From nobody Wed Jul 1 18:47:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32D3D3A00D4 for ; Wed, 1 Jul 2020 18:47:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.893 X-Spam-Level: X-Spam-Status: No, score=-1.893 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r8DpQj9MKz72 for ; Wed, 1 Jul 2020 18:47:01 -0700 (PDT) Received: from p3plsmtpa07-07.prod.phx3.secureserver.net (p3plsmtpa07-07.prod.phx3.secureserver.net [173.201.192.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E41803A00C0 for ; Wed, 1 Jul 2020 18:47:00 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id qoJWj7b33DyEmqoJXj2Drm; Wed, 01 Jul 2020 18:47:00 -0700 X-CMAE-Analysis: v=2.3 cv=eJhtc0h1 c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=48vgC7mUAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=yMhMjlubAAAA:8 a=nhax6yrGChlR8yjs6GoA:9 a=V_w1Tvb4zRYNsRtr:21 a=PBrlvudrAtikZzIC:21 a=QEXdDO2ut3YA:10 a=Y4PmCYCavZXmDW7C0XwA:9 a=ZLSKgxAP4Q7gr4ke:21 a=zhLiSB_xLkdP1u6m:21 a=Ulv5cNiY3Pm2CtrA:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_CF924F25-2A80-40C9-99C0-70C74E02844B" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Wed, 1 Jul 2020 18:46:58 -0700 In-Reply-To: Cc: "rats@ietf.org" To: Dave Thaler References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfC4snNh4rnrGrdhDelfa1TG/LAhFLcx7Y7tITbC8nxTggj+8aYzPnNBAgYPnzXxDE6Sc4xMkWxdU3YG81qSigNG3G9HcEO1skXn4sUuCdxEBgzkFDUNd p0pqbv+hFf5QqOB8GKHnVUoWVtzot4TjGb20iN04+FKkwuZvYyl453NOOsOkulwd4rTqZ9AYI47A4oa5mjNMVUMpNbK5Ux/CxOultRtNZFX89W4PnSqjgcJ0 Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 01:47:03 -0000 --Apple-Mail=_CF924F25-2A80-40C9-99C0-70C74E02844B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Here=E2=80=99s rough proposed text and diagram. Not sure where it would = go in the doc yet. LL ******************* ************ **************** * Manufacturer(s) * * Verifier * * Relying Party* ******************* * Owner * * Owner * | ************ **************** | | | Manufacturer | | | Verifier | |Owner | Input | |Verifier | | |Input | Appraisal | | | Policy for | | | Attestation | | | Result v v | .-----------------. | .----->| Verifier |------. | | '-----------------' | | | | | | Attestation| | | Results | | | Evidence | | | | | | v v .----------. .-----------------. | Attester | | Relying Party | '----------' '=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=98 Conceptually there are four main inputs to the Verifier aside from the = Attestation Evidence. They are: - Key material for verifying trust in the Attester - Known-good/reference values for comparison with Claims in the = Attestation Evidence - Static implicit claims for the particular Attester that are pass to = the Relying Party in Attestation Results - Policy Configuration Any of these four can come from either the Manufacturer as Manufacturer = Verifier Input or from the Verifier Owner as Owner Verifier Input. They = key material usually always comes from the manufacturer and the policy = from the Verifier Owner, but there is no strict requirement for this. = The known-good/reference values and static implicit claims often come = from either or both.=20 There is no strict separation between Manufacturer and Verifier Owner. = They could be the same. There could also be 3rd party intermediaries = between the Manufacturer and the Verifier. An Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input. The transfer of all these inputs to the Verifier does need to be = secured. For all cases, authenticity of the Manufacturer and Verifier = Owner and their inputs are required. Without authentic inputs, the = Verifier will not do its job correctly. In some cases confidentiality of = the inputs is required. Finally, in some cases the Manufacturer and = Verifier Owner will authenticate the Verifier. This architecture sets no requirement for a particular protocol or = security mechanism. For example, TLS could be used, but it is not the = only protocol that could be used, > On Jun 29, 2020, at 8:56 PM, Dave Thaler = wrote: >=20 > I don=E2=80=99t like the term =E2=80=9CVerifier Input=E2=80=9D since = =E2=80=9CAppraisal Policy for Evidence=E2=80=9D is also Verifier Input, = so I would find it confusing. > I think that the rules for what to put in Attestation Results (bullet = 3), as well as =E2=80=9Cknown-good/reference values=E2=80=9D if such = exist > (and there can be valid policies where they may not exist, or rather = where the policies use more complex rules than > a simple test for equality against a constant) are conceptually part = of Appraisal Policy. > =20 > I do agree that Appraisal Policy can be conveyed to the Verifier in = many different ways, and may be composed > of different things from different sources. > =20 > Dave > =20 > From: RATS On Behalf Of Laurence Lundblade > Sent: Monday, June 29, 2020 11:34 AM > To: rats@ietf.org > Subject: [Rats] Verifier Input instead of Endorsement? > =20 > Stepping back a bit on the definition of an Endorsement, I think the = four inputs to a Verifier are these: > - Key material for verifying trust in the Attester > - Known-good/Reference values for comparison with claims > - Static implicit claims that are passed to RP's via Attestation = Results > - Appraisal Policy > =20 > These can and will be conveyed to the Verifier in many different ways: > - X.509 certs with extensions > - Signed documents > - HTTP queries against the Attester/device manufacturer > - Remote SQL or some other sort of database access to = manufacturer(s) > - Data storage like flash drives the are hand carried into the = Verifier's site > - One-time special file transfers > - Ceremonial procedures with M out of N people physical present = approving transfer > =20 > It seems like shoe-horning all of the above (except policy) into an = Endorsement, like I=E2=80=99ve tried to do = is too much. I tried this = shoe-horning because I think the architecture document needs to cover = all this and Endorsements was what was in it. A typical Endorsement = seems to be just the first two mentioned, X.509 and signed documents = expanding its definition to include database access is a stretch. > =20 > Rather than defining Endorsement, I=E2=80=99d like to define Verifier = Input: > =20 > ******************* ************ **************** > * Manufacturer(s) * * Verifier * * Relying Party* > ******************* * Owner * * Owner * > | ************ **************** > | | | > Verifier Input| | | > | |Appraisal | > | |Policy | > | |for | Appraisal > | |Evidence | Policy for > | | | Attestation > | | | Result > v v | > .-----------------. | > .----->| Verifier |------. | > | '-----------------' | | > | | | > | Attestation| | > | Results | | > | Evidence | | > | | | > | v v > .----------. .-----------------. > | Attester | | Relying Party | > '----------' '=E2=80=94=E2=80=94=E2=80=94=E2= =80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=98 > =20 > =20 >=20 > Endorsements must still be mentioned, but as one form of Verifier = input just like EAT is one form of Attestation Evidence. > =20 > Verifier Input would be defined as: > - Key material for verifying trust in the Attester > - Known-good/Reference values for comparison with claims > - Static implicit claims that are passed to RP's via Attestation = Results > =20 > To do this, I=E2=80=99d replace the current PR = and issue = I have on Endorsements with a new = PR. It will be a fair bit of work, so I want to see if there is some = consensus first. > =20 > LL > =20 > =20 > =20 > =20 > =20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_CF924F25-2A80-40C9-99C0-70C74E02844B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Here=E2=80=99s rough proposed text and = diagram. Not sure where it would go in the doc yet.

LL

          = *******************   ************     = ****************
          * Manufacturer(s) *   = * Verifier *     * Relying Party*
      =     *******************   *  Owner   *   =   *  Owner       *
      =                  |   =      ************     = ****************
                =        |             =  |                 = |
 =         Manufacturer |         =      |               =   |
              Verifier | =              |Owner     =        |
          =       Input  |           =    |Verifier         |
      =                  |   =            |Input       =      | Appraisal
          =              |       =        |             =     | Policy for
          =              |       =        |             =     | Attestation
          =              |       =        |             =     |  Result
          =              v       =        v             =     |
                =      .-----------------.         =        |
          =     .----->|     Verifier    |------. =         |
          =     |      '-----------------'     =  |         |
          =     |                 =               |       =   |
              |   =                 =  Attestation|         |
      =         |             =        Results    |       =   |
              | Evidence =                     =  |         |
          =     |                 =               |       =   |
              |   =                     =         v         = v
 =       .----------.           =           =  .-----------------.
        | Attester | =                     =  | Relying Party   |
        '----------' =                     =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98

Conceptually there are four main inputs to the Verifier aside = from the Attestation Evidence. They are:

   - Key material for = verifying trust in the Attester
   - = Known-good/reference values for comparison with Claims in the = Attestation Evidence
   - Static implicit = claims for the particular Attester that are pass to the Relying Party in = Attestation Results
   - Policy = Configuration

Any of these four can come from either the Manufacturer as = Manufacturer Verifier Input or from the Verifier Owner as Owner Verifier = Input. They key material usually always comes from the manufacturer and = the policy from the Verifier Owner, but there is no strict requirement = for this. The known-good/reference values and static implicit claims = often come from either or both. 

There is no strict separation between = Manufacturer and Verifier Owner. They could be the same. There could = also be 3rd party intermediaries between the Manufacturer and the = Verifier.

An = Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input.

The transfer of all these inputs to the = Verifier does need to be secured. For all cases, authenticity of the = Manufacturer and Verifier Owner and their inputs are required. Without = authentic inputs, the Verifier will not do its job correctly. In some = cases confidentiality of the inputs is required. Finally, in some cases = the Manufacturer and Verifier Owner will authenticate the = Verifier.

This = architecture sets no requirement for a particular protocol or security = mechanism. For example, TLS could be used, but it is not the only = protocol that could be used,




On Jun 29, 2020, at 8:56 PM, Dave Thaler = <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

I don=E2=80=99t like = the term =E2=80=9CVerifier Input=E2=80=9D since =E2=80=9CAppraisal = Policy for Evidence=E2=80=9D is also Verifier Input, so I would find it = confusing.
I think that the rules = for what to put in Attestation Results (bullet 3), as well as = =E2=80=9Cknown-good/reference values=E2=80=9D if such exist
(and there can be valid = policies where they may not exist, or rather where the policies use more = complex rules than
a = simple test for equality against a constant) are conceptually part of = Appraisal Policy.
 
I = do agree that Appraisal Policy can be conveyed to the Verifier in many = different ways, and may be composed
of different things from different sources.
 
Dave
 
From: RATS <rats-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Monday, June 29, 2020 11:34 = AM
To: rats@ietf.org
Subject: [Rats] Verifier Input = instead of Endorsement?
 
Stepping back a bit on the definition of an Endorsement, I = think the four inputs to a Verifier are these:
  - = Key material for verifying trust in the Attester
  - = Known-good/Reference values for comparison with claims
  - Static implicit claims that are passed to RP's via = Attestation Results
  - Appraisal Policy
 
These can = and will be conveyed to the Verifier in many different ways:
  - X.509 certs with extensions
  - Signed documents
  - HTTP queries against the Attester/device = manufacturer
  - Remote SQL or = some other sort of database access to manufacturer(s)
  - Data storage like flash drives the are hand = carried into the Verifier's site
  - = One-time special file transfers
  - = Ceremonial procedures with M out of N people physical present approving = transfer
 
It seems like shoe-horning all of the = above (except policy) into an Endorsement, like I=E2=80=99ve tried = to do  is too much. I tried this shoe-horning because I think = the architecture document needs to cover all this and Endorsements was = what was in it. A typical Endorsement seems to be just the first two = mentioned, X.509 and signed documents expanding its definition to = include database access is a stretch.
 
Rather than = defining Endorsement, I=E2=80=99d like to define Verifier Input:
 
          *******************   = ************     ****************
          * Manufacturer(s) *   = * Verifier *     * Relying Party*
          *******************   = *  Owner   *     *  Owner       = *
    =                    | =        ************     = ****************
    =                    | =              |       =           |
         Verifier Input|   =            |         =         |
    =                    | =              |Appraisal     =    |
    =                    | =              |Policy     =       |
    =                    | =              |for     =          | Appraisal
                =        |             =  |Evidence         | Policy for
                =        |             =  |                 | = Attestation
    =                    | =              |       =           |  Result
                =        v             =  v                 = |
    =                 =  .-----------------.             =    |
    =           .----->|     Verifier =    |------.         |
              |   =    '-----------------'      |     =     |
    =           |           =                     | =         |
    =           |           =          Attestation|       =   |
    =           |           =          Results    |     =     |
    =           | Evidence       =                |     =     |
    =           |           =                     | =         |
    =           |           =                     v =         v
    =     .----------.             =          .-----------------.
        | Attester |       =                | Relying Party =   |
    =     '----------'             =         =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98
 

 

Endorsements = must still be mentioned, but as one form of Verifier input just like EAT = is one form of Attestation Evidence.
 
Verifier Input would be defined as:
  - Key material for verifying trust in the = Attester
  - Known-good/Reference values for = comparison with claims
  - Static implicit claims = that are passed to RP's via Attestation Results
 
To do this, = I=E2=80=99d replace the current PR and issue I have on = Endorsements with a new PR. It will be a fair bit of work, so I want to = see if there is some consensus first.
 
LL
 
 
 
 
 
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
= --Apple-Mail=_CF924F25-2A80-40C9-99C0-70C74E02844B-- From nobody Thu Jul 2 06:31:21 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 855FC3A00D4 for ; Thu, 2 Jul 2020 06:31:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XSnzke6wawlP for ; Thu, 2 Jul 2020 06:31:16 -0700 (PDT) Received: from mail-edgeKA24.fraunhofer.de (mail-edgeka24.fraunhofer.de [153.96.1.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 027E33A0365 for ; Thu, 2 Jul 2020 06:31:14 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2EYAwDy4P1e/xoBYJlfHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUqBdYEkgTMKhCeRFJt+BgsBAQEBAQEBAQEGAQEYCwoCBAE?= =?us-ascii?q?BAoRFAoIeASQ4EwIQAQEGAQEBAQEGBAIChkQMg1GBAgEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEWAkNVEgEBHQEBAQEDAQEhBAsBBS8HCxAJAg4DAQMBAQECAiMDAgI?= =?us-ascii?q?nHwECBggGAQkDAQUCAQGDIgGCewULjU2bBHZ/M4VRg2eBOgaBDiqMWQ8PgUw?= =?us-ascii?q?/gREnD4IsLj6CXAEBAoFHgyyCYASPIw8IgnyhUFwoB4FZgQaBBwQLmCgFCh2?= =?us-ascii?q?RGAaNf5FZnmACBAIJAhWBai83gRNNJE+CaVAXAg2XI4VEcgI1AgYBBwEBAwl?= =?us-ascii?q?8jB2BNAGBEAEB?= X-IPAS-Result: =?us-ascii?q?A2EYAwDy4P1e/xoBYJlfHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?UqBdYEkgTMKhCeRFJt+BgsBAQEBAQEBAQEGAQEYCwoCBAEBAoRFAoIeASQ4E?= =?us-ascii?q?wIQAQEGAQEBAQEGBAIChkQMg1GBAgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNVE?= =?us-ascii?q?gEBHQEBAQEDAQEhBAsBBS8HCxAJAg4DAQMBAQECAiMDAgInHwECBggGAQkDA?= =?us-ascii?q?QUCAQGDIgGCewULjU2bBHZ/M4VRg2eBOgaBDiqMWQ8PgUw/gREnD4IsLj6CX?= =?us-ascii?q?AEBAoFHgyyCYASPIw8IgnyhUFwoB4FZgQaBBwQLmCgFCh2RGAaNf5FZnmACB?= =?us-ascii?q?AIJAhWBai83gRNNJE+CaVAXAg2XI4VEcgI1AgYBBwEBAwl8jB2BNAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="22730635" Received: from mail-mtaka26.fraunhofer.de ([153.96.1.26]) by mail-edgeKA24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 15:31:12 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BIAQBO4P1e/1lIDI1fGwEBAQEBAQE?= =?us-ascii?q?BBQEBARIBAQEDAwEBAUCBSoF1NW8DVDAsCoQnkRScBAsBAwEBAQEBBgEBGAs?= =?us-ascii?q?KAgQBAYRHAoIcAiQ4EwIQAQEFAQEBAgEGBG2FWwyFbgEBAQEDAQEhBAsBBS8?= =?us-ascii?q?HCxAJAg4DAQMBAQECAiMDAgInHwECBggGAQkDAQUCAQGDIgGDAAuNTJsEdn8?= =?us-ascii?q?zhVGDZ4E6BoEOKoxZDw+BTD+BEScPgiwuPoJcAQECgUeDLIJgBI8jDwiCfKF?= =?us-ascii?q?QXCgHgVmBBoEHBAuYKAUKHZEYBo1/kVmeYAIEAgkCFYFqIgw3gRNNJE+CaVA?= =?us-ascii?q?XAg2XI4VEQTECNQIGAQcBAQMJfIwdgTQBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="85520169" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 15:31:08 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 062DV86W028361 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 2 Jul 2020 15:31:08 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 2 Jul 2020 15:31:03 +0200 To: Laurence Lundblade , Dave Thaler CC: "rats@ietf.org" References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> From: Henk Birkholz Message-ID: Date: Thu, 2 Jul 2020 15:31:02 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 13:31:21 -0000 Hi Laurence, while I think that I understand where you are coming from here, I have to say that I also think that: * "manufacturer(s)" is a too arbitrarily restricting term, which is why we agreed on endorser * every arrow is of course "input/output", but we are not calling evidence "Attester Output". So, Verifier Input is in contrast a too ambiguous category (it does not add any semantics to the arrow) * the itemized list that starts with key material provides a very intuitive example and maybe we could use that kind of list as a more prominent example in the arch I-D The question, if reference values are endorsements or appraisal policies or a third item is... probably okay and I am interested in an answer - but that is a detail, I think. As long as they are also mentioned, I can follow all three lines of thought. Also, I am in strong doubt that the following statement is always correct: "The transfer of all these inputs to the Verifier does need to be secured.". I am confused by the exceptions that follow that statement which basically say, I think: in some cases they have to be secured. Maybe we mean different things by "secured"? Viele Grüße, Henk On 02.07.20 03:46, Laurence Lundblade wrote: > Here’s rough proposed text and diagram. Not sure where it would go in > the doc yet. > > LL > >           *******************   ************     **************** >           * Manufacturer(s) *   * Verifier *     * Relying Party* >           *******************   *  Owner   *     *  Owner       * >                        |        ************     **************** >                        |              |                 | >           Manufacturer |              |                 | >               Verifier |              |Owner            | >                 Input  |              |Verifier         | >                        |              |Input            | Appraisal >                        |              |                 | Policy for >                        |              |                 | Attestation >                        |              |                 |  Result >                        v              v                 | >                      .-----------------.                | >               .----->|     Verifier    |------.         | >               |      '-----------------'      |         | >               |                               |         | >               |                    Attestation|         | >               |                    Results    |         | >               | Evidence                      |         | >               |                               |         | >               |                               v         v >         .----------.                      .-----------------. >         | Attester |                      | Relying Party   | >         '----------'                      '————————‘ > > Conceptually there are four main inputs to the Verifier aside from the > Attestation Evidence. They are: > >    - Key material for verifying trust in the Attester >    - Known-good/reference values for comparison with Claims in the > Attestation Evidence >    - Static implicit claims for the particular Attester that are pass > to the Relying Party in Attestation Results >    - Policy Configuration > > Any of these four can come from either the Manufacturer as Manufacturer > Verifier Input or from the Verifier Owner as Owner Verifier Input. They > key material usually always comes from the manufacturer and the policy > from the Verifier Owner, but there is no strict requirement for this. > The known-good/reference values and static implicit claims often come > from either or both. > > There is no strict separation between Manufacturer and Verifier Owner. > They could be the same. There could also be 3rd party intermediaries > between the Manufacturer and the Verifier. > > An Endorsement is one established format for some of these inputs. It > usually comes from an Endorser that is usually the Manufacturer. It is > usually a signed document. Alternatively, the Verifier may perform > queries against a database, perhaps one maintained by a Manufacturer, to > get inputs. Alternatively, the root key of a key hierarchy may be > transferred in a one-time physical ceremony. This architecture sets no > protocol or procedure for this input. > > The transfer of all these inputs to the Verifier does need to be > secured. For all cases, authenticity of the Manufacturer and Verifier > Owner and their inputs are required. Without authentic inputs, the > Verifier will not do its job correctly. In some cases confidentiality of > the inputs is required. Finally, in some cases the Manufacturer and > Verifier Owner will authenticate the Verifier. > > This architecture sets no requirement for a particular protocol or > security mechanism. For example, TLS could be used, but it is not the > only protocol that could be used, > > > > >> On Jun 29, 2020, at 8:56 PM, Dave Thaler >> > > wrote: >> >> I don’t like the term “Verifier Input” since “Appraisal Policy for >> Evidence” is also Verifier Input, so I would find it confusing. >> I think that the rules for what to put in Attestation Results (bullet >> 3), as well as “known-good/reference values” if such exist >> (and there can be valid policies where they may not exist, or rather >> where the policies use more complex rules than >> a simple test for equality against a constant) are conceptually part >> of Appraisal Policy. >> I do agree that Appraisal Policy can be conveyed to the Verifier in >> many different ways, and may be composed >> of different things from different sources. >> Dave >> *From:*RATS >*On >> Behalf Of*Laurence Lundblade >> *Sent:*Monday, June 29, 2020 11:34 AM >> *To:*rats@ietf.org >> *Subject:*[Rats] Verifier Input instead of Endorsement? >> Stepping back a bit on the definition of an Endorsement, I think the >> four inputs to a Verifier are these: >>   - Key material for verifying trust in the Attester >>   - Known-good/Reference values for comparison with claims >>   - Static implicit claims that are passed to RP's via Attestation Results >>   - Appraisal Policy >> These can and will be conveyed to the Verifier in many different ways: >>   - X.509 certs with extensions >>   - Signed documents >>   - HTTP queries against the Attester/device manufacturer >>   - Remote SQL or some other sort of database access to manufacturer(s) >>   - Data storage like flash drives the are hand carried into the >> Verifier's site >>   - One-time special file transfers >>   - Ceremonial procedures with M out of N people physical present >> approving transfer >> It seems like shoe-horning all of the above (except policy) into an >> Endorsement, like I’ve tried to do >> >> is too much. I tried this shoe-horning because I think the >> architecture document needs to cover all this and Endorsements was >> what was in it. A typical Endorsement seems to be just the first two >> mentioned, X.509 and signed documents expanding its definition to >> include database access is a stretch. >> Rather than defining Endorsement, I’d like to define Verifier Input: >>           *******************   ************     **************** >>           * Manufacturer(s) *   * Verifier *     * Relying Party* >>           *******************   *  Owner   *     *  Owner       * >>                        |        ************     **************** >>                        |              |                 | >>          Verifier Input|              |                 | >>                        |              |Appraisal        | >>                        |              |Policy           | >>                        |              |for              | Appraisal >>                        |              |Evidence         | Policy for >>                        |              |                 | Attestation >>                        |              |                 |  Result >>                        v              v                 | >>                      .-----------------.                | >>               .----->|     Verifier    |------.         | >>               |      '-----------------'      |         | >>               |                               |         | >>               |                    Attestation|         | >>               |                    Results    |         | >>               | Evidence                      |         | >>               |                               |         | >>               |                               v         v >>         .----------.                      .-----------------. >>         | Attester |                      | Relying Party   | >>         '----------'                      '————————‘ >> >> Endorsements must still be mentioned, but as one form of Verifier >> input just like EAT is one form of Attestation Evidence. >> Verifier Input would be defined as: >>   - Key material for verifying trust in the Attester >>   - Known-good/Reference values for comparison with claims >>   - Static implicit claims that are passed to RP's via Attestation Results >> To do this, I’d replace the current PR >>  and >> issue >>  I >> have on Endorsements with a new PR. It will be a fair bit of work, so >> I want to see if there is some consensus first. >> LL >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Jul 2 07:05:18 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86F093A0817 for ; Thu, 2 Jul 2020 07:05:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bR30mX5eoWYj for ; Thu, 2 Jul 2020 07:05:13 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16BC33A08AF for ; Thu, 2 Jul 2020 07:05:08 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2F7BABy6P1e/xoHYZlfHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKgXUGgR6BMwqEJ4NJjUyaHIEQA0wJCwEBAQEBAQEBAQYBARgGDwI?= =?us-ascii?q?EAQEChEUCgh4BJDgTAhABAQYBAQEBAQYEAgKGRAyDUYEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEWAg02HjcSAQEdAQEBAQIBAQEhDwEFNgICBQcLCQISBgICJgI?= =?us-ascii?q?CJyACDgYBDAYCAQGDIgGCXB8FC416mwR2gTKEAjwCDkFCg2CBOgaBDiqLSoE?= =?us-ascii?q?PDw+BTD8maycPglo+glwBAQIBAYEmARIBTYJqgmAEjGuCFQcKIoMDhmmaZ1w?= =?us-ascii?q?oB4FZgQaBBwQLhzWLKYVKBQodgnM2iHqEdQYnjViRWYockRhWglYCBAIJAhW?= =?us-ascii?q?BaoEJcE0kLiGCaVAXAg2OKheBAgEBAYUtgjCFRHICNQIGAQcBAQMJfI1RATF?= =?us-ascii?q?fAQE?= X-IPAS-Result: =?us-ascii?q?A2F7BABy6P1e/xoHYZlfHQEBAQEJARIBBQUBQIFKgXUGg?= =?us-ascii?q?R6BMwqEJ4NJjUyaHIEQA0wJCwEBAQEBAQEBAQYBARgGDwIEAQEChEUCgh4BJ?= =?us-ascii?q?DgTAhABAQYBAQEBAQYEAgKGRAyDUYEBAQEBAQEBAQEBAQEBAQEBAQEBAQEWA?= =?us-ascii?q?g02HjcSAQEdAQEBAQIBAQEhDwEFNgICBQcLCQISBgICJgICJyACDgYBDAYCA?= =?us-ascii?q?QGDIgGCXB8FC416mwR2gTKEAjwCDkFCg2CBOgaBDiqLSoEPDw+BTD8maycPg?= =?us-ascii?q?lo+glwBAQIBAYEmARIBTYJqgmAEjGuCFQcKIoMDhmmaZ1woB4FZgQaBBwQLh?= =?us-ascii?q?zWLKYVKBQodgnM2iHqEdQYnjViRWYockRhWglYCBAIJAhWBaoEJcE0kLiGCa?= =?us-ascii?q?VAXAg2OKheBAgEBAYUtgjCFRHICNQIGAQcBAQMJfI1RATFfAQE?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="18826798" Received: from mail-mtas26.fraunhofer.de ([153.97.7.26]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 16:05:05 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DdAwD16P1e/1lIDI1fHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUqBdQYvbwNUMCwKhCeRE5ocgRADVQsBAwEBAQEBBgEBGAY?= =?us-ascii?q?PAgQBAYRHAoIcAiQ4EwIQAQEFAQEBAgEGBG2FWwyFbgEBAQECAQEBIQ8BBTY?= =?us-ascii?q?CAgUHCwkCEgYCAiYCAicgAg4GAQwGAgEBgyIBglwkC41/mwR2gTKEPgIOQUK?= =?us-ascii?q?DZIE6BoEOKotKgQ8PD4FMPyZrJw+CWj6CXAEBAgEBgSYBEgFNgmqCYASMa4I?= =?us-ascii?q?VBwoigwOGaZpnXCgHgVmBBoEHBAuHNYsphUoFCh2CczaIeoR1BieNWJFZihy?= =?us-ascii?q?RGFaCVgIEAgkCFYFqImZwTSQuIYJpUBcCDY4qF4ECAQEBhS2CMIVEQTECNQI?= =?us-ascii?q?GAQcBAQMJfI1RATFfAQE?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="116770282" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaS26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 16:05:03 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 062E52TF031209 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 2 Jul 2020 16:05:02 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 2 Jul 2020 16:04:57 +0200 To: Thomas Fossati , "rats@ietf.org" References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> From: Henk Birkholz Message-ID: <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> Date: Thu, 2 Jul 2020 16:04:56 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 14:05:17 -0000 Hi Thomas, hi authors, please let me start with: I really like what this I-D is about; especially how everything is basically arranged around how to use timestamps and nonces in several specific interactions. The essence here is the qualified data conveyed via restful operations that are used to create Conceptual Messages, such as Evidence or Attestation Results. The fact that all these different types of qualifying data are bound with each other via sequences of restful operations makes the relationship of the sequence diagrams rather complex and renders the use of the qualified data / handles hard to read. At the same time, I am uncertain how to avoid that, though. You managed to get all the semantic relationships into the sequence diagrams themselves. I am quite impressed. But I could only decipher the notation while parsing them with the help of a little cheat sheet that I wrote down on a piece of paper. This topic is intrinsically complex, so - as I already said - I am unable to provide an immediate proposal how to increase readability. The fact remains that this is a very useful -00 I-D. Suffice to say that I would rather have this content in this form than not at all! Coincidentally, more generic versions of your diagrams with respect to the reference interaction models can be found in this editor's version: > https://ietf-rats.github.io/draft-birkholz-rats-reference-interaction-model/draft-birkholz-rats-reference-interaction-model.html#name-interaction-models These diagrams use simpler annotation, but therefore are also way more generic. They match with your more specific semantics, though, and I am very happy about that. We also struggled a bit with the illustration of the processing of qualified data in TUDA and based on your new I-D we can now try to improve them. Viele Grüße, Henk On 12.06.20 19:00, Thomas Fossati wrote: > Hi, all, > > We have just submitted a new draft "RESTful attested resources" (details > below). > > The main goal here is creating a mechanism to expose attested system > state as RESTful resources (i.e., "things" that can be de-referenced by > their URIs) together with a way to securely bind said system state with > an EAT token. > > We define two REST interfaces: one to the Attester and one to the > Verifier, with timestamp- and nonce-based freshness. We show how these > can be composed into the usual "background check", "passport" and > "time-based unidirectional" patterns. HTTP and CoAP instantiations are > provided, together with the associated MIME machinery. A discovery > method is also discussed based on the CoRE Resource Directory. > > This proposal seems in scope with the RATS charter, in particular its > "Standardize interoperable protocols to securely convey > assertions/claims." bit. We hope this provides a valid contribution on > how the RATS architecture and basic protocol elements can be used in > high level protocol(s), and would really appreciate any feedback with > regards to its usefulness, correctness and completeness. > > cheers, thanks! > > On 12/06/2020, 17:48, "internet-drafts@ietf.org" wrote: >> A new version of I-D, draft-shaw-rats-rear-00.txt >> has been successfully submitted by Thomas Fossati and posted to the >> IETF repository. >> >> Name:draft-shaw-rats-rear >> Revision:00 >> Title:Restful Attested Resources >> Document date:2020-06-12 >> Group:Individual Submission >> Pages:23 >> URL: https://www.ietf.org/internet-drafts/draft-shaw-rats-rear-00.txt >> Status: https://datatracker.ietf.org/doc/draft-shaw-rats-rear/ >> Htmlized: https://tools.ietf.org/html/draft-shaw-rats-rear-00 >> Htmlized: https://datatracker.ietf.org/doc/html/draft-shaw-rats-rear >> >> >> Abstract: >> This memo describes a REST interface based on the RATS architecture >> that can be used to retrieve attested system state, for example the >> reading of a security critical sensor. The objective is to present a >> common vocabulary of data formats and basic protocol transactions >> that can be pieced together into a cohesive interface that is capable >> of serving different attestation workflows. > > > > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Jul 2 09:06:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E7973A0967 for ; Thu, 2 Jul 2020 09:06:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=0yv+Kk99; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=0yv+Kk99 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M9AwdQdK_AUM for ; Thu, 2 Jul 2020 09:06:30 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10089.outbound.protection.outlook.com [40.107.1.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE8B63A0966 for ; Thu, 2 Jul 2020 09:06:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I5HS68yusIMl+t2NdeJubt1ENqCvkJ+lz+E41RsMpbM=; b=0yv+Kk99Fc7o9swY5GsU5ozeXJRrZaztAus29m6uHGL3P+oj5U7uFai0emsc3QxZTlN9gF/pcQJ71mgeYmI3e+/TShIrFBTjUCW1At738dMRaTvb2QQDehwstBryWons9C6ieI5kmKROE1ixCL4j5uLWPMbrfwfH8JcNAEFrLNA= Received: from AM5PR0201CA0015.eurprd02.prod.outlook.com (2603:10a6:203:3d::25) by AM6PR08MB4643.eurprd08.prod.outlook.com (2603:10a6:20b:c8::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.21; Thu, 2 Jul 2020 16:06:27 +0000 Received: from AM5EUR03FT058.eop-EUR03.prod.protection.outlook.com (2603:10a6:203:3d:cafe::3f) by AM5PR0201CA0015.outlook.office365.com (2603:10a6:203:3d::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.27 via Frontend Transport; Thu, 2 Jul 2020 16:06:26 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT058.mail.protection.outlook.com (10.152.17.48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Thu, 2 Jul 2020 16:06:26 +0000 Received: ("Tessian outbound a4b10e5b482d:v62"); Thu, 02 Jul 2020 16:06:26 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 4ed94d0e6ec16cec X-CR-MTA-TID: 64aa7808 Received: from b968d56551ba.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 426BEB08-5251-4406-9DC3-EDA28DDABDEA.1; Thu, 02 Jul 2020 16:06:20 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id b968d56551ba.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 02 Jul 2020 16:06:20 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Zusi0PDw1TlQ8mLQkNxW4WtqKSmkyvGarfTOfoXpjQeFvL9npfg4AVIr0qaFJNAJvyc1HLQ/x4Sp36k5PkG4FRrLu7p+o0+Taxi4m5UbL/ApIkAJICVltr8cRdEjAInVB8VBu0GluXIGKut0aBiLR5ZhJLZGeRQDtQeq4zE+1zvHKadKEYefvwG3FER01SFKjnVocmz2zrunAHDN0TKQSHDXQwix16L6BpvxYap5+ITXVTq198Ng7nTfK83/7Q8Smabo+D6cWpc5OzmX+EVKIkqD2Oq5ybaf+LDv8w1ycnRiYLtwRkEQrvKRNmhAytTBQhQ842xdZgzMHOc7UfbOUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I5HS68yusIMl+t2NdeJubt1ENqCvkJ+lz+E41RsMpbM=; b=CrTByUNakB5fx9Uq/ov4pQz+LTFjAz4yb3ch6j9y3qF9RqE7Kadw6fgF2qQXhc7EOBCwL5jmmxyhzVkJr61qvcBbTSkAwZp596BUjixfK6sXOCwWSn6RIWkA30/+Aj36+EeoGhr3dIAwtiy+6/BscoQk5AZWFzGEFaYtFvrPWy9tokFWQX2AWYnPwNoSkBcUNzXwricGHN+RVmLQtlRKSc4ldizczUYvKUx2I/7GhyIpGYmdHdP1v4EkJ4yt1GzdugNJvV1m2KgV+LlS5icPADD9ZmfP5TPMATJh5q2HRK2GH47HtpzsEgLJ9azOefxhvObGppCFB96anojfujp3mw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I5HS68yusIMl+t2NdeJubt1ENqCvkJ+lz+E41RsMpbM=; b=0yv+Kk99Fc7o9swY5GsU5ozeXJRrZaztAus29m6uHGL3P+oj5U7uFai0emsc3QxZTlN9gF/pcQJ71mgeYmI3e+/TShIrFBTjUCW1At738dMRaTvb2QQDehwstBryWons9C6ieI5kmKROE1ixCL4j5uLWPMbrfwfH8JcNAEFrLNA= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM5PR0801MB1874.eurprd08.prod.outlook.com (2603:10a6:203:49::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Thu, 2 Jul 2020 16:06:19 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3131.027; Thu, 2 Jul 2020 16:06:19 +0000 From: Thomas Fossati To: Henk Birkholz , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt Thread-Index: AQHWQNlFdH/OqKSRhkWewqKHNl+chKjVRQwAgB8syQCAADKsAA== Date: Thu, 2 Jul 2020 16:06:18 +0000 Message-ID: <613BB736-C15F-44D1-848A-5554C9EE858C@arm.com> References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> In-Reply-To: <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 9e372351-dbcd-4d10-d7da-08d81ea1df92 x-ms-traffictypediagnostic: AM5PR0801MB1874:|AM6PR08MB4643: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; x-forefront-prvs: 0452022BE1 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: aJGI4tDWxg5be/AWHUuqwLCAqjkZvI4Cc3SqcUFYtlAzqXYBipjdmlJvx2958W19gnCIMjKKH6+UeHPHeljayZ+whun6/7maz2WS+PDtZShnWQJhn5RP9iDmlSruzz0O9s4qDwFu90kt8LRe7QEY/4Vi7oIZRx8YVDBmimR7HE3rR12oK9Ev56ulkvarZm2Xc+2GsHnPVxOURYeGUfKZ2oab1dpDOJwX+2JuBwSNY5FeIZlNt1r3Ljv5JJUiNrXcBHXq2x9GBMqNyI8PHhayF56qldihrlUAQoSuCXc/1ReqbsSmil7XqVOP9UBeVaYJSJlqCW6j8EcWYvKK7sbza+rNCeXh20ctjMMXcdIi9pT/AxKh1xyKwm4LyERnUU2P0Uv7BkM4dZ9J9VHZyc2dKg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(39850400004)(366004)(346002)(396003)(136003)(33656002)(5660300002)(53546011)(6512007)(15650500001)(83080400001)(110136005)(186003)(71200400001)(8936002)(4326008)(8676002)(2616005)(2906002)(6506007)(83380400001)(66556008)(66476007)(86362001)(64756008)(66946007)(316002)(66446008)(91956017)(76116006)(966005)(6486002)(478600001)(36756003)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: JX4lX7xNOndDOdbTN4/tY69/bFpzOrHLGGVsuzQNDaGBjnCK3rKY47O8QHzn1Eym1wjXLTmy6gd3e6Z9FSYZurilo+KNEXeh3rT1uOOWj/VG4nswuootalnUsCigMBzWY3OTfPKCZLOh97Wq10L4O/wBkil3l07URtrcK8dWpKxpkKi7RZzjvFLD+Tlig6ePXilIaQFH6dGZOUrLEEf+nPw8pN84NACvFqcdQO7c6xaPpig4ADrx8e92seDjsyWPPUOOABxyhNgjK+ADjtJ6mIydNfDCdjO+NsAN6tsTgivf9g36vh4brpqQRp50ROC7gLZhAWeMycu/PxUQJhm+Ler7Fmdyq6KNKvEGhqzgtzLi/zFdEW6zYnqHKXcenwoOFydsxgx3b9K0FQT+SwNnzHNDqx1qSN01AK6B0Z65KqU+45xwv5WQOOtIfnqhpHg4ZsmfLcADAfAh9GyfrA//gbePZPlhoy67L1KXjKFDvRQ= Content-Type: text/plain; charset="utf-8" Content-ID: <112850A64DB6794C8298422E7D105B9B@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB1874 Original-Authentication-Results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT058.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(39850400004)(396003)(136003)(346002)(46966005)(2906002)(966005)(8936002)(15650500001)(33656002)(2616005)(336012)(70586007)(26005)(186003)(53546011)(6506007)(81166007)(356005)(82310400002)(83080400001)(4326008)(316002)(5660300002)(83380400001)(6486002)(36756003)(82740400003)(47076004)(86362001)(70206006)(6512007)(478600001)(36906005)(110136005)(8676002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: c4b3d14d-2ef7-4183-8e43-08d81ea1db4a X-Forefront-PRVS: 0452022BE1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: VMalg/BhTmbZf6xevckfIZ4n608t4xGw0RqphpRFpc4O2Rfy89OLf6lrO6QGlaDAzxuh8R7ALBdVARUadjeeTMJY6P6Zo8ztwcIeaK6P6SyWDoeKdKNqL2cOHOSYJAqyw62gbkFbIMK5UHI0I3HUPxGCzD8j/XirDY4u62Ka1RrsD4Gsl/1dH8+yDP6SMQEfxHFgrRBXBhagisJsp7dNCqAqkyzXouRCM+FN35KCI9/892mb2a4WcOMABFeAyVIWr2Ow4qmU3KVldJbMGc3lC1gvTy2Hcwj8wk6ydq5KtOuQeFudQwMPhOyCZhUnT0StrOw26yn2zQ0EsHglwVyLEfkjWBCjGFIP3vErE+0h2QM/P4bNsT6stczITbU4sSaG7oRgMBCs9+viTmZAduBLc0ZRLlAPAYcfb2+IU5UJyQeNN2E78IkY5cnGPwVmrUy7twzOUE02cHp+hmlUA3PGgqWq0geKvJ7IspEUZld3HKA= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jul 2020 16:06:26.1557 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 9e372351-dbcd-4d10-d7da-08d81ea1df92 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT058.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4643 Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 16:06:32 -0000 SGkgSGVuaywNCg0KT24gMDIvMDcvMjAyMCwgMTU6MDUsICJIZW5rIEJpcmtob2x6IiA8aGVuay5i aXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6DQo+IEhpIFRob21hcywNCj4gaGkgYXV0 aG9ycywNCj4NCj4gcGxlYXNlIGxldCBtZSBzdGFydCB3aXRoOiBJIHJlYWxseSBsaWtlIHdoYXQg dGhpcyBJLUQgaXMgYWJvdXQ7DQo+IGVzcGVjaWFsbHkgaG93IGV2ZXJ5dGhpbmcgaXMgYmFzaWNh bGx5IGFycmFuZ2VkIGFyb3VuZCBob3cgdG8gdXNlDQo+IHRpbWVzdGFtcHMgYW5kIG5vbmNlcyBp biBzZXZlcmFsIHNwZWNpZmljIGludGVyYWN0aW9ucy4gVGhlIGVzc2VuY2UNCj4gaGVyZSBpcyB0 aGUgcXVhbGlmaWVkIGRhdGEgY29udmV5ZWQgdmlhIHJlc3RmdWwgb3BlcmF0aW9ucyB0aGF0IGFy ZQ0KPiB1c2VkIHRvIGNyZWF0ZSBDb25jZXB0dWFsIE1lc3NhZ2VzLCBzdWNoIGFzIEV2aWRlbmNl IG9yIEF0dGVzdGF0aW9uDQo+IFJlc3VsdHMuDQo+DQo+IFRoZSBmYWN0IHRoYXQgYWxsIHRoZXNl IGRpZmZlcmVudCB0eXBlcyBvZiBxdWFsaWZ5aW5nIGRhdGEgYXJlIGJvdW5kDQo+IHdpdGggZWFj aCBvdGhlciB2aWEgc2VxdWVuY2VzIG9mIHJlc3RmdWwgb3BlcmF0aW9ucyBtYWtlcyB0aGUNCj4g cmVsYXRpb25zaGlwIG9mIHRoZSBzZXF1ZW5jZSBkaWFncmFtcyByYXRoZXIgY29tcGxleCBhbmQg cmVuZGVycyB0aGUgdXNlDQo+IG9mIHRoZSBxdWFsaWZpZWQgZGF0YSAvIGhhbmRsZXMgaGFyZCB0 byByZWFkLiBBdCB0aGUgc2FtZSB0aW1lLCBJIGFtDQo+IHVuY2VydGFpbiBob3cgdG8gYXZvaWQg dGhhdCwgdGhvdWdoLg0KPg0KPiBZb3UgbWFuYWdlZCB0byBnZXQgYWxsIHRoZSBzZW1hbnRpYyBy ZWxhdGlvbnNoaXBzIGludG8gdGhlIHNlcXVlbmNlDQo+IGRpYWdyYW1zIHRoZW1zZWx2ZXMuIEkg YW0gcXVpdGUgaW1wcmVzc2VkLiBCdXQgSSBjb3VsZCBvbmx5IGRlY2lwaGVyIHRoZQ0KPiBub3Rh dGlvbiB3aGlsZSBwYXJzaW5nIHRoZW0gd2l0aCB0aGUgaGVscCBvZiBhIGxpdHRsZSBjaGVhdCBz aGVldCB0aGF0IEkNCj4gd3JvdGUgZG93biBvbiBhIHBpZWNlIG9mIHBhcGVyLg0KPg0KPiBUaGlz IHRvcGljIGlzIGludHJpbnNpY2FsbHkgY29tcGxleCwgc28gLSBhcyBJIGFscmVhZHkgc2FpZCAt IEkgYW0NCj4gdW5hYmxlIHRvIHByb3ZpZGUgYW4gaW1tZWRpYXRlIHByb3Bvc2FsIGhvdyB0byBp bmNyZWFzZSByZWFkYWJpbGl0eS4gVGhlDQo+IGZhY3QgcmVtYWlucyB0aGF0IHRoaXMgaXMgYSB2 ZXJ5IHVzZWZ1bCAtMDAgSS1ELiBTdWZmaWNlIHRvIHNheSB0aGF0IEkNCj4gd291bGQgcmF0aGVy IGhhdmUgdGhpcyBjb250ZW50IGluIHRoaXMgZm9ybSB0aGFuIG5vdCBhdCBhbGwhDQoNClRoYW5r IHlvdSBmb3IgeW91ciB0YWtpbmcgdGhlIHRpbWUgdG8gcGFyc2UgdGhlIGRvY3VtZW50IC0gYW5k IG1ha2luZw0KdGhlIGNoZWF0IHNoZWV0ISAgQWxzbyBnbGFkIHlvdSBmb3VuZCB0aGUgdG9waWMg aW50ZXJlc3RpbmcuDQoNClJlOiByZWFkYWJpbGl0eS4gIEl0IHNlZW1lZCB0byB1cyB0aGF0IGl0 IHdvdWxkIGJlIGVhc2llciB0byB1c2UgYQ0KdG9wLWRvd24gYXBwcm9hY2gsIHByZXNlbnRpbmcg dGhlIGFic3RyYWN0IHByb3RvY29sIGZpcnN0IGFuZCB0aGVuDQpnaXZpbmcgYSBudW1iZXIgb2Yg cG9zc2libGUgaW5zdGFudGlhdGlvbnMuICBBcHBhcmVudGx5IGl0IGRpZG4ndCB3b3JrDQphcyBz bW9vdGhseSBhcyBleHBlY3RlZC4gIE1heWJlIHRvIGxvd2VyIHRoZSBiYXJyaWVycyB0byBlbnRy eSB3ZSBjb3VsZA0KZ2l2ZSBhIHNob3J0IHByaW1lciBhdCAob25lIG9mKSB0aGUgbmV4dCBtZWV0 aW5nKHMpPw0KDQo+IENvaW5jaWRlbnRhbGx5LCBtb3JlIGdlbmVyaWMgdmVyc2lvbnMgb2YgeW91 ciBkaWFncmFtcyB3aXRoIHJlc3BlY3QgdG8NCj4gdGhlIHJlZmVyZW5jZSBpbnRlcmFjdGlvbiBt b2RlbHMgY2FuIGJlIGZvdW5kIGluIHRoaXMgZWRpdG9yJ3MgdmVyc2lvbjoNCj4NCj4gPiBodHRw czovL2lldGYtcmF0cy5naXRodWIuaW8vZHJhZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50 ZXJhY3Rpb24tbW9kZWwvZHJhZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50ZXJhY3Rpb24t bW9kZWwuaHRtbCNuYW1lLWludGVyYWN0aW9uLW1vZGVscw0KPg0KPiBUaGVzZSBkaWFncmFtcyB1 c2Ugc2ltcGxlciBhbm5vdGF0aW9uLCBidXQgdGhlcmVmb3JlIGFyZSBhbHNvIHdheSBtb3JlDQo+ IGdlbmVyaWMuIFRoZXkgbWF0Y2ggd2l0aCB5b3VyIG1vcmUgc3BlY2lmaWMgc2VtYW50aWNzLCB0 aG91Z2gsIGFuZCBJIGFtDQo+IHZlcnkgaGFwcHkgYWJvdXQgdGhhdC4NCg0KVGhhbmtzIGZvciB0 aGUgcG9pbnRlci4gIEkgbGlrZSB0aGUgbW9yZSBodW1hbi1mcmllbmRseSBub3RhdGlvbi4gIEkn bGwNCmhhdmUgYSBsb29rIGFuZCBzZWUgaWYgSSBjYW4gbWFrZSBvdXIgZGlhZ3JhbXMgbG9vayBz aW1pbGFyLiAgSSdtIGFsc28NCmdvaW5nIHRvIHN3YXAgb3VyIHJlZmVyZW5jZSB0byBUVURBIHdp dGggdGhlIG1vcmUgZ2VuZXJpYyByZWZlcmVuY2UgdG8NCnlvdXIgc2VjdGlvbiA3LjIgKFVuaS1E aXJlY3Rpb25hbCBSZW1vdGUgQXR0ZXN0YXRpb24pLiAgV2hlbiBhcmUgeW91DQpnb2luZyB0byBw dWJsaXNoIHRoZSBuZXcgdmVyc2lvbj8NCg0KY2hlZXJzLCB0aGFua3MhDQoNCj4gV2UgYWxzbyBz dHJ1Z2dsZWQgYSBiaXQgd2l0aCB0aGUgaWxsdXN0cmF0aW9uIG9mIHRoZSBwcm9jZXNzaW5nIG9m DQo+IHF1YWxpZmllZCBkYXRhIGluIFRVREEgYW5kIGJhc2VkIG9uIHlvdXIgbmV3IEktRCB3ZSBj YW4gbm93IHRyeSB0bw0KPiBpbXByb3ZlIHRoZW0uDQo+DQo+IFZpZWxlIEdyw7zDn2UsDQo+DQo+ IEhlbmsNCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5k IGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxl Z2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMg dG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3Ig Y29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Thu Jul 2 09:41:06 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E196B3A0B14 for ; Thu, 2 Jul 2020 09:41:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DN6TWc-pu-Zf for ; Thu, 2 Jul 2020 09:40:57 -0700 (PDT) Received: from mail-edgeKA24.fraunhofer.de (mail-edgeka24.fraunhofer.de [153.96.1.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C47783A0AAE for ; Thu, 2 Jul 2020 09:40:55 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FVBQCKDf5e/xoBYJlfgQmDRYEegTM?= =?us-ascii?q?KhCeDSY1MmhyBEANVCwEBAQEBAQEBAQYBAR4PAgQBAYRHAoIeASQ4EwIQAQE?= =?us-ascii?q?GAQEBAQEGBAIChkQMhFIsDVRoAQEBAQIBIw8BBTgCBRIJAhgCAiYCAkcQBgE?= =?us-ascii?q?MBgIBAYMiAYJcHwULjSibBHaBMoQCgU+DWoE6BoEOKotKgQ8PD4FMPyZrJw+?= =?us-ascii?q?CWj6CXAICgSgBEgFNgmqCYASPAAcsgwOGaZtDKAeBWYEGgQcEC4c1iymFSgU?= =?us-ascii?q?KHYJzNoh6hHUGJ41YkVmKHJEYVoJWAgQCCQIVgWqBCXBNJIM4UBcCDY4qF4E?= =?us-ascii?q?CAQEBhS2HcQNyAjUCBgEHAQEDCXyNUAExXwEB?= X-IPAS-Result: =?us-ascii?q?A2FVBQCKDf5e/xoBYJlfgQmDRYEegTMKhCeDSY1MmhyBE?= =?us-ascii?q?ANVCwEBAQEBAQEBAQYBAR4PAgQBAYRHAoIeASQ4EwIQAQEGAQEBAQEGBAICh?= =?us-ascii?q?kQMhFIsDVRoAQEBAQIBIw8BBTgCBRIJAhgCAiYCAkcQBgEMBgIBAYMiAYJcH?= =?us-ascii?q?wULjSibBHaBMoQCgU+DWoE6BoEOKotKgQ8PD4FMPyZrJw+CWj6CXAICgSgBE?= =?us-ascii?q?gFNgmqCYASPAAcsgwOGaZtDKAeBWYEGgQcEC4c1iymFSgUKHYJzNoh6hHUGJ?= =?us-ascii?q?41YkVmKHJEYVoJWAgQCCQIVgWqBCXBNJIM4UBcCDY4qF4ECAQEBhS2HcQNyA?= =?us-ascii?q?jUCBgEHAQEDCXyNUAExXwEB?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="22735593" Received: from mail-mtaka26.fraunhofer.de ([153.96.1.26]) by mail-edgeKA24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 18:40:53 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C+BgA7Df5e/1lIDI1fgQmDRS9vA1Q?= =?us-ascii?q?wLAqEJ5EVmhyBEANVCwEDAQEBAQEGAQEeDwIEAQGERwKCHAIkOBMCEAEBBQE?= =?us-ascii?q?BAQIBBgRthVsMhW4BAQEBAgEjDwEFOAIFEgkCGAICJgICRxAGAQwGAgEBgyI?= =?us-ascii?q?BglwkC40lmwR2gTKFUYNagToGgQ4qi0qBDw8PgUw/JmsnD4JaPoJcAgKBKAE?= =?us-ascii?q?SAU2CaoJgBI8AByyDA4Zpm0MoB4FZgQaBBwQLhzWLKYVKBQodgnM2iHqEdQY?= =?us-ascii?q?njViRWYockRhWglYCBAIJAhWBaiJmcE0kgzhQFwINjioXgQIBAQGFLYdxA0E?= =?us-ascii?q?xAjUCBgEHAQEDCXyNUAExXwEB?= X-IronPort-AV: E=Sophos;i="5.75,304,1589234400"; d="scan'208";a="85536672" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Jul 2020 18:40:51 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 062Geom9006401 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 2 Jul 2020 18:40:50 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 2 Jul 2020 18:40:45 +0200 To: Thomas Fossati , "rats@ietf.org" References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> <613BB736-C15F-44D1-848A-5554C9EE858C@arm.com> From: Henk Birkholz Message-ID: Date: Thu, 2 Jul 2020 18:40:44 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <613BB736-C15F-44D1-848A-5554C9EE858C@arm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 16:41:05 -0000 Hi Thomas, On 02.07.20 18:06, Thomas Fossati wrote: > Hi Henk, > > On 02/07/2020, 15:05, "Henk Birkholz" wrote: >> Hi Thomas, >> hi authors, >> >> please let me start with: I really like what this I-D is about; >> especially how everything is basically arranged around how to use >> timestamps and nonces in several specific interactions. The essence >> here is the qualified data conveyed via restful operations that are >> used to create Conceptual Messages, such as Evidence or Attestation >> Results. >> >> The fact that all these different types of qualifying data are bound >> with each other via sequences of restful operations makes the >> relationship of the sequence diagrams rather complex and renders the use >> of the qualified data / handles hard to read. At the same time, I am >> uncertain how to avoid that, though. >> >> You managed to get all the semantic relationships into the sequence >> diagrams themselves. I am quite impressed. But I could only decipher the >> notation while parsing them with the help of a little cheat sheet that I >> wrote down on a piece of paper. >> >> This topic is intrinsically complex, so - as I already said - I am >> unable to provide an immediate proposal how to increase readability. The >> fact remains that this is a very useful -00 I-D. Suffice to say that I >> would rather have this content in this form than not at all! > > Thank you for your taking the time to parse the document - and making > the cheat sheet! Also glad you found the topic interesting. > > Re: readability. It seemed to us that it would be easier to use a > top-down approach, presenting the abstract protocol first and then > giving a number of possible instantiations. Apparently it didn't work > as smoothly as expected. Maybe to lower the barriers to entry we could > give a short primer at (one of) the next meeting(s)? Yes, please. I think with floating this document more, we might get some additional hints and tips and, of course, feedback on how this currently addresses the needs of implementers. I'd encourage to request a slot for the upcoming IETF 108 sessions. > >> Coincidentally, more generic versions of your diagrams with respect to >> the reference interaction models can be found in this editor's version: >> >>> https://ietf-rats.github.io/draft-birkholz-rats-reference-interaction-model/draft-birkholz-rats-reference-interaction-model.html#name-interaction-models >> >> These diagrams use simpler annotation, but therefore are also way more >> generic. They match with your more specific semantics, though, and I am >> very happy about that. > > Thanks for the pointer. I like the more human-friendly notation. I'll > have a look and see if I can make our diagrams look similar. I'm also > going to swap our reference to TUDA with the more generic reference to > your section 7.2 (Uni-Directional Remote Attestation). When are you > going to publish the new version? That sounds great. With respect to submission... yes, we should do a submit soon and then another before the submission moratorium, if we are able to pull in the expected content about Direct Anonymous Attestation. Let me see, if I can do another pass on the relatively fresh and clumsy text around the diagrams in section 7, first. Viele Grüße, Henk > > cheers, thanks! > >> We also struggled a bit with the illustration of the processing of >> qualified data in TUDA and based on your new I-D we can now try to >> improve them. >> >> Viele Grüße, >> >> Henk > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > From nobody Thu Jul 2 10:52:08 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2EF7C3A076C for ; Thu, 2 Jul 2020 10:52:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lU95jXf9KggZ for ; Thu, 2 Jul 2020 10:51:59 -0700 (PDT) Received: from p3plsmtpa08-10.prod.phx3.secureserver.net (p3plsmtpa08-10.prod.phx3.secureserver.net [173.201.193.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA0173A0746 for ; Thu, 2 Jul 2020 10:51:59 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id r3NNjIAvwFA29r3NOjcHTo; Thu, 02 Jul 2020 10:51:59 -0700 X-CMAE-Analysis: v=2.3 cv=YP7hNiOx c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=48vgC7mUAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=yMhMjlubAAAA:8 a=fCEbem1Rq9ZJ4A6kkboA:9 a=5J2pOV-c8GGJvRMd:21 a=-5dtvKQY6Blu2TGJ:21 a=QEXdDO2ut3YA:10 a=RVV-IM0autJV1gWGcMQA:9 a=ZARBmPNZp5wnTFFk:21 a=0u_6yVssD_1WPRZ0:21 a=oN8V3ggyko_0SHPR:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_B35491BE-DF49-4D7C-AB0F-92DED4D23548" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Thu, 2 Jul 2020 10:51:57 -0700 In-Reply-To: Cc: Dave Thaler , "rats@ietf.org" To: Henk Birkholz References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfN+KF/1bnR6Dnx8YOmL3CklzVPW8ScVHlziSdK9WBEn9yRMZdI5MlYVouOUEsQ8CfGgauTE9znEbEAuGT59iGTkPvp8B01Ziy89cgzzZgGg9ecr8sCwR vbRnP0YImm+VoicAqp0mjQW7lTVvV+r6Rse34liC/xICF4qSd11cMLfdFpyvUJI0WYc+jpe09Nnom+0IZBkZ37C4H3hrxHxqwQQS9IeYZMezeXaQUzLJne/n ay7xfZJarQyZ9osh6+GiHOr7qil6HWotFlhTkbxKv1M= Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 17:52:02 -0000 --Apple-Mail=_B35491BE-DF49-4D7C-AB0F-92DED4D23548 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jul 2, 2020, at 6:31 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > while I think that I understand where you are coming from here, I have = to say that I also think that: >=20 > * "manufacturer(s)" is a too arbitrarily restricting term, which is = why we agreed on endorser The problem with Endorser is that they produce Endorsements and I think = there are problems with Endorsements: - In Berlin you told me they don=E2=80=99t have keys in them. So then = how do keys get into the Verifier? - Endorsements seem to be small signed documents of attributes so = they=E2=80=99re not so good for: - Representing a database of millions of keys - Representing HTTP access to a manufacturers database of = known-good/reference values - One-time physical / ceremonial transfer of a root key - Endorsements seem like a somewhat narrowed, specific way of providing = verifier input - Endorsements imply signing as the security mechanism, which is too = narrow. =20 Maybe we can find a term other than manufacturer? What I want to avoid = is the general use of the term Endorsement for the above reasons. Using = the term Endorsement to me is like using the protocol-specific term EAT = instead of conceptual term Attestation Evidence. Use of the term = Endorser implies Endorsement, but maybe it is OK if we don=E2=80=99t use = the term Endorsement. > * every arrow is of course "input/output", but we are not calling = evidence "Attester Output". So, Verifier Input is in contrast a too = ambiguous category (it does not add any semantics to the arrow) Maybe the non-specificity of =E2=80=9CVerifier Input=E2=80=9D seems = useful? It allows the list of four (keys, ref values, static claims, = policy) to be used and for them to be variable. It is just a grouping. Maybe we can find a better term? Here=E2=80=99s a few: Verifier Criteria Verifier Data Attester Verification Criteria Attester Trust Materials > * the itemized list that starts with key material provides a very = intuitive example and maybe we could use that kind of list as a more = prominent example in the arch I-D I=E2=80=99d prefer the list of four to be explicit architecture, not = just an example. >=20 > The question, if reference values are endorsements or appraisal = policies or a third item is... probably okay and I am interested in an = answer - but that is a detail, I think. As long as they are also = mentioned, I can follow all three lines of thought. We should assume our audience knows little to nothing about TCG work = (like me) and little about attestation, so I=E2=80=99d prefer they not = be details, but rather up front and clear. >=20 > Also, I am in strong doubt that the following statement is always = correct: "The transfer of all these inputs to the Verifier does need to = be secured.". I am confused by the exceptions that follow that statement = which basically say, I think: in some cases they have to be secured. = Maybe we mean different things by "secured"? Let me try again: - The Verifier must always establish the authenticity of the = Manufacturer - All input from the Manufacturer must be integrity protected - The Verifier must always establish the authenticity of the Verifier = Owner - All input from the Verifier Owner must be integrity protected - In some cases the Manufacturer may wish to establish the authenticity = of the Verifier before giving inputs - In some cases the Owner may wish to establish the authenticity of the = Verifier before giving inputs - In some cases confidentiality of the inputs is required LL >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 02.07.20 03:46, Laurence Lundblade wrote: >> Here=E2=80=99s rough proposed text and diagram. Not sure where it = would go in the doc yet. >> LL >> ******************* ************ **************** >> * Manufacturer(s) * * Verifier * * Relying Party* >> ******************* * Owner * * Owner * >> | ************ **************** >> | | | >> Manufacturer | | | >> Verifier | |Owner | >> Input | |Verifier | >> | |Input | Appraisal >> | | | Policy for >> | | | Attestation >> | | | Result >> v v | >> .-----------------. | >> .----->| Verifier |------. | >> | '-----------------' | | >> | | | >> | Attestation| | >> | Results | | >> | Evidence | | >> | | | >> | v v >> .----------. .-----------------. >> | Attester | | Relying Party | >> '----------' = '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2= =80=98 >> Conceptually there are four main inputs to the Verifier aside from = the Attestation Evidence. They are: >> - Key material for verifying trust in the Attester >> - Known-good/reference values for comparison with Claims in the = Attestation Evidence >> - Static implicit claims for the particular Attester that are pass = to the Relying Party in Attestation Results >> - Policy Configuration >> Any of these four can come from either the Manufacturer as = Manufacturer Verifier Input or from the Verifier Owner as Owner Verifier = Input. They key material usually always comes from the manufacturer and = the policy from the Verifier Owner, but there is no strict requirement = for this. The known-good/reference values and static implicit claims = often come from either or both. >> There is no strict separation between Manufacturer and Verifier = Owner. They could be the same. There could also be 3rd party = intermediaries between the Manufacturer and the Verifier. >> An Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input. >> The transfer of all these inputs to the Verifier does need to be = secured. For all cases, authenticity of the Manufacturer and Verifier = Owner and their inputs are required. Without authentic inputs, the = Verifier will not do its job correctly. In some cases confidentiality of = the inputs is required. Finally, in some cases the Manufacturer and = Verifier Owner will authenticate the Verifier. >> This architecture sets no requirement for a particular protocol or = security mechanism. For example, TLS could be used, but it is not the = only protocol that could be used, >>> On Jun 29, 2020, at 8:56 PM, Dave Thaler = = >> wrote: >>>=20 >>> I don=E2=80=99t like the term =E2=80=9CVerifier Input=E2=80=9D since = =E2=80=9CAppraisal Policy for Evidence=E2=80=9D is also Verifier Input, = so I would find it confusing. >>> I think that the rules for what to put in Attestation Results = (bullet 3), as well as =E2=80=9Cknown-good/reference values=E2=80=9D if = such exist >>> (and there can be valid policies where they may not exist, or rather = where the policies use more complex rules than >>> a simple test for equality against a constant) are conceptually part = of Appraisal Policy. >>> I do agree that Appraisal Policy can be conveyed to the Verifier in = many different ways, and may be composed >>> of different things from different sources. >>> Dave >>> *From:*RATS = >>*On Behalf = Of*Laurence Lundblade >>> *Sent:*Monday, June 29, 2020 11:34 AM >>> *To:*rats@ietf.org > >>> *Subject:*[Rats] Verifier Input instead of Endorsement? >>> Stepping back a bit on the definition of an Endorsement, I think the = four inputs to a Verifier are these: >>> - Key material for verifying trust in the Attester >>> - Known-good/Reference values for comparison with claims >>> - Static implicit claims that are passed to RP's via Attestation = Results >>> - Appraisal Policy >>> These can and will be conveyed to the Verifier in many different = ways: >>> - X.509 certs with extensions >>> - Signed documents >>> - HTTP queries against the Attester/device manufacturer >>> - Remote SQL or some other sort of database access to = manufacturer(s) >>> - Data storage like flash drives the are hand carried into the = Verifier's site >>> - One-time special file transfers >>> - Ceremonial procedures with M out of N people physical present = approving transfer >>> It seems like shoe-horning all of the above (except policy) into an = Endorsement, like I=E2=80=99ve tried to do = > is too much. I tried this = shoe-horning because I think the architecture document needs to cover = all this and Endorsements was what was in it. A typical Endorsement = seems to be just the first two mentioned, X.509 and signed documents = expanding its definition to include database access is a stretch. >>> Rather than defining Endorsement, I=E2=80=99d like to define = Verifier Input: >>> ******************* ************ **************** >>> * Manufacturer(s) * * Verifier * * Relying Party* >>> ******************* * Owner * * Owner * >>> | ************ **************** >>> | | | >>> Verifier Input| | | >>> | |Appraisal | >>> | |Policy | >>> | |for | Appraisal >>> | |Evidence | Policy for >>> | | | = Attestation >>> | | | Result >>> v v | >>> .-----------------. | >>> .----->| Verifier |------. | >>> | '-----------------' | | >>> | | | >>> | Attestation| | >>> | Results | | >>> | Evidence | | >>> | | | >>> | v v >>> .----------. .-----------------. >>> | Attester | | Relying Party | >>> '----------' = '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2= =80=98 >>>=20 >>> Endorsements must still be mentioned, but as one form of Verifier = input just like EAT is one form of Attestation Evidence. >>> Verifier Input would be defined as: >>> - Key material for verifying trust in the Attester >>> - Known-good/Reference values for comparison with claims >>> - Static implicit claims that are passed to RP's via Attestation = Results >>> To do this, I=E2=80=99d replace the current PR = > and issue = > I have on Endorsements with a new = PR. It will be a fair bit of work, so I want to see if there is some = consensus first. >>> LL >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org > >>> https://www.ietf.org/mailman/listinfo/rats = >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats = >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_B35491BE-DF49-4D7C-AB0F-92DED4D23548 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Jul 2, 2020, at 6:31 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

while I think that I understand where you are coming from = here, I have to say that I also think that:

* "manufacturer(s)" is a too = arbitrarily restricting term, which is why we agreed on = endorser

The = problem with Endorser is that they produce Endorsements and I think = there are problems with Endorsements:
 - In Berlin you = told me they don=E2=80=99t have keys in them. So then how do keys get = into the Verifier?
 - Endorsements seem to be small = signed documents of attributes so they=E2=80=99re not so good = for:
     - Representing a database of millions = of keys
     - Representing HTTP access to a = manufacturers database of known-good/reference values
  =    - One-time physical / ceremonial transfer of a root = key
- Endorsements seem like a somewhat narrowed, specific way = of providing verifier input
- Endorsements imply signing as = the security mechanism, which is too narrow.
    =  
Maybe we can find a term other than manufacturer? =  What I want to avoid is the general use of the term Endorsement = for the above reasons. Using the term Endorsement to me is like using = the protocol-specific term EAT instead of conceptual term Attestation = Evidence. Use of the term Endorser implies Endorsement, but maybe it is = OK if we don=E2=80=99t use the term Endorsement.

* every arrow is of course = "input/output", but we are not calling evidence "Attester Output". So, = Verifier Input is in contrast a too ambiguous category (it does not add = any semantics to the arrow)

Maybe the non-specificity of =E2=80=9CVerifier = Input=E2=80=9D seems useful? It allows the list of four (keys, ref = values, static claims, policy) to be used and for them to be variable. = It is just a grouping.

Maybe we can = find a better term? Here=E2=80=99s a few:
  =  Verifier Criteria
   Verifier = Data
   Attester Verification = Criteria
   Attester Trust Materials


* the = itemized list that starts with key material provides a very intuitive = example and maybe we could use that kind of list as a more prominent = example in the arch I-D

I=E2=80=99d prefer the list of four to be explicit = architecture, not just an example.


The question, if reference values are endorsements or = appraisal policies or a third item is... probably okay and I am = interested in an answer - but that is a detail, I think. As long as they = are also mentioned, I can follow all three lines of thought.

We should = assume our audience knows little to nothing about TCG work (like me) and = little about attestation, so I=E2=80=99d prefer they not be details, but = rather up front and clear.


Also, I am in strong doubt that the following statement is = always correct: "The transfer of all these inputs to the Verifier does = need to be secured.". I am confused by the exceptions that follow that = statement which basically say, I think: in some cases they have to be = secured. Maybe we mean different things by "secured"?

Let me try = again:
- The Verifier must always establish the authenticity = of the Manufacturer
- All input from the Manufacturer must be = integrity protected
- The Verifier must always establish = the authenticity of the Verifier Owner
- All input from = the Verifier Owner must be integrity protected
- In = some cases the Manufacturer may wish to establish the authenticity of = the Verifier before giving inputs
- In some cases the = Owner may wish to establish the authenticity of the Verifier before = giving inputs
- In some cases confidentiality = of the inputs is required

LL



Viele = Gr=C3=BC=C3=9Fe,

Henk

On 02.07.20 03:46, Laurence Lundblade wrote:
Here=E2=80=99s rough proposed text and diagram. Not sure = where it would go in the doc yet.
LL
  =         *******************   = ************     ****************
    =       * = Manufacturer(s) *   * Verifier *     * Relying Party*
          *******************   = *  Owner   *     *  Owner       = *
                =        |        ************ =     ****************
        =                |     =          |           =       |
        =   Manufacturer | =              |       =           |
      =         Verifier |     =          |Owner         =    |
            =     Input =  |              |Verifier   =       |
          =              |       =        |Input           =  | Appraisal
          =              |       =        |             =     | Policy for
        =                |     =          |           =       | Attestation
      =                  |   =            |         =         |  Result
    =                    v =              v       =           |
      =               =  .-----------------.             =    |
            =   .----->| =     Verifier    |------.         = |
              |     =  '-----------------'      |       =   |
            =   |     =                     =       |         |
  =             |       =              Attestation|   =       |
          =     |   =                  Results =    |         |
    =           | Evidence     =                  |   =       |
          =     |   =                     =         |         |
              |       =                     =     v         v
  =       .----------.     =                 =  .-----------------.
        | Attester |     =                  | Relying = Party   |
        '----------'     =                 =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98
Conceptually there are four main inputs to = the Verifier aside from the Attestation Evidence. They are:
   - Key material for verifying trust in the = Attester
   - Known-good/reference values for = comparison with Claims in the Attestation Evidence
  =  - Static implicit claims for the particular Attester that are pass = to the Relying Party in Attestation Results
   - = Policy Configuration
Any of these four can come from = either the Manufacturer as Manufacturer Verifier Input or from the = Verifier Owner as Owner Verifier Input. They key material usually always = comes from the manufacturer and the policy from the Verifier Owner, but = there is no strict requirement for this. The known-good/reference values = and static implicit claims often come from either or both.
There is no strict separation between Manufacturer and = Verifier Owner. They could be the same. There could also be 3rd party = intermediaries between the Manufacturer and the Verifier.
An= Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input.
The transfer of all = these inputs to the Verifier does need to be secured. For all cases, = authenticity of the Manufacturer and Verifier Owner and their inputs are = required. Without authentic inputs, the Verifier will not do its job = correctly. In some cases confidentiality of the inputs is required. = Finally, in some cases the Manufacturer and Verifier Owner will = authenticate the Verifier.
This architecture sets no = requirement for a particular protocol or security mechanism. For = example, TLS could be used, but it is not the only protocol that could = be used,
On Jun 29, = 2020, at 8:56 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org <mailto:dthaler=3D40microsoft.com@dmarc.ietf.org>> = wrote:

I don=E2=80=99t like the term = =E2=80=9CVerifier Input=E2=80=9D since =E2=80=9CAppraisal Policy for = Evidence=E2=80=9D is also Verifier Input, so I would find it = confusing.
I think that the rules for what to put in = Attestation Results (bullet 3), as well as =E2=80=9Cknown-good/reference = values=E2=80=9D if such exist
(and there can be valid = policies where they may not exist, or rather where the policies use more = complex rules than
a simple test for equality against a = constant) are conceptually part of Appraisal Policy.
I do = agree that Appraisal Policy can be conveyed to the Verifier in many = different ways, and may be composed
of different things = from different sources.
Dave
*From:*RATS = <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>>*On Behalf = Of*Laurence Lundblade
*Sent:*Monday, June 29, 2020 11:34 = AM
*To:*rats@ietf.org <mailto:rats@ietf.org>
*Subject:*[Rats] Verifier Input instead of Endorsement?
Stepping back a bit on the definition of an Endorsement, I = think the four inputs to a Verifier are these:
  - = Key material for verifying trust in the Attester
  - = Known-good/Reference values for comparison with claims
  - Static implicit claims that are passed to RP's via = Attestation Results
  - Appraisal Policy
These can and will be conveyed to the Verifier in many = different ways:
  - X.509 certs with extensions
  - Signed documents
  - HTTP queries = against the Attester/device manufacturer
  - Remote = SQL or some other sort of database access to manufacturer(s)
  - Data storage like flash drives the are hand carried = into the Verifier's site
  - One-time special file = transfers
  - Ceremonial procedures with M out of N = people physical present approving transfer
It seems like = shoe-horning all of the above (except policy) into an Endorsement, like = I=E2=80=99ve tried to do <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fpull%2F94&data=3D02%7C= 01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988bf= 86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986365098&sdata=3D2NktPX%2= B3LJXjMEjEFoM8kpUIy6yOxte%2BuhFYr1ETN4g%3D&reserved=3D0> =  is too much. I tried this shoe-horning because I think the = architecture document needs to cover all this and Endorsements was what = was in it. A typical Endorsement seems to be just the first two = mentioned, X.509 and signed documents expanding its definition to = include database access is a stretch.
Rather than defining = Endorsement, I=E2=80=99d like to define Verifier Input:
          *******************   = ************     ****************
    =       * Manufacturer(s) *   * Verifier *   =   * Relying Party*
          = *******************   *  Owner   *     * =  Owner       *
      =                  |   =      ************     ****************
                =        |             =  |                 |
         Verifier Input|   =            |         =         |
        =                |     =          |Appraisal       =  |
              =          |           =    |Policy           |
                =        |             =  |for              | = Appraisal
              =          |           =    |Evidence         | Policy for
                =        |             =  |                 | = Attestation
            =            |         =      |               =   |  Result
          =              v       =        v             =     |
            =          .-----------------.     =            |
    =           .----->|     Verifier =    |------.         |
  =             |     =  '-----------------'      |       =   |
              = |                     =           |         |
              |   =                 =  Attestation|         |
  =             |         =            Results    |   =       |
          =     | Evidence             =          |         |
              |   =                     =         |         |
              |   =                     =         v         v
        .----------.       =               =  .-----------------.
        | = Attester |                 =      | Relying Party   |
    =     '----------'     =                 =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98

Endorsements must still be = mentioned, but as one form of Verifier input just like EAT is one form = of Attestation Evidence.
Verifier Input would be defined = as:
  - Key material for verifying trust in the = Attester
  - Known-good/Reference values for = comparison with claims
  - Static implicit claims = that are passed to RP's via Attestation Results
To do = this, I=E2=80=99d replace the current PR <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fpull%2F94&data=3D02%7C= 01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988bf= 86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986365098&sdata=3D2NktPX%2= B3LJXjMEjEFoM8kpUIy6yOxte%2BuhFYr1ETN4g%3D&reserved=3D0> a= nd issue <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fissues%2F65&data=3D02%= 7C01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988= bf86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986375092&sdata=3DGfM5qE= lO4teNdjfABlmVayeGXuYHWBDqHTVtpeeew7g%3D&reserved=3D0> I = have on Endorsements with a new PR. It will be a fair bit of work, so I = want to see if there is some consensus first.
LL
_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats
_______________________________________________RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_B35491BE-DF49-4D7C-AB0F-92DED4D23548-- From nobody Thu Jul 2 13:16:06 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E98B53A09E1 for ; Thu, 2 Jul 2020 13:16:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lDbbjGIQ9xYh for ; Thu, 2 Jul 2020 13:15:56 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DE133A0A21 for ; Thu, 2 Jul 2020 13:15:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 2EDC6389D4; Thu, 2 Jul 2020 16:12:58 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id oitmlM6K1cSv; Thu, 2 Jul 2020 16:12:57 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 73095389D3; Thu, 2 Jul 2020 16:12:57 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 32F1B3DE; Thu, 2 Jul 2020 16:15:46 -0400 (EDT) From: Michael Richardson To: Thomas Fossati , "rats\@ietf.org" In-Reply-To: <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 20:16:01 -0000 --=-=-= Content-Type: text/plain Hi, thank you for the draft. (Please expect some pendantry on how to say this is a REST based interface. I don't think it matters what you write, someone will say you wrote it wrong) Some things that jumped out at me: > strong authenticity. I don't know what this means. I think that we went to some lengths in the architecture to say that we were evidence of trustworthiness. The paragraph that follows, which deals with assurance, seems much better. Maybe just omit the first paragraph :-) "are the three RATS actors" <- we never use "actors" in the architecture. Some said we should, but we didn't go there. We used "roles"... which I agree are things that actors portray. I suggest: The three RATS roles of the attester (A), the relying party (RP) and the verifier (V) are protrayed by three principal actors. I scanned through the rest of the document. I didn't check your math, as I would really need to be in implementation mindset to do that. I feel that there is perhaps some unexplained/implicit knowledge around the if= that I might not have understood the first time. In this thread you offered to do a tutorial/walkthrough. I won't say no to that, but I want to say that if the document needs a tutorial/walkthrough to be understood, then the document needs some changes. So, do that walkthrough, but with the idea not of explaining things, but of getting feedback on the explanation so that you can make the document better. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7+QHEACgkQgItw+93Q 3WWwXwf/clEvQiuq1RbywKTOYD9crst3l4f8+eVObEIhheu0dlu/d+bsubFnkLer +iVJG+ALlci4SkZx0Vq/odAebPDx7S0oB8dGRveasDqFfDk9MaQRrJDsbgHSo4XW Fq4MnBgslneDEvE2TZqtxD/PXVY2grAEkwFccV+kO4yxExIeE+4elRkO5iYJVgRV igeOuK4kKTliG8oBOhibpQK/iXrHvO1Ids6jHpCwi+VSTXWUGIrFQwq0v7MOYCcC JbKJ0tkW7S0l9Bg5H3u1Ctk7yci9j07DxIuHYFPmtwUwNbq94sgRSYu8G+vEOLIs AsrDSg4k2rBkwFtfZlCP3Y5pN0wJ+g== =Q0r2 -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Jul 2 13:57:49 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DBCD3A0B4A for ; Thu, 2 Jul 2020 13:57:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q_nM2bC6agXJ for ; Thu, 2 Jul 2020 13:57:45 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02D043A0B4B for ; Thu, 2 Jul 2020 13:57:44 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 55DAD389D3; Thu, 2 Jul 2020 16:54:54 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id jnMeipT7IJzY; Thu, 2 Jul 2020 16:54:53 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id F3847389AF; Thu, 2 Jul 2020 16:54:52 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id B7C3E3DE; Thu, 2 Jul 2020 16:57:41 -0400 (EDT) From: Michael Richardson To: "rats\@ietf.org" , Laurence Lundblade In-Reply-To: References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jul 2020 20:57:48 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Laurence Lundblade wrote: > The problem with Endorser is that they produce Endorsements and I thi= nk there are problems with Endorsements: > - In Berlin you told me they don=E2=80=99t have keys in them. So then= how do > keys get into the Verifier? Well, first, I thought we agreed that the arcs above Verifier were out of scope for the architecture. The WG might recharter to include that, but I thought we agreed that the concerns were seperable. HOWEVER... So in some cases the Verifier will be configured entirely by some proprieta= ry mechanism. Those mechanisms could consist of pasting a configuration file full of keys (trust anchors probably), along with Known Good Values. Or, they could consist of a bunch of EATs of a semi-proprietary nature. Semi, because we haven't standardized them yet, but conceptually they are bang-on. Maybe you want to start a personal ID that deals with an architecture for Endorsement? To the extent that I think you want to use EAT for many of things, maybe it would be a good repository of non-Evidence/non-Attestation-Result uses of EAT. =2D-- So, when you say "keys", I think you mostly mean Trust Anchors, right? These would things like Manufacturer IDevID anchors. These would allow a Verifiers to know that is dealing with authentic units from Mfg X, and therefore the Manufacturer X-signed Endorsement that were published somewhere can be applied. > - Endorsements seem to be small signed documents of attributes so the= y=E2=80=99re not so good for: > - Representing a database of millions of keys > - Representing HTTP access to a manufacturers database of known-good/= reference values I don't quite understand this. The database of keys could be a single trust anchor if the keys are all signed in some way. That doesn't have to be PKIX if you (like me) hate tha= t. EAT can be used, CoID, PGP, etc. PGP has replicating keyserver technology that could be applied here, btw. I don't quite understand "Representing HTTP access"... part. I guess this is more than just having a URL. It seems that when/if we come to standardizing the Endorsement arc, that we might need to standardizing a way of accessing the database, even if that is just about describing how a URL fragment can be extended with a firmware version number. We'd need to say how that URL fragment is communicated. I can think of a few ways, some good, some less good. > - One-time physical / ceremonial transfer of a root key Please explain how this would be used. I'm very interested. > - Endorsements seem like a somewhat narrowed, specific way of providi= ng verifier input > - Endorsements imply signing as the security mechanism, which is too = narrow. > Maybe we can find a term other than manufacturer? What I want to avo= id > is the general use of the term Endorsement for the above reasons. Usi= ng > the term Endorsement to me is like using the protocol-specific term E= AT > instead of conceptual term Attestation Evidence. Use of the term > Endorser implies Endorsement, but maybe it is OK if we don=E2=80=99t = use the > term Endorsement. "Terms of Endorsement" <-- staring Shirley, Debra, Jack and Apple.com? =2D- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | IoT architect = [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl7+SkUACgkQgItw+93Q 3WV3VQgAizfqi2Nhm6IljZL7n/QA2nhsUaRA9oufFUTe4NVES+VQJhC0egHTiBU/ nLaFVl2d/t8tQEk53A/h+LBUj7Go1s9Dv7f/pvUbkCcmLc0EAUpO9KGyBONSnwsp tKeRsQogf9drU6cGhoohezizZNEYnw9YLuMz8oovr8WkHVChcUThDw5DsdbPAASW sII+mUEOvtlgK+4HUz2gxckMUGtj1qpxSfrHWr+ldn3n0mkfdI/C1EdPPj8aWGcO 83/7c4tvr6QuJ4YsZD9b8NAmI6QCPzEVJTzqVAVxuz+fnwV+tG3Jf2VApJbr/QOg c2iPtmEgrBlWdseOYw80Z5k7DGaHJA== =KAXm -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Jul 2 17:22:45 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 56D153A0983; Thu, 2 Jul 2020 17:20:36 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: rdd@cert.org, rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.7.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <159373563634.30173.4868751445084571219@ietfa.amsl.com> Date: Thu, 02 Jul 2020 17:20:36 -0700 Archived-At: Subject: [Rats] rats - Requested sessions have been scheduled for IETF 108 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 00:20:48 -0000 Dear Nancy Cam-Winget, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. rats Session 1 (0:50 requested) Tuesday, 28 July 2020, Session II 1300-1350 Room Name: Room 8 size: 8 --------------------------------------------- rats Session 2 (1:40 requested) Wednesday, 29 July 2020, Session I 1100-1240 Room Name: Room 6 size: 6 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/108/sessions/rats.ics Request Information: --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 2 Length of Session(s): 100 Minutes, 50 Minutes Number of Attendees: 60 Conflicts to Avoid: Chair Conflict: secdispatch saag mile acme tls sacm teep suit netconf opsec masque Key Participant Conflict: anima cose dprive People who must be present: Ned Smith Kathleen Moriarty Nancy Cam-Winget Roman Danyliw Resources Requested: Special Requests: --------------------------------------------------------- From nobody Thu Jul 2 23:00:26 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A00F3A052C; Thu, 2 Jul 2020 23:00:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jFBFRtKDg1mz; Thu, 2 Jul 2020 23:00:13 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1ED143A0D12; Thu, 2 Jul 2020 23:00:12 -0700 (PDT) Received: from [172.16.42.112] (p5089ae91.dip0.t-ipconnect.de [80.137.174.145]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 49yk6Q3JsqzyTZ; Fri, 3 Jul 2020 07:29:18 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 615446958.354246-561ce5a163472f83e03dc0abcde6b9d0 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Message-Id: <94B927FA-0F6F-4F82-877E-9C115B045A79@tzi.org> Date: Fri, 3 Jul 2020 07:29:18 +0200 To: suit@ietf.org, teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.80.23.2.2) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF108: FINAL AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 06:00:17 -0000 Here is my usual eclectic condensed agenda based on the FINAL AGENDA for IETF108. Remember that, occasionally, further agenda changes do happen. There has been no change from the DRAFT AGENDA in the Conflicts I noted: LAKE/SUIT (!). ACE/RATS. (I think 6LO/COSE can be ignored.) The only significant change is that LAKE/SUIT/LOOPS has been exchanged with CORE/TLS/TSVWG (Tuesday 1410Z vs. Friday 1100Z). Also, the mysterious HACKATHON has vanished. All times appear to be in UTC, even though nothing says so in the text agenda; https://datatracker.ietf.org/meeting/agenda-utc gives the same times. This time, I have focused on the events in Week 31; please see the original agenda for Week 30 preliminaries. Gr=C3=BC=C3=9Fe, Carsten MONDAY, July 27, 2020 1100-1240 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 2 IRTF pearg Privacy Enhancements and Assessments Research = Group Rm 5 SEC *** teep Trusted Execution Environment Provisioning WG 1300-1350 Session II Rm 2 ART *** cbor Concise Binary Object Representation Maintenance = and Extensions WG Rm 3 INT intarea Internet Area Working Group WG Rm 6 RTG babel Babel routing protocol WG Rm 7 RTG detnet Deterministic Networking WG 1410-1550 Session III Rm 1 ART webtrans WebTransport WG Rm 3 IRTF qirg Quantum Internet Research Group Rm 7 SEC gnap Grant Negotiation and Authorization Protocol WG TUESDAY, July 28, 2020 1100-1240 Session I Rm 1 ART *** asdf A Semantic Definition Format for Data and = Interactions of Things BOF Rm 2 INT 6man IPv6 Maintenance WG Rm 3 IRTF irtfopen IRTF Open Meeting Rm 8 TSV masque Multiplexed Application Substrate over QUIC = Encryption WG 1300-1350 Session II Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG 1410-1550 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 6 SEC tls Transport Layer Security WG Rm 7 TSV tsvwg Transport Area Working Group WG WEDNESDAY, July 29, 2020 1100-1240 Session I Rm 4 RTG bier Bit Indexed Explicit Replication WG Rm 5 SEC *** ace Authentication and Authorization for Constrained = Environments WG Rm 6 SEC *** rats Remote ATtestation ProcedureS WG Rm 7 TSV quic QUIC WG 1300-1350 Session II Rm 1 INT *** 6lo IPv6 over Networks of Resource-constrained Nodes = WG Rm 4 RTG rift Routing In Fat Trees WG Rm 5 SEC *** cose CBOR Object Signing and Encryption WG Rm 6 TSV tsvarea Transport Area Open Meeting 1410-1550 IETF Plenary - Plenary THURSDAY, July 30, 2020 1100-1240 Session I Rm 3 OPS anima Autonomic Networking Integrated Model and = Approach WG Rm 4 RTG raw Reliable and Available Wireless WG Rm 5 SEC secdispatch Security Dispatch WG Rm 6 TSV tsvwg Transport Area Working Group WG 1300-1350 Session II Rm 4 INT *** lpwan IPv6 over Low Power Wide-Area Networks WG Rm 7 SEC saag Security Area Open Meeting 1410-1550 Session III Rm 2 INT add Adaptive DNS Discovery WG Rm 3 INT *** drip Drone Remote ID Protocol WG Rm 6 SEC acme Automated Certificate Management Environment WG FRIDAY, July 31, 2020 1100-1240 Session I Rm 5 SEC *** lake Lightweight Authenticated Key Exchange WG Rm 6 SEC *** suit Software Updates for Internet of Things WG Rm 7 TSV loops Local Optimizations on Path Segments BOF 1300-1350 Session II Rm 3 ART wpack Web Packaging WG Rm 4 INT 6man IPv6 Maintenance WG Rm 6 SEC emu EAP Method Update WG 1410-1550 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 4 IRTF coinrg Computing in the Network Research Group Rm 7 SEC privacypass Privacy Pass WG From nobody Fri Jul 3 02:20:56 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 765323A0B4A for ; Fri, 3 Jul 2020 02:20:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tsGP3lt6; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tsGP3lt6 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 04x7_dZiEcyw for ; Fri, 3 Jul 2020 02:20:52 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10078.outbound.protection.outlook.com [40.107.1.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BE0D3A0B4B for ; Fri, 3 Jul 2020 02:20:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=tsGP3lt6AurlTqLADNblD+UPi7dktrO3nt/lzeYR1r8Lbd4IzFwezI93rYHGwxmeMpx4qjGt/bo/uYrTrTSpQlePzrTLHC+dVTufQ/hMZjsIguv0k+gv/BjSA2VsKDRc90DFeOJ7JkMMhygF2YyPE0E+Ilpn+NWUtfSRCVovmyc= Received: from AM7PR04CA0017.eurprd04.prod.outlook.com (2603:10a6:20b:110::27) by AM5PR0801MB2003.eurprd08.prod.outlook.com (2603:10a6:203:4a::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.21; Fri, 3 Jul 2020 09:20:49 +0000 Received: from AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:110:cafe::84) by AM7PR04CA0017.outlook.office365.com (2603:10a6:20b:110::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23 via Frontend Transport; Fri, 3 Jul 2020 09:20:49 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT038.mail.protection.outlook.com (10.152.17.118) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Fri, 3 Jul 2020 09:20:48 +0000 Received: ("Tessian outbound 8239f48e56bd:v62"); Fri, 03 Jul 2020 09:20:48 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 9a33f7d06c1491cc X-CR-MTA-TID: 64aa7808 Received: from bd18a0b6d839.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 904B8422-9141-40C9-91BA-326512525A44.1; Fri, 03 Jul 2020 09:20:43 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id bd18a0b6d839.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 03 Jul 2020 09:20:43 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jSzozNpfwdAmB+ZOL1MqxkDC1+/WJc7yEU6xxApsMd5+zvpUZM95/HO3jfucm96v/BQaNoDMHQwCVWL/AoiGVohxvkyFyefPveRo1LG/4E4yIG69jXrulo+3in/nuVteXY48EfoNm3N4WrMMjcH6fA+TrDcfFtns+hNVfCR7jQuIdmQ8naDYxlZxYZ2p8dU57Cl0FJ5CMFnMhtLJs36GigLci6X/mob25xd2VNejhzWTHJzt4hMrXH4JxVuSWBYsNxRd68HILGtbEdm7f33jpm6CGU2z4iGTt/hy1iGh39WtH9XQJMpHm/NA1CXCKWkvY76fI63csRHBJQfo3bHI8Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=EgmdOc6ssZ17fqRroTJ894VX8GVSJR6lMPV4e9bgzZdAml/PnCoSt221j782QkNMhkR4l/pJPKDJUN3r+uxmJRUS+wlOyoCWNaeJi9i2srhQF9GUoqyX6gvypiVRN7SfiFkpOkTWvkY8inpdCe9+3mnsBykP1hOuO6Lpby4MFn3H5gQ+f+oTmReXIes7urWzts5qqhZFdisHtA1gOUk9EJ4xP3TINIWVBqizfOvVPk5Qok0YHVL69fl+gEtEsf1vd2IimcqUaQ67XbbgJsONWvGqiagS9M9TnRn9AMKsi5Ftsg3Nm37zVZ1WijM87AxKHuMiaMoWkx9jHh7unq071g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=GwkClJFq4Pnb31bzm7DqUFoF2hAGZB4+k+6RlrEKPAc=; b=tsGP3lt6AurlTqLADNblD+UPi7dktrO3nt/lzeYR1r8Lbd4IzFwezI93rYHGwxmeMpx4qjGt/bo/uYrTrTSpQlePzrTLHC+dVTufQ/hMZjsIguv0k+gv/BjSA2VsKDRc90DFeOJ7JkMMhygF2YyPE0E+Ilpn+NWUtfSRCVovmyc= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM7PR08MB5399.eurprd08.prod.outlook.com (2603:10a6:20b:104::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Fri, 3 Jul 2020 09:20:41 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.028; Fri, 3 Jul 2020 09:20:41 +0000 From: Thomas Fossati To: Michael Richardson , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt Thread-Index: AQHWQNlFdH/OqKSRhkWewqKHNl+chKjVRQwAgB8syQCAAGecAIAA7BAA Date: Fri, 3 Jul 2020 09:20:41 +0000 Message-ID: <771640C9-97FF-4F02-8E09-7D23255CAAE7@arm.com> References: <159198048358.5204.2551532653126853410@ietfa.amsl.com> <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <045cab6d-16d0-d828-50cd-313f1a1affd7@sit.fraunhofer.de> <1640.1593720946@localhost> In-Reply-To: <1640.1593720946@localhost> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [217.140.99.251] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 2a29c512-9151-4b3e-b011-08d81f325fbe x-ms-traffictypediagnostic: AM7PR08MB5399:|AM5PR0801MB2003: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; x-forefront-prvs: 045315E1EE X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 5Ts0JaSgEV0m9TFOjvUQwkfnoOyOzZLuuk6BzaT1lr7ZIqo9y6U6rLV5yWpC2HFGXL9sImTSgrF2wnqQyKtwUXIC5BGHXDzC024rb/ZstXlBrtMatTePXSxoVV/1K/J2DGLMV1Dg58LdD+XACdmH8STsaD50B2CuQQNnf5NelmMyYPrVsfzUo0/+Yc//bwNrjS8BipO0vUiMNAZN8UwqAJwoAGOQQj/p+a/mQ9yzkPaPo4oS0FOlPYYszGWzNTrUzww/7z1LQl98yfho/1OOvxrHKD9HHhbvN/gJjeIJyj/JbtDxCe3JJBhEHqu67sDjpSxtHzw4DLNne9EC92W3Bg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(366004)(39860400002)(346002)(2906002)(15650500001)(86362001)(6486002)(5660300002)(66946007)(83380400001)(8936002)(8676002)(76116006)(66476007)(91956017)(53546011)(6506007)(66446008)(66556008)(64756008)(36756003)(6512007)(186003)(26005)(4326008)(2616005)(316002)(110136005)(33656002)(478600001)(71200400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR08MB5399 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(39860400002)(346002)(136003)(46966005)(70586007)(26005)(2616005)(6506007)(356005)(70206006)(36756003)(110136005)(6486002)(83380400001)(316002)(186003)(82310400002)(81166007)(53546011)(8676002)(36906005)(8936002)(4326008)(478600001)(5660300002)(33656002)(82740400003)(336012)(86362001)(2906002)(15650500001)(6512007)(47076004); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 10b502c5-9888-4db7-4360-08d81f325b74 X-Forefront-PRVS: 045315E1EE X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 5S+b7d4PhPD6q/pyJGkL6y9Y0Zo5zdS1944C4ms5+c6P+NjhTyUf58ezgfOTkL+i9nwhFjtid0iORYRrwScXLqlpA3w4qR6JdJNpj9Vj2sZWoCtyWvSB47RTVofrWI7Iwz58nlrD7P9JQhXG8uBoAR8mzscs24s8M6Eme2NjrI/AA4ka7mN+plyYisFSpdMD9IcT3TCJlXC3uLmXORIR2xk3r2uNG0fTJzxC0MQLI7Pxl8EkldJ2nRWQtq2KV1h+IUkMtUnTjvFQ2wj8wdZTaor/u663i5NqGhFab6d1my9kYnfNjHG4d57MP/vObRjKFOSLpj5vkHtlDzjmm4uMvPF04tOo/z0hHKMEUoE17Ys+tEVApVFEpJatMQIdrkOrNCe6JKI3BKqGYajXYB76Ag== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2020 09:20:48.7463 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2a29c512-9151-4b3e-b011-08d81f325fbe X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT038.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB2003 Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 09:20:55 -0000 SGkgTWljaGFlbCwNCg0KT24gMDIvMDcvMjAyMCwgMjE6MTYsICJNaWNoYWVsIFJpY2hhcmRzb24i IDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KPiBIaSwgdGhhbmsgeW91IGZvciB0aGUg ZHJhZnQuICAoUGxlYXNlIGV4cGVjdCBzb21lIHBlbmRhbnRyeSBvbiBob3cgdG8NCj4gc2F5IHRo aXMgaXMgYSBSRVNUIGJhc2VkIGludGVyZmFjZS4gIEkgZG9uJ3QgdGhpbmsgaXQgbWF0dGVycyB3 aGF0IHlvdQ0KPiB3cml0ZSwgc29tZW9uZSB3aWxsIHNheSB5b3Ugd3JvdGUgaXQgd3JvbmcpDQo+ DQo+IFNvbWUgdGhpbmdzIHRoYXQganVtcGVkIG91dCBhdCBtZToNCj4gPiBzdHJvbmcgYXV0aGVu dGljaXR5Lg0KPg0KPiBJIGRvbid0IGtub3cgd2hhdCB0aGlzIG1lYW5zLiAgSSB0aGluayB0aGF0 IHdlIHdlbnQgdG8gc29tZSBsZW5ndGhzIGluDQo+IHRoZSBhcmNoaXRlY3R1cmUgdG8gc2F5IHRo YXQgd2Ugd2VyZSBldmlkZW5jZSBvZiB0cnVzdHdvcnRoaW5lc3MuICBUaGUNCj4gcGFyYWdyYXBo IHRoYXQgZm9sbG93cywgd2hpY2ggZGVhbHMgd2l0aCBhc3N1cmFuY2UsIHNlZW1zIG11Y2ggYmV0 dGVyLg0KPiBNYXliZSBqdXN0IG9taXQgdGhlIGZpcnN0IHBhcmFncmFwaCA6LSkNCj4NCj4gImFy ZSB0aGUgdGhyZWUgUkFUUyBhY3RvcnMiIDwtIHdlIG5ldmVyIHVzZSAiYWN0b3JzIiBpbiB0aGUN Cj4gYXJjaGl0ZWN0dXJlLiAgU29tZSBzYWlkIHdlIHNob3VsZCwgYnV0IHdlIGRpZG4ndCBnbyB0 aGVyZS4gIFdlIHVzZWQNCj4gInJvbGVzIi4uLiB3aGljaCBJIGFncmVlIGFyZSB0aGluZ3MgdGhh dCBhY3RvcnMgcG9ydHJheS4NCj4NCj4gSSBzdWdnZXN0OiBUaGUgdGhyZWUgUkFUUyByb2xlcyBv ZiB0aGUgYXR0ZXN0ZXIgKEEpLCB0aGUgcmVseWluZyBwYXJ0eQ0KPiAoUlApIGFuZCB0aGUgdmVy aWZpZXIgKFYpIGFyZSBwcm90cmF5ZWQgYnkgdGhyZWUgcHJpbmNpcGFsIGFjdG9ycy4NCj4NCj4g SSBzY2FubmVkIHRocm91Z2ggdGhlIHJlc3Qgb2YgdGhlIGRvY3VtZW50LiAgSSBkaWRuJ3QgY2hl Y2sgeW91ciBtYXRoLA0KPiBhcyBJIHdvdWxkIHJlYWxseSBuZWVkIHRvIGJlIGluIGltcGxlbWVu dGF0aW9uIG1pbmRzZXQgdG8gZG8gdGhhdC4gIEkNCj4gZmVlbCB0aGF0IHRoZXJlIGlzIHBlcmhh cHMgc29tZSB1bmV4cGxhaW5lZC9pbXBsaWNpdCBrbm93bGVkZ2UgYXJvdW5kDQo+IHRoZSBpZj0g dGhhdCBJIG1pZ2h0IG5vdCBoYXZlIHVuZGVyc3Rvb2QgdGhlIGZpcnN0IHRpbWUuDQoNClRoYW5r cyBmb3IgdGhlIGNvbW1lbnRzLCBJJ3ZlIG1hZGUgdGlja2V0cyBmb3IgdGhlbSB3aXRoIGEgLTAx DQptaWxlc3RvbmUuDQoNCj4gSW4gdGhpcyB0aHJlYWQgeW91IG9mZmVyZWQgdG8gZG8gYSB0dXRv cmlhbC93YWxrdGhyb3VnaC4gIEkgd29uJ3Qgc2F5DQo+IG5vIHRvIHRoYXQsIGJ1dCBJIHdhbnQg dG8gc2F5IHRoYXQgaWYgdGhlIGRvY3VtZW50IG5lZWRzIGENCj4gdHV0b3JpYWwvd2Fsa3Rocm91 Z2ggdG8gYmUgdW5kZXJzdG9vZCwgdGhlbiB0aGUgZG9jdW1lbnQgbmVlZHMgc29tZQ0KPiBjaGFu Z2VzLg0KPiBTbywgZG8gdGhhdCB3YWxrdGhyb3VnaCwgYnV0IHdpdGggdGhlIGlkZWEgbm90IG9m IGV4cGxhaW5pbmcNCj4gdGhpbmdzLCBidXQgb2YgZ2V0dGluZyBmZWVkYmFjayBvbiB0aGUgZXhw bGFuYXRpb24gc28gdGhhdCB5b3UgY2FuDQo+IG1ha2UgdGhlIGRvY3VtZW50IGJldHRlci4NCg0K V2Ugd2FudCB0byBzdHJpa2UgYSBiYWxhbmNlIGJldHdlZW4gcmlnb3VyIGFuZCByZWFkYWJpbGl0 eSBhbmQgdGhlDQpzaWduYWwgd2UgYXJlIG5vdCBtYWtpbmcgYSBnb29kIGpvYiBvbiB0aGUgbGF0 dGVyIGlzIGxvdWQgYW5kIGNsZWFyIDopDQoNCkkndmUgbG9va2VkIGludG8gSGVuaydzIFJlZmVy ZW5jZSBJbnRlcmFjdGlvbiBNb2RlbHMgZG9jIGFuZCBpdCBsb29rcw0KbGlrZSB3ZSBjb3VsZCB0 YWtlIGluc3BpcmF0aW9uIGZyb20gdGhhdCBmb3IgcmVzaGFwaW5nIHRoZSBpbnRlcmFjdGlvbg0K ZGlhZ3JhbXMuICBJJ20gZ29pbmcgdG8gZ2l2ZSB0aGF0IGEgc3RhYi4NCg0KY2hlZXJzIQ0KDQoN Cg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBh dHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJ ZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0 aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Fri Jul 3 02:21:04 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A3443A0B63 for ; Fri, 3 Jul 2020 02:21:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=z3sd79K5; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=z3sd79K5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xVrKa85loVCx for ; Fri, 3 Jul 2020 02:21:00 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150080.outbound.protection.outlook.com [40.107.15.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A91023A0B6D for ; Fri, 3 Jul 2020 02:20:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Uxf/AzL2u8leK4At01ClXx3yA+HWZgZkoXViHny2m+E=; b=z3sd79K5b6/6Mvj7XX1Zq7nEVOehE5DQ8OYH7jGbU9a+hXg/gXs40P+Z+4mW4obN3UsphERaVwIGVgUIEjGK8DUxZ3WiERxSXor3ps9wXye9w1B82o8OzkW6soXPnv2ANaVemKWGdki/0n8TaqZHuUwfGgRP6d4+qjOlp7NsxxI= Received: from AM6P194CA0096.EURP194.PROD.OUTLOOK.COM (2603:10a6:209:8f::37) by DB7PR08MB3001.eurprd08.prod.outlook.com (2603:10a6:5:23::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.21; Fri, 3 Jul 2020 09:20:57 +0000 Received: from AM5EUR03FT039.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:8f:cafe::99) by AM6P194CA0096.outlook.office365.com (2603:10a6:209:8f::37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23 via Frontend Transport; Fri, 3 Jul 2020 09:20:57 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT039.mail.protection.outlook.com (10.152.17.185) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Fri, 3 Jul 2020 09:20:57 +0000 Received: ("Tessian outbound f7489b7e84a7:v62"); Fri, 03 Jul 2020 09:20:57 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 69989eb07482ac9a X-CR-MTA-TID: 64aa7808 Received: from 0b8e139c7b36.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id E68CA66E-7700-4642-9719-00459E58F876.1; Fri, 03 Jul 2020 09:20:51 +0000 Received: from EUR01-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 0b8e139c7b36.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 03 Jul 2020 09:20:51 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lkv8w2ifFmirAQL+AcifNW9juS18uqEGbDEjyvFBqIGVJFgsghMgAt6xYot+hi+6sKHEwM+cHxOy20girfFbBGHOYAWIvoRO4UW8SuN3gPdR+ju2ob7S6/mImJj2g5WTOM/lBz95leb8hnHRvrURrau18NcqfsSfMUJ6bVfqE+mh9k984asnEStQlBTJMTDIs6HLeTJKdJes3wHf0DuBaShmNYovSFo3n0SIqQW522gTc1gUGErMoui1tQzVQWUiyuEsDOQN0QdNir+3THEkBMaYmH/OuDUnQH+33Lxjfs2VVRIShYJW0qQhI/Uslj2+0qWq5aiEM4qCouFlYzxdyA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Uxf/AzL2u8leK4At01ClXx3yA+HWZgZkoXViHny2m+E=; b=heit2LrJGA7fTQtYnh5xEVNc1Qm+/2bZBnYgx4oRYDFRqSORzEtP8RlwDD6D2SEvy3l7yI/oy0cPWJ7OEIBP9PSznaRLKfuChhVG7qqZnh//f3rfNf0zyUo6EQ6USIGsgejOt3oaLMvVSsUW49kCzefBy9gF/GUpuU68Avw8mVa3GmohGjhg8uWSZSzvSxFaRJZOiXjj3/5PfGdZcqjl4vwiSHr/lSz9HM19z/vqzqqgdIB+svdPMGBvdxPA2foqDKwju7kkpM8Z1BuXfMjm2vxZyHhEWK4BRuOHxv1ZXJ956EQGg9k8q6rBiPZwWGzP6Gy/QagEonO2s74aV42Dbg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Uxf/AzL2u8leK4At01ClXx3yA+HWZgZkoXViHny2m+E=; b=z3sd79K5b6/6Mvj7XX1Zq7nEVOehE5DQ8OYH7jGbU9a+hXg/gXs40P+Z+4mW4obN3UsphERaVwIGVgUIEjGK8DUxZ3WiERxSXor3ps9wXye9w1B82o8OzkW6soXPnv2ANaVemKWGdki/0n8TaqZHuUwfGgRP6d4+qjOlp7NsxxI= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM7PR08MB5399.eurprd08.prod.outlook.com (2603:10a6:20b:104::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Fri, 3 Jul 2020 09:20:50 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.028; Fri, 3 Jul 2020 09:20:50 +0000 From: Thomas Fossati To: Michael Richardson , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] should Evidence containers be explicit about Personally Identiable Information? Thread-Index: AQHWT0qg16qdO1UkpEOwcIPLbGmPlKj1qKoA Date: Fri, 3 Jul 2020 09:20:50 +0000 Message-ID: <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> References: <28098.1593568476@localhost> In-Reply-To: <28098.1593568476@localhost> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [217.140.99.251] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: bad26627-1cf9-4b00-a702-08d81f3264b0 x-ms-traffictypediagnostic: AM7PR08MB5399:|DB7PR08MB3001: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:8882;OLM:9508; x-forefront-prvs: 045315E1EE X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: FLtxb7KTzFq9nuEIZJb0anth3t4OQehnkrOPkB5YSH9PBU8/k2MzcWLKnYHzoZplZw2VyqJ0HGAm2sRz7Ftru1hZYMiNApLFe4oVYbR93bUbGz2j/jFfrHw2JVXdb9gQQjUcaOcKpys0N8YRRTYOdtLxII8JdOmxRLKhwVJKY3bJi9WJwS0lpqONIHFP5F0CvzPnuO488d4FfnaIEOZ2rVCLHIErWuJQhLbst5NDq0RlVuSVBhUm7wSon1s29GviSIn9p0GwsWvj1GZiMsXbGtS9g+MjRKn+fSetc+HwSX+/jrJga4WjlaJatpe4zdSxlZKkgdQ3K+/ZBr4GDpEVvQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(366004)(39860400002)(346002)(2906002)(86362001)(6486002)(5660300002)(66946007)(83380400001)(8936002)(8676002)(76116006)(66476007)(91956017)(53546011)(6506007)(66446008)(66556008)(64756008)(36756003)(6512007)(186003)(26005)(4326008)(2616005)(316002)(110136005)(33656002)(478600001)(71200400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: text/plain; charset="utf-8" Content-ID: <6CE1884255724D4CB0A13306D4F58C8B@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR08MB5399 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT039.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(346002)(376002)(39860400002)(136003)(46966005)(26005)(86362001)(186003)(33656002)(6486002)(70206006)(336012)(356005)(8676002)(82310400002)(83380400001)(47076004)(81166007)(82740400003)(8936002)(36906005)(316002)(5660300002)(2616005)(6512007)(4326008)(53546011)(6506007)(2906002)(70586007)(478600001)(36756003)(110136005); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 59094dd2-68b8-4b4c-77ac-08d81f3260b5 X-Forefront-PRVS: 045315E1EE X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: /okGPaTnI28EMOsOrzbHDaDD1lNrCTWrJKguQfoLgYZ5859J3hwvP5jRAJHDIQ7JklJ+86P5F4xiRyVafT0hZinMKg9uUl/zFuueGo2AhaDHQtoDuV1mENHCw4yNfQxMnPXSXj7cyUOQO129uPpzUN//2SpXNP8zGOyLeG3kpvT/Ut9YqL2TQtzRsdnTwmetVMO1frBWM860oL6jFs6gMhrHCRBdCe+q/iTgm+RuOSnpHXqf+lbMQoWMrPf+9ySIgRZ6eKdn0RerYUXe4G4QR+eQ9tWXFz/OYWH7NuFafQQDWvpiy2kGC5mCsoyf3zYcLSdXH1ZTPWHe7+nbgQIfG/cwnogutLQTFFA1Hd4upXvi9MaIfnDK+GEGBsoHBUc+60ir1KZQp7RJwNwZMAWtig== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2020 09:20:57.0460 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: bad26627-1cf9-4b00-a702-08d81f3264b0 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT039.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3001 Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 09:21:03 -0000 SGkgTWljaGFlbCwNCg0KVGhhbmtzIGZvciByYWlzaW5nIGFuZCBhcnRpY3VsYXRpbmcgdGhpcyBw b2ludC4NCg0KT24gMDEvMDcvMjAyMCwgMDI6NTQsICJNaWNoYWVsIFJpY2hhcmRzb24iIDxtY3Ir aWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KPiBJIGhhZCBhc2tlZCBpbiBteSBhc2lkZSwgaWYg dGhlICpBUkNISVRFQ1RVUkUqIGRvY3VtZW50IHNob3VsZCBjcmVhdGUNCj4gYSByZXF1aXJlbWVu dCBvbiBFdmlkZW5jZSAoc3VjaCBhcyBFQVQpIHRoYXQgaXQgc2hvdWxkICpleHBsaWNpdGx5Kg0K PiBmbGFnIHdoZW4gaXQgY29udGFpbnMgUElJLg0KPg0KPiBbLi4uXQ0KPg0KPiBTbyBwYXJ0IG9m IG15IHF1ZXN0aW9uIHdhcyBzaG91bGQgd2UgZGViYXRlIHRoaXMgbm93LCBhbmQgbWFrZSB0aGlz IGFuDQo+IGFyY2hpdGVjdHVyYWwgcmVxdWlyZW1lbnQgZm9yIGFsbCBjb250YWluZXJzPw0KDQpQ ZXJzb25hbGx5LCBJIGFtIG5vdCBjb252aW5jZWQgdGhhdCBhbiBpbi1iYW5kIHBpaSBmbGFnIGlz IG5lZWRlZC4NCg0KT24gdGhlIEF0dGVzdGVyIHNpZGUsIHRoZSBwcml2YWN5IHByb2JsZW0gY2Fu IGJlIGFkZHJlc3NlZCBieSBhbg0KYXR0ZXN0YXRpb24gQVBJIHRoYXQgYWxsb3dzIHRoZSBjYWxs ZXIgdG8gc2VsZWN0aXZlbHkgdHVybiBvZmYgY2xhaW1zDQp0aGF0IGFyZSBQSUkgLS0gZWl0aGVy IHdpdGggcGVyLWNsYWltIHN3aXRjaGVzLCBvciBieSBwcmVzZW50aW5nDQpwcmUtY2FubmVkIFBJ SS1yZXZlYWxpbmcgYW5kIFBJSS1oaWRpbmcgaW50ZXJmYWNlcyB0byB0aGUgRXZpZGVuY2UNCmdl bmVyYXRpb24gc2VydmljZS4gV2UgZXhwZWN0IHRoZSBhdHRlc3RpbmcgZW5kcG9pbnQgdG8gbWFr ZSB0aGUgcmlnaHQNCmRlY2lzaW9uIGFib3V0IHdoYXQgY2FuIGJlIGhpZGRlbiBhbmQgd2hhdCBu ZWVkcyB0byBiZSByZXZlYWxlZA0KZGVwZW5kaW5nIG9uIGNvbnRleHQuDQoNCk9uIHRoZSBWZXJp ZmllciBzaWRlLCBJJ2QgZXhwZWN0IHRoYXQgdGhlIGxvZy9hdWRpdCBhbm9ueW1pc2F0aW9uIGFu ZA0KcmV0ZW50aW9uIHBvbGljaWVzIGZvciBFdmlkZW5jZSBhcmUgYW4gaW50ZWdyYWwgcGFydCBv ZiB0aGUgc2VydmljZQ0KY29uZmlndXJhdGlvbi4gIFNvLCBubyBuZWVkIGZvciBhbiBpbi1iYW5k IHNpZ25hbCBhYm91dCB3aGF0IGlzIHRvIGJlDQpjb25zaWRlcmVkIFBJSSBzaW5jZSB0aGUgVmVy aWZpZXIgaXMgZ29pbmcgdG8gYmUgbWFkZSBhd2FyZSBvZiBpdCBieQ0Kc29tZSBvdXQtb2YtYmFu ZCBtZWFucy4NCg0KVGhhdCBsZWF2ZXMgdGhlIFJQLCB3aGljaCBJJ20gbm90IGZ1bGx5IHN1cmUg YWJvdXQuICBIb3dldmVyLCBteSBndXQNCmZlZWxpbmcgaXMgdGhhdCB0aGUgQXR0ZXN0ZXIgd2ls bCBoYXZlIHRvIHRydXN0IHRoZSBSUCB0byBkbyB0aGUgcmlnaHQNCnRoaW5nIHNpbmNlIG5vIGlu LWJhbmQgcGlpIGZsYWcgd2lsbCBldmVyIGJlIGFibGUgdG8gcmVzdHJpY3Qgd2hhdCBhDQptYWxp Y2lvdXMgUlAgY2FuIGRvIHdpdGggdGhlIG9idGFpbmVkIFBJSS4NCg0KQW0gSSBtaXNzaW5nIGFu eXRoaW5nPw0KDQpjaGVlcnMsIHQNCg0KUFM6IE1heWJlIHRoZXJlIGlzIGEgcmVxdWlyZW1lbnQg Zm9yIEVBVCBwcm9maWxlcyB0byBzcGVjaWZ5IGluIHRoZWlyDQpwcml2YWN5IGNvbnNpZGVyYXRp b25zIHdoYXQgY2xhaW1zIGFyZSBQSUkgYW5kIHdoYXQgaXMgdGhlIGV4cGVjdGVkDQp0cmVhdG1l bnQgYnkgYWN0b3JzIGluIHRoZSBhdHRlc3RhdGlvbiBjaGFpbi4gIFRoaXMgaXMgRUFUJ3Mgam9i LCBub3QgYXQNCnRoZSBhcmNoaXRlY3R1cmUgZG9jIGxldmVsIHRob3VnaC4NCg0KSU1QT1JUQU5U IE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBh cmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5v dCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRp YXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNv biwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRp b24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Fri Jul 3 02:29:15 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14E513A0B6B for ; Fri, 3 Jul 2020 02:29:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=TvR1jBJT; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=TvR1jBJT Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jLLIOYTmDY2M for ; Fri, 3 Jul 2020 02:29:09 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00052.outbound.protection.outlook.com [40.107.0.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EE1FD3A0044 for ; Fri, 3 Jul 2020 02:29:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3i/Pa7VSXNI8p1RoR2E6tfHYYsRWbIkVdqdKVn3pWgg=; b=TvR1jBJT2oHq8jcpm4p/Ucew2YoV5SQutxTGlZGicM2UTyATKYSTMQ20b9gVCHwwnn7OZBHdT1kv2OkkXmdx/ibblnq2tZNMi5mdGgTeGLR6hrW8Q5on5pv6E1WtaE1eWMXs/tPsm2mIIoO2HHrmsGq4a/EyVYl+WJhDVJASbZY= Received: from DB6PR07CA0009.eurprd07.prod.outlook.com (2603:10a6:6:2d::19) by AM5PR0801MB2098.eurprd08.prod.outlook.com (2603:10a6:203:4a::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.22; Fri, 3 Jul 2020 09:29:05 +0000 Received: from DB5EUR03FT053.eop-EUR03.prod.protection.outlook.com (2603:10a6:6:2d:cafe::9a) by DB6PR07CA0009.outlook.office365.com (2603:10a6:6:2d::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.15 via Frontend Transport; Fri, 3 Jul 2020 09:29:05 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT053.mail.protection.outlook.com (10.152.21.119) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Fri, 3 Jul 2020 09:29:05 +0000 Received: ("Tessian outbound 2dd9eeca983c:v62"); Fri, 03 Jul 2020 09:29:05 +0000 X-CR-MTA-TID: 64aa7808 Received: from bfb80a827fe7.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id C2D448B6-E7B6-4900-89B3-EDD08C2E47A3.1; Fri, 03 Jul 2020 09:29:00 +0000 Received: from EUR04-DB3-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id bfb80a827fe7.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 03 Jul 2020 09:29:00 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KBErt9sNfZMYD2hJG8JJXWw0yGs5dNCTEziIfiqnUAl+CYD53qLcFXvNJDjgIfHDej7gmqZRGZd4W4fGgwNj3Q2rxre69Q1YtLBTHxA5+2/1ADbJLuyshocepIX8TDpsiS0V+lt3Jfq5GoO04f6zJqMRppyYHfxYGnm+MczXNsZRY1aZSB+fDirXp5RIddfZcz4QT4VgRjUTV74GooTlVMH6fuhqQGntBw0swltTg/lBZGM1lpBgsVNK3dXPbL9Xe/j7zXB0v+MPeuTNQaAr96NIb2G0qIzl0AjHlj5fpKWq/i7i6lxlirNrRSCcAQMS50YT33ZvqbUFUkFH31bztA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3i/Pa7VSXNI8p1RoR2E6tfHYYsRWbIkVdqdKVn3pWgg=; b=HylEFUbnlDAlMtRy8pcDsRZBCPkt994ohRdqrFOq3NPs1DuFTsy8a0E1B/LgmR4+si8nDyl1Bq7zC4wqMizq3D2K9rG+faHefoHR/vkaTDT6di2fGr1Rr4uMcdZbenBFm84Nwj3KcbjN2oID4BivMecKhs3M4ck/Lu5RzyHGxNDCK4uVWSVwk2NArK4zz8SlqwMtsjcEzlCK73TAxUvm8l4c8xqFYIYKMOZXlx2A/heDJlh6hsPq7XOgq/8hoYTbWj8rbZM4c583q0bEi1/ThLUDetlp9XRB60Hx0IhRnf6y32rN86FJE/2Ipey1hiE+IyedA6G7O0HT5TVJ0d0QPw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3i/Pa7VSXNI8p1RoR2E6tfHYYsRWbIkVdqdKVn3pWgg=; b=TvR1jBJT2oHq8jcpm4p/Ucew2YoV5SQutxTGlZGicM2UTyATKYSTMQ20b9gVCHwwnn7OZBHdT1kv2OkkXmdx/ibblnq2tZNMi5mdGgTeGLR6hrW8Q5on5pv6E1WtaE1eWMXs/tPsm2mIIoO2HHrmsGq4a/EyVYl+WJhDVJASbZY= Received: from AM6PR08MB3429.eurprd08.prod.outlook.com (2603:10a6:20b:49::19) by AM6PR08MB4581.eurprd08.prod.outlook.com (2603:10a6:20b:83::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.20; Fri, 3 Jul 2020 09:28:58 +0000 Received: from AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::541a:8b7c:8de1:8989]) by AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::541a:8b7c:8de1:8989%3]) with mapi id 15.20.3131.036; Fri, 3 Jul 2020 09:28:58 +0000 From: Simon Frost To: Laurence Lundblade , Henk Birkholz CC: Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Verifier Input instead of Endorsement? Thread-Index: AQHWUJmPF/FK/ZGSC0er53SjFmxYhqj1i/PA Date: Fri, 3 Jul 2020 09:28:58 +0000 Message-ID: References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: db0f57f8-96fa-4d62-8b60-a24b49eafce1.0 x-checkrecipientchecked: true Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [212.69.61.73] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 5dfb4836-5f57-48a2-0ba4-08d81f3387d3 x-ms-traffictypediagnostic: AM6PR08MB4581:|AM5PR0801MB2098: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:3044;OLM:4714; x-forefront-prvs: 045315E1EE X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: so48VU8jIe9diYSO5MnxLxbeqIedTkb8Roa7NJAw4MXWXiG9owd7BBiQpBqtjvVgnNfv2yubaCvLWU8lCyVX5vHWYlRuXfOPDqftyZCTnEino7fJbCSy62i0V6PfYG5BcIg4kjvBr4EWxABhTRI7n0hooL+XBAEFU2IgGntJOT1opJdW7xXi1Ld2n8xS6gbpLnvkeGWFGq+jQt4MtE9IL4zaEc9WjZ9Gx7vE4p4epXxzaCAbf97WWMoWYWEz46heNRuABuYunFAbLlUJH6Rkn054ti70+XURMp9sKJaLOvoascBc5wce8VS1MZ/H6GGnEEsgP/CAukPgrwblElXXWC9dnAq21piMzfxMjdW4w2zOCU0YtRqlGdrlFq5xywL956KQkrqguueZKwj7LHM+OQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3429.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(136003)(376002)(396003)(366004)(39860400002)(53546011)(9686003)(83380400001)(166002)(45080400002)(478600001)(55016002)(86362001)(8676002)(8936002)(54906003)(316002)(33656002)(110136005)(966005)(7696005)(30864003)(2906002)(186003)(6506007)(4326008)(26005)(71200400001)(52536014)(76116006)(66476007)(66556008)(66446008)(64756008)(66946007)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: IvBb+C0Ajhf+UAcapV4E/GjlByy32oNydhBgMYFviHJR48MPpYiM4OWZ1iChArX9+maW/wzyobWm6CaHrA6lVGkJnvCi9Rvx/t86m+NoCE6IkuJK9p/YdWqN41T/P75ZGLLszjFYSNAAKqpyeo0uWgE0Nay0+/ZMIK0H1yQwXn0cMOZ/VkhWasgoIcf1u4BqjU2yDEKzIwOzgOPSYpARxOJKzOnXllXHRZS6FIpePCsy3ay9sOpSAxlqMu+++BbP9O/e4hZevrJ+ru30DEERvUBMJVyvmDh7Nt48HKio3usDdpFaiMrkbox40lHWCzqUwmIYzA1GaXjGA/ih3tZvdDfb7TnCDw6+xt7/prVue8iDfNgUlTgqE+MR6AJTawr1WVh/ieH1qrRsE/buNjMazKR8dG4DKtqJqdLvD51KrWqNtW/GHaqzvEWB+P+bU/beGDbFN24uV7LruRlQOTmk1hROWqjJ4DJNss1HbsLO0ac= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM6PR08MB34297526F7AC5A7EEC988A37EF6A0AM6PR08MB3429eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4581 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT053.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(396003)(136003)(376002)(46966005)(2906002)(83380400001)(5660300002)(30864003)(52536014)(186003)(81166007)(82310400002)(336012)(166002)(86362001)(356005)(26005)(70586007)(4326008)(70206006)(478600001)(6506007)(55016002)(33656002)(9686003)(82740400003)(110136005)(47076004)(53546011)(54906003)(8676002)(45080400002)(966005)(33964004)(8936002)(7696005)(316002)(579004); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 0eae0f75-0ed5-4d1d-97eb-08d81f3383bb X-Forefront-PRVS: 045315E1EE X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: cTghogHHMTSCZLk+TiwGCCbADoZDs9/3Pjqg9pkQsov/XJT6wqt9LPijpK3Za5gw4pr1knvRfbiOjuNFXwI+u6aBukwNB4IXMYwyADZfyl5VmB0Zsj70FruJAU4O0eZYbuhNEEfXm+y1yUvgAdTUga7teuJEpgu8+nShu9abUG8bvo0lM3IfEgkp81opqtXt5ft/hJQ/UaDtVy/D87HVU1kODRMNG7FKLNF7QUsxL4sRvYvCsnnaCnlcKuEnbmfgM622qt4wBDMKdDUpG/cJhN/iAOJrZUuFKXDjQ5CQkkJKoTo13UuANL4L3lGiEVJwcwYGJDnnELZoySyQyAdT+VGeVOmTQnJMe+mMNlUFy1w0btrpADYuLUFUqK0DSJ99Uy2hMFsT7WHAXkT4jBtlfFVUWSnFeRCpWxWBDoKP93WBI1x51NBiTR/Ak1uWM7Z0cqBk2oZEI0BlTamPtR5D4rp3wvRlS6sgfEVr6Q9B4J4= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2020 09:29:05.5383 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 5dfb4836-5f57-48a2-0ba4-08d81f3387d3 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT053.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB2098 Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 09:29:13 -0000 --_000_AM6PR08MB34297526F7AC5A7EEC988A37EF6A0AM6PR08MB3429eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmXZlIGp1c3QgdHJpZWQgdG8gY2F0Y2ggdXAgb24gdGhlIHRoaW5raW5nIG9uIHRoaXMgdmlh IHRoaXMgdGhyZWFkIGFuZCBnaXRodWIjOTQgYW5kIHJlYWxpc2UgdGhhdCB0aGUgY29udmVyc2F0 aW9uIGhhcyBiZWNvbWUgaGlnaGx5IGRldGFpbGVkIGFuZCB0aGF0IHNvbWUgdmVyeSBwcmVjaXNl IGRlZmluaXRpb25zIGFyZSBlbWVyZ2luZyBmb3IgY29uY2VwdHMgdGhhdCBvcmlnaW5hbGx5IHdl cmUgcXVpdGUgZ2VuZXJhbCAoZS5nLiBlbmRvcnNlbWVudCkuIFBlcmhhcHMgdGhlcmXigJlzIGEg cmlzayB0aGF0IHRoZSBhcmNoaXRlY3R1cmUgbWF5IGJlIG92ZXJseSBjb25zdHJhaW5pbmcgYXMg YSByZXN1bHQuDQoNClRyeWluZyB0byBhdm9pZCB1c2luZyBhbnkgdGVybSB0aGF0IG1heSBub3cg YmUgb3ZlcmxvYWRlZOKApg0KSXQgc2VlbXMgdGhhdCB0aGUgaW1wb3J0YW50IGluZm9ybWF0aW9u IHRvIGNhcHR1cmUgaXMgdGhhdCB0aGUgVmVyaWZpZXIgaXMgYSBtZWFucyBvZiBwcm92aWRpbmcg dHJhbnNpdGl2ZSB0cnVzdCBiZXR3ZWVuIHRoZSByZWx5aW5nIHBhcnR5IGFuZCBhIHBvdGVudGlh bGx5IGNvbXBsZXggU3VwcGx5IENoYWluIGZyb20gd2hpY2ggdGhlIGF0dGVzdGluZyBlbmRwb2lu dCBvcmlnaW5hdGVkLiBUaGUgUlAgdG8gVmVyaWZpZXIgcmVsYXRpb25zaGlwIG11c3QgYmUgc2Vj dXJhYmxlIGFuZCB0cnVzdHdvcnRoeSBpbiBzb21lIGFjaGlldmFibGUgd2F5IHN1Y2ggdGhhdCBh biBSUCBjYW4gdHJ1c3QgdGhlIGF0dGVzdGF0aW9uIHJlc3VsdHMgcmVjZWl2ZWQuIFNpbWlsYXJs eSB0aGF0IGNyZWF0ZXMgYW4gZXhwZWN0YXRpb24gdGhhdCB0aGUgVmVyaWZpZXIgaGFzIGVzdGFi bGlzaGVkIHNlY3VyYWJsZSAmIHRydXN0d29ydGh5IHJlbGF0aW9uc2hpcHMgd2l0aCB0aGUgc3Vw cGx5IGNoYWluIGluIG9yZGVyIHRvIHJlY2VpdmUgYXBwcm9wcmlhdGUgcHJvb2ZzIC8gdGVzdGlt b25pZXMgb2YgaXRlbXMgdGhhdCB0aGUgVmVyaWZpZXIgY2FuIGlkZW50aWZ5IHdpdGhpbiB0aGUg YXR0ZXN0YXRpb24gZXZpZGVuY2UuIFRoZSBWZXJpZmllciB0byBTdXBwbHkgQ2hhaW4gcmVsYXRp b25zaGlwcyBhcmVu4oCZdCBqdXN0IHRlY2huaWNhbCwgdGhleSByZXF1aXJlIGNvbnRyYWN0dWFs IHJlbGF0aW9uc2hpcHMgYXMgd2VsbCB3aGljaCBjYW4gYnJpbmcgYSBzdHJvbmcgaW5mbHVlbmNl IGludG8gdGhlIGRldGFpbHMgb2YgaG93IHRoZSBpbmZvcm1hdGlvbiBnZXRzIHRvIHRoZSBWZXJp Zmllci4gIElmIHdlIGhhdmUgdGhlIHJlbGF0aW9uc2hpcHMgc2tldGNoZWQgb3V0IGFuZCBhbiBl eHBsb3JhdGlvbiBvZiB0aGUgdHlwZXMgb2YgaW5mb3JtYXRpb24gdGhhdCBtYXkgYmUgcmVxdWly ZWQsIGlzIGl0IG5lY2Vzc2FyeSB0byBnbyBpbnRvIGZ1cnRoZXIgZGV0YWlsPw0KDQpUaGFua3MN ClNpbW9uDQoNCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29t Pg0KU2VudDogMDIgSnVseSAyMDIwIDE4OjUyDQpUbzogSGVuayBCaXJraG9seiA8aGVuay5iaXJr aG9sekBzaXQuZnJhdW5ob2Zlci5kZT4NCkNjOiBEYXZlIFRoYWxlciA8ZHRoYWxlcj00MG1pY3Jv c29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+OyByYXRzQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW1Jh dHNdIFZlcmlmaWVyIElucHV0IGluc3RlYWQgb2YgRW5kb3JzZW1lbnQ/DQoNCg0KT24gSnVsIDIs IDIwMjAsIGF0IDY6MzEgQU0sIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVu aG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+PiB3cm90ZToN Cg0KSGkgTGF1cmVuY2UsDQoNCndoaWxlIEkgdGhpbmsgdGhhdCBJIHVuZGVyc3RhbmQgd2hlcmUg eW91IGFyZSBjb21pbmcgZnJvbSBoZXJlLCBJIGhhdmUgdG8gc2F5IHRoYXQgSSBhbHNvIHRoaW5r IHRoYXQ6DQoNCiogIm1hbnVmYWN0dXJlcihzKSIgaXMgYSB0b28gYXJiaXRyYXJpbHkgcmVzdHJp Y3RpbmcgdGVybSwgd2hpY2ggaXMgd2h5IHdlIGFncmVlZCBvbiBlbmRvcnNlcg0KDQpUaGUgcHJv YmxlbSB3aXRoIEVuZG9yc2VyIGlzIHRoYXQgdGhleSBwcm9kdWNlIEVuZG9yc2VtZW50cyBhbmQg SSB0aGluayB0aGVyZSBhcmUgcHJvYmxlbXMgd2l0aCBFbmRvcnNlbWVudHM6DQogLSBJbiBCZXJs aW4geW91IHRvbGQgbWUgdGhleSBkb27igJl0IGhhdmUga2V5cyBpbiB0aGVtLiBTbyB0aGVuIGhv dyBkbyBrZXlzIGdldCBpbnRvIHRoZSBWZXJpZmllcj8NCiAtIEVuZG9yc2VtZW50cyBzZWVtIHRv IGJlIHNtYWxsIHNpZ25lZCBkb2N1bWVudHMgb2YgYXR0cmlidXRlcyBzbyB0aGV54oCZcmUgbm90 IHNvIGdvb2QgZm9yOg0KICAgICAtIFJlcHJlc2VudGluZyBhIGRhdGFiYXNlIG9mIG1pbGxpb25z IG9mIGtleXMNCiAgICAgLSBSZXByZXNlbnRpbmcgSFRUUCBhY2Nlc3MgdG8gYSBtYW51ZmFjdHVy ZXJzIGRhdGFiYXNlIG9mIGtub3duLWdvb2QvcmVmZXJlbmNlIHZhbHVlcw0KICAgICAtIE9uZS10 aW1lIHBoeXNpY2FsIC8gY2VyZW1vbmlhbCB0cmFuc2ZlciBvZiBhIHJvb3Qga2V5DQotIEVuZG9y c2VtZW50cyBzZWVtIGxpa2UgYSBzb21ld2hhdCBuYXJyb3dlZCwgc3BlY2lmaWMgd2F5IG9mIHBy b3ZpZGluZyB2ZXJpZmllciBpbnB1dA0KLSBFbmRvcnNlbWVudHMgaW1wbHkgc2lnbmluZyBhcyB0 aGUgc2VjdXJpdHkgbWVjaGFuaXNtLCB3aGljaCBpcyB0b28gbmFycm93Lg0KDQpNYXliZSB3ZSBj YW4gZmluZCBhIHRlcm0gb3RoZXIgdGhhbiBtYW51ZmFjdHVyZXI/ICBXaGF0IEkgd2FudCB0byBh dm9pZCBpcyB0aGUgZ2VuZXJhbCB1c2Ugb2YgdGhlIHRlcm0gRW5kb3JzZW1lbnQgZm9yIHRoZSBh Ym92ZSByZWFzb25zLiBVc2luZyB0aGUgdGVybSBFbmRvcnNlbWVudCB0byBtZSBpcyBsaWtlIHVz aW5nIHRoZSBwcm90b2NvbC1zcGVjaWZpYyB0ZXJtIEVBVCBpbnN0ZWFkIG9mIGNvbmNlcHR1YWwg dGVybSBBdHRlc3RhdGlvbiBFdmlkZW5jZS4gVXNlIG9mIHRoZSB0ZXJtIEVuZG9yc2VyIGltcGxp ZXMgRW5kb3JzZW1lbnQsIGJ1dCBtYXliZSBpdCBpcyBPSyBpZiB3ZSBkb27igJl0IHVzZSB0aGUg dGVybSBFbmRvcnNlbWVudC4NCg0KDQoqIGV2ZXJ5IGFycm93IGlzIG9mIGNvdXJzZSAiaW5wdXQv b3V0cHV0IiwgYnV0IHdlIGFyZSBub3QgY2FsbGluZyBldmlkZW5jZSAiQXR0ZXN0ZXIgT3V0cHV0 Ii4gU28sIFZlcmlmaWVyIElucHV0IGlzIGluIGNvbnRyYXN0IGEgdG9vIGFtYmlndW91cyBjYXRl Z29yeSAoaXQgZG9lcyBub3QgYWRkIGFueSBzZW1hbnRpY3MgdG8gdGhlIGFycm93KQ0KDQpNYXli ZSB0aGUgbm9uLXNwZWNpZmljaXR5IG9mIOKAnFZlcmlmaWVyIElucHV04oCdIHNlZW1zIHVzZWZ1 bD8gSXQgYWxsb3dzIHRoZSBsaXN0IG9mIGZvdXIgKGtleXMsIHJlZiB2YWx1ZXMsIHN0YXRpYyBj bGFpbXMsIHBvbGljeSkgdG8gYmUgdXNlZCBhbmQgZm9yIHRoZW0gdG8gYmUgdmFyaWFibGUuIEl0 IGlzIGp1c3QgYSBncm91cGluZy4NCg0KTWF5YmUgd2UgY2FuIGZpbmQgYSBiZXR0ZXIgdGVybT8g SGVyZeKAmXMgYSBmZXc6DQogICBWZXJpZmllciBDcml0ZXJpYQ0KICAgVmVyaWZpZXIgRGF0YQ0K ICAgQXR0ZXN0ZXIgVmVyaWZpY2F0aW9uIENyaXRlcmlhDQogICBBdHRlc3RlciBUcnVzdCBNYXRl cmlhbHMNCg0KDQoNCiogdGhlIGl0ZW1pemVkIGxpc3QgdGhhdCBzdGFydHMgd2l0aCBrZXkgbWF0 ZXJpYWwgcHJvdmlkZXMgYSB2ZXJ5IGludHVpdGl2ZSBleGFtcGxlIGFuZCBtYXliZSB3ZSBjb3Vs ZCB1c2UgdGhhdCBraW5kIG9mIGxpc3QgYXMgYSBtb3JlIHByb21pbmVudCBleGFtcGxlIGluIHRo ZSBhcmNoIEktRA0KDQpJ4oCZZCBwcmVmZXIgdGhlIGxpc3Qgb2YgZm91ciB0byBiZSBleHBsaWNp dCBhcmNoaXRlY3R1cmUsIG5vdCBqdXN0IGFuIGV4YW1wbGUuDQoNCg0KDQpUaGUgcXVlc3Rpb24s IGlmIHJlZmVyZW5jZSB2YWx1ZXMgYXJlIGVuZG9yc2VtZW50cyBvciBhcHByYWlzYWwgcG9saWNp ZXMgb3IgYSB0aGlyZCBpdGVtIGlzLi4uIHByb2JhYmx5IG9rYXkgYW5kIEkgYW0gaW50ZXJlc3Rl ZCBpbiBhbiBhbnN3ZXIgLSBidXQgdGhhdCBpcyBhIGRldGFpbCwgSSB0aGluay4gQXMgbG9uZyBh cyB0aGV5IGFyZSBhbHNvIG1lbnRpb25lZCwgSSBjYW4gZm9sbG93IGFsbCB0aHJlZSBsaW5lcyBv ZiB0aG91Z2h0Lg0KDQpXZSBzaG91bGQgYXNzdW1lIG91ciBhdWRpZW5jZSBrbm93cyBsaXR0bGUg dG8gbm90aGluZyBhYm91dCBUQ0cgd29yayAobGlrZSBtZSkgYW5kIGxpdHRsZSBhYm91dCBhdHRl c3RhdGlvbiwgc28gSeKAmWQgcHJlZmVyIHRoZXkgbm90IGJlIGRldGFpbHMsIGJ1dCByYXRoZXIg dXAgZnJvbnQgYW5kIGNsZWFyLg0KDQoNCg0KQWxzbywgSSBhbSBpbiBzdHJvbmcgZG91YnQgdGhh dCB0aGUgZm9sbG93aW5nIHN0YXRlbWVudCBpcyBhbHdheXMgY29ycmVjdDogIlRoZSB0cmFuc2Zl ciBvZiBhbGwgdGhlc2UgaW5wdXRzIHRvIHRoZSBWZXJpZmllciBkb2VzIG5lZWQgdG8gYmUgc2Vj dXJlZC4iLiBJIGFtIGNvbmZ1c2VkIGJ5IHRoZSBleGNlcHRpb25zIHRoYXQgZm9sbG93IHRoYXQg c3RhdGVtZW50IHdoaWNoIGJhc2ljYWxseSBzYXksIEkgdGhpbms6IGluIHNvbWUgY2FzZXMgdGhl eSBoYXZlIHRvIGJlIHNlY3VyZWQuIE1heWJlIHdlIG1lYW4gZGlmZmVyZW50IHRoaW5ncyBieSAi c2VjdXJlZCI/DQoNCkxldCBtZSB0cnkgYWdhaW46DQotIFRoZSBWZXJpZmllciBtdXN0IGFsd2F5 cyBlc3RhYmxpc2ggdGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUgTWFudWZhY3R1cmVyDQotIEFsbCBp bnB1dCBmcm9tIHRoZSBNYW51ZmFjdHVyZXIgbXVzdCBiZSBpbnRlZ3JpdHkgcHJvdGVjdGVkDQot IFRoZSBWZXJpZmllciBtdXN0IGFsd2F5cyBlc3RhYmxpc2ggdGhlIGF1dGhlbnRpY2l0eSBvZiB0 aGUgVmVyaWZpZXIgT3duZXINCi0gQWxsIGlucHV0IGZyb20gdGhlIFZlcmlmaWVyIE93bmVyIG11 c3QgYmUgaW50ZWdyaXR5IHByb3RlY3RlZA0KLSBJbiBzb21lIGNhc2VzIHRoZSBNYW51ZmFjdHVy ZXIgbWF5IHdpc2ggdG8gZXN0YWJsaXNoIHRoZSBhdXRoZW50aWNpdHkgb2YgdGhlIFZlcmlmaWVy IGJlZm9yZSBnaXZpbmcgaW5wdXRzDQotIEluIHNvbWUgY2FzZXMgdGhlIE93bmVyIG1heSB3aXNo IHRvIGVzdGFibGlzaCB0aGUgYXV0aGVudGljaXR5IG9mIHRoZSBWZXJpZmllciBiZWZvcmUgZ2l2 aW5nIGlucHV0cw0KLSBJbiBzb21lIGNhc2VzIGNvbmZpZGVudGlhbGl0eSBvZiB0aGUgaW5wdXRz IGlzIHJlcXVpcmVkDQoNCkxMDQoNCg0KDQoNClZpZWxlIEdyw7zDn2UsDQoNCkhlbmsNCg0KT24g MDIuMDcuMjAgMDM6NDYsIExhdXJlbmNlIEx1bmRibGFkZSB3cm90ZToNCg0KSGVyZeKAmXMgcm91 Z2ggcHJvcG9zZWQgdGV4dCBhbmQgZGlhZ3JhbS4gTm90IHN1cmUgd2hlcmUgaXQgd291bGQgZ28g aW4gdGhlIGRvYyB5ZXQuDQpMTA0KICAgICAgICAgICoqKioqKioqKioqKioqKioqKiogICAqKioq KioqKioqKiogICAgICoqKioqKioqKioqKioqKioNCiAgICAgICAgICAqIE1hbnVmYWN0dXJlcihz KSAqICAgKiBWZXJpZmllciAqICAgICAqIFJlbHlpbmcgUGFydHkqDQogICAgICAgICAgKioqKioq KioqKioqKioqKioqKiAgICogIE93bmVyICAgKiAgICAgKiAgT3duZXIgICAgICAgKg0KICAgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAqKioqKioqKioqKiogICAgICoqKioqKioqKioqKioq KioNCiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAg ICAgfA0KICAgICAgICAgIE1hbnVmYWN0dXJlciB8ICAgICAgICAgICAgICB8ICAgICAgICAgICAg ICAgICB8DQogICAgICAgICAgICAgIFZlcmlmaWVyIHwgICAgICAgICAgICAgIHxPd25lciAgICAg ICAgICAgIHwNCiAgICAgICAgICAgICAgICBJbnB1dCAgfCAgICAgICAgICAgICAgfFZlcmlmaWVy ICAgICAgICAgfA0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8SW5wdXQg ICAgICAgICAgICB8IEFwcHJhaXNhbA0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAg ICAgICB8ICAgICAgICAgICAgICAgICB8IFBvbGljeSBmb3INCiAgICAgICAgICAgICAgICAgICAg ICAgfCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgfCBBdHRlc3RhdGlvbg0KICAgICAg ICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICB8ICBSZXN1 bHQNCiAgICAgICAgICAgICAgICAgICAgICAgdiAgICAgICAgICAgICAgdiAgICAgICAgICAgICAg ICAgfA0KICAgICAgICAgICAgICAgICAgICAgLi0tLS0tLS0tLS0tLS0tLS0tLiAgICAgICAgICAg ICAgICB8DQogICAgICAgICAgICAgIC4tLS0tLT58ICAgICBWZXJpZmllciAgICB8LS0tLS0tLiAg ICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICctLS0tLS0tLS0tLS0tLS0tLScgICAgICB8 ICAgICAgICAgfA0KICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgIEF0dGVzdGF0 aW9ufCAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgUmVzdWx0 cyAgICB8ICAgICAgICAgfA0KICAgICAgICAgICAgICB8IEV2aWRlbmNlICAgICAgICAgICAgICAg ICAgICAgIHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgfCAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICB2ICAgICAgICAgdg0KICAgICAgICAuLS0tLS0tLS0tLS4gICAgICAgICAgICAg ICAgICAgICAgLi0tLS0tLS0tLS0tLS0tLS0tLg0KICAgICAgICB8IEF0dGVzdGVyIHwgICAgICAg ICAgICAgICAgICAgICAgfCBSZWx5aW5nIFBhcnR5ICAgfA0KICAgICAgICAnLS0tLS0tLS0tLScg ICAgICAgICAgICAgICAgICAgICAgJ+KAlOKAlOKAlOKAlOKAlOKAlOKAlOKAlOKAmA0KQ29uY2Vw dHVhbGx5IHRoZXJlIGFyZSBmb3VyIG1haW4gaW5wdXRzIHRvIHRoZSBWZXJpZmllciBhc2lkZSBm cm9tIHRoZSBBdHRlc3RhdGlvbiBFdmlkZW5jZS4gVGhleSBhcmU6DQogICAtIEtleSBtYXRlcmlh bCBmb3IgdmVyaWZ5aW5nIHRydXN0IGluIHRoZSBBdHRlc3Rlcg0KICAgLSBLbm93bi1nb29kL3Jl ZmVyZW5jZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBDbGFpbXMgaW4gdGhlIEF0dGVzdGF0 aW9uIEV2aWRlbmNlDQogICAtIFN0YXRpYyBpbXBsaWNpdCBjbGFpbXMgZm9yIHRoZSBwYXJ0aWN1 bGFyIEF0dGVzdGVyIHRoYXQgYXJlIHBhc3MgdG8gdGhlIFJlbHlpbmcgUGFydHkgaW4gQXR0ZXN0 YXRpb24gUmVzdWx0cw0KICAgLSBQb2xpY3kgQ29uZmlndXJhdGlvbg0KQW55IG9mIHRoZXNlIGZv dXIgY2FuIGNvbWUgZnJvbSBlaXRoZXIgdGhlIE1hbnVmYWN0dXJlciBhcyBNYW51ZmFjdHVyZXIg VmVyaWZpZXIgSW5wdXQgb3IgZnJvbSB0aGUgVmVyaWZpZXIgT3duZXIgYXMgT3duZXIgVmVyaWZp ZXIgSW5wdXQuIFRoZXkga2V5IG1hdGVyaWFsIHVzdWFsbHkgYWx3YXlzIGNvbWVzIGZyb20gdGhl IG1hbnVmYWN0dXJlciBhbmQgdGhlIHBvbGljeSBmcm9tIHRoZSBWZXJpZmllciBPd25lciwgYnV0 IHRoZXJlIGlzIG5vIHN0cmljdCByZXF1aXJlbWVudCBmb3IgdGhpcy4gVGhlIGtub3duLWdvb2Qv cmVmZXJlbmNlIHZhbHVlcyBhbmQgc3RhdGljIGltcGxpY2l0IGNsYWltcyBvZnRlbiBjb21lIGZy b20gZWl0aGVyIG9yIGJvdGguDQpUaGVyZSBpcyBubyBzdHJpY3Qgc2VwYXJhdGlvbiBiZXR3ZWVu IE1hbnVmYWN0dXJlciBhbmQgVmVyaWZpZXIgT3duZXIuIFRoZXkgY291bGQgYmUgdGhlIHNhbWUu IFRoZXJlIGNvdWxkIGFsc28gYmUgM3JkIHBhcnR5IGludGVybWVkaWFyaWVzIGJldHdlZW4gdGhl IE1hbnVmYWN0dXJlciBhbmQgdGhlIFZlcmlmaWVyLg0KQW4gRW5kb3JzZW1lbnQgaXMgb25lIGVz dGFibGlzaGVkIGZvcm1hdCBmb3Igc29tZSBvZiB0aGVzZSBpbnB1dHMuIEl0IHVzdWFsbHkgY29t ZXMgZnJvbSBhbiBFbmRvcnNlciB0aGF0IGlzIHVzdWFsbHkgdGhlIE1hbnVmYWN0dXJlci4gSXQg aXMgdXN1YWxseSBhIHNpZ25lZCBkb2N1bWVudC4gQWx0ZXJuYXRpdmVseSwgdGhlIFZlcmlmaWVy IG1heSBwZXJmb3JtIHF1ZXJpZXMgYWdhaW5zdCBhIGRhdGFiYXNlLCBwZXJoYXBzIG9uZSBtYWlu dGFpbmVkIGJ5IGEgTWFudWZhY3R1cmVyLCB0byBnZXQgaW5wdXRzLiBBbHRlcm5hdGl2ZWx5LCB0 aGUgcm9vdCBrZXkgb2YgYSBrZXkgaGllcmFyY2h5IG1heSBiZSB0cmFuc2ZlcnJlZCBpbiBhIG9u ZS10aW1lIHBoeXNpY2FsIGNlcmVtb255LiBUaGlzIGFyY2hpdGVjdHVyZSBzZXRzIG5vIHByb3Rv Y29sIG9yIHByb2NlZHVyZSBmb3IgdGhpcyBpbnB1dC4NClRoZSB0cmFuc2ZlciBvZiBhbGwgdGhl c2UgaW5wdXRzIHRvIHRoZSBWZXJpZmllciBkb2VzIG5lZWQgdG8gYmUgc2VjdXJlZC4gRm9yIGFs bCBjYXNlcywgYXV0aGVudGljaXR5IG9mIHRoZSBNYW51ZmFjdHVyZXIgYW5kIFZlcmlmaWVyIE93 bmVyIGFuZCB0aGVpciBpbnB1dHMgYXJlIHJlcXVpcmVkLiBXaXRob3V0IGF1dGhlbnRpYyBpbnB1 dHMsIHRoZSBWZXJpZmllciB3aWxsIG5vdCBkbyBpdHMgam9iIGNvcnJlY3RseS4gSW4gc29tZSBj YXNlcyBjb25maWRlbnRpYWxpdHkgb2YgdGhlIGlucHV0cyBpcyByZXF1aXJlZC4gRmluYWxseSwg aW4gc29tZSBjYXNlcyB0aGUgTWFudWZhY3R1cmVyIGFuZCBWZXJpZmllciBPd25lciB3aWxsIGF1 dGhlbnRpY2F0ZSB0aGUgVmVyaWZpZXIuDQpUaGlzIGFyY2hpdGVjdHVyZSBzZXRzIG5vIHJlcXVp cmVtZW50IGZvciBhIHBhcnRpY3VsYXIgcHJvdG9jb2wgb3Igc2VjdXJpdHkgbWVjaGFuaXNtLiBG b3IgZXhhbXBsZSwgVExTIGNvdWxkIGJlIHVzZWQsIGJ1dCBpdCBpcyBub3QgdGhlIG9ubHkgcHJv dG9jb2wgdGhhdCBjb3VsZCBiZSB1c2VkLA0KDQpPbiBKdW4gMjksIDIwMjAsIGF0IDg6NTYgUE0s IERhdmUgVGhhbGVyIDxkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzxtYWls dG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+IDxtYWlsdG86ZHRoYWxl cj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCg0KSSBkb27igJl0IGxp a2UgdGhlIHRlcm0g4oCcVmVyaWZpZXIgSW5wdXTigJ0gc2luY2Ug4oCcQXBwcmFpc2FsIFBvbGlj eSBmb3IgRXZpZGVuY2XigJ0gaXMgYWxzbyBWZXJpZmllciBJbnB1dCwgc28gSSB3b3VsZCBmaW5k IGl0IGNvbmZ1c2luZy4NCkkgdGhpbmsgdGhhdCB0aGUgcnVsZXMgZm9yIHdoYXQgdG8gcHV0IGlu IEF0dGVzdGF0aW9uIFJlc3VsdHMgKGJ1bGxldCAzKSwgYXMgd2VsbCBhcyDigJxrbm93bi1nb29k L3JlZmVyZW5jZSB2YWx1ZXPigJ0gaWYgc3VjaCBleGlzdA0KKGFuZCB0aGVyZSBjYW4gYmUgdmFs aWQgcG9saWNpZXMgd2hlcmUgdGhleSBtYXkgbm90IGV4aXN0LCBvciByYXRoZXIgd2hlcmUgdGhl IHBvbGljaWVzIHVzZSBtb3JlIGNvbXBsZXggcnVsZXMgdGhhbg0KYSBzaW1wbGUgdGVzdCBmb3Ig ZXF1YWxpdHkgYWdhaW5zdCBhIGNvbnN0YW50KSBhcmUgY29uY2VwdHVhbGx5IHBhcnQgb2YgQXBw cmFpc2FsIFBvbGljeS4NCkkgZG8gYWdyZWUgdGhhdCBBcHByYWlzYWwgUG9saWN5IGNhbiBiZSBj b252ZXllZCB0byB0aGUgVmVyaWZpZXIgaW4gbWFueSBkaWZmZXJlbnQgd2F5cywgYW5kIG1heSBi ZSBjb21wb3NlZA0Kb2YgZGlmZmVyZW50IHRoaW5ncyBmcm9tIGRpZmZlcmVudCBzb3VyY2VzLg0K RGF2ZQ0KKkZyb206KlJBVFMgPHJhdHMtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86cmF0cy1ib3Vu Y2VzQGlldGYub3JnPiA8bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZz4+Kk9uIEJlaGFsZiBP ZipMYXVyZW5jZSBMdW5kYmxhZGUNCipTZW50OipNb25kYXksIEp1bmUgMjksIDIwMjAgMTE6MzQg QU0NCipUbzoqcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4gPG1haWx0bzpyYXRz QGlldGYub3JnPg0KKlN1YmplY3Q6KltSYXRzXSBWZXJpZmllciBJbnB1dCBpbnN0ZWFkIG9mIEVu ZG9yc2VtZW50Pw0KU3RlcHBpbmcgYmFjayBhIGJpdCBvbiB0aGUgZGVmaW5pdGlvbiBvZiBhbiBF bmRvcnNlbWVudCwgSSB0aGluayB0aGUgZm91ciBpbnB1dHMgdG8gYSBWZXJpZmllciBhcmUgdGhl c2U6DQogIC0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlpbmcgdHJ1c3QgaW4gdGhlIEF0dGVzdGVy DQogIC0gS25vd24tZ29vZC9SZWZlcmVuY2UgdmFsdWVzIGZvciBjb21wYXJpc29uIHdpdGggY2xh aW1zDQogIC0gU3RhdGljIGltcGxpY2l0IGNsYWltcyB0aGF0IGFyZSBwYXNzZWQgdG8gUlAncyB2 aWEgQXR0ZXN0YXRpb24gUmVzdWx0cw0KICAtIEFwcHJhaXNhbCBQb2xpY3kNClRoZXNlIGNhbiBh bmQgd2lsbCBiZSBjb252ZXllZCB0byB0aGUgVmVyaWZpZXIgaW4gbWFueSBkaWZmZXJlbnQgd2F5 czoNCiAgLSBYLjUwOSBjZXJ0cyB3aXRoIGV4dGVuc2lvbnMNCiAgLSBTaWduZWQgZG9jdW1lbnRz DQogIC0gSFRUUCBxdWVyaWVzIGFnYWluc3QgdGhlIEF0dGVzdGVyL2RldmljZSBtYW51ZmFjdHVy ZXINCiAgLSBSZW1vdGUgU1FMIG9yIHNvbWUgb3RoZXIgc29ydCBvZiBkYXRhYmFzZSBhY2Nlc3Mg dG8gbWFudWZhY3R1cmVyKHMpDQogIC0gRGF0YSBzdG9yYWdlIGxpa2UgZmxhc2ggZHJpdmVzIHRo ZSBhcmUgaGFuZCBjYXJyaWVkIGludG8gdGhlIFZlcmlmaWVyJ3Mgc2l0ZQ0KICAtIE9uZS10aW1l IHNwZWNpYWwgZmlsZSB0cmFuc2ZlcnMNCiAgLSBDZXJlbW9uaWFsIHByb2NlZHVyZXMgd2l0aCBN IG91dCBvZiBOIHBlb3BsZSBwaHlzaWNhbCBwcmVzZW50IGFwcHJvdmluZyB0cmFuc2Zlcg0KSXQg c2VlbXMgbGlrZSBzaG9lLWhvcm5pbmcgYWxsIG9mIHRoZSBhYm92ZSAoZXhjZXB0IHBvbGljeSkg aW50byBhbiBFbmRvcnNlbWVudCwgbGlrZSBJ4oCZdmUgdHJpZWQgdG8gZG8gPGh0dHBzOi8vbmFt MDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmdp dGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZhcmNoaXRlY3R1cmUlMkZwdWxsJTJGOTQmZGF0YT0w MiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NmMTVhY2U2ZThiNGI0NDdlZWJjMDA4 ZDgxYzViMWYzMyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2 MzcyOTA1MjQ5ODYzNjUwOTgmc2RhdGE9Mk5rdFBYJTJCM0xKWGpNRWpFRm9NOGtwVUl5NnlPeHRl JTJCdWhGWXIxRVRONGclM0QmcmVzZXJ2ZWQ9MD4gIGlzIHRvbyBtdWNoLiBJIHRyaWVkIHRoaXMg c2hvZS1ob3JuaW5nIGJlY2F1c2UgSSB0aGluayB0aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50IG5l ZWRzIHRvIGNvdmVyIGFsbCB0aGlzIGFuZCBFbmRvcnNlbWVudHMgd2FzIHdoYXQgd2FzIGluIGl0 LiBBIHR5cGljYWwgRW5kb3JzZW1lbnQgc2VlbXMgdG8gYmUganVzdCB0aGUgZmlyc3QgdHdvIG1l bnRpb25lZCwgWC41MDkgYW5kIHNpZ25lZCBkb2N1bWVudHMgZXhwYW5kaW5nIGl0cyBkZWZpbml0 aW9uIHRvIGluY2x1ZGUgZGF0YWJhc2UgYWNjZXNzIGlzIGEgc3RyZXRjaC4NClJhdGhlciB0aGFu IGRlZmluaW5nIEVuZG9yc2VtZW50LCBJ4oCZZCBsaWtlIHRvIGRlZmluZSBWZXJpZmllciBJbnB1 dDoNCiAgICAgICAgICAqKioqKioqKioqKioqKioqKioqICAgKioqKioqKioqKioqICAgICAqKioq KioqKioqKioqKioqDQogICAgICAgICAgKiBNYW51ZmFjdHVyZXIocykgKiAgICogVmVyaWZpZXIg KiAgICAgKiBSZWx5aW5nIFBhcnR5Kg0KICAgICAgICAgICoqKioqKioqKioqKioqKioqKiogICAq ICBPd25lciAgICogICAgICogIE93bmVyICAgICAgICoNCiAgICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgKioqKioqKioqKioqICAgICAqKioqKioqKioqKioqKioqDQogICAgICAgICAgICAg ICAgICAgICAgIHwgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgIFZl cmlmaWVyIElucHV0fCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgfA0KICAgICAgICAg ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8QXBwcmFpc2FsICAgICAgICB8DQogICAgICAg ICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHxQb2xpY3kgICAgICAgICAgIHwNCiAgICAg ICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfGZvciAgICAgICAgICAgICAgfCBBcHBy YWlzYWwNCiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfEV2aWRlbmNlICAg ICAgICAgfCBQb2xpY3kgZm9yDQogICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAg IHwgICAgICAgICAgICAgICAgIHwgQXR0ZXN0YXRpb24NCiAgICAgICAgICAgICAgICAgICAgICAg fCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgfCAgUmVzdWx0DQogICAgICAgICAgICAg ICAgICAgICAgIHYgICAgICAgICAgICAgIHYgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAg ICAgICAgICAgIC4tLS0tLS0tLS0tLS0tLS0tLS4gICAgICAgICAgICAgICAgfA0KICAgICAgICAg ICAgICAuLS0tLS0+fCAgICAgVmVyaWZpZXIgICAgfC0tLS0tLS4gICAgICAgICB8DQogICAgICAg ICAgICAgIHwgICAgICAnLS0tLS0tLS0tLS0tLS0tLS0nICAgICAgfCAgICAgICAgIHwNCiAgICAg ICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgfA0KICAg ICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICBBdHRlc3RhdGlvbnwgICAgICAgICB8DQog ICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgIFJlc3VsdHMgICAgfCAgICAgICAgIHwN CiAgICAgICAgICAgICAgfCBFdmlkZW5jZSAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAg fA0KICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAg ICB8DQogICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgdiAgICAg ICAgIHYNCiAgICAgICAgLi0tLS0tLS0tLS0uICAgICAgICAgICAgICAgICAgICAgIC4tLS0tLS0t LS0tLS0tLS0tLS4NCiAgICAgICAgfCBBdHRlc3RlciB8ICAgICAgICAgICAgICAgICAgICAgIHwg UmVseWluZyBQYXJ0eSAgIHwNCiAgICAgICAgJy0tLS0tLS0tLS0nICAgICAgICAgICAgICAgICAg ICAgICfigJTigJTigJTigJTigJTigJTigJTigJTigJgNCg0KRW5kb3JzZW1lbnRzIG11c3Qgc3Rp bGwgYmUgbWVudGlvbmVkLCBidXQgYXMgb25lIGZvcm0gb2YgVmVyaWZpZXIgaW5wdXQganVzdCBs aWtlIEVBVCBpcyBvbmUgZm9ybSBvZiBBdHRlc3RhdGlvbiBFdmlkZW5jZS4NClZlcmlmaWVyIElu cHV0IHdvdWxkIGJlIGRlZmluZWQgYXM6DQogIC0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlpbmcg dHJ1c3QgaW4gdGhlIEF0dGVzdGVyDQogIC0gS25vd24tZ29vZC9SZWZlcmVuY2UgdmFsdWVzIGZv ciBjb21wYXJpc29uIHdpdGggY2xhaW1zDQogIC0gU3RhdGljIGltcGxpY2l0IGNsYWltcyB0aGF0 IGFyZSBwYXNzZWQgdG8gUlAncyB2aWEgQXR0ZXN0YXRpb24gUmVzdWx0cw0KVG8gZG8gdGhpcywg SeKAmWQgcmVwbGFjZSB0aGUgY3VycmVudCBQUiA8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYt cmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRnB1bGwlMkY5NCZkYXRhPTAyJTdDMDElN0NkdGhhbGVy JTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5 OCZzZGF0YT0yTmt0UFglMkIzTEpYak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUz RCZyZXNlcnZlZD0wPiBhbmQgaXNzdWUgPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMt d2clMkZhcmNoaXRlY3R1cmUlMkZpc3N1ZXMlMkY2NSZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQw bWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM3NTA5MiZz ZGF0YT1HZk01cUVsTzR0ZU5kamZBQmxtVmF5ZUdYdVlIV0JEcUhUVnRwZWVldzdnJTNEJnJlc2Vy dmVkPTA+IEkgaGF2ZSBvbiBFbmRvcnNlbWVudHMgd2l0aCBhIG5ldyBQUi4gSXQgd2lsbCBiZSBh IGZhaXIgYml0IG9mIHdvcmssIHNvIEkgd2FudCB0byBzZWUgaWYgdGhlcmUgaXMgc29tZSBjb25z ZW5zdXMgZmlyc3QuDQpMTA0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGll dGYub3JnPiA8bWFpbHRvOlJBVFNAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL3JhdHMNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpSQVRTIG1haWxpbmcgbGlzdA0KUkFUU0BpZXRmLm9yZzxtYWlsdG86UkFUU0Bp ZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KUkFUUyBtYWls aW5nIGxpc3QNClJBVFNAaWV0Zi5vcmc8bWFpbHRvOlJBVFNAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCg0KSU1QT1JUQU5UIE5PVElDRTogVGhl IGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50 aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5k ZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRv IG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZv ciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1l ZGl1bS4gVGhhbmsgeW91Lg0K --_000_AM6PR08MB34297526F7AC5A7EEC988A37EF6A0AM6PR08MB3429eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIg MSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0K CXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1p bHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQg NzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij5J4oCZdmUganVzdCB0cmllZCB0byBjYXRjaCB1cCBvbiB0aGUgdGhpbmtpbmcgb24gdGhpcyB2 aWEgdGhpcyB0aHJlYWQgYW5kIGdpdGh1YiM5NCBhbmQgcmVhbGlzZSB0aGF0IHRoZSBjb252ZXJz YXRpb24gaGFzIGJlY29tZSBoaWdobHkgZGV0YWlsZWQgYW5kIHRoYXQgc29tZSB2ZXJ5IHByZWNp c2UgZGVmaW5pdGlvbnMgYXJlIGVtZXJnaW5nIGZvciBjb25jZXB0cyB0aGF0IG9yaWdpbmFsbHkN CiB3ZXJlIHF1aXRlIGdlbmVyYWwgKGUuZy4gZW5kb3JzZW1lbnQpLiBQZXJoYXBzIHRoZXJl4oCZ cyBhIHJpc2sgPC9zcGFuPnRoYXQgdGhlIGFyY2hpdGVjdHVyZSBtYXkgYmUgb3Zlcmx5IGNvbnN0 cmFpbmluZyBhcyBhIHJlc3VsdDxzcGFuIGxhbmc9IkVOLUdCIj4uPC9zcGFuPjxzcGFuIGxhbmc9 IkVOLUdCIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPlRyeWluZyB0byBhdm9pZCB1c2luZyBhbnkgdGVy bSB0aGF0IG1heSBub3cgYmUgb3ZlcmxvYWRlZOKApjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5JdCBzZWVtcyB0aGF0IHRoZSBp bXBvcnRhbnQgaW5mb3JtYXRpb24gdG8gY2FwdHVyZSBpcyB0aGF0IHRoZSBWZXJpZmllciBpcyBh IG1lYW5zIG9mIHByb3ZpZGluZyB0cmFuc2l0aXZlIHRydXN0IGJldHdlZW4gdGhlIHJlbHlpbmcg cGFydHkgYW5kIGEgcG90ZW50aWFsbHkgY29tcGxleCBTdXBwbHkgQ2hhaW4gZnJvbSB3aGljaCB0 aGUgYXR0ZXN0aW5nIGVuZHBvaW50IG9yaWdpbmF0ZWQuDQogVGhlIFJQIHRvIFZlcmlmaWVyIHJl bGF0aW9uc2hpcCBtdXN0IGJlIHNlY3VyYWJsZSBhbmQgdHJ1c3R3b3J0aHkgaW4gc29tZSBhY2hp ZXZhYmxlIHdheSBzdWNoIHRoYXQgYW4gUlAgY2FuIHRydXN0IHRoZSBhdHRlc3RhdGlvbiByZXN1 bHRzIHJlY2VpdmVkLiBTaW1pbGFybHkgdGhhdCBjcmVhdGVzIGFuIGV4cGVjdGF0aW9uIHRoYXQg dGhlIFZlcmlmaWVyIGhhcyBlc3RhYmxpc2hlZCBzZWN1cmFibGUgJmFtcDsgdHJ1c3R3b3J0aHkg cmVsYXRpb25zaGlwcw0KIHdpdGggdGhlIHN1cHBseSBjaGFpbiBpbiBvcmRlciB0byByZWNlaXZl IGFwcHJvcHJpYXRlIHByb29mcyAvIHRlc3RpbW9uaWVzIG9mIGl0ZW1zIHRoYXQgdGhlIFZlcmlm aWVyIGNhbiBpZGVudGlmeSB3aXRoaW4gdGhlIGF0dGVzdGF0aW9uIGV2aWRlbmNlLiBUaGUgVmVy aWZpZXIgdG8gU3VwcGx5IENoYWluIHJlbGF0aW9uc2hpcHMgYXJlbuKAmXQganVzdCB0ZWNobmlj YWwsIHRoZXkgcmVxdWlyZSBjb250cmFjdHVhbCByZWxhdGlvbnNoaXBzIGFzDQogd2VsbCB3aGlj aCBjYW4gYnJpbmcgYSBzdHJvbmcgaW5mbHVlbmNlIGludG8gdGhlIGRldGFpbHMgb2YgaG93IHRo ZSBpbmZvcm1hdGlvbiBnZXRzIHRvIHRoZSBWZXJpZmllci4gJm5ic3A7SWYgd2UgaGF2ZSB0aGUg cmVsYXRpb25zaGlwcyBza2V0Y2hlZCBvdXQgYW5kIGFuIGV4cGxvcmF0aW9uIG9mIHRoZSB0eXBl cyBvZiBpbmZvcm1hdGlvbiB0aGF0IG1heSBiZSByZXF1aXJlZCwgaXMgaXQgbmVjZXNzYXJ5IHRv IGdvIGludG8gZnVydGhlciBkZXRhaWw/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGFua3M8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+ U2ltb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFu IGxhbmc9IkVOLVVTIj4gTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5j b20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gMDIgSnVseSAyMDIwIDE4OjUyPGJyPg0KPGI+VG86 PC9iPiBIZW5rIEJpcmtob2x6ICZsdDtoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlJmd0 Ozxicj4NCjxiPkNjOjwvYj4gRGF2ZSBUaGFsZXIgJmx0O2R0aGFsZXI9NDBtaWNyb3NvZnQuY29t QGRtYXJjLmlldGYub3JnJmd0OzsgcmF0c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBS ZTogW1JhdHNdIFZlcmlmaWVyIElucHV0IGluc3RlYWQgb2YgRW5kb3JzZW1lbnQ/PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gSnVsIDIsIDIwMjAs IGF0IDY6MzEgQU0sIEhlbmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LHNhbnMtc2VyaWYiPkhpIExhdXJlbmNlLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2lu LWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+PGJyPg0Kd2hpbGUgSSB0aGluayB0aGF0IEkgdW5kZXJzdGFuZCB3aGVyZSB5b3UgYXJl IGNvbWluZyBmcm9tIGhlcmUsIEkgaGF2ZSB0byBzYXkgdGhhdCBJIGFsc28gdGhpbmsgdGhhdDo8 YnI+DQo8YnI+DQoqICZxdW90O21hbnVmYWN0dXJlcihzKSZxdW90OyBpcyBhIHRvbyBhcmJpdHJh cmlseSByZXN0cmljdGluZyB0ZXJtLCB3aGljaCBpcyB3aHkgd2UgYWdyZWVkIG9uIGVuZG9yc2Vy PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgcHJvYmxlbSB3aXRoIEVuZG9yc2VyIGlzIHRoYXQgdGhl eSBwcm9kdWNlIEVuZG9yc2VtZW50cyBhbmQgSSB0aGluayB0aGVyZSBhcmUgcHJvYmxlbXMgd2l0 aCBFbmRvcnNlbWVudHM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDstIEluIEJlcmxpbiB5b3UgdG9sZCBtZSB0aGV5IGRvbuKAmXQgaGF2 ZSBrZXlzIGluIHRoZW0uIFNvIHRoZW4gaG93IGRvIGtleXMgZ2V0IGludG8gdGhlIFZlcmlmaWVy PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7LSBFbmRvcnNlbWVudHMgc2VlbSB0byBiZSBzbWFsbCBzaWduZWQgZG9jdW1lbnRzIG9mIGF0 dHJpYnV0ZXMgc28gdGhleeKAmXJlIG5vdCBzbyBnb29kIGZvcjo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7LSBS ZXByZXNlbnRpbmcgYSBkYXRhYmFzZSBvZiBtaWxsaW9ucyBvZiBrZXlzPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNw Oy0gUmVwcmVzZW50aW5nIEhUVFAgYWNjZXNzIHRvIGEgbWFudWZhY3R1cmVycyBkYXRhYmFzZSBv ZiBrbm93bi1nb29kL3JlZmVyZW5jZSB2YWx1ZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7LSBPbmUtdGltZSBw aHlzaWNhbCAvIGNlcmVtb25pYWwgdHJhbnNmZXIgb2YgYSByb290IGtleTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBFbmRvcnNlbWVudHMgc2Vl bSBsaWtlIGEgc29tZXdoYXQgbmFycm93ZWQsIHNwZWNpZmljIHdheSBvZiBwcm92aWRpbmcgdmVy aWZpZXIgaW5wdXQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPi0gRW5kb3JzZW1lbnRzIGltcGx5IHNpZ25pbmcgYXMgdGhlIHNlY3VyaXR5IG1lY2hh bmlzbSwgd2hpY2ggaXMgdG9vIG5hcnJvdy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDsgJm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NYXliZSB3ZSBjYW4gZmluZCBh IHRlcm0gb3RoZXIgdGhhbiBtYW51ZmFjdHVyZXI/ICZuYnNwO1doYXQgSSB3YW50IHRvIGF2b2lk IGlzIHRoZSBnZW5lcmFsIHVzZSBvZiB0aGUgdGVybSBFbmRvcnNlbWVudCBmb3IgdGhlIGFib3Zl IHJlYXNvbnMuIFVzaW5nIHRoZSB0ZXJtIEVuZG9yc2VtZW50IHRvIG1lIGlzIGxpa2UgdXNpbmcg dGhlIHByb3RvY29sLXNwZWNpZmljIHRlcm0gRUFUIGluc3RlYWQgb2YgY29uY2VwdHVhbA0KIHRl cm0gQXR0ZXN0YXRpb24gRXZpZGVuY2UuIFVzZSBvZiB0aGUgdGVybSBFbmRvcnNlciBpbXBsaWVz IEVuZG9yc2VtZW50LCBidXQgbWF5YmUgaXQgaXMgT0sgaWYgd2UgZG9u4oCZdCB1c2UgdGhlIHRl cm0gRW5kb3JzZW1lbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+KiBldmVyeSBhcnJvdyBpcyBvZiBjb3Vyc2UgJnF1b3Q7 aW5wdXQvb3V0cHV0JnF1b3Q7LCBidXQgd2UgYXJlIG5vdCBjYWxsaW5nIGV2aWRlbmNlICZxdW90 O0F0dGVzdGVyIE91dHB1dCZxdW90Oy4gU28sIFZlcmlmaWVyIElucHV0IGlzIGluIGNvbnRyYXN0 IGEgdG9vIGFtYmlndW91cyBjYXRlZ29yeSAoaXQgZG9lcyBub3QgYWRkIGFueQ0KIHNlbWFudGlj cyB0byB0aGUgYXJyb3cpPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NYXliZSB0aGUgbm9uLXNwZWNpZmlj aXR5IG9mIOKAnFZlcmlmaWVyIElucHV04oCdIHNlZW1zIHVzZWZ1bD8gSXQgYWxsb3dzIHRoZSBs aXN0IG9mIGZvdXIgKGtleXMsIHJlZiB2YWx1ZXMsIHN0YXRpYyBjbGFpbXMsIHBvbGljeSkgdG8g YmUgdXNlZCBhbmQgZm9yIHRoZW0gdG8gYmUgdmFyaWFibGUuIEl0IGlzIGp1c3QgYSBncm91cGlu Zy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ TWF5YmUgd2UgY2FuIGZpbmQgYSBiZXR0ZXIgdGVybT8gSGVyZeKAmXMgYSBmZXc6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7 VmVyaWZpZXIgQ3JpdGVyaWE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOyAmbmJzcDtWZXJpZmllciBEYXRhPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7QXR0ZXN0ZXIg VmVyaWZpY2F0aW9uIENyaXRlcmlhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7QXR0ZXN0ZXIgVHJ1c3QgTWF0ZXJpYWxzPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0K PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmIj4qIHRoZSBpdGVtaXplZCBsaXN0IHRoYXQgc3RhcnRzIHdpdGgga2V5IG1hdGVyaWFs IHByb3ZpZGVzIGEgdmVyeSBpbnR1aXRpdmUgZXhhbXBsZSBhbmQgbWF5YmUgd2UgY291bGQgdXNl IHRoYXQga2luZCBvZiBsaXN0IGFzIGEgbW9yZSBwcm9taW5lbnQgZXhhbXBsZSBpbiB0aGUgYXJj aCBJLUQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJlkIHByZWZlciB0aGUgbGlzdCBvZiBmb3VyIHRv IGJlIGV4cGxpY2l0IGFyY2hpdGVjdHVyZSwgbm90IGp1c3QgYW4gZXhhbXBsZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0KPG86cD48L286 cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48 YnI+DQpUaGUgcXVlc3Rpb24sIGlmIHJlZmVyZW5jZSB2YWx1ZXMgYXJlIGVuZG9yc2VtZW50cyBv ciBhcHByYWlzYWwgcG9saWNpZXMgb3IgYSB0aGlyZCBpdGVtIGlzLi4uIHByb2JhYmx5IG9rYXkg YW5kIEkgYW0gaW50ZXJlc3RlZCBpbiBhbiBhbnN3ZXIgLSBidXQgdGhhdCBpcyBhIGRldGFpbCwg SSB0aGluay4gQXMgbG9uZyBhcyB0aGV5IGFyZSBhbHNvIG1lbnRpb25lZCwgSSBjYW4gZm9sbG93 IGFsbCB0aHJlZSBsaW5lcyBvZiB0aG91Z2h0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+V2Ugc2hvdWxk IGFzc3VtZSBvdXIgYXVkaWVuY2Uga25vd3MgbGl0dGxlIHRvIG5vdGhpbmcgYWJvdXQgVENHIHdv cmsgKGxpa2UgbWUpIGFuZCBsaXR0bGUgYWJvdXQgYXR0ZXN0YXRpb24sIHNvIEnigJlkIHByZWZl ciB0aGV5IG5vdCBiZSBkZXRhaWxzLCBidXQgcmF0aGVyIHVwIGZyb250IGFuZCBjbGVhci48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpBbHNvLCBJIGFtIGluIHN0cm9uZyBkb3VidCB0aGF0 IHRoZSBmb2xsb3dpbmcgc3RhdGVtZW50IGlzIGFsd2F5cyBjb3JyZWN0OiAmcXVvdDtUaGUgdHJh bnNmZXIgb2YgYWxsIHRoZXNlIGlucHV0cyB0byB0aGUgVmVyaWZpZXIgZG9lcyBuZWVkIHRvIGJl IHNlY3VyZWQuJnF1b3Q7LiBJIGFtIGNvbmZ1c2VkIGJ5IHRoZSBleGNlcHRpb25zIHRoYXQgZm9s bG93IHRoYXQgc3RhdGVtZW50IHdoaWNoIGJhc2ljYWxseSBzYXksIEkgdGhpbms6IGluIHNvbWUg Y2FzZXMgdGhleQ0KIGhhdmUgdG8gYmUgc2VjdXJlZC4gTWF5YmUgd2UgbWVhbiBkaWZmZXJlbnQg dGhpbmdzIGJ5ICZxdW90O3NlY3VyZWQmcXVvdDs/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxldCBtZSB0cnkgYWdh aW46PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4t IFRoZSBWZXJpZmllciBtdXN0IGFsd2F5cyBlc3RhYmxpc2ggdGhlIGF1dGhlbnRpY2l0eSBvZiB0 aGUgTWFudWZhY3R1cmVyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4tIEFsbCBpbnB1dCBmcm9tIHRoZSBNYW51ZmFjdHVyZXIgbXVzdCBiZSBpbnRl Z3JpdHkgcHJvdGVjdGVkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBUaGUgVmVyaWZpZXIgbXVzdCBhbHdheXMgZXN0YWJsaXNoIHRo ZSBhdXRoZW50aWNpdHkgb2YgdGhlIFZlcmlmaWVyIE93bmVyPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEFsbCBpbnB1dCBmcm9tIHRoZSZuYnNw O1ZlcmlmaWVyIE93bmVyJm5ic3A7bXVzdCBiZSBpbnRlZ3JpdHkgcHJvdGVjdGVkPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEluIHNvbWUgY2Fz ZXMgdGhlIE1hbnVmYWN0dXJlciBtYXkgd2lzaCB0byBlc3RhYmxpc2ggdGhlIGF1dGhlbnRpY2l0 eSBvZiB0aGUgVmVyaWZpZXIgYmVmb3JlIGdpdmluZyBpbnB1dHM8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEluIHNvbWUgY2FzZXMg dGhlIE93bmVyIG1heSB3aXNoIHRvIGVzdGFibGlzaCB0aGUgYXV0aGVudGljaXR5IG9mIHRoZSBW ZXJpZmllciBiZWZvcmUgZ2l2aW5nIGlucHV0czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gSW4gc29tZSBjYXNlcyBjb25maWRlbnRp YWxpdHkgb2YgdGhlIGlucHV0cyBpcyByZXF1aXJlZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0 b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYi Pjxicj4NClZpZWxlIEdyw7zDn2UsPGJyPg0KPGJyPg0KSGVuazxicj4NCjxicj4NCk9uIDAyLjA3 LjIwIDAzOjQ2LCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6PGJyIHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDAsIDAsIDApO2ZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7dGV4dC1hbGlnbjpzdGFy dDstd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29yZC1zcGFjaW5nOjBweCI+DQo8YnI+ DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNh bnMtc2VyaWYiPkhlcmXigJlzIHJvdWdoIHByb3Bvc2VkIHRleHQgYW5kIGRpYWdyYW0uIE5vdCBz dXJlIHdoZXJlIGl0IHdvdWxkIGdvIGluIHRoZSBkb2MgeWV0Ljxicj4NCkxMPGJyPg0KJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj4qKioqKioqKioqKioqKioqKioqICZuYnNwOyAqKioqKioqKioq KiogJm5ic3A7ICZuYnNwOyAqKioqKioqKioqKioqKioqPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj4qIE1hbnVmYWN0dXJlcihzKSAqICZuYnNwOyAqIFZlcmlmaWVyICogJm5ic3A7ICZu YnNwOyAqIFJlbHlpbmcgUGFydHkqPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4qKioq KioqKioqKioqKioqKioqICZuYnNwOyAqICZuYnNwO093bmVyICZuYnNwOyAqICZuYnNwOyAmbmJz cDsgKiAmbmJzcDtPd25lciAmbmJzcDsgJm5ic3A7ICZuYnNwOyAqPGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyoqKioqKioqKioqKiAm bmJzcDsgJm5ic3A7ICoqKioqKioqKioqKioqKio8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8 YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPk1hbnVmYWN0dXJlciB8ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlZlcmlmaWVyIHwgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fE93bmVyICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7fDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+SW5wdXQgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8VmVyaWZpZXIgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fElucHV0ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCBBcHByYWlzYWw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IHwgUG9saWN5IGZvcjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCBBdHRlc3RhdGlvbjxicj4N CiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgfCAmbmJzcDtSZXN1bHQ8YnI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3YgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7diAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Li0tLS0tLS0tLS0tLS0tLS0tLiAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fDxicj4NCiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4uLS0tLS0mZ3Q7fCAmbmJzcDsg Jm5ic3A7IFZlcmlmaWVyICZuYnNwOyAmbmJzcDt8LS0tLS0tLiAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj58 ICZuYnNwOyAmbmJzcDsgJm5ic3A7Jy0tLS0tLS0tLS0tLS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZu YnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnwgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7QXR0ZXN0 YXRpb258ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7UmVzdWx0cyAmbmJzcDsgJm5i c3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj58IEV2aWRlbmNlICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPnwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj58ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHYgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHY8YnI+ DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+Li0tLS0tLS0tLS0uICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsuLS0t LS0tLS0tLS0tLS0tLS0uPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnwgQXR0ZXN0ZXIgfCAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7fCBSZWx5aW5nIFBhcnR5ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPictLS0tLS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7J+KAlOKAlOKAlOKAlOKAlOKA lOKAlOKAlOKAmDxicj4NCkNvbmNlcHR1YWxseSB0aGVyZSBhcmUgZm91ciBtYWluIGlucHV0cyB0 byB0aGUgVmVyaWZpZXIgYXNpZGUgZnJvbSB0aGUgQXR0ZXN0YXRpb24gRXZpZGVuY2UuIFRoZXkg YXJlOjxicj4NCiZuYnNwOyAmbmJzcDstIEtleSBtYXRlcmlhbCBmb3IgdmVyaWZ5aW5nIHRydXN0 IGluIHRoZSBBdHRlc3Rlcjxicj4NCiZuYnNwOyAmbmJzcDstIEtub3duLWdvb2QvcmVmZXJlbmNl IHZhbHVlcyBmb3IgY29tcGFyaXNvbiB3aXRoIENsYWltcyBpbiB0aGUgQXR0ZXN0YXRpb24gRXZp ZGVuY2U8YnI+DQombmJzcDsgJm5ic3A7LSBTdGF0aWMgaW1wbGljaXQgY2xhaW1zIGZvciB0aGUg cGFydGljdWxhciBBdHRlc3RlciB0aGF0IGFyZSBwYXNzIHRvIHRoZSBSZWx5aW5nIFBhcnR5IGlu IEF0dGVzdGF0aW9uIFJlc3VsdHM8YnI+DQombmJzcDsgJm5ic3A7LSBQb2xpY3kgQ29uZmlndXJh dGlvbjxicj4NCkFueSBvZiB0aGVzZSBmb3VyIGNhbiBjb21lIGZyb20gZWl0aGVyIHRoZSBNYW51 ZmFjdHVyZXIgYXMgTWFudWZhY3R1cmVyIFZlcmlmaWVyIElucHV0IG9yIGZyb20gdGhlIFZlcmlm aWVyIE93bmVyIGFzIE93bmVyIFZlcmlmaWVyIElucHV0LiBUaGV5IGtleSBtYXRlcmlhbCB1c3Vh bGx5IGFsd2F5cyBjb21lcyBmcm9tIHRoZSBtYW51ZmFjdHVyZXIgYW5kIHRoZSBwb2xpY3kgZnJv bSB0aGUgVmVyaWZpZXIgT3duZXIsIGJ1dCB0aGVyZSBpcyBubyBzdHJpY3QNCiByZXF1aXJlbWVu dCBmb3IgdGhpcy4gVGhlIGtub3duLWdvb2QvcmVmZXJlbmNlIHZhbHVlcyBhbmQgc3RhdGljIGlt cGxpY2l0IGNsYWltcyBvZnRlbiBjb21lIGZyb20gZWl0aGVyIG9yIGJvdGguPGJyPg0KVGhlcmUg aXMgbm8gc3RyaWN0IHNlcGFyYXRpb24gYmV0d2VlbiBNYW51ZmFjdHVyZXIgYW5kIFZlcmlmaWVy IE93bmVyLiBUaGV5IGNvdWxkIGJlIHRoZSBzYW1lLiBUaGVyZSBjb3VsZCBhbHNvIGJlIDNyZCBw YXJ0eSBpbnRlcm1lZGlhcmllcyBiZXR3ZWVuIHRoZSBNYW51ZmFjdHVyZXIgYW5kIHRoZSBWZXJp Zmllci48YnI+DQpBbiBFbmRvcnNlbWVudCBpcyBvbmUgZXN0YWJsaXNoZWQgZm9ybWF0IGZvciBz b21lIG9mIHRoZXNlIGlucHV0cy4gSXQgdXN1YWxseSBjb21lcyBmcm9tIGFuIEVuZG9yc2VyIHRo YXQgaXMgdXN1YWxseSB0aGUgTWFudWZhY3R1cmVyLiBJdCBpcyB1c3VhbGx5IGEgc2lnbmVkIGRv Y3VtZW50LiBBbHRlcm5hdGl2ZWx5LCB0aGUgVmVyaWZpZXIgbWF5IHBlcmZvcm0gcXVlcmllcyBh Z2FpbnN0IGEgZGF0YWJhc2UsIHBlcmhhcHMgb25lIG1haW50YWluZWQNCiBieSBhIE1hbnVmYWN0 dXJlciwgdG8gZ2V0IGlucHV0cy4gQWx0ZXJuYXRpdmVseSwgdGhlIHJvb3Qga2V5IG9mIGEga2V5 IGhpZXJhcmNoeSBtYXkgYmUgdHJhbnNmZXJyZWQgaW4gYSBvbmUtdGltZSBwaHlzaWNhbCBjZXJl bW9ueS4gVGhpcyBhcmNoaXRlY3R1cmUgc2V0cyBubyBwcm90b2NvbCBvciBwcm9jZWR1cmUgZm9y IHRoaXMgaW5wdXQuPGJyPg0KVGhlIHRyYW5zZmVyIG9mIGFsbCB0aGVzZSBpbnB1dHMgdG8gdGhl IFZlcmlmaWVyIGRvZXMgbmVlZCB0byBiZSBzZWN1cmVkLiBGb3IgYWxsIGNhc2VzLCBhdXRoZW50 aWNpdHkgb2YgdGhlIE1hbnVmYWN0dXJlciBhbmQgVmVyaWZpZXIgT3duZXIgYW5kIHRoZWlyIGlu cHV0cyBhcmUgcmVxdWlyZWQuIFdpdGhvdXQgYXV0aGVudGljIGlucHV0cywgdGhlIFZlcmlmaWVy IHdpbGwgbm90IGRvIGl0cyBqb2IgY29ycmVjdGx5LiBJbiBzb21lIGNhc2VzIGNvbmZpZGVudGlh bGl0eQ0KIG9mIHRoZSBpbnB1dHMgaXMgcmVxdWlyZWQuIEZpbmFsbHksIGluIHNvbWUgY2FzZXMg dGhlIE1hbnVmYWN0dXJlciBhbmQgVmVyaWZpZXIgT3duZXIgd2lsbCBhdXRoZW50aWNhdGUgdGhl IFZlcmlmaWVyLjxicj4NClRoaXMgYXJjaGl0ZWN0dXJlIHNldHMgbm8gcmVxdWlyZW1lbnQgZm9y IGEgcGFydGljdWxhciBwcm90b2NvbCBvciBzZWN1cml0eSBtZWNoYW5pc20uIEZvciBleGFtcGxl LCBUTFMgY291bGQgYmUgdXNlZCwgYnV0IGl0IGlzIG5vdCB0aGUgb25seSBwcm90b2NvbCB0aGF0 IGNvdWxkIGJlIHVzZWQsPGJyPg0KPGJyPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5PbiBKdW4gMjksIDIwMjAsIGF0IDg6 NTYgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWlsdG86ZHRoYWxlcj00MG1pY3Jvc29m dC5jb21AZG1hcmMuaWV0Zi5vcmciPmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYu b3JnPC9hPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4m bHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3Jn Ij5tYWlsdG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyZn dDsNCiB3cm90ZTo8YnI+DQo8YnI+DQpJIGRvbuKAmXQgbGlrZSB0aGUgdGVybSDigJxWZXJpZmll ciBJbnB1dOKAnSBzaW5jZSDigJxBcHByYWlzYWwgUG9saWN5IGZvciBFdmlkZW5jZeKAnSBpcyBh bHNvIFZlcmlmaWVyIElucHV0LCBzbyBJIHdvdWxkIGZpbmQgaXQgY29uZnVzaW5nLjxicj4NCkkg dGhpbmsgdGhhdCB0aGUgcnVsZXMgZm9yIHdoYXQgdG8gcHV0IGluIEF0dGVzdGF0aW9uIFJlc3Vs dHMgKGJ1bGxldCAzKSwgYXMgd2VsbCBhcyDigJxrbm93bi1nb29kL3JlZmVyZW5jZSB2YWx1ZXPi gJ0gaWYgc3VjaCBleGlzdDxicj4NCihhbmQgdGhlcmUgY2FuIGJlIHZhbGlkIHBvbGljaWVzIHdo ZXJlIHRoZXkgbWF5IG5vdCBleGlzdCwgb3IgcmF0aGVyIHdoZXJlIHRoZSBwb2xpY2llcyB1c2Ug bW9yZSBjb21wbGV4IHJ1bGVzIHRoYW48YnI+DQphIHNpbXBsZSB0ZXN0IGZvciBlcXVhbGl0eSBh Z2FpbnN0IGEgY29uc3RhbnQpIGFyZSBjb25jZXB0dWFsbHkgcGFydCBvZiBBcHByYWlzYWwgUG9s aWN5Ljxicj4NCkkgZG8gYWdyZWUgdGhhdCBBcHByYWlzYWwgUG9saWN5IGNhbiBiZSBjb252ZXll ZCB0byB0aGUgVmVyaWZpZXIgaW4gbWFueSBkaWZmZXJlbnQgd2F5cywgYW5kIG1heSBiZSBjb21w b3NlZDxicj4NCm9mIGRpZmZlcmVudCB0aGluZ3MgZnJvbSBkaWZmZXJlbnQgc291cmNlcy48YnI+ DQpEYXZlPGJyPg0KKkZyb206KlJBVFMgJmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzLWJvdW5jZXNA aWV0Zi5vcmciPnJhdHMtYm91bmNlc0BpZXRmLm9yZzwvYT48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jmx0OzxhIGhyZWY9Im1haWx0bzpyYXRzLWJvdW5j ZXNAaWV0Zi5vcmciPm1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyZndDsqT24g QmVoYWxmIE9mKkxhdXJlbmNlIEx1bmRibGFkZTxicj4NCipTZW50OipNb25kYXksIEp1bmUgMjks IDIwMjAgMTE6MzQgQU08YnI+DQoqVG86KjxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5y YXRzQGlldGYub3JnPC9hPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPm1haWx0bzpyYXRzQGll dGYub3JnPC9hPiZndDs8YnI+DQoqU3ViamVjdDoqW1JhdHNdIFZlcmlmaWVyIElucHV0IGluc3Rl YWQgb2YgRW5kb3JzZW1lbnQ/PGJyPg0KU3RlcHBpbmcgYmFjayBhIGJpdCBvbiB0aGUgZGVmaW5p dGlvbiBvZiBhbiBFbmRvcnNlbWVudCwgSSB0aGluayB0aGUgZm91ciBpbnB1dHMgdG8gYSBWZXJp ZmllciBhcmUgdGhlc2U6PGJyPg0KJm5ic3A7IC0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlpbmcg dHJ1c3QgaW4gdGhlIEF0dGVzdGVyPGJyPg0KJm5ic3A7IC0gS25vd24tZ29vZC9SZWZlcmVuY2Ug dmFsdWVzIGZvciBjb21wYXJpc29uIHdpdGggY2xhaW1zPGJyPg0KJm5ic3A7IC0gU3RhdGljIGlt cGxpY2l0IGNsYWltcyB0aGF0IGFyZSBwYXNzZWQgdG8gUlAncyB2aWEgQXR0ZXN0YXRpb24gUmVz dWx0czxicj4NCiZuYnNwOyAtIEFwcHJhaXNhbCBQb2xpY3k8YnI+DQpUaGVzZSBjYW4gYW5kIHdp bGwgYmUgY29udmV5ZWQgdG8gdGhlIFZlcmlmaWVyIGluIG1hbnkgZGlmZmVyZW50IHdheXM6PGJy Pg0KJm5ic3A7IC0gWC41MDkgY2VydHMgd2l0aCBleHRlbnNpb25zPGJyPg0KJm5ic3A7IC0gU2ln bmVkIGRvY3VtZW50czxicj4NCiZuYnNwOyAtIEhUVFAgcXVlcmllcyBhZ2FpbnN0IHRoZSBBdHRl c3Rlci9kZXZpY2UgbWFudWZhY3R1cmVyPGJyPg0KJm5ic3A7IC0gUmVtb3RlIFNRTCBvciBzb21l IG90aGVyIHNvcnQgb2YgZGF0YWJhc2UgYWNjZXNzIHRvIG1hbnVmYWN0dXJlcihzKTxicj4NCiZu YnNwOyAtIERhdGEgc3RvcmFnZSBsaWtlIGZsYXNoIGRyaXZlcyB0aGUgYXJlIGhhbmQgY2Fycmll ZCBpbnRvIHRoZSBWZXJpZmllcidzIHNpdGU8YnI+DQombmJzcDsgLSBPbmUtdGltZSBzcGVjaWFs IGZpbGUgdHJhbnNmZXJzPGJyPg0KJm5ic3A7IC0gQ2VyZW1vbmlhbCBwcm9jZWR1cmVzIHdpdGgg TSBvdXQgb2YgTiBwZW9wbGUgcGh5c2ljYWwgcHJlc2VudCBhcHByb3ZpbmcgdHJhbnNmZXI8YnI+ DQpJdCBzZWVtcyBsaWtlIHNob2UtaG9ybmluZyBhbGwgb2YgdGhlIGFib3ZlIChleGNlcHQgcG9s aWN5KSBpbnRvIGFuIEVuZG9yc2VtZW50LCBsaWtlIEnigJl2ZSB0cmllZCB0byBkbyAmbHQ7PGEg aHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUy RnB1bGwlMkY5NCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0Nm MTVhY2U2ZThiNGI0NDdlZWJjMDA4ZDgxYzViMWYzMyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3 Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyOTA1MjQ5ODYzNjUwOTgmYW1wO3NkYXRhPTJOa3RQWCUy QjNMSlhqTUVqRUZvTThrcFVJeTZ5T3h0ZSUyQnVoRllyMUVUTjRnJTNEJmFtcDtyZXNlcnZlZD0w Ij5odHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0 cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGYXJjaGl0ZWN0dXJlJTJGcHVs bCUyRjk0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFj ZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAx MWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZhbXA7c2RhdGE9Mk5rdFBYJTJCM0xK WGpNRWpFRm9NOGtwVUl5NnlPeHRlJTJCdWhGWXIxRVRONGclM0QmYW1wO3Jlc2VydmVkPTA8L2E+ Jmd0Ow0KICZuYnNwO2lzIHRvbyBtdWNoLiBJIHRyaWVkIHRoaXMgc2hvZS1ob3JuaW5nIGJlY2F1 c2UgSSB0aGluayB0aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50IG5lZWRzIHRvIGNvdmVyIGFsbCB0 aGlzIGFuZCBFbmRvcnNlbWVudHMgd2FzIHdoYXQgd2FzIGluIGl0LiBBIHR5cGljYWwgRW5kb3Jz ZW1lbnQgc2VlbXMgdG8gYmUganVzdCB0aGUgZmlyc3QgdHdvIG1lbnRpb25lZCwgWC41MDkgYW5k IHNpZ25lZCBkb2N1bWVudHMgZXhwYW5kaW5nIGl0cyBkZWZpbml0aW9uDQogdG8gaW5jbHVkZSBk YXRhYmFzZSBhY2Nlc3MgaXMgYSBzdHJldGNoLjxicj4NClJhdGhlciB0aGFuIGRlZmluaW5nIEVu ZG9yc2VtZW50LCBJ4oCZZCBsaWtlIHRvIGRlZmluZSBWZXJpZmllciBJbnB1dDo8YnI+DQombmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICoqKioqKioqKioqKioqKioqKiogJm5ic3A7 ICoqKioqKioqKioqKiAmbmJzcDsgJm5ic3A7ICoqKioqKioqKioqKioqKio8YnI+DQombmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICogTWFudWZhY3R1cmVyKHMpICogJm5ic3A7ICog VmVyaWZpZXIgKiAmbmJzcDsgJm5ic3A7ICogUmVseWluZyBQYXJ0eSo8YnI+DQombmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICoqKioqKioqKioqKioqKioqKiogJm5ic3A7ICogJm5i c3A7T3duZXIgJm5ic3A7ICogJm5ic3A7ICZuYnNwOyAqICZuYnNwO093bmVyICZuYnNwOyAmbmJz cDsgJm5ic3A7ICo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7KioqKioqKioqKioqICZuYnNwOyAmbmJzcDsgKioqKioqKioqKioqKioq Kjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDtWZXJpZmllciBJbnB1dHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fEFwcHJhaXNhbCAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3xQb2xp Y3kgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO3xmb3IgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7fCBBcHByYWlzYWw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fEV2aWRlbmNlICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyB8IFBvbGljeSBmb3I8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IHwgQXR0ZXN0YXRpb248YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7UmVzdWx0PGJy Pg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt2ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwO3YgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOy4tLS0tLS0t LS0tLS0tLS0tLS4gJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3w8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgLi0tLS0tJmd0O3wgJm5ic3A7ICZuYnNwOyBWZXJpZmllciAmbmJzcDsgJm5ic3A7 fC0tLS0tLS4gJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNw OyctLS0tLS0tLS0tLS0tLS0tLScgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO0F0dGVzdGF0 aW9ufCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO1Jlc3VsdHMgJm5i c3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCBFdmlkZW5jZSAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB2 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB2PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7IC4tLS0tLS0tLS0tLiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Li0tLS0tLS0tLS0tLS0tLS0t Ljxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8IEF0dGVzdGVyIHwgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwO3wgUmVseWluZyBQYXJ0eSAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj4nLS0tLS0tLS0tLScgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyfigJTigJTigJTigJTigJTigJTigJTi gJTigJg8YnI+DQo8YnI+DQpFbmRvcnNlbWVudHMgbXVzdCBzdGlsbCBiZSBtZW50aW9uZWQsIGJ1 dCBhcyBvbmUgZm9ybSBvZiBWZXJpZmllciBpbnB1dCBqdXN0IGxpa2UgRUFUIGlzIG9uZSBmb3Jt IG9mIEF0dGVzdGF0aW9uIEV2aWRlbmNlLjxicj4NClZlcmlmaWVyIElucHV0IHdvdWxkIGJlIGRl ZmluZWQgYXM6PGJyPg0KJm5ic3A7IC0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlpbmcgdHJ1c3Qg aW4gdGhlIEF0dGVzdGVyPGJyPg0KJm5ic3A7IC0gS25vd24tZ29vZC9SZWZlcmVuY2UgdmFsdWVz IGZvciBjb21wYXJpc29uIHdpdGggY2xhaW1zPGJyPg0KJm5ic3A7IC0gU3RhdGljIGltcGxpY2l0 IGNsYWltcyB0aGF0IGFyZSBwYXNzZWQgdG8gUlAncyB2aWEgQXR0ZXN0YXRpb24gUmVzdWx0czxi cj4NClRvIGRvIHRoaXMsIEnigJlkIHJlcGxhY2UgdGhlIGN1cnJlbnQgUFIgJmx0OzxhIGhyZWY9 Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRw cyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZhcmNoaXRlY3R1cmUlMkZwdWxs JTJGOTQmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1YWNl NmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDEx ZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2MzY1MDk4JmFtcDtzZGF0YT0yTmt0UFglMkIzTEpY ak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+aHR0 cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNB JTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRnB1bGwlMkY5 NCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NmMTVhY2U2ZThi NGI0NDdlZWJjMDA4ZDgxYzViMWYzMyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3 JTdDMSU3QzAlN0M2MzcyOTA1MjQ5ODYzNjUwOTgmYW1wO3NkYXRhPTJOa3RQWCUyQjNMSlhqTUVq RUZvTThrcFVJeTZ5T3h0ZSUyQnVoRllyMUVUTjRnJTNEJmFtcDtyZXNlcnZlZD0wPC9hPiZndDsm bmJzcDthbmQNCiBpc3N1ZSAmbHQ7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYt cmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRmlzc3VlcyUyRjY1JmFtcDtkYXRhPTAyJTdDMDElN0Nk dGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMz JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4 NjM3NTA5MiZhbXA7c2RhdGE9R2ZNNXFFbE80dGVOZGpmQUJsbVZheWVHWHVZSFdCRHFIVFZ0cGVl ZXc3ZyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlv bi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13 ZyUyRmFyY2hpdGVjdHVyZSUyRmlzc3VlcyUyRjY1JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVy JTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM3NTA5 MiZhbXA7c2RhdGE9R2ZNNXFFbE80dGVOZGpmQUJsbVZheWVHWHVZSFdCRHFIVFZ0cGVlZXc3ZyUz RCZhbXA7cmVzZXJ2ZWQ9MDwvYT4mZ3Q7Jm5ic3A7SQ0KIGhhdmUgb24gRW5kb3JzZW1lbnRzIHdp dGggYSBuZXcgUFIuIEl0IHdpbGwgYmUgYSBmYWlyIGJpdCBvZiB3b3JrLCBzbyBJIHdhbnQgdG8g c2VlIGlmIHRoZXJlIGlzIHNvbWUgY29uc2Vuc3VzIGZpcnN0Ljxicj4NCkxMPGJyPg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpSQVRTIG1haWxp bmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj5SQVRTQGlldGYub3Jn PC9hPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7 PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPm1haWx0bzpSQVRTQGlldGYub3JnPC9hPiZn dDs8YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Jh dHMiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvYT48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OyxzYW5zLXNlcmlmIj5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxicj4NClJBVFMgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0 Zi5vcmciPlJBVFNAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3JhdHM8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpSQVRTIG1haWxpbmcgbGlzdDxi cj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+UkFUU0BpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFu PjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cyI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVv dDssc2Fucy1zZXJpZiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRz PC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KSU1Q T1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2ht ZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg aW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBp bmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_AM6PR08MB34297526F7AC5A7EEC988A37EF6A0AM6PR08MB3429eurp_-- From nobody Fri Jul 3 08:06:27 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E9FF3A095D for ; Fri, 3 Jul 2020 08:06:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=k4gB+/X7; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=k4gB+/X7 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id auI7laB2l4NP for ; Fri, 3 Jul 2020 08:06:20 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40084.outbound.protection.outlook.com [40.107.4.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE67B3A07B3 for ; Fri, 3 Jul 2020 08:06:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iPzFUusCOnr7BSe26WvMIha7zOgcDgS2PL2thX2paOE=; b=k4gB+/X7x5yRa9fKWM2FIeJfxEkG0sb6v6B9Nykz45z7Pl2E5WL9wCK7nEeBwSshUQoD2xa1qwBHFA0L1WEWQok2znbLCX3IqRWG3zig7qQ9UZPSiQHoFUkCznqpSN078BcjmMnELJRxta7/XWjUiPgHSGauVeujuZh24z+JQ+M= Received: from AM6PR10CA0059.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:209:80::36) by DB7PR08MB3753.eurprd08.prod.outlook.com (2603:10a6:10:7e::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.28; Fri, 3 Jul 2020 15:06:16 +0000 Received: from AM5EUR03FT018.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:80:cafe::7e) by AM6PR10CA0059.outlook.office365.com (2603:10a6:209:80::36) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.22 via Frontend Transport; Fri, 3 Jul 2020 15:06:16 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT018.mail.protection.outlook.com (10.152.16.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Fri, 3 Jul 2020 15:06:16 +0000 Received: ("Tessian outbound b8ad5ab47c8c:v62"); Fri, 03 Jul 2020 15:06:16 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 9151ad8c5490f02a X-CR-MTA-TID: 64aa7808 Received: from 027f132e0abb.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 5631ACDE-80C2-4DAD-887E-A07EF77D87B4.1; Fri, 03 Jul 2020 15:06:10 +0000 Received: from EUR02-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 027f132e0abb.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 03 Jul 2020 15:06:10 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=k7H/UTDCzYfBbHthMfEaPsTAONV9yP+S+rjEC2PrCVeq36r1AWAm07chPFft9Le5d3IaR8nImJhO6EPEIq4YCDLTPJ671Kb+o2tQi/7luRHDB4LXUf2FI63l8cvg/QujkZcm/IZSupqHoz3QLWVVsS2bjTMXEnqI4v8Hl2BOHq7PCgOSglGgyiVZCB80qZPspcvB7yjBHROtM2V1Wk4qTqo7jTHQ8hiNYjTjwFR/TQ8Zcy2Z4r6GGFVuvha7qkd/xGeNnF+UDrcOW3AEGL2zUzs/o/DNSmal8odLvkwBWOeIV3HZKbtbwE4Glt/OlvwhfvnXCFcFpCiZiKlEGee9pQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iPzFUusCOnr7BSe26WvMIha7zOgcDgS2PL2thX2paOE=; b=Mtj3Rs3AdeikyYLUVa9OZXe5nFDZYIm035UbLiCM8toguybvPtKrzih04wBtrIifp79qzIDDHgC0vFhNkqymYO/mDBK2sH1s9e/40MVwf5+3NrP3bTDoMrwjOCtthmceqqmnh69PqDD85UZ22oioK/kne4r6CpRD3ok0tI9gsNUjBfhZzrFF24PQRrB9s5M+AqVrVqqK32iig0ETqTObyg1KFWvLqmpMSXR4IGLTPrQ3lGRu+TB2JFvn1Mo/ztcZSy5DEmt/WpRqA1CjYFbDe6MnFuQuY+FUaE4RboXWq7wvkVNPtV0n2dsdo4AdQp/AqiZiVvD90rJjsH4b9Zhb3Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=iPzFUusCOnr7BSe26WvMIha7zOgcDgS2PL2thX2paOE=; b=k4gB+/X7x5yRa9fKWM2FIeJfxEkG0sb6v6B9Nykz45z7Pl2E5WL9wCK7nEeBwSshUQoD2xa1qwBHFA0L1WEWQok2znbLCX3IqRWG3zig7qQ9UZPSiQHoFUkCznqpSN078BcjmMnELJRxta7/XWjUiPgHSGauVeujuZh24z+JQ+M= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3877.eurprd08.prod.outlook.com (2603:10a6:20b:88::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.27; Fri, 3 Jul 2020 15:06:09 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.028; Fri, 3 Jul 2020 15:06:09 +0000 From: Thomas Fossati To: Kathleen Moriarty , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] RATS Architecture continued Thread-Index: AQHWMGWdazT03iq/bECLJLRetgUHcajx0wwAgARz4gA= Date: Fri, 3 Jul 2020 15:06:08 +0000 Message-ID: <3CEB77DD-7E4E-4492-B14B-82A5CB5152A2@arm.com> References: <52EC2B8C-578E-49E5-ADBD-037B5F3738FF@arm.com> In-Reply-To: <52EC2B8C-578E-49E5-ADBD-037B5F3738FF@arm.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: eb5ae315-6c9c-4b10-6693-08d81f62a263 x-ms-traffictypediagnostic: AM6PR08MB3877:|DB7PR08MB3753: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7219;OLM:10000; x-forefront-prvs: 045315E1EE X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: aOS/H+FuxBM1mRAR3nl4JQqTNcJ+SQUGOk40+Og1QlQ6q5MxP5v1XrwwLX8DaiYkFpSEYK1igWfyKmBackZpPmuNeKIAE8DLDP9Rbe6ld58KjSrZmjEWi75DtFWLwKI6pcxDpOJpVeEnpLy6zVziKDcoctQkR+mUSlElHBZ4x+REpJfVG0KkpF78sEZ2cp1GEdJoHvjxcTSdmwjMVfcNg5AsX1A+icFdfOdaYsat8KkZRrgHSDZjov64GmT4Sr5SGuV8+4StyOkBZ82Wxq27oIl0Aj0JduV59WNqx16YkNrOpgj8hyLqQbqZUVL1AO4mMAdjz9oTq+olODxvR2mxsWfzc18ljfNPgj/56IvPoh5kVNzxB8/apASefNEtbrmZMYQA4s1Okd8ry6JyXpGAog== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(396003)(376002)(39860400002)(346002)(4744005)(186003)(36756003)(91956017)(6506007)(26005)(76116006)(71200400001)(6512007)(4326008)(6486002)(2616005)(66556008)(64756008)(66446008)(2906002)(33656002)(66946007)(66476007)(5660300002)(316002)(966005)(478600001)(110136005)(86362001)(8936002)(8676002)(83380400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: AqWAQlS3w9VFNcT24+WrvmTBTbMpP6VL3Vet3eo4Yol43VOz/a7SNt2GPiiAYRZYBj58Q9jx5RLmckzBC1mvhVdE30USrm1EmHcWlqsLs/3pO9FE4OUGYH+d/Kg67CATt9EpJwQ9lpBuu5fkfxLZvd0/2+Uw1F+2g6n5WcB+qeySESTKmWZ1023HgxBnICmDzOOlI2ugOaXAAppHvxof3zxqjl8TC1b2m1mv0FgvoyoQ5jVZ+JaNPSjK5FWZ1/D/sHOXtwAaUJYLZJfxl4WyGRze2GfE+Td8RHJ6Gp0drFPAYuRKn+pM2KrcV0GQCAxA+oJAkFUy/K3dIkfncpLDjoSD9FlKGcgWiN1Li3ypT/gH0gniMUT5ExyTHX9cGAlZ9oBuKZILP2wSLof6tshj/4Q2cWsbgRevYJ1KlCFyTY0VmYH8QqSTGdPqSXxxvG0W/m8j51VQ0yy2fMPIbGq8w6khePBd1ZG2fUY/ldGEP/A= Content-Type: text/plain; charset="utf-8" Content-ID: <40A0F3E69DD70C44BAD0500D66754CD5@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3877 Original-Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT018.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(136003)(346002)(376002)(39860400002)(46966005)(4744005)(186003)(36756003)(6506007)(26005)(336012)(47076004)(82310400002)(356005)(6512007)(81166007)(4326008)(6486002)(2616005)(2906002)(33656002)(70586007)(70206006)(5660300002)(316002)(966005)(478600001)(110136005)(86362001)(8936002)(82740400003)(8676002)(36906005)(83380400001); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: b44221ee-5c4e-4360-8b87-08d81f629df6 X-Forefront-PRVS: 045315E1EE X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: NgKQ8O3TLCxrTwyKKYcaGrtuHOCyw5NzeF+FxywV6epCJXL+AnZSd/fhHPz63iP/7at8xW59ZLuwZxqsscCE8BAIJJKizWOzXt4jyWm+2AHRm9TKQv74kct4Ditz+rDAXo9GN8iynWkvkX2hiBOATsmdb1bPqd/ThvveogtOUpWt10ZDh4l0B0rmXK7EBA4S4ep1EhfEZ/S5y0RpCPa6hSlAUwd/7WhWPULL2oyA9cE/WbQX9Idu6aPwyVcCjUdNXEgRnEfvaVynGkeatHS52QVPFANEm7CiGA4nzTFwSWbglTjwcjFRM1slnS6Zzbh3XWnZEOC4F52CTx0r08gZHo4/8ZLzwM93sx1JrNsGWH31IP/5uFj0l3llJ8Ubo6KptMJeXh+gOZ4/RvWzS9HeS2oTlYwWqTwNIgRFFNGDYIKXU/Nxn390aloDZg6Hi69ju+Vu478mVpV/eJL6I4AnvECwlVBLNaLDlFrhwUZD7R8= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2020 15:06:16.4064 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: eb5ae315-6c9c-4b10-6693-08d81f62a263 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT018.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3753 Archived-At: Subject: Re: [Rats] RATS Architecture continued X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 15:06:25 -0000 SGkgS2F0aGxlZW4sDQoNClRvZGF5LCB3aGlsZSBwcm9jZXNzaW5nIHRoZSBQUnMgYXNzb2NpYXRl ZCB3aXRoIHBhcnQgMiBvZiB5b3VyIHJldmlldywNCndlIGJsb2NrZWQgb24gdGhlIHByb3Bvc2Vk IGNoYW5nZXMgdG8gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zDQpzZWN0aW9uOg0KDQogICAg aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy13Zy9hcmNoaXRlY3R1cmUvcHVsbC8xMjINCg0K YXMgaXQgY2hhbmdlcyB0aGUgcmVxdWlyZW1lbnRzIG9uIGNvbnZleWFuY2UgLSBhZGRpbmcgY29u ZmlkZW50aWFsaXR5DQphbmQgYXZhaWxhYmlsaXR5Lg0KDQpXZSB0ZW50YXRpdmVseSBhc3NpZ25l ZCB0aGUgUFIgdG8gYSBAS01FIGFjY291bnQsIGJ1dCB3ZSBhcmUgbm90DQplbnRpcmVseSBzdXJl IGl0J3MgeW91cnMgOi0pICBDYW4geW91IGhhdmUgYSBsb29rIHBsZWFzZT8NCg0KY2hlZXJzIQ0K DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0 dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkg b3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Fri Jul 3 11:33:56 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C453A3A0D33 for ; Fri, 3 Jul 2020 11:33:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R9eyLp55o06V for ; Fri, 3 Jul 2020 11:33:53 -0700 (PDT) Received: from mail-vs1-xe35.google.com (mail-vs1-xe35.google.com [IPv6:2607:f8b0:4864:20::e35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACB333A0D32 for ; Fri, 3 Jul 2020 11:33:53 -0700 (PDT) Received: by mail-vs1-xe35.google.com with SMTP id o15so17527188vsp.12 for ; Fri, 03 Jul 2020 11:33:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=o5yM9wYKR+q5EirDe/7gHFFLT50Sd5DY0srDoSkRYTk=; b=RzPSvoCnf77nuiuw/L/NP5GkW5ExRXxUu5jTvvsaoAoiDbDYgK1QOoEFYG1nDz6eYx BoGJFc6pQMAinwdPkgcEOrplAj93xjJpL6O4GxmGhDigWTaxrS0o5DMAC7cYnYO9OVDn ACQu6Plxeh9LomYsPOQjs0WB9SDEVMSupwOGBnacEnFXOu1HEFKnub2JfxMmK7YfmX6w CnI3yYFVwvzDfKcnGSF7o1ymeUrYLYG/cdgU7ms8QMY1+/lD5cVXD9rEGDW8pjtP3kpB XHuVU6Naf8gZXiK1j/Tl2qyPBZF/s/n7UGayAo5IAFq6rxNoVEDnGuKjiKLkVL/KF6w0 BQcA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=o5yM9wYKR+q5EirDe/7gHFFLT50Sd5DY0srDoSkRYTk=; b=qnyfSJm87AooEeBPDCf+887KLJvZcrVu7+tm2vS++IoBvF6YKg8PuTaEAgYQgH9TGn JyBQu4vvN959ijWbHij+cRVarQMhUQYX+vIrUrKMbU0VukkegqaHlQQHvVmf5OlEgw+5 FgCq0eVWWoZiMejjb4wny1XBTRVD8Z2n/LkUiAHThL7y0x+ujWGg0vyM6+0i8HKRLaqF k66WUbumzH9b3XPCm013stJUkHttsFvbaEe7HfGI7/DICteYk2uKg4fYXD8QfN3iY4Fj 7WOjbNhHPSZ1/TQiE8DYFVKPbeJRqyv8+4J3w1voyiW6yphWHnxV9p8qQapAuzZU23SR paYQ== X-Gm-Message-State: AOAM532w3n8Zp6cNNdfTdPera0iySt1YkgKJ4czH+wJcRERMp2TVtUyc 9uQRlm9LEAsLaPdnKM8RYxxjDNNg7cROnxjEnM0= X-Google-Smtp-Source: ABdhPJwcOWhrca3EAmZeWdBUzhbe96MM9KupvC7d6yv3N9qX/ayI0HFLXWZLH4Tnb1qGijQN00TmtOq0iRrq4Ftpm7Q= X-Received: by 2002:a67:f3cd:: with SMTP id j13mr25775195vsn.40.1593801232548; Fri, 03 Jul 2020 11:33:52 -0700 (PDT) MIME-Version: 1.0 References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> In-Reply-To: <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> From: Ira McDonald Date: Fri, 3 Jul 2020 14:33:39 -0400 Message-ID: To: Thomas Fossati , Ira McDonald Cc: Michael Richardson , "rats@ietf.org" Content-Type: multipart/alternative; boundary="0000000000004f07e205a98dc48d" Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jul 2020 18:33:56 -0000 --0000000000004f07e205a98dc48d Content-Type: text/plain; charset="UTF-8" Hi Thomas, +1 Only the Attester (with advice from the real human owner/user and/or system administrator) can decide what is actually PII. Various standards and regulations have failed miserably to crisply define what is PII. Cheers, - Ira *Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG* *Co-Chair - TCG Metadata Access Protocol SG* *Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working GroupCo-Chair - IEEE-ISTO PWG Internet Printing Protocol WGIETF Designated Expert - IPP & Printer MIBBlue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434* On Fri, Jul 3, 2020 at 5:21 AM Thomas Fossati wrote: > Hi Michael, > > Thanks for raising and articulating this point. > > On 01/07/2020, 02:54, "Michael Richardson" wrote: > > I had asked in my aside, if the *ARCHITECTURE* document should create > > a requirement on Evidence (such as EAT) that it should *explicitly* > > flag when it contains PII. > > > > [...] > > > > So part of my question was should we debate this now, and make this an > > architectural requirement for all containers? > > Personally, I am not convinced that an in-band pii flag is needed. > > On the Attester side, the privacy problem can be addressed by an > attestation API that allows the caller to selectively turn off claims > that are PII -- either with per-claim switches, or by presenting > pre-canned PII-revealing and PII-hiding interfaces to the Evidence > generation service. We expect the attesting endpoint to make the right > decision about what can be hidden and what needs to be revealed > depending on context. > > On the Verifier side, I'd expect that the log/audit anonymisation and > retention policies for Evidence are an integral part of the service > configuration. So, no need for an in-band signal about what is to be > considered PII since the Verifier is going to be made aware of it by > some out-of-band means. > > That leaves the RP, which I'm not fully sure about. However, my gut > feeling is that the Attester will have to trust the RP to do the right > thing since no in-band pii flag will ever be able to restrict what a > malicious RP can do with the obtained PII. > > Am I missing anything? > > cheers, t > > PS: Maybe there is a requirement for EAT profiles to specify in their > privacy considerations what claims are PII and what is the expected > treatment by actors in the attestation chain. This is EAT's job, not at > the architecture doc level though. > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --0000000000004f07e205a98dc48d Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Thomas,

+1

=
Only the Attester (with advice from the real human owner/user an= d/or system
administrator) can decide what is actually PII.=C2=A0= Various standards and regulations
have failed miserably to crisp= ly define what is PII.

Cheers,
- Ira

<= div dir=3D"ltr">
= Ira McDonald (Musician / Software Architect)
Co-Chai= r - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
S= ecretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Inte= rnet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB=
Blue Roof Music / High North Inc
http:/= /sites.google.com/site/blueroofmusic
htt= p://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(per= manent) PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434
<= /div>


On Fri, Jul 3, 2020 at 5= :21 AM Thomas Fossati <Thomas.= Fossati@arm.com> wrote:
Hi Michael,

Thanks for raising and articulating this point.

On 01/07/2020, 02:54, "Michael Richardson" <mcr+ietf@sandelman.ca> wr= ote:
> I had asked in my aside, if the *ARCHITECTURE* document should create<= br> > a requirement on Evidence (such as EAT) that it should *explicitly* > flag when it contains PII.
>
> [...]
>
> So part of my question was should we debate this now, and make this an=
> architectural requirement for all containers?

Personally, I am not convinced that an in-band pii flag is needed.

On the Attester side, the privacy problem can be addressed by an
attestation API that allows the caller to selectively turn off claims
that are PII -- either with per-claim switches, or by presenting
pre-canned PII-revealing and PII-hiding interfaces to the Evidence
generation service. We expect the attesting endpoint to make the right
decision about what can be hidden and what needs to be revealed
depending on context.

On the Verifier side, I'd expect that the log/audit anonymisation and retention policies for Evidence are an integral part of the service
configuration.=C2=A0 So, no need for an in-band signal about what is to be<= br> considered PII since the Verifier is going to be made aware of it by
some out-of-band means.

That leaves the RP, which I'm not fully sure about.=C2=A0 However, my g= ut
feeling is that the Attester will have to trust the RP to do the right
thing since no in-band pii flag will ever be able to restrict what a
malicious RP can do with the obtained PII.

Am I missing anything?

cheers, t

PS: Maybe there is a requirement for EAT profiles to specify in their
privacy considerations what claims are PII and what is the expected
treatment by actors in the attestation chain.=C2=A0 This is EAT's job, = not at
the architecture doc level though.

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--0000000000004f07e205a98dc48d-- From nobody Sat Jul 4 10:22:41 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FF933A0E1F for ; Sat, 4 Jul 2020 10:22:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.505 X-Spam-Level: X-Spam-Status: No, score=0.505 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, NO_PRESCRIPTION=2.399, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g5ZzUyfaIppd for ; Sat, 4 Jul 2020 10:22:36 -0700 (PDT) Received: from p3plsmtpa08-01.prod.phx3.secureserver.net (p3plsmtpa08-01.prod.phx3.secureserver.net [173.201.193.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06CCD3A0E1E for ; Sat, 4 Jul 2020 10:22:35 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id rls1jGqP94tskrls1jk2dH; Sat, 04 Jul 2020 10:22:35 -0700 X-CMAE-Analysis: v=2.3 cv=GpE8BX9C c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=7CQSdrXTAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=yMhMjlubAAAA:8 a=Nlh0hQdGS73gP5f4Y4UA:9 a=_gRn9IJt0Yh9vNxn:21 a=JwPIEchKPbOZoPTf:21 a=QEXdDO2ut3YA:10 a=Tl3VWRTZ_oGYwopxVTAA:9 a=o8wvB9hyJr2G30JS:21 a=ESj1I3V4_AjgeYyA:21 a=3kMsuCTIsplRn1iu:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <663F1B08-930B-4D9E-BC80-9D281688B550@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_0B64DFBB-931C-44EA-96A7-B693F45B915C" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) Date: Sat, 4 Jul 2020 10:22:32 -0700 In-Reply-To: Cc: Henk Birkholz , Dave Thaler , "rats@ietf.org" To: Simon Frost References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfLZ2NEInijg+y5OccAXJpGFF0LCSPq8hfKwYixbyiFPHkMqkZbRI5mIt5BuGE0XXSu6TRfuBMp5vsVSDTrT+GMEDqrfJOi7YHlcMzSky2xCJ6U5JRdAM tDxW3cxSuVRIYdTitD9LOY2jjBpb8jZD5q7ZnpqCD+0FzUE8hfYR5/cORO9Ku92X82EREWLMs0rHAKj+w3aROJmMv1fyK+3jYPqzUCdS6eRwOd0L503M6k31 zt6Ysk/pg0l5Ub9aFTrjv7qkgAqKMzD6hIKPr9oMFzt9C68eVdBFXZQnvmxpS8gqbz8eYsple69pJ9aSiFTpOQ== Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jul 2020 17:22:39 -0000 --Apple-Mail=_0B64DFBB-931C-44EA-96A7-B693F45B915C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Simon, Appreciate you jumping in here.=20 > On Jul 3, 2020, at 2:28 AM, Simon Frost wrote: >=20 > I=E2=80=99ve just tried to catch up on the thinking on this via this = thread and github#94 and realise that the conversation has become highly = detailed and that some very precise definitions are emerging for = concepts that originally were quite general (e.g. endorsement). Perhaps = there=E2=80=99s a risk that the architecture may be overly constraining = as a result. I am after greater generality (and clarity) than I think we have now = with Endorsements. Endorsements are (in my understanding) a somewhat = specific representation of data and protocol.=20 I am giving a lot of examples to try to communicate clearly, no to = specify anything. I would like the list-of-four in the document because I think it is = highly informative (even Henk=E2=80=99s thinks they are so), but not as = a prescription or requirement.=20 > =20 > Trying to avoid using any term that may now be overloaded=E2=80=A6 > It seems that the important information to capture is that the = Verifier is a means of providing transitive trust between the relying = party and a potentially complex Supply Chain from which the attesting = endpoint originated. The RP to Verifier relationship must be securable = and trustworthy in some achievable way such that an RP can trust the = attestation results received. Similarly that creates an expectation that = the Verifier has established securable & trustworthy relationships with = the supply chain in order to receive appropriate proofs / testimonies of = items that the Verifier can identify within the attestation evidence. = The Verifier to Supply Chain relationships aren=E2=80=99t just = technical, they require contractual relationships as well which can = bring a strong influence into the details of how the information gets to = the Verifier. If we have the relationships sketched out and an = exploration of the types of information that may be required, is it = necessary to go into further detail? I think this is a possible approach. To take this, I think Endorsements = have to be either removed or redefined in some very general way to = side-step the ideas people have about them. LL > =20 > Thanks > Simon > =20 > From: Laurence Lundblade >=20 > Sent: 02 July 2020 18:52 > To: Henk Birkholz > > Cc: Dave Thaler >; rats@ietf.org = > Subject: Re: [Rats] Verifier Input instead of Endorsement? > =20 > =20 > On Jul 2, 2020, at 6:31 AM, Henk Birkholz = > wrote: > =20 > Hi Laurence, >=20 > while I think that I understand where you are coming from here, I have = to say that I also think that: >=20 > * "manufacturer(s)" is a too arbitrarily restricting term, which is = why we agreed on endorser > =20 > The problem with Endorser is that they produce Endorsements and I = think there are problems with Endorsements: > - In Berlin you told me they don=E2=80=99t have keys in them. So then = how do keys get into the Verifier? > - Endorsements seem to be small signed documents of attributes so = they=E2=80=99re not so good for: > - Representing a database of millions of keys > - Representing HTTP access to a manufacturers database of = known-good/reference values > - One-time physical / ceremonial transfer of a root key > - Endorsements seem like a somewhat narrowed, specific way of = providing verifier input > - Endorsements imply signing as the security mechanism, which is too = narrow. > =20 > Maybe we can find a term other than manufacturer? What I want to = avoid is the general use of the term Endorsement for the above reasons. = Using the term Endorsement to me is like using the protocol-specific = term EAT instead of conceptual term Attestation Evidence. Use of the = term Endorser implies Endorsement, but maybe it is OK if we don=E2=80=99t = use the term Endorsement. >=20 >=20 > * every arrow is of course "input/output", but we are not calling = evidence "Attester Output". So, Verifier Input is in contrast a too = ambiguous category (it does not add any semantics to the arrow) > =20 > Maybe the non-specificity of =E2=80=9CVerifier Input=E2=80=9D seems = useful? It allows the list of four (keys, ref values, static claims, = policy) to be used and for them to be variable. It is just a grouping. > =20 > Maybe we can find a better term? Here=E2=80=99s a few: > Verifier Criteria > Verifier Data > Attester Verification Criteria > Attester Trust Materials > =20 >=20 >=20 > * the itemized list that starts with key material provides a very = intuitive example and maybe we could use that kind of list as a more = prominent example in the arch I-D > =20 > I=E2=80=99d prefer the list of four to be explicit architecture, not = just an example. >=20 >=20 >=20 > The question, if reference values are endorsements or appraisal = policies or a third item is... probably okay and I am interested in an = answer - but that is a detail, I think. As long as they are also = mentioned, I can follow all three lines of thought. > =20 > We should assume our audience knows little to nothing about TCG work = (like me) and little about attestation, so I=E2=80=99d prefer they not = be details, but rather up front and clear. >=20 >=20 >=20 > Also, I am in strong doubt that the following statement is always = correct: "The transfer of all these inputs to the Verifier does need to = be secured.". I am confused by the exceptions that follow that statement = which basically say, I think: in some cases they have to be secured. = Maybe we mean different things by "secured"? > =20 > Let me try again: > - The Verifier must always establish the authenticity of the = Manufacturer > - All input from the Manufacturer must be integrity protected > - The Verifier must always establish the authenticity of the Verifier = Owner > - All input from the Verifier Owner must be integrity protected > - In some cases the Manufacturer may wish to establish the = authenticity of the Verifier before giving inputs > - In some cases the Owner may wish to establish the authenticity of = the Verifier before giving inputs > - In some cases confidentiality of the inputs is required > =20 > LL > =20 >=20 >=20 >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 02.07.20 03:46, Laurence Lundblade wrote: >=20 > Here=E2=80=99s rough proposed text and diagram. Not sure where it = would go in the doc yet. > LL > ******************* ************ **************** > * Manufacturer(s) * * Verifier * * Relying Party* > ******************* * Owner * * Owner * > | ************ **************** > | | | > Manufacturer | | | > Verifier | |Owner | > Input | |Verifier | > | |Input | Appraisal > | | | Policy for > | | | Attestation > | | | Result > v v | > .-----------------. | > .----->| Verifier |------. | > | '-----------------' | | > | | | > | Attestation| | > | Results | | > | Evidence | | > | | | > | v v > .----------. .-----------------. > | Attester | | Relying Party | > '----------' '=E2=80=94=E2=80=94=E2=80=94=E2= =80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=98 > Conceptually there are four main inputs to the Verifier aside from the = Attestation Evidence. They are: > - Key material for verifying trust in the Attester > - Known-good/reference values for comparison with Claims in the = Attestation Evidence > - Static implicit claims for the particular Attester that are pass = to the Relying Party in Attestation Results > - Policy Configuration > Any of these four can come from either the Manufacturer as = Manufacturer Verifier Input or from the Verifier Owner as Owner Verifier = Input. They key material usually always comes from the manufacturer and = the policy from the Verifier Owner, but there is no strict requirement = for this. The known-good/reference values and static implicit claims = often come from either or both. > There is no strict separation between Manufacturer and Verifier Owner. = They could be the same. There could also be 3rd party intermediaries = between the Manufacturer and the Verifier. > An Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input. > The transfer of all these inputs to the Verifier does need to be = secured. For all cases, authenticity of the Manufacturer and Verifier = Owner and their inputs are required. Without authentic inputs, the = Verifier will not do its job correctly. In some cases confidentiality of = the inputs is required. Finally, in some cases the Manufacturer and = Verifier Owner will authenticate the Verifier. > This architecture sets no requirement for a particular protocol or = security mechanism. For example, TLS could be used, but it is not the = only protocol that could be used, >=20 > On Jun 29, 2020, at 8:56 PM, Dave Thaler = = >> wrote: >=20 > I don=E2=80=99t like the term =E2=80=9CVerifier Input=E2=80=9D since = =E2=80=9CAppraisal Policy for Evidence=E2=80=9D is also Verifier Input, = so I would find it confusing. > I think that the rules for what to put in Attestation Results (bullet = 3), as well as =E2=80=9Cknown-good/reference values=E2=80=9D if such = exist > (and there can be valid policies where they may not exist, or rather = where the policies use more complex rules than > a simple test for equality against a constant) are conceptually part = of Appraisal Policy. > I do agree that Appraisal Policy can be conveyed to the Verifier in = many different ways, and may be composed > of different things from different sources. > Dave > *From:*RATS = >>*On Behalf = Of*Laurence Lundblade > *Sent:*Monday, June 29, 2020 11:34 AM > *To:*rats@ietf.org > > *Subject:*[Rats] Verifier Input instead of Endorsement? > Stepping back a bit on the definition of an Endorsement, I think the = four inputs to a Verifier are these: > - Key material for verifying trust in the Attester > - Known-good/Reference values for comparison with claims > - Static implicit claims that are passed to RP's via Attestation = Results > - Appraisal Policy > These can and will be conveyed to the Verifier in many different ways: > - X.509 certs with extensions > - Signed documents > - HTTP queries against the Attester/device manufacturer > - Remote SQL or some other sort of database access to = manufacturer(s) > - Data storage like flash drives the are hand carried into the = Verifier's site > - One-time special file transfers > - Ceremonial procedures with M out of N people physical present = approving transfer > It seems like shoe-horning all of the above (except policy) into an = Endorsement, like I=E2=80=99ve tried to do = > is too much. I tried this = shoe-horning because I think the architecture document needs to cover = all this and Endorsements was what was in it. A typical Endorsement = seems to be just the first two mentioned, X.509 and signed documents = expanding its definition to include database access is a stretch. > Rather than defining Endorsement, I=E2=80=99d like to define Verifier = Input: > ******************* ************ **************** > * Manufacturer(s) * * Verifier * * Relying Party* > ******************* * Owner * * Owner * > | ************ **************** > | | | > Verifier Input| | | > | |Appraisal | > | |Policy | > | |for | Appraisal > | |Evidence | Policy for > | | | Attestation > | | | Result > v v | > .-----------------. | > .----->| Verifier |------. | > | '-----------------' | | > | | | > | Attestation| | > | Results | | > | Evidence | | > | | | > | v v > .----------. .-----------------. > | Attester | | Relying Party | > '----------' '=E2=80=94=E2=80=94=E2=80=94=E2= =80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=98 >=20 > Endorsements must still be mentioned, but as one form of Verifier = input just like EAT is one form of Attestation Evidence. > Verifier Input would be defined as: > - Key material for verifying trust in the Attester > - Known-good/Reference values for comparison with claims > - Static implicit claims that are passed to RP's via Attestation = Results > To do this, I=E2=80=99d replace the current PR = > and issue = > I have on Endorsements with a new = PR. It will be a fair bit of work, so I want to see if there is some = consensus first. > LL > _______________________________________________ > RATS mailing list > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats = > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. = _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_0B64DFBB-931C-44EA-96A7-B693F45B915C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Simon,

Appreciate = you jumping in here. 

On Jul 3, 2020, at 2:28 AM, = Simon Frost <Simon.Frost@arm.com> wrote:

I=E2=80=99ve just tried to catch up on the = thinking on this via this thread and github#94 and realise that the = conversation has become highly detailed and that some very precise = definitions are emerging for concepts that originally were quite general = (e.g. endorsement). Perhaps there=E2=80=99s a risk that the = architecture may be overly constraining as a result.

I am after greater generality (and clarity) than I = think we have now with Endorsements. Endorsements are (in my = understanding) a somewhat specific representation of data and = protocol. 

I am giving a lot of = examples to try to communicate clearly, no to specify = anything.

I would like the = list-of-four in the document because I think it is highly informative = (even Henk=E2=80=99s thinks they are so), but not as a prescription or = requirement. 


 
Trying to avoid using any = term that may now be overloaded=E2=80=A6
It seems that the important information to = capture is that the Verifier is a means of providing transitive trust = between the relying party and a potentially complex Supply Chain from = which the attesting endpoint originated. The RP to Verifier relationship = must be securable and trustworthy in some achievable way such that an RP = can trust the attestation results received. Similarly that creates an = expectation that the Verifier has established securable & = trustworthy relationships with the supply chain in order to receive = appropriate proofs / testimonies of items that the Verifier can identify = within the attestation evidence. The Verifier to Supply Chain = relationships aren=E2=80=99t just technical, they require contractual = relationships as well which can bring a strong influence into the = details of how the information gets to the Verifier.  If we have = the relationships sketched out and an exploration of the types of = information that may be required, is it necessary to go into further = detail?

I think this is a possible approach. To take this, = I think Endorsements have to be either removed or redefined in some very = general way to side-step the ideas people have about them.

LL



 
Thanks
Simon
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: 02 = July 2020 18:52
To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Cc: Dave = Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>; rats@ietf.org
Subject: Re: [Rats] Verifier Input = instead of Endorsement?
 
 
On Jul 2, = 2020, at 6:31 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
 
Hi Laurence,

while I = think that I understand where you are coming from here, I have to say = that I also think that:

* "manufacturer(s)" = is a too arbitrarily restricting term, which is why we agreed on = endorser
 
The problem with Endorser is that they produce Endorsements = and I think there are problems with Endorsements:
 - In Berlin you told me they don=E2=80=99t have keys in = them. So then how do keys get into the Verifier?
 - Endorsements seem to be small signed documents of = attributes so they=E2=80=99re not so good for:
     - Representing a database of millions of = keys
     - Representing HTTP = access to a manufacturers database of known-good/reference values
     - One-time physical / ceremonial transfer = of a root key
- Endorsements seem like a somewhat = narrowed, specific way of providing verifier input
- Endorsements imply signing as the security mechanism, which = is too narrow.
     
Maybe we can find a term other than manufacturer?  What = I want to avoid is the general use of the term Endorsement for the above = reasons. Using the term Endorsement to me is like using the = protocol-specific term EAT instead of conceptual term Attestation = Evidence. Use of the term Endorser implies Endorsement, but maybe it is = OK if we don=E2=80=99t use the term Endorsement.


* every arrow is of = course "input/output", but we are not calling evidence "Attester = Output". So, Verifier Input is in contrast a too ambiguous category (it = does not add any semantics to the arrow)
 
Maybe the non-specificity of =E2=80=9CVerifier Input=E2=80=9D = seems useful? It allows the list of four (keys, ref values, static = claims, policy) to be used and for them to be variable. It is just a = grouping.
 
Maybe we can find a better term? Here=E2=80=99s a few:
   Verifier Criteria
   Verifier Data
   Attester Verification Criteria
   Attester Trust Materials
 


* the itemized list that starts with key = material provides a very intuitive example and maybe we could use that = kind of list as a more prominent example in the arch I-D
 
I=E2=80=99d prefer the list of four to be explicit = architecture, not just an example.



The question, if reference values = are endorsements or appraisal policies or a third item is... probably = okay and I am interested in an answer - but that is a detail, I think. = As long as they are also mentioned, I can follow all three lines of = thought.
 
We should assume our audience knows little to nothing about = TCG work (like me) and little about attestation, so I=E2=80=99d prefer = they not be details, but rather up front and clear.



Also, I am in strong doubt that = the following statement is always correct: "The transfer of all these = inputs to the Verifier does need to be secured.". I am confused by the = exceptions that follow that statement which basically say, I think: in = some cases they have to be secured. Maybe we mean different things by = "secured"?
 
Let me try again:
- The Verifier must always = establish the authenticity of the Manufacturer
- All input from the Manufacturer must be integrity = protected
- The Verifier must always = establish the authenticity of the Verifier Owner
- All input from the Verifier Owner must be = integrity protected
- In some cases the Manufacturer may = wish to establish the authenticity of the Verifier before giving = inputs
- In some cases the Owner = may wish to establish the authenticity of the Verifier before giving = inputs
- In some cases = confidentiality of the inputs is required
 
LL
 



Viele Gr=C3=BC=C3=9Fe,

Henk

On 02.07.20 = 03:46, Laurence Lundblade wrote:

Here=E2=80=99s rough proposed text and diagram. Not sure = where it would go in the doc yet.
LL
  =         *******************   = ************     ****************
    =       * = Manufacturer(s) *   * Verifier *     * Relying Party*
          *******************   = *  Owner   *     *  Owner       = *
                =        |        ************ =     ****************
        =                |     =          |           =       |
        =   Manufacturer | =              |       =           |
      =         Verifier |     =          |Owner         =    |
            =     Input =  |              |Verifier   =       |
          =              |       =        |Input           =  | Appraisal
          =              |       =        |             =     | Policy for
        =                |     =          |           =       | Attestation
      =                  |   =            |         =         |  Result
    =                    v =              v       =           |
      =               =  .-----------------.             =    |
            =   .----->| =     Verifier    |------.         = |
              |     =  '-----------------'      |       =   |
            =   |     =                     =       |         |
  =             |       =              Attestation|   =       |
          =     |   =                  Results =    |         |
    =           | Evidence     =                  |   =       |
          =     |   =                     =         |         |
              |       =                     =     v         v
  =       .----------.     =                 =  .-----------------.
        | Attester |     =                  | Relying = Party   |
        '----------'     =                 =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98
Conceptually there are four main inputs to = the Verifier aside from the Attestation Evidence. They are:
   - Key material for verifying trust in the = Attester
   - Known-good/reference values for = comparison with Claims in the Attestation Evidence
  =  - Static implicit claims for the particular Attester that are pass = to the Relying Party in Attestation Results
   - = Policy Configuration
Any of these four can come from = either the Manufacturer as Manufacturer Verifier Input or from the = Verifier Owner as Owner Verifier Input. They key material usually always = comes from the manufacturer and the policy from the Verifier Owner, but = there is no strict requirement for this. The known-good/reference values = and static implicit claims often come from either or both.
There is no strict separation between Manufacturer and = Verifier Owner. They could be the same. There could also be 3rd party = intermediaries between the Manufacturer and the Verifier.
An= Endorsement is one established format for some of these inputs. It = usually comes from an Endorser that is usually the Manufacturer. It is = usually a signed document. Alternatively, the Verifier may perform = queries against a database, perhaps one maintained by a Manufacturer, to = get inputs. Alternatively, the root key of a key hierarchy may be = transferred in a one-time physical ceremony. This architecture sets no = protocol or procedure for this input.
The transfer of all = these inputs to the Verifier does need to be secured. For all cases, = authenticity of the Manufacturer and Verifier Owner and their inputs are = required. Without authentic inputs, the Verifier will not do its job = correctly. In some cases confidentiality of the inputs is required. = Finally, in some cases the Manufacturer and Verifier Owner will = authenticate the Verifier.
This architecture sets no = requirement for a particular protocol or security mechanism. For = example, TLS could be used, but it is not the only protocol that could = be used,

On Jun 29, 2020, at 8:56 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org <mailto:dthaler=3D40microsoft.com@dmarc.ietf.org>> = wrote:

I don=E2=80=99t like the term = =E2=80=9CVerifier Input=E2=80=9D since =E2=80=9CAppraisal Policy for = Evidence=E2=80=9D is also Verifier Input, so I would find it = confusing.
I think that the rules for what to put in = Attestation Results (bullet 3), as well as =E2=80=9Cknown-good/reference = values=E2=80=9D if such exist
(and there can be valid = policies where they may not exist, or rather where the policies use more = complex rules than
a simple test for equality against a = constant) are conceptually part of Appraisal Policy.
I do = agree that Appraisal Policy can be conveyed to the Verifier in many = different ways, and may be composed
of different things = from different sources.
Dave
*From:*RATS = <rats-bounces@ietf.org <mailto:rats-bounces@ietf.org>>*On Behalf = Of*Laurence Lundblade
*Sent:*Monday, June 29, 2020 11:34 = AM
*To:*rats@ietf.org <mailto:rats@ietf.org>
*Subject:*[Rats] Verifier Input instead of Endorsement?
Stepping back a bit on the definition of an Endorsement, I = think the four inputs to a Verifier are these:
  - = Key material for verifying trust in the Attester
  - = Known-good/Reference values for comparison with claims
  - Static implicit claims that are passed to RP's via = Attestation Results
  - Appraisal Policy
These can and will be conveyed to the Verifier in many = different ways:
  - X.509 certs with extensions
  - Signed documents
  - HTTP queries = against the Attester/device manufacturer
  - Remote = SQL or some other sort of database access to manufacturer(s)
  - Data storage like flash drives the are hand carried = into the Verifier's site
  - One-time special file = transfers
  - Ceremonial procedures with M out of N = people physical present approving transfer
It seems like = shoe-horning all of the above (except policy) into an Endorsement, like = I=E2=80=99ve tried to do <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fpull%2F94&data=3D02%7C= 01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988bf= 86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986365098&sdata=3D2NktPX%2= B3LJXjMEjEFoM8kpUIy6yOxte%2BuhFYr1ETN4g%3D&reserved=3D0> =  is too much. I tried this shoe-horning because I think the = architecture document needs to cover all this and Endorsements was what = was in it. A typical Endorsement seems to be just the first two = mentioned, X.509 and signed documents expanding its definition to = include database access is a stretch.
Rather than defining = Endorsement, I=E2=80=99d like to define Verifier Input:
          *******************   = ************     ****************
    =       * Manufacturer(s) *   * Verifier *   =   * Relying Party*
          = *******************   *  Owner   *     * =  Owner       *
      =                  |   =      ************     ****************
                =        |             =  |                 |
         Verifier Input|   =            |         =         |
        =                |     =          |Appraisal       =  |
              =          |           =    |Policy           |
                =        |             =  |for              | = Appraisal
              =          |           =    |Evidence         | Policy for
                =        |             =  |                 | = Attestation
            =            |         =      |               =   |  Result
          =              v       =        v             =     |
            =          .-----------------.     =            |
    =           .----->|     Verifier =    |------.         |
  =             |     =  '-----------------'      |       =   |
              = |                     =           |         |
              |   =                 =  Attestation|         |
  =             |         =            Results    |   =       |
          =     | Evidence             =          |         |
              |   =                     =         |         |
              |   =                     =         v         v
        .----------.       =               =  .-----------------.
        | = Attester |                 =      | Relying Party   |
    =     '----------'     =                 =  '=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80=94=E2=80= =94=E2=80=98

Endorsements must still be = mentioned, but as one form of Verifier input just like EAT is one form = of Attestation Evidence.
Verifier Input would be defined = as:
  - Key material for verifying trust in the = Attester
  - Known-good/Reference values for = comparison with claims
  - Static implicit claims = that are passed to RP's via Attestation Results
To do = this, I=E2=80=99d replace the current PR <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fpull%2F94&data=3D02%7C= 01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988bf= 86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986365098&sdata=3D2NktPX%2= B3LJXjMEjEFoM8kpUIy6yOxte%2BuhFYr1ETN4g%3D&reserved=3D0> a= nd issue <https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%= 2F%2Fgithub.com%2Fietf-rats-wg%2Farchitecture%2Fissues%2F65&data=3D02%= 7C01%7Cdthaler%40microsoft.com%7Cf15ace6e8b4b447eebc008d81c5b1f33%7C72f988= bf86f141af91ab2d7cd011db47%7C1%7C0%7C637290524986375092&sdata=3DGfM5qE= lO4teNdjfABlmVayeGXuYHWBDqHTVtpeeew7g%3D&reserved=3D0> I = have on Endorsements with a new PR. It will be a fair bit of work, so I = want to see if there is some consensus first.
LL
_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats
_______________________________________________RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 
IMPORTANT NOTICE: The contents = of this email and any attachments are confidential and may also be = privileged. If you are not the intended recipient, please notify the = sender immediately and do not disclose the contents to any other person, = use it for any purpose, or store or copy the information in any medium. = Thank you. _______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_0B64DFBB-931C-44EA-96A7-B693F45B915C-- From nobody Sat Jul 4 10:54:55 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 331E83A0E3C for ; Sat, 4 Jul 2020 10:54:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OVKcnIjJ7geT for ; Sat, 4 Jul 2020 10:54:51 -0700 (PDT) Received: from p3plsmtpa08-08.prod.phx3.secureserver.net (p3plsmtpa08-08.prod.phx3.secureserver.net [173.201.193.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6FA53A0E3B for ; Sat, 4 Jul 2020 10:54:51 -0700 (PDT) Received: from laurences-mbp.lan ([70.58.199.219]) by :SMTPAUTH: with ESMTPA id rmNEjDkvrVQtlrmNGj1YXz; Sat, 04 Jul 2020 10:54:51 -0700 X-CMAE-Analysis: v=2.3 cv=YcnDGDZf c=1 sm=1 tr=0 a=vYbQBYz1awqCo8DrEKtgEg==:117 a=vYbQBYz1awqCo8DrEKtgEg==:17 a=IkcTkHD0fZMA:10 a=l70xHGcnAAAA:8 a=K6EGIJCdAAAA:8 a=t-IPkPogAAAA:8 a=48vgC7mUAAAA:8 a=mo3njIwVTYLEaP5DZvwA:9 a=CiFDGi9x2EgsjsLi:21 a=tW6coFOehED_u6RQ:21 a=QEXdDO2ut3YA:10 a=JtN_ecm89k2WOvw5-HMO:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\)) From: Laurence Lundblade In-Reply-To: <13132.1593723461@localhost> Date: Sat, 4 Jul 2020 10:54:48 -0700 Cc: "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3608.80.23.2.2) X-CMAE-Envelope: MS4wfPh92tJWisN2EnBZbBrHInwawNvMmBBoCH0MxcQehJu+E9lqhR1E/x2HsMXYBa+mITecqd0Bu399U3QleUFqgZlFhI9fxO8Y8f428aybsbjwk809LZur gYy3ZpLxZvIe7HuKk7TT1HMvbi1BJN/KyFzisMHbqCPV4j2cjQgDEeEFRppQgnahkU+XBqKiAZXWUFbA37DJZgmlB8gvXuHsmuQ= Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jul 2020 17:54:54 -0000 > On Jul 2, 2020, at 1:57 PM, Michael Richardson = wrote: >=20 >=20 > Laurence Lundblade wrote: >> The problem with Endorser is that they produce Endorsements and I = think there are problems with Endorsements: >=20 >> - In Berlin you told me they don=E2=80=99t have keys in them. So then = how do >> keys get into the Verifier? >=20 > Well, first, I thought we agreed that the arcs above Verifier were out = of > scope for the architecture. The WG might recharter to include that, = but I > thought we agreed that the concerns were seperable. HOWEVER... If that=E2=80=99s the approach, then Endorsements should be removed from = the document, both in the text and diagram. >=20 > So in some cases the Verifier will be configured entirely by some = proprietary > mechanism. Those mechanisms could consist of pasting a configuration = file > full of keys (trust anchors probably), along with Known Good Values. > Or, they could consist of a bunch of EATs of a semi-proprietary = nature. > Semi, because we haven't standardized them yet, but conceptually they = are > bang-on. >=20 > Maybe you want to start a personal ID that deals with an architecture = for > Endorsement? > To the extent that I think you want to use EAT for many of things, = maybe it > would be a good repository of non-Evidence/non-Attestation-Result uses = of > EAT. >=20 > --- >=20 > So, when you say "keys", I think you mostly mean Trust Anchors, right? No, I don=E2=80=99t.=20 This is far past TCG, IDevID, X.509 and public key. > These would things like Manufacturer IDevID anchors. > These would allow a Verifiers to know that is dealing with authentic = units > from Mfg X, and therefore the Manufacturer X-signed Endorsement that = were > published somewhere can be applied. Here=E2=80=99s an example (nothing to be standardized; just an = illustration). - A unique 256-bit symmetric key and key ID is put in each device by the = Manufacturer. - COSE_Mac0 (HMAC) is used to sign the EAT - The EAT is conveyed to the Verifier - The Verifier parses the EAT to get the key ID - The Verifier makes a private HTTPS connection to the Manufacturer = (presumably set up to be very secure) - The Verifier sends the key ID and gets back the symmetric key - The Verifier verifies In another version, the Verifier sends the key ID and the to-be-signed = bytes to the Manufacturer. The Manufacturer verifies the HMAC and sends = back a yeah or yeah. The Verifier does the rest of the work on reference = values and such. >=20 >> - Endorsements seem to be small signed documents of attributes so = they=E2=80=99re not so good for: >> - Representing a database of millions of keys >> - Representing HTTP access to a manufacturers database of = known-good/reference values >=20 > I don't quite understand this. > The database of keys could be a single trust anchor if the keys are = all > signed in some way. That doesn't have to be PKIX if you (like me) = hate that. > EAT can be used, CoID, PGP, etc. > PGP has replicating keyserver technology that could be applied here, = btw. Yes, that=E2=80=99s all true, but still only a subset of what is = possible. Also, I don=E2=80=99t know that this fits typical notion of an = Endorsement. >=20 > I don't quite understand "Representing HTTP access"... part. > I guess this is more than just having a URL. > It seems that when/if we come to standardizing the Endorsement arc, = that we > might need to standardizing a way of accessing the database, even if = that > is just about describing how a URL fragment can be extended with a = firmware > version number. > We'd need to say how that URL fragment is communicated. I can think of = a few > ways, some good, some less good. Yes. That make sense. Just not sure that this set up fits the typical notion of an = Endorsement. >=20 >> - One-time physical / ceremonial transfer of a root key >=20 > Please explain how this would be used. > I'm very interested. Here=E2=80=99s a symmetric key example. All the keys COSE_MAC0 keys are = created by doing a KDF from a root symmetric key. This symmetric root is = just 256 very important bits that need to be kept very secret. The KDF = input is a key ID and the symmetric root. The way the Verifier figures out the key for each device is by receiving = the key id in the COSE_MAC0 and running the KDF on the symmetric root. = The Verifier is probably doing this inside an HSM to keep the symmetric = root very safe. To get the symmetric root from the Manufacturer to the Verifier safely, = a team of people from the Manufacturer physically travel to the location = of the Verifier hand carrying the HSM(s) they=E2=80=99ve configured with = the keys. It is a team so one doesn=E2=80=99t run off with it or make = copies. (Last century, when Qualcomm had one of the first app download systems = ever built, Verizon=E2=80=99s Get It Now, we did physical transfers like = this with VeriSign for the root keys for app signing (though asymmetric = crypto was used)). To be clear, I don=E2=80=99t want to standardize this stuff.=20 The point is that RATS architecture must allow for this and I don=E2=80=99= t think Endorsements work this way. LL >=20 >> - Endorsements seem like a somewhat narrowed, specific way of = providing verifier input >> - Endorsements imply signing as the security mechanism, which is too = narrow. >=20 >> Maybe we can find a term other than manufacturer? What I want to = avoid >> is the general use of the term Endorsement for the above reasons. = Using >> the term Endorsement to me is like using the protocol-specific term = EAT >> instead of conceptual term Attestation Evidence. Use of the term >> Endorser implies Endorsement, but maybe it is OK if we don=E2=80=99t = use the >> term Endorsement. >=20 > "Terms of Endorsement" <-- staring Shirley, Debra, Jack and Apple.com? >=20 > -- > ] Never tell me the odds! | ipv6 mesh = networks [ > ] Michael Richardson, Sandelman Software Works | IoT = architect [ > ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on = rails [ >=20 >=20 > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- >=20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Sat Jul 4 16:11:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C703B3A11D2 for ; Sat, 4 Jul 2020 16:11:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TYZ2kZZ4XtFM for ; Sat, 4 Jul 2020 16:11:21 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95D2D3A11D1 for ; Sat, 4 Jul 2020 16:11:21 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 9E878389BC; Sat, 4 Jul 2020 19:08:28 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id tF-ya-P1saDh; Sat, 4 Jul 2020 19:08:28 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id D77DB389BB; Sat, 4 Jul 2020 19:08:27 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 895E264F; Sat, 4 Jul 2020 19:11:18 -0400 (EDT) From: Michael Richardson To: Thomas Fossati , "rats\@ietf.org" In-Reply-To: <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jul 2020 23:11:24 -0000 --=-=-= Content-Type: text/plain Thomas Fossati wrote: > Personally, I am not convinced that an in-band pii flag is needed. Just to be clear, the alternative is an out-of-band PII flag, which is to say, a configuration on the Verifier for that claim. This implies that the Verifier always knows all the claims that it will receive, and that Verifiers and Attesters are never upgraded out-of-sequence. Remember that some of this question came up because we were discussing whether a Verifier would have to provide Evidence as to it's trustworthiness to the *Attester* before the Attester would trust it with PII Evidence. Now, consider that we have some use cases for mutual Attestation (Hi Guy!) and, and maybe we wind up with another way in which to deadlock... > On the Attester side, the privacy problem can be addressed by an > attestation API that allows the caller to selectively turn off claims > that are PII -- either with per-claim switches, or by presenting > pre-canned PII-revealing and PII-hiding interfaces to the Evidence > generation service. We expect the attesting endpoint to make the right > decision about what can be hidden and what needs to be revealed > depending on context. Yes, but that's not really the point. It's not that the Attester code base does not know which claim contains PII or not, it's that it doesn't know if it can rely upon the Verifier to do the right thing. Can this even work across legal jurisdictions with different requirements and mandates? > On the Verifier side, I'd expect that the log/audit anonymisation and > retention policies for Evidence are an integral part of the service > configuration. So, no need for an in-band signal about what is to be > considered PII since the Verifier is going to be made aware of it by > some out-of-band means. > That leaves the RP, which I'm not fully sure about. However, my gut > feeling is that the Attester will have to trust the RP to do the right > thing since no in-band pii flag will ever be able to restrict what a > malicious RP can do with the obtained PII. > Am I missing anything? I think that up to know there has been a single vertical of Attester/Verifier/RP being all built by the same vendor. Things like changes to what is PII, or introduction of new claims could be coordinated internally. As we move towards a multi-vendor situation the rollout of new claims will occur in an unpredictable way. > PS: Maybe there is a requirement for EAT profiles to specify in their > privacy considerations what claims are PII and what is the expected > treatment by actors in the attestation chain. This is EAT's job, not at > the architecture doc level though. I'm okay if the answer is that EAT will include some kind of flag, but that we don't have to assume it exists at an architectural level. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | IoT architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8BDJYACgkQgItw+93Q 3WVWFgf/aXqudf6HJrm/EqMwN2bcCEggFIiKvHjzE9frTkg+Dl25ALl3qHJkJvpa wGhzxlalbBX2HuYE7llxSZ3V/CDOWvoRu2bcnkmZYbJZ4ZEhwxaL7IZ5Jiw7dTwv HDedu0Yn826SrPvxD6kicikJDqxE0Fj8R+Z+vxc+INVy742cxAge1CRuEInkM9mI EaZnPW3qm1HkznszJZPNX2m6aDS7u3oksqx5A99iw3uBoD1v8+4xTcazWsTqzoIx p+YyO3Tb7RE5tx/kwtyP1qywKidqe7KQrLqYZNdDC4TfWNoVcwTJow9NDDj1Nz38 D8UQ8IbJ7Teh7Yadidif2qcYdkGexg== =hyvU -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Jul 4 16:14:14 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0646C3A11D6 for ; Sat, 4 Jul 2020 16:14:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10maZPlqRwUN for ; Sat, 4 Jul 2020 16:14:11 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 250AE3A11D4 for ; Sat, 4 Jul 2020 16:14:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 30112389BC; Sat, 4 Jul 2020 19:11:19 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id EaPm68w-bzZS; Sat, 4 Jul 2020 19:11:18 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 77663389BB; Sat, 4 Jul 2020 19:11:18 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 2434164F; Sat, 4 Jul 2020 19:14:09 -0400 (EDT) From: Michael Richardson To: Ira McDonald , Thomas Fossati , "rats\@ietf.org" In-Reply-To: References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jul 2020 23:14:13 -0000 --=-=-= Content-Type: text/plain Ira McDonald wrote: > +1 > Only the Attester (with advice from the real human owner/user and/or system > administrator) can decide what is actually PII. Various standards and > regulations > have failed miserably to crisply define what is PII. *WHAT* is PII is not at all relevant. I'm not asking for any determination of that, and if you got that impression, then I have failed to present the discussion well. I am asking the question, [having determined that something is (or isn't) PII, ] does the Attester need a way to signal this in-band to the Verifier? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8BDUAACgkQgItw+93Q 3WXYXggAhIvk4YOfLSyTGZB1uOjDSv7tre1n6wctWFe6ytWPIOkX+wPqeerFVnLI rAR/leNL7xPSYlF7FY1w/+pot+6P3hFmfd1zOeZPHvSxfZ41/ViIdzeb2nZKahf9 t2ImojXBOSqB2WcO+B20Nbm95f+fFj9/+/lwO//cjvPW7jYUa5SXiip2h4RP47Sk jm7QUEnprLp72ILaOtkVLfyrctn/hOHWe2d+4NtGrhCYGjBt/9xjuyVen2wsQ0ia BcAXkWTrpsERiN8GWFnZsEP3RIDODVnSDX+ZUM3bM8yHCrGe2bct1y9L74+9flNn 9Mdnq8B6seRNda7nzCX3A68vnrNuXQ== =yUMX -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Jul 4 16:18:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3F093A11DB for ; Sat, 4 Jul 2020 16:18:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FzpFgUYhGvBo for ; Sat, 4 Jul 2020 16:18:31 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0394B3A11DA for ; Sat, 4 Jul 2020 16:18:30 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id D2428389BC; Sat, 4 Jul 2020 19:15:38 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 5vXZ1nV3XUsO; Sat, 4 Jul 2020 19:15:38 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 1DE74389BB; Sat, 4 Jul 2020 19:15:38 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id BFEB964F; Sat, 4 Jul 2020 19:18:28 -0400 (EDT) From: Michael Richardson To: Laurence Lundblade , "rats\@ietf.org" In-Reply-To: <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jul 2020 23:18:33 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Laurence Lundblade wrote: >> Laurence Lundblade wrote: >>> The problem with Endorser is that they produce Endorsements and I t= hink there are problems with Endorsements: >> >>> - In Berlin you told me they don=E2=80=99t have keys in them. So th= en how do >>> keys get into the Verifier? >> >> Well, first, I thought we agreed that the arcs above Verifier were o= ut of >> scope for the architecture. The WG might recharter to include that,= but I >> thought we agreed that the concerns were seperable. HOWEVER... > If that=E2=80=99s the approach, then Endorsements should be removed f= rom the > document, both in the text and diagram. That makes no sense to me. It is perfectly reasonable to define something just well enough in order to= make it clear what is out of scope for standardization. We can come up with many different ways to standardize Endorsements (or Verifier Inputs), and it shouldn't matter at all to the protocol between Attester and Verifier. That's what makes it seperable. Do you agree? =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8BDkQACgkQgItw+93Q 3WXJLQf+MTLxpfBRL60emBMT2YTNeIDPg902Y7XBkRKS1kmfRXnZKyFYUUuQqTK/ tnFI500RzCNBPUBrEXyQvyuEY+/Wi0seyzAXrwMcKBUwTrKdGtoeky4cvhHhoNyA Xh1SAAwnazYtzyFPqJusCSFCxqhhNpK8H8u7zdf37LKhFKWRkttufr1OWZjo323j oVMv3+Lk2LzbjKc8rJYUp83DFVUWKdEVX1P6RNUJOk7hBIcWBX9Z/Y3o9Pqfq9mj 6/EWwTrkjf/4UvwPdmXIaPCHsBUlS1YpBW3Rk6QXeM8xY95hQKaHlBdT4C/S/u4T 3dLbRG0PquzLLC4P5WWsNyXjb7tKCA== =SyQ0 -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Jul 5 04:56:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 412D03A0972 for ; Sun, 5 Jul 2020 04:56:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ivvjr38EQ9I2 for ; Sun, 5 Jul 2020 04:56:49 -0700 (PDT) Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66D113A096D for ; Sun, 5 Jul 2020 04:56:49 -0700 (PDT) Received: by mail-qk1-x736.google.com with SMTP id k18so32468684qke.4 for ; Sun, 05 Jul 2020 04:56:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=DMieA5MNRcQrOsZtbkCy5D+nA3IFsoC5f+2ii8lmOuw=; b=bnFJuzFcDLEjgy1G1xdEF+bVdoX+c/rV7k5NO1YTiplW3oJQ6fezGVpB+a13x+tYTY 3f3QP4U4QQQde+A22m1uSaz11TzKxeNvOOCpUX75+1B9qlLc0gMQPKNZYLb7NiF3oAa3 HU6cyIb41zGmDGLc11a0NGMX5OXmiLNGn7ayuTAZBtYh9VJ1cOGmjVeODVYp2cstCORr 63JdFd35leCgaakryWTj50XtgfzvghZTAhiddOLaYsAiBcb+KGeOO7t7LamKKUgI8PxQ hI2oNiCsLIX6LmygO7Y2cisZP7KqZonTpUQhUraCRdkpA+OZPwyenWjfUPBtCwtSPVLh 3s/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=DMieA5MNRcQrOsZtbkCy5D+nA3IFsoC5f+2ii8lmOuw=; b=NnkVe+UKvaRi6T/Js/DdtHKd+fQ//pg9Pbf2haGb8xeVeiuvHKCsRjv9vKm8xS10C6 TZ+VF3Ffd+4yHtM506Uz4JB4wZ1uZLVO4IsDvFn5kBBXEBdEHdJde7/lLqZFjFEOzOer fKcEnQrrvo9O8kK6KBdpLtoWH4gBMU2vEKgZjM7f1wBQnepC9Udw1up5FA7uzqfE8k5t ZNdY/7kRBDWPL8MtCwr1bz6xov0LdwcGQJjThv0bwiRZw0EBBVSh5MkbaHVXNrBSv5Po oHdZ+tvtE4OyV629te0omAl0+DirGJ6QSzfT6bWoW0KNYIZB03ndsrh8J8BJpWq7DGc5 O3kw== X-Gm-Message-State: AOAM531NBw9eI8DcS3kvgUiCileiz3aPhHgLSoSdtnrCtZnBGPVCSH6J /9zW5wanTEqSEGah8TQ9lZ+BegqM X-Google-Smtp-Source: ABdhPJwqml44vOESLFHW2t17nMXFdyUaWdoARdGzMdLUyPrpcJg6GTUiGYLiUAZ5LAPJN1NaJetZrw== X-Received: by 2002:a37:490f:: with SMTP id w15mr41157007qka.71.1593950208127; Sun, 05 Jul 2020 04:56:48 -0700 (PDT) Received: from [192.168.1.2] (146-115-73-78.s5196.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [146.115.73.78]) by smtp.gmail.com with ESMTPSA id g41sm18833315qtb.37.2020.07.05.04.56.47 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 05 Jul 2020 04:56:47 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Kathleen Moriarty Mime-Version: 1.0 (1.0) Date: Sun, 5 Jul 2020 07:56:46 -0400 Message-Id: <6843B9B5-C8A9-423E-BE90-068056362DA8@gmail.com> References: <3CEB77DD-7E4E-4492-B14B-82A5CB5152A2@arm.com> Cc: "rats@ietf.org" In-Reply-To: <3CEB77DD-7E4E-4492-B14B-82A5CB5152A2@arm.com> To: Thomas Fossati X-Mailer: iPhone Mail (17F80) Archived-At: Subject: Re: [Rats] RATS Architecture continued X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Jul 2020 11:56:51 -0000 Hi Thomas, Thank you, that is my account. I=E2=80=99ll look Monday as I grade papers o= ver the weekend. Best regards, Kathleen=20 Sent from my mobile device > On Jul 3, 2020, at 11:06 AM, Thomas Fossati wrote= : >=20 > =EF=BB=BFHi Kathleen, >=20 > Today, while processing the PRs associated with part 2 of your review, > we blocked on the proposed changes to the security considerations > section: >=20 > https://github.com/ietf-rats-wg/architecture/pull/122 >=20 > as it changes the requirements on conveyance - adding confidentiality > and availability. >=20 > We tentatively assigned the PR to a @KME account, but we are not > entirely sure it's yours :-) Can you have a look please? >=20 > cheers! >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are confi= dential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you. From nobody Mon Jul 6 02:26:03 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C33413A1265 for ; Mon, 6 Jul 2020 02:26:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=eIy8tNNf; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=eIy8tNNf Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id elu4PtAzbjES for ; Mon, 6 Jul 2020 02:25:58 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70045.outbound.protection.outlook.com [40.107.7.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 516693A1266 for ; Mon, 6 Jul 2020 02:25:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=isGOm8nQ8DNxV6ArsEeaaZe114J/xlq88Nc71x8bz3Q=; b=eIy8tNNfa7tqJHnyPJKJAxpMN4N3s4YFdA6MI4PGxhDlpvNGJ7/w3l73w+fnrwQ40sX9pRtDQT/jwYbNkTijcaOluYF2m1EeTMP7pwdItAHQAachak6e9w2/FFyPwbtvIIbHdb1l2pFPVHon3wblwqp4FMDrMSFRzSen53Z7wMs= Received: from AM6P193CA0083.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:88::24) by VI1PR08MB3552.eurprd08.prod.outlook.com (2603:10a6:803:81::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.28; Mon, 6 Jul 2020 09:25:55 +0000 Received: from AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:88:cafe::ec) by AM6P193CA0083.outlook.office365.com (2603:10a6:209:88::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.20 via Frontend Transport; Mon, 6 Jul 2020 09:25:55 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT022.mail.protection.outlook.com (10.152.16.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Mon, 6 Jul 2020 09:25:54 +0000 Received: ("Tessian outbound 114f46c34313:v62"); Mon, 06 Jul 2020 09:25:54 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 1be0e8fc6b6d3cdc X-CR-MTA-TID: 64aa7808 Received: from 74831af39180.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 98D63B00-5113-4032-BDAE-A56DBFD8308A.1; Mon, 06 Jul 2020 09:25:48 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 74831af39180.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 06 Jul 2020 09:25:48 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=M7ym3oG9z4d24QAPREb7+upe9KiYQY5hVjNG5fXz/9TCmZ8lBnmGxRRqfNtxAFE1rQNfp0UZ1TUEIYfYD9uRXhq9V9AVv2drZJi70WDmbha5iig8fOjud9kECFEH1g8Zlt91UwUW8g3iF7pXy0z8OzkRQS3fW7Nq2hF3qgnot51c5Ju5j3ioS3AlZDfEUywsJiW0cgwEXdDJ5P1uHpfJxvYSY1yW+wib3fdamRR6feAH9dPqDujAmUkr44kMp4ZWFS9nlIdB/jp/f8KWcC0D4Fkh2M6805t2k9HvQzHNeGmty0j91dKh1JIMC7LTEYqbTGpnQOvnZXGXhZZEu2hSbw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=isGOm8nQ8DNxV6ArsEeaaZe114J/xlq88Nc71x8bz3Q=; b=NavE7KFhTzI1EXuoP7FW76rsdpuHCkQ+dQRTo2YHZwuNn74tytNNyy7GTaXf373VdiulVTtpTSJCgNGKxb8IkF4TzTAXrImGo/8EMPPsE5tMeRbiTf+SdVAVVXJEUj8fwPj/YARCYpA74g24RWHgVIx3D0ptA6vf4yngHG98XYp1sq1L5cJfTZixCvqGaY5bWXhWBlH/QhEre2Uk272zu/SfGGICTkokFAjPfm07p+LUOHnjQes9SaRQpdRwA8zkaZk1gjUsFyrW6oDJGu+Dz4uGLcZdf1U02qmefvyWuKCi8H+g8dpgBIUlcz5GzKWNxbKICCw83tTTq19Gr4BGCA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=isGOm8nQ8DNxV6ArsEeaaZe114J/xlq88Nc71x8bz3Q=; b=eIy8tNNfa7tqJHnyPJKJAxpMN4N3s4YFdA6MI4PGxhDlpvNGJ7/w3l73w+fnrwQ40sX9pRtDQT/jwYbNkTijcaOluYF2m1EeTMP7pwdItAHQAachak6e9w2/FFyPwbtvIIbHdb1l2pFPVHon3wblwqp4FMDrMSFRzSen53Z7wMs= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB4183.eurprd08.prod.outlook.com (2603:10a6:20b:a1::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.28; Mon, 6 Jul 2020 09:25:48 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.029; Mon, 6 Jul 2020 09:25:48 +0000 From: Thomas Fossati To: Michael Richardson , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] should Evidence containers be explicit about Personally Identiable Information? Thread-Index: AQHWT0qg16qdO1UkpEOwcIPLbGmPlKj1qKoAgAJpmQCAAYQngA== Date: Mon, 6 Jul 2020 09:25:48 +0000 Message-ID: <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> <22564.1593904278@localhost> In-Reply-To: <22564.1593904278@localhost> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: cdeb20bb-d766-4ceb-b16d-08d8218e956d x-ms-traffictypediagnostic: AM6PR08MB4183:|VI1PR08MB3552: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7691;OLM:9508; x-forefront-prvs: 04569283F9 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: LqM/hvEBhYHmN2QxDKQsYirHSRTQoMoDrD1J6w2B7SUm5zUm8i03+Lls1s0CETRhG8u2lm12rbzAROqOeysmGJ1iI3FfAPWuCnTyEoDFPPVNzJHqXhReXuUPcdMuWZuvdItcHDsEvZF2BNMNE3I5yqIaq+rgSooYhHcb4JmZZ16jyCLHtKmyh98bq0xuummqf85a9FgyqTBxD7L3TiBPnlQxU8eKd6Jj9L90iHvJN78c/ph4ThtMbpkj3KpYAuORsu+0q21rCg8FfU3CmtWfe9kHl19PsRRH6o2nY7eHEq3Nm/xdoiM38WTRsPcG9bqvvZXXzUVX4NXqB8P5vY23SQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(376002)(366004)(346002)(136003)(4326008)(6506007)(186003)(53546011)(26005)(6486002)(86362001)(36756003)(6512007)(8676002)(8936002)(478600001)(83380400001)(2906002)(110136005)(316002)(5660300002)(2616005)(64756008)(66446008)(66476007)(33656002)(71200400001)(66946007)(66556008)(76116006)(91956017); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: OfI/18f2Fr0BwslWDWH6woikSlCHm1YoVRjuj4fWkkOfnE8ucBjGEFwjuZ+J3n9j0AJchr3zjoXBCX+kL345ZRRAJ69pw8X2A4a7y6lu7O5nygdPlh2G9UUrmTrMycsykDyqkSLBhZB8J2YA812tLdPBZuXkhQtdq/56hknEnw8BAc6lq5CWgCblf39qsZqBeQI0eHonEQ6gNQyEcs8nv3Sk3OE4xB87Hf+wK0NhwtT4LqidISyOHH8QkqE2zj76th7MoHF0s1z2cxixxRknOPXEYYdJ6f7TJD1unitWuFFw/G1Q/TDZPo26Rhk3cSc9didoPdSVovIeQ5dP11jWgccpuzvpMPUQS/M/aIu0iopQEQXU1RLEkCxEShRH4bjzJX4Dyw/3SA5/+CEHBACa0V3n747t7056cqCuEqcJm15mWElURknbA0lNW5QrlvnzKUTTYWBcf+XQ8bChwKqEY6tDOCotZPHd6k+xi5uiCM8= Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4183 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(396003)(39860400002)(136003)(46966005)(356005)(110136005)(82310400002)(2906002)(316002)(70586007)(53546011)(6506007)(36906005)(83380400001)(33656002)(70206006)(82740400003)(2616005)(8676002)(186003)(336012)(4326008)(5660300002)(47076004)(6486002)(478600001)(8936002)(81166007)(26005)(86362001)(36756003)(6512007); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: fb73c292-f8be-40aa-dbfb-08d8218e9162 X-Forefront-PRVS: 04569283F9 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: qsfdh79thTSbzRk2uiiMdMqQ2tQschEZtG8a5/oG2tOG2qLJysCyf56CAQx/fNTGh/9+5LUfvKhw7Jki0rwTd9APxzxuhfE7lA//SIDYwMJxqRpf9zEToNaLsGYvjwY+LsH/x3GgyxuFFM05HUIEgRh91VHrggVIKSKa9Q37sFgadcoQu0kr4gYtuoeNpWm9Zs4DQH3SMQihQPMiyJcVwS74y9XqWt0ddYN0w48GohsXOkwdcQMdBka889fA+ijZAmUDJU8H0lyMe+Wv9ldstL6iS3mTOVFaG6GmlqKaL0yRmalpgVyXjLT+BpWVOQEmu8H75A+QwWbIlXm+sfNdUVwE5kZiq50XTW0SgsJflEE9kPG9EIhTJHNOvc3Dpq7rym6/Ukz0qWfP+QpmaPjiDg== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Jul 2020 09:25:54.8372 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: cdeb20bb-d766-4ceb-b16d-08d8218e956d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3552 Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 09:26:01 -0000 SGkgTWljaGFlbCwNCg0KT24gMDUvMDcvMjAyMCwgMDA6MTEsICJNaWNoYWVsIFJpY2hhcmRzb24i IDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KPiBBcyB3ZSBtb3ZlIHRvd2FyZHMgYSBt dWx0aS12ZW5kb3Igc2l0dWF0aW9uIHRoZSByb2xsb3V0IG9mIG5ldyBjbGFpbXMNCj4gd2lsbCBv Y2N1ciBpbiBhbiB1bnByZWRpY3RhYmxlIHdheS4NCg0KTWF5YmUgdGhlIHByaXZhY3kgZHVhbCBv ZiBFQVQncyAiTVVTVCBpZ25vcmUgdW5rbm93biBjbGFpbXMiIGlzOiAiYXBwbHkNCnRoZSBzYW1l IHByaXZhY3kgcG9saWN5IHlvdSdkIHVzZSBmb3IgUElJIGNsYWltcyB0byBjbGFpbXMgdGhhdCB5 b3UNCmRvbid0IHVuZGVyc3RhbmQiPw0KDQo+ID4gUFM6IE1heWJlIHRoZXJlIGlzIGEgcmVxdWly ZW1lbnQgZm9yIEVBVCBwcm9maWxlcyB0byBzcGVjaWZ5IGluDQo+ID4gdGhlaXIgcHJpdmFjeSBj b25zaWRlcmF0aW9ucyB3aGF0IGNsYWltcyBhcmUgUElJIGFuZCB3aGF0IGlzIHRoZQ0KPiA+IGV4 cGVjdGVkIHRyZWF0bWVudCBieSBhY3RvcnMgaW4gdGhlIGF0dGVzdGF0aW9uIGNoYWluLiAgVGhp cyBpcw0KPiA+IEVBVCdzIGpvYiwgbm90IGF0IHRoZSBhcmNoaXRlY3R1cmUgZG9jIGxldmVsIHRo b3VnaC4NCj4NCj4gSSdtIG9rYXkgaWYgdGhlIGFuc3dlciBpcyB0aGF0IEVBVCB3aWxsIGluY2x1 ZGUgc29tZSBraW5kIG9mIGZsYWcsIGJ1dA0KPiB0aGF0IHdlIGRvbid0IGhhdmUgdG8gYXNzdW1l IGl0IGV4aXN0cyBhdCBhbiBhcmNoaXRlY3R1cmFsIGxldmVsLg0KDQpXaGF0IGFib3V0Og0KDQox LiBFQVQgcmVxdWlyZXMgaXRzIHByb2ZpbGVzIHRvIGV4cGxpY2l0bHkgaGlnaGxpZ2h0IGFueSBw b3RlbnRpYWwgUElJLg0KICAgVGhpcyB3aWxsIGluZm9ybSB0aGUgcHJpdmFjeSBiZWhhdmlvdXIg b2YgdGhlIFZlcmlmaWVycyB0aGF0IGRlY2lkZQ0KICAgdG8gc3VwcG9ydCBhIGNlcnRhaW4gcHJv ZmlsZS4NCjIuIEZvciAqdW5rbm93biogY2xhaW1zIGluY2x1ZGVkIGluIEV2aWRlbmNlIHRoYXQg aXMgcHJvZHVjZWQgYWNjb3JkaW5nDQogICB0byBhIGdpdmVuIHByb2ZpbGUsIHRoZSByZXF1aXJl bWVudCBmb3IgdGhlIFZlcmlmaWVyIGlzIHRvIHRyZWF0DQogICB0aG9zZSB1bmtub3duIGNsYWlt cyBhcyBQSUkuDQoNCkNoZWVycywgdA0KDQoNCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRl bnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFu ZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVj aXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBk aXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkg cHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4g VGhhbmsgeW91Lg0K From nobody Mon Jul 6 04:55:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C26F3A0958 for ; Mon, 6 Jul 2020 04:55:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.5 X-Spam-Level: X-Spam-Status: No, score=0.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, NO_PRESCRIPTION=2.399, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=3dKcCQm5; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=3dKcCQm5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a4n3p4ItD3Lq for ; Mon, 6 Jul 2020 04:55:18 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80051.outbound.protection.outlook.com [40.107.8.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0AF93A13B5 for ; Mon, 6 Jul 2020 04:55:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5mn9yxstE1d05MJ4Zi7TgmcqtCoZ8c5ThZEy/t1lZ0k=; b=3dKcCQm5AidQ0pMuGg6RI6aWB1B5XVV6p0DV7MPBKG1UjpDDndYREJ4Vvif0+O2rIGabk27lTgWMc5sIS9chKb9TlasjywHk5aeY3694hD6QG7+u4sXJtYGeaVSY/l/cTKPZf1sYCw7pZueELWZhF139zjXqcj7XBwgCdSZ4ZHg= Received: from DB8PR03CA0024.eurprd03.prod.outlook.com (2603:10a6:10:be::37) by AM0PR08MB4131.eurprd08.prod.outlook.com (2603:10a6:208:129::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23; Mon, 6 Jul 2020 11:55:09 +0000 Received: from DB5EUR03FT017.eop-EUR03.prod.protection.outlook.com (2603:10a6:10:be:cafe::d1) by DB8PR03CA0024.outlook.office365.com (2603:10a6:10:be::37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23 via Frontend Transport; Mon, 6 Jul 2020 11:55:09 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT017.mail.protection.outlook.com (10.152.20.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Mon, 6 Jul 2020 11:55:09 +0000 Received: ("Tessian outbound a4b10e5b482d:v62"); Mon, 06 Jul 2020 11:55:09 +0000 X-CR-MTA-TID: 64aa7808 Received: from 935702e366f9.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 1282AA39-0016-44F7-8BF0-316B51746704.1; Mon, 06 Jul 2020 11:55:04 +0000 Received: from EUR04-DB3-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 935702e366f9.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 06 Jul 2020 11:55:04 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A1wVXNnfX2LONqtf4SUc55RB65DK34fVJqWsFLLM4UvZFP6News5Kic92pQSIQWPP6tQVbbgBYKBwY2o4A670nko4iP1TFoS5fjZUBMNMThuM52ty8MYDeRj24dj/UoEpnoA9dJ7WLSQgyz5HnRdCrIaaa/dp4FRBzvPvq0qUTIUE/pmA7qFMJt63RCi6OA2lB0y80ZDbCOTwUEXYHFkysJNpJZFRP0h8ZtlVvsn2Ft/TTdATJ2B51iF8zBzf0pAFuQt2KrXY9y5+5d305SBYRllQkfIkrRmTuhg4Uheq2eioPk8p3G4hdxEqXtUy7PyoF57RBM6yRaRA+R+KJMPBA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5mn9yxstE1d05MJ4Zi7TgmcqtCoZ8c5ThZEy/t1lZ0k=; b=Wm+yOOu57fOAQqntLgsIbFoxd5UJwLIsJ/5TpI3sbMpWKj0GG4NN3Zy/lO1aJWB4gZU03iHXWm4evKdcZKObJzeZajgryhczZkxpSjgA29qmCFAc75B/2HkZRkejRwm6ZFZ/66bCrd7UtvKKO++cWbUMa3B6FWDlgUs9D1xfol77pped/e0NEg94zcunlnlMs4mdfPfj2ZhAyDU0D0jnwmtjSGVuh/fMaIHCQQslk/HlqOpBERqnWnItmGXIw7seZhKzsKSoMitFGNzSpRmcjSQrQ5Xj9sfEq8/5D+tBn7SAWPXjtu//YtLlDV4uljQ1eVHC3mC9huGpLgnI3jgDNQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5mn9yxstE1d05MJ4Zi7TgmcqtCoZ8c5ThZEy/t1lZ0k=; b=3dKcCQm5AidQ0pMuGg6RI6aWB1B5XVV6p0DV7MPBKG1UjpDDndYREJ4Vvif0+O2rIGabk27lTgWMc5sIS9chKb9TlasjywHk5aeY3694hD6QG7+u4sXJtYGeaVSY/l/cTKPZf1sYCw7pZueELWZhF139zjXqcj7XBwgCdSZ4ZHg= Received: from AM6PR08MB3429.eurprd08.prod.outlook.com (2603:10a6:20b:49::19) by AM6PR08MB4900.eurprd08.prod.outlook.com (2603:10a6:20b:cc::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.20; Mon, 6 Jul 2020 11:55:03 +0000 Received: from AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::541a:8b7c:8de1:8989]) by AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::541a:8b7c:8de1:8989%3]) with mapi id 15.20.3153.029; Mon, 6 Jul 2020 11:55:03 +0000 From: Simon Frost To: Laurence Lundblade CC: Henk Birkholz , Dave Thaler , "rats@ietf.org" Thread-Topic: [Rats] Verifier Input instead of Endorsement? Thread-Index: AQHWUJmPF/FK/ZGSC0er53SjFmxYhqj1i/PAgAIiQACAAsks8A== Date: Mon, 6 Jul 2020 11:55:03 +0000 Message-ID: References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <663F1B08-930B-4D9E-BC80-9D281688B550@island-resort.com> In-Reply-To: <663F1B08-930B-4D9E-BC80-9D281688B550@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: ae9296e8-f9cc-486d-a4b7-fb59979cdaed.0 x-checkrecipientchecked: true Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [212.69.61.73] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 64c2fcfc-0d5b-4933-f53e-08d821a36ed9 x-ms-traffictypediagnostic: AM6PR08MB4900:|AM0PR08MB4131: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:4502;OLM:4502; x-forefront-prvs: 04569283F9 X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: SkwzjU/4LxcCuG9wJdOu34Sh9adIcRAkhvvhol2QllmOktuVgFizRUhCCiwb3pUdtQJ51+L58CV2uurxuJlABkhuJ0Ml2zD7eZa+kE2w7it2HMKbPFFrKjTTJYGT0B1zMPx+PqAO6sVLfjb4TCBPmSxKFcP2zyNe5stAgWFQ1u/eDZgeMtuPj6kZlFi6J8MKe863OcEpLqi7nVqoR238wLfIxX1HTbV6DQeuvitgZ+QwKxaNfu306zgvdIV+i4IZRtWWSTV6OPOWHltixS2V4oZMabP75RG+AJl1svnDPeAhrPDb77SIkIxgb3xx9iqbqeAtrxOU0oW2Nk3BrrsKIhUuZK65wPhC1U/s+wVNPJd1vLmayamIgyB06F8RZvIkQAE7zSjZM653Fm4jYKgw7Q== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3429.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(39860400002)(366004)(136003)(376002)(396003)(33656002)(83380400001)(9686003)(4326008)(8936002)(166002)(54906003)(966005)(30864003)(71200400001)(45080400002)(2906002)(53546011)(186003)(6916009)(5660300002)(8676002)(26005)(316002)(55016002)(52536014)(6506007)(86362001)(66446008)(64756008)(66556008)(66476007)(66946007)(478600001)(7696005)(76116006); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: +azCHB9Hq2wM/ZJhRHFXCDuDQJGg4OPHQD7VkoQfXFVoR+nrFUKyRtu52vJAKY+JpdQe/vbQlmb5zAFv+hS7kyAdgAdh5Z27btOTcG7vIHDRuulcxpGkVzuSPol3KNpDnbsf6dGsP8UNCq9pL4QeY5ha+R2RGVlc8U1YQsQHeOBdCfbOzQ2kSrYoPTs/XFVhe7YmBeJXP8basd5znrfpsE7vfgi9Nx60a1qjkNl9TpOEpekn9B6j3biM1fOsXKjucHJlnfM2EggMxnbh9zd3MYFbqMJ/MVL/wSVT7HxMNE/t1yW92aqU7eLxhjQw0RkM2q8Qe2aJ3zJ+EyWTR3+0Ugk/b9rySdn7o2kO5i04Y4Taz0RmrsfZRbSQl/HeZAf6XC097zd5uwvBArnwsC8uWo87ic0mtuChUoDSLCzmHj2juAsYkH72tUk3L33mcUXFDnbeE6pEdERkWm3dGt7MDeXaigVvrL9JXm2ZipTeT1s= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM6PR08MB34290D2E1E5A32D61727424CEF690AM6PR08MB3429eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4900 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT017.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(346002)(376002)(39860400002)(46966005)(30864003)(54906003)(316002)(8936002)(8676002)(4326008)(6862004)(70206006)(2906002)(9686003)(53546011)(6506007)(55016002)(70586007)(186003)(7696005)(33964004)(86362001)(45080400002)(26005)(52536014)(47076004)(82740400003)(966005)(166002)(336012)(5660300002)(356005)(33656002)(82310400002)(81166007)(83380400001)(478600001)(559001)(579004); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: 21794214-563f-4a69-4e97-08d821a36b0b X-Forefront-PRVS: 04569283F9 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: CNy9acSxk2C2tEP0SIQAkH1umbH+OrnNa9FjR+95AOh4IWGGPCnRJbT30JXYhXTV0E8dLvGGXPrhlNa+pzF6I37NtAB/piPDy4jGwpCH855s/UatYgZFBDekcm1wDfePUKashfJro7xIwssaqVYPkioIhItmKz3wgLh4n7tGqZvdJWqse9qyUrhZ31EMivC57aHIA1HJGKqPkUCOdg+U8F9IUCRo/0RzeeY3rW84uuwCBLv2PgT+gWX7r2PlX0rtlaVbmi6gIyL9teleU6eX9g4R4QGanlyq1QoeRAWDhCVFaxCyz7O0lmVRT+faxyyxQ3yUl3W5rwsQB6OucEVxpCWawOW5dl3DR0UW4O3R1IqqwpPdQ5QqMNK/j0kRVSz0u+iwAk8odLShdP2pjavPSZYN7G2vtWdAxcKMiB2ylzjjt0iIOXlH6Cs7+xaD+qXw4O7/qAD8MpMZH+YQ3KXlL0J3z48LItnULEpFyMdZUCk= X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Jul 2020 11:55:09.5938 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 64c2fcfc-0d5b-4933-f53e-08d821a36ed9 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT017.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4131 Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 11:55:22 -0000 --_000_AM6PR08MB34290D2E1E5A32D61727424CEF690AM6PR08MB3429eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCj4gSSBhbSBhZnRlciBncmVhdGVyIGdlbmVyYWxpdHkgKGFuZCBjbGFy aXR5KSB0aGFuIEkgdGhpbmsgd2UgaGF2ZSBub3cgd2l0aCBFbmRvcnNlbWVudHMuIEVuZG9yc2Vt ZW50cyBhcmUgKGluIG15IHVuZGVyc3RhbmRpbmcpIGEgc29tZXdoYXQgc3BlY2lmaWMgcmVwcmVz ZW50YXRpb24gb2YgZGF0YSBhbmQgcHJvdG9jb2wuDQpJIGFncmVlIHdpdGggeW91ciBhaW0uIEni gJltIHN1Z2dlc3RpbmcgdGhhdCB3ZSByZWxheCB0aGF0IGRlZmluaXRpb24gdG8gYWxsb3cg4oCY RW5kb3JzZW1lbnRz4oCZIHRvIGNvdmVyIGFsbCB0aGUgY2F0ZWdvcmllcyBvZiBkYXRhIG9yaWdp bmF0aW5nIGZyb20gdGhlIHN1cHBseSBjaGFpbiB0aGF0IHRoZSBWZXJpZmllciBtYXkgbmVlZCB0 byBjb25zdWx0LiBJ4oCZbSBub3QgYXdhcmUgdGhhdCBFbmRvcnNlbWVudCBoYXMgYSBzcGVjaWZp YyBpbmR1c3RyeSBkZWZpbml0aW9uLiAoSeKAmW0gYXdhcmUgb2YgRW5kb3JzZW1lbnQgQ2VydGlm aWNhdGVzIGZvciBUUE1zLCBidXQgdGhhdOKAmXMgYSBtb3JlIHNwZWNpYWxpc2VkIHRlcm0pLiBJ 4oCZbSBoYXBweSB0byBoYXZlIGEgZGVmaW5pdGlvbiBwb2ludGVkIG91dCBvciBlcXVhbGx5IGlm IEVuZG9yc2VtZW50IGp1c3QgaGFzIGV4Y2Vzc2l2ZSBjb25ub3RhdGlvbnMgZm9yIHRoZSBXRyB0 aGVuIHRoZSBhcmNoaXRlY3R1cmUgY2FuIGFkb3B0IGFub3RoZXIsIGRlc2NyaXB0aXZlLCB0ZXJt LiBJIGFncmVlIHRoYXQgbW9yZSBpbmZvcm1hdGlvbiB3b3VsZCB0aGVuIGJlIG5lZWRlZCBhbmQg eW91ciA0IGNhdGVnb3JpZXMgY291bGQgZm9ybSB0aGUgYmFzaXMgb2YgYSBzZXQgb2YgZXhhbXBs ZXMgZm9yIHR5cGVzIG9mIGRhdGEgaW4gdGhhdCBjYXRlZ29yeS4NCg0KQXMgeW91IHNheSBvbiBh IHNlcGFyYXRlIHJlcGx5Og0KPiBXZWxsLCBmaXJzdCwgSSB0aG91Z2h0IHdlIGFncmVlZCB0aGF0 IHRoZSBhcmNzIGFib3ZlIFZlcmlmaWVyIHdlcmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgYXJjaGl0 ZWN0dXJl4oCmDQpJIHJlbWVtYmVyIGhhdmluZyBhIGRpc2N1c3Npb24gbG9jYWxseSB3aGVuIHRo ZSBXRyBjaGFydGVyIHdhcyBkZWZpbmVkIGluIHdoaWNoIHdlIGFncmVlZCB0aGF0IGtlZXBpbmcg aXQgb3V0IG9mIHNjb3BlIHdhcyBleGFjdGx5IHRoZSBjb3JyZWN0IGFwcHJvYWNoLCBqdXN0IGJl Y2F1c2UgdGhlcmUgd2VyZSBzbyBtYW55IHdheXMgaW4gd2hpY2ggdGhlIHJlbGF0aW9uc2hpcHMg bWF5IG5lZWQgdG8gYmUgc2F0aXNmaWVkLg0KDQpIVEgNClNpbW9uDQoNCkZyb206IExhdXJlbmNl IEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KU2VudDogMDQgSnVseSAyMDIwIDE4 OjIzDQpUbzogU2ltb24gRnJvc3QgPFNpbW9uLkZyb3N0QGFybS5jb20+DQpDYzogSGVuayBCaXJr aG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT47IERhdmUgVGhhbGVyIDxkdGhh bGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz47IHJhdHNAaWV0Zi5vcmcNClN1Ympl Y3Q6IFJlOiBbUmF0c10gVmVyaWZpZXIgSW5wdXQgaW5zdGVhZCBvZiBFbmRvcnNlbWVudD8NCg0K SGkgU2ltb24sDQoNCkFwcHJlY2lhdGUgeW91IGp1bXBpbmcgaW4gaGVyZS4NCg0KDQpPbiBKdWwg MywgMjAyMCwgYXQgMjoyOCBBTSwgU2ltb24gRnJvc3QgPFNpbW9uLkZyb3N0QGFybS5jb208bWFp bHRvOlNpbW9uLkZyb3N0QGFybS5jb20+PiB3cm90ZToNCg0KSeKAmXZlIGp1c3QgdHJpZWQgdG8g Y2F0Y2ggdXAgb24gdGhlIHRoaW5raW5nIG9uIHRoaXMgdmlhIHRoaXMgdGhyZWFkIGFuZCBnaXRo dWIjOTQgYW5kIHJlYWxpc2UgdGhhdCB0aGUgY29udmVyc2F0aW9uIGhhcyBiZWNvbWUgaGlnaGx5 IGRldGFpbGVkIGFuZCB0aGF0IHNvbWUgdmVyeSBwcmVjaXNlIGRlZmluaXRpb25zIGFyZSBlbWVy Z2luZyBmb3IgY29uY2VwdHMgdGhhdCBvcmlnaW5hbGx5IHdlcmUgcXVpdGUgZ2VuZXJhbCAoZS5n LiBlbmRvcnNlbWVudCkuIFBlcmhhcHMgdGhlcmXigJlzIGEgcmlzayB0aGF0IHRoZSBhcmNoaXRl Y3R1cmUgbWF5IGJlIG92ZXJseSBjb25zdHJhaW5pbmcgYXMgYSByZXN1bHQuDQoNCkkgYW0gYWZ0 ZXIgZ3JlYXRlciBnZW5lcmFsaXR5IChhbmQgY2xhcml0eSkgdGhhbiBJIHRoaW5rIHdlIGhhdmUg bm93IHdpdGggRW5kb3JzZW1lbnRzLiBFbmRvcnNlbWVudHMgYXJlIChpbiBteSB1bmRlcnN0YW5k aW5nKSBhIHNvbWV3aGF0IHNwZWNpZmljIHJlcHJlc2VudGF0aW9uIG9mIGRhdGEgYW5kIHByb3Rv Y29sLg0KDQpJIGFtIGdpdmluZyBhIGxvdCBvZiBleGFtcGxlcyB0byB0cnkgdG8gY29tbXVuaWNh dGUgY2xlYXJseSwgbm8gdG8gc3BlY2lmeSBhbnl0aGluZy4NCg0KSSB3b3VsZCBsaWtlIHRoZSBs aXN0LW9mLWZvdXIgaW4gdGhlIGRvY3VtZW50IGJlY2F1c2UgSSB0aGluayBpdCBpcyBoaWdobHkg aW5mb3JtYXRpdmUgKGV2ZW4gSGVua+KAmXMgdGhpbmtzIHRoZXkgYXJlIHNvKSwgYnV0IG5vdCBh cyBhIHByZXNjcmlwdGlvbiBvciByZXF1aXJlbWVudC4NCg0KDQoNClRyeWluZyB0byBhdm9pZCB1 c2luZyBhbnkgdGVybSB0aGF0IG1heSBub3cgYmUgb3ZlcmxvYWRlZOKApg0KSXQgc2VlbXMgdGhh dCB0aGUgaW1wb3J0YW50IGluZm9ybWF0aW9uIHRvIGNhcHR1cmUgaXMgdGhhdCB0aGUgVmVyaWZp ZXIgaXMgYSBtZWFucyBvZiBwcm92aWRpbmcgdHJhbnNpdGl2ZSB0cnVzdCBiZXR3ZWVuIHRoZSBy ZWx5aW5nIHBhcnR5IGFuZCBhIHBvdGVudGlhbGx5IGNvbXBsZXggU3VwcGx5IENoYWluIGZyb20g d2hpY2ggdGhlIGF0dGVzdGluZyBlbmRwb2ludCBvcmlnaW5hdGVkLiBUaGUgUlAgdG8gVmVyaWZp ZXIgcmVsYXRpb25zaGlwIG11c3QgYmUgc2VjdXJhYmxlIGFuZCB0cnVzdHdvcnRoeSBpbiBzb21l IGFjaGlldmFibGUgd2F5IHN1Y2ggdGhhdCBhbiBSUCBjYW4gdHJ1c3QgdGhlIGF0dGVzdGF0aW9u IHJlc3VsdHMgcmVjZWl2ZWQuIFNpbWlsYXJseSB0aGF0IGNyZWF0ZXMgYW4gZXhwZWN0YXRpb24g dGhhdCB0aGUgVmVyaWZpZXIgaGFzIGVzdGFibGlzaGVkIHNlY3VyYWJsZSAmIHRydXN0d29ydGh5 IHJlbGF0aW9uc2hpcHMgd2l0aCB0aGUgc3VwcGx5IGNoYWluIGluIG9yZGVyIHRvIHJlY2VpdmUg YXBwcm9wcmlhdGUgcHJvb2ZzIC8gdGVzdGltb25pZXMgb2YgaXRlbXMgdGhhdCB0aGUgVmVyaWZp ZXIgY2FuIGlkZW50aWZ5IHdpdGhpbiB0aGUgYXR0ZXN0YXRpb24gZXZpZGVuY2UuIFRoZSBWZXJp ZmllciB0byBTdXBwbHkgQ2hhaW4gcmVsYXRpb25zaGlwcyBhcmVu4oCZdCBqdXN0IHRlY2huaWNh bCwgdGhleSByZXF1aXJlIGNvbnRyYWN0dWFsIHJlbGF0aW9uc2hpcHMgYXMgd2VsbCB3aGljaCBj YW4gYnJpbmcgYSBzdHJvbmcgaW5mbHVlbmNlIGludG8gdGhlIGRldGFpbHMgb2YgaG93IHRoZSBp bmZvcm1hdGlvbiBnZXRzIHRvIHRoZSBWZXJpZmllci4gIElmIHdlIGhhdmUgdGhlIHJlbGF0aW9u c2hpcHMgc2tldGNoZWQgb3V0IGFuZCBhbiBleHBsb3JhdGlvbiBvZiB0aGUgdHlwZXMgb2YgaW5m b3JtYXRpb24gdGhhdCBtYXkgYmUgcmVxdWlyZWQsIGlzIGl0IG5lY2Vzc2FyeSB0byBnbyBpbnRv IGZ1cnRoZXIgZGV0YWlsPw0KDQpJIHRoaW5rIHRoaXMgaXMgYSBwb3NzaWJsZSBhcHByb2FjaC4g VG8gdGFrZSB0aGlzLCBJIHRoaW5rIEVuZG9yc2VtZW50cyBoYXZlIHRvIGJlIGVpdGhlciByZW1v dmVkIG9yIHJlZGVmaW5lZCBpbiBzb21lIHZlcnkgZ2VuZXJhbCB3YXkgdG8gc2lkZS1zdGVwIHRo ZSBpZGVhcyBwZW9wbGUgaGF2ZSBhYm91dCB0aGVtLg0KDQpMTA0KDQoNCg0KDQoNClRoYW5rcw0K U2ltb24NCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208 bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpTZW50OiAwMiBKdWx5IDIwMjAgMTg6NTIN ClRvOiBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPG1haWx0 bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPj4NCkNjOiBEYXZlIFRoYWxlciA8ZHRo YWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnPj47IHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1JhdHNdIFZlcmlmaWVyIElucHV0IGluc3RlYWQgb2YgRW5k b3JzZW1lbnQ/DQoNCg0KT24gSnVsIDIsIDIwMjAsIGF0IDY6MzEgQU0sIEhlbmsgQmlya2hvbHog PGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0 LmZyYXVuaG9mZXIuZGU+PiB3cm90ZToNCg0KSGkgTGF1cmVuY2UsDQoNCndoaWxlIEkgdGhpbmsg dGhhdCBJIHVuZGVyc3RhbmQgd2hlcmUgeW91IGFyZSBjb21pbmcgZnJvbSBoZXJlLCBJIGhhdmUg dG8gc2F5IHRoYXQgSSBhbHNvIHRoaW5rIHRoYXQ6DQoNCiogIm1hbnVmYWN0dXJlcihzKSIgaXMg YSB0b28gYXJiaXRyYXJpbHkgcmVzdHJpY3RpbmcgdGVybSwgd2hpY2ggaXMgd2h5IHdlIGFncmVl ZCBvbiBlbmRvcnNlcg0KDQpUaGUgcHJvYmxlbSB3aXRoIEVuZG9yc2VyIGlzIHRoYXQgdGhleSBw cm9kdWNlIEVuZG9yc2VtZW50cyBhbmQgSSB0aGluayB0aGVyZSBhcmUgcHJvYmxlbXMgd2l0aCBF bmRvcnNlbWVudHM6DQogLSBJbiBCZXJsaW4geW91IHRvbGQgbWUgdGhleSBkb27igJl0IGhhdmUg a2V5cyBpbiB0aGVtLiBTbyB0aGVuIGhvdyBkbyBrZXlzIGdldCBpbnRvIHRoZSBWZXJpZmllcj8N CiAtIEVuZG9yc2VtZW50cyBzZWVtIHRvIGJlIHNtYWxsIHNpZ25lZCBkb2N1bWVudHMgb2YgYXR0 cmlidXRlcyBzbyB0aGV54oCZcmUgbm90IHNvIGdvb2QgZm9yOg0KICAgICAtIFJlcHJlc2VudGlu ZyBhIGRhdGFiYXNlIG9mIG1pbGxpb25zIG9mIGtleXMNCiAgICAgLSBSZXByZXNlbnRpbmcgSFRU UCBhY2Nlc3MgdG8gYSBtYW51ZmFjdHVyZXJzIGRhdGFiYXNlIG9mIGtub3duLWdvb2QvcmVmZXJl bmNlIHZhbHVlcw0KICAgICAtIE9uZS10aW1lIHBoeXNpY2FsIC8gY2VyZW1vbmlhbCB0cmFuc2Zl ciBvZiBhIHJvb3Qga2V5DQotIEVuZG9yc2VtZW50cyBzZWVtIGxpa2UgYSBzb21ld2hhdCBuYXJy b3dlZCwgc3BlY2lmaWMgd2F5IG9mIHByb3ZpZGluZyB2ZXJpZmllciBpbnB1dA0KLSBFbmRvcnNl bWVudHMgaW1wbHkgc2lnbmluZyBhcyB0aGUgc2VjdXJpdHkgbWVjaGFuaXNtLCB3aGljaCBpcyB0 b28gbmFycm93Lg0KDQpNYXliZSB3ZSBjYW4gZmluZCBhIHRlcm0gb3RoZXIgdGhhbiBtYW51ZmFj dHVyZXI/ICBXaGF0IEkgd2FudCB0byBhdm9pZCBpcyB0aGUgZ2VuZXJhbCB1c2Ugb2YgdGhlIHRl cm0gRW5kb3JzZW1lbnQgZm9yIHRoZSBhYm92ZSByZWFzb25zLiBVc2luZyB0aGUgdGVybSBFbmRv cnNlbWVudCB0byBtZSBpcyBsaWtlIHVzaW5nIHRoZSBwcm90b2NvbC1zcGVjaWZpYyB0ZXJtIEVB VCBpbnN0ZWFkIG9mIGNvbmNlcHR1YWwgdGVybSBBdHRlc3RhdGlvbiBFdmlkZW5jZS4gVXNlIG9m IHRoZSB0ZXJtIEVuZG9yc2VyIGltcGxpZXMgRW5kb3JzZW1lbnQsIGJ1dCBtYXliZSBpdCBpcyBP SyBpZiB3ZSBkb27igJl0IHVzZSB0aGUgdGVybSBFbmRvcnNlbWVudC4NCg0KDQoNCiogZXZlcnkg YXJyb3cgaXMgb2YgY291cnNlICJpbnB1dC9vdXRwdXQiLCBidXQgd2UgYXJlIG5vdCBjYWxsaW5n IGV2aWRlbmNlICJBdHRlc3RlciBPdXRwdXQiLiBTbywgVmVyaWZpZXIgSW5wdXQgaXMgaW4gY29u dHJhc3QgYSB0b28gYW1iaWd1b3VzIGNhdGVnb3J5IChpdCBkb2VzIG5vdCBhZGQgYW55IHNlbWFu dGljcyB0byB0aGUgYXJyb3cpDQoNCk1heWJlIHRoZSBub24tc3BlY2lmaWNpdHkgb2Yg4oCcVmVy aWZpZXIgSW5wdXTigJ0gc2VlbXMgdXNlZnVsPyBJdCBhbGxvd3MgdGhlIGxpc3Qgb2YgZm91ciAo a2V5cywgcmVmIHZhbHVlcywgc3RhdGljIGNsYWltcywgcG9saWN5KSB0byBiZSB1c2VkIGFuZCBm b3IgdGhlbSB0byBiZSB2YXJpYWJsZS4gSXQgaXMganVzdCBhIGdyb3VwaW5nLg0KDQpNYXliZSB3 ZSBjYW4gZmluZCBhIGJldHRlciB0ZXJtPyBIZXJl4oCZcyBhIGZldzoNCiAgIFZlcmlmaWVyIENy aXRlcmlhDQogICBWZXJpZmllciBEYXRhDQogICBBdHRlc3RlciBWZXJpZmljYXRpb24gQ3JpdGVy aWENCiAgIEF0dGVzdGVyIFRydXN0IE1hdGVyaWFscw0KDQoNCg0KDQoqIHRoZSBpdGVtaXplZCBs aXN0IHRoYXQgc3RhcnRzIHdpdGgga2V5IG1hdGVyaWFsIHByb3ZpZGVzIGEgdmVyeSBpbnR1aXRp dmUgZXhhbXBsZSBhbmQgbWF5YmUgd2UgY291bGQgdXNlIHRoYXQga2luZCBvZiBsaXN0IGFzIGEg bW9yZSBwcm9taW5lbnQgZXhhbXBsZSBpbiB0aGUgYXJjaCBJLUQNCg0KSeKAmWQgcHJlZmVyIHRo ZSBsaXN0IG9mIGZvdXIgdG8gYmUgZXhwbGljaXQgYXJjaGl0ZWN0dXJlLCBub3QganVzdCBhbiBl eGFtcGxlLg0KDQoNCg0KDQpUaGUgcXVlc3Rpb24sIGlmIHJlZmVyZW5jZSB2YWx1ZXMgYXJlIGVu ZG9yc2VtZW50cyBvciBhcHByYWlzYWwgcG9saWNpZXMgb3IgYSB0aGlyZCBpdGVtIGlzLi4uIHBy b2JhYmx5IG9rYXkgYW5kIEkgYW0gaW50ZXJlc3RlZCBpbiBhbiBhbnN3ZXIgLSBidXQgdGhhdCBp cyBhIGRldGFpbCwgSSB0aGluay4gQXMgbG9uZyBhcyB0aGV5IGFyZSBhbHNvIG1lbnRpb25lZCwg SSBjYW4gZm9sbG93IGFsbCB0aHJlZSBsaW5lcyBvZiB0aG91Z2h0Lg0KDQpXZSBzaG91bGQgYXNz dW1lIG91ciBhdWRpZW5jZSBrbm93cyBsaXR0bGUgdG8gbm90aGluZyBhYm91dCBUQ0cgd29yayAo bGlrZSBtZSkgYW5kIGxpdHRsZSBhYm91dCBhdHRlc3RhdGlvbiwgc28gSeKAmWQgcHJlZmVyIHRo ZXkgbm90IGJlIGRldGFpbHMsIGJ1dCByYXRoZXIgdXAgZnJvbnQgYW5kIGNsZWFyLg0KDQoNCg0K DQpBbHNvLCBJIGFtIGluIHN0cm9uZyBkb3VidCB0aGF0IHRoZSBmb2xsb3dpbmcgc3RhdGVtZW50 IGlzIGFsd2F5cyBjb3JyZWN0OiAiVGhlIHRyYW5zZmVyIG9mIGFsbCB0aGVzZSBpbnB1dHMgdG8g dGhlIFZlcmlmaWVyIGRvZXMgbmVlZCB0byBiZSBzZWN1cmVkLiIuIEkgYW0gY29uZnVzZWQgYnkg dGhlIGV4Y2VwdGlvbnMgdGhhdCBmb2xsb3cgdGhhdCBzdGF0ZW1lbnQgd2hpY2ggYmFzaWNhbGx5 IHNheSwgSSB0aGluazogaW4gc29tZSBjYXNlcyB0aGV5IGhhdmUgdG8gYmUgc2VjdXJlZC4gTWF5 YmUgd2UgbWVhbiBkaWZmZXJlbnQgdGhpbmdzIGJ5ICJzZWN1cmVkIj8NCg0KTGV0IG1lIHRyeSBh Z2FpbjoNCi0gVGhlIFZlcmlmaWVyIG11c3QgYWx3YXlzIGVzdGFibGlzaCB0aGUgYXV0aGVudGlj aXR5IG9mIHRoZSBNYW51ZmFjdHVyZXINCi0gQWxsIGlucHV0IGZyb20gdGhlIE1hbnVmYWN0dXJl ciBtdXN0IGJlIGludGVncml0eSBwcm90ZWN0ZWQNCi0gVGhlIFZlcmlmaWVyIG11c3QgYWx3YXlz IGVzdGFibGlzaCB0aGUgYXV0aGVudGljaXR5IG9mIHRoZSBWZXJpZmllciBPd25lcg0KLSBBbGwg aW5wdXQgZnJvbSB0aGUgVmVyaWZpZXIgT3duZXIgbXVzdCBiZSBpbnRlZ3JpdHkgcHJvdGVjdGVk DQotIEluIHNvbWUgY2FzZXMgdGhlIE1hbnVmYWN0dXJlciBtYXkgd2lzaCB0byBlc3RhYmxpc2gg dGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUgVmVyaWZpZXIgYmVmb3JlIGdpdmluZyBpbnB1dHMNCi0g SW4gc29tZSBjYXNlcyB0aGUgT3duZXIgbWF5IHdpc2ggdG8gZXN0YWJsaXNoIHRoZSBhdXRoZW50 aWNpdHkgb2YgdGhlIFZlcmlmaWVyIGJlZm9yZSBnaXZpbmcgaW5wdXRzDQotIEluIHNvbWUgY2Fz ZXMgY29uZmlkZW50aWFsaXR5IG9mIHRoZSBpbnB1dHMgaXMgcmVxdWlyZWQNCg0KTEwNCg0KDQoN Cg0KDQpWaWVsZSBHcsO8w59lLA0KDQpIZW5rDQoNCk9uIDAyLjA3LjIwIDAzOjQ2LCBMYXVyZW5j ZSBMdW5kYmxhZGUgd3JvdGU6DQoNCg0KSGVyZeKAmXMgcm91Z2ggcHJvcG9zZWQgdGV4dCBhbmQg ZGlhZ3JhbS4gTm90IHN1cmUgd2hlcmUgaXQgd291bGQgZ28gaW4gdGhlIGRvYyB5ZXQuDQpMTA0K ICAgICAgICAgICoqKioqKioqKioqKioqKioqKiogICAqKioqKioqKioqKiogICAgICoqKioqKioq KioqKioqKioNCiAgICAgICAgICAqIE1hbnVmYWN0dXJlcihzKSAqICAgKiBWZXJpZmllciAqICAg ICAqIFJlbHlpbmcgUGFydHkqDQogICAgICAgICAgKioqKioqKioqKioqKioqKioqKiAgICogIE93 bmVyICAgKiAgICAgKiAgT3duZXIgICAgICAgKg0KICAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICAqKioqKioqKioqKiogICAgICoqKioqKioqKioqKioqKioNCiAgICAgICAgICAgICAgICAg ICAgICAgfCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgIE1hbnVm YWN0dXJlciB8ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAg IFZlcmlmaWVyIHwgICAgICAgICAgICAgIHxPd25lciAgICAgICAgICAgIHwNCiAgICAgICAgICAg ICAgICBJbnB1dCAgfCAgICAgICAgICAgICAgfFZlcmlmaWVyICAgICAgICAgfA0KICAgICAgICAg ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8SW5wdXQgICAgICAgICAgICB8IEFwcHJhaXNh bA0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAg ICB8IFBvbGljeSBmb3INCiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfCAg ICAgICAgICAgICAgICAgfCBBdHRlc3RhdGlvbg0KICAgICAgICAgICAgICAgICAgICAgICB8ICAg ICAgICAgICAgICB8ICAgICAgICAgICAgICAgICB8ICBSZXN1bHQNCiAgICAgICAgICAgICAgICAg ICAgICAgdiAgICAgICAgICAgICAgdiAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICAgICAg ICAgICAgLi0tLS0tLS0tLS0tLS0tLS0tLiAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAg IC4tLS0tLT58ICAgICBWZXJpZmllciAgICB8LS0tLS0tLiAgICAgICAgIHwNCiAgICAgICAgICAg ICAgfCAgICAgICctLS0tLS0tLS0tLS0tLS0tLScgICAgICB8ICAgICAgICAgfA0KICAgICAgICAg ICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8DQogICAgICAg ICAgICAgIHwgICAgICAgICAgICAgICAgICAgIEF0dGVzdGF0aW9ufCAgICAgICAgIHwNCiAgICAg ICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgUmVzdWx0cyAgICB8ICAgICAgICAgfA0KICAg ICAgICAgICAgICB8IEV2aWRlbmNlICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8DQog ICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwN CiAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB2ICAgICAgICAg dg0KICAgICAgICAuLS0tLS0tLS0tLS4gICAgICAgICAgICAgICAgICAgICAgLi0tLS0tLS0tLS0t LS0tLS0tLg0KICAgICAgICB8IEF0dGVzdGVyIHwgICAgICAgICAgICAgICAgICAgICAgfCBSZWx5 aW5nIFBhcnR5ICAgfA0KICAgICAgICAnLS0tLS0tLS0tLScgICAgICAgICAgICAgICAgICAgICAg J+KAlOKAlOKAlOKAlOKAlOKAlOKAlOKAlOKAmA0KQ29uY2VwdHVhbGx5IHRoZXJlIGFyZSBmb3Vy IG1haW4gaW5wdXRzIHRvIHRoZSBWZXJpZmllciBhc2lkZSBmcm9tIHRoZSBBdHRlc3RhdGlvbiBF dmlkZW5jZS4gVGhleSBhcmU6DQogICAtIEtleSBtYXRlcmlhbCBmb3IgdmVyaWZ5aW5nIHRydXN0 IGluIHRoZSBBdHRlc3Rlcg0KICAgLSBLbm93bi1nb29kL3JlZmVyZW5jZSB2YWx1ZXMgZm9yIGNv bXBhcmlzb24gd2l0aCBDbGFpbXMgaW4gdGhlIEF0dGVzdGF0aW9uIEV2aWRlbmNlDQogICAtIFN0 YXRpYyBpbXBsaWNpdCBjbGFpbXMgZm9yIHRoZSBwYXJ0aWN1bGFyIEF0dGVzdGVyIHRoYXQgYXJl IHBhc3MgdG8gdGhlIFJlbHlpbmcgUGFydHkgaW4gQXR0ZXN0YXRpb24gUmVzdWx0cw0KICAgLSBQ b2xpY3kgQ29uZmlndXJhdGlvbg0KQW55IG9mIHRoZXNlIGZvdXIgY2FuIGNvbWUgZnJvbSBlaXRo ZXIgdGhlIE1hbnVmYWN0dXJlciBhcyBNYW51ZmFjdHVyZXIgVmVyaWZpZXIgSW5wdXQgb3IgZnJv bSB0aGUgVmVyaWZpZXIgT3duZXIgYXMgT3duZXIgVmVyaWZpZXIgSW5wdXQuIFRoZXkga2V5IG1h dGVyaWFsIHVzdWFsbHkgYWx3YXlzIGNvbWVzIGZyb20gdGhlIG1hbnVmYWN0dXJlciBhbmQgdGhl IHBvbGljeSBmcm9tIHRoZSBWZXJpZmllciBPd25lciwgYnV0IHRoZXJlIGlzIG5vIHN0cmljdCBy ZXF1aXJlbWVudCBmb3IgdGhpcy4gVGhlIGtub3duLWdvb2QvcmVmZXJlbmNlIHZhbHVlcyBhbmQg c3RhdGljIGltcGxpY2l0IGNsYWltcyBvZnRlbiBjb21lIGZyb20gZWl0aGVyIG9yIGJvdGguDQpU aGVyZSBpcyBubyBzdHJpY3Qgc2VwYXJhdGlvbiBiZXR3ZWVuIE1hbnVmYWN0dXJlciBhbmQgVmVy aWZpZXIgT3duZXIuIFRoZXkgY291bGQgYmUgdGhlIHNhbWUuIFRoZXJlIGNvdWxkIGFsc28gYmUg M3JkIHBhcnR5IGludGVybWVkaWFyaWVzIGJldHdlZW4gdGhlIE1hbnVmYWN0dXJlciBhbmQgdGhl IFZlcmlmaWVyLg0KQW4gRW5kb3JzZW1lbnQgaXMgb25lIGVzdGFibGlzaGVkIGZvcm1hdCBmb3Ig c29tZSBvZiB0aGVzZSBpbnB1dHMuIEl0IHVzdWFsbHkgY29tZXMgZnJvbSBhbiBFbmRvcnNlciB0 aGF0IGlzIHVzdWFsbHkgdGhlIE1hbnVmYWN0dXJlci4gSXQgaXMgdXN1YWxseSBhIHNpZ25lZCBk b2N1bWVudC4gQWx0ZXJuYXRpdmVseSwgdGhlIFZlcmlmaWVyIG1heSBwZXJmb3JtIHF1ZXJpZXMg YWdhaW5zdCBhIGRhdGFiYXNlLCBwZXJoYXBzIG9uZSBtYWludGFpbmVkIGJ5IGEgTWFudWZhY3R1 cmVyLCB0byBnZXQgaW5wdXRzLiBBbHRlcm5hdGl2ZWx5LCB0aGUgcm9vdCBrZXkgb2YgYSBrZXkg aGllcmFyY2h5IG1heSBiZSB0cmFuc2ZlcnJlZCBpbiBhIG9uZS10aW1lIHBoeXNpY2FsIGNlcmVt b255LiBUaGlzIGFyY2hpdGVjdHVyZSBzZXRzIG5vIHByb3RvY29sIG9yIHByb2NlZHVyZSBmb3Ig dGhpcyBpbnB1dC4NClRoZSB0cmFuc2ZlciBvZiBhbGwgdGhlc2UgaW5wdXRzIHRvIHRoZSBWZXJp ZmllciBkb2VzIG5lZWQgdG8gYmUgc2VjdXJlZC4gRm9yIGFsbCBjYXNlcywgYXV0aGVudGljaXR5 IG9mIHRoZSBNYW51ZmFjdHVyZXIgYW5kIFZlcmlmaWVyIE93bmVyIGFuZCB0aGVpciBpbnB1dHMg YXJlIHJlcXVpcmVkLiBXaXRob3V0IGF1dGhlbnRpYyBpbnB1dHMsIHRoZSBWZXJpZmllciB3aWxs IG5vdCBkbyBpdHMgam9iIGNvcnJlY3RseS4gSW4gc29tZSBjYXNlcyBjb25maWRlbnRpYWxpdHkg b2YgdGhlIGlucHV0cyBpcyByZXF1aXJlZC4gRmluYWxseSwgaW4gc29tZSBjYXNlcyB0aGUgTWFu dWZhY3R1cmVyIGFuZCBWZXJpZmllciBPd25lciB3aWxsIGF1dGhlbnRpY2F0ZSB0aGUgVmVyaWZp ZXIuDQpUaGlzIGFyY2hpdGVjdHVyZSBzZXRzIG5vIHJlcXVpcmVtZW50IGZvciBhIHBhcnRpY3Vs YXIgcHJvdG9jb2wgb3Igc2VjdXJpdHkgbWVjaGFuaXNtLiBGb3IgZXhhbXBsZSwgVExTIGNvdWxk IGJlIHVzZWQsIGJ1dCBpdCBpcyBub3QgdGhlIG9ubHkgcHJvdG9jb2wgdGhhdCBjb3VsZCBiZSB1 c2VkLA0KDQoNCk9uIEp1biAyOSwgMjAyMCwgYXQgODo1NiBQTSwgRGF2ZSBUaGFsZXIgPGR0aGFs ZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzpkdGhhbGVyPTQwbWljcm9z b2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4gPG1haWx0bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBk bWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KDQpJIGRvbuKAmXQgbGlrZSB0aGUgdGVybSDigJxWZXJp ZmllciBJbnB1dOKAnSBzaW5jZSDigJxBcHByYWlzYWwgUG9saWN5IGZvciBFdmlkZW5jZeKAnSBp cyBhbHNvIFZlcmlmaWVyIElucHV0LCBzbyBJIHdvdWxkIGZpbmQgaXQgY29uZnVzaW5nLg0KSSB0 aGluayB0aGF0IHRoZSBydWxlcyBmb3Igd2hhdCB0byBwdXQgaW4gQXR0ZXN0YXRpb24gUmVzdWx0 cyAoYnVsbGV0IDMpLCBhcyB3ZWxsIGFzIOKAnGtub3duLWdvb2QvcmVmZXJlbmNlIHZhbHVlc+KA nSBpZiBzdWNoIGV4aXN0DQooYW5kIHRoZXJlIGNhbiBiZSB2YWxpZCBwb2xpY2llcyB3aGVyZSB0 aGV5IG1heSBub3QgZXhpc3QsIG9yIHJhdGhlciB3aGVyZSB0aGUgcG9saWNpZXMgdXNlIG1vcmUg Y29tcGxleCBydWxlcyB0aGFuDQphIHNpbXBsZSB0ZXN0IGZvciBlcXVhbGl0eSBhZ2FpbnN0IGEg Y29uc3RhbnQpIGFyZSBjb25jZXB0dWFsbHkgcGFydCBvZiBBcHByYWlzYWwgUG9saWN5Lg0KSSBk byBhZ3JlZSB0aGF0IEFwcHJhaXNhbCBQb2xpY3kgY2FuIGJlIGNvbnZleWVkIHRvIHRoZSBWZXJp ZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzLCBhbmQgbWF5IGJlIGNvbXBvc2VkDQpvZiBkaWZm ZXJlbnQgdGhpbmdzIGZyb20gZGlmZmVyZW50IHNvdXJjZXMuDQpEYXZlDQoqRnJvbToqUkFUUyA8 cmF0cy1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmc+IDxtYWls dG86cmF0cy1ib3VuY2VzQGlldGYub3JnPj4qT24gQmVoYWxmIE9mKkxhdXJlbmNlIEx1bmRibGFk ZQ0KKlNlbnQ6Kk1vbmRheSwgSnVuZSAyOSwgMjAyMCAxMTozNCBBTQ0KKlRvOipyYXRzQGlldGYu b3JnPG1haWx0bzpyYXRzQGlldGYub3JnPiA8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+DQoqU3ViamVj dDoqW1JhdHNdIFZlcmlmaWVyIElucHV0IGluc3RlYWQgb2YgRW5kb3JzZW1lbnQ/DQpTdGVwcGlu ZyBiYWNrIGEgYml0IG9uIHRoZSBkZWZpbml0aW9uIG9mIGFuIEVuZG9yc2VtZW50LCBJIHRoaW5r IHRoZSBmb3VyIGlucHV0cyB0byBhIFZlcmlmaWVyIGFyZSB0aGVzZToNCiAgLSBLZXkgbWF0ZXJp YWwgZm9yIHZlcmlmeWluZyB0cnVzdCBpbiB0aGUgQXR0ZXN0ZXINCiAgLSBLbm93bi1nb29kL1Jl ZmVyZW5jZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBjbGFpbXMNCiAgLSBTdGF0aWMgaW1w bGljaXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdzIHZpYSBBdHRlc3RhdGlvbiBSZXN1 bHRzDQogIC0gQXBwcmFpc2FsIFBvbGljeQ0KVGhlc2UgY2FuIGFuZCB3aWxsIGJlIGNvbnZleWVk IHRvIHRoZSBWZXJpZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzOg0KICAtIFguNTA5IGNlcnRz IHdpdGggZXh0ZW5zaW9ucw0KICAtIFNpZ25lZCBkb2N1bWVudHMNCiAgLSBIVFRQIHF1ZXJpZXMg YWdhaW5zdCB0aGUgQXR0ZXN0ZXIvZGV2aWNlIG1hbnVmYWN0dXJlcg0KICAtIFJlbW90ZSBTUUwg b3Igc29tZSBvdGhlciBzb3J0IG9mIGRhdGFiYXNlIGFjY2VzcyB0byBtYW51ZmFjdHVyZXIocykN CiAgLSBEYXRhIHN0b3JhZ2UgbGlrZSBmbGFzaCBkcml2ZXMgdGhlIGFyZSBoYW5kIGNhcnJpZWQg aW50byB0aGUgVmVyaWZpZXIncyBzaXRlDQogIC0gT25lLXRpbWUgc3BlY2lhbCBmaWxlIHRyYW5z ZmVycw0KICAtIENlcmVtb25pYWwgcHJvY2VkdXJlcyB3aXRoIE0gb3V0IG9mIE4gcGVvcGxlIHBo eXNpY2FsIHByZXNlbnQgYXBwcm92aW5nIHRyYW5zZmVyDQpJdCBzZWVtcyBsaWtlIHNob2UtaG9y bmluZyBhbGwgb2YgdGhlIGFib3ZlIChleGNlcHQgcG9saWN5KSBpbnRvIGFuIEVuZG9yc2VtZW50 LCBsaWtlIEnigJl2ZSB0cmllZCB0byBkbyA8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0 cy13ZyUyRmFyY2hpdGVjdHVyZSUyRnB1bGwlMkY5NCZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQw bWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZz ZGF0YT0yTmt0UFglMkIzTEpYak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUzRCZy ZXNlcnZlZD0wPiAgaXMgdG9vIG11Y2guIEkgdHJpZWQgdGhpcyBzaG9lLWhvcm5pbmcgYmVjYXVz ZSBJIHRoaW5rIHRoZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQgbmVlZHMgdG8gY292ZXIgYWxsIHRo aXMgYW5kIEVuZG9yc2VtZW50cyB3YXMgd2hhdCB3YXMgaW4gaXQuIEEgdHlwaWNhbCBFbmRvcnNl bWVudCBzZWVtcyB0byBiZSBqdXN0IHRoZSBmaXJzdCB0d28gbWVudGlvbmVkLCBYLjUwOSBhbmQg c2lnbmVkIGRvY3VtZW50cyBleHBhbmRpbmcgaXRzIGRlZmluaXRpb24gdG8gaW5jbHVkZSBkYXRh YmFzZSBhY2Nlc3MgaXMgYSBzdHJldGNoLg0KUmF0aGVyIHRoYW4gZGVmaW5pbmcgRW5kb3JzZW1l bnQsIEnigJlkIGxpa2UgdG8gZGVmaW5lIFZlcmlmaWVyIElucHV0Og0KICAgICAgICAgICoqKioq KioqKioqKioqKioqKiogICAqKioqKioqKioqKiogICAgICoqKioqKioqKioqKioqKioNCiAgICAg ICAgICAqIE1hbnVmYWN0dXJlcihzKSAqICAgKiBWZXJpZmllciAqICAgICAqIFJlbHlpbmcgUGFy dHkqDQogICAgICAgICAgKioqKioqKioqKioqKioqKioqKiAgICogIE93bmVyICAgKiAgICAgKiAg T3duZXIgICAgICAgKg0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAqKioqKioqKioq KiogICAgICoqKioqKioqKioqKioqKioNCiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAg ICAgICAgfCAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgVmVyaWZpZXIgSW5wdXR8ICAgICAg ICAgICAgICB8ICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAgICAgICAgICAgIHwgICAg ICAgICAgICAgIHxBcHByYWlzYWwgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgfCAg ICAgICAgICAgICAgfFBvbGljeSAgICAgICAgICAgfA0KICAgICAgICAgICAgICAgICAgICAgICB8 ICAgICAgICAgICAgICB8Zm9yICAgICAgICAgICAgICB8IEFwcHJhaXNhbA0KICAgICAgICAgICAg ICAgICAgICAgICB8ICAgICAgICAgICAgICB8RXZpZGVuY2UgICAgICAgICB8IFBvbGljeSBmb3IN CiAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAg fCBBdHRlc3RhdGlvbg0KICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICB8ICAg ICAgICAgICAgICAgICB8ICBSZXN1bHQNCiAgICAgICAgICAgICAgICAgICAgICAgdiAgICAgICAg ICAgICAgdiAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICAgICAgICAgICAgLi0tLS0tLS0t LS0tLS0tLS0tLiAgICAgICAgICAgICAgICB8DQogICAgICAgICAgICAgIC4tLS0tLT58ICAgICBW ZXJpZmllciAgICB8LS0tLS0tLiAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAgICctLS0t LS0tLS0tLS0tLS0tLScgICAgICB8ICAgICAgICAgfA0KICAgICAgICAgICAgICB8ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwgICAgICAg ICAgICAgICAgICAgIEF0dGVzdGF0aW9ufCAgICAgICAgIHwNCiAgICAgICAgICAgICAgfCAgICAg ICAgICAgICAgICAgICAgUmVzdWx0cyAgICB8ICAgICAgICAgfA0KICAgICAgICAgICAgICB8IEV2 aWRlbmNlICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICB8DQogICAgICAgICAgICAgIHwg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgIHwNCiAgICAgICAgICAgICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB2ICAgICAgICAgdg0KICAgICAgICAuLS0t LS0tLS0tLS4gICAgICAgICAgICAgICAgICAgICAgLi0tLS0tLS0tLS0tLS0tLS0tLg0KICAgICAg ICB8IEF0dGVzdGVyIHwgICAgICAgICAgICAgICAgICAgICAgfCBSZWx5aW5nIFBhcnR5ICAgfA0K ICAgICAgICAnLS0tLS0tLS0tLScgICAgICAgICAgICAgICAgICAgICAgJ+KAlOKAlOKAlOKAlOKA lOKAlOKAlOKAlOKAmA0KDQpFbmRvcnNlbWVudHMgbXVzdCBzdGlsbCBiZSBtZW50aW9uZWQsIGJ1 dCBhcyBvbmUgZm9ybSBvZiBWZXJpZmllciBpbnB1dCBqdXN0IGxpa2UgRUFUIGlzIG9uZSBmb3Jt IG9mIEF0dGVzdGF0aW9uIEV2aWRlbmNlLg0KVmVyaWZpZXIgSW5wdXQgd291bGQgYmUgZGVmaW5l ZCBhczoNCiAgLSBLZXkgbWF0ZXJpYWwgZm9yIHZlcmlmeWluZyB0cnVzdCBpbiB0aGUgQXR0ZXN0 ZXINCiAgLSBLbm93bi1nb29kL1JlZmVyZW5jZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBj bGFpbXMNCiAgLSBTdGF0aWMgaW1wbGljaXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdz IHZpYSBBdHRlc3RhdGlvbiBSZXN1bHRzDQpUbyBkbyB0aGlzLCBJ4oCZZCByZXBsYWNlIHRoZSBj dXJyZW50IFBSIDxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGYXJjaGl0ZWN0 dXJlJTJGcHVsbCUyRjk0JmRhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdD ZjE1YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2MzY1MDk4JnNkYXRhPTJOa3RQWCUyQjNM SlhqTUVqRUZvTThrcFVJeTZ5T3h0ZSUyQnVoRllyMUVUTjRnJTNEJnJlc2VydmVkPTA+IGFuZCBp c3N1ZSA8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUy Rmlzc3VlcyUyRjY1JmRhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1 YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2Nk MDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2Mzc1MDkyJnNkYXRhPUdmTTVxRWxPNHRlTmRq ZkFCbG1WYXllR1h1WUhXQkRxSFRWdHBlZWV3N2clM0QmcmVzZXJ2ZWQ9MD4gSSBoYXZlIG9uIEVu ZG9yc2VtZW50cyB3aXRoIGEgbmV3IFBSLiBJdCB3aWxsIGJlIGEgZmFpciBiaXQgb2Ygd29yaywg c28gSSB3YW50IHRvIHNlZSBpZiB0aGVyZSBpcyBzb21lIGNvbnNlbnN1cyBmaXJzdC4NCkxMDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KUkFUUyBtYWls aW5nIGxpc3QNClJBVFNAaWV0Zi5vcmc8bWFpbHRvOlJBVFNAaWV0Zi5vcmc+IDxtYWlsdG86UkFU U0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFp bGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQoNCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpSQVRTIG1haWxpbmcgbGlzdA0KUkFUU0BpZXRm Lm9yZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmF0cw0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBl bWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJl IHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFz ZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBj b250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBz dG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuIF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpSQVRTIG1haWxp bmcgbGlzdA0KUkFUU0BpZXRmLm9yZzxtYWlsdG86UkFUU0BpZXRmLm9yZz4NCmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUg Y29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRp YWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRl ZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8g bm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9y IGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVk aXVtLiBUaGFuayB5b3UuDQo= --_000_AM6PR08MB34290D2E1E5A32D61727424CEF690AM6PR08MB3429eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIg MSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0K CXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1p bHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5 bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3Jt YWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEx LjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4u TXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7 bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTE5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQg NzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdC Ij5IaSBMYXVyZW5jZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPiZndDsgPC9zcGFuPkkgYW0gYWZ0ZXIg Z3JlYXRlciBnZW5lcmFsaXR5IChhbmQgY2xhcml0eSkgdGhhbiBJIHRoaW5rIHdlIGhhdmUgbm93 IHdpdGggRW5kb3JzZW1lbnRzLiBFbmRvcnNlbWVudHMgYXJlIChpbiBteSB1bmRlcnN0YW5kaW5n KSBhIHNvbWV3aGF0IHNwZWNpZmljIHJlcHJlc2VudGF0aW9uIG9mIGRhdGEgYW5kIHByb3RvY29s LiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tR0IiPkkgYWdyZWUgd2l0aCB5b3VyIGFpbS4gSeKAmW0gc3VnZ2VzdGluZyB0aGF0IHdlIHJl bGF4IHRoYXQgZGVmaW5pdGlvbiB0byBhbGxvdyDigJhFbmRvcnNlbWVudHPigJkgdG8gY292ZXIg YWxsIHRoZSBjYXRlZ29yaWVzIG9mIGRhdGEgb3JpZ2luYXRpbmcgZnJvbSB0aGUgc3VwcGx5IGNo YWluIHRoYXQgdGhlIFZlcmlmaWVyIG1heSBuZWVkIHRvIGNvbnN1bHQuIEnigJltIG5vdCBhd2Fy ZSB0aGF0DQogRW5kb3JzZW1lbnQgaGFzIGEgc3BlY2lmaWMgaW5kdXN0cnkgZGVmaW5pdGlvbi4g KEnigJltIGF3YXJlIG9mIEVuZG9yc2VtZW50IENlcnRpZmljYXRlcyBmb3IgVFBNcywgYnV0IHRo YXTigJlzIGEgbW9yZSBzcGVjaWFsaXNlZCB0ZXJtKS4gSeKAmW0gaGFwcHkgdG8gaGF2ZSBhIGRl ZmluaXRpb24gcG9pbnRlZCBvdXQgb3IgZXF1YWxseSBpZiBFbmRvcnNlbWVudCBqdXN0IGhhcyBl eGNlc3NpdmUgY29ubm90YXRpb25zIGZvciB0aGUgV0cgdGhlbiB0aGUgYXJjaGl0ZWN0dXJlDQog Y2FuIGFkb3B0IGFub3RoZXIsIGRlc2NyaXB0aXZlLCB0ZXJtLiBJIGFncmVlIHRoYXQgbW9yZSBp bmZvcm1hdGlvbiB3b3VsZCB0aGVuIGJlIG5lZWRlZCBhbmQgeW91ciA0IGNhdGVnb3JpZXMgY291 bGQgZm9ybSB0aGUgYmFzaXMgb2YgYSBzZXQgb2YgZXhhbXBsZXMgZm9yIHR5cGVzIG9mIGRhdGEg aW4gdGhhdCBjYXRlZ29yeS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkFzIHlvdSBzYXkgb24gYSBzZXBh cmF0ZSByZXBseTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1HQiI+Jmd0OyBXZWxsLCBmaXJzdCwgSSB0aG91Z2h0IHdlIGFncmVlZCB0 aGF0IHRoZSBhcmNzIGFib3ZlIFZlcmlmaWVyIHdlcmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgYXJj aGl0ZWN0dXJl4oCmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiPkkgcmVtZW1iZXIgaGF2aW5nIGEgZGlzY3Vzc2lvbiBsb2NhbGx5 IHdoZW4gdGhlIFdHIGNoYXJ0ZXIgd2FzIGRlZmluZWQgaW4gd2hpY2ggd2UgYWdyZWVkIHRoYXQg a2VlcGluZyBpdCBvdXQgb2Ygc2NvcGUgd2FzIGV4YWN0bHkgdGhlIGNvcnJlY3QgYXBwcm9hY2gs IGp1c3QgYmVjYXVzZSB0aGVyZSB3ZXJlIHNvIG1hbnkgd2F5cyBpbiB3aGljaCB0aGUgcmVsYXRp b25zaGlwcw0KIG1heSBuZWVkIHRvIGJlIHNhdGlzZmllZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPkhU SDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLUdCIj5TaW1vbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0O2xnbEBpc2xhbmQt cmVzb3J0LmNvbSZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiAwNCBKdWx5IDIwMjAgMTg6MjM8YnI+ DQo8Yj5Ubzo8L2I+IFNpbW9uIEZyb3N0ICZsdDtTaW1vbi5Gcm9zdEBhcm0uY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gSGVuayBCaXJraG9seiAmbHQ7aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zl ci5kZSZndDs7IERhdmUgVGhhbGVyICZsdDtkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5p ZXRmLm9yZyZndDs7IHJhdHNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRz XSBWZXJpZmllciBJbnB1dCBpbnN0ZWFkIG9mIEVuZG9yc2VtZW50PzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIFNpbW9uLDxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXBwcmVjaWF0ZSB5b3UganVtcGluZyBpbiBo ZXJlLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ T24gSnVsIDMsIDIwMjAsIGF0IDI6MjggQU0sIFNpbW9uIEZyb3N0ICZsdDs8YSBocmVmPSJtYWls dG86U2ltb24uRnJvc3RAYXJtLmNvbSI+U2ltb24uRnJvc3RAYXJtLmNvbTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tR0IiPknigJl2ZSBqdXN0IHRyaWVkIHRvIGNhdGNoIHVwIG9uIHRoZSB0aGlua2luZyBv biB0aGlzIHZpYSB0aGlzIHRocmVhZCBhbmQgZ2l0aHViIzk0IGFuZCByZWFsaXNlIHRoYXQgdGhl IGNvbnZlcnNhdGlvbiBoYXMgYmVjb21lIGhpZ2hseSBkZXRhaWxlZCBhbmQgdGhhdCBzb21lIHZl cnkgcHJlY2lzZSBkZWZpbml0aW9ucyBhcmUgZW1lcmdpbmcgZm9yIGNvbmNlcHRzIHRoYXQgb3Jp Z2luYWxseQ0KIHdlcmUgcXVpdGUgZ2VuZXJhbCAoZS5nLiBlbmRvcnNlbWVudCkuIFBlcmhhcHMg dGhlcmXigJlzIGEgcmlzazxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48L3NwYW4+dGhhdCB0aGUgYXJjaGl0ZWN0dXJlIG1heSBiZSBvdmVybHkgY29uc3Ry YWluaW5nIGFzIGEgcmVzdWx0PHNwYW4gbGFuZz0iRU4tR0IiPi48L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSBhbSBhZnRlciBncmVhdGVyIGdlbmVyYWxpdHkgKGFuZCBjbGFyaXR5KSB0aGFu IEkgdGhpbmsgd2UgaGF2ZSBub3cgd2l0aCBFbmRvcnNlbWVudHMuIEVuZG9yc2VtZW50cyBhcmUg KGluIG15IHVuZGVyc3RhbmRpbmcpIGEgc29tZXdoYXQgc3BlY2lmaWMgcmVwcmVzZW50YXRpb24g b2YgZGF0YSBhbmQgcHJvdG9jb2wuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYW0gZ2l2aW5nIGEgbG90IG9mIGV4YW1wbGVzIHRv IHRyeSB0byBjb21tdW5pY2F0ZSBjbGVhcmx5LCBubyB0byBzcGVjaWZ5IGFueXRoaW5nLjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHdvdWxk IGxpa2UgdGhlIGxpc3Qtb2YtZm91ciBpbiB0aGUgZG9jdW1lbnQgYmVjYXVzZSBJIHRoaW5rIGl0 IGlzIGhpZ2hseSBpbmZvcm1hdGl2ZSAoZXZlbiBIZW5r4oCZcyB0aGlua3MgdGhleSBhcmUgc28p LCBidXQgbm90IGFzIGEgcHJlc2NyaXB0aW9uIG9yIHJlcXVpcmVtZW50LiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLUdCIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+VHJ5aW5nIHRv IGF2b2lkIHVzaW5nIGFueSB0ZXJtIHRoYXQgbWF5IG5vdyBiZSBvdmVybG9hZGVk4oCmPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tR0IiPkl0IHNlZW1zIHRoYXQgdGhlIGltcG9ydGFudCBpbmZvcm1hdGlvbiB0 byBjYXB0dXJlIGlzIHRoYXQgdGhlIFZlcmlmaWVyIGlzIGEgbWVhbnMgb2YgcHJvdmlkaW5nIHRy YW5zaXRpdmUgdHJ1c3QgYmV0d2VlbiB0aGUgcmVseWluZyBwYXJ0eSBhbmQgYSBwb3RlbnRpYWxs eSBjb21wbGV4IFN1cHBseSBDaGFpbiBmcm9tIHdoaWNoIHRoZSBhdHRlc3RpbmcgZW5kcG9pbnQg b3JpZ2luYXRlZC4NCiBUaGUgUlAgdG8gVmVyaWZpZXIgcmVsYXRpb25zaGlwIG11c3QgYmUgc2Vj dXJhYmxlIGFuZCB0cnVzdHdvcnRoeSBpbiBzb21lIGFjaGlldmFibGUgd2F5IHN1Y2ggdGhhdCBh biBSUCBjYW4gdHJ1c3QgdGhlIGF0dGVzdGF0aW9uIHJlc3VsdHMgcmVjZWl2ZWQuIFNpbWlsYXJs eSB0aGF0IGNyZWF0ZXMgYW4gZXhwZWN0YXRpb24gdGhhdCB0aGUgVmVyaWZpZXIgaGFzIGVzdGFi bGlzaGVkIHNlY3VyYWJsZSAmYW1wOyB0cnVzdHdvcnRoeSByZWxhdGlvbnNoaXBzDQogd2l0aCB0 aGUgc3VwcGx5IGNoYWluIGluIG9yZGVyIHRvIHJlY2VpdmUgYXBwcm9wcmlhdGUgcHJvb2ZzIC8g dGVzdGltb25pZXMgb2YgaXRlbXMgdGhhdCB0aGUgVmVyaWZpZXIgY2FuIGlkZW50aWZ5IHdpdGhp biB0aGUgYXR0ZXN0YXRpb24gZXZpZGVuY2UuIFRoZSBWZXJpZmllciB0byBTdXBwbHkgQ2hhaW4g cmVsYXRpb25zaGlwcyBhcmVu4oCZdCBqdXN0IHRlY2huaWNhbCwgdGhleSByZXF1aXJlIGNvbnRy YWN0dWFsIHJlbGF0aW9uc2hpcHMgYXMNCiB3ZWxsIHdoaWNoIGNhbiBicmluZyBhIHN0cm9uZyBp bmZsdWVuY2UgaW50byB0aGUgZGV0YWlscyBvZiBob3cgdGhlIGluZm9ybWF0aW9uIGdldHMgdG8g dGhlIFZlcmlmaWVyLiAmbmJzcDtJZiB3ZSBoYXZlIHRoZSByZWxhdGlvbnNoaXBzIHNrZXRjaGVk IG91dCBhbmQgYW4gZXhwbG9yYXRpb24gb2YgdGhlIHR5cGVzIG9mIGluZm9ybWF0aW9uIHRoYXQg bWF5IGJlIHJlcXVpcmVkLCBpcyBpdCBuZWNlc3NhcnkgdG8gZ28gaW50byBmdXJ0aGVyIGRldGFp bD88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB0aGluayB0aGlzIGlzIGEgcG9zc2libGUg YXBwcm9hY2guIFRvIHRha2UgdGhpcywgSSB0aGluayBFbmRvcnNlbWVudHMgaGF2ZSB0byBiZSBl aXRoZXIgcmVtb3ZlZCBvciByZWRlZmluZWQgaW4gc29tZSB2ZXJ5IGdlbmVyYWwgd2F5IHRvIHNp ZGUtc3RlcCB0aGUgaWRlYXMgcGVvcGxlIGhhdmUgYWJvdXQgdGhlbS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LUdCIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+VGhhbmtzPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t R0IiPlNpbW9uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzoz LjBwdCAwY20gMGNtIDBjbSI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g bGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBsYW5n PSJFTi1VUyI+TGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFu ZC1yZXNvcnQuY29tIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0OzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+MDIgSnVseSAyMDIw IDE4OjUyPGJyPg0KPGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5IZW5rIEJpcmtob2x6ICZsdDs8YSBocmVmPSJtYWlsdG86aGVuay5iaXJr aG9sekBzaXQuZnJhdW5ob2Zlci5kZSI+aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZTwv YT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj5EYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXI9NDBt aWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnIj5kdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFy Yy5pZXRmLm9yZzwvYT4mZ3Q7OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9yZzwv YT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+UmU6IFtSYXRzXSBWZXJpZmllciBJbnB1dCBpbnN0ZWFkIG9mIEVuZG9y c2VtZW50Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEp1bCAyLCAy MDIwLCBhdCA2OjMxIEFNLCBIZW5rIEJpcmtob2x6ICZsdDs8YSBocmVmPSJtYWlsdG86aGVuay5i aXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZSI+aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5k ZTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5IaSBMYXVyZW5j ZSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxi cj4NCndoaWxlIEkgdGhpbmsgdGhhdCBJIHVuZGVyc3RhbmQgd2hlcmUgeW91IGFyZSBjb21pbmcg ZnJvbSBoZXJlLCBJIGhhdmUgdG8gc2F5IHRoYXQgSSBhbHNvIHRoaW5rIHRoYXQ6PGJyPg0KPGJy Pg0KKiAmcXVvdDttYW51ZmFjdHVyZXIocykmcXVvdDsgaXMgYSB0b28gYXJiaXRyYXJpbHkgcmVz dHJpY3RpbmcgdGVybSwgd2hpY2ggaXMgd2h5IHdlIGFncmVlZCBvbiBlbmRvcnNlcjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlIHByb2JsZW0gd2l0 aCBFbmRvcnNlciBpcyB0aGF0IHRoZXkgcHJvZHVjZSBFbmRvcnNlbWVudHMgYW5kIEkgdGhpbmsg dGhlcmUgYXJlIHByb2JsZW1zIHdpdGggRW5kb3JzZW1lbnRzOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7LSBJ biBCZXJsaW4geW91IHRvbGQgbWUgdGhleSBkb27igJl0IGhhdmUga2V5cyBpbiB0aGVtLiBTbyB0 aGVuIGhvdyBkbyBrZXlzIGdldCBpbnRvIHRoZSBWZXJpZmllcj88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOy0g RW5kb3JzZW1lbnRzIHNlZW0gdG8gYmUgc21hbGwgc2lnbmVkIGRvY3VtZW50cyBvZiBhdHRyaWJ1 dGVzIHNvIHRoZXnigJlyZSBub3Qgc28gZ29vZCBmb3I6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7 ICZuYnNwOy0gUmVwcmVzZW50aW5nIGEgZGF0YWJhc2Ugb2YgbWlsbGlvbnMgb2Yga2V5czxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jm5ic3A7ICZuYnNwOyAmbmJzcDstIFJlcHJlc2VudGluZyBIVFRQIGFjY2VzcyB0byBh IG1hbnVmYWN0dXJlcnMgZGF0YWJhc2Ugb2Yga25vd24tZ29vZC9yZWZlcmVuY2UgdmFsdWVzPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDsgJm5ic3A7ICZuYnNwOy0gT25lLXRpbWUgcGh5c2ljYWwgLyBjZXJlbW9u aWFsIHRyYW5zZmVyIG9mIGEgcm9vdCBrZXk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi0gRW5kb3JzZW1lbnRzIHNlZW0g bGlrZSBhIHNvbWV3aGF0IG5hcnJvd2VkLCBzcGVjaWZpYyB3YXkgb2YgcHJvdmlkaW5nIHZlcmlm aWVyIGlucHV0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEVuZG9yc2VtZW50cyBpbXBseSBzaWduaW5nIGFzIHRoZSBz ZWN1cml0eSBtZWNoYW5pc20sIHdoaWNoIGlzIHRvbyBuYXJyb3cuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsg Jm5ic3A7ICZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWF5YmUgd2UgY2FuIGZpbmQgYSB0ZXJtIG90aGVyIHRo YW4gbWFudWZhY3R1cmVyPyAmbmJzcDtXaGF0IEkgd2FudCB0byBhdm9pZCBpcyB0aGUgZ2VuZXJh bCB1c2Ugb2YgdGhlIHRlcm0gRW5kb3JzZW1lbnQgZm9yIHRoZSBhYm92ZSByZWFzb25zLiBVc2lu ZyB0aGUgdGVybSBFbmRvcnNlbWVudCB0byBtZSBpcyBsaWtlIHVzaW5nIHRoZSBwcm90b2NvbC1z cGVjaWZpYyB0ZXJtIEVBVCBpbnN0ZWFkIG9mIGNvbmNlcHR1YWwNCiB0ZXJtIEF0dGVzdGF0aW9u IEV2aWRlbmNlLiBVc2Ugb2YgdGhlIHRlcm0gRW5kb3JzZXIgaW1wbGllcyBFbmRvcnNlbWVudCwg YnV0IG1heWJlIGl0IGlzIE9LIGlmIHdlIGRvbuKAmXQgdXNlIHRoZSB0ZXJtIEVuZG9yc2VtZW50 LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVv dGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiogZXZlcnkgYXJy b3cgaXMgb2YgY291cnNlICZxdW90O2lucHV0L291dHB1dCZxdW90OywgYnV0IHdlIGFyZSBub3Qg Y2FsbGluZyBldmlkZW5jZSAmcXVvdDtBdHRlc3RlciBPdXRwdXQmcXVvdDsuIFNvLCBWZXJpZmll ciBJbnB1dCBpcyBpbiBjb250cmFzdCBhIHRvbyBhbWJpZ3VvdXMgY2F0ZWdvcnkgKGl0IGRvZXMg bm90IGFkZCBhbnkNCiBzZW1hbnRpY3MgdG8gdGhlIGFycm93KTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWF5YmUgdGhlIG5vbi1zcGVjaWZpY2l0eSBv ZiDigJxWZXJpZmllciBJbnB1dOKAnSBzZWVtcyB1c2VmdWw/IEl0IGFsbG93cyB0aGUgbGlzdCBv ZiBmb3VyIChrZXlzLCByZWYgdmFsdWVzLCBzdGF0aWMgY2xhaW1zLCBwb2xpY3kpIHRvIGJlIHVz ZWQgYW5kIGZvciB0aGVtIHRvIGJlIHZhcmlhYmxlLiBJdCBpcyBqdXN0IGEgZ3JvdXBpbmcuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1heWJlIHdlIGNhbiBmaW5kIGEgYmV0dGVyIHRlcm0/ IEhlcmXigJlzIGEgZmV3OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNwO1ZlcmlmaWVyIENyaXRlcmlh PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDsgJm5ic3A7VmVyaWZpZXIgRGF0YTxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZu YnNwO0F0dGVzdGVyIFZlcmlmaWNhdGlvbiBDcml0ZXJpYTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7ICZuYnNw O0F0dGVzdGVyIFRydXN0IE1hdGVyaWFsczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+KiB0aGUgaXRlbWl6ZWQgbGlzdCB0aGF0IHN0 YXJ0cyB3aXRoIGtleSBtYXRlcmlhbCBwcm92aWRlcyBhIHZlcnkgaW50dWl0aXZlIGV4YW1wbGUg YW5kIG1heWJlIHdlIGNvdWxkIHVzZSB0aGF0IGtpbmQgb2YgbGlzdCBhcyBhIG1vcmUgcHJvbWlu ZW50IGV4YW1wbGUgaW4gdGhlIGFyY2ggSS1EPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZZCBwcmVmZXIgdGhlIGxpc3Qgb2YgZm91ciB0byBiZSBl eHBsaWNpdCBhcmNoaXRlY3R1cmUsIG5vdCBqdXN0IGFuIGV4YW1wbGUuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KVGhlIHF1ZXN0aW9uLCBpZiByZWZl cmVuY2UgdmFsdWVzIGFyZSBlbmRvcnNlbWVudHMgb3IgYXBwcmFpc2FsIHBvbGljaWVzIG9yIGEg dGhpcmQgaXRlbSBpcy4uLiBwcm9iYWJseSBva2F5IGFuZCBJIGFtIGludGVyZXN0ZWQgaW4gYW4g YW5zd2VyIC0gYnV0IHRoYXQgaXMgYSBkZXRhaWwsIEkgdGhpbmsuIEFzIGxvbmcgYXMgdGhleSBh cmUgYWxzbyBtZW50aW9uZWQsIEkgY2FuIGZvbGxvdyBhbGwgdGhyZWUgbGluZXMgb2YgdGhvdWdo dC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldlIHNo b3VsZCBhc3N1bWUgb3VyIGF1ZGllbmNlIGtub3dzIGxpdHRsZSB0byBub3RoaW5nIGFib3V0IFRD RyB3b3JrIChsaWtlIG1lKSBhbmQgbGl0dGxlIGFib3V0IGF0dGVzdGF0aW9uLCBzbyBJ4oCZZCBw cmVmZXIgdGhleSBub3QgYmUgZGV0YWlscywgYnV0IHJhdGhlciB1cCBmcm9udCBhbmQgY2xlYXIu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGJyPg0KQWxzbywgSSBhbSBpbiBzdHJvbmcgZG91YnQgdGhhdCB0aGUgZm9sbG93aW5nIHN0 YXRlbWVudCBpcyBhbHdheXMgY29ycmVjdDogJnF1b3Q7VGhlIHRyYW5zZmVyIG9mIGFsbCB0aGVz ZSBpbnB1dHMgdG8gdGhlIFZlcmlmaWVyIGRvZXMgbmVlZCB0byBiZSBzZWN1cmVkLiZxdW90Oy4g SSBhbSBjb25mdXNlZCBieSB0aGUgZXhjZXB0aW9ucyB0aGF0IGZvbGxvdyB0aGF0IHN0YXRlbWVu dCB3aGljaCBiYXNpY2FsbHkgc2F5LCBJIHRoaW5rOiBpbiBzb21lIGNhc2VzIHRoZXkNCiBoYXZl IHRvIGJlIHNlY3VyZWQuIE1heWJlIHdlIG1lYW4gZGlmZmVyZW50IHRoaW5ncyBieSAmcXVvdDtz ZWN1cmVkJnF1b3Q7Pzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5M ZXQgbWUgdHJ5IGFnYWluOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBUaGUgVmVyaWZpZXIgbXVzdCBhbHdheXMgZXN0 YWJsaXNoIHRoZSBhdXRoZW50aWNpdHkgb2YgdGhlIE1hbnVmYWN0dXJlcjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBB bGwgaW5wdXQgZnJvbSB0aGUgTWFudWZhY3R1cmVyIG11c3QgYmUgaW50ZWdyaXR5IHByb3RlY3Rl ZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPi0gVGhlIFZlcmlmaWVyIG11c3QgYWx3YXlzIGVzdGFibGlzaCB0 aGUgYXV0aGVudGljaXR5IG9mIHRoZSBWZXJpZmllciBPd25lcjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBBbGwgaW5w dXQgZnJvbSB0aGUmbmJzcDtWZXJpZmllciBPd25lciZuYnNwO211c3QgYmUgaW50ZWdyaXR5IHBy b3RlY3RlZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+LSBJbiBzb21lIGNhc2VzIHRoZSBNYW51ZmFjdHVyZXIgbWF5IHdp c2ggdG8gZXN0YWJsaXNoIHRoZSBhdXRoZW50aWNpdHkgb2YgdGhlIFZlcmlmaWVyIGJlZm9yZSBn aXZpbmcgaW5wdXRzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LSBJbiBzb21lIGNhc2VzIHRoZSBPd25lciBt YXkgd2lzaCB0byBlc3RhYmxpc2ggdGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUgVmVyaWZpZXIgYmVm b3JlIGdpdmluZyBpbnB1dHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tIEluIHNvbWUgY2FzZXMgY29uZmlk ZW50aWFsaXR5IG9mIHRoZSBpbnB1dHMgaXMgcmVxdWlyZWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5MTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJyPg0K PGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQpWaWVsZSBHcsO8w59lLDxicj4NCjxi cj4NCkhlbms8YnI+DQo8YnI+DQpPbiAwMi4wNy4yMCAwMzo0NiwgTGF1cmVuY2UgTHVuZGJsYWRl IHdyb3RlOjxicj4NCjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+SGVyZeKAmXMg cm91Z2ggcHJvcG9zZWQgdGV4dCBhbmQgZGlhZ3JhbS4gTm90IHN1cmUgd2hlcmUgaXQgd291bGQg Z28gaW4gdGhlIGRvYyB5ZXQuPGJyPg0KTEw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PioqKioqKioqKioqKioqKioqKiogJm5ic3A7ICoqKioqKioqKioqKiAmbmJzcDsgJm5ic3A7ICoq KioqKioqKioqKioqKio8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPiogTWFudWZhY3R1 cmVyKHMpICogJm5ic3A7ICogVmVyaWZpZXIgKiAmbmJzcDsgJm5ic3A7ICogUmVseWluZyBQYXJ0 eSo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPioqKioqKioqKioqKioqKioqKiogJm5i c3A7ICogJm5ic3A7T3duZXIgJm5ic3A7ICogJm5ic3A7ICZuYnNwOyAqICZuYnNwO093bmVyICZu YnNwOyAmbmJzcDsgJm5ic3A7ICo8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7KioqKioqKioqKioqICZuYnNwOyAmbmJzcDsgKioqKioq KioqKioqKioqKjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+TWFudWZhY3R1cmVyIHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+VmVyaWZpZXIgfCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDt8T3duZXIgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDt8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5J bnB1dCAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO3xWZXJpZmllciAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDt8SW5wdXQgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDt8IEFwcHJhaXNhbDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCBQb2xpY3kgZm9yPGJyPg0K Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyB8IEF0dGVzdGF0aW9uPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw O3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyB8ICZuYnNwO1Jlc3VsdDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7diAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt2ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsuLS0tLS0tLS0tLS0tLS0tLS0uICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPi4tLS0tLSZndDt8ICZuYnNwOyAmbmJzcDsgVmVyaWZpZXIgJm5i c3A7ICZuYnNwO3wtLS0tLS0uICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPnwgJm5ic3A7ICZuYnNwOyAmbmJz cDsnLS0tLS0tLS0tLS0tLS0tLS0nICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj58ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDtBdHRlc3RhdGlvbnwgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDtSZXN1bHRzICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPnwgRXZpZGVuY2UgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+fCAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPnwgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgdiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgdjxicj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj4uLS0tLS0tLS0tLS4gJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOy4tLS0tLS0tLS0tLS0tLS0tLS48YnI+ DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+fCBBdHRlc3RlciB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8IFJl bHlpbmcgUGFydHkgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDs8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+Jy0tLS0tLS0tLS0n ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsn4oCU4oCU4oCU4oCU4oCU4oCU4oCU4oCU4oCYPGJyPg0KQ29u Y2VwdHVhbGx5IHRoZXJlIGFyZSBmb3VyIG1haW4gaW5wdXRzIHRvIHRoZSBWZXJpZmllciBhc2lk ZSBmcm9tIHRoZSBBdHRlc3RhdGlvbiBFdmlkZW5jZS4gVGhleSBhcmU6PGJyPg0KJm5ic3A7ICZu YnNwOy0gS2V5IG1hdGVyaWFsIGZvciB2ZXJpZnlpbmcgdHJ1c3QgaW4gdGhlIEF0dGVzdGVyPGJy Pg0KJm5ic3A7ICZuYnNwOy0gS25vd24tZ29vZC9yZWZlcmVuY2UgdmFsdWVzIGZvciBjb21wYXJp c29uIHdpdGggQ2xhaW1zIGluIHRoZSBBdHRlc3RhdGlvbiBFdmlkZW5jZTxicj4NCiZuYnNwOyAm bmJzcDstIFN0YXRpYyBpbXBsaWNpdCBjbGFpbXMgZm9yIHRoZSBwYXJ0aWN1bGFyIEF0dGVzdGVy IHRoYXQgYXJlIHBhc3MgdG8gdGhlIFJlbHlpbmcgUGFydHkgaW4gQXR0ZXN0YXRpb24gUmVzdWx0 czxicj4NCiZuYnNwOyAmbmJzcDstIFBvbGljeSBDb25maWd1cmF0aW9uPGJyPg0KQW55IG9mIHRo ZXNlIGZvdXIgY2FuIGNvbWUgZnJvbSBlaXRoZXIgdGhlIE1hbnVmYWN0dXJlciBhcyBNYW51ZmFj dHVyZXIgVmVyaWZpZXIgSW5wdXQgb3IgZnJvbSB0aGUgVmVyaWZpZXIgT3duZXIgYXMgT3duZXIg VmVyaWZpZXIgSW5wdXQuIFRoZXkga2V5IG1hdGVyaWFsIHVzdWFsbHkgYWx3YXlzIGNvbWVzIGZy b20gdGhlIG1hbnVmYWN0dXJlciBhbmQgdGhlIHBvbGljeSBmcm9tIHRoZSBWZXJpZmllciBPd25l ciwgYnV0IHRoZXJlIGlzIG5vIHN0cmljdA0KIHJlcXVpcmVtZW50IGZvciB0aGlzLiBUaGUga25v d24tZ29vZC9yZWZlcmVuY2UgdmFsdWVzIGFuZCBzdGF0aWMgaW1wbGljaXQgY2xhaW1zIG9mdGVu IGNvbWUgZnJvbSBlaXRoZXIgb3IgYm90aC48YnI+DQpUaGVyZSBpcyBubyBzdHJpY3Qgc2VwYXJh dGlvbiBiZXR3ZWVuIE1hbnVmYWN0dXJlciBhbmQgVmVyaWZpZXIgT3duZXIuIFRoZXkgY291bGQg YmUgdGhlIHNhbWUuIFRoZXJlIGNvdWxkIGFsc28gYmUgM3JkIHBhcnR5IGludGVybWVkaWFyaWVz IGJldHdlZW4gdGhlIE1hbnVmYWN0dXJlciBhbmQgdGhlIFZlcmlmaWVyLjxicj4NCkFuIEVuZG9y c2VtZW50IGlzIG9uZSBlc3RhYmxpc2hlZCBmb3JtYXQgZm9yIHNvbWUgb2YgdGhlc2UgaW5wdXRz LiBJdCB1c3VhbGx5IGNvbWVzIGZyb20gYW4gRW5kb3JzZXIgdGhhdCBpcyB1c3VhbGx5IHRoZSBN YW51ZmFjdHVyZXIuIEl0IGlzIHVzdWFsbHkgYSBzaWduZWQgZG9jdW1lbnQuIEFsdGVybmF0aXZl bHksIHRoZSBWZXJpZmllciBtYXkgcGVyZm9ybSBxdWVyaWVzIGFnYWluc3QgYSBkYXRhYmFzZSwg cGVyaGFwcyBvbmUgbWFpbnRhaW5lZA0KIGJ5IGEgTWFudWZhY3R1cmVyLCB0byBnZXQgaW5wdXRz LiBBbHRlcm5hdGl2ZWx5LCB0aGUgcm9vdCBrZXkgb2YgYSBrZXkgaGllcmFyY2h5IG1heSBiZSB0 cmFuc2ZlcnJlZCBpbiBhIG9uZS10aW1lIHBoeXNpY2FsIGNlcmVtb255LiBUaGlzIGFyY2hpdGVj dHVyZSBzZXRzIG5vIHByb3RvY29sIG9yIHByb2NlZHVyZSBmb3IgdGhpcyBpbnB1dC48YnI+DQpU aGUgdHJhbnNmZXIgb2YgYWxsIHRoZXNlIGlucHV0cyB0byB0aGUgVmVyaWZpZXIgZG9lcyBuZWVk IHRvIGJlIHNlY3VyZWQuIEZvciBhbGwgY2FzZXMsIGF1dGhlbnRpY2l0eSBvZiB0aGUgTWFudWZh Y3R1cmVyIGFuZCBWZXJpZmllciBPd25lciBhbmQgdGhlaXIgaW5wdXRzIGFyZSByZXF1aXJlZC4g V2l0aG91dCBhdXRoZW50aWMgaW5wdXRzLCB0aGUgVmVyaWZpZXIgd2lsbCBub3QgZG8gaXRzIGpv YiBjb3JyZWN0bHkuIEluIHNvbWUgY2FzZXMgY29uZmlkZW50aWFsaXR5DQogb2YgdGhlIGlucHV0 cyBpcyByZXF1aXJlZC4gRmluYWxseSwgaW4gc29tZSBjYXNlcyB0aGUgTWFudWZhY3R1cmVyIGFu ZCBWZXJpZmllciBPd25lciB3aWxsIGF1dGhlbnRpY2F0ZSB0aGUgVmVyaWZpZXIuPGJyPg0KVGhp cyBhcmNoaXRlY3R1cmUgc2V0cyBubyByZXF1aXJlbWVudCBmb3IgYSBwYXJ0aWN1bGFyIHByb3Rv Y29sIG9yIHNlY3VyaXR5IG1lY2hhbmlzbS4gRm9yIGV4YW1wbGUsIFRMUyBjb3VsZCBiZSB1c2Vk LCBidXQgaXQgaXMgbm90IHRoZSBvbmx5IHByb3RvY29sIHRoYXQgY291bGQgYmUgdXNlZCw8YnI+ DQo8YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPk9uIEp1biAyOSwgMjAyMCwgYXQg ODo1NiBQTSwgRGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpkdGhhbGVyPTQwbWljcm9z b2Z0LmNvbUBkbWFyYy5pZXRmLm9yZyI+ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0 Zi5vcmc8L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PiZsdDs8YSBocmVmPSJtYWlsdG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5v cmciPm1haWx0bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7 Jmd0Ow0KIHdyb3RlOjxicj4NCjxicj4NCkkgZG9u4oCZdCBsaWtlIHRoZSB0ZXJtIOKAnFZlcmlm aWVyIElucHV04oCdIHNpbmNlIOKAnEFwcHJhaXNhbCBQb2xpY3kgZm9yIEV2aWRlbmNl4oCdIGlz IGFsc28gVmVyaWZpZXIgSW5wdXQsIHNvIEkgd291bGQgZmluZCBpdCBjb25mdXNpbmcuPGJyPg0K SSB0aGluayB0aGF0IHRoZSBydWxlcyBmb3Igd2hhdCB0byBwdXQgaW4gQXR0ZXN0YXRpb24gUmVz dWx0cyAoYnVsbGV0IDMpLCBhcyB3ZWxsIGFzIOKAnGtub3duLWdvb2QvcmVmZXJlbmNlIHZhbHVl c+KAnSBpZiBzdWNoIGV4aXN0PGJyPg0KKGFuZCB0aGVyZSBjYW4gYmUgdmFsaWQgcG9saWNpZXMg d2hlcmUgdGhleSBtYXkgbm90IGV4aXN0LCBvciByYXRoZXIgd2hlcmUgdGhlIHBvbGljaWVzIHVz ZSBtb3JlIGNvbXBsZXggcnVsZXMgdGhhbjxicj4NCmEgc2ltcGxlIHRlc3QgZm9yIGVxdWFsaXR5 IGFnYWluc3QgYSBjb25zdGFudCkgYXJlIGNvbmNlcHR1YWxseSBwYXJ0IG9mIEFwcHJhaXNhbCBQ b2xpY3kuPGJyPg0KSSBkbyBhZ3JlZSB0aGF0IEFwcHJhaXNhbCBQb2xpY3kgY2FuIGJlIGNvbnZl eWVkIHRvIHRoZSBWZXJpZmllciBpbiBtYW55IGRpZmZlcmVudCB3YXlzLCBhbmQgbWF5IGJlIGNv bXBvc2VkPGJyPg0Kb2YgZGlmZmVyZW50IHRoaW5ncyBmcm9tIGRpZmZlcmVudCBzb3VyY2VzLjxi cj4NCkRhdmU8YnI+DQoqRnJvbToqUkFUUyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91bmNl c0BpZXRmLm9yZyI+cmF0cy1ib3VuY2VzQGlldGYub3JnPC9hPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj4mbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHMtYm91 bmNlc0BpZXRmLm9yZyI+bWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7Jmd0OypP biBCZWhhbGYgT2YqTGF1cmVuY2UgTHVuZGJsYWRlPGJyPg0KKlNlbnQ6Kk1vbmRheSwgSnVuZSAy OSwgMjAyMCAxMTozNCBBTTxicj4NCipUbzoqPGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmci PnJhdHNAaWV0Zi5vcmc8L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+bWFpbHRvOnJhdHNA aWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCipTdWJqZWN0OipbUmF0c10gVmVyaWZpZXIgSW5wdXQgaW5z dGVhZCBvZiBFbmRvcnNlbWVudD88YnI+DQpTdGVwcGluZyBiYWNrIGEgYml0IG9uIHRoZSBkZWZp bml0aW9uIG9mIGFuIEVuZG9yc2VtZW50LCBJIHRoaW5rIHRoZSBmb3VyIGlucHV0cyB0byBhIFZl cmlmaWVyIGFyZSB0aGVzZTo8YnI+DQombmJzcDsgLSBLZXkgbWF0ZXJpYWwgZm9yIHZlcmlmeWlu ZyB0cnVzdCBpbiB0aGUgQXR0ZXN0ZXI8YnI+DQombmJzcDsgLSBLbm93bi1nb29kL1JlZmVyZW5j ZSB2YWx1ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBjbGFpbXM8YnI+DQombmJzcDsgLSBTdGF0aWMg aW1wbGljaXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdzIHZpYSBBdHRlc3RhdGlvbiBS ZXN1bHRzPGJyPg0KJm5ic3A7IC0gQXBwcmFpc2FsIFBvbGljeTxicj4NClRoZXNlIGNhbiBhbmQg d2lsbCBiZSBjb252ZXllZCB0byB0aGUgVmVyaWZpZXIgaW4gbWFueSBkaWZmZXJlbnQgd2F5czo8 YnI+DQombmJzcDsgLSBYLjUwOSBjZXJ0cyB3aXRoIGV4dGVuc2lvbnM8YnI+DQombmJzcDsgLSBT aWduZWQgZG9jdW1lbnRzPGJyPg0KJm5ic3A7IC0gSFRUUCBxdWVyaWVzIGFnYWluc3QgdGhlIEF0 dGVzdGVyL2RldmljZSBtYW51ZmFjdHVyZXI8YnI+DQombmJzcDsgLSBSZW1vdGUgU1FMIG9yIHNv bWUgb3RoZXIgc29ydCBvZiBkYXRhYmFzZSBhY2Nlc3MgdG8gbWFudWZhY3R1cmVyKHMpPGJyPg0K Jm5ic3A7IC0gRGF0YSBzdG9yYWdlIGxpa2UgZmxhc2ggZHJpdmVzIHRoZSBhcmUgaGFuZCBjYXJy aWVkIGludG8gdGhlIFZlcmlmaWVyJ3Mgc2l0ZTxicj4NCiZuYnNwOyAtIE9uZS10aW1lIHNwZWNp YWwgZmlsZSB0cmFuc2ZlcnM8YnI+DQombmJzcDsgLSBDZXJlbW9uaWFsIHByb2NlZHVyZXMgd2l0 aCBNIG91dCBvZiBOIHBlb3BsZSBwaHlzaWNhbCBwcmVzZW50IGFwcHJvdmluZyB0cmFuc2Zlcjxi cj4NCkl0IHNlZW1zIGxpa2Ugc2hvZS1ob3JuaW5nIGFsbCBvZiB0aGUgYWJvdmUgKGV4Y2VwdCBw b2xpY3kpIGludG8gYW4gRW5kb3JzZW1lbnQsIGxpa2UgSeKAmXZlIHRyaWVkIHRvIGRvICZsdDs8 YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGYXJjaGl0ZWN0dXJl JTJGcHVsbCUyRjk0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3 Q2YxNWFjZTZlOGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIy ZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZhbXA7c2RhdGE9Mk5rdFBY JTJCM0xKWGpNRWpFRm9NOGtwVUl5NnlPeHRlJTJCdWhGWXIxRVRONGclM0QmYW1wO3Jlc2VydmVk PTAiPmh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZhcmNoaXRlY3R1cmUlMkZw dWxsJTJGOTQmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1 YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2Nk MDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2MzY1MDk4JmFtcDtzZGF0YT0yTmt0UFglMkIz TEpYak1FakVGb004a3BVSXk2eU94dGUlMkJ1aEZZcjFFVE40ZyUzRCZhbXA7cmVzZXJ2ZWQ9MDwv YT4mZ3Q7DQogJm5ic3A7aXMgdG9vIG11Y2guIEkgdHJpZWQgdGhpcyBzaG9lLWhvcm5pbmcgYmVj YXVzZSBJIHRoaW5rIHRoZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQgbmVlZHMgdG8gY292ZXIgYWxs IHRoaXMgYW5kIEVuZG9yc2VtZW50cyB3YXMgd2hhdCB3YXMgaW4gaXQuIEEgdHlwaWNhbCBFbmRv cnNlbWVudCBzZWVtcyB0byBiZSBqdXN0IHRoZSBmaXJzdCB0d28gbWVudGlvbmVkLCBYLjUwOSBh bmQgc2lnbmVkIGRvY3VtZW50cyBleHBhbmRpbmcgaXRzIGRlZmluaXRpb24NCiB0byBpbmNsdWRl IGRhdGFiYXNlIGFjY2VzcyBpcyBhIHN0cmV0Y2guPGJyPg0KUmF0aGVyIHRoYW4gZGVmaW5pbmcg RW5kb3JzZW1lbnQsIEnigJlkIGxpa2UgdG8gZGVmaW5lIFZlcmlmaWVyIElucHV0Ojxicj4NCiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgKioqKioqKioqKioqKioqKioqKiAmbmJz cDsgKioqKioqKioqKioqICZuYnNwOyAmbmJzcDsgKioqKioqKioqKioqKioqKjxicj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgKiBNYW51ZmFjdHVyZXIocykgKiAmbmJzcDsg KiBWZXJpZmllciAqICZuYnNwOyAmbmJzcDsgKiBSZWx5aW5nIFBhcnR5Kjxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgKioqKioqKioqKioqKioqKioqKiAmbmJzcDsgKiAm bmJzcDtPd25lciAmbmJzcDsgKiAmbmJzcDsgJm5ic3A7ICogJm5ic3A7T3duZXIgJm5ic3A7ICZu YnNwOyAmbmJzcDsgKjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsqKioqKioqKioqKiogJm5ic3A7ICZuYnNwOyAqKioqKioqKioqKioq KioqPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwO1ZlcmlmaWVyIElucHV0fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8QXBwcmFpc2Fs ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3w8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fFBv bGljeSAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7fGZvciAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDt8IEFwcHJhaXNhbDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8RXZpZGVuY2UgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgUG9saWN5IGZvcjxicj4NCiZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgfCBBdHRlc3RhdGlvbjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7fCAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCAmbmJzcDtSZXN1bHQ8 YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwO3YgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7diAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Li0tLS0t LS0tLS0tLS0tLS0tLiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7fDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i c3A7ICZuYnNwOyAuLS0tLS0mZ3Q7fCAmbmJzcDsgJm5ic3A7IFZlcmlmaWVyICZuYnNwOyAmbmJz cDt8LS0tLS0tLiAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5i c3A7Jy0tLS0tLS0tLS0tLS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZuYnNwO3wgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7IHw8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7QXR0ZXN0 YXRpb258ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7UmVzdWx0cyAm bmJzcDsgJm5ic3A7fCAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfDxicj4NCiZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8IEV2aWRlbmNlICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDt8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyB8PGJyPg0KJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgfCAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgfDxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOyB8ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IHYgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHY8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgLi0tLS0tLS0tLS0uICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsuLS0tLS0tLS0tLS0tLS0t LS0uPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IHwgQXR0ZXN0ZXIgfCAmbmJzcDsg Jm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7fCBSZWx5aW5nIFBhcnR5ICZuYnNwOyB8PGJyPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPictLS0tLS0tLS0tJyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7J+KAlOKAlOKAlOKAlOKAlOKAlOKA lOKAlOKAmDxicj4NCjxicj4NCkVuZG9yc2VtZW50cyBtdXN0IHN0aWxsIGJlIG1lbnRpb25lZCwg YnV0IGFzIG9uZSBmb3JtIG9mIFZlcmlmaWVyIGlucHV0IGp1c3QgbGlrZSBFQVQgaXMgb25lIGZv cm0gb2YgQXR0ZXN0YXRpb24gRXZpZGVuY2UuPGJyPg0KVmVyaWZpZXIgSW5wdXQgd291bGQgYmUg ZGVmaW5lZCBhczo8YnI+DQombmJzcDsgLSBLZXkgbWF0ZXJpYWwgZm9yIHZlcmlmeWluZyB0cnVz dCBpbiB0aGUgQXR0ZXN0ZXI8YnI+DQombmJzcDsgLSBLbm93bi1nb29kL1JlZmVyZW5jZSB2YWx1 ZXMgZm9yIGNvbXBhcmlzb24gd2l0aCBjbGFpbXM8YnI+DQombmJzcDsgLSBTdGF0aWMgaW1wbGlj aXQgY2xhaW1zIHRoYXQgYXJlIHBhc3NlZCB0byBSUCdzIHZpYSBBdHRlc3RhdGlvbiBSZXN1bHRz PGJyPg0KVG8gZG8gdGhpcywgSeKAmWQgcmVwbGFjZSB0aGUgY3VycmVudCBQUiAmbHQ7PGEgaHJl Zj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmFyY2hpdGVjdHVyZSUyRnB1 bGwlMkY5NCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NmMTVh Y2U2ZThiNGI0NDdlZWJjMDA4ZDgxYzViMWYzMyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2Qw MTFkYjQ3JTdDMSU3QzAlN0M2MzcyOTA1MjQ5ODYzNjUwOTgmYW1wO3NkYXRhPTJOa3RQWCUyQjNM SlhqTUVqRUZvTThrcFVJeTZ5T3h0ZSUyQnVoRllyMUVUTjRnJTNEJmFtcDtyZXNlcnZlZD0wIj5o dHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMl M0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGYXJjaGl0ZWN0dXJlJTJGcHVsbCUy Rjk0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2YxNWFjZTZl OGI0YjQ0N2VlYmMwMDhkODFjNWIxZjMzJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRi NDclN0MxJTdDMCU3QzYzNzI5MDUyNDk4NjM2NTA5OCZhbXA7c2RhdGE9Mk5rdFBYJTJCM0xKWGpN RWpFRm9NOGtwVUl5NnlPeHRlJTJCdWhGWXIxRVRONGclM0QmYW1wO3Jlc2VydmVkPTA8L2E+Jmd0 OyZuYnNwO2FuZA0KIGlzc3VlICZsdDs8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5w cm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0 Zi1yYXRzLXdnJTJGYXJjaGl0ZWN0dXJlJTJGaXNzdWVzJTJGNjUmYW1wO2RhdGE9MDIlN0MwMSU3 Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFm MzMlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0 OTg2Mzc1MDkyJmFtcDtzZGF0YT1HZk01cUVsTzR0ZU5kamZBQmxtVmF5ZUdYdVlIV0JEcUhUVnRw ZWVldzdnJTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0 aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRz LXdnJTJGYXJjaGl0ZWN0dXJlJTJGaXNzdWVzJTJGNjUmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFs ZXIlNDBtaWNyb3NvZnQuY29tJTdDZjE1YWNlNmU4YjRiNDQ3ZWViYzAwOGQ4MWM1YjFmMzMlN0M3 MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MjkwNTI0OTg2Mzc1 MDkyJmFtcDtzZGF0YT1HZk01cUVsTzR0ZU5kamZBQmxtVmF5ZUdYdVlIV0JEcUhUVnRwZWVldzdn JTNEJmFtcDtyZXNlcnZlZD0wPC9hPiZndDsmbmJzcDtJDQogaGF2ZSBvbiBFbmRvcnNlbWVudHMg d2l0aCBhIG5ldyBQUi4gSXQgd2lsbCBiZSBhIGZhaXIgYml0IG9mIHdvcmssIHNvIEkgd2FudCB0 byBzZWUgaWYgdGhlcmUgaXMgc29tZSBjb25zZW5zdXMgZmlyc3QuPGJyPg0KTEw8YnI+DQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NClJBVFMgbWFp bGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPlJBVFNAaWV0Zi5v cmc8L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPiZs dDs8YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+bWFpbHRvOlJBVFNAaWV0Zi5vcmc8L2E+ Jmd0Ozxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v cmF0cyI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9hPjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVm PSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+UkFUU0BpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMiPmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvYT48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj48YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxicj4NClJBVFMgbWFpbGluZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0 bzpSQVRTQGlldGYub3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5SQVRTQGlldGYub3JnPC9zcGFuPjwv YT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGlj YSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHM8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMg b2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1h eSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlcg0KIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlz Y2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1 cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRo YW5rIHlvdS48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpSQVRT IG1haWxpbmcgbGlzdDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+UkFUU0BpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp ZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vcmF0cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9yYXRzPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo ZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLA0K IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv dS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AM6PR08MB34290D2E1E5A32D61727424CEF690AM6PR08MB3429eurp_-- From nobody Mon Jul 6 05:20:01 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A26C23A13E9 for ; Mon, 6 Jul 2020 05:20:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.502 X-Spam-Level: X-Spam-Status: No, score=0.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NO_PRESCRIPTION=2.399, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eb2ntEYo0fs2 for ; Mon, 6 Jul 2020 05:19:57 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0D953A13E7 for ; Mon, 6 Jul 2020 05:19:55 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2F7BwCNFgNf/xmnZsBWCh4BAQsSDEC?= =?us-ascii?q?BTIF5gR6BMwqEKJBtJZocgVsNCwEBAQEBAQEBAQYBARgLCgIEAQEChEUCgiY?= =?us-ascii?q?BJDgTAhABAQYBAQEBAQYEAgKGFwglDEMBEAGCfIECAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBARYCQ1USAR4BAQEBAgEBASEECwEFLwcCAgcQCQIRAQMBAQECAiMDAgI?= =?us-ascii?q?nHwECBggGAQkDAQUCAQGDIgGCXCAEC4xWmwR2fzOFUYMlgToGgQ4qAYxaDw+?= =?us-ascii?q?BTD+BEScMA4IsLj6CXAEBAoEnAQEHCwEHBEKCaoJgBI8ABwoSDwiCfKFQXCg?= =?us-ascii?q?HgVmBBoEHBAuISIUbhHuFSgUKHYJzNoh6hHUGjX+POIIhnmACBAIJAhWBai8?= =?us-ascii?q?3I3BNJE+CaVAXAg2MD4M0AQIGh1eFRHICNQIGAQcBAQMJfIhGhHyBNAGBEAE?= =?us-ascii?q?B?= X-IPAS-Result: =?us-ascii?q?A2F7BwCNFgNf/xmnZsBWCh4BAQsSDECBTIF5gR6BMwqEK?= =?us-ascii?q?JBtJZocgVsNCwEBAQEBAQEBAQYBARgLCgIEAQEChEUCgiYBJDgTAhABAQYBA?= =?us-ascii?q?QEBAQYEAgKGFwglDEMBEAGCfIECAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1USA?= =?us-ascii?q?R4BAQEBAgEBASEECwEFLwcCAgcQCQIRAQMBAQECAiMDAgInHwECBggGAQkDA?= =?us-ascii?q?QUCAQGDIgGCXCAEC4xWmwR2fzOFUYMlgToGgQ4qAYxaDw+BTD+BEScMA4IsL?= =?us-ascii?q?j6CXAEBAoEnAQEHCwEHBEKCaoJgBI8ABwoSDwiCfKFQXCgHgVmBBoEHBAuIS?= =?us-ascii?q?IUbhHuFSgUKHYJzNoh6hHUGjX+POIIhnmACBAIJAhWBai83I3BNJE+CaVAXA?= =?us-ascii?q?g2MD4M0AQIGh1eFRHICNQIGAQcBAQMJfIhGhHyBNAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,318,1589234400"; d="scan'208";a="22916031" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 14:19:36 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BZDACNFgNf/1lIDI1WCh4BAQsSDEC?= =?us-ascii?q?BTIF5L28DVDAsCoQokG0lmhyBaAsBAwEBAQEBBgEBGAsKAgQBAYRHAoIkAiQ?= =?us-ascii?q?4EwIQAQEFAQEBAgEGBG2FLgglDEMBEAGFGQEBAQECAQEBIQQLAQUvBwICBxA?= =?us-ascii?q?JAhEBAwEBAQICIwMCAicfAQIGCAYBCQMBBQIBAYMiAYJcJAuMVpsEdn8zhVG?= =?us-ascii?q?DJYE6BoEOKgGMWg8PgUw/gREnDAOCLC4+glwBAQKBJwEBBwsBBwRCgmqCYAS?= =?us-ascii?q?PAAcKEg8IgnyhUFwoB4FZgQaBBwQLiEiFG4R7hUoFCh2CczaIeoR1Bo1/jzi?= =?us-ascii?q?CIZ5gAgQCCQIVgWoiDDcjcE0kT4JpUBcCDYwPgzQBAgaHV4VEQTECNQIGAQc?= =?us-ascii?q?BAQMJfIhGhHyBNAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,318,1589234400"; d="scan'208";a="85641642" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 14:19:30 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 066CJT3l019167 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 6 Jul 2020 14:19:29 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Mon, 6 Jul 2020 14:19:24 +0200 To: Simon Frost , Laurence Lundblade CC: Dave Thaler , "rats@ietf.org" References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <663F1B08-930B-4D9E-BC80-9D281688B550@island-resort.com> From: Henk Birkholz Message-ID: Date: Mon, 6 Jul 2020 14:19:23 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 12:20:01 -0000 Hi all, quick comment below On 06.07.20 13:55, Simon Frost wrote: > Hi Laurence, > >> I am after greater generality (and clarity) than I think we have now > with Endorsements. Endorsements are (in my understanding) a somewhat > specific representation of data and protocol. > > I agree with your aim. I’m suggesting that we relax that definition to > allow ‘Endorsements’ to cover all the categories of data originating > from the supply chain that the Verifier may need to consult. I’m not > aware that Endorsement has a specific industry definition. (I’m aware of > Endorsement Certificates for TPMs, but that’s a more specialised term). > I’m happy to have a definition pointed out or equally if Endorsement > just has excessive connotations for the WG then the architecture can > adopt another, descriptive, term. I agree that more information would > then be needed and your 4 categories could form the basis of a set of > examples for types of data in that category. > > As you say on a separate reply: > >> Well, first, I thought we agreed that the arcs above Verifier were out of scope for the architecture… > > I remember having a discussion locally when the WG charter was defined > in which we agreed that keeping it out of scope was exactly the correct > approach, just because there were so many ways in which the > relationships may need to be satisfied. In fact we agreed on "out-of-scope" for the first phase of the charter in order to acknowledge the fact that this is part of the "Attestation Provisioning Workflow" (an old term that we used to use to draw the demarcation line for the RATS WG phasing). Viele Grüße, Henk > > HTH > > Simon > > *From:*Laurence Lundblade > *Sent:* 04 July 2020 18:23 > *To:* Simon Frost > *Cc:* Henk Birkholz ; Dave Thaler > ; rats@ietf.org > *Subject:* Re: [Rats] Verifier Input instead of Endorsement? > > Hi Simon, > > Appreciate you jumping in here. > > > > On Jul 3, 2020, at 2:28 AM, Simon Frost > wrote: > > I’ve just tried to catch up on the thinking on this via this thread > and github#94 and realise that the conversation has become highly > detailed and that some very precise definitions are emerging for > concepts that originally were quite general (e.g. endorsement). > Perhaps there’s a riskthat the architecture may be overly > constraining as a result. > > I am after greater generality (and clarity) than I think we have now > with Endorsements. Endorsements are (in my understanding) a somewhat > specific representation of data and protocol. > > I am giving a lot of examples to try to communicate clearly, no to > specify anything. > > I would like the list-of-four in the document because I think it is > highly informative (even Henk’s thinks they are so), but not as a > prescription or requirement. > > Trying to avoid using any term that may now be overloaded… > > It seems that the important information to capture is that the > Verifier is a means of providing transitive trust between the > relying party and a potentially complex Supply Chain from which the > attesting endpoint originated. The RP to Verifier relationship must > be securable and trustworthy in some achievable way such that an RP > can trust the attestation results received. Similarly that creates > an expectation that the Verifier has established securable & > trustworthy relationships with the supply chain in order to receive > appropriate proofs / testimonies of items that the Verifier can > identify within the attestation evidence. The Verifier to Supply > Chain relationships aren’t just technical, they require contractual > relationships as well which can bring a strong influence into the > details of how the information gets to the Verifier.  If we have the > relationships sketched out and an exploration of the types of > information that may be required, is it necessary to go into further > detail? > > I think this is a possible approach. To take this, I think Endorsements > have to be either removed or redefined in some very general way to > side-step the ideas people have about them. > > LL > > > > Thanks > > Simon > > *From:*Laurence Lundblade > > *Sent:*02 July 2020 18:52 > *To:*Henk Birkholz > > *Cc:*Dave Thaler >;rats@ietf.org > > *Subject:*Re: [Rats] Verifier Input instead of Endorsement? > > On Jul 2, 2020, at 6:31 AM, Henk Birkholz > > wrote: > > Hi Laurence, > > > while I think that I understand where you are coming from here, > I have to say that I also think that: > > * "manufacturer(s)" is a too arbitrarily restricting term, which > is why we agreed on endorser > > The problem with Endorser is that they produce Endorsements and I > think there are problems with Endorsements: > >  - In Berlin you told me they don’t have keys in them. So then how > do keys get into the Verifier? > >  - Endorsements seem to be small signed documents of attributes so > they’re not so good for: > >      - Representing a database of millions of keys > >      - Representing HTTP access to a manufacturers database of > known-good/reference values > >      - One-time physical / ceremonial transfer of a root key > > - Endorsements seem like a somewhat narrowed, specific way of > providing verifier input > > - Endorsements imply signing as the security mechanism, which is too > narrow. > > Maybe we can find a term other than manufacturer?  What I want to > avoid is the general use of the term Endorsement for the above > reasons. Using the term Endorsement to me is like using the > protocol-specific term EAT instead of conceptual term Attestation > Evidence. Use of the term Endorser implies Endorsement, but maybe it > is OK if we don’t use the term Endorsement. > > > > > * every arrow is of course "input/output", but we are not > calling evidence "Attester Output". So, Verifier Input is in > contrast a too ambiguous category (it does not add any semantics > to the arrow) > > Maybe the non-specificity of “Verifier Input” seems useful? It > allows the list of four (keys, ref values, static claims, policy) to > be used and for them to be variable. It is just a grouping. > > Maybe we can find a better term? Here’s a few: > >    Verifier Criteria > >    Verifier Data > >    Attester Verification Criteria > >    Attester Trust Materials > > > > > * the itemized list that starts with key material provides a > very intuitive example and maybe we could use that kind of list > as a more prominent example in the arch I-D > > I’d prefer the list of four to be explicit architecture, not just an > example. > > > > > > The question, if reference values are endorsements or appraisal > policies or a third item is... probably okay and I am interested > in an answer - but that is a detail, I think. As long as they > are also mentioned, I can follow all three lines of thought. > > We should assume our audience knows little to nothing about TCG work > (like me) and little about attestation, so I’d prefer they not be > details, but rather up front and clear. > > > > > > Also, I am in strong doubt that the following statement is > always correct: "The transfer of all these inputs to the > Verifier does need to be secured.". I am confused by the > exceptions that follow that statement which basically say, I > think: in some cases they have to be secured. Maybe we mean > different things by "secured"? > > Let me try again: > > - The Verifier must always establish the authenticity of the > Manufacturer > > - All input from the Manufacturer must be integrity protected > > - The Verifier must always establish the authenticity of the > Verifier Owner > > - All input from the Verifier Owner must be integrity protected > > - In some cases the Manufacturer may wish to establish the > authenticity of the Verifier before giving inputs > > - In some cases the Owner may wish to establish the authenticity of > the Verifier before giving inputs > > - In some cases confidentiality of the inputs is required > > LL > > > > > > Viele Grüße, > > Henk > > On 02.07.20 03:46, Laurence Lundblade wrote: > > > Here’s rough proposed text and diagram. Not sure where it > would go in the doc yet. > LL > *******************   ************     **************** > * Manufacturer(s) *   * Verifier *     * Relying Party* > *******************   *  Owner   *     *  Owner       * >                        |        ************ > **************** >                        |              |                 | > Manufacturer |              |                 | > Verifier |              |Owner            | > Input  |              |Verifier         | >                        |              |Input            | > Appraisal >                        |              |                 | > Policy for >                        |              |                 | > Attestation >                        |              |                 | >  Result >                        v              v                 | >                      .-----------------.                | > .----->|     Verifier    |------.         | > |      '-----------------'      |         | > |                               |         | > |                    Attestation|         | > |                    Results    |         | > | Evidence                      |         | > |                               |         | > |                               v         v > .----------.                      .-----------------. > | Attester |                      | Relying Party   | > '----------'                      '————————‘ > Conceptually there are four main inputs to the Verifier > aside from the Attestation Evidence. They are: >    - Key material for verifying trust in the Attester >    - Known-good/reference values for comparison with Claims > in the Attestation Evidence >    - Static implicit claims for the particular Attester > that are pass to the Relying Party in Attestation Results >    - Policy Configuration > Any of these four can come from either the Manufacturer as > Manufacturer Verifier Input or from the Verifier Owner as > Owner Verifier Input. They key material usually always comes > from the manufacturer and the policy from the Verifier > Owner, but there is no strict requirement for this. The > known-good/reference values and static implicit claims often > come from either or both. > There is no strict separation between Manufacturer and > Verifier Owner. They could be the same. There could also be > 3rd party intermediaries between the Manufacturer and the > Verifier. > An Endorsement is one established format for some of these > inputs. It usually comes from an Endorser that is usually > the Manufacturer. It is usually a signed document. > Alternatively, the Verifier may perform queries against a > database, perhaps one maintained by a Manufacturer, to get > inputs. Alternatively, the root key of a key hierarchy may > be transferred in a one-time physical ceremony. This > architecture sets no protocol or procedure for this input. > The transfer of all these inputs to the Verifier does need > to be secured. For all cases, authenticity of the > Manufacturer and Verifier Owner and their inputs are > required. Without authentic inputs, the Verifier will not do > its job correctly. In some cases confidentiality of the > inputs is required. Finally, in some cases the Manufacturer > and Verifier Owner will authenticate the Verifier. > This architecture sets no requirement for a particular > protocol or security mechanism. For example, TLS could be > used, but it is not the only protocol that could be used, > > > On Jun 29, 2020, at 8:56 PM, Dave Thaler > > > wrote: > > I don’t like the term “Verifier Input” since “Appraisal > Policy for Evidence” is also Verifier Input, so I would > find it confusing. > I think that the rules for what to put in Attestation > Results (bullet 3), as well as “known-good/reference > values” if such exist > (and there can be valid policies where they may not > exist, or rather where the policies use more complex > rules than > a simple test for equality against a constant) are > conceptually part of Appraisal Policy. > I do agree that Appraisal Policy can be conveyed to the > Verifier in many different ways, and may be composed > of different things from different sources. > Dave > *From:*RATS >*On > Behalf Of*Laurence Lundblade > *Sent:*Monday, June 29, 2020 11:34 AM > *To:*rats@ietf.org > > *Subject:*[Rats] Verifier Input instead of Endorsement? > Stepping back a bit on the definition of an Endorsement, > I think the four inputs to a Verifier are these: >   - Key material for verifying trust in the Attester >   - Known-good/Reference values for comparison with claims >   - Static implicit claims that are passed to RP's via > Attestation Results >   - Appraisal Policy > These can and will be conveyed to the Verifier in many > different ways: >   - X.509 certs with extensions >   - Signed documents >   - HTTP queries against the Attester/device manufacturer >   - Remote SQL or some other sort of database access to > manufacturer(s) >   - Data storage like flash drives the are hand carried > into the Verifier's site >   - One-time special file transfers >   - Ceremonial procedures with M out of N people > physical present approving transfer > It seems like shoe-horning all of the above (except > policy) into an Endorsement, like I’ve tried to do > >  is too much. I tried this shoe-horning because I think > the architecture document needs to cover all this and > Endorsements was what was in it. A typical Endorsement > seems to be just the first two mentioned, X.509 and > signed documents expanding its definition to include > database access is a stretch. > Rather than defining Endorsement, I’d like to define > Verifier Input: >           *******************   ************ > **************** >           * Manufacturer(s) *   * Verifier *     * > Relying Party* >           *******************   *  Owner   *     * >  Owner       * >                        |        ************ > **************** >                        |              |                 | >          Verifier Input|              |                 | >                        |              |Appraisal        | >                        |              |Policy           | >                        |              |for >  | Appraisal >                        |              |Evidence > | Policy for >                        |              | > | Attestation >                        |              | > |  Result >                        v              v                 | >                      .-----------------.                | >               .----->|     Verifier    |------.         | >               |      '-----------------'      |         | >               |                               |         | >               |                    Attestation|         | >               |                    Results    |         | >               | Evidence                      |         | >               |                               |         | >               |                               v         v >         .----------. >  .-----------------. >         | Attester |                      | Relying > Party   | > '----------'                      '————————‘ > > Endorsements must still be mentioned, but as one form of > Verifier input just like EAT is one form of Attestation > Evidence. > Verifier Input would be defined as: >   - Key material for verifying trust in the Attester >   - Known-good/Reference values for comparison with claims >   - Static implicit claims that are passed to RP's via > Attestation Results > To do this, I’d replace the current PR >  and > issue >  I > have on Endorsements with a new PR. It will be a fair > bit of work, so I want to see if there is some consensus > first. > LL > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose > the contents to any other person, use it for any purpose, or store > or copy the information in any medium. Thank > you._______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy > the information in any medium. Thank you. From nobody Mon Jul 6 07:40:55 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9E443A1583 for ; Mon, 6 Jul 2020 07:40:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xpZZj_Oal5jx for ; Mon, 6 Jul 2020 07:40:51 -0700 (PDT) Received: from mail-qk1-x736.google.com (mail-qk1-x736.google.com [IPv6:2607:f8b0:4864:20::736]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DECB3A1572 for ; Mon, 6 Jul 2020 07:40:51 -0700 (PDT) Received: by mail-qk1-x736.google.com with SMTP id 80so34957737qko.7 for ; Mon, 06 Jul 2020 07:40:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=content-transfer-encoding:from:mime-version:subject:date:message-id :references:cc:in-reply-to:to; bh=jqiKnKBqh3PJyhGwjBTIBkIpqsLSxEg/wc7VXAuz9uo=; b=O458Z6g8muRwM//9QG8vsa003H0TCLq7tGA81gE79ceXaluTKRWx9yS5z2q5sUwsqM G9BEcaL7Ip0LwHhuqiE0UbzJnGlEsSgODK9LUIYyNaPfSmk4LL0un+xrqIf/m74O7jjP 5H3vvdRYM2GV99ElXEAEWFNew/V4z/efQTZpgCbDmfpWYy9IIDTt/XcOOIEYFSLsGGHz ytwodd9Nft8Z0pFZhepY34s1yRnmxHM4kZcA7vcpO8fNGbfH5yZ0MNlftT0+5wOl9dFW VJKXH5ZTxsENuRkr/nITw1H16QBIoSFsFq8aoeCSPrGHqUMap8qnKoShQjrCNd5o3nO2 JxhQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:content-transfer-encoding:from:mime-version :subject:date:message-id:references:cc:in-reply-to:to; bh=jqiKnKBqh3PJyhGwjBTIBkIpqsLSxEg/wc7VXAuz9uo=; b=YaTjLmJZ8wD3zXxlR9SfFg9Bs8dXNq0nkfAT54OEC1vKHwc9HMSgSfbWGOA3jtqysH dKEby0dKIu89HSJKLfY9zQlls6x4kaPXVGSNhncO3pwJIOT7X9zW3CgHuRfHroONm0sZ WdrPYxaXGiCIln0DQ1jabJrEYBM/8A/7kwN8ynd89hsMJmp124hU/OTcSZUPsLMIQ0xt yaHNWjMiU/BD2pB+vwR55bUVu1jqu99JYWR2pE1VBY7Vcyc3/nZDBQb7C+bycCDqsjx3 +txjNcIzDvORD/kcc456k9qhROAJxyyWnxS07/U3SXiw5T1EcgenrpKRlEF+uwc08iwg LW8Q== X-Gm-Message-State: AOAM533a3fPR1MBk2urjuIsdvrSll0WsSB85mG7fL9WgsiQbqOec4RXv 3gOWal32EH8yNfpWdVJSW/kWcvKn X-Google-Smtp-Source: ABdhPJycgrX5zz69PvlLCdtZSKVb9aLlyaX5W/2nBC3UUrgTjsJ59L2wmQ1gJuL5f3QDUuvsc6kqXQ== X-Received: by 2002:ae9:eb15:: with SMTP id b21mr46432500qkg.25.1594046450095; Mon, 06 Jul 2020 07:40:50 -0700 (PDT) Received: from ?IPv6:2600:380:5a37:adff:6c2f:8ed:ac31:d3c7? ([2600:380:5a37:adff:6c2f:8ed:ac31:d3c7]) by smtp.gmail.com with ESMTPSA id w18sm20336000qtn.3.2020.07.06.07.40.49 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 06 Jul 2020 07:40:49 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable From: Kathleen Moriarty Mime-Version: 1.0 (1.0) Date: Mon, 6 Jul 2020 10:40:48 -0400 Message-Id: References: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> Cc: "rats@ietf.org" In-Reply-To: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> To: Thomas Fossati X-Mailer: iPhone Mail (17F80) Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 14:40:53 -0000 Thank you for your work on this document. I read through it on a phone, so I= don=E2=80=99t have detailed comments, but a few high level. This sort of document was needed, good stuff! Since we have a number of RES= Tful protocols in use to exchange formatted data, it would be good to explic= itly state support for these protocols. SCAPv2.0 has adopted ROLIE [RFC8322= ]. Since SCAP is how posture assessment is performed, it would be good to i= nclude this capability to enable a smooth transition to the use of remote at= testation for simplified posture assessment as this work evolves. Similarly, RedFish is in use for server management across several platforms.= I=E2=80=99ve been working with the DMTF to improve security of RedFish jus= t in case it could be used. There are likely other protocols that may be used, and leaving this open to a= ccommodate various RESTful protocols may be the best approach towards enabli= ng adoption. This would also enable use for a shared purpose- configuration= management in an IT application as well as security posture assessment. Best regards, Kathleen=20 Sent from my mobile device > On Jun 12, 2020, at 1:00 PM, Thomas Fossati wrote= : >=20 > =EF=BB=BFHi, all, >=20 > We have just submitted a new draft "RESTful attested resources" (details > below). >=20 > The main goal here is creating a mechanism to expose attested system > state as RESTful resources (i.e., "things" that can be de-referenced by > their URIs) together with a way to securely bind said system state with > an EAT token. >=20 > We define two REST interfaces: one to the Attester and one to the > Verifier, with timestamp- and nonce-based freshness. We show how these > can be composed into the usual "background check", "passport" and > "time-based unidirectional" patterns. HTTP and CoAP instantiations are > provided, together with the associated MIME machinery. A discovery > method is also discussed based on the CoRE Resource Directory. >=20 > This proposal seems in scope with the RATS charter, in particular its > "Standardize interoperable protocols to securely convey > assertions/claims." bit. We hope this provides a valid contribution on > how the RATS architecture and basic protocol elements can be used in > high level protocol(s), and would really appreciate any feedback with > regards to its usefulness, correctness and completeness. >=20 > cheers, thanks! >=20 >> On 12/06/2020, 17:48, "internet-drafts@ietf.org" wrote: >> A new version of I-D, draft-shaw-rats-rear-00.txt >> has been successfully submitted by Thomas Fossati and posted to the >> IETF repository. >>=20 >> Name:draft-shaw-rats-rear >> Revision:00 >> Title:Restful Attested Resources >> Document date:2020-06-12 >> Group:Individual Submission >> Pages:23 >> URL: https://www.ietf.org/internet-drafts/draft-shaw-rats-rear= -00.txt >> Status: https://datatracker.ietf.org/doc/draft-shaw-rats-rear/ >> Htmlized: https://tools.ietf.org/html/draft-shaw-rats-rear-00 >> Htmlized: https://datatracker.ietf.org/doc/html/draft-shaw-rats-rea= r >>=20 >>=20 >> Abstract: >> This memo describes a REST interface based on the RATS architecture >> that can be used to retrieve attested system state, for example the >> reading of a security critical sensor. The objective is to present a >> common vocabulary of data formats and basic protocol transactions >> that can be pieced together into a cohesive interface that is capable >> of serving different attestation workflows. >=20 >=20 >=20 >=20 > IMPORTANT NOTICE: The contents of this email and any attachments are confi= dential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you. > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Mon Jul 6 09:52:03 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 881353A179D for ; Mon, 6 Jul 2020 09:52:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8iuWnIpIwnj3 for ; Mon, 6 Jul 2020 09:51:56 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 66B6B3A17A2 for ; Mon, 6 Jul 2020 09:51:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 7ADC9389B7; Mon, 6 Jul 2020 12:48:59 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id vsVtl6GTY8jR; Mon, 6 Jul 2020 12:48:58 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 4C7D2389B4; Mon, 6 Jul 2020 12:48:58 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 8841754C; Mon, 6 Jul 2020 12:51:50 -0400 (EDT) From: Michael Richardson To: Thomas Fossati , "rats\@ietf.org" In-Reply-To: <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> <22564.1593904278@localhost> <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 16:52:02 -0000 --=-=-= Content-Type: text/plain Thomas Fossati wrote: > On 05/07/2020, 00:11, "Michael Richardson" wrote: >> As we move towards a multi-vendor situation the rollout of new claims >> will occur in an unpredictable way. > Maybe the privacy dual of EAT's "MUST ignore unknown claims" is: "apply > the same privacy policy you'd use for PII claims to claims that you > don't understand"? Ys, that sounds like it will work in an acceptable way. The parable of the lighthouse vs warship returns though: the lighthouse does not in way consider it's location to be PII. Yet the tourist's smartphone at the lighthouse does consider it PII. >> I'm okay if the answer is that EAT will include some kind of flag, but >> that we don't have to assume it exists at an architectural level. > What about: > 1. EAT requires its profiles to explicitly highlight any potential PII. > This will inform the privacy behaviour of the Verifiers that decide > to support a certain profile. > 2. For *unknown* claims included in Evidence that is produced according > to a given profile, the requirement for the Verifier is to treat > those unknown claims as PII. I think that this probably errs in the correct direction. Do you think that statement #2 is an architectural statement that must be applied to all conveyances? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8DVqYACgkQgItw+93Q 3WVoMAf/b0Ub8EupIMHO+5sxcu6PSbmZp14GKYqCpp1T58jmMv9/A9MKU6B8Z5ha 3VCJO0Ew8AfpMWm33MR7yhtc/pCSfD0OO0pKYKWUv35yl83Xyu0frAs9LcV8RjEj 8/TrGIz2CJd4GkkLnIlOCV1wJr+x01u+dcjA9yyWit/+acrcrnWKlk7q0wIHZhoI H9z52cZo4xeNRyt2uRhRkxFnVtPsqVzoqNBWisRLcz/d+8KLsO3kwt4gL8zS4Y9O mNPhWtexgcGjkZdnq0IniU3ZMmfeLNbVJZxPGwfQXy8mVL78aF5T2Uty+gJI3iXb olULoBQfqQbutxHmy8MoamPTypXXCg== =WVXa -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Jul 6 14:07:51 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B6E53A0AD9 for ; Mon, 6 Jul 2020 14:07:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.597 X-Spam-Level: X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=QiJL1eYP; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ODnbDHuk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WuARHLWdJCHc for ; Mon, 6 Jul 2020 14:07:47 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF4BF3A0AD8 for ; Mon, 6 Jul 2020 14:07:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3847; q=dns/txt; s=iport; t=1594069667; x=1595279267; h=from:to:subject:date:message-id:mime-version; bh=gVy0h6QMz7UHuP1Koa+jYrYlr0zayQzpIQbakba36ck=; b=QiJL1eYPhYwFQuf7Hk3nS7fTPidWQt7xP2etMkZKCmfQp/mqC9YqgeZX chqinv4IPCUt66rL6G9nchL+ETageeYVrtlVXURqFKWefT7DIgR9TyNdG eE+QAvVZxp+YgvpDuVdxod1TTghj2mrCYoeP9b8Cn5CrEyExlBaaoI3Sg U=; X-IPAS-Result: =?us-ascii?q?A0D2BwDGkQNf/4UNJK1gglOBIy9RB29YLywKhCiDRgOhO?= =?us-ascii?q?oRrgS6BJANVCwEBAQwBAS0CBAEBhGCCDgIkNQgOAgMBAQEDAgMBAQEBBQEBA?= =?us-ascii?q?QIBBgRthVsBC4YHCwYdAQE4EQEMOwMCBDAUEwQTIoMEAYF+TQMuAZ50AoE5i?= =?us-ascii?q?GF2gTKDAQEBBYJJgkMYgg4JgTiCaYJNRoZuGoIAgTgchA+GTzOCLZI6hkOcE?= =?us-ascii?q?QqCXJlKAx2Cc4kwknqRWZpAhCACBAIEBQIOAQEFgVUBNoFWcBVlAYI+UBcCD?= =?us-ascii?q?Y42g1mKVnQ3AgYIAQEDCXyOdgGBEAEB?= IronPort-PHdr: =?us-ascii?q?9a23=3An88EIRw6498VWg3XCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5ZRWFt/RgkFGPWp/UuLpIiOvT5qbnX2FIoZOMq2sLf5EEUR?= =?us-ascii?q?gZwd4XkAotDI/gawX7IffmYjZ8EJFEU1lorHC2LUYTH9zxNBXep3So5msUHR?= =?us-ascii?q?PyfQN+OuXyHNvUiMK6n+C/8pHeeUNGnj24NLhzNx6x6w7Ws5ob?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.75,321,1589241600"; d="scan'208,217";a="499799789" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 06 Jul 2020 21:07:46 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id 066L7kMi000618 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 6 Jul 2020 21:07:46 GMT Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 6 Jul 2020 16:07:46 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 6 Jul 2020 16:07:45 -0500 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 6 Jul 2020 17:07:45 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d3A0AdjaoVf8WamZVwwOh5+8NjD4WSyz1+06bqvH34zRka0TOZ0WikjVZSVozW5g/MHubDujQAJ5j44+dc9baijcsMKvdgqINqBPGjHAX6d2L3iCLvUJh0q6rlb2+8lRks9ywTMlqKyYa5oABN258+JTKQRuLAuxT0eGUVvSzX81gH+vQLHQh2ErXSGv1tIZBrJ5LbGEbxNPBRrMIpNcqLzVf/rvLpdUgabKY83R/HMYj5V9Ep9qu9mVKUTJ8HMcneKMbAELMLVcSau/N+BChNJ++U2sW/pmJtJH7GEDAdA5i5WgwYhnTFvQ3BMVmMXTXynTXbreDynW4nSXlLE9ew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gVy0h6QMz7UHuP1Koa+jYrYlr0zayQzpIQbakba36ck=; b=bl5SMYVqlI/HS9FUoDmrLVj2TXMi/TnGdvFlrupbwdkfZqxvnNmHHgGmYTZfa6IQx3bY3ISsT/V3mKOckQzt6Bf17CMzNtDUXdcElXVT0qDIkNIJtwJ2PZqTpVyOXk9lQnPj4s9C38i9+znXKQXZhTnfPs55iM/93C+64g/zxQ/Bcyl+b0lfgPTnhjlRglxAtLi5MxwZOTLTPiESWnF9A219TrasK/coh1IUeKPXuUck5JDluYPbqftvkfTiSeYwdTarkG1CbJXEBJAVhjtVftcCfguh+GCiXKUzf3+TdPvjlEmjl4SS8dvm+QuTwlYyZAa/Q9VSqVyRqJ+Pj9B0nA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gVy0h6QMz7UHuP1Koa+jYrYlr0zayQzpIQbakba36ck=; b=ODnbDHukOFtVovdI8v4kaAgIpBxhrX51sRu0/oGXJYQ6pQTVVeyTq+32qnmNhpjzn4U6WbQ3lO0oZ4byeWtW/xkcGd5609u321vOgnDYQn4E6rGEuEPVF2UgZRSm0PKjOT8Vmv96jLAw8OVFr2xnPhbTtC52lfsbqPQTE86h6jA= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB3847.namprd11.prod.outlook.com (2603:10b6:a03:b1::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23; Mon, 6 Jul 2020 21:07:44 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5%7]) with mapi id 15.20.3153.029; Mon, 6 Jul 2020 21:07:44 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: IETF 108 Call for agenda items Thread-Index: AQHWU9l9MzG4W9xzL0eEDUHvi8g8UA== Date: Mon, 6 Jul 2020 21:07:43 +0000 Message-ID: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.17.200615 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 91c484c1-9cea-40da-01c9-08d821f0a07b x-ms-traffictypediagnostic: BYAPR11MB3847: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 04569283F9 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: WsPAZOk20l/zVXT4ZxmJdy2GbIXCOoiNOYAy+XV1jss/1aPgKea+iqeRfLD7QUjs01WO0FPAhYDElNZlKtE5AyQZNM5MEHwOG8WfeilOdEf99Hob4xwOY/b6alkWvQ/zOsk9ODqIHfFlW0CqF+o5Apemt6s8p3LKd3EfrlwpCX7YmekBNuRovmMRN+1WmCLL+VYpQ1Z2H7Vhv/h5uU+1J4k5/kd0JrLisPTsmLGvwSbfWDJjUuAU23IED0HN+DsN7iLUY3KzcuK1pDrefz9drLaKUxjHFTKy5zIE7UIB36ayslBQpz/XLLV0VV41bylctqXwsOJrCQYrbWbrFzK0gQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(39860400002)(396003)(136003)(366004)(8936002)(558084003)(478600001)(2616005)(316002)(86362001)(6512007)(71200400001)(8676002)(6916009)(2906002)(66446008)(66476007)(64756008)(36756003)(6486002)(6506007)(66946007)(66556008)(33656002)(186003)(5660300002)(83380400001)(26005)(76116006); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_42199E8C59F646F59F100D7AD89E9121ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 91c484c1-9cea-40da-01c9-08d821f0a07b X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jul 2020 21:07:43.9679 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fB18NiDM2wmnxZO75dGp9mH4Gm4XLF7IAfJLGVdtPVZ/leOmB+7gh/J5yr1au6rYB61as0BgmCb91R6/6i2Qjg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3847 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 21:07:49 -0000 --_000_42199E8C59F646F59F100D7AD89E9121ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8gUkFUcyBtZW1iZXJzLA0KDQpXZSB3aWxsIGJlIG1lZXRpbmcgb24gVHVlc2RheSBKdWx5 IDI4IDEzOjAwLTEzOjUwVVRDICBhbmQgV2VkbmVzZGF5IEp1bHkgMjkgMTFhbS0xMjo0MHBtIFVU Qy4NClRoaXMgaXMgYSBjYWxsIGZvciBhZ2VuZGEsIHNvIGlmIHlvdSBoYXZlIGEgdG9waWMgdG8g cHJlc2VudCBwbGVhc2UgbGV0IHRoZSBjaGFpcnMgKHJhdHMtY2hhaXJzQGlldGYub3JnPG1haWx0 bzpyYXRzLWNoYWlyc0BpZXRmLm9yZz4pIGtub3cgeW91ciB0b3BpYyBhbmQgcmVxdWVzdGVkIHRp bWUuDQoNClRoYW5rcywgTmFuY3kNCg0K --_000_42199E8C59F646F59F100D7AD89E9121ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5IZWxsbyBSQVRzIG1lbWJlcnMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij5XZSB3aWxsIGJlIG1lZXRpbmcgb24gVHVlc2RheSBKdWx5IDI4IDEz OjAwLTEzOjUwVVRDICZuYnNwO2FuZCBXZWRuZXNkYXkgSnVseSAyOSAxMWFtLTEyOjQwcG0gVVRD LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij5UaGlzIGlzIGEgY2FsbCBmb3IgYWdlbmRhLCBzbyBpZiB5b3Ug aGF2ZSBhIHRvcGljIHRvIHByZXNlbnQgcGxlYXNlIGxldCB0aGUgY2hhaXJzICg8YSBocmVmPSJt YWlsdG86cmF0cy1jaGFpcnNAaWV0Zi5vcmciPnJhdHMtY2hhaXJzQGlldGYub3JnPC9hPikga25v dyB5b3VyIHRvcGljIGFuZCByZXF1ZXN0ZWQgdGltZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcywgTmFuY3k8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_42199E8C59F646F59F100D7AD89E9121ciscocom_-- From nobody Mon Jul 6 14:25:00 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C2B33A0B22 for ; Mon, 6 Jul 2020 14:24:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kO6ZRLUMKUVD for ; Mon, 6 Jul 2020 14:24:56 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECB833A0B21 for ; Mon, 6 Jul 2020 14:24:54 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FXBwDWlQNf/xwBYJlggQmBTIF5gR6?= =?us-ascii?q?BMwqEKJEUm30HCwEBAQEBAQEBAQYBARgLCgIEAQEChEUCgicBJDgTAhABAQY?= =?us-ascii?q?BAQEBAQYEAgKGRAxDARABgnyBAgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNVEgE?= =?us-ascii?q?fAQEBAwEBGwYPAQU2GwkCEgYCAgkaAwICJx8BAg4GAQwGAgEBgldLAYJ7BQu?= =?us-ascii?q?NbJt6gTKFUYM2gToGgQ4qAYU1RoZfDw+BTD+BEScPgiwuPoEEgVgBAYR1gmA?= =?us-ascii?q?EkjaiLCgHgVmBBoEHBAuYKAUKHYJziTCEdQaNf5FZgWWYW4QgAgQCCQIVgWq?= =?us-ascii?q?BeU0kT4JpUBcCDY42iG2FRHI3AgYBBwEBAwl8iEaGMAGBEAEB?= X-IPAS-Result: =?us-ascii?q?A2FXBwDWlQNf/xwBYJlggQmBTIF5gR6BMwqEKJEUm30HC?= =?us-ascii?q?wEBAQEBAQEBAQYBARgLCgIEAQEChEUCgicBJDgTAhABAQYBAQEBAQYEAgKGR?= =?us-ascii?q?AxDARABgnyBAgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNVEgEfAQEBAwEBGwYPA?= =?us-ascii?q?QU2GwkCEgYCAgkaAwICJx8BAg4GAQwGAgEBgldLAYJ7BQuNbJt6gTKFUYM2g?= =?us-ascii?q?ToGgQ4qAYU1RoZfDw+BTD+BEScPgiwuPoEEgVgBAYR1gmAEkjaiLCgHgVmBB?= =?us-ascii?q?oEHBAuYKAUKHYJziTCEdQaNf5FZgWWYW4QgAgQCCQIVgWqBeU0kT4JpUBcCD?= =?us-ascii?q?Y42iG2FRHI3AgYBBwEBAwl8iEaGMAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,321,1589234400"; d="scan'208";a="18898269" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 23:24:52 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BTCQCrlQNf/1lIDI1ggQmBTIF5L28?= =?us-ascii?q?DVDAsCoQokROcBAsBAwEBAQEBBgEBGAsKAgQBAYRHAoIlAiQ4EwIQAQEFAQE?= =?us-ascii?q?BAgEGBG2FWwxDARABhRoBAQEDAQEbBg8BBTYbCQISBgICCRoDAgInHwECDgY?= =?us-ascii?q?BDAYCAQGCV0sBgwALjW2beoEyhVGDNoE6BoEOKgGFNUaGXw8PgUw/gREnD4I?= =?us-ascii?q?sLj6BBIFYAQGEdYJgBJI2oiwoB4FZgQaBBwQLmCgFCh2Cc4kwhHUGjX+RWYF?= =?us-ascii?q?lmFuEIAIEAgkCFYFqIoFWTSRPgmlQFwINjjaIbYVEQTE3AgYBBwEBAwl8iEa?= =?us-ascii?q?GMAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,321,1589234400"; d="scan'208";a="30199241" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 23:24:52 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 066LOpIl014667 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 6 Jul 2020 23:24:52 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Mon, 6 Jul 2020 23:24:46 +0200 To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" References: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> From: Henk Birkholz Message-ID: <993a5dad-4a1f-eafe-913f-67b461039f86@sit.fraunhofer.de> Date: Mon, 6 Jul 2020 23:24:45 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 21:24:59 -0000 Hi Nancy, I'd like to request: * Reference Interaction Models - 10 min (*) * YANG module for CHARRA/TPM - 10 min (*) * Attestation Event Stream Subscription - 10 min (*) * RATS Architecture - 15 min * "SUIT/TEEP Evidence & Attestation Result Claims" - 10 min * Update on UCCS - 10 min Viele Grüße, Henk p.s. the (*) items should be en bloc and in sequence (first session), please On 06.07.20 23:07, Nancy Cam-Winget (ncamwing) wrote: > Hello RATs members, > > We will be meeting on Tuesday July 28 13:00-13:50UTC  and Wednesday July > 29 11am-12:40pm UTC. > > This is a call for agenda, so if you have a topic to present please let > the chairs (rats-chairs@ietf.org ) know > your topic and requested time. > > Thanks, Nancy > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Jul 6 14:37:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67EF13A0B47 for ; Mon, 6 Jul 2020 14:37:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=clG6Lwpk; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ZC3wP3e5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nnVSwJyFImLH for ; Mon, 6 Jul 2020 14:37:30 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 900723A0B46 for ; Mon, 6 Jul 2020 14:37:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1992; q=dns/txt; s=iport; t=1594071450; x=1595281050; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=nu5gTew9UzPbgawN3IP3owiqpvsHGRB2MWRo6AlRkBQ=; b=clG6Lwpk8fp2QgGK2DgNduZrHs07hFeKsmp+nV/M/ygqpsyBFzJk5PJH t7yHHV2JqtllDCbXIi/c18kO/KDi16EHCuWrkk/2+Dd99zmR7Z9Laxf7G 1PctkcTjwHLujcN2uYgRKyrbDABSJmUedPLnBurtDApuXD5wExu7BEaHY I=; IronPort-PHdr: =?us-ascii?q?9a23=3AyAqlVB3lXM5laet+smDT+zVfbzU7u7jyIg8e44?= =?us-ascii?q?YmjLQLaKm44pD+JxWEv6d2jUOPU5/S9vREjOTbqebsVD9I7ZWAtSUEd5pBH1?= =?us-ascii?q?8AhN4NlgMtSMiCFQXgLfHsYiB7eaYKVFJs83yhd0QAHsH4ag7Jo2H04yQbBx?= =?us-ascii?q?P/MgR4PKL5F92ag8G+zevn/ZrVbk1Bjya8ZrUnKhKwoGCz/skbiIdvMOA/0B?= =?us-ascii?q?zM93BJYO9Rg2hvIAGe?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BMAQBLmANf/5FdJa1gHQEBAQEJARI?= =?us-ascii?q?BBQUBQIE4BgELAYFRKSgHb1gvLAqEKINGA40lJZhagS6BJANVCwEBAQwBARg?= =?us-ascii?q?LCgIEAQGERwIXgg4CJDYHDgIDAQELAQEFAQEBAgEGBG2FWwyFbwEBAQMBARA?= =?us-ascii?q?LBhEMAQEsDA8CAQYCEgYCAgkaAwICAiULFAECDgIEARIigjlLAYJLAy4BDo1?= =?us-ascii?q?pkGgCgTmIYXaBMoMBAQEFgkmCQxiCDgMGgQ4qAYJogk1Ghl8PGoIAgREnDBC?= =?us-ascii?q?CHy4+gQSBWAEBgV8Xgn8zgi2SOqJUCoJcmUoDHYJziTCSepFZgWWYW4QgAgQ?= =?us-ascii?q?CBAUCDgEBBYFaDiSBVnAVOyoBgj5QFwINjh4Yg1mFFIVCdAI1AgYBBwEBAwl?= =?us-ascii?q?8jnYBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,321,1589241600"; d="scan'208";a="784943367" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 06 Jul 2020 21:37:29 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 066LbT9F016760 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 6 Jul 2020 21:37:29 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 6 Jul 2020 16:37:29 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 6 Jul 2020 16:37:28 -0500 Received: from NAM12-BN8-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 6 Jul 2020 17:37:28 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mcKvDjTwXAhjpZT/9cZttSwUYZUCmO87YDxxbsG7R9o6/NDrgU2cbfyB1EbE1Zh4V7QtYMbb9kYX/6fjw/70gODJl/QgO1hXSJVRgS7KjUeLrhq4z6Y7XsibY2azXbr3wDQyJQpJEiLOh6qXkB57XWOzgfxQAnaNskpERx4x0Bix+Rq8BHiwK3pgZRe+jYBNuD+eZd1yVUQJjcrRW3NcvLcxR7seq/PDSwUy022gTKu8QNvt8TRliEb75Lc+MW9GzuHEQu3dSXC9pkcaVG3z5bL0ZVM2EVovCEao4J802wNiYwxU01jpOzm51Kmi4BAjp25R9d19fcldwYyt7mbzLQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nu5gTew9UzPbgawN3IP3owiqpvsHGRB2MWRo6AlRkBQ=; b=X4+uB8dDCNdNs86VE1w6HCT3w/hWe6NyWH+AypYSGX0MRg0UGQwUKJfMYzPKNHXyh402YlQ08q2PESszMTIoGlgvKZwVE3qePAsGCQ7IfUpSCpmvuNZXtryaDGuTFS29j7tBu22jEB2yak9mFHH8fJ417AEPJ6915yUCGFDZO0HbsUQ4sIXWs6cjvIELpCKrkSxBOsg8EY++oU3R9DhrKF2PODRYJnIfYwedllvw8cB6duLRPB6OBP0i6ywpWaUiqIPZfAcTUSS+/PkHoqoBel9vWuLjzMtA3YrcwyeP41AZSf8ImnuVBrk5/CoNy8dTSTqNhI3s0HBF6+LMDSiGYQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nu5gTew9UzPbgawN3IP3owiqpvsHGRB2MWRo6AlRkBQ=; b=ZC3wP3e5nJXaFc9r4XmybYcEU78nqNSrr+1yinj0/X6yTfoVZtPKkOOQLdewVEPCzpALqwZHOeJd59qpzvVwwhItSUq8vd8cLtns3dAfh2srF7yeq5DO09QD0B9Ejr8FW8SFDBJxumvoCSmLATW9+yDGO6xXs+y8o9QC/4X4Oic= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BY5PR11MB4072.namprd11.prod.outlook.com (2603:10b6:a03:18f::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23; Mon, 6 Jul 2020 21:37:27 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5%7]) with mapi id 15.20.3153.029; Mon, 6 Jul 2020 21:37:27 +0000 From: "Nancy Cam-Winget (ncamwing)" To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] IETF 108 Call for agenda items Thread-Index: AQHWU9l9MzG4W9xzL0eEDUHvi8g8UKj7EAqA//+OMAA= Date: Mon, 6 Jul 2020 21:37:27 +0000 Message-ID: <815D0226-CCEE-4581-B705-08CB744CD176@cisco.com> References: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> <993a5dad-4a1f-eafe-913f-67b461039f86@sit.fraunhofer.de> In-Reply-To: <993a5dad-4a1f-eafe-913f-67b461039f86@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.17.200615 authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ca35096b-7656-4e13-c779-08d821f4c78a x-ms-traffictypediagnostic: BY5PR11MB4072: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-forefront-prvs: 04569283F9 x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: TJAWn9jKednjoaF5Q/CZbLPRIAtQ3sSVhb6HbDCS/T2FhMYRW/h8OFxS7EEJ6m+wxsRT11RRzu3i2aI/pVkrvKgdhOjk07ozIpsAVbmgBwBABaI6IBOEAklKTeiMS1quMDooQJ8L4ED05D83CTg7Yw1ZDgHh1iGfKcbswv5tyo0vLbVi2U9Mc02QK9X4jkpurmaAQbPGT870T7bEBg6AVUDwl+e1rDzXNjo+4nE1/pRppaVrcnO/7vu+SrCn6CGkfF8vaFZ266g30zE3+o7yAQYAbIcx8vaOPgJMCce9z51YJLZM+ogNruouline4qQem5x1o8o4xIGsQMTyP88vbwuUSxzqbM8r0CsMed7W7ag9y+DIc47U3WD/m7UBgJ/+PXK08YsprPhlFd83kRz9og== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(346002)(366004)(376002)(39860400002)(6486002)(53546011)(26005)(186003)(478600001)(966005)(2906002)(8936002)(8676002)(83380400001)(33656002)(316002)(110136005)(6512007)(6506007)(76116006)(66476007)(86362001)(71200400001)(66946007)(66446008)(64756008)(66556008)(5660300002)(2616005)(36756003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <5EE7A2F2E8EDC647A466BBCD626CC155@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ca35096b-7656-4e13-c779-08d821f4c78a X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jul 2020 21:37:27.5393 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: CuWdAtvTeRVxqkPh9hhkulSbtUtBIhWnGjvgFVBcBDtKts+iUnvNM+qKT40pG3LQqtwNkBeaIuhBwPFPJFMDPw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4072 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: Re: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 21:37:32 -0000 VGhhbmtzIGZvciB0aGUgcmVxdWVzdHMgSGVuayEgIEEgY2xhcmlmaWNhdGlvbiAob3IgdGhyZWUp Og0KMS4gQXJlIHlvdSByZXF1ZXN0aW5nIHRoZSAqZWQgKGUuZy4gZmlyc3QgMykgb2NjdXIgaW4g dGhlIGZpcnN0IHNlc3Npb24/DQoyLiBUaGUgKmVkIGJsb2NrIGlzIGluIHRoZSBzZXF1ZW5jZSB5 b3Ugd2FudCB0aGVtIHRvIGZsb3c/DQozLiBBcmUgeW91IHRoZSBwcmVzZW50ZXIgZm9yIGFsbCB0 aGUgcmVxdWVzdGVkIHNsb3RzIGJlbG93Pw0KDQpXYXJtIHJlZ2FyZHMsIE5hbmN5DQoNCu+7v09u IDcvNi8yMCwgMjoyNSBQTSwgIkhlbmsgQmlya2hvbHoiIDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1 bmhvZmVyLmRlPiB3cm90ZToNCg0KICAgIEhpIE5hbmN5LA0KICAgIA0KICAgIEknZCBsaWtlIHRv IHJlcXVlc3Q6DQogICAgDQogICAgKiBSZWZlcmVuY2UgSW50ZXJhY3Rpb24gTW9kZWxzIC0gMTAg bWluICgqKQ0KICAgICogWUFORyBtb2R1bGUgZm9yIENIQVJSQS9UUE0gLSAxMCBtaW4gKCopDQog ICAgKiBBdHRlc3RhdGlvbiBFdmVudCBTdHJlYW0gU3Vic2NyaXB0aW9uIC0gMTAgbWluICgqKQ0K ICAgICogUkFUUyBBcmNoaXRlY3R1cmUgLSAxNSBtaW4NCiAgICAqICJTVUlUL1RFRVAgRXZpZGVu Y2UgJiBBdHRlc3RhdGlvbiBSZXN1bHQgQ2xhaW1zIiAtIDEwIG1pbg0KICAgICogVXBkYXRlIG9u IFVDQ1MgLSAxMCBtaW4NCiAgICANCiAgICBWaWVsZSBHcsO8w59lLA0KICAgIA0KICAgIEhlbmsN CiAgICANCiAgICBwLnMuIHRoZSAoKikgaXRlbXMgc2hvdWxkIGJlIGVuIGJsb2MgYW5kIGluIHNl cXVlbmNlIChmaXJzdCBzZXNzaW9uKSwgcGxlYXNlDQogICAgDQogICAgT24gMDYuMDcuMjAgMjM6 MDcsIE5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSB3cm90ZToNCiAgICA+IEhlbGxvIFJBVHMg bWVtYmVycywNCiAgICA+IA0KICAgID4gV2Ugd2lsbCBiZSBtZWV0aW5nIG9uIFR1ZXNkYXkgSnVs eSAyOCAxMzowMC0xMzo1MFVUQyAgYW5kIFdlZG5lc2RheSBKdWx5IA0KICAgID4gMjkgMTFhbS0x Mjo0MHBtIFVUQy4NCiAgICA+IA0KICAgID4gVGhpcyBpcyBhIGNhbGwgZm9yIGFnZW5kYSwgc28g aWYgeW91IGhhdmUgYSB0b3BpYyB0byBwcmVzZW50IHBsZWFzZSBsZXQgDQogICAgPiB0aGUgY2hh aXJzIChyYXRzLWNoYWlyc0BpZXRmLm9yZyA8bWFpbHRvOnJhdHMtY2hhaXJzQGlldGYub3JnPikg a25vdyANCiAgICA+IHlvdXIgdG9waWMgYW5kIHJlcXVlc3RlZCB0aW1lLg0KICAgID4gDQogICAg PiBUaGFua3MsIE5hbmN5DQogICAgPiANCiAgICA+IA0KICAgID4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+IFJBVFMgbWFpbGluZyBsaXN0DQog ICAgPiBSQVRTQGlldGYub3JnDQogICAgPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3JhdHMNCiAgICA+IA0KICAgIA0KDQo= From nobody Mon Jul 6 14:52:11 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B0F83A0B58 for ; Mon, 6 Jul 2020 14:52:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nOgOCd-B1gmc for ; Mon, 6 Jul 2020 14:52:05 -0700 (PDT) Received: from mail-edgeDD24.fraunhofer.de (mail-edgeDD24.fraunhofer.de [192.102.167.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 797413A0B57 for ; Mon, 6 Jul 2020 14:52:03 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2EdDABkpYde/xmnZsBmHAEBAQEBBwE?= =?us-ascii?q?BEQEEBAEBgXuBfSxsA1UvKgqEEY55gWQtmzoNCgEBAQEBAQEBAQYBARgLCgI?= =?us-ascii?q?EAQEChEICgkckOBMCEAEBBgEBAQEBBQQCAmmFVgyDU34BAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBFgJDVRIBAR4BAQEDAQEbBg8BBTYbCQISBgICCRoDAgInHwECDgY?= =?us-ascii?q?BDAYCAQGCV0sBgnwEC5M/m3mBMoVLg2eBOAaBDiqFIocADw+BTD+BEScPgiw?= =?us-ascii?q?uPoEEgWMBAYR3gl4EkH+gEweBSXd8BJYfI4JMiDiEMQWMRo8ygVKaSwIEAgk?= =?us-ascii?q?CFYFpI4FXTSRPgmlQGA2ONYhvhUNyAoEnjRkBgQ8BAQ?= X-IPAS-Result: =?us-ascii?q?A2EdDABkpYde/xmnZsBmHAEBAQEBBwEBEQEEBAEBgXuBf?= =?us-ascii?q?SxsA1UvKgqEEY55gWQtmzoNCgEBAQEBAQEBAQYBARgLCgIEAQEChEICgkckO?= =?us-ascii?q?BMCEAEBBgEBAQEBBQQCAmmFVgyDU34BAQEBAQEBAQEBAQEBAQEBAQEBFgJDV?= =?us-ascii?q?RIBAR4BAQEDAQEbBg8BBTYbCQISBgICCRoDAgInHwECDgYBDAYCAQGCV0sBg?= =?us-ascii?q?nwEC5M/m3mBMoVLg2eBOAaBDiqFIocADw+BTD+BEScPgiwuPoEEgWMBAYR3g?= =?us-ascii?q?l4EkH+gEweBSXd8BJYfI4JMiDiEMQWMRo8ygVKaSwIEAgkCFYFpI4FXTSRPg?= =?us-ascii?q?mlQGA2ONYhvhUNyAoEnjRkBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.72,341,1580770800"; d="scan'208";a="32854775" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeDD24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 23:52:00 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DeCACTnANf/1lIDI1gH2qBTIF5L28?= =?us-ascii?q?DVDAsCoQokRScBAsBAwEBAQEBBgEBGAsKAgQBAYRHAoIlAiQ4EwIQAQEFAQE?= =?us-ascii?q?BAgEGBG2FWwxDARABhRoBAQEDAQEbBg8BBTYbCQISBgICCRoDAgInHwECDgY?= =?us-ascii?q?BDAYCAQGCV0sBgwALjXmbeoEyhVGDLYE6BoEOKgGFNUaGXw8PgUw/gREnD4I?= =?us-ascii?q?sLj6BBIFYAQGEdYJgBJI2oiwoB4FZgQaBBwQLmCgFCh2Cc4kwhHUGjX+RWYF?= =?us-ascii?q?lmFuEIAIEAgkCFYFqIoFWTSRPgmlQFwINjjaIbYVEQTECNQIGAQcBAQMJfIg?= =?us-ascii?q?fhksBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,321,1589234400"; d="scan'208";a="85672850" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Jul 2020 23:51:55 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 066Lptqv015258 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 6 Jul 2020 23:51:55 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Mon, 6 Jul 2020 23:51:50 +0200 To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" References: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> <993a5dad-4a1f-eafe-913f-67b461039f86@sit.fraunhofer.de> <815D0226-CCEE-4581-B705-08CB744CD176@cisco.com> From: Henk Birkholz Message-ID: <24105a8e-df34-a217-dd7e-349b73771a84@sit.fraunhofer.de> Date: Mon, 6 Jul 2020 23:51:48 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <815D0226-CCEE-4581-B705-08CB744CD176@cisco.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2020 21:52:09 -0000 Hi Nancy, 1. yes, the first three items in the first session would be good 2. yes, that would be best, I think 3. probably not, but I am the fall-back in all cases, will give an update on actual presenters Viele Grüße, Henk On 06.07.20 23:37, Nancy Cam-Winget (ncamwing) wrote: > Thanks for the requests Henk! A clarification (or three): > 1. Are you requesting the *ed (e.g. first 3) occur in the first session? > 2. The *ed block is in the sequence you want them to flow? > 3. Are you the presenter for all the requested slots below? > > Warm regards, Nancy > > On 7/6/20, 2:25 PM, "Henk Birkholz" wrote: > > Hi Nancy, > > I'd like to request: > > * Reference Interaction Models - 10 min (*) > * YANG module for CHARRA/TPM - 10 min (*) > * Attestation Event Stream Subscription - 10 min (*) > * RATS Architecture - 15 min > * "SUIT/TEEP Evidence & Attestation Result Claims" - 10 min > * Update on UCCS - 10 min > > Viele Grüße, > > Henk > > p.s. the (*) items should be en bloc and in sequence (first session), please > > On 06.07.20 23:07, Nancy Cam-Winget (ncamwing) wrote: > > Hello RATs members, > > > > We will be meeting on Tuesday July 28 13:00-13:50UTC and Wednesday July > > 29 11am-12:40pm UTC. > > > > This is a call for agenda, so if you have a topic to present please let > > the chairs (rats-chairs@ietf.org ) know > > your topic and requested time. > > > > Thanks, Nancy > > > > > > _______________________________________________ > > RATS mailing list > > RATS@ietf.org > > https://www.ietf.org/mailman/listinfo/rats > > > > From nobody Tue Jul 7 01:30:59 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BED93A07E2 for ; Tue, 7 Jul 2020 01:30:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=iHSrkxq+; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=iHSrkxq+ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jTyZmMwhA_xp for ; Tue, 7 Jul 2020 01:30:54 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50059.outbound.protection.outlook.com [40.107.5.59]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BF9D3A07C3 for ; Tue, 7 Jul 2020 01:30:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ksqun58NJWIxrFy/IiYaBq1Q09ygSJligpDmprHMeQQ=; b=iHSrkxq+mnBOft6SGn5HLHNUBIoJfTWWuKpKmnpKl6jPaslp/EoT3vQyFd21AKNLtnMy2dXn4RQeIjTcdx2js9ppaM/P1xKymyH0F6Cg0OBJFYoTUKF2IRo4WM1+U8PxA3zeHBpboWmo/kDPFDL5g69qYji0Wdat8FnzUzckBF0= Received: from MR2P264CA0123.FRAP264.PROD.OUTLOOK.COM (2603:10a6:500:30::15) by AM4PR0802MB2369.eurprd08.prod.outlook.com (2603:10a6:200:65::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.21; Tue, 7 Jul 2020 08:30:50 +0000 Received: from VE1EUR03FT036.eop-EUR03.prod.protection.outlook.com (2603:10a6:500:30:cafe::76) by MR2P264CA0123.outlook.office365.com (2603:10a6:500:30::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.20 via Frontend Transport; Tue, 7 Jul 2020 08:30:50 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT036.mail.protection.outlook.com (10.152.19.204) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24 via Frontend Transport; Tue, 7 Jul 2020 08:30:50 +0000 Received: ("Tessian outbound b8ad5ab47c8c:v62"); Tue, 07 Jul 2020 08:30:49 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 327e049436d92fc0 X-CR-MTA-TID: 64aa7808 Received: from d6b16f0762d9.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 0FD86B84-2AF6-4BAF-A5E2-2D80FCA48011.1; Tue, 07 Jul 2020 08:30:44 +0000 Received: from EUR01-VE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id d6b16f0762d9.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Tue, 07 Jul 2020 08:30:44 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ggI/hDLYhYMfKDNJwqJ+ALbwNY2uiz4oUdljrM7NDEKw6MGvCHmvgj07gny04wkeGOLrwtg1Aea2pvWtSHpDm5bCe/d1p0qRCB93N8+XOSb2PRuc4Q5RA3/uymfjgcFbqwjPbo+As1xjlBN8v/q2Y/Y6b31u2bXdEAGc7nLUk5vAC/n3GZx57YvYq0dGgxmhFo9ByeCMW8EN4+ykSQDq15nCuOEYgXPZE092NAAlj8qQ14OHK9Syip0XHSHxLyUhKFjV04xVUfpmPRW2Cpg2zBOrDR4m/SfwMsg39FR9OHp+9Xb/D6x/zTLvqjzgtl6cAUYQO6HDw3CQ6gwP2407sA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ksqun58NJWIxrFy/IiYaBq1Q09ygSJligpDmprHMeQQ=; b=n8zsW9rQoYkUPm6iBgHy2UGQ2ExfUFYdzFDlkCkDBxd9YAAj2JoyB0IDeGeoq75swOWLTFwHkVgYDifd4CdzLpMdY9x86tk1/JIGEuUIRKKLLgg5JqOPURgpTJ9zrgEfRG9Q7c9Qq7gOenyAhjRN20uWxQ0FYE05Av23iJFCwY/YwLk9eqD9GJNylxp1T5BGzzT3aR2GUCDX5SPG/VIHb1FLQlRUQlXuRhBNfpDvUQ5FeUjIc45WUPPGkMGf85HnWgB84hp+fNF7aWCTEuQ+8FrR5nSIawbqahP6SxOTIF7vQQ1aTVlifpD9vqdw+fihxjrYfmteoIaBFnrrwsoM3Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ksqun58NJWIxrFy/IiYaBq1Q09ygSJligpDmprHMeQQ=; b=iHSrkxq+mnBOft6SGn5HLHNUBIoJfTWWuKpKmnpKl6jPaslp/EoT3vQyFd21AKNLtnMy2dXn4RQeIjTcdx2js9ppaM/P1xKymyH0F6Cg0OBJFYoTUKF2IRo4WM1+U8PxA3zeHBpboWmo/kDPFDL5g69qYji0Wdat8FnzUzckBF0= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB5143.eurprd08.prod.outlook.com (2603:10a6:20b:ed::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.28; Tue, 7 Jul 2020 08:30:41 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.029; Tue, 7 Jul 2020 08:30:41 +0000 From: Thomas Fossati To: Michael Richardson , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] should Evidence containers be explicit about Personally Identiable Information? Thread-Index: AQHWT0qg16qdO1UkpEOwcIPLbGmPlKj1qKoAgAJpmQCAAYQngIABNn0AgAEXE4A= Date: Tue, 7 Jul 2020 08:30:41 +0000 Message-ID: <0269E694-F006-4BC3-B8E6-13038C41FFD4@arm.com> References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> <22564.1593904278@localhost> <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> <16696.1594054310@localhost> In-Reply-To: <16696.1594054310@localhost> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: fe1ad3f9-dec7-4078-ffd8-08d822500e37 x-ms-traffictypediagnostic: AM6PR08MB5143:|AM4PR0802MB2369: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:2276;OLM:9508; x-forefront-prvs: 0457F11EAF X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 5jmhc1KjJBOlnZIXoT/2MEJfoLdhGRuvaUvyhCNkmIvVLmqXmaig6SfmpLaAjjv15r0Lbiy2amb7vRY8aHyFR1dH+KaVRcZE+MS9ZvMzBRYWND87Ey78xUPvJafqA3zHofyzi3vPUKMf7s9MQzT8T/VoMv/68BmhBY6VbaV3KQAk1Cil4e7k51/9vkEBpFI6pl1KNFUvsvvf+t3lPaWZrQ/posk0vHdUYbNslG9ItpaTuc6pWqnxvt/c95PqROtyS27BHUGBtiQ5UnhqE4sh3cvNWH8EtdITQxglYYeHZ/6LcOjMHFuNH/P8leVojTYgFpd456RDt+bgQR6RrKugGQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(346002)(136003)(376002)(396003)(39860400002)(66476007)(53546011)(6506007)(64756008)(66556008)(66946007)(66446008)(186003)(36756003)(2906002)(4326008)(83380400001)(5660300002)(4744005)(8936002)(91956017)(86362001)(6512007)(76116006)(8676002)(26005)(2616005)(316002)(478600001)(33656002)(110136005)(71200400001)(6486002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: GdcWXY3mcyXnVcLIyxjn7yyuXlCyiXTHbr5ZaX1sR0TKk9FT04aOHnWps/DP45Gg6M1O7FM1+LJtM0G1q4p8wt+6ilYXs+7aiiX60Fx3hONMxWae3lDqUseMPPigpd1rGvo7wBAJTzO+aunvS1p/s1XPpolPTcpHMI5H/9MBbRYDGU1GWATaFfzLmOfXJ2us0FTP8ejFnVvWmQ8FGlsUDp33QSvbBaBnjYvGPbrcD0PNs5VJvxSB7x7lvqbdnONZj3/T+vj6SyLSmRnZyGC0Gf6nJUSxOADgSpf/7HOv5uZwVEA6oL1KDWvtqounAm7RoFU/58eApw7sJMrakBwB17dU+WIt8bsBn1dFJ37pGMpotbFHZChUxDGnT1MIju8No2/sKs3x0Gu7/8ubylMY+Kaw0UmIn6u/WkMhGMy/PeH3+IlP94pfVUWWO+U43fVuu/9uXuudGxUSekEoOAv47Sp7Kh6Rsq14P95XHzEiUCE= Content-Type: text/plain; charset="utf-8" Content-ID: <2E74A8A449A94B40BFAA0BB9DF91955A@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB5143 Original-Authentication-Results: sandelman.ca; dkim=none (message not signed) header.d=none; sandelman.ca; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT036.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(39860400002)(136003)(396003)(46966005)(2616005)(83380400001)(356005)(8936002)(4326008)(478600001)(4744005)(81166007)(316002)(33656002)(110136005)(5660300002)(336012)(36756003)(36906005)(6486002)(6512007)(82310400002)(2906002)(6506007)(8676002)(53546011)(86362001)(82740400003)(47076004)(70206006)(70586007)(26005)(186003); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: d85d077b-c0f4-47c0-4e87-08d822500929 X-Forefront-PRVS: 0457F11EAF X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: qm5qs8HgDIIfEl36tozqmtKkFbGPqonXi26Ez8gQ4QgJ/jgkQiv6HzhBUT1Qh2nUKFSK1W9zEpyTzSNAh5WkQkjiaAM+bwfEqjwvjEwRbDarrkMAWsm3pfNI4uKB8PvIs3Pwt+laL5zf6wUukr8aq8aaSp08/gUreCQqT9zbwEGsKXjt4U+lIIXiDaN4qmHT3XoXwVszKuemHskXJsQovGrlVvC2Ohpf3hU0EjKWVREPMzesUi4vC+Qdf6z58V1Q4N/PRVvMQxXz5zdivhY8/3oG6YlCFfGfjzgC58kzC2LFBdniuVMlLoNYuJ/TkqBVpJQrJYdAMbnSPcirg1hsGLqoneaKM7lf0vm4cVkcA5N6iH6IP+VbVoTkMi7xG1Dt+gzW8E0jPpX9mi04e4Ms3A== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Jul 2020 08:30:50.3094 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: fe1ad3f9-dec7-4078-ffd8-08d822500e37 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: VE1EUR03FT036.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2369 Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 08:30:57 -0000 SGkgTWljaGFlbCwNCg0KT24gMDYvMDcvMjAyMCwgMTc6NTIsICJNaWNoYWVsIFJpY2hhcmRzb24i IDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KPiBEbyB5b3UgdGhpbmsgdGhhdCBzdGF0 ZW1lbnQgIzIgaXMgYW4gYXJjaGl0ZWN0dXJhbCBzdGF0ZW1lbnQgdGhhdCBtdXN0IGJlDQo+IGFw cGxpZWQgdG8gYWxsIGNvbnZleWFuY2VzPw0KDQpJJ2QgdGhpbmsgc28uDQoNCg0KDQoNCg0KDQpJ TVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFj aG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRl ciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3Ro ZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBp bmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Tue Jul 7 07:51:40 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 874A53A0DA8 for ; Tue, 7 Jul 2020 07:51:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A1zs00gFZHnZ for ; Tue, 7 Jul 2020 07:51:34 -0700 (PDT) Received: from p3plsmtpa06-03.prod.phx3.secureserver.net (p3plsmtpa06-03.prod.phx3.secureserver.net [173.201.192.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F023D3A0DA6 for ; Tue, 7 Jul 2020 07:51:33 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id sowXjWH2WjqjisowXjds8F; Tue, 07 Jul 2020 07:51:33 -0700 X-CMAE-Analysis: v=2.3 cv=U7zs8tju c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=l70xHGcnAAAA:8 a=K6EGIJCdAAAA:8 a=pdmuHtnPrbt0BSUWxw4A:9 a=KOshRiJuJeOiy6WL:21 a=XllKou7HUHH1Q73P:21 a=QEXdDO2ut3YA:10 a=Q2AO1M6W6vWcGQETbR4A:9 a=K_NV32IF7-HMMxWw:21 a=AyGNKzVVX6f0P2RF:21 a=eZDC1ROyCKlZGMHn:21 a=_W_S_7VecoQA:10 a=JtN_ecm89k2WOvw5-HMO:22 a=L6pVIi0Kn1GYQfi8-iRI:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_72D81D32-20C3-4CF3-A4A0-36599FA26000" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 7 Jul 2020 07:51:30 -0700 In-Reply-To: <24201.1593904708@localhost> Cc: "rats@ietf.org" To: Michael Richardson References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfEMZ+5WVZcV2M7OQXzScZZloswK9F9B1X11F0DjZQIj5xgXrhA+ah3n/YE4wbyLAz0+fXU+LjRp82rapUMuegOWmSEwoSJxxae6mL6m79jnTvYckAEgZ rXAghs/enorM7dUE6uBW2Cttya35MmJ/pE+I7rRaHKqFIVi9ReYOFiu4v7QGqbACC9QHz11di+X6FMoi7wp0pXijeuRdH3lu75E= Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 14:51:39 -0000 --Apple-Mail=_72D81D32-20C3-4CF3-A4A0-36599FA26000 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jul 4, 2020, at 4:18 PM, Michael Richardson = wrote: >=20 >=20 > Laurence Lundblade wrote: >>> Laurence Lundblade wrote: >>>> The problem with Endorser is that they produce Endorsements and I = think there are problems with Endorsements: >>>=20 >>>> - In Berlin you told me they don=E2=80=99t have keys in them. So = then how do >>>> keys get into the Verifier? >>>=20 >>> Well, first, I thought we agreed that the arcs above Verifier were = out of >>> scope for the architecture. The WG might recharter to include that, = but I >>> thought we agreed that the concerns were seperable. HOWEVER... >=20 >> If that=E2=80=99s the approach, then Endorsements should be removed = from the >> document, both in the text and diagram. >=20 > That makes no sense to me. >=20 > It is perfectly reasonable to define something just well enough in = order to make it > clear what is out of scope for standardization. >=20 > We can come up with many different ways to standardize Endorsements = (or > Verifier Inputs), and it shouldn't matter at all to the protocol = between > Attester and Verifier. >=20 > That's what makes it seperable. > Do you agree? Sorry, didn=E2=80=99t say that right.=20 If we=E2=80=99re going to minimize description of what is above the = Verifier, then the term =E2=80=9CEndorsement=E2=80=9D should be replaced = with a more general term like =E2=80=9CVerifier Input=E2=80=9D or = =E2=80=9CAttester Trust Criteria=E2=80=9D or other. I think there are three problems with the term =E2=80=9CEndorsement": - It implies a specific style of input (a signed document) that is too = narrow for a general architecture - It is ambiguous and/or not clear it is even correct. The room in = Berlin of experts agreed that Endorsement can=E2=80=99t have keys in = them, but there must be a key input to the Verifier. - It is TCG-specific. The term is not used in FIDO, Android and = TEE-based projects that I=E2=80=99ve worked on. Some text like this? Verifier Input Inputs used by the Verifier to establish trust in Attester, evaluate = Attestation Evidence and produce Attestation results. It may include = cryptographic keys, known-good/reference values, static implicit claims = and policy configuration. LL= --Apple-Mail=_72D81D32-20C3-4CF3-A4A0-36599FA26000 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Jul 4, 2020, at 4:18 PM, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


Laurence Lundblade <lgl@island-resort.com> wrote:
Laurence = Lundblade <lgl@island-resort.com> wrote:
The problem with Endorser is that they produce = Endorsements and I think there are problems with Endorsements:

- In Berlin you told me they don=E2=80=99t have keys in them. = So then how do
keys get into the Verifier?

Well, first, I thought we agreed = that the arcs above Verifier were out of
scope for the = architecture.  The WG might recharter to include that, but I
thought we agreed that the concerns were seperable. =  HOWEVER...

If that=E2=80=99s the = approach, then Endorsements should be removed from the
document, both in the text and diagram.

That makes no sense to me.

It is = perfectly reasonable to define something just well enough in order to = make it
clear what is out of scope for standardization.

We can come up with many different ways to = standardize Endorsements (or
Verifier Inputs), and it = shouldn't matter at all to the protocol between
Attester = and Verifier.

That's what makes it = seperable.
Do you agree?

Sorry, = didn=E2=80=99t say that right. 

If we=E2=80=99re going to minimize description of = what is above the Verifier, then the term =E2=80=9CEndorsement=E2=80=9D = should be replaced with a more general term like =E2=80=9CVerifier = Input=E2=80=9D or =E2=80=9CAttester Trust Criteria=E2=80=9D or = other.

I think there are three = problems with the term =E2=80=9CEndorsement":
- It implies a = specific style of input (a signed document) that is too narrow for a = general architecture
- It is ambiguous and/or not clear it is = even correct. The room in Berlin of experts agreed that Endorsement = can=E2=80=99t have keys in them, but there must be a key input to the = Verifier.
- It is TCG-specific. The term is not used in = FIDO, Android and TEE-based projects that I=E2=80=99ve worked = on.


Some text like this?

Verifier = Input

Inputs = used by the Verifier to establish trust in Attester, evaluate = Attestation Evidence and produce Attestation results. It may include = cryptographic keys, known-good/reference values, static implicit claims = and policy configuration.

LL
= --Apple-Mail=_72D81D32-20C3-4CF3-A4A0-36599FA26000-- From nobody Tue Jul 7 08:30:14 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBB6F3A0825 for ; Tue, 7 Jul 2020 08:30:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ygl9sLHDRfgM for ; Tue, 7 Jul 2020 08:30:10 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62C5B3A0D6B for ; Tue, 7 Jul 2020 08:30:02 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2EfBgCfkwRf/xwBYJlgHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKAoMXgTMKhCiRFpocgV8JCwEBAQEBAQEBAQYBARgLCgIEAQEChEU?= =?us-ascii?q?CghMBJDgTAhABAQYBAQEBAQYEAgKGRAxDARABgnyBAgEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEWAkNVEgEBHQEBAQECAQEBIQ8BBTMDCxAJAg4EBgICIwMCAicfAQI?= =?us-ascii?q?OBgEMAQUCAQGDIgGCXB8FC41amwR2gTKFUYM9gToGgQ4qAYxaDw+BTD+BESc?= =?us-ascii?q?PgiwuPoJcAQGBRYMwgmAEkjeRTpBeKAeBWYEGgQcEC41jikUFCh2RGAaDCYp?= =?us-ascii?q?2kVqeYQIEAgkCFYFqWYEgTSRPgmlQFwINlyOFRHI3AgYBBwEBAwl8iCCGPgG?= =?us-ascii?q?BEAEB?= X-IPAS-Result: =?us-ascii?q?A2EfBgCfkwRf/xwBYJlgHQEBAQEJARIBBQUBQIFKAoMXg?= =?us-ascii?q?TMKhCiRFpocgV8JCwEBAQEBAQEBAQYBARgLCgIEAQEChEUCghMBJDgTAhABA?= =?us-ascii?q?QYBAQEBAQYEAgKGRAxDARABgnyBAgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNVE?= =?us-ascii?q?gEBHQEBAQECAQEBIQ8BBTMDCxAJAg4EBgICIwMCAicfAQIOBgEMAQUCAQGDI?= =?us-ascii?q?gGCXB8FC41amwR2gTKFUYM9gToGgQ4qAYxaDw+BTD+BEScPgiwuPoJcAQGBR?= =?us-ascii?q?YMwgmAEkjeRTpBeKAeBWYEGgQcEC41jikUFCh2RGAaDCYp2kVqeYQIEAgkCF?= =?us-ascii?q?YFqWYEgTSRPgmlQFwINlyOFRHI3AgYBBwEBAwl8iCCGPgGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,324,1589234400"; d="scan'208";a="22948251" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jul 2020 17:30:00 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D2BACfkwRf/1lIDI1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgihvVzAsCoQokRaaHIFoCwEDAQEBAQEGAQEYCwoCBAE?= =?us-ascii?q?BhEcCghECJDgTAhABAQUBAQECAQYEbYVbDEMBEAGFGQEBAQECAQEBIQ8BBTM?= =?us-ascii?q?DCxAJAg4EBgICIwMCAicfAQIOBgEMAQUCAQGDIgGCXCQLjVqbBHaBMoVRgz2?= =?us-ascii?q?BOgaBDioBjFoPD4FMP4ERJw+CLC4+glwBAYFFgzCCYASSN5FOkF4oB4FZgQa?= =?us-ascii?q?BBwQLjWOKRQUKHZEYBoMJinaRWp5hAgQCCQIVgWoiNoEgTSRPgmlQFwINlyO?= =?us-ascii?q?FREExNwIGAQcBAQMJfIgghj4BgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,324,1589234400"; d="scan'208";a="30277398" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jul 2020 17:29:58 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 067FTv7Q011872 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 7 Jul 2020 17:29:57 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 7 Jul 2020 17:29:52 +0200 To: Laurence Lundblade , Michael Richardson CC: "rats@ietf.org" References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> From: Henk Birkholz Message-ID: <0a747f8c-81eb-2c03-46d3-73977faee457@sit.fraunhofer.de> Date: Tue, 7 Jul 2020 17:29:51 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 15:30:13 -0000 Hi Laurence, at first, I thought I get your line of thought, but now I am confused again. Sorry! Comments in-line. On 07.07.20 16:51, Laurence Lundblade wrote: > > >> On Jul 4, 2020, at 4:18 PM, Michael Richardson > > wrote: >> >> >> Laurence Lundblade > > wrote: >>>> Laurence Lundblade >>> > wrote: >>>>> The problem with Endorser is that they produce Endorsements and I >>>>> think there are problems with Endorsements: >>>> >>>>> - In Berlin you told me they don’t have keys in them. So then how do >>>>> keys get into the Verifier? >>>> >>>> Well, first, I thought we agreed that the arcs above Verifier were >>>> out of >>>> scope for the architecture.  The WG might recharter to include that, >>>> but I >>>> thought we agreed that the concerns were seperable.  HOWEVER... >> >>> If that’s the approach, then Endorsements should be removed from the >>> document, both in the text and diagram. >> >> That makes no sense to me. >> >> It is perfectly reasonable to define something just well enough in >> order to make it >> clear what is out of scope for standardization. >> >> We can come up with many different ways to standardize Endorsements (or >> Verifier Inputs), and it shouldn't matter at all to the protocol between >> Attester and Verifier. >> >> That's what makes it seperable. >> Do you agree? > > Sorry, didn’t say that right. > > If we’re going to minimize description of what is above the Verifier, > then the term “Endorsement” should be replaced with a more general term > like “Verifier Input” or “Attester Trust Criteria” or other. > > I think there are three problems with the term “Endorsement": > - It implies a specific style of input (a signed document) that is too > narrow for a general architecture If that is what a reader gets from the document we have to do better. An endorsement does not have to be signed in the way that a UCCS does not have to be signed. It has to be tamper-evident though, because the Verifier relies on its integrity. That's the point and I think that is not too narrow. > - It is ambiguous and/or not clear it is even correct. The room in > Berlin of experts agreed that Endorsement can’t have keys in them, but > there must be a key input to the Verifier. Well, my recollection of that room of experts does not include any opinions on key material for Endorsements as defined for IETF RATS. The TCG defines (I just looked that up) four specific terms around and "Endorsement Key", so I am relatively sure that key material is involved in all cases, as these are the only terms that make use of the phrase endorsement. > - It is TCG-specific. The term is not used in FIDO, Android and > TEE-based projects that I’ve worked on. And this confuses me. I'll do a self-quote here: "Endorsements as defined for IETF RATS". We are defining that term here in the RATS architecture. The TCG does not define it in any document that I could google just now. Maybe I have missed something there. But that is beside the point anyways. The point is that we are defining it here. Viele Grüße, Henk > > > Some text like this? > > Verifier Input > > Inputs used by the Verifier to establish trust in Attester, evaluate > Attestation Evidence and produce Attestation results. It may include > cryptographic keys, known-good/reference values, static implicit > claims and policy configuration. > > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Tue Jul 7 09:42:35 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B8763A08C6; Tue, 7 Jul 2020 09:42:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=O70eh6ix; dkim=pass (1024-bit key) header.d=juniper.net header.b=Ujxm3OGr Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yk-TnEbXo_7Z; Tue, 7 Jul 2020 09:42:31 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CB383A08D4; Tue, 7 Jul 2020 09:42:31 -0700 (PDT) Received: from pps.filterd (m0108162.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 067GcDoW003699; Tue, 7 Jul 2020 09:42:21 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=MdoUiYyMBNNanT9+qw9JvcJ7OttveREbqVUazQ2CnQI=; b=O70eh6ixQAN4Wyyhnh5VnD5W6pfCNr+O4Sz4BKQ6QoHECQw8P+yNkFhgOXkjjt1PU4FF SXG8pXeMSfF3cwCboDKc7Btq+XaZHXV1Kn5OeBCZ9sybFcjPNru0Jp1XI2XIDTSS50WQ 9hC+Qdh6L8xMw7xQGFZt9HlJefjvP90k4BwkhZE4PO+9pPVe/PE/hwvvdS+1WtT6V+mD S3HzAmnwEbcPJo2vo9CZX0ZQHJnjZ2XTCbUqV+m1mmCIXh3FZQin+gQAr3d44WBQ4Uu6 ho4IkjheMpqigmsPDU/OdwmK2JIgJ+sTjiN1PSQ2iVZOa65xhERedXamrziLh1i0NQDg RA== Received: from nam02-sn1-obe.outbound.protection.outlook.com (mail-sn1nam02lp2050.outbound.protection.outlook.com [104.47.36.50]) by mx0b-00273201.pphosted.com with ESMTP id 324g2h9626-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 07 Jul 2020 09:42:21 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hHTcZ184Q0s3H5q0jmXnLY5XZ/xeliLrxiGoDAJLk+NmIs9nvU1QNHduu3r5C74KxDlBrNE0ZQcAmG0WszNxm5s9GXecrn0Lq+WCFsTD8TJjBVfNg8Ap8whH2WRAe2B9RFqaWn1bfE9eKokj0VdJUXqY+8+5uye0OeQ/XNReTEOxgOoB8LAbKQecebqj8N3y/tokrGobYADIJ22GR/n1yZT43ZDwOkkFY8am+3K8VFfJOZ0VTT/16z07sd2cQx63LF+dVMw45iQjNGAeggx65fe64Ca9aeIQWjV//VIlHzuD7UqMCWoX5iFo5oygk6IG3d0PcYwFqtYlAwUgaPlcZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MdoUiYyMBNNanT9+qw9JvcJ7OttveREbqVUazQ2CnQI=; b=d25tk6yU5OsPsVQX3ttzrGftsw9Mn4yhAFlEI+JChDB6zQCOs6Ii7rtaOSNhb4COVEJL7SioLJdt8fl5qAmcnsf9FLAEAE2usLB9DWxRyZpmNnkYsA5hTNw6OCQG7Gr16DkWpWz5AcXgn0EkiLL97ot9aHV9vYb6w6cOfZoNSbnHbRbNqa56nFkx1tYu+wXVTxZn2LkQ5NIDb3aZVuzYRl781X7d7AIy7n1vvaTwB6bv+mlPKcg/CLdeBOJ+UAFAcWMeSvCpxvGWc7K+EbtA6O15KZP/ENFOcJvoZY075YOTcIzgMCn2CUjufTAiKM7xGgtAnxR+z8PYvuMB7Vkfiw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MdoUiYyMBNNanT9+qw9JvcJ7OttveREbqVUazQ2CnQI=; b=Ujxm3OGr1uKyanYobIqyZTJooN///jHFaOMgvqB+9Ho2zNtqYpjEH51lUv554T9eV7ge+FccFL0YbvYqDf3ycPBFtYavpdoADBopgi1sOdUWp6oNbeQmaNl97o3rxHqAvK/4L8e3bD8JBz4IQhEeFu/fS9swR0VwMHiwhMZ6zJc= Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM6PR05MB5403.namprd05.prod.outlook.com (2603:10b6:5:5c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.12; Tue, 7 Jul 2020 16:42:19 +0000 Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5%5]) with mapi id 15.20.3174.020; Tue, 7 Jul 2020 16:42:19 +0000 From: Guy Fedorkow To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" CC: "Eric Voit (evoit)" , "jessica.m.fitzgerald-mckay.civ@mail.mil" Thread-Topic: IETF 108 Call for agenda items Thread-Index: AQHWU9l9MzG4W9xzL0eEDUHvi8g8UKj8UzQA Date: Tue, 7 Jul 2020 16:42:19 +0000 Message-ID: References: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> In-Reply-To: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none; dmarc.ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.11] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: abb8338c-049f-4036-76e4-08d82294b71e x-ms-traffictypediagnostic: DM6PR05MB5403: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: F1w8bVQNbGgyVjx1yQMaOQWesrkDPt3PPXSs07ABFGwXZzRaOGV/wEkKDoIyqjmwUQN9Vfdl1GqQfAuwaJkuKYWD/ae7Z7H6BHfKIZvGwWtyWRcxHpvSm2fk4FhlA9UhbEtvB4K6jXHrD9n4hiEDguG9y/j8DmZDDNdblkjnZGoLrHKzGzAmjhBxvPgW2W5OSJQJQTSmZ7O4k/Jll/TIPXK3XZuUwwn+TOkDYcxDX+waoNVs87zyGdhPOUFukP7keXlxk+JZvi13dfANE0WVuGBiQIUoLBBlmDObygj2WFh4A1lOqgZiGAHXBXOwQxwtukR4+UnXHJTZ9ryzQUcCRg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(9686003)(99936003)(55016002)(33656002)(7696005)(86362001)(53546011)(6506007)(498600001)(8676002)(8936002)(186003)(26005)(9326002)(2906002)(54906003)(110136005)(4326008)(52536014)(66616009)(66476007)(64756008)(66446008)(71200400001)(5660300002)(4744005)(66946007)(76116006)(83380400001)(66556008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: RBx1aDb35KbOkLyDiBT6S8hXax027HLMmtzuRio5sqcl6oCSLQGEvrZkw6ys36VsadXak1E4+/G/8PqPKHdKhfuUaA6JNCmJNkHYW65eTFfMnLxuG4nrsRsNXL09EjjhRnn3uozjJPcUUNMjUkQNZKIxLouhl/il8aN1tgbaXoFwJhTrvknKVtdQ7RHLgzzlT+5LKwHfAgPGVvFdiW3eyemckROTNAlnXa+ZMPB15mNSvGcvKJjQ+CtDQhUrN56uPn/lTF6Fx5uzKuyzXFZCp5uhMuw+3tgf6C8MY5yfeviiYa2hJGhQmWfG8MeFs6KBjO63F0aj4uubbC5VS9Q2kmxAEZxpAhJrNI32pkGehUC/yXhhPFKCEth7Fsy2BIBEckDGjY9vJXbwqqavun0281QFTDotDmTkoFuYgMpS7sDo2Ixh0eTvgWnvt+mBmOH9xPgA5zBbQEwIEDOMDvxqQ8xre1J+j6OfhAt5Yk4UI9NeD3zU4js7A8PGspZxcpEe x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_013D_01D6545C.0C7113F0" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: abb8338c-049f-4036-76e4-08d82294b71e X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jul 2020 16:42:19.4077 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HcvERvpg71CMSm6pEsYkH2Hqa1FRYOcW4QkU3fccoJbzZHApvYia9NiJLmh4Vs0URvzHuSWKpSmxghYHFrV1vA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB5403 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-07_09:2020-07-07, 2020-07-07 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 phishscore=0 bulkscore=0 mlxlogscore=999 spamscore=0 malwarescore=0 clxscore=1011 mlxscore=0 impostorscore=0 adultscore=0 cotscore=-2147483648 priorityscore=1501 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2004280000 definitions=main-2007070118 Archived-At: Subject: Re: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 16:42:34 -0000 ------=_NextPart_000_013D_01D6545C.0C7113F0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_013E_01D6545C.0C7113F0" ------=_NextPart_001_013E_01D6545C.0C7113F0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Hi Nancy, Could we have 15 min on the agenda to talk about RIV changes? Thanks /guy From: RATS On Behalf Of Nancy Cam-Winget (ncamwing) Sent: Monday, July 6, 2020 5:08 PM To: rats@ietf.org Subject: [Rats] IETF 108 Call for agenda items [External Email. Be cautious of content] Hello RATs members, We will be meeting on Tuesday July 28 13:00-13:50UTC and Wednesday July 29 11am-12:40pm UTC. This is a call for agenda, so if you have a topic to present please let the chairs (rats-chairs@ietf.org ) know your topic and requested time. Thanks, Nancy ------=_NextPart_001_013E_01D6545C.0C7113F0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Hi = Nancy,

=C2=A0 Could we have 15 min on the agenda to = talk about RIV changes?

=C2=A0 Thanks

/guy

 

 

From: RATS <rats-bounces@ietf.org> On = Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Monday, July = 6, 2020 5:08 PM
To: rats@ietf.org
Subject: [Rats] = IETF 108 Call for agenda items

 

[Ext= ernal Email. Be cautious of content]

 

Hello RATs = members,

 

We will be meeting on = Tuesday July 28 13:00-13:50UTC  and Wednesday July 29 11am-12:40pm = UTC.

This is a call for agenda, so if you have a = topic to present please let the chairs (rats-chairs@ietf.org) know your = topic and requested time.

 

Thanks, = Nancy

 

------=_NextPart_001_013E_01D6545C.0C7113F0-- ------=_NextPart_000_013D_01D6545C.0C7113F0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISJTCCBd4w ggPGoAMCAQICEAH9bTD8o8pRqBu8ZA41Ay0wDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEwMDIwMTAwMDAwMFoXDTM4MDExODIzNTk1OVowgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw12 7c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnby qTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuG FFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnH a4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQN wZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQ v0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV 4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaNCMEAwHQYDVR0O BBYEFFN5v1qqK0rPVIDh2JvAnfKyA2bLMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MA0GCSqGSIb3DQEBDAUAA4ICAQBc1HwNz/cBfUGZZQxzxVKfy/jPmQZ/G9pDFZ+eAlVXlhTxUjwn h5Qo7R86ATeidvxTUMCEm8ZrTrqMIU+ijlVikfNpFdi8iOPEqgv976jpS1UqBiBtVXgpGe5fMFxL JBFV/ySabl4qK+4LTZ9/9wE4lBSVQwcJ+2Cp7hyrEoygml6nmGpZbYs/CPvI0UWvGBVkkBIPcygu xeIkTvxY7PD0Rf4is+svjtLZRWEFwZdvqHZyj4uMNq+/DQXOcY3mpm8fbKZxYsXY0INyDPFnEYkM nBNMcjTfvNVx36px3eG5bIw8El1l2r1XErZDa//l3k1mEVHPma7sF7bocZGM3kn+3TVxohUnlBzP YeMmu2+jZyUhXebdHQsuaBs7gq/sg2eF1JhRdLG5mYCJ/394GVx5SmAukkCuTDcqLMnHYsgOXfc2 W8rgJSUBtN0aB5x3AD/Q3NXsPdT6uz/MhdZvf6kt37kC9/WXmrU12sNnsIdKqSieI47/XCdr4bBP 8wfuAC7UWYfLUkGV6vRH1+5kQVV8jVkCld1incK57loodISlm7eQxwwH3/WJNnQy1ijBsLAL4JxM wxzW/ONptUdGgS+igqvTY0RwxI3/LTO6rY97tXCIrj4Zz0Ao2PzIkLtdmSL1UuZYxR+IMUPuiB3X xo48Q2odpxjefT0W8WL5ypCo/TCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJKoZI hvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VS VHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMwMTIz MTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGln byBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkqKtLN nFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfbM3wc caNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+LbnTe ef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmHfpsE kzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMBAAGj ggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy/Ava lNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlvbkF1 dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9v Y3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiMAN0X 13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vhNn9d NqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHitcPr 5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDpVRH9 9lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7T2ww C+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI9oKS ChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RIZllX 4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDonM8V/ 2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQz3lC NObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMIIGKzCCBROgAwIBAgIRAPuElTZ4 EhaY10ByhNJltnIwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVh dGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRl ZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0EwHhcNMTkwODI0MDAwMDAwWhcNMjIwODIzMjM1OTU5WjCCATcxCzAJBgNVBAYTAlVT MQ4wDAYDVQQREwU5NDA4OTELMAkGA1UECBMCQ0ExEjAQBgNVBAcTCVN1bm55dmFsZTEcMBoGA1UE CRMTMTEzMyBJbm5vdmF0aW9uIFdheTEeMBwGA1UEChMVSnVuaXBlciBOZXR3b3JrcywgSW5jMR4w HAYDVQQLExVTb2Z0d2FyZSBFbmdpbmVlciBMYWIxOzA5BgNVBAsTMklzc3VlZCB0aHJvdWdoIEp1 bmlwZXIgTmV0d29ya3MsIEluYyBFLVBLSSBNYW5hZ2VyMR8wHQYDVQQLExZDb3Jwb3JhdGUgU2Vj dXJlIEVtYWlsMRUwEwYDVQQDEwxHdXkgRmVkb3Jrb3cxJDAiBgkqhkiG9w0BCQEWFWdmZWRvcmtv d0BqdW5pcGVyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Fewgz3OFG1Go3 cuoLYIbLNRTSEFgN+GLUaqB6g5VuCf0UTvgARSlxgDmsvE5qwTtb8JOtJ64OylVNvz28uslsfvg4 WCc0InZUo1B6JkgNamxa3HI31h63s5wVm/wZgglg5Dv7WH7gmAPrgeoWpBC2GN1sxWHfcJOi2fzg M5LWst0Iwz4M7vqFsZ77AOkUFDNm5p19Fu8HRjVlsE0fNGieZB5GEiL2CN2YoxyOKrJdqWHNMkK8 Q5owvlDnSR0tb8oJgHDX8EESSo5TDA5zqnva48zFfFWCrOdobNgf1To4uBskX6B+QEmrSNLuSdpK JOHw9IdrPofgpjZCmFwvtS8CAwEAAaOCAc4wggHKMB8GA1UdIwQYMBaAFAnA8vwL2pTbX/4r36iZ Qs/J4K0AMB0GA1UdDgQWBBQPfL+xFDoZAlQisKraMq/Y34eQGjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwQAYDVR0gBDkwNzA1Bgwr BgEEAbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVu dGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAC hklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAg BgNVHREEGTAXgRVnZmVkb3Jrb3dAanVuaXBlci5uZXQwDQYJKoZIhvcNAQELBQADggEBALilLU71 sn7XVNFoUU4MqcHXXFiFiOjCQmq1nqijMa6L4fKm/VX9LZtrsQs3CZTUiHuW2pyLapLVIEXdubNX L877oIVJmeAoSWz1+AYelK6CIpuGUUcGSsXKd4Xl9yOTrmLb7PTjrRpXsWSHJi//jrXTrR/X6M+U TterfzhR5gYPFyvX65Zie9M7k7V2yB3YJJPzT8EtfrJc+eDzYAgiWK8X/ToMZOG7noa/Er8FEARn joL7pKHVOkHTOM9UNaublWlhiUEzzXx9kYPKjgqjAetRo4zh1KBFm9MBlXeigAVBx+BQpP0OdmHb 5vcX3pUR4lkRpnVeLKFR++q6z+bViYAxggRnMIIEYwIBATCBrDCBljELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2Vj dGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIRAPuElTZ4EhaY10ByhNJltnIwCQYFKw4DAhoFAKCCAo8wGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzA3MTY0MjE3WjAjBgkq hkiG9w0BCQQxFgQUYbcYhfMTN29zQleZl04N7O/ATw4wga0GCSqGSIb3DQEJDzGBnzCBnDALBgkq hkiG9w0BAQcwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIaMAsGCSqGSIb3DQEBCjAL BglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBvQYJKwYBBAGCNxAEMYGvMIGs MIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENs aWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA+4SVNngSFpjXQHKE0mW2 cjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+ MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQD7hJU2eBIWmNdAcoTSZbZyMA0GCSqGSIb3DQEBAQUABIIBAABJ9M4Pw/GZ8osliyjf RqonQ1+E/d+sFxxwEPt7VWQjJgcWFiFIepED5okMe1DTj6QbrttJplIniOo68cAnYuqaVaDV+p7N Qu7KOjxrz5n1ATooRHuxvmAdvvjAkOB4br/iYvwXPJGYGlR1RWxHrA48cb+0G5tOXLswvEIGp8dK 0VC5uSDmgZkSb6yj0Ko4csx4gw/Dq5PkjhtzOjnJAJ2yKERfrsdmLpHm64bRiBCkKQEpPSlZtc5g eyWvKrSN4WYau/bYp9sawOQlNiGoXWZ0TrOBMZTXjRVn5vV46GcOTzomPt7jR5y8av2w70ncha6h fqTpdQLe21bmL6YKSPIAAAAAAAA= ------=_NextPart_000_013D_01D6545C.0C7113F0-- From nobody Tue Jul 7 10:06:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF0A33A1173 for ; Tue, 7 Jul 2020 10:06:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wSeBN9H7_ttY for ; Tue, 7 Jul 2020 10:06:48 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C7EA3A1179 for ; Tue, 7 Jul 2020 10:06:43 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 6E1B1389A4; Tue, 7 Jul 2020 13:03:49 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id JcHwDuRmkpkr; Tue, 7 Jul 2020 13:03:48 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 31D5F389A3; Tue, 7 Jul 2020 13:03:48 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 53A09136; Tue, 7 Jul 2020 13:06:41 -0400 (EDT) From: Michael Richardson To: Laurence Lundblade cc: "rats\@ietf.org" In-Reply-To: <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 17:06:51 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Laurence Lundblade wrote: > Sorry, didn=E2=80=99t say that right. > If we=E2=80=99re going to minimize description of what is above the V= erifier, > then the term =E2=80=9CEndorsement=E2=80=9D should be replaced with a= more general term > like =E2=80=9CVerifier Input=E2=80=9D or =E2=80=9CAttester Trust Crit= eria=E2=80=9D or other. I comprehend your point. > I think there are three problems with the term =E2=80=9CEndorsement": > - It implies a specific style of input (a signed document) that is too > narrow for a general architecture I don't agree that it has to be a signed document. I think it could well be configuration information. But, it might be that, being largely TCG-ignorant, I like the term because = I view it without TCG-approved-eyewear. > - It is ambiguous and/or not clear it is even correct. The room in > Berlin of experts agreed that Endorsement can=E2=80=99t have keys in = them, but > there must be a key input to the Verifier. I would appreciate if Henk, or Dave could clarify this comment. I can't see why it can't list a set of trust anchors to be used to verify Evidence. I assume that's the kind of keys you speak of. > - It is TCG-specific. The term is not used in FIDO, Android and > TEE-based projects that I=E2=80=99ve worked on. > Some text like this? > Verifier Input > Inputs used by the Verifier to establish trust in Attester, evaluate > Attestation Evidence and produce Attestation results. It may include > cryptographic keys, known-good/reference values, static implicit clai= ms > and policy configuration. I'm okay with this description, but I don't understand the dislike for endorsement. =2D- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | IoT architect = [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8Eq6EACgkQgItw+93Q 3WXKPQf9G7i52A2xkxF7oouJFdEQj5YV4d183OpG5I4Q8vZndsWdtzcKMCwlng9U 09rOxIHsUvae5Zd/wC4kbtRqnl5/PebhjYOQC4O+dgFhO4+i2EQEatR5OlpqMXV/ fcIr5+PRdb5vUC/SmHRN1YnmIqJ7iC1HjpSFakg8DOQ5kP5EOIs1pkdmis+IARm4 S8NF3s2MkCAmiG9jAGM+30XdDq+q+A8abpMwm/2T7NZjyQWYr0qpqOjjBxE2JAqq IlIb81IHBxmflopTSc4kMDvCDbI9+Kw98eV5onmGIvca+H7/GP2Romj6gZSbDDpL hrJUN+pbeLigV0PLgTXNKM2I3e+QoA== =P0Sd -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Jul 7 11:33:12 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 403623A12EC for ; Tue, 7 Jul 2020 11:33:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id drNYQO-jJmNL for ; Tue, 7 Jul 2020 11:33:05 -0700 (PDT) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F49A3A12E7 for ; Tue, 7 Jul 2020 11:33:05 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id ssOuj0MjSM35XssOujkBbY; Tue, 07 Jul 2020 11:33:04 -0700 X-CMAE-Analysis: v=2.3 cv=CPNUoijD c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=l70xHGcnAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=ofYvtE0aFZij48KlY58A:9 a=CiRLc6Zg4CwvyvVC:21 a=_m-u16Nmaq-ETrO8:21 a=QEXdDO2ut3YA:10 a=XFnbsQTGpD2PEx90iHUA:9 a=zr1vfRI-dJudO5yM:21 a=2k5Q7PAH-wLEBB1p:21 a=ASXVY3NQGGO-thxP:21 a=_W_S_7VecoQA:10 a=JtN_ecm89k2WOvw5-HMO:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_901EE0F4-2C75-4D51-B96F-A93283B947D4" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 7 Jul 2020 11:33:02 -0700 In-Reply-To: <0a747f8c-81eb-2c03-46d3-73977faee457@sit.fraunhofer.de> Cc: Michael Richardson , "rats@ietf.org" To: Henk Birkholz References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> <0a747f8c-81eb-2c03-46d3-73977faee457@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfCWjJTsUbojarUyfiHgWQauft9iqTgVxCmRRocFSjokmXyFTKNZXmNtCU3ubCVFc6SPt9voReKAmbrxDzyWe9pKvWq+ZEPdOJAH38StK0JlcOyiEb/L6 B3tlSu7nm9qsqXUOk1mdEpZ0ccvCYgC9ylmr3sZF+Re1S8NKRy4E+fvcrZDjLtKdA+aa1KpgHl/vII4aaxKjW8HXbmezSFF11TCggJ+4Xf+pPi134HDKgDxV x/YUa5qOrTDBdg3OWFnijQ== Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 18:33:09 -0000 --Apple-Mail=_901EE0F4-2C75-4D51-B96F-A93283B947D4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jul 7, 2020, at 8:29 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > at first, I thought I get your line of thought, but now I am confused = again. Sorry! Comments in-line. >=20 > On 07.07.20 16:51, Laurence Lundblade wrote: >>> On Jul 4, 2020, at 4:18 PM, Michael Richardson = = >> wrote: >>>=20 >>>=20 >>> Laurence Lundblade >> wrote: >>>>> Laurence Lundblade >> wrote: >>>>>> The problem with Endorser is that they produce Endorsements and I = think there are problems with Endorsements: >>>>>=20 >>>>>> - In Berlin you told me they don=E2=80=99t have keys in them. So = then how do >>>>>> keys get into the Verifier? >>>>>=20 >>>>> Well, first, I thought we agreed that the arcs above Verifier were = out of >>>>> scope for the architecture. The WG might recharter to include = that, but I >>>>> thought we agreed that the concerns were seperable. HOWEVER... >>>=20 >>>> If that=E2=80=99s the approach, then Endorsements should be removed = from the >>>> document, both in the text and diagram. >>>=20 >>> That makes no sense to me. >>>=20 >>> It is perfectly reasonable to define something just well enough in = order to make it >>> clear what is out of scope for standardization. >>>=20 >>> We can come up with many different ways to standardize Endorsements = (or >>> Verifier Inputs), and it shouldn't matter at all to the protocol = between >>> Attester and Verifier. >>>=20 >>> That's what makes it seperable. >>> Do you agree? >> Sorry, didn=E2=80=99t say that right. >> If we=E2=80=99re going to minimize description of what is above the = Verifier, then the term =E2=80=9CEndorsement=E2=80=9D should be replaced = with a more general term like =E2=80=9CVerifier Input=E2=80=9D or = =E2=80=9CAttester Trust Criteria=E2=80=9D or other. >> I think there are three problems with the term =E2=80=9CEndorsement": >> - It implies a specific style of input (a signed document) that is = too narrow for a general architecture >=20 > If that is what a reader gets from the document we have to do better. = An endorsement does not have to be signed in the way that a UCCS does = not have to be signed. It has to be tamper-evident though, because the = Verifier relies on its integrity. That's the point and I think that is = not too narrow. If you want to define an Endorsement as a *protocol*, not just a = signed/unsigned document, then the term might work. Endorsement Protocol: - A one-time transfer or a multiple requests/responses for each and = every Verification or anything in between - Must provide integrity - May have to provide confidentiality, particularly for symmetric keys >> - It is ambiguous and/or not clear it is even correct. The room in = Berlin of experts agreed that Endorsement can=E2=80=99t have keys in = them, but there must be a key input to the Verifier. >=20 > Well, my recollection of that room of experts does not include any = opinions on key material for Endorsements as defined for IETF RATS. The = TCG defines (I just looked that up) four specific terms around and = "Endorsement Key", so I am relatively sure that key material is involved = in all cases, as these are the only terms that make use of the phrase = endorsement. My slide in Berlin said =E2=80=9CEndorsements have key material=E2=80=9D. = You that wasn=E2=80=99t right. I said =E2=80=9Csorry for my mistake=E2=80=9D= . The room tacitly agreed with you. This says to me that at least one of these is true: - There is some pre conceived idea for what Endorsements are, seemingly = from the the TCG world - There is confusion about what Endorsements are (you said no keys in = Berlin, now you say there are keys) - RATS architecture is not clear about how verification key material = gets to the Verifier. I don=E2=80=99t mind being wrong here. My trouble is the lack of = clarity, common understanding and gap in the RATS architecture. >=20 >> - It is TCG-specific. The term is not used in FIDO, Android and = TEE-based projects that I=E2=80=99ve worked on. >=20 > And this confuses me. I'll do a self-quote here: "Endorsements as = defined for IETF RATS". We are defining that term here in the RATS = architecture. The TCG does not define it in any document that I could = google just now. Maybe I have missed something there. But that is beside = the point anyways. The point is that we are defining it here. Seems to me there are semantics associated with the term = =E2=80=9CEndorsement=E2=80=9D from the TCG and that seems to be of a = relatively static document that is transferred once. It seems like = adopting a definition in RATS that is beyond that is confusing (e.g., = confusion between now and Berlin). If we must use the term Endorsement, = then I think it should Endorsement Protocol to separate from the = previous. I still think this is simple and could work: Verifier Input Inputs used by the Verifier to establish trust in Attester, evaluate = Attestation Evidence and produce Attestation results. It may include = cryptographic keys, known-good/reference values, static implicit claims = and policy configuration. LL >=20 >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >> Some text like this? >> Verifier Input >> Inputs used by the Verifier to establish trust in Attester, = evaluate >> Attestation Evidence and produce Attestation results. It may = include >> cryptographic keys, known-good/reference values, static implicit >> claims and policy configuration. >> LL >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats = >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_901EE0F4-2C75-4D51-B96F-A93283B947D4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8

On Jul 7, 2020, at 8:29 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi Laurence,

at first, I thought I get your = line of thought, but now I am confused again. Sorry! Comments = in-line.

On 07.07.20 = 16:51, Laurence Lundblade wrote:
On= Jul 4, 2020, at 4:18 PM, Michael Richardson <mcr+ietf@sandelman.ca <mailto:mcr+ietf@sandelman.ca>> wrote:


Laurence Lundblade <lgl@island-resort.com <mailto:lgl@island-resort.com>> wrote:
Laurence Lundblade <lgl@island-resort.com <mailto:lgl@island-resort.com>> wrote:
The problem with = Endorser is that they produce Endorsements and I think there are = problems with Endorsements:

- In Berlin you told me = they don=E2=80=99t have keys in them. So then how do
keys = get into the Verifier?

Well, = first, I thought we agreed that the arcs above Verifier were out of
scope for the architecture.  The WG might recharter to = include that, but I
thought we agreed that the concerns = were seperable.  HOWEVER...

If that=E2=80=99s the approach, then = Endorsements should be removed from the
document, both in = the text and diagram.

That = makes no sense to me.

It is perfectly = reasonable to define something just well enough in order to make it
clear what is out of scope for standardization.

We can come up with many different ways to = standardize Endorsements (or
Verifier Inputs), and it = shouldn't matter at all to the protocol between
Attester = and Verifier.

That's what makes it = seperable.
Do you agree?
Sorry, = didn=E2=80=99t say that right.
If we=E2=80=99re going to = minimize description of what is above the Verifier, then the term = =E2=80=9CEndorsement=E2=80=9D should be replaced with a more general = term like =E2=80=9CVerifier Input=E2=80=9D or =E2=80=9CAttester Trust = Criteria=E2=80=9D or other.
I think there are three = problems with the term =E2=80=9CEndorsement":
- It implies = a specific style of input (a signed document) that is too narrow for a = general architecture

If that is what a reader gets from the document we have to do = better. An endorsement does not have to be signed in the way that a UCCS = does not have to be signed. It has to be tamper-evident though, because = the Verifier relies on its integrity. That's the point and I think that = is not too narrow.

If you want to define an Endorsement as a = *protocol*, not just a signed/unsigned document, then the term might = work.

Endorsement = Protocol:
 - A one-time transfer or a multiple = requests/responses for each and every Verification or anything in = between
 - Must provide integrity
 - May = have to provide confidentiality, particularly for symmetric = keys


- It is ambiguous and/or not clear it = is even correct. The room in Berlin of experts agreed that Endorsement = can=E2=80=99t have keys in them, but there must be a key input to the = Verifier.

Well, my recollection of that room of experts does not = include any opinions on key material for Endorsements as defined for = IETF RATS. The TCG defines (I just looked that up) four specific terms = around and "Endorsement Key", so I am relatively sure that key material = is involved in all cases, as these are the only terms that make use of = the phrase endorsement.

My slide in Berlin said =E2=80=9CEndorsements have = key material=E2=80=9D. You that wasn=E2=80=99t right. I said =E2=80=9Csorr= y for my mistake=E2=80=9D. The room tacitly agreed with = you.

This says to me that at least = one of these is true:
 - There is some pre conceived idea = for what Endorsements are, seemingly from the the TCG = world
 - There is confusion about what Endorsements are = (you said no keys in Berlin, now you say there are = keys)
 - RATS architecture is not clear about how = verification key material gets to the Verifier.

I don=E2=80=99t mind being wrong here. My trouble = is the lack of clarity, common understanding and gap in the RATS = architecture.


- It is TCG-specific. The term is not = used in FIDO, Android and TEE-based projects that I=E2=80=99ve worked = on.

And this confuses me. I'll do a self-quote here: = "Endorsements as defined for IETF RATS". We are defining that term here = in the RATS architecture. The TCG does not define it in any document = that I could google just now. Maybe I have missed something there. But = that is beside the point anyways. The point is that we are defining it = here.

Seems = to me there are semantics associated with the term =E2=80=9CEndorsement=E2= =80=9D from the TCG and that seems to be of a relatively static document = that is transferred once. It seems like adopting a definition in RATS = that is beyond that is confusing (e.g., confusion between now and = Berlin).  If we must use the term Endorsement, then I think it = should Endorsement Protocol to separate from the previous.

I still think this is simple and could = work:

Verifier Input

Inputs used by the Verifier to establish trust in Attester, = evaluate Attestation Evidence and produce Attestation results. It may = include cryptographic keys, known-good/reference values, static implicit = claims and policy configuration.

LL





Viele Gr=C3=BC=C3=9Fe,

Henk

Some text like this?
   Verifier Input
   Inputs used by the Verifier to establish = trust in Attester, evaluate
   Attestation = Evidence and produce Attestation results. It may include
   cryptographic keys, known-good/reference = values, static implicit
   claims and = policy configuration.
LL
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_901EE0F4-2C75-4D51-B96F-A93283B947D4-- From nobody Tue Jul 7 12:32:04 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C2A83A09E1 for ; Tue, 7 Jul 2020 12:32:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHHDJcAH0JAz for ; Tue, 7 Jul 2020 12:31:59 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8A553A09DA for ; Tue, 7 Jul 2020 12:31:57 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2EiBgCFzQRf/xwBYJlgHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKAoMXgTMKhCiRGZocgV8JCwEBAQEBAQEBAQYBARgLCgIEAQEChEU?= =?us-ascii?q?CghMBJDgTAhABAQYBAQEBAQYEAgKGRAxDARABgnyBAgEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEWAkNVEgEBHQEBAQECAQEBIQ8BBTMDCwULCQIOBAYCAiMDAgInHwE?= =?us-ascii?q?CDgYKAwEFAgEBF4MLAYJcHwULji6bBHaBMoVRgz+BOgaBDioBjFoPD4FMP4E?= =?us-ascii?q?RJw+CLC4+glwBAQIBgUKDMIJgBJI3kU6QAlwoB4FZgQaBBwQLhzWGLopFBQo?= =?us-ascii?q?dkRgGgwmKdpBziwOURQIEAgkCFYFqWYEgTSRPgmlQFwINV41TF4hihURyAjU?= =?us-ascii?q?CBgEHAQEDCXyIFIY0AYEQAQE?= X-IPAS-Result: =?us-ascii?q?A2EiBgCFzQRf/xwBYJlgHQEBAQEJARIBBQUBQIFKAoMXg?= =?us-ascii?q?TMKhCiRGZocgV8JCwEBAQEBAQEBAQYBARgLCgIEAQEChEUCghMBJDgTAhABA?= =?us-ascii?q?QYBAQEBAQYEAgKGRAxDARABgnyBAgEBAQEBAQEBAQEBAQEBAQEBAQEWAkNVE?= =?us-ascii?q?gEBHQEBAQECAQEBIQ8BBTMDCwULCQIOBAYCAiMDAgInHwECDgYKAwEFAgEBF?= =?us-ascii?q?4MLAYJcHwULji6bBHaBMoVRgz+BOgaBDioBjFoPD4FMP4ERJw+CLC4+glwBA?= =?us-ascii?q?QIBgUKDMIJgBJI3kU6QAlwoB4FZgQaBBwQLhzWGLopFBQodkRgGgwmKdpBzi?= =?us-ascii?q?wOURQIEAgkCFYFqWYEgTSRPgmlQFwINV41TF4hihURyAjUCBgEHAQEDCXyIF?= =?us-ascii?q?IY0AYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,324,1589234400"; d="scan'208";a="18923656" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jul 2020 21:31:40 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ASBQBgzQRf/1lIDI1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUoCgihvVzAsCoQokRmaHIFoCwEDAQEBAQEGAQEYCwoCBAE?= =?us-ascii?q?BhEcCghECJDgTAhABAQUBAQECAQYEbYVbDEMBEAGFGQEBAQECAQEBIQ8BBTM?= =?us-ascii?q?DCwULCQIOBAYCAiMDAgInHwECDgYKAwEFAgEBF4MLAYJcJAuOLpsEdoEyhVG?= =?us-ascii?q?DPoE6BoEOKgGMWg8PgUw/gREnD4IsLj6CXAEBAgGBQoMwgmAEkjeRTpACXCg?= =?us-ascii?q?HgVmBBoEHBAuHNYYuikUFCh2RGAaDCYp2kHOLA5RFAgQCCQIVgWoiNoEgTSR?= =?us-ascii?q?PgmlQFwINV41TF4hihURBMQI1AgYBBwEBAwl8iBSGNAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,324,1589234400"; d="scan'208";a="30286911" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Jul 2020 21:31:35 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 067JVZGD023015 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 7 Jul 2020 21:31:35 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 7 Jul 2020 21:31:30 +0200 To: Laurence Lundblade CC: Michael Richardson , "rats@ietf.org" References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> <0a747f8c-81eb-2c03-46d3-73977faee457@sit.fraunhofer.de> From: Henk Birkholz Message-ID: Date: Tue, 7 Jul 2020 21:31:28 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 19:32:02 -0000 On 07.07.20 20:33, Laurence Lundblade wrote: > > >> On Jul 7, 2020, at 8:29 AM, Henk Birkholz >> > > wrote: >> >> Hi Laurence, >> >> at first, I thought I get your line of thought, but now I am confused >> again. Sorry! Comments in-line. >> >> On 07.07.20 16:51, Laurence Lundblade wrote: >>>> On Jul 4, 2020, at 4:18 PM, Michael Richardson >>>> >>> > wrote: >>>> >>>> >>>> Laurence Lundblade >>> > wrote: >>>>>> Laurence Lundblade >>>>> > wrote: >>>>>>> The problem with Endorser is that they produce Endorsements and I >>>>>>> think there are problems with Endorsements: >>>>>> >>>>>>> - In Berlin you told me they don’t have keys in them. So then how do >>>>>>> keys get into the Verifier? >>>>>> >>>>>> Well, first, I thought we agreed that the arcs above Verifier were >>>>>> out of >>>>>> scope for the architecture.  The WG might recharter to include >>>>>> that, but I >>>>>> thought we agreed that the concerns were seperable.  HOWEVER... >>>> >>>>> If that’s the approach, then Endorsements should be removed from the >>>>> document, both in the text and diagram. >>>> >>>> That makes no sense to me. >>>> >>>> It is perfectly reasonable to define something just well enough in >>>> order to make it >>>> clear what is out of scope for standardization. >>>> >>>> We can come up with many different ways to standardize Endorsements (or >>>> Verifier Inputs), and it shouldn't matter at all to the protocol between >>>> Attester and Verifier. >>>> >>>> That's what makes it seperable. >>>> Do you agree? >>> Sorry, didn’t say that right. >>> If we’re going to minimize description of what is above the Verifier, >>> then the term “Endorsement” should be replaced with a more general >>> term like “Verifier Input” or “Attester Trust Criteria” or other. >>> I think there are three problems with the term “Endorsement": >>> - It implies a specific style of input (a signed document) that is >>> too narrow for a general architecture >> >> If that is what a reader gets from the document we have to do better. >> An endorsement does not have to be signed in the way that a UCCS does >> not have to be signed. It has to be tamper-evident though, because the >> Verifier relies on its integrity. That's the point and I think that is >> not too narrow. > > If you want to define an Endorsement as a *protocol*, not just a > signed/unsigned document, then the term might work. > > Endorsement Protocol: >  - A one-time transfer or a multiple requests/responses for each and > every Verification or anything in between >  - Must provide integrity >  - May have to provide confidentiality, particularly for symmetric keys I'd think that would be a little bit too much for an architecture, but to generally associate attributes, such as authentic and tamper-evident, with conceptual messages that are endorsements sounds fine for me at first glance. Solution I-Ds can build on that as is the intent of the architecture document. > > >>> - It is ambiguous and/or not clear it is even correct. The room in >>> Berlin of experts agreed that Endorsement can’t have keys in them, >>> but there must be a key input to the Verifier. >> >> Well, my recollection of that room of experts does not include any >> opinions on key material for Endorsements as defined for IETF RATS. >> The TCG defines (I just looked that up) four specific terms around and >> "Endorsement Key", so I am relatively sure that key material is >> involved in all cases, as these are the only terms that make use of >> the phrase endorsement. > > My slide in Berlin said “Endorsements have key material”. You that > wasn’t right. I said “sorry for my mistake”. The room tacitly agreed > with you. Maybe we were talking past each other? Going back to the examples I looked up: TCG EK-Certs, for example, can include pub-keys, of course. If you remember the openssl output of my screen - there were some pub-key structures in there. But then again, I would not focus on these kinds of certificates here - that seems way to niche'ish. I would rather like to focus on what we create here, currently (which allows for multiple types of Endorsements already). > > This says to me that at least one of these is true: >  - There is some pre conceived idea for what Endorsements are, > seemingly from the the TCG world >  - There is confusion about what Endorsements are (you said no keys in > Berlin, now you say there are keys) >  - RATS architecture is not clear about how verification key material > gets to the Verifier. > > I don’t mind being wrong here. My trouble is the lack of clarity, common > understanding and gap in the RATS architecture. I am little bit at a loss why you think that the definition here: > https://tools.ietf.org/html/draft-ietf-rats-architecture-04#section-2 and the associated expositional text here: > https://tools.ietf.org/html/draft-ietf-rats-architecture-04#section-8.2 is leaving any confusion to what Endorsements are? Key Provisioning is a separate topic, I think. And I am now growing more certain that you are missing text about key provisioning in the RATS architecture document, yes? For me that represent a tangible issue. The architecture document does not directly address key provisioning - that is certainly true. But I am not sure, if there is any intent to add text about that to a RATS document. Are there opinions on the list about this? Viele Grüße, Henk > >> >>> - It is TCG-specific. The term is not used in FIDO, Android and >>> TEE-based projects that I’ve worked on. >> >> And this confuses me. I'll do a self-quote here: "Endorsements as >> defined for IETF RATS". We are defining that term here in the RATS >> architecture. The TCG does not define it in any document that I could >> google just now. Maybe I have missed something there. But that is >> beside the point anyways. The point is that we are defining it here. > > Seems to me there are semantics associated with the term “Endorsement” > from the TCG and that seems to be of a relatively static document that > is transferred once. It seems like adopting a definition in RATS that is > beyond that is confusing (e.g., confusion between now and Berlin).  If > we must use the term Endorsement, then I think it should Endorsement > Protocol to separate from the previous. > > I still think this is simple and could work: > > Verifier Input > > Inputs used by the Verifier to establish trust in Attester, evaluate > Attestation Evidence and produce Attestation results. It may include > cryptographic keys, known-good/reference values, static implicit > claims and policy configuration. > > > LL > > > >> >> >> Viele Grüße, >> >> Henk >> >>> Some text like this? >>>    Verifier Input >>>    Inputs used by the Verifier to establish trust in Attester, evaluate >>>    Attestation Evidence and produce Attestation results. It may include >>>    cryptographic keys, known-good/reference values, static implicit >>>    claims and policy configuration. >>> LL >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > From nobody Tue Jul 7 16:59:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59C083A0C81 for ; Tue, 7 Jul 2020 16:59:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FVWigUGNRMRv for ; Tue, 7 Jul 2020 16:59:30 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AEFE3A0C52 for ; Tue, 7 Jul 2020 16:59:29 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 9935C3899D; Tue, 7 Jul 2020 19:56:34 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id jOny0TMwbolp; Tue, 7 Jul 2020 19:56:34 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id D51233899B; Tue, 7 Jul 2020 19:56:33 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 3FD5D137; Tue, 7 Jul 2020 19:59:27 -0400 (EDT) From: Michael Richardson To: Laurence Lundblade , Henk Birkholz , "rats\@ietf.org" In-Reply-To: References: <878E068C-DAFD-4441-94F7-BA79CAF7FED6@island-resort.com> <13132.1593723461@localhost> <6091010E-3F7D-4B45-9B8E-9D954CE03C43@island-resort.com> <24201.1593904708@localhost> <59471994-1797-42CE-AC6F-34F07315ADFB@island-resort.com> <0a747f8c-81eb-2c03-46d3-73977faee457@sit.fraunhofer.de> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Verifier Input instead of Endorsement? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2020 23:59:32 -0000 --=-=-= Content-Type: text/plain Laurence Lundblade wrote: > - RATS architecture is not clear about how verification key material > gets to the Verifier. The RATS architecture is INTENTIONALLY unclear, as it's out of scope for this (charter) round. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8FDF4ACgkQgItw+93Q 3WX5EAgAob/Rp1R2fDMhpLYeIi08WWJx8y+Hl7cO5XCefo/FUdkEvevQQ/y7x6Ek RCJpz1YNo0sFX3IfSIp5d22vaDXST5I0yw5teAppPiDFjmoDF8NG8UUbGRiO83yu 2kw/jZ4kuA8/7tNh5t8CiOCvUcd4Ddilpkg5Q3tyt7mCeNsBmeRZJ0wbPEdSqAyn Bpdvk6WocQemqTlVROMCrXMF5In7wRe+rcWgH7wFJqw2kYud76zAvAr5z51gvrWN +Hdj7Q5Nz76SR4ObcJHV3xVkFYJ3AeRlyQToz3fHmGspyN8ovmIZKSgm3wpVzFoi jwZBvZAQTOMdAiCziP96YgdCE/EBFw== =QX3l -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Jul 7 23:53:08 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E248E3A09A0 for ; Tue, 7 Jul 2020 23:53:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P0XBHIawiSC7 for ; Tue, 7 Jul 2020 23:53:04 -0700 (PDT) Received: from mail-edgeDD24.fraunhofer.de (mail-edgeDD24.fraunhofer.de [192.102.167.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1231D3A099B for ; Tue, 7 Jul 2020 23:53:02 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2G+CQBkpYde/xoBYJldCRwBAQEBAQc?= =?us-ascii?q?BAREBBAQBAYF7gilsA1UvKgqEEZBdLZtHCgEBAQEBAQEBAQYBASUIAgQBAQK?= =?us-ascii?q?EQgKCRyQ4EwIQAQEGAQEBAQEFBAICaYVWAQuDU34BAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBFgJDVRIBAR0BAQICASMPAQUzDAIFCwkTAwECAwImAgJHBgIIBg0BBQI?= =?us-ascii?q?BAYMiAYJcHwULkz+bBHWBMoQ5Ag5BQYNngT6BDiqMIg8PgUw/gREnD4JaPoJ?= =?us-ascii?q?nAQECAQEYgR2DPoJeBJB/hieZbAeBSXd8BIZvjzAjgkyBBIc0hDEFjEaPMok?= =?us-ascii?q?jknoCBAIJAhWBaSOBV00kLiGCaQlHGA2OVYhPhUNyAoEnjRkBgQ8BAQ?= X-IPAS-Result: =?us-ascii?q?A2G+CQBkpYde/xoBYJldCRwBAQEBAQcBAREBBAQBAYF7g?= =?us-ascii?q?ilsA1UvKgqEEZBdLZtHCgEBAQEBAQEBAQYBASUIAgQBAQKEQgKCRyQ4EwIQA?= =?us-ascii?q?QEGAQEBAQEFBAICaYVWAQuDU34BAQEBAQEBAQEBAQEBAQEBAQEBFgJDVRIBA?= =?us-ascii?q?R0BAQICASMPAQUzDAIFCwkTAwECAwImAgJHBgIIBg0BBQIBAYMiAYJcHwULk?= =?us-ascii?q?z+bBHWBMoQ5Ag5BQYNngT6BDiqMIg8PgUw/gREnD4JaPoJnAQECAQEYgR2DP?= =?us-ascii?q?oJeBJB/hieZbAeBSXd8BIZvjzAjgkyBBIc0hDEFjEaPMokjknoCBAIJAhWBa?= =?us-ascii?q?SOBV00kLiGCaQlHGA2OVYhPhUNyAoEnjRkBgQ8BAQ?= X-IronPort-AV: E=Sophos;i="5.72,341,1580770800"; d="scan'208";a="32893361" Received: from mail-mtaka26.fraunhofer.de ([153.96.1.26]) by mail-edgeDD24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 08 Jul 2020 08:53:00 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0A+BQBobAVf/1lIDI1XCRwBAQEBAQE?= =?us-ascii?q?HAQESAQEEBAEBQIFKAoIob1cwLAqEKJEYnAQLAQMBAQEBAQYBASUIAgQBAYR?= =?us-ascii?q?HAoIRAiQ4EwIQAQEFAQEBAgEGBG2FWwELQwEQAYUZAQECAgEjDwEFMwwCBQs?= =?us-ascii?q?JEwMBAgMCJgICRwYCCAYNAQUCAQGDIgGCXCQLjWabBHaBMoQ+Ag5BQoNDgUC?= =?us-ascii?q?BDioBjFoPD4FMP4ERJw+CWj6CXAEBAgEBFYEag0KCYASSN4Zpm0MoB4FZgQa?= =?us-ascii?q?BBwQLhzWQcwUKHYJzgRqIFoR1Bo1/kVqKHJRFAgQCCQIVgWoigVZNJC4hgmk?= =?us-ascii?q?JRxcCDY5ViE6FREExAjUCBgEHAQEDCXyIFIY0AYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,326,1589234400"; d="scan'208";a="85905774" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 08 Jul 2020 08:52:57 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 0686quaU022506 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 8 Jul 2020 08:52:56 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 8 Jul 2020 08:52:51 +0200 References: <159419048015.6220.17040386001147920084@ietfa.amsl.com> To: "rats@ietf.org" CC: Thomas Fossati , Guy Fedorkow From: Henk Birkholz X-Forwarded-Message-Id: <159419048015.6220.17040386001147920084@ietfa.amsl.com> Message-ID: <56890b74-3b90-fe6f-720c-32f407dc312b@sit.fraunhofer.de> Date: Wed, 8 Jul 2020 08:52:50 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <159419048015.6220.17040386001147920084@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: [Rats] Fwd: New Version Notification for draft-birkholz-rats-reference-interaction-model-03.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 06:53:07 -0000 Hi list, this version of the reference interaction models I-D now includes the three main models that are used across several related documents: * challenge/response remote attestation (charra) * uni-directional remote attestation, and * streaming remote attestation New diagrams for all three interaction models can be found in section 8: > https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-8 As an attester's identity is vital to all interaction models in RATS -- but also has severe implications -- we welcome Liqun and Chris as co-authors. They are experts for direct anonymous attestation (DAA) and remote attestation in general. An overview about DAA can be found in section 5: > https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-5 Viele Grüße, Henk -------- Forwarded Message -------- Subject: New Version Notification for draft-birkholz-rats-reference-interaction-model-03.txt Date: Tue, 7 Jul 2020 23:41:20 -0700 From: internet-drafts@ietf.org To: Liqun Chen , Michael Eckel , Christopher Newton , Henk Birkholz A new version of I-D, draft-birkholz-rats-reference-interaction-model-03.txt has been successfully submitted by Henk Birkholz and posted to the IETF repository. Name: draft-birkholz-rats-reference-interaction-model Revision: 03 Title: Reference Interaction Models for Remote Attestation Procedures Document date: 2020-07-08 Group: Individual Submission Pages: 22 URL: https://www.ietf.org/internet-drafts/draft-birkholz-rats-reference-interaction-model-03.txt Status: https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ Htmlized: https://tools.ietf.org/html/draft-birkholz-rats-reference-interaction-model-03 Htmlized: https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model Diff: https://www.ietf.org/rfcdiff?url2=draft-birkholz-rats-reference-interaction-model-03 Abstract: This document describes interaction models for remote attestation procedures (RATS). Three conveying mechanisms - Challenge/Response, Uni-Directional, and Streaming Remote Attestation - are illustrated and defined. Analogously, a general overview about the information elements typically used by corresponding conveyance protocols are highlighted. Privacy preserving conveyance of Evidence via Direct Anonymous Attestation is elaborated on for each interaction model, individually. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Wed Jul 8 04:18:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FD463A0828 for ; Wed, 8 Jul 2020 04:18:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tSo-3MS5w5ct for ; Wed, 8 Jul 2020 04:18:01 -0700 (PDT) Received: from mail-wm1-x329.google.com (mail-wm1-x329.google.com [IPv6:2a00:1450:4864:20::329]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D70943A02BE for ; Wed, 8 Jul 2020 04:18:00 -0700 (PDT) Received: by mail-wm1-x329.google.com with SMTP id g75so2499556wme.5 for ; Wed, 08 Jul 2020 04:18:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:subject:to:cc:references:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=5ptkPfXEIbpDFTQ/Q5A4VknT2iLKYT/xXUNuRuvchDc=; b=V/xKl+o1a0XJzp67fMkZgk6Xv83MVpRqNqxiyhyNNbVj43YETDJAO0cuI4/y48JnK1 +ivHJZnwmeJ7jthyIuL1de+B2zYvnbyG69KDP+ELPr/igJ0qYYfnr8jH9d1PnCF1meFJ xebU/oA8KyRHZ4M/7D4/A+UId/4jkSyoqjW5MpW02/VTfIqs82VAhyXV5USHiP/5QJcf QkKeSDq7Ep/Wk1eUYHyVoSdaT82/4g8QXFg10CFCNBOewOPaVhCyaVTPUQSStg4na/j3 xKmZMhoV8yBd9DWAD45CiLBLWxuHA0xjGXrJOE3MBN674qwSB+uZjCZf29k00L2wh4bs AUGQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:subject:to:cc:references:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=5ptkPfXEIbpDFTQ/Q5A4VknT2iLKYT/xXUNuRuvchDc=; b=Z18wbVpkhHl42IvhkozfC/T8f+2ivHwQQGW3zm5RT3fgalHFGrl+wJeAew+bh50X1G orHHkPyoOFR8nNz1XfEsdNwcmIH7xcTP4XkWMUjTtJk8aVVqoGMNgf8WvNm6uuFXn+3s yn2yPxQdbvTf3lUwLpCpIvj+06KnrbzmVYIQeUwh6iRKx/rqi388XNe6ll4HDyAvLBue ZoBPBj3sx/MgbjED284i+lKvzbX04A89fpYWj3vrYawq8l0XaDtzBujqVcPptH11U+7T fsutWBgSlbVNtFAWo6co3R21+LJL8xhNS6FdE1eFU1g3iY5AbKpa4tC4dFlC0BUgyOws cL2Q== X-Gm-Message-State: AOAM530wnYfBiagkjnscEht+c0vgWArZC1BVvLtaEsFqvavgKc9bhl+Q e/T+8g6ZZmyUE1XFsQIJh2E= X-Google-Smtp-Source: ABdhPJxzJpEFUHq5MTav5yct70fEAnR0Fj6LY+hwed7VQ+x/OCL3N6Xp8zihzG50+qV+6SQO+1LTcg== X-Received: by 2002:a1c:2905:: with SMTP id p5mr9330174wmp.91.1594207079399; Wed, 08 Jul 2020 04:17:59 -0700 (PDT) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id z63sm6011495wmb.2.2020.07.08.04.17.58 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 08 Jul 2020 04:17:58 -0700 (PDT) From: Anders Rundgren To: Henk Birkholz , "rats@ietf.org" Cc: Guy Fedorkow , Thomas Fossati References: <159419048015.6220.17040386001147920084@ietfa.amsl.com> <56890b74-3b90-fe6f-720c-32f407dc312b@sit.fraunhofer.de> Message-ID: <041629bc-b2a9-fa01-9a0e-cacd783afc53@gmail.com> Date: Wed, 8 Jul 2020 13:17:56 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <56890b74-3b90-fe6f-720c-32f407dc312b@sit.fraunhofer.de> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Rats] Fwd: New Version Notification for draft-birkholz-rats-reference-interaction-model-03.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 11:18:03 -0000 On 2020-07-08 08:52, Henk Birkholz wrote: > Hi list, Hi Henk, > > this version of the reference interaction models I-D now includes the > three main models that are used across several related documents: > > * challenge/response remote attestation (charra) > * uni-directional remote attestation, and > * streaming remote attestation This is great but I don't see that the session-based attestation concept[1] used in Saturn[2,3], is covered by this I-D. Best regards, Anders 1] https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf 2] https://cyberphone.github.io/openbankingwallet 3] https://cyberphone.github.io/doc/security/keygen2.html > > New diagrams for all three interaction models can be found in section 8: > >> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-8 > > As an attester's identity is vital to all interaction models in RATS -- > but also has severe implications -- we welcome Liqun and Chris as > co-authors. They are experts for direct anonymous attestation (DAA) and > remote attestation in general. > > An overview about DAA can be found in section 5: > >> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-5 > > > Viele Grüße, > > Henk > > > -------- Forwarded Message -------- > Subject: New Version Notification for > draft-birkholz-rats-reference-interaction-model-03.txt > Date: Tue, 7 Jul 2020 23:41:20 -0700 > From: internet-drafts@ietf.org > To: Liqun Chen , Michael Eckel > , Christopher Newton > , Henk Birkholz > > > A new version of I-D, draft-birkholz-rats-reference-interaction-model-03.txt > has been successfully submitted by Henk Birkholz and posted to the > IETF repository. > > Name: draft-birkholz-rats-reference-interaction-model > Revision: 03 > Title: Reference Interaction Models for Remote Attestation Procedures > Document date: 2020-07-08 > Group: Individual Submission > Pages: 22 > URL: > https://www.ietf.org/internet-drafts/draft-birkholz-rats-reference-interaction-model-03.txt > Status: > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ > Htmlized: > https://tools.ietf.org/html/draft-birkholz-rats-reference-interaction-model-03 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model > Diff: > https://www.ietf.org/rfcdiff?url2=draft-birkholz-rats-reference-interaction-model-03 > > Abstract: > This document describes interaction models for remote attestation > procedures (RATS). Three conveying mechanisms - Challenge/Response, > Uni-Directional, and Streaming Remote Attestation - are illustrated > and defined. Analogously, a general overview about the information > elements typically used by corresponding conveyance protocols are > highlighted. Privacy preserving conveyance of Evidence via Direct > Anonymous Attestation is elaborated on for each interaction model, > individually. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Jul 8 05:24:30 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 124033A0962 for ; Wed, 8 Jul 2020 05:24:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Al8KDzBR09i7 for ; Wed, 8 Jul 2020 05:24:25 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84B963A0887 for ; Wed, 8 Jul 2020 05:24:23 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2E1BgCeuQVf/xwBYJlXCQEcAQEBAQk?= =?us-ascii?q?BEgEFBQFAgUoCgxeBMwqEKYNJjS8lmy4DTAkLAQEBAQEBAQEBBgEBGA0IAgQ?= =?us-ascii?q?BAQKESwKCFgEkOBMCEAEBBgEBAQEBBgQCAoZEDEMBDAGDAIECAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEWAg02HjcSAQEdAQEBAQECAQEhDwEFMwMJAhAJAhEDAQI?= =?us-ascii?q?BAgIJFgcCAicgCAgGAQwBBQIBAReDCwGCewULjW2bBHaBMoNONDwCDkFCgze?= =?us-ascii?q?BQIEOKgGMXQ8PgUw/gREnDAOBXH4+glwBAQEBAQEVRFaDQoJgBJI3hmmbRSg?= =?us-ascii?q?HgVmBBoEHBAuHNZBzBQodgnOBGogZhHUGjgGRW4oclEYCBAIJAhWBaoF7TSQ?= =?us-ascii?q?uIYJpCUcXAg2OVYYegjCFQQNyAgsqAgYBBwEBAwl8h26GLwGBEAEB?= X-IPAS-Result: =?us-ascii?q?A2E1BgCeuQVf/xwBYJlXCQEcAQEBAQkBEgEFBQFAgUoCg?= =?us-ascii?q?xeBMwqEKYNJjS8lmy4DTAkLAQEBAQEBAQEBBgEBGA0IAgQBAQKESwKCFgEkO?= =?us-ascii?q?BMCEAEBBgEBAQEBBgQCAoZEDEMBDAGDAIECAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEWAg02HjcSAQEdAQEBAQECAQEhDwEFMwMJAhAJAhEDAQIBAgIJFgcCAicgC?= =?us-ascii?q?AgGAQwBBQIBAReDCwGCewULjW2bBHaBMoNONDwCDkFCgzeBQIEOKgGMXQ8Pg?= =?us-ascii?q?Uw/gREnDAOBXH4+glwBAQEBAQEVRFaDQoJgBJI3hmmbRSgHgVmBBoEHBAuHN?= =?us-ascii?q?ZBzBQodgnOBGogZhHUGjgGRW4oclEYCBAIJAhWBaoF7TSQuIYJpCUcXAg2OV?= =?us-ascii?q?YYegjCFQQNyAgsqAgYBBwEBAwl8h26GLwGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,327,1589234400"; d="scan'208";a="18940797" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 08 Jul 2020 14:24:21 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDBQCeuQVf/1lIDI1XCQEbAQEBAQE?= =?us-ascii?q?BBwEBEgEBBAQBAUCBSgKCKG8DVDAsCoQpkHglmy4DVQsBAwEBAQEBBgEBGA0?= =?us-ascii?q?IAgQBAYRNAoIUAiQ4EwIQAQEFAQEBAgEGBG2FWwxDAQwBhR4BAQEBAQIBASE?= =?us-ascii?q?PAQUzAwkCEAkCEQMBAgECAgkWBwICJyAICAYBDAEFAgEBF4MLAYMAC41tmwR?= =?us-ascii?q?2gTKDTnACDkFCgzeBQIEOKgGMXQ8PgUw/gREnDAOBXH4+glwBAQEBAQEVgRq?= =?us-ascii?q?DQoJgBJI3hmmbRSgHgVmBBoEHBAuHNZBzBQodgnOBGogZhHUGjgGRW4oclEY?= =?us-ascii?q?CBAIJAhWBaiOBV00kLiGCaQlHFwINjlWGHoIwhUEDQTECCyoCBgEHAQEDCXy?= =?us-ascii?q?HboYvAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,327,1589234400"; d="scan'208";a="30346258" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 08 Jul 2020 14:24:18 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 068COHNb008693 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 8 Jul 2020 14:24:17 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 8 Jul 2020 14:24:12 +0200 To: Anders Rundgren , "rats@ietf.org" CC: Guy Fedorkow , Thomas Fossati References: <159419048015.6220.17040386001147920084@ietfa.amsl.com> <56890b74-3b90-fe6f-720c-32f407dc312b@sit.fraunhofer.de> <041629bc-b2a9-fa01-9a0e-cacd783afc53@gmail.com> From: Henk Birkholz Message-ID: Date: Wed, 8 Jul 2020 14:24:11 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.8.0 MIME-Version: 1.0 In-Reply-To: <041629bc-b2a9-fa01-9a0e-cacd783afc53@gmail.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Fwd: New Version Notification for draft-birkholz-rats-reference-interaction-model-03.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 12:24:28 -0000 Hi Anders, thanks for your reach-out :) As far as I know, session-based creation of evidence is map-able to every kind of interaction model. I'll quickly illustrate how I think that typically works. Please step in, if I am erring here. Session-based remote attestation "bundles" a certain amount of "evidence-generating primitive operations" of an Attesting Environment in a way that corresponding results are packaged in relative large set of Claims collected over time - in one piece of evidence. Some solutions call these bundles audit sessions. If these bundles constitute evidence that can represent past states, some solutions call the resulting evidence secure audit logs. Looking at the referenced write-up [1], the audit approach seems to be combined with a roll-back feature. That is an implementation feature for remediation that is typically not directly in-scope of RATS. But - RATS of course play a vital role in assessing the need for & and the result of remediation procedures, as well as selecting appropriate remediation procedures in the first place (see TEEP). In summary, my early feedback is that the illustrated Protected API can be mapped to all three interaction model - it was probably designed with CHARRA in mind. Maybe it is useful to note here that a subscription session is not the same thing as an audit session. Viele Grüße, Henk On 08.07.20 13:17, Anders Rundgren wrote: > On 2020-07-08 08:52, Henk Birkholz wrote: >> Hi list, > > Hi Henk, > >> >> this version of the reference interaction models I-D now includes the >> three main models that are used across several related documents: >> >> * challenge/response remote attestation (charra) >> * uni-directional remote attestation, and >> * streaming remote attestation > > This is great but I don't see that the session-based attestation > concept[1] used in Saturn[2,3], is covered by this I-D. > > Best regards, > Anders > > 1] > https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf > > > 2] https://cyberphone.github.io/openbankingwallet > 3] https://cyberphone.github.io/doc/security/keygen2.html > >> >> New diagrams for all three interaction models can be found in section 8: >> >>> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-8 >>> >> >> As an attester's identity is vital to all interaction models in RATS -- >> but also has severe implications -- we welcome Liqun and Chris as >> co-authors. They are experts for direct anonymous attestation (DAA) and >> remote attestation in general. >> >> An overview about DAA can be found in section 5: >> >>> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-5 >>> >> >> >> Viele Grüße, >> >> Henk >> >> >> -------- Forwarded Message -------- >> Subject: New Version Notification for >> draft-birkholz-rats-reference-interaction-model-03.txt >> Date: Tue, 7 Jul 2020 23:41:20 -0700 >> From: internet-drafts@ietf.org >> To: Liqun Chen , Michael Eckel >> , Christopher Newton >> , Henk Birkholz >> >> >> A new version of I-D, >> draft-birkholz-rats-reference-interaction-model-03.txt >> has been successfully submitted by Henk Birkholz and posted to the >> IETF repository. >> >> Name:        draft-birkholz-rats-reference-interaction-model >> Revision:    03 >> Title:        Reference Interaction Models for Remote Attestation >> Procedures >> Document date:    2020-07-08 >> Group:        Individual Submission >> Pages:        22 >> URL: >> https://www.ietf.org/internet-drafts/draft-birkholz-rats-reference-interaction-model-03.txt >> >> Status: >> https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ >> >> Htmlized: >> https://tools.ietf.org/html/draft-birkholz-rats-reference-interaction-model-03 >> >> Htmlized: >> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model >> >> Diff: >> https://www.ietf.org/rfcdiff?url2=draft-birkholz-rats-reference-interaction-model-03 >> >> >> Abstract: >>      This document describes interaction models for remote attestation >>      procedures (RATS).  Three conveying mechanisms - Challenge/Response, >>      Uni-Directional, and Streaming Remote Attestation - are illustrated >>      and defined.  Analogously, a general overview about the information >>      elements typically used by corresponding conveyance protocols are >>      highlighted.  Privacy preserving conveyance of Evidence via Direct >>      Anonymous Attestation is elaborated on for each interaction model, >>      individually. >> >> >> >> Please note that it may take a couple of minutes from the time of >> submission >> until the htmlized version and diff are available at tools.ietf.org. >> >> The IETF Secretariat >> >> >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >> > From nobody Wed Jul 8 07:14:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B620F3A0C6F for ; Wed, 8 Jul 2020 07:14:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NkYCiiB1wN4u for ; Wed, 8 Jul 2020 07:14:09 -0700 (PDT) Received: from mail-wm1-x32f.google.com (mail-wm1-x32f.google.com [IPv6:2a00:1450:4864:20::32f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42BCC3A0C19 for ; Wed, 8 Jul 2020 07:13:53 -0700 (PDT) Received: by mail-wm1-x32f.google.com with SMTP id w3so3343236wmi.4 for ; Wed, 08 Jul 2020 07:13:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=CAO5MW/U9j7XJKRt1HluEoRsUSycxaQEjFm4nSNrFqA=; b=h1tmUR1Jrrawwyr76mH98wp+kHk/rz2yDLElex8dSSVxgbvyr45OIdE8M/ii1WCEf2 s+T2AOFUjEYsvz4PG4pgxKgmAui/comNPR8MxFpeYZScJQle9C6rh4TOCzjSEnHW6n6/ UplYqvQ0tWlbnEWozR3c/2Eeg/q3Svg6QagFKXwXGTJxKpLpPu1i6cZvUq4oF5OrXF+m rI9B6KvArahF90D4HLWid260AmYZdayuOUwP+c5VGDovyBDLf62MknQj/FkjvyrUmXAx 7Xg5o/YmCdI1cMqfxliElXzs/og70OGlaYblZckMo3JawdVaDw8GXMfO3eEdVPLf+C58 e14A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language :content-transfer-encoding; bh=CAO5MW/U9j7XJKRt1HluEoRsUSycxaQEjFm4nSNrFqA=; b=eho9kdJBGMKKbyPprQUCGwT3VepSw7WknAKsR/dZ7EnOF0K7KC9P9DVbmK8LAZ4unK +k8xipdFQOriWn0CqunxiUIj9R9zfD/PCAK4DQN2Wkr3wk/OpcbMBEoj4iODzu2i4//i jinepQgkzvQXmFPgCKSPyv4Ykpwk50qB0uoRp+6n3fZadmMAVs8sPK/UdJYWJXkFufxa /ennaPdeBd8AaVhl4/SjApVLr3xQNzSgm95at6G9yUJAG/gk/hsoxTx9auFvwXJhCl51 l722wUilviwOzSVLIyEVt02Eww8xjQ3LmTLV8SztaA6VS7Jko7pijYhbFns38DdHJz// mzrQ== X-Gm-Message-State: AOAM531HojWuo8RQeno9OQj/WG2HO4jEorv6ewIuUGERc38EJ1VVZ6LT FHXqLGajHbj4QDmxhEEHg9Y= X-Google-Smtp-Source: ABdhPJw/bX6ITIHDJAFyUQrXisvdOT4QbCZtQ8q2GIdwOOcSvLdDAEmJRKlD2J3pq0rLkTqYW/VvgQ== X-Received: by 2002:a1c:1f54:: with SMTP id f81mr9495046wmf.4.1594217632259; Wed, 08 Jul 2020 07:13:52 -0700 (PDT) Received: from [192.168.1.79] (25.131.146.77.rev.sfr.net. [77.146.131.25]) by smtp.googlemail.com with ESMTPSA id a22sm6230405wmj.9.2020.07.08.07.13.51 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 08 Jul 2020 07:13:51 -0700 (PDT) To: Henk Birkholz , "rats@ietf.org" Cc: Guy Fedorkow , Thomas Fossati References: <159419048015.6220.17040386001147920084@ietfa.amsl.com> <56890b74-3b90-fe6f-720c-32f407dc312b@sit.fraunhofer.de> <041629bc-b2a9-fa01-9a0e-cacd783afc53@gmail.com> From: Anders Rundgren Message-ID: <0be11477-3456-49e1-15ae-a92b37b0389c@gmail.com> Date: Wed, 8 Jul 2020 16:13:50 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Rats] Fwd: New Version Notification for draft-birkholz-rats-reference-interaction-model-03.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 14:14:16 -0000 On 2020-07-08 14:24, Henk Birkholz wrote: > Hi Anders, Hi Henk, > > thanks for your reach-out :) As far as I know, session-based creation of > evidence is map-able to every kind of interaction model. I'll quickly > illustrate how I think that typically works. Please step in, if I am > erring here. > > Session-based remote attestation "bundles" a certain amount of > "evidence-generating primitive operations" of an Attesting Environment > in a way that corresponding results are packaged in relative large set > of Claims collected over time - in one piece of evidence. It is possible that you can characterize session-based remote attestations like that but at least in my case the goal is different because it is only about creating a secure session with an entity that has an attested quality. The protected API is subsequently used for executing arbitrary secure operations that for some reasons must be performed in a specific sequence. This is pretty much a carbon copy of smart card provisioning where a session is created based on an embedded key which indirectly provides attestation (the card must be known). The difference is that session-based remote attestation does not presume a explicit knowledge of each trusted container. The rollback feature is another enhancement. It's not a big deal w.r.t. to the I-D, but it might be worth knowing anyway :) Regards, Anders > > Some solutions call these bundles audit sessions. If these bundles > constitute evidence that can represent past states, some solutions call > the resulting evidence secure audit logs. > > Looking at the referenced write-up [1], the audit approach seems to be > combined with a roll-back feature. That is an implementation feature for > remediation that is typically not directly in-scope of RATS. But - RATS > of course play a vital role in assessing the need for & and the result > of remediation procedures, as well as selecting appropriate remediation > procedures in the first place (see TEEP). > > In summary, my early feedback is that the illustrated Protected API can > be mapped to all three interaction model - it was probably designed with > CHARRA in mind. Maybe it is useful to note here that a subscription > session is not the same thing as an audit session. > > > Viele Grüße, > > Henk > > On 08.07.20 13:17, Anders Rundgren wrote: >> On 2020-07-08 08:52, Henk Birkholz wrote: >>> Hi list, >> >> Hi Henk, >> >>> >>> this version of the reference interaction models I-D now includes the >>> three main models that are used across several related documents: >>> >>> * challenge/response remote attestation (charra) >>> * uni-directional remote attestation, and >>> * streaming remote attestation >> >> This is great but I don't see that the session-based attestation >> concept[1] used in Saturn[2,3], is covered by this I-D. >> >> Best regards, >> Anders >> >> 1] >> https://cyberphone.github.io/doc/research/session-based-remote-attestation.pdf >> >> >> 2] https://cyberphone.github.io/openbankingwallet >> 3] https://cyberphone.github.io/doc/security/keygen2.html >> >>> >>> New diagrams for all three interaction models can be found in section 8: >>> >>>> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-8 >>>> >>> >>> As an attester's identity is vital to all interaction models in RATS -- >>> but also has severe implications -- we welcome Liqun and Chris as >>> co-authors. They are experts for direct anonymous attestation (DAA) and >>> remote attestation in general. >>> >>> An overview about DAA can be found in section 5: >>> >>>> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model#section-5 >>>> >>> >>> >>> Viele Grüße, >>> >>> Henk >>> >>> >>> -------- Forwarded Message -------- >>> Subject: New Version Notification for >>> draft-birkholz-rats-reference-interaction-model-03.txt >>> Date: Tue, 7 Jul 2020 23:41:20 -0700 >>> From: internet-drafts@ietf.org >>> To: Liqun Chen , Michael Eckel >>> , Christopher Newton >>> , Henk Birkholz >>> >>> >>> A new version of I-D, >>> draft-birkholz-rats-reference-interaction-model-03.txt >>> has been successfully submitted by Henk Birkholz and posted to the >>> IETF repository. >>> >>> Name:        draft-birkholz-rats-reference-interaction-model >>> Revision:    03 >>> Title:        Reference Interaction Models for Remote Attestation >>> Procedures >>> Document date:    2020-07-08 >>> Group:        Individual Submission >>> Pages:        22 >>> URL: >>> https://www.ietf.org/internet-drafts/draft-birkholz-rats-reference-interaction-model-03.txt >>> >>> Status: >>> https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ >>> >>> Htmlized: >>> https://tools.ietf.org/html/draft-birkholz-rats-reference-interaction-model-03 >>> >>> Htmlized: >>> https://datatracker.ietf.org/doc/html/draft-birkholz-rats-reference-interaction-model >>> >>> Diff: >>> https://www.ietf.org/rfcdiff?url2=draft-birkholz-rats-reference-interaction-model-03 >>> >>> >>> Abstract: >>>      This document describes interaction models for remote attestation >>>      procedures (RATS).  Three conveying mechanisms - Challenge/Response, >>>      Uni-Directional, and Streaming Remote Attestation - are illustrated >>>      and defined.  Analogously, a general overview about the information >>>      elements typically used by corresponding conveyance protocols are >>>      highlighted.  Privacy preserving conveyance of Evidence via Direct >>>      Anonymous Attestation is elaborated on for each interaction model, >>>      individually. >>> >>> >>> >>> Please note that it may take a couple of minutes from the time of >>> submission >>> until the htmlized version and diff are available at tools.ietf.org. >>> >>> The IETF Secretariat >>> >>> >>> _______________________________________________ >>> RATS mailing list >>> RATS@ietf.org >>> https://www.ietf.org/mailman/listinfo/rats >>> >> From nobody Wed Jul 8 09:22:25 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63E513A0F03 for ; Wed, 8 Jul 2020 09:22:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=jUfYMjrP; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=jUfYMjrP Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6r12bOJydrvW for ; Wed, 8 Jul 2020 09:22:22 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60065.outbound.protection.outlook.com [40.107.6.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 124143A0EEF for ; Wed, 8 Jul 2020 09:22:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lUhs+etERlbCCTH6z0Cs9fHqH5wKPK2ioD5KHEuT0Ig=; b=jUfYMjrP8Xqxxg6xBPznYTpXiiC2aj0F5E1W6g7bvowmMT+TtW26Hmbj4awH1iDx9qyBU1tnXGXXPca8SzJgSsfd9JyNzxtuJ1iXlQ6AcMzXfx3phgkwtPL6Vrn/NxNhCFFxaa1/6eihUgGF57zYx2yOLIBQH8jBk9DrzdF3I8M= Received: from AM5PR1001CA0051.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:206:15::28) by VI1PR08MB3487.eurprd08.prod.outlook.com (2603:10a6:803:88::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.23; Wed, 8 Jul 2020 16:22:19 +0000 Received: from AM5EUR03FT003.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:15:cafe::81) by AM5PR1001CA0051.outlook.office365.com (2603:10a6:206:15::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.22 via Frontend Transport; Wed, 8 Jul 2020 16:22:18 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT003.mail.protection.outlook.com (10.152.16.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.21 via Frontend Transport; Wed, 8 Jul 2020 16:22:18 +0000 Received: ("Tessian outbound 7de93d801f24:v62"); Wed, 08 Jul 2020 16:22:18 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: cf3ee1c0e3e3a0d6 X-CR-MTA-TID: 64aa7808 Received: from 7ffca9fb4c66.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 5D9E175A-853F-4FDD-B06E-B9210557ABF0.1; Wed, 08 Jul 2020 16:22:13 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 7ffca9fb4c66.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 08 Jul 2020 16:22:13 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DqbDsRsYprlv+WodR4Ey81HW8Xu3ye0GU92GbZXxyqN7j/C5h+qvP9h4zrbWeEgtBVr1RRF/RqDPDqIW9ycy8XO6/B5xTwDc0YMuVRlVmt+PP4Vacb7BligIIjXD5CErRbnrs4ljXmyPTUzTopdydLLuf+nlf1w9lXWjcRyVhRsNhQcbSRrtPlr4FLTDGL+oLsrZY/opyf0pMhHAqGou0yP1NAgKPfE4B+LZiXrOlmbKuoy7GTltzWwjm7tReAhwtK3vYKyDpbv6JbRPuSWYjvIXzaqwbXZH+7CMr/iHTxMfG0abggFCfj3N4GwNfSHS8zBxeWGvuyuUybtBZ5WF6w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lUhs+etERlbCCTH6z0Cs9fHqH5wKPK2ioD5KHEuT0Ig=; b=McthJs74IMBawgML+mUAH87yXxE0U8juLyvjlZ+hMY3t/d5L8QAbdTEefnQo9YvCjLuH0kWFa0xANuGwJeQFor5OaWzzrqDOXGM5fXaI8CfRGKSOuwIzvXr6KZl73AUjBcEkEOLFGIIFf6tL0qCuw9Hs/qlBMhMH/XuN7IVrZxuyCw048ZklTxaS7n32B8vHR77aMZOlME/SOw5DyDtbt0WU1eahXu6XH5abr+cvBockKMejuwSXhNh3FaK+DCsDoFhhBkSZuHjVLeAtjrrq4cGNtxoux3W6XNDR/Rya75uHykvrTpLAD6Q9181ZCyBVdl+zJBRuUgg+IIajV2mcSg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=lUhs+etERlbCCTH6z0Cs9fHqH5wKPK2ioD5KHEuT0Ig=; b=jUfYMjrP8Xqxxg6xBPznYTpXiiC2aj0F5E1W6g7bvowmMT+TtW26Hmbj4awH1iDx9qyBU1tnXGXXPca8SzJgSsfd9JyNzxtuJ1iXlQ6AcMzXfx3phgkwtPL6Vrn/NxNhCFFxaa1/6eihUgGF57zYx2yOLIBQH8jBk9DrzdF3I8M= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3832.eurprd08.prod.outlook.com (2603:10a6:20b:89::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.20; Wed, 8 Jul 2020 16:22:12 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3153.029; Wed, 8 Jul 2020 16:22:12 +0000 From: Thomas Fossati To: Kathleen Moriarty CC: "rats@ietf.org" , Thomas Fossati Thread-Topic: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt Thread-Index: AQHWQNlFdH/OqKSRhkWewqKHNl+chKjVRQwAgCWAIQCAA1HBgA== Date: Wed, 8 Jul 2020 16:22:11 +0000 Message-ID: <0FCAA0DF-1EBA-4883-81FB-FB468CCE5CD4@arm.com> References: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.38.20061401 Authentication-Results-Original: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 3d9c252f-2c5b-4f5b-83ee-08d8235b15e7 x-ms-traffictypediagnostic: AM6PR08MB3832:|VI1PR08MB3487: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 8LAKF/ZNOu+1CQGcgEbTvPfmCr2wy8MaKP22UiAPJ09mwYYSrVJcU2ggSgnG/3ozEHXyfMfVBX2ZQmZw/3IwwFHmRF6sahv251ntRf/bMgFHMk3JH4+fLEfLY4BD455SrXFT+qttBQEhq3IjKyduvFxFN0XBK7dx6Hod3as07PCcTeI3Ywe4zTxvkG+Rtmb12ngNI2XF8tMNOuqxhmP+AoX0XCmQ9n7TpbsVNJC5uRWHMvj/U0Ze/XYKsnFjHf1M9IL3iXbAb2Fo3HsA4EUrXYRSwyzcwz6mfs00lRHmCsG2zM7Uvx8pl8SvWBsGV/+emlZtf5qPmPm81rSHnULt/A== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(396003)(39860400002)(136003)(366004)(316002)(36756003)(6916009)(6512007)(86362001)(33656002)(478600001)(4326008)(66946007)(26005)(186003)(6506007)(53546011)(71200400001)(54906003)(2616005)(83380400001)(8936002)(8676002)(2906002)(5660300002)(76116006)(91956017)(66476007)(66446008)(64756008)(66556008)(6486002)(15650500001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: PjqlTChuh2FkHnLvokg+m4n4Bebh96+eW5QJh3t6UDZUPrWETuw2TjeEg5CuJCB2SMEcRKhH1HnZf8SHwg/bKz68qAratbDg4HKczzw+TkO0ZiNr6LlrS7uJT/idkRX11U3kj/99tWA9rO9ppt8YdYOszRzi9FqbA0b/t9VzCNme2oPQdDZCoB58ya1E+ng7hFovyT89LI+LqFBPl6+q75AUxrwbbjaxZDkMLO5Y/EvgMAPVjZ3IgoJ9RrF24AvcdvvDpSgDwRFC98Am50zVvzw+tCf+harCwZbU5lwGJ2UN9VDgzoWlv+LzygPVqVv74IxnH+OMBNwDF/8mnqMrhtgF/34YJ08JKqoSaEUi5TnmehBAgJjNdeJ3ARA9kW7Cvwd4dP+iTUqQYjv0McvpLDDO0rbAmSqfKVggvnSRC5Vr7fQ+37+JdYNNdwNdn7SVpE5SOWore734o/BlH9wR+Q7OUFV5TBxRYqd/nVtqAiU= Content-Type: text/plain; charset="utf-8" Content-ID: <5791F388C7579B47B5C1F791ACA6518B@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3832 Original-Authentication-Results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT003.eop-EUR03.prod.protection.outlook.com X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(396003)(39860400002)(136003)(346002)(376002)(46966005)(6506007)(53546011)(478600001)(83380400001)(36906005)(70206006)(186003)(6862004)(6512007)(5660300002)(82310400002)(36756003)(316002)(81166007)(26005)(15650500001)(6486002)(356005)(8676002)(33656002)(47076004)(4326008)(2616005)(86362001)(54906003)(336012)(8936002)(70586007)(82740400003)(2906002); DIR:OUT; SFP:1101; X-MS-Office365-Filtering-Correlation-Id-Prvs: b4875b43-5186-4d0e-ccb8-08d8235b11d9 X-Forefront-PRVS: 04583CED1A X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: pFi+bIwnYKe8iEuFarezm8fpLbMhfc735Uedec3ih19sDMNpNzslVKDP7L3eYEnI258LMXt3Ar9c+/CG6VjXv/gX45T/vr25txoXVBL3hDRwXbeEZi/1+H6qVFeLDdb525PtZ+ZGkXVTm+mzU62twkHEMM4tpKL3sOSU8cIEVyt/fFJZZq8WIZHXCe6d4wzBy2bf0SlPb/KhXNVr9bh27iRPSwV3MByE4h1r2b11AJlo6NirKMGa/KLWatFU6hzw2S38B3eOFR13REAXXhHPN55BCxuTXLRFBtZKLQt5A3j2aH1RpYMm6LQtupQdTE9+YsnR57+WkE3Xj9UJ+I3eMeuDDc1R+/iATeyIOO69Kv2Pdx41EnvUfrYQYt5vZmNBPjMaj5vxnAzt6KwqY0qE5g== X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Jul 2020 16:22:18.8765 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 3d9c252f-2c5b-4f5b-83ee-08d8235b15e7 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT003.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3487 Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 16:22:25 -0000 SGkgS2F0aGxlZW4sDQoNCkkgaGFkbid0IGNvbWUgYWNyb3NzIFNDQVAgYmVmb3JlLiAgVGhpcyBs b29rcyBpbnRlcmVzdGluZyBhbmQgY2VydGFpbmx5DQpyZWxldmFudCwgc28gdGhhbmtzIGZvciBw b2ludGluZyBvdXQgdGhlIHBvdGVudGlhbCByZWxhdGlvbiB3aXRoIG91cg0KZHJhZnQuDQoNCk9u IDA2LzA3LzIwMjAsIDE1OjQxLCAiS2F0aGxlZW4gTW9yaWFydHkiIDxrYXRobGVlbi5tb3JpYXJ0 eS5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQo+IFNpbmNlIHdlIGhhdmUgYSBudW1iZXIgb2YgUkVT VGZ1bCBwcm90b2NvbHMgaW4gdXNlIHRvIGV4Y2hhbmdlDQo+IGZvcm1hdHRlZCBkYXRhLCBpdCB3 b3VsZCBiZSBnb29kIHRvIGV4cGxpY2l0bHkgc3RhdGUgc3VwcG9ydCBmb3IgdGhlc2UNCj4gcHJv dG9jb2xzLiAgU0NBUHYyLjAgaGFzIGFkb3B0ZWQgUk9MSUUgW1JGQzgzMjJdLiAgU2luY2UgU0NB UCBpcyBob3cNCj4gcG9zdHVyZSBhc3Nlc3NtZW50IGlzIHBlcmZvcm1lZCwgaXQgd291bGQgYmUg Z29vZCB0byBpbmNsdWRlIHRoaXMNCj4gY2FwYWJpbGl0eSB0byBlbmFibGUgYSBzbW9vdGggdHJh bnNpdGlvbiB0byB0aGUgdXNlIG9mIHJlbW90ZQ0KPiBhdHRlc3RhdGlvbiBmb3Igc2ltcGxpZmll ZCBwb3N0dXJlIGFzc2Vzc21lbnQgYXMgdGhpcyB3b3JrIGV2b2x2ZXMuDQoNCkNsYXJpZnlpbmcg cXVlc3Rpb24uICBJbiBwcmluY2lwbGUsIHRoZSBtZWNoYW5pY3Mgc3BlY2lmaWVkIGluIHRoZSBk cmFmdA0KY2FuIGJlIHVzZWQgdG8gYmluZCBhdHRlc3RhdGlvbiBkYXRhIHRvICphbnkqIHJlc291 cmNlLiAgU28sIFJPTElFIGZlZWRzDQphcmUgY2VydGFpbmx5IGluIHNjb3BlLiAgSG93ZXZlciwg aXQgc2VlbXMgdG8gbWUgdGhhdCBpbiB0aGUgU0NBUA0KYXJjaGl0ZWN0dXJlIHRoZSAibmF0dXJh bCIgYXR0ZXN0b3JzIGFyZSB0aGUgRW5kcG9pbnRzLiAgQW5kLCBvbiB0aGUNCkVuZHBvaW50LCBw b3N0dXJlIGNvbGxlY3Rpb24gaXMgcHVsbGVkIHVzaW5nIG9uZSBvZiBORUEvU1dJTUEsIG9yDQpO RVRDT05GLCBvciBzb21lIG90aGVyIHNwZWNpZmljIE1ETSBwcm90b2NvbCwgZGVwZW5kaW5nIG9u IHRoZQ0KRW5kcG9pbnQncyB0eXBlL2NsYXNzLiAgU28sIHdvdWxkbid0IE5FVENPTkYgYmUgYSBt b3JlIHN1aXRhYmxlIHRhcmdldA0KdGhhbiBST0xJRSBpbiB0aGlzIGNhc2U/DQoNCj4gU2ltaWxh cmx5LCBSZWRGaXNoIGlzIGluIHVzZSBmb3Igc2VydmVyIG1hbmFnZW1lbnQgYWNyb3NzIHNldmVy YWwNCj4gcGxhdGZvcm1zLiAgSeKAmXZlIGJlZW4gd29ya2luZyB3aXRoIHRoZSBETVRGIHRvIGlt cHJvdmUgc2VjdXJpdHkgb2YNCj4gUmVkRmlzaCBqdXN0IGluIGNhc2UgaXQgY291bGQgYmUgdXNl ZC4NCj4NCj4gVGhlcmUgYXJlIGxpa2VseSBvdGhlciBwcm90b2NvbHMgdGhhdCBtYXkgYmUgdXNl ZCwgYW5kIGxlYXZpbmcgdGhpcw0KPiBvcGVuIHRvIGFjY29tbW9kYXRlIHZhcmlvdXMgUkVTVGZ1 bCBwcm90b2NvbHMgbWF5IGJlIHRoZSBiZXN0IGFwcHJvYWNoDQo+IHRvd2FyZHMgZW5hYmxpbmcg YWRvcHRpb24uDQoNCisxIC0tIFRob3VnaCBJJ20gYSBiaXQgdW5zdXJlIGFib3V0IHdoYXQgc3Ry YXRlZ3kgd291bGQgeW91IHN1Z2dlc3Q/DQoNCk9uZSBvZiB0aGUgYmFzZSBjb25zdHJ1Y3RzIHBy b3ZpZGVkIGluIHRoZSBkcmFmdCwgbmFtZWx5IHRoZSB3YXkgdG8gYmluZA0KdGhlIHJlc291cmNl IHJlcHJlc2VudGF0aW9uIHdpdGggdGhlIGF0dGVzdGF0aW9uIEV2aWRlbmNlIGJ5IGhhc2hpbmcg aXQNCmluIHRvIHRoZSBub25jZSBjbGFpbSwgaXMgdmVyeSBicm9hZGx5IGFwcGxpY2FibGUuICBT byB0aGVyZSdzIHRoYXQuDQpIb3dldmVyLCB0aGUgUkVTVC15IGJpdHMgKHZlcmJzICYgY29udGVu dCB0eXBlcykgYXJlIHNsaWdodGx5IG1vcmUNCiJyaWdpZCIgaW4gdGhlIHNlbnNlIHRoYXQgYWx0 aG91Z2ggdGhlIGF0dGVzdGVkIHJlc291cmNlIGNhbiBiZSBhbnl0aGluZw0KeW91IHdhbnQgaXQg dG8gYmUsIHRoZSBvdXRlciBzaGVsbCBoYXMgYSB2ZXJ5IHByZWNpc2UgZm9ybWF0IHRoYXQgaXMg bm90DQpvcGVuIHRvIG1hbmlwdWxhdGlvbi4NCg0KY2hlZXJzLCB0aGFua3MhDQoNCg0KDQoNCklN UE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNo bWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91 IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhl ciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGlu Zm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Wed Jul 8 12:38:49 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D6A73A03EA for ; Wed, 8 Jul 2020 12:38:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EsgiZ1jUozok for ; Wed, 8 Jul 2020 12:38:45 -0700 (PDT) Received: from p3plsmtpa09-08.prod.phx3.secureserver.net (p3plsmtpa09-08.prod.phx3.secureserver.net [173.201.193.237]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 307173A0365 for ; Wed, 8 Jul 2020 12:38:45 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id tFtzj6zM4id6rtFtzjiviI; Wed, 08 Jul 2020 12:38:43 -0700 X-CMAE-Analysis: v=2.3 cv=QL8WuTDL c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=S4RO9u3ZW3cs01sbkI0A:9 a=7Zwj6sZBwVKJAoWSPKxL6X1jA+E=:19 a=05UD6f_8G6DqRGz2:21 a=BZCsUGtRWJ61rL3L:21 a=QEXdDO2ut3YA:10 a=C334w0EozUeeVKyQ:21 a=_W_S_7VecoQA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E9C70140-818A-4CC6-86E0-D14668E9F711" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 8 Jul 2020 12:38:43 -0700 In-Reply-To: <0269E694-F006-4BC3-B8E6-13038C41FFD4@arm.com> Cc: Michael Richardson , "rats@ietf.org" , Kathleen Moriarty To: Thomas Fossati References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> <22564.1593904278@localhost> <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> <16696.1594054310@localhost> <0269E694-F006-4BC3-B8E6-13038C41FFD4@arm.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfM5kOAJNuD2cDBSa775LPvdprwSYJ2jSOmBNUFoe94XE3em6mMzT8DQPEvhwAWDzGO0JBSRFHDVQ+7tQaRbpzrCVlWAxYw9HbOvHL0bILqpGxY8u2qlm LdB3cblP7vFIJ0OdwqZjNC51ygEEHIf7kb+b2P9QqJghL/sIj8QypRgZaedHuqk6Rw0zN3JGw3a2gzDD6YkEKuwA6XZpTU5D82Lr3dZl4R+5SEntu8MAjKBJ 7dVv6MEV5SMuznQAbc7Sl6u2ZT5UuLAFiXFcAy0VdwE62VcxUNwthpF90XOTd20X Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 19:38:47 -0000 --Apple-Mail=_E9C70140-818A-4CC6-86E0-D14668E9F711 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 What is PII and what is not PII is almost entirely dependent on the = end-end use case and who the relying party is. Illustrative example: The UEID (serial number) of a device is definitely = PII when using a web browser to access multiple web sites, but it is not = when a router is attesting to the network management center. Even the = web browser case is not clear cut. The UEID (serial number) might not be = considered PII when accessing a banks web site, because you=E2=80=99ve = told the bank to =E2=80=9Cremember this device=E2=80=9D (and the bank = knows everything about you anyway). I don=E2=80=99t think we can have a flag indicating which data is PII in = Attestation Evidence/Results. I don=E2=80=99t think we can say that this = particular EAT claim is PII and that one is not in any absolute sense. We can=E2=80=99t assume that the Verifier will always be trusted with = PII, because sometimes it is run by the relying party. =20 On the other hand, sometimes the Verifier will be a highly trusted = privacy proxy. It will receive claims that are not privacy-preserving = and strip them out or otherwise anonymize them before sending on to the = relying party. I think at both the architecture and EAT levels, the best we can do is = write privacy considerations =E2=80=94 things that should be considered = for particular deployments. Maybe future IETF standards that are very = specific to use cases will be able to be more specific, but that=E2=80=99s= for later. Most of the text in section 11 of the -04 draft seems OK, but I think = additional text like this is needed and hopefully addresses Kathleen=E2=80= =99s comments. Every claim in Attestation Evidence and Attestation Results is = potentially PII (Personally Identifying Information) depending on the = end-end use case of the attestation. Each deployment of attestation must = take into account how each claim may or may not be used in a privacy = violating manner by the relying parties receiving the attestation. In cases where the device sending attestation is owned by the relying = party, little to no consideration for privacy is needed. In other cases, = such as when a mobile phone is used to access a large number of web = sites, apps and services, privacy must be considered very thoroughly. These are some strategies that can be used to address the privacy issue: * Determine that a particular claim is not privacy violating in the = limited context of use. For example, a router sending its serial number = to the network management center that owns the router violates no = one=E2=80=99s privacy. * Simply omit the claim. For example, omit the serial number from = attestations sent by a phone to web sites it connects to. * Prompt the user. For example, ask the user if it is OK for a = particular web site to access location data. * Use a privacy proxy service between the device and the relying party = to remove or anonymize the privacy violating claims. Other strategies than these may be used. The selection of strategy is = highly dependent on the relying party, end use case and governmental = regulation (e.g., GDPR). The selection of strategy may also vary = claim-by-claim in a single attestation. LL --Apple-Mail=_E9C70140-818A-4CC6-86E0-D14668E9F711 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 What = is PII and what is not PII is almost entirely dependent on the end-end = use case and who the relying party is.

Illustrative example: The UEID (serial = number) of a device is definitely PII when using a web browser to access = multiple web sites, but it is not when a router is attesting to the = network management center. Even the web browser case is not clear cut. = The UEID (serial number) might not be considered PII when accessing a = banks web site, because you=E2=80=99ve told the bank to =E2=80=9Cremember = this device=E2=80=9D (and the bank knows everything about you = anyway).

I = don=E2=80=99t think we can have a flag indicating which data is PII in = Attestation Evidence/Results. I don=E2=80=99t think we can say that this = particular EAT claim is PII and that one is not in any absolute = sense.

We = can=E2=80=99t assume that the Verifier will always be trusted with PII, = because sometimes it is run by the relying party.  

On the other hand, = sometimes the Verifier will be a highly trusted privacy proxy. It will = receive claims that are not privacy-preserving and strip them out or = otherwise anonymize them before sending on to the relying = party.

I think = at both the architecture and EAT levels, the best we can do is write = privacy considerations =E2=80=94 things that should be considered for = particular deployments. Maybe future IETF standards that are very = specific to use cases will be able to be more specific, but that=E2=80=99s= for later.

Most= of the text in section 11 of the -04 draft seems OK, but I think = additional text like this is needed and hopefully addresses Kathleen=E2=80= =99s comments.

Every claim in Attestation Evidence and Attestation Results = is potentially PII (Personally Identifying Information) depending on the = end-end use case of the attestation. Each deployment of attestation must = take into account how each claim may or may not be used in a privacy = violating manner by the relying parties receiving the = attestation.

In = cases where the device sending attestation is owned by the relying = party, little to no consideration for privacy is needed. In other cases, = such as when a mobile phone is used to access a large number of web = sites, apps and services, privacy must be considered very = thoroughly.

These are some strategies that can be used to address the = privacy issue:

*= Determine that a particular claim is not privacy violating in the = limited context of use. For example, a router sending its serial number = to the network management center that owns the router violates no = one=E2=80=99s privacy.

* Simply omit the claim. For example, omit the serial number = from attestations sent by a phone to web sites it connects to.

* Prompt the user. For = example, ask the user if it is OK for a particular web site to access = location data.

*= Use a privacy proxy service between the device and the relying party to = remove or anonymize the privacy violating claims.
Other strategies than these may be = used. The selection of strategy is highly dependent on the relying = party, end use case and governmental regulation (e.g., GDPR). The = selection of strategy may also vary claim-by-claim in a single = attestation.


LL

= --Apple-Mail=_E9C70140-818A-4CC6-86E0-D14668E9F711-- From nobody Wed Jul 8 14:03:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 52B873A07F8 for ; Wed, 8 Jul 2020 14:03:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vDQn775l7L2Z for ; Wed, 8 Jul 2020 14:03:32 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6DD33A07F7 for ; Wed, 8 Jul 2020 14:03:32 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id CC808389A0; Wed, 8 Jul 2020 17:00:36 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id Arm7Sweeg4PE; Wed, 8 Jul 2020 17:00:34 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id C76443899F; Wed, 8 Jul 2020 17:00:34 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 032E2A8; Wed, 8 Jul 2020 17:03:29 -0400 (EDT) From: Michael Richardson To: Kathleen Moriarty , "rats\@ietf.org" In-Reply-To: <0FCAA0DF-1EBA-4883-81FB-FB468CCE5CD4@arm.com> References: <9CB821D0-26D5-499C-9F60-CFF066AE6A87@arm.com> <0FCAA0DF-1EBA-4883-81FB-FB468CCE5CD4@arm.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] FW: New Version Notification for draft-shaw-rats-rear-00.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 21:03:37 -0000 --=-=-= Content-Type: text/plain Thomas Fossati wrote: > I hadn't come across SCAP before. This looks interesting and certainly > relevant, so thanks for pointing out the potential relation with our > draft. > On 06/07/2020, 15:41, "Kathleen Moriarty" wrote: >> Since we have a number of RESTful protocols in use to exchange >> formatted data, it would be good to explicitly state support for these >> protocols. SCAPv2.0 has adopted ROLIE [RFC8322]. Since SCAP is how >> posture assessment is performed, it would be good to include this >> capability to enable a smooth transition to the use of remote >> attestation for simplified posture assessment as this work evolves. > Clarifying question. In principle, the mechanics specified in the draft > can be used to bind attestation data to *any* resource. So, ROLIE feeds > are certainly in scope. However, it seems to me that in the SCAP > architecture the "natural" attestors are the Endpoints. And, on the > Endpoint, posture collection is pulled using one of NEA/SWIMA, or > NETCONF, or some other specific MDM protocol, depending on the > Endpoint's type/class. So, wouldn't NETCONF be a more suitable target > than ROLIE in this case? However, we did do: https://github.com/ietf-rats-wg/architecture/commit/87561f0cf9e65fcdda18291123367f6500c92ceb In this diagram, the protocol between Attester and a Relying Party can be any new or existing protocol (e.g., HTTP(S), COAP(S), +ROLIE {{RFC8322}}, 802.1x, OPC UA, etc.), depending on the use case. Such protocols typically already have mechanisms for passing security information for purposes of authentication and authorization. Common -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8GNKAACgkQgItw+93Q 3WWKVAf+MpE882CyLRdgZ1r6NH/vDhCgYTMlbYmAv10q6cUqY/5HKrGgtlgVYW58 sApHSzH8iOZUUUfKgzHAI0g0yfjsdGYcvwv8ctjbNW2qbgrTFmYuWlVJR2uTCY6f smnEkTwuFe6o7YAkCgkGHJ7OBtATigIs7BENNJWTUlsK02D07RibxXCnZ2JpyjBv J5Sh6ddSrOEiv88U9FkojyJUzdduAk8REVIHzHrMrapLbD33cFTJkqe51drZWq1v /8n1T3DoxUtOOD03RK33UC5dSig5axXRD1d8dPu6Mracp4Sj+Xrf/3DTdceh+KA+ oMreW+M+gqPNnu15/VkaBq8xdAqRRg== =Tyqw -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Jul 8 15:02:58 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E71E53A0831 for ; Wed, 8 Jul 2020 15:02:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kQzYGEMv2VPx for ; Wed, 8 Jul 2020 15:02:53 -0700 (PDT) Received: from mail-vs1-xe2e.google.com (mail-vs1-xe2e.google.com [IPv6:2607:f8b0:4864:20::e2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F3B53A082E for ; Wed, 8 Jul 2020 15:02:53 -0700 (PDT) Received: by mail-vs1-xe2e.google.com with SMTP id e15so15451vsc.7 for ; Wed, 08 Jul 2020 15:02:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=VjLLYgxtJJwiZ9s4+Ul2RvVgBHLao1Zc6T2b9v16I7o=; b=KRwEXFN82TKfiZPMf7oyIWafrdRzUVn85bharHqPh+SJe9ynvAwC0aLCCKTro2DU1A Tzwr9WjyFbNUn34eBCF1AF9nAJv1lsRdwVEeHpmzYsG92LaCPBVF/ayKoXBuxWaNDcYW tL//RTxPxrfed5vRrPmxL0rospvjGxPqaLfU4n22QJ36zUAuuPYGUIx+NajfRju+Mk6z L8XmKZLv2zl/jxiEDu/1iYOvShAiWiDWFyJNitl5pJgesDEA2hz99m7OdDefGpykmOwD IpeJskSWDa+0o/ygp8lyy4H9ZbvIBerBW+q4I7jmPVKM9c+ZYwRJXEgtG2/iBagz/yc7 CHSw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=VjLLYgxtJJwiZ9s4+Ul2RvVgBHLao1Zc6T2b9v16I7o=; b=tNZeky00u2HDBcgIQtc/lGE/lEGkc5ZH60XgfdhKrEG4X24eMJNIDgBh9KGiz482MO BQneQfKIzxtsc+u3h4q/+3FXX+SFtk9ke5RoEt9tgsuFWdj5XwMtl5LNo6s0V7qT9doF 58yB81uOQLLny44OYRSDo628PdKGDxZmUHRFPHvfSlxriE5A5Dooat5kefWWYs4HL5sj SbjlWb8RUiU20gRGAsQm8/IpryHf7clq8RrUP8qoLJus+efPV5G8Wvpp+TRqgkRUuuI7 wRS4TvP+5dpilgVKyDy2HHXvkLENYe+gj3BXdtO1zvolm9KEskvL1PNmF3K8pXG6+oge 5MPw== X-Gm-Message-State: AOAM5336OzR2XebRLLXYLqZDyGFcQ4J459IsLrsNHDCrlyPGSaDB93sG kHAQstkOSgBf3qsCTcpOW7bTW2wKqQ/4L/euMnE= X-Google-Smtp-Source: ABdhPJwQqGWVnqDzg7ip+rkHdN6uLuQ8wkXIRYo50xGJPp18bl9Pf4NA+IDSp7pIcLBLhbR8VmH89InCxXe70pCQiBM= X-Received: by 2002:a05:6102:5dc:: with SMTP id v28mr44428779vsf.177.1594245772518; Wed, 08 Jul 2020 15:02:52 -0700 (PDT) MIME-Version: 1.0 References: <28098.1593568476@localhost> <8AA2FB69-6E91-431A-BD57-354C65DAEE76@arm.com> <22564.1593904278@localhost> <74C3C9C3-F4A7-4577-B758-2FEAC06173E0@arm.com> <16696.1594054310@localhost> <0269E694-F006-4BC3-B8E6-13038C41FFD4@arm.com> In-Reply-To: From: Ira McDonald Date: Wed, 8 Jul 2020 18:02:38 -0400 Message-ID: To: Laurence Lundblade , Ira McDonald Cc: Thomas Fossati , Michael Richardson , Kathleen Moriarty , "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000f4a9c505a9f544ee" Archived-At: Subject: Re: [Rats] should Evidence containers be explicit about Personally Identiable Information? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2020 22:02:56 -0000 --000000000000f4a9c505a9f544ee Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, +1 to your whole rationale and suggested text. Cheers, - Ira *Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG* *Co-Chair - TCG Metadata Access Protocol SG* *Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working GroupCo-Chair - IEEE-ISTO PWG Internet Printing Protocol WGIETF Designated Expert - IPP & Printer MIBBlue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic http://sites.google.com/site/hi= ghnorthinc mailto: blueroofmusic@gmail.com (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434* On Wed, Jul 8, 2020 at 3:38 PM Laurence Lundblade wrote: > What is PII and what is not PII is almost entirely dependent on the > end-end use case and who the relying party is. > > Illustrative example: The UEID (serial number) of a device is definitely > PII when using a web browser to access multiple web sites, but it is not > when a router is attesting to the network management center. Even the web > browser case is not clear cut. The UEID (serial number) might not be > considered PII when accessing a banks web site, because you=E2=80=99ve to= ld the > bank to =E2=80=9Cremember this device=E2=80=9D (and the bank knows everyt= hing about you > anyway). > > I don=E2=80=99t think we can have a flag indicating which data is PII in > Attestation Evidence/Results. I don=E2=80=99t think we can say that this = particular > EAT claim is PII and that one is not in any absolute sense. > > We can=E2=80=99t assume that the Verifier will always be trusted with PII= , because > sometimes it is run by the relying party. > > On the other hand, sometimes the Verifier will be a highly trusted privac= y > proxy. It will receive claims that are not privacy-preserving and strip > them out or otherwise anonymize them before sending on to the relying par= ty. > > I think at both the architecture and EAT levels, the best we can do is > write privacy considerations =E2=80=94 things that should be considered f= or > particular deployments. Maybe future IETF standards that are very specifi= c > to use cases will be able to be more specific, but that=E2=80=99s for lat= er. > > Most of the text in section 11 of the -04 draft seems OK, but I think > additional text like this is needed and hopefully addresses Kathleen=E2= =80=99s > comments. > > Every claim in Attestation Evidence and Attestation Results is potentiall= y > PII (Personally Identifying Information) depending on the end-end use cas= e > of the attestation. Each deployment of attestation must take into account > how each claim may or may not be used in a privacy violating manner by th= e > relying parties receiving the attestation. > > In cases where the device sending attestation is owned by the relying > party, little to no consideration for privacy is needed. In other cases, > such as when a mobile phone is used to access a large number of web sites= , > apps and services, privacy must be considered very thoroughly. > > These are some strategies that can be used to address the privacy issue: > > * Determine that a particular claim is not privacy violating in the > limited context of use. For example, a router sending its serial number t= o > the network management center that owns the router violates no one=E2=80= =99s > privacy. > > * Simply omit the claim. For example, omit the serial number from > attestations sent by a phone to web sites it connects to. > > * Prompt the user. For example, ask the user if it is OK for a particular > web site to access location data. > > * Use a privacy proxy service between the device and the relying party to > remove or anonymize the privacy violating claims. > > Other strategies than these may be used. The selection of strategy is > highly dependent on the relying party, end use case and governmental > regulation (e.g., GDPR). The selection of strategy may also vary > claim-by-claim in a single attestation. > > > > LL > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --000000000000f4a9c505a9f544ee Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,

+1 to your whol= e rationale and suggested text.

Cheers,
= - Ira

<= div dir=3D"ltr">
Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printin= g WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO= PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Pr= inter MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(permanent) PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434=


On Wed, Jul 8, = 2020 at 3:38 PM Laurence Lundblade <lgl@island-resort.com> wrote:
What is= PII and what is not PII is almost entirely dependent on the end-end use ca= se and who the relying party is.

Illustrative example: T= he UEID (serial number) of a device is definitely PII when using a web brow= ser to access multiple web sites, but it is not when a router is attesting = to the network management center. Even the web browser case is not clear cu= t. The UEID (serial number) might not be considered PII when accessing a ba= nks web site, because you=E2=80=99ve told the bank to =E2=80=9Cremember thi= s device=E2=80=9D (and the bank knows everything about you anyway).

I don=E2=80=99t think we can have a flag indicating which= data is PII in Attestation Evidence/Results. I don=E2=80=99t think we can = say that this particular EAT claim is PII and that one is not in any absolu= te sense.

We can=E2=80=99t assume that the Verifie= r will always be trusted with PII, because sometimes it is run by the relyi= ng party. =C2=A0

On the other hand, sometimes the = Verifier will be a highly trusted privacy proxy. It will receive claims tha= t are not privacy-preserving and strip them out or otherwise anonymize them= before sending on to the relying party.

I think a= t both the architecture and EAT levels, the best we can do is write privacy= considerations =E2=80=94 things that should be considered for particular d= eployments. Maybe future IETF standards that are very specific to use cases= will be able to be more specific, but that=E2=80=99s for later.
=
Most of the text in section 11 of the -04 draft seems OK, bu= t I think additional text like this is needed and hopefully addresses Kathl= een=E2=80=99s comments.

Every claim in Attestati= on Evidence and Attestation Results is potentially PII (Personally Identify= ing Information) depending on the end-end use case of the attestation. Each= deployment of attestation must take into account how each claim may or may= not be used in a privacy violating manner by the relying parties receiving= the attestation.

In cases where the device sendin= g attestation is owned by the relying party, little to no consideration for= privacy is needed. In other cases, such as when a mobile phone is used to = access a large number of web sites, apps and services, privacy must be cons= idered very thoroughly.

These are some strategies = that can be used to address the privacy issue:

* D= etermine that a particular claim is not privacy violating in the limited co= ntext of use. For example, a router sending its serial number to the networ= k management center that owns the router violates no one=E2=80=99s privacy.=

* Simply omit the claim. For example, omit the se= rial number from attestations sent by a phone to web sites it connects to.<= /div>

* Prompt the user. For example, ask the user if it= is OK for a particular web site to access location data.

* Use a privacy proxy service between the device and the relying pa= rty to remove or anonymize the privacy violating claims.

Other strategies than these may be used. The selection of strategy i= s highly dependent on the relying party, end use case and governmental regu= lation (e.g., GDPR). The selection of strategy may also vary claim-by-claim= in a single attestation.


<= div>LL

__________________________________________= _____
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--000000000000f4a9c505a9f544ee-- From nobody Fri Jul 10 03:39:11 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 454483A0898 for ; Fri, 10 Jul 2020 03:39:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XdQ__ivDGC9A for ; Fri, 10 Jul 2020 03:39:08 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A1EB3A0896 for ; Fri, 10 Jul 2020 03:39:08 -0700 (PDT) Received: from lhreml742-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id 3986A930FD2436C8B7D1 for ; Fri, 10 Jul 2020 11:39:06 +0100 (IST) Received: from nkgeml706-chm.china.huawei.com (10.98.57.153) by lhreml742-chm.china.huawei.com (10.201.108.192) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Fri, 10 Jul 2020 11:39:05 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml706-chm.china.huawei.com (10.98.57.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Fri, 10 Jul 2020 18:38:52 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Fri, 10 Jul 2020 18:38:52 +0800 From: "Panwei (William)" To: "Eric Voit (evoit)" CC: "rats@ietf.org" Thread-Topic: Comments on the changes of CHARRA YANG module Thread-Index: AdZWpd3aUHkm/3I1RKafnNj2CppmIw== Date: Fri, 10 Jul 2020 10:38:52 +0000 Message-ID: <4e2e0b53d2be47009b1958758620914c@huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.164.120.6] Content-Type: multipart/alternative; boundary="_000_4e2e0b53d2be47009b1958758620914chuaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Rats] Comments on the changes of CHARRA YANG module X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2020 10:39:10 -0000 --_000_4e2e0b53d2be47009b1958758620914chuaweicom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eric, I've read the YANG modules you changed, actually I didn't get how the new m= odules worked when I read it the first time. After reading it a few times a= nd discussion with others, I kind of figured out how it worked: 1. The Verifier (or Relying Party) uses the "rats-support-structures" d= atastore structure to retrieve the hardware information, i.e., all the comp= ute-nodes and all the TPMs, from the Attester. Then the Verifier can establ= ish the relationship between the TPM and its compute-node info and certific= ates info. Further, the Verifier can identify the TPM according to the cert= ificate-name and/or the compute-node. 2. Next, the Verifier uses the RPC structures to get Evidence in a chal= lenge-response fashion. In the challenge input, the Verifier can use the le= af "key-identifier" to ask Evidence of one specific TPM based on this TPM's= unique credential, or it can use the leaf-list "tpm-name" to ask Evidence = of one or more TPMs based on these TPMs' names. 3. In the response output, the Attester returns the Evidence. If the in= put contains only one TPM, then the output can match that TPM anyway. But i= f the input contains several "tpm-name", then the output is a set of Eviden= ce of these TPMs, in this situation, the Verifier needs to use the "certifi= cate-name" and/or "node-id" in each Evidence to identify which TPM produced= it. If my understanding is right, then the YANG modules after changed have some= assumptions which aren't explicitly said, I conclude them below: 1. The Verifier must retrieve the datastore first before initiate the c= hallenge request. 2. Every TPM should have a unique name, at least be unique in an Attest= er. 3. Every certificate should have a unique name. It should be unique in = an Attester if the certificate-name can identify the TPM, or should be uniq= ue in a compute node if the certificate-name and the node-id are used toget= her to identify the TPM. 4. For the input, if you choose to use the "key-identifier", then the l= ist-leaf "tpm-name" must have only one value. My suggestion would be to have a section to describe the workflow or the ex= ample of how to use this YANG module. Also, explicitly pointing out the ass= umptions would be much better. Generally, I agree with the idea that don't use nested keys to identify the= TPM (and its position) in RPCs. This has a significant benefit of scalabil= ity. Because if in the future more dimensions are needed to identify the TP= M (and its position), the RPC structures don't need to be changed, only mod= ifying the datastore structure is enough. But the current RPCs also have a = disadvantage that the key is very obscure and implicit, for example, you ne= ed to use "certificate-name" and "node-id" as the key in the output. I sugg= est that we can just use the "tpm-name" as the key of output. Two advantage= s would be: easier for readers to understand, the Verifier doesn't need to = search the database to find out the matched TPM. Other comments: 1. Some elements in the "rats-support-structures" are changed from read= -only to read-write, e.g., the "supported-algos" and "certificates" of TPM.= Why these elements can be configured now? 2. The outputs of RPC "tpm12-challenge-response-attestation" and "tpm20= -challenge-response-attestation" contains the "node-id" and "node-physical-= index". Can these two elements be omitted in the output? Because they can b= e get through the datastore. 3. The output of RPC "log-retrieval" doesn't contain the "node-id" or "= node-physical-index", and this is different with the outputs of other two R= PCs. I wonder whether here is right and other two RPCs need to delete the t= wo elements. Regards & Thanks! Wei Pan --_000_4e2e0b53d2be47009b1958758620914chuaweicom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Eric,

 

I’ve read the YANG modules you changed, actually I didnR= 17;t get how the new modules worked when I read it the first time. After reading it a few times and discussion with others, I kind of figured= out how it worked:

1. &n= bsp;   The Verifier= (or Relying Party) uses the “rats-support-structures” datastor= e structure to retrieve the hardware information, i.e., all the compute-nodes and all the TPMs, from the Attester. Then the Verifier c= an establish the relationship between the TPM and its compute-node info and= certificates info. Further, the Verifier can identify the TPM according to= the certificate-name and/or the compute-node.

2. &n= bsp;   Next, the Ve= rifier uses the RPC structures to get Evidence in a challenge-response fash= ion. In the challenge input, the Verifier can use the leaf “key-identifier” to ask Evidence of one specific = TPM based on this TPM’s unique credential, or it can use the leaf-lis= t “tpm-name” to ask Evidence of one or more TPMs based on these= TPMs’ names.

3. &n= bsp;   In the respo= nse output, the Attester returns the Evidence. If the input contains only o= ne TPM, then the output can match that TPM anyway. But if the input contains several “tpm-name”, then the output = is a set of Evidence of these TPMs, in this situation, the Verifier needs t= o use the “certificate-name” and/or “node-id” in ea= ch Evidence to identify which TPM produced it.

 

If my understanding is right, then the YANG modules after changed= have some assumptions which aren’t explicitly said, I conclude them below:

1. &n= bsp;   The Verifier= must retrieve the datastore first before initiate the challenge request.

2. &n= bsp;   Every TPM sh= ould have a unique name, at least be unique in an Attester.

3. &n= bsp;   Every certif= icate should have a unique name. It should be unique in an Attester if the = certificate-name can identify the TPM, or should be unique in a compute node if the certificate-name and the node-id are us= ed together to identify the TPM.

4. &n= bsp;   For the inpu= t, if you choose to use the “key-identifier”, then the list-lea= f “tpm-name” must have only one value.

My suggestion would be to have a section to describe the workflow= or the example of how to use this YANG module. Also, explicitly pointing out the assumptions would be much better.

 

Generally, I agree with the idea that don’t use nested keys= to identify the TPM (and its position) in RPCs. This has a significant benefit of scalability. Because if in the future more dimens= ions are needed to identify the TPM (and its position), the RPC structures = don’t need to be changed, only modifying the datastore structure is e= nough. But the current RPCs also have a disadvantage that the key is very obscure and implicit, for example, you= need to use “certificate-name” and “node-id” as th= e key in the output. I suggest that we can just use the “tpm-nameR= 21; as the key of output. Two advantages would be: easier for readers to understand, the Verifier doesn’t need to search the database to f= ind out the matched TPM.

 

Other comments:

1. &n= bsp;   Some element= s in the “rats-support-structures” are changed from read-only t= o read-write, e.g., the “supported-algos” and “certificat= es” of TPM. Why these elements can be configured now?

2. &n= bsp;   The outputs = of RPC “tpm12-challenge-response-attestation” and “tpm20-= challenge-response-attestation” contains the “node-id” an= d “node-physical-index”. Can these two elements be omitted in the output? Because they can be get t= hrough the datastore.

3. &n= bsp;   The output o= f RPC “log-retrieval” doesn’t contain the “node-id&= #8221; or “node-physical-index”, and this is different with the= outputs of other two RPCs. I wonder whether here is right and other two RPCs need to delete= the two elements.

 

Regards & Thanks!

Wei Pan

--_000_4e2e0b53d2be47009b1958758620914chuaweicom_-- From nobody Fri Jul 10 07:45:42 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E3063A0CF8; Fri, 10 Jul 2020 07:45:39 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.7.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <159439233935.26417.14875444173424537658@ietfa.amsl.com> Date: Fri, 10 Jul 2020 07:45:39 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-architecture-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2020 14:45:40 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : Remote Attestation Procedures Architecture Authors : Henk Birkholz Dave Thaler Michael Richardson Ned Smith Wei Pan Filename : draft-ietf-rats-architecture-05.txt Pages : 36 Date : 2020-07-10 Abstract: In network protocol exchanges, it is often the case that one entity (a Relying Party) requires evidence about a remote peer to assess the peer's trustworthiness, and a way to appraise such evidence. The evidence is typically a set of claims about its software and hardware platform. This document describes an architecture for such remote attestation procedures (RATS). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-architecture/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-architecture-05 https://datatracker.ietf.org/doc/html/draft-ietf-rats-architecture-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-architecture-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Jul 10 08:13:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 115133A0E96 for ; Fri, 10 Jul 2020 08:13:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mK3Vs3zP5871 for ; Fri, 10 Jul 2020 08:13:27 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 747513A0E91 for ; Fri, 10 Jul 2020 08:13:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 7C0C5389A3 for ; Fri, 10 Jul 2020 11:10:30 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id tzA9p2Rw7guI for ; Fri, 10 Jul 2020 11:10:29 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id CA1E138995 for ; Fri, 10 Jul 2020 11:10:29 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id A2289617 for ; Fri, 10 Jul 2020 11:13:25 -0400 (EDT) From: Michael Richardson To: rats@ietf.org In-Reply-To: <159439233935.26417.14875444173424537658@ietfa.amsl.com> References: <159439233935.26417.14875444173424537658@ietfa.amsl.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] I-D Action: draft-ietf-rats-architecture-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2020 15:13:31 -0000 --=-=-= Content-Type: text/plain internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. > Title : Remote Attestation Procedures Architecture > Authors : Henk Birkholz > Dave Thaler > Michael Richardson > Ned Smith > Wei Pan > Filename : draft-ietf-rats-architecture-05.txt > Pages : 36 > Date : 2020-07-10 > Abstract: > In network protocol exchanges, it is often the case that one entity > (a Relying Party) requires evidence about a remote peer to assess the > peer's trustworthiness, and a way to appraise such evidence. The > evidence is typically a set of claims about its software and hardware > platform. This document describes an architecture for such remote > attestation procedures (RATS). > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-rats-architecture/ > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-rats-architecture-05 > https://datatracker.ietf.org/doc/html/draft-ietf-rats-architecture-05 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-architecture-05 Hi, this is the result of a lot of consensus building among the authors and contributors. (Which reminds me that I probably need to update the list of contributors) We noticed one nit, "HD" remains in a table: we intend to add text that explains it, but we feel the text should reference a document which the WG has not (yet!?) decided to adopt. Please review the diffs. We believe that the document is "feature complete", but that there are some sections where some would like to say more. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8IhZUACgkQgItw+93Q 3WUadggAqnwrcXzL2xBdtMFG5IjEVBnGatKKV+Gcq1EqqBlPKt9XB683VMvFNxBA eni/KqrmTYntNuDqkeeVchYL3a6l/DtwMkz34JG4zzgML1yCcEDHJdNnA424cwJY J4waKYnHfUmBDRUwbh7AbNdUH7xNH71E2V8CGKfgUFX2qb6kQFCe24vbHvlBHiBt xFYTx/vB8vLJ45Dr2MyuXeUu2fy+GwdvPu/MWkNrNVwEY0LA1XtgTiBoF129HUxL jCzEp7XwHAgokauD9sniOOCKUx6Jt/H6F1V/7s4KUiRJ/FiXXt+lmS2kw14XrGOf uwlaRcKbmgY5Y9PkNyNaq3tdBfX0AQ== =6+Gj -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Jul 11 18:06:55 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 468783A082C for ; Sat, 11 Jul 2020 18:06:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EEFAKom4HV2Z for ; Sat, 11 Jul 2020 18:06:45 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEDE13A0856 for ; Sat, 11 Jul 2020 18:06:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 10F1A389AE for ; Sat, 11 Jul 2020 21:03:40 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id mwARTmEGfdEB for ; Sat, 11 Jul 2020 21:03:39 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 7BF1C389AC for ; Sat, 11 Jul 2020 21:03:39 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id A3F0E3DE for ; Sat, 11 Jul 2020 21:06:36 -0400 (EDT) From: Michael Richardson To: rats@ietf.org In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Rats] RATS Architecture Design Team weekly meeting cancelled for 2020-07-14 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Jul 2020 01:06:54 -0000 --=-=-= Content-Type: text/plain Because the calendaring systems are often not very clear about what stuff changed, I'll clarify that we are *not* meeting on July 14, and we do not intend to meet again until after IETF108. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl8KYhwACgkQgItw+93Q 3WXMkwf/aL558LVStT2FszIlW/3iWY6xr+1rCXAwDujhzxlIp7L3aLnFjUklnbrb 2oenYuWyI+MCP6VMTmDl8OsskWoCqOOYwWpFhBhd4cfZdLG73y2ocHFRMq1X8kcw BbZRwGVQzQFAbEsbPPJnC4xoMKqecN9dheAOAJQDErnnafQJO2Zvafvtai8k3qXr A2FtxFojQETQmpNPtetWvGlPfh9/UmuW9lmmOeKxOG76FoI4hUMcdSPH0hRLtodU eN2YmqPGnwpvYFPJbuANnTtkm4403zG+Gu3/7djQmTGoBH8ksvrbnoYXKecTqrzt mUa2RvvlQNkkw5vrk0R1nSNxCMOhFw== =34nH -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Jul 12 11:34:16 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DC673A07ED; Sun, 12 Jul 2020 11:33:52 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.7.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <159457883220.6195.7961671002661069818@ietfa.amsl.com> Date: Sun, 12 Jul 2020 11:33:52 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Jul 2020 18:33:52 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : TPM-based Network Device Remote Integrity Verification Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-01.txt Pages : 38 Date : 2020-07-12 Abstract: This document describes a workflow for remote attestation of the integrity of network devices. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest-01 https://datatracker.ietf.org/doc/html/draft-ietf-rats-tpm-based-network-device-attest-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-tpm-based-network-device-attest-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 13 10:12:56 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A3A83A163C for ; Mon, 13 Jul 2020 10:12:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lp6oXUgPyHRS for ; Mon, 13 Jul 2020 10:12:52 -0700 (PDT) Received: from mail-vk1-xa2c.google.com (mail-vk1-xa2c.google.com [IPv6:2607:f8b0:4864:20::a2c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9874A3A1616 for ; Mon, 13 Jul 2020 10:12:51 -0700 (PDT) Received: by mail-vk1-xa2c.google.com with SMTP id v26so2982917vkn.2 for ; Mon, 13 Jul 2020 10:12:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=iPcnr62LJk9zo5oDDm5wb2MjufluBWLl2nFtgOkYn2A=; b=OyS45/qVowU3jltTIBKocD5iz0WWb2Y9J7rAnwguIAIEg5FxF6l4mYTqWsJq8IwoOo ZXCOOWDcqLpKPvgZAUikmjsAONAbqbv3AHYkGgiT62fAwPepHEHU5EmEaUBlEwwsp3ec GOu1nQmVSqzOp1m7LE6+m7dGwn95iRF0pfnDb72ieQzqALKF0binR3NT73B6ch2YKpAh zy7OVej4hBggcjRyJ2nYO+dL/QcfSyYYEn9fFptC1VwrYjycgNKQUr0M6ndkmeP8BiKQ 2I/Zi82YasXZeveHnxBgB0u7lDxDV/o6HfzfgVj0+6x4atgpDMrCB7NPd8nvE85lOSYN kbTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=iPcnr62LJk9zo5oDDm5wb2MjufluBWLl2nFtgOkYn2A=; b=MJDVNWuzMt3/wpVmplTHxCosOt2aboF5WLsWUtlqQZZEYmHGjyURASexpxH+0458/4 a0Fz86amo9VToN1dUguWU2vW7M+CpVdifzEVfShiYhk+kqBQ4JNJvn2jRjcQy8AyYyc8 CQgc1k3qEX/BwzanN3ibu4aHEsnuqQwKwci+2XBVR4B32Ah1Z3bE8vBmMEpcF5xgu0bH kFRO/v2b+rBIw3ILZSk+YvgIThu+qxY74EL9oWrdEdlQTo9zkJaO+OtBlMMevyzGAwby Ycif0NDGzsJ2iS8qoRRmuBoAtIZEqDt1Oy1nRPVR55ouV/7y6+jZHttnhJWbze0zEiF4 ATiQ== X-Gm-Message-State: AOAM532a40sjIajzqeF6VBOfobCnYA6i/Z6Jft4psWXZe/UEv2HOmtcu 1mZWJR3A+0e6WV4imtbnEgN2zYtWd3UPK1rpQarrLNGV X-Google-Smtp-Source: ABdhPJxVAcIplrh8WxVzUsrqRH9879vW08WdTdPesm1CucwPJFa+TeA3cN6bZ/sS6IHifs1upn8M0Pb0dp/AMZ5G09c= X-Received: by 2002:a1f:add8:: with SMTP id w207mr706502vke.3.1594660370309; Mon, 13 Jul 2020 10:12:50 -0700 (PDT) MIME-Version: 1.0 References: <159465909060.2395.2662052736525113617@ietfa.amsl.com> In-Reply-To: From: Ira McDonald Date: Mon, 13 Jul 2020 13:12:37 -0400 Message-ID: To: rats@ietf.org, Ira McDonald Content-Type: multipart/alternative; boundary="000000000000e8e55905aa55cc22" Archived-At: Subject: [Rats] Fwd: [Pearg] Fwd: New Version Notification for draft-rao-pitfol-02.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jul 2020 17:12:55 -0000 --000000000000e8e55905aa55cc22 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, This document is cogent for the recent discussion on tagging of PII. Cheers, - Ira ---------- Forwarded message --------- From: Sandeep Rao Date: Mon, Jul 13, 2020 at 1:07 PM Subject: [Pearg] Fwd: New Version Notification for draft-rao-pitfol-02.txt To: Hi All, Here=E2=80=99s updated version of Personal Information Tagging for Logs https://www.ietf.org/internet-drafts/draft-rao-pitfol-02.txt Key updates in this version are: 1. Model for structured logging and use of standardized identifiers for personal information. 2. Illustration of Personal Information Identifiers Registry and associating sensitivity level for each identifier.. 3. Role based Redaction and access control 4. Considerations on log transformations and identified ToDo work on handling log privacy changes. Appreciate your review comments and feedback. Thanks -Sandeep ---------- Forwarded message --------- From: Date: Mon, Jul 13, 2020 at 10:21 PM Subject: New Version Notification for draft-rao-pitfol-02.txt To: Shivan Sahib , Sandeep Rao < sandeeprao.ietf@gmail.com>, Santhosh C N , Ryan Guest A new version of I-D, draft-rao-pitfol-02.txt has been successfully submitted by Sandeep Rao and posted to the IETF repository. Name: draft-rao-pitfol Revision: 02 Title: Personal Information Tagging for Logs Document date: 2020-07-13 Group: Individual Submission Pages: 11 URL: https://www.ietf.org/internet-drafts/draft-rao-pitfol-02.tx= t Status: https://datatracker.ietf.org/doc/draft-rao-pitfol/ Htmlized: https://tools.ietf.org/html/draft-rao-pitfol-02 Htmlized: https://datatracker.ietf.org/doc/html/draft-rao-pitfol Diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-rao-pitfol-02 Abstract: Software systems typically generate log messages in the course of their operation. These log messages (or 'logs') record events as they happen, thus providing a trail that can be used to understand the state of the system and help with troubleshooting issues. Given that logs try to capture state that is useful for monitoring and debugging, they can contain information that can be used to identify users. Personal data identification and anonymization in logs is crucial to ensure that no personal data is being inadvertently logged and retained which would make the logging system run afoul of laws around storing private information. This document focuses on exploring mechanisms that can be used by a generating or intermediary logging service to specify personal or sensitive data in log message(s), thus allowing a downstream logging server to potentially enforce any redaction or transformation. Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --=20 Pearg mailing list Pearg@irtf.org https://www.irtf.org/mailman/listinfo/pearg --000000000000e8e55905aa55cc22 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

This document is cogent = for the recent discussion on tagging of PII.
=

Cheers,
- = Ira

---------- Forwarded message ---------
From: Sandeep Rao <<= a href=3D"mailto:sandeeprao.ietf@gmail.com">sandeeprao.ietf@gmail.com&g= t;
Date: Mon, Jul 13, 2020 at 1:07 PM
Subject: [Pearg] Fwd: Ne= w Version Notification for draft-rao-pitfol-02.txt
To: <pearg@irtf.org>


Hi All,


Here=E2=80=99s updated version of= Personal Information Tagging for Logs

https://www.ietf.org/internet-drafts/draft-rao-pitfol-02.txt<= /p>


Key updates in th= is version are:

  1. Model for structured = logging and use of standardized identifiers for personal information.
    2. <= li style=3D"margin:0px;font-variant-numeric:normal;font-variant-east-asian:= normal;font-stretch:normal;font-size:12px;line-height:normal;font-family:&q= uot;Helvetica Neue"">Illustration of Personal Information Identifiers = Registry and associating sensitivity level for each identifier..
  2. Role based Redaction and access control
  3. Considerations on log transformations and identified ToDo= work on handling log privacy changes.

Appreciate your review comments and feedback.


Thanks

=

-Sandeep



--= -------- Forwarded message ---------
From: <internet-drafts@iet= f.org>
Date: Mon, Jul 13, 2020 at 10:21 PM
Subject: New= Version Notification for draft-rao-pitfol-02.txt
To: Shivan Sahib <<= a href=3D"mailto:shivankaulsahib@gmail.com" target=3D"_blank">shivankaulsah= ib@gmail.com>, Sandeep Rao <sandeeprao.ietf@gmail.com>, Santhosh C N &= lt;santoshcn1@gma= il.com>, Ryan Guest <rguest@salesforce.com>



A new version of I-D, draft-rao-pitfol-02.txt
has been successfully submitted by Sandeep Rao and posted to the
IETF repository.

Name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0draft-rao-pitfol
Revision:=C2=A0 =C2=A0 =C2=A0 =C2=A002
Title:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Personal Information Tagging for L= ogs
Document date:=C2=A0 2020-07-13
Group:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 Individual Submission
Pages:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 11
URL:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 https://www.ietf.org/internet-drafts/draft-rao-pitfol-02.txt
Status:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://d= atatracker.ietf.org/doc/draft-rao-pitfol/
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://tools.iet= f.org/html/draft-rao-pitfol-02
Htmlized:=C2=A0 =C2=A0 =C2=A0 =C2=A0https://da= tatracker.ietf.org/doc/html/draft-rao-pitfol
Diff:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0https://www.ietf.org/rfcdiff?url2=3Ddraft-rao-pitfol-02

Abstract:
=C2=A0 =C2=A0Software systems typically generate log messages in the course= of
=C2=A0 =C2=A0their operation.=C2=A0 These log messages (or 'logs') = record events as
=C2=A0 =C2=A0they happen, thus providing a trail that can be used to unders= tand
=C2=A0 =C2=A0the state of the system and help with troubleshooting issues.= =C2=A0 Given
=C2=A0 =C2=A0that logs try to capture state that is useful for monitoring a= nd
=C2=A0 =C2=A0debugging, they can contain information that can be used to id= entify
=C2=A0 =C2=A0users.=C2=A0 Personal data identification and anonymization in= logs is
=C2=A0 =C2=A0crucial to ensure that no personal data is being inadvertently= logged
=C2=A0 =C2=A0and retained which would make the logging system run afoul of = laws
=C2=A0 =C2=A0around storing private information.=C2=A0 This document focuse= s on
=C2=A0 =C2=A0exploring mechanisms that can be used by a generating or inter= mediary
=C2=A0 =C2=A0logging service to specify personal or sensitive data in log =C2=A0 =C2=A0message(s), thus allowing a downstream logging server to poten= tially
=C2=A0 =C2=A0enforce any redaction or transformation.





Please note that it may take a couple of minutes from the time of submissio= n
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


--
Pearg mailing list
Pearg@irtf.org
https://www.irtf.org/mailman/listinfo/pearg
--000000000000e8e55905aa55cc22-- From nobody Mon Jul 13 10:56:00 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 91EDA3A1369; Mon, 13 Jul 2020 10:55:54 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.8.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <159466295449.11302.11661705132591230155@ietfa.amsl.com> Date: Mon, 13 Jul 2020 10:55:54 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-02.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jul 2020 17:55:55 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : TPM-based Network Device Remote Integrity Verification Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-02.txt Pages : 38 Date : 2020-07-13 Abstract: This document describes a workflow for remote attestation of the integrity of network devices. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest-02 https://datatracker.ietf.org/doc/html/draft-ietf-rats-tpm-based-network-device-attest-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-tpm-based-network-device-attest-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 14 04:46:06 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD2D3A0C00 for ; Tue, 14 Jul 2020 04:45:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.621 X-Spam-Level: X-Spam-Status: No, score=-9.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=DQl5UFDh; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=n/bqmV/0 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id amFeLXCY3rbF for ; Tue, 14 Jul 2020 04:45:56 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 193DF3A0BF9 for ; Tue, 14 Jul 2020 04:45:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13584; q=dns/txt; s=iport; t=1594727155; x=1595936755; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=KqxDGYTWCmBC5XQHL4Xkq0c4btTH8ZP7ROJIqk3GvVo=; b=DQl5UFDhsLiSYLoNfwQgG8na0jcjjkZbh2Y/l17cDlcFtRUeXztrTYL0 6tlkLnk7WdG4U99g5a1dC9zBeFFi19oEogIMjlSMTLjSZ1pk2SNrBXLfQ 2QSJSjYwfcyA4wi3Q7SJl19SP7LIoifhU+JtNcln8urdoDAEwCRmnqYq4 8=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A4F0aux2LS1SKLg5+smDT+zVfbzU7u7jyIg8e44?= =?us-ascii?q?YmjLQLaKm44pD+JxWGu6dtkVbWUISd4PVB2KLasKHlDGoH55vJ8HUPa4dFWB?= =?us-ascii?q?JNj8IK1xchD8iIBQyeTrbqYiU2Ed4EWApj+He2YkhIEdnzZhvZpXjhpTIXEw?= =?us-ascii?q?/0YAxyIOm9E4XOjsOxgua1/ZCbYwhBiDenJ71oKxDjpgTKvc5Qioxneas=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DQCQDmmQ1f/5pdJa1WCh4BAQsSDEC?= =?us-ascii?q?DHFEHgRotLywKh28DjVGBAZddgUKBEQNVBAcBAQEJAwEBLQIEAQGETAKCHAI?= =?us-ascii?q?kOBMCAwEBCwEBBQEBAQIBBgRthVsMhW8BAQEBAgESLgEBMAcBBAcEAgEIEQQ?= =?us-ascii?q?BAS8CMBsBAQUDAQEEDgUIBgsJgwWBfk0DDhEPAZ15AoE5iGF0gTSDAQEBBYU?= =?us-ascii?q?sGIIHBwmBOIFTgReJeQ8agUE/gRFDghgHLj6EEAUOCxEVgzKCLY8wN4lQgRW?= =?us-ascii?q?KBI9VgQQKgl2EMYJXknOCdY5ejWCTV50QAgQCBAUCDgEBBYFqI0SBE3AVO4J?= =?us-ascii?q?pUBcCDY4eDBeDTopWdDcCBggBAQMJfI0XASaBDQGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,350,1589241600"; d="p7s'?scan'208";a="782846490" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 14 Jul 2020 11:45:54 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 06EBjsqH019237 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 14 Jul 2020 11:45:54 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 14 Jul 2020 06:45:54 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 14 Jul 2020 06:45:53 -0500 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 14 Jul 2020 07:45:53 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UqbasEQpTbrRrCLbfL3iupaZxFZGpAB8qYNINkG4Uq5hvKdw+MfrSObphMg0/KXs2A9eysh5c/6P+V0/56A9V1QvUy5Wi6JnWFqCL7r/gjx2Fi3w6rMpEBisE9zm1emy4kdg+gXuxV48y0O/Td7Nt9kHL8sxka2gj45cPmDoVHfcgCC/0ulJbMiJR/2/DXIrBnMXcdHINU1U+6jTJLVrBRPCHFd7/FLkgc8wsRZTn4VoDFSFGBbOunmjpk7X8tIqom489inyI4lqwJt/u9tFUwjMXsNc8ealUJqhamdAMUTmJnqRn7EOBGed8l7P2YvbBYi10oHGz/nMYLDw2F4byw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ua7/seXjYvUC9GZUKkgTTsoZ6UM10qvernICe/egj5w=; b=Y5X5HCKAQZBkA424FZvXo9j1iotAAaI3jGadT3N677/rh0Pqu6Xk3a7Lmh64pPby0z7XtNtJ5nw1THqw/HY4wNpL6wGqXuafGMlh70gZNk8fJXBVvqFJf7dgNeFdJTAfWSaBLq0kkbMldFKp5EfOdS7GTKo7Nx1vTSWvHCg8OzVSWdAmNYD66rY3zTOqlTf3DwkatQlGCZ1k01qug9nc3xenUnAtA0eg+/XT23Z8UPRgRW4TbZcKejkXfwhHwB0o32uXYx2i9Ea2HlsD2Mo05cMfvxFsWzMkU7qi9KdlJ9LCdlQxiqF3ydQOFkFW339wkA3ZU4Hs++tGG5dEUPOsEQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ua7/seXjYvUC9GZUKkgTTsoZ6UM10qvernICe/egj5w=; b=n/bqmV/0FzYtvb4Hr4B/Ni2RqVDNid2qCxSSaAH3kbveY+YLdFB931905dCWSbXzK+niPo2AvaSAdHYEJbWqrG31mK0e3qU5TxcJI/tulDAb2mfQZos43XI9uKwYdVI1K3uwbZLbYZkF1tY8+KEGoO3mha4TL18s66Q/cNVmJv8= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4173.namprd11.prod.outlook.com (2603:10b6:208:137::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.17; Tue, 14 Jul 2020 11:45:52 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2%5]) with mapi id 15.20.3195.017; Tue, 14 Jul 2020 11:45:52 +0000 From: "Eric Voit (evoit)" To: "Panwei (William)" CC: "rats@ietf.org" Thread-Topic: Comments on the changes of CHARRA YANG module Thread-Index: AdZWpd3aUHkm/3I1RKafnNj2CppmIwAHwgsgAAAIMzAAAASPEADDs82Q Date: Tue, 14 Jul 2020 11:45:52 +0000 Message-ID: References: <4e2e0b53d2be47009b1958758620914c@huawei.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.70] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 52f94bc0-166e-4075-d4ad-08d827eb760b x-ms-traffictypediagnostic: MN2PR11MB4173: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3631; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: u9NVlzSYQLSIY9Po6IFaoD0lDS2M8cIFgciJRYCdEGrlxX3a3Tr/YLmRehXAbV26+Bd0Ca+B3nxFkF0gMW7EEchwIaQWqAepwha95ev0rpXUChbKGVMUIeCvl9uiGFDpDIhn0VKkTNnJO/711ILxiX2TthFlhunltsvoGEO5rloffmT/y83M5tcWfQPeYvZSdrl73/JAMqjqaeObisLfG9bA9nH6nlRH0MApTnLIth54jORpJ++z4yFRzLuJ3KV4LZieXEdFjaGFw2rx4cdirWq9QEg7r9ttYv9eLWkqsUbt+m2oBYANjJS6bOP0s1bf x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(346002)(366004)(39860400002)(26005)(7696005)(33656002)(5660300002)(53546011)(66946007)(52536014)(2906002)(66446008)(64756008)(66616009)(66476007)(76116006)(186003)(66556008)(6506007)(6916009)(86362001)(8676002)(8936002)(478600001)(71200400001)(83380400001)(99936003)(316002)(9686003)(4326008)(55016002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/signed; boundary="----=_NextPart_000_0048_01D659B2.CA602E40"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 52f94bc0-166e-4075-d4ad-08d827eb760b X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jul 2020 11:45:52.2350 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KHr7XScCdIkqDtj14aarxXkQyyMgrdnlk2MSApEq4R0RsXMS3V7XiDf9UZNlEE2M X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4173 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: [Rats] FW: Comments on the changes of CHARRA YANG module X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jul 2020 11:46:05 -0000 ------=_NextPart_000_0048_01D659B2.CA602E40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Including the 'rats' alias. I missed this in the original response... -----Original Message----- From: Eric Voit (evoit) Sent: Friday, July 10, 2020 11:24 AM To: Panwei (William) Cc: rats-chairs@ietf.org Subject: RE: Comments on the changes of CHARRA YANG module Hi Wei Pan, Thanks for the comments. Some thoughts in-line... > From: Panwei (William), July 10, 2020 6:39 AM > > Hi Eric, > > I've read the YANG modules you changed, actually I didn't get how the new > modules worked when I read it the first time. After reading it a few times > and discussion with others, I kind of figured out how it worked: It seems like it would be good to add some text which explains common operations outside of the YANG model. I will propose some text to the draft based on your thoughts lower in the thread. > 1. The Verifier (or Relying Party) uses the "rats-support-structures" > datastore structure to retrieve the hardware information, i.e., all the > compute-nodes and all the TPMs, from the Attester. Then the Verifier can > establish the relationship between the TPM and its compute-node info and > certificates info. Further, the Verifier can identify the TPM according to > the certificate-name and/or the compute-node. Yes. A large benefit we don't send redundant information in a continuous set of RPC replies. And by sending the certificate as the unique identifier, it becomes easy to handle certificate upgrades, as when you see a new certificate being used, you then can retrieve the information from the Attester. > 2. Next, the Verifier uses the RPC structures to get Evidence in a > challenge-response fashion. In the challenge input, the Verifier can use the > leaf "key-identifier" to ask Evidence of one specific TPM based on this > TPM's unique credential, or it can use the leaf-list "tpm-name" to ask > Evidence of one or more TPMs based on these TPMs' names. The absence of either should result in the acquisition of PCR information for all physical TPMs. This is a benefit from the previous version where we explicitly had a 'tpm-name' of 'ALL'. That is the purpose of the YANG model text: "Name of one or more unique TPMs on a device. If this object exists, a selection should pull only the objects related to these TPM(s). If it does not exist, all qualifying TPMs that are 'hardware-based' equals true on the device are selected."; > 3. In the response output, the Attester returns the Evidence. If the input > contains only one TPM, then the output can match that TPM anyway. But if > the > input contains several "tpm-name", then the output is a set of Evidence of > these TPMs, in this situation, the Verifier needs to use the > "certificate-name" and/or "node-id" in each Evidence to identify which TPM > produced it. This is correct. > If my understanding is right, then the YANG modules after changed have > some > assumptions which aren't explicitly said, I conclude them below: > 1. The Verifier must retrieve the datastore first before initiate the > challenge request. With the current version, this is not the case. (As there is not a required key of 'tpm-name' mandatory in the RPC.) What needs to happen is that there is a secure method of provisioning on the certificate on the Verifier. And if you receive an unknown certificate, you have a choice of how to then acquire that information. The current YANG model points to ' ietf-keystore.yang' as a potential place to get that information. > 2. Every TPM should have a unique name, at least be unique in an Attester. Yes. And this could be a random system generated string. It cannot be a TPM path, as this could change on a reboot. > 3. Every certificate should have a unique name. It should be unique in an > Attester if the certificate-name can identify the TPM, or should be unique > in a compute node if the certificate-name and the node-id are used together > to identify the TPM. The certificate-name should be unique within a Attester. I will add that as a constraint to the YANG model via XPATH. Good catch, I had not explicitly said this is required. > 4. For the input, if you choose to use the "key-identifier", then the > list-leaf "tpm-name" must have only one value. > My suggestion would be to have a section to describe the workflow or the > example of how to use this YANG module. Also, explicitly pointing out the > assumptions would be much better. I agree. In fact, I would argue that you should not allow both 'key-identifier' and 'tpm-name*' in the same query. What happen if they conflict? If you agree, we could make an explicitly choice allowing either one or the other. > Generally, I agree with the idea that don't use nested keys to identify the > TPM (and its position) in RPCs. This has a significant benefit of > scalability. Because if in the future more dimensions are needed to identify > the TPM (and its position), the RPC structures don't need to be changed, > only modifying the datastore structure is enough. But the current RPCs also > have a disadvantage that the key is very obscure and implicit, I assert this is a very large benefit. You do not have to identify the key at all in the query. > for example, > you need to use "certificate-name" and "node-id" as the key in the output. I > suggest that we can just use the "tpm-name" as the key of output. 'tpm-name' is an internal structure to the Attester, and need not be used by the Verifier where there is only one TPM. This is a significant benefit of getting rid of the key. And for implementations with only one TPM, life is much simpler. > Two > advantages would be: easier for readers to understand, the Verifier doesn't > need to search the database to find out the matched TPM. There is another simplifying advantage of the current structure. When a certificate changes, you then can simply fetch the corresponding tpm info from the datastore. Certificate management/upgrades should become easier. > Other comments: > 1. Some elements in the "rats-support-structures" are changed from read- > only > to read-write, e.g., the "supported-algos" and "certificates" of TPM. Why > these elements can be configured now? On "supported-algos": an operator might want to limit the universe of supported-algos from the full set which might be available from a vendor. On "certificates": YANG has some structural issues with how config data can be exposed. I believe that an Attesting device should allow new certificates to be provisioned in a place like ' ietf-keystore.yang'. However I am not sure if YANG allows non-config leafrefs to point to configuration data. I get an error if I try to make these objects system generated. Any suggestions on how automatically update things here? I do know there are implications to NMDA (RFC-8342). > 2. The outputs of RPC "tpm12-challenge-response-attestation" and > "tpm20-challenge-response-attestation" contains the "node-id" and > "node-physical-index". Can these two elements be omitted in the output? > Because they can be get through the datastore. I believe these can be removed. Perhaps we can ask everyone during the IETF session if they have any objections? > 3. The output of RPC "log-retrieval" doesn't contain the "node-id" or > "node-physical-index", and this is different with the outputs of other two > RPCs. I wonder whether here is right and other two RPCs need to delete the > two elements. Agree. The answer to the above question should be true here as well. Thanks! Eric > Regards & Thanks! > Wei Pan ------=_NextPart_000_0048_01D659B2.CA602E40 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzE0MTE0NTQ4WjAjBgkqhkiG 9w0BCQQxFgQUq62rmsrNr8+9q1C5/6ctRBO3WpEwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQALn6UKeAJp2KU9ibfaB9pmUozJIyqO9m/vA1Eo81qtKsdZc/Ku2xkkGJTsurG9mCrz nAzNGOxH/0DjUTSv+HQHNp1aKmdaGGzF9DrPSSeeVSjJSxhMB1mlBQ4PxBwmLhQ4OyslljiIvpqY CLKseUD0Zwh2lZgLVukMlrqyEG7XDm50ljtY422Hye9FDVvSgixoEQMTfxfB5SfGZLyE9JP+99RQ pzg6vo8z4gPsmlc9m0vz+RKFDkjgVufJRuxlRmD/ExxKvQgxkSacBd1OAK3L9Zmg/FNmvJcLGIi/ gLISOTewI6xe+0R+XI36RhNSiYxSpGC/zDEB8ZuXXpqYZggIAAAAAAAA ------=_NextPart_000_0048_01D659B2.CA602E40-- From nobody Tue Jul 14 13:12:16 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A6E33A0B2A for ; Tue, 14 Jul 2020 13:12:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.917 X-Spam-Level: X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qZlplSkhLgOX for ; Tue, 14 Jul 2020 13:12:09 -0700 (PDT) Received: from p3plsmtpa12-02.prod.phx3.secureserver.net (p3plsmtpa12-02.prod.phx3.secureserver.net [68.178.252.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E70D83A0949 for ; Tue, 14 Jul 2020 13:12:08 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id vRHbjZ5KNcwlGvRHcj8SZ4; Tue, 14 Jul 2020 13:12:08 -0700 X-CMAE-Analysis: v=2.3 cv=d96LNirE c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=48vgC7mUAAAA:8 a=PaICiGzXIa2ZFx2O0J4A:9 a=Ew8gZXkHXLXYxDnS:21 a=sX5eUBSHe2QvSIIF:21 a=QEXdDO2ut3YA:10 a=-RoEEKskQ1sA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Laurence Lundblade In-Reply-To: <815D0226-CCEE-4581-B705-08CB744CD176@cisco.com> Date: Tue, 14 Jul 2020 13:12:07 -0700 Cc: Henk Birkholz , "rats@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <42199E8C-59F6-46F5-9F10-0D7AD89E9121@cisco.com> <993a5dad-4a1f-eafe-913f-67b461039f86@sit.fraunhofer.de> <815D0226-CCEE-4581-B705-08CB744CD176@cisco.com> To: "Nancy Cam-Winget (ncamwing)" X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLHaLfqFZTjxeRTMlKnHQ2cstWejCENv3+3qT0ljQ/uQWhQFYOH1/XOM9ssiU0YY6szsaNnD/aMy+MKoa76y/w2BxqrdxT2kf82IFPdApjMV1s1IuCBg JIMeSgnJk31jaj3xp38BUPsZTjzkF0VAMxIZUy8Dzm1U1kfrf6nkPGte7xesS3/ejz3kUOjc6ixG/Z+ip56233jhLHwYV438Dw6ojToaiV1rgEZYtZNLh4Zg QEzSI67vl5ghb/hALu5TspQCciSFQtzjd1PpMaok3E4= Archived-At: Subject: Re: [Rats] IETF 108 Call for agenda items X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jul 2020 20:12:14 -0000 I would like 20 minutes to present a taxonomy of attestation keys and = key identification schemes. This is relevant to RATS Architecture and to = EAT design for key identification. Thank you! LL > On Jul 6, 2020, at 2:37 PM, Nancy Cam-Winget (ncamwing) = wrote: >=20 > Thanks for the requests Henk! A clarification (or three): > 1. Are you requesting the *ed (e.g. first 3) occur in the first = session? > 2. The *ed block is in the sequence you want them to flow? > 3. Are you the presenter for all the requested slots below? >=20 > Warm regards, Nancy >=20 > =EF=BB=BFOn 7/6/20, 2:25 PM, "Henk Birkholz" = wrote: >=20 > Hi Nancy, >=20 > I'd like to request: >=20 > * Reference Interaction Models - 10 min (*) > * YANG module for CHARRA/TPM - 10 min (*) > * Attestation Event Stream Subscription - 10 min (*) > * RATS Architecture - 15 min > * "SUIT/TEEP Evidence & Attestation Result Claims" - 10 min > * Update on UCCS - 10 min >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > p.s. the (*) items should be en bloc and in sequence (first = session), please >=20 > On 06.07.20 23:07, Nancy Cam-Winget (ncamwing) wrote: >> Hello RATs members, >>=20 >> We will be meeting on Tuesday July 28 13:00-13:50UTC and Wednesday = July=20 >> 29 11am-12:40pm UTC. >>=20 >> This is a call for agenda, so if you have a topic to present please = let=20 >> the chairs (rats-chairs@ietf.org ) know=20= >> your topic and requested time. >>=20 >> Thanks, Nancy >>=20 >>=20 >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >>=20 >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Thu Jul 16 20:10:44 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 771183A0FCB for ; Thu, 16 Jul 2020 20:10:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.619 X-Spam-Level: X-Spam-Status: No, score=-9.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=DjeZ/4BG; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=OGvUE2ys Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6byKNN2FCD-t for ; Thu, 16 Jul 2020 20:10:40 -0700 (PDT) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A04B3A0FC7 for ; Thu, 16 Jul 2020 20:10:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14653; q=dns/txt; s=iport; t=1594955440; x=1596165040; h=from:to:subject:date:message-id:mime-version; bh=zzRKmLcJhcs4w25faFVbAmO4Sr18ggmE7GnQy3D8dPs=; b=DjeZ/4BGJ2GvtaJDRkx9P6Kk/AnE1AAOox1c8mGhx2uuRUwxN2R/eD4a 26opR1tMlWdjLliRZAhuvLbequilHaxy7MEUq7w42L0AXPm461ZUhzSJc k+cB4LsiCbaGT4G5B8G67+twAQawhfZRVRfWjTMjSIX0tCuPAgmWB+fbE 0=; IronPort-PHdr: =?us-ascii?q?9a23=3AnT4GNhxFaT2F6uvXCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5ZRWFt/RgkFGPWp/UuLpIiOvT5qbnX2FIoZOMq2sLf5EEUR?= =?us-ascii?q?gZwd4XkAotDI/gawX7IffmYjZ8EJFEU1lorHC2LUYTH9zxNBXep3So5msUHR?= =?us-ascii?q?PyfQN+OuXyHNvUiMK6n+C/8pHeeUNGnj24NLhzNx6x6w7Ws5ob?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DjCQA9FhFf/4gNJK1gg3YvUQdvWC8?= =?us-ascii?q?sCoQpg0YDoTeEbIJTA1ULAQEBDAEBGAEMCAIEAQGEZYF8AiQ4EwIDAQELAQE?= =?us-ascii?q?FAQEBAgEGBG2FWwELhggRHQEBOBEBGhMdAgQwFxAEDwQigwQBgX4DSgMuAQ6?= =?us-ascii?q?fbwKBOYhhdoEygwEBAQWBNgQMQUKCURiCDgMGgTiCaoJPRz+GJA8aggCBESc?= =?us-ascii?q?chA+BWAICAQGEcTOCLY85gxWGUJwbCoJdiFWRCwMegniJPZMMkXyBZ4hAkDW?= =?us-ascii?q?EIQIEAgQFAg4BAQWBaiOBV3AVZQGCPlAXAg2ONoNZhRSFQQF0ECcCBgEHAQE?= =?us-ascii?q?DCXyOGAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,361,1589241600"; d="scan'208,217";a="708565774" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 17 Jul 2020 03:10:37 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 06H3AbHk021799 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 17 Jul 2020 03:10:37 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 16 Jul 2020 22:10:37 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 16 Jul 2020 22:10:36 -0500 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 16 Jul 2020 23:10:36 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=mRLRaD2Gzn4JP18ja7NyYrW1MYup9wkec+jbxiWR/uqDmfrhl3SWpU0YWwL7htCurM5MGWkek/KoGLUJASICXOMI6+R+cGr19BDvtps8f7dwGXZxERMPsjk4ZKUjULfL+BCHkv8wKs19S8x9FMmxsbyGO+HMuBBJ36fJlJzJd+5G3YOhBigq4+E4uUgmCnlrsbfMGlpchpREWe+JBCis1KxH2GY7bVznGcpKTSHHO4RoQRqeobQjFC81E5jnc7VG1EFN26XDZnAE1Z/UfuADnk0XdTUYZlpEw6a1C0Gw/NXQwS6txwmd4kc+5iPZ+bntB9LLAEp6eBWDLqGwWeEHmQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zzRKmLcJhcs4w25faFVbAmO4Sr18ggmE7GnQy3D8dPs=; b=YXjaSinYoYFP2X9SyihAx05b/IjhhtMQf4fJri2yvrosGl++1D7qHbTZhJkrPrGQm7ZbYpQI04nApNj3pb2vpBrTTotefjRanV57jf8yXDsU4/xG1qT86dFnaHPJHFzPHqvtZ41tKeaZK8YyeqZxhaQOrlZME7IMWZpk0YzmgJ8FTi600KKix3ndACmL1tdIRaH1mFYrMkQ0QjIR/eFzfi37nMEQJQCeNtmh7jhL0pfjunUSV3HAL4zZgMheL3zYR8hIWsrnCxrSVVt8aSMNwvd2hCY9GnJFikmiqYz0Se+Sr6j6IBF+jF9/g1SQfh8Le8ToIs+jGbAuguzQdTv3JQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zzRKmLcJhcs4w25faFVbAmO4Sr18ggmE7GnQy3D8dPs=; b=OGvUE2ys3li9AOySf7lEXRdzIxhtaIRVlnrum6crEKQign7rMl6X+v0LYfq5DFUGhb5jooTJ6/v26AOkvbuOY0mPQZ0n/NeqCKRbZVeVGtfhC0WotvpmqIRalPuOBRq1N55ic3BP8s/AD+8PEQMUxmv/sFncADFw0M7JdrskwSk= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB2886.namprd11.prod.outlook.com (2603:10b6:a03:8f::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3174.22; Fri, 17 Jul 2020 03:10:35 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5%7]) with mapi id 15.20.3174.026; Fri, 17 Jul 2020 03:10:35 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: IETF 108 RATS agenda Thread-Index: AQHWW+fWK4vmr3HMjEahtFda+gvx7Q== Date: Fri, 17 Jul 2020 03:10:35 +0000 Message-ID: <4C6378C0-FB8C-4FE0-91AA-FB01B309426F@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.17.200615 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 123fa0b4-561c-441b-be9d-08d829fef941 x-ms-traffictypediagnostic: BYAPR11MB2886: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:854; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 7gJMZEKOcw7IRbkM4Y4w286PyDA7QxP2823IpKtXAF1f5WvxqNU7sxpffbvyBxPJRUTsMdT7BzFAUAfq1XGCMnvAX+lR4+SNipWIsLpEWmNEI0TD5WefLjeyPIDTjS5CTgBFkes7ZsqU3wLTL5QzjemocqCb/9qXcyMlIscdY7Bt1t/ERmY/SsXVMQ6XaJFciDjBTVtmWyPeCLyWNSoC083bJez/pf7tiQzyyCKp5GaGT27flsETARkGPsKXWoO04/F5mKBn9ghPflSNmxaUtxED+x4upqItpmE8DLy43Q4bmAG5jfp4+RWZbSR7k1LpN3Exfc5VVouRMM95WnKEtu0xhtlX6ASrxP4lpLGakFoSqyxub969ZTasbZ8lkSyVdnh5UaFhytEX6522qQAmGQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(396003)(366004)(376002)(136003)(39860400002)(8676002)(76116006)(66446008)(64756008)(66476007)(6512007)(33656002)(316002)(6486002)(66946007)(66556008)(7116003)(6916009)(478600001)(2906002)(966005)(8936002)(71200400001)(5660300002)(2616005)(186003)(86362001)(83380400001)(36756003)(6506007)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_4C6378C0FB8C4FE091AAFB01B309426Fciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 123fa0b4-561c-441b-be9d-08d829fef941 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2020 03:10:35.1933 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: aV/2aq00++OwDCdCm3avVvjW+F8zZhO+NwzlgLKgG1WYvrqUIL1dsoFNz5FyYQxD8RT/f9HfVOgbPzjZAta5gQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB2886 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: [Rats] IETF 108 RATS agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jul 2020 03:10:42 -0000 --_000_4C6378C0FB8C4FE091AAFB01B309426Fciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8gUkFUcyBwYXJ0aWNpcGFudHMsDQoNCk5vdGU6IHRvIHRob3NlIHByZXNlbnRpbmcgcGxl YXNlIHNlbmQgb3IgcG9zdCB5b3VyIHNsaWRlcyBieSBKdWwgMjMgc28gdGhlIGNoYWlycyBjYW4g cHJlcGFyZSB0byBzaGFyZSB0aGVtIGR1cmluZyBvdXIgc2Vzc2lvbnMuDQoNCkhlcmUgaXMgdGhl IHByb3Bvc2VkIGFnZW5kYToNClJBVFMgYWdlbmRhIGZvciBUdWVzZGF5IEp1bHkgMjgsIDIwMjAu IDEzOjAwLTEzOjUwIFVUQw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoqIEFnZW5kYSBiYXNoICg1 bWluKQ0KDQoqIFJJViAtICBHdXkgRmVkb3Jrb3cgKDE1IG1pbnV0ZXMpDQogICAgICAgICAgICAg ICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLXRwbS1i YXNlZC1uZXR3b3JrLWRldmljZS1hdHRlc3QvDQoNCiogQ0hBUlJBIFVwZGF0ZSDigJMgRXJpYyBW b2l0ICgxMG1pbikNCiAgICAgICAgICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9kcmFmdC1pZXRmLXJhdHMteWFuZy10cG0tY2hhcnJhLw0KDQoqIE5ldHdvcmsgRGV2aWNl IFN1YnNjcmlwdGlvbiDigJMgRXJpYyBWb2l0ICgxMG1pbikNCiAgICAgICAgICAgICAgICBodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1iaXJraG9sei1yYXRzLW5ldHdvcmst ZGV2aWNlLXN1YnNjcmlwdGlvbi8NCg0KKiBJbnRlcmFjdGlvbiBNb2RlbCDigJMgSGVuayBCaXJr aG9seiAoMTBtaW4pDQogICAgICAgICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50ZXJhY3Rpb24tbW9kZWwvDQoN Cg0KDQpSQVRTIGFnZW5kYSBmb3IgV2VkbmVzZGF5IDI5LCAyMDIwLiAxMTowMC0xMjo0MCBVVEMN Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoqIEFnZW5kYSBiYXNoICg1bWluKQ0KDQoqIEFyY2hpdGVj dHVyZSAtICBIZW5rIEJpcmtob2x6KDE1IG1pbnV0ZXMpDQogICAgICAgICAgICAgICAgaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLWFyY2hpdGVjdHVyZS8N Cg0KKiBFQVQ6IEF0dGVzdGF0aW9uIEtleXMgdGF4b25vbXkgLSBMYXVyZW5jZSBMdW5kYmxhZGUg KDIwbWluKQ0KICAgICAgICAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LWlldGYtcmF0cy1lYXQvDQoNCiogVHJ1c3RlZCBQYXRoIFJvdXRpbmcg4oCTIEVyaWMg Vm9pdCAoMTBtaW4pDQogICAgICAgICAgICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtdm9pdC1yYXRzLXRydXN0d29ydGh5LXBhdGgtcm91dGluZy8NCg0KKiBTVUlU L1RFRVAgRXZpZGVuY2UgYW5kIGF0dGVzdGF0aW9uIGNsYWltcyDigJMgSGVuayBCaXJraG9seiAg KDEwbWluKQ0KICAgICAgICAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LWJpcmtob2x6LXJhdHMtc3VpdC1jbGFpbXMvDQoNCiogVW5wcm90ZWN0ZWQgQ1dUIENs YWltcyAg4oCTIEhlbmsgQmlya2hvbHogKDEwbWluKQ0KICAgICAgICAgICAgICAgIGh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWJpcmtob2x6LXJhdHMtdWNjcy8NCg0KKiBS RVNUZnVsIGF0dGVzdGVkIFJlc291cmNlcyDigJMgVGhvbWFzIEZvc3NhdGkgKDE1bWluKQ0KICAg ICAgICAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXNoYXct cmF0cy1yZWFyLw0KDQoqIE1pbGVzdG9uZXMg4oCTIENoYWlycyAoMTVtaW4pDQoNCg0KDQrigKJK YWJiZXI6IHhtcHA6cmF0c0BqYWJiZXIuaWV0Zi5vcmc/am9pbg0K4oCiTWVldEVjaG86IGh0dHBz Oi8vd3d3Lm1lZXRlY2hvLmNvbS9pZXRmMTA4L3JhdHMNCuKAok5vdGVzIGluOiBodHRwczovL2Nv ZGltZC5pZXRmLm9yZy9ub3Rlcy1pZXRmLTEwOC1yYXRzDQo= --_000_4C6378C0FB8C4FE091AAFB01B309426Fciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <75AFF943B3088147829150E10CB460F3@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5IZWxsbyBSQVRzIHBhcnRpY2lwYW50cyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPk5vdGU6IHRvIHRob3NlIHByZXNlbnRpbmcgcGxlYXNlIHNl bmQgb3IgcG9zdCB5b3VyIHNsaWRlcyBieSBKdWwgMjMgc28gdGhlIGNoYWlycyBjYW4gcHJlcGFy ZSB0byBzaGFyZSB0aGVtIGR1cmluZyBvdXIgc2Vzc2lvbnMuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5IZXJlIGlzIHRoZSBwcm9wb3NlZCBhZ2VuZGE6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPlJBVFMgYWdlbmRhIGZvciBUdWVzZGF5IEp1bHkgMjgsIDIwMjAuIDEzOjAw LTEzOjUwIFVUQzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4qIEFnZW5kYSBiYXNoICg1bWluKTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+KiBSSVYgLSZuYnNwOyBH dXkgRmVkb3Jrb3cgKDE1IG1pbnV0ZXMpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5ldHdvcmstZGV2aWNlLWF0dGVzdC88bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogQ0hBUlJBIFVwZGF0ZSDigJMgRXJpYyBW b2l0ICgxMG1pbik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy15 YW5nLXRwbS1jaGFycmEvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4qIE5ldHdvcmsgRGV2aWNlIFN1YnNjcmlwdGlvbiDigJMgRXJpYyBWb2l0ICgxMG1pbik8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZp Y2Utc3Vic2NyaXB0aW9uLzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+KiBJbnRlcmFjdGlvbiBNb2RlbCDigJMgSGVuayBCaXJraG9seiAoMTBtaW4pPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1iaXJraG9sei1yYXRzLXJlZmVyZW5jZS1pbnRlcmFj dGlvbi1tb2RlbC88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UkFUUyBhZ2Vu ZGEgZm9yIFdlZG5lc2RheSAyOSwgMjAyMC4gMTE6MDAtMTI6NDAgVVRDPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+KiBBZ2VuZGEgYmFzaCAoNW1pbik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPiogQXJjaGl0ZWN0dXJlIC0mbmJzcDsgSGVuayBCaXJraG9seigxNSBt aW51dGVzKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLWFyY2hp dGVjdHVyZS88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogRUFU OiBBdHRlc3RhdGlvbiBLZXlzIHRheG9ub215IC0gTGF1cmVuY2UgTHVuZGJsYWRlICgyMG1pbik8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGh0dHBz Oi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy1lYXQvPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4qIFRydXN0ZWQgUGF0aCBSb3V0aW5n IOKAkyBFcmljIFZvaXQgKDEwbWluKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt dm9pdC1yYXRzLXRydXN0d29ydGh5LXBhdGgtcm91dGluZy88bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogU1VJVC9URUVQIEV2aWRlbmNlIGFuZCBhdHRlc3RhdGlv biBjbGFpbXMg4oCTIEhlbmsgQmlya2hvbHombmJzcDsgKDEwbWluKTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgaHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvZHJhZnQtYmlya2hvbHotcmF0cy1zdWl0LWNsYWltcy88bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogVW5wcm90ZWN0ZWQgQ1dUIENsYWltcyZu YnNwOyDigJMgSGVuayBCaXJraG9seiAoMTBtaW4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1iaXJraG9sei1yYXRzLXVjY3MvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij4qIFJFU1RmdWwgYXR0ZXN0ZWQgUmVzb3VyY2VzIOKAkyBUaG9tYXMgRm9z c2F0aSAoMTVtaW4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1zaGF3LXJhdHMt cmVhci88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogTWlsZXN0 b25lcyDigJMgQ2hhaXJzICgxNW1pbik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dCI+4oCiSmFiYmVyOiB4bXBwOnJhdHNAamFiYmVyLmlldGYub3JnP2pvaW48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+4oCiTWVldEVjaG86IGh0dHBzOi8vd3d3Lm1lZXRlY2hvLmNvbS9pZXRmMTA4L3JhdHM8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+4oCiTm90ZXMgaW46IGh0dHBzOi8vY29kaW1kLmlldGYub3JnL25v dGVzLWlldGYtMTA4LXJhdHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_4C6378C0FB8C4FE091AAFB01B309426Fciscocom_-- From nobody Fri Jul 17 09:07:23 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 558683A0821 for ; Fri, 17 Jul 2020 09:07:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=Ap4Qotqn; dkim=pass (1024-bit key) header.d=juniper.net header.b=QWHUreQC Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vrjkzV_5fSsx for ; Fri, 17 Jul 2020 09:07:19 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B90773A0979 for ; Fri, 17 Jul 2020 09:07:08 -0700 (PDT) Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 06HG2fcg016607; Fri, 17 Jul 2020 09:07:06 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=PPS1017; bh=QBsj1cqn732Kaxk4iw8HU8tq9eJm9MXCkChhw5Ff+UE=; b=Ap4Qotqn7IyUykPNczkxn6fYVxO01UvuMSBQS1MuvxFO61J88zZdESctIzSRx2InRfHB 176Y/5m6wvw7reu4RIcH7oR1WmDBy1IG9ibdz9dKabS2+1GpzE4eB4frR+Fe10ihZbiW bexgBQOGjpbGf4JgNNi/paojRzgNuRqGpT1/7b0mcY6TNRVcm9EsUyVw6Y8XbDDCsDSx uVekhU5whNLhxu0EIFc4ABRPpRRYIf5KcwXLNckdKctNXPz25s0uaqWhTlHrv6VdqkNS x305XkUhOEzUo36oq+gLg7z9jnMxVvYNPAStapQS51bcKtSB1FJTxZYgfhy0m39RIR5i wg== Received: from nam10-bn7-obe.outbound.protection.outlook.com (mail-bn7nam10lp2104.outbound.protection.outlook.com [104.47.70.104]) by mx0b-00273201.pphosted.com with ESMTP id 32a8n7bqgk-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 17 Jul 2020 09:07:06 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aA0QI6Cl3tM7pybg22WONapcjbSDLzp8xFhoBh7hf79Dpz4GV53+CpyJt9bEovxiUyYOVdCIViZ0ZD7Rr5rUx6e5ecx4YhMlCbml1eLUOom+Wffjgth4OfnHhjHGQVkisVT3+tWQ+AKp7inX3KCsyAuLpsGC9eEy7CtX3wxzTEorBGErVZdN06qDkdZRrf+MEuhCBQsBjNR7h+cJJSpqC8hjNoQ5O/OQvVvxFCNFsOK69VE1/EXlwVgGzgCcL5LnKnkcwdSR84OHtWXfQOQevUNAPVAfOMQRsXCOpUqbBr1O4CkzY/hhijSfL2GdXT16KH2QRaMV5fOPA2vpQV2q3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QBsj1cqn732Kaxk4iw8HU8tq9eJm9MXCkChhw5Ff+UE=; b=Mt/TYmeYgHTIT0s8mSirZESrEFJSeJ3JEHGmWTebqpZBsSJiu/VQgvdHKRpHRb/7tOYhjWD/Whl7HKhXXQPXf07NAQkYb5nYO9h7XrdgzTlodcNiuLUi0An2dQ6glkSBvaLN16CmGicS7LYJPlkNAjaQNFAi3mmqFxU1A8AL2bsdcbciCde+V/OOPd2hM3B+3LisrGL3fsfJUAYjAsPLOcVFNtNywk0fdKGgJwTvYe83Sm/slACj5LNSDUv3uXZGurLzQbk2KQM69yiQ2t/Q9kySB2PFtMFH1QjG7ijiQUEbGVOJwrhAOWnGOu/WTScmhjknllBE6uiCUksS1xr7HA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=QBsj1cqn732Kaxk4iw8HU8tq9eJm9MXCkChhw5Ff+UE=; b=QWHUreQCMKtfQClhMrf1GomWC1twpYmNgIVBo6HL5qZP5AMfd0y9RXtnZP9fmldTbKuYI1Pxus7z+QHTalMrB9zjHNLpXNvwdNV1ydW2DqGuSiby2S7oTNgTIhdOmgfIbEtfronJnTooE1wyciKr/ci0PaTIay3BwxzlTTLI1ew= Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM5PR0501MB3910.namprd05.prod.outlook.com (2603:10b6:4:77::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.9; Fri, 17 Jul 2020 16:07:04 +0000 Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5%5]) with mapi id 15.20.3195.022; Fri, 17 Jul 2020 16:07:04 +0000 From: Guy Fedorkow To: "rats@ietf.org" CC: "Eric Voit (evoit)" , "jessica.m.fitzgerald-mckay.civ@mail.mil" Thread-Topic: TPM-based attestation Thread-Index: AdZcVDyk1dTscE8WTAG3E3Vf2bzwMw== Date: Fri, 17 Jul 2020 16:07:04 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.10] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: a7007779-dffb-4113-da93-08d82a6b729f x-ms-traffictypediagnostic: DM5PR0501MB3910: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 4HCzq+KjkPn5OaAIX8nOD11NjqSZE1x3WVgwvvDKi0RYbP3ZsOE69SMNVlcVt2kxuaenMEzRpqTMgQWBhuVcOM78gjuHnycBfTSLFbPTznZwpCLcL+pLIvsrcKynl4JYLp+0sYE+rixzLobhqAXaYQjrCEBrPJiUBS/P1OPfFJpqWttwIJZEOrWQhErCUX6OCsuNi+LC0EUeCr493tzBTXSXbZ5X/ELui5n6frgweL+ZyFmf5Y+ip2IingvIb/vTHlnzO2A64RmI1xDBUx9vhtnlaoW34r33F3X75Ir+h/KR5WMBCbCCVRIDXbv9FEHdOIFD7iRi3TWusDv3dukpQNvFSZuuZSKoQdyh/gT/TzBQL8GczB380iRpc+2hc7R/n5Vm/Mtr7sHr4AA1ArsRKg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(346002)(136003)(366004)(376002)(39860400002)(5660300002)(33656002)(9686003)(52536014)(8936002)(966005)(26005)(186003)(4326008)(6506007)(83380400001)(54906003)(66446008)(166002)(2906002)(66946007)(76116006)(8676002)(4744005)(55016002)(66476007)(7696005)(66616009)(64756008)(66556008)(3480700007)(316002)(478600001)(99936003)(86362001)(6916009)(71200400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: J+IgArk7fKxXPki8h1p7jg6/1vcLSRwLzklllKI2HeDD6o1wQxe4exiwP1LvEav6yLCyg48NvwtPmMR5453kMb+1t+IyK7JajFtMf36EJFqHvyFqJ7rYYD6FRGHmTgoKcljFu9VO4WKI2oxZd1uuDhjx2RZxsjsgtotgAqt1FQP4IKOQhgFP958VDyVsSqAO2g+z2vJnLlxq25RWa1Od+mnKNffx3G0HxycBPgawof5xi2n3f4uBe5ftQA1hAz+7nk+xYIhV58Ae7UxmqolPI/fK6d9Nnwln/D3Z4gx7M2ab9WGsadE8CxTh0xB05tZ8AXoi3vQmesISK1KPxXBwchpLIeuD3/emhEwnwFFIwtVayP6QUxXXmjOTBTZd5CejixixeVpxDPWy7N4uRTbj4NJ8sQZrdVLI76a/ovjpN6O3gCpVyIwkdKKA5Wpk9C7gCQmohUHi0jFPdVzuz9Cvhgdb92ixkzFOKV496UWE3RA= x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0090_01D65C32.C7D98590" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a7007779-dffb-4113-da93-08d82a6b729f X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2020 16:07:04.4621 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: SKt/ttmFBYU9O0G+8oWrVU1YgTyI6srZrboFbQ20xK823yVtqydumtjQGOLZmPe6maaxJD+KLqHq+0mW0qV05A== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR0501MB3910 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-17_08:2020-07-17, 2020-07-17 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 mlxlogscore=968 phishscore=0 adultscore=0 clxscore=1015 impostorscore=0 spamscore=0 malwarescore=0 priorityscore=1501 mlxscore=0 suspectscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2007170115 Archived-At: Subject: [Rats] TPM-based attestation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jul 2020 16:07:21 -0000 ------=_NextPart_000_0090_01D65C32.C7D98590 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0091_01D65C32.C7D98590" ------=_NextPart_001_0091_01D65C32.C7D98590 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit We've checked in an updated copy of https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest- 02 and expect to have a short slot to discuss the modest changes during IETF 108. I think the doc will need another pass to align the terminology with the RATS Architecture. Henk, Ned, can you suggest when you think the terminology in the Arch doc will be settled enough to make it worth reviewing that specific topic/ And if anyone sees topic areas that the document is not currently addressing properly, please let us know. Can't change it before IETF 108, but if there are suggestions, we should discuss them on the July call. Thanks! /guy ------=_NextPart_001_0091_01D65C32.C7D98590 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

 

We’ve = checked in an updated copy of

https://tools.ietf.org/html/draft-ietf-rats-tpm-based-netw= ork-device-attest-02

and expect = to have a short slot to discuss the modest changes during IETF = 108.

 

  I think the doc will need another pass to align = the terminology with the RATS Architecture.  Henk, Ned, can you = suggest when you think the terminology in the Arch doc will be settled = enough to make it worth reviewing that specific topic/

 

  And = if anyone sees topic areas that the document is not currently addressing = properly, please let us know.  Can’t change it before IETF = 108, but if there are suggestions, we should discuss them on the July = call.

 

  Thanks!

/guy

 

 

------=_NextPart_001_0091_01D65C32.C7D98590-- ------=_NextPart_000_0090_01D65C32.C7D98590 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISJTCCBd4w ggPGoAMCAQICEAH9bTD8o8pRqBu8ZA41Ay0wDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEwMDIwMTAwMDAwMFoXDTM4MDExODIzNTk1OVowgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw12 7c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnby qTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuG FFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnH a4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQN wZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQ v0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV 4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaNCMEAwHQYDVR0O BBYEFFN5v1qqK0rPVIDh2JvAnfKyA2bLMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MA0GCSqGSIb3DQEBDAUAA4ICAQBc1HwNz/cBfUGZZQxzxVKfy/jPmQZ/G9pDFZ+eAlVXlhTxUjwn h5Qo7R86ATeidvxTUMCEm8ZrTrqMIU+ijlVikfNpFdi8iOPEqgv976jpS1UqBiBtVXgpGe5fMFxL JBFV/ySabl4qK+4LTZ9/9wE4lBSVQwcJ+2Cp7hyrEoygml6nmGpZbYs/CPvI0UWvGBVkkBIPcygu xeIkTvxY7PD0Rf4is+svjtLZRWEFwZdvqHZyj4uMNq+/DQXOcY3mpm8fbKZxYsXY0INyDPFnEYkM nBNMcjTfvNVx36px3eG5bIw8El1l2r1XErZDa//l3k1mEVHPma7sF7bocZGM3kn+3TVxohUnlBzP YeMmu2+jZyUhXebdHQsuaBs7gq/sg2eF1JhRdLG5mYCJ/394GVx5SmAukkCuTDcqLMnHYsgOXfc2 W8rgJSUBtN0aB5x3AD/Q3NXsPdT6uz/MhdZvf6kt37kC9/WXmrU12sNnsIdKqSieI47/XCdr4bBP 8wfuAC7UWYfLUkGV6vRH1+5kQVV8jVkCld1incK57loodISlm7eQxwwH3/WJNnQy1ijBsLAL4JxM wxzW/ONptUdGgS+igqvTY0RwxI3/LTO6rY97tXCIrj4Zz0Ao2PzIkLtdmSL1UuZYxR+IMUPuiB3X xo48Q2odpxjefT0W8WL5ypCo/TCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJKoZI hvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VS VHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMwMTIz MTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGln byBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkqKtLN nFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfbM3wc caNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+LbnTe ef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmHfpsE kzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMBAAGj ggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy/Ava lNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlvbkF1 dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9v Y3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiMAN0X 13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vhNn9d NqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHitcPr 5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDpVRH9 9lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7T2ww C+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI9oKS ChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RIZllX 4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDonM8V/ 2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQz3lC NObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMIIGKzCCBROgAwIBAgIRAPuElTZ4 EhaY10ByhNJltnIwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVh dGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRl ZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0EwHhcNMTkwODI0MDAwMDAwWhcNMjIwODIzMjM1OTU5WjCCATcxCzAJBgNVBAYTAlVT MQ4wDAYDVQQREwU5NDA4OTELMAkGA1UECBMCQ0ExEjAQBgNVBAcTCVN1bm55dmFsZTEcMBoGA1UE CRMTMTEzMyBJbm5vdmF0aW9uIFdheTEeMBwGA1UEChMVSnVuaXBlciBOZXR3b3JrcywgSW5jMR4w HAYDVQQLExVTb2Z0d2FyZSBFbmdpbmVlciBMYWIxOzA5BgNVBAsTMklzc3VlZCB0aHJvdWdoIEp1 bmlwZXIgTmV0d29ya3MsIEluYyBFLVBLSSBNYW5hZ2VyMR8wHQYDVQQLExZDb3Jwb3JhdGUgU2Vj dXJlIEVtYWlsMRUwEwYDVQQDEwxHdXkgRmVkb3Jrb3cxJDAiBgkqhkiG9w0BCQEWFWdmZWRvcmtv d0BqdW5pcGVyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Fewgz3OFG1Go3 cuoLYIbLNRTSEFgN+GLUaqB6g5VuCf0UTvgARSlxgDmsvE5qwTtb8JOtJ64OylVNvz28uslsfvg4 WCc0InZUo1B6JkgNamxa3HI31h63s5wVm/wZgglg5Dv7WH7gmAPrgeoWpBC2GN1sxWHfcJOi2fzg M5LWst0Iwz4M7vqFsZ77AOkUFDNm5p19Fu8HRjVlsE0fNGieZB5GEiL2CN2YoxyOKrJdqWHNMkK8 Q5owvlDnSR0tb8oJgHDX8EESSo5TDA5zqnva48zFfFWCrOdobNgf1To4uBskX6B+QEmrSNLuSdpK JOHw9IdrPofgpjZCmFwvtS8CAwEAAaOCAc4wggHKMB8GA1UdIwQYMBaAFAnA8vwL2pTbX/4r36iZ Qs/J4K0AMB0GA1UdDgQWBBQPfL+xFDoZAlQisKraMq/Y34eQGjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwQAYDVR0gBDkwNzA1Bgwr BgEEAbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVu dGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAC hklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAg BgNVHREEGTAXgRVnZmVkb3Jrb3dAanVuaXBlci5uZXQwDQYJKoZIhvcNAQELBQADggEBALilLU71 sn7XVNFoUU4MqcHXXFiFiOjCQmq1nqijMa6L4fKm/VX9LZtrsQs3CZTUiHuW2pyLapLVIEXdubNX L877oIVJmeAoSWz1+AYelK6CIpuGUUcGSsXKd4Xl9yOTrmLb7PTjrRpXsWSHJi//jrXTrR/X6M+U TterfzhR5gYPFyvX65Zie9M7k7V2yB3YJJPzT8EtfrJc+eDzYAgiWK8X/ToMZOG7noa/Er8FEARn joL7pKHVOkHTOM9UNaublWlhiUEzzXx9kYPKjgqjAetRo4zh1KBFm9MBlXeigAVBx+BQpP0OdmHb 5vcX3pUR4lkRpnVeLKFR++q6z+bViYAxggRnMIIEYwIBATCBrDCBljELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2Vj dGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIRAPuElTZ4EhaY10ByhNJltnIwCQYFKw4DAhoFAKCCAo8wGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzE3MTYwNzAyWjAjBgkq hkiG9w0BCQQxFgQU80UpE80unZ4wuG1rQ2uDNs/r5towga0GCSqGSIb3DQEJDzGBnzCBnDALBgkq hkiG9w0BAQcwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIaMAsGCSqGSIb3DQEBCjAL BglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBvQYJKwYBBAGCNxAEMYGvMIGs MIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENs aWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA+4SVNngSFpjXQHKE0mW2 cjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+ MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQD7hJU2eBIWmNdAcoTSZbZyMA0GCSqGSIb3DQEBAQUABIIBAGHQLH+JeoNG3f3TVwps XSAK3X1QVLZ1kmCuFZptN7E+NKfDQlW9x0DeQ1olIdv98P+1A2PhzTBw5faHhaCx6whNxeeKUrGM Hv88l4OMZ6Onxc9igOJulFU9uhldl4S7kaSkLhvX7WteJhplmz6uCGHLKIiX1VINAbF0PnMRtQcd u8doSXoDtsuhgxr1d9CZ3hRzCjSnFDGQMRUGww3KNvW6v5kzpeBKBRwO4dtgdSIMvZs4wVvotFoz mNvcwcD+g6e2Bj6K+2Kd1Jx76/lxBxVG9TndJdcq/r8e9Hum+0kgVV6yp9dwgEET2dhqk2hmNMTj dedBfxlyoWsH1VDAXsIAAAAAAAA= ------=_NextPart_000_0090_01D65C32.C7D98590-- From nobody Mon Jul 20 12:41:23 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 471E53A0E54 for ; Mon, 20 Jul 2020 12:41:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=intel.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0proOBfRfxWK for ; Mon, 20 Jul 2020 12:41:19 -0700 (PDT) Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 656A53A0E55 for ; Mon, 20 Jul 2020 12:41:19 -0700 (PDT) IronPort-SDR: ojRaE7vhvO8FNPwFLWNu2mqQWC4Vxm5r07fJQ3n7UQ2nreIbXL6ZZ1uWuovJ4H0UF996tWbiko X6B4SbJC2jcQ== X-IronPort-AV: E=McAfee;i="6000,8403,9688"; a="137483303" X-IronPort-AV: E=Sophos;i="5.75,375,1589266800"; d="scan'208";a="137483303" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by orsmga106.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 20 Jul 2020 12:41:18 -0700 IronPort-SDR: VQs7SDBNpLOzhNf+tySv6WbxBt22qlykc0HfzublhrF5WRALFDvBHvrXNJGaw0U4V/tmsma7C1 OmOBkcPxF04A== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.75,375,1589266800"; d="scan'208";a="431732814" Received: from fmsmsx107.amr.corp.intel.com ([10.18.124.205]) by orsmga004.jf.intel.com with ESMTP; 20 Jul 2020 12:41:18 -0700 Received: from fmsmsx609.amr.corp.intel.com (10.18.126.89) by fmsmsx107.amr.corp.intel.com (10.18.124.205) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 20 Jul 2020 12:41:17 -0700 Received: from fmsmsx604.amr.corp.intel.com (10.18.126.84) by fmsmsx609.amr.corp.intel.com (10.18.126.89) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Mon, 20 Jul 2020 12:41:17 -0700 Received: from FMSEDG002.ED.cps.intel.com (10.1.192.134) by fmsmsx604.amr.corp.intel.com (10.18.126.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Mon, 20 Jul 2020 12:41:17 -0700 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (104.47.56.169) by edgegateway.intel.com (192.55.55.69) with Microsoft SMTP Server (TLS) id 14.3.439.0; Mon, 20 Jul 2020 12:41:17 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=adEbshgWB6cWMNlEnH59kShvtTiZxjkS2Ox+T8qpTlZe0XcTXXKK174B8AzKzeE67MlfH28rHpKYDexaeYjIawdQilCSlRZPuI8joNBcSr0wMNXYhB5ugGmH9RGo5mLxBjNSazGxIg76z8H9qAkGJC80wH3rNAPe290uq7P+y6aDNaYq7f9rwLSJWKoaPtH1hblL4abBjwST0q/7MW9VsUYDfsCHmB+CDVrvpB36tF3yjCKT+E06tKTVG7XLgKSEPZS4mr7yiMCp9E4LdU9Xl7gSD1borujlAt1+6S7TRQoppbWFrSOptsziCp00dmoiIFwQ6eY0VURmmjFPngx18A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yZSiWxyKqkW8yhWEP4h7Ec94cwTstKLCsxlH6uRBCv4=; b=ehoQB3oxEQbA5A2RbqDcQeHErf/s0KEri314Y1ce/cuD2xWV5HDHMqlpV0CAKa7dVNXzu4XJIoYU7weU5uRmA5s/w+UBaHT8xDHVxnX53uc4dhPNmkaf914KgqIJ/u+2/refrUUMZ9jTG3QcJ/0LY+nxG0wI2UtIK4icFxa3bdiIzwOHtwcwEDi/C1q1q8NeMA5NQwn7mdK4fZJCcKcSHbfRd8ORgUfCAbeEPrS2ZzvJkFo2m/r1h4eKWXt8WuA5cha6uiq6GKFTlDJZJ4LWvDnMmLyqjW8zM3kiZDo7eFFgcKDD1+dwz3d/K8L2/h/wOYMug8CE9FTIYcTU+LeiMg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=yZSiWxyKqkW8yhWEP4h7Ec94cwTstKLCsxlH6uRBCv4=; b=BKalF+2RCtwI0yne47I/5U+ffip5iKu+UOIhsx4+AYIaGexjescEys8zD+Ev4v+yXLk0WaGvpXBYtx1Oh6bEjg7xJ8MDr7sHVwEspl+OnP8HfGEVsJKIG/wSEyXBNYpH67qQy7Y+6yjUok326m5Mu+NBdvbuMYBjrI7TuoBfIKk= Received: from MWHPR11MB1439.namprd11.prod.outlook.com (2603:10b6:301:9::20) by MW3PR11MB4650.namprd11.prod.outlook.com (2603:10b6:303:54::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.17; Mon, 20 Jul 2020 19:41:16 +0000 Received: from MWHPR11MB1439.namprd11.prod.outlook.com ([fe80::acd1:6189:65ad:9750]) by MWHPR11MB1439.namprd11.prod.outlook.com ([fe80::acd1:6189:65ad:9750%5]) with mapi id 15.20.3195.025; Mon, 20 Jul 2020 19:41:16 +0000 From: "Smith, Ned" To: "rats@ietf.org" Thread-Topic: IETF 108 RATS scribes - looking for volunteers Thread-Index: AQHWXs27L8CAXvOIQEWlLOpnImIv9w== Date: Mon, 20 Jul 2020 19:41:16 +0000 Message-ID: <24B81849-621F-409E-95CE-CD188BA1419A@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.39.20071300 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=intel.com; x-originating-ip: [50.53.43.22] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0ec7c0dd-7942-4e3d-8692-08d82ce4de0b x-ms-traffictypediagnostic: MW3PR11MB4650: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:660; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: J4pkA3ZMghzg5l1l5sWqy3hwqXgvdHmpOdFjUbdXa3HU8Y1tSlxUOgm7ej2ltvFHDfZNwrjPfB3wCngCqcNDeW4JLoqCHqbeGaqtSYa0vEHQNEV/0o6Az7vMq++qoOFoPqFdd9TXAG6IfLJv36y+pwU4R0Oyhbncl/zJqwfuNHjN9nSjC4d6TTRbNWGrUuxvVN9m278olIExgPad8MfpnCt8LnxTt2pe9wZhXACCRC6bitrh4W7h0wJq0eAGzpf3lXzB825svipuETJtnAwZom37oEgJUT6uaZT/4VZQCiSNXMhLJVRkFadDEADUrA9PoiNtpfBk/EKJT0H2gJvjanixmf+7iW2KBTkiozH7HhvQexhGvIY1VJxLMNavRaTTMBzsqUp35+7xp2GgAnA/fw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR11MB1439.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(136003)(376002)(396003)(39860400002)(366004)(83380400001)(6512007)(8936002)(186003)(316002)(5660300002)(36756003)(33656002)(76116006)(86362001)(2906002)(6916009)(8676002)(66446008)(66946007)(64756008)(66476007)(66556008)(2616005)(6486002)(478600001)(71200400001)(966005)(6506007)(26005); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: R/IH3bVcWr1XoUT0qqQgcI458DiPi8hdOxoWajWrvJWGWv2BWFAKMmPHgC7BTr4gTqoBb5uSQWvWpDWdbvhnLY0YEFI4kE007pW3cH4SNnzkFG6/p3wCufzRYO5dOYhh/iSg5SOZeA5YIcbbMetb7NIgmf8zZTIh0sD+HGUmRdQqoiWvrB+hqvJytGpJTiibx7Cj8sYh/1T+ajvSSIRLGYIs5+LCmU8yZcHJ8ed5Bk0LaH3SU6epltPgAxk4L+jsafeG9ExsWyLTJf+OC/5oijqJAVjA8rsJZJqv1RbfxNnnFURgW29+jbi36EoC8DuU1L9o6zCES0YzapIcStzKzJQ4T+rOLoLLXGwzbxuTq/NcM5pbym+IkneSX1N++V2wBw4v6+z+YoHWU5SGSlpvoz6rvG3E9nJU+xe7hRFNj9CHD0MOD/wPxDLz1CVeSnBti1h1CKMK2a9CLJq//TwqY/qMMgY36GBIPLgMqlrFndE= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <41AFD84681405846B7F41AA7C46A2BE3@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR11MB1439.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0ec7c0dd-7942-4e3d-8692-08d82ce4de0b X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2020 19:41:16.1258 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: cn0Jp+ZP9yXseQ65ImuzlQHKltwsj2/jkcR7CqLWsRxwkUl0eoceXzuC4k+YIdAStpDPgYUoeC88Ezn6hE2CKw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR11MB4650 X-OriginatorOrg: intel.com Archived-At: Subject: [Rats] IETF 108 RATS scribes - looking for volunteers X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jul 2020 19:41:21 -0000 SGVsbG8gZmVsbG93IHJhdGl6ZW5zISANCldlJ3JlIGxvb2tpbmcgZm9yIHZvbHVudGVlcnMgdG8g c2NyaWJlIGZvciB0aGUgdmlydHVhbCBSQVRTIG1lZXRpbmdzIG5leHQgd2VlayAobWVldGluZyBh Z2VuZGFzIGJlbG93KS4gV2UgbmVlZCBvbmUgSmFiYmVyIHNjcmliZSBhbmQgdHdvIE1lZXRFY2hv IHNjcmliZXMuDQpUaGFua3MsDQpOZWQNCg0K4oCiSmFiYmVyOiB4bXBwOnJhdHNAamFiYmVyLmll dGYub3JnP2pvaW4NCuKAok1lZXRFY2hvOiBodHRwczovL3d3dy5tZWV0ZWNoby5jb20vaWV0ZjEw OC9yYXRzDQrigKJOb3RlcyBpbjogaHR0cHM6Ly9jb2RpbWQuaWV0Zi5vcmcvbm90ZXMtaWV0Zi0x MDgtcmF0cw0KDQoNCg0KUkFUUyBhZ2VuZGEgZm9yIFR1ZXNkYXkgSnVseSAyOCwgMjAyMA0KLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoqIEFnZW5kYSBiYXNoICg1bWlu KQ0KDQoqIFJJViAtICBHdXkgRmVkb3Jrb3cgKDE1IG1pbnV0ZXMpDQoJaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLXRwbS1iYXNlZC1uZXR3b3JrLWRldmlj ZS1hdHRlc3QvDQoNCiogQ0hBUlJBIFVwZGF0ZSDigJMgRXJpYyBWb2l0ICgxMG1pbikNCglodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMteWFuZy10cG0tY2hh cnJhLw0KDQoqIE5ldHdvcmsgRGV2aWNlIFN1YnNjcmlwdGlvbiDigJMgRXJpYyBWb2l0ICgxMG1p bikNCglodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1iaXJraG9sei1yYXRz LW5ldHdvcmstZGV2aWNlLXN1YnNjcmlwdGlvbi8NCg0KKiBJbnRlcmFjdGlvbiBNb2RlbCDigJMg SGVuayBCaXJraG9seiAoMTBtaW4pDQoJaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv ZHJhZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50ZXJhY3Rpb24tbW9kZWwvDQoNCg0KDQpS QVRTIGFnZW5kYSBmb3IgV2VkbmVzZGF5IDI5LCAyMDIwDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCiogQWdlbmRhIGJhc2ggKDVtaW4pDQoNCiogQXJjaGl0ZWN0dXJl IC0gIEhlbmsgQmlya2hvbHooMTUgbWludXRlcykNCglodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLw0KDQoqIEVBVDogQXR0ZXN0YXRp b24gS2V5cyB0YXhvbm9teSAtIExhdXJlbmNlIEx1bmRibGFkZSAoMjBtaW4pDQoJaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLWVhdC8NCg0KKiBUcnVzdGVk IFBhdGggUm91dGluZyDigJMgRXJpYyBWb2l0ICgxMG1pbikNCglodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC12b2l0LXJhdHMtdHJ1c3R3b3J0aHktcGF0aC1yb3V0aW5nLw0K DQoqIFNVSVQvVEVFUCBFdmlkZW5jZSBhbmQgYXR0ZXN0YXRpb24gY2xhaW1zIOKAkyBIZW5rIEJp cmtob2x6ICAoMTBtaW4pDQoJaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt Ymlya2hvbHotcmF0cy1zdWl0LWNsYWltcy8NCg0KKiBVbnByb3RlY3RlZCBDV1QgQ2xhaW1zICDi gJMgSGVuayBCaXJraG9seiAoMTBtaW4pDQoJaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9k b2MvZHJhZnQtYmlya2hvbHotcmF0cy11Y2NzLw0KDQoqIFJFU1RmdWwgYXR0ZXN0ZWQgUmVzb3Vy Y2VzIOKAkyBUaG9tYXMgRm9zc2F0aSAoMTVtaW4pDQoJaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtc2hhdy1yYXRzLXJlYXIvDQoNCiogTWlsZXN0b25lcyDigJMgQ2hhaXJz ICgxNW1pbikNCg0KDQoNCg0K From nobody Tue Jul 21 12:08:18 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE55F3A07FB for ; Tue, 21 Jul 2020 12:08:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.119 X-Spam-Level: X-Spam-Status: No, score=-2.119 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=0CNwW5SZ; dkim=pass (1024-bit key) header.d=juniper.net header.b=YOGy78AH Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gnk5WUCejT2z for ; Tue, 21 Jul 2020 12:08:15 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89DCD3A0800 for ; Tue, 21 Jul 2020 12:08:15 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 06LJ2GQk008403; Tue, 21 Jul 2020 12:08:15 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : content-type : mime-version; s=PPS1017; bh=1RbYMTVvWgTol3esmETcJ21pzTSbbjsziAPPfP3WSwU=; b=0CNwW5SZyUbfhdHugoT/duf87aj3ur36CFXqYvlQEc0iUJHUTYJnHktVN7wmXH/b/g0+ sytLHwIg9XA7EEMuElm7JYAKWXkd9k4dZFJWbs2EDwaeNYb0ARKGDe8WzEHEaydlMPvC HQ/6V838oK8kXUMPentcSnz/U9K1Avw3JaePQ40+WW8U8gIcglO+ni/ojn9UtqyVFi+1 13M9Ov6M5vLWClCJBCLdM5wZ93Ap5RP85513PNKUucwCbUnrYIrOCmTfeujhG/jXbEnp arRGMmv4h3EjT0d7APPOaPMHg71WB/NHvaQqG7bDRsdI6JeTz5kFuN0eENariiozpk7V xA== Received: from nam10-dm6-obe.outbound.protection.outlook.com (mail-dm6nam10lp2102.outbound.protection.outlook.com [104.47.58.102]) by mx0a-00273201.pphosted.com with ESMTP id 32c03nw0n6-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 21 Jul 2020 12:08:15 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=i6JQ2Pb/y1jjAzmaULQzPy3lalFTLLHRXfhf2wzggn/GEqLtctD3DjyfTkN2GHJUap5Vzxjm4mZ+2qy6aFk+HCzVr48DFkT4adnoEwUdedtBiAFNDxAaYg8TicTmjedDngu/hGz9BfDbgqJWzCHQiDGXnjCGjOJ1TIFpaxFIwxP2CtXmqnEOoEearsghIFQ7cogB2vg/QbsZaoj9RjrqX4bQmc340JTinOz6LQBXq+F7Iy5qjkLpjVIVOxOEz6CqxFIOxH/qxlD06CTrntAwFChWsNESJoj9HLUCfiKqdRK6k8AzPmS6wH3eKOKBWcsZcF5syj5KC9FEx1+zqmSjQQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1RbYMTVvWgTol3esmETcJ21pzTSbbjsziAPPfP3WSwU=; b=CrQlcwgXcy0p5PpYzCd0SDEjvxttcEGtesm45yV5kzWWBmHHyQrnb0UbCM4VdvdIPN7PqxY/g2uk5HPtr2HxaCq3ZCTOxMkw9IoXbSv3K4tqsMGMSd2Y52ue0P3GHT5ErAP7bdeRgqLZXX6OuHV9pFJce1qnp+9vUmKdSv3l+LV+hFsX1q542Jmdz37oZtGoqna4OCQ3nsO2Kzm73MXlwa9uwTH0KJYbFWKgPzx8/Sk827/jcodU6ne8+8pr0WgbjOQakaIUa9aXI7CHlt5s+Vxfu2KxoychWA5WpiZyCWFSL7OU0pXfxSBYvsUGuTjsI9+aK2TIsfa+CN2y6txpEQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1RbYMTVvWgTol3esmETcJ21pzTSbbjsziAPPfP3WSwU=; b=YOGy78AH524/cERBcaj7PMBlJWPCHrOVlO507vBfDhPtJu9X4/BCcdN8cJ3lQ0GrB8ZcUV4ogZy/R6iFcp3WYs5Jp0sp35Pl6alYISUY9Gese4RND2CdpkCSGDbIWWQxJ0jfSCOEN8VilzkenCQJV6UgLAyAghqdD7XJu6696jU= Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM6PR05MB7033.namprd05.prod.outlook.com (2603:10b6:5:14d::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.15; Tue, 21 Jul 2020 19:08:13 +0000 Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5%5]) with mapi id 15.20.3216.020; Tue, 21 Jul 2020 19:08:13 +0000 From: Guy Fedorkow To: "neteq@trustedcomputinggroup.org" CC: "rats@ietf.org" Thread-Topic: TPM at IETF Thread-Index: AdZfkftBxrOCESjyTh+kWFfHyIZLSw== Date: Tue, 21 Jul 2020 19:08:13 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-07-21T19:08:11Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=fd6cfa9b-2e2b-4c28-a2cd-0d35e0b9c7dc; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action authentication-results: trustedcomputinggroup.org; dkim=none (message not signed) header.d=none;trustedcomputinggroup.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [73.89.130.65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: de19687e-f667-4195-ca5f-08d82da96a86 x-ms-traffictypediagnostic: DM6PR05MB7033: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7219; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: WWjfaqqQ0LbKUzfjM0opJSN4vQCR7N8Zr3rkp2/4Ldz1tdGPm7iIF4c+57WAPKOD8D/NkZUKn3PkoFFVUyfwg8WIeIBXYNA0b+pyDlRPvdU9Qzu0uuGTUgKjNVbm9XG/9WOG2IElHBB4/McLjXoQfXjCHCzS83J+PAuvMS8JzocsaZIJdcH+v3qiPGMuh+FEd8w/ke4YYwZusCPAt11DWhD6qUIniLLR0xDV5EbGI9c3v+qItQ6BJisDEK5kTnLOLMg23Djexx3HWjzKKm9QhRFkOustO/82mVbRhaEsZvcwbK++RPd20G35Df4N/4Qb5gaN/iLqgf8IN3W80hIbdiYNUy0Ub2Uz54iqQwKbcX3kKFv9C8nXyG3M+UF7xtg+T1Nw3o5cABxg2L6O07TFyw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(76116006)(86362001)(83380400001)(6916009)(71200400001)(66556008)(66446008)(26005)(5660300002)(52536014)(55016002)(7696005)(498600001)(166002)(4326008)(966005)(8936002)(6506007)(3480700007)(4744005)(2906002)(66616009)(66476007)(8676002)(99936003)(66946007)(33656002)(7116003)(186003)(64756008)(9686003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: FZzcetvz0z8tCZ6MVTq29DTBt24axuJhYSk9SoBUNbAEZY1IZmQ4Ko0IGaLEnt+iamnA/hVpnI6xMmmKOWreH6x5wA6162n6VMhDbrKU0khzqDFSNFYtepTooNai3SxqQr0dz90nCl8nfnWj5TgtgHTOmws/vNe242Dhk5e6nixIHAszzKz5j99mCId4uM2JRobKqv7KZh7kUKKWvqUXXqjKR0XHlLMnPClRNLhpY4Et1vNw9KJrzm9BYrcqPxKK7jU4xMi+qm2HdD0MCXtrUI+v6HoyqiZgCNZJ1iZDtP+Y9ScjKk41uNnYs3+lQ+V6ogx1D0EK0+tJjmNU1KQffJfGXO667eHYfUQKck5cxBx5yXqUlmn2AAUI5/hYv0KkTyq93Q5bLdWbnh77u6NiGiH/ZtLZLn6xUBK8qbKjgBfk2UE4dmO8hb31eiAJDLk0BVArJsuFQ9mVGAdYpsWSfVYXCf8pjAnYaXiC+hcsx4U= x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0150_01D65F70.C0057F90" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: de19687e-f667-4195-ca5f-08d82da96a86 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2020 19:08:13.1677 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: kYRXjTI00W+yObRSuBAeR3GnYCp6pvBCw4gqTaK2pG5CFcY+m5GjxlD5aQOt1O2AhVbfo6OmEmOUfOZcyS2Dnw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB7033 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-21_14:2020-07-21, 2020-07-21 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 clxscore=1015 adultscore=0 phishscore=0 impostorscore=0 mlxlogscore=732 lowpriorityscore=0 mlxscore=0 spamscore=0 suspectscore=0 bulkscore=0 malwarescore=0 priorityscore=1501 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2007210126 Archived-At: Subject: [Rats] TPM at IETF X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jul 2020 19:08:17 -0000 ------=_NextPart_000_0150_01D65F70.C0057F90 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0151_01D65F70.C0057F90" ------=_NextPart_001_0151_01D65F70.C0057F90 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit We've checked in a new version of the Remote Integrity Verification document at IETF, in preparation for the IETF 108 "Madrid" virtual meeting. If anyone wants to send comments, contact me or join rats@ietf.org https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest- 02 Thx /guy Juniper Business Use Only ------=_NextPart_001_0151_01D65F70.C0057F90 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We've checked in a new version of the Remote Integrity = Verification document at IETF, in preparation for the IETF 108 = “Madrid” virtual meeting.  If anyone wants to send = comments, contact me or join rats@ietf.org

https://tools.ietf.org/html/draft-ietf-rats-tpm-based-netw= ork-device-attest-02

 

Thx

/guy

 


Juniper = Business Use Only

------=_NextPart_001_0151_01D65F70.C0057F90-- ------=_NextPart_000_0150_01D65F70.C0057F90 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISJTCCBd4w ggPGoAMCAQICEAH9bTD8o8pRqBu8ZA41Ay0wDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEwMDIwMTAwMDAwMFoXDTM4MDExODIzNTk1OVowgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw12 7c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnby qTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuG FFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnH a4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQN wZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQ v0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV 4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaNCMEAwHQYDVR0O BBYEFFN5v1qqK0rPVIDh2JvAnfKyA2bLMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MA0GCSqGSIb3DQEBDAUAA4ICAQBc1HwNz/cBfUGZZQxzxVKfy/jPmQZ/G9pDFZ+eAlVXlhTxUjwn h5Qo7R86ATeidvxTUMCEm8ZrTrqMIU+ijlVikfNpFdi8iOPEqgv976jpS1UqBiBtVXgpGe5fMFxL JBFV/ySabl4qK+4LTZ9/9wE4lBSVQwcJ+2Cp7hyrEoygml6nmGpZbYs/CPvI0UWvGBVkkBIPcygu xeIkTvxY7PD0Rf4is+svjtLZRWEFwZdvqHZyj4uMNq+/DQXOcY3mpm8fbKZxYsXY0INyDPFnEYkM nBNMcjTfvNVx36px3eG5bIw8El1l2r1XErZDa//l3k1mEVHPma7sF7bocZGM3kn+3TVxohUnlBzP YeMmu2+jZyUhXebdHQsuaBs7gq/sg2eF1JhRdLG5mYCJ/394GVx5SmAukkCuTDcqLMnHYsgOXfc2 W8rgJSUBtN0aB5x3AD/Q3NXsPdT6uz/MhdZvf6kt37kC9/WXmrU12sNnsIdKqSieI47/XCdr4bBP 8wfuAC7UWYfLUkGV6vRH1+5kQVV8jVkCld1incK57loodISlm7eQxwwH3/WJNnQy1ijBsLAL4JxM wxzW/ONptUdGgS+igqvTY0RwxI3/LTO6rY97tXCIrj4Zz0Ao2PzIkLtdmSL1UuZYxR+IMUPuiB3X xo48Q2odpxjefT0W8WL5ypCo/TCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJKoZI hvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VS VHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMwMTIz MTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGln byBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkqKtLN nFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfbM3wc caNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+LbnTe ef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmHfpsE kzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMBAAGj ggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy/Ava lNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlvbkF1 dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9v Y3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiMAN0X 13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vhNn9d NqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHitcPr 5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDpVRH9 9lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7T2ww C+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI9oKS ChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RIZllX 4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDonM8V/ 2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQz3lC NObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMIIGKzCCBROgAwIBAgIRAPuElTZ4 EhaY10ByhNJltnIwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVh dGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRl ZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0EwHhcNMTkwODI0MDAwMDAwWhcNMjIwODIzMjM1OTU5WjCCATcxCzAJBgNVBAYTAlVT MQ4wDAYDVQQREwU5NDA4OTELMAkGA1UECBMCQ0ExEjAQBgNVBAcTCVN1bm55dmFsZTEcMBoGA1UE CRMTMTEzMyBJbm5vdmF0aW9uIFdheTEeMBwGA1UEChMVSnVuaXBlciBOZXR3b3JrcywgSW5jMR4w HAYDVQQLExVTb2Z0d2FyZSBFbmdpbmVlciBMYWIxOzA5BgNVBAsTMklzc3VlZCB0aHJvdWdoIEp1 bmlwZXIgTmV0d29ya3MsIEluYyBFLVBLSSBNYW5hZ2VyMR8wHQYDVQQLExZDb3Jwb3JhdGUgU2Vj dXJlIEVtYWlsMRUwEwYDVQQDEwxHdXkgRmVkb3Jrb3cxJDAiBgkqhkiG9w0BCQEWFWdmZWRvcmtv d0BqdW5pcGVyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Fewgz3OFG1Go3 cuoLYIbLNRTSEFgN+GLUaqB6g5VuCf0UTvgARSlxgDmsvE5qwTtb8JOtJ64OylVNvz28uslsfvg4 WCc0InZUo1B6JkgNamxa3HI31h63s5wVm/wZgglg5Dv7WH7gmAPrgeoWpBC2GN1sxWHfcJOi2fzg M5LWst0Iwz4M7vqFsZ77AOkUFDNm5p19Fu8HRjVlsE0fNGieZB5GEiL2CN2YoxyOKrJdqWHNMkK8 Q5owvlDnSR0tb8oJgHDX8EESSo5TDA5zqnva48zFfFWCrOdobNgf1To4uBskX6B+QEmrSNLuSdpK JOHw9IdrPofgpjZCmFwvtS8CAwEAAaOCAc4wggHKMB8GA1UdIwQYMBaAFAnA8vwL2pTbX/4r36iZ Qs/J4K0AMB0GA1UdDgQWBBQPfL+xFDoZAlQisKraMq/Y34eQGjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwQAYDVR0gBDkwNzA1Bgwr BgEEAbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVu dGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAC hklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAg BgNVHREEGTAXgRVnZmVkb3Jrb3dAanVuaXBlci5uZXQwDQYJKoZIhvcNAQELBQADggEBALilLU71 sn7XVNFoUU4MqcHXXFiFiOjCQmq1nqijMa6L4fKm/VX9LZtrsQs3CZTUiHuW2pyLapLVIEXdubNX L877oIVJmeAoSWz1+AYelK6CIpuGUUcGSsXKd4Xl9yOTrmLb7PTjrRpXsWSHJi//jrXTrR/X6M+U TterfzhR5gYPFyvX65Zie9M7k7V2yB3YJJPzT8EtfrJc+eDzYAgiWK8X/ToMZOG7noa/Er8FEARn joL7pKHVOkHTOM9UNaublWlhiUEzzXx9kYPKjgqjAetRo4zh1KBFm9MBlXeigAVBx+BQpP0OdmHb 5vcX3pUR4lkRpnVeLKFR++q6z+bViYAxggRnMIIEYwIBATCBrDCBljELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2Vj dGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIRAPuElTZ4EhaY10ByhNJltnIwCQYFKw4DAhoFAKCCAo8wGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzIxMTkwODExWjAjBgkq hkiG9w0BCQQxFgQUCTBzqnakK1VAeR5pXclSSQ8+Fxowga0GCSqGSIb3DQEJDzGBnzCBnDALBgkq hkiG9w0BAQcwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIaMAsGCSqGSIb3DQEBCjAL BglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBvQYJKwYBBAGCNxAEMYGvMIGs MIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENs aWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA+4SVNngSFpjXQHKE0mW2 cjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+ MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQD7hJU2eBIWmNdAcoTSZbZyMA0GCSqGSIb3DQEBAQUABIIBACa8K6G6DwA9nLSpBOns uTY8t0COBedOowMN1gv3pJFsHczlU4W58HcW5fJxej9o49Oh9g3onQhnKqmq3sfxO5qFlHhz03uJ 95BcVFZ7/veplIy6/HuYoRT9QQIiKlUVo/XSwv3VUqnJ0XsWbD92fWYlOKUmYcUUZAK/uu5nYNDz gclvFwtWSE9B6fkE2InSLr42sZhSpDuUacnDEoiZ9JQ5vGtuBtKxUiF66L6cUNEHzOnQJp+ZTY1I euNYbunzvniva5wobKOKMD9S+gXeUF5rNvdQ/VFiZGerXbPUFaO5gwON9XLKh7ma0AGHeIt3P7lO nwC3EjrWdWgSNP6ylVkAAAAAAAA= ------=_NextPart_000_0150_01D65F70.C0057F90-- From nobody Thu Jul 23 06:08:04 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BAC43A0ACC for ; Thu, 23 Jul 2020 06:07:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FtOQE__Aaf6D for ; Thu, 23 Jul 2020 06:07:54 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9E6B3A0A94 for ; Thu, 23 Jul 2020 06:07:52 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GTCQCXihlf/xmnZsBgHQEBPAEFBQE?= =?us-ascii?q?CAQkBFYFMgXmBHoE9hCmQc5wvCwEBAQEBAQEBAQYBASUIAgQBAQKGaAEkOBM?= =?us-ascii?q?CEAEBBgEBAQEBBgQCAoZFAQuDU4EDAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1U?= =?us-ascii?q?SASAEJA8BBUYUFAgCJgJJAhQNCAEBF4MLAYJcIAQLkWabeoEyhE9BQoNOgTo?= =?us-ascii?q?GgQ4qAYZAhiQPD4FMP4ERJwwDhXQCAwGEcYJgBJJZolYpB4FZgQeBCAQLhz+?= =?us-ascii?q?RBwUKHoJ7iUSEfAaOGpIOiiuUYQIEAgkCFYFqgXtNJE+Cak8XAg2PQwEIh1e?= =?us-ascii?q?FRIEpAgYBBwEBAwl8jgIBgRABAQ?= X-IPAS-Result: =?us-ascii?q?A2GTCQCXihlf/xmnZsBgHQEBPAEFBQECAQkBFYFMgXmBH?= =?us-ascii?q?oE9hCmQc5wvCwEBAQEBAQEBAQYBASUIAgQBAQKGaAEkOBMCEAEBBgEBAQEBB?= =?us-ascii?q?gQCAoZFAQuDU4EDAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1USASAEJA8BBUYUF?= =?us-ascii?q?AgCJgJJAhQNCAEBF4MLAYJcIAQLkWabeoEyhE9BQoNOgToGgQ4qAYZAhiQPD?= =?us-ascii?q?4FMP4ERJwwDhXQCAwGEcYJgBJJZolYpB4FZgQeBCAQLhz+RBwUKHoJ7iUSEf?= =?us-ascii?q?AaOGpIOiiuUYQIEAgkCFYFqgXtNJE+Cak8XAg2PQwEIh1eFRIEpAgYBBwEBA?= =?us-ascii?q?wl8jgIBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,386,1589234400"; d="scan'208";a="23275774" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Jul 2020 15:07:50 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CHCwAYixlf/1lIDI1gHQEBPAEFBQE?= =?us-ascii?q?CAQkBFYFMgXkvb1cwNoQpkHScLwsBAwEBAQEBBgEBJQgCBAEBhmgCJDgTAhA?= =?us-ascii?q?BAQUBAQECAQYEbYVcAQuFcwQkDwEFRhQUCAImAkkCFA0IAQEXgwsBglwgBAu?= =?us-ascii?q?RaZt6gTKET0FCg06BOgaBDioBhkCGJA8PgUw/gREnDAOFdAIDAYRxgmAEklm?= =?us-ascii?q?iVikHgVmBB4EIBAuHP5EHBQoegnuJRIR8Bo4akg6KK5RhAgQCCQIVgWojgVd?= =?us-ascii?q?NJE+Cak8XAg2PQwEIh1eFREFoAgYBBwEBAwl8jgIBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,386,1589234400"; d="scan'208";a="86855190" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Jul 2020 15:07:47 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06ND7lkD026182 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT) for ; Thu, 23 Jul 2020 15:07:47 +0200 Received: from [134.102.151.212] (134.102.151.212) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 23 Jul 2020 15:07:41 +0200 To: "rats@ietf.org" From: Henk Birkholz Message-ID: Date: Thu, 23 Jul 2020 15:07:40 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.151.212] Archived-At: Subject: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2020 13:08:03 -0000 Hi list, our first virtual session on July 28th is approaching. At the last meeting, we highlighted the question: where do interaction models go? Context: there are three quite common interaction models (plus minimal requirements and information elements for them) that can be used to convey RATS Conceptual Messages, such as Evidence or Attestation Results. Most Conceptual Messages should include only up-to-date content (commonly referred to as "fresh") to be feasible. As a result, interaction models directly support methods to show that content is fresh (challenge-response & streamed remote attestation) or don't have to because the content shows that by itself (time-based remote attestation). Problem: Reiterating how the common models work and how they are related in every solution draft can prove to be error prone, ambiguous, difficult to compare in English, or simply be redundant. Solution: Describing them once and then referencing the bulk of it eliminates the need for text cloning, danger of inconsistencies/subtle deviations, and redundancy in general. The remaining question is: where should this content about interaction model go? At the last meeting four options were presented: * Option 1: standalone (one I-D for each model) * Option 2: standalone (one I-D for all models) * Option 3: all three models merged into the architecture I-D * Option 4: each model merged into a separate solution I-D Each option has pros and cons. So, I'd like to bring this question to the list (,finally... I can be quite slow). There is of course the current reference interaction model I-D that talks about the three models and how direct anonymous attestation can be enabled by all three of them. Please have a quick look, maybe that helps to provide some feedback here :) Five drafts reference this one at the moment: > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ We will dedicate some time to this topic on Tuesday and hope for some feedback! Viele Grüße, Henk From nobody Thu Jul 23 08:24:45 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07E053A097E for ; Thu, 23 Jul 2020 08:24:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.619 X-Spam-Level: X-Spam-Status: No, score=-9.619 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=WCYGNCQg; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=KUZb0rdz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P6__7zB-vNIb for ; Thu, 23 Jul 2020 08:24:42 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0E363A088A for ; Thu, 23 Jul 2020 08:24:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2891; q=dns/txt; s=iport; t=1595517881; x=1596727481; h=from:to:subject:date:message-id:mime-version; bh=hyywV+bGk2T4DLWDPfAvbCKbfGKrBSg+RSB+Q5YIV/Y=; b=WCYGNCQgztKaRBFjOO6NxqL37ZDKusvuBRu7Gi+ZIxPIZkVgCxCFq64Z cjpXFh3rwerWOyfvAv9XQTpwzdVqBwkcSUIU/SKQQqS+H5t3LNEZ9c6YN DpKNE44eFCrhnfWUg2q/wQrIUgFcLQwc84Xp4BukVfYWOnd/fWeGdyotb s=; IronPort-PHdr: =?us-ascii?q?9a23=3AQSeigBSQkC+1IWTKHUCY91wb+Npsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBN+J6v9YhazRqa+zEWAD4JPUtncEfdQMUh?= =?us-ascii?q?IekswZkkQmB9LNEkz0KvPmLklYVMRPXVNo5Te3ZE5SHsutZlDOrDu19zFBUh?= =?us-ascii?q?n6PBB+c+LyHIOahs+r1ue0rpvUZQgAhDe0bb5oahusqgCEvcgNiowkIaE0mR?= =?us-ascii?q?Y=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CoEgASqxlf/5hdJa1gHQEBKwEJAQY?= =?us-ascii?q?BBQUBAguBXwIBgSAvUQdvWC8sCoQpg0QCA40tlBiEbIEugSUDVQsBAQEMAQE?= =?us-ascii?q?tAgQBAYRlggMCJDUIDgIDAQELAQEFAQEBAgEGBG2FXAELQwEQAYU1ER0BATg?= =?us-ascii?q?RAQw+AgQwJwQ1gwQBgX5NAy4BonICgTmIYXaBMoMBAQEFgkqCYBiCDgmBOAG?= =?us-ascii?q?Ca4NVhjMaggCBOAwQgwuHUzOCLY92gmeGVYdHlGMKgl2ZaQMen1uSDp8MAgQ?= =?us-ascii?q?CBAUCDgEBBYFVAjaBV3AVZQGCPlAXAg2SD4pVAXQ3AgYIAQEDCXyFEIhyAYE?= =?us-ascii?q?QAQE?= X-IronPort-AV: E=Sophos;i="5.75,386,1589241600"; d="scan'208,217";a="548012824" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 23 Jul 2020 15:24:40 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by rcdn-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 06NFOeo3026442 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 23 Jul 2020 15:24:40 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 23 Jul 2020 10:24:39 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 23 Jul 2020 11:24:38 -0400 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 23 Jul 2020 10:24:38 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nKuj0GjVxv5MWKLic8m3UO9t1Pu5ycXkoRaIgaUsF7vLmCCUHAyq51GjeTMYmtaUFJ+TohOB7Js1E9XTEpKIrpYQTDy30v9+66GMcU6vDMGVhhyd+mTYXLrEznUxE2uhqqxvx5yRJWkLneCHZszAf6BY8Zbj2AY9dGWXG/GEUfaxa9Q3SO0d1tjfRPUbbfijZXAcnkCCP8cB1KH/lzny/bXRmDb0ogiT5YHVm0tTAptbiwG+G6FCzH6qylgdzUMmdrWwdJNyIzgtp4+QWm/FbvjUD7Ikm0L6x7k1SuMta6eslWwzIHFn8CyUxygtgclAj9I5JJODFZfoIY4A3Y3Tvw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hyywV+bGk2T4DLWDPfAvbCKbfGKrBSg+RSB+Q5YIV/Y=; b=Psc1+Y9jbIZNdADIXgY7v8/AazGBuZST1X0G9KAIYIlnUgBL6ddsuw9g5o2oO0U6ZRTXoLDqyIKtSAX3dBgpCnwdU/QlXNzYX9N0O1yFxqpdvDwvLK3x+3gb7zdywob/dJLufWDQiwuXS1gBqvCQhyaOqqDATGx2M3Uj2w0k4qkVeUWPO37USoUK04x+IS5ZT239AX45v61ojWcpnYB06Ddg6cj/R9biUudHrvgbD9DIbPzRmT3o7F0RoX/GoMhv1er6Ma6Xh20aVs63IAV2FE5Puesl5ZXfeRM6uMx0PcjcPZbgSPbYpqA8DXYIN0iamCvGccnqv9KSF7yF1/FCSA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hyywV+bGk2T4DLWDPfAvbCKbfGKrBSg+RSB+Q5YIV/Y=; b=KUZb0rdzfbdJ0Wg9Sqeh13ALXkN0Ypewpdz0QelrUhydduL9yqpJZvdhYIjWNduvH6ARv3qFWjqkFJAyIviS/1poqB72sF+IyecKb0lZrV10F1lAqf99FMJ6606xuyHiZj8oR8y1KKqvfx9zNMyUFcIvCVInNHJvJctNkx0dRgU= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB3750.namprd11.prod.outlook.com (2603:10b6:a03:f9::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.21; Thu, 23 Jul 2020 15:24:37 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::e42f:216e:af3e:8ce5%7]) with mapi id 15.20.3216.021; Thu, 23 Jul 2020 15:24:37 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: RATs presenters: 108 slides due today reminder Thread-Index: AQHWYQVgB39jrCsIvEWHE8DqaYRwug== Date: Thu, 23 Jul 2020 15:24:37 +0000 Message-ID: <370D91A8-AC1D-4079-A64B-9866E3FD24B3@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.18.200713 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 85f01cbc-66db-46ea-b974-08d82f1c8331 x-ms-traffictypediagnostic: BYAPR11MB3750: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3826; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: GKsuTFi59wwL2R0/C/EQ73ll2E1yDYNzkueDLnRXT6piz0qA2kXetYZI4cbAbRgB6f3fJvR0YaSxh6WC2WmVEOPXCaqml6wKg38lF6pl2q4zYrBm7zz2JZomkiyGhpBVLTz5OYnW1x4Dwd9f2WBkewbKz+0ufiCNmcDZ/ogMc3CDkHK/mURC98xpz6jH+0IEwpXS83J8Jy5tqutAbw+YbWqhFZPPbJDLH/a5qwkTAcJuRVOx9e+CnIz6bUiaqgc9KJeIWptmX1T8drh+EbaYEQNMhuLGsHurEUHWtJ50N/VfSgxJdD7YKzo3uJQLt22+mFH82KuVB6g6i7H2p7GhVg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(136003)(366004)(346002)(376002)(396003)(86362001)(6916009)(6486002)(71200400001)(2906002)(6506007)(66946007)(66446008)(64756008)(76116006)(66476007)(66556008)(26005)(186003)(2616005)(33656002)(478600001)(558084003)(83380400001)(8676002)(36756003)(8936002)(6512007)(316002)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_370D91A8AC1D4079A64B9866E3FD24B3ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 85f01cbc-66db-46ea-b974-08d82f1c8331 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jul 2020 15:24:37.8249 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6/uThRNfD7lH2Z7oGctUjsKRy16CaDRrgRHejiqn8368SVhYMv0aIWwbCDFDJYJxrSOzrwx/8caU5Y0e2vUgVA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3750 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: rcdn-core-1.cisco.com Archived-At: Subject: [Rats] RATs presenters: 108 slides due today reminder X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2020 15:24:44 -0000 --_000_370D91A8AC1D4079A64B9866E3FD24B3ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBpcyBhIHJlbWluZGVyIHRvIHRob3NlIHByZXNlbnRpbmcgYXQgdGhlIElFVEYgMTA4IFJB VHMgc2Vzc2lvbnMsIHlvdXIgc2xpZGVzIGFyZSBkdWUgYnkgRU9EIHRvZGF5Lg0KDQpUaGFua3Ms IE5hbmN5DQo= --_000_370D91A8AC1D4079A64B9866E3FD24B3ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <403E37449866164496EDDD6D55244D66@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5UaGlzIGlzIGEgcmVtaW5kZXIgdG8gdGhvc2UgcHJlc2VudGluZyBhdCB0aGUg SUVURiAxMDggUkFUcyBzZXNzaW9ucywgeW91ciBzbGlkZXMgYXJlIGR1ZSBieSBFT0QgdG9kYXku PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGFua3MsIE5hbmN5 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_370D91A8AC1D4079A64B9866E3FD24B3ciscocom_-- From nobody Thu Jul 23 08:48:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD4CA3A0A96 for ; Thu, 23 Jul 2020 08:48:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z3quPfMVV5cF for ; Thu, 23 Jul 2020 08:48:18 -0700 (PDT) Received: from mail-ua1-x92d.google.com (mail-ua1-x92d.google.com [IPv6:2607:f8b0:4864:20::92d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 006993A0A93 for ; Thu, 23 Jul 2020 08:48:17 -0700 (PDT) Received: by mail-ua1-x92d.google.com with SMTP id r63so1954167uar.9 for ; Thu, 23 Jul 2020 08:48:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=0XClYQYqVTM51LRQh1YEPgQZVU7FmhMyW0SArgJsjSw=; b=Ev48IIFoYnAdvMD9uDeEqprIIHBQLJWIe6jSSa8LddgW0qnuUH+kSdGYB4u990QOkk EK34Ot1fc+EnziNZrBK3LxeY8RXCFq5SF3oLNYkCcM3F0/kKQMoxpA8B46545zIg6XHP 3q+p8kvpvy1i4LsQnP6p3gpcV0XcYbCRXpSDhxsXXcfRuvRoo38ghGfangdan4tqKrCg Wt5POP7djh5Zyh+Gi9WtaVy6b1SkT25lD1YK4fw4gjh/i7sFBTo4WfUbIDlVEFjsR9S0 qiKP8tMjK1rYClJQq+rHHCQbcwlifC9LElsC/N0W56AYO/tjpGRfEBSvXR4YPLOVc5Qj 9W9w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=0XClYQYqVTM51LRQh1YEPgQZVU7FmhMyW0SArgJsjSw=; b=mI+/XiIK3D/IVugQxYEtkXmyK8QPgftM4B+U1s924lPVs8HFxblTNKNddQl2YnGuo2 Z/nR28tVNewEYKAVKChIrzs5tycIW8yO9lEeVjmL6CppA3uYo8EcLV6rlR5uXOcHVQFI QrheTnGHxYsKZM6WNo87HiphhkNPCjJPuza3hmV8o2p8vokI+0KEqK50Db2jpdIxETbv EBH0OmJJPAeUY2C9Ecf0stKGE0UvO/PHduzzIpYFHrh4nlQHYuATSfIi7rs+VcTnA+NJ gtEStWW7qqRHMFFcRzs9XkP3poZTrrrbjxiBLO7gb9xKRMfLVFwPXPrPoDwCxQPnZgSg cZgA== X-Gm-Message-State: AOAM5311hy+U4cqzb41T6uWYcedR5q5LnCmhc5ywJRvU3iMc+/ujtJ3C q+BkkJS9qECVtDuCYwzrEqk20Dikxt4u/u1uQ2k= X-Google-Smtp-Source: ABdhPJwio4cVuZ2XNeAY/QcPZTF4L6k6gMe4w1LIZILuwUP9G/ALEBT3DFdDQQs32kmskigk7iEY5sxDGGyI/0ejCpk= X-Received: by 2002:ab0:3b2:: with SMTP id 47mr4645403uau.139.1595519296986; Thu, 23 Jul 2020 08:48:16 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Ira McDonald Date: Thu, 23 Jul 2020 11:48:06 -0400 Message-ID: To: Henk Birkholz , Ira McDonald Cc: "rats@ietf.org" Content-Type: multipart/alternative; boundary="000000000000eddf8405ab1dc85a" Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jul 2020 15:48:20 -0000 --000000000000eddf8405ab1dc85a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, I strongly favor option 2 (one I-D for all models). Cheers, - Ira *Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG* *Co-Chair - TCG Metadata Access Protocol SG* *Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working GroupCo-Chair - IEEE-ISTO PWG Internet Printing Protocol WGIETF Designated Expert - IPP & Printer MIBBlue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic http://sites.google.com/site/hi= ghnorthinc mailto: blueroofmusic@gmail.com (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434* On Thu, Jul 23, 2020 at 9:08 AM Henk Birkholz < henk.birkholz@sit.fraunhofer.de> wrote: > Hi list, > > our first virtual session on July 28th is approaching. At the last > meeting, we highlighted the question: where do interaction models go? > > Context: there are three quite common interaction models (plus minimal > requirements and information elements for them) that can be used to > convey RATS Conceptual Messages, such as Evidence or Attestation > Results. Most Conceptual Messages should include only up-to-date content > (commonly referred to as "fresh") to be feasible. As a result, > interaction models directly support methods to show that content is > fresh (challenge-response & streamed remote attestation) or don't have > to because the content shows that by itself (time-based remote > attestation). > > Problem: Reiterating how the common models work and how they are related > in every solution draft can prove to be error prone, ambiguous, > difficult to compare in English, or simply be redundant. > > Solution: Describing them once and then referencing the bulk of it > eliminates the need for text cloning, danger of inconsistencies/subtle > deviations, and redundancy in general. > > > The remaining question is: where should this content about interaction > model go? > > > At the last meeting four options were presented: > > * Option 1: standalone (one I-D for each model) > * Option 2: standalone (one I-D for all models) > * Option 3: all three models merged into the architecture I-D > * Option 4: each model merged into a separate solution I-D > > Each option has pros and cons. So, I'd like to bring this question to > the list (,finally... I can be quite slow). > > There is of course the current reference interaction model I-D that > talks about the three models and how direct anonymous attestation can be > enabled by all three of them. Please have a quick look, maybe that helps > to provide some feedback here :) Five drafts reference this one at the > moment: > > > > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interactio= n-model/ > > We will dedicate some time to this topic on Tuesday and hope for some > feedback! > > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > --000000000000eddf8405ab1dc85a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

I strongly favor option = 2 (one I-D for all models).

Cheers,
- Ir= a

<= div>
Ira McDonald (Musician / Software Architect)
Co-C= hair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG I= nternet Printing Protocol WG
IETF Designated Expert - IPP & Printer = MIB
Blue Roof Music / High North Inc
htt= p://sites.google.com/site/blueroofmusic
= http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(= permanent) PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434


On Thu, Jul 23, 2020= at 9:08 AM Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
Hi list,

our first virtual session on July 28th is approaching. At the last
meeting, we highlighted the question: where do interaction models go?

Context: there are three quite common interaction models (plus minimal
requirements and information elements for them) that can be used to
convey RATS Conceptual Messages, such as Evidence or Attestation
Results. Most Conceptual Messages should include only up-to-date content (commonly referred to as "fresh") to be feasible. As a result, interaction models directly support methods to show that content is
fresh (challenge-response & streamed remote attestation) or don't h= ave
to because the content shows that by itself (time-based remote attestation)= .

Problem: Reiterating how the common models work and how they are related in every solution draft can prove to be error prone, ambiguous,
difficult to compare in English, or simply be redundant.

Solution: Describing them once and then referencing the bulk of it
eliminates the need for text cloning, danger of inconsistencies/subtle
deviations, and redundancy in general.


The remaining question is: where should this content about interaction
model go?


At the last meeting four options were presented:

* Option 1: standalone (one I-D for each model)
* Option 2: standalone (one I-D for all models)
* Option 3: all three models merged into the architecture I-D
* Option 4: each model merged into a separate solution I-D

Each option has pros and cons. So, I'd like to bring this question to <= br> the list (,finally... I can be quite slow).

There is of course the current reference interaction model I-D that
talks about the three models and how direct anonymous attestation can be enabled by all three of them. Please have a quick look, maybe that helps to provide some feedback here :) Five drafts reference this one at the
moment:

> https://datatr= acker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/

We will dedicate some time to this topic on Tuesday and hope for some
feedback!


Viele Gr=C3=BC=C3=9Fe,

Henk

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--000000000000eddf8405ab1dc85a-- From nobody Thu Jul 23 18:11:16 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 437CF3A0768 for ; Thu, 23 Jul 2020 18:11:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.598 X-Spam-Level: X-Spam-Status: No, score=-0.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, FREEMAIL_REPLYTO=1, FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eojr7Fptl1iA for ; Thu, 23 Jul 2020 18:11:12 -0700 (PDT) Received: from mail-oi1-x22b.google.com (mail-oi1-x22b.google.com [IPv6:2607:f8b0:4864:20::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84D203A0766 for ; Thu, 23 Jul 2020 18:11:12 -0700 (PDT) Received: by mail-oi1-x22b.google.com with SMTP id 12so6730998oir.4 for ; Thu, 23 Jul 2020 18:11:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=reply-to:subject:to:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=cZO+1RZ7AdARx9lHw2Jd+jfUAhLka8yrcX2fiPjXDJE=; b=b0oF9m6eqMY6TdX+zmRWvUyNrUeNV8uTrn65XtQrj+/aSDATKD5F3EtI+Wci6WV6iM EBZXwOgBDHlESpTkZ5CDabfIcbFilxVvACZltYz/VTpdM6UFbBovW0iUg+MqcroIwXV9 9yjgsVxUY17Q5R8CfqWTEI5xJ9cTGdrGzGlt/vXJ5C5qUqQKYTYUoTItdfap4mhnZpmU UtM4vyd+flm4rSw7VuMvfwSEzlPM/P4pXBCBQtYJX+m9IzkKk/Ogka8KcmSby/GbxyOc hHUwCQnxlL42Y1vZYXmb1OLxjp0ddwLSMSuE9q/dObmWrE9XuYpmj61onAglNn/KsaU+ Qp1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:reply-to:subject:to:references:from:message-id :date:user-agent:mime-version:in-reply-to:content-language; bh=cZO+1RZ7AdARx9lHw2Jd+jfUAhLka8yrcX2fiPjXDJE=; b=e9rQjTxP5Whd4QSmg7aYj2OwJ5PiS2CSvMc6RQBHUjVnOKD48ZIr/0Hv6I+CqW+UVw sr0gip3t/jhB1RQPftcFD8Q0htRRrXFuU7xn28NA3U/6ML4VfmwymahoNZr/YStJp5Im i+u3D5VulVYP4JniTVTGb8Bi6AcHZbqxu3lbaCcTe84+mKNkFjqF3Dn6fJt0bL1OZ4OC r5eNkPfUZtjbDF3DntIw756GqP0xqAi5ybVDxTjl9+eCk9sYHbsfz7oZ6YswhaZ1CBoG iaTgnlkuUZQR9/ujpAzobCQmUscZt4NObKT6VEOGqiQ18YMLuMxV0NNO7B5huUFEZxM/ wuIg== X-Gm-Message-State: AOAM530ZL5EiQwlbMnaLsY3hzFH+OdVGM0Z9xtafDOVNCPTFft5nnvCs 6pJrhoBj1rA24PB2G+U7O6O03hQ8 X-Google-Smtp-Source: ABdhPJy8YPpuuZquhXUIopnEozk2rozK6ZBP7MVeVomdI6bzlzapvQZuN1GK9R0S1E4vsfrTd8rQ8A== X-Received: by 2002:aca:c356:: with SMTP id t83mr5975798oif.25.1595553071524; Thu, 23 Jul 2020 18:11:11 -0700 (PDT) Received: from [192.168.2.112] (207.155.193.200.ptr.us.xo.net. [207.155.193.200]) by smtp.gmail.com with ESMTPSA id i11sm1043090oom.9.2020.07.23.18.11.10 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 23 Jul 2020 18:11:11 -0700 (PDT) Reply-To: montywiseman32@gmail.com To: rats@ietf.org References: From: Monty Wiseman Message-ID: <9d63f100-20b2-7b46-f143-70bc20cd885d@gmail.com> Date: Thu, 23 Jul 2020 21:11:09 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------187C82502809E630E42B6A03" Content-Language: en-US Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2020 01:11:14 -0000 This is a multi-part message in MIME format. --------------187C82502809E630E42B6A03 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit I prefer Option 2 (one I-D for all models). This supports more consistent models and is simpler to reference by other standards (which is the overall objective). Monty Wiseman On 7/23/20 11:48 AM, Ira McDonald wrote: > Hi, > > I strongly favor option 2 (one I-D for all models). > > Cheers, > - Ira > > /Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG/ > /Co-Chair - TCG Metadata Access Protocol SG > / > /Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > (permanent) PO Box 221  Grand Marais, MI 49839 906-494-2434/ > > > On Thu, Jul 23, 2020 at 9:08 AM Henk Birkholz > > wrote: > > Hi list, > > our first virtual session on July 28th is approaching. At the last > meeting, we highlighted the question: where do interaction models go? > > Context: there are three quite common interaction models (plus > minimal > requirements and information elements for them) that can be used to > convey RATS Conceptual Messages, such as Evidence or Attestation > Results. Most Conceptual Messages should include only up-to-date > content > (commonly referred to as "fresh") to be feasible. As a result, > interaction models directly support methods to show that content is > fresh (challenge-response & streamed remote attestation) or don't > have > to because the content shows that by itself (time-based remote > attestation).. > > Problem: Reiterating how the common models work and how they are > related > in every solution draft can prove to be error prone, ambiguous, > difficult to compare in English, or simply be redundant. > > Solution: Describing them once and then referencing the bulk of it > eliminates the need for text cloning, danger of > inconsistencies/subtle > deviations, and redundancy in general. > > > The remaining question is: where should this content about > interaction > model go? > > > At the last meeting four options were presented: > > * Option 1: standalone (one I-D for each model) > * Option 2: standalone (one I-D for all models) > * Option 3: all three models merged into the architecture I-D > * Option 4: each model merged into a separate solution I-D > > Each option has pros and cons. So, I'd like to bring this question to > the list (,finally... I can be quite slow). > > There is of course the current reference interaction model I-D that > talks about the three models and how direct anonymous attestation > can be > enabled by all three of them. Please have a quick look, maybe that > helps > to provide some feedback here :) Five drafts reference this one at > the > moment: > > > > https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/ > > We will dedicate some time to this topic on Tuesday and hope for some > feedback! > > > Viele Grüße, > > Henk > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --------------187C82502809E630E42B6A03 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

I prefer Option 2 (one I-D for all models). This supports more consistent models

and is simpler to reference by other standards (which is the overall objective).

Monty Wiseman


On 7/23/20 11:48 AM, Ira McDonald wrote:
Hi,

I strongly favor option 2 (one I-D for all models).

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(permanent) PO Box 221  Grand Marais, MI 49839  906-494-2434


On Thu, Jul 23, 2020 at 9:08 AM Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
Hi list,

our first virtual session on July 28th is approaching. At the last
meeting, we highlighted the question: where do interaction models go?

Context: there are three quite common interaction models (plus minimal
requirements and information elements for them) that can be used to
convey RATS Conceptual Messages, such as Evidence or Attestation
Results. Most Conceptual Messages should include only up-to-date content
(commonly referred to as "fresh") to be feasible. As a result,
interaction models directly support methods to show that content is
fresh (challenge-response & streamed remote attestation) or don't have
to because the content shows that by itself (time-based remote attestation)..

Problem: Reiterating how the common models work and how they are related
in every solution draft can prove to be error prone, ambiguous,
difficult to compare in English, or simply be redundant.

Solution: Describing them once and then referencing the bulk of it
eliminates the need for text cloning, danger of inconsistencies/subtle
deviations, and redundancy in general.


The remaining question is: where should this content about interaction
model go?


At the last meeting four options were presented:

* Option 1: standalone (one I-D for each model)
* Option 2: standalone (one I-D for all models)
* Option 3: all three models merged into the architecture I-D
* Option 4: each model merged into a separate solution I-D

Each option has pros and cons. So, I'd like to bring this question to
the list (,finally... I can be quite slow).

There is of course the current reference interaction model I-D that
talks about the three models and how direct anonymous attestation can be
enabled by all three of them. Please have a quick look, maybe that helps
to provide some feedback here :) Five drafts reference this one at the
moment:

> https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interaction-model/

We will dedicate some time to this topic on Tuesday and hope for some
feedback!


Viele Grüße,

Henk

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
--------------187C82502809E630E42B6A03-- From nobody Thu Jul 23 18:21:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D15373A07BD for ; Thu, 23 Jul 2020 18:21:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ncoQvPwO4Nlm for ; Thu, 23 Jul 2020 18:21:30 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 91BED3A07B9 for ; Thu, 23 Jul 2020 18:21:30 -0700 (PDT) Received: from lhreml722-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id 2DE7EAA8130F5C5D48FC; Fri, 24 Jul 2020 02:21:25 +0100 (IST) Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by lhreml722-chm.china.huawei.com (10.201.108.73) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Fri, 24 Jul 2020 02:21:24 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml705-chm.china.huawei.com (10.98.57.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Fri, 24 Jul 2020 09:21:22 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Fri, 24 Jul 2020 09:21:22 +0800 From: "Panwei (William)" To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Where Do Interaction Models Go? Thread-Index: AQHWYPJV7So/RLVPI0Wvs0RKfBsXr6kV7jFA Date: Fri, 24 Jul 2020 01:21:21 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.164.120.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2020 01:21:32 -0000 SGksDQoNCkkgcHJlZmVyIG9wdGlvbiAyLg0KDQpSZWdhcmRzICYgVGhhbmtzIQ0KV2VpIFBhbg0K DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IFJBVFMgW21haWx0bzpyYXRz LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBIZW5rIEJpcmtob2x6DQo+IFNlbnQ6IFRo dXJzZGF5LCBKdWx5IDIzLCAyMDIwIDk6MDggUE0NCj4gVG86IHJhdHNAaWV0Zi5vcmcNCj4gU3Vi amVjdDogW1JhdHNdIFdoZXJlIERvIEludGVyYWN0aW9uIE1vZGVscyBHbz8NCj4gDQo+IEhpIGxp c3QsDQo+IA0KPiBvdXIgZmlyc3QgdmlydHVhbCBzZXNzaW9uIG9uIEp1bHkgMjh0aCBpcyBhcHBy b2FjaGluZy4gQXQgdGhlIGxhc3QgbWVldGluZywgd2UNCj4gaGlnaGxpZ2h0ZWQgdGhlIHF1ZXN0 aW9uOiB3aGVyZSBkbyBpbnRlcmFjdGlvbiBtb2RlbHMgZ28/DQo+IA0KPiBDb250ZXh0OiB0aGVy ZSBhcmUgdGhyZWUgcXVpdGUgY29tbW9uIGludGVyYWN0aW9uIG1vZGVscyAocGx1cyBtaW5pbWFs DQo+IHJlcXVpcmVtZW50cyBhbmQgaW5mb3JtYXRpb24gZWxlbWVudHMgZm9yIHRoZW0pIHRoYXQg Y2FuIGJlIHVzZWQgdG8NCj4gY29udmV5IFJBVFMgQ29uY2VwdHVhbCBNZXNzYWdlcywgc3VjaCBh cyBFdmlkZW5jZSBvciBBdHRlc3RhdGlvbiBSZXN1bHRzLg0KPiBNb3N0IENvbmNlcHR1YWwgTWVz c2FnZXMgc2hvdWxkIGluY2x1ZGUgb25seSB1cC10by1kYXRlIGNvbnRlbnQNCj4gKGNvbW1vbmx5 IHJlZmVycmVkIHRvIGFzICJmcmVzaCIpIHRvIGJlIGZlYXNpYmxlLiBBcyBhIHJlc3VsdCwgaW50 ZXJhY3Rpb24NCj4gbW9kZWxzIGRpcmVjdGx5IHN1cHBvcnQgbWV0aG9kcyB0byBzaG93IHRoYXQg Y29udGVudCBpcyBmcmVzaA0KPiAoY2hhbGxlbmdlLXJlc3BvbnNlICYgc3RyZWFtZWQgcmVtb3Rl IGF0dGVzdGF0aW9uKSBvciBkb24ndCBoYXZlIHRvDQo+IGJlY2F1c2UgdGhlIGNvbnRlbnQgc2hv d3MgdGhhdCBieSBpdHNlbGYgKHRpbWUtYmFzZWQgcmVtb3RlIGF0dGVzdGF0aW9uKS4NCj4gDQo+ IFByb2JsZW06IFJlaXRlcmF0aW5nIGhvdyB0aGUgY29tbW9uIG1vZGVscyB3b3JrIGFuZCBob3cg dGhleSBhcmUNCj4gcmVsYXRlZCBpbiBldmVyeSBzb2x1dGlvbiBkcmFmdCBjYW4gcHJvdmUgdG8g YmUgZXJyb3IgcHJvbmUsIGFtYmlndW91cywNCj4gZGlmZmljdWx0IHRvIGNvbXBhcmUgaW4gRW5n bGlzaCwgb3Igc2ltcGx5IGJlIHJlZHVuZGFudC4NCj4gDQo+IFNvbHV0aW9uOiBEZXNjcmliaW5n IHRoZW0gb25jZSBhbmQgdGhlbiByZWZlcmVuY2luZyB0aGUgYnVsayBvZiBpdA0KPiBlbGltaW5h dGVzIHRoZSBuZWVkIGZvciB0ZXh0IGNsb25pbmcsIGRhbmdlciBvZiBpbmNvbnNpc3RlbmNpZXMv c3VidGxlDQo+IGRldmlhdGlvbnMsIGFuZCByZWR1bmRhbmN5IGluIGdlbmVyYWwuDQo+IA0KPiAN Cj4gVGhlIHJlbWFpbmluZyBxdWVzdGlvbiBpczogd2hlcmUgc2hvdWxkIHRoaXMgY29udGVudCBh Ym91dCBpbnRlcmFjdGlvbg0KPiBtb2RlbCBnbz8NCj4gDQo+IA0KPiBBdCB0aGUgbGFzdCBtZWV0 aW5nIGZvdXIgb3B0aW9ucyB3ZXJlIHByZXNlbnRlZDoNCj4gDQo+ICogT3B0aW9uIDE6IHN0YW5k YWxvbmUgKG9uZSBJLUQgZm9yIGVhY2ggbW9kZWwpDQo+ICogT3B0aW9uIDI6IHN0YW5kYWxvbmUg KG9uZSBJLUQgZm9yIGFsbCBtb2RlbHMpDQo+ICogT3B0aW9uIDM6IGFsbCB0aHJlZSBtb2RlbHMg bWVyZ2VkIGludG8gdGhlIGFyY2hpdGVjdHVyZSBJLUQNCj4gKiBPcHRpb24gNDogZWFjaCBtb2Rl bCBtZXJnZWQgaW50byBhIHNlcGFyYXRlIHNvbHV0aW9uIEktRA0KPiANCj4gRWFjaCBvcHRpb24g aGFzIHByb3MgYW5kIGNvbnMuIFNvLCBJJ2QgbGlrZSB0byBicmluZyB0aGlzIHF1ZXN0aW9uIHRv DQo+IHRoZSBsaXN0ICgsZmluYWxseS4uLiBJIGNhbiBiZSBxdWl0ZSBzbG93KS4NCj4gDQo+IFRo ZXJlIGlzIG9mIGNvdXJzZSB0aGUgY3VycmVudCByZWZlcmVuY2UgaW50ZXJhY3Rpb24gbW9kZWwg SS1EIHRoYXQNCj4gdGFsa3MgYWJvdXQgdGhlIHRocmVlIG1vZGVscyBhbmQgaG93IGRpcmVjdCBh bm9ueW1vdXMgYXR0ZXN0YXRpb24gY2FuIGJlDQo+IGVuYWJsZWQgYnkgYWxsIHRocmVlIG9mIHRo ZW0uIFBsZWFzZSBoYXZlIGEgcXVpY2sgbG9vaywgbWF5YmUgdGhhdCBoZWxwcw0KPiB0byBwcm92 aWRlIHNvbWUgZmVlZGJhY2sgaGVyZSA6KSBGaXZlIGRyYWZ0cyByZWZlcmVuY2UgdGhpcyBvbmUg YXQgdGhlDQo+IG1vbWVudDoNCj4gDQo+ID4NCj4gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50ZXJhY3Rpb24tbQ0KPiBvZGVs Lw0KPiANCj4gV2Ugd2lsbCBkZWRpY2F0ZSBzb21lIHRpbWUgdG8gdGhpcyB0b3BpYyBvbiBUdWVz ZGF5IGFuZCBob3BlIGZvciBzb21lDQo+IGZlZWRiYWNrIQ0KPiANCj4gDQo+IFZpZWxlIEdyw7zD n2UsDQo+IA0KPiBIZW5rDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPiBSQVRTIG1haWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cw0K From nobody Fri Jul 24 09:38:14 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FB2D3A0FDF for ; Fri, 24 Jul 2020 09:38:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.621 X-Spam-Level: X-Spam-Status: No, score=-9.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=YQJ/SbyU; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=x4NWp0JS Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oHEDOYT2brKf for ; Fri, 24 Jul 2020 09:38:05 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A0A33A0FCB for ; Fri, 24 Jul 2020 09:38:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8420; q=dns/txt; s=iport; t=1595608685; x=1596818285; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=g+ogE0hbMZpp7ndoaMXd/Mtl2Kn1Ja1tJqm7rPo4HSw=; b=YQJ/SbyU9ynqCe3HrY+SMVMfSFXSIkmRUfFLxzZ/avZmYbdUi5SuUePX C9JX1ieyyUUyV2thhfNkUokctKqxRY5WNP47/NJxNKCBOo8m18QlMZucQ eGsNfVeiYZWntaDGfVXBn7kaA2YnnsRdBZudEEtaVdjaggDL7YbjPQ3cN Q=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3Arh7E+RFksmJoVVK934VgWJ1GYnJ96bzpIg4Y7I?= =?us-ascii?q?YmgLtSc6Oluo7vJ1Hb+e401wWbRoTHrfxegvfQs6fuVHZG7ZvS+HwBcZkZUR?= =?us-ascii?q?gDhI1WmgE7G8eKBAX9K+KidC01GslOFToHt3G2OERYAoDyMlvVpHDh9j8OXB?= =?us-ascii?q?vlPBdzJuP7F5SUg8nkn+y38ofYNgNPgjf1aLhuLRKw+APWsMRz48NiJ689xw?= =?us-ascii?q?GPrGFPfrFdxHhjIhSYmBOv6w=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C5CADTDRtf/4MNJK1gglOBUikoB28?= =?us-ascii?q?rLS8sCoQpg0YDjVWYX4JTA1UEBwEBAQkDAQEYDQgCBAEBhEwCgiICJDcGDgI?= =?us-ascii?q?DAQELAQEFAQEBAgEGBG2FXAyFcQEBAQECAQEBEBEdAQEsCwEECwIBBgISMAI?= =?us-ascii?q?CAiULFw4CBA4FCAYNB4MFgX5NAw4RDwEOkh+QaAKBOYhhdoEygwEBAQWBR0G?= =?us-ascii?q?DHxiCBwcDBoE4gVOBGoNYhigPGoFBP4ERQ4IfLj6CXAEBAgEBgV2DFDOCLZJ?= =?us-ascii?q?fowgKgl2EM4JYgUuRN4J7iUaTHpxAlGgCBAIEBQIOAQEFgWkkgVdwFTuCaVA?= =?us-ascii?q?XAg2PQwEIgkOFFIVCdDcCBgEHAQEDCXyONAGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,391,1589241600"; d="p7s'?scan'208";a="535102963" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 24 Jul 2020 16:38:04 +0000 Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by alln-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 06OGc3dq023848 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 24 Jul 2020 16:38:03 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 24 Jul 2020 11:38:03 -0500 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 24 Jul 2020 11:38:03 -0500 Received: from NAM10-BN7-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Fri, 24 Jul 2020 11:38:03 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=f1GedNLGSDQ68FYsopV2oAeL1BNnBy46DMwI4YbApQz9hy1b5swbBCoNMbsn4S38P247f8b1hDdPCJc+IacclP4etWOj/jlL7hdr/gzAxiX0kHUsoeC2zCaBlbz6fBEDcR2l4WhbXkyBFpeiLOdZmNPKx2wHErx0tO/l3jC+3qJ+0uXPKhn+vTJdbqJOlmKm7Td72oDgfbz1x0LwTt+c3gMBTf82BJr8NX8/CZ7VLrVzVvRQd2NqYlEO3dDpjpAfSM7tKRvU7xkOs1/abQqMTVIKN8zuCBvr+BRwYvSyl9p6fhvtuCDV55JHdVRRkHKGiXZecS8eRzOuiEvfwoNXHQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uzFrhvwWzT1QJGE1Om+TOHdcrRHS8t019eV105kYnzc=; b=U8mvs0iNc1TyRkWcZU+pq/RvWA49F6EGiKuzmvBtH2s5oD26ZEFIRd6KYzD6h1CKI8IrUmnqQUu6836gga3PqeR0vchJ9RDIJpUBrOsGRfu7qc5AVH5i/gZ7y7OOLUb1CeY7ZuHuD4mWM7egpb0iGkdQaIf8heJp2VRdjlvIMctFhQC4wA5MRK3okgYoVcx9FaDAQAx+UOL/QPqMM27TSrG6TcAxC/fZwS6GoY5qLd93tId+OHX60PcLR2b5SC/r3HC195XKxF3lEhcH/e6QPX3ikA1MI6VnlQ8Zef2wKwruEZiRFDdSs+yfV/fERb6RI9C31jUWeoUudldQgiiI6g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uzFrhvwWzT1QJGE1Om+TOHdcrRHS8t019eV105kYnzc=; b=x4NWp0JS6msPPEUyngluwa5fqHOLLfnH2dlm8D4WoM6ofC0HpgclbPuZ+v6eR7mJwL06vdz0NuACf+sPUHgDh9jFHB6XwFllZx6mLcdC9ErIV0JwaLEX9sTcSVfH4CnmwqX3ADvIBMHyJH1amtNgFqmxNj3cWRHEeAgo0Uf+gkc= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4272.namprd11.prod.outlook.com (2603:10b6:208:196::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.22; Fri, 24 Jul 2020 16:38:02 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2%5]) with mapi id 15.20.3216.026; Fri, 24 Jul 2020 16:38:02 +0000 From: "Eric Voit (evoit)" To: Henk Birkholz CC: "rats@ietf.org" Thread-Topic: [Rats] Where Do Interaction Models Go? Thread-Index: AQHWYPJXrpKcGji2VECWn9G78P2XKakW7uDw Date: Fri, 24 Jul 2020 16:38:02 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.84] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f967b4e7-3110-4c78-799b-08d82fefeeef x-ms-traffictypediagnostic: MN2PR11MB4272: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: yqPOqij595uLKXgYlf9xM+f08OFJ7o10R/NUwI20S2aLcx7Vi4TWuT+5WkYnLtvRVL/UCl3INYXP4FaHH7pETllAonuvRSg7XNuzihi8PKNCaRfm7sk0P88RT2NWckeJM9JSkePgywQ2MtK6uxAhM3FjaegBFpv5NwAAgPWWpTn5SBf6vWL0U1Otwx2glg0wOXBTcNneye576AcmWsi4R8DoIQJJD9NChUQ1CNmwVkSADR+pGfpWaa8ybS/k1wJHKd7K2UymA6XdTas8G5XD6m+sHD9jMAvB4IA+lrsax9p7AwFEV8isRxi/WdxEGb1xxzQMWMRbnYGIoGyQokZrMx0HRoeiOltW18q+za3PnViWBVJg9/TDF0/MPpSsAJYkbmUTrcar040E4z+R/364sA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(136003)(366004)(396003)(376002)(346002)(52536014)(966005)(478600001)(5660300002)(8936002)(9686003)(26005)(8676002)(33656002)(99936003)(55016002)(64756008)(66616009)(76116006)(2906002)(66446008)(66556008)(66946007)(66476007)(316002)(4326008)(6506007)(71200400001)(7696005)(6916009)(86362001)(186003)(83380400001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 7A/IWhhN4ixSraL0NejjBOyZ2vOxqt2wT4T0eR4QLhdOPJhxSSt7OMqzcFRigRByqi03JoUKm5JQPv4/6r6N83NzmcIJ+E/Buq9miHfTQ0eryCAVgUIbbGdFkAfouFJjS+WpLysryrVrf2jaRlVrxuDmY3N0MmxNhG9m8YmBHW8kEnrJGwZ+hbJNBJNH6Up/HXu5jn9mTkStxUblNbH1fcF5da0+i4cr5FInlUfyMDrDqxbXqHRFvgb3hFp+Fq1aGwxuD5SMixtvAqkJNk9pZUZ4O6cllAvkGF+kY9zDqr0+v5aqW6ilF3zOvK0uAc7Z/oCyp0QowgtaLRRi/PfhDp9hFGfByvZodCHcCEqKaMLIJAgj0Wiw8bMWR3UiQeIa+O4I8HQcMX/7wElbnM0kCPLgfAWEjsVOOVdEv6o9njv5n8tB9HdUPFc8OH4j+kRRV1kMEOKjxJPMrYRVWUxi6tsSQioPSf8LadA34zL6D2WVeeQ03xfuqeFy15b45aqi x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_07F1_01D661B7.43C0B320" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f967b4e7-3110-4c78-799b-08d82fefeeef X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2020 16:38:02.4597 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KRyJYIrCGMw/d2er29Z6fHOT+tPgRhumf5tYhIe8btfXaascMFm+SWGf/ps7V0gF X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4272 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com X-Outbound-Node: alln-core-1.cisco.com Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jul 2020 16:38:12 -0000 ------=_NextPart_000_07F1_01D661B7.43C0B320 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable 2 makes good sense. This allows a common structure which can show the = commonality between specific I-Ds. It also doesn't overburden/slow = closure on the architecture doc. Eric > Hi list, >=20 > our first virtual session on July 28th is approaching. At the last = meeting, we > highlighted the question: where do interaction models go? >=20 > Context: there are three quite common interaction models (plus minimal > requirements and information elements for them) that can be used to > convey RATS Conceptual Messages, such as Evidence or Attestation = Results. > Most Conceptual Messages should include only up-to-date content > (commonly referred to as "fresh") to be feasible. As a result, = interaction > models directly support methods to show that content is fresh = (challenge- > response & streamed remote attestation) or don't have to because the > content shows that by itself (time-based remote attestation). >=20 > Problem: Reiterating how the common models work and how they are > related in every solution draft can prove to be error prone, = ambiguous, > difficult to compare in English, or simply be redundant. >=20 > Solution: Describing them once and then referencing the bulk of it = eliminates > the need for text cloning, danger of inconsistencies/subtle = deviations, and > redundancy in general. >=20 >=20 > The remaining question is: where should this content about interaction > model go? >=20 >=20 > At the last meeting four options were presented: >=20 > * Option 1: standalone (one I-D for each model) > * Option 2: standalone (one I-D for all models) > * Option 3: all three models merged into the architecture I-D > * Option 4: each model merged into a separate solution I-D >=20 > Each option has pros and cons. So, I'd like to bring this question to > the list (,finally... I can be quite slow). >=20 > There is of course the current reference interaction model I-D that > talks about the three models and how direct anonymous attestation can = be > enabled by all three of them. Please have a quick look, maybe that = helps > to provide some feedback here :) Five drafts reference this one at the > moment: >=20 > > = https://datatracker.ietf.org/doc/draft-birkholz-rats-reference-interactio= n- > model/ >=20 > We will dedicate some time to this topic on Tuesday and hope for some > feedback! >=20 >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats ------=_NextPart_000_07F1_01D661B7.43C0B320 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzI0MTYzNzU5WjAjBgkqhkiG 9w0BCQQxFgQUILiFVpZjuJpkFoG2uwngwDC+XywwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAqT7wR2RuoxXQEr88K9W6Y+Fq5i3TX6Y1ZE5gMrrfSaI/7ar3k7rXj2+4J8TLFMNwg JnZ34Xu8XuSY00hFGYjyu9931BP2r8vWAbzDfRcf5m04fO/V5eYa4DXH0yhvqJ22Rn78iHl5BfDB OCF/7p9YE5N0yyDUut5g9kRaIQEiHCpLq/OvzE1G6LPnxso9JqSeEZ05Dx37uK781tgIHZPSmut6 v0sJC3UI/El+tbuegbnMxzBBXWjXsawi3j/RzzSpOA34UnaTulFHmNyEzo5nBFwAwLhG0d/gGMSZ pR56vky8l/Jd+iWIR61SCpEsE61/PvFa814qFhU/lUnQNw4MAAAAAAAA ------=_NextPart_000_07F1_01D661B7.43C0B320-- From nobody Mon Jul 27 10:28:00 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF2763A1B00 for ; Mon, 27 Jul 2020 10:27:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.12 X-Spam-Level: X-Spam-Status: No, score=-2.12 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=jXYWl1Ag; dkim=pass (1024-bit key) header.d=juniper.net header.b=IQ6rpZMK Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mwcqnECEtzVy for ; Mon, 27 Jul 2020 10:27:57 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 403C93A1AF3 for ; Mon, 27 Jul 2020 10:27:56 -0700 (PDT) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 06RHMwM8010527; Mon, 27 Jul 2020 10:27:56 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=meWtYVToN3XT0MwEYsauIM9yb6q5G56anf3sL/Fu1oc=; b=jXYWl1AgVgmjBeSz2xBtk9ymlxRkWHWrlr3vPlOg5mGBJ8DAp+4SswpqEwAik9k4xhja qJClMNuch6k2aqC47ntGIoTxC8+FhIF6YB9NBlAnTxzsvDaHs+qOA2EOyDWD4tPP+fZ2 XEgiEM4guMIe/RiaO7Y+wRzmcvvS2gHy4TvGhnEfyiYaSrqag/sv7Y8LDxUdTzEKGKXm GgUmAGexgrrYgWzg16YdgUE4K2ADvmd7vOBNObhBc4GFwfjYJ7+j3kpXRz2QQaq9SRo8 4B6js8ckXz1CB1RO2xQlEirmFFHXdTHoR1+fZTNEaVCSq+S5VeIyTZMgJTnm5bhfnTFd wg== Received: from nam10-mw2-obe.outbound.protection.outlook.com (mail-mw2nam10lp2105.outbound.protection.outlook.com [104.47.55.105]) by mx0a-00273201.pphosted.com with ESMTP id 32gm0n2tby-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 27 Jul 2020 10:27:55 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gVGmq6t7lT/dpR6NOjFwWHWINpmmI9NlXiLZKt4SrW2RxvF6Xu+SiVMU05AjHBECfFizx5sjxpeGWyEt7mWV5spMh96PVyVoy8L8/oLrwKdUvaRLMUt97gTzXF5JgsWuPJJvKVmCDilk/2AlZ5NItz0in5UY8amMXqIvcc1uvtstZ5Kf5zJIxKOK+Uhq9je9U78o3wK5CUnADNRGjWWEjgS/Jm7vrlL5oHxfN49QPbWF5im4O7IvDC9/BXpMRAvtTM+d1GIolJPs0qi62LI0USNHuUfKkPbdDRdHImmJZaXAMs1USwb0FxFYJ2x5v+1q591CB8L+1dH2kY6yJVzTEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=meWtYVToN3XT0MwEYsauIM9yb6q5G56anf3sL/Fu1oc=; b=LlyqsqkogoC60reTBREGP3fL+ymEi0I7/6LMgIEH02R5s1yEx9NNNN22wIul5ZTvLlShBQCoHTmg8VqmUIanfksolKkcACQgv3LPi/PWCwbAuc63c1DsPjNhVTobFWCmrnt8aZ6NBMQ10eQXqQszy+cWhRRKV6/dPVDB0niZwAq029w2SVtZq9BXc6tlxdt9OkakDB6E4CRW9dhRKasUk7+oYgu5ypH67anFT3cY2m0g2NzbDprpMavtAx19kWBvUKTuW/5m/rsKvdOlXTXaDgkIpxdgsY2rzC4rPvsBFjRhyzvubioaNUxgWXjKF35+49fgsAGpnPnBc8kFkfFb1g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=meWtYVToN3XT0MwEYsauIM9yb6q5G56anf3sL/Fu1oc=; b=IQ6rpZMKKtYqmuvJA4i6dFbx2AruvGcbD9kCZGPXJK2MDp7G2w19rAC26Pj5LyHyyzeY98VJvirOHa+jC6dye19bDV+3NR8j2TFGEUNzNHb3svaov+otiiGNphbWnxE10oXeugmLv01KPl/J6FWCrSTRSslweCG+zvfIVBjM2Es= Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM6PR05MB5579.namprd05.prod.outlook.com (2603:10b6:5:d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.12; Mon, 27 Jul 2020 17:27:54 +0000 Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5%5]) with mapi id 15.20.3239.015; Mon, 27 Jul 2020 17:27:54 +0000 From: Guy Fedorkow To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Where Do Interaction Models Go? Thread-Index: AQHWYPJRbSj0zbmT3EGX9YsZkA1F8qkbtGPA Date: Mon, 27 Jul 2020 17:27:53 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-07-27T17:27:51Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=6f9ab59d-abbe-486c-9d1c-bd0277e59a6e; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=juniper.net; x-originating-ip: [73.89.130.65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 7a4ccd9c-a5dd-4ea6-5667-08d83252653e x-ms-traffictypediagnostic: DM6PR05MB5579: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: eSV8SmYK4TVf9Lta0PDTIweNkrBSpHquLnJq5V7UZMj2VEQkhcWcObnOoyXD7JXe+iElDN1q24qdMFtFJz6DFlVdUzw8wlxtkODv692JHXUT68lSiimlL/MT+qJzz1PhTVT1j3SC+XwZ8X0GBZ/6RlIkIkEvtu7AwtEVftOj0ljoM9RydI3M3fGwcyKiZhM7wJ1Tf4fSNJ7ASLUB5ya6evx3ILjLzq/5gOG9o4/MrvayWDAP6zAh20VG/HEYxKhI//mIS32kbCeo765M29s8Za70AplsRtEnrVYc1dI2YBB1F65+9P07aMRMT7bx0mmVVumu1EXibgehXz2o4VbjcJmBBmBpLHCTn6Bp0usE6k/hQHkZRYWGNrXZVbmhvCr/4yB3XnU5Lp7os9MKArQ+Tg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(376002)(136003)(366004)(396003)(39860400002)(71200400001)(83380400001)(7696005)(186003)(6506007)(53546011)(8936002)(86362001)(99936003)(26005)(2906002)(9686003)(110136005)(8676002)(966005)(66946007)(66446008)(64756008)(66556008)(66476007)(66616009)(33656002)(55016002)(478600001)(316002)(5660300002)(76116006)(52536014); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_01B4_01D66419.BA184100" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7a4ccd9c-a5dd-4ea6-5667-08d83252653e X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jul 2020 17:27:53.9546 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: G3o767Ae+Yva8ltesUzhzV7drVWwVPdCHclsVrkLh93uW/1v98oGwZ7NwU9TTj3OnbpXe7Lwso71bheLS61a/w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB5579 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-27_12:2020-07-27, 2020-07-27 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 phishscore=0 lowpriorityscore=0 spamscore=0 mlxscore=0 mlxlogscore=999 clxscore=1011 bulkscore=0 malwarescore=0 impostorscore=0 priorityscore=1501 adultscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2007270118 Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2020 17:27:59 -0000 ------=_NextPart_000_01B4_01D66419.BA184100 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi Henk, I'm fine with Option 2 -- separate draft that doesn't impede closure = of the Architecture draft. /guy Juniper Business Use Only -----Original Message----- From: RATS On Behalf Of Henk Birkholz Sent: Thursday, July 23, 2020 9:08 AM To: rats@ietf.org Subject: [Rats] Where Do Interaction Models Go? [External Email. Be cautious of content] Hi list, our first virtual session on July 28th is approaching. At the last = meeting, we highlighted the question: where do interaction models go? Context: there are three quite common interaction models (plus minimal = requirements and information elements for them) that can be used to = convey RATS Conceptual Messages, such as Evidence or Attestation = Results. Most Conceptual Messages should include only up-to-date content = (commonly referred to as "fresh") to be feasible. As a result, = interaction models directly support methods to show that content is = fresh (challenge-response & streamed remote attestation) or don't have = to because the content shows that by itself (time-based remote = attestation). Problem: Reiterating how the common models work and how they are related = in every solution draft can prove to be error prone, ambiguous, = difficult to compare in English, or simply be redundant. Solution: Describing them once and then referencing the bulk of it = eliminates the need for text cloning, danger of inconsistencies/subtle = deviations, and redundancy in general. The remaining question is: where should this content about interaction = model go? At the last meeting four options were presented: * Option 1: standalone (one I-D for each model) * Option 2: standalone (one I-D for all models) * Option 3: all three models merged into the architecture I-D * Option 4: each model merged into a separate solution I-D Each option has pros and cons. So, I'd like to bring this question to = the list (,finally... I can be quite slow). There is of course the current reference interaction model I-D that = talks about the three models and how direct anonymous attestation can be = enabled by all three of them. Please have a quick look, maybe that helps = to provide some feedback here :) Five drafts reference this one at the moment: > https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-bir > kholz-rats-reference-interaction-model/__;!!NEt6yMaO-gk!SYqBRt5nXIi2cw > gezjeQbps4FpiEHZvAX2DbPXFG2ODk1Ck9LDvFE-AvEHZwiEJWJEs$ We will dedicate some time to this topic on Tuesday and hope for some = feedback! Viele Gr=C3=BC=C3=9Fe, Henk _______________________________________________ RATS mailing list RATS@ietf.org https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/rats__;= !!NEt6yMaO-gk!SYqBRt5nXIi2cwgezjeQbps4FpiEHZvAX2DbPXFG2ODk1Ck9LDvFE-AvEHZ= wtdYEfZk$ ------=_NextPart_000_01B4_01D66419.BA184100 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISJTCCBd4w ggPGoAMCAQICEAH9bTD8o8pRqBu8ZA41Ay0wDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEwMDIwMTAwMDAwMFoXDTM4MDExODIzNTk1OVowgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw12 7c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnby qTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuG FFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnH a4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQN wZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQ v0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV 4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaNCMEAwHQYDVR0O BBYEFFN5v1qqK0rPVIDh2JvAnfKyA2bLMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MA0GCSqGSIb3DQEBDAUAA4ICAQBc1HwNz/cBfUGZZQxzxVKfy/jPmQZ/G9pDFZ+eAlVXlhTxUjwn h5Qo7R86ATeidvxTUMCEm8ZrTrqMIU+ijlVikfNpFdi8iOPEqgv976jpS1UqBiBtVXgpGe5fMFxL JBFV/ySabl4qK+4LTZ9/9wE4lBSVQwcJ+2Cp7hyrEoygml6nmGpZbYs/CPvI0UWvGBVkkBIPcygu xeIkTvxY7PD0Rf4is+svjtLZRWEFwZdvqHZyj4uMNq+/DQXOcY3mpm8fbKZxYsXY0INyDPFnEYkM nBNMcjTfvNVx36px3eG5bIw8El1l2r1XErZDa//l3k1mEVHPma7sF7bocZGM3kn+3TVxohUnlBzP YeMmu2+jZyUhXebdHQsuaBs7gq/sg2eF1JhRdLG5mYCJ/394GVx5SmAukkCuTDcqLMnHYsgOXfc2 W8rgJSUBtN0aB5x3AD/Q3NXsPdT6uz/MhdZvf6kt37kC9/WXmrU12sNnsIdKqSieI47/XCdr4bBP 8wfuAC7UWYfLUkGV6vRH1+5kQVV8jVkCld1incK57loodISlm7eQxwwH3/WJNnQy1ijBsLAL4JxM wxzW/ONptUdGgS+igqvTY0RwxI3/LTO6rY97tXCIrj4Zz0Ao2PzIkLtdmSL1UuZYxR+IMUPuiB3X xo48Q2odpxjefT0W8WL5ypCo/TCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJKoZI hvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VS VHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMwMTIz MTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGln byBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkqKtLN nFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfbM3wc caNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+LbnTe ef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmHfpsE kzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMBAAGj ggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy/Ava lNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlvbkF1 dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9v Y3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiMAN0X 13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vhNn9d NqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHitcPr 5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDpVRH9 9lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7T2ww C+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI9oKS ChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RIZllX 4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDonM8V/ 2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQz3lC NObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMIIGKzCCBROgAwIBAgIRAPuElTZ4 EhaY10ByhNJltnIwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVh dGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRl ZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0EwHhcNMTkwODI0MDAwMDAwWhcNMjIwODIzMjM1OTU5WjCCATcxCzAJBgNVBAYTAlVT MQ4wDAYDVQQREwU5NDA4OTELMAkGA1UECBMCQ0ExEjAQBgNVBAcTCVN1bm55dmFsZTEcMBoGA1UE CRMTMTEzMyBJbm5vdmF0aW9uIFdheTEeMBwGA1UEChMVSnVuaXBlciBOZXR3b3JrcywgSW5jMR4w HAYDVQQLExVTb2Z0d2FyZSBFbmdpbmVlciBMYWIxOzA5BgNVBAsTMklzc3VlZCB0aHJvdWdoIEp1 bmlwZXIgTmV0d29ya3MsIEluYyBFLVBLSSBNYW5hZ2VyMR8wHQYDVQQLExZDb3Jwb3JhdGUgU2Vj dXJlIEVtYWlsMRUwEwYDVQQDEwxHdXkgRmVkb3Jrb3cxJDAiBgkqhkiG9w0BCQEWFWdmZWRvcmtv d0BqdW5pcGVyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Fewgz3OFG1Go3 cuoLYIbLNRTSEFgN+GLUaqB6g5VuCf0UTvgARSlxgDmsvE5qwTtb8JOtJ64OylVNvz28uslsfvg4 WCc0InZUo1B6JkgNamxa3HI31h63s5wVm/wZgglg5Dv7WH7gmAPrgeoWpBC2GN1sxWHfcJOi2fzg M5LWst0Iwz4M7vqFsZ77AOkUFDNm5p19Fu8HRjVlsE0fNGieZB5GEiL2CN2YoxyOKrJdqWHNMkK8 Q5owvlDnSR0tb8oJgHDX8EESSo5TDA5zqnva48zFfFWCrOdobNgf1To4uBskX6B+QEmrSNLuSdpK JOHw9IdrPofgpjZCmFwvtS8CAwEAAaOCAc4wggHKMB8GA1UdIwQYMBaAFAnA8vwL2pTbX/4r36iZ Qs/J4K0AMB0GA1UdDgQWBBQPfL+xFDoZAlQisKraMq/Y34eQGjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwQAYDVR0gBDkwNzA1Bgwr BgEEAbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVu dGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAC hklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAg BgNVHREEGTAXgRVnZmVkb3Jrb3dAanVuaXBlci5uZXQwDQYJKoZIhvcNAQELBQADggEBALilLU71 sn7XVNFoUU4MqcHXXFiFiOjCQmq1nqijMa6L4fKm/VX9LZtrsQs3CZTUiHuW2pyLapLVIEXdubNX L877oIVJmeAoSWz1+AYelK6CIpuGUUcGSsXKd4Xl9yOTrmLb7PTjrRpXsWSHJi//jrXTrR/X6M+U TterfzhR5gYPFyvX65Zie9M7k7V2yB3YJJPzT8EtfrJc+eDzYAgiWK8X/ToMZOG7noa/Er8FEARn joL7pKHVOkHTOM9UNaublWlhiUEzzXx9kYPKjgqjAetRo4zh1KBFm9MBlXeigAVBx+BQpP0OdmHb 5vcX3pUR4lkRpnVeLKFR++q6z+bViYAxggRnMIIEYwIBATCBrDCBljELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2Vj dGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIRAPuElTZ4EhaY10ByhNJltnIwCQYFKw4DAhoFAKCCAo8wGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzI3MTcyNzUxWjAjBgkq hkiG9w0BCQQxFgQUJy+sMfPQnNcV2gqtbTG/dpdLw1Uwga0GCSqGSIb3DQEJDzGBnzCBnDALBgkq hkiG9w0BAQcwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIaMAsGCSqGSIb3DQEBCjAL BglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBvQYJKwYBBAGCNxAEMYGvMIGs MIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENs aWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA+4SVNngSFpjXQHKE0mW2 cjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+ MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQD7hJU2eBIWmNdAcoTSZbZyMA0GCSqGSIb3DQEBAQUABIIBAFR73XW/xaTwZRDOMnGd owH2qPH25MkJwPjDBviSrhDwsFkwsDHo0QF2XFSciporl+klprJTWJ+5hZ8r+nQo0Ss/Vwjer866 5efQM6CQJw92gyUloyJp0DCCg1Py90WlE1hwZHw94saRqJBi/I+0b/8B/1lhWKsoffBgDvExM2PG PKEB7LoEVztE9QsiheFtRg/vYHSJwYrBXYbrGUuaz2PXSQhw/MUzjw+CRsnVMVNTEK37v2ZnjfJb 1+AdQ48c8BJ8qSuNlJG3M38WclYza6hSLvh05u0SZiD+HfurnwcsUyZKTGwt4+shofIzvoh0N9uo gtXWxh84jpS4b9cw/pEAAAAAAAA= ------=_NextPart_000_01B4_01D66419.BA184100-- From nobody Mon Jul 27 11:33:17 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD3DA3A10BD for ; Mon, 27 Jul 2020 11:33:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=4xZLUd6L; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=4xZLUd6L Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xAgAFforR2wH for ; Mon, 27 Jul 2020 11:33:09 -0700 (PDT) Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2084.outbound.protection.outlook.com [40.107.21.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F4DF3A101B for ; Mon, 27 Jul 2020 11:33:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9lp+qDSsPyxT2oIKFqhfZWsSoIrJqith7oYyprY5xlI=; b=4xZLUd6L3eBH1DmjP+pSXtKM0DBdRzCh9IhGzJkV7LvkpZEl4sf8xSKm9zMPQ1f8YNYi+unwwVy5tA3Q7zKRsPQevUz93ltNE/TeDBz5kb5VNHHagU0ndBNBGaizUU81/vuc8jQS6xlyYeEAmX/8wCDplFakNG7XLkN8RD7exvE= Received: from AM5PR0402CA0016.eurprd04.prod.outlook.com (2603:10a6:203:90::26) by VI1PR0802MB2224.eurprd08.prod.outlook.com (2603:10a6:800:9f::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.24; Mon, 27 Jul 2020 18:33:06 +0000 Received: from AM5EUR03FT046.eop-EUR03.prod.protection.outlook.com (2603:10a6:203:90:cafe::b0) by AM5PR0402CA0016.outlook.office365.com (2603:10a6:203:90::26) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.23 via Frontend Transport; Mon, 27 Jul 2020 18:33:06 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT046.mail.protection.outlook.com (10.152.16.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.10 via Frontend Transport; Mon, 27 Jul 2020 18:33:06 +0000 Received: ("Tessian outbound 1dc58800d5dd:v62"); Mon, 27 Jul 2020 18:33:06 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 759b1820631f7bb7 X-CR-MTA-TID: 64aa7808 Received: from 4280f35423fb.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id F006F96F-6446-4C0E-A528-BDDB9EFC9125.1; Mon, 27 Jul 2020 18:33:00 +0000 Received: from EUR05-DB8-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 4280f35423fb.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 27 Jul 2020 18:33:00 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IdvipfFTuNlPep9tsflxNFfDn8C4lLOvgj/1G0nnbtrEwjTb67hvexQq4tYPuYnQOszY6XoiQrP7PVLXDYrrqgbxx6dOBjKayLPy/IqF1yrtJ5gSoTG5GqQOfWppWng/4riZQI06LGDzrjMY6rKEreAuCGv/crjiZHa9oTZVXI3hPm4uA7feeR3iOuKxoUucahXYyyQy5OOQAB7S+LBTm+0MLG+gaRwyoYS1xMUiXNcNabk15bDHwpNn2BdHCAAJQss/G8LianHJpHgybEQnKcklwa6UUCrGD2mnR+E/p/DHqKQ5ckO3Re+KucH+qqGRoG099E2zdXB06jQ9D1RIOw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9lp+qDSsPyxT2oIKFqhfZWsSoIrJqith7oYyprY5xlI=; b=nHCAIgym4wCVzZWTgW2MtzlK6usdib9M4H1arBTAEyD/WA44kGG5+LKzC6LA9tMx2dc9ZxE3spcM4+rrkg/627YRQSE5G1lZYx9WhoXZN5Wo1ymUFWSz6K4Ex/Iu8rNo9DSIDNtYBLBUp+M9jcUGs9LaVFuanTXg468peIx8wSTFM6yuC3h01ZcMG+o1/TtHMZGfDds86L+uGc6BVHcKOJ4XohiZTINux74BguYpmfSBmRFzMN+YjIi+QhLZJj7+Sgro+OpxGicqlMZMKhM5jzoECYBNtG1VjOTmKJmx5B43kBeXZxRSjaDMEqFl2TsvMM2Ww4sJ4vkw6xujLejhBg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9lp+qDSsPyxT2oIKFqhfZWsSoIrJqith7oYyprY5xlI=; b=4xZLUd6L3eBH1DmjP+pSXtKM0DBdRzCh9IhGzJkV7LvkpZEl4sf8xSKm9zMPQ1f8YNYi+unwwVy5tA3Q7zKRsPQevUz93ltNE/TeDBz5kb5VNHHagU0ndBNBGaizUU81/vuc8jQS6xlyYeEAmX/8wCDplFakNG7XLkN8RD7exvE= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3303.eurprd08.prod.outlook.com (2603:10a6:209:40::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.24; Mon, 27 Jul 2020 18:32:59 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::459b:bcf3:b888:c906%6]) with mapi id 15.20.3216.033; Mon, 27 Jul 2020 18:32:59 +0000 From: Thomas Fossati To: Henk Birkholz , "rats@ietf.org" CC: Thomas Fossati Thread-Topic: [Rats] Where Do Interaction Models Go? Thread-Index: AQHWYPJaZ3/j/5CSZEuZlW5mxHAYcKkb15IA Date: Mon, 27 Jul 2020 18:32:59 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.39.20071300 Authentication-Results-Original: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: e2c1bb72-b1fc-4ecd-701a-08d8325b8145 x-ms-traffictypediagnostic: AM6PR08MB3303:|VI1PR0802MB2224: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: knrCFXAcrhD6WW/h7Ixr51uinPSqJlBbKrYgakjYYUBR40CkI8vaOC7F9XgDUaigy9TQFiuy02kXIKLOnH1qr8pIwu0e5rkBUhTKIwI9Wisjtwf14aUmgIkc7oew9RsBbSZ5CK8oi1qoGZkhVqxQJfBm6gPjHboqsVfsmbnWWS07yADFz9o5KYcELNL3jX/TKWmGxhoADwHTJkSkDHrowpYTOqNL257mXjbTf9uci3C1gpECx1lY7284ASMMG2fC2ADs5EQVoDuVF+jQep2BGuqBVI/RqXw5dcKEHhKVs1XD5/IOCNeyfsCipz46le1OgpkSD1jyfcbB4RdAGwyaS5SmYxuiRiw9SyXWwWDExsfc+6AAO3K9UUDPVin0hHplARGZlb9LMsOKx3PFmKUUlQ== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(396003)(346002)(136003)(366004)(39860400002)(64756008)(26005)(5660300002)(86362001)(966005)(33656002)(2906002)(36756003)(66446008)(66556008)(66476007)(66946007)(76116006)(91956017)(478600001)(110136005)(71200400001)(4326008)(8936002)(53546011)(83380400001)(6506007)(6512007)(8676002)(316002)(2616005)(6486002)(186003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 7dQWJFvhMDDlWWLX0hi2Geve16TOSF6WXwptfmQAvWXCj8qqGubiL4qfU4Fp/noVS1F90ZAcvXTOWimcdsHNwcidqT/lU+ECKzjipmGJko+w233mIeGdm5AjymisQkF+2CuvO5Uvv+XhC6H/Uvm3npbtR+ecUauJFihrvv9eY1+T7soC8zmPAjfpoIk1gKAS7NARC3eYFUwO6oLmgQO1weSaeyk23MA5ZnPkEvcNaJ/8Jao0tVl5QOwNeqLqJlK3sO/ClwVLdpY9gcNET0zzXiL15hFwHIxXoYHW6oZK0KgJFCRRdJre42Fg6OMbIgmfBeRRqACMQdscqm+o7t1GoAorb/2X3BDEkbX4Hce8+SWOOLrqNQT7V6ud34tw1Wx8y1s5WKbIsPPsuhtGQmbaS9/Fw+l1UiXGoiwMDGuVQ9JqALyQI4By8nH5hBLjvXSKh0fsIt2oPzI21kjmKo8s9xRvlPQUjkFPKFMIHLEcz2I= Content-Type: text/plain; charset="utf-8" Content-ID: <8326DF0AE057EA4DBB8786723F7FF282@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3303 Original-Authentication-Results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT046.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: dba0b185-ab77-4543-788b-08d8325b7cea X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: mD5i3rnRWWbBT0MaPxfoT8cARMBArkXjtShdNx9czv1v88sTKfYwUPu5+KYtEnxvwKVd5SGCYgg3z8TuOAjfWJXSA7eY8/eKI6b+gjTJSB2L6dqH/MB0Kzm97MReMYQ/24JhlRMRf/BHL6ZquB2jJhcJN05dWhDRQB0g2fe9PqAmtMwv+gpL4S9izHkYkQVgqer+TsnV9RdCjqt3ZGJMdJ2wvcMS2rKuKKFfIXzewNqLg6wzOWUiORLFzJYu9/WyiFwnvv/axSZx+5b6A0ORauuzvr57aGUh57YoUWhkiBl4nMXXjk/dZZBSLNuBFX1/eRbFZbg5wno0dkvO5cUV35BqOpKaZaeEfLADhy0PxJonZZ4FXq2G/GMC5YYcvpH3nboA72APzJR1vzgar03k0M5fVvFnGBreWOYDRvrcSTjSftXmmrIvYEBnMdrUh75v436RHr8iHgMsHFikY0SQlMMgW2AXDnL4oH89aykr7j0= X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(136003)(346002)(396003)(376002)(46966005)(110136005)(478600001)(4326008)(82740400003)(6486002)(8936002)(8676002)(316002)(336012)(2616005)(186003)(47076004)(83380400001)(6506007)(6512007)(53546011)(966005)(26005)(86362001)(81166007)(5660300002)(33656002)(70206006)(70586007)(82310400002)(356005)(36756003)(2906002)(36906005); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jul 2020 18:33:06.4609 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e2c1bb72-b1fc-4ecd-701a-08d8325b8145 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT046.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0802MB2224 Archived-At: Subject: Re: [Rats] Where Do Interaction Models Go? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jul 2020 18:33:12 -0000 SGkgSGVuaywNCg0KT24gMjMvMDcvMjAyMCwgMTQ6MDgsICJIZW5rIEJpcmtob2x6IiA8aGVuay5i aXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4NCndyb3RlOg0KPiBIaSBsaXN0LA0KPg0KPiBvdXIg Zmlyc3QgdmlydHVhbCBzZXNzaW9uIG9uIEp1bHkgMjh0aCBpcyBhcHByb2FjaGluZy4gQXQgdGhl IGxhc3QNCj4gbWVldGluZywgd2UgaGlnaGxpZ2h0ZWQgdGhlIHF1ZXN0aW9uOiB3aGVyZSBkbyBp bnRlcmFjdGlvbiBtb2RlbHMgZ28/DQo+DQo+IENvbnRleHQ6IHRoZXJlIGFyZSB0aHJlZSBxdWl0 ZSBjb21tb24gaW50ZXJhY3Rpb24gbW9kZWxzIChwbHVzIG1pbmltYWwNCj4gcmVxdWlyZW1lbnRz IGFuZCBpbmZvcm1hdGlvbiBlbGVtZW50cyBmb3IgdGhlbSkgdGhhdCBjYW4gYmUgdXNlZCB0bw0K PiBjb252ZXkgUkFUUyBDb25jZXB0dWFsIE1lc3NhZ2VzLCBzdWNoIGFzIEV2aWRlbmNlIG9yIEF0 dGVzdGF0aW9uDQo+IFJlc3VsdHMuIE1vc3QgQ29uY2VwdHVhbCBNZXNzYWdlcyBzaG91bGQgaW5j bHVkZSBvbmx5IHVwLXRvLWRhdGUNCj4gY29udGVudCAoY29tbW9ubHkgcmVmZXJyZWQgdG8gYXMg ImZyZXNoIikgdG8gYmUgZmVhc2libGUuIEFzIGEgcmVzdWx0LA0KPiBpbnRlcmFjdGlvbiBtb2Rl bHMgZGlyZWN0bHkgc3VwcG9ydCBtZXRob2RzIHRvIHNob3cgdGhhdCBjb250ZW50IGlzDQo+IGZy ZXNoIChjaGFsbGVuZ2UtcmVzcG9uc2UgJiBzdHJlYW1lZCByZW1vdGUgYXR0ZXN0YXRpb24pIG9y IGRvbid0IGhhdmUNCj4gdG8gYmVjYXVzZSB0aGUgY29udGVudCBzaG93cyB0aGF0IGJ5IGl0c2Vs ZiAodGltZS1iYXNlZCByZW1vdGUNCj4gYXR0ZXN0YXRpb24pLg0KPg0KPiBQcm9ibGVtOiBSZWl0 ZXJhdGluZyBob3cgdGhlIGNvbW1vbiBtb2RlbHMgd29yayBhbmQgaG93IHRoZXkgYXJlDQo+IHJl bGF0ZWQgaW4gZXZlcnkgc29sdXRpb24gZHJhZnQgY2FuIHByb3ZlIHRvIGJlIGVycm9yIHByb25l LA0KPiBhbWJpZ3VvdXMsIGRpZmZpY3VsdCB0byBjb21wYXJlIGluIEVuZ2xpc2gsIG9yIHNpbXBs eSBiZSByZWR1bmRhbnQuDQo+DQo+IFNvbHV0aW9uOiBEZXNjcmliaW5nIHRoZW0gb25jZSBhbmQg dGhlbiByZWZlcmVuY2luZyB0aGUgYnVsayBvZiBpdA0KPiBlbGltaW5hdGVzIHRoZSBuZWVkIGZv ciB0ZXh0IGNsb25pbmcsIGRhbmdlciBvZiBpbmNvbnNpc3RlbmNpZXMvc3VidGxlDQo+IGRldmlh dGlvbnMsIGFuZCByZWR1bmRhbmN5IGluIGdlbmVyYWwuDQo+DQo+DQo+IFRoZSByZW1haW5pbmcg cXVlc3Rpb24gaXM6IHdoZXJlIHNob3VsZCB0aGlzIGNvbnRlbnQgYWJvdXQgaW50ZXJhY3Rpb24N Cj4gbW9kZWwgZ28/DQo+DQo+DQo+IEF0IHRoZSBsYXN0IG1lZXRpbmcgZm91ciBvcHRpb25zIHdl cmUgcHJlc2VudGVkOg0KPg0KPiAqIE9wdGlvbiAxOiBzdGFuZGFsb25lIChvbmUgSS1EIGZvciBl YWNoIG1vZGVsKQ0KPiAqIE9wdGlvbiAyOiBzdGFuZGFsb25lIChvbmUgSS1EIGZvciBhbGwgbW9k ZWxzKQ0KPiAqIE9wdGlvbiAzOiBhbGwgdGhyZWUgbW9kZWxzIG1lcmdlZCBpbnRvIHRoZSBhcmNo aXRlY3R1cmUgSS1EDQo+ICogT3B0aW9uIDQ6IGVhY2ggbW9kZWwgbWVyZ2VkIGludG8gYSBzZXBh cmF0ZSBzb2x1dGlvbiBJLUQNCj4NCj4gRWFjaCBvcHRpb24gaGFzIHByb3MgYW5kIGNvbnMuIFNv LCBJJ2QgbGlrZSB0byBicmluZyB0aGlzIHF1ZXN0aW9uIHRvDQo+IHRoZSBsaXN0ICgsZmluYWxs eS4uLiBJIGNhbiBiZSBxdWl0ZSBzbG93KS4NCj4NCj4gVGhlcmUgaXMgb2YgY291cnNlIHRoZSBj dXJyZW50IHJlZmVyZW5jZSBpbnRlcmFjdGlvbiBtb2RlbCBJLUQgdGhhdA0KPiB0YWxrcyBhYm91 dCB0aGUgdGhyZWUgbW9kZWxzIGFuZCBob3cgZGlyZWN0IGFub255bW91cyBhdHRlc3RhdGlvbiBj YW4NCj4gYmUgZW5hYmxlZCBieSBhbGwgdGhyZWUgb2YgdGhlbS4gUGxlYXNlIGhhdmUgYSBxdWlj ayBsb29rLCBtYXliZSB0aGF0DQo+IGhlbHBzIHRvIHByb3ZpZGUgc29tZSBmZWVkYmFjayBoZXJl IDopIEZpdmUgZHJhZnRzIHJlZmVyZW5jZSB0aGlzIG9uZQ0KPiBhdCB0aGUgbW9tZW50Og0KPg0K PiA+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWJpcmtob2x6LXJhdHMt cmVmZXJlbmNlLWludGVyYWN0aW9uLW1vZGVsLw0KPg0KPiBXZSB3aWxsIGRlZGljYXRlIHNvbWUg dGltZSB0byB0aGlzIHRvcGljIG9uIFR1ZXNkYXkgYW5kIGhvcGUgZm9yIHNvbWUNCj4gZmVlZGJh Y2shDQoNCkhpZ2hsaWdodGluZyBjb21tb24gaW50ZXJhY3Rpb24gcGF0dGVybnMgdGhhdCBjYW4g YmUgZ3Jhc3BlZCB3aXRob3V0DQpkZWx2aW5nIGludG8gcHJvdG9jb2wgZGV0YWlscyBzZWVtcyBs aWtlIGEgdXNlZnVsIHVuZGVydGFraW5nLiAgRm9yDQp0aGF0IHJlYXNvbiBJJ2QgcHJlZmVyIHdl IGRvbid0IGRvIDQuDQoNCkludGVyYWN0aW9uIG1vZGVscyBsb29rcyBvcnRob2dvbmFsIHRvIHRo ZSBhcmNoaXRlY3R1cmUsIHNvIEkgd291bGRuJ3QNCmNvbmZsYXRlIHRoZSB0d28gLSByaXNraW5n IHNsb3dpbmcgZG93biBkZWxpdmVyeSBvZiB0aGUgYXJjaCBkb2MsIGFzDQphbHJlYWR5IG5vdGVk IGJ5IEd1eSBhbmQgRXJpYy4gIFRoaXMgcnVsZXMgb3V0IDMuDQoNCldoaWNoIGxlYXZlcyBtZSB3 aXRoIGVpdGhlciAxIG9yIDIuICBIb3dldmVyLCBpZiBJIGhhdmUgdG8gY2hvb3NlLCBJDQp3b3Vs ZG4ndCBkbyAxIHNpbmNlIGl0J3Mgbm90IGNsZWFyIHRvIG1lIHdoYXQgdGhlIGFkdmFudGFnZSBv ZiBoYXZpbmcNCm11bHRpcGxlIHNlcGFyYXRlIGRvY3MgaXMuICAoSSBzZWVtIHRvIG9ubHkgc2Vl IGRpc2FkdmFudGFnZXM6IGVkaXRvcmlhbA0KYW5kIHByb2Nlc3Mgb3ZlcmhlYWQsIHNjYXR0ZXJl ZCByZWFkaW5nLikNCg0KVGhlcmVmb3JlLCBJJ2Qgc2F5IDIuDQoNCkNoZWVycyENCg0KDQoNCg0K SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRh Y2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5 b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k ZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90 aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUg aW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Tue Jul 28 07:10:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1975A3A0CB2 for ; Tue, 28 Jul 2020 07:10:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2jB_63FOpCON for ; Tue, 28 Jul 2020 07:10:30 -0700 (PDT) Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10on2109.outbound.protection.outlook.com [40.107.94.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3DB93A0CB1 for ; Tue, 28 Jul 2020 07:10:29 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Qww8qzuX0mAejFxgUcGye1fSk1ll7gPM43JOcvgSOlUBNW8eId16peTJNqFwpd5huY/GyBEkE5lj+FHvZL/x0RuF5ipVSt9yj5Un5xjzLyzHD7azMTkTKzVoVkzqkiud7CrkbQJ5NcE5QaZcOIEZdDXBoUiuEaiiA2Yyn/4cJ5yiKfHWLPPbZsTAYxuFt/gtAFTwemU3KeR/AZxu4iME4gj6OYmikaXs8nRplhG5aRJ83ZHjkOwQ9VjAdXvjwlgbd76ZoNfqyVrX74fShFVXi3K0IjXXikaNhg3+XsQgTqZsm9MrVQKjoelfl0TynsHDLCNgJrHQ9bKiemP18Adfjg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rfEfYQtSuWj4/8hiBnN/PIbZbMCSVUBBt+Yd1T3TMD0=; b=XcuvziU4Fp+mVVBiSog+QNhaQ8HEBa0LICPYLt2A5lHGpr6L8V7R6QCxyA6JXe0hFi5Kjx8/XNButIXtgRBxpnG75eRyhEXSEGYiTT9IU7RaayGL/K1FJrNyAkasNJCINcSbFp2/kTDnuN8hcH2YopWh5hR+lnqVNKVFaTLIo/CFGg5hvqMJDGEFpw46UOll+T4rYopB4LWv5IxmFZULYzr8zdX6D0DG8KYlSFaxsMMZWstKYscG6W22vhASYnkVtwr0JrVXP9WJaMwKEjATMPRaaFC1kApRgTMIJr5CFxa8l2nlz/8Y7rCRhgHR3QxkWkLFPdjK45ItOL1hHNb1QQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rfEfYQtSuWj4/8hiBnN/PIbZbMCSVUBBt+Yd1T3TMD0=; b=jczpLgrQ62S4JMXwGF/zMCpAeOtmMBqVzGPHYOqhAtm8XjoNNgr2/1GSx9Ndx0luEXsfexVPsXpprh2xe2t7EH7e7VhCWLYe80ZBKtsx/RGqeNcmZZYFyDEn33J0Nl2TqfSlo3UbQQ0eGWFkjSqUeYy7xQK+dolazsp+7zPqGlg= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1762.namprd21.prod.outlook.com (2603:10b6:207:1d::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.3; Tue, 28 Jul 2020 14:10:28 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::f9ee:91d4:b4ce:9ee4]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::f9ee:91d4:b4ce:9ee4%6]) with mapi id 15.20.3239.016; Tue, 28 Jul 2020 14:10:28 +0000 From: Dave Thaler To: "Eric Voit (evoit)" , "rats@ietf.org" CC: Wei Pan , "Birkholz, Henk" Thread-Topic: draft-birkholz-rats-network-device-subscription-00 Thread-Index: AdZKRjugUmuktT1iTCKR70EUNGNj/gaoi4kQ Date: Tue, 28 Jul 2020 14:10:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-07-28T14:10:27Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=418b9af6-b4d5-4eb1-9d7d-e75014a19a02; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:16f0:9438:ccb1:b4a8:f45f] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ab9940a6-d286-4f90-93a0-08d832fffb48 x-ms-traffictypediagnostic: BL0PR2101MB1762: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 1oy82XfGxzVgMfJEiBk0H8Iw2K28qoV4sL1pjO6huWDrmc/snfyFfQNMntZ99DqCkdRp3aPM2F9oI+Ah1HEvkVXaBSzaXKEFAeb34ktg01D6pqYUIfycg2ORHB8bF5ft2l5JqHI31eTO+VRN1aRfLLp58kMM97jlO1dnV7TMXHxucErvOR3iWR5YVqHg0GP8Py8ewXBIyl92m7wY86S2MtNHArEoiUL8bh+ny63fyqGX2uEnU2SY7iSkVmeGqszcMUiJ2nC1ydKi2FtTSq0GpNEf9SuLZGmj0lzS6PInTfoaE65iSf7el8tdVZWhrio7y33tTiYljcTSFmv7cJ7KVyEG9F0H8WuewLLZa7FUv+X9Gn5ux261QVKLTcmVQy4PZ9UIcK+q33tEGINF2GRCeA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(366004)(39860400002)(136003)(376002)(346002)(86362001)(5660300002)(66574015)(8990500004)(6506007)(10290500003)(2906002)(186003)(54906003)(7696005)(110136005)(83380400001)(53546011)(71200400001)(316002)(966005)(55016002)(33656002)(9686003)(76116006)(66476007)(66446008)(8676002)(66556008)(4326008)(478600001)(52536014)(66946007)(82950400001)(64756008)(82960400001)(8936002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ab9940a6-d286-4f90-93a0-08d832fffb48 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2020 14:10:28.5902 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: oS9Qb85H+KelMQUAzTmLCbsREqrx3pZhbrC7wjD1IuH3CZ4b5Zu+zio8TlyiVWRZelpfE0DYeFhz6e2++t2HRUXWnvyQr8ArjLjb/3wsW7k= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1762 Archived-At: Subject: Re: [Rats] draft-birkholz-rats-network-device-subscription-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 14:10:32 -0000 SSBhc2tlZCBpbiB0aGUgbWVldGluZyBob3cgYSBzdWJzY3JpYmVyIGtub3dzIHdobyB0byBzdWJz Y3JpYmUgdG8sIGFuZCBJIGJlbGlldmUgdGhlIGFuc3dlciB3YXMNCnRoYXQgQ0hBUlJBIGFuc3dl cnMgdGhhdC4gIFdlbGwgSSBsb29rZWQgaW4gZHJhZnQtaWV0Zi1yYXRzLXlhbmctdHBtLWNoYXJy YS0wMiBhbmQgaXQgZG9lcyBub3QNCmNvbnRhaW4gYW55IG1lbnRpb24gb2YgdGhlIHN1YmplY3Qu ICBJIHRoaW5rIG9uZSBvciB0aGUgb3RoZXIgb2YgdGhlIHR3byBkcmFmdHMgbmVlZHMgdG8gYWRk cmVzcw0KdGhpcyBpc3N1ZS4gIE15IHByZWZlcmVuY2UgaXMgdGhhdCBpdCBiZSBpbiBkcmFmdC1i aXJraG9sei1yYXRzLW5ldHdvcmstZGV2aWNlLXN1YnNjcmlwdGlvbiBzaW5jZQ0KdGhhdCdzIHRo ZSBkcmFmdCB0aGF0IHRhbGtzIGFib3V0IGxpbWl0YXRpb25zIGxpa2UNCj4gRXZpZGVuY2UgaXMg bm90IHN0cmVhbWVkIHRvIGFuIGludGVyZXN0ZWQgVmVyaWZpZXIgYXMgc29vbiBhcyBpdCBpcyBn ZW5lcmF0ZWQuDQpXaGljaCBjZXJ0YWlubHkgc3RpbGwgYXBwbGllcywgaXQncyBqdXN0IGFub3Ro ZXIgY2FzZS4uLiB5b3UgZGlkbid0IGtub3cgdG8gc3Vic2NyaWJlIHRvIGl0IHVudGlsDQphZnRl ciB0aGUgZXZpZGVuY2Ugd2FzIGdlbmVyYXRlZCB3aGVuIGl0IGJvb3RlZC4NCg0KRGF2ZQ0KDQot LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYu b3JnPiBPbiBCZWhhbGYgT2YgRXJpYyBWb2l0IChldm9pdCkNClNlbnQ6IFdlZG5lc2RheSwgSnVu ZSAyNCwgMjAyMCA5OjQxIEFNDQpUbzogcmF0c0BpZXRmLm9yZw0KQ2M6IFdlaSBQYW4gPHdpbGxp YW0ucGFud2VpQGh1YXdlaS5jb20+OyBCaXJraG9seiwgSGVuayA8aGVuay5iaXJraG9sekBzaXQu ZnJhdW5ob2Zlci5kZT4NClN1YmplY3Q6IFtSYXRzXSBkcmFmdC1iaXJraG9sei1yYXRzLW5ldHdv cmstZGV2aWNlLXN1YnNjcmlwdGlvbi0wMA0KDQpIaSBBbGwsDQoNClRoaXMgZHJhZnQgZGVmaW5l cyBob3cgdG8gc3Vic2NyaWJlIHRvIGEgc3RyZWFtIG9mIGF0dGVzdGF0aW9uIHJlbGF0ZWQgRXZp ZGVuY2Ugb24gVFBNLWJhc2VkIG5ldHdvcmsgZGV2aWNlcy4gIFdoZW4gc3Vic2NyaWJlZCwgYSBU ZWxlbWV0cnkgc3RyZWFtIG9mIHZlcmlmaWFibHkgZnJlc2ggWUFORyBub3RpZmljYXRpb25zICh3 aGljaCBhcmUgZ2VuZXJhdGVkIHdoZW4gVFBNIFBDUnMgYXJlDQpleHRlbmRlZCkgYXJlIHB1c2hl ZCB0byB0aGUgc3Vic2NyaWJlci4NCg0KVGhpcyBkcmFmdCBpbnRlZ3JhdGVzOg0KICogIFNlY3Rp b24gNSBvZiBkcmFmdC12b2l0LXJhdHMtdHJ1c3RlZC1wYXRoLXJvdXRpbmctMDENCiAqICBFbGVt ZW50cyBvZiBkcmFmdC14aWEtcmF0cy1wdWJzdWItbW9kZWwNCg0KVGhhbmtzIQ0KDQpFcmljLCBI ZW5rLCBhbmQgV2VpDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGludGVy bmV0LWRyYWZ0c0BpZXRmLm9yZyA8aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPg0KU2VudDogV2Vk bmVzZGF5LCBKdW5lIDI0LCAyMDIwIDEyOjE5IFBNDQpUbzogRXJpYyBWb2l0IChldm9pdCkgPGV2 b2l0QGNpc2NvLmNvbT47IFdlaSBQYW4gPHdpbGxpYW0ucGFud2VpQGh1YXdlaS5jb20+OyBIZW5r IEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPg0KU3ViamVjdDogTmV3 IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvcg0KZHJhZnQtYmlya2hvbHotcmF0cy1uZXR3b3JrLWRl dmljZS1zdWJzY3JpcHRpb24tMDAudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0 LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vic2NyaXB0aW9uLTAwLnR4dA0KaGFzIGJl ZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSBFcmljIFZvaXQgYW5kIHBvc3RlZCB0byB0aGUg SUVURiByZXBvc2l0b3J5Lg0KDQpOYW1lOgkJZHJhZnQtYmlya2hvbHotcmF0cy1uZXR3b3JrLWRl dmljZS1zdWJzY3JpcHRpb24NClJldmlzaW9uOgkwMA0KVGl0bGU6CQlBdHRlc3RhdGlvbiBFdmVu dCBTdHJlYW0gU3Vic2NyaXB0aW9uDQpEb2N1bWVudCBkYXRlOgkyMDIwLTA2LTI0DQpHcm91cDoJ CUluZGl2aWR1YWwgU3VibWlzc2lvbg0KUGFnZXM6CQkyMA0KVVJMOiANCmh0dHBzOi8vbmFtMDYu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5p ZXRmLm9yZyUyRmludGVybmV0LWRyYWZ0cyUyRmRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1k ZXZpY2Utc3Vic2NyaXB0aW9uLTAwLnR4dCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1p Y3Jvc29mdC5jb20lN0MyNTgyNWUyYTM3ODM0NDkyMzBhNzA4ZDgxODVkNzdmNiU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODYxMzcwMjkxMTUxMzUmYW1w O3NkYXRhPU1uRUo1WndBaDRCbFROczA5ZmswVnIxSDM5ajVOJTJCSmR5QlFITkpwN0JkWSUzRCZh bXA7cmVzZXJ2ZWQ9MA0KU3RhdHVzOiANCmh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYub3JnJTJG ZG9jJTJGZHJhZnQtYmlya2hvbHotcmF0cy1uZXR3b3JrLWRldmljZS1zdWJzY3JpcHRpb24lMkYm YW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDMjU4MjVlMmEzNzgz NDQ5MjMwYTcwOGQ4MTg1ZDc3ZjYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3 QzElN0MwJTdDNjM3Mjg2MTM3MDI5MTE1MTM1JmFtcDtzZGF0YT1xdWtMUWFxMTdQNHRzMjBuVzFM JTJCMmRCOXpJTTlYQjlTUmNzY0ZXY09lTHclM0QmYW1wO3Jlc2VydmVkPTANCkh0bWxpemVkOiAN Cmh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRw cyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0 d29yay1kZXZpY2Utc3Vic2NyaXB0aW9uLTAwJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQw bWljcm9zb2Z0LmNvbSU3QzI1ODI1ZTJhMzc4MzQ0OTIzMGE3MDhkODE4NWQ3N2Y2JTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NjEzNzAyOTEyNTA5NSZh bXA7c2RhdGE9UTBUZkZqcmZIWlUlMkZLRk9UM2xpNEpHMFFvQmEzVm8lMkZrSFRwMDBUNkdiWlkl M0QmYW1wO3Jlc2VydmVkPTANCkh0bWxpemVkOiANCmh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnBy b3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYu b3JnJTJGZG9jJTJGaHRtbCUyRmRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vi c2NyaXB0aW9uJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1 ODI1ZTJhMzc4MzQ0OTIzMGE3MDhkODE4NWQ3N2Y2JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN0MxJTdDMCU3QzYzNzI4NjEzNzAyOTEyNTA5NSZhbXA7c2RhdGE9UkxTdmRSVGNX WDRHZXc1MFgyREw3dDJwRTdOJTJGQSUyQktXckFWejBOaHNiaUElM0QmYW1wO3Jlc2VydmVkPTAN Cg0KDQpBYnN0cmFjdDoNCiAgIFRoaXMgZG9jdW1lbnQgZGVmaW5lcyBob3cgdG8gc3Vic2NyaWJl IHRvIGEgc3RyZWFtIG9mIGF0dGVzdGF0aW9uDQogICByZWxhdGVkIEV2aWRlbmNlIG9uIFRQTS1i YXNlZCBuZXR3b3JrIGRldmljZXMuDQoNCg0KDQoNClBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRh a2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24gdW50aWwg dGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRm Lm9yZy4NCg0KVGhlIElFVEYgU2VjcmV0YXJpYXQNCg0KDQo= From nobody Tue Jul 28 07:18:32 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 665273A0CB9 for ; Tue, 28 Jul 2020 07:18:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s8OuCssehDXd for ; Tue, 28 Jul 2020 07:18:10 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD1E83A0CB5 for ; Tue, 28 Jul 2020 07:18:03 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GrAwBBMyBf/xoHYZlgHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUqBe4EegTMKhCqQeiWcDAsBAQEBAQEBAQEGAQEbEgIEAQE?= =?us-ascii?q?ChEoCgiIBJDgTAhABAQYBAQEBAQYEAgKGRQyDU4EDAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBARYCQ1USAQEdAQEBAQMjDwEFQQwECQIOAwQBAQECAggBHQICRwgIBgE?= =?us-ascii?q?MAQUCAQGCV0sBgnsFkyWbBHaBMoVSg0aBQIEOKoZGhigPD4FMP4ERJwwDglo?= =?us-ascii?q?+glwCA4RygmAEj1mDCYcAm2gpB4FagQiBCAQLh0GRDAUKHoJ7gSKIJ4R+Bo4?= =?us-ascii?q?hhVGMRp8aAgQCCQIVgWoxgUpNJC6DCglHFwINlyOFRHICNQIGAQcBAQMJfI5?= =?us-ascii?q?rAYEQAQE?= X-IPAS-Result: =?us-ascii?q?A2GrAwBBMyBf/xoHYZlgHAEBAQEBAQcBARIBAQQEAQFAg?= =?us-ascii?q?UqBe4EegTMKhCqQeiWcDAsBAQEBAQEBAQEGAQEbEgIEAQEChEoCgiIBJDgTA?= =?us-ascii?q?hABAQYBAQEBAQYEAgKGRQyDU4EDAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1USA?= =?us-ascii?q?QEdAQEBAQMjDwEFQQwECQIOAwQBAQECAggBHQICRwgIBgEMAQUCAQGCV0sBg?= =?us-ascii?q?nsFkyWbBHaBMoVSg0aBQIEOKoZGhigPD4FMP4ERJwwDglo+glwCA4RygmAEj?= =?us-ascii?q?1mDCYcAm2gpB4FagQiBCAQLh0GRDAUKHoJ7gSKIJ4R+Bo4hhVGMRp8aAgQCC?= =?us-ascii?q?QIVgWoxgUpNJC6DCglHFwINlyOFRHICNQIGAQcBAQMJfI5rAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,406,1589234400"; d="scan'208";a="23355635" Received: from mail-mtas26.fraunhofer.de ([153.97.7.26]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Jul 2020 16:18:00 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CsBAAVMyBf/1lIDI1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgUqBey9vVzAsCoQqkHslnAwLAQMBAQEBAQYBARsSAgQBAYR?= =?us-ascii?q?MAoIgAiQ4EwIQAQEFAQEBAgEGBG2FXAyFcQEBAQQjDwEFQQwECQIOAwQBAQE?= =?us-ascii?q?CAggBHQICRwgIBgEMAQUCAQGCV0sBgwCTJJsEdoEyhVKDRoFAgQ4qhkaGKA8?= =?us-ascii?q?PgUw/gREnDAOCWj6CXAIDhHKCYASPWYMJhwCbaCkHgVqBCIEIBAuHQZEMBQo?= =?us-ascii?q?egnuBIognhH4GjiGFUYxGnxoCBAIJAhWBaiMNgUpNJC6DCglHFwINlyOFREE?= =?us-ascii?q?xAjUCBgEHAQEDCXyOawGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,406,1589234400"; d="scan'208";a="118519588" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaS26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 28 Jul 2020 16:17:58 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06SEHvU0015920 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Tue, 28 Jul 2020 16:17:57 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Tue, 28 Jul 2020 16:17:52 +0200 To: Dave Thaler , "Eric Voit (evoit)" , "rats@ietf.org" CC: Wei Pan References: From: Henk Birkholz Message-ID: <0428729f-5754-8b19-6bbf-378aa123c799@sit.fraunhofer.de> Date: Tue, 28 Jul 2020 16:17:50 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] draft-birkholz-rats-network-device-subscription-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 14:18:14 -0000 Hi Dave, a clarifying question: What exactly do you mean by the "who" in "a subscriber knows who to subscribe to"? The I-D does not come with its own join/rendezvous/discovery capability. That either comes related with YANG Push ("call home"). That would be a "who" on the entity level. Another possibility is that you mean a YANG RPC with the "who"? That would be a "who" on the management interface level. Or you could mean one of the Attesting Environment of a composite Attester. Tha would be a "who" on the Attester level. And that is done via the included data store. Or do you mean something I am missing here? Viele Grüße, Henk On 28.07.20 16:10, Dave Thaler wrote: > I asked in the meeting how a subscriber knows who to subscribe to, and I believe the answer was > that CHARRA answers that. Well I looked in draft-ietf-rats-yang-tpm-charra-02 and it does not > contain any mention of the subject. I think one or the other of the two drafts needs to address > this issue. My preference is that it be in draft-birkholz-rats-network-device-subscription since > that's the draft that talks about limitations like >> Evidence is not streamed to an interested Verifier as soon as it is generated. > Which certainly still applies, it's just another case... you didn't know to subscribe to it until > after the evidence was generated when it booted. > > Dave > > -----Original Message----- > From: RATS On Behalf Of Eric Voit (evoit) > Sent: Wednesday, June 24, 2020 9:41 AM > To: rats@ietf.org > Cc: Wei Pan ; Birkholz, Henk > Subject: [Rats] draft-birkholz-rats-network-device-subscription-00 > > Hi All, > > This draft defines how to subscribe to a stream of attestation related Evidence on TPM-based network devices. When subscribed, a Telemetry stream of verifiably fresh YANG notifications (which are generated when TPM PCRs are > extended) are pushed to the subscriber. > > This draft integrates: > * Section 5 of draft-voit-rats-trusted-path-routing-01 > * Elements of draft-xia-rats-pubsub-model > > Thanks! > > Eric, Henk, and Wei > > > -----Original Message----- > From: internet-drafts@ietf.org > Sent: Wednesday, June 24, 2020 12:19 PM > To: Eric Voit (evoit) ; Wei Pan ; Henk Birkholz > Subject: New Version Notification for > draft-birkholz-rats-network-device-subscription-00.txt > > > A new version of I-D, draft-birkholz-rats-network-device-subscription-00.txt > has been successfully submitted by Eric Voit and posted to the IETF repository. > > Name: draft-birkholz-rats-network-device-subscription > Revision: 00 > Title: Attestation Event Stream Subscription > Document date: 2020-06-24 > Group: Individual Submission > Pages: 20 > URL: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Finternet-drafts%2Fdraft-birkholz-rats-network-device-subscription-00.txt&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637286137029115135&sdata=MnEJ5ZwAh4BlTNs09fk0Vr1H39j5N%2BJdyBQHNJp7BdY%3D&reserved=0 > Status: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-birkholz-rats-network-device-subscription%2F&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637286137029115135&sdata=qukLQaq17P4ts20nW1L%2B2dB9zIM9XB9SRcscFWcOeLw%3D&reserved=0 > Htmlized: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-birkholz-rats-network-device-subscription-00&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637286137029125095&sdata=Q0TfFjrfHZU%2FKFOT3li4JG0QoBa3Vo%2FkHTp00T6GbZY%3D&reserved=0 > Htmlized: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-birkholz-rats-network-device-subscription&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637286137029125095&sdata=RLSvdRTcWX4Gew50X2DL7t2pE7N%2FA%2BKWrAVz0NhsbiA%3D&reserved=0 > > > Abstract: > This document defines how to subscribe to a stream of attestation > related Evidence on TPM-based network devices. > > > > > Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > From nobody Tue Jul 28 07:54:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC31D3A0D66 for ; Tue, 28 Jul 2020 07:53:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=intel.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZZpNxFn48EDT for ; Tue, 28 Jul 2020 07:53:52 -0700 (PDT) Received: from mga18.intel.com (mga18.intel.com [134.134.136.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1DAD3A0D63 for ; Tue, 28 Jul 2020 07:53:51 -0700 (PDT) IronPort-SDR: qCakGlc+qzEp9GjuM/SPcUNE2vLeG7Wr4pVPJj5OS58Iqi9nheyXXyboI4jPJIRDY3N1ma1MQE A9zvx7L8QNYQ== X-IronPort-AV: E=McAfee;i="6000,8403,9695"; a="138742764" X-IronPort-AV: E=Sophos;i="5.75,406,1589266800"; d="scan'208";a="138742764" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga007.jf.intel.com ([10.7.209.58]) by orsmga106.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 28 Jul 2020 07:53:50 -0700 IronPort-SDR: YobEkcm/KIes7tcbp3cL4xy68Kc369/jGw6hfeAaweFcVee+aVBddZSWY5jXYUphmizX615Me7 UDBNbJup6Lqg== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.75,406,1589266800"; d="scan'208";a="330076071" Received: from fmsmsx603.amr.corp.intel.com ([10.18.126.83]) by orsmga007.jf.intel.com with ESMTP; 28 Jul 2020 07:53:50 -0700 Received: from fmsmsx608.amr.corp.intel.com (10.18.126.88) by fmsmsx603.amr.corp.intel.com (10.18.126.83) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1713.5; Tue, 28 Jul 2020 07:53:50 -0700 Received: from FMSEDG001.ED.cps.intel.com (10.1.192.133) by fmsmsx608.amr.corp.intel.com (10.18.126.88) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.1.1713.5 via Frontend Transport; Tue, 28 Jul 2020 07:53:50 -0700 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (104.47.58.173) by edgegateway.intel.com (192.55.55.68) with Microsoft SMTP Server (TLS) id 14.3.439.0; Tue, 28 Jul 2020 07:53:48 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QEQCbAjtencFfcblj2lDCQmHNXtToEvTBIwyC9VKyo6OU1Os31GRNb+o8R0fTGMdM+xg69NNw/5CCPBt4fXcF5ztmwha5dqzmZ0VXvBzwNBKkH8V8b/JasPWKIqW2w+kfrFLhZdRJtB8CrpiYx6mtfBloj3tSSgYuX8t92vxr/3U9SZib028dEZK/s6ES9kMibhgAw7adFk07D6FaKIy1/UIGCwksuBkqf4rEQWRqmOSzvL8iYxsIJTPNu5q84gqkXj/AxQKMcYahgjCm+wOSXfxptFtm3Vqyck/2V3uF9bea+EJo1dD7OANuBFv6wirevqi0hZWj+ZPxCXmbstWDA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tpdTHobN0N+J+HpDylTF+Sfqhzx7niM7wzU4SxGmP5Y=; b=iqnRP7IqxvNVak5Uhwjak23VWCXsvDpRucvynV/TqyhxaTU4vhaJta6XZbL2/b9xtrIgcyjhZEemu1E10Ewqk4cukwlL4slYnm5rtxMkfgiIZ4bsgr8ba7+z9IGfIi2Gt9MMhgHUJuX4JuVdysyBuquvUloTw7hljfEABQBPRs6lxgFq4sIdeVi28ZIoYe3fE8D6pYjubQYXqJabYwZwl5Fn04BjNJERm+wB5l+wDl+9osImaar5awTpApc2GjkpKh0w6s/3PqPG07HTHerSFhO32R2K9pClEHeriYZ2NyGZbm/5Tu0UqwbKpvyjePyjmzB3zljZN+qqeHziMTAyFw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tpdTHobN0N+J+HpDylTF+Sfqhzx7niM7wzU4SxGmP5Y=; b=K/4S7L5HfcCRF1eQ7uNZXNFGIPCdz0nkg4o7SVlf+UbrcfC8CKYsOegAzLAaQIVcDCkAIvQr9wq2aXi65qPlt6RVDabkG3TaQbveANyU9aEEjN+Pv11rZ4A/jb01Y1okgJ7jNMc+pIqZ+v6gUWfTQ7xeLN1ClBRXA+DcqiDc9KE= Received: from MWHPR11MB1439.namprd11.prod.outlook.com (2603:10b6:301:9::20) by MWHPR11MB1582.namprd11.prod.outlook.com (2603:10b6:301:c::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.20; Tue, 28 Jul 2020 14:53:46 +0000 Received: from MWHPR11MB1439.namprd11.prod.outlook.com ([fe80::acd1:6189:65ad:9750]) by MWHPR11MB1439.namprd11.prod.outlook.com ([fe80::acd1:6189:65ad:9750%5]) with mapi id 15.20.3216.034; Tue, 28 Jul 2020 14:53:46 +0000 From: "Smith, Ned" To: Henk Birkholz , Dave Thaler , "Eric Voit (evoit)" , "rats@ietf.org" CC: Wei Pan Thread-Topic: [Rats] draft-birkholz-rats-network-device-subscription-00 Thread-Index: AdZKRjugUmuktT1iTCKR70EUNGNj/gaoi4kQAABdhgD//5SxAA== Date: Tue, 28 Jul 2020 14:53:45 +0000 Message-ID: <140611B6-9060-47A8-957F-3D4E8E7BFACD@intel.com> References: <0428729f-5754-8b19-6bbf-378aa123c799@sit.fraunhofer.de> In-Reply-To: <0428729f-5754-8b19-6bbf-378aa123c799@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.39.20071300 authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=intel.com; x-originating-ip: [50.53.43.22] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3fceebd3-1088-463a-5de7-08d83306077b x-ms-traffictypediagnostic: MWHPR11MB1582: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: jNt3Th8w+AZbHCM4slA/bdTudBtkVZRb9UqQDqujY5kXGIWB6iQPSvO/yOyIcFVc9pwOUbDWEgLItpHdC1sIyVQmBEOuEXXssH1rZe1v5CJQYsC+KCsFKAbOvo22rjQlRCVtqPF0uN4y3y0or3zEw9c4HRgzveohhujZDpBBHS7ywtwlmjjPElk1nQAvr4vpHA1rFn7dBn3b1SA8KtIqBwhKbR7Hq0z4R+DLL7wggiU6Jj2OQ7JuTRGpL0pbXYgGww4nr1SPqiXpFLAkFcDPNLW0PdSzjubKKgij6D6YvrA4onIEIBb0U7R5Om/LmDgHpfOD2ut0uphtPeR2e/cr7JHXp7j8bgFmCbd0CONmpRf9IWKpRnD4GHqTygcdL2fKqTtVec5D9ytXF1ZS51FxWA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MWHPR11MB1439.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(346002)(376002)(39860400002)(136003)(366004)(396003)(26005)(53546011)(86362001)(76116006)(66574015)(478600001)(83380400001)(4326008)(36756003)(45080400002)(6506007)(316002)(2616005)(110136005)(8936002)(5660300002)(6486002)(33656002)(966005)(2906002)(8676002)(66446008)(186003)(66946007)(66476007)(66556008)(64756008)(6512007)(71200400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: JTJ90puLnu4tYNzzOX0encM+yngeENBHjxQai6MAUscK31TZMxp6zJ632BIpMjgr9gf/j3fWZD30hLBP6ee26fg75GITMCD0YR1eo5fJ6JsjvN4B0/c6JohMNrDzpLeEA92jlnBnMRlbcqVw+SZFb0rNSh5iZdWDwRZaFpl4QktmhXNEE8kXEF3H9KKX5GSleusWegDEUFLZ6ZC10Lb20w6+GSsE5fGueDUI7uuor0NzTIIKHWO9ZVxw6sKcn4oI3OdblKYefO508ySdmO3H7AG9eOWIxJ62GTtaHZx4ciHwUdKK/ugmpBgLjEPtnzmkhIQ9dLJGhztwSuCP8N+s2tPrIrrEnV1rOQ8abw2xBu1G+dk9Ovlg2N3LOEV/DxqO+jjFRazTpALs1WYI741Z1UHZ0Mxr3bqmz6RDw+hUufFOr8eJruQJqlAeGNgNUbwrrhmIUmSsCN2ASZ9iFeH8PHrVFhi1yUVS9l8Ha+lpJ2A= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MWHPR11MB1439.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3fceebd3-1088-463a-5de7-08d83306077b X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2020 14:53:45.9751 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8zU6lJ72xZqbAb76KoY8+YZnKfVhXV5Q2rSIPsCkJ8FLTZ/0DyWofAub4Qlv98eF2pR5+//FO0sS8BZanVMS7w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR11MB1582 X-OriginatorOrg: intel.com Archived-At: Subject: Re: [Rats] draft-birkholz-rats-network-device-subscription-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 14:53:56 -0000 U3Vic2NyaXB0aW9uIG1vZGVscyBjb3VsZCBiZSB0b3BpYyBiYXNlZCByYXRoZXIgdGhhbiBlbnRp dHkgYmFzZWQuIFRoZSB1c2UgY2FzZSBiZWxvdyBzdWdnZXN0cyB0aGF0IGEgVmVyaWZpZXIgaXMg aW50ZXJlc3RlZCBpbiBzeXN0ZW0gYm9vdGluZyBldmVudHMuIEEgdG9waWMtYmFzZWQgYXBwcm9h Y2ggbWlnaHQgYWxsb3cgVmVyaWZpZXJzIHRvIHN1YnNjcmliZSB0byAiYm9vdCBpbWFnZSBYIiBh cyB0aGUgdG9waWMuIEFsbCBlbnRpdGllcyB0aGF0IGNvbGxlY3QgYSBDbGFpbSBmb3IgImltYWdl IFgiIHdvdWxkIHB1Ymxpc2ggdGhlIENsYWltIHRvIHRoZSBmaWVsZCBvZiBzdWJzY3JpYmVycy4g DQoNCklzIHRoZSB1c2Ugb2YgWUFORyB0byBkZXNjcmliZSBwdWIvc3ViIGxpbWl0aW5nIHRoZSBh YmlsaXR5IHRvIGRvIHRvcGljLWJhc2VkIHB1Yi9zdWI/DQotTmVkDQoNCu+7v09uIDcvMjgvMjAs IDc6MTkgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6IiA8cmF0cy1ib3VuY2Vz QGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3 cm90ZToNCg0KICAgIEhpIERhdmUsDQoNCiAgICBhIGNsYXJpZnlpbmcgcXVlc3Rpb246DQoNCiAg ICBXaGF0IGV4YWN0bHkgZG8geW91IG1lYW4gYnkgdGhlICJ3aG8iIGluICJhIHN1YnNjcmliZXIg a25vd3Mgd2hvIHRvIA0KICAgIHN1YnNjcmliZSB0byI/DQoNCiAgICBUaGUgSS1EIGRvZXMgbm90 IGNvbWUgd2l0aCBpdHMgb3duIGpvaW4vcmVuZGV6dm91cy9kaXNjb3ZlcnkgY2FwYWJpbGl0eS4g DQogICAgVGhhdCBlaXRoZXIgY29tZXMgcmVsYXRlZCB3aXRoIFlBTkcgUHVzaCAoImNhbGwgaG9t ZSIpLiBUaGF0IHdvdWxkIGJlIGEgDQogICAgIndobyIgb24gdGhlIGVudGl0eSBsZXZlbC4NCg0K ICAgIEFub3RoZXIgcG9zc2liaWxpdHkgaXMgdGhhdCB5b3UgbWVhbiBhIFlBTkcgUlBDIHdpdGgg dGhlICJ3aG8iPyBUaGF0IA0KICAgIHdvdWxkIGJlIGEgIndobyIgb24gdGhlIG1hbmFnZW1lbnQg aW50ZXJmYWNlIGxldmVsLg0KDQogICAgT3IgeW91IGNvdWxkIG1lYW4gb25lIG9mIHRoZSBBdHRl c3RpbmcgRW52aXJvbm1lbnQgb2YgYSBjb21wb3NpdGUgDQogICAgQXR0ZXN0ZXIuIFRoYSB3b3Vs ZCBiZSBhICJ3aG8iIG9uIHRoZSBBdHRlc3RlciBsZXZlbC4gQW5kIHRoYXQgaXMgZG9uZSANCiAg ICB2aWEgdGhlIGluY2x1ZGVkIGRhdGEgc3RvcmUuDQoNCiAgICBPciBkbyB5b3UgbWVhbiBzb21l dGhpbmcgSSBhbSBtaXNzaW5nIGhlcmU/DQoNCiAgICBWaWVsZSBHcsO8w59lLA0KDQogICAgSGVu aw0KDQogICAgT24gMjguMDcuMjAgMTY6MTAsIERhdmUgVGhhbGVyIHdyb3RlOg0KICAgID4gSSBh c2tlZCBpbiB0aGUgbWVldGluZyBob3cgYSBzdWJzY3JpYmVyIGtub3dzIHdobyB0byBzdWJzY3Jp YmUgdG8sIGFuZCBJIGJlbGlldmUgdGhlIGFuc3dlciB3YXMNCiAgICA+IHRoYXQgQ0hBUlJBIGFu c3dlcnMgdGhhdC4gIFdlbGwgSSBsb29rZWQgaW4gZHJhZnQtaWV0Zi1yYXRzLXlhbmctdHBtLWNo YXJyYS0wMiBhbmQgaXQgZG9lcyBub3QNCiAgICA+IGNvbnRhaW4gYW55IG1lbnRpb24gb2YgdGhl IHN1YmplY3QuICBJIHRoaW5rIG9uZSBvciB0aGUgb3RoZXIgb2YgdGhlIHR3byBkcmFmdHMgbmVl ZHMgdG8gYWRkcmVzcw0KICAgID4gdGhpcyBpc3N1ZS4gIE15IHByZWZlcmVuY2UgaXMgdGhhdCBp dCBiZSBpbiBkcmFmdC1iaXJraG9sei1yYXRzLW5ldHdvcmstZGV2aWNlLXN1YnNjcmlwdGlvbiBz aW5jZQ0KICAgID4gdGhhdCdzIHRoZSBkcmFmdCB0aGF0IHRhbGtzIGFib3V0IGxpbWl0YXRpb25z IGxpa2UNCiAgICA+PiBFdmlkZW5jZSBpcyBub3Qgc3RyZWFtZWQgdG8gYW4gaW50ZXJlc3RlZCBW ZXJpZmllciBhcyBzb29uIGFzIGl0IGlzIGdlbmVyYXRlZC4NCiAgICA+IFdoaWNoIGNlcnRhaW5s eSBzdGlsbCBhcHBsaWVzLCBpdCdzIGp1c3QgYW5vdGhlciBjYXNlLi4uIHlvdSBkaWRuJ3Qga25v dyB0byBzdWJzY3JpYmUgdG8gaXQgdW50aWwNCiAgICA+IGFmdGVyIHRoZSBldmlkZW5jZSB3YXMg Z2VuZXJhdGVkIHdoZW4gaXQgYm9vdGVkLg0KICAgID4gDQogICAgPiBEYXZlDQogICAgPiANCiAg ICA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgPiBGcm9tOiBSQVRTIDxyYXRzLWJv dW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBFcmljIFZvaXQgKGV2b2l0KQ0KICAgID4gU2Vu dDogV2VkbmVzZGF5LCBKdW5lIDI0LCAyMDIwIDk6NDEgQU0NCiAgICA+IFRvOiByYXRzQGlldGYu b3JnDQogICAgPiBDYzogV2VpIFBhbiA8d2lsbGlhbS5wYW53ZWlAaHVhd2VpLmNvbT47IEJpcmto b2x6LCBIZW5rIDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPg0KICAgID4gU3ViamVj dDogW1JhdHNdIGRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vic2NyaXB0aW9u LTAwDQogICAgPiANCiAgICA+IEhpIEFsbCwNCiAgICA+IA0KICAgID4gVGhpcyBkcmFmdCBkZWZp bmVzIGhvdyB0byBzdWJzY3JpYmUgdG8gYSBzdHJlYW0gb2YgYXR0ZXN0YXRpb24gcmVsYXRlZCBF dmlkZW5jZSBvbiBUUE0tYmFzZWQgbmV0d29yayBkZXZpY2VzLiAgV2hlbiBzdWJzY3JpYmVkLCBh IFRlbGVtZXRyeSBzdHJlYW0gb2YgdmVyaWZpYWJseSBmcmVzaCBZQU5HIG5vdGlmaWNhdGlvbnMg KHdoaWNoIGFyZSBnZW5lcmF0ZWQgd2hlbiBUUE0gUENScyBhcmUNCiAgICA+IGV4dGVuZGVkKSBh cmUgcHVzaGVkIHRvIHRoZSBzdWJzY3JpYmVyLg0KICAgID4gDQogICAgPiBUaGlzIGRyYWZ0IGlu dGVncmF0ZXM6DQogICAgPiAgICogIFNlY3Rpb24gNSBvZiBkcmFmdC12b2l0LXJhdHMtdHJ1c3Rl ZC1wYXRoLXJvdXRpbmctMDENCiAgICA+ICAgKiAgRWxlbWVudHMgb2YgZHJhZnQteGlhLXJhdHMt cHVic3ViLW1vZGVsDQogICAgPiANCiAgICA+IFRoYW5rcyENCiAgICA+IA0KICAgID4gRXJpYywg SGVuaywgYW5kIFdlaQ0KICAgID4gDQogICAgPiANCiAgICA+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQogICAgPiBGcm9tOiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgPGludGVybmV0LWRy YWZ0c0BpZXRmLm9yZz4NCiAgICA+IFNlbnQ6IFdlZG5lc2RheSwgSnVuZSAyNCwgMjAyMCAxMjox OSBQTQ0KICAgID4gVG86IEVyaWMgVm9pdCAoZXZvaXQpIDxldm9pdEBjaXNjby5jb20+OyBXZWkg UGFuIDx3aWxsaWFtLnBhbndlaUBodWF3ZWkuY29tPjsgSGVuayBCaXJraG9seiA8aGVuay5iaXJr aG9sekBzaXQuZnJhdW5ob2Zlci5kZT4NCiAgICA+IFN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlm aWNhdGlvbiBmb3INCiAgICA+IGRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vi c2NyaXB0aW9uLTAwLnR4dA0KICAgID4gDQogICAgPiANCiAgICA+IEEgbmV3IHZlcnNpb24gb2Yg SS1ELCBkcmFmdC1iaXJraG9sei1yYXRzLW5ldHdvcmstZGV2aWNlLXN1YnNjcmlwdGlvbi0wMC50 eHQNCiAgICA+IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgRXJpYyBWb2l0IGFu ZCBwb3N0ZWQgdG8gdGhlIElFVEYgcmVwb3NpdG9yeS4NCiAgICA+IA0KICAgID4gTmFtZToJCWRy YWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vic2NyaXB0aW9uDQogICAgPiBSZXZp c2lvbjoJMDANCiAgICA+IFRpdGxlOgkJQXR0ZXN0YXRpb24gRXZlbnQgU3RyZWFtIFN1YnNjcmlw dGlvbg0KICAgID4gRG9jdW1lbnQgZGF0ZToJMjAyMC0wNi0yNA0KICAgID4gR3JvdXA6CQlJbmRp dmlkdWFsIFN1Ym1pc3Npb24NCiAgICA+IFBhZ2VzOgkJMjANCiAgICA+IFVSTDoNCiAgICA+IGh0 dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUz QSUyRiUyRnd3dy5pZXRmLm9yZyUyRmludGVybmV0LWRyYWZ0cyUyRmRyYWZ0LWJpcmtob2x6LXJh dHMtbmV0d29yay1kZXZpY2Utc3Vic2NyaXB0aW9uLTAwLnR4dCZhbXA7ZGF0YT0wMiU3QzAxJTdD ZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MyNTgyNWUyYTM3ODM0NDkyMzBhNzA4ZDgxODVkNzdm NiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODYxMzcw MjkxMTUxMzUmYW1wO3NkYXRhPU1uRUo1WndBaDRCbFROczA5ZmswVnIxSDM5ajVOJTJCSmR5QlFI TkpwN0JkWSUzRCZhbXA7cmVzZXJ2ZWQ9MA0KICAgID4gU3RhdHVzOg0KICAgID4gaHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG ZGF0YXRyYWNrZXIuaWV0Zi5vcmclMkZkb2MlMkZkcmFmdC1iaXJraG9sei1yYXRzLW5ldHdvcmst ZGV2aWNlLXN1YnNjcmlwdGlvbiUyRiZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jv c29mdC5jb20lN0MyNTgyNWUyYTM3ODM0NDkyMzBhNzA4ZDgxODVkNzdmNiU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcyODYxMzcwMjkxMTUxMzUmYW1wO3Nk YXRhPXF1a0xRYXExN1A0dHMyMG5XMUwlMkIyZEI5eklNOVhCOVNSY3NjRldjT2VMdyUzRCZhbXA7 cmVzZXJ2ZWQ9MA0KICAgID4gSHRtbGl6ZWQ6DQogICAgPiBodHRwczovL25hbTA2LnNhZmVsaW5r cy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0b29scy5pZXRmLm9y ZyUyRmh0bWwlMkZkcmFmdC1iaXJraG9sei1yYXRzLW5ldHdvcmstZGV2aWNlLXN1YnNjcmlwdGlv bi0wMCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0MyNTgyNWUy YTM3ODM0NDkyMzBhNzA4ZDgxODVkNzdmNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFk YjQ3JTdDMSU3QzAlN0M2MzcyODYxMzcwMjkxMjUwOTUmYW1wO3NkYXRhPVEwVGZGanJmSFpVJTJG S0ZPVDNsaTRKRzBRb0JhM1ZvJTJGa0hUcDAwVDZHYlpZJTNEJmFtcDtyZXNlcnZlZD0wDQogICAg PiBIdG1saXplZDoNCiAgICA+IGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0 bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYub3JnJTJGZG9jJTJG aHRtbCUyRmRyYWZ0LWJpcmtob2x6LXJhdHMtbmV0d29yay1kZXZpY2Utc3Vic2NyaXB0aW9uJmFt cDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzI1ODI1ZTJhMzc4MzQ0 OTIzMGE3MDhkODE4NWQ3N2Y2JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0Mx JTdDMCU3QzYzNzI4NjEzNzAyOTEyNTA5NSZhbXA7c2RhdGE9UkxTdmRSVGNXWDRHZXc1MFgyREw3 dDJwRTdOJTJGQSUyQktXckFWejBOaHNiaUElM0QmYW1wO3Jlc2VydmVkPTANCiAgICA+IA0KICAg ID4gDQogICAgPiBBYnN0cmFjdDoNCiAgICA+ICAgICBUaGlzIGRvY3VtZW50IGRlZmluZXMgaG93 IHRvIHN1YnNjcmliZSB0byBhIHN0cmVhbSBvZiBhdHRlc3RhdGlvbg0KICAgID4gICAgIHJlbGF0 ZWQgRXZpZGVuY2Ugb24gVFBNLWJhc2VkIG5ldHdvcmsgZGV2aWNlcy4NCiAgICA+IA0KICAgID4g DQogICAgPiANCiAgICA+IA0KICAgID4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNv dXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRt bGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0K ICAgID4gDQogICAgPiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KICAgID4gDQogICAgPiANCg0KICAg IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgUkFU UyBtYWlsaW5nIGxpc3QNCiAgICBSQVRTQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQoNCg== From nobody Tue Jul 28 08:31:43 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83C003A0E09 for ; Tue, 28 Jul 2020 08:31:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.62 X-Spam-Level: X-Spam-Status: No, score=-9.62 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Pn7TYt76; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=G2fKV2nI Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tVEcSEgUZEAY for ; Tue, 28 Jul 2020 08:31:38 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 872AC3A0E04 for ; Tue, 28 Jul 2020 08:30:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=14643; q=dns/txt; s=iport; t=1595950230; x=1597159830; h=from:to:cc:subject:date:message-id:mime-version; bh=naZujSoNVkkN3kEv2PrmUTwcCyaJY4MjgxdcS05tWAo=; b=Pn7TYt76gw+pHq7R5iZQsvZhGUDBDN7uUPAb2xOfiljctpoXMGv8Pymw +TluG4yVE1XuyyC9uc62FTCeBr7nGJszOvTy5vazQVh02YczOP14eLM+K QGpkQ73VudsGZj7pFSB86AYOhcM4F53SVQwb8xyGRgmE4GIBtaalR7Ns8 o=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AT7+CRxRY23HUNDW6+LOMyhrAftpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBNuJ6+9NlOfX9avnXD9I7ZWAtSUEd5pBH1?= =?us-ascii?q?8AhN4NlgMtSMiCFQXgLfHsYiB7eaYKVFJs83yhd0QAHsH4ag7Sv3St4D9UER?= =?us-ascii?q?L6ZkJ5I+3vEdvUiMK6n+m555zUZVBOgzywKbN/JRm7t0PfrM4T1IBjMa02jB?= =?us-ascii?q?DOpyhF?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CJCQAzQyBf/4wNJK1ggQmCbS9RB28?= =?us-ascii?q?rLS8sCodwA5UvjB2EbIJTA1UEBwEBAQkDAQEtAgQBAYRMAoIgAiQ4EwIDAQE?= =?us-ascii?q?LAQEFAQEBAgEGBG2FXAyFdBYbEwEBNwERAVAwJgEEDg0GDQeDBYF+TQMfDwG?= =?us-ascii?q?kLAKBOYhhdIE0gwEBAQWFMxiCBwcJgTiBU4EaihAagUE/gVSDC4Q/g0eCLY9?= =?us-ascii?q?/iWeBGJp5CoJfhDWCWJMEn2mxMQIEAgQFAg4BAQWBaiOBV3AVgyRQFwINkg+?= =?us-ascii?q?KVnQ3AgYIAQEDCXyOawGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,406,1589241600"; d="p7s'?scan'208,217";a="787477693" Received: from alln-core-7.cisco.com ([173.36.13.140]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 28 Jul 2020 15:30:15 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-7.cisco.com (8.15.2/8.15.2) with ESMTPS id 06SFUE5D000916 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 28 Jul 2020 15:30:14 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 28 Jul 2020 10:30:14 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 28 Jul 2020 10:30:13 -0500 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 28 Jul 2020 11:30:13 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ogBIWk0gYsaVR1IXCLt0AOabjr89XXVpmfO6bXIvDgFWscXPd4+/wKTEf8l5dSd5SYA5zvGWKJPHUGXflhXDU+U5OGud/qtG4CmcKY+Wt8MTJ/+uV9PaafcGjxz56OudZQhxQsNjSVe3qAFNum42TKJ9O1az+orj4tjtrnHtRMCiu0Dw5K8Y+o9TgQhzUMIxUl13NdYBmPElbmxoRnmYGkl2b4JQI6XPHzijE0j/EbdDyL0qsH0ByxE/gaY9i1wfrcnATgC4TDELQExNVmPDa+vmnR31uSD3Wkc6JhpKpsiUR7We/p5MapquNci5T9HQkxdgk4XhqGyUwURKAufyIw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fzZSmXpkUF+ZqY++BYXy3OcQI4Kst9vHcgief0VEp2k=; b=llHcNtV9Xmp0RsMhLma2Enmqf8+w5tSUMrE5M2A20lsiZL0zPX1aj6ZvM7Elov0XIuyltIHK6GbdbJssmrhBW+rii7mNoFjDyq3I1+XpPkE8RkrTcH26hOxjudHZHJT5NMYaQOTJLdn2jwfPonu6oNMFNp6R+uNZi5S3gNPGXAd+yPsYeGmZDeoDLP4gejlnlM2Jf8mpvFOTzpLIfEKFqdlrt/8JTk6ccjoBs+P1nYhGPdlB58g0MBjuxu3VC/BNbhcLkg8vj64yZx7JMdujJcTCfrQOAjHcsQyp7y9j0Ivl8xkAyiUk3F9qaSrjJsYy7s6DK+ex3wx3QKIrH/217Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fzZSmXpkUF+ZqY++BYXy3OcQI4Kst9vHcgief0VEp2k=; b=G2fKV2nI10noDq05e9l5o0bB4BoJOPmImM7CbVr/vVuDI8Qwkh09oesi6tBlKawVed1aKu4qjcSEG+3KAFZpH7aYB4HZWeX/6zKr1TNkrLG53oKdaIEtrnNgANugabBjdOaH4Ex1ekNtGRWyThBs1vZQ79dIQzGo8f2cgnQbexo= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4351.namprd11.prod.outlook.com (2603:10b6:208:193::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.23; Tue, 28 Jul 2020 15:30:12 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2%5]) with mapi id 15.20.3216.034; Tue, 28 Jul 2020 15:30:12 +0000 From: "Eric Voit (evoit)" To: "Panwei (William)" CC: "rats@ietf.org" Thread-Topic: Charra: certificate-name vs TPM-name Thread-Index: AdZk7AdVjrhIJhH+SNGp+N2fr3/Wmw== Date: Tue, 28 Jul 2020 15:30:12 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.78] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c2d7d523-22c4-48dd-28ec-08d8330b1ebb x-ms-traffictypediagnostic: MN2PR11MB4351: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: j7V1cWD/oJScGbfGijpXaK10mf2qFnSq0AQPttkIiaJlDycibvVI58+2G3f+nisFa4P8ZhB675SjGt7ktMk11kLc7LixK7FncbHbt2xIivgnn1U0QeNiAjiw6tWGYeRu1x8nYWu3Gy6Spar3rMJUdmVd+dhbKq9xGP8TwIfqI9lFbJ+73q9R82/7OQO1z6qZ6l6cqTR4qQuAfSL+G8zgJqFA7Cp2NiN8pXLVj7K3uvyaCGuxYzOVjETpvRLWJ5Wpqi7Q7e/O5XScffQwwDYNOGXZxX/AtIRKTdhekKWVPy19V5jrayITZzLv+LhfGqYzeUh8b1/tqxLON3e/fPlJ4Q== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(39860400002)(346002)(366004)(136003)(396003)(376002)(316002)(83380400001)(8936002)(99936003)(8676002)(4326008)(6916009)(66574015)(55016002)(2906002)(26005)(7696005)(186003)(71200400001)(33656002)(5660300002)(52536014)(76116006)(66446008)(64756008)(66556008)(66476007)(86362001)(66946007)(478600001)(9686003)(6506007)(66616009); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0C23_01D664D2.7181CC90" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c2d7d523-22c4-48dd-28ec-08d8330b1ebb X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2020 15:30:12.4467 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 5pYAzfoTpjuiDiGhTZqSMAZ9QcpT7tEyMQd2Xq0eh0eMKBLHy2yhOL7p9suw54WU X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4351 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: alln-core-7.cisco.com Archived-At: Subject: [Rats] Charra: certificate-name vs TPM-name X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 15:31:41 -0000 ------=_NextPart_000_0C23_01D664D2.7181CC90 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0C24_01D664D2.7181CC90" ------=_NextPart_001_0C24_01D664D2.7181CC90 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Wei Pan, During the RATS WG call you wondered why certificate-name should be used rather than tpm-name. There are two reasons: (1) In RFC places like: +---x tpm20-challenge-response-attestation {TPM20}? +--ro output +--ro tpm20-attestation-response* [] +--ro certificate-name? string +--ro quote? binary +--ro quote-signature binary if just the tpm-name is provided, how does a Verifier know when a re-keying happens? With the current solution, when unknown certificate-name comes back from the RPC, you just need to query: +--rw rats-support-structures +--rw tpms* [tpm-name] +--rw tpm-name string +--rw certificates +--rw certificate* [certificate-name] +--rw certificate-name string +--rw certificate-ref? leafref +--rw certificate-type? enumeration and then you can find the tpm-name, plus all the required info post-certificate upgrade in one place. If the certificate-name is not in the RPC, a Verifier will have to make several guesses on what any failure of signature verification might mean. (2) The most common implementations will have just one TPM per router/switch. These implementations might never care about the tpm-name. They will care about the certificate used on that router/switch. Thanks, Eric Eric Voit .:|:.:|:. Cisco Systems, Inc. ------=_NextPart_001_0C24_01D664D2.7181CC90 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Wei Pan,

 

During the = RATS WG call you wondered why certificate-name should be used rather = than tpm-name.  There are two reasons:

 

(1) In RFC = places like:

 

      +---x = tpm20-challenge-response-attestation {TPM20}?

  =        +--ro = output

      =       +--ro tpm20-attestation-response* = []

      =          +--ro = certificate-name?         &n= bsp; string

        = ;       +--ro = quote?           &= nbsp;          =         binary<= /p>

      =          +--ro = quote-signature      =         binary<= /p>

 

if = just the tpm-name is provided, how does a Verifier know when a re-keying = happens?    With the current solution, when unknown = certificate-name comes back from the RPC, you just need to = query:

 

    +--rw = rats-support-structures

       +--rw = tpms* [tpm-name]

        = ;  +--rw = tpm-name           = ;          = string

        = ;  +--rw certificates

        = ;     +--rw certificate* = [certificate-name]

         &= nbsp;      +--rw = certificate-name    string

         &= nbsp;      +--rw = certificate-ref?    leafref

         &= nbsp;      +--rw certificate-type?   = enumeration

 

and then you can find the tpm-name, plus all the = required info post-certificate upgrade in one place.  If the = certificate-name is not in the RPC, a Verifier will have to make several = guesses on what any failure of signature verification might = mean.

 

(2) The most common implementations will have just one = TPM per router/switch.  These implementations might never care = about the tpm-name.  They will care about the certificate used on = that router/switch.

 

Thanks,

Eric

 

Eric Voit =

.:|:.:|:. Cisco Systems, Inc.

 

------=_NextPart_001_0C24_01D664D2.7181CC90-- ------=_NextPart_000_0C23_01D664D2.7181CC90 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzI4MTUzMDA2WjAjBgkqhkiG 9w0BCQQxFgQUdkaYDXzE/I7Vo3OxFkW+y/DpbhgwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAhjOTCkWgVouj8e4czW2AF2HMC7aWGDcFN+F2hGLFUSUihv5HfM+fcdoWKP6Cyy2v5 Ly68LCkWkFCtA2S62DYdqWPvBkrxPK6sQl3wjaMA+ByrLfW1NIKXL3ZsVij9EFeT2yBX22/eAarx HCmgCjAL/atFccGGp/K1O1qMVBj47Y0MK2JwEgFbkr1WFlqnNf8wsuEmgGyUc8+HRRL/Xj49TTC7 Ib2zAA6YPKNJ+urxCflED71OiS8w7LX+OgG09Fbm9ZikCT25loE8n/jfyyd4OXm49I7GQlNPQGrM qcBxgG03t8TwmtPSftOqEastNxRSRwcMOhzPYeTvjOU5MuuKAAAAAAAA ------=_NextPart_000_0C23_01D664D2.7181CC90-- From nobody Tue Jul 28 08:48:17 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63FE03A0E0E for ; Tue, 28 Jul 2020 08:48:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kzhlnrjpb_IH for ; Tue, 28 Jul 2020 08:48:04 -0700 (PDT) Received: from mail-vk1-xa31.google.com (mail-vk1-xa31.google.com [IPv6:2607:f8b0:4864:20::a31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D96973A0E07 for ; Tue, 28 Jul 2020 08:48:03 -0700 (PDT) Received: by mail-vk1-xa31.google.com with SMTP id h1so4673829vkn.12 for ; Tue, 28 Jul 2020 08:48:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=CElZ9GqUX98YGOl250bRHRcksUFXWYJXmffk0muFTvc=; b=CG/r5olPahgB8IafbN7Af9xhg0R/fyBHMHPFOnhYGnasyej+AO1QM1ei5X4JtRPXQq SfiPs7y7dCwP76gCsllDmCfDHlrsTK2mb3F7f5tQ20YM+Y7qEdsx8adCq56mYNb6y5QZ X7PLHKRxABhC2etrgJfBG/9ivz/xUh6s/YnNgiv9f+4SDi9+DFBhdgtYgDvQbXDZwNxL xpmgwQt0lPZnVgZhsu/yiMIeZcqpfNAujNMF9Kgm8yY/6C8/j0FUxIyUskgxk/fl3VJc VvqwF/g6MwZxOWxZPs0Fxe4iLQZRZcnySJyQScjSE10XJi+QAhgJf1UpxVWOv71JvFgy BkQw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=CElZ9GqUX98YGOl250bRHRcksUFXWYJXmffk0muFTvc=; b=sVV1T7YVS1sSv1qR1QFfI//VFB57i91ByF4VWNrXVte2Np6De4Zg0OZa6s7CKfSoID hkw+u35gBAlqKpdS69bie3t+5bb1iJpHOCwrE2ItkiYYk89M8cGkKLYdlWxOL1q/dJ1n +JB8fkPliwMknK5JsfCY0tAONEpteVxR4gVKdrzBtCC6+xk1p/w6FBZ+loy1h8fl2wnr zjTJBNq839CgoyE1WeVViSRuo4Lx9s9wDB/2i59JKju1QZIMoxuWN+SunDOqv+yeaXE0 8eax2n3n6j4AEPL4uCXjOmtBWh3eIiZYpvAMnUAU3E/LMMTMjlhIRyrkX4MSzRTxSZaw uQBg== X-Gm-Message-State: AOAM5303sMto4Dud29iHPBT5nflFZcktsF553hsLw8E/oOUa6RQ9BUyq a7iYoVwIn7uamybmJQJqq2X+eMKChiYMgJfrfvZQLz6L X-Google-Smtp-Source: ABdhPJwSNTk8kF+LHYX8pPnPgJ2kHh49jIr1t5clBlGL8ROBp2ieAvpEV89H9zu+TARzP8ZP7DV7QObzaG2B1rbLSmk= X-Received: by 2002:a1f:add8:: with SMTP id w207mr20912032vke.3.1595951282739; Tue, 28 Jul 2020 08:48:02 -0700 (PDT) MIME-Version: 1.0 From: Ira McDonald Date: Tue, 28 Jul 2020 11:47:51 -0400 Message-ID: To: rats@ietf.org, Ira McDonald Content-Type: multipart/alternative; boundary="00000000000049604905ab825d27" Archived-At: Subject: [Rats] Durable link to approved TCG Algorithm Registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 15:48:12 -0000 --00000000000049604905ab825d27 Content-Type: text/plain; charset="UTF-8" Hi, Here's the link to that registry, for use in naming algorithms in various RATS specs: https://trustedcomputinggroup.org/resource/tcg-algorithm-registry/ I'm encouraging our TCG IT support team to put an obvious durable link in the TPM WG home page. Cheers, - Ira *Ira McDonald (Musician / Software Architect)Co-Chair - TCG Trusted Mobility Solutions WG* *Co-Chair - TCG Metadata Access Protocol SG* *Chair - Linux Foundation Open Printing WGSecretary - IEEE-ISTO Printer Working GroupCo-Chair - IEEE-ISTO PWG Internet Printing Protocol WGIETF Designated Expert - IPP & Printer MIBBlue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434* --00000000000049604905ab825d27 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

Here's the link to t= hat registry, for use in naming algorithms in various
RATS specs:=


I'm encouraging our = TCG IT support team to put an obvious durable
link in the TPM WG = home page.

Cheers,
- Ira

<= /div>
=
Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trust= ed Mobility Solutions WG
Co-Chair = - TCG Metadata Access Protocol SG
<= font size=3D"1">Chair - Linux Foundation Open Printing WG
Secretary - IE= EE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing= Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof= Music / High North Inc
http://sites.google= .com/site/blueroofmusic
http://sites.goo= gle.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(permanent) PO Bo= x 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434
--00000000000049604905ab825d27-- From nobody Tue Jul 28 09:20:44 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C79A53A0E91 for ; Tue, 28 Jul 2020 09:20:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.621 X-Spam-Level: X-Spam-Status: No, score=-9.621 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=JIH5QkSD; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=RhCoIKGe Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aePJLjbKGgZF for ; Tue, 28 Jul 2020 09:20:39 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E534C3A0E8B for ; Tue, 28 Jul 2020 09:20:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11153; q=dns/txt; s=iport; t=1595953239; x=1597162839; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=h5aZ+WChF+zsdliWrWwLVKSoSK4/rOjhXGE0GlCKCxA=; b=JIH5QkSDHbjzvXGGYQJfazFqon5yxLWPfw5AZV4TYFvnM2Dn8JbVgyLK 4UV+Zoz/LmPTu0YdggH2aoFkezpUBBCfQCKFsz0IOszVtPJuiMSpuy4f8 JJ3mzQ8Q11O3y4co5wmLgvO+56d15Ns5kioYM+Ka/t8hkTHT7v6lW/UWj k=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3ACtDaQR0j6IhTUItAsmDT+zVfbzU7u7jyIg8e44?= =?us-ascii?q?YmjLQLaKm44pD+JxWFuadhiVbTVsPa5u5Kze3MvPOoVW8B5MOHt3YPONxJWg?= =?us-ascii?q?QegMob1wonHIaeCEL9IfKrCk5yHMlLWFJ/uX3uN09TFZXyYlTIqTuz4CIcXB?= =?us-ascii?q?LlOlk9KuH8AIWHicOx2qi78IHSZAMdgj27bPtyIRy6oB+XuNMRhN5pK706zV?= =?us-ascii?q?3CpX4bdg=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ApAADkTyBf/5xdJa1gGgEBAQEBAQE?= =?us-ascii?q?BAQEDAQEBARIBAQEBAgIBAQEBQIE5AgEBAQELAYFRKSgHbystLywKh3ADjVe?= =?us-ascii?q?YYYJTA1UEBwEBAQkDAQEYCwoCBAEBgW2CXwKCIAIkNwYOAgMBAQsBAQUBAQE?= =?us-ascii?q?CAQYEbYVcDIVxAQEBAwEBARAuAQEsCwEEBwQCAQgRBAEBDQEhAiULHQgBAQQ?= =?us-ascii?q?BDQUIBhSCOUYEAoF+TQMOEQ8BDqQ1AoE5iGF0gTSDAQEBBYUyAxWCBwcJgTg?= =?us-ascii?q?BgVKBGooBDxqBQT+BEUOCTT6CXAEBAgEWgUgVJ4MLgi2PXYoJgRiaeQqCX4Q?= =?us-ascii?q?1gliBS5E5gnuBIognkyWFUYxGnxoCBAIEBQIOAQEFgWkkDYFKcBUaIYJpCUc?= =?us-ascii?q?XAg2OHgwXg06FFIVCdAIBNAIGCAEBAwl8jmsBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,406,1589241600"; d="p7s'?scan'208";a="534507154" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 28 Jul 2020 16:20:37 +0000 Received: from XCH-ALN-002.cisco.com (xch-aln-002.cisco.com [173.36.7.12]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 06SGKbDK025604 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 28 Jul 2020 16:20:37 GMT Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-ALN-002.cisco.com (173.36.7.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 28 Jul 2020 11:20:37 -0500 Received: from xhs-aln-003.cisco.com (173.37.135.120) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 28 Jul 2020 12:20:36 -0400 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 28 Jul 2020 11:20:36 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kPl9/2Q3HZE0tNtNxL/vYqlUijFVczKDbFaQar77g3dWzNCS9RnMqkC1LCCNdV3Sq9hIps0SLLARcMAX4eFMcK2RA7T9U8k3gfUxgMIc3Hbo0/fBPbKwugZdHWf0Kcjn54ZkqmwNKjn9f+HK15gw1PUcSq5VzKFI034cYX835U5Yk2b8FFztCQtZkXdVNQNfwEz3uVCiZi88/aETYP1hL2D0QQGF6hEafE+7WgFeyJsy5AqVWXTG773yBmt8pzvhyxRH/RCoelQj7l3ucG2/q9PqW1sH4tX6/O4SplRiMPu7qnqbqpx3C+BGAVU0nrEWggTpVuK6iMNzPYTG1o0QtA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MN9lD16dMyhXjjsHhcnCQz20bRhVVYuQgvRzGfXujdY=; b=InKLFrY4RI6cHT97twmFHCB4fbKDOBk9PgPFeyYSsnEKLwAiQMf+q+x1NqM6BdYY4jUZbczmtBsKIt+ow/IEBnNBBrp2g23Gf9yxEV7X1mK+cBeTAujVB0RG80kGnPQKmCXIRUgCrgqXgopHyvXNbrJau6k7HkOaBC5beIkZHV+KHYHVRIoeAISCv4yA++N2YjRbLgrmRIs+3Qif7t8i84OFa4NmCm/uQZayibJc5YjyfVcTKfQ1HHf4CuQ8WwD5xIySJwlLXpqLRnwzttEFT6FGy5fdKZi6jYIZ3v3C+YK7cTuhJGUkWXmtsRS/Bf73XXOTDVFj6JjQgK1iazEKyA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MN9lD16dMyhXjjsHhcnCQz20bRhVVYuQgvRzGfXujdY=; b=RhCoIKGenN6UuXHlBMzAgqTrz7dpsejZHY5nOC9/n+9wNPDr0/KqpqGNxoM5DWP3fkYrxTsbyeNEa9uoMrxjWVT6yliGS2FrcU6ArgzQqcVtxlfBTOWXk8R4R7wNXeopmaRgW8sAPUL52frwBvIOWrnKfMF0cS29JLSoPKWxObk= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by BL0PR11MB3027.namprd11.prod.outlook.com (2603:10b6:208:77::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.23; Tue, 28 Jul 2020 16:20:34 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::3496:c7b1:6ba3:ace2%5]) with mapi id 15.20.3216.034; Tue, 28 Jul 2020 16:20:34 +0000 From: "Eric Voit (evoit)" To: Dave Thaler , "Eric Voit (evoit)" , "rats@ietf.org" CC: Wei Pan , "Birkholz, Henk" Thread-Topic: draft-birkholz-rats-network-device-subscription-00 Thread-Index: AdZKRjugUmuktT1iTCKR70EUNGNj/gaoi4kQAAPEPuA= Date: Tue, 28 Jul 2020 16:20:34 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-07-28T14:10:27Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=418b9af6-b4d5-4eb1-9d7d-e75014a19a02; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [173.38.117.78] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 04f01750-2c15-4388-3004-08d833122821 x-ms-traffictypediagnostic: BL0PR11MB3027: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: KPkUUxxaNBebxzt3SSdOQEmjLgmHpCsgR8Z7HyULkt6CCprYfXDTqkmR/b05OPZWrWfqH1USpoaZN6jUitzdU7+jJMuXXTfqkrIRZSErpWSETbq0Knr+pyE+jfidBDltPmQs82EIYNpZ/yPpbYSddT/KY24BhvOKDW946Y8DrUO7CQVMg9R8Su/9/M8EiuYIkotk1h2cbtwkTxHeH6rZstehL7EdpDw+qDai8N5voBibwk+tgQuZT43kayhicwfHgay+bVhmOxnOX9cIhTNmVL+oOZLTfvMAwDzqxmVWXHhlvhA7IFqjq8ml93mQbMJ+8XOexao7XTcx+ld19YGmhjuEhorHf0WTdtLAWU6JV/IyBqAwn8fcj4QFNmvmG5m10mMMSCxj5lMOCYJ3t8q4Lw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(39860400002)(376002)(136003)(396003)(346002)(45080400002)(478600001)(33656002)(86362001)(53546011)(7696005)(8676002)(4326008)(71200400001)(66574015)(55016002)(186003)(6506007)(966005)(83380400001)(9686003)(66556008)(52536014)(76116006)(66946007)(99936003)(316002)(64756008)(2906002)(66446008)(83080400001)(5660300002)(8936002)(110136005)(54906003)(66616009)(26005)(66476007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0C81_01D664D9.7B985530" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 04f01750-2c15-4388-3004-08d833122821 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2020 16:20:34.7004 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gniUoQVMB4rbGVlNKJk9Dcsd2e9YWn2Yr4Ua+HlDoOtU2kjChMWN7traPhgwzM9M X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR11MB3027 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.12, xch-aln-002.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [Rats] draft-birkholz-rats-network-device-subscription-00 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 16:20:43 -0000 ------=_NextPart_000_0C81_01D664D9.7B985530 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit > Dave Thaler, July 28, 2020 10:10 AM > > I asked in the meeting how a subscriber knows who to subscribe to, and I > believe the answer was that CHARRA answers that. The answer I gave was that the problem was the same as Charra. I believe I also said the problem itself is generic to any YANG based network element (I don't remember if that came out). Generalizing more from there, Network Operators have diverse set embedded management systems which include discovery, addressability, inventory, etc. of the network devices they manage. Moving back to YANG, these network management systems don't include all YANG info about a device. So once you have found that a device exists, the device capabilities it supports can be acquired via a variety of mechanisms like: - NETCONF RFC 6241, Section 7 (and RFC6470) - YANG Library RFC 8525 > Well I looked in draft- > ietf-rats-yang-tpm-charra-02 and it does not contain any mention of the > subject. I think one or the other of the two drafts needs to address this > issue. This topic has not been within the scope of the many other YANG drafts/RFC which exist. This is reasonable as there is a huge breadth of topology discovery protocols available and in-use for routers and switches. Eric > My preference is that it be in draft-birkholz-rats-network-device- > subscription since that's the draft that talks about limitations like > > Evidence is not streamed to an interested Verifier as soon as it is > generated. > Which certainly still applies, it's just another case... you didn't know to > subscribe to it until after the evidence was generated when it booted. > > Dave > > -----Original Message----- > From: RATS On Behalf Of Eric Voit (evoit) > Sent: Wednesday, June 24, 2020 9:41 AM > To: rats@ietf.org > Cc: Wei Pan ; Birkholz, Henk > > Subject: [Rats] draft-birkholz-rats-network-device-subscription-00 > > Hi All, > > This draft defines how to subscribe to a stream of attestation related > Evidence on TPM-based network devices. When subscribed, a Telemetry > stream of verifiably fresh YANG notifications (which are generated when > TPM PCRs are > extended) are pushed to the subscriber. > > This draft integrates: > * Section 5 of draft-voit-rats-trusted-path-routing-01 > * Elements of draft-xia-rats-pubsub-model > > Thanks! > > Eric, Henk, and Wei > > > -----Original Message----- > From: internet-drafts@ietf.org > Sent: Wednesday, June 24, 2020 12:19 PM > To: Eric Voit (evoit) ; Wei Pan > ; Henk Birkholz > > Subject: New Version Notification for > draft-birkholz-rats-network-device-subscription-00.txt > > > A new version of I-D, draft-birkholz-rats-network-device-subscription-00.txt > has been successfully submitted by Eric Voit and posted to the IETF > repository. > > Name: draft-birkholz-rats-network-device-subscription > Revision: 00 > Title: Attestation Event Stream Subscription > Document date: 2020-06-24 > Group: Individual Submission > Pages: 20 > URL: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww. > ietf.org%2Finternet-drafts%2Fdraft-birkholz-rats-network-device- > subscription- > 00.txt&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a37834 > 49230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7 > C637286137029115135&sdata=MnEJ5ZwAh4BlTNs09fk0Vr1H39j5N%2BJd > yBQHNJp7BdY%3D&reserved=0 > Status: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatat > racker.ietf.org%2Fdoc%2Fdraft-birkholz-rats-network-device- > subscription%2F&data=02%7C01%7Cdthaler%40microsoft.com%7C2582 > 5e2a3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7 > C1%7C0%7C637286137029115135&sdata=qukLQaq17P4ts20nW1L%2B2d > B9zIM9XB9SRcscFWcOeLw%3D&reserved=0 > Htmlized: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools. > ietf.org%2Fhtml%2Fdraft-birkholz-rats-network-device-subscription- > 00&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a37834492 > 30a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63 > 7286137029125095&sdata=Q0TfFjrfHZU%2FKFOT3li4JG0QoBa3Vo%2FkH > Tp00T6GbZY%3D&reserved=0 > Htmlized: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatat > racker.ietf.org%2Fdoc%2Fhtml%2Fdraft-birkholz-rats-network-device- > subscription&data=02%7C01%7Cdthaler%40microsoft.com%7C25825e2a > 3783449230a708d8185d77f6%7C72f988bf86f141af91ab2d7cd011db47%7C1% > 7C0%7C637286137029125095&sdata=RLSvdRTcWX4Gew50X2DL7t2pE7N > %2FA%2BKWrAVz0NhsbiA%3D&reserved=0 > > > Abstract: > This document defines how to subscribe to a stream of attestation > related Evidence on TPM-based network devices. > > > > > Please note that it may take a couple of minutes from the time of > submission until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats ------=_NextPart_000_0C81_01D664D9.7B985530 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzI4MTYyMDI5WjAjBgkqhkiG 9w0BCQQxFgQUKtu1H16YudLu3C4l7bFmNq7k0Y4wSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQBX89ixnbUmON+Xz5Ajt45IcvFQZVcbYV74/efkb4SJJrVbEHaHtjUm4f82zCsXDyct mMoQPKBUJNyquisa5XQTxWDuxoxp2YRQ4mW9A2irSp/KAJY4f9QaUPpxJQQp6sgfCq/BYjQ3xd3i b2fgCUlvjQUxL3u79++5hwi9gqcMWh9fMuJmzFEpHPHWziolrPhmvyFa1qmBoaeyLEOjspl7S+SX fm8MzuxyEYDFAwJaez1FUuiQkbNPZSqsFia18pC1xYtAyimrNGjrSA1GUcERyN5c2/dGhmwLcbtH uCUD4FdSVOG8ZucCICEgTRNF/APV2L7RU68VxscOtrKYRbqrAAAAAAAA ------=_NextPart_000_0C81_01D664D9.7B985530-- From nobody Tue Jul 28 14:47:57 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DD793A0919 for ; Tue, 28 Jul 2020 14:47:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.119 X-Spam-Level: X-Spam-Status: No, score=-2.119 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=d0jTCK6t; dkim=pass (1024-bit key) header.d=juniper.net header.b=NIpMAFk4 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UgST2qRZei3X for ; Tue, 28 Jul 2020 14:47:53 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70B713A0914 for ; Tue, 28 Jul 2020 14:47:53 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 06SLg6Bj029678 for ; Tue, 28 Jul 2020 14:47:53 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : subject : date : message-id : content-type : mime-version; s=PPS1017; bh=evgt9k6yS7JtG77yQaUmJcr2JqCI/ujZtVM/2BpHL2s=; b=d0jTCK6txNfCEoVPkEHnvyzLi/S+P/mMR94HaagFi87plyA5Y8wyX6mzx0Tpm4up1ixK 06TGSRxOiDmhVpiSg1hDs25iFb3CspXmHJhBKXjwMJvEJHQbp/0n4C9zQjq6IdC+kunb 44KtVNjwXxq4xgZPe6vnIEmr+sgkyHVVTQYJx0089eV1orW1o41iwJdPhHh9ztj67kb3 JqNCB79JAf6sVkzQtlTjhalCg8ZdZ4y5x0NN8gDmqNtJnPH6QLE5DFnM8WaELWxjJrFw 0npfWIeTsFq+H3B2ECsf2GsriHlfLxfUxo4PVN7Vg6VowplhLeeLvA4vV3Dh+FS63Ssu bQ== Received: from nam02-sn1-obe.outbound.protection.outlook.com (mail-sn1nam02lp2058.outbound.protection.outlook.com [104.47.36.58]) by mx0a-00273201.pphosted.com with ESMTP id 32gkrpw5se-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Tue, 28 Jul 2020 14:47:52 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EtA+dD7eES/wOuCZ2Knijh6gbmhA5tWyatsqNmRn2hUdGWvRStcNSLRi6+8VbueZxOMyQprt9nkGSrNVkA2n5TQJGzoJmofFr9mihmayK5FsqiYUlGlcyzeETe+cAFvLLa7GPmEkHC1GM0xZRQUisJ2AegF2cMui0wsecKhefMoi9jPnX347+T5vHqn1qYqhsO4nNiHwhX0/NBLQaDKjG8xWxJAZJbww/thPtOMQZMVfw9i9Gl0/MHoloRTp7Ev24/a3mbO8SKcPCNt2uySj99HoOO1cjyxf4hL+WiV4zaziTw/Bny5XyOny605qFpj6Zzu2W8JBJ3dY1/Jse0anPQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=evgt9k6yS7JtG77yQaUmJcr2JqCI/ujZtVM/2BpHL2s=; b=CbBzsXkhQwG6aOCgvf+bFldn0UqTCcpUgGb3NIqfwKYNk4ifKIDRpNnPv3hayk7RIPJrKtHXPxhzaJg7wWijncAt5LWExYfOf6gCcCvav5dTRYmdNqADWPL4ZSsuv7g+AmnfHnCKh3UmUoJthkVgFc30W+ImQO5+0qiofd/FSH9EQm89AxD4O0Tqusm/8ci9d4kWCUN1d2WtXGjqKdMOQswj90K4+xWfZuEjssWPIm9EJVg4MSgzeODuiDjWeUmLtsNeB10LlsFLDyxRo0KvYVOh6ymZQgY2zEt7cZ0ds/yie2pp+OjSb00mqR2G5q4C8UG1RtmrSPgIgb8NiIcpUQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=evgt9k6yS7JtG77yQaUmJcr2JqCI/ujZtVM/2BpHL2s=; b=NIpMAFk4CFuj5bzptAxsNLnvt5uL2VQsIOY+yJTaDASLC4b1VLzQPMW08glyFEWM3t2vNtO4wdJ+P1xLnqDLSQhU/SJIjonqzCXQ4FVkA710pQtOgVfAoA0ZF+JuSPVgkKAMteYwqHkFbDdtZ8Biku6Z/DTsIjY4RRTY51jhdks= Received: from DM6PR05MB6889.namprd05.prod.outlook.com (2603:10b6:5:204::22) by DM6PR05MB4604.namprd05.prod.outlook.com (2603:10b6:5:16::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.9; Tue, 28 Jul 2020 21:47:45 +0000 Received: from DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5]) by DM6PR05MB6889.namprd05.prod.outlook.com ([fe80::f5ae:e4dc:9e61:d5f5%5]) with mapi id 15.20.3239.016; Tue, 28 Jul 2020 21:47:45 +0000 From: Guy Fedorkow To: "rats@ietf.org" Thread-Topic: RATS interaction model Thread-Index: AdZlKIxk1jiwH9OGQGS3FDwKMOoigA== Date: Tue, 28 Jul 2020 21:47:45 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-07-28T21:47:43Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=42642f36-a9f7-4bcc-95ee-722257685c97; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.241.14] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d1af0f79-3847-489a-36a4-08d8333fdd07 x-ms-traffictypediagnostic: DM6PR05MB4604: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:3513; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: BcEPRzMi1jN+d/lWVOBMvgoElSUQ5811zhyNQ8f9vqAt/o4XZvuVvByoNQtYkAavtJ7VSuyJ/0xNZDBPR+IUt/8a9gEXcoWbJhWK0XbnYxeyJmQ8zJdwEkSnzL39HeUIfJvkw9Bi4wgBpPs+5tQafw84JlJtGjxnoHsiYq44iwRL1Em/WrwCDVwg+THkxMrZP5UdH3B8KGIm2kH+uBCzFC/qiZH3t6Mo8b+PGTqXVJM7GzHBoOhKUnRdmyZYdiKPZuCaPyxuUzcr5BQGun0GZaLQrmDGfgRpXtrw2IMzky2zaEhaE+yoRqAfVFt5jrBROE+hfXpobjmeeiIILKUYxA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM6PR05MB6889.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(39860400002)(346002)(366004)(136003)(6506007)(558084003)(66476007)(26005)(66616009)(66556008)(66446008)(186003)(64756008)(9686003)(8676002)(3480700007)(2906002)(66946007)(33656002)(52536014)(55016002)(5660300002)(76116006)(86362001)(7696005)(8936002)(478600001)(7116003)(6916009)(71200400001)(316002)(99936003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_01E0_01D66507.320DA5E0" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM6PR05MB6889.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d1af0f79-3847-489a-36a4-08d8333fdd07 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jul 2020 21:47:45.5819 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IsHSCNxP8RAyoIob4c+E4tOnHpP5ZZf2Be6f7ZtTw+odjMq78xqw5s+fP8QlRH2VWh9WZ7OFaZO32m4+i53CFA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR05MB4604 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-28_17:2020-07-28, 2020-07-28 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 clxscore=1015 phishscore=0 malwarescore=0 spamscore=0 mlxlogscore=744 adultscore=0 lowpriorityscore=0 mlxscore=0 impostorscore=0 suspectscore=0 priorityscore=1501 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2006250000 definitions=main-2007280152 Archived-At: Subject: [Rats] RATS interaction model X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jul 2020 21:47:56 -0000 ------=_NextPart_000_01E0_01D66507.320DA5E0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_01E1_01D66507.320DA5E0" ------=_NextPart_001_01E1_01D66507.320DA5E0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I'm fine with Option 2, making the interaction model a single, separate document, including all the known models. /guy Juniper Business Use Only ------=_NextPart_001_01E1_01D66507.320DA5E0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I’m fine with Option 2, making the interaction = model a single, separate document, including all the known = models.

/guy

 


Juniper = Business Use Only

------=_NextPart_001_01E1_01D66507.320DA5E0-- ------=_NextPart_000_01E0_01D66507.320DA5E0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIISJTCCBd4w ggPGoAMCAQICEAH9bTD8o8pRqBu8ZA41Ay0wDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEwMDIwMTAwMDAwMFoXDTM4MDExODIzNTk1OVowgYgxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhl IFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgBJlFzYOw9sIs9CsVw12 7c0n00ytUINh4qogTQktZAnczomfzD2p7PbPwdzx07HWezcoEStH2jnGvDoZtF+mvX2do2NCtnby qTsrkfjib9DsFiCQCT7i6HTJGLSR1GJk23+jBvGIGGqQIjy8/hPwhxR79uQfjtTkUcYRZ0YIUcuG FFQ/vDP+fmyc/xadGL1RjjWmp2bIcmfbIWax1Jt4A8BQOujM8Ny8nkz+rwWWNR9XWrf/zvk9tyy2 9lTdyOcSOk2uTIq3XJq0tyA9yn8iNK5+O2hmAUTnAU5GU5szYPeUvlM3kHND8zLDU+/bqv50TmnH a4xgk97Exwzf4TKuzJM7UXiVZ4vuPVb+DNBpDxsP8yUmazNt925H+nND5X4OpWaxKXwyhGNVicQN wZNUMBkTrNN9N6frXTpsNVzbQdcS2qlJC9/YgIoJk2KOtWbPJYjNhLixP6Q5D9kCnusSTJV882sF qV4Wg8y4Z+LoE53MW4LTTLPtW//e5XOsIzstAL81VXQJSdhJWBp/kjbmUZIO8yZ9HE0XvMnsQybQ v0FfQKlERPSZ51eHnlAfV1SoPv10Yy+xUGUJ5lhCLkMaTLTwJUdZ+gQek9QmRkpQgbLevni3/GcV 4clXhB4PY9bpYrrWX1Uu6lzGKAgEJTm4Diup8kyXHAc/DVL17e8vgg8CAwEAAaNCMEAwHQYDVR0O BBYEFFN5v1qqK0rPVIDh2JvAnfKyA2bLMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/ MA0GCSqGSIb3DQEBDAUAA4ICAQBc1HwNz/cBfUGZZQxzxVKfy/jPmQZ/G9pDFZ+eAlVXlhTxUjwn h5Qo7R86ATeidvxTUMCEm8ZrTrqMIU+ijlVikfNpFdi8iOPEqgv976jpS1UqBiBtVXgpGe5fMFxL JBFV/ySabl4qK+4LTZ9/9wE4lBSVQwcJ+2Cp7hyrEoygml6nmGpZbYs/CPvI0UWvGBVkkBIPcygu xeIkTvxY7PD0Rf4is+svjtLZRWEFwZdvqHZyj4uMNq+/DQXOcY3mpm8fbKZxYsXY0INyDPFnEYkM nBNMcjTfvNVx36px3eG5bIw8El1l2r1XErZDa//l3k1mEVHPma7sF7bocZGM3kn+3TVxohUnlBzP YeMmu2+jZyUhXebdHQsuaBs7gq/sg2eF1JhRdLG5mYCJ/394GVx5SmAukkCuTDcqLMnHYsgOXfc2 W8rgJSUBtN0aB5x3AD/Q3NXsPdT6uz/MhdZvf6kt37kC9/WXmrU12sNnsIdKqSieI47/XCdr4bBP 8wfuAC7UWYfLUkGV6vRH1+5kQVV8jVkCld1incK57loodISlm7eQxwwH3/WJNnQy1ijBsLAL4JxM wxzW/ONptUdGgS+igqvTY0RwxI3/LTO6rY97tXCIrj4Zz0Ao2PzIkLtdmSL1UuZYxR+IMUPuiB3X xo48Q2odpxjefT0W8WL5ypCo/TCCBhAwggP4oAMCAQICEE2ULBDUO+CUCcWBLTorBk8wDQYJKoZI hvcNAQEMBQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYDVQQDEyVVU0VS VHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE4MTEwMjAwMDAwMFoXDTMwMTIz MTIzNTk1OVowgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+MDwGA1UEAxM1U2VjdGln byBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPO2UCkH/3vlGuejWO+bakr8rEE6qGryCvb4mHCkqKtLN nFCBP22ULvOXqGfV9eNKjkypdR8i0yW2sxpepwRIm4rx20rno0JKuriIMpoqr03E5cWapdfbM3wc caNDZvZe/S/Uvk2TUxA8oDX3F5ZBykYQYVRR3SQ36gejH4v1pXWuN82IKPdsmTqQlo49ps+LbnTe ef8hNfl7xZ8+cbDhW5nv0qGPVgGt/biTkR7WwtMewu2mIr06MbiJBEF2rpn9OVXH+EYB7PmHfpsE kzGp0cul3AhSROpPyx7d53Q97ANyH/yQc+jl9mXm7UHR5ymr+wM3/mwIbnYOz5BTk7kTAgMBAAGj ggFkMIIBYDAfBgNVHSMEGDAWgBRTeb9aqitKz1SA4dibwJ3ysgNmyzAdBgNVHQ4EFgQUCcDy/Ava lNtf/ivfqJlCz8ngrQAwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMBEGA1UdIAQKMAgwBgYEVR0gADBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVVNFUlRydXN0UlNBQ2VydGlmaWNhdGlvbkF1 dGhvcml0eS5jcmwwdgYIKwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0 cnVzdC5jb20vVVNFUlRydXN0UlNBQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9v Y3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggIBAEFEdQCrOcIV9d6OlW0ycWiMAN0X 13ocEDiQyOOxvRcxkfO244K0oX7GzCGHYaqRbklCszzNWVT4DZU/vYrLaeVEDUbCYg+Ci7vhNn9d NqscbzN0xKBoOuRVjPPWDechU70geT3pXCxpwi8EXwl+oiz7xpYfY99JSs3E/piztTSxljHitcPr 5yoWr9lbkFR8KU3+uGTZ11BfKfuSSaRrZFBv133SeY0d2AqvB9Dj2ZDaFZA0OQkkhfAqNgDpVRH9 9lQV4JSKx0N7/QAEtMj6OF5dRXV6hhXuU3A0Eql4d0247oBpxvnfcmV95QfG8HP059hZSJe7T2ww C+IzXVDQO4xnnvrQJ07ZWemxc/grFpgiG+o+pQxapF1bKftysi02Rl6uhdp5wbTeLeYzt2SI9oKS ChwGDQQFixtkNnxuwbdrTwvASwvViDPdIGzIQJrTBqriE5/9nzkXbDZmld8/7DyriJ/A73RIZllX 4dH8mHqsRpU8NEX8IQZWpHWGK5A5nVgvl7MxNfRlIvCvKZQTSnCL8oNqJgHXm6zCB4gBwDonM8V/ 2kuQAUVazVA3I376eIWGwzjuqh3H88v7mNHzubLHm5h0ERCSQNz6UoHVZy3q5xeqbYSaxpDQz3lC NObL6sNaOQNh3DcyzqZJYTcGfuLlmC3AIteAAh7lbybJszYnMIIGKzCCBROgAwIBAgIRAPuElTZ4 EhaY10ByhNJltnIwDQYJKoZIhvcNAQELBQAwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVh dGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRl ZDE+MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0EwHhcNMTkwODI0MDAwMDAwWhcNMjIwODIzMjM1OTU5WjCCATcxCzAJBgNVBAYTAlVT MQ4wDAYDVQQREwU5NDA4OTELMAkGA1UECBMCQ0ExEjAQBgNVBAcTCVN1bm55dmFsZTEcMBoGA1UE CRMTMTEzMyBJbm5vdmF0aW9uIFdheTEeMBwGA1UEChMVSnVuaXBlciBOZXR3b3JrcywgSW5jMR4w HAYDVQQLExVTb2Z0d2FyZSBFbmdpbmVlciBMYWIxOzA5BgNVBAsTMklzc3VlZCB0aHJvdWdoIEp1 bmlwZXIgTmV0d29ya3MsIEluYyBFLVBLSSBNYW5hZ2VyMR8wHQYDVQQLExZDb3Jwb3JhdGUgU2Vj dXJlIEVtYWlsMRUwEwYDVQQDEwxHdXkgRmVkb3Jrb3cxJDAiBgkqhkiG9w0BCQEWFWdmZWRvcmtv d0BqdW5pcGVyLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL2Fewgz3OFG1Go3 cuoLYIbLNRTSEFgN+GLUaqB6g5VuCf0UTvgARSlxgDmsvE5qwTtb8JOtJ64OylVNvz28uslsfvg4 WCc0InZUo1B6JkgNamxa3HI31h63s5wVm/wZgglg5Dv7WH7gmAPrgeoWpBC2GN1sxWHfcJOi2fzg M5LWst0Iwz4M7vqFsZ77AOkUFDNm5p19Fu8HRjVlsE0fNGieZB5GEiL2CN2YoxyOKrJdqWHNMkK8 Q5owvlDnSR0tb8oJgHDX8EESSo5TDA5zqnva48zFfFWCrOdobNgf1To4uBskX6B+QEmrSNLuSdpK JOHw9IdrPofgpjZCmFwvtS8CAwEAAaOCAc4wggHKMB8GA1UdIwQYMBaAFAnA8vwL2pTbX/4r36iZ Qs/J4K0AMB0GA1UdDgQWBBQPfL+xFDoZAlQisKraMq/Y34eQGjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwQAYDVR0gBDkwNzA1Bgwr BgEEAbIxAQIBAQEwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVu dGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAC hklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFu ZFNlY3VyZUVtYWlsQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAg BgNVHREEGTAXgRVnZmVkb3Jrb3dAanVuaXBlci5uZXQwDQYJKoZIhvcNAQELBQADggEBALilLU71 sn7XVNFoUU4MqcHXXFiFiOjCQmq1nqijMa6L4fKm/VX9LZtrsQs3CZTUiHuW2pyLapLVIEXdubNX L877oIVJmeAoSWz1+AYelK6CIpuGUUcGSsXKd4Xl9yOTrmLb7PTjrRpXsWSHJi//jrXTrR/X6M+U TterfzhR5gYPFyvX65Zie9M7k7V2yB3YJJPzT8EtfrJc+eDzYAgiWK8X/ToMZOG7noa/Er8FEARn joL7pKHVOkHTOM9UNaublWlhiUEzzXx9kYPKjgqjAetRo4zh1KBFm9MBlXeigAVBx+BQpP0OdmHb 5vcX3pUR4lkRpnVeLKFR++q6z+bViYAxggRnMIIEYwIBATCBrDCBljELMAkGA1UEBhMCR0IxGzAZ BgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2Vj dGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVudGljYXRpb24g YW5kIFNlY3VyZSBFbWFpbCBDQQIRAPuElTZ4EhaY10ByhNJltnIwCQYFKw4DAhoFAKCCAo8wGAYJ KoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAwNzI4MjE0NzQzWjAjBgkq hkiG9w0BCQQxFgQUVXFFxEqxR8QVieFIsl64nMXHICkwga0GCSqGSIb3DQEJDzGBnzCBnDALBgkq hkiG9w0BAQcwCwYJYIZIAWUDBAEqMAsGCWCGSAFlAwQBFjAKBggqhkiG9w0DBzALBglghkgBZQME AQIwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIaMAsGCSqGSIb3DQEBCjAL BglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATCBvQYJKwYBBAGCNxAEMYGvMIGs MIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdT YWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENs aWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA+4SVNngSFpjXQHKE0mW2 cjCBvwYLKoZIhvcNAQkQAgsxga+ggawwgZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE+ MDwGA1UEAxM1U2VjdGlnbyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1h aWwgQ0ECEQD7hJU2eBIWmNdAcoTSZbZyMA0GCSqGSIb3DQEBAQUABIIBAHaxsIptAQMxBKSbzheJ qGsuBpW8xWVK0+FvIfF0rg/aOwB+nrTLQlXjogK+CXhNq52tmbq1X7Q1NrV2iVmCrsTHdsAawHK4 5RM5hSQO5hM98NSzckvdoX2Mh0gY2Ee54uuQz6OELplrB+b3/CqOIHM4phps0vBTzRGv3vXoO7i/ fAtQYFoR/p4zrUfy2RLGyuRqa5VLWXQbp9HhH3LpVpe7OjE/ocTLHP1U7IlXee0YPXYDnCV8m9Yp VTfBHLJlPfIX/pBqsgOs/WZ8ehlR+Yrp0jK8FdE1z3p0rmYrT7SnfAUPjiILRAs9SzRaS5ZaIW+d 9ZiN1NW+f0olO2WFUHsAAAAAAAA= ------=_NextPart_000_01E0_01D66507.320DA5E0-- From nobody Tue Jul 28 17:41:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B54903A0E6A for ; Tue, 28 Jul 2020 17:41:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.916 X-Spam-Level: X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fZV0KHuj78cD for ; Tue, 28 Jul 2020 17:41:43 -0700 (PDT) Received: from p3plsmtpa12-07.prod.phx3.secureserver.net (p3plsmtpa12-07.prod.phx3.secureserver.net [68.178.252.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 329343A0E2E for ; Tue, 28 Jul 2020 17:41:40 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id 0aA7knIUT8B0s0aA7kvhaO; Tue, 28 Jul 2020 17:41:39 -0700 X-CMAE-Analysis: v=2.3 cv=B97HL9lM c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=I0CVDw5ZAAAA:8 a=pGLkceISAAAA:8 a=xt6ew7UTAAAA:8 a=y6WFtdQdAAAA:20 a=qlatCZPWAAAA:20 a=48vgC7mUAAAA:8 a=7mcBpb6bJyHkLLFUDzgA:9 a=CjuIK1q_8ugA:10 a=MDABLX8d_eUA:10 a=srllI2tfNwFxEBhm-MoA:9 a=D8zU2iWZQcTfatqO:21 a=_W_S_7VecoQA:10 a=lfhs2G6r_ksA:10 a=YdXdGVBxRxTCRzIkH2Jn:22 a=tn93DeGZTgJ6DdWMtdD4:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <0D24E46C-9F6F-433A-8636-372CEE7E3B91@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_14FCF7BD-15E3-46FE-BC5C-1452BAE3BEE5" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 28 Jul 2020 17:41:38 -0700 In-Reply-To: Cc: rats@ietf.org To: Ira McDonald References: X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfJiwaKu8uRe4cIW/dvm74u2iISjlXpaWCX8pg6NRF4FvIt2VT9JrQ5OxLSFiBt11z//zLu4dBxtPyNMiIG+WYrob3P7e70KfPyUkH8/v93IkpOuAC6RD zdLKrIkhx36oAbP4NiqvglqCeiI89EDDz+WZ3yporx3858oMyoeEvGdWuVu7spRLUTBFjJeNAcwfFw5qQkZi2SvSZkkl7EmNVrA= Archived-At: Subject: Re: [Rats] Durable link to approved TCG Algorithm Registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2020 00:41:51 -0000 --Apple-Mail=_14FCF7BD-15E3-46FE-BC5C-1452BAE3BEE5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii This would just be for TPM-specific RATS stuff. For protocols like CWT = and EAT, the registry is the standard IANA COSE registry = . LL > On Jul 28, 2020, at 8:47 AM, Ira McDonald = wrote: >=20 > Hi, >=20 > Here's the link to that registry, for use in naming algorithms in = various > RATS specs: >=20 > https://trustedcomputinggroup.org/resource/tcg-algorithm-registry/ = >=20 > I'm encouraging our TCG IT support team to put an obvious durable > link in the TPM WG home page. >=20 > Cheers, > - Ira >=20 > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Co-Chair - TCG Metadata Access Protocol SG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google..com/site/blueroofmusic = > http://sites.google.com/site/highnorthinc = > mailto: blueroofmusic@gmail.com > (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_14FCF7BD-15E3-46FE-BC5C-1452BAE3BEE5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii This = would just be for TPM-specific RATS stuff. For protocols like CWT and = EAT, the registry is the standard IANA = COSE registry.

LL


On Jul = 28, 2020, at 8:47 AM, Ira McDonald <blueroofmusic@gmail.com> wrote:

Hi,

Here's the link to that registry, for = use in naming algorithms in various
RATS = specs:

https://trustedcomputinggroup.org/resource/tcg-algorithm-regist= ry/

I'm = encouraging our TCG IT support team to put an obvious durable
link in the TPM WG home page.

Cheers,
- = Ira

Ira McDonald = (Musician / Software Architect)
Co-Chair - TCG Trusted = Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open = Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google..com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
(permanent) PO Box 221  Grand Marais, MI 49839  = 906-494-2434
_______________________________________________
RATS = mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_14FCF7BD-15E3-46FE-BC5C-1452BAE3BEE5-- From nobody Tue Jul 28 23:48:08 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5FBF3A1049 for ; Tue, 28 Jul 2020 23:48:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HNuR-FdP2Kvq for ; Tue, 28 Jul 2020 23:48:04 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC73B3A1048 for ; Tue, 28 Jul 2020 23:48:02 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GDAwABGyFf/xmnZsBXBgMcAQEBAQE?= =?us-ascii?q?BBwEBEgEBBAQBAUCBSoMZgTMKlSYligKRMgMYFxsLCwEBAQEBAQEBAQYBARg?= =?us-ascii?q?LCgIEAQECgVSCdgKCIgEkOBMCEAEBBgEBAQEBBgQCAoZFDIJyYYEDAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBAQEBAQEBDgIIByMRGQcjEhIBAR4BAQEDAQEwAQU?= =?us-ascii?q?zAwsQCw4KJwchBh8RBgEMAQUCAQEXgwsBgksDLgQLrxiBNIULBUKCag1igUC?= =?us-ascii?q?BOItEgUMPgUw/gREnDAOCLC4+gho3CwEBgTNNJoUvBI99pQ4kJSkHgVqBCIE?= =?us-ascii?q?IBAuHQYwnhG0FCh6EHY0nBo4kkhqKMIJhkgsCBAIJAhWBaluBIE0kT4JpCQk?= =?us-ascii?q?+FwINkg+FFIVEcgIyAwIGAQcBAQMJfI5SAYEQAQE?= X-IPAS-Result: =?us-ascii?q?A2GDAwABGyFf/xmnZsBXBgMcAQEBAQEBBwEBEgEBBAQBA?= =?us-ascii?q?UCBSoMZgTMKlSYligKRMgMYFxsLCwEBAQEBAQEBAQYBARgLCgIEAQECgVSCd?= =?us-ascii?q?gKCIgEkOBMCEAEBBgEBAQEBBgQCAoZFDIJyYYEDAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBDgIIByMRGQcjEhIBAR4BAQEDAQEwAQUzAwsQCw4KJwchB?= =?us-ascii?q?h8RBgEMAQUCAQEXgwsBgksDLgQLrxiBNIULBUKCag1igUCBOItEgUMPgUw/g?= =?us-ascii?q?REnDAOCLC4+gho3CwEBgTNNJoUvBI99pQ4kJSkHgVqBCIEIBAuHQYwnhG0FC?= =?us-ascii?q?h6EHY0nBo4kkhqKMIJhkgsCBAIJAhWBaluBIE0kT4JpCQk+FwINkg+FFIVEc?= =?us-ascii?q?gIyAwIGAQcBAQMJfI5SAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,409,1589234400"; d="scan'208";a="23365707" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jul 2020 08:47:58 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0B6BADoGiFf/1lIDI1XBgMcAQEBAQE?= =?us-ascii?q?BBwEBEgEBBAQBAUCBSoIqbwNUMCwKlSUligKRMgNVCwEDAQEBAQEGAQEYCwo?= =?us-ascii?q?CBAEBgVaCdgKCIAIkOBMCEAEBBQEBAQIBBgRthVwMhXIBAQQBATABBTMDCxA?= =?us-ascii?q?LDgonByEGHxEGAQwBBQIBAReDCwGCSwMyC68YgTSFCwVCgmoNYoFAgTiLRIF?= =?us-ascii?q?DD4FMP4ERJwwDgiwuPoIaNwsBAYEzTSaFLwSPfaUOJCUpB4FagQiBCAQLh0G?= =?us-ascii?q?MJ4RtBQoehB2NJwaOJJIaijCCYZILAgQCCQIVgWojN4EgTSRPgmkJCT4XAg2?= =?us-ascii?q?SD4UUhURBMQIyAwIGAQcBAQMJfI5SAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,409,1589234400"; d="scan'208";a="87174774" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jul 2020 08:47:55 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06T6lrGm027222 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 29 Jul 2020 08:47:53 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 29 Jul 2020 08:47:48 +0200 To: Laurence Lundblade , Ira McDonald CC: References: <0D24E46C-9F6F-433A-8636-372CEE7E3B91@island-resort.com> From: Henk Birkholz Message-ID: <25bb2d52-3489-3c76-a619-f827edf5ba4f@sit.fraunhofer.de> Date: Wed, 29 Jul 2020 08:47:47 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <0D24E46C-9F6F-433A-8636-372CEE7E3B91@island-resort.com> Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Durable link to approved TCG Algorithm Registry X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2020 06:48:07 -0000 Hi Laurence, I think that was a reference in support of the "YANG module algorithm identity" discussion in the meeting on Tuesday. COSE of course uses the COSE registries. YANG does not use COSE though. And quite some time was spend on trying to find out which registries to use here (in RATS) in the end. As we learn from NETCONF, using crypto algorithm (registries) in a convenient and universal manner can be very very hard. Viele Gre, Henk On 29.07.20 02:41, Laurence Lundblade wrote: > This would just be for TPM-specific RATS stuff. For protocols like CWT > and EAT, the registry is the standard IANA COSE registry > . > > LL > > >> On Jul 28, 2020, at 8:47 AM, Ira McDonald > > wrote: >> >> Hi, >> >> Here's the link to that registry, for use in naming algorithms in various >> RATS specs: >> >> https://trustedcomputinggroup.org/resource/tcg-algorithm-registry/ >> >> I'm encouraging our TCG IT support team to put an obvious durable >> link in the TPM WG home page. >> >> Cheers, >> - Ira >> >> /Ira McDonald (Musician / Software Architect) >> Co-Chair - TCG Trusted Mobility Solutions WG/ >> /Co-Chair - TCG Metadata Access Protocol SG >> / >> /Chair - Linux Foundation Open Printing WG >> Secretary - IEEE-ISTO Printer Working Group >> Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG >> IETF Designated Expert - IPP & Printer MIB >> Blue Roof Music / High North Inc >> http://sites.google..com/site/blueroofmusic >> >> http://sites.google.com/site/highnorthinc >> mailto: blueroofmusic@gmail.com >> (permanent) PO Box 221 Grand Marais, MI 49839 906-494-2434/ >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Jul 29 01:38:10 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6ECA3A10C4 for ; Wed, 29 Jul 2020 01:38:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=H9wuUi0P; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=H9wuUi0P Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LrJzFMWOv4hA for ; Wed, 29 Jul 2020 01:38:07 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2042.outbound.protection.outlook.com [40.107.20.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6E893A10C7 for ; Wed, 29 Jul 2020 01:38:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RyVZ31phb8+69iU/CxfBTx29DXKXGGa/sR1P0nVeEpg=; b=H9wuUi0PWpoAMzHqkPG6Wl6P2AUqwJ0rCG2TcHvJ54akSNqyMaB8KUBCp0UGMF5Lp8xv7ndu7g8NAhzY85bsZHtnerKMt7Jtdo5jLHNZS2aDs39XcKeGll8hmYnDcK4LjvyGHt5y0ScR6luMp1PujfvclOVDV5GhmwYOp6O7r6Q= Received: from AM5PR0202CA0018.eurprd02.prod.outlook.com (2603:10a6:203:69::28) by DB7PR08MB3291.eurprd08.prod.outlook.com (2603:10a6:5:24::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.24; Wed, 29 Jul 2020 08:38:03 +0000 Received: from VE1EUR03FT042.eop-EUR03.prod.protection.outlook.com (2603:10a6:203:69:cafe::80) by AM5PR0202CA0018.outlook.office365.com (2603:10a6:203:69::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17 via Frontend Transport; Wed, 29 Jul 2020 08:38:03 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT042.mail.protection.outlook.com (10.152.19.62) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.10 via Frontend Transport; Wed, 29 Jul 2020 08:38:02 +0000 Received: ("Tessian outbound 7de93d801f24:v62"); Wed, 29 Jul 2020 08:38:02 +0000 X-CR-MTA-TID: 64aa7808 Received: from 9929ee07dbb4.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 0E771E31-23DD-40D8-AAE3-249A5CC6DC32.1; Wed, 29 Jul 2020 08:37:57 +0000 Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 9929ee07dbb4.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 29 Jul 2020 08:37:57 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ex0WBFm6jyCcaai2DONnE/fLtUsaT+YnZiG+Hu7j0Ut5sipONBn6bJGQfENO6aUN5gLAjwmXykeoC6gChOLWOUCOQi68+S/SO/OqBnYmuNW4RdW3jKhcvl7aaDZ1kSFyNDPX2PssQ82HgGG8u/73HJZOQF+UuRXjV3i7j6rr1MTeALKEZcdtUF1ez75/AvY7ouFZqQYlGkVrK46OLe/lCZS9ont/UTMc6RPRU8kY27XMdwWSNzURpKYfjO5+fIzcEcPEpFnrt61RA6iEa4akGQ0TwCZDMEGHdMNUWoO4zinACjOK4A2tOtt0WcqNS5JT5xM+9h3QGgxQOw4GAX2icg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RyVZ31phb8+69iU/CxfBTx29DXKXGGa/sR1P0nVeEpg=; b=H4f919gUMIhq/7v2DdoxQoNtB/kl9kQqezcBieG1EWB/D1y18Smu0mGU5JJgrxeJ6G0ZZv5ZlPWN2aw/2y5RvOeo49VtRrbxxsvVudDBNqIG2r+UBoKaFIfIdoOL/U2IV1sOshfKZ/BDT+nsg+tk20Yq0Ml8kYrYnqtUowk6lfzJkqEiLNGWO9Tks/bKBz5bWaACWb7R0UEMzkMqaglXiYvU3sd0ONbzNR4/vHe7SpIGRTlH7mBKHSxnzM6tVeW1CayN+p9U3eLuqcvCGdQt71iU9oWabN4HxvZvTpNov666PDpSuvyy92yUXsJrQFZgKHfY5oUTk4vwsYEKToEuvg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RyVZ31phb8+69iU/CxfBTx29DXKXGGa/sR1P0nVeEpg=; b=H9wuUi0PWpoAMzHqkPG6Wl6P2AUqwJ0rCG2TcHvJ54akSNqyMaB8KUBCp0UGMF5Lp8xv7ndu7g8NAhzY85bsZHtnerKMt7Jtdo5jLHNZS2aDs39XcKeGll8hmYnDcK4LjvyGHt5y0ScR6luMp1PujfvclOVDV5GhmwYOp6O7r6Q= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB4196.eurprd08.prod.outlook.com (2603:10a6:208:129::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.20; Wed, 29 Jul 2020 08:37:55 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3%5]) with mapi id 15.20.3216.034; Wed, 29 Jul 2020 08:37:55 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: Age Claim in EAT Thread-Index: AdZlgrFdILmwyFJNTPm5QA7JIbM9dQ== Date: Wed, 29 Jul 2020 08:37:55 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 18561c9a-f318-43d1-8a21-5782c53fab08.0 x-checkrecipientchecked: true Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [213.162.72.158] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: a53101d5-41be-4f11-b919-08d8339ab52d x-ms-traffictypediagnostic: AM0PR08MB4196:|DB7PR08MB3291: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:8882;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: ZIyKrNzw2zmfQSqA7azLmdugNU4HHlFT0dYb02zZLUnCmY7mneL3uwMxDprjnR3PbiSZXkMQhmNBSN1aJwHiMMkgglZiYLPbZJMdLXdP6QU3fdb6eOOg6AFGlz1Eep6VRc416XM1l/GeWSdIr9oqFodz3UmgfcudNO9FCHa/4SJ3ShTW3OGCn7J5Vx7FRDppWcf2ax7kMLLu0ljIq21hja+iGLP4h79HcyvLKwH7ntFRa9fB6Sj3AM4Zt9ZMtVQd6o8N3/L81XSr7p8LcRCX2UE0Bi3d8gSFM3JX+x0fbIon0cMIXV0gj1GgT0sx6suB X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(366004)(39850400004)(376002)(136003)(346002)(71200400001)(55016002)(9686003)(3480700007)(186003)(316002)(8936002)(2906002)(26005)(8676002)(6916009)(478600001)(7696005)(86362001)(66476007)(64756008)(7116003)(83380400001)(66946007)(66446008)(33656002)(76116006)(5660300002)(6506007)(52536014)(66556008); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4196 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: eb858621-3641-4fe9-872f-08d8339ab0dc X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: s03QfxbCOHrjrIph8TNzyFrfMf7a8r2X9zzcXDJYPAH3g/hfGTald0DvNtRRwCRD98Am4+wlFkKMHMI5viVHuXEs8XEhmNTGM8O+s9T3SWNAyQY8E4l35C80iwWNer8wtsTL64/bVPRvQQ0/yHM81nbUuvfS1YaYDQQCtHqgkIFIQIXt2C2OrcNHMfoD61AIOYW+xa7zJZUVPXjGguYXUs0hw/0uAc9CQgArcK75bvIo5FezjvqvrpScSMoAPdJL+OiLhslCpPetmHZz/882JTaHAtL8Afkk7ekrI1eqoHtOigS/8Xs0ruvYz4LlwvzP0S+bMM/q0LKhzu+jeQuDKEnOVQ1Co9MsPgP4qamqn7ksrbU96NwaXvjrtpP6FKrIcrsZvJDZ7jVELkc1VklqxQ== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(136003)(39860400002)(396003)(376002)(346002)(46966005)(3480700007)(33656002)(356005)(8936002)(55016002)(82740400003)(70586007)(26005)(47076004)(52536014)(81166007)(82310400002)(6916009)(2906002)(9686003)(36906005)(6506007)(70206006)(478600001)(336012)(86362001)(5660300002)(316002)(8676002)(83380400001)(186003)(7696005)(7116003); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2020 08:38:02.9408 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: a53101d5-41be-4f11-b919-08d8339ab52d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: VE1EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3291 Archived-At: Subject: [Rats] Age Claim in EAT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2020 08:38:09 -0000 Hi Laurence, Hi all, How does the age claim work? The spec says "represents the number of seconds that have elapsed since the= token was created". By creating a token you also protect the claims with a signature and hence = you cannot change the content of the claims anymore (without breaking the s= ignature). Hence, here "creating a token" must mean something different. I suspect it = means when certain values have been collected from the device and before th= e token with the signature was put together. Correct? If that's the case, I wonder whether it would also make sense to take into = account that different information may be collected at a different point in= time and hence the age indication would better go (somehow) with specific = claims where the time difference between the collection of the data and the= signature generation matters. I also wonder whether the number of seconds = matter and whether you really want to communicate something more abstract, = such as "I created a hash over the firmware during boot time" rather than "= I created the hash over the firmware in real-time when I was asked". Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Wed Jul 29 02:11:55 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C863A3A0ABE for ; Wed, 29 Jul 2020 02:11:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZJNma03GfugJ for ; Wed, 29 Jul 2020 02:11:49 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 135E43A0D48 for ; Wed, 29 Jul 2020 02:11:21 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2E2CwDNOyFf/xoHYZlgHgE8DAILFYF?= =?us-ascii?q?KAoFzBoEegTMKhCuQcSWBAZkOFIFgCQsBAQEBAQEBAQEGAQEYCwoCBAEBAoR?= =?us-ascii?q?KAoIjASQ2Bw4CEAEBBgEBAQEBBgQCAoZFDEMWAYJ5gQMBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBFgJDVRIBHgEBAQECAQEBIQ8BBTYCBAoLCQISBgICERUCAicgAg4?= =?us-ascii?q?GAQwGAgEBgldLAYJcHwULkwybBHaBMoVSg1qBOgaBDioBhkiFIIEPDw+BTD8?= =?us-ascii?q?maycMA4FcSTU+glwBAQIBgRUSARIBTROCV4JgBI83TIJpohNcKQeBWoEIgQg?= =?us-ascii?q?EC4dEi0CFVgUKHoJ7NokVhH8GjimSIIoylGwCBAIJAhWBWgWBFnBNJE+CaVA?= =?us-ascii?q?XAg2OKQEXgQIBAoddhURyNwIGAQcBAQMJfIxpgXIBgRABAQ?= X-IPAS-Result: =?us-ascii?q?A2E2CwDNOyFf/xoHYZlgHgE8DAILFYFKAoFzBoEegTMKh?= =?us-ascii?q?CuQcSWBAZkOFIFgCQsBAQEBAQEBAQEGAQEYCwoCBAEBAoRKAoIjASQ2Bw4CE?= =?us-ascii?q?AEBBgEBAQEBBgQCAoZFDEMWAYJ5gQMBAQEBAQEBAQEBAQEBAQEBAQEBFgJDV?= =?us-ascii?q?RIBHgEBAQECAQEBIQ8BBTYCBAoLCQISBgICERUCAicgAg4GAQwGAgEBgldLA?= =?us-ascii?q?YJcHwULkwybBHaBMoVSg1qBOgaBDioBhkiFIIEPDw+BTD8maycMA4FcSTU+g?= =?us-ascii?q?lwBAQIBgRUSARIBTROCV4JgBI83TIJpohNcKQeBWoEIgQgEC4dEi0CFVgUKH?= =?us-ascii?q?oJ7NokVhH8GjimSIIoylGwCBAIJAhWBWgWBFnBNJE+CaVAXAg2OKQEXgQIBA?= =?us-ascii?q?oddhURyNwIGAQcBAQMJfIxpgXIBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,409,1589234400"; d="scan'208";a="23370391" Received: from mail-mtas26.fraunhofer.de ([153.97.7.26]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jul 2020 11:11:18 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AmDgC2PCFf/1lIDI1ggQmBSgKBcwY?= =?us-ascii?q?vbwNUMCwKhCuQcSWBAZkOFIFpCwEDAQEBAQEGAQEYCwoCBAEBhEwCgiECJDY?= =?us-ascii?q?HDgIQAQEFAQEBAgEGBG2FXAxDFgGFFwEBAQMBAQEhDwEFNgIECgsJAhIGAgI?= =?us-ascii?q?RFQICJyACDgYBDAYCAQGCV0sBglwkC5MMmwR2gTKFUoNVgToGgQ4qAYZIhSC?= =?us-ascii?q?BDw8PgUw/JmsnDAOBXEk1PoJcAQECAYEVEgESAU0TgleCYASPN0yCaaITXCk?= =?us-ascii?q?HgVqBCIEIBAuHRItAhVYFCh6CezaJFYR/Bo4pkiCKMpRsAgQCCQIVgVoFLmd?= =?us-ascii?q?wTSRPgmlQFwINjikBF4ECAQKHXYVEQTE3AgYBBwEBAwl8jGmBcgGBEAEB?= X-IronPort-AV: E=Sophos;i="5.75,409,1589234400"; d="scan'208";a="118570394" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaS26.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 29 Jul 2020 11:11:16 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06T9BFfl002589 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Wed, 29 Jul 2020 11:11:15 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Wed, 29 Jul 2020 11:11:10 +0200 To: Hannes Tschofenig , "rats@ietf.org" References: From: Henk Birkholz Message-ID: Date: Wed, 29 Jul 2020 11:11:08 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Age Claim in EAT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2020 09:11:53 -0000 Hi Hannes, in the scope of Evidence: Signing a CWT structure is creating an EAT. This event is defined as time(EG) here: https://tools.ietf.org/html/draft-ietf-rats-architecture-05#appendix-A "Creating a token" would mean "Evidence Generation", for example. Age also is a time interval based on a time unit (units that apply to Henk are years, I claim that Henk's age is 21, of course. Trust in Henk's Claims can be established via Endorsements). Age is a time interval expressed as a duration. That means that the beginning of that time interval is set as zero (an epoch) and then counts the time units. The semantics of age in EAT are: the epoch is time(EG) and the unit is seconds. This only works, if time sources for relative time-counters are available, of course. Collection of Claims - time(CC) was proposed to the architecture, but did not find consensus yet (we are working on time(AA), though, the time at which the Attester becomes aware of a changes value in the Target Environment right now). But! there is time(VG), the Value Generation. This time can often only be inferred or approximated (in contrast to time(AA)), but it is the best we have defined right now in the context of: > If that's the case, I wonder whether it would also make sense to take into account that different information may be collected at a different point in time and hence the age indication would better go (somehow) with specific claims where the time difference between the collection of the data and the signature generation matters. As a note: We have not talked at all before about the common concept of "latches" or stage transitions... this is an important concept that does capture the "this event has happened" (before/after a defined event) and represents strong security implications that are not included in the RATS architecture today. Would that maybe help in your context? Viele Grüße, Henk On 29.07.20 10:37, Hannes Tschofenig wrote: > Hi Laurence, Hi all, > > How does the age claim work? > > The spec says "represents the number of seconds that have elapsed since the token was created". > > By creating a token you also protect the claims with a signature and hence you cannot change the content of the claims anymore (without breaking the signature). > > Hence, here "creating a token" must mean something different. I suspect it means when certain values have been collected from the device and before the token with the signature was put together. Correct? > > If that's the case, I wonder whether it would also make sense to take into account that different information may be collected at a different point in time and hence the age indication would better go (somehow) with specific claims where the time difference between the collection of the data and the signature generation matters. I also wonder whether the number of seconds matter and whether you really want to communicate something more abstract, such as "I created a hash over the firmware during boot time" rather than "I created the hash over the firmware in real-time when I was asked". > > Ciao > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Jul 29 13:14:10 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B37BA3A0EC4 for ; Wed, 29 Jul 2020 13:14:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.916 X-Spam-Level: X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_ONLY_32=0.001, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZgQMHrYMbqvt for ; Wed, 29 Jul 2020 13:14:05 -0700 (PDT) Received: from p3plsmtpa06-06.prod.phx3.secureserver.net (p3plsmtpa06-06.prod.phx3.secureserver.net [173.201.192.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F05D63A0EC2 for ; Wed, 29 Jul 2020 13:14:04 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id 0sShkLEQwcPrZ0sShku7Ff; Wed, 29 Jul 2020 13:14:03 -0700 X-CMAE-Analysis: v=2.3 cv=K7hc4BeI c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=0XtbOteLAAAA:20 a=tAm32k8MKl9q44iI0Q0A:9 a=g3NJU1hXpT0_Vnhu:21 a=xdCcs7yVuViPddhK:21 a=QEXdDO2ut3YA:10 a=VrleLgnnUxF5ARPw:21 a=PHqvCIgSlQ4GIiCO:21 a=PNK2rG6TL9fDkzpn:21 a=_W_S_7VecoQA:10 a=eK4R_HXFp2ADZQbCsP8A:9 a=UOJ2KywT7WH4NfZ5:18 a=HXjIzolwW10A:10 a=T6a71-JsGAwA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_FD633D9E-C7DD-4EF6-B497-FD8284D7EB9E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: <830EC75F-B44E-4F3A-9972-D2196E480DBC@island-resort.com> Date: Wed, 29 Jul 2020 13:14:03 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfPLrG1quGi1gwSLg+n5Hv5Kcqth+lBU/Aak46j2NgmiZRWIbrAbknQZ/cJBzXupnfPWmKzYXzANzi89zs3kwa3N0UPjZzFXVAeBoSy4tQc6MqNbiJ8Kz Tw7lFMKnpCckefvTjUwIYO+O+FpHXWL0e0lj7uB7cN3q+C7mynrR4Kvg Archived-At: Subject: [Rats] Attestation key material in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2020 20:14:08 -0000 --Apple-Mail=_FD633D9E-C7DD-4EF6-B497-FD8284D7EB9E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I presented this slide below the IETF 108 RATS meeting today. I believe = it is critical that the RATS architecture allow for all uses case in the = slide.=20 In particular RATS architecture must allow for symmetric keys. TPMs and = public-key based crypto is too expensive for low-cost, large-scale IoT. = There are real use cases supported my multiple companies using symmetric = keys. Symmetric keys can be made secure at the verifier =E2=80=94 we = secure keys for TLS at servers all the time using HSMs and such. I do NOT want to put this taxonomy into the RATS architecture document. = I don=E2=80=99t think that is necessary. I created the taxonomy as = background information and as illustrative examples of real world = designs.=20 I think there are options for adjusting the architecture document to = accommodate this. Option 1) Expand the notion of an Endorsement quite a lot. Endorsements = are not longer just static documents like X.509 certs and/or COSE/CMS = signed blobs. They are anything that conveys the attestation key = material into the Verifier or allows Verification of the attester. They = must support confidentiality. Option 2) Replace the term =E2=80=9CEndorsement=E2=80=9D with something = like =E2=80=9CVerifier Input=E2=80=9D or =E2=80=9CAttester Trust = Criteria=E2=80=9D in the architecture document as the means by which key = material goes into the Verifier. Endorsements still exist, but are just = one type of Verifier Input or Attester Trust Criteria just like EAT is = one kind of Attestation Evidence. I have a slight preference for Option 2). I=E2=80=99m interested in = opinions of which option to choose. This is issue #65 = , opened in = GitHub four months ago. It is not a last-minute/new issue. I believe it = is in scope with the RATS charter as the charter explicitly mentions = attestation key material in the Program of Work. LL My main point of this taxonomy was to affect the RATS architecture = document. There was discussion today of it being a separate document = perhaps outside of RATS. I=E2=80=99m happy for that to happen, but I = don=E2=80=99t want to write it because I have enough RATS/EAT work to = do. I=E2=80=99m very happy if other folks want to pick it up and use in = other documents :-). --Apple-Mail=_FD633D9E-C7DD-4EF6-B497-FD8284D7EB9E Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_6A241B5A-F1A3-4568-B34A-DBB19C745D40" --Apple-Mail=_6A241B5A-F1A3-4568-B34A-DBB19C745D40 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = presented this slide below the IETF 108 RATS meeting today. I believe it = is critical that the RATS architecture allow for all uses case in the = slide. 

In = particular RATS architecture must allow for symmetric keys. TPMs and = public-key based crypto is too expensive for low-cost, large-scale IoT. = There are real use cases supported my multiple companies using symmetric = keys. Symmetric keys can be made secure at the verifier =E2=80=94 we = secure keys for TLS at servers all the time using HSMs and = such.

I do NOT = want to put this taxonomy into the RATS architecture document. I don=E2=80= =99t think that is necessary. I created the taxonomy as background = information and as illustrative examples of real world = designs. 

I= think there are options for adjusting the architecture document to = accommodate this.

Option 1) Expand the notion of an Endorsement quite a lot. = Endorsements are not longer just static documents like X.509 certs = and/or COSE/CMS signed blobs. They are anything that conveys the = attestation key material into the Verifier or allows Verification of the = attester. They must support confidentiality.

Option 2) Replace the term = =E2=80=9CEndorsement=E2=80=9D with something like =E2=80=9CVerifier = Input=E2=80=9D or =E2=80=9CAttester Trust Criteria=E2=80=9D in the = architecture document as the means by which key material goes into the = Verifier. Endorsements still exist, but are just one type of Verifier = Input or Attester Trust Criteria just like EAT is one kind of = Attestation Evidence.

I have a slight preference for Option = 2). I=E2=80=99m interested in opinions of which option to choose.

This = is issue #65, opened in GitHub four months ago. It is = not a last-minute/new issue. I believe it is in scope with the RATS = charter as the charter explicitly mentions attestation key material in = the Program of Work.

LL

My main point of this taxonomy was to affect the RATS = architecture document. There was discussion today of it being a separate = document perhaps outside of RATS. I=E2=80=99m happy for that to happen, = but I don=E2=80=99t want to write it because I have enough RATS/EAT work = to do. I=E2=80=99m very happy if other folks want to pick it up and use = in other documents :-).

= --Apple-Mail=_6A241B5A-F1A3-4568-B34A-DBB19C745D40 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-3.png Content-Type: image/png; x-unix-mode=0666; name="PastedGraphic-3.png" Content-Id: <3FB5CFD2-B918-4A2C-8B47-E737139DC3BE> iVBORw0KGgoAAAANSUhEUgAABMwAAAKtCAYAAADbzPKmAAABRmlDQ1BJQ0MgUHJvZmlsZQAAKJFj YGASSSwoyGFhYGDIzSspCnJ3UoiIjFJgf8LAwsDPwMagx8CTmFxc4BgQ4ANUwgCjUcG3awyMIPqy Lsgs0yQOZ95O1r7U/Hlec4L4/TDVowCulNTiZCD9B4jTkwuKShgYGFOAbOXykgIQuwPIFikCOgrI ngNip0PYG0DsJAj7CFhNSJAzkH0DyBZIzkgEmsH4AsjWSUIST0diQ+0FAV4fd4VQn5Agx3BPF1cC 7iUZlKRWlIBo5/yCyqLM9IwSBUdgKKUqeOYl6+koGBkYGTAwgMIcovrzDXBYMopxIMQKxBgYLGYA BR8ixOKBftgux8DA34cQUwP6V8CLgeHgvoLEokS4Axi/sRSnGRtB2NzbGRhYp/3//zmcgYFdk4Hh 7/X//39v////7zIGBuZbDAwHvgEAEapeFgimAZUAAAGeaVRYdFhNTDpjb20uYWRvYmUueG1wAAAA AAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA1 LjQuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8y Mi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAg ICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAg ICAgICAgPGV4aWY6UGl4ZWxYRGltZW5zaW9uPjEyMjg8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgog ICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+Njg1PC9leGlmOlBpeGVsWURpbWVuc2lvbj4K ICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CqFrgnUA AEAASURBVHgB7J0FmBzF1oYrEBdCDBKiJITg+gMXubh7cHd3d3d3ubgFJ7i7u3uEhBBIQgSihBj8 9fZuzdbU9vjM7uzsd55nd2a6q6ur3+4uOXXOqSb/WjESERABERABERABERABERABERABERABERAB ERCBiMB84iACIiACIiACIiACIiACIiACIiACIiACIiACIlBDQAqzGhb6JgIiIAIiIAIiIAIiIAIi IAIiIAIiIAIiIAJGCjM9BCIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiLgEZDCzIOhryIgAiIgAiIg AiIgAiIgAiIgAiIgAiIgAiIghZmeAREQAREQAREQAREQAREQAREQAREQAREQARHwCEhh5sHQVxEQ AREQAREQAREQAREQAREQAREQAREQARGQwkzPgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAh4BKQw 82DoqwiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAhIYaZnQAREQAREQAREQAREQAREQAREQAREQARE QAQ8AlKYeTD0VQREQAREQAREQAREQAREQAREQAREQAREQASkMNMzIAIiIAIiIAIiIAIiIAIiIAIi IAIiIAIiIAIeASnMPBj6KgIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAJSmOkZEAEREAEREAEREAER EAEREAEREAEREAEREAGPgBRmHgx9FQEREAEREAEREAEREAEREAEREAEREAEREAEpzPQMiIAIiIAI iIAIiIAIiIAIiIAIiIAIiIAIiIBHQAozD4a+ioAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAUZnoG REAEREAEREAEREAEREAEREAEREAEREAERMAjIIWZB0NfRUAEREAEREAEREAEREAEREAEREAEREAE REAKMz0DIiACIiACIiACIiACIiACIiACIiACIiACIuARkMLMg6GvIiACIiACIiACIiACIiACIiAC IiACIiACIiCFmZ4BERABERABERABERABERABERABERABERABEfAISGHmwdBXERABERABERABERAB ERABERABERABERABEZDCTM+ACIiACIiACIiACIiACIiACIiACIiACIiACHgEpDDzYOirCIiACIiA CIiACIiACIiACIiACIiACIiACEhhpmdABERABERABERABERABERABERABERABERABDwCUph5MPRV BERABERABERABERABERABERABERABERABKQw0zMgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAh4B Kcw8GPoqAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAlKY6RkQAREQAREQAREQAREQAREQAREQAREQ AREQAY+AFGYeDH0VAREQAREQAREQAREQAREQAREQAREQAREQASnM9AyIgAiIgAiIgAiIgAiIgAiI gAiIgAiIgAiIgEdACjMPhr6KgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgBRmegZEQATKlsCMGTPM zJkzzb///lu2ZWwMBdN9aAx3uXKvUc9v5d5bXZkIFEpA9UOhBHW8CIiACFQ2gaaVfXnG/Pzzz+aB Bx4o2WW2atXKHHvssSXLXxmLQGMiMG/ePHPbbbeZN9980wwbNsxMnjw5uvz555/fbLrppua6667L CscNN9xgpk6dmkjbuXNnc9BBByV+F/LlpptuSpSLfDp06GAOPfTQQrIs+bHff/+9efLJJxPnad26 tTnmmGMSv8Mv2dyHXPMMz1GOv5955hnzzTffREXr2rWr2W+//RLF5LmcMGFC4rf7suSSS5qBAwe6 nzl/Dh482AwZMqTWcQsvvLDZf//9a23XhswEsnl+M+eiFCIQTyCsC1ZffXWz3nrrxSfOsPW3334z 99xzT1Kqgw8+2HTq1Clpm34Uj0Ap6odiPRNvv/22effdd2td7FprrWXWXnvtWtu1QQREQAREoPQE Kl5hxkDkjjvuKBnJZs2aSWFWMrrKuDERGDdunDnkkEMSCgv/2ungTpw40d+U9jsKty+++CKRpkmT JmazzTYzPXv2TGzL58uIESPMlVdemXToaqutVvYKM5RAfj3YvHnzlAqzbO9DLnkmASvjH9dcc000 yUIRua++wuzee+81Y8aMqVV6lLHbbLONmW++3A22ea4vvvhi8+eff9bKl2dVCrNaWDJuyPb5zZiR EohACgJhXTBr1qy8FWa0KX7dzCm32GILKcxSsC90c6nqh2I8E6+//ro57LDDzJw5c5Iuk8mTXXfd NWmbfoiACIiACNQdgdx7+HVXNp1JBESgERG4/PLLY5Vl+SDYaaedkg7DpdO3sEramcOPJ554olbq 8Fy1EjSwDcW8Dw3p0rFG5s9JthYjKHI//fRTd1hOnx9//HGssiynTJQ4iUBjfX6TIOiHCIhALIFy rR/eeustc/jhh9dSlnXr1s089NBDZtFFF429Hm0UAREQAREoPQEpzErPWGcQARHIQGDo0KHm6aef jk2FBU/Lli0N7s/ZypZbbmlwO/QlTtnl78/0PU7ptsACC0SuopmObSj7i30fGsp1U04GLL6su+66 /s+031988cW0+1PtzPe4VPk19u2V/vxeccUV5qijjkr8vfbaa439luv6RSBrAuVaP7zzzjuRlfrs 2bOTrqVHjx7mwQcfNL169Urarh8iIAIiIAJ1S6DiXTKXWmqpqHOZCesHH3xgPvnkk6RkxCXC5TKd 5DKIT5eP9olAYybw4Ycfmn/++ScJwY477hi5pPXv3z/ankvgf5RlKM0eeeSRRJ6jRo0yn3/+uVlp pZUS23L58tFHH9Vyydt6660jZV4u+dRH2tBdMPztypTLfQjzCH+7PBvKJ268Trp3727cc+e2pft8 +eWXzZlnnmlw/c1WeN5feumlbJMrXRYEcnl+s8iu7JK88sorZvjw4Yly9evXz2ywwQaJ3/oiAiKQ mkA51g+MPQhFgVuvL7jkE395kUUW8TfruwiIgAiIQD0QqHiFGY3O0UcfnREtA+xQYcZMLrF+JCIg AqUlQOBjX4jZceGFFxqC/TvJRRnBMbhK+goztj3++ON5K8w4NpSdd9453FSWv7fddluz5pprJsqW aiIgl/uQbZ6Jk5bxl7/++sswmHKyzjrruK9ZfY4dO9Z89dVXZoUVVsgqPYk+++yz2EUEss5ACWsR yOX5rXWwNoiACFQ0gXKrH5iEO/DAA83ff/+dxL1Pnz7m/vvvNyw8IxEBERABEah/AnLJrP97oBKI QKMn8OuvvyYxGDBgQJKyLGlnlj9WXHHFWlZCzz33nAndHrLJDoXKCy+8kJR06aWXNliwNgRBQcZM tfvr0qVLbLFzuQ/Z5hl7ojLbiLLMfy5yccd0l5Kre2Wu6d159JmaQC7Pb+pctEcERKASCZRT/UDc ywMOOMDMnDkzCXXfvn0jyzIpy5Kw6IcIiIAI1CsBKczqFb9OLgIiAAEUUr506tTJ/5n39zAg/9Sp U82rr76ac3643IVlDPPOOdMyPCC8xmLdhzK81KQi+e6YWBWvscYaSfvjfiy33HJJm3NRgOFeHKYP 80vKXD+yItBYn9+s4CiRCDRyAuVSP7CCNyswh+VZbLHFophlWNhLREAEREAEyodAxbtk1ifqefPm mbffftv88ssvhqWsf//9dzNp0iTTrl07w8o3zCD17t3bYM3QtGnqW0Fsgy+//DLpUnBP+7//+z+T Lm4Q58ftJ4z9hNtQixYtkvLzf9CIExz1xx9/NEOGDInKzCASqx/3l02DPmXKlCgPlzfx3tygkPg9 77//vnnTxg3CTB6TdFgwu7bEEkuYVVdd1R2W02ddlJ2yMtjFhXfMmDGR2y6WO8suu2y0HHwc2z/+ +CO6F9wPuC600EJm8cUXN1gprb766rHXyGyo70LAPV9llVWyipPEPad8/r0nLhNBZIslhbL+7rvv zPTp06PiTJgwIalYcMVdwQkWUTwbucrAgQPNZZddlrTyFMH/N99885yyChcMYBEC4pdlI7y/w4YN Mz/88EP0N3LkSIMiyr1LfGbzPnGudO/U5MmTzaOPPmq+//776J1dcMEFzd57721WXnnltMflex/S lSUTl2IxSVeGdDzC8lEPOVlttdWyWmBik002MbCjnkVGjx4dsc/G6hD3TdoEJ7gek9/XX3/tNmX9 Wax2hhOm41mMOpv2z4/BRVuYDS/qQd86hPrTrRqX7/MbAi4mxzBvfof1JSuycv20e/zR5sUF9x4/ fryhzkB4pn0ZMWJEop6kjcaq1kkpWLu80z0nubx35FesuoC8ilku8itncc/rTz/9FNU9vB/0B3k3 +KNNWXvttfOKgVXMe1IIw/Cd4ZnOtS9arPqhkOvwj6Uvv88++5gZM2b4m6P+wKBBg0zHjh2Ttmf7 o9B7Vlf9zVI+t9myUjoREAERyJVAai1NrjkpfYIAHUZWtrnvvvsiJVliR4ovdGz23HNPs9tuu5n2 7dvXSkWHed99960VFJQg0zS8qYTzn3/++Um7UeYQaJrYbqHQkN16663m2muvTVIwhOn4TUfskksu STvQR6l02mmnJQ6no4PSAEXI6aefnhgEJBJ4X1AiEsMqW7P0uio77OBOxy1OKPPVV18d8WE/g8zb b7/dXHXVVSmZbrjhhubSSy81KDh8ufPOO80999zjbzIPP/xwpChN2hjzA8XcrrvumrQH5clZZ52V tC2fH8VizbOLIjFOeEZ4H5ygxCAAbq7SoUMHs9FGG5nnn38+cSirIXL/srWeQtGNcteXTTfd1LBC ZjpBWUkHmPckjFESHpfN+8Qxqd6pJ598MnouGWD4QtwyFGapjiNtvvchXZ5+GfzvxWaSqgyZePhl QoHjK6ape7IRVm9FyUHQZieUJxsFEOl8waKNZzUXKXY7w7lT8SxWnU1MQVZ6dEL9/t5777mfKT9v uOGGpHiEPNf33ntvlD7f59edrBQcXd58ZltfojQlLuARRxyRpDjjOm+++WY/y8T3Z5991vDnhPaV dhYpBWt3nlTPSS7vXbHrAspWjHK5ayzXT7jRnl1zzTUGhWk64Zlaf/31zUEHHZRV7M5S3JN05Uu1 L9t3huMztZ2F1g+pypjP9m+++cZQHjdR6PKgzaC/HvYB3f50n8W6Z6Xub5byuU3HR/tEQAREoBgE 5itGJsqjhgCd7+233z4aFDDQzkZIxyACpRgdhVBQbp188snhZnPllVcmWSn4CbBeYH8op5xySqyy jBUECWBOOebMmRMeVus3lnObbbZZUme9VqKYDSiPdt9997TKMg5701p8YHFBuTJJXZWdDuphhx2W UllGObn/dE4ZYHIvSY8yLB1TXASxVgpjWWyzzTa1Lp0YXNlIXLq4/LLJy09TV6z9cxb6ndU2feG+ PP300/6mtN8ZBKL49CWTOyZKblwuzjnnnIzKMvLN933i2DvuuMMcf/zxtdw72FdOUldMcuXxxhtv JGHKVmHGQVtssUXSsdmuehkqzKhLc5FStDOpzl+KOjvVuep6e6k55lJfUi8NHjw4UvCHCvq65pLP +XJ57+qqLuA6cilXPtdd18eceuqp0crvmZRllItnipVVmTzzFzWJK3Nd3pO487ttubwzHFNI2+nO WRefWH4zaTlt2rSk0y2zzDLRxFo+yrJi3rO4/mFcPzKp8NU/4tKF+ZXquY0rj7aJgAiIQLEJSGFW RKIEjUZZgqtFKLhc4ra35JJLRm5xbhbYT4ebDtZdcbLXXnslrJbcfqxJzj77bPcz6ZPtobUJK7+R TyhYWGy55ZaGuAqh4AaI+2icmyHuD6xAmmr2O8wLPhdffHGSm2CYxv/NLBzudOmkLst+/fXXpytK Yh/KsQsuuMAcd9xxUWc1sSPNFyxcQguq5Zdf3hDTwhcG2qHyxt/Pd/aHA3LyIb9CpK5YF1LGuGPX WmutWm4pcStexh3LtjCtc59KlZ4VE1GA0JEPhRl/FOCsyhtKru8Tx/NOYcFW7lJXTPLhgXLeCauT 8ZetbLzxxkmLU/CO8JdOcBHCfdOJc8d0vzN9lrKdCc9dijo7PEd9/S41x0z1Je7xce5Xc+fOjSZa Mj1H9cUt7ry5vHd1VRdQzlzKFXdd5bbtrrvuitzu48pFyIt+/frFWinxTB1yyCFReJC4Y+vynsSd 323L9M4Uqy/qzldXn4ThwIuENt4XwqNgWRbnWeKni/te7HtWyv5mqZ7bOC7aJgIiIAKlICCXzCJS feaZZ6I4VX6WDI6POuqoSCHlK8lQZrHqHooVApE7QfmERUzoMoniCuURA/E///zTJY8CmBOQnIGb E36Hgc1xP0ulfKIMoXKNmFHnnXee+c9//hO5ntHhotG//PLLzbvvvutOFX3iLsNsEgrBbAWFAZZm WOqggMBFjjKjUPPLguIHRWIqZU99lB03okMPPTSyLqGTivvjiSeemOR+y2wif06YRTzyyCOjYOIo 1Lj35557btLKfLjD0qnyn5MddtghSSHCjCKxyXBRTCXsJ50v5FOoFJs11+tcEy666KIobp4rI7Ha Dj/8cPczismS+JHjF+K6cP3XXXdd4kjuDXH6iCOXTr799ttaChDeT97HVMIzjOWKL7hd48qLewzK Z9wTiD2DC2+oWMv1ffIVqMREcu8sz4CL8+SXJfxeF/ehLpnkwoPnj9XKnDCpkItQr/Iu+hZB1Fm4 1aWScLVV3AtzsS4oZTuTqsxsL1adne4c+ezL9/ktNcds6kuuFyUBLvu+dSJWKExGYblBO+nqeyxJ /XAA9AewDEdoN/y2I9pYh/+yfe/qsi7g8rMtVx2iyutU9MHof/nStm3b6DnBNZzJWJTvCH0mLNux dHfCM8UzduCBB7pNic+6vieJEwdfsnlncu2L5ls/BEXL+yf9jD322KNWn4A+LSE3uIf5SCnuWSn6 m6V8bvPhpmNEQAREIB8CsjDLh1qKY/xYNiRhMEUMo+22265WR5bBB66bxA3whc4dgfbjBCVWnDUJ bl8ugCif/A6FzhMxd0J57bXXzDvvvJO0mYb8qaeeipRwLk4TFnIofSgvVnS+EJ8prlx+Gv87Qf1x c8M9lEDudPIIUkvMKtweQ0nlSlAfZSfWEIMYOkDEHCL4OwNeXxkTlh9XW6yUiFXGfWc2cZdddqk1 qJ44cWItF1Ri2rhOsMs3zvzd7eMz3M/x5FOIlII1Aar/+9//Rn9hrDoUxm4fnwTGL0ToCIYLZISW Y3H5h2lgyXubShighPx5n1BiM7h1lpoo3LD6Y+aVQbAvub5PHIulCrGOUN7+73//i5Tjd999d1aL Z5T6PtQHk2x5ED+LDr2TXNwx3TGhW2Zo3enSuc9wf64LUJS6nXHl9D+LVWf7eRbre77Pbyk5Zltf woB64KabbqpVRzNBhbU6VjWuLgzj3PXv3z+xzynVisU1n3wyvXf1URdwHZnKlc+11vUxWKYS2N0X nhtc/+mb+f0E2hxcUZmM9MWfHHDb6+ueuPO7z2zfmVz7ovnWD65chXyiDKev6E9yu/yIW5avsqxU 96wU/c1SPbeOoz5FQAREoC4ISGFWRMphBxw3x0yrEtKYh1YucS6drpgoXVC2+OJioLGNGGRh7DQa 7PXWW88/JPrOQBELF1/odKH8SbVqH/uJp7bSSiv5h0VKgrjOWFIi+4OVJB966KHIdSDcx28scEKr GFYZDaU+ys6AhE5onDUIK5bG3Wtmc88444ykzqy7ljgllh98nHQoSUOrFwbcxCaJE7aHA3KOJ598 pT5Y51vWVMexQiiKTV+IY5aKI+m4bqxQfEGhgnI3TlB2Y5XpCxaIxBJM1zHGWhFFrC8o3bJ5nziG weD9998fXZ8/aPLzq6/v9cEkFx6+Oyb3Cuu8XCV0yyTwelydRb5MhrgVD/nN4I9FKXKRumhn/PIU q8728yyH76XimE99CQ/aidByNbQULwduqcqQ6b2rj7qAsmYqV6rrKbftKB5CwRI7lVCfMVGEm6b7 a9asWVLy+ronSYWwP/J5Zwrti4ZlKPZvLMjpe/sWof45WBjs9ddf9zdl9b2U96wU/c1SPLdZgVIi ERABESgiASnMiggTlzusptyfc5XIdIpwKfl0CjPyomMdKpWwZMPChE9fmL0m2GacMHAjwKovWMPF KX78NHzHzTSUMHh2uJ8ODlYvuI2lEgYMoQLRj/fjjquPsmO5k87lJbyPzPrGLdbgrgElDgNmX8aM GeP/jL6HFk10wJhhjBO2hx208Pi449Jtq2vW6cpSyL4wUD+K5XQr9KFMCVfxDPPwy8N7i1WIL/vY FbHCd9Xfz3ee+bhYhJneJ47Fag5lWfjOsK8cpK6Z5MIDt1hWTHWy+uqrp32/XbrwkwE5x/oSKq3d vnA7itI4BbxLH/dZV+0M5y5mnR13LfW5rVQc860vsR7D2pDJF/fHM9oQJJv3rq7rArhlU66GwJcy xk26PProo2mLz6JDWDe7P9z9famPe+Kf333P953h+Hz6ou68pfxEIT9hwoS0pyCUBwt05SKlvmdh f7HQ/mYpnttceCmtCIiACBSDQPJovRg5NuI8QsuvbFHgpudLaGXk7+M7M4dXX311NHvIzBzCrBMx sXxhNpF0uA3GCQ1vKPvvv3+4KfY3LiIo4/zAxHH5+Qcz+MpmcBhat4XxuMgz7lylLrtzT/Wvyf/O wNkXBkChxYC/n++47foWgbhlhrLBBhtE3Py4WFgghVZJHBe6A8Kb4wuRumZdSFnTHYslD/fEd494 4oknai2m4fJgny9YlsVZaro0dPpDydbFj3cJN1RfORzHPcwfhWu5Kssoa10zyYUHlmD+u5ftvQrv Ab9xt/VjO6IYC13XSRfGLwvdOUmTSeqqnaEcxayzM11XXe8vFce49zbbtimda39d88nlfNm8d3Vd F1D+bMqVy3XWZ9q4sARnnXVWtOIzSg7qr1TWz6nKXR/3JK4shbwz+fRF48pQ6m1YA6Ic89t4+nTE KmTBJ+rabKTU96zY/c1SPLfZcFIaERABESgmASnMikkzJi8G58w0DRs2LGooUYYRZ4w4RcSjQNEV WhWlcxNzp8BN5phjjolcMN228POEE04wxElIJWEnhdnYTNYwfl7ET8lFYeYfm+57qECMm2Uvx7Kj yMxVXEwrd1zctaL4ZFEFAsQ6YUCO+5/fyYpzx+S40A3D5ZHtZzmyzrbsfjo4DBw4MClu4CuvvBK9 j23atPGTRgF6ianiC9aXPm9/H9/jOrJY/GXrWjlz5sykLEPuSTsbyI9yZuK7Y4KTAWe+sskmmxgG r67uJug29bq/EAouOrQDThjM5+qO6Y4NP0vVzoTnSfU7mzo71bHltL0YHMP3Ntd2tZx4FLMs5VwX FHqdce12oXmGxxPvlUm50OqZ9sW1MfTJCD1AXYZ7eaa2v1zuSaHvTKn6ouE9yPc3E23Em6O/TD+C hZ+ccO+I3RvGMnX7w89S37Ni9zdL8dyGTPRbBERABEpNQAqzEhDG6gtLHxQcX3/9dbQiXglOYw4+ +OBohb2PP/64VvZYH2Wa1Q47KcQvYBCXrfiDQY5JFbcn2/xySdeQy57Ldbq0xCLxFWbMTOJOuPba a7sk0W/fCo0dHFeoVBJrXCr9hTZQUj3//PPRyrQ+J95fv1PLPlbHTCdxHVlWv8tX6vJ9yreMmY4r Zya+wgwLP1yk8xUsF6lz/QVUWJGOBT+chO6YDGxZACRfqat2Jt/yNZTjis2x0PqyoXDLtZzlXBfk ei3hxEkYjD+X/OKOjeuHoci48cYbo5W0nWdBeB4U8vzdbUNfMAmE9dXWW28dLeAUZ+1eLvek0Hem Pvui4T0IfxN3GFdY7h8T2Exks8KlL4T7IEbuWmut5W+O/V4X96yY/c1SPLexYLRRBERABEpIQDHM igyXGaStttrKHHfccdHS3qWceWTmmoDhcXLAAQdkdAcMB+SsxpWLhCsb/vXXXxljNuSSf7q0Dbns 6a4r1T46Wiwb70vofhn+Jn06C0M/r3TfK4k1M9EstOFL6HrJvnAbndk+ffr4h9X6HnKqlSDHDXX5 PuVYtKyTlysTFMtffvll4jrSudomEmX4Eq52GSrIwt/5uGO6ItRlO+POWYmfpeAYPvO5tquVyJlr CrkUep31WT+GFpWUJV+JOzZV+IdVV101ilVLjLtMgicDdQ5xzHAZJ45ZKOVyT8Jy5PrO1GdfNGTq /4Y7Sk6URk6YyA7DaeBpgoVZpphn5BGycvnm+xn3HhW7v1ns5zbfa9VxIiACIpAvASnM8iUXcxwu N5hbDx06tNZelFss9U0Duuuuu5rDDz88CgjPAgFLLLFErfTZbMAC5vLLL49Neskll9RagjxM6Dfi 7AstasL04e+4Wc4wz/CYYv0Oz9OQyp4vg9BaDHdCd918hh3iMH2+56001qGlGBaav/76awIPM7hf fPFF4jdfwmOSdlb/SLcgRFz6bLY5F79s0pZjmnJlQrwxny0uTIVKuFrm559/nhgAMcj5/vvvE6fg ncrXHbOu25lEoSvsS6k4FlpfVhjmxOWUa12QKGAOX0IX/qlTp+ZwdHLSuGPTxXpl8ubhhx82rLK4 ++67p1zR3D8LVmduAQB/e7nck0Lfmfrsi/o8/e+4xF577bW1vDaw9GM1+/AeE7+WiXaUZ+mkru5Z 2H8stL9ZzOc2HR/tEwEREIFSEMje/64UZ6+gPLEkY9UtZvV8wVQc10li3ODyGCcjRoyotbpeXLpw 25VXXpk0CPP3o7S79NJLo7g6/nb/OxYz/ipxYSw1P23c9zA9HYCwExB3XDG2NeSy53v9xCPDlN91 DqdMmRIFGsc6BgWA3/HGpYP0xZBKY73llluaCy64wLiZfd7dp556KlJiwyu0LmO2H0V3JiH+n+/m x6Dq/fffz2jpmSpfOtahJUOqtOW6vVyZ+PeJVbyysdjIxJi6DzfLt99+O0rKwAclNoPa0LoM15tU ViTpzlMf7Uy68jTUfaXkWGh92VCZZip3udYFmcodtz9c+Y8+XL6C4tYX3D3D/P397jtWO/yx2NN3 330XtT24hDPZ408GuPQ881gxEZvTLQ5QLvek0HemPvuijm/4iZt/6Lrr0rCw1UUXXRQpMd02Pukv EOvsiCOO8Dcnfa+re1aq/mYxntskIPohAiIgAnVAQBZmRYJMcO8hQ4Yk5cbqdY899pjZY489UirL kg7I4QcN6+233572iHvvvTcxeItLSCfFFwIeh4HH/f3h93A1zzC/MH0xf4fnakhlz5cDcZLCFS+d G6b7dHmTjvTFkEpjjSIrdId7/PHHI1QMKp588skkbLhYp1pp1k9IcFtfUJ6jxOR8+fw1dGUZLMqR CYosf6IAJVdczCD/Xmb7PZVbZqgwC9Nlm39dtzPZlquhpSslx0Lry4bGMtvylmNdkG3Zw3ThPUZh 409YhenT/Q77je3atctpkoWJlWWWWSZSsmB5hmUrlk3rrLNOrXyYJCKurpNyuSchz8bQn2MSfeed d3a3IvHJSrlxcYldgrq6Z6Xubxby3DoW+hQBERCBuiIghVmRSNMBD4UZJGaSii3E3yFwKIN7J6y2 eMcddxh/1UX2n3TSSYbOR5yEnRTSsLpbNoKVE7OavsTl5+8v5ve4czWUshfCgeXjfcFMftq0aYZP X8J0/r5cv1ci67CjStBhZubpqIaK4DBtKn5hR5Z03377barkjWJ7OTL55ptvklaaK4Y7pruZuFn6 yjfaBepJv24qxB2zLtsZd03F/PTZkC9WsvUhpeRYSH1ZTBblwtpdUznWBa5suX4yGRpKGBIh3B/3 e9KkSYkVLt3+uLzdvmw+sU7DiprFbVCchfLjjz8mNpXLPSnknanvvmgCZh5fzjjjDBNeO9aBxxxz TMp+e13es7AfWcr+Zi7PbR6odYgIiIAIFERACrOC8NUcPG7cuJof9huKq+WWWy5pW6ofoRtnqnRu +2mnnWZ+//139zP6xB2UgR+fvhBElDhpcYJpdygEKM1GsJwLyxA2/Nnkk2+ahlz2fK+Z47jHnTt3 TmQxffp0c/755xs+nbCfdMWSSmRN4H9cJnzBysxZmrntBL9deuml3c+0n3Ed2VtvvTVJsZ0qA5Tb BAJmUQL3x3ve0KUcmfjumPDFEqNYglumH9CZwQ+TG76wch1WJPlIXbYz+ZQv0zHhanZYNKPwTyfE Z4yLC5rumEz7SsmxkPoSV133/vN59tlnp70U554fl6hcWLuylWNd4MqW62e4AA/H33fffbGukOny jjtm/fXXjz2E1Rb9Z+Oaa66JTedvxJI6DIg/fvz4RJJyuSeFvDP13RdNwMzjC1bkV199ddIkC9nQ tw4nxV32dXnPitHfLMVz61joUwREQATqisB8dXWiSj9PGIiTjqwLyJ7u2llOOnSnS5cek/uXXnop KQmLBhx00EHRNj7DRQReffXVKEBs0kH2R8+ePQ2BSX3B1fPTTz/1N9X6znXdfPPNSdu5/m233TZp Wyl/NOSyF8KFmBgDBw5MymLw4MFJv9mfKnZGUsIsf1Qq65122imJAB1vYpn5Eqbx94XfiQtD4Hdf sFojOHMmwQKJTjLugu4vXM0zUx7luL8cmfgKMxSixbYCDt19Q2VPvu6Y3N+6amdK9SxRl4SSzv2I d4GBo7+iaXh8Pr9LyTHf+pJYVmPHjk28/1w7rna+hOXG2jyVlAtrV75yrAtc2XL9ZAEnlFe+YE1M PLHZs2f7m1N+px9HvKpQUq3Y26tXr6RnA9fLTEI/NHQVHTBgQOKwcrkn+b4z5dAXTcDM8wsT61iU hUI7FRd2pS7vWTH6m6V4bkNW+i0CIiACpSYghVmRCC+77LJJOWFZkG4GkE4VA4FUq1wmZVb9A7cx gpX7wuqbBIJ3ChI+cQVluy8XXnihiQtMe9ZZZyWOdelZpOC9995zP5M+Wclnzz33TFpVkAQslR3X QU86uMg/GnLZC0ERmsmHeYWrG4X78/ldiaxRLPqrc/FO+kpurERzXTjhzDPPrBWon/cTZVwqGTVq VK3gv7zH+a6imOo89bW9nJhQf+GS6aSYlpguz9At023nE4UHM+75Sl20M/mWLZvj4toIJl/+/vvv WodjHb3XXnuZZ599tta+QjeUmmOu9SWxpcJBM214aG3kh1yAQRgWwedSLqz9MpVTXeCXK9fvxF86 4IADah12//33R5MmL7zwQkrLYlas3GeffaI6PwzOv8IKK9SyfHYnIVi6L/TR0rUrpMX63C1u444N J2LK5Z7k+s6UU1/Usc33kz43q0iGwmqacZMFdXnPCu1vluq5DVnptwiIgAiUkkDTUmbemPIOOyFc +2233RYpqVAw4f7FYIkZZAJOYxXEQDlbYaaQDnXY+dl7771ruX4y+8n2u+66K5E9ri/HHntsdF4/ tgmzjbvuuqsZNGhQIi2z1vvuu2+kGFt99dUNMTUw48cKhjhpoSsmFhosWV7X0pDLXggrZraZlfSD 97r82B66Grp9hXxWIuuOHTtGygsGN3Gy6aab5rySIW5QrHB12WWXJbLknT355JMjS9LtttvO4M6D S97o0aPN008/Hb2TocKAhQbqasXZREFL9KWcmLCKnB/7sRQKs/bt2xtc67AQCKUQd0zyKnU7E5a3 2L8JJI3LKpbMTrDCRDGNEqF3796Rezmr/rJabdjeuWMK/Sw1x2zqS6wbuT7iqWFpHq70x7PZqVOn pEsN3etok48++miD1SIWadQtLjRCubD2L6Cc6gK/XPl855l95JFHzGeffZZ0OPU6bUCrVq2iSUQs bFB0EhuTPl+qmLIsDIN7XipZe+21zVVXXZXk9nnqqadG8Ut32WWX6L5zz+m/YdVKXy30FqBvwLPp S7nck2zemXLti/o88/mOchzlGNbJvkUg/X7e72eeeSapL1KX96zQ/mapntt8OOsYERABEciXgBRm +ZILjuvXr1/kFknMIl9Ywpu/QgVrNd8ygvy6d+9ujjvuuNis2U4QWj+AOS4DdMhOPPHEpGNQpH34 4Ydm+PDhie3MfN59993RX2JjzBdWDzzvvPNqWdXEJC3JpoZc9kKAYEUWpzArhXWZK2clssblMpXC LBd3TMeIT6wtUQgw6Pfl7bffTrtqrUuLmzRWopUk5cLkjTfeSGBFIYlFRykEBUacwqwQd0zKWep2 phQswjwZ5G+99dZJikvaHgJg15XUBcdC6kvKxwA6FCzjwvoKCzxnhXfggQcmxSwtB9bhNZRLXRCW K9ffWCcTWJ9V0MO+GXkxSYniKnTJjjsPeWGJjHItlaBgZeLFbxtQkhJyg79MssACC5hbbrmllkcB x5XLPSnknanvvmgm/pn2owTDg+Soo45KSvrrr79G73TovluX96yQ/mYpn9skUPohAiIgAiUkkOy3 V8ITNYascbHMJYA0Zv3MDGZyvWIGmo5OKJjbEzQ0TtjO/lBQ6IUrhDFwxNJlv/32q7UMeXi8/xtL NjrqhbgY+fnl870hlz2f63XHYIEUuufwm+2lkkpkjSVQt27daiFj4BLnIlErYcwGLDjvtsrmfBTJ WN/wjob3NuY0DWpTOTBhEsBXYnLvnSt7sWFSJ/ruvuRfqDumK2Op2hmXf6k/GUAdeuihWbU1tJG4 K+24445FL1apOeZbX+JKiXUQloqh4B4VWp2Fafzf5cLaL1M51AV+eQr5zsp+1PVYI4dhMLLNF6sv FpsJYx/GHY+SZPfdd4/blXYbca9uuOGGyAotLmG53JN835ly6IvGcc11G89AGKOWPIh3d++99yZl V5f3rND+Zqme2yQg+iECIiACJSQghVk13HCASmOUaweIwRcd3euuuy5tPC8GUiuvvLJ59NFHDbHF wqDTYVlIw0yiLzRgmZRz7A8VKORDfqFwztNPP90Qg4NZ7DC4sJ++R48ekWUb5Y9b3cilDfMIr8ul Cz9zPa5cyh6WO/wdXie/QybZHMNxzBb7q/GxDcUr20sppWBNeUMO4e9SXRPveJxVHgN0Buv5Cscy sMEaBOUJA4F0gtsCiwOwahquOakkfD6y5ZTtcWF+4W+/XNnm6Y4pBZNcyoCr1JQpU1xxDC5vuUjI Ivzt5+XcMv1t3GMG2Kkk22spVTtDubItQ3gNuR53/PHHR21NOosaAt7THp100klZ1w/hPQl/++Uu JUd3Hs6fbbuKhQltM9ZCcfHHyJMVkO+5556clPmlYJ3r/XY83Gcp6gLyLrRcrny5fFK3s7o4Sg2s kkNFeVxepKF/hlUZk5UoNrMVJmJYKIpFljIp/OkP4FHw+uuvmzXXXDPtKUp1T9KeNGZnLu9Mtn1R d5qwPgh/u3T5fIZ5hc9itnmycETc+3/JJZeYGTNmJGVTV/esGP3NUj23SUD0QwREQARKRKCJjefy b4nybtTZEnuAIPsjR440P9tg/WDGzYLZRAYJmTo69Q0PawzKP2TIkOgamNVm9U1iSKQb9NV3uTl/ Qy57tvy4RlbT8l1umYHM1CnONv9s0zUG1tmyyJSO2H+45+B+RkeXgRZ1AXGbcrEayXSehrRfTAq7 W5XQzlCHsUIkf8TyI05X3CqEhZFKf3RdcfTrS4KWUw9QB/DXp0+fnPoFLIowbty4KCYWMRFRpnXp 0sXgmhYnnLscWMeVjW2VUheweAzXQrxa7g9/TMCiQOEeUdcTr6sYk1vEu8Jlz51r1qxZ0bncM4Xi JRsFXjnfE/+doT/dkPqiqbiWcnsp3iPuQTH7m6V+bkvJV3mLgAg0TgJSmDXO+66rbuAEiE+HW5MT OsjMIjMAk4iACIiACIiACIiACIhAoQTU3yyUoI4XARFo6ATkktnQ76DK3+gIsLKaH/gXADvvvLOU ZY3uSdAFi4AIiIAIiIAIiEBpCKi/WRquylUERKBhEZDCrGHdL5W2kROYM2eOOe200wzxmJywfD2L R0hEQAREQAREQAREQAREoFAC6m8WSlDHi4AIVAqBppVyIboOEahUAiwkQbwTApY///zz5quvvkq6 VILWZwoqn3SAfoiACIiACIiACIiACIiAR0D9TQ+GvoqACIhANQHFMNOjIAJlTIBVTfv375+yhMQu Y5Utgj5LREAEREAEREAEREAERCBXAupv5kpM6UVABBoLAblkNpY7reusOAIsY85y9lKWVdyt1QWJ gAiIgAiIgAiIQFkQUH+zLG6DCiECIlBPBKQwqyfwOq0IFEKAJeovvPBCs9RSSxWSjY4VAREQAREQ AREQAREQgVgC6m/GYtFGERCBRkRAMcwa0c3WpTY8Ak2aNDG77767GTNmjBk/frxp3769WXzxxc3e e+9tcMeUiIAIiIAIiIAIiIAIiEAhBNTfLISejhUBEahkAophVsl3V9cmAiIgAiIgAiIgAiIgAiIg AiIgAiIgAiKQMwG5ZOaMTAeIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAhUMgEpzCr57uraREAEREAE REAEREAEREAEREAEREAEREAEciYghVnOyHSACIiACIiACIiACIiACIiACIiACIiACIhAJROQwqyS 766uTQREQAREQAREQAREQAREQAREQAREQAREIGcCUpjljEwHiIAIiIAIiIAIiIAIiIAIiIAIiIAI iIAIVDIBKcwq+e7q2kRABERABERABERABERABERABERABERABHImIIVZzsh0gAiIgAiIgAiIgAiI gAiIgAiIgAiIgAiIQCUTkMKsku+urk0EREAEREAEREAEREAEREAEREAEREAERCBnAlKY5YxMB4iA CIiACIiACIiACIiACIiACIiACIiACFQyASnMKvnu6tpEQAREQAREQAREQAREQAREQAREQAREQARy JiCFWc7IdIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEAlE5DCrJLvrq5NBERABERABERABERABERA BERABERABEQgZwJSmOWMTAeIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAhUMgEpzCr57uraREAEREAE REAEREAEREAEREAEREAEREAEciYghVnOyHSACIiACIiACIiACIiACIiACIiACIiACIhAJROQwqyS 766uTQREQAREQAREQAREQAREQAREQAREQAREIGcCUpjljEwHiIAIiIAIiIAIiIAIiIAIiIAIiIAI iIAIVDIBKcwq+e7q2kRABERABERABERABERABERABERABERABHImIIVZzsh0gAiIgAiIgAiIgAiI gAiIgAiIgAiIgAiIQCUTkMKsku+urk0EREAEREAEREAEREAEREAEREAEREAERCBnAlKY5YxMB4iA CIiACIiACIiACIiACIiACIiACIiACFQyASnMKvnu6tpEQAREQAREQAREQAREQAREQAREQAREQARy JtA05yNiDpgz918zdfo8M23GvJi92iQClUFgkYWam79m/mMmT5tbGRekqxABERCBRkygXev5TYf2 Tc0vY2c1Ygq6dBEQARFoGAQ6LNDUtGo5nxkzfnbDKLBKKQIiUC8EmjQxpvciLYp27ib/Wik0t4l/ zjX/e+B38/BzkwrNSseLQNkSeOyGxc3rH0wxN93/e9mWUQUTAREQARHIjsB2m3Q0x+/fzay503fZ HaBUIiACIiAC9UbgiD0XNmuvuoDZ6chh9VYGnVgERKD8CTRv1sR89tSyRSuoXDKLhlIZiYAIiIAI iIAIiIAIiIAIiIAIiIAIiIAIVAIBKcwq4S7qGkRABERABERABERABERABERABERABERABIpGQAqz oqFURiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgApVAQAqzSriLugYREAEREAEREAEREAEREAEREAER EAEREIGiEZDCrGgolZEIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEAlEJDCrBLuoq5BBERABERABERA BERABERABERABERABESgaASkMCsaSmUkAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiJQCQSaVsJF6BpE QAREoJgE5puviencoap6nPHXPDNj5j9ZZ79A2/lNyxbzmX//NWbCH3OyPk4JRUAEGh6BZk2bmLZt 5jd/zZxnZs22L71EBOqAAG0MbQ3y55S5Zs7c7J892jbauFmz/zFTps2rg9LqFCIgArkQaN9ufjN7 zr9m5t/Z9z1zyb8xpW1q2+h2to2G5d+zxLMx3ftiXqsUZsWkqbxEoJrAqsu3NVee2ts2eLUrZxQp 060SZtKfc83IX2eZj76abl57f6r555/sO7xxoE87tLvZbJ0F7a5/zSvvTTXnXf9rXLKkbf9Zoa25 7ORe9ty20z11rhl46NBo/8PX9jddF2pm5mvSxJxr83n1vSlJxxXy4/+WbWOuOq23mWfPOX3GPLPV QUMKya4kx159em+z/uoLRHnveMQw8+OImVmfZ4fNOppj9+0WMb3wpt/MI89PyvpYJRQBESh/An16 tDCnHLyIWW5Aa9O61XxRXWb1D2aWHeB8P2ymufmB380nX08v/wtpICXs0rGpGXzj4pFSCEXP9ocP NX9Mnlu00q/3n/bmvGN6JNrrzfcfEimTwhPMP38Tc/N5i5p+vVpEuxbq1Mw8+cqfUVubi8IqzDfX 361bzmdevmdJw6Ca/sQqA7+1WWTffzjziB5R+zZv3r9mx6OGmWEj/861CEovAmVN4Jozepu1/q+d mTp9nvns2xnmxEt+yVjeA3deyOy6VSfDe267voZ6gD5qMWXlZdoY+pf0f5mM3fLAmv5v29bzG8q9 4tJtjD29adasSaQM5/zULxyz8d4/FLM4eeXVfeFm5sFr+ifq461tH35akTnlVTDvoB5dm5tTD+lu ll+ytZ3Qsm20vY200bMtxx9/mmlufWi8ef/zaVH96R1W71+X6NvS3Hph34gtz+D6e9T//a53KGVS ACnMyuRGqBiVRWA1q4hacAFmf6tmgMOrW9g0s51uY1CsbbtRBzN+0lxzyJkjzC9jZodJs/69ynJt qs9pEh36TAcz8OvQvqoaaB+Vt+qIfr1bmhbNabKN6dq5WdXGIv3vvUjNOTstWH5V0EZrtjfrrlal LBsy4u+clGUgev7NyebovbvZGXxjTjigm/nwy2kF3dciYVc2IiACRSDAxMTOW3SK3m+X3fzV1Twz 2dTDyy3Rx3z5/V/m0LNGRh1fl66xfzIg7NmteYSBAeDwUdkpanp3r2kz5tmJpaZ2QFtMWap/y6T2 mro7FAbRT9+yuOll2y8nXMPlt42p83t8y4WLJpRlp185Ola558oY93n9fePMev9ZIFIM3HpBX7OR HYTPtdciEYFKIYAFZovm85kuHecz9Onoj0+eml75te8OXSJLJBiMnTCn6Moy8u3j1WVh//fRG/ob FD2+MCHDddSHdFigqenapar/P9NaZv1sJ/gR6kA3bkBhX+z6uNBrPW6/bmbv7bokt9HVCGmjV7IK SRSTQ+xEwYGnjSgrK77e3Vsm2BbKQccXl0D9vIXFvQblJgINmgCNIY3kvZcvZprbGaViCDPHuYrf YWZmoy6kLmfls7ke+F94fM+ooaUjcPxFo7I5LCnNONvRevzlP6JtLVo0MZee1Dtpv36IgAg0TAL7 7VBlgRAqVKgrfKFOx0rgAluXSGoI7LFtJ/PI9f3NoKsWM4/d2L9mRw7f5sdMoIQS51bLICtUlv0+ cY5Ze5fvIwuWEhanVtZbrLegWWHJNtH2336fbZ55/c9aaTJtGP7z39FEDukYtJ904CKZDtF+EWhQ BK6+c2yivFil7rR5p8TvuC+rLNs2oSxj/02DxsUlK+o2v59Ne9F94RplGW1KVbtS2vou3QUdsvtC UX394DWLmdsv6hub1L+G2AR1vHG3rTobFJ+Z2mgUqlhz4QkkEYFsCJSfeUc2pVYaEWhgBI65YJSd hbb21FZQynTt3Nws0a+V2Wr9BW3FXmX+3dK6WeBS+dSruXeAi43j3icmmBWrO+XfDfur2NmXbX6n WuuRVvY+IB9bl6pRY6pm1HIt8JW3jzVbb9Ahutd9rfvOunY2/80Pp+aajdKLgAiUEQEGEE5QrNzx 6HgzyNaV0/76x7pmzm8O3LmL2Wtgl+i9p55f3773y1q3zW+GNJ461PGJ+2zVssoUDzaEJchWRvwy y3z4xXRDvLhJNl7XXznElMz2HKnSOWVZz241lmW/jpsdhS+oj3g4px/WPSoqlnbZhF1IdV0nXzba vPnAUpGb0o42jABuxMRCk4hAJRDAemj8pDkGt2mUOlgF44aXSg7bY+HELur2p1+bnPhdzC9f/fhX oi4bZ5XuTtZepV1UTn7PtRPea+70XVTP4QVyuu2XUvdN+LMmvTuulJ8tqy3bsK4lbIuTYT8n18dY n5WLHLV310RRiAF39+Dx5t7HJ5op1jW3lVWS7b/TQmaf7TtHVntVE1utzVortzPvfjYtcVx9fvl+ eM3zQVsnKR8CUpiVz71QSSqUAFZU73wyNQrgGV7iE6/8Ye6+tF+0uY01vd7kv+0jhVk3awbtFDd/ 2EozNCXvbi3SWthBBzL+j7mxpuMo4hbr3SKajabjMMTG4cLMPBt5/KU/zDOvVSnucBcNhUFEL+ta s8zirW0j38QM/XmmYVBDEOFCBOMBOgi+jB47O+HyQsPda5HmZunFWkVm4MPtOX/65e8kk2pMyInx ghDkM+6aCZbsgvqTjlhyzZvNZ7bZsAM/IyH+WCicv7c9P9dNYztu4mxD+ZypukvPYJC4b5uvu2BU lhP27yaFmYOjTxFogAQ6d7R1su1wIwxoTr/yF/PSOzWxHQn6f+3d48zrNh7lA3ZGHqEOpk4nXmVL a22KsIAI1kmh4P7SoX2VQgmDtYm2Xid2F0JstDHWmoi6ccWl2kSKDQaEY8fPTsRg4fhVl28T1UvD rAUR9b0fFpP6zgWJnzbjnyhm5YBFW5qlbV022k4MkJ8fF2wRa+2wqnUv/cvWobimj/ot9eQBix4Q 12vJvq2iQeow62r5m1Uq+efHinqhTjVdTurovj1bRLFlmJjguxMsp9q3a2qIsUkcn0+/nmEu/l9N fRw3QMNigDIsZduGqdNtmUfOjFzhC4kNWqUsG5BwI6V8I0bPMjsdOdS2dYFZYXXhk8sxz3AvRtlQ C77V96L2WqueBmPi2ney8tuxv2fZ+2/v9S5bdk5Ywfw5ZZ75wCoRQ6Hf0K+Xva/9W0UBrhmUY1E2 KYj5hnLs6x9nRP0DrvPkgxYxp1z+S5idfotAgyXw0HOTzFF7VSlQOtrQI/37tIzex/CC5rfV+opL tU5sfsNObob1BnU5fc9l7HuFCyJ9zxGj/66lvCeUiW8pRt8SF0bq0jm2K/2RDdHh6jJikvG+0t8f sGirxPnpt7pQKLQVLn18jWOiRWcWs3XfEtS/tt2g7qO9CC2fOQGKt8VtvU993MUqE6mnf7Z1+69e P5t0uMGz30mb1lX1NW2RXyb2o5gKxdVDi1nmf9n+MG0CIWf8epBj/HaPtoa8cdtfeem2tt37JxpX DLX1V3g/wvNFedl7TDkRxl2X2Dbj0ReqvD3YRrtxg3VHf/2DKebh66osnGlfaKNDhRlK1m5dmpvF rRXawjYsDfX4CDvWCMdi5Juq7eq6UHMzxMZLGz12VtRniAu5g8utu9fkxXjL3W9+xwmhDZiIX9Ia XUy0fQvaeu633976xxHrcoB9Nmh3xv5u2wN7HX7fwU+r76kJ1PReUqfRHhEQgRIR+OybGVEl7gZi 3btWDRpwWencwQbdt3U/M783Dfo9qQQEQKZhpuE+46rRtazS+vdpZd5/dOlokIYLCw3av7b1/H74 THPCxb9Eg5qkDIMfj9+0eJQ3HWkURw89WxW4nkbkJNuxxrydToabeWIASYM26KmJ5vp7f8+qcQtO Gc1033flYtGAh+aXhv0J69p49rW/RkmP3GvhKC4B18xbLz7nAABAAElEQVR5mWGfbQctMBr05CTz vwd/jwYI+++4kB1YdIqUd6QjILLvbkpmd17S1yoTW0b5MPO0lp3NI+Ar50RotEfagZEvJx7YzQaE 7Rwdg2KPzgiN8j/2C8pC7gONqhPKg8IMYbBN3ITPv5vhdutTBESgARFoXl03UGQ6/W1spzVOvhn6 V6TcWMR2lrGkQpl0+J4LRxanTChQb6y63be1BjP3XNEvGihQv9GZJb7Xf1dZIOpoc8w0W08RN4Y6 mAEVddsr704xl97ym7npvEVtvdk6qgspG/Xx8FGzzJHn/pxYqZdg9Vg1Iyi/nAKQ+hNLKeq+a+8Z Z154a7K54+K+0aDP1bNYF7z98TRz8mWjkhRFdNwvPL6HWXtVG/PRlpH2gnp5nh0YMvihTnzr4yrL 2idups2yJ6sWrunRGxaPGK23+/fmqVsGROVA4cS19+3ZMroektOu7LFN58T+Dfb8IdGGkecFx/Uw G67R3qCFgh95w4DruuzWsTYwf82gyZ0/0yfX8owtU4/qmGukZ/GXXY8ZXqs9YR/3+uyjepjNWXin uhywoO3h76Kbx0Tuk5TtvisWi2KQUUYCTx9+9s9kkZBudsGdF+5YIroGru/ORyeYq+8aaw7apcbC 8dFgMRnu1ZWn9TLr2nvBJBb31XHg891Pp1ol769Jln201dxrZOO12tu2lpUzbWKJCFQAgbsfm2AO 333hqK7kfaaPd9Klv9S6st1s3cL7g1DXXXP32KQ01N/72JhY1JGuTnR9zweenhT10amTkeWtZwbv FHUPdRkB5lHUufxdXcbxzW0f/riLRkWLYFEXOEGJgkKH4+n/nnt0j0R+y27+tUsWTYBcelIv858V 2ybqX9516p2pdvXbs675NVH/ovBjYRO8WKgjqR8Qrpf6iWNutOOMex6fEG1/9rYB0bboh/3HhD7j gj+sov6Ic0ZG5XPXiGs6i4YhlPmiE3pGMRLdOiRN7Lk4B/3li716kPQsgLCyXQjMnt5MsBP7cGLi iHFL1JZYQ2QmC2jLwolpjvfF9d/ZxvlStdGMg5joRjHXwk6Ut61ebdjltcpybc3ldjG0BayiCVa0 uYyh+PzYLtJ25tW/JtpVXNrTtV3k6Tits9v3SZNS7LvxnD7R2IDv3KPDzhoZtefuGP9+05e49MSe Zg1rEefa2+h+22dnmlVKnnPtb5EykLwQlKI32PyZaGMBN8o/yz6XPGmMcWifv/xB1u8RrCz+Vb8y WaRUEhEQgZIQsHVYQmhQEKydXIOGciYUlFVU5KmEAKc0cC7eC515Ot64BxFDhoo3ndCI0sFA3Hko B4MeBi7k5zoAlJPfNJQoqk4/LPd4KFTk99gYbsst0To6Lw3f53ZlIxp85MGrF7ODhYWja3Dn5dqY xeK6WNnoviv7RR0aN1PEdoSVknyhM7K4nc1z+TxhremQrTeoUm7x/cW3k83xUZbhakW53P2gzNF1 2/MwY3fbRX2jQRDHIyjcsOxDWlnrkoEbdYy+658IiEDDI0CnnQ48Qt1C8P/rzupj1rZKLb+jzv5N 9vnR0NHl7xw74HnLKpsQjmNG+/9svBxfWHCFYNCurmXlxY4LVs3us438O9qOOXUOQr1H3bOmrdve fmjpyOLVtRfUa5wH62IGWk78wQPWA7QP7hjqbo7DGuMVu/oiFhGufqSe5fzrrNrODjhr3Jba2pn8 l+5awq622D4qt2svSM9AkDbomjN7m0N2qzqG63blp0zkzzUgLoA05UCYzHBlm2MHKs5imP1uYEo6 yvXy3UuYTde2g0D73fHjPOxrZ9u5M4/onmQ5zHGZhHyeubVGWcag5GvrSrXL0fHKMs79wp1LREpR vxyw4F7A/hyrTGN1SuT36naB86xqB2fcC1+Y9HH3EQUWFt9YeziLQwbXvuUEx950bh+zgb0XHOfY OQ5wXme19naFzz4kTQiDP8eTcm+4Zk0bmEikLyLQQAnQn/7ETko7cQtduN/uc1druekE61asrhDe n/vt5PUhuy4c9W/9OtH1PXeyrp6kcXWZs+J1dRmTFO44+tVuO3UkShhXZ7lPzku94dIxKYHw27ey 4jzUffRvOZb3F6HM/Ka9ILA9VrrIPZf3jepByunqB7bznbJwPQdbhfwGTDxUC+VwwjXw19QWB4sl hDL5XiV4vVAmFllwZaJcrh7kWqJ68PCadsktNsapsOTCEtqdl0/KS9t4ywWLJq7RlSn8pL/tFI9c zxFW0clEEddEPezL5vvXtNHHXjAqsYvxDfHaOtly0IbAE6Ec/F5jpXZR24CrL5Ku7XJlgRPtGO2U L7BZyVrSoSjj79k3JkehHUgT3e+q7kZ0SDvb3sKWySnHlh3R/bb5YKl35am9EuMdyonSE2tjOLrr aGHLQt608azGyb2SZEcg+QnK7hilEgERKBKBUw9ZJKq8yI7G9MMviudHT+P6rbV2eMkqf1xsEipa rNkO2KlLzldw1D5do8rXHYhp8nvW7x8FFY0BQoPIDBZuQ9kKFfmdl/QzK3gm8cy6733ST1EWB9iY A8tYRZ8T3B3f+WRapNRiFglBCbawbcD22b6LeeujqQkzea53T9sA+sJgxDUeDIBve3h81fE2rpyT x16ssUhg4Le7lwduS7irDraDmPF/VCnEOA8dh+03TVaKsZw5QmO47n+SFXfuXPoUARFoGARefW9q oqBY+DIAw6rnw8HLGKx+UTjhJmFf9yR5+Z3J0SwzG+m8Yq3gy8FWEeXXSXday4hQaB9wv/jJugG5 fvSC1QMXFDrTZsyLXGvcpAsDhBWXbl1r1TWXL8egBMRlyIkbdLEPF76R9lyu088+BhPUZciVp/WO ZuDdsbi+0+H/yCphKCtCvYhVFC5Hb300rZY7C5MiWOLGCdc4xVpJYMHrlDphukusdQUDQyfMmr9q XWKJP+nKzUDn9MO7Z5wkcnlwHwZbSwpm552MmzDb7Hn88FruRG7/Bcf2jGIlud8TbLvApMu7n05L KFlRGOLyjzv/XY/VxFJi0LyeVXT5grWXk99+nxXF0tx965qg5Vgbcg4nWLCsvmJN+/KLdQFCofa0 baec5QeTbAzecdvyxVlFc91+SAI/jb6LQEMlcM1dNcH7UXisb+tsX7pY63//Xb9rcE3dS1+RSVwn 9D15p3m3Xd8TZTdWRvvZtKmE+nSytcCqspiiZqsRXLy/sJ4HM2wcTF/YhmtoqrrvWjsZ4U+CoOgj RABeDLh6ItTZV5za26xmlWZuoRC204clpi6KeNdHZXs7q4Q75eBFovaLvn1YJurruLaJY5HLTumV UCDxG3dwyvROWA9u1CFyGSdNKLCibsPNECsrJ4wtmBDIJC9aC2kntIEoFC+2Fm943DDhf+y+Xasn mIJG2h6E8u74A6pWuCcPxlC0Z8++/mdi8pt6ErfPy+21phPaLveMkI76fycbK9KXna2njlNekva2 h+LbQo656ow+CXd8fuOCCdvPovtd9Uxxvy+zlnEoxa6y7bNT1ML0B2vpyHX8Uh2XmetAqXjWkT0S oRrIV5KaQE1PI3Ua7REBESiAAI30A9ZCyjVijDcWtLMBbgbDZU0H/66YgZLbn8snFf3RF4xKxM1i RgFrAAYXKJd2sbNiN96XunIOz0XDg4WVE+IdbGZnaJzQ0b7guJ7RTzoQG9uYAF98X6UscmniPmmy WNb+/6xJtpPX3p9iWCQBYbDjLBT4TQO82X4/JhoiBmLP3r5ElI6Znv127GLue3KiecXGD3Od/xWs 8o7yu5mwLdeviVM21MbmmWoHH1hJJBouex98028GwG7Gi0bNN3Mnzg+WCJQTF6yuNuaBL69/MDVS ILKtuS0DM2gM6iQiIAINjwAxnjou2Nes4tVX1K0IVqb87W2V9sQzu+y2seY520G1VXEkDFA2xV3P ymortIk6sy6eyyZr1wwEvhmSPFAgPelOt+4Tz1mFFIJlG8o6hPxfs/Udrj0IM8ZXnd47+k6cK+o/ gtT7QltzwKkjEoMlXOFXWLJqYEjn+k6r0HEDTYJln2EVTghu/cTxmW0nB/7jKWhefHuKOfGSqvOT jng6g28eEA28aP9QWB1xzs/m2P26mf3sCmYIg083KYLCxxcGf3ud8FNikEL74E9akBbrsQ292fEP 7GTTQaePTGRTZe1cVW4miVZbvq2hbckk1OW0K77QXve2bi2hmz5p2rapWqzHpf/wy+nmwNNGuJ+m p1W8PXP7gKgNiZR31gKbazvnqH+idglLke027hANZjiob4+WiUEnE1H3DJ4Y5eUrxIbaeHO+rBO5 YVZt4f7tfOTwhOslbdSL1vqNARLPKu6euJY6+cQqF51SgPhvEhGoJAIsWkUMSfrbKBDoI9I/dEKo D94NBOU1SiSEd/VQ687phH4bfU83IeH3PelX771dZ8NiWaEQ/3HvE4dHsSvZt/0myUoTFEN7nfiT VVx0NztuVqUUZyKDbciW69X0V6MN9h8KvpWXqbFSfv7NydZd/he32xy860LWuqpr9BtrsN2sB4Yv Wxw4JCnu8YW277617cMjrOxOjORDzhwZWShvV13esePnJOrr1XEBDYSYk+v9p6YdQ0mGe6ETyvyc rQeZcKmqB7ub3Y4d7nZHnygUcUF9ylpYI/Tp37zfLkxim1gmqFaxceBespNP6eRM65XSyYaz8cuI YgjBcpm/3bfpEo0HaONY0d61w3BgkgehLNsePDSahIo22H83nrOotfCqmphY1k58DLDxzebNc3ur PlFk7W3vnVvQ4US7AvFeA6sm7XvYhWOITTmuOpb0jlZh5gSrY5SnhNMJhVhqtF9OYEBoHScYFRxt DRoQ2sXzrGW5i+XGM83iMP5icmdbJdkO1co7G6wnCjVzS4qJK3cOfVoFtCCIgAiUngABF9MJM/Kn Xzm6VmDedMek24dfur8qIzM19z890RxZHQCVIMIEBc5W6Egz8EFYoezaIMbDM69PjvzwsfKaaGev 6IRnI8y6RPEXqhMzIPQDDzMApXFFCNj5uh3wLO/N+LH9lXcnmy2qOxVYvWGCfp2NxeMUZsysr7/6 AlFsHgY+bjDEwOJWa12GEMjVCTNDvrgZerYxg8NglFn5F2wn5S27mMPK23zjJ0/6jhuPE+4BsQSk MHNE9CkCDYsACvP9Tv4pqjsJko7lq6sX3ZVQXzVv1tScaZVE1EEHnzEy6pBfbRcEcAqzZk3nM2va OCRv2/heKNGxckCok266/3eXVeLzFztB4ZRlbPzKBmt3CrPpM+aZS24Zk0jLTLIT3GecO6PbxieW C75lAYM2pzCbYZV9TllGWiwNnNjiRfltZScdqg3Nol3E01p5mZpJDzaOspZrBBlGVglcUKONKf5x PUef/3NCWZYiWRQf0pWBwc1ZNq6ML488/0fk7sj10yYRFy5fQdGEa8+2hwxNsnogP9oeN9nC7wef mViLxbdWCbp8tUKS4N60I/5kCqESGNjS9uxv4yw5wbruherwAO4ZYZ9/j/n967gaK0EG/6x+yYQV ltAMXJfb4muSxcqn1mVt/52qdjHYgilKWIkIVAoB6qdDqpVfWFjivub6db7SncW5nPIEJX6i72nj k71pPRecYtlxwXLYTcAyOeErtUlDv36no4ZFlkrumGJ8osRySj4mx8+6enRStrc9PMH2k9tE7zJ1 H3UAi7ogTAY3s0oh6nviWKJQ7+ItxoICiAnmXGWr9Rf0ymTMmXaCxxcmbQhN4Not7oObbHLp6C87 ZRnb8IyhTiSmGWVyFtUufdwnbfRBp4+wlt4tzckHdzfL0UZXjyFcepRvLZpba7L9u5ptrbXbfqeM iBRoK9nJJScYBaBk5c/JoKcmJBRm5ImLpd8uY+V9zIWjEsoyjrv9kfFmz207R2wYi2yxbododW2u 3S0WQLtPbLtUMtBOqNTcb9gmt3VY/eGh09RW3txvLAqd8AzD3m+fX7ZjJp4h2q0FraKTRQ+kMHPE Un/WPAmp02iPCIhAiQhQUeI2ee71v0UmyMU6jWv0/fxYUevIvaq2MMCgocxWsFJwQsX92Xc1iiC2 02i74PwuXT6foaKNQPlOsBLYwc7AhW6PfuPOdaOUonOD6bGLxbOHbbAIZs3Mm2t4UGChgEMW9iwK GLD58pMNnk1DyGACoQFC2biEnV06ws5Osu8eu2w1CxRgreYLK6A5Qe3HSk0SERCBhk3gu2FVVgHU JQxM6HSvameAmZl3ShxmtXFNx6IKt29mnvmj3qWjureddUZhhgWtq5NmWKurD6w7ei0JFBhMWjih DfGFVTidEPw93M++sH1w1rfsC9Mn5cd++xdaIt10Xh+7NVn8epk6M4zTlZy65tdcW4XaiCs1G1J8 W7p/jasUbktuRt8lp01yVnduW7afMHjujT+jATJtCPcHhRWLC/gz++SHsssXXGJC8VnAGmsLngnC FyBYrWAZSCiA9TzXfQaYziULy3AnWKD4gvKNWGcMBBE+mTjCIoNBO23hLQ+OjyxrGFD6wgp5TmBG fNOwHXP79SkCDZHA7Y+ONwfuaoP/21cIK7Odbazd/9nFtKizXb/OPvpJEwV+WBHq8oEbd4zqef/6 /feaPjV9z+TVhJPfNf/YQr77btWsqsjKlb7wHh929kh/U/SdfvDRe3e1QfmbRfW8s6byE9I2OSs6 f3um7359TJ84XJWX4+mDO4WZqwf9fENrLfbNtitl2rsWJUu+ymhTyn8//PS32ceGdaHuxhpsG9tG Uyf2sAuruQkOXFoxZjh8j4XNVXeONW2q+/hkymIvxE1LJ7SDvsKMutW1/+44lH5D7aqlnIeJEsYv d9jnEasz1+5j8e1iKbvj/E+3WA/bJv05JzIe8Pdzv7HgdvLBY0u7r5GlXNx1OAaUgZimkswENHrL zEgpRKBgAjcMGpdwI2TEgfktptrM9uTTOOVTIFbNccIAJrSMcPviPl2wYfZR0WKFUAohkDbKLtfY LtQpWalHuRlOpRKW83YNwT1PTIysPEiLWyUDNmZSnLxqlWW2nYnEH8xhfecL9wcTayzLCD7qhI4X f8wUYQ7NCky7Hzc8qcOEUo7BF40SvHNh7s6jTxEQgfongFtgr+oVE+mMY+XDu/3lDzOiP0rIwIoA 0ftaJRnvPPUVs8soR5AHrPXRCQcsEn1nQMb+Daz1qxNnTeR+p/oMlVpJ6ZKrr6RdKX+kOyZmnxtk uvz8gaPb5n8yUHCxz/zthXwntqSTsM522/P5RMH02IuTzPk3/BZZIz9vV6uk/NwrFnhgZt65bZF/ BztD70smFiikcPHHLZLYaLjxw5N8v7fPlGPLgPLuwRMSWbvBLeVjBVJfcLvZ/5SfzBWn9TZdrcWi E86DkoDAz6xcd6hVzu545NBIuebSMLhNSHU7lfitLyJQAQRQJhMTjDqcenlH646Gwuwwz+VynFVC +8pjLH99yabvybtWF+Iv2uVPaKQ6N9d892X9EqsxpkpXyHa3EAB50O+NE9/Kl75zsfvDWPH2q7Zq Hm5Xrsdijbby6yF/RX+UiTb6QOvCeIDtr8OFyQUWbrjGWoD7yq6o7qyegIi7Fra5BRlS7XfbUdhe fnLv6Cdjqd52EmZbbxEwDAXS3UfXJpDBjKDud+fwP33LvWyuo+rZ9nPQ9zgCyS19XAptEwERKIgA Cpe77LLwdGrrU9xqNJRhjjV8otNN45GNuEUDSIsFQHsbd8W3csgmj1RpCNLPyi/RANM2UDefv6jZ 6chhUXKCkzrBKoKGzynT3Hb/c6a1rvjQWtIhj9mgxwQwpVGm0dhj2y4J1ycGHX4MN38A4mbp/Xxx wdzKxn3ATJ/YOP+1AycGJpQZ4RztbCwbgj/veUJNXAa2uzTEsKPjJhEBEWh4BE4/rHsU/4SS49J4 1Hk/17oIrIGuvmusdbNsmnATJ0YV9QDtwH1PTjLH7NstipPCgGGv7bpE8SzJCOX9DffWdsesdZIy 2ED8MV+YfEgn1MupBlHpjku3j8D3TrJtx1z6dJ9YCVxx+9goCQsZnGVj6lx0fM/oN+ehTWEgNnxU lYtTaI2VDQu3SuagpyZZBWq3KG/aFqw/nOCK9I1t75xUWQVWrXDXumWNstDt/8qWaaO9fjBLL97K 7LF1Z+uW0y5acc61PyjcsIA52Cp0CVngxB+M0ZyF1iounT5FoCET4Jm/94p+0SVg6b+ktQ5ybuhs ZILVF+KeOcECCKtif6ENt899Use9//n0KEaV21aqT2JkOnGxqtzvuM+TbBwt31uDBQg+srEWUdD/ OHymrTNam6O8uicuj0zbfMV7qvrYV0KiyPItmzPln81+6mYWVUFQQuFqGQpt9HX3jotcLZmkQKj3 Olq3T8rk6ktCp3xjvX/SydvVq1+nS8O+l9+Zas4/9h/T0rqVEo5hpy06Jhaa4Nm65aGqCbVU+WB5 7sSf3Hfbwk/Gmm6ChfwxQkgnbuGXdGm0TzHM9AyIQHkSqFbEULhMM9bZXsDaq9SsotW6ZRNrJvx3 UmDMdPmw8o4TF/AZF0RfaHAxFWdg9L4NwIzCKpMQ1PiIc382l1o3ls2r3VMG2LhlWGUQvN8/77QZ /9gVP6dEsdj8fHGVOdcGuYxWU7PciHWGYKaMGyrXjdUZS0w7wTWKwNJOCGjqhJWCfCGgMib8WAZy DJYH9lt0X3aw5tUn2VhG5I8FRRjjwi05TX4EzJ5ozaklIiACDY8AivrFeleVm4DCLCvPMvZxEloN OxdI6iRiRuEaQp3hK0h+tgF/fRfuuHzLZRsLExCDDcEV6WwbaDlUHG1kV3ocaGfRm9jrxE0pZFLo tWDZ5wJVo5BEGeQv1kL+KLqIW0mb9NCzk6LVMzOd11bzSUIcMOIcudX1GAz+z07qbH3wkGjS6HMb K2xLG78H4RqvtwNzgjf7supybaMVnMkbRZ+bgGKl5WP36xpN6OCOtMZKNUwffGaSn0V0LueW2WPh ZOsX3HuiRRjsCd75dKo59YrR0bFYGhCM/PA9ukYDQQaD3DdfYQa3hNj9/uAssV1fRKCBEyCmH+8d fTIsRolJyKQFwntLnDNfvvi+RllCmI6X35lSK6g/q2OebydJE33PLKx//HPk+/3boTX1bxcbYwtL p3AS44Zz+kTZz7aTtKt6Ma1gsKFVrPsT+K1aJfd58ykXCvvN162qB6kjCU/wW7DYzEZrVe0nf+7B aBsnrJjyx+QaxRKu8lhyjbLu6HHiXz/xyLBSRunHBBeCG/uxF4yqdejZR/UwxGrGVTSdAtU/kHb/ dbt6M3zmt9n7C6hNt+MaVh9NJyju1lmtyhIdZa+Ld+kfw6qpPM/cb55XF7sURe7Jl/6SdL85bh+7 OBHtEtehiXyfZOrvtisjEQERKDcCfqd1RS+Ol9XJmGvO6F0rWGZYfnzSXeeafShzMDt2wuAmOdaC 2xP/iXLN1vmR0OFg9SDX2WDjGrYTjkvif61yaj3rYtTTxgnIRtzg5DTbwXczVJT1WGuFwWzUsJ9n RgMy8sIFh/O6Bs3lf45twDgvii2CUf/tdVquu6fKUsCldZ/32eCdvrCSkhPftJxtxFz4r12amnNg XeZivzE7xkIKfjyZMD4MM3dOWlmrgHAg5fbpUwREoLwJPFm9chelRBHx0LX9k1bLdKV39ZD7Pcxa Irm6k22+ssKl4fOuwelnmf209f19sHVZdHU31ruXntQrqUgoZrBqoM5cy7YNbjJknh2YOmGmvRB5 +d0pkUUAeeBSgnWBLyixttqgQ1QGlHfNM7jX+MeG3xlw+MpMBi2XnFh1zS/auDxYJiAo7i46IZkF 2089tIoFkzf+qncMbFCgIr6lCMozlGm+TPAmW8JFhFidzrVRrI7nrCRQFBK7bMq0GmsZBm+++LGa UOa5a/HT6LsIVAIB35UaZZeT9+3CJqFCf/gov+/ZNIp/67uBc+y5R/dM6nsW22LKlS/89K+DfvhJ B1VZqbp0e1klOe0Qf9R9xP91guWUryzCo8KfTHbp+MSbxEmm+pNFsFzNQj0Y1sdYsm64RpXShzwJ aRAyd+fK9/OpV2vqTNro+67sF00QuPrQ5buGXeHZrRLJNlxFUTh+6SlJqRedtZo7jnilTJLTrm2w Rns7xspe0XijDcsTJ4NfSlbUxqXxF0Lgfodsd9u6k13YrH3ifvsL+mA+t+8OCyVl29muInqcXbGa 66DtIGSNJDOBmhojc1qlEAERqCMC31szaeJxIctaF4vnbl8iUnCx0omvCEtVHKyu3rIrZdEA/DT6 72hmg5WBEBrLS2+NVySlyg9l1uN2kETQfaSzndUif1ZQY7BCxesEpdEzr1ctC+22ZfrEAuP4i0aZ Wy/sGyVlxodAlQMPHWrjuEw0+9ulwBEGFa/eu6T56KvpZuIfc6MVNgmg7ARXGdxonBAnbqI1rae8 TmikQ+u3d+0qQowjUEgyAOxrY76M+KXK5ebuxyckFhqgnI9c198uejDDjLXWZqvYGRr//JTLl428 DgIMnWWBn0bfRUAEyp8AQeBZNMTFMSQWyc3nU19hOTo3UpZ0tIMw5wrBFeH6fe51vyZdHG52ztLB 7aBOfvrV3OpMd2x9fBJg/z1bZ65lJxIQrJZeH7Rk5PqBtQMWdL517QPV1lLj/6ipm+HG5A9Wxk9b K65cBZdFFk1wM++c85V7loy2Yd3grxSGG84nX6efxU93fhRPB58xwjx83eJRG0H7xPmYQMFyjWDW zrqCwcfbDy5l3vlkWjSAXGOltolQAJyD9L7c+tDvZjUbfNwX2rGwrfjYti1uYOMHgeY4rLGJz4QQ 3+ilu5a01tnT7SDwn6icWNk5ec1aOvjin/tH215KRKBSCfzPKo9RHmDd64R+H/GrQiGm1F129cED bLwrhH73y3cvaXgPqcdYEdPv+7F4F6sRhu9mmG8xfjNJS0w2N5m+zYYd7fvfNqr7+lsPjZW9SXZW A51sV/B0KxYzmf7gNYtF3ht9e7aM6g0/5pVfPt8jgonqK07tZeu/JuZ5qxwLhfP4bQJjAni9+dEU G76keTRGcJPs9KPDlT3D/PL5/cp7U8xw229fzPbfEdog2hgWvyG8C/cdRSnWbU6wkD7verxG7OqT drVR2jHKSZpBVuGGNR/WzCjQWOzLCW0Cq6q6cZrbnurzlzE1i/64NIyVBtm6O5PQ3n76zfToHpN2 c7vS5gpLtjFv2fMv1tveQ2+FatrFC2/8LZro576iqMSYYQtr3faxdVPttUhzu2Jm28SkChZmxFaV ZCbgVRuZEyuFCIhA3RC47NYxCasELK6o5GiAslGWUUJmVKgs/2Ndh3a38UycsozZYyre1zLEnIm7 ystuG5swQWYGCUssBgm4qzi3URpCBkcuvktcPqm24T75lh0AOVm0R8uoor/hvhoXFwajmHuva82T mSHyOywopI69cJQ7PPEZztTT4fFn2EjIbwIwI7AbaFfUcYKbzw9WgYnQkHLduOfsvk1ns7jtnDgh pts5weCYTowTtyKn+61PERCBhkOAunOfE35KWMJScmbnqfvoNOOi6SvLSM/KW3S4Q3n69eQBh1PY h+nK+ffRF4yylktVJgjUmUzS7GgnVFj50VeWYZ3sgtcTN8cJ3Jil39Sm94NYu/3ZfJ502S+J+0Hd 3NWudowlNQo8dy8YELMKdaHWHz/ahR5uGlQTY4526Pj9u0VKrNOvGp1oGxmUcf24i25j/+DihAH1 FXckT1ahyPMX5KGcdz5W29rQd9Fs2aKJ6Vm9AAV5v/7BlMhKgu9M+nRbqFkUQ29ny8JfAW2cnUy6 0yoBfPHbsMF2lU6JCFQqAZQcxMH1Bbf6VP3VG+37/lP1xKnre6Kgp57z+55YJx1j68O6lCPP+zmx gi51DvUBfVLc7JxiirrvlMtHm5vtAgdOqLewnMItkAmPVMoy0jMh4YQ+/yb/XTCyWGPCIE6Ov3hU wjWUiWfqoV236hx5nTglFe3i/U9PKom3BXnvd9KIRLtEGbk+2mnKgteKKwf7SI8FrpvoxoqY+pnt CBxZSGBvG2uUcCs+17NtbEu3gnFV6sz/B9nr9mWojY3MZFs2ctR5oxLn436ziidjOyY8/HKdduVo M8VaCp959a+JMSTXj8KU9gBFrwvyz3iNOj+TS2g25WsMaaQwawx3WddY5wRm2YbZCQ1NrkLH9qSL f6kVKJmKnLhecabMmSpvrB0YuBx65shEcZjdd9LcDmCcuAqY3+5c5L/pvj8aTK/JKxTcPAmWfLUd JKYTX1nlKm6X/jir8HLXQaNw5F5do0Zu4CFDorK7srj0fFLpv2OtHbY6aEhsTKG7vMEHHYgb7qvp PPj5PP9GzSCWQZ8vexw/3Nz/1MRaijbScE+wCNjWWsP5MY2ILUEjjcD5oeeSG8toh/6JgAg0GAKT bId67V2/N488/0ciVmJc4Qmiu9uxw8w91jo1Tm55sKYOov6Is3DwY9K0sAoSX/60FgNOQhdyYjhS zyEokJz4CiNc/nyZauOoOHGxT9xvFxOS375ii1iW6+72vXnRxpV053PH8ElcFFyHWJXRyUg7+cAE BtfMn2tHGMg6Cd2e2O6vgsmAzwmTFOvv/r1B4Uh+oUywVsi4U2IdmE6c4o80DC5SCfftW899n8EY bj98brjnDwa3XXdNfh7U/8/Z9oW4Z6FLJOV+11pqO6F9fO+zGsWi2078TGd1hjsrViW+bH3w0MjS jfYwFM7BZNQ2th31z48lihsw07bi5ioRgUomEIbpoF+XSrAA2s7267A0S9X3pO7Z2vY9cXVEqBed MNkdSqr+r7+Ill+XYQHkxM+POms9W/ehcPfTu7SMIY4452eDuykWsBff8ltsm0V98aE3kYG7uRMW OsCajPz5c3Wb35a4yXKO4RrW2/2HyPMkrkxY7Z182Shz+W1j3CmSVvxl4iUUv/0J98X9xtJtXcvl Aauc8hfzCtOOtHEm9znpJ3Pz/TVtMWmw+Nrbbk+2hq45Gkuxw88embCy89suf6Ko5oiab4/YMYBf P99evXp2TQom77377fHAIID2lgn/OLY8fyxE5JScL7492Wx/+NCUMdxoGy+8aYy55Jaae+GXQ99r E2hiA1HXbl1rp0u7BQ0pS/Q+rAFhWk7a2bAJPHbD4tFM7k1BBRt3VVT8Xl0XO6CIOy7cRgO5ZL+W ZgVrDjxl6jzzljVvnmbdLPx2mBeYtzg8ZxvrGrOqnX1gJuIbq9DBZNxvrDlXeIwb+MTl75cNZdZS i7U2i/ZoblrYwQIr0oz6LbsAnqnO6fIP97vrc/txicLsvYNd1QbLr2/tjOHcmjbGJUt8shgBJskI dRWdjDhBsfnR48tErlVw2P6wIXbmMTlgKLNTyw1oZWfzWkTX/asNWvrlD3/ZjkIwArUnOPeYHma7 jasGNcxg4l4qEQERKB8CrJKFldCaO32XV6Fw78AtBqUVyn9cwHGn9zvRcRmzMiKz1ggLjmy8zw+1 koX1oKubXUK/jk63z9Wffn5um8vL38e2dPmF+0hPO7VE35ZmwKKtoiD/tDdYZsSlJT2W0ljltbEx YH4Zaxc7wF3GazDjjsu0P7IGsFYAvW2bNM9O2uN+wqAxG8l0/WEeflnY5/Mkr8XtipfEGcMSjMkU PwZomBdtypv3L2mfoabRgHTQkxPM5XbiKU4I1MzziqA8W8cOoMIePNYfKMIiCxhbFhaT+NpaOfoD eZf33Zf3S7hvPWcHxqdYiz2JCJQzAeJtsaq6W0k9n7L6729cXZMqz6jvad/rDgvOb360Mbio5+L6 nunyT1XX5LrdLyPvPCt+9rJB7plw/sR6kUyYVNtyiT5uv14tovEEysDPbcgWYhmjxElXZuprLNhQ jqEwYpXNdOkpG/Xa8rY+Jvg+9TtjBFwLw/oq1XW768u036VL9YkSiza6g42BTBvNZBZttK+gTHUs bqi4undasJmZNHmO+czGm8R6K5RMLPz0/vWkevYy5cf9hi3Ww0wmffL1NDtZX/t+u/MyyUQ4H6zg 6ZtwL1CYVbpwvz97atmiXaYUZkVDqYwqnUAuCrNKZ1Hu18fKXzSIW9pFAI7ep2uicccCLpXVB9d0 jl1tc/vqpaZxHzrgtBF5XSoDyI8GLx3N3tMx2f+Un6LOSV6Z6SAREIGSEChUYZZLofrZuCpY4eJK fshuCyfqJOKnPPqCrE9zYVkJaZdarJUdhM01V5/eOxpUck1MaG22349Jlsr+tdKufPDo0pHCESuP Ey8Zbd74MD+rsAWsgu4dG2uNyS8GzCiNsQCRiEA5EyiGwqycr09lEwERKA6BYivMamwvi1M+5SIC IiAC9U7gguN6RjMwfkGYeWNVy3Ry0U2/GYJj4qayynJtothxzKjlKsfu2zXh6kLMDGbyJCIgAo2X AAGTCdDrywxrLcyKk5LGRQBruIft4jGhvPvp1JTKMtLiTnn1XWPN6Yd1j6w9WH2ToNqh1UaYb9zv i0/omQh+/sgLf0hZFgdJ20RABERABETAEqgJBiEcIiACIlAhBDB79oXYCyfaWDZYe6UTZvhPt0Ez EWbzrzmjT/Q9l3/t7Eqee27bOToE8+e4hQhyyU9pRUAEGj4BP3YJV0OdRKDoVG4ZDf+KdQWpCITt E+lwsSRQcyZhlc0frDsYwkqtBHLOVfrZAND/rV7hlDAFF9/8W65ZKL0IiIAIiIAINBoCUpg1mlut CxWBxkOAuEAIS0YTP+b4i0bZ+G81K/6kI0HgY7daZ38biwbf/1xkr+0WilatYdb/rGt+jeI35HK8 0oqACFQegSh+i70sFGdDRsw0R53/sw22XBPsvfKuWFeUigBtA5MpfGL5zCqX2x02NHLZTXWMv/2Q M0aav+1xrNx36iHdkxZj8NOl+n7CQYtE8Ut5Fg849ae8LNRS5a3tIiACIiACIlBpBOSSWWl3VNcj AiJgTrDLW59wcf4gWF0oX7lx0DjDn0QEREAEHIFC6hSXhz4rgwCKqlUGfpv3xfxhrdFW2S7/4/2V svMuhA4UAREQAREQgUZCQBZmjeRG6zJFQAREQAREQAREQAREQAREQAREQAREQASyIyCFWXaclEoE REAEREAEREAEREAEREAEREAEREAERKCREJDCrJHcaF2mCIiACIiACIiACIiACIQE2reb3/Ts1tyu vhmsmBMm1G8REAEREAERaGQEFMOskd1wXW7dEDj36B5m83UXrHUyVmEcN2GOuf/piebxl/6otb+U Gw7ceSFz0C4LmUtvHWMes8vIV5osalf+euS6/ubTb2eYuo7Rkivbh205uy/c3Gx/+FDz+8SqBQoq 7X7oekSgkgj8d5V25qrTete6pHl2tcvJU+eaDz6fbi67bUwUxL1WohJuqKS6RHV4CR+UFFmjILvs 5N5mbft8N23axLz09mSzzmoLpO0nnGQXDdh+k47miHN/Np98PT1FzoVtzudZ8N+F1q3mq7f+QGFX rqOLRaAc++H5PNfF4lFX+fjvYV32b3Nlm2u/va746TzlSUAWZuV5X1SqBk6gebMmpmWL+czcuf+a kaNnRX9j7MqN7drMbxZftKWhId9zYOc6vcpmtjNMmdq3qww9+f8t28Y8d/sAc8bh3SOO8zWpur4u HZqVnOux+3Yzz9w6wAzo2zI6V65sGaQwo89zggy+cfHoWua3q55JREAEyo8A7yb1J3+uTv/5t1lm ftuLQvm9w2Ydze0X9a3zgod1SZ0XoIATqg4vAF6RDl11+bZm/dUXMHPtitLvfz7NTJw8N2M/gfYO hVQva5FWLEn1LHRqn31/xb0LvKOuP+COD/MvVrmVT/kSKMd+ePhcli+97EsW9l/99zD7XHJPGb7T ubIN++1hvz73EumISiaQfUtUyRR0bSJQIgKX3TbWPPFyjTVXhwWampMPXsRssd6CZqv1Opj7nphY ojPXzhartmde/9OguKsEadXSdtgXaWGGj5pV55fTccGmpk+PFqZfr5ZmyIi/I4vBXNhiAWfHJwnr MlxhuB6JCIhAeRN497NpSRasdLo3XXtBc9EJPc1yS7Q2Pbo2N7+Om11nFxHWJXV24iKcSHV4ESAW mMWqy7WNcqAvct0946KJnPufmljn/YTwWfhlzCyz+f4/WuvNeXldYXh8mH9emeqgBkmgnPrh4XPZ IIEGha6v/mv4TufKNhwThf364DL1s5ETkMKskT8Auvy6JfCndd159o0/I4XZ4tY6aT5rUITiZLHe Lc3x+3czS/dvZZo3n8/8NOpvc/fgCeaV96ZEBbTGU2bf7buYgRt3NItYawYGZNP/mhcdf9Wd48zE P+eYi0/oZYb9/Lc58+rRiYu69cK+ZoG285t9T/7JbLRme2sF0cnc9vB489r7U8wVp/Yy7ds2NV/9 OMNsu1FH08bOGK++43cZy0JZd9q8k1l71Xamk1Uc/T5pjhlsXTzvs51sLOp22LRjdJ6nXvnDPPjs pERZ/C8rLd3GHLLbwmaAtbajfFhqvPPJNDPI5jHe5rfrVp3MNht2NPc9OcE898bk6NClFmtlzjqy h/n6x7/My+9OjhSP7FhluTbmmjN6mxvu+z1K17b1fJEFH24l8+b9a55/c7J58JlJdgBQNYjNxNqV /91Pp5mVlm5tlh3QOuKKQuxRe52H7LqwWdfmjVx0fM/onmFx4rNlH/nsaDn1ta6iY62S8o2PppqH n7Pl+H22Of6AbqZLx2bm2AtHmevP6mPjxlQpyx64erFof7eFmpuQH9e4UKdm5oyrRpsR9nwSERCB +icwx9Z51A1YumJ1s6Stp6if+X703l3Nmv/XznTr0tz8ZrdRB9w0aJyZNdtW+laoB4/dr5tZwrYF U6fPs/X4XNPKWse8/O4UW5+NM9eeSd3QxBxzwSjz9yzr+2llvx26mA1tXX7e9b+ZH0fMTKpLGEBc eWrvqD2YNetfs5Y994vWxQ43/Exl2Wit9mazdRY0q6/Q1uBmOvLXWVEZPvoy3uWunOtw2jbq1w9t 2Tf5b3uziK1PaV8eeWGS4XqO2LNrg6jD21qL9GP26WpWX7GtWbhzc/PlDzPMmx9ONQ/Y9uwf23Hw 97dpPb+ZOm1e0jOWqS3D0n2tldtFzxXuSatY5Rntjt+WxfU9aLND2WajDmbXLTtH7R19k2+GzDRX 3jHG/DJmtululcg8lyNH/20ISxG2zYss3KxWe37l7WPN5af0tvn8ZS686bfodHts09lsZ11Buy3U LHIf/fK7v8yb9p164JmJ5t+qVypRrIU6N0sc/9I7tfsLvI8rL1t1vX4/Re1sAmHFfknVD6+LOnua fTf859q9oz/8NNPQx+3fp6U5+vyfzWc2tEi6Orutfd932bJTVI/R5hAW4JOvZ5ir7xobTcS6dw6X SPKLkw7WevMo20atsVJb25dvZo+bbT62edBnxtUaF8dM4wqsqv3+6/X3jkucauctOkV5h/UvCTKx dlxS9cNXWLJ1VnXGkv1amaNtHQpbY8dR79l+/dOv/Wk++GJ60piIdH6/fmPbHna17fa4CbOj9tdd 1K6W+Tb/z95VwFlVfOEDu8TuwtLd3SIqJQ0CktLKnxYFBBRBBJQOpUEapEFAQgUpBVRABCwQke7u 3g74n2/eztv77r7aADbO2d/bd9+9M3NnvvvexDcneL1knp/r6/KeeBEQwizxPltpWTxEAAsadMSQ Q0cDFFkGQuXraUXUwgiLIiymoKkwZXA+Gj7tsvJ11rNdNkUwgZACKZY3Vyoq6JVKlQOzCExQQbaF g30zCBZiGBQ9mJkD2YI0hfKmYsLMQtJBQ6oST8Yhfv7harLrrC6beGE4bWg+pdkFYuvStRAqyOX1 Y7IPEwH4RssScZ8TZ3mAsiOox9zRBZRG1QOe4J84F6S0tbrwQhAmjt2HnKPsvDhAXTMbzCuxIMC5 B4/CCFodPl6WSTvMXIsV9FKmUbgdJgotsmekR9web18P6sxEI8wfh31x2WX74FdO44R7YRKOOoI0 w+sST/4x0GtTSly79yDcmkdj251Jtd4dsqnWn+T2oU5Y6JbkQfndwWcVKQnsUXdfrhsWJZB0vBDZ eyBYLYhTpcxkJRzxHanzajpFAOKeIoKAIBA/EMCmR81KvqpfeMxE0z/cr+McFhLoMyDoK7H4KJAn iyLH0Mdhgr5wbEG18D/P5BTMyNSkntOXKWbpO2G+D421DNyPXbtlIcxApqNc9E8gzLABoPsSTzYb xXmiyL4XI4KrupTlxQcIDchZJjUwTmFBMo/76Vrtj3EfF6au6X/xvQ/XmIDUw3gKcqkeE2cY66q3 PZog+vDk/CVaPL4gf1+8KCDwMRNPwVSeCZ6KbEKJecK32+7ZXMdzK5LfS40zGPfxHXM1lmH8SRnh 5B8kAoYhnUePZfbmHthcMwrGNhC/EHxX0rMmPcw8KzL5+kb3E5SaN4TwvbR8NynK2Lx11/0o4znG WaTHdxqCBTS08yHAAs8V5qR4psDjG5NPWH1P5P9534Mo5f9xyJ86tvDieZeMswrUJPTP3jz8WfXZ /xwLsPle69+b/m3gMWCj11Wf/WnPnNSkdgb13ccGe56cKdVGPDaxMcfU3/98uRybTU8YkFf9frDp c5rLgAUMfmeN2P9yo3f4d8tjEurlbF1hnr/eYZNuLR2aZbbb/z7h/thV+4y42JuHo07mNYC5z8D4 iU1o+Ga8xr6jIY0Zs9d4Ddao6wmbvs48r8emNAg0tB/zb71J3YZJQIwv323TrZT3pIKA7aiXVFot 7RQEnhECfbtkp6UTC6nXt7OL0r51pZSWGG7/He/kQvp0zqHIsgNH/Knm/45SDX5B0wqC3WX4HAPp A+n7+QVq88Ep7uyP07HTgepcbP9hJ6l+l+NU9a2jLutSqoi3Istwz6bdTlCLnidpEpudYsGXKoWl O8Hk94NR52ne1zftVg2TXExYLvCkF219q88pepPbBHmptI+VPLKbOeIkdoeGfWHRpPt530Nq8PZx CovgkTC4Tll4jV5lbbn2/c6oHDUq+KpFrCussUjRcpcH/v/1PU3V3jpCi9fdUqexMJ7A2hrQAIFA c2PBGtt2Yvf9nTctz+vzOVeUY//XOh5TGiSY3GM30ChN3j1h1R5pxMeL1t5Skwy96ENamHxBfuXd MeOERJ2Uf4KAIPDMEIBGju7TV/BkfN+60koTDBXYe/AR3bobqn6vILWwEGn+3kmq0+GY0vJFmldf SquIhPd4EwQTeWinNeG+tH7nY7TsO0s/g3SxlZm80w+N4T8P+SmCzVld6lVNr/pdaF8163GSXufx ADv70PwFWWeWhNKHY5yo2e4oVX3ziBqj0De/zCRaQujDsWgFWRYY9FiNIRhr+4+9oB7F262zqkWt 8XrbD09Tp49Pq00e/R3Tz83RWIZxeuNPFg1umGO2/+i0zqLeQai5mnsgDbTFIdOWXFdjeu32R9UC E8Radw40pMXR2IzvnaPxXOetzmM4ZBGPxVjMA49ZrK0JwbzBmdibL+B3B9JNxllnyCWOa+7MwzHH ep59NjZCQXS9/MZhSs9zfld1eYXJcwjmoFgTYK4KS4cwJtsg0IzC77vnsPPqs/kftMLKl7X8bjrw 777N+6fUOuAoryswP9ebN+Z85s/m+atxXeKo/3UHa30fR32Xvd+0XgPovO93zK7G2P08DmDNVK/T MYK2KcjEdk1tfUibxwT0h3C/ANHzb/QVeKHfgBaeSNJCQDTMktbzltY+YwSg3YWXWcbOvUrrt99T p0sXtRAoGOhgCgGB2QIEeSu+6KN2ekBKwRwDAtLkEJsmmskXdTGa/0bPuqLMAJHNVV0estYWNLcw Sf5ubjHa/cdD+o0HlVa9T6pBBGWgnng5ku1sTgm1aGhcYNDKlMGTfLk8CAYyvWvkKL+r89DAW8zm rJAjpwIUUQXfBHi5ah9MPbSsZJ9v/50MUB/38UIYGnBQl3cl0PZAO7BLqBcj0N4DKejD5qLweeZM gC92xGEe9Xr1dLwoCKL6EYTZhh2W74yz/HJNEBAEni4C0Fwyy+9MTPX7zEJolGENYQgIgipMsOFl FOxa674IpvcQ3jBn87JH1LG5hWw3po/uMbQF9IZF6QgtN2d1+fs/P75vZqVt8NXkwvQbO3+f9dUN a/9nvn9C6cNhyoe+F4LoyfA7WZj78D9cRHaMD3241jjBhpb2ibeDXSlgYYvFNZ4XxHj9yKlAgkYz NLV1fqSJ6ViGxSG0TJzNPZAGC2wIAmPo7y+0+iCliuK3YHHN4GxsVomd/Pt00iWlGQjte5iPYjzH vSGZeQ4RXZFxNrqIJdz07szDn3efvXz9bQKxA3GnLgd5gz0Hk+oDOWJtFd6E2ctRmt/59KzSZkYZ /qyV+kvEegGfzRIS+lht0GfkNUa5kj5UizeDoRmqza0xL7/Jmz+xEUf9L3yeQZyNSfq+Me27kF/3 gXCDgw0jyOiZV2ghb0rDOqYja8A5E6zRsNmO+ffsFTeUeT/SY36O/kMkaSEQ/VEmaeEjrRUEYoXA RNa+gsaVJ/NB2JV/hyd6+dmcEkQIBgJMMKF6DIHzXe2A13jTfOzYHgLNhachMCOCuFOX1Gy+MZV9 pvXrmp398qQg+CjAC7tA8LNz8Ki/pTAn/6HFNX5gXuWXRSfTddCfY/OOQVgLjmHOgkmAO+1Lz+aR WgzFqMmHPu/qPTvjAoEKN0xltehFj/7s7B0DtYUwS6+02aASDpMZ+GsREQQEgeeHAEj0PqMtxBhI /7e4/4NPMSw6sIiHbyT0jRCYbvd/x2KqZqwxTF+0uTnMNeNawiO7HZd1gQbzzt9vK3+Zr7HZN8wz 8YIpHvxFwv+l3sDR9UwofbiuL94DAi2gROoQG6/aHseHPlzX4V/2BaYF4xl8HUHsXcd5+PwCYQb/ O/cjTGljO5Y5m3voeuDe2g0BjrVkZ19iWhyNzfq6s3eYnM0dVUD9xnS62M4bZJzVSCbud1fzcLT+ effZTww/Dld1QZ8Ny4bibNaPuSHGH7zCw3PS3FU3ae7KGy4fKG4HP8F9386uXLboDLoa7vSTOo87 78b+1532BUf47Ixp34X5PvxYQqBcoAWbDQ8eRfap+ry9d8y3Me8Gxtgs15pmWtnBXh45l3gREMIs 8T5baVk8QAC7EHqyCe0g7ACvmlZYLa6wc7GLNbTQgcPHFpzxm3eEgkMeU9aITh+73q4Evr1iKtCI clUX7F6jDXCaCV8qVV5Ow75h0qsd3m5sevHesHMub9+atejgxBgOrj9nDQDs9sPh9a6VJaNo48Wm PeaKuNs+PJfYyN2IRQp8D6H+emcrOmXuZ402OGuFRgQclkIQ/AA+7EQEAUHg+SFwn/trTXLh/a/D /rRsUiF6gTW5QDINnnzJajYNk0ZoxpgFmjYInAK/KdCSQRnOJAUTbzEVbcLtrC7QBoJ2HDZvECig Gr/gvwXaPA1Zi8G8QIjvfXhMsdL54kMfDt+YECzW7Imj6yBxIdjEMngYsFeEy3OPeFyGOJt74D5a Og+ISq7G1Zg1pGcuRZZBox0BfqBFCbO1ReMK6ttH+13G2WhDliAzuDMPd6efjE99Nvz2NetxQpFm cBMAH7fQqHqnTVZavemOInqcPSwQ3djMAUEG7SmsTzCeQWMNwQSMEpfzcJTrDtbwixgbwXwf6wps lqMPdWb14ug+6Lsw70awEczDMR/HvBz9hkjSQ0B8mCW9Zy4tfo4IYJK3NcL2vRlHlYJg8QSBg8oj rL2AHWLIMvZ9Buf4OrojtBe0X4FsvGuLhY2Wm9yJY+DD4ktHrEHUMzjkjI64qktLdgj6z8YyNP/z ArT7z4cE01IdwerlCD8i8FuChRf889gTbdYItWZEAQVJV5YXZnDqr+Ua+1+AaLMlaDRovHSaJxGa cUatMH3N0bur9mln/o7y6/N6NxBEp1ngRwLPAmYqOqACdrs2LyhGB74voyb55jxID9FtgTULSEmI JvDWR/i8UyflnyAgB8KAjgAAQABJREFUCMQLBDAxn83mixAEdEH/p/sZaNdcZtMP9OnHWTPos355 VL8Ok074cIRUe8VC0IPc0GZ26gL/ux7hqBi+IyHYmTebd6oLTv65U5eZI/Krfh0RJRH4BNF7dYRm 3a8bbyF9uOV5GDGJbh/uapzEXAGCzSWYRUJAYGL8xVhy5mLU65gjYCyF6OvqQwz/6e+os7kH7qM1 vbBJhO86XojKvZyJZMwZ3BFX4znmRxD4E4WWJwiDBqyp767YK1/GWXfRS1zpnM3DE0KfjTHg7w1l 6K/1ZdT8GZvt8GGGzVlEVS7Fbl60RQWiadoT3Yff5yBa0EhD9HZvnrOij9Hi7rrC3Pfp/I7e3RmT HOU1nrf3mzZe131g7cqR/QRIQvShfbtE1fy2N6/fwNYeED0Px7w8wtrceCs5TgIIiIZZEnjI0sT4 hQB2LJrXy6hCq4Nwwe4OdknRIW9ZVFxNNmGaCcIJjpdh2gffBiBfvppSWJ3DzqrRbwd2bDBJxWC3 bmYRusE7RYiolTyalLiruvzEPlQ+fS+X0pBDna/wIFvxRQtx98NuixPMji2yKE2L1Zvv0Bj2j2YW aNWB/GpaJwNhMAdJBYe+RrIKqtCDeUe5VqV0HAmsEGueeUTZ5YY/NQh89Izsk5u+5x0yV+KqfWbT I0flaf8F8Ndi9rmGXTrs1qGNiDwHXAoxkZmXTWvhN+EER7YzC8qDtsm4j/Mq/2t72YcQBmr4aoEg Gp4r32fmMuWzICAIPBsE9rPTcmjagFjARgU0suDzMCdHtNy2tLgK1gG/LdD+wQ71v9xXr9lyh4a/ n5vebp2FXinjo/rq0srfU2SdoXGMa0N751L9Jfp9eyR9ZI6oR+7UJetvnmr86dUhO0fH5MArPG5U K6/7dUuAE2PJ0ofHvg93NU5igwQuHDDOr55ehM1j/VXACCyE4evuu213qStrk+jrIGRfLOmt5g2Y MyAYThEed2IjGK9czT2gKY7vMrRSxjAh3ILnNnBFgEU96gqtdHfE1XiO3wLcFIzgsf4P9hcIX3TQ 6nRXzOXDqTfmTTLOuotg4kpnnoe700/Glz4b/jJhmQHNMkSbhA/KfOzqBZpgmH8igBhcv6yfW1Rp mlV/62iUh3eAfTpi3gn3AAvGFmTCLFSR89iM1+LuusI8f9X5Hb27gzWiNLsS82/avAYAkTh7ZAE2 Pc3A/tk8KJR9Q9dgzWn0S7/sf6D6U+M9zPN6mL1i7o0XAqxANIFmzCfHSQOBaC6nkwYo0kpBILYI PPKPUH+yUxCc9GJQw+BWjjUN8BnmMDiXK1tKZScPhSMMKhO+vKZKGDzlEiEcNfLAOSd2grQzY32L ObxLhJ1XqA3DXPIQT7Cx8xPEZp2hYZH1QYQXiL06uqrL/YfhNJTrAvOe8kzqNaubkR3cJ1N1/YIj ZKlyI8w49K6zOmn49zOTblgMIMgBzH3ge+HkOcsCRNcVmhXzVt3gCW2oWjBi8Nf+0fSghmg+hxgT EG0t6mdU2nRor76ub4nP2HkLCn7iFtbWfBHt0J/xrsve9PN9dYwd9bZNItXXNbZj515RYe5RN5Cj pTgyJsyuhk69pPwBAXvUFQM45OtNd9QuPUhRrUGC3X29Q7Z+m2syUBUk/wQBQeCpIqDN1Iw3gZbZ j79aiCX0vdB+eZcdMKM/hcYvtG0K5knNjpkf0cfjLqq++9sf79HSb2+p4CDY6ChZ2Fv5PzOWC7Id EXlRBjSKH3OnYTYtMfYlICrMfaA7ddm66wEh+AB0guuxlhnqC824qYuvqaAuxjrhOL734fbGtod+ kWMg2vC8+3D9PXJk7gSn3d04ah7GOZgUYayF1jKis2GsN1/HWAqCFt+5nsPPqe8V2gnR97J8svzX YxnMluyJHsvszT20SZXON2nBVfVdxoYTIlZiA+zMxWDCnAAkg73vJfIax2ZH43kwOyeHzGPfTBhD 0UaM9xhTtRaebou934LOby4/d4TjcRlnFbyJ8p+9fkA3FL8T4zzcnX4yLvps/VvQ30tdH+Nv1J26 TF5wTQXdwhwUfQM2WzC+wAUA/PbiN4E5uNbC0vfR7+g/EGETpDg26LHBi3EGFh9GcWddYZ6/2sPd 2P+60z5dByMu1nPcNoj5Nw2LGox/Gttf/3yk5txoExQSsNbAJv+UhdfUekqXp/s6R2MCNh8gICK1 1q3OK+9JB4FkrIJoWbHFos3YYYJKJzRKRASBxIrAuplFVXQUaCk9LdEBAOD3zN4vE9F+MrEWwzmO Qjmou8XXwIhplxU5o+uUiwdQEDGYDMRGnNUF5kN5cqRSAxPUtmOiogwyCeTetZuhViLKXF+YYhbK a9HMwiBrT4AHJgZQLbeHmb08OOesfY7yGM9joYPngQkQJij2BG1EmsCgx8qfgr00+hy07bAggpNR +E7Ac9z0ZTEKY3DrtD/mMr8uR94FAUHAPQSw8P6oaw6q0uaIexlikAqmd/Cjco83G+z1YVik5GWH 5td4k6AEO3GG5i4WPt2HnLPeDVGJM2f0pAvc78ekr9UFuaoLrmdmn5kPeYGBfsiVSB9ui1B0+nBo dnw7pyh9vfG2NaKpbWmRn6BViE2ym3fDbIgwnQLX4ZPoyvVQm0Az+npcvBvnHiCI7Qk0N6DxBuLs XoQvT3vpnJ1zNZ5DixOuC7DQj4l/UHP5Ms46exrx7xoCS4CQRbTYpyWu+sn41GfDsT18XKLPxlw0 JgLttBDeWL8e4drFXhmu1hXmvs9eGfbOucLaXh7zOfNv2nw9Ga9XYGobxMoCrvole/N6RI5GIByQ kRt/ls1rM77x9TPmJzBdjisRk8y4QlLKEQTiAAFXJBc6e1cdPqK0xYU4qwsWbbHdacGk2pW5BpxR a38Hjtpk3u12lM583ln7zGntfcZk3VUZaCNMsNwRTHbwgr8amGpBowRmuRtYE8WRFoA75UoaQUAQ eH4IYCcfL0eCwC6u+jhoC2gtGkfluHPeVV3UddYedlekD7dFKjp9ePP6GZR29m7WgnAl0JAwa34Y 87i6bkwb02N35h4g0twd7xzVw9V4DtNnY6ABR+U4Oq/LxzgLtw8yzjpCKumed9VPxqc+WwcVi83T uuBGn+9qXaH7vujWwxXW7pSnf9OO0mIjHRtS7ohxXg+NtK7sMgHae+hzfvzV4nbGnXIkTeJDQAiz xPdMpUVJBAFHWk1JpPmJtpnYFdEBDhDw4Qs2ixIRBAQBQUAQSBgIuNOHr9hwm9ZuuRsnRGjCQCV+ 1dKdZxS/aiy1EQQEgWeJwJuNMimyDBYsw9mSBxtEIkkXASHMku6zl5YncARmr7hOW3bds0ZSS+DN kepHIIAdN/i0g1+F/f88kkFavhmCQBJB4MipAGrV+yT5BzjWSEsiUCToZrrTh6N/Dw6JmQlVggYn nlTenWcUT6oq1YjHCEifHY8fTiyrNnP5dY4abfELCddTIkkbASHMkvbzl9YnYAQw4ZbIiQn4ATqo Osxatv8WNTKdg+RyWhAQBBIJAtAalj494T9M6cPj/zOUZxT/n1FCqKH02QnhKcWsjggqhpeIIAAE JEqmfA8EAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAEDAnESJRN2vbc5qp8rx3uG+8qhIJDg ECiSP7Vyvh5bp7YJruFSYUFAEBAEEiECGTmCLaILIjy9iCAgCAgCgkD8RiAbRztMy1GHT58Pit8V ldoJAoLAc0UA0VERsCGuJE4IMzjESy66anH1TKQcQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQE geeIgNBczxF8ubUgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoJA/ENACLP490ykRoKAICAICAKC gCAgCAgCgoAgIAgIAoKAICAICALPEYE4iZL54FEYrdlyl37Yff85NkVuLQg8XQTWzijCYeAfk7+/ hBd+ukhL6YKAICAIPH0EvLw8yMfbg27fCXn6N5M7CAKCgCAgCMQKAR8fT0qVMhndvRcaq3IksyAg CCRuBODDLEvmVHHWyDghzMLZh9ktdvp/+oI4YYyzJyMFxTsEnjwhevz4CYWF8YGIICAICAKCQIJG IDzc0pdLn56gH6NUXhAQBJIIApiDP3mSTObhSeR5SzMFgZgiAMIsLkVMMuMSTSlLEBAEBAFBQBAQ BAQBQUAQEAQEAUFAEBAEBAFBIMEjIIRZgn+E0gBBQBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBASB uERACLO4RFPKEgQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEEjwCAhhluAfoTRAEBAEBAFBQBAQ BAQBQUAQEAQEAUFAEBAEBAFBIC4REMIsLtGUsgQBQUAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQS PAKJjjBLl9aDvFInumYl+C+aNEAQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEgYSCgOezrigIrU3z i1NI6GPy9EhG3Yeco+NnA2NVjTTeHjR1SD56qZQPIYxoCs9k9N/JAGr74elYlSuZBQFBQBAQBAQB QUAQEAQEAUFAEBAEBAFBQBAQBJIeAs+cMEvjnZzS+3ow0h4UEvIkTrTB1s4oQrlzpLR5et6pcQ8R VwiAYCxe0Mua7OylIArm5yIiCAgCgoAgIAgIAoKAICAICAKCgCAgCAgCgkBSReCZE2ZGoEPDHhs/ xuj4xZI+lCt7JFn2JILrCQyOfdkxqlACy5SMGbM1TDgGMV6pUyWn5u+dpNMXghJYK6S6goAgIAgI AoKAICAICAKCgCAgCAgCgoAgIAjEHQLPlTCLi2ZUL59WmWGirPDwJ/RqmyMUEChkWXSwBckIsuyx wBYd2CStICAICAKCgCAgCAgCgoAgIAgIAoKAICAIJFIE4hVhVjBPKivMV26EsC+y5FSmmBflzZmK zl8JppPngujegzCVBo79c2RJQcUKpLbmgVZZ9swp1Ocbt0MpW8QxlM7OXw6m/LlT0Sulfdh/2hP6 ed9DeuQfrtImZ7NEmHQWLeBFGdN5Kp9qZy8Gk1+A5br1BoYDD/a/hvq+WMKHHviF0enzQXT1Zijl zGq5/2O+Ke4JwX1xDwjSQJtLC87jupZL10IoNCxCTS7ipLdXciqUNzWVKOSl2n+KNcAuXg1hgss2 XQauewZl7kpc98d0+24o5c2VSvl2Cwx6TDC3PMUY6mwZ03uq9sIsUwm/F+A2oVzgL6aZEbjE4q1k ieyxyC1ZBQFBQBBIOggcPXY9wTVW+vgE98ikwoKAIPAcEEiI/ftzgEluKQgIAvEQgXhDmGXJ6Ekb 5hWzmgb+ddifypX0puTMKIHQAYkEDagvv77Br5tU5eW0NHVwPgpjrTItINFWTy+itKWGT7tMI/vk tpYHsq1Q3lQEogvSrt9p+vd4ANWs5Etj+uZRvtQQLAD3AqEGIuvnfQ9oxPQrVmJN3+f16ulp5Ie5 KWWKZCpwQTgTTKgbghggf3DIY0qVksm+hv8qUm/jl8Ws5zp9fIYOHPHXRVH5F9LQgrEFrfVs/M4J unDVQrRB62sU36du1XRE3ExPrh/uFcacIYImjJ55hbbuum8ta8aw/FS2hDdBY+zy9RDyYaINQRbQ ZuQLZ/7v0rVg6j3ivLo+sFtOalgzvTU/kBn3cV7Vrla9T9KJs2KaaQUnFgenTp+PRW7JKggIAoJA 4kegSOH8CbaR0scn2EcnFRcEBIFngEBC7t+fATxyC0FAEIjnCMQbwgzaURCQRJBXyviod/0PZBak a+usdI41tzwiVLZAUmnBOY9Uls+InAnR5RU1aKJpP2fvd8xOXdtksZalywERBqlbNT1VKJuGGrx9 wqpt1rVNVurTKbsixnR6dV9LtdUpkGWhTLpBMme0aJzh3M07oeqc8V9an8h6au05XEcdflhUnDJl sH1E6l7ssi1VSg/67KM8VLqoN02cf1UV6cvkGASkXR5TEARdR2iqzR1TgJp2OxkRfEFlsebTbY88 K0eCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCCQtBAw0T/xrOLTKYNYIc0wtME/8sHN2OncpmA6y ppbZbBLnftn/kP2YRTWnBFF2/2GY8nWWnc05u7aOJMvg/2zPX49oy877dOeexewTxFN6X08a3Te3 ur1vGg96v0M2K1kG08pf/3xI2/c8UCaQuo5x8T5+QF4bsgxkG+q298AjqykmSMS2jTNR4XyRZqnG e6O9yHfibKCNGWgmNsWsyhp6u/54RP8cjdR2Q16YbaI9d+9Hxc9YthwLAoKAICAICAKCgCAgCAgC goAgIAgIAoKAIJBYEbBVX4pHrUSkxrf6nLL60Zr8SV6qV81iPgjfZFduhlBHNm8c2isXtWmUSdX8 GvsHwzmI0dQQn4+dCaRO/c+Qjp65bFIhq3kmzDrrdTpGt+5aiDKkXzyhkPJ3huNabLYJkmnQezkj 8zCZV6fDMXroZyGWQF7NGpmfKpdLiyyxkvTsh6z2q2yGGSG7/3xEvYaf0x8pX86U9P2XxdlclSgF a6INYQw6D7C0WyeCCeYnky7RVibZINDg27mypDI1RV3Lv+BDkxdeo6833aF/NpZRJCDMSj/6/KJE ydQgyrsgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgkSQTipYbZIyahBk28aCXL8GRAGmmBuWMab/er DiKozfunrGQZNMdKFfHWxdGRU4EqsMDLHBBAvxatuWm9Dh9g8CNWvkwa67k/D/tZyTKchDbc3gN+ 1uuxOWhWN6M1SADKWbXxtrVeqB/MPI8zAailTDFv5d9Mf8b7H4f8rGQZPsPcE7hCYB4K32YigoAg IAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAlERiJcaZqwcFUUQ9dEqTHiBBIupKEf4Br6tdFEvmsd+ vZwJSCmYZGr5lc03n5agPkb5Ykg+40d1DNJLC8xJdURQ6zk7+CCYgYggIAgIAoKAICAICAKCgCAg CAgCgoAgIAgIAoKAcwTiJWFmr8pPtKd+exejeS6FZ3IVfVNnszjSZxbOicA5vw4wgKpoP2dOssT4 Uro0to/FSI7ZKxTRQT0i+TN7SSLOCWHmBBy5JAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAoKAQsCW mUkioASHPCaQXjDNhCCAwBl2du9Mftz9gKpXSEsenAn50hm0zZzli8m1R/4W00mdd8feB/rQ7ntg 4GO6+8A2j92EclIQEAQEAUFAEBAEBAFBQBAQBAQBQUAQEAQEAUHAJQJJkjCDo/7QsMfKlxcQOnU+ iD4aeyEKWJM40IBXag8KDX1MV26EkD+bhWqzzEovpqVV7DDfKFoDzXjOeJw8eTLlqN94TpN2xnP/ HAtQPtNwDuaWE7+8Rlc5yIFRqnCUy3ZNMzPrR3Sbo3r6mUg2Y1o5FgQEAUFAEBAEBAFBQBAQBAQB QUAQEAQEAUFAEHAfAbcM+dwvLuGkhKN/LbVf9aVc2VPqj+q9dqV0VJ+jclYvn5bqRESsPHsx2Jqm yitpyMcrEr58uVJR97ZZrdf1gdF0E4SaMdhAnhwpafgHuXVS6/v3P91VGnA4gYAD4z7OY72mDwb1 yEnVuG7VXklLjWpaoofqa9F5N5q6JuPmwLxTRBAQBAQBQUAQEAQEAUFAEBAEBAFBQBAQBASBpIxA ktQwwwMfNPES/bCouNL4ApG1eX4xOng0gCNmBqhomMUKprZ+L/wCwunIyQCaOP8qrZhaWJ2HX7Ht y0rQjt8eUNbMKahi2TRWH2fWjHxw/XYohXMUA/hJS+/rQX27ZKfXqqRTPsdAniW3w0/dfxhOMMOs y+kgZUv60K6VJWnXHw9VNMzK5dJS5gyRj+7rjbaabiqTm/9gmor6AQNYqH7WLw+duhBEG3++Rzv3 P3SzFEkWGwSCg4OZIHXtXy5lypQUEmKraYj7evCXKAVfMwvSPuboGB4eHpQiRQqbyzivy0qdOvK7 jkShnO/S5UuE++XIkVPl15l1mfqzo/dUqVKx6TK+Ue6Js/qgBI0R2oH2GMVV3vv37tHNmzcpfYb0 lCVLVpt6AXeUDUF7k5t+kKGh/PsND1fncd0oyHuPy7516yalTZuWsmbNxr/PyN8l0hrrZsyLdOa0 xutyLAgIAokLAd0XoA9Fn2vuT9Ba9L2BQUHqmr2+Tve/9q4Z0UKfdpn78NSpvbgPz2HTr+m+1Jje 3jHqp8cIe9dxDn08+nrUO9xOJCZ7faqjshydD2I80BZvb2/Knj2yLWFhYYQXxNF9NObGstEmLy+v KGMi0uAa7ofy8NLncN7hM+MxIjAw0OaZoQxXgv5f199ZWqRDO/Ayi71x1thme7hgTMN46O/vR3ny sBUFYxFdAR64j725hfG5uFMuxlE9V7BXni5DY4oxWj8bfU3eBQFBQBAQBASBp4mA7eruad4pnpV9 jU0c56y8QT3bZ1NEETS5Xinjo17GqmKOMnD8JULkzn9PBNAfh/yoApNjEAQCaF4vozF5lOPHnPHb H+9R6waWdLjPiyW8o6Qznxg44SK9tLQEZUrvScy1UUZ+t3evC1eCaeby6+bs0fp8g0m9XNksk8MC eVIRXgHsF00Is2jBGOPEDRvUpXTpnGsJXr16hWbMnEPv936PcubMZXMvTFyfPHmszvfs2ZvKvFBW XW/atCEF88S9ZcvW1Pv9PjZ5vv12HU2dMkmRQXv3/akWVJcuXaT5X86lf/45SKl4QYeJbGhIKFV+ tQp16tRZkWfN3misJqtmYslYOOq6ecs2ypQpk/G00+MNG76jL6ZOVhPwyZO/oHIvvWyTHhilSZOW ChUqRFOmTre5tu3HH2jUqOFqAr//97+t137/fb9qIxYzWOyEhYWSBy8+mr3RnJo1b6kWYA8ePKDX 69dR7Z8+Yza98kp5a34cDBv6Ke3d+5taWHy14mvrtV9++YlmTJ+m8EvtlZoehz8mPz8/atr0Derc 5W1ehFh+49u2/UCjR42gbNmyW/PiIDw8jBcJyalgwYLUp08/ypc/v811+SAICAKJC4E///yDPuzT W/Wr6O+3/rDdhshCa1u3bk7Xr19XZPqw4SOpXr3XrSA8evSImjZpoK5VrVqdho8YZb2mD86eOUPT p39Bp0+fVH0QiIjHj8OpevWa9L92HShz5syqv8uQwfm8xdl4o++F9zt3btOu3Xupb78+dOrkCfLx scyNdJrQ0BAm1FJTjRo1qes73VSfq6+5ej/J5c2cOZ3QJi9vC6nzhOdTNWvVonbclls3b1HHjv/j cSYzlS5ThsaPnxSlyD4f9KKzZ8+qejZu0pQwVoDsKVasOC1dtsImPYhEjAUYLyArV66he/fvUe9e PdQz8/X15We2I8qGzZttWhLwAon5yadDqG7d+lSzRpUo47TxZkiPNqxZ87XaxDFeMx7fu3eX2nfo RDt2bKNHDx/ZEEVqfGbyC+NPg9cbUYeOndT18+fP0f/atlHFoA0FecyEBAQE0Jw5M2n7tm3qOaRM mYLJwWAqXrw4vfnW/6hcuZdUOnf+tWndgu4zNvVfb0CffDLEmgXf3Z7vdSN8Vx89ekidO79NS5cu VnMHayLTwc2bNxRxCPIPv4sVK1erDShjsu++/YbrPosePnxAvXp/QB0YExFBQBAQBAQBQeBZIfDM CbOAoEhNGh/vSE2RoODI3bN0aSPPayCgdaUljSGfPxM7Wp5QZNkhoZHHJqURnZzmMmF26Jg/jRuQ lzKmiwoFggGMmnmF/jrsZ83zzqdnadSHeeiN1zLwgtd6mielRCfOBlKJwlF366CZBu0yrTGmc8E/ 2fY9vGCvYSFLMhjqEMr1r9P+KI3um5ca1UrPE2udy/KO9v2w+z4N++KyIvNwNjDIgEXkoTVjcEgk Jqivlr5jLtDSiYWUOSbqBFIP7yLPBgFM1DGBdiUPHtxXSRylxYR46NDBNHbcBCpRoiQF8cQfi5Vk 5i8Pl3L50iVF9mRn7QMIiCMsLrDzbN71/mHrZvrrrz9o8eJlalf67t1I02SVOQ7+rVzxlVXTa+nS JVEIM9Tpxo3raiK9adP31LhxU+tdr/N5kIbZsmWznvt61UpasWI53b59Sy12QPAhDQQT+B07ttPc eQvUZ2guOBJM/PF8dF6kmzBhHO3e9QuXfVtlw644tNAgP/KCbM+eX2nelwuZ4EujFg645uiZYZe/ N5Ogi5cs48VsFlWG/BMEBIHEhwAW+yA5IOnSpVMbEy8ZNgbOnztn7VPSZ8gQBYD1679RfREInT/+ 2K8IevQxWkA89OjxDpMKDyNOYYJiuR8I/gMH/qY5c+czYRTqsD/SZeHd1XiDNFrT58H9+2oMwThi T3bu/JlOnDhOM2fNtXc5yjn0lyCq7LUFfffBAwdUW7DB8ddffyqybucvPzOZVtta1tatW+jw4X8V QdamzVuULn16dYwEGOfu3r1LGTNGEoe/cb+t+/G0TI5BgIF+ZiAZ//77L6pQoaK6hn+XLl7kcemG +pyey9eCDRpHfb5Oc/nyZfaP6/xZaC1kkHwYyxzJxo3r6dy5szTms7EqCcYkX/6OaQkMDKCOHdqq 7xc0tfSzRdtAep4/f566vP0O1a8fSdDqvPbeH/MGHcoJDIh0bQKy7L0e7zK2FjyGDB2utNdwD2dY QMNt6LARNGL4UEVWTp40gUaMHG29LcZZEH34LkDjHUSjiCAgCAgCgoAg8CwRiMoSPeW733sQRmUb /Wu9i6ZlLl4NsTkPjS6jHDjib/f61MXX6At+meUnNmk03sd8XX/ed9CParQ9qgit8mXS8Lsn3bwb Qgf+CyBztErkwXx36NRLNHL6ZXqZNdJKMUF29HQg/f2fP7V7I7NdwgxEVr/PLqiAAS+X9qG8OVPR 4RP+9N/JQALxBW0yLcZ2s9IKfTr5Ig2ZcpGKFEhNxQvCjCAZHT4eoAIVGNMi/1t9TiltOV2W+b1h 1+PW60Z4j50JpAot/qOCeVMp0gzBDS5djXtSxFwf+WxBADuqgUx2QRRxxVoIMB1s36EjlY3QFkvN GkuXWQMMAjOK8RMmUb58+dXnM6dP0/r139K3365TO/zffrOOBg8Zpq65+2/t2tW8Y2xZ0GEHt0WL lmpHetXKFbRq1Qq6yYuCFUxqLf9qFQX4+6tig3kS371bV8qWPTs1Z42tShUrqfOoawY7Cz5HdcGO OHbStUCzAIsDewTSmTOnacniRVS+fEUbgkznxfsVXogsW7aEF0R3GA8f6tv3I2rc5A2luTGXd6l/ /HErB/04r4iz1q3fNGZ1ebxv317eof9R7Z5nzpKFBgz4hLU3ahC080aOHEZH/vuPST1fpdmGRYCW 9Okz0MZNW60aJSeOH6dvvllDmzdvUqTmls2bqSNr8YkIAoJA4kcAJMuO7dvISJgtX74kymaFEYl1 a9daiXtoBm3mjQNoBmmZOmWyIhW8vX2of/8BSvsH/eUs1tL6/ff9amzY+P0GWrnqayvRcYf7yI/6 faj6WmjGli5VWhWHPvzChXPqGNqx6EOzcz9vFl+TZnTZsi/S7DlfqmTY5Ni9eydrLc+jixcvKI3a Cxcu8LiVz1xMlM9TJk+0tgV9bN169QhtmcHac9DU8+b6bd2ymaZ+MYPq16vNhMxVmjZtitpoARmJ cXTqlImK1MmZMyd9yPVfvHih9T4BAf70y88/UctWra3n1q1bYyXUrCcNB9evX1OaXkbCDOMMtIXt CTZiOnbsTJUqVY5yOWWqlJQ+fUbqwphr6dv3A2XiX7RoMfqUNdUgyZn4ypUrN23Zskl9rlatOo2L 0KQDvmjDl1/OUe0PCwtX7VYJTf/Gjv2Mrly5ojSsoW348YCB5OubTrVn0sTx/KzP05zZM1VdgV90 Bdi816ObIsug1Thy5Biq81pd+umn7aoojJWDBg2mzJmiap2n47ERZsObN21kIvh3JpIP0H4eZytV flXl/fSTAeq7AA00aNk7026Pbr0lvSAgCAgCgoAg4A4Cz5wwQ6XMRI+uqKPzzq6DwDKSPzqto/P6 uvkdGmzb2R+ZuxLGGli//+OnXu7mQXTOX+z4BXOn3SfOBrEGW5DTW7lqs6vrxqAGTm8kF+MUAU18 oVAQR5hwYoe4UKHCVJw1xbRcuXJJHUKz0cPD02oaUrRYMRow8BPatWsnk0LX6NSpkzqL2+8nefcf iwiYnfzvf+1V2T4+aeiDPn2VSSJIrYOsodCjR09rmdhhRl09VV0L2dTVmsiNg2Ws8eXnZ/Gngt1u aF2tW7uGerzXyyZ3ihQpeUeeffzwbvmY0SMIJpS4v1nmzZutdtCh/bB+w2areQcWfNi5hskpcAKx GF3CbOLEcYosg2bC999vsU7eQWIuWLCE+vGiByacmPgbd9Utz8zDmr5kqVJUstRI9cxADh4/ftTc DPksCAgCiRSB4OAg7if2KAJMEwC//bZH9btay8nY9OPHj6l+B9o4MCdEH7Z69Spq82Zbax946tQJ lSVr1izUoGEjdR7ky6RJU9m0s7YinE5ymjZvvmUtGv4X9XhTuHARmz78IpMoEJgaFuFycuWydQWg Lpr+QZsZYxcE73Xr1ieU2/at1kxGBRPGEXcIszNnzqgycuXKycTf69a2TJkyjcuspbSpTp8+peo2 bvxk1o7uyeOGP00Y/zl99vl4Gjx4kCJZoOk1fUZUkgVaw3ADoAkzfMa4adREVhUw/EOaP5h4xPPR bdyzZ7cykQV5ZRbgWtA0hpvTGDXc4G+OZwCUkUkl47hvzJM8uYf13qjD6w0aUlbWrO7Vszt/l8LV xo1ZYxqaWbt5bgB5nU0ohwwZro7xr1GjJryJmky5NMB3Adp6deq8Zr3uzoEmy6ABDvzGjZtIVZnY M0pK/g4VLVpU+fk0njcew9UCyE9oqk2YMJY3574maCbiuaCtXbt2o9y5cxuzyLEgIAgIAoKAIPBM EHguhNkzaZncRBBIIgjAXBALKpj8YBcWfrGiK/CJs3v3LmV+0rxZE6pcubLa4S334kv09ep10S3O 7fQwSdmzZ49aELVu86YyoYEG1ybebX7n3e42jvEzZsygTDzOnz9PGZiwgl+TFi1bRbkXTI+wqHn5 5VesZJkxEXapz/BiC/58tIBM/n7DeuUvR5/DO/zfaIGpiR+baGIh9M67Pazkl76O92HDR1GjhvUV sffrr7vtpkE6tPvgwQNsYhWizJoK8aJSRBAQBBI/AjDdgwYUNgAOMfEFf40wx8SmAYKHwAzcLIsX LVAavwUKFGTtoE+oQ/u3lDYUCI7y5Suo5MWLl2Tn+Jf5OBm1avmG6r8rVqxML75Yjn7ZucdcpNuf QQb9vn8f5bJDVuTNm9epfyqQNWtWW3w/ok/OH6EV7ermIAWvXbuq+sdWLZtRlSpVlSlkWW7Lzl2/ 2WSvUKEC1WNTwh9/2ErHjh1V5M9/bIrpiGTRBOWtW7fUBhVMLWGOCUIMJpDYjDJLxoyZVFqMrwfY LLM8m2VeYrcGD9mvmK9vWoeaXX+xNhzymAVjDzbEYiswK8U4CLPH0NAwJpTyKM1qY7m7dv6iNO2g 5dy167vGS+q4YaPGyn2Ah6cHlS79QpTrzk5ggwuaZZosA+ll1MDTedV3iMlGBMYxCzYMsZkF7CdM mEzvv99T/RbgP/Tw4cPKTLNIkaKigW0GTj4LAoKAICAIPDMEos4MntmtE/eNYDopIgg8DQQwse/R vatyZG/VruQDkDDwaQMnwdGVpm80o40bNyjCCgs2+OI6wH5iUGbWrFnp/Q8+pDJlojeZdqcOP7NJ SVAQnPJ7URM2m6xerQb9/NMO5aAf5jy1a79mU0zLVm0Ii0eYoa5c+RVVtGPugoUDpHiJEjZ59Yc8 efKwWWse9fE++96BQFsORBteRkH7tcCMCr5koLXwwgv2scBiGM6UsSC+du2aVSsDdWrRvCmTbRaN WA/WFECgBmjM4ZkhMIOIICAIJH4EoLGFPhUE/A7u60CYLV++VJljgpjRTuc1ErpvAtHzVtt2KvAJ 0kEzFfk0YQaH8wcP/k3Q4oKgH4VWcGBgEOVhYqt3rw8I2sjRlVAOlrJmzSrOZjunwQZNu/YdbXxK HT3yHzVv1ljdAmNTCiZBHjyw+FTLxaaF7gY3gTn7oUP/KFNOFLZ9+4/KFDOQxwqQhr3ZbYCRcBox YjRrf0Gr96p6IU/RosWUI3wcGwXuAtCvQ6Ma4w/6Xm2O+cILZTlgwiljcnWsnxm0n35iXEGYQTMa 5pgwYYT/ULMojTT2NQdtY6PgvkWZEITmX3Rl//69VnzxPFAvPYah7hh/4IrAKKfPRLYHPsDsSfUa Ne2ddnkOPt3wvcSmHb6TZTj4gj1BBNUVXy3jS7bfIfhSe5t9p7VmH3OQl9kn3euvN1QmqCCDMd5C Yw7a5CKCgCAgCAgCgsDzQiD587pxYrzvAfZjdutuKN2+F8b+yaJOoBJjm6VNzx4BEDf37t1ThMx1 JmXwwg4vZOaseaxhVihGlZq/YDFN5R1iOFLGJPjy5UvKdPHo0SP06ScDlflgjAp2kmn5siVqUgzi aCsHF9i77zelHYZFwLKlS6LkhHbX9OmzlJYXNDJGc3RM7ZRZJ4ZpCsTezr5OY35PzqFo/fweKaIO 0TT1C+e04N6YwGORYr6nToN3mM3geggTm1pQDkxXQKLheV25clkt7FDHJUtXqIWOTivvgoAgkLgR qFu3vtJogmYTyIbffvtV9SvNmreI0nD4OQQhg3QgW+CrUpvyYeNAO1mHv0ZEJwZxVoyJMfSP0JCF ptZpNmv75JOPldP6KDdwceI+jzXQpkKfZXxBewz3NAr6R/Rxup+zaGE94I2POjTLTYf/KA/lIoro wEGfKlM+tOXcubOq7zzB2tQf9+9Lh/89ZL01+uYZM2ervhcn4ccN44QjqVy5isIfWsUgtk4xPtBw QnAAR6Kf2X7WtsOz2LNnt3pmTTnqsj0JZye0FzkogBEzHN+5c4d9sMH8MvqCump88VzhGw7E5Rtc hwkTJ9stMIgJU0hyj6cz3Qf2mC/gGY0YPsxuHSzfIdvvD7DA5hyelVEQHRbfb7QVWoIfDxgULZ+o xrLkWBAQBAQBQUAQiAsERMMsLlCMKOPfEwFUu/2xOCxRihIEoiKQhbUT4JQfu8VYLMFhPLQK4Edr 69ZNKkw8cmESC78xj9kUxixB7ENHCRM7mPB+s24t+wJ8QjDN1JHMYLKyePFC2sSaZ/BvMm/ubKoR w51o8/3xGRN+kEgQ+Ob5ct4c6zG0LHB/LJKgUWCUwmyeAd8za9es5kl6ZuXnxHhdRxY7ecK+LzeY 7ZzjhaQPa3bBSTUExNWEiVMUWWgsC5HasNMNgdkI0ukFFsxEzIIFALQOUrD/tPwFClgvo33wMwes oQUBB8dYMEAjAFoDrVhzTkQQEASSBgIdO3VWGrIg3+GIH2QDNE3r1q2nnPQbUVjFmrQwZ0Tfs3TJ InVJE/Yg4tEPduv+nvLJhYvQygWBAkEAlYUL5ysfVhgPlnB+mKpHRzDOTGPyyR0fZggQ8F7PXrxh QEq7bfv2H9Umw5Ej/9E17uvz5s3n8tbQqEMkZAhIqubNW6rjE+xnc+GCLwmm7pkyZVJBWyZN/kJd w7/ChYtQ7jy56SIHFihVqhTZizSqE3fu0lU5vMf4ib4YfTo0h19ygg206aDVDN+YeGYwx0zL5pj1 6r2uxkZdtn739vai4az5hqAwcSX58xcgBGcAvn+y5trPP+9Q2nIYQ7CJZnQzoO+px88Unil4zLli 9zluYVIWUoY1pzGPcFdSMWZLliznKJaz1HcMWoHwDWp2lZCN/awhKrU9k0x792rRohX7BP1SmSg3 aNDIXhI5JwgIAoKAICAIPDMEns6W0zOrvtxIEEh6CHjxJLV27brKdKFjxy7Kx1gBJmcQqXEPLyZg DgiB034QT9AQM4vRNxdIHDizB2EFckxLFhUFchCbtXRWp+AvJS5l5YrlaqEIggtRQWHSgRcWaNhZ vn//nlqg2Ltnv34fK7MmmM8g4qRRiha1mB1h8m7PH9BnY0bRzJnTCNHBoiOI2pkqVWq1uFq6ZLHS MjDnnz9/rkULjdtkXChhMVa/fgP1zGCC8s23GxQBB21BaNlBY0FEEBAEkgYC0KpB9EYQNmPHjlHm mFmZbII/LaNgIwSBYNBHgiTSfWSmTJmVqRqInq1bt6j86M++YhNNRE7Ugr5wPEdVBEl2+/ZtusZk /dOUHNwmmNQ1YGf0nw4eqqIq437QkFvG/Zy7grbA5BHjmRb4NcOmRtkXX1RtOX/+vL5kfU+ezDKl BTnoTDBewl8c6gUH89CMA0Y8FDoUbHrArBTa3Hhm2BgBQWWPpHJYSCwvwN+XxheaWAsWLlElIuDB mjUWX3HmW8C/G8Z4aE0jMrNZEJVy3LjP2ER0Am9QnTNfdvoZLhRAyMHRP/yKYsxesGCeImqdZnRx EdFBlTh7IC7KkMuCgCAgCAgCgkBcIeB8VhFXd5FyBAFB4KkiMGzYKFW+J+8ib9v2gzrOkzePegdp tILJKSzOcLx580Y6zlpWECxCIMWLl+Ad84cc+XG90jaD5hf8vMCn16aNlt3+NGlsTSdUxhj+A0G0 fft2lbtmzVq0ctUam9dLL72stCpgsoSomGbBAgB+TewtjPr3H6BMZfz9/ejtLh1ox/ZtEeZMAbRy xVfK1BTkX53XbP2jme9h73OvXu+rxYef3yPqwmX/+qslUMIFXrwNGzaYfuDFK9pWrtxLTIjlsFeE 9RxIPy1mPzf6vLwLAoJA4kSgIUcoBOEFgdYStIbNAo0wkCHw47Tumw02feRYJinQD4K42bNntyKA YO63du1qFcAEWsEggtC3/PffYbUJkSOH8z7JfH981tEXsSFj72X082jODyf0CDqAcQeBA0K5Pq4E mwswyYTGFHy0QQMMZB+w2r9vL49dx1Rb3Im26exe1arXtOKPcbNdu47OkqtrjZs0tebBM2vWLKoJ rbEQe3jpc/bGNWNed46hVQdSFBqKGHu05qExL8wbMb7juwEyFRtGVy5fVknOnDlNw4cNVd8T+N7E uBsdwfcPgnF49ux5TOymYB9qd2nQwI/V91aXBQ1JmOfqtpvfw8Isfkd1enkXBAQBQUAQEATiEwJi khmfnobURRCIIQIlSpbkBZOv8pkCgqt16zeZwBnF0dKaESbF8NWyZcsmjvLoxxNZPzVBxg579+49 1R1HjhpD7du9xaTaTV6kLFG71SHsVwxmHHAinCpVKho6bGQMaxc12969e5T2W8qUqajL21Ejd73X szf93bWzqueWLZujFsBn8ucvwE6nO7CG1lKb63nY7AcmIYjOBn8v8+bNZv8509WiFBoFMPmBJkcv doKNxWh0pEnTNzggwlZlpolyZsyYRpMnTeQFQzJVFkhHlD16zFiXxcLRMhaHN2/eUmYslewEMHBZ iCQQBASBBIlAu3YdaMH8eYpg9/Lypjp1bAn8MA4Usve3Papt1ViTx7w5ULFiJWXGqYgl7gNBwI8c OUyZeq9atYI1j1dSAPdv8KWFvgoaan379Y82VmFMdkxm7SN7PrBAvKxYsdppmV1Yo/bvv/9S5B4i Mdd5ra7T9LjYt29/GjNmpGrLV18tVRs+6LtBvKAtIIE+7PuRy3KcJejCpo1bePMIZcJ8EuaI0JBy Jm3btlPml9gUgZbga6/Vc5gcRCIiWGITyiw3WbN4yNARUZ65OZ07n2EqOmTwIKVB9g9HXUUQArNM nvIFNXujiRoPDx06SH369FbtRjoQqzANhlkvzIJjKtA069atuzLPxJxh6JBPqFHjJqq4x2xDOm7s Z3a/Q5fYz9vadevtmorGtC6STxAQBAQBQUAQiEsERMMsLtGUsgSBOEAAu8Tat5e94uBI2J7UrFWL d5gf04kTxxVJBp9bY8eOJ/iVgXNgOIiGOQkWHPAlMm3aLCpYyBIgAKYe8DGSM1cuTnODLlw4r8x3 kA9RxUaOHGP192W8N+oKvyjRlblzZvNOfRD7EfNRUd/M+UuWLKU0JrBzPn3aVGVyBDLPLCC9cubM pU6j3lqw4BrGBB+Ivsu8qANxdoF929y9e4+qVKmqzFixSIBgIYaXPcHCCKI1QXAMH2893uul6oTJ Pp4V/JKBfKvFzq3Xb9ikNEKQVgsWtfbklfIV1DPbvXunXfNRe3nknCAgCCRcBOCbEYK+KS9Hr4TA lBEbHhBohd1hjapdu35RWr/Q4unUuYu6Zv6nCRv4KkMETJjppWbTwXPnztLZM2e4b7quomlCC2ny lOl2A8KgD9dBY8zl4zPIHWgEQYvW/NKaQTrQCnxmmgVBZGDOiP572bIl5st2P0OTa/CQ4WpDAWaC Z8+iLddUW4oVL84+1Wbb9bUFbTsIIns6Er1JgnFDY16xYmVF6CEPxoJHvPFhFI0PtMowVkIQ6RQ+ KCEgx6AFpwVjLJ4jAueYMcNncyRU5MPYDQnmvGYJDbG0B+SeWRBQAWMZNLvg5gCCdPcMLhRgyvv9 95upJG+sYTxEveBDFOMi5gnDR4xiDcdW5qIdftYBbfT4qBN27NSFSpQoqeYYe/f+xoSkxTfaLX72 jr5D5jJQVnL+zkOMbVAn5J8gIAgIAoKAIPAcEEjGkyV2Hxo7QVTIuStv0OrNtuGsY1dq4syNeUC6 tB4UGPSEgkMsE6TE2dLE16oDG8pQUHA4Exvumw+ULJGdTp0+Hy0w9AQSCyW8jKKvmbUNdBp93ZwX 4dtBpKXxSUsFChZUCxidx/yOyT78ngUHBatdd2e7zvbu9+jRQ2UiYi7X+Pnx4yeKiMNCytxGnQ5d k7l7MrdLp9X1sIcLtL7QHvhJKxRBEOp8eNd57ZVtrIO9sjGhR9l58+XlHfI8UbRAXOV3dd1YTzkW BBIzAkUK56ejxyzRfp9VO729Pcg3rSddvxGV6HG3DtHp43Vfo/sS/fs39j06jfH+Or3xnD7W6Y1l 3L/P/T1Hk/RM4UllypRV2rU6vfld57d3D33NnMf4GfnstcOYRl9HvbBR4krgL1JvaCDC4vETx1Qb 0BZ93l4Z+j5GLHQ6fQ2fdVv1OWN63WadxvzZWR5djs6j723vXafV1+yVq6/p8sx59HWdF59Rb51e t0GnwzuugWDFuFimTBmeC3hbL2PTSZOf1pOmg2TsJw5kIcRRffT9TVkdfjTX09wehxnlQoJBIK76 97TcX6dOlZxu3XZt3p1gwJGKCgKCQJwjgOVzjuyp46zcZ2qSOXd0ASpVxItCQt3n6Dw8OKrcjRD6 X9/Tcdbo51FQ0fypaeKgfJQ3Z0qeXBJP+pLRig23ady8p+uE93m0Ve4ZOwTMk0djac6uIZ2j6+nS pacKFSoZi3J4rKKFuenLxN79Jk2coMwWHd4g4sLYcROoVq06DpM5mozby2CvHjqdr68vOTN3dJbX VR3g6LhK1Wr6VlHeXeV3dT1KgXJCEBAEEiwC5r7G3u/fnMZVY+2lh+ZTRTdNvO3l1/d0dk2nwbu9 dti7PnBgfzr87yHjJbvHS5etsPrXRLTLSpVetZvOfNJZPexds3fO3Gbz55jkMdfT3md75ep05jro 8/rdnNdZelyDTzN78kbThvZORzm3//e/o5wznnB2f2M6R8fm9jhKJ+cFAUFAEBAEBIFngcAzJcxe KO5NaX0iot9Eo3XeqRO25WjWTClozcwi5MF+jrSEhj2hVCkTdrt0W+RdEDAi8ELZshyp877xVJTj dOkzsHlQ4Sjn5YQgIAgIAoJA4kSgBvtt9OEABs4EYwM0zESePQJ169ZnDXpbc1RzLYoUKWo+JZ8F AUFAEBAEBIFEjcAzJcxiiiS0zBKyDOiW04YsCw9/ws7U2dxO+LKE/Fil7g4QaNmyNeElIggIAoKA ICAIaATas4N6vETiJwKjx3wePysmtRIEBAFBQBAQBJ4jAs+UMHtv6Dn2F2KrYVYgdyr6+N2cCgJo XU1fdp3OXoz0cQHzxYtXE7atevGCkTa0V2+GUP3Ox5/jI5dbCwKCgCAgCAgCgoAgIAgIAoKAICAI CAKCgCAgCDhD4JkSZoeOR41Ed4cDBmgJYSf4vx/0o2NnAvUp6zu0zPKx/y8tF5hEy5Y5BVUqm4bg Ee23vx/RzTuWSEIw+yzCPsNyZUupCDoQcOcvB9ON26HEvsZtpECeVKT1167cCCVP5vNKF/Wm/Ezk XbgaTCfPBdHd+5F1NGZOww6DC+VLRSUKeZN/YDhdvxXK6QPpwSNLJCNcz5rJk9L7RsJ870E4FeR7 Qs5einQ0DGvN3DlSUrGCXpSB0x8/G8jEYTD5BdhGRfJkzbS8nE7L+SshlDNrCqrAOKBte/58SAjC ICIICAKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAQMwQimZyY5X9muUAyfTu7KEcpfKwipIDIKsxk VfIIv2Afj7tIu/98RF8MzkflX/BhJ7RE2pSTgwJROLNJfv7hNHDCJdp38JGqd6b0nvT9vGLWMv/+ z59eLOGtykT+UA5OABJq0dqbNIejgELbDYIILdOH5aMKL6RRzm7Zh6q6Fsamlkjzw+77NGLaZer/ Tg5q+XpGaz7khfP/1dOLqDLKNj7MEYmeUO3K6Wh039zqnDLV5HsjMAKatmPvAxo544qquzG/EQeQ dto/Wp/R5+nnfc59UKAcEUFAEBAEBAFBQBAQBAQBQUAQEAQEAUFAEBAEBAH7CCQYwiwdhxKGgKyC FC0QaeYIogoE13ezi1BO1iozCwgtEGsZ0nkqoqvxuyeUthk+Q3SZL5f2scmKSJaQjs2zKG2zzb9Y HJkvGl+QyrAWmlFwf5BdkMa1MpBvGg/y8bLUFde0oMwUVp02oj6ds1OXVlmshJdOlzLi3vWrcbQr 1h57/e3jFBD4mJzhAN9oIoKAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAKxQ8DC6MSujOeWG9pc MH+EBlndqulsyLLL10Pox1/v0/ptd8loCgpybGB3i880exWHHzWYb+Klxcc7OX3QKbv6WLlcGipV OJIsg1nl15vv0CYm0x76WcwnQdBVfSUt/XXYnw4e8VdaZLqsMC4f51Z+f5vysGlll5aRZBkIr1// ekRbdt6nOxFmoCDbQOyN7ptHFxHlXeMQzjig/iKCgCAgCAgCgoAgIAgIAoKAICAICAKCgCAgCAgC MUcgwWiYmZt4jgmtTv1P072HFpJq/mcFrUlAXDVgjSyjLBxbUPn5wjmzJplOd47JrzYfnGQTTQvp NGFgXmpQI726nJ413DKyCWeVl9OytpolB4i6Fj1PktbsypMjFW1ZWExd9GSfayC/Zq+4QT99VYKy ZkyhzsPEEuajkOWTC1nNRkGk1e14jG4b/KUtnViIXipl0XqrU9lXEWcqo+HfGfbP1rH/GStZZ7gk h4KAICAICAKCgCAgCAgCgoAgIAgIAoKAICAICAIxQCBBEmbBHBzg7YFnrGQZ2r1s/S06eMxfQfDP 0QDKlT0lO8NPSZkzeCrNs+zsGF9LqhQRjJc+we/QVBs85ZKVLMOlXX88tBJm0NxKw5pmiHKpBcTZ /nWl6M9//en7n+6pwANlGv6rLzt9h38yo6ba4ZOBlI8DDeClZSH7TnupVAH1Ef7YXquSji5fi7w/ /Jx1+ljIMo2XvAsCgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgEBcIJEjCDJpd2tm/BuFXdvi/jyNs wifY+AF5yIcjVMJ1GKJKmuWJ9t5vuADn+2bxC+AbRQhMI3Hf77bdY2f+Oa3+ymDiWa18WtY84yiV fP30hSClVbbr94dRInLqsvAOM0utqYbPLxT3onljLOQYPtuTF4p52RBmaIfRP5q9PHJOEBAEBAFB QBAQBAQBQUAQEAQEAUFAEBAEBAFBIHoIRFW1il7+eJMaTvI3flmMOrfIQul9PRWhZQ2ZJxoAAEAA SURBVI8si06F7RFrgUGPqceQc3TrbphNUSDwcL/ihbxo6pB89NXUwirKpU0iwwc4/zeSfohymSpl 8igvQxZK6+Nh/CjHgoAgIAgIAoKAICAICAKCgCAgCAgCgoAgIAgIAk8BgQSpYWYPh2lD81NuNsPU cu1mKDvd96MjpwLp+NlAavV6RmpcO4O+HKv3P/71o9rtj1LZEt7Urmlm5RstI2uMaW0vkF+li3hT 2yaZaQU797cnwewnzaIhZtGAgy8y+GVzJlt3WaJ0Oksj1wQBQUAQEAQEAUFAEBAEBAFBQBAQBAQB QUAQEARih0CiIcxeLmNxjg84/j0eQO36nbZBptKLaW0+x/TDe+2yUZliHCWTLTi37r5HA8ZbHPh7 sWlm1zZZqNtb2RRxBvKsegVfh4TZvYdhHNGSWKPMUpOT54KsZRnrNuXTfJSKyw4NfUxXOPKnb5pE 88iMzZRjQUAQEAQEAUFAEEgACDxm/xNXrlymDBkyUpo0aRJAjaWKgoAgIAgIAoKAICAIxAyBxGOS afBVBj9iRkmX1oNaNYgb7TJEq6z2Slrlt6xPpxzW2wQGP6aZy2+Qf6AlaqflQlS/aNYMfHD0dKD1 Y92q6SgHBykwymuvpiOcr84+0urwMSmvbMYUcpxUEHj06BG9Wrm8y9eZM7ZE8fPCBwuqZm80VvXd 8+vup1KNwZ8OpGpVKz2VsqVQQUAQEASeBwJLly629vNXrlyJUoXLly9Zry9fvjTK9ad9Ytu2H6h5 s8bUulVzWr5sydO+XZIrv1fP7vRG04ZJrt3S4NghIPOh2OEnuQUBQUAQcIZAolFXQpTLjOktzWlS J4OKknmUzTGhDQbTyRQGQs0ZIK6urd5yl4b1zqWSZc2UgrYsLE4HjvgrDbBK5dJyJM1IP2M/7n7g tLhPJl5U+eH835OjYG5dWIzLCmAiLYDKv5CGihVIbc3/yD+cjvH5inGkKWctWA4SBAIpUqSgtm3b Wet66dIl2r17J1WsWIkKFy5iPZ8+fdwQw9YCDQffrFtLixcvoJmz5lL+/M4DVPz99190/fo1lXv9 hu+oarXqhpLi5hCBOsLDjQR13JT7vEq5desmdencgdq0aUsdO3V+XtWQ+woCgsBzRACuGrDhANm9 6xdq+7/2NrXZtWun9bpOZ5PgKX9Y8dVyCgsLo6FDR1DRYsVifTfp92whxDMNj3j+tlcS1yd57u49 T3fnXXny5qMSJUu6V6ikEgQEAUFAEIgWAomGMPvy65s0qEdO1XiQYxXLplGvaKHhRuJ1W+9QLzbL zJTB4rMsT46UhJdZzrM/sm+33TWftvl85UYIzV11g2DmCU9mHkyalX/BR72MCTF3Gsimn3YCeRqT yXEiRiB16tT0/gcfWlu4c+cvijCrU6cuNX2jmfX80zwICAyg27dvU0hwiMvbbN68kby9fahWrVq0 detWwuQ4S5asLvMl5QShoaEKX39/v6QMg7RdEBAEGIHkvJOGfj4KYcbncO15kGX+/v508uQJatio MTVq3CROnpP0e3ECY4IrRJ67e4/M3XlXjx493StQUgkCgoAgIAhEG4HnTpj5BURqiPgYtLPMLQkO sey44rxX6qiWpHCun5ZNL99tk5UQMdMowSFPCE71Sxb2UqcRjRISxGaUWjKw036z3HvATsYixDeN RXOMN3+pcbfjNKZfHqpZ0Zfg4N8oILd+2veABk28ZD0dGBh5H3P6OStu0D/HAmjcx3kIgQPMcvZS MI2aeZn+PuyvLhlx0O0w55HPSRuBGdO/oIMHD1C79h1pzuwZ/LvwpXe79aC5c2fRRx8NoLJlX1QA wcyzV6/uVL9+A2rXrgOTNbdo7ZrVtJO1Gq5fu0Y5c+aizp3fpvqvN6CNGzfQ6tWrVL7BgwdR69Zv Ups337ILdEBAAO385WeqXfs1ata8JW3evInzf09vv/2ONf2ff/xOM2ZOo/+x9sSOHdsJGmlp06Sl Vq3a2GhX7d+3lxYs+JJgapqXd1Br1qxFrfjeadNG+iT87bc9NG/ebDp/7pzSfPuof2QboYG2eNEC 2r5jm2pT7jx5qEmTN+jNN9uyr8FkpOvRps1bqp7/Hf6XVn29lnLnzmOtKw6cYYPrWLwuY1OqH37Y SlevXqE8efPa3AdaI507tacKFSoyMe5BW7ZspoAAfypfviIN+mQwBTIZ2bfvByhKYXX23FmaOHGK +iz/BAFBIOkhULNmbSbMfqZ79+4qX2FA4M6dO3SY+6jatevQTz/tsIIC8mH+/Ln0E/elN2/eJGga V61aTfXTBQsVUgGGnPU/6dKlo9CQEOr6TmeqXr0mvfNON2vZYz8fTTdu3KBOPBZMmjRelbWX+9yO Hf9Hkyd/wX1XIM2ePZP+PXSIQPaXKfMCled+Dn0sNnogxn74Jpf18ivlqW7d+jwWlbXb702ZMpFO HD9O875caK3Hju3baNnyJTR8+CgqWLCQtT8NCgriTZnNqn4dOnSiv/76k76cN4dOnTpJvr6+9Er5 CtSnTz91bOyHzfmsN+ID9OffffuNwv/QoX8UnsC8W/f3eCOIfdiyOLsPrmMcPnDgb3rn3e4Oxyc8 txkzvqCff/6JghjHl19+hTeXbiG7EnfqodPq94sXL7h8Hjot3jUm5RknPCdg6ePjo8bZli1b09jP xxC0Gn1906r2N2zYWGV35z6Yh2z8fgPt2fMrf4fTU7lyL3O5bZTfO0fjnTNcdV0xjsb0+e3i+c2q VSuoR49e9OqrVaxQfDF1Mh04+DdNnTqDVq5YruZQHTp2onlz5/Dv7rYau4fxdw/4YE4B8rhWrTo0 YMAgSpEypXUugbnR9m3b+Hd6SGn/9+3bn1J7pabRo0aoeUzRosWUdma+/PnVvfGbnjp1Eh3k7wra VLRYcZ6XvU+lS5exO+9q3eZNu9/9+/fuqe/b4iXLVbmOfnP1679ubbMcCAKCgCAgCLiHQFSGxr18 cZbq4tUQKtvoX2t5jrSoDp8IcJluLpNPC1ffpBKFvKhcKR8C4QVzSWhyQWypLaLL7ETfeG+zx7HD JwJtruu6+fk/pg9HX6CUTLy9Utqbo3OmYhX6J3T2YjD9dzKAnfnbltSk24ko97Y2mA/2HXhENdoe pQzpPLi8NJTe15Nu3glR5pkwxTQK2mOss66TMY0cJzwEjp4Opm9+fETZs3hSq/pp1Xchpq24evUq HT16hIYPG0z58uWjQoULEyZTJ0+cUJM8XS4m6zhXrtxL6tS4cZ8TFkLNmrWgjJky0fbtP/LiZAjl zJWLMmXKTFkyZ6HbPJmHCWj2HJH++3R5+v2nn7ariV+9evXV4gnk0/cb1hPIN2hGQB48eKDuPWL4 UCrEC7qGDRux+dEunujPUGYFmLz/+usuGvDxR5Q9ew5qzwuhc0wizeOFkJ+fn1XbDguKj/v3oypV q1KBAgXpF154wJfHd99tVJPYMaNHqglupUqVqVHDJqpMTIwxScWkVNcD6eDAGpPUlDz5NYszbLBA HD/uM9rAbQQ2WCj+woSh8T4o78SJ4+oFArN2nTp07uxZTvcTL8bSU3deiBUrWpwunD9PGTNmpEK8 IBQRBASBxIMANtu27PKjvQcC6dWXvKhhjTTWyNr2Wlmrdm0mUnbQr7t3W7WIYYYP0qBmrdo2hNmc OTN5kf+V6ssbN26q+rfvv19Pf/yxn9auW682B5z1PwMHfcoa7E9Un1ykSFGb6ly8eJEuXb5EINXQ v505fZqP01PJEqV4w9CDPuzzvtIgRn+fN19++odJkjlMoD3kPl5rRRv74Xr1XmcC5hc1Pk2bNstu v3fl8mXVVxorcu++7Rim24P+uniJEjxGZSJssPTr10dtqDRp+obqT7fwhs1//x2mFStWq80Ke/mM 98ExCBUQXiCw3u76rsr/9dcrFY59Puzn8j6enp68cXKVjh076nR8AomybdsP9HqDhpQ7V261sQMf dZmzZFFVclUPc70xHrrzPMz5NCYZM2ZSJNC+fb/R9GlTaRNvlAUxiQOSBd9FkGcVKlRSY5Sr+4Do 7f/Rh4oca9mqtSJTMQ+4wITe2M/H233uz+L5tWjZSn3Pt/KmlSbMQpgs3sC/lzw8V8H3SM+hhg75 VOGBcyCoL1y4oIJd1HmtrtK0xEYizCBbtGhlnUt8NmYUlSxZisf415g4+5EGDfpYYViseHGqVr2G mqNMnDhOubbARhncMICQq8ZuK0B0b+M83bt1pS/nL3I479LPy/jdP3rkiM1vxtFvDm0sWaqU+Ssg nwUBQUAQEAScIPDcCTPUzV3Sx510IKv+ZXINL7PY0liWq67KdHY9hLXe9h6A+ZRzEypMlO3d21y/ ew/Caftvzv2eIY+zOpnLlM/xHwF8ZwdPvUUPHlk0EfHev2vGWFccmlbNm7dU5WDR4EygJQDn/CB/ Bgz8RCWFNhcm7CrgAO/EQssLC4AuXbo69V2De4EEgpYBBIuBBfPn8eLtdwJxZZQaNWrSmM/GUYoU KahqlWpK2wDaZiDMZs2cwRFiU9GChUvUJBb5sKv77bfrWAuti7WYTwcPISwSIShnE2uzYVIODbIf fthClSu/SlOmTlef/9euPb3dpSOt5sXPW2/9z1pGZW7fhAmTVX7ryYgDV9iAyIMGHRaay7+yaOH1 eK+XCnqg7wMSDAKz1Fmz5yptOSxu6r5WU2nXpc+QgXq811MtnqpUqcrHvSLuLm+CgCCQGBD483AQ TV5kcdOw759AyprJk8qXifRTam5j8eIlKEeOnIpc0mb3u9gcE5q/xVgLxSggsXBu+vRZaqMA19AX ov++ceO62nTAOUf9D665Emh19f3wI/qRtWih4dPvo4/p0qWLKhs2CXq/30cdQ8urRfOmSkMHJzBu mPvhFi1aqjRr136tygFpFJN+LwP3m3PnLiCtrdOu3ZuKUJy/YLHqY3H/yZMm0Nq1q5W2DjaDIOZ8 6qTh3z//HFSfRo4aQ5l5owh99ZTJE8knIiIotKNBXDq6jx53UYij8QmbR9iUeq1uPRoxYrS6H7TC O3dqR/6spQ1xVQ+VyPAPkUshzp6HIbnNYdas2Vijb4H6zmEj55NBA5hg9KQlS1coAjJnzpw0a9YM Os5zAI23s/vs27tXjdfQsNP+V0G4QmPPw9PD7njnCte4eH558uRVG2PQTIdWJbTD9u/fR4GMeQOe qxhl2PCRBII3LCyMateqRtCqm8a/MWwyQpMc3/PD//6rCDOdD5r1Yz4bqzYHg4ODCZqR7fm56t8H ND3//feQSr5q1UrWCL3B2m49qTPPqyDQ6H+vx7s0d84s1sKfE2Xehe8dxPwdBrGuxdlvbtGi+TSJ NUNFBAFBQBAQBNxHIF4QZu5XV1IKAokPgRu3w61kGVp3/GxwrBuJybhx0u6qQC8vL7WbDhOSj3iH Hjuh2H2FY+foyJUrV9QkH2aPMAnAC6YsIMzWr/82CmHWoEEjK0lVooTFYS204UCMnT9/Ti0msLur ZSoTX0ZBOzVZhvMlipdUhNm9u3fpGgcdwOQSi02QZxDs/MP3ztQpk3iX+bg6h39vNG1mrYf1ZMSB K2ywy4wFFRYDxoigxdghNkxRcJ9KTNpBXnyxnHUhh7rD/OI0mw6JCAKCQOJG4OR5i6a7buUJ7ued EWZIB02yb9atUSbb4eGPFbkOkyyzYBEPOX78mFrU3+M+FEQ+5Pbt21bCLK77H5AP3373PUFD5/ff 9ysN5PsP7lNYeJjVtPDIkf+i9MPQ5v1l5x5VPxAPMZVXXqlgJW/gCgDEYS7WiL7ImkB4QbQ2NOqh CRdjPnv3rlzpVdbs20Xv9+6pxiBsumADCuOIO/fRY6+z8ek6E5kYn0DIaMFYAy0vTZg5q4fOY3x3 53kY0xuP4aoBBC0E2tqQKmzWq90f6HN4vlXdeO4VeXPMw8ODFi2cT5dYS7Hyq6+qtjblsRaCjTij uINrXDw/3BPzDmh5/c6beDBdhguJ5KwtWY/dU2jBs9PPBvOGPOzOITQ0zKqRD+IaG3rAwyjQtERe iMYMm4ZacA6/U2iXHY4gzjJlzmwzd4AW+n/8fXUmzr7Drn5zzsqVa4KAICAICAJRERDCLComckYQ eKYI5M7uSeVKpqaDR4N4Qs7kTZ1I/1zPsiK9en9AEyeMI+y84oXFAaJbDhs2gifNvm5VZeuWTWoR AHMgvIwCMukuE1kZI7StjNdw7MkaEZAn/Hfj+nV1nDVr9AIFQKvCUgZZy8iWNbs6p/9l4510CBYs 8JvmjjjDBv7eIPBtgpdZQNw5kpQR9XV0Xc4LAoJA4kCg7qve9PWmBxQQ9IS8UyejulV8XDasNhNm q1Z+RXtZWyecSSiY0cNvklmgUfLpJwOUyRjMtGDaBc1YiNZIMefB57jof9YxoQdtGD8/P+X7ytc3 nTLH9GUTTojuy839sLoYh/90VGZs2vTv3zdKydfYRNJdadCwIZ05y5pxW7fQ/C/nqhfcGwz6ZIgy TUU5MbmPcXzS44aj8RD3cFYP7UoB6Yzi6nkY0zo6TuFpGUeN1/X4rM+5ug82uvr2608LF8xXWuHQ DPf29mFfc12ok0FDXJf3rJ4fcINW39Spk5RLBGi9w/1DhQoVrJrsuk7Gdw8mzUCYGQUaePwDM56y OQbRZhbjuWsRcweYcdqThw8f2jvt8tyz+s25rIgkEAQEAUEgkSAQtTdPJA2TZggCCQmBSQOzcvCH IGWmkyvb0/tZOls8we8GHMbChwoIM/j4wC779+y0F0EBXAnKhjN77JB3edtiXqDzwOcGTCU3b/qe OnTsrE87fIeJIsTvkXNzZ4cF8AVdxsNHtpNO/TkDLyphauGOOMMmQwQBCD9k8JtjljRuknLmfPJZ EBAEEg8C2TJ70prpueifo8Fqg8SLSTNXUppN5DOz9slu9vmFvgq+reBnUZtC6vz9P+pLDx8+oAkc KAQaM9BwgRkizBGjLU4IAHNZ8JU5aeJ4Zco/ZMhwq7YXTMrg9wziqB82l2X+7GysMqfFZ5ioQeCf Ceb1ZvG0QwKZ0+jPXl7e9PHHg6h37z70G2sJ7+ZxcAcHjpkx4wsV6ADpYnufNBHmnTDzwzO1J87q sWjRsihZ3HkeUTLF4IS790EQH/j3ghkm/KNu4vF/3tzZHPChXpS7PqvnB9zgj+/VV6sq/4C1a+9X 2m7QOnvWgrkDNOnhykG331gHBK2IicT0NxeTe0keQUAQEASSAgIWveGk0FJpoyAQjxGAZhm0zJ4W WebtY9FmgFN5LWdOn9KHyh8HolZtWP+dihAJ3yQzZ81VZgpw0AzRZgbBIfZNRuFvBeY1devVU9HZ EC1Kvz74oK8yeYRjfHcWQth1x6T299/32ZBay5ctUX7Obt++Za27owNtDoEFj1H0Z33deM3eMdrk DJtChQqrbH/8+YfydwOfN3j9+OMP9Nlno1WETXvlms9pfGHeJCIICAKJDwFvjvANh//ukGVoPbR8 a7AvSRA2MO+uWaOWOmdEBiaX165dpYoVK3OEyxrWfhqBTaIj0H7C6xwv4LXAbA4RMh3Jf4cPq0vw B6n9WoHYu38/0kxN97O630UGaMoNGthfkW32+j0fnzQE/0/XIzSNkQfmls4EZp54HT92nDFKbu2L UX/0w/D/5q6M/Xw0jRo5nGAiCW2kUaM/I5gYwrE63AzExX1gPglBQAItwBvPUouzetgbA915Hrrs 2Ly7c58trG2OcRPmmNDqgpY2XnBf8Ctrm5uf+7N6fho3aO+BZJ4yeQJ5ceRT/M6etejgPogwq+cN CKgBlxHw4QrRODmad9mrs6vfnL08ck4QEAQEAUHAMQJPT5XF8T3liiAgCDxjBOCQHhOvDRu+VWYH N2/dVGYmuhrwXXL+3Dmae+wYJUuejP115FXmCo8fh1tNgLT5Ipw+w3cHwqMbZfPmjepjfYMfEH0d O6VVq1ZXZf7991/6tNN3OPZHpDJEvXyrbTs2NzpP89kX2ksvvawml04z80VEOCtVqrQyB4Gz63Ll ytFunqhj8YlgA1jgnXLDf5grbLAYwL3g/w1RRRu83pD9CF1UZkowjdJ+YVzVV2ui/cnEGwIkvPJK eetk2VVeuS4ICAKJEwGYYH6zbq1qXC32B2kWaKAVLlxEOS5H35yFzdj37NnNppwrzEmdfsb4gHJO HD9Oy5cv5QABWWjFV8vVJoiO2mguoGLFSorAW7Pma0qTNq0yA8Ux/KfpPOZ++IWyZZXp+k4msAYP GcZRFC1m8cZ+ryj7f0QggBnTp7I2Un3VZ4OAcSXvvtudtcvGKj+cbd58i1KnTk0L2YfW5UuXmLz5 yFV263XUacWK5QTfUq+y/zJoyx365x+lSQdiIy7uA7+WiAD9w9atVLZsOfJh0mbRogWKJNTYuaqH tcIRB+48D3OemHx25z758xWgfXt/ozAmR7EBB0GUTJCyCPBj77nHBa64jzu4oQ5wNQHT2kaNGqvv CvI+S0H0702sdTd//lx2V3FH+TjdymbAiMjZp4/FrNg87zJHsbVXX1e/OXt55JwgIAgIAoKAYwSE MHOMjVwRBBIkAsmZ8DILHCH37z+QvubokCB1sJBo36EjO+RdQMl5Nx6aDEPZV9msmdPpc96Nh2Ay /+ZbbZWWGD5Xq16dsi/KTvBdgiiUM2bMxmkliDb1808/KaKtJJt22hNMShF9CxNETFYhyXiRZhbU BwKtBfjhWbZ0MUeK26lIOkRn+yBiImmvnSD7tKBN48ZPVO2ZM2em0mzDovC11+pxJNBBOpl6t1cP ncAdbD77fDxNmjSew8hvU1HkfFijDw6Tu73bQzk+hlYdysHLKJbPlnMw0YFzYPjN+eD9nrR9x06r w2VjHjkWBASBxIuA7v90C7FBAG1b9BVmv1Xco6hk6BNnzpym+nacgEPyatVqMNG0U13HP1f9D9LA DHEum8zNmW3pL0HWoc+E70lIcg8P9a77WWw6dO36Lm9KfEN9Puil7lG5chU1DgQFBVnS2umHQfJB +7hRoyaqfHO/17JlK9ZMuqCIA5AHuXPnITiLN/rFtNeeZs1bEDRxEGQGGmJw5F66dGkaNnyUCrbi qB9WFTX8+x+7ILh//57yHwetZmggVWINvne7dVepXN0HiVyNT/BlNWHiZOV7bviwwapcRIcuWLCQ 1SG+q3qoTIZ//2fvLOCjOJs4PATa4l4IHqyUQL8WLQ7F3Urx4k6B4lrcvbhDoWhpcXd39+IU1+IE /eY/yR57l7MkRxpght9xu++++uzu5XZuxJ3zYapu2QzEMuDvlPnPFepAcM25Mw5cVpEZctbM3yWm HNrD9RRK0kSJE0tftufdFVdPnT8MjuyY+fPn5x8RF/Lf3RIyH+M/e+cO9yXuhUBihsQH7X2XMN/T XuGNPsLxdyxv+R7Vt29vUeyib9y7VapW5+9eVWUo2+9dyIQb6HxxTf85B5wjnpPtdx/zPScd639K QAkoASXgNoFw/AfIccRKN7u5fe8ljZt1g+YuC5oLgJvdazUlECYI7F/0FT3ze8VfZt2Le4VJ+6b1 ptNnLoSJ+RuTQIwyKMPMwWeNY3iHSwjcTvCQYitwp0AGNih3YGUWGoIx4RaJX/ah6AuOICMV3HuM zFbB6QNtnLHBcbhTIngxxnHEF/Wcyf379+WLuZGdzFldPaYEPhQCqVP50PET/sk+QmtNkSOHp+jR InACEPtu5u7MIyx9xuMzDkH/nQWSd2dNcOeEJZC7MZTwGQ3Xu3jx44sbo6Mx8DmMvhMlSiwP/eZ6 9j738HkKFzp8ngZF8LX2Bid1QZB5d9dgr3/MCZY/iXm+ULDYiqfGwXkDbwTKtyeu5mHbxt3zYdsu qPvujIMf065ywoUYMWNyMoqYgYawd949xdUVt3p1a/H3mbv0x/yF9pVhgWb77gow1ydPHtu1SAfn 4H7vcnbPvbvVBO7ZU5/v0fjzOuJnXnTrtoauCExZS5SAEjAI4LeMBN7Be2Y0+jC/q8LMTEO3lYAT Ah+KwszJEvWQElACSuA/IeCpB6qgTP5DU5gFZe1aVwl8rAQOHNgv1u7z5s4R10dYdKm8WwKe+nxX hdm7PU/auxL4UAh4WmGmLpkfypWh61ACSkAJKAEloASUgBJQAkrAIYHOnTqI5eBXnIX2h4qVHdbT A0pACSgBJaAEQEAVZnodKAEloASUgBJQAkpACSgBJfDBE+jWvaeETEBMQLtxyT54ArpAJaAElIAS CAoBVZgFhZbWVQJKQAkoASWgBJSAElACSuC9JIAsnypKQAkoASWgBNwlYKRrcbe+1lMCSkAJKAEl oASUgBJQAkpACSgBJaAElIASUAIfNAFVmH3Qp1cXpwSUgBJQAkpACSiBD5OAZGr85xI9evTow1yg rkoJKAEloASUgBL4Twmowuw/xa+DKwEloASUgBJQAkrAn0DnTu0pT+7s7xWOv0+dohzZs1D37r84 nHfXXzpLndOn/3ZYx9mBN2/ecPus1K1rZ0u11atXUrmyJemHCuVoxvRpBHa5c6m7nQWQbigBJaAE lIASUAIhJqAKsxAj1A6UgBJQAkpACSgBJRByAq9fv6GXL1+GvKMg9NCyZXNq0KBOEFpYV/0iTRpK lsyHNm3cQE+fPrU+yHtPnjyhTZs2UPLkySl16i8CHXe3IF26dJQ4cRJL9Zm/zxBWv/zSnQoWKkxJ kiajtL6+luO6oQSUgBJQAkpACSiBkBLQoP8hJajtlYASUAJKQAkoASXwnhL49949evjwYYhmX6Jk KRo18lfavGkjFSlazKqvjRvXk5+fH5UsWdqqPCg74cKFo4mTplqaPH78mP7++xQVL1GSMDYkJMo4 S8e6oQSUgBJQAkpACSgBEwG1MDPB0E0loASUgBJQAkpACYQVAlu3bqEaNaoSXBohiNk1bepkqlyp grhuVqtWiebMmUVwWYT06N6V6tSuQc+ePZN9/IdtlOGYrXTp0pHOnj1D169fk3EuXrggVW7evEGd OranEsULU6GC+ahx4wZ09OgR2+aW/aJFi5OXV3hauWqFpczYWLVyBYUPH54VacWlyNUasJaaNarR 6FEjaMjggVSwQF6aMeM3KRs7ZhQdOLBfLOJQb/u2rTLvW7du0sgRw6l2rR+NYV2y2rN7l7RdunSx rA/unJcv/2NprxtKQAkoASWgBJSAElCFmV4DSkAJKAEloASUgBIIYwQOHToocbmePH5CzVv8LLMb 0L8PjRs3hiJEiECVKlUhv2d+NHzYEBrDiiSID7s9Hj9+jHbu3CH7+G/nju1ShmO2kjJFSooUKRJ9 +uln5Js2HUXkbQTQr1XzR9q8eSMVKFiIKlasTBfOn6OGDerSsWNHbbuQ/bhx41L27Nlp966dBIs1 Q+7evUt79uyh7DlyUuzYsaXY1RpQ6dSpk6IkW7RoAaVImZLicFuUXb16lWLEiEGpUqWWvmLEiCnz /iTCJ3IMdQxxNc79+/cJ8dd69+rB6ztP6dN/xRw+NZrruxJQAkpACSgBJaAESBVmehEoASWgBJSA ElACSiAMEYDVV5vWP7OSKQ6NGj2O4sb9nM6z0mrJksXievj7zDnU9KfmNHfen/T55/FoLluZ3blz h4oUKUZwX9ywYZ1lNRvYJRJlOGYrtevUo4QJE4kyq0PHzhQ/fnyaPet3unv3DrVr35FatWpL9Rs0 otGjx4sV27ixo227sOzDNfLVq1e0Zu1qS9maNavY0uuVxR3TnTUYjWPFisVKs9k0YcIUKla8pFFM KVjJ1/Ln1rKfNeu3hHnH5LpmCco4UOYtXrKcxo6bSPHixTd3o9tKQAkoASWgBJTAR05AY5h95BeA Ll8JKAEloASUgBIIOwTgstiieVOJKzZ6zHjy9vaWycElEsdgXbV1y2bLhNOkSUNw3fybraug/MmQ MRNt4/0XL15IHWyjzOjH0tDBBqzIYGlVooR/bDBUg5VX+q++oqMOLMxQJ3fuvBQ9egyCC+YPP1RC kWzHjBmTcuXKLfvurCFb9hxSN3PmrJTMx0e2g/qfO+MYfZYpXZY++eQTY1fflYASUAJKQAkoASVg IaAKMwsK3VACSkAJKAEloASUwH9P4MGDBzKJhQv+Eksv7Fy/dk3KVqxYRnjZyjWOQwYpVqw47d+3 l/bu2S37cLFEmbty/fp1sThD3DGzwPrq8KFDhLlFjx7dfEi2oXQqUqQo/fHHXLpy+TK9YssyuIdW qlxFXEhRyd01BOo8iAXujBM9WuA1BHEYra4ElIASUAJKQAl84ARUYfaBn2Bd3odDAA8gP/xQzmpB iGPz+eefU5IkSallyzbB/jXeqlM3dubPn0dDhwyiCROnSNwXN5o4rbJ+/Vrq0rkj9es/iPLmzee0 bnAPdu7UnrawVcbmLW9j+wS3L3fbYczNmzfRlq073W1iqYeA1jlzfEuFChWiHj37WMqDu3HkyGGJ QRQ1ajRasnQFffbZZ8Ht6j9vFxKuQZl8rZrVJROfozaFWTnQvXsvR4ct5e7Mt2mThhJwfNHi5ZZ2 uvFxEoD75JSp02kIf8YuWPAn4Tr75psMFCsgBljDho2pVOkygeDg3obkz1+QBg3sz26Z62Uf1mIo c1dgEfb33zcDVX/EmTTxNydq1KiBjhkFJUuVFoUZgv+/YWs4iNlSzd01GP0F992dccxWesEdR9sp ASWgBJSAElACHzYBjWH2YZ9fXd0HROD1m9fijpM69RdUpUo1eZUtW17i2ezmbF+1alWXGDehsWQo c+AahJcnJBr/0u/rm46iR/N/4PNEn7Z9vH79hl6+fGlb/E73kyRNRml9fYM9Rrp06Shx4iTBbm9u uGzpEjlfDx7cJygobeXP+X9QyRJF6MKF83IIWeewP/23abZVQ7TfsmVzyXAXlE5s24SUq7tj4/qG YtG432zfc7D7mzviznwx1isP3U/uzEnrhF0CUJjB7bJD+06ioOrXtxe9eP6cUqZMJZPezZZjiGlm vFatWkl9+vSi27dvyfEoUaJQHv7hAQozvLCNMkcSzisc+fn5WQ4nT56Cnjx5TAcPHrCUPXz4gA4d PkTJkiXjbJiOvzqmSfMlpUyVSlwxV7Jr5hdfpJGX0ZG7azDqB/c9tMYJ7vy0nRJQAkpACSgBJfB+ EFALs/fjPOkslYCFQEaORdOsuX/GNKMQVggD+velTRs3EB523jfJkiUr4fWhSaNGTYK9JDw0T5w0 NdjtzQ2f88P2Wg7EjYx3B/bvp0ULF7CLVglzFXry9Ak/cN+m537PpRzxj7D/+PEjq3oh3UEGvYds qRIUsW0TEq5BGRd1ocy1vd+C2kdozjeoc9P6YZcA4ndV/7EmTZ0yiSbzC9dRpkyZaf/+fdStWxcq VrQ4Xbp0iRCIP2bMWJQgQULLYnB/r13jH3zf9l63VArYiMaWacePHaN169bS119/TdWq/8jJBRZR 926/UMtWbShy5Mg0ZfJEevrkCdWoWce2eaD9khz77Ndfh0k52pslQ4aMbq/B3C6o2+6Mc/LEiaB2 q/WVgBJQAkpACSiBj4yAKsw+shOuy/0wCRjKJrjdQWCtMv23qYRf+K9evUJJkialUqXKUKVKVSRb GizE4G6GDGPPnj2TeDg1a9WhH/nhzJ4g09m0aVPoH3448/FJzg9mCayquRqvR/eudPHiBRozdgJF jBhR2mLcJo0bsMWCDxUvXoJGjvqVWrRoJQ9TqLBzx3aaNGkCIVtcUrbUypfvO6rAgaSjBVih7d27 hyaMH0unT/8t8XQys8IN7e3F1rGabMAOgmRPmDCWfJIlp569/F0enfXpag3duvcMNMzIEcPl4Xbq tBly7MCB/bRk8SIJ0B0rVkzKkCETr6miWJPYNjbOUbZs2alxk59oD1sRglHVqtVZ+bWG9nGMIjzo VqhQkR9ia9k2t9rftGkD+ccxKkGfs2XKHM6od/HCBYsLLx6O586dLW06d+4g2fTWrF0l+8jKd+78 ORo0aKjsO2OECs7W2KVLRzmfuF5q1KhKvXr2pYSJEtHEieNoHa/p5s2b8uCPAOEIGo5A4/baLF68 0IorMvNBqYDsfIhdlDhJEofXO+IyLV++TCxosmTxz7AXI0YMWVtw/kMsqdmzZ7IyoymZLc6GDxtC +w/so2HDRtKsmTOs5gtl5MiRw9nSbx09e/pUrvlbt/ytg4w5IOPhsGGDWcG5T+7RL9hyp2nTZhYX aOPaqle/IY0fP4YunD8v92brNu1Y6fGN0Y3T+8jVfWvpRDdCjYAXW3uZpXbturRm9Sr6fcZvVLRo MerTdwANHjyAy1aLFVcUthzLyfdLg/qNyBxzDJ8buK69vMITtp1J6TLl5L6F63DHjl2oTNlyNHTY COrLVmvt2/lno4wcOQq1bt1WYpQ56wvHinK8tFGjRjjMzOlqDfjsww8GeJnFXOYVEF8N1nGG+LN7 u+9qHKNdOCcWc0YdfVcCSkAJKAEloAQ+TgKqMPs4z7uuOowROH7Gj/5c9ZC8P49AFYpEo1gxrIMt u5ruju3bpEqKFCnlfUD/PrRo0UJRxEBJBrccPMDjIRwP3ZBTnFENL8S3+TJtWooTJ46U2/63ka3W funSib7gTGx16tano6yU27Rpo1U1V+P5JE8uSrmdO3eI4guNoRBDQOi8rAi7f/8+Z3g7RQ85mDRk y5ZN1K5ta87qlkAsLM6zwmY8K8eg9IG1D9q2atVClGeI5QPlz/JlSwmZ0WbOnGsJMC2d2fnv0KGD hIfDzz+PR81b+FvruerT1RrsDMPKyqvCGMfu3btLbVr/LPF/vq/wg1huLeZzdPHSRRrLikR7gvMD ZSHEYASrj5SsSIKScfOmTTRmzEhx+zSUpvb6ARtkr8ODczxeMxRmCxctYAVjS6keJ05cUaTdZqUN XMESJU5Eab74UrjG5rhJKQOuK1eM4LblbI3oB4q/Fy9ekm/adBQxUiRe+yhWKP3OysOMVLJkablG oRDbvXsn/TF/oYxt28bMFQvo3auHXF9YX4nipeT6cXS9w2Isf4ECdP7cOb4v1rGCLia179DJHjYp gys03OHsSQQOcp4+/Vdy7a5gJZyhMINF3yJeQxJ2p8V9ZTvfXj270+rVK0WxkDhRYlH0Xb78D8Xl eISQp2ztV7vWj8ziNmcezCNKxNWsNGnYoK7EDUyXLr30eeLEcWrbphUrTHKJZekGVsDhul6wYAl9 wve1q/vI1X1rb81a9m4JQMljFnw+z/9zobmIevfuR8+7PqfrHOQ/YcJEdj/vELj/8ePH4k5sVqRZ dRSwU6BAQcqZM5dcdzFixJRS/JiycNFScfP0e+ZHCRImdOqKae43VqzYtG37bnOR1TbuOWdrgGJs x869Vm1sy/DDyM5d+6zq2LJzNU7BQoUJLxUloASUgBJQAkpACTgioAozR2S0XAmEEoEXL99Q52G3 6P5D/3hgeG9TN7bD0S+wpZbhaoMH8wsXz9OCv/4Uy62q1fzjmMEqCLHOZvzubzXUqHFTKlumJM1l RUnlylUlAxoGiBUrFo0bN8liaWRvUFhxwapr7NiJljg4vw4fKlY1qA9llqvxihQpJm5DUFDAUgyy YeN6iwUClHBmGT1qpMSOmjR5mkWRh4e/v/6az9ZUtcXSClYIcFk0FEpDBg+UYNOwlipX7ntzd1bb sFiDUid27Dg0avQ4iQOECrDectanqzVYDWJnZ8f27fIAC4sgxMKCQDkF5R0UTVDkuCNIitC7T39C RrpcOXNzsofmYm3mSGF2+/Yt2rVrFwcJLy0P1lB8QrG6YvlSasKWa+gHih5wgQIGFi2oAyslKHXw II3rB+KK0WeffuZ0jbXr1JMkCHDJ7NCxs/R59swZQtyjESNGi5IHhZgTrLZu3LhO9tpIw4D/MO+V K5dT9uw5xCoGD9a4D+rUrhHoeoeCdPSYcXLNwLqqUMF8ws7cn+02lIi5c9u30EFgdl/fdKI027Zt qyjWoKiCYhjua8XY0sZWzp07S7DYxIO6kTCgWvUabPFZjR5zG8js2bPY2u6GuODV4vMBKcLWRY0b 1Zf7aOSosVKG/zp17iKKRmyD21K+96GETZUqNTm7j/Lly+/yvnWkRMdYKv8tASjSjM8+80xwbx3m WGOwuETcxvLfVzAfdrgNy1/D+tdcCXHS3pU4WoOnxwutcTw9b+1PCSgBJaAElIAS+O8JqMLsvz8H OoOPnMCN268syjKgOHnOzykRWJMZFmVGRSgC2nOAaPyyv3XrFnHJxAOzOQtYGlaC4NjfbLWUjZUL kMyZs1qUZTdu3KC7d+8YXcrDN6wX8ICPh3W4/hgCNzpDYNUF5YOz8bKzQiYDx17bxuPDHQ2CbZR5 e3uL1ZrRHxRjCDwPhYL5gX0YuwhBnrBSAUqWRDyHSxcvygvl3gkS4I2OHTvqUGGGebZo3lRiaI0e M17GRht3+3S2BvTjTL5l6ydYeiAWEFxbs+fIQYULF6XSpcs6axboWLFiJeTc4EDatP4JBRDjy5Gs WLGcz88rypf3O4KCFYJYZhMnjCPEvHPXwsIdRo0b/xTkNf7KijLIyZMnOB7TRbbEu2dJXoEYaua4 TFLR5j+cbyg6S5cpa3HhQia/EiVL0bChg62ud2QaNJQMCFwON8czp/+26dF6F0qE4iVKWhcG7EHp CsE5GTSoP+1i6zm4k25ki04vr/Cc3bBYQM23b8Z8ce4NicSWdujLUJgdYYUHJE7cuFb3MJSqR3m9 hmANsMozJO2XvqIwu3f3rigund1HUCy7c98afev7+0EACuTWbH0LafpTc5f3z/uxKp2lElACSkAJ KAEloAT+GwKqMPtvuOuoSsBCILF3BMrgG5EOHH/GD/xEZQo4zxSZJ08+gksfBIqB+PHjy0OR4XaD GE4QxFbCy1ausRuPPUGMnD/+mGs5BGWVYcliKAYsB00b7o4Ha5v9HHdrL2d4gzx69MiuBc4NdiWC xIsXT95t/4MbEuTKlSvUpo2/S6G5zjV2g3QmDwLcPhcu+Ivate8oVd3t09012BsfPBEAe/KkiWIp B2s5xAWqWas21WSrueAIXAIhb/ifI4E7JgSWaLaycOFfbivM3GEUnDXiAb9Tx3Yc4+6iuAcjePlT jusFgSLMlRjXS/x43lZV48eLL/vX2UrNkXwawM/RcZTDlbVdO//rxFE9KB0RbwwWlHALhStk1qxZ rRS+RlvjfoGrqyO5FnAP9+kdOC4e2hjXsG17WJhBQM3g4vA+CubnhAyg/4VZAsgO2YctUGElmiRJ 0jA7T52YElACSkAJKAEloATeBwKqMHsfzpLO8YMnMLh9PDp44hnFixOBEsV3flvCsurbb7M5ZBIr 4EG8YcPG7IZXJlC9qBwo3p7kyZNXYnoZxyJFjiTxtrD/D1v+OBJ3x8ufvyANGthf4qmhL7jJoMxW YrKbKOTRw0e2h2QfbqQQ33TpaODAIbJt/i9CBH+lgbnM2Ia7HtzohgwZxHGe/mQLoKIEqyN3+3R3 DcZ4tu8I0F++fAVxw9zOLnxLly6m8ePGUCFWuMCaz9MCF8vz7DILd8Uc7FppFiQf2McKzCuXL3PM ssTmQ3a33WUU1DW2ad2SFUD3aSAnFYB1FqymoLiFi607YlwvD9it1SzGfixWwL1rQXD1HDly0ZbN m/ma3ikWjLA6sydRo0aVYljTIf6ZPcE9BeswuFQb3M313ElsYXBxeB8F83PCPA/dDnsE4D4PC1IV JaAElIASUAJKQAkogZAT8Ap5F9qDElACISUAyzJYmblSlrkzDiwMILvZkgvxZ4zXqlUr2fKglwRx ttdPFg7yjGyLxgtZCtEWLmlwIzOL2Y3N3fHg0pmH428hAQFe2EaZrcDyBgqIXbt20MuXLy2HZ0yf JlZSyIgI19OTJ06yRZ6XZX1wKcX64GboSKAwg+toB3ZfhXVev769JO4U+nOnT3fXYG/85cuXyvzh jokA93CXwgtucVu2bLbXJMRly5YukT7qcOwwnE/zC8kgYMG1aPECqQNFFcTvub9LsLFvuHG6w8id NSKrnZ+f/xhwubx27SorgLMTFLbGmEhOYRZzG3M5tpMnTyFFcPE1i7FvHDcfexfbxYoXF8Xf0CED KVLkyJLMwt44htUPXJkNQdwpcDDESLJw+NAhy/WNYOxwMUVcMnfE1X0Ul909IUH9nHBnbK2jBJSA ElACSkAJKAEloAQ+BALOTVk+hBXqGpTAR0YAyphMmTLT/v37qFu3LlSsaHGODXVJgoXD3c1VTCgz LigwypQtx8HTZxMC/UOpsWbNasnAadQLyniwujESFmDbkUhg/xHDJeNf5SrV2F3vAk2cOJ4ycswz KPHq12/I1mX9JFZPxUqVRak3mWODXf7nH1ZKtXbUraU8mY+PZN9EYOzJ/GrUqInbfbq7BstgARs+ yZJL7LmXHMMNyioIsmTCjQ7B+z0tiBWHzIo43+m/+l+g7pEpcvDgARzzagk1aNCYogVYHq5auUIS LhgWb3tY8bqbY3NlzpzFJSNYMyG+nrM1Ypzjx47RunVrObHA16LARJB8jPs5u+Fu3bqZZs+aaTVf 2zbmg7jWkTUSLq6I5ZchQwbazArIzZs3ERIk4Fy749pp7tO8jYQMI/latCeRWeFblzPHQnAOEWMM rsIlOOaZvQDqqIf4gcj+unLFCl5/BorCyrUpfA0iq6GRJbP6jzXF+nDixHESVxBWkIhFB2ZGZlP0 5Uqc3Uf58uX32OeEq3nocSWgBJSAElACSkAJKAEl8D4SUIXZ+3jWdM4fJQFYR0FgbeNK+vQdIMqQ NatXiyICllE52d2tQf1GEpQdCgT0Z/TprD8ok27euElzOMMmMhciTlWBAgXl4d1o52o8ox7iO8FS CYLtQBKwRmTyRByr6b9NpU2bNooCJytbwDVv4R+zrGy58mIJNYmVaD17dJMA6+nTp6eu3Xpagrrb 9u1lww3ZINewQgmx24pyUgN3+8S8YQGHoO5212Aa2H9M//MFF9KfmrWgWTN/l9hrYA+XvM5dujp0 ibR3jsIFWIKZhiEvtrSzlR07tovFU/ny39s9z5EiRSYoTRDnbseObZQ7Tx7ynuJN8+fPkyyLI0eO oaIcd24lK2qaN2tCa9ZudIuRqzWWLlOODhzYL8rQjh27yDkdNepXUe5iDVDU5c6dlxVeGy1Lsm1j 5gpG/QcMor5sXTh27ChRjkHRW7BgYY5R18HSh12Wcr05uZ/4EK7DmTNnWPoxbyC2n6EwQ3ZM3BeI C1fURhlsni8sGwcOGiJx27p19c8UigynyFwKSzMIEmGAf9++vQmKYAi4VKlanSrxvQGxvZ5RZvvZ 4Oo+cve+Rd8qSkAJKAEloASUgBJQAkrgYyMQjh+cXUdVdkHl9r2XNG7WDZq7zNqNxkUzPawE3isC +xd9Rc/8XvFD7Vs3QVcL8E3rTafPXHBV7Z0dhzsdgrXjYRsP6iGRRxykH1k04VIG5YM98eR46B/u ilevXrG4htqOiY+vGxzUHcHz3YnrZNve3r6rPmFBVKliearClm9wqQyqvOBzcpUTE8SIGZNi8iss CXgjSyXibH322Wcytfv374urJGIjGeKKkas1Pnv2jBVRT1jxGFP6Rr+wsEJcO0fB8O21MeZjvKNP 9IPr3Zi/cSwsvmOusDCEEtqRgP+TJ4+DZBlq25er+8jT963t+O7sp07lQ8dPOE7Q4E4fQa0TOXJ4 ih4tAl2/4e8iHNT2qP9ff8YHZ87aRgkoASUQmgQ89fkejT+vI37mRbdu+2f8Ds016FhKQAm8PwTw mJrAO6LHJhyyJ2iPTUM7UgJK4F0QgAIiadJkHukaShQjYLmjDj05HsaApVDixEkcDSeKO7i3eVKg DLTXJ6x/Dh8+RHDjfP36DZX/vkKwhoUlEtwEw6KAt63yBtZ0tuKIkVHP1RrhrmjrsgirKmdir41t fVjNhVbMMtuxg7Pvas3oE/ztnYOgjOfqPvL0fRuUuWldJaAElIASUAJKQAkoASUQVgmowiysnhmd lxJQAmGKwNmzZyRmGiYFy7KgxIILUwvRySgBJaAElIASUAJKQAkoASWgBJSASwKqMHOJSCsoASWg BIiQDbRPn/70RZo04paqTJSAElACSkAJKAEloASUgBJQAkrgwyWgCrMP99zqypSAEvAgAcTwKlCw kAd71K6UgBJQAkpACSgBJaAElIASUAJKIKwSCJxaLazOVOelBJSAElACSkAJKAEloASUgBJQAkpA CSgBJaAEQoGAKsxCAbIOoQSUgBJQAkpACSiBsErgyZMndPnyP/Tq1auwOkWdlxJQAkpACSgBJaAE Qp2AKsxCHbkOqASUgBJQAkpACSgBawJjx4yiHNmz0ObNm6wPBOw9e/aMCuTPQ5Uqlrd73J3C9evX yhibNm20VO/XrzcVL1aIKnxfls6cPs3Hs1K3rp0tx3XDmsBvv00VhsePHbM68PjxY6pTp4YcmzBh rByrVbO67OO84vXdd7mlDphfuXLFqr3Rr1HX9v2PeXOs6ofGTtMmDalM6eIhGsreNReiDu007typ PeXOlc3OEfeL/v33XzlHw4cNkUZB6fPNmzfc1vl9Y9u/+zNzXDM02DoeXY8oASWgBD4OAhrD7OM4 z7pKJaAElIASUAJKIAwTKFK0GEFpsmrlcsqTJ2+gmW7ZsomglKla7cdAx9wtiBYtOvn6pqPoHJMR cuXyZVq0cAFlzZqNypQpS4mTJKF06dJR4sRJ3O3yo6sH5cjr16/p1eu31nhPnz6lVi2bE5Ro1fj8 NGjQWLig3meffUbly1egN/zvzp07wnzxooW0csVy6tipCxUt6q+QMvotUqQoxY37eSCuab5MG6gM BX/O/4OmTp1Eo0aPIx+f5HbrBLfQf52vg9tc2tlecyHqzEHjJEmTUVpfXwdH3SvGWvHCeYIEtU9X 941t/+7Nynmt168C5szzVlECSkAJKIF3Q0AVZu+Gq/aqBJSAElACSkAJKAG3CaRIkVKUWVu2bBbF WJQoUazarlq5gsKFC0clSpS0Kg/KTpYsWQkvQ/bt3yublatUpRw5csr2xElTjcP67gaB58+fU7u2 rejQoYOszKxOzZr/bNUKCiPbMtTt1LEdDRrYn779NhvFihXb0qbCD5Xoq6/+Z9l3tfHk6RO6ffs2 Pfd77qrqf3Lc9pp7F5No1KiJx7sNSp+4L/W+8fgp0A6VgBJQAmGCgLpkhonToJNQAkpACSgBJaAE PnYCJUqUIihgNmxYZ4Xi/v37tHPnDsqUKTN5eyeQY7BW6tKlI5UoXlhcNRs3bkBHjx6xtNuzexfV qFGVli5dTDgGl7Xly5dK2b59e2n8+LE0aeIEqT90yED6pUsngpVTzRrVCO6hhrgaZ+SI4VSndg1a t24tu3WWodq1AlvAbd++TcaFosiQhw8fStnMmTOkCBY4sJZq9lNjypM7O5UuVZzgHof4aobs3buH GtSvQ9/lyyWugr16dacHDx4Yh1lxdEvmXqnS95Q3Tw6qUvkHtthbYTluu/HixQsaM2YkfV++tPAp VbIYDejfl86dPWtb1e7+y5cvqWOHtrRnz26qUrU6NW/e0m4928Kvv/6GatepJ4pRrDm4smTJIpo7 d7Y079y5A82b6++2iVh0kyaOJ4NDtWqVaM6cWXJ+HY0FFkOHDqKSJYtSwQJ5qX271nTr1i2r6sG5 FozrENfcihXL5JzjejALzjOuVfQPcXWezW2xjWvQuO6Ma3j0qBE0buxouY6wno4d2hHuI0NgXdm8 WVPLtTSB7wezmPvs0b2rXONwizYE27juccwY03zfuOofrBs2qGt0J+9r16wWDmfPnpH9S5cuUge+ vooXKyzX809NG4kVqnkeVh3ojhJQAkpACXicgCrMPI5UO1QCSkAJKAEloASUwFsCrIeiZRsfUeeh t+Qd+/akcJEi9OmnnwZS8qxbu4agnClZqrQ0e8r759p7AABAAElEQVRWRVAQbFi/TqyRChUqQqdO npQH8GPHjkodKAf+PnWKevfqQRfOn6f06b8iuA6i7CErmZKw22X8+PGlbnK2bkuVOrVsnzp1kq5e ver2OKh7/PgxiXsG98OUqVJJW/N//967J+PCpdQQKGgwl5s3b0jR7NkzadCg/uIWV6duffoiTRpR 8kycME6O79yxnRUcTejixQtUqnQZcT9cvmwp1a9fW9igUn9Wds2Y8RtlypiZfqxRi16/eU3dunWh I0cOSx+2/40dO4qm/zaN4sWLz7HF6lHevPlo2bIl1LZtS5mHbX3zPhR8UDJu27aVKlaqTC1auKcs M/ooWKCQbJ6/cN4oCvJ7nDhx6fMA981UqVKTdwJ/ZSrO+aRJEygBK1fr1m1AkSNFFuXjGJMi1Haw Xj27i8Itc+YsVLlyVbrAnJEIwhB3rjl714JxHeKawzWIc75i+TKjW1EQL1q8kOAJGSdOHHLnPFsa B2xgXFy3hmAb18Gff86n7DlyEKw3oYSGAg0CZW29erXo2LEjrOisxuf9O1rJrtBmMffpkzy5XONQ WhuCeeK6xzGI+b5xp38o1MxzRh/3/n17n+D6+rlFM9q2dQtlz56dcE988sknohA27gm0UVECSkAJ KIF3S0BdMt8tX+1dCSgBJaAElIAS+MgJ7DnyjIZMuSsUdhx8SvHiRKAsX0UMRAXue7k5fhkUYbCW MmJZrVy1nOCimS9ffmkze/YsUTTBbaxWbX8rFcRAa9yovigFRo56ay2TnV0tBw4cIg/bsGAxpDi7 dkKBBmUS4m59802GQBZIQRmndZt2VK7c90b3QX4/ePCAtOnRs7esGwqDoUMGUZSoUaV85KhfZX5w fUvKMasgQwYPpD/+mEtL2NIKscC2sjsr3Bnbte8ox/Pl+46giIMCw56cPXOG0qT5kkaMGE2fsKIS AqUE2ty4cZ0SJEhor5mU9e3biy5euCDb4b3CO6zn6EDMWLFEOQrFiVlgQeflZf17dtly5VmJ18Fc TbbhRgtrpBMnjlNtvg6gZMQ+lD/Zs+egocNGiBsvXEVhDTWXrcygDINiyiznzp2lNWtWUcFChal7 915yqFr1GlSrZjV6HGDhF9xrwXzNJUmSVJRmUDK+YEtKMIcS6imPUayYfyw3V+fZ3Wvs88/j0egx 4+RawbVUqGA+gpUbZB4nULjHStx+/QdyIoYCUlaYY8fVq1tLtm3/K1KkmNxXULrhmoJs2Lhe2OKY rQS1f9v22L9yxf+6qFSpCv3UrIVU+fHHmlS+XGk6cGC/vSZapgSUgBJQAu+AgCrM3gFU7VIJKAEl oASUgBJQAgaBvy9Yx5c6dc7PrsIM9UuyWyYsytasXiVuflevXqEjhw9TabaqihjRX8l25PAh6TpO 3LiiJDLGgcLtaICFmVFWpnRZUQIZ+0F5d3ccKHjcVWQ4Gj97thy0hTOENvupiShuoPCBEg7xoeCW CeVWokSJ6NLFi/JCP4ZFFazqMD5cVvfv30etW7UQxSMUSr/80t3RkPQrK8ogJ0+eILi/QYly/vw5 KUNcMGcKMyjLSpQsRYcOHhRLuGw8X8Qjc1egxMELCjqzoA8o08zypYOA/+Y6xjZYwEWwNCdxADtI hAgRZK7Dhg5mC6+TbHXlH6/Otk3hwkWNIooUKRLFjh3HojDz1LVQrFgJsSTcxS7DuXLlpo0b1rOC MDwVZsWTu+fZMkknG1AAG4pVXJ9fsGL0zOm/pQXWAmtIWJYZkjBhImMz0Lu3tzdlyJhJrL1gGQmB 5RfKcAy8zRLU/s1tjW0oF/9asFgs8Hbt2km32T323/v/0stXLwO5yhpt9F0JKAEloAQ8T0AVZp5n qj0qASWgBJSAAwJ4QMQv5whyHTXAcsRBVS1WAh8MgUI5ItOcpffpybM3FDliOCqU0zqgv3mh32bL TnE//5ythFaIwmz1qpXyQF6ipL87Jupeu3ZNmvTp3dPc1LJtjutlKQzGRmiNg6kVK16czp5j6yjO HgmXM7ySJUtGHTp2oRgxYsjsr1y5Qm3aBHZ9vMYueZCmPzWXQPqwYMILCqNcufNQ167dCcpEW4E1 FoLvX2QlHFxhY8aMJVZ3qGerBLFti+QLXbp0k7hxDRvUo149u9HvM+dyHzFtq9rdv3PntriSJkqc 2Op43XoNghT036ox79y4fl2K4sfztjoUn91OIdfZcs5WrgdcT7Fjv00+YFvHU9cCrNiGDRssLpLZ +FpH9tesWbOK1Rss3SCuzrPt3NzZ/9SkmLzOjHCebC35nPUDC7j9bKG2l+PVQR49emSxirNtF5z+ bfvA/vz588SyDWPBwjR69Bj0gF2towfcD/baaJkSUAJKQAl4loAqzDzLU3tTAu+EANxJihT2d8Vx NsCM32dTypSpnFUJlWNQisBtALFp4AqEBxZPS+dO7WkzWyNs2brT012Hmf7+/fdfDvZbiCpWrEw/ t2wdZublzkTwsJkzx7dUqFAh6tGzjzRZvXolIRDzjRs3qGbN2tS4yU/udBWm6uABBm5iEyZOEdei kE5u/fq11KVzR3YNGiTxk0Lan732uFeQeXHzlh32DmtZKBCIHzcCzRuRiA4e96MMvhEpEivNHAke 4mGFM2P6NLrA8a2gOIO1yf/+97WlSSxWbOAYPvNj2VgjoVL06IGVQ5bGQdjw9DjOlFCROM4W3A5/ +qmFWO/g833t2tU0cuRwGjJkuMzaN106+Ztiu4QIEfyttHx909HUaTMk9hYUZoiVBau1xYsXidup bbs2rVty0oD7NHDQULF2Anu4eMLV05WUZYs2KOTgAvrjjzUkGHvv3j1o8OBhrprKcSgGISmSp5R3 T/1nWKc9ePg2GQL6NvZjsVLQVowfL2Blhzhj9sRT1wKUnzly5OLzspny598p7rK43iHGtezqPNub X1DKsN5Lly6xcvQJW9JFdqtp/vwFRRm7gS3iIFCwosyeuNu/s/sB8dEGDxog1xcUs8l8fGQouF3/ Y4otZ298LVMCSkAJKAHPEbAOkuC5frUnJaAEPEgALhtVqlSzvHLlyiOuHEjXbi7Hr+PvSpDJq2SJ IvKQ5moMxAm5fv2azHHhogWuqgfr+OvXbwiZwD5kMVx23iAash25deumnBMErQ6Lko4fbhNzYHFD Zv4+Qywq4CIFK4P3UfCAY5wXT8wfVi94yI8eLZonurPbB+6Vly9f2j2mhaFHIHJEL8qRMZJTZZkx G7hlQkb8Olw+c+H6Z5aUHMQccvjQIYn3hVhnMWLEJLjcjR410lw1RNueGidyFH+LOiPmFyZ19sxp q7n169uLevboJq6A+Hzo2asPwdru+LFj8lkPq9STJ06yksrLsmYo3/v06UWbNm7gRAVXqGXL5rRo 4QL53EHsp1Gjx4m736ZNG6zGwg5cLq9du8pulNkpT568FmsjI1NjoAZOCurVb0ipU38h7rF/caB5 V4KA8TNmTBcFUbny37uq7vS4YSXl99xP6iVPnkLe4TJoFmPfOG4+BoUsxJxlFT/UgY8hnroW0B+s CaGoRHbWSJEjU96AuGA4x67OszGfkLxjva9fv+LYbycs3cBV1ZlE4Ws4DyeFgMIML2yjzJ6403+U KFHJz8+Pvyu9tfiD27EhR48ckU3EnDOUZfgcxw9pKkpACSgBJRB6BNTCLPRY60hKINgEELemWfOf Le038sPB5s0bqQBn2UKcktCQJ/xLLB4wnvtZx+KxNzayjEWOHIWD6X7HaeRXcLyNm4QAvCqeJYBY Kjgnjx8/8mzHHugNlhcIzm0IsuP9/fcpQqBx24d/o87H+A6lN14qSsBMAA/IsPTZvn2rKHKKF/e3 wDHqVP+xJi1dupgmThxHd+/ekYD9K9hiad26tUHO1mj0ae/dU+NAmQTFzqJFf4nr3U3+m2Cb6S9q 1Gg0c+YMQly2HBwPDFY0iA8GCy4oBOuzUmrgwH4SnwxZKfF3cfLkiXT5n39YUdZa4o0hG+g4VoKE 8wonVnkI0g7FiBHY3bzGuDxOqlSpJej8Krbi+zxePNq6dTPNnjXTXM2tbfyo1b1HLw6SX51+/XUo x7bKSIZi6iFbeo0cMZx/9nhDd/jzGpZNCNIPRVHHTnAVDZmyPBpzg2ANiMuFOG7p0qWnv/6aL393 M2TIwNalbGHKlnbIAmooX8wLQ/w1b86ouZL/Xn/9dQaKwnObMmWSKHPgHgzx1LWAvnLlzC0usnC9 hGurEZsPx1ydZ9QJqUBJuWLFMrF4hhsvrhtYMroSWMIZSQyw7Ujc6R8JGmB1PXLEMLbELiLnZ/ny pZYuEcsOf0fnzZtDUfkaQYIObJ8/f05cti0VdUMJKAEloATeKQFVmL1TvNq5Egh9AvhijgxKyHA1 dsxI+VJav0EjGjduNLVu3Y6/DH8jk8Kvx02bNiRkeEKGtNu3b9Ef8+bSRv4lHvFMEAC3Vq06hMxr yEA2d+5sade5cwf64YdKhAcWe4KgvQjiC1cFuKwsW7aU2y+mOnXqWarv4WC/yIRVtWp1drlZI5mr 8KW/QoWKVKNmLUs9/Ao/adIEyfqF4L3ITlWBxzY/YMDtZvz4MfKF18cnuQSJNtYIC7Sp/KV/Dbv1 YE2JkyShUqXKECwP8EXUmAdcHjHPo5wtbvacP6ysojCZoUMH0amTJ2n8hMmWueFL8/QZ06hbt57i BgvmS9jtZyv/qh8rVkzKkCETz7WiPJChEaySpv82VdyrYAmRJGlSq7mgDrKlDRjQj7PWHRKXquzZ rQMzo44hsOCDNQUEfM/xl+hB7Fbkas1Ge+O9R/euHL/nAo0ZO8Hy0PLs2TNq0rgBxw/yoW7de7qc uz2Os2bPE1dDxKjBw9jgwQMkJtB2Pl81alTl4N2JJdaOs3GNORrvuLYR0LtS5So0depkusnWJV+m 9aV27TpYHk5dcYaFGB5qs2b9lrBOPDTV5Ov8R1ZA2BNkjps2bQr9ww+5uL4SJEhgVc3VeK74QhGC e6FFi1byoIvOXV33e/fuoQnjx9JpDmAN17vMrHBDe3fd8HCNTpgwlnySJRcrHozprE9Xa8A14ur6 xxgqQSMAxTIsfqBQjRcQf8roAYHGR44cQ3379halEcrxmV2FP1MrsUWKWcKxoiqQ8OcfBIolW8Fn I14Qd8bxstOHbZ8I1t+mTXsJjt+tWxf5rKnOboxTJk8iL7YYg1Tlv0P//nuPFVa/izsqFErZ2Pqr foOGchyZImFFNWnieLFEQ6D49OnTU1f+DDaCu//Cscrg9t2Xrc4gUALh8wJ/s+xJ8xYtaRTff5gT BAxz584rP0jZq48yY762xxEOoUHDxjJ+118689+HWQyYRNEBRSAEMagSJ0ksCQrq1K1n9UOSo35t x7Hdz50nD3lP8ZZ4VxfZpRLXRf8Bg4TB2LGj5HMXysqCBQtz9tAOts1lH0kBBg4aIvHcunXtLGW4 7lKwJaORYTTE10LANYXOkR2zQIGCtHDhX1TURvHkznmWCZr+878G317L5mvYqOZ/TfvXgXtzm7bt RZGJv3VYf5my5QiW9MZ5sO0T/eDvGSzgjG3ZCPjPPKY7/X//fQX+u3JRlNxQdMMauzQn6Fi8eKH0 CMVm3br1WfH5J7Vo3lTuSXwngPUa/nZZiYmtVbnuKAEloASUQIgJhOOHB/u+PkHo+va9lzRu1g2a u+xOEFppVSXwfhHYv+greub3ir88uu/a5JvWm06fueByocfP+NGfqx6S9+cRqEKRaBQrRninbWBh 1qF9G+rU6ZdAFmYdO7STYLr4ApgsWTJK65uOMrLypicHJEaKeWQNg9y9e1fiY+FhomXLNhJIGcqM smXLU+w4cSTF/MULF8RKCF+YYQ2AX8XxS30xfsiHC4s9gXINgaiHDx8pipIK35cVdzBkezJcR6Bs 6tKlozRPmTIlfZMhI23etEks0UaOGisPiAgE3K5ta3ngKVmqtPyqinZQ7sHazlgnHppy5srFFm2R acP6daI0WLBgiXwhx4M+FCL4kpsxY2YJLnyElWI/1qjFysJm8kuxMQ98CfbhL6g9evYO9HCKjGv7 9u1lZeI2y5KNODeIZZWEFXFYJ+KWFGdXKlh8LV60UNiPZUUUBO5Gi7gMFg3I/gaXjsuX/7HMBYwr /lBOMmLhnDx6yH3wF2d8MTbOkWVw3viXs7kNZfer1atXSp/INtaocVNytWZzH9j+jZV4Y8eM4ges waKQRBkUnh06tJUYY4g15mru5vNpcIS1RZnSJeSX89p16so4sIDw8Uku1jCIVQOll7NxMRezGOc8 fPjwVJQVubBanDNnFmeZ+1SyiUGR6mqu+JOXPVtm6RYxaL5Mm1au+eLFS5qHkm3jPoMlABTAUKhC 2QTBecdDkavxXPFNxA/ouAb7cwyzfN/ll2vU2XUPZVorvh6xViizcY/uZgV0Ur7XZ3LAcdz3tgJu cEnbvmMPHTp0kJo3ayLsxo2fKJY7rvrEw76zawTZG11d/7Zzst1PncqHjp9465pke/xd7EeOHJ5d YSNwEHR/V7bgjOHuZ3xw+na3zX0OAv7kyWOnGR3d7ctZPU+Ng889KLLsXasYH+PAai4xK9WhWLEV 3MM3OHA9rJgdKYnhSogfD8wu4bb9mPfhFofPA2dB7831w9o2FPfI8Im/QbAyMwQxurA2KALN5cZx e++oD4u5OPw9wJF46lpw1D/K3TnPztq7cwzXCCwUkW3VXT7u9GvUcaf/58+fyw+WOEf2BOcWP9jE ix9f3JXt1QnrZZ76fI/Gn9cRP/OiW7ddezqEdSY6PyWgBN4dgXD820gC74geGyDwN2uPda0dKQEl 4A6BFy/fUOdht+j+w9dSHe9t6jrOVOVOn6jTuk07+RUb28vZesqZwNR/K7tswPWlXXt/RVY+tuaa PXum/LoMJdvZs2dEYVa7dl1Oz57GYXcYC9mnsrAFD6QoZ5aCRQAe6qG4MgvcQ3r36S9fzuGiAYsp KKbwyzbi8OAL7KTJ0yxf3OHWBzeTGqzEMaRT5y5UMiB7HL7kL2VrK/zKjl97V65cLsopKAqxX7Va dapTuwbNZSUL4oIYkp3Xh+QEaB8c2bF9OyvJHhPi2CCmHASKMSgn4I5z+/ZtsQKDWxKCdEOg3Cpb pqRlLvilHQ88/foPtLgPFS5SlOrVrYXqgQSBnRs1biIKs5w5c0l/OEeu1mz7EAQLw3FjR4uSFecc smHjeuGFY+fZcg0WbM7mbkzOzNH8W0yKFCmp5c+txWUIll2tWreVhzhYbm3YsM6iqDOPa/Rp7x1W JEWLFpdD4DB82BBRLuI6dTVX44EYCrtx4ybZdU8yxoQVFxRTY8dOtMSq+XX4ULkvUMcdNq74Qgln FlfXPazRwBburoZVDQKUQ4G7hJXV5diq05Hg+mjT+mdWCsSR2E5wc4O46tPVGlxd//ayEzqao5YH nUAMDqKO17sWT43jSonlahx8lkPh5kwSJEjo7HCgY7Ceep8FP0bZfrZjPQhob7iGurs+d1i4Okfu juWsnjvn2Vl7d47hxxd7LqrutHWnjjv9Q1HrSFmGMXBu3+Uc3VmH1lECSkAJfMwEVGH2MZ99XXuY IHDj9iuLsgwTOnku+NYOxoLwBcvZg7NRz3iPFCmSuIPB3Q3WVLnZegzKBwRnD4ogHsnBgwfE1RC/ rOKVP38BUZhBIWSrMEMMEENJlZZd6yCwnILyCRngEPjZ/BAwjBVfZsE6DWUZytN+6SsKs3tsPXeN XRahWECMN3zxhsCiAW5OCIxtDvBbht0gjHlIxSD+h8DU+GI8hePp4Jfg7DlyUOHCRcW9Al3BUgm/ EkOJBsWkIWlY8QiLJczlyOFDoiDMm9dfaYU6zr5EG32Y348dO+pyzVBqmQUPRxkyZpKsdIiJBtnG c0IZjkEJ42ruRn9B4ehqXKNP23ecc0NZhmPffJNBqoAhrE1czRXuoZDMmbNaHkIQOBwWLYbgWgD7 c+fOihVXlChvAzsnTPTWCgDucq7GA29nfM0KM1fXPdydERQ6Ec/h0sWL8sKcYR0Bwfl3dN9jnnDr gSXj6DHj5dyijbt9OluDq+sf46goASWgBJSAElACSkAJKIH3jYAqzN63M6bz/eAIJPaOQBl8I9KB 489YsUNUpkDIAgAHFxAC3w4a2J8QEwwvKJly5c5DXdmax10LkRXLl4rCBq6EeJkFiiK4gRoWPuZj 2I4QYN2FwMg32CUEEo+DMAdFDKUX/MyNPuLHs7YciB8QC+g6u/QYwZKDMoa9ulDqtWzVhiZPmigW cLCCg7tQzVq1CS6NiJ8GWcHuoXjZCpR7cIOBZR4UQsEVd9Zsr+9ibAW4ny379u7ZLYcfPXpEKIO4 M/fonOkxOOJsXHf7M4KJI7OdO3O11+/vM34TCy3jGM4nXIMhsMZyJO6O5+46jfPn6LpH3DoIFNNt 2rQMNK1rV68GKjMXPHjwQHYXLvjLYknqbp/O1uDq+jfPQbeVgBJQAkpACSgBJaAElMD7QkAVZu/L mdJ5ftAEBrePRwdPPKN4cSJQovjv7rY0u8nZAvXlWGdTp82QuFpQmK1Yvoy2cFatxRzIHnHDXAn6 Xs5toGBAzCqznGLrH7hKLuOsbogf5krgZgdBHK/gitHHA3aJNIuxHytmLImtZj7mbNsZO7RDwoLy 5SuIGyZiwSGD3fhxYziGV2GKFTu2dN2QA0KX4nhPtoLscHBlRfY0xJyBG01wxJ012+sX8bmgLEVc NQhcRFAGcWfuZqs5aeTmf87GdbMLifkG6ynETnNnrvb6RTw+cxbXSJEjSSwg1EVQZkfi7njurtM4 f46ue7iRQnzTpRMXYtt5RYjg2KUYCvApU6fTkCGDaMGCPwnuvrDOc7dPV2twdv0H1VLSdl26rwSU gBJQAkpACSgBJaAE/gsCwTdl+C9mq2MqgQ+UACzLYGX2rpRlkQNcyhAg3JCzZ04bm4SsjYgftmjh AgmSjCySo0aPY2un8BIsHBUNyydkKbMncMVEP4UKF5aMZMhKZryaN28pLo8Ieu9K8YS+YYWGGCm7 du2wUmrNmD5N5omMnq7EiNsC90KzGPvGcfMxR9tRokQlPz8/sQIz6sA1zpDlbFkHfnDHzMAJDGCt hxcUOVvYsg7Z0yC72YILcaOM16pVK6kPZ3PDepD56vXrVxwn7oTRrZXbqKXQtGGcEwQNhhhrMtZo VDX2jeNGufEOl8M8HE8OCjO8sI0yiDtzN/oJ6ruzcZ319fLl28Qb+/bukaopUqQI9lwRbw/ZWY0X rluco4gRI4qbo3kuZzgzpSHusnF3na6ue7g4QzF48sRJtgD1slxHcCnFdbSJXX8dCRRmcAnu0L6T uCb369uLXvB1I4pGN/p0tgZX17+jOWm5ElACSkAJKAEloASUgBIIywTenSlLWF61zk0JfGQEDLe1 RYv+kphgN2/dlKyXBgYESL5w/jyNY2VNOK9worxBMHYocL77roBUM9wXkekQwfi/+CKN0Vzely1b Iu8IEG4riC2VK1ceCfC+j13/3BEE9h85Yjh17tSeKlepRhcvcsZOTh6QkWNrGcHKnfWTKVNmSpcu vbhIwnooQ4YMtJmVV5vZag7JBhBE97RJ+eGsLyQ5QDbKkSOGSdZH9AElgSE+yZLTju3b6CXHAIOy EYIsmXARRTKDRIkTW2LEdevWhYpxwHpYkyHYfky2dAP/cuW/F3fN0aNGiLIN52PkyOHGEHbfYZkG 2cOKOCRVcGfNdjviwmLFSkjWUBzHtiFQAKJfxLdzNPeTJiWf0c7dd0fjOmoPJWSTxg2oVu26xHpm GswB7yNxhtRybN0Hl1ZXc3XUr205lJFlypbjpAyzCYH+YYW2hrO0QulriDtsjLrurtPVdV+/fkO2 LusnsQYrVqosSr3JHDsPmd5atmxtDOfwHdd99R9r0tQpk2gyvxo1akLu9uloDa6uf4eT0QNKQAko ASWgBJSAElACSiAME1CFWRg+OTo1JRAcAl6s8LIVBAlv06Y9zeHskFB6wHKm+o81OEj9JPJiSxVY nyDzIJQ1fdlSBYIsZJUqVxErMeznzpOHvKd40/z58yQL5ciRY1AsAkuV9evWiaLN1zedUWz1XqJE SVGYwVURSiRIODvxujAfCLJYInvn9N+mspXbRlHSZWVLoOYt/GM32VsnlH2GYE39BwyS9YwdO0os 26AEKViwMMdv6mBUk3d78zBX+P77CuKat27dWsILWd5Kc6IAI04bXOR+ataCZs38XWJLYez06b+i zl26irIMffXpO4CVOwNozerVki0yCltw5cyVmxrUbyQJA/73v6+pTdv2oiSEQggJCqCw+XP+H3KO zPMxtqNGjSpZSFeuWE7NmzWhNWs3ur1mow/jHQkZYG0EsU3O4GruRh+2HMEBL4gXJ0WAmM8R9jEW rAlhzWg7Lo7bEyjNWrFFHyQex6RDMggoyyCu5goLR/O8pJGD/6BMunnjptw3yBiLWF0FChSUa8Bo 4mo8o54zvlIngJOr675sufIEK09knu3Zo5twS58+PXXt1tOSNdMY03i3vVeQ6XbN6lWE2G1FixYj d/t0dK7cuf6Nueh70AngM3cou9JOmDhFPleC3oN1i/Xr11KXzh05I+8g+fHA+qhn9vBDB6xrN2/Z 4ZkOtRcloASUgBJQAkpACfwHBMLxwwPiY4dIbt97SeNm3aC5y95mGQtRh9pYCYRBAvsXfUXP/F5x lrm37mCupumb1ptOn7ngqlqoHr98+R9RhkEhY0+uXbsq2S2hFLIVKCrucRZLKGpgZRYagjHh6mm4 yAVnTMQFQ1B9xFIKybzh+nj79i2H2SuhOLzKgddjsPLGUODYzhd9INA65mLvHMDtDtZCyHzo7lzv 378vLrPRor1NGOGpNZvn72ru5rrubiOAfaWK5akKWxHCjdWZdOzQTlyEt+/Yw+fhtrjJQhlsTzw5 10ecBAFZNOE2aygAbcf05Hjo29V1jz/dNzhxBZJLwILTE+KqT1fnyp3r39E8U6fyoeMn/JN9OKrj 6fLIkcNT9GgR6PoN+27m7owXGp/xf/wxl4awJSUUZlCsh1RgkYr4ik2bNpMMriHtz157871q77iW KQEl8PEQ8NTnezT+vI74mRfduu0fhuLjIagrVQJKICgE8Bt0Au+IQWnitK79J2anTfSgElAC7zMB e4ow83rgHuhIYKEFK5vQFIzpas6u5oMg+o7id7lqaz6OYPjOAph/wsfh8uZM0EfSpMkcVgnPlliu +rBtDAstW/HUms39upq7ua6r7YcPH9Lhw4fENfD16zdUnq34giJx48Z1Wt2Tc4WCGC9n4snxMI6r 6x6KO1iBelIc9enuuXLn+vfkfLWv4BHIkiUr4aWiBJSAElACSkAJKAEl4JyAKsyc89GjSkAJKAEl 8A4InD17RuJwoWtYljlT1L6D4bXLIBDQcxUEWB6oumbNKpo2bYokEfHxSc73hrViFNaHcFVfyfEk YX2bJGlSKlWqjMRPvHv3Lseya0YZM2Sin00x7bZzjMVx40aLJWfcOHFp5KhfqUWLVhLzD1PeuWM7 TZo0gXCuodDPl+87qsDJLwyr1b2cXGPC+LES9xEWjZlZ4Yb27lo3bt26hSZMGEuId9ezVx+xoHS0 Bihue3TvKnErx4ydICEEMMdnz55J/MJkyXyoW/eeKFJRAkpACSgBJaAElMA7JaBZMt8pXu1cCSgB JaAE7BFAhsk+ffrTH/MX0I8chN4dafFzK/pt+kx3qmodDxIIzrny4PAfVVcbOdPpL106SVzDOnXr c4y+eBLD0QxhQP8+rPwaIy7dSDLi98yPhg8bQmPGjPK3AOZAG4sWLyS4CRuyYvkyzrp7SmKgwYUb 2w8fPJDDW7Zskiy/d+7ckYQQUMCNZ+XYtKmT5TiUaYiReJETr5QqXYagxFu+bCkni6htlcXYGMv2 /dChg5K85cnjJxyD8mc57GwNqOCTPDkdP36Mdu58GwMN80AZjqkoASWgBJSAElACSiA0CKjCLDQo 6xhKQAkoASVgRQCWKwUKFpK4YFYHnOx4e3sTMr6qhC6B4Jyr0J3hhzMarLjAe+zYiVSrVh0aPGS4 WIUZKzx//hwtWbJY7oPfZ84R68y58/4kZAKey0ldoPQqVqw4PX3yxKJsQmy5bdu2irIMcfhsZfSo kRIvcdLkaVSXlXS9e/ej7DlySoZhKNdgjYb4dhMnTaVWrdrSryNGU4UKFenihQs8l0W23Vntw2Kt TeufKXbsODRq9DiJRenOGpBtGZZmyNZsyIaN66XMXiZmo46+KwEloASUgBJQAkrAkwRUYeZJmtqX ElACSkAJKAEloASCQeAJK7nOnTtLOXLmImTRNSShKbHF0aNHxJ0xVarUtJWzUOK1g90t06RJIxZl f586SYVZ2YSssxs3rJcudu3eRU+ePGZFWgmjS8v748eP6cKF85Qrdx6r+JTIPLth41b65JNP6OyZ Mxy7MSFdunjRMiaSkkCOHTtq6ct2A66jLZo35UQ5D2nAwMEcc89bqrizBtTNkDETbWNXzhcvXsgL 2ygz+rEdT/eVgBJQAkpACSgBJeBpAhrDzNNEtT8loASUgBJQAkpACQSRALLnQmCN5UiuX/Ovs2LF MsLLVq5xH7AOy5o1K8HV8uXLl2KlhYy8BQsVtq1ONzh7MASun/bEmBMypLZp0zJQlWucFdiZPAhw +1y44C9q176jVHVnDagIS7n9+/bSXs7qCUG2WpSpKAEloASUgBJQAkogtAiowiy0SOs4SkAJKAEl oASUgBJwQMDIxPrPpYsOahDFih1bjjVs2FjiidlWjBo1mhTBmgzxv3bt2klbNm+mHDlykb1sujFj xZL6jx4+su1K9mMFHPdNl44GDhwSqE6ECJ8EKjMK4FI5Zep0GjJkEC1Y8CdbvhWlb77J4PYa8ucv SIMG9meFn7+lHDLRokxFCSgBJaAElIASUAKhRUBdMkOLtI6jBJSAElACSkAJKAEHBOLG/VwyQtq6 OZ45/belBRIwQHaz1RXqG69Vq1ZyEo1edPv2LTmel7NcRoocmYYOGUgPHtynYsXtW2bFZgUcFGm7 du2wCuA/Y/o0SQTw6tUrihUrNp08cZLjh3lZxrtx44aMt4mTFDgSKMzgOtqhfSdJUNCvby9CPDV3 1wC31Dx584nCDEozbKNMRQkoASWgBJSAElACoUVALcxCi7SO89ESSJ3K56Nduy5cCSgBJaAE3CPg 5eVFZcqW4+D9s+nX4UMpT568tGbNalq0aKGlgwwZMlKmTJlp//591K1bFypWtDhdunSJxo0dTTFj xqIECRJK3YgRI1L+7/LTMs5mGS1adMqVM7elD9uNGjVr08gRwyWTZeUq1SQb5sSJ4ykjxwuDQq5+ /YZsXdaPWrdqQRUrVRal3uTJE+nyP/+wUq21bXeB9pP5+Ej2zalTJtFkfjVq1MStNaAjWMqtZQbG tmzof0pACSgBJaAElIASCCUCqjALJdA6zMdJ4PgJ//gwH+fqddVKQAkoASUQFAJQJt28cZPmcMbL 2bNnSiD+AgUK0rp1ay3d9Ok7gAYPHkBrVq+mVStXiNVVzly5qUH9RhQ+fHhLvaKsbILCDO0/YXfG QMIWYJDKlavS06dPafpvU2nTpo2SMTNr1m+peQv/mGVly5Unv+d+NImVaD17dJOEAunTp6eu3XpS 0qTJAnWLAi8v/76Ng7Vr1+X5rqLfZ/xGRYsWI3fXkC1bdrGAQxIDbKsoASWgBJSAElACSiA0CYTj VOFvQjrg7XsvadysGzR32Z2QdqXtlUCYJbB/0Vf0zO8VZ/x6GWbnqBNTAkpACSgB9whEjhyeokeL QNdv+LnXwE4t37TedPrMBTtHQlaEAPd3796hJEmSsiuktfLJ6Pk5uzciKH/ChInE5dEoD+47slpe vXpFrMpgoWYr+Lp448Z1ihw5CkWPHt32cLD2Xa0ByQYqVSxPVdjyrelPzYM1hjZSAkrgvyUATwtP /IAcjT+vI37mRbduP/9vF6SjKwElEKYJ4GtTAu/A32OCO2m1MAsuOW2nBJSAElACSkAJKIF3QAAJ AIwkAI66RxB8RxZejto4K4dLaOLESRxWgeLO2zuBw+PBOeBoDQ8fPqTDhw8R3Dhfv35D5b+vEJzu tY0SUAJKQAkoASWgBEJEQBVmIcKnjZWAElACSkAJKAEloAQ8SeDs2TMSMw19wrLMiM3myTG0LyWg BJSAElACSkAJuCKgCjNXhPS4ElACSkAJKAEloASUQKgRQCbNPn360xdp0ohbaqgNrAMpASWgBJSA ElACSsBEQBVmJhi6qQSUgBJQAkpACSgBJfDfEogWLRoVKFjov52Ejq4ElIASUAJKQAl89AS8PnoC CkAJKAEloASUgBJQAkpACSgBJaAElIASUAJKQAmYCKjCzARDN5WAElACSkAJKAEloASUgBJQAkpA CSgBJaAElIAqzPQaUAJKQAkoASWgBJSAElACSkAJKAEloASUgBJQAiYCqjAzwdBNJaAElIASUAJK QAkoASWgBJSAElACSkAJKAEloEH/9RpQAu+QgG9a73fYu3atBJSAEvhwCBw/cf29XEzqVD7v5bx1 0kpACSgBJaAElIASUALOCajCzDkfPaoEQkzg9JkLIe5DO1ACSkAJfMgE3lel0/uq5PuQryVdmxJQ AkpACSgBJaAEPEVAXTI9RVL7UQJKQAkoASWgBJSAElACSkAJKAEloASUgBL4IAiowuyDOI26CCWg BJSAElACSkAJKAEloASUgBJQAkpACSgBTxFQl0xPkdR+lIASUAJKQAkoASWgBJSAElACSkAJvGMC Dx/cp2d+fhQjRgz69NPPAo328uVLunfvLkWKFImiRo0W6DgK3rx5QxcvnuPXeUqSJBn5+KQkLy9r e5oXL17Qv//es9vetjBOnLiB2ht1jPka+3jHWFGiRKGIESOZi+1uP3z4gE6ePCZzTvtlOooWPYbd euZCzPv8uTPM4Q4lTJiYkvmkYB6RzVWstl+9eiU8Ll26IPWSJvWhBAkSWdUxdm7fviXzjx07jhSh 7d27d4zD8o71xYoV2y4To/4nn3xCMWPGsmpnu2OPnW2d8OHDkzEX22O6HzICqjALGT9trQSUgBJQ AkpACSgBJaAElIASUAJKINQItG3XlJYs/pOKFStDkybPCTTumTOnqED+zFSq9Pc0btzvVsefP/ej AQO604zpk+jx40eWY5EjR6EqVWpR5y696bPPIkr5sWOHqUTxXJY6zjaWr9hGX3+d0W4VY772DkKZ 1aRpK6pdu3GgwwcP7KW2bZvSiRNHRFlmVEiTxpcGDBxFWbJkN4os71AU9urVkeb/MZOgmDIEisPa tRtR6zZd6JNPPjWK5X358kXUp09nunD+rFV55szZ6Jeu/QjvZsmR3ZegTDx/4V8pPnfuNOXLm8Fc RbahEEuZKg01qN+MKlWuYTlu1M+ePTfN/3O1pdzehjN2Rv3kyVPR1m1HjF199yABVZh5EKZ2pQSU gBJQAkpACSgBJaAElIASUAJKIDQIrFixiBYt+oPKlPnBreFgGVWpUnE6eeIoxYvvTRUr/kgpUqai ixfOE/qaPHk0bd68jubNWyHHYSFVvnxlq74XLJgryivb8rhxP7eqZ28nR8685B0/gRzyY8Xd7Vs3 af/+3dSlcys6ffoU9e073NJsypQx1KN7e4K1XP78RShL1hwES6q9e3bS6tVLqXy5gtSlS19q2KiF pQ2s5mrWKE/79u0iWLxlY4VUyhSp6QAr3vbs2UEjRw6i6zeu0fDhEy1t1q9fRQ0bVKVw4cLRN99k oqzf5qTHjx7Rtm0bae/enVS1SilavHgDfZk2vaWNow3w+u67wnIY67t+7SqPvYdatWpIt+/coqZN Wztq6rI8W7ZcYilnryKUjirvhoAqzN4NV+1VCSgBJaAElIASUAJKQAkoASWgBJTAOyXQpXNLypkz H7mjsILlFZRlefMWpNFjfhOXQWNyrdt0pmbN6tLaNcupW7e2NHbcDEqWLDmNHDXVqCLvixfPF5dF 23KrSg52WrXsRNlz5LE6CqUUlF/z5s6g7t0HiIspLOR69uzICrIINHr0b1SyVHmrNlCYNW1SixVs XShvvoL0JbtpQqB8g7IsevSYtHnLYSt3R6y7UKFv6Y95v7PVWldKlCiJtJk0cRS9fv2afm7ZUcql MOC/hg2r0dIlf9GEiSNp6NDx5kN2tzEPWy6wBGzUqDpNnjQ6RAqzNm1+CcTO7iS00KMErJ2UPdq1 dqYElIASUAJKQAkoASWgBJSAElACSkAJvAsCWdnqCrGzOnV6a2XlaJwD+/eIm2J0jv81avQ0K2UZ 2kDJNGLEZFEyQSm2e/d2R115tBzujunTf01Pnz4R6zF0DsuyF8+fi/WYrbIMxwsXLklNmrQS6zMo 9wy5efOGbH71v2+slGUohIVY48YtCcyuX79qNKGbt/zb5MlTwFJmbLRr103qh/cKbxQF+b1I0ZLs AvqJxJSDtZzK+0VAFWbv1/nS2SoBJaAElIASUAJKQAkoASWgBJSAEqCuXfuLpdSypQvEEsoZku07 Nsvh6tXrOgwQHyNGTKpZq6HU27Hdv76zPj1xzM/vGV1gl1AIXCrx2rFji7hf/vRTG4dDNGr8M33y 6ae0e9d2S6wyX9+vxLVy29aN4n5pKNCMTjp17k0LFq6jTJm+NYpEWYed7qx4275tkyjhjIMpU34h 9QcNHmMUBekda/mDY6kh3lkOtqyLEEEd/IIEMAxU1jMWBk6CTkEJKAEloASUgBJQAkpACSgBJaAE lEBQCESNFo0GDhpN1aqWFiszuDsidpc9OX36pBQb7ov26qAMAfUhcIt81wKrsuHD+tH9+/cISQcy Z8lGly9fEmszuINGiRLV4RSQ8TJpEh86e/Zv+uefC5LlE23ate9Ogwf1pP79usoL60Ess3zsuglX VCOhgdFxhw49aA9b0x0+fIB++KEoRYsWXazKcuTIS7AOQ0B9d+XYsSNUq1YFqY61HTl8UNaGPrr3 GOhuN3brjRo1mObOm2H3GJSgtokJ7FbUwiATUIVZkJFpAyWgBJSAElACSkAJEPmm9VYMSkAJKAEl 4ILA8RPXXdTQwyEhkC9fIcluOXv2NOrc+edAWTGNvq9duyKbCPbvTOLF8z9+9eplZ9WCdaxevcoS /wyNka0T7qSwwkIwf2S9hDLLMs+AeTgbKD6vBQqzq1cui8IMdZs3b0fFi5fh2GdDaP26lXTq1HF5 /TZtPNdJQUM4FhkC6Bvi7Z2QNm46SHPn/EZz5k6nw4f20zpuh1fv3p2oTp0m1KFjD1HoGW0cvT94 8C+tWb0s0GEkFED2zpDIxo1rHDaHO6kqzBziCdEBVZiFCJ82VgKeIeDn5yd/LMy9fcomxl5eXuYi MTeGSS8kYkT/dM/mCkY/MPfF69mzZ+bDFJ77g+lycARxBF5xQEx7fSBlszEvd/rGH0b84YDY68/o wzx/e+s16uEdwTqf8xzN8tlnn1nGMZfbblvWxn+sEWPAEHt9GsfM7/gjb25n8MD5w3k0C9aO82QW 2/bmY8a2eS6uWNy+fZvu3rlDCRImkF/JjD7wbszNXGa77eyc2NbVfSXwsRM4febCx45A168ElIAS cEggdSofh8f0gOcIdOvWn6BQQYD5UqUqUMqUqQN1niRxMim7dtVfcRaoQkCBobBKnMS/vqN6wSnH 92VYhkFgyZUu3deUOvWXVKduY4vCK0nAuMY8nI1zNUAJaDvXVKnS0LBhE+T5CgqzbZzx8q8/Z9PB g/vohwpFaNfuU1YZJzGv6j/Wk9fDB/dp165ttHbtClq4cJ5kDoW1mDtumVmyZKfZc5bKlBGvDEqy XTu3UocOzSWxwdq1u93KtmlvzYg7Z1b0mevEjRvPvKvbHiSgCjMPwtSulEBwCeT/LjfhFxKzvHjx XH5lyZAxIzVo0Ig+/zweLV++lAb07yu+9Tt37TNXl+1CBfOJgqh+/Ub8gV+D8uXNyX8MEpnqvZF+ MmTISPm+y88ZZdKajjnfbNq0EZ08eYJ9/rPQsOEjLJXv37/PqZjr0gP+43L37l1q3OQnGjtmlM24 luqycZX/UCPtMv6IxI4dm6ZO+53XH9+q0qZNG6lXz270iNM6f1/hB85a08HquO3Otq1bqH37NuTt ncBy6PXrVxLwM1Xq1JxCuwr/Qf7CcszYgAKrTJkSws07QQL+o/ibcYhjIuzkNNAtrPq0HAzYePTo IWXKnIX69XtrZt31l04cKHWXKPEWLFzKQVSjW5o9ffqUcL5tz0s8Xn/mzFn5WAFO753SUt/YGDZs MMemWMLzJOGVLJn1lxgo1P76cz6nAZ8jv9jhFzoo5uLFi8f8KlKRIkWlq0ULF/AXiMFyHRh9m98R RyK+tzdNmTLdXKzbSkAJKAEloASUgBJQAmGUQDQO5A/XzB+rl6VOHZvbtTKDYgpy9OghqljpR4cr OXbskBwz6jusGIwDY8fOcJnpMUGCRBQ1ajSChRueFfDMYE9gzXX5n4tsRBCJEidOKlU2bVorbYoW LSXl+IEeLqh41a3blH7p0pq/446hxYvmE2Kg3bxxnRDbzSdZCvomQ2bpAywLFiour8acWKBokey0 bNlC6tvvV6sfyO3NCQYLhkIQx6EUTJrUh3ay0mwOW7AtW74w2Aoz7/gJCGxUQpeAtflK6I6toykB JRBAAB+uUCKZX7du3WIf/n9o3969rJCqR0+ePKFHDx+KsixmzJh22cGaCUoSKIogsLAy93n16lU6 dOgg/1ryF3Xp3IF/ZTlgtx97hQ9ZMQQLrlev3mZ3gbKsfr1adOnSRVaYPeB0zK05a00R/iMX1WZc 67Wh/85duoqS6uXLV9S7Vw8rCzustU/vHqIsixM3LrVo0crelKzKHjx8IAoq83qvX78uSr4N69dR u7ataf78eVZtsLNx43r+w3qP7rBF1oP7D+jcubOWOs+E5Wuna8G6/UyWfLCK2759Gz3kcwX+S5Ys svRnbESKFMmmz6t08MABTnM9l1q3bkF//20dMwJKvWVLl0g8B7T9668/jK4s7+PHjaExY0bKucC6 L168yBmArtGRI4dp6pRJ9Od8/zaPHj8Ua0AzJ/M2OECpp6IElIASUAJKQAkoASXw/hDIn78IVapc g27fvkVdugT+7pwnb35xfZw1a6rF7dF2dQiSP2P6JPmObi9rpG39d7Wfl+ON4cfgoUP6OBxi+PD+ 8lyEeRpeOXPnTKemTWrS5s3r7LbLX6CIlB865G948PDRA6nfvn0zu/UREy1lqi8kDtnFi+fs1nGn MF48f8OA8+fOuFNd64QhAmphFoZOhk7l4yYAJVOx4iWoRPGS9PrNa7px4wanfp5H+/btFYujtWtW BwtQlChRqMIPFem7fPlFibNn7x6aNfN3/uC/z779I2jixKnB6hft67Gy7Mrly/JHqm3b9lSmbHn+ A3xV+oPbYKvWbekLO1Zdn7IiKUWKlJQ333e0ccN6wh/npUsXswl5GWnbrWtnUcBBOTR48LBAbo3O JhwrVizq1bufKKvOnj3LwTYP0cqVK+jx46s0c+YMypgxk4xt9DGFlUlQSEGgOINSrV27jrKfLVt2 mjbtbXDN4b8OY8XWfvm1aOTI0VIH/8U3WbVBmWUonGBxt+Cv+RxXoprlD7nRCGurV68BW+xl5nPx gPbs3U1zZs8US72xY0ezFdhbK77Vq1eKwhRtodDasmUzNWrUlH/BiiTdwR0W84aiMa2vL3Xs+Asl 9/GhTZs3cbDTPoTMQ9N+m0IlS5U2hucgqlH4/I+z7Js3oKRUUQJKQAkoASWgBJSAEni/CHTvPoA2 bVzLPxgfCzTxtGm/opo1G4qFVX2OJTZu/EyLZRYqwwWyUcPq/J35ESGI/P/+lyFQH6FV0L37QNqw fjVNnz6Bn4NSUe3aja2G/n3GJJoyeQx/349oFUw/d578tGjRH2JJhoQAX6ZNb2n37NlT/l4/XvYz Zc4m7ylSpBbXzKNHD9IgThTQtGlrq1hlyLYJi7zYseNYXEYtHbqxAaXfiRNHaAbPF1KsmP+zjhtN tUoYIaAKszByInQaSiBcOC822U3GH+y+AsPXNz19x+55uXJ+S9evXaOTp05QksRJggwKpsgpkqe0 9Jsl67f8wX+E9rMi7iYr5YIjoiyry8oyDrCJ+FudO3elosWKW3WFcVNx/ARjPVYHA3b69h1AxYoW ZGuoC2IFBQXVmTOnxZ0R/ZZlBVzaAB722tsrQwyCNGm+ZKVWNPrqq/9xH+Wofv2GVL58abYgu0+T Jk5gk+oB0hTruHjhArtMxuBfj1LRgf37OJ30NlE8RY4cWeLEmecfJ04caQdFlbncPI95c+fIbu48 eWkrK7agi9u1cwebn+c0V+Nf7rxEcWf08222bDL+sWNHOXCpdWyJ36b5KzVx7vbu2U0R+cvB6lUr WUFZTvqEWyiUdFCCVa5Ulb74wt/1tGDBQmIR2K1rF7p186ZYtRmTACdjbKNM35WAElACSkAJKAEl oATeXwLRo8ekgRw8v0aN8nYX0a59N1amHWVviM1UqGBWypO3gLgjXrx0nhVt6/iH238Jcbg6de5t t31oFSZMmFhihrVt04S9YlrRvLkz+EfmbGL5tn//LolFBmXZgAEjCVZghlSqVEPijm3dsoEKFMgi yrDsnCET7p379u2WsCXImlkpwCUVzyu//jqJ94tLtk4kCsic6VtphzhmyNgJAQ94BLmSI0cOSl+o 94pjmB07dkSYYh/zKFHS/7s79iE4jrFtxYufE2bOWmz1g3uPHu0pRsxYtlUt+yNGTOYQN29D01gO 6EaICLg+6yHqXhsrASUQEgI3WclhBImPGsVxWmVXY2zl+F74kH/OcdFOnz5NpzgWGSR37ryumgY6 jphi9erWZGXZFfkQ79mrLyv28geqJ4qiXTsIrpy2kjBhQkqSJKm0Hz58JMcUqMW/Zj2mrr90FpdI uJUmTpyYmjX/2bZpsPYRm8zXN50oCvGHCUzxB3LSpPHiZhojRgzq06c/W/cVFgXgiuXLJG5aUAeD JdcdtiqDsq5Zsxb8i9JxsbibPWdWIIUZ+t60aaMo57Dev0+fEjdKlH+XvwDeRP79919xs0Sst5o1 a4vSC+P8n72rgJOq/KKXXRoWUemSRlpA6e4OAZWy/ioiJSUoXUp3d8PCLt3dHUorIN1LSKf+77m7 3/D27czO7LKLIPfym3n15fneDDvnnXuvv/8cB2EWn//zhPsnMBw9eiS7bPrxH0DFRb1Wpkw5jl9W wTTH6rQNsg/X0R0co82ZvftuZgImaoqAIqAIKAKKgCKgCCgCLx8CIFRgxhXROsJSpSuwd0k99lSZ TlH4n9UQU8t39jIaO2YoTZ48mkN+zHN4WiDY/neNW4rKylm7ph0vL2/u19scerQ14/DiB+KeWvXq H1HOnLmFMNu1axvt3x8YSiZ27DhUuEgJzmA5QBIGWNvDuCdN8uMwJQNoyuQxQpT5c7B/GBKfffZ5 Qw5/0kG8RUy9goWKsSptHf8WaM+k2g7atm2TucQPoTPTjz9145AzlR3nsIPfEXgZM3jhITbIOmP4 Gx2JDZC1E4kNjJnyICit5c11bKFOQzmz1iDjQrN79+6GdlmvhRMBJczCCZxWUwQiA4GZM6bR4cOH 5D8uqLfOnT0rWQ3hZgh3OgS2D6uBGPn996PyevzkMQVwbDST0fKbhs++uD1tF+PDlze+xBFLLWfO 95xWRayzFSuW8Wt5sOtIDgAyp1279nI+MxNZtTgoPYLVQ12G2F9Qdw0aPNzpHwHBGgvDQcaMmYQw 4//iJN4BFFYrli+XPspXqCTJB6Dwg9oNZBQSDYTVRo0cQci4mZjjFKAtKOTGjR1NZznGG1xVkyZN 5mgSqbT3sqINt5wX9wAAQABJREFUL+u6IA4diDFjo9g9E1l2vL2jijsp3Dv79e0t9wXcTbPnyCn/ YSMpQs+e3YRQu8iKRLi5IsA/yDgo0erWrR8ss2pMVskNHNDPdOPYXrl6RRIY5MsXKFV3XNAdRUAR UAQUAUVAEVAEFIGXAoERI6cQXq4Mqim8nBn+jm/4bXN5geBBbC64LyLYvSd28tRNT4oFKzNy1FTC K6yWJk16UVrhYTfGid8fqVOnC/U3AoLugxTDC38PX7p0gR8Exxf3U3iwOLPcefKS/9xV/BvpEZ04 cYx/i/1NyZOnZC+U+M6K0+9/XAl2Pl26jHT+gucxgMNS3t1aBxuIHkQ4AkqYRTik2qAiED4EbnPQ erwQmN9q+GL/3/++FgJmC4WdMMN/LGfPnnHEATPxupBNslmzxhzHYHKo/+lYx2L28R8t2rl//wFn 4vmB/8MeE6INkDxnzpwRxZaph+3Tp08dYzHnEetsI8fbQpD6aNGi8xOYr0VhZq5HxBYEGcwkRIC6 Cn8kyHmeC1RZqVKlEsIMY4R7Zq7ceTzuGiQkMmNivaD2QntGpQXllz9nsGzSpJmjPazLuXNnHdl2 zLogE1ArzswJTGGrV6+SNkFAIlmDeZoVEHBV4paBMINVrFSZn7YVlbh0cCtFDDz0AVu+bClt40QE o0Y/+8PpL1au3WW1oN1QB+NXUwQUAUVAEVAEFAFFQBH4byOAbJRQQL3shr9/QZSF1RBs3wTc96Qu focgo6aaImAQUMLMIKFbReBfRgAukyBYUiBOGSt8EyZISFmyZqPKlatIjC0MLwYH0oeB1ADBYsgT OclvIHpg3hYfe6i1oD4qVz7QLQ/1+vT5hYPR+wsxAoXT++9/IPU8eQOZMnLUGM666McplhdJHDOo qOxqNQT9Hz58NM/Bs/906jf4VJRTUNNVqxbcv9+Tcbkrc/zE8aAiUYSkwpgNobRo0YJg1fE0ypcV b2EhzJayG+f9+/eEOAwICKAx7BoJw7oik+aqlSvom2++dfSDFNg9e/7icNXEunTr1pngDgpC8tix P/ip2BUJvIrjp0//DtYm4q8dPHhQUmdfvHCRDh85RAneTsAB/ztIH5gb1mfihPHi0pmBky9YXTBx ry1fscYxHt1RBBQBRUARUAQUAUVAEVAEFAFFQBF4hoASZs+w0D1F4F9FAPLhz7/4H9Wu/bHLcaRJ nUZIMqiiQKjAzdDYVXalA+mCJyNwCXRlINmaNGku7nrICgmVU1gIM7hgZsmSjbJ0yka7OePm5cuX hJjJlSs3ISh9eC0quxzCong9iwcQ3rbs9RB37Qi7ksKyZssmccP++ON3Ubr5xItH8TiegzGQjnAL hRsriK8EHmaMnD5tiuAPl8q33w5MDoA2ESsCCj8vby9as2YVFStWwnQVbIt1adjwO3YTXSbKN9SZ OnWytAnSzdom4iEgjlnUaFE55sJ8wtqDaAPTWrBQYZkXSLYqVarJC4kjoEg7w66haoqAIqAIKAKK gCKgCCgCioAioAgoAu4RUMLMPUZaQhF4aRDIxMHYjWKpf78+HHvgO4khhuDyI0cMk3hVUJS9lytX sDGfZVIMBMzff/8jRMts35lBKrW/OVhmYEbFYBU8PBg9ZjzVrlVd3P969uxO48YHZnNEdebupE+f eD5OW4M8OjJc/548eSr9xo0bl65duyYulsiMee/ePcki2bTp9zR1yiTBCvEMZs6cHSzw58mTf1Kd Tz7izDZPmYyaJ+6wTidgOYn4ZCAOoapr36EzITul1UqXKi6ZTmfNnBGMMDvLMepS8LqApPvzzxM0 Y8Z0WRccJ0+ego5zggZk5Pzmm0ZUp249a5OcXbQMnTl9moO1LqLWbdqy4m8Ox0hLyhlL23G2nTpy X2D+szjhANrD2mdigvXAwf3SDlxIcU84M5B3onR0dlHPKQKKwHMhgM8jvjMecbxDfM5AssOgCsU5 GFy7jRu5nLC8IS6l1VAH36XOvk/hGo8MulGjor3o8v8H6qMO+kUdu1LZjANlYvF3GoIkYx/nQzP8 34T+3BnIfLyclcWcMXe7IRYjHgihD7yshnFdv35Nvu/xsCg+q5TDahgLXsDCjqPBIyxtYqxoy1l7 ph0rps7WwZTDFu0BA6th/YCjOzNz8+ayWEtjzto016xb9GHuUZy34oH/8+xm1sqct9c3561b61jc YYHQFVBVv80Ps6wPktCedWzW9q37oa2JtZzuKwKKgCKgCCgCQCD4Xx2KiSKgCLzUCIAMQ8bDxYsX EhRSfdm18sGDh6JeusIxq2BQgCVgd05j+KMcMaxWrVpB/zBpgmCWVznwPyxrtuwctyCbKRrmbZIk SahV6x+od6+f6a+/blK7tm2oS9fu0g5ihY1lt0dv/qFmN8RpGzZspMuEAfbyYTnGH8NdOnfkHyr8 xzP/yLh75678mIoaNZrERkuePLmostBm+gwZgpFlOJcmTVpKmDCBBAkFGfX55186/QGHssbGjhkd RMC9QcWKhsw8WrpMGZo/by4rx+44MpQ+efJYEh34z50jP4aeMIEFF0xYgYKFJGECSC1k3KxQIWS6 6apVq3F2o4lM0sWQvjNleldUcXeZGLzACSMCf1RHkbh4aDNjpkxMpOZ2EGb4Ydq6dQtcCmGnT52i 7Tv2hDivJxQBRSD8CCDj7ZgxIzkb1iYmr5j44c/gA44DmSNHDqpX/1NKnToNFS9WSIh3uExPnzGb QPxbzY+J8bHcBlyyoUaeM8dXLoNkWLJ0ZYjyTRp/S7/+uk9IJsSG/PLLr6hE8cLynQNV85AhwyRx iLWPAf370Dz+vgKxV7hwUerXfyAnIqlHt2/dDkacWOvAjf3rrxvSyJHDKVmy5NZLwfbRZrTo0ahK 5WocP3MsEx4Jgl3H9yIIM4QjaN68hSPuTNkygcrcL3j8+E6GgWRZunQxjR41gomjwNiR+P8NCtya NWtTef7edEa+Besw6KBfv978/+QyJsui04qVax1FQDY1a/qdPFzA/5voe9KkCaHO8cKF85Q5SxZW NR+W7+/effpLwhZHo7yDMp9/1oDd9f+ShyNz/OYJuWYtY92HGrxihTLB+kVcS8QeQsbpmjVruVR4 N2nSiE6dPMnN/UOLFi93ELHXrgVQ5Urlg7Vp7RP7wBgYLFq8zHHJz282DR82lLH1oiFDR1A2/jvC auXKluQkOs9U1riGLM85cuaUzNxQo9tt/fq1/P92J2kTD51KlSptLyIZnidNnCBqaRB1j/j/x5gx YlLVqtU5G+BHMq8DB/ZTw2/+F+qcMO8NG7eGaF9PKAKKgCKgCCgCzhBQwswZKnpOEXjBCIDUwssT a9+hk2S53LhxPZ2UP4LZEY/ZITx1B5nWsVMXRzPmifS5c2cd50CUwM0QmRMbNPjccd7dDhRXMJNh 05RHJsg1HJh+166dkoVy5IjhQgzhurVfU97VFnOAXb50yVWRUM/zs3y5jj+G8YJhrsgGmT17Dmr3 Y3tKly49HT16RAg0PPWuUye4aksq8Vv1GjX5R+ko+VGzYcM6Klky6I93Vs3BkCzAGJ5o40cbLA/H grM+wTdlGjVqIi6wyHw6jV03ofiAWfHBE/yECRNSjQ9rUv36n1HJEkWkDH4MOVNM4IcjXDaPsQoN 8djGjptI3bt3oXVr19It/jFtDD+kqzC51rp122A/yPDjHS81RUARiHwEQBQ1/q6hKF6NkglkBGzT ppt0hL+X+vYdQF26dKeuXTuJInZA/77UqXNXx+DgVj1m9AiJiZgsWTL6hL+/li1b4vi+3bB+HVXi mJfGQNCfPPmnHKLPB0HfO/iuwf8N+O5CUhGTOMTUW7lqpZBlgceBY8T/T+g/NAOBAQMZFJohW/Dd e3dlDK7Kwi2+4aGDNHOWnxCI+B5DLEg8WDAGnLZt3SoPa3AO3+mYEx7I3Obv6F27dlBnxtP832Lq OdueO4eHDPeDueADs28bfiWZq0G8ffTRJ/Rto8asSp4e6hzRX5vW7ahRo6/Fvb9H965MfvqKWhh9 Y93btftByLLo0WMw6eRZRmg8MLPjheQuWOPffz9C73+QlxXGnYJND2EFjh37QxK8IKv1unVrqGzZ 8lLG/D9kbzNYA3xgV3H5zprJaxeocpzCD2368H1rNczP3iaO8f/d9m3bRLVdyqbCRqxN0yayhdsJ s82bNlKf3r84HvZJoFcmAGHTpk+hY8f/oE6duhKS2cDs/cvJoDerWs56XvcVAUVAEVAEFAFnCChh 5gwVPacIvGAEtmzdKT168oc9ynTt1kPKnzhxXFz9oJRKmDBRCPeMrdt2hZgJflRYDT+C7CSY9brZ n+XrJ7vOxjiU1WL4oWKse4+fza7LrX0cVatVF2IHFazX4EoJ9Zo7K1qsONnna23H1IcSy5Rzdh3l kJX0C44nB7POtwcH6bfPDW2Y9qxlpXLQG9QiZo2t580+6tnrrl23SS7bz5s6eMKONs2PboyjR49f 5BhE6nn+cZIy1TuUOnVqU0W2IElByKkpAorAi0MAxDsIA3ye69ZrQJ9//oUod6DkAuEdwOqlEcOH Ud9+AyQmJB5A7NmzSxJ15MuXXwb6o5Ast8RlcNjwUcG+M0CAzZvnH4wwA4GGTMauDATFBn7w8n2L Vo62oFy+x1l9XVn27NmpVasfnF5OweR+kcKBRD8KTGHX97Vr10gym8GDhznqJOD/q2ZzUhUY3OKX LlvpuHaIE5n4+s7geI+r+SFQNM6evN5B8DgK8c5WzvqL+UFJmzJlSvqpfUd67z1W0O7fz0ltfqbj x4/L/0nIvlyM/28Iq4Esa8hkGWJf4mEUHq40+q6Joxko/6BsKlu2nOOc2YnOKrV33klDHVgp1alT e1H5Dh0yiH5o+6MUgSrwHLvD4zv7q6+/EYWZqetui+/9xpxtORvH4jx37rwQZQvmz2MX34u0dctm wc1KNs2aNd2RDRkPSKZOmezAE8TlpElTHV1Onz5NlOhQg+E+9GbVHuxti2Id5BtUccag6LrJ6jf7 Qx0oo0uUKEkffliLE9fcpd17dtO0qVNEGTlm7CiyEmYIHSBxPrk/KNNB8oEEhNrb2BDGDwo//F/a qVM3VmEXpEOHDrDKvreo7bdv2+ogh1EnceIk1ILva6jg7RaP7zk1RUARUAQUAUXAUwSUMPMUKS2n CEQiAq6IG3ddQjGFlyvzpN1aNasHue+5aiXw/PoNW+RJv6tSnvTlqi7OOyONcB4ZLAcO6IfdUK0Z u+/UrVs/1DK46Kofe0Vn83FV11lZT9qzl7Eee9Kms/HgXNq0aeVlbc/sO6tjrulWEVAEIgeB/b/9 JooqqHzqs/tlvHhvSEcg53czOQa3yX37At2gBwwcQuXLlZLYkHB3nzZ9FhMhK5kEOiYuhl991VBc zhAHDQb1E4hzkA4gJ+LEiSPn5871Y+Vy8LhXcoHfQGhAxYVkK4dYyWXc6pC8BGSRK3vrrQT0buYs ri4HuwbSAhaD3eZc1eGvKxm/aRBue3htYdfUmzdv0OFDhxwEjymDLdxGoZBKwKpc39lzHQ9ZUHfM 2ImEuJEXzp+XJCphJcyCk2XR5OHJF18GPkAxY8D36DvvpHY5L5Qrw2QawicgOzGIO2SqTpIkKY0f FxhTM0PGjPTpp5+bJj3aRoniRen5//zMmbPKq0yZstS4cTOJaQniacTwoQ51Fu6JJUsC1c/FmbwC wQjXTpBeiF0KItC6LomDyCWo3jJlCoyXah8USFDcN5h7YBbnu+TP9xnuY6thnClSpHK0D/X1Cb5/ gYOdkIVKDWuJuKb3ONP0jRvXmTSdySq89o4mcQ5WsGBhKlS4sOxnz56Twz5MoOLsYox5/XnihMPd FOpyzDF5ihRSVt8UAUVAEVAEFIHwIqCEWXiR03qKwH8EAbj1HOWkAaHZGxwTBn9c/xuWPn0Gyp+/ gNuuEbtNTRFQBBSBlxEBkDZIwMEcBn35xaccOzIrFSpUhHLlzk0jR40NNmT82O/dux81a9ZY3L87 dfyJoOQBqZAxYyZq8GlwhSgSg+Aa1FYbN6ynChUriZsmFG0g0+AOajeQIkS3xc1y9eqVDsJs2/Zt 8l3vijQDKQcCyG74/yFPnvftp8N8jDlsYvc7GHDAfO0G1fH16zeEJKvHaj37wwW4Lo4ZO45VewH8 QCmdvXqox4gLhhhYSKSDOTX6rrFL132QnEk40YrdQIpCyQzr138QlS9fWnDu3q0zu2XGFtdSrNnQ oSPtVcN1DPKuTp26Ej8OMdwuXbooxNwezmINrNDnTz91pH1790g4ghmsJOvcpVuY+4KKccf27fLQ 6RPub9fOHaIgRHxOKLLt64As2smTJ6cnfP/9+edxVkzulj4RO9UYSL0VK5ZJm4jLGcDhFNDels2b ZOxYS1iyZClETQflZd06H4l6DS6o2bJmo23bA9tFOdz/MKwj7tPk50MSZqlSpeIEOcmknL4pAoqA IqAIKALuEPh3fgG7G5VeVwQUgReGwLecafNlNvwIi4gfYi/zHHVsioAi8N9GIFfuPFSUE4JAYQMX c6inoBhD4HvE5/rq64ZMApRygAAyALGmli9fSjt37pRkLSAPEGTdmWVhAg7uiFCVgTALdMe8L2RJ rFgxLbGfntXOniOH1Nmwfj0H2G8pyiOof2KzQu1tDtoOtzi73b17x6niFzGjNm7aZi/u9hiETo3q laUcIlJFYzdMEHwgzuB+V5oVVHZDjMonTx4T8HBGqKF8tmw57NU8OoZrI+KCIcQAiC9nAerREMij I0cOCbFmbRix3t7gehMnTpHTIP36cND/phx4HyoouBWCWGrb9idp31r3efY/+CAfjeLkB0+fImPo 9UAl24Rx9JBxBHkXL148iXEKV9idO7cLoWpPKOGu/1WrVsi6wC20UqUq9H6eD2jDhg2iYoQ7aOEi RR1N3OMYdSDuRo8eKfcu3CxN6Ifvv2/pKLeTSTejivyQEzVEZYJ34YIFgj+SFX3IyQxgvXr1oXr1 PhbiEWEkoDhbxbH2QBTDPbNRo8b05ptvOdpFPL3Zs2fyMUsYLQZ3UrhEQ+WppggoAoqAIqAIeIKA lyeFtIwioAgoAoqAIqAIKAKKQPgRQHD08ROmEGKSebMr5OnTZzgO1TnenuZMjyOZPBsXrHGogN7k eFJwq4RSDDGwQOI4MwSkR5kzZ06LMifQHfMR5c2b11lxOVe1SnUhb5Dt8DDH6po+baq4YyZlt0GQ Is4MZBKSl9hfgYo1ZzVCPweCCSQVXpf4BQUbyDdkep423ddlVk4o4KJFi+6I4Rh6L2G7ithpsDuc YblLl47igmhv4fHjJ7JudhyQLdROROGBT3l2xwQxBKItN46dZD629xGW4yheUWQtHzORCMUZEiQc 43h0IOfg/ov7Ae6rMIxhCbuKhtVwf+BeBKEJV9Ndu3eKkgsZW5E51GrGRfjy5UuchOe6Y52SsiKv WdPGQnSh/ITxY4VIQ4IKZMpcvWYVn/2H61wTt0zTZlJOcrFq9XomxppIbDOUx71+9eoVUZV9+cVn wZLYIK7a2bNnQ9ynwMW+PqYP3SoCioAioAgoAs4QUIWZM1T0nCKgCCgCioAioAgoAhGEADIJ32BV GTL2Dh4yXFqF0mzK5Enk5zeHTp06SYsWLhDli8niB+KjBmchBpGGmGPly1d0OZosWbKx4iqOKICW Ll0sCQZAoCFGVps2zxQ91gbi+sTl4OiJJcg6xrd9+1Zxg6zJqh4kI3BmxYqVoN593MeUdFbX2Tmo 6378qYNcOnvmjBAxIOXgUvf770clc7C9HrI8w10SSQuA2/scH8tucN27euUKIS5XWBTKIAqRqRTZ lEECPWFirHv3LuIii/UwFjduHGrSpLlkmzbnQts2afp9UCKDqOySGzweWmj1PL128MABIbK8mSBD AiA/v9lCnGLMSORw7Njv0hRwA9mEGGEffVxHyDVP+gA5BZUYDGs2hpVjMOMObLJgpkiRUs7HiRNX 7uVPP/tcjkGgDef4atM4s/O772aWbJ1FWJH2xx9/yHXc36ZNtA/lGMjUffv2UiKezzbcm0xkfsbJ MvCCIebf+HFjaS+7mqL9hQvmU+rUqeUaXC6RaEJjmAkc+qYIKAKKgCLwHAiowuw5wNOqioAioAgo AoqAIqAIuEOgX78+QghMtKjIkCGyabPvOcNjIGEULVpUDqR+OVhT3lG9A48tZE2wAkEHuIxYj1AP 9evbWwgHkBbWoO7O6oGEg/vjzJmcTRHumOzmWLJUGWdFI+UcCBeMAa+vv/mWFixcKio6uC8OGzrI aZ+IyYW5wZ3Tb85scd+zFgR50qZ1CyZMBnA8LH/rJbf7ULYhQP637OKXLn16IR4vXrgg8efcVnZT AOQVguFHtGG+yIYJg+oOhCIypsKtFPi+/fbb9Ba72OIFMg326NFjQowxT2369KmS7ROEG9ow7YGY AjELldmMGdNcNoe5I/wDtiBEof6aNXMG36f3hKRNyOo3e5tQj82cMZ0uXDxPQwYPlPUEcWcsV648 hGyxUK2hf8T5U1MEFAFFQBFQBCIaAVWYRTSi2p4ioAgoAoqAIqAIKAIWBLJmzUqbOZD5yZMnadzY 0VSyZGlKnSaNqH8mTQx0Z4Pyx2SWtFT1eBdqnnXr1ohbJdQ5JUo+i4nmqpEGrECbzFkKYXBzTJky Vagua4gdBbdJZwYS6y12IX1e+5rjufVl0u/mzZt0+tQpeidINWRt93//+4pAQkKJ9G3Dr4Rs+4Dj vmF8Awb0ExIQ5EzFioHx0ax1Pd0fxckYKlcqL7Hd5s31F3WgySaKNs5fOOcSC8TTiizXP5BNcK8E SXSeM4Eis+nNm38JcdW4SVPJenqHM1lCqdh/wGCyJsQBuVayRBF2eQygqaz2AmbuDPcFYuLBEFMO CjyrfdfoG1F5rV+3VmLhmWvI4op7BX3C9XjeXL9A10wmdzNmzCjrh7JQAA5iNZjVfvihlbhaHj16 WAL0Yy0RA639T+1kraEqxPHmzRslZhvqZno3MNEC9v/++6n0/fc/f+MwhCFbKeLLqSkCioAioAgo Au4QUMLMHUJ6XRFQBBQBRUARUAQUgedAoH2HzlStakWOe3WKlixZzPGa1rFr3G0hOaC4gbLrW47P 9Dw/4jNkyCjKK7h6QgkEd0x3hn6TcSbDc0zCgGCpVeujUKuABGnN6i273bl9RzJtRoS7ZpWq1WnI kMFMCN0S18JWrX+wd0e1an9MC9mFFe6GiKsFVR22Xl7eQpqhQubMWTggfKEQdT094eMTj3r0+IVA 3iDQPFwzx4wJJDeh0Fq7Zg0HvV8forlrAQGiUHOHZYiKHpyAq+qUKZMIii/mkJg0esIx3y5wzX+o IM+1XLkK1KplcyES43N2aytZhuZBPBUsVJjggnvixHFRNCZKlDjUnpGoAipE3B9ffvlViLING37H scW+FnXjyhXL5TrcZeEWu5fdJqF0e/TwkZB0uJiM45G9/XYCus3xxGLGjMVZXz+XOtY3uLtuCup3 +fJlVKdufZrMLrJwwR06ZJAQb2b+IE2R1ACB/HcGZXBFZs7+/fuSF8fns9t5Ju+mTZ9FqVOnsV/S Y0VAEVAEFAFFIAQCSpiFgERPKAKKgCKgCCgCioAiEHEIvPnmmzRp8nRq374tnWKVGVQ3xuAy15Dd 1apWrWZOObYcyl32b3DmQ2cGVZrVChcuwoTcInHFS5cuvVx68OChtYgQG3DdNFapYhXOZjhCiI1i xYvLaTM+EDKwx0wQwZDlkd9k3/52/8F9+yk5truZWgvZx49rIGagQIKL3Zw5vtSiZWtxF8U1C2w0 ZeoMVin1pgXz50kGSlyHxeEsn3Xq1qPGjZsFnvDgnbknMajarFaEM5uChEK2UqjdQEYZ7M6dO2st 6tgHKeXMQDoR4RU+gwsqzPQLV0jEXEuRIgV917iJZFmFi+OWLZulXOkyzl1rgcvaNasJxN6c2b7U uElwnJDd0mqjRw0XwgyunqlSvWO9JPs533uP4sSNKwQY3GCh/AJJZsaJQiCCcZ9XrlyVPv3sC8ER KkisVe7ceUK0mSpVKlHRIQ4dFJlbtu4Uxd74cWOCqfqQ1ACkYLfuPYIlqrjCJLSaIqAIKAKKgCIQ EQhE4T+Knv3VFs4WA248oVEzLpPvkmvhbEGrKQIvPwJ7F2SnBw+fchyPwB8Qnow4S+YkdOz4KU+K ahlFQBFQBF5bBDKkT02Hj1x6ofOPHdub4vlEpUuXn5FHYR1AeL7jQRQcOXKI7ty+S9myZyPEMnNl +BPN/JkGcsBuICZg5popD9LGEDemjDlnP0Z9c85VO+Y6yroy0765bsaCY9OuJ9dQxl7X9G/vw7R3 +fJFOn7sBGVgoi1RokTmtLh1gkRyZ1A8QZUHs48V50z/2PfEnI3TtGG99pjvhQB2j3RnsViJFe+N N4IVczZOFHDWT7CKLsrYMTd1PGnPWtfUs27tYw1rm9b6UPv9fvSo4JElS1ZRaVr7Mm1bz9n3re3Z r+lxxCMQUd/vPvx9HTOGF10NeBTxg9QWFQFF4D+DAJ5bJU3iPNt3eCapCrPwoKZ1FAFFQBFQBBQB RUARCAcCUFDlzJnLo5pWcsVZBfsPf2fl7WXsx2jXfs7ejv26s7HYz9nbsF4P7RrK2a+76z9x4qQc /y2ptQvZb/9TW9qzZ3eI8/YTY8dNlBhl9vPm2F3/plxoW2dt/Prbr9S0SaPQqsm14sVLUq/efd2W QwFn/dgrOitjx9zUcVbWXDNbV3XNdfv2edpEYoYEhRPam3Qce9K2o7DuKAKKgCKgCCgCbhBQwswN QHpZEVAEFAFFQBFQBBQBReDVQ6AQu6i6iwv3Bsf6SpIkyb8yOSRJQHZTd1a5chV3RfS6IqAIKAKK gCKgCEQCAkqYRQKo2qQioAgoAoqAIqAIKAKKwL+LQF0OFo/Xy2qIM2fPEPmyjlXHpQgoAoqAIqAI vI4IhAyI8TqioHNWBBQBRUARUAQUAUVAEVAEFAFFQBFQBBQBRUARUASCEFCFmd4KisArgsB1zpI2 ZMhAGW2lipXpg7z5Qox80sTxdOr0KUqeLDl9/c23Ia5H5glkAFu4YD6tXr2S4GbSq3e/yOzutWt7 584dtHTpYvqG1zUZr+/LYAj03LVrJ8qRPSd9WLNWpA8J9zc+By1btYm0vg4dOiiZ+erUqUeZMr0b af1EVsP6OYwsZLVdRUARUAQUAUVAEVAEFIHXDQFVmL1uK67zfWURuHv3Di1ftlRefn6zQ8wDKecn TBgn1zdt3hjiemSfWLt2NQ0Y0Jfu3LlDb3H6+IiwObNn0dSpkyOiqVe+jdNMhGL9AwLcZ1SLrMne vn2Lhg8bQtu3bXV0gTHt27fXcRyZOzt2bKe169Z43IWz8bqrfPHCBcEZ21fRIuNz+CrioGNWBBQB RUARUAQUAUVAEVAEnhcBVZg9L4JaXxH4FxDYvn0b3b9/n2LFiuXofTOTZI84Rf2/ZVu3bpH07uMn TOJxxY6QYSxduoRu375NDRp8FiHtaSPPhwDWAgQmspDlL1BQMtn5+y+gOHHiPF/DkVTbPt5I6ual ajYyPocv1QR1MIqAIqAIKAKKgCKgCCgCisALQkAJsxcEtHajCEQUAjly5qT9v/1G+GFcqlRpR7Nr 164hH5949LZN3QUXtiVLFtG5s2foydOnlCfP+1SwQCGK/+abUnf9+nV0lq8hC9cCdqm8dPEiFStW nPJx5i6Tnn3NmtV09eoV+uSTuo7+jh49QlD8VKlSTVwFDx86RNFjxKDZs30pd+48lD17DsK5devX UsDVq5Q8RQrpO1u27MGylqGdjRvX05UrVyh3rjxUsFBhih8/Pi1cOF/UVI8ePaTJkyfy+KrSzZs3 aPPmTVS6VBlpD4MBcTiblWhZMmcRN1XM58L581SyVCmaO9ePvKJ40beNGsu4ob759dd99JDdR9Nn yChjjxkzplwLrZ4UCHqDy9uuXTto29ZAlRXc9ipXqSpkoSkXWj+nTp2kDRvWU4kSJenggQMynncz Z6bSpctSvHjxTBN0+fLloHU7S6neeYee8tpZzZNxWMtjH+q/xYsX0vHjx+ReycPrVLhIUUcx4Jwu bTq5N9asXkXRo0en8hUqUpo0aenWrVs0199Pyu4/sJ8WzJ9H1arXoNVrVkkdtGPmVoT39+zZTXBv bNashbjoHjv2B61ft5Yu8v2VImVKKlWyNL2TOrWjb2c7e/fuoY2M1f0H9+Xe+Pvvv4MVC+3edjXe J0+eEO7nQwcP8P10kzJkzEgFCxYiBN+22uMnj8nfbw4dPnKIkiZJShUqVHLccyjn7t6Guyru7c2b NtKlSxcpadJkVOPDWsE+n+HBBPNawmt48uRJihM3LlnXcNq0KTIu++fQOi/dVwQUAUVAEVAEFAFF QBFQBBQBzxCIwn/U/+NZUdelAm48oVEzLpPvkmuuC+kVReAVR2Dvguz04OFTVjw98XgmWTInoWPH T7ktf/j4Q/JfcZuSJIxKtcr50JtveIeoA1Krdq0a9NVX35Cv7ywmtPJTjx6/SDmQRuXLlaKyZcvT kSOHycvbi6ZMmcE/1C/RF5/Xp7/++ovSMhESPUZ0On7sGMVgYmvadF9KnDgx/djuB1rHbm6JEiVm 8umeXIPbX3EmdHr16ivtt2rZXAiQ9Ru2OMY1Z44v9e/Xh8aMnUA/9+xOFy6cF4Vb8uTJqT4rwtBH t66dRQUHUgnkxpkzp6kAkxMDBw6RdkBo9evbh4kiHyGFjhw+LMSTn/98brOHEFOPHz8mtDlgwBAh YLp160wDuD5IDhjarVihDH38SR1q0aK1Yz6YG0inDEyMTZk6g9q1bS1EFci4uEw0nDt3jlKkSEmj Ro+jBAkSOK03ddpM6cO8YSz1639C57ku5nT37l0hiUBCDh8xmvB16q6f1atWUocOPwpxcuPGTZkb 1hbE3dJlqyh27Nj054kT1LhxQ77fHtK772amk3+eEHIH4wDemZkcDG0cZrzWLfpo2qSR3BOpU6cR AhTjr8REaceOXWTsBfK/L2TlrVt8LyZJwoTlVVnT7j1+pqxZs1Gjb78WTKFsfJfHMILnjDplypQj lDFzS5AwoZCk6H/2nLm0f/9v1OuXntIHiCkQRdGiRaOu3XowcVjKOkzH/my+xwcO7MfjSCrrA/IJ +KPtxYuXu723nz59EmK8I0eOodatvhfSNWHCRJQyVSrG+rhg26FjZyFlzRxwj4Bcw713gtfDx8eH RnB93E9Lly52e2+PGDGUpkyeJPcYYvph/FGjRuPP3UyJQQfiMqyYgJBswmt488YNWQ+sz3kmh80a fvJxrRCfwxo1ajowfZl3MqRPzeTkpRc6xNixvSmeT1S6dPlhuPv19Ds+3B1oRUVAEVAEXnEEIur7 3Ye/r2PG8KKrAf+eN8UrvhQ6fEXgtUAgShTih92BgoiImLDGMIsIFLUNReA5EHj85B9qP/Aqrdtx j2YuvkXj/f4KtbWoTDQUK16ctmzZ7HDB3LZtCz1kcsWqOEMjK1Ysoxv847p9+078Q30WxzibQt26 9RQ3x40b1gXrp0CBArRs+WpauGgZFWKVF+JUoU1PbJavH2VjRRnUbf5zFxJ+pM+aNUPIsrnzFgop BeIExMo2VsaB5IJibcjggUweJGNSZR6NGTOBlWTTpc+xY0YxKTaY0qfPIIQD2nSnRrKP8/33P6Dl PJ9Jk6fR0iWLhSyryMkSFjHZ4sduhG3atGPS7CyNGD40WFVrvWAX+AAqvtOnTklChfETJhPmXbNW bQq4FiAKrLD0AzWg/9z5NMdvHoGsgWJs+/ZA1drgwQNEDTZ+/CQCyTNv/mIqUrSYYzjuxuEoaNkZ MKCfkEwgQTHuJUtXMulYmNVKi+ReMkURC69Hz58J6wasQGxBfYdEAyNHjZViH330iYzL1LFvY8aI KSTllq072V0zLg3o34/efPMtubdAXvr5zRfyqE/vXoT+7AbCFoQTSDrf2f40dtxEmjxluhBnpqy7 e9vZeEF0QqGIeS9avEwIP+APEnXxooWmadmCQJ7PuE+fMZt69+kvn5nRo0fKNXf3NtZyxvRplDFT Jr7X5geSyj/3poQJE9ABVhVeu3YtzJig4/79+woROXDQUBo9Zrx8booWLe5YQ2efQxmwvikCioAi oAgoAoqAIqAIKAKKQJgRiBrmGlpBEVAEIhSBywFP6a/bz1zNjv7pnqSCOxt+4O/YsY2KFCkmRE68 eG+EyJwJYqN69Q9FtQSFEZQpUBXBLrKbmDG4Xv74U0dzSO9/kFdIlMPsUpeL3fbCY8OGjRKXzihM 80MxdYPdKWPEjCFNXbx4QdxAQSzA/dO4IqZNl44JCl9WmT3fVxPm075DZ4dL6YYN66XfcuUrCFGH g7z58olbIggUY/Z65rzZvsuqMswHCiMojvLlKyDEm7nuaT8o3/DbRuKmh/28QRlP9+7ZQ4ULFyVk xCzKBBlUgTAoulBm08YNcuxuHFLI8obYdjs47h3UUiBxoAaElStXnl17N9MWIZECFXtFeT1K8v0F e+ONN0ThhnGFxb5r3IQyZswkVXbv2smkGCvZKlVmMvSB9B3FKwq73hYSRdrhw4cIJKXVdu/eKQRi bb5/4RYKAxYpU6ais0xywjy9t6Vw0FuSpElpxcq1gifUWSDmoL6MG9eHycRnnwcU//qbhg63Zdyj b731Nu3ZvUtacndvg+iDiu8Uu02CZIMaEq7Gxv11xfJlYcYEawgsobj7gD+fMG9vb6pYsZK4NGMN QXSrKQKKgCKgCCgCioAioAgoAopAxCDwfL9KI2YM2ooi8FojkCJJVMqVJSbtO/yAyRiiaqV83OLx AZMnIMjWrlkjpA3UZmVKlw0WRwuNwC1y0sTxEg8MSjOYl5e3bO0xseRk0Fuc2IFB3B+zS1p47QHH nerTp5co1eDaBqIJLxj6hkskzE6WGJJILj7Hm4m/hibOBZEszZsFxjKzN4vg8Mas9cw5s4XKrW7d +hIzrU/vX+Q0xvvZ518K+RSWfhgN0ywTmgbvx4TsjHDthELKlbkbh70eCDLE/4L73oc1qtovO9YC F6zjwjFcRJ88eYxdjw1x44ydOx+4znDhxctuUH3Z7wGMEwaCz5WF5972ZoLpALuHgsSCWygM6w1s 4OppNTsOWbNlE8ISmTfd3dtop3HjptTz5+40ccI4eUFRWKVqVfrmm0YUHkywhrgv3v8gOLmYJ4hs NJ8n6xx0XxFQBBQBRUARUAQUAUVAEVAEwo+AEmbhx05rKgIRhkC/tono1yMPKNHbUSl5Yvcfy6hR o4oyaz0H1N+8eSPdZ7e2UqXLhBjPRCbLEMgdgfnr1qtPKZKnoNt37kjMrxCFI/hEi++bChHTslUb HmsJdsl7k/z950jcM3SFGFGwy1cuyzYy3+L6BPY1eMhw8mE1UTBj3sqMJdh5FwdNm31Pn3/xP1Fs wRV23bp11J3jquXJk4cioh+rCs/FEOR0aONIkCA4+QMFFQzxt378sYPsW99ix4mYrKbWNs2+wbsO E40gde2GBAB2AxkGgxIRSSKcWXju7RMnjlNbjmWXmonPocNGUpYsWSXDJ2KzGeWas75w7h8m1UC4 gdz8tuFXod7bKI9YfQsWLOEEHb/SNna1BbkNN83kyVI47sGwYGLuUcTls9pVTpYBM9et13RfEVAE FAFFQBFQBBQBRUARUATCj8AzGUD429CaioAi8JwIQHgFlZknZJnpCgQZlFEDOK4RXOfsKh2U28Wu ffiR37bdT4RMh9HYve3GjeumCY+3iRMnERc5xB0zhlhergwxmk6wG2ahQkXow6DMgFDywCXUWFpW ZsF2bN9uTkmQdSQKGB4UVwyKNLiiGUvMgehhp0+fkq3scyB0d5Y+XQYpAgImS9as8oJr4rx5/hLf zCjf3LWzYsVyjgfXjt34blLpMmWpY6eu9P33LWXc69auoYjoB7GzQBjt378/2HAQ8N2Yu3GYcmaL pAa4R/7k5AFJkyV1YOAd1ZtdYKc61FamvKutUd894uD7nhrcbGHHWdFlsMcWySnQ923O+mi3VKne kVPIBmsMsc6uWMhVT+5t+3j37tkt6sYvv/xa3BrjxIkjx7dYNWY3qwIT9+ABzgyKcSGzprt7Gwo5 3CerVq0Ql+bvvmtKEyZOEXXnypXLKTyYgASFG/BvyPJqiS24nV1tYWnSpLFPQY8VAUVAEVAEFAFF QBFQBBQBReA5EHAvZXmOxrWqIqAIRB4CIMjglok4TNWqVRdizN4bXDd/5R/YCKAOlRcIk7FjRtuL uT0uUqQozZ3rR4MGDRCV0CZWtSFYvCtDVsB0TJTgxzziNSVMlEjiZM2cOd1RBXGYoPDZtGkDTZ06 mbJz0oDly5ZKfDCjgoIyCjGu1qxZTTlz5qT33sslpMH8+XPpLQ4ij2D7Y9i9zp01+PQzWrJkEY0e NULwypkjJycEWMrnFlOTps3dVXdch4vgmtWrmOS5zTG0PpbzyHaIwPj5CxSUGFXP2w9InmrVaojb Z5s2LdmFsqbEk/P3m+PxOBwFLTtffd1Q1H2tWn5PtXnsIOUmjB/H5M9xqlmztqWk612jVEMsLcRZ Q3ZQd4b7FHHwdu/eJZkly3LctDOnT9PQoYMk02hSTvpgtwKMJbJ0Llq0gFV7PnyfZGHX4gniUmpc Jz25t+3jzZ3nA3ELnj17lrSL7LJ+7CZ64vjxEC6Z/fr1lnh/IKJm+c6UWGfNm7fkWGbu7+2kHCvt 0MEDtG/v3qBMmykkE+3ffz8lxIgLDybA6NPPvqDhw4ZQ584d6OOP6zCBeIU/O5NEXVar9kd2GPX4 FUQA34f4voMhMQlIXavdYYUw7k1YmTLlXnjcunPnzhK+i/B5rvFhTXkgYh2f7j8fAgihgKQ4UGb/ 1+0Qx0iFm36dOvXk/4LInC9it/bt24vy5y9A5ctXjLSukN359z+OSubpSOskEhtGUqYFC+ZxrNEL HFKgl8QNjcTutGlFQBFQBF4JBJQweyWWSQepCDxDwMSHgltm8eIlJD5ZKYurm5e3lyMOVa1aH4mS x2/ObHEHA0lSqVIVIb9MO14cgN1uCMpuNfzAr1q1Ov+QWyWEUYoUKeV44cL5jmJerAaLwmQPDIqt 5t+3omHDBsuPe5xDTC4EtN+4cT0OpUzvPv3o557dJVMl4jNBCVW79scc66malKlWvQYTfnup/U9t xZUQx02aNKdp06ZIuzFjxqR69RsI8RPafJImTcZjGUk//9yDxo0NJAwxHrjEISYZzBkOcsHyBvfA xk2a0cwZ06l16xYyB5xr36GT4w9Ld/2Y5gxW5hhbM4dG3zXm5ARXCS63CPSP7KPIgGp+SHsyDmu7 2AcphlhymH/XLp1E7ZSN43J17NSFcjOhBfyxbnYcQOBFCYpJBre/8hUqCrHZrOl3tHLVOqljV+jZ 5/bLL33kR/5yJk+RMAEkQKHCRXgtm3F/IYXOICD79B1AP/34g8T/wvhBsEKVCMIA5sm9bR/vqtXr 6csvv2Jl4VxCPDuMu0CBQrJ2VtUW2ofSr1evnhLfDONp2LARVeAA+57c25gT1IfIwNqje1c0J8H6 P/6kjhBdOA4rJqiDexXjnMJu1uvXrcUpUY527NhFspDi2Po5xLHaq4UA1It4cAAryG69ZcuWDzYB JHcw16EaftGJHgYN7M+JQraKC3qM6IGu08EGGMYDxAScMnmSkO946PC6244d28U9/L9ImM3hBxUP +PurQYPPZJkRrxP3cnF+mJeJE+pEpuF7E31Bae0pYWYfryfj27dvL2fkXvdKEmYgFfGQDmEHcuTI IQ8CPZmzllEEFAFF4L+OQBT+kfTP804y4MYTGjXjMvkuufa8TWl9ReClRWDvguz8x95TdoP0PBB+ lsxJ6NjxU//6nPCHEFwxQRI5Iyg8HSBc0wICroYakN7e1qVLlyTTIZQ5ruz+/XsEN87kHGPNTr4g kyauv/FG/GBjh9IBGQNBHIbFkBURWRtBooXXHjMOeAL7Rvz4FJ9fziwi+gE5dP36NSF07LigT0/G YR8bvvIvX74kfxSb7KT2Mu6OMTfcR3ARDIvh/kE2StyHnq4b7h8QViANnZkn97Z9vAjyf/bMGUqU OLFkzHTWLs7hvkPMMNyXGIPdPLm34QYM906QzM4sPJhg/Lj/43EigfgcG/C/YBnSp6bDRy690KnE ju3NGEalS5fdZyZ2NbCI/o6fNGkCjRo5XLorXqIkk7Z9g3Xd9odW/IN8vZxr9F0T+oxVhy/K8H1T unRxycbcr9/ACOkWySyQiATzwHxedzPxFBcvXv6fg+KLzxtIGAk//8AHbfh+vX7tuqh78TAvMg2q vYoVyhAeWrRo0dqjruzj9aTSj+1+EMJs67ZdnhR/qcrgIUy7dm2oS9fuHpOKnk4gor7fffj7OmYM L7oa8MjTrrWcIqAIvIYI8PNwSpokZoTNPGy/NCOsW21IEVAEXiQCUPTYXXvC03/06NHDRJahD7jW ubNYsWIzoeA88DxUZHjZzRUBYS9nP8YTZryexxALDpkqQ7OI6AcKqdCCuXsyDvsYQbyBaHweCy9+ uH9MfDJP+3d3/3hyb9vHC7LP3fphfLgvU6dO43Ko7saGiu6I2fBggvGHFUeXk9ALLyUCOdgFffu2 rRI70nz/gWCAmzuuWeP7YQKHDx2idaxIDWBlavIUKUSxBSWqIXqR/CUdKzRBsMKtHPcd1KJQqcFA 6kK5mz59hmCqNbiuI84gklgsZjd8KHX+4jh+aA9qYLQD5StckBHfL0PGjKKMS5cuvbRr3o4ePSLq YrgR586VhwoWKiyk+1x/Pymyn2MELpg/j6AiRnuIl/nJJ3VNdUJ9qK+qVKkmbtHoH2OPFSsWrV69 koqwerkwhw7AQwa4yR8/fowJ/XiUh9WzOG/MVT1z3WwRL3Ezq/kOHjggD0aKsSs1QgIYc9fP+vXr 6OzZM1S5chV2cZtPly5elEQ9+dgl0PrQau/ePbSRCdD7nFUauIAMt5q7cVjLYh8q4tDWA7EwQbiW YDIWc0PIhnczZ2YitCyHeIhnby7Y8dq1q6X8Q36IlZ4TyGAtzL3pbr5QoyN8xKNHD+XeqVy5KpNn t2QsJUuWkodCaOMCx38sWaqUQwX/baPGbtc02CCDDnA/L2KX/kMHD5JPPB92g88bolhonxln48VD m9DqWDvAgxL0j/v93XczUzVW6OP/a5i7NUIZT9Y9tPVAG3bDwzJ8VhCP8/GjxxJL06zh5k0cZoPV 3zC4Wz/mOKW4pqYIKAKKgCJApISZ3gWKgCKgCCgCioAioAhEIgLQ8i/dcIe27r1PBXPHoorF4rKa 1nWHpUuVFVIMmXhLlCglBbdu2SKElblmai/lH7pIlgLyCK5thw4dFNdrkFwDBw4Rd+uRI4aJGvYW x18E0QulMMij7j1+llho+BGPMpWY4LG6eYLEQgbZNEy2GVfQ4yeOi/K1HMcj7Ne3txBLCRMmopSp UtHOadslzl6Hjp2ZLKoqQ0T8y359+zAh40Op3nlH4lp6e3vT8BGjJDEGCh3lJCAwEGZLOd7knj27 gxFm+JGP8eXKlVsyLmMfBMYNTiQDkikpPwQACd60SSNWsV4Sohuk28wZ02ROcFsGYeCsnpVQwxi2 chynVi2b88MKHyaGMtA2Ji7RDmLK1axVW4iw0PpBG4jduW7dGpoz21eUqlBQIfamVTWIeFcDB/aT BxgIR7CUY2qCqDBxGt2NA/3YrR1nAQbR52o9jh87JhjM5riMN27cZPVscgnrMGTwQFq6bBUrj0M+ uAJuaBdEGxTVeIgDEtB31kwaNXqchFJwN9/1nE365s0bMr+FHCMLbphmLO9wMpWUKVM5MPP1nSHK XmR1xv3oDms7BrgfEDIA91DWrNnozt07EpLCWs7dZ8bZeHfs2Bbq58y0j/4//6w+xwmNSX//8zct XrSQVnLCIGAFstTdGrlbd0/Ww4zFbDGmVq2+J8QoA9GMB024H80a7t23RzI6ozyIeqiylTAz6OlW EVAEXncEQgaPed0R0fkrAoqAIqAIKAKKgCIQgQjsOvCA+k+4Ttt+vS/b3QcfhNr6B3nzikJq3drA WHUoDEUJEr28/8EHwerOmjVDyLK58xbKj/LZc+YKCYYfx3BFM4ZMsz16/kwot4hd/qA+g6rHE0Mc y0mTpkrRKkyE+c9dSE+fPBVypmDBwtzeMk4uM5rm+M0TUgUkAQykFciYZJzcY/aceTRmzAQm6qYL 8beQSZeRo8ZKuY8++oRGjhwj+56+4Ud9hw6dOXHMNkmIMWBAPyHL4MY6y9ePFTMrWe1WWBLUbNmy 2dGsvZ7jQtAO1EUgJSZNniZjwpxARB5kFR3M035QtkCBArRs+WpauGiZEJEgI6DSCwgIkGQ8IHR8 Z/vT2HETafKU6UI+oR7M3TgCSz17P3/unNv1MKWhvvOfO1/WC+QmQh9s377VXA62BZEHsqxixcpy 3/j5LxDyEG7hiNNoNVfzHTBwsKgXoQzHvROawhf32nLGDPiHBWszDigMQZZBnTZ+wmTy9fWXTOHm OrbuPjPOxuuujrV9xB5cuGgpK+UWCvG0f/9vtGLFMvJkjdyte1jWw4xp0cIFQpYha/nMWXNo3PhJ EmfNrGGzZi3om28aSfEePXtxgoQBpqpuFQFFQBF47RFQhdlrfwsoAIqAIqAIKAKKgCIQmQj8cSp4 zJ3f/3xIH2QP6WpuxoAYf8WKF6e1a9ZIrMK/mcCB8gSuc/b4f8OGjRLlCtyt/+SkATdYyRMjZgxp Cq5hbwbFuUOG1pIlS8v5N9gtHa5ie/fsMV2GeZuEs8GuWLlWyDoo1kACgYyCMguxCmEgLkDGwKXR uPyl5QzK02f4cmbn5/sTFG1WrFRZ+kEswB3srgrFVMZMmTjG5Hk5DxXc1q2bJUszkijArPXkhO0t U8ZMhHhOQ4cOogoVKol7K8gsmCf9GIUe1EQ//tTR0fr7nLgExN1hVgBeZpdP4FKbiUK4tcLSsooP Siso+mChjUMK2N48WQ9TpeG3jRzu4nnz5pPTuBfM/WHKYQuyDFaufAUhQLGfN18+IXShZjMW2nyR KdkTQxvtmQTFNixYW9vexO6F+Iwgk7AxZAnv3etnc8hJgEL/zDiLueppHYy9VesfpC+sLVRyi9g9 E66OINLcfWbcrbun6+GYLO9s3hK4Tkb1iWtlypSlPn1+EZLVWlb3FQFFQBFQBIIj8Hx/rQRvS48U AUVAEVAEFAFFQBFQBGwIlCkYm2Yt5oQjD/6h2DGjUJlCcWwlQh6WLlVG3Ll27NwhcY/u379PpUqX CVHwAce/6tOnl7hSwbUSxBleMMRyMsZnza5s4X735MnjYOfCcgC3ygOsnBk9eiQdO/aHVAVZAPcv 41Z4jlVPMKiGrAZyCGaILes1T/e9vLwdRdEO+j3PMbCQRMBuZhw4b61nL4fjGjVq0jZWW4E0wwvz LMAZPL9r3FSIHE/7sbcdJ3bgmj/mNcI4YSD4XFlo4zD4Wet6sh6mvPVeQFZE2GMX98K5c2flOjIL O7Pbt287O03W+Tot4OIk7iFYWNbU2tSF8+c4zt3bQuRaz1v3Pf3MPG8d1M+cOYvcN1c4gYwna+Ru 3T1ZD3tCHijb4IaJeHXGEFMtR473aOfO7Y7s0+aabhUBRUARUASeIaCE2TMsdE8RUAQUAUVAEVAE FIEIRyBxgqg0e0hy+vXwQ8qVJSbFYtLMnUGRBBdMxMICEQZV2Ad87jwTAlZr8X1Tzpp6jlq2asPq qRKiKPP3n0P9+/WxFvNsn5VsntqJE8epLce2Ss2xw4YOG0lZsmSVH+Um0yPaMUlLoKiKTIOqDYa4 Vz/+2CFEV7HjhIzNFaJQ0AkkRoDr6JkzpyV+GVRUeN1jwrJbt55S6nn7MVkhoZxbjZQAAEAASURB VABEcgZnFto44P5qN0/Ww17Hk+O4PnGl2OAhw8knCGdHPb6NzRo7zkXQTnjXFLHDTp8+La6vBmf7 kMLzmQlPHdMvSFYoLD1ZI3frHp71wBqdOnVfspTie8TY5SuXhMRD/EM1RUARUAQUAecIaAwz57jo WUXgP4kA4rJ06dKRTGYyZ5NEwGiU+f33o3IZgYm7d+/irKhH51C/Z49uHpXVQoqAIqAI/FcRiB3T SwL+e0KWAQNxy2S3Q8Qx27hxAxUvXkJ+3FrxuXbtGv8IP8HxsYoQ4hMhED4UOjc5GH5YDK5jcN08 c+aMoxpiniEGmSvby+6WULB9+eXXQuRBwYLjW5z90FjaICXZju3bzSkh/5CkYDjHvzJqokcc7N5Y 4sRJxF3R2vfpU6fMZadbBM0HEfDnnycoabKklCVrVnl5R/Vm98+pDgWc08q2kyAa+/btJZlo4dY3 dOgIyps3P7uv7hblXkT0Y7LcWrOdAm9kRzQW2jiw7nbzZD3sdTw5Tp8ugxQDuWdwhdvrvHn+kqjA qBndtYVycLP01MK7pilTppR77PDhQ46ucF8Y8/QzYx2vp3VMHyDIjGFdYGn4s+DJGrlb9/CsR5o0 aUSBuYvVqsaQHAOfK7gBQ/mmpggoAoqAIuAcAVWYOcdFzyoC/1kEkOkMwZo/rFnL6RwvXrgg2dCQ xQqBjvft28sxTNZJgFinFdycNPXbd+jkpqReVgQUAUVAEbAiABdMxD+ClWQXTbsh1lK6dOk4YPs2 yTKYMFEiidc1c+Z0e9FQj0EOFCxUWNqYOnUyJeKslyCaoFwz7pX2BqCAQ73Zs2dRXB8fzgZ5n/zm +NKJ48cddaCIg/Js06YNhHazZ88h/78gSyGUYEZFtHvXTnYN2yGum0WKFOVg6X40aNAAKlO6LG3a vFEC99v7tx9/9XVDUdW1avk9xwb7mLMUxqAJ48eJqqdmzdr24i6PQVQCv7hx4lJ+dsU8e/YMZx49 IBkXgXdE9AMXT2QrxdoCuyxZstCkiRPEVdPg7W4c9gl4sh72Op4cN/j0M1rCmUtHjxohcepy5sjJ QfmX8rnF1KRpc0+akDJYa5BYa9asppw5c3pULzxY12DieAVnpcSDuq/5nrh77y4NGzrE0Z+nnxnr eHPkyOHx5wxk2XeNvpFEFF78+ejLmWRjsftzTf6b6+bNm24/M+7WPTzrUa/+p7JeIKnhiglye8KE cYLJ51986cBGdxQBRUARUARCIqCEWUhM9IwioAhYEGjdpi01beb5H8WWqrqrCCgCioAiEAYEvKIE F/6DcIKiCcSUPQ4Y4lDhfPPvW3EQ88HUuXOgK2KyZMmpcOGirEpb7+gZ5by8gruBQt0VxdLfxx/V IcRZGjlimGSJLFGiFHqgG0FqNa8gFUqUoHbSpEnL6rKvWGk0lxDfCn0UKFBIFCvIBAnDud59+tHP PbtLRkWonKEcql37Y6pStZoozMpXqCgkWrOm39Gq1etlnlWrVmdiZRWtWb2KkFkRx8geaMzZfECK wXV13NjR1LVLJ27bm90ds1HHTl0od+48Midn9UybZgty4datv2j69Kmc0XOikB358xWgr79pKPNx 1w/asWONcwY37CNDaR/ORPjTjz/QxCDiAmsNRd6dO3dQhNyNQwpZ3jxZD1M8Cq+93ez3nrmeNGky vr9G0s8/9xBscR73WJ269akuv2Du5osy1arXoF9/3Uvtf2orZClIGzG+R2DO2vAEa6lseXvvvVyE v1uGDhkknwkQUOjb328OYY64Bzz5zNjH60kdMwfchy1bNJNRJUqUmAYOHMIKzrfk5e4z427dPVkP CxyyC0XjAB4DPodtf2gl5xC7rhW7cZcvX1GOrfenvb4eKwKKgCLwOiMQhf948TxghQukAm48oVEz LpPvkpAScRdV9LQi8MohsHdBdnrw8CnHgHji8dizZE5Cx46f8rh8aAVPnTop2aqKFi0mmc0OHzlE SZMklSxeyVOkkKp4cgs3lk8+qeto6ujRI7Rjx3ZJbQ6XmwL53+fsSOXkx8pGzn7l5c1uQvwjB0/S YatXraQOHX6kXr36UvESJWn9+nXyhL1Bg8+CtYkfY1euXKHcufKIMiF+/PiO69adH9v9IAq1rdt2 yWmMb+nSJRQzZkxHFisEjEZw5YsXL1IKdqcoxZncTNp5uH3cvXuX6tVrIH/oohF8beHHDH5IVqlS TdxYEGPm4IED9AaPA1nQ8EezmiKgCLwaCGRIn5oOH7n0QgcbO7Y3xfOJSpcuB5I74ek8Ir/jw9O/ tQ5crOBa6SzDn7Wcu31ku0Q7Jqulu/JQ1JxlV85EiROHGmj9/v17BNe25MlTOL7LTdvIrgkCzxqs HO57AQFXhZwx5TzZ4v+Hy5cvEQgBT+fgrF2M6fr1a5SCxwtVjt0iqh+sGwg0uNM6M3fjsNfxdD3s 9Tw5xljusWILpE14DJlBcR+88UZ8WW9P2wgP1nAPPnf2LCF7qKtYZu4+M87G666OmRM+RyCOnSV2 8GSNPFn38KwHPlMPHzxk1+VkYVoDM6/wbCPq+92Hv69jxvCiqwGPwjMMraMIKAKvCQJ4DpM0ietM 5GGFQRVmYUVMyysC/xICx48dkyf/U6dMkqfo+CNsyeJF5Os7k0aMHCPBjpey28SePbuDEWYHDuyX erly5ZYYNRj+li2b5el9unTpORDsSUKcsabNvhdSyj69FcuXCeFlCDO4yvTr24d/iPhQqnfeERce xL/w85/PyoGE9urBjq9fv05NGn9L+IMTT9dhixcvpF6/9BQSDONZtmwJu6aMp67dehAUDsePH5Mn w3ADyc4v2EGe07Chg6lmrdr8IyMBtWrZXFx70mfIIEGaZ86YRm3atJPrUkHfFAFFQBH4jyMAF7+I MCjAwmIguswDjtDqxYoVm9VizoPv4+GH3UDaQckUVoOCKAk/THpew5icjcu0G1H9uFs3d+Mw4zFb T9fDlA/LNqxjsbeNB2V4hdXCgzX+LnF3X7rD3tl43dUxcwvtc+TJGnmCtSdlzHjM1t3faaacbhUB RUARUAQCEQipyVZkFAFF4KVGAPL++fMXc3yZ2ezq0l+yHo0ePTJMY37C6eMhz586bSbN8ZsnLi9w Y8HTytAM6rAhgwfyj5hkNHvOPMkkNnnydHmKOnbMqNCqSttNmzbiJ/+XqV//QZQvX35RGwzo30/c FBYuWkZTps4gP7/5HOya3VV69+In2feocuWq0u5qds8xtmr1StnFNbjp4OnzpMnTaCQTh5gPYq8d PHjAFNetIqAIKAKKgCKgCCgCioAioAgoAoqAIhAmBJQwCxNcWlgR+PcRQBwVpB2HwfXwrbfepj27 A90dPR1dUa6XP38BKY4n8QhAjIDNhzlDZmgG9RpcFNCvcXVJywGnp8/wpbr1PnVZFe4HiHGDYNBQ liFWCwyBnuHeUZyzvz18+IAuXDgvcV4KFirEcXOuS4DgzJmzSLBduJuiHbzWrl0j53AtU8ZM0tbQ oYPEZRUHk6dMp85dusl5fVMEFAFFQBFQBBQBRUARUAQUAUVAEVAEwoqAEmZhRUzLKwL/MgIIwmy1 rBzUGGTX7du3rKdD3XfWBipc4rgvoRkypsHswacRqPgdds8MzRBLDQYXUWPnzge2N4czq31Yo6rj hThqsPNB/VWqVJUCrl6l3377VV7YxzlYjRo1KQdn3EIMNASzLVe2JLVu9T1Z08hLQX1TBBQBRUAR UAQUAUVAEVAEFAFFQBFQBDxEQGOYeQiUFlMEXlYE/mHFFWJ1IMBxeA2qLRjiYfz9NHDfWVtx48aV 05evXHZ2OdRzw0eMFndOZASDQi19+gzkw2nmYci2VaZ02RD1kQAAhixqw4cPkYxpOMZ8cQ4Gtd2Y MRPozJnTEr8Mwf/xusck4gjuU00RUAQUAUVAEVAEFAFFQBFQBBQBRUARCCsCqjALK2JaXhH4lxFA 5idjyCIGxRZShoNESpw4ibhMItaYsdOnTpldx9baBk7u3btHriEtfWgGJRlsx/btjmJIn96ta2cm tIY6ztl3EOA2T5736af2Hdml8h/q1q0zYQxw54Qd5yyZWbJmdbyOHDnMbp5T6fatQNUcsr4VLFSY VnPsMrywbzLB9e/Xh/r27SUYfPxxHRo6dATlzZufM4nulhhp9rHosSKgCCgCioAioAgoAoqAIqAI KAKKgCLgDgElzNwhpNcVgZcMgX79etPCBfPpwP7fqGvXThJM32SwLFKkqIx20KAB4qLYvXsXDqI/ O8QM1q1bQ4M5eD9cHGfNmkHLli6hQkxCuSPMEHssS5astGnTBpo6dTL9+us+zpjZm5YuXUwpkqcI 0Y/9BILx161bj/74/XeaPHmiuHbmyp2HdnMMNpBu27dvk4ydgwb1p8ucSRNpz40hwP/NmzflZRIB 4FrUqFEli+bIEcNo3769kgTg0KEDlDVrNgepZtrQrSKgCCgCisDLgwAStnTp0pHm+vuFa1CHOO4m 6uMhy3/JkDm6T59fXE4JIQcwb/zfG14z2P3++1FHE9u2bqF2bVvTpw3qcqzQ1dKH9bqjoO4oAoqA IqAIKAKvCQLqkvmaLLRO87+DQMKEiahXr54S/D5atGjUsGEjqlCxkkwQscWqVq1Oazij5JrVqyT7 JY4XLpzvAMCkZ1++bAnNnDFNziMBQMdOXR1lZCdKYKw0Ly9sA/dRt3effvRzz+40ghVl+LGD1Om1 a39MVapWC14/6Ciw/rNLX3/zLa1fv5bgmlmqZGn65Zc+BBJw+fJl8sd/nDhxqFDhItSkSTOCMs0Y CL148d5gJZ2XkHvmfL36n9KtW3/R9OlThYSLFTs25c9XgJAcAeNVUwQUAUVAEXjxCOxj5fJWJmDq 1qsvmZBdjWD5sqX09MlT+rBmLVdFXJ6/eOECoX7xYiUISWBeBkM80SmTJ4mqOj8n1AmPPX78iJZw NuwKFSpR9uw5QjQxf/5cmXf5chVCXPP0hBU7PMy6e/cutWnTUsI75MiRg65fv+7AFtfVFAFFQBFQ BBSB1xEBJcxex1XXOb/SCHz55VeUL39+unz5MiVnVRdIM2PRokcXt8fWbdpSQMBVSpYsuVyCK6Sx bdt3yy7ilp07d5bjlsWX2GXmeukyZQkvYz1/7m12ZQvCbuCgoZxo4J64PGIMoRFT9voxYsQgP/8F wdrs0eMXetTpEV26dFHGDNWY3TBfZNSsU6eeqMrMdRB2IPuaNW/Jf+BfE6UbcFBTBBQBRUAR+PcQ OMjqLyiRy5Qp55Iww/8d/vz/AR6U/Ffs9u3bMm888AkvYVaFH3QtWbJY1N92wgxhEFatXMEhGBJT 3nz5ww1bocKFBfsECRNKG7t27iC03bJVaypfvqL8H18gf0Ey18PdkVZUBBQBRUARUAReYQRC/ip9 hSejQ1cEXhcEYsWKTalTp3E53ehMGBmyzFUh/DGP2GfhNYwhRYrY4a0eoh7G7Gw8tziO2cGDB2jC +LES/8yVCgEJC/BSUwQUAUXgVUUAql1kFN68aaM8QEiaNBnV+LAWvf322zRvnr+ogOrVa+B4SIHy UNfiu69KlWqisoVrvQ8naFnNSmMQUaVLlaWMmTLRxo0baMvmjexWn43KlitH+A6HrV+/ji6cP09l ypalBfPn8cOWAHGXx4OT06dP04IFcyla1GhUtVoNfkgT+BAG9e7cuUOLFy+k48ePkY9PPMrD7vWF g8IC7OeQAYgjCYMaqlTpMjKHDRvWE0IH7OFrcAls1qyFjDMdx8c0dTEnxKpEfE4QaoUKFaFcuXIH ezgkDTt5w4OgeXP96c7dO1SO1VdJkiSRUmvXrpYQAg8fPKD0GTIKVjFjxhQ3foy1ZMlSlDJlKkeL CDvw559/0ocf1qS4nJzG1Zo4KgTt4P8r4166n8cPPKtVryFX0cbGjesdD7ugsH4ndWp7E3L83nu5 5P/DVZwxukWLVmR9CLR921a6ceMG/e9/XwdTYbuaIxo0a1yyVCmaO9ePvKJ4SeIcrAfmjlinS4Lc OxEi4fHjx6JsM9cNNqGtOfpBqAXcf7FixZI1LFK4qGNdcV1NEVAEFAFFQBF41RBQwuxVWzEdryLw miGAWC0tWzSTWTdmN038gFRTBBQBReC/iMDIkcPEnS9FipQSgxGEyYwZ02na9JlCTPn7zaGcOXJS dn7BDjIpM2zoYKpZqzYhtiNiOcaPH5/d1G/zd2USusAui/PmzmW3/YrkN2c2n0vKBNh8bnMq+c6e K22sYHd4xLXEuaecJfnhw4dCcu0/8BsrnJayi14sIWimTJlEU6bOoAxMOJ09e4aaNmnEpN4leXiD RDNw8a9UuQp17NiF/vjjdybEDkn7m5j8S8kZj6FOxvjmzPGlgKtX5doXX/xPzkGFBsIMhFerVt8T YmmBeIFLv++smfRB3nyS0EUquXgD0dan9y8y9o8++kTIMpxDTC4QP8AFmZ4xf7Q5avQ4CSuAMd1g 98PvmZiCoU7fPr15LE8J8UFDWxP7g6k7d27TqlUrpJ2jQXHVQJiBpOrXtw+HFfDhZDfpaQOTlJMm jqeu3XpQiRKlpLz9DWEOhg8bQpuY5CzJ5JoxKM9AJFauUlVOuZsjVNhmjX19ZwhhhzVEpmrM/R1+ cIa13s8xTWEg5P766y+KFTOW4zoIM3drjnGgPZC7IPSwlkmTJFXCTFDVN0VAEVAEFIFXFYFnAYJe 1RnouBWB1wSBfBxnbOq0mfQ+B95/nSwd/7jo2bMXzfGbJz9eXqe561wVAUXg9UHgAaufZkyfJmow P//5NGbsBPqZXeITJkzAaqsDQogBDSjHjK1iJRbMmgjl/v37NGDAIPKfu5DatvuJEFMLLnyTJk2T c/U57iOUY+dZVWa1kqVKs8poBc2dt1CUS7N9Z9GX//uKFixc6iCXQKbABgzoJ2RZr159aZavH9fj 7MUFC9OSxYtoy5bNVKvWR9Tg08+kbP/+g6hO3fqyj7eYMWIK8bZl684QquJFCxcIWfYhq+pmzprD 2ZJn01dffUNwF9zJr9AMyWKgZkNfLVu1kaJLmVwCWVaxYmVatHi5hANo06adhCNAHE4o10B6rVmz WogyVIKy7cqVyxI/DJmoQ1sT+3jQ1shRY+U0SLuRI8cQyMQhnGQnGSexmT1nHo0YMZpmzJxNMZmQ 6tO7F4cauGdvRo4rVaoi2a+XclIeY1jLLVs20Qcf5HM8PHI3R1MXW8Q5Xb58NU2aPM16WpR+33zT SM714P9v+/YdEOw6DtytuakAsq1Dh86cHGgbffrZF+a0bhUBRUARUAQUgVcSASXMXsll00G/jgj4 +PjIk308IX+dDPOGO49xCXmd5q5zVQQUgdcHAbgIwtX+1MmTNHr0SCFuCnKyEyjBypUrL0Ht06VL J+QO1Dt4rV27hnDOGvC+SNFijthZ2bJlFwCrVf9QiDgcmHMHWFVkDC76LVu2EaIMSiwo3OAij5iR sHffzSwukXAzBIm0gzMawz0Trp4XLpyX+JEYI2zL5k2ydfX2XeMmlDFjJiGD7GU2MxkEsxKA9Vnl NXnKdFFE2cub4wmcRAaqsWrVqlPz5i3MaSHLcFCufAUhrjDWvPnyiQvpZh4nlFpQxYHUgmsmbDWr +mA4725NpKCbN7ifggwtVqw4K8ziSelEiRJTPo4/duPGdTp8OFCJZ2/mrbfeosKcAAdqu5us2IJB cQj8q1qS7IAQhLmao1zkN6xxeyay4r/5plPsTTln27CsOeZZsVJlcSNFn2qKgCKgCCgCisCrjIC6 ZL7Kq6djVwQUAUVAEVAEFIH/DAKNGzelnj93lyzCyCSM2GBVqlYlqH9A3lSqVJWGDBlIvwW5z8G1 sW6dZ+otABElKKsx9uFWBwMxZCwmx5eCIcC7K4sZKyY9uP/AcRnER7Ro0ekJx7YC6QSyDgq1D2sE ugU6CvLOuXPnrIch9hE/y5Wd57qIu/Zu5syOIpi3uyyNcAGFHeE4YU+fPnUQQufOnZXzzZs1lq39 DQH6KzG5M27saCHKEGAfscCyZs0m5CXKu1sTe5v2Y4MH1F1WwzHcNzFn+zVTDnHjQIitZIXgRx9/ IkkAEK8OpJQxT+ZoyoaXwArLmnt5eZvudKsIKAKKgCKgCLzyCChh9sovoU5AEVAEFAFFQBFQBP4L CBQoWIhjbC2ReFLbtm+ltWs4thi7aSZPlkLilJWvUJGGDx9Ca1YHumV6e3tL8PYXOXcEwYchDtaP P3YI0XXsOOFPBgMF9alT99mN9HaYkrjA/fFNVk5BmTdp0gQJiI+BxfUJVGQPHjKcEyEEjtsxYOYQ 0R9UzHnyvC9EWbHiJSTpwf/YDdSYuzUx5VxtjSr8Mrt5Wu3ylUtyaK5br5n9AgUKSuy3JUsWUYGC BUV1+PEndYIlAfBkjqa98G4jc83DOyatpwgoAoqAIqAIvAgEXD/mexG9ax+KgCKgCCgCioAioAgo AqLYat++naiOcnHGye++a0oTJk5hVzpvVhgtF4Tgpgc3TWSRxAv7OPciDUHkoXJCQpakyZJSlqxZ 5eUd1Ztjjk2lY8f+kOEYNdOjx488Hl6aNGlEvYaYZcbgsghcjOuhOW/d5ma8Gnz6ubinQpmHzJ2w 9OkyyPbixQuOccKNFBlHEfvLKO8QQP/atWscmL83IWMzkhDAoKJztyZS0PL2bN6P5WzatOlku2P7 dkspYrfWwOM0adMGO289QFtwDf3996OSAADXqlUNzLppynk6R1M+PFtP1zw8bWsdRUARUAQUAUXg ZUZACbOXeXV0bIqAIqAIKAKKgCLwWiCADJaHDh7gAPGDaPHihbRv314aN240E0hPqajFBQ/xvW7e vCkva6yvFwnSV183FNfHVi2/p2XLlog6q3u3LqyIW81ZEhPIUIyia/mypZI105Px1eOEBFGjRmUV 3VAhyBBnDJkvt3IigSxZsoTaBOr91L6TEG4YC1wzkXggRowYNHrUCMZyjCQP+IVdXhctWkBJGG9j xYuXFFfQU6dOEvaN6svTNTHtYGvUWLt37ZREBVCvZcmSlYPgb6CpUyfTAY6VNmLEUIldhnhzhlCz tmHdr1KlmhB76zmzJsjJtOkCCThTxtM5mvLh3Xqy5uFtW+spAoqAIqAIKAIvKwLqkvmyroyOSxFQ BBQBRUARUAReGwSgJurYqSshe2OP7l1l3kmSJCW44H38cR0HDoVYVRYv3hscp8uLsG81KKa8vJ7F K4sStO9liWGGfmAm1pm1vGkLccZMOXNOtkHt1KxZW2KgIfZX1y6dRAWXLVs2Hn8XgtoLVqRoUUoy IQn5+c2m02dOszKqemATQf3LAb9hzEbphUQDAwYOoZ97dqe2P7SSIohf9uNPHcQ10dSxb6MEtYnY Y7Vqf0TI8Dlj+lRRnQ0bNpKzjfaQOGWoh0yWyKRZl1/GECetZMnSQqRBbWbM0zUx5bEF2QbXWRCF zZp+R6tWr6feffrJnLC2//zzj2BbunRZ+qFtO2tVp/tIrgDSbffuXSHUZaiQNGkycjdHZ2vs6Cxo Tc294jhvdjxcc8zLfv+ZJnSrCCgCioAioAi8qghE4f/g/nnewQfceEKjZlwm3yXXnrcpra8IvLQI 7F2QnR48fMqxVVwHSrYPPkvmJHTs+Cn7aT1WBBQBRUARsCCQIX1qOnwkMKaT5XSk7saO7U3xfKLS pcsPw91PZH3Hw4UQCilkq7Qb3AQ//uhDyWDZuEkz++UXeow/IS9fvkSxY8dxZIC0DgDJAW5whkeQ SFB6hcUCAq4yAePFirW3w1LNZdm//vqL7t27KwSTs0Jf/e9zyVo5x2++U7IwtDVx1h76A+GGGGnG 7t+/R5cuXRLSLqx4mDZC27qbY2h1Pb3mbs09bUfLvT4IRNT3uw9/X8eM4UVXAzx38359UNaZKgKK gEEAz3mSJolpDp97qwqz54ZQG1AEFAFFQBFQBBQBRSDiEIBqyG63bt2ig+yyOWH8WHY7/Ic+rFnL XuSFH0NRBBWcKwNhFF7CK0GChK6aDdd5xF3Dy26//rpPXEqBbfPmLZySZajjbE3sbVmPnfUVK1Zs SpPGdcwya/3w7LuaY3jaclXH3Zq7qqfnFQFFQBFQBBSBVxEBJcxexVXTMSsCioAioAgoAorAa4UA guy3bBGoKIOyLKwEzmsFVhgm+9OPben69WuUPXsOqs3ZNtUUAUVAEVAEFAFFQBEwCChhZpDQrSKg CCgCioAioAgoAi8pAunSpaeePXsRsjymTJnqJR3lqzesjh07U3R2F82VK7dLddmrNysdsSKgCCgC ioAioAhEBAJKmEUEitqGIqAIKAKKgCKgCCgCkYgAYmGVKl0mEnt4PZsuULDQ6zlxnbUioAgoAoqA IqAIuEUgMFWS22JaQBFQBF4mBK5evUJdunSk/v36RNqwDh06KH38/vtR6QNZx7p37yL7CPqL/uf6 +4W4Jici6c30i6xr/6bdvXtX5r98+dJIHYYV80jtKByNnzt3lgYPGkAN6tehuXMD74NwNPOvVQnL /W0v+yIHPWnieBrQv2+Edfky31MRNkltSBFQBBQBRUARUAQUAUVAEYgABJQwiwAQtQlF4EUjsGTx IklZP2eOLyFgcWTYxQsXpA9sYfv27aVlS5c4ulq+bKmcc3bNUSgSdtDvb7/+Ggkte97kw4cPBZsj Rw57XGnf3j00fNgQycLmaSU75p7WexHlBg3sT75MosaPH59iRA9b9rsXMT53fYTl/raXddd2RF7f sWM7rV23JsKafJnvqQibpDakCCgCioAioAgoAoqAIqAIRAACSphFAIjahCLwIhGAymrx4oX0TurU FC1aNJoXSeqeQoULk7//AvLEXaV1m7bk5z//RcLwyvV1kBV7U6dOpqtXrr5yY7cP+PGjR7Rr104q WKgQDR02kipVrmIv8tIfh+X+DkvZl33i+ll92VdIx6cIKAKKgCKgCCgCioAi8LIgoDHMXpaV0HEo Ah4i8Csrvc6dO0dt2/1Eu3bupLVr11CLFq0p/ptvumxh/fp1dOH8eSpTtiwtmD+PAgIC6P33P6DS ZcrS6dOnacGCuRQtajSqWq0GJU+eXNq5fPkybdiwnkqWLOU2wPSBA/vp7Nkz1KDBZ44xHD16hDZu XE9oJ3nyFFSqZGkh+UyByZMnUrq06WTca1avoujRo1P5ChUpTZq0pohH2107d9BhVnplyvQu5c9f QOqsXbtalHcPHzyg9BkyUpUq1ShmzJii7lq4cAGlTZuWihQp5mgfYweOuTnoc/YcOR3nzc7Tp09p 0aIFdOjgQfKJ58PY5TWXHNvDhw7RuvVrKeDqVUqeIgXlyfM+ZcuWXUjN/ft/o717dkvZ+fPnShwi XL9+/TotWbKIznH/T7gPnCtYoFCItbx48YL0f+XKFXr33cxUrWp1isZ4wZ48eUJr1qzmsR2gmzdv UoaMGakgx+RBgHBjDxiHXbt20LatW+UUsKpcpSp5e3ubIjx/55g5CgTtwBVzMSscobL7i/vDOtau /THFjh2bbt26RUuYzD158iTFiRuX8uTOQ4WLFHU0gbJY31ixYtHq1SupSOGiwa6bgp7iYsqfOnVS 7tWiRYvRb7/9SgcZC9xblSpXlXX39Z1J5/kzg/hPuO+jRIki96Wn97ezz4Incw3P/b2XlYgb+XN3 /8F9vh/z0N9//22m6dgeO/YHrV+3li5evEgpUqZ0fLZu3LhOod3f772Xiz8DN1x+VnF/oc+ChQqL ctB06Ko/c/3Klcu0efMmOnjgAL3BisNixYoT+lJTBBQBRUARUAQUAUVAEVAEXmUElDB7lVdPx/6f QeDw/9k7D/goqi6KX3oSmvTeQQQUuyCgAlKk2WgioEhHVBBEUKqifHSQpijSe5XepBdRikpHipQA AULvJMB3z0tmM7vZTTYhjXguv2WnvHnz3n9md7Nnbzl0W+YsvyrZsySXOlXTSob0YUKG6yTxhRie ZZX0y3+2bNmN0LFQRQq7WOV6zPJlS2WNhnVNnTpJ7t69Z8QOCDc7d/2tYZZLVOzwNV+kJ04cLxMn TZUiKjIdOnhQvh81QvLlzRepYIb+161b4xgDcloNHNBf0qm4VFCFm3Uq2CEX01dffyMVKrwq8JJD 3wjnu3JF5509u4p454z40vubPlK5clXXKbhd37Rpo3T+vKMR4iAiod8unT8z4gn6TqOizfz5v8iM 6dPkh9FjJGPGjDJr5nSthJZMyqlYA+EENmf2LJk+faqM+v7HcOeBYPHJxx/KdhW8SpR4XK5dvyZT p0x2ardkySL5+queRgiCGIWcV2N+Gm2884YMGSb//HNAt+0xx2zYsF555jEi4gdNGsnly5dVwCuk VdpSysoVyyVVqlQyecoMvbbZTHucv8n7jXS7j9y7f08WLVwgK5YvM/NJmjSpmS/EiixZskqevHnl j8lbTOhnN638VlMFo6CgIHn//YZGMMLYkH8N12fFimUyctToSJllzpzZaa4BAQEmHBUbDx0+pKLf eala9TWBaPLRR23kkgoy4ITrOW3qZON91r17L8c1z5Qpk7nXMK8c2XOEE8zQvzdc7IOy7lVc52vX rkoGFY/BafNvm/VevyUH9V729fEV3PNNmzWXli3bROn+tvq3XgsQ6LyZa1Tvb+QXGzJkoL4ecgi4 L1m8yFy/zFmyOKYL79K+//vW8IQounTpYsdr65VXKkR6f0f0Ws2bL59gf7JkyYzHaObMWYw3q6fz 4bW8efMm6dihnb7W0qo4XUR+U+a47p06dZHadeo6xs0FEiABEiABEiABEiABEnjYCDAk82G7Yhxv oiMQFHxfug45J2t+vyHTFl2Rn2df9jhHiB0QvsqqB0jatOmMRxW+TP8yb475Au3xwNAdFV+tJIuX LJe58xaoaJRU8AUdAsL8BUuMAAPBaYt+4X0QQ0GCYd8NkZw5c8rMWfNklIoyU6fNVE8fX+nfr6/c uHHD0T2Wv/m2jxnPwkXLjBAIbzhvDCGBX3TpZMSmUaN+NF5ZEBjgNVS9ek1Bf7M1pBRf3P39T8io kcPNnF97rboRd+AVB8Oc4aGVM2cueVo9zFwNAgXEstZt2srPYydo3q45xrvP3g5iG7ymwBXC3MxZ c43o95uKCfCWqlOnnjR+L8T7btCgodLg3UayfPlSIxx17dpDBbLpMnbsRPn662/l6tWr6mHkzKBK lddkwcIlKnQtMN5y8FjD8fCaglhWpkw5ne9Sw3rW7HlGiIRgBIPn3LGjR6VFy9Zm/NNnzDZCRuD5 QOMRFhkz+zyxDA+t8eMnmc21VJCbo2OCwDNIE9PDu27I0OEy+sefzbV/+eXy6nG2UCBsWgaBsFu3 nrJhw2/y3vsfWJsdz1Hh4jgodAGC6C/zF5vHCy+UVg/M38Unla8sWbLC8MuTJ69s3rTJ9bAor3s7 16jc34GBgXr9hhuxccbMOfLTmHEyYeIUI5xZAzx//rwWABiogmBGnc9SI27Pnv2LJFfvULy24EkY lfvb9bX6449jVbSeYgT1n378QSI7H+a3YMEv5jU0fsJk+V4FZ9x/EGbh5UcjARIgARIgARIgARIg gYeZAAWzh/nqceyJgsCZwLty+WpY2NX+I7c9zmvlyuUhX4qr1TBtIHpV0+WTGm6J5OARGdp26NDJ iEbwfMmdO4/kVe+xBg0amsMQ6gfPtZ2hQlJEfUW0D+ISvrgjLCtdunSmadas2aRUqdIqEF2QvXtD PK2w42VtU1FDNWHp06c34YY7tm8363c0TxbC/qwHwiItQ7jn5506SKZMmWXEyB/MsdgHsQxW9bVq AjHg1KmT8kKpUkZchLAEQygi7NeVK8wzxCe0RR4uy+PM7Aj9Dx5hyZMnl/r1Gzg2w5PHbiNG/GAE upSa/P7I4cNGYEvlk8o0QTilO6tX7x1ZvmK1VFHvLISE7tJxQBCFnQ447TgE163jZ5+bdYStWvnC tm3bKtlz5DB99O2nYpV6dIHL3r17jbdPQGgfj6l4gXnBC27u3NnmXoGICOEP18cbZo7BeFjAtdqm AiaEs+efDwlXhZdS9eoh9+mmUPY4HPdF9Ro1TUgp5uZq3nJxPQ7rzZu3NF6EmG+Jxx83TT5p196I mbiGuMcPHNgvGG90LSpzjej+dj3/tm1/mNdNXb0vcJ1hBQsWcvLuBOMbN65L+fIVjOcc7u8kSZOY XHLWaysq97e712rBQoVkytQZ8m7D98w1jex8RR8tasY6fPhQx70Eoa9nr6/Ndv5HAiRAAiRAAiRA AiRAAg8rAYZkPqxXjuNONARyZ08uTxf3kT/33lJhQ+SNV9N6nNtCDceEDRzYT74bOtgsWyILkv9b ObzMjkj+8/H1kVs3bzlaQbxIkSKlBGsI34MY8qvB4IlkN6xD8INXFHJ1wZLoP7shD1ZwcMj533i9 hhHYrP316r9jcrVhHQITDOGGCAW0hDl4ksHafdLWPLv+B++t/PkLGC8e5Oxq/2lHI5xBYKmhIo47 O3XSX0WYTEZ0cbcf225pvqn+/fsa7zzkFEN/eMDsQp/ZEPofQi8RpgoPHeSVgiFUFObpGOwrVqy4 ET3Pam44iFIQ2kaP/l7DDv/BbrMP4Y5WGB+KQ7yrHm0zNRS1f7//mTYQYt5v0tSEUnrDLG1az/ck OoRwA0+95553vubPht4D1j2BttYcsezOosvFtS/krHM1bMM4794Ndt3l9XpU5hrR/e16QojeMCuH oOt+rPvrvQhDdVw8XA2vLbzOEBLrzf1tXRfX1yruDxjyzMEiOt9bb9WW37ZsNjnVkFcN9+SLL5aR D9t+bAQ/0wH/IwESIAESIAESIAESIIGHkAAFs4fwonHIiY/AwM5Z5a99tyRrpuSSK5v7l+WRI4dN bqySTz4pzzwTIjhZJFZrSOGGDRuMpxRyWcWnIW8Y7IwKWXY7czbArFr77fvcLb/51tty0xa++bQm kLcMoleXL7rKR21baxhjTxk3bpL5op4mbci5vxs2UtJqTiUnU/3KOje8cPr17SNIsA5hAQIevKPc GXKHoTACPN0g5rizT9t/bAoxdOjYST2oKpgcWnPmzJJBA/u7a262jVOxDEnwUZDg3YaNJHeu3HL1 2jWpXq2yx2OsHRDEIBIePnxIOmvOtvwqiqFaZfHiJSR16tTSpnULOeEfIh7imI8/aS9NPmgmv2/5 TXNMbdKw3jXSW7k9++yz4i0z69zuni2uSI5vt3OaRB5m7bfv87T8IFw89RmT2625xMRc7eOy7i14 JKJYhDuz7mmE9FauVCVcExQAgHl7fzvm4vJatTr25ny4DxHKefz4MZO/DJ6ceNy4edOECFt98ZkE SIAESIAESIAESIAEHjYC4eNhHrYZcLwkkAgIwBkJXmaexDJMcWFoTqrWrdtK69YfOj0avNtQq+nd NRUw4xuH5Z3y+xbnEFFrvYBWqPTGWrVqYzzA4AWGB0L5LENRAlTha/xeE/nnwAEjPGFf4UJFTBOI DsVLlDCPR4sWlXma4w25uiyvr8qVq5qwt4ED+pk8TVYYm9W//RkJ+uE1Zg8lhXhpGfI8HdYwzLJl X5K3366jYaKZjJcXkt/bzQo/vBMUEg6I/FrwxkG1U1SORNVLhNW5MwhkllnVNguoFxCW4Y3WtGkL EwoJsQzrV65esZprrrNl0rVrFy0ucMlURe3e4ytp376DmdOa1au8Zubo0M0CksPDC+3vv/40wqLV ZIsKdLACBQpYmyJ9jgqXSDuLhQYxOVf78BAeDdv599+OzcgRBg9KyxAuCTuk3oTW/Y3nffv2ahjl JLmqVUph3t7f7l6ruNdRwGKk5vzz5nwQhQcM6GvCuxG2PHz4KEH+ONybeG3QSIAESIAESIAESIAE SOBhJUDB7GG9chz3f4oAvsQu02p4qJzoLjE9viDDQwUVISMK54sLaMhhBU+nDRvWyaRJE0zIIJKZ Q3B66eVXYjRMq6l6TeXTyn5jf/7JeFshsT44jP5hlIwZ86NJ+v6/Pr1VbJxv8n1Z84dnTfnyFQXV DiEyVajwqrUr3PNbKoLBvv3ma1NBEHnAPu/U0dEOieYLqZABcQgVBuG1NnzYUPV6+9nRBguWt86y pUtM1cznXyhlrhXY/P33X0bU+/ijD52OwQrEsg/btDTVCFGQYYCKfL4aulq7dh0NgXzBiIAIt0QO OxRMQDjq4UOHHP0gxG/VrytNUviNmo8NDxQyQL660ho65y0zR4ceFpDAH/m9evbsJn/+ucMIdZMm jTfeZXXq1vNwVPjN3nIJf2TcbYmpudpHjDBGVIvFvYoQW7x+Ptaqo1aoJtoidBKelshfB1EL9xwK dwwdOkjOBARIDi20AfP2/nZ9rf6lgidEZOS7g8ejN+dDbjhUmUXVW1x3hBjv2bPLhIXitUGLPgG8 nnv16m4qoUa/l4iPxP3Tu3cv0wjhyjjf3DmzzfqePbvNOvL+ue6LuNcH22udF0JwfNof+qMGeCAM O7YsLrlGZw7+/idM+ofGjRqYHJjR6SM+j/H2/sYY7W3jcsxIq4H7bNmyJTF22viaS4xNgB2RAAmQ QAIiQMEsAV0MDoUEPBFAGB3yXCGZveUlZW+LL8gVKr5qQjJRmdHVkmpicFdLmiSp8YRy3a4ncN4U uh7SR9g+jMMai30ftvXrP9B4PKEyZYsWTWXypIlSSUPIevTo5egb7VzHBS+sJDquiMx+HLyyvviy uxGeen/dS3LkyCkjNDTxkUcyyJifRsvHH3+oX+L/NFUpkcfLbkg8D6tUuYrHUEvshyfbZ506G7YQ gwZrNchq1atjl4AhxtOufUfJnSe3EYsgbq3RXE7lyr1s2lj/vfTyy0YQmT17pnrhfGcqZ5Z76WWZ PWumtGrZTIYOGaQiXgXTHP3CLD4QTDt8+ol6hn1sPMOGDBlmKiXCM61p0+aa0+2EEcpQNRSFB1AN 0uoD4X1tP/pEDh06KJ999qlWDe1gvvx27dbDtIsKMzMojCtZMrOIhPOWgW/zFq20CuVGExLas0dX cx2GDRtlxop29mtnHef6jIqikXFxPcZaT6L3j6tZHLA9aTJrf9i4dVDmEPs9jA0YKx5OFroe3blG dH9DwOw/YLCpijlu7Bjp9FkHQU4/eIHZ5/C///WXVytV1i9XS6V9u49UXBslZcu9JL2+6u30era8 Jl3vb/s8MT/7a7V1q+YaTrle6tatL7Vef8NMPbLzNWz0nsn/N2XKJHPdh+h9DA8z3F/h+DnB5Epk BH5W0R8C+6iRI4xwHln76OyHyLl0yWLHoTgftsFOnzplzo9nmH2f2RBL/1nnhQgcn3bs2FEz58DA QK+HMUt/vMAPRVGxuOIalTFZbfG5NENFVRQKSqWfLQ+bReX+dm0bV3NFugfcAzEpEMfXXOKKGc9D AiRAAnFJIIn+unX/QU8YeDFYfph6RmYsZvjFg7Lk8QmXwI75T8it23fl6lXvE4YXL5ZdDh46mnAn Fcsju3nzhgTol56cOXNFKErFxjAuX75sKgpCEHJn06ZOlu++GyLjxk8yifTdtbFvg+eevwpTqEwJ LzZ3hrmiwqEnzxp4i0H4hMBp9YFflxGKCUYQVDwZvrThD2t3SeHR74njxyWreiD6+vq67SJIvb9O 6Rff9PrFB19+3FlkzNwd47oNY4FXQrq06eSRDBlcd3u97i0XrzuMhYYxNVfXoeE+goCG8F5PBm8+ VELFfQMvrwc1vFYRQplLPcvcCV2RnQ/3zoUL541nGoTsqFqRwvll7764FUj8/JLpfZpcAs54rkwc 2Txi6z0eXl3vv9dQEH6Ogh79+g9yCkuPbFze7sc1v337lrmP8Ofgi6WfMyG9vb/pYwqidOv2hfTt O0DKV6hoCrbAI/dBXtfejAsVjO3n9eaY2GiDYhcIOf7xp7FSsuSTXp3igyaN9W+EqzJ7zi9etXdl 7tVBcdQInxmVKpUXeP0OHDgkjs4as6eJyv1tbxuzo4i4twsXLpjcpfXfaeAobBTxEZHvja+5eBpZ TL2/p9X3a59USeVcYEhqC0/n43YSIIH/NgH8vp0ju0+MQXjwv7JjbCjsiARIILER8PX1M/m54mNe 6dOnFzxcDWIOfn0dO/ZnEzaGqpPeWDL1qkLFyYgMIXURGQQxVxEEX0DxiMwyZ87ssQn6jWxsEDEi a+OJmccTu9mBsVj5uNzs9nqTt1y87jAWGsbUXF2HFtl9hPYQZmOCs3VuvFZz5/azVsM9R3a+mLh3 wp30P7wBoa14z+nbb6A0alhfUAXZnsfRHRoUEYHXaVoV5H9dtdK8r1R6tYogj+P69etk08b1Gi7/ uFSpWlWF9ZBrvWvXTlN1uHHj99116bQNfRYqWMh4gGIHxB5UUkUfQXeCTM67WlrExKpQi5D3devW ash7Rdm9a5cg5PexYsWMt7FV2djpBB5WIEzPmztHrl2/ppV9qxlP3WtaIAWh5fCcTavi/LMaqgzP VBje33dq9eCK6nUNb1vLEOZ85MgRzTVZ2xxjbbeeUchj8eKF5oeRvBrq75reAJ6+q7TAzp7du+TS pUtS5NFHpUyZshqSX9h0gWuGHzbu3Llt8mrWrPm6eb/fu2ePrFm7WgLPnZNcuXObIjPw/IUobjeE gK5XXvCELfNiWRMyb+2HqBIytuMSrD/eoFAN2tjFS+Q7RMENsMYPI7hf4CFtWUTMrDbWMz4nFy1a aH6kuaxzxb0Fz1N4ve7fv0/vp7UCXhDYX61YyfHZYl3zl/RabN++zRQq+uSTT93+iOQtF2tMCFE+ pdWEK1epYvK1gjXCxuFFi8I88+fPlRTJU8jrb7zl+GEpKve3u7bezDWq9zfuK4Te79m9W9KmS6tz eMGaotPz6tW/mtfM7Vu3pLAK59ZrK7L7+8033zavSVQTt17X9tcqfhApW/Ylk97Dfg96Oh8GhePB Aikd8EMNfohEugrXv2ecJsAVEiABEkgkBCiYJZILyWmQAAl4R2DG9GkCzwF4YnXt2sO7g9iKBEiA BB6AAHz5l6y7Jpt33JQyz/hK9VfSqCef+w7hzbdCi3WUKvWi+eJf8dVKpmjJSX9/I7i4OwpfaJFH Dt6jV65c1S+02Y1H6by5c00IOUK/c6h3LPJcTp06SWbMnGu6Qd7FdevWOL5Yu+sb26z+K1euaoQp iFgdO7YXpACASAeB+5df5greX38YPcaEFh86eNCMaeaMaepFe8nMBaLSMPXsXbJ0pRFfPJ3P2o7z 9u/3P9N3vXrvGLEMQgDy+8ETM3/+AiZcHh7DNWrWku7deznGelFFJhSMgaGfAf37meI4lohgnQPP R7RwS9u2rdSL/LY89lgxzRm50Yhi9jZdtCIxBClUos6TN6/8MXmLjBwxTLp17ykQx9Zq9eFLly5K UFCQLJg/T8prxeTff//N5BvE503Roo8ZAQnpAl5UoQ2h9ZZt0lD2VRAkVXyD6IQcVKhu3LBhYzPP D5o00sItl02IdspUKWXliuXGS3nylBkmt+lmvQ4dO7RT7+W0Kq4UMRVrwaRTpy5Su05dI4pGxMwa h/UMtggThB06fMh4j1at+prJszVwQH+t0pxWBdLCsk5FrPGar/Orr78xuUCta47PWAiEMKQNcPW6 XqJ5EpGHMTIupoPQ/3Cvrlmzyty/d+/eM2Ie7rmdu/7WsOIlej/5Gg/uiRPHy8RJU413prf3N07h 2nbu3Nma0zHyuUbl/sbr5hNNFQExsUSJx40IPHXKZPs0zb2Kew1iM17P8EjH69Z6bVmvxYjub/tc XF+rCMtHX/AcRJEW9BfR+fBj3fffj5CJE8brjyp5zLVcqV6gU6dOkclTphnvVKcJcIUESIAEEhkB z/E/iWyinA4JkAAJgMBb6l2AEKOFi5Y5qgCSDAmQAAnEJoGtu27JoLEX5Le/bprnbbtveTzdWvVG QliflSsRYgy+1EIciMxu3rwpgwcPlTlzF5gKvFe1Yi7ElfHjJ5ttjTTnHLxx7MUkIuvT3f6FC+Yb sQyVgadNnyVjfh5vxCp4JiF3pd3gATZn7i8ya/Y8Iy7dUo+ZLVs225t4XEZBC8y7geZI7NCxk2k3 ePBAIyLhfXz6jNmyeMkK9fQqJ4vVIwrCEwrjIFQZ3mDgBoP3EDywqlWr4Tb0/bvvBgs8sH7WeXz/ /Y8y75dFpkiNOVj/g1gJsQznWbhoqYwaNdrMB4LGotAK1oOHfCeFCxcxogL4w6N3+vSpRhSaO2+B ERJnzpprQl4hNMJrzLLg4CAZrALapMn6g45ygjABYQ0i2fLlS40QhB94Jk+Zrt7RE+Xrr78198h6 FTthECIx1/ETJpvxow8IdLvVGw4WGTPTyPYfPLfGa7oCWC29/zAfeDxC7MypxUVmzppnGEydNlM9 Cn1NURlU9bXMJ5WPEa02bf7DrSest1ys/uzPEJAXL1kuYAovX4iLTZs1l/kLlhjG4IACOQ9i586d 9XquUbm/4RUJsax1m7by89gJmh9ujnmd2seKit4Qy6pXr2n+Tpk9Z74RPq3XVlTvb9fX6pSpM6V5 85amKBK8GiM7H16vEPXgqYpQY4Qo9+nTT4XjzPq6Crm/7OPnMgmQAAkkNgIUzBLbFeV8SIAEIiRQ sGAhk48Hv9rSSIAESCAuCPxz1DnnzoEjnvOm4Quun19qefnl8mZoCKvLraF8+LKNvFIRGSoRo/ot DGF/sDc0RAtfdmHWtl3qlfMgtnHTBnM4xDzLKmtoHMIxISzZrVXrNiaEC9teUK8W2I7t200hA+Rl tD/MztD/xmrxC3jCvPHGm9Ku3admK7zvftfqsMjliDmhgiVy58H7CbZJz42QM3ibQfRAaCYMedFg 2O5q6BPCAcIr8fkAg+eTNVasI3fl8hWrNUR2gIZdnjPhaXv37jUeXQhR82QjRvxgRA8UY4EXG8SS VD6pTPPTp085DntZwydLl37RrGfPnkNQNRfi5949uwWedTh3FZ0jvOt26ZyQ4xF2OvTcRR8Nub7D hw81Ygv2TZg4RXr2+tpUL46MGdpHZhg7xBOEeqZLl840z5o1m3pCljZ5OFEJ27IP234kj+qYILK5 M2+5uB4LgaxDh05GKINYCWERoekNGjQ0TeEdiDDDnSqQPohFZa6e7m9359+gIY3IOVm/fgPH7lfU E9FuEMtgKPKEexj3+AulSpkwYry2onp/u3utNtIQbNwfEHgjOx9e0/DkPPrvv6aCM8TnMmXLGS9V 63VnBsz/SIAESCCREmBIZiK9sJwWCZAACZAACZBAwiBQuYyfTF+khUhu3Rc/nyRSuaz7vIUQUbZt 26pfipPKO/XrOAZ//jxyY92R1VqBN6IvqVrb1XGMr3r+wPAF2zIfFYJgwcHeF6+xjrU/w+MKYZjI SWYZ8iSWLPmUik9bjLeWtd0+JgiBsCD1qPr7779MZVWrHZ5H//izY/Wffw6Y5X2aOwl5nyC+QDxA iBk85N5+K0yssw7y13HBamgVZHhoQSh74omSgvxMCIHDF39XQ1VOeCXBK82T4dwQqkaP/t4UYUA7 iDcYS+YsWTwdpgLTTenfv6/xeAJzXAvremBOltkZYVuJxx83qQMCzgSY0EuEPcKLDEVjYEmThghR Vh9vvVVbflOvvbV6f+CB8UJ0+7Dtx45xRsbMdBzBfxZbeJ/ZDesrVy53FIXAPntlX3tba9lbLlZ7 T88+vj5y62aYtyauSYoUKSVYw2IfxKIyV/u1s9/f7s5/6qS/hjRmMoKsu/3Y5u9/wuxq90lbt03g fRqV+9vdaxUiGDwQYd6cr63eR9/26S2o4IwHvOpqvf66tGzZxpGz0O1guZEESIAEEgEBCmaJ4CJy CiRAAiRAAiRAAgmXQLbMyWXmsFzy197b8nRxH/FV0cydIawQ4s3rr9eSDPrF2jIII5MnTTDJ/yMS zKz2sf0MD92jR2+asEAUfLDszNkAI9bAQyvL5jymAABAAElEQVQyy6q5wN55512nZlmzZpVzZ8+a bfCsyqCVdiFSjR8/Vpo1a2E8urAT1UO/+KKb07FY8UsdUswAXlpIjA+h7JXyFUwy/mYahubO3Hl8 ubY7fPiQdNa8Uvnz55fhI77X4gkljGDYpnULOREqcLgeg/VP23+sgoS/CSeFJxHmM2fOLFN90117 axuEOBjYjlOxDEn3kfT93YaNTCXaqxo+Wr1aZau5Sf7/449j5fjxYyZ/GTyR8LihXmoI34RFxszR mYcFyyv7jIa22g3XHIb9uHe9sehy8abvmGgTk3O1jyeVhqoiJBpelValbPt+LKdJG+L9/t2wkVrA I63zbn3bwNjSpk3r9f2N9u5eq1bH3pwPOffmz18sO1XkhjC7epXmktMwzVw5c5sceVZffCYBEiCB xEiAIZmJ8apyTiRAAiRAAiRAAgmKgJ+PVj/UhP+exDKIJKhMiMpznbt0ldatP3Q84OEBTx5Umjxy 5HC8z6tAgQLGu2qrhjJahkTxx44eNZUp4eEUmaFiJJLy2x+ovmfZM1r5svF7TTQRfiHj1YKKmEhA DhEJDHLkzCHFS5Qwj2TJk8mUqZMc3l/oo2at1+X8+fOauL2fqSqLggXuDGGFEC927nQO40Pyfct2 aDgiRMumTVvI88+/YMQyrF/RHHF2g/cYPAFhOPdhDcMsW/YlrcwZUlEQHlCXQr3E7MehL7vt2LHd rKKgAhiDZ+cuXwrW4cl38WJY/jM0HDSwvwwY0NeEJyLcD8ncX3ihtIa+bjMebd4ys4/BdblgwUJm 0+9btjjtstYLFCzotN3TSlS4eOojtrfH1Fxdx5knTx7j3WkPX3V9PRcuVMQcBm9T6/5G+PG8eXNM vjHLQ9Hb+9vdaxXn79q1iwnHjOx8p9QDE23hRfi0viY//PBjGTtuovFyXLFimesUuU4CJEACiY4A PcwS3SXlhEiABEiABEiABB42AgjFRD4s5GOCsOJqNdXDaOvWP9TLbI50/Oxz191xut5Qiwcs1uTk IzXBPwQchGci5xisyQdNY2wsyPf0pSa7b9H8A+n9dS/zRb15i1ZGIOrYob3UrVffiF1jfx6j4tQh qV27ruPc5ctX1HH1Ve+af6VKldeMZ45jp20BrN944y2ZOXO6JlfvoKGetU3xgDmzZzlaPaciGYQK tEmj3j3ILzZbK0EePnTIKSQTVSohRqDgQMmSJY3Yt0VzrqFqYRb1nkOOtWnTpjj6tRbWrFkl32lC /fLqDbdv316t+rhYhbZyRiBDNUMIpaNGDdf8YRWMWPjTj6OtQ80zOKHfNKnTmBx2yHW2Z88uE4aK CpXeMnPq1GUFQiE86zZsWCeT1NvxqSefkg0b15v5InceRCbkaYvMMB6IoN5wiayv2NofU3N1Hd9b Kpwu1wq4337ztbTQ+/j6jesyYnhYtVS0b/ze+/raWiijfxhlPCOfLPmkqU6K19tHH7dzdOnt/e36 WoX4inDlY8eOSvv2HTTX3KMRng/Vdffs3iV/7thhxL5cuXKbaqX37t0V5N6jkQAJkEBiJ0DBLLFf Yc6PBEiABEiABEggwRNYsmSRGWO1ajXcjhViCsKrli5dLJ980t4IVfaGEHSSJg0L9UwSupxUt1tm CXFW3qWQ9mH70YflwWIdoxvMon0fEq2jqmOfb3tL5887mv3I39RRK1m+9lp1x6FYSKKClKtFluPK fhxyj9WpW89UQ5w6ZZJAAAgODjZf+r/q1cN4ujyuOb+69+gl8EqzDHmaKlasJAsXzjfeZtZ2d89t PmyrCdbPCSqUbli/znj5varVGCF8weDZ1bRpc/XymSvILQUWL75Y1njTIbzOsjfefEvFrR3S9cvO JmS0XfuOMmLEd9KzZ0j4KPKklSv3sqxfv9Y6xPSFENJlel2nTZ1stqMAQPceX5nlOnXqGRFt9qyZ JgwO3nA1atSSuXNnO3KFgcmVK5dlivJB+Kavn5+ULvWitGjZyvQPIdEbZo5B6UJSFVZg1n2EOffr P9Bcc1RCRfgl7qdKlarI5527mLbWf+6uuWOf9uMNF6u99Wy/tx3bNNefdU9b28xz6D0blfvb3vZB 5+rp/kYBj886dZbhw4aaewJCJ+4ZiLPWMfCyHKFhv336fGPuccwH9w0qxb6rD8twf1eqXEXm/zIv 3P1tn4u71yryl33xZTetdJnVdBfR+cAX9yKu+Te9Q+5J3K/132ngVLzAGhefSYAESCCxEUiiH3je JRyIYOaBF4Plh6lnZMbi8xG04i4SeLgJ7Jj/hNy6fVdztgR7PZHixbLLwUNHvW7PhiRAAiTwXyRQ pHB+2bsvJBdSXM3fzy+ZpEubXALOhAkeUT033+PFVI28feu2hkjmdC9eRBWql+3x5+sZTYoPoc6q 2uh6aPNmTUz44qzZv3g1tmuaGwxVN/PkyWuEJtf+EDZ74vhxyZotm8fE7agkefPmDQ0dfcRxToSr plRPPHhXeTL07e9/whyHEEpXQ2VMhGJCPHErEukBly9fNuPPrV5A8PxzNW+YuR7jbh3zw5wwFk+5 uNwd57rNGy6ux8T1ekzN1T5uhOD6nzhhqq9GxA/X84Z6odlDle39RHU5MPCc3tdJjSDs7tjIzocw UYwd1UmjYjH1/p5W3699UiWVc4EhYc9RGQPbkgAJ/HcI4DeTHNl9YmzC9DCLMZTsiARIgARIgARI gAT+WwQyZ/ZcJTI2ScALCJ4u7gwhjKtX/yq7NZSsXbtPPQpMrsfCgw8PTwahKl/+/J52m+3w/MHD btmzZ7evul1G3/AG8mQIe8UjIoPQ5k5ss46JiJnVxptnX18/43XnTduI2njDJaLj42JfTM3VPlaE RUZ2H6F9ZNfT3qc3y5G9ViM7X0wJd96MlW1IgARIIKEQoGCWUK4Ex0ECJEACJEACJEACJPDABL78 orPxtHriiZKa5+ydB+6PHZAACZAACZAACfw3CVAw+29ed86aBEiABEiABEiABBIlge7de0pKzfX1 9NPPeO1dlihBcFIkQAIkQAIkQAIPRICC2QPh48EkQAIkQAIkQAIkQAIJicCLZcompOFwLCRAAiRA AiRAAg8pAQpmD+mF47D/ewQuXLggw4YNkRdLl5Gqr1WLNQB79uyWWbNmmOpHxYoVj7XzRNaxNY4G DRoKKjrFhFl91q/fQOJybqgkhyS5773fxEzjBy0XHxBw2jEln1Q+UqBgQXm0yKPytK3Km6MBF0iA BEiABEiABEiABEiABEiABOKUQPha33F6ep6MBEjAWwLXr1/TsvNLZP/+fd4eEq12p0+dMuc5oxWw 4tOsceA5pszqM67ntmLFMvlty2bHNDZv2mgYb/3jd/nj999l4cL5MmTwQGnTpqW0/bCVnPT3d7Tl AgmQAAmQAAmQAAmQAAmQAAmQQNwToIdZ3DPnGUmABEhAsmbNJgsWLjEkUKY94PRpmTptssydM1s6 deogkyZPE1TSopEACZAACZAACZAACZAACZAACcQ9AQpmcc+cZySBWCVw5coVWbxogfz777+SOk0a eVZD/Mq99LLTOeGltn79Wjlz5ozkypVbXq1YyWOJ83v37sm8uXPkmnq4Va1aTVzLwEPsmTx5ohQu XETKli3nOM+yZUvkqo4FFcqOHv1X1q1bKy+//Irs2L5d9u7bIzmy55Bq1WpIrty5Hce4WwgKDpI5 s2eFO+bPP3fIzp1/S8WKr0qePHkdh27YsE6OHDkib79dW9KmTefY7m7B09xWr/5V/vrrT7l965YU 1jDJWrXeEB8fH4mJc7obB4QxcOjUqYskTZLUhMTC6+zNN99215zbSIAESIAESIAESIAESIAESIAE YpkAQzJjGTC7JwFvCOw9dFt6jwyUn2ZekouX73pziNs2EKbefbeejBw5XI4dOyrr162Rzz77VHr3 7uVoP3fubGn6wfvGk+k0vJqmTJLGjRvImjWrHG2shfv370v/fv+TAQP6yvnAwHBiGdoFBwfL96NG CEQmu83/ZZ5MmDjebDp08KBp06L5BzJ8+FDZv2+vjBnzozRp0kgOHvzHfli45X59+7g9BmPDeSGm WYZtA/r3k1kzp0vq1GmszW6f3c0N2zp/3lG+/KKzrFi+TLZv3yaDBvaXRg3fkUCd/4Oe0+1AXDbW q/+O2bJLxUAaCZAACZAACZAACZAACZAACZBA/BCgYBY/3HlWEnAQCAq+L12HnJM1v9+QaYuuyM+z Lzv2RXVh0KABEnjunAwZOlxG//izzJw1T726yqvH2ULZpHmzzp07K8O+GyI5c+Y0+0aNGq1hgDPV e8pXhbG+cuPGDadTDh06SH75Za40eLeRdOjYyWlfdFYQhvjLL4tkytSZ0q//ILl69aqMHv19hF15 Oubpp5/ReeSSVat+NUIWOtm1a6ecPXvGeK4lTRrx25u7uS1ZvMh4wlWvXlMWLloms+fMN15f/v4n ZJSKkA96zggnGroTHn/wODuh56SRAAmQAAmQAAmQAAmQAAmQAAnED4GIv1HGz5h4VhL4TxE4E3hX Ll+955jz/iO3HctRWbhz545s2/qHeoHlkOeff8EcCuGlevUaZnnTxg3GY+qWhhm+8kp5SZcuJFwR glSpUqXl4sULsnfvHscpx44dIzOmT5M33nhT2rX71LH9QRZatGwlj2TIYLrAGDJmzCTbt22NsEtP xyRJkkRq1KxlRECEZsJ+XbnCPGN7ROZpbggbhaEKKcTFU6dOygulSpnQzo3K70HOaTr24j8IfcmT J5c7t+940ZpNSIAESIAESIAESIAESIAESIAEYoMABbPYoMo+SSAKBHJnTy5PF/cxR6gGJG+8mjYK R4c1hbiDkMHnnn8+bKMuPftcyLq/Vl7EA/Zc6DazYlu3V2f8558DZvc+zXeGPGUxYUlEJ2izEo8/ Ljdv3lRPsyu2rc6LER1To0ZNI2JBKEM+MoSFlijxuOTPX8C5E5c1T3ODJxms3Sdt5e23XjePunXe MuO7cuWy8YiL7jldhuBx9dLFi3L79m3JnSePxzbcQQIkQAIkQAIkQAIkQAIkQAIkELsEmPQ/dvmy dxLwisDAzlnlr323JGum5JIrW/Relmk0wT8Mifztdu7sWbOK/Y42GrZotzNnAxxtILrB6mmy/gzq DYaQyfHjx0qzZi3Mdo//hR7ncb+bHfdV5IIXnJ9fajd73W+yH4Ok/s8++5wRyl4pX8HkGWvWvKX7 A21bPc0tTdoQht8NGylp07gIl6r1gV/atGmjdU7b6SNcXPlriJdcZKJfhJ1wJwmQAAmQAAmQAAmQ AAmQAAmQwAMRoIfZA+HjwSQQMwTgWQYvs+iKZRhF5sxZjJjzN6o7qoeSZVu2/GYWCxQoIAULFjLL v2/ZYu12Wi9QsKBj+zNaXbPxe02kUKFCMk7DMw8dOujYZ19ImTKlEdaOHz/u2IxcaAhpdDW7pxpC SJFzLG/efEY0c21rrUd2TM1ar8v58+dl4IB+grFUrlzVOtTjs6e5FS5UxBxz+vQpKV6ihHk8WrSo zJs3R5DfDCGZsOic0xwYyX87dmyXsT+PMdexdu06kbTmbhIgARIgARIgARIgARIgARIggdgiED1X ltgaDfslARKIlMCff+6Q4cOGhmv3QdPm8t77H8jIEcOkZ89uUr9+A02Af1YmTRpvPKPq1K0njzyS QYoXLyEbNqzT7RPkqSefkg0b15vcZS+9/IoR1I4cPuzoG7m0vuzaQ1DdsvfXvWTsuInhxC2ISGXK lpPly5aaPrNmyapJ/SeZ8M/MWbI4+sLCwIH95Pr16wLxbvqMaXL58mXNj9bBqY3rSmTHlC9fUSti 9hVUCK1S5TWHF51rP67r7ubW+L33ZfHihTL6h1HGW+3Jkk/KsmVLdNsi+ejjdo4uontORwe6gBBP XMf7+g+Cn/+JE+Y6pEqVSpl3VxEyo705l0mABP4DBPDejEImrVq1kRw5csbajGfOmG4qFHft1iPW zuFNxxjHgX/2S/fuvbxp7lWb+Jgbqj1P0YrTNWu+blIeXLhwQYYNG+I03owZM0qhgoWl5JNPSp48 eZ32cYUESIAESIAESCBhEqBgljCvC0dFAh4J7NecYni4Wt169eVdrWYJ77KJE8bJ2jWrTZMCBQqa LyOWANOv/0Dp821vU/UR4ZdIMl+pUhX5vHMXpy6T6HYYcoJBbMOXkKn6hQBeZ65Wv56KcxoK+v2o ESaPWoUKr2q2siRaSOCiU9MsKqb17futyTeWIkUK86WwWmhRAqeGthUUJYjoGB8fH6lYsZIsXDjf eH7ZDvW4GNHcRoz4Xvr0+UbG/DTaHI9KnKgSCraWRfWcSZMmc3inmT7UUQ3FF/AFC4bQ0jx588jr WmDhgw+aa+GG7GY7/yMBEvhvETisP1gsW7pEateuG6uCGX54WbdujcS3YGaNIyYFM6vPuJzbOa1O jev2+ONPGMHs+vVrZh1ezwjjDwoKNj+S4G5GGgJ8nrRs2VpS6H4aCZAACZAACZBAwiVAwSzhXhuO jAScCOAX6S2/b3fa5m6luebwaqreZv7+JySdCjFWVUqrLUSrIUOHa7L9GxIQECAQhODVZFmlylUE D7t16NBJ8PBkCFscrkJTYGCgCYu0KnC6tse4SpUubfKs5cqVWyCaeTL7ODBW5GbzdMy//x7RfbnC FTNw7dvep7XPdW5PqFfZtOmzjPfbjRvXPX5p9facOM/qNeut05nniROnOq1zhQRIgARIIPERqK3C Z7v2IV7U+Bw7dPCgfv4OMt7YKVKmUNGsTeKbNGdEAiRAAiRAAomIAAWzRHQxORUSsAjAawy5wSIy X18/DY0My1kWUVtv92XOnDnSpjhvVBPaezrmL83XhsqYu3fv0tDOT423XKQD8LJB+vTpBQ9Xi81z up6L6yRAAiTgjgC8jNevX+v4IeFV9bLNlz+/oym8h3/VAiLIExl0J0gKai7KWrXeEHjHujPknFyy ZLHZj3B+Vzt8+JBs3LhBKr1aWXLlzm12o8LxzJnTpXix4vL8C6Vk7do1cuLEcfVYrmw8fpES4LHH iskbr78ZqScV8kbCS9j1GOSPRBh/w4aNHV66mBu8c/H+jDlFZu7mdu3aNVm0aIHJzWmKx2jOznIv vWy6iolzuhsTPsfwg8zo0T9L3TpvyuRJE+Xtt+tq/tHIPzfd9cdtJEACJEACJEACsU8gJOYq9s/D M5AACZBAjBP48ovOJlT0iSdKSl2t6hkXFh/njIt58RwkQAKxRwBFhBevvSZdB58zz1iPrs2dO1ua fvC+zJ0zW06fPh0SKt+4gaxZs8p0eU+rD3fo0E66d/tStv7xh8lVNnjQAGnU8B3jBex6XuTb+qht ay048pPHHzMO7N9vQu6PHT/mOByCGcLwN27aYLYhjyVyaDZ5v5EsWrhQUHAGxVjaat8YkyfDPk/H oNjMiOHfyW4V/izDMra5S01gtbGe3c0Nol6jhvVl6JBB2u8uWTB/nnz22afSu3cvc9iDntM6t6dn eFa/+VZtQeGbf/454KkZt5MACZAACZAACSQAAhTMEsBF4BBIILETKFX6RZk0eZo89/wLMTrV7t17 yshRo2X0jz8LkvjHhcXHOeNiXjwHCZBA7BHYuuuWDBp7QX7766Z53rb7VrROBm+pYd8N0VD6nDJz 1jwZpe9/U6fNVM8wX+nfr6+gQvHCBfPlt82b1HupjgkvH/PzeJPHEmH6o0YOdzovCq98/HEb46k2 cNBQKVWqtNP+6Kyg+MqChUtk7twFxgNs586/ZfnypRF25ekYJNGH/bpqpeP4leo5B7P2OXa4LHia 2+DBA006gr59B2jxmdmyeMkKKVOmnCxetFA2bdro6Dc653QZgsfVfPlCPMAh3tFIgARIgARIgAQS LgEKZgn32nBkJJBoCCDpcZEij3pdwdLbib9Ypqw8++xzMRqKGdm54+OckY2J+0mABBI2gX+O3nEa 4IEjt53WvV3Zvn2bKRjyyivlxcoVicIoELouXrxgKu1aHl92Qamy5qVEOCbCKi2DZ1e7T9rK4UOH pP+AwfJ8DPyggXQAHT/73JwCCe9r1Kxllrdt22qdNtxzRMcU03DPQhpOisqhGC8eq1evMtuwz5N5 mhu8un5XzzfkvETuzVOnTsqFC+elatXXTFeblE90z+lpLO62p0gRkuz/jhbpoZEACZAACZAACSRc AhTMEu614chIgARIgARIgAQSAYHKZfzEz0fL46rhuXLZ1NGalb+/vznuueeedzreWj+p+/FInTq1 PFasmKMNqjGWLPmUqdSI/F2WWWGNyHUWGwbxCYIYqih7a67H1KjxugRqFcq///7LPLCMbZGZu7lB IIOYdvLkSXn7rdcdj549u5nuLL7RPWdkY7L2BwScNoso5kMjARIgARIgARJIuATiJoYp4c6fIyMB EiABEiABEiCBWCWQLXNymTksl/y197Y8XdxHfEPFs6ieNE2aNOaQM2edBagzZwPMduzH4+jRm3L1 6lWnwiVokyxZMvH19XWcFiHtCPEcN3aMwGutcOEijn0xtQCByvKG87ZP+zGvVasuI0cOk1W/hoRl Yg7YFpm5m1uaNGnNYfB4/uKLEJHM3o9faj+zGt1z2vuKaPnXlSFhpfZCDRG15z4SIAESIAESIIH4 IUDBLH6486z/IQJFCuf/D82WUyUBEiABEnBHwM8nqZR5Jkysctcmsm0FCxYyTX7fskXefPNtR3Os wwoULKjVjwsI8oZt/eN3qaShmLCAgAA5dvSoSeoPwQkGzy+EtH/Ztbt80OQ9+frrnjJu3CQjqpkG tv+yZc9u1o4dO6r5vsqGLB/919YibBFiF/qG7dAQUliB0HGbFTf/RXRMxowZpUzZcqbqJw7FMrZF ZJ7mhoqUqK555MhhyZEzh2TIENLPgQP7ZeLE8VK+fAXDKDrnjGg81j7Mc+KEcYJqyxAoY7pStXUe PpMACZAACZAACcQMAQpmMcORvZCAWwJ794X86u92JzeSAAmQAAmQgBsC06dPlbVrVjvtyZ4jh9Sp U0+KFy8hGzask0mTJshTTz4lGzauN7nLXnr5FYGg1rDRe7J48SL1yhouCMVEeOZY9SCDNfmgqVOf WCla9DF5992GMnnyRJmgYk7Tps3DtXnqqacFuSh/+WWuZFSRKfB8oPw4+vtw7SAIfdimpbz3/geS NEkSGaBVMn39/KR27Trh2lobvDkG+dg2rF9nDrHnZrP68PTsbm7NW7SSQQP7S8cO7bW6cn1JlSqV VggdI4cPH9Jx1nV0Fd1zOjrQhe07tsnwYUMl+G6wnD51WlCBE2GhCMX8tMNn9qZcJgESIAESIAES SIAEKJglwIvCIZEACZAACZAACfz3CCRNEuKZZYUf2gkUL1FC6tatL/36D5Q+3/Y2FS/v379vvLkq Vaoin3fuYprnzZtPBg8ZZtp0/ryj2ebnl1o6duwkr70WEsqYNGlIPjWr/xYtW8vatatNaOarFSuJ a6ggvNI++qidEdWQ7wsFBBo2amyEJmvMVl/BwcHS4dNPzCoKEgzRsVieXFYb69kaR2THlFWvsnTp 0qv3W1LBckRm9Wm1cZ0bRDGcb8xPo+WrXj2UXzJ5/PHHpXuPXvLMM89ah5nzeH1OFQdhSfSfeQ5d /+fAAcEjia5nzZrVCGVvvV1b3nnnXUmRIoVpy/9IgARIgARIgAQSLoEk+sfW/QcdXuDFYPlh6hmZ sfj8g3bF40kgwRLYMf8JuXX7ruaFCU6wY+TASIAESIAEvCPg55dM0qVNLgFnol+psHix7HLw0FHv ThjDrW7evGFCLXPmzGW8pNx1Hxh4Tm7fuq3hhzkdYZLu2kVlm7//CcmePYckT+78m+sXXT6XdevW yObftkpgYKDc1gqQqEbprUV0DJL016/3tjRo0FDafhQixnnbr6d2+PP3zJkAgZjoLsdabJzT01i4 nQQSMwGkJomJiIu0+n7tkyqpnAt0rjqcmNlxbiRAAlEngN+scmT3ifqBHo5w/mvHQyNuJgESIAES IAESIAESSDgEfH39Is2BlTlzlhgfcO7ceSLtE7nComrujrly5Yrs3r1LPdl+0uqW9+XtCEI7o3o+ eH1B+HO12Dyn67m4TgIkQAIkQAIkkLAJUDBL2NeHoyMBEiABEiABEiCB/yQBJOe3wjvhWZYjR85Y 5xAf54z1SfEEJEACJEACJEAC0SJAwSxa2HgQCZAACZAACZAACZCARaBDx8+kabPm1mqMPBcqVFi+ /bavPFq0qMn/FSOdRtJJfJwzkiFxNwmQAAmQAAmQQDwRoGAWT+B5WhIgARIgARIgARJILASyZMkq eMSkoTLnq5Uqx2SXkfYVH+eMdFBsQAIkQAIkQAIkEC8EQsoxxcupeVISIAESIAESIAESIAESIAES IAESIAESIAESSHgEKJglvGvCEZEACZAACZAACZAACZAACZAACZAACZAACcQjAQpm8QifpyYBEiAB EiABEiABEiABEiABEiABEiABEkh4BJjDLOFdE46IBEiABEiABEjgISFQpHD+h2SkHCYJkAAJkAAJ kAAJkEBUCFAwiwottiUBEiABEiABEiCBUAJ79wWQBQmQAAmQAAmQAAmQQCIlwJDMRHphOS0SIAES IAESIAESIAESIAESIAESIAESIIHoEaBgFj1uPIoESIAESIAESIAESIAESIAESIAESIAESCCREqBg lkgvLKdFAiRAAiRAAiRAAiRAAiRAAiRAAiRAAiQQPQIUzKLHjUeRAAmQAAmQAAmQAAmQAAmQAAmQ AAmQAAkkUgIUzBLpheW0SIAESIAESIAESIAESIAESIAESIAESIAEokeAgln0uPEoEiABEiABEiAB EiABEiABEiABEiABEiCBREqAglkivbCcFgmQAAmQAAmQAAmQAAmQAAmQAAmQAAmQQPQIUDCLHjce RQIkQAIkQAIkQAIkQAIkQAIkQAIkQAIkkEgJUDBLpBeW0yIBEiABEiABEiABEiABEiABEiABEiAB EogeAQpm0ePGo0iABEiABEiABEiABEiABEiABEiABEiABBIpAQpmifTCclokQAIkQAIkQAIkQAIk QAIkQAIkQAIkQALRI0DBLHrceBQJkAAJkAAJkAAJkAAJkAAJkAAJkAAJkEAiJUDBLJFeWE6LBEiA BEiABEiABEiABEiABEiABEiABEggegQomEWPG48iARIgARIgARIgARIgARIgARIgARIgARJIpAQo mCXSC8tpkQAJkAAJkAAJkAAJkAAJkAAJkAAJkAAJRI9A8ugd5nxUEl1NliyJpEyBJRoJJG4CSXib J+4LzNmRAAn8pwjwPf0/dbk5WRIggYecAN+zH/ILyOGTQCwTiOn3iCT31R50zPfuiSSlr9qDYuTx JEACJEACJEACJEACJEACJEACJEACJEACCYBAjHiYXb1+V5auuyTrt15JAFPiEEggdggM655fgoLu yc2bd2PnBOyVBEiABEggzgikSpVU/PySycWLQXF2Tp6IBEiABEggegR8fZNJihRJ5coVvmdHjyCP IoH/BgF4mGXIkDLGJhsjgllQ8H05dOyWbNh6NcYGxo5IIKERgC9m8N37cuu2ulTSSIAESIAEHmoC STWVBN7X+Z7+UF9GDp4ESOA/QiBFyqSSPDn/Dv+PXG5OkwSiTSCmQzIZSBntS8EDSYAESIAESIAE SIAESIAESIAESIAESIAEEiMBCmaJ8apyTiRAAiRAAiRAAiRAAiRAAiRAAiRAAiRAAtEmQMEs2uh4 IAmQAAmQAAmQAAmQAAmQAAmQAAmQAAmQQGIkQMEsMV5VzokESIAESIAESIAESIAESIAESIAESIAE SCDaBCiYRRsdDyQBEiABEiABEiABEiABEiABEiABEiABEkiMBCiYJcaryjmRAAmQAAmQAAmQAAmQ AAmQAAmQAAmQAAlEmwAFs2ijS/gHpkqZRNKnTSZJkyZJ+IPlCEmABEiABEiABEiABEiABEiABEiA BEgggRBIHtfjqFQmvfT8JLfcCboX7tT374tcvX5XAi8Gy7/+t2XTtquyfusVwfb4sOeeSC0/9C4g l6/eNaf/oPNhOX7qToRDSZYsiSweU1RSJE8ij6RLLgPHnJJpC89HeEx0dk4YUEgK5E4lSZIkkX6j T8miNRcd3bxeKYN0ap5T0qROathhLAeP3pLMGZNLEv03dNxpmbP8gqN9fC0M+jKfvFAyjTn9hLnn ZMzMs/E1FJ6XBEiABEiABEiABEiABEiABEiABEiABBwE4lwwe65kahWSkukA8Ahv2TKnkML5REo/ lUZqV82oAtVtadXtXzl7Pih841jeApEpVcqkkjVTiCNei/rZpPuQExGetcnbWSRXtpSONn/tveFY jsmFogV8JbVfyLhyZE3h6LpyufTSu30e9SpzbDKiWX4V1yCcweztw1rF3tKjBXwkWaiX2zG9njdu hoilTz7mF3oviOTJEcYs9kbCnkmABEiABEiABEiABEiABEiABEiABEggcgI2WSXyxnHdImWKJFIo r4+M719I4iOqEJ5lh47dcky7iopRkY2jXvWMjvbwlNt3+KZjPSYX1LHMrXVslsNJLAsOvq9eaKJ+ ZfFnc0Y+KpMGFZaZw4tIiSJ+8TcQnpkESIAESIAESIAESIAESIAESIAESIAEvCAQ5x5mrmNq2+tf xyYIZDmyppLHCvpIzQqPmNxbEHuyaChh2efSyoatVx1t42rhp+lnpV/nvOZ0qVIliXAc8I7LkTXM U2rWkpgPxbTmjRBGK5zx7/1hXmwYg2UIu+z1nb9ZbfVOVnnx6bRmecee61aTOHm+pw5lyKd2955z bC3m8OqL6c0YNm2P+2sbJ5PnSUiABEiABEiABEiABEiABEiABEiABB46AvEqmN2+c1/W/+FeKPnl 14sy9n8FDVCfVEnltZceCSeYpfFLJgXzppJihXwl8EKQHFRvMP+AILnnIsxkzpBc0qUJCQG9ev2e XLkWLE8WSy1F8vvIMc2VtjECsWbJukvSq11u8fVJasIKW9TLGm4c1lVv1yS78ebC+t279+XnWees XY5nhKMWLehr8o/5B9yRwzrmgMCgcHnasmdJIX56TtiFy8ESFHRfni6RWvLlSiV7D96U+asuyrL1 l8z+cxeCJVf2lJJKBcfkmkPNsn+O3JSCeVKZHGwLV1+SlZsum13nLwVbTRzPKAyQR/soWshHCwUk l/3qGQfvupu3wueaw0E5dHwI88ybM5UE61zR9vjJO3LxSljfmGvG9MltHm9JzLzPXwyS0+eCZPmG y2IJZZdC88Q5BqQLEEtzangrrlOmR5LLvyduy+Hjtxw55ay2aId8bpaBa8oUSeWJor5mfEdP3pZ/ /r0lF5UjjQRIgARIgARIgARIgARIgARIgARIgAQiIxCvgllEg9v69zWBoAbPJFienGGeW6l9k8o3 HfJI+dLpRNRpKbnm5oL3UrDqIbdu35MeQ/1l9W8h4hCOHfVVASlW2BeLJml/1kzJjaBi5fl6ovpO s8/Tf6s2X5aaFTOY3U8U9RMIddduhBQCsB9TMdRbCtv+3Htdxx8mNkFYGtEzv+TNlVLDOjX1vk4L +1HQ4NTZIOk2+ITsOhDmKTZRk/pny6xtVTM7cOSWEQaRBwzrp8/eET/fZDoOFfFUIBs89rS8/1YW kw8M/aFvWEdN/A+vvbVbrsjjOu4M6ZMZ0W/U5DPy/dQzIY30/xrqzdetbS7DBHnOcDwEP/iDrVKR rauODdcCVvrpNPKVCojZ1ZMNBQescwVp6CfOfUBFuvbfHDM55z5unF3q1chkjsN/CGft3CpkTC26 HpEvW+cyohv6mLX0vHw9/KSj7Sul0uo1ziu41hABMR7ooGi75c+rmkvOXyzhL0vGFDJ/dFFz7SGu btt1XZ4u7ufwUMTY4OU2etoZ+WlG3BYWKF4su2NOXCABEiABEvBMYO++AM87uYcESIAESIAESIAE SIAE4phAghXMwMESY7CMXFwwPxVQlo17zFSgNBtC/4OYlEw1tVQpk8mgL/NqxcVzMnJSyB/faVKH FRjIaxPecKglBNn7cl2GIFWjQgYzHghUdTVP2bjZzt5jZZ9Na8QdHAvh6LvxYYLUS8+nk+E98zkS 31v9o6AADN5RP6s3Xae+x2XdH1fMthTqIWUJekU1RNVuwarVgQ3GAoOgBGHRWrfaQiyDIZQ0mSKw Eu9j2bIvP8wlyLtm7bO2W31VffkRyaFeXo06HJKn1Ctv9DcF3eZxswoKPKbC5Ihe+eWddocko3qF 2Q1jtsaE7fDas64xRETLPmyUTVq9k80xf2yHKGpZuefSySKtRFqrxQFTUTWDViOFQSyDobqp3ayx NVfvwKPqUWh52tnbxObywUNHY7N79k0CJEACDz2BIoXzP/Rz4ARIgARIgARIgARIgAQSFwFnRSMB za33p3kc4goEqE3br5nRDeySz0ksC9DQvu27r0smDbtETi+ITBCQmtXNIr+svCAnNTzPnUEog4fX dTeeYq7tEfKIsD4IW9B13qmZKZxg1rpBNsdhlzQs8a99IXnCIPQM7JLXIUhhLigEgNBCCFCoDok+ IR71/jS3VG92wK33GjqH99xd9ZQ6p+Gn6dPaVC/dt1TDMwtrgQSEbVqGCqPntfDAIg3HfEzDVl0N oY52sQyi5OY/rxlvLnjSIZQV9sSjflJLPezaNFQRK1S3gsfXHg0NPX76jhYUuC9lVDCEcJVC2efU PG6vlkknG7ddNaGU9jEhXHLfoZserwtysLXUfGuWWIjz/LHzugmnhBCWNRM828R4+fXvnE+adjns Oi2zDq8ynAtt82sYKwxia7sPsse5YGZOzv9IgARIgAQSHQF6ESe6S8oJkQAJxAIBehDHAlR2SQIk ECcE4lUwg1fUjGFFHBOFSALRBeKXPRcXhK1piwI1RDGFlNPk/5bBU6jDt8esVZOva94PRY2oA6+i 7hpm2Lr7v479WEB+s34/npapCwKdtke28vPMsyYMFO0g2uTTEMtjKkjBUqgn1xOPhQlSSLZvWXvN awahBgYRp+ugE7JU86JZhvxotauGVNZMompU3WrqvTbH2XsNohHCIhevCTtu08wSVhfm2Qpn3Lm4 pBGJsPHLQf7yd6hw91mLHE7tsdK7fW6HkIexVWy4V6xcYvAw2zK7hPHagujUoFYmI4RZncxdcVFD KP2tVcNk5YRiRuhCeGyZZ9LKV8P8BSz+XlTSsR3hslt3hoifjoNtC9+oUGp5u2HeVT/YL2c0x5tl P/QuIPDmgz2lYZeooupqyKdW/5ODckfzvsEGfZlPUOEUll3DXD2F1JoG/I8ESIAESIAEokCAXsRR gMWmJEAC/zkCCcGDmD9u/OduO044ERKIL+E9XgUzXMfiobnFPF1T5J76VEWxGzfvyftvZ3GIQWg/ Y/F5efbxMI8qbDuinluF84WIKNgHscdu67TIgF0sg3hiCVr2dliGuBaoHlqw+VqEoPtHuTT0MSSn Vgv1gkLeMdh7mj/MIfLoMT9qZU3LXimledZCDSLg2fNBTmNerp5hb1XOaASl9FqYoIoWN3AVzGYv u+Aklln9PcizanPyqBYfsGzJ2ksOsQzbIFYNGRcgL6tACdlpleaEg0CJsMc76p2HYgjwUEP+MBQo sFfnfES93+yhl9Y5vHl+4jE/R7MN6qFmF8uwo0v/47J+eglzXSGKvvZyevl1U0gYK/ZfvX5XPu93 3CGWYduGrVccgllQ8D1zvd3loENbGgmQAAmQAAmQAAmQAAmQQOIiwB83Etf15Gz+WwTiU3iPd8HM 06VG6CLCGnsNO2lEMLRzFddG9sof7nArLxh2QMRyDV2EJ5Xd+n2eR15+IZ0Jz7RvR9VICFwla4QV BFijyfNf05xesMpl00uPISdMIvr6mgPMsp37bzhVlsySMQzxPZ3U6G8KWE0dz1b4oQkfzB1W3MBq gFDMmLZMGUJCG61+F2jVTVeDsGgXF7EfxQu6tM7pCM8EJ2v81vHYhsqZUTXM36oMimOtKqD2fuAB h0qcqL4JK17E10kwg8DqKpJeuxHGT8sU2LvjMgmQAAmQAAmQAAmQAAmQAAmQAAmQAAmEIxCm5oTb FTcbho4/HXYi1VgCNPwOVSGRM8xK9G81SKceWHazi2P27dYyQiUh3kRk6UJzgbnry1WoGjw2wCGY IZF+OU3mf/DoTfWwChG5IPINnxBSaMA6p09oYn+sQ8BLFlr109rv+gyPt7iw5HoaO5uAc+5zvdnH 8qJWyPz+6wLhigvY2zzIMq6UXew6ez7Eu8+1T3gbZgyJsNRCC5Hzuo8LQyMBEiABEiABEiABEiAB EiABEiABEiABLwnEq2CGxPs/azVLb+3a9TBPIRzz6+bLER56U4WV6zbvIneNrTxXrpKKkdlctLbT Z+9okvvbkjdHKiN+taiXRfzPhCSWR99Xrt2VrbtCkv1b50L/vuqpBgvS5XUaHhiR7deCAHFht3Us RkgKVaiyqeh3/JRn0QzFC0Z9FSaWIU/Z7n9uyl97r8uBf2+pF+BtGdevoCleEN3x4xpA27JEM+SK c2d2L7Treo1pJEACJEACJEACJEACJEACJEACJEACJBCTBOJVMIvqRHYeuKHhkyEJ35FjC4nuL152 9kKq+GJ6qfNaRkmiefZRJREFAyKyZl2ORLQ73L5xs89Jz49zm+2PayXJYrYcbKjK6WrIWZYvtEoj xJ1OfY+H85xrrsLbMyXSaN6te1oJ01W6c+0xZtbB7e5deL2F9FerwiOy9W/nZPx1tABBxdLpjYB1 49Y9gWgGA9O+P5wS5FazG9qg2md0DWLZ9Zt3TVJ+9IH8ZIvXOIeKptYCCo+EhmOizc79zgIlttFI gARIgARIgARIgARIgARIgARIgARI4EEIRF/deJCzRvPYucvPGw8kHI4qjv0+zxuup89b5pCXnk8r 5bSSYvVXQvKNhWv0ABvmqEhkeaUhx5kVyokCAd9POROu5807wkSo5CpPNn4zs1ObrJo0/5P3Q8Zc QcUpJNKPC4M4dfDoLcepalTIoEKV8+3wWfOcISw18f8LJcOKK+BYeJXZrWbFDI68YvbtWFZfNrMp qbqO+Wooa0S271CYhx2qYWZz8TL7Sit7WlG2yFeGYgw0EiABEiABEiABEiABEiABEiABEiABEohJ Ag+Vh9m5C8GyXkMaX9Ek/bDST6WRNVOKy7rfr4iPeja9qOsZHwmb0rSF52OSlekLYhHGUKlMaBKt 0DPsOXhTvaPCe7MNnxggb1XJYKpLIj/ZR42zyxuVMsgfO69Lgdyp5NkSYZU8UcERlT/jyrpp0YK5 Ix81HmSoarluWgnZqJUpL1wKElT3hDeXZTOXXJCWWhkUhkqZyGW2cftVDXm9q2JaGsmvc/FkyEWH 3G0ItezSOpfUevWGoFqpO+s2xF+Wjn3MiGKogrlEl39Xz7ej/rel4ovpJGe2sKIIf+y8JgHngiR9 mrBr7q5PbiMBEiABEiABEiABEiABEiABEiABEiCBqBB46JSGDt8ek1WTiskj6ZIbASZzhuRSW0Mw Xe3QsVsyZuZZ180xsj7459NOghlEtBGTwnuX4WRXr9+VHkP9pa96w8EzCsJUobw+5mEfDHKCTV1w XnZp2Glc2SH1MJu55LzUr5HJnBJjgyjlavs0r9oPU89ITQ3btAQrVB+tUd47D75TZ4OMOIh+8+RI aR6+Pu6T9Z/SnHDj55yTpnWymGFgTC+phxsedrumQt2n3xy1b3qol2/fvh2SU842i5QpU2phhjDR ErvuahxtUFCQaeXjE94b0eonuboz4nHrlrMnYDLtL4X2Gx0LunNH7qpbn7s+7OPypm/kz0sSmqzO XX9WH/bxu5uv1Q7P93Rsd3SMsFSpUjn6Nxs8/HflyhUJCDit7X0ke/bs5jgPTc1m9H/mTIDcvHFT smn79OmdhXM0QhuMJVmyZJIihXMevuDgYA3Jdg4jxzHuxuvaj3Vt0d4yd/eItY/PJEACJEACJEAC JEACJEACJEAC0ScQ54KZFc6IIaeKpGKku2nh+Arv7pU+nfJK1ZceUUHBudUdLSSweO1F6TXM37HD Xu0Suc8e1E6cviMnNT9aruwhwsMNzbu1eYd7jymca+m6SwIBb2j3fKZggOv5keds5OQzMnd5WE4w CGiWoTiCq1mJ8bE92DYn+/b7tj4g6lkWrLnLLPtm5EnNA3ZDurXNFS7/GPpdufGyfDHguAolGk76 2WEZ0jWflHzMzzrc8Qwm8O6zvNKssEk0aP/NMZk2pLD4qcca+COcFtfkjnqeWWaf75Cxp2XPPzfk q/Z5woWJYh6b1LOtQ59jclNzpsHs1xdCnqtduhw24dQuYaeubeNrvWKFlyRbtuxOpw8KumOEnKef eUZatmwtWbJklSVLFkm/vn2M6LLl9+1O7bFSuVJ5IxS1aNFaGjV+T8q/UlZy5sxla3ff9PP0089I +QoV5bHHitn2RbzYtm1r2b9/nzz77PMyZOgwR+PLly9Lq5bN5MqVy3LhwgVp8+FH8v2oES7ndTQ3 C6dOnZQMGTLKxYsXJGPGjDJu/GSdfzanRuvWrZXeX/eUa9euSe06daVTpy5O+11XNm3aKJ0/72jE qpW/rpW0aZ1FVnv7nTv/NhwvX74kfn6pjTB59eoVebFMWWnT5iPJlClERLaOuXTpkgwdMlB+2/Kb pEmdRlL5pJIb128YweyTdp8qk+esplKn9puGRbXqNaVz5y8c2yHMfdimpVy9etU83m/SVCZOGGeE 0kWLl0vmzM7h2vXqvS0XL1yU6tVrSOcuX8prVV81zBwd6gLEU4htjz/+hLRq3UZy5Mhp381lEiAB EiABEiABEiABEiABEiCBaBKIc8EMYshQfTyIaeSifN7vuHTpf1yKFvQ1D3XmMMLPYRWmbDqROU3t tv9IxJmzoj6aas32R6lP5Aur0eyAEaWefTy1yc11Q0UjJNoPvBje46TKe/scgwqTlRybpFy9PY4V +/4na+x0ux0io2X29ti2YNVF88iVLYU8p+GVELuOHL8jew7dcCpQAGGvYYdDRhh7ulhqyZ0zpRzW eaEYAyqEQqxzx/nI8VtSqvZuE7YJwQpC13ENsbRfJ9cxrVChDo/smVPIC0+GhNr+rcIehDS76Irx Hzt1W+zztveL/dv3XI9wP9rEt8EbDCKSO4O3UqttzWXylOlyTcUWeCg98oh77z54HEFguncvRCSE mOLa76lTp+TYsaPy668rpFv3XvLUU0+7O224bVevXTXeU3fvht2vEMtaNG8i/v7+RnRq/2lHeeWV 8jJp4vhw53XtsGu3HtLps091Pnflm95fybDhIx1eYTdu3JBvv/nKzCWTCknt2nVwPTzcOgQ7sMqa NSR0OFyD0A3Tp02VsWN/UlHritmSLNlF47mHlb/+3KHiZFP57rsRkjt3HrMf/Jo3ayKYKzzprupx 8JDDA3307/c/qVO3ntStW9+0R9Y+eMbduB5WkAJiWZvWLeXs2RBP1O49eukPBqlMHzly5Ag9zvkJ Xmy3b9/SAiYhryrMzfVaWkdgLOh//ITJHu8Nqy2fSYAE4pcA3kdOnz5l3k/xPoP3bRhe45aXrDsP VWvUds9bbMMxeK/Hw9XweXHz5k31OIbHa0qH5zGOwXlxjOXtax1rjQNtfNWTGV7JWMb2iAyfY+48 aF2Pgec0Hu7awisXc3c1y8PW8p6278e4Llw4L+fPn5dsWbPJIxky2Hd7tYyx4AEWrhwtHl51FNrI 8qJ215/Vj52pu+tgtcMz+gMDmLeexTdv3tD77DQ+kiS7fs74+YX/sdN0GPof7stz584KfiDKnDmL +eHI9d7AjzRoh+tn3bdWH544uRuvaz+WB7vVF5493Qv2NlwmARIgARIggdgmEOeCmX7mh6aAf/Cp QRhBuCAeEVlMntM6T3T7hFiEPGGRmavo49re0/6obrf3e/JMkJxcGXkS/QuXgmXVb5fth5rlyJgg D1lULSAwyIh5kR3nad7WcZHtt9rF53OaNGmkmnoT1VDPpHv372no3xmZPWumbN++TQoWKiS/rlwR reGlTp3aCDoVylc0nk1bt22VqVMmGwFo5Mhh8tNP46LVLwSk5s2byMlQsaxTp87yxptvmy+C6BAh lB06dpJHizwarv+U+iWtYMFC8kr5CrJ2zWojJC1atEBq1XrDtO3Zo6sRo3x9fWXgwCHh/jAP16GX G44dOyajR48yXyAhOrZt+4nUqFnLfNn66quesm3rH+o19oh6tvWSH0aPMb22b/eR8ZxD2GaNGrWk 7UefCJhOUO+wcWN/NuLjnNkz5bnnnpcCBQqGGwm+GH/YppWZI758fPXVN/JqpcrRup7wmgOzOrXr mnvk7NmzMnfObPnjj9/l0aJFZcniRfJuw0bhxsANJEAC8U8AQsSPP34vGzdsUDFAw+ZVHLp185aU LFlSGjZ6T/LnL2C8gvHeiXDvKVNnCj4X7DZ79iz5SfvA+y9E+lmzZpjdEFwWL1kRrv1H6hn8119/ GqGsabMW0rRpc6lQvpwRYHx9/WTYsBHyRMkn7aeQwYP6y7x5c40wUq7cyzJw0BB5//2G+mPBVY/v xfgxoEWLVvL99yMj9C6G2JIiZQqpVfMN88NFpkzOnrXBwUFGMCte4nH9oeRT/QEkxPO4SuUKZowf 6PibqHcuDCISvK5H/zBKBZxkRuiCZ/Yjj2SQ2voe+Vq16m7FN3Owy38DB/aTZUuXah8pZfmK1Y69 ENE++fhDOXHiuIpJ58y5x48fG+Ec8cNGseLFZd/evcbTuX//QfL0M886+sQC2jR5v7HxRs6VK7fM mj0vnHBpP+DiRfU2rlbZCFUjR/4Qrj972+PHj8nAAf3k0KGDej+kNcdc0x+8Cuhnbkf9TMZ9ZjcI cRN0TvPmzRF85qbUz7o7+mMNrGWrNlK1ajXH2L7o0km26uckPuvwA41lEOdatWxuPksDAwP1s/Vj GTlyuOE/aNBQKf1iGaupeYb3+Lp16zQVQjaZMXOufKyMjx496iTqWfdC3rz5pHWbtlKsWHGnPrhC AiRAAiRAAnFBIM4Fs7iYFM9BAg8jgSRJkgr+MHws9I/C4sUflwoVXpVyZUtJgP5KvP/APskT6vUU lflBpClYoJCj3+dfKCW7d++SHSrEnVVRLjpmxLJmKpad9Dd/EHft2sN8ObH3hfMWLlTEcV77Pmu5 T59+Uu21SkZ0Gjd2jJQu/aL5Ix8CELwM3lQBLib/SMYf6fC2SJcunX5B+cURtolf04cPH2U83SDc ITxyy2+b5Zp6iZ08edJ8iUBIaPUaNa2hSzP98glvusaNGsh1Dc8c89OP8m2fvo79WLDEMuQ9wy/y /foNlLLlXnJqE5UV3CPwSAm7R0TKqxD6UrnS4n/ihBzQe4RGAiSQ8AhAKGr7YSvzXmd5MkHwgW3Y cEn2abj7gAGDpVev3iqq9xB42Q4eNEB69PzKMZnAwHPyowr+8GzNmTOnvNOgoSxduth44qLRurVr zA8A1gHwNv733yNmFee8pe99MHj8QCSBR9Cvv64MJ5it0B9nMN4QCxkjvKFw/ojsTmh+TU+esNax CB2/fuO6GYOntghdb7Vnt0ybPtv8+AJBEPMODj0H+gKn3zZvVvHwkuka77GYE7yo4RG9devv0lN5 4rMoMoOX9K1bN51C48GsdavmsnfvHvN5VK/eO0a4mTZtikdvX5wH5+v0WRcN729hfqTqrR7UU6bO MJ8j2I/r3qXL50YsS6mexvCuxtgjM3iIhd4yHpv+uWO7fNm1i/GExvgh0uJ8eNxQr+VPPm4r8HB+ /vkXTB/wVmzW9D0jBoIv2mP84Ihn/Ci0fds2gUc4DF58uHeSJgsbL8SyZs2ayNF//zXzgMhWu049 FUTHaB9hkXa47wAAQABJREFU7XC8ZfgbAh7UIXeXyBVNiXDp0kXzsNpYz2gLb/SBKrxFJY2EdTyf ScBbApb3Lv7+dM1Ba/VheYZa7zfWdk/PeO/C+ylej67myYsSrzG8Zi2PWssj0/V4+zp+aLE8NT3l BsbrG3/3p9cfjBGNEdF7ozUG1zFiLhhPZIaxYw5oD1auHqk4Hn+PIwID7zfZs+cwP0a79mtdE3ee qtZYMA9wjqqBB/4+d+eZjDHhWkdk1nkt7q5tXcdstfPEA8fbrzXuw4j4IZVMQECASS2DaBXXzxGL neu47OuuY7Tv43IYAQpmYSy4RAIJjgA8iPCBgw8u5M6Krm3cuMF88N7RX98PHjwoB/TLGeyll16J cpf4Eta82ftGSMKb89e9+6iwVzFcPzps+f3338wXF9ed+LKXJ48WwtDjhw4dbv7Yvq7iVI/uXeXI kcNmvrlz55aPP2nvemi018Hx0KFD5g8ECF/ucpwhVxi+gOIP93Xr1soJ/xPmw8pPPcrg/edqhQsX kaJFHzO53fbv32vaWm0CzwcazzJLLBuqYZ7wQotpwwc+PtjNPaLeBDQSIIGER2DdujUaun7CvP+8 27CxNGnygfkCBU+uMT+NlkD1Xho1coQMGDhYFi9eaLx4tm/fqu+hW6RUqdJmQl8YkeWK+WIwQr2M 7F928PqHhxA8Zi2DgHZTPdg8GQSLdevXCkLprb7++eeAUzi567FPPPGEeil97rrZrOfW9/SXbD8I TJg4XtasXmW85RDmbllmzcc5c+Z0swqP3iVLw7yn9+zeLTNmTJVVq37Vz6wUsl7HV6XKa9ahjufN mzcZgRBfCPLkyaMiUXdNL/CM7Nq5U/r372Pe6/G+uH79OvPDhuNALxfw5baVimX7VCzDF78GKk4i P6dl8Px7/fU3dWxVrU2O55TqpZYvXwHp1q2n9FBvaXypGT5sqHwemtMSXoH+6rGGz7/mLVpKrly5 Hcc+yAKEq+7dv9TclxfMPdKgQSPTP/ocNWq4zFHvxLNnr8v//veNTJw41XgjDuj/Pzl69Kg57TPq BddFPwPz5suvn39r5H99vjECL1I8rFmzyvyAZxra/oOw27yZimVH/zWi4ofKqMG7jYzga2vm9SI+ U7uFinMQynD/T58+1XyJnDZ1inz19Tde98WGJBBVAo0avmPCkvMXKKBRBFPCHY73WfzIi/u+ceP3 ZdKkCZF6my5dtlIWzJ//QB61nT//THbt2un271YMEqLT5t+2atTHB+a1WLp0GenXf6Bj/Ns0smTQ wP764+51Fe59zGdPsmTJpdbrb8jbb9cJJ1ThPev1WtXNe9/L+sNwd03fYtmYMT/KlMkTTdi2tc31 GSHy+FH58OHD+t6xWsW5LOZHaqsdfoiGVy/yIuO7TbLkyeS6frfIo04D8IItVKiw1dR4XWfOkkXK ao7hL77s7tiOBfx4AQ9jiHqr12xw2hfRyrKlS/Q9cLz+2HTVeLXeuRNkPqcQ5fLmW2+b92Z8xnze qYMR8jz1dUN/+Fm2fJXhjh+UEIliN5OLWoXMKpWrCvIWI78z3s9S63eKRYuX6bUIHybf9IP3jEcz vK9LqKf1unVrHZ64Vt/g1rfvt+bvBvNDiu64r593VdQbuK6miMmQIaNpGj6PtdVDyDN+sIKHb758 +Zx3cC0cgeThtnADCZBAvBGYNnWy+TUb4g68t+A1hF8XMmhOlpq1XpdNKnxF1fCF4sCB/eYRpOEu +GJm/TqEX4Kjavi1HX/o48sIwhqffPIpt10g19ny5Uv1scxpP3KN4QO4S5euZnux4iWkjv4ajS9Q CCGBZwE+AIZ+592v7k6dR7CCP3AwJoSo4EPIneFDF0IaihfgD5Az+oDlVI8I6wul63H4xRsfXvAU QH4zy7brHygWJxQR8HROq723z/jSc0xz0OGn+VOnT8qxo8fMPYIP1zfeeMvbbtiOBEggDgns/Ptv I2rjPbORhl+mS/d/9s4C3orii+MDoiKKhYGCSllg4d+iu0sEky4FBQFBkUYJaVQQUFK6pbtDQMUG RQFBMRBMUEHqf77nMZd9+/bGezzgIXP4PO69szOzs7/dnTjnd87E7bDLogJXcNwmP/oobiOXvv1e 100+cMtnkxfiVy5ZslD7RyzO9es/pYs0GKwIaYwZuA2yIGIyjkybNkUs5MGhEOjn6GvTyKJp48bP deMQyrAQCmJCcAy5/PIrQgzXuJT4/1v2K6kZj21kwyLCm+4tIcQAbb9Nu+POOw1/a2TDGgwXmzZu DFSY4TYKO4GFFBN++lqEsm9JmIHixQqbH2RRtmD+vEQrzOIry841derUM3Xq1rNN1E/GgxtEsRTu ushUQpRpMJZR+qC4K1W6jC6+hsmCk/HoxptuMjVr1tb6kuO/0aNGqasu4xghBbzs7ObNW5p8+QqY ps8+o7s8TxGlXXlZHC5btkzHD9wuvcqoQoWKmIIFCwuOhTRG6eBBA03hwvENY35l2XPPtTSVZfF9 IsJcx4vp/cI6B7+tW7eowuBE6nZlHQLREMA4MXXqZFHe/KX9KYZdrzD/4rnHZR4PCOat4Viy3nJJ ZdTCSEJQQKHE4i9IbP9Hn4lS7xwPA3TKlElm5Ijhwg7do+OEnZdSzxhR+C0RljH9BQw1K+9Mm6r1 0MfC4vWOK9+JyzfMq0jXzZiEoJBSJikW9GOC4g9FFOMPfe0fYvRl/OIPbJ9r3lQ3usorCjIE5hjr lg8++MCsk4238ESx8suePbqeYfOwWIUQKv37v6axhuPKwEA+qh4htPJHmffjUm7jIke6TtYTyD/C ToZ9G07mzp2jfRhrrokTxyvWy5Yujee1QlnGdAxrrNFq1qptVoqyDPwOs/PeMUEBybwAZjWYee/n OzLmY9wYNGiIrs/ALlL7w61r7Lnc53EEnMLsOBbum0PgtCJgB0PcSbzCwMOiCnfNNSbxCjMUWyyk LB2aDhaB/vysTJ6HD387tNjwnjfSdzpo6oG90Kb1C2bgoLcS1MFA+O2338ZbDFEnCkDbFnsOYp2x oEBJRWBqYu3AMEtuoU0MIBaDoPphNYDZIVGuWRcjGAbhxAZSpu4gAau9e/ep+1D37r2CssScxgCO zJPB1ys8I48++pjGMfOmu+8OAYdAykAA920sy3S/WJBz5cqlCgx2QR40eEi8RqLwwH2b/pkFRwdh DbHIYPFy0003mxo1a8XLT9wpjmEcYYINGxYmMBNv+gb6XL+g4Ddmr7pZsgHMbbLTLsJOwPR34foz xhIUGH6hjHe3YP/xWH9zDatWrdTs4MD1+oVF1a+ygzB9azVh6/HpFfrkt4YMlUXWHmEqZPceivod owq7Pn/xxSbFodHTzyi7LKggSk6C6fsFpSjMYwQ3wtLCSIF9QEgAGAW4PnLP+vcf5C96Qr8XLVqg C63sOXLEU5bZSu+TcAy090eZY+CKC3MahgRsuWbNn7PZQp8spp54oobEOR2sYyLjuRVi79WrW0uN NzxjMD/Y0flkCAt9xD9vOBnncnWe3QgQKw+mLu/FHIkJ27Dh0/EAmTIlLmYku9pfmymTHqO/IXZs flFI+wW2KSxaK0ll1Nry119/vXn55a72Z+jzQl+sS3uAOfXwYUPUCIwhhV3dYcbivQIzC48K+npC ongZtFNEacg8GEFhA+sZl3SkRctWavTRH/Jf06ZNVHmDUZhYxkhq6RMIH/LJJx/rb/sfyjzWDMRk ZC5OnSiR6MMHD3pDFZAo52CfjRgxWhWTtiyKn169upuRI8eEZdrZvJE+B4nyn3EmS5as6p5OnOV3 JQTLK906my+l38fw/cgjj4aqQInfuXM37SdDice++DeYySOxGunzEXBdvnyphFEYrASIOJLBZer2 TzxMFJneMC+UGfX2SB3LUcSVKVNOx3PSrTCu9xBmGZ4ljCFPyfMJhijrhss9RGF2UM77+uv9hN38 khbjvmNMD8eGPhlrLdve/9Jn+FXgf+kq3bU4BM4ABFhwYLXS3RnF4HGlxNUi8HF5cbGxbITzj1mA 6HhR+vitA3ZhdI5HwcNgTvwtrNsI5XqKGwYWJAasDyXmSWJcBSkzaPBb4t4xRQdRmHC4FPnZalir 3njjTbmGXDGhX71GTQ1UzOB0MphS4MAC7K+/9qlbapCbDw0llgqbEmBZZFFAvAesPmDuX5iR/6uv vuJDLW4Xy/2zwvUTFJnAx6tEGcgOnEzEKleuolmsNQ/Lkd3V1JblM3QvU8dZ6kij/Qx+MBvYkhZW GZMUNiNgkebEIeAQSJkIEPS9QMFC2hdgGYYJgLvKiBHDVBFAwPzCHtf2eyTGFH3U/PlzZVOP90QR 8q8yb1+XWItBQj+LOyKsMhRmce6Y/6iCBhccJuh+uf2OO7TMiuXLdSfir7/+St0xUaRkuDxDKP6Z txz9Z7++x1197DEWMytXrbU/Y/5E+VX5wfKaH1POuWKwoO9jQcN4WLxEyQR1oUAhIDx9epBCjQK3 3XZHgnKxJLCrJMy+uMXNpSZ37rsDi9G+L77YqIo1bwaYF/TFw0eM0mT6bIL+N2ncSBeJ3AfGkVat 2iR7n23ZJ1ZZ522X/Z41SzZVmJH362NjF3MP68Jj89nPvPnyhRRmP0usHyuETuA6LE533XWXPXRC nyywiU2H4Fq6bds2GbP/1sVh9eo1TqhuV9ghEA0BmLc5brzRfLV5s1m0cL7smt4wNO/76aeftB9F 6V2rVp1QVcTpy5bteJzg0IGAL6KDjmdE9jNqYfuGm5tSHWsBLwMz4BTxklDW4NqMsnnaOzNDyrur r75a42Oi9KfvniqbR1mFGV4k+4T9hUKGvoQ8E8XYwyYzrDmYo/NnhbmsnEJ31Y3WNlwoUfbQHgwG XL8VlHn5CxTUWJ/E25wgeVEIIdbw87f0BX1EmdbppS62WKI/GcPSp79YFPzlQ54fGLS4Dhi44EG/ YwUj/k2CA7GPowl9Im1F+IS5e+21mcyTDerquPbtju3qUcPmOGyOwrk4jrA2W7p0sX6H6RhkIHj7 7eFqcIG1PWr0OF2nUOBKYVq3Epf/zz79WMMRsAGYVZjRJpSD0e6Nntj9FxYBpzALC4074BA4tQgw CNcW1w8GpXCSVTo9Biwm4SxuvIsFtoOnw6VzJ4BlOKF848ZNzYzp7+gEfufO7xKlMMMFkw0Jcna4 TSjS72vATKxPLCzYUCCpgmsQkiq1zChOgnDdV0rsHBR8UNCJP+EfAIktQ1BpJiWFCxcVHDPqBglY 7xbK5Kl06bLxWoa157PPPtG0W269NTSxIoEBmEEKpki5siUV6yFvDVYmx41i0YIFQJvSSOyGL7/8 MrQbHGVZdOFKBQvkqquP30ueEQJ9213iyOvEIeAQODMQIKj/R6I4HzVqpMFFc/v27dLwuMDOg8Xa v+2bbbqLpb2ajp1eNuvfW6eKA5QaxMAKpxjHyoz7IjskooSKc8f81+SXmGKw04KkYoUHDTHDcN9h kTRJXEWwil8j7GMm2UGCMonxxy/+2C3+4+F+09ehpPILG7GMGDk6cNFAXtp54YUX6ZjnL3uiv2EZ 0//u2/eX6dSpve4kzULaK4cOHRZ21Q5loXnTGYMz+djRMO9Ki8EKtxyEcZIdPJNbrJHlfGUPBtfO LqAIhpr9whxB2GE0nGCgQQ4EuPayIOR6UR62ad3KDBk6IvDZCK47eJznefAzqFFI3C1MzHLlKwZX 5VIdAsmIQIMGDXWTCfpcQmvYeS3zN1zlYGQSVsQrzIXpj/xCOI4cOW70J4d+8+5EY9SGMssXFO6f fho35/Sm434d1C+z8Qn9wl135Q4py7zlMMBskbUExlcrsM0YQ7Jly25aCmOsZo0n5B0/oMZ1+rIT EVzkwRCjr1dZZuu8WwxLmTJlVnY0rodWYca4h5KLWImfyaZlq1atSFIMZs5Dn4bBYO7c2eq+WFAM WZAGOPe69RtsU/Q4P2jv+vVrdV0QOnjsS7Zs2XRd4U+3v3/77VfZyX6y9pMYeYjRdoesoYgDt2/f XnHZn6VKWfLzDMEUR1FJbMsgWS4u9Bgprr/+upCyzJsPdtuXX3yRYJ7AvOPqjBm9WfU7uEYysCQo cBYnOIXZWXzz3aWfeQjcfMutOkHHpaOPBPBkMEGBhfsIwSShO2N1vyt37ngXR/B6XGmOHDmqAw4L Izrdo0ePGJQ3SZU33xpmHq76oFrku3btbIYOGxGqSubRes70F8dfaNgMV4lSD7ZacgsLGa7Vv8Bh MvPCCy+aZs2aKDuhgQRHhdVWpkw5tXiNGjXCzJ41U3EhQOl9sqhhJ7HRo0eabVu36QAHzsQfulzY F8RnGyjsMTBn0Hn66Sa+S4lbELDwfGPgmzLpqKa0+FatWpoxYyaoSywTMiZAQ4YM1vvK+Xbs2K6M PQZpdjJiEHfiEHAInNkIoKT/TVhlt99+h+knMcoQmGa4YEyRuDgsBGbNnKH9i7Uso1CvLHFycLWg P/Mr7L2IwDRNl+5CVV6wEMAQgkKDGFnPS7yYILko/UXmalHI79mzR40IxIdh0VWlSlVhw04LKiKG gCLxgkkHZkpEImNA6zbttMR34vJHzC+UcrhGbt78pVrO/dWxizF9J65C4BbEkH5fdlqmb2WRkJhF HiwDdiolLuXIkcPFgHJI3HE6qeGD+2HloosuVMNTpQcr26SIn42bNDu2kUEaccmtFzFvUg9eJM8I cYEi7Za8XZW0Rp6nizSw9iKzQAw3cbtfZsiQIcGp3xd2I8I45nU/5b7xHC8RRgRxnWCNvNqvj3le xljkXLk/CIvEwzLX8AsbECHn+JR1PPs29hqGqhtF2VBaxuisEoTdiUPgVCBQQFhOKFVglM2UPhmF GYrhlSuXq5ETJjD9JGkI7F92nf9ww3FlC+lswpE1azaJx3t8wxMUUeEYtXgolChRiqJhJbUYlHEd 9Mp3Eut4+ozZgUH4CWaPsHYIEtzxvC55KGxglPG+Py7GWZR9xAdjjBg9amSi+tKg86FAQm666eag w5qGGz3jF/h5hfVON1lnEJuyX98+5o47ksZqbd++o2nbtrVh7EAZzziMOztM1qJFi0lImPqqnLPn xohP3El167CJ8olb6TONm6iLq01G6WXvL/nPPTeN9I1/6OFb5B4wdiEoMN+X2KUwwWCXM7aMFLY5 BoNMmTLpc6MZff+x9kOyZw9WwhJqhz+vsEYJx4ZmjTHiGBvaW8Z9T4iAU5glxMSlOARSLAIow6D4 sqhgNzN2uMLywxbvuA4iKNCwzluhA2ZHGAaEo6IwY3BnIYHkuu32ECXZ5k/MZ0ZZjLRo+UIoAOWL rZ4XqnTcYI6b4RBx1WT3G78Qp23AgEFhNwzw50/MbyYUnTq2j8dUY/cdFqqvdO9lihUvYRYvWqjW QHbdIr4DikRiVjCZwYrVQ1xoGMD469qthwYh/X7nTrE2fiAbL6zWQQ2FI5MIJvi169SPuMsMlroG DZ40sEh+lVgD7GTWRyxBjz72hAZdZXOHN954XYMxMwnbs2e3nhuqds6csbm0JgYjl9ch4BA4tQj0 FgMHSiAU4N2FdYoQz4adgG+6+WbTsUM7nVz//POuOLf8Y80L9Z9oNaIIwZDp53v36qH9EkaCaG4Y KOFwC8VVBgUbC8WixUqEVZhFaUKiD2NN9yoCG4gLVOlSxXQxMqD/q8qQ81cK05ZrY/E1ZfIk3eXN y4ijD0VJiFIHw0diFGaMnSyI+Vu1eqXZumWLWvyJP8cC8kQkbkwJZu6dSL22LAaXmTOm6/jO/MC/ KMWNkl2bkUKFikq4h4oaxwjjDIthdkv1CjiOHRvnWsrT5w2Azi52dwvbhL/169bpAhcWBrubFitW 3Jwr4yL3hAX458IIyZcvv7dq870siBF/sG7mL/1lbuDEIXA6EShevKSZMeMd9SDAk4BnmNhaeCU8 IbvAeuWgKNWD4vUyR8SQ4ZWkMmptHSjxvH0d6bynKH6CxIb7OF/ex1iEtQXzYNrORgXTpk0xxOli rvu1MNHwZMFTI6liWbDMm8NJXHzNOBasNw/X3bfvq7p7MfeCXSLtxjLefNG+FypcVHe2HDz4DQmR sFIVo1wvsn79Ov0bNnyk/uY/NiX4U3xO6b+9Qpl0MhZ5BeVUEGMaRmI3WUtYadz4WVO7dg29d7C/ bhUPFYw0jMHEjQwn9n5Gws9fluczHBvaqyz1l3O/4yPgFGbx8XC/HAKnBQEGUf5ikbbtOihFGGvX N998o0XoyLG4o0xr36FTqBo6bwRrjRUsY1g5sIzXqFHbJkf9PCzMLYTJtVfYKQj2BNYSJhWDBr6h AafJ4z2vt0zQdzsY7ZIJwYkIA7sx/MUX2+4uXV5R99E3BrwucQq2hjIxULG4elmCe3rdnliEjhs/ SSj6zXSXGyYnCIM3cQM6ChvBy3CwmNt89gRsKb1ixTJxfdqku52ySxmDJgFGWeSyMEPsvcSVirZY XHBB+vdfsS4dO7+t1306BBwCKR+BXLlymdWrV2mfTczHokWLmyzCmkGxwQ5mCAszgkknVWrWqq0u JnF9xb+miFjLo0mNmrXN22+P0GyUQymCy1E4QUkFgzdIUGL5FSBB+aKlYXHvJUo/WEs7tm83N2TJ kqBIPWEBoIREIdPwqfoGRRsKI9rXt29vZdrRdxKnJqkyePAQU75caV0oEvMTo8ttYmSy8v0PO8Ni cdlll0fE0daRlE8YJewO6hVCMTRr1kJ3Bd2z5xcZr54zDwlTkB2owYGF79ixo3UxzKKfZwUDHAoq GCWMTXt+2SPst/ommzA81kkQbBtnB8UjDLl44lk7wjR/sFI5Ge93mgH9XxNF3U36HF166WWqZJgr IRuyZMkqLlQFdec5WBUseJE8efPGq9b9cAikBARgDs2aNUOD1zO/hbWLggRlkVdxTFt5j9q2a699 erS28y4FM2oPm82iMGFOGUlQwA0dNjJSlnjHmO8jjDNBAouXuSfXgJGAWGUotWgnjCfEzmUZn2BD N2r0TFBVMaUxt4YFG649VALzC8GY4pfb77hTDSzcj6/lmogBlhj55pttZsOGD/R6W7ZsZfjjvjIH HybGc9YEdwr7a764joIBkiHDFbpTtT+ES9B5eTbq1W+g03R2v16yZJGumXCTZKdTPGsQGH94qqCA JFD/ltvv1L4Zg1U5iVsdTmCag9/WrXHrBX8+FGMbZR0GK65MmXJ6GDZ0E+m/K1Z60J/d/U4EAk5h lgiwXFaHwMlCYM27cW4PTGyjCXns9u90mj9J/BeClDKQ+y1P7659P0F1/jx79uxOoARLUEgSJkyc oslBbcQizKBjpXOXbvZr2E9/O+jMK1SspPm9x7B2QZmOJrgKlVkbN0AE5fW2u0qVh8Xt6GG1Gm3c +Lm55tprhNVxvSodg8pmkQXb5CnTNW7OJsmPiwl+/0wy/DJv/mJN8p7P5hkuu/54cSKdyRN/DOQ/ fP+DyZotm1CqMya4l6tWrwtbr63ffToEHAIpE4G27TqaShXLqss1u68tX75MY5igqMcFkb6kYaPG 6uqT1CvAvR6lFf0lBhRvYOpwdXJednuD5YrVGgVLJGEDlJYtmyfIsm/vPlUm9ejZO8GxxCZUkF3c Xn/9NbmOP3UnMVjMfqn68KPqLsXCi3hjsOr4JB6XdfvBtS9P3nz+ojH/hm2MgeWFF1oo67dz507m rbfilJsYRpYuWSKKpuUJ6vtlzx65l89ExTJBwRgSYCmOGjXSjB03+nhuseGgXFywcIluJtCly0uy C94udfeZMX2ajjnYWQiizwK6Q8eXQ2NXn76viUtR2RArgms9eOiguEoKa1120mO8yps3v7iKlTx+ Pt83XDnbtu2gwfp59ohnNkx238a492yTZ5Tx9tabgzT0gPC2ze+SB4UZmzpUqRL5efOdyv10CJwS BIhjizslCpRJkydo/4gCx79DcWIbE55R+6sEwX9Ng94nts5I+ekD16xZrTEq6SO8xmDKvdKti/YV R6SDuP6GG5TZy9iBkshuTEU+XDtxkZwjMbcwaJAnKXLffQ+IkeE7DVzP3NvPwMMYYw3tKNiDBFLA 2rVrVEEfdDxS2tKlSyQMwggd6+6/P49uVMB6A7IBfwUL5DHfSRzQb0XxdKMo/hMr7GJaunRZLVZG 4lSyUUn16o+LMuwvZXE3bXo8PMKDQlpASQfDjLh0KCb/J7HUvLj7z3/nnblFSfiDKtqIV3q9xETz Sr++vVQZibuoVZh5j7vvSUcgaU980s/nSjoEHAIBCHgVRAGHwybhFsFfOIml3qpVHlRrfLg6bPry FWsiduSxnMvWFfSJgilIyYSVL2hXNn8d7LDjp8r78/h/EzMiMQsqJgkE7Iwk0XAId5zJGX/hJFy5 cPldukPAIZByEGBXsZFvjxXFQiuzXZjB1mpPC1E4EJ+l4jGDgbfVqUycqw3KjiDZt29fvGSYqWzC wsIsW7bseozA0l5B2cOflXJlK5g33xyoypFChQtr8hGJb4ngzqGfx2LhqDv/MZd+PeD575/9/3h+ Hf+K8iac+NtPPhR3sJTYrICNWJo/1zLESPISbNklrLfsmGY3sLHnwEr/+BPVzDPPPGuTon5aU5Xf OMPOpiyk2K0UtluL55qGsLMLO3/lQeMYeeLuQ/x74S8b6TfGIyTovFwzUrZceWXktX7xBd0Awj5n jB+43xBuwDtnoNzcuQtNK1GUwRK3LlNcAwu3hg2fkdABj2vd/Ef4AoQdpL3CJgawKQhgjusW7lLs 0va8BA0fIjE6YYLYtpwjSuIbbsiisT0tiyQcg917DvfdIXAqEahbr4Fp26ZViP2PsqlokWDW7s7v wrNNUT5FEsuope8Jx6iNVD7SsRYtnpddltcre7le3Zqym/3Tqvwm/uOsmTOV8cx3DCVvjxyh/SxM qqnTZsSbj68VxulzzZ/VsAIYCXC7Too827SZmS3jE8r4tm1eVNbTw2L8YG49XZT7GANgDaeXNtSp Wz/wFPRN/V7tL2zYmjpmBWYKk1igQCHD5g1XXXWVadeutW7+RZgE+lZYuHii0D8RJsH2VxgpUOSF Y5hlypQ5zNmMGMCza0xGvG8WL1qkTC87l2eTN64X7yJik9EX1q//ZNi6ONCs2XNm8eKFqthk52U8 VyqUr6hlFkn6hx9u0PqK+u7Pzu/j4lgHVX4y2dBB5ztT05zC7Ey9c67dDoFkQoBdF7/8YlPE2i4R 14qkWpQiVhzDQYKO4hYZTXAtceIQcAg4BFIqAuyoNX78ZJ3QfvHFRrNv71/mtttvC9y9zF5Dnbr1 JEZiXfsz3uc111xrLIvYTsLbEdBYmD1epc2ChUu1nE2zZexvzlGrdh3NY+sZOXKMLhhsHoJKRxOb 1+bDiEGMtiDBraehKAnDyVtDhocWLLQpHMPWutXs2vWj7Pa2VVkBLIaswKrwB4+2x7yfMK3CjXHE 5ezQ8SVv9qjf/VjgqurHnUoOymIJV8hockHaC0Llo+WFtTFz1lx5zg5ImITP9bpuERegcHFvcD0i MDlsMlgL30tQberws1E478i3R8d7Lrxt6dW7X4IFLKEf+PtFrhG3JHZ9zpIlawImJQx2Fqh+3Lz1 u+8OgVOJAEqhLsLA/UeUKTyXBQoW1th8/jawscXMmdPNnLmz/IfMblEMtXqxbYJ0b0JFD6MWAwE7 UyaXXCvKnIdlB+Xx48Yok5lwAIMHDZD37zztF1GW4ToNI/ahynGugMTb8r+HefLkNWzCAXNp1KgR SVaYsZtymzbtzUuy+zDxFBcumC+bbc0QRZxsQib/LAu2reTxb9zlxYT+jH4FV/nECIaY3LnvVlbX H6KkYrM0DBmHDh1Sxjd1ZZCQNSVKlDILF87XqsHipU4ypoqbo19gos2es8CfHO93jRq1hfnbQvrG w7oT5n333a/HYfveJm7+H4mSCyEAf7RN2MhTT5Rqb0o85F8kHjIbuI0WpRtKPq4D5RvM6Natjz9z sAMjsaEbNWpsqlR9WNvg/guPgFOYhcfGHXEInBUIRFq0pAQACNicmKDNKaHNrg0OAYeAQyAcAigu cK2IRZis+xcv3nJWwWXTgvL78/h/U9af5q/Hf9yeL9Knvw5v3kjHyOc/Hu38V199jcR/u8Z7Cv0O Q4SYNdFkyNARGqMsXL5o5w9XzpseVAfxw5o0Ca84tOULFy4qm0X0sj9j+iR4NuyJWIX2ZcmSVf/C lfHfF3++oGskDyybfMJ+DCfR6g1XzqU7BE4mAjDKYOymknejWrXqCU5lmbpBrM8EmSUhiFHLBhmW UTtlyiTznLDCLJtUekKtxobysOcLqps0yxC1u2OS9iwby9x0s8SF7K7sVMucOuecNOpujYsj8TVh OfEe1qldj2IJpLhsBgMLbPOXX6qrarZscQzm4237N0EZey42J7NSqlRpc4O4ErJj/I4d2+MZRtjo in6O9lrxM6JteqtWbSRo/wrdkADDSKzyev+BpvsrXXWne9iwVhiXYROjsPQaT/aIi31QXGRbjk92 U9ZPUbz5pWChQmqsQME1dswojZVs8zz9dBPToH5t/fmYh8lrj1tsMX5YqS2sMoxvXTq/pMH8LcYo zdjRtX37TqFdPu3zEu755H47iQ2BVAJ0HL86tvyBufb8dsgMHrfLTJzzS+Bxl+gQ+C8g8OGM283+ A4cl4GLCDjHc9eW8NaP5esv2cIddukPAIeAQcAgIAjfmyGI2fXFiG34kFsh06c4xF6dPY37adXwy mtg6XB+fWMRObf5xwqx4T3Y+iyQwqBtLkO8T2f0tUv2RjhEj6fXX+kXKosdwmcofJqZP1MIug0Pg NCOQXP17eumv056f2uzek1A5E+0Sk9pXW6VFkDLYHot0bquUsMvtoHo45j1u67WKZHvc/g53vmj5 CBi/cePnsvHXlSZHjhyhamw5EoLaZzP620W6LRvUNnuMfEH1ogiiPcSehDUG29UvQee0ebz14+Z5 9FgoAXvc/8l5rhaWq5Xt27dLzLJvzbXXXqubndh7xXFv3TZ/0CfXZfMGYeCvy4+DvT5/erRyHCcW 5MaNnylLHSWjt/0ct3XzPZyEa3O4/KczPTH9CLrAazKmTbbmOoZZskHpKnIIOAQcAg4Bh4BDwCHg EEgpCBDXMrGxLU9l22Fp4A7pxCHgEEiZCAQpMmxLIx2zeeynX5lh0/n0Ky389fqPe8t6v0fLh5tj UIiTaOXsOfztIj1S2UjHKAsLNnfuyCzYoHNSFvHWz069sci69XEukOTNkiWL/gWV89YddNybFi1v pOOxXp/3fPY7MSjZSCGcRKo7XBmXHoyAU5gF4+JSHQIOAYeAQ8Ah4BBwCDgEHAIOAYeAQ8Ah4BBI wQgUE5fRv/6KvwmOv7m3yK6hThwCSUHAKcySgpor4xBwCDgEHAIOAYeAQ8Ah4BBwCDgEHAIOAYfA aUWga7fup/X87uT/bQTi9iv/b1+juzqHgEPAIeAQcAg4BBwCDgGHgEPAIeAQcAg4BBwCDgGHQMwI OIVZzFC5jA4Bh4BDwCHgEHAIOAQcAg4Bh4BDwCHgEHAIOAQcAmcDAk5hdjbcZXeNDgGHgEPAIeAQ cAg4BBwCDgGHgEPAIeAQcAg4BBwCMSPgFGYxQ+UyOgQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BDwCHg EHAInA0IOIXZ2XCX3TU6BBwCDgGHgEPAIeAQcAg4BBwCDgGHgEPAIeAQcAjEjIBTmMUMlcvoEHAI OAQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BDwCFwNiDgFGZnw1121+gQcAg4BBwCDgGHgEPAIeAQcAg4 BBwCDgGHgEPAIRAzAk5hFjNULqND4PQj8Ouvv5pOndrr3/vvrQ9s0MgRw/T4kLcGBx4/mYn79+83 kyZOME82qGtebNXyZJ7qP1f30aNH9b5NmzrlpF7bxo2f63k2b/7ypJzHXseUKZNOSv2JqZR3oW+f Xokpkui8JxvPRDfIFXAIOAQcAg4Bh4BDwCHgEHAIOASSBQGnMEsWGF0lDoFTg8Bff+0z8+fN1b8g hcTff/9thg8fqsdXrV55ahrlOcvSpYtN3769zL59+8zlGTJ4jiT960cfbjBvDHjd/Pbbr0mv5Awp yb396KMPY25tUrD58Ycf9Png82QJ1/HJxx+frOpjrnf9+nVm6bIlMedPqXjGfAEuo0MghSDAWLRz 53fm8OHDKaRFrhkOAYeAQ8Ah4BBwCDgEEo+AU5glHjNXwiGQIhBYt26t+eeff+K1ZbUoyf799994 aafyx7vvrjHnnHOOGTZ8pHnhhdbJcurPhRE1evTbZvfPu5OlvpRaSapUqczUqTNMixbPx9zEpGCT L39+PU+evPliPs/ZkjEpeJ4t2LjrTBkIfP/99yZvnnv1b/SokYGNqlWzmh6vU7tG4PGTnfjKK11M 2TIlTNUqD5qtW7ac7NP9Z+qHnZs3z32mY4e2J/WaMGzxDK1Ysfyknadtm1amYIE8J63+WCt+5umn TKWKZWPNnqR8pwLPJDXMFXIIOAQcAg6BZEEgTbLU4ipxCDgETikCd9x5p/n0k08MCqpixYqHzr10 6RKTPv3FJoOP3XXo0CGzZMlis/Hzz8zvv/9ubrzpJpNXFCbZs+fQstu3f6OT5yJFiprPP/vMfPzx R+aWW281xYuXNBdffLHmofzu3T+bxx57InS+L7/8wsDiqVChkpk7d7bZtHGjOe/8882kSRPN3Xf/ z9x++x0GN9I5c2aZnd99aw4J2+B//7tHJuv5zKWXXRaq588//zRzZs80W7dtNddfd4PJX6CAyZYt u/n000/Mhxs+0HzTp08zxYqXMJdeeqlZvXqVKV6shMmUObMeQ3E4adIEk/PWnObe++43y5cvMz/I wrJosWJm2rQpJnWq1KZho2c0L5Nbru+AuI/muPEmbXvatGn1WKRymuHYf2+/PcJkzZrNpL/oIrN4 ySJz4YUXSntKmptuvtmsXLnCrBHFZc6ct5mSpUqZCy5IFyoKPsuWLzV7du/WtoPFbbfdbs4991zN Q13Z5brzFyhoot2TIGyoLxreu3bt0ntdtGgxc9111ytW38m9KV++gpkxY7r56ccfTaFChc39D+Qx qVPH2VRwtX3//fVm7bvvajtvvvkWU75CRVWOhi4uwhfchzd9sclQ7gGpF/n666/M8mVLzY9yvszX XWeKFS1ubsiSRZmEM2fOkPufzRQoUChUK23k+b47993m9jvuDKV7v3wobMSVsgj8Z/8/ku9/5siR I97DEbEJh2e0d8ee4OChg2bqlMlynRvNNRmvMWXKlAs9n+SJdu9jwTgcZrYN7vO/j8CRI4dDzzX9 VY2ateNd9I8//mCsu/VhyXuq5fudO82M6e+Y++57wFSq9KC+2yfaBt6rESOGmgFvDDZZsmQ90epS dPlcuXKZzJmvi7mNScGGOULOnLnMxenTx3yexGY8cuSooe883cIYcNg3DkRqE3McFM2PPPK4qVmr dqSsoWNHDh/Rd/JoIs4TKuy+OAQcAg4Bh0CKR8ApzFL8LXINPBsQ2LTlgJm6YK/JeGUaU7VUenPZ JedEvOz77r3ffLPtG7NM3M2swgyl0VpRoJUsWdp8IcoJrxBPDCXTlVdeZa67/nrz3ph16ubYrn1H UZRUNFu+/toMGjhA4o+NF4XF7yZTpkxm5szp5vXX+pm58xaZdOnSmbmi9Nogyiuvwuyzzz7VcrlF iTF71kyzZ89uZbjNnPGOKto4X53a1c0ff/yhCrDzzj/PLFq4wJwvSrUxYyeaq6++WhVDjRs3Mr// 9pvJKYuFNatXm4ED+5vWrdsZlBAbRcmErFq1UhQ815lLLrlUz3mjKLu8CjPa/+hjj6vCbMH8eYrN xInjDAoi8j7V8GmNq7ZCFCoo3S4SZRcKookTxpvBbw41V1xxhQkqZxVtFk9YAJyLOv78c6+55pqM 5gdxb3xn2jRTpmxZM2XyJEm7RuseN260mThpmhZFofjySx1FgXaBKo6IfTV0yJsGple/fq8bW2+J EqVUYRbtnnz11eYE2GTKlDkq3rbeG66/QRVm9poni5Lzn3/+1nuDcrJwkaKme/de5uDBg6ZWrWqG hTAKr7/++kuVkAsXzjdvDHzTwhL2c82a1abVCy1UGVap4oOab7YoR7u/0lWvGaXtvHlzDPHGXnq5 iyjripjJovxMnfockz9/QQPzDmFhOGHCODNw0Fv62/8fsfP69ettMoqyins5d85sbfsVV16pWX/6 6aeI2AThiQIy2rtj29GjezddIPLuzJk9y0yUd4m28uxFu/exYBwJsyJFitlmuM+zBAGU2Zs2bdQ+ 94or4p5xLp3+DbHKbv1xCv/b8GGcgeOxx59Qo0xynPpv6Zf27Nlj/j1w+tjTyXEd0eqgrxsydES0 bPGOJwWbe++9z/DnJCEC9MU8a3/9tS/hQZfiEPAhMHjwQPP333+Z556L7xnAPGlA/9fUePfIw4/p 3NZX1P30IcAc+KWXOpg7br/TPFSlqu/o6fvJXH3y5Inm8cer6Rz49LXEnfl0IuBcMk8n+u7cDgFB 4OCho6Ztv91m2fq/zfjZf5phU/6IiksaYSQVKlzYoIywLphr164xBw4cCCnQbCUoOlCW5c2b38ya PU+UUW+ayVPeUYUPSi6vYHmeOm26HkeZButl3bo4VpE3X9D3CROnmNuEUQa7beq0maZy5SpmwYJ5 ooD7zbRt20EUZBMkvtoo8/LLXc3evXuFCbRMq+kjQdlhXPV7tb95663hZs7cBSZ7jhxmyJDBqsyr UbPWsXyvmsefqB506rBp99xzr5k/f7EZ+fYYVaCwmCxbtrzgMN9MEffH559/UePsDHyjf7w6vOXi HfD8QEHZt++req2tXmwj1/SnKgNHjhyjadWr1zQ7duwwuFAhKHtQlk17Z6Yq6CZNnmZQjqHkhBUW TsLdk6pVHxF2SXxsYsE73Hny5Mlj5glWM2fNM/ny5Tfr1r6rzxOsrh3bt5sGTzYUV9u3Dfe5StWH zZ5f9ojC8M9w1Wn6+++/Z1q/+LwqSwcOfEtZhb/88osE4u9tLrvscj3XqNHjzJQp002aNOeanj26 6zNXunRZ8/PPuwwKWYSJFAzHa6/NZFDO+oUFDkrWXLluEwXlVF10vj1qrCrObN5o2AThmZh356qr rjbTp882Y8dNMj169tFn/M03B+npo937aBhHw4x4UU7OLgQKFy6q78XKFSviXfgKYZ1dL8pwGLpe +fbbHeZFeRfLlilpChXMaxo/09DAlKWPR2CB1qz5hPSXc03Lls1NkSIFTMUKZc2ot0fqcf4jPuVT T9YL/ebL4kULtdzWrVsMz/vQIXEK7b59epr27dpoXgw7devUNEWLFDSFC+WTfvc5s2Txonj10N/U r1fbFCmc3+BSOkJicTJOzJo1Q5XPZG7b9kXdVAZmNW395JPjcRLJS9rYsaO1Xns9KJobNXrSFMj/ gPb1vEvt2rU25cqWFFZrQT32uTCvrYQrZ4/zSX9EG1kQv/ZqX1O6VDFT5aGKZvz4sToev9Spg17r g5XKqbLclkUZQz9FXtpToXwZg6J929atmsXWi0EGsW0Jd0+CsKFcrPd6w4Y45Wb/118VY0INnU+A Ia6UNWvEx5fYmhh8SpYoah595CE1eGzZ8jWni0mYg1B3h/Zx7qYwvzCSPPZoVT1ftWqP6hgJBggY 8szY55M0vpPGsSABX57R8uVLC+O7kBpqdsvcwiuRnsWffvrRNG/+rGafJXMjnlMkGp6aSfN9a54W F1Ce8ccfe1ifXXss2r0nHwZHNfw9WkXfUerAoGUlGmY2n/s8dQi8K3Pw5cvi5rL2rIzHTZ99xrzz zlRz+eWXO2WZBSaGz8TG8Y2hynhZmKcTE5nxJpz4Y9meiri/4dri0lMOAk5hlnLuhWvJWYrArj2H zR97j7uOfbntQExI4ML2jwzM69ev1fwsui+++BJlWHkryChspwULl5ruPUQxJRMy3Cg3bdokDKv0 hgmiV55q2EjYUddq0n3i2oh8uGGDfiblv0ceeUzPXbJUaYNL3WfiYonlDflRzo2y7wNRqsAKshZv mBGvvTbA9On7Wswuf0Fto5627Tqqkuacc84JMS9KlS6jrqU//PC9ue/++9WFlcm8FX85m+7/LFCw kHkgT15Nxq0SqfTgQ+qWyXeb9tlnn/DTDBgwWBV15513vi6QWKycn/Z8PYYbVThJzD2Jhne4c3DN rdu0F6VVGmWm3CPsAxYnm8SydouwymA+wJKaNm2KKgBRNE6cODXkrhtUL8/ZC7LgyJDhCnWluuSS SzQb9xuLbOHCRUQht1/Yed+bVKlTmbz58qk7JqwZ3D0RFuMI7pK4ypQTt1HLONMDx/774IP3tL0P y/N23nnnaSoKA1xOrSQFm8S8Ow2efCrkZoxL6+WXZzAbPnhfTx/t3kfDOBbM7HW6z5SJAHqAOcv3 mbZ9d+vnMb1AkhuL+zdsxhXHDA9UBEv3k08+EXZokXj1stBu1rSJsHdXGRTjdes1UDdwFud2N2VY wF9t3mw6dWxvfpR3smzZcqoYQsGD4htBgbx5c/zddX/7/TctR79+nbgSwhpGssr7l+PGG1Xp3bbN i2oUqFz5ITV6fLNtmyqtsNwjq1atUEUFyqzqNWopCxrlGwoV+o8rjzHocuS40fBOcp201Y4l1IFC gjQU7Yi9ni6dXzLbv/lG+2PcWVEMLZOxknABGCw2f/mlKgFtW4LK2T5FKz72HziMGTNKjELzRblY TDc3gJENo/rTTz82pWTMw6jySrcuylii2KBBA1QBiXK9bt366vpOuILnn28ecrOlXhjLiG1LuHsS hE1i7vXeYwYPzgcr/fmWz8n9y2iKiLs+IQGIQ3ZQxmg23GnZopkwzN9XYwnu+ijxMHbFIig2qevv v/42zzZtpkV6dO9qYOcw5jz66OMSIuGAebVfH1EoxikLs2TNqgxKYrVaYZHL+MCxIOn8cidVqGLw ggm/fcd2VZLavBhgIj2Lac9Pa26+6RbNjqKD8Aix4Gnr5105JM9hzVp1ZBxNZbp2eVnCCCzWw7Hc ++6iPCVe6//uvkddrY8cPWI6dmwXMhxFw8y2w32ePgRg6Tdr1th8/vln6tL77LPNT19j3JkTIIBh hXcMA0A4cbFswyFzdqc7l8yz+/67q08BCGTOmMbkzpnWfLRpvygDROlSLLa4IsTqQkG2dMkSc//9 edQ6XKJ4yQRKJpRFKKpYgBADCUFBwkTQuqtZGFIZacAxSZfuQv2GW2RSBddLFj24d8I0Q3C1Q9g9 DWUJFuV77r1X0+x/uBh53YxsemI/uU4rO3d+p1+x/AUJA6kVbzmb5v/0YnVB2gv0sFeZk1bYZMih Q3FxXPZLXK2ePburZYs08tr8YBFOvOeJdk+i4R3uHP70C0P3/pC6Uj4hzD5ixPXs8YpmRRlVq3Zd XRT6y9rfKEgRFrIsYm0svJ3f79R0KO78+YVFOQse2GIsNpo1b6GKM7AqV668P7v+tiw+FAjhJCnY JPXdoQ25brvNrJJ4dlg0o917YrdFwjhWzMJdu0s//Qi8/9l+02d4HJN07cf/mKsypDH33h4XOzGp rStcuKiyr/bt26cu5uyMjFKoSJFi5t01a0LVfn/snUMx0bhJU02vIYqphypXTLBwQNnbpWt3Vajl z1dAFVko961BI1RpwJey8n6iJEIxUa1aDXPXXbm1fRhEYCwT1xKBwVq/Xm09N+/5GwP6qyv40GEj Q/E3UYahoEf5UFTidKLQqVOnnhokcLeOVXB57ymMT+JEsoM0fVFDcc+vLXUhGFAaNWxgBg96w/Qf EMcIJd1bjt9BguLrzbeGqpEJ5lLrF1+Q8TeNGfn2WDHEpBdG7LXmDWEvfyltJy4lGyDg1v7662+Y c48p9mkXzLRdu35Sw1HQecLdE65j69Yt8bCx/W4s99p/rjZt2ymrm3TaBQN9hzATrXKyfoOn1C2J 4ygvUYTRv8GCDie0D2UbBgRi0DGuf/PNNmFfzVR39dFjxmtRQh88WKm8hEgYp8quUqXK6D0BV4wr CPE/GQc45pdtEv900aIFpniJkqZTp856uJqwvGtLOIG/xLCIoGyL9iw2bPS0Wbhwvj6jtCkxeNLO bq/01PlVBTH6wCAcM3qUKSrGzWj3/tJLLzOrJewEitwXWrXW9lIfzwZzk1gwg93v5PQhsH//fvNc 86YaX7huvfrmyScbJWgMc5qgGLoocDAM2tiytiDGhG1iYHjooSpq5MYQyXOCsRvjduWHqob6TFvG +4n3QqQYwpHi9oZrq7d+73fm8osXL9T+/+C/B0227NkTxAjmfYoUL9fWh5I+KbFsDx0KH68Zj4hp U6foKT6VMYpYm5UerGxPGZcu98AfN9lmQIHN2BMU49nmSSxmtpz7TPkIOIVZyr9HroVnAQK9W11l Pv5ivy6iMl0d22uJZZaJ9HKZRK6WhRJsM4Li+2WrTFhbSQyzLLIoZ0GQM2cuDVLPIuG7Y0okf5nk +j1ClGW4/bApwBPVqpvMmTKbvbK4Ywc1hDhiCHHGTrZclD7uXK/JYiW9sOviiegJbVvipSfjj+bN moi1e6d5rsXzGqfrMtn0YOrUyaZP757JdpZoeCf1RE2ebaYLzPVi7cf1d5m4IHR+uaNs4PC/sIrN LFmymhdbt1XXr5cl74gRo1WZa7HHvRYFr1/YAACBZYa7EoH8mYQQT4zFTpCgDENg6llmnz9fUrA5 kXeHANAo3FByNnyqftR7HwnjWDHzX7P7nXIQ+Gr7v/Eas1mYxCeqMIMJhAsirvkwmnDH5B25VTY/ 8QpMS1zBYfSySQsu8L//8btswnJImJu7vVl1swqUJYitB0ZXUgXFDX+wm1mc/frrL7ohC/XRDhRj sJlQdHgX/MR1TA4hbqK9HgxHSAaJccii0woKH1gFXvGW86Z7v995510hRjabwCD58hdQZRnfbRpY I4w9CIte3PwwIqEIQfbs2RO2fytTplzoGqLdk8Tcaz3xsf8wEhHP1Mqtt+RUhdlvsuCGUUZfNnzY EPPdt9+KMjGvxkqteCwmpS3j/8Qoh4EKhQ/xLjNmzKhZYN9wDKWb9z7cLKxJ2N5fCcsOhWVuUbDC isTogvCdNFuPJh77b6PcPxbsxHC1QggEFHVWYRbtWbTlvJ+JwZNQAuCIEL+VEAK4rdKuaPce5Qdj HONdi+eaGhjseQWD9u07aX2zxDU5Fsw0s/vvhBD47Y/DZvL8vebnXw6Zh0qmNzlzxM0vIlVKOBTu G4qvJ59qpAxSb36eAeKhrlgRHEOX4zB+ed8wEiKk9erZQ40gGDgsS5FNQWBALhIG/rhxYyXcyXh9 1rzn43u0uK2wgW0M28TG+/Wfi2ezhSjGCTFCv3fhhRdKiIppgTGCw8XL9dZJrOKkxLKNFHMWgw1K dQQjBuJXmAXFsuVdRpirh4vxHO3+ElfXyZmNQGwr8zP7Gl3rHQIpHgExmirLLLENRUHGRKqvuEbg 8gYzxy9YS2Aw1a3bIMQS4PefYhlOjOCqgQUN1zg7gOzYvj1iFcRgYaJNjC8UfAiWIytYm7HEf8Ku lTLhsIoPArh/Im4tLVq8EJqA/nswbsF59bFJ9w5xt2BCieyQBVc0yZH9RrX8oVS5X1wnkUNijUIp w3lRJJ4swdVo69ataml+SCyCVk5kIUoddnJusYmGtz1vYj5xOVq5crnE+nlGF7UsbO+8M7fp1q2z ujbhBhkkBLuHYcIufsQjQnGKGxJWR2SLsB2bNj3urkBQ/w8/2mCebtRY2WglSpQy/fr2Nr179TDg h0IpnBCzCWHnWMohxBGx7ln8jgUbP56JeXd4p6ygmIBlQ7t+//33qPc+GsaxYmbP7z5THgIl8qYz E2b/Yf7ef9SkS5vKlMgXx+A9kZbCzqIvJh5kwYIFzXvS31ap8nBglVOmTEK9egIAAEAASURBVFLG Dmw0FjOwk/8UN8yLj7lKBxUiViZyVP4lVXgXXurUXpTsS7UKxinbz1PvLtmMA7nqqrhFif44Sf+x Iy+Cq1yQwEBIqpybJg4rb3mLn01DAd+m9Qsa2xI3T1hFMPIQFlyxiK0z0j1Jyr32n9sqGWkViszm z7U0w4YOUdYfzD8MAbVq15ENYer4i8b7bTGd/s60EHOKnZiRefPm6F+8AvKDcA1ImTJlle2BSzrC s0takNg6USSEk2jPYrhyScUTNiEsejDYs2d31Hv/TONnRUHSXRXgKMFh08FM7NChk+5eTfuiYRbu Glx67AgMnfyHmbdynxb4cON+M/G1TObcNDJJDyOEliDuI0xc+jbi5PoFZtKKFXExdFu3aacKcOY8 vXp1N8TQbS/3GAUrsVqbNntO7z1zCOYwKMt4dseNHaMM21Gjxmn1KJv7939V5hqfBSrMbNxWlK6E s0DYmZxYlowZ3rkba4cmTZqZ9BdfHC/eb1BbO3R8Sevy/jdr5gxVljG/tQxJrhljKdfnLZNHwgI8 /0Jrnb8+L7jZeLle13fmYiigcXsHhzvuuFP7yEixbL0xZ/v2e02bBwP24aqVVfmPQWDQ4CHKrCZE R6OnG3svQb8Ty5Y+mThnffq8qnjb0CAYVmBBo9wmNibu/sR4hkEa7f56rz/BSV3CGYGAU5idEbfJ NdIhEIwAgxwLH6zTlSo9qMopf07iUTHxwqXuIlFOMRhMEVc4XAT8Lpn+st7fBWTixkT5VQlyDDMI 9x92A4wkuI1CXx44sL+yqnCbGPLWm/GK4HLD4ESsDo07IsqvAQNeE2XL3WpFs+wagoEyoKKEQcmG 9epyCRxP8Pm3xN00mhAgH2r6mxI3BbzulAGYOCxzZFC3bkrR6kjqcY2HIooi4rFg0btSFodYy3G3 OBHxYxML3ok9H26OBOjeKzuCPvLIo1qcyQILKhvDLVKddevUE7fhRcpOgBHJMwtL4IMP3o8LIi3M mG9lcwQmfiwwrhE3JgTGX+HCRdU9hgU+bmbhJI/EkoN1gPKYZzxnzpziCjxc463ZZzwWbPx4Jubd 6d27h7Jlskp8nQmyQybxh5o2fU6f4exR7n00jGE5xIJZOHxc+ulH4Oor0phJr2cyH286oMaRC0Rp dqJCv16kSFGJjThTF2Msqtjd1i+4oqF4xt2rXbuO6mZNnqSwjGNV7Ng20DezyEFxXlP6YBYduAlZ lvGlwrRF9u2NW6DacrF8JrYtl4kyBTYbboAwfP1i3cb96cn1u2WL5qI8+cP07NVXdgAuoAtG3NKT k2WcnPfae90sJFkM44ZJoHPGAMbSEmJAYaEfJDyfw0eM0lhnBEAnlinjN/cBeUqYOBUqVkpQlPiq CAtRFEhW2cr4T1qQWIY4zL1wLONoz2JQvSeC535RpDBOMl+pXat61HuP0W7EyNEadw2F2by5c9St H9e0WDELugaXljgEvGzg3yW+8E+7D5nrrkmoELe1MtZjkIMVSBiGDu3bqGIGY7EVlGWIjaHLd28M Xd4VlFrElMQ1E/aqVdSQnjZtWpMlS1aNx0h4FYzFefPlV4UqdQUJSqEHxTicLl06dS3GQAujF7FK ab6jnCLerzUYRmsrZfyyes0qTfKyVOkbevZ8RVmjNj/nIF6uFeZYPOvEy73Lt6ETXgYozMABhZmN ZcsGVODlFxtzFmYpCmrm+dyboHjN/rKx/A4XT5g+KSmYxXJOlyflIBDHHU457XEtcQg4BGJAIHWq uFcX1paN71FMlFhWUp+TWqKRxQ0o0KNh9nz33XfqHsGuhQSeZxFu67HlUslg5hebB0UHLhhYg7BQ ffLxx/rbmz+1DGLeOphkYyGdMnmSBlYmqK9tr62X2E3ERmESjusarCI2HGj5/AtadQFhTqAMwcrb v3/cRgCNGzc1Rw7HBcRlglGteg3Na+tMLQF3/YJVaIC4pGLVHzrkTbGmPS30+Y80CDVtQILK+evh N4O1Ny9B6xGu34qdfHAfyN+0WQuT+brMqhh8WnZtYxGQP39Bm10/yeefCHjxtJntdfqxiQVvW4ec SL96r8Mes9fDbxYfWL5xLcGKys5hLFTbtusQL6i+LcunFx9i9TBBgoHV+eVOmu0VifMCO3K+KA+b NW0s8fUGqitTp5c6hyZtZCQmEgKrzbJSNMH3H4sSFqHQ3mGzEbyaSWK2bNlDz3gs2PjxTMy7Qzyj 7hLIukGDumK9Xa6LwTISOD2Wex8LxrFi5oPG/UxBCKRLm9rkvfsCkxzKMntZKMhwx2e3RphAKMX8 8rkwEBAMEsTLQ2DXwn5MjFx44UXKBMbVxwqGl0jyqWx6wsIR5YiNdYUrphWMCbDO2LyGNlkZPWqk xk9j4WP70gP/HtDD6USBjngZzlulf4omBHFHYKLaOJm4/jDmEEftZAqLN2U3S7zRgrKwttcEe/ZE xNZjsUmue+1t09y5s/Ve4I7JLsWMB/zhhrXK49rqLcN3+r4cOW4UV7Q4hvkr3TrrJgLZs+fQrO8J c8zeBz5h2nbt2lkXu2TAUFJQjCyMlfzxnbQgYT6D4O5pBVdQ74Y60Z5Fylk8UT4jicHTG+8Vxvzn woy5/oYbVEEc7d7DRGOHTuIq4XKH+ygx31KnZsOiZSZWzLTR7r8TQqBCkYvs9MjcnSttRGWZPREM zF4yB4HhjmKHDS28snPnd/oTF2ViR/IH8wkGFEp0nlVitPLOoCDi3Vq6dLHGcs2SJauWfeaZJsoI Zo7ToH4dU6pkMYmH2E89P7znst+ZM40Tl/2KFcrouZib8H4hXkY8v+1zz/dY2ko+r8Du4t285dZb Q8nM/e644y69PtihQeKNl+s/znXbWLbgAS7gEy6WLeMMbvf16tYy5cuVViV1XCiU7yT8wGF/9Yn+ zVzeCgxbxL7zScHM1uU+zwwEHMPszLhPrpUOAUWASeG69RviodGmbXvDn1csZdumYZGpV/9JjT9y lcQtwALjFRQS/HkFi633XAx+nKfl8610Qmutyt5zM8HzCguh3r37qVULV0zKMDBbyjZ5GeTqS9tQ 6jFpZOKMNc3KZcIim/bOLI33Yq3IxB3gj0GKmD0oDr0BVrt262GLx/u8XaxU4ydMVqsTOzWiRPNK uHLePAzYa9d94E3S6/JixUGUft40fnNfWGxiKQ9yHfHWG8s98WPDBCka3v56g665QoVKGnfOXiQu AY/JBJ7d1C659FJROl5qDyX4DMIHVoH32ijfpcsr5t8O/2rwWp4L67LrrfAbYSQiWEmjyU033Wym TJ2h+KJA88ZDomwsz6IfT8ol5t1hhyzi8WXKlDkUc4g6Yrn30TCOFTPO5+TsQUAZO8KWIh7WQ1Wq xlv4WBTuv/8BXWh4WcZ8/+abbYliGbMzJwHR+8sijYXhSmFToEyJJHkeyKsKKoLfF5Yg5rCM/Yxg WMb9X39Vd1J87PFq4rK43QwRowYxZxgPLPMTdi59HO7ejCMzZkzT9/xnCROA4SSasAMnzKghQwZr LDWwmyfMZRhwXvfwaPUk5TjKfJRHXpbx6tUrzXiJQXQi4scmue61t01Zbsiq7lbsAIkiB5k5Y7r2 cWwMEU1Q0oI9C/1h8sdmBTZeF8zyMuJ69a0o49h4AYOWd1wuU6ZciGnD93AC25m5wPx58zRkwIVi MGGTB8ZbyzKO5Vm07DZ2hsXF+d77EjL0w707sDjZCTRrtmxmwvhxqgQhZmks955r3i67uQ7+4gvd NZq53rJlSzR+VZEixVRRGStm4TBy6bEhULHYReZ/t6XVGGZ33Xp8LhquNMYy+14QfoSd0cew26nE pHtA4v8hscTQhYlIGRRlhaSvRMnOvN0Kcf1mzJgj/enHMp96Vzf8wk0z07WZdfdam89+JiVuK2Vj aas9h/1kbr59+z/6zDPXsrLr5590ju9fc9jj0T4TE8t269bTF685KZhFu3Z3PGUhkJBOkrLa51rj EHAIJBMCLDCYuCZ14LLNQNljlWU2LdonliesprQhnHCMPF5lmc3LMRQgLJa8Qv4gRYs3T9B3BnTv pDwoz8lKgy0XpCxL6vmCsIkF78SeD4Upz08kZVli6+RZIs6X/x6iCMW9cvjwYWphtIGuY6kffP3K Mm+5aNgE4UlaLO/OBRekM1hFUdgFSbR7HwvG4TALOp9L++8iYFmmPJswbxAW1la8LGOe3Xr1ZJMX D8s47fnCnJBFuddqTtlIjNYqopDD9X/9+nXKMoZJ4Q/87mWnUl+VYyzjqcIQfurJegaWsW2nvQaY b7CM1wp7GTdRyzJG2YD4mZ+4MLds2UqYrkYZu8OGviUKmZqa19apP+Q/7/Xw/vXvP1DcMS83wySA PSxjQgawAcmj0gaveMt50+13DAP8heTY9/hJccctxs9KzEYvy3i5bJ5SoEChUBV8SVAvaXKP/WKv 049NYu61nEyrjcYyzpkrl4YtIA6nn2WcKXNmf9MC66wjrvmM1ygScIvFUAPLeNHChaaZbIhjWcav vTZAF9i2UhQOjNfcM6t8sMe8n4whPXv1kbH1MtOxQ1ttJ319tmzZQ894LM8iC//SEidtizAWn5Xn A4VtrO8OCrsePbqZJ4XJw+6GsCqJw4REu/fc9/YdiGN1rekmLCDeg5UrVshz+bh5+OG4UAixYubF xX1PGgJsvsXu9d73OZaaeH46yi6t3E9iN6L0Qoihi8A05H3iDwMErsrEv7J9CQoiWKcoXxnrMUwg 7ATetu2LGrSe8AxPP91E3Z1hIGLECBJv3FbY8swvvDGEg8qQFmtbveWzZs2qrDjOaQVlNSxgxplz zjnHJifqk+sHBxvLFnzCiT/mLO8/TDpvvGbGS+TfYxuJBNV1PE8cyzQojz8tKZj563C/UzYCqcS1 JrZIoxGuY89vh8zgcbvMxDknRi2PcAp3yCFw2hH4cMbtZv+Bw2JBOe42Eq1ROW/NaL7esj1aNnfc IeAQ8CBATB9i+6DcHTbs7dBGAZ4s7ut/DIEbc2Qxm7447up3Ki4vXbpzzMXp05ifdsW5+iXlnGdS H49bC251QSzjxFw77mp79uxOlOGE2DlelnHQ+WhfEMuYvByDRceC1Gs42SnKdcsyDqozXBqxbYJY xuHyJ2c6C0kWgcllOAnCJrnutfe6D8p9j4Vl7C0T7TvP0k8S5D8cyxhFwaOPPGQeF+YhbqCxCPgG sYxt2VieRZ4PFs6wfpBY8QzHMrbnjuXeo1RhoY+CMUiiYRZU5nSnJVf/nl7667Tnpza798SuzLDX fjL66po1nlDX9pmz5trT6CdsyZEjh5u7hTFGKJBdu34Sln5VDRWB4tYfQ7d69TiFPxtrlStbUr0y 2PH15c5dtT6ev4cqV5Dg/wfN0880VhY7DEQ2yGJDpGrVasQ7Pz8wCsC8ZYf6QoXi2L3EEGanYhSx zZu3NK1ffEFdft9d+36oPM9fLG0NFZAvxA584vFHdBMadvlEWQXDEyUWoTZQHAedC6ZqN3HVfl0M GfdKPLM8D9yjSsLOXbqFqu/Qvm0olu3ceYvi9f+hTPLlm2+2aRvuuONOU1cMRDZeM/FyYZnOnj1f Nw4pXqyQspTBjVAzVkFm67JtIoxHRTEQEWO3XbvWEnKjlyEEAoKLKfXg6dK6dTtVhCYWM3s+9xk7 AonpR1B2X5MxOkM01rM7l8xYkXL5HAIOAYeAQ+CUIFD5oSrqmkBAWBbIThwCDoETR4CFAQykExWU PUlhGbOIiiS0L5ySgGNBzNFw+SOdh2Owlvg7HQLTLTklCJvkutfedloGrDftRL/zLNldjr11EdMJ BiNunEeOHFV3Y+/xSN+j4ctzGO1Z9D8bseJpWcbh2hetbZSLxn4Ph1m4c7r0k4cAzLAghiahHHDp RWE0SuIx1q5dVxVn3bp10Ri6tIg+FHarjaFLGh4WBJGHYe9lU/H8te/wku44ye6MCIYCFF/WHVQT Pf+h8Pnii00aQxjXTQwN5cpV0M27LEM1qO08fyj5orXVcyp9h/v2e13Zka1eaKGHiPPVQljClmUZ dC4/Ixk8LdvO1k8sW1h0hBPxGkvscftpY86+IzvyEiuOevLkyacMN2IKIpZByiZiMEgXLV4eUorb epS1OzwubvIOUQRWktjNSCSmb1Iws+dzn2cGAo5hdmbcJ9fKFICAY5ilgJvgmuAQcAj8JxFIjOUw uQA42xhmyYWbq8chcLIRwFWWTYAQmGXEeHRy5iKQXP17SmOYJeWORGO31q9XW9m4k6dMT8B+4nzR GIj+NsXCqPSXsb+jtdXm837uEfbxgf0HdMdzFH0nKuPHjTGvvdZPd5CNJTxHLGxQP4PU30bqCGI0 +/MF/U4KZkH1uLSECCSmH3EMs4T4uRSHgEPAIeAQcAg4BBwCDgGHgEPgP4AAu0J27dpd4zwRA8mJ Q+C/gkA4ditKYgL+s9Mrm5CEUzZFYyD6cYqFUekvY3+Ha6s9HvRJ3L/kENztP/row0THso2FDepn kPrbSx1BjGZ/vqDfScEsqB6XlrIQcC6ZKet+uNY4BBwCDgGHgEPAIeAQcAg4BM5aBIgdxqYAThwC ZwsCbVq30vhit99+h3n4kcfOlssOe50TJ4wPxbJt27ZD2HzugEPgVCDgFGanAmV3DoeAQ8Ah4BBw CDgEHAIOAYeAQ8Ah4BBwCPgQaN++ozlP4ozlzn13WHaZr8h/+qeLZfufvr1n3MU5hdkZd8tcgx0C DgGHgEPAIeAQcAg4BBwCDgGHgEPgv4BAnrz5/guXkWzXkC1bdsOfE4dASkDgxKPxpYSrcG1wCDgE HAIOAYeAQ8Ah4BBwCDgEHAIOAYeAQ8Ah4BBwCCQTAk5hlkxAumocAg4Bh4BDwCHgEHAIOAQcAg4B h4BDwCHgEHAIOAT+Gwg4l8z/xn10V+EQcAg4BBwCDgGHgEPAIeAQcAg4BBwCJxmBwYMHmp9++tFk uSGLqV2nXoKzvffeejN37mxNb9ashbn00ksT5DmZCWvfXWNmzHjH/PDDD6Zrt+7G7TZ7MtF2df/X EXAMs//6HXbX5xBwCDgEHAIOAYeAQ8Ah4BBwCDgEHALJgsC7a1ab+fPmmuHDh5p//vk7QZ2TJ0/U 4+T5a9++BMdPZsJff/1lnn/+OfPhhx+aq666ypx77rknfLqPPtxg3hjwuvntt19PuC5XgUPgTEPA KczOtDvm2usQcAg4BBwCDgGHgEPAIeAQcAg4BBwCpxWBf//916xZvTpeG1CgrV+3Nl7aqfzxvrDb Dh06ZJ5r0dL07vOqyZjxmhM+/ecbPzejR79tdv+8+4TrchU4BM40BJxL5pl2x1x7HQIOAYeAQ8Ah 4BBwCDgEHAIOAYeAQ+C0IZA1azazZ89us2zZElO8RMlQO1avXmVQpN1x553m008+CaWjxFqyZLHZ +Pln5vfffzc33nSTySu7Y2bPniOU5+23R5jssjvkpZddZpYsXmTOO+88U7pMWcO5kK1btxjqL16s hMmUObOm/fPPP2bSpAkm5605zYEDB8ycY66gH3zwvjl48KCpUKGS+fXXX82cObPMzu++NYcOHzb/ +989Jm+efHoerUT+O3r0qFm8eKH57LNPTapUqUy+fAVM7tx3my++2GQ+3PCBZps+fZopVryEueuu 3GbMmFEmR44bJV9+W4WZP3+u2fvnn+bhRx4z27d/Y1asWG4KFChoNkj5jaJ0e/bZ5ubyyy83X3/9 lVm+bKn58ccfTebrrjPFihY3N2TJovVEKhc6kfviEDiFCDiF2SkE253KIXAiCGzbutWMGj3S3HvP faZc+QqBVc2aNUMHpTq164UGnsCMERInTZxgNn/1pWnfvpPm2r9/v5k5Y7oOogxyd999T7zjEao6 Iw5BXe/Vq7t54IE8pnTpsoluMxMAqPePPvq4uVUmK6dKunXtbDJnvs7UrFVbT2njadjzpz0/rcma LZu56cabTO67/2eTT+qnbUNKjemxc+d3ZuqUyYZJZOWHqpiHHqp6UvFwlTsEHAIOAYeAQ8Ah8N9E AFfHgoUKm6WiBENRdf755+uFLlu61Fx88SU6X/cqzF5s1VKVXVdeeZW57vrrzXtj1qmbY7v2HU35 8hVVYTVo4ACNd/bnn3uFGZZRFXIo0Tp36WZKlChlNn/5pSHPjTK38yrMSHv0scfNOeecI0q6j7Ud 69a+a/744w9z7733mzq1q+v3bKKMO+/888yihQu0vWPGTjRXX321OXLkiGnRopkh9hnKudSpU5mJ E8abe++73xSSa9y4caPWuWrVSomHdp257bbbtR2sR7wKsxnT3zHfyVwLhdmWr7/WPMyR9+yOY6bV rVvfvPvuatP9la56vSgL582bY0aOGGZeermLKVKkWNhyrEGcOAROBwLOJfN0oO7O6RBIAgJYYKB9 DxkyWAcZfxUMdm+9OVgHu2szZfIfjvn3Rx99aObNnRPKv3TpYtO3by+zb98+c3mGDMZ/PJTxDP3C JIcYE1jQkiI/SkBVyu/66aekFE9ymYUL55u1694NlbfxNKDiv7d+vUF52q9vb9Oo0ZPmmaefMt/v 3BnK6/+yd++fOmljcnUiYtuQEmN6cF2v9utjJopCmOC7558XN7E9ketNLtxOpA2urEMguRBgDPlO 2Af09U4cAmcyAn///bfBQHJYmDROHAInEwGYXjC81h6bP2FkRiGEkskbO4w5GMywvHnzm1mz55mB A980k6e8o/OR2bNmxmsiz2+Xrt3MtHdmSt75Ws/y5cvi5Qn3AwbXk0820sNdunYXg3Bfs2DBPIk9 9ptp27aDGTN2gsRdG2Vefrmr2bt3r1m5Iq7eWTNn6PoBQ+L4CZPN2HGTTP36TxrmlNdff4OpUbOW 1tlHXDwff6J6uNMHpmPAHTV6nFnz7nvmwgsvMn379DaXXXa5mTlrnqZPmTLdpElzrunZo7vh2q14 y9EGJw6B04WAU5idLuTdeR0CiUQAWnYZoWX/JIoZqM1+2SCsmd27f5Y85eIN0v580X63fL6VmTJ1 eijbu2JtwmI1bPhI88ILrY3/eCij+3LaEbjqqquFir/QzJ230KxctdZMnTrDVKn6sAR+3aABYMMt Hpg0EZsCZWhySEqM6XFQ3CPef/89kzdfPtN/wKCwLM3EXH9y45aYc7u8/00EYAnkzXOvWblyReAF shgrVrSgefSRhwKPx5KI203ePPeZjh3ahrKjgK/8YHnzcNXKZvSokQmOhzKeoV+mTJmkuH4urlBJ kbZtWpmCBfIkpWiSy8D04FmYNnWK1sGCm9/ev/LlSpkmTZ5Wdgb97smW77//PnR+npMgqVWzmuap U7tG0OGTnvbKK11M2TIlTNUqD5qtW7ac9PO5E5zdCMDASp/+YnXLBAkMj9pPi9uiVzJec41ZsHCp 6d6jl7LGvvzyC7Np0yZz0UXpdbdNb15Ya0XFRRG55JJLzC233CoukRu8WRL1/RFhe3HukqVKq1Hk s08/MXhXID/KTp/I6jWr9BOmm5XqNWqZt0eNVbdLm5aUz6efaWxuuulmXUt8IPOwv//+yxQuXERY eftlF8/vTSphszE3Y0OBTZvimGycx1suKed1ZRwCyYWAc8lMLiRdPQ6BU4BAhYqVNE7BvLmzzT33 3BvvjDZmQcWKD4bSYQrMnj3TbNnytQ7o/xPXvPwSS8AKNG+o1xdccIG6XBbIX1BjG8AyqCEDJfEJ NgkN+zyhmU+aNFHcMf9nfvnlFx1wOW4lOWIRsIhjArFa6N5s1X3NNdeK21xVk0FYbVZiuZ5IsR+o B6UR7KuNn39u0l+cXnC8z1avn7G0I14B3w9YGu9Mm2r2/bXPlCpVRin1ZIGp9/HHH5kDsuDNIVR6 YkqkTZtWlVSfyuSlaNFi8bb9XrVqhdm2bZu4DVbRe+c7TdSfKDmh6z///IsmdarU6jbKdT/4YPyF 9p8Sa8IuyD6VuBXQ6Ss9WFnr536sXLnc7Nq1y2TKlDlejIlwDUhsTA/q4RlbtnypUvZpM7E1oPtb 6+yJxvS45tpr5T2YpS4Tf0jcEOp7+OFHNTZItHgi4WJ6YFH241a+QsWoMT243qD3jvcy0nsUqRzH nPw3EChVuow+HwskDkzBgoUSXBT9AgudJ6qdmDIiV65c6tJtTzB2zGgNEo0rPnF1ULLj8v1fEd5j +mb+kiJHjhxVfJJSNqlljkpBbfPRuDYfkU9+33zzLTr+Hzp8yPwk8X+2bt1iBgsLZK4ww/u92l/6 6mCGOe7oI0YMNQPeGGyyZMmapGYdOXI4hCGMlxo1a8er58cffzCbN3+paYcl76kWlIqMYffd94Cp VOlBjY10om1IDtxOtA2ufMpFIE2aNKr8WbZsicYLW7p0iSq57r33PvOlx3OBORmKqjffHKRjPVeU OnVqfZ+uuPLKeBeYyqSK9ztdunTS/xyMl5aYH7iK4vI4c+Z0ZZpRNnXqc7QKa0jl3bnwwgvNLbfe GqqaOSr9zYkKc1ArO7+P83bATZM/v9h2kO4t58/nfjsETiUCTmF2KtF253IIhEFg05YDZuoCiVdw ZRpTtVR6c9klcQOZPzsxC4iTtVQCZbYURQiKLoQdeVbI5DVXrttMtuzZNQ2lV5PGjZSRxuQY9tn4 cWOUWcOiiAUEbAYUUlC1mYhfIzvpbN68WYJ0ykRYFGLQxAloiuV65ox3JCbDxeruZ49zIhRyyRGL YNCgAWbU2yN1kUacgkWLFppx48YKfXy8ufbaTKqki+V6cLcLF/uBa3xWrPEw9MAKpda4sWMUL/tf tHbYfEGfYNqzxyuGoKhY9Ig/QRpxK1asWK7U+4suusjMkJhwxIYY/ObQ0H34TQKyNmveQqulTK+e PeSeHNb7EHSuxKQ98uhjOjFhsuZXmO3bt1ewXqDV2ckdCrNp06aY3r16yj1PL89UDn2+vDEmwp0/ sTE95ory9+WXOuqzzMRs48bPzdAhb5o8Egi3X7/XQ/hEuq/RYnoUKFBI3WZp8xZZXP766y+izCwt 19cjYjwRnpdwMT1at26bADcC8/JORYrpEe69+/2P3yO+R+HKeRXg4e6JSz9zEMiWLbvJmTOXIU4M ijEWMF5ZMH+eBmMuV668NzlR3wnmPGToiFAZzvPVV5tNWanTxsf0Hg9ldF9SBAIYrpo82yzUFvqp sWNHq1t9v369Te/e/ULHvF/+lnnCnj17zL8HTpyJxkIfJgjzgyuuOL7YZ5xDOH46ZMOHcez7xx5/ QoOpJ0cbkhO35GiPqyPlIVCsWHE1xK4Rl0sNyC/sMhRkXkGx3UrmglkksD0sd/p5+vdGDRtozC9v 3uT+PkKUZRjqMNQ+Ua26yZwps9krBnWYmFaYm27f/o+6acJqi1lkvpoYSS+MOgS3zhLFj2+UYOsg /Mx769fZn+7TIZAiEDg9I1qKuHTXCIdAykDg4KGjpm0/2WVn/d9m/Ow/zbApf0RsGCyzf8THf7kw cqwQYBTGi5dd1lfiV+G+2b17LzNh4hR11cubN7+ZI0ybNWtW26IaBLRdu46yQFsrAeTrhNL5Qrnb br9DlWpTp800lStXiXcctllyxCKAvo7i6qabb1Z30LeGDDfduvUwV155hezWE+dCE+v1RIr9gHIP ZVnDRs+Ii+nbEs9qqmn1YpvQNcXSjlDmgC+vvtpHlWVMBJ5r8bzmmDtntirLypYtr7EopoibJKyv nTu/MwPf6K87EKEQhOmEUgRhh6Kff96l7rXJsfDIJJMjJm8EYvUL5x40eIgmo+QbNOgtVa6+/lo/ UVReayZNfkdjbYwbP0kYcRckiDHhr4/fscb0IO+ECeNUWUasDhSIkyZP08C2uCOxq5OVSPfV5gn3 CRtz5MjReriCuBvwLB8+dDhqPJFIMT12ijXWj1u48welE4jXvnflpE2xvkfecv73Neg8Lu3MQ6Bc uQpqpICx4BXu/bp1a5WBmVGMGwjKEhTZjz1aVV0Gq1V7VN8p25cQf6ZmzSfUsEE8wwL5H1DjA25z KHdxw37yybra9xCDkLz0Pfa4PT99fbt2rU25siWFaVpQYyN63Rv7v/6qqVunpvZjVatUkgDTNWzR eJ+cDwV5yRJF1a0UY8uWLV+H8sR6PezE1rJlcwkQXcBUrFBWjS2hSuQLRgCwwI2yZo0nDG5AXonW Dm/eoO8sisGqQ/u2ocNsJvJkg7qmSOH8plLFsqZz505ivPlTj7/UqYPiwxhjhe9gxrETEcYIDFxs 7gJDe9u2rQmqg108ceJ4TW/b9kXD5j4I97pN61Z6X0sUL5zgvmqmgP8KFy6qz8zKFSviHcVwR6wh FL9e+fbbHebFF5+XBXpJU6hgXtP4mYa6gLd42Oc00n0llupTT9bzVmsWi2GN+4AyAubO0CFv6fG+ fXqa9u3ixnbeI3AuWqSgKVwon4YnYPdBr+BGV79ebb13PPsjhg9VxUEQboSp4JyfHAusTj2455OG 4hKx18Ocw753jPnR3qNw5bRS91+KReAeYZMR5L937x7qbsgukn5hl0nYXHXrNpAg/Pepsozff0oM 2cTI1WKIRXbs2K6f+l12o4wkPFfMAZnvZhWvknMlxAvuj17JmjWrjifktYJSnP4CRbidi/57ME7h TpiYy2Qnz2+//dZm1/hjGOcjiTXqb5FdMnMK09n+fSFsvLHjRusOm5HKu2MOgdOBgFOYnQ7U3Tkd Ah4Edu05bP7Ye9xN5MttBzxHE37FzQ+aNO4XVmDpwDYrUbKUJsEIWy8LK1wzUEIRI8CyasiAFcwK gUlhFjCA2gHRHov2mVyxCLgeWHDbv/lGJ70ojPLKNtUTJ01TJlBiridS7AdYG9Dn2dHSSqFCRexX xTVSO0IZA74Q6B7WGG4gTZs2D+WwFndcrZhIcC/uuz8u5gWLLtgesDo4hmsmwiIAsWwP/XEC/3Ff ue5YmQUoFVnI8GzAKkSIj3b//Q8kiDER1KxYY3pQdsCAwapIPO+88w07wXLu89Oer9Xi3mMl0n21 eRLzGUs8kZMZ08P73jGRjjWmh7dcYt/XxODj8iYvAujC5yzfZ9r23a2fkYzyJUuVUndh2GReYZF/ 6NAhg+uvlR7duxp2p7X92oH9B3Rzi4GiDENQsn0lrOEunV/S/hVXZxY6mzd/KX3RD+o6lCPHjZr3 kksuNTlvzWXOleDL9jgHYDCjAFu2dIm5XQwodqc2lBcwQhHqYnFFXDTcf7LnyKHp3v9YoLWUXdg2 bHhfYyveLzsToyDp06dXKFus19OpY3vzo/SlZcuWU8XNwIH9NUYhFeEqiLKEBWLdeg2k77pKF3z2 JLG0w+YN+kRRQkyzv//62zzbNI7phcIF9vIOWcRi1GIcwVjSoEEdvWdZZDEKPig8rVCGNI4lh8By QbYHLJ4zZLjCXHmMCcb9pv/bJwyT2rVqqNs9C3wMJtu/2aZKKXtfw7WLeQXzC9jmVn4Xpvonn3xi Chc5PqZyDCVos6ZNdN6RJ08evScwkVHYDnlrsBa3z2mk+4qrFs+lV377/Td9vmFJXicuxOz2h2TN ll1CH9yoxqe2bV5U40vlyg8pq+UbCXWA8tdeI27OzZs/q8osYjaxeyHKNxTRQbhxnbxTnNPKwYMH NQ0FJGKvx/vewRiP9h4FleN9dZKyEbBumTA4YWf5Q6bQepRqzPcmTZpg1guDin6q6bPPJDrO3l13 5ZYwHenVOMsYgZK2WbMmEQFiToZyjn6S/uudd6aKB8rT8cpUq15Tx5E3xJDLvJX5KR4TGFJy5sxp LDOMTa5gJHMtzNNRdBEDl7Y0bFhfjME749Xr/wE2KPcxMGA8oU9EgY/Bmc2zCKHhxCGQ0hBIk9Ia 5NrjEDjbEMicMY3JnVNiWW3aLwOQMZWKxdGVw+EAhZtgoCw0ULIcPnxElQwoV4hzgKCUYZJKgN6H Kh9fXNk6vQNa6tTn2OREfyZnLIJnnmliunbrrJZdrLsEUa1QsaLu9kNMs1ivJ1Lshx8kdsLll2cI ubIGXXCkdqDYCydMIJAvJO4XExMWawhWZYSJUZBgmca9CjdEFGUsSJcuXawuoyy6kkOY4LMbKFT3 WMQ+H/5JH79hbrBw8R/z1msnj8uWRY7pQZn9+/8xPXt210C5KAOYhPGHgKOVSPfV5knMJ/cnWjwR G0sjXEwP3rOkive9i+U9Iq4b4i2X1HO7cqcegfc/22/6DI+z6K/9+B9zVYY05t7bg/sT+r4CBQup gmrPnuMub/MXzFVWQmFh9yDfiHJjlrjN46o/esx4TYM9+2Cl8qK8H2cee+wJTeM/XJx79uyjcQEt +4z0bKJYaN6shS527pNFFcxY73HyjB8/TplIDRs+bWrXqUeSwQCAK9HgQW+oe5Emyn8tWr6QgIls j619911VMtRv8JR5/PFqmozyhgUcO86y2Iz1elAcswMcipf8+QqowgNlO8yNt0TZwYJy0KAhIZfW 117tK9cxVs8ZrR3gH05gMqH0YxwhFph1R+w/4DXFDVdWu5tbn949Q7EjMXSBFX0iwa4R4jbS13Es OSTj1XHME8Z9v+SV+0/bWdzWkXuIwgtlFYa0Nm3bh9jpxYqVMNWrP5bgvvrr4zfPIaw1FG+4c61a vVLG6cPC+ismi+w1oSLfH4tZhKGqcZOmmg4jjrkJTD+vRLqv3nxB3zH8wbTH4FatWg2DYoH2wcZs 176jxmClXD5Z5NevV1vPTWiGNwb0VyXv0GEjQzFTUYZNmzZFWfdFRRHpxQ1FaKzife8wqqFQi+U9 8paL9Vwu36lFwM5T7FlROs+cOV0UxkVD879UqY/xUuQ9h9lVt259UVZN0/kg5fPkyaexa5mfWSE9 tQTB9wrGsVTH4oAxd2ncuKnGS+3YsZ0aeqtVr2GGDxsaivlFEH2vVK36iD7DUyZPUm8OjBowmXnG bZww+q2+EgajW9fOptULceFBCJPRuk078fa4Ssakgibj8IyGDVR2CGO0f/+BwhJ+3PwsMW5RfjNu 8O4zVyPMi1dCOBxLfOWVnsrGmy9KtrlzZ2s/nS9/AbmuZ+MZ7v3lvHW67w6BU4mAU5idSrTduRwC YRDo3eoq8/EX+3URlenq6K9lRWExMchg6TksijEGqkqeYP/suoOwkGrdul2Cs6a7ME6xluBAIhOs xSk5YhEwQZwxY475VBZPa9e9a5YuWaIDe6ZrM5tCxxYYJ3o958vW1jt27FDlEROGIInUDnacDCdY 56Gnq2V65HBTT5gNyEXpL9LP115/I2Sh0wT+kzkNCw0WdyhEUJRxrSwc68l23sklixbHMdayZMka U5W0Cdl1zFpuC+36+Sf9ao/b9KDPWGJ6UK65WEZR0LFQh+0HhlOnTjYsNk+msHiMFk+E60wpMT1O Jhau7pOPwFfb/413ks3CJA6nMCNjeVnMwChbtHCBsmJQzn726aei2IjbLIQ8n3/+mRoSUDrhimfl ZlGGrF69Shgvx9k4jA8ol5IiKJaRDFdcEe88KJY+3xjHMOM4izq/2z7pVmCUsdgbPmyI+U7cePLk zWtKliwdUtbAuMAwEsv1lClzfDdo4noiGAb+lnAFuCSi0MO4ZOXaTJnsVxOtHaGMvi+0DcMHRo43 Br4Z2tCFc27dskUZV9/K+MIfAosL2SgYgQusCtjdsJEQvpNGrMvkkEPHDAwYLGIR2gV7iYWzlWzZ s0sYhtvj3Vd7zP9ZRDaqgd2yRhgoxITEHRPllL0fNv91111vcLlXprgwa/bs3m2I2Xjo8CEx+u22 2fQz3H2NlykRP1DS8YfimecLBeEPxxSKtAPFGIy84iVKhpRlVE/8zOQQ73sX63vEeb3lkqMdro7k R4DdI70CA3/d+g3eJFNLwpzwZ6XBkw11bkf/d5WwIW0cYnscZdnadXFx+Gwan2zm4RXizPK3c+d3 +s7xzj/5ZKNQlodkwyz+rMB6I7YhzzsMW0Jx0F+/0Kq1zaKfGE2mz5it7wsKugwZMoSOX3bZ5fIe z1JlmJ0DongnHhtzVvoS65FgC/Fe8ecXYtJ26fKK+bfDv7rJF+3x9lvhyvnrcb8dAqcKgdhG1VPV Gnceh8BZioCMkcoyi/XysZxiDZojls6jsnMWipDb77gzVPwKWdgwQLJwuObaa0QJcbkew51h1KiR Bgv3DTdkCeVP6hcm1wixCLxuiOwq9eFHG8zTjRrHVDUWcajiBWSnwNKly+oionr1WqZ0qeJm4cL5 6r6THNdznTCscIHhL3fuu7Vt3ngvsbQj3AXdLQsfArAvFuUUDDks5Sz8cmS/UZSAnxjcC+8/tkPl oUOHTI/u3dSqnTNnLq0SNyvcUQhEz8QDt6fkEHa7w/KIUq5KleMTKG/dTJyQf48t5LJli7uv69et i7dJAL+RrNmy6Wek/2KJ6UE8l63ihglj0ju5Y+GbGPHG9IBJgewIcEvy1umPJ8IxGG3eeCLE9MBN lpgedtLHs8MikYU+ignE4sZ9Q+F3IjE9wr1H3D8nZy4CJfKmMxNm/2H+3n/UpEubypTId1yZE3RV KHXYOQ0LPAaJhQvmq2GEeHdW2CERmTdvjv7ZdPv5ozBzL47AlrL5on3+eOw8Xbu8HJjVxukKPOhJ ZPHV/LmWZtjQIcpsgN2QLt2FplbtuEVlUq8nzTFF4FFzVBdfnBIGWDiJ1o5w5Ui31zpdWCJ2sQkD GmH8IK6aX34Ud1WkjGwKQr9j46nt27dP0/z5k/rburDjmhiLEOOUDXZQYnoF93vGLK7VvwD25oOd BfNkpbhlFhT2yXvST1apEmxUgpUCw45rRpFJvKc/xV34YpmnhBPvfQ2XJ1o6SrqXOrUXZl9czFfm EdZYxvOCCxiC2+7JluR6j052O139JxcB5ls3ZMmSLCdJ7E7G/2fvLOCsKr44PoSCKLYooVKiYuAf CxZEWglRMAARVBTElhJplA5BQkEJkW7plpYwMAkFFASVUikRBPF/vmd3HnfvvtrlLbIwZz9v33v3 zp34zbx7Z86c8zv89nhFEms5609H3b1KNHueNUdKhDmTtchNyfXuGofAyULAKcxOFtKuHIdAjBGA J+XtfvG7oC+9lHSSjtsLVjqNG71iHn6kuk4SUZxgWRNqUpvcKvq5CMrLLjO76337vqWhqOEiwJUh kmSXnfg1Yi3xxerVyveSM2cudV3BvQPuKiQW7akqO25zZOHJwq+e4PPnwT9Nv77Hd5KjqYdWJsQ/ dshatGxj6j39pGn/Rjsz5P1hpnadx0WxOc28KzxD7MIVEsUm7rQoO617CtmVLFlaJjJddLcbZYzd wQtRVNDD+/btNZBvsxBAGbVt61ZVDrJAwO3GKk79F1uLRBZyLHqwdkORB7cL3BS3FLpF3W1QFuEq ZhVq/ny838ECxSwuCixSgrlwsljLJ0pXOCzgv7hMFi1YXYwenXjn1ptvsM8okFEoEZ30YlEO7/5t t7plBUtrj3n5RM6Ta3HlmSAhzrEUsSHe4fSgn+D0gOOPhSWus1u2bBbOkEayOxxvqWlxo41xxYpr W8AtmywmR44arhZ0Nk9bvvc9mt+RN737nPYQuPzSjGZcn5zmy7WHdXPkHFGahRMWJhUqVDLDhw3V ewKKMyx1bpb7h5WL5PeDPPPMs8qbZY/bd37XXsszezy575SDFQ5unyiE/RJOqeJPi2sQynHcMOHG gRSde2M5sUKIRXvsfXOruAyFk3D1wNohmGD9wT0dzjU4gHjece+xmEBejdurXzIKJxzCxkB3cT+3 yhsWixyLlVjOu9yi6I9GsPL4/vudSZIeEAs67t8WyyQJEg6ARylxP5smfbh48SK1IMMdzS88N9gI gm6AQCdWWZCS6IB+d2F/Wf7vuOcSUKd2nSeElP9xeU6cr3xmNjrghQnj+cD+A/5LI35Pbl1i+TuK WDmXwCHgEHAIOARihkC8WUHMsnMZOQQcAicLAdwoWMAzsYX42C8oxV6WRT2Le6JwtWrZQjnOWrdp F+DyYMKblCuBhdzxxVx6SePlEYhPf/w8XARwN7Cge+XlF8Ql8R0DF0G719urybetlzcPe8y+szhs 3eZ1g8IKklwm0kTfql4j3p2CdClvz3HuBxY3TZo2U+43uB96ysKnQsWKWg14HKKph62z/922j133 hx5+RMmJR4klUvbsOYTYvr+58MKLVNnyohBDf/HFF2o18qhYjliBH80unryk3va8/x0uK/ovIPLx 0KFDav1ExFE4ZFCc4b47Zqws7kQJF0pYGN0r1g8bxFIQ4mpcjLp266F8QETyrCeR30YMH2bKli1v 2sj4CSXUx1snGykqFKcHaV9+pbFwq+Uy9MdzEsWPxWTx4iUSFUG6pOP0eL/yO3jhhZfNMeHzIx+4 eeD0QCw/R3pJg1huD8snslWUirhZNZcIbgQeQClhr7GcHiyM4PSAu4jPltPDjxvuDnB6YL0Ip0c7 sWzIlfNKVR7bPLUOQdoTze8oGA7aKPcvTSCQJXN6E1f4HBNJWWYbg1sm0qf3W6qw8gcByZcvv57/ RBTdWATYl24KCA/N7t279PyJ/suXN97iFKsjWwYBAnr17KH8T9HmP3PmdOUawx2J38jzwlfDC1dH ArLEoj3Uj3sp7oZewQraSqR62HT+d35/WA2/1qyFPnc7d2pvjogFExsRvNavW688QxajHcLt01H6 AVdFBMsONoC4x/HiM8dOVLCM5X6zXvgzcY0MZXXC8w05/Hc8XxL3wIOyafTll18EqgCX3FdiVXv1 1Vcnen4HEvg+cG8najcccVieoBTzy7cJka7h1LPKMqys9+zZ408a9vu5556ndApYxllhgyOcfP3N VzpPQqlsuelwxbTCpg0bOqtWrdDNOnscRTWBAPgN+XHLktBnWzZvtsllo2VD4HOoD7H6HYXK3x13 CDgEHAIOgdRBwFmYpQ6uLleHQKojwETv4+WfhCyHSR7EykxSd+zYrq4vXksAJv/BuBI6duqaKE+I jb3iPx8rLgKsmgYP+UBdF1kA+Cf9KW2Pn/sBy4KqVR9U6ys4ZrC+atr0tUATI9UjkDDhQzCuhUaN mhpeVnCXHT1mvEbOYoGCEi2YQOKdU7h2gllj+dMvWLgk0aFhw0Yl+p7cL+3atZcFQhNdHGCtxQvs iJDHAgWrC+vKEirvlHB6wJlB3SkDiwvGtV+CjVN/v0bi9GDs+/lFIvGJUI9wnB6cT4LbteE5PUL9 7iL9jkJdRx2cnJ4IoFy48cabzPLly/R36d8YQenE/Qq3axTFFcSdHXdgXN9Q0HOfWb9u3QmDQ+RA LMEGDowniWfjYZbwZ2K543UhjlRQ7qvzmBXLPzZHxfXbRiqeOmVygLg/Z65cJ9wenhPcC4hYjBKn hFjEzpNgKlOkHCuR6mHThXqnX8AE1/vB8oLEHYvlbt06i0X3y+aR6jVUaTdYuNqw8m3YMJ5Am/wq VKgUiILM55QI/Y0l8ZGjRzQ66cYNG9QVFQWY12rZn7flHMUSjXs5mwrTpk1RKgBcZQkaBL8cCrA6 j9f1Xx70u7Wwg+S7mrj8W+WSNzHcTty/xo0bI5ye8da8fOZ5F87y1psHn+FLgqKhb59eSlmwZMli 5XL1p/N+L1okTt1LsRLG4hkKBqzOvFJHOKbAk8inNWTOxCbjQLEkLlz4VlUQ+3GDS5V2TpkySZWE OyX4ko326c3X/zlWvyN/vu67Q8Ah4BBwCKQuAk5hlrr4utwdAv85AkxUIeJNbYkVF0EoZZKtfyza g0WS3em2+frfI9XDnz6a7+xk8/ILO/wLFsxXEm8WoMEWHf5rUuN7sLrhdshCLLUlVsTXfkVrpHqD daSxQB5YjYSSYLg5To9QaLnjyUEAqzLI/Yn+CLeUX9jA6NGjqwQHmKuuwFgsYeFbv14Dtayx6a0F bOC7PBe4lyJ+60uOcc6e57dJRLROnToYlEAICnS41aonROL0W4BqIt8/XBZR6GABC9cX+aMQbNmq jUFZhqS0PVxrrThRYO3csdOMkUihuHdj+UQQEhR8SDT10ISef/72EWmSgAwjxPX6Xgkw8EDVamq5 hcv2G6+3lXt4BmnbjaZN2zcScfQUEW467hec53M4wbobkZ6If0/4/t1369WCGfwuF+JwrGKhXUAJ icV5KAkW5c4fFQ9OucaNm6qlWqh8OG6x5v6JpdyUyR9qhDx7TfoMYgGcUG/urwTBmTRpYpLogFhF e8U/Tjlny4KDE1db+pEX9/oqEswCt38r1oLYfn9QNsjWiEvoROFQGz1qhCoK/dEB2VTEJX/YB++r aynKRDZKXpJnMRIMtyZNmun4QlGNReNjteskilJoy/e2J5rfUbDr7DH37hBwCDgEHAL/DQLpxL3k 3xMtevcfR82AUTvM2Bm/nWhW7nqHwCmLwOopN5lDh/+RCFlHo65jweuvMBs2bo46vUt4ZiJQsUJ5 jd6FO0v/AQPDLnrOTIRcq093BK7Jn9usXXfc1epktDdLlgxCip/RbN8R76KWkjJPlXs85OaQz/uj jaWkTeGu2StE7eGsZMNda8/hxviLEOFfIBxaWFYGk1i0B4J5oiKiULLKP29Z0dTDmz6az0ypg1l0 22sJDFD9kWpq/Y076skW3F+xBsOd3GsxjOvh4UOHJUhQjlTbsKHsUNEBk4MDY4P6huKaC5aXPzpg sDTUj2i01q3XmyYUbtu2HY9S6E0f6XMsfkeRyjiVzsfq/p5V7teZM6U3u3b/nezmnSr36mRX3F3g EHAIKALJuY+wv5T9iswxQy70VlTMinAZOQQcAg4Bh0A4BFq3bmvOll1tXKz+K+uycPVz5xwCDoFT G4FYWfhGaiXWUcEsKiNd5z1PAI1IVp2xaA9KIV6hJJp6hLo21HEUc8EsuvcLkT4Rd3HjPHbsX3Vf DJVHah7n+YLFnV/CWdD606b0e7TWvJHyZ2wkR1lGflhe8gon1C+UhXIo3EKlD1cO52LxO4pUhjvv EHAIOAQcArFBwCnMYoOjy8Uh4BBwCKQYgaJxxVJ8rbvQIeAQcAg4BE5tBIhODb8ZgmVZarj8n9oI uNo5BBwCDgGHgEMgbSLgFGZps99crR0CDgGHgEPAIeAQcAg4BNIAAkQA7dixixLX4yLqxCHgEHAI OAQcAg6BtIGAU5iljX5ytXQIOAQcAg4Bh4BDwCHgEEiDCBB1uEzZcmmw5q7KDgGHgEPAIeAQOLMR SH9mN9+13iHgEHAIOAQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BDwCGQGAGnMEuMh/vmEHAIOAQcAg4B h4BDwCHgEHAIOAQcAg4Bh4BDwCFwhiPgFGZn+ABwzXcIOAQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BD wCHgEEiMgFOYJcbDfXMIOAQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BDwCHgEDjDEXAKszN8ALjmOwQc Ag4Bh4BDwCHgEHAIOAQcAg4Bh0B0CHTp3NF069Y5ZOIffthk2rVrbWbOnB4yTaQTa9Z8q3l89936 QNIVyz82rzVrYurUftQsWDA/yflAwjT6Yej7g03PN7unqPb//vuv4jFp4oQUXR/tRePGjjHt27eL Nnmy0nn7d+vWn5J1bXISp2YbklOPtJLWKczSSk+5ejoEHAIOAYeAQ8Ah4BBwCDgEHAIOAYfAf4rA kSN/GxQz33zzddB6TJ48ycyeNdNcfNHFQc9Hc/DXX37RPHhH/vzzT9O0aSOzevVqky1bNvP7778n Oh9Nnqd6mlWrVpoFCz9KcTXB/IsvVqf4+mguJP9ZM2dEkzRZafz9e9ZZZyW5fvy4MWb48A+SHE/u gdRqQ3LrkVbSZ0wrFXX1dAg4BBwCDgGHgEPAIeAQcAg4BBwCDgGHwH+JwH1VHjAzZkxXxclNN92c qCpHjx418+bOMZdffrm5484iic4l50ux4sXNxIlTzKWXXaaXffrJKkPejRo3MffeW9H89ddBU7RI XOB8cvJ2aU89BPz9G6yGM0VRt3//flMmcOzPAABAAElEQVS79uPBTrtjqYSAU5ilErAuW4eAQ8Ah 4BBwCDgEHAIOAYeAQ8Ah4BA4vRC45Zb/mauuutrMmzfXNGzY2Jx19tmBBq5csdz88ccf5qmn6pn0 6Y87c+FC+eWXX5jDhw6Z/NcUMPfdd7/JnDmzXrdo0ULzy88/m9JlyphJkyaY9OnSm3srVDSLFy8y pUuXMVs2bzYzEtw7P/vsU3PkyBGDos6ev/LKqzSfAwcOmOnTp5qNGzeYrFnPN7cWvtUUv6tEoG4f fPC+yZMnrznnnHPM/PlzzV3FSyQ6bxPu3LnDLFu21Hz7zTfmggsvNHffXdLQZq9Eag8uhZUr32em TJlstv/6q+ZxZ5GiiTBZvfpzs0Ta+Nehv0zh/91qjh075i3CRFOPRBckfPn222/MR/PnmbOlX8CR NlvBMm/GjGlmm9Tv6D//mFtvvc3EFS1mLrzoIpskqnL/+OP3sG0LZJbwYd++fWaG9M2PP/5ozj3v vER9s2zpkiT9y/jwytSpk83u3bvN338fNvRj5cpVzCWXXGLC5eu9PtjnX3/9xUybNkXau9Ncd931 5n5RBHvH8oYN35tFCxeYX6X/cl15pSlTuqy5OnfuYFmd1secwuy07l7XuNMNAW7yffr00mZVqljZ 3H7HnUmaiP//5i2bTc4cOU29+g2SnE/NA4dkEjBVHow8hC+++GLTpWuP1CzO5R1DBD6RnUu4NurL mMkhYyc1BV6O8ePHmpo1a5lrr70uSVGRzie5IEYH4L94/fU25uabCplqDz4UNFd/Gnggvvt+vWnd ul3Q9O6gQ8Ah4BBwCDgEHAJpA4E/9v5jxs/eb3b+dtRUK5/VFMyfKWTF76tyv3m7Xx+zdNkSUWqV DaTD8ixdunSm8n1V9BjzBnjHUG5dKMqn80RZghJp7JjRZsC7g8yll15q5syeZRaKK+LYsaPMjh07 zDWiUMuf/xrT/51+5mpRzH39zVfm66++1PxQyO3du9eck/mcwHkUZiioXnzhWbN9+3aTO3ces2vX TjN61AhTSZRWzFGoB/mhZEGhh3Iq+xXZkyjMlgtPWuNGL0s9s4pi7xqzQsojn6ZNXzMPPvSw5hNt e8aPG6uWcJkyZTK4qZYsVdp06RLPUcb8qVevHuYKqQMYzBTcUARai7pI9QgA7vvw6aerzEcfzZd8 rxAF0y5VLrXv0MmUK3ePYvPkE48pfnnz5jNnZzpbrQGp34iRY9UqMJpywe7xOo+FbJuvSmbz5h/N C9I3ewT3G264Uevl7ZvVX3yepH/9CrNFCxeaPXv+UIymTvnQlLy7lFib7Qubr78e3u+04YnHHzOZ MmU2x/49ZqZPm2rmzpmtYxJFL4pXuPoYN/ny5TezZs0wrDFff6ODKVWqjDer0/7zcbX3ad9U10CH QNpH4M8/DyhfAT76EyaMS9KggwcPmiFDBmkaHuAnW9ht6tmzu2GH62J5IMdCvpDdJyYk7OQ4ST0E toiSlXHF7lVqi5+Xw8/J4D+f2vXx5h8N/4U3jeOB8KLnPp8pCDDRZnHGvd6JQ8Ah4BA4XRAYNH6v GTNjn1mw8qBp1WuXOXL035BNq1TpPpMhQwbZbDzOZ4UC4+OPl5rbb7/TZM+eQ69FEbRYlGUVZaN7 2vTZZoK4WaJ82rZtq3nn7b6J8r/tttvN7NnzzdAPRiQ6/tJLDWVD81k91qFjF9O9e89E5/nSs2cP VQihkBozdoJYLM01cXHFxappmtRpWSA9yrZWrdqapUtXmDqPPxk4bj9gyYSShDr07/+eGT/hQ93c xGoLSU57ihYtamZJe6ZOm2WKFStuUPYdPnxY55rvvNNXlUdjx000Awe9bz4YNlIVZ9HWw6bzv7MW 6tCxk5n04VTFGy4wLPiQOXNmqbKwZcs2oiAbI2umYeaNNzqqm+OSxfFpIrXflheqbfa89/1NCWSw e9cu0+utvubd9wabceM/NCVKlAz0TVT926u3KlFz5brSTJw0VS29IuXrrUOwz+XL3yt9M1OsGqeq xePXX3+lGP32228SfKGHuUg4+Oi7YcNHybpzssmY8SzTrWsXA8ZnkjiF2ZnU266tpxUCK1eukJ2N vxK1aZkoyf7+++9Ex07mF3ZlmDwMHjLUvPpq85gU/a1YI0FwuWvnrpjk5zL57xGwvBxF44ppZZhs Tpn84X9fsRTUoEnTZjL5nZyCK90lDoHgCOBqEVf0dn39LC46fmGRZc/HgvzXn3+k73PnzjZVH6hs Hn6oqhk+bGik5O78KYTA8889Iy43FU9KjVq2aCbuXqH5myKdPymVPMULQWkRV/QO07ZNy1O8pqdP 9b7ffHwOvWf/MbN919GQjcOTonjxuwyRDbEcQnDRZB5eRazPrKAsQ+65t4Jaff3yy8/CbXanukzi 9mgFq56WosjCNZC5dHKEMlfJuiBnzpymwLXXGsr4/fffzD333KvZfOwpB/fKipUqq+sdZfrl2gLX 6qG+fd9SRR9fUGa1bfeGHk9Oe5q3aC1Klozqhnnb7XcYPFHWyrz+s88+0c8PP1JD3SbJOG/efMa6 lvI9Uj1IE0xKSPusxd8FF1ygroarP/9ckz4i5c2Zu8CUF1zY9PlGFESQ7SO/bv9V36MpF9xCtU0z 8fyjbz779BO1pLtdMEDo34oVK+lnb9/ogSj/RZPvUeG8Q0FpX0c8a0Ta0LjJq1oarqtYIiK4/FLf gwf/NCVLlpJrD+l4Spc+nYkrVkwNGNauXaN8ejZf3r15a0an0T/nknkadaZrypmDwM2FConp7lcG BVWZMsfNwBcs+EgfwJhbe4UbJubJa2R3aM+ePeaaAgVk16mYmtiSDlNhHoClxFQavgI4Fq67/npT tmx5c/7552tWXI95d40ajwayXr9+nSGiDWbDM2dOl4fgGjFvzmTGiQl24cK3Kr9CNFwB1v9+k4Th vurKq8U8/C59cLLTsfrzz7Q8TLnLlC2n5uxMMMqWKWdy5sql51AcjpPIMQWvL6huqsG4IBo8+7ym xQouORwS9rpAo+VDKA4IrC3CcUcwUcBUfMXy5Zod7oiY7NuJEfnmkwkDGMLpkD5DepksFzNFisYF imcCjcsrkZmO/H3E5M2XLwkPRjS8EZj8x3M4bDVXXX21+Ud4HLwSqa7etCya4WOoVi3ejZGH5qjR I00BcSmwSjHqxPi8+eZCsmN1kY43eDmw0PJzMti8MRFnJzPYeLRp7LsdwyVK3C1j5nOzdt0adTWo UKFSYJxEGsPUywouqqH6wKbhnX6gbV4CVn4XS5YsUk4IODniZFcVNwwnDoFoEOA3jgUXwo53zUcf S3QZ92p73r4nSpDKX0aOGK4TZVx8WJjFQho2fEkWLQfMe+8NiUV2Lo8QCDBe/kkYWyGSxOzwleJG dn3BgoH8/H187Ni/SZ47gcRnwIeJE8ab998fZPq9PUDd50I1+YYbbjBYlDg5OQjcV+o803vY72Jh ZUzhGzKbK7MnjVTorUmV+6vqfGaukPw/Ur2GBgFASYNSysq2bVv148svxc9D7XH7Dom7lWAKLHsu 3DsKMn7fbLJUqxrvCupNv23btsDX9OnDK+OqVn3QrFi5XLmr4K9ijlpU5qHPPf+izs2T055AofLh 3Czn6tcjsiaxm0Eo+EJJpHqEui6dSZfoVJYsWeSZdUSP4XqJWyFWZLilIhYPOw9OSbnetmmmnn/0 Dc/1226/3XPUmFvFmhDx9k2iBBG+RJNv77d6KgWKzQrX1+kz5tivid6vlzUU42+nrA+2/Rw/XqBP 4eWXn2U8LRarPe+5cHn7r09r3zOmtQq7+joETkcE1m48bCbO2W+uuCyjeeierOaiC8I/zO4QU+8f f/hR+Q6swgylEbtcmNeuW7c2EUxwDaBkuuyybObKq64yn4xYqW6OrVq3VdLIjRs2KK/BuLGj5QGy R3eoeJj06d3LzJw1z/CwmSkEmZ+L8sqrMENZAB/C//5XWH3f4QpgxwPfehRtlBeJK8Dr119QJoYf L1tmMNNu3ryVmMIfMWtECYcsFULMK4Vw8oILLtQy4XfwKsyoR/UaNVVhFowL4pkGz6WIQ8KvMOOh F4wDAhLMcNwR8DI8/ngtw0MGRRk7WpMmTTBYa7z9zrv6MCXfLDKhOCTkp/AFgA0cDy++9IqpVau2 ToYaN35F+xkC03PPPVc5IYLxYITjjfhh0ybz/PPPmEOyIwTJ5/Lly1SRagdNpLradPZ9yZLF2k9E bWKsfC5utLQlnyjzrMJsvuy6vvtuf+Wu+E3cPjkPL0cwTgab75s9uoUcjzaNfbdjGOUdCmImYbgh jJUx/Y64FDBeIo1hqzDDdeGjj+YF7QNbnn1nrC0WpYZVmNGnPbp3k/GfVRWRnGeyiRXapZdeZi9z 7w6BiAgwcUX5n0RhJsc4918oy7hvff/9d2qdYHejIzYkigRYZ3gXjVFc4pKc4gg0kGeuV1wfe9Ew 5qBEONTNosPHLZoSpzDKg4WrmpOTh0CVMkLGfmNm5TC75fp4Qv5wpaNIYq7LBmTRuDjdRGMu6iVO Py/reZpF7z5vm6zCC5ZIRLcDp9mJCnxjCHMd5s9+yXJuFv+hkN+xcGPz4qeftih/GesHXgdlnfGO zFdj0R4UVwik8zfeeFPQukSqR9CLIhx8X5RlbE6z0f9orcdMrpy5zH7Z7K5YoVzgyliXa/uXjWqv 7BKifcSe956L5rO9Lly+hW+9NbApH01ZzCtYv9lxyvyjnBhP+IUAAOdfcH6y8vbnkZa+J7XDTEu1 d3V1CJwGCMCP0FJ4EhauOmhGT99nBk/YG7FVGcUf/+6SJZWTAAUVsmLFx2pyaxVoNhMUNDzo4uKK iy//LH3YwUeAxQsEj14hos7ESZOVrwBlGlZGK2WXKRqBL+FGidhziVi34VvPDk00XAFe/3se0DNm zjH58uc3AwcOUGVe7TqPa/FvvvlWkoVjpHp5uSCSw7ngvS5UGX4OiEjcEVhXbdm8WQMxDB7ygfJL QJ66+7fdGuHGlsMuWM9efczwEaO1H9hZHjTwXSUonTZ1iirLsOQaPWa8GTR4qBK5stvn58EIx63Q u3dP5R4aLNfDT/Hh5OnmLrHMshJtXW16IjAdO/aPwSIQseblm0Qxtz3BxB0rMXgk7iyS2EWnZxBO BptvSsZjtmyXixJxuhk5apzp2u1NXYSjqEuOhOuDcPlggYmSOUeOHMpPwXj+4IOR+rsc+N6AcJe6 cw6BJAiULFlaF19e/kZ4RdiowBrYLxBG132yjildqoSQARcTjpxGGiXMpuvb5y3ZwKitz406dR41 Je4qaurUftR89VU8kTSWoRwfNOg9e4m+d+7U3rzy8gtqDVq/fl1V7i8XpTJpGfMo2NnkeLBaFXXB u69yBdO1SyeDYt4KO/fcx6pXf9CUKlncNGnSUJ4Ps/V0q1bNzaZNG/VeQZ7cJ+HCfKb+U/ZyfUfp znnSsnHxeJ1auvGDYr1smbvVdZ+EuJPUr1dXy8H9sH37doF7bLjrvIV9KhamlIXF8LPP1td2cZ9l MYF1Qo3qDyl+tWpVN2PGjNL6cD3nsRxi8wR8q9xX0bzV680A34vN98MPJ5rnxD2SfqpZ42GNUuYt H56fp596QvsyXBsG9H9by6D9zV97VZ8TNh/6BRwrV75X8Wn2amPpr132dMS6BhLKhzXiQgUeI0cO Dxym/zgG3lYYYxzjvm/HG+eC9bG9hg0KrvGPR3ve+86mHJstjKO7S8QpdmxKIBBSkw+W914Bf46j nGLM9Ovb22B1ce89ZXTMjhZraOZRr7dro3g/cH8ltZi3edAOflf8vuj3cmVLGtxJcUHC8p3+Af+O Hd5I5JLEb5V2V6pYXiLLldBxZDmgiErHZg7SsuVrujFmx4Z3zGG9TJ1psxWiBrZo3kzzrVzpHuET 6my+/+47e9q9xwCBnJdnNP8rmFkUlpEzY/OCzYPvvluv9yOuuL9K1UQX5s93jX5HOcTGMC+sc7kP MDclQMCJCtY9WLb9IJ4a2XNkD5STIWMGmQ8NNxs2fB91EdxTu3fvolFAq1evafr2fcfccUcR9fhg XMeiPUQYRfCWsQIvFuPbSqR62HTJeed3xiZms9daaORMFJveZyx5xbpcNkuzZs1qviJCqtw3rECt g+TJk8ceivjOWLHrvmjyLVWqjHmlYePA6+l6zyQqw7vxZj168uTNp94rJNwo48aOWd4xyGA87d+3 T4n/w+WdqKA0/sUpzNJ4B7rqp30Eduz+x+wVngQr6384fjO1x4K9E9r3L3m4rFoVf8NFyXH++Rck iZx5Rfbs6q/fpasQTspkE3extWvXavQbq8yw+T/T4NkASekdCRE4rd+/TZOc90hcAdz0/X79TD56 9+5n3uzZWx9qySnPm5Z8vFwQixcv0tOx4pDwckBg0RSJO+I6sSrjQYfrKlZImKND+jp27ETdzbF1 h3uhiITdRogcxO4l1oNwPiz7eKkeJ5S0lXLlymtYcpSiVmh7KG4FMMfdMC6umJrWcw3hxW1/8z3a upIWISw58qW4VyIsgIjQhFAvFstfyyK/sLjpnnNO9LucKRmP9eo/EwgNTh9dfPEl5nPPgk4rFeFf uD4Id+nnn3+mSmbKta7MuMyOHDVWdjLrhLvUnTvNERD9jpmx6IBp2XOXvvM9kpQqXVqVGkuXLAkk xdUXpQ+RxryCEq1li9eEs+Z32ayoppsLP/7wgy7YUXYgv/zyi052mzZpJJHArjClxCUaK1YW/yjL jkm+LLxZ1Hnlp59+MhtFScVijKhtCJa+Ba+/wZwlBMD9+/czwz4YalBW1637tLoiYW3RtGlDrT/p O7R/XRVxRGR7rPbjuiiClwk3ftzQuQedfXYmzTOzfGajhwWoV/6Q6GDUz/LNcB4Otyli0czvjM0a FE0vvfic2bJlsyGCHfchFqT16j2plqfkF+w6bzl8ZkOEsqj35h9/VAsIOF66duloBgx4Rzl5WEge PnRYFWLvJCg0UL6w0GQRUveperooRqFmFeY2XxSKR0WhBeF2euGFQdmyYMF8rcbSpYsN7ossTB+r XcfceWfRkG2YOHGCWrXkFQxR6KBAs9L+jXaqiGEDCMvwzYIJSj8rkepq0/GeN29esWr/weCCYwVq ADDyH/td6s34YrzZPgzWx+QDTqHGoy3H+95FcKPPby18m6ld5wmN7Na2bStVImOlQn1mzZwRuITn 3RSxljfye2N8UJ8RI4apspaFJM8mNjmwhP/66y+V74nnbedOHVTBRka0A76e1q1aqPVOgQLXKsXF U3UfV8Ub0cpziEUzSrBpomBF/hLrMZTTC2VedpNsJJYrd4/5bv16VQLze7zkkkvNZQkWx/ymmKfZ seEfc9SZOiAHDhyQqHa11eUfiopy4lHAuGnR4tUz2r1VwfkP/2GtxPwOi2CUCtyPvMLGLxZV78q9 gw0JlDZsRDBm6PtYCcoQxnTjRq+oApmxwX1ggVCqMOaiFTjHUPyjqIU2A4+TNWu+UYJ+eNti0R7m tkSxBAM2NbnvsdHA3NhKpHrYdMl55/cKRmzysFmE0vLFFxJbw6ZGudzruR9xvwJTNhyGDx+q1mUP PfxI1E3AkhClIhQjrOlOJF/uv8/JhhCbDDw7u3fvas4RL5EHJUo8z43/yZydDZE3Xm8rxhMr9Hny 1ltvmh3bt4tSNkfUdT4dEjqXzNOhF10b0jQCua6I38n6Yu0heeDKzlQZn7l2iNZx00dBtuCjj3RC jZICs9kMGTIkuoLvkFryQNqwIX6HCYUKN0obutle4PX7z5LFcg3E+/3bNMl5Z4IQjisglP89uyax cF+jnVbsQiFWHBLp0x/HmXaAJw/6UNwRuGw+KqbNcK2xI4zkzZvPPP5E3QApK8e8fcD3G268UTkC tu/YrotI3DDhl7PC7tjNN98iSrCVISPWnRvoy6OGCJQsuHPkCM0bEW1dbR2YHJIfk4Aff/xBJvc/ q0sA1ggfL1tqCha8QZW7WKIlR7xYRDsevddQFvgtFZdRIldFK8HygKeBPggn22SRjzDR8Ar97OTM RuDTbw6ZN4f8riCs+PIvk+2SjOb2m8K7++AuTZQ1XH6r3P+AXotygt8abt1eYUGPgh3LYBTTCBHJ nn7qCf1dEsbeSouWrdR6l+9YfWJpvEVcb7xkyzat951x3PCVxgaLHhTsjRo31dObNm7U+vQRdyPr hkS+KGR2yG8Gq4HZs2eq8h/rWRaW1ao9qPfKIUMGmh5iPYxbNy6ZrzVv6S0y4mfcqAcMGKTRwkiM xRf3N9zYrAUD1gL8flmYPfBANc3Tf12ognAp7yaWqrSHe9s0wQqXJyyAkQbPPm8euL+yGStKMZRS WNIir7/RQZ9hPBd6vtldOR71RMI/iJQ7de6mrrX3CY8lVnkjhg9Touq3+/XVxTUWxCh5kGyXX64W et424Ab29jsDtJ2UU65sSaVNID1WJvPmzTFly5U37dq155Cp9VgdUbbUMn9KfyDR1pW0bHTcItQL WEgosbP0obUsWyELLQS3IF5WeaAHE/49KYrUUH0cajyiSPIKiqxlQs2AAurVZs31FDgyzhg7HEdp xlyIOjIWNTiStLdChYqBrFDsvvveIP1toWTEMi9DhowSEXCkWoFgIfy2RC5cv26t8Kkef2a1afu6 Ul6wQVa61F3qroaLHZQUPPN49n/z9dfK5Tl69Chd1OKW+sSTT2nZbNY926CeKjX79uuvlpJYazwp 57E2woIS8Y45xrJXRo8aoUTuLVq2FlL5+HtCPnn+durYXn+XELk7OfkIQAFx66236W/Cb11GbbiP 95M+7ySKWCxtEe7juLsxL0RQnIcUFgcikK4HlYTzDz74sG4MUAYWk8xTb5Q5UOs27fS5wHji/hu2 LCmAe8W+fXvVohT3RZQoRURxz4Yk16e0Pd76c0/tJpE+WzR/1bw/ZJA2C0J8njMohpFI9dBEvn/B 2sdaIF26+PXAQw89ohtHE8aPM6NGjtB7LdFO2chOn5AmUrnB8PO2zVcl/Uo/Y102TPCEFw6BWqV1 63YaiZLvkfIgzf0PVJV792rd6ML1Npp8uc4vtg3czxrJBg3CvbGXPKOJjIl0lmdUjx5d5fk9Szf7 WX8UkyAXL7zwkj67NNEZ8s8pzM6QjnbNPLUR6NEsm/ly3SFdRGEKHo2wA4Ily6JFC8SKZ4kqJNhx 9MumTRtNM+Ewyy0KGyZpKC+46TFx27ptqz95TL+/L64r4bgCQvnfx7QSCZnFgnMhVL2i5Y6Ai4zJ M9ZoK8SFduHChbL711YmWreG3P1jIYRg3QFemzf/pYsDvlvZsXO7Kkqx0ogkmTJn0iR+KxL/deHq GkyZSaQo3FOwdESIpINFw8QJ48yNCQuquzyLD395qfX9X8EvQ4YMyg2X0jK8fRAuj8B49rgUhEvv zp05CHgjr9Hq7344HFFhRjosyfgNYbHyzz/HVCHy8CPVOZVIsHbitXv3LnkmLNRF9S8JO/WEsrfC wsFroXr9dQVVYfaHWKZFUpjZPPzvKA0QrJfhvIFI+ccff9BjuMHxmYUaSj8WMwgT8oWLlunnE/l3 2213BJRlKOZQ3rF4/WnLFn2Rt7XgWLPm24DCzHtduPLvF6UECzsEdzruBShyUNxYuVaUHcuWLRXr pvWmaJE4VdBjsYCyCisKopDZdttr4HukLxAUXyyeN27coAtFrP641irLSIOij0Wwtw233PK/gFKQ vAqIEhX3GYR0YA6nqRWeD1jcWoVZtHW112OVjGXMOuln3D2xcL/zziIa+GebzCXWr1unSbn3Ryvh xqM/D+qPUmK1cGQ2bvSy0ghQJxacVipUqKQWfquknjyTWJiiNCh/TwWbxBQqdIsu+DnAghVhEYjL FGKP7dm7R7/zj3paLJl7wad65MhRVZZxnv5jg9BewyYlcom4yXnHCjQDRP4OJ94x509Hv2o0O1ng W+H37P1N2+Pu/eQiQPCGcHLTzYWUSmPv3r0afRClk1c6durq/aqfuQ/wsgIdhw2uxDH/ecZpzZq1 VHnPZgUbjdbanfTch1as/IyPYQX3ztZtXjcvvdxInyXwfNnNEHthStqDMp2XlQIFrhV+1yniwr1d 77Peex5poqmHzYv3UO3r9VbfQDLmzj169FJLZVwx+e2Cm1XCkzBSucH6yt+2QIEJH5iHPv10fbXC 5n55vtwL4Erzir9/vefsZ2h32AxjToClN3WPlK+91vtOGzomHOA5jTKPZ6dXoO7p0KGz+bvN3+pm D1bc/85EOTNbfSb2tGvzKY0Aawj4EpIrKMjYcWYHm4eA37KF/PBJx/y4bt16xoYz5vu+ZFjckA8u FocOHVLOGib4yJbNm/U91D8vV4C9yXq5Avz+90w4EYjuvxL3iMaNX9WHAcf+PvI3b+ZyMeFGtogy hsmyfpYFRiSBcwGuBBRFdyZYGbCzgmsM5aJITKnwcAV/yx1hd2dwpRg2bKgpKbvg34mryJIli4TH 5PnAJKdQof/JjmN7ddt46OH4RTB94xUWBwiT+DzCcwBPGLjaSRQTDfohd+48SawLvfnYz+wg0d6v ZSfcKyzSrGAqHq6uhAH3C8owrOc+GDrEMAlijPBQZ0ecHTV46bCACSZMcjBVj4V48SNPXNWwNGGy Eu0Y9uZBnbx9EK6OefPGW5KtWrkysDBnjLH7z8LpeYkw5eTMRKBcXBYzZroslA79a7JkTmfKFYu3 4I2ERmlRmPEbWr58udzHj6qiolSpMkkuY6y/3q61KOHjd665H9n76b/4o4UQqwwKnSLEhZ7DbMpg JbBFlFQs5i+88CJ1IycJShvcN5DLs8Xfu/VLKvyzFANY+sKR5hesa09Etv/6q14OVxYvv/wqvF0V KlY0m37YaGbPmqlumLhiXn311WI51yqgXPFfx3csBrFSAkskW7b4Z6x+kX8sJFH8WCztce/72QmK PY7ZuuI+FUqSW9e4uOLqgsgzaO+ePbrAZWNlVa0asgG03GwV113us3cI11FKJdJ4fF4sG7p366JW ZFiS8ezACqxNm3YaIZznYq9ePdQ9FWoD3LzuuOMOxY+x6Bdciv0CR2wkySCLRhRmXsFKTQa8Hvo1 YazgahtM9gn/T0qE5z19Cs5O0iYC3Jt5pabwuwg130pOudHUNZo0kcrENTOcxKIMf/4YDvAKJ6lR Lgoua/0cruxw5zJnzqxULN40J5Iva5hwwnP9ROscLv+0cM4pzNJCL7k6OgRCIICCDLdMdgful937 YJOo28TEmYcnyozzZAcVt4YJ4p7CTrzfJTNEMXoYhcikSRPMW0KWi+vn0mVLNAphuGtwG8XtA66A u+8upQqlge/Fm6Pb6/C/f7tfH/XrV54VUdz069fb3HJLYZ0Y2kgtLEC4abOrzk4w1kwXi5UCpPnv ibtpJIFzAV4dOCTAq9DNhdRNaIbw27zw4suRLo94Hu4IXH/gjsAChMXqkMGDdAGEmTx1/2j+PCHK 3G8eSbAQmT59qi46iogVgpWF4iLSWzhVULLhrgEfC4onFGaYiVNf3EXY7eNhP2RIvCn7E0/WtVmE feeher+EQWc8QApereqDuviAr8IKu0zR1NWm5x13HeoDv1Cc1FePSV/ZY5bnTE/4/mGhh0vZRx/N l93/Qr6zyfuK+Th1QLk4RkiV2c19WXZJkWjHcLg+CLbosjVEIV2w4A26SINnBxchxu3MmdODRq2y 17n30x+Byy/NaMb1yWm+XHtYN0fOEaVZNEIgFSazS8QtE+Ur92zcziAD9wr3QH4/8DrVkXsdlizw mXkjf3nTh/0cRLEQLn2Txg3VfQf3Gqx6uMfgAsn9ELG76MndpAn3WwtWH9wsETiEcKP0S8YgyhF/ mnDfL0pQPj3zzLPKj+ZPy32MhQzclC+88LK6o+OGOH/+XCHNfkvu1cP8lwS+Hzp8SJ8FOXPm0mMH 9se7JNkEWM8RWOUC2fGPRqy1KxZ/jJdggptlcuqK4o9nAxtPP/+yTZ/FWNthmQj/jT5XE+75wcqL xTHur+8PHa5cbCjMeD7icj916hSNJM0CF8UevH+lS69Ua+wKFSrFouhk5cFYYRMK1107Lr0ZeK1+ vMcjfcbi4/vvd0ZK5s47BBwCDgGHQAwRSB/DvFxWDgGHwElCwPrZY7WFYgUpI0osK+kziL++/CEo WiBi3rp1q4G/q/lrTUV5k0knuTYfe106Wej4xaZBOQdnBhPj1ySPr778MsChYa9JL4o5bx5wBbD7 C1cAEc+IVmXra/PF/x5lE1HXGjzztOnVs4fy4zRp+qpme1eJEkoMOkHckvr2jQ8EwGLkmLgnQZ7J Dn6tx2prWptn+iA8D5ZzAesHXFteFGLoL774InoOCdtIeUcB6S8DpdjLrzRSyze4I1q1bCHm8FkC 3BEsWtgdx+0G6weUVSwIW7Zqk8gV6nLhqpkt1gsWL5QwmMYj7PDAAcR1RDx74fkG6gbTWLiEcPFB /PXimJ8X4dnnntfoNriKQC6NgsgbXTXaupK3FSwDbLACFHwI4xPCasTLBaMH+Cc4InAyoFCEfPzj Zcv0GP+8Y8ketH1sv/vfsWzrIsTc9SRK3pLFiwyL2woV4xdM0YxhuzMbqg8ojzS8kHi84z9zrGu3 HmrJSdRSxvOyZUvMw2I9CAG5kzMbgSyZ05u4wueYaJVloMWYulvu8ShecPsrKRsPdux50fz6m690 w4TxjrIM8bpietOG+sxvmNePHmtTuKHgpQolKEnUald+5yVK3K3KMtJCWG+FZxACn6EVXPpea9bE 9BCSYYR7lDd62LnnnqffsaixwiZPOMGyl9f6desFo/TKIYYVM/XvKFaeXnL6cPmEOpcvX3499cmn nwTyJn8scsl/9+5dSuQNQTLug1g7vdG+o0QGLqrBDThv5cjRI/ajtvNbLGFFIWWtlQnmg4LUyscf x2NnsbTHQ71b91rcSK3Ql15X/M5i3RxNXe31vBcrdpdssCzVDbeiReMtvIvGxSlXGBbV1urbe439 7O9jezzadyzweF5NmfyhIXo0Lsi4wWF5B8+fFSzn4F/q+WY35V7i93OyhSAHCMpFxggv3KeY38BR h6BYRg7/fVjfo/lH/x88+GeAf45rcP8EF8uBFk0+Lo1DwCHgEHAIRI+AszCLHiuX0iHwnyOgO7mr Pk9UD8hfeXll2LBR3q9C1NnAPPV0fXWZgDzYz3Xl50HgYnaoV3rKwqKJcpo0baYLA3zZEW/Zfg4H dnsjcQVgFWf975kQM7Fkl94KC6BJH05TXhy7a46Chde2bVvV7BzFTP36z9pLTDB+AU6mhHMhkGnC BxarwTggmPzWrBmaO4LLa9d+XMLS19SIV1gKsFvsl5tuKqSE0bSNCTYYegWy7clTpmsfEKGNSDV2 4k26YG2/777EvBFYFnTu0k35cn7//TdV2NEuy2dAPtHUlXRe8XIi2OOdOkfm5QjGyWBdTm0+/vFo j/vfUQ7fWaSILpKx1kABYCWaMWz7Fq6iYH3g738/3ijs4MuAXwKlAXUIpuCwdXLvDoFICJQqVUYj lpGOyJbBBD4qFudYn5YUBQHu4dFY3nrz4j6SP/81Gs0PC8nLxJpt5Ijh6ioYyhoZBQ/XQK5OMIDL xJVw2bIl4kY6MpA1vFMEHZgkFsr8Pm4WK1JcGuFaY8MAwZKYiJnWyhQS9LlzZ5u+fXpphEEUhlhq RpJ6svnSrVtn5bh6pHoNfZYMHjzQbJMNo4YNG0e6POx5yN0thxabNRVkk4IIokSmZCOGTRmszAh2 ggt2nFgOwxPK5hLWpjzbrKAoPPjnQZMnb14zRgjiUWbZIApYXfft85ZuIGB1vXPnTtOzZ3d9JrMx E41gtYxL1uxZs8RqVyx9ZfMGa2QUkLYvo62rtzwUYlgnI0WKxm+GxIniDBoFJJzCzN/HekEy/oHv ZolYOkC40lC+MR9iswfLO34jVoqLUg+lMa65lYQE3zufsGlS+51IsFiQDxw4QDmgsIyfJdbGjO+X X453F7bW8/xurPt0pHqxOQgNR7u2rU3DRk1USc6m4U9icdqyZfxvKVIe7rxDwCHgEHAIJA8BpzBL Hl4utUMgzSLAYojohycqWAJZZVm0eZ17bmSuAOrHrnEw4ZyfDJR0odIHy8N7DCWUXxHlPX8in1GO hOOOQGkTqR9obyS+AO/iK6X1RQlllZDB8oimrsGuS8mxYJwMKcmHa1AI5s6dJ+Tl0YzhaPogZAEJ dciVK0u4JO6cQyAoAn4rysKFb9X7FfcWlDZeEVtH/fqgWPOuEbdmAgTAecYC3B/5KxrrU1z0Bojb ev93+qklK4oIfgu4dyLpM2TQd6/V6kuiAMCNHiUSwvPhrrvuVh5EvlPvLl27K5df//7x+aJow/KS OiJVxE2cKLtYmTZv3krD2m8Vd0IUDLy412PhPHXqZE3PP/Ll5ZUHqlZTix2siLGewvqIKHFt2r6h 91Ssc4Nd583D+9lv5YqCHLfveXPnqoKQZxuE8fXrNVDlxaO1aps9e/7QPhgu/JXe6HLefOFT7Nq1 kwYRQKmPZaC1EkZJBnUC3I+LxUoWwbIIcns2WUK1IR6LeDzYROrW/U3llmvbpqXmYSPQoZxDoq2r Jk74V1iUn9yreX7mzRtvRcUxxhuuh/YYyb3Wt3z393E045HrrNA+ov1B4QAvJMKztnqNmjqWbDqe W6VLlzZTpkw291ZI7I6ZpO8Txo93GMXjKOMr4bcVrJ78RvldJJGEjOBk6tv3HY2KiMIW4XdBVMTq 0r+IWs8PucJgPU+UWsj+Ef+Y89aZ3wFW5rQfK3ME/rvmzVuKQjY8D5Emdv8cAg4Bh4BDINkIpJMH b1IWzGRms/uPo2bAqB1m7IzjJvjJzMIldwic8gisnnKTOXT4H9kJPu4mEanSBa+/wmzYuDlSMnfe IaCLoKJFblNrivYdOjlEkokA7iitWjUXd8zuhsiCTtIWAtfkz23Wrjvufncyap8lSwaJVJXRbN8R vUuUv16n2j0e/j5v5C9/faP9jnUkipzkcC1hvYQyOhzRfDjLy0OHDqllpo38RV0JZoArY3I3aZja BosSF237I6WjXgQZoF4op/wCdyLWu/7oct77VChLWJuXtXINFk3NponmnX6hL4NtOnF9qLpGk3dy 0wTr4+TmQXpcS//555+Qm2ZPP/WE/g7GT5gcXLGVkkJTeA344kaJhZxf6GOiyrJxFa2Vmc2D3wWu x6H61aY7Fd5jdX/PKvfrzJnSm127/052s061e3WyG+AucAic4Qgk5z7C3kX2K457K50odEmf8iea o7veIeAQcAg4BJKNALvIo0aPU96zZF/sLlCeIAiWgy1KHDwOgTMFgWiseaPBIiWL8EiRzigX689Q lpfBrEyjsQYN1h7up+EsfYNdk5xj1CucFXA0VsyRLGFP1MrVtidSv0RTV5vXib4H6+OU5BnqPo+V Im6acLfh+hjUCiwlBZ7ANeHwpX4p+a1RnVhYmZ9As9ylqYAAiv7XX29jbhZqjmoPPqQlrFj+sVhL fqhUHh06dlbXau/5lFTjE4m0jot7faFrCbYZgYv1d9+vV6vWlOR/Olwz9P3BalltXeW9bbL9BN8v XM0nS7Asxcq0zuNPaJFEAcYC20oGuZ/kEBoQOBQJusZ8wElsEAhiTxybjF0uDgGHgEPAIZA8BHBn Sc1FXvJqk7ZSZ82a1VxzTYGwLqZpq0Wutg4Bh4BDwCGQHARatnhN+dTgjHv4kRrJudSldQicEggQ WRvFL4LFMAGiVq9ebbIJPySWot7zKa3wli2bNR+CtgQTyicC7YnIeOE6hAszrcqqVSvNAlG+hxL6 AX7Kkynweq5YuTxQ5KZNm7QfCajzqShBFyz4SAOhEZit+iPVDDyhTmKDgLMwiw2OLheHgEPAIeAQ cAg4BBwCDgGHQEgEiJiJJSzBQJzEHoG27d5QF1m4/k4F67LYt9DleDojgGXsxIlTApZBKEGIltuo cZMAx6H3/KmMxUxRuMGXSAApJ6mLALyGbBIgv//+u1m+fJnp0/st5bAc+sEIU6DAtalbgTMgd6cw OwM62TXRIeAQcAg4BBwCDgGHgEPgv0UAS1heTlIHgTvvLJI6GbtcHQIeBD78cKJaf9WSIB8ouRDc 9IiQC+dglfvjAzgsWDDffPnlF+aw8DPmFwv4+yRiOW7JyObNP2pQj7vuKmE+//wzs2bNt+allxqa +R/NU5c60sxIiAz82WefmiNHjuj19nxxuc5KuHJIs2PHDjNjxjSNFnzV1Vcr/5+9Ntw7XIFEZSVS 73XXXa+BKQiqEa79uCCDBdZrf/992HwgwUsqV66irscHDhzQ6LEbN27QSLa3SkAbbzu4bv36dWbZ 0iXKEYnrddVqD4V1Wya68sJFC8zuXbtMzly5NJIxrpJY4yGUj4vihRKU5KP585Rn894KFTWQirft q1d/bpZIkJW/Dv1lCv/vVg3I4j0f6TPKzbXr1moQjiKyMYKE6hd4RqdOnSJBUvJqgByb91aJdouV WGFR+N90cyF7OFnvcIiCN66bDZ55WoKP9NYAJMnKxCVOgoBTmCWBxB1wCJxZCPi5CiDlnSrRpebP n6vkzbXrPGHGjx9rataspQ+C1EDHX4fUKIPJCO2oXr2muf76gqlRRNA8t23bKpHrxhsmPFWrPWiq ycM/rYnFLlZjINb5hcMTl4bu3bsYJjA2Cl249JHOWe6KE+UQiVSOO+8QcAg4BBwCDgGHwKmHAAof 5nWFRKlhFRvffvO16SfKiQcfelgVRq81a6IKMSLbEtSBqK1jx4w2A94dpBFNN27YoNGImZei7EGe fPIpPVau3D3msmyXma+/inf5W7liuQbnQBFCBGPOo2hiPhKpnB/Ebe/555+RoGWHVemF9dGePXsi gkpAiicef0yCUWQ2x/49ZqZPm2rmzpmt9Y/U/l9/+VWjBaPkmyr8ayXvLqWBL1584VlRhG03uXPn Mbt27dRowpUq3xfgSuvfv59EBx6qyh4UP/MkmNOoUSPNiJGjg3KtzRSFItGQzznnHF2fMLckQnLR uGKml1hdgQ940Qf79u0XypMrNIgMSjSCa4EjwhqkV68eSolCtNmZM6argvLSyy6LiBMJPv54mUat vTp3blUqRuoX2obLKlGcixcvEVC6MqbGjBll3un/XlTlhkt0yy3/U5oSxqWTE0fAcZidOIYuB4dA mkbAz1XAjkjPnt3NgQMHzMWXXGJ+/eUX9ZHnPVbi5zbw1yFW5Xjzse3YIQ/rkylv9XrTjJWHMQ/s TGdnOplFp7gsf/9Y7GI1BmKdX7iGHpZJIlwT62TnL1YSCw6RWNXF5eMQSCkCLIjY0eZe7+TEETh4 8KBhg4TojU4cAg6B0xcBFFcI1l5W5skmM8I5FC6LxVqpYsXKZtr02WaCuFk2bfqa3h/eebuvvUTf M4tCatjwUebj5Z8kCiSCtVn9+s9qmg4du8jGX89E1/ElmnJ69+6p9/jBg4ea/qKI+XDydHNXibuT 5BXsQPny95qp02aaSZOmqnXb119/ZebMmaVtJH2o9vfs1dvkz3+NKr4myrUoknr27KHKMiKZjxk7 Qazn5pq4uOJmxvRpqnBis37USHEfvPZawWuyeW/gENOpU1dz2WWXmm+++SZY9VS5hLJs0odTVZE3 bvwkVYIRKAHXRCvcmzt07KTp6A+szyy/F5Zw77zT19xww41m7LiJZuCg980Hw0aqUtNeH+79008/ Mc2FMwwO4nfeeU8t2SL1C+7ibODu3LlD2hav0ELJBoE/QRhwKY+FYE34119/qbVfLPI7k/NwCrMz ufdd2x0CgkCTps304WTBWC4PmgwZMpjBQ4aaV19tbooVL66cCuzYxErgNpgy+cNAdv46BE6k8Q9H /v7b8DCNK1bM9O3X37CTlhbE3z+pMQbSAg7B6mg5Rho3bhrstDvmEDjlEGAiHlf0DtO2TctA3SAP rvpAZfPwQ1XN8GFDTcsWzcxdxVPPnS1YHQKVieEH2lHirnh3mBhmGzGrzp07mIoVypmHHnzAbNq4 MWL6UzFBrMcAm29xRW9XxUFqt3fChHFaFtExYyEna7zGoq4uj5OPAF4K+fLlUwUHGw+8cKXjGOdQ liH33FtBLal++eVnc8edd6ob4rJlS/Wc/ffc8y8oxxTz7uRKpHL+ljkoETHjZP6OQgdBwXSHRFCM JCh1Gjd5VZMRFdjOX/GWiNR+f97UY9XKFcLdmFMVYuDx+++/mXvuuVeTQlqPqyqWZ5t//NG8+25/ VSTFFSsuSqxJgXT+fPv1G6AKybNlMxpLOlxbM2WO35jGndRKibtLmtKly+pXXEZxL139+ef6/bPP PjEo6wgSQjsRsLryyqv0c7h/uI++KkEZLrnkUtPv7QGGvJFI/UKayvclKF3Fig5BGYnVHThbN189 cQL/zj4rvj24xjo5MQScS+aJ4eeudgicFAQi+btjeluo0C26izR9+lQTih+AHZVffv7ZlC5TRnaM Jpj06dKb6+ThjpUBxJwjRgwz8AGcnSmTGTdurCks/ALwrXDzL126TOABsm/fPtkVmmo2/bDJXHXl 1WIaflfgYXz06FGdRKyRiStm39cUKKAP63z58itWU6dOTsJtwA6LrYMFlAfRkiWLlHshZ85cpow8 7NilQiz3Q6lSpc23svMER8R1119vypYtb84//3xNE+kfE5wPJ000B/48IA/jCmqqzTVM8oNxTmAF xwPNiwPpCev8ww8/iKvlgzoZ4hiybdtW4WqYZrBw2is4YAL+8MPVTZYsWZSjIVLb/LwWmHB7hb4E s7JlywXlmCBtpL6wOHrLuvba65L0z/79+6IeA1hXMI7YXSwmkx0rs2fPNPtl3ISKXBaJhyLY2G3w 7PM2+8A75cO5sebbb03W87Oa2267I3DO+yGl/fzAA9UCHCOWe4PFFS7MjGMmOsWK3aU7hJZDg3JD leetk/vsEEgtBG644Qbd7bf5jxwxXO8PrVu30wUMO9vXF4ydqzoT/yefqG0eeaSmqfP4E1qsvw62 LrF8P3bsX21XLPOMlNfP27bpBtAddxQx9wt3Ua4rr4x0yX9+Plj/XHnV1TEdA8f+iVck/CvP2tQW 7sFWcRGrsk7GeI1VXV0+Jx+BSpWqmD59epmvvop3m8St8tGaj2lFmP8hL7+UdI7CccjwrTAPT6lE Koe1AL8NrJZOVFCSoUTbKXxoSLj2+8tCQcbv82dZf1SrGq8o8qbZJvdQ5PnnXzQdO7U37w8ZpK+s wgd3X5Uqamlnud+81x0SvrFu3boYXFaZ7zL/ssomr6WvHPVepvPwo0eP6DHqhKDMS64wB0dwPcVa zK4/IvUL/Z9blINYtTE3fKVhYzNfFGfUvVKlysmtRsj023ds1yAoV1yRPWQadyI6BJzCLDqcXCqH wH+KwAUXXBjR350bdyR+gDmzZ5mFCz8SF8FRqoi6RkhIt2zZIsqQhaowg6Ng9+5dQtT5t/IOcPPP el5W5QC4WibT7LigZHlBeAj2/PGHKSiLsI+XLVNz5ubNW5n7H6iqfArsoF12WTZz5VVXmU9GrDRv 9+tjWrVuq2bcixYuTMJtQL1sHQAaZV6P7t3k4ZPV5BVF22JRDg19f7B5/Y0OplSpMsZyP4wbO9r8 8ccefdChiOvTu5eZOWuePgzDdRgTiG5dO5vJkyfJgq6GKss4Fo4LgvNwIfwhZt483BCOde/WVSYC /ySJBARPA657yMZNGwO7aSiOommbl9eibt2nlU9OM0v4Z/tyhITtDsYxwcSG9oTrC4ujt6wdMhna s+cPnQBY7gmbLpoxAJkqOLFL5lWYYVG4VSaRwRRmM2eG56Ggyba93rHrV5gxIXvpxed0l5GJCMpQ TPy9cqL9/NhjdbR9lkOEMhs3fsXgApAnT16ZUKZTnpLbZQe3b993ouIY8dbPfXYIxBoBJuG4mViB 1+/7778zFWVibq0GeBbEUlhA4Oryp/wGEX8dYlnWf53X56s/0yrUqPmobg791/WJpnx//3BNgwbP RXPpGZHmdB6vZ0QHnoRGMtd5++0+SiRPcRkyZDAcQ87Lep6+9+7zts6h9Yv9J7obOM1iIZHKuUiI 7hGvtdWJlMt8xyqFwrXfX8Z5so5AeM6wVvBLlnOz6CE8WaZMmaHcbStWLjcLPvpI53A5c+RSbjj/ dQ1feVE2p7dJFNGm5m7hSaO9EyeON2/26OZPGvJ7JjEQQMCIYAHJkdyi9HqteUvzwvMNzBtvtDXv vz9cx0GkfrH9j5VZ1y6dDAEHUJzdeuttyqOWnDqESstcHv6yq2TtxnrAyYkh4BA8Mfzc1Q6Bk4IA N7tI/u6R+AG8Fb3tttvN7NnzDeGGvQKvwI0SmvgS4S6Dd6Bq1Qe9p/Xzm292V4LSXm/1Ne+9N0R4 COaYfPnzm4EDB4il1SZV0MTFFRcz6VmiSHvXjJ/wofJ3oYxDgnEb6ImEf+x8o/jKkSOHGTf+Q81j 1OhxYq59jii5ughx6MFAcnafJk6arGWgkMOseqU8ZCPJW2+9qcqymo8+pg9a0kfiHIBTgF06LDFQ uiBYFLGrVKFCpSQPJDAeOnS4prtPOC3AkwlVtG0LxWuhGXr+heKYwOoBZVm4vrDZeMuC48LPPWHT 2fdwY4A+SK5AchoNDwX5hhq7nMO6EpN8FGmDh3wgiuGJptlrLTgVkFj38zSJdISyjGAOo8eMNyNH jTNPP13fEDEJV4hI5QUq5j6c8QjMmjXD1KnzqISE/zgRFvAgcvy3337TXXo2D2pUf0hdD2vVqq48 LvaexPvjdWrpJgWLhrJl7jbDRanOMRTZWMrWr19X72HLP16m+XLP7dvnLbUIswWzOw95cvXqD5pS JYubJk0aCnfNbHtaN17qPlnHlC5VQgidiwk/T6PAwnH79l9Nw4Yvadppct/nnK0XdbDCvbNF82am UsXyplzZkubZZ+sbr0udrROEyrQfV8s6tR8NWHTYfMK9cw/k2jatj7uj4lJUv15dbdf9VSqa9u3b CSH0Ps3m9XZtDO3y3sf4zDHO+QXXoUED4wmae77ZzbRuFX+/iaZt5Mnz5KEH70+EvS3DYtZbnofd unU2Fe4tq1jh/onlshU2wUL1BWnA0VvWY7VqJOkfmw6rQCvhxgBjFFytdQ3XYDXBMSIFBpOfftpi XhOun4oVypu7S8TpIhPLa4u1bS8bbN6xGyyvefPmGMa+HROfCfWBX06kn21dvOMVK5ann3pCxw2/ J6xgvJZC4crz1819T/sIYPWPyyDW5bz4bD0B8ue7RhuIEoaNZV5wcxFdkjkBCtlYSKRyLr/8CtlQ zSTeEV8nKo6N72gEBZmV1TK3QvLkjXftDNd+0tFGNt8RiPRxV2SNkD1H9gAmGTJmkDnTcLNhw/dq fday5WtC9D/H/E+8W5577kUz5P1hMrfOYObOPf7s0QzlH8/DTeKGWUws+pl/sW5hrcRmfnIEhRLy 9VdfBS5jncE9PJKgAMTDh+Bo33/3nXqScE2kfrH9z8YrbqA9unfV9lg3zUjlRjoPNh06vK4b348/ UTdScnc+CgScwiwKkFwSh8CpgIC9kWK2i3j93dktjsQPYNvAA6Vlq7ZKTIkCJznCw4+JKea9t98e 7+pGfr179zNv9uytCqU5cxeYLl1FqSaWarhVrl27VnbTsmqI6GjKQuHBBPpu4RywO1nZsl1uCBeP a+ratWsC2TzT4FmTPXsO/W45GSwvQSCR78MQmeQSqQjXmZdfbhg4u1jcTpFQnBM84LDGYHEJ9ojt C2uloQfD/EtO26LhtQD7UBwTV2TPbqLti2jKss2KNAaSO6bIN1oeikhjd6mEIs+YMaNGQrX1ZdfR K7Hu52UfL9XsK4tS1Mpj4t4MaSyKx0jl2Wvcu0OA3W0m3bOE49EKv7cpYj1rREfPgqBrl45mwIB3 AuP8G5EXFAAAPDxJREFU8KHDBoXaOx5F1HffrVcl2RSJTpY3Xz5ziSzsOPaLBG5h0cK4RLBcLnj9 DeasjGfpOdJY6dD+dTNo0Hsmu9zrGc8sHuBAw3WajYKWLV5TUuWqVasZNh5+FLf0Vq2amzVrvjUo 4K8tcJ1mxaIqX8ICy9aBEwQaeOLx2up2X0bcyrH03fzjD+aZ+k9pHqShvuvWrTVNmzQyLPxKCS0A Cz24tuCHjCQoc0h78M+D5qWXX9HkKD2wQt2yZbO4+txvcufOowvYevWeVJee3Hny6DNmpfDtWOEa njuc88uVua6Uul2uh1lI5r/mmqjbRp5gyoKWTadgAmajR40QnBZrfW+RjRusdbFmQCL1BWnA0VsW YyJY/5Au2jHAopSxirWiFeYhHAu20GTh/crLL4pF+lJTtGhRU/epekq8jUJq4HsDbBZaPgrewNiV Me8X3PNRTPKsIZ9s2bIF7rM2bSz62TteoV5ACcxClN8D1vMoS1FeI5HKs/Vy76cXAjz39+zZoy/v HKB2ncf1d/2u3Ku5j7KB1rlTe6WLYG4WK4lUDnOm+++vqh4ObFywuYdyhmiMkYTf7HOyiYFynPHd Xa47RyhFHnzweKT3UO0nb+b93AvYFGA98HS9ZzQgSuNGrxg2h7Coav9GO7Eim68cYNkFF6hc+vR+ Szc/2dwZNOhd9eCAg8wv+myRexn3ajwQsNJic+D9hN+kP32o70WLxqmXCVQe/Kb5reOtY101Q13n PV73yafM1VdfbYYMHihKvI2iQIuu/7E0K1mytD7Xzj33XPWg8eYb7WeifNL2Lp07at2rP1JNxxxW gJYnLtq8XLrgCDiXzOC4uKMOgVMOASb2ofzdo+UHsI3iIZoSoRx2Xm+7/fZEl1966WWyg3SZHkOh xkOHHSOEsnjwRhue2XIZYEnkFb6z84TlFA8WxMtLkCVL/LEjCbwE3mu9n3FFQtaJMo8ddKvg2bZt qx4PxzkBtwBWFyjKbhJLPB749Al9E40kp20p4bXwckzQrm9EsRdNXySnrEhjwGv5EA0mpImWh4K0 4cbuLz9vkx3eS9RajbTB5ET7mfHvFTse4dCzAtcGXHBINOXBE+jEIYDLO0ozLKpQCJ0lO88sBv6S 3e4KMvH9URRKWGyxqz18xGgFDGvKB+6vLJsAo0yNGo8GLBxwTRkwYJDyPjJm35CFCZJXlDoNX2ms Cww2GXBl8QsTflzHWUj07NVHLQXgaIR7ZsiQgQZ3YzZNsOotXPhWvRz3a6xvWORwT2zw7HNqFcBx 6uj/3aAEgvS5RcvWpkqVBzSPMmXKmcceq2EG9H9bg6TYerVo2SoQlQ1eQKyVt4i1klX82XTed9rQ RFyluR9AxmyfT3379da64KJqLQuwZsItnQUTfJaUj9VWyZLxyvaFixYoBpzzC26tRCFDcVWrVm21 NkABFG3b2PAIZsntLYdn53vvDQ7wEO3audMsXPCRKMJ+VkVYpL6weXnL4tq5c2er2zz945dIY8AS aPuvC/X9Z7k3I9Wr1zQvvPiyfoY3lTHFmPGKd+x6j9vP78n8gntm//4DA3OB3m/1NKNHj7RJZPzE tp/f7tdXFSCDBg9VxTUFoSycNGmCcPQ9GbG8SH0cqLj7kKYQ4P7GeEX4bIWN3H4S6KlTpw46Z+Q4 HgpsLjwqL6+k883H06WTma28kHRC8eAX7/loynn2uedlo3eXWST3saWieGfjpUyZsqrI8udtv0Mt gRw9etQ0SrAWZuO6lzwPLrroOJ8ubT7//AtkHp0+Ufu5FoqWL79crZsWzZu3EkXbw5ofc2isdbEc u/HGG03rNu0Cz5HWbV43RBFlwwbh3la9Rs1Em6B6Qv6Bw8vyLOsnv/W2bePdPMG4ePESuhHjTWfb Y48xj0yXwB3HM6WbRCBt0fxVtRolDQYBPCvZ2AkllG/z5VndvEVr82yDeqoExHsn2v7nGcK9uGy5 8nqPCVUex8HMjg2+28+sjRCs1XLmzKUWeg899IgaGugJ9++EEXAKsxOG0GXgEDh5CITyd9+9e7dW IhI/wInW1Prd4xsfTJhkNxPerNy5c+uCp2DBG3RCy0ME/qpoJFCGzxx6x87tejnn/YuvaPK1abBk YIKju8NDh5inZIcaiYZzgEk6HAMLFsw3d8tiCtyfEve7aCW120Y9UE6eL9xzseiLYO0KtCHEGAhc 41MsBY4H+RALHgqyhcsNTj6UdpaXwl9crPsZPDZv/ktdc2yEJG+Z0ZTnTe8+n9kIVKhQSXbyu5hV YpFQvPhdZtHCBTpJLi/KmuXLl+nvG0XRMrGmtHKtuPrgevi9WCMVESUXQrALGyTFpov2HSsx7rFV xArXTshZJC1ctCyQBYqP3btZhC1U5RDBZBCIr6MRymByX6nSfYHkWD7deNNN5ls5Z4WFjddy4/rr CqrCDC7JUMI9kI0P3OXeFlqAK664QpPiZrNp40blvPxJ7hO8EGvxQZ1QbOAOhCUUFlMInzlm89GD Yf4lp23RKFL+d0s8HYAtspC4AGHlvFHaQj9E0xfgGE1ZtoxIYwC3suQIyuBJH05VF61Vq1bqONmz d485+s9RXcx78wo3dulD3LqwBLcbZ1ybw0PYHYt+9s4xUIxh2ciCFmWDFZQHSLTl2evc++mDABbt s4TeJJjcdHMhpWnYu3evjJE/A94QNi3jiZdXuN+uWBnv+shxXA15WfGf53ikcs45J4vp3KWbKn9Q 5PNbJJ+ONtMg7x07dQ2cZ57LnCoYKT5rAdpWs2YttXr2ZoVSDoXaX38dVGtm7kGkY2Nnh5DRs8nN XNUrzK+h08CVlQ3tXGLBG07Y9Bk2bJR4sGzX54l1ifVe48XTHodSxisFClxrJkycovmgQPP+zr3p 7Odg/XCL3Je9ZUXqF5vXj3I/Qx6QgFKRZMHC48990j4uynpeTlIfAacwS32MXQkOgZghgL97r549 Av7uL74U72bi5wewO0C4FAwbNtSwU547d54Trge79CiNvpKolF6lBObAX339pVo+8JCrW7dewGWT 7/skyqJXeNjgahRM2NVBVq1cmegBwnckT968Gj5av6TgX2FZ+BDdEM6J94cMUtdPFqBwDsBhwIP6 zoQH11HZXYOQE+ULyj8EpWW7tq21D1jw0SfRSmq0jcUhExHEyzHB52j6Iljdw/VPpDHQqFFTVUj+ 9NNPgaxZUODKGkwsDwUWC96JYXJ5KMj7SolOh+sRLzjnEBZXXol1P+cRNy0Wr7hc2Mkv5cPjA79c tOV56+g+n7kIMIZ69eqhFk5FihRV95A77rhDJ/Dbf/1VgcGdhZdffhXusFjIDll8IJdni1c0+fPk 3v16u9ZSxwV6CkUx90jkX3xHoxAWOCxuMmTIkCg1Vgzchy2nWKKT8oXFDBKpFHv95A8nmVebNddr 4FZDcLWBk80vv4pLIoI1H/dPy4t14MABPeZPH+p7StsWKj//8WsLXKuHUFjGoi/8+fM90hgIdk2k YxMmjFPrPfBE2YVlyj5RJpwv4ydasX2I5WAosWli1c8WC1w/g0m05QW71h07/RHg/hhsMy3WLY9U Dpt7dsMzOWWzvvAL91f4JnFBJDJxNY+bpjct1vb+6JbML7EcCyeWaiVcGu+5aDczvNcE+xyrfLx5 h+qXbWJEgHXtkCGD1SobDxEnpy4CTmF26vaNq5lDIAkCPOxKliyt5rtMOEuVKhNIAz8AriXwAzz8 SHVdwAwZPEgtjTCFjpXgfgApLybQ7BSx84pJ9C2yCw7vGJwN48aNEYutrOqqMkFcXdjV97pkwm2A UgFug0KFCiWqGqbQKKfgEYDL5JZCt5ily5Zo+rtK3K1m0j8I0eeJCLuCLVq2MfWeflLNpyEWhXNg xoxpWn921ArJ7iBuSTNkJ926kFAm+J97bhdtNwqR5ExAYt02lGVwTNAn6WUS4uWYgFeDiUmkvgiG Y7j+IX24McDOXJzsKsIpQf9lk2ipI0cN10hG3jFgy/XzUFwmixIsOrzuNTZtpPeqshMLMXnHDm+Y evJ7+FN2Pvv1jbcCsNfGup9rSdRMxsjb4kaAWT4KAFwOtmzZbF55pZEpUKBAVOPK1s+9n9kIMLmO iysurjNLTOnSK9VKqkKFSgrKRaJgQp555lnls9Ivnn/8bmMhFya4GPk3OmzeuMRx74bouI7cNwm+ 8rtYfFWsUM4mifh+4YUXSqTOpEr0A2IVxv05OfdVf2Hc97inE5zkQyHZLn/PveoqaV2nIODu1u1N /2VSbrwyDuV9925dAgpBNkaS44KYmm2j0mxWISiNYtEXmpnvX6QxYJN7LbHssWDvPO/hToLKoFWr tgHrx+RYn5OvHRdbxSU3lMS6ny0WB/YfCFpktOUFvdgddAikQQTYiLSums+/8FIS67k02KSTXmW4 lKECIOBVS1mPODm1EXAKs1O7f1ztHAJJEMDCKZi/O0oxLKLC8QNYf3tvpvHH0gUOoXjxcyroSTmO wL/AhH2YRLfCXQjLAsyiXxICfThh6tZ9WhYpk9QlhoVL0aLF1ATcTvLJw89t4K0D13Tt1sN06the uQyYkGNBVbZsebEUeI3LAxKsnpH4uOw18Ow89PAjBuu4UWINxOIvGs4BdstYPMF3Q1+Ek/SiPEEs D8WJti1YWfS5nbh4OSawMoymL+LrF2+hZvP39w/KWZUoxgDpqj9S0+wUU30Inek/FLvwzf3hj14k +YFJNDwUwcZufKWO/8ckvknTZkp+ikKXhTdtgeDWjotoOD/IkX7G2geCbX8/U2deCGMenifGa7NX G+sx+Muat2hlLhNlIRLNuNKE7p9DQBCoULGicrAQdRGSZdy/kXz58uv7J8IT+aTcZ61gzUiEvsaN myp/iT2e0vc8efLqpSiusXJDcE9s3aq5coF9v+E7VQyjuOM3hvhdMblnI6EsiSnjS7FU5sXvFtkv lshfibUm5Mn2ej2RzH/8NrEafq1ZC+VE69ypvRkxYoxy73BfXL9uvfx+0wfcbnA/hJi7pAQI4X7B /Q6SaWtBx+fAPTCKusS6bX5ezk8/i48ISTmjZDMCJX24vghWZYtvuP7hulBj4LaEoD9bNm8OcBdt 2rghWFF67NtvvtF3NtmsqzDPLjZ2kiNYOHNvps+8sjGBM5Vj9HEs+5lNHRTZq1at0DmWHfPDhw01 q8VCpGXL1lGV562v++wQSMsI8Czq2LGLRv7ExdNJ8hGoKryguKByL7UbAcnPxV1xshBwCrOThbQr xyEQIwRQTq1c9XmS3JgAR+IHgJfAL/5jECR7BaWBdTXjOJPzp5+ur8oYiIPtBNZeU69+A+X12iou edkuvzwoAbuf24BFildQNMAxAPcB7i0QeVqXH9L568QxHjjBcOEcEuwa3Ad5WYmac+DHH5TPwR+Y wOZj3+Fn8NcpJW2z+fnf6XNIiENxTETqi2CYUIa/fygnOWOA8Ol9hfCWemGd4eep8JcbDQ+Ff5z6 sbDfITqtWvVBs23rVuUmYtw0bZpY0RptP0NUy8srLMa9PBWco/6Tp0xXTifvQtxeF215Nr17P7MR KF7sLrXawqWMQCPWpQU3YybYRANDIVzh3ooG12dI6i+88KKY7fJTBhsKkyZNUKXvzWIFjAsofGUt W7VRRRNuk1hVlhRlHtYGWDp5xVq7fSrKvU/EXZk8vVLrsdq66YB7e8NGTYTPJou69xDgoM7jdb1J U/wZxQwRDXG9HyyvBg2eU8vTbt06iyX2y+aR6jUU28HiVsT9omHDeIU3BWLVZ6Mg8zk5Euu2LRbc e/XqoRs1WGrNnTNHaQVQLBYtEqcurOH6Iljd/f3jf5ZFGgPwpfJcmDJlko6HneJy74126S+TKNfc O70Wz3z+UZ6lwSyP/dfb75TJfAHrDIj+S5S4W4IBzZV6TLZJ9B0L41j2sxL7SxQ6oq7WEB6mLWJB PFAsiaF4YA4UbXmJKum+OATSKAJQsxDd2EnKEcibN596zKQ8B3flyUTAKcxOJtquLIfASUCASWkk foBYVIOJayhCTs7ZXeRQZbEItAvBUGkgK7XWDqHSpMbxUJwDWEMsWDBfuRteFos62plSiWXbgnFM 2HpF0xc2rfc9mv4JNwbIK1y9vGXZz7Hij0CpG2n8UWaofrb1Se47C6dwEuvywpXlzqVdBHDtRWk9 efIkc69PWYPiuEePrmbe3Lnq9ozlUzEJDlC/XgPdzMCik2cAL694j/ktX0nnt/Lt0rW7Wk327x9v Jcpv+eGHqytJPxxUa0RxM1E4qYh2iVIa8n4UbNaSkw0MQtrPnjXTvPSiRMyctzBRvXh2+C0zIYHG Su4ecaE8Xif9GPhnrXUDB3wf/JaoTz75lGA1x4wQ9/B7hSj+garVzOG/D6sl9huvt5V2x0dqa9P2 jUDUTLLEso7fK+etlZ2vqMBXf51S2rZAhr4PPM/niqs5SiKE+uDWiDwoGwSR+sKPCdf5+2fe/EXJ GgPc+5s0aWbGSHRWlLc8Lx6rXUeUnoMCY4ByVGQscj8mwM6kSROTWJ8fOnTIpkw0RgIHfR9QfO7c sVPLxnUfGgB+L7gJW0lOP2ONhvj72fubwTLuL4mGimX94sWLElnWc2205ZHWiUPAIeAQcAikLQTS yeQqEndqxBbt/uOoGTBqhxk747eIaV0Ch0BaRWD1lJvMocP/iNvI0aibUPD6K8yGjZujTu8SntoI VKxQXiPCwcPSf8DAgDvSf1Hr5q+9KhP3hWb5ik//i+JdmQ6BmCJwTf7cZu26eLL5mGYcJrMsWTKY 87NmNNt3xHNChUka8tR/dY/HlQ6ycaxvrYtYyEqewAmsfAnMkTNnriRKOKIH/vHH71qHUJsHRIjj HBYJoWT37l3m8KHDJnuOHJo2VLpYHmfqGypSG+Vg3Vf9kWpqtQ1HT0rlRNpGHYsWuU0Dy7z+Rgfh gdwqSrwLVZHnr080feG/hu/R9E+4MUAe1AulXjTjEN7NcNbn5BetoLj1Rv0Ldl2kfg52Tbhj1D+Y Zb29Jtbl2XzT+nus7u9Z5X6dOVN6s2t38KBR4XD6r+7V4erkzjkEHALRI5Cc+wh7htmvyBx95hFS OguzCAC50w4Bh4BDwCLQunVbc7ZYU+AaFWqBaNOm9nujxk1M3aeeTu1iXP4OAYfAKYgArs7w56W2 YAmbK1eWoMVg3cYrnGClFUkiWWZGuj4l57EeCmaJvV+CDhD1FjfOcNHfoi0zVm3jeROuv6Ppi2B1 jqZ/wo0B8gxlaR6sPNoRjfVvsGv9x7CS4xVOQvVzuGvCnaP+4dob6/LC1cWdcwg4BBwCDoGTg4BT mJ0cnF0pDgGHwGmAQNG4YqdMK+BCs6Typ0ylXEUcAg4Bh0AaRmDTpo3Kb0YTXPS3NNyRruoOAYeA Q8Ah4BCIEQJOYRYjIF02DgGHgEPAIeAQcAg4BBwCaReBUyn6G9ZKI0aOESuq0O6saRdpV3OHgEPA IeAQcAikDQScwixt9JOrpUPAIeAQcAg4BBwCDgGHQCoicKpFf8uf/5pUbK3L2iHgEHAIOAQcAg6B SAikPMRbpJzdeYeAQ8Ah4BBwCDgEHAIOAYeAQ8Ah4BBwCDgEHAIOAYdAGkTAKczSYKe5KjsEHAIO AYeAQ8Ah4BBwCDgEHAIOAYeAQ8Ah4BBwCKQeAk5hlnrYupwdAg4Bh4BDwCHgEHAIOAQcAg4Bh4BD wCHgEHAIOATSIAJOYZYGO81V2SHgEHAIOAQcAg4Bh4BDwCHgEHAIOAQcAg4Bh4BDIPUQcAqz1MPW 5ewQcAg4BBwCDgGHgEPAIeAQcAg4BBwCpxkCAwa8Y9q1a22Gvj84aMs++WSVnifNnj17gqZJzYPb tm01vd/qaWo/VtNMmjQhNYtyeccQgT///FPHzezZM2OYa/Cs/v33Xy1r0sTg4yPS+eC5nn5HncLs 9OtT1yKHgEPAIeAQcAg4BBwCDgGHgEPAIeAQSCUEln+8zMyeNdMMGTLI/PXXwSSljB8/Vs+T5s8D B5KcT+0Db/V604wdO8ZceOGFJtPZmU64uP3795m3+/UxK1csP+G8XAahETh8+LCOm3Xr1oZOFMMz jM8vvlitOQbrY+/5GBabprLKmKZq6yrrEHAIOAQcAg4Bh4BDwCHgEHAIOAQcAg6BUwCBv//+23y8 bJkpW658oDYo0FatXBH4frI/HJE6ffrpJyauWDHTo0evmBS/f/9+M3z4ByZ9+vSmSNG4mOTpMvlv EUiXLp2ZOHGKOffcc7Uiro+D94dTmAXHxR11CDgEHAIOAYeAQ8Ah4BBwCDgEHAIOAYdAUATy5Mlr du/eZRYu/CiRwmzZsqUGRdrNhQqZr7/6KtG1a9esMQsXLTC7d+0yOXPlMrfeepu58cabzFlnnaXp PvjgfZMvbz5z4UUXmY/mzzNnn322ubdCRUNZyKZNGw35ly1TTq/n2F9//WXGjRtjCl5f0GTPkcNM nz7NYKm0V1xBye/hh6trPh99NN+s+fYbdRG9pkABExdXzOTLl58sVHDBmz9/rvnmm68NypRixe4y //tfYc3fuu19LeemTP7QVL6vihkxYpjJn/8aSVfcZmFwJdy/b595+JEaZvPmH83ixYvMXXeVMJ9/ /plZs+Zb89JLDc3FF19sNmz43ixauMD8+uuvJteVV5oypcuaq3Pn1nzCXRcoSD4sWrTQ/PLzz6Z0 mTLqdpo+XXrT4NnnNcmCBfPNl19+YQ4fOmTyX1PA3Hff/SZz5sx6jnauX7/OLFu6xGzf/qvJnj2H qVrtIXPJJZfoefLduvUnU7ZsOTNt2hSzc+dOc91115v7qzxgzpL+sEIeS5YsMjt27DA5c+YK2oZS pUqbb7/5Ruty3fXXS57lzfnnn2+zMP/884+Wsebbb03W87Oa2267I3COD5Hq6k28ZcsWwWSBuemm m03hwrfqqe+//86sEKvAcqLQzZEjpx6j3Zt+2GSqVLnfzP9ono63mwvdYvx9XOX+BwLZfyvjJth4 DCQ4jT84hdlp3LmuaacGAtfkz31qVMTVwiHgEHAIOARijoC7x8ccUpehQ8Ah4BD4TxD4Y+8/Zvzs /Wbnb0dNtfJZTcH84V0ZUXKVuLukWSCKKBRUmTLFp1+4YIEoRS4wt4vyw6swmzlzunnj9bbmnHPO Mddee50qkAYNfNcUFcVVr159VDnS/51+6ka5b99+c8UVV6hCDqVX+w6dROlxj/lu/XpDmmtECYTC DUFhxrHqNWqKcupudenj+EZRrv3++2/mnnvuNT26d1VF22WXZTNXXnWV+WTESnWxbNW6ralcuYo5 duyYadz4FbNi+ceqnEufPp0ZO2a0uf2OO03z5i3NvHlzyNKsT3AVRIlHmZUq35dIYYYybavwp6Ew 27hhg6bBPRUFIVK37tNm+fJlpkvnjtpeFHazZs1QLrjX3+hgSpUqE/I6FG1emTN7liorx44dpUor MHmmwXPmtWZNVFGHO+p5551npkyZrG0Z8O4gc+mll5r+/fuZYR8MNblyXanKu3nz5ppRo0aaESNH q1LJ5jtCLOoyZcpsjv17zEyfNtXMnTPbkAdWdvDC9ejeTfo5q8krbVgsSjb47PxtGDd2tPnjjz2i UMtppk6dbPr07mVmzppnsmTJopi/9OJzqky84YYbzYE/D5hRI0d4mxixrt7E55yTWfFGgWkVZhPG j9Nyjx49ap56qp4mh38PjrsaNR7V9IyrvPnyJeljqzD79NNVBmVrsPHoLf90/ewUZqdrz7p2nRII rF23/ZSoh6uEQ8Ah4BBwCMQeAXePjz2mLkeHgEPAIfBfITBo/F4za0k839jqNYfM2N45zVkZ04Wt DpZeM8SiCyuekiVLmUNi0YRCCCWEtRqzGYwZM0qVZZM+nGouuihe+dO6VQtVVPz+++9y7CJNevDg QdOhYydTWqyu9u7daypXuketqcgzktx22+1m6NDh5t57y5r7RBHWqHFT8/O2baosi4srbnr26q1Z /L+9OwGPokgbOP5OEshBBuROOJQbAQ9cBERwFQ8UPHZV1EVBd/f5dFcFwRNX3UVFWMCTQwTBCwVE BEUBQQFBBPHiEAGfBRQkhIQkQAxHQq6v3go9TkKOCcnAZOZfz5NMT3d1d9Wv2+i++1aVzld1U9/r bSBIA2YffzTPBstuMJlWjwz9l62jwbypU181wZUEeWXSFLnh+uvkZhMIu/uegTZAWFZbnONRJug0 7e0ZNptNF0B44fnnbP/ffOsdm9Wl7Rsw4FYZM3qUdO3azTlNvM8LDw/37C+6oX0eNGiIydCqKQsX zLfBsj59rpF/PfaEfQZz3p8tzz47Sia+PN72TYNSbdq2lWnTZthLacbV+PEvmcy6jZ4sLD3Qq9dV 8uBDj9hswWfHjLKZYIsXf2KywDrbwFcjk833+hvTbMbY3r3J0v+2fsf1we2uKVNfe9Nmsc2f/5E8 M/wpWbNmtX22+l0z7zQr7q9//bttywcfzJHRo0babX2XfG2rntCgQUPbrx9+2GCDcZoluGrVSnut VSYrUQNm+tx/NtllPXr80WYd2oPml2afFX3Gmt2mpSLvo71AFf/FpP9V/AHSfAQQQAABBBBAAAEE EEAAgYoJ/G/HUc8FDmTkSVJKjud7SRuagaVBER2WqUUnxddAx2VmOF/RMmHCJPl4/iITqIiUn7dv t8GSyKiCrLQ9exI91TVrTYNlWmrVqmWHA679/nvP8fJuxMXHy+JPl8mo0c/ajDUdSrh582aTfeW2 QxL1el8eC6xo8Mwp/QfcIW9Nm26HXTr7TuTznnsHSps2bUWDXt+ZudUOHz5kg4tZWZmSmLhbXCab Tedb279/n2nXJs8tvM/z7Cyyodlejz8xzA5h1euvWLHc1rjyqt6SkrLXXr9L14JnpENZdVhms2bN Zccvv8jkya/Y4acXmoysWe/NtZl4zuX1uhos06LDYjWTTst3331rn5s+44vNc3KGV2qwqmvXC47r wz/+ebcNlum5Xcy7osV5litNoC4iIkJuuaWf3a+/Lr64p2fb17Z6TjAbF5lAmM5Ftm3bVjvsNC0t zWYM6iICGpTdYIYIazZhj4su8j6t1O3Kfh9LvVkAHiTDLAAfCk1CAAEEEEAAAQQQQAABBBA4eQLX 9oyVsdP2maGCIn/oECVN4wvmFSutBRrw0MwyDZhlZ2fLsmVLbZCrc+cunuGLzvmZmUdkjMlU0qCa DpHTDCD90aJzWTnF7HU27acO38vJyS60rzxfNJC00WQdaYBI5w7TogEhDZzUq1/fftcsL538XefZ cooGbHToqBYNbJ1o0bnFnJKwO8Fu6jBN/SlanHbofu/zitbz/q59cUpCwi67Ofi+grnMnP3OpwaT 7r13kIwYOVzeMCuc6o8GPK+97jq56667PfOcOfWdz3Zmfji9z14zX5lm3GnRTDPvot916Kp3H7yf ZUxMweT62ceeZaKxqFOnrs069L6O93Z529rDzBf32mtTZIOZvy3dzCXnBP4G3vtPm222c8cOz/x0 3vcpbdu7D1qvou9jafcKxGMEzALxqdAmBBBAAAEEEEAAAQQQQACBkyZw3WWx0umsKDuHWcd2BRPE +3Lzyy673A7X02FvdkJ+k12mQaqi5f4hg2ywRYdJaiaRDsGcM2e2PP/cmKJVK/X7djOX2VAzr1ez Zs1k/IRXpH37DjY4dvc/77TzjenNdK6vHTuO2OwkzWrzuRwbtudrfbfJatPS79b+csXlvY47TRcA +ObrNcft93VHrDvWVh077mVx7uU518QhtZ86Z9y8eQvM/HLr5SszPHLZ0qV26GPjRk3kxr43eaoX 3dAAo2aU6TW0JJthmN4leW/BVDx63BnO6H286LbOj6YT9XvPf1e0TnnbqosT6Dxt69atMwsqJNoF JTSQ17BhQ7Oa60qTdZci7dq3t0NhfWlj0faE4vffw7Gh2Hv6jAACCCCAAAIIIIAAAggggIARaNww Qs5rH2WycHznON9kk+kk/889N9oONyxuOKYOjdtuhmF2736R6DxhuiKjZv8c2L/f9xuZmg3NQgBa du7cYT/ttlmNsrSy1syTpRlsf//7naKZb5pJpt9/M/NZOaV58+Y24+zbb752dtnhkY8//qgd5uhk cR01WXRadJiiBvx+/fVXT32d60qHQZZWdHJ5LdtMplv7Dh08PzpkcPqMt+0Km6WdX9axVi1b2yoa LHKur/OV6dxgOr9ZYmKiaJ80E+w8s5LkPfcMsvOQhYWFy6efLip0eQ2QOUUNtTRv0VJamB8tX68p HNhzvjdv0cIeL+tXUxMc1ExD72GoOr+YU3abFUB9batzjmYsdu9xkQncfmGHZOpwUy363q1a9aWo sw7bLK4UfcbF1QnFfWSYheJTp88IIIAAAggggAACCCCAAAIVFnCGZeoqiJqdVXSont5AV3hsaYJF a9Z8JboKY/0GDWzGz8yZ08t1/44dzzNDCN3y4YdzpY5ZOCA1LVVeNUMtSysa0NNAynvvvSux5lxd VfN9Mxxy+7ZtniGZt/W/XRaYgNLLZmL8aiYYphlyOum/BuaGDHnADBuMsbfQOci+MUE17aMGY7Qv b5vVJBuY1Tc14KXDFZ1hnsW1Sc/TQJXOBaYrhvYyK3j+arKsdNJ9Hf4ZbybS16DOiZYBt99h+vGx TDYrQaampsq555wrixYttH0bOGiwmU8sXjb9uFHWrV1rg1WNGzexw2nz8nLtiqfOfTVYds/dd8nt d/zNDA11mUUDRku0GRp74419zSqmtW2W3sqVK2zfO57bUVaaAJUGvi7648U2oKZz1JVVrjeB08Vm 5c0Rzzwtd975Dzlk5nabMH6c5zRf2+o54diGBsR0tVItumKmFn1WurKnFg2oFVd0TjstzjPu1On8 4qqF3D4CZiH3yOkwAggggAACCCCAAAIIIIDAiQo4c48552tWmQbMLul5qQ026X6XySCzxQRctP7g IQ/KhAljZdiwJ+xuXZlQVyv84ovlBfXMb60XZibB9y6a+eM6Ng+YBrIGDhws77wzzV5H5xm7rf8A ef21qZ45v8JMHS06mb6W5s1bmOyy/zNZVnNF5/bSe3Tr1l2aNj3ds9rl6aefYVbQHCcjRwyXoY88 aM/TAJauNFnfBMO0XNW7jyz6ZKHcN+ge+WzJcrnl5n52Tq9XJk6wQxB79rzMzL7mMhPfF86a8zjY q4j8979jbDbeIhNsW7hwvs140yDOwIH32ay7Y9V+93N2FPks6qSH4+MbGeNXZOTIZ2zAT/epsw4B vdX8qOW///OUXTFTV6zUEhcXL7f8pV+hyfd1v2Z/PXD/fbppV6B80fg4q5uOHvOctdKVN3Voo173 8st7mVU4H7X1nV9F+677nbnZNPj50MNDZfy4l+yz1MDrn/58veiqnlqnPG117qefuhBFZGSkCd6e Jq1bt7GHNFDpZAXqAgxO0XdBf7ToUFLvZ/zpZ5/bY0Wdvd9H5zrB/OkyD7hgvdAK9DJ1f45MmpEs sxakVeAqnIpAYAusnXe2ZGblmrH9Za+YE9g9oXUIIIAAAjEx4VLTHSFJyVlgIIAAAggEuIDb/L2O igyTlNTfV7L0tcnt28XJ1m07fK3u93pJSUk2eKFZZxUpCQm7bLBHAy2+FM2a2mWGUDYw81lFR0eX eEpqaooJlITZYaNFK6Wnp9tAjma5OUUzuTQY46wY6ewv6/Po0aN2lU4NaPnah7Ku6X1c26orcmoQ rbiiwzZ1aGqTJk0LHf7Xo4+YYaify+qvvrVZajrHWOPGjQvVcb4cOXLY9CHJBuU0SHUiRduQsMs8 S5P9VtI1SmrridyvrHOKe8ZlnePv461bNZPNWwrmiCvrXhr/i4+LKquaz8d9+6fL58tREQEEEEAA AQQQQAABBBBAAAEEihOIOzYPWXHHyrOvaKCnrHM1M+iMZs3KqmYmjS9YObO4isUtCKCTzJ9I0SCb Zrb5q2hbi2uvc7+SAmnOcf0sq286VFUz+CpSNGuwrOfiS1sr0gbvc0sz864XKtvH8kRDpbv0EwEE EEAAAQQQQAABBBBAAAEEEEAAgdIFCJiV7sNRBBBAAAEEEEAAAQQQQAABBBAIAYEHHnxI3ppWvsUY QoAlZLvIkMyQffR0HAEEEEAAAQQQQAABBBBAAAEEHAFd5MBZ6MDZx2foCpBhFrrPnp4jgAACCCCA AAIIIIAAAggggAACCBQjQMCsGBR2IYAAAggggAACCCCAAAIIIIAAAgiErgABs9B99vQcAQQQQAAB BBBAAAEEEEAgwATem/WuDB/+pE+tGvvSC7Jy5Qqf6lIJAQTKJ0DArHxe1EYAAQQQQAABBBBAAAEE EEDAbwLr1q2VTxYuKPP6e/cmy8yZ0yUqKrrMulRAAIHyCxAwK78ZZyCAAAIIIIAAAggggAACCCBw SgVWr14lMTE1pGPH805pO7g5AsEqwCqZwfpk6RcCCCCAAAIIIIAAAggggEClCXzwwRw5dOiQ3Hbb AHG5XPa6+fn5Mn3621KrVi259to/2X3Lli2R9evXSVZmprRq3cbuj4qK8rRj3759smDBx5Kw61fJ yc2VTp3Olwu7dZfTatf21NGN/fv3ybx5H0rSnj1y8cWXSNcLuklY2O85L6tXrZLOnTtLtWrVZPny z2WXud4111xb6jmbN22Sz5cvk9SUFGncpIm991lnnW2v4Wv/CjWSLwgEsQABsyB+uHQNAQQQQAAB BBBAAAEEEECgcgS2bdsqc96fLeeec66cbX60/LjxB5kwfqzc2PcmE6y6Th4d+pCsWLFcTjvtNImN jbXBq1nvzpRJk6dKvXr1JCkpSf721/6Snp4uLVq0lOqR1eWzTxdLZGSkvDN9ljRs2NBeNy8vT+64 vb8cOXLYHvvww7lySc9LZdSoZ+3x7Oxs+fa7b2TI4Afs98WLPpHPP18qs9+bVeI5CxfOl6efGibR 0dHStu2ZsmnTjzJ1ymTpdmF3efHFcVJW/5yAoL0hvxAIAYHfw9Mh0Fm6iAACCCCAAAIIIIAAAggg gMCJCGhATMuSpZ95Tv9syad2W48tXDDfBsv69LlGPp6/SN6fM08efvhRSUjYJRNfHm/rLV78ickc 2y+PP/4fEyB7V15/fZo8/fQIycjIkC9WfO65rm5069ZNPlm0RD76+BPp3r2HrPlqtWRlZdk66808 Z0cOH5YLu3f3+Zx3351hg2VzP/jIBvDemz1XrrjiSvnKDO3UrLey+lfoRnxBIAQECJiFwEOmiwgg gAACCCCAAAIIIIAAAhUTaNeuvbRs2VKWLl0imgGmP8uWLbX79Jhmlmm58qrekpKyVxITd0uXrl3F 7a4pX3650h67+ea/yOJPl0mvK6+yQyg3/rDBDvPUg3uS9tg6+kuHXv7rsX9LRESE3T6/cxfJNEM8 N5usMC06f1mrVq2lfv0G9rv+KuucCRMm2UBe9eqR8vP27fL9999JZFSkPX/PnkQpq3+eG7GBQIgI MCQzRB403UQAAQQQQAABBBBAAAEEEKiYwNVXXyfjxr0oGzastxfSucBu7dffbmsmmZbB991rP4v+ 0iyyGjVqyJtvvCYfffShzTTTOmFh4bZqrpnPrKRSw0zuryU7J8d+rl79pVx8SU+7XdKvoudkZh6R MWNG2Uy1HHMdnYfNmYvNuXdp/SvpPuxHIFgFCJgF65OlXwgggAACCCCAAAIIIIAAApUqcFXvPvLy y+Nk6ZKCYZnh4eGi+7TEumPt59hxL4s71m23Pb/MGgE6p9nrr0+Vt956wy4EcOtt/aVJ4yaScfCg 9Ol9hadqWRu7d++WnTt3yoUX9iiraqHj9w8ZZIaHJsgDDz5sFhHoKbXNIgNz5syW558b46lXWv88 ldhAIEQECJiFyIOmmwgggAACCCCAAAIIIIAAAhUTqFOnjpk3rIcsOTZ3mW7rPi2tWraWHzZsEB3e 2PXPN9h9msk1etRIO3F/+/Yd5NtvvhYNsg199DE73FIr6WqY5SmaXeZ2u+WcYwsP+HJuWlqabDfD MC+99HK54Ya+nlMOmPnUvEtp/fOuxzYCoSBAwCwUnjJ9RAABBBBAAAEEEEAAAQQQqBQBnRx/5Rcr 7LWcifL1y4Db75AFCz6WyZMmSmpqql1Nc9GihWbffBk4aLCt37lLV1m/fp1MnDjeZnn9/PN2mfLq ZHvM1186f1mXrhfYOct8PUcDYTr/2po1X4muqFm/QQNZZeZVmzlz+nGXKKl/x1VkBwJBLkDALMgf MN1DAAEEEEAAAQQQQAABBBCoPAFdsbJmzVomUyzMrl7pXDk+vpFMmPCKjBz5jEydUhAEa9SosfS7 tb/can609O17s2zZslnen/2ezJj+js08u/rqa2Xu3PclzFWwJl9YmBm/WaS4ju3Lzc2RtWay/qFD HytUo7RztKLOVTZ4yIOmfWNl2LAn7Lnath49/ihffLHcfnd+ldQ/5zifCISKgCvflIp2NnV/jkya kSyzFqRV9FKcj0DACqydd7ZkZuWaJZ8LJtoM2IbSMAQQQACBMgViYsKlpjtCkpKzyqxLBQQQQACB UyvgNn+voyLDJCX1aLkb0r5dnGzdtqPc55V2gs4hdsvNN0i/frfJvQPvK7Zqenq6HD58SDSIVlw5 dOiQHYqpQStd3fJklqSkJKlevbpnKGnRe/vSv6Ln8B0Bfwm0btVMNm9J8unyJi4s8XFRPtX1pRIZ Zr4oUQcBBBBAAAEEEEAAAQQQQCCkBX777Tf58ceN8vprUyQvL19uuPH3ucCKwtSqVUv0p6Siq2Xq z6kocXFxxd62PP0r9gLsRCDIBAiYBdkDpTsIIIAAAggggAACCCCAAAKVL6DzjT1wf0FGmWaWlZQ9 Vvl3PjlXDPb+nRxF7hJMAgTMgulp0hcEEEAAAQQQQAABBBBAAAG/CLRs2UpGjBglbdq2laZNT/fL PU7lRYO9f6fSlntXTQECZlXzudFqBBBAAAEEEEAAAQQQQACBkyjgdrvlssuvOIl3PLm3Cvb+nVxN 7hYMAid3dsFgEKMPCCCAAAIIIIAAAggggAACCCCAAAJBLeDXgNmNXeZK364fyMaF5wjbOFT1d2DE iKfkhedHSKP4KHl18iiZ8upotnHgHeAd4B2oou/A2JdGmlXJXPw9599lvAO8A7wDVeAdeP65Z2Tk yOEn9O/coP5f83QOAQT8KuDKN6Wid0jdnyOTZiTLrAVphS6lwbL3v76+0D6+IFBVBdbOO1sys3Il IyOnqnaBdiOAAAIIHBOIiQmXmu4ISUrOwgQBBBBAIMAF3ObvdVRkmKSkHi13S9u3i5Ot23aU+zxO QACBwBBo3aqZbN6S5FNjXC6R+Lgon+r6Usmvc5hVQizOlz5QBwEEEEAAAQQQQAABBBBAAIFiBfR/ cFMQQACB8gr4NWD25JNPypw+P5S3TdRHAAEEEEAAAQQQQAABBBBAoMICvmamVPhGXCCgBXQ6nTvv GhrQbaRxgSfg1znMnnrqqcDrMS1CAAEEEEAAAQQQQAABBBBAAIGQERg2bFjI9JWOVp6AXwNmDMms vAfFlRBAAAEEEEAAAQQQQAABBBBAoPwCOvqNgkB5BfwaMOOlLO/joD4CCCCAAAIIIIAAAggggAAC CFSmgEtng6cgUE4BvwbMGJJZzqdBdQQQQAABBBBAAAEEEEAAAQQQqFQBhmRWKmfIXMyvATOGZIbM e0RHEUAAAQQQQAABBBBAAAEEEAhIAUa/BeRjCfhG+TVgxksZ8M+fBiKAAAIIIIAAAggggAACCCAQ 1AIMyQzqx+u3zkX47crmwjok84p2mRIellPoNj+ndJD/7f1DoX1lfYmNTJecvAjJzK5RVlWOI4AA AggggAACCCCAAAIIIIAAAlZAh2Qm7slEA4FyCfg1YFYwJDNfNiT0kP2HG3galpNX3bPt60abht9L +pF6sj3lHF9PoR4CCCCAAAIIIIAAAggggAACCIS4gI5+u+sfj4a4At0vr4BfA2b6Uj7w4KOSlRN1 XGZYDZMx1rzuZmng3iVph+Jk574OcuBwXSluf3S1DKlbI0nqxOyVw0dj5WBWbenQaI24Iw/I3ozG 9tzDWbHSreUCycisK/Vid8vSn26WXJORRkEAAQQQQAABBBBAAAEEEEAAgdAVYEhm6D77ivTcr3OY Oatktm6wQc5rusL+nNPkS9veM+O+kzBXjnz1Sx8TUIuWsxqtKnF/8m9NTTCtviQcaG0CZGdImwbr TeCspqzc9mc5kh1rz3W58iS62iE5mlNdvv7lChMsC6+IC+cigAACCCCAAAIIIIAAAggggEAQCLBK ZhA8xFPQBb8GzJxVMjUjTIdk6k+6CXxVCz8q9UzG2I609nLEZIz9nHKW1KieLrWiU4rdH1P9oOTm h0t2bjUTZMs1GWSJEhGWLS3q/SiR4Zmi85vFVP/N8m1L6WiGbtY3265TwMktEUAAAQQQQAABBBBA AAEEEEAgkARYkDCQnkbVaYtfA2bOS7kn/XQTHGtnf3bua2uDXuLKl3wpGDKZZ4Jh4nJJ9QizOEAx +70XDXBJrq1zMKumGX55mhwwwbFNiRdIXj7DL6vOa0dLEUAAAQQQQAABBBBAAAEEEDg5AgzJPDnO wXYXvwbMnCGZRdF0COb+Q/Wl8Wn/Myto5srpdbZK5tEYScmIL3Z/+pG6kp8fZjPTjuZGy76DDc12 tuw+0MIMzXTbTLO8fDLKijrzHQEEEEAAAQQQQAABBBBAAIFQF2BIZqi/ASfWf78GzAqGZLrM4Mjj g1lb954n7qj9cvmZM6VhzZ2yJamL7UFJ+3U45xl1fxKdD21ryh/sfGWXnjlbzm2yUnaYrLWs7Gh7 fn7+iUFwFgIIIIAAAggggAACCCCAAAIIBJ+AM/ot+HpGj/wp4NdxjPpSnt3nh2LbrwGwb3f0sllj 2bnVPXVK2q/znSXsb23nMtNss+92XmrmMTsqOXnVzLkFAblFmwZ4rsMGAggggAACCCCAAAIIIIAA AgggwJBM3oETEfBrhllJQzK9G+odLCtrvwbHNFjmlJw8DbQdn73mHOcTAQQQQAABBBBAAAEEEEAA AQRCW4AhmaH9/E+0979Hn070CqWc56ySWUoVDiGAAAIIIIAAAggggAACCCCAAAJ+E2BIpt9og/rC fg2Y6UvZt+sHcmOXubJx4Tls41Cl34Fq1VzywvMj5NXJo6RRfJRMeXU02zjwDvAOhPQ7oH8Hnb+H VW177EsjZfjwp6ts+9W7qpnT5qr7zwvPjmd3qt8Bd2yEjBw5nL97x/67i7//Bf9brDwODMkM6riW 3zrnMllgFZ4mP3V/jkyakSyzFqT5raFcGIFTLbB23tmSmZUrGRk5p7op3B8BBBBAoIICMTHhUtMd IUnJWRW8EqcjgAACCPhbwG3+XkdFhklK6lF/34rrI4BAFRZwmRm74uOiKq0HlTLpf0x0mPTqUUvO aBxZaQ3jQggEmkB4uEsizb+ow1yV8o9NoHWP9iCAAAIhJRARESb6/zbXqsnf9JB68HQWAQSqpEC1 6mGi/y3O3+wq+fhoNAJVVqBS/ivx0OE8qVs7QtqHR1dZCBqOQNkC+SZY5pJq1fw6krnsZlADAQQQ QKDCAmFhLrOQkPA3vcKSXAABBBDwv4D+N7gW/jvc/9bcAYGqLqD/fXfsT0aFu1IpQzIr3AougAAC CCCAAAIIIIAAAggggAACCCAQ9AJZWVnyxBNPFOrnTTfdJF26dCm071R/qZQMs1PdCe6PAAIIIIAA AggggAACCCCAAAIIIBD4AgcPHrSNfOyxx+wUGfqlRo0aAddwxpYF3COhQQgggAACCCCAAAIIIIAA AggggEBwChw+fFhiYmJEPxMTE8Xtdpsh19UCrrNkmAXcI6FBCCCAAAIIIIAAAggggAACCCCAQHAK aIaZBsvefPNNm2GWk5MjgwYNktq1awdUh5nDLKAeB41BAAEEEEAAAQQQQAABBBBAAAEEglcgIyND kpOTpUWLFjZgNm7cODnzzDPlyiuvDKhOk2EWUI+DxiCAAAIIIIAAAggggAACCCCAAALBK6CT/tes WVPCwgpmCWvatKkkJSUFXIeZwyzgHgkNQgABBBBAAAEEEEAAAQQQQAABBIJTICEhQSZOnCiHDh2S tLQ02bJli3Ts2DHgOsuQzIB7JDQIAQQQQAABBBBAAAEEEEAAAQQQCE6B/Px8mTFjhvz0008SHh4u nTp1kt69e0tERGANgiRgFpzvH71CAAEEEEAAAQQQQAABBBBAAAEEAlYgOzvbzmEWaIEyB4yAmSPB JwIIIIAAAggggAACCCCAAAIIIIAAAkaAOcx4DRBAAAEEEEAAAQQQQAABBBBAAAEEEPASIGDmhcEm AggggAACCCCAAAIIIIAAAggggAACBMx4BxBAAAEEEEAAAQQQQAABBBBAAAEEEPASIGDmhcEmAggg gAACCCCAAAIIIIAAAggggAACBMx4BxBAAAEEEEAAAQQQQAABBBBAAAEEEPASIGDmhcEmAggggAAC CCCAAAIIIIAAAggggAACBMx4BxBAAAEEEEAAAQQQQAABBBBAAAEEEPASIGDmhcEmAggggAACCCCA AAIIIIAAAggggAACBMx4BxBAAAEEEEAAAQQQQAABBBBAAAEEEPAS+H+1CD07KMNOQQAAAABJRU5E rkJggg== --Apple-Mail=_6A241B5A-F1A3-4568-B34A-DBB19C745D40-- --Apple-Mail=_FD633D9E-C7DD-4EF6-B497-FD8284D7EB9E-- From nobody Thu Jul 30 01:29:09 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 258323A1006 for ; Thu, 30 Jul 2020 01:28:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Oa8CwDbp; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=Oa8CwDbp Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L1D7wWnFDK-W for ; Thu, 30 Jul 2020 01:28:46 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10054.outbound.protection.outlook.com [40.107.1.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 638333A0FB1 for ; Thu, 30 Jul 2020 01:28:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uYNeS45p5qaBzkNuTZx2iaaQMZXFhsxEcJooptb0oic=; b=Oa8CwDbpZmeJUD1kyuiRM23oEbKnK10y0H3IKY4qfeOeUdxk/l9Uu682mA+nQKEEH/JvZphNEfuYIMhiCoih0RvURwfnpEOjiPNT6S4fkO5L2Q72ggVhIx25+d8/U7C2qU7Bc5VcI4/SRNM7H6+29SxygpwOuHjAtM45Zi965P8= Received: from AM5PR0601CA0076.eurprd06.prod.outlook.com (2603:10a6:206::41) by AM4PR0802MB2228.eurprd08.prod.outlook.com (2603:10a6:200:66::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.22; Thu, 30 Jul 2020 08:28:42 +0000 Received: from AM5EUR03FT045.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:0:cafe::50) by AM5PR0601CA0076.outlook.office365.com (2603:10a6:206::41) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.18 via Frontend Transport; Thu, 30 Jul 2020 08:28:42 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT045.mail.protection.outlook.com (10.152.17.105) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17 via Frontend Transport; Thu, 30 Jul 2020 08:28:42 +0000 Received: ("Tessian outbound 1dc58800d5dd:v62"); Thu, 30 Jul 2020 08:28:42 +0000 X-CR-MTA-TID: 64aa7808 Received: from 894c5da1c632.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 6611871B-2171-44F0-BCAE-6381E1213F52.1; Thu, 30 Jul 2020 08:28:37 +0000 Received: from EUR03-VE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 894c5da1c632.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 30 Jul 2020 08:28:37 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nXeHniqE6Lr/aKR1C5p/CYcpXqWFwTVgJqTUUGQZqc5blhlGNnWk87L/Q+C2vNHHbqu/vpXOVcj7YzQwXGPNSubMX3TAOr+I5ZEPDRDcJZSqueV45wLkg836offM5ruZ4hSJW9ASvopK5U54F2pGzOe3rjTGhIZ5LMcNyopjWJmZnlMTi3NVmLV4pa0/PxtcHv0jVUVh03AvSbfkJiX9I8T7dMVyi1gWsprySnUYpiW5zKRgT6/cMZFA6bGgnJESQs9pFa4uT0Z/AMB2b2DZo2diwqXg/7jByEH6ilPbFWDode7LVRLibDlMSRM5uLVynRq6ETAFmFxldYEV3/ijIA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uYNeS45p5qaBzkNuTZx2iaaQMZXFhsxEcJooptb0oic=; b=R0wJgAki8ifJsJ1GGyFPWhnXAovOdnmLqR5hq5focNhwKVLztY6qot4XFnxP/QfyYesSL2vxI+kpThUk44E5hC7zoFcAJswnQ0JojfLz2SCQ9pb26WcvvFiOjx0grbzHJ/ZK2fa1acD2UJN3qx586U8DjHm7OjglvTk6PQqhZwVYAw02StxbCgwg2clFuazmwF8Jt7mkD7yh3waXjA32ao3fCU+nhU/klXX2pOTwP7BtBRHH22LXYDXauT9PN8wkW1TEauv5Hjy/yqtEi4Rlww/tHfgzGoR/TpOQgNdC9bDMEEpEiTaQszdJEjCCfNgvai4QXZ3Ro3Nb603XIjJdLQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uYNeS45p5qaBzkNuTZx2iaaQMZXFhsxEcJooptb0oic=; b=Oa8CwDbpZmeJUD1kyuiRM23oEbKnK10y0H3IKY4qfeOeUdxk/l9Uu682mA+nQKEEH/JvZphNEfuYIMhiCoih0RvURwfnpEOjiPNT6S4fkO5L2Q72ggVhIx25+d8/U7C2qU7Bc5VcI4/SRNM7H6+29SxygpwOuHjAtM45Zi965P8= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB3457.eurprd08.prod.outlook.com (2603:10a6:208:d7::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17; Thu, 30 Jul 2020 08:28:35 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3%5]) with mapi id 15.20.3216.034; Thu, 30 Jul 2020 08:28:35 +0000 From: Hannes Tschofenig To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Age Claim in EAT Thread-Index: AQHWZYg/C8vSkhifRkqcOCJniMcKaqkfyxgQ Date: Thu, 30 Jul 2020 08:28:35 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: edd1b0bb-55e3-488a-a6a2-ef0e383203d4.0 x-checkrecipientchecked: true Authentication-Results-Original: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; x-originating-ip: [213.162.72.158] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 4c60e7d0-a5ad-4439-cf37-08d834629173 x-ms-traffictypediagnostic: AM0PR08MB3457:|AM4PR0802MB2228: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: YUlzs5BMwfu6OmJSewW5pFPQGTrrYrJpaZljDSmSxdST9CWyYcGM8IoCHxd57bXsQfLJ/WWbhXllrrZI0LgWz0gai4y8BwS8suiehWz389kGUy8ma9IG3RAklxJ1jSPUgdPVQhtzguC466MYTOWlZSKXVQcSKlrz+H4rUsmVwI0XC5MDj3GwWZz/m+60Pn5tXilcRHAA/wI52Lc++kYoxY2QMq9p3lj6RtdoUhJg5woBIwTM7FTQab8focw/PpK6Y2LJRiJ2mjQjiydebXL9Zuf2wY7p1+sEcadgLzcxI5ZW8QGRdWnMHjpckobExHLe3HMxXFuhEtSTOxLffL2OupKUH7nOR74Gs4VtG3WJIjqsgH3t0/YVfJKA4qX76piPo7JtzwfCW+rdOXNdoN4Azg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(376002)(39860400002)(396003)(366004)(346002)(316002)(33656002)(55016002)(26005)(5660300002)(71200400001)(186003)(86362001)(8676002)(52536014)(83380400001)(66446008)(64756008)(66556008)(66476007)(2906002)(110136005)(966005)(478600001)(76116006)(7696005)(53546011)(9686003)(8936002)(6506007)(66946007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3457 Original-Authentication-Results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT045.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: c8b68b44-0fc7-4f83-8c1c-08d834628d4f X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: JxYm/h8VskLG9rt9QDXRNXXlg6Dz/ILJCdEjkqi9AYCmtpWa7qRG6V7VFOPqwWc7PgmioZ5REbJSWKkL71b7rXoEa+efr6lRmvQNkGtkmRKUmMyRWfSrTK0BgR9cDSfjMwkBnJv04M/wa9b8GuqmWPS0e1rZvvn9rz8nK1jF7tMn+FDL1PBc/pViClxKiZjQ7uBu/ojRBLsHvmzc1r4JK66d2NrCVt1YVGC6mvPFlbrHEeddbH1uB000g+iO6D3/suwMh6D2aqsQinxe2YaC5dWrONMtqZuLcjrGDhZP6EXvyEf4WFEh7o2QCgfFfdCT9BcWPhiYljv7d8Dr9ujxSHNYw0kMFyzPoBmMvBiJKFGTPW5XEQ+bocK1zAeDuhH99NHIl6SRbOL3QIR/AfnGaChJFatq/Ci2g4cdH05ydKQRiDsViYbTJUaH0XZ/JL0gFokVynJs4B4oHr1+cnPYR8stRSSJ/rj3fja/Mmempkg= X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(136003)(346002)(396003)(376002)(39860400002)(46966005)(82310400002)(86362001)(52536014)(2906002)(9686003)(186003)(55016002)(70206006)(26005)(70586007)(81166007)(8936002)(110136005)(356005)(5660300002)(8676002)(36906005)(6506007)(478600001)(966005)(53546011)(336012)(33656002)(82740400003)(83380400001)(47076004)(316002)(7696005); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2020 08:28:42.4111 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4c60e7d0-a5ad-4439-cf37-08d834629173 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT045.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2228 Archived-At: Subject: Re: [Rats] Age Claim in EAT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 08:28:59 -0000 VGhhbmtzIGZvciB0aGUgY2xhcmlmaWNhdGlvbiwgSGVuay4NCg0KU2luY2UgSSBkb24ndCBrbm93 IHdoYXQgaW5mb3JtYXRpb24gY29uc3VtZXJzIG9mIEVudGl0eSBBdHRlc3RhdGlvbiBUb2tlbnMg cmVhbGx5IG5lZWQgdG8gbWFrZSBkZWNpc2lvbnMgSSBhbSBub3Qgc3VyZSB3aGV0aGVyIHRoZSBj dXJyZW50IGZ1bmN0aW9uYWxpdHkgaXMgc3VmZmljaWVudCBhbHJlYWR5IG9yIG5vdC4gVG8gbWUg YXMgYSByZWFkZXIgaXQgYXBwZWFycyB1bmRlcnNwZWNpZmllZC4gIEF0IGEgbWluaW11bSBhIHJl ZmVyZW5jZSB0byBBcHBlbmRpeCBBIG9mIHRoZSBSQVRTIGFyY2hpdGVjdHVyZSBkb2N1bWVudCBp biB0aGUgRUFUIHNwZWMgd291bGQgYmUgdXNlZnVsLg0KDQpDaWFvDQpIYW5uZXMNCg0KLS0tLS1P cmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+DQpTZW50OiBXZWRuZXNkYXksIEp1bHkgMjksIDIwMjAgMTE6MTEg QU0NClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT47IHJh dHNAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbUmF0c10gQWdlIENsYWltIGluIEVBVA0KDQpIaSBI YW5uZXMsDQoNCmluIHRoZSBzY29wZSBvZiBFdmlkZW5jZToNCg0KU2lnbmluZyBhIENXVCBzdHJ1 Y3R1cmUgaXMgY3JlYXRpbmcgYW4gRUFULiBUaGlzIGV2ZW50IGlzIGRlZmluZWQgYXMNCnRpbWUo RUcpIGhlcmU6DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1yYXRzLWFy Y2hpdGVjdHVyZS0wNSNhcHBlbmRpeC1BDQoNCiJDcmVhdGluZyBhIHRva2VuIiB3b3VsZCBtZWFu ICJFdmlkZW5jZSBHZW5lcmF0aW9uIiwgZm9yIGV4YW1wbGUuDQoNCkFnZSBhbHNvIGlzIGEgdGlt ZSBpbnRlcnZhbCBiYXNlZCBvbiBhIHRpbWUgdW5pdCAodW5pdHMgdGhhdCBhcHBseSB0byBIZW5r IGFyZSB5ZWFycywgSSBjbGFpbSB0aGF0IEhlbmsncyBhZ2UgaXMgMjEsIG9mIGNvdXJzZS4gVHJ1 c3QgaW4gSGVuaydzIENsYWltcyBjYW4gYmUgZXN0YWJsaXNoZWQgdmlhIEVuZG9yc2VtZW50cyku IEFnZSBpcyBhIHRpbWUgaW50ZXJ2YWwgZXhwcmVzc2VkIGFzIGEgZHVyYXRpb24uIFRoYXQgbWVh bnMgdGhhdCB0aGUgYmVnaW5uaW5nIG9mIHRoYXQgdGltZSBpbnRlcnZhbCBpcyBzZXQgYXMgemVy byAoYW4gZXBvY2gpIGFuZCB0aGVuIGNvdW50cyB0aGUgdGltZSB1bml0cy4NCg0KVGhlIHNlbWFu dGljcyBvZiBhZ2UgaW4gRUFUIGFyZToNCg0KdGhlIGVwb2NoIGlzIHRpbWUoRUcpIGFuZCB0aGUg dW5pdCBpcyBzZWNvbmRzLg0KVGhpcyBvbmx5IHdvcmtzLCBpZiB0aW1lIHNvdXJjZXMgZm9yIHJl bGF0aXZlIHRpbWUtY291bnRlcnMgYXJlIGF2YWlsYWJsZSwgb2YgY291cnNlLg0KDQpDb2xsZWN0 aW9uIG9mIENsYWltcyAtIHRpbWUoQ0MpIHdhcyBwcm9wb3NlZCB0byB0aGUgYXJjaGl0ZWN0dXJl LCBidXQgZGlkIG5vdCBmaW5kIGNvbnNlbnN1cyB5ZXQgKHdlIGFyZSB3b3JraW5nIG9uIHRpbWUo QUEpLCB0aG91Z2gsIHRoZSB0aW1lIGF0IHdoaWNoIHRoZSBBdHRlc3RlciBiZWNvbWVzIGF3YXJl IG9mIGEgY2hhbmdlcyB2YWx1ZSBpbiB0aGUgVGFyZ2V0IEVudmlyb25tZW50IHJpZ2h0IG5vdyku DQoNCkJ1dCEgdGhlcmUgaXMgdGltZShWRyksIHRoZSBWYWx1ZSBHZW5lcmF0aW9uLiBUaGlzIHRp bWUgY2FuIG9mdGVuIG9ubHkgYmUgaW5mZXJyZWQgb3IgYXBwcm94aW1hdGVkIChpbiBjb250cmFz dCB0byB0aW1lKEFBKSksIGJ1dCBpdCBpcyB0aGUgYmVzdCB3ZSBoYXZlIGRlZmluZWQgcmlnaHQg bm93IGluIHRoZSBjb250ZXh0IG9mOg0KDQo+IElmIHRoYXQncyB0aGUgY2FzZSwgSSB3b25kZXIg d2hldGhlciBpdCB3b3VsZCBhbHNvIG1ha2Ugc2Vuc2UgdG8gdGFrZSBpbnRvIGFjY291bnQgdGhh dCBkaWZmZXJlbnQgaW5mb3JtYXRpb24gbWF5IGJlIGNvbGxlY3RlZCBhdCBhIGRpZmZlcmVudCBw b2ludCBpbiB0aW1lIGFuZCBoZW5jZSB0aGUgYWdlIGluZGljYXRpb24gd291bGQgYmV0dGVyIGdv IChzb21laG93KSB3aXRoIHNwZWNpZmljIGNsYWltcyB3aGVyZSB0aGUgdGltZSBkaWZmZXJlbmNl IGJldHdlZW4gdGhlIGNvbGxlY3Rpb24gb2YgdGhlIGRhdGEgYW5kIHRoZSBzaWduYXR1cmUgZ2Vu ZXJhdGlvbiBtYXR0ZXJzLg0KDQpBcyBhIG5vdGU6IFdlIGhhdmUgbm90IHRhbGtlZCBhdCBhbGwg YmVmb3JlIGFib3V0IHRoZSBjb21tb24gY29uY2VwdCBvZiAibGF0Y2hlcyIgb3Igc3RhZ2UgdHJh bnNpdGlvbnMuLi4gdGhpcyBpcyBhbiBpbXBvcnRhbnQgY29uY2VwdCB0aGF0IGRvZXMