBGb3IgZXhhbXBsZSwgZXZlcnlvbmUga25vd3MgaG93 IEFuZHJvaWQgYXBwIHNpZ25pbmcgd29ya3MsIHNvIGxpc3RpbmcgdGhlIHNpZ25lciBvZiBhbiBB bmRyb2lkIGFwcCBpcyBnb29kIHVzZWZ1bCBpbmZvcm1hdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBp biI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkhvcGUgdGhhdCBtYWtlcyBzZW5zZSBpbiBy ZWxhdGlvbiB0byB5b3VyIGNvbW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjEuMGluIj5MTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDoxLjBpbiI+PGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPk9uIE5vdiAxOSwg MjAxOSwgYXQgMTA6MzUgUE0sIEthdGhsZWVuIE1vcmlhcnR5ICZsdDs8YSBocmVmPSJtYWlsdG86 a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5rYXRobGVl bi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkhpIExhdXJlbmNlLCA8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5XaGVyZSBkb2VzIHRoZSBjb2RlIHNpZ25pbmcgZXhhbXBs ZSBmaXQgaW4gdGhhdCB5b3UgZ2F2ZSBhcyBpdCdzIG5vdCByZWFsbHkgYW4gYXR0ZXN0YXRpb24s IGJ1dCBjb3VsZCBiZSB1c2VmdWwgaW4gdGhlIGZvcm1hdCBvZiBhbiBFQVQvQ1dUPyZuYnNwOyAm bmJzcDtUaGlzIHF1ZXN0aW9ucyBjb25zaWRlcnMgdGhlIENvU1dJRCBkaXNjdXNzaW9uIGFzIHdl bGwgYXMgYW5vdGhlciBleGFtcGxlDQogeW91IGhhZCBpbiB5b3VyIHNsaWRlcyBsYXRlciAod2hp Y2ggd2FzIHJlYWxseSB0aGUgc2FtZSkgb24ganVzdCB2YWxpZGF0aW5nIHRoZSBjb2RlIHdhcyBz aWduZWQgYnkgdGhlIGV4cGVjdGVkIHByaXZhdGUga2V5PyZuYnNwOyBTaG91bGQgdGhhdCBiZSBj YWxsZWQgYW4gYXR0ZXN0YXRpb24gb3IganVzdCB1c2luZyB0aGUgZm9ybWF0IGZvciBzaWduaW5n PyZuYnNwOyBZb3UgbWlnaHQgYWRkIGNsYWltcyBpbiZuYnNwO2Fib3ZlJm5ic3A7d2hhdCdzIGlu IHRoZSBDb1NXSUQgYW5kDQogdXNlIHRoZSBuZXN0aW5nIG9mIEVBVC9zdWJkb21haW5zIGFzIHdl bGwgYXMgcGVyZm9ybSByZW1vdGUgdmVyaWZpY2F0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5L YXRobGVlbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+ T24gVHVlLCBOb3YgMTksIDIwMTkgYXQgODoyNiBBTSBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0Ozxh IGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC4uY29tIiB0YXJnZXQ9Il9ibGFuayI+bGds QGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0ND IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+RnVuZGFtZW50 YWxseSwgSSB0aGluayB0aGVyZSBhcmUgdHdvIHdheXMgdGhhdCBhbiBhdHRlc3RhdGlvbiB2ZXJp ZmllciBjb21lcyB0byBrbm93IHRoYXQgYSBkZXZpY2UgLyBlbnRpdHkgaXMgcnVubmluZyBhcHBy b3ZlZCBTVyBhbmQgd2lsbCBiZWhhdmUgYXMgZGVzaXJlZC4NCjxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxiPlRQTSBiYXNlZDwvYj48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjVpbjt0ZXh0 LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48 c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+T3JpZ2lu YXRlcyBpbiB0aGUgUEMgd29ybGQgd2hlcmUgdGhlIGVuZCB1c2VyIGhhZCB0byBiZSBhYmxlIHRv IGNob29zZSB0aGUgc3lzdGVtIFNXPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bWFyZ2luLWxlZnQ6LjVpbiI+DQpbbm1zXSBOb3Qgc3VyZSB3aGF0IHJlbGV2YW5jZSB0byBh dHRlc3RhdGlvbiBzaG91bGQgYmUgYXNjcmliZWQgYmVjYXVzZSBvZiBob3cgVFBNcyBvcmlnaW5h dGVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEu NWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAh c3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpT eW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6 Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlm XT5IYXMgYSBUUE0gdGhhdCBwZXJmb3JtcyBhIGdlbmVyYWwgbWVhc3VyaW5nIGZ1bmN0aW9uDQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttYXJnaW4tcmlnaHQ6LjVpbjttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztt YXJnaW4tbGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwzIGxm bzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7Cpzxz cGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7 DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+SGFzIGFuIGF0dGVzdGF0aW9uIHNpZ25p bmcga2V5IGZvciBzaWduaW5nIG1lYXN1cmVtZW50cyB0aGF0IGlzIGtlcHQgc2VjcmV0IGJ5IHRo ZSBUUE0NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0 OjIuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDIgbGZvMiI+DQo8IVtp ZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+ bzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5i c3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+VFBNIGlzIGdl bmVyaWMgYXMgaXQgY2FuIGJlIHVzZWQgZm9yIFBD4oCZcywgcm91dGVycywgSW9UIGRldmljZXM8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4N CltubXNdIFByb2ZpbGVzIGZvciBob3cgdG8gYWRhcHQgVFBNIGZvciB1c2UgaW4gc3BlY2lmaWMg cGxhdGZvcm0gY2xhc3NlcyBpcyBnZW5lcmFsbHkgcmVxdWlyZWQuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS41aW47dGV4dC1pbmRlbnQ6LS4yNWlu O21zby1saXN0OmwwIGxldmVsMSBsZm8yIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1z by1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkF1dGhlbnRpY2F0ZWQgYm9vdCBp cyBvcHRpb25hbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1s ZWZ0Oi41aW4iPg0KW25tc10gSSB0aGluayB0aGUgaW5kdXN0cnkgYWxzbyB1c2VzIHRoZSB0ZXJt IOKAmHNlY3VyZSBib2904oCZLiBUUE0gc3VwcG9ydHMgYXR0ZXN0YXRpb24gKG9mIHRoZSBib290 IHNlcXVlbmNlKSB3aGlsZSBhIHNlY3VyZSBib290IGFwcHJvYWNoIGRvZXNu4oCZdCBpbXBseSBh dHRlc3RhdGlvbiBpcyBuZWVkZWQvdXNlZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCltubXNdIEJvb3QgYmVoYXZpb3IgaXMgbW9yZSBh IHByb3BlcnR5IG9mIHRoZSBSb290IG9mIFRydXN0IGZvciBNZWFzdXJlbWVudCAoUlRNKSB0aGFu IGEgVFBNLiBUaGVyZSBhcmUgbWFueSB0eXBlcyBvZiBSVE0gdGVjaG5vbG9neSBtb3N0IHNpbXBs eSBpdCBpcyBhIGJvb3QgUk9NLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv O21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEg bGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PC9zcGFuPjwhW2VuZGlmXT5Vc2VzIGEgc3RhZ2VkIGJvb3QgYXJjaGl0ZWN0dXJlIHdoZXJlIGVh Y2ggc3RhZ2UgbXVzdCBtZWFzdXJlIChoYXNoKSB0aGUgZm9sbG93aW5nIHN0YWdlDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCltubXNd IEJvb3QgYXJjaGl0ZWN0dXJlIGlzIGRldGVybWluZWQgYnkgdGhlIHR5cGUgb2YgZGV2aWNlIC8g cGxhdGZvcm0gbm90IHRoZSBUUE0uIFN0YWdlZCBib290IHNlcXVlbmNlcyBhcmUgZmFpcmx5IGNv bW1vbiBhY3Jvc3MgdGhlIGluZHVzdHJ5LiBIZW5jZSB0aGUgdGVybSDigJhib290c3RyYXDigJku DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoyLjBp bjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzIiPg0KPCFbaWYgIXN1 cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPm88c3Bh biBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkhhc2hlcyBmZWQgaW50 byB0aGUgVFBNPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxl ZnQ6Mi4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMiBsZm8yIj4NCjwh W2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3Jl Ij5vPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5UUE0gZ2Vu ZXJhdGVzIHRoZSBhdHRlc3RhdGlvbiBvZiB0aGUgcmVnaXN0ZXJzIGhvbGRpbmcgdGhlIGhhc2hl czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuNWlu O3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3Vw cG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1i b2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5E ZXZpY2UgY29zdCByYWlzZWQgYnkgY29zdCBvZiBUUE0gcGFydDxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4iPg0KW25tc10gTm90IHN1cmUgaG93 IHRoaXMgaXMgcmVsZXZhbnQgdG8gUkFUUzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBs ZXZlbDEgbGZvMiI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUi PsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48 L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5UaGUgdmVyaWZpZXIgbXVzdCBydW4gYSBwYXJhbGxlbCBz ZXQgb2YgbWVhc3VyZW1lbnRzIChoYXNoZXMpDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6 bDAgbGV2ZWwyIGxmbzIiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0 eWxlPSJtc28tbGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3Nw YW4+PCFbZW5kaWZdPlZlcmlmaWVyIGlzIGNvbXBsZXg8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCltubXNdIGFzIGNvbXBhcmVkIHRvIHdo YXQ/PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48Yj5B dXRoZW50aWNhdGVkIEJvb3QgYmFzZWQ8L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS41aW47dGV4dC1pbmRlbnQ6LS4y NWluO21zby1saXN0OmwyIGxldmVsMSBsZm81Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9 Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPk9yaWdpbnMgaW4gbW9iaWxl IHBob25lLCBURUUgYW5kIERSTSB3b3JsZCB3aGVyZSB0aGUgdXNlciBjYW4gTk9UIGNob29zZSB0 aGUgc3lzdGVtIFNXPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2lu LWxlZnQ6MS41aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwyIGxldmVsMSBsZm81Ij4N CjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8c3BhbiBzdHls ZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+ PCFbZW5kaWZdPkF1dGhlbnRpY2F0ZWQgYm9vdCBpcyByZXF1aXJlZCA8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1 aW47bXNvLWxpc3Q6bDIgbGV2ZWwyIGxmbzUiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBw dCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFu Pjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPlVzZXMgYSBib290IFJPTSB0aGF0IHJlYWxseSBpcyBh IFJPTSwgcHJvYmFibHkgaW4gc2lsaWNvbiAobm90IGZsYXNoKSwgdGhhdCBjYW4gTk9UIGJlIGNo YW5nZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDou NWluIj4NCltubXNdIFRoaXMgaXMgdHJ1ZSBmb3IgcGxhdGZvcm1zIHVzaW5nIGEgVFBNIGFzIHdl bGwuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6Mi4w aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwyIGxldmVsMiBsZm81Ij4NCjwhW2lmICFz dXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj5vPHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5Cb290IFJPTSB2ZXJp ZmllcyB0aGUgU1cgdGhhdCBpcyBsb2FkZWQsIHBhcnRpY3VsYXIgdGhlIHRvcCBwcml2aWxlZ2Ug KGUuZy4ga2VybmVsKSBTVzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21h cmdpbi1sZWZ0Oi41aW4iPg0KW25tc10gVmVyaWZpY2F0aW9uIGltcGxpZXMgdGhlIGFiaWxpdHkg dG8gZGV0ZXJtaW5lIGJvb3QgY29kZSBpbnRlZ3JpdHkuIFRoaXMgaXMgY29tbW9uIHRvIHBsYXRm b3JtcyB0aGF0IHVzZSBhIFRQTS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttYXJnaW4tbGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDIgbGV2ZWwy IGxmbzUiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5k aWZdPkEgZ29vZCBpbXBsZW1lbnRhdGlvbiBoYXMgYW50aS1yb2xsYmFjayB0byBwcmV2ZW50IG9s ZCB2ZXJzaW9ucyBvZiBTVyBmcm9tIGJlaW5nIHJ1bjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlz dDpsMiBsZXZlbDEgbGZvNSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5IYXMgYW4gYXR0ZXN0YXRpb24gc2lnbmluZyBr ZXkgdGhhdCBpcyBwcm9ncmFtbWVkIGluIGZ1c2VzIG9yIHBvc3NpYmx5IGluIGZsYXNoDQo8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCltu bXNdIFRoaXMgaXMgY29tbW9ubHkgdHJ1ZSBmb3IgVFBNIGJhc2VkIGF0dGVzdGF0aW9uIGltcGxl bWVudGF0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4t bGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDIgbGV2ZWwyIGxmbzUiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25v cmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsi PiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkhhcyBh IEhXIGJsb2NrIHRoYXQgcHJldmVudHMgYWNjZXNzIHRvIHRoZSBhdHRlc3RhdGlvbiBrZXkgdW5s ZXNzIGF1dGhlbnRpY2F0ZWQgYm9vdCBzdWNjZWVkczxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4iPg0KW25tc10gVGhpcyBpcyBhbHNvIHRydWUg Zm9yIHNvbHV0aW9ucyB0aGF0IHdpc2ggdG8gaW1wbGVtZW50IHNlY3VyZSBib290IHVzaW5nIGEg VFBNLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjIu MGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMiBsZXZlbDIgbGZvNSI+DQo8IVtpZiAh c3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+bzxz cGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+T25seSB0b3AgcHJp dmlsZWdlIFNXIGNhbiB1c2UgaXQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 bzttYXJnaW4tbGVmdDouNWluIj4NCltubXNdIFRQTSBhdHRlc3RhdGlvbiBrZXlzIGhhdmUgcmVz dHJpY3Rpb25zIG9uIHVzZSBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMiBs ZXZlbDEgbGZvNSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUi PsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48 L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5BdHRlc3RhdGlvbnMgYXJlIGNyZWF0ZWQgaW4gdGhlIHRv cC1wcml2aWxlZ2UgU1cgPG86cD4NCjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bztt YXJnaW4tbGVmdDoyLjBpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDIgbGV2ZWwyIGxm bzUiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlz dDpJZ25vcmUiPm88c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZd PlNpbXBseSBzaWduaW5nIGEgbm9uY2UgcHJvdmVzIHRoZSBkZXZpY2UgaXMgcnVubmluZyBhcHBy b3ZlZCBTVzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0 Oi41aW4iPg0KW25tc10gVGhlIHNlY3VyaXR5IHByb3BlcnRpZXMgb2YgdGhlIHNpZ25pbmcga2V5 IChhdHRlc3RhdGlvbiBrZXkpIGFyZSBhIGZ1bmN0aW9uIG9mIHRoZSBjbGFpbXMgdGhhdCB0aGUg bWFudWZhY3R1cmVycyBtYWtlIGFib3V0IHRoZSBlbnZpcm9ubWVudCB0aGF0IHByb3RlY3RzIHRo ZSBrZXkuIFRoaXMgaXMgdHJ1ZSBmb3IgVFBNIGFzIHdlbGwgYXMgYW55IG90aGVyIHJvb3Qgb2Yg dHJ1c3QgLyBhdHRlc3RpbmcgZW52aXJvbm1lbnQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6Mi4waW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0 OmwyIGxldmVsMiBsZm81Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48c3BhbiBz dHlsZT0ibXNvLWxpc3Q6SWdub3JlIj5vPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9z cGFuPjwhW2VuZGlmXT5FYXN5IHRvIGFkZCBvdGhlciBjbGFpbXMgaW4g4oCUJmd0OyBFQVQ8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDouNWluIj4NCltu bXNdIHJlbGF0aXZlIHRvIHdoYXQ/PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87bWFyZ2luLWxlZnQ6MS41aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwyIGxldmVs MSBsZm81Ij4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OlN5bWJvbCI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+wrc8 c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bh bj48L3NwYW4+PCFbZW5kaWZdPkRldmljZSBjb3N0IHJhaXNlZCBieSBuZWVkIGZvciBzZWN1cmUg a2V5IHByb3Zpc2lvbmluZyBpbiB0aGUgZmFjdG9yeTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuNWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlz dDpsMiBsZXZlbDEgbGZvNSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJ Z25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwv c3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5WZXJpZmllciBpcyB2ZXJ5IHNpbXBsZSA8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoyLjBpbjt0ZXh0 LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDIgbGV2ZWwyIGxmbzUiPg0KPCFbaWYgIXN1cHBvcnRM aXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPm88c3BhbiBzdHls ZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPkp1c3QgbmVlZHMgdG8gdmVyaWZ5 IHRoZSBzaWduYXR1cmUgYW5kIG5vbmNlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bWFyZ2luLWxlZnQ6LjVpbiI+DQpbbm1zXSBUaGUgdmVyaWZpZXIgaXMgYWxzbyBpbnRl Z3JhdGVkIGludG8gdGhlIGJvb3QgY29kZS4gVGhlc2UgdmVyaWZpZXJzIG5lZWQgdG8gYmUgcHJv dmlzaW9uZWQgd2l0aCBib290IHN0YXRlIHBvbGljaWVzIGFuZCBzbyBmb3J0aC4gU2VjdXJlIGJv b3QgaXMgYW4gZXhhbXBsZSBvZiB0aGUgY29tYmluaW5nIG9mIEF0dGVzdGVyIGFuZCBWZXJpZmll ciByb2xlcy4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBp biI+Qm90aCBwcm92aWRlIGFjY2VwdGFibGUgc2VjdXJpdHkgZm9yIHRoZWlyIHVzZSBjYXNlcyBh bmQgYXJlIGJyb2FkbHkgaW4gdXNlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+UkFUUyBuZWVkcyB0byBzdXBwb3J0IGJvdGguPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+W25tc10gSW4g d2hhdCB3YXlzIGRvZXMgUkFUUyBub3Qgc3VwcG9ydCBib3RoPzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGlu Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBt YWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPlJBVFNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1 b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+ LS0gPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5CZXN0IHJlZ2FyZHMs PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkthdGhsZWVuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW4iPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K UkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPlJBVFNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MS4waW4iPjxiciBjbGVhcj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbiI+LS0gPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj5CZXN0 IHJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPkthdGhsZWVuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8cHJlIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5SQVRT IG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+UkFUU0BpZXRmLm9yZzwvYT48bzpw PjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIj5odHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHM8L2E+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2tx dW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+ DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BFECEE8E3E83475A9C3A8033F4A9E9F4intelcom_-- From nobody Wed Nov 20 21:03:03 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F094712096E for ; Wed, 20 Nov 2019 21:03:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.998 X-Spam-Level: X-Spam-Status: No, score=-0.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GzExUAEDQXRt for ; Wed, 20 Nov 2019 21:03:00 -0800 (PST) Received: from mail-wm1-x332.google.com (mail-wm1-x332.google.com [IPv6:2a00:1450:4864:20::332]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9E92120959 for ; Wed, 20 Nov 2019 21:02:59 -0800 (PST) Received: by mail-wm1-x332.google.com with SMTP id y5so2168055wmi.5 for ; Wed, 20 Nov 2019 21:02:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=EbFN6fNsjymrqR7YHOGEBkDM+hV7CHLLpXBxaN2aKks=; b=c0VJgTPe9fq82nMQIQkOewAkE5L+S5Pp3hpN1vXwjf1ZwRan6x+meTKnB4KlvshYy1 2p2zL3Jua/yBmTHUVd4l3Js7SkuO/esKJiDED9IbM6Ut2R0FwDCAT9HpV+cuUmMz5tL/ +94/PKNrwzPnjG/gL2McX6iDBSEOcDtI6J1YANsioCNDfMGVNHU2eTih35NdbPw8uo+l 87z6jyZKmj+7MB/PMyKK0sQY5FQzABySJfjLdEvByczAOUb+K5M3Az83Z+JhTbayXPWb Bd/1p/c7cMoOgP9BnDmuIiwPe4nvLiNobopCQns672vSzKM0HKpW0vh9ZzbSZv/OeVl7 dfYg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=EbFN6fNsjymrqR7YHOGEBkDM+hV7CHLLpXBxaN2aKks=; b=oPETAVjThwCcxfc2sljlX6IRShagL2boLf7b5kQjJl1uREQ7ATvfndguH6S3ENqbLU 0Si23ROUHHAwt5ht2aIFbAU4IUspUjVUcGZoviwwOyeaILDCe9i9O6oML8wHtvYD3aEF DKaYKeVqfo5AXW5cUQVSXSQWKAUFjB54vQjl8mjklYPzAEGCDcQ7k4EICbGvwdim8uzF 3MROk28f4U3oRc/kj+Z1MfXPj0Qqqb+T8IUCZDpVEL4F4i7/G65d07A0YPqbghtNCd8v LRcNs8bkI5UK8Vf4V8/6iDPHji46jpOzAsdslizVCThhq7hHqISmHJQjnMuSpOTRIeMA 9LWA== X-Gm-Message-State: APjAAAWy4ow3T17jWvIU6OLWWW4O15/dr139o7CfBzZJLuMlam9QS1Rc yi5oMeBjq2J1VG2TA2Gea77XUVVannM= X-Google-Smtp-Source: APXvYqwlZuRGmT4rJxRCjdvyno19j2mzNSC/smEDFl5CPCfkd1wwiJpZOij/g4efO77MvGfqNF9j9w== X-Received: by 2002:a1c:6854:: with SMTP id d81mr7814218wmc.75.1574312577653; Wed, 20 Nov 2019 21:02:57 -0800 (PST) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id d11sm1829727wrn.28.2019.11.20.21.02.56 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 20 Nov 2019 21:02:56 -0800 (PST) To: "Smith, Ned" , Kathleen Moriarty , Laurence Lundblade Cc: "rats@ietf.org" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <30effd67-f6ab-3899-808e-db724a33b9b0@gmail.com> From: Anders Rundgren Message-ID: <4c5c2bd7-ac04-3234-803b-74d429632cf9@gmail.com> Date: Thu, 21 Nov 2019 06:02:55 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: [Rats] TUDA. Re: Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 05:03:02 -0000 On 2019-11-21 05:33, Smith, Ned wrote: > The TUDA draft might satisfy session attestation semantics. There may be others. Thanx Ned, I took a peek in https://datatracker.ietf.org/doc/draft-birkholz-rats-tuda/ and I had a hard time finding similarities. Session based attestation is not targeting constrained devices but rather powerful environments like mobile phones. The multi-step "Protected API" and transactional operation is the core. The session time is typically limited to 10 minutes. Although it wasn't considered, TEEP could have been a candidate for this scheme as well: https://cyberphone.github.io/doc/research/unified-tee-management-api.pdf Anders > > *From: *Anders Rundgren > *Date: *Wednesday, November 20, 2019 at 8:11 PM > *To: *"Smith, Ned" , Kathleen Moriarty , Laurence Lundblade > *Cc: *"rats@ietf.org" > *Subject: *Re: [Rats] Two types of secure attestation > > And then you have the outcome/action of an attestation which I guess currently is "Pass" or "Fail". > > As shown in https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf "Pass" may very well return a more sophisticated result, enabling a protected API in a session a bit similar to TLS. > > Anders > > On 2019-11-20 22:11, Smith, Ned wrote: > > There are some misrepresentations in the analysis below (I’ll comment inline below using [nms] delimiters). In general, I don’t see attestation types as being binary. Dave Thaler’s chart / truth table in another thread seems to suggest this as well given there are many different types of attesting environments (aka roots of trust). > > It might make sense to have discussion around claims that apply to attesting environments vs. claims that apply to attested environments? The important security property of attesting environments is they often are regarded as “trusted” meaning there isn’t some other attesting environment that vouches for it. > > Associating claims to attesting environments often takes a different from attestation (as represented by the roles / arch models); namely using certificates issued by product vendors (what the arch has called ‘asserters’). Certificates typically contain identity claims but could contain additional claims. Vendors could also sign assert claims by signing a document that asserts them. These could be manifests, attribute certs, identity certs with claims extensions and possibly even JWT/CWT (tokens). I haven’t seen a use case for vendor issued tokens however. Possibly PKI will transition from X.509 based to Token based at some point in the future, but I expect it will take a while. Vendors issuing (signing) manifests seems reasonable since many already create manifests for software distribution also called packages / bundles. The workflow for ‘reference values’ would not be much different than for creating a SW update manifest. > > *From: *RATS on behalf of Kathleen Moriarty > *Date: *Tuesday, November 19, 2019 at 6:00 PM > *To: *Laurence Lundblade > *Cc: *"rats@ietf.org" > *Subject: *Re: [Rats] Two types of secure attestation > > Hi Laurence, > > I read your message as there only being 2 types of attestation as opposed to what you stated in your follow on email, which better maps to the restricted set in your first message. > > Thanks, > > Kathleen > > On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade > wrote: > > Hi Kathleen, > > Not sure I’m following your thought completely. > > From what I know of Authenticated Boot, the code signing formats are usually proprietary and idiosyncratic. The first stages of it are likely in true ROM (chip metal layer) and can be very architecture and system specific and would not use CoSWID or EAT. > > My comments below are about getting a system booted up to state where it known to behave as desired. > > Once it is up then signed CoSWIDs in EATs would come into play. They can be trusted because the attester and system SW known to have booted up correctly. Knowing who signed some SW listed in a CoSWID is only of value if you know the system SW did signature checking when it loaded the SW it listed. For example, everyone knows how Android app signing works, so listing the signer of an Android app is good useful information. > > Hope that makes sense in relation to your comment. > > LL > > > > > On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty > wrote: > > Hi Laurence, > > Where does the code signing example fit in that you gave as it's not really an attestation, but could be useful in the format of an EAT/CWT?   This questions considers the CoSWID discussion as well as another example you had in your slides later (which was really the same) on just validating the code was signed by the expected private key?  Should that be called an attestation or just using the format for signing?  You might add claims in above what's in the CoSWID and use the nesting of EAT/subdomains as well as perform remote verification. > > Thanks, > > Kathleen > > On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade > wrote: > > Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired. > > *TPM based* > > ·Originates in the PC world where the end user had to be able to choose the system SW > > [nms] Not sure what relevance to attestation should be ascribed because of how TPMs originated. > > ·Has a TPM that performs a general measuring function > > §Has an attestation signing key for signing measurements that is kept secret by the TPM > > oTPM is generic as it can be used for PC’s, routers, IoT devices > > [nms] Profiles for how to adapt TPM for use in specific platform classes is generally required. > > ·Authenticated boot is optional > > [nms] I think the industry also uses the term ‘secure boot’. TPM supports attestation (of the boot sequence) while a secure boot approach doesn’t imply attestation is needed/used. > > [nms] Boot behavior is more a property of the Root of Trust for Measurement (RTM) than a TPM. There are many types of RTM technology most simply it is a boot ROM. > > ·Uses a staged boot architecture where each stage must measure (hash) the following stage > > [nms] Boot architecture is determined by the type of device / platform not the TPM. Staged boot sequences are fairly common across the industry. Hence the term ‘bootstrap’. > > oHashes fed into the TPM > > oTPM generates the attestation of the registers holding the hashes > > ·Device cost raised by cost of TPM part > > [nms] Not sure how this is relevant to RATS > > ·The verifier must run a parallel set of measurements (hashes) > > oVerifier is complex > > [nms] as compared to what? > > *Authenticated Boot based* > > ·Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW > > ·Authenticated boot is required > > oUses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed > > [nms] This is true for platforms using a TPM as well. > > oBoot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW > > [nms] Verification implies the ability to determine boot code integrity. This is common to platforms that use a TPM. > > oA good implementation has anti-rollback to prevent old versions of SW from being run > > ·Has an attestation signing key that is programmed in fuses or possibly in flash > > [nms] This is commonly true for TPM based attestation implementations. > > oHas a HW block that prevents access to the attestation key unless authenticated boot succeeds > > [nms] This is also true for solutions that wish to implement secure boot using a TPM. > > oOnly top privilege SW can use it > > [nms] TPM attestation keys have restrictions on use as well. > > ·Attestations are created in the top-privilege SW > > oSimply signing a nonce proves the device is running approved SW > > [nms] The security properties of the signing key (attestation key) are a function of the claims that the manufacturers make about the environment that protects the key. This is true for TPM as well as any other root of trust / attesting environment. > > oEasy to add other claims in —> EAT > > [nms] relative to what? > > ·Device cost raised by need for secure key provisioning in the factory > > ·Verifier is very simple > > oJust needs to verify the signature and nonce > > [nms] The verifier is also integrated into the boot code. These verifiers need to be provisioned with boot state policies and so forth. Secure boot is an example of the combining of Attester and Verifier roles. > > Both provide acceptable security for their use cases and are broadly in use. > > RATS needs to support both. > > [nms] In what ways does RATS not support both? > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > -- > > Best regards, > > Kathleen > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > -- > > Best regards, > > Kathleen > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > From nobody Wed Nov 20 22:14:35 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C573712006F for ; Wed, 20 Nov 2019 22:14:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OO6Iz8prxr_s for ; Wed, 20 Nov 2019 22:14:31 -0800 (PST) Received: from p3plsmtpa12-01.prod.phx3.secureserver.net (p3plsmtpa12-01.prod.phx3.secureserver.net [68.178.252.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA98B12000F for ; Wed, 20 Nov 2019 22:14:30 -0800 (PST) Received: from dhcp-94ba.meeting.ietf.org ([31.133.148.186]) by :SMTPAUTH: with ESMTPA id XfjXiSU5ZP2nEXfjYiJLpw; Wed, 20 Nov 2019 23:14:30 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_F17D0368-2574-4369-B932-426450C08AC4" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Thu, 21 Nov 2019 14:14:26 +0800 In-Reply-To: <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> Cc: Kathleen Moriarty , "rats@ietf.org" To: "Smith, Ned" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfORV6XsSZZo/xCfbPwOyRwqymwx2QR7Kd2YdpXU4/mSL3c4ZOss8MAD0K3krGCN0ftXKweNW5h3UCSEsknsekFXVDDInbczgnmm3l9+r81a0PF4e8vCL mLsyEGhdfgJEqjJ8FzN5ulhd0jwrtjIXyAV/FBHj0Ta8OfCaxIJEEO6DQbc3PFehRZLMeTgyGqDJcJMM+Q6GW415/45pXIgsbKgtS9HeDR74DH5bVWyC5GFK 7N4ZbpAQUbMY+7Vv6YF6tyL3HohNseE1iIcs23bL36s= Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 06:14:34 -0000 --Apple-Mail=_F17D0368-2574-4369-B932-426450C08AC4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I wrote this email because of side conversations with people that seemed = to be implying the second type I described was invalid and insecure with = the implication that EAT attestations could not trusted unless a = TPM-based attestation was done first. This is a gross = mischaracterization. This working group can not operate on that basis. I also wrote to facilitate understanding of the two main technology = orientations of participants. I should have titled this better.=20 This is about how trust in the attester by the verifier is established. Two popular approaches are described, but not to the exclusion of other = approaches. LL > On Nov 21, 2019, at 5:11 AM, Smith, Ned wrote: >=20 > There are some misrepresentations in the analysis below (I=E2=80=99ll = comment inline below using [nms] delimiters). In general, I don=E2=80=99t = see attestation types as being binary. Dave Thaler=E2=80=99s chart / = truth table in another thread seems to suggest this as well given there = are many different types of attesting environments (aka roots of trust). > =20 > It might make sense to have discussion around claims that apply to = attesting environments vs. claims that apply to attested environments? = The important security property of attesting environments is they often = are regarded as =E2=80=9Ctrusted=E2=80=9D meaning there isn=E2=80=99t = some other attesting environment that vouches for it.=20 > =20 > Associating claims to attesting environments often takes a different = from attestation (as represented by the roles / arch models); namely = using certificates issued by product vendors (what the arch has called = =E2=80=98asserters=E2=80=99). Certificates typically contain identity = claims but could contain additional claims. Vendors could also sign = assert claims by signing a document that asserts them. These could be = manifests, attribute certs, identity certs with claims extensions and = possibly even JWT/CWT (tokens). I haven=E2=80=99t seen a use case for = vendor issued tokens however. Possibly PKI will transition from X.509 = based to Token based at some point in the future, but I expect it will = take a while. Vendors issuing (signing) manifests seems reasonable since = many already create manifests for software distribution also called = packages / bundles. The workflow for =E2=80=98reference values=E2=80=99 = would not be much different than for creating a SW update manifest. > =20 > From: RATS > on = behalf of Kathleen Moriarty > > Date: Tuesday, November 19, 2019 at 6:00 PM > To: Laurence Lundblade > > Cc: "rats@ietf.org " > > Subject: Re: [Rats] Two types of secure attestation > =20 > Hi Laurence,=20 > =20 > I read your message as there only being 2 types of attestation as = opposed to what you stated in your follow on email, which better maps to = the restricted set in your first message. > =20 > Thanks, > Kathleen > =20 > On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade = > wrote: >> Hi Kathleen,=20 >> =20 >> Not sure I=E2=80=99m following your thought completely.=20 >> =20 >> =46rom what I know of Authenticated Boot, the code signing formats = are usually proprietary and idiosyncratic. The first stages of it are = likely in true ROM (chip metal layer) and can be very architecture and = system specific and would not use CoSWID or EAT.=20 >> =20 >> My comments below are about getting a system booted up to state where = it known to behave as desired. >> =20 >> Once it is up then signed CoSWIDs in EATs would come into play. They = can be trusted because the attester and system SW known to have booted = up correctly. Knowing who signed some SW listed in a CoSWID is only of = value if you know the system SW did signature checking when it loaded = the SW it listed. For example, everyone knows how Android app signing = works, so listing the signer of an Android app is good useful = information. >> =20 >> Hope that makes sense in relation to your comment. >> =20 >> LL >> =20 >>=20 >>=20 >>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty = > wrote: >>> =20 >>> Hi Laurence,=20 >>> =20 >>> Where does the code signing example fit in that you gave as it's not = really an attestation, but could be useful in the format of an EAT/CWT? = This questions considers the CoSWID discussion as well as another = example you had in your slides later (which was really the same) on just = validating the code was signed by the expected private key? Should that = be called an attestation or just using the format for signing? You = might add claims in above what's in the CoSWID and use the nesting of = EAT/subdomains as well as perform remote verification. >>> =20 >>> Thanks, >>> Kathleen >>> =20 >>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade = > wrote: >>>> Fundamentally, I think there are two ways that an attestation = verifier comes to know that a device / entity is running approved SW and = will behave as desired. >>>> =20 >>>> TPM based >>>> =C2=B7 Originates in the PC world where the end user had to = be able to choose the system SW >>>> [nms] Not sure what relevance to attestation should be ascribed = because of how TPMs originated. >>>> =C2=B7 Has a TPM that performs a general measuring function >>>> Has an attestation signing key for signing measurements that is = kept secret by the TPM >>>> o TPM is generic as it can be used for PC=E2=80=99s, routers, = IoT devices >>>> [nms] Profiles for how to adapt TPM for use in specific platform = classes is generally required. >>>> =C2=B7 Authenticated boot is optional >>>> [nms] I think the industry also uses the term =E2=80=98secure = boot=E2=80=99. TPM supports attestation (of the boot sequence) while a = secure boot approach doesn=E2=80=99t imply attestation is needed/used. >>>> [nms] Boot behavior is more a property of the Root of Trust for = Measurement (RTM) than a TPM. There are many types of RTM technology = most simply it is a boot ROM. >>>> =C2=B7 Uses a staged boot architecture where each stage = must measure (hash) the following stage >>>> [nms] Boot architecture is determined by the type of device / = platform not the TPM. Staged boot sequences are fairly common across the = industry. Hence the term =E2=80=98bootstrap=E2=80=99. >>>> o Hashes fed into the TPM >>>> o TPM generates the attestation of the registers holding the = hashes >>>> =C2=B7 Device cost raised by cost of TPM part >>>> [nms] Not sure how this is relevant to RATS >>>> =C2=B7 The verifier must run a parallel set of measurements = (hashes) >>>> o Verifier is complex >>>> [nms] as compared to what? >>>> =20 >>>> Authenticated Boot based >>>> =C2=B7 Origins in mobile phone, TEE and DRM world where the = user can NOT choose the system SW >>>> =C2=B7 Authenticated boot is required=20 >>>> o Uses a boot ROM that really is a ROM, probably in silicon (not = flash), that can NOT be changed >>>> [nms] This is true for platforms using a TPM as well. >>>> o Boot ROM verifies the SW that is loaded, particular the top = privilege (e.g. kernel) SW >>>> [nms] Verification implies the ability to determine boot code = integrity. This is common to platforms that use a TPM. >>>> o A good implementation has anti-rollback to prevent old = versions of SW from being run >>>> =C2=B7 Has an attestation signing key that is programmed in = fuses or possibly in flash >>>> [nms] This is commonly true for TPM based attestation = implementations. >>>> o Has a HW block that prevents access to the attestation key = unless authenticated boot succeeds >>>> [nms] This is also true for solutions that wish to implement secure = boot using a TPM. >>>> o Only top privilege SW can use it >>>> [nms] TPM attestation keys have restrictions on use as well. >>>> =C2=B7 Attestations are created in the top-privilege SW=20 >>>> o Simply signing a nonce proves the device is running approved = SW >>>> [nms] The security properties of the signing key (attestation key) = are a function of the claims that the manufacturers make about the = environment that protects the key. This is true for TPM as well as any = other root of trust / attesting environment. >>>> o Easy to add other claims in =E2=80=94> EAT >>>> [nms] relative to what? >>>> =C2=B7 Device cost raised by need for secure key = provisioning in the factory >>>> =C2=B7 Verifier is very simple=20 >>>> o Just needs to verify the signature and nonce >>>> [nms] The verifier is also integrated into the boot code. These = verifiers need to be provisioned with boot state policies and so forth. = Secure boot is an example of the combining of Attester and Verifier = roles.=20 >>>> =20 >>>> Both provide acceptable security for their use cases and are = broadly in use. >>>> =20 >>>> RATS needs to support both. >>>> [nms] In what ways does RATS not support both? >>>> =20 >>>> LL >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats = >>>=20 >>> =20 >>> --=20 >>> =20 >>> Best regards, >>> Kathleen >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats = >> =20 >=20 >=20 > =20 > --=20 > =20 > Best regards, > Kathleen --Apple-Mail=_F17D0368-2574-4369-B932-426450C08AC4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = wrote this email because of side conversations with people that seemed = to be implying the second type I described was invalid and insecure with = the implication that EAT attestations could not trusted unless a = TPM-based attestation was done first.   This is a gross = mischaracterization. This working group can not operate on that = basis.

I also wrote = to facilitate understanding of the two main technology orientations of = participants.

I = should have titled this better. 
  • This is about how = trust in the attester by the verifier is established.
  • Two popular approaches are described, but not to the = exclusion of other approaches.

LL




On Nov 21, 2019, at 5:11 AM, = Smith, Ned <ned.smith@intel.com> wrote:

There are = some misrepresentations in the analysis below (I=E2=80=99ll comment = inline below using [nms] delimiters). In general, I don=E2=80=99t see = attestation types as being binary. Dave Thaler=E2=80=99s chart / truth = table in another thread seems to suggest this as well given there are = many different types of attesting environments (aka roots of trust).
 
It might = make sense to have discussion around claims that apply to attesting = environments vs. claims that apply to attested environments? The = important security property of attesting environments is they often are = regarded as =E2=80=9Ctrusted=E2=80=9D meaning there isn=E2=80=99t some = other attesting environment that vouches for it. 
 
Associating= claims to attesting environments often takes a different from = attestation (as represented by the roles / arch models); namely using = certificates issued by product vendors (what the arch has called = =E2=80=98asserters=E2=80=99). Certificates typically contain identity = claims but could contain additional claims. Vendors could also sign = assert claims by signing a document that asserts them. These could be = manifests, attribute certs, identity certs with claims extensions and = possibly even JWT/CWT (tokens). I haven=E2=80=99t seen a use case for = vendor issued tokens however. Possibly PKI will transition from X.509 = based to Token based at some point in the future, but I expect it will = take a while. Vendors issuing (signing) manifests seems reasonable since = many already create manifests for software distribution also called = packages / bundles. The workflow for =E2=80=98reference values=E2=80=99 = would not be much different than for creating a SW update manifest.
 
From: RATS <rats-bounces@ietf.org> on = behalf of Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Tuesday, November 19, = 2019 at 6:00 PM
To: Laurence Lundblade = <lgl@island-resort.com>
Cc: "rats@ietf.org" <rats@ietf.org>
Subject: Re: [Rats] Two types of = secure attestation
 
Hi Laurence, 
 
I read your message as there only = being 2 types of attestation as opposed to what you stated in your = follow on email, which better maps to the restricted set in your = first message.
 
Thanks,
Kathleen
 
On Tue, Nov 19, 2019 = at 8:07 PM Laurence Lundblade <lgl@island-resort.com> wrote:
Hi Kathleen, 
 
Not sure I=E2=80=99m following your = thought completely. 
 
=46rom what I know of Authenticated = Boot, the code signing formats are usually proprietary and = idiosyncratic. The first stages of it are likely in true ROM (chip metal = layer) and can be very architecture and system specific and would not = use CoSWID or EAT. 
 
My comments below are about getting a system = booted up to state where it known to behave as desired.
 
Once it is up then signed CoSWIDs in = EATs would come into play. They can be trusted because the attester and = system SW known to have booted up correctly. Knowing who signed some SW = listed in a CoSWID is only of value if you know the system SW did = signature checking when it loaded the SW it listed. For example, = everyone knows how Android app signing works, so listing the signer of = an Android app is good useful information.
 
Hope that makes sense in relation to = your comment.
 
LL
 


On Nov 19, 2019, at 10:35 PM, Kathleen = Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:
 
Hi Laurence, 
 
Where does the code signing example fit = in that you gave as it's not really an attestation, but could be useful = in the format of an EAT/CWT?   This questions considers the = CoSWID discussion as well as another example you had in your slides = later (which was really the same) on just validating the code was signed = by the expected private key?  Should that be called an attestation = or just using the format for signing?  You might add claims = in above what's in the CoSWID and use the nesting of = EAT/subdomains as well as perform remote verification.
 
Thanks,
Kathleen
 
On Tue, = Nov 19, 2019 at 8:26 AM Laurence Lundblade <lgl@island-resort.com> wrote:
Fundamentally, I think there are two ways that an attestation = verifier comes to know that a device / entity is running approved SW and = will behave as desired.
 
TPM based
=C2=B7         Originat= es in the PC world where the end user had to be able to choose the = system SW
[nms] Not sure what relevance to attestation should be = ascribed because of how TPMs originated.
=C2=B7         Has a = TPM that performs a general measuring function
      • Has an = attestation signing key for signing measurements that is kept secret by = the TPM
o    TPM is = generic as it can be used for PC=E2=80=99s, routers, IoT devices
[nms] = Profiles for how to adapt TPM for use in specific platform classes is = generally required.
=C2=B7         Authenti= cated boot is optional
[nms] I think the industry also uses the term =E2=80=98secure = boot=E2=80=99. TPM supports attestation (of the boot sequence) while a = secure boot approach doesn=E2=80=99t imply attestation is = needed/used.
[nms] Boot behavior is more a property of the Root of Trust = for Measurement (RTM) than a TPM. There are many types of RTM technology = most simply it is a boot ROM.
=C2=B7         Uses a = staged boot architecture where each stage must measure (hash) the = following stage
[nms] Boot architecture is determined by the type of device / = platform not the TPM. Staged boot sequences are fairly common across the = industry. Hence the term =E2=80=98bootstrap=E2=80=99.
o    Hashes = fed into the TPM
o    TPM = generates the attestation of the registers holding the hashes
=C2=B7         Device = cost raised by cost of TPM part
[nms] Not sure how this is relevant to = RATS
=C2=B7         The = verifier must run a parallel set of measurements (hashes)
o    Verifier= is complex
[nms] as compared to what?
 
Authenticated Boot = based
=C2=B7         Origins = in mobile phone, TEE and DRM world where the user can NOT choose the = system SW
=C2=B7         Authenti= cated boot is required 
o    Uses a = boot ROM that really is a ROM, probably in silicon (not flash), that can = NOT be changed
[nms] This is true for platforms using a TPM as well.
o    Boot = ROM verifies the SW that is loaded, particular the top privilege (e.g. = kernel) SW
[nms] Verification implies the ability to determine boot code = integrity. This is common to platforms that use a TPM.
o    A good = implementation has anti-rollback to prevent old versions of SW from = being run
=C2=B7         Has an = attestation signing key that is programmed in fuses or possibly in = flash
[nms] = This is commonly true for TPM based attestation implementations.
o    Has a = HW block that prevents access to the attestation key unless = authenticated boot succeeds
[nms] This is also true for solutions = that wish to implement secure boot using a TPM.
o    Only = top privilege SW can use it
[nms] TPM attestation keys have = restrictions on use as well.
=C2=B7         Attestat= ions are created in the top-privilege SW 
o    Simply = signing a nonce proves the device is running approved SW
[nms] The = security properties of the signing key (attestation key) are a function = of the claims that the manufacturers make about the environment that = protects the key. This is true for TPM as well as any other root of = trust / attesting environment.
o    Easy = to add other claims in =E2=80=94> EAT
[nms] relative to what?
=C2=B7         Device = cost raised by need for secure key provisioning in the factory
=C2=B7         Verifier= is very simple 
o    Just = needs to verify the signature and nonce
[nms] The verifier is also integrated = into the boot code. These verifiers need to be provisioned with boot = state policies and so forth. Secure boot is an example of the combining = of Attester and Verifier roles. 
 
Both provide = acceptable security for their use cases and are broadly in use.
 
RATS needs to support both.
[nms] In = what ways does RATS not support both?
 
LL
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

 
-- 
 
Best regards,
Kathleen
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 

 
-- 
 
Best regards,
Kathleen
=
= --Apple-Mail=_F17D0368-2574-4369-B932-426450C08AC4-- From nobody Wed Nov 20 22:50:29 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 793E4120143 for ; Wed, 20 Nov 2019 22:50:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7O7O5r23zp96 for ; Wed, 20 Nov 2019 22:50:22 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1DC01200B5 for ; Wed, 20 Nov 2019 22:50:21 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAL6oFmi001162 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 21 Nov 2019 07:50:17 +0100 Received: from [172.16.133.32] (101.100.166.3) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 21 Nov 2019 07:50:10 +0100 To: Laurence Lundblade , "Smith, Ned" CC: "rats@ietf.org" , Kathleen Moriarty References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> From: Henk Birkholz Message-ID: Date: Thu, 21 Nov 2019 07:50:07 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [101.100.166.3] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 06:50:26 -0000 Hi all, to be honest there now came so many different topics up in this thread that I am unable to connect all the dots here. I'd like to correct a few points of the initial statement based on Trusted Computing Group procedures, if that is okay: The fundamental discrepancy I see is the differentiation between "TPM based" and "Authenticated Boot based", because: => TEE,fTPM,pTPM,and vTPM enable Measured or Authenticated Boot Differentiating them by the terms above seems impossible. => TPM based authenticated boot starts with S-CRTM (Static Code Root of Trust for Measurement). One type of this S-CRTM is immutable ROM code. => There is no one generalized measuring function in the TPM. There are 32 two (in practice often 24) highly specialized measurement scopes that can be dynamically assigned and are quite modular (Profiles assign the semantics for different domains of application. => The TSS/TPM architecture supports layered attestation (which I think is what you mean by "staged boot architecture", but "each stage" does not simply "hash" the "next stage" it is again a dynamic and modular measurement framework, hashes are not "stored" but fed into TPM provided folding hashes (a so called "extend" primitive operation). => corresponding verifies do "run a parallel set of measurements". Complex, touring-complete, non-deterministic execution environments (e.g. REE or TEE) can require the "replay" of measurement logs, which include system event and platform specific state change measurements. In summary, I think the basis for the comparison is a bit off :-) IHTH, Henk On 21.11.19 07:14, Laurence Lundblade wrote: > I wrote this email because of side conversations with people that seemed > to be implying the second type I described was invalid and insecure with > the implication that EAT attestations could not trusted unless a > TPM-based attestation was done first.   This is a gross > mischaracterization. This working group can not operate on that basis. > > I also wrote to facilitate understanding of the two main technology > orientations of participants. > > I should have titled this better. > > * This is about how/trust in the attester by the verifier /is established. > * Two popular approaches are described, but not to the exclusion of > other approaches. > > > LL > > > > >> On Nov 21, 2019, at 5:11 AM, Smith, Ned > > wrote: >> >> There are some misrepresentations in the analysis below (I’ll comment >> inline below using [nms] delimiters). In general, I don’t see >> attestation types as being binary. Dave Thaler’s chart / truth table >> in another thread seems to suggest this as well given there are many >> different types of attesting environments (aka roots of trust). >> It might make sense to have discussion around claims that apply to >> attesting environments vs. claims that apply to attested environments? >> The important security property of attesting environments is they >> often are regarded as “trusted” meaning there isn’t some other >> attesting environment that vouches for it. >> Associating claims to attesting environments often takes a different >> from attestation (as represented by the roles / arch models); namely >> using certificates issued by product vendors (what the arch has called >> ‘asserters’). Certificates typically contain identity claims but could >> contain additional claims. Vendors could also sign assert claims by >> signing a document that asserts them. These could be manifests, >> attribute certs, identity certs with claims extensions and possibly >> even JWT/CWT (tokens). I haven’t seen a use case for vendor issued >> tokens however. Possibly PKI will transition from X.509 based to Token >> based at some point in the future, but I expect it will take a while. >> Vendors issuing (signing) manifests seems reasonable since many >> already create manifests for software distribution also called >> packages / bundles. The workflow for ‘reference values’ would not be >> much different than for creating a SW update manifest. >> *From:*RATS > on >> behalf of Kathleen Moriarty > > >> *Date:*Tuesday, November 19, 2019 at 6:00 PM >> *To:*Laurence Lundblade > > >> *Cc:*"rats@ietf.org " > > >> *Subject:*Re: [Rats] Two types of secure attestation >> Hi Laurence, >> I read your message as there only being 2 types of attestation as >> opposed to what you stated in your follow on email, which better maps >> to the restricted set in your first message. >> Thanks, >> Kathleen >> On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade >> > wrote: >>> Hi Kathleen, >>> Not sure I’m following your thought completely. >>> From what I know of Authenticated Boot, the code signing formats are >>> usually proprietary and idiosyncratic. The first stages of it are >>> likely in true ROM (chip metal layer) and can be very architecture >>> and system specific and would not use CoSWID or EAT. >>> My comments below are about getting a system booted up to state where >>> it known to behave as desired. >>> Once it is up then signed CoSWIDs in EATs would come into play. They >>> can be trusted because the attester and system SW known to have >>> booted up correctly. Knowing who signed some SW listed in a CoSWID is >>> only of value if you know the system SW did signature checking when >>> it loaded the SW it listed. For example, everyone knows how Android >>> app signing works, so listing the signer of an Android app is good >>> useful information. >>> Hope that makes sense in relation to your comment. >>> LL >>> >>> >>>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty >>>> >>> > wrote: >>>> Hi Laurence, >>>> Where does the code signing example fit in that you gave as it's not >>>> really an attestation, but could be useful in the format of an >>>> EAT/CWT?   This questions considers the CoSWID discussion as well as >>>> another example you had in your slides later (which was really the >>>> same) on just validating the code was signed by the expected private >>>> key?  Should that be called an attestation or just using the format >>>> for signing?  You might add claims in above what's in the CoSWID and >>>> use the nesting of EAT/subdomains as well as perform remote >>>> verification. >>>> Thanks, >>>> Kathleen >>>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade >>>> > wrote: >>>>> Fundamentally, I think there are two ways that an attestation >>>>> verifier comes to know that a device / entity is running approved >>>>> SW and will behave as desired. >>>>> *TPM based* >>>>> ·Originates in the PC world where the end user had to be able to >>>>> choose the system SW >>>>> [nms] Not sure what relevance to attestation should be ascribed >>>>> because of how TPMs originated. >>>>> ·Has a TPM that performs a general measuring function >>>>> >>>>> + Has an attestation signing key for signing measurements >>>>> that is kept secret by the TPM >>>>> >>>>> oTPM is generic as it can be used for PC’s, routers, IoT devices >>>>> [nms] Profiles for how to adapt TPM for use in specific platform >>>>> classes is generally required. >>>>> ·Authenticated boot is optional >>>>> [nms] I think the industry also uses the term ‘secure boot’. TPM >>>>> supports attestation (of the boot sequence) while a secure boot >>>>> approach doesn’t imply attestation is needed/used. >>>>> [nms] Boot behavior is more a property of the Root of Trust for >>>>> Measurement (RTM) than a TPM. There are many types of RTM >>>>> technology most simply it is a boot ROM. >>>>> ·Uses a staged boot architecture where each stage must measure >>>>> (hash) the following stage >>>>> [nms] Boot architecture is determined by the type of device / >>>>> platform not the TPM. Staged boot sequences are fairly common >>>>> across the industry. Hence the term ‘bootstrap’. >>>>> oHashes fed into the TPM >>>>> oTPM generates the attestation of the registers holding the hashes >>>>> ·Device cost raised by cost of TPM part >>>>> [nms] Not sure how this is relevant to RATS >>>>> ·The verifier must run a parallel set of measurements (hashes) >>>>> oVerifier is complex >>>>> [nms] as compared to what? >>>>> *Authenticated Boot based* >>>>> ·Origins in mobile phone, TEE and DRM world where the user can NOT >>>>> choose the system SW >>>>> ·Authenticated boot is required >>>>> oUses a boot ROM that really is a ROM, probably in silicon (not >>>>> flash), that can NOT be changed >>>>> [nms] This is true for platforms using a TPM as well. >>>>> oBoot ROM verifies the SW that is loaded, particular the top >>>>> privilege (e.g. kernel) SW >>>>> [nms] Verification implies the ability to determine boot code >>>>> integrity. This is common to platforms that use a TPM. >>>>> oA good implementation has anti-rollback to prevent old versions of >>>>> SW from being run >>>>> ·Has an attestation signing key that is programmed in fuses or >>>>> possibly in flash >>>>> [nms] This is commonly true for TPM based attestation implementations. >>>>> oHas a HW block that prevents access to the attestation key unless >>>>> authenticated boot succeeds >>>>> [nms] This is also true for solutions that wish to implement secure >>>>> boot using a TPM. >>>>> oOnly top privilege SW can use it >>>>> [nms] TPM attestation keys have restrictions on use as well. >>>>> ·Attestations are created in the top-privilege SW >>>>> oSimply signing a nonce proves the device is running approved SW >>>>> [nms] The security properties of the signing key (attestation key) >>>>> are a function of the claims that the manufacturers make about the >>>>> environment that protects the key. This is true for TPM as well as >>>>> any other root of trust / attesting environment. >>>>> oEasy to add other claims in —> EAT >>>>> [nms] relative to what? >>>>> ·Device cost raised by need for secure key provisioning in the factory >>>>> ·Verifier is very simple >>>>> oJust needs to verify the signature and nonce >>>>> [nms] The verifier is also integrated into the boot code. These >>>>> verifiers need to be provisioned with boot state policies and so >>>>> forth. Secure boot is an example of the combining of Attester and >>>>> Verifier roles. >>>>> Both provide acceptable security for their use cases and are >>>>> broadly in use. >>>>> RATS needs to support both. >>>>> [nms] In what ways does RATS not support both? >>>>> LL >>>>> _______________________________________________ >>>>> RATS mailing list >>>>> RATS@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/rats >>>> >>>> -- >>>> Best regards, >>>> Kathleen >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >> >> -- >> Best regards, >> Kathleen > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Nov 20 23:11:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D31FC120817 for ; Wed, 20 Nov 2019 23:11:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fogNdV_SApYR for ; Wed, 20 Nov 2019 23:11:09 -0800 (PST) Received: from p3plsmtpa06-03.prod.phx3.secureserver.net (p3plsmtpa06-03.prod.phx3.secureserver.net [173.201.192.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86029120807 for ; Wed, 20 Nov 2019 23:11:09 -0800 (PST) Received: from dhcp-94ba.meeting.ietf.org ([31.133.148.186]) by :SMTPAUTH: with ESMTPA id XgcLiM16NVoYYXgcNiMofY; Thu, 21 Nov 2019 00:11:08 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: Date: Thu, 21 Nov 2019 15:11:05 +0800 Cc: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty Content-Transfer-Encoding: quoted-printable Message-Id: <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> To: Henk Birkholz X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfIMdpB2tJORT4/2DaIAhiDHQok1bssBGgvEThmnCOwa1CLnzaZg/LL6xu/UeCZ/g8zdWDu/nxxGmXnekbxtJfLtrgK9/eNBHCOyKLFOq2PO5ILkvNcak 1ADvQIa6dSYCF8HxVuWlDhPq31pe+fgbmHgMNSCdy3HaR6Mez2ivF0FCUfInw68dcRyt8UBGAHnHO/cSs3TzPBc82RhpIIB5U3uVFUItAktBKEJnKT71sSp0 7I7/lFSk7UdLX7OLk3sFiWUqfTYn141GtxOn9MBFEtOUKAPBdj1SSgr3O7AifghSPKG/J+6Gw/bjiGWzVRDv4g== Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 07:11:12 -0000 What I really care about here that this working group accepts the = non-TPM style of establishing trust in the attester by the verifier as = having equal stature with TPM style. In the non-TPM style there is no need for any back and forth protocol = and no need for the verifier to do anything with measurements taken = during boot. The verifier just needs to know that it is of this non-TPM = style and attestations are immediately trusted. (It would be cool and useful to line up all the terminology and = taxonomy, but that seems like about six months work, so I=E2=80=99m not = after that, so no line-by-line replies from me) LL > On Nov 21, 2019, at 2:50 PM, Henk Birkholz = wrote: >=20 > Hi all, >=20 > to be honest there now came so many different topics up in this thread = that I am unable to connect all the dots here. >=20 > I'd like to correct a few points of the initial statement based on = Trusted Computing Group procedures, if that is okay: >=20 > The fundamental discrepancy I see is the differentiation between "TPM = based" and "Authenticated Boot based", because: >=20 > =3D> TEE,fTPM,pTPM,and vTPM enable Measured or Authenticated Boot > Differentiating them by the terms above seems impossible. > =3D> TPM based authenticated boot starts with S-CRTM (Static Code Root = of > Trust for Measurement). One type of this S-CRTM is immutable ROM > code. > =3D> There is no one generalized measuring function in the TPM. There = are > 32 two (in practice often 24) highly specialized measurement scopes > that can be dynamically assigned and are quite modular (Profiles > assign the semantics for different domains of application. > =3D> The TSS/TPM architecture supports layered attestation (which I = think > is what you mean by "staged boot architecture", but "each stage" = does > not simply "hash" the "next stage" it is again a dynamic and modular > measurement framework, hashes are not "stored" but fed into TPM > provided folding hashes (a so called "extend" primitive operation). > =3D> corresponding verifies do "run a parallel set of measurements". > Complex, touring-complete, non-deterministic execution environments > (e.g. REE or TEE) can require the "replay" of measurement logs, = which > include system event and platform specific state change = measurements. >=20 > In summary, I think the basis for the comparison is a bit off :-) >=20 >=20 > IHTH, >=20 > Henk >=20 >=20 > On 21.11.19 07:14, Laurence Lundblade wrote: >> I wrote this email because of side conversations with people that = seemed to be implying the second type I described was invalid and = insecure with the implication that EAT attestations could not trusted = unless a TPM-based attestation was done first. This is a gross = mischaracterization. This working group can not operate on that basis. >> I also wrote to facilitate understanding of the two main technology = orientations of participants. >> I should have titled this better. >> * This is about how/trust in the attester by the verifier /is = established. >> * Two popular approaches are described, but not to the exclusion of >> other approaches. >> LL >>> On Nov 21, 2019, at 5:11 AM, Smith, Ned > wrote: >>>=20 >>> There are some misrepresentations in the analysis below (I=E2=80=99ll = comment inline below using [nms] delimiters). In general, I don=E2=80=99t = see attestation types as being binary. Dave Thaler=E2=80=99s chart / = truth table in another thread seems to suggest this as well given there = are many different types of attesting environments (aka roots of trust). >>> It might make sense to have discussion around claims that apply to = attesting environments vs. claims that apply to attested environments? = The important security property of attesting environments is they often = are regarded as =E2=80=9Ctrusted=E2=80=9D meaning there isn=E2=80=99t = some other attesting environment that vouches for it. >>> Associating claims to attesting environments often takes a different = from attestation (as represented by the roles / arch models); namely = using certificates issued by product vendors (what the arch has called = =E2=80=98asserters=E2=80=99). Certificates typically contain identity = claims but could contain additional claims. Vendors could also sign = assert claims by signing a document that asserts them. These could be = manifests, attribute certs, identity certs with claims extensions and = possibly even JWT/CWT (tokens). I haven=E2=80=99t seen a use case for = vendor issued tokens however. Possibly PKI will transition from X.509 = based to Token based at some point in the future, but I expect it will = take a while. Vendors issuing (signing) manifests seems reasonable since = many already create manifests for software distribution also called = packages / bundles. The workflow for =E2=80=98reference values=E2=80=99 = would not be much different than for creating a SW update manifest. >>> *From:*RATS > = on behalf of Kathleen Moriarty > >>> *Date:*Tuesday, November 19, 2019 at 6:00 PM >>> *To:*Laurence Lundblade > >>> *Cc:*"rats@ietf.org " > >>> *Subject:*Re: [Rats] Two types of secure attestation >>> Hi Laurence, >>> I read your message as there only being 2 types of attestation as = opposed to what you stated in your follow on email, which better maps to = the restricted set in your first message. >>> Thanks, >>> Kathleen >>> On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade = > wrote: >>>> Hi Kathleen, >>>> Not sure I=E2=80=99m following your thought completely. >>>> =46rom what I know of Authenticated Boot, the code signing formats = are usually proprietary and idiosyncratic. The first stages of it are = likely in true ROM (chip metal layer) and can be very architecture and = system specific and would not use CoSWID or EAT. >>>> My comments below are about getting a system booted up to state = where it known to behave as desired. >>>> Once it is up then signed CoSWIDs in EATs would come into play. = They can be trusted because the attester and system SW known to have = booted up correctly. Knowing who signed some SW listed in a CoSWID is = only of value if you know the system SW did signature checking when it = loaded the SW it listed. For example, everyone knows how Android app = signing works, so listing the signer of an Android app is good useful = information. >>>> Hope that makes sense in relation to your comment. >>>> LL >>>>=20 >>>>=20 >>>>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty = > wrote: >>>>> Hi Laurence, >>>>> Where does the code signing example fit in that you gave as it's = not really an attestation, but could be useful in the format of an = EAT/CWT? This questions considers the CoSWID discussion as well as = another example you had in your slides later (which was really the same) = on just validating the code was signed by the expected private key? = Should that be called an attestation or just using the format for = signing? You might add claims in above what's in the CoSWID and use the = nesting of EAT/subdomains as well as perform remote verification. >>>>> Thanks, >>>>> Kathleen >>>>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade = > wrote: >>>>>> Fundamentally, I think there are two ways that an attestation = verifier comes to know that a device / entity is running approved SW and = will behave as desired. >>>>>> *TPM based* >>>>>> =C2=B7Originates in the PC world where the end user had to be = able to choose the system SW >>>>>> [nms] Not sure what relevance to attestation should be ascribed = because of how TPMs originated. >>>>>> =C2=B7Has a TPM that performs a general measuring function >>>>>>=20 >>>>>> + Has an attestation signing key for signing = measurements >>>>>> that is kept secret by the TPM >>>>>>=20 >>>>>> oTPM is generic as it can be used for PC=E2=80=99s, routers, IoT = devices >>>>>> [nms] Profiles for how to adapt TPM for use in specific platform = classes is generally required. >>>>>> =C2=B7Authenticated boot is optional >>>>>> [nms] I think the industry also uses the term =E2=80=98secure = boot=E2=80=99. TPM supports attestation (of the boot sequence) while a = secure boot approach doesn=E2=80=99t imply attestation is needed/used. >>>>>> [nms] Boot behavior is more a property of the Root of Trust for = Measurement (RTM) than a TPM. There are many types of RTM technology = most simply it is a boot ROM. >>>>>> =C2=B7Uses a staged boot architecture where each stage must = measure (hash) the following stage >>>>>> [nms] Boot architecture is determined by the type of device / = platform not the TPM. Staged boot sequences are fairly common across the = industry. Hence the term =E2=80=98bootstrap=E2=80=99. >>>>>> oHashes fed into the TPM >>>>>> oTPM generates the attestation of the registers holding the = hashes >>>>>> =C2=B7Device cost raised by cost of TPM part >>>>>> [nms] Not sure how this is relevant to RATS >>>>>> =C2=B7The verifier must run a parallel set of measurements = (hashes) >>>>>> oVerifier is complex >>>>>> [nms] as compared to what? >>>>>> *Authenticated Boot based* >>>>>> =C2=B7Origins in mobile phone, TEE and DRM world where the user = can NOT choose the system SW >>>>>> =C2=B7Authenticated boot is required >>>>>> oUses a boot ROM that really is a ROM, probably in silicon (not = flash), that can NOT be changed >>>>>> [nms] This is true for platforms using a TPM as well. >>>>>> oBoot ROM verifies the SW that is loaded, particular the top = privilege (e.g. kernel) SW >>>>>> [nms] Verification implies the ability to determine boot code = integrity. This is common to platforms that use a TPM. >>>>>> oA good implementation has anti-rollback to prevent old versions = of SW from being run >>>>>> =C2=B7Has an attestation signing key that is programmed in fuses = or possibly in flash >>>>>> [nms] This is commonly true for TPM based attestation = implementations. >>>>>> oHas a HW block that prevents access to the attestation key = unless authenticated boot succeeds >>>>>> [nms] This is also true for solutions that wish to implement = secure boot using a TPM. >>>>>> oOnly top privilege SW can use it >>>>>> [nms] TPM attestation keys have restrictions on use as well. >>>>>> =C2=B7Attestations are created in the top-privilege SW >>>>>> oSimply signing a nonce proves the device is running approved SW >>>>>> [nms] The security properties of the signing key (attestation = key) are a function of the claims that the manufacturers make about the = environment that protects the key. This is true for TPM as well as any = other root of trust / attesting environment. >>>>>> oEasy to add other claims in =E2=80=94> EAT >>>>>> [nms] relative to what? >>>>>> =C2=B7Device cost raised by need for secure key provisioning in = the factory >>>>>> =C2=B7Verifier is very simple >>>>>> oJust needs to verify the signature and nonce >>>>>> [nms] The verifier is also integrated into the boot code. These = verifiers need to be provisioned with boot state policies and so forth. = Secure boot is an example of the combining of Attester and Verifier = roles. >>>>>> Both provide acceptable security for their use cases and are = broadly in use. >>>>>> RATS needs to support both. >>>>>> [nms] In what ways does RATS not support both? >>>>>> LL >>>>>> _______________________________________________ >>>>>> RATS mailing list >>>>>> RATS@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>=20 >>>>> -- >>>>> Best regards, >>>>> Kathleen >>>>> _______________________________________________ >>>>> RATS mailing list >>>>> RATS@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/rats >>>=20 >>> -- >>> Best regards, >>> Kathleen >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Wed Nov 20 23:23:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74ED12094E for ; Wed, 20 Nov 2019 23:23:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6Z7ZAcEpz1dE for ; Wed, 20 Nov 2019 23:23:01 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D783120048 for ; Wed, 20 Nov 2019 23:22:59 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAL7MtRD003518 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 21 Nov 2019 08:22:56 +0100 Received: from [172.16.133.32] (101.100.166.3) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 21 Nov 2019 08:22:50 +0100 To: Laurence Lundblade CC: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> From: Henk Birkholz Message-ID: Date: Thu, 21 Nov 2019 08:22:45 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [101.100.166.3] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 07:23:05 -0000 Hi Laurence, I think that is a way better scope (maybe this thread in itself had some scope creep) to describe it. I think it is rather obvious that the complexity of the appraisal process (the thing the Verifier does) depends on what you want to verify and how complex the evidence and the Attester are. If a simple Attester (such as a small thing, e.g. Car ECU, or Constrained Node Device) conducts authenticated boot, Attestation Evidence is fairly simple. It could be a single hash (the measurement after boot), or the most relevant part could be a signature based on a shielded secret in the thing. Both lead to very simple Attestation Evidence content and to very simple appraisal processes. The more thorough your measurements and the more complex the Attester, the more complex is the appraisal process. This is true for every RATS - TPM, fTPM or other TEE. Maybe this is single scope is a better way to describe the matter at hand? Viele Grüße, Henk On 21.11.19 08:11, Laurence Lundblade wrote: > What I really care about here that this working group accepts the non-TPM style of establishing trust in the attester by the verifier as having equal stature with TPM style. > > In the non-TPM style there is no need for any back and forth protocol and no need for the verifier to do anything with measurements taken during boot. The verifier just needs to know that it is of this non-TPM style and attestations are immediately trusted. > > (It would be cool and useful to line up all the terminology and taxonomy, but that seems like about six months work, so I’m not after that, so no line-by-line replies from me) > > LL > > > >> On Nov 21, 2019, at 2:50 PM, Henk Birkholz wrote: >> >> Hi all, >> >> to be honest there now came so many different topics up in this thread that I am unable to connect all the dots here. >> >> I'd like to correct a few points of the initial statement based on Trusted Computing Group procedures, if that is okay: >> >> The fundamental discrepancy I see is the differentiation between "TPM based" and "Authenticated Boot based", because: >> >> => TEE,fTPM,pTPM,and vTPM enable Measured or Authenticated Boot >> Differentiating them by the terms above seems impossible. >> => TPM based authenticated boot starts with S-CRTM (Static Code Root of >> Trust for Measurement). One type of this S-CRTM is immutable ROM >> code. >> => There is no one generalized measuring function in the TPM. There are >> 32 two (in practice often 24) highly specialized measurement scopes >> that can be dynamically assigned and are quite modular (Profiles >> assign the semantics for different domains of application. >> => The TSS/TPM architecture supports layered attestation (which I think >> is what you mean by "staged boot architecture", but "each stage" does >> not simply "hash" the "next stage" it is again a dynamic and modular >> measurement framework, hashes are not "stored" but fed into TPM >> provided folding hashes (a so called "extend" primitive operation). >> => corresponding verifies do "run a parallel set of measurements". >> Complex, touring-complete, non-deterministic execution environments >> (e.g. REE or TEE) can require the "replay" of measurement logs, which >> include system event and platform specific state change measurements. >> >> In summary, I think the basis for the comparison is a bit off :-) >> >> >> IHTH, >> >> Henk >> >> >> On 21.11.19 07:14, Laurence Lundblade wrote: >>> I wrote this email because of side conversations with people that seemed to be implying the second type I described was invalid and insecure with the implication that EAT attestations could not trusted unless a TPM-based attestation was done first. This is a gross mischaracterization. This working group can not operate on that basis. >>> I also wrote to facilitate understanding of the two main technology orientations of participants. >>> I should have titled this better. >>> * This is about how/trust in the attester by the verifier /is established. >>> * Two popular approaches are described, but not to the exclusion of >>> other approaches. >>> LL >>>> On Nov 21, 2019, at 5:11 AM, Smith, Ned > wrote: >>>> >>>> There are some misrepresentations in the analysis below (I’ll comment inline below using [nms] delimiters). In general, I don’t see attestation types as being binary. Dave Thaler’s chart / truth table in another thread seems to suggest this as well given there are many different types of attesting environments (aka roots of trust). >>>> It might make sense to have discussion around claims that apply to attesting environments vs. claims that apply to attested environments? The important security property of attesting environments is they often are regarded as “trusted” meaning there isn’t some other attesting environment that vouches for it. >>>> Associating claims to attesting environments often takes a different from attestation (as represented by the roles / arch models); namely using certificates issued by product vendors (what the arch has called ‘asserters’). Certificates typically contain identity claims but could contain additional claims. Vendors could also sign assert claims by signing a document that asserts them. These could be manifests, attribute certs, identity certs with claims extensions and possibly even JWT/CWT (tokens). I haven’t seen a use case for vendor issued tokens however. Possibly PKI will transition from X.509 based to Token based at some point in the future, but I expect it will take a while. Vendors issuing (signing) manifests seems reasonable since many already create manifests for software distribution also called packages / bundles. The workflow for ‘reference values’ would not be much different than for creating a SW update manifest. >>>> *From:*RATS > on behalf of Kathleen Moriarty > >>>> *Date:*Tuesday, November 19, 2019 at 6:00 PM >>>> *To:*Laurence Lundblade > >>>> *Cc:*"rats@ietf.org " > >>>> *Subject:*Re: [Rats] Two types of secure attestation >>>> Hi Laurence, >>>> I read your message as there only being 2 types of attestation as opposed to what you stated in your follow on email, which better maps to the restricted set in your first message. >>>> Thanks, >>>> Kathleen >>>> On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade > wrote: >>>>> Hi Kathleen, >>>>> Not sure I’m following your thought completely. >>>>> From what I know of Authenticated Boot, the code signing formats are usually proprietary and idiosyncratic. The first stages of it are likely in true ROM (chip metal layer) and can be very architecture and system specific and would not use CoSWID or EAT. >>>>> My comments below are about getting a system booted up to state where it known to behave as desired. >>>>> Once it is up then signed CoSWIDs in EATs would come into play. They can be trusted because the attester and system SW known to have booted up correctly. Knowing who signed some SW listed in a CoSWID is only of value if you know the system SW did signature checking when it loaded the SW it listed. For example, everyone knows how Android app signing works, so listing the signer of an Android app is good useful information. >>>>> Hope that makes sense in relation to your comment. >>>>> LL >>>>> >>>>> >>>>>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty > wrote: >>>>>> Hi Laurence, >>>>>> Where does the code signing example fit in that you gave as it's not really an attestation, but could be useful in the format of an EAT/CWT? This questions considers the CoSWID discussion as well as another example you had in your slides later (which was really the same) on just validating the code was signed by the expected private key? Should that be called an attestation or just using the format for signing? You might add claims in above what's in the CoSWID and use the nesting of EAT/subdomains as well as perform remote verification. >>>>>> Thanks, >>>>>> Kathleen >>>>>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade > wrote: >>>>>>> Fundamentally, I think there are two ways that an attestation verifier comes to know that a device / entity is running approved SW and will behave as desired. >>>>>>> *TPM based* >>>>>>> ·Originates in the PC world where the end user had to be able to choose the system SW >>>>>>> [nms] Not sure what relevance to attestation should be ascribed because of how TPMs originated. >>>>>>> ·Has a TPM that performs a general measuring function >>>>>>> >>>>>>> + Has an attestation signing key for signing measurements >>>>>>> that is kept secret by the TPM >>>>>>> >>>>>>> oTPM is generic as it can be used for PC’s, routers, IoT devices >>>>>>> [nms] Profiles for how to adapt TPM for use in specific platform classes is generally required. >>>>>>> ·Authenticated boot is optional >>>>>>> [nms] I think the industry also uses the term ‘secure boot’. TPM supports attestation (of the boot sequence) while a secure boot approach doesn’t imply attestation is needed/used. >>>>>>> [nms] Boot behavior is more a property of the Root of Trust for Measurement (RTM) than a TPM. There are many types of RTM technology most simply it is a boot ROM. >>>>>>> ·Uses a staged boot architecture where each stage must measure (hash) the following stage >>>>>>> [nms] Boot architecture is determined by the type of device / platform not the TPM. Staged boot sequences are fairly common across the industry. Hence the term ‘bootstrap’. >>>>>>> oHashes fed into the TPM >>>>>>> oTPM generates the attestation of the registers holding the hashes >>>>>>> ·Device cost raised by cost of TPM part >>>>>>> [nms] Not sure how this is relevant to RATS >>>>>>> ·The verifier must run a parallel set of measurements (hashes) >>>>>>> oVerifier is complex >>>>>>> [nms] as compared to what? >>>>>>> *Authenticated Boot based* >>>>>>> ·Origins in mobile phone, TEE and DRM world where the user can NOT choose the system SW >>>>>>> ·Authenticated boot is required >>>>>>> oUses a boot ROM that really is a ROM, probably in silicon (not flash), that can NOT be changed >>>>>>> [nms] This is true for platforms using a TPM as well. >>>>>>> oBoot ROM verifies the SW that is loaded, particular the top privilege (e.g. kernel) SW >>>>>>> [nms] Verification implies the ability to determine boot code integrity. This is common to platforms that use a TPM. >>>>>>> oA good implementation has anti-rollback to prevent old versions of SW from being run >>>>>>> ·Has an attestation signing key that is programmed in fuses or possibly in flash >>>>>>> [nms] This is commonly true for TPM based attestation implementations. >>>>>>> oHas a HW block that prevents access to the attestation key unless authenticated boot succeeds >>>>>>> [nms] This is also true for solutions that wish to implement secure boot using a TPM. >>>>>>> oOnly top privilege SW can use it >>>>>>> [nms] TPM attestation keys have restrictions on use as well. >>>>>>> ·Attestations are created in the top-privilege SW >>>>>>> oSimply signing a nonce proves the device is running approved SW >>>>>>> [nms] The security properties of the signing key (attestation key) are a function of the claims that the manufacturers make about the environment that protects the key. This is true for TPM as well as any other root of trust / attesting environment. >>>>>>> oEasy to add other claims in —> EAT >>>>>>> [nms] relative to what? >>>>>>> ·Device cost raised by need for secure key provisioning in the factory >>>>>>> ·Verifier is very simple >>>>>>> oJust needs to verify the signature and nonce >>>>>>> [nms] The verifier is also integrated into the boot code. These verifiers need to be provisioned with boot state policies and so forth. Secure boot is an example of the combining of Attester and Verifier roles. >>>>>>> Both provide acceptable security for their use cases and are broadly in use. >>>>>>> RATS needs to support both. >>>>>>> [nms] In what ways does RATS not support both? >>>>>>> LL >>>>>>> _______________________________________________ >>>>>>> RATS mailing list >>>>>>> RATS@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>> >>>>>> -- >>>>>> Best regards, >>>>>> Kathleen >>>>>> _______________________________________________ >>>>>> RATS mailing list >>>>>> RATS@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/rats >>>> >>>> -- >>>> Best regards, >>>> Kathleen >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Nov 21 00:06:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEF6E120822 for ; Thu, 21 Nov 2019 00:06:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E8SwWGNIvc6e for ; Thu, 21 Nov 2019 00:06:48 -0800 (PST) Received: from p3plsmtpa08-10.prod.phx3.secureserver.net (p3plsmtpa08-10.prod.phx3.secureserver.net [173.201.193.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D633120048 for ; Thu, 21 Nov 2019 00:06:48 -0800 (PST) Received: from dhcp-94ba.meeting.ietf.org ([31.133.148.186]) by :SMTPAUTH: with ESMTPA id XhUCia7BeVopTXhUDitd7q; Thu, 21 Nov 2019 01:06:47 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_BAFC756C-61A1-4FE4-B374-70F40BBB6BC6" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Thu, 21 Nov 2019 16:06:43 +0800 In-Reply-To: Cc: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty To: Henk Birkholz References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfKFtPcZyGzGa0Y6BjH86+RwwVLjPIpuUmNhXzuqYgZb619ajnZUFgpkDnSD7Dcrs2rNMZyo0LsWyDc61EZEVGwBXWSGeUP2FKHrfz4fdJeHTBXlqwivw y4WpR1NPOO1Z540O5JM5rRxHtJ8++ExYgUO00msHXz3RoN6sid4yw8TCx7ysJuesj63+IUpWJbsnXAnsrFm5rnYV0+ACxz8A+YaYilIqVJKf6kXK5tQdGynz 7BuA21cRiHb3Z5nVH/1BtHYifueqYTqXBrzwfH90ByqmVS3vnuVEJwijVH2xGwkkXzfXG5xsoGBzKv7DWcm5XQ== Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 08:06:52 -0000 --Apple-Mail=_BAFC756C-61A1-4FE4-B374-70F40BBB6BC6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 In the non-TPM style attestation I=E2=80=99m describing, no measurement = is transmitted from the attester to the verifier. It is not necessary to = send one. The trust in the attester is automatic, immediate, real and = highly valuable. This is why the sample simple EAT in the draft there is no measurement = in the EAT attestation evidence: { / nonce (cti) / 7:h'948f8860d13a463e8e', / UEID / = 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', / boot_state / 12:{true, true, true, true, false} / time stamp (iat) / 6:1526542894, } In this non-TPM style attestation there is hashing of code booted as = part of secure boot implemented in the boot ROM, but that all happens = inside the boot sequence and never manifests outside of it (I also do = not think it is helpful to refer to this part of the boot ROM as a = =E2=80=9Cverifier=E2=80=9D in this context because it is not the same as = a RATS verifier that produces attestation evidence, is remote and such). LL > On Nov 21, 2019, at 3:22 PM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > I think that is a way better scope (maybe this thread in itself had = some scope creep) to describe it. >=20 > I think it is rather obvious that the complexity of the appraisal = process (the thing the Verifier does) depends on what you want to verify = and how complex the evidence and the Attester are. >=20 > If a simple Attester (such as a small thing, e.g. Car ECU, or = Constrained Node Device) conducts authenticated boot, Attestation = Evidence is fairly simple. It could be a single hash (the measurement = after boot), or the most relevant part could be a signature based on a = shielded secret in the thing. Both lead to very simple Attestation = Evidence content and to very simple appraisal processes. >=20 > The more thorough your measurements and the more complex the Attester, = the more complex is the appraisal process. This is true for every RATS - = TPM, fTPM or other TEE. >=20 > Maybe this is single scope is a better way to describe the matter at = hand? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 >=20 > On 21.11.19 08:11, Laurence Lundblade wrote: >> What I really care about here that this working group accepts the = non-TPM style of establishing trust in the attester by the verifier as = having equal stature with TPM style. >> In the non-TPM style there is no need for any back and forth protocol = and no need for the verifier to do anything with measurements taken = during boot. The verifier just needs to know that it is of this non-TPM = style and attestations are immediately trusted. >> (It would be cool and useful to line up all the terminology and = taxonomy, but that seems like about six months work, so I=E2=80=99m not = after that, so no line-by-line replies from me) >> LL >>> On Nov 21, 2019, at 2:50 PM, Henk Birkholz = wrote: >>>=20 >>> Hi all, >>>=20 >>> to be honest there now came so many different topics up in this = thread that I am unable to connect all the dots here. >>>=20 >>> I'd like to correct a few points of the initial statement based on = Trusted Computing Group procedures, if that is okay: >>>=20 >>> The fundamental discrepancy I see is the differentiation between = "TPM based" and "Authenticated Boot based", because: >>>=20 >>> =3D> TEE,fTPM,pTPM,and vTPM enable Measured or Authenticated Boot >>> Differentiating them by the terms above seems impossible. >>> =3D> TPM based authenticated boot starts with S-CRTM (Static Code = Root of >>> Trust for Measurement). One type of this S-CRTM is immutable ROM >>> code. >>> =3D> There is no one generalized measuring function in the TPM. = There are >>> 32 two (in practice often 24) highly specialized measurement = scopes >>> that can be dynamically assigned and are quite modular (Profiles >>> assign the semantics for different domains of application. >>> =3D> The TSS/TPM architecture supports layered attestation (which I = think >>> is what you mean by "staged boot architecture", but "each stage" = does >>> not simply "hash" the "next stage" it is again a dynamic and = modular >>> measurement framework, hashes are not "stored" but fed into TPM >>> provided folding hashes (a so called "extend" primitive = operation). >>> =3D> corresponding verifies do "run a parallel set of measurements". >>> Complex, touring-complete, non-deterministic execution = environments >>> (e.g. REE or TEE) can require the "replay" of measurement logs, = which >>> include system event and platform specific state change = measurements. >>>=20 >>> In summary, I think the basis for the comparison is a bit off :-) >>>=20 >>>=20 >>> IHTH, >>>=20 >>> Henk >>>=20 >>>=20 >>> On 21.11.19 07:14, Laurence Lundblade wrote: >>>> I wrote this email because of side conversations with people that = seemed to be implying the second type I described was invalid and = insecure with the implication that EAT attestations could not trusted = unless a TPM-based attestation was done first. This is a gross = mischaracterization. This working group can not operate on that basis. >>>> I also wrote to facilitate understanding of the two main technology = orientations of participants. >>>> I should have titled this better. >>>> * This is about how/trust in the attester by the verifier /is = established. >>>> * Two popular approaches are described, but not to the exclusion = of >>>> other approaches. >>>> LL >>>>> On Nov 21, 2019, at 5:11 AM, Smith, Ned > wrote: >>>>>=20 >>>>> There are some misrepresentations in the analysis below (I=E2=80=99l= l comment inline below using [nms] delimiters). In general, I don=E2=80=99= t see attestation types as being binary. Dave Thaler=E2=80=99s chart / = truth table in another thread seems to suggest this as well given there = are many different types of attesting environments (aka roots of trust). >>>>> It might make sense to have discussion around claims that apply to = attesting environments vs. claims that apply to attested environments? = The important security property of attesting environments is they often = are regarded as =E2=80=9Ctrusted=E2=80=9D meaning there isn=E2=80=99t = some other attesting environment that vouches for it. >>>>> Associating claims to attesting environments often takes a = different from attestation (as represented by the roles / arch models); = namely using certificates issued by product vendors (what the arch has = called =E2=80=98asserters=E2=80=99). Certificates typically contain = identity claims but could contain additional claims. Vendors could also = sign assert claims by signing a document that asserts them. These could = be manifests, attribute certs, identity certs with claims extensions and = possibly even JWT/CWT (tokens). I haven=E2=80=99t seen a use case for = vendor issued tokens however. Possibly PKI will transition from X.509 = based to Token based at some point in the future, but I expect it will = take a while. Vendors issuing (signing) manifests seems reasonable since = many already create manifests for software distribution also called = packages / bundles. The workflow for =E2=80=98reference values=E2=80=99 = would not be much different than for creating a SW update manifest. >>>>> *From:*RATS > = on behalf of Kathleen Moriarty > >>>>> *Date:*Tuesday, November 19, 2019 at 6:00 PM >>>>> *To:*Laurence Lundblade > >>>>> *Cc:*"rats@ietf.org " > >>>>> *Subject:*Re: [Rats] Two types of secure attestation >>>>> Hi Laurence, >>>>> I read your message as there only being 2 types of attestation as = opposed to what you stated in your follow on email, which better maps to = the restricted set in your first message. >>>>> Thanks, >>>>> Kathleen >>>>> On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade = > wrote: >>>>>> Hi Kathleen, >>>>>> Not sure I=E2=80=99m following your thought completely. >>>>>> =46rom what I know of Authenticated Boot, the code signing = formats are usually proprietary and idiosyncratic. The first stages of = it are likely in true ROM (chip metal layer) and can be very = architecture and system specific and would not use CoSWID or EAT. >>>>>> My comments below are about getting a system booted up to state = where it known to behave as desired. >>>>>> Once it is up then signed CoSWIDs in EATs would come into play. = They can be trusted because the attester and system SW known to have = booted up correctly. Knowing who signed some SW listed in a CoSWID is = only of value if you know the system SW did signature checking when it = loaded the SW it listed. For example, everyone knows how Android app = signing works, so listing the signer of an Android app is good useful = information. >>>>>> Hope that makes sense in relation to your comment. >>>>>> LL >>>>>>=20 >>>>>>=20 >>>>>>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty = > wrote: >>>>>>> Hi Laurence, >>>>>>> Where does the code signing example fit in that you gave as it's = not really an attestation, but could be useful in the format of an = EAT/CWT? This questions considers the CoSWID discussion as well as = another example you had in your slides later (which was really the same) = on just validating the code was signed by the expected private key? = Should that be called an attestation or just using the format for = signing? You might add claims in above what's in the CoSWID and use the = nesting of EAT/subdomains as well as perform remote verification. >>>>>>> Thanks, >>>>>>> Kathleen >>>>>>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade = > wrote: >>>>>>>> Fundamentally, I think there are two ways that an attestation = verifier comes to know that a device / entity is running approved SW and = will behave as desired. >>>>>>>> *TPM based* >>>>>>>> =C2=B7Originates in the PC world where the end user had to be = able to choose the system SW >>>>>>>> [nms] Not sure what relevance to attestation should be ascribed = because of how TPMs originated. >>>>>>>> =C2=B7Has a TPM that performs a general measuring function >>>>>>>>=20 >>>>>>>> + Has an attestation signing key for signing = measurements >>>>>>>> that is kept secret by the TPM >>>>>>>>=20 >>>>>>>> oTPM is generic as it can be used for PC=E2=80=99s, routers, = IoT devices >>>>>>>> [nms] Profiles for how to adapt TPM for use in specific = platform classes is generally required. >>>>>>>> =C2=B7Authenticated boot is optional >>>>>>>> [nms] I think the industry also uses the term =E2=80=98secure = boot=E2=80=99. TPM supports attestation (of the boot sequence) while a = secure boot approach doesn=E2=80=99t imply attestation is needed/used. >>>>>>>> [nms] Boot behavior is more a property of the Root of Trust for = Measurement (RTM) than a TPM. There are many types of RTM technology = most simply it is a boot ROM. >>>>>>>> =C2=B7Uses a staged boot architecture where each stage must = measure (hash) the following stage >>>>>>>> [nms] Boot architecture is determined by the type of device / = platform not the TPM. Staged boot sequences are fairly common across the = industry. Hence the term =E2=80=98bootstrap=E2=80=99. >>>>>>>> oHashes fed into the TPM >>>>>>>> oTPM generates the attestation of the registers holding the = hashes >>>>>>>> =C2=B7Device cost raised by cost of TPM part >>>>>>>> [nms] Not sure how this is relevant to RATS >>>>>>>> =C2=B7The verifier must run a parallel set of measurements = (hashes) >>>>>>>> oVerifier is complex >>>>>>>> [nms] as compared to what? >>>>>>>> *Authenticated Boot based* >>>>>>>> =C2=B7Origins in mobile phone, TEE and DRM world where the user = can NOT choose the system SW >>>>>>>> =C2=B7Authenticated boot is required >>>>>>>> oUses a boot ROM that really is a ROM, probably in silicon (not = flash), that can NOT be changed >>>>>>>> [nms] This is true for platforms using a TPM as well. >>>>>>>> oBoot ROM verifies the SW that is loaded, particular the top = privilege (e.g. kernel) SW >>>>>>>> [nms] Verification implies the ability to determine boot code = integrity. This is common to platforms that use a TPM. >>>>>>>> oA good implementation has anti-rollback to prevent old = versions of SW from being run >>>>>>>> =C2=B7Has an attestation signing key that is programmed in = fuses or possibly in flash >>>>>>>> [nms] This is commonly true for TPM based attestation = implementations. >>>>>>>> oHas a HW block that prevents access to the attestation key = unless authenticated boot succeeds >>>>>>>> [nms] This is also true for solutions that wish to implement = secure boot using a TPM. >>>>>>>> oOnly top privilege SW can use it >>>>>>>> [nms] TPM attestation keys have restrictions on use as well. >>>>>>>> =C2=B7Attestations are created in the top-privilege SW >>>>>>>> oSimply signing a nonce proves the device is running approved = SW >>>>>>>> [nms] The security properties of the signing key (attestation = key) are a function of the claims that the manufacturers make about the = environment that protects the key. This is true for TPM as well as any = other root of trust / attesting environment. >>>>>>>> oEasy to add other claims in =E2=80=94> EAT >>>>>>>> [nms] relative to what? >>>>>>>> =C2=B7Device cost raised by need for secure key provisioning in = the factory >>>>>>>> =C2=B7Verifier is very simple >>>>>>>> oJust needs to verify the signature and nonce >>>>>>>> [nms] The verifier is also integrated into the boot code. These = verifiers need to be provisioned with boot state policies and so forth. = Secure boot is an example of the combining of Attester and Verifier = roles. >>>>>>>> Both provide acceptable security for their use cases and are = broadly in use. >>>>>>>> RATS needs to support both. >>>>>>>> [nms] In what ways does RATS not support both? >>>>>>>> LL >>>>>>>> _______________________________________________ >>>>>>>> RATS mailing list >>>>>>>> RATS@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>>>=20 >>>>>>> -- >>>>>>> Best regards, >>>>>>> Kathleen >>>>>>> _______________________________________________ >>>>>>> RATS mailing list >>>>>>> RATS@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>=20 >>>>> -- >>>>> Best regards, >>>>> Kathleen >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >>>=20 >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >=20 --Apple-Mail=_BAFC756C-61A1-4FE4-B374-70F40BBB6BC6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 In = the non-TPM style attestation I=E2=80=99m describing, no= measurement is transmitted from the attester to the verifier. It is not = necessary to send one. The trust in the attester is automatic, = immediate, real and highly valuable.

This is why the sample simple EAT in = the draft there is no measurement in the EAT attestation = evidence:

{
   / nonce (cti) /            7:h'948f8860d13a463e8e',
   / UEID /                   =
8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f',
   / boot_state /            12:{true, true, true, true, false}
   / time stamp (iat) /       6:1526542894,
}

In this = non-TPM style attestation there is hashing of code booted as part of = secure boot implemented in the boot ROM, but that all happens inside the = boot sequence and never manifests outside of it (I also do not think it = is helpful to refer to this part of the boot ROM as a =E2=80=9Cverifier=E2= =80=9D in this context because it is not the same as a RATS verifier = that produces attestation evidence, is remote and such).

LL


On Nov 21, 2019, at 3:22 PM, = Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

I think that is a way better = scope (maybe this thread in itself had some scope creep) to describe = it.

I think it is rather obvious that the = complexity of the appraisal process (the thing the Verifier does) = depends on what you want to verify and how complex the evidence and the = Attester are.

If a simple Attester (such as = a small thing, e.g. Car ECU, or Constrained Node Device) conducts = authenticated boot, Attestation Evidence is fairly simple. It could be a = single hash (the measurement after boot), or the most relevant part = could be a signature based on a shielded secret in the thing. Both lead = to very simple Attestation Evidence content and to very simple appraisal = processes.

The more thorough your = measurements and the more complex the Attester, the more complex is the = appraisal process. This is true for every RATS - TPM, fTPM or other = TEE.

Maybe this is single scope is a better = way to describe the matter at hand?

Viele = Gr=C3=BC=C3=9Fe,

Henk



On 21.11.19 08:11, Laurence = Lundblade wrote:
What = I really care about here that this working group accepts the non-TPM = style of establishing trust in the attester by the verifier as having = equal stature with TPM style.
In the non-TPM style there = is no need for any back and forth protocol and no need for the verifier = to do anything with measurements taken during boot. The verifier just = needs to know that it is of this non-TPM style and attestations are = immediately trusted.
(It would be cool and useful to line = up all the terminology and taxonomy, but that seems like about six = months work, so I=E2=80=99m not after that, so no line-by-line replies = from me)
LL
On Nov 21, 2019, at 2:50 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi all,

to be = honest there now came so many different topics up in this thread that I = am unable to connect all the dots here.

I'd = like to correct a few points of the initial statement based on Trusted = Computing Group procedures, if that is okay:

The fundamental discrepancy I see is the differentiation = between "TPM based" and "Authenticated Boot based", because:

=3D> TEE,fTPM,pTPM,and vTPM enable Measured = or Authenticated Boot
  Differentiating them by = the terms above seems impossible.
=3D> TPM based = authenticated boot starts with S-CRTM (Static Code Root of
=   Trust for Measurement). One type of this S-CRTM is immutable = ROM
  code.
=3D> There is no = one generalized measuring function in the TPM. There are
=   32 two (in practice often 24) highly specialized measurement = scopes
  that can be dynamically assigned and = are quite modular (Profiles
  assign the = semantics for different domains of application.
=3D> = The TSS/TPM architecture supports layered attestation (which I think
  is what you mean by "staged boot architecture", = but "each stage" does
  not simply "hash" the = "next stage" it is again a dynamic and modular
=   measurement framework, hashes are not "stored" but fed into = TPM
  provided folding hashes (a so called = "extend" primitive operation).
=3D> corresponding = verifies do "run a parallel set of measurements".
=   Complex, touring-complete, non-deterministic execution = environments
  (e.g. REE or TEE) can require = the "replay" of measurement logs, which
=   include system event and platform specific state change = measurements.

In summary, I think the basis = for the comparison is a bit off :-)


IHTH,

Henk


On 21.11.19 07:14, Laurence Lundblade = wrote:
I wrote this = email because of side conversations with people that seemed to be = implying the second type I described was invalid and insecure with the = implication that EAT attestations could not trusted unless a TPM-based = attestation was done first.   This is a gross = mischaracterization. This working group can not operate on that = basis.
I also wrote to facilitate understanding of the two = main technology orientations of participants.
I should = have titled this better.
 * This is about how/trust = in the attester by the verifier /is established.
 * = Two popular approaches are described, but not to the exclusion of
   other approaches.
LL
On Nov 21, 2019, at 5:11 = AM, Smith, Ned <ned.smith@intel.com <mailto:ned.smith@intel.com>> wrote:
There are some misrepresentations in the analysis below = (I=E2=80=99ll comment inline below using [nms] delimiters). In general, = I don=E2=80=99t see attestation types as being binary. Dave Thaler=E2=80=99= s chart / truth table in another thread seems to suggest this as well = given there are many different types of attesting environments (aka = roots of trust).
It might make sense to have discussion = around claims that apply to attesting environments vs. claims that apply = to attested environments? The important security property of attesting = environments is they often are regarded as =E2=80=9Ctrusted=E2=80=9D = meaning there isn=E2=80=99t some other attesting environment that = vouches for it.
Associating claims to attesting = environments often takes a different from attestation (as represented by = the roles / arch models); namely using certificates issued by product = vendors (what the arch has called =E2=80=98asserters=E2=80=99). = Certificates typically contain identity claims but could contain = additional claims. Vendors could also sign assert claims by signing a = document that asserts them. These could be manifests, attribute certs, = identity certs with claims extensions and possibly even JWT/CWT = (tokens). I haven=E2=80=99t seen a use case for vendor issued tokens = however. Possibly PKI will transition from X.509 based to Token based at = some point in the future, but I expect it will take a while. Vendors = issuing (signing) manifests seems reasonable since many already create = manifests for software distribution also called packages / bundles. The = workflow for =E2=80=98reference values=E2=80=99 would not be much = different than for creating a SW update manifest.
*From:*RATS <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>> on behalf of = Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com <mailto:kathleen.moriarty.ietf@gmail.com>>
*Date:*Tuesday, November 19, 2019 at 6:00 PM
*To:*Laurence Lundblade <lgl@island-resort.com= <mailto:lgl@island-resort.com>>
*Cc:*"rats@ietf.org <mailto:rats@ietf.org>" = <rats@ietf.org <mailto:rats@ietf.org>>
*Subject:*Re: = [Rats] Two types of secure attestation
Hi Laurence,
I read your message as there only being 2 types of = attestation as opposed to what you stated in your follow on email, which = better maps to the restricted set in your first message.
Thanks,
Kathleen
On Tue, Nov 19, = 2019 at 8:07 PM Laurence Lundblade <lgl@island-resort.com= <mailto:lgl@island-resort.com>> wrote:
Hi Kathleen,
Not sure I=E2=80=99m following your thought completely.
=46rom what I know of Authenticated Boot, the code signing = formats are usually proprietary and idiosyncratic. The first stages of = it are likely in true ROM (chip metal layer) and can be very = architecture and system specific and would not use CoSWID or EAT.
My comments below are about getting a system booted up to = state where it known to behave as desired.
Once it is up = then signed CoSWIDs in EATs would come into play. They can be trusted = because the attester and system SW known to have booted up correctly. = Knowing who signed some SW listed in a CoSWID is only of value if you = know the system SW did signature checking when it loaded the SW it = listed. For example, everyone knows how Android app signing works, so = listing the signer of an Android app is good useful information.
Hope that makes sense in relation to your comment.
LL


On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty = <kathleen.moriarty.ietf@gmail.com <mailto:kathleen.moriarty.ietf@gmail.com>> wrote:
Hi Laurence,
Where does the code signing = example fit in that you gave as it's not really an attestation, but = could be useful in the format of an EAT/CWT?   This questions = considers the CoSWID discussion as well as another example you had in = your slides later (which was really the same) on just validating the = code was signed by the expected private key?  Should that be called = an attestation or just using the format for signing?  You might add = claims in above what's in the CoSWID and use the nesting of = EAT/subdomains as well as perform remote verification.
Thanks,
Kathleen
On Tue, Nov 19, = 2019 at 8:26 AM Laurence Lundblade <lgl@island-resort.com= <mailto:lgl@island-resort..com>> wrote:
Fundamentally, I think = there are two ways that an attestation verifier comes to know that a = device / entity is running approved SW and will behave as desired.
*TPM based*
=C2=B7Originates in the PC world = where the end user had to be able to choose the system SW
[nms] Not sure what relevance to attestation should be = ascribed because of how TPMs originated.
=C2=B7Has a TPM = that performs a general measuring function

=          + Has an = attestation signing key for signing measurements
=            that = is kept secret by the TPM

oTPM is generic = as it can be used for PC=E2=80=99s, routers, IoT devices
[nms] Profiles for how to adapt TPM for use in specific = platform classes is generally required.
=C2=B7Authenticated = boot is optional
[nms] I think the industry also uses the = term =E2=80=98secure boot=E2=80=99. TPM supports attestation (of the = boot sequence) while a secure boot approach doesn=E2=80=99t imply = attestation is needed/used.
[nms] Boot behavior is more a = property of the Root of Trust for Measurement (RTM) than a TPM. There = are many types of RTM technology most simply it is a boot ROM.
=C2=B7Uses a staged boot architecture where each stage must = measure (hash) the following stage
[nms] Boot architecture = is determined by the type of device / platform not the TPM. Staged boot = sequences are fairly common across the industry. Hence the term = =E2=80=98bootstrap=E2=80=99.
oHashes fed into the TPM
oTPM generates the attestation of the registers holding the = hashes
=C2=B7Device cost raised by cost of TPM part
[nms] Not sure how this is relevant to RATS
=C2=B7= The verifier must run a parallel set of measurements (hashes)
oVerifier is complex
[nms] as compared to = what?
*Authenticated Boot based*
=C2=B7Origins= in mobile phone, TEE and DRM world where the user can NOT choose the = system SW
=C2=B7Authenticated boot is required
oUses a boot ROM that really is a ROM, probably in silicon = (not flash), that can NOT be changed
[nms] This is true = for platforms using a TPM as well.
oBoot ROM verifies the = SW that is loaded, particular the top privilege (e.g. kernel) SW
[nms] Verification implies the ability to determine boot code = integrity. This is common to platforms that use a TPM.
oA = good implementation has anti-rollback to prevent old versions of SW from = being run
=C2=B7Has an attestation signing key that is = programmed in fuses or possibly in flash
[nms] This is = commonly true for TPM based attestation implementations.
oHas a HW block that prevents access to the attestation key = unless authenticated boot succeeds
[nms] This is also true = for solutions that wish to implement secure boot using a TPM.
oOnly top privilege SW can use it
[nms] TPM = attestation keys have restrictions on use as well.
=C2=B7Attestations are created in the top-privilege SW
oSimply signing a nonce proves the device is running approved = SW
[nms] The security properties of the signing key = (attestation key) are a function of the claims that the manufacturers = make about the environment that protects the key. This is true for TPM = as well as any other root of trust / attesting environment.
oEasy to add other claims in =E2=80=94> EAT
[nms] relative to what?
=C2=B7Device cost = raised by need for secure key provisioning in the factory
=C2=B7Verifier is very simple
oJust needs to = verify the signature and nonce
[nms] The verifier is also = integrated into the boot code. These verifiers need to be provisioned = with boot state policies and so forth. Secure boot is an example of the = combining of Attester and Verifier roles.
Both provide = acceptable security for their use cases and are broadly in use.
RATS needs to support both.
[nms] In what ways = does RATS not support both?
LL
_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats

--
Best regards,
Kathleen
_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats

--
Best = regards,
Kathleen
_______________________________________________RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


= --Apple-Mail=_BAFC756C-61A1-4FE4-B374-70F40BBB6BC6-- From nobody Thu Nov 21 01:08:29 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2544412099E for ; Thu, 21 Nov 2019 01:08:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cH5urhk7MB4L for ; Thu, 21 Nov 2019 01:08:25 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B632A120989 for ; Thu, 21 Nov 2019 01:08:24 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAL98LGx009186 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 21 Nov 2019 10:08:22 +0100 Received: from [172.16.133.32] (101.100.166.3) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 21 Nov 2019 10:08:15 +0100 To: Laurence Lundblade CC: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> From: Henk Birkholz Message-ID: <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> Date: Thu, 21 Nov 2019 10:08:12 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [101.100.166.3] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 09:08:28 -0000 Now I am confused again. Why should a Verifier ever create Attestation Evidence? Do yo mean Attestation Results? If I understand you correctly, the fact that the EAT can be signed is due to the fact that authenticated boot was successful, right? What happens if the authenticated boot was not successful? Can you still create EAT? With different boot state? How do you know that the boot state was not tempered with and the device is "lying" to you? I think you are describing implicit remote attestation, where you can only sign something if authenticated boot was successful. Is that your use case you are describing? On 21.11.19 09:06, Laurence Lundblade wrote: > In the non-TPM style attestation I’m describing, /no/ measurement is > transmitted from the attester to the verifier. It is not necessary to > send one. The trust in the attester is automatic, immediate, real and > highly valuable. > > This is why the sample simple EAT in the draft there is no measurement > in the EAT attestation evidence: > > { > / nonce (cti) / 7:h'948f8860d13a463e8e', > / UEID / 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', > / boot_state / 12:{true, true, true, true, false} > / time stamp (iat) / 6:1526542894, > } > > > In this non-TPM style attestation there is hashing of code booted as > part of secure boot implemented in the boot ROM, but that all happens > inside the boot sequence and never manifests outside of it (I also do > not think it is helpful to refer to this part of the boot ROM as a > “verifier” in this context because it is not the same as a RATS verifier > that produces attestation evidence, is remote and such). > > LL > > >> On Nov 21, 2019, at 3:22 PM, Henk Birkholz >> > > wrote: >> >> Hi Laurence, >> >> I think that is a way better scope (maybe this thread in itself had >> some scope creep) to describe it. >> >> I think it is rather obvious that the complexity of the appraisal >> process (the thing the Verifier does) depends on what you want to >> verify and how complex the evidence and the Attester are. >> >> If a simple Attester (such as a small thing, e.g. Car ECU, or >> Constrained Node Device) conducts authenticated boot, Attestation >> Evidence is fairly simple. It could be a single hash (the measurement >> after boot), or the most relevant part could be a signature based on a >> shielded secret in the thing. Both lead to very simple Attestation >> Evidence content and to very simple appraisal processes. >> >> The more thorough your measurements and the more complex the Attester, >> the more complex is the appraisal process. This is true for every RATS >> - TPM, fTPM or other TEE. >> >> Maybe this is single scope is a better way to describe the matter at hand? >> >> Viele Grüße, >> >> Henk >> >> >> >> On 21.11.19 08:11, Laurence Lundblade wrote: >>> What I really care about here that this working group accepts the >>> non-TPM style of establishing trust in the attester by the verifier >>> as having equal stature with TPM style. >>> In the non-TPM style there is no need for any back and forth protocol >>> and no need for the verifier to do anything with measurements taken >>> during boot. The verifier just needs to know that it is of this >>> non-TPM style and attestations are immediately trusted. >>> (It would be cool and useful to line up all the terminology and >>> taxonomy, but that seems like about six months work, so I’m not after >>> that, so no line-by-line replies from me) >>> LL >>>> On Nov 21, 2019, at 2:50 PM, Henk Birkholz >>>> >>> > wrote: >>>> >>>> Hi all, >>>> >>>> to be honest there now came so many different topics up in this >>>> thread that I am unable to connect all the dots here. >>>> >>>> I'd like to correct a few points of the initial statement based on >>>> Trusted Computing Group procedures, if that is okay: >>>> >>>> The fundamental discrepancy I see is the differentiation between >>>> "TPM based" and "Authenticated Boot based", because: >>>> >>>> => TEE,fTPM,pTPM,and vTPM enable Measured or Authenticated Boot >>>>   Differentiating them by the terms above seems impossible. >>>> => TPM based authenticated boot starts with S-CRTM (Static Code Root of >>>>   Trust for Measurement). One type of this S-CRTM is immutable ROM >>>>   code. >>>> => There is no one generalized measuring function in the TPM. There are >>>>   32 two (in practice often 24) highly specialized measurement scopes >>>>   that can be dynamically assigned and are quite modular (Profiles >>>>   assign the semantics for different domains of application. >>>> => The TSS/TPM architecture supports layered attestation (which I think >>>>   is what you mean by "staged boot architecture", but "each stage" does >>>>   not simply "hash" the "next stage" it is again a dynamic and modular >>>>   measurement framework, hashes are not "stored" but fed into TPM >>>>   provided folding hashes (a so called "extend" primitive operation). >>>> => corresponding verifies do "run a parallel set of measurements". >>>>   Complex, touring-complete, non-deterministic execution environments >>>>   (e.g. REE or TEE) can require the "replay" of measurement logs, which >>>>   include system event and platform specific state change measurements. >>>> >>>> In summary, I think the basis for the comparison is a bit off :-) >>>> >>>> >>>> IHTH, >>>> >>>> Henk >>>> >>>> >>>> On 21.11.19 07:14, Laurence Lundblade wrote: >>>>> I wrote this email because of side conversations with people that >>>>> seemed to be implying the second type I described was invalid and >>>>> insecure with the implication that EAT attestations could not >>>>> trusted unless a TPM-based attestation was done first.   This is a >>>>> gross mischaracterization. This working group can not operate on >>>>> that basis. >>>>> I also wrote to facilitate understanding of the two main technology >>>>> orientations of participants. >>>>> I should have titled this better. >>>>>  * This is about how/trust in the attester by the verifier /is >>>>> established. >>>>>  * Two popular approaches are described, but not to the exclusion of >>>>>    other approaches. >>>>> LL >>>>>> On Nov 21, 2019, at 5:11 AM, Smith, Ned >>>>> > wrote: >>>>>> >>>>>> There are some misrepresentations in the analysis below (I’ll >>>>>> comment inline below using [nms] delimiters). In general, I don’t >>>>>> see attestation types as being binary. Dave Thaler’s chart / truth >>>>>> table in another thread seems to suggest this as well given there >>>>>> are many different types of attesting environments (aka roots of >>>>>> trust). >>>>>> It might make sense to have discussion around claims that apply to >>>>>> attesting environments vs. claims that apply to attested >>>>>> environments? The important security property of attesting >>>>>> environments is they often are regarded as “trusted” meaning there >>>>>> isn’t some other attesting environment that vouches for it. >>>>>> Associating claims to attesting environments often takes a >>>>>> different from attestation (as represented by the roles / arch >>>>>> models); namely using certificates issued by product vendors (what >>>>>> the arch has called ‘asserters’). Certificates typically contain >>>>>> identity claims but could contain additional claims. Vendors could >>>>>> also sign assert claims by signing a document that asserts them. >>>>>> These could be manifests, attribute certs, identity certs with >>>>>> claims extensions and possibly even JWT/CWT (tokens). I haven’t >>>>>> seen a use case for vendor issued tokens however. Possibly PKI >>>>>> will transition from X.509 based to Token based at some point in >>>>>> the future, but I expect it will take a while. Vendors issuing >>>>>> (signing) manifests seems reasonable since many already create >>>>>> manifests for software distribution also called packages / >>>>>> bundles. The workflow for ‘reference values’ would not be much >>>>>> different than for creating a SW update manifest. >>>>>> *From:*RATS >>>>>> > on behalf of Kathleen Moriarty >>>>>> >>>>> >>>>>> > >>>>>> *Date:*Tuesday, November 19, 2019 at 6:00 PM >>>>>> *To:*Laurence Lundblade >>>>> > >>>>>> *Cc:*"rats@ietf.org " >>>>>> > >>>>>> *Subject:*Re: [Rats] Two types of secure attestation >>>>>> Hi Laurence, >>>>>> I read your message as there only being 2 types of attestation as >>>>>> opposed to what you stated in your follow on email, which better >>>>>> maps to the restricted set in your first message. >>>>>> Thanks, >>>>>> Kathleen >>>>>> On Tue, Nov 19, 2019 at 8:07 PM Laurence Lundblade >>>>>> >>>>>> > wrote: >>>>>>> Hi Kathleen, >>>>>>> Not sure I’m following your thought completely. >>>>>>> From what I know of Authenticated Boot, the code signing formats >>>>>>> are usually proprietary and idiosyncratic. The first stages of it >>>>>>> are likely in true ROM (chip metal layer) and can be very >>>>>>> architecture and system specific and would not use CoSWID or EAT. >>>>>>> My comments below are about getting a system booted up to state >>>>>>> where it known to behave as desired. >>>>>>> Once it is up then signed CoSWIDs in EATs would come into play. >>>>>>> They can be trusted because the attester and system SW known to >>>>>>> have booted up correctly. Knowing who signed some SW listed in a >>>>>>> CoSWID is only of value if you know the system SW did signature >>>>>>> checking when it loaded the SW it listed. For example, everyone >>>>>>> knows how Android app signing works, so listing the signer of an >>>>>>> Android app is good useful information. >>>>>>> Hope that makes sense in relation to your comment. >>>>>>> LL >>>>>>> >>>>>>> >>>>>>>> On Nov 19, 2019, at 10:35 PM, Kathleen Moriarty >>>>>>>> >>>>>>> >>>>>>>> > wrote: >>>>>>>> Hi Laurence, >>>>>>>> Where does the code signing example fit in that you gave as it's >>>>>>>> not really an attestation, but could be useful in the format of >>>>>>>> an EAT/CWT?   This questions considers the CoSWID discussion as >>>>>>>> well as another example you had in your slides later (which was >>>>>>>> really the same) on just validating the code was signed by the >>>>>>>> expected private key?  Should that be called an attestation or >>>>>>>> just using the format for signing?  You might add claims in >>>>>>>> above what's in the CoSWID and use the nesting of EAT/subdomains >>>>>>>> as well as perform remote verification. >>>>>>>> Thanks, >>>>>>>> Kathleen >>>>>>>> On Tue, Nov 19, 2019 at 8:26 AM Laurence Lundblade >>>>>>>> >>>>>>>> > wrote: >>>>>>>>> Fundamentally, I think there are two ways that an attestation >>>>>>>>> verifier comes to know that a device / entity is running >>>>>>>>> approved SW and will behave as desired. >>>>>>>>> *TPM based* >>>>>>>>> ·Originates in the PC world where the end user had to be able >>>>>>>>> to choose the system SW >>>>>>>>> [nms] Not sure what relevance to attestation should be ascribed >>>>>>>>> because of how TPMs originated. >>>>>>>>> ·Has a TPM that performs a general measuring function >>>>>>>>> >>>>>>>>>          + Has an attestation signing key for signing measurements >>>>>>>>>            that is kept secret by the TPM >>>>>>>>> >>>>>>>>> oTPM is generic as it can be used for PC’s, routers, IoT devices >>>>>>>>> [nms] Profiles for how to adapt TPM for use in specific >>>>>>>>> platform classes is generally required. >>>>>>>>> ·Authenticated boot is optional >>>>>>>>> [nms] I think the industry also uses the term ‘secure boot’. >>>>>>>>> TPM supports attestation (of the boot sequence) while a secure >>>>>>>>> boot approach doesn’t imply attestation is needed/used. >>>>>>>>> [nms] Boot behavior is more a property of the Root of Trust for >>>>>>>>> Measurement (RTM) than a TPM. There are many types of RTM >>>>>>>>> technology most simply it is a boot ROM. >>>>>>>>> ·Uses a staged boot architecture where each stage must measure >>>>>>>>> (hash) the following stage >>>>>>>>> [nms] Boot architecture is determined by the type of device / >>>>>>>>> platform not the TPM. Staged boot sequences are fairly common >>>>>>>>> across the industry. Hence the term ‘bootstrap’. >>>>>>>>> oHashes fed into the TPM >>>>>>>>> oTPM generates the attestation of the registers holding the hashes >>>>>>>>> ·Device cost raised by cost of TPM part >>>>>>>>> [nms] Not sure how this is relevant to RATS >>>>>>>>> ·The verifier must run a parallel set of measurements (hashes) >>>>>>>>> oVerifier is complex >>>>>>>>> [nms] as compared to what? >>>>>>>>> *Authenticated Boot based* >>>>>>>>> ·Origins in mobile phone, TEE and DRM world where the user can >>>>>>>>> NOT choose the system SW >>>>>>>>> ·Authenticated boot is required >>>>>>>>> oUses a boot ROM that really is a ROM, probably in silicon (not >>>>>>>>> flash), that can NOT be changed >>>>>>>>> [nms] This is true for platforms using a TPM as well. >>>>>>>>> oBoot ROM verifies the SW that is loaded, particular the top >>>>>>>>> privilege (e.g. kernel) SW >>>>>>>>> [nms] Verification implies the ability to determine boot code >>>>>>>>> integrity. This is common to platforms that use a TPM. >>>>>>>>> oA good implementation has anti-rollback to prevent old >>>>>>>>> versions of SW from being run >>>>>>>>> ·Has an attestation signing key that is programmed in fuses or >>>>>>>>> possibly in flash >>>>>>>>> [nms] This is commonly true for TPM based attestation >>>>>>>>> implementations. >>>>>>>>> oHas a HW block that prevents access to the attestation key >>>>>>>>> unless authenticated boot succeeds >>>>>>>>> [nms] This is also true for solutions that wish to implement >>>>>>>>> secure boot using a TPM. >>>>>>>>> oOnly top privilege SW can use it >>>>>>>>> [nms] TPM attestation keys have restrictions on use as well. >>>>>>>>> ·Attestations are created in the top-privilege SW >>>>>>>>> oSimply signing a nonce proves the device is running approved SW >>>>>>>>> [nms] The security properties of the signing key (attestation >>>>>>>>> key) are a function of the claims that the manufacturers make >>>>>>>>> about the environment that protects the key. This is true for >>>>>>>>> TPM as well as any other root of trust / attesting environment. >>>>>>>>> oEasy to add other claims in —> EAT >>>>>>>>> [nms] relative to what? >>>>>>>>> ·Device cost raised by need for secure key provisioning in the >>>>>>>>> factory >>>>>>>>> ·Verifier is very simple >>>>>>>>> oJust needs to verify the signature and nonce >>>>>>>>> [nms] The verifier is also integrated into the boot code. These >>>>>>>>> verifiers need to be provisioned with boot state policies and >>>>>>>>> so forth. Secure boot is an example of the combining of >>>>>>>>> Attester and Verifier roles. >>>>>>>>> Both provide acceptable security for their use cases and are >>>>>>>>> broadly in use. >>>>>>>>> RATS needs to support both. >>>>>>>>> [nms] In what ways does RATS not support both? >>>>>>>>> LL >>>>>>>>> _______________________________________________ >>>>>>>>> RATS mailing list >>>>>>>>> RATS@ietf.org >>>>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>>>> >>>>>>>> -- >>>>>>>> Best regards, >>>>>>>> Kathleen >>>>>>>> _______________________________________________ >>>>>>>> RATS mailing list >>>>>>>> RATS@ietf.org >>>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>> >>>>>> -- >>>>>> Best regards, >>>>>> Kathleen >>>>> _______________________________________________ >>>>> RATS mailing list >>>>> RATS@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/rats >>>> >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >> > From nobody Thu Nov 21 01:46:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 076271208BE for ; Thu, 21 Nov 2019 01:46:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ll70ZDzT1QkV for ; Thu, 21 Nov 2019 01:45:57 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16EFC1200B3 for ; Thu, 21 Nov 2019 01:45:57 -0800 (PST) Received: from lhreml708-cah.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 5B729464E6E2A9571968; Thu, 21 Nov 2019 09:45:54 +0000 (GMT) Received: from lhreml718-chm.china.huawei.com (10.201.108.69) by lhreml708-cah.china.huawei.com (10.201.108.49) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 21 Nov 2019 09:45:53 +0000 Received: from lhreml718-chm.china.huawei.com (10.201.108.69) by lhreml718-chm.china.huawei.com (10.201.108.69) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Thu, 21 Nov 2019 09:45:53 +0000 Received: from DGGEMM403-HUB.china.huawei.com (10.3.20.211) by lhreml718-chm.china.huawei.com (10.201.108.69) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Thu, 21 Nov 2019 09:45:53 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.140]) by DGGEMM403-HUB.china.huawei.com ([10.3.20.211]) with mapi id 14.03.0439.000; Thu, 21 Nov 2019 17:45:47 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: "Smith, Ned" , "rats@ietf.org" Thread-Topic: =?utf-8?B?562U5aSNOiBbUmF0c10g562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBm?= =?utf-8?Q?low_model_for_consideration:?= Thread-Index: AQHVoCEjYz3HXCcnak+MxQp16YN1Y6eVX/KA Date: Thu, 21 Nov 2019 09:45:47 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.44.238] Content-Type: multipart/alternative; boundary="_000_C02846B1344F344EB4FAA6FA7AF481F13EA64F5Edggemm511mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?utf-8?b?562U5aSNOiDnrZTlpI06ICDnrZTlpI06IEFub3RoZXIg?= =?utf-8?q?RATS_message_flow_model_for_consideration=3A?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 09:46:00 -0000 --_000_C02846B1344F344EB4FAA6FA7AF481F13EA64F5Edggemm511mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhZ3JlZSB3aXRoIHlvdXIgYW5hbHlzaXMgaW4gZ2VuZXJhbCwgYnV0IG5lZWQgbW9yZSB0aGlu a2luZyBhYm91dCB0aGUgbW9yZSBzcGVjaWZpYyBzZWN1cml0eSBpc3N1ZS4NCg0K5Y+R5Lu25Lq6 OiBTbWl0aCwgTmVkIFttYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbV0NCuWPkemAgeaXtumXtDog MjAxOeW5tDEx5pyIMjHml6UgMTI6MDcNCuaUtuS7tuS6ujogWGlhbGlhbmcgKEZyYW5rLCBOZXR3 b3JrIFN0YW5kYXJkICYgUGF0ZW50IERlcHQpIDxmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPjsg cmF0c0BpZXRmLm9yZw0K5Li76aKYOiBSZTog562U5aSNOiBbUmF0c10g562U5aSNOiBBbm90aGVy IFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOg0KDQpUaGUgc2VjdXJp dHkgY29uY2VybiBpcyBwYXJ0aWFsbHkgcmFpc2VkIGJ5IHRoZSBwcmV2aW91cyBwYXJhZ3JhcGgs IG5hbWVseSB0aGF0IHRoZSBSUCBzaG91bGRu4oCZdCB0YWtlIGFjdGlvbiBvciBjb25zdW1lIGRh dGEgZnJvbSBhbiBBdHRlc3RlciBiZWZvcmUgcmVjZWl2aW5nIGFuZCBldmFsdWF0aW5nIHRoZSBh dHRlc3RhdGlvbiBFdmlkZW5jZSBhcyB0aGUgcG9pbnQgb2YgYXR0ZXN0YXRpb24gaXMgdG8gbGVu ZCBjcmVkaWJpbGl0eSBhbmQgdmVyYWNpdHkgdG8gdGhlIGRhdGEuIFRoaXMgaXMgYSBnZW5lcmFs aXphdGlvbiB0aGF0IGNvdWxkIGJlIGludmFsaWRhdGVkIGJ5IHVzZSBjYXNlIG9yIGRlcGxveW1l bnQgc3BlY2lmaWMgY2lyY3Vtc3RhbmNlcywgYnV0IHNlZW1zIHRvIG1ha2Ugc2Vuc2UgYXMgYSBn dWlkaW5nIHByaW5jaXBsZS4gVGhlIGNvbnNpZGVyYXRpb24gaXMgdGhhdCBpZiB0aGUgcGVyY2Vw dGlvbiBvZiBhZGRlZCBjb21wbGV4aXR5IGNhdXNlcyBpbXBsZW1lbnRlcnMgdG8gaWdub3JlIHRo ZSBleHBlY3RhdGlvbiB0aGF0IGRhdGEgaXNu4oCZdCB0cnVzdHdvcnRoeSB1bnRpbCB0aGUgc291 cmNlIG9mIHRoZSBkYXRhIChhdHRlc3RlZCBlbnZpcm9ubWVudCkgaGFzIGJlZW4gYXR0ZXN0ZWQg dGhlbiBpdCBpcyBhIHNlY3VyaXR5IGNvbnNpZGVyYXRpb24uIERhdGEgU0hPVUxEIGJlIHByZXN1 bWVkIHRvIGJlIHVudHJ1c3RlZCB1bnRpbCBwcm92ZW4gdHJ1c3R3b3J0aHkuDQoNCkZyb206ICJY aWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJiBQYXRlbnQgRGVwdCkiIDxmcmFuay54 aWFsaWFuZ0BodWF3ZWkuY29tPG1haWx0bzpmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPj4NCkRh dGU6IFdlZG5lc2RheSwgTm92ZW1iZXIgMjAsIDIwMTkgYXQgNjozMSBQTQ0KVG86ICJTbWl0aCwg TmVkIiA8bmVkLnNtaXRoQGludGVsLmNvbTxtYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbT4+LCAi cmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4iIDxyYXRzQGlldGYub3JnPG1haWx0 bzpyYXRzQGlldGYub3JnPj4NClN1YmplY3Q6IOetlOWkjTogW1JhdHNdIOetlOWkjTogQW5vdGhl ciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KSGkgTmVkLA0K VGhhbmtzIGZvciB0aGUgZ29vZCBpbnNpZ2h0cywgcGxlYXNlIHNlZSBteSByZXNwb25zZXMgaW5s aW5lIGZvciB5b3VyIDIgZW1haWxzIGJlbG93Og0KDQrlj5Hku7bkuro6IFNtaXRoLCBOZWQgW21h aWx0bzpuZWQuc21pdGhAaW50ZWwuY29tXQ0K5Y+R6YCB5pe26Ze0OiAyMDE55bm0MTHmnIgyMeaX pSA2OjE5DQrmlLbku7bkuro6IFhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmIFBh dGVudCBEZXB0KSA8ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbTxtYWlsdG86ZnJhbmsueGlhbGlh bmdAaHVhd2VpLmNvbT4+OyByYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPg0K5Li7 6aKYOiBSZTogW1JhdHNdIOetlOWkjTogQW5vdGhlciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBm b3IgY29uc2lkZXJhdGlvbjoNCg0KQWxzbywgdGhlIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LXhpYS1yYXRzLXB1YnN1Yi1tb2RlbC8gb21pdHMgZGlzY3Vzc2lvbiBvZiBw dWItc3ViIGJldHdlZW4gVmVyaWZpZXIgYW5kIFJlbHlpbmcgUGFydGllcy4gUHJlc3VtYWJseSwg dGhlcmUgY2FuIGJlIG11bHRpcGxlIHJlbHlpbmcgcGFydGllcyB0aGF0IHVzZSBhIGNvbW1vbiB2 ZXJpZmllci4gVGhlIEF0dGVzdGF0aW9uIFJlc3VsdHMgcmVzdWx0aW5nIGZyb20gdGhlIGludGVy YWN0aW9ucyBiZXR3ZWVuIEF0dGVzdGVycyBhbmQgVmVyaWZpZXIgYmVjb21lIHB1Yi1zdWIg4oCc dG9waWNz4oCdIGZvciBzdWJzY3JpcHRpb24gYnkgUmVseWluZyBQYXJ0aWVzLg0KW0ZyYW5rXTog Z29vZCBwb2ludC4gQW5kIHRoYXQgcHViL3N1YiBtYXliZSBpcyBub3QgdGhlIG5ldGNvbmYveWFu ZyBiYXNlZCwgY2FuIGJlIG90aGVyIG1ldGhvZHMsIGxpa2U6IGF0b20sIHhtcHAgYW5kIGh0dHAt YmFzZWQuIFdlIGhhdmUgbm90IGNvbnNpZGVyZWQgdGhpcyBwb2ludCByaWdodCBub3csIGl0IGNh biBiZSBpbiB0aGlzIGRyYWZ0IGxhdGVyIG9yIGRpc2N1c3MgaW4gb3RoZXIgZHJhZnQgaWYgdGhl IFdHIGFyZSBpbnRlcmVzdGVkLg0KDQpTb21lIGF0dGVudGlvbiBzaG91bGQgYmUgZ2l2ZW4gdG8g dGhlIHVzZSBjYXNlIGFuZCBhcmNoaXRlY3R1cmFsIG1vZGVscy4gUHJlc3VtYWJseSwgdGhlcmUg aXMgYSBkZXBlbmRlbmN5IC8gb3JkZXJpbmcgdGhhdCByZWx5aW5nIHBhcnR5IGVuZm9yY2VzIG92 ZXIgdGhlIGRhdGEgaXQgb2J0YWlucyAoc3Vic2VxdWVudGx5PykgZnJvbSB0aGUgQXR0ZXN0ZXIu IE90aGVyd2lzZSwgYWN0aW5nIG9uIHVuLWF0dGVzdGVkIGRhdGEgY291bGQgaW1wbHkgYSB3ZWFr bmVzcyBpbiB0aGUgZGF0YSBmbG93IG1vZGVsLiBGb3IgZXhhbXBsZSwgYSBSZWx5aW5nIFBhcnR5 IG1pZ2h0IGV4cGVjdCB0byByZWNlaXZlIGEgcHVibGljYXRpb24gb2YgYW4gQXR0ZXN0YXRpb24g UmVzdWx0cyB0b3BpYyBhcyBhbiBhZGRpdGlvbmFsIGNvbmRpdGlvbiB3aGVuIGJlaW5nIG5vdGlm aWVkIGFib3V0IGEgZGF0YSB0b3BpYyBvcmlnaW5hdGluZyBmcm9tIHRoZSBzYW1lIGF0dGVzdGVk IGVudmlyb25tZW50Lg0KW0ZyYW5rXTogdGhlcmUgbWF5ICBiZS4gQnV0IEkgaG9wZSBub3QgYXMg aXQgd2lsbCBpbnRyb2R1Y2UgY29tcGxleGl0eS4gSWYgd2UgcmVhbGx5IG5lZWQgdG8gZGVhbCB3 aXRoIGl0LCBhIHNpbXBsZSB3YXkgaXMgdG8gbGVhdmUgaXQgdG8gdGhlIFJlbHlpbmcgUGFydHkg d2l0aCBzb21lIGNhY2hlIG1lY2hhbmlzbS4NCg0KVGhlIGN1cnJlbnQgZHJhZnQgZG9lc27igJl0 IGFkZXF1YXRlbHkgYWRkcmVzc2VzIHRoZSBzZWN1cml0eSByZWxldmFudCBjb25zaWRlcmF0aW9u cyBnaXZlbiBhIHB1Yi1zdWIgZGVwbG95bWVudCB0aGF0IGluY29ycG9yYXRlcyBhdHRlc3RhdGlv biBJTU8uDQpbRnJhbmtdOiBzdXJlLCBkZWZpbml0ZWx5IHdpbGwgZG8gaXQgaW4gdGhlIGZ1dHVy ZSBpdGVyYXRpb25zLiBJcyB0aGVyZSBhbnkgYmlnIHNlY3VyaXR5IGlzc3VlcyBpbiB5b3VyIG1p bmQgbm93PyBJIGFtIGFsd2F5cyBjdXJpb3Vzfn4NCg0KLU5lZA0KDQpGcm9tOiBSQVRTIDxyYXRz LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFs ZiBvZiAiU21pdGgsIE5lZCIgPG5lZC5zbWl0aEBpbnRlbC5jb208bWFpbHRvOm5lZC5zbWl0aEBp bnRlbC5jb20+Pg0KRGF0ZTogTW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBhdCA4OjI1IEFNDQpU bzogIlhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmIFBhdGVudCBEZXB0KSIgPGZy YW5rLnhpYWxpYW5nQGh1YXdlaS5jb208bWFpbHRvOmZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20+ PiwgInJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+IiA8cmF0c0BpZXRmLm9yZzxt YWlsdG86cmF0c0BpZXRmLm9yZz4+DQpTdWJqZWN0OiBSZTogW1JhdHNdIOetlOWkjTogQW5vdGhl ciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KVGhpcyDigJxh cmNoaXRlY3R1cmFsIG1vZGVs4oCdIHBhcmFsbGVscyB0aGUgcm9sZXMgbWVzc2FnZSBmbG93LiBJ IHRoaW5rIGl0IGNvdWxkIGJlIHZpZXdlZCBhcyBhIHRoaXJkIG1vZGVsIHNvbWV0aGluZyBsaWtl IGEgcHViLXN1YiBicm9rZXIgd2hlcmUgUmVseWluZyBQYXJ0aWVzIHN1YnNjcmliZSB0byBWZXJp ZmllciAoYnJva2VyKSB0byByZWNlaXZlIEF0dGVzdGF0aW9uIFJlc3VsdHMgYW5kIEF0dGVzdGVy cyBwdWJsaXNoIHRvIFZlcmlmaWVyIChicm9rZXIpIHdoZW4gYSBjaGFuZ2UgdG8gdGhlIEV2aWRl bmNlIGlzIGZvdW5kLg0KICAgICAgICAgICAgICAgIFtGcmFua106IGl04oCZcyBhIHVzZSBjYXNl IGFuZCBhIHZlcnkgZ29vZCBvbmUsIHRoYW5rc35+IEFuZCB0aGVyZSBjYW4gYmUgbW9yZSB1c2Ug Y2FzZXMuIEFub3RoZXIgZXhhbXBsZSBpcyBzaW1wbHkgcGVyaW9kaWNhbGx5IHJlcXVlc3QvcmVz cG9uc2UgbWVzc2FnZSBmbG93IGJldHdlZW4gZWFjaCBwYWlycy4NCg0KICAgICAgICAgICAgICAg IEIuUi4NCiAgICAgICAgICAgICAgICBGcmFuaw0KDQpBIHB1Yi1zdWIgbW9kZWwgbWlnaHQgdHJl YXQgQ2xhaW1zIGFzIHB1Yi1zdWIgVG9waWNzIHRoYXQgY2FuIGJlIHN1YnNjcmliZWQgdG8gb3Ig cHVibGlzaGVkIHRvLg0KDQpJIGdldCB0aGF0IHNvbWUgcHViLXN1YiBhcmNoaXRlY3R1cmVzIGVs aW1pbmF0ZSB0aGUgYnJva2VyIGFzIGEgZGlzdGluY3QgZW50aXR5LCBidXQgY29uY2VwdHVhbGx5 IHRoZSBtb2RlbCBpc27igJl0IGZ1bmRhbWVudGFsbHkgZGlmZmVyZW50IHRoYW4gaWYgdGhlcmUg d2VyZSBhIGNlbnRyYWwgYnJva2VyLg0KDQotTmVkDQoNCkZyb206IFJBVFMgPHJhdHMtYm91bmNl c0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnPj4gb24gYmVoYWxmIG9mICJY aWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJiBQYXRlbnQgRGVwdCkiIDxmcmFuay54 aWFsaWFuZ0BodWF3ZWkuY29tPG1haWx0bzpmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tPj4NCkRh dGU6IFNhdHVyZGF5LCBOb3ZlbWJlciAxNiwgMjAxOSBhdCAyOjE3IEFNDQpUbzogInJhdHNAaWV0 Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+IiA8cmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0Bp ZXRmLm9yZz4+DQpTdWJqZWN0OiBbUmF0c10g562U5aSNOiBBbm90aGVyIFJBVFMgbWVzc2FnZSBm bG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOg0KDQpPb3BzLCBTb21lIGZpeGVzIG9mIHRoZSBi ZWxvdyB0ZXh0Og0KDQoNCuWPkeS7tuS6ujogUkFUUyBbbWFpbHRvOnJhdHMtYm91bmNlc0BpZXRm Lm9yZ10g5Luj6KGoIFhpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmIFBhdGVudCBE ZXB0KQ0K5Y+R6YCB5pe26Ze0OiAyMDE55bm0MTHmnIgxNuaXpSAxODoxMw0K5pS25Lu25Lq6OiBy YXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPg0K5Li76aKYOiBbUmF0c10gQW5vdGhl ciBSQVRTIG1lc3NhZ2UgZmxvdyBtb2RlbCBmb3IgY29uc2lkZXJhdGlvbjoNCg0KSGkgUkFUUyBh cmNoaXRlY3R1cmUgZGVzaWduIHRlYW0gYW5kIGFsbCwNCkluIGFkZGl0aW9uIHRvIHRoZSBjdXJy ZW50IHBhc3Nwb3J0IG1vZGVsIGFuZCBiYWNrZ3JvdW5kIGNoZWNrIG1vZGVsLiBJIHRoaW5rIHRo ZXJlIGlzIGEgdGhpcmQgbWVzc2FnZSBmbG93IG1vZGVsIHBvc3NpYmx5IGZvciB1cyB0byBjb25z aWRlcjoNCkF0dGVzdGVyIDwgLS0tLS0tLS0tLS0tLS0tLS0tLS0gPiB2ZXJpZmllciA8IC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tID4gcmVseWluZyBwYXJ0eQ0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEV2aWRlbmNlICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg YXR0ZXN0YXRpb24gcmVzdWx0cw0KDQpUaGUga2V5IHBvaW50IG9mIHRoZSBhYm92ZSBtb2RlbCBp cyB0aGF0IHZlcmlmaWVyIGhhcyBpbmRlcGVuZGVudCBjb25uZWN0aW9uIHdpdGggYXR0ZXN0ZXIg YW5kIHJlbHlpbmcgcGFydHkgcmVzcGVjdGl2ZWx5LCBhbmQgdGhlcmUgYXJlIHR3byBpbmRlcGVu ZGVudCBtZXNzYWdlIGV4Y2hhbmdlcyBiZXR3ZWVuIHRoZSBhdHRlc3RlciBhbmQgdmVyaWZpZXIs IGJldHdlZW4gdGhlIHZlcmlmaWVyIGFuZCB0aGUgcmVseWluZyBwYXJ0eS4gT2YgY291cnNlLCBp ZiBuZWVkZWQsIHRoZXJlIGNhbiBiZSBzb21lIHRyaWdnZXIgY29uZGl0aW9uIGFuZCBpbnRlcmFj dGlvbiBiZXR3ZWVuIHRoZXNlIHR3byBjb25uZWN0aW9ucy4NClRoZSByZWxhdGl2ZSBhZHZhbnRh Z2Ugb2YgdGhlIGFib3ZlIG1vZGVsIGlzIHNpbXBsZSwgYW5kIGVhY2ggcm9sZSBvbmx5IHNlZSB3 aGF0IGhlIG5lZWRzIHRvIHNlZSwgbGlrZTogZXZpZGVuY2UgaXMgbm90IHNlZW4gYnkgdGhlIHJl bHlpbmcgcGFydHksIGF0dGVzdGF0aW9uIHJlc3VsdHMgaXMgbm90IHNlZW4gYnkgdGhlIGF0dGVz dGVyLg0KDQpJIGFtIHdvbmRlcmluZyB3aGV0aGVyIHRoZSBhcmNoaXRlY3R1cmUgZHJhZnQgd2ls bCBjb25zaWRlciBpdD8NCg0KQi5SLg0KRnJhbmsNCg== --_000_C02846B1344F344EB4FAA6FA7AF481F13EA64F5Edggemm511mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiTVMgR290aGljIjsNCglwYW5vc2UtMToyIDExIDYgOSA3IDIgNSA4IDIgNDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5Ok1pbmdMaVU7DQoJcGFub3NlLTE6MiAxIDYgOSAw IDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0K CXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk65b6u6L2v6ZuF6buROw0KCXBhbm9zZS0xOjIgMTEgNSAzIDIgMiA0IDIg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5a6L5L2TIjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5b6u6L2v 6ZuF6buRIjsNCglwYW5vc2UtMToyIDExIDUgMyAyIDIgNCAyIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OiJcQE1TIEdvdGhpYyI7DQoJcGFub3NlLTE6MiAxMSA2IDkgNyAyIDUgOCAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiXEBNaW5nTGlVIjt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCgl0ZXh0LWFsaWduOmp1c3Rp Znk7DQoJZm9udC1zaXplOjEwLjVwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp Zjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVk LCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWww LCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3Jt YWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5 bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlm Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMjMNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyNA0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgOTAuMHB0IDcyLjBwdCA5 MC4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRp dCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVk aXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hl YWQ+DQo8Ym9keSBsYW5nPSJaSC1DTiIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0K PGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SSBhZ3JlZSB3aXRoIHlvdXIgYW5hbHlz aXMgaW4gZ2VuZXJhbCwgYnV0IG5lZWQgbW9yZSB0aGlua2luZyBhYm91dCB0aGUgbW9yZSBzcGVj aWZpYyBzZWN1cml0eSBpc3N1ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9hPjwvcD4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7 cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0i bGVmdCIgc3R5bGU9InRleHQtYWxpZ246bGVmdCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPuWP keS7tuS6ujxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mb hem7kSZxdW90OyxzYW5zLXNlcmlmIj4gU21pdGgsIE5lZCBbbWFpbHRvOm5lZC5zbWl0aEBpbnRl bC5jb21dDQo8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPuWPkemAgeaXtumX tDxzcGFuIGxhbmc9IkVOLVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZx dW90OyxzYW5zLXNlcmlmIj4gMjAxOTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+5bm0PHNw YW4gbGFuZz0iRU4tVVMiPjExPC9zcGFuPuaciDxzcGFuIGxhbmc9IkVOLVVTIj4yMTwvc3Bhbj7m l6U8c3BhbiBsYW5nPSJFTi1VUyI+DQogMTI6MDc8YnI+DQo8L3NwYW4+PGI+5pS25Lu25Lq6PHNw YW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gWGlhbGlhbmcg KEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVudCBEZXB0KSAmbHQ7ZnJhbmsueGlh bGlhbmdAaHVhd2VpLmNvbSZndDs7IHJhdHNAaWV0Zi5vcmc8YnI+DQo8L3NwYW4+PGI+5Li76aKY PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gUmU6IDwv c3Bhbj7nrZTlpI08c3BhbiBsYW5nPSJFTi1VUyI+OiBbUmF0c10NCjwvc3Bhbj7nrZTlpI08c3Bh biBsYW5nPSJFTi1VUyI+OiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZvciBjb25z aWRlcmF0aW9uOjxvOnA+PC9vOnA+PC9zcGFuPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImxlZnQiIHN0eWxlPSJ0ZXh0LWFsaWduOmxlZnQi PjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PlRoZSBzZWN1cml0eSBjb25jZXJuIGlzIHBhcnRpYWxseSByYWlzZWQgYnkgdGhlIHByZXZpb3Vz IHBhcmFncmFwaCwgbmFtZWx5IHRoYXQgdGhlIFJQIHNob3VsZG7igJl0IHRha2UgYWN0aW9uIG9y IGNvbnN1bWUgZGF0YSBmcm9tIGFuIEF0dGVzdGVyIGJlZm9yZSByZWNlaXZpbmcgYW5kIGV2YWx1 YXRpbmcgdGhlIGF0dGVzdGF0aW9uIEV2aWRlbmNlDQogYXMgdGhlIHBvaW50IG9mIGF0dGVzdGF0 aW9uIGlzIHRvIGxlbmQgY3JlZGliaWxpdHkgYW5kIHZlcmFjaXR5IHRvIHRoZSBkYXRhLiBUaGlz IGlzIGEgZ2VuZXJhbGl6YXRpb24gdGhhdCBjb3VsZCBiZSBpbnZhbGlkYXRlZCBieSB1c2UgY2Fz ZSBvciBkZXBsb3ltZW50IHNwZWNpZmljIGNpcmN1bXN0YW5jZXMsIGJ1dCBzZWVtcyB0byBtYWtl IHNlbnNlIGFzIGEgZ3VpZGluZyBwcmluY2lwbGUuIFRoZSBjb25zaWRlcmF0aW9uIGlzIHRoYXQg aWYgdGhlDQogcGVyY2VwdGlvbiBvZiBhZGRlZCBjb21wbGV4aXR5IGNhdXNlcyBpbXBsZW1lbnRl cnMgdG8gaWdub3JlIHRoZSBleHBlY3RhdGlvbiB0aGF0IGRhdGEgaXNu4oCZdCB0cnVzdHdvcnRo eSB1bnRpbCB0aGUgc291cmNlIG9mIHRoZSBkYXRhIChhdHRlc3RlZCBlbnZpcm9ubWVudCkgaGFz IGJlZW4gYXR0ZXN0ZWQgdGhlbiBpdCBpcyBhIHNlY3VyaXR5IGNvbnNpZGVyYXRpb24uIERhdGEg U0hPVUxEIGJlIHByZXN1bWVkIHRvIGJlIHVudHJ1c3RlZCB1bnRpbA0KIHByb3ZlbiB0cnVzdHdv cnRoeS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRE RiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+RnJvbToNCjwvc3Bhbj48L2I+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj4mcXVvdDtYaWFs aWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZs dDs8YSBocmVmPSJtYWlsdG86ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbSI+ZnJhbmsueGlhbGlh bmdAaHVhd2VpLmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwgTm92ZW1i ZXIgMjAsIDIwMTkgYXQgNjozMSBQTTxicj4NCjxiPlRvOiA8L2I+JnF1b3Q7U21pdGgsIE5lZCZx dW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm5lZC5zbWl0aEBpbnRlbC5jb20iPm5lZC5zbWl0aEBp bnRlbC5jb208L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJh dHNAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+ cmF0c0BpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPjwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDs7 Y29sb3I6YmxhY2siPuetlOWkjTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjogW1JhdHNdDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7O2NvbG9yOmJs YWNrIj7nrZTlpI08L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2NvbG9yOmJsYWNrIj46IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNv bnNpZGVyYXRpb246PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgTmVkLDwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHRoZSBnb29kIGluc2lnaHRzLCBwbGVhc2Ugc2Vl IG15IHJlc3BvbnNlcyBpbmxpbmUgZm9yIHlvdXIgMiBlbWFpbHMgYmVsb3c6PC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3RleHQtYWxp Z246bGVmdCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2VyaWYiPuWPkeS7tuS6ujxzcGFuIGxhbmc9IkVO LVVTIj46PC9zcGFuPjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlm Ij4NCiBTbWl0aCwgTmVkIFs8YSBocmVmPSJtYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbSI+bWFp bHRvOm5lZC5zbWl0aEBpbnRlbC5jb208L2E+XQ0KPGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90Oyxz YW5zLXNlcmlmIj7lj5HpgIHml7bpl7Q8c3BhbiBsYW5nPSJFTi1VUyI+Ojwvc3Bhbj48L3NwYW4+ PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+IDIwMTk8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1 b3Q7LHNhbnMtc2VyaWYiPuW5tDxzcGFuIGxhbmc9IkVOLVVTIj4xMTwvc3Bhbj7mnIg8c3BhbiBs YW5nPSJFTi1VUyI+MjE8L3NwYW4+5pelPHNwYW4gbGFuZz0iRU4tVVMiPg0KIDY6MTk8YnI+DQo8 L3NwYW4+PGI+5pS25Lu25Lq6PHNwYW4gbGFuZz0iRU4tVVMiPjo8L3NwYW4+PC9iPjxzcGFuIGxh bmc9IkVOLVVTIj4gWGlhbGlhbmcgKEZyYW5rLCBOZXR3b3JrIFN0YW5kYXJkICZhbXA7IFBhdGVu dCBEZXB0KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmZyYW5rLnhpYWxpYW5nQGh1YXdlaS5jb20iPmZy YW5rLnhpYWxpYW5nQGh1YXdlaS5jb208L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpyYXRzQGll dGYub3JnIj5yYXRzQGlldGYub3JnPC9hPjxicj4NCjwvc3Bhbj48Yj7kuLvpopg8c3BhbiBsYW5n PSJFTi1VUyI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBSZTogW1JhdHNdIDwvc3Bh bj4NCuetlOWkjTxzcGFuIGxhbmc9IkVOLVVTIj46IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cg bW9kZWwgZm9yIGNvbnNpZGVyYXRpb246PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3RleHQtYWxpZ246bGVm dCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+QWxzbywgdGhlDQo8YSBocmVmPSJodHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWEtcmF0cy1wdWJzdWItbW9kZWwvIj5o dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC14aWEtcmF0cy1wdWJzdWItbW9k ZWwvPC9hPiBvbWl0cyBkaXNjdXNzaW9uIG9mIHB1Yi1zdWIgYmV0d2VlbiBWZXJpZmllciBhbmQg UmVseWluZyBQYXJ0aWVzLiBQcmVzdW1hYmx5LCB0aGVyZSBjYW4gYmUgbXVsdGlwbGUgcmVseWlu ZyBwYXJ0aWVzIHRoYXQNCiB1c2UgYSBjb21tb24gdmVyaWZpZXIuIFRoZSBBdHRlc3RhdGlvbiBS ZXN1bHRzIHJlc3VsdGluZyBmcm9tIHRoZSBpbnRlcmFjdGlvbnMgYmV0d2VlbiBBdHRlc3RlcnMg YW5kIFZlcmlmaWVyIGJlY29tZSBwdWItc3ViIOKAnHRvcGljc+KAnSBmb3Igc3Vic2NyaXB0aW9u IGJ5IFJlbHlpbmcgUGFydGllcy4NCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiBn b29kIHBvaW50LiBBbmQgdGhhdCBwdWIvc3ViIG1heWJlIGlzIG5vdCB0aGUgbmV0Y29uZi95YW5n IGJhc2VkLCBjYW4gYmUgb3RoZXIgbWV0aG9kcywgbGlrZTogYXRvbSwgeG1wcCBhbmQgaHR0cC1i YXNlZC4gV2UgaGF2ZSBub3QgY29uc2lkZXJlZCB0aGlzIHBvaW50IHJpZ2h0DQogbm93LCBpdCBj YW4gYmUgaW4gdGhpcyBkcmFmdCBsYXRlciBvciBkaXNjdXNzIGluIG90aGVyIGRyYWZ0IGlmIHRo ZSBXRyBhcmUgaW50ZXJlc3RlZC48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlNvbWUgYXR0ZW50aW9uIHNob3VsZCBiZSBnaXZlbiB0 byB0aGUgdXNlIGNhc2UgYW5kIGFyY2hpdGVjdHVyYWwgbW9kZWxzLiBQcmVzdW1hYmx5LCB0aGVy ZSBpcyBhIGRlcGVuZGVuY3kgLyBvcmRlcmluZyB0aGF0IHJlbHlpbmcgcGFydHkgZW5mb3JjZXMg b3ZlciB0aGUgZGF0YSBpdCBvYnRhaW5zDQogKHN1YnNlcXVlbnRseT8pIGZyb20gdGhlIEF0dGVz dGVyLiBPdGhlcndpc2UsIGFjdGluZyBvbiB1bi1hdHRlc3RlZCBkYXRhIGNvdWxkIGltcGx5IGEg d2Vha25lc3MgaW4gdGhlIGRhdGEgZmxvdyBtb2RlbC4gRm9yIGV4YW1wbGUsIGEgUmVseWluZyBQ YXJ0eSBtaWdodCBleHBlY3QgdG8gcmVjZWl2ZSBhIHB1YmxpY2F0aW9uIG9mIGFuIEF0dGVzdGF0 aW9uIFJlc3VsdHMgdG9waWMgYXMgYW4gYWRkaXRpb25hbCBjb25kaXRpb24gd2hlbiBiZWluZw0K IG5vdGlmaWVkIGFib3V0IGEgZGF0YSB0b3BpYyBvcmlnaW5hdGluZyBmcm9tIHRoZSBzYW1lIGF0 dGVzdGVkIGVudmlyb25tZW50LiA8L3NwYW4+DQo8c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bRnJhbmtdOiB0 aGVyZSBtYXkmbmJzcDsgYmUuIEJ1dCBJIGhvcGUgbm90IGFzIGl0IHdpbGwgaW50cm9kdWNlIGNv bXBsZXhpdHkuIElmIHdlIHJlYWxseSBuZWVkIHRvIGRlYWwgd2l0aCBpdCwgYSBzaW1wbGUgd2F5 IGlzIHRvIGxlYXZlIGl0IHRvIHRoZSBSZWx5aW5nIFBhcnR5IHdpdGggc29tZSBjYWNoZQ0KIG1l Y2hhbmlzbS48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxh bmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPlRoZSBjdXJyZW50IGRyYWZ0IGRvZXNu4oCZdCBhZGVxdWF0ZWx5IGFkZHJl c3NlcyB0aGUgc2VjdXJpdHkgcmVsZXZhbnQgY29uc2lkZXJhdGlvbnMgZ2l2ZW4gYSBwdWItc3Vi IGRlcGxveW1lbnQgdGhhdCBpbmNvcnBvcmF0ZXMgYXR0ZXN0YXRpb24gSU1PLjwvc3Bhbj48c3Bh biBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJj b2xvcjojMUY0OTdEIj5bRnJhbmtdOiBzdXJlLCBkZWZpbml0ZWx5IHdpbGwgZG8gaXQgaW4gdGhl IGZ1dHVyZSBpdGVyYXRpb25zLiBJcyB0aGVyZSBhbnkgYmlnIHNlY3VyaXR5IGlzc3VlcyBpbiB5 b3VyIG1pbmQgbm93PyBJIGFtIGFsd2F5cyBjdXJpb3Vzfn48L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPi1OZWQ8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0 REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZyI+cmF0cy1ib3VuY2VzQGlldGYu b3JnPC9hPiZndDsgb24gYmVoYWxmIG9mICZxdW90O1NtaXRoLCBOZWQmcXVvdDsgJmx0OzxhIGhy ZWY9Im1haWx0bzpuZWQuc21pdGhAaW50ZWwuY29tIj5uZWQuc21pdGhAaW50ZWwuY29tPC9hPiZn dDs8YnI+DQo8Yj5EYXRlOiA8L2I+TW9uZGF5LCBOb3ZlbWJlciAxOCwgMjAxOSBhdCA4OjI1IEFN PGJyPg0KPGI+VG86IDwvYj4mcXVvdDtYaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsgU3RhbmRhcmQg JmFtcDsgUGF0ZW50IERlcHQpJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZnJhbmsueGlhbGlh bmdAaHVhd2VpLmNvbSI+ZnJhbmsueGlhbGlhbmdAaHVhd2VpLmNvbTwvYT4mZ3Q7LCAmcXVvdDs8 YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0 OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPiZndDs8YnI+ DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSA8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7O2NvbG9yOmJsYWNrIj7n rZTlpI08L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Nv bG9yOmJsYWNrIj46IEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVy YXRpb246PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIu MHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoaXMg4oCcYXJjaGl0ZWN0dXJhbCBt b2RlbOKAnSBwYXJhbGxlbHMgdGhlIHJvbGVzIG1lc3NhZ2UgZmxvdy4gSSB0aGluayBpdCBjb3Vs ZCBiZSB2aWV3ZWQgYXMgYSB0aGlyZCBtb2RlbCBzb21ldGhpbmcgbGlrZSBhIHB1Yi1zdWIgYnJv a2VyIHdoZXJlIFJlbHlpbmcgUGFydGllcyBzdWJzY3JpYmUNCiB0byBWZXJpZmllciAoYnJva2Vy KSB0byByZWNlaXZlIEF0dGVzdGF0aW9uIFJlc3VsdHMgYW5kIEF0dGVzdGVycyBwdWJsaXNoIHRv IFZlcmlmaWVyIChicm9rZXIpIHdoZW4gYSBjaGFuZ2UgdG8gdGhlIEV2aWRlbmNlIGlzIGZvdW5k Lg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO1tGcmFua106IGl04oCZcyBhIHVzZSBjYXNlIGFuZCBhIHZlcnkgZ29vZCBvbmUs IHRoYW5rc35+IEFuZCB0aGVyZSBjYW4gYmUgbW9yZSB1c2UgY2FzZXMuIEFub3RoZXIgZXhhbXBs ZSBpcyBzaW1wbHkgcGVyaW9kaWNhbGx5IHJlcXVlc3QvcmVzcG9uc2UgbWVzc2FnZQ0KIGZsb3cg YmV0d2VlbiBlYWNoIHBhaXJzLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+ PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0IuUi48 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IEZyYW5rPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5BIHB1Yi1zdWIgbW9kZWwgbWlnaHQgdHJlYXQgQ2xhaW1zIGFzIHB1Yi1zdWIg VG9waWNzIHRoYXQgY2FuIGJlIHN1YnNjcmliZWQgdG8gb3IgcHVibGlzaGVkIHRvLjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SSBn ZXQgdGhhdCBzb21lIHB1Yi1zdWIgYXJjaGl0ZWN0dXJlcyBlbGltaW5hdGUgdGhlIGJyb2tlciBh cyBhIGRpc3RpbmN0IGVudGl0eSwgYnV0IGNvbmNlcHR1YWxseSB0aGUgbW9kZWwgaXNu4oCZdCBm dW5kYW1lbnRhbGx5IGRpZmZlcmVudCB0aGFuIGlmIHRoZXJlIHdlcmUgYSBjZW50cmFsDQogYnJv a2VyLjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDo3Mi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+LU5lZDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PHNw YW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAw Y20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxMDguMHB0 Ij48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNl c0BpZXRmLm9yZyI+cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsgb24gYmVoYWxmIG9mICZx dW90O1hpYWxpYW5nIChGcmFuaywgTmV0d29yayBTdGFuZGFyZCAmYW1wOyBQYXRlbnQgRGVwdCkm cXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpmcmFuay54aWFsaWFuZ0BodWF3ZWkuY29tIj5mcmFu ay54aWFsaWFuZ0BodWF3ZWkuY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+U2F0dXJkYXks IE5vdmVtYmVyIDE2LCAyMDE5IGF0IDI6MTcgQU08YnI+DQo8Yj5UbzogPC9iPiZxdW90OzxhIGhy ZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7PGEg aHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxi PlN1YmplY3Q6IDwvYj5bUmF0c10gPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90Oztjb2xvcjpibGFjayI+562U5aSNPC9z cGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFj ayI+OiBBbm90aGVyIFJBVFMgbWVzc2FnZSBmbG93IG1vZGVsIGZvciBjb25zaWRlcmF0aW9uOjwv c3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEwOC4wcHQiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxz cGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPk9vcHMsIFNvbWUgZml4ZXMgb2YgdGhlIGJlbG93IHRl eHQ6PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTA4LjBwdCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IGFsaWduPSJsZWZ0IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTA4LjBwdDt0ZXh0LWFsaWduOmxlZnQi PjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5Ok1pbmdMaVUiPuWP kTwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7ku7bkuro8L3NwYW4+PC9iPjxiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xp u5EmcXVvdDssc2Fucy1zZXJpZiI+Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90Oyxz YW5zLXNlcmlmIj4NCiBSQVRTIFs8YSBocmVmPSJtYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3Jn Ij5tYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPl0gPC9zcGFuPg0KPGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7k u6Pooag8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4NCjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj5YaWFsaWFuZyAoRnJhbmssIE5ldHdvcmsg U3RhbmRhcmQgJmFtcDsgUGF0ZW50IERlcHQpPGJyPg0KPC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5Ok1pbmdMaVUiPuWPkTwvc3Bhbj48L2I+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1 b3Q7Ij7pgIE8L3NwYW4+PC9iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5Ok1pbmdMaVUiPuaXtumXtDwvc3Bhbj48L2I+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90 OyxzYW5zLXNlcmlmIj46PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7LHNhbnMtc2Vy aWYiPg0KIDIwMTk8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7lubQ8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90 OyxzYW5zLXNlcmlmIj4xMTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtNUyBHb3RoaWMmcXVvdDsiPuaciDwvc3Bhbj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buR JnF1b3Q7LHNhbnMtc2VyaWYiPjE2PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O01TIEdvdGhpYyZxdW90OyI+5pelPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/p m4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+DQogMTg6MTM8YnI+DQo8L3NwYW4+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7TVMgR290aGljJnF1b3Q7Ij7m lLbku7bkuro8L3NwYW4+PC9iPjxiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJpZiI+ Ojwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O+W+rui9r+mbhem7kSZxdW90OyxzYW5zLXNlcmlmIj4NCjxhIGhyZWY9 Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPjxicj4NCjwvc3Bhbj48Yj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtNUyBHb3RoaWMm cXVvdDsiPuS4uzwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6TWluZ0xpVSI+6aKYPC9zcGFuPjwvYj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q75b6u6L2v6ZuF6buRJnF1b3Q7 LHNhbnMtc2VyaWYiPjo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDvlvq7ova/pm4Xpu5EmcXVvdDssc2Fucy1zZXJp ZiI+DQogW1JhdHNdIEFub3RoZXIgUkFUUyBtZXNzYWdlIGZsb3cgbW9kZWwgZm9yIGNvbnNpZGVy YXRpb246PC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImxlZnQiIHN0eWxlPSJt YXJnaW4tbGVmdDoxMDguMHB0O3RleHQtYWxpZ246bGVmdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+SGkgUkFUUyBhcmNoaXRlY3R1 cmUgZGVzaWduIHRlYW0gYW5kIGFsbCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTA4LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMi PkluIGFkZGl0aW9uIHRvIHRoZSBjdXJyZW50IHBhc3Nwb3J0IG1vZGVsIGFuZCBiYWNrZ3JvdW5k IGNoZWNrIG1vZGVsLiBJIHRoaW5rIHRoZXJlIGlzIGEgdGhpcmQgbWVzc2FnZSBmbG93IG1vZGVs IHBvc3NpYmx5IGZvciB1cyB0byBjb25zaWRlcjo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTA4LjBwdCI+PHNwYW4gbGFuZz0i RU4tVVMiPkF0dGVzdGVyICZsdDsgLS0tLS0tLS0tLS0tLS0tLS0tLS0gJmd0OyB2ZXJpZmllciAm bHQ7IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tICZndDsgcmVseWluZyBwYXJ0eTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj5FdmlkZW5jZSAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDs8c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 DQo8L3NwYW4+YXR0ZXN0YXRpb24gcmVzdWx0czxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJF Ti1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjEwOC4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUga2V5IHBv aW50IG9mIHRoZSBhYm92ZSBtb2RlbCBpcyB0aGF0IHZlcmlmaWVyIGhhcyBpbmRlcGVuZGVudCBj b25uZWN0aW9uIHdpdGggYXR0ZXN0ZXIgYW5kIHJlbHlpbmcgcGFydHkgcmVzcGVjdGl2ZWx5LCBh bmQgdGhlcmUgYXJlIHR3byBpbmRlcGVuZGVudCBtZXNzYWdlIGV4Y2hhbmdlcyBiZXR3ZWVuIHRo ZSBhdHRlc3Rlcg0KIGFuZCB2ZXJpZmllciwgYmV0d2VlbiB0aGUgdmVyaWZpZXIgYW5kIHRoZSBy ZWx5aW5nIHBhcnR5LiBPZiBjb3Vyc2UsIGlmIG5lZWRlZCwgdGhlcmUgY2FuIGJlIHNvbWUgdHJp Z2dlciBjb25kaXRpb24gYW5kIGludGVyYWN0aW9uIGJldHdlZW4gdGhlc2UgdHdvIGNvbm5lY3Rp b25zLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjEwOC4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5UaGUgcmVsYXRpdmUgYWR2 YW50YWdlIG9mIHRoZSBhYm92ZSBtb2RlbCBpcyBzaW1wbGUsIGFuZCBlYWNoIHJvbGUgb25seSBz ZWUgd2hhdCBoZSBuZWVkcyB0byBzZWUsIGxpa2U6IGV2aWRlbmNlIGlzDQo8Yj48c3BhbiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+bm90PC9zcGFuPiA8L2I+c2VlbiBieSA8c3BhbiBzdHlsZT0iY29s b3I6IzFGNDk3RCI+DQp0aGUgPC9zcGFuPnJlbHlpbmcgcGFydHksIGF0dGVzdGF0aW9uIHJlc3Vs dHMgaXMgPGI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPm5vdA0KPC9zcGFuPjwvYj5zZWVu IGJ5IDxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj50aGUgPC9zcGFuPmF0dGVzdGVyLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEwOC4wcHQiPjxzcGFu IGxhbmc9IkVOLVVTIj5JIGFtIHdvbmRlcmluZyB3aGV0aGVyIHRoZSBhcmNoaXRlY3R1cmUgZHJh ZnQgd2lsbCBjb25zaWRlciBpdD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTA4LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZu YnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxMDguMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+Qi5SLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxMDguMHB0 Ij48c3BhbiBsYW5nPSJFTi1VUyI+RnJhbms8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_C02846B1344F344EB4FAA6FA7AF481F13EA64F5Edggemm511mbxchi_-- From nobody Thu Nov 21 02:18:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 555FB120852 for ; Thu, 21 Nov 2019 02:18:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HDVmbtHcYR8a for ; Thu, 21 Nov 2019 02:18:03 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5676712087C for ; Thu, 21 Nov 2019 02:18:03 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xALAHv7P013670 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 21 Nov 2019 11:17:58 +0100 Received: from [31.133.132.87] (31.133.132.87) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 21 Nov 2019 11:17:52 +0100 From: Henk Birkholz To: Laurence Lundblade CC: "rats@ietf.org" , Kathleen Moriarty , "Smith, Ned" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> Message-ID: <02ec1d3f-3ef6-fbb6-3f59-b846cba1b3ce@sit.fraunhofer.de> Date: Thu, 21 Nov 2019 11:17:47 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.132.87] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 10:18:05 -0000 I re-read this as it made really no sense to me. I realize that I actually do not understand this sentence: On 21.11.19 09:06, Laurence Lundblade wrote: > In this non-TPM style attestation there is hashing of code booted as part of secure boot implemented in the boot ROM, but that all happens inside the boot sequence and never manifests outside of it (I also do not think it is helpful to refer to this part of the boot ROM as a “verifier” in this context because it is not the same as a RATS verifier that produces attestation evidence, is remote and such). What is "this part of the boot ROM" and why should anything in the boot ROM be called "verifier". It seems that it has occurred already. Could someone please tell me where and why? Was it mentioned on this list? Viele Grüße, Henk From nobody Thu Nov 21 03:38:10 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1BDE12084E; Thu, 21 Nov 2019 03:38:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.896 X-Spam-Level: X-Spam-Status: No, score=-0.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, MIME_QP_LONG_LINE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w70cwkg2Mxuj; Thu, 21 Nov 2019 03:38:01 -0800 (PST) Received: from mail-qv1-xf2a.google.com (mail-qv1-xf2a.google.com [IPv6:2607:f8b0:4864:20::f2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A03B120846; Thu, 21 Nov 2019 03:38:01 -0800 (PST) Received: by mail-qv1-xf2a.google.com with SMTP id i3so1235952qvv.7; Thu, 21 Nov 2019 03:38:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=jhBbdmTs8zrtY/+cPctysguB1MJDX2/0GFVgp9wUy3o=; b=YonoKFQa/Wzr1WMwHz5Q89w34jemHPlvoucRFh0+zwsfglKR/KMwBMRRBxZ5QG/F0d xrmdzrRaap+Nep9NI1YCcOhl2mq84fXwmBaLaOcgucSHfoyBvsCjIQp+v2kVc4yffEC7 GqFOh74MG4ToXDouR6yIOnR14VGtW54hZkLn0vhn7HBl23ifPM3ksaHAOsVCCXtCOpNP BGKrKyHNYd7m7aqhhGakTqOdcwFz0SFXVGXrfbmiVU6AujqkFw6zn04XXIZ0Xe2je9Yh x/63pu/7roNRDQ5o3vLx9TfdClHSeuEfbb+cn7DVNgCXnrNYFl6r9Guf52gLJrn37t5K ZHOQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=jhBbdmTs8zrtY/+cPctysguB1MJDX2/0GFVgp9wUy3o=; b=aVIrohf7WvKvK4gDTNfIVccEbQXbbIZuy0OFKouIOqXoKE1JMfa0ADzGFf4WYn+4ej TO2ZAafMGbqa/cvPb2j7XvglmrC32BsE/1MLo2duYeu1WOy7tnrKEksM56zzpN9Btg4W Kry1r0XRk5Wwy4woP8bVACJ0te6nu9UBSgDXSvAicnj9A0bXdC/M0yZRG1FZLQvSePwn xsAl+dE8gNOprIWXOY0R7hnCTnacrNTpTKa3Lvq1BnMF2LaeMgLtkvVFz6JYLOgTZks3 nnjGWLZFtvQZ3nRv0KNuh5wqaaaNgO6OOkyDx6nzxGYhon7mItoSHkFXFyzMZwmr1c6o C16Q== X-Gm-Message-State: APjAAAWtTUp44grWuLzZbtRvQJYP3RQirOG+pyZlopk8eRNIxod5aExR /F+nzRhS435vqwkLncV5WRgsMpkq4CY= X-Google-Smtp-Source: APXvYqxw6MbV40jJgf2ShWnbOA/j1fiFnH8C49Qu2v/PkSnrJGjXuBlquCJT0wI3qQsFURzkzbcHDw== X-Received: by 2002:a0c:b0fa:: with SMTP id p55mr7899580qvc.239.1574336280406; Thu, 21 Nov 2019 03:38:00 -0800 (PST) Received: from [192.168.1.4] (146-115-73-78.s5196.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [146.115.73.78]) by smtp.gmail.com with ESMTPSA id k3sm1202776qkj.119.2019.11.21.03.37.59 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 21 Nov 2019 03:37:59 -0800 (PST) Content-Type: multipart/alternative; boundary=Apple-Mail-5014386E-6366-47A7-9C97-565DA4933420 Content-Transfer-Encoding: 7bit From: Kathleen Moriarty Mime-Version: 1.0 (1.0) Date: Thu, 21 Nov 2019 06:37:58 -0500 Message-Id: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> References: Cc: Ira McDonald , "rats@ietf.org" , sacm , Laurence Lundblade In-Reply-To: To: "Waltermire, David A. (Fed)" X-Mailer: iPhone Mail (17A878) Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 11:38:04 -0000 --Apple-Mail-5014386E-6366-47A7-9C97-565DA4933420 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Sent from my mobile device > On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed) wrote: >=20 > =EF=BB=BF > It sounds like having a CWT claim that contains an entire CoSWID is a path= forward. It may also make sense to do something similar for ISO SWID tags. >=20 > Am I right in thinking that this CWT work can be done in RATS, referencing= CoSWID once it is published as a normative reference? This would allow CoSW= ID to go forward to the IESG, while the CoSWID CWT claim is worked in parall= el in RATS. >=20 > Kathleen, if this is true, does this way forward address your CWT-related c= omments? Hi Dave, I think the signature may have to be on the CWT as opposed to on the claim t= hat is the CoSWID or SWID. We can define it fully in another draft, but sho= uld state it here so that option is understood. It=E2=80=99s a simple write= up, I think. Thank you, Kathleen=20 >=20 > Regards, > Dave >=20 >=20 >=20 >=20 >=20 > From: sacm on behalf of Kathleen Moriarty > Sent: Wednesday, November 20, 2019 9:10 PM > To: Ira McDonald > Cc: rats@ietf.org ; sacm ; Laurence Lundblad= e > Subject: Re: [sacm] [Rats] CoSWID and EAT and CWT > =20 > Great, thanks Laurence. If that's easier I think having the CoSWID in one= claim should be ok and would have the same result as the suggestion I made.= Changing the CoSWID format is a big enough process that it shouldn't happe= n very often. >=20 > Best regards, > Kathleen >=20 > On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald wro= te: > Hi Laurence, >=20 > That seems like a good suggestion for a simple way to integrate CoSWID con= tent > into EAT. >=20 > Cheers, > - Ira >=20 > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Co-Chair - TCG Metadata Access Protocol SG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > PO Box 221 Grand Marais, MI 49839 906-494-2434 >=20 >=20 >=20 > On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade = wrote: > Hi, >=20 > I=E2=80=99m not on the SACM list, but did look at the archive. Hopefully I= =E2=80=99m not out of sync. >=20 > My thought is to register one claim for CWT that is an entire CoSWID (in C= DDL the concise-swid-tag). >=20 > That way CoSWID can grow and develop on its own without lots of adds and s= ubtracts to the CWT registry. It has its own IANA registry with its own expe= rts and such. Seems like the coupling / factoring is about right. >=20 > This would also be the way I=E2=80=99d like to have it in EAT attestation.= We=E2=80=99ve done a mini version of this with the location claim. >=20 > Then if you just want to sign a CoSWID CWT style, this works pretty well t= oo. It has a slight overhead compared to having all the CoSWID data items as= direct CWT claims in that it will have an additional map layer, but that is= only about three bytes. >=20 > LL >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm >=20 >=20 > --=20 >=20 > Best regards, > Kathleen --Apple-Mail-5014386E-6366-47A7-9C97-565DA4933420 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Sent from my mobil= e device

On Nov 20, 2019= , at 11:29 PM, Waltermire, David A. (Fed) <david.waltermire@nist.gov> w= rote:

=EF= =BB=BF
It sounds like having a CWT claim that contains an entire CoSWID is a p= ath forward. It may also make sense to do something similar for ISO SWID tag= s.

Am I right in thinking that this CWT work can be done in RATS, referen= cing CoSWID once it is published as a normative reference? This would allow C= oSWID to go forward to the IESG, while the CoSWID CWT claim is worked in par= allel in RATS.

Kathleen, if this is true, does this way forward address your CWT-rela= ted comments?

Hi Dave,
I think the signature may have to be on the CWT as opposed to on= the claim that is the CoSWID or SWID.  We can define it fully in anoth= er draft, but should state it here so that option is understood.  It=E2= =80=99s a simple write up, I think.

Thank you,
Kathleen 

Regards,
Dave





From: sacm <sacm-bounces@i= etf.org> on behalf of Kathleen Moriarty <kathleen.moriarty.ietf@gmail.= com>
Sent: Wednesday, November 20, 2019 9:10 PM
To: Ira McDonald <blueroofmusic@gmail.com>
Cc: rats@ietf.org <rats@ietf.org>; sacm <sacm@ietf.org>; L= aurence Lundblade <lgl@island-resort.com>
Subject: Re: [sacm] [Rats] CoSWID and EAT and CWT
 
Great, thanks Laurence.  If that's easier I think havi= ng the CoSWID in one claim should be ok and would have the same result as th= e suggestion I made.  Changing the CoSWID format is a big enough proces= s that it shouldn't happen very often.

Best regards,
Kathleen

On Wed, Nov 20, 2019 at 8:00 PM Ira M= cDonald <blueroofmusic@gmail.c= om> wrote:
Hi Laurence,

That seems like a good suggestion for a simple way to integrate CoSWID c= ontent
into EAT.

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
htt= p://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc mailto: blueroo= fmusic@gmail.com
PO Box 221  Grand Marais, MI 49839  906-494-2434



On Wed, Nov 20, 2019 at 7:35 PM Laur= ence Lundblade <lgl@island-resort.com> wrote:
Hi,

I=E2=80=99m not on the SACM list, but did look at the archive. Hopefull= y I=E2=80=99m not out of sync.

My thought is to register one claim for CWT that is an entire CoSWID (i= n CDDL the c= oncise-swid-tag).

That way CoSWID can grow and develop on its own without lots of adds an= d subtracts to the CWT registry. It has its own IANA registry with its own e= xperts and such. Seems like the coupling / factoring is about right.

This would also be the way I=E2=80=99d like to have it in EAT attestati= on. We=E2=80=99ve done a mini version of this with the location claim.

Then if you just want to sign a CoSWID CWT style, this works pretty wel= l too. It has a slight overhead compared to having all the CoSWID data items= as direct CWT claims in that it will have an additional map layer, but that= is only about three bytes.

LL

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--

Best regards,
Kathleen
= --Apple-Mail-5014386E-6366-47A7-9C97-565DA4933420-- From nobody Thu Nov 21 05:24:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 650A412083C; Thu, 21 Nov 2019 05:24:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H6qvogTPCtKQ; Thu, 21 Nov 2019 05:24:40 -0800 (PST) Received: from GCC02-DM3-obe.outbound.protection.outlook.com (mail-dm3gcc02hn2231.outbound.protection.outlook.com [52.100.154.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F82F12081A; Thu, 21 Nov 2019 05:24:40 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=O1gjNIgjJaHYUQPYoEHhiBU8VhJqf+U2y3OoD6JJ5NLgiV6qyKGLosv/tuOKdLtGImYDYWGkr9T2RZcmKkUhWzmrrYoWqT0AT+uQUxNO/qyG96YuclcXf+cn+cDIsPiFFzb+Wwec0m900dUK9XEhkk/uMUDGpwnpCoJao+iDQ8QjiJIf49kH4KPoh/Hhrh48cTbiCPBXNzpS/NG99A+x8Bec1zThxnOoIw7TvCU2ylXubEe2sPapqSqPMa77Qcn4qGbwqfpZLeq5Qyi7P5IL7V4PzpBpE4sbb709r9TsZi+QFWTnyRYAgxYjGZ9i5dx+HAP3ydD161ga+wOHJyKEdA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rlJzA8wm05VL2cgIc/QSr7+bhzqgeQOvX+xqGUqyBX8=; b=QHSOp5oXPm+J6v4Juegk/Esp1AFLNdtw8wvdYzIfkaNu70t0Rdi13gqoo2X2z4AOS1qIg5gjsQq150k/e/yVaBhJbpW5J0G5QgzEJkuVXEGf8LLeDu1+vA5++lncENRypUa8KIRbdh6HxUnEYPtJXaDlkbQx5bTtvgoeKPggvgQI9o5AEvFVtm3n2n0/RZW56BqQ+zxx5hQwLTAu8GGBqOvkS/tA+bYfgkvB0t/dHWTGigZXJi0cGUFH70AlGUiLE3/+N1VNbxz0Fxh4KIfqCuOdAZy7Wny/VWZzU55XgGXGMjR+n2tTYba4VPwCJkSWjTwL3Yh7OLs06nINqxgOSQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rlJzA8wm05VL2cgIc/QSr7+bhzqgeQOvX+xqGUqyBX8=; b=kQL5sOfW8EpYDiZUyz8+1+pKcymSxx/vGqetcl3k5dbglnZ3LAEojTLYQxtl0wiJeU2uyuc+VJS67rzDvRp/WS3fVu7nB7gZBDcPPsJjr0erk3HqVEAJSYTbrcFz9w3c6VnNB/WjhNGLAz6K0ZLaK4AFT1RQZMJC8huPvUCrICY= Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7PR09MB2802.namprd09.prod.outlook.com (52.135.246.158) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Thu, 21 Nov 2019 13:24:31 +0000 Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2474.019; Thu, 21 Nov 2019 13:24:31 +0000 From: "Waltermire, David A. (Fed)" To: Kathleen Moriarty CC: Ira McDonald , "rats@ietf.org" , sacm , Laurence Lundblade Thread-Topic: [sacm] [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAcinV4l/iw9i0usrObSRdkD+6eU4bqAgAAkxTKAAHmxAIAAHcVh Date: Thu, 21 Nov 2019 13:24:31 +0000 Message-ID: <5r0dnrkillm4odhp4it9ejl8.1574342669212@email.android.com> References: , <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> In-Reply-To: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [61.8.205.200] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9fbe5277-3bd7-4e1e-305e-08d76e86249f x-ms-traffictypediagnostic: BN7PR09MB2802:|BN7PR09MB2802:|BN7PR09MB2802: x-ms-exchange-purlcount: 5 x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0228DDDDD7 x-forefront-antispam-report: SFV:SPM; SFS:(10019020)(366004)(396003)(376002)(346002)(136003)(39860400002)(13464003)(189003)(199004)(102836004)(6436002)(71190400001)(71200400001)(256004)(966005)(54906003)(606006)(86362001)(81156014)(6486002)(76176011)(6116002)(81166006)(14454004)(3846002)(478600001)(25786009)(14444005)(91956017)(316002)(66556008)(66446008)(64756008)(76116006)(66946007)(5660300002)(19273905006)(186003)(66476007)(6246003)(7736002)(8676002)(2906002)(229853002)(99286004)(8936002)(6512007)(66066001)(446003)(11346002)(53546011)(236005)(6306002)(6916009)(4326008)(66574012)(9686003)(54896002)(26005)(6506007)(563064011)(989001); DIR:OUT; SFP:1501; SCL:6; SRVR:BN7PR09MB2802; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; CAT:OSPM; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_5r0dnrkillm4odhp4it9ejl81574342669212emailandroidcom_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 9fbe5277-3bd7-4e1e-305e-08d76e86249f X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 13:24:31.2061 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: PcccCpXIUoRS0fNCYAXQ1oFaNgf7JxNp663fSdhcjSz0VE6tEGAoOdwGoQMnVkEgW1pqxQ9MRhbtjrm8T4kE8Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR09MB2802 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 13:24:43 -0000 --_000_5r0dnrkillm4odhp4it9ejl81574342669212emailandroidcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T2suIENhbiB5b3Ugc2VuZCBzb21lIHRleHQ/DQoNClRoYW5rcywNCkRhdmUNCg0KLS0tLS0tLS0g T3JpZ2luYWwgTWVzc2FnZSAtLS0tLS0tLQ0KRnJvbTogS2F0aGxlZW4gTW9yaWFydHkgPGthdGhs ZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPg0KRGF0ZTogVGh1LCBOb3ZlbWJlciAyMSwgMjAx OSA3OjM4IFBNICswODAwDQpUbzogIldhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpIiA8ZGF2aWQu d2FsdGVybWlyZUBuaXN0Lmdvdj4NCkNDOiBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVzaWNAZ21h aWwuY29tPiwgcmF0c0BpZXRmLm9yZywgc2FjbSA8c2FjbUBpZXRmLm9yZz4sIExhdXJlbmNlIEx1 bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KU3ViamVjdDogUmU6IFtzYWNtXSBbUmF0 c10gQ29TV0lEIGFuZCBFQVQgYW5kIENXVA0KDQoNCg0KU2VudCBmcm9tIG15IG1vYmlsZSBkZXZp Y2UNCg0KT24gTm92IDIwLCAyMDE5LCBhdCAxMToyOSBQTSwgV2FsdGVybWlyZSwgRGF2aWQgQS4g KEZlZCkgPGRhdmlkLndhbHRlcm1pcmVAbmlzdC5nb3Y+IHdyb3RlOg0KDQrvu78NCkl0IHNvdW5k cyBsaWtlIGhhdmluZyBhIENXVCBjbGFpbSB0aGF0IGNvbnRhaW5zIGFuIGVudGlyZSBDb1NXSUQg aXMgYSBwYXRoIGZvcndhcmQuIEl0IG1heSBhbHNvIG1ha2Ugc2Vuc2UgdG8gZG8gc29tZXRoaW5n IHNpbWlsYXIgZm9yIElTTyBTV0lEIHRhZ3MuDQoNCkFtIEkgcmlnaHQgaW4gdGhpbmtpbmcgdGhh dCB0aGlzIENXVCB3b3JrIGNhbiBiZSBkb25lIGluIFJBVFMsIHJlZmVyZW5jaW5nIENvU1dJRCBv bmNlIGl0IGlzIHB1Ymxpc2hlZCBhcyBhIG5vcm1hdGl2ZSByZWZlcmVuY2U/IFRoaXMgd291bGQg YWxsb3cgQ29TV0lEIHRvIGdvIGZvcndhcmQgdG8gdGhlIElFU0csIHdoaWxlIHRoZSBDb1NXSUQg Q1dUIGNsYWltIGlzIHdvcmtlZCBpbiBwYXJhbGxlbCBpbiBSQVRTLg0KDQpLYXRobGVlbiwgaWYg dGhpcyBpcyB0cnVlLCBkb2VzIHRoaXMgd2F5IGZvcndhcmQgYWRkcmVzcyB5b3VyIENXVC1yZWxh dGVkIGNvbW1lbnRzPw0KDQpIaSBEYXZlLA0KDQpJIHRoaW5rIHRoZSBzaWduYXR1cmUgbWF5IGhh dmUgdG8gYmUgb24gdGhlIENXVCBhcyBvcHBvc2VkIHRvIG9uIHRoZSBjbGFpbSB0aGF0IGlzIHRo ZSBDb1NXSUQgb3IgU1dJRC4gIFdlIGNhbiBkZWZpbmUgaXQgZnVsbHkgaW4gYW5vdGhlciBkcmFm dCwgYnV0IHNob3VsZCBzdGF0ZSBpdCBoZXJlIHNvIHRoYXQgb3B0aW9uIGlzIHVuZGVyc3Rvb2Qu ICBJdOKAmXMgYSBzaW1wbGUgd3JpdGUgdXAsIEkgdGhpbmsuDQoNClRoYW5rIHlvdSwNCkthdGhs ZWVuDQoNClJlZ2FyZHMsDQpEYXZlDQoNCg0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCkZyb206IHNhY20gPHNhY20tYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9m IEthdGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4NClNl bnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgMjAsIDIwMTkgOToxMCBQTQ0KVG86IElyYSBNY0RvbmFs ZCA8Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+DQpDYzogcmF0c0BpZXRmLm9yZyA8cmF0c0BpZXRm Lm9yZz47IHNhY20gPHNhY21AaWV0Zi5vcmc+OyBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xh bmQtcmVzb3J0LmNvbT4NClN1YmplY3Q6IFJlOiBbc2FjbV0gW1JhdHNdIENvU1dJRCBhbmQgRUFU IGFuZCBDV1QNCg0KR3JlYXQsIHRoYW5rcyBMYXVyZW5jZS4gIElmIHRoYXQncyBlYXNpZXIgSSB0 aGluayBoYXZpbmcgdGhlIENvU1dJRCBpbiBvbmUgY2xhaW0gc2hvdWxkIGJlIG9rIGFuZCB3b3Vs ZCBoYXZlIHRoZSBzYW1lIHJlc3VsdCBhcyB0aGUgc3VnZ2VzdGlvbiBJIG1hZGUuICBDaGFuZ2lu ZyB0aGUgQ29TV0lEIGZvcm1hdCBpcyBhIGJpZyBlbm91Z2ggcHJvY2VzcyB0aGF0IGl0IHNob3Vs ZG4ndCBoYXBwZW4gdmVyeSBvZnRlbi4NCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCg0KT24g V2VkLCBOb3YgMjAsIDIwMTkgYXQgODowMCBQTSBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVzaWNA Z21haWwuY29tPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4+IHdyb3RlOg0KSGkgTGF1 cmVuY2UsDQoNClRoYXQgc2VlbXMgbGlrZSBhIGdvb2Qgc3VnZ2VzdGlvbiBmb3IgYSBzaW1wbGUg d2F5IHRvIGludGVncmF0ZSBDb1NXSUQgY29udGVudA0KaW50byBFQVQuDQoNCkNoZWVycywNCi0g SXJhDQoNCklyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBBcmNoaXRlY3QpDQpDby1D aGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0aW9ucyBXRw0KQ28tQ2hhaXIgLSBUQ0cg TWV0YWRhdGEgQWNjZXNzIFByb3RvY29sIFNHDQpDaGFpciAtIExpbnV4IEZvdW5kYXRpb24gT3Bl biBQcmludGluZyBXRw0KU2VjcmV0YXJ5IC0gSUVFRS1JU1RPIFByaW50ZXIgV29ya2luZyBHcm91 cA0KQ28tQ2hhaXIgLSBJRUVFLUlTVE8gUFdHIEludGVybmV0IFByaW50aW5nIFByb3RvY29sIFdH DQpJRVRGIERlc2lnbmF0ZWQgRXhwZXJ0IC0gSVBQICYgUHJpbnRlciBNSUINCkJsdWUgUm9vZiBN dXNpYyAvIEhpZ2ggTm9ydGggSW5jDQpodHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2JsdWVy b29mbXVzaWM8aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHAlM0ElMkYlMkZzaXRlcy5nb29nbGUuY29tJTJGc2l0ZSUyRmJsdWVyb29mbXVzaWMm ZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3Mzky NDM4OWM0NWUwOGQ3NmU3NzQ1ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3 QzElN0MwJTdDNjM3MDk5MzMwODc5NDQ4MDUwJnNkYXRhPUhOS0tzWURVeDVqWm94dWpLRHFKaWNx VUJaOW9lOW14WGNUakoxSmxoSE0lM0QmcmVzZXJ2ZWQ9MD4NCmh0dHA6Ly9zaXRlcy5nb29nbGUu Y29tL3NpdGUvaGlnaG5vcnRoaW5jPGh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwJTNBJTJGJTJGc2l0ZXMuZ29vZ2xlLmNvbSUyRnNpdGUlMkZo aWdobm9ydGhpbmMmZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdD ODVhMzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3NzQ1ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1 NDY1NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5MzMwODc5NDQ4MDUwJnNkYXRhPVBQVXFWbzFOZ0dY VGd0TzEwTmtMdlRIcWg1T0VxZkFlb09iV3ZndUl6d1klM0QmcmVzZXJ2ZWQ9MD4NCm1haWx0bzog Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208bWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tPg0K UE8gQm94IDIyMSAgR3JhbmQgTWFyYWlzLCBNSSA0OTgzOSAgOTA2LTQ5NC0yNDM0DQoNCg0KDQpP biBXZWQsIE5vdiAyMCwgMjAxOSBhdCA3OjM1IFBNIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlz bGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiB3cm90ZToNCkhp LA0KDQpJ4oCZbSBub3Qgb24gdGhlIFNBQ00gbGlzdCwgYnV0IGRpZCBsb29rIGF0IHRoZSBhcmNo aXZlLiBIb3BlZnVsbHkgSeKAmW0gbm90IG91dCBvZiBzeW5jLg0KDQpNeSB0aG91Z2h0IGlzIHRv IHJlZ2lzdGVyIG9uZSBjbGFpbSBmb3IgQ1dUIHRoYXQgaXMgYW4gZW50aXJlIENvU1dJRCAoaW4g Q0RETCB0aGUgY29uY2lzZS1zd2lkLXRhZykuDQoNClRoYXQgd2F5IENvU1dJRCBjYW4gZ3JvdyBh bmQgZGV2ZWxvcCBvbiBpdHMgb3duIHdpdGhvdXQgbG90cyBvZiBhZGRzIGFuZCBzdWJ0cmFjdHMg dG8gdGhlIENXVCByZWdpc3RyeS4gSXQgaGFzIGl0cyBvd24gSUFOQSByZWdpc3RyeSB3aXRoIGl0 cyBvd24gZXhwZXJ0cyBhbmQgc3VjaC4gU2VlbXMgbGlrZSB0aGUgY291cGxpbmcgLyBmYWN0b3Jp bmcgaXMgYWJvdXQgcmlnaHQuDQoNClRoaXMgd291bGQgYWxzbyBiZSB0aGUgd2F5IEnigJlkIGxp a2UgdG8gaGF2ZSBpdCBpbiBFQVQgYXR0ZXN0YXRpb24uIFdl4oCZdmUgZG9uZSBhIG1pbmkgdmVy c2lvbiBvZiB0aGlzIHdpdGggdGhlIGxvY2F0aW9uIGNsYWltPGh0dHBzOi8vZ2NjMDEuc2FmZWxp bmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYu b3JnJTJGaHRtbCUyRmRyYWZ0LWlldGYtcmF0cy1lYXQtMDElMjNzZWN0aW9uLTMuOCZkYXRhPTAy JTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1 ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAl N0M2MzcwOTkzMzA4Nzk0NTgwNDQmc2RhdGE9c3NxZjFockRtM2JIWERUcGV3TWQlMkJoeEs5WWg3 bU5EZm1KSCUyQjlMazhKc00lM0QmcmVzZXJ2ZWQ9MD4uDQoNClRoZW4gaWYgeW91IGp1c3Qgd2Fu dCB0byBzaWduIGEgQ29TV0lEIENXVCBzdHlsZSwgdGhpcyB3b3JrcyBwcmV0dHkgd2VsbCB0b28u IEl0IGhhcyBhIHNsaWdodCBvdmVyaGVhZCBjb21wYXJlZCB0byBoYXZpbmcgYWxsIHRoZSBDb1NX SUQgZGF0YSBpdGVtcyBhcyBkaXJlY3QgQ1dUIGNsYWltcyBpbiB0aGF0IGl0IHdpbGwgaGF2ZSBh biBhZGRpdGlvbmFsIG1hcCBsYXllciwgYnV0IHRoYXQgaXMgb25seSBhYm91dCB0aHJlZSBieXRl cy4NCg0KTEwNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3Jn Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vZ2Nj MDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3 dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wMiU3QzAxJTdDZGF2 aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3NzQ1 ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5MzMw ODc5NDU4MDQ0JnNkYXRhPUs0eiUyQnBaSzVzNk5nJTJCN2FtaXpvT051SGxseGpzaG1HNWFUelAz eU84YWRVJTNEJnJlc2VydmVkPTA+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0Kc2FjbSBtYWlsaW5nIGxpc3QNCnNhY21AaWV0Zi5vcmc8bWFpbHRvOnNh Y21AaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208 aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBz JTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGc2FjbSZkYXRhPTAy JTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1 ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAl N0M2MzcwOTkzMzA4Nzk0NjgwMzkmc2RhdGE9SnZpT3ZwS0dRTE55TWlWMmZFRlNFMXFaQTNYb3NP b0VDQkNRdWlUSzRMbyUzRCZyZXNlcnZlZD0wPg0KDQoNCi0tDQoNCkJlc3QgcmVnYXJkcywNCkth dGhsZWVuDQo= --_000_5r0dnrkillm4odhp4it9ejl81574342669212emailandroidcom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD11dGYtOCI+DQo8L2hlYWQ+DQo8Ym9keSBkaXI9ImF1dG8iPg0KT2suIENhbiB5b3Ugc2Vu ZCBzb21lIHRleHQ/PGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCkRhdmU8YnI+DQo8YnI+DQotLS0t LS0tLSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tLS0tPGJyPg0KRnJvbTogS2F0aGxlZW4gTW9yaWFy dHkgJmx0O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCkRhdGU6IFRo dSwgTm92ZW1iZXIgMjEsIDIwMTkgNzozOCBQTSAmIzQzOzA4MDA8YnI+DQpUbzogJnF1b3Q7V2Fs dGVybWlyZSwgRGF2aWQgQS4gKEZlZCkmcXVvdDsgJmx0O2RhdmlkLndhbHRlcm1pcmVAbmlzdC5n b3YmZ3Q7PGJyPg0KQ0M6IElyYSBNY0RvbmFsZCAmbHQ7Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20m Z3Q7LCByYXRzQGlldGYub3JnLCBzYWNtICZsdDtzYWNtQGlldGYub3JnJmd0OywgTGF1cmVuY2Ug THVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7PGJyPg0KU3ViamVjdDogUmU6 IFtzYWNtXSBbUmF0c10gQ29TV0lEIGFuZCBFQVQgYW5kIENXVDxicj4NCjxicj4NCjxkaXY+PGJy Pg0KPGJyPg0KPGRpdiBkaXI9Imx0ciI+U2VudCBmcm9tIG15IG1vYmlsZSBkZXZpY2U8L2Rpdj4N CjxkaXYgZGlyPSJsdHIiPjxicj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPk9uIE5vdiAyMCwg MjAxOSwgYXQgMTE6MjkgUE0sIFdhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpICZsdDtkYXZpZC53 YWx0ZXJtaXJlQG5pc3QuZ292Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPg0KPGRpdiBkaXI9Imx0ciI+77u/DQo8ZGl2 IHN0eWxlPSJjb2xvcjpyZ2IoMCwwLDApOyBmb250LWZhbWlseTpDYWxpYnJpLEFyaWFsLEhlbHZl dGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6MTJwdCI+DQo8c3Bhbj5JdCBzb3VuZHMgbGlrZSBo YXZpbmcgYSBDV1QgY2xhaW0gdGhhdCBjb250YWlucyBhbiBlbnRpcmUgQ29TV0lEIGlzIGEgcGF0 aCBmb3J3YXJkLiBJdCBtYXkgYWxzbyBtYWtlIHNlbnNlIHRvIGRvIHNvbWV0aGluZyBzaW1pbGFy IGZvciBJU08gU1dJRCB0YWdzLjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOnJnYigw LDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmksQXJpYWwsSGVsdmV0aWNhLHNhbnMtc2VyaWY7IGZv bnQtc2l6ZToxMnB0Ij4NCjxzcGFuPjxicj4NCjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9ImNv bG9yOnJnYigwLDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmksQXJpYWwsSGVsdmV0aWNhLHNhbnMt c2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4NCjxzcGFuPkFtIEkgcmlnaHQgaW4gdGhpbmtpbmcgdGhh dCB0aGlzIENXVCB3b3JrIGNhbiBiZSBkb25lIGluIFJBVFMsIHJlZmVyZW5jaW5nIENvU1dJRCBv bmNlIGl0IGlzIHB1Ymxpc2hlZCBhcyBhIG5vcm1hdGl2ZSByZWZlcmVuY2U/IFRoaXMgd291bGQg YWxsb3cgQ29TV0lEIHRvIGdvIGZvcndhcmQgdG8gdGhlIElFU0csIHdoaWxlIHRoZSBDb1NXSUQg Q1dUIGNsYWltIGlzIHdvcmtlZCBpbiBwYXJhbGxlbCBpbiBSQVRTLjwvc3Bhbj48L2Rpdj4NCjxk aXYgc3R5bGU9ImNvbG9yOnJnYigwLDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmksQXJpYWwsSGVs dmV0aWNhLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4NCjxzcGFuPjxicj4NCjwvc3Bhbj48 L2Rpdj4NCjxkaXYgc3R5bGU9ImNvbG9yOnJnYigwLDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmks QXJpYWwsSGVsdmV0aWNhLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4NCjxzcGFuPkthdGhs ZWVuLCBpZiB0aGlzIGlzIHRydWUsIGRvZXMgdGhpcyB3YXkgZm9yd2FyZCBhZGRyZXNzIHlvdXIg Q1dULXJlbGF0ZWQgY29tbWVudHM/PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KSGkgRGF2ZSwNCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pkkg dGhpbmsgdGhlIHNpZ25hdHVyZSBtYXkgaGF2ZSB0byBiZSBvbiB0aGUgQ1dUIGFzIG9wcG9zZWQg dG8gb24gdGhlIGNsYWltIHRoYXQgaXMgdGhlIENvU1dJRCBvciBTV0lELiAmbmJzcDtXZSBjYW4g ZGVmaW5lIGl0IGZ1bGx5IGluIGFub3RoZXIgZHJhZnQsIGJ1dCBzaG91bGQgc3RhdGUgaXQgaGVy ZSBzbyB0aGF0IG9wdGlvbiBpcyB1bmRlcnN0b29kLiAmbmJzcDtJdOKAmXMgYSBzaW1wbGUgd3Jp dGUgdXAsIEkgdGhpbmsuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGFuayB5b3Us PC9kaXY+DQo8ZGl2PkthdGhsZWVuJm5ic3A7PGJyPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+ DQo8ZGl2IGRpcj0ibHRyIj4NCjxkaXYgc3R5bGU9ImNvbG9yOnJnYigwLDAsMCk7IGZvbnQtZmFt aWx5OkNhbGlicmksQXJpYWwsSGVsdmV0aWNhLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4N Cjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY29sb3I6cmdiKDAsMCwwKTsgZm9udC1mYW1pbHk6 Q2FsaWJyaSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1zZXJpZjsgZm9udC1zaXplOjEycHQiPg0KPHNw YW4+UmVnYXJkcyw8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJjb2xvcjpyZ2IoMCwwLDApOyBm b250LWZhbWlseTpDYWxpYnJpLEFyaWFsLEhlbHZldGljYSxzYW5zLXNlcmlmOyBmb250LXNpemU6 MTJwdCI+DQo8c3Bhbj5EYXZlPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY29sb3I6cmdiKDAs MCwwKTsgZm9udC1mYW1pbHk6Q2FsaWJyaSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1zZXJpZjsgZm9u dC1zaXplOjEycHQiPg0KPHNwYW4+PGJyPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY29s b3I6cmdiKDAsMCwwKTsgZm9udC1mYW1pbHk6Q2FsaWJyaSxBcmlhbCxIZWx2ZXRpY2Esc2Fucy1z ZXJpZjsgZm9udC1zaXplOjEycHQiPg0KPHNwYW4+PGJyPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBz dHlsZT0iY29sb3I6cmdiKDAsMCwwKTsgZm9udC1mYW1pbHk6Q2FsaWJyaSxBcmlhbCxIZWx2ZXRp Y2Esc2Fucy1zZXJpZjsgZm9udC1zaXplOjEycHQiPg0KPGJyPg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJjb2xvcjpyZ2IoMCwwLDApOyBmb250LWZhbWlseTpDYWxpYnJpLEFyaWFsLEhlbHZldGljYSxz YW5zLXNlcmlmOyBmb250LXNpemU6MTJwdCI+DQo8YnI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNv bG9yOnJnYigwLDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmksQXJpYWwsSGVsdmV0aWNhLHNhbnMt c2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4NCjxicj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9 ImNvbG9yOnJnYigwLDAsMCk7IGZvbnQtZmFtaWx5OkNhbGlicmksQXJpYWwsSGVsdmV0aWNhLHNh bnMtc2VyaWY7IGZvbnQtc2l6ZToxMnB0Ij4NCjwvZGl2Pg0KPGhyIHRhYmluZGV4PSItMSIgc3R5 bGU9ImRpc3BsYXk6aW5saW5lLWJsb2NrOyB3aWR0aDo5OCUiPg0KPGRpdiBpZD0iZGl2UnBseUZ3 ZE1zZyIgZGlyPSJsdHIiPjxmb250IGNvbG9yPSIjMDAwMDAwIiBmYWNlPSJDYWxpYnJpLCBzYW5z LXNlcmlmIiBzdHlsZT0iZm9udC1zaXplOjExcHQiPjxiPkZyb206PC9iPiBzYWNtICZsdDtzYWNt LWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBLYXRobGVlbiBNb3JpYXJ0eSAmbHQ7 a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+U2VudDo8L2I+IFdl ZG5lc2RheSwgTm92ZW1iZXIgMjAsIDIwMTkgOToxMCBQTTxicj4NCjxiPlRvOjwvYj4gSXJhIE1j RG9uYWxkICZsdDtibHVlcm9vZm11c2ljQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IHJh dHNAaWV0Zi5vcmcgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7OyBzYWNtICZsdDtzYWNtQGlldGYub3Jn Jmd0OzsgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7PGJy Pg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2FjbV0gW1JhdHNdIENvU1dJRCBhbmQgRUFUIGFuZCBD V1Q8L2ZvbnQ+DQo8ZGl2PiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBkaXI9Imx0 ciI+R3JlYXQsIHRoYW5rcyBMYXVyZW5jZS4mbmJzcDsgSWYgdGhhdCdzIGVhc2llciBJIHRoaW5r IGhhdmluZyB0aGUgQ29TV0lEIGluIG9uZSBjbGFpbSBzaG91bGQgYmUgb2sgYW5kIHdvdWxkIGhh dmUgdGhlIHNhbWUgcmVzdWx0IGFzIHRoZSBzdWdnZXN0aW9uIEkgbWFkZS4mbmJzcDsgQ2hhbmdp bmcgdGhlIENvU1dJRCBmb3JtYXQgaXMgYSBiaWcgZW5vdWdoIHByb2Nlc3MgdGhhdCBpdCBzaG91 bGRuJ3QgaGFwcGVuIHZlcnkgb2Z0ZW4uDQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5CZXN0IHJl Z2FyZHMsPC9kaXY+DQo8ZGl2PkthdGhsZWVuPC9kaXY+DQo8L2Rpdj4NCjxicj4NCjxkaXYgY2xh c3M9InhfZ21haWxfcXVvdGUiPg0KPGRpdiBjbGFzcz0ieF9nbWFpbF9hdHRyIiBkaXI9Imx0ciI+ T24gV2VkLCBOb3YgMjAsIDIwMTkgYXQgODowMCBQTSBJcmEgTWNEb25hbGQgJmx0OzxhIGhyZWY9 Im1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbSI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208 L2E+Jmd0OyB3cm90ZTo8YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGNsYXNzPSJ4X2dtYWlsX3F1 b3RlIiBzdHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAuOGV4OyBib3JkZXItbGVmdDoxcHggc29s aWQgcmdiKDIwNCwyMDQsMjA0KTsgcGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2IGRpcj0ibHRyIj4N CjxkaXY+SGkgTGF1cmVuY2UsPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGF0IHNl ZW1zIGxpa2UgYSBnb29kIHN1Z2dlc3Rpb24gZm9yIGEgc2ltcGxlIHdheSB0byBpbnRlZ3JhdGUg Q29TV0lEIGNvbnRlbnQ8L2Rpdj4NCjxkaXY+aW50byBFQVQuPC9kaXY+DQo8ZGl2Pjxicj4NCjwv ZGl2Pg0KPGRpdj5DaGVlcnMsPC9kaXY+DQo8ZGl2Pi0gSXJhPC9kaXY+DQo8ZGl2Pjxicj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2IGRpcj0ibHRyIj4NCjxkaXYgZGlyPSJsdHIiPg0KPGRp dj4NCjxkaXYgZGlyPSJsdHIiPg0KPGRpdj4NCjxkaXYgZGlyPSJsdHIiPg0KPGRpdj4NCjxkaXYg ZGlyPSJsdHIiPklyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBBcmNoaXRlY3QpPGJy Pg0KQ28tQ2hhaXIgLSBUQ0cgVHJ1c3RlZCBNb2JpbGl0eSBTb2x1dGlvbnMgV0c8L2Rpdj4NCjxk aXY+Q28tQ2hhaXIgLSBUQ0cgTWV0YWRhdGEgQWNjZXNzIFByb3RvY29sIFNHPGJyPg0KPC9kaXY+ DQo8ZGl2IGRpcj0ibHRyIj5DaGFpciAtIExpbnV4IEZvdW5kYXRpb24gT3BlbiBQcmludGluZyBX Rzxicj4NClNlY3JldGFyeSAtIElFRUUtSVNUTyBQcmludGVyIFdvcmtpbmcgR3JvdXA8YnI+DQpD by1DaGFpciAtIElFRUUtSVNUTyBQV0cgSW50ZXJuZXQgUHJpbnRpbmcgUHJvdG9jb2wgV0c8YnI+ DQpJRVRGIERlc2lnbmF0ZWQgRXhwZXJ0IC0gSVBQICZhbXA7IFByaW50ZXIgTUlCPGJyPg0KQmx1 ZSBSb29mIE11c2ljIC8gSGlnaCBOb3J0aCBJbmM8YnI+DQo8YSBocmVmPSJodHRwczovL2djYzAx LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnNpdGVz Lmdvb2dsZS5jb20lMkZzaXRlJTJGYmx1ZXJvb2ZtdXNpYyZhbXA7ZGF0YT0wMiU3QzAxJTdDZGF2 aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3NzQ1 ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5MzMw ODc5NDQ4MDUwJmFtcDtzZGF0YT1ITktLc1lEVXg1alpveHVqS0RxSmljcVVCWjlvZTlteFhjVGpK MUpsaEhNJTNEJmFtcDtyZXNlcnZlZD0wIiBvcmlnaW5hbHNyYz0iaHR0cDovL3NpdGVzLmdvb2ds ZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljIiBzaGFzaD0iVUFPMmk3TCYjNDM7NmNSZnVoeFhrWVdj U1FiZ1ltajBtYlZlVGFUdVFjeWcmIzQzOzlHdXhLTDF0dDRyazl6MHBtcThvbjJhZkM2eXhQOTdh ZW9DcFAwNzJDYXJGY3VzdXltUnJDcTdpQXZ4QlB1N3MzZi9XNVNTMGVyM0VNRGYwTDZKTXZUL2ha TDkyVFpGTDN2UkNGVlhUSkhZcENiS3FERXFJMzBBbDJxYktjSHV2ZFk9IiBvcmlnaW5hbHNyYz0i aHR0cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljIiBzaGFzaD0iYzBwaFQ1 ZEp0N2JvQWlxNVJBMVdickVoT0lmeHBqaVpCRnVVUlU1d1FKL2smIzQzO0tTZEZhck94RmlhSmhz OThmT1NlZGNjcXYmIzQzO2JZd2NYVlBiTlFvdU9sVmRrc0VRWEJEUC9tak13SEIvbFJzR0NLRGho a1QzYzAyaFpwSmJUSWVta0lCWVk4Q0w4elo4MFFOeHhYUjJlT3ljdjBXTjNxbnJ4Nmg4NHR6MkRU dzA9IiB0YXJnZXQ9Il9ibGFuayIgc2hhc2g9InozbUhtMjFzbVBhN2JBN1p4MlFrTiYjNDM7ZU5v a3YyNWlLaGV1dnBmRDFYTkQ3SVk1VjYzVlVIY2Qzc0lhdmxpVVBpczdCNzNPT1JoVjZ2YVJ2dXUx cVcvMjJDVmV1WG5CRGgzb0omIzQzO3pidzloZVhTanB2eHdWU09QcnZtSmtZY3ZPYWt6NGJnRnBq MkhRTms1dlZsNndSR1FiOVJzRW1tQ1pNYUJUQkRqZGVvTmh3PSIgb3JpZ2luYWxzcmM9Imh0dHA6 Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYyI+aHR0cDovL3NpdGVzLmdvb2ds ZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vZ2NjMDEu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwJTNBJTJGJTJGc2l0ZXMu Z29vZ2xlLmNvbSUyRnNpdGUlMkZoaWdobm9ydGhpbmMmYW1wO2RhdGE9MDIlN0MwMSU3Q2Rhdmlk LndhbHRlcm1pcmUlNDBuaXN0LmdvdiU3Qzg1YTMyM2Y2NzM5MjQzODljNDVlMDhkNzZlNzc0NWU1 JTdDMmFiNWQ4MmZkOGZhNDc5N2E5M2UwNTQ2NTVjNjFkZWMlN0MxJTdDMCU3QzYzNzA5OTMzMDg3 OTQ0ODA1MCZhbXA7c2RhdGE9UFBVcVZvMU5nR1hUZ3RPMTBOa0x2VEhxaDVPRXFmQWVvT2JXdmd1 SXp3WSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgb3JpZ2luYWxzcmM9Imh0dHA6Ly9zaXRlcy5nb29nbGUu Y29tL3NpdGUvaGlnaG5vcnRoaW5jIiBzaGFzaD0ick9GbHVBTGc5TXpKS0dIWUcmIzQzO2plNFgx YUt6NkdXMEsmIzQzO2JiMkNtQWtOazBCS1dNNEJjWnR1NVpIcjlYWE84UEtNdng5clJZbVkzYU1w V3dNdlVxMDUwajFCS1JBekxsdkF6TEVSZkUzeUdKV2lXeVZMVkJmTmsyLzVwWGpwblRGRVdmRElR NEFtbFVIbU1LQ2lKbXJESE1HOEZMNVdmRFFnU1hpNE5aRjY1d1U9IiBvcmlnaW5hbHNyYz0iaHR0 cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9oaWdobm9ydGhpbmMiIHNoYXNoPSJqUzZyakdIeC9n UlVuQUpWTm9mT3dzSFIydVNWM2paUkZCL1d5SGJZRi9EQ1hVVHlKQVB5blF5WW9oNS9XdHImIzQz Oy9BUVZWZTA5d1Z0TXJnSzBNMkpPL3FsL2JPbWM2cm9TS0dwbm1NTmRmNTBLZmdHcmV4Z2R1L215 VURUaElOTkNkUUFYNEFPZk5ucFBFUWN2QXZDcUwyZ1JSYzBCSng2QnRPbEN2TnBtZzRzPSIgdGFy Z2V0PSJfYmxhbmsiIHNoYXNoPSJjUml3RjhyR0wyRDhkVHpCRmFHS01HUFQ0aC9GTldGbmomIzQz O2tHNjUwRUdZanZlQk5hWVJOMUNpc3dwdGpqaDJZMTNFTHpYSDdKSzlDTlV5WVVoaCYjNDM7Q3JC enE4ZzExaUpBaXovWXNiT0hUV1NEem1Cc0NBU092V3RDUXp6MnAyMnhSUk9PWENBMkdZeVZVMXdi bUhyNERIYjhYc203NktvYm9ITzd1a0Iwa0lvWT0iIG9yaWdpbmFsc3JjPSJodHRwOi8vc2l0ZXMu Z29vZ2xlLmNvbS9zaXRlL2hpZ2hub3J0aGluYyIgc3R5bGU9ImNvbG9yOnJnYigxMDIsMCwyMDQp Ij5odHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2hpZ2hub3J0aGluYzwvYT48YnI+DQptYWls dG86IDxhIGhyZWY9Im1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxh bmsiPmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9hPjxicj4NClBPIEJveCAyMjEmbmJzcDsgR3Jh bmQgTWFyYWlzLCBNSSA0OTgzOSZuYnNwOyA5MDYtNDk0LTI0MzQ8YnI+DQo8YnI+DQo8ZGl2IHN0 eWxlPSJkaXNwbGF5OmlubGluZSI+PC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXNwbGF5OmlubGluZSI+ PC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXNwbGF5OmlubGluZSI+PC9kaXY+DQo8ZGl2PjwvZGl2Pg0K PGRpdj48L2Rpdj4NCjxkaXY+PC9kaXY+DQo8ZGl2PjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJy Pg0KPC9kaXY+DQo8L2Rpdj4NCjxicj4NCjxkaXYgY2xhc3M9InhfZ21haWxfcXVvdGUiPg0KPGRp diBjbGFzcz0ieF9nbWFpbF9hdHRyIiBkaXI9Imx0ciI+T24gV2VkLCBOb3YgMjAsIDIwMTkgYXQg NzozNSBQTSBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5k LXJlc29ydC5jb20iIHRhcmdldD0iX2JsYW5rIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0 OyB3cm90ZTo8YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGNsYXNzPSJ4X2dtYWlsX3F1b3RlIiBz dHlsZT0ibWFyZ2luOjBweCAwcHggMHB4IDAuOGV4OyBib3JkZXItbGVmdDoxcHggc29saWQgcmdi KDIwNCwyMDQsMjA0KTsgcGFkZGluZy1sZWZ0OjFleCI+DQo8ZGl2PkhpLA0KPGRpdj48YnI+DQo8 L2Rpdj4NCjxkaXY+SeKAmW0gbm90IG9uIHRoZSBTQUNNIGxpc3QsIGJ1dCBkaWQgbG9vayBhdCB0 aGUgYXJjaGl2ZS4gSG9wZWZ1bGx5IEnigJltIG5vdCBvdXQgb2Ygc3luYy48L2Rpdj4NCjxkaXY+ PGJyPg0KPC9kaXY+DQo8ZGl2Pk15IHRob3VnaHQgaXMgdG8gcmVnaXN0ZXIgb25lIGNsYWltIGZv ciBDV1QgdGhhdCBpcyBhbiBlbnRpcmUgQ29TV0lEIChpbiBDRERMIHRoZSZuYnNwOzxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTMuMzMzM3B4Ij48Zm9udCBmYWNlPSJDb3VyaWVyIj5jb25jaXNlLXN3 aWQtdGFnKTwvZm9udD48L3NwYW4+LjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhh dCB3YXkgQ29TV0lEIGNhbiBncm93IGFuZCBkZXZlbG9wIG9uIGl0cyBvd24gd2l0aG91dCBsb3Rz IG9mIGFkZHMgYW5kIHN1YnRyYWN0cyB0byB0aGUgQ1dUIHJlZ2lzdHJ5LiBJdCBoYXMgaXRzIG93 biBJQU5BIHJlZ2lzdHJ5IHdpdGggaXRzIG93biBleHBlcnRzIGFuZCBzdWNoLiBTZWVtcyBsaWtl IHRoZSBjb3VwbGluZyAvIGZhY3RvcmluZyBpcyBhYm91dCByaWdodC48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PlRoaXMgd291bGQgYWxzbyBiZSB0aGUgd2F5IEnigJlkIGxpa2UgdG8g aGF2ZSBpdCBpbiBFQVQgYXR0ZXN0YXRpb24uIFdl4oCZdmUgZG9uZSBhIG1pbmkgdmVyc2lvbiBv ZiB0aGlzIHdpdGggdGhlJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZo dG1sJTJGZHJhZnQtaWV0Zi1yYXRzLWVhdC0wMSUyM3NlY3Rpb24tMy44JmFtcDtkYXRhPTAyJTdD MDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4 ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2 MzcwOTkzMzA4Nzk0NTgwNDQmYW1wO3NkYXRhPXNzcWYxaHJEbTNiSFhEVHBld01kJTJCaHhLOVlo N21ORGZtSkglMkI5TGs4SnNNJTNEJmFtcDtyZXNlcnZlZD0wIiBvcmlnaW5hbHNyYz0iaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtcmF0cy1lYXQtMDEjc2VjdGlvbi0zLjgi IHNoYXNoPSJPVVE5Rlk4d1hmZ3VTb2JJOXp3QUM1RGMmIzQzO0Z5clZ2ODNjRVhzU3VjL2JSTkxk N2lkQmxZSVd3VE10cGszUmZPbDhScUl2enZaTkxGUERHZ1Jma2lrYmFWNmVHVnZMei9KanMzdEpK Sm4yckMzamdYYkF3dFJDL0VrWFpIaUZOTEZNeDZCMGhvRHN1aHovalhVem9WUi8zTlg4SmZLeC9k S0MxN3RBQjdRYUZRPSIgb3JpZ2luYWxzcmM9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLXJhdHMtZWF0LTAxI3NlY3Rpb24tMy44IiBzaGFzaD0idXhXeU5zM00wOWxGYjQ1 R0JLZmhuY1JPbW5WSnlwQ1FHNEJTVWVhRnNjZzhBVHBVNmRUeHBPUjFlcVp0Q2wzM1FwTU9POUFG TU9FSnk5TWNVeE1uVXpaN2cvZUN4cFFBa3Jtck5VUiYjNDM7anZGUkUwMnBzcGdCJiM0MztUUmpn cUtKb0E3WjN2bzZWUC9ZS3hxNnBaem1TJiM0MztRVXQ4Z2ZxZ2FyTk1tbVkzR1UzZlZCbEljPSIg dGFyZ2V0PSJfYmxhbmsiIHNoYXNoPSJ5VXFZc2xVZUFGWUx2LzZvYk1qJiM0Mztjc1UvUGtIVzkz ZDZPakZVTnpZZzdoZnVCbE5TOFpBMG1ac05DTHhTQkVDYU4yVmdHaXRNTmxPWjV3dXRtbERHWEhB JiM0MztPMzZOVllncVhYbG83OEo4UjJWcW9GRWhqak1ScXpsd2hhWEw1bld1eHFFOHR6T1k2c05P eC9pVlYyNHFnYnlMbFZBV0NSL1BjRzNhWTl0WUp4UT0iIG9yaWdpbmFsc3JjPSJodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1yYXRzLWVhdC0wMSNzZWN0aW9uLTMuOCI+bG9j YXRpb24NCiBjbGFpbTwvYT4uPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5UaGVuIGlm IHlvdSBqdXN0IHdhbnQgdG8gc2lnbiBhIENvU1dJRCBDV1Qgc3R5bGUsIHRoaXMgd29ya3MgcHJl dHR5IHdlbGwgdG9vLiBJdCBoYXMgYSBzbGlnaHQgb3ZlcmhlYWQgY29tcGFyZWQgdG8gaGF2aW5n IGFsbCB0aGUgQ29TV0lEIGRhdGEgaXRlbXMgYXMgZGlyZWN0IENXVCBjbGFpbXMgaW4gdGhhdCBp dCB3aWxsIGhhdmUgYW4gYWRkaXRpb25hbCBtYXAgbGF5ZXIsIGJ1dCB0aGF0IGlzIG9ubHkgYWJv dXQgdGhyZWUgYnl0ZXMuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5MTDwvZGl2Pg0K PGRpdj48YnI+DQo8L2Rpdj4NCjwvZGl2Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188YnI+DQpSQVRTIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1h aWx0bzpSQVRTQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+UkFUU0BpZXRmLm9yZzwvYT48YnI+ DQo8YSBocmVmPSJodHRwczovL2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZy YXRzJmFtcDtkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEz MjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1 YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTkzMzA4Nzk0NTgwNDQmYW1wO3NkYXRhPUs0eiUyQnBaSzVz Nk5nJTJCN2FtaXpvT051SGxseGpzaG1HNWFUelAzeU84YWRVJTNEJmFtcDtyZXNlcnZlZD0wIiBv cmlnaW5hbHNyYz0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIiBz aGFzaD0iQUJEdmsvb29aSWFqdWVoY0c4OXQxeE9jTnlnWVlMcHpiVHBDcTQzdngyOWQyd0lUOWxZ SGVkbVdlRGg2cEc5ZG9yNlB1MW40eXRDcGNpa09jZ0NvU0lkYTA3WTlYS1lYc21GR3d4YnpkeFNX U1hnclU2OC9LJiM0MztwRG9XNmQyUEU0VHlxWDFIQmRiVXZ3MFlIbmxMTUZtRnN1SFZ1RTkxYkN1 Z3NSREJIMmFGRT0iIG9yaWdpbmFsc3JjPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3JhdHMiIHNoYXNoPSJYYXAvMi94VE90WjVOUXZmUldERmhtVzFFalNXNDhzNkU2dXB3 MFFuOVVWZTY2Z2pkelkvcHF6WDRad0JmZ2JWYUFXWVMmIzQzO0omIzQzO3MmIzQzOzQvQXlWLzNw UVRlamsydU5VZ2dPNkFXRU5NMHVpRmFjWVBQdGQxaDRsRGwxc0hCVUh5L202UnFqNDRSSTR5WGtS UmdMVlZyJiM0MztNQi9OdVpEZVNrN1NhbzIvQVdHOU9mOEdRPSIgdGFyZ2V0PSJfYmxhbmsiIHJl bD0ibm9yZWZlcnJlciIgc2hhc2g9ImFrcDVXWExHWG1BSTRzZUZTUFFDYm9RQ2ovVEJ3OVVtUEc4 TGhsQUp2VndzaS9PWWl3SHg0WGU0Z3ZWSzVtbVVabFNrSTRBSUhGNkQ1a0UxMCYjNDM7aUomIzQz O3dDbmZYSldGQTREJiM0MztvTlh4Slc3a29rR3owQzFrdnJtNHFtekRGcW14QkFZckxrREtsaXpn QXd3ZG1BYWFPd1UyZ1lWaHVYd0xCeUhBNVp2JiM0MztMbXJGaHc9IiBvcmlnaW5hbHNyYz0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIj5odHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHM8L2E+PGJyPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCnNh Y20gbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5zYWNtQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vZ2NjMDEu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5p ZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnNhY20mYW1wO2RhdGE9MDIlN0MwMSU3Q2Rh dmlkLndhbHRlcm1pcmUlNDBuaXN0LmdvdiU3Qzg1YTMyM2Y2NzM5MjQzODljNDVlMDhkNzZlNzc0 NWU1JTdDMmFiNWQ4MmZkOGZhNDc5N2E5M2UwNTQ2NTVjNjFkZWMlN0MxJTdDMCU3QzYzNzA5OTMz MDg3OTQ2ODAzOSZhbXA7c2RhdGE9SnZpT3ZwS0dRTE55TWlWMmZFRlNFMXFaQTNYb3NPb0VDQkNR dWlUSzRMbyUzRCZhbXA7cmVzZXJ2ZWQ9MCIgb3JpZ2luYWxzcmM9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vc2FjbSIgc2hhc2g9IkdvcjcyVXdCOXZKR0RIdVVpZDJuQmN1 ckR0VkQ2VlFaZzNNRTdVY2xMTjJLYmJyZHhFaVFGN05GR1lpUFBvb1FGWkI5bWk5QmxHaWRuMFV0 Mkt6Ti9XRmE3QmFxWHphZTJnZWNjcG5IZi9nNUQmIzQzOyYjNDM7TzZvbEJ0NUxXcld4bEp6QkZu RWw5eXNFMm9iZkkmIzQzO2VqWXByYkN1SUl2WllXc0hlWDU4ZmhZZTBqYS9LST0iIG9yaWdpbmFs c3JjPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iIHNoYXNoPSJY Y1I2OTRJU0Y2JiM0MztLOWpVTCYjNDM7d3hObWRFd2dHJiM0Mzs1TyYjNDM7dE9UeHNrJiM0MztU cUhGOFh3biYjNDM7dTJodmZVZU9PVW5nclFIdVBLJiM0Mzt0dXBlT2JzMkQ5S3dDMkxBOXFaciYj NDM7aDl5Y0Q5U1prMFkvc2YvSDJJMCYjNDM7MklSQSYjNDM7WnFFRTRycnVVMkMvelNIQWdkRWl5 L0l1N01yZ1BKVGU2WGg0dW95U044a3ZrT1owWFdmQzRBUDdGTEtBPSIgcmVsPSJub3JlZmVycmVy IiBzaGFzaD0iVkhoRCYjNDM7MiYjNDM7RU1NZ2laajg5UXdmeldEWGdGZ1R0VU51NWRDS2hjbWtY OFM3NnRmeUQ3MTNMb2E5RmtaMFUxbmN2cVJoc0Z3NlZyUjFab0RZT0RIakp2M04vWnVGRW1rNWtu Q2pkWlpOaXZ6VG9uNW9pTUVsWDAxR2F6MUJQTXIvJiM0MztwTERRJiM0Mzs3dkU1akY0M0cyVlVr eWF2RHlnRmRzeFZNQUhVTFdKM0JaSmp2Yz0iIG9yaWdpbmFsc3JjPSJodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2FjbTwvYT48YnI+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGVhcj0i YWxsIj4NCjxkaXY+PGJyPg0KPC9kaXY+DQotLSA8YnI+DQo8ZGl2IGNsYXNzPSJ4X2dtYWlsX3Np Z25hdHVyZSIgZGlyPSJsdHIiPg0KPGRpdiBkaXI9Imx0ciI+PGJyPg0KPGRpdj5CZXN0IHJlZ2Fy ZHMsPC9kaXY+DQo8ZGl2PkthdGhsZWVuPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_5r0dnrkillm4odhp4it9ejl81574342669212emailandroidcom_-- From nobody Thu Nov 21 08:53:10 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B99B120B40 for ; Thu, 21 Nov 2019 08:53:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KZw03PIoQ3HJ for ; Thu, 21 Nov 2019 08:53:06 -0800 (PST) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D80C21200BA for ; Thu, 21 Nov 2019 08:53:05 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Nov 2019 08:53:03 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,226,1571727600"; d="scan'208";a="290376017" Received: from orsmsx106.amr.corp.intel.com ([10.22.225.133]) by orsmga001.jf.intel.com with ESMTP; 21 Nov 2019 08:53:03 -0800 Received: from orsmsx123.amr.corp.intel.com (10.22.240.116) by ORSMSX106.amr.corp.intel.com (10.22.225.133) with Microsoft SMTP Server (TLS) id 14.3.439.0; Thu, 21 Nov 2019 08:52:57 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX123.amr.corp.intel.com ([169.254.1.236]) with mapi id 14.03.0439.000; Thu, 21 Nov 2019 08:52:57 -0800 From: "Smith, Ned" To: Henk Birkholz , Laurence Lundblade CC: "rats@ietf.org" , Kathleen Moriarty Thread-Topic: [Rats] Two types of secure attestation Thread-Index: AQHVntzp4M6ZJzqVJUiVsZ6c2vuAXaeTFYmAgACwdgCAAA6xgIAAu9YAgAEdtgCAAAn4gIAABdyAgAADQoCAAAxJgIAAES0AgAATcYD//+hLAA== Date: Thu, 21 Nov 2019 16:52:57 +0000 Message-ID: <8BE6C775-6E2F-491A-923B-D751220A5B67@intel.com> References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <02ec1d3f-3ef6-fbb6-3f59-b846cba1b3ce@sit.fraunhofer.de> In-Reply-To: <02ec1d3f-3ef6-fbb6-3f59-b846cba1b3ce@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.255.231.167] Content-Type: text/plain; charset="utf-8" Content-ID: <5428C520956F5C4DA9C5311CBDEB050C@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 16:53:08 -0000 SSB0aGluayB0aGlzIGlzIGEgY2FzZSB3aGVyZSB0aGUgdmVyaWZpZXIgcm9sZSBpcyBjb21iaW5l ZCB3aXRoIHRoZSBhdHRlc3RlciByb2xlIHN1Y2ggdGhhdCBhbiBpbXBsaWNpdCBhdHRlc3RhdGlv biBpcyBhbGwgdGhhdCBpcyByZXF1aXJlZCBieSBhIHJlbW90ZSB2ZXJpZmllciB0byBhcnJpdmUg YXQgYSBjb25jbHVzaW9uIHRoYXQgdGhlIGRldGFpbGVkIHBvbGljaWVzIGFwcGxpZWQgYnkgdGhl IHZlcmlmaWNhdGlvbiBsb2dpYyBpbiB0aGUgYm9vdCBjb2RlIHdlcmUgYXBwbGllZC4gSW4gb3Ro ZXIgd29yZHMsIHRoZSBzeXN0ZW0gY291bGRuJ3QgaGF2ZSBib290ZWQgaW5jb3JyZWN0bHkgaWYg aXQgaXMgYWJsZSB0byBzdXBwbHkgaW1wbGljaXQgYXR0ZXN0YXRpb24gdG8gdGhlIHJlbW90ZSB2 ZXJpZmllci4gDQoNCu+7v09uIDExLzIxLzE5LCAyOjE4IEFNLCAiSGVuayBCaXJraG9seiIgPGhl bmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+IHdyb3RlOg0KDQogICAgSSByZS1yZWFkIHRo aXMgYXMgaXQgbWFkZSByZWFsbHkgbm8gc2Vuc2UgdG8gbWUuIEkgcmVhbGl6ZSB0aGF0IEkgDQog ICAgYWN0dWFsbHkgZG8gbm90IHVuZGVyc3RhbmQgdGhpcyBzZW50ZW5jZToNCiAgICANCiAgICBP biAyMS4xMS4xOSAwOTowNiwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KICAgID4gSW4gdGhp cyBub24tVFBNIHN0eWxlIGF0dGVzdGF0aW9uIHRoZXJlIGlzIGhhc2hpbmcgb2YgY29kZSBib290 ZWQgYXMgcGFydCBvZiBzZWN1cmUgYm9vdCBpbXBsZW1lbnRlZCBpbiB0aGUgYm9vdCBST00sIGJ1 dCB0aGF0IGFsbCBoYXBwZW5zIGluc2lkZSB0aGUgYm9vdCBzZXF1ZW5jZSBhbmQgbmV2ZXIgbWFu aWZlc3RzIG91dHNpZGUgb2YgaXQgKEkgYWxzbyBkbyBub3QgdGhpbmsgaXQgaXMgaGVscGZ1bCB0 byByZWZlciB0byB0aGlzIHBhcnQgb2YgdGhlIGJvb3QgUk9NIGFzIGEg4oCcdmVyaWZpZXLigJ0g aW4gdGhpcyBjb250ZXh0IGJlY2F1c2UgaXQgaXMgbm90IHRoZSBzYW1lIGFzIGEgUkFUUyB2ZXJp ZmllciB0aGF0IHByb2R1Y2VzIGF0dGVzdGF0aW9uIGV2aWRlbmNlLCBpcyByZW1vdGUgYW5kIHN1 Y2gpLg0KICAgIA0KICAgIFdoYXQgaXMgInRoaXMgcGFydCBvZiB0aGUgYm9vdCBST00iIGFuZCB3 aHkgc2hvdWxkIGFueXRoaW5nIGluIHRoZSBib290IA0KICAgIFJPTSBiZSBjYWxsZWQgInZlcmlm aWVyIi4gSXQgc2VlbXMgdGhhdCBpdCBoYXMgb2NjdXJyZWQgYWxyZWFkeS4gQ291bGQgDQogICAg c29tZW9uZSBwbGVhc2UgdGVsbCBtZSB3aGVyZSBhbmQgd2h5PyBXYXMgaXQgbWVudGlvbmVkIG9u IHRoaXMgbGlzdD8NCiAgICANCiAgICBWaWVsZSBHcsO8w59lLA0KICAgIA0KICAgIEhlbmsNCiAg ICANCg0K From nobody Thu Nov 21 09:01:55 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05BE7120B44; Thu, 21 Nov 2019 09:01:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.097 X-Spam-Level: X-Spam-Status: No, score=-4.097 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QP0L6PNZlmMf; Thu, 21 Nov 2019 09:01:50 -0800 (PST) Received: from mga17.intel.com (mga17.intel.com [192.55.52.151]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0693A12084B; Thu, 21 Nov 2019 09:01:50 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga107.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Nov 2019 09:01:49 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,226,1571727600"; d="scan'208,217";a="381797242" Received: from orsmsx104.amr.corp.intel.com ([10.22.225.131]) by orsmga005.jf.intel.com with ESMTP; 21 Nov 2019 09:01:49 -0800 Received: from orsmsx153.amr.corp.intel.com (10.22.226.247) by ORSMSX104.amr.corp.intel.com (10.22.225.131) with Microsoft SMTP Server (TLS) id 14.3.439.0; Thu, 21 Nov 2019 09:01:49 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX153.amr.corp.intel.com ([169.254.12.169]) with mapi id 14.03.0439.000; Thu, 21 Nov 2019 09:01:49 -0800 From: "Smith, Ned" To: "Waltermire, David A. (Fed)" , Kathleen Moriarty CC: "rats@ietf.org" , Ira McDonald , sacm , Laurence Lundblade Thread-Topic: [Rats] [sacm] CoSWID and EAT and CWT Thread-Index: AQHVoG8Mmfd0MJQUgU+DKiylINck/aeV2dmA Date: Thu, 21 Nov 2019 17:01:48 +0000 Message-ID: References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <5r0dnrkillm4odhp4it9ejl8.1574342669212@email.android.com> In-Reply-To: <5r0dnrkillm4odhp4it9ejl8.1574342669212@email.android.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.255.231.167] Content-Type: multipart/alternative; boundary="_000_CFA72C1A3DEE40D0862EEC0B512F733Bintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Nov 2019 17:01:53 -0000 --_000_CFA72C1A3DEE40D0862EEC0B512F733Bintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB0aGluayB0aGVyZSBhcmUgdHdvIGNvbnZlcnNhdGlvbnMgdGhhdCBjb3VsZCBtYWtlIHNlbnNl ICgxKSBkZWZpbml0aW9uIG9mIGEgc29mdHdhcmUgaW50ZWdyaXR5IGNsYWltIHRoYXQgY2FuIGJl IGFzc2VydGVkIGJ5IGFuIEF0dGVzdGVyIGFzIEV2aWRlbmNlOyAoMikgZGVmaW5pdGlvbiBvZiBh IHNvZnR3YXJlIGludGVncml0eSBjbGFpbSB0aGF0IGNhbiBiZSBhc3NlcnRlZCBieSBhbiBFbmRv cnNlciAoYWthIHN1cHBseSBjaGFpbiBlbnRpdHkpIGFzIEVuZG9yc2VtZW50Lg0KDQpJbiAoMSkg dGhlcmUgaXMgaW50ZXJlc3QgaW4gYW4gRUFUIHRva2VuIGRlZmluaXRpb24gdGhhdCBsaWtlbHkg d2lsbCByZXN1bHQgaW4gYSBKV1QvQ1dUIHJlYWxpemF0aW9uIGFuZCBzaWduYXR1cmUuIFBvc3Np Ymx5IGl0IG1ha2VzIHNlbnNlIHRvIGluY2x1ZGUgYW4gdW5zaWduZWQgQ29TV0lEIC8gU1dJRCBz dHJ1Y3R1cmUgaW5zaWRlIGEgSldUL0NXVCBvciBpdCBtYWtlcyBzZW5zZSB0byBkZXZpYXRlIGZy b20gdGhlIEpXVC9DV1QgcmVhbGl6YXRpb24gYnV0IGtlZXAgdGhlIGluZm9ybWF0aW9uIGFuZCBk YXRhIG1vZGVsIGNsYWltcyBkZWZpbml0aW9uIGJ1dCBhbGxvdyB1c2Ugb2YgQ29TV0lEIG5hdGl2 ZSBzaWduYXR1cmVzLg0KSW4gKDIpIHRoaXMgaXMgdGVjaG5pY2FsbHkgb3V0IG9mIHNjb3BlIGZv ciBSQVRTLiBIb3dldmVyLCBpdCBjb3VsZCByZXN1bHQgaW4gYSBDb1NXSUQgLyBTV0lEIHN0cnVj dHVyZSB1c2luZyB0aGUgYnVpbHQgaW4gc2lnbmF0dXJlIG1ldGhvZC4gSXQgaXNu4oCZdCBrbm93 biB5ZXQgaWYgYSB0b2tlbiAoQ1dUL0pXVCkgcmVhbGl6YXRpb24gbWFrZXMgc2Vuc2UgZm9yIEVu ZG9yc2Vycy4NCg0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYg b2YgIldhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpIiA8ZGF2aWQud2FsdGVybWlyZT00MG5pc3Qu Z292QGRtYXJjLmlldGYub3JnPg0KRGF0ZTogVGh1cnNkYXksIE5vdmVtYmVyIDIxLCAyMDE5IGF0 IDU6MjQgQU0NClRvOiBLYXRobGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBn bWFpbC5jb20+DQpDYzogInJhdHNAaWV0Zi5vcmciIDxyYXRzQGlldGYub3JnPiwgSXJhIE1jRG9u YWxkIDxibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4sIHNhY20gPHNhY21AaWV0Zi5vcmc+LCBMYXVy ZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClN1YmplY3Q6IFJlOiBbUmF0 c10gW3NhY21dIENvU1dJRCBhbmQgRUFUIGFuZCBDV1QNCg0KT2suIENhbiB5b3Ugc2VuZCBzb21l IHRleHQ/DQoNClRoYW5rcywNCkRhdmUNCg0KLS0tLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0t LS0tLQ0KRnJvbTogS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21h aWwuY29tPg0KRGF0ZTogVGh1LCBOb3ZlbWJlciAyMSwgMjAxOSA3OjM4IFBNICswODAwDQpUbzog IldhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpIiA8ZGF2aWQud2FsdGVybWlyZUBuaXN0Lmdvdj4N CkNDOiBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVzaWNAZ21haWwuY29tPiwgcmF0c0BpZXRmLm9y Zywgc2FjbSA8c2FjbUBpZXRmLm9yZz4sIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPg0KU3ViamVjdDogUmU6IFtzYWNtXSBbUmF0c10gQ29TV0lEIGFuZCBFQVQgYW5k IENXVA0KDQpTZW50IGZyb20gbXkgbW9iaWxlIGRldmljZQ0KDQoNCk9uIE5vdiAyMCwgMjAxOSwg YXQgMTE6MjkgUE0sIFdhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpIDxkYXZpZC53YWx0ZXJtaXJl QG5pc3QuZ292PiB3cm90ZToNCkl0IHNvdW5kcyBsaWtlIGhhdmluZyBhIENXVCBjbGFpbSB0aGF0 IGNvbnRhaW5zIGFuIGVudGlyZSBDb1NXSUQgaXMgYSBwYXRoIGZvcndhcmQuIEl0IG1heSBhbHNv IG1ha2Ugc2Vuc2UgdG8gZG8gc29tZXRoaW5nIHNpbWlsYXIgZm9yIElTTyBTV0lEIHRhZ3MuDQoN CkFtIEkgcmlnaHQgaW4gdGhpbmtpbmcgdGhhdCB0aGlzIENXVCB3b3JrIGNhbiBiZSBkb25lIGlu IFJBVFMsIHJlZmVyZW5jaW5nIENvU1dJRCBvbmNlIGl0IGlzIHB1Ymxpc2hlZCBhcyBhIG5vcm1h dGl2ZSByZWZlcmVuY2U/IFRoaXMgd291bGQgYWxsb3cgQ29TV0lEIHRvIGdvIGZvcndhcmQgdG8g dGhlIElFU0csIHdoaWxlIHRoZSBDb1NXSUQgQ1dUIGNsYWltIGlzIHdvcmtlZCBpbiBwYXJhbGxl bCBpbiBSQVRTLg0KDQpLYXRobGVlbiwgaWYgdGhpcyBpcyB0cnVlLCBkb2VzIHRoaXMgd2F5IGZv cndhcmQgYWRkcmVzcyB5b3VyIENXVC1yZWxhdGVkIGNvbW1lbnRzPw0KDQpIaSBEYXZlLA0KDQpJ IHRoaW5rIHRoZSBzaWduYXR1cmUgbWF5IGhhdmUgdG8gYmUgb24gdGhlIENXVCBhcyBvcHBvc2Vk IHRvIG9uIHRoZSBjbGFpbSB0aGF0IGlzIHRoZSBDb1NXSUQgb3IgU1dJRC4gIFdlIGNhbiBkZWZp bmUgaXQgZnVsbHkgaW4gYW5vdGhlciBkcmFmdCwgYnV0IHNob3VsZCBzdGF0ZSBpdCBoZXJlIHNv IHRoYXQgb3B0aW9uIGlzIHVuZGVyc3Rvb2QuICBJdOKAmXMgYSBzaW1wbGUgd3JpdGUgdXAsIEkg dGhpbmsuDQoNClRoYW5rIHlvdSwNCkthdGhsZWVuDQoNCg0KUmVnYXJkcywNCkRhdmUNCg0KDQoN Cg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRnJvbTogc2FjbSA8c2FjbS1i b3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVu Lm1vcmlhcnR5LmlldGZAZ21haWwuY29tPg0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAyMCwg MjAxOSA5OjEwIFBNDQpUbzogSXJhIE1jRG9uYWxkIDxibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4N CkNjOiByYXRzQGlldGYub3JnIDxyYXRzQGlldGYub3JnPjsgc2FjbSA8c2FjbUBpZXRmLm9yZz47 IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KU3ViamVjdDogUmU6 IFtzYWNtXSBbUmF0c10gQ29TV0lEIGFuZCBFQVQgYW5kIENXVA0KDQpHcmVhdCwgdGhhbmtzIExh dXJlbmNlLiAgSWYgdGhhdCdzIGVhc2llciBJIHRoaW5rIGhhdmluZyB0aGUgQ29TV0lEIGluIG9u ZSBjbGFpbSBzaG91bGQgYmUgb2sgYW5kIHdvdWxkIGhhdmUgdGhlIHNhbWUgcmVzdWx0IGFzIHRo ZSBzdWdnZXN0aW9uIEkgbWFkZS4gIENoYW5naW5nIHRoZSBDb1NXSUQgZm9ybWF0IGlzIGEgYmln IGVub3VnaCBwcm9jZXNzIHRoYXQgaXQgc2hvdWxkbid0IGhhcHBlbiB2ZXJ5IG9mdGVuLg0KDQpC ZXN0IHJlZ2FyZHMsDQpLYXRobGVlbg0KDQpPbiBXZWQsIE5vdiAyMCwgMjAxOSBhdCA4OjAwIFBN IElyYSBNY0RvbmFsZCA8Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208bWFpbHRvOmJsdWVyb29mbXVz aWNAZ21haWwuY29tPj4gd3JvdGU6DQpIaSBMYXVyZW5jZSwNCg0KVGhhdCBzZWVtcyBsaWtlIGEg Z29vZCBzdWdnZXN0aW9uIGZvciBhIHNpbXBsZSB3YXkgdG8gaW50ZWdyYXRlIENvU1dJRCBjb250 ZW50DQppbnRvIEVBVC4NCg0KQ2hlZXJzLA0KLSBJcmENCg0KSXJhIE1jRG9uYWxkIChNdXNpY2lh biAvIFNvZnR3YXJlIEFyY2hpdGVjdCkNCkNvLUNoYWlyIC0gVENHIFRydXN0ZWQgTW9iaWxpdHkg U29sdXRpb25zIFdHDQpDby1DaGFpciAtIFRDRyBNZXRhZGF0YSBBY2Nlc3MgUHJvdG9jb2wgU0cN CkNoYWlyIC0gTGludXggRm91bmRhdGlvbiBPcGVuIFByaW50aW5nIFdHDQpTZWNyZXRhcnkgLSBJ RUVFLUlTVE8gUHJpbnRlciBXb3JraW5nIEdyb3VwDQpDby1DaGFpciAtIElFRUUtSVNUTyBQV0cg SW50ZXJuZXQgUHJpbnRpbmcgUHJvdG9jb2wgV0cNCklFVEYgRGVzaWduYXRlZCBFeHBlcnQgLSBJ UFAgJiBQcmludGVyIE1JQg0KQmx1ZSBSb29mIE11c2ljIC8gSGlnaCBOb3J0aCBJbmMNCmh0dHA6 Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYzxodHRwczovL2djYzAxLnNhZmVs aW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnNpdGVzLmdvb2ds ZS5jb20lMkZzaXRlJTJGYmx1ZXJvb2ZtdXNpYyZkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJt aXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVk ODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTkzMzA4Nzk0NDgwNTAm c2RhdGE9SE5LS3NZRFV4NWpab3h1aktEcUppY3FVQlo5b2U5bXhYY1RqSjFKbGhITSUzRCZyZXNl cnZlZD0wPg0KaHR0cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9oaWdobm9ydGhpbmM8aHR0cHM6 Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYl MkZzaXRlcy5nb29nbGUuY29tJTJGc2l0ZSUyRmhpZ2hub3J0aGluYyZkYXRhPTAyJTdDMDElN0Nk YXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2ZTc3 NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTkz MzA4Nzk0NDgwNTAmc2RhdGE9UFBVcVZvMU5nR1hUZ3RPMTBOa0x2VEhxaDVPRXFmQWVvT2JXdmd1 SXp3WSUzRCZyZXNlcnZlZD0wPg0KbWFpbHRvOiBibHVlcm9vZm11c2ljQGdtYWlsLmNvbTxtYWls dG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+DQpQTyBCb3ggMjIxICBHcmFuZCBNYXJhaXMsIE1J IDQ5ODM5ICA5MDYtNDk0LTI0MzQNCg0KDQpPbiBXZWQsIE5vdiAyMCwgMjAxOSBhdCA3OjM1IFBN IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNs YW5kLXJlc29ydC5jb20+PiB3cm90ZToNCkhpLA0KDQpJ4oCZbSBub3Qgb24gdGhlIFNBQ00gbGlz dCwgYnV0IGRpZCBsb29rIGF0IHRoZSBhcmNoaXZlLiBIb3BlZnVsbHkgSeKAmW0gbm90IG91dCBv ZiBzeW5jLg0KDQpNeSB0aG91Z2h0IGlzIHRvIHJlZ2lzdGVyIG9uZSBjbGFpbSBmb3IgQ1dUIHRo YXQgaXMgYW4gZW50aXJlIENvU1dJRCAoaW4gQ0RETCB0aGUgY29uY2lzZS1zd2lkLXRhZykuDQoN ClRoYXQgd2F5IENvU1dJRCBjYW4gZ3JvdyBhbmQgZGV2ZWxvcCBvbiBpdHMgb3duIHdpdGhvdXQg bG90cyBvZiBhZGRzIGFuZCBzdWJ0cmFjdHMgdG8gdGhlIENXVCByZWdpc3RyeS4gSXQgaGFzIGl0 cyBvd24gSUFOQSByZWdpc3RyeSB3aXRoIGl0cyBvd24gZXhwZXJ0cyBhbmQgc3VjaC4gU2VlbXMg bGlrZSB0aGUgY291cGxpbmcgLyBmYWN0b3JpbmcgaXMgYWJvdXQgcmlnaHQuDQoNClRoaXMgd291 bGQgYWxzbyBiZSB0aGUgd2F5IEnigJlkIGxpa2UgdG8gaGF2ZSBpdCBpbiBFQVQgYXR0ZXN0YXRp b24uIFdl4oCZdmUgZG9uZSBhIG1pbmkgdmVyc2lvbiBvZiB0aGlzIHdpdGggdGhlIGxvY2F0aW9u IGNsYWltPGh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy bD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWlldGYtcmF0cy1l YXQtMDElMjNzZWN0aW9uLTMuOCZkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlz dC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3 OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTkzMzA4Nzk0NTgwNDQmc2RhdGE9c3Nx ZjFockRtM2JIWERUcGV3TWQlMkJoeEs5WWg3bU5EZm1KSCUyQjlMazhKc00lM0QmcmVzZXJ2ZWQ9 MD4uDQoNClRoZW4gaWYgeW91IGp1c3Qgd2FudCB0byBzaWduIGEgQ29TV0lEIENXVCBzdHlsZSwg dGhpcyB3b3JrcyBwcmV0dHkgd2VsbCB0b28uIEl0IGhhcyBhIHNsaWdodCBvdmVyaGVhZCBjb21w YXJlZCB0byBoYXZpbmcgYWxsIHRoZSBDb1NXSUQgZGF0YSBpdGVtcyBhcyBkaXJlY3QgQ1dUIGNs YWltcyBpbiB0aGF0IGl0IHdpbGwgaGF2ZSBhbiBhZGRpdGlvbmFsIG1hcCBsYXllciwgYnV0IHRo YXQgaXMgb25seSBhYm91dCB0aHJlZSBieXRlcy4NCg0KTEwNCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGll dGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9yYXRzPGh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5m byUyRnJhdHMmZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVh MzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3NzQ1ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1 NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5MzMwODc5NDU4MDQ0JnNkYXRhPUs0eiUyQnBaSzVzNk5n JTJCN2FtaXpvT051SGxseGpzaG1HNWFUelAzeU84YWRVJTNEJnJlc2VydmVkPTA+DQpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0Kc2FjbSBtYWlsaW5nIGxp c3QNCnNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1h biUyRmxpc3RpbmZvJTJGc2FjbSZkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlz dC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3 OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2MzcwOTkzMzA4Nzk0NjgwMzkmc2RhdGE9SnZp T3ZwS0dRTE55TWlWMmZFRlNFMXFaQTNYb3NPb0VDQkNRdWlUSzRMbyUzRCZyZXNlcnZlZD0wPg0K DQoNCi0tDQoNCkJlc3QgcmVnYXJkcywNCkthdGhsZWVuDQo= --_000_CFA72C1A3DEE40D0862EEC0B512F733Bintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNvdXJpZXI7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIg NCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0K CXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICov DQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47 DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxp bmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28t c3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2lu LXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDow aW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp Zjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N Ci5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6 ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1h cmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6 V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpz aGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5k aWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRp dCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48 L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVl IiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JIHRoaW5rIHRoZXJlIGFyZSB0d28gY29udmVyc2F0aW9ucyB0aGF0IGNvdWxk IG1ha2Ugc2Vuc2UgKDEpIGRlZmluaXRpb24gb2YgYSBzb2Z0d2FyZSBpbnRlZ3JpdHkgY2xhaW0g dGhhdCBjYW4gYmUgYXNzZXJ0ZWQgYnkgYW4gQXR0ZXN0ZXIgYXMgRXZpZGVuY2U7ICgyKSBkZWZp bml0aW9uIG9mIGEgc29mdHdhcmUgaW50ZWdyaXR5IGNsYWltIHRoYXQgY2FuIGJlIGFzc2VydGVk IGJ5IGFuIEVuZG9yc2VyIChha2ENCiBzdXBwbHkgY2hhaW4gZW50aXR5KSBhcyBFbmRvcnNlbWVu dC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gKDEpIHRoZXJlIGlzIGludGVyZXN0IGluIGFu IEVBVCB0b2tlbiBkZWZpbml0aW9uIHRoYXQgbGlrZWx5IHdpbGwgcmVzdWx0IGluIGEgSldUL0NX VCByZWFsaXphdGlvbiBhbmQgc2lnbmF0dXJlLiBQb3NzaWJseSBpdCBtYWtlcyBzZW5zZSB0byBp bmNsdWRlIGFuIHVuc2lnbmVkIENvU1dJRCAvIFNXSUQgc3RydWN0dXJlIGluc2lkZSBhIEpXVC9D V1Qgb3IgaXQgbWFrZXMgc2Vuc2UgdG8gZGV2aWF0ZSBmcm9tDQogdGhlIEpXVC9DV1QgcmVhbGl6 YXRpb24gYnV0IGtlZXAgdGhlIGluZm9ybWF0aW9uIGFuZCBkYXRhIG1vZGVsIGNsYWltcyBkZWZp bml0aW9uIGJ1dCBhbGxvdyB1c2Ugb2YgQ29TV0lEIG5hdGl2ZSBzaWduYXR1cmVzLjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gKDIpIHRoaXMgaXMgdGVjaG5pY2FsbHkg b3V0IG9mIHNjb3BlIGZvciBSQVRTLiBIb3dldmVyLCBpdCBjb3VsZCByZXN1bHQgaW4gYSBDb1NX SUQgLyBTV0lEIHN0cnVjdHVyZSB1c2luZyB0aGUgYnVpbHQgaW4gc2lnbmF0dXJlIG1ldGhvZC4g SXQgaXNu4oCZdCBrbm93biB5ZXQgaWYgYSB0b2tlbiAoQ1dUL0pXVCkgcmVhbGl6YXRpb24gbWFr ZXMgc2Vuc2UgZm9yIEVuZG9yc2Vycy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2Vz QGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgJnF1b3Q7V2FsdGVybWlyZSwgRGF2aWQgQS4gKEZl ZCkmcXVvdDsgJmx0O2RhdmlkLndhbHRlcm1pcmU9NDBuaXN0LmdvdkBkbWFyYy5pZXRmLm9yZyZn dDs8YnI+DQo8Yj5EYXRlOiA8L2I+VGh1cnNkYXksIE5vdmVtYmVyIDIxLCAyMDE5IGF0IDU6MjQg QU08YnI+DQo8Yj5UbzogPC9iPkthdGhsZWVuIE1vcmlhcnR5ICZsdDtrYXRobGVlbi5tb3JpYXJ0 eS5pZXRmQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPiZxdW90O3JhdHNAaWV0Zi5vcmcm cXVvdDsgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7LCBJcmEgTWNEb25hbGQgJmx0O2JsdWVyb29mbXVz aWNAZ21haWwuY29tJmd0Oywgc2FjbSAmbHQ7c2FjbUBpZXRmLm9yZyZndDssIExhdXJlbmNlIEx1 bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwv Yj5SZTogW1JhdHNdIFtzYWNtXSBDb1NXSUQgYW5kIEVBVCBhbmQgQ1dUPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW4iPg0KT2suIENhbiB5b3Ugc2VuZCBz b21lIHRleHQ/PGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCkRhdmU8YnI+DQo8YnI+DQotLS0tLS0t LSBPcmlnaW5hbCBNZXNzYWdlIC0tLS0tLS0tPGJyPg0KRnJvbTogS2F0aGxlZW4gTW9yaWFydHkg Jmx0O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCkRhdGU6IFRodSwg Tm92ZW1iZXIgMjEsIDIwMTkgNzozOCBQTSAmIzQzOzA4MDA8YnI+DQpUbzogJnF1b3Q7V2FsdGVy bWlyZSwgRGF2aWQgQS4gKEZlZCkmcXVvdDsgJmx0O2RhdmlkLndhbHRlcm1pcmVAbmlzdC5nb3Ym Z3Q7PGJyPg0KQ0M6IElyYSBNY0RvbmFsZCAmbHQ7Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20mZ3Q7 LCByYXRzQGlldGYub3JnLCBzYWNtICZsdDtzYWNtQGlldGYub3JnJmd0OywgTGF1cmVuY2UgTHVu ZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7PGJyPg0KU3ViamVjdDogUmU6IFtz YWNtXSBbUmF0c10gQ29TV0lEIGFuZCBFQVQgYW5kIENXVDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGluO21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbiI+DQo8bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+U2VudCBmcm9tIG15IG1vYmlsZSBkZXZpY2U8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjEyLjBwdDttYXJnaW4tbGVmdDouNWluIj4NCk9uIE5vdiAyMCwgMjAxOSwgYXQgMTE6Mjkg UE0sIFdhbHRlcm1pcmUsIERhdmlkIEEuIChGZWQpICZsdDtkYXZpZC53YWx0ZXJtaXJlQG5pc3Qu Z292Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+SXQgc291bmRzIGxp a2UgaGF2aW5nIGEgQ1dUIGNsYWltIHRoYXQgY29udGFpbnMgYW4gZW50aXJlIENvU1dJRCBpcyBh IHBhdGggZm9yd2FyZC4gSXQgbWF5IGFsc28gbWFrZSBzZW5zZSB0byBkbyBzb21ldGhpbmcgc2lt aWxhciBmb3IgSVNPIFNXSUQgdGFncy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+ QW0gSSByaWdodCBpbiB0aGlua2luZyB0aGF0IHRoaXMgQ1dUIHdvcmsgY2FuIGJlIGRvbmUgaW4g UkFUUywgcmVmZXJlbmNpbmcgQ29TV0lEIG9uY2UgaXQgaXMgcHVibGlzaGVkIGFzIGEgbm9ybWF0 aXZlIHJlZmVyZW5jZT8gVGhpcyB3b3VsZCBhbGxvdyBDb1NXSUQgdG8gZ28gZm9yd2FyZCB0bw0K IHRoZSBJRVNHLCB3aGlsZSB0aGUgQ29TV0lEIENXVCBjbGFpbSBpcyB3b3JrZWQgaW4gcGFyYWxs ZWwgaW4gUkFUUy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayI+S2F0aGxlZW4sIGlm IHRoaXMgaXMgdHJ1ZSwgZG9lcyB0aGlzIHdheSBmb3J3YXJkIGFkZHJlc3MgeW91ciBDV1QtcmVs YXRlZCBjb21tZW50cz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkhpIERhdmUsIDxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5JIHRoaW5rIHRoZSBzaWduYXR1cmUgbWF5IGhhdmUgdG8gYmUg b24gdGhlIENXVCBhcyBvcHBvc2VkIHRvIG9uIHRoZSBjbGFpbSB0aGF0IGlzIHRoZSBDb1NXSUQg b3IgU1dJRC4gJm5ic3A7V2UgY2FuIGRlZmluZSBpdCBmdWxseSBpbiBhbm90aGVyIGRyYWZ0LCBi dXQgc2hvdWxkIHN0YXRlIGl0IGhlcmUgc28gdGhhdCBvcHRpb24gaXMgdW5kZXJzdG9vZC4gJm5i c3A7SXTigJlzIGEgc2ltcGxlDQogd3JpdGUgdXAsIEkgdGhpbmsuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhhbmsgeW91LDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPkthdGhsZWVuJm5ic3A7PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2si PlJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2NvbG9yOmJsYWNrIj5EYXZlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6Ymxh Y2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg Y2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47 dGV4dC1hbGlnbjpjZW50ZXIiPg0KPGhyIHNpemU9IjAiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2Vu dGVyIj4NCjwvZGl2Pg0KPGRpdiBpZD0iZGl2UnBseUZ3ZE1zZyI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNr Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4gc2FjbSAmbHQ7c2Fj bS1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkgJmx0 O2thdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tJmd0Ozxicj4NCjxiPlNlbnQ6PC9iPiBX ZWRuZXNkYXksIE5vdmVtYmVyIDIwLCAyMDE5IDk6MTAgUE08YnI+DQo8Yj5Ubzo8L2I+IElyYSBN Y0RvbmFsZCAmbHQ7Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBy YXRzQGlldGYub3JnICZsdDtyYXRzQGlldGYub3JnJmd0Ozsgc2FjbSAmbHQ7c2FjbUBpZXRmLm9y ZyZndDs7IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxi cj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3NhY21dIFtSYXRzXSBDb1NXSUQgYW5kIEVBVCBhbmQg Q1dUPC9zcGFuPiA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+R3JlYXQsIHRoYW5rcyBMYXVyZW5jZS4mbmJzcDsgSWYgdGhhdCdzIGVhc2llciBJ IHRoaW5rIGhhdmluZyB0aGUgQ29TV0lEIGluIG9uZSBjbGFpbSBzaG91bGQgYmUgb2sgYW5kIHdv dWxkIGhhdmUgdGhlIHNhbWUgcmVzdWx0IGFzIHRoZSBzdWdnZXN0aW9uIEkgbWFkZS4mbmJzcDsg Q2hhbmdpbmcgdGhlIENvU1dJRCBmb3JtYXQgaXMgYSBiaWcgZW5vdWdoIHByb2Nlc3MgdGhhdCBp dA0KIHNob3VsZG4ndCBoYXBwZW4gdmVyeSBvZnRlbi4gPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPkJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5LYXRobGVl bjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIFdlZCwg Tm92IDIwLCAyMDE5IGF0IDg6MDAgUE0gSXJhIE1jRG9uYWxkICZsdDs8YSBocmVmPSJtYWlsdG86 Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20iPmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4g Ni4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IaSBMYXVyZW5j ZSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5UaGF0IHNl ZW1zIGxpa2UgYSBnb29kIHN1Z2dlc3Rpb24gZm9yIGEgc2ltcGxlIHdheSB0byBpbnRlZ3JhdGUg Q29TV0lEIGNvbnRlbnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5pbnRvIEVBVC48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5DaGVlcnMsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+LSBJcmE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj5JcmEgTWNEb25hbGQgKE11c2ljaWFuIC8gU29mdHdhcmUgQXJjaGl0ZWN0KTxicj4N CkNvLUNoYWlyIC0gVENHIFRydXN0ZWQgTW9iaWxpdHkgU29sdXRpb25zIFdHPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+Q28tQ2hhaXIgLSBUQ0cgTWV0YWRhdGEgQWNjZXNzIFByb3RvY29sIFNHPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0 O21hcmdpbi1sZWZ0Oi41aW4iPg0KQ2hhaXIgLSBMaW51eCBGb3VuZGF0aW9uIE9wZW4gUHJpbnRp bmcgV0c8YnI+DQpTZWNyZXRhcnkgLSBJRUVFLUlTVE8gUHJpbnRlciBXb3JraW5nIEdyb3VwPGJy Pg0KQ28tQ2hhaXIgLSBJRUVFLUlTVE8gUFdHIEludGVybmV0IFByaW50aW5nIFByb3RvY29sIFdH PGJyPg0KSUVURiBEZXNpZ25hdGVkIEV4cGVydCAtIElQUCAmYW1wOyBQcmludGVyIE1JQjxicj4N CkJsdWUgUm9vZiBNdXNpYyAvIEhpZ2ggTm9ydGggSW5jPGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly9n Y2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZz aXRlcy5nb29nbGUuY29tJTJGc2l0ZSUyRmJsdWVyb29mbXVzaWMmYW1wO2RhdGE9MDIlN0MwMSU3 Q2RhdmlkLndhbHRlcm1pcmUlNDBuaXN0LmdvdiU3Qzg1YTMyM2Y2NzM5MjQzODljNDVlMDhkNzZl Nzc0NWU1JTdDMmFiNWQ4MmZkOGZhNDc5N2E5M2UwNTQ2NTVjNjFkZWMlN0MxJTdDMCU3QzYzNzA5 OTMzMDg3OTQ0ODA1MCZhbXA7c2RhdGE9SE5LS3NZRFV4NWpab3h1aktEcUppY3FVQlo5b2U5bXhY Y1RqSjFKbGhITSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly9zaXRl cy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYzwvYT48YnI+DQo8YSBocmVmPSJodHRwczov L2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUy RnNpdGVzLmdvb2dsZS5jb20lMkZzaXRlJTJGaGlnaG5vcnRoaW5jJmFtcDtkYXRhPTAyJTdDMDEl N0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M4NWEzMjNmNjczOTI0Mzg5YzQ1ZTA4ZDc2 ZTc3NDVlNSU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzAlN0M2Mzcw OTkzMzA4Nzk0NDgwNTAmYW1wO3NkYXRhPVBQVXFWbzFOZ0dYVGd0TzEwTmtMdlRIcWg1T0VxZkFl b09iV3ZndUl6d1klM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHls ZT0iY29sb3I6IzY2MDBDQyI+aHR0cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9oaWdobm9ydGhp bmM8L3NwYW4+PC9hPjxicj4NCm1haWx0bzogPGEgaHJlZj0ibWFpbHRvOmJsdWVyb29mbXVzaWNA Z21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208L2E+PGJy Pg0KUE8gQm94IDIyMSZuYnNwOyBHcmFuZCBNYXJhaXMsIE1JIDQ5ODM5Jm5ic3A7IDkwNi00OTQt MjQzNDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIFdlZCwgTm92IDIwLCAyMDE5IGF0IDc6MzUgUE0gTGF1 cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29t IiB0YXJnZXQ9Il9ibGFuayI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFy Z2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkhpLCA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+SeKAmW0gbm90IG9uIHRoZSBTQUNNIGxpc3QsIGJ1dCBkaWQgbG9v ayBhdCB0aGUgYXJjaGl2ZS4gSG9wZWZ1bGx5IEnigJltIG5vdCBvdXQgb2Ygc3luYy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5NeSB0aG91Z2h0IGlzIHRv IHJlZ2lzdGVyIG9uZSBjbGFpbSBmb3IgQ1dUIHRoYXQgaXMgYW4gZW50aXJlIENvU1dJRCAoaW4g Q0RETCB0aGUmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpD b3VyaWVyIj5jb25jaXNlLXN3aWQtdGFnKTwvc3Bhbj4uPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhhdCB3YXkgQ29TV0lEIGNhbiBncm93IGFuZCBkZXZl bG9wIG9uIGl0cyBvd24gd2l0aG91dCBsb3RzIG9mIGFkZHMgYW5kIHN1YnRyYWN0cyB0byB0aGUg Q1dUIHJlZ2lzdHJ5LiBJdCBoYXMgaXRzIG93biBJQU5BIHJlZ2lzdHJ5IHdpdGggaXRzIG93biBl eHBlcnRzIGFuZCBzdWNoLiBTZWVtcyBsaWtlIHRoZSBjb3VwbGluZyAvIGZhY3RvcmluZyBpcyBh Ym91dCByaWdodC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij5UaGlzIHdvdWxkIGFsc28gYmUgdGhlIHdheSBJ4oCZZCBsaWtlIHRvIGhhdmUgaXQgaW4gRUFU IGF0dGVzdGF0aW9uLiBXZeKAmXZlIGRvbmUgYSBtaW5pIHZlcnNpb24gb2YgdGhpcyB3aXRoIHRo ZSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWll dGYtcmF0cy1lYXQtMDElMjNzZWN0aW9uLTMuOCZhbXA7ZGF0YT0wMiU3QzAxJTdDZGF2aWQud2Fs dGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3NzQ1ZTUlN0My YWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5MzMwODc5NDU4 MDQ0JmFtcDtzZGF0YT1zc3FmMWhyRG0zYkhYRFRwZXdNZCUyQmh4SzlZaDdtTkRmbUpIJTJCOUxr OEpzTSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPmxvY2F0aW9uDQogY2xhaW08 L2E+LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZW4g aWYgeW91IGp1c3Qgd2FudCB0byBzaWduIGEgQ29TV0lEIENXVCBzdHlsZSwgdGhpcyB3b3JrcyBw cmV0dHkgd2VsbCB0b28uIEl0IGhhcyBhIHNsaWdodCBvdmVyaGVhZCBjb21wYXJlZCB0byBoYXZp bmcgYWxsIHRoZSBDb1NXSUQgZGF0YSBpdGVtcyBhcyBkaXJlY3QgQ1dUIGNsYWltcyBpbiB0aGF0 IGl0IHdpbGwgaGF2ZSBhbiBhZGRpdGlvbmFsIG1hcCBsYXllciwNCiBidXQgdGhhdCBpcyBvbmx5 IGFib3V0IHRocmVlIGJ5dGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0K UkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPlJBVFNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly9nY2Mw MS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3 LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGcmF0cyZhbXA7ZGF0YT0wMiU3QzAxJTdD ZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3MzkyNDM4OWM0NWUwOGQ3NmU3 NzQ1ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MwJTdDNjM3MDk5 MzMwODc5NDU4MDQ0JmFtcDtzZGF0YT1LNHolMkJwWks1czZOZyUyQjdhbWl6b09OdUhsbHhqc2ht RzVhVHpQM3lPOGFkVSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvYT48bzpwPjwvbzpwPjwvcD4NCjwv YmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PGJyPg0Kc2FjbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c2FjbUBpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6 Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJG JTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGc2FjbSZhbXA7ZGF0YT0wMiU3 QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDODVhMzIzZjY3MzkyNDM4OWM0NWUw OGQ3NmU3NzQ1ZTUlN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MwJTdD NjM3MDk5MzMwODc5NDY4MDM5JmFtcDtzZGF0YT1KdmlPdnBLR1FMTnlNaVYyZkVGU0UxcVpBM1hv c09vRUNCQ1F1aVRLNExvJTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3NhY208L2E+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnIg Y2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4tLSA8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_CFA72C1A3DEE40D0862EEC0B512F733Bintelcom_-- From nobody Thu Nov 21 16:08:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7B08120129; Thu, 21 Nov 2019 16:08:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=48zv2WDq; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=fe36e5Ei Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZWQu_UhMaW9A; Thu, 21 Nov 2019 16:08:45 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40044.outbound.protection.outlook.com [40.107.4.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4244B120091; Thu, 21 Nov 2019 16:08:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n/7gcMRfOr7PE9gQM15bB8OlanQkQNaJQxhyWdzxa8U=; b=48zv2WDqARrFqP94I+jZe0BYIBZVVRN6hAcKuGhn7R5sjzywo5+pIHlVZaxtU+2muc2LOpADeJF3sWG40K7oCqeGvQu8IQaZms71fVEpTcQ4V7fEeqklXOlkQ1PzIsHwRweMtKF1as+olvmQkzWNqXzsk1CBnAlEzcaDwIOOkqU= Received: from VI1PR0801CA0073.eurprd08.prod.outlook.com (2603:10a6:800:7d::17) by AM5PR0801MB1715.eurprd08.prod.outlook.com (2603:10a6:203:3c::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.16; Fri, 22 Nov 2019 00:08:42 +0000 Received: from VE1EUR03FT036.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::204) by VI1PR0801CA0073.outlook.office365.com (2603:10a6:800:7d::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.18 via Frontend Transport; Fri, 22 Nov 2019 00:08:42 +0000 Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com; Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT036.mail.protection.outlook.com (10.152.19.204) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Fri, 22 Nov 2019 00:08:42 +0000 Received: ("Tessian outbound f7868d7ede10:v33"); Fri, 22 Nov 2019 00:08:42 +0000 X-CR-MTA-TID: 64aa7808 Received: from 7deece26b04e.1 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.12.57]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 8108176C-8565-492A-90B5-D3D78D399050.1; Fri, 22 Nov 2019 00:08:37 +0000 Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-db3eur04lp2057.outbound.protection.outlook.com [104.47.12.57]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 7deece26b04e.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 22 Nov 2019 00:08:37 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hFHhCa2rukkJdctgLZO12Wc/5vYFK4QMF9oo+ZSYCBtFU81J/xjEESKrDVPz85Lj2aV7MZqTdsm0qxHNSS6n7HysWAxEPaMi1LjwYqGgx8QY7zjeH0Unp1HWzYfD4XIHaYxf0CnWOHTSzceIIIFfL9TLDSAQqCMH5RU5ee0SQK+bp+knOEZRIxZA7OBmLPVEyxVAKfRNzANKqQBZ9E8eeYo6Wuew6EjhcAxQ8+/q56KLCRcv7m5p4O0gzB/5VU+ykSdkkhfLv7ZwRlFWd4+miaYRDgmeidVN1HSkFT9Ag5Inawoi0xUforke7iVKEoTRJg8L6YtyL4YpP2vtoddjfw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=b7Ds5BpYp+gs7Ff/rBIWKWQiapJRGVRDz0xZL9OSZTI=; b=VjUFKCHjKHpSqCy8Sm/nqAngeestFJZI2VGbdvBSwRBHd9+VUd1L50I04FV7Zvp1MZ5Mq3+JnVjMCkohzuf8V0Wr1eLNcBTCLfrq6IZD8HTUg//9jSA/5WuesaKkJjaIrhpMiX5WUK1Km6sWavxZH105f17LK9NOso12GocHQbOmO2pCzJvGk60duTuPtwpAP77M765BDQ2vZh2qDFQzf3itd1Meue/wy4PlciT2t29+aM82rf3KCRiDz6CrzgkHHovyDGRsRdEhkwKVhWb/VI9kUKgirhToCD6gwWTPJ9GzrPH/gb339f+0A01rZuZOEJcUv90qxAKUR63KSJwyKg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=b7Ds5BpYp+gs7Ff/rBIWKWQiapJRGVRDz0xZL9OSZTI=; b=fe36e5EiPP1Wo1TZPRaZhH95b/9JV/wNfDKWyLu9XVxx3FeMITa2CR8SrK46SUG0DWLhkgfGGyvFIXTZOojpuZ6Noy16ux10Wo/oJuXmRaUALBNZKGp8KRa8gPfVSn78nVTLrp5sG+6zUTWVf1441KTpSqfYvxLS8JzEnV7+j40= Received: from VI1PR08MB5360.eurprd08.prod.outlook.com (52.133.245.74) by VI1PR08MB3165.eurprd08.prod.outlook.com (52.133.14.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Fri, 22 Nov 2019 00:08:36 +0000 Received: from VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d]) by VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d%7]) with mapi id 15.20.2451.031; Fri, 22 Nov 2019 00:08:36 +0000 From: Hannes Tschofenig To: Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" Thread-Topic: [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAOGy2FbzysCYU2Z3In7IgWA1KeWUdGA Date: Fri, 22 Nov 2019 00:08:36 +0000 Message-ID: References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> In-Reply-To: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 5c4b810c-5216-496b-a116-c7e9dac9f224.0 x-checkrecipientchecked: true Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.147.34] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 30e9eb8a-4339-4741-6fe2-08d76ee02283 X-MS-TrafficTypeDiagnostic: VI1PR08MB3165:|AM5PR0801MB1715: X-MS-Exchange-PUrlCount: 1 X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:4941;OLM:4941; x-forefront-prvs: 02296943FF X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(346002)(136003)(376002)(396003)(366004)(39860400002)(53754006)(199004)(189003)(2501003)(74316002)(7736002)(2906002)(6436002)(229853002)(6306002)(9686003)(6116002)(54896002)(236005)(790700001)(6246003)(66066001)(3846002)(33656002)(7696005)(2201001)(76176011)(316002)(55016002)(86362001)(110136005)(53546011)(102836004)(6506007)(5660300002)(186003)(66556008)(66476007)(26005)(64756008)(66446008)(52536014)(76116006)(66946007)(256004)(71200400001)(99286004)(11346002)(71190400001)(14454004)(478600001)(8936002)(81156014)(81166006)(8676002)(25786009)(446003)(606006); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB3165; H:VI1PR08MB5360.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: oebQG72Vj4FPKA6sUr11fwhonUhyy40HT1CiClcvQzHQxs1PwBk5I59RJ7MZgZN31Uj/EF1Fyul/d+eJrrZ9MKm8mXcwFWcGejwOOgYwTK+R8E6a1UEAgxMHmK1Jt7e608xVEOgAUn82uDWGj7cEtpFJWRv0HJAjJ4phpvyidJ7HJdTOrXN1kaEtZTUD0mEJ39aoJOfxO6sjsdiakSyRnML0jEv/K0JqBpBmd+5JIwzg5Rm2nHpoULyKyrKSB5dtsi2JV73yd7Pei1cyP/3g56Wuh8z2PRjzLta5hz2gKqO5lcZNIgaOVYFpyaxiCgKzNy6rQ0rTaxuQ4rVewhfz4gk71t8LoVVR8lCLVcJ6e2tGHmUG3Bq6HkmFF4qnZmSVcWurrDWXlOFQ50GbC7QeZXkFdLxMYa3/6BhpJ23phT25PttJ9eESxMskbE/SqCOr8G/s6YyoQ7O0Q474x2UsVosNXPgFi8aUi1zPDLMTZe8= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_VI1PR08MB5360236E3583EBD3A78085EDFA490VI1PR08MB5360eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3165 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT036.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(396003)(39860400002)(346002)(376002)(1110001)(339900001)(53754006)(199004)(189003)(40434004)(6246003)(790700001)(5660300002)(478600001)(11346002)(3846002)(76176011)(26826003)(8936002)(186003)(14454004)(99286004)(2906002)(33964004)(6116002)(52536014)(81166006)(102836004)(7696005)(7736002)(105606002)(2501003)(26005)(81156014)(8676002)(336012)(53546011)(6506007)(33656002)(446003)(316002)(110136005)(66066001)(55016002)(450100002)(2201001)(16586007)(25786009)(36906005)(236005)(70206006)(6306002)(9686003)(54896002)(22756006)(76130400001)(606006)(229853002)(70586007)(86362001)(356004)(14444005)(74316002)(5024004)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5PR0801MB1715; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: b59ce4d2-fecb-4bb8-3dc7-08d76ee01eaf X-Forefront-PRVS: 02296943FF X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: V7gxqsHScOAUX7H6mpWdPqD8cngpgWJX6MDk2cOT4uel3y7P2FeMnRpPZ6W/ksdRUkHw4L/S8BCkDhBnotol2mHIcLUDkA2+PLCWuCxfL2Ee8jLbTD7tO8ms3agT3N/NHJl84x4iz5Q4LFqI85g1qsxQLF+pXolTjE4UmfTG5hJRJWh1Ga3XzuFno4C5cyqfDhMoPP4fzDzwsW9WVhyaubUhdX0a6cFba9m0ju1L+xgXjcfaBhtVe+PSqX5xJvNPBTijggDi8sS9EVB0rGVCgew3qs1Z4r3gPbaKKJAIgPyymqahgGqhOUf99hL/abJ2TAbfVA3pTAHfz+8L65dMqfTtQyNgRs1W30nTEwcRyKyY4H8N2sd4NVWI17T8bCVXAYWI5VZ0gayKblQ8TQc+PiEEURqsdvggxMfDVifDxAjZCpKE7DKArQtR3qZaXiaTFFXBonivgSLC6XJrNV6u/aKoP5NnQpiG8Bo7YX2Yxwk= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Nov 2019 00:08:42.5602 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 30e9eb8a-4339-4741-6fe2-08d76ee02283 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB1715 Archived-At: Subject: Re: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 00:08:49 -0000 --_000_VI1PR08MB5360236E3583EBD3A78085EDFA490VI1PR08MB5360eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgYWxsDQoNCkNhbiBzb21lb25lIHNlbmQgYW4gZXhhbXBsZSBhcm91bmQgaG93IHRoaXMgd291 bGQgYWN0dWFsbHkgbG9vayBsaWtlPw0KDQpDaWFvDQpIYW5uZXMNCg0KRnJvbTogUkFUUyA8cmF0 cy1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgTGF1cmVuY2UgTHVuZGJsYWRlDQpTZW50 OiBUaHVyc2RheSwgTm92ZW1iZXIgMjEsIDIwMTkgODozNSBBTQ0KVG86IHNhY21AaWV0Zi5vcmc7 IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFtSYXRzXSBDb1NXSUQgYW5kIEVBVCBhbmQgQ1dUDQoN CkhpLA0KDQpJ4oCZbSBub3Qgb24gdGhlIFNBQ00gbGlzdCwgYnV0IGRpZCBsb29rIGF0IHRoZSBh cmNoaXZlLiBIb3BlZnVsbHkgSeKAmW0gbm90IG91dCBvZiBzeW5jLg0KDQpNeSB0aG91Z2h0IGlz IHRvIHJlZ2lzdGVyIG9uZSBjbGFpbSBmb3IgQ1dUIHRoYXQgaXMgYW4gZW50aXJlIENvU1dJRCAo aW4gQ0RETCB0aGUgY29uY2lzZS1zd2lkLXRhZykuDQoNClRoYXQgd2F5IENvU1dJRCBjYW4gZ3Jv dyBhbmQgZGV2ZWxvcCBvbiBpdHMgb3duIHdpdGhvdXQgbG90cyBvZiBhZGRzIGFuZCBzdWJ0cmFj dHMgdG8gdGhlIENXVCByZWdpc3RyeS4gSXQgaGFzIGl0cyBvd24gSUFOQSByZWdpc3RyeSB3aXRo IGl0cyBvd24gZXhwZXJ0cyBhbmQgc3VjaC4gU2VlbXMgbGlrZSB0aGUgY291cGxpbmcgLyBmYWN0 b3JpbmcgaXMgYWJvdXQgcmlnaHQuDQoNClRoaXMgd291bGQgYWxzbyBiZSB0aGUgd2F5IEnigJlk IGxpa2UgdG8gaGF2ZSBpdCBpbiBFQVQgYXR0ZXN0YXRpb24uIFdl4oCZdmUgZG9uZSBhIG1pbmkg dmVyc2lvbiBvZiB0aGlzIHdpdGggdGhlIGxvY2F0aW9uIGNsYWltPGh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXJhdHMtZWF0LTAxI3NlY3Rpb24tMy44Pi4NCg0KVGhlbiBp ZiB5b3UganVzdCB3YW50IHRvIHNpZ24gYSBDb1NXSUQgQ1dUIHN0eWxlLCB0aGlzIHdvcmtzIHBy ZXR0eSB3ZWxsIHRvby4gSXQgaGFzIGEgc2xpZ2h0IG92ZXJoZWFkIGNvbXBhcmVkIHRvIGhhdmlu ZyBhbGwgdGhlIENvU1dJRCBkYXRhIGl0ZW1zIGFzIGRpcmVjdCBDV1QgY2xhaW1zIGluIHRoYXQg aXQgd2lsbCBoYXZlIGFuIGFkZGl0aW9uYWwgbWFwIGxheWVyLCBidXQgdGhhdCBpcyBvbmx5IGFi b3V0IHRocmVlIGJ5dGVzLg0KDQpMTA0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMg b2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1h eSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Ns b3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJw b3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFu ayB5b3UuDQo= --_000_VI1PR08MB5360236E3583EBD3A78085EDFA490VI1PR08MB5360eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIgMSA2 IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5bGUg RGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwN Cgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBw dDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxv d2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29u b3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0K CW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVp biAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+ DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5 b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9v OnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIGFsbDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5D YW4gc29tZW9uZSBzZW5kIGFuIGV4YW1wbGUgYXJvdW5kIGhvdyB0aGlzIHdvdWxkIGFjdHVhbGx5 IGxvb2sgbGlrZT88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2lhbzxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SGFubmVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gUkFUUyAmbHQ7cmF0cy1i b3VuY2VzQGlldGYub3JnJmd0OyA8Yj5PbiBCZWhhbGYgT2YgPC9iPg0KTGF1cmVuY2UgTHVuZGJs YWRlPGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5LCBOb3ZlbWJlciAyMSwgMjAxOSA4OjM1IEFN PGJyPg0KPGI+VG86PC9iPiBzYWNtQGlldGYub3JnOyByYXRzQGlldGYub3JnPGJyPg0KPGI+U3Vi amVjdDo8L2I+IFtSYXRzXSBDb1NXSUQgYW5kIEVBVCBhbmQgQ1dUPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPknigJltIG5vdCBvbiB0aGUgU0FDTSBsaXN0LCBidXQgZGlkIGxvb2sg YXQgdGhlIGFyY2hpdmUuIEhvcGVmdWxseSBJ4oCZbSBub3Qgb3V0IG9mIHN5bmMuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk15IHRob3VnaHQg aXMgdG8gcmVnaXN0ZXIgb25lIGNsYWltIGZvciBDV1QgdGhhdCBpcyBhbiBlbnRpcmUgQ29TV0lE IChpbiBDRERMIHRoZSZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OkNvdXJpZXIiPmNvbmNpc2Utc3dpZC10YWcpPC9zcGFuPi48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhdCB3YXkgQ29TV0lEIGNhbiBn cm93IGFuZCBkZXZlbG9wIG9uIGl0cyBvd24gd2l0aG91dCBsb3RzIG9mIGFkZHMgYW5kIHN1YnRy YWN0cyB0byB0aGUgQ1dUIHJlZ2lzdHJ5LiBJdCBoYXMgaXRzIG93biBJQU5BIHJlZ2lzdHJ5IHdp dGggaXRzIG93biBleHBlcnRzIGFuZCBzdWNoLiBTZWVtcyBsaWtlIHRoZSBjb3VwbGluZyAvIGZh Y3RvcmluZyBpcyBhYm91dCByaWdodC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyB3b3VsZCBhbHNvIGJlIHRoZSB3YXkgSeKAmWQgbGlr ZSB0byBoYXZlIGl0IGluIEVBVCBhdHRlc3RhdGlvbi4gV2XigJl2ZSBkb25lIGEgbWluaSB2ZXJz aW9uIG9mIHRoaXMgd2l0aCB0aGUmbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1yYXRzLWVhdC0wMSNzZWN0aW9uLTMuOCI+bG9jYXRpb24gY2xhaW08 L2E+LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5UaGVuIGlmIHlvdSBqdXN0IHdhbnQgdG8gc2lnbiBhIENvU1dJRCBDV1Qgc3R5bGUsIHRoaXMg d29ya3MgcHJldHR5IHdlbGwgdG9vLiBJdCBoYXMgYSBzbGlnaHQgb3ZlcmhlYWQgY29tcGFyZWQg dG8gaGF2aW5nIGFsbCB0aGUgQ29TV0lEIGRhdGEgaXRlbXMgYXMgZGlyZWN0IENXVCBjbGFpbXMg aW4gdGhhdCBpdCB3aWxsIGhhdmUgYW4gYWRkaXRpb25hbCBtYXAgbGF5ZXIsIGJ1dCB0aGF0IGlz IG9ubHkgYWJvdXQNCiB0aHJlZSBieXRlcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29w eSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_VI1PR08MB5360236E3583EBD3A78085EDFA490VI1PR08MB5360eurp_-- From nobody Thu Nov 21 16:45:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6989F120129 for ; Thu, 21 Nov 2019 16:45:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5al4CoVfviiv for ; Thu, 21 Nov 2019 16:45:21 -0800 (PST) Received: from p3plsmtpa06-10.prod.phx3.secureserver.net (p3plsmtpa06-10.prod.phx3.secureserver.net [173.201.192.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D93061200B7 for ; Thu, 21 Nov 2019 16:45:21 -0800 (PST) Received: from dhcp-9fd9.meeting.ietf.org ([31.133.159.217]) by :SMTPAUTH: with ESMTPA id Xx4XiWd8Fi6NuXx4ZiRC4S; Thu, 21 Nov 2019 17:45:20 -0700 From: Laurence Lundblade Message-Id: <3F39D986-5897-46A0-95F7-8735868AEB30@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_634E236D-2184-4AA9-BC25-A43E591AB1C1" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Fri, 22 Nov 2019 08:45:16 +0800 In-Reply-To: Cc: "Waltermire, David A. (Fed)" , Kathleen Moriarty , "rats@ietf.org" , Ira McDonald , sacm To: "Smith, Ned" References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <5r0dnrkillm4odhp4it9ejl8.1574342669212@email.android.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfGcJxJH9Q8uHCf5eY48qwLU1vWd24hJBAtdYxbWVQVJpdFc+WGkcMBJUAGxDPpxvljmEzOD9eQHqnfd2cBn7rSUgxPfu7FL3NckHRUe3eEQ+hTk8JQW+ fSfSB0vECsMMFe46uafk+F53M4q4MLWV7cWyQYtHEtOdUOV27dnyaaezGqR4pLspJHczpYQ/F4Uy2wc2FeNSjeUAUkJb6M7zh4DYWO7k22Amn22JPOWMMPIP VhFdzqJswXNA3AGhLCR7cGXa4yGsGk60bZGCyD+WMVSRJoy8MwrCZX4CDDYiSV5rg6c2KRg0TADd6IQsK5npbXXudbysAqq8BjqVGW9g+qWkSAWKyfNYMM4R MkYg49aQx4VjYoAOdq+pYJcMkD82kg== Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 00:45:25 -0000 --Apple-Mail=_634E236D-2184-4AA9-BC25-A43E591AB1C1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Ned, > On Nov 22, 2019, at 1:01 AM, Smith, Ned wrote: >=20 > It isn=E2=80=99t known yet if a token (CWT/JWT) realization makes = sense for Endorsers. This is probably far afield for SACM. I think it is probably out of scope for RATS too. I assume the endorser = is not a sub-part of the attester and it not on the device, but instead = part of the device manufacturing infrastructure. I assume the endorser = is not part of the verifier either.=20 I believe the endorser is part of or all of the mechanism that = facilitates the placing of the private key material in the attester and = the corresponding public key material in the verifier. I believe these = interactions are out of scope for RATS. In many cases they will be = highly proprietary and highly dependent on the manufacturing system. LL --Apple-Mail=_634E236D-2184-4AA9-BC25-A43E591AB1C1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Ned,

On Nov 22, 2019, at 1:01 AM, Smith, Ned = <ned.smith@intel.com> wrote:

It isn=E2=80=99= t known yet if a token (CWT/JWT) realization makes sense for = Endorsers.

This is probably far afield for = SACM.

I think it is probably out of = scope for RATS too. I assume the endorser is not a sub-part of the = attester and it not on the device, but instead part of the device = manufacturing infrastructure. I assume the endorser is not part of the = verifier either. 

I believe the = endorser is part of or all of the mechanism that facilitates the placing = of the private key material in the attester and the corresponding public = key material in the verifier. I believe these interactions are out of = scope for RATS. In many cases they will be highly proprietary and highly = dependent on the manufacturing system.

LL

= --Apple-Mail=_634E236D-2184-4AA9-BC25-A43E591AB1C1-- From nobody Thu Nov 21 16:55:24 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C73412081E for ; Thu, 21 Nov 2019 16:55:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nx9vO0JAhT_B for ; Thu, 21 Nov 2019 16:55:19 -0800 (PST) Received: from p3plsmtpa07-01.prod.phx3.secureserver.net (p3plsmtpa07-01.prod.phx3.secureserver.net [173.201.192.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26A1912081C for ; Thu, 21 Nov 2019 16:55:19 -0800 (PST) Received: from dhcp-9fd9.meeting.ietf.org ([31.133.159.217]) by :SMTPAUTH: with ESMTPA id XxEBiMRQQqGFCXxEDiXKXz; Thu, 21 Nov 2019 17:55:18 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <8BE6C775-6E2F-491A-923B-D751220A5B67@intel.com> Date: Fri, 22 Nov 2019 08:55:15 +0800 Cc: Henk Birkholz , "rats@ietf.org" , Kathleen Moriarty Content-Transfer-Encoding: quoted-printable Message-Id: <6E0FF98C-ABB5-4E6F-95D7-356E94F762ED@island-resort.com> References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <02ec1d3f-3ef6-fbb6-3f59-b846cba1b3ce@sit.fraunhofer.de> <8BE6C775-6E2F-491A-923B-D751220A5B67@intel.com> To: "Smith, Ned" X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfCAiPAXPkJFGYRT0Xd5Z72u7oHbjMgA2LWsY0LnYuYGgabSd6OflWq/+AELjlToO0dcbNSxb9+xzu3RjXCcZJyZt0PHALvF/6IbNBb3tAyq0GuCm5ymu AUY86qdW8TuESHGjz5T6stJDhCrO1abNuzzZskOo9bRQjOBveqjaMWWRUtQ9QiB8QW7oJamzf2gcP+Z746RKCZ9UiDaaExY02l9H3/q2cwbu0ITv+z6E+ZbK zYUo4DOmpmWUcUROs474kb9YkE+I0RTwzdDvsM+DAsMyt8J8jyk4cfUUBRTjvdz+f29M7K6kmXOBkuMbMRJA0g== Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 00:55:21 -0000 Agree with Ned=E2=80=99s characterization of the system behavior.=20 However I think calling this a RATS verifier + RATS attester is very = confusing. A RATS verifier consumes RATS format attestation evidence. It = will often produces RATS format attestation results. This part of the boot ROM usually uses highly propriety formats for = signed operating system code, nothing that looks like COSE, CBOR or = CoSWID. It might look like ELF. Maybe the TCG has some standards in this = area, but I think it is far outside the RATS charter.=20 I=E2=80=99ve had some exposure to commercial work on that sort of boot = ROM code. It is the some of most cared-for, sacred and tested code in = existance. LL > On Nov 22, 2019, at 12:52 AM, Smith, Ned wrote: >=20 > I think this is a case where the verifier role is combined with the = attester role such that an implicit attestation is all that is required = by a remote verifier to arrive at a conclusion that the detailed = policies applied by the verification logic in the boot code were = applied. In other words, the system couldn't have booted incorrectly if = it is able to supply implicit attestation to the remote verifier.=20 >=20 > =EF=BB=BFOn 11/21/19, 2:18 AM, "Henk Birkholz" = wrote: >=20 > I re-read this as it made really no sense to me. I realize that I=20= > actually do not understand this sentence: >=20 > On 21.11.19 09:06, Laurence Lundblade wrote: >> In this non-TPM style attestation there is hashing of code booted as = part of secure boot implemented in the boot ROM, but that all happens = inside the boot sequence and never manifests outside of it (I also do = not think it is helpful to refer to this part of the boot ROM as a = =E2=80=9Cverifier=E2=80=9D in this context because it is not the same as = a RATS verifier that produces attestation evidence, is remote and such). >=20 > What is "this part of the boot ROM" and why should anything in the = boot=20 > ROM be called "verifier". It seems that it has occurred already. = Could=20 > someone please tell me where and why? Was it mentioned on this = list? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Thu Nov 21 17:03:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0645120820 for ; Thu, 21 Nov 2019 17:03:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nWIshE-_dO8b for ; Thu, 21 Nov 2019 17:03:08 -0800 (PST) Received: from p3plsmtpa06-10.prod.phx3.secureserver.net (p3plsmtpa06-10.prod.phx3.secureserver.net [173.201.192.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 405DB12081C for ; Thu, 21 Nov 2019 17:03:08 -0800 (PST) Received: from dhcp-9fd9.meeting.ietf.org ([31.133.159.217]) by :SMTPAUTH: with ESMTPA id XxLkiWiS3i6NuXxLmiRDKD; Thu, 21 Nov 2019 18:03:07 -0700 From: Laurence Lundblade Message-Id: <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_CE096CE4-8313-4B79-8027-108074FF2584" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Fri, 22 Nov 2019 09:03:04 +0800 In-Reply-To: <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> Cc: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty To: Henk Birkholz References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfEp5EwYs+LjiuV9eenO6yx3u6t6rs1Md3G0xslPx97Y2EigN246b40JwZny/1AihkdUGwAfpAScYgUQcG97YCVrH2gfJbf4TvxW3uyXa+BarsnyYSYNk oVX3ICczKsq0wDM9iBbqG6gNKQomq76dr6oINPch+/UcbIh4/TWnsXD8D0KvxAuvwxGtX5VgK2sEXGTRDRNIyXxI3hg/NNmVQhcMHkmmiVF3MY/9rBPFEsN+ 3H0lhPQubkqjE2OxEXdh66Wk2JzZNPGlbXgMGiqaS08lC+epPbU1jXDQzIYC8uFjOdm5j90bQ6KBvFHuSOvGUQ== Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 01:03:10 -0000 --Apple-Mail=_CE096CE4-8313-4B79-8027-108074FF2584 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 21, 2019, at 5:08 PM, Henk Birkholz = wrote: >=20 > If I understand you correctly, the fact that the EAT can be signed is = due to the fact that authenticated boot was successful, right? What = happens if the authenticated boot was not successful? Can you still = create EAT? With different boot state? You cannot create an EAT unless the authenticated boot was successful. = The key material with which to sign the EAT is inaccessible if = authenticated boot fails (or else the device just won=E2=80=99t boot at = all). This is the point of this whole discussion. :-) >=20 > How do you know that the boot state was not tempered with and the = device is "lying" to you? It is the same as knowing a TPM was not tampered with.=20 The HW + boot ROM are built to a level of HW tamper resistance that is = acceptable for the use case.=20 > I think you are describing implicit remote attestation, where you can = only sign something if authenticated boot was successful. Is that your = use case you are describing? Yes LL --Apple-Mail=_CE096CE4-8313-4B79-8027-108074FF2584 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 21, 2019, at 5:08 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

If I understand you correctly, = the fact that the EAT can be signed is due to the fact that = authenticated boot was successful, right? What happens if the = authenticated boot was not successful? Can you still create EAT? With = different boot state?

You cannot create an EAT unless the authenticated = boot was successful. The key material with which to sign the EAT is = inaccessible if authenticated boot fails (or else the device just = won=E2=80=99t boot at all).

This is = the point of this whole discussion. :-)


How do you know that the boot = state was not tempered with and the device is "lying" to you? =

It is the same = as knowing a TPM was not tampered with. 

The HW + boot ROM are built to a level of HW = tamper resistance that is acceptable for the use = case. 


I think you = are describing implicit remote attestation, where you can only sign = something if authenticated boot was successful. Is that your use case = you are describing?

Yes

LL

= --Apple-Mail=_CE096CE4-8313-4B79-8027-108074FF2584-- From nobody Thu Nov 21 18:26:49 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE64C120836 for ; Thu, 21 Nov 2019 18:26:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0DxKljpIxo1y for ; Thu, 21 Nov 2019 18:26:45 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A9B612012A for ; Thu, 21 Nov 2019 18:26:43 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAM2QdQ7031079 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 22 Nov 2019 03:26:40 +0100 Received: from [31.133.147.95] (31.133.147.95) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 22 Nov 2019 03:26:34 +0100 To: Laurence Lundblade CC: "Smith, Ned" , "rats@ietf.org" , Kathleen Moriarty References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> From: Henk Birkholz Message-ID: Date: Fri, 22 Nov 2019 03:26:28 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [31.133.147.95] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 02:26:48 -0000 Hi Laurence, okay - understood! The TPM based RATS in this scenario is covered by using a constrained Signing Key inside the TPM. In essence, Section 4.12.1.1 of the "Trusted Attestation Protocol (TAP) Information Model for TPM Families 1.2 and 2.0 and DICE Family 1.0" defines: "Implicit attestation is created when a signature is signed with a signing key(described in section 4.4), but with the additional requirement that the signing key can provably only be used to sign when the system is in a particular state. Thus,the very act of signing using that key proves the system is in that known state.If the data signed includes a nonce, then this proves the system was in that state after the nonce was provided.". There are no semantic difference between the "simple non-TPM EAT" scenario and the TPM-based implicit remote attestation scenario. They are if fact the "same types of secure attestation". Viele Grüße, Henk On 22.11.19 02:03, Laurence Lundblade wrote: > >> On Nov 21, 2019, at 5:08 PM, Henk Birkholz >> > > wrote: >> >> If I understand you correctly, the fact that the EAT can be signed is >> due to the fact that authenticated boot was successful, right? What >> happens if the authenticated boot was not successful? Can you still >> create EAT? With different boot state? > > You cannot create an EAT unless the authenticated boot was successful. > The key material with which to sign the EAT is inaccessible if > authenticated boot fails (or else the device just won’t boot at all). > > This is the point of this whole discussion. :-) > >> >> How do you know that the boot state was not tempered with and the >> device is "lying" to you? > > It is the same as knowing a TPM was not tampered with. > > The HW + boot ROM are built to a level of HW tamper resistance that is > acceptable for the use case. > > >> I think you are describing implicit remote attestation, where you can >> only sign something if authenticated boot was successful. Is that your >> use case you are describing? > > Yes > > LL > From nobody Thu Nov 21 18:49:21 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FBA2120836 for ; Thu, 21 Nov 2019 18:49:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id isY8q6_femOI for ; Thu, 21 Nov 2019 18:49:17 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78CA012012A for ; Thu, 21 Nov 2019 18:49:17 -0800 (PST) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:128:c410:81ff:fe5c:906b]) by relay.sandelman.ca (Postfix) with ESMTPS id 19D881F450 for ; Fri, 22 Nov 2019 02:49:16 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 50E97C19; Fri, 22 Nov 2019 10:49:17 +0800 (+08) From: Michael Richardson To: rats@ietf.org In-reply-to: <8D55E29D-67CB-44FC-AFB0-155E5FC8E2D0@ericsson.com> References: <8D55E29D-67CB-44FC-AFB0-155E5FC8E2D0@ericsson.com> Comments: In-reply-to Francesca Palombini message dated "Thu, 21 Nov 2019 03:36:15 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Fri, 22 Nov 2019 10:49:17 +0800 Message-ID: <18912.1574390957@dooku.sandelman.ca> Archived-At: Subject: [Rats] pubsub data flow mechanisms (was Re: [core] FW: [Ace] Call for adoption draft-palombini-ace-coap-pubsub-profile) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 02:49:19 -0000 --=-=-= Content-Type: text/plain I'm not very clueful about ACE pubsub, but in the space of the RATS pubsub interaction, we may be able to learn something here, or possibly we'd want to adopt the entire structure. Francesca Palombini wrote: > Ace has just issued a call for adoption on the profile of ACE for > pubsub, which aims at addressing the topic of security for pubsub. > Please head over there and comment on the call if f you are interested > in moving this work forward. > Thanks, > Francesca > From: Ace on behalf of Daniel Migault > Date: Tuesday, 19 November 2019 at 16:45 > To: Ace Wg > Subject: [Ace] Call for adoption draft-palombini-ace-coap-pubsub-profile > Dear working group, > As mentioned during the ACE meeting, this mail starts a call for adoption for draft-palombini-ace-coap-pubsub-profile. Please provide your feed backs by December 4. > https://datatracker.ietf.org/doc/draft-palombini-ace-coap-pubsub-profile/ > Yours, > Daniel > ---------------------------------------------------- > Alternatives: > ---------------------------------------------------- > _______________________________________________ > core mailing list > core@ietf.org > https://www.ietf.org/mailman/listinfo/core -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3XTK0ACgkQlUzhVv38 QpCakAf7BhKcFsVpn9vJSJ9trQXzEykoHAXhbZ0fwo8jqswParBnXCTJu8oMViiV Z7G5ktNaSLHuY2HfLMML2v8Pq6z/fzKgA8Pj5ok6RoWmL2ijS67f3KMq4E0x9tSe mtNS9XcLwBK2HvL+CkWcoyMV+zLGPYn3TA3qLLaAXxK+FtF3hpR390R9rJkm/DtD m2bMh/F6XoBW0MoyXhfgOju77t3/mBoBZ2HMaX01BnOyzJSLPxUNranpDxeUH2yQ K03YLhs26wG/L8+eLUMH0fsScWinea6Nf/AQ1SY0COwLuZI5rHn2BfIftHxOW8lX qvSJzjnNJJaLzlk2lnl1YTfr/kPISQ== =Oe3g -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 21 20:49:59 2019 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A8AFB12012C for ; Thu, 21 Nov 2019 20:49:57 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.111.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <157439819768.32304.6924100528561360625.idtracker@ietfa.amsl.com> Date: Thu, 21 Nov 2019 20:49:57 -0800 From: IETF Secretariat Archived-At: Subject: [Rats] Milestones changed for rats WG X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 04:49:58 -0000 Changed milestone "Call for adoption on Yang Module draft", set state to active from review, accepting new milestone, set due date to November 2019 from March 2019. URL: https://datatracker.ietf.org/wg/rats/about/ From nobody Thu Nov 21 20:59:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB81412022E for ; Thu, 21 Nov 2019 20:59:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id grbe7s_ycymu for ; Thu, 21 Nov 2019 20:59:29 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 294F012002F for ; Thu, 21 Nov 2019 20:59:28 -0800 (PST) Received: from dooku.sandelman.ca (dhcp-8a81.meeting.ietf.org [31.133.138.129]) by relay.sandelman.ca (Postfix) with ESMTPS id 7D4901F450 for ; Fri, 22 Nov 2019 04:59:27 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 3636ED4A; Fri, 22 Nov 2019 12:59:27 +0800 (+08) From: Michael Richardson To: rats@ietf.org X-Attribution: mcr X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Fri, 22 Nov 2019 12:59:27 +0800 Message-ID: <24599.1574398767@dooku.sandelman.ca> Archived-At: Subject: [Rats] RATS architecture design team "weekly" working meetings X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 04:59:31 -0000 --=-=-= Content-Type: text/plain https://doodle.com/poll/qmz6zepmzisbqge7 This doodle poll asks for you for the date of the first meeting, being the week of Dec. 3, but when answering please consider that this meeting will have a more than every-two-weeks cadence, but possibly not every single week, based upon availability and progress. So even if a time that week does not work for you, but it would work on-going, please answer yes or if-need-be. Henk and I (at least), prefer whereby.com (formerly appear.in) as the technology, as it's pure webrtc (and I have a premium account) and works well on most desktop OSes (vs webex, which officially does not), even through many (but not all) corporate firewalls. We are open to discussion on this. But it does not support a PSTN call-in: it's all VoIP. As we intend to share browser tabs, HackMD/etherpad and markdown in editors, if you can only make it via PSTN, then you probably won't be able to participate constructive in the working call. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3Xay4ACgkQlUzhVv38 QpDOAgf+P8KvoMxzaLylI9auwuIQemjnpR8glHaI8NySnLiOjPme/TFQHidGAl7D 0GoLtQzC9YHal2ta5gOuLxLNlAe+LE8ssRQbbVy/Dxc9eakTDEjE85K+iB43gZZF FuseO+gK6PO9xHGbArFWWf4SpxGkYkAe0Fwo0TGXn1SKr/qiYgbqjVAl8SwT/W31 zHsmBe3mTahpW/ElVJwYyL2tUDxqXq9zJeBgGJfOh92FLZnTAkON7ZNYLYnHBzp/ 73BgtWYMsqubZC2l9yipVC44D4zl6+ztMCuN5r8vQpvTIf/w3xVFnZrBYyz9Bz9v wTjWekP9YrL1k7hWAK4QYJYHmcjjzQ== =iwJc -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 21 21:57:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C373512025D for ; Thu, 21 Nov 2019 21:57:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.642 X-Spam-Level: X-Spam-Status: No, score=-0.642 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5jck8j-n7fUj for ; Thu, 21 Nov 2019 21:57:44 -0800 (PST) Received: from mail-pl1-x62d.google.com (mail-pl1-x62d.google.com [IPv6:2607:f8b0:4864:20::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C88A120232 for ; Thu, 21 Nov 2019 21:57:44 -0800 (PST) Received: by mail-pl1-x62d.google.com with SMTP id j12so2649444plt.9 for ; Thu, 21 Nov 2019 21:57:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:message-id:thread-topic :mime-version; bh=aqPgJqoWAUDq5i67XQmdvE7DrDEPOuXbvqQxGs8kf/s=; b=XH2bBnckoL2OpHBj2GGFsQbA4IYu/4APSmEjHAE3jycVX2iNZvTFofxaTk+aP2qFPp M+XQUO8bWLdr/Fd2UwufpNInUtu7xGZk8V94bVNRmo8PKQRVi2EW5NC05mArs2wu/IaG ndwjK8HZyrne81CRHjj78NGUGheFKh5U9CofZi0G6Pns4zQ6/vwOAAcjGo+mn5QAYVw5 I5awv03yLteMAjiCmPWj9KkyPyeKBHpwy6cGSikLtqewYB27V/kAHh7RaRs2n9Gqk6dE 2/oiKjwXlU44guJ3iKztZXd/rzVdJFewz96HQhfjFNsJPM3Wmgi5c9U+36oaqQQpeQSj luvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:mime-version; bh=aqPgJqoWAUDq5i67XQmdvE7DrDEPOuXbvqQxGs8kf/s=; b=D5stwxPQbPs/lgefWgkA7ljdV2EOo1KkVk8kz0FpnnwfTlIACH8dJr1kxZAzTPOEtK g++9r0M2GebdO3ZI4Z/PGHm+wXXoKLH7fKhTFOaEFpfbyCHFNh5FbRU5U88pEQxOsp6u UnzOMLlD6D0mm7EVY95KyWZN2h0DTHgCDHDuAKuoynr/LwWAL+bExsZfYEpnRk0YPonj 8iewRKRdrhUPyJDu+cCwiDBlvGK2h/oWj5xDBALd4sTGFR57KDUTIHfw197ewh83lWTd 3fR3bGskz0hTlGD5Pdm1zzCiM0EZ9RNKYxDgQ6RctXo84VWINrEcBOJi/xLkWVNbG0XX PrZg== X-Gm-Message-State: APjAAAWbzh1E6EeQfvltrgv9gZUH+3nYhkNxNqlHjsRIwIONmWrqENWN OzURUPJVDVSSetIyOVpHGfAKTj8H82o= X-Google-Smtp-Source: APXvYqw3/1+9T0tEzT1DVEQrI1lePdghh3o1yv3k8OcUaV32ClXCy/BNa4ugBmu2RUAzRgEScZlaNQ== X-Received: by 2002:a17:90a:610:: with SMTP id j16mr16773456pjj.85.1574402263603; Thu, 21 Nov 2019 21:57:43 -0800 (PST) Received: from [31.133.155.172] (dhcp-9bac.meeting.ietf.org. [31.133.155.172]) by smtp.gmail.com with ESMTPSA id w7sm5610364pfb.101.2019.11.21.21.57.42 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Nov 2019 21:57:42 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Fri, 22 Nov 2019 13:57:41 +0800 From: Yaron Sheffer To: "rats@ietf.org" Message-ID: <4EEB506F-5ED6-4DEC-873F-D6D5ABBA04B3@gmail.com> Thread-Topic: Reviewing EAT for enterprise/cloud use cases Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657275862_1088954942" Archived-At: Subject: [Rats] Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 05:57:46 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657275862_1088954942 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D use case in mind= . To clarify, what I'm looking for is the capability: =20 - To attest to software components that are running inside VMs, containers = (either on VMs or bare metal), and anonymous containers (function-as-a-servi= ce, such as AWS Lambda). - Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.). - Attestation of running (as opposed to installed) components. For example,= container code may be pulled from a remote repository shortly before it is = run. - To support diverse roots-of-trust, such that when a hardware root-of-trus= t is unavailable, we can have a hypervisor or an orchestration server (e.g. = Kubernetes) as the RoT, even if that means a lower level of trust. =20 I think in general, EAT can be made to fit these use cases, given its recur= sive structure. But not surprisingly given its origins, the draft would need= quite a few changes. =20 * 1.2 (and 3.12): why not spell out that a submodule can be either a hardwa= re or software component? * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may ha= ve other functions; a system may in general have multiple RoTs. The word "de= dicated" is not repeated anywhere else in the document, nor is it explained. * 1.3 continues to only talk hardware, e.g. when defining the "manufacturer= ". Software has a manufacturer too. * 3.3: the notion of UEID is fundamentally incompatible with some component= types that we would wish to attest. For example, the lifetime of a function= -as-a-service container may be less than a second, and even if it has an ide= ntity during its lifetime, there is no registry or persistent record of this= identity. Is a UEID required in this scheme? * 3.4: hey, finally some software! =20 I think we still don't have a handle on identifying running software, and C= osWID may not be the whole answer. CosWID is more like traditional software = inventorying, and we need something that will cover dynamic modern software. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 --B_3657275862_1088954942 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

I have read the EAT draft, specificall= y with a =E2=80=9Ccloud=E2=80=9D use case in mind. To clarify, what I'm looking for is t= he capability:

 =

- To attest to software components that ar= e running inside VMs, containers (either on VMs or bare metal), and anonymou= s containers (function-as-a-service, such as AWS Lambda).<= /p>

- Such components may be deployed in arbitrary hie= rarchies (VM-in-VM etc.).

- Atte= station of running (as opposed to installed) components. For example, contai= ner code may be pulled from a remote repository shortly before it is run.

- To support diverse roots-of-trus= t, such that when a hardware root-of-trust is unavailable, we can have a hyp= ervisor or an orchestration server (e.g. Kubernetes) as the RoT, even if tha= t means a lower level of trust.

=  

I think in general, EAT c= an be made to fit these use cases, given its recursive structure. But not su= rprisingly given its origins, the draft would need quite a few changes.=

 

* 1.2 (and 3.12): why not spell out that a submodule can be e= ither a hardware or software component?

* 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT= may have other functions; a system may in general have multiple RoTs. The w= ord "dedicated" is not repeated anywhere else in the document, nor= is it explained.

* 1.3 continue= s to only talk hardware, e.g. when defining the "manufacturer". So= ftware has a manufacturer too.

*= 3.3: the notion of UEID is fundamentally incompatible with some component t= ypes that we would wish to attest. For example, the lifetime of a function-a= s-a-service container may be less than a second, and even if it has an ident= ity during its lifetime, there is no registry or persistent record of this i= dentity. Is a UEID required in this scheme?

* 3.4: hey, finally some software!

 

I think we= still don't have a handle on identifying running software, and CosWID may n= ot be the whole answer. CosWID is more like traditional software inventoryin= g, and we need something that will cover dynamic modern software.=

 

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

 

--B_3657275862_1088954942-- From nobody Thu Nov 21 22:05:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74FE5120232 for ; Thu, 21 Nov 2019 22:05:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.642 X-Spam-Level: X-Spam-Status: No, score=-0.642 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04HUmP8VWVdP for ; Thu, 21 Nov 2019 22:05:10 -0800 (PST) Received: from mail-pf1-x431.google.com (mail-pf1-x431.google.com [IPv6:2607:f8b0:4864:20::431]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5EF5D120113 for ; Thu, 21 Nov 2019 22:05:10 -0800 (PST) Received: by mail-pf1-x431.google.com with SMTP id p26so2956232pfq.8 for ; Thu, 21 Nov 2019 22:05:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:message-id:thread-topic :mime-version; bh=wGKP8FgOyaxnbG0D56myv/WsHkpr8+HFeBhUkoX1l+4=; b=V+l8XdTqEIMH2e0CcCl2dfreQGEfrXxewjfsBquGkhqcHBl9br859Gy+BW+pxmM29w 5AQopEDSW2QOQjBFT/aZYrQQ0iVfmQJTvVp+WKdDEFPpLi+3Q8M1tRB2lyVF/nYWujOG cghO8WHTcs/VM87EMSp7Hf6diP16MrmvflATnhzIHni16h8s4SsC3YCmFDKD892OjC4M eVAQ06PyYLypR9vZdE2kl4IbVxkE8fgBojt3q0IcJGTemAch4jMyxzJcqOqpns0J731L e4zpja78N3QYUjLQz/jDsHiHF+R7seZ3IvF+T9iUWNNArzMSNASdEvwtiYCBBAi6p2bP AyGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:mime-version; bh=wGKP8FgOyaxnbG0D56myv/WsHkpr8+HFeBhUkoX1l+4=; b=rATYKNHGRx0+0vGf6bhLHxuWKocX4BCWp/5ZgQNjkswD+dFB2AARsVxR/2TUT0TS6D qU38TryH9ain/5MD0ejb/4PsY1buBFC0NLHH7sF18jPbl+CAkouIYHSMfdGkP6SCdSiH X158mFW1aXCJfvG3egWej/RT6UD1rHIB10ri45BePPtGzqAlA3fPfYHhYAh5eu96w3zg 0hAVSv6KSQ96swodbxIwSDws0PW6mq4QEkPvEcFbUYI07NNrKRBS9mjhioI/PxA4sdWu sB4Z43VSKDCi6Abcgy3BTVWQeuc85wxIMDHdY8kTKFyqZDOybXfOu+yzZs3KENLfa3eq s1+g== X-Gm-Message-State: APjAAAVMYz/dRU4SmVBA/zn8lyqfJp2cjI6Qn3eK8BdwRgUwN/Y4RyHW SE3cqjx/FzNnNaRObEl21XtegjSFfOI= X-Google-Smtp-Source: APXvYqwUCx6Ta8udqoIQavDqiIiapY9DkzhquDdWifIld215jgUQoOkiNxVnmhlTkjXfFM4vpBZ0tQ== X-Received: by 2002:a63:644:: with SMTP id 65mr14010967pgg.306.1574402709520; Thu, 21 Nov 2019 22:05:09 -0800 (PST) Received: from [31.133.155.172] (dhcp-9bac.meeting.ietf.org. [31.133.155.172]) by smtp.gmail.com with ESMTPSA id 16sm4606138pgm.86.2019.11.21.22.05.08 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 Nov 2019 22:05:08 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Fri, 22 Nov 2019 14:05:06 +0800 From: Yaron Sheffer To: "rats@ietf.org" Message-ID: Thread-Topic: EAT IANA registry Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657276308_775543267" Archived-At: Subject: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 06:05:11 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657276308_775543267 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Unrelated to my earlier mail, I would recommend to create a separate regist= ry for EAT claims (I suppose that implies a nested object in the JWT/CWT) ra= ther than to overload the CWT registry. Architecturally it just doesn=E2=80=99t ji= ve to have all these claims as baseline CWT claims, and process-wise, it=E2=80=99s= much more convenient for this group to control its own namespace. =20 Sorry if this has been raised before. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron --B_3657276308_775543267 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Unrelated t= o my earlier mail, I would recommend to create a separate registry for EAT c= laims (I suppose that implies a nested object in the JWT/CWT) rather than to= overload the CWT registry. Architecturally it just doesn=E2=80=99t jive to have a= ll these claims as baseline CWT claims, and process-wise, it=E2=80=99s much more c= onvenient for this group to control its own namespace.

=

 

Sorry if this has been r= aised before.

 

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

--B_3657276308_775543267-- From nobody Thu Nov 21 22:17:43 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB9A6120110 for ; Thu, 21 Nov 2019 22:17:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=xfxaC5ls; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=QMRF5xXv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qHeVgmtQPcBq for ; Thu, 21 Nov 2019 22:17:38 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-ve1eur02on062a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe06::62a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 671FE1200DE for ; Thu, 21 Nov 2019 22:17:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=s3UUh2prerrhzEozLx0RDa0NnKAGdSyuIO2KvuLnNys=; b=xfxaC5lsJ6CgXjlGG53FiRION7MwA18YWiyEbqqpBxLdwcr+l/Ku3t2+OdSEjUro+EZqEIDiDG+DTmOpaY5V3x2FW/S3C82z8n+Q4/Zwr27cHSPfGsSoF8oidkMjhrqRn9FLELP2HVfxp8S4EsE8IaCQziDjJw2capLflr8QHvA= Received: from VE1PR08CA0033.eurprd08.prod.outlook.com (2603:10a6:803:104::46) by VI1PR08MB5519.eurprd08.prod.outlook.com (2603:10a6:803:13b::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.21; Fri, 22 Nov 2019 06:17:35 +0000 Received: from AM5EUR03FT008.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e08::201) by VE1PR08CA0033.outlook.office365.com (2603:10a6:803:104::46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Fri, 22 Nov 2019 06:17:35 +0000 Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com; Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT008.mail.protection.outlook.com (10.152.16.123) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Fri, 22 Nov 2019 06:17:35 +0000 Received: ("Tessian outbound 512f710540da:v33"); Fri, 22 Nov 2019 06:17:35 +0000 X-CR-MTA-TID: 64aa7808 Received: from 152981b5e0f9.1 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.9.58]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 301E5990-7E32-4001-8908-595EADA0E53B.1; Fri, 22 Nov 2019 06:17:30 +0000 Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-ve1eur03lp2058.outbound.protection.outlook.com [104.47.9.58]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 152981b5e0f9.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 22 Nov 2019 06:17:30 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hmHnbHt6jXjtH00GDCQG+iA/L+6iMll+Gvg27PcTrcCE8jd6t9b46V8stBGlEsK6ld2FNctPvrGimjIRzR/cwMcZvDW+WINgfrM+BfK4+QGrzt6idBZlXc3ePDAVsE3pLxR96Y6b/ffqTogL/52c1nr0fGAu3U9JNAOEVmIZv+8vigg+pWXc8xAGe84Ms3+8cGpqxBPUWLYmLHQimWhoFMfhT632RZPAUrMdyslAHGWKzUh3ZJCEjQ9ZdWu+T0hAMxm4wbGuTEafhmpKX3mebgZAhtAcGX6ZFiI1X4+M19AWdBW7xLQkiJE5y5Ezx35InlEZLI2Grb351aBaCqKs4Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1499L+gmO+EMWYfGUhSc5aizhl5JSExlhBcj4csXU/k=; b=isKisEaSqOYiPp81BiHi/vkOk8OnlSQkKWM7LQNGR61rgywH1kpNlV68HxYQC3UjKn5j02vuNRPjJ3Q4ywHQpON5XH013MtY++ZKB/7Fk9t9+9KWJ4s+X1udDfT1HCvpFJyH5/AZGbToQSB9KXwOidFt87LaSXnp4uh3B1XoivyVaaORyXEqtXmj+J0VVNIhr7SyplTuuzyB7882+VFy3hNJ7cPl3CRtQbBbSsEXh6+bxkI8K3XKHyU4zxWlolaVO/w+3UQdEsa8CJtOtGdV5oBfPGwGZrzmkQZxnvFyKfK+6MEZZ3lmnvY6avKwCEghH7TJRqogqBEyufV2LkFsVg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1499L+gmO+EMWYfGUhSc5aizhl5JSExlhBcj4csXU/k=; b=QMRF5xXvh9mEpxgMgB7GfWeCoIGqKWc1k/FHhSLSrfeSSLyLtKpU+iLMIceL6z6Hxad8U/mRqHAYNQCul2tiVFFzVnT3FBm87O0PFQJGYck+IoXP1tK/O8yBbA3P/p+9sq4gy4LWjJnXXMk3DEFEjg+C1VmyKQo6Z/Od1SvBYyk= Received: from VI1PR08MB5360.eurprd08.prod.outlook.com (52.133.245.74) by VI1PR08MB4110.eurprd08.prod.outlook.com (20.178.126.206) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.16; Fri, 22 Nov 2019 06:17:29 +0000 Received: from VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d]) by VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::4044:55a8:a969:fd1d%7]) with mapi id 15.20.2451.031; Fri, 22 Nov 2019 06:17:29 +0000 From: Hannes Tschofenig To: Yaron Sheffer , "rats@ietf.org" Thread-Topic: EAT IANA registry Thread-Index: AQHVoPrPbpn4UX0BZEaNgTjD7nYLdKeWtvDQ Date: Fri, 22 Nov 2019 06:17:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 58af506b-2769-49e5-bc84-af9bc588f780.0 x-checkrecipientchecked: true Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.147.34] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 2bf416f2-3447-40d0-dc70-08d76f13aa8a X-MS-TrafficTypeDiagnostic: VI1PR08MB4110:|VI1PR08MB5519: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:6430;OLM:6430; x-forefront-prvs: 02296943FF X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(136003)(366004)(376002)(396003)(346002)(189003)(199004)(9686003)(81166006)(74316002)(8676002)(6306002)(54896002)(6436002)(55016002)(81156014)(86362001)(7736002)(3846002)(14454004)(52536014)(790700001)(6116002)(71200400001)(53546011)(6506007)(8936002)(5660300002)(110136005)(6246003)(478600001)(2501003)(102836004)(25786009)(316002)(26005)(186003)(2906002)(71190400001)(229853002)(256004)(66066001)(76176011)(4744005)(3480700005)(446003)(11346002)(33656002)(66446008)(66556008)(76116006)(7116003)(7696005)(64756008)(66476007)(66946007)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB4110; H:VI1PR08MB5360.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: FOAL5uQ3d6GcXy9D4fERoJkmKCnN13txwojB12dr1dhDxLc/lji7L2w+S2x7sLKqqGgKOQLTzYLi24/6wXquiH6glSF38OPg+FJAI4TLfnp0WsjC1MjbZLCFRNwRSkyxZjcWxW6oE9Mc2IdYWWBP6SV4IbFO8IRsjN7SfXIQ3p+ISshhksKFiuwhI2MYq6bkH8SlemKHS/vYjq9+B1ZFFwNcxBE0fM1ikLClxJs1Skfj15Nv7hoC6+kYKyF6ULoI4qIb9qWidnVm19pWlpWaBZRPbCI0ds2BKKZamYVXZjWDUQR8Y271kH7Ol2G/u5FO7hhAvhEui82ifstDraJiKnI50rm596LYhkV0gfsXD3w+FrJoRiVDynpvru+kJhCo/aV/qfi8a1ciFnx8/2EGxF4oAMiZHH49knIdMtjzixxnESZb3DdNGcniaR/dGUFU x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_VI1PR08MB53605A2A2E61E6EAE2609FECFA490VI1PR08MB5360eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB4110 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT008.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(376002)(346002)(136003)(396003)(39860400002)(1110001)(339900001)(199004)(189003)(40434004)(8936002)(81166006)(81156014)(7116003)(229853002)(5660300002)(70206006)(6246003)(70586007)(2906002)(52536014)(66066001)(7736002)(105606002)(110136005)(99286004)(76130400001)(8676002)(55016002)(6306002)(9686003)(54896002)(16586007)(74316002)(446003)(186003)(336012)(36906005)(2501003)(316002)(26005)(26826003)(7696005)(86362001)(76176011)(3480700005)(478600001)(33964004)(11346002)(6116002)(790700001)(3846002)(5024004)(356004)(33656002)(102836004)(14454004)(71190400001)(53546011)(22756006)(14444005)(25786009)(6506007); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB5519; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: 68b5fd6c-ba2d-4205-9a2f-08d76f13a6d9 X-Forefront-PRVS: 02296943FF X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: jcKo36UBFMuH0H/oGSlCQSjNlvduHBOczLECcpFAKpD4HjkYh1LEEurDEc7ckLB9E4Rysu8lmm9HPCzlWm4CyPtfNxfTHJHgz4Wa4KTgnepX0lf4RORIoS1lGjQDAWbCfKGuR6zsO+VeV7bu30CbUQObX5HnY1cbs46entkpHTY4GyF19FTpN84MSQrS62gBad8tHE0ERijVyO4Vl/SKw7/DQm7bq2xt0Xes6lhyIJXgf7H3CCqIa6eGFbgXsi7wJZqcPJhck7p6bOnTHNRKF0zHxs7Ejw0+Nlyvc0qREMarxcpx9UqllfLyJMWFHu3s4372/pVlLn4c8bg2M9XQRpOHhHiqvf9zBUjQ/o8oFjqCvBK5QqHhfTPqV++IIz9TUMyLnYSGBQ+3NqI3EXQb44VYnJerb3lMY0pqSanxipJpkr9nWpVwN0EhEI8o01X5 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Nov 2019 06:17:35.1522 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2bf416f2-3447-40d0-dc70-08d76f13aa8a X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB5519 Archived-At: Subject: Re: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 06:17:42 -0000 --_000_VI1PR08MB53605A2A2E61E6EAE2609FECFA490VI1PR08MB5360eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 WWFyb24sDQpDb3VsZCB5b3UgZXhwbGFpbiB3aHkgeW91IHRoaW5rIHRoYXQgdGhpcyBpcyBhIGdv b2QgaWRlYT8NCkNpYW8NCkhhbm5lcw0KDQpGcm9tOiBSQVRTIDxyYXRzLWJvdW5jZXNAaWV0Zi5v cmc+IE9uIEJlaGFsZiBPZiBZYXJvbiBTaGVmZmVyDQpTZW50OiBGcmlkYXksIE5vdmVtYmVyIDIy LCAyMDE5IDI6MDUgUE0NClRvOiByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBbUmF0c10gRUFUIElB TkEgcmVnaXN0cnkNCg0KVW5yZWxhdGVkIHRvIG15IGVhcmxpZXIgbWFpbCwgSSB3b3VsZCByZWNv bW1lbmQgdG8gY3JlYXRlIGEgc2VwYXJhdGUgcmVnaXN0cnkgZm9yIEVBVCBjbGFpbXMgKEkgc3Vw cG9zZSB0aGF0IGltcGxpZXMgYSBuZXN0ZWQgb2JqZWN0IGluIHRoZSBKV1QvQ1dUKSByYXRoZXIg dGhhbiB0byBvdmVybG9hZCB0aGUgQ1dUIHJlZ2lzdHJ5LiBBcmNoaXRlY3R1cmFsbHkgaXQganVz dCBkb2VzbuKAmXQgaml2ZSB0byBoYXZlIGFsbCB0aGVzZSBjbGFpbXMgYXMgYmFzZWxpbmUgQ1dU IGNsYWltcywgYW5kIHByb2Nlc3Mtd2lzZSwgaXTigJlzIG11Y2ggbW9yZSBjb252ZW5pZW50IGZv ciB0aGlzIGdyb3VwIHRvIGNvbnRyb2wgaXRzIG93biBuYW1lc3BhY2UuDQoNClNvcnJ5IGlmIHRo aXMgaGFzIGJlZW4gcmFpc2VkIGJlZm9yZS4NCg0KVGhhbmtzLA0KICAgICAgICAgICAgICAgIFlh cm9uDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55 IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQu IElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhl IHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBh bnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5 IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_VI1PR08MB53605A2A2E61E6EAE2609FECFA490VI1PR08MB5360eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAx IDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUg NSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4i Ow0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlv bjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0K CXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4t bGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl ZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0t LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4N CjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1s PjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEi IHZsaW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+WWFyb24sIDxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5Db3VsZCB5b3UgZXhwbGFpbiB3aHkgeW91IHRoaW5rIHRoYXQgdGhpcyBpcyBh IGdvb2QgaWRlYT8NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5DaWFvPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhh bm5lczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+IFJBVFMgJmx0O3JhdHMtYm91bmNlc0BpZXRmLm9yZyZndDsNCjxi Pk9uIEJlaGFsZiBPZiA8L2I+WWFyb24gU2hlZmZlcjxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXks IE5vdmVtYmVyIDIyLCAyMDE5IDI6MDUgUE08YnI+DQo8Yj5Ubzo8L2I+IHJhdHNAaWV0Zi5vcmc8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW1JhdHNdIEVBVCBJQU5BIHJlZ2lzdHJ5PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPlVucmVsYXRlZCB0byBteSBlYXJsaWVyIG1haWwsIEkgd291bGQgcmVjb21tZW5k IHRvIGNyZWF0ZSBhIHNlcGFyYXRlIHJlZ2lzdHJ5IGZvciBFQVQgY2xhaW1zIChJIHN1cHBvc2Ug dGhhdCBpbXBsaWVzIGEgbmVzdGVkIG9iamVjdCBpbiB0aGUgSldUL0NXVCkgcmF0aGVyIHRoYW4g dG8gb3ZlcmxvYWQgdGhlIENXVCByZWdpc3RyeS4gQXJjaGl0ZWN0dXJhbGx5DQogaXQganVzdCBk b2VzbuKAmXQgaml2ZSB0byBoYXZlIGFsbCB0aGVzZSBjbGFpbXMgYXMgYmFzZWxpbmUgQ1dUIGNs YWltcywgYW5kIHByb2Nlc3Mtd2lzZSwgaXTigJlzIG11Y2ggbW9yZSBjb252ZW5pZW50IGZvciB0 aGlzIGdyb3VwIHRvIGNvbnRyb2wgaXRzIG93biBuYW1lc3BhY2UuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Tb3JyeSBpZiB0aGlzIGhhcyBiZWVuIHJhaXNlZCBi ZWZvcmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGFua3Ms PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBZYXJv bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNv bnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFs IGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQg cmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5v dCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBh bnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVk aXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_VI1PR08MB53605A2A2E61E6EAE2609FECFA490VI1PR08MB5360eurp_-- From nobody Fri Nov 22 06:15:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55EC712082F for ; Fri, 22 Nov 2019 06:15:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rBx7-PVboMpy for ; Fri, 22 Nov 2019 06:15:40 -0800 (PST) Received: from mail-oi1-x22a.google.com (mail-oi1-x22a.google.com [IPv6:2607:f8b0:4864:20::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6616E1207FE for ; Fri, 22 Nov 2019 06:15:40 -0800 (PST) Received: by mail-oi1-x22a.google.com with SMTP id l20so6570660oie.10 for ; Fri, 22 Nov 2019 06:15:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=nUQTZ+R3QpUgHgfd9LdSW8Q9/gUJdWiff1M6GAAn/I0=; b=jyBteBVe7MyX9Qe8zY1Auu1HVC44UcgJPqKOowuGEl/fvk6GefhlgFYZY7UR1dVE3a bZFyzdoYofOmIFeVGhbZCQlnqVcGyUUeWvCmN/+uJ8rgedqdVM9DxcQPpJNYFW0X/FFv DVV9xnTzoNje9AvEf9yhHE9tiI1orBgWeossewtF8tYzY3e18Ym6+9AFml6p6i4S8tRC dLdEeW4oJpQociGU4qvFcRykySbPs52+QHi3OlbwF3wM8DRBCfrjsaY+tySIwqZU8XKF ulwdItB5/GJbTTomWMAFQCUUlDc10E66arz7SlVIWmp/JU2X5X+kc7Ri97S8bb4MNaCV yvpQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=nUQTZ+R3QpUgHgfd9LdSW8Q9/gUJdWiff1M6GAAn/I0=; b=TJds89SrjUomEUvJsMK+4DZBhv7nK8JuMk88t6XsjPojTBeGX2aRwo+asL4CUvvX/t 3EyRkTZpdDqqeCqXErmath+H1mjJuY4O66jdj4iYh339GV3WyRu2r1Zbl3ZCWTmpTJlp Rwhpe3NPE62WvXIZY0baGA+a6ber3qLD0NESsUvKTUE2gJm4IcvLHKTeH/9L68kUCkFe deDUSHLeYXOil8SMi5/Iv0XBBakpzai8j5UNnCjJwVI5Buajnd1CzIJlsfNmYeOkOyIq 4QXxF2FAxM/bvGgZnJP8Qv0vYbsFd7n/vGPiX0VjXvKj6G2ri6lWIXFBwp4tudOrvO8G Tf4Q== X-Gm-Message-State: APjAAAV02uUvhKY+M0DfGMKXRLbgH5OQv6zp7payG1Fqt57E/rc6IRZo 0azH9X4ea0BCUci3h0HdfaAu2Ea8RD7Fmq3vy0c= X-Google-Smtp-Source: APXvYqw+IvCDtxABlGzywNcaBkjjRzyy3Ym2HT7KmmCLrho35vJaheIPeCOTD2446xe89g8VYc2G6LSft1JOP/ght90= X-Received: by 2002:a05:6808:498:: with SMTP id z24mr12553722oid.114.1574432139743; Fri, 22 Nov 2019 06:15:39 -0800 (PST) MIME-Version: 1.0 References: <4EEB506F-5ED6-4DEC-873F-D6D5ABBA04B3@gmail.com> In-Reply-To: <4EEB506F-5ED6-4DEC-873F-D6D5ABBA04B3@gmail.com> From: Kathleen Moriarty Date: Fri, 22 Nov 2019 09:15:03 -0500 Message-ID: To: Yaron Sheffer Cc: "rats@ietf.org" Content-Type: multipart/alternative; boundary="0000000000006996980597f00c87" Archived-At: Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 14:15:42 -0000 --0000000000006996980597f00c87 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, Nov 22, 2019 at 12:57 AM Yaron Sheffer wrote: > I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D us= e case in mind. > To clarify, what I'm looking for is the capability: > > > > - To attest to software components that are running inside VMs, container= s > (either on VMs or bare metal), and anonymous containers > (function-as-a-service, such as AWS Lambda). > > - Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.= ). > > - Attestation of running (as opposed to installed) components. For > example, container code may be pulled from a remote repository shortly > before it is run. > > - To support diverse roots-of-trust, such that when a hardware > root-of-trust is unavailable, we can have a hypervisor or an orchestratio= n > server (e.g. Kubernetes) as the RoT, even if that means a lower level of > trust. > > > > I think in general, EAT can be made to fit these use cases, given its > recursive structure. But not surprisingly given its origins, the draft > would need quite a few changes. > > > > * 1.2 (and 3.12): why not spell out that a submodule can be either a > hardware or software component? > > * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may > have other functions; a system may in general have multiple RoTs. The wor= d > "dedicated" is not repeated anywhere else in the document, nor is it > explained. > > * 1.3 continues to only talk hardware, e.g. when defining the > "manufacturer". Software has a manufacturer too. > > * 3.3: the notion of UEID is fundamentally incompatible with some > component types that we would wish to attest. For example, the lifetime o= f > a function-as-a-service container may be less than a second, and even if = it > has an identity during its lifetime, there is no registry or persistent > record of this identity. Is a UEID required in this scheme? > > * 3.4: hey, finally some software! > > > > I think we still don't have a handle on identifying running software, and > CosWID may not be the whole answer. CosWID is more like traditional > software inventorying, and we need something that will cover dynamic mode= rn > software. > I'm going to write up some text for the CoSWID draft that would have a CoSWID in an EAT (CWT). If the entire CoSWID (or even SWID) were in a claim, allowing you to add other claims, would this suffice for your use case? I think I'll write a draft specific to what CoSWID looks like in an EAT as a follow up and would like coauthors. I was thinking that might go into SACM, referencing the EAT work. Best regards, Kathleen > > Thanks, > > Yaron > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --0000000000006996980597f00c87 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Nov 22, 2019 at 12:57 AM Yaro= n Sheffer <yaronf.ietf@gmail.co= m> wrote:

I have read the EAT dra= ft, specifically with a =E2=80=9Ccloud=E2=80=9D use case in mind. To clarif= y, what I'm looking for is the capability:

=C2=A0

- To attest to software components that are running inside VMs, contain= ers (either on VMs or bare metal), and anonymous containers (function-as-a-= service, such as AWS Lambda).

- Such components may be deployed in arbitrary hierarchies (VM-in-VM e= tc.).

- Attestation of ru= nning (as opposed to installed) components. For example, container code may= be pulled from a remote repository shortly before it is run.=

- To support diverse roots-of-trust, s= uch that when a hardware root-of-trust is unavailable, we can have a hyperv= isor or an orchestration server (e.g. Kubernetes) as the RoT, even if that = means a lower level of trust.

=C2=A0

I think in ge= neral, EAT can be made to fit these use cases, given its recursive structur= e. But not surprisingly given its origins, the draft would need quite a few= changes.

=C2=A0

* 1.2 (and 3.12): why not spell o= ut that a submodule can be either a hardware or software component?<= u>

* 1.2: why *dedicated* root of t= rust, what is it dedicated to? A RoT may have other functions; a system may= in general have multiple RoTs. The word "dedicated" is not repea= ted anywhere else in the document, nor is it explained.

* 1.3 continues to only talk hardware, e.g. = when defining the "manufacturer". Software has a manufacturer too= .

* 3.3: the notion of UE= ID is fundamentally incompatible with some component types that we would wi= sh to attest. For example, the lifetime of a function-as-a-service containe= r may be less than a second, and even if it has an identity during its life= time, there is no registry or persistent record of this identity. Is a UEID= required in this scheme?

* 3.4: hey, finally some software!

=C2=A0

I think= we still don't have a handle on identifying running software, and CosW= ID may not be the whole answer. CosWID is more like traditional software in= ventorying, and we need something that will cover dynamic modern software.<= /span>


I'm going to wri= te up some text for the CoSWID draft that would have a CoSWID in an EAT (CW= T).=C2=A0 If the entire CoSWID (or even SWID) were in a claim, allowing you= to add other claims, would this suffice for your use case?

<= /div>
I think I'll write a draft specific to what CoSWID looks like= in an EAT as a follow up and would like coauthors.=C2=A0 I was thinking th= at might go into SACM, referencing the EAT work.

B= est regards,
Kathleen

=

=C2=A0<= /span>

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

=C2=A0

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--0000000000006996980597f00c87-- From nobody Fri Nov 22 06:57:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96D6A120874 for ; Fri, 22 Nov 2019 06:57:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.641 X-Spam-Level: X-Spam-Status: No, score=-0.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y6hC6PJHKV0d for ; Fri, 22 Nov 2019 06:57:38 -0800 (PST) Received: from mail-pf1-x42b.google.com (mail-pf1-x42b.google.com [IPv6:2607:f8b0:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4D7391200DB for ; Fri, 22 Nov 2019 06:57:38 -0800 (PST) Received: by mail-pf1-x42b.google.com with SMTP id z4so3586630pfn.12 for ; Fri, 22 Nov 2019 06:57:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version; bh=AcIa0gl/Hqa2ihSWijMCS4MPvvJ3q1y7qik9N9rV6TU=; b=VlImt/PPt91HDXTSX6fWpYWZWfq1Wlc6wp2F9fNdiNgUuTb89P2ZX5/upatllGy9HR siY1PQIDzqe4nvyj01Cn/0xsfX2B7jAggrVHHMhSHzSYrELHriLPVoen3UIg1JDLtlkE NU4sLmhvvR9MBXrr+tXpcG0PqghR+UzOj7SM2muoiy/fzEC76dcKsrZYfOvUCZnaNgcB aahlLr2PEWazAYq6jfXBEqJt0dwfdQdJdznzCRxi5t1jDe2TvIWNAaos5lsqAE8KKyR2 4A+G8fziijxr1S1FiQ+K9J77KHo0bNtRwpBvoqXhgDCNAH61jfO9k8D+qEno6C/lexfs Y2xg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:references:in-reply-to:mime-version; bh=AcIa0gl/Hqa2ihSWijMCS4MPvvJ3q1y7qik9N9rV6TU=; b=PRau077IXkE6qYsX3I2SPg1FUtXw+77QZKFbwu8QXdeHipuQ1ia2HglsD5A1SDbK2/ eUlO0tXabxzz0zqLkqZNG+tHIkSK95nKh7fFc/43F4GG0X6aMzU9gtEkOUCXmIcccAy7 fJyHMUi6o6XDX39AUuxGIVFhAGYtxTuMxArla9d57jttu7143PczmE+Qujs5bHhqyoSu 95hAPeNWed8Ltq0lkXGQ+WZOfb6wuxcLEW/F04dnaq1V40XW65ZxtZt6rVcIJc5U74Lk nQK9QHIVulLj6kBoLtFskTZb4qdwXa4sblkh9g7jTw2kD56u5hN6ayovsoo9PqSH8N/4 NXUA== X-Gm-Message-State: APjAAAVpfhVVwUm4PnYBrV9d2im6AzO0Hp5zdLB7covl32yLxLP3GvrP jFhbxJ3WuETky8gFLmPcJgI= X-Google-Smtp-Source: APXvYqzOF2H7vn2L7KdPTItafM+UXDiNMNUg7q4JDjxPtwaxdk87Drj5Lp8zKSm1WfOmCc8qqpU5bw== X-Received: by 2002:a63:a56:: with SMTP id z22mr16706735pgk.326.1574434657788; Fri, 22 Nov 2019 06:57:37 -0800 (PST) Received: from [172.16.12.5] ([58.185.87.21]) by smtp.gmail.com with ESMTPSA id 7sm7164868pgk.25.2019.11.22.06.57.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 06:57:36 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Fri, 22 Nov 2019 22:57:34 +0800 From: Yaron Sheffer To: Hannes Tschofenig , "rats@ietf.org" Message-ID: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> Thread-Topic: EAT IANA registry References: In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657308256_937616666" Archived-At: Subject: Re: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 14:57:40 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657308256_937616666 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Hannes, =20 Looking at the JWT claim IANA registry [1], it is already a terrible mess o= f several different standards, obviously with many more coming. I guess what= =E2=80=99s done is done, and I=E2=80=99ll take back my objection. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 [1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims =20 From: Hannes Tschofenig Date: Friday, November 22, 2019 at 14:17 To: Yaron Sheffer , "rats@ietf.org" Subject: RE: EAT IANA registry =20 Yaron,=20 Could you explain why you think that this is a good idea?=20 Ciao Hannes =20 From: RATS On Behalf Of Yaron Sheffer Sent: Friday, November 22, 2019 2:05 PM To: rats@ietf.org Subject: [Rats] EAT IANA registry =20 Unrelated to my earlier mail, I would recommend to create a separate regist= ry for EAT claims (I suppose that implies a nested object in the JWT/CWT) ra= ther than to overload the CWT registry. Architecturally it just doesn=E2=80=99t ji= ve to have all these claims as baseline CWT claims, and process-wise, it=E2=80=99s= much more convenient for this group to control its own namespace. =20 Sorry if this has been raised before. =20 Thanks, Yaron IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, pl= ease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you.=20 --B_3657308256_937616666 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Hannes,<= o:p>

=  

Loo= king at the JWT claim IANA registry [1], it is already a terrible mess of se= veral different standards, obviously with many more coming. I guess what=E2=80=99s= done is done, and I=E2=80=99ll take back my objection.

 

Thanks,

=

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 Yaron

 

[1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims=

 

From: Hannes Tschofenig <Hannes.Tschofenig@ar= m.com>
Date: Friday, November 22, 2019 at 14:17
To: Y= aron Sheffer <yaronf.ietf@gmail.com>, "rats@ietf.org" <ra= ts@ietf.org>
Subject: RE: EAT IANA registry

 

Yaron= ,

Co= uld you explain why you think that this is a good idea?

Ciao

Hannes=

 

From:<= /span> RATS <rats-bounces@ietf.org>= On Behalf Of Yaron Sheffer
Sent: Friday, November 22, 2019= 2:05 PM
To: rats@ietf.org
Subject: [Rats] EAT IANA regi= stry

 

Unrelated to my earlier = mail, I would recommend to create a separate registry for EAT claims (I supp= ose that implies a nested object in the JWT/CWT) rather than to overload the= CWT registry. Architecturally it just doesn=E2=80=99t jive to have all these clai= ms as baseline CWT claims, and process-wise, it=E2=80=99s much more convenient for= this group to control its own namespace.

 

Sorry if this has been raised before.=

&nbs= p;

Th= anks,

            &nb= sp;   Yaron

IMPORTANT NOTICE: The contents of this email and any attach= ments are confidential and may also be privileged. If you are not the intend= ed recipient, please notify the sender immediately and do not disclose the c= ontents to any other person, use it for any purpose, or store or copy the in= formation in any medium. Thank you.

--B_3657308256_937616666-- From nobody Fri Nov 22 07:43:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF831120909 for ; Fri, 22 Nov 2019 07:43:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.642 X-Spam-Level: X-Spam-Status: No, score=-0.642 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id segvDzUnbzfc for ; Fri, 22 Nov 2019 07:43:33 -0800 (PST) Received: from mail-pl1-x632.google.com (mail-pl1-x632.google.com [IPv6:2607:f8b0:4864:20::632]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB84D1208E0 for ; Fri, 22 Nov 2019 07:43:32 -0800 (PST) Received: by mail-pl1-x632.google.com with SMTP id o9so3254411plk.6 for ; Fri, 22 Nov 2019 07:43:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :mime-version:content-transfer-encoding; bh=VaeeKn7IGBvhcubObVs2zEzZ34peX0lKF4nqbKkq/lA=; b=q1PoZ40uCEnwp6m8soIjoRr0Up/nTzq/H3rl8pvsRx8qdp3ysGhkfYGO+Z1UF9GPKu 7TtfdmT+UlmuqAHjTFvIh65Sj4x2OBcNeuC6iIy/uMDPHBTYdpaHSX+fO2PDHH+jCSQT 9ndevuGt4nmocOL74uP/jb6EMf2UOXo3xFiuY3isyNC57wHQpGm7IMplef0gg5+01AIb EJZQcIUkE8bfKdDHtEjRyzsKLmT4WUS0XnUBIaA5nlp03fdCQFu+zfOlLNST9b0Qlyl1 4LnnwGIXm5qunyP39yYfpk8DseXxbytlA+63tP9mE5xehZ74W/yrp+XDSqzH9BtepCY8 81Zg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:mime-version:content-transfer-encoding; bh=VaeeKn7IGBvhcubObVs2zEzZ34peX0lKF4nqbKkq/lA=; b=DuJhCdIdvSXE9dvxngXyu0xmj2/VRZn2vu5BSsXtfxNWZop6G4ijttOxTK99ECuKTE 9EARE8X4sTQlIhAsNkmTmudE4wbaANIWE0zM1ZPOAafJBbBXOojQPJ2d1rBjN4PrdRmM ZecdfBojG1CRkx+TK2Y+d50OBitFWzN35Yc2nAiEAphgnbk5KF8MA8++UAC4T7hLkGId lc8h8gsqKoO7gRj816X/Zf93EGBouMgFpoYi+K40nefgqlQ3SzC+u+ZqQHxgQqFGa0xM s3tf4RJ1AOiVuxM7/k89SlczYI7wRMTwZzhxGSqnORKjIhIwkh22l1dkFzrv0jMtbXhL iCcw== X-Gm-Message-State: APjAAAW4Fgr0dalnk5geFW+lEYGZfsx8TxK4c3OZ8EC5ybWGLYyvL44i uQLUCFtp0zlg40WegYfFiSg= X-Google-Smtp-Source: APXvYqxMaY5l8LLkcFwlhGlCNNlpZD+q0xB5RSX4j8kxY7qmemzbJw0ZjsjaQlX6+rsN5g6KoGY6RA== X-Received: by 2002:a17:902:b215:: with SMTP id t21mr15080973plr.332.1574437412349; Fri, 22 Nov 2019 07:43:32 -0800 (PST) Received: from [172.16.12.5] ([58.185.87.21]) by smtp.gmail.com with ESMTPSA id n12sm6729039pgb.32.2019.11.22.07.43.30 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Nov 2019 07:43:31 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Fri, 22 Nov 2019 23:43:29 +0800 From: Yaron Sheffer To: Kathleen Moriarty CC: "rats@ietf.org" Message-ID: <5D88882F-E40F-43C8-BC79-C5913845FE87@gmail.com> Thread-Topic: CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: [Rats] CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 15:43:38 -0000 Hi Kathleen, I was assuming CoSWIDs (or SWIDs) to become claims anyway, this wasn=E2=80=99t wh= at I was asking. My question was whether SWIDs today cover the most common t= echnologies that we use to deploy software, other than traditional RPM (and = equivalent) software packages: * Language-specific packages deployed directly into the OS, such as Python = PIP and Ruby gems. * Language-specific packages deployed into application servers, such as Jav= a WAR files and NPM packages. * Docker containers that consist of multiple "layers", each possibly includ= ing several RPM packages as well as other stuff, like individual copied file= s. * Lambda functions that are built using their own custom toolset. I am completely ignorant about the SWID ecosystem, so maybe the answer is Y= es to all of the above (though a quick Google search came up with nothing). = Any help from experts would be appreciated. Thanks, Yaron From: Kathleen Moriarty Date: Friday, November 22, 2019 at 22:15 To: Yaron Sheffer Cc: "rats@ietf.org" Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases On Fri, Nov 22, 2019 at 12:57 AM Yaron Sheffer wrote: I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D use case in mind= . To clarify, what I'm looking for is the capability: =C2=A0 - To attest to software components that are running inside VMs, containers = (either on VMs or bare metal), and anonymous containers (function-as-a-servi= ce, such as AWS Lambda). - Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.). - Attestation of running (as opposed to installed) components. For example,= container code may be pulled from a remote repository shortly before it is = run. - To support diverse roots-of-trust, such that when a hardware root-of-trus= t is unavailable, we can have a hypervisor or an orchestration server (e.g. = Kubernetes) as the RoT, even if that means a lower level of trust. =C2=A0 I think in general, EAT can be made to fit these use cases, given its recur= sive structure. But not surprisingly given its origins, the draft would need= quite a few changes. =C2=A0 * 1.2 (and 3.12): why not spell out that a submodule can be either a hardwa= re or software component? * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may ha= ve other functions; a system may in general have multiple RoTs. The word "de= dicated" is not repeated anywhere else in the document, nor is it explained. * 1.3 continues to only talk hardware, e.g. when defining the "manufacturer= ". Software has a manufacturer too. * 3.3: the notion of UEID is fundamentally incompatible with some component= types that we would wish to attest. For example, the lifetime of a function= -as-a-service container may be less than a second, and even if it has an ide= ntity during its lifetime, there is no registry or persistent record of this= identity. Is a UEID required in this scheme? * 3.4: hey, finally some software! =C2=A0 I think we still don't have a handle on identifying running software, and C= osWID may not be the whole answer. CosWID is more like traditional software = inventorying, and we need something that will cover dynamic modern software. I'm going to write up some text for the CoSWID draft that would have a CoSW= ID in an EAT (CWT).=C2=A0 If the entire CoSWID (or even SWID) were in a claim, a= llowing you to add other claims, would this suffice for your use case? I think I'll write a draft specific to what CoSWID looks like in an EAT as = a follow up and would like coauthors.=C2=A0 I was thinking that might go into SA= CM, referencing the EAT work. Best regards, Kathleen =C2=A0 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =C2=A0 _______________________________________________ RATS mailing list mailto:RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats --=20 Best regards, Kathleen From nobody Fri Nov 22 09:07:00 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08DCB1208F6; Fri, 22 Nov 2019 09:06:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eMD7e5Gi6UAM; Fri, 22 Nov 2019 09:06:55 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FB551208E6; Fri, 22 Nov 2019 09:06:54 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAMH6o6Q022056 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 22 Nov 2019 18:06:51 +0100 Received: from [192.168.43.221] (80.187.105.118) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 22 Nov 2019 18:06:45 +0100 To: Kathleen Moriarty , "Waltermire, David A. (Fed)" CC: "rats@ietf.org" , Ira McDonald , sacm , Laurence Lundblade , "suit@ietf.org" References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> From: Henk Birkholz Message-ID: <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> Date: Fri, 22 Nov 2019 18:06:40 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [80.187.105.118] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 17:06:58 -0000 Hi Kathleen, hi SACM, SUIT & RATS list, the corresponding *SWID authors discussed this issue and are proposing: > https://github.com/ietf-rats-wg/eat/issues/46 This includes an extended scope to include the option of SUIT Manifest related Claim values, next to various *SWID Claim values. We permutated "signed" & "not-signed" as well as "payload tags" and "evidence tags" for *SWID tags in this proposal. The authors are convinced that the "not-signed" variants are of essence (as CWT does not allow "not-signed CBOR items", but also do not imply any implications to the SUIT Manifest Claim definition (although there are strong similarities and there could be some). The current *SWID contributors prefer this contribution as a parallel effort to the EAT I-D, SUIT Manifest I-D, the CoSWID I-D and existing ISO XML SWID standard. This proposal includes the primitive to not delay corresponding IETG I-D in their respective WGs. Having said that, we would like to get feedback for the proposal references above. If there is no dissent or push-back on either the SUIT, SACM, and RATS lists, our proposed way forward is a unified creation of EAT Claim Sets in the RATS WG that enables the use of various *SWID variants & the SUIT Manifest as payloads for RATS via the RATS EAT I-D. In summary, we would like to create this interop I-D in concert and welcome every joint effort in this domain. Viele Grüße, Henk On 21.11.19 12:37, Kathleen Moriarty wrote: > > > Sent from my mobile device > >> On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed) >> wrote: >> >>  >> It sounds like having a CWT claim that contains an entire CoSWID is a >> path forward. It may also make sense to do something similar for ISO >> SWID tags. >> >> Am I right in thinking that this CWT work can be done in RATS, >> referencing CoSWID once it is published as a normative reference? This >> would allow CoSWID to go forward to the IESG, while the CoSWID CWT >> claim is worked in parallel in RATS. >> >> Kathleen, if this is true, does this way forward address your >> CWT-related comments? > > Hi Dave, > > I think the signature may have to be on the CWT as opposed to on the > claim that is the CoSWID or SWID.  We can define it fully in another > draft, but should state it here so that option is understood.  It’s a > simple write up, I think. > > Thank you, > Kathleen >> >> Regards, >> Dave >> >> >> >> >> >> ------------------------------------------------------------------------ >> *From:* sacm on behalf of Kathleen Moriarty >> >> *Sent:* Wednesday, November 20, 2019 9:10 PM >> *To:* Ira McDonald >> *Cc:* rats@ietf.org ; sacm ; Laurence >> Lundblade >> *Subject:* Re: [sacm] [Rats] CoSWID and EAT and CWT >> Great, thanks Laurence.  If that's easier I think having the CoSWID in >> one claim should be ok and would have the same result as the >> suggestion I made.  Changing the CoSWID format is a big enough process >> that it shouldn't happen very often. >> >> Best regards, >> Kathleen >> >> On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald > > wrote: >> >> Hi Laurence, >> >> That seems like a good suggestion for a simple way to integrate >> CoSWID content >> into EAT. >> >> Cheers, >> - Ira >> >> Ira McDonald (Musician / Software Architect) >> Co-Chair - TCG Trusted Mobility Solutions WG >> Co-Chair - TCG Metadata Access Protocol SG >> Chair - Linux Foundation Open Printing WG >> Secretary - IEEE-ISTO Printer Working Group >> Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG >> IETF Designated Expert - IPP & Printer MIB >> Blue Roof Music / High North Inc >> http://sites.google.com/site/blueroofmusic >> >> http://sites.google.com/site/highnorthinc >> >> mailto: blueroofmusic@gmail.com >> PO Box 221  Grand Marais, MI 49839  906-494-2434 >> >> >> >> On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade >> > wrote: >> >> Hi, >> >> I’m not on the SACM list, but did look at the archive. >> Hopefully I’m not out of sync. >> >> My thought is to register one claim for CWT that is an entire >> CoSWID (in CDDL the concise-swid-tag). >> >> That way CoSWID can grow and develop on its own without lots >> of adds and subtracts to the CWT registry. It has its own IANA >> registry with its own experts and such. Seems like the >> coupling / factoring is about right. >> >> This would also be the way I’d like to have it in EAT >> attestation. We’ve done a mini version of this with the >> location claim >> . >> >> Then if you just want to sign a CoSWID CWT style, this works >> pretty well too. It has a slight overhead compared to having >> all the CoSWID data items as direct CWT claims in that it will >> have an additional map layer, but that is only about three bytes. >> >> LL >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> >> -- >> >> Best regards, >> Kathleen > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Fri Nov 22 10:20:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D35421208BD for ; Fri, 22 Nov 2019 10:20:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C8WJCLaFB2l5 for ; Fri, 22 Nov 2019 10:20:50 -0800 (PST) Received: from mail-ot1-x329.google.com (mail-ot1-x329.google.com [IPv6:2607:f8b0:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ADCDB1208B8 for ; Fri, 22 Nov 2019 10:20:50 -0800 (PST) Received: by mail-ot1-x329.google.com with SMTP id w11so7021965ote.1 for ; Fri, 22 Nov 2019 10:20:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=j0ZVVcj82WA1flcpQcZ7aiPPV9lSEBMMwN7Mdb/n7g0=; b=HU2/eSgIsJd3ZmZnAttpIxKfBlWvScTu41yEj3L19Ji3QGgIYlr1p0FoGwRfbfEN0q 7eltFH9hQHs/fJREwA7o+6WPIA0n+fl2PMglOEARKHUkXlXdGlV9e4/ImsjKZrOtbO1a GD0x8pqR9BaD+5xOLcsnil/lRwiBm2aBoO/jGLwAA9gQgNyUOjv/GIO1Ju4y9qcOGWwU PSTuPdMZraoEujeXrlBFtvS4vNloIsx2feVZXuR+WXPNfF9TC39hFSdx+kOSxxirL7U7 VPtFm4CO/BBGDHzL3WlIqsJnStmP9zMEek8P0wrLZPrtpBaMsutzeTbVsur2I2d4Gvb2 2qSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=j0ZVVcj82WA1flcpQcZ7aiPPV9lSEBMMwN7Mdb/n7g0=; b=DMIUVmTwNR+mArWmfSYlrzmkfVtOzZ69R45+kDMBVRpRHYtJkafu7HZ/UWLSLI9n5A fv36nPPUbmlTy3WQNQCKWgWDDFibaSaEFN6mznKNU0Ku3Q0aYNMhUnm3HEaMUGJNopiI ACnzwBc4RB36P1q4Sfz3Ws0u5S/N1IuXT3Wl0APCfTTclGBbgBGWh5vwZRx+uwMv/nky R1cZZWhooGmGeHvmHCnPfT+OPARSWA/pLphm5RbFmLx9mpFnSsaDI8addDT/XKGfbtG9 jdC5juZuC74KX8CJ/lKBFvAIQCm74kCLm3aV8ymbVm9ZGoAmsaliEVbvCxuQX3r/9g7x n/XA== X-Gm-Message-State: APjAAAU/U8SfkViWpYqu84eFGJPhLo0RxL6ahEgCIPwKMXWL2GIwSdTL gFhI9WGCVYWOB5QsjIsx4OglGrKYQQQOFMabAJrlkyyW X-Google-Smtp-Source: APXvYqxmXoKaFj7IUTGVRBkkCKeA/HYLA5og+/evKhrlEAQ5ghxlrVE4N1kwPoaWFkvJyULH+PtH+Q/Oi7x0+5s5w9c= X-Received: by 2002:a05:6830:15a:: with SMTP id j26mr11501783otp.342.1574446849949; Fri, 22 Nov 2019 10:20:49 -0800 (PST) MIME-Version: 1.0 References: <5D88882F-E40F-43C8-BC79-C5913845FE87@gmail.com> In-Reply-To: <5D88882F-E40F-43C8-BC79-C5913845FE87@gmail.com> From: Kathleen Moriarty Date: Fri, 22 Nov 2019 13:20:13 -0500 Message-ID: To: Yaron Sheffer , Dave Waltermire , "Banghart, Stephen A. (Fed)" Cc: "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000358a220597f379ad" Archived-At: Subject: Re: [Rats] CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 18:20:53 -0000 --000000000000358a220597f379ad Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Yaron, I am copying Dave and Stephen in case they are not following RATS as closely as they do SACM. Have you looked at the CoSWID draft in SACM? It contains the full SWID format as it is translated into CoSWID. It may answer some of your questions. I'm swamped today, but can look at this stuff more next week or the following week and am interested. Best regards, Kathleen On Fri, Nov 22, 2019 at 10:43 AM Yaron Sheffer wrote: > Hi Kathleen, > > I was assuming CoSWIDs (or SWIDs) to become claims anyway, this wasn=E2= =80=99t > what I was asking. My question was whether SWIDs today cover the most > common technologies that we use to deploy software, other than traditiona= l > RPM (and equivalent) software packages: > > * Language-specific packages deployed directly into the OS, such as Pytho= n > PIP and Ruby gems. > * Language-specific packages deployed into application servers, such as > Java WAR files and NPM packages. > * Docker containers that consist of multiple "layers", each possibly > including several RPM packages as well as other stuff, like individual > copied files. > * Lambda functions that are built using their own custom toolset. > > I am completely ignorant about the SWID ecosystem, so maybe the answer is > Yes to all of the above (though a quick Google search came up with > nothing). Any help from experts would be appreciated. > > Thanks, > Yaron > > From: Kathleen Moriarty > Date: Friday, November 22, 2019 at 22:15 > To: Yaron Sheffer > Cc: "rats@ietf.org" > Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases > > > > On Fri, Nov 22, 2019 at 12:57 AM Yaron Sheffer yaronf.ietf@gmail.com> wrote: > I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D us= e case in mind. > To clarify, what I'm looking for is the capability: > > - To attest to software components that are running inside VMs, container= s > (either on VMs or bare metal), and anonymous containers > (function-as-a-service, such as AWS Lambda). > - Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.= ). > - Attestation of running (as opposed to installed) components. For > example, container code may be pulled from a remote repository shortly > before it is run. > - To support diverse roots-of-trust, such that when a hardware > root-of-trust is unavailable, we can have a hypervisor or an orchestratio= n > server (e.g. Kubernetes) as the RoT, even if that means a lower level of > trust. > > I think in general, EAT can be made to fit these use cases, given its > recursive structure. But not surprisingly given its origins, the draft > would need quite a few changes. > > * 1.2 (and 3.12): why not spell out that a submodule can be either a > hardware or software component? > * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may > have other functions; a system may in general have multiple RoTs. The wor= d > "dedicated" is not repeated anywhere else in the document, nor is it > explained. > * 1.3 continues to only talk hardware, e.g. when defining the > "manufacturer". Software has a manufacturer too. > * 3.3: the notion of UEID is fundamentally incompatible with some > component types that we would wish to attest. For example, the lifetime o= f > a function-as-a-service container may be less than a second, and even if = it > has an identity during its lifetime, there is no registry or persistent > record of this identity. Is a UEID required in this scheme? > * 3.4: hey, finally some software! > > I think we still don't have a handle on identifying running software, and > CosWID may not be the whole answer. CosWID is more like traditional > software inventorying, and we need something that will cover dynamic mode= rn > software. > > I'm going to write up some text for the CoSWID draft that would have a > CoSWID in an EAT (CWT). If the entire CoSWID (or even SWID) were in a > claim, allowing you to add other claims, would this suffice for your use > case? > > I think I'll write a draft specific to what CoSWID looks like in an EAT a= s > a follow up and would like coauthors. I was thinking that might go into > SACM, referencing the EAT work. > > Best regards, > Kathleen > > > Thanks, > Yaron > > _______________________________________________ > RATS mailing list > mailto:RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > > -- > > Best regards, > Kathleen > > > --=20 Best regards, Kathleen --000000000000358a220597f379ad Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Yaron,

I am copying Dave and Stephen= in case they are not following RATS as closely as they do SACM.=C2=A0 Have= you looked at the CoSWID draft in SACM?=C2=A0 It contains the full SWID fo= rmat as it is translated into CoSWID.=C2=A0 It may answer some of your ques= tions.=C2=A0 I'm swamped today, but can look at this stuff more next we= ek or the following week and am interested.

Best r= egards,
Kathleen

On Fri, Nov 22, 2019 at 10:43 AM Yaron Shef= fer <yaronf.ietf@gmail.com&= gt; wrote:
Hi Ka= thleen,

I was assuming CoSWIDs (or SWIDs) to become claims anyway, this wasn=E2=80= =99t what I was asking. My question was whether SWIDs today cover the most = common technologies that we use to deploy software, other than traditional = RPM (and equivalent) software packages:

* Language-specific packages deployed directly into the OS, such as Python = PIP and Ruby gems.
* Language-specific packages deployed into application servers, such as Jav= a WAR files and NPM packages.
* Docker containers that consist of multiple "layers", each possi= bly including several RPM packages as well as other stuff, like individual = copied files.
* Lambda functions that are built using their own custom toolset.

I am completely ignorant about the SWID ecosystem, so maybe the answer is Y= es to all of the above (though a quick Google search came up with nothing).= Any help from experts would be appreciated.

Thanks,
=C2=A0 =C2=A0 =C2=A0 =C2=A0 Yaron

From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Friday, November 22, 2019 at 22:15
To: Yaron Sheffer <yaronf.ietf@gmail.com>
Cc: "rats@ietf.org<= /a>" <rats@ietf.= org>
Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases



On Fri, Nov 22, 2019 at 12:57 AM Yaron Sheffer <mailto:yaronf.ietf@gmail.com> wro= te:
I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D use = case in mind. To clarify, what I'm looking for is the capability:
=C2=A0
- To attest to software components that are running inside VMs, containers = (either on VMs or bare metal), and anonymous containers (function-as-a-serv= ice, such as AWS Lambda).
- Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.).=
- Attestation of running (as opposed to installed) components. For example,= container code may be pulled from a remote repository shortly before it is= run.
- To support diverse roots-of-trust, such that when a hardware root-of-trus= t is unavailable, we can have a hypervisor or an orchestration server (e.g.= Kubernetes) as the RoT, even if that means a lower level of trust.
=C2=A0
I think in general, EAT can be made to fit these use cases, given its recur= sive structure. But not surprisingly given its origins, the draft would nee= d quite a few changes.
=C2=A0
* 1.2 (and 3.12): why not spell out that a submodule can be either a hardwa= re or software component?
* 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may ha= ve other functions; a system may in general have multiple RoTs. The word &q= uot;dedicated" is not repeated anywhere else in the document, nor is i= t explained.
* 1.3 continues to only talk hardware, e.g. when defining the "manufac= turer". Software has a manufacturer too.
* 3.3: the notion of UEID is fundamentally incompatible with some component= types that we would wish to attest. For example, the lifetime of a functio= n-as-a-service container may be less than a second, and even if it has an i= dentity during its lifetime, there is no registry or persistent record of t= his identity. Is a UEID required in this scheme?
* 3.4: hey, finally some software!
=C2=A0
I think we still don't have a handle on identifying running software, a= nd CosWID may not be the whole answer. CosWID is more like traditional soft= ware inventorying, and we need something that will cover dynamic modern sof= tware.

I'm going to write up some text for the CoSWID draft that would have a = CoSWID in an EAT (CWT).=C2=A0 If the entire CoSWID (or even SWID) were in a= claim, allowing you to add other claims, would this suffice for your use c= ase?

I think I'll write a draft specific to what CoSWID looks like in an EAT= as a follow up and would like coauthors.=C2=A0 I was thinking that might g= o into SACM, referencing the EAT work.

Best regards,
Kathleen

=C2=A0
Thanks,
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 Yaron
=C2=A0
_______________________________________________
RATS mailing list
mailto:RATS@ietf.org=
https://www.ietf.org/mailman/listinfo/rats



--

Best regards,
Kathleen




--

Best regards,
Kathleen
--000000000000358a220597f379ad-- From nobody Fri Nov 22 10:27:34 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB2BC120096; Fri, 22 Nov 2019 10:27:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.997 X-Spam-Level: X-Spam-Status: No, score=-0.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1OmV4wsbPlqd; Fri, 22 Nov 2019 10:27:31 -0800 (PST) Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com [IPv6:2607:f8b0:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBE9412004F; Fri, 22 Nov 2019 10:27:30 -0800 (PST) Received: by mail-oi1-x22d.google.com with SMTP id l20so7319825oie.10; Fri, 22 Nov 2019 10:27:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ACRYRSFaq33uUhELKClxGpNSiBU3gcO1TGnaysLekM0=; b=AP6pHGXyBJISgjHe2UHvTVx8/iACld5HWZv6AKUxj06f7hs8/9g2GimW5g44L2M6km BKA5hwZeMn7aC8rIcuGF7dfmV6/Bi+VP6NiYkptxAGsKl7jDjQgzCV9YfxLNiwbwzykX EpAE0chPcIy3sTWxPi6wb6Q4V8PNuJDnGzzHv9essoTaLpYtBZbyJk7iSodEpQAw8s10 Ja8Vx0NMf3CcrwG6EdZMYZv15i1YIJZTuIj4LlJ3Org8kHJxYw/TM/gybsOC07DTp9l6 RbJI8zSkacMjFPVwkN9NgW/l5SO6Z132KvsHp9+wKi2a8mlsbcApK1jLaXApEEzInff0 1COA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ACRYRSFaq33uUhELKClxGpNSiBU3gcO1TGnaysLekM0=; b=Z042UL1wrBSyFri0CxVn7GQ/k4EMiF3X6oZgiCvG6PAYtNYT2bKbE1ENUPzYLbIz5/ PNgdWchyr2y4OgfWj+bQBIni0JPp93xSZnJaDdi8RRd6X6rncu/Ms7bA5lYMZ3Um/S3h DlIPde9Rd4d1/Q9I5T/RipdZsx9frpYRhCbfGNrcarG0UyvcwEuTsLGktR1Pgryh8/3E Ga2qe1b5d41KGoghEgiEl3z6pGBIQJ/xHkpEYm+Mw+fmI9XfdfBCC58FWGHs4f/h2Xye e9z4rFL1eEx+Y81wPrVuysBOIyQmrRZBVY+bk4z4eu5hq4fLtJXg2m1X66Uzx6JQfX5X 9q7Q== X-Gm-Message-State: APjAAAVqbLzHu5pj6teDtInHEBPaYQmGuDtsJd6I/FbumDf7wnA3LWDe u8/HdyIaNMsSn3ogzzbVeaGEl7I7IO/oE1FLZfQ= X-Google-Smtp-Source: APXvYqxGZpgZxDE3+pBBTPNWuQeN/i6Ldbb03B8584atj5M22EVz24EuvALpmNTYYdX8I+KSaXxAMIbGmfenENIyOfs= X-Received: by 2002:aca:3044:: with SMTP id w65mr9876535oiw.158.1574447250070; Fri, 22 Nov 2019 10:27:30 -0800 (PST) MIME-Version: 1.0 References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> In-Reply-To: <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> From: Kathleen Moriarty Date: Fri, 22 Nov 2019 13:26:54 -0500 Message-ID: To: Henk Birkholz Cc: "Waltermire, David A. (Fed)" , "rats@ietf.org" , Ira McDonald , sacm , Laurence Lundblade , "suit@ietf.org" Content-Type: multipart/alternative; boundary="0000000000000ee1220597f391cd" Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 18:27:33 -0000 --0000000000000ee1220597f391cd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Henk, I am not entirely following you, so I am not stating agreement yet. On Fri, Nov 22, 2019 at 12:06 PM Henk Birkholz < henk.birkholz@sit.fraunhofer.de> wrote: > Hi Kathleen, > hi SACM, SUIT & RATS list, > > the corresponding *SWID authors discussed this issue and are proposing: > > > https://github.com/ietf-rats-wg/eat/issues/46 > > This includes an extended scope to include the option of SUIT Manifest > related Claim values, next to various *SWID Claim values. We permutated > "signed" & "not-signed" as well as "payload tags" and "evidence tags" > for *SWID tags in this proposal. The authors are convinced that the > "not-signed" variants are of essence (as CWT does not allow "not-signed > CBOR items", but also do not imply any implications to the SUIT Manifest > Claim definition (although there are strong similarities and there could > be some). > Can you write the above again? Are you saying this in terms of a CWT? Wouldn't the claims and the text value in a CWT be represented as-is, then signed, so you'd get what you are saying is needed? > > The current *SWID contributors prefer this contribution as a parallel > effort to the EAT I-D, SUIT Manifest I-D, the CoSWID I-D and existing > ISO XML SWID standard. This proposal includes the primitive to not delay > corresponding IETG I-D in their respective WGs. > Are you saying you don't want to add text stating the use of a CWT is a possible alternative, as that is what was requested. I offered to write a separate document to put the CoSWID in a CWT in SACM as I think that's the right home, referencing EAT work. > > Having said that, we would like to get feedback for the proposal > references above. > > If there is no dissent or push-back on either the SUIT, SACM, and RATS > lists, our proposed way forward is a unified creation of EAT Claim Sets > in the RATS WG that enables the use of various *SWID variants & the SUIT > Manifest as payloads for RATS via the RATS EAT I-D. > I think this should be in SACM. And I've offered to help. I do think that a little text saying it's possible should be in the CoSWID draft and will provide that soon as not to delay progress of the CoSWID document. Best regards, Kathleen > > In summary, we would like to create this interop I-D in concert and > welcome every joint effort in this domain. > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > On 21.11.19 12:37, Kathleen Moriarty wrote: > > > > > > Sent from my mobile device > > > >> On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed) > >> wrote: > >> > >> =EF=BB=BF > >> It sounds like having a CWT claim that contains an entire CoSWID is a > >> path forward. It may also make sense to do something similar for ISO > >> SWID tags. > >> > >> Am I right in thinking that this CWT work can be done in RATS, > >> referencing CoSWID once it is published as a normative reference? This > >> would allow CoSWID to go forward to the IESG, while the CoSWID CWT > >> claim is worked in parallel in RATS. > >> > >> Kathleen, if this is true, does this way forward address your > >> CWT-related comments? > > > > Hi Dave, > > > > I think the signature may have to be on the CWT as opposed to on the > > claim that is the CoSWID or SWID. We can define it fully in another > > draft, but should state it here so that option is understood. It=E2=80= =99s a > > simple write up, I think. > > > > Thank you, > > Kathleen > >> > >> Regards, > >> Dave > >> > >> > >> > >> > >> > >> ----------------------------------------------------------------------= -- > >> *From:* sacm on behalf of Kathleen Moriarty > >> > >> *Sent:* Wednesday, November 20, 2019 9:10 PM > >> *To:* Ira McDonald > >> *Cc:* rats@ietf.org ; sacm ; Laurence > >> Lundblade > >> *Subject:* Re: [sacm] [Rats] CoSWID and EAT and CWT > >> Great, thanks Laurence. If that's easier I think having the CoSWID in > >> one claim should be ok and would have the same result as the > >> suggestion I made. Changing the CoSWID format is a big enough process > >> that it shouldn't happen very often. > >> > >> Best regards, > >> Kathleen > >> > >> On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald >> > wrote: > >> > >> Hi Laurence, > >> > >> That seems like a good suggestion for a simple way to integrate > >> CoSWID content > >> into EAT. > >> > >> Cheers, > >> - Ira > >> > >> Ira McDonald (Musician / Software Architect) > >> Co-Chair - TCG Trusted Mobility Solutions WG > >> Co-Chair - TCG Metadata Access Protocol SG > >> Chair - Linux Foundation Open Printing WG > >> Secretary - IEEE-ISTO Printer Working Group > >> Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > >> IETF Designated Expert - IPP & Printer MIB > >> Blue Roof Music / High North Inc > >> http://sites.google.com/site/blueroofmusic > >> < > https://gcc01.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fsites.= google.com%2Fsite%2Fblueroofmusic&data=3D02%7C01%7Cdavid.waltermire%40nist.= gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7= C1%7C1%7C637098991070417006&sdata=3DGDIVVIesvqqXnuU6TtLbK7GJ4eI1b1EcYSPoXsH= lj04%3D&reserved=3D0 > > > >> http://sites.google.com/site/highnorthinc > >> outlook.com/?url=3Dhttp%3A%2F%2Fsites.google.com%2Fsite%2Fhighnorthinc&da= ta=3D02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e2828= 47%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070417006&sdata=3D= 7z%2BoMcYSSFD8hAYHmELqNoyGAxTBE9gknbV6kAzKWX8%3D&reserved=3D0 > > > >> mailto: blueroofmusic@gmail.com > >> PO Box 221 Grand Marais, MI 49839 906-494-2434 > >> > >> > >> > >> On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade > >> > wrote: > >> > >> Hi, > >> > >> I=E2=80=99m not on the SACM list, but did look at the archive. > >> Hopefully I=E2=80=99m not out of sync. > >> > >> My thought is to register one claim for CWT that is an entire > >> CoSWID (in CDDL the concise-swid-tag). > >> > >> That way CoSWID can grow and develop on its own without lots > >> of adds and subtracts to the CWT registry. It has its own IANA > >> registry with its own experts and such. Seems like the > >> coupling / factoring is about right. > >> > >> This would also be the way I=E2=80=99d like to have it in EAT > >> attestation. We=E2=80=99ve done a mini version of this with th= e > >> location claim > >> < > https://gcc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools= .ietf.org%2Fhtml%2Fdraft-ietf-rats-eat-01%23section-3.8&data=3D02%7C01%7Cda= vid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa= 4797a93e054655c61dec%7C1%7C1%7C637098991070426961&sdata=3D%2Fhi008Am2dlY6tB= QHdPVVGZzEcWNmqd5MvgPOM14jE8%3D&reserved=3D0 > >. > >> > >> Then if you just want to sign a CoSWID CWT style, this works > >> pretty well too. It has a slight overhead compared to having > >> all the CoSWID data items as direct CWT claims in that it will > >> have an additional map layer, but that is only about three > bytes. > >> > >> LL > >> > >> _______________________________________________ > >> RATS mailing list > >> RATS@ietf.org > >> https://www.ietf.org/mailman/listinfo/rats > >> < > https://gcc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.org%2Fmailman%2Flistinfo%2Frats&data=3D02%7C01%7Cdavid.waltermire%40nis= t.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec= %7C1%7C1%7C637098991070426961&sdata=3DfdpXMIU%2BNkMSn3RJ4X5AsSuMU7pbokHXlts= X8ZYP9E0%3D&reserved=3D0 > > > >> > >> _______________________________________________ > >> sacm mailing list > >> sacm@ietf.org > >> https://www.ietf.org/mailman/listinfo/sacm > >> < > https://gcc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.i= etf.org%2Fmailman%2Flistinfo%2Fsacm&data=3D02%7C01%7Cdavid.waltermire%40nis= t.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec= %7C1%7C1%7C637098991070436893&sdata=3DokSPAqVHj9KBxPtViQdnffsfhlMF4t0%2F87P= XXY78fA0%3D&reserved=3D0 > > > >> > >> > >> > >> -- > >> > >> Best regards, > >> Kathleen > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > --=20 Best regards, Kathleen --0000000000000ee1220597f391cd Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Henk,

I am not enti= rely following you, so I am not stating agreement yet.

On Fri, Nov 22,= 2019 at 12:06 PM Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
Hi Kathleen,
hi SACM, SUIT & RATS list,

the corresponding *SWID authors discussed this issue and are proposing:

> https://github.com/ietf-rats-wg/eat/issues/46<= br>
This includes an extended scope to include the option of SUIT Manifest
related Claim values, next to various *SWID Claim values. We permutated "signed" & "not-signed" as well as "payload ta= gs" and "evidence tags"
for *SWID tags in this proposal. The authors are convinced that the
"not-signed" variants are of essence (as CWT does not allow "= ;not-signed
CBOR items", but also do not imply any implications to the SUIT Manife= st
Claim definition (although there are strong similarities and there could be some).

Can you write the above again= ?=C2=A0 Are you saying this in terms of a CWT?=C2=A0 Wouldn't the claim= s and the text value in a CWT be represented as-is, then signed, so you'= ;d get what you are saying is needed?=C2=A0

The current *SWID contributors prefer this contribution as a parallel
effort to the EAT I-D, SUIT Manifest I-D, the CoSWID I-D and existing
ISO XML SWID standard. This proposal includes the primitive to not delay corresponding IETG I-D in their respective WGs.

Are you saying you don't want to add text stating the use of a= CWT is a possible alternative, as that is what was requested.=C2=A0 I offe= red to write a separate document to put the CoSWID in a CWT in SACM as I th= ink that's the right home, referencing EAT work.=C2=A0

Having said that, we would like to get feedback for the proposal
references above.

If there is no dissent or push-back on either the SUIT, SACM, and RATS
lists, our proposed way forward is a unified creation of EAT Claim Sets in the RATS WG that enables the use of various *SWID variants & the SUI= T
Manifest as payloads for RATS via the RATS EAT I-D.
I think this should be in SACM.=C2=A0 And I've offered to = help.=C2=A0 I do think that a little text saying it's possible should b= e in the CoSWID draft and will provide that soon as not to delay progress o= f the CoSWID document.

Best regards,
Kat= hleen=C2=A0

In summary, we would like to create this interop I-D in concert and
welcome every joint effort in this domain.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 21.11.19 12:37, Kathleen Moriarty wrote:
>
>
> Sent from my mobile device
>
>> On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed)
>> <david.waltermire@nist.gov> wrote:
>>
>> =EF=BB=BF
>> It sounds like having a CWT claim that contains an entire CoSWID i= s a
>> path forward. It may also make sense to do something similar for I= SO
>> SWID tags.
>>
>> Am I right in thinking that this CWT work can be done in RATS, >> referencing CoSWID once it is published as a normative reference? = This
>> would allow CoSWID to go forward to the IESG, while the CoSWID CWT=
>> claim is worked in parallel in RATS.
>>
>> Kathleen, if this is true, does this way forward address your
>> CWT-related comments?
>
> Hi Dave,
>
> I think the signature may have to be on the CWT as opposed to on the <= br> > claim that is the CoSWID or SWID.=C2=A0 We can define it fully in anot= her
> draft, but should state it here so that option is understood.=C2=A0 It= =E2=80=99s a
> simple write up, I think.
>
> Thank you,
> Kathleen
>>
>> Regards,
>> Dave
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------= ------
>> *From:* sacm <sacm-bounces@ietf.org> on behalf of Kathleen Moriarty >> <kathleen.moriarty.ietf@gmail.com>
>> *Sent:* Wednesday, November 20, 2019 9:10 PM
>> *To:* Ira McDonald <blueroofmusic@gmail.com>
>> *Cc:* rats@ietf= .org <rats@ietf.o= rg>; sacm <sac= m@ietf.org>; Laurence
>> Lundblade <lgl@island-resort.com>
>> *Subject:* Re: [sacm] [Rats] CoSWID and EAT and CWT
>> Great, thanks Laurence.=C2=A0 If that's easier I think having = the CoSWID in
>> one claim should be ok and would have the same result as the
>> suggestion I made.=C2=A0 Changing the CoSWID format is a big enoug= h process
>> that it shouldn't happen very often.
>>
>> Best regards,
>> Kathleen
>>
>> On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald <blueroofmusic@gmail.com >> <mailto:blueroofmusic@gmail.com>> wrote:
>>
>>=C2=A0 =C2=A0 =C2=A0Hi Laurence,
>>
>>=C2=A0 =C2=A0 =C2=A0That seems like a good suggestion for a simple = way to integrate
>>=C2=A0 =C2=A0 =C2=A0CoSWID content
>>=C2=A0 =C2=A0 =C2=A0into EAT.
>>
>>=C2=A0 =C2=A0 =C2=A0Cheers,
>>=C2=A0 =C2=A0 =C2=A0- Ira
>>
>>=C2=A0 =C2=A0 =C2=A0Ira McDonald (Musician / Software Architect) >>=C2=A0 =C2=A0 =C2=A0Co-Chair - TCG Trusted Mobility Solutions WG >>=C2=A0 =C2=A0 =C2=A0Co-Chair - TCG Metadata Access Protocol SG
>>=C2=A0 =C2=A0 =C2=A0Chair - Linux Foundation Open Printing WG
>>=C2=A0 =C2=A0 =C2=A0Secretary - IEEE-ISTO Printer Working Group
>>=C2=A0 =C2=A0 =C2=A0Co-Chair - IEEE-ISTO PWG Internet Printing Prot= ocol WG
>>=C2=A0 =C2=A0 =C2=A0IETF Designated Expert - IPP & Printer MIB<= br> >>=C2=A0 =C2=A0 =C2=A0Blue Roof Music / High North Inc
>>=C2=A0 =C2=A0 =C2=A0http://sites.google.com/site/b= lueroofmusic
>>=C2=A0 =C2=A0 =C2=A0<https://gcc01.safelinks.protection.out= look.com/?url=3Dhttp%3A%2F%2Fsites.google.com%2Fsite%2Fblueroofmusic&da= ta=3D02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e2828= 47%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070417006&sdat= a=3DGDIVVIesvqqXnuU6TtLbK7GJ4eI1b1EcYSPoXsHlj04%3D&reserved=3D0>=
>>=C2=A0 =C2=A0 =C2=A0http://sites.google.com/site/hi= ghnorthinc
>>=C2=A0 =C2=A0 =C2=A0<https://gcc01.safelinks.protectio= n..outlook.com/?ur= l=3Dhttp%3A%2F%2Fsites.google.com%2Fsite%2Fhighnorthinc&data=3D02%7C01%= 7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82f= d8fa4797a93e054655c61dec%7C1%7C1%7C637098991070417006&sdata=3D7z%2BoMcY= SSFD8hAYHmELqNoyGAxTBE9gknbV6kAzKWX8%3D&reserved=3D0>
>>=C2=A0 =C2=A0 =C2=A0mailto: blueroofmusic@gmail.com <mailto:blueroofmusic@gmail.com&= gt;
>>=C2=A0 =C2=A0 =C2=A0PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 9= 06-494-2434
>>
>>
>>
>>=C2=A0 =C2=A0 =C2=A0On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundbl= ade
>>=C2=A0 =C2=A0 =C2=A0<lgl@island-resort.com <mailto:lgl@island-resort.com>> wrot= e:
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hi,
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0I=E2=80=99m not on the SACM list,= but did look at the archive.
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Hopefully I=E2=80=99m not out of = sync.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0My thought is to register one cla= im for CWT that is an entire
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0CoSWID (in CDDL the concise-swid-= tag).
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0That way CoSWID can grow and deve= lop on its own without lots
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0of adds and subtracts to the CWT = registry. It has its own IANA
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0registry with its own experts and= such. Seems like the
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0coupling / factoring is about rig= ht.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0This would also be the way I=E2= =80=99d like to have it in EAT
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0attestation. We=E2=80=99ve done a= mini version of this with the
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0location claim
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<= https://gcc01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.i= etf.org%2Fhtml%2Fdraft-ietf-rats-eat-01%23section-3.8&data=3D02%7C01%7C= david.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8= fa4797a93e054655c61dec%7C1%7C1%7C637098991070426961&sdata=3D%2Fhi008Am2= dlY6tBQHdPVVGZzEcWNmqd5MvgPOM14jE8%3D&reserved=3D0>.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Then if you just want to sign a C= oSWID CWT style, this works
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0pretty well too. It has a slight = overhead compared to having
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0all the CoSWID data items as dire= ct CWT claims in that it will
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0have an additional map layer, but= that is only about three bytes.
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0LL
>>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0_________________________________= ______________
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RATS mailing list
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0RATS@ietf.org <mailto:RATS@ietf.org>
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf= .org/mailman/listinfo/rats
>>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<https://gcc01.safeli= nks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Fli= stinfo%2Frats&data=3D02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd= 8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C6370989= 91070426961&sdata=3DfdpXMIU%2BNkMSn3RJ4X5AsSuMU7pbokHXltsX8ZYP9E0%3D&am= p;reserved=3D0>
>>
>>=C2=A0 =C2=A0 =C2=A0_______________________________________________=
>>=C2=A0 =C2=A0 =C2=A0sacm mailing list
>>=C2=A0 =C2=A0 =C2=A0sacm@ietf.org <mailto:sacm@ietf.org>
>>=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/l= istinfo/sacm
>>=C2=A0 =C2=A0 =C2=A0<https://gcc01.safelinks.protecti= on.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsac= m&data=3D02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608= d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070436893&= amp;sdata=3DokSPAqVHj9KBxPtViQdnffsfhlMF4t0%2F87PXXY78fA0%3D&reserved= =3D0>
>>
>>
>>
>> --
>>
>> Best regards,
>> Kathleen
>
> _______________________________________________
> sacm mailing list
> sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm
>


--

Best regards,
Kathleen
--0000000000000ee1220597f391cd-- From nobody Fri Nov 22 11:39:46 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 154B5120872; Fri, 22 Nov 2019 11:39:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.898 X-Spam-Level: X-Spam-Status: No, score=-6.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rutqiMIGfT0B; Fri, 22 Nov 2019 11:39:40 -0800 (PST) Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 848FA120819; Fri, 22 Nov 2019 11:39:40 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 22 Nov 2019 11:39:39 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,231,1571727600"; d="scan'208,217";a="210343216" Received: from orsmsx101.amr.corp.intel.com ([10.22.225.128]) by orsmga003.jf.intel.com with ESMTP; 22 Nov 2019 11:39:38 -0800 Received: from orsmsx124.amr.corp.intel.com (10.22.240.120) by ORSMSX101.amr.corp.intel.com (10.22.225.128) with Microsoft SMTP Server (TLS) id 14.3.439.0; Fri, 22 Nov 2019 11:39:38 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX124.amr.corp.intel.com ([169.254.2.83]) with mapi id 14.03.0439.000; Fri, 22 Nov 2019 11:39:38 -0800 From: "Smith, Ned" To: Kathleen Moriarty , Henk Birkholz CC: "suit@ietf.org" , sacm , "rats@ietf.org" , Laurence Lundblade , Ira McDonald , "Waltermire, David A. (Fed)" Thread-Topic: [Rats] [sacm] CoSWID and EAT and CWT Thread-Index: AQHVoVdERUlUpfZbOEKEXvzBDRBA7aeYCEIA//+ONYA= Date: Fri, 22 Nov 2019 19:39:38 +0000 Message-ID: <65CFC5E3-1B46-4235-B4F4-692F475AC80F@intel.com> References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.24.10.124] Content-Type: multipart/alternative; boundary="_000_65CFC5E31B464235B4F4692F475AC80Fintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Nov 2019 19:39:44 -0000 --_000_65CFC5E31B464235B4F4692F475AC80Fintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVnYXJkaW5nIGlzc3VlIDQ2IChsaW5rIGJlbG93KSwgdGhlIHByb3Bvc2VkICg5KSBjbGFpbXMg ZGlzdGluZ3Vpc2ggYmV0d2VlbiBFdmlkZW5jZSwg4oCcUGF5bG9hZOKAnSBhbmQgU1VJVCBNYW5p ZmVzdCB2YXJpYXRpb25zLiBFdmlkZW5jZSBpcyBkZWZpbmVkIGJ5IFJBVFMgYXJjaGl0ZWN0dXJl LCBTVUlUIE1hbmlmZXN0IGJ5IFNVSVQgV0csIGJ1dCBub3Qgc3VyZSB3aGVyZSDigJxQYXlsb2Fk 4oCdIGlzIGRlZmluZWQgYW5kIGhvdyBpdCBkaWZmZXJzIGZyb20gRXZpZGVuY2UuIFBvc3NpYmx5 IDggY2xhaW1zIGNhbiBiZSBjb2xsYXBzZWQgaW50byA0Pw0KDQpGcm9tOiBSQVRTIDxyYXRzLWJv dW5jZXNAaWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBLYXRobGVlbiBNb3JpYXJ0eSA8a2F0aGxlZW4u bW9yaWFydHkuaWV0ZkBnbWFpbC5jb20+DQpEYXRlOiBGcmlkYXksIE5vdmVtYmVyIDIyLCAyMDE5 IGF0IDEwOjI3IEFNDQpUbzogSGVuayBCZXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5o b2Zlci5kZT4NCkNjOiAic3VpdEBpZXRmLm9yZyIgPHN1aXRAaWV0Zi5vcmc+LCBzYWNtIDxzYWNt QGlldGYub3JnPiwgInJhdHNAaWV0Zi5vcmciIDxyYXRzQGlldGYub3JnPiwgTGF1cmVuY2UgTHVu ZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+LCBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVz aWNAZ21haWwuY29tPiwgImRhdmlkLndhbHRlcm1pcmVAbmlzdC5nb3YiIDxkYXZpZC53YWx0ZXJt aXJlQG5pc3QuZ292Pg0KU3ViamVjdDogUmU6IFtSYXRzXSBbc2FjbV0gQ29TV0lEIGFuZCBFQVQg YW5kIENXVA0KDQpIaSBIZW5rLA0KDQpJIGFtIG5vdCBlbnRpcmVseSBmb2xsb3dpbmcgeW91LCBz byBJIGFtIG5vdCBzdGF0aW5nIGFncmVlbWVudCB5ZXQuDQoNCk9uIEZyaSwgTm92IDIyLCAyMDE5 IGF0IDEyOjA2IFBNIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIu ZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+PiB3cm90ZToNCkhpIEth dGhsZWVuLA0KaGkgU0FDTSwgU1VJVCAmIFJBVFMgbGlzdCwNCg0KdGhlIGNvcnJlc3BvbmRpbmcg KlNXSUQgYXV0aG9ycyBkaXNjdXNzZWQgdGhpcyBpc3N1ZSBhbmQgYXJlIHByb3Bvc2luZzoNCg0K PiBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzLXdnL2VhdC9pc3N1ZXMvNDYNCg0KVGhpcyBp bmNsdWRlcyBhbiBleHRlbmRlZCBzY29wZSB0byBpbmNsdWRlIHRoZSBvcHRpb24gb2YgU1VJVCBN YW5pZmVzdA0KcmVsYXRlZCBDbGFpbSB2YWx1ZXMsIG5leHQgdG8gdmFyaW91cyAqU1dJRCBDbGFp bSB2YWx1ZXMuIFdlIHBlcm11dGF0ZWQNCiJzaWduZWQiICYgIm5vdC1zaWduZWQiIGFzIHdlbGwg YXMgInBheWxvYWQgdGFncyIgYW5kICJldmlkZW5jZSB0YWdzIg0KZm9yICpTV0lEIHRhZ3MgaW4g dGhpcyBwcm9wb3NhbC4gVGhlIGF1dGhvcnMgYXJlIGNvbnZpbmNlZCB0aGF0IHRoZQ0KIm5vdC1z aWduZWQiIHZhcmlhbnRzIGFyZSBvZiBlc3NlbmNlIChhcyBDV1QgZG9lcyBub3QgYWxsb3cgIm5v dC1zaWduZWQNCkNCT1IgaXRlbXMiLCBidXQgYWxzbyBkbyBub3QgaW1wbHkgYW55IGltcGxpY2F0 aW9ucyB0byB0aGUgU1VJVCBNYW5pZmVzdA0KQ2xhaW0gZGVmaW5pdGlvbiAoYWx0aG91Z2ggdGhl cmUgYXJlIHN0cm9uZyBzaW1pbGFyaXRpZXMgYW5kIHRoZXJlIGNvdWxkDQpiZSBzb21lKS4NCg0K Q2FuIHlvdSB3cml0ZSB0aGUgYWJvdmUgYWdhaW4/ICBBcmUgeW91IHNheWluZyB0aGlzIGluIHRl cm1zIG9mIGEgQ1dUPyAgV291bGRuJ3QgdGhlIGNsYWltcyBhbmQgdGhlIHRleHQgdmFsdWUgaW4g YSBDV1QgYmUgcmVwcmVzZW50ZWQgYXMtaXMsIHRoZW4gc2lnbmVkLCBzbyB5b3UnZCBnZXQgd2hh dCB5b3UgYXJlIHNheWluZyBpcyBuZWVkZWQ/DQoNClRoZSBjdXJyZW50ICpTV0lEIGNvbnRyaWJ1 dG9ycyBwcmVmZXIgdGhpcyBjb250cmlidXRpb24gYXMgYSBwYXJhbGxlbA0KZWZmb3J0IHRvIHRo ZSBFQVQgSS1ELCBTVUlUIE1hbmlmZXN0IEktRCwgdGhlIENvU1dJRCBJLUQgYW5kIGV4aXN0aW5n DQpJU08gWE1MIFNXSUQgc3RhbmRhcmQuIFRoaXMgcHJvcG9zYWwgaW5jbHVkZXMgdGhlIHByaW1p dGl2ZSB0byBub3QgZGVsYXkNCmNvcnJlc3BvbmRpbmcgSUVURyBJLUQgaW4gdGhlaXIgcmVzcGVj dGl2ZSBXR3MuDQoNCkFyZSB5b3Ugc2F5aW5nIHlvdSBkb24ndCB3YW50IHRvIGFkZCB0ZXh0IHN0 YXRpbmcgdGhlIHVzZSBvZiBhIENXVCBpcyBhIHBvc3NpYmxlIGFsdGVybmF0aXZlLCBhcyB0aGF0 IGlzIHdoYXQgd2FzIHJlcXVlc3RlZC4gIEkgb2ZmZXJlZCB0byB3cml0ZSBhIHNlcGFyYXRlIGRv Y3VtZW50IHRvIHB1dCB0aGUgQ29TV0lEIGluIGEgQ1dUIGluIFNBQ00gYXMgSSB0aGluayB0aGF0 J3MgdGhlIHJpZ2h0IGhvbWUsIHJlZmVyZW5jaW5nIEVBVCB3b3JrLg0KDQpIYXZpbmcgc2FpZCB0 aGF0LCB3ZSB3b3VsZCBsaWtlIHRvIGdldCBmZWVkYmFjayBmb3IgdGhlIHByb3Bvc2FsDQpyZWZl cmVuY2VzIGFib3ZlLg0KDQpJZiB0aGVyZSBpcyBubyBkaXNzZW50IG9yIHB1c2gtYmFjayBvbiBl aXRoZXIgdGhlIFNVSVQsIFNBQ00sIGFuZCBSQVRTDQpsaXN0cywgb3VyIHByb3Bvc2VkIHdheSBm b3J3YXJkIGlzIGEgdW5pZmllZCBjcmVhdGlvbiBvZiBFQVQgQ2xhaW0gU2V0cw0KaW4gdGhlIFJB VFMgV0cgdGhhdCBlbmFibGVzIHRoZSB1c2Ugb2YgdmFyaW91cyAqU1dJRCB2YXJpYW50cyAmIHRo ZSBTVUlUDQpNYW5pZmVzdCBhcyBwYXlsb2FkcyBmb3IgUkFUUyB2aWEgdGhlIFJBVFMgRUFUIEkt RC4NCg0KSSB0aGluayB0aGlzIHNob3VsZCBiZSBpbiBTQUNNLiAgQW5kIEkndmUgb2ZmZXJlZCB0 byBoZWxwLiAgSSBkbyB0aGluayB0aGF0IGEgbGl0dGxlIHRleHQgc2F5aW5nIGl0J3MgcG9zc2li bGUgc2hvdWxkIGJlIGluIHRoZSBDb1NXSUQgZHJhZnQgYW5kIHdpbGwgcHJvdmlkZSB0aGF0IHNv b24gYXMgbm90IHRvIGRlbGF5IHByb2dyZXNzIG9mIHRoZSBDb1NXSUQgZG9jdW1lbnQuDQoNCkJl c3QgcmVnYXJkcywNCkthdGhsZWVuDQoNCkluIHN1bW1hcnksIHdlIHdvdWxkIGxpa2UgdG8gY3Jl YXRlIHRoaXMgaW50ZXJvcCBJLUQgaW4gY29uY2VydCBhbmQNCndlbGNvbWUgZXZlcnkgam9pbnQg ZWZmb3J0IGluIHRoaXMgZG9tYWluLg0KDQpWaWVsZSBHcsO8w59lLA0KDQpIZW5rDQoNCk9uIDIx LjExLjE5IDEyOjM3LCBLYXRobGVlbiBNb3JpYXJ0eSB3cm90ZToNCj4NCj4NCj4gU2VudCBmcm9t IG15IG1vYmlsZSBkZXZpY2UNCj4NCj4+IE9uIE5vdiAyMCwgMjAxOSwgYXQgMTE6MjkgUE0sIFdh bHRlcm1pcmUsIERhdmlkIEEuIChGZWQpDQo+PiA8ZGF2aWQud2FsdGVybWlyZUBuaXN0Lmdvdjxt YWlsdG86ZGF2aWQud2FsdGVybWlyZUBuaXN0Lmdvdj4+IHdyb3RlOg0KPj4NCj4+DQo+PiBJdCBz b3VuZHMgbGlrZSBoYXZpbmcgYSBDV1QgY2xhaW0gdGhhdCBjb250YWlucyBhbiBlbnRpcmUgQ29T V0lEIGlzIGENCj4+IHBhdGggZm9yd2FyZC4gSXQgbWF5IGFsc28gbWFrZSBzZW5zZSB0byBkbyBz b21ldGhpbmcgc2ltaWxhciBmb3IgSVNPDQo+PiBTV0lEIHRhZ3MuDQo+Pg0KPj4gQW0gSSByaWdo dCBpbiB0aGlua2luZyB0aGF0IHRoaXMgQ1dUIHdvcmsgY2FuIGJlIGRvbmUgaW4gUkFUUywNCj4+ IHJlZmVyZW5jaW5nIENvU1dJRCBvbmNlIGl0IGlzIHB1Ymxpc2hlZCBhcyBhIG5vcm1hdGl2ZSBy ZWZlcmVuY2U/IFRoaXMNCj4+IHdvdWxkIGFsbG93IENvU1dJRCB0byBnbyBmb3J3YXJkIHRvIHRo ZSBJRVNHLCB3aGlsZSB0aGUgQ29TV0lEIENXVA0KPj4gY2xhaW0gaXMgd29ya2VkIGluIHBhcmFs bGVsIGluIFJBVFMuDQo+Pg0KPj4gS2F0aGxlZW4sIGlmIHRoaXMgaXMgdHJ1ZSwgZG9lcyB0aGlz IHdheSBmb3J3YXJkIGFkZHJlc3MgeW91cg0KPj4gQ1dULXJlbGF0ZWQgY29tbWVudHM/DQo+DQo+ IEhpIERhdmUsDQo+DQo+IEkgdGhpbmsgdGhlIHNpZ25hdHVyZSBtYXkgaGF2ZSB0byBiZSBvbiB0 aGUgQ1dUIGFzIG9wcG9zZWQgdG8gb24gdGhlDQo+IGNsYWltIHRoYXQgaXMgdGhlIENvU1dJRCBv ciBTV0lELiAgV2UgY2FuIGRlZmluZSBpdCBmdWxseSBpbiBhbm90aGVyDQo+IGRyYWZ0LCBidXQg c2hvdWxkIHN0YXRlIGl0IGhlcmUgc28gdGhhdCBvcHRpb24gaXMgdW5kZXJzdG9vZC4gIEl04oCZ cyBhDQo+IHNpbXBsZSB3cml0ZSB1cCwgSSB0aGluay4NCj4NCj4gVGhhbmsgeW91LA0KPiBLYXRo bGVlbg0KPj4NCj4+IFJlZ2FyZHMsDQo+PiBEYXZlDQo+Pg0KPj4NCj4+DQo+Pg0KPj4NCj4+IC0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KPj4gKkZyb206KiBzYWNtIDxzYWNtLWJvdW5jZXNAaWV0Zi5vcmc8bWFp bHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBLYXRobGVlbiBNb3JpYXJ0 eQ0KPj4gPGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPG1haWx0bzprYXRobGVlbi5t b3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4+DQo+PiAqU2VudDoqIFdlZG5lc2RheSwgTm92ZW1iZXIg MjAsIDIwMTkgOToxMCBQTQ0KPj4gKlRvOiogSXJhIE1jRG9uYWxkIDxibHVlcm9vZm11c2ljQGdt YWlsLmNvbTxtYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+Pg0KPj4gKkNjOiogcmF0c0Bp ZXRmLi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+IDxyYXRzQGlldGYub3JnPG1haWx0bzpyYXRz QGlldGYub3JnPj47IHNhY20gPHNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5vcmc+Pjsg TGF1cmVuY2UNCj4+IEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xA aXNsYW5kLXJlc29ydC5jb20+Pg0KPj4gKlN1YmplY3Q6KiBSZTogW3NhY21dIFtSYXRzXSBDb1NX SUQgYW5kIEVBVCBhbmQgQ1dUDQo+PiBHcmVhdCwgdGhhbmtzIExhdXJlbmNlLiAgSWYgdGhhdCdz IGVhc2llciBJIHRoaW5rIGhhdmluZyB0aGUgQ29TV0lEIGluDQo+PiBvbmUgY2xhaW0gc2hvdWxk IGJlIG9rIGFuZCB3b3VsZCBoYXZlIHRoZSBzYW1lIHJlc3VsdCBhcyB0aGUNCj4+IHN1Z2dlc3Rp b24gSSBtYWRlLiAgQ2hhbmdpbmcgdGhlIENvU1dJRCBmb3JtYXQgaXMgYSBiaWcgZW5vdWdoIHBy b2Nlc3MNCj4+IHRoYXQgaXQgc2hvdWxkbid0IGhhcHBlbiB2ZXJ5IG9mdGVuLg0KPj4NCj4+IEJl c3QgcmVnYXJkcywNCj4+IEthdGhsZWVuDQo+Pg0KPj4gT24gV2VkLCBOb3YgMjAsIDIwMTkgYXQg ODowMCBQTSBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVzaWNAZ21haWwuY29tPG1haWx0bzpibHVl cm9vZm11c2ljQGdtYWlsLmNvbT4NCj4+IDxtYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208 bWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tPj4+IHdyb3RlOg0KPj4NCj4+ICAgICBIaSBM YXVyZW5jZSwNCj4+DQo+PiAgICAgVGhhdCBzZWVtcyBsaWtlIGEgZ29vZCBzdWdnZXN0aW9uIGZv ciBhIHNpbXBsZSB3YXkgdG8gaW50ZWdyYXRlDQo+PiAgICAgQ29TV0lEIGNvbnRlbnQNCj4+ICAg ICBpbnRvIEVBVC4NCj4+DQo+PiAgICAgQ2hlZXJzLA0KPj4gICAgIC0gSXJhDQo+Pg0KPj4gICAg IElyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBBcmNoaXRlY3QpDQo+PiAgICAgQ28t Q2hhaXIgLSBUQ0cgVHJ1c3RlZCBNb2JpbGl0eSBTb2x1dGlvbnMgV0cNCj4+ICAgICBDby1DaGFp ciAtIFRDRyBNZXRhZGF0YSBBY2Nlc3MgUHJvdG9jb2wgU0cNCj4+ICAgICBDaGFpciAtIExpbnV4 IEZvdW5kYXRpb24gT3BlbiBQcmludGluZyBXRw0KPj4gICAgIFNlY3JldGFyeSAtIElFRUUtSVNU TyBQcmludGVyIFdvcmtpbmcgR3JvdXANCj4+ICAgICBDby1DaGFpciAtIElFRUUtSVNUTyBQV0cg SW50ZXJuZXQgUHJpbnRpbmcgUHJvdG9jb2wgV0cNCj4+ICAgICBJRVRGIERlc2lnbmF0ZWQgRXhw ZXJ0IC0gSVBQICYgUHJpbnRlciBNSUINCj4+ICAgICBCbHVlIFJvb2YgTXVzaWMgLyBIaWdoIE5v cnRoIEluYw0KPj4gICAgIGh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNp Yw0KPj4gICAgIDxodHRwczovL2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cCUzQSUyRiUyRnNpdGVzLmdvb2dsZS5jb20lMkZzaXRlJTJGYmx1ZXJvb2ZtdXNp YyZkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M5MmEyZGNiYWRk OGQ0NzY2MWI5NjA4ZDc2ZTI4Mjg0NyU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVj JTdDMSU3QzElN0M2MzcwOTg5OTEwNzA0MTcwMDYmc2RhdGE9R0RJVlZJZXN2cXFYbnVVNlR0TGJL N0dKNGVJMWIxRWNZU1BvWHNIbGowNCUzRCZyZXNlcnZlZD0wPg0KPj4gICAgIGh0dHA6Ly9zaXRl cy5nb29nbGUuY29tL3NpdGUvaGlnaG5vcnRoaW5jDQo+PiAgICAgPGh0dHBzOi8vZ2NjMDEuc2Fm ZWxpbmtzLnByb3RlY3Rpb24uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnNpdGVzLmdv b2dsZS5jb20lMkZzaXRlJTJGaGlnaG5vcnRoaW5jJmRhdGE9MDIlN0MwMSU3Q2RhdmlkLndhbHRl cm1pcmUlNDBuaXN0LmdvdiU3QzkyYTJkY2JhZGQ4ZDQ3NjYxYjk2MDhkNzZlMjgyODQ3JTdDMmFi NWQ4MmZkOGZhNDc5N2E5M2UwNTQ2NTVjNjFkZWMlN0MxJTdDMSU3QzYzNzA5ODk5MTA3MDQxNzAw NiZzZGF0YT03eiUyQm9NY1lTU0ZEOGhBWUhtRUxxTm95R0F4VEJFOWdrbmJWNmtBektXWDglM0Qm cmVzZXJ2ZWQ9MDxodHRwOi8vb3V0bG9vay5jb20vP3VybD1odHRwJTNBJTJGJTJGc2l0ZXMuZ29v Z2xlLmNvbSUyRnNpdGUlMkZoaWdobm9ydGhpbmMmZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVy bWlyZSU0MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1 ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MxJTdDNjM3MDk4OTkxMDcwNDE3MDA2 JnNkYXRhPTd6JTJCb01jWVNTRkQ4aEFZSG1FTHFOb3lHQXhUQkU5Z2tuYlY2a0F6S1dYOCUzRCZy ZXNlcnZlZD0wPj4NCj4+ICAgICBtYWlsdG86IGJsdWVyb29mbXVzaWNAZ21haWwuY29tPG1haWx0 bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4gPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNv bTxtYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+Pg0KPj4gICAgIFBPIEJveCAyMjEgIEdy YW5kIE1hcmFpcywgTUkgNDk4MzkgIDkwNi00OTQtMjQzNA0KPj4NCj4+DQo+Pg0KPj4gICAgIE9u IFdlZCwgTm92IDIwLCAyMDE5IGF0IDc6MzUgUE0gTGF1cmVuY2UgTHVuZGJsYWRlDQo+PiAgICAg PGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPiA8bWFp bHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4+ IHdyb3RlOg0KPj4NCj4+ICAgICAgICAgSGksDQo+Pg0KPj4gICAgICAgICBJ4oCZbSBub3Qgb24g dGhlIFNBQ00gbGlzdCwgYnV0IGRpZCBsb29rIGF0IHRoZSBhcmNoaXZlLg0KPj4gICAgICAgICBI b3BlZnVsbHkgSeKAmW0gbm90IG91dCBvZiBzeW5jLg0KPj4NCj4+ICAgICAgICAgTXkgdGhvdWdo dCBpcyB0byByZWdpc3RlciBvbmUgY2xhaW0gZm9yIENXVCB0aGF0IGlzIGFuIGVudGlyZQ0KPj4g ICAgICAgICBDb1NXSUQgKGluIENEREwgdGhlIGNvbmNpc2Utc3dpZC10YWcpLg0KPj4NCj4+ICAg ICAgICAgVGhhdCB3YXkgQ29TV0lEIGNhbiBncm93IGFuZCBkZXZlbG9wIG9uIGl0cyBvd24gd2l0 aG91dCBsb3RzDQo+PiAgICAgICAgIG9mIGFkZHMgYW5kIHN1YnRyYWN0cyB0byB0aGUgQ1dUIHJl Z2lzdHJ5LiBJdCBoYXMgaXRzIG93biBJQU5BDQo+PiAgICAgICAgIHJlZ2lzdHJ5IHdpdGggaXRz IG93biBleHBlcnRzIGFuZCBzdWNoLiBTZWVtcyBsaWtlIHRoZQ0KPj4gICAgICAgICBjb3VwbGlu ZyAvIGZhY3RvcmluZyBpcyBhYm91dCByaWdodC4NCj4+DQo+PiAgICAgICAgIFRoaXMgd291bGQg YWxzbyBiZSB0aGUgd2F5IEnigJlkIGxpa2UgdG8gaGF2ZSBpdCBpbiBFQVQNCj4+ICAgICAgICAg YXR0ZXN0YXRpb24uIFdl4oCZdmUgZG9uZSBhIG1pbmkgdmVyc2lvbiBvZiB0aGlzIHdpdGggdGhl DQo+PiAgICAgICAgIGxvY2F0aW9uIGNsYWltDQo+PiAgICAgICAgIDxodHRwczovL2djYzAxLnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0b29scy5p ZXRmLm9yZyUyRmh0bWwlMkZkcmFmdC1pZXRmLXJhdHMtZWF0LTAxJTIzc2VjdGlvbi0zLjgmZGF0 YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2 NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzEl N0MxJTdDNjM3MDk4OTkxMDcwNDI2OTYxJnNkYXRhPSUyRmhpMDA4QW0yZGxZNnRCUUhkUFZWR1p6 RWNXTm1xZDVNdmdQT00xNGpFOCUzRCZyZXNlcnZlZD0wPi4NCj4+DQo+PiAgICAgICAgIFRoZW4g aWYgeW91IGp1c3Qgd2FudCB0byBzaWduIGEgQ29TV0lEIENXVCBzdHlsZSwgdGhpcyB3b3Jrcw0K Pj4gICAgICAgICBwcmV0dHkgd2VsbCB0b28uIEl0IGhhcyBhIHNsaWdodCBvdmVyaGVhZCBjb21w YXJlZCB0byBoYXZpbmcNCj4+ICAgICAgICAgYWxsIHRoZSBDb1NXSUQgZGF0YSBpdGVtcyBhcyBk aXJlY3QgQ1dUIGNsYWltcyBpbiB0aGF0IGl0IHdpbGwNCj4+ICAgICAgICAgaGF2ZSBhbiBhZGRp dGlvbmFsIG1hcCBsYXllciwgYnV0IHRoYXQgaXMgb25seSBhYm91dCB0aHJlZSBieXRlcy4NCj4+ DQo+PiAgICAgICAgIExMDQo+Pg0KPj4gICAgICAgICBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPj4gICAgICAgICBSQVRTIG1haWxpbmcgbGlzdA0KPj4g ICAgICAgICBSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPiA8bWFpbHRvOlJBVFNA aWV0Zi5vcmc8bWFpbHRvOlJBVFNAaWV0Zi5vcmc+Pg0KPj4gICAgICAgICBodHRwczovL3d3dy5p ZXRmLi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vcmF0cz4NCj4+ICAgICAgICAgPGh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnBy b3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1h aWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0 MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4 ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MxJTdDNjM3MDk4OTkxMDcwNDI2OTYxJnNkYXRh PWZkcFhNSVUlMkJOa01TbjNSSjRYNUFzU3VNVTdwYm9rSFhsdHNYOFpZUDlFMCUzRCZyZXNlcnZl ZD0wPg0KPj4NCj4+ICAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KPj4gICAgIHNhY20gbWFpbGluZyBsaXN0DQo+PiAgICAgc2FjbUBpZXRmLm9yZzxt YWlsdG86c2FjbUBpZXRmLm9yZz4gPG1haWx0bzpzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGll dGYub3JnPj4NCj4+ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Nh Y20NCj4+ICAgICA8aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv bS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJG c2FjbSZkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M5MmEyZGNi YWRkOGQ0NzY2MWI5NjA4ZDc2ZTI4Mjg0NyU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYx ZGVjJTdDMSU3QzElN0M2MzcwOTg5OTEwNzA0MzY4OTMmc2RhdGE9b2tTUEFxVkhqOUtCeFB0VmlR ZG5mZnNmaGxNRjR0MCUyRjg3UFhYWTc4ZkEwJTNEJnJlc2VydmVkPTA+DQo+Pg0KPj4NCj4+DQo+ PiAtLQ0KPj4NCj4+IEJlc3QgcmVnYXJkcywNCj4+IEthdGhsZWVuDQo+DQo+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IHNhY20gbWFpbGluZyBsaXN0 DQo+IHNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5vcmc+DQo+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbQ0KPg0KDQoNCi0tDQoNCkJlc3QgcmVnYXJkcywN CkthdGhsZWVuDQo= --_000_65CFC5E31B464235B4F4692F475AC80Fintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNv bm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6 bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30N CkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4g MS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9u MTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUi IHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlJlZ2FyZGluZyBpc3N1ZSA0NiAobGluayBiZWxvdyksIHRoZSBwcm9wb3NlZCAo OSkgY2xhaW1zIGRpc3Rpbmd1aXNoIGJldHdlZW4gRXZpZGVuY2UsIOKAnFBheWxvYWTigJ0gYW5k IFNVSVQgTWFuaWZlc3QgdmFyaWF0aW9ucy4gRXZpZGVuY2UgaXMgZGVmaW5lZCBieSBSQVRTIGFy Y2hpdGVjdHVyZSwgU1VJVCBNYW5pZmVzdCBieSBTVUlUIFdHLCBidXQgbm90IHN1cmUgd2hlcmUg 4oCcUGF5bG9hZOKAnSBpcyBkZWZpbmVkIGFuZA0KIGhvdyBpdCBkaWZmZXJzIGZyb20gRXZpZGVu Y2UuIFBvc3NpYmx5IDggY2xhaW1zIGNhbiBiZSBjb2xsYXBzZWQgaW50byA0PzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzoz LjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZy b206DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNr Ij5SQVRTICZsdDtyYXRzLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBLYXRobGVl biBNb3JpYXJ0eSAmbHQ7a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20mZ3Q7PGJyPg0K PGI+RGF0ZTogPC9iPkZyaWRheSwgTm92ZW1iZXIgMjIsIDIwMTkgYXQgMTA6MjcgQU08YnI+DQo8 Yj5UbzogPC9iPkhlbmsgQmVya2hvbHogJmx0O2hlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIu ZGUmZ3Q7PGJyPg0KPGI+Q2M6IDwvYj4mcXVvdDtzdWl0QGlldGYub3JnJnF1b3Q7ICZsdDtzdWl0 QGlldGYub3JnJmd0Oywgc2FjbSAmbHQ7c2FjbUBpZXRmLm9yZyZndDssICZxdW90O3JhdHNAaWV0 Zi5vcmcmcXVvdDsgJmx0O3JhdHNAaWV0Zi5vcmcmZ3Q7LCBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0 O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDssIElyYSBNY0RvbmFsZCAmbHQ7Ymx1ZXJvb2ZtdXNp Y0BnbWFpbC5jb20mZ3Q7LCAmcXVvdDtkYXZpZC53YWx0ZXJtaXJlQG5pc3QuZ292JnF1b3Q7ICZs dDtkYXZpZC53YWx0ZXJtaXJlQG5pc3QuZ292Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTog W1JhdHNdIFtzYWNtXSBDb1NXSUQgYW5kIEVBVCBhbmQgQ1dUPG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5IaSBIZW5rLCA8bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSBhbSBub3QgZW50aXJlbHkgZm9sbG93 aW5nIHlvdSwgc28gSSBhbSBub3Qgc3RhdGluZyBhZ3JlZW1lbnQgeWV0LjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIEZyaSwgTm92IDIyLCAyMDE5IGF0 IDEyOjA2IFBNIEhlbmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmtob2x6 QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SGkgS2F0aGxlZW4sPGJyPg0KaGkg U0FDTSwgU1VJVCAmYW1wOyBSQVRTIGxpc3QsPGJyPg0KPGJyPg0KdGhlIGNvcnJlc3BvbmRpbmcg KlNXSUQgYXV0aG9ycyBkaXNjdXNzZWQgdGhpcyBpc3N1ZSBhbmQgYXJlIHByb3Bvc2luZzo8YnI+ DQo8YnI+DQomZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMtd2cvZWF0 L2lzc3Vlcy80NiIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMt d2cvZWF0L2lzc3Vlcy80NjwvYT48YnI+DQo8YnI+DQpUaGlzIGluY2x1ZGVzIGFuIGV4dGVuZGVk IHNjb3BlIHRvIGluY2x1ZGUgdGhlIG9wdGlvbiBvZiBTVUlUIE1hbmlmZXN0IDxicj4NCnJlbGF0 ZWQgQ2xhaW0gdmFsdWVzLCBuZXh0IHRvIHZhcmlvdXMgKlNXSUQgQ2xhaW0gdmFsdWVzLiBXZSBw ZXJtdXRhdGVkIDxicj4NCiZxdW90O3NpZ25lZCZxdW90OyAmYW1wOyAmcXVvdDtub3Qtc2lnbmVk JnF1b3Q7IGFzIHdlbGwgYXMgJnF1b3Q7cGF5bG9hZCB0YWdzJnF1b3Q7IGFuZCAmcXVvdDtldmlk ZW5jZSB0YWdzJnF1b3Q7IDxicj4NCmZvciAqU1dJRCB0YWdzIGluIHRoaXMgcHJvcG9zYWwuIFRo ZSBhdXRob3JzIGFyZSBjb252aW5jZWQgdGhhdCB0aGUgPGJyPg0KJnF1b3Q7bm90LXNpZ25lZCZx dW90OyB2YXJpYW50cyBhcmUgb2YgZXNzZW5jZSAoYXMgQ1dUIGRvZXMgbm90IGFsbG93ICZxdW90 O25vdC1zaWduZWQgPGJyPg0KQ0JPUiBpdGVtcyZxdW90OywgYnV0IGFsc28gZG8gbm90IGltcGx5 IGFueSBpbXBsaWNhdGlvbnMgdG8gdGhlIFNVSVQgTWFuaWZlc3QgPGJyPg0KQ2xhaW0gZGVmaW5p dGlvbiAoYWx0aG91Z2ggdGhlcmUgYXJlIHN0cm9uZyBzaW1pbGFyaXRpZXMgYW5kIHRoZXJlIGNv dWxkIDxicj4NCmJlIHNvbWUpLjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5DYW4geW91IHdyaXRlIHRoZSBhYm92ZSBhZ2Fpbj8mbmJzcDsgQXJl IHlvdSBzYXlpbmcgdGhpcyBpbiB0ZXJtcyBvZiBhIENXVD8mbmJzcDsgV291bGRuJ3QgdGhlIGNs YWltcyBhbmQgdGhlIHRleHQgdmFsdWUgaW4gYSBDV1QgYmUgcmVwcmVzZW50ZWQgYXMtaXMsIHRo ZW4gc2lnbmVkLCBzbyB5b3UnZCBnZXQgd2hhdCB5b3UgYXJlIHNheWluZyBpcyBuZWVkZWQ/Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJyPg0KVGhlIGN1cnJlbnQgKlNXSUQgY29u dHJpYnV0b3JzIHByZWZlciB0aGlzIGNvbnRyaWJ1dGlvbiBhcyBhIHBhcmFsbGVsIDxicj4NCmVm Zm9ydCB0byB0aGUgRUFUIEktRCwgU1VJVCBNYW5pZmVzdCBJLUQsIHRoZSBDb1NXSUQgSS1EIGFu ZCBleGlzdGluZyA8YnI+DQpJU08gWE1MIFNXSUQgc3RhbmRhcmQuIFRoaXMgcHJvcG9zYWwgaW5j bHVkZXMgdGhlIHByaW1pdGl2ZSB0byBub3QgZGVsYXkgPGJyPg0KY29ycmVzcG9uZGluZyBJRVRH IEktRCBpbiB0aGVpciByZXNwZWN0aXZlIFdHcy48bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90 ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QXJlIHlvdSBzYXlpbmcgeW91IGRvbid0IHdhbnQg dG8gYWRkIHRleHQgc3RhdGluZyB0aGUgdXNlIG9mIGEgQ1dUIGlzIGEgcG9zc2libGUgYWx0ZXJu YXRpdmUsIGFzIHRoYXQgaXMgd2hhdCB3YXMgcmVxdWVzdGVkLiZuYnNwOyBJIG9mZmVyZWQgdG8g d3JpdGUgYSBzZXBhcmF0ZSBkb2N1bWVudCB0byBwdXQgdGhlIENvU1dJRCBpbiBhIENXVCBpbiBT QUNNIGFzIEkgdGhpbmsNCiB0aGF0J3MgdGhlIHJpZ2h0IGhvbWUsIHJlZmVyZW5jaW5nIEVBVCB3 b3JrLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxicj4NCkhhdmluZyBzYWlkIHRo YXQsIHdlIHdvdWxkIGxpa2UgdG8gZ2V0IGZlZWRiYWNrIGZvciB0aGUgcHJvcG9zYWwgPGJyPg0K cmVmZXJlbmNlcyBhYm92ZS48YnI+DQo8YnI+DQpJZiB0aGVyZSBpcyBubyBkaXNzZW50IG9yIHB1 c2gtYmFjayBvbiBlaXRoZXIgdGhlIFNVSVQsIFNBQ00sIGFuZCBSQVRTIDxicj4NCmxpc3RzLCBv dXIgcHJvcG9zZWQgd2F5IGZvcndhcmQgaXMgYSB1bmlmaWVkIGNyZWF0aW9uIG9mIEVBVCBDbGFp bSBTZXRzIDxicj4NCmluIHRoZSBSQVRTIFdHIHRoYXQgZW5hYmxlcyB0aGUgdXNlIG9mIHZhcmlv dXMgKlNXSUQgdmFyaWFudHMgJmFtcDsgdGhlIFNVSVQgPGJyPg0KTWFuaWZlc3QgYXMgcGF5bG9h ZHMgZm9yIFJBVFMgdmlhIHRoZSBSQVRTIEVBVCBJLUQuPG86cD48L286cD48L3A+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgdGhpbmsgdGhpcyBzaG91bGQgYmUgaW4g U0FDTS4mbmJzcDsgQW5kIEkndmUgb2ZmZXJlZCB0byBoZWxwLiZuYnNwOyBJIGRvIHRoaW5rIHRo YXQgYSBsaXR0bGUgdGV4dCBzYXlpbmcgaXQncyBwb3NzaWJsZSBzaG91bGQgYmUgaW4gdGhlIENv U1dJRCBkcmFmdCBhbmQgd2lsbCBwcm92aWRlIHRoYXQgc29vbiBhcyBub3QgdG8gZGVsYXkgcHJv Z3Jlc3Mgb2YgdGhlIENvU1dJRCBkb2N1bWVudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+S2F0 aGxlZW4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowaW4gMGlu IDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQpJbiBzdW1tYXJ5LCB3 ZSB3b3VsZCBsaWtlIHRvIGNyZWF0ZSB0aGlzIGludGVyb3AgSS1EIGluIGNvbmNlcnQgYW5kIDxi cj4NCndlbGNvbWUgZXZlcnkgam9pbnQgZWZmb3J0IGluIHRoaXMgZG9tYWluLjxicj4NCjxicj4N ClZpZWxlIEdyw7zDn2UsPGJyPg0KPGJyPg0KSGVuazxicj4NCjxicj4NCk9uIDIxLjExLjE5IDEy OjM3LCBLYXRobGVlbiBNb3JpYXJ0eSB3cm90ZTo8YnI+DQomZ3Q7IDxicj4NCiZndDsgPGJyPg0K Jmd0OyBTZW50IGZyb20gbXkgbW9iaWxlIGRldmljZTxicj4NCiZndDsgPGJyPg0KJmd0OyZndDsg T24gTm92IDIwLCAyMDE5LCBhdCAxMToyOSBQTSwgV2FsdGVybWlyZSwgRGF2aWQgQS4gKEZlZCkg PGJyPg0KJmd0OyZndDsgJmx0OzxhIGhyZWY9Im1haWx0bzpkYXZpZC53YWx0ZXJtaXJlQG5pc3Qu Z292IiB0YXJnZXQ9Il9ibGFuayI+ZGF2aWQud2FsdGVybWlyZUBuaXN0LmdvdjwvYT4mZ3Q7IHdy b3RlOjxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsgPGJyPg0KJmd0OyZndDsgSXQgc291bmRz IGxpa2UgaGF2aW5nIGEgQ1dUIGNsYWltIHRoYXQgY29udGFpbnMgYW4gZW50aXJlIENvU1dJRCBp cyBhIDxicj4NCiZndDsmZ3Q7IHBhdGggZm9yd2FyZC4gSXQgbWF5IGFsc28gbWFrZSBzZW5zZSB0 byBkbyBzb21ldGhpbmcgc2ltaWxhciBmb3IgSVNPIDxicj4NCiZndDsmZ3Q7IFNXSUQgdGFncy48 YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7IEFtIEkgcmlnaHQgaW4gdGhpbmtpbmcgdGhhdCB0 aGlzIENXVCB3b3JrIGNhbiBiZSBkb25lIGluIFJBVFMsIDxicj4NCiZndDsmZ3Q7IHJlZmVyZW5j aW5nIENvU1dJRCBvbmNlIGl0IGlzIHB1Ymxpc2hlZCBhcyBhIG5vcm1hdGl2ZSByZWZlcmVuY2U/ IFRoaXMgPGJyPg0KJmd0OyZndDsgd291bGQgYWxsb3cgQ29TV0lEIHRvIGdvIGZvcndhcmQgdG8g dGhlIElFU0csIHdoaWxlIHRoZSBDb1NXSUQgQ1dUIDxicj4NCiZndDsmZ3Q7IGNsYWltIGlzIHdv cmtlZCBpbiBwYXJhbGxlbCBpbiBSQVRTLjxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsgS2F0 aGxlZW4sIGlmIHRoaXMgaXMgdHJ1ZSwgZG9lcyB0aGlzIHdheSBmb3J3YXJkIGFkZHJlc3MgeW91 ciA8YnI+DQomZ3Q7Jmd0OyBDV1QtcmVsYXRlZCBjb21tZW50cz88YnI+DQomZ3Q7IDxicj4NCiZn dDsgSGkgRGF2ZSw8YnI+DQomZ3Q7IDxicj4NCiZndDsgSSB0aGluayB0aGUgc2lnbmF0dXJlIG1h eSBoYXZlIHRvIGJlIG9uIHRoZSBDV1QgYXMgb3Bwb3NlZCB0byBvbiB0aGUgPGJyPg0KJmd0OyBj bGFpbSB0aGF0IGlzIHRoZSBDb1NXSUQgb3IgU1dJRC4mbmJzcDsgV2UgY2FuIGRlZmluZSBpdCBm dWxseSBpbiBhbm90aGVyIDxicj4NCiZndDsgZHJhZnQsIGJ1dCBzaG91bGQgc3RhdGUgaXQgaGVy ZSBzbyB0aGF0IG9wdGlvbiBpcyB1bmRlcnN0b29kLiZuYnNwOyBJdOKAmXMgYSA8YnI+DQomZ3Q7 IHNpbXBsZSB3cml0ZSB1cCwgSSB0aGluay48YnI+DQomZ3Q7IDxicj4NCiZndDsgVGhhbmsgeW91 LDxicj4NCiZndDsgS2F0aGxlZW48YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7IFJlZ2FyZHMs PGJyPg0KJmd0OyZndDsgRGF2ZTxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7 Jmd0Ozxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyAtLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS08YnI+DQomZ3Q7Jmd0OyAqRnJvbToqIHNhY20gJmx0OzxhIGhyZWY9Im1haWx0bzpzYWNt LWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zYWNtLWJvdW5jZXNAaWV0Zi5vcmc8 L2E+Jmd0OyBvbiBiZWhhbGYgb2YgS2F0aGxlZW4gTW9yaWFydHkNCjxicj4NCiZndDsmZ3Q7ICZs dDs8YSBocmVmPSJtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20iIHRhcmdl dD0iX2JsYW5rIj5rYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7PGJyPg0K Jmd0OyZndDsgKlNlbnQ6KiBXZWRuZXNkYXksIE5vdmVtYmVyIDIwLCAyMDE5IDk6MTAgUE08YnI+ DQomZ3Q7Jmd0OyAqVG86KiBJcmEgTWNEb25hbGQgJmx0OzxhIGhyZWY9Im1haWx0bzpibHVlcm9v Zm11c2ljQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmJsdWVyb29mbXVzaWNAZ21haWwuY29t PC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyAqQ2M6KiA8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPnJhdHNAaWV0Zi4ub3JnPC9hPiAmbHQ7PGEgaHJlZj0ibWFpbHRv OnJhdHNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5yYXRzQGlldGYub3JnPC9hPiZndDs7IHNh Y20gJmx0OzxhIGhyZWY9Im1haWx0bzpzYWNtQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2Fj bUBpZXRmLm9yZzwvYT4mZ3Q7OyBMYXVyZW5jZQ0KPGJyPg0KJmd0OyZndDsgTHVuZGJsYWRlICZs dDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIiB0YXJnZXQ9Il9ibGFuayI+ bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyAqU3ViamVjdDoqIFJl OiBbc2FjbV0gW1JhdHNdIENvU1dJRCBhbmQgRUFUIGFuZCBDV1Q8YnI+DQomZ3Q7Jmd0OyBHcmVh dCwgdGhhbmtzIExhdXJlbmNlLiZuYnNwOyBJZiB0aGF0J3MgZWFzaWVyIEkgdGhpbmsgaGF2aW5n IHRoZSBDb1NXSUQgaW4gPGJyPg0KJmd0OyZndDsgb25lIGNsYWltIHNob3VsZCBiZSBvayBhbmQg d291bGQgaGF2ZSB0aGUgc2FtZSByZXN1bHQgYXMgdGhlIDxicj4NCiZndDsmZ3Q7IHN1Z2dlc3Rp b24gSSBtYWRlLiZuYnNwOyBDaGFuZ2luZyB0aGUgQ29TV0lEIGZvcm1hdCBpcyBhIGJpZyBlbm91 Z2ggcHJvY2VzcyA8YnI+DQomZ3Q7Jmd0OyB0aGF0IGl0IHNob3VsZG4ndCBoYXBwZW4gdmVyeSBv ZnRlbi48YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7IEJlc3QgcmVnYXJkcyw8YnI+DQomZ3Q7 Jmd0OyBLYXRobGVlbjxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsgT24gV2VkLCBOb3YgMjAs IDIwMTkgYXQgODowMCBQTSBJcmEgTWNEb25hbGQgJmx0OzxhIGhyZWY9Im1haWx0bzpibHVlcm9v Zm11c2ljQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmJsdWVyb29mbXVzaWNAZ21haWwuY29t PC9hPg0KPGJyPg0KJmd0OyZndDsgJmx0O21haWx0bzo8YSBocmVmPSJtYWlsdG86Ymx1ZXJvb2Zt dXNpY0BnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5ibHVlcm9vZm11c2ljQGdtYWlsLmNvbTwv YT4mZ3Q7Jmd0OyB3cm90ZTo8YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNw OyAmbmJzcDtIaSBMYXVyZW5jZSw8YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZu YnNwOyAmbmJzcDtUaGF0IHNlZW1zIGxpa2UgYSBnb29kIHN1Z2dlc3Rpb24gZm9yIGEgc2ltcGxl IHdheSB0byBpbnRlZ3JhdGU8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Q29TV0lE IGNvbnRlbnQ8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7aW50byBFQVQuPGJyPg0K Jmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Q2hlZXJzLDxicj4NCiZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDstIElyYTxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwO0lyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBB cmNoaXRlY3QpPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwO0NvLUNoYWlyIC0gVENH IFRydXN0ZWQgTW9iaWxpdHkgU29sdXRpb25zIFdHPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwO0NvLUNoYWlyIC0gVENHIE1ldGFkYXRhIEFjY2VzcyBQcm90b2NvbCBTRzxicj4NCiZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtDaGFpciAtIExpbnV4IEZvdW5kYXRpb24gT3BlbiBQ cmludGluZyBXRzxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtTZWNyZXRhcnkgLSBJ RUVFLUlTVE8gUHJpbnRlciBXb3JraW5nIEdyb3VwPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7 ICZuYnNwO0NvLUNoYWlyIC0gSUVFRS1JU1RPIFBXRyBJbnRlcm5ldCBQcmludGluZyBQcm90b2Nv bCBXRzxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtJRVRGIERlc2lnbmF0ZWQgRXhw ZXJ0IC0gSVBQICZhbXA7IFByaW50ZXIgTUlCPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZu YnNwO0JsdWUgUm9vZiBNdXNpYyAvIEhpZ2ggTm9ydGggSW5jPGJyPg0KJmd0OyZndDsmbmJzcDsg Jm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJv b2ZtdXNpYyIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1 ZXJvb2ZtdXNpYzwvYT48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0OzxhIGhy ZWY9Imh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwJTNBJTJGJTJGc2l0ZXMuZ29vZ2xlLmNvbSUyRnNpdGUlMkZibHVlcm9vZm11c2ljJmFtcDtk YXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M5MmEyZGNiYWRkOGQ0 NzY2MWI5NjA4ZDc2ZTI4Mjg0NyU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdD MSU3QzElN0M2MzcwOTg5OTEwNzA0MTcwMDYmYW1wO3NkYXRhPUdESVZWSWVzdnFxWG51VTZUdExi SzdHSjRlSTFiMUVjWVNQb1hzSGxqMDQlM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0 cCUzQSUyRiUyRnNpdGVzLmdvb2dsZS5jb20lMkZzaXRlJTJGYmx1ZXJvb2ZtdXNpYyZhbXA7ZGF0 YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2 NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzEl N0MxJTdDNjM3MDk4OTkxMDcwNDE3MDA2JmFtcDtzZGF0YT1HRElWVkllc3ZxcVhudVU2VHRMYks3 R0o0ZUkxYjFFY1lTUG9Yc0hsajA0JTNEJmFtcDtyZXNlcnZlZD0wPC9hPiZndDs8YnI+DQomZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0iaHR0cDovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9oaWdobm9ydGhpbmMiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vc2l0ZXMuZ29vZ2xlLmNv bS9zaXRlL2hpZ2hub3J0aGluYzwvYT48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7 Jmx0OzxhIGhyZWY9Imh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24uIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi48L2E+LjxhIGhyZWY9 Imh0dHA6Ly9vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZzaXRlcy5nb29nbGUuY29tJTJG c2l0ZSUyRmhpZ2hub3J0aGluYyZhbXA7ZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0 MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4 ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MxJTdDNjM3MDk4OTkxMDcwNDE3MDA2JmFtcDtz ZGF0YT03eiUyQm9NY1lTU0ZEOGhBWUhtRUxxTm95R0F4VEJFOWdrbmJWNmtBektXWDglM0QmYW1w O3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5rIj5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYl MkZzaXRlcy5nb29nbGUuY29tJTJGc2l0ZSUyRmhpZ2hub3J0aGluYyZhbXA7ZGF0YT0wMiU3QzAx JTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2NjFiOTYwOGQ3 NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MxJTdDNjM3 MDk4OTkxMDcwNDE3MDA2JmFtcDtzZGF0YT03eiUyQm9NY1lTU0ZEOGhBWUhtRUxxTm95R0F4VEJF OWdrbmJWNmtBektXWDglM0QmYW1wO3Jlc2VydmVkPTA8L2E+Jmd0Ozxicj4NCiZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDttYWlsdG86IDxhIGhyZWY9Im1haWx0bzpibHVlcm9vZm11c2ljQGdt YWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9hPiAmbHQ7 bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbSIgdGFyZ2V0PSJf YmxhbmsiPmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9hPiZndDs8YnI+DQomZ3Q7Jmd0OyZuYnNw OyAmbmJzcDsgJm5ic3A7UE8gQm94IDIyMSZuYnNwOyBHcmFuZCBNYXJhaXMsIE1JIDQ5ODM5Jm5i c3A7IDkwNi00OTQtMjQzNDxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0 Ozxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDtPbiBXZWQsIE5vdiAyMCwgMjAxOSBh dCA3OjM1IFBNIExhdXJlbmNlIEx1bmRibGFkZTxicj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAm bmJzcDsmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSIgdGFyZ2V0PSJf YmxhbmsiPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4gJmx0O21haWx0bzo8YSBocmVmPSJtYWls dG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIiB0YXJnZXQ9Il9ibGFuayI+bGdsQGlzbGFuZC1yZXNv cnQuY29tPC9hPiZndDsmZ3Q7IHdyb3RlOjxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7SGksPGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7 Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtJ4oCZbSBub3Qgb24gdGhlIFNB Q00gbGlzdCwgYnV0IGRpZCBsb29rIGF0IHRoZSBhcmNoaXZlLjxicj4NCiZndDsmZ3Q7Jm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0hvcGVmdWxseSBJ4oCZbSBub3Qgb3V0IG9mIHN5 bmMuPGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDtNeSB0aG91Z2h0IGlzIHRvIHJlZ2lzdGVyIG9uZSBjbGFpbSBmb3IgQ1dUIHRoYXQg aXMgYW4gZW50aXJlPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7Q29TV0lEIChpbiBDRERMIHRoZSBjb25jaXNlLXN3aWQtdGFnKS48YnI+DQomZ3Q7Jmd0Ozxi cj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1RoYXQgd2F5IENv U1dJRCBjYW4gZ3JvdyBhbmQgZGV2ZWxvcCBvbiBpdHMgb3duIHdpdGhvdXQgbG90czxicj4NCiZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO29mIGFkZHMgYW5kIHN1YnRy YWN0cyB0byB0aGUgQ1dUIHJlZ2lzdHJ5LiBJdCBoYXMgaXRzIG93biBJQU5BPGJyPg0KJmd0OyZn dDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7cmVnaXN0cnkgd2l0aCBpdHMgb3du IGV4cGVydHMgYW5kIHN1Y2guIFNlZW1zIGxpa2UgdGhlPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Y291cGxpbmcgLyBmYWN0b3JpbmcgaXMgYWJvdXQgcmln aHQuPGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDtUaGlzIHdvdWxkIGFsc28gYmUgdGhlIHdheSBJ4oCZZCBsaWtlIHRvIGhhdmUgaXQg aW4gRUFUPGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7YXR0 ZXN0YXRpb24uIFdl4oCZdmUgZG9uZSBhIG1pbmkgdmVyc2lvbiBvZiB0aGlzIHdpdGggdGhlPGJy Pg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7bG9jYXRpb24gY2xh aW08YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7PGEg aHJlZj0iaHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGZHJhZnQtaWV0Zi1yYXRzLWVh dC0wMSUyM3NlY3Rpb24tMy44JmFtcDtkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQw bmlzdC5nb3YlN0M5MmEyZGNiYWRkOGQ0NzY2MWI5NjA4ZDc2ZTI4Mjg0NyU3QzJhYjVkODJmZDhm YTQ3OTdhOTNlMDU0NjU1YzYxZGVjJTdDMSU3QzElN0M2MzcwOTg5OTEwNzA0MjY5NjEmYW1wO3Nk YXRhPSUyRmhpMDA4QW0yZGxZNnRCUUhkUFZWR1p6RWNXTm1xZDVNdmdQT00xNGpFOCUzRCZhbXA7 cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3Rl Y3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRt bCUyRmRyYWZ0LWlldGYtcmF0cy1lYXQtMDElMjNzZWN0aW9uLTMuOCZhbXA7ZGF0YT0wMiU3QzAx JTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJhMmRjYmFkZDhkNDc2NjFiOTYwOGQ3 NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2MWRlYyU3QzElN0MxJTdDNjM3 MDk4OTkxMDcwNDI2OTYxJmFtcDtzZGF0YT0lMkZoaTAwOEFtMmRsWTZ0QlFIZFBWVkdaekVjV05t cWQ1TXZnUE9NMTRqRTglM0QmYW1wO3Jlc2VydmVkPTA8L2E+Jmd0Oy48YnI+DQomZ3Q7Jmd0Ozxi cj4NCiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1RoZW4gaWYgeW91 IGp1c3Qgd2FudCB0byBzaWduIGEgQ29TV0lEIENXVCBzdHlsZSwgdGhpcyB3b3Jrczxicj4NCiZn dDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3ByZXR0eSB3ZWxsIHRvby4g SXQgaGFzIGEgc2xpZ2h0IG92ZXJoZWFkIGNvbXBhcmVkIHRvIGhhdmluZzxicj4NCiZndDsmZ3Q7 Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO2FsbCB0aGUgQ29TV0lEIGRhdGEgaXRl bXMgYXMgZGlyZWN0IENXVCBjbGFpbXMgaW4gdGhhdCBpdCB3aWxsPGJyPg0KJmd0OyZndDsmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7aGF2ZSBhbiBhZGRpdGlvbmFsIG1hcCBsYXll ciwgYnV0IHRoYXQgaXMgb25seSBhYm91dCB0aHJlZSBieXRlcy48YnI+DQomZ3Q7Jmd0Ozxicj4N CiZndDsmZ3Q7Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0xMPGJyPg0KJmd0OyZn dDs8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsmZ3Q7Jm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1JBVFMgbWFpbGluZyBsaXN0PGJyPg0KJmd0 OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PGEgaHJlZj0ibWFpbHRvOlJB VFNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5SQVRTQGlldGYub3JnPC9hPiAmbHQ7bWFpbHRv OjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+UkFUU0BpZXRm Lm9yZzwvYT4mZ3Q7PGJyPg0KJmd0OyZndDsmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi4ub3JnL21haWxtYW4vbGlzdGluZm8vcmF0 czwvYT48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbHQ7 PGEgaHJlZj0iaHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGcmF0 cyZhbXA7ZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJhMmRj YmFkZDhkNDc2NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1NWM2 MWRlYyU3QzElN0MxJTdDNjM3MDk4OTkxMDcwNDI2OTYxJmFtcDtzZGF0YT1mZHBYTUlVJTJCTmtN U24zUko0WDVBc1N1TVU3cGJva0hYbHRzWDhaWVA5RTAlM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdl dD0iX2JsYW5rIj5odHRwczovL2djYzAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZy YXRzJmFtcDtkYXRhPTAyJTdDMDElN0NkYXZpZC53YWx0ZXJtaXJlJTQwbmlzdC5nb3YlN0M5MmEy ZGNiYWRkOGQ0NzY2MWI5NjA4ZDc2ZTI4Mjg0NyU3QzJhYjVkODJmZDhmYTQ3OTdhOTNlMDU0NjU1 YzYxZGVjJTdDMSU3QzElN0M2MzcwOTg5OTEwNzA0MjY5NjEmYW1wO3NkYXRhPWZkcFhNSVUlMkJO a01TbjNSSjRYNUFzU3VNVTdwYm9rSFhsdHNYOFpZUDlFMCUzRCZhbXA7cmVzZXJ2ZWQ9MDwvYT4m Z3Q7PGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7X19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQomZ3Q7Jmd0OyZu YnNwOyAmbmJzcDsgJm5ic3A7c2FjbSBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7Jmd0OyZuYnNwOyAm bmJzcDsgJm5ic3A7PGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5r Ij5zYWNtQGlldGYub3JnPC9hPiAmbHQ7bWFpbHRvOjxhIGhyZWY9Im1haWx0bzpzYWNtQGlldGYu b3JnIiB0YXJnZXQ9Il9ibGFuayI+c2FjbUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KJmd0OyZndDsm bmJzcDsgJm5ic3A7ICZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2FjbSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc2FjbTwvYT48YnI+DQomZ3Q7Jmd0OyZuYnNwOyAmbmJzcDsgJm5ic3A7Jmx0 OzxhIGhyZWY9Imh0dHBzOi8vZ2NjMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20v P3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnNh Y20mYW1wO2RhdGE9MDIlN0MwMSU3Q2RhdmlkLndhbHRlcm1pcmUlNDBuaXN0LmdvdiU3QzkyYTJk Y2JhZGQ4ZDQ3NjYxYjk2MDhkNzZlMjgyODQ3JTdDMmFiNWQ4MmZkOGZhNDc5N2E5M2UwNTQ2NTVj NjFkZWMlN0MxJTdDMSU3QzYzNzA5ODk5MTA3MDQzNjg5MyZhbXA7c2RhdGE9b2tTUEFxVkhqOUtC eFB0VmlRZG5mZnNmaGxNRjR0MCUyRjg3UFhYWTc4ZkEwJTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly9nY2MwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv bS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJG c2FjbSZhbXA7ZGF0YT0wMiU3QzAxJTdDZGF2aWQud2FsdGVybWlyZSU0MG5pc3QuZ292JTdDOTJh MmRjYmFkZDhkNDc2NjFiOTYwOGQ3NmUyODI4NDclN0MyYWI1ZDgyZmQ4ZmE0Nzk3YTkzZTA1NDY1 NWM2MWRlYyU3QzElN0MxJTdDNjM3MDk4OTkxMDcwNDM2ODkzJmFtcDtzZGF0YT1va1NQQXFWSGo5 S0J4UHRWaVFkbmZmc2ZobE1GNHQwJTJGODdQWFhZNzhmQTAlM0QmYW1wO3Jlc2VydmVkPTA8L2E+ Jmd0Ozxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDs8YnI+DQomZ3Q7Jmd0Ozxicj4NCiZndDsm Z3Q7IC0tIDxicj4NCiZndDsmZ3Q7PGJyPg0KJmd0OyZndDsgQmVzdCByZWdhcmRzLDxicj4NCiZn dDsmZ3Q7IEthdGhsZWVuPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0OyBzYWNtIG1haWxpbmcgbGlzdDxi cj4NCiZndDsgPGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5z YWNtQGlldGYub3JnPC9hPjxicj4NCiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9zYWNtIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9zYWNtPC9hPjxicj4NCiZndDsgPG86cD48L286cD48L3A+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4tLSA8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5CZXN0IHJlZ2Fy ZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_65CFC5E31B464235B4F4692F475AC80Fintelcom_-- From nobody Fri Nov 22 22:33:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48BF0120833 for ; Fri, 22 Nov 2019 22:33:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ya49dh1FUVgM for ; Fri, 22 Nov 2019 22:33:38 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23EA812022D for ; Fri, 22 Nov 2019 22:33:37 -0800 (PST) Received: from dooku.sandelman.ca (unknown [89.248.140.12]) by relay.sandelman.ca (Postfix) with ESMTPS id 1BE211F450 for ; Sat, 23 Nov 2019 06:33:36 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id D04467D4; Sat, 23 Nov 2019 14:33:38 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> Comments: In-reply-to Dave Thaler message dated "Fri, 15 Nov 2019 07:38:32 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sat, 23 Nov 2019 14:33:38 +0800 Message-ID: <10511.1574490818@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 06:33:40 -0000 --=-=-= Content-Type: text/plain {why do people insist on CC people who are on the list? Do you enjoy getting three copies of emails with different headers} Dave Thaler wrote: > I have not yet seen a compelling reason to use a pull-based mechanism > instead of a push-based mechanism via another protocol the routers > already support. I agree. > In order to know who to pull data from, the Verifier has to have some > indication from the Attester that triggers the attestation request > indicated as Step 1 in draft-fedorkow-rats-network-device-attestation. > So in reality, there has to be a step before step 1, > whereby the Attester does something that makes the Attester > discoverable by the Verifier. That step could have included the EAT > or the TPM data I have a todo item to write up: 1) a use case for Attestation at BSKI onboarding time. (really this is a RIV sub-case, I think) 2) a document explaining how to carry EAT in BRSKI voucher-requests and RFC8366 vouchers. That works well for initial attestation before a device is accepted onto a network, but does not manage the ongoing safety of the device. An open item in BRSKI is finding a way to signal that a device supports RESTCONF, and should have it's configuration loaded in that way. That signaling could very well indicate that attestation is available that way; well actually I think that once RESTCONF is up, the controller can discover that it supports our EAT-YANG-module. Having said all of this, I was surprised that my question on Friday's meeting about what claims would be in the EAT that be returned from entity-attestation-token-challenge-response did not elicit more understanding and aha. I want to be clear: I object to including the EAT in the *TPM* module, because: 1) it's mixing two different things and there is no reason a device that supports one should have to support the other. 2) I believe that the use case is completely different. 3) returning EATs is way too important to get it wrong like this. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3Y0sIACgkQlUzhVv38 QpAKGgf9EFTJj79/Qi7wpPVrBxU+OmqdxmhKmwN5AgiIgwIt8sr9+7rBehO58Myq AbvHxaBL/157OGHPNRelDNnzqRe/M96K/qUciZS9rLQouS6wRIZ093xso+x2Gusb tR9l0UwjFKutZdpjCsdpFR9q96+t8oQCYb6Lzv8swEm6PhcC4Pr1h9hUUfmqxvcX D9djTIVNA0vEQ+ovbT1IIJ+K3SdtvDOHCrjnDBawNZGBFnV0dwiC3Df1huMrtzcM 2mlx7KLNctvWdnNHGl+Zafgi3pyh+kfH18wtTNSWzE1xDJ3Jq/Qa0uhx+JucK3Th vt/VL6uDId7isC+vysVpeffLxJr+KA== =GDpy -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Nov 22 22:36:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 572B312022D for ; Fri, 22 Nov 2019 22:36:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SdVZ7XU0It1U for ; Fri, 22 Nov 2019 22:36:41 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D4AA012002E for ; Fri, 22 Nov 2019 22:36:40 -0800 (PST) Received: from dooku.sandelman.ca (unknown [89.248.140.12]) by relay.sandelman.ca (Postfix) with ESMTPS id A566A1F450; Sat, 23 Nov 2019 06:36:39 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 07BD77D4; Sat, 23 Nov 2019 14:36:43 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" , "Xialiang \(Frank\, Network Standard & Patent Dept\)" In-reply-to: References: <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <20191117144129.llvg7fsrqgaqtgkn@anna.jacobs.jacobs-university.de> <5993.1574073238@dooku.sandelman.ca> Comments: In-reply-to "Xialiang (Frank, Network Standard & Patent Dept)" message dated "Mon, 18 Nov 2019 10:39:21 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sat, 23 Nov 2019 14:36:43 +0800 Message-ID: <10582.1574491003@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] =?utf-8?b?562U5aSNOiBDYWxsIGZvciBhZG9wdGlvbiAoYWZ0ZXIg?= =?utf-8?q?draft_rename=29_for_Yang_module_draft?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 06:36:43 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable "Xialiang (Frank, Network Standard & Patent Dept)" wrote: > Policy Enforcement Point or Policy Decision Point? *I take the fifth* (what? Singapore and Canada do not let me avoid testifying against myself?) I think it could be either, but it depends upon the architecture of system/= network. > -----=E9=82=AE=E4=BB=B6=E5=8E=9F=E4=BB=B6-----=E5=8F=91=E4=BB=B6=E4= =BA=BA: RATS [mailto:rats-bounces@ietf.org] =E4=BB=A3=E8=A1=A8 > Michael Richardson=E5=8F=91=E9=80=81=E6=97=B6=E9=97=B4: 2019=E5=B9=B4= 11=E6=9C=8818=E6=97=A5 18:34=E6=94=B6=E4=BB=B6=E4=BA=BA: rats@ietf.org=E4= =B8=BB > =E9=A2=98: Re: [Rats] Call for adoption (after draft rename) for Yang= module > draft >>> Case 1) The network notices anomalous traffic coming from a device >>> already on the network, which triggers a verifier to ask the device >>> to attest to its health (which may have changed since it was last >>> attested). Here there might even be no Relying Party involved per >>> se. >>> Case 2) The network has not noticed anything odd, but wants to >>> proactively query a device anyway, e.g., because the network's >>> appraisal policy of what is considered trustworthy has just changed. >>> Again there might even be no Relying Party involved. > Laurence Lundblade wrote: >> I would call the network the relying party. Attestation always has a >> relying party because there would be no point if no one cared (if a >> tree falls in a forest=E2=80=A6) > I would be even more specific to say that the network's Policy > Enforcement Point is the relying party. > -- > Michael Richardson , Sandelman Software Works = -=3D > IPv6 IoT consulting =3D- > _______________________________________________ RATS mailing list > RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3Y03oACgkQlUzhVv38 QpBeBQgAoVoWZqy0nUk9q87Seq69NKi1Toy6LnZxAFckeb2sgug4UUIlbqj/Li4S KiAu2kaw2IKLThfR56BwP+6iM4ZfNDpuu2rASfHyft5Cs0j8gGyEA+/YU14u8GMX IQxvoNZivDjHcjTRJhC0WQPosc0l9xJpgcUlxhCndkbYCmWJKfu/m9krQRuBv/JP NQhI5ON6+a3VwzqA+McSqCc7Qh159KQfKQHdg1CwxXipbWhTjZ2qY+JFmFJJfaFD ru41v//EVRhnjvyLnvF+NFJcRmYMEs3yWoCfrVen7VlLi/SdcwO6Q4b4BKeWjkyA g8Qmu7pZCUIKoT7WveP/L05k6/4/Cw== =arLe -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Nov 23 08:29:34 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 962E5120932 for ; Sat, 23 Nov 2019 08:29:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sda5fka3jXJP for ; Sat, 23 Nov 2019 08:29:27 -0800 (PST) Received: from p3plsmtpa06-02.prod.phx3.secureserver.net (p3plsmtpa06-02.prod.phx3.secureserver.net [173.201.192.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 71F0C120953 for ; Sat, 23 Nov 2019 08:29:26 -0800 (PST) Received: from [10.86.0.74] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id YYHliPPUEYCagYYHlizEzv; Sat, 23 Nov 2019 09:29:25 -0700 From: Laurence Lundblade Message-Id: <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_0F33BB2B-E50A-4B45-8712-AB3704325A90" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sat, 23 Nov 2019 08:29:24 -0800 In-Reply-To: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> Cc: Hannes Tschofenig , "rats@ietf.org" To: Yaron Sheffer References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfKFwDmYgfUK/VITyNegZEXae05CdLTXUK195lHI31pVXLOvux8b/elbJHzyZrB64ko2HJ/NcdYpbHheTnySTkn7RFxhAxaqvS9EWn7ddKJPdJndoKZla QV/sdCGuC80VhMohGl42VfHEEoLc4kut7wFMbzqDPAfsYPlI8F48o4sMVr6SAt/PAg2HXgeHYany/edZFC7dgxpV4x9xG8LIQlWCJWNfztySGDz123ktGew9 Archived-At: Subject: Re: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 16:29:31 -0000 --Apple-Mail=_0F33BB2B-E50A-4B45-8712-AB3704325A90 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 One of our thoughts is that EAT profiles will help with this. For = example, a special profile for toasters might list 5 claims that must be = included in every attestation and 10 claims that are optional and maybe = even prohibit all others. LL > On Nov 22, 2019, at 6:57 AM, Yaron Sheffer = wrote: >=20 > Hi Hannes, > =20 > Looking at the JWT claim IANA registry [1], it is already a terrible = mess of several different standards, obviously with many more coming. I = guess what=E2=80=99s done is done, and I=E2=80=99ll take back my = objection. > =20 > Thanks, > Yaron > =20 > [1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims = > =20 > From: Hannes Tschofenig > > Date: Friday, November 22, 2019 at 14:17 > To: Yaron Sheffer >, "rats@ietf.org " = > > Subject: RE: EAT IANA registry > =20 > Yaron,=20 > Could you explain why you think that this is a good idea?=20 > Ciao > Hannes > =20 > From: RATS > On = Behalf Of Yaron Sheffer > Sent: Friday, November 22, 2019 2:05 PM > To: rats@ietf.org > Subject: [Rats] EAT IANA registry > =20 > Unrelated to my earlier mail, I would recommend to create a separate = registry for EAT claims (I suppose that implies a nested object in the = JWT/CWT) rather than to overload the CWT registry. Architecturally it = just doesn=E2=80=99t jive to have all these claims as baseline CWT = claims, and process-wise, it=E2=80=99s much more convenient for this = group to control its own namespace. > =20 > Sorry if this has been raised before. > =20 > Thanks, > Yaron > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you.=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_0F33BB2B-E50A-4B45-8712-AB3704325A90 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 One = of our thoughts is that EAT profiles will help with this. For example, a = special profile for toasters might list 5 claims that must be included = in every attestation and 10 claims that are optional and maybe even = prohibit all others.

LL


On Nov = 22, 2019, at 6:57 AM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

Hi Hannes,
 
Looking at the = JWT claim IANA registry [1], it is already a terrible mess of several = different standards, obviously with many more coming. I guess what=E2=80=99= s done is done, and I=E2=80=99ll take back my objection.
 
Thanks,
          &nb= sp;     Yaron
 
 
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Date: Friday, November 22, = 2019 at 14:17
To: Yaron Sheffer <yaronf.ietf@gmail.com>, = "rats@ietf.org" <rats@ietf.org>
Subject: RE: EAT IANA = registry
 
Yaron, 
Could you explain why you think = that this is a good idea? 
Ciao
Hannes
 
From: RATS = <rats-bounces@ietf.org> On Behalf = Of Yaron = Sheffer
Sent: Friday, November 22, 2019 = 2:05 PM
To: rats@ietf.org
Subject: [Rats] EAT IANA = registry
 
Unrelated to my earlier mail, I would recommend to create a = separate registry for EAT claims (I suppose that implies a nested object = in the JWT/CWT) rather than to overload the CWT registry. = Architecturally it just doesn=E2=80=99t jive to have all these claims as = baseline CWT claims, and process-wise, it=E2=80=99s much more convenient = for this group to control its own namespace.
 
Sorry if this has been raised = before.
 
Thanks,
          &nb= sp;     Yaron
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you. 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_0F33BB2B-E50A-4B45-8712-AB3704325A90-- From nobody Sat Nov 23 08:44:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5275B120827 for ; Sat, 23 Nov 2019 08:44:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPKWRfZgXV-O for ; Sat, 23 Nov 2019 08:44:08 -0800 (PST) Received: from p3plsmtpa07-08.prod.phx3.secureserver.net (p3plsmtpa07-08.prod.phx3.secureserver.net [173.201.192.237]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 102EF12081A for ; Sat, 23 Nov 2019 08:44:08 -0800 (PST) Received: from [10.86.0.74] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id YYVzi6w0eVvPWYYVzi8PG6; Sat, 23 Nov 2019 09:44:07 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_6EB700B8-AEAB-4397-823F-810217BE55C4" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sat, 23 Nov 2019 08:44:06 -0800 In-Reply-To: Cc: "rats@ietf.org" , Kathleen Moriarty , "Smith, Ned" To: Henk Birkholz References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLuFRMuWylAqMhOJlI2uGYkSxR5PWVyhVzSnvxkZW8obtZEXEbMeTHCMyA6Tl8ymF106LleFJqhFPx4bk6RaUU5/h8G3FGzrMDy4c91ps/nYU6sNf0N1 f71RCYdCGA3+l3rOVpjtOGFk3qwzRcbe+Uar53zrVASmeWUZm6tMJCxDxq0hlXnS4ldIsk+odJJN4IND1vsD29YBfUifFXOYGjIo5b22i4IiyKZ+sYl7WlnV xYpyKrwoiDjRxazsWqXRQTEfsCTUspgNu8vBB+iFWmnJY89if2zkS37Q6LFfcxXp Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 16:44:09 -0000 --Apple-Mail=_6EB700B8-AEAB-4397-823F-810217BE55C4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 21, 2019, at 6:26 PM, Henk Birkholz = wrote: >=20 > There are no semantic difference between the "simple non-TPM EAT" = scenario and the TPM-based implicit remote attestation scenario. They = are if fact the "same types of secure attestation=E2=80=9D. I don=E2=80=99t have any need to drive taxonomic distinction when = unnecessary, but note that the YANG module has to have explicit = different facilities to be able to handle both. The verifier implementations for these two types are also very = different. in the "non-TPM EAT=E2=80=9D scenario no known-good-values = for SW hashes are need to be supplied to the verifier. I don=E2=80=99t think these are the only differences that we=E2=80=99ll = encounter in real implementations.=20 This should probably all be described the architecture document. Seems = as significant as the passport vs background check distinction. LL =20 --Apple-Mail=_6EB700B8-AEAB-4397-823F-810217BE55C4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 21, 2019, at 6:26 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

There are no semantic difference = between the "simple non-TPM EAT" scenario and the TPM-based implicit = remote attestation scenario. They are if fact the "same types of secure = attestation=E2=80=9D.


I don=E2=80=99t have any = need to drive taxonomic distinction when unnecessary, but note that the = YANG module has to have explicit different facilities to be able to = handle both.

The verifier = implementations for these two types are also very different. in the = "non-TPM EAT=E2=80=9D scenario no known-good-values for SW hashes are = need to be supplied to the verifier.

I= don=E2=80=99t think these are the only differences that we=E2=80=99ll = encounter in real implementations. 

This should probably all be described the = architecture document. Seems as significant as the passport vs = background check distinction.

LL
 

= --Apple-Mail=_6EB700B8-AEAB-4397-823F-810217BE55C4-- From nobody Sat Nov 23 08:53:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 202EB12081A for ; Sat, 23 Nov 2019 08:53:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ezFQOJFycNS9 for ; Sat, 23 Nov 2019 08:53:55 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51A981200E7 for ; Sat, 23 Nov 2019 08:53:55 -0800 (PST) Received: from [10.86.0.74] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id YYfSiCInt5BoaYYfSicx70; Sat, 23 Nov 2019 09:53:55 -0700 From: Laurence Lundblade Message-Id: <1F42CFE9-2CA8-44EC-8905-F9E3D350EC80@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_590F8941-C82C-41B3-B39F-E6C6B6709C23" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sat, 23 Nov 2019 08:53:54 -0800 In-Reply-To: <4EEB506F-5ED6-4DEC-873F-D6D5ABBA04B3@gmail.com> Cc: "rats@ietf.org" To: Yaron Sheffer References: <4EEB506F-5ED6-4DEC-873F-D6D5ABBA04B3@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfEPndZ5YFQ0fJV8E/hYqHrj7l4fD94Z5JaxZr/NIm/5O1tSt3R6Pc3sDkAAzCLZm66qN4/9YV/+yoywcEhRVCLzvWBVtDr8Ln6Dgt6s/kZaUy2Uy3SeC aslv8QqSBaWcsJslKe6e75C+d8NkQ+6ZjUlJXR/3r/Cav7asSk/6xHi0sGP29QjUKG2AB2DDT3KAxg== Archived-At: Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 16:53:57 -0000 --Apple-Mail=_590F8941-C82C-41B3-B39F-E6C6B6709C23 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Yaron, I don=E2=80=99t think there=E2=80=99s any philosophical or fundamental = problem with changes to EAT so it can apply to VM=E2=80=99s / software. = It is still an early draft and it has some biases from its origin, but = we can adjust. All claims are optional, so UEID is not required. I would really hope that CoSWID can be the answer to all our SW = Inventory and version needs. Maybe even including boot ROM and firmware = versions. Agreed that SW has a manufacturer too. LL > On Nov 21, 2019, at 9:57 PM, Yaron Sheffer = wrote: >=20 > I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D = use case in mind. To clarify, what I'm looking for is the capability: > =20 > - To attest to software components that are running inside VMs, = containers (either on VMs or bare metal), and anonymous containers = (function-as-a-service, such as AWS Lambda). > - Such components may be deployed in arbitrary hierarchies (VM-in-VM = etc.). > - Attestation of running (as opposed to installed) components. For = example, container code may be pulled from a remote repository shortly = before it is run. > - To support diverse roots-of-trust, such that when a hardware = root-of-trust is unavailable, we can have a hypervisor or an = orchestration server (e.g. Kubernetes) as the RoT, even if that means a = lower level of trust. > =20 > I think in general, EAT can be made to fit these use cases, given its = recursive structure. But not surprisingly given its origins, the draft = would need quite a few changes. > =20 > * 1.2 (and 3.12): why not spell out that a submodule can be either a = hardware or software component? > * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT = may have other functions; a system may in general have multiple RoTs. = The word "dedicated" is not repeated anywhere else in the document, nor = is it explained. > * 1.3 continues to only talk hardware, e.g. when defining the = "manufacturer". Software has a manufacturer too. > * 3.3: the notion of UEID is fundamentally incompatible with some = component types that we would wish to attest. For example, the lifetime = of a function-as-a-service container may be less than a second, and even = if it has an identity during its lifetime, there is no registry or = persistent record of this identity. Is a UEID required in this scheme? > * 3.4: hey, finally some software! > =20 > I think we still don't have a handle on identifying running software, = and CosWID may not be the whole answer. CosWID is more like traditional = software inventorying, and we need something that will cover dynamic = modern software. > =20 > Thanks, > Yaron > =20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_590F8941-C82C-41B3-B39F-E6C6B6709C23 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Yaron,

I don=E2=80=99t= think there=E2=80=99s any philosophical or fundamental problem with = changes to EAT so it can apply to VM=E2=80=99s / software. It is still = an early draft and it has some biases from its origin, but we can = adjust.

All = claims are optional, so UEID is not required.

I would really hope that CoSWID can be = the answer to all our SW Inventory and version needs. Maybe even = including boot ROM and firmware versions. Agreed that SW has a = manufacturer too.

LL



On = Nov 21, 2019, at 9:57 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2= =80=9D use case in mind. To clarify, what I'm looking for is the = capability:
 
- To attest to software components = that are running inside VMs, containers (either on VMs or bare metal), = and anonymous containers (function-as-a-service, such as AWS = Lambda).
- Such components may be deployed = in arbitrary hierarchies (VM-in-VM etc.).
- Attestation of running (as opposed to installed) = components. For example, container code may be pulled from a remote = repository shortly before it is run.
- To support diverse roots-of-trust, such that when a = hardware root-of-trust is unavailable, we can have a hypervisor or an = orchestration server (e.g. Kubernetes) as the RoT, even if that means a = lower level of trust.
 
I think in general, EAT can be made = to fit these use cases, given its recursive structure. But not = surprisingly given its origins, the draft would need quite a few = changes.
 
* 1.2 (and 3.12): why not spell out = that a submodule can be either a hardware or software component?
* 1.2: why *dedicated* root of trust, what is it dedicated = to? A RoT may have other functions; a system may in general have = multiple RoTs. The word "dedicated" is not repeated anywhere else in the = document, nor is it explained.
* 1.3 continues to = only talk hardware, e.g. when defining the "manufacturer". Software has = a manufacturer too.
* 3.3: the notion of = UEID is fundamentally incompatible with some component types that we = would wish to attest. For example, the lifetime of a = function-as-a-service container may be less than a second, and even if = it has an identity during its lifetime, there is no registry or = persistent record of this identity. Is a UEID required in this = scheme?
* 3.4: hey, finally some = software!
 
I think we still don't have a = handle on identifying running software, and CosWID may not be the whole = answer. CosWID is more like traditional software inventorying, and we = need something that will cover dynamic modern software.
 
Thanks,
          &nb= sp;     Yaron
 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_590F8941-C82C-41B3-B39F-E6C6B6709C23-- From nobody Sat Nov 23 11:16:44 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50E9E12004F for ; Sat, 23 Nov 2019 11:16:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a58ts6ztUW5d for ; Sat, 23 Nov 2019 11:16:41 -0800 (PST) Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F2A8120024 for ; Sat, 23 Nov 2019 11:16:41 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga006.fm.intel.com ([10.253.24.20]) by orsmga106.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Nov 2019 11:16:40 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,234,1571727600"; d="scan'208";a="409215306" Received: from orsmsx101.amr.corp.intel.com ([10.22.225.128]) by fmsmga006.fm.intel.com with ESMTP; 23 Nov 2019 11:16:40 -0800 Received: from orsmsx155.amr.corp.intel.com (10.22.240.21) by ORSMSX101.amr.corp.intel.com (10.22.225.128) with Microsoft SMTP Server (TLS) id 14.3.439.0; Sat, 23 Nov 2019 11:16:40 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX155.amr.corp.intel.com ([169.254.7.211]) with mapi id 14.03.0439.000; Sat, 23 Nov 2019 11:16:39 -0800 From: "Smith, Ned" To: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad/EtmAgAAHhgCAAAO0AIAGacyAgAAGuoCAAJAygIAAL78AgAEETQCAAqU5AIACdRAAgAyAhACAAE8NAA== Date: Sat, 23 Nov 2019 19:16:38 +0000 Message-ID: <8363AFEC-C92C-466D-8F2C-CE7A3E94370B@intel.com> References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <10511.1574490818@dooku.sandelman.ca> In-Reply-To: <10511.1574490818@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.251.148.166] Content-Type: text/plain; charset="utf-8" Content-ID: <9305E8FF80DBF842989991FD0B33A97E@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 19:16:43 -0000 VGhlIHN0ZXAtMCBwcm90b2NvbCBtYXkgaGF2ZSBwYXlsb2FkIHNpemUgb3IgdGltaW5nIGxpbWl0 YXRpb25zIHRoYXQgcHJldmVudHMgZnVsbHkgYXR0ZXN0aW5nLiBUaGlzIGlzIHRoZSBjYXNlIGZv ciA4MDIuMVggZXRoZXJuZXQgcG9ydHMuIA0KDQrvu79PbiAxMS8yMi8xOSwgMTA6MzMgUE0sICJS QVRTIG9uIGJlaGFsZiBvZiBNaWNoYWVsIFJpY2hhcmRzb24iIDxyYXRzLWJvdW5jZXNAaWV0Zi5v cmcgb24gYmVoYWxmIG9mIG1jcitpZXRmQHNhbmRlbG1hbi5jYT4gd3JvdGU6DQoNCiAgICAgICAg PiBkaXNjb3ZlcmFibGUgYnkgdGhlIFZlcmlmaWVyLiAgIFRoYXQgc3RlcCBjb3VsZCBoYXZlIGlu Y2x1ZGVkIHRoZSBFQVQNCiAgICAgICAgPiBvciB0aGUgVFBNIGRhdGENCiAgICANCiAgICBJIGhh dmUgYSB0b2RvIGl0ZW0gdG8gd3JpdGUgdXA6DQogICAgICAxKSBhIHVzZSBjYXNlIGZvciBBdHRl c3RhdGlvbiBhdCBCU0tJIG9uYm9hcmRpbmcgdGltZS4NCiAgICAgICAgIChyZWFsbHkgdGhpcyBp cyBhIFJJViBzdWItY2FzZSwgSSB0aGluaykNCiAgICANCiAgICAgIDIpIGEgZG9jdW1lbnQgZXhw bGFpbmluZyBob3cgdG8gY2FycnkgRUFUIGluIEJSU0tJIHZvdWNoZXItcmVxdWVzdHMgYW5kDQog ICAgICAgICBSRkM4MzY2IHZvdWNoZXJzLg0KDQo= From nobody Sat Nov 23 11:20:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5BA6120059 for ; Sat, 23 Nov 2019 11:20:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aAfDo6VKbxJi for ; Sat, 23 Nov 2019 11:20:02 -0800 (PST) Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60A85120024 for ; Sat, 23 Nov 2019 11:20:02 -0800 (PST) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by orsmga106.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Nov 2019 11:20:02 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.69,234,1571727600"; d="scan'208,217";a="210722193" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by orsmga006.jf.intel.com with ESMTP; 23 Nov 2019 11:20:02 -0800 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.161]) by ORSMSX110.amr.corp.intel.com ([169.254.10.52]) with mapi id 14.03.0439.000; Sat, 23 Nov 2019 11:20:01 -0800 From: "Smith, Ned" To: "rats@ietf.org" Thread-Topic: [Rats] Two types of secure attestation Thread-Index: AQHVntzp4M6ZJzqVJUiVsZ6c2vuAXaeTFYmAgACwdgCAAA6xgIAAu9YAgAEdtgCAAAn4gIAABdyAgAADQoCAAAxJgIAAES0AgAEKygCAABdNAIACgfQA//+lc4A= Date: Sat, 23 Nov 2019 19:20:01 +0000 Message-ID: <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 x-originating-ip: [10.251.148.166] Content-Type: multipart/alternative; boundary="_000_52AC3EB51BD04A418EAD5A779E125BF8intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 19:20:04 -0000 --_000_52AC3EB51BD04A418EAD5A779E125BF8intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QGxhdXJlbmNlIC0gQnkg4oCcdGhpc+KAnSB5b3UgbWVhbiB0aGUgZGlmZmVyZW5jZSBiZXR3ZWVu IGltcGxpY2l0IGFuZCBleHBsaWNpdCBhdHRlc3RhdGlvbj8NCg0KRnJvbTogUkFUUyA8cmF0cy1i b3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNs YW5kLXJlc29ydC5jb20+DQpEYXRlOiBTYXR1cmRheSwgTm92ZW1iZXIgMjMsIDIwMTkgYXQgODo0 NCBBTQ0KVG86IEhlbmsgQmVya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+ DQpDYzogInJhdHNAaWV0Zi5vcmciIDxyYXRzQGlldGYub3JnPiwgS2F0aGxlZW4gTW9yaWFydHkg PGthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPiwgIlNtaXRoLCBOZWQiIDxuZWQuc21p dGhAaW50ZWwuY29tPg0KU3ViamVjdDogUmU6IFtSYXRzXSBUd28gdHlwZXMgb2Ygc2VjdXJlIGF0 dGVzdGF0aW9uDQoNCg0KT24gTm92IDIxLCAyMDE5LCBhdCA2OjI2IFBNLCBIZW5rIEJpcmtob2x6 IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPG1haWx0bzpoZW5rLmJpcmtob2x6QHNp dC5mcmF1bmhvZmVyLmRlPj4gd3JvdGU6DQoNClRoZXJlIGFyZSBubyBzZW1hbnRpYyBkaWZmZXJl bmNlIGJldHdlZW4gdGhlICJzaW1wbGUgbm9uLVRQTSBFQVQiIHNjZW5hcmlvIGFuZCB0aGUgVFBN LWJhc2VkIGltcGxpY2l0IHJlbW90ZSBhdHRlc3RhdGlvbiBzY2VuYXJpby4gVGhleSBhcmUgaWYg ZmFjdCB0aGUgInNhbWUgdHlwZXMgb2Ygc2VjdXJlIGF0dGVzdGF0aW9u4oCdLg0KDQoNCkkgZG9u 4oCZdCBoYXZlIGFueSBuZWVkIHRvIGRyaXZlIHRheG9ub21pYyBkaXN0aW5jdGlvbiB3aGVuIHVu bmVjZXNzYXJ5LCBidXQgbm90ZSB0aGF0IHRoZSBZQU5HIG1vZHVsZSBoYXMgdG8gaGF2ZSBleHBs aWNpdCBkaWZmZXJlbnQgZmFjaWxpdGllcyB0byBiZSBhYmxlIHRvIGhhbmRsZSBib3RoLg0KDQpU aGUgdmVyaWZpZXIgaW1wbGVtZW50YXRpb25zIGZvciB0aGVzZSB0d28gdHlwZXMgYXJlIGFsc28g dmVyeSBkaWZmZXJlbnQuIGluIHRoZSAibm9uLVRQTSBFQVTigJ0gc2NlbmFyaW8gbm8ga25vd24t Z29vZC12YWx1ZXMgZm9yIFNXIGhhc2hlcyBhcmUgbmVlZCB0byBiZSBzdXBwbGllZCB0byB0aGUg dmVyaWZpZXIuDQoNCkkgZG9u4oCZdCB0aGluayB0aGVzZSBhcmUgdGhlIG9ubHkgZGlmZmVyZW5j ZXMgdGhhdCB3ZeKAmWxsIGVuY291bnRlciBpbiByZWFsIGltcGxlbWVudGF0aW9ucy4NCg0KVGhp cyBzaG91bGQgcHJvYmFibHkgYWxsIGJlIGRlc2NyaWJlZCB0aGUgYXJjaGl0ZWN0dXJlIGRvY3Vt ZW50LiBTZWVtcyBhcyBzaWduaWZpY2FudCBhcyB0aGUgcGFzc3BvcnQgdnMgYmFja2dyb3VuZCBj aGVjayBkaXN0aW5jdGlvbi4NCg0KTEwNCg0KDQoNCg== --_000_52AC3EB51BD04A418EAD5A779E125BF8intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <5C9C1EEED339E746B63AF1252DDC19B9@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25z ICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXtt c28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFy Z2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVm dDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1V UyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QGxhdXJlbmNlIC0gQnkg4oCcdGhpc+KAnSB5b3UgbWVh biB0aGUgZGlmZmVyZW5jZSBiZXR3ZWVuIGltcGxpY2l0IGFuZCBleHBsaWNpdCBhdHRlc3RhdGlv bj88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Nv bG9yOmJsYWNrIj5Gcm9tOg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhh bGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7PGJy Pg0KPGI+RGF0ZTogPC9iPlNhdHVyZGF5LCBOb3ZlbWJlciAyMywgMjAxOSBhdCA4OjQ0IEFNPGJy Pg0KPGI+VG86IDwvYj5IZW5rIEJlcmtob2x6ICZsdDtoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlJmd0Ozxicj4NCjxiPkNjOiA8L2I+JnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7 cmF0c0BpZXRmLm9yZyZndDssIEthdGhsZWVuIE1vcmlhcnR5ICZsdDtrYXRobGVlbi5tb3JpYXJ0 eS5pZXRmQGdtYWlsLmNvbSZndDssICZxdW90O1NtaXRoLCBOZWQmcXVvdDsgJmx0O25lZC5zbWl0 aEBpbnRlbC5jb20mZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbUmF0c10gVHdvIHR5cGVz IG9mIHNlY3VyZSBhdHRlc3RhdGlvbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiBOb3YgMjEsIDIwMTks IGF0IDY6MjYgUE0sIEhlbmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPlRoZXJlIGFyZSBubyBzZW1h bnRpYyBkaWZmZXJlbmNlIGJldHdlZW4gdGhlICZxdW90O3NpbXBsZSBub24tVFBNIEVBVCZxdW90 OyBzY2VuYXJpbyBhbmQgdGhlIFRQTS1iYXNlZCBpbXBsaWNpdCByZW1vdGUgYXR0ZXN0YXRpb24g c2NlbmFyaW8uIFRoZXkgYXJlIGlmIGZhY3QgdGhlICZxdW90O3NhbWUgdHlwZXMNCiBvZiBzZWN1 cmUgYXR0ZXN0YXRpb27igJ0uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSBkb27i gJl0IGhhdmUgYW55IG5lZWQgdG8gZHJpdmUgdGF4b25vbWljIGRpc3RpbmN0aW9uIHdoZW4gdW5u ZWNlc3NhcnksIGJ1dCBub3RlIHRoYXQgdGhlIFlBTkcgbW9kdWxlIGhhcyB0byBoYXZlIGV4cGxp Y2l0IGRpZmZlcmVudCBmYWNpbGl0aWVzIHRvIGJlIGFibGUgdG8gaGFuZGxlIGJvdGguPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+VGhlIHZlcmlmaWVyIGlt cGxlbWVudGF0aW9ucyBmb3IgdGhlc2UgdHdvIHR5cGVzIGFyZSBhbHNvIHZlcnkgZGlmZmVyZW50 LiBpbiB0aGUgJnF1b3Q7bm9uLVRQTSBFQVTigJ0gc2NlbmFyaW8gbm8ga25vd24tZ29vZC12YWx1 ZXMgZm9yIFNXIGhhc2hlcyBhcmUgbmVlZCB0byBiZSBzdXBwbGllZCB0byB0aGUgdmVyaWZpZXIu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SSBkb27igJl0 IHRoaW5rIHRoZXNlIGFyZSB0aGUgb25seSBkaWZmZXJlbmNlcyB0aGF0IHdl4oCZbGwgZW5jb3Vu dGVyIGluIHJlYWwgaW1wbGVtZW50YXRpb25zLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoaXMgc2hvdWxkIHByb2JhYmx5IGFsbCBiZSBkZXNj cmliZWQgdGhlIGFyY2hpdGVjdHVyZSBkb2N1bWVudC4gU2VlbXMgYXMgc2lnbmlmaWNhbnQgYXMg dGhlIHBhc3Nwb3J0IHZzIGJhY2tncm91bmQgY2hlY2sgZGlzdGluY3Rpb24uPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+TEw8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_52AC3EB51BD04A418EAD5A779E125BF8intelcom_-- From nobody Sat Nov 23 14:35:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A53F6120020 for ; Sat, 23 Nov 2019 14:34:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IS3yKIfgmLG1 for ; Sat, 23 Nov 2019 14:34:58 -0800 (PST) Received: from p3plsmtpa08-05.prod.phx3.secureserver.net (p3plsmtpa08-05.prod.phx3.secureserver.net [173.201.193.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 055CA120013 for ; Sat, 23 Nov 2019 14:34:57 -0800 (PST) Received: from [10.86.0.74] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id YdzUitfIp55u4YdzViNVkH; Sat, 23 Nov 2019 15:34:57 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E255ED41-4A89-4D6E-A2EA-904AF0C83693" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sat, 23 Nov 2019 14:34:56 -0800 In-Reply-To: <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> Cc: "rats@ietf.org" To: "Smith, Ned" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfKq0uTADGWur2yY9svGKymTZy0KDs7Z6OAF+aEO3yzl6vaybf4orrsDgCOqF3/G4Zhhl1JpdbM5WTumU3q08gpgkO6NIEhZGKP/ru85KuqjTKgpWbaBa h23eNMj/3Ah6YL7k3m1Il7koNZOSGgtA7i0psU5FAoV2HkzHQ1cokex5xp9eUkPnTGPeDmDwfniinw== Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Nov 2019 22:35:00 -0000 --Apple-Mail=_E255ED41-4A89-4D6E-A2EA-904AF0C83693 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Ned, (we missed seeing you in person) Primarily the difference between TPM-style that doesn=E2=80=99t rely on = secure boot and non-TPM-style that does rely on secure boot.=20 You can and will implicit claims in either. TPM-style is not going to have explicit claims unless you do TPM + EAT = style. (Hmmm, should that be in the architecture and the YANG module?) Makes sense, right? LL > On Nov 23, 2019, at 11:20 AM, Smith, Ned wrote: >=20 > @laurence - By =E2=80=9Cthis=E2=80=9D you mean the difference between = implicit and explicit attestation? > =20 > From: RATS > on = behalf of Laurence Lundblade > > Date: Saturday, November 23, 2019 at 8:44 AM > To: Henk Berkholz > > Cc: "rats@ietf.org " >, Kathleen Moriarty = >, "Smith, Ned" = > > Subject: Re: [Rats] Two types of secure attestation > =20 > =20 >> On Nov 21, 2019, at 6:26 PM, Henk Birkholz = > wrote: >> =20 >> There are no semantic difference between the "simple non-TPM EAT" = scenario and the TPM-based implicit remote attestation scenario. They = are if fact the "same types of secure attestation=E2=80=9D. > =20 > =20 > I don=E2=80=99t have any need to drive taxonomic distinction when = unnecessary, but note that the YANG module has to have explicit = different facilities to be able to handle both. > =20 > The verifier implementations for these two types are also very = different. in the "non-TPM EAT=E2=80=9D scenario no known-good-values = for SW hashes are need to be supplied to the verifier. > =20 > I don=E2=80=99t think these are the only differences that we=E2=80=99ll = encounter in real implementations.=20 > =20 > This should probably all be described the architecture document. Seems = as significant as the passport vs background check distinction. > =20 > LL > =20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_E255ED41-4A89-4D6E-A2EA-904AF0C83693 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Ned, (we missed seeing you in person)

Primarily the difference between = TPM-style that doesn=E2=80=99t rely on secure boot and non-TPM-style = that does rely on secure boot. 

You can and will implicit claims in = either.

TPM-style is not going to have explicit claims unless you do = TPM + EAT style. (Hmmm, should that be in the architecture and the YANG = module?)

Makes = sense, right?

LL



On Nov 23, 2019, at 11:20 AM, Smith, Ned = <ned.smith@intel.com> wrote:

@laurence = - By =E2=80=9Cthis=E2=80=9D you mean the difference between implicit and = explicit attestation?
 
From: RATS <rats-bounces@ietf.org> on = behalf of Laurence Lundblade <lgl@island-resort.com>
Date: Saturday, November 23, = 2019 at 8:44 AM
To: Henk Berkholz <henk.birkholz@sit.fraunhofer.de>
Cc: "rats@ietf.org" <rats@ietf.org>, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, "Smith, Ned" <ned.smith@intel.com>
Subject: Re: [Rats] Two types of = secure attestation
 
 
On = Nov 21, 2019, at 6:26 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
 
There are no semantic difference between the "simple non-TPM = EAT" scenario and the TPM-based implicit remote attestation scenario. = They are if fact the "same types of secure attestation=E2=80=9D.
 
 
I don=E2=80=99t have any need to drive taxonomic = distinction when unnecessary, but note that the YANG module has to have = explicit different facilities to be able to handle both.
 
The verifier implementations for these = two types are also very different. in the "non-TPM EAT=E2=80=9D scenario = no known-good-values for SW hashes are need to be supplied to the = verifier.
 
I don=E2=80=99t think these are the only = differences that we=E2=80=99ll encounter in real = implementations. 
 
This should probably all be described the = architecture document. Seems as significant as the passport vs = background check distinction.
 
LL
 


_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_E255ED41-4A89-4D6E-A2EA-904AF0C83693-- From nobody Sun Nov 24 01:00:18 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A180D1200FA for ; Sun, 24 Nov 2019 01:00:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.641 X-Spam-Level: X-Spam-Status: No, score=-0.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e8u8g55Zt0RJ for ; Sun, 24 Nov 2019 01:00:14 -0800 (PST) Received: from mail-wm1-x330.google.com (mail-wm1-x330.google.com [IPv6:2a00:1450:4864:20::330]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A46D120020 for ; Sun, 24 Nov 2019 01:00:14 -0800 (PST) Received: by mail-wm1-x330.google.com with SMTP id l17so11994974wmh.0 for ; Sun, 24 Nov 2019 01:00:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=DODlbRQjQe/vTr/2qkfIKDTsAv3r6IJMRN+PH17Zgj0=; b=lOYe5Jmsgu93Hc/aGgENXJ8yl7fg44gtqzzRzZ9lVLl0MxiDHU7OR6Bp8F4mHBxT6k 15SV1Y5gSNA2GrthTvruPL7VK6L4hdB3ljT0wYSoahpGndKnXZfdSDJEXo49mh5TCrYU 9JQJj0/hnxbEJX2Uwc+C3F/QX/chgkVV76QqFyZutxPpJ9WLHAdBCkWbirYh16u2+30n Ecm/KiNjsqp865n+PneGoV+gC5GyLsVe4j4wOGagI3Ucusfa1PmsJiYRwK3U/glmsB6+ TTc67aqgXqzCbrDrtS6sOLGfzdKBhE8WYKH7lFJFQW6UZ9uk++4nhgIogG+qYCpSlXbE E1Nw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=DODlbRQjQe/vTr/2qkfIKDTsAv3r6IJMRN+PH17Zgj0=; b=QY+mzZXwn1DCwQKu/GZbINA0S51G4zwfCtN17i7Yr3OtLVbfB1WYHRlvz7ka3GsjMt a/L2fT7cncv7pV5dTvvkoZDaTQrEVbLuZGr1YT+V//MjG/kfPDxi+W70W+xswrAEXYV7 zzJS8rzQh0tYHDZCVC8SYH8teNvGS+JUJE+btGhn+9JdyZONySy5aI+Yc0x5j0E/KTrD dkuyvyuus6bVisy1N5SQGUFUM2o9eiYEI2T70H7qe4Ze4/uhFnhNYzsO6/5hANlXVoQZ 8mMBMyoJAdL0lLDsuw/FKGv/jWkA/oxo8amvrKPnuFxsFieHyXw6X9p8Yq8m2pErsVTX gz1g== X-Gm-Message-State: APjAAAWqeHV1VdtbBUlur2tw6GeKH9gkoRpoLYbpxcAjYtQ4MspCR8kJ ktiGSllTCdnJ3yfDjfiRqaE= X-Google-Smtp-Source: APXvYqz5NfbQNcymg88mrlbUVvAhifgr5emtzOUImxjkB3GhA0T4ecJluI2S80sGEJpwILlbVfj7UA== X-Received: by 2002:a7b:cb97:: with SMTP id m23mr4769521wmi.69.1574586012577; Sun, 24 Nov 2019 01:00:12 -0800 (PST) Received: from [10.0.0.146] (bzq-109-67-99-114.red.bezeqint.net. [109.67.99.114]) by smtp.gmail.com with ESMTPSA id d13sm5205990wrv.88.2019.11.24.01.00.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 24 Nov 2019 01:00:11 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Sun, 24 Nov 2019 11:00:10 +0200 From: Yaron Sheffer To: Kathleen Moriarty , Dave Waltermire , "Banghart, Stephen A. (Fed)" CC: "rats@ietf.org" Message-ID: <93829618-28A7-417A-B9EA-90CC27E36CE3@gmail.com> Thread-Topic: CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases References: <5D88882F-E40F-43C8-BC79-C5913845FE87@gmail.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657438011_802347946" Archived-At: Subject: Re: [Rats] CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 09:00:16 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657438011_802347946 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Kathleen, =20 Thanks for the reference. I just read the draft, and I don=E2=80=99t think it ans= wers my questions. =20 Best, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 From: Kathleen Moriarty Date: Friday, November 22, 2019 at 20:20 To: Yaron Sheffer , Dave Waltermire , "Banghart, Stephen A. (Fed)" Cc: "rats@ietf.org" Subject: Re: CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases =20 Hi Yaron, =20 I am copying Dave and Stephen in case they are not following RATS as closel= y as they do SACM. Have you looked at the CoSWID draft in SACM? It contain= s the full SWID format as it is translated into CoSWID. It may answer some = of your questions. I'm swamped today, but can look at this stuff more next = week or the following week and am interested. =20 Best regards, Kathleen =20 On Fri, Nov 22, 2019 at 10:43 AM Yaron Sheffer wrot= e: Hi Kathleen, I was assuming CoSWIDs (or SWIDs) to become claims anyway, this wasn=E2=80=99t wh= at I was asking. My question was whether SWIDs today cover the most common t= echnologies that we use to deploy software, other than traditional RPM (and = equivalent) software packages: * Language-specific packages deployed directly into the OS, such as Python = PIP and Ruby gems. * Language-specific packages deployed into application servers, such as Jav= a WAR files and NPM packages. * Docker containers that consist of multiple "layers", each possibly includ= ing several RPM packages as well as other stuff, like individual copied file= s. * Lambda functions that are built using their own custom toolset. I am completely ignorant about the SWID ecosystem, so maybe the answer is Y= es to all of the above (though a quick Google search came up with nothing). = Any help from experts would be appreciated. Thanks, Yaron From: Kathleen Moriarty Date: Friday, November 22, 2019 at 22:15 To: Yaron Sheffer Cc: "rats@ietf.org" Subject: Re: [Rats] Reviewing EAT for enterprise/cloud use cases On Fri, Nov 22, 2019 at 12:57 AM Yaron Sheffer wrote: I have read the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D use case in mind= . To clarify, what I'm looking for is the capability: =20 - To attest to software components that are running inside VMs, containers = (either on VMs or bare metal), and anonymous containers (function-as-a-servi= ce, such as AWS Lambda). - Such components may be deployed in arbitrary hierarchies (VM-in-VM etc.). - Attestation of running (as opposed to installed) components. For example,= container code may be pulled from a remote repository shortly before it is = run. - To support diverse roots-of-trust, such that when a hardware root-of-trus= t is unavailable, we can have a hypervisor or an orchestration server (e.g. = Kubernetes) as the RoT, even if that means a lower level of trust. =20 I think in general, EAT can be made to fit these use cases, given its recur= sive structure. But not surprisingly given its origins, the draft would need= quite a few changes. =20 * 1.2 (and 3.12): why not spell out that a submodule can be either a hardwa= re or software component? * 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT may ha= ve other functions; a system may in general have multiple RoTs. The word "de= dicated" is not repeated anywhere else in the document, nor is it explained. * 1.3 continues to only talk hardware, e.g. when defining the "manufacturer= ". Software has a manufacturer too. * 3.3: the notion of UEID is fundamentally incompatible with some component= types that we would wish to attest. For example, the lifetime of a function= -as-a-service container may be less than a second, and even if it has an ide= ntity during its lifetime, there is no registry or persistent record of this= identity. Is a UEID required in this scheme? * 3.4: hey, finally some software! =20 I think we still don't have a handle on identifying running software, and C= osWID may not be the whole answer. CosWID is more like traditional software = inventorying, and we need something that will cover dynamic modern software. I'm going to write up some text for the CoSWID draft that would have a CoSW= ID in an EAT (CWT). If the entire CoSWID (or even SWID) were in a claim, al= lowing you to add other claims, would this suffice for your use case? I think I'll write a draft specific to what CoSWID looks like in an EAT as = a follow up and would like coauthors. I was thinking that might go into SAC= M, referencing the EAT work. Best regards, Kathleen =20 Thanks, Yaron =20 _______________________________________________ RATS mailing list mailto:RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats --=20 Best regards, Kathleen =20 --=20 =20 Best regards, Kathleen --B_3657438011_802347946 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Kathleen,

 

Thanks for the reference. I just read th= e draft, and I don=E2=80=99t think it answers my questions.

 

Best,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

 

From: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Dat= e: Friday, November 22, 2019 at 20:20
To: Yaron Sheffer <ya= ronf.ietf@gmail.com>, Dave Waltermire <davewaltermire@gmail.com>, &= quot;Banghart, Stephen A. (Fed)" <stephen.banghart@nist.gov>
<= b>Cc: "rats@ietf.org" <rats@ietf.org>
Subject: Re: CoSWID, was Re: Reviewing EAT for enterprise/cloud use cases=

 

Hi Yaron,

 <= /o:p>

I am copying Dave and Stephen in case= they are not following RATS as closely as they do SACM.  Have you look= ed at the CoSWID draft in SACM?  It contains the full SWID format as it= is translated into CoSWID.  It may answer some of your questions. = ; I'm swamped today, but can look at this stuff more next week or the follow= ing week and am interested.

 

Best regards,

<= /div>

Kathleen

 

On Fri, Nov 22, 201= 9 at 10:43 AM Yaron Sheffer <yaron= f.ietf@gmail.com> wrote:

Hi = Kathleen,

I was assuming CoSWIDs (or SWIDs) to become claims anyway, = this wasn=E2=80=99t what I was asking. My question was whether SWIDs today cover t= he most common technologies that we use to deploy software, other than tradi= tional RPM (and equivalent) software packages:

* Language-specific pa= ckages deployed directly into the OS, such as Python PIP and Ruby gems.
*= Language-specific packages deployed into application servers, such as Java = WAR files and NPM packages.
* Docker containers that consist of multiple = "layers", each possibly including several RPM packages as well as = other stuff, like individual copied files.
* Lambda functions that are bu= ilt using their own custom toolset.

I am completely ignorant about th= e SWID ecosystem, so maybe the answer is Yes to all of the above (though a q= uick Google search came up with nothing). Any help from experts would be app= reciated.

Thanks,
        Yaron

From: K= athleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Date: Friday, Novembe= r 22, 2019 at 22:15
To: Yaron Sheffer <yaronf.ietf@gmail.com>
Cc: "rats@ietf.org" <rats@ietf.org>
Subject: Re: [= Rats] Reviewing EAT for enterprise/cloud use cases



On Fri, No= v 22, 2019 at 12:57 AM Yaron Sheffer <mailto:yaronf.ietf@gmail.com> wrote:
I have re= ad the EAT draft, specifically with a =E2=80=9Ccloud=E2=80=9D use case in mind. To clari= fy, what I'm looking for is the capability:
 
- To attest to soft= ware components that are running inside VMs, containers (either on VMs or ba= re metal), and anonymous containers (function-as-a-service, such as AWS Lamb= da).
- Such components may be deployed in arbitrary hierarchies (VM-in-VM= etc.).
- Attestation of running (as opposed to installed) components. Fo= r example, container code may be pulled from a remote repository shortly bef= ore it is run.
- To support diverse roots-of-trust, such that when a hard= ware root-of-trust is unavailable, we can have a hypervisor or an orchestrat= ion server (e.g. Kubernetes) as the RoT, even if that means a lower level of= trust.
 
I think in general, EAT can be made to fit these use ca= ses, given its recursive structure. But not surprisingly given its origins, = the draft would need quite a few changes.
 
* 1.2 (and 3.12): why= not spell out that a submodule can be either a hardware or software compone= nt?
* 1.2: why *dedicated* root of trust, what is it dedicated to? A RoT = may have other functions; a system may in general have multiple RoTs. The wo= rd "dedicated" is not repeated anywhere else in the document, nor = is it explained.
* 1.3 continues to only talk hardware, e.g. when definin= g the "manufacturer". Software has a manufacturer too.
* 3.3: t= he notion of UEID is fundamentally incompatible with some component types th= at we would wish to attest. For example, the lifetime of a function-as-a-ser= vice container may be less than a second, and even if it has an identity dur= ing its lifetime, there is no registry or persistent record of this identity= . Is a UEID required in this scheme?
* 3.4: hey, finally some software! 
I think we still don't have a handle on identifying running soft= ware, and CosWID may not be the whole answer. CosWID is more like traditiona= l software inventorying, and we need something that will cover dynamic moder= n software.

I'm going to write up some text for the CoSWID draft that= would have a CoSWID in an EAT (CWT).  If the entire CoSWID (or even SW= ID) were in a claim, allowing you to add other claims, would this suffice fo= r your use case?

I think I'll write a draft specific to what CoSWID l= ooks like in an EAT as a follow up and would like coauthors.  I was thi= nking that might go into SACM, referencing the EAT work.

Best regards= ,
Kathleen

 
Thanks,
     &nbs= p;          Yaron
 
= _______________________________________________
RATS mailing list
mail= to:RATS@ietf.org
https://www.= ietf.org/mailman/listinfo/rats



--

Best regards,Kathleen


 

<= p class=3DMsoNormal>--

 =

Best regards,

Kathleen

--B_3657438011_802347946-- From nobody Sun Nov 24 02:55:09 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7615B120127 for ; Sun, 24 Nov 2019 02:55:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.641 X-Spam-Level: X-Spam-Status: No, score=-0.641 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kbr9Qe7AAC65 for ; Sun, 24 Nov 2019 02:55:05 -0800 (PST) Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 219BC120125 for ; Sun, 24 Nov 2019 02:55:05 -0800 (PST) Received: by mail-wr1-x42a.google.com with SMTP id t1so13948195wrv.4 for ; Sun, 24 Nov 2019 02:55:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=Occ4yab/Hs8wob1LGlkJk9BmL0g8nTFJh8eDWnwq42Q=; b=I2lPepYq5X9crnNppG2IVWG9iAXCXTMSiCiCl32aDzBp0deY36uTFzT2ZrkF/Npldr qjBdlYlbo0lnmhwA2ab4NHzFV4TnljbSZ5qxlgPfpN6PWks9Ta+R0+/gYI4qwLQOQKfA MPyl2oxQ69pxfCZ2kPY4PH5nXUQ4jH14QVyV98ShrRLDxaOn57FAsnHITUOCdjoGeDEh AzYq/c/K6Fgi7eyRciNNXBIc6juygs/STP/H2givS2Py+tSzchbVvF2WtfBWuUackHbK xPaWkFRQ0LNmEirnLniZ4+v3dpT01kOl/q+Cx+2bnlVNzEihbk7yD54sdHoY18+umPrA Cihw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=Occ4yab/Hs8wob1LGlkJk9BmL0g8nTFJh8eDWnwq42Q=; b=lQx7JqunRDwTlEUCbgc1TE4q4elIFZUh0e6iJjLCroKJjTtk7B3Di14TKhlenqVh5v kT6SYwCNPm54tDChkg7kN/4HWdb/eWP5HambEkZEpGoapE1rJ6P7z+hd8W4jm3HGBAbw nNbLHMiGUKjbqvjQZrGJg5sbaVELW5GKTJByw53ibdSJ/zQZMa4D3wMPpHBL2GEYxMe6 sxxr/AxwcbjGTC/uUzxEqAfCuPcDE52qk2L2xEXMfQbuyclRsyCdCcNaEnPoqeNRdhfM DnkHtKhKaFb/An4HQwqC7rqhMMXWkbgV2d4hfXs04Odh5Kv4MCRbI6y/a5bsHQSzh8N0 WrEQ== X-Gm-Message-State: APjAAAX3ACtgh9qzFvQDrz3xbLqQKQgKk5i9CZjE/23LUa9bZABVyrlX +fSj7NQCLy+KYIO+rmrKQYZS+LEWGWk= X-Google-Smtp-Source: APXvYqytfr2ChdrHmJ5G2NKL0aW/nyZxpleEbfshIcORzhFMpPFRt2JG80fCB1KxoQad9GZuz5CvUQ== X-Received: by 2002:adf:f28c:: with SMTP id k12mr4487562wro.360.1574592903461; Sun, 24 Nov 2019 02:55:03 -0800 (PST) Received: from [10.0.0.146] (bzq-109-67-99-114.red.bezeqint.net. [109.67.99.114]) by smtp.gmail.com with ESMTPSA id t81sm4638915wmg.6.2019.11.24.02.55.01 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 24 Nov 2019 02:55:02 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Sun, 24 Nov 2019 12:54:57 +0200 From: Yaron Sheffer To: Laurence Lundblade CC: Hannes Tschofenig , "rats@ietf.org" Message-ID: <31B9F6C7-74E2-4B9E-933C-77D7B51E21E7@gmail.com> Thread-Topic: [Rats] EAT IANA registry References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> In-Reply-To: <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657444901_1842661877" Archived-At: Subject: Re: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 10:55:07 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657444901_1842661877 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Laurence, =20 Yes, such profiles would certainly be helpful for attestation.=20 =20 Unfortunately they would not solve the fundamental problem that a developer= who wishes to use JWT for anything, not necessarily attestation, is faced w= ith a registry that he or she has no chance of figuring out. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 From: Laurence Lundblade Date: Saturday, November 23, 2019 at 18:29 To: Yaron Sheffer Cc: Hannes Tschofenig , "rats@ietf.org" Subject: Re: [Rats] EAT IANA registry =20 One of our thoughts is that EAT profiles will help with this. For example, = a special profile for toasters might list 5 claims that must be included in = every attestation and 10 claims that are optional and maybe even prohibit al= l others. =20 LL =20 On Nov 22, 2019, at 6:57 AM, Yaron Sheffer wrote: =20 Hi Hannes, =20 Looking at the JWT claim IANA registry [1], it is already a terrible mess o= f several different standards, obviously with many more coming. I guess what= =E2=80=99s done is done, and I=E2=80=99ll take back my objection. =20 Thanks, Yaron =20 [1] https://www.iana.org/assignments/jwt/jwt.xhtml#claims =20 From: Hannes Tschofenig Date: Friday, November 22, 2019 at 14:17 To: Yaron Sheffer , "rats@ietf.org" Subject: RE: EAT IANA registry =20 Yaron,=20 Could you explain why you think that this is a good idea?=20 Ciao Hannes =20 From: RATS On Behalf Of Yaron Sheffer Sent: Friday, November 22, 2019 2:05 PM To: rats@ietf.org Subject: [Rats] EAT IANA registry =20 Unrelated to my earlier mail, I would recommend to create a separate regist= ry for EAT claims (I suppose that implies a nested object in the JWT/CWT) ra= ther than to overload the CWT registry. Architecturally it just doesn=E2=80=99t ji= ve to have all these claims as baseline CWT claims, and process-wise, it=E2=80=99s= much more convenient for this group to control its own namespace. =20 Sorry if this has been raised before. =20 Thanks, Yaron IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, pl= ease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you.=20 _______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats =20 --B_3657444901_1842661877 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Laurence,

 

Yes, such profiles would certainly be he= lpful for attestation.

 

Unfortunately they would not solve the fundamental prob= lem that a developer who wishes to use JWT for anything, not necessarily att= estation, is faced with a registry that he or she has no chance of figuring = out.

 

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Ya= ron

 

From: Laurence Lundblade <lgl@island-resor= t.com>
Date: Saturday, November 23, 2019 at 18:29
To: Yaron Sheffer <yaronf.ietf@gmail.com>
Cc: Hannes Tschofenig= <Hannes.Tschofenig@arm.com>, "rats@ietf.org" <rats@ietf.= org>
Subject: Re: [Rats] EAT IANA registry

 

One of our thoughts is that EAT profiles will help with this. For example, = a special profile for toasters might list 5 claims that must be included in = every attestation and 10 claims that are optional and maybe even prohibit al= l others.

 

<= div>

LL

&= nbsp;



On Nov 22= , 2019, at 6:57 AM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

 

Hi Hannes,

 

Looking at the JWT claim IANA registry [1], it is already a terrible me= ss of several different standards, obviously with many more coming. I guess = what=E2=80=99s done is done, and I=E2=80=99ll take back my objection.

 

Thanks,

          &= nbsp;     Yaron

&nb= sp;

 

From: = Hannes Tschofenig <Hannes.Tschofenig@arm.co= m>
Date: <= /b>Friday, November 22, 2019 at 14:17
To: Yaron Sheffer <yaronf.ietf@gmail.com>, "<= a href=3D"mailto:rats@ietf.org">rats@ietf.org" <= rats@ietf.org>
Subject: RE: EAT IANA registry

 

Yaron, 

<= /div>

Could you explain why you think that this is a = good idea? 

Ciao

H= annes

 

From: RATS <rats-bounces@ietf.org> On Behalf Of&= nbsp;Yaron Sheffer
Sent: Friday, November 22, 2019 2:05 PM
To: rats@ietf.org
Subject: [Rats] EAT IANA registry

 

Unrelated to my earlier mail, I would recommend to create a separ= ate registry for EAT claims (I suppose that implies a nested object in the J= WT/CWT) rather than to overload the CWT registry. Architecturally it just do= esn=E2=80=99t jive to have all these claims as baseline CWT claims, and process-wi= se, it=E2=80=99s much more convenient for this group to control its own namespace.=

 

Sorry if this has been raised before.

 

Thanks,

          &= nbsp;     Yaron

IMPORTANT NOTICE: The contents of = this email and any attachments are confidential and may also be privileged. = If you are not the intended recipient, please notify the sender immediately = and do not disclose the contents to any other person, use it for any purpose= , or store or copy the information in any medium. Thank you. 

_______________________________________________
RATS mailing lis= t
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats<= /p>

 

--B_3657444901_1842661877-- From nobody Sun Nov 24 03:49:57 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3E02120127 for ; Sun, 24 Nov 2019 03:49:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MEKLrk1yeC8n for ; Sun, 24 Nov 2019 03:49:53 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FF48120106 for ; Sun, 24 Nov 2019 03:49:52 -0800 (PST) Received: from dooku.sandelman.ca (eth-west-pareq2-46-193-2-123.wb.wifirst.net [46.193.2.123]) by relay.sandelman.ca (Postfix) with ESMTPS id C58A51F47D for ; Sun, 24 Nov 2019 11:49:51 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 0E3E89D1; Sun, 24 Nov 2019 19:49:55 +0800 (+08) From: Michael Richardson to: rats@ietf.org In-reply-to: <24599.1574398767@dooku.sandelman.ca> References: <24599.1574398767@dooku.sandelman.ca> Comments: In-reply-to Michael Richardson message dated "Fri, 22 Nov 2019 12:59:27 +0800." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sun, 24 Nov 2019 12:49:55 +0100 Message-ID: <2489.1574596195@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] RATS architecture design team "weekly" working meetings X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 11:49:56 -0000 --=-=-= Content-Type: text/plain Ned points out that I fat-fingered the first session on Friday, making it only 30 minutes long. I intend it to be an hour, but I won't edit as that will invalidate the poll. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3abmIACgkQlUzhVv38 QpDNEAgAixOseBGlLIjqtD823NZ0geycICY0zDp6Y5bMFhBDkrjofIAcdiVCgRpS tNt0BqKNQlyHkW9OYR+xovoEDrTebyyZObneBGXnoNbqpJhZxDmFMLEFb4k6xMV1 9tAQBUA6S2TEClnEnvRYHTP+5r8wO5lH9TaV7wkL1JVXvrOFg8ua1mCXPvmO6tNG OnTmd3WaPtkMnElKEwR2/ahM3IYHa4bOZEzjkscPPC8zlTWx/5mUBG8xuui6knPR qK3WuJQAcxa0nmBrulykci7Uf4nobhe49KOdnsCVIyK6555AIUpxqWY0+vzNxLR6 cH9G1MdPRSFKDjXuGSsBC3WvPKZuPw== =7lBH -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Nov 24 05:44:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F307212013C; Sun, 24 Nov 2019 05:44:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BTm-n8QkZlBV; Sun, 24 Nov 2019 05:44:43 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19CD91200CC; Sun, 24 Nov 2019 05:44:42 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAODicav019908 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 24 Nov 2019 14:44:39 +0100 Received: from [172.17.29.118] (5.148.85.20) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 24 Nov 2019 14:44:33 +0100 To: Kathleen Moriarty CC: "Waltermire, David A. (Fed)" , "rats@ietf.org" , Ira McDonald , sacm , Laurence Lundblade , "suit@ietf.org" References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <66208f61-03e9-7269-ea1a-0ff4e45d296f@sit.fraunhofer.de> Date: Sun, 24 Nov 2019 14:44:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [5.148.85.20] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 13:44:47 -0000 Hi Kathleen, I'll provide comments and replies in-line. I hope that is okay. On 22.11.19 19:26, Kathleen Moriarty wrote: > Hi Henk, > > I am not entirely following you, so I am not stating agreement yet. Of course, I was typing very hastily before take-off. > > On Fri, Nov 22, 2019 at 12:06 PM Henk Birkholz > > wrote: > > Hi Kathleen, > hi SACM, SUIT & RATS list, > > the corresponding *SWID authors discussed this issue and are proposing: > > > https://github.com/ietf-rats-wg/eat/issues/46 > > This includes an extended scope to include the option of SUIT Manifest > related Claim values, next to various *SWID Claim values. We permutated > "signed" & "not-signed" as well as "payload tags" and "evidence tags" > for *SWID tags in this proposal. The authors are convinced that the > "not-signed" variants are of essence (as CWT does not allow "not-signed > CBOR items", but also do not imply any implications to the SUIT > Manifest > Claim definition (although there are strong similarities and there > could > be some). > > > Can you write the above again?  Are you saying this in terms of a CWT? > Wouldn't the claims and the text value in a CWT be represented as-is, > then signed, so you'd get what you are saying is needed? Let me attempt to rephrase :) 1.) In order to be semantic interoperable with ISO SWID, CoSWID most enable signed and un-signed software identification tags. I.e. signing is optional for evidence tags and recommended for payload tags according to ISO/IEC 19770-2:2015 and it is recommended for evidence tags and mandatory for payload tags according to NISTIR 8060:2016. These statements stand by themselves and have nothing to do with CWT. 2.) The CoSWID authors/editors would like to see CoSWID as claim values in EAT, and therefore as an extension as CWT Claims (as this is how EAT works with respect to new Claims for EAT). There are two types of software identification tags defined by ISO/SWID & CoSWID, respectively, that we think are important to RATS in this first context: the payload resource-collection and the evidence resource-collection. * Payload is the content for (RATS) Appraisal Policy messages (formerly named Reference Values). They are the "intended software installation and configuration state for a well-defined scope of software components" signed by the creator of the software, potentially co-signed by certification authorities (e.g. CC-certified), or countersigned/co-signed by local administration authorities. * Evidence is the content for (RATS) Attestation Evidence. They are created on the target of evaluation (the Attester) and represent "a measurement of actually installed software components and their configuration". They can be signed by an Attesting Environment on the Attester, or they can be unsigned (if there is no RTR, such as a TEE with Android Keystore API or a {p|f|v}TPM'esque interface). 3.) Therefore, if a *SWID is a value in a Claim of an EAT, this value can be at least one of these eight options: Appraisal Policy Content: * signed payload tag CoSWID * signed payload tag ISO/SWID * unsigned payload tag CoSWID * unsigned payload tag ISO/SWID Attestation Evidence Content: * signed evidence tag CoSWID * signed evidence tag ISO/SWID * unsigned evidence tag CoSWID * unsigned evidence tag ISO/SWID It is quite beneficial to register a CWT Claim for each one of these eight flavors for the use in EAT: to simplify CWT parsing and retain the well defined semantics of each of these *SWID tag flavors. 4.) Additionally, to register a CWT Claim for the SUIT Manifest is quite useful, in order to create attestation evidence about firmware and its metadata (that is not well-defined in CoSWID, but - please note - can also be represented in CoSWID, it just not that elegant). Hence the proposal in the EAT issue #46. We were preparing at least two CoSWID related documents for a while now (waiting for CoSWID to pass IESG). The other CoSWID realted I-D might address Yaron's issue, but the write-up is not complete yet (the last 20% take the longest...). > > > The current *SWID contributors prefer this contribution as a parallel > effort to the EAT I-D, SUIT Manifest I-D, the CoSWID I-D and existing > ISO XML SWID standard. This proposal includes the primitive to not > delay > corresponding IETG I-D in their respective WGs. > > > Are you saying you don't want to add text stating the use of a CWT is a > possible alternative, as that is what was requested.  I offered to write > a separate document to put the CoSWID in a CWT in SACM as I think that's > the right home, referencing EAT work. I am trying to say here that we want to write a new I-D. I am not entirely sure anymore, where you want to add text about that. I am not sure how useful it would be refer to a new I-D in the CoSWID document, which is now closing in on it's end of the WGLC. I think it might be more useful and expedite the process to do it in a way like other "Claim drafts" do it, such as: > https://datatracker.ietf.org/doc/draft-mandyam-rats-qwestoken/ and > https://datatracker.ietf.org/doc/draft-tschofenig-rats-psa-token/ This seems to be the common pattern. Is there a reason to diverge from that? > > > Having said that, we would like to get feedback for the proposal > references above. > > If there is no dissent or push-back on either the SUIT, SACM, and RATS > lists, our proposed way forward is a unified creation of EAT Claim Sets > in the RATS WG that enables the use of various *SWID variants & the > SUIT > Manifest as payloads for RATS via the RATS EAT I-D. > > > I think this should be in SACM.  And I've offered to help.  I do think > that a little text saying it's possible should be in the CoSWID draft > and will provide that soon as not to delay progress of the CoSWID document. Well, we can do this new I-D in SACM, but I am not sure why SACM is the more suitable place for that. Both the qwes-token and the psa-token define Claims that can be used in EAT are at least related to RATS (I think Hannes mentioned he wanted to be individual stream in the end, but I might be mistake). In any case, I am not against doing this in SACM, we did a lot of cross-wg and cross-area I-D in cooperation with SACM already and even got the "cross-area" Hackathon award for that - so while slightly in favor of RATS, I am not against SACM, if there is a good reason for that. We plan to relate the the 2nd upcoming CoSWID related I-D with RATS, though. I am most certainly not against "a little text saying it's possible" in the CoSWID draft. I am only stepping very carefully when putting in a reference to a future document, which there is no guarantee for that it will actually work out or that it will be the thing that was promised in that text before. In this specific case, I am also not sure what the problem is we are trying to solve by adding new content at this stage. Having said that, I am not against it, if we achieve "not do to delay progress of the CoSWID document" as you highlighted :) > > Best regards, > Kathleen Viele Grüße from Manchester, Henk > > > In summary, we would like to create this interop I-D in concert and > welcome every joint effort in this domain. > > Viele Grüße, > > Henk > > On 21.11.19 12:37, Kathleen Moriarty wrote: > > > > > > Sent from my mobile device > > > >> On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed) > >> > > wrote: > >> > >>  > >> It sounds like having a CWT claim that contains an entire CoSWID > is a > >> path forward. It may also make sense to do something similar for > ISO > >> SWID tags. > >> > >> Am I right in thinking that this CWT work can be done in RATS, > >> referencing CoSWID once it is published as a normative > reference? This > >> would allow CoSWID to go forward to the IESG, while the CoSWID CWT > >> claim is worked in parallel in RATS. > >> > >> Kathleen, if this is true, does this way forward address your > >> CWT-related comments? > > > > Hi Dave, > > > > I think the signature may have to be on the CWT as opposed to on the > > claim that is the CoSWID or SWID.  We can define it fully in another > > draft, but should state it here so that option is understood. > It’s a > > simple write up, I think. > > > > Thank you, > > Kathleen > >> > >> Regards, > >> Dave > >> > >> > >> > >> > >> > >> > ------------------------------------------------------------------------ > >> *From:* sacm > on behalf of Kathleen Moriarty > >> > > >> *Sent:* Wednesday, November 20, 2019 9:10 PM > >> *To:* Ira McDonald > > >> *Cc:* rats@ietf.org >; sacm >; Laurence > >> Lundblade > > >> *Subject:* Re: [sacm] [Rats] CoSWID and EAT and CWT > >> Great, thanks Laurence.  If that's easier I think having the > CoSWID in > >> one claim should be ok and would have the same result as the > >> suggestion I made.  Changing the CoSWID format is a big enough > process > >> that it shouldn't happen very often. > >> > >> Best regards, > >> Kathleen > >> > >> On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald > > >> >> wrote: > >> > >>     Hi Laurence, > >> > >>     That seems like a good suggestion for a simple way to integrate > >>     CoSWID content > >>     into EAT. > >> > >>     Cheers, > >>     - Ira > >> > >>     Ira McDonald (Musician / Software Architect) > >>     Co-Chair - TCG Trusted Mobility Solutions WG > >>     Co-Chair - TCG Metadata Access Protocol SG > >>     Chair - Linux Foundation Open Printing WG > >>     Secretary - IEEE-ISTO Printer Working Group > >>     Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > >>     IETF Designated Expert - IPP & Printer MIB > >>     Blue Roof Music / High North Inc > >> http://sites.google.com/site/blueroofmusic > >> >   > >> http://sites.google.com/site/highnorthinc > >> >  > > >>     mailto: blueroofmusic@gmail.com > > > >>     PO Box 221  Grand Marais, MI 49839  906-494-2434 > >> > >> > >> > >>     On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade > >>      > >> wrote: > >> > >>         Hi, > >> > >>         I’m not on the SACM list, but did look at the archive. > >>         Hopefully I’m not out of sync. > >> > >>         My thought is to register one claim for CWT that is an > entire > >>         CoSWID (in CDDL the concise-swid-tag). > >> > >>         That way CoSWID can grow and develop on its own without lots > >>         of adds and subtracts to the CWT registry. It has its > own IANA > >>         registry with its own experts and such. Seems like the > >>         coupling / factoring is about right. > >> > >>         This would also be the way I’d like to have it in EAT > >>         attestation. We’ve done a mini version of this with the > >>         location claim > >> >  . > >> > >>         Then if you just want to sign a CoSWID CWT style, this works > >>         pretty well too. It has a slight overhead compared to having > >>         all the CoSWID data items as direct CWT claims in that > it will > >>         have an additional map layer, but that is only about > three bytes. > >> > >>         LL > >> > >>         _______________________________________________ > >>         RATS mailing list > >> RATS@ietf.org > > >> https://www.ietf.org/mailman/listinfo/rats > >> >   > >> > >>     _______________________________________________ > >>     sacm mailing list > >> sacm@ietf.org > > >> https://www.ietf.org/mailman/listinfo/sacm > >> >   > >> > >> > >> > >> -- > >> > >> Best regards, > >> Kathleen > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > -- > > Best regards, > Kathleen From nobody Sun Nov 24 07:31:21 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44B701200D5 for ; Sun, 24 Nov 2019 07:31:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H_hD5zKWuGxQ for ; Sun, 24 Nov 2019 07:31:18 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2CA41200C5 for ; Sun, 24 Nov 2019 07:31:16 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAOFVD3B024461 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 24 Nov 2019 16:31:14 +0100 Received: from [172.17.29.118] (5.148.85.20) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 24 Nov 2019 16:31:07 +0100 To: "Smith, Ned" , "rats@ietf.org" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> From: Henk Birkholz Message-ID: <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> Date: Sun, 24 Nov 2019 16:31:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [5.148.85.20] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 15:31:20 -0000 Hi all, in a nutshell, one of the things I tried to express is that the following quite is simply not correct wrt to what is called here the "TPM-style" (I would really like to not use the words "TPM-style" and not to mixing authenticated & secure boot. Authenticated Boot is fine): > Primarily the difference between TPM-style that doesn’t rely on secure boot and non-TPM-style that does rely on secure boot. It is never possible to create TPM structures that are signed Attestation Evidence, if a device that is explicitly intended to conduct "secure boot" did actually not do so successfully. That is one of the key-features of TPM/TSS remote attestation procedures. On the other hand, what leaves me puzzled is the following. If these three quotes are all correct... > You cannot create an EAT unless the authenticated boot was successful. The key material with which to sign the EAT is inaccessible if authenticated boot fails (or else the device just won’t boot at all). draft-ietf-rats-eat-01: > All claims are optional and draft-ietf-rats-eat-01 again: > 3.7. Secure Boot and Debug Enable State Claims (boot_state) > > This claim is an array of five Boolean values indicating the boot and > debug state of the entity. ... one is allowed either to omit that Claim in an EAT or set some values of the Claim members to false. Therefore indicating that the boot state is, e.g. "secure_boot_enabled=> false", and still be able to create the EAT. Is that correct? If not, why include this member of the boot_state Claim at all? It always made me think until now that it allows for a device to not conduct "secure boot" and still be able to create an EAT. Besides that, what I think we are actually talking about is implicit and explicit attestation. The "non-TPM-style" RATS Laurence is talking about seem to be implicit remote attestation and that if of course of "equal stature" to the implicit remote attestation that uses a TPM. I am not arguing with that - I am agreeing with that! :) Viele Grüße, Henk On 23.11.19 20:20, Smith, Ned wrote: > @laurence - By “this” you mean the difference between implicit and > explicit attestation? > > *From: *RATS on behalf of Laurence Lundblade > > *Date: *Saturday, November 23, 2019 at 8:44 AM > *To: *Henk Berkholz > *Cc: *"rats@ietf.org" , Kathleen Moriarty > , "Smith, Ned" > *Subject: *Re: [Rats] Two types of secure attestation > > On Nov 21, 2019, at 6:26 PM, Henk Birkholz > > wrote: > > There are no semantic difference between the "simple non-TPM EAT" > scenario and the TPM-based implicit remote attestation scenario. > They are if fact the "same types of secure attestation”. > > I don’t have any need to drive taxonomic distinction when unnecessary, > but note that the YANG module has to have explicit different facilities > to be able to handle both. > > The verifier implementations for these two types are also very > different. in the "non-TPM EAT” scenario no known-good-values for SW > hashes are need to be supplied to the verifier. > > I don’t think these are the only differences that we’ll encounter in > real implementations. > > This should probably all be described the architecture document. Seems > as significant as the passport vs background check distinction. > > LL > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Sun Nov 24 07:44:26 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E88B120052; Sun, 24 Nov 2019 07:44:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XGiU4hXIEvsN; Sun, 24 Nov 2019 07:44:22 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46181120043; Sun, 24 Nov 2019 07:44:21 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAOFiIZv024757 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 24 Nov 2019 16:44:19 +0100 Received: from [172.17.29.118] (5.148.85.20) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 24 Nov 2019 16:44:13 +0100 To: "Smith, Ned" , Kathleen Moriarty CC: "suit@ietf.org" , sacm , "rats@ietf.org" , Laurence Lundblade , Ira McDonald , "Waltermire, David A. (Fed)" References: <922EA164-FB96-4245-A46C-6520809E6311@gmail.com> <01f09bc9-bd79-89da-243d-cd766f297a5b@sit.fraunhofer.de> <65CFC5E3-1B46-4235-B4F4-692F475AC80F@intel.com> From: Henk Birkholz Message-ID: <93390196-dd6a-131a-afe8-4bea845d6648@sit.fraunhofer.de> Date: Sun, 24 Nov 2019 16:44:12 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <65CFC5E3-1B46-4235-B4F4-692F475AC80F@intel.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [5.148.85.20] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 15:44:26 -0000 Hi Ned, "Evidence" and "Payload" are two of the four pre-defined (and extensible) types of resource-collection defined by ISO/IEC 19770-2:2015, CoSWID and NISTIR 8060:2016, respectively. They are defined here: > https://tools.ietf.org/html/draft-ietf-sacm-coswid-13#section-2.3 Fortunately, Evidence is semantically very well aligned with the meaning of Evidence in the context of RATS, it is effectively created by an Attesting Environment of an Attester as a measurement: > o evidence-entry (index 3): This item can be used to record the > results of a software discovery process used to identify untagged > software on an endpoint or to represent indicators for why > software is believed to be installed on the endpoint. In either > case, a CoSWID tag can be created by the tool performing an > analysis of the software components installed on the endpoint. > Described in Section 2.9.4. In general, Payload lists the files that may be installed with a software product, and could be a superset of those files. Semantically, they are the equivalent to Appraisal Policies (formerly know as Reference Values). This differs from the use of Evidence, which is used to store results from a scan that indicate why the product is believed to be installed: > o payload (index 6): This item represents a collection of software > artifacts (described by child items) that compose the target > software. For example, these artifacts could be the files > included with an installer for a corpus tag or installed on an > endpoint when the software component is installed for a primary or > patch tag. The artifacts listed in a payload may be a superset of > the software artifacts that are actually installed. Based on user > selections at install time, an installation might not include > every artifact that could be created or executed on the endpoint > when the software component is installed or run. Described in > Section 2.9.3. Viele Grüße, Henk On 22.11.19 20:39, Smith, Ned wrote: > Regarding issue 46 (link below), the proposed (9) claims distinguish > between Evidence, “Payload” and SUIT Manifest variations. Evidence is > defined by RATS architecture, SUIT Manifest by SUIT WG, but not sure > where “Payload” is defined and how it differs from Evidence. Possibly 8 > claims can be collapsed into 4? > > *From: *RATS on behalf of Kathleen Moriarty > > *Date: *Friday, November 22, 2019 at 10:27 AM > *To: *Henk Berkholz > *Cc: *"suit@ietf.org" , sacm , > "rats@ietf.org" , Laurence Lundblade > , Ira McDonald , > "david.waltermire@nist.gov" > *Subject: *Re: [Rats] [sacm] CoSWID and EAT and CWT > > Hi Henk, > > I am not entirely following you, so I am not stating agreement yet. > > On Fri, Nov 22, 2019 at 12:06 PM Henk Birkholz > > wrote: > > Hi Kathleen, > hi SACM, SUIT & RATS list, > > the corresponding *SWID authors discussed this issue and are proposing: > > > https://github.com/ietf-rats-wg/eat/issues/46 > > This includes an extended scope to include the option of SUIT Manifest > related Claim values, next to various *SWID Claim values. We permutated > "signed" & "not-signed" as well as "payload tags" and "evidence tags" > for *SWID tags in this proposal. The authors are convinced that the > "not-signed" variants are of essence (as CWT does not allow "not-signed > CBOR items", but also do not imply any implications to the SUIT > Manifest > Claim definition (although there are strong similarities and there > could > be some). > > Can you write the above again?  Are you saying this in terms of a CWT? > Wouldn't the claims and the text value in a CWT be represented as-is, > then signed, so you'd get what you are saying is needed? > > > The current *SWID contributors prefer this contribution as a parallel > effort to the EAT I-D, SUIT Manifest I-D, the CoSWID I-D and existing > ISO XML SWID standard. This proposal includes the primitive to not > delay > corresponding IETG I-D in their respective WGs. > > Are you saying you don't want to add text stating the use of a CWT is a > possible alternative, as that is what was requested.  I offered to write > a separate document to put the CoSWID in a CWT in SACM as I think that's > the right home, referencing EAT work. > > > Having said that, we would like to get feedback for the proposal > references above. > > If there is no dissent or push-back on either the SUIT, SACM, and RATS > lists, our proposed way forward is a unified creation of EAT Claim Sets > in the RATS WG that enables the use of various *SWID variants & the > SUIT > Manifest as payloads for RATS via the RATS EAT I-D. > > I think this should be in SACM.  And I've offered to help.  I do think > that a little text saying it's possible should be in the CoSWID draft > and will provide that soon as not to delay progress of the CoSWID document. > > Best regards, > > Kathleen > > > In summary, we would like to create this interop I-D in concert and > welcome every joint effort in this domain. > > Viele Grüße, > > Henk > > On 21.11.19 12:37, Kathleen Moriarty wrote: > > > > > > Sent from my mobile device > > > >> On Nov 20, 2019, at 11:29 PM, Waltermire, David A. (Fed) > >> > > wrote: > >> > >> > >> It sounds like having a CWT claim that contains an entire CoSWID > is a > >> path forward. It may also make sense to do something similar for > ISO > >> SWID tags. > >> > >> Am I right in thinking that this CWT work can be done in RATS, > >> referencing CoSWID once it is published as a normative > reference? This > >> would allow CoSWID to go forward to the IESG, while the CoSWID CWT > >> claim is worked in parallel in RATS. > >> > >> Kathleen, if this is true, does this way forward address your > >> CWT-related comments? > > > > Hi Dave, > > > > I think the signature may have to be on the CWT as opposed to on the > > claim that is the CoSWID or SWID.  We can define it fully in another > > draft, but should state it here so that option is understood. > It’s a > > simple write up, I think. > > > > Thank you, > > Kathleen > >> > >> Regards, > >> Dave > >> > >> > >> > >> > >> > >> > ------------------------------------------------------------------------ > >> *From:* sacm > on behalf of Kathleen Moriarty > >> > > >> *Sent:* Wednesday, November 20, 2019 9:10 PM > >> *To:* Ira McDonald > > >> *Cc:* rats@ietf..org >; sacm >; Laurence > >> Lundblade > > >> *Subject:* Re: [sacm] [Rats] CoSWID and EAT and CWT > >> Great, thanks Laurence.  If that's easier I think having the > CoSWID in > >> one claim should be ok and would have the same result as the > >> suggestion I made.  Changing the CoSWID format is a big enough > process > >> that it shouldn't happen very often. > >> > >> Best regards, > >> Kathleen > >> > >> On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald > > >> >> wrote: > >> > >>     Hi Laurence, > >> > >>     That seems like a good suggestion for a simple way to integrate > >>     CoSWID content > >>     into EAT. > >> > >>     Cheers, > >>     - Ira > >> > >>     Ira McDonald (Musician / Software Architect) > >>     Co-Chair - TCG Trusted Mobility Solutions WG > >>     Co-Chair - TCG Metadata Access Protocol SG > >>     Chair - Linux Foundation Open Printing WG > >>     Secretary - IEEE-ISTO Printer Working Group > >>     Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > >>     IETF Designated Expert - IPP & Printer MIB > >>     Blue Roof Music / High North Inc > >> http://sites.google.com/site/blueroofmusic > >> >   > >> http://sites.google.com/site/highnorthinc > >> >  > > >>     mailto: blueroofmusic@gmail.com > > > >>     PO Box 221  Grand Marais, MI 49839  906-494-2434 > >> > >> > >> > >>     On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade > >>      > >> wrote: > >> > >>         Hi, > >> > >>         I’m not on the SACM list, but did look at the archive. > >>         Hopefully I’m not out of sync. > >> > >>         My thought is to register one claim for CWT that is an > entire > >>         CoSWID (in CDDL the concise-swid-tag). > >> > >>         That way CoSWID can grow and develop on its own without lots > >>         of adds and subtracts to the CWT registry. It has its > own IANA > >>         registry with its own experts and such. Seems like the > >>         coupling / factoring is about right. > >> > >>         This would also be the way I’d like to have it in EAT > >>         attestation. We’ve done a mini version of this with the > >>         location claim > >> >  . > >> > >>         Then if you just want to sign a CoSWID CWT style, this works > >>         pretty well too. It has a slight overhead compared to having > >>         all the CoSWID data items as direct CWT claims in that > it will > >>         have an additional map layer, but that is only about > three bytes. > >> > >>         LL > >> > >>         _______________________________________________ > >>         RATS mailing list > >> RATS@ietf.org > > >> https://www.ietf..org/mailman/listinfo/rats > > >> >   > >> > >>     _______________________________________________ > >>     sacm mailing list > >> sacm@ietf.org > > >> https://www.ietf.org/mailman/listinfo/sacm > >> >   > >> > >> > >> > >> -- > >> > >> Best regards, > >> Kathleen > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > > > -- > > Best regards, > > Kathleen > From nobody Sun Nov 24 09:26:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 90CF112001E for ; Sun, 24 Nov 2019 09:26:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88ard3RK42Bv for ; Sun, 24 Nov 2019 09:26:45 -0800 (PST) Received: from p3plsmtpa12-04.prod.phx3.secureserver.net (p3plsmtpa12-04.prod.phx3.secureserver.net [68.178.252.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 859E5120041 for ; Sun, 24 Nov 2019 09:26:45 -0800 (PST) Received: from [10.86.0.10] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id YveliTOzZyHgsYvemisKlk; Sun, 24 Nov 2019 10:26:44 -0700 From: Laurence Lundblade Message-Id: <888C9C9B-B5EA-4F44-A326-3FBD98FE7327@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_9A2ABF98-94D0-4943-B738-17577274C887" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sun, 24 Nov 2019 09:26:43 -0800 In-Reply-To: <31B9F6C7-74E2-4B9E-933C-77D7B51E21E7@gmail.com> Cc: "rats@ietf.org" , Hannes Tschofenig To: Yaron Sheffer References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <31B9F6C7-74E2-4B9E-933C-77D7B51E21E7@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLmS484KtMtG/1SwaN9OsYQ2k7z7FRxHAMT96i0HCTzUt7mgKCuahjrVLYo+me61zG7LjUpf2CAzrBQ7D7ce23GsgDieGAd2g7qMeB3ik9fkCmoVbOYq XtsXfZzUTRBw3VjL2dWsB6GXWhFJxo/CBQtx7W+CxrdqsQH1qxt5NNgV5JOVwUpvRRVd76joolys95rfleiMiPtsDnVJhkcfbupvsp3+h5ELvBA6sCkQNhcP Archived-At: Subject: Re: [Rats] EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 17:26:47 -0000 --Apple-Mail=_9A2ABF98-94D0-4943-B738-17577274C887 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 24, 2019, at 2:54 AM, Yaron Sheffer = wrote: > =20 > Unfortunately they would not solve the fundamental problem that a = developer who wishes to use JWT for anything, not necessarily = attestation, is faced with a registry that he or she has no chance of = figuring out. > =20 But that=E2=80=99s not our problem here in RATS. LL= --Apple-Mail=_9A2ABF98-94D0-4943-B738-17577274C887 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Nov 24, 2019, at 2:54 AM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:
 
Unfortunately they would not solve the fundamental problem = that a developer who wishes to use JWT for anything, not necessarily = attestation, is faced with a registry that he or she has no chance of = figuring out.
 

But that=E2=80=99s not our problem here in RATS.

LL
= --Apple-Mail=_9A2ABF98-94D0-4943-B738-17577274C887-- From nobody Sun Nov 24 12:01:31 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84EFE12004D for ; Sun, 24 Nov 2019 12:01:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WfHkNa7EZr8I for ; Sun, 24 Nov 2019 12:01:27 -0800 (PST) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1B61120047 for ; Sun, 24 Nov 2019 12:01:27 -0800 (PST) Received: from [10.86.0.10] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id Yy4Uia0Ge1GdmYy4UiCdkE; Sun, 24 Nov 2019 13:01:27 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_A0530162-CBC2-474F-8A76-8BD400DF4B70" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Sun, 24 Nov 2019 12:01:26 -0800 In-Reply-To: <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> Cc: "Smith, Ned" , "rats@ietf.org" To: Henk Birkholz References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfNYPhKO+eCYYB8p1Q11kPZZN70ZYc9GK8R7IlBEcrW5dg9Px5MKu/8KaVSmq7/vFNIj1npxqSU67xsrdWDg2yZcx14n48XJQmUD05saGZKZau6thFrd4 GF2nMkDbkZPyeXEKqN6K8dmThmhCYQTx95B9bh59DT2oRYlO4XGFviGaiqlcs4Xu+jRF97aTiFyyviq5v/XoDwdsVnYxwweO4zO6JFEHkkW4CJqS9tAhDnke Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 20:01:30 -0000 --Apple-Mail=_A0530162-CBC2-474F-8A76-8BD400DF4B70 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 24, 2019, at 7:31 AM, Henk Birkholz = wrote: >=20 > Hi all, >=20 > in a nutshell, one of the things I tried to express is that the = following quite is simply not correct wrt to what is called here the = "TPM-style" (I would really like to not use the words "TPM-style" and = not to mixing authenticated & secure boot. Authenticated Boot is fine): > > Primarily the difference between TPM-style that doesn=E2=80=99t rely = on secure boot and non-TPM-style that does rely on secure boot. It=E2=80=99s hard to know what to call things. I=E2=80=99m learning the = =E2=80=9CTCG language=E2=80=9D slowly and we=E2=80=99re also evolving = (in the architecture document) a common language. I keep trying terms = and definitions to see what sticks and what doesn=E2=80=99t. Pretty sure = we agree on =E2=80=9Cattestation evidence=E2=80=9D, =E2=80=9Cverifier=E2=80= =9D and =E2=80=9Cattestation result=E2=80=9D, but I don=E2=80=99t know = what =E2=80=9Csecure boot=E2=80=9D, =E2=80=9Cauthenticated boot=E2=80=9D = and =E2=80=9Ctrusted boot=E2=80=9D mean to you so I don=E2=80=99t know = which term to use. >=20 > It is never possible to create TPM structures that are signed = Attestation Evidence, if a device that is explicitly intended to conduct = "secure boot" did actually not do so successfully. That is one of the = key-features of TPM/TSS remote attestation procedures. It seems to me that TPM-style attestation where you measure each step in = the boot sequence and report to a verifier was designed to work without = secure boot. However I can see that it could also work with secure / = trusted / authenticated boot. >=20 > On the other hand, what leaves me puzzled is the following. If these = three quotes are all correct... >=20 >> You cannot create an EAT unless the authenticated boot was = successful. The key material with which to sign the EAT is inaccessible = if authenticated boot fails (or else the device just won=E2=80=99t boot = at all). >=20 > draft-ietf-rats-eat-01: >=20 >> All claims are optional >=20 > and draft-ietf-rats-eat-01 again: >=20 >> 3.7. Secure Boot and Debug Enable State Claims (boot_state) >> This claim is an array of five Boolean values indicating the boot = and >> debug state of the entity. >=20 > ... one is allowed either to omit that Claim in an EAT or set some = values of the Claim members to false. Therefore indicating that the boot = state is, e.g. "secure_boot_enabled=3D> false", and still be able to = create the EAT. Is that correct? If not, why include this member of the = boot_state Claim at all? It always made me think until now that it = allows for a device to not conduct "secure boot" and still be able to = create an EAT. Yes, you are right that in some cases it would make no sense to have the = secure boot claim. It is basically an implicit claim. Here=E2=80=99s = some where it does make sense to have an explicit secure boot claim. The main attester might boot securely, but submods might not. It is possible to build pure HW that implements EAT attestation. It = might be a part of a SoC. That attestation HW doesn=E2=80=99t use the = main CPU to implement the attester, but can report on how the main CPU = booted. >=20 > Besides that, what I think we are actually talking about is implicit = and explicit attestation. Seems like you have to say which claims are implicit and which claims = are explicit and in many attestations you need and get both. For example, you called out a situation where the secure boot claim is = implicit and questioned the need for the claim. I then called out a = situation where the secure boot claim is explicit.=20 In one attestation the secure boot claim might be implicit and the GPS = location is explicit. LL --Apple-Mail=_A0530162-CBC2-474F-8A76-8BD400DF4B70 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Nov 24, 2019, at 7:31 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = all,

in a nutshell, one of the things I = tried to express is that the following quite is simply not correct wrt = to what is called here the "TPM-style" (I would really like to not use = the words "TPM-style" and not to mixing authenticated & secure boot. = Authenticated Boot is fine):
> Primarily the = difference between TPM-style that doesn=E2=80=99t rely on secure boot = and non-TPM-style that does rely on secure boot.

It=E2=80= =99s hard to know what to call things. I=E2=80=99m learning the =E2=80=9CT= CG language=E2=80=9D slowly and we=E2=80=99re also evolving (in the = architecture document) a common language. I keep trying terms and = definitions to see what sticks and what doesn=E2=80=99t. Pretty sure we = agree on =E2=80=9Cattestation evidence=E2=80=9D, =E2=80=9Cverifier=E2=80=9D= and =E2=80=9Cattestation result=E2=80=9D, but I don=E2=80=99t know what = =E2=80=9Csecure boot=E2=80=9D, =E2=80=9Cauthenticated boot=E2=80=9D and = =E2=80=9Ctrusted boot=E2=80=9D mean to you so I don=E2=80=99t know which = term to use.


It is never possible to = create TPM structures that are signed Attestation Evidence, if a device = that is explicitly intended to conduct "secure boot" did actually not do = so successfully. That is one of the key-features of TPM/TSS remote = attestation procedures.

It seems to me that TPM-style attestation where = you measure each step in the boot sequence and report to a verifier was = designed to work without secure boot. However I can see that it could = also work with secure / trusted / authenticated boot.



On the other = hand, what leaves me puzzled is the following. If these three quotes are = all correct...

You cannot create an EAT unless the authenticated boot was = successful. The key material with which to sign the EAT is inaccessible = if authenticated boot fails (or else the device just won=E2=80=99t boot = at all).

draft-ietf-rats-eat-01:

All claims are = optional

and = draft-ietf-rats-eat-01 again:

3.7.  Secure Boot and Debug Enable State = Claims (boot_state)
  This claim is an array of = five Boolean values indicating the boot and
=   debug state of the entity.

... one is allowed either to omit that Claim in an EAT or set = some values of the Claim members to false. Therefore indicating that the = boot state is, e.g. "secure_boot_enabled=3D> false", and still be = able to create the EAT. Is that correct? If not, why include this member = of the boot_state Claim at all? It always made me think until now that = it allows for a device to not conduct "secure boot" and still be able to = create an EAT.

Yes, you are right that in some cases it would = make no sense to have the secure boot claim. It is basically an implicit = claim. Here=E2=80=99s some where it does make sense to have an explicit = secure boot claim.

The main attester might boot securely, but submods = might not.

It = is possible to build pure HW that implements EAT attestation. It might = be a part of a SoC. That attestation HW doesn=E2=80=99t use the main CPU = to implement the attester, but can report on how the main CPU = booted.



Besides that, what I think we are actually = talking about is implicit and explicit attestation.

Seems = like you have to say which claims are implicit and which claims are = explicit and in many attestations you need and get both.

For example, you called out a situation where the = secure boot claim is implicit and questioned the need for the claim. I = then called out a situation where the secure boot claim is = explicit. 

In one attestation = the secure boot claim might be implicit and the GPS location is = explicit.

LL


= --Apple-Mail=_A0530162-CBC2-474F-8A76-8BD400DF4B70-- From nobody Sun Nov 24 14:14:51 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5DF712004C for ; Sun, 24 Nov 2019 14:14:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hbwdr6ChPvZH for ; Sun, 24 Nov 2019 14:14:47 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0715.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe55::715]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2728C12003E for ; Sun, 24 Nov 2019 14:14:46 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=LmNbOUMBFwshuluHh/svb0GJxjrY48aIZ5vLD/eGt+54j87iv5fPvsKYaW1H6r+3QwhVPqT7zeU0XA4/fHT4nKydPUBbHK5hbxTkVpPeSu1j44ZbP4HoXpRPfJSHogzH9ejHGSevtKvbTQaRkvnI50Q9TtOqKQOvbZNc9r7rHM3zUT0AcSHX3HzcBxp3ELasfHVAhhsYpBvr3q9WV6VlX+1aJ1XtM1mbaMlsphDCjv+OJMp+zW4GWgChgSo5lCgTlhGfnyD4u/pMjP2Tv6Vg09B1u2Ho8Apm4g41PmAOHOqotz9wRdPQMQX504Z0pHyXkZJUrXh8YCyBsMo0KejFlw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=seOVCkgzdnAXyQtGXEcbtCgjgEFUAED0Vf0dBxuqpLE=; b=hXsow/P614KnM5l7tnSc+H66Dn+p2eWiXLEnNSs7YByFPMvvGz0fAFdqjM1tVUPjSfNW4jOqcfFwOWyYdSvVHn/Dk2zstruGjWzUzJ+U+RTnljEmcRvHb1nWTkrNiCVwzRyPrfWZk4QR4HnAq2Na5OV7rgOMIULggwrvJ56mYjuf7nDc6fnYV8AqLGtG5gjeFKSUmcqe22MfTvSyg92j16GdlUO4KHTGhamq5bil9foybCfcU0D49CTa1kwMWd/jSk6jDhkleqmr1e2lOLCGSYk+6FgIhXFcBAT6Rq5l0MIfFDonU2xMnOSTzzD/zxXtVelMLVsD2O00Pw+Paja6Kw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=seOVCkgzdnAXyQtGXEcbtCgjgEFUAED0Vf0dBxuqpLE=; b=DTBQOij0I6NkZ2jBmKd2VXhU4Xcpd4bc6VTCqM91FRY3i76FPckZWZjamo/krb8t4CnfuO3Y4Xed+az+JjMMNv1j6WiQ2me5ALyr6QnYpRjcyDvwO/G2iIKUJDKxjDfFkybspFLTR4mfykEWiHy8dzQGTayRHX6i35bmpu+S1S0= Received: from DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) by DM6PR00MB0556.namprd00.prod.outlook.com (20.179.49.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2523.0; Sun, 24 Nov 2019 22:14:30 +0000 Received: from DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::2cfe:cf2c:2101:86be]) by DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::2cfe:cf2c:2101:86be%9]) with mapi id 15.20.2526.000; Sun, 24 Nov 2019 22:14:30 +0000 From: Mike Jones To: Laurence Lundblade , Yaron Sheffer CC: "rats@ietf.org" , Hannes Tschofenig Thread-Topic: [EXTERNAL] Re: [Rats] EAT IANA registry Thread-Index: AQHVoPrSBWTODkJFP0eDJvG6oNSrxKeWtxEAgACRUQCAAav9AIAB8jEQ Date: Sun, 24 Nov 2019 22:14:30 +0000 Message-ID: References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> In-Reply-To: <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d223ac97-f9a3-4789-b55e-00001fcef158; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-24T22:12:29Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c3e05a44-9535-4c78-49b5-08d7712bad5a x-ms-traffictypediagnostic: DM6PR00MB0556: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 02318D10FB x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(136003)(366004)(39860400002)(396003)(40434004)(199004)(189003)(54906003)(81156014)(8936002)(316002)(6306002)(66066001)(54896002)(966005)(7736002)(74316002)(99286004)(81166006)(8676002)(66946007)(66556008)(52536014)(71190400001)(71200400001)(66446008)(64756008)(236005)(9686003)(33656002)(66476007)(86362001)(256004)(7696005)(5660300002)(25786009)(14444005)(5024004)(3846002)(446003)(76176011)(186003)(11346002)(26005)(55016002)(76116006)(229853002)(6116002)(8990500004)(790700001)(53546011)(6506007)(4326008)(6436002)(10090500001)(10290500003)(478600001)(606006)(102836004)(110136005)(2906002)(6246003)(14454004)(22452003); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR00MB0556; H:DM6PR00MB0569.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR00MB05697456BC04AC34B156850DF54B0DM6PR00MB0569namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: c3e05a44-9535-4c78-49b5-08d7712bad5a X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Nov 2019 22:14:30.1172 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: WdxhyI6agGqDj57xCG0WXrd1h4Ye65/ZYVbG/5TBONsn6EZRm4qQBGsCriE8ZnnCl3kAPyTRIC40mm4gr4va8A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0556 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 22:14:50 -0000 --_000_DM6PR00MB05697456BC04AC34B156850DF54B0DM6PR00MB0569namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RUFUIHNob3VsZCB1c2UgdGhlIElBTkEgSlNPTiBXZWIgVG9rZW4gKEpXVCkgQ2xhaW1zIHJlZ2lz dHJ5IGZvciBKV1QgY2xhaW1zIGFuZCB0aGUgSUFOQSBDQk9SIFdlYiBUb2tlbiAoQ1dUKSBDbGFp bXMgcmVnaXN0cnkgZm9yIENXVCBjbGFpbXMuICBJdOKAmXMgaW50ZW5kZWQgdGhhdCBjbGFpbXMg ZnJvbSBkaWZmZXJlbnQgdXNlIGNhc2VzIGluaGFiaXQgdGhlIHNhbWUgcmVnaXN0cnksIHRvIGZh Y2lsaXRhdGUgY2xhaW0gcmV1c2UgYWNyb3NzIHVzZSBjYXNlcywgd2hlcmUgYXBwcm9wcmlhdGUu ICBJZiB0aGV5IGFyZW7igJl0IHJldXNlZCwgbm8gaGFybSBpcyBkb25lLg0KDQpJdCB3b3VsZCBi ZSBmYXIgbW9yZSBjb25mdXNpbmcgdG8gZGV2ZWxvcGVycyB0byBjcmVhdGUgZHVwbGljYXRlLCBF QVQtc3BlY2lmaWMgcmVnaXN0cmllcy4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogUkFUUyA8cmF0cy1ib3Vu Y2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgTGF1cmVuY2UgTHVuZGJsYWRlDQpTZW50OiBTYXR1 cmRheSwgTm92ZW1iZXIgMjMsIDIwMTkgODoyOSBBTQ0KVG86IFlhcm9uIFNoZWZmZXIgPHlhcm9u Zi5pZXRmQGdtYWlsLmNvbT4NCkNjOiByYXRzQGlldGYub3JnOyBIYW5uZXMgVHNjaG9mZW5pZyA8 SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4NClN1YmplY3Q6IFtFWFRFUk5BTF0gUmU6IFtSYXRz XSBFQVQgSUFOQSByZWdpc3RyeQ0KDQpPbmUgb2Ygb3VyIHRob3VnaHRzIGlzIHRoYXQgRUFUIHBy b2ZpbGVzIHdpbGwgaGVscCB3aXRoIHRoaXMuIEZvciBleGFtcGxlLCBhIHNwZWNpYWwgcHJvZmls ZSBmb3IgdG9hc3RlcnMgbWlnaHQgbGlzdCA1IGNsYWltcyB0aGF0IG11c3QgYmUgaW5jbHVkZWQg aW4gZXZlcnkgYXR0ZXN0YXRpb24gYW5kIDEwIGNsYWltcyB0aGF0IGFyZSBvcHRpb25hbCBhbmQg bWF5YmUgZXZlbiBwcm9oaWJpdCBhbGwgb3RoZXJzLg0KDQpMTA0KDQoNCg0KT24gTm92IDIyLCAy MDE5LCBhdCA2OjU3IEFNLCBZYXJvbiBTaGVmZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb208bWFp bHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIaSBIYW5uZXMsDQoNCkxvb2tp bmcgYXQgdGhlIEpXVCBjbGFpbSBJQU5BIHJlZ2lzdHJ5IFsxXSwgaXQgaXMgYWxyZWFkeSBhIHRl cnJpYmxlIG1lc3Mgb2Ygc2V2ZXJhbCBkaWZmZXJlbnQgc3RhbmRhcmRzLCBvYnZpb3VzbHkgd2l0 aCBtYW55IG1vcmUgY29taW5nLiBJIGd1ZXNzIHdoYXTigJlzIGRvbmUgaXMgZG9uZSwgYW5kIEni gJlsbCB0YWtlIGJhY2sgbXkgb2JqZWN0aW9uLg0KDQpUaGFua3MsDQogICAgICAgICAgICAgICAg WWFyb24NCg0KWzFdIGh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3QueGh0 bWwjY2xhaW1zPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20v P3VybD1odHRwcyUzQSUyRiUyRnd3dy5pYW5hLm9yZyUyRmFzc2lnbm1lbnRzJTJGand0JTJGand0 LnhodG1sJTIzY2xhaW1zJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQu Y29tJTdDNGRkZTg4M2E1MjcyNGRmZWNhNzIwOGQ3NzAzMjU5MTYlN0M3MmY5ODhiZjg2ZjE0MWFm OTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MTAxMjMzOTI2OTEyNTAxJnNkYXRhPUJkTnVK aFRjTk5QU1p3SUxXeHVtM1JCSVNrTmxtZFM3UUxpd083eG9zeGslM0QmcmVzZXJ2ZWQ9MD4NCg0K RnJvbTogSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRv Okhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+Pg0KRGF0ZTogRnJpZGF5LCBOb3ZlbWJlciAyMiwg MjAxOSBhdCAxNDoxNw0KVG86IFlhcm9uIFNoZWZmZXIgPHlhcm9uZi5pZXRmQGdtYWlsLmNvbTxt YWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tPj4sICJyYXRzQGlldGYub3JnPG1haWx0bzpyYXRz QGlldGYub3JnPiIgPHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+Pg0KU3ViamVj dDogUkU6IEVBVCBJQU5BIHJlZ2lzdHJ5DQoNCllhcm9uLA0KQ291bGQgeW91IGV4cGxhaW4gd2h5 IHlvdSB0aGluayB0aGF0IHRoaXMgaXMgYSBnb29kIGlkZWE/DQpDaWFvDQpIYW5uZXMNCg0KRnJv bTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5v cmc+PiBPbiBCZWhhbGYgT2YgWWFyb24gU2hlZmZlcg0KU2VudDogRnJpZGF5LCBOb3ZlbWJlciAy MiwgMjAxOSAyOjA1IFBNDQpUbzogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4N ClN1YmplY3Q6IFtSYXRzXSBFQVQgSUFOQSByZWdpc3RyeQ0KDQpVbnJlbGF0ZWQgdG8gbXkgZWFy bGllciBtYWlsLCBJIHdvdWxkIHJlY29tbWVuZCB0byBjcmVhdGUgYSBzZXBhcmF0ZSByZWdpc3Ry eSBmb3IgRUFUIGNsYWltcyAoSSBzdXBwb3NlIHRoYXQgaW1wbGllcyBhIG5lc3RlZCBvYmplY3Qg aW4gdGhlIEpXVC9DV1QpIHJhdGhlciB0aGFuIHRvIG92ZXJsb2FkIHRoZSBDV1QgcmVnaXN0cnku IEFyY2hpdGVjdHVyYWxseSBpdCBqdXN0IGRvZXNu4oCZdCBqaXZlIHRvIGhhdmUgYWxsIHRoZXNl IGNsYWltcyBhcyBiYXNlbGluZSBDV1QgY2xhaW1zLCBhbmQgcHJvY2Vzcy13aXNlLCBpdOKAmXMg bXVjaCBtb3JlIGNvbnZlbmllbnQgZm9yIHRoaXMgZ3JvdXAgdG8gY29udHJvbCBpdHMgb3duIG5h bWVzcGFjZS4NCg0KU29ycnkgaWYgdGhpcyBoYXMgYmVlbiByYWlzZWQgYmVmb3JlLg0KDQpUaGFu a3MsDQogICAgICAgICAgICAgICAgWWFyb24NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50 cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQg bWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lw aWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlz Y2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1 cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRo YW5rIHlvdS4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQpSQVRTIG1haWxpbmcgbGlzdA0KUkFUU0BpZXRmLm9yZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czxodHRwczovL25hbTA2 LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cu aWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZyYXRzJmRhdGE9MDIlN0MwMSU3Q01pY2hh ZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdDNGRkZTg4M2E1MjcyNGRmZWNhNzIwOGQ3NzAzMjU5 MTYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MTAxMjMz OTI2OTEyNTAxJnNkYXRhPTNlaTg1WW8lMkJXZ0tFVnNvekhTSnRESU8xczBveXpQYnNwSjJRSDVt R1YwTSUzRCZyZXNlcnZlZD0wPg0KDQo= --_000_DM6PR00MB05697456BC04AC34B156850DF54B0DM6PR00MB0569namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bh bi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVk LXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJl cGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5FQVQgc2hvdWxkIHVzZSB0 aGUgSUFOQSBKU09OIFdlYiBUb2tlbiAoSldUKSBDbGFpbXMgcmVnaXN0cnkgZm9yIEpXVCBjbGFp bXMgYW5kIHRoZSBJQU5BIENCT1IgV2ViIFRva2VuIChDV1QpIENsYWltcyByZWdpc3RyeSBmb3Ig Q1dUIGNsYWltcy4mbmJzcDsgSXTigJlzIGludGVuZGVkIHRoYXQgY2xhaW1zIGZyb20gZGlmZmVy ZW50IHVzZSBjYXNlcyBpbmhhYml0IHRoZSBzYW1lDQogcmVnaXN0cnksIHRvIGZhY2lsaXRhdGUg Y2xhaW0gcmV1c2UgYWNyb3NzIHVzZSBjYXNlcywgd2hlcmUgYXBwcm9wcmlhdGUuJm5ic3A7IElm IHRoZXkgYXJlbuKAmXQgcmV1c2VkLCBubyBoYXJtIGlzIGRvbmUuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj5JdCB3b3VsZCBiZSBmYXIgbW9yZSBjb25mdXNpbmcgdG8gZGV2 ZWxvcGVycyB0byBjcmVhdGUgZHVwbGljYXRlLCBFQVQtc3BlY2lmaWMgcmVnaXN0cmllcy48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNv bGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gUkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0 OyA8Yj5PbiBCZWhhbGYgT2YgPC9iPg0KTGF1cmVuY2UgTHVuZGJsYWRlPGJyPg0KPGI+U2VudDo8 L2I+IFNhdHVyZGF5LCBOb3ZlbWJlciAyMywgMjAxOSA4OjI5IEFNPGJyPg0KPGI+VG86PC9iPiBZ YXJvbiBTaGVmZmVyICZsdDt5YXJvbmYuaWV0ZkBnbWFpbC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9i PiByYXRzQGlldGYub3JnOyBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7SGFubmVzLlRzY2hvZmVuaWdA YXJtLmNvbSZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEVB VCBJQU5BIHJlZ2lzdHJ5PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5P bmUgb2Ygb3VyIHRob3VnaHRzIGlzIHRoYXQgRUFUIHByb2ZpbGVzIHdpbGwgaGVscCB3aXRoIHRo aXMuIEZvciBleGFtcGxlLCBhIHNwZWNpYWwgcHJvZmlsZSBmb3IgdG9hc3RlcnMgbWlnaHQgbGlz dCA1IGNsYWltcyB0aGF0IG11c3QgYmUgaW5jbHVkZWQgaW4gZXZlcnkgYXR0ZXN0YXRpb24gYW5k IDEwIGNsYWltcyB0aGF0IGFyZSBvcHRpb25hbCBhbmQgbWF5YmUgZXZlbiBwcm9oaWJpdCBhbGwg b3RoZXJzLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TEw8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4N CjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gTm92IDIy LCAyMDE5LCBhdCA2OjU3IEFNLCBZYXJvbiBTaGVmZmVyICZsdDs8YSBocmVmPSJtYWlsdG86eWFy b25mLmlldGZAZ21haWwuY29tIj55YXJvbmYuaWV0ZkBnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIEhhbm5lcyw8 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkxvb2tpbmcgYXQgdGhlIEpXVCBjbGFpbSBJQU5BIHJlZ2lzdHJ5IFsx XSwgaXQgaXMgYWxyZWFkeSBhIHRlcnJpYmxlIG1lc3Mgb2Ygc2V2ZXJhbCBkaWZmZXJlbnQgc3Rh bmRhcmRzLCBvYnZpb3VzbHkgd2l0aCBtYW55IG1vcmUgY29taW5nLiBJIGd1ZXNzIHdoYXTigJlz IGRvbmUgaXMgZG9uZSwgYW5kIEnigJlsbCB0YWtlIGJhY2sgbXkgb2JqZWN0aW9uLjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+VGhhbmtzLDxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWWFyb248c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlsxXTxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRw czovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0El MkYlMkZ3d3cuaWFuYS5vcmclMkZhc3NpZ25tZW50cyUyRmp3dCUyRmp3dC54aHRtbCUyM2NsYWlt cyZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M0ZGRl ODgzYTUyNzI0ZGZlY2E3MjA4ZDc3MDMyNTkxNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2Qw MTFkYjQ3JTdDMSU3QzAlN0M2MzcxMDEyMzM5MjY5MTI1MDEmYW1wO3NkYXRhPUJkTnVKaFRjTk5Q U1p3SUxXeHVtM1JCSVNrTmxtZFM3UUxpd083eG9zeGslM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFu IHN0eWxlPSJjb2xvcjojOTU0RjcyIj5odHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9q d3Qvand0LnhodG1sI2NsYWltczwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+RnJvbTo8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+SGFubmVzIFRzY2hvZmVuaWcgJmx0Ozxh IGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj48c3BhbiBzdHlsZT0iY29s b3I6Izk1NEY3MiI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvc3Bhbj48L2E+Jmd0Ozxicj4N CjxiPkRhdGU6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjwvYj5GcmlkYXksIE5vdmVtYmVyIDIyLCAyMDE5IGF0IDE0OjE3PGJyPg0KPGI+VG86PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5ZYXJvbiBTaGVm ZmVyICZsdDs8YSBocmVmPSJtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tIj48c3BhbiBzdHls ZT0iY29sb3I6Izk1NEY3MiI+eWFyb25mLmlldGZAZ21haWwuY29tPC9zcGFuPjwvYT4mZ3Q7LCAm cXVvdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOiM5 NTRGNzIiPnJhdHNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWls dG86cmF0c0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOiM5NTRGNzIiPnJhdHNAaWV0Zi5v cmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+UkU6IEVBVCBJQU5BIHJlZ2lzdHJ5PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+WWFyb24sPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Db3VsZCB5b3UgZXhwbGFpbiB3aHkg eW91IHRoaW5rIHRoYXQgdGhpcyBpcyBhIGdvb2QgaWRlYT88c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkNpYW88c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGFubmVzPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlJBVFMgJmx0Ozxh IGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjoj OTU0RjcyIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9mPHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5ZYXJvbg0KIFNo ZWZmZXI8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+RnJpZGF5LCBOb3ZlbWJlciAyMiwgMjAxOSAyOjA1IFBNPGJyPg0KPGI+ VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOiM5NTRGNzIi PnJhdHNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5bUmF0c10gRUFUIElBTkEgcmVn aXN0cnk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5VbnJlbGF0ZWQgdG8gbXkgZWFy bGllciBtYWlsLCBJIHdvdWxkIHJlY29tbWVuZCB0byBjcmVhdGUgYSBzZXBhcmF0ZSByZWdpc3Ry eSBmb3IgRUFUIGNsYWltcyAoSSBzdXBwb3NlIHRoYXQgaW1wbGllcyBhIG5lc3RlZCBvYmplY3Qg aW4gdGhlIEpXVC9DV1QpIHJhdGhlciB0aGFuIHRvIG92ZXJsb2FkIHRoZSBDV1QgcmVnaXN0cnku IEFyY2hpdGVjdHVyYWxseSBpdCBqdXN0IGRvZXNu4oCZdCBqaXZlIHRvIGhhdmUNCiBhbGwgdGhl c2UgY2xhaW1zIGFzIGJhc2VsaW5lIENXVCBjbGFpbXMsIGFuZCBwcm9jZXNzLXdpc2UsIGl04oCZ cyBtdWNoIG1vcmUgY29udmVuaWVudCBmb3IgdGhpcyBncm91cCB0byBjb250cm9sIGl0cyBvd24g bmFtZXNwYWNlLjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U29ycnkgaWYgdGhpcyBoYXMgYmVlbiByYWlzZWQg YmVmb3JlLjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWWFyb248c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwNCiB1c2UgaXQgZm9yIGFueSBwdXJw b3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFu ayB5b3UuPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxpc3Q8 YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6Izk1NEY3MiI+UkFUU0BpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4l MkZsaXN0aW5mbyUyRnJhdHMmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNy b3NvZnQuY29tJTdDNGRkZTg4M2E1MjcyNGRmZWNhNzIwOGQ3NzAzMjU5MTYlN0M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MTAxMjMzOTI2OTEyNTAxJmFtcDtz ZGF0YT0zZWk4NVlvJTJCV2dLRVZzb3pIU0p0RElPMXMwb3l6UGJzcEoyUUg1bUdWME0lM0QmYW1w O3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3MiI+aHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DM6PR00MB05697456BC04AC34B156850DF54B0DM6PR00MB0569namp_-- From nobody Sun Nov 24 14:22:58 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB73D12003E for ; Sun, 24 Nov 2019 14:22:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oOoqO1_gbtsq for ; Sun, 24 Nov 2019 14:22:54 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6598F12001E for ; Sun, 24 Nov 2019 14:22:52 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAOMMnnZ011743 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Sun, 24 Nov 2019 23:22:50 +0100 Received: from [172.17.29.118] (5.148.85.20) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Sun, 24 Nov 2019 23:22:44 +0100 To: Laurence Lundblade CC: "Smith, Ned" , "rats@ietf.org" References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> From: Henk Birkholz Message-ID: <91b3f27e-7ca1-8e67-9686-ef8303086f0a@sit.fraunhofer.de> Date: Sun, 24 Nov 2019 23:22:43 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [5.148.85.20] Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 24 Nov 2019 22:22:57 -0000 Hi Laurence, I am a bit time constrained right now, but I think we mostly agree. Thank you for you explanation about the boot_state Claim - it was really hard to wrap my mind around that. Is it okay to raise an issue that this concept might require more explanatory text in the EAT I-D? I'll compose some text about the horrible yet remediateable confusion that is the "“secure boot”, “authenticated boot” and “trusted boot”, etc. pp scope. Maybe I'll do it with Monty, if he finds the time for that in the very near future. I am very happy that we already agreed on Attestation Evidence, Attestation Result, (maybe) Appraisal Policy (formerly known as Reference Values), Endorsements & the roles Attester, Endorser (formerly known as Asserter), Verifier and Relying Party. There was significant progress at the last IETF meeting. Without Ned, Dave, Michael, Thomas & you this would not have been such a productive meeting. Viele Grüße from Manchester, Henk On 24.11.19 21:01, Laurence Lundblade wrote: > > >> On Nov 24, 2019, at 7:31 AM, Henk Birkholz >> > > wrote: >> >> Hi all, >> >> in a nutshell, one of the things I tried to express is that the >> following quite is simply not correct wrt to what is called here the >> "TPM-style" (I would really like to not use the words "TPM-style" and >> not to mixing authenticated & secure boot. Authenticated Boot is fine): >> > Primarily the difference between TPM-style that doesn’t rely on >> secure boot and non-TPM-style that does rely on secure boot. > > It’s hard to know what to call things. I’m learning the “TCG language” > slowly and we’re also evolving (in the architecture document) a common > language. I keep trying terms and definitions to see what sticks and > what doesn’t. Pretty sure we agree on “attestation evidence”, “verifier” > and “attestation result”, but I don’t know what “secure boot”, > “authenticated boot” and “trusted boot” mean to you so I don’t know > which term to use. > >> >> It is never possible to create TPM structures that are signed >> Attestation Evidence, if a device that is explicitly intended to >> conduct "secure boot" did actually not do so successfully. That is one >> of the key-features of TPM/TSS remote attestation procedures. > > It seems to me that TPM-style attestation where you measure each step in > the boot sequence and report to a verifier was designed to work without > secure boot. However I can see that it could also work with secure / > trusted / authenticated boot. > > >> >> On the other hand, what leaves me puzzled is the following. If these >> three quotes are all correct... >> >>> You cannot create an EAT unless the authenticated boot was >>> successful. The key material with which to sign the EAT is >>> inaccessible if authenticated boot fails (or else the device just >>> won’t boot at all). >> >> draft-ietf-rats-eat-01: >> >>> All claims are optional >> >> and draft-ietf-rats-eat-01 again: >> >>> 3.7.  Secure Boot and Debug Enable State Claims (boot_state) >>>   This claim is an array of five Boolean values indicating the boot and >>>   debug state of the entity. >> >> ... one is allowed either to omit that Claim in an EAT or set some >> values of the Claim members to false. Therefore indicating that the >> boot state is, e.g. "secure_boot_enabled=> false", and still be able >> to create the EAT. Is that correct? If not, why include this member of >> the boot_state Claim at all? It always made me think until now that it >> allows for a device to not conduct "secure boot" and still be able to >> create an EAT. > > Yes, you are right that in some cases it would make no sense to have the > secure boot claim. It is basically an implicit claim. Here’s some where > it does make sense to have an explicit secure boot claim. > > The main attester might boot securely, but submods might not. > > It is possible to build pure HW that implements EAT attestation. It > might be a part of a SoC. That attestation HW doesn’t use the main > CPU to implement the attester, but can report on how the main CPU > booted. > > > >> >> Besides that, what I think we are actually talking about is implicit >> and explicit attestation. > > Seems like you have to say which claims are implicit and which claims > are explicit and in many attestations you need and get both. > > For example, you called out a situation where the secure boot claim is > implicit and questioned the need for the claim. I then called out a > situation where the secure boot claim is explicit. > > In one attestation the secure boot claim might be implicit and the GPS > location is explicit. > > LL > > From nobody Mon Nov 25 07:21:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AA4D120105 for ; Mon, 25 Nov 2019 07:21:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=hsDFryzm; dkim=pass (1024-bit key) header.d=juniper.net header.b=R0zxJlbv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ApCDgYi93Umw for ; Mon, 25 Nov 2019 07:21:36 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08CC81200B3 for ; Mon, 25 Nov 2019 07:21:35 -0800 (PST) Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xAPFHumu008505; Mon, 25 Nov 2019 07:21:35 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=9IkPSr49HIJwEeXg3BkJxLD+1m93xcdh3ducf+mWj8M=; b=hsDFryzmhmonO7D+OngqZk9gFeofDNWuYYxLK20x60b64ocEbLJV6X2bjKnAwzm1GyI/ 4LVwvSkUyo4ArUl0rSJbu9WeWH6d2oYrb3kuQlQJ5rAmriDsVUuOdIqpTwBC8GpI402y LeW1yG+k9sklC2QALmYR6pdwdV6IzPsDLL3UsMeOULbPqqMElon9J6eMFiJaiF6mGQFK hnYBAN/QQ7dlq43wXVP6Nn7/RHs8UJtIiQjWHJVCw6S3khL5hLQbAp3ZymbrVFX34Ukx CYPewDPS6KNep/ZXnzcMCJC1EOy7Eevp7/XS3aJQJvcqBIpF4p9F7kLpX202iqG7Med1 0A== Received: from nam03-dm3-obe.outbound.protection.outlook.com (mail-dm3nam03lp2050.outbound.protection.outlook.com [104.47.41.50]) by mx0a-00273201.pphosted.com with ESMTP id 2wf3m03107-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 25 Nov 2019 07:21:35 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AtQt5KgMHS1EgRzmxJ7SF77JaMSPz+qS6xNghiySCRbQLsy55jxHiHwVSxRLqiUtxoT1azeClMhLI8JIfz2eJ+QM95d2sgvzLjpRl9lEd6Crp5JRfJrGPjCZUGTYj5hL+NUh7jPAb4BGyX9VOfAUKtNmoectV+4STm5SeUm9AnhgZzwIlV8j2nb07ia02AElNRrtuuZ2A9V2toeP7gwAo/KNgD4Jv8A5I0Un11q0wvKfb0SHxZ495nvwkIbyrgFz9Ja3SNxYpt4tVHQRWRMrUgDRdmz5mIfpQpNUz0kO2GHSwqdAUDjuoI5uqEw/k832/oFaHjbv1IAELz2DsLITFQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9IkPSr49HIJwEeXg3BkJxLD+1m93xcdh3ducf+mWj8M=; b=lSQS3JB7KU65pi4c64x4wj0BZccCCVumuXXY5j2zZ2E3aE7yp6FL5WfYiY6rAVm8F4TEMVDgH7O7tHknxOayGySlvIVZkT64SfZ25vMiKMNEJOSjZr33YKEyXrZ9VvMt1+/M+dLV7gjLo1y8Wv3ea8vNzoM88GWqsDjp8fyWqTl8YhCy2oBbXtEfDxj8t3jy/P4DBg41lmmsgFCJrWWgdRrgooDw7sZO8D8W5MXG8On9/bFQVnF0LSmjEK8NVbJmUChpbRzVjnm075DTlzXTYIa/+sCa1bG3NF/oL1jtcXChigXxut/q4z6zTdAfY6ExGbu+Ifv+qfkvuno+mAvHvQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9IkPSr49HIJwEeXg3BkJxLD+1m93xcdh3ducf+mWj8M=; b=R0zxJlbv4V6VOHprOnWU/y3kpxDZDcyXX5ao2/84uK/yVEGwd3VnY+iyVYBV35Kof7Idwc6/GX6uNyh/mIWgkgzeL0u0id4zhmxLbQzSJFq2yhKZGm8P5emz94KwCIx9Mcy5YJ3ZvlOY4PK+wBsuo3OyMZ7nS/XKfAEpFDZuhzM= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB6295.namprd05.prod.outlook.com (20.178.50.80) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.13; Mon, 25 Nov 2019 15:21:33 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b%4]) with mapi id 15.20.2495.014; Mon, 25 Nov 2019 15:21:33 +0000 From: Guy Fedorkow To: "Smith, Ned" , Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] Call for adoption (after draft rename) for Yang module draft Thread-Index: AQHVlCwI8/lytau3hU+AhCwtIdg/0ad+jL2AgAAHhQCAAAO1AIAF46wAgACM2YCAAJAzgIAAtdsAgAB9XUCAAqYNAIABt5oQgA09+gCAANUuAIAC4dUQ Content-Class: Date: Mon, 25 Nov 2019 15:21:33 +0000 Message-ID: References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <7106C9D3-8ED1-419E-81F8-4CDA799BEDAE@intel.com> <6E7D64B4-2049-4D0A-ADC5-CA3F0647779B@island-resort.com> <10511.1574490818@dooku.sandelman.ca> <8363AFEC-C92C-466D-8F2C-CE7A3E94370B@intel.com> In-Reply-To: <8363AFEC-C92C-466D-8F2C-CE7A3E94370B@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-25T15:21:31.7996436Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=49814622-9f1d-4187-a703-0720dde41898; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [18.20.166.171] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 69b73f26-4989-4b3f-3576-08d771bb27bd x-ms-traffictypediagnostic: BYAPR05MB6295: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0232B30BBC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(396003)(39860400002)(136003)(366004)(13464003)(189003)(199004)(7736002)(66066001)(66946007)(5660300002)(52536014)(66476007)(66446008)(64756008)(66556008)(76116006)(81156014)(81166006)(9686003)(6306002)(110136005)(99286004)(316002)(6436002)(229853002)(8936002)(55016002)(14454004)(8676002)(33656002)(256004)(71200400001)(71190400001)(478600001)(7696005)(186003)(76176011)(2501003)(966005)(86362001)(11346002)(446003)(6246003)(3846002)(6116002)(2906002)(305945005)(26005)(25786009)(102836004)(6506007)(53546011)(74316002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB6295; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SSyzTswuXEvG6WMg5cWMkZJ+bZxQv2sdP7sLP+lOlhKQfJmDS9Ft84bfM3ic2xHty6iwhapdqjeaO/XBRESyLMK9t2gZFWDCeD7rP692rXMCoeihJXdwdpdo9SSAEqgK0l67gvRN5FO4UClOrsJDKER/eaL7TQ6+2g/NS1CcSAuRpx+BRihCMsHJ9OUwzTagb0DHw9pHDQ8HVayrEuqPDD7wL0s0OfJmIHFtfFnuqZw9WYsHxudF+OrK1GzaVQTcwbnBLUYi7IJ2IwcA+tdbsLAXSo2B3bpn5TlbBSoYktRLgcFOnmoB8eXK5fLMmhpTLGlHEIfqtm5pUApBFhab6jEQuNZTFUoqpTwgosLPZwrUBnz6HlsWFdPDAMSV6z8L1HrJfj64m/tFL0GOasak4jXiUCYeL1NjSyj19LSF3OdwYH404RMmr6c+q+XmdEtmsGep5rYaoL6yTjyUjxKwZPfkc0gZ2RShggnHoPPaqe8= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 69b73f26-4989-4b3f-3576-08d771bb27bd X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Nov 2019 15:21:33.5059 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: i1Tt9erBlPrx9yEkqWzFlwGvtEhbvuHUeodAgLq7TS4j7+r2Wg25WZHRGOrrB6Kr6zg6tr26EbL6I62BwIv1VA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB6295 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-25_03:2019-11-21,2019-11-25 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 malwarescore=0 priorityscore=1501 suspectscore=0 bulkscore=0 phishscore=0 mlxscore=0 clxscore=1015 spamscore=0 adultscore=0 impostorscore=0 lowpriorityscore=0 mlxlogscore=953 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911250137 Archived-At: Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Nov 2019 15:21:37 -0000 SGkgTmVkLA0KICBUaGUgU3RlcCBaZXJvIEkndmUgYmVlbiBrZWVwaW5nIGF0IHRoZSBiYWNrIG9m IG15IG1pbmQgaXMgUkZDIDg1NzIsIHdoaWNoIGFscmVhZHkgaGFzIGEgbnVtYmVyIG9mIGNvbXBs aWNhdGVkIG1lY2hhbmlzbXMgdG8gcmVhY2ggb3V0IGFuZCBvYnRhaW4gY29uZmlndXJhdGlvbiBp bmZvcm1hdGlvbi4gIEkgdGhpbmsgYSBSSVYtc3R5bGUgYXR0ZXN0YXRpb24gZXhjaGFuZ2UgY291 bGQgYmUgYWRkZWQgdG8gdGhlIHN0ZXBzIHdpdGhvdXQgZGVsZXRlcmlvdXMgaW50ZXJhY3Rpb25z Lg0KICBUaGF0J3Mgbm90IHRvIHNheSB0aGF0IFJGQyA4NTcyIGlzIHRoZSBvbmx5IGFwcGxpY2Fi bGUgZW52aXJvbm1lbnQsIGl0J3MganVzdCBvbmUgdGhhdCBzZWVtcyBsaWtlIGEgZ29vZCBtYXRj aC4NCiAgL2d1eQ0KDQoNCg0KSnVuaXBlciBCdXNpbmVzcyBVc2UgT25seQ0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBPbiBC ZWhhbGYgT2YgU21pdGgsIE5lZA0KU2VudDogU2F0dXJkYXksIE5vdmVtYmVyIDIzLCAyMDE5IDI6 MTcgUE0NClRvOiBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYT47IHJh dHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbUmF0c10gQ2FsbCBmb3IgYWRvcHRpb24gKGFmdGVy IGRyYWZ0IHJlbmFtZSkgZm9yIFlhbmcgbW9kdWxlIGRyYWZ0DQoNClRoZSBzdGVwLTAgcHJvdG9j b2wgbWF5IGhhdmUgcGF5bG9hZCBzaXplIG9yIHRpbWluZyBsaW1pdGF0aW9ucyB0aGF0IHByZXZl bnRzIGZ1bGx5IGF0dGVzdGluZy4gVGhpcyBpcyB0aGUgY2FzZSBmb3IgODAyLjFYIGV0aGVybmV0 IHBvcnRzLiANCg0K77u/T24gMTEvMjIvMTksIDEwOjMzIFBNLCAiUkFUUyBvbiBiZWhhbGYgb2Yg TWljaGFlbCBSaWNoYXJkc29uIiA8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBt Y3IraWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KDQogICAgICAgID4gZGlzY292ZXJhYmxlIGJ5 IHRoZSBWZXJpZmllci4gICBUaGF0IHN0ZXAgY291bGQgaGF2ZSBpbmNsdWRlZCB0aGUgRUFUDQog ICAgICAgID4gb3IgdGhlIFRQTSBkYXRhDQogICAgDQogICAgSSBoYXZlIGEgdG9kbyBpdGVtIHRv IHdyaXRlIHVwOg0KICAgICAgMSkgYSB1c2UgY2FzZSBmb3IgQXR0ZXN0YXRpb24gYXQgQlNLSSBv bmJvYXJkaW5nIHRpbWUuDQogICAgICAgICAocmVhbGx5IHRoaXMgaXMgYSBSSVYgc3ViLWNhc2Us IEkgdGhpbmspDQogICAgDQogICAgICAyKSBhIGRvY3VtZW50IGV4cGxhaW5pbmcgaG93IHRvIGNh cnJ5IEVBVCBpbiBCUlNLSSB2b3VjaGVyLXJlcXVlc3RzIGFuZA0KICAgICAgICAgUkZDODM2NiB2 b3VjaGVycy4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnDQpodHRwczovL3VybGRlZmVuc2Uu Y29tL3YzL19faHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzX187IThX b0E2UmpDODFjIVdCT1RMWUt3RjdvR1NfUERJXzhCNjM5N294X2VvMjJQNjhsVlJMS0JIbFAybk5K ekJUNjdpTzRwUExyUW1RNnpqOWckIA0K From nobody Mon Nov 25 13:39:27 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDE95120FD3 for ; Mon, 25 Nov 2019 13:39:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=XXjVSm7U; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=KLyujIoO Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HGXL89kuM6Iv for ; Mon, 25 Nov 2019 13:39:05 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A05A5120F6C for ; Mon, 25 Nov 2019 13:39:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3773; q=dns/txt; s=iport; t=1574717941; x=1575927541; h=from:to:subject:date:message-id:mime-version; bh=rWjMVWgCt7ibq3u4SgpG0kBByztN64t2nvhv6VyUpxY=; b=XXjVSm7UoWI75FSU919mYu9iNo9VodHjNRDXUSIWaC5w95RiwQaSOcSi JIooQWbVrcIGOlSTlj8J9/ztNc9crSx8/1AOIeSDN6Guf9TYPCzU9xJUQ 3GtHozUOgmRkB0g89G5RAeriOkHC9wXb1z+tPP1uqc6loZgxneuxrMEKR 8=; IronPort-PHdr: =?us-ascii?q?9a23=3A2fD3uheNID9VtS3TIw8cJmRKlGMj4e+mNxMJ6p?= =?us-ascii?q?chl7NFe7ii+JKnJkHE+PFxlwGQD57D5adCjOzb++D7VGoM7IzJkUhKcYcEFn?= =?us-ascii?q?pnwd4TgxRmBceEDUPhK/u/aSczGdtDUlBN9HCgOk8TE8H7NBXf?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DcAACJSdxd/4UNJK1lHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgWsGAQELAYEbL1AFbFggBAsqhCuDRgOKbk6VM4RigS6BJANUCQE?= =?us-ascii?q?BAQwBAS0CAQGEWYIXJDUIDgIDDQEBBAEBAQIBBQRthTcBC4VrCwYdAQE4EQE?= =?us-ascii?q?MPgIEMCcENYMAAYF5TQMuAac0AoE4iGB1gTKCfgEBBYJKgkgYghcJgTYBjBU?= =?us-ascii?q?agX+BOCCKYzKCLJAXhUmYVgqCKwOVURuCP4dqj3ONWgtjmhACBAIEBQIOAQE?= =?us-ascii?q?FgVQBNoFYcBU7KgGCQVARFIZIg3OKU3SBKI0jAQE?= X-IronPort-AV: E=Sophos;i="5.69,242,1571702400"; d="scan'208,217";a="380519654" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 25 Nov 2019 21:38:44 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id xAPLci4J005435 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 25 Nov 2019 21:38:44 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 25 Nov 2019 15:38:43 -0600 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 25 Nov 2019 15:38:42 -0600 Received: from NAM02-BL2-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Mon, 25 Nov 2019 15:38:42 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dMCaERnz7F0qBdtyAfv8mIe9414DcEtovOzRHcSG1R0EVr5pbESnBZSdGgZnodw/7YvrOv2VDBOb55CJn77nRU5jY9iMtKcEjDyDO1MoweSXbNlXGvUaEtilToTHlcLO/DwHi2MVCod6zuZWK1rxSNynRT7xXTi5OmBWDi3fQVC7loZTgjf1jLHz778uYXHnYmF/A7hnLepL1FDBT/E/DN8mkLo62oP8xRbSIeOatdifuWj6ArpFs8mbr1co4IqlTaDEjmXYH/laK7TIZfhkgQQWVKI2RgA6mv4AoV8x95ebA7gT/aJzbZG94Ld8yLhSEhZrvLMzUz5IMo9ImGq3sw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rWjMVWgCt7ibq3u4SgpG0kBByztN64t2nvhv6VyUpxY=; b=mCzaw2TYvtEoZ0PSZtAQ/gMh/sNn9p9APmWhezEXCTnETkrLSSi0cg+szuhni+LD/OifMnk2DDtkPwnfBsaaaOlrryAnF/dMHGuRMVb4l6swSroeMzvDpi0Ank5ftNV5pMn/m82gEqhAFOwCbPmaNK0IAqlZ3iKXzKf2vT/6ULdrIXgtkcbrJYSNiaxnlqoWTTt+5/5PcgmS+LZUKDzgeraqY558WYs4nNF1sD0rL8f8QK3VJlZSf0MVeBINfA91vhthP5N2bBdQOXERJTbUckRkCBHNPxtRPqbKA/jxZZhSfkoVIU+FIO6Q38/twGEUoQWX5pUQWskoUQJcLncXyQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rWjMVWgCt7ibq3u4SgpG0kBByztN64t2nvhv6VyUpxY=; b=KLyujIoONBzQmLgVCezHvpkdyI/AOaWs9h2cBf6eIvJmhNJRLYbCMAlu3VQHdjFhIJ5QyXi6yqEd8s0qxGZS9iDaPRIMvoskrGlTUUjprlha1LMlMoflLF4aZQr6SqbYMdmuznuzGdFhHRSnAKaTZdL8mfDlm5H2tQmXGZlDzAc= Received: from MWHPR11MB1791.namprd11.prod.outlook.com (10.175.53.138) by MWHPR11MB1949.namprd11.prod.outlook.com (10.175.54.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Mon, 25 Nov 2019 21:38:41 +0000 Received: from MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a]) by MWHPR11MB1791.namprd11.prod.outlook.com ([fe80::c92f:7001:f28:fa7a%10]) with mapi id 15.20.2474.023; Mon, 25 Nov 2019 21:38:41 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Adoption call for draft-birkholz-rats-basic-yang-module Thread-Index: AQHVo9i0d7eUAEU9D0iTu6d66jM1gg== Date: Mon, 25 Nov 2019 21:38:41 +0000 Message-ID: <7F01D805-CD06-430F-AC85-30F5FFC64A1A@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.10.191111 authentication-results: spf=none (sender IP is ) smtp.mailfrom=ncamwing@cisco.com; x-originating-ip: [2001:420:283:1005:d01b:7d43:d26a:53a7] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3fd064f5-b4a0-409a-30d9-08d771efd729 x-ms-traffictypediagnostic: MWHPR11MB1949: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4714; x-forefront-prvs: 0232B30BBC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(376002)(396003)(366004)(136003)(189003)(199004)(66476007)(66556008)(6916009)(86362001)(66446008)(8676002)(64756008)(2501003)(33656002)(81156014)(81166006)(1730700003)(5660300002)(76116006)(91956017)(6436002)(6116002)(25786009)(5640700003)(66946007)(6306002)(71200400001)(14454004)(102836004)(14444005)(6512007)(2906002)(54896002)(2616005)(256004)(6486002)(6506007)(2351001)(478600001)(46003)(36756003)(71190400001)(58126008)(99286004)(186003)(7736002)(316002)(4744005)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:MWHPR11MB1949; H:MWHPR11MB1791.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: NfGHZRkY5X7rBTbFSB+lN2SZ+Ytf6HaFwyzH+0A9tytc+ZzSvaA5wJ6nnwSi3RC7sUyQTuxH2dgD8Qk3RIV1SjDQGjUTNVPbwi8tEZsKq8nZ6xLEV9BDAkOQ3kiCxPBYN+Wo9nPY3noc61+r3dmH9+8rm2rCBitzsBkwhR8vhv9d0eu0ZrOfJ6YHCVvG8pX03USglZAvQNk0Wz0OouAtksJZmNLyhNjUBOFQd2PtiDyQHxE6O69ZbrRwiEx2zLrrJFAUeBh0+Txi28Kb55+HXFgxB7lMPVy0NM2HlKuQs5yZ638+AwtWrM2SHgzXqgl5zvi7KjEmXLgPw389yWtAVScYDad43XUJQ3tmSGjmVpU9a4RRt60k5V5mz88zC2r25D59OBFar5SPiWiTNTowJRKLv0DGniGR+zur96ngxwLUjtN6nVXLWljVgXt/OhzJ x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_7F01D805CD06430FAC8530F5FFC64A1Aciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 3fd064f5-b4a0-409a-30d9-08d771efd729 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Nov 2019 21:38:41.5968 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: d8BtV8mmbhm27mjXN9/FuSA2+Nshlc4ztwzJ1MUgh46JkVOEPsAYJVDusRaapvghuXBBixpWORHPOeJVm5m+2Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1949 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: [Rats] Adoption call for draft-birkholz-rats-basic-yang-module X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Nov 2019 21:39:10 -0000 --_000_7F01D805CD06430FAC8530F5FFC64A1Aciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxsLA0KVGhlcmUgd2FzIHN0cm9uZyBjb25zZW5zdXMgdG8gYWRvcHQgZHJhZnQtYmlya2hvbHot cmF0cy1iYXNpYy15YW5nLW1vZHVsZSBhbmQgYWxsb3cgaXRzIHNjb3BlIHRvIGV4cGFuZCB0byBh bGxvdyBzdXBwb3J0IGZvciBvdGhlciBmb3JtYXRzIChzdWNoIGFzIEVBVCkuICBUbyBjb25maXJt IHRoaXMgb24gdGhlIGxpc3Q6IGlmIHlvdSBiZWxpZXZlIHRoYXQgdGhlIFJBVFMgV0cgc2hvdWxk IE5PVCBhZG9wdCB0aGlzIGFzIGEgV0cgZG9jdW1lbnQsIHBsZWFzZSByZXNwb25kIHRvIHRoaXMg YWRvcHRpb24gY2FsbCAoYnkgRGVjZW1iZXIgOSwgMjAxOSBzdGF0aW5nIHdoeS4NCg0KV2FybSBy ZWdhcmRzLA0KICAgTmFuY3kNCg== --_000_7F01D805CD06430FAC8530F5FFC64A1Aciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <172D0610421AD046B24E2135C6C3D7EF@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5BbGwsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZXJlIHdhcyBzdHJvbmcgY29uc2Vu c3VzIHRvIGFkb3B0IGRyYWZ0LWJpcmtob2x6LXJhdHMtYmFzaWMteWFuZy1tb2R1bGUgYW5kIGFs bG93IGl0cyBzY29wZSB0byBleHBhbmQgdG8gYWxsb3cgc3VwcG9ydCBmb3Igb3RoZXIgZm9ybWF0 cyAoc3VjaCBhcyBFQVQpLiZuYnNwOyBUbyBjb25maXJtIHRoaXMgb24gdGhlIGxpc3Q6IGlmIHlv dSBiZWxpZXZlIHRoYXQgdGhlDQogUkFUUyBXRyBzaG91bGQgTk9UIGFkb3B0IHRoaXMgYXMgYSBX RyBkb2N1bWVudCwgcGxlYXNlIHJlc3BvbmQgdG8gdGhpcyBhZG9wdGlvbiBjYWxsIChieSBEZWNl bWJlciA5LCAyMDE5IHN0YXRpbmcgd2h5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+V2FybSByZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDsmbmJzcDsg TmFuY3k8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_7F01D805CD06430FAC8530F5FFC64A1Aciscocom_-- From nobody Tue Nov 26 15:51:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D6223120A30; Tue, 26 Nov 2019 15:51:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=U1U7m1Of; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=Nxs+AtOt Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IbLUJNggouBj; Tue, 26 Nov 2019 15:51:31 -0800 (PST) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40087.outbound.protection.outlook.com [40.107.4.87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DAF11209AA; Tue, 26 Nov 2019 15:51:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1cPNU1647ip3In+MYWlt3bvIlf3qMVaFk/SRBgPDte8=; b=U1U7m1OfwYsVHT6qbl+QmW+JOljJfI83U6Y2p3PZeojTKiREpw39pbS187S/bnfX0Xi5QuzxAa/gPXn/XBu7iThZDkDrzWSScCM4J8ELX/BRYFNqwE8wMecm7jTjatF1dDW//8dD5IfCgdNtTQeCmkBt9blrv1hTyFUpiWG4wK0= Received: from AM6PR08CA0045.eurprd08.prod.outlook.com (2603:10a6:20b:c0::33) by AM6PR08MB3832.eurprd08.prod.outlook.com (2603:10a6:20b:89::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.19; Tue, 26 Nov 2019 23:51:28 +0000 Received: from DB5EUR03FT038.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::208) by AM6PR08CA0045.outlook.office365.com (2603:10a6:20b:c0::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Tue, 26 Nov 2019 23:51:28 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT038.mail.protection.outlook.com (10.152.21.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Tue, 26 Nov 2019 23:51:28 +0000 Received: ("Tessian outbound f7868d7ede10:v33"); Tue, 26 Nov 2019 23:51:27 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: b211a5a767be29bc X-CR-MTA-TID: 64aa7808 Received: from a7a70e19e90e.2 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.9.58]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 1CDEC441-9496-4453-BF5D-EF67D4CC7BDD.1; Tue, 26 Nov 2019 23:51:22 +0000 Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-ve1eur03lp2058.outbound.protection.outlook.com [104.47.9.58]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id a7a70e19e90e.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 26 Nov 2019 23:51:22 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Q7cqaFXMTsFbkPJci+P6hn9epdSrNG6wSoyRTGQ1hMdHGtw/eoo5HUtl0pH525XqNuBHbO4wZF8Yl83DbnspMcoxRjRwbMXlnYmShFiHJm2zx0++iKAoSuNVC6tAwF71x9+FOtbiaTd06m3Y+F4x3V+D9CdOnWSmK2nMM6aO1oPjgl2lVjx6/y+TvQyB1bZOVfQ6lewg0ick0AT5/ZORiS0ky9aCrQ0QRIg7SGZAAwo9ru/R2jwT2qqBrR8OcGsR3zrrHLbIctirbd+8J7h2YCYWKtFsuiRaKCGDUp5y1YeF2m5b1w0VC0USvDNwZTXMsmoP7LpumftNQ8uARAqsyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dkcIg7GKCHxheroZA2CKAR5i2r7bq9FQSCHpmLddj/Y=; b=HIICmRddl0pZ/WQFSh450m9T6KNBLLiwF81MGMmORG7MwuPZI+NUG0A6kWwRe268hEpvPKpPb2dCDV1XgMCmOfuCrhjo7q8ZIb4Fw0u9bVThZEREIQ28l/PIGHRxPSbblPtkPMjzbmjFLy1pLh1Ok256RS2V/5JRkhhJH/4mmlpounKCzBlrxvTs8X89ZFXinnrIWrwb/GPv/HNKbaRFH1MKEXXlmFXxQ2N5LYhFoY8SU6c6Lk/bzFZOet23GCguQKEP6972rcY5IbFn6rqdwJUiUNpIyqeDnKQVqnNutTKzlNWlPvPIcpWMdu2tUPCvilxN5eDYP7WusOx+UU7afg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dkcIg7GKCHxheroZA2CKAR5i2r7bq9FQSCHpmLddj/Y=; b=Nxs+AtOtp3r+Eu32LMK8YAAFE1+xbZ8Kc3BszZ0VZWTLdA1ChBgBc+yNEx9r4Q0VTDij5pPBqH/6KQPWNLIpfyKyb7i2Kc64HnZwNIXvcxXs+roWexHLvuD/GW5WtZmC4Vi37uzP93jMs+cvKMOZMymb4PXDGRXyahbdIle4/hE= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (20.179.18.151) by AM6PR08MB3398.eurprd08.prod.outlook.com (20.177.115.151) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.21; Tue, 26 Nov 2019 23:51:21 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4%7]) with mapi id 15.20.2495.014; Tue, 26 Nov 2019 23:51:20 +0000 From: Thomas Fossati To: Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAOFHbeRQea3TEO+3tpXPiFPYKeWUfEAgAfW1QA= Date: Tue, 26 Nov 2019 23:51:20 +0000 Message-ID: <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 96bec531-2d1d-4655-ce8d-08d772cb8e03 X-MS-TrafficTypeDiagnostic: AM6PR08MB3398:|AM6PR08MB3398:|AM6PR08MB3832: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:7219; x-forefront-prvs: 0233768B38 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(346002)(366004)(39860400002)(396003)(136003)(376002)(53754006)(199004)(189003)(7736002)(11346002)(86362001)(446003)(2616005)(186003)(6116002)(305945005)(3846002)(76116006)(91956017)(5660300002)(66446008)(64756008)(66556008)(66946007)(229853002)(2201001)(71200400001)(81156014)(8676002)(26005)(110136005)(36756003)(66066001)(256004)(8936002)(6436002)(478600001)(6486002)(2906002)(102836004)(81166006)(71190400001)(58126008)(316002)(14454004)(25786009)(33656002)(2501003)(6506007)(66476007)(53546011)(76176011)(6512007)(4326008)(6246003)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB3398; H:AM6PR08MB4231.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: FpPRbQEez8s1r2Cm7FwaZh3+SYdnShh6Mvg/tl3Si+mFUwC8gIPjLrr1roTwhTCwHcFHUupMgSXvH7qqqHBNNTGir2nKvhXYz1g+Tj7ytq4WmSEY4xa0nNVDPRxsUE4/u6kQ+jw9XjXXFCLRZKV4jBKxBj6J49EivJ9lzeyvHjnZ6kba0fS3YDJypDyz+8Ut+ZWEs2DDeh5kNYOIJwZxRuZrrraVo1OkVo7GDRPE7VceqnRB9RIWtWyEiRlylo7kCB7IPM1gblnOJcO9RxcovkuHbP8sRRzzGUvh79otpuAg21/G2k/Vr5o7dUoG6shWKnAA/Xz9GktLKS5JYzN8e3Sjcibh4rAxRJViPn2H7f4qglhJaWlE1CgfVPmCpaWjQ0XouTBio/6ikTOPR+7MaRdX3LktGKu01K2UihC5V7YaLu+PgDY/wn2BWvZ2J7rZ Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3398 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT038.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(376002)(396003)(346002)(39860400002)(199004)(189003)(53754006)(40434004)(26826003)(356004)(3846002)(7736002)(229853002)(6116002)(33656002)(22756006)(305945005)(436003)(81166006)(47776003)(6486002)(81156014)(478600001)(8936002)(50466002)(106002)(26005)(14454004)(102836004)(5660300002)(36756003)(53546011)(86362001)(2201001)(6506007)(6246003)(2906002)(25786009)(186003)(66066001)(70206006)(70586007)(110136005)(99286004)(76176011)(2486003)(23676004)(8676002)(4326008)(450100002)(11346002)(2616005)(336012)(316002)(2501003)(5024004)(76130400001)(14444005)(446003)(6512007)(58126008); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB3832; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: 2cfd2fab-4bbf-4e90-674c-08d772cb89a4 X-Forefront-PRVS: 0233768B38 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: iPyYs8xs2WyEkK0goeBc3ncwJj6r/L4XjsDSCN3OizHUwZDLAKrNLREYMp8V9aDfCmUvn/9lo0l8XAPwjx5km19RKD1kYmSZjjWJGjR+8G8qF7O6/HHrXsQ4ogI//QOBX6rzVh6A676E7D+d4RmSdtXLkphTAF5hnQg+/IJj4LNX7jMqFIrKf5BCLTrbtDvMJAo56kYxh8ssJde0aGN2ZdwU4EdeSlYqqHeXPaGQLOgWTqXK8VgxJBQJL0iBVaaheI83wRuoTjeyaQFpU7pGqOkVpV8RpiBUvXKlho1/L199PEFigQOn4dXZAidsFPCd7eBKZXOBepcAa+QfoamIxL7WzvtcsAb+AqmuxWJ6J2RxphgQ3LVu7sNJAvQGiU3UtFZ71Doa2ThsYc8dLGcC7It90tS4NEkHlZuk2dDeqLAa40mIbfFcbhPjHWF8LbN/ X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Nov 2019 23:51:28.2105 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 96bec531-2d1d-4655-ce8d-08d772cb8e03 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3832 Archived-At: Subject: Re: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Nov 2019 23:51:34 -0000 SGkgSGFubmVzLA0KDQpPbiAyMi8xMS8yMDE5LCAwMDowOCwgSGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbT4gd3JvdGU6DQo+IEhpIGFsbA0KPg0KPiBDYW4gc29tZW9uZSBzZW5kIGFuIGV4YW1wbGUg YXJvdW5kIGhvdyB0aGlzIHdvdWxkIGFjdHVhbGx5IGxvb2sgbGlrZT8NCg0KRm9yIHNvbWV0aGlu ZyBzdWNoIGFzIFRGLU0sIGl0IHNob3VsZCBsb29rIGxpa2UgdGhpczoNCg0Kew0KICAvIHRhZy1p ZCwgZ2xvYmFsbHkgdW5pcXVlIGlkZW50aWZpZXIgZm9yIHRoZSBzb2Z0d2FyZSBjb21wb25lbnQg Lw0KICAwOiAidHJ1c3RlZGZpcm13YXJlLm9yZy9URi1NIiwNCg0KICAvIHRhZy12ZXJzaW9uICho ZXJlOiAwLCBpLmUuIGluaXRpYWwgdGFnKSAvDQogIDEyOiAwLA0KDQogIC8gc29mdHdhcmUgY29t cG9uZW50IG5hbWUgLw0KICAxOiAiVEYtTSIsDQoNCiAgLyB2ZXJzaW9uIG9mIHRoZSBzb2Z0d2Fy ZSBjb21wb25lbnQgLw0KICAxMzogIjEuMC4wLXJjMStidWlsZC4xMjMiLA0KDQogIC8gKG9wdGlv bmFsKSB2ZXJzaW9uIHNjaGVtZSAoaGVyZTogc2VtdmVyKSAvDQogIDE0OiAxNjM4NCwNCg0KICAv IGVudGl0eSwgaS5lLiBvcmdhbml6YXRpb25zIHJlc3BvbnNpYmxlIGZvciBwcm9kdWNpbmcgb3Ig cmVsZWFzaW5nDQogICAgdGhlIHNvZnR3YXJlIGNvbXBvbmVudCAvDQogIDI6IHsNCiAgICAvIGVu dGl0eSBuYW1lIC8NCiAgICAzMTogIkxpbmFybyBMaW1pdGVkIiwNCg0KICAgIC8gZW50aXR5IHJv bGUgKGhlcmU6IHNvZnR3YXJlIGNyZWF0b3IpIC8NCiAgICAzMzogMiwNCg0KICAgIC8gdGh1bWJw cmludCBvZiB0aGUgZW50aXR5IHB1YmxpYyBrZXkgKGFsZ28gLS0gaGVyZTsgU0hBLTI1NiAtLSBh bmQgdmFsdWUpIC8NCiAgICAzNDogWw0KICAgICAgMSwNCiAgICAgIGgnNWU3M2MyZTZhOTZiZTU5 NGU1NmIyMTg0MThhM2VhMDNmMTM5NzkzNGEyNTE3ZDc4MTg1NTE5NWZlM2M1OTE2YicNCiAgICBd DQogIH0sDQoNCiAgLyBwYXlsb2FkIC8NCiAgNjogew0KICAgIC8gZmlsZXN5c3RlbSBpdGVtIChu YW1lIGFuZCBoYXNoKSAvDQogICAgMTc6IHsNCiAgICAgIDI0OiAidGZtLmJpbiIsDQogICAgICA3 OiBbDQogICAgICAgIDEsDQogICAgICAgIGgnNGEwMzlmMjg0ZDhhZDY4Y2E1YjRkMTU5Mjk3N2M3 Yzk2NGM0YWJiNWQwOGQ4N2U0YTAzNDZiODBjY2U1Yzc0ZCcNCiAgICAgIF0NCiAgICB9DQogIH0N Cn0NCg0KQXQgbGVhc3QgdGhpcyB3b3VsZCBiZSBteSBpbnRlcnByZXRhdGlvbiBvZiB0aGUgQ29T V0lEIGRyYWZ0LiAgSSdtIGEgYml0DQp1bnN1cmUgd2hldGhlciBhICJmaWxlc3lzdGVtIiBpdGVt IGlzIHRoZSBtb3N0IGFwcHJvcHJpYXRlIHBheWxvYWQgZm9yIGENCmZpcm13YXJlIHRoaW5neS4g IFN1cmVseSBIZW5rIGNhbiBzdWdnZXN0IHNvbWV0aGluZyBiZXR0ZXIuDQoNCkNoZWVycyENCg0K DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0 dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkg b3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Tue Nov 26 16:48:50 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72B2A120B32 for ; Tue, 26 Nov 2019 16:48:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M8-4lZ7Q-6nD for ; Tue, 26 Nov 2019 16:48:48 -0800 (PST) Received: from p3plsmtpa07-04.prod.phx3.secureserver.net (p3plsmtpa07-04.prod.phx3.secureserver.net [173.201.192.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E04B1120B30 for ; Tue, 26 Nov 2019 16:48:47 -0800 (PST) Received: from [10.86.0.118] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id ZlVei0gP2YzYsZlVfiQUm7; Tue, 26 Nov 2019 17:48:47 -0700 From: Laurence Lundblade Message-Id: <46CBC5D5-C4AF-4FFD-A06E-5D8B1FFF2AE7@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_B1B39B3D-7B29-415F-BAE8-DFD016492154" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 26 Nov 2019 16:48:46 -0800 In-Reply-To: <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> Cc: Hannes Tschofenig , "sacm@ietf.org" , "rats@ietf.org" To: Thomas Fossati References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfNLsy+E7UFr6g9DdtJI2HrTdbIh/Ans7SVSmX9d4V/qQgtY6FyozCeWsZ/Fe2jiKMP/Zj1K57xuon+6jKOLfO+GkXEdSSfFob/Fe0bktzzgtBI9Uzt69 MmxxCYciT+mCEmcqckvaoaJLHh/JXaDkz54TZ+f75pdVHALi7Ll0P076AFfEP16MtelUatEE+MM5bw8kzyAYmcmCd2oPlo76x61vWUqPLrfCMwMI3vbzJG4q PrGb5F1lr/X+IQQ6OvAlCA== Archived-At: Subject: Re: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 00:48:49 -0000 --Apple-Mail=_B1B39B3D-7B29-415F-BAE8-DFD016492154 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Looks good, Thomas Here=E2=80=99s a signed EAT with the CoSWID as a claim with label 21. In EATs with submods, there would likely be a CoSWID per submod (not = shown below). LL 18( [ / protected parameters, bstr wrapped / << { / alg / 1: -7 / ECDSA 256 / } >>, / unprotected parameters / { / kid / 4: h'4173796d6d657472696345434453413 23536' / 'AsymmetricECDSA256' / }, / COSE payload, the EAT, bstr wrapped / << { / nonce / 7:h'948f8860d13a463e8e', =20 / UEID / 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', =20 / boot_state (based on the -01 draft) / 12:{true, true, true, true, false}, =20 / time stamp / 6:1526542894, =20 / The CoSWID / 21: { =20 / tag-id, globally unique identifier for the software = component / 0: "trustedfirmware.org/TF-M", / tag-version (here: 0, i.e. initial tag) / 12: 0, / software component name / 1: "TF-M", / version of the software component / 13: "1.0.0-rc1+build.123", / (optional) version scheme (here: semver) / 14: 16384, / entity, i.e. organizations responsible for producing or = releasing the software component / 2: { / entity name / 31: "Linaro Limited", / entity role (here: software creator) / 33: 2, / thumbprint of the entity public key (algo -- here; SHA-256 -- = and value) / 34: [ 1, = h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b' ] }, / payload / 6: { =20 / filesystem item (name and hash) / 17: { =20 24: "tfm.bin", 7: [ 1, = h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74d' ] } } } } >>, / signature / h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f 9179bc3d7438bacaca5acd08c8d4d4f96131680c42 9a01f85951ecee743a52b9b63632c57209120e1c9e 30' ] ) > On Nov 26, 2019, at 3:51 PM, Thomas Fossati = wrote: >=20 > Hi Hannes, >=20 > On 22/11/2019, 00:08, Hannes.Tschofenig@arm.com> wrote: >> Hi all >>=20 >> Can someone send an example around how this would actually look like? >=20 > For something such as TF-M, it should look like this: >=20 > { > / tag-id, globally unique identifier for the software component / > 0: "trustedfirmware.org/TF-M", >=20 > / tag-version (here: 0, i.e. initial tag) / > 12: 0, >=20 > / software component name / > 1: "TF-M", >=20 > / version of the software component / > 13: "1.0.0-rc1+build.123", >=20 > / (optional) version scheme (here: semver) / > 14: 16384, >=20 > / entity, i.e. organizations responsible for producing or releasing > the software component / > 2: { > / entity name / > 31: "Linaro Limited", >=20 > / entity role (here: software creator) / > 33: 2, >=20 > / thumbprint of the entity public key (algo -- here; SHA-256 -- and = value) / > 34: [ > 1, > = h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b' > ] > }, >=20 > / payload / > 6: { > / filesystem item (name and hash) / > 17: { > 24: "tfm.bin", > 7: [ > 1, > = h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74d' > ] > } > } > } >=20 > At least this would be my interpretation of the CoSWID draft. I'm a = bit > unsure whether a "filesystem" item is the most appropriate payload for = a > firmware thingy. Surely Henk can suggest something better. >=20 > Cheers! >=20 >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats >=20 --Apple-Mail=_B1B39B3D-7B29-415F-BAE8-DFD016492154 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Looks good, Thomas

Here=E2=80=99s a signed EAT with the = CoSWID as a claim with label 21.

In EATs with submods, there would = likely be a CoSWID per submod (not shown below).

LL


18( [ / protected parameters, bstr wrapped / << { / alg / 1: -7 / ECDSA 256 / } >>,
        / unprotected parameters / {
            / kid / 4: h'4173796d6d657472696345434453413
                          23536' / 'AsymmetricECDSA256' /
        },

        / COSE payload, the EAT, bstr wrapped / << {
            / nonce  /
            7:h'948f8860d13a463e8e',
    
            / UEID /
            =
8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f',
    
            / boot_state (based on the -01 draft) /
            12:{true, =
true, true, true, false},
    
            / time stamp /
            =
6:1526542894,
   =
 
    =
        / The CoSWID /
            21: =
{
           
                / tag-id, =
globally unique identifier for the software component =
/
      0: "trustedfirmware.org/TF-M",
<= blockquote style=3D"margin: 0 0 0 40px; border: none; padding: 0px;" = class=3D"">

   =
   / tag-version (here: 0, i.e. initial tag) =
/
      12: =
0,

      / software =
component name /
      1: =
"TF-M",

      / version of =
the software component /
      13: =
"1.0.0-rc1+build.123",

      / (optional) =
version scheme (here: semver) =
/
      14: =
16384,

      / entity, =
i.e. organizations responsible for producing or =
releasing
        the =
software component /
      2: {
          / entity name =
/
          31: =
"Linaro Limited",

         / =
entity role (here: software creator) =
/
         33: =
2,

         / =
thumbprint of the entity public key (algo -- here; SHA-256 -- and value) =
/
         34: =
[
         =
    1,
        =
     =
h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b'=

         =
]
           =
},

    =
       / payload /
           6: {
 =
    
=
              / filesystem item (name and hash) /
  =
            17: {
    =
 
    =
              24: "tfm.bin",
               =
   7: [
                      1,
                      =
h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74d'
                  ]
               =
}
           }
       =
}
   =
} >>,

   / signature / =
h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f
                   9179bc3d7438bacaca5acd08c8d4d4f96131680c42
                   9a01f85951ecee743a52b9b63632c57209120e1c9e
                   30'
]
)




On Nov 26, 2019, at 3:51 PM, Thomas Fossati <Thomas.Fossati@arm.com> wrote:

Hi = Hannes,

On 22/11/2019, 00:08, Hannes.Tschofenig@arm.com> wrote:
Hi all

Can someone send an example around how this would actually = look like?

For something such = as TF-M, it should look like this:

{
 / tag-id, globally unique identifier for the software = component /
 0: "trustedfirmware.org/TF-M",

=  / tag-version (here: 0, i.e. initial tag) /
=  12: 0,

 / software component = name /
 1: "TF-M",

=  / version of the software component /
 13: = "1.0.0-rc1+build.123",

 / (optional) = version scheme (here: semver) /
 14: 16384,

 / entity, i.e. organizations = responsible for producing or releasing
=    the software component /
 2: {
   / entity name /
=    31: "Linaro Limited",

=    / entity role (here: software creator) /
=    33: 2,

=    / thumbprint of the entity public key (algo -- here; = SHA-256 -- and value) /
   34: [
     1,
=      h'5e73c2e6a96be594e56b218418a3ea03f1397934a2= 517d781855195fe3c5916b'
   ]
=  },

 / payload /
=  6: {
   / filesystem item (name and = hash) /
   17: {
=      24: "tfm.bin",
=      7: [
=        1,
=        h'4a039f284d8ad68ca5b4d1592977c7= c964c4abb5d08d87e4a0346b80cce5c74d'
=      ]
   }
 }
}

At = least this would be my interpretation of the CoSWID draft.  I'm a = bit
unsure whether a "filesystem" item is the most = appropriate payload for a
firmware thingy.  Surely = Henk can suggest something better.

Cheers!

IMPORTANT NOTICE: The contents = of this email and any attachments are confidential and may also be = privileged. If you are not the intended recipient, please notify the = sender immediately and do not disclose the contents to any other person, = use it for any purpose, or store or copy the information in any medium. = Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


= --Apple-Mail=_B1B39B3D-7B29-415F-BAE8-DFD016492154-- From nobody Tue Nov 26 19:19:22 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B54361200F7 for ; Tue, 26 Nov 2019 19:19:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6jo0t8hPg_Aj for ; Tue, 26 Nov 2019 19:19:20 -0800 (PST) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA33C12091D for ; Tue, 26 Nov 2019 19:19:19 -0800 (PST) Received: from mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id xAR3JA73028901 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 26 Nov 2019 22:19:13 -0500 Date: Tue, 26 Nov 2019 19:19:10 -0800 From: Benjamin Kaduk To: Mike Jones Cc: Laurence Lundblade , Yaron Sheffer , "rats@ietf.org" , Hannes Tschofenig Message-ID: <20191127031910.GF32847@mit.edu> References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.12.1 (2019-06-15) Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 03:19:21 -0000 On Sun, Nov 24, 2019 at 10:14:30PM +0000, Mike Jones wrote: > EAT should use the IANA JSON Web Token (JWT) Claims registry for JWT claims and the IANA CBOR Web Token (CWT) Claims registry for CWT claims. It’s intended that claims from different use cases inhabit the same registry, to facilitate claim reuse across use cases, where appropriate. If they aren’t reused, no harm is done. > > It would be far more confusing to developers to create duplicate, EAT-specific registries. I think the concern here is basically analogous to the difficulty we had with draft-ietf-oauth-jwsreq, where the protocol mechanics forced us to treat various field identifiers as both OAuth Parmeters and JWT Claims, with potentially conflicting registries involved. Here for EAT we do not have a separate registry already and so can avoid the worst of the conflicts, but I'm not sure that "avoiding duplicates" would apply to a proposal that makes a single JWT/CWT claim for "EAT data" and puts the attestation claims in a map as the value for that "EAT data" claim. What existing JWT/CWT claims would duplicate the potential contents of the EAT data fields? -Ben From nobody Tue Nov 26 20:39:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F01B7120B5C for ; Tue, 26 Nov 2019 20:39:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D6tUejI2M89u for ; Tue, 26 Nov 2019 20:39:25 -0800 (PST) Received: from p3plsmtpa09-07.prod.phx3.secureserver.net (p3plsmtpa09-07.prod.phx3.secureserver.net [173.201.193.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D506120B5B for ; Tue, 26 Nov 2019 20:39:25 -0800 (PST) Received: from [10.86.0.34] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id Zp6pissvoyTItZp6piFXAe; Tue, 26 Nov 2019 21:39:24 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_AADB0005-31EB-4DF1-9BCA-66172BB9226B" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 26 Nov 2019 20:39:23 -0800 In-Reply-To: <20191127031910.GF32847@mit.edu> Cc: Mike Jones , Yaron Sheffer , "rats@ietf.org" , Hannes Tschofenig To: Benjamin Kaduk References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLC4MnbfgneBQc4xyELujVsa+4/0O2R0M9X4qi3uwdeQmQqGIoHXEa56o7RXCOvJ6S7NvUA0dRImE7FfQuplD6oqg/u9hDHUvIOOKVhD0X4KdD7dc5bW dARIky01zM03o3zXNEh78DFtXaQ5WgXBSFVjLvUwYJC8G2ZMy5K0j9UVN5DQ8U7bOHTw5Rqyz3cti6EwwcHxRIEKyOOZEhzgyItQLtlbz9GpFDpKSt/eiQQA V/ljOZyYyKbV8/sLTDNReGnzmtt5393pfLNeLL52Nuc0r/0QSKb+dPps3PpEOebeHHD+Pr7/b7YQJUMOUNGL6A== Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 04:39:27 -0000 --Apple-Mail=_AADB0005-31EB-4DF1-9BCA-66172BB9226B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk wrote: >=20 > ...but I'm not sure that "avoiding duplicates" > would apply to a proposal that makes a single JWT/CWT claim for "EAT = data" > and puts the attestation claims in a map as the value for that "EAT = data" > claim. What existing JWT/CWT claims would duplicate the potential = contents > of the EAT data fields? That is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT = claim that is a map. Other=E2=80=99s have mentioned it to me. It would = let EAT re use the most compact integer CBOR integer labels. Right now we re use the following claims from JWT or CWT by normative = reference: - nonce - Token ID cti/jti - Time stamp (iat) Also these JWT or CWT seem either likely or possible use in EAT: - cnf (proof of possession of key) - iss Issuer - expiration - not before That=E2=80=99s a fairly large overlap which makes me disinclined to = putting all of EAT into one map that is one JWT/CWT claim, separating = EAT claims from CWT/JWT claims. I=E2=80=99m no OAuth expert, but I wonder if some of the EAT claims = might be useful for other than EAT tokens, another reason not to keep = them separate. I suspect we=E2=80=99re going to find at least one more use for a signed = map of label-value pairs in the next few years that would be able to re = use at least some of these claims =E2=80=94 another reason to keep them = in the same space. LL --Apple-Mail=_AADB0005-31EB-4DF1-9BCA-66172BB9226B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Nov 26, 2019, at 7:19 PM, Benjamin Kaduk <kaduk@mit.edu> = wrote:

...but I'm not sure that = "avoiding duplicates"
would apply to a proposal that makes a single JWT/CWT claim = for "EAT data"
and puts the attestation claims in a map as the value for = that "EAT data"
claim.  What existing JWT/CWT claims would duplicate the = potential contents
of the EAT data fields?

That is an interesting thought =E2=80=94 put = all of EAT into one JWT/CWT claim that is a map. Other=E2=80=99s have = mentioned it to me. It would let EAT re use the most compact integer = CBOR integer labels.

Right now we re use the following claims from JWT or CWT by = normative reference:
- nonce
- = Token ID cti/jti
- Time stamp (iat)

Also these JWT or CWT = seem either likely or possible use in EAT:
- cnf = (proof of possession of key)
- iss Issuer
- expiration
- not before

That=E2=80=99s a fairly = large overlap which makes me disinclined to putting all of EAT into one = map that is one JWT/CWT claim, separating EAT claims from CWT/JWT = claims.

I=E2=80=99= m no OAuth expert, but I wonder if some of the EAT claims might be = useful for other than EAT tokens, another reason not to keep them = separate.

I = suspect we=E2=80=99re going to find at least one more use for a signed = map of label-value pairs in the next few years that would be able to re = use at least some of these claims =E2=80=94 another reason to keep them = in the same space.

LL






= --Apple-Mail=_AADB0005-31EB-4DF1-9BCA-66172BB9226B-- From nobody Wed Nov 27 01:49:19 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4ABF312084B; Wed, 27 Nov 2019 01:49:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=J9SfivEx; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=P7mFru9C Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RUWwePGwcgOn; Wed, 27 Nov 2019 01:49:16 -0800 (PST) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80054.outbound.protection.outlook.com [40.107.8.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C74FB120832; Wed, 27 Nov 2019 01:49:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BUQkIXPE5M+acr0kRana0gJpuNYX3oMHYsQEKYoYOIs=; b=J9SfivExG5oKwkmYI++oDI+MXMlrx5fzjvjQ6dASgoiFpIRKbWiSKGitqjNeow3m/mE5u25X2d/gfn2N0tJcteVumSjDXRrGS/HgoU/ewQPXR2pb8wIZRygqCUvDRNvqZeJG4TcrgwUjgIqs3mwSAB3h8vUbiyHb6hXBs3EwHso= Received: from AM4PR08CA0061.eurprd08.prod.outlook.com (2603:10a6:205:2::32) by DBBPR08MB4297.eurprd08.prod.outlook.com (2603:10a6:10:c3::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.16; Wed, 27 Nov 2019 09:49:12 +0000 Received: from DB5EUR03FT052.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::207) by AM4PR08CA0061.outlook.office365.com (2603:10a6:205:2::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Wed, 27 Nov 2019 09:49:12 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT052.mail.protection.outlook.com (10.152.21.82) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Wed, 27 Nov 2019 09:49:12 +0000 Received: ("Tessian outbound fee635499979:v33"); Wed, 27 Nov 2019 09:49:12 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: fffa7d95e21ce96e X-CR-MTA-TID: 64aa7808 Received: from d32d4a75df42.2 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.4.56]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id C73DA44D-D847-432F-8FDB-AA6312EA2B19.1; Wed, 27 Nov 2019 09:49:06 +0000 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-am5eur02lp2056.outbound.protection.outlook.com [104.47.4.56]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id d32d4a75df42.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 27 Nov 2019 09:49:06 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WTcif2CAR86dFJHxSLjy67FIy9TYRy5PAWQK6BT/tq8f16CpxJtcv13sWBVD3zQRfrapHI0p16kJE9ClR0HRaUu7VoJ5O+Q+g8YJTJPdJMMOsg6i3pPjedkD9s9N9+mjcnD2rfO9MUIgeDO+WwjR0FCvgBKN4vSkwWIldNSOIUF+Ti8IbpOwamRbHmhUaFrTVq71n5/bLkaIHWJ6UyM1ax1EsBajg7g7eDjaS/R5K0gVVikflv2JK5KMZ6PEenbiKPoUnREd3UXvvpmdT933BLWjBhTyorAeNSb9kYZ3UCDUS4Q8SXibzsnyk8w2hdtBZ27Dwpie7BpgB1RLv7tLHA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OsejPo1aYPjw+W9uplw6bO4c+am7Dnb4Hm7YVz4JDjA=; b=Um7/bF4G2/T+SxI4hwwGwwNTPLGdrsgmfioYCbCCZmQsz9DjzejTeHAPd8ifel15+nUKkbt4rWsMXgeyUgPS0KI496aWZbZ4Kk4QnSF35as0cq97H6kU19l4foXDbPLqA1bAjXJg3Lr6sAmtKaTylwVIF18mcvfVjMcD5hPgR1CEOJkfDGAPUc3Olbc7uOKArRGVPlbpfMsBIPUv+E+3C46Iu/A3cFxqm+EZljnbiOhJGYeq7hQfpVpBZ0H2BNG2oNhUTwpVocjJ7902pIkOsnNl74sv9UYjp4dQrJjwf3AompBo5qiIDO1VFPCCg7UWTExv/vfBTttjobLsZLecmw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OsejPo1aYPjw+W9uplw6bO4c+am7Dnb4Hm7YVz4JDjA=; b=P7mFru9C8cPpzs+MSKKI7JUJXgU2Rfi9ccH7rIkSrkxXeW8eJ7HEEiStOqzrTvv2pH1dlVDNoDSKCp1XwvscXYCB12KIY2ZYAzrkchIX+K40xQsDw59Dim1qIgVCxV413nHi36jCTK20q9Ch7dEVF5vnTlZ5EPU0LqQOh9iFneU= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (20.179.18.151) by AM6PR08MB4342.eurprd08.prod.outlook.com (20.179.4.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.19; Wed, 27 Nov 2019 09:49:05 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4%7]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 09:49:05 +0000 From: Thomas Fossati To: Laurence Lundblade CC: Hannes Tschofenig , "sacm@ietf.org" , "rats@ietf.org" , Thomas Fossati Thread-Topic: [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAOFHbeRQea3TEO+3tpXPiFPYKeWUfEAgAfW1QCAABAMAIAAlvaA Date: Wed, 27 Nov 2019 09:49:05 +0000 Message-ID: References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <46CBC5D5-C4AF-4FFD-A06E-5D8B1FFF2AE7@island-resort.com> In-Reply-To: <46CBC5D5-C4AF-4FFD-A06E-5D8B1FFF2AE7@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; x-originating-ip: [217.140.106.53] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 419b6cbe-c503-4d97-4fbe-08d7731f0ebd X-MS-TrafficTypeDiagnostic: AM6PR08MB4342:|AM6PR08MB4342:|DBBPR08MB4297: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:2958;OLM:2958; x-forefront-prvs: 023495660C X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(396003)(346002)(366004)(376002)(189003)(199004)(14444005)(256004)(7736002)(6916009)(305945005)(5660300002)(478600001)(33656002)(6246003)(4326008)(66066001)(14454004)(36756003)(76176011)(8676002)(81166006)(81156014)(316002)(229853002)(64756008)(186003)(76116006)(86362001)(54906003)(6512007)(25786009)(58126008)(6506007)(53546011)(71200400001)(4744005)(6486002)(26005)(3846002)(66476007)(66946007)(99286004)(6116002)(8936002)(66556008)(11346002)(6436002)(2616005)(2906002)(446003)(66446008)(71190400001)(102836004)(91956017); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB4342; H:AM6PR08MB4231.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 7X62Fo1VZgvFfMk+QNURxnJDu7OiCtmzL0M0NWEl++JTXkOd+OGyLbQ2gHilDrJ8usIEAFigMoVVzZbzM0TSusQP4dGhFBWUIeYpqoo0WKmFnNXLv2qurV9DiWT/0h+dg3RD7lH6VWrArtPmZRURwYi9CgUV0coFXXXbuSgdJDs5Cx1/p74imf70/gZdhyOGHtfwqvyl5wE9+abXyaPO2s/0Ln/CrZvxHfsaNMQLinVuCeO2ACJw7KgXOFCz1Rd2ZHZuY8NPz6ESrkTM2kIFbfmutZZ+prTLx10ZzQvb7lQTo3MK8X06rSuWzl1s6xGngmqEi+g3bftqQ/VFbegWYeB1IIiHpzjrvO/6TutMtDn+rAl00lF86w4ySgYNr0QMouP8jzl8urQair8E64KJL1phZELq3y1CrkFWCz/w150mVawcQ/CBPVhW2pmfiAdy Content-Type: text/plain; charset="utf-8" Content-ID: <0F59F776E57E4D49BEA65DDB09345C5E@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4342 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT052.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(376002)(396003)(346002)(136003)(39860400002)(189003)(40434004)(199004)(4326008)(14454004)(450100002)(6486002)(58126008)(54906003)(356004)(6512007)(26826003)(6116002)(3846002)(229853002)(8676002)(478600001)(2906002)(316002)(5024004)(14444005)(6862004)(81166006)(22756006)(6246003)(8936002)(53546011)(47776003)(6506007)(33656002)(99286004)(102836004)(305945005)(5660300002)(4744005)(81156014)(70206006)(50466002)(106002)(186003)(36756003)(26005)(66066001)(2616005)(336012)(70586007)(446003)(86362001)(11346002)(76130400001)(7736002)(76176011)(25786009)(2486003)(436003)(23676004); DIR:OUT; SFP:1101; SCL:1; SRVR:DBBPR08MB4297; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; MX:1; A:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: ce393ce9-2b97-4b62-6078-08d7731f0aab X-Forefront-PRVS: 023495660C X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: zCw4Ul5/zGWxxGePvXnn1X8ccqCC599XjkdpgONOC/IwrPLc4K5jWdd42glPOV+z1ZLHRkyyYlLt8+hM3ugffoRdX/YULIBcix/GQvkruaeY6yKGs68s98FU7J/DXSukT04MkmoR2uNVFRghSp1BiCWA+95PGRD5n0iuXsKr8tuOFpsL/YFPJ0K1kl4ibinYJ9Ps7Kqwqa0frLBLwDdQ88qX8MsaCbenkv7IYusxLg7dBvPguEajbS8IUcN/svBZg49CkkhYksNIf3EcK/UbZ+Y0fkO4wTR9Nx2/YAOPNu9JN8YmznwVhGnIy+ptDN4HhtkLL0VgCBcjcSworzDk4Gpf7isLZQPvfu8pRkH3/spFuEMDLlKguuyFAT45d/UHT/pwMX0k14JoierANeeAzo3V3GP9VZQ7ekqCr4eaY/Rxtz5Z3830KDprrmBhajiq X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Nov 2019 09:49:12.4032 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 419b6cbe-c503-4d97-4fbe-08d7731f0ebd X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB4297 Archived-At: Subject: Re: [Rats] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 09:49:18 -0000 SGkgTGF1cmVuY2UsDQoNCk9uIDI3LzExLzIwMTksIDAwOjQ4LCAiTGF1cmVuY2UgTHVuZGJsYWRl IiA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPiB3cm90ZToNCj4gSW4gRUFUcyB3aXRoIHN1Ym1vZHMs IHRoZXJlIHdvdWxkIGxpa2VseSBiZSBhIENvU1dJRCBwZXIgc3VibW9kIChub3QNCj4gc2hvd24g YmVsb3cpLg0KDQpZZWFoLCB0aGF0IHdvdWxkIHNvdW5kIGxpa2UgYSBmYWlybHkgcGxhdXNpYmxl IHdheSB0byB0cmFuc2xhdGUgUFNBJ3MNCmFybV9wc2Ffc3dfY29tcG9uZW50cyBpbnRvIEVBVC4g IChPbmUgbmVlZHMgdG8gd29yayBvdXQgdGhlIGdvcnkgZGV0YWlscw0KYW5kIGNvbmZpcm0uKQ0K DQpjaGVlcnMsIHRoYW5rcyENCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRo aXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxz byBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBw bGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0 aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwg b3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91 Lg0K From nobody Wed Nov 27 01:56:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C153F120850 for ; Wed, 27 Nov 2019 01:56:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.435 X-Spam-Level: * X-Spam-Status: No, score=1.435 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZU1uqHmwrjd4 for ; Wed, 27 Nov 2019 01:56:11 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 807F31200F7 for ; Wed, 27 Nov 2019 01:56:11 -0800 (PST) Received: from dooku.sandelman.ca (x2f7f0ac.dyn.telefonica.de [2.247.240.172]) by relay.sandelman.ca (Postfix) with ESMTPS id DB74D1F47E for ; Wed, 27 Nov 2019 09:56:09 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 936E41110; Wed, 27 Nov 2019 17:47:35 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: <7F01D805-CD06-430F-AC85-30F5FFC64A1A@cisco.com> References: <7F01D805-CD06-430F-AC85-30F5FFC64A1A@cisco.com> Comments: In-reply-to "Nancy Cam-Winget (ncamwing)" message dated "Mon, 25 Nov 2019 21:38:41 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Wed, 27 Nov 2019 10:47:35 +0100 Message-ID: <10810.1574848055@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] Adoption call for draft-birkholz-rats-basic-yang-module X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 09:56:13 -0000 --=-=-= Content-Type: text/plain Nancy Cam-Winget (ncamwing) wrote: > There was strong consensus to adopt > draft-birkholz-rats-basic-yang-module and allow its scope to expand to > allow support for other formats (such as EAT). To confirm this on the > list: if you believe that the RATS WG should NOT adopt this as a WG > document, please respond to this adoption call (by December 9, 2019 > stating why. **I am unclear of the user community for this YANG module** I believe that many think of this as some kind of generic transport for attestation, and this is why they want it "expanded". I don't believe that your text above characterizes the TPM information model correctly as a "format". Therein lies the confusion. I believe that the inclusion of EAT in this document will significantly delay the document by causing a great deal of confusion. I see no reason why it should all be in a single YANG module, or in a single document. Having said this, unless work on this document (and ensuing confusion and debate over how the EAT leaf works) pushes other work off the agenda, then I do not object to the document being adopted. (I do get to say, "I told you so" though) -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3eRjcACgkQlUzhVv38 QpAmAAgAqecR87QvJAuSNniSbopupkhDrqb1uP6zubu91O5WQfmedkwEGyDwvBwF qKAxEm3okKYgBg+IrGpATRx3u/YobjVxQcCCBU54RFwau7Hz5VE4b6k9wYguVZW8 2yTUy7xsu+gVuIhYEWhmc3b7ktRtS7vbeDWSHLSkAvi//K8r8MPXQbXOT/h6ByZd 7uTpE8DXLhgI8LDAoxgRKlR3jMmhEF65yQOVl1bhtIZvtehkCfOrCzWWJE0M5wUS L04Cy1AGx+G1oThTwq1Faf85lp+TXA+7pQ3EPiz5ve3sozNok6TKVXpQgmuDP4Xl cDEiXr6oiiVFRbEpBI1Cal7ao8Ec2w== =Hbe6 -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Nov 27 04:09:28 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FEF812088D for ; Wed, 27 Nov 2019 04:09:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sU7SRdBeeO_O for ; Wed, 27 Nov 2019 04:09:24 -0800 (PST) Received: from mail-oi1-x236.google.com (mail-oi1-x236.google.com [IPv6:2607:f8b0:4864:20::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0D87120113 for ; Wed, 27 Nov 2019 04:09:24 -0800 (PST) Received: by mail-oi1-x236.google.com with SMTP id o12so19829245oic.9 for ; Wed, 27 Nov 2019 04:09:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=jcTJ1ceVO2nkNd3ytR95RAsmtOWmDtuNuOtN6LT3dB4=; b=sSIjQGBMU43RJhKxa9V4K2ORNlUEo/SAK+9EQCZN4sUocuNM+wYuUOQhC1bS6UK9+P fMmnbsat8ccsbi4Bn+RR0BmovYpSyn4UAYnZPSJ0+nuN1DYHjz1+hT4nW8SaEaWcMRBG Uzm4eusAqQRZEkD67bUOUkVJc5spm9B6zyFbiQbGzr18M4fD7ZCUqQMtun8BVmGZ8omh kSCjwk7irGXD50pXtdym4bpY2hWx3h+GqSHWKPYHdXIvp/g401qYTilW0LiNB5XV6HsZ wilON5ZdyMBx795YZFabpqikvg9fnAZnD190BqAndZ2+aF2yArqKFBL7oQX7kUzaZcYz o0cg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=jcTJ1ceVO2nkNd3ytR95RAsmtOWmDtuNuOtN6LT3dB4=; b=tx40iHCRyYdf1cn4oG2VPE10p5Z2KAos3h+nS825kubDawpUXapIOMUJUmtGgSs0gg FtgP7wWu+6jDrW8k1m4nJmtrEwCsbXUPJD/invrO5L0Qz3M9YIBEDf7lr9LTyFrZVN5R 87l6ytOgYRlNPr4+vbask/ZygkzVZXcMQXM8Ry4ZomOxjrX4ZWYtFmXhi/ZExVDn1SLk KvLfgLpH9x0dSNNFFiK5z2OkA/bnwRattW9a1LaZZTJjfocjkpo9/Zz8aRirlmR00FS+ Pi9DiK47X/orcYOfVPJNZZiYB67ooy44IM+PsqwTcx8J831IqZvzCkF6ifpK2SaSmCA+ +/tA== X-Gm-Message-State: APjAAAVOexz744vkNPDpvNbFcscuImp3ukWqJxfefMsLyZKfhSwZ7hXl CIgtihXU1fnn9WP9o02H0f5bGG2WP9o4mvBE9oE= X-Google-Smtp-Source: APXvYqxtof3Q4CLES8rKXoOSLPgW6dHgnqUApkp/tYZPIYK78tTA+cbfjqy1XvXXz5quMSm6FkYpnvy48iVSDoPOJR0= X-Received: by 2002:aca:75cb:: with SMTP id q194mr3887278oic.158.1574856564098; Wed, 27 Nov 2019 04:09:24 -0800 (PST) MIME-Version: 1.0 References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> In-Reply-To: From: Kathleen Moriarty Date: Wed, 27 Nov 2019 07:08:48 -0500 Message-ID: To: Laurence Lundblade Cc: Benjamin Kaduk , Yaron Sheffer , Hannes Tschofenig , Mike Jones , "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000134c03059852def3" Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 12:09:27 -0000 --000000000000134c03059852def3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Nov 26, 2019 at 11:39 PM Laurence Lundblade wrote: > > On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk wrote: > > ...but I'm not sure that "avoiding duplicates" > would apply to a proposal that makes a single JWT/CWT claim for "EAT data= " > and puts the attestation claims in a map as the value for that "EAT data" > claim. What existing JWT/CWT claims would duplicate the potential conten= ts > of the EAT data fields? > > > That is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT = claim > that is a map. Other=E2=80=99s have mentioned it to me. It would let EAT = re use the > most compact integer CBOR integer labels. > > Right now we re use the following claims from JWT or CWT by normative > reference: > - nonce > - Token ID cti/jti > - Time stamp (iat) > > Also these JWT or CWT seem either likely or possible use in EAT: > - cnf (proof of possession of key) > - iss Issuer > - expiration > - not before > > That=E2=80=99s a fairly large overlap which makes me disinclined to putti= ng all of > EAT into one map that is one JWT/CWT claim, separating EAT claims from > CWT/JWT claims. > > I=E2=80=99m no OAuth expert, but I wonder if some of the EAT claims might= be > useful for other than EAT tokens, another reason not to keep them separat= e. > > I suspect we=E2=80=99re going to find at least one more use for a signed = map of > label-value pairs in the next few years that would be able to re use at > least some of these claims =E2=80=94 another reason to keep them in the s= ame space. > One registry might become large, but it sounds like it will be easier and reuse may happen on occassion. To Yaron's earlier question, you can use claims that have not been registered as the requirement to figure out vendor specific claims was discussed and agreed as important at a previous interim for RATS. If I remember correctly, this was not done the same between JWT and CWT and that was the issue to figure out. Best regards, Kathleen > > LL > > > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --000000000000134c03059852def3 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Tue, Nov 26, 2019 at 11:39 PM Laur= ence Lundblade <lgl@island-reso= rt.com> wrote:

On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk <kaduk@mit.edu> wrote:
...but I'm not s= ure that "avoiding duplicates"
would apply to a proposal that make= s a single JWT/CWT claim for "EAT data"
and puts the attestation c= laims in a map as the value for that "EAT data"
claim.=C2=A0 Wha= t existing JWT/CWT claims would duplicate the potential contents
of the EAT = data fields?

That is an interesting= thought =E2=80=94 put all of EAT into one JWT/CWT claim that is a map. Oth= er=E2=80=99s have mentioned it to me. It would let EAT re use the most comp= act integer CBOR integer labels.

Right now we re u= se the following claims from JWT or CWT by normative reference:
-= nonce
- Token ID cti/jti
- Time stamp (iat)
=
Also these JWT or CWT seem either likely or possible use in = EAT:
- cnf (proof of possession of key)
- iss Issuer
- expiration
- not before

That= =E2=80=99s a fairly large overlap which makes me disinclined to putting all= of EAT into one map that is one JWT/CWT claim, separating EAT claims from = CWT/JWT claims.

I=E2=80=99m no OAuth expert, but I= wonder if some of the EAT claims might be useful for other than EAT tokens= , another reason not to keep them separate.

I susp= ect we=E2=80=99re going to find at least one more use for a signed map of l= abel-value pairs in the next few years that would be able to re use at leas= t some of these claims =E2=80=94 another reason to keep them in the same sp= ace.

One registry might become = large, but it sounds like it will be easier and reuse may happen on occassi= on.=C2=A0=C2=A0

To Yaron's earlier question, y= ou can use claims that have not been registered as the requirement to figur= e out vendor specific claims was discussed and agreed as important at a pre= vious interim for RATS.=C2=A0 If I remember correctly, this was not done th= e same between JWT and CWT and that was the issue to figure out.
=
Best regards,
Kathleen
=C2=A0

LL


=



______________= _________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--000000000000134c03059852def3-- From nobody Wed Nov 27 05:08:26 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A50E91208B1; Wed, 27 Nov 2019 05:08:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u3go4sabj2Mj; Wed, 27 Nov 2019 05:08:21 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C77A612083F; Wed, 27 Nov 2019 05:08:19 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xARD8E82006508 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 27 Nov 2019 14:08:15 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 27 Nov 2019 14:08:09 +0100 To: Laurence Lundblade , Thomas Fossati CC: "rats@ietf.org" , Hannes Tschofenig , "sacm@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <46CBC5D5-C4AF-4FFD-A06E-5D8B1FFF2AE7@island-resort.com> From: Henk Birkholz Message-ID: <858c7298-10d2-9efc-ca94-98dc9801e607@sit.fraunhofer.de> Date: Wed, 27 Nov 2019 14:08:08 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <46CBC5D5-C4AF-4FFD-A06E-5D8B1FFF2AE7@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 13:08:24 -0000 Hi Laurence, hi thomas, hi list, Thomas, thank you for the nice example write-up! And Laurance, thank you for the write-up of an example of a COSE signed EAT including an unsigned payload coswid tag. This is a write-up one option 3.) in issue #46. Option 4.) would wrap the CoSWID map in a COSE before putting it into an EAT using another key (let's say 22 instead of 21 - that's just an example). A reason could be that an external entity, such as the SIWD role software-creator [1], created the tag and signed it. Other keys would follow for XML encoding, type of resource collection, as outlined in #46. Viele Grüße, Henk [1] https://tools.ietf.org/html/draft-ietf-sacm-coswid-13#section-4.2 On 27.11.19 01:48, Laurence Lundblade wrote: > Looks good, Thomas > > Here’s a signed EAT with the CoSWID as a claim with label 21. > > In EATs with submods, there would likely be a CoSWID per submod (not > shown below). > > LL > > > 18( > [ > / protected parameters, bstr wrapped / << { > / alg / 1: -7 / ECDSA 256 / > } >>, > > / unprotected parameters / { > / kid / 4: h'4173796d6d657472696345434453413 > 23536' / 'AsymmetricECDSA256' / > }, > > > / COSE payload, the EAT, bstr wrapped / << { > / nonce / > > 7:h'948f8860d13a463e8e', > > > / UEID / > > 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', > > > / boot_state (based on the -01 draft) / > > 12:{true, true, true, true, false}, > > > / time stamp / > > 6:1526542894, > > / The CoSWID / > > 21: { > > / tag-id, globally unique identifier for the software component / > >   0: "trustedfirmware.org/TF-M ", > > >   / tag-version (here: 0, i.e. initial tag) / > >   12: 0, > > >   / software component name / > >   1: "TF-M", > > >   / version of the software component / > >   13: "1.0.0-rc1+build.123", > > >   / (optional) version scheme (here: semver) / > >   14: 16384, > > >   / entity, i.e. organizations responsible for producing or > releasing > >     the software component / > >   2: { > >     / entity name / > >     31: "Linaro Limited", > > >     / entity role (here: software creator) / > >     33: 2, > > >     / thumbprint of the entity public key (algo -- here; > SHA-256 -- and value) / > >     34: [ > >       1, > > > h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b' > >     ] > >   }, > > > / payload / >   6: { > > / filesystem item (name and hash) / >     17: { > > 24: "tfm.bin", >       7: [ >         1, > > h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74d' >       ] > > } > >     } >   } > > } >>, > > > / signature / h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f > 9179bc3d7438bacaca5acd08c8d4d4f96131680c42 > 9a01f85951ecee743a52b9b63632c57209120e1c9e > 30' > > ] > > ) > > > > > >> On Nov 26, 2019, at 3:51 PM, Thomas Fossati > > wrote: >> >> Hi Hannes, >> >> On 22/11/2019, 00:08, Hannes.Tschofenig@arm.com >> > wrote: >>> Hi all >>> >>> Can someone send an example around how this would actually look like? >> >> For something such as TF-M, it should look like this: >> >> { >>  / tag-id, globally unique identifier for the software component / >>  0: "trustedfirmware.org/TF-M ", >> >>  / tag-version (here: 0, i.e. initial tag) / >>  12: 0, >> >>  / software component name / >>  1: "TF-M", >> >>  / version of the software component / >>  13: "1.0.0-rc1+build.123", >> >>  / (optional) version scheme (here: semver) / >>  14: 16384, >> >>  / entity, i.e. organizations responsible for producing or releasing >>    the software component / >>  2: { >>    / entity name / >>    31: "Linaro Limited", >> >>    / entity role (here: software creator) / >>    33: 2, >> >>    / thumbprint of the entity public key (algo -- here; SHA-256 -- and >> value) / >>    34: [ >>      1, >>      h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b' >>    ] >>  }, >> >>  / payload / >>  6: { >>    / filesystem item (name and hash) / >>    17: { >>      24: "tfm.bin", >>      7: [ >>        1, >>        h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74d' >>      ] >>    } >>  } >> } >> >> At least this would be my interpretation of the CoSWID draft.  I'm a bit >> unsure whether a "filesystem" item is the most appropriate payload for a >> firmware thingy.  Surely Henk can suggest something better. >> >> Cheers! >> >> >> IMPORTANT NOTICE: The contents of this email and any attachments are >> confidential and may also be privileged. If you are not the intended >> recipient, please notify the sender immediately and do not disclose >> the contents to any other person, use it for any purpose, or store or >> copy the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Wed Nov 27 05:25:02 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A13E1208BB; Wed, 27 Nov 2019 05:25:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AZM9LPRtaCgx; Wed, 27 Nov 2019 05:24:59 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33A4C12004E; Wed, 27 Nov 2019 05:24:58 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xARDOr9F007810 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 27 Nov 2019 14:24:54 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 27 Nov 2019 14:24:48 +0100 To: Thomas Fossati , Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> From: Henk Birkholz Message-ID: Date: Wed, 27 Nov 2019 14:24:47 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 13:25:01 -0000 Hello Thomas, yes there are ways to deal with firmware in SWID, namely the resource type (index 19) in the set of SWID resource-collection [1] in combination with the rel type (index 40) entries. This way, you would not have to use filesystem-items, but this way is also a bit clunky and would require an informational guidance document describing how to use *SWID for that. There are some quite smart ways to do that actually with filesystem-items, but I think it is more feasible to use a SUIT manifest here to describe everything relevant to the "firmware thingy" and then put a CoSWID into the SUIT manifest's outer wrapper [2] that then represents the rest of the semantics that is not covered by the manifest but by CoSWID. This method is fine, as the COSE envelope around the EAT will make tempering with the outer wrapper of the SUIT Manifest evident. I think that is a more elegant way to do it, actually, and the reason why issue #46 in the EAT repo proposes to define a Claim to include a SUIT Manifest in an EAT, too. Viele Grüße, Henk [1] https://tools.ietf.org/html/draft-ietf-sacm-coswid-13#section-2.9.2 [2] https://tools.ietf.org/html/draft-ietf-suit-manifest-02#section-7.2 On 27.11.19 00:51, Thomas Fossati wrote: > At least this would be my interpretation of the CoSWID draft. I'm a bit > unsure whether a "filesystem" item is the most appropriate payload for a > firmware thingy. Surely Henk can suggest something better. From nobody Wed Nov 27 05:33:12 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 520DE1208BB for ; Wed, 27 Nov 2019 05:33:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TVD_SPACE_RATIO=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J6DJRj6HNt92 for ; Wed, 27 Nov 2019 05:33:09 -0800 (PST) Received: from out-2.smtp.github.com (out-2.smtp.github.com [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BA8812004E for ; Wed, 27 Nov 2019 05:33:09 -0800 (PST) Received: from github-lowworker-cd7bc13.ac4-iad.github.net (github-lowworker-cd7bc13.ac4-iad.github.net [10.52.25.102]) by smtp.github.com (Postfix) with ESMTP id 335BB1C07C0 for ; Wed, 27 Nov 2019 05:33:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574861588; bh=dL6C3AX3iBARbeF71YbWtPocekWr5CcwIDV2uUBFkBk=; h=Date:From:To:Subject:From; b=x45Q6C5PvaIDeH6CZAwDSauQTg3PaAgwAHltXIQlnmwWEG2cGgjIIsVRfYJAUv0dM RLq+8jdWXIu+pODGgSJ+QKRhUozVvk1LPBE7VvDkejvdonECCGSg8nrECSY0DTm43Z doYRv/8wNa9CsjAmLzdXsyuyGI4kpzyNPPRjZRtg= Date: Wed, 27 Nov 2019 05:33:08 -0800 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 13:33:11 -0000 Branch: refs/heads/coswid-&-suit-mainfest-claims Home: https://github.com/ietf-rats-wg/eat From nobody Wed Nov 27 05:38:49 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7A7C12004E; Wed, 27 Nov 2019 05:38:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1IPip5hk5MBw; Wed, 27 Nov 2019 05:38:45 -0800 (PST) Received: from mail-qv1-xf33.google.com (mail-qv1-xf33.google.com [IPv6:2607:f8b0:4864:20::f33]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 359AA1200A4; Wed, 27 Nov 2019 05:38:45 -0800 (PST) Received: by mail-qv1-xf33.google.com with SMTP id c2so1698327qvp.12; Wed, 27 Nov 2019 05:38:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=gDKw5hr3Iv2ujk8lRHpNt9Lit5xpBoU4Vz+myufXg7Y=; b=JvDb3vIkRaAs9uvA3FeVHXF5Zv7vW4IczzSgDO3C+FNyb8YK5H1J4X4hBVExMI8RwG onH4PZbZbw4OC8djrs+lJa/uQF8FPMMasLuZ6jS449JN5RsZwOiEwbqu7AJ6yquvCef4 2xoChJOHJcF5IUtLX65NDpPkzL9oj3ZXK1Ioi/ZYz3HtCxeXzjBHgnbh5CGj/HQKyOmz i3tLduSrQyocdjFC+IKj7IPFSfPoczRo1TTNeH3RKh5Vnn0QOAKDGMcCygp8p4ZrvkYw QhFSPUdkGtn8NofaFYdkKa9amkcRHfbl3NkjraGYULhZDN/z4LDpR7KFH/ZRwKqy7wMD ZiqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=gDKw5hr3Iv2ujk8lRHpNt9Lit5xpBoU4Vz+myufXg7Y=; b=O+3cJLkquubltOX29Dx9TJNcrCsvLB85VBxPQ7UX7s5T4eXz8qsSRj5iph87iaWt/o RCB51nW/rtR22+bYsZMaeA37PqFvt39kneVnXhbTerZmmkJssWK8PfzqYbdG9suRZEh4 N62gKc+uH6AUziah/y31WG54UE/W3vi2ke6IqlnLbxYe3zvH9ohPh+nUHWbIUTMJa5x/ e6BIEav44ixOkTT5967dMuaDKWyimWMgg8rlSqnLXOj0bqig8YPZyvBFKFwLjNotJ7NX dOockgzYybxO46CnZFPM+3jaFIdFwZ5iQIr2KxUH2zvgKyar8M3h9yQ3SE5f6X5H+Luu Mflg== X-Gm-Message-State: APjAAAXhEDj/5x2h6OQTW4vntoZJCcLcJ0JsPWWHRlfRdzKuVm0wAEa2 snxSJfiO2zewLb+iN8YZM8hEMYmHTmQ= X-Google-Smtp-Source: APXvYqwZLI+2yIgCnQJ4MVj22QflCyMfcDXL8ug0OJMYO/Lfh/h8Gvh3Y+5lx7cXLogCBxvSabUaRQ== X-Received: by 2002:a0c:b397:: with SMTP id t23mr4816006qve.5.1574861924035; Wed, 27 Nov 2019 05:38:44 -0800 (PST) Received: from [192.168.1.4] (146-115-73-78.s5196.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [146.115.73.78]) by smtp.gmail.com with ESMTPSA id q35sm797850qta.19.2019.11.27.05.38.43 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 27 Nov 2019 05:38:43 -0800 (PST) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Kathleen Moriarty Mime-Version: 1.0 (1.0) Date: Wed, 27 Nov 2019 08:38:42 -0500 Message-Id: References: <858c7298-10d2-9efc-ca94-98dc9801e607@sit.fraunhofer.de> Cc: Laurence Lundblade , Thomas Fossati , "rats@ietf.org" , Hannes Tschofenig , "sacm@ietf.org" In-Reply-To: <858c7298-10d2-9efc-ca94-98dc9801e607@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: iPhone Mail (17A878) Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 13:38:48 -0000 Sent from my mobile device > On Nov 27, 2019, at 8:08 AM, Henk Birkholz wrote: >=20 > =EF=BB=BFHi Laurence, hi thomas, > hi list, >=20 > Thomas, thank you for the nice example write-up! And Laurance, thank you f= or the write-up of an example of a COSE signed EAT including an unsigned pay= load coswid tag. >=20 > This is a write-up one option 3.) in issue #46. >=20 > Option 4.) would wrap the CoSWID map in a COSE before putting it into an E= AT using another key (let's say 22 instead of 21 - that's just an example). A= reason could be that an external entity, such as the SIWD role software-cre= ator [1], created the tag and signed it. Other keys would follow for XML enc= oding, type of resource collection, as outlined in #46. Having the option for both would meet the requirements for a signed or unsig= ned SWID/CoSWID previously discussed. Best regards, Kathleen=20 >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > [1] https://tools.ietf.org/html/draft-ietf-sacm-coswid-13#section-4.2 >=20 >> On 27.11.19 01:48, Laurence Lundblade wrote: >> Looks good, Thomas >> Here=E2=80=99s a signed EAT with the CoSWID as a claim with label 21. >> In EATs with submods, there would likely be a CoSWID per submod (not show= n below). >> LL >> 18( >> [ >> / protected parameters, bstr wrapped / << { >> / alg / 1: -7 / ECDSA 256 / >> } >>, >> / unprotected parameters / { >> / kid / 4: h'4173796d6d657472696345434453413 >> 23536' / 'AsymmetricECDSA256' / >> }, >> / COSE payload, the EAT, bstr wrapped / << { >> / nonce / >> 7:h'948f8860d13a463e8e', >> / UEID / >> 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', >> / boot_state (based on the -01 draft) / >> 12:{true, true, true, true, false}, >> / time stamp / >> 6:1526542894, >> / The CoSWID / >> 21: { >> / tag-id, globally unique identifier for the software component / >> 0: "trustedfirmware.org/TF-M "= , >> / tag-version (here: 0, i.e. initial tag) / >> 12: 0, >> / software component name / >> 1: "TF-M", >> / version of the software component / >> 13: "1.0.0-rc1+build.123", >> / (optional) version scheme (here: semver) / >> 14: 16384, >> / entity, i.e. organizations responsible for producing or >> releasing >> the software component / >> 2: { >> / entity name / >> 31: "Linaro Limited", >> / entity role (here: software creator) / >> 33: 2, >> / thumbprint of the entity public key (algo -- here; >> SHA-256 -- and value) / >> 34: [ >> 1, >> h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d7818= 55195fe3c5916b' >> ] >> }, >> / payload / >> 6: { >> / filesystem item (name and hash) / >> 17: { >> 24: "tfm.bin", >> 7: [ >> 1, >> h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80= cce5c74d' >> ] >> } >> } >> } >> } >>, >> / signature / h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f >> 9179bc3d7438bacaca5acd08c8d4d4f96131680c42 >> 9a01f85951ecee743a52b9b63632c57209120e1c9e >> 30' >> ] >> ) >>>> On Nov 26, 2019, at 3:51 PM, Thomas Fossati > wrote: >>>=20 >>> Hi Hannes, >>>=20 >>> On 22/11/2019, 00:08, Hannes.Tschofenig@arm.com > wrote: >>>> Hi all >>>>=20 >>>> Can someone send an example around how this would actually look like? >>>=20 >>> For something such as TF-M, it should look like this: >>>=20 >>> { >>> / tag-id, globally unique identifier for the software component / >>> 0: "trustedfirmware.org/TF-M ", >>>=20 >>> / tag-version (here: 0, i.e. initial tag) / >>> 12: 0, >>>=20 >>> / software component name / >>> 1: "TF-M", >>>=20 >>> / version of the software component / >>> 13: "1.0.0-rc1+build.123", >>>=20 >>> / (optional) version scheme (here: semver) / >>> 14: 16384, >>>=20 >>> / entity, i.e. organizations responsible for producing or releasing >>> the software component / >>> 2: { >>> / entity name / >>> 31: "Linaro Limited", >>>=20 >>> / entity role (here: software creator) / >>> 33: 2, >>>=20 >>> / thumbprint of the entity public key (algo -- here; SHA-256 -- and v= alue) / >>> 34: [ >>> 1, >>> h'5e73c2e6a96be594e56b218418a3ea03f1397934a2517d781855195fe3c5916b'= >>> ] >>> }, >>>=20 >>> / payload / >>> 6: { >>> / filesystem item (name and hash) / >>> 17: { >>> 24: "tfm.bin", >>> 7: [ >>> 1, >>> h'4a039f284d8ad68ca5b4d1592977c7c964c4abb5d08d87e4a0346b80cce5c74= d' >>> ] >>> } >>> } >>> } >>>=20 >>> At least this would be my interpretation of the CoSWID draft. I'm a bit= >>> unsure whether a "filesystem" item is the most appropriate payload for a= >>> firmware thingy. Surely Henk can suggest something better. >>>=20 >>> Cheers! >>>=20 >>>=20 >>> IMPORTANT NOTICE: The contents of this email and any attachments are con= fidential and may also be privileged. If you are not the intended recipient,= please notify the sender immediately and do not disclose the contents to an= y other person, use it for any purpose, or store or copy the information in a= ny medium. Thank you. >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >>>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Wed Nov 27 07:36:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D5E91209B8 for ; Wed, 27 Nov 2019 07:36:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=AN3OGuT3; dkim=pass (1024-bit key) header.d=juniper.net header.b=k6ARGq61 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KjhzREV46xGK for ; Wed, 27 Nov 2019 07:35:59 -0800 (PST) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E314F1208C8 for ; Wed, 27 Nov 2019 07:35:58 -0800 (PST) Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xARFWHMN010267; Wed, 27 Nov 2019 07:35:56 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=wfP+tMF/T7CI9Oo0ycUz9PChhrgofKAHvD6JL1G2NZA=; b=AN3OGuT3CIH/guouukAmXr9dhEy9LVTMK6qC14n9QbtkIS0fssEDtEmhhCQjfVxuZqOh ghTtxYGSTFFid8CwpNEysf1Iw+e5Q5+Q0f7VyQV7CfTho6GMFA2wErPYR4BEMZ8TwEjC CuNKlpicaSTfY2eE2VvuK7x9rnXQLCsbiKlum/fBekhKV2xF7CuC19JrWV4E8iPOk3cK S+F68E3Qu05ZTfAT2y3lhICyJgVHNIlUy/k901TUWknzMUM/CHbczXjdz4g2OR+m+87T 4KdX2oxS2KdcfQF/jfcYIBot9g2Mkbf5CafxyElBSDaI+zi7T9ssZcN9ZIUzvy53DLo/ sw== Received: from nam04-sn1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2050.outbound.protection.outlook.com [104.47.44.50]) by mx0a-00273201.pphosted.com with ESMTP id 2whcxg1ejc-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 27 Nov 2019 07:35:56 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bYLCGB1Ueq/bocjrwpk0FAjw1QIji6bIHa8DDMGAr2J+wczQE+QiBUdT5JuGIKZ1UKbEsnjkzXUvU0oSU/E6OAOX2ZRI93wxb+rwe8oHLfSbhgBPw0Gx6mO0lvuKSYG10TkIqZl4ol3+bwY9Z5jUJp45+eJa0NrkNavnaoCB/vGRgdJRx6HwTxh589fOWX9z+OwAUQtZwhOJ5Im9MfVYzYFzzGx6Ir3nZJ9OQnPaLLIcOuZrx83qUHCY+jt9AZjzR6LpqTqvup55IHZCTR1Hh4Wa4kvn5HlOsYIknOFtXXYzUrrH+5BA1dcAUrpIFRKlL1xmS0kMRUMHSHLBK4Gusw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wfP+tMF/T7CI9Oo0ycUz9PChhrgofKAHvD6JL1G2NZA=; b=kGrxR6wZp88MCe9E88UgNfkW6DD6Nvx/Z/82TiX/LjiRFLvIW/YdWcISp2FJTvIgkvcp5+z4W9WVEmeF1lEri+yDNOiISkJ0yy78xW9nAWAcfUbsaScXtHeO4vcKF2VUy39OGhsfvPfjlNlP95o64r7jMEn6CEU0vJGTc/pcswV/1Ug9H5OJHfjrM38djTr2Ut/voov2ECc+j4dvVfKni8kZUxAh5or8IOd8Ogw8B+GibDKRNUBneL2ZCu5S32+9T2mp0STxR3xCtUfvuypuiLbP8SMlWvNySxclk2xtT5/Ev6LP+uYJxhxplM3cFy1s0KivHliLjGU67gv52QPBIg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wfP+tMF/T7CI9Oo0ycUz9PChhrgofKAHvD6JL1G2NZA=; b=k6ARGq61wV9ofUXiMjjTcbFqx7MyJxDcnUBBOMl4+8P7lyQqPhdpxJUCsgkxIGXoKCLpCxt4FYJ9y3Z3Sq+gztXlB14IcBS5pA+B5VlQ+dN06jxNtN2BfnBwmSCYFZj/2MwAqAVetY8MLd+qGshuS6P8u+R/nYVRg8OXXeN+0Z8= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4677.namprd05.prod.outlook.com (52.135.235.87) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.10; Wed, 27 Nov 2019 15:35:54 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b%4]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 15:35:54 +0000 From: Guy Fedorkow To: "Nancy Cam-Winget (ncamwing)" CC: Jessica Fitzgerald-McKay , "rats@ietf.org" Thread-Topic: Adoption call for draft-birkholz-rats-basic-yang-module Thread-Index: AQHVo9i0d7eUAEU9D0iTu6d66jM1gqefJ98Q Content-Class: Date: Wed, 27 Nov 2019 15:35:54 +0000 Message-ID: References: <7F01D805-CD06-430F-AC85-30F5FFC64A1A@cisco.com> In-Reply-To: <7F01D805-CD06-430F-AC85-30F5FFC64A1A@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-27T15:35:52.4881173Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=43c4e603-2df4-43e1-bbfe-35fcd80581a9; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.13] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 99c93c66-f4a4-4c82-34bb-08d7734f7da5 x-ms-traffictypediagnostic: BYAPR05MB4677: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 023495660C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(346002)(396003)(376002)(136003)(199004)(189003)(9326002)(478600001)(66556008)(6306002)(3846002)(6116002)(55016002)(33656002)(9686003)(2906002)(25786009)(790700001)(54896002)(229853002)(54906003)(66066001)(7736002)(14454004)(99286004)(8936002)(6436002)(102836004)(7696005)(4326008)(6916009)(86362001)(11346002)(71190400001)(74316002)(446003)(6506007)(316002)(53546011)(76176011)(256004)(6246003)(26005)(52536014)(5660300002)(14444005)(71200400001)(81156014)(76116006)(66476007)(81166006)(66446008)(4744005)(8676002)(64756008)(186003)(66946007); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4677; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 1XdyQLOrfs2RhkSNbj9GUb3hO7ZPO7HnNTwWhoO/xpJ4trh74UTLC0hNKTcb1Klwgi0oIpTfUYzUhOiXCYtLDoeS3bVac3tEU0AG6UpSRIuz688pVthcU3d0ts6kVPlP3zM7XNAMy4jrbLQzMpSqKyMMw9hbH4E8u797UCPtSg2ytcTcATKH1B2IudgAbRiQp6JMsewSfXBuvMQj62gdL577T7c5KX+Ve9IaiZAi0a9z7Genye1cirHJVRLJXCc/Dal3q9rG73eGF8egobDLCZ5s7Cua4AlEvXQ74m7ovsOlE9jBxtRXYjfn6ypBAOTCMd5QsZj5wG6KtkgBgYpjtqLKhvAJtLTM3DcIHLhhHfQOUCsWVqmnbzpJa5FFriZaKTGzDeG2r5V+iTnwwB0iTOzNgeC+GgSON7RhuLjdOVu3sIxcCY/SKP70Clv5a5uw x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR05MB4248A9D0089D6455786C4A2EBA440BYAPR05MB4248namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 99c93c66-f4a4-4c82-34bb-08d7734f7da5 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2019 15:35:54.1375 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: SrIaCIIJhMZf4R+JtL1TisRIvxFTMgfEG8Cp6EaEijs8k9uPKI3+x5gcA87PZXsC+86ujTHoReScnogZHTe2yg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4677 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-27_03:2019-11-27,2019-11-27 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 priorityscore=1501 phishscore=0 clxscore=1015 spamscore=0 bulkscore=0 mlxlogscore=999 suspectscore=0 impostorscore=0 malwarescore=0 adultscore=0 mlxscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911270136 Archived-At: Subject: Re: [Rats] Adoption call for draft-birkholz-rats-basic-yang-module X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 15:36:00 -0000 --_000_BYAPR05MB4248A9D0089D6455786C4A2EBA440BYAPR05MB4248namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Nancy, I favor adoption of the YANG draft. Although I agree with Michael that i= f we're going to extend it to cover EAT as well, we should make sure we kno= w who thinks they want both in one model. Thanks /guy Juniper Business Use Only From: RATS On Behalf Of Nancy Cam-Winget (ncamwing) Sent: Monday, November 25, 2019 4:39 PM To: rats@ietf.org Subject: [Rats] Adoption call for draft-birkholz-rats-basic-yang-module All, There was strong consensus to adopt draft-birkholz-rats-basic-yang-module a= nd allow its scope to expand to allow support for other formats (such as EA= T). To confirm this on the list: if you believe that the RATS WG should NO= T adopt this as a WG document, please respond to this adoption call (by Dec= ember 9, 2019 stating why. Warm regards, Nancy --_000_BYAPR05MB4248A9D0089D6455786C4A2EBA440BYAPR05MB4248namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Nancy,

  I favor adoption of the YANG draft.  Although I agree with Michael that if = we’re going to extend it to cover EAT as well, we should make sure we= know who thinks they want both in one model.

  Thanks<= /o:p>

  /guy

 

 

 

Juniper Business Use Only

From:= RATS <rats-bounces@ietf.org> On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Monday, November 25, 2019 4:39 PM
To: rats@ietf.org
Subject: [Rats] Adoption call for draft-birkholz-rats-basic-yang-mod= ule

 

All,

There was strong co= nsensus to adopt draft-birkholz-rats-basic-yang-module and allow its scope = to expand to allow support for other formats (such as EAT).  To confir= m this on the list: if you believe that the RATS WG should NOT adopt this as a WG document, please respond to this ado= ption call (by December 9, 2019 stating why.

 

Warm regards,<= /o:p>

   Nancy<= o:p>

--_000_BYAPR05MB4248A9D0089D6455786C4A2EBA440BYAPR05MB4248namp_-- From nobody Wed Nov 27 07:46:11 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45CD3120BC8 for ; Wed, 27 Nov 2019 07:46:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=DkQq/EMV; dkim=pass (1024-bit key) header.d=juniper.net header.b=gJPVCtyH Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p_i4lOizbw1d for ; Wed, 27 Nov 2019 07:46:04 -0800 (PST) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A543A120AA0 for ; Wed, 27 Nov 2019 07:46:01 -0800 (PST) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xARFawm7032382; Wed, 27 Nov 2019 07:45:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=0JCbNnhMeZPDF1DTnSaePoTb50Sfo3YtMWylfioSBZ8=; b=DkQq/EMVQ92Ro9IJg2UhuqwgcRUXn+VCDNg4JfzhnD/CukDNcyycgOJZwT/860Ie8ynf nTcMOdI5ISx+4ODhc4Lx6PsOSQbA71PJo19H02fejpKhI2o8h1iymGnZCfkXa9E+88gh jcNG5GJqocrlOybvexbavhD0roSemaGl7djGO/ywnYyGLDp4j9iAMgF/oEW/iIcnM/v8 WYYGfT/sh//an/aSBh0Th0/jwXffxyq1wSwDJyGbyLZdpMfSlGzmq2cPkEGmSHKGxDRh QOxEtB3pGl6XP5NUmrYlX7ddGbKUb/WOpDqmHRYfwoJrVtoSIqL5Tvbt4vg3ZLsm3a/y cA== Received: from nam04-sn1-obe.outbound.protection.outlook.com (mail-sn1nam04lp2058.outbound.protection.outlook.com [104.47.44.58]) by mx0a-00273201.pphosted.com with ESMTP id 2whcxgsf7k-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 27 Nov 2019 07:45:59 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=a12mTCOkHyeMfFbQ4cH+tOui0bLwDOzVfa7bloxp4MSMe5Z37wTSbJswnNzidDdeXjkRvKtJ1u1ze06AohXmbyUpdz8v4Ps04nfNmPWF0OByxLwJpdIoaYRn443PaTmBW3zd7t365+RQWw+k+BmycBl2M8qOboQsLjxOdUIHHiTAEDhYbeusc3RYcMX0Q/4AyTEuGOnKDCS8hnw1duulZgirpvv43JfwK6qIRJ75hs0G8IBWtMnxAlvpN8mKqsfx7WENqcDr7adG9zGVJH21DjtGs2jvwTBkYS+tSwA4lYqYcVQQgN9crNRXr9i13zkt90niSUvBpM+u/i+asN0IOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0JCbNnhMeZPDF1DTnSaePoTb50Sfo3YtMWylfioSBZ8=; b=hNHpkB2VcylHA9ML44aw1bjWsGLOfCnfc+refUHs6+57sv/chx7nWwhzOqQcmnWqmcIXIEKjOu38NCzwJNQK3G3Wli29utViG0KzJvD1c0x4lmllNuDhG2tUNxuFTHp0IftPzcPMg+2/WLVLi/46REB9SIooWRGpbnSI9uHajdsLguYM2PYjCWVJDallL/g3sdSNNgsPfmH54G1EA+gkAlQu55i2ByIWy93MUtbJL4t38ip10D6IPz/aGOAdn5XPW3fk5FJNnGQg+MvFguWExgl1BouxxWyK9uHU9bbRvKoiLWxrI1MZnLDmhiKMODujj3Fe1k726YXyNnzI1iwOTg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0JCbNnhMeZPDF1DTnSaePoTb50Sfo3YtMWylfioSBZ8=; b=gJPVCtyH/l9jqlaeH5tgZsCOqvj0twxM0J3cgiMOFUJgtn4xElHJUUlCZErywUJPcarALq2eE5yUov2agOzZKNG3AuB3sq6K/vu3Mk1htCjKVsIlE4nk8yaMGwYxAJ9mRbH6/0q3iziedzkmX06SLoRm0sOQ2QxTmhgGlA67ZuI= Received: from BYAPR05MB4248.namprd05.prod.outlook.com (20.176.251.147) by BYAPR05MB4261.namprd05.prod.outlook.com (52.135.202.26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.16; Wed, 27 Nov 2019 15:45:57 +0000 Received: from BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b]) by BYAPR05MB4248.namprd05.prod.outlook.com ([fe80::457d:474a:1f33:9a2b%4]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 15:45:56 +0000 From: Guy Fedorkow To: Michael Richardson , "pritikin@cisco.com" CC: Jessica Fitzgerald-McKay , Henk Berkholz , "Smith, Ned" , William Bellingrath , "rats@ietf.org" Thread-Topic: name of identity key Thread-Index: AdWg4nF8kDHIJtSESNGSE2qU3LjHXACg2v8AAHSogKA= Content-Class: Date: Wed, 27 Nov 2019 15:45:56 +0000 Message-ID: References: <32083.1574668598@dooku.sandelman.ca> In-Reply-To: <32083.1574668598@dooku.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=True; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner=gfedorkow@juniper.net; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2019-11-27T15:45:54.9777890Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application=Microsoft Azure Information Protection; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=4062f924-ab42-4568-a2d7-1e3bcd9d2d23; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method=Automatic dlp-product: dlpe-windows dlp-version: 11.3.2.8 dlp-reaction: no-action x-originating-ip: [66.129.241.13] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d698591d-b5dc-4305-7806-08d77350e4d5 x-ms-traffictypediagnostic: BYAPR05MB4261: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-forefront-prvs: 023495660C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(376002)(346002)(366004)(396003)(199004)(189003)(13464003)(6506007)(76116006)(2906002)(26005)(5660300002)(446003)(71200400001)(316002)(3846002)(11346002)(33656002)(256004)(99286004)(102836004)(86362001)(2501003)(7736002)(52536014)(6116002)(3480700005)(54906003)(6246003)(66066001)(53546011)(14454004)(186003)(74316002)(64756008)(66446008)(478600001)(66556008)(55016002)(66476007)(8676002)(81156014)(81166006)(71190400001)(6436002)(229853002)(66946007)(9686003)(110136005)(25786009)(7696005)(8936002)(4326008)(76176011)(305945005); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR05MB4261; H:BYAPR05MB4248.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: JlXGvcWcMFMcn8kqVFEs66hDGTwJTTx/rd6uy3n6HleX/gR5AgpsToeTVG+CFEMNZhQ1vsDfHHoBKZs4Ww++VT9TjtwtFUsL9SesDHxkhXGL2gJSpOoQrQ9UxRgo6MQ0fTsoCuDgDVff25LOckb8zysZqMQzuQln8Hka7tHr0TYULrEJ5oOLgtJw48Z1ffvovbeRbaLNAvY0+FbpQjrkys3f5jD7kgGh2z3lr/1Xbm4t8VoNmVym+PSDBy6iZbnTvJjVdIH8D8EndPxF46tGuHhN/kbbl8iV35BD+crKtQUTp6MoKws3CnaHhH0Wh5Pi/nTH6tkeEWSIhFpVpJcuBjwKJHFtsbdRPQneO+YaGm7GATZOxMGz9+BvVwMizcK4FKUkB3WpO8ljqPi4AI6lNXzR9qabCxY/D6YJhlMkyCNI3ENneALCkRU2YjgReybb Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: d698591d-b5dc-4305-7806-08d77350e4d5 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2019 15:45:56.8958 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gwd7OjahGTHnZYMmroJUIIgAusmAQG2DsLXG9cpWXMHigz+7LeFBxtsDgF3GJwkxKMtfHDuFaV6DySrnyu7nWQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB4261 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-27_03:2019-11-27,2019-11-27 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 mlxscore=0 suspectscore=0 clxscore=1011 impostorscore=0 adultscore=0 spamscore=0 mlxlogscore=999 lowpriorityscore=0 bulkscore=0 malwarescore=0 priorityscore=1501 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-1910280000 definitions=main-1911270137 Archived-At: Subject: Re: [Rats] name of identity key X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 15:46:09 -0000 Hi Michael, I'm not sure I'm seeing the problem... The identity key used for ZTP and the identity key used to prove that you= 're attesting the right box are most likely the same, as they have the sam= e role, that of authenticating a secure connection to a device. And it's u= p to the device manufacturer and the system administrator as to whether the= y want to use an IDevID provided by the manufacturer or an LDevID provided = by the sysadmin. Obviously if you want drop-ship sZTP to work, it has to b= e the manufacturer's identity key, since the sysadmin won't get to touch th= e box before it's plugged in. But there's nothing to say they couldn't pre= -stage it and install a Local Device Identity key (and Local Attestation Ke= y) In RIV, it's the Attestation key (Initial or Local) that must be unique, = and that one has no purpose other than to sign the evidence collected in th= e TPM. Is there something I'm missing in your question below? Thanks /guy Juniper Business Use Only -----Original Message----- From: Michael Richardson =20 Sent: Monday, November 25, 2019 2:57 AM To: Guy Fedorkow ; pritikin@cisco.com Cc: Jessica Fitzgerald-McKay ; Henk Berkholz ; Smith, Ned ; William Bellingr= ath Subject: Re: name of identity key Guy Fedorkow wrote: > Hi Michael, I don't want to lose your question on the name of the > identity credential in RIV (or RATS)... I think you were saying that > from a RATS point of view, you'd want to make the spec more generic > than a strict requirement for IEEE DevID. Can you help me see why? = Is > there a more generic way of specifying the certificate that goes with > the identity key? Thanks /guy I (draft-ietf-anima-bootstrapping-keyinfra) am the user of an IDevID deploy= ed in devices. This is often located in a TPM. If the TPM has to have a different IDevID key for signing Evidence, then I = forsee a number of problems if the key has the same DN (serial-number, etc.= ) as the IDevID used for onboarding. Is it signed by the same manufacturer CA as the onboarding IDevID? (what names do I even use to distinguish these two keys?) I can see manufacturers pushing back on having two identities. One answer might be: MANUCA -> RIV_IDEVID(w/CA:TRUE) -> Onboarding_IDEVID -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- From nobody Wed Nov 27 07:53:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBD8B1209DF for ; Wed, 27 Nov 2019 07:53:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.642 X-Spam-Level: X-Spam-Status: No, score=-0.642 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IRYaH-gprbFx for ; Wed, 27 Nov 2019 07:53:36 -0800 (PST) Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8558F1209DD for ; Wed, 27 Nov 2019 07:53:36 -0800 (PST) Received: by mail-wr1-x436.google.com with SMTP id i12so27338628wro.5 for ; Wed, 27 Nov 2019 07:53:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=fA3qyOxW7LuJy6vdxA3kfkrIJpjALWVB+98gYJ01Hu8=; b=FsUrF1w+9GtamMOIgSG/p3a3YOmQd1NHqeGvD3PvqKL12CwBxIiIXYPC9g+TIPmCUp Iu38lcdb8Z5676aKzfH7w9WSTPLN6A9lO9AUTvxhgqPMT+j+bGtIFQhRNt4eu08Ha8dd hv1rb74b81KmXJjXLXrynfUWayNaWKL07dHgh1qeOOhdn2MkA1NC/DDzUg7bXrZkZvoE pv1k6JcoSs6khr+KSV0cRNdX3XC10xWFeQeG14cRpj8OZ+A+YRUks9O0AYNRJrdxg8vT YFU9p4hXqLe7lUisnOimFkwQ9C0B+iMYaSHBriodQ+ogt7+XhVV7BcdUOgnLa0z0XECE eLvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=fA3qyOxW7LuJy6vdxA3kfkrIJpjALWVB+98gYJ01Hu8=; b=OfkrZugJuGfJHbZToqULHmhZlnTPfX6omxF4W5LLarLcRy4vMVrhHUgwwwVT+kjUSj QjNHUPL+c+MyVWbpS/T/RFQrjumCIXJF2DMTvxkKt43NbyHZiTYYVbn+IFVB5TbDxZYW jxRt5ddkDA5IVGgaA8P1GaRtKpP4GqrE1cT048VaXqMwI+jMpcSazfYwpnuRRKG+c7yZ pdBb0ukdLQxmRZ1xjeL3RpKOIfMl4h6EqUYWd2TO5nodwvnIapHOlZSMb1ENSPBONDho ng4/vRi605HCRuJtn70t4VKyKw+Z0vHwc8j64mTcEfKUxNxPWmtpYenSGq3e+hizvSo3 AD3A== X-Gm-Message-State: APjAAAWWXThNRIHRaGPon+nxNxtNbCacYM0sFAWOk+lFPpoVN6PQpKHO oVTI3jB+QOD7v05KJgUjKEs= X-Google-Smtp-Source: APXvYqzWl8KSHKhdO5gL1JWxs3KV2StIdJp+3lTTZ9qQEj9HpSB8rzOpOSfWnPiFhHemGuN01kJ9AQ== X-Received: by 2002:adf:cf0c:: with SMTP id o12mr42686480wrj.102.1574870014963; Wed, 27 Nov 2019 07:53:34 -0800 (PST) Received: from [172.28.128.95] (pub-corp-42-8.intuit.com. [91.102.42.8]) by smtp.gmail.com with ESMTPSA id m16sm7210154wml.47.2019.11.27.07.53.33 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 27 Nov 2019 07:53:33 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Wed, 27 Nov 2019 17:53:32 +0200 From: Yaron Sheffer To: Laurence Lundblade , Benjamin Kaduk CC: Mike Jones , "rats@ietf.org" , Hannes Tschofenig Message-ID: Thread-Topic: [Rats] [EXTERNAL] Re: EAT IANA registry References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657722013_1448132465" Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 15:53:39 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657722013_1448132465 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable To put it into perspective, there are already 57 claims registered [1]. So = even if 7 claims overlap, this is a relatively *small* number. IMO there is = high value in a separate namespace for EAT claims, and the standard way to c= reate such a namespace in JSON is exactly as Ben is proposing. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 [1] https://www.iana.org/assignments/jwt/jwt.xhtml =20 From: Laurence Lundblade Date: Wednesday, November 27, 2019 at 06:39 To: Benjamin Kaduk Cc: Mike Jones , Yaron Sheffe= r , "rats@ietf.org" , Hannes Tschofeni= g Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry =20 =20 On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk wrote: =20 ...but I'm not sure that "avoiding duplicates" would apply to a proposal that makes a single JWT/CWT claim for "EAT data" and puts the attestation claims in a map as the value for that "EAT data" claim. What existing JWT/CWT claims would duplicate the potential contents of the EAT data fields? =20 That is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT claim th= at is a map. Other=E2=80=99s have mentioned it to me. It would let EAT re use the = most compact integer CBOR integer labels. =20 Right now we re use the following claims from JWT or CWT by normative refer= ence: - nonce - Token ID cti/jti - Time stamp (iat) =20 Also these JWT or CWT seem either likely or possible use in EAT: - cnf (proof of possession of key) - iss Issuer - expiration - not before =20 That=E2=80=99s a fairly large overlap which makes me disinclined to putting all o= f EAT into one map that is one JWT/CWT claim, separating EAT claims from CWT= /JWT claims. =20 I=E2=80=99m no OAuth expert, but I wonder if some of the EAT claims might be usef= ul for other than EAT tokens, another reason not to keep them separate. =20 I suspect we=E2=80=99re going to find at least one more use for a signed map of l= abel-value pairs in the next few years that would be able to re use at least= some of these claims =E2=80=94 another reason to keep them in the same space. =20 LL =20 =20 =20 =20 =20 =20 --B_3657722013_1448132465 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

To put it into perspective, there are already 57 c= laims registered [1]. So even if 7 claims overlap, this is a relatively *= small* number. IMO there is high value in a separate namespace for EAT c= laims, and the standard way to create such a namespace in JSON is exactly as= Ben is proposing.

 

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

 

[1] https://www.iana.org/assignments/jwt/jwt.xhtml=

 

From: Laurence Lundblade <lgl@island-resort.com>
<= b>Date: Wednesday, November 27, 2019 at 06:39
To: Benjamin Kad= uk <kaduk@mit.edu>
Cc: Mike Jones <Michael.Jones=3D40micros= oft.com@dmarc.ietf.org>, Yaron Sheffer <yaronf.ietf@gmail.com>, &qu= ot;rats@ietf.org" <rats@ietf.org>, Hannes Tschofenig <Hannes.T= schofenig@arm.com>
Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA = registry

 

 

On Nov 26, 2019= , at 7:19 PM, Benjamin Kaduk <kaduk@mit.ed= u> wrote:

 

...but I'm not sure that "avoiding duplicates"
would apply to = a proposal that makes a single JWT/CWT claim for "EAT data"
and= puts the attestation claims in a map as the value for that "EAT data&q= uot;
claim.  What existing JWT/CWT claims would duplicate the potent= ial contents
of the EAT data fields?

 

Th= at is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT claim that = is a map. Other=E2=80=99s have mentioned it to me. It would let EAT re use the mos= t compact integer CBOR integer labels.

 

Right now we re us= e the following claims from JWT or CWT by normative reference:

- nonce

- Token ID cti/jti

- Time= stamp (iat)

 

Also these JWT or CWT seem either likely or = possible use in EAT:

- cnf (proo= f of possession of key)

- iss Is= suer

- expiration

=

- not before

 

That=E2=80=99s a fai= rly large overlap which makes me disinclined to putting all of EAT into one = map that is one JWT/CWT claim, separating EAT claims from CWT/JWT claims.

 

I=E2=80=99m no OAuth expert, but I wonder if some of the EAT clai= ms might be useful for other than EAT tokens, another reason not to keep the= m separate.

 

I suspect we=E2=80=99re going to find at least one = more use for a signed map of label-value pairs in the next few years that wo= uld be able to re use at least some of these claims =E2=80=94 another reason to ke= ep them in the same space.

=  

LL

 

&nb= sp;

 

<= p class=3DMsoNormal> 

&n= bsp;

 

--B_3657722013_1448132465-- From nobody Wed Nov 27 08:59:48 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A984A12093E; Wed, 27 Nov 2019 08:59:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=B47RVxLt; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=kfrF8bSM Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8a3i9uxJueHC; Wed, 27 Nov 2019 08:59:43 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20061.outbound.protection.outlook.com [40.107.2.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12437120927; Wed, 27 Nov 2019 08:59:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8KoFiQBcU0q3S8JywqfZR7j+pMO6kGwHOPF3O/Dwy84=; b=B47RVxLttBGmu3qn6Hty8jsWW3uCnrdimtgLMJyBu3qzkF+e7Y6TApvzkL+7v34c4/hXWQDn6SrKsyC8azx6krSBgnZLAiYFzmup16rGXsEivDFKtmba+RH7j19CuYftuZ8je4Jya0c25a1odMt35IPseqoHaiZ/sThOl3MkYh0= Received: from VI1PR0802CA0011.eurprd08.prod.outlook.com (2603:10a6:800:aa::21) by VI1PR08MB3037.eurprd08.prod.outlook.com (2603:10a6:803:42::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.17; Wed, 27 Nov 2019 16:59:37 +0000 Received: from DB5EUR03FT059.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::209) by VI1PR0802CA0011.outlook.office365.com (2603:10a6:800:aa::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.19 via Frontend Transport; Wed, 27 Nov 2019 16:59:37 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT059.mail.protection.outlook.com (10.152.21.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Wed, 27 Nov 2019 16:59:37 +0000 Received: ("Tessian outbound 15590139dbb5:v37"); Wed, 27 Nov 2019 16:59:35 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 92074247f288c3da X-CR-MTA-TID: 64aa7808 Received: from c9bf0f2719b7.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id ED551546-F403-48B2-8282-BE0F3214DB1E.1; Wed, 27 Nov 2019 16:59:30 +0000 Received: from EUR01-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id c9bf0f2719b7.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 27 Nov 2019 16:59:30 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=flE+TNU+R2gWt5jcuMfBfEbPZ0bggWTpii+I/1gKllnp2zQySzGLPHJc9LySaDP1Zc4lfNh756rFzc68iTzlW62eB7WfV/f26YPcS4yOtJ5f4Z0lB/sy0IHTg+CeRWprICVkp+BMi/maKUrneqYnfDfcZ7OnAajDDgRQm7Rk19KLoWjgf8Mk52QLACQhZrsmNIRs8itQh+R66l79edyRoZw2HGH7c7nNnAtm8EmYnZNPOl1mYAWE8NK7DTbzc71BXM+Q8Sj2OWQI9pzGyEaSUaW1El4xJFGiYB7XZJd3HZI/pC+0GNn0PevlGZwUStWFHel/UtfJt5di1kSAQUMOhg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q3hkaEVaXm3fJFES2T2UeGzA4EwYQ/fvjEDbavwDmdc=; b=nN8qNLvkoIxGV5kWEhCmUCxBrcYgX6a5GSdIGYV0Y+nmiBGv+ItxFeR92KmNVgM6KESWFY12lonyd5TI1anHmOEn7XPiCP663zNXCIEuc/+XZ1UxzlKpG3xf1MY5tfgclK+49zorQZ5pxIZWSh5xWMaE+uRxPCHDsanEIXLBYXmkBwlInc2akMWqL+Tbg2E9PRGoVE2cA3JLiwyeaV4N92mUjH3Yjm1EdNKbUO7NisXTY4Av8ikqraqSKwXJQDM1RnSVOCdzJ2KUsXAdCTFVKERj5oyAnZam8IkmNWVF5bkhnhDDx582MN+XE1MRldzovjxosIS7m80E/OdsfIgqTQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Q3hkaEVaXm3fJFES2T2UeGzA4EwYQ/fvjEDbavwDmdc=; b=kfrF8bSMNdRe1Ah3fLH9bcDovMhGlDU45ofDKzhLKzouk+cL4o/sPdHE6wAEgnKNjmBSNn+NpWoms4nXhYOVgTZE4OUJaDCJFLWYRIMFYJ6iutAcPdvAAv1MqE/Wj1f9t15j8hsWFLppFO0hM7e+jWYwDtZps6Rra3z3cgj6S3U= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (20.179.18.151) by AM6PR08MB4039.eurprd08.prod.outlook.com (20.179.0.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18; Wed, 27 Nov 2019 16:59:28 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4%7]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 16:59:28 +0000 From: Thomas Fossati To: Henk Birkholz , Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [sacm] [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAOFHbeRQea3TEO+3tpXPiFPYKeWUfEAgAfW1QCAAONGgIAAO/qA Date: Wed, 27 Nov 2019 16:59:28 +0000 Message-ID: <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; x-originating-ip: [217.140.106.50] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 3ae72324-d335-4b3c-6432-08d7735b2f8f X-MS-TrafficTypeDiagnostic: AM6PR08MB4039:|AM6PR08MB4039:|VI1PR08MB3037: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:758;OLM:758; x-forefront-prvs: 023495660C X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(396003)(136003)(39860400002)(366004)(376002)(346002)(51444003)(199004)(189003)(51914003)(4326008)(58126008)(256004)(186003)(2616005)(11346002)(446003)(478600001)(71200400001)(71190400001)(36756003)(2906002)(25786009)(66476007)(81156014)(66946007)(64756008)(66556008)(8676002)(66446008)(7736002)(5660300002)(305945005)(8936002)(91956017)(76116006)(86362001)(33656002)(81166006)(316002)(6512007)(53546011)(6506007)(6246003)(26005)(102836004)(229853002)(66066001)(6436002)(14454004)(2501003)(2201001)(6486002)(76176011)(99286004)(3846002)(561944003)(110136005)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB4039; H:AM6PR08MB4231.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: gT3gG4wBKgCzuShrzdr7G+tPtdXmktR9b4nspFvWOYtnR0pjMUJOyL1LUUx2uAu1U1qf04rWpL3J+FEDc57CN5rc8DPwglVB5kSxmkwndjKwo7HozVgQlEzO35PUg/ZFGhI0LvWZDpohWIiEwiJB0lUrT5fOm0GLacN7txyaWwRXXgPvAHX067mJKYNr1uYwBDQg7K4Bw1ODU8eRwg6gjDxXr296+tQBoDPj64Fd4iIEVPkFlGBlYsfqUkmbXhsI+WxT3P2KhidabjqXatnMnwDW+66j0S65HYKBS0u3L+5AIe249b7Ko7892QnUXnqXC1t37Rd1zmY2CqP90mERX16Vv5Yss84CTnD2qwqfqsoQEPybbaJY05yAxzaUmU+e1q0olkVE1ufPZdlrSkL29NE1aXhogeopSAAEOlxJNCCkZqVtZgdkfxNsotZSxIjS Content-Type: text/plain; charset="utf-8" Content-ID: <6CA036DD64B1EC40B2EA981D4F8EB496@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4039 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT059.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(346002)(39860400002)(136003)(376002)(396003)(51444003)(51914003)(199004)(189003)(40434004)(14444005)(305945005)(33656002)(110136005)(2906002)(6486002)(6512007)(58126008)(336012)(81156014)(8676002)(436003)(186003)(14454004)(25786009)(4326008)(450100002)(86362001)(478600001)(22756006)(81166006)(26005)(106002)(6246003)(561944003)(7736002)(2501003)(8936002)(356004)(229853002)(2201001)(36756003)(99286004)(102836004)(70206006)(76176011)(23676004)(316002)(2616005)(47776003)(11346002)(76130400001)(26826003)(5660300002)(5024004)(446003)(66066001)(3846002)(2486003)(6506007)(50466002)(53546011)(6116002)(70586007); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB3037; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: f1340cb7-a9ae-4b4e-36a4-08d7735b2a22 X-Forefront-PRVS: 023495660C X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: i4Kr+uBiLMCF9KQhxiyehc2FT09ylyZMJLZ3c/xorRsudu6pRlxvEeVseiqT8lJt9wEDwMsmHye3t+EJKvwXTD/nN1Cn9CSQkw812a+KuPRD4pGGWEVOC0ZIT/cBbrzG0v0j+LOLsM25lSwLxfyaIOoHVUDvpTy2YW7+UiqLo0hDyQN7kk6mFSIIx+OjTZmyl7UikbkFAOCcEdG7uJt7frrZEOmhlj/MiOAU3O19aNzH9pVNQ8rCZFQz/NFW/l5YdS8E3r+bKAfWpnskn5IChz5q4R82MBWSWq9V4jTkUlmg1vwVCzvL+0LnlyLEQDidEbirMaLVuYa04B03jzL30vVKxTnuCBR4jJ0uK7vVFFAXYeBdr0jZy+kj8WEEho5chReR/JzTLTRHy/YXgygwRbb95A4VPZBipOZ5XrGOLayPX2E2pAOig2qBgooDB2bi X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Nov 2019 16:59:37.2608 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 3ae72324-d335-4b3c-6432-08d7735b2f8f X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3037 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 16:59:47 -0000 SGkgSGVuaw0KDQpUaGFua3MgdmVyeSBtdWNoIGZvciB5b3VyIGlucHV0Lg0KDQpPbiAyNy8xMS8y MDE5LCAxMzoyNCwgIkhlbmsgQmlya2hvbHoiIDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVy LmRlPiB3cm90ZToNCj4geWVzIHRoZXJlIGFyZSB3YXlzIHRvIGRlYWwgd2l0aCBmaXJtd2FyZSBp biBTV0lELCBuYW1lbHkgdGhlIHJlc291cmNlDQo+IHR5cGUgKGluZGV4IDE5KSBpbiB0aGUgc2V0 IG9mIFNXSUQgcmVzb3VyY2UtY29sbGVjdGlvbiBbMV0gaW4NCj4gY29tYmluYXRpb24gd2l0aCB0 aGUgcmVsIHR5cGUgKGluZGV4IDQwKSBlbnRyaWVzLg0KPg0KPiBUaGlzIHdheSwgeW91IHdvdWxk IG5vdCBoYXZlIHRvIHVzZSBmaWxlc3lzdGVtLWl0ZW1zLCBidXQgdGhpcyB3YXkgaXMNCj4gYWxz byBhIGJpdCBjbHVua3kgYW5kIHdvdWxkIHJlcXVpcmUgYW4gaW5mb3JtYXRpb25hbCBndWlkYW5j ZSBkb2N1bWVudA0KPiBkZXNjcmliaW5nIGhvdyB0byB1c2UgKlNXSUQgZm9yIHRoYXQuDQoNClRo YXQncyBpbnRlcmVzdGluZyBiZWNhdXNlIGluaXRpYWxseSBJIGFsc28gdHJpZWQgdG8gdXNlIHRo ZSByZXNvdXJjZQ0KdHlwZSAtLSB3aGljaCBsb29rZWQgbGlrZSB0aGUgbGVzcyB3cm9uZyBhbW9u ZyBhbGwgdGhlIGF2YWlsYWJsZSB0eXBlcw0KaW4gdGhlIHJlc291cmNlIGNvbGxlY3Rpb24uICBI b3dldmVyIGl0IHdhc24ndCBjbGVhciB0byBtZSBob3cgdG8NCmFzc29jaWF0ZSBhIGNoZWNrc3Vt IHRvIHRoZSBjb21wb25lbnQsIGhlbmNlIEkgd2VudCBmb3IgdGhlDQpmaWxlc3lzdGVtLWl0ZW0u ICBNYXliZSBJIHdhcyBqdXN0IGxvb2tpbmcgaW4gdGhlIHdyb25nIHBsYWNlIG9yIG1heWJlLA0K YXMgeW91IHNheSwgdGhlcmUncyBhIG1hZ2ljIGZpcm13YXJlIHJlY2lwZSB0aGF0J3Mgd29ydGgg ZG9jdW1lbnRpbmcNCmhlcmUuDQoNCj4gVGhlcmUgYXJlIHNvbWUgcXVpdGUgc21hcnQgd2F5cyB0 byBkbyB0aGF0IGFjdHVhbGx5IHdpdGgNCj4gZmlsZXN5c3RlbS1pdGVtcywgYnV0IEkgdGhpbmsg aXQgaXMgbW9yZSBmZWFzaWJsZSB0byB1c2UgYSBTVUlUDQo+IG1hbmlmZXN0IGhlcmUgdG8gZGVz Y3JpYmUgZXZlcnl0aGluZyByZWxldmFudCB0byB0aGUgImZpcm13YXJlIHRoaW5neSINCj4gYW5k IHRoZW4gcHV0IGEgQ29TV0lEIGludG8gdGhlIFNVSVQgbWFuaWZlc3QncyBvdXRlciB3cmFwcGVy IFsyXSB0aGF0DQo+IHRoZW4gcmVwcmVzZW50cyB0aGUgcmVzdCBvZiB0aGUgc2VtYW50aWNzIHRo YXQgaXMgbm90IGNvdmVyZWQgYnkgdGhlDQo+IG1hbmlmZXN0IGJ1dCBieSBDb1NXSUQuIFRoaXMg bWV0aG9kIGlzIGZpbmUsIGFzIHRoZSBDT1NFIGVudmVsb3BlDQo+IGFyb3VuZCB0aGUgRUFUIHdp bGwgbWFrZSB0ZW1wZXJpbmcgd2l0aCB0aGUgb3V0ZXIgd3JhcHBlciBvZiB0aGUgU1VJVA0KPiBN YW5pZmVzdCBldmlkZW50Lg0KPg0KPiBJIHRoaW5rIHRoYXQgaXMgYSBtb3JlIGVsZWdhbnQgd2F5 IHRvIGRvIGl0LCBhY3R1YWxseSwgYW5kIHRoZSByZWFzb24NCj4gd2h5IGlzc3VlICM0NiBpbiB0 aGUgRUFUIHJlcG8gcHJvcG9zZXMgdG8gZGVmaW5lIGEgQ2xhaW0gdG8gaW5jbHVkZSBhDQo+IFNV SVQgTWFuaWZlc3QgaW4gYW4gRUFULCB0b28uDQoNCkknbGwgbG9vayBpbnRvIHRoaXMsIHRoYW5r cyBmb3IgdGhlIHBvaW50ZXIuDQoNClN0ZXBwaW5nIGJhY2sgZm9yIGEgc2Vjb25kIGFuZCBsb29r aW5nIGZyb20gdGhlIHBlcnNwZWN0aXZlIG9mIG15DQppbW1lZGlhdGUgcmVxdWlyZW1lbnQgKGku ZS4sICJJcyBpdCBwb3NzaWJsZSB0byB0cmFuc2xhdGUgUFNBJ3Mgc29mdHdhcmUNCmNvbXBvbmVu dCBjbGFpbSB1c2luZyBwdXJlbHkgRUFUIGNvbnN0cnVjdHM/IiksIGlkZWFsbHkgSSdkIGxpa2Ug dG8gaGF2ZQ0Kc29tZXRoaW5nIHRoYXQgaXMgZXhwcmVzc2l2ZSBlbm91Z2ggdG8gZW5jb2RlIG15 IHNlbWFudGljcyAoaS5lLjogU1cNCmNvbXBvbmVudCBuYW1lLCB2ZXJzaW9uLCBzaWduZXIgYW5k IG1lYXN1cmVtZW50KSB3aXRob3V0IGJlaW5nIG92ZXJseQ0KY29tcGxleC4NCg0KU28gbXkga25l ZS1qZXJrIHJlYWN0aW9uIGlzIGlmIHRoYXQgaW1wbGllcyBwdWxsaW5nIGEgZGVwZW5kZW5jeSBv bg0KU1VJVCBtYXliZSBpdCdzIGEgYml0IHRvbyBtdWNoPyAgQnV0IEkgY29uZmVzcyBoYXZlbid0 IHlldCBsb29rZWQgYXQNCnRoZSBkZXRhaWxzIG9mIHlvdXIgcHJvcG9zYWwgbm9yIEkgY2FuIGNs YWltIGVub3VnaCBTVUlULWZvbyB0byByZWFsbHkNCmdyb2sgdGhlIGNvbXBsZXhpdHkgaW52b2x2 ZWQuICBBcyBzYWlkLCBJJ2xsIGhhdmUgYSBsb29rIHNob3J0bHkuDQoNCmNoZWVycyENCg0KSU1Q T1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2ht ZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg aW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5m b3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Wed Nov 27 09:13:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11B68120A4F; Wed, 27 Nov 2019 09:13:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=7gqSv9fv; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=RXk3wlyp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rvlZ2FK4xo8W; Wed, 27 Nov 2019 09:13:34 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-am5eur03on0631.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe08::631]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CFE2120809; Wed, 27 Nov 2019 09:13:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aqA2/yE21Bf5R6KR/eu64RAlXnakBgeiZCe+DBq1V70=; b=7gqSv9fvSqS34DwqlyI/52oMvQi2QIpiwwB+0rEWrk9GaDEoGbxUqi9/7UAqeSik4OS1zpqCghus6Ewxu+LZykZXSsOjorsmTJHef+34k2f3p5DC+IFAez+8QaCy72IKdrK3n5XlX1DWuRYsUvDeXU5tK7yhEqct7cfCN5phaow= Received: from VI1PR0801CA0088.eurprd08.prod.outlook.com (2603:10a6:800:7d::32) by VI1PR08MB5488.eurprd08.prod.outlook.com (2603:10a6:803:137::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Wed, 27 Nov 2019 17:13:31 +0000 Received: from AM5EUR03FT024.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e08::200) by VI1PR0801CA0088.outlook.office365.com (2603:10a6:800:7d::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Wed, 27 Nov 2019 17:13:31 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT024.mail.protection.outlook.com (10.152.16.175) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17 via Frontend Transport; Wed, 27 Nov 2019 17:13:31 +0000 Received: ("Tessian outbound d825562be5de:v37"); Wed, 27 Nov 2019 17:13:30 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 6ac5ad6db8a95147 X-CR-MTA-TID: 64aa7808 Received: from e2e40245f3ba.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 3A60E691-8587-440C-829A-ACDE8011CF5C.1; Wed, 27 Nov 2019 17:13:24 +0000 Received: from FRA01-MR2-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id e2e40245f3ba.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 27 Nov 2019 17:13:24 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=V71AnhHp2mpndwY+Mx3h5H+hh82NVVmsWSSZzsJmIxT6N40944j4HmNZopnNxfu8eHdfJaTRrgkfUT0FYevtYtf2hyVEgAvsP2FsggNTYAsuDCnNqvpjdiNwQjJntr1Z0GVdD68IW8e6zdrxFaAXVKSBKCTL8aGte+SBpwQLfWiRc3DlDCaPvbA243qLzlncL+tdLyaylLNecnTw+OjJI8k9hiw4fGpgDuTxsiQSKzlx2MVTfljrm1ZOeKl6AxGkLIzMREpKhxktFcAux9kkOL8uOM4r5j5uPlEQhwwHryT5xxtMG5uK6HJirRGL/eL4oEvbTrl/U+f4xCG3If8grQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yQ3hZ/3CL24NTxWSjbjt8hg+f5aWsJkxTW6GkR5ICJA=; b=TLUm8T7kX2iC2RiYywZhkoVID3D7I0q6g1is9plaKJDdeM62/UwVGNCET+FIPH+FgiopADlfsS7wRhxd6nBZPsKSgiH04IA4/0VRuKPZv92c/jLWBnCm2lu4VCsAb8Egj1n1sFev95Y7dhMFL+bAW1hAx6o8detsmv2wrhKhXIomivDfApG6SpoxiIdb/W/BLV2doXbSHtZMgAWo94vrflPDQKvXmU2/E5q/wLeIoEupZOfx0SY2XW8rWywZxmTMr1Ts7Q4/k6nyumNhcJPlmWR5xbPPmgWLqfDxLMPsVAoYSt55oJz95Q+3hn7TRcOy5Pb9VM5U5auzSitiC/D/Kw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yQ3hZ/3CL24NTxWSjbjt8hg+f5aWsJkxTW6GkR5ICJA=; b=RXk3wlypip92XnLrXOoKtMZ+3OUdr35Tt4mCvgvF7Ubi5uHcMy+2pQyk90u1ML/XlPpETH/Pq70j8gcPnexNoYFY/Z5jh4M+K/CcooNtALhrVq80Rc0iZgPWEP1bqipxrGvS27w971jp12w9BIyfltBG06I0hTr8D0F1wnjTuE8= Received: from PR2PR08MB4811.eurprd08.prod.outlook.com (52.133.109.146) by PR2PR08MB4860.eurprd08.prod.outlook.com (52.133.109.75) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.17; Wed, 27 Nov 2019 17:13:23 +0000 Received: from PR2PR08MB4811.eurprd08.prod.outlook.com ([fe80::f0c1:35ae:f450:eaac]) by PR2PR08MB4811.eurprd08.prod.outlook.com ([fe80::f0c1:35ae:f450:eaac%6]) with mapi id 15.20.2495.014; Wed, 27 Nov 2019 17:13:22 +0000 From: Adrian Shaw To: Thomas Fossati CC: Henk Birkholz , Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" Thread-Topic: [Rats] [sacm] CoSWID and EAT and CWT Thread-Index: AQHVpSYV+X7HT1pqSkuRj6hkFbWi5qefPcIAgAAD4wA= Date: Wed, 27 Nov 2019 17:13:22 +0000 Message-ID: References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> In-Reply-To: <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Adrian.Shaw@arm.com; x-originating-ip: [217.140.106.53] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 43c02920-e748-41c0-ed36-08d7735d208e X-MS-TrafficTypeDiagnostic: PR2PR08MB4860:|PR2PR08MB4860:|VI1PR08MB5488: X-MS-Exchange-PUrlCount: 1 x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:2201;OLM:2201; x-forefront-prvs: 023495660C X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(376002)(366004)(136003)(346002)(39860400002)(396003)(40434004)(199004)(189003)(51444003)(51914003)(229853002)(76176011)(66476007)(66556008)(25786009)(478600001)(5660300002)(71190400001)(71200400001)(305945005)(966005)(36756003)(14454004)(2906002)(316002)(6862004)(7736002)(8676002)(256004)(86362001)(14444005)(6306002)(81166006)(81156014)(6246003)(3846002)(4326008)(99286004)(54906003)(37006003)(91956017)(26005)(6486002)(6436002)(186003)(561944003)(102836004)(76116006)(11346002)(2616005)(446003)(6506007)(66066001)(6636002)(53546011)(8936002)(64756008)(66446008)(5024004)(33656002)(66946007)(6116002)(6512007); DIR:OUT; SFP:1101; SCL:1; SRVR:PR2PR08MB4860; H:PR2PR08MB4811.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 4mmGI01thhOOH6vAcX0xwpl2Cmq76iYi6a3guHOQWPGeCswCN3lXZCBedWtUU2l8GHOQGXv6wsEnLBdS0DBeLZymkpCH4PwCcJH8QtYVvWAEgfVFUmv8BSy3R4MzQuoJdA5M3dJS2UGMqefdoAUULsiR4z9qlPyaJYrc5spLYk1zB9txAiWsK1c6kTTKAP6lsGuwK1KRNY0ZddnY/CLP6Ao4oCBDu4ftvVliK8Hv7YPDPV39aOUY2Kb1ToxNR6rwk2u9S2ypFtNoPz7A5PqDUjUb6mKM0On8QLnvrZ27qEvQnPArZASeWnkJNKYySRPHoR42Y7b9GuxqbncIyJ/k99yHfqScBKgAxMEdqdn2Cwy3aCfHktkjh29sYozV/2X1hqvYJ+kWo5LRdcAvhGLZWj0vD/Mj653lze4exkLP7lEhHIVd3sr+cKGtlIZSJqCKHVxZ5WjByZGX0GiVgEZmNA7UJw6wEoUIzxOdV7t4V2U= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR2PR08MB4860 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Adrian.Shaw@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT024.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(396003)(136003)(376002)(346002)(51914003)(189003)(199004)(40434004)(51444003)(478600001)(6636002)(54906003)(26826003)(102836004)(76176011)(6506007)(14444005)(66066001)(446003)(25786009)(99286004)(2486003)(5660300002)(11346002)(2616005)(23676004)(336012)(966005)(14454004)(6486002)(2906002)(6306002)(436003)(6512007)(6116002)(186003)(229853002)(3846002)(53546011)(50466002)(47776003)(76130400001)(6862004)(8936002)(70206006)(33656002)(70586007)(4326008)(316002)(36756003)(450100002)(26005)(86362001)(22756006)(8676002)(36906005)(356004)(5024004)(305945005)(7736002)(106002)(6246003)(37006003)(81156014)(81166006)(561944003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB5488; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; MX:1; A:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: d15a3089-363b-4736-2b15-08d7735d1b96 X-Forefront-PRVS: 023495660C X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: OvBFxmm4SYhEE6SutMWeC+0Oy3ZbSXcPhdfa+PiZC4UbM8Mupc0O3G41PR06e8cXpo6ssYjsCAdFLa7vlWgUygpXfDUX3surjUgCUD25NFRUyGeYhk/DwP6j8by89EbLZn3lO08GiNH/YRuJDcrO3+1npxOwvKCPhTsdgrsuaByCk2S+PIJrcXU3spo+tPIVi/PWwHkpUZiukFBlLagntpHaN8tR7lHEDlYziajxmTIYG07K5WLGirsW46SbE+0p6KYvNGGTkcRPoNhUKfxsGT1Xc0cPqRjt7zVV6ORpm2L49bzRJx+MAhXpX+F3pl1OlUBvlER8fO306AJBPSUPTg28ksKLEJBIrqvDf20ECNNUbvTzFite9nwNYzRYMUq6YSc+QlH8hacN/PF8eblQCOPDha76xtvTiU1RPOHMsakrpbtpi1KDnyGRZghYlmXBWUmeZxV9MEmKa0X7UbAHd4tqmNXLmbeXLp9CHydJI2I= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Nov 2019 17:13:31.0804 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 43c02920-e748-41c0-ed36-08d7735d208e X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB5488 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 17:13:38 -0000 V2hpbGUgdGhlcmUgaXMgc29tZSBzeW5lcmd5IHdpdGggdGhlIFNVSVQgZGVmaW5pdGlvbiwgSeKA mW0gdW5jb252aW5jZWQgdGhhdCBpdCBzaG91bGQgYmUgdGhlIHdheSB0byBleHByZXNzIGEgc29m dHdhcmUgY29tcG9uZW50IG1ldGFkYXRhLiBGaXJzdGx5LCB0aGVyZSBhcmUgbGVnYWN5IHN5c3Rl bXMgd2l0aG91dCBTVUlUIHRoYXQgd291bGQgd2FudCB0byB1c2UgRUFULCBhbmQgc3VjaCBhIGRl cGVuZGVuY3kgd291bGQgbWFrZSBpdCBoYXJkIGZvciBpbmNyZW1lbnRhbCBhZG9wdGlvbi4gU2Vj b25kbHksIG5vdCBhbGwgdGhlIGRhdGEgZnJvbSB0aGUgU1VJVCBtYW5pZmVzdCBpcyBuZWVkZWQg Zm9yIHRoaXMgY2xhaW0uDQoNCkFkcmlhbg0KDQo+IE9uIDI3IE5vdiAyMDE5LCBhdCAxNjo1OSwg VGhvbWFzIEZvc3NhdGkgPFRob21hcy5Gb3NzYXRpQGFybS5jb20+IHdyb3RlOg0KPg0KPiBIaSBI ZW5rDQo+DQo+IFRoYW5rcyB2ZXJ5IG11Y2ggZm9yIHlvdXIgaW5wdXQuDQo+DQo+IE9uIDI3LzEx LzIwMTksIDEzOjI0LCAiSGVuayBCaXJraG9seiIgPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9m ZXIuZGU+IHdyb3RlOg0KPj4geWVzIHRoZXJlIGFyZSB3YXlzIHRvIGRlYWwgd2l0aCBmaXJtd2Fy ZSBpbiBTV0lELCBuYW1lbHkgdGhlIHJlc291cmNlDQo+PiB0eXBlIChpbmRleCAxOSkgaW4gdGhl IHNldCBvZiBTV0lEIHJlc291cmNlLWNvbGxlY3Rpb24gWzFdIGluDQo+PiBjb21iaW5hdGlvbiB3 aXRoIHRoZSByZWwgdHlwZSAoaW5kZXggNDApIGVudHJpZXMuDQo+Pg0KPj4gVGhpcyB3YXksIHlv dSB3b3VsZCBub3QgaGF2ZSB0byB1c2UgZmlsZXN5c3RlbS1pdGVtcywgYnV0IHRoaXMgd2F5IGlz DQo+PiBhbHNvIGEgYml0IGNsdW5reSBhbmQgd291bGQgcmVxdWlyZSBhbiBpbmZvcm1hdGlvbmFs IGd1aWRhbmNlIGRvY3VtZW50DQo+PiBkZXNjcmliaW5nIGhvdyB0byB1c2UgKlNXSUQgZm9yIHRo YXQuDQo+DQo+IFRoYXQncyBpbnRlcmVzdGluZyBiZWNhdXNlIGluaXRpYWxseSBJIGFsc28gdHJp ZWQgdG8gdXNlIHRoZSByZXNvdXJjZQ0KPiB0eXBlIC0tIHdoaWNoIGxvb2tlZCBsaWtlIHRoZSBs ZXNzIHdyb25nIGFtb25nIGFsbCB0aGUgYXZhaWxhYmxlIHR5cGVzDQo+IGluIHRoZSByZXNvdXJj ZSBjb2xsZWN0aW9uLiAgSG93ZXZlciBpdCB3YXNuJ3QgY2xlYXIgdG8gbWUgaG93IHRvDQo+IGFz c29jaWF0ZSBhIGNoZWNrc3VtIHRvIHRoZSBjb21wb25lbnQsIGhlbmNlIEkgd2VudCBmb3IgdGhl DQo+IGZpbGVzeXN0ZW0taXRlbS4gIE1heWJlIEkgd2FzIGp1c3QgbG9va2luZyBpbiB0aGUgd3Jv bmcgcGxhY2Ugb3IgbWF5YmUsDQo+IGFzIHlvdSBzYXksIHRoZXJlJ3MgYSBtYWdpYyBmaXJtd2Fy ZSByZWNpcGUgdGhhdCdzIHdvcnRoIGRvY3VtZW50aW5nDQo+IGhlcmUuDQo+DQo+PiBUaGVyZSBh cmUgc29tZSBxdWl0ZSBzbWFydCB3YXlzIHRvIGRvIHRoYXQgYWN0dWFsbHkgd2l0aA0KPj4gZmls ZXN5c3RlbS1pdGVtcywgYnV0IEkgdGhpbmsgaXQgaXMgbW9yZSBmZWFzaWJsZSB0byB1c2UgYSBT VUlUDQo+PiBtYW5pZmVzdCBoZXJlIHRvIGRlc2NyaWJlIGV2ZXJ5dGhpbmcgcmVsZXZhbnQgdG8g dGhlICJmaXJtd2FyZSB0aGluZ3kiDQo+PiBhbmQgdGhlbiBwdXQgYSBDb1NXSUQgaW50byB0aGUg U1VJVCBtYW5pZmVzdCdzIG91dGVyIHdyYXBwZXIgWzJdIHRoYXQNCj4+IHRoZW4gcmVwcmVzZW50 cyB0aGUgcmVzdCBvZiB0aGUgc2VtYW50aWNzIHRoYXQgaXMgbm90IGNvdmVyZWQgYnkgdGhlDQo+ PiBtYW5pZmVzdCBidXQgYnkgQ29TV0lELiBUaGlzIG1ldGhvZCBpcyBmaW5lLCBhcyB0aGUgQ09T RSBlbnZlbG9wZQ0KPj4gYXJvdW5kIHRoZSBFQVQgd2lsbCBtYWtlIHRlbXBlcmluZyB3aXRoIHRo ZSBvdXRlciB3cmFwcGVyIG9mIHRoZSBTVUlUDQo+PiBNYW5pZmVzdCBldmlkZW50Lg0KPj4NCj4+ IEkgdGhpbmsgdGhhdCBpcyBhIG1vcmUgZWxlZ2FudCB3YXkgdG8gZG8gaXQsIGFjdHVhbGx5LCBh bmQgdGhlIHJlYXNvbg0KPj4gd2h5IGlzc3VlICM0NiBpbiB0aGUgRUFUIHJlcG8gcHJvcG9zZXMg dG8gZGVmaW5lIGEgQ2xhaW0gdG8gaW5jbHVkZSBhDQo+PiBTVUlUIE1hbmlmZXN0IGluIGFuIEVB VCwgdG9vLg0KPg0KPiBJJ2xsIGxvb2sgaW50byB0aGlzLCB0aGFua3MgZm9yIHRoZSBwb2ludGVy Lg0KPg0KPiBTdGVwcGluZyBiYWNrIGZvciBhIHNlY29uZCBhbmQgbG9va2luZyBmcm9tIHRoZSBw ZXJzcGVjdGl2ZSBvZiBteQ0KPiBpbW1lZGlhdGUgcmVxdWlyZW1lbnQgKGkuZS4sICJJcyBpdCBw b3NzaWJsZSB0byB0cmFuc2xhdGUgUFNBJ3Mgc29mdHdhcmUNCj4gY29tcG9uZW50IGNsYWltIHVz aW5nIHB1cmVseSBFQVQgY29uc3RydWN0cz8iKSwgaWRlYWxseSBJJ2QgbGlrZSB0byBoYXZlDQo+ IHNvbWV0aGluZyB0aGF0IGlzIGV4cHJlc3NpdmUgZW5vdWdoIHRvIGVuY29kZSBteSBzZW1hbnRp Y3MgKGkuZS46IFNXDQo+IGNvbXBvbmVudCBuYW1lLCB2ZXJzaW9uLCBzaWduZXIgYW5kIG1lYXN1 cmVtZW50KSB3aXRob3V0IGJlaW5nIG92ZXJseQ0KPiBjb21wbGV4Lg0KPg0KPiBTbyBteSBrbmVl LWplcmsgcmVhY3Rpb24gaXMgaWYgdGhhdCBpbXBsaWVzIHB1bGxpbmcgYSBkZXBlbmRlbmN5IG9u DQo+IFNVSVQgbWF5YmUgaXQncyBhIGJpdCB0b28gbXVjaD8gIEJ1dCBJIGNvbmZlc3MgaGF2ZW4n dCB5ZXQgbG9va2VkIGF0DQo+IHRoZSBkZXRhaWxzIG9mIHlvdXIgcHJvcG9zYWwgbm9yIEkgY2Fu IGNsYWltIGVub3VnaCBTVUlULWZvbyB0byByZWFsbHkNCj4gZ3JvayB0aGUgY29tcGxleGl0eSBp bnZvbHZlZC4gIEFzIHNhaWQsIEknbGwgaGF2ZSBhIGxvb2sgc2hvcnRseS4NCj4NCj4gY2hlZXJz IQ0KPg0KPiBJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQg YW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVn ZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkg dGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0 byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBj b3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFJBVFMgbWFpbGluZyBs aXN0DQo+IFJBVFNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9yYXRzDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Wed Nov 27 09:19:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04321120A4F; Wed, 27 Nov 2019 09:18:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C9qxI9aol5hh; Wed, 27 Nov 2019 09:18:52 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BDAA120979; Wed, 27 Nov 2019 09:18:51 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xARHIlW0018081 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 27 Nov 2019 18:18:48 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 27 Nov 2019 18:18:42 +0100 To: Thomas Fossati , Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> From: Henk Birkholz Message-ID: Date: Wed, 27 Nov 2019 18:18:41 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 17:18:55 -0000 Hello Thomas, we have a coswid extension in the queue that allows for the inclusion of hash-entries to very kind of resource-collection type (and also 12-14 additional indexes, I think, that allow for the creation of Reference Integrity Manifests, including hashes for running processes). But this will not be submitted this year anymore, I am afraid. Very early next year! You were not looking at the wrong place, it simply is not there yet, because the inclusion of hash-entries is done via "any attributes" in ISO XML SWIDs and NISTIR 8060 is focusing on files (not filesystem-items, which would include directories). But we are very aware of that and will remediate that very soon (aka the CDDL is already written and passed multi-peer internal review). It will be less of a "magic firmware recipe", though. If there is interest, we can increase the detail about how to reference and locate SUIT manifest content (the CDDL unpack operator can help with that, therefore retaining the semantic relationship with the SUIT manifest however you want to use it). Viele Grüße, Henk On 27.11.19 17:59, Thomas Fossati wrote: > Hi Henk > > Thanks very much for your input. > > On 27/11/2019, 13:24, "Henk Birkholz" wrote: >> yes there are ways to deal with firmware in SWID, namely the resource >> type (index 19) in the set of SWID resource-collection [1] in >> combination with the rel type (index 40) entries. >> >> This way, you would not have to use filesystem-items, but this way is >> also a bit clunky and would require an informational guidance document >> describing how to use *SWID for that. > > That's interesting because initially I also tried to use the resource > type -- which looked like the less wrong among all the available types > in the resource collection. However it wasn't clear to me how to > associate a checksum to the component, hence I went for the > filesystem-item. Maybe I was just looking in the wrong place or maybe, > as you say, there's a magic firmware recipe that's worth documenting > here. > >> There are some quite smart ways to do that actually with >> filesystem-items, but I think it is more feasible to use a SUIT >> manifest here to describe everything relevant to the "firmware thingy" >> and then put a CoSWID into the SUIT manifest's outer wrapper [2] that >> then represents the rest of the semantics that is not covered by the >> manifest but by CoSWID. This method is fine, as the COSE envelope >> around the EAT will make tempering with the outer wrapper of the SUIT >> Manifest evident. >> >> I think that is a more elegant way to do it, actually, and the reason >> why issue #46 in the EAT repo proposes to define a Claim to include a >> SUIT Manifest in an EAT, too. > > I'll look into this, thanks for the pointer. > > Stepping back for a second and looking from the perspective of my > immediate requirement (i.e., "Is it possible to translate PSA's software > component claim using purely EAT constructs?"), ideally I'd like to have > something that is expressive enough to encode my semantics (i.e.: SW > component name, version, signer and measurement) without being overly > complex. Your examples look very close to the CoSWID as RIM, maybe the gaps to fill here in order to represent "filesystem-less" firmware is in fact relatively small. We will submit the CoSWID RIM part in a few weeks and will get some feedback on that (e.g. hash-entries for resources). > > So my knee-jerk reaction is if that implies pulling a dependency on > SUIT maybe it's a bit too much? But I confess haven't yet looked at > the details of your proposal nor I can claim enough SUIT-foo to really > grok the complexity involved. As said, I'll have a look shortly. The SUIT manifest can look very complex (CDDL-wise), but please keep in mind that most members (content items) are optional, so an actual instance of SUIT manifest can be quite... concise :) While I see the point in doing it "all in one thing" the SUIT manifest is an excellent representation for what is needed in updating small and big or cloudy things and redundant semantics in data formats often create corresponding friction in semantic interoperability later on (iotdir hat on opinion). So my first reaction is to combine the functionality of both and not to recreate the functionality redundantly on each side. > > cheers! > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. Viele Grüße, Henk From nobody Wed Nov 27 09:27:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 164701209C6; Wed, 27 Nov 2019 09:27:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kzpBWvCWLPvS; Wed, 27 Nov 2019 09:27:34 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B5A21209C2; Wed, 27 Nov 2019 09:27:32 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xARHRSjE018396 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 27 Nov 2019 18:27:29 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Wed, 27 Nov 2019 18:27:23 +0100 To: Adrian Shaw , Thomas Fossati CC: Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> From: Henk Birkholz Message-ID: <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> Date: Wed, 27 Nov 2019 18:27:21 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 17:27:37 -0000 Hi Adrian, to your first point: I am not sure what legacy systems that would be able to create/process EAT would not be able to process a SUIT manifest. Could you elaborate on that? I'd maybe not call that a dependency, but rather synergy in data models, but I am under the suspicion that I simply don't understand the scenario that you are talking about. To your second point, as the SUIT manifest CDDL specification allows for a lot of optional types or members, a small paragraph of which ones to use when (like NISTIR 8060 does it for SWID, only on a very much larger level) could address that? Then again, if there is enough interest to do a small subset of new firmware related CDDL content as highlighted by Thomas > ideally I'd like to have > something that is expressive enough to encode my semantics (i.e.: SW > component name, version, signer and measurement) without being overly > complex. we could add that to the upcoming CoSWID extension. Again, I would like to have these additional items as close as possible to the SUIT manifest semantically, so there will never be any kind of confusion what each value is intended to express and interoperability is "a piece of cake". And with respect to firmware semantics, SUIT has the lead here, I think Viele Grüße, Henk On 27.11.19 18:13, Adrian Shaw wrote: > While there is some synergy with the SUIT definition, I’m unconvinced that it should be the way to express a software component metadata. Firstly, there are legacy systems without SUIT that would want to use EAT, and such a dependency would make it hard for incremental adoption. Secondly, not all the data from the SUIT manifest is needed for this claim. > > Adrian > >> On 27 Nov 2019, at 16:59, Thomas Fossati wrote: >> >> Hi Henk >> >> Thanks very much for your input. >> >> On 27/11/2019, 13:24, "Henk Birkholz" wrote: >>> yes there are ways to deal with firmware in SWID, namely the resource >>> type (index 19) in the set of SWID resource-collection [1] in >>> combination with the rel type (index 40) entries. >>> >>> This way, you would not have to use filesystem-items, but this way is >>> also a bit clunky and would require an informational guidance document >>> describing how to use *SWID for that. >> >> That's interesting because initially I also tried to use the resource >> type -- which looked like the less wrong among all the available types >> in the resource collection. However it wasn't clear to me how to >> associate a checksum to the component, hence I went for the >> filesystem-item. Maybe I was just looking in the wrong place or maybe, >> as you say, there's a magic firmware recipe that's worth documenting >> here. >> >>> There are some quite smart ways to do that actually with >>> filesystem-items, but I think it is more feasible to use a SUIT >>> manifest here to describe everything relevant to the "firmware thingy" >>> and then put a CoSWID into the SUIT manifest's outer wrapper [2] that >>> then represents the rest of the semantics that is not covered by the >>> manifest but by CoSWID. This method is fine, as the COSE envelope >>> around the EAT will make tempering with the outer wrapper of the SUIT >>> Manifest evident. >>> >>> I think that is a more elegant way to do it, actually, and the reason >>> why issue #46 in the EAT repo proposes to define a Claim to include a >>> SUIT Manifest in an EAT, too. >> >> I'll look into this, thanks for the pointer. >> >> Stepping back for a second and looking from the perspective of my >> immediate requirement (i.e., "Is it possible to translate PSA's software >> component claim using purely EAT constructs?"), ideally I'd like to have >> something that is expressive enough to encode my semantics (i.e.: SW >> component name, version, signer and measurement) without being overly >> complex. >> >> So my knee-jerk reaction is if that implies pulling a dependency on >> SUIT maybe it's a bit too much? But I confess haven't yet looked at >> the details of your proposal nor I can claim enough SUIT-foo to really >> grok the complexity involved. As said, I'll have a look shortly. >> >> cheers! >> >> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > From nobody Wed Nov 27 09:50:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2612E1209AC; Wed, 27 Nov 2019 09:50:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8inI7EaP1iYu; Wed, 27 Nov 2019 09:50:52 -0800 (PST) Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com [IPv6:2607:f8b0:4864:20::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 22560120900; Wed, 27 Nov 2019 09:50:52 -0800 (PST) Received: by mail-oi1-x22d.google.com with SMTP id l136so5254973oig.1; Wed, 27 Nov 2019 09:50:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Tc4zO9sAI3bZiygULMkuiY+Es0RKl28yjYRyzLYqoGo=; b=LsJg8zVPv/w6tugFOJYXoYZSAd4VWGQUTAc64tbZ6aoH41lH3d0q+li9cGNPc4r/Sc 55Cmo9qYgeoIiTfcHiHdJ/YYaj0Ka3aefiQKmwLQcfnSJPZS1EFqfqlPUAsntEDSim5W ep0rK1SPVfpJi3R9WWiUgoABbVnT3BBOEYj/aH4bd2ao6ym2jy/Exh9KOJeuyoUXVTJM HvCrFC42F26RRMCu3ggwGvkOiCbmnkW1bFRm4tMQC1Mccik6+tq90GjJ85uDatpoXPRs FfgIix2NGh0wWghi8E22kGMniAnDL3mCkKd1L+U1BoxRxrRWd1+TrwH6Gv77DThh0Eeg RGFg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Tc4zO9sAI3bZiygULMkuiY+Es0RKl28yjYRyzLYqoGo=; b=cDIQlBxDKUuNIly9Qsyvsh5QCCS/9Axsiztqwhv9loMRkqdzB7+1KlC+3p444IOfI2 yf+8i5UjAoJPzzkNgVc6mqBcYsfPGGycjfgALkIpcu4xCGYWUIi0yFq2OvrkkB2ky5O2 D9UL2hbpsmRfL8ZhmFo7aCZoMdM6dVPQ82kCoW7wvtf83iO/ENnHa0DnesludM3KepJB 5I78+cz/vGC0bQJrPR3J2BWYNwO2vHXQDUJ4GYa7XWzI+wGHp58CCzhSn2Ci02OAF8FE +Lk9/cOBdBMl5Dk2Bhub8GFUo/Ic9cpw8YrymhVgIYFZbpKa7kMQSkNczewAjkDvgA9A PheQ== X-Gm-Message-State: APjAAAUPH2wiMvRg01ByXTdIc2Xn3NaU19VpOj0UqPqERoHXnNG6n37g FFTrbxFquu/seu64aFUULBmYaHFVcjwqiyaey50jC82V X-Google-Smtp-Source: APXvYqz+CdMUj6uz/IWS3WAFUtfLP3n9A8mAwP8CnD+oqwUk+HaHjyMSQBxbrBnJUzmFMIOAwU4raIJsg3p7uJt+13g= X-Received: by 2002:a05:6808:498:: with SMTP id z24mr5338124oid.114.1574877051470; Wed, 27 Nov 2019 09:50:51 -0800 (PST) MIME-Version: 1.0 References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> In-Reply-To: From: Kathleen Moriarty Date: Wed, 27 Nov 2019 12:50:15 -0500 Message-ID: To: Adrian Shaw Cc: Thomas Fossati , "rats@ietf.org" , Hannes Tschofenig , Henk Birkholz , Laurence Lundblade , "sacm@ietf.org" Content-Type: multipart/alternative; boundary="00000000000037c82b059857a3fb" Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 17:50:54 -0000 --00000000000037c82b059857a3fb Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, Nov 27, 2019 at 12:13 PM Adrian Shaw wrote: > While there is some synergy with the SUIT definition, I=E2=80=99m unconvi= nced that > it should be the way to express a software component metadata. Firstly, > there are legacy systems without SUIT that would want to use EAT, and suc= h > a dependency would make it hard for incremental adoption. Secondly, not a= ll > the data from the SUIT manifest is needed for this claim. > Agreed, there are other standards for software update that have been adopted and use alternate formats for manifests. I like the idea of SWID/CoSWID as well. Best regards, Kathleen > > Adrian > > > On 27 Nov 2019, at 16:59, Thomas Fossati wrote= : > > > > Hi Henk > > > > Thanks very much for your input. > > > > On 27/11/2019, 13:24, "Henk Birkholz" > wrote: > >> yes there are ways to deal with firmware in SWID, namely the resource > >> type (index 19) in the set of SWID resource-collection [1] in > >> combination with the rel type (index 40) entries. > >> > >> This way, you would not have to use filesystem-items, but this way is > >> also a bit clunky and would require an informational guidance document > >> describing how to use *SWID for that. > > > > That's interesting because initially I also tried to use the resource > > type -- which looked like the less wrong among all the available types > > in the resource collection. However it wasn't clear to me how to > > associate a checksum to the component, hence I went for the > > filesystem-item. Maybe I was just looking in the wrong place or maybe, > > as you say, there's a magic firmware recipe that's worth documenting > > here. > > > >> There are some quite smart ways to do that actually with > >> filesystem-items, but I think it is more feasible to use a SUIT > >> manifest here to describe everything relevant to the "firmware thingy" > >> and then put a CoSWID into the SUIT manifest's outer wrapper [2] that > >> then represents the rest of the semantics that is not covered by the > >> manifest but by CoSWID. This method is fine, as the COSE envelope > >> around the EAT will make tempering with the outer wrapper of the SUIT > >> Manifest evident. > >> > >> I think that is a more elegant way to do it, actually, and the reason > >> why issue #46 in the EAT repo proposes to define a Claim to include a > >> SUIT Manifest in an EAT, too. > > > > I'll look into this, thanks for the pointer. > > > > Stepping back for a second and looking from the perspective of my > > immediate requirement (i.e., "Is it possible to translate PSA's softwar= e > > component claim using purely EAT constructs?"), ideally I'd like to hav= e > > something that is expressive enough to encode my semantics (i.e.: SW > > component name, version, signer and measurement) without being overly > > complex. > > > > So my knee-jerk reaction is if that implies pulling a dependency on > > SUIT maybe it's a bit too much? But I confess haven't yet looked at > > the details of your proposal nor I can claim enough SUIT-foo to really > > grok the complexity involved. As said, I'll have a look shortly. > > > > cheers! > > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --=20 Best regards, Kathleen --00000000000037c82b059857a3fb Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Wed, Nov 27, 2019 at 12:13 PM Adri= an Shaw <Adrian.Shaw@arm.com&= gt; wrote:
While= there is some synergy with the SUIT definition, I=E2=80=99m unconvinced th= at it should be the way to express a software component metadata. Firstly, = there are legacy systems without SUIT that would want to use EAT, and such = a dependency would make it hard for incremental adoption. Secondly, not all= the data from the SUIT manifest is needed for this claim.
=

Agreed, there are other standards for software update t= hat have been adopted and use alternate formats for manifests.=C2=A0 I like= the idea of SWID/CoSWID as well.

Best regards,
Kathleen

Adrian

> On 27 Nov 2019, at 16:59, Thomas Fossati <Thomas.Fossati@arm.com> wrote: >
> Hi Henk
>
> Thanks very much for your input.
>
> On 27/11/2019, 13:24, "Henk Birkholz" <henk.birkholz@sit.fraunh= ofer.de> wrote:
>> yes there are ways to deal with firmware in SWID, namely the resou= rce
>> type (index 19) in the set of SWID resource-collection [1] in
>> combination with the rel type (index 40) entries.
>>
>> This way, you would not have to use filesystem-items, but this way= is
>> also a bit clunky and would require an informational guidance docu= ment
>> describing how to use *SWID for that.
>
> That's interesting because initially I also tried to use the resou= rce
> type -- which looked like the less wrong among all the available types=
> in the resource collection.=C2=A0 However it wasn't clear to me ho= w to
> associate a checksum to the component, hence I went for the
> filesystem-item.=C2=A0 Maybe I was just looking in the wrong place or = maybe,
> as you say, there's a magic firmware recipe that's worth docum= enting
> here.
>
>> There are some quite smart ways to do that actually with
>> filesystem-items, but I think it is more feasible to use a SUIT >> manifest here to describe everything relevant to the "firmwar= e thingy"
>> and then put a CoSWID into the SUIT manifest's outer wrapper [= 2] that
>> then represents the rest of the semantics that is not covered by t= he
>> manifest but by CoSWID. This method is fine, as the COSE envelope<= br> >> around the EAT will make tempering with the outer wrapper of the S= UIT
>> Manifest evident.
>>
>> I think that is a more elegant way to do it, actually, and the rea= son
>> why issue #46 in the EAT repo proposes to define a Claim to includ= e a
>> SUIT Manifest in an EAT, too.
>
> I'll look into this, thanks for the pointer.
>
> Stepping back for a second and looking from the perspective of my
> immediate requirement (i.e., "Is it possible to translate PSA'= ;s software
> component claim using purely EAT constructs?"), ideally I'd l= ike to have
> something that is expressive enough to encode my semantics (i.e.: SW > component name, version, signer and measurement) without being overly<= br> > complex.
>
> So my knee-jerk reaction is if that implies pulling a dependency on > SUIT maybe it's a bit too much?=C2=A0 But I confess haven't ye= t looked at
> the details of your proposal nor I can claim enough SUIT-foo to really=
> grok the complexity involved.=C2=A0 As said, I'll have a look shor= tly.
>
> cheers!
>
> IMPORTANT NOTICE: The contents of this email and any attachments are c= onfidential and may also be privileged. If you are not the intended recipie= nt, please notify the sender immediately and do not disclose the contents t= o any other person, use it for any purpose, or store or copy the informatio= n in any medium. Thank you.
> _______________________________________________
> RATS mailing list
> RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--00000000000037c82b059857a3fb-- From nobody Wed Nov 27 10:44:43 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A8C120A2A for ; Wed, 27 Nov 2019 10:44:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EJ7twbujFWkp for ; Wed, 27 Nov 2019 10:44:39 -0800 (PST) Received: from out-4.smtp.github.com (out-4.smtp.github.com [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F0BB1209F1 for ; Wed, 27 Nov 2019 10:44:39 -0800 (PST) Date: Wed, 27 Nov 2019 10:44:38 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574880278; bh=ULthcGABlpQ6taXS9gGzgZNtI1A6+1c/Ni7CTqWh/+0=; h=Date:From:To:Subject:From; b=OGkw2GsSzylNCpO1MMWE68ExCwKHA3gX61m5B/OW95eL/5rxpEdVdDnn6DR2Kz25G zEHqCDaR+k96fIZBRip3F49cVXW70pHrBlPUZzy3K7DVywsEBMFbJp0K6naPOPtpzP TcYC8JKbogWId89ACXa650qZWJ3O+tubJBx/Yq+I= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 1a9ae3: added first pass of (Co)SWID and SUIT Manifest Claims X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 18:44:41 -0000 Branch: refs/heads/coswid-&-suit-mainfest-claims Home: https://github.com/ietf-rats-wg/eat Commit: 1a9ae3ad7a87578afac4f5c3aafb14e2c27e6562 https://github.com/ietf-rats-wg/eat/commit/1a9ae3ad7a87578afac4f5c3aafb14e2c27e6562 Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- added first pass of (Co)SWID and SUIT Manifest Claims From nobody Wed Nov 27 10:53:07 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E3841209EE for ; Wed, 27 Nov 2019 10:53:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7 X-Spam-Level: X-Spam-Status: No, score=-7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TVD_SPACE_RATIO=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcgsaK63ZO6E for ; Wed, 27 Nov 2019 10:53:03 -0800 (PST) Received: from out-1.smtp.github.com (out-1.smtp.github.com [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C9E591209CA for ; Wed, 27 Nov 2019 10:53:03 -0800 (PST) Received: from github-lowworker-25680bd.va3-iad.github.net (github-lowworker-25680bd.va3-iad.github.net [10.48.17.61]) by smtp.github.com (Postfix) with ESMTP id F0B8AC60A06 for ; Wed, 27 Nov 2019 10:53:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574880782; bh=ieKSYIWyltwqk1k3/H+BEgZNlONevwa8SjVijcDim/I=; h=Date:From:To:Subject:From; b=ihiHF0AsN2nGIt+SYzKkDE87mKJz12stDCSN3K4w7OdPDbpsxHRa6H/b6IoAPhZ1U 25sWjp8AKMazDNENSMGILpEcaEnPmOMhBeZP7R1dtFiFYCIftpbM3scKxUHkzT/Qy2 Gd5S2dY6ZkzsJHKsL23JqaYeKR8nnl/pIysNVLdI= Date: Wed, 27 Nov 2019 10:53:02 -0800 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 18:53:05 -0000 Branch: refs/heads/cddl-fixes Home: https://github.com/ietf-rats-wg/eat From nobody Wed Nov 27 12:12:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D14D1207FC for ; Wed, 27 Nov 2019 12:12:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.748 X-Spam-Level: X-Spam-Status: No, score=-1.748 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DymIDag0Zk5O for ; Wed, 27 Nov 2019 12:12:00 -0800 (PST) Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0572A120A78 for ; Wed, 27 Nov 2019 12:11:56 -0800 (PST) Received: by mail-qk1-x729.google.com with SMTP id x1so5961439qkl.12 for ; Wed, 27 Nov 2019 12:11:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=EQDYeEI35TfwNNG/HH1X2QLyF0fQPDuPo9X/UxZLzM4=; b=aTs1rCkBwb7RqFyUTpl+19h4V8Xizllh7xpUigfKu8YVprXWm5x4IULHc8hZoRusfI jvQ++hJAxy0uMwdNH0jJCSbnGzoVIG2Z4LVldgInLhlwWRVNvSsj45V+pVdGVmplXQXd 3moOjesiJ3G/wqyoj72W5R5daI5t+TVtw1A+GVheyVKZ7o4+GS/03b4zDCflHN198kmI Kbv0h2ZcsMPGvrGscr+Z4iTo6d8azNhmQB3R11dXUjA9ITQmtRja7qA289EluK0Z2rhe Ljz1ORvsBD5k97rGx7iSLVskDFE0UF+CshA9fXZSRCPM4oi+pEF+RiRtExWQeY+lQ3Uj Yebg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=EQDYeEI35TfwNNG/HH1X2QLyF0fQPDuPo9X/UxZLzM4=; b=U8m12C6LnoPK23syyuB7Qso6nf7BQ7NGPzSaj+DJwQ7ogNQjklPZZQixGyFsG6PoY/ 94kb6vDuSyNzee3JZGYlw1ATmz6RBtXS3Fo5TUmQZbhaHtBft/m+UQS2BhPLOIvAFMIJ tFBxSneVfuTXB4LeAmCOct5WWWbrsKV4BkazbxxWe+8pgpUDUbxjukDq2AfaByU3yJ3G jRpo9KezKrDhgmVlVV5F1L4idtC7LP3vGFAGys07X6Aws5ue90zz42SUXU832OuYOeDx rhJp+rETChDfmSbnWtVVMYvUSKEid2VqKOqcP5FC/GgyHBvIV1EKcquIyQb1wMrX2tkw nxPA== X-Gm-Message-State: APjAAAW9w68qqR5HLDZN0li8oQmz5eq2g52n/6bBFcZfZ5G1XToXM9Nn W5W4g12lfz3p6n2gKmYsKJmUhjk+ X-Google-Smtp-Source: APXvYqyCcqkS7NZ9WkgMfzx19++/faZsxzqoQ4l5eelloXRIR81QIkT45vMpSb/wg7f8MD7ynNF5KA== X-Received: by 2002:a05:620a:a52:: with SMTP id j18mr6004867qka.385.1574885515724; Wed, 27 Nov 2019 12:11:55 -0800 (PST) Received: from wmwdev1-f.mjwiseman.org (mobile-166-172-63-147.mycingular.net. [166.172.63.147]) by smtp.gmail.com with ESMTPSA id s63sm7301972qkf.129.2019.11.27.12.11.54 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 27 Nov 2019 12:11:55 -0800 (PST) To: rats@ietf.org References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> From: Monty Wiseman Message-ID: <7e387a02-4d49-3a52-572d-f7e61b4e729f@gmail.com> Date: Wed, 27 Nov 2019 15:11:54 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------E54CCE35BD6A763A3CD5C48B" Content-Language: en-US Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 20:12:03 -0000 This is a multi-part message in MIME format. --------------E54CCE35BD6A763A3CD5C48B Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Let's not use confusing terms like TPM-style / TCG language. I propose we start with lower-level fundamental definitions or even axioms for boot types. Within those definitions, I recommend deprecating the term "Secure Boot" as it's imprecise and even misleading. I expect there to be variations on these creating derivative definitions but I postulate these are fundamental as basic building blocks. Root of Trust: Something that is assumed to always operate in the expected manner. The implementation is assumed to be correct. How it is implemented it outside the scope of its definition. Verified Boot: Starts with a Root of Trust. For this type of boot the Root of Trust is the Root of Trust for Verification (RTV). The RTV includes a boot policy which is likely a verification key. The RTV enforces the boot policy which continues through the boot process assuming each component continues enforcing the boot policy or other policies authorized by the RTV's boot policy. The trust in the device depends on the RTV's boot policy and not on any external entity such as a Verifier. The boot policy is locked by the RTV and cannot be further evaluated beyond a binary "Trusted" or "Not Trusted" state. The evidence of whether this device is trusted is, therefore, determined by whether it boot to the correct state. (Some would say this is "existential boot.) The TPM has no dependency on Verified Boot and Verified boot has no architectural dependence on the TPM. Measured Boot: Starts with the Root of Trust. For this type of boot it is the Root of Trust for Measurement (RTM). The RTM contains no boot policy. The device's components are recorded and stored through the boot process as each component is assumed to continue measurement process. At some time during the boot process these measurements are converted to evidence and send to a Verifier. The trust in the device depends on a Verifier's evaluation of this evidence. The Verifier has a rich set of policy options available it beyond a binary "Trusted" or "Not Trusted" state. The type of boot depends on a trusted component (such as a TPM) record and converted the measurements into evidence. Summary: The difference between Verified Boot and Measured boot is where the policy is enforced. Verified Boot:       1> Policy is hard coded at boot time, is immutable, and binary.       (This form of boot is "existential" -- The device either boots to       a valid state, or not)       2> Is simpler to implement but less flexible Measured Boot:       1> The trust state is determined by a Verifier using evidence       about the device and a flexible set of policies.       2> Is more complex to implement but more flexible. Diagram: Verified Boot===>     Policy     |     V     RTV --- Component --- Component --- Component --- End State:     A trusted device state is created only if all policies were met     (i.e, the device booted). If any policy was not met, the device (as     it is expected) doesn't really exist (it appears as a different     device) Measured Boot===> Policy                                                                |                                                                V     RTM --- Component --- Component --- Component --- End State:    Trust State determined by a Verifier by appraising evidence collected    using a set of policies. Monty Disclaimer: This is my personal opinion and not that of my employeer or the Trusted Ccomputing Group. While I co-chair TCG's Trusted Network Connect and Infrastructure Working Groups, the above defintions have not been officially adopted by the TCG's Technical Committee or Board of Directors. On 11/24/19 3:01 PM, Laurence Lundblade wrote: > > >> On Nov 24, 2019, at 7:31 AM, Henk Birkholz >> > > wrote: >> >> Hi all, >> >> in a nutshell, one of the things I tried to express is that the >> following quite is simply not correct wrt to what is called here the >> "TPM-style" (I would really like to not use the words "TPM-style" and >> not to mixing authenticated & secure boot. Authenticated Boot is fine): >> > Primarily the difference between TPM-style that doesn’t rely on >> secure boot and non-TPM-style that does rely on secure boot. > > It’s hard to know what to call things. I’m learning the “TCG language” > slowly and we’re also evolving (in the architecture document) a common > language. I keep trying terms and definitions to see what sticks and > what doesn’t. Pretty sure we agree on “attestation evidence”, > “verifier” and “attestation result”, but I don’t know what “secure > boot”, “authenticated boot” and “trusted boot” mean to you so I don’t > know which term to use. > >> >> It is never possible to create TPM structures that are signed >> Attestation Evidence, if a device that is explicitly intended to >> conduct "secure boot" did actually not do so successfully. That is >> one of the key-features of TPM/TSS remote attestation procedures. > > It seems to me that TPM-style attestation where you measure each step > in the boot sequence and report to a verifier was designed to work > without secure boot. However I can see that it could also work with > secure / trusted / authenticated boot. > > >> >> On the other hand, what leaves me puzzled is the following. If these >> three quotes are all correct... >> >>> You cannot create an EAT unless the authenticated boot was >>> successful. The key material with which to sign the EAT is >>> inaccessible if authenticated boot fails (or else the device just >>> won’t boot at all). >> >> draft-ietf-rats-eat-01: >> >>> All claims are optional >> >> and draft-ietf-rats-eat-01 again: >> >>> 3.7.  Secure Boot and Debug Enable State Claims (boot_state) >>>   This claim is an array of five Boolean values indicating the boot and >>>   debug state of the entity. >> >> ... one is allowed either to omit that Claim in an EAT or set some >> values of the Claim members to false. Therefore indicating that the >> boot state is, e.g. "secure_boot_enabled=> false", and still be able >> to create the EAT. Is that correct? If not, why include this member >> of the boot_state Claim at all? It always made me think until now >> that it allows for a device to not conduct "secure boot" and still be >> able to create an EAT. > > Yes, you are right that in some cases it would make no sense to have > the secure boot claim. It is basically an implicit claim. Here’s some > where it does make sense to have an explicit secure boot claim. > > The main attester might boot securely, but submods might not. > > It is possible to build pure HW that implements EAT attestation. > It might be a part of a SoC. That attestation HW doesn’t use the > main CPU to implement the attester, but can report on how the main > CPU booted. > > > >> >> Besides that, what I think we are actually talking about is implicit >> and explicit attestation. > > Seems like you have to say which claims are implicit and which claims > are explicit and in many attestations you need and get both. > > For example, you called out a situation where the secure boot claim is > implicit and questioned the need for the claim. I then called out a > situation where the secure boot claim is explicit. > > In one attestation the secure boot claim might be implicit and the GPS > location is explicit. > > LL > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --------------E54CCE35BD6A763A3CD5C48B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Let's not use confusing terms like TPM-style / TCG language. I propose
we start with lower-level fundamental definitions or even axioms for
boot types. Within those definitions, I recommend deprecating the term
"Secure Boot" as it's imprecise and even misleading. I expect there to
be variations on these creating derivative definitions but I postulate
these are fundamental as basic building blocks.

Root of Trust: Something that is assumed to always operate in the
expected manner. The implementation is assumed to be correct. How it is
implemented it outside the scope of its definition.

Verified Boot: Starts with a Root of Trust. For this type of boot the
Root of Trust is the Root of Trust for Verification (RTV). The RTV
includes a boot policy which is likely a verification key. The RTV
enforces the boot policy which continues through the boot process
assuming each component continues enforcing the boot policy or other
policies authorized by the RTV's boot policy. The trust in the device
depends on the RTV's boot policy and not on any external entity such as a
Verifier. The boot policy is locked by the RTV and cannot be further
evaluated beyond a binary "Trusted" or "Not Trusted" state. The evidence
of whether this device is trusted is, therefore, determined by whether
it boot to the correct state. (Some would say this is "existential boot.)

The TPM has no dependency on Verified Boot and Verified boot has no
architectural dependence on the TPM.

Measured Boot: Starts with the Root of Trust. For this type of boot it
is the Root of Trust for Measurement (RTM). The RTM contains no boot
policy. The device's components are recorded and stored through the boot
process as each component is assumed to continue measurement process. At
some time during the boot process these measurements are converted to
evidence and send to a Verifier. The trust in the device depends on a
Verifier's evaluation of this evidence. The Verifier has a rich set of
policy options available it beyond a binary "Trusted" or "Not Trusted"
state. The type of boot depends on a trusted component (such as a TPM)
record and converted the measurements into evidence.

Summary:
The difference between Verified Boot and Measured boot is where the
policy is enforced.

Verified Boot:
      1> Policy is hard coded at boot time, is immutable, and binary.
      (This form of boot is "existential" -- The device either boots to
      a valid state, or not)

      2> Is simpler to implement but less flexible

Measured Boot:
      1> The trust state is determined by a Verifier using evidence
      about the device and a flexible set of policies.

      2> Is more complex to implement but more flexible.

Diagram:

Verified Boot===>

    Policy

    |

    V

    RTV --- Component --- Component --- Component --- End State:

    A trusted device state is created only if all policies were met
    (i.e, the device booted). If any policy was not met, the device (as
    it is expected) doesn't really exist (it appears as a different
    device)

Measured Boot===>

                                                            Policy

                                                               |

                                                               V

    RTM --- Component --- Component --- Component --- End State:

   Trust State determined by a Verifier by appraising evidence collected
   using a set of policies.

Monty

Disclaimer: This is my personal opinion and not that of my employeer or
the Trusted Ccomputing Group. While I co-chair TCG's Trusted Network
Connect and Infrastructure Working Groups, the above defintions have
not been officially adopted by the TCG's Technical Committee or Board of
Directors.

On 11/24/19 3:01 PM, Laurence Lundblade wrote:


On Nov 24, 2019, at 7:31 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi all,

in a nutshell, one of the things I tried to express is that the following quite is simply not correct wrt to what is called here the "TPM-style" (I would really like to not use the words "TPM-style" and not to mixing authenticated & secure boot. Authenticated Boot is fine):
> Primarily the difference between TPM-style that doesn’t rely on secure boot and non-TPM-style that does rely on secure boot.

It’s hard to know what to call things. I’m learning the “TCG language” slowly and we’re also evolving (in the architecture document) a common language. I keep trying terms and definitions to see what sticks and what doesn’t. Pretty sure we agree on “attestation evidence”, “verifier” and “attestation result”, but I don’t know what “secure boot”, “authenticated boot” and “trusted boot” mean to you so I don’t know which term to use.


It is never possible to create TPM structures that are signed Attestation Evidence, if a device that is explicitly intended to conduct "secure boot" did actually not do so successfully. That is one of the key-features of TPM/TSS remote attestation procedures.

It seems to me that TPM-style attestation where you measure each step in the boot sequence and report to a verifier was designed to work without secure boot. However I can see that it could also work with secure / trusted / authenticated boot.



On the other hand, what leaves me puzzled is the following. If these three quotes are all correct...

You cannot create an EAT unless the authenticated boot was successful. The key material with which to sign the EAT is inaccessible if authenticated boot fails (or else the device just won’t boot at all).

draft-ietf-rats-eat-01:

All claims are optional

and draft-ietf-rats-eat-01 again:

3.7.  Secure Boot and Debug Enable State Claims (boot_state)
  This claim is an array of five Boolean values indicating the boot and
  debug state of the entity.

... one is allowed either to omit that Claim in an EAT or set some values of the Claim members to false. Therefore indicating that the boot state is, e.g. "secure_boot_enabled=> false", and still be able to create the EAT. Is that correct? If not, why include this member of the boot_state Claim at all? It always made me think until now that it allows for a device to not conduct "secure boot" and still be able to create an EAT.

Yes, you are right that in some cases it would make no sense to have the secure boot claim. It is basically an implicit claim. Here’s some where it does make sense to have an explicit secure boot claim.

The main attester might boot securely, but submods might not.

It is possible to build pure HW that implements EAT attestation. It might be a part of a SoC. That attestation HW doesn’t use the main CPU to implement the attester, but can report on how the main CPU booted.



Besides that, what I think we are actually talking about is implicit and explicit attestation.

Seems like you have to say which claims are implicit and which claims are explicit and in many attestations you need and get both.

For example, you called out a situation where the secure boot claim is implicit and questioned the need for the claim. I then called out a situation where the secure boot claim is explicit. 

In one attestation the secure boot claim might be implicit and the GPS location is explicit.

LL



_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--------------E54CCE35BD6A763A3CD5C48B-- From nobody Wed Nov 27 12:43:29 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 574C7120988 for ; Wed, 27 Nov 2019 12:43:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2zpg0xt6eTIw for ; Wed, 27 Nov 2019 12:43:26 -0800 (PST) Received: from out-20.smtp.github.com (out-20.smtp.github.com [192.30.252.203]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A6E012007C for ; Wed, 27 Nov 2019 12:43:26 -0800 (PST) Date: Wed, 27 Nov 2019 12:43:25 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574887405; bh=0f38F7Q2g11frt23tDO/MGW1pGrAQhk6qmSf2yWW9F8=; h=Date:From:To:Subject:From; b=lzvb95P7CGRVHVJez6oqPRrEuqpUfakDKWUPVXMgDGGiCS0Q5hBohIIkptHqjV9bm zr1Vg327uGDskhI99KgeGTvz67+IgZneaSbRYTOUCCDEtZ4W0xDM8e4aGA5Btb0ShU oCqL7Dth7S7ffDX6BNRKux1GEEdneOdDNtfTvXv4= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] bdf9c7: first pass on fixing CDDL specification fragments ... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 20:43:27 -0000 Branch: refs/heads/cddl-fixes Home: https://github.com/ietf-rats-wg/eat Commit: bdf9c79e064a43f92384509cdad1e699f542ef22 https://github.com/ietf-rats-wg/eat/commit/bdf9c79e064a43f92384509cdad1e699f542ef22 Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- first pass on fixing CDDL specification fragments to resemble a data model for EAT (inital focus on CWT) From nobody Wed Nov 27 13:04:36 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABC22120127 for ; Wed, 27 Nov 2019 13:04:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id otWSJky9eLl4 for ; Wed, 27 Nov 2019 13:04:27 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650096.outbound.protection.outlook.com [40.107.65.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF367120A95 for ; Wed, 27 Nov 2019 13:04:27 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cggHK/n/eLqboBF/c3jwYJT+owhI9L3bro1H5j6eWnkrsgjbe0s9epvQqPYEb9A3RmxA1T1HpQ1xENgsp8FHC79tauOxIoAEcIyc3ner335Xz99YzKYEHHP9ZhQWG9hScYhyN9KTmpZKzLycIdTS/3/phviAzvJkNVQY83go7tKfMTgV2ieQQdKWonMIJ6jVhJkbZU7JaUP27F4T7b0gaIUuwPBZv502JLaHvENCIQ7TYHlI7QBcP/RGEaZBTfU5KuTU482LxfmAk+LVIAUnYk5miYIVk9AUo/E1vTRtsG8nza8W+qzF3jDvdpXLs2RkiyCrSizpMUy9tUAglEDzvA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3wtT78iSDXwP9SXtwwPYYMOI5BdV0+04+U2p0y0T5e4=; b=IGhLuNqYaFKU1y1ZA0K/GdkrIBvGW1391iQMwPYZbhmOrYAq34KXS69ZSqrlqM0Qe3HC3C9BBUKVKu6O//JpwcYMdsBQoI4XdGJ9i0tZX//4opuO9jrHSX3VSj6FTTfVaOB7xu1h9cpuzzQn3+lRkKxEQSGUuKm3kF4hkJhELf9IMn+95yDGLlzstJ9blZqLGFHgSObD9gBwo4qAIBNTNccwgaeFTHxrNZ8qwo67ho663wu8lEMKFJ57ZfmJHyhEQjKA2E7xfzahTXiJmPA2Omwd73AxDpesyzskCoU5Q6kKTly+jbmj0Pbpeu/Asv+52UQGpc2WD7D2UYPc1mgX6Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3wtT78iSDXwP9SXtwwPYYMOI5BdV0+04+U2p0y0T5e4=; b=Lecb6y0UiWFEcUExiNu3I9yu7/zc/93qC0op2NIoZI/heS2Lro5QI6YbuQRs+uRI9yhtoAvys9sP643venIMJ1k2E77h2iqmAOI82VyOkNL3RRvOh+MGyI5wuvJ7lyjZdW7rMHdd3QivrNc7IKA/k0JVitMaxVj9YhmFpHlD76o= Received: from MN2PR00MB0574.namprd00.prod.outlook.com (20.178.255.147) by MN2PR00MB0590.namprd00.prod.outlook.com (20.178.255.213) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2530.0; Wed, 27 Nov 2019 21:04:25 +0000 Received: from MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::9d3d:62e9:e933:bb70]) by MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::9d3d:62e9:e933:bb70%9]) with mapi id 15.20.2536.000; Wed, 27 Nov 2019 21:04:25 +0000 From: Mike Jones To: Yaron Sheffer , Laurence Lundblade , Benjamin Kaduk CC: "rats@ietf.org" , Hannes Tschofenig Thread-Topic: [Rats] [EXTERNAL] Re: EAT IANA registry Thread-Index: AQHVpNF3tjUEO7PdBkKzZ6PhH0P0Q6eeb6WAgAC8WwCAAFVuwA== Date: Wed, 27 Nov 2019 21:04:25 +0000 Message-ID: References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d22b888b-d04c-453a-901f-00006ca45c13; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-27T20:59:19Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.84.162] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4720f7f6-79a5-46a6-01ee-08d7737d628c x-ms-traffictypediagnostic: MN2PR00MB0590: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 023495660C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(376002)(396003)(39860400002)(346002)(199004)(189003)(54094003)(14454004)(14444005)(256004)(53546011)(76176011)(8990500004)(7696005)(478600001)(5660300002)(74316002)(6506007)(8676002)(81156014)(81166006)(3846002)(6116002)(966005)(790700001)(10090500001)(71190400001)(446003)(71200400001)(11346002)(25786009)(33656002)(6436002)(186003)(66446008)(76116006)(2171002)(2906002)(55016002)(9686003)(236005)(8936002)(54896002)(6306002)(66476007)(6246003)(52536014)(102836004)(66066001)(66946007)(4326008)(64756008)(561944003)(110136005)(606006)(54906003)(7736002)(26005)(99286004)(10290500003)(86362001)(229853002)(22452003)(66556008)(316002); DIR:OUT; SFP:1102; SCL:1; SRVR:MN2PR00MB0590; H:MN2PR00MB0574.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: Kh9BluHuzB4rqeDM20AR7OzvpncoRlYQZG4z0msufw5mceIcgSUpvhpwQVddeLvhrvmHw/RJ3IcDhZiPDuYyoZrn8NRkWMzEPAr9VjgF2Ak88UguPUrCOHagUlCuzxM59vPA1fkzIyo7IG6yQq7lgnddhbDyC4bN7b6AI2PRIHX/yjKQV8pXnYHv+5nHLbnj9SSqXulAQTCz8Sa/nTo7xMkqNukkBkLw30gDJx1MbzgFk/YMt99ZOr+IZa+SgWflsTXEXjTVomwjCDoWCUi/cw8+MXncMKqgbpn4IlXmtWUVpzkXmEyv8sNC3F80B4ffVIU6jNU1Ta1FSs6OcqUcFrbaHo4uzYwdh4NE/aErotfgKBc6mrVwkHnG9qKSJa2VK98vE/5reAw6tk2qbRK+HL2avJ+63thxv7THsJb3Zrx42PiRABVKxtFxgVIHMO3fOTiUZZVjpG4glUxre/FwM2Xi6INGmwkg0xm/Vmsby1w= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MN2PR00MB057424C20F7549E74C4590B8F5440MN2PR00MB0574namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4720f7f6-79a5-46a6-01ee-08d7737d628c X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2019 21:04:25.5094 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: zgcQqantSV38e2BRLSj02qOGiY+8/nIsLxVh2jLKqq191m1O5lhX+xOSMC0kl67W6k+WnnjYmcRhKtM0uRpkUg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR00MB0590 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 21:04:32 -0000 --_000_MN2PR00MB057424C20F7549E74C4590B8F5440MN2PR00MB0574namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIHBvaW50IG9mIGhhdmluZyBhIGNvbW1vbiBKV1QgQ2xhaW1zIHJlZ2lzdHJ5IGlzIHRvIGVu YWJsZSBmdXR1cmUgc3BlY2lmaWNhdGlvbnMgdG8gYmVuZWZpdCBmcm9tIHJldXNpbmcgYXBwbGlj YWJsZSBjbGFpbXMgcmVnaXN0ZXJlZCBieSBwYXN0IHNwZWNpZmljYXRpb25zLiAgRm9yIGluc3Rh bmNlLCB0aGUgU2VjdXJpdHkgRXZlbnQgVG9rZW4gW1JGQyA4NDE3PGh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9yZmM4NDE3Pl0gc3BlY2lmaWNhdGlvbiByZWNlbnRseSByZWdpc3RlcmVkIHRo aXMgZ2VuZXJhbC1wdXJwb3NlIGNsYWltOg0KICAgbyAgQ2xhaW0gTmFtZTogInR4biINCiAgIG8g IENsYWltIERlc2NyaXB0aW9uOiBUcmFuc2FjdGlvbiBJZGVudGlmaWVyDQogICBvICBDaGFuZ2Ug Q29udHJvbGxlcjogSUVTRw0KICAgbyAgU3BlY2lmaWNhdGlvbiBEb2N1bWVudChzKTogU2VjdGlv biAyLjIgb2YgW1JGQzg0MTddPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4NDE3I3Nl Y3Rpb24tMi4yPg0KDQpUaGF0IG1hZGUgaXQgYXZhaWxhYmxlIHRvIEVBVCBhbmQgb3RoZXIgZnV0 dXJlIHNwZWNpZmljYXRpb25zIHVzaW5nIEpXVHMuICBJZiBpdCBoYWQgaW5zdGVhZCBwdXQgaXQg aW50byBpdHMgb3duIHJlZ2lzdHJ5LCB0aGUgcG90ZW50aWFsIGZvciByZXVzZSB3b3VsZCBoYXZl IGJlZW4gbG9zdC4NCg0KTGV04oCZcyBsaWtld2lzZSBsZXQgZnV0dXJlIHNwZWNzIGJlbmVmaXQg ZnJvbSBFQVQtZGVmaW5lZCBjbGFpbXMgYnkgcHV0dGluZyB0aGVtIGluIHRoZSBub3JtYWwgSUFO QSBKV1QgQ2xhaW1zIHJlZ2lzdHJ5Lg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBZYXJvbiBTaGVmZmVyIDx5 YXJvbmYuaWV0ZkBnbWFpbC5jb20+DQpTZW50OiBXZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAyMDE5 IDc6NTQgQU0NClRvOiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT47 IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pg0KQ2M6IE1pa2UgSm9uZXMgPE1pY2hhZWwu Sm9uZXNAbWljcm9zb2Z0LmNvbT47IHJhdHNAaWV0Zi5vcmc7IEhhbm5lcyBUc2Nob2ZlbmlnIDxI YW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPg0KU3ViamVjdDogUmU6IFtSYXRzXSBbRVhURVJOQUxd IFJlOiBFQVQgSUFOQSByZWdpc3RyeQ0KDQpUbyBwdXQgaXQgaW50byBwZXJzcGVjdGl2ZSwgdGhl cmUgYXJlIGFscmVhZHkgNTcgY2xhaW1zIHJlZ2lzdGVyZWQgWzFdLiBTbyBldmVuIGlmIDcgY2xh aW1zIG92ZXJsYXAsIHRoaXMgaXMgYSByZWxhdGl2ZWx5ICpzbWFsbCogbnVtYmVyLiBJTU8gdGhl cmUgaXMgaGlnaCB2YWx1ZSBpbiBhIHNlcGFyYXRlIG5hbWVzcGFjZSBmb3IgRUFUIGNsYWltcywg YW5kIHRoZSBzdGFuZGFyZCB3YXkgdG8gY3JlYXRlIHN1Y2ggYSBuYW1lc3BhY2UgaW4gSlNPTiBp cyBleGFjdGx5IGFzIEJlbiBpcyBwcm9wb3NpbmcuDQoNClRoYW5rcywNCiAgICAgICAgICAgICAg ICBZYXJvbg0KDQpbMV0gaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvand0L2p3dC54 aHRtbA0KDQpGcm9tOiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxt YWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4NCkRhdGU6IFdlZG5lc2RheSwgTm92ZW1iZXIg MjcsIDIwMTkgYXQgMDY6MzkNClRvOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdTxtYWls dG86a2FkdWtAbWl0LmVkdT4+DQpDYzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lcz00MG1pY3Jv c29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOk1pY2hhZWwuSm9uZXM9NDBtaWNyb3NvZnQu Y29tQGRtYXJjLmlldGYub3JnPj4sIFlhcm9uIFNoZWZmZXIgPHlhcm9uZi5pZXRmQGdtYWlsLmNv bTxtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tPj4sICJyYXRzQGlldGYub3JnPG1haWx0bzpy YXRzQGlldGYub3JnPiIgPHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+PiwgSGFu bmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5U c2Nob2ZlbmlnQGFybS5jb20+Pg0KU3ViamVjdDogUmU6IFtSYXRzXSBbRVhURVJOQUxdIFJlOiBF QVQgSUFOQSByZWdpc3RyeQ0KDQoNCk9uIE5vdiAyNiwgMjAxOSwgYXQgNzoxOSBQTSwgQmVuamFt aW4gS2FkdWsgPGthZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+PiB3cm90ZToNCg0K Li4uYnV0IEknbSBub3Qgc3VyZSB0aGF0ICJhdm9pZGluZyBkdXBsaWNhdGVzIg0Kd291bGQgYXBw bHkgdG8gYSBwcm9wb3NhbCB0aGF0IG1ha2VzIGEgc2luZ2xlIEpXVC9DV1QgY2xhaW0gZm9yICJF QVQgZGF0YSINCmFuZCBwdXRzIHRoZSBhdHRlc3RhdGlvbiBjbGFpbXMgaW4gYSBtYXAgYXMgdGhl IHZhbHVlIGZvciB0aGF0ICJFQVQgZGF0YSINCmNsYWltLiAgV2hhdCBleGlzdGluZyBKV1QvQ1dU IGNsYWltcyB3b3VsZCBkdXBsaWNhdGUgdGhlIHBvdGVudGlhbCBjb250ZW50cw0Kb2YgdGhlIEVB VCBkYXRhIGZpZWxkcz8NCg0KVGhhdCBpcyBhbiBpbnRlcmVzdGluZyB0aG91Z2h0IOKAlCBwdXQg YWxsIG9mIEVBVCBpbnRvIG9uZSBKV1QvQ1dUIGNsYWltIHRoYXQgaXMgYSBtYXAuIE90aGVy4oCZ cyBoYXZlIG1lbnRpb25lZCBpdCB0byBtZS4gSXQgd291bGQgbGV0IEVBVCByZSB1c2UgdGhlIG1v c3QgY29tcGFjdCBpbnRlZ2VyIENCT1IgaW50ZWdlciBsYWJlbHMuDQoNClJpZ2h0IG5vdyB3ZSBy ZSB1c2UgdGhlIGZvbGxvd2luZyBjbGFpbXMgZnJvbSBKV1Qgb3IgQ1dUIGJ5IG5vcm1hdGl2ZSBy ZWZlcmVuY2U6DQotIG5vbmNlDQotIFRva2VuIElEIGN0aS9qdGkNCi0gVGltZSBzdGFtcCAoaWF0 KQ0KDQpBbHNvIHRoZXNlIEpXVCBvciBDV1Qgc2VlbSBlaXRoZXIgbGlrZWx5IG9yIHBvc3NpYmxl IHVzZSBpbiBFQVQ6DQotIGNuZiAocHJvb2Ygb2YgcG9zc2Vzc2lvbiBvZiBrZXkpDQotIGlzcyBJ c3N1ZXINCi0gZXhwaXJhdGlvbg0KLSBub3QgYmVmb3JlDQoNClRoYXTigJlzIGEgZmFpcmx5IGxh cmdlIG92ZXJsYXAgd2hpY2ggbWFrZXMgbWUgZGlzaW5jbGluZWQgdG8gcHV0dGluZyBhbGwgb2Yg RUFUIGludG8gb25lIG1hcCB0aGF0IGlzIG9uZSBKV1QvQ1dUIGNsYWltLCBzZXBhcmF0aW5nIEVB VCBjbGFpbXMgZnJvbSBDV1QvSldUIGNsYWltcy4NCg0KSeKAmW0gbm8gT0F1dGggZXhwZXJ0LCBi dXQgSSB3b25kZXIgaWYgc29tZSBvZiB0aGUgRUFUIGNsYWltcyBtaWdodCBiZSB1c2VmdWwgZm9y IG90aGVyIHRoYW4gRUFUIHRva2VucywgYW5vdGhlciByZWFzb24gbm90IHRvIGtlZXAgdGhlbSBz ZXBhcmF0ZS4NCg0KSSBzdXNwZWN0IHdl4oCZcmUgZ29pbmcgdG8gZmluZCBhdCBsZWFzdCBvbmUg bW9yZSB1c2UgZm9yIGEgc2lnbmVkIG1hcCBvZiBsYWJlbC12YWx1ZSBwYWlycyBpbiB0aGUgbmV4 dCBmZXcgeWVhcnMgdGhhdCB3b3VsZCBiZSBhYmxlIHRvIHJlIHVzZSBhdCBsZWFzdCBzb21lIG9m IHRoZXNlIGNsYWltcyDigJQgYW5vdGhlciByZWFzb24gdG8ga2VlcCB0aGVtIGluIHRoZSBzYW1l IHNwYWNlLg0KDQpMTA0KDQoNCg0KDQoNCg0K --_000_MN2PR00MB057424C20F7549E74C4590B8F5440MN2PR00MB0574namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsN CglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYw O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhlIHBvaW50IG9mIGhh dmluZyBhIGNvbW1vbiBKV1QgQ2xhaW1zIHJlZ2lzdHJ5IGlzIHRvIGVuYWJsZSBmdXR1cmUgc3Bl Y2lmaWNhdGlvbnMgdG8gYmVuZWZpdCBmcm9tIHJldXNpbmcgYXBwbGljYWJsZSBjbGFpbXMgcmVn aXN0ZXJlZCBieSBwYXN0IHNwZWNpZmljYXRpb25zLiZuYnNwOyBGb3IgaW5zdGFuY2UsIHRoZSBT ZWN1cml0eSBFdmVudCBUb2tlbiBbPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L3JmYzg0MTciPlJGQw0KIDg0MTc8L2E+XSBzcGVjaWZpY2F0aW9uIHJlY2VudGx5IHJlZ2lzdGVy ZWQgdGhpcyBnZW5lcmFsLXB1cnBvc2UgY2xhaW06PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OmJsYWNrO2JhY2tncm91bmQ6d2hpdGUiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IENsYWltIE5hbWU6 ICZxdW90O3R4biZxdW90OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3Jv dW5kOndoaXRlIj4mbmJzcDsmbmJzcDsgbyZuYnNwOyBDbGFpbSBEZXNjcmlwdGlvbjogVHJhbnNh Y3Rpb24gSWRlbnRpZmllcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3Jv dW5kOndoaXRlIj4mbmJzcDsmbmJzcDsgbyZuYnNwOyBDaGFuZ2UgQ29udHJvbGxlcjogSUVTRzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDsm bmJzcDsgbyZuYnNwOyBTcGVjaWZpY2F0aW9uIERvY3VtZW50KHMpOg0KPC9zcGFuPjxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4NDE3I3NlY3Rpb24tMi4yIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA2NkND Ij5TZWN0aW9uJm5ic3A7Mi4yIG9mIFtSRkM4NDE3XTwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhdCBtYWRlIGl0IGF2YWlsYWJsZSB0byBF QVQgYW5kIG90aGVyIGZ1dHVyZSBzcGVjaWZpY2F0aW9ucyB1c2luZyBKV1RzLiZuYnNwOyBJZiBp dCBoYWQgaW5zdGVhZCBwdXQgaXQgaW50byBpdHMgb3duIHJlZ2lzdHJ5LCB0aGUgcG90ZW50aWFs IGZvciByZXVzZSB3b3VsZCBoYXZlIGJlZW4gbG9zdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPkxldOKAmXMgbGlrZXdpc2UgbGV0IGZ1dHVyZSBzcGVjcyBiZW5lZml0IGZy b20gRUFULWRlZmluZWQgY2xhaW1zIGJ5IHB1dHRpbmcgdGhlbSBpbiB0aGUgbm9ybWFsIElBTkEg SldUIENsYWltcyByZWdpc3RyeS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gWWFyb24gU2hl ZmZlciAmbHQ7eWFyb25mLmlldGZAZ21haWwuY29tJmd0OyA8YnI+DQo8Yj5TZW50OjwvYj4gV2Vk bmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSA3OjU0IEFNPGJyPg0KPGI+VG86PC9iPiBMYXVyZW5j ZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQtcmVzb3J0LmNvbSZndDs7IEJlbmphbWluIEthZHVr ICZsdDtrYWR1a0BtaXQuZWR1Jmd0Ozxicj4NCjxiPkNjOjwvYj4gTWlrZSBKb25lcyAmbHQ7TWlj aGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tJmd0OzsgcmF0c0BpZXRmLm9yZzsgSGFubmVzIFRzY2hv ZmVuaWcgJmx0O0hhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbUmF0c10gW0VYVEVSTkFMXSBSZTogRUFUIElBTkEgcmVnaXN0cnk8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRvIHB1dCBpdCBpbnRvIHBlcnNwZWN0aXZl LCB0aGVyZSBhcmUgYWxyZWFkeSA1NyBjbGFpbXMgcmVnaXN0ZXJlZCBbMV0uIFNvIGV2ZW4gaWYg NyBjbGFpbXMgb3ZlcmxhcCwgdGhpcyBpcyBhIHJlbGF0aXZlbHkgKjxiPnNtYWxsPC9iPiogbnVt YmVyLiBJTU8gdGhlcmUgaXMgaGlnaCB2YWx1ZSBpbiBhIHNlcGFyYXRlIG5hbWVzcGFjZSBmb3Ig RUFUIGNsYWltcywgYW5kIHRoZSBzdGFuZGFyZCB3YXkgdG8gY3JlYXRlDQogc3VjaCBhIG5hbWVz cGFjZSBpbiBKU09OIGlzIGV4YWN0bHkgYXMgQmVuIGlzIHByb3Bvc2luZy48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFlhcm9uPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlsxXSA8YSBocmVmPSJodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9qd3Qv and0LnhodG1sIj4NCmh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3QueGh0 bWw8L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRE RiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5MYXVyZW5j ZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxn bEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPldlZG5lc2RheSwg Tm92ZW1iZXIgMjcsIDIwMTkgYXQgMDY6Mzk8YnI+DQo8Yj5UbzogPC9iPkJlbmphbWluIEthZHVr ICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+a2FkdWtAbWl0LmVkdTwvYT4mZ3Q7 PGJyPg0KPGI+Q2M6IDwvYj5NaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWljaGFlbC5K b25lcz00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPk1pY2hhZWwuSm9uZXM9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDssIFlhcm9uIFNoZWZmZXIgJmx0OzxhIGhy ZWY9Im1haWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20iPnlhcm9uZi5pZXRmQGdtYWlsLmNvbTwv YT4mZ3Q7LCAmcXVvdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9y ZzwvYT4mcXVvdDsNCiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNAaWV0 Zi5vcmc8L2E+Jmd0OywgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5u ZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs8 YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UmU6IFtSYXRzXSBbRVhURVJOQUxdIFJlOiBFQVQgSUFOQSBy ZWdpc3RyeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5PbiBOb3YgMjYsIDIwMTksIGF0IDc6MTkgUE0sIEJlbmphbWluIEthZHVrICZsdDs8 YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+a2FkdWtAbWl0LmVkdTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij4uLi5idXQgSSdtIG5vdCBzdXJlIHRoYXQgJnF1b3Q7YXZvaWRpbmcgZHVwbGljYXRlcyZxdW90 Ozxicj4NCndvdWxkIGFwcGx5IHRvIGEgcHJvcG9zYWwgdGhhdCBtYWtlcyBhIHNpbmdsZSBKV1Qv Q1dUIGNsYWltIGZvciAmcXVvdDtFQVQgZGF0YSZxdW90Ozxicj4NCmFuZCBwdXRzIHRoZSBhdHRl c3RhdGlvbiBjbGFpbXMgaW4gYSBtYXAgYXMgdGhlIHZhbHVlIGZvciB0aGF0ICZxdW90O0VBVCBk YXRhJnF1b3Q7PGJyPg0KY2xhaW0uICZuYnNwO1doYXQgZXhpc3RpbmcgSldUL0NXVCBjbGFpbXMg d291bGQgZHVwbGljYXRlIHRoZSBwb3RlbnRpYWwgY29udGVudHM8YnI+DQpvZiB0aGUgRUFUIGRh dGEgZmllbGRzPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGF0IGlzIGFuIGludGVyZXN0aW5nIHRob3VnaHQg4oCU IHB1dCBhbGwgb2YgRUFUIGludG8gb25lIEpXVC9DV1QgY2xhaW0gdGhhdCBpcyBhIG1hcC4gT3Ro ZXLigJlzIGhhdmUgbWVudGlvbmVkIGl0IHRvIG1lLiBJdCB3b3VsZCBsZXQgRUFUIHJlIHVzZSB0 aGUgbW9zdCBjb21wYWN0IGludGVnZXIgQ0JPUiBpbnRlZ2VyIGxhYmVscy48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UmlnaHQgbm93IHdlIHJl IHVzZSB0aGUgZm9sbG93aW5nIGNsYWltcyBmcm9tIEpXVCBvciBDV1QgYnkgbm9ybWF0aXZlIHJl ZmVyZW5jZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPi0gbm9uY2U8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gVG9rZW4gSUQgY3RpL2p0aTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBUaW1lIHN0YW1wIChpYXQpPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFsc28gdGhlc2UgSldUIG9yIENX VCBzZWVtIGVpdGhlciBsaWtlbHkgb3IgcG9zc2libGUgdXNlIGluIEVBVDo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gY25mIChwcm9vZiBvZiBw b3NzZXNzaW9uIG9mIGtleSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPi0gaXNzIElzc3VlcjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBleHBpcmF0aW9uPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIG5vdCBiZWZvcmU8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhdOKAmXMgYSBmYWlybHkg bGFyZ2Ugb3ZlcmxhcCB3aGljaCBtYWtlcyBtZSBkaXNpbmNsaW5lZCB0byBwdXR0aW5nIGFsbCBv ZiBFQVQgaW50byBvbmUgbWFwIHRoYXQgaXMgb25lIEpXVC9DV1QgY2xhaW0sIHNlcGFyYXRpbmcg RUFUIGNsYWltcyBmcm9tIENXVC9KV1QgY2xhaW1zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZbSBubyBPQXV0aCBleHBlcnQsIGJ1dCBJ IHdvbmRlciBpZiBzb21lIG9mIHRoZSBFQVQgY2xhaW1zIG1pZ2h0IGJlIHVzZWZ1bCBmb3Igb3Ro ZXIgdGhhbiBFQVQgdG9rZW5zLCBhbm90aGVyIHJlYXNvbiBub3QgdG8ga2VlcCB0aGVtIHNlcGFy YXRlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JIHN1c3BlY3Qgd2XigJlyZSBnb2luZyB0byBmaW5kIGF0IGxlYXN0IG9uZSBtb3JlIHVzZSBm b3IgYSBzaWduZWQgbWFwIG9mIGxhYmVsLXZhbHVlIHBhaXJzIGluIHRoZSBuZXh0IGZldyB5ZWFy cyB0aGF0IHdvdWxkIGJlIGFibGUgdG8gcmUgdXNlIGF0IGxlYXN0IHNvbWUgb2YgdGhlc2UgY2xh aW1zIOKAlCBhbm90aGVyIHJlYXNvbiB0byBrZWVwIHRoZW0gaW4gdGhlIHNhbWUgc3BhY2UuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_MN2PR00MB057424C20F7549E74C4590B8F5440MN2PR00MB0574namp_-- From nobody Wed Nov 27 13:27:26 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68AD8120ABA for ; Wed, 27 Nov 2019 13:27:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.642 X-Spam-Level: X-Spam-Status: No, score=-0.642 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MALFORMED_FREEMAIL=1.355, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sj0ksKSDoXEH for ; Wed, 27 Nov 2019 13:27:22 -0800 (PST) Received: from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com [IPv6:2a00:1450:4864:20::42a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 418E0120A79 for ; Wed, 27 Nov 2019 13:27:22 -0800 (PST) Received: by mail-wr1-x42a.google.com with SMTP id s5so28468234wrw.2 for ; Wed, 27 Nov 2019 13:27:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=ihFw0tnkq5dzBtVa7YzpMyP6kOS//M3oBbCYmjqWLos=; b=vSernnFXw6vsYYjufbdA7b0Mo229k9hxNJVGaHBDPves6oHRtp0iwNnkoH2jHhScMJ 6dlIN5BqhRz3KuTNnc4iSqrLEQYeOLehO/qQRbXmNb6dOLLbYMXWlIloIdjtdIXUlE80 AWZexk6bN4S8VVXlUOErCDPu2v9U3vMpyf5euBSRjfRthekqNRAP+yo58Tc47VSfqYTX mTwE9FSZdcJ+UzO7cQKF3Gkg67aWfIZCb9/uuLlRZIe/gYsh9xTASYBE7x8l11u9qZd6 uM2B/inicnKihBXvJN0Etboe9iC/374fi5+xEhLLR3N6lgO3t2LuzL6cX1+99GwdJXdz bAdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=ihFw0tnkq5dzBtVa7YzpMyP6kOS//M3oBbCYmjqWLos=; b=EeX7C2pUnOrI5UrJhx6Hvf5h/xBQrSjibWkCcAId8JBFjLuEM1CDrKIlt0eDGF+SLb ek2dk5fT84Xx0ElRzSUf9+SaXbR2waMvrBn6p3WDiO+iZlF/jjIhne20s+VImiNE9uGz qE40TidzqzufMwyziRes8k2isBClTrcnaFVE3/VNaDhhdYbG4zCUcqxfQF+TPji9GYgP vWN0kwNy6lD6I3NMt3aXsI9gjg8pTc3XlEwNEL6DPzTNVERxCCXjm6q18Us4bZnworsA dGGw2hcx3OL5boXcP2fySJD8+ACiBdJb6003gnxFJfBP+9jazu2d2JduSafY9qYbKKP5 upoA== X-Gm-Message-State: APjAAAWeSFfgKWtSWfib1r0h47tOSOSy/4CAma1apTLqbvenLZQcaj4W /AAk/syPqRTvThDVinBW4ac= X-Google-Smtp-Source: APXvYqyKud3iaTzBDipnZJx1ErkEyWb82Crin7U8IGjpA0mPijvwgkEuR1XNpVhsZ0I2ESnZuLqHSQ== X-Received: by 2002:adf:ed11:: with SMTP id a17mr46011404wro.392.1574890040745; Wed, 27 Nov 2019 13:27:20 -0800 (PST) Received: from [10.0.0.144] (bzq-79-179-17-120.red.bezeqint.net. [79.179.17.120]) by smtp.gmail.com with ESMTPSA id s8sm7732087wmc.39.2019.11.27.13.27.18 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 27 Nov 2019 13:27:20 -0800 (PST) User-Agent: Microsoft-MacOutlook/10.1f.0.191110 Date: Wed, 27 Nov 2019 23:27:18 +0200 From: Yaron Sheffer To: Mike Jones , Laurence Lundblade , Benjamin Kaduk CC: "rats@ietf.org" , Hannes Tschofenig Message-ID: <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> Thread-Topic: [Rats] [EXTERNAL] Re: EAT IANA registry References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3657742039_1079765013" Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 21:27:24 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3657742039_1079765013 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Hi Mike, =20 To me this is a perfect counter-example: it is so generic as to be non-reus= able. When used in an attestation, the verifier will want to have well defin= ed syntax and semantics for what is attested, in this case a certain transac= tion. Here we don=E2=80=99t know what kind of a transaction this is (semantics) an= d how to interpret the transaction identifier (syntax). =20 If some particular environment wants to define claims for a particular, pri= vate kind of transaction, let=E2=80=99s make it easy for them to define their own,= very specific foobar-transaction. =20 Thanks, =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron =20 From: Mike Jones Date: Wednesday, November 27, 2019 at 23:04 To: Yaron Sheffer , Laurence Lundblade , Benjamin Kaduk Cc: "rats@ietf.org" , Hannes Tschofenig Subject: RE: [Rats] [EXTERNAL] Re: EAT IANA registry =20 The point of having a common JWT Claims registry is to enable future specif= ications to benefit from reusing applicable claims registered by past specif= ications. For instance, the Security Event Token [RFC 8417] specification r= ecently registered this general-purpose claim: o Claim Name: "txn" o Claim Description: Transaction Identifier o Change Controller: IESG o Specification Document(s): Section 2.2 of [RFC8417] =20 That made it available to EAT and other future specifications using JWTs. = If it had instead put it into its own registry, the potential for reuse woul= d have been lost. =20 Let=E2=80=99s likewise let future specs benefit from EAT-defined claims by puttin= g them in the normal IANA JWT Claims registry. =20 -- Mike =20 From: Yaron Sheffer =20 Sent: Wednesday, November 27, 2019 7:54 AM To: Laurence Lundblade ; Benjamin Kaduk Cc: Mike Jones ; rats@ietf.org; Hannes Tschofe= nig Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry =20 To put it into perspective, there are already 57 claims registered [1]. So = even if 7 claims overlap, this is a relatively *small* number. IMO there is = high value in a separate namespace for EAT claims, and the standard way to c= reate such a namespace in JSON is exactly as Ben is proposing. =20 Thanks, Yaron =20 [1] https://www.iana.org/assignments/jwt/jwt.xhtml =20 From: Laurence Lundblade Date: Wednesday, November 27, 2019 at 06:39 To: Benjamin Kaduk Cc: Mike Jones , Yaron Sheffe= r , "rats@ietf.org" , Hannes Tschofeni= g Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry =20 =20 On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk wrote: =20 ...but I'm not sure that "avoiding duplicates" would apply to a proposal that makes a single JWT/CWT claim for "EAT data" and puts the attestation claims in a map as the value for that "EAT data" claim. What existing JWT/CWT claims would duplicate the potential contents of the EAT data fields? =20 That is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT claim th= at is a map. Other=E2=80=99s have mentioned it to me. It would let EAT re use the = most compact integer CBOR integer labels. =20 Right now we re use the following claims from JWT or CWT by normative refer= ence: - nonce - Token ID cti/jti - Time stamp (iat) =20 Also these JWT or CWT seem either likely or possible use in EAT: - cnf (proof of possession of key) - iss Issuer - expiration - not before =20 That=E2=80=99s a fairly large overlap which makes me disinclined to putting all o= f EAT into one map that is one JWT/CWT claim, separating EAT claims from CWT= /JWT claims. =20 I=E2=80=99m no OAuth expert, but I wonder if some of the EAT claims might be usef= ul for other than EAT tokens, another reason not to keep them separate. =20 I suspect we=E2=80=99re going to find at least one more use for a signed map of l= abel-value pairs in the next few years that would be able to re use at least= some of these claims =E2=80=94 another reason to keep them in the same space. =20 LL =20 =20 =20 =20 =20 =20 --B_3657742039_1079765013 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

Hi Mike,

&nb= sp;

To me this is a perfect counter-example: it = is so generic as to be non-reusable. When used in an attestation, the verifi= er will want to have well defined syntax and semantics for what is attested,= in this case a certain transaction. Here we don=E2=80=99t know what kind of a tra= nsaction this is (semantics) and how to interpret the transaction identifier= (syntax).

 

If some particular environment wants to define claims for a particul= ar, private kind of transaction, let=E2=80=99s make it easy for them to define the= ir own, very specific foobar-transaction.

<= o:p> 

Thanks,

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Yaron

 

From: Mi= ke Jones <Michael.Jones@microsoft.com>
Date: Wednesday, Nove= mber 27, 2019 at 23:04
To: Yaron Sheffer <yaronf.ietf@gmail.com= >, Laurence Lundblade <lgl@island-resort.com>, Benjamin Kaduk <k= aduk@mit.edu>
Cc: "rats@ietf.org" <rats@ietf.org&g= t;, Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Subject: R= E: [Rats] [EXTERNAL] Re: EAT IANA registry

<= p class=3DMsoNormal> 

The point of having a common JWT Claims registry is to enabl= e future specifications to benefit from reusing applicable claims registered= by past specifications.  For instance, the Security Event Token [RFC 8417] specification recentl= y registered this general-purpose claim:

 &= nbsp; o  Claim Name: "txn"

 =   o  Claim Description: Transaction Identifier

   o  Change Controller: IESG

<= p class=3DMsoNormal>   o  Specification Document(s): Section 2.2 of [RFC8417]

 

That made it avail= able to EAT and other future specifications using JWTs.  If it had inst= ead put it into its own registry, the potential for reuse would have been lo= st.

&nbs= p;

Let=E2=80= =99s likewise let future specs benefit from EAT-defined claims by putting them= in the normal IANA JWT Claims registry.

 

       &n= bsp;            =             &nbs= p;            &n= bsp;         -- Mike

 

From: Yaron Sheffer <yaronf.iet= f@gmail.com>
Sent: Wednesday, November 27, 2019 7:54 AM
= To: Laurence Lundblade <lgl@island-resort.com>; Benjamin Kaduk <= ;kaduk@mit.edu>
Cc: Mike Jones <Michael.Jones@microsoft.com&= gt;; rats@ietf.org; Hannes Tschofenig <Hannes.Tschofenig@arm.com>
<= b>Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry

 

To put i= t into perspective, there are already 57 claims registered [1]. So even if 7= claims overlap, this is a relatively *small* number. IMO there is hi= gh value in a separate namespace for EAT claims, and the standard way to cre= ate such a namespace in JSON is exactly as Ben is proposing.

<= p class=3DMsoNormal> 

Thanks,=

         = ;       Yaron

 

[1] https://www.iana.org/assignments/jwt/jwt.xhtml=

 

From: Laurence Lundblade <lgl@island-resort.com>
Date: Wednesday,= November 27, 2019 at 06:39
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Mike Jones <Michael.Jones=3D40microso= ft.com@dmarc.ietf.org>, Yaron Sheffer <yaronf.ietf@gmail.com>, "rats@ietf.org" <rats@ietf.org= >, Hannes Tschofenig <H= annes.Tschofenig@arm.com>
Subject: Re: [Rats] [EXTERNAL] Re= : EAT IANA registry

 = ;

 

On N= ov 26, 2019, at 7:19 PM, Benjamin Kaduk <k= aduk@mit.edu> wrote:

 

...but I'm not sure that "avoiding duplicates"
woul= d apply to a proposal that makes a single JWT/CWT claim for "EAT data&q= uot;
and puts the attestation claims in a map as the value for that "= ;EAT data"
claim.  What existing JWT/CWT claims would duplicate= the potential contents
of the EAT data fields?

 

That is an interesting thought =E2=80=94 put all of EAT into one JWT/CWT = claim that is a map. Other=E2=80=99s have mentioned it to me. It would let EAT re = use the most compact integer CBOR integer labels.

<= p class=3DMsoNormal> 

Right n= ow we re use the following claims from JWT or CWT by normative reference:

- nonce

<= p class=3DMsoNormal>- Token ID cti/jti

- Time stamp (iat)

 

Also these JWT or CWT seem either= likely or possible use in EAT:

= - cnf (proof of possession of key)

- iss Issuer

- expiration

- not before

 

Tha= t=E2=80=99s a fairly large overlap which makes me disinclined to putting all of EA= T into one map that is one JWT/CWT claim, separating EAT claims from CWT/JWT= claims.

 

I=E2=80=99m no OAuth expert, but I wonder if some of t= he EAT claims might be useful for other than EAT tokens, another reason not = to keep them separate.

 

I suspect we=E2=80=99re going to find at= least one more use for a signed map of label-value pairs in the next few ye= ars that would be able to re use at least some of these claims =E2=80=94 another r= eason to keep them in the same space.

 

LL

 

 

 

<= /div>

 

 

 

=
--B_3657742039_1079765013-- From nobody Wed Nov 27 14:22:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E370120ACB for ; Wed, 27 Nov 2019 14:22:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 697Qb2AAY3hN for ; Wed, 27 Nov 2019 14:22:51 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650136.outbound.protection.outlook.com [40.107.65.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1EAC1200E3 for ; Wed, 27 Nov 2019 14:22:50 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fWlG1vrjsfXN1+0DuE+IG1ANxjttBfO1ZDoXDAO9qUqeT9xVvZ8SypyielKLD8ZSD+8Mrim7mtbCqYgVEXa4CfvxvKT1VYDIORS1ao3Egk8r9vReMVsmacjxvg1KzsdA2jEPzQhpxNTkIEHxeJHTkEFXrIov4QfjLJA7gTZGKeIhg9Nb+6WOfAIBvDQAYRivda8SD2xBsbhvh03J+EBI083ZpUvRVV2Ai+cun7Ms5+Mx2Iz7i2zP3u7jT6pN9WMPQegFLYnB0peh8zT/tmxbQSRBwYvkNLnU46nPQoOQPmYOewyxRm4FvCxeNbqPf5GO1syqK/K+L14RCFoM7WNobQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=u/hPI7sT/cU/nygyhyjG89s13nfpxBV8sQ55qqR2faI=; b=IP3uGsPNrk+lHNSL8RK8ufvuGiuSoCQ847BlFMAkbgKnR0+4qrEtpHYl1XHCKHsAlKGoojiUPNONtWmT8mNGOHr32JFMcPFElNIyWLW93KKYY6A69M5jlFL2Y3bF1XMZyAQsWwa61J7jUKktuP6KtYaPy/c0k3iFkdsJLaCVe44qLcZYwVq384T815DLRR95i62D+Gyh7oMTfWI5OwSdxNbDIDLyaEZBmV7/ZRczKaaH5wYWdWZrg2yOjjdSrELpGWH/7pR8+qcI8Q4hLMwIdvXACQG4ABCJOREbxJHwsD/BstioLgkZZvhocXmUs/EtONT+BOgrCiJMxSDPJm5wpw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=u/hPI7sT/cU/nygyhyjG89s13nfpxBV8sQ55qqR2faI=; b=c4vuGidiAMCXAleBCw77NjJ01QfgrRjuvvteNoQqsJynmUEA1jBJjH0lzp2zYL8zVgN7PzWxkNhUWmBb5G4HB5cWe7DJevaV2z0WfJMVfuTxnYAF1IrV2e9OwJfxXZlqQZ012Sn4RBJzSHMkejvhKPGhkxVsBa2jpDF7Nu+JcQU= Received: from MN2PR00MB0574.namprd00.prod.outlook.com (20.178.255.147) by MN2PR00MB0719.namprd00.prod.outlook.com (52.135.48.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2528.0; Wed, 27 Nov 2019 22:22:46 +0000 Received: from MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::9d3d:62e9:e933:bb70]) by MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::9d3d:62e9:e933:bb70%9]) with mapi id 15.20.2536.000; Wed, 27 Nov 2019 22:22:46 +0000 From: Mike Jones To: Yaron Sheffer , Laurence Lundblade , Benjamin Kaduk CC: "rats@ietf.org" , Hannes Tschofenig Thread-Topic: [Rats] [EXTERNAL] Re: EAT IANA registry Thread-Index: AQHVpNF3tjUEO7PdBkKzZ6PhH0P0Q6eeb6WAgAC8WwCAAFVuwIAAB9MAgAAOonA= Date: Wed, 27 Nov 2019 22:22:46 +0000 Message-ID: References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> In-Reply-To: <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=4629ea18-166e-4df5-b648-0000b5f86457; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-11-27T22:19:41Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.84.162] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f621063f-1252-49b8-deeb-08d773885484 x-ms-traffictypediagnostic: MN2PR00MB0719: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-forefront-prvs: 023495660C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(54094003)(189003)(199004)(66446008)(54896002)(66556008)(8990500004)(81156014)(76116006)(66476007)(3846002)(6116002)(7696005)(561944003)(606006)(54906003)(229853002)(8936002)(790700001)(8676002)(64756008)(110136005)(6436002)(102836004)(2906002)(186003)(498600001)(256004)(14454004)(81166006)(53546011)(6506007)(11346002)(76176011)(10290500003)(14444005)(71190400001)(446003)(99286004)(71200400001)(6246003)(26005)(25786009)(33656002)(966005)(9686003)(55016002)(6306002)(2171002)(4326008)(74316002)(52536014)(86362001)(7736002)(10090500001)(236005)(66066001)(5660300002)(22452003)(66946007); DIR:OUT; SFP:1102; SCL:1; SRVR:MN2PR00MB0719; H:MN2PR00MB0574.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: i/f3n8qb6f/KDEwwGaJlLnTwGXR1MAp5BShwJA4Il+5fsn9gOZgIlBgdtevTL/dEnxkGuavbZPIbw8+4qKrvHZkZ6cau1iHc/NLtmYMNfb4upnfvEi9e5RX4/EYXyMCKEbiYa+jkdgWLJNuSMUEQopOOyXtvkMnyauH74Z6dwBQBwbLsmjpOLCuJLAmqXeiQkKhLkXlgIfmnRBxmthEStpdDZVOv2uPnJDN0uX5kxLJkH+tf3oo3PEXPmoMy2GG2iT4JKZVq2IwxUrHvOGtJUl+bgVJF36wMqYWN4BbikTsc9RkuEAaiC+vSmvKKQnsV02f2kBTJh60Oq/IjhU85yrr5YPwK1Qw2x6SgT5v+XtP4QsnYxYQG7OPCY3aIO5U3OP1+fRWDuPMIwZ8uIvvdr3NW3Xy3XR+VC72pWEqlMrkYZNx4/cri9ELdJG2DWQLKnBglXodUvKsRwYR+NrSw1PVI+0jWdZE1/2MGGQppvaw= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MN2PR00MB057409B95526972BD49DDDA9F5440MN2PR00MB0574namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f621063f-1252-49b8-deeb-08d773885484 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Nov 2019 22:22:46.5046 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ogM9RI9yM4mOUnDtoJraZA6j0gJ4tiOHis28mbppjtNNspyqgmY7qcE0eSALBfmRcYcrxkcSS0HvtU5Tkb8nNg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR00MB0719 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:22:54 -0000 --_000_MN2PR00MB057409B95526972BD49DDDA9F5440MN2PR00MB0574namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBkaXNhZ3JlZS4gIElmIEVBVCBKV1RzIG5lZWRlZCBhIHRyYW5zYWN0aW9uIElELCBpdCB3b3Vs ZCBiZSBsb2dpY2FsIGFuZCBoZWxwZnVsIHRvIHNpbXBseSByZXVzZSB0aGUg4oCcdHhu4oCdIGNs YWltIHRoYXQgYWxyZWFkeSBleGlzdHMsIHJhdGhlciBkZWZpbmluZyBpdHMgb3duLiAgKEkgZG9u 4oCZdCBrbm93IHdoZXRoZXIgaXQgbmVlZHMgb25lIG9yIG5vdCwgYnV0IHRoZSBleGFtcGxlIGlz IHN0aWxsIHZhbGlkLikgIFRoYXTigJlzIHBvc3NpYmxlIGJlY2F1c2UgaXTigJlzIGluIHRoZSBy ZWdpc3RyeS4NCg0KVGhpcyBpcyBqdXN0IGxpa2UgRUFUIGNhbiByZXVzZSB0aGUg4oCcaWF04oCd IChpc3N1ZWQgYXQpIGNsYWltLCBiZWNhdXNlIGl04oCZcyBpbiB0aGUgSUFOQSBKV1QgQ2xhaW1z IHJlZ2lzdHJ5LiAgSWYgaXQgd2VyZW7igJl0LCBFQVQgd291bGQgaGF2ZSB0byByZWludmVudCB0 aGUgd2hlZWwgZm9yIGFsbCBzdWNoIGNsYWltcywgd2hpY2ggZGVmZWF0cyB0aGUgcHVycG9zZSBv ZiBoYXZpbmcgcmVnaXN0cmllcy4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogWWFyb24gU2hlZmZlciA8eWFy b25mLmlldGZAZ21haWwuY29tPg0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSAx OjI3IFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPjsgTGF1 cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+OyBCZW5qYW1pbiBLYWR1ayA8 a2FkdWtAbWl0LmVkdT4NCkNjOiByYXRzQGlldGYub3JnOyBIYW5uZXMgVHNjaG9mZW5pZyA8SGFu bmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4NClN1YmplY3Q6IFJlOiBbUmF0c10gW0VYVEVSTkFMXSBS ZTogRUFUIElBTkEgcmVnaXN0cnkNCg0KSGkgTWlrZSwNCg0KVG8gbWUgdGhpcyBpcyBhIHBlcmZl Y3QgY291bnRlci1leGFtcGxlOiBpdCBpcyBzbyBnZW5lcmljIGFzIHRvIGJlIG5vbi1yZXVzYWJs ZS4gV2hlbiB1c2VkIGluIGFuIGF0dGVzdGF0aW9uLCB0aGUgdmVyaWZpZXIgd2lsbCB3YW50IHRv IGhhdmUgd2VsbCBkZWZpbmVkIHN5bnRheCBhbmQgc2VtYW50aWNzIGZvciB3aGF0IGlzIGF0dGVz dGVkLCBpbiB0aGlzIGNhc2UgYSBjZXJ0YWluIHRyYW5zYWN0aW9uLiBIZXJlIHdlIGRvbuKAmXQg a25vdyB3aGF0IGtpbmQgb2YgYSB0cmFuc2FjdGlvbiB0aGlzIGlzIChzZW1hbnRpY3MpIGFuZCBo b3cgdG8gaW50ZXJwcmV0IHRoZSB0cmFuc2FjdGlvbiBpZGVudGlmaWVyIChzeW50YXgpLg0KDQpJ ZiBzb21lIHBhcnRpY3VsYXIgZW52aXJvbm1lbnQgd2FudHMgdG8gZGVmaW5lIGNsYWltcyBmb3Ig YSBwYXJ0aWN1bGFyLCBwcml2YXRlIGtpbmQgb2YgdHJhbnNhY3Rpb24sIGxldOKAmXMgbWFrZSBp dCBlYXN5IGZvciB0aGVtIHRvIGRlZmluZSB0aGVpciBvd24sIHZlcnkgc3BlY2lmaWMgZm9vYmFy LXRyYW5zYWN0aW9uLg0KDQpUaGFua3MsDQogICAgICAgICAgICAgICAgWWFyb24NCg0KRnJvbTog TWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPG1haWx0bzpNaWNoYWVsLkpv bmVzQG1pY3Jvc29mdC5jb20+Pg0KRGF0ZTogV2VkbmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSBh dCAyMzowNA0KVG86IFlhcm9uIFNoZWZmZXIgPHlhcm9uZi5pZXRmQGdtYWlsLmNvbTxtYWlsdG86 eWFyb25mLmlldGZAZ21haWwuY29tPj4sIExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiwgQmVuamFtaW4gS2FkdWsg PGthZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+Pg0KQ2M6ICJyYXRzQGlldGYub3Jn PG1haWx0bzpyYXRzQGlldGYub3JnPiIgPHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5v cmc+PiwgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRv Okhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+Pg0KU3ViamVjdDogUkU6IFtSYXRzXSBbRVhURVJO QUxdIFJlOiBFQVQgSUFOQSByZWdpc3RyeQ0KDQpUaGUgcG9pbnQgb2YgaGF2aW5nIGEgY29tbW9u IEpXVCBDbGFpbXMgcmVnaXN0cnkgaXMgdG8gZW5hYmxlIGZ1dHVyZSBzcGVjaWZpY2F0aW9ucyB0 byBiZW5lZml0IGZyb20gcmV1c2luZyBhcHBsaWNhYmxlIGNsYWltcyByZWdpc3RlcmVkIGJ5IHBh c3Qgc3BlY2lmaWNhdGlvbnMuICBGb3IgaW5zdGFuY2UsIHRoZSBTZWN1cml0eSBFdmVudCBUb2tl biBbUkZDIDg0MTc8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv bS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGcmZjODQxNyZkYXRh PTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2FkODMzY2MwYzJkZTRh NGEzMzViMDhkNzczODA5NmNjJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0Mx JTdDMCU3QzYzNzEwNDg2ODQzMzM4NDE0MSZzZGF0YT1aQUYwZmZmcFEwU3NDUFpqaHZCcUdZRnp1 UE83WTdnUThEZmlVVjRwUHY0JTNEJnJlc2VydmVkPTA+XSBzcGVjaWZpY2F0aW9uIHJlY2VudGx5 IHJlZ2lzdGVyZWQgdGhpcyBnZW5lcmFsLXB1cnBvc2UgY2xhaW06DQogICBvICBDbGFpbSBOYW1l OiAidHhuIg0KICAgbyAgQ2xhaW0gRGVzY3JpcHRpb246IFRyYW5zYWN0aW9uIElkZW50aWZpZXIN CiAgIG8gIENoYW5nZSBDb250cm9sbGVyOiBJRVNHDQogICBvICBTcGVjaWZpY2F0aW9uIERvY3Vt ZW50KHMpOiBTZWN0aW9uIDIuMiBvZiBbUkZDODQxN108aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmcl MkZodG1sJTJGcmZjODQxNyUyM3NlY3Rpb24tMi4yJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9u ZXMlNDBtaWNyb3NvZnQuY29tJTdDYWQ4MzNjYzBjMmRlNGE0YTMzNWIwOGQ3NzM4MDk2Y2MlN0M3 MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MTA0ODY4NDMzMzk0 MDk2JnNkYXRhPUx1a0E0ZlQ5c2tzaHFaWCUyQnFBJTJGU3dBVXZOeGF6QktHZFkweDlocVVLandF JTNEJnJlc2VydmVkPTA+DQoNClRoYXQgbWFkZSBpdCBhdmFpbGFibGUgdG8gRUFUIGFuZCBvdGhl ciBmdXR1cmUgc3BlY2lmaWNhdGlvbnMgdXNpbmcgSldUcy4gIElmIGl0IGhhZCBpbnN0ZWFkIHB1 dCBpdCBpbnRvIGl0cyBvd24gcmVnaXN0cnksIHRoZSBwb3RlbnRpYWwgZm9yIHJldXNlIHdvdWxk IGhhdmUgYmVlbiBsb3N0Lg0KDQpMZXTigJlzIGxpa2V3aXNlIGxldCBmdXR1cmUgc3BlY3MgYmVu ZWZpdCBmcm9tIEVBVC1kZWZpbmVkIGNsYWltcyBieSBwdXR0aW5nIHRoZW0gaW4gdGhlIG5vcm1h bCBJQU5BIEpXVCBDbGFpbXMgcmVnaXN0cnkuDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IFlhcm9uIFNoZWZm ZXIgPHlhcm9uZi5pZXRmQGdtYWlsLmNvbTxtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tPj4N ClNlbnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgMjcsIDIwMTkgNzo1NCBBTQ0KVG86IExhdXJlbmNl IEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29y dC5jb20+PjsgQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5l ZHU+Pg0KQ2M6IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86 TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj47IHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNA aWV0Zi5vcmc+OyBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxt YWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+DQpTdWJqZWN0OiBSZTogW1JhdHNdIFtF WFRFUk5BTF0gUmU6IEVBVCBJQU5BIHJlZ2lzdHJ5DQoNClRvIHB1dCBpdCBpbnRvIHBlcnNwZWN0 aXZlLCB0aGVyZSBhcmUgYWxyZWFkeSA1NyBjbGFpbXMgcmVnaXN0ZXJlZCBbMV0uIFNvIGV2ZW4g aWYgNyBjbGFpbXMgb3ZlcmxhcCwgdGhpcyBpcyBhIHJlbGF0aXZlbHkgKnNtYWxsKiBudW1iZXIu IElNTyB0aGVyZSBpcyBoaWdoIHZhbHVlIGluIGEgc2VwYXJhdGUgbmFtZXNwYWNlIGZvciBFQVQg Y2xhaW1zLCBhbmQgdGhlIHN0YW5kYXJkIHdheSB0byBjcmVhdGUgc3VjaCBhIG5hbWVzcGFjZSBp biBKU09OIGlzIGV4YWN0bHkgYXMgQmVuIGlzIHByb3Bvc2luZy4NCg0KVGhhbmtzLA0KICAgICAg ICAgICAgICAgIFlhcm9uDQoNClsxXSBodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9q d3Qvand0LnhodG1sPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5j b20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pYW5hLm9yZyUyRmFzc2lnbm1lbnRzJTJGand0JTJG and0LnhodG1sJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdD YWQ4MzNjYzBjMmRlNGE0YTMzNWIwOGQ3NzM4MDk2Y2MlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MTA0ODY4NDMzMzk0MDk2JnNkYXRhPTJ6bU02djQ3JTJC UmclMkZIZCUyRlpZbFR6VUd0THp1cUVGbCUyRkh6JTJGd3VLdDNUOHc0JTNEJnJlc2VydmVkPTA+ DQoNCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0 bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+Pg0KRGF0ZTogV2VkbmVzZGF5LCBOb3ZlbWJlciAyNywg MjAxOSBhdCAwNjozOQ0KVG86IEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzpr YWR1a0BtaXQuZWR1Pj4NCkNjOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0 LmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86TWljaGFlbC5Kb25lcz00MG1pY3Jvc29mdC5jb21A ZG1hcmMuaWV0Zi5vcmc+PiwgWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1h aWx0bzp5YXJvbmYuaWV0ZkBnbWFpbC5jb20+PiwgInJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNA aWV0Zi5vcmc+IiA8cmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4+LCBIYW5uZXMg VHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hv ZmVuaWdAYXJtLmNvbT4+DQpTdWJqZWN0OiBSZTogW1JhdHNdIFtFWFRFUk5BTF0gUmU6IEVBVCBJ QU5BIHJlZ2lzdHJ5DQoNCg0KT24gTm92IDI2LCAyMDE5LCBhdCA3OjE5IFBNLCBCZW5qYW1pbiBL YWR1ayA8a2FkdWtAbWl0LmVkdTxtYWlsdG86a2FkdWtAbWl0LmVkdT4+IHdyb3RlOg0KDQouLi5i dXQgSSdtIG5vdCBzdXJlIHRoYXQgImF2b2lkaW5nIGR1cGxpY2F0ZXMiDQp3b3VsZCBhcHBseSB0 byBhIHByb3Bvc2FsIHRoYXQgbWFrZXMgYSBzaW5nbGUgSldUL0NXVCBjbGFpbSBmb3IgIkVBVCBk YXRhIg0KYW5kIHB1dHMgdGhlIGF0dGVzdGF0aW9uIGNsYWltcyBpbiBhIG1hcCBhcyB0aGUgdmFs dWUgZm9yIHRoYXQgIkVBVCBkYXRhIg0KY2xhaW0uICBXaGF0IGV4aXN0aW5nIEpXVC9DV1QgY2xh aW1zIHdvdWxkIGR1cGxpY2F0ZSB0aGUgcG90ZW50aWFsIGNvbnRlbnRzDQpvZiB0aGUgRUFUIGRh dGEgZmllbGRzPw0KDQpUaGF0IGlzIGFuIGludGVyZXN0aW5nIHRob3VnaHQg4oCUIHB1dCBhbGwg b2YgRUFUIGludG8gb25lIEpXVC9DV1QgY2xhaW0gdGhhdCBpcyBhIG1hcC4gT3RoZXLigJlzIGhh dmUgbWVudGlvbmVkIGl0IHRvIG1lLiBJdCB3b3VsZCBsZXQgRUFUIHJlIHVzZSB0aGUgbW9zdCBj b21wYWN0IGludGVnZXIgQ0JPUiBpbnRlZ2VyIGxhYmVscy4NCg0KUmlnaHQgbm93IHdlIHJlIHVz ZSB0aGUgZm9sbG93aW5nIGNsYWltcyBmcm9tIEpXVCBvciBDV1QgYnkgbm9ybWF0aXZlIHJlZmVy ZW5jZToNCi0gbm9uY2UNCi0gVG9rZW4gSUQgY3RpL2p0aQ0KLSBUaW1lIHN0YW1wIChpYXQpDQoN CkFsc28gdGhlc2UgSldUIG9yIENXVCBzZWVtIGVpdGhlciBsaWtlbHkgb3IgcG9zc2libGUgdXNl IGluIEVBVDoNCi0gY25mIChwcm9vZiBvZiBwb3NzZXNzaW9uIG9mIGtleSkNCi0gaXNzIElzc3Vl cg0KLSBleHBpcmF0aW9uDQotIG5vdCBiZWZvcmUNCg0KVGhhdOKAmXMgYSBmYWlybHkgbGFyZ2Ug b3ZlcmxhcCB3aGljaCBtYWtlcyBtZSBkaXNpbmNsaW5lZCB0byBwdXR0aW5nIGFsbCBvZiBFQVQg aW50byBvbmUgbWFwIHRoYXQgaXMgb25lIEpXVC9DV1QgY2xhaW0sIHNlcGFyYXRpbmcgRUFUIGNs YWltcyBmcm9tIENXVC9KV1QgY2xhaW1zLg0KDQpJ4oCZbSBubyBPQXV0aCBleHBlcnQsIGJ1dCBJ IHdvbmRlciBpZiBzb21lIG9mIHRoZSBFQVQgY2xhaW1zIG1pZ2h0IGJlIHVzZWZ1bCBmb3Igb3Ro ZXIgdGhhbiBFQVQgdG9rZW5zLCBhbm90aGVyIHJlYXNvbiBub3QgdG8ga2VlcCB0aGVtIHNlcGFy YXRlLg0KDQpJIHN1c3BlY3Qgd2XigJlyZSBnb2luZyB0byBmaW5kIGF0IGxlYXN0IG9uZSBtb3Jl IHVzZSBmb3IgYSBzaWduZWQgbWFwIG9mIGxhYmVsLXZhbHVlIHBhaXJzIGluIHRoZSBuZXh0IGZl dyB5ZWFycyB0aGF0IHdvdWxkIGJlIGFibGUgdG8gcmUgdXNlIGF0IGxlYXN0IHNvbWUgb2YgdGhl c2UgY2xhaW1zIOKAlCBhbm90aGVyIHJlYXNvbiB0byBrZWVwIHRoZW0gaW4gdGhlIHNhbWUgc3Bh Y2UuDQoNCkxMDQoNCg0KDQoNCg0KDQo= --_000_MN2PR00MB057409B95526972BD49DDDA9F5440MN2PR00MB0574namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsN CglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVu ZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYw O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+SSBkaXNhZ3JlZS4mbmJz cDsgSWYgRUFUIEpXVHMgbmVlZGVkIGEgdHJhbnNhY3Rpb24gSUQsIGl0IHdvdWxkIGJlIGxvZ2lj YWwgYW5kIGhlbHBmdWwgdG8gc2ltcGx5IHJldXNlIHRoZSDigJx0eG7igJ0gY2xhaW0gdGhhdCBh bHJlYWR5IGV4aXN0cywgcmF0aGVyIGRlZmluaW5nIGl0cyBvd24uJm5ic3A7IChJIGRvbuKAmXQg a25vdyB3aGV0aGVyIGl0IG5lZWRzIG9uZSBvciBub3QsIGJ1dA0KIHRoZSBleGFtcGxlIGlzIHN0 aWxsIHZhbGlkLikmbmJzcDsgVGhhdOKAmXMgcG9zc2libGUgYmVjYXVzZSBpdOKAmXMgaW4gdGhl IHJlZ2lzdHJ5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhpcyBpcyBq dXN0IGxpa2UgRUFUIGNhbiByZXVzZSB0aGUg4oCcaWF04oCdIChpc3N1ZWQgYXQpIGNsYWltLCBi ZWNhdXNlIGl04oCZcyBpbiB0aGUgSUFOQSBKV1QgQ2xhaW1zIHJlZ2lzdHJ5LiZuYnNwOyBJZiBp dCB3ZXJlbuKAmXQsIEVBVCB3b3VsZCBoYXZlIHRvIHJlaW52ZW50IHRoZSB3aGVlbCBmb3IgYWxs IHN1Y2ggY2xhaW1zLCB3aGljaCBkZWZlYXRzIHRoZSBwdXJwb3NlIG9mDQogaGF2aW5nIHJlZ2lz dHJpZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IFlhcm9uIFNoZWZmZXIgJmx0O3lhcm9u Zi5pZXRmQGdtYWlsLmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgTm92ZW1i ZXIgMjcsIDIwMTkgMToyNyBQTTxicj4NCjxiPlRvOjwvYj4gTWlrZSBKb25lcyAmbHQ7TWljaGFl bC5Kb25lc0BtaWNyb3NvZnQuY29tJmd0OzsgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNs YW5kLXJlc29ydC5jb20mZ3Q7OyBCZW5qYW1pbiBLYWR1ayAmbHQ7a2FkdWtAbWl0LmVkdSZndDs8 YnI+DQo8Yj5DYzo8L2I+IHJhdHNAaWV0Zi5vcmc7IEhhbm5lcyBUc2Nob2ZlbmlnICZsdDtIYW5u ZXMuVHNjaG9mZW5pZ0Bhcm0uY29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNd IFtFWFRFUk5BTF0gUmU6IEVBVCBJQU5BIHJlZ2lzdHJ5PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5IaSBNaWtlLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UbyBtZSB0 aGlzIGlzIGEgcGVyZmVjdCBjb3VudGVyLWV4YW1wbGU6IGl0IGlzIHNvIGdlbmVyaWMgYXMgdG8g YmUgbm9uLXJldXNhYmxlLiBXaGVuIHVzZWQgaW4gYW4gYXR0ZXN0YXRpb24sIHRoZSB2ZXJpZmll ciB3aWxsIHdhbnQgdG8gaGF2ZSB3ZWxsIGRlZmluZWQgc3ludGF4IGFuZCBzZW1hbnRpY3MgZm9y IHdoYXQgaXMgYXR0ZXN0ZWQsIGluIHRoaXMgY2FzZSBhIGNlcnRhaW4gdHJhbnNhY3Rpb24uIEhl cmUNCiB3ZSBkb27igJl0IGtub3cgd2hhdCBraW5kIG9mIGEgdHJhbnNhY3Rpb24gdGhpcyBpcyAo c2VtYW50aWNzKSBhbmQgaG93IHRvIGludGVycHJldCB0aGUgdHJhbnNhY3Rpb24gaWRlbnRpZmll ciAoc3ludGF4KS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SWYgc29tZSBwYXJ0aWN1bGFyIGVu dmlyb25tZW50IHdhbnRzIHRvIGRlZmluZSBjbGFpbXMgZm9yIGEgcGFydGljdWxhciwgcHJpdmF0 ZSBraW5kIG9mIHRyYW5zYWN0aW9uLCBsZXTigJlzIG1ha2UgaXQgZWFzeSBmb3IgdGhlbSB0byBk ZWZpbmUgdGhlaXIgb3duLCB2ZXJ5IHNwZWNpZmljIGZvb2Jhci10cmFuc2FjdGlvbi48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFlhcm9uPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj5NaWtlIEpvbmVzICZsdDs8YSBocmVmPSJt YWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5XZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAy MDE5IGF0IDIzOjA0PGJyPg0KPGI+VG86IDwvYj5ZYXJvbiBTaGVmZmVyICZsdDs8YSBocmVmPSJt YWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tIj55YXJvbmYuaWV0ZkBnbWFpbC5jb208L2E+Jmd0 OywgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNv cnQuY29tIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0OywgQmVuamFtaW4gS2FkdWsgJmx0 OzxhIGhyZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1Ij5rYWR1a0BtaXQuZWR1PC9hPiZndDs8YnI+ DQo8Yj5DYzogPC9iPiZxdW90OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGll dGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNA aWV0Zi5vcmc8L2E+Jmd0OywgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpI YW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZn dDs8YnI+DQo8Yj5TdWJqZWN0OiA8L2I+UkU6IFtSYXRzXSBbRVhURVJOQUxdIFJlOiBFQVQgSUFO QSByZWdpc3RyeTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhlIHBvaW50IG9mIGhhdmluZyBh IGNvbW1vbiBKV1QgQ2xhaW1zIHJlZ2lzdHJ5IGlzIHRvIGVuYWJsZSBmdXR1cmUgc3BlY2lmaWNh dGlvbnMgdG8gYmVuZWZpdCBmcm9tIHJldXNpbmcgYXBwbGljYWJsZSBjbGFpbXMgcmVnaXN0ZXJl ZCBieSBwYXN0IHNwZWNpZmljYXRpb25zLiZuYnNwOyBGb3IgaW5zdGFuY2UsIHRoZSBTZWN1cml0 eSBFdmVudCBUb2tlbiBbPGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlv bi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJG cmZjODQxNyZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20l N0NhZDgzM2NjMGMyZGU0YTRhMzM1YjA4ZDc3MzgwOTZjYyU3QzcyZjk4OGJmODZmMTQxYWY5MWFi MmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcxMDQ4Njg0MzMzODQxNDEmYW1wO3NkYXRhPVpBRjBm ZmZwUTBTc0NQWmpodkJxR1lGenVQTzdZN2dROERmaVVWNHBQdjQlM0QmYW1wO3Jlc2VydmVkPTAi PlJGQw0KIDg0MTc8L2E+XSBzcGVjaWZpY2F0aW9uIHJlY2VudGx5IHJlZ2lzdGVyZWQgdGhpcyBn ZW5lcmFsLXB1cnBvc2UgY2xhaW06PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrO2Jh Y2tncm91bmQ6d2hpdGUiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IENsYWltIE5hbWU6ICZxdW90O3R4 biZxdW90Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRl Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBDbGFpbSBEZXNjcmlwdGlvbjogVHJhbnNhY3Rpb24gSWRl bnRpZmllcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRl Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBDaGFuZ2UgQ29udHJvbGxlcjogSUVTRzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDsmbmJzcDsgbyZu YnNwOyBTcGVjaWZpY2F0aW9uIERvY3VtZW50KHMpOg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy RnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzg0MTclMjNzZWN0aW9uLTIuMiZhbXA7ZGF0YT0w MiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0NhZDgzM2NjMGMyZGU0YTRh MzM1YjA4ZDc3MzgwOTZjYyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzcxMDQ4Njg0MzMzOTQwOTYmYW1wO3NkYXRhPUx1a0E0ZlQ5c2tzaHFaWCUyQnFBJTJG U3dBVXZOeGF6QktHZFkweDlocVVLandFJTNEJmFtcDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA2NkNDIj5TZWN0 aW9uJm5ic3A7Mi4yDQogb2YgW1JGQzg0MTddPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+VGhhdCBtYWRlIGl0IGF2YWlsYWJsZSB0byBFQVQgYW5kIG90aGVyIGZ1dHVy ZSBzcGVjaWZpY2F0aW9ucyB1c2luZyBKV1RzLiZuYnNwOyBJZiBpdCBoYWQgaW5zdGVhZCBwdXQg aXQgaW50byBpdHMgb3duIHJlZ2lzdHJ5LCB0aGUgcG90ZW50aWFsIGZvciByZXVzZSB3b3VsZCBo YXZlIGJlZW4gbG9zdC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPkxldOKA mXMgbGlrZXdpc2UgbGV0IGZ1dHVyZSBzcGVjcyBiZW5lZml0IGZyb20gRUFULWRlZmluZWQgY2xh aW1zIGJ5IHB1dHRpbmcgdGhlbSBpbiB0aGUgbm9ybWFsIElBTkEgSldUIENsYWltcyByZWdpc3Ry eS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt dG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gWWFyb24gU2hlZmZlciAmbHQ7PGEgaHJlZj0i bWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+eWFyb25mLmlldGZAZ21haWwuY29tPC9hPiZn dDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAyMDE5IDc6NTQg QU08YnI+DQo8Yj5Ubzo8L2I+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRv OmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDs7IEJl bmphbWluIEthZHVrICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+a2FkdWtAbWl0 LmVkdTwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBNaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWls dG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5j b208L2E+Jmd0OzsNCjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3Jn PC9hPjsgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBbRVhURVJOQUxdIFJlOiBFQVQgSUFOQSByZWdpc3RyeTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VG8gcHV0IGl0IGludG8gcGVy c3BlY3RpdmUsIHRoZXJlIGFyZSBhbHJlYWR5IDU3IGNsYWltcyByZWdpc3RlcmVkIFsxXS4gU28g ZXZlbiBpZiA3IGNsYWltcyBvdmVybGFwLCB0aGlzIGlzIGEgcmVsYXRpdmVseSAqPGI+c21hbGw8 L2I+KiBudW1iZXIuIElNTyB0aGVyZSBpcyBoaWdoIHZhbHVlIGluIGEgc2VwYXJhdGUgbmFtZXNw YWNlIGZvciBFQVQgY2xhaW1zLCBhbmQgdGhlIHN0YW5kYXJkIHdheSB0byBjcmVhdGUNCiBzdWNo IGEgbmFtZXNwYWNlIGluIEpTT04gaXMgZXhhY3RseSBhcyBCZW4gaXMgcHJvcG9zaW5nLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWWFyb248bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+WzFdIDxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3Rl Y3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pYW5hLm9yZyUyRmFzc2ln bm1lbnRzJTJGand0JTJGand0LnhodG1sJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVz JTQwbWljcm9zb2Z0LmNvbSU3Q2FkODMzY2MwYzJkZTRhNGEzMzViMDhkNzczODA5NmNjJTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzEwNDg2ODQzMzM5NDA5 NiZhbXA7c2RhdGE9MnptTTZ2NDclMkJSZyUyRkhkJTJGWllsVHpVR3RMenVxRUZsJTJGSHolMkZ3 dUt0M1Q4dzQlM0QmYW1wO3Jlc2VydmVkPTAiPg0KaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdu bWVudHMvand0L2p3dC54aHRtbDwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6 YmxhY2siPkZyb206IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29s b3I6YmxhY2siPkxhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xh bmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDs8YnI+DQo8Yj5EYXRl OiA8L2I+V2VkbmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSBhdCAwNjozOTxicj4NCjxiPlRvOiA8 L2I+QmVuamFtaW4gS2FkdWsgJmx0OzxhIGhyZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1Ij5rYWR1 a0BtaXQuZWR1PC9hPiZndDs8YnI+DQo8Yj5DYzogPC9iPk1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9 Im1haWx0bzpNaWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyI+TWlj aGFlbC5Kb25lcz00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OywgWWFyb24g U2hlZmZlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+eWFyb25m LmlldGZAZ21haWwuY29tPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYu b3JnIj5yYXRzQGlldGYub3JnPC9hPiZxdW90Ow0KICZsdDs8YSBocmVmPSJtYWlsdG86cmF0c0Bp ZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwvYT4mZ3Q7LCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEg aHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb208L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW1JhdHNdIFtFWFRFUk5B TF0gUmU6IEVBVCBJQU5BIHJlZ2lzdHJ5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE5vdiAyNiwgMjAxOSwgYXQgNzoxOSBQTSwgQmVu amFtaW4gS2FkdWsgJmx0OzxhIGhyZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1Ij5rYWR1a0BtaXQu ZWR1PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPi4uLmJ1dCBJJ20gbm90IHN1cmUgdGhhdCAmcXVvdDthdm9pZGlu ZyBkdXBsaWNhdGVzJnF1b3Q7PGJyPg0Kd291bGQgYXBwbHkgdG8gYSBwcm9wb3NhbCB0aGF0IG1h a2VzIGEgc2luZ2xlIEpXVC9DV1QgY2xhaW0gZm9yICZxdW90O0VBVCBkYXRhJnF1b3Q7PGJyPg0K YW5kIHB1dHMgdGhlIGF0dGVzdGF0aW9uIGNsYWltcyBpbiBhIG1hcCBhcyB0aGUgdmFsdWUgZm9y IHRoYXQgJnF1b3Q7RUFUIGRhdGEmcXVvdDs8YnI+DQpjbGFpbS4gJm5ic3A7V2hhdCBleGlzdGlu ZyBKV1QvQ1dUIGNsYWltcyB3b3VsZCBkdXBsaWNhdGUgdGhlIHBvdGVudGlhbCBjb250ZW50czxi cj4NCm9mIHRoZSBFQVQgZGF0YSBmaWVsZHM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYXQgaXMgYW4gaW50ZXJl c3RpbmcgdGhvdWdodCDigJQgcHV0IGFsbCBvZiBFQVQgaW50byBvbmUgSldUL0NXVCBjbGFpbSB0 aGF0IGlzIGEgbWFwLiBPdGhlcuKAmXMgaGF2ZSBtZW50aW9uZWQgaXQgdG8gbWUuIEl0IHdvdWxk IGxldCBFQVQgcmUgdXNlIHRoZSBtb3N0IGNvbXBhY3QgaW50ZWdlciBDQk9SIGludGVnZXIgbGFi ZWxzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5SaWdodCBub3cgd2UgcmUgdXNlIHRoZSBmb2xsb3dpbmcgY2xhaW1zIGZyb20gSldUIG9yIENX VCBieSBub3JtYXRpdmUgcmVmZXJlbmNlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBub25jZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBUb2tlbiBJRCBjdGkvanRpPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIFRpbWUgc3RhbXAgKGlhdCk8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QWxz byB0aGVzZSBKV1Qgb3IgQ1dUIHNlZW0gZWl0aGVyIGxpa2VseSBvciBwb3NzaWJsZSB1c2UgaW4g RUFUOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ LSBjbmYgKHByb29mIG9mIHBvc3Nlc3Npb24gb2Yga2V5KTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBpc3MgSXNzdWVyPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIGV4cGlyYXRpb248bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gbm90IGJlZm9y ZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5U aGF04oCZcyBhIGZhaXJseSBsYXJnZSBvdmVybGFwIHdoaWNoIG1ha2VzIG1lIGRpc2luY2xpbmVk IHRvIHB1dHRpbmcgYWxsIG9mIEVBVCBpbnRvIG9uZSBtYXAgdGhhdCBpcyBvbmUgSldUL0NXVCBj bGFpbSwgc2VwYXJhdGluZyBFQVQgY2xhaW1zIGZyb20gQ1dUL0pXVCBjbGFpbXMuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJltIG5vIE9B dXRoIGV4cGVydCwgYnV0IEkgd29uZGVyIGlmIHNvbWUgb2YgdGhlIEVBVCBjbGFpbXMgbWlnaHQg YmUgdXNlZnVsIGZvciBvdGhlciB0aGFuIEVBVCB0b2tlbnMsIGFub3RoZXIgcmVhc29uIG5vdCB0 byBrZWVwIHRoZW0gc2VwYXJhdGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgc3VzcGVjdCB3ZeKAmXJlIGdvaW5nIHRvIGZpbmQgYXQgbGVh c3Qgb25lIG1vcmUgdXNlIGZvciBhIHNpZ25lZCBtYXAgb2YgbGFiZWwtdmFsdWUgcGFpcnMgaW4g dGhlIG5leHQgZmV3IHllYXJzIHRoYXQgd291bGQgYmUgYWJsZSB0byByZSB1c2UgYXQgbGVhc3Qg c29tZSBvZiB0aGVzZSBjbGFpbXMg4oCUIGFub3RoZXIgcmVhc29uIHRvIGtlZXAgdGhlbSBpbiB0 aGUgc2FtZSBzcGFjZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_MN2PR00MB057409B95526972BD49DDDA9F5440MN2PR00MB0574namp_-- From nobody Wed Nov 27 14:24:06 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D622C120ACB for ; Wed, 27 Nov 2019 14:24:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sLEjqe9YswMv for ; Wed, 27 Nov 2019 14:24:03 -0800 (PST) Received: from out-23.smtp.github.com (out-23.smtp.github.com [192.30.252.206]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D6931200E3 for ; Wed, 27 Nov 2019 14:24:03 -0800 (PST) Received: from github-lowworker-d93c4b6.va3-iad.github.net (github-lowworker-d93c4b6.va3-iad.github.net [10.48.17.47]) by smtp.github.com (Postfix) with ESMTP id CA82966049E for ; Wed, 27 Nov 2019 14:24:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574893442; bh=3keTrcFNEqwdIcdstbUl/WhAdgcQHvyK1+LX9/2lGxA=; h=Date:From:To:Subject:From; b=wmxYdCTkQMbwusKf2IdUumT/OF1buFZer6X4zXN27TqghtmHhUkGkX94rXEsU1bw5 4cHWSuTC2NPLtMQL6EPEFEDAWDbCom5vKTvjSiKiUkW6bDKSxgLBnYW3FJPsvr6uQp 8EEuPDz5awN8NxKnuTwE6zRlMnW4eho/KcrHPqiU= Date: Wed, 27 Nov 2019 14:24:02 -0800 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] bdb24b: first attempt at fixing the CirclCI issues (and ap... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:24:05 -0000 Branch: refs/heads/master Home: https://github.com/ietf-rats-wg/eat Commit: bdb24b4b85f06781b66f92d6c458e489d39cd8ab https://github.com/ietf-rats-wg/eat/commit/bdb24b4b85f06781b66f92d6c458e489d39cd8ab Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- first attempt at fixing the CirclCI issues (and apparently xml2rfc) that creates an Error: Expected attribute "year" to be an integer, but found "n.d." From nobody Wed Nov 27 14:24:30 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 579C3120ACB for ; Wed, 27 Nov 2019 14:24:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AP2t_CjHyxW6 for ; Wed, 27 Nov 2019 14:24:27 -0800 (PST) Received: from out-20.smtp.github.com (out-20.smtp.github.com [192.30.252.203]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2001E1200E3 for ; Wed, 27 Nov 2019 14:24:27 -0800 (PST) Date: Wed, 27 Nov 2019 14:24:25 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574893466; bh=M3EOY3PZleiUyHQfSQ09Y68Wys/ZiCfFT7Ti6qbim/0=; h=Date:From:To:Subject:From; b=gdSkaDkTbACjnnYeHPheKVlxC3X14+mIyuKk9IwQ2AjRbJQT/GDtMBE+93Y6EHzUv SLWTOH8I3sf5kdQ7aNoQ+QCZPs/Pk1pjhsCEF3mzXtra6st64s/nkgx4BMKnan5tDO c6WwPTHAsILOX+dja7KFtV9Rpw6o5txAmNqwyOfo= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] c87ec6: Script updating gh-pages from bdb24b4. [ci skip] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:24:28 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: c87ec69af195dbb36b98b1c819490e2399d7af79 https://github.com/ietf-rats-wg/eat/commit/c87ec69af195dbb36b98b1c819490e2399d7af79 Author: ID Bot Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.html M draft-ietf-rats-eat.txt M index.html Log Message: ----------- Script updating gh-pages from bdb24b4. [ci skip] From nobody Wed Nov 27 14:24:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32689120BE3 for ; Wed, 27 Nov 2019 14:24:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OCorJTvLwyoM for ; Wed, 27 Nov 2019 14:24:30 -0800 (PST) Received: from out-24.smtp.github.com (out-24.smtp.github.com [192.30.252.207]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8AC3120AE3 for ; Wed, 27 Nov 2019 14:24:30 -0800 (PST) Date: Wed, 27 Nov 2019 14:24:29 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574893470; bh=693fSu+35Jzg15ittVw5Bc4vhH8/3+3JdciKWy/Ep+U=; h=Date:From:To:Subject:From; b=kHjF9m/mJsdoPQMgMEXJjMVwpZ4gV9BRTX4BfS1C5vuMgPMf6prhuINAcVuPSIp/T mPxrwkJ7kh6G0aA5E3YQ+Isez5kA0+LmvVAts9AIFoVyyj0raUl1IQNNHG5BGqGaP2 Hk9G2yzUiqFJTMKqxjdx2+UlYdRxtDexKcISUvlM= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 7a79cb: Script updating issues at 2019-11-27T22:24:27Z. [c... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:24:32 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 7a79cbb62ba27ef03b20a94c19f4c5af3c28c6e2 https://github.com/ietf-rats-wg/eat/commit/7a79cbb62ba27ef03b20a94c19f4c5af3c28c6e2 Author: ID Bot Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M issues.json Log Message: ----------- Script updating issues at 2019-11-27T22:24:27Z. [ci skip] From nobody Wed Nov 27 14:33:53 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E70E8120ADC for ; Wed, 27 Nov 2019 14:33:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UTABehFltpma for ; Wed, 27 Nov 2019 14:33:49 -0800 (PST) Received: from out-9.smtp.github.com (out-9.smtp.github.com [192.30.254.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7DE4120A58 for ; Wed, 27 Nov 2019 14:33:49 -0800 (PST) Date: Wed, 27 Nov 2019 14:33:49 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574894029; bh=aUzXKH+LvO5c9f1ZssAEKWi4fQxd1sYON+JGseroHEY=; h=Date:From:To:Subject:From; b=gOKdcw0CIJr9lncNbAx/pJ4Gts2/90kXwVLi6yD+tAdFapOz9I72w8hdkTvNERuvG HJosfEhLTQYbwhHdi10BfytrGkHTeajnZtYsejPUOi9OL0tlnwKK2tT8SMDEdVkIKE v1uW0URFQczw5KU01CeIwo+Hky6oyRsoNpCBjBpM= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] beff91: fixed date issues for registries in yaml header X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:33:51 -0000 Branch: refs/heads/coswid-&-suit-mainfest-claims Home: https://github.com/ietf-rats-wg/eat Commit: beff915ec4debd38d6137ed902b69ddf40d0666d https://github.com/ietf-rats-wg/eat/commit/beff915ec4debd38d6137ed902b69ddf40d0666d Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- fixed date issues for registries in yaml header From nobody Wed Nov 27 14:42:03 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F24B120ADE for ; Wed, 27 Nov 2019 14:42:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XFU6wE2MGuX5 for ; Wed, 27 Nov 2019 14:41:59 -0800 (PST) Received: from out-20.smtp.github.com (out-20.smtp.github.com [192.30.252.203]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C03E71200D6 for ; Wed, 27 Nov 2019 14:41:59 -0800 (PST) Date: Wed, 27 Nov 2019 14:41:59 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574894519; bh=E0HHoQIG9pJKHWbzPCZNZcOnOXdEZ1chRBesBfEVpHw=; h=Date:From:To:Subject:From; b=RHThQHXF9WUTWbHe7ND8LNLEa824emdg2vX6eg0W1EyqTgjDv/bjz1Wbb9kAnUIaM aDTnNeWJphun/1KF7TIIXiwlPcyXv7Qmwwz/aC5fU/yFzjaQqNWF+cAx7inAJOokpD w8MWxTJwHgK4ALcREx+dHWLoHmzEouKp4N6yoPgY= From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] e144f7: fixed date issues for registries in yaml header X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:42:01 -0000 Branch: refs/heads/cddl-fixes Home: https://github.com/ietf-rats-wg/eat Commit: e144f73d145f42fa63278675353ba1d30292b2c8 https://github.com/ietf-rats-wg/eat/commit/e144f73d145f42fa63278675353ba1d30292b2c8 Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- fixed date issues for registries in yaml header From nobody Wed Nov 27 14:42:42 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D435120ADC for ; Wed, 27 Nov 2019 14:42:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LNoreNJywjrf for ; Wed, 27 Nov 2019 14:42:39 -0800 (PST) Received: from out-20.smtp.github.com (out-20.smtp.github.com [192.30.252.203]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A55071200D6 for ; Wed, 27 Nov 2019 14:42:39 -0800 (PST) Received: from github-lowworker-9bcb4a1.ac4-iad.github.net (github-lowworker-9bcb4a1.ac4-iad.github.net [10.52.25.84]) by smtp.github.com (Postfix) with ESMTP id 0913D8C0554 for ; Wed, 27 Nov 2019 14:42:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574894559; bh=uAOGLL+GBP05zMVpkUCOEzhlfoaAPzyvUadvhO+KjGM=; h=Date:From:To:Subject:From; b=tI2cxBc31UyKqjYMoxFLZ8xS02IZfqEDgtuwP37HP0jsenf89fRkYDyV//LO+I6OD 5GbOiyxXq9Cc/L6eQ6LErqkhZwUo7WoWbvAfODTUGD1Q5NEbiKWz89GoeTIbNHoosD CFKuHREZeA8/HCcqpswrw4N5y/4d8FSqhhxnUodU= Date: Wed, 27 Nov 2019 14:42:38 -0800 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 02b774: Script updating gh-pages from e144f73. [ci skip] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:42:41 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 02b774d5135975c9b328dc0df07a05e71f530eb0 https://github.com/ietf-rats-wg/eat/commit/02b774d5135975c9b328dc0df07a05e71f530eb0 Author: ID Bot Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: A cddl-fixes/draft-ietf-rats-eat.html A cddl-fixes/draft-ietf-rats-eat.txt A cddl-fixes/index.html M index.html Log Message: ----------- Script updating gh-pages from e144f73. [ci skip] From nobody Wed Nov 27 14:46:40 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D0511209A8 for ; Wed, 27 Nov 2019 14:46:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.001 X-Spam-Level: X-Spam-Status: No, score=-7.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GOuncx6YR033 for ; Wed, 27 Nov 2019 14:46:35 -0800 (PST) Received: from out-1.smtp.github.com (out-1.smtp.github.com [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F25D1200D6 for ; Wed, 27 Nov 2019 14:46:35 -0800 (PST) Received: from github-lowworker-f045d1f.ac4-iad.github.net (github-lowworker-f045d1f.ac4-iad.github.net [10.52.19.54]) by smtp.github.com (Postfix) with ESMTP id 7EC4BC60656 for ; Wed, 27 Nov 2019 14:46:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1574894794; bh=q6zQkAvcBtQIMrc611V/V5AmWQsr4XacEP2cdz68ya4=; h=Date:From:To:Subject:From; b=hwFrn/gOrPXv95ZxwvN3c/0bM52q3QtKISoWHxTHln+/m3sKUjpnsPvalkN/pIPu5 gxgTHol7U34EqvXOMu4gzql/3pnmmfqvdaTVsG1TzAwSly2tAUPaCVSs704xgkn45p rgqEnKy0fbc0LA6KgDe5LUIAwZw93sT8T6erPaII= Date: Wed, 27 Nov 2019 14:46:34 -0800 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 825d26: fixed date issues for registries in yaml header X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Nov 2019 22:46:38 -0000 Branch: refs/heads/256bitUEID Home: https://github.com/ietf-rats-wg/eat Commit: 825d2619dbd31e912207f8fa61ba910aafc16756 https://github.com/ietf-rats-wg/eat/commit/825d2619dbd31e912207f8fa61ba910aafc16756 Author: Henk Birkholz Date: 2019-11-27 (Wed, 27 Nov 2019) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- fixed date issues for registries in yaml header From nobody Wed Nov 27 22:12:38 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13FA51201EF for ; Wed, 27 Nov 2019 22:12:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nkeMTMveElz4 for ; Wed, 27 Nov 2019 22:12:35 -0800 (PST) Received: from p3plsmtpa11-09.prod.phx3.secureserver.net (p3plsmtpa11-09.prod.phx3.secureserver.net [68.178.252.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E36AF12006D for ; Wed, 27 Nov 2019 22:12:34 -0800 (PST) Received: from [10.86.0.58] ([45.56.150.43]) by :SMTPAUTH: with ESMTPA id aD2XiuDDhXX5FaD2YiI9J5; Wed, 27 Nov 2019 23:12:34 -0700 From: Laurence Lundblade Message-Id: <7997E9C5-AC5E-4092-B556-0002DAD2B274@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_6A9849C8-E2EB-4E25-8D7C-07BA21136569" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 27 Nov 2019 22:12:33 -0800 In-Reply-To: <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> Cc: Mike Jones , Benjamin Kaduk , "rats@ietf.org" , Hannes Tschofenig To: Yaron Sheffer References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfFvSJq52nUwJcy0V4RsaQosHsLTWLZ4KkZzGjBdwnnMjbTK9zunCv8RTzOVhahOim5B08Itau+PgPfhL2J6V4Mk5m0CNdyZcaaBCXG6DzcpP/FrmFrGF aMdK3ypgctgahCgZHgkem3YmcrBb09T0U/97yzY7PgkBuZi5aLFPozhJJNom3T1K1bnwDPsgZs3ZvYGWfgnRozN2iHWClE1bZZk2HNtXg6U/u3fKbeou8eVf sv2qrnDBiiznVi7iGV4gDuqZMRnLfqqQpYKj2WPaPfUgxSvf57WbaArCOG4nZs91 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 06:12:37 -0000 --Apple-Mail=_6A9849C8-E2EB-4E25-8D7C-07BA21136569 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 A separate EAT registry doesn=E2=80=99t seem like it will solve the = issues being brought up. You=E2=80=99re still going to have the problem of people registering all = sorts of things like they have for JWT unless you put in place some more = stringent rules about expert review and such. JWT already the most = stringent qualification common in the IETF for a new claim short of = standards action. (CWT seems not to be widely used yet so it has less = than 10 claims, most of which overlap with EAT.) You=E2=80=99re still going to have very specific things like the = foobar-transaction that are not general purpose. A separate EAT registry = doesn=E2=80=99t solve that. Some sort of profile / context seems highly likely to be necessary to = narrow EAT when applied to specific use cases. That seems to be the = place to address these concerns. Here=E2=80=99s some profiles I can = imagine. - FIDO Alliance defines how EAT is integrated into FIDO with a = FIDO-specific document, probably published outside the IETF - Android keystore documentation says how EAT fields apply to Android = attestation - ARM and Qualcomm have already published their PSA attestation as = IETF drafts - I hear rumors that Global Platform might have their TEE-related set LL > On Nov 27, 2019, at 1:27 PM, Yaron Sheffer = wrote: >=20 > Hi Mike, > =20 > To me this is a perfect counter-example: it is so generic as to be = non-reusable. When used in an attestation, the verifier will want to = have well defined syntax and semantics for what is attested, in this = case a certain transaction. Here we don=E2=80=99t know what kind of a = transaction this is (semantics) and how to interpret the transaction = identifier (syntax). > =20 > If some particular environment wants to define claims for a = particular, private kind of transaction, let=E2=80=99s make it easy for = them to define their own, very specific foobar-transaction. > =20 > Thanks, > Yaron > =20 > From: Mike Jones > > Date: Wednesday, November 27, 2019 at 23:04 > To: Yaron Sheffer >, Laurence Lundblade = >, Benjamin Kaduk = > > Cc: "rats@ietf.org " >, Hannes Tschofenig > > Subject: RE: [Rats] [EXTERNAL] Re: EAT IANA registry > =20 > The point of having a common JWT Claims registry is to enable future = specifications to benefit from reusing applicable claims registered by = past specifications. For instance, the Security Event Token [RFC 8417 = ] specification recently registered = this general-purpose claim: > o Claim Name: "txn" > o Claim Description: Transaction Identifier > o Change Controller: IESG > o Specification Document(s): Section=C2=A02.2 of [RFC8417] = > =20 > That made it available to EAT and other future specifications using = JWTs. If it had instead put it into its own registry, the potential for = reuse would have been lost. > =20 > Let=E2=80=99s likewise let future specs benefit from EAT-defined = claims by putting them in the normal IANA JWT Claims registry. > =20 > -- Mike > =20 > From: Yaron Sheffer >=20 > Sent: Wednesday, November 27, 2019 7:54 AM > To: Laurence Lundblade >; Benjamin Kaduk > > Cc: Mike Jones >; rats@ietf.org = ; Hannes Tschofenig > > Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry > =20 > To put it into perspective, there are already 57 claims registered = [1]. So even if 7 claims overlap, this is a relatively *small* number. = IMO there is high value in a separate namespace for EAT claims, and the = standard way to create such a namespace in JSON is exactly as Ben is = proposing. > =20 > Thanks, > Yaron > =20 > [1] https://www.iana.org/assignments/jwt/jwt.xhtml = > =20 > From: Laurence Lundblade > > Date: Wednesday, November 27, 2019 at 06:39 > To: Benjamin Kaduk > > Cc: Mike Jones >, Yaron Sheffer = >, "rats@ietf.org = " >, Hannes = Tschofenig > > Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry > =20 > =20 >> On Nov 26, 2019, at 7:19 PM, Benjamin Kaduk > wrote: >> =20 >> ...but I'm not sure that "avoiding duplicates" >> would apply to a proposal that makes a single JWT/CWT claim for "EAT = data" >> and puts the attestation claims in a map as the value for that "EAT = data" >> claim. What existing JWT/CWT claims would duplicate the potential = contents >> of the EAT data fields? >=20 > =20 > That is an interesting thought =E2=80=94 put all of EAT into one = JWT/CWT claim that is a map. Other=E2=80=99s have mentioned it to me. It = would let EAT re use the most compact integer CBOR integer labels. > =20 > Right now we re use the following claims from JWT or CWT by normative = reference: > - nonce > - Token ID cti/jti > - Time stamp (iat) > =20 > Also these JWT or CWT seem either likely or possible use in EAT: > - cnf (proof of possession of key) > - iss Issuer > - expiration > - not before > =20 > That=E2=80=99s a fairly large overlap which makes me disinclined to = putting all of EAT into one map that is one JWT/CWT claim, separating = EAT claims from CWT/JWT claims. > =20 > I=E2=80=99m no OAuth expert, but I wonder if some of the EAT claims = might be useful for other than EAT tokens, another reason not to keep = them separate. > =20 > I suspect we=E2=80=99re going to find at least one more use for a = signed map of label-value pairs in the next few years that would be able = to re use at least some of these claims =E2=80=94 another reason to keep = them in the same space. > =20 > LL > =20 > =20 > =20 > =20 > =20 > =20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_6A9849C8-E2EB-4E25-8D7C-07BA21136569 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
A separate EAT registry doesn=E2=80=99t seem like it = will solve the issues being brought up.

You=E2=80=99re still going to have the problem of = people registering all sorts of things like they have for JWT unless you = put in place some more stringent rules about expert review and such. JWT = already the most stringent qualification common in the IETF for a new = claim short of standards action. (CWT seems not to be widely used yet so = it has less than 10 claims, most of which overlap with = EAT.)

You=E2=80=99re still going to = have very specific things like the foobar-transaction that are not = general purpose. A separate EAT registry doesn=E2=80=99t solve = that.

Some sort of profile / context = seems highly likely to be necessary to narrow EAT when applied to = specific use cases. That seems to be the place to address these = concerns. Here=E2=80=99s some profiles I can imagine.
  =  - FIDO Alliance defines how EAT is integrated into FIDO with a = FIDO-specific document, probably published outside the = IETF
   - Android keystore documentation says how = EAT fields apply to Android attestation
   - ARM and = Qualcomm have already published their PSA attestation as IETF = drafts
   - I hear rumors that Global Platform might = have their TEE-related set

LL


On Nov = 27, 2019, at 1:27 PM, Yaron Sheffer <yaronf.ietf@gmail.com> wrote:

Hi = Mike,
 
To me = this is a perfect counter-example: it is so generic as to be = non-reusable. When used in an attestation, the verifier will want to = have well defined syntax and semantics for what is attested, in this = case a certain transaction. Here we don=E2=80=99t know what kind of a = transaction this is (semantics) and how to interpret the transaction = identifier (syntax).
 
If some particular environment wants to define claims for a = particular, private kind of transaction, let=E2=80=99s make it easy for = them to define their own, very specific foobar-transaction.
 
Thanks,
          &nb= sp;     Yaron
 
From: Mike Jones <Michael.Jones@microsoft.com>
Date: Wednesday, November 27, = 2019 at 23:04
To: Yaron Sheffer <yaronf.ietf@gmail.com>, = Laurence Lundblade <lgl@island-resort.com>, Benjamin Kaduk <kaduk@mit.edu>
Cc: "rats@ietf.org" <rats@ietf.org>, Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Subject: RE: [Rats] [EXTERNAL] = Re: EAT IANA registry
 
The point = of having a common JWT Claims registry is to enable future = specifications to benefit from reusing applicable claims registered by = past specifications.  For instance, the Security Event Token [RFC 8417] specification = recently registered this general-purpose claim:
   o  Claim Name: "txn"
   o  Claim Description: Transaction = Identifier
   o  Change Controller: = IESG
   o  Specification Document(s): Section 2.2 of [RFC8417]
 
That made it available to = EAT and other future specifications using JWTs.  If it had instead = put it into its own registry, the potential for reuse would have been = lost.
 
Let=E2=80=99s= likewise let future specs benefit from EAT-defined claims by putting = them in the normal IANA JWT Claims registry.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;       -- Mike
 
From: Yaron Sheffer <yaronf.ietf@gmail.com> 
Sent: Wednesday, November 27, = 2019 7:54 AM
To: Laurence Lundblade <lgl@island-resort.com>; = Benjamin Kaduk <kaduk@mit.edu>
Cc: Mike Jones <Michael.Jones@microsoft.com>; rats@ietf.org; Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Subject: Re: [Rats] [EXTERNAL] Re: = EAT IANA registry
 
To put it into perspective, there are = already 57 claims registered [1]. So even if 7 claims overlap, this is a = relatively *small* number. IMO there is high value in = a separate namespace for EAT claims, and the standard way to create such = a namespace in JSON is exactly as Ben is proposing.
 
Thanks,
          &nb= sp;     Yaron
 
[1] https://www.iana.org/assignments/jwt/jwt.xhtml
 
From: Laurence Lundblade <lgl@island-resort.com>
Date: Wednesday, November 27, = 2019 at 06:39
To: Benjamin Kaduk <kaduk@mit.edu>
Cc: Mike = Jones <Michael.Jones=3D40microsoft.com@dmarc.ietf.org>, Yaron = Sheffer <yaronf.ietf@gmail.com>, "rats@ietf.org" <rats@ietf.org>, Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Subject: Re: [Rats] [EXTERNAL] = Re: EAT IANA registry
 
 
On Nov 26, 2019, at 7:19 PM, Benjamin = Kaduk <kaduk@mit.edu> wrote:
 
...but I'm not sure that "avoiding duplicates"
would apply to a proposal that makes a single JWT/CWT claim = for "EAT data"
and puts the attestation claims in a map as = the value for that "EAT data"
claim.  What existing = JWT/CWT claims would duplicate the potential contents
of = the EAT data fields?
 
That is an interesting thought =E2=80=94 = put all of EAT into one JWT/CWT claim that is a map. Other=E2=80=99s = have mentioned it to me. It would let EAT re use the most compact = integer CBOR integer labels.
 
Right now we re use the following claims from JWT or CWT by = normative reference:
- nonce
- Token ID cti/jti
- Time stamp (iat)
 
Also these JWT or CWT seem either = likely or possible use in EAT:
- cnf (proof of possession = of key)
- iss Issuer
- expiration
- not before
 
That=E2=80=99s a fairly large overlap = which makes me disinclined to putting all of EAT into one map that is = one JWT/CWT claim, separating EAT claims from CWT/JWT claims.
 
I=E2=80=99m no OAuth expert, but I = wonder if some of the EAT claims might be useful for other than EAT = tokens, another reason not to keep them separate.
 
I suspect we=E2=80=99re going to find = at least one more use for a signed map of label-value pairs in the next = few years that would be able to re use at least some of these claims =E2=80= =94 another reason to keep them in the same space.
 
LL
 
 
 
 
 
 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_6A9849C8-E2EB-4E25-8D7C-07BA21136569-- From nobody Wed Nov 27 23:37:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D8E412092C for ; Wed, 27 Nov 2019 23:37:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.436 X-Spam-Level: * X-Spam-Status: No, score=1.436 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qRC-jIXiJC6w for ; Wed, 27 Nov 2019 23:37:33 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09F27120271 for ; Wed, 27 Nov 2019 23:37:32 -0800 (PST) Received: from dooku.sandelman.ca (unknown [185.201.63.254]) by relay.sandelman.ca (Postfix) with ESMTPS id D5D2A1F47D; Thu, 28 Nov 2019 07:34:19 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id D290D110C; Thu, 28 Nov 2019 15:23:27 +0800 (+08) From: Michael Richardson To: "Smith\, Ned" , rats@ietf.org cc: Guy Fedorkow , "pritikin\@cisco.com" , Jessica Fitzgerald-McKay , "Henk Berkholz" , William Bellingrath In-reply-to: References: <32083.1574668598@dooku.sandelman.ca> <1E5F7794-BA58-4D6D-928A-4B0E9C227B69@intel.com> <11202.1574848474@dooku.sandelman.ca> Comments: In-reply-to "Smith, Ned" message dated "Wed, 27 Nov 2019 19:12:11 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Thu, 28 Nov 2019 08:23:27 +0100 Message-ID: <16604.1574925807@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] name of identity key X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 07:37:36 -0000 --=-=-= Content-Type: text/plain In some private thread, Guy said: > Smith, Ned wrote: >> Actually, it is expected that there will be many keys in a platform >> that could be used to obtain an IDevID credential. As discrete >> components (vendors of) are increasingly embedding root-of-trust / key >> gen capabilities. The challenge is more likely one of deciding *which* >> key should be regarded as the 'platform' key/identity used for >> onboarding. >> I agree that having multiple IDevID credentials could be confusing to >> "platform" owners but that should not imply that a platform can only >> have one key / credential. It is possible for a platform to have a >> delegate device that represents the platform remotely while other >> *devices* recognize the delegate as a platform local 'verifier'. This >> is the Open Compute Project's Cerberus architecture / use case. The EAT >> sub_mods claim and TEEP architecture seems to support this convention >> as well. I said: mcr> I don't want to prevent multiple IDevID credentials, I want to name them mcr> consistently :-) Ned Smith then said: nms> Good question. Part of the motivation to use "IDevID" terminology in nms> TCG is to agree on some industry standard naming. The nms> Cerberus/RIoT/DICE work introduced other terms "AliasID" and Do you mean Kerberos, or are you referring to something else? (There have been multiple crypto protocols with that name, alas) nms> "DeviceID" which are more confusing than helpful. DICE layering also nms> uses subscript notation to disambiguate which component/layer a key nms> belongs to, since it doesn't make sense to name things like naming nms> your kids given a layered architecture. Even so, TPM and DICE still nms> distinguish between key / credential types based on expected usage nms> (identity, attestation) and DICE also support embedded CA use cases nms> therefore acknowledges a third type (ECA). ECA keys can attest, but nms> do so by including Evidence in the certificate it nms> issues. Attestation keys can sign evidence (e.g. sign an EAT) while nms> identity keys sign an auth challenge. Auth challenges can support nms> implicit attestation - meaning claims ascribed to the Attester nms> arrive at the Verifier through an out-of-band channel and can nms> include claims signed by Endorsers. The identity (aka SubjectName / nms> SubjectAltName etc...) is used to link the identity to Tokens or nms> Endorsements containing Claims. nms> Maybe it makes sense to talk about how the keys are used rather than trying to name them? Well, I think that having it named "the key we use for Onboarding" is the same as saying, "Onboarding Key", right? I don't know how the manufacturing process that involves a TPM with a TPM attestation key works. I just know that when doing BRSKI, that there were issues with being confused between various TPM keys, and we originally wrote text saying that the device Serial Number might be in weird places. We later ripped that text out, as time had changed things, and I'm worried that this issue is not really dead. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3fde8ACgkQlUzhVv38 QpA0GAf9GEuqnk75tcbnMr+KBj9um4XfYRLx8X6js/AmvQHpvsr5xzF4C9y4Poge OvGhEVwS5GkDR0Yq2Gvhej0VQJOY9jJVFSdWwBjbaljp81ATn7jeU+os50pIupLj jrOHxNhG+SEW8VMq7Ps2mJzO4Yg1qyWM1mSQqminPeNkFOwXMCjaFIxMpzKC1/DN 0VRoUvBXvj/LhDd609gQvDmbYrdpG2NwK4Jot86noXta3su/J1blI7DDm6+yu85l VHZhvfbbr4h25AHP05iMKmRQCtNcwQ8HdeadN1wzRay6sLMFZB0ObvO3hs/mQDjm yWgA93ipY1neK98CEJrOCeqLSO6guA== =JucC -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 28 00:31:47 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70E7C120058 for ; Thu, 28 Nov 2019 00:31:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l8YmNssyWTkV for ; Thu, 28 Nov 2019 00:31:44 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1AA4120048 for ; Thu, 28 Nov 2019 00:31:43 -0800 (PST) Received: from dooku.sandelman.ca (unknown [185.201.63.254]) by relay.sandelman.ca (Postfix) with ESMTPS id E66D31F47D for ; Thu, 28 Nov 2019 08:31:40 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id A57041189; Thu, 28 Nov 2019 16:23:34 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" In-reply-to: <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> Comments: In-reply-to Henk Birkholz message dated "Wed, 27 Nov 2019 18:27:21 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Thu, 28 Nov 2019 09:23:34 +0100 Message-ID: <20047.1574929414@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 08:31:45 -0000 --=-=-= Content-Type: text/plain Henk Birkholz wrote: > to your first point: I am not sure what legacy systems that would be able to > create/process EAT would not be able to process a SUIT manifest. Could you > elaborate on that? I think that an example is in your hand, a smartphone. I think that their boot/recovery roms do not process SUIT today, but it would be possible to generate measurements in EAT format as to what is running if the measurements are available. > I'd maybe not call that a dependency, but rather synergy > in data models, but I am under the suspicion that I simply don't understand > the scenario that you are talking about. I think that the synnergy makes sense to me. Just because we describe what is running using SUIT terminology and constructs does not mean that we have use the entire Manifest. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3fhAYACgkQlUzhVv38 QpDUGgf/bE5RTuA5rYPCMFbCqvGLizJLVqTX2ksee2dGtmjXEsuCMyUVDSfDGGjj 1vzfDsBqLW4nt3U+MgYBHil9XxLFN2e9zw47DAyA4qwyhpPcggVg8xZNo2JO/Mbo iOMf6yu1uTx2wrmkLFjw8s7iRMQSBdkH6nKsbZI9H7kzWeOepVGTF13QcsBi9r11 9BwbdvR1f2vOVo6UbSfy2x/OUiGWTDSy1mQp8/dAjCLVy/zpZeiXVaBv27+qeNVi xWG4Ar31dSN/o7t5MY7Y3FdgrikZs7eDJr0wItZCFyNQ8H5gWDvu8S2GwkQPPYhm 8WJ7pHLzt8uGzh0f/qqDD42LHHHtQQ== =JPNu -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 28 00:36:36 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17F3B120088 for ; Thu, 28 Nov 2019 00:36:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.436 X-Spam-Level: * X-Spam-Status: No, score=1.436 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GwH8zJiPY8fX for ; Thu, 28 Nov 2019 00:36:32 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C050D120048 for ; Thu, 28 Nov 2019 00:36:32 -0800 (PST) Received: from dooku.sandelman.ca (unknown [185.201.63.254]) by relay.sandelman.ca (Postfix) with ESMTPS id 7C5351F47D for ; Thu, 28 Nov 2019 08:36:31 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 5713F114D; Thu, 28 Nov 2019 16:20:24 +0800 (+08) From: Michael Richardson To: "rats\@ietf.org" Comments: In-reply-to Henk Birkholz message dated "Wed, 27 Nov 2019 14:24:47 +0100." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Thu, 28 Nov 2019 09:20:24 +0100 Message-ID: <19982.1574929224@dooku.sandelman.ca> Archived-At: Subject: [Rats] use case draft --- adopting or dropping or ??? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 08:36:34 -0000 --=-=-= Content-Type: text/plain I've been asked what happens with the use case draft. I've been asked why the working group hasn't adopted it yet, etc. I want to remind of three things: 1) the IESG doesn't want to publish use case documents on their own, so this document is never going forward as it is. 2) the intention of this document was that it be a live collection of use cases and pointers to users of attestation. 3) that the WG chairs can put a document on the agenda even if it's not a WG document. The only reason to adopt the use case document into being a WG document is if makes it easier to do scheduling, as we have a guideline that WG documents get priority on the agenda. The WG chairs can also declare a document as a WG document by fiat, they don't actually have to Call for Adoption; that's just the most consensus friendly path that we tend to take. It may also help others to find the document in the WG list. I am agnostic as to what the name on the document is though. It takes the same amount of effort to write/maintain the document. Other organizations tend to do things like approve travel more easily for authors of WG documents. At this point we are merging pieces of the use case document into the architecture document, but it seems reasonable that some detailed use cases might not fit into the architecture document. Specifically, it might be that the additional user doesn't provide any motivation for any unique architecture components. My proposal is that the use case document will linger in the state that it is, that additions and edits will be welcome, but that there will be no specific effort on the document until after the Feb. Hackathon/Tutorial. Once the architecture is more mature, that a revision to the use case document will occur connecting use cases to architectural structures. I further propose that some users will want to write detailed profiles of RATS as unique documents within the IETF or within other organizations. That, as this happens, the more extensive textual description of the case will become a reference to that document. Such a profile document would have to start with a problem statement (use case description) anyway. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAl3fg0cACgkQlUzhVv38 QpBEIQgAqVYecYtzwr7N8wWo12kbAZpnFm/huz1+0C6XaqYAL3Q/0naAH1WZdS/x +noMybJtNjngjoR8ms3+5Zrl6lwlMwYipoFIm6FfoODeHifqanx7cgiuRyO65f4/ 6gUREohqccvd/9ya3xcqEQbnr2rHOUYalDm/b30nPp5fm3dNT6z4msEjkhoaTqmF Wuto6O7ZdmxqftmOd4QPHPtcwEF1JZ8txCuvn9H4898AiCYzbSQrgPJnKD2PVNLy tnRysdjfUaM87UJK8OPeHGwWfzHEIFc6gcjwKPmxc3KK+iRaUEagrrj4jdh1ldZ+ mz+Ijpv5aO0W3mNTh/tSGh6gVA4I8A== =6Iie -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Nov 28 00:40:37 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4784120088 for ; Thu, 28 Nov 2019 00:40:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ujLXHSPuwvue for ; Thu, 28 Nov 2019 00:40:33 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6286F120025 for ; Thu, 28 Nov 2019 00:40:33 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAS8eU9N024034 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 28 Nov 2019 09:40:31 +0100 Received: from [134.102.154.106] (134.102.154.106) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 28 Nov 2019 09:40:25 +0100 To: Michael Richardson , "rats@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> <20047.1574929414@dooku.sandelman.ca> From: Henk Birkholz Message-ID: <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> Date: Thu, 28 Nov 2019 09:40:24 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20047.1574929414@dooku.sandelman.ca> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.154.106] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 08:40:36 -0000 I am not convinced that the gap is as big as illustrated. Maybe because I need a use case description why the "boot/recovery roms" are already creating EAT and not a software component running in the TEE. Creating Measurements & Creating EAT are not tightly coupled time-wise, is my assumption today, for example in a cell-phone, I'd assume today. I am in full agreement, that the entire SUIT Manifest would be over-kill in the stages "boot/recovery roms". Although, I know of recovery roms that do exactly that: retrieving a SUTI Manifest including firmware to do... well recovery. Viele Grüße, Henk On 28.11.19 09:23, Michael Richardson wrote: > > Henk Birkholz wrote: > > to your first point: I am not sure what legacy systems that would be able to > > create/process EAT would not be able to process a SUIT manifest. Could you > > elaborate on that? > > I think that an example is in your hand, a smartphone. > I think that their boot/recovery roms do not process SUIT today, but it would > be possible to generate measurements in EAT format as to what is running > if the measurements are available. > > > I'd maybe not call that a dependency, but rather synergy > > in data models, but I am under the suspicion that I simply don't understand > > the scenario that you are talking about. > > I think that the synnergy makes sense to me. > Just because we describe what is running using SUIT terminology and > constructs does not mean that we have use the entire Manifest. > > > -- > Michael Richardson , Sandelman Software Works > -= IPv6 IoT consulting =- > > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Nov 28 01:05:23 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD5A312008C for ; Thu, 28 Nov 2019 01:05:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.298 X-Spam-Level: X-Spam-Status: No, score=-4.298 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com header.b=pESX4DVT; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=qualcomm.onmicrosoft.com header.b=BNEqMFSF Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id opiYzwdhiFjo for ; Thu, 28 Nov 2019 01:05:19 -0800 (PST) Received: from alexa-out-sd-02.qualcomm.com (alexa-out-sd-02.qualcomm.com [199.106.114.39]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 685C4120018 for ; Thu, 28 Nov 2019 01:05:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1574931919; x=1606467919; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=lbhwSdLAghMtGnjG22B1dDjRqEsL6jrlExpbev55EJQ=; b=pESX4DVTi+Oe2Io9lEClsm6ycjwmEN68vo3DmyxfSJa4/j3fkgtLcWXk 3uBqdxXZ1E0iExEZyMxN8M4/QLFWr+TCnfLGnwUPz5qWIi3n5XEqvMYgZ FfGTq64eEQVw0hwbLIkKIauOB1Cfuh3xKbaA+eyT1RIqjikLiuB/JTqAe g=; Received: from unknown (HELO ironmsg01-sd.qualcomm.com) ([10.53.140.141]) by alexa-out-sd-02.qualcomm.com with ESMTP; 28 Nov 2019 01:05:18 -0800 IronPort-SDR: Di8+xRxR2y5ZWKKpLQzwO/0gA/YUZtRljs6tf2Z9jjP1VziLTdJJnUnQfBeDqTtYAR889/UhAM vmK2Rh2TggeXZIkx6CaFLtQcwB3r+8ShPD3sJpon5mkBObHMlhkMgc/pm0xWS2JXHeEo0vyWdn nv3sUuriR26rcVXpDZQklVsVsJnAzO6/EC9sEayjcMCUNxyPM5eb2AiPzX2ONXCeht5XRpNoPL ElCCwPQ2H/bI8SjnDoEVkyEzCH1NFeZ7coRsF7DfUySLOfQdksxoTLZ5m4thCP3/gjrbIuwwI1 hNq9UVV7UzceZ4tc2NSv0bxH Received: from nasanexm03b.na.qualcomm.com ([10.85.0.98]) by ironmsg01-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 28 Nov 2019 01:05:17 -0800 Received: from nasanexm03e.na.qualcomm.com (10.85.0.48) by nasanexm03b.na.qualcomm.com (10.85.0.98) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Thu, 28 Nov 2019 01:05:17 -0800 Received: from NAM03-DM3-obe.outbound.protection.outlook.com (199.106.107.6) by nasanexm03e.na.qualcomm.com (10.85.0.48) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Thu, 28 Nov 2019 01:05:17 -0800 Received: from CY4PR0201MB3588.namprd02.prod.outlook.com (52.132.102.25) by CY4PR0201MB3506.namprd02.prod.outlook.com (52.132.103.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18; Thu, 28 Nov 2019 09:05:15 +0000 Received: from CY4PR0201MB3588.namprd02.prod.outlook.com ([fe80::2812:5ab:15e1:2bab]) by CY4PR0201MB3588.namprd02.prod.outlook.com ([fe80::2812:5ab:15e1:2bab%7]) with mapi id 15.20.2495.014; Thu, 28 Nov 2019 09:05:15 +0000 From: Jeremy O'Donoghue To: "rats@ietf.org" Thread-Topic: [Rats] [EXTERNAL] Re: EAT IANA registry Thread-Index: AQHVpNGJhqP84R6bSUa61Omb+WpqIaeeb6WAgAC8WwCAAFbcgIAABmQAgACSwYCAAEEEgA== Date: Thu, 28 Nov 2019 09:05:15 +0000 Message-ID: References: <09C4F36B-C9CE-44DF-9DF8-F3365A7E3053@gmail.com> <53C13986-A523-4349-BDC3-F8ACC2BCFD29@island-resort.com> <20191127031910.GF32847@mit.edu> <28117100-32D0-40D2-81B8-89D1345B34FF@gmail.com> <7997E9C5-AC5E-4092-B556-0002DAD2B274@island-resort.com> In-Reply-To: <7997E9C5-AC5E-4092-B556-0002DAD2B274@island-resort.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 authentication-results: spf=none (sender IP is ) smtp.mailfrom=jodonogh@qti.qualcomm.com; x-originating-ip: [212.136.9.12] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 015ec26f-7162-4bba-d170-08d773e2159b x-ms-traffictypediagnostic: CY4PR0201MB3506: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2089; x-forefront-prvs: 0235CBE7D0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(39860400002)(376002)(346002)(136003)(189003)(199004)(54094003)(81166006)(6512007)(236005)(6306002)(6506007)(53546011)(102836004)(229853002)(54896002)(316002)(6246003)(86362001)(26005)(33656002)(76176011)(6486002)(6116002)(561944003)(2501003)(99286004)(3846002)(6436002)(66066001)(966005)(14454004)(606006)(478600001)(76116006)(2906002)(71190400001)(25786009)(58126008)(256004)(66476007)(45080400002)(71200400001)(5640700003)(11346002)(186003)(446003)(2616005)(6916009)(66446008)(64756008)(81156014)(66946007)(5660300002)(8936002)(1730700003)(8676002)(7736002)(14444005)(66556008)(91956017)(2351001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR0201MB3506; H:CY4PR0201MB3588.namprd02.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:0; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: YJ/E+d9zThUSrqv2yVBCiyvPSpfO5m5oAphZ9ZZ/w+EgJsW3CMURVMQsfXVdqGl4u6Oh/stw/wBxhkouCmR6EGiB7iWVfXluAgaW95J6uVkYHwX/HyBEVmAHCy3+sIIpSnRngzN7w3NGMNHfKr7mfSnB86WpmOrRgRekM8Z4PcA3hhTV4Hch3mjwjQCnolzlx5Im/w0GukJB+SlCTjDbVn6B9Atmd9zYw74wN6++6NNZvWkoL0Am5fPtU7YEAM0BANyioVCu7BavqMWSESyzs4k2KALFZSOdmOhj2QT9krXcLLxDKTRv3g3li8f0rb0ygQ0QuDAMA8xI0vgCUOl/2LR9ZoI9I0uMZJJW8YYGfj7n1EL5jNYfKPKmO9Iutwo9IoEBfcTJxfj+J9Ct2zoPthtSOnuUvXzlj2USwDJulvgR/ZbKJMXgjuiWic4xD27pe7qaH92mvXFiyQK560yBp2nAUARYD/sgnzrtzxmfNHs= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gmQm5W0FD1I//SVVxxutE8CkhxV2dxjrrebrLm7RybmznHDM6i3R4NISZOJ8xbXRZH9q2Fa+7POfbFIwlKQwxIeJ4Y8TFJelKPfNXVqIH3pHCZvDH0rP5VRtOgf1IJpt4FA2hqDfWDyn6OstbfmOXkMy1lUjH+AFDx8ridNxRW00+RmYzZrd/9CnIpruRlb19tNUsGOwvwt3NNWWqzuH201IIboNwCzyswRAZ9IRC9UKlEDyQ5b0Z42TP+V7NyGSdLJ1zoYHn/Jtarn8NkSn/qqW5aWheHR/2i7bOpvaKljLjpUh7MEplZjjn/MbbqFA7k8b3NmTN0jR27ZcjoF/Fw== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oVxvJ2CsKH1NH6fINIkseFatRwr/uneckFoAW9H+4gI=; b=Lp2B8q+QPIIy/DUaeZ2Zf2BO1j8r/Hbh0cUNnydr7NN+EdHXQMH0gRGZQJx/z1WU2/quDVWefF/phBRkV+CzcUQ2pt8/EBO0wOXfbzWXH6IreDsWH3orBXnLNpgrE4XHYaMotmhyMJbLX2/dt+Ks33uMFt777+TAYhbupPVeQM9BvqLry9U6GJ7i1d0vcVKeg/jnUHTGl5RggdDk3KIIgLM4rhGnJt6dno0AWn8ny2v8Vm8Uaila2SpDpDqtMvsT12oleMYexfMtfzbOpq/IC0HMb0UNfHCVtHXZ3bvadZzAh5qdeaP9LP5pxovuzhJRobYz8FuNMDFr6ZAq8ARVYw== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=qti.qualcomm.com; dmarc=pass action=none header.from=qti.qualcomm.com; dkim=pass header.d=qti.qualcomm.com; arc=none dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.onmicrosoft.com; s=selector1-qualcomm-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oVxvJ2CsKH1NH6fINIkseFatRwr/uneckFoAW9H+4gI=; b=BNEqMFSFSgDVTz4CIHZCsMeUvYyD5apNQZ2/6q7uXMapQMQ8n1jmYhf1ghqDvTaAiGqkrNvP8kV4PFHEFR/2PEr2vl19bqLSOnYAOk03yIHkINPMll8tbEFMWvNng8iMKA/Z2GXpttT0xFb4rqM8eUOjntUXEv2uxiK1nNy+g5E= x-ms-exchange-crosstenant-network-message-id: 015ec26f-7162-4bba-d170-08d773e2159b x-ms-exchange-crosstenant-originalarrivaltime: 28 Nov 2019 09:05:15.7211 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 98e9ba89-e1a1-4e38-9007-8bdabc25de1d x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: UA1T7m64S3Kn27d8Y+SCG067ua2bR/24SW4CVkm/gzI4Pbtuh0xoStyh1rRP+bHtfAiKRkYZ8a2qGVtLzrKhO/Aa/W50RjoXSTkXeJhg9XM= x-ms-exchange-transport-crosstenantheadersstamped: CY4PR0201MB3506 x-originatororg: qti.qualcomm.com Content-Type: multipart/alternative; boundary="_000_EDF46007B59740488B771A4686A60C94qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: EAT IANA registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 09:05:22 -0000 --_000_EDF46007B59740488B771A4686A60C94qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBjYW4gY29uZmlybSB0aGF0IEdsb2JhbFBsYXRmb3JtIGlzIHdvcmtpbmcgb24gRUFUIGNsYWlt cyByZWxhdGVkIHRvIHRoZSB0ZWNobm9sb2dpZXMgaXQgc3RhbmRhcmRpc2VzOiBURUUgYW5kIFNl Y3VyZSBFbGVtZW50IGluIHBhcnRpY3VsYXIuIEFzIHdpdGggRklETywgdGhlcmUgd2lsbCBiZSBH bG9iYWxQbGF0Zm9ybS1zcGVjaWZpYyBkb2N1bWVudHMgcHVibGlzaGVkIG91dHNpZGUgdGhlIElF VEYgc3BlY2lmeWluZyBob3cgdGhlc2UgYXJlIHVzZWQuDQoNCkZyb20gdGhlIHBlcnNwZWN0aXZl IG9mIG90aGVyIGJvZGllcyB3aXNoaW5nIHRvIGFkb3B0IEVBVCBpbiB0aGVpciBzcGVjaWZpYyB1 c2UtY2FzZXMgaW4gYW4gaW50ZXJvcGVyYWJsZSB3YXksIGEgc2luZ2xlIElBTkEgcmVnaXN0cnkg d291bGQgYmUgZWFzaWVyIHRvIG1hbmFnZSB0aGFuIHJlZ2lzdGVyaW5nIHdoYXQgYXJlIGVzc2Vu dGlhbGx5IHRoZSBzYW1lIGNsYWltcyBpbiBKV1QgYW5kIENXVCByZWdpc3RyaWVzIHNlcGFyYXRl bHkuDQoNCkkgYW0gcHJvYmFibHkgYXNraW5nIGEgc3R1cGlkIHF1ZXN0aW9uLCBidXQgaXMgdGhl cmUgbm8gbWVjaGFuaXNtIGJ5IHdoaWNoIENXVCBhbmQgSldUIGNsYWltcyBjYW4gYmUgbWVyZ2Vk IGluIGEgc2luZ2xlIHJlZ2lzdHJ5PyBJdCBzZWVtcyB0byBtZSB0aGF0IENXVCBhbmQgSldUIHN1 cHBvcnQgdGhlIHNhbWUgdXNlLWNhc2VzLCBhbmQgZXZlcnlvbmUgd291bGQgYmVuZWZpdCBieSBo YXZpbmcgcHJvcGVybHkgaW50ZXJvcGVyYWJsZSBzdGFuZGFyZGl6ZWQgY2xhaW1zIGZvciBib3Ro ICh3b3VsZCBtYWtlIGUuZy4gY29udmVyc2lvbiBiZXR3ZWVuIEpTT04gYW5kIENCT1IgcmVwcmVz ZW50YXRpb25zIG9mIHRoZSBzYW1lIGNsYWltIHRyaXZpYWwpLiBTdWNoIGFwcHJvYWNoIHdvdWxk IGFkZHJlc3MgdmlydHVhbGx5IGFsbCBhcmd1bWVudHMgZm9yIGhhdmluZyBzZXBhcmF0ZSByZWdp c3RyaWVzIGZvciBhbnkgdXNlLWNhc2UuIEkgYWNjZXB0IHRoYXQgdGhpcyB3b3VsZCBiZSBjb250 ZW50aW91cyBhbmQgdGFrZSB0aW1lLCBidXQgaXQgc2VlbXMgYSB2ZXJ5IHdvcnRoeSBnb2FsLg0K DQpKZXJlbXkNCg0KT24gMjgvMTEvMjAxOSwgMDY6MTMsICJSQVRTIG9uIGJlaGFsZiBvZiBMYXVy ZW5jZSBMdW5kYmxhZGUiIDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOnJhdHMtYm91bmNl c0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGds QGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCg0KQ0FVVElPTjogVGhpcyBlbWFpbCBvcmln aW5hdGVkIGZyb20gb3V0c2lkZSBvZiB0aGUgb3JnYW5pemF0aW9uLg0KQSBzZXBhcmF0ZSBFQVQg cmVnaXN0cnkgZG9lc27igJl0IHNlZW0gbGlrZSBpdCB3aWxsIHNvbHZlIHRoZSBpc3N1ZXMgYmVp bmcgYnJvdWdodCB1cC4NCg0KWW914oCZcmUgc3RpbGwgZ29pbmcgdG8gaGF2ZSB0aGUgcHJvYmxl bSBvZiBwZW9wbGUgcmVnaXN0ZXJpbmcgYWxsIHNvcnRzIG9mIHRoaW5ncyBsaWtlIHRoZXkgaGF2 ZSBmb3IgSldUIHVubGVzcyB5b3UgcHV0IGluIHBsYWNlIHNvbWUgbW9yZSBzdHJpbmdlbnQgcnVs ZXMgYWJvdXQgZXhwZXJ0IHJldmlldyBhbmQgc3VjaC4gSldUIGFscmVhZHkgdGhlIG1vc3Qgc3Ry aW5nZW50IHF1YWxpZmljYXRpb24gY29tbW9uIGluIHRoZSBJRVRGIGZvciBhIG5ldyBjbGFpbSBz aG9ydCBvZiBzdGFuZGFyZHMgYWN0aW9uLiAoQ1dUIHNlZW1zIG5vdCB0byBiZSB3aWRlbHkgdXNl ZCB5ZXQgc28gaXQgaGFzIGxlc3MgdGhhbiAxMCBjbGFpbXMsIG1vc3Qgb2Ygd2hpY2ggb3Zlcmxh cCB3aXRoIEVBVC4pDQoNCllvdeKAmXJlIHN0aWxsIGdvaW5nIHRvIGhhdmUgdmVyeSBzcGVjaWZp YyB0aGluZ3MgbGlrZSB0aGUgZm9vYmFyLXRyYW5zYWN0aW9uIHRoYXQgYXJlIG5vdCBnZW5lcmFs IHB1cnBvc2UuIEEgc2VwYXJhdGUgRUFUIHJlZ2lzdHJ5IGRvZXNu4oCZdCBzb2x2ZSB0aGF0Lg0K DQpTb21lIHNvcnQgb2YgcHJvZmlsZSAvIGNvbnRleHQgc2VlbXMgaGlnaGx5IGxpa2VseSB0byBi ZSBuZWNlc3NhcnkgdG8gbmFycm93IEVBVCB3aGVuIGFwcGxpZWQgdG8gc3BlY2lmaWMgdXNlIGNh c2VzLiBUaGF0IHNlZW1zIHRvIGJlIHRoZSBwbGFjZSB0byBhZGRyZXNzIHRoZXNlIGNvbmNlcm5z LiBIZXJl4oCZcyBzb21lIHByb2ZpbGVzIEkgY2FuIGltYWdpbmUuDQogICAtIEZJRE8gQWxsaWFu Y2UgZGVmaW5lcyBob3cgRUFUIGlzIGludGVncmF0ZWQgaW50byBGSURPIHdpdGggYSBGSURPLXNw ZWNpZmljIGRvY3VtZW50LCBwcm9iYWJseSBwdWJsaXNoZWQgb3V0c2lkZSB0aGUgSUVURg0KICAg LSBBbmRyb2lkIGtleXN0b3JlIGRvY3VtZW50YXRpb24gc2F5cyBob3cgRUFUIGZpZWxkcyBhcHBs eSB0byBBbmRyb2lkIGF0dGVzdGF0aW9uDQogICAtIEFSTSBhbmQgUXVhbGNvbW0gaGF2ZSBhbHJl YWR5IHB1Ymxpc2hlZCB0aGVpciBQU0EgYXR0ZXN0YXRpb24gYXMgSUVURiBkcmFmdHMNCiAgIC0g SSBoZWFyIHJ1bW9ycyB0aGF0IEdsb2JhbCBQbGF0Zm9ybSBtaWdodCBoYXZlIHRoZWlyIFRFRS1y ZWxhdGVkIHNldA0KDQpMTA0KDQoNCg0KT24gTm92IDI3LCAyMDE5LCBhdCAxOjI3IFBNLCBZYXJv biBTaGVmZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnlhcm9uZi5pZXRmQGdtYWls LmNvbT4+IHdyb3RlOg0KDQpIaSBNaWtlLA0KDQpUbyBtZSB0aGlzIGlzIGEgcGVyZmVjdCBjb3Vu dGVyLWV4YW1wbGU6IGl0IGlzIHNvIGdlbmVyaWMgYXMgdG8gYmUgbm9uLXJldXNhYmxlLiBXaGVu IHVzZWQgaW4gYW4gYXR0ZXN0YXRpb24sIHRoZSB2ZXJpZmllciB3aWxsIHdhbnQgdG8gaGF2ZSB3 ZWxsIGRlZmluZWQgc3ludGF4IGFuZCBzZW1hbnRpY3MgZm9yIHdoYXQgaXMgYXR0ZXN0ZWQsIGlu IHRoaXMgY2FzZSBhIGNlcnRhaW4gdHJhbnNhY3Rpb24uIEhlcmUgd2UgZG9u4oCZdCBrbm93IHdo YXQga2luZCBvZiBhIHRyYW5zYWN0aW9uIHRoaXMgaXMgKHNlbWFudGljcykgYW5kIGhvdyB0byBp bnRlcnByZXQgdGhlIHRyYW5zYWN0aW9uIGlkZW50aWZpZXIgKHN5bnRheCkuDQoNCklmIHNvbWUg cGFydGljdWxhciBlbnZpcm9ubWVudCB3YW50cyB0byBkZWZpbmUgY2xhaW1zIGZvciBhIHBhcnRp Y3VsYXIsIHByaXZhdGUga2luZCBvZiB0cmFuc2FjdGlvbiwgbGV04oCZcyBtYWtlIGl0IGVhc3kg Zm9yIHRoZW0gdG8gZGVmaW5lIHRoZWlyIG93biwgdmVyeSBzcGVjaWZpYyBmb29iYXItdHJhbnNh Y3Rpb24uDQoNClRoYW5rcywNCiAgICAgICAgICAgICAgICBZYXJvbg0KDQpGcm9tOiBNaWtlIEpv bmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbT4+DQpEYXRlOiBXZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAyMDE5IGF0IDIzOjA0 DQpUbzogWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5YXJvbmYu aWV0ZkBnbWFpbC5jb20+PiwgTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5j b208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+LCBCZW5qYW1pbiBLYWR1ayA8a2FkdWtA bWl0LmVkdTxtYWlsdG86a2FkdWtAbWl0LmVkdT4+DQpDYzogInJhdHNAaWV0Zi5vcmc8bWFpbHRv OnJhdHNAaWV0Zi5vcmc+IiA8cmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4+LCBI YW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVz LlRzY2hvZmVuaWdAYXJtLmNvbT4+DQpTdWJqZWN0OiBSRTogW1JhdHNdIFtFWFRFUk5BTF0gUmU6 IEVBVCBJQU5BIHJlZ2lzdHJ5DQoNClRoZSBwb2ludCBvZiBoYXZpbmcgYSBjb21tb24gSldUIENs YWltcyByZWdpc3RyeSBpcyB0byBlbmFibGUgZnV0dXJlIHNwZWNpZmljYXRpb25zIHRvIGJlbmVm aXQgZnJvbSByZXVzaW5nIGFwcGxpY2FibGUgY2xhaW1zIHJlZ2lzdGVyZWQgYnkgcGFzdCBzcGVj aWZpY2F0aW9ucy4gIEZvciBpbnN0YW5jZSwgdGhlIFNlY3VyaXR5IEV2ZW50IFRva2VuIFtSRkMg ODQxNzxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODQxNz5dIHNwZWNpZmljYXRpb24g cmVjZW50bHkgcmVnaXN0ZXJlZCB0aGlzIGdlbmVyYWwtcHVycG9zZSBjbGFpbToNCiAgIG8gIENs YWltIE5hbWU6ICJ0eG4iDQogICBvICBDbGFpbSBEZXNjcmlwdGlvbjogVHJhbnNhY3Rpb24gSWRl bnRpZmllcg0KICAgbyAgQ2hhbmdlIENvbnRyb2xsZXI6IElFU0cNCiAgIG8gIFNwZWNpZmljYXRp b24gRG9jdW1lbnQocyk6IFNlY3Rpb24gMi4yIG9mIFtSRkM4NDE3XTxodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvcmZjODQxNyNzZWN0aW9uLTIuMj4NCg0KVGhhdCBtYWRlIGl0IGF2YWlsYWJs ZSB0byBFQVQgYW5kIG90aGVyIGZ1dHVyZSBzcGVjaWZpY2F0aW9ucyB1c2luZyBKV1RzLiAgSWYg aXQgaGFkIGluc3RlYWQgcHV0IGl0IGludG8gaXRzIG93biByZWdpc3RyeSwgdGhlIHBvdGVudGlh bCBmb3IgcmV1c2Ugd291bGQgaGF2ZSBiZWVuIGxvc3QuDQoNCkxldOKAmXMgbGlrZXdpc2UgbGV0 IGZ1dHVyZSBzcGVjcyBiZW5lZml0IGZyb20gRUFULWRlZmluZWQgY2xhaW1zIGJ5IHB1dHRpbmcg dGhlbSBpbiB0aGUgbm9ybWFsIElBTkEgSldUIENsYWltcyByZWdpc3RyeS4NCg0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0K RnJvbTogWWFyb24gU2hlZmZlciA8eWFyb25mLmlldGZAZ21haWwuY29tPG1haWx0bzp5YXJvbmYu aWV0ZkBnbWFpbC5jb20+Pg0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSA3OjU0 IEFNDQpUbzogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRv OmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+OyBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdTxt YWlsdG86a2FkdWtAbWl0LmVkdT4+DQpDYzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNy b3NvZnQuY29tPG1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+PjsgcmF0c0BpZXRm Lm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz47IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNj aG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4NClN1Ympl Y3Q6IFJlOiBbUmF0c10gW0VYVEVSTkFMXSBSZTogRUFUIElBTkEgcmVnaXN0cnkNCg0KVG8gcHV0 IGl0IGludG8gcGVyc3BlY3RpdmUsIHRoZXJlIGFyZSBhbHJlYWR5IDU3IGNsYWltcyByZWdpc3Rl cmVkIFsxXS4gU28gZXZlbiBpZiA3IGNsYWltcyBvdmVybGFwLCB0aGlzIGlzIGEgcmVsYXRpdmVs eSAqc21hbGwqIG51bWJlci4gSU1PIHRoZXJlIGlzIGhpZ2ggdmFsdWUgaW4gYSBzZXBhcmF0ZSBu YW1lc3BhY2UgZm9yIEVBVCBjbGFpbXMsIGFuZCB0aGUgc3RhbmRhcmQgd2F5IHRvIGNyZWF0ZSBz dWNoIGEgbmFtZXNwYWNlIGluIEpTT04gaXMgZXhhY3RseSBhcyBCZW4gaXMgcHJvcG9zaW5nLg0K DQpUaGFua3MsDQogICAgICAgICAgICAgICAgWWFyb24NCg0KWzFdIGh0dHBzOi8vd3d3LmlhbmEu b3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3QueGh0bWwNCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRl IDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpE YXRlOiBXZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAyMDE5IGF0IDA2OjM5DQpUbzogQmVuamFtaW4g S2FkdWsgPGthZHVrQG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+Pg0KQ2M6IE1pa2UgSm9u ZXMgPE1pY2hhZWwuSm9uZXM9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpN aWNoYWVsLkpvbmVzPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+LCBZYXJvbiBTaGVm ZmVyIDx5YXJvbmYuaWV0ZkBnbWFpbC5jb208bWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbT4+ LCAicmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4iIDxyYXRzQGlldGYub3JnPG1h aWx0bzpyYXRzQGlldGYub3JnPj4sIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4NClN1YmplY3Q6IFJl OiBbUmF0c10gW0VYVEVSTkFMXSBSZTogRUFUIElBTkEgcmVnaXN0cnkNCg0KDQpPbiBOb3YgMjYs IDIwMTksIGF0IDc6MTkgUE0sIEJlbmphbWluIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzpr YWR1a0BtaXQuZWR1Pj4gd3JvdGU6DQoNCi4uLmJ1dCBJJ20gbm90IHN1cmUgdGhhdCAiYXZvaWRp bmcgZHVwbGljYXRlcyINCndvdWxkIGFwcGx5IHRvIGEgcHJvcG9zYWwgdGhhdCBtYWtlcyBhIHNp bmdsZSBKV1QvQ1dUIGNsYWltIGZvciAiRUFUIGRhdGEiDQphbmQgcHV0cyB0aGUgYXR0ZXN0YXRp b24gY2xhaW1zIGluIGEgbWFwIGFzIHRoZSB2YWx1ZSBmb3IgdGhhdCAiRUFUIGRhdGEiDQpjbGFp bS4gIFdoYXQgZXhpc3RpbmcgSldUL0NXVCBjbGFpbXMgd291bGQgZHVwbGljYXRlIHRoZSBwb3Rl bnRpYWwgY29udGVudHMNCm9mIHRoZSBFQVQgZGF0YSBmaWVsZHM/DQoNClRoYXQgaXMgYW4gaW50 ZXJlc3RpbmcgdGhvdWdodCDigJQgcHV0IGFsbCBvZiBFQVQgaW50byBvbmUgSldUL0NXVCBjbGFp bSB0aGF0IGlzIGEgbWFwLiBPdGhlcuKAmXMgaGF2ZSBtZW50aW9uZWQgaXQgdG8gbWUuIEl0IHdv dWxkIGxldCBFQVQgcmUgdXNlIHRoZSBtb3N0IGNvbXBhY3QgaW50ZWdlciBDQk9SIGludGVnZXIg bGFiZWxzLg0KDQpSaWdodCBub3cgd2UgcmUgdXNlIHRoZSBmb2xsb3dpbmcgY2xhaW1zIGZyb20g SldUIG9yIENXVCBieSBub3JtYXRpdmUgcmVmZXJlbmNlOg0KLSBub25jZQ0KLSBUb2tlbiBJRCBj dGkvanRpDQotIFRpbWUgc3RhbXAgKGlhdCkNCg0KQWxzbyB0aGVzZSBKV1Qgb3IgQ1dUIHNlZW0g ZWl0aGVyIGxpa2VseSBvciBwb3NzaWJsZSB1c2UgaW4gRUFUOg0KLSBjbmYgKHByb29mIG9mIHBv c3Nlc3Npb24gb2Yga2V5KQ0KLSBpc3MgSXNzdWVyDQotIGV4cGlyYXRpb24NCi0gbm90IGJlZm9y ZQ0KDQpUaGF04oCZcyBhIGZhaXJseSBsYXJnZSBvdmVybGFwIHdoaWNoIG1ha2VzIG1lIGRpc2lu Y2xpbmVkIHRvIHB1dHRpbmcgYWxsIG9mIEVBVCBpbnRvIG9uZSBtYXAgdGhhdCBpcyBvbmUgSldU L0NXVCBjbGFpbSwgc2VwYXJhdGluZyBFQVQgY2xhaW1zIGZyb20gQ1dUL0pXVCBjbGFpbXMuDQoN CknigJltIG5vIE9BdXRoIGV4cGVydCwgYnV0IEkgd29uZGVyIGlmIHNvbWUgb2YgdGhlIEVBVCBj bGFpbXMgbWlnaHQgYmUgdXNlZnVsIGZvciBvdGhlciB0aGFuIEVBVCB0b2tlbnMsIGFub3RoZXIg cmVhc29uIG5vdCB0byBrZWVwIHRoZW0gc2VwYXJhdGUuDQoNCkkgc3VzcGVjdCB3ZeKAmXJlIGdv aW5nIHRvIGZpbmQgYXQgbGVhc3Qgb25lIG1vcmUgdXNlIGZvciBhIHNpZ25lZCBtYXAgb2YgbGFi ZWwtdmFsdWUgcGFpcnMgaW4gdGhlIG5leHQgZmV3IHllYXJzIHRoYXQgd291bGQgYmUgYWJsZSB0 byByZSB1c2UgYXQgbGVhc3Qgc29tZSBvZiB0aGVzZSBjbGFpbXMg4oCUIGFub3RoZXIgcmVhc29u IHRvIGtlZXAgdGhlbSBpbiB0aGUgc2FtZSBzcGFjZS4NCg0KTEwNCg0KDQoNCg0KDQoNCl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpSQVRTIG1haWxpbmcg bGlzdA0KUkFUU0BpZXRmLm9yZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KDQoNCg== --_000_EDF46007B59740488B771A4686A60C94qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <20A10738DED6FE4894C822B7D204A26F@namprd02.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJp Ow0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0Zv bGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5t c29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1z dHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBw dCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48 L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tR0IiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SSBjYW4gY29uZmlybSB0 aGF0IEdsb2JhbFBsYXRmb3JtIGlzIHdvcmtpbmcgb24gRUFUIGNsYWltcyByZWxhdGVkIHRvIHRo ZSB0ZWNobm9sb2dpZXMgaXQgc3RhbmRhcmRpc2VzOiBURUUgYW5kIFNlY3VyZSBFbGVtZW50IGlu IHBhcnRpY3VsYXIuIEFzIHdpdGggRklETywgdGhlcmUgd2lsbCBiZSBHbG9iYWxQbGF0Zm9ybS1z cGVjaWZpYyBkb2N1bWVudHMNCiBwdWJsaXNoZWQgb3V0c2lkZSB0aGUgSUVURiBzcGVjaWZ5aW5n IGhvdyB0aGVzZSBhcmUgdXNlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+RnJvbSB0aGUgcGVyc3BlY3RpdmUgb2Ygb3RoZXIg Ym9kaWVzIHdpc2hpbmcgdG8gYWRvcHQgRUFUIGluIHRoZWlyIHNwZWNpZmljIHVzZS1jYXNlcyBp biBhbiBpbnRlcm9wZXJhYmxlIHdheSwgYSBzaW5nbGUgSUFOQSByZWdpc3RyeSB3b3VsZCBiZSBl YXNpZXIgdG8gbWFuYWdlIHRoYW4gcmVnaXN0ZXJpbmcgd2hhdCBhcmUgZXNzZW50aWFsbHkNCiB0 aGUgc2FtZSBjbGFpbXMgaW4gSldUIGFuZCBDV1QgcmVnaXN0cmllcyBzZXBhcmF0ZWx5LjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVT Ij5JIGFtIHByb2JhYmx5IGFza2luZyBhIHN0dXBpZCBxdWVzdGlvbiwgYnV0IGlzIHRoZXJlIG5v IG1lY2hhbmlzbSBieSB3aGljaCBDV1QgYW5kIEpXVCBjbGFpbXMgY2FuIGJlIG1lcmdlZCBpbiBh IHNpbmdsZSByZWdpc3RyeT8gSXQgc2VlbXMgdG8gbWUgdGhhdCBDV1QgYW5kIEpXVCBzdXBwb3J0 IHRoZSBzYW1lIHVzZS1jYXNlcywgYW5kIGV2ZXJ5b25lDQogd291bGQgYmVuZWZpdCBieSBoYXZp bmcgcHJvcGVybHkgaW50ZXJvcGVyYWJsZSBzdGFuZGFyZGl6ZWQgY2xhaW1zIGZvciBib3RoICh3 b3VsZCBtYWtlIGUuZy4gY29udmVyc2lvbiBiZXR3ZWVuIEpTT04gYW5kIENCT1IgcmVwcmVzZW50 YXRpb25zIG9mIHRoZSBzYW1lIGNsYWltIHRyaXZpYWwpLiBTdWNoIGFwcHJvYWNoIHdvdWxkIGFk ZHJlc3MgdmlydHVhbGx5IGFsbCBhcmd1bWVudHMgZm9yIGhhdmluZyBzZXBhcmF0ZSByZWdpc3Ry aWVzIGZvcg0KIGFueSB1c2UtY2FzZS4gSSBhY2NlcHQgdGhhdCB0aGlzIHdvdWxkIGJlIGNvbnRl bnRpb3VzIGFuZCB0YWtlIHRpbWUsIGJ1dCBpdCBzZWVtcyBhIHZlcnkgd29ydGh5IGdvYWwuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4t VVMiPkplcmVteTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij5PbiAyOC8xMS8yMDE5LCAwNjoxMywgJnF1b3Q7UkFUUyBvbiBiZWhh bGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86cmF0cy1i b3VuY2VzQGlldGYub3JnIj5yYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBvZg0K PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQu Y29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3Ry b25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjaztiYWNrZ3JvdW5kOiNGRkVCOUMiPkNBVVRJT048 L3NwYW4+PC9zdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrO2JhY2tncm91bmQ6I0ZGRUI5 QyI+OiBUaGlzIGVtYWlsDQogb3JpZ2luYXRlZCBmcm9tIG91dHNpZGUgb2YgdGhlIG9yZ2FuaXph dGlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QSBzZXBhcmF0ZSBFQVQgcmVnaXN0cnkgZG9lc27i gJl0IHNlZW0gbGlrZSBpdCB3aWxsIHNvbHZlIHRoZSBpc3N1ZXMgYmVpbmcgYnJvdWdodCB1cC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+WW914oCZ cmUgc3RpbGwgZ29pbmcgdG8gaGF2ZSB0aGUgcHJvYmxlbSBvZiBwZW9wbGUgcmVnaXN0ZXJpbmcg YWxsIHNvcnRzIG9mIHRoaW5ncyBsaWtlIHRoZXkgaGF2ZSBmb3IgSldUIHVubGVzcyB5b3UgcHV0 IGluIHBsYWNlIHNvbWUgbW9yZSBzdHJpbmdlbnQgcnVsZXMgYWJvdXQgZXhwZXJ0IHJldmlldyBh bmQgc3VjaC4gSldUIGFscmVhZHkgdGhlIG1vc3Qgc3RyaW5nZW50DQogcXVhbGlmaWNhdGlvbiBj b21tb24gaW4gdGhlIElFVEYgZm9yIGEgbmV3IGNsYWltIHNob3J0IG9mIHN0YW5kYXJkcyBhY3Rp b24uIChDV1Qgc2VlbXMgbm90IHRvIGJlIHdpZGVseSB1c2VkIHlldCBzbyBpdCBoYXMgbGVzcyB0 aGFuIDEwIGNsYWltcywgbW9zdCBvZiB3aGljaCBvdmVybGFwIHdpdGggRUFULik8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+WW914oCZcmUgc3RpbGwg Z29pbmcgdG8gaGF2ZSB2ZXJ5IHNwZWNpZmljIHRoaW5ncyBsaWtlIHRoZSBmb29iYXItdHJhbnNh Y3Rpb24gdGhhdCBhcmUgbm90IGdlbmVyYWwgcHVycG9zZS4gQSBzZXBhcmF0ZSBFQVQgcmVnaXN0 cnkgZG9lc27igJl0IHNvbHZlIHRoYXQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPlNvbWUgc29ydCBvZiBwcm9maWxlIC8gY29udGV4dCBzZWVtcyBo aWdobHkgbGlrZWx5IHRvIGJlIG5lY2Vzc2FyeSB0byBuYXJyb3cgRUFUIHdoZW4gYXBwbGllZCB0 byBzcGVjaWZpYyB1c2UgY2FzZXMuIFRoYXQgc2VlbXMgdG8gYmUgdGhlIHBsYWNlIHRvIGFkZHJl c3MgdGhlc2UgY29uY2VybnMuIEhlcmXigJlzIHNvbWUgcHJvZmlsZXMgSSBjYW4gaW1hZ2luZS48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOyAmbmJzcDstIEZJRE8gQWxsaWFuY2UgZGVmaW5l cyBob3cgRUFUIGlzIGludGVncmF0ZWQgaW50byBGSURPIHdpdGggYSBGSURPLXNwZWNpZmljIGRv Y3VtZW50LCBwcm9iYWJseSBwdWJsaXNoZWQgb3V0c2lkZSB0aGUgSUVURjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jm5ic3A7ICZuYnNwOy0gQW5kcm9pZCBrZXlzdG9yZSBkb2N1bWVudGF0aW9uIHNh eXMgaG93IEVBVCBmaWVsZHMgYXBwbHkgdG8gQW5kcm9pZCBhdHRlc3RhdGlvbjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jm5ic3A7ICZuYnNwOy0gQVJNIGFuZCBRdWFsY29tbSBoYXZlIGFscmVhZHkg cHVibGlzaGVkIHRoZWlyIFBTQSBhdHRlc3RhdGlvbiBhcyBJRVRGIGRyYWZ0czxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jm5ic3A7ICZuYnNwOy0gSSBoZWFyIHJ1bW9ycyB0aGF0IEdsb2JhbCBQbGF0 Zm9ybSBtaWdodCBoYXZlIHRoZWlyIFRFRS1yZWxhdGVkIHNldDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5MTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pk9uIE5vdiAyNywgMjAxOSwgYXQgMToyNyBQTSwgWWFyb24gU2hlZmZlciAmbHQ7PGEgaHJlZj0i bWFpbHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+eWFyb25mLmlldGZAZ21haWwuY29tPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IaSBN aWtlLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5U byBtZSB0aGlzIGlzIGEgcGVyZmVjdCBjb3VudGVyLWV4YW1wbGU6IGl0IGlzIHNvIGdlbmVyaWMg YXMgdG8gYmUgbm9uLXJldXNhYmxlLiBXaGVuIHVzZWQgaW4gYW4gYXR0ZXN0YXRpb24sIHRoZSB2 ZXJpZmllciB3aWxsIHdhbnQgdG8gaGF2ZSB3ZWxsIGRlZmluZWQgc3ludGF4IGFuZCBzZW1hbnRp Y3MgZm9yIHdoYXQgaXMgYXR0ZXN0ZWQsIGluIHRoaXMgY2FzZQ0KIGEgY2VydGFpbiB0cmFuc2Fj dGlvbi4gSGVyZSB3ZSBkb27igJl0IGtub3cgd2hhdCBraW5kIG9mIGEgdHJhbnNhY3Rpb24gdGhp cyBpcyAoc2VtYW50aWNzKSBhbmQgaG93IHRvIGludGVycHJldCB0aGUgdHJhbnNhY3Rpb24gaWRl bnRpZmllciAoc3ludGF4KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+SWYgc29tZSBwYXJ0aWN1bGFyIGVudmlyb25tZW50IHdhbnRzIHRvIGRlZmlu ZSBjbGFpbXMgZm9yIGEgcGFydGljdWxhciwgcHJpdmF0ZSBraW5kIG9mIHRyYW5zYWN0aW9uLCBs ZXTigJlzIG1ha2UgaXQgZWFzeSBmb3IgdGhlbSB0byBkZWZpbmUgdGhlaXIgb3duLCB2ZXJ5IHNw ZWNpZmljIGZvb2Jhci10cmFuc2FjdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFlhcm9uPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0Ij5Gcm9tOjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0Ij5NaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25l c0BtaWNyb3NvZnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5NaWNoYWVsLkpvbmVz QG1pY3Jvc29mdC5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5EYXRlOjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+V2VkbmVzZGF5LCBOb3ZlbWJl ciAyNywgMjAxOSBhdCAyMzowNDxicj4NCjxiPlRvOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+WWFyb24gU2hlZmZlciAmbHQ7PGEgaHJlZj0ibWFp bHRvOnlhcm9uZi5pZXRmQGdtYWlsLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+eWFy b25mLmlldGZAZ21haWwuY29tPC9zcGFuPjwvYT4mZ3Q7LCBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0 OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPjxzcGFuIHN0eWxlPSJjb2xv cjpwdXJwbGUiPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvc3Bhbj48L2E+Jmd0OywNCiBCZW5qYW1p biBLYWR1ayAmbHQ7PGEgaHJlZj0ibWFpbHRvOmthZHVrQG1pdC5lZHUiPjxzcGFuIHN0eWxlPSJj b2xvcjpwdXJwbGUiPmthZHVrQG1pdC5lZHU8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPiZxdW90Ozxh IGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5y YXRzQGlldGYub3JnPC9zcGFuPjwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzQGll dGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5yYXRzQGlldGYub3JnPC9zcGFuPjwv YT4mZ3Q7LCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2No b2ZlbmlnQGFybS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPkhhbm5lcy5Uc2Nob2Zl bmlnQGFybS5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+UkU6IFtSYXRzXSBbRVhURVJO QUxdIFJlOiBFQVQgSUFOQSByZWdpc3RyeTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+VGhlIHBvaW50IG9mIGhhdmluZyBhIGNvbW1vbiBKV1QgQ2xh aW1zIHJlZ2lzdHJ5IGlzIHRvIGVuYWJsZSBmdXR1cmUgc3BlY2lmaWNhdGlvbnMgdG8gYmVuZWZp dCBmcm9tIHJldXNpbmcgYXBwbGljYWJsZSBjbGFpbXMgcmVnaXN0ZXJlZCBieSBwYXN0IHNwZWNp ZmljYXRpb25zLiZuYnNwOyBGb3IgaW5zdGFuY2UsIHRoZSBTZWN1cml0eQ0KIEV2ZW50IFRva2Vu IFs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODQxNyI+PHNwYW4gc3R5 bGU9ImNvbG9yOnB1cnBsZSI+UkZDIDg0MTc8L3NwYW4+PC9hPl0gc3BlY2lmaWNhdGlvbiByZWNl bnRseSByZWdpc3RlcmVkIHRoaXMgZ2VuZXJhbC1wdXJwb3NlIGNsYWltOjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpi bGFjaztiYWNrZ3JvdW5kOndoaXRlIj4mbmJzcDsmbmJzcDsgbyZuYnNwOyBDbGFpbSBOYW1lOiAm cXVvdDt0eG4mcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2s7YmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7 Jm5ic3A7IG8mbmJzcDsgQ2xhaW0gRGVzY3JpcHRpb246IFRyYW5zYWN0aW9uIElkZW50aWZpZXI8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29u c29sYXM7Y29sb3I6YmxhY2s7YmFja2dyb3VuZDp3aGl0ZSI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsg Q2hhbmdlIENvbnRyb2xsZXI6IElFU0c8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2s7YmFja2dyb3VuZDp3aGl0 ZSI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgU3BlY2lmaWNhdGlvbiBEb2N1bWVudChzKTo8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4NDE3I3NlY3Rpb24tMi4yIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDA2NkND Ij5TZWN0aW9uJm5ic3A7Mi4yDQogb2YgW1JGQzg0MTddPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhdCBtYWRlIGl0 IGF2YWlsYWJsZSB0byBFQVQgYW5kIG90aGVyIGZ1dHVyZSBzcGVjaWZpY2F0aW9ucyB1c2luZyBK V1RzLiZuYnNwOyBJZiBpdCBoYWQgaW5zdGVhZCBwdXQgaXQgaW50byBpdHMgb3duIHJlZ2lzdHJ5 LCB0aGUgcG90ZW50aWFsIGZvciByZXVzZSB3b3VsZCBoYXZlIGJlZW4gbG9zdC48L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPkxl dOKAmXMgbGlrZXdpc2UgbGV0IGZ1dHVyZSBzcGVjcyBiZW5lZml0IGZyb20gRUFULWRlZmluZWQg Y2xhaW1zIGJ5IHB1dHRpbmcgdGhlbSBpbiB0aGUgbm9ybWFsIElBTkEgSldUIENsYWltcyByZWdp c3RyeS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBN aWtlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBjbSAwY20gMGNtIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+WWFyb24gU2hlZmZlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOnlh cm9uZi5pZXRmQGdtYWlsLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+eWFyb25mLmll dGZAZ21haWwuY29tPC9zcGFuPjwvYT4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5XZWRuZXNkYXksIE5vdmVtYmVyIDI3LCAyMDE5 IDc6NTQgQU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPkxhdXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxn bEBpc2xhbmQtcmVzb3J0LmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+bGdsQGlzbGFu ZC1yZXNvcnQuY29tPC9zcGFuPjwvYT4mZ3Q7OyBCZW5qYW1pbiBLYWR1ayAmbHQ7PGEgaHJlZj0i bWFpbHRvOmthZHVrQG1pdC5lZHUiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmthZHVrQG1p dC5lZHU8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0 bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi Pk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTwvc3Bhbj48L2E+Jmd0Ozs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnJhdHNA aWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJhdHNAaWV0Zi5vcmc8L3NwYW4+ PC9hPjsNCiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2No b2ZlbmlnQGFybS5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPkhhbm5lcy5Uc2Nob2Zl bmlnQGFybS5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtSYXRzXSBbRVhURVJO QUxdIFJlOiBFQVQgSUFOQSByZWdpc3RyeTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VG8gcHV0IGl0IGludG8gcGVyc3Bl Y3RpdmUsIHRoZXJlIGFyZSBhbHJlYWR5IDU3IGNsYWltcyByZWdpc3RlcmVkIFsxXS4gU28gZXZl biBpZiA3IGNsYWltcyBvdmVybGFwLCB0aGlzIGlzIGEgcmVsYXRpdmVseSAqPGI+c21hbGw8L2I+ KiBudW1iZXIuIElNTyB0aGVyZSBpcyBoaWdoIHZhbHVlIGluIGEgc2VwYXJhdGUgbmFtZXNwYWNl IGZvciBFQVQgY2xhaW1zLA0KIGFuZCB0aGUgc3RhbmRhcmQgd2F5IHRvIGNyZWF0ZSBzdWNoIGEg bmFtZXNwYWNlIGluIEpTT04gaXMgZXhhY3RseSBhcyBCZW4gaXMgcHJvcG9zaW5nLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5UaGFua3MsPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgWWFyb248 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+WzFdPHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0 dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3QueGh0bWwiPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlhbmEub3JnL2Fzc2lnbm1lbnRzL2p3dC9qd3Qu eGh0bWw8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdCI+RnJvbTo8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdCI+TGF1 cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29t Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L3NwYW4+ PC9hPiZndDs8YnI+DQo8Yj5EYXRlOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L2I+V2VkbmVzZGF5LCBOb3ZlbWJlciAyNywgMjAxOSBhdCAwNjozOTxi cj4NCjxiPlRvOjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L2I+QmVuamFtaW4gS2FkdWsgJmx0OzxhIGhyZWY9Im1haWx0bzprYWR1a0BtaXQuZWR1Ij48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5rYWR1a0BtaXQuZWR1PC9zcGFuPjwvYT4mZ3Q7PGJy Pg0KPGI+Q2M6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjwvYj5NaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25lcz00MG1pY3Jv c29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPk1pY2hh ZWwuSm9uZXM9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7LCBZ YXJvbiBTaGVmZmVyICZsdDs8YSBocmVmPSJtYWlsdG86eWFyb25mLmlldGZAZ21haWwuY29tIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj55YXJvbmYuaWV0ZkBnbWFpbC5jb208L3NwYW4+PC9h PiZndDssDQogJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPnJhdHNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZxdW90OyAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJhdHNA aWV0Zi5vcmc8L3NwYW4+PC9hPiZndDssIEhhbm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVmPSJt YWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBs ZSI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPlN1Ympl Y3Q6PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5S ZTogW1JhdHNdIFtFWFRFUk5BTF0gUmU6IEVBVCBJQU5BIHJlZ2lzdHJ5PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPk9u IE5vdiAyNiwgMjAxOSwgYXQgNzoxOSBQTSwgQmVuamFtaW4gS2FkdWsgJmx0OzxhIGhyZWY9Im1h aWx0bzprYWR1a0BtaXQuZWR1Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5rYWR1a0BtaXQu ZWR1PC9zcGFuPjwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYSI+Li4uYnV0IEknbSBub3Qgc3VyZSB0aGF0ICZx dW90O2F2b2lkaW5nIGR1cGxpY2F0ZXMmcXVvdDs8YnI+DQp3b3VsZCBhcHBseSB0byBhIHByb3Bv c2FsIHRoYXQgbWFrZXMgYSBzaW5nbGUgSldUL0NXVCBjbGFpbSBmb3IgJnF1b3Q7RUFUIGRhdGEm cXVvdDs8YnI+DQphbmQgcHV0cyB0aGUgYXR0ZXN0YXRpb24gY2xhaW1zIGluIGEgbWFwIGFzIHRo ZSB2YWx1ZSBmb3IgdGhhdCAmcXVvdDtFQVQgZGF0YSZxdW90Ozxicj4NCmNsYWltLiAmbmJzcDtX aGF0IGV4aXN0aW5nIEpXVC9DV1QgY2xhaW1zIHdvdWxkIGR1cGxpY2F0ZSB0aGUgcG90ZW50aWFs IGNvbnRlbnRzPGJyPg0Kb2YgdGhlIEVBVCBkYXRhIGZpZWxkcz88L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VGhhdCBpcyBhbiBpbnRlcmVzdGluZyB0aG91Z2h0IOKAlCBw dXQgYWxsIG9mIEVBVCBpbnRvIG9uZSBKV1QvQ1dUIGNsYWltIHRoYXQgaXMgYSBtYXAuIE90aGVy 4oCZcyBoYXZlIG1lbnRpb25lZCBpdCB0byBtZS4gSXQgd291bGQgbGV0IEVBVCByZSB1c2UgdGhl IG1vc3QgY29tcGFjdCBpbnRlZ2VyIENCT1IgaW50ZWdlciBsYWJlbHMuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPlJpZ2h0IG5vdyB3ZSByZSB1c2UgdGhlIGZvbGxvd2luZyBjbGFpbXMgZnJvbSBK V1Qgb3IgQ1dUIGJ5IG5vcm1hdGl2ZSByZWZlcmVuY2U6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4tIG5vbmNlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij4tIFRva2VuIElEIGN0aS9qdGk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pi0gVGltZSBzdGFtcCAoaWF0KTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5BbHNvIHRoZXNlIEpX VCBvciBDV1Qgc2VlbSBlaXRoZXIgbGlrZWx5IG9yIHBvc3NpYmxlIHVzZSBpbiBFQVQ6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4tIGNuZiAocHJvb2Ygb2YgcG9zc2Vzc2lv biBvZiBrZXkpPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4tIGlzcyBJc3N1 ZXI8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPi0gZXhwaXJhdGlvbjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+LSBub3QgYmVmb3JlPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPlRoYXTigJlzIGEgZmFpcmx5IGxhcmdlIG92ZXJsYXAgd2hpY2ggbWFrZXMg bWUgZGlzaW5jbGluZWQgdG8gcHV0dGluZyBhbGwgb2YgRUFUIGludG8gb25lIG1hcCB0aGF0IGlz IG9uZSBKV1QvQ1dUIGNsYWltLCBzZXBhcmF0aW5nIEVBVCBjbGFpbXMgZnJvbSBDV1QvSldUIGNs YWltcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SeKAmW0gbm8gT0F1dGggZXhwZXJ0LCBidXQg SSB3b25kZXIgaWYgc29tZSBvZiB0aGUgRUFUIGNsYWltcyBtaWdodCBiZSB1c2VmdWwgZm9yIG90 aGVyIHRoYW4gRUFUIHRva2VucywgYW5vdGhlciByZWFzb24gbm90IHRvIGtlZXAgdGhlbSBzZXBh cmF0ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SSBzdXNwZWN0IHdl4oCZcmUgZ29pbmcgdG8g ZmluZCBhdCBsZWFzdCBvbmUgbW9yZSB1c2UgZm9yIGEgc2lnbmVkIG1hcCBvZiBsYWJlbC12YWx1 ZSBwYWlycyBpbiB0aGUgbmV4dCBmZXcgeWVhcnMgdGhhdCB3b3VsZCBiZSBhYmxlIHRvIHJlIHVz ZSBhdCBsZWFzdCBzb21lIG9mIHRoZXNlIGNsYWltcyDigJQgYW5vdGhlciByZWFzb24gdG8ga2Vl cCB0aGVtIGluIHRoZSBzYW1lDQogc3BhY2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkxMPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2EiPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWls aW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOnB1cnBs ZSI+UkFUU0BpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTpIZWx2ZXRpY2EiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_EDF46007B59740488B771A4686A60C94qtiqualcommcom_-- From nobody Thu Nov 28 03:39:56 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3375212081D for ; Thu, 28 Nov 2019 03:39:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=ItGczFWP; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=fWbbp61j Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ilee4np93IAJ for ; Thu, 28 Nov 2019 03:39:52 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30044.outbound.protection.outlook.com [40.107.3.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11F0612081C for ; Thu, 28 Nov 2019 03:39:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WvNc6kvdxN5VMhyWdxMTJXDCO5f88yz5E5otm4WPspo=; b=ItGczFWPnMgVSpAps8wU986nN0a5atunJ/Us1wvsQtDtVZqvTU19gAFAMky0CdQoqRK1XRBeJgRWUYf+0Lz+YgqPyPQdKmOLuHQYp7+8nP6N4zvcXR9U6rz+q2yawGZvfmaLdDOnfd4doJuEVMFmJlM8GMdu1huUk2KFCKMa0Vs= Received: from VI1PR0802CA0008.eurprd08.prod.outlook.com (2603:10a6:800:aa::18) by AM4PR0802MB2194.eurprd08.prod.outlook.com (2603:10a6:200:5c::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20; Thu, 28 Nov 2019 11:39:49 +0000 Received: from DB5EUR03FT010.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::208) by VI1PR0802CA0008.outlook.office365.com (2603:10a6:800:aa::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20 via Frontend Transport; Thu, 28 Nov 2019 11:39:49 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT010.mail.protection.outlook.com (10.152.20.96) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Thu, 28 Nov 2019 11:39:49 +0000 Received: ("Tessian outbound 691822eda51f:v37"); Thu, 28 Nov 2019 11:39:47 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 63561a7239c916e7 X-CR-MTA-TID: 64aa7808 Received: from 9c0f7d720d6b.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 770604CA-26F4-4BE4-86C9-8CE93072BDAF.1; Thu, 28 Nov 2019 11:39:42 +0000 Received: from FRA01-MR2-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 9c0f7d720d6b.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 28 Nov 2019 11:39:42 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Fszz/JEm1S8M8hyTykO0AI9KxQ2utcw5+SURx86yqZeVijjNEszUX86z67pXWElqAV2UeqaBg6Wn8vURyQHh1Wj7T4Gp48GRoyb/XanMaZupimE3ve0UzBuZDWznb10ls7x5GRXES+SktdDYblTdDLZZ9fe2VOEmvs0NJ/x/n1GJnzzbl32BfkIPufPM8wptVcmJCyKzkR4hXn/2QYHpJFrjVj6RiorrViRlEzgY2x7y4gqD3QUWEVNEzuhthAUR+18m/gDQo7tC5EJBaLNx/1eQucT8lWOWDx+Lfp0n41Eqn9n7Z+2rEsFnT6I5OFoS4tcp6gajJ2Re6WY1MiQUBQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rPBfAmAjkve/fo/kUolispg+4mTFJquZgtGmGkBp4fU=; b=gjkKHl05qQ3GFptxXiKuBOSgRrlOPzvIxCP1QAhY+C/E0Cp0q7/S5YO6wpXnKmRVbBugIubOWkHY/yNfiDsW7fbpOHg0AGPXeNME2waiDcONfuKN1BSFZ94d46GdXMs/7TKCdMEdVvqRZfukJsWVLUfKbvj3kcRzY92kUaub9rPKe8Iaf9OvyV7tpyX+u1jmqu2k8K3INv8B100x9q6i/kVbJP8qVMqb4nGvm/VK4Skj8VvNTAqT4B5aaOJqdJWD/Gta3amX6kyEsbBM55F0OgvxcLLxwQ/Ce+1kohZOMdJkea1YLPeu7dPF3RzHq/nAW9rz3f8zDZfNgXF7XZI3Sw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rPBfAmAjkve/fo/kUolispg+4mTFJquZgtGmGkBp4fU=; b=fWbbp61jBQHSV8tekjEVHgMURqQjk/TEZSSrmFkxAUry87gjIPy2DwcbX2fgbZ9+taxhjKgenX6ZIorwII0b/AtU+ffFyGvJbfm8vdTKnBctQCf92ggxvA6U95QsF9w1Cn4xs9ZGR+2xpmi7MmOdu6h/R8FENJAtGtnnCl3ipw8= Received: from PR2PR08MB4811.eurprd08.prod.outlook.com (52.133.109.146) by PR2PR08MB4731.eurprd08.prod.outlook.com (52.133.107.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.21; Thu, 28 Nov 2019 11:39:41 +0000 Received: from PR2PR08MB4811.eurprd08.prod.outlook.com ([fe80::f0c1:35ae:f450:eaac]) by PR2PR08MB4811.eurprd08.prod.outlook.com ([fe80::f0c1:35ae:f450:eaac%6]) with mapi id 15.20.2495.014; Thu, 28 Nov 2019 11:39:41 +0000 From: Adrian Shaw To: Henk Birkholz CC: Michael Richardson , "rats@ietf.org" Thread-Topic: [Rats] [sacm] CoSWID and EAT and CWT Thread-Index: AQHVpUfzYnlAwjFBhkKNCvXBGCo3WKegP68AgAAEtACAADIYgA== Date: Thu, 28 Nov 2019 11:39:41 +0000 Message-ID: <516500FB-3176-4527-B686-0FB7FCE62086@arm.com> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> <20047.1574929414@dooku.sandelman.ca> <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> In-Reply-To: <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Adrian.Shaw@arm.com; x-originating-ip: [217.140.106.52] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: aa140428-f4a3-46a3-7e75-08d773f7acdf X-MS-TrafficTypeDiagnostic: PR2PR08MB4731:|AM4PR0802MB2194: x-ms-exchange-purlcount: 1 X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:6108;OLM:6108; x-forefront-prvs: 0235CBE7D0 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(376002)(396003)(346002)(366004)(136003)(39860400002)(51444003)(199004)(189003)(316002)(229853002)(6486002)(102836004)(71190400001)(66446008)(66476007)(7736002)(71200400001)(76176011)(66556008)(64756008)(36756003)(99286004)(6306002)(14454004)(478600001)(91956017)(76116006)(966005)(53546011)(8676002)(6506007)(3846002)(6512007)(25786009)(11346002)(14444005)(6246003)(2616005)(446003)(256004)(186003)(81166006)(8936002)(4326008)(26005)(6436002)(6116002)(305945005)(81156014)(66946007)(6916009)(86362001)(2906002)(33656002)(66066001)(5660300002)(54906003); DIR:OUT; SFP:1101; SCL:1; SRVR:PR2PR08MB4731; H:PR2PR08MB4811.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: yNdOnQovEhhvXrSvr6n8mh6VFXzw9VyUcgheyZAz2A5s9CU3WK/Pal8yFA+KZYUY/b8v0O/H3PzwFe7fdmjQejEdPWWTzQ6n2X6P9Sxg6toKdZbAQjcHFOiE9P+kAsHzA384aCe7EYqTpUt2XWNZls87JwDe0jhKmSizbunHgjBDDcwLP4J2kpe58aK/LTxkKeLLWuhaWgrBLmOtlGCEmQ1vFrb1woNQv1eO+M5HaDRWrh/wSVR1k4E73fwlfCIJCSJSMNbO0QTBiErQc2SAFkGlBJXGyB+BcTnLPL7Nz3cQ5nk4N/NND8oKAOfMc3Cq6HGuR6aW5pse70albmcjrTjyhP+vBZA8vF5cQg6q+oI3UcVF9Cu3ZvZ9dP73A+qMwGkgVMcE69a63OI+u2Lhb2fZyjikFgwjJLPOrqyxe+2NwwqQlu2MJXV3cSiKt0hsdliig9Es9ZkNzLLZ2NSAk4AOLrpu4Skg+k4VE+nyIfU= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <561622AC7532934F9ED64B04FE449A72@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR2PR08MB4731 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Adrian.Shaw@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT010.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(346002)(376002)(396003)(136003)(40434004)(189003)(199004)(51444003)(4326008)(8676002)(8936002)(99286004)(356004)(14444005)(6486002)(316002)(6116002)(81156014)(25786009)(6862004)(5024004)(81166006)(6246003)(36756003)(26826003)(14454004)(966005)(47776003)(2906002)(66066001)(478600001)(229853002)(2616005)(446003)(102836004)(436003)(76130400001)(50466002)(6506007)(7736002)(33656002)(305945005)(186003)(11346002)(53546011)(70206006)(336012)(54906003)(70586007)(6306002)(26005)(76176011)(6512007)(3846002)(22756006)(2486003)(23676004)(5660300002)(106002)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2194; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; MX:1; A:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: 512c3f5d-4447-4705-8780-08d773f7a85c X-Forefront-PRVS: 0235CBE7D0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: HuXzTXffIQzc3pGYcJK6zpqt/InEUVCqZd0L6csgSijbxPe7LXGTf7/pF2Xqc9hD+MiI5I2d2aNp8qGG3UtQMS3NJKplxhhOj+LCjqpOjnAaNn50ner16uOobW41opH3bLzZmUo7Mme6ak3r53ZPbsBTogire7F9nUEduwJ+9fepIrJiyUT5ihfDOVvNGe6hTwp1evGRgraTaTYBY+i+Ab0lut4DTUWAyDelidQejORsVDKUZjPhPRj3lcH5K+b7Q5Xc5Ww4sHnxWXqAMvPRtGOBKRnmynUbBW/e3veYVzS//Cksh0TSt2XquKpbHed1I99Wd+H+Sd29qb4Owww2+PoYLGwb6+cR9QcH0www6kyYcj83/DpIZ7kEBhttrUB0ezPpDgmVpnH2O7eC9Y6T7c6DjpAysPLJ6PydLjnFOWRIfpkhDMCAeFY8FBg0RY4YyHPTTw9/hni1cRdCJ7xAuKUTwXKDEYPk902icGc9Kwc= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Nov 2019 11:39:49.0118 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: aa140428-f4a3-46a3-7e75-08d773f7acdf X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2194 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 11:39:55 -0000 SGkgSGVuaywNCg0KVGhlIHNjZW5hcmlvIHRoYXQgTWljaGFlbCBkZXNjcmliZWQgd2FzIG9uZSBJ IGhhZCBpbiBtaW5kLiBJdCBpcyBtdWNoIGVhc2llciB0byB1cGRhdGUgYSBUQSBvciBhIFRFRSB0 byBzdXBwb3J0IEVBVCBvbiBhbiBleGlzdGluZyBzeXN0ZW0gdGhhbiBpdCBpcyB0byB1cGRhdGUg dGhlIGVhcmx5IHN0YWdlIGJvb3QgbG9hZGVycyBhbmQgdGhlIGltYWdlIHNpZ25pbmcgc3lzdGVt cyBpbiBvcmRlciB0byBzdXBwb3J0IFNVSVQuDQoNCkdsYWQgdGhhdCB5b3Ugc29tZXdoYXQgYWdy ZWUgOi0pDQoNCkFkcmlhbg0KDQo+IE9uIDI4IE5vdiAyMDE5LCBhdCAwODo0MCwgSGVuayBCaXJr aG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6DQo+DQo+IEkgYW0g bm90IGNvbnZpbmNlZCB0aGF0IHRoZSBnYXAgaXMgYXMgYmlnIGFzIGlsbHVzdHJhdGVkLg0KPg0K PiBNYXliZSBiZWNhdXNlIEkgbmVlZCBhIHVzZSBjYXNlIGRlc2NyaXB0aW9uIHdoeSB0aGUgImJv b3QvcmVjb3Zlcnkgcm9tcyIgYXJlIGFscmVhZHkgY3JlYXRpbmcgRUFUIGFuZCBub3QgYSBzb2Z0 d2FyZSBjb21wb25lbnQgcnVubmluZyBpbiB0aGUgVEVFLg0KPg0KPiBDcmVhdGluZyBNZWFzdXJl bWVudHMgJiBDcmVhdGluZyBFQVQgYXJlIG5vdCB0aWdodGx5IGNvdXBsZWQgdGltZS13aXNlLCBp cyBteSBhc3N1bXB0aW9uIHRvZGF5LCBmb3IgZXhhbXBsZSBpbiBhIGNlbGwtcGhvbmUsIEknZCBh c3N1bWUgdG9kYXkuDQo+DQo+IEkgYW0gaW4gZnVsbCBhZ3JlZW1lbnQsIHRoYXQgdGhlIGVudGly ZSBTVUlUIE1hbmlmZXN0IHdvdWxkIGJlIG92ZXIta2lsbCBpbiB0aGUgc3RhZ2VzICJib290L3Jl Y292ZXJ5IHJvbXMiLiBBbHRob3VnaCwgSSBrbm93IG9mIHJlY292ZXJ5IHJvbXMgdGhhdCBkbyBl eGFjdGx5IHRoYXQ6IHJldHJpZXZpbmcgYSBTVVRJIE1hbmlmZXN0IGluY2x1ZGluZyBmaXJtd2Fy ZSB0byBkby4uLiB3ZWxsIHJlY292ZXJ5Lg0KPg0KPiBWaWVsZSBHcsO8w59lLA0KPg0KPiBIZW5r DQo+DQo+IE9uIDI4LjExLjE5IDA5OjIzLCBNaWNoYWVsIFJpY2hhcmRzb24gd3JvdGU6DQo+PiBI ZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCj4+ ICAgICA+IHRvIHlvdXIgZmlyc3QgcG9pbnQ6IEkgYW0gbm90IHN1cmUgd2hhdCBsZWdhY3kgc3lz dGVtcyB0aGF0IHdvdWxkIGJlIGFibGUgdG8NCj4+ICAgICA+IGNyZWF0ZS9wcm9jZXNzIEVBVCB3 b3VsZCBub3QgYmUgYWJsZSB0byBwcm9jZXNzIGEgU1VJVCBtYW5pZmVzdC4gQ291bGQgeW91DQo+ PiAgICAgPiBlbGFib3JhdGUgb24gdGhhdD8NCj4+IEkgdGhpbmsgdGhhdCBhbiBleGFtcGxlIGlz IGluIHlvdXIgaGFuZCwgYSBzbWFydHBob25lLg0KPj4gSSB0aGluayB0aGF0IHRoZWlyIGJvb3Qv cmVjb3Zlcnkgcm9tcyBkbyBub3QgcHJvY2VzcyBTVUlUIHRvZGF5LCBidXQgaXQgd291bGQNCj4+ IGJlIHBvc3NpYmxlIHRvIGdlbmVyYXRlIG1lYXN1cmVtZW50cyBpbiBFQVQgZm9ybWF0IGFzIHRv IHdoYXQgaXMgcnVubmluZw0KPj4gaWYgdGhlIG1lYXN1cmVtZW50cyBhcmUgYXZhaWxhYmxlLg0K Pj4gICAgID4gSSdkIG1heWJlIG5vdCBjYWxsIHRoYXQgYSBkZXBlbmRlbmN5LCBidXQgcmF0aGVy IHN5bmVyZ3kNCj4+ICAgICA+IGluIGRhdGEgbW9kZWxzLCBidXQgSSBhbSB1bmRlciB0aGUgc3Vz cGljaW9uIHRoYXQgSSBzaW1wbHkgZG9uJ3QgdW5kZXJzdGFuZA0KPj4gICAgID4gdGhlIHNjZW5h cmlvIHRoYXQgeW91IGFyZSB0YWxraW5nIGFib3V0Lg0KPj4gSSB0aGluayB0aGF0IHRoZSBzeW5u ZXJneSBtYWtlcyBzZW5zZSB0byBtZS4NCj4+IEp1c3QgYmVjYXVzZSB3ZSBkZXNjcmliZSB3aGF0 IGlzIHJ1bm5pbmcgdXNpbmcgU1VJVCB0ZXJtaW5vbG9neSBhbmQNCj4+IGNvbnN0cnVjdHMgZG9l cyBub3QgbWVhbiB0aGF0IHdlIGhhdmUgdXNlIHRoZSBlbnRpcmUgTWFuaWZlc3QuDQo+PiAtLQ0K Pj4gTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+LCBTYW5kZWxtYW4g U29mdHdhcmUgV29ya3MNCj4+ICAtPSBJUHY2IElvVCBjb25zdWx0aW5nID0tDQo+PiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gUkFUUyBtYWlsaW5n IGxpc3QNCj4+IFJBVFNAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmF0cw0KPg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiBSQVRTIG1haWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KDQpJTVBPUlRBTlQgTk9USUNF OiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25m aWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBp bnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBh bmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2Ug aXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBh bnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Thu Nov 28 04:22:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 975A7120845 for ; Thu, 28 Nov 2019 04:22:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bibDIniHvrIi for ; Thu, 28 Nov 2019 04:22:28 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B584120841 for ; Thu, 28 Nov 2019 04:22:27 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xASCMLAa002163 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 28 Nov 2019 13:22:22 +0100 Received: from [192.168.178.8] (134.102.43.219) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Thu, 28 Nov 2019 13:22:16 +0100 To: Adrian Shaw CC: Michael Richardson , "rats@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> <20047.1574929414@dooku.sandelman.ca> <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> <516500FB-3176-4527-B686-0FB7FCE62086@arm.com> From: Henk Birkholz Message-ID: <25edb1da-774a-6c55-b80e-f65b93aefc86@sit.fraunhofer.de> Date: Thu, 28 Nov 2019 13:22:12 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <516500FB-3176-4527-B686-0FB7FCE62086@arm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.219] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 12:22:30 -0000 Ah! Yes, updating a Trusted Application in a TEE is way way easier than updating an "early stage boot loaders and the image signing systems". I also totally agree with that. Somehow my point of view came from the other side around. But the same is true for creating EAT, right? Or is it easier for "early stage boot loaders and the image signing systems" to create EAT than to process SUIT. I think that is intended to be the conclusion here, if I am not mistaken, but I do not yet understand why that is the case. Viele Grüße, Henk On 28.11.19 12:39, Adrian Shaw wrote: > Hi Henk, > > The scenario that Michael described was one I had in mind. It is much easier to update a TA or a TEE to support EAT on an existing system than it is to update the early stage boot loaders and the image signing systems in order to support SUIT. > > Glad that you somewhat agree :-) > > Adrian > >> On 28 Nov 2019, at 08:40, Henk Birkholz wrote: >> >> I am not convinced that the gap is as big as illustrated. >> >> Maybe because I need a use case description why the "boot/recovery roms" are already creating EAT and not a software component running in the TEE. >> >> Creating Measurements & Creating EAT are not tightly coupled time-wise, is my assumption today, for example in a cell-phone, I'd assume today. >> >> I am in full agreement, that the entire SUIT Manifest would be over-kill in the stages "boot/recovery roms". Although, I know of recovery roms that do exactly that: retrieving a SUTI Manifest including firmware to do... well recovery. >> >> Viele Grüße, >> >> Henk >> >> On 28.11.19 09:23, Michael Richardson wrote: >>> Henk Birkholz wrote: >>> > to your first point: I am not sure what legacy systems that would be able to >>> > create/process EAT would not be able to process a SUIT manifest. Could you >>> > elaborate on that? >>> I think that an example is in your hand, a smartphone. >>> I think that their boot/recovery roms do not process SUIT today, but it would >>> be possible to generate measurements in EAT format as to what is running >>> if the measurements are available. >>> > I'd maybe not call that a dependency, but rather synergy >>> > in data models, but I am under the suspicion that I simply don't understand >>> > the scenario that you are talking about. >>> I think that the synnergy makes sense to me. >>> Just because we describe what is running using SUIT terminology and >>> constructs does not mean that we have use the entire Manifest. >>> -- >>> Michael Richardson , Sandelman Software Works >>> -= IPv6 IoT consulting =- >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > From nobody Thu Nov 28 08:47:39 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 464931208A2; Thu, 28 Nov 2019 08:47:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=p7OV7rvv; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=PFo+R3qD Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yCXAqJ9SQDYJ; Thu, 28 Nov 2019 08:47:35 -0800 (PST) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50083.outbound.protection.outlook.com [40.107.5.83]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75D4C120885; Thu, 28 Nov 2019 08:47:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1UZNnYGaKrOWD5jk/0JFQePZMDpG9ka5mLkLBuUEmM4=; b=p7OV7rvvqpvC+j0gAOlWvlsuAIKBb4rMoh6QyM9cYzUchJTO6l8Yjn2qFGg0qWr/AY4IjP/7lC9GIrfiOP9sX2ld1MmPzFsVInECB50h4GAFLD8uH3MtMS7l2rR6+4WYdcs5VBwyKvYlSkrv/k6hcLI3ywWAjgmUibvsTUUR1Co= Received: from VI1PR0801CA0078.eurprd08.prod.outlook.com (2603:10a6:800:7d::22) by DB7PR08MB3418.eurprd08.prod.outlook.com (2603:10a6:10:27::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.17; Thu, 28 Nov 2019 16:47:31 +0000 Received: from VE1EUR03FT027.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::207) by VI1PR0801CA0078.outlook.office365.com (2603:10a6:800:7d::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Thu, 28 Nov 2019 16:47:31 +0000 Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT027.mail.protection.outlook.com (10.152.18.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Thu, 28 Nov 2019 16:47:31 +0000 Received: ("Tessian outbound a8ced1463995:v37"); Thu, 28 Nov 2019 16:47:30 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 1a58c4bb3637bbe1 X-CR-MTA-TID: 64aa7808 Received: from 04238db612bb.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 7EEE6B71-2378-4CCF-AA39-40C5A15ED80C.1; Thu, 28 Nov 2019 16:47:25 +0000 Received: from EUR04-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 04238db612bb.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 28 Nov 2019 16:47:25 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kbEYKa6CBkEm8YFy59lUmc1LZ5SXL047J/+W9GDkd0d+RLTa4NjqLS1+bHHenN7y6XI6tPvM+a5IO6CJvW3pUvPP2HLMUPsfihwRnZLHDgqbv/dvKTXqcVDuacAn7yAjTu/arvGDYidk/yVtxdKKS29yxbGQ2d88G5ICrEl66efFMdqzuqjM6R6ga/jYvuikIxgq9YHF4YWNQgD//8r0ujSnyuq6nycPx84IKfC8T4XCV+S1v5zoPhWZswhludzR+WJL5cCbFqDr0WrIOCH/F1WMZwqwee8AeNK67xAIjWTZoNctm6GMefy/z2IsOR77ZCSNs6pbFjVQYsuO4HS5GQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kKe2lysfEeaR+xD5nIJPuYSX5S+WC3hqBMHWs06VUN4=; b=TVvxuYpCBYvFHI3nAIIp/B4Av2Zl4Z2W36Oe0Ns3RuPdamDQ5Vy1CA/9Ogq7gjBZpJMIPU53s4TgGHGPNNFwOEnCI88AIBKBmxkbytbQKxcRmJQdbV7HpurVkcNYLBFEJPJC0ZGz/8HGz9DDqPgQEabuKixZCDV1LS9OFkFuacMva9MmpOq4id6lNgJ9JBMoydgZl74TPFN0apT1z2z0oh4jn8z8dCjtPynB+NMgsd+H591Ljp5ZU2+lb3Joy2w0VOg+OG6saCb0Puzvtvy9cyXMNK69ji7NJHwoQoBA/1CPF3Psh+wmk28tv/zfjI+Cv/AKLD9mHms6O5uIs89bPA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kKe2lysfEeaR+xD5nIJPuYSX5S+WC3hqBMHWs06VUN4=; b=PFo+R3qDmyrgCM/F86vh15XoVW5QhNx6tiUw719XAEiXCKOeFpnkKmV/aES3bgM9DgvaiyFHzgPoI30+Bn1A90QpMQgM9XPpNuHXgs/oZV+d7H5RsrlgH3M1/sfA7dCVAU24u0s5t28aw6Ersy/RfelCrqg/ttFBHyozIhjYR60= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (20.179.18.151) by AM6PR08MB4866.eurprd08.prod.outlook.com (10.255.97.207) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20; Thu, 28 Nov 2019 16:47:23 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::e8f5:4b6f:34b7:47a4%7]) with mapi id 15.20.2495.014; Thu, 28 Nov 2019 16:47:23 +0000 From: Thomas Fossati To: Henk Birkholz , Hannes Tschofenig , Laurence Lundblade , "sacm@ietf.org" , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [sacm] [Rats] CoSWID and EAT and CWT Thread-Index: AQHVoAOFHbeRQea3TEO+3tpXPiFPYKeWUfEAgAfW1QCAAONGgIAAO/qAgAAFYICAAYmVAA== Date: Thu, 28 Nov 2019 16:47:23 +0000 Message-ID: <804D9F81-B058-4C1A-9ECA-726B6F027BA5@arm.com> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.1f.0.191110 Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; x-originating-ip: [217.140.106.51] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: f45daef6-b252-44b7-23fb-08d77422a954 X-MS-TrafficTypeDiagnostic: AM6PR08MB4866:|AM6PR08MB4866:|DB7PR08MB3418: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true x-ms-oob-tlc-oobclassifiers: OLM:2887;OLM:2887; x-forefront-prvs: 0235CBE7D0 X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(346002)(376002)(366004)(396003)(189003)(199004)(305945005)(5660300002)(3846002)(6116002)(6306002)(2906002)(7736002)(4326008)(6246003)(6512007)(66556008)(66476007)(66946007)(966005)(76116006)(91956017)(66446008)(14454004)(478600001)(316002)(2501003)(86362001)(64756008)(2201001)(25786009)(229853002)(8676002)(81156014)(6436002)(8936002)(6486002)(110136005)(81166006)(58126008)(36756003)(99286004)(66066001)(446003)(102836004)(26005)(33656002)(561944003)(71200400001)(71190400001)(5024004)(186003)(6506007)(2616005)(53546011)(14444005)(76176011)(11346002)(256004); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB4866; H:AM6PR08MB4231.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: RjxTTHGSNIDO3NjbsIi2XPzOD0sjHU3cDYSpoE0Aa7CQpCh8J9BcbH5nkQmLvQSPIGxJttinOBBMPp6PKCcbYSLtxGLdERqT6Uy5Z1VM2mohjZI7kw6NZ3jJqdFmXLLHI2g58ZrOu9siFV8SfAULp01i0if2VjFOvaxlsf26CV42IhhacB3BbVl4D/hpDwZngaSK7/Yyl45MqIelu69zFXAkhFkpzso0DP6rWYzsgBapH2Aj0EoE9wVOmfzobE1Q9DPWXeCqcWhsCe9rzo7O3TGWiUIKNl/+ReBq72GepDXM0Ybg89t7hMOKqJHeCGkjYSX/B7IIr7FWqjEDkUnJcUXFUf0bG6aa0asKxmXzh4b2D8zlWHodPraKM+2SpCK+553hNzSgHGDjzPbvvQaEm+ZYFBtasqbej/CdgiIVwM6FYA8ZnCBRu7inep6Th6YSk0i5OjghLAUYVGLd9OnzfPqVoOVOJr9oYsf/xcOJhuc= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4866 Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Fossati@arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT027.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(39860400002)(376002)(346002)(396003)(199004)(189003)(40434004)(316002)(22756006)(8936002)(2906002)(47776003)(76176011)(23676004)(478600001)(2486003)(8676002)(14454004)(66066001)(81156014)(966005)(6246003)(436003)(450100002)(11346002)(446003)(2616005)(33656002)(99286004)(2501003)(229853002)(6486002)(6512007)(6306002)(36756003)(102836004)(26005)(4326008)(53546011)(6506007)(58126008)(110136005)(336012)(561944003)(106002)(36906005)(50466002)(186003)(86362001)(6116002)(81166006)(26826003)(7736002)(2201001)(305945005)(3846002)(356004)(5660300002)(70586007)(70206006)(76130400001)(25786009)(14444005)(5024004); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR08MB3418; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1; X-MS-Office365-Filtering-Correlation-Id-Prvs: 531a1a15-0a6e-495b-fab6-08d77422a462 X-Forefront-PRVS: 0235CBE7D0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: lDJH4kaUXB3vS3tGiteH1/nFfbywEV9RXYsah30tIPhTnMXNh1Ag+j1lVjP9NGxbgwoq6rPk4LTKVu1FyIewuRAlnk11WOI346qZ8rggyZo02bMXeahC7ZbT0CqDv2cgc/T74wEPBgxKVyWI28V2KskGuuPN2T48wUdtkoqRs9SglqFp6gN2vWbFN5WeS9ByI7CPqXqcRkmuE42mHWZiJwkHtlXAsKeCyZRgdFROmnXCMp45EHNuS6w7mJmDtgC1Rck09IXzleBByK52bgnA3mBLA6SdIklBj8tibZDiBRkJ+6YcbC3LhqzEBujlZxalIuCQIYnJ4OI3qHoSrJRGqWkVkmpNcFn+TkeXSvUOirtgFwz0lxjDPghHSH1lEKb1Vze0Il6vUrJup9xCCNLyHMIMzfdml1/WTOmhTFSJW5S3CODaqNARH1sjAhh1yh4C1QXfYMW7ss2B7Ddlzef3+a8+Fgn7HfwZkD6CZYFltMQ= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Nov 2019 16:47:31.3387 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f45daef6-b252-44b7-23fb-08d77422a954 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3418 Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 16:47:38 -0000 SGkgSGVuaywNCg0KT24gMjcvMTEvMjAxOSwgMTc6MTgsICJIZW5rIEJpcmtob2x6IiA8aGVuay5i aXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6DQo+IHdlIGhhdmUgYSBjb3N3aWQgZXh0 ZW5zaW9uIGluIHRoZSBxdWV1ZSB0aGF0IGFsbG93cyBmb3IgdGhlIGluY2x1c2lvbiBvZg0KPiBo YXNoLWVudHJpZXMgdG8gdmVyeSBraW5kIG9mIHJlc291cmNlLWNvbGxlY3Rpb24gdHlwZSAoYW5k IGFsc28gMTItMTQNCj4gYWRkaXRpb25hbCBpbmRleGVzLCBJIHRoaW5rLCB0aGF0IGFsbG93IGZv ciB0aGUgY3JlYXRpb24gb2YgUmVmZXJlbmNlDQo+IEludGVncml0eSBNYW5pZmVzdHMsIGluY2x1 ZGluZyBoYXNoZXMgZm9yIHJ1bm5pbmcgcHJvY2Vzc2VzKS4gQnV0IHRoaXMNCj4gd2lsbCBub3Qg YmUgc3VibWl0dGVkIHRoaXMgeWVhciBhbnltb3JlLCBJIGFtIGFmcmFpZC4gVmVyeSBlYXJseSBu ZXh0IHllYXIhDQoNClZlcnkgaW50ZXJlc3RpbmcsIHRoYW5rcy4gIElmIHBvc3NpYmxlLCBJJ2Qg bGlrZSB0byBoYXZlIGEgbG9vayBhdCB0aGUNCnByb3Bvc2FsLiAgKE5vIHdvcnJpZXMsIEknbGwg YXNrIGFyb3VuZCBoZXJlIGZpcnN0LCB0aGVyZSBzaG91bGQgYmUgYQ0KY291cGxlIG9mIGNvbGxl YWd1ZXMgd2l0aCBhY2Nlc3MgdG8gdGhlIFJJViB3b3JrLWluLXByb2dyZXNzIGluIHRoZSByb29t DQpuZXh0IHRvIG1pbmUuKQ0KDQpIb3dldmVyLCBpZiBJIGV4dHJhcG9sYXRlIGNvcnJlY3RseSBm cm9tIHdoYXQgeW91IHNheSwgdGhpcyBuZXcgQ29TV0lEDQpleHRlbnNpb24gd291bGQgcG9wIHVw IG9uIHRoZSBSSU0gc2lkZSByYXRoZXIgdGhhbiBiZWluZyBhIHdheSB0byB3cmFwDQp0aGUgbWVh c3VyZW1lbnRzIGNvbWluZyBmcm9tIHRoZSBkZXZpY2UgaW4gYW4gYXR0ZXN0YXRpb24gcmVwb3J0 Pw0KSWYgc28sIGl0IG1ha2VzIGEgbG90IG9mIHNlbnNlIHRvIG1lLg0KDQpbLi4uXQ0KDQpJJ3Zl IGRvbmUgYSBiaXQgb2YgcmVhZGluZyBpbiB0aGUgbGFzdCB0d28gZGF5cyBhbmQgdGhlIG1vcmUg SSBsb29rIGF0DQpDb1NXSUQgdGhlIG1vcmUgSSdtIHBlcnN1YWRlZCB0aGF0IHdoaWxlIHRoZXkn ZCB3b3JrIHBlcmZlY3RseSB3ZWxsIGZvcg0KYSAic29mdHdhcmUgaW52ZW50b3J5IiBjbGFpbSwg dGhlIHNlbWFudGljIG92ZXJsYXAgd2l0aCBhIFRQTS9URUUvUFNBDQptZWFzdXJlbWVudCBpcyBh IGJpdCB0ZW51b3VzIGFuZCBwcm9iYWJseSBub3QgZW5vdWdoIHRvIGp1c3RpZnkgdGhlaXINCnVz YWdlIGluIHRob3NlIGNvbnRleHRzLg0KDQpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgaW4gVFBN L1RFRS9QU0EgdGhlICptZWFzdXJlbWVudCosIGkuZS4gdGhlDQpyZXN1bHQgb2YgYSBmdW5jdGlv biBjb21wdXRlZCBhdCB7Ym9vdCxydW59LXRpbWUgb24gYSBwaWVjZSBvZg0KZXhlY3V0YWJsZSBh bmQvb3Igc3RhdGljIG1lbW9yeSwgaXMgdGhlIGZpcnN0IGNsYXNzIG9iamVjdCBvZiB0aGUNCmF0 dGVzdGF0aW9uLiAgQSBtZWFzdXJlbWVudCBjb21lcyB3aXRoIGEgYnVuY2ggb2Ygb3B0aW9uYWwg bWV0YWRhdGENCmF0dGFjaGVkIChlLmcuLCB0aGUgbWVhc3VyZWQgc29mdHdhcmUvZmlybXdhcmUg Y29tcG9uZW50IG5hbWUgYW5kDQp2ZXJzaW9uLCBpdHMgc2lnbmVyLCBldGMuKSwgYnV0IHRoZXNl IGFyZSBlZmZlY3RpdmVseSBvbmx5IG1ldGFkYXRhLCBub3QNCm5lY2Vzc2FyeSBhdHRyaWJ1dGVz IC0tIGluIGZhY3QsIG91ciBpbXBsZW1lbnRhdGlvbiBvZiB0aGUgdmVyaWZpZXINCmRvZXNuJ3Qg Y2FyZSBpZiB0aGV5IGFyZSBub3QgZm91bmQgaW4gdGhlIHN1Ym1pdHRlZCB0b2tlbi4gIE9uIHRo ZSBvdGhlcg0KaGFuZCwgdGhlIGVudGl0eSBtb2RlbGxlZCBieSBhIFNXSUQgaXMgYSAqc29mdHdh cmUgY29tcG9uZW50Kiwgc28gdXNpbmcNCnRoYXQgdG8gd3JhcCBhIG1lYXN1cmVtZW50IHdvdWxk IGxvb2sgbGlrZSBhIHNsaWdodCBzZW1hbnRpYyBhYnVzZT8NCg0KKEFzIGEgbWV0YSBjb21tZW50 LCBpdCBzZWVtcyB0byBtZSB0aGF0IHRoZSByaXNrIGFzc29jaWF0ZWQgd2l0aA0KQ29TV0lEJ3Mg ZXhjZWxsZW50IHN5bnRhY3RpYyBtYWxsZWFiaWxpdHkgaXMgaXRzIHNlbWFudGljcyBjYW4gYmUN CnN0cmV0Y2hlZCBhIHRhZCB0b28gbXVjaC4pDQoNCk9LLCBjb25jbHVkaW5nIHRoaXMgbG9uZyAo YW5kIGJvcmluZykgcmFtYmxpbmcgd2l0aCBhbiBhcmMgYmFjayB0bw0KTGF1cmVuY2UncyBlbWFp bCAiTW9yZSBjbGFpbXM/IFdoZW4gaXMgRUFUIGRvbmU/IiBbMV0gYW5kIHRoZSByZWxhdGVkDQpk aXNjdXNzaW9uIGluIFNpbmdhcG9yZSwgbXkgY3VycmVudCB0YWtlIG9uIHRoaXMgaXM6DQoxLiBT VyBJbnZlbnRvcnkgY2xhaW06IHllcywgd2l0aCBDb1NXSUQ7DQoyLiBNZWFzdXJlbWVudHMgYW5k IEludGVncml0eSBDaGVja3MgY2xhaW06IHllcyBwbGVhc2UsIHdpdGggYSBuZXcgYWQNCiAgIGhv YyBmb3JtYXQuDQoNCj4gVGhlIFNVSVQgbWFuaWZlc3QgY2FuIGxvb2sgdmVyeSBjb21wbGV4IChD RERMLXdpc2UpLCBidXQgcGxlYXNlIGtlZXAgaW4NCj4gbWluZCB0aGF0IG1vc3QgbWVtYmVycyAo Y29udGVudCBpdGVtcykgYXJlIG9wdGlvbmFsLCBzbyBhbiBhY3R1YWwNCj4gaW5zdGFuY2Ugb2Yg U1VJVCBtYW5pZmVzdCBjYW4gYmUgcXVpdGUuLi4gY29uY2lzZSA6KSBXaGlsZSBJIHNlZSB0aGUN Cj4gcG9pbnQgaW4gZG9pbmcgaXQgImFsbCBpbiBvbmUgdGhpbmciIHRoZSBTVUlUIG1hbmlmZXN0 IGlzIGFuIGV4Y2VsbGVudA0KPiByZXByZXNlbnRhdGlvbiBmb3Igd2hhdCBpcyBuZWVkZWQgaW4g dXBkYXRpbmcgc21hbGwgYW5kIGJpZyBvciBjbG91ZHkNCj4gdGhpbmdzIGFuZCByZWR1bmRhbnQg c2VtYW50aWNzIGluIGRhdGEgZm9ybWF0cyBvZnRlbiBjcmVhdGUNCj4gY29ycmVzcG9uZGluZyBm cmljdGlvbiBpbiBzZW1hbnRpYyBpbnRlcm9wZXJhYmlsaXR5IGxhdGVyIG9uIChpb3RkaXIgaGF0 DQo+IG9uIG9waW5pb24pLiBTbyBteSBmaXJzdCByZWFjdGlvbiBpcyB0byBjb21iaW5lIHRoZSBm dW5jdGlvbmFsaXR5IG9mDQo+IGJvdGggYW5kIG5vdCB0byByZWNyZWF0ZSB0aGUgZnVuY3Rpb25h bGl0eSByZWR1bmRhbnRseSBvbiBlYWNoIHNpZGUuDQoNCkF0IHRoZSBtb21lbnQgaXQgc3RpbGwg bG9va3MgbGlrZSBhIHN0cmV0Y2ggdG8gbWUsIGJ1dCBJJ2QgbGlrZSB0byB0YWtlDQpzb21lIG1v cmUgdGltZSB0byBtdWxsIGl0IG92ZXIgYW5kIGRpc2N1c3MgaXQgd2l0aCBteSBmZWxsb3cgU1VJ VA0KY29sbGVhZ3VlcyBiZWNhdXNlIEkgdGhpbmsgaXQncyBhbiBpbnRlcmVzdGluZyB0aG91Z2h0 Lg0KDQpDaGVlcnMsIHRoYW5rcyENCg0KWzFdIGh0dHBzOi8vbWFpbGFyY2hpdmUuaWV0Zi5vcmcv YXJjaC9tc2cvcmF0cy9MWHExSkgtdzE2TDZxWGV5QmJsS1RrUV8tRkENCg0KDQpJTVBPUlRBTlQg Tk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFy ZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90 IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlh dGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29u LCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlv biBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Thu Nov 28 13:53:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63B80120033 for ; Thu, 28 Nov 2019 13:53:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ihqPixlxffS2 for ; Thu, 28 Nov 2019 13:53:31 -0800 (PST) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E474C1207FC for ; Thu, 28 Nov 2019 13:53:30 -0800 (PST) Received: from [10.182.0.86] ([45.56.150.186]) by :SMTPAUTH: with ESMTPA id aRj7i6CsW1GdmaRj8iKWKA; Thu, 28 Nov 2019 14:53:30 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_8AD69A77-7450-4536-9A63-B9B1BAF7C5B9" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 28 Nov 2019 13:53:29 -0800 In-Reply-To: Cc: Thomas Fossati , "rats@ietf.org" , Hannes Tschofenig , Henk Birkholz , "sacm@ietf.org" To: Adrian Shaw References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfC5z4z7rp4m0tq635uYJNp3i3uNUE0q5WwpuNRII+iHO91hejWk1Vzq85oz5pe0MpBKYsEmcDsn7tXlGm/oqM/n0VzvfYR5Gj83bjfkNE1TW7GT7IXRQ YMpGNhnE29DqQwBd1IVa73qdSCaWHRv3b8j530nZBdZ9ErFRpFponjeNQBF4hB+Z8hDGtXkgWcT4j7EwDkJ9DGZTEzb5+znsGuSpRVrUKb32Wz9qOaW3sNIt 4dzzD+g7OklEqkvcofP8TTfKc6u9iyS6y73m8ZANBnPaXUJ9lFAz4dE66+WQxmHU1G+D9spCH8qgofYyA8LSByioQwifRTHoTNBrA0id4KM= Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Nov 2019 21:53:34 -0000 --Apple-Mail=_8AD69A77-7450-4536-9A63-B9B1BAF7C5B9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I am very much agreement with Adrian. SUIT is far from wide adoption, yet billions of devices have = verified/secure boot* and do a good job of SW update. Some of these = devices like mobile phones have very complex boot and multifaceted SW = updated, other are very simple lost cost single-use devices. For many use cases, a simple EAT with only a few claims will suffice. = Maybe the only claims are the UEID and the version of THE software for = the device because it only has one SW component. Only the mandatory = CoSWID fields, plus version, are filled in for the single SW component. = Such an EAT would have 8 claims as in the example below. It is critical = IMO that EAT keeps tokens for these simple use case simple. The minimum = CoSWID is 5 claims right now. Wouldn=E2=80=99t want to increase that. Constructing the payload for this EAT is pretty simple. The only claim = that varies from one token to the next is the nonce. The CoSWID part = could be a hard-coded byte array containing the encoded CBOR since it = will never change. The harder part of EAT here will be COSE and signing = key set up, not claim construction. Importantly, the boot SW of this simple device need not be touched. The = EAT implementation automatically gets the security from whatever boot = security it has.=20 Even on a complex device such as one with a TEE and TA=E2=80=99s, the = TA=E2=80=99s most likely get all the security from the boot sequence and = TEE OS without having to modify the boot sequence or the TEE OS (I am = quite sure of this having done it for Qualcomm's Hardware Token here = ). LL * Generally agree with Monty=E2=80=99s recent definition of verified = boot; some people call this secure boot 18( [ / protected parameters, bstr wrapped / << { / alg / 1: -7 / ECDSA 256 / } >>, / unprotected parameters / { / kid / 4: h'4173796d6d657472696345434453413 23536' / 'AsymmetricECDSA256' / }, / COSE payload, the EAT, bstr wrapped / << { / nonce / 7:h'948f8860d13a463e8e', =20 / UEID / 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', =20 / The CoSWID / 21: { =20 / tag-id, globally unique identifier for the software = component / 0: "trustedfirmware.org/TF-M ", / tag-version (here: 0, i.e. initial tag) / 12: 0, / software component name / 1: "TF-M", / version of the software component / 13: "1.0.0-rc1+build.123", / entity, i.e. organizations responsible for producing or = releasing the software component / 2: { / entity name / 31: "Linaro Limited=E2=80=9D, / entity role (here: software creator) / 33: 2, }, } } >>, / signature / h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f 9179bc3d7438bacaca5acd08c8d4d4f96131680c42 9a01f85951ecee743a52b9b63632c57209120e1c9e 30' ] ) > On Nov 27, 2019, at 9:13 AM, Adrian Shaw wrote: >=20 > While there is some synergy with the SUIT definition, I=E2=80=99m = unconvinced that it should be the way to express a software component = metadata. Firstly, there are legacy systems without SUIT that would want = to use EAT, and such a dependency would make it hard for incremental = adoption. Secondly, not all the data from the SUIT manifest is needed = for this claim. >=20 > Adrian >=20 >> On 27 Nov 2019, at 16:59, Thomas Fossati = wrote: >>=20 >> Hi Henk >>=20 >> Thanks very much for your input. >>=20 >> On 27/11/2019, 13:24, "Henk Birkholz" = wrote: >>> yes there are ways to deal with firmware in SWID, namely the = resource >>> type (index 19) in the set of SWID resource-collection [1] in >>> combination with the rel type (index 40) entries. >>>=20 >>> This way, you would not have to use filesystem-items, but this way = is >>> also a bit clunky and would require an informational guidance = document >>> describing how to use *SWID for that. >>=20 >> That's interesting because initially I also tried to use the resource >> type -- which looked like the less wrong among all the available = types >> in the resource collection. However it wasn't clear to me how to >> associate a checksum to the component, hence I went for the >> filesystem-item. Maybe I was just looking in the wrong place or = maybe, >> as you say, there's a magic firmware recipe that's worth documenting >> here. >>=20 >>> There are some quite smart ways to do that actually with >>> filesystem-items, but I think it is more feasible to use a SUIT >>> manifest here to describe everything relevant to the "firmware = thingy" >>> and then put a CoSWID into the SUIT manifest's outer wrapper [2] = that >>> then represents the rest of the semantics that is not covered by the >>> manifest but by CoSWID. This method is fine, as the COSE envelope >>> around the EAT will make tempering with the outer wrapper of the = SUIT >>> Manifest evident. >>>=20 >>> I think that is a more elegant way to do it, actually, and the = reason >>> why issue #46 in the EAT repo proposes to define a Claim to include = a >>> SUIT Manifest in an EAT, too. >>=20 >> I'll look into this, thanks for the pointer. >>=20 >> Stepping back for a second and looking from the perspective of my >> immediate requirement (i.e., "Is it possible to translate PSA's = software >> component claim using purely EAT constructs?"), ideally I'd like to = have >> something that is expressive enough to encode my semantics (i.e.: SW >> component name, version, signer and measurement) without being overly >> complex. >>=20 >> So my knee-jerk reaction is if that implies pulling a dependency on >> SUIT maybe it's a bit too much? But I confess haven't yet looked at >> the details of your proposal nor I can claim enough SUIT-foo to = really >> grok the complexity involved. As said, I'll have a look shortly. >>=20 >> cheers! >>=20 >> IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_8AD69A77-7450-4536-9A63-B9B1BAF7C5B9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = am very much agreement with Adrian.

SUIT is far from wide adoption, yet = billions of devices have verified/secure boot* and do a good job of SW = update. Some of these devices like mobile phones have very complex boot = and multifaceted SW updated, other are very simple lost cost single-use = devices.

For = many use cases, a simple EAT with only a few claims will suffice. Maybe = the only claims are the UEID and the version of THE software for the = device because it only has one SW component. Only the mandatory CoSWID = fields, plus version, are filled in for the single SW component. Such an = EAT would have 8 claims as in the example below. It is critical IMO that = EAT keeps tokens for these simple use case simple. The minimum CoSWID is = 5 claims right now. Wouldn=E2=80=99t want to increase that.

Constructing the payload = for this EAT is pretty simple. The only claim that varies from one token = to the next is the nonce. The CoSWID part could be a hard-coded byte = array containing the encoded CBOR since it will never change. The harder = part of EAT here will be COSE and signing key set up, not claim = construction.

Importantly, the boot SW of this simple device need not be = touched. The EAT implementation automatically gets the security from = whatever boot security it has. 

Even on a complex device such as one = with a TEE and TA=E2=80=99s, the TA=E2=80=99s most likely get all the = security from the boot sequence and TEE OS without having to modify the = boot sequence or the TEE OS (I am quite sure of this having done it for = Qualcomm's Hardware Token here).

LL


* Generally agree with = Monty=E2=80=99s recent definition of verified boot; some people call = this secure boot


18(
    [
        / protected parameters, bstr wrapped / << {
            / alg / 1: -7 / ECDSA 256 /
        } >>,
        / unprotected parameters / {
            / kid / 4: h'4173796d6d657472696345434453413
                          23536' / 'AsymmetricECDSA256' /
        },
        / COSE payload, the EAT, bstr wrapped =
/ << {
            / nonce  /
            7:h'948f8860d13a463e8e',
    
 =
           / UEID /
            =
8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f',
    
 =
           / The CoSWID /
            21: =
{
           
   =
             / tag-id, globally unique identifier for the software =
component /
      0: "trustedfirmware.org/TF-M",
<= blockquote class=3D"" style=3D"margin: 0px 0px 0px 40px; border: none; = padding: 0px;">

 =
     / tag-version (here: 0, i.e. initial tag) =
/
      12: =
0,

      / software component name =
/
      1: =
"TF-M",

      / version of the software component =
/
      13: =
"1.0.0-rc1+build.123",


      / entity, i.e. organizations responsible for =
producing or releasing
        the software component =
/
      2: =
{
          =
/ entity name /
          31: "Linaro =
Limited=E2=80=9D,

    / entity =
role (here: software creator) =
/
    33: =
2,

           },

       =
}
 =
  } >>,

   / signature / =
h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f
                   9179bc3d7438bacaca5acd08c8d4d4f96131680c42
                   9a01f85951ecee743a52b9b63632c57209120e1c9e
                   30'
]
)




On Nov 27, 2019, at 9:13 AM, Adrian Shaw = <Adrian.Shaw@arm.com> wrote:

While = there is some synergy with the SUIT definition, I=E2=80=99m unconvinced = that it should be the way to express a software component metadata. = Firstly, there are legacy systems without SUIT that would want to use = EAT, and such a dependency would make it hard for incremental adoption. = Secondly, not all the data from the SUIT manifest is needed for this = claim.

Adrian

On 27 Nov 2019, at = 16:59, Thomas Fossati <Thomas.Fossati@arm.com> wrote:

Hi Henk

Thanks very much for = your input.

On 27/11/2019, 13:24, "Henk = Birkholz" <henk.birkholz@sit.fraunhofer.de> wrote:
yes there are ways to = deal with firmware in SWID, namely the resource
type = (index 19) in the set of SWID resource-collection [1] in
combination with the rel type (index 40) entries.

This way, you would not have to use = filesystem-items, but this way is
also a bit clunky and = would require an informational guidance document
describing = how to use *SWID for that.

That's interesting because initially I also tried to use the = resource
type -- which looked like the less wrong among = all the available types
in the resource collection. =  However it wasn't clear to me how to
associate a = checksum to the component, hence I went for the
filesystem-item.  Maybe I was just looking in the wrong = place or maybe,
as you say, there's a magic firmware = recipe that's worth documenting
here.

There are some quite = smart ways to do that actually with
filesystem-items, but = I think it is more feasible to use a SUIT
manifest here to = describe everything relevant to the "firmware thingy"
and = then put a CoSWID into the SUIT manifest's outer wrapper [2] that
then represents the rest of the semantics that is not covered = by the
manifest but by CoSWID. This method is fine, as the = COSE envelope
around the EAT will make tempering with the = outer wrapper of the SUIT
Manifest evident.

I think that is a more elegant way to do it, = actually, and the reason
why issue #46 in the EAT repo = proposes to define a Claim to include a
SUIT Manifest in = an EAT, too.

I'll look into = this, thanks for the pointer.

Stepping back = for a second and looking from the perspective of my
immediate requirement (i.e., "Is it possible to translate = PSA's software
component claim using purely EAT = constructs?"), ideally I'd like to have
something that is = expressive enough to encode my semantics (i.e.: SW
component= name, version, signer and measurement) without being overly
complex.

So my knee-jerk = reaction is if that implies pulling a dependency on
SUIT = maybe it's a bit too much?  But I confess haven't yet looked at
the details of your proposal nor I can claim enough SUIT-foo = to really
grok the complexity involved.  As said, = I'll have a look shortly.

cheers!

IMPORTANT NOTICE: The contents of this email = and any attachments are confidential and may also be privileged. If you = are not the intended recipient, please notify the sender immediately and = do not disclose the contents to any other person, use it for any = purpose, or store or copy the information in any medium. Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

IMPORTANT NOTICE: The contents of = this email and any attachments are confidential and may also be = privileged. If you are not the intended recipient, please notify the = sender immediately and do not disclose the contents to any other person, = use it for any purpose, or store or copy the information in any medium. = Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_8AD69A77-7450-4536-9A63-B9B1BAF7C5B9-- From nobody Thu Nov 28 18:39:13 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3378C1208E8; Thu, 28 Nov 2019 18:39:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id THUL7tzFnLbW; Thu, 28 Nov 2019 18:39:09 -0800 (PST) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D2B91200FA; Thu, 28 Nov 2019 18:39:08 -0800 (PST) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id xAT2d2ca018003 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Fri, 29 Nov 2019 03:39:03 +0100 Received: from [192.168.16.50] (79.234.126.215) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.468.0; Fri, 29 Nov 2019 03:38:57 +0100 To: Laurence Lundblade , Adrian Shaw CC: Thomas Fossati , "rats@ietf.org" , Hannes Tschofenig , "sacm@ietf.org" References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> From: Henk Birkholz Message-ID: <057acfc6-4867-d045-a516-031c9e962bf7@sit.fraunhofer.de> Date: Fri, 29 Nov 2019 03:38:56 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.126.215] Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2019 02:39:12 -0000 Hi Laurence, I absolutely agree. 1.) the complexity of a solution should be appropriate to the problem. => EAT is very flexible and can scale from simple to (maybe even overly - we should avoid that) complex. 2.) It is critical to not use an overly complex solution for a simple problem. 3.) There could be "hardcoded" (but in that case mandating their own signature) CoSWID Claims for specific type/model composites that cannot be differentiated via their software components (because they are all the same, for example) and that is fine (as an analogy, I think there could be binary YANG telemetry that is composed of hardcoded building-blocks, if the device the custom subscription is created with is simple enough). 4.) If the boot SW is not intended to be touched, it is not touched. Although I think, an EAT should highlight that in it's CoSWID or a related claim in the EAT, to steer its "superior's"/management system's decision as a "hint". 5.) It should not be excluded to allow for complex composition of CoSWID and SUIT claims for more complex devices that can deal with elaborate update and remediation scenarios. => Again, EAT provides the flexibility for that - we should leverage that, I think. Happy Thanks Giving! Henk p.s. alas a CoSWID will never be a "a hard-coded byte array", please never cut out a portion out of a CoSWID, but deliver it "in its entirety". Your example used the index 21 (which I assume is an example for an EAT Claim), but please prefix the COSE CBOR tag (if the CoSWID tag is signed) and always prefix the CoSWID CBOR tag (inside the body of the COSE envelope, too, if applicable) :) On 28.11.19 22:53, Laurence Lundblade wrote: > I am very much agreement with Adrian. > > SUIT is far from wide adoption, yet billions of devices have > verified/secure boot* and do a good job of SW update. Some of these > devices like mobile phones have very complex boot and multifaceted SW > updated, other are very simple lost cost single-use devices. > > For many use cases, a simple EAT with only a few claims will suffice. > Maybe the only claims are the UEID and the version of THE software for > the device because it only has one SW component. Only the mandatory > CoSWID fields, plus version, are filled in for the single SW component. > Such an EAT would have 8 claims as in the example below. It is critical > IMO that EAT keeps tokens for these simple use case simple. The minimum > CoSWID is 5 claims right now. Wouldn’t want to increase that. > > Constructing the payload for this EAT is pretty simple. The only claim > that varies from one token to the next is the nonce. The CoSWID part > could be a hard-coded byte array containing the encoded CBOR since it > will never change. The harder part of EAT here will be COSE and signing > key set up, not claim construction. > > Importantly, the boot SW of this simple device need not be touched. The > EAT implementation automatically gets the security from whatever boot > security it has. > > Even on a complex device such as one with a TEE and TA’s, the TA’s most > likely get all the security from the boot sequence and TEE OS without > having to modify the boot sequence or the TEE OS (I am quite sure of > this having done it for Qualcomm's Hardware Token here > ). > > LL > > > * Generally agree with Monty’s recent definition of verified boot; some > people call this secure boot > > > 18( [ / protected parameters, bstr wrapped / << { / alg / 1: -7 / ECDSA > 256 / } >>, > > / unprotected parameters / { / kid / 4: > h'4173796d6d657472696345434453413 23536' / 'AsymmetricECDSA256' / }, > > > / COSE payload, the EAT, bstr wrapped / << { / nonce / > > 7:h'948f8860d13a463e8e', > > / UEID / > > 8:h'0198f50a4ff6c05861c8860d13a638ea4fe2f', > > / The CoSWID / > > 21: { > > / tag-id, globally unique identifier for the software component / > >   0: "trustedfirmware.org/TF-M ", > > >   / tag-version (here: 0, i.e. initial tag) / > >   12: 0, > > >   / software component name / > >   1: "TF-M", > > >   / version of the software component / > >   13: "1.0.0-rc1+build.123", > > > >   / entity, i.e. organizations responsible for producing or > releasing > >     the software component / > >   2: { > >     / entity name / > >     31: "Linaro Limited”, > > > / entity role (here: software creator) / > > 33: 2, > > >   }, > > >   } > > } >>, > > > / signature / h'5427c1ff28d23fbad1f29c4c7c6a555e601d6fa29f > 9179bc3d7438bacaca5acd08c8d4d4f96131680c42 > 9a01f85951ecee743a52b9b63632c57209120e1c9e 30' > > ] > > ) > > > > > >> On Nov 27, 2019, at 9:13 AM, Adrian Shaw > > wrote: >> >> While there is some synergy with the SUIT definition, I’m unconvinced >> that it should be the way to express a software component metadata. >> Firstly, there are legacy systems without SUIT that would want to use >> EAT, and such a dependency would make it hard for incremental >> adoption. Secondly, not all the data from the SUIT manifest is needed >> for this claim. >> >> Adrian >> >>> On 27 Nov 2019, at 16:59, Thomas Fossati >> > wrote: >>> >>> Hi Henk >>> >>> Thanks very much for your input. >>> >>> On 27/11/2019, 13:24, "Henk Birkholz" >>> >> > wrote: >>>> yes there are ways to deal with firmware in SWID, namely the resource >>>> type (index 19) in the set of SWID resource-collection [1] in >>>> combination with the rel type (index 40) entries. >>>> >>>> This way, you would not have to use filesystem-items, but this way is >>>> also a bit clunky and would require an informational guidance document >>>> describing how to use *SWID for that. >>> >>> That's interesting because initially I also tried to use the resource >>> type -- which looked like the less wrong among all the available types >>> in the resource collection.  However it wasn't clear to me how to >>> associate a checksum to the component, hence I went for the >>> filesystem-item.  Maybe I was just looking in the wrong place or maybe, >>> as you say, there's a magic firmware recipe that's worth documenting >>> here. >>> >>>> There are some quite smart ways to do that actually with >>>> filesystem-items, but I think it is more feasible to use a SUIT >>>> manifest here to describe everything relevant to the "firmware thingy" >>>> and then put a CoSWID into the SUIT manifest's outer wrapper [2] that >>>> then represents the rest of the semantics that is not covered by the >>>> manifest but by CoSWID. This method is fine, as the COSE envelope >>>> around the EAT will make tempering with the outer wrapper of the SUIT >>>> Manifest evident. >>>> >>>> I think that is a more elegant way to do it, actually, and the reason >>>> why issue #46 in the EAT repo proposes to define a Claim to include a >>>> SUIT Manifest in an EAT, too. >>> >>> I'll look into this, thanks for the pointer. >>> >>> Stepping back for a second and looking from the perspective of my >>> immediate requirement (i.e., "Is it possible to translate PSA's software >>> component claim using purely EAT constructs?"), ideally I'd like to have >>> something that is expressive enough to encode my semantics (i.e.: SW >>> component name, version, signer and measurement) without being overly >>> complex. >>> >>> So my knee-jerk reaction is if that implies pulling a dependency on >>> SUIT maybe it's a bit too much?  But I confess haven't yet looked at >>> the details of your proposal nor I can claim enough SUIT-foo to really >>> grok the complexity involved.  As said, I'll have a look shortly. >>> >>> cheers! >>> >>> IMPORTANT NOTICE: The contents of this email and any attachments are >>> confidential and may also be privileged. If you are not the intended >>> recipient, please notify the sender immediately and do not disclose >>> the contents to any other person, use it for any purpose, or store or >>> copy the information in any medium. Thank you. >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> >> IMPORTANT NOTICE: The contents of this email and any attachments are >> confidential and may also be privileged. If you are not the intended >> recipient, please notify the sender immediately and do not disclose >> the contents to any other person, use it for any purpose, or store or >> copy the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > From nobody Fri Nov 29 03:59:32 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 893931201E5 for ; Fri, 29 Nov 2019 03:59:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wH22TT9O5qHU for ; Fri, 29 Nov 2019 03:59:28 -0800 (PST) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7790120128 for ; Fri, 29 Nov 2019 03:59:28 -0800 (PST) Received: from lhreml707-cah.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id 8BA2DEFD2E0E1BAF3792; Fri, 29 Nov 2019 11:59:23 +0000 (GMT) Received: from lhreml721-chm.china.huawei.com (10.201.108.72) by lhreml707-cah.china.huawei.com (10.201.108.48) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 29 Nov 2019 11:59:23 +0000 Received: from lhreml721-chm.china.huawei.com (10.201.108.72) by lhreml721-chm.china.huawei.com (10.201.108.72) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Fri, 29 Nov 2019 11:59:23 +0000 Received: from DGGEMM402-HUB.china.huawei.com (10.3.20.210) by lhreml721-chm.china.huawei.com (10.201.108.72) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1713.5 via Frontend Transport; Fri, 29 Nov 2019 11:59:22 +0000 Received: from DGGEMM511-MBX.china.huawei.com ([169.254.1.4]) by DGGEMM402-HUB.china.huawei.com ([10.3.20.210]) with mapi id 14.03.0439.000; Fri, 29 Nov 2019 19:59:16 +0800 From: "Xialiang (Frank, Network Standard & Patent Dept)" To: Michael Richardson CC: "rats@ietf.org" Thread-Topic: [Rats] use case draft --- adopting or dropping or ??? Thread-Index: AQHVpcb50S1bBvXNWUKFPN6aKLf2iKeiCkWg Date: Fri, 29 Nov 2019 11:59:16 +0000 Message-ID: References: <19982.1574929224@dooku.sandelman.ca> In-Reply-To: <19982.1574929224@dooku.sandelman.ca> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.138.33.46] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] =?gb2312?b?tPC4tDogIHVzZSBjYXNlIGRyYWZ0IC0tLSBhZG9wdGlu?= =?gb2312?b?ZyBvciBkcm9wcGluZyBvciA/Pz8=?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2019 11:59:32 -0000 SGkgTWljaGFlbCwNCkkgdGhpbmsgY3VycmVudCB1c2UgY2FzZXMgZHJhZnQgaXMgd2VsbCB3cml0 dGVuIGluIGNhcHR1cmluZyB0aGUgbW9zdCB3aWRlIHJlbW90ZSBhdHRlc3RhdGlvbiB1c2UgY2Fz ZXMsIHNvIGl0J3MgdmVyeSB1c2VmdWwgZm9yIHRoZSBhcmNoaXRlY3R1cmUgYW5kIHByb3RvY29s IGRlc2lnbi4gV2UgZGVmaW5pdGVseSBzaG91bGQga2VlcCBpdCBvbiBwcm9ncmVzcyBhbG9uZyB3 aXRoIHRoZSBvdGhlciBkcmFmdHMuIERyb3BwaW5nIHNob3VsZCBub3QgYmUgdGhlIFdHIG9wdGlv biENCg0KSSBhbSBmaW5lIHdpdGggZWl0aGVyIHdheSB0aGUgdXNlIGNhc2VzIGRyYWZ0IGV4aXN0 cyBhcywgbGV0IHRoZSBjaGFpcnMgbWFrZSB0aGUgZGVjaXNpb24uDQoNClRoYW5rcyBmb3IgYnJp bmcgeW91ciBjbGFyaWZpY2F0aW9uIGhlcmUuDQoNCkIuUi4NCkZyYW5rDQoNCi0tLS0t08q8/tSt vP4tLS0tLQ0Kt6K8/sjLOiBSQVRTIFttYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnXSC0+rHt IE1pY2hhZWwgUmljaGFyZHNvbg0Kt6LLzcqxvOQ6IDIwMTnE6jEx1MIyOMjVIDE2OjIwDQrK1bz+ yMs6IHJhdHNAaWV0Zi5vcmcNCtb3zOI6IFtSYXRzXSB1c2UgY2FzZSBkcmFmdCAtLS0gYWRvcHRp bmcgb3IgZHJvcHBpbmcgb3IgPz8/DQoNCg0KSSd2ZSBiZWVuIGFza2VkIHdoYXQgaGFwcGVucyB3 aXRoIHRoZSB1c2UgY2FzZSBkcmFmdC4NCkkndmUgYmVlbiBhc2tlZCB3aHkgdGhlIHdvcmtpbmcg Z3JvdXAgaGFzbid0IGFkb3B0ZWQgaXQgeWV0LCBldGMuDQoNCkkgd2FudCB0byByZW1pbmQgb2Yg dGhyZWUgdGhpbmdzOg0KICAxKSB0aGUgSUVTRyBkb2Vzbid0IHdhbnQgdG8gcHVibGlzaCB1c2Ug Y2FzZSBkb2N1bWVudHMgb24gdGhlaXIgb3duLCBzbw0KICAgICB0aGlzIGRvY3VtZW50IGlzIG5l dmVyIGdvaW5nIGZvcndhcmQgYXMgaXQgaXMuDQoNCiAgMikgdGhlIGludGVudGlvbiBvZiB0aGlz IGRvY3VtZW50IHdhcyB0aGF0IGl0IGJlIGEgbGl2ZSBjb2xsZWN0aW9uIG9mIHVzZQ0KICAgICBj YXNlcyBhbmQgcG9pbnRlcnMgdG8gdXNlcnMgb2YgYXR0ZXN0YXRpb24uDQoNCiAgMykgdGhhdCB0 aGUgV0cgY2hhaXJzIGNhbiBwdXQgYSBkb2N1bWVudCBvbiB0aGUgYWdlbmRhIGV2ZW4gaWYgaXQn cyBub3QgYQ0KICAgICBXRyBkb2N1bWVudC4NCg0KVGhlIG9ubHkgcmVhc29uIHRvIGFkb3B0IHRo ZSB1c2UgY2FzZSBkb2N1bWVudCBpbnRvIGJlaW5nIGEgV0cgZG9jdW1lbnQgaXMgaWYgbWFrZXMg aXQgZWFzaWVyIHRvIGRvIHNjaGVkdWxpbmcsIGFzIHdlIGhhdmUgYSBndWlkZWxpbmUgdGhhdCBX RyBkb2N1bWVudHMgZ2V0IHByaW9yaXR5IG9uIHRoZSBhZ2VuZGEuICBUaGUgV0cgY2hhaXJzIGNh biBhbHNvIGRlY2xhcmUgYSBkb2N1bWVudCBhcyBhIFdHIGRvY3VtZW50IGJ5IGZpYXQsIHRoZXkg ZG9uJ3QgYWN0dWFsbHkgaGF2ZSB0byBDYWxsIGZvciBBZG9wdGlvbjsgdGhhdCdzIGp1c3QgdGhl IG1vc3QgY29uc2Vuc3VzIGZyaWVuZGx5IHBhdGggdGhhdCB3ZSB0ZW5kIHRvIHRha2UuDQoNCkl0 IG1heSBhbHNvIGhlbHAgb3RoZXJzIHRvIGZpbmQgdGhlIGRvY3VtZW50IGluIHRoZSBXRyBsaXN0 Lg0KSSBhbSBhZ25vc3RpYyBhcyB0byB3aGF0IHRoZSBuYW1lIG9uIHRoZSBkb2N1bWVudCBpcyB0 aG91Z2guDQpJdCB0YWtlcyB0aGUgc2FtZSBhbW91bnQgb2YgZWZmb3J0IHRvIHdyaXRlL21haW50 YWluIHRoZSBkb2N1bWVudC4NCk90aGVyIG9yZ2FuaXphdGlvbnMgdGVuZCB0byBkbyB0aGluZ3Mg bGlrZSBhcHByb3ZlIHRyYXZlbCBtb3JlIGVhc2lseSBmb3IgYXV0aG9ycyBvZiBXRyBkb2N1bWVu dHMuDQoNCkF0IHRoaXMgcG9pbnQgd2UgYXJlIG1lcmdpbmcgcGllY2VzIG9mIHRoZSB1c2UgY2Fz ZSBkb2N1bWVudCBpbnRvIHRoZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQsIGJ1dCBpdCBzZWVtcyBy ZWFzb25hYmxlIHRoYXQgc29tZSBkZXRhaWxlZCB1c2UgY2FzZXMgbWlnaHQgbm90IGZpdCBpbnRv IHRoZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQuICBTcGVjaWZpY2FsbHksIGl0IG1pZ2h0IGJlIHRo YXQgdGhlIGFkZGl0aW9uYWwgdXNlciBkb2Vzbid0IHByb3ZpZGUgYW55IG1vdGl2YXRpb24gZm9y IGFueSB1bmlxdWUgYXJjaGl0ZWN0dXJlIGNvbXBvbmVudHMuDQoNCk15IHByb3Bvc2FsIGlzIHRo YXQgdGhlIHVzZSBjYXNlIGRvY3VtZW50IHdpbGwgbGluZ2VyIGluIHRoZSBzdGF0ZSB0aGF0IGl0 IGlzLCB0aGF0IGFkZGl0aW9ucyBhbmQgZWRpdHMgd2lsbCBiZSB3ZWxjb21lLCBidXQgdGhhdCB0 aGVyZSB3aWxsIGJlIG5vIHNwZWNpZmljIGVmZm9ydCBvbiB0aGUgZG9jdW1lbnQgdW50aWwgYWZ0 ZXIgdGhlIEZlYi4gSGFja2F0aG9uL1R1dG9yaWFsLg0KT25jZSB0aGUgYXJjaGl0ZWN0dXJlIGlz IG1vcmUgbWF0dXJlLCB0aGF0IGEgcmV2aXNpb24gdG8gdGhlIHVzZSBjYXNlIGRvY3VtZW50IHdp bGwgb2NjdXIgY29ubmVjdGluZyB1c2UgY2FzZXMgdG8gYXJjaGl0ZWN0dXJhbCBzdHJ1Y3R1cmVz Lg0KDQpJIGZ1cnRoZXIgcHJvcG9zZSB0aGF0IHNvbWUgdXNlcnMgd2lsbCB3YW50IHRvIHdyaXRl IGRldGFpbGVkIHByb2ZpbGVzIG9mIFJBVFMgYXMgdW5pcXVlIGRvY3VtZW50cyB3aXRoaW4gdGhl IElFVEYgb3Igd2l0aGluIG90aGVyIG9yZ2FuaXphdGlvbnMuDQpUaGF0LCBhcyB0aGlzIGhhcHBl bnMsIHRoZSBtb3JlIGV4dGVuc2l2ZSB0ZXh0dWFsIGRlc2NyaXB0aW9uIG9mIHRoZSBjYXNlIHdp bGwgYmVjb21lIGEgcmVmZXJlbmNlIHRvIHRoYXQgZG9jdW1lbnQuICBTdWNoIGEgcHJvZmlsZSBk b2N1bWVudCB3b3VsZCBoYXZlIHRvIHN0YXJ0IHdpdGggYSBwcm9ibGVtIHN0YXRlbWVudCAodXNl IGNhc2UgZGVzY3JpcHRpb24pIGFueXdheS4NCg0KLS0NCl0gICAgICAgICAgICAgICBOZXZlciB0 ZWxsIG1lIHRoZSBvZGRzISAgICAgICAgICAgICAgICAgfCBpcHY2IG1lc2ggbmV0d29ya3MgWw0K XSAgIE1pY2hhZWwgUmljaGFyZHNvbiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzICAgICAgICB8 IG5ldHdvcmsgYXJjaGl0ZWN0ICBbDQpdICAgICBtY3JAc2FuZGVsbWFuLmNhICBodHRwOi8vd3d3 LnNhbmRlbG1hbi5jYS8gICAgICAgIHwgICBydWJ5IG9uIHJhaWxzICAgIFsNCg0KDQoNCg0KDQot LQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+LCBTYW5kZWxtYW4g U29mdHdhcmUgV29ya3MgIC09IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0NCg0KDQoNCg== From nobody Fri Nov 29 05:59:42 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05C19120220 for ; Fri, 29 Nov 2019 05:59:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RlBd0XwcJtib for ; Fri, 29 Nov 2019 05:59:38 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DEA51200E9 for ; Fri, 29 Nov 2019 05:59:38 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 763523897B; Fri, 29 Nov 2019 08:56:07 -0500 (EST) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 09A0A66D; Fri, 29 Nov 2019 08:59:37 -0500 (EST) From: Michael Richardson To: Henk Birkholz cc: "rats\@ietf.org" In-Reply-To: <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> <20047.1574929414@dooku.sandelman.ca> <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2019 13:59:41 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Henk Birkholz wrote: > I am in full agreement, that the entire SUIT Manifest would be > over-kill in the stages "boot/recovery roms". Although, I know of > recovery roms that do exactly that: retrieving a SUTI Manifest > including firmware to do... well recovery. No, I don't think it's overkill, I think that SUIT just didn't exist, and sometimes better is the enemy of already-deployed-good-enough-code. =2D-=20 Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl3hJEgACgkQgItw+93Q 3WWCQAf/fxHF4yY0WZHlwmlk0z/MwQQxmI3jXDQ3ov51x3k7vjcYe2lQ3IrgZP59 25EZn9wlNBIqvdTbx4Yobk6erYJXTvMV7Bp4+50OGqZsCgn2ap+BClP4oNpyjqrX vyeNfiduyXQoPaiQQNszVwy+N0e1FEga+fK1Qc3s0BZX39s1z0khWygu4iFM6why lKE+PJKdg33AQERC4jXa32DGIwBadZcILg/1O6PK32e+ZTpR7UA85pNBql7joWUG Nr3NBmrtx8SzeVOMuPvKR2t6tsYlgxdf21A9Hkc5JAl4aKwnHGdCvoYuNZcIcdbL 6/7y4MtQkDuAcYjNPjLjQPHyTBPfaw== =MP9p -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Nov 29 08:06:41 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E600E120964 for ; Fri, 29 Nov 2019 08:06:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usZ_ZUlxYIXG for ; Fri, 29 Nov 2019 08:06:38 -0800 (PST) Received: from mail-ot1-x331.google.com (mail-ot1-x331.google.com [IPv6:2607:f8b0:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3080E12095D for ; Fri, 29 Nov 2019 08:06:38 -0800 (PST) Received: by mail-ot1-x331.google.com with SMTP id d7so8341826otq.3 for ; Fri, 29 Nov 2019 08:06:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=cnfnOr/vq10kEWzq5nacYTTfmF153Uyuk9t+50GSlAo=; b=FXnW+O+LKzwRDnVqPc/lRiA9Mr7WlHWpmUAAA43hFUrw5A7D5UDOHv0YBQrdpNU5rv LmQMO6FYh++WVgs/cpgTGvXwhPng/69UrlG8H4qWHDDV6kq2F6wKjKvuLWfzI4PtORXj wMKZF3R1ns8XRV19k6mh7V10J3fa3xChIXJlLi2rLWoBFvx6hvA/cTEak8xjpgKr9Pfc GNnx92ookPc5wF8gzJYBvsecIXNjs/K/Sj47mYAt9Q0t0stZhmeoufOkZo6KCvmRrHiQ q+e7/jRI7P71KMc8iD8WETvaiViIiz3C49n9CCQ3BqKEfTbbvIPWy1F9q0OV7O+jkXeo Sl/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=cnfnOr/vq10kEWzq5nacYTTfmF153Uyuk9t+50GSlAo=; b=t10SO40IuUNnls1Dth/x3PkQg9TMuaIIA+EOE/DTdvALudUcLm2+7sl35RfqaNqcwB uuk/tXSdERgF2uA3Zh7i5BWv665p4GfVUDawnDxOeHWqsaDwVw/zKupd8S/9dGWBXcKb 9rPR1iqISkN8IzId1RbOXiwYVn8EapRa+hapWCmT2WdkzIuPRM7yjw7m9/k/JxRFH0ya O9FG4sZiCxz7Z3PRCZIAM2HNWNmxe2raFlVpcrF6pmAovOmfvbcCZ5hrIdH4pVWVKZC2 BXP5lZp9oXPh+ZYVLqmAOPmqlrBx6yX5h11TDz+c+96jRbyrNBxpXwnTdk8R3zcHlQPG ZHKg== X-Gm-Message-State: APjAAAXqDi153g1KdwztpAPRvVHu4wMvTKjC8REImDVoD4AuDz3GcVgu 3btm9JMrv3Naytxo5GkFL8uguj+H0cOzUdR51klunQOP X-Google-Smtp-Source: APXvYqxb2Vt8x0sbkNUCsJ6EnhjfxtqKKIkuwLByaPdSmhLr3sBCUqAcafRNwSf9FTr8D+3EDsURskfwQVTs9dzzXy4= X-Received: by 2002:a9d:62d5:: with SMTP id z21mr1738655otk.224.1575043597525; Fri, 29 Nov 2019 08:06:37 -0800 (PST) MIME-Version: 1.0 References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <60C4E362-02FD-4DDF-BFB4-D09D358282D4@arm.com> <05D67FD7-B95E-4716-B844-2F2F3A09030F@arm.com> <2bc157dd-deb6-9fb8-40b4-7e10722545e6@sit.fraunhofer.de> <20047.1574929414@dooku.sandelman.ca> <0d31154b-e85c-f352-2c59-08d4a0070bb6@sit.fraunhofer.de> <25510.1575035977@localhost> In-Reply-To: <25510.1575035977@localhost> From: Kathleen Moriarty Date: Fri, 29 Nov 2019 11:06:01 -0500 Message-ID: To: Michael Richardson Cc: Henk Birkholz , "rats@ietf.org" Content-Type: multipart/alternative; boundary="00000000000022e7ba05987e6aad" Archived-At: Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2019 16:06:40 -0000 --00000000000022e7ba05987e6aad Content-Type: text/plain; charset="UTF-8" On Fri, Nov 29, 2019 at 8:59 AM Michael Richardson wrote: > > Henk Birkholz wrote: > > I am in full agreement, that the entire SUIT Manifest would be > > over-kill in the stages "boot/recovery roms". Although, I know of > > recovery roms that do exactly that: retrieving a SUTI Manifest > > including firmware to do... well recovery. > > No, I don't think it's overkill, I think that SUIT just didn't exist, and > sometimes better is the enemy of already-deployed-good-enough-code. > And other standards gained traction for non-IoT platforms, EUFI ( https://uefi.org/specifications). Best regards, Kathleen > > > -- > Michael Richardson , Sandelman Software Works > -= IPv6 IoT consulting =- > > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > -- Best regards, Kathleen --00000000000022e7ba05987e6aad Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Fri, Nov 29, 2019 at 8:59 AM Micha= el Richardson <mcr+ietf@sande= lman.ca> wrote:

Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
=C2=A0 =C2=A0 > I am in full agreement, that the entire SUIT Manifest wo= uld be
=C2=A0 =C2=A0 > over-kill in the stages "boot/recovery roms". = Although, I know of
=C2=A0 =C2=A0 > recovery roms that do exactly that: retrieving a SUTI Ma= nifest
=C2=A0 =C2=A0 > including firmware to do... well recovery.

No, I don't think it's overkill, I think that SUIT just didn't = exist, and
sometimes better is the enemy of already-deployed-good-enough-code.

And other standards gained traction for non-Io= T platforms, EUFI (https://uefi= .org/specifications).

Best regards,
= Kathleen


--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
=C2=A0-=3D IPv6 IoT consulting =3D-



_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats


--

Best regards,
Kathleen
--00000000000022e7ba05987e6aad-- From nobody Fri Nov 29 14:10:01 2019 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 062B01200DE for ; Fri, 29 Nov 2019 14:09:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9tIN9By7wVw5 for ; Fri, 29 Nov 2019 14:09:56 -0800 (PST) Received: from p3plsmtpa07-03.prod.phx3.secureserver.net (p3plsmtpa07-03.prod.phx3.secureserver.net [173.201.192.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 837A7120052 for ; Fri, 29 Nov 2019 14:09:56 -0800 (PST) Received: from [10.182.0.86] ([45.56.150.186]) by :SMTPAUTH: with ESMTPA id aoSZiAxIyxpO0aoSZiocUa; Fri, 29 Nov 2019 15:09:55 -0700 From: Laurence Lundblade Message-Id: <29A9E618-69D4-4765-B516-2F8F69AB7406@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_0B71A7C5-16E7-4831-A700-C1FE17181AD9" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Fri, 29 Nov 2019 14:09:54 -0800 In-Reply-To: <7e387a02-4d49-3a52-572d-f7e61b4e729f@gmail.com> Cc: rats@ietf.org To: Monty Wiseman References: <5DB30E08-9AB2-452A-B8D6-55BFD0AE5264@island-resort.com> <34EB67FD-E76A-4132-87C4-C89EA70C9365@intel.com> <5A3105EA-8E54-4BB9-B266-96B6645811A1@island-resort.com> <3285c3da-0748-5607-90ed-ac024ac826d0@sit.fraunhofer.de> <0384FAEE-6C5B-4A99-BBA0-F080DD27AA9B@island-resort.com> <52AC3EB5-1BD0-4A41-8EAD-5A779E125BF8@intel.com> <06543a46-8218-fa9c-827f-8a0e2d364963@sit.fraunhofer.de> <7e387a02-4d49-3a52-572d-f7e61b4e729f@gmail.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLo3iA+vhB5sOLm+RC4Nr3Dp8TovgdF2rlrXV6UAR/EE+DZLIa5CLu2RikCg/fGRIp38gZpzeMTsGHCBlV88N2OfD6aiDCOixXt0FZLVidIksgTcjft5 ISW84+OU0fZUdROxZEbl2BIr5mtAWncXJuSngol9WYuOLdWH/fs/HkaB3JNZ++yAEuhGk8lurVBQui+3rPpxAiARy5ro5M6F2kw= Archived-At: Subject: Re: [Rats] Two types of secure attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Nov 2019 22:09:59 -0000 --Apple-Mail=_0B71A7C5-16E7-4831-A700-C1FE17181AD9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 That is really helpful, Monty. Thank you! My understanding is that TPM-based remote attestation is all about = sending the Measured Boot result to a server / service that is the = verifier + relying party. That is what the Yang module draft, before EAT = was added, is about, what Guy=E2=80=99s RIV drafts is about, and Franke = pub-sub draft is about.=20 My understanding is that Verified Boot is not directly relevant to the = these just-mentioned IETF drafts. Devices doing remote Measured Boot = might have used Verified Boot or might not have. It doesn=E2=80=99t = matter. The remote server / service doesn=E2=80=99t know. It is not = reported to them in the remote attestation. In this regard, EAT is in a way the opposite. For SW-based = implementations of EAT, Verified Boot is critical. The EAT is of little = value without it. The server / service trusts an EAT because the = manufacturer committed to not putting EAT signing keys into devices that = don=E2=80=99t implement Verified Boot. Does this line up with how you understand it? LL > On Nov 27, 2019, at 12:11 PM, Monty Wiseman = wrote: >=20 > Let's not use confusing terms like TPM-style / TCG language. I propose > we start with lower-level fundamental definitions or even axioms for > boot types. Within those definitions, I recommend deprecating the term > "Secure Boot" as it's imprecise and even misleading. I expect there to > be variations on these creating derivative definitions but I postulate > these are fundamental as basic building blocks. >=20 > Root of Trust: Something that is assumed to always operate in the > expected manner. The implementation is assumed to be correct. How it = is > implemented it outside the scope of its definition. >=20 > Verified Boot: Starts with a Root of Trust. For this type of boot the > Root of Trust is the Root of Trust for Verification (RTV). The RTV > includes a boot policy which is likely a verification key. The RTV > enforces the boot policy which continues through the boot process > assuming each component continues enforcing the boot policy or other > policies authorized by the RTV's boot policy. The trust in the device > depends on the RTV's boot policy and not on any external entity such = as a > Verifier. The boot policy is locked by the RTV and cannot be further > evaluated beyond a binary "Trusted" or "Not Trusted" state. The = evidence > of whether this device is trusted is, therefore, determined by whether > it boot to the correct state. (Some would say this is "existential = boot.) >=20 > The TPM has no dependency on Verified Boot and Verified boot has no > architectural dependence on the TPM. >=20 > Measured Boot: Starts with the Root of Trust. For this type of boot it > is the Root of Trust for Measurement (RTM). The RTM contains no boot > policy. The device's components are recorded and stored through the = boot > process as each component is assumed to continue measurement process. = At > some time during the boot process these measurements are converted to > evidence and send to a Verifier. The trust in the device depends on a > Verifier's evaluation of this evidence. The Verifier has a rich set of > policy options available it beyond a binary "Trusted" or "Not Trusted" > state. The type of boot depends on a trusted component (such as a TPM) > record and converted the measurements into evidence. >=20 > Summary: > The difference between Verified Boot and Measured boot is where the > policy is enforced. >=20 > Verified Boot: > 1> Policy is hard coded at boot time, is immutable, and binary. > (This form of boot is "existential" -- The device either boots = to > a valid state, or not) >=20 > 2> Is simpler to implement but less flexible >=20 > Measured Boot: > 1> The trust state is determined by a Verifier using evidence > about the device and a flexible set of policies. >=20 > 2> Is more complex to implement but more flexible. >=20 > Diagram: >=20 > Verified Boot=3D=3D=3D> >=20 > Policy >=20 > | >=20 > V >=20 > RTV --- Component --- Component --- Component --- End State: >=20 > A trusted device state is created only if all policies were met > (i.e, the device booted). If any policy was not met, the device = (as > it is expected) doesn't really exist (it appears as a different > device) >=20 > Measured Boot=3D=3D=3D> >=20 > Policy >=20 > | >=20 > V >=20 > RTM --- Component --- Component --- Component --- End State: >=20 > Trust State determined by a Verifier by appraising evidence = collected=20 > using a set of policies. >=20 > Monty >=20 > Disclaimer: This is my personal opinion and not that of my employeer = or > the Trusted Ccomputing Group. While I co-chair TCG's Trusted Network > Connect and Infrastructure Working Groups, the above defintions have > not been officially adopted by the TCG's Technical Committee or Board = of > Directors. >=20 >=20 > On 11/24/19 3:01 PM, Laurence Lundblade wrote: >>=20 >>=20 >>> On Nov 24, 2019, at 7:31 AM, Henk Birkholz = > wrote: >>>=20 >>> Hi all, >>>=20 >>> in a nutshell, one of the things I tried to express is that the = following quite is simply not correct wrt to what is called here the = "TPM-style" (I would really like to not use the words "TPM-style" and = not to mixing authenticated & secure boot. Authenticated Boot is fine): >>> > Primarily the difference between TPM-style that doesn=E2=80=99t = rely on secure boot and non-TPM-style that does rely on secure boot. >>=20 >> It=E2=80=99s hard to know what to call things. I=E2=80=99m learning = the =E2=80=9CTCG language=E2=80=9D slowly and we=E2=80=99re also = evolving (in the architecture document) a common language. I keep trying = terms and definitions to see what sticks and what doesn=E2=80=99t. = Pretty sure we agree on =E2=80=9Cattestation evidence=E2=80=9D, = =E2=80=9Cverifier=E2=80=9D and =E2=80=9Cattestation result=E2=80=9D, but = I don=E2=80=99t know what =E2=80=9Csecure boot=E2=80=9D, = =E2=80=9Cauthenticated boot=E2=80=9D and =E2=80=9Ctrusted boot=E2=80=9D = mean to you so I don=E2=80=99t know which term to use. >>=20 >>>=20 >>> It is never possible to create TPM structures that are signed = Attestation Evidence, if a device that is explicitly intended to conduct = "secure boot" did actually not do so successfully. That is one of the = key-features of TPM/TSS remote attestation procedures. >>=20 >> It seems to me that TPM-style attestation where you measure each step = in the boot sequence and report to a verifier was designed to work = without secure boot. However I can see that it could also work with = secure / trusted / authenticated boot. >>=20 >>=20 >>>=20 >>> On the other hand, what leaves me puzzled is the following. If these = three quotes are all correct... >>>=20 >>>> You cannot create an EAT unless the authenticated boot was = successful. The key material with which to sign the EAT is inaccessible = if authenticated boot fails (or else the device just won=E2=80=99t boot = at all). >>>=20 >>> draft-ietf-rats-eat-01: >>>=20 >>>> All claims are optional >>>=20 >>> and draft-ietf-rats-eat-01 again: >>>=20 >>>> 3.7. Secure Boot and Debug Enable State Claims (boot_state) >>>> This claim is an array of five Boolean values indicating the boot = and >>>> debug state of the entity. >>>=20 >>> ... one is allowed either to omit that Claim in an EAT or set some = values of the Claim members to false. Therefore indicating that the boot = state is, e.g. "secure_boot_enabled=3D> false", and still be able to = create the EAT. Is that correct? If not, why include this member of the = boot_state Claim at all? It always made me think until now that it = allows for a device to not conduct "secure boot" and still be able to = create an EAT. >>=20 >> Yes, you are right that in some cases it would make no sense to have = the secure boot claim. It is basically an implicit claim. Here=E2=80=99s = some where it does make sense to have an explicit secure boot claim. >>=20 >> The main attester might boot securely, but submods might not. >>=20 >> It is possible to build pure HW that implements EAT attestation. It = might be a part of a SoC. That attestation HW doesn=E2=80=99t use the = main CPU to implement the attester, but can report on how the main CPU = booted. >>=20 >>=20 >>>=20 >>> Besides that, what I think we are actually talking about is implicit = and explicit attestation. >>=20 >> Seems like you have to say which claims are implicit and which claims = are explicit and in many attestations you need and get both. >>=20 >> For example, you called out a situation where the secure boot claim = is implicit and questioned the need for the claim. I then called out a = situation where the secure boot claim is explicit.=20 >>=20 >> In one attestation the secure boot claim might be implicit and the = GPS location is explicit. >>=20 >> LL >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats = > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_0B71A7C5-16E7-4831-A700-C1FE17181AD9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 That = is really helpful, Monty. Thank you!

My understanding is that TPM-based = remote attestation is all about sending the Measured Boot result to a = server / service that is the verifier + relying party. That is what the = Yang module draft, before EAT was added, is about, what Guy=E2=80=99s = RIV drafts is about, and Franke pub-sub draft is about. 

My understanding is that = Verified Boot is not directly relevant to the these just-mentioned IETF = drafts. Devices doing remote Measured Boot might have used Verified Boot = or might not have. It doesn=E2=80=99t matter. The remote server / = service doesn=E2=80=99t know. It is not reported to them in the remote = attestation.

In = this regard, EAT is in a way the opposite. For SW-based implementations = of EAT, Verified Boot is critical. The EAT is of little value without = it. The server / service trusts an EAT because the manufacturer = committed to not putting EAT signing keys into devices that don=E2=80=99t = implement Verified Boot.

Does this line up with how you understand it?

LL


On Nov 27, 2019, at 12:11 PM, Monty Wiseman = <montywiseman32@gmail.com> wrote:

=20 =20

Let's not use confusing = terms like TPM-style / TCG language. I propose
we start with lower-level fundamental definitions or even axioms for
boot types. Within those definitions, I recommend deprecating the term
"Secure Boot" as it's imprecise and even misleading. I expect there to
be variations on these creating derivative definitions but I postulate
these are fundamental as basic building blocks.

Root of Trust: Something that is assumed to always operate in the
expected manner. The implementation is assumed to be correct. How it is
implemented it outside the scope of its definition.
=
Verified Boot: Starts with a Root of Trust. For this type of boot the
Root of Trust is the Root of Trust for Verification (RTV). The RTV
includes a boot policy which is likely a verification key. The RTV
enforces the boot policy which continues through the boot process
assuming each component continues enforcing the boot policy or other
policies authorized by the RTV's boot policy. The trust in the device
depends on the RTV's boot policy and not on any external entity such as a
Verifier. The boot policy is locked by the RTV and cannot be further
evaluated beyond a binary "Trusted" or "Not Trusted" state. The evidence
of whether this device is trusted is, therefore, determined by whether
it boot to the correct state. (Some would say this is "existential boot.)

The TPM has no dependency on Verified Boot and Verified boot has no
architectural dependence on the TPM.

Measured Boot: Starts with the Root of Trust. For this type of boot it
is the Root of Trust for Measurement (RTM). The RTM contains no boot
policy. The device's components are recorded and stored through the boot
process as each component is assumed to continue measurement process. At
some time during the boot process these measurements are converted to
evidence and send to a Verifier. The trust in the device depends on a
Verifier's evaluation of this evidence. The Verifier has a rich set of
policy options available it beyond a binary "Trusted" or "Not Trusted"
state. The type of boot depends on a trusted component (such as a TPM)
record and converted the measurements into evidence.

Summary:
The difference between Verified Boot and Measured boot is where the
policy is enforced.

Verified Boot:
      1> Policy is hard coded at = boot time, is immutable, and binary.
      (This form of boot is = "existential" -- The device either boots to
      a valid state, or not)

      2> Is simpler to implement but = less flexible

Measured Boot:
      1> The trust state is = determined by a Verifier using evidence
      about the device and a flexible = set of policies.

      2> Is more complex to = implement but more flexible.

Diagram:

Verified Boot=3D=3D=3D>

    Policy

    |

    V

    RTV --- Component --- Component --- Component = --- End State:

    A trusted device state is created only if all = policies were met
    (i.e, the device booted). If any policy was = not met, the device (as
    it is expected) doesn't really exist (it = appears as a different
    device)

Measured Boot=3D=3D=3D>

=             &n= bsp;           &nbs= p;            =             &n= bsp;          Policy

=             &n= bsp;           &nbs= p;            =             &n= bsp;           &nbs= p; |

=             &n= bsp;           &nbs= p;            =             &n= bsp;           &nbs= p; V

    RTM --- Component --- Component --- Component = --- End State:

   Trust State determined by a Verifier by appraising = evidence collected
   using a set of policies.

Monty

Disclaimer: This is my = personal opinion and not that of my employeer or
the Trusted Ccomputing Group. While I co-chair TCG's Trusted Network
Connect and Infrastructure Working Groups, the above defintions have
not been officially adopted by the TCG's Technical Committee or Board of
Directors.

On 11/24/19 3:01 PM, Laurence = Lundblade wrote:


On Nov 24, 2019, at 7:31 AM, Henk Birkholz = <henk.birkholz@sit.fraunhofer.de> wrote:

Hi all,

in a nutshell, one of the things I tried to express is that the following quite is simply not correct wrt to what is called here the "TPM-style" (I would really like to not use the words "TPM-style" and not to mixing authenticated & secure boot. Authenticated Boot is fine):
> Primarily the difference between TPM-style that doesn=E2=80=99t rely on secure boot and non-TPM-style that = does rely on secure boot.

It=E2=80=99s hard to know what to call things. = I=E2=80=99m learning the =E2=80=9CTCG language=E2=80=9D slowly and we=E2=80=99re also = evolving (in the architecture document) a common language. I keep trying terms and definitions to see what sticks and what doesn=E2=80=99t. = Pretty sure we agree on =E2=80=9Cattestation evidence=E2=80=9D, = =E2=80=9Cverifier=E2=80=9D and =E2=80=9Cattestation result=E2=80=9D, but I don=E2=80=99t know = what =E2=80=9Csecure boot=E2=80=9D, =E2=80=9Cauthenticated boot=E2=80=9D and =E2=80=9Ctrusted = boot=E2=80=9D mean to you so I don=E2=80=99t know which term to use.


It is never possible to create TPM structures that are signed Attestation Evidence, if a device that is explicitly intended to conduct "secure boot" did actually not do so successfully. That is one of the key-features of TPM/TSS remote attestation procedures.

It seems to me that TPM-style attestation where = you measure each step in the boot sequence and report to a verifier was designed to work without secure boot. However I can see that it could also work with secure / trusted / authenticated = boot.



On the other hand, what leaves me puzzled is the following. If these three quotes are all correct...

You cannot create an = EAT unless the authenticated boot was successful. The key material with which to sign the EAT is inaccessible if authenticated boot fails (or else the device just = won=E2=80=99t boot at all).

draft-ietf-rats-eat-01:

All claims are = optional

and draft-ietf-rats-eat-01 again:

3.7.  Secure = Boot and Debug Enable State Claims (boot_state)
  This claim is an array of five Boolean = values indicating the boot and
  debug state of the entity.

... one is allowed either to omit that Claim in an EAT or set some values of the Claim members to false. Therefore indicating that the boot state is, e.g. "secure_boot_enabled=3D> false", and still be able to create the EAT. Is that correct? If not, why include this member of the boot_state Claim at all? It always made me think until now that it allows for a device to not conduct "secure boot" and still be able to create an EAT.

Yes, you are right that in some cases it would = make no sense to have the secure boot claim. It is basically an implicit claim. Here=E2=80=99s some where it does make sense = to have an explicit secure boot claim.

The main attester might boot securely, but = submods might not.

It is possible to build pure HW that = implements EAT attestation. It might be a part of a SoC. That attestation HW doesn=E2=80=99t use the main CPU to implement the = attester, but can report on how the main CPU booted.



Besides that, what I think we are actually talking about is implicit and explicit attestation.

Seems like you have to say which claims are = implicit and which claims are explicit and in many attestations you need and get both.

For example, you called out a situation where = the secure boot claim is implicit and questioned the need for the claim. I then called out a situation where the secure boot claim is explicit. 

In one attestation the secure boot claim might = be implicit and the GPS location is explicit.

LL



_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/m=
ailman/listinfo/rats
_______________________________________________
RATS = mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_0B71A7C5-16E7-4831-A700-C1FE17181AD9--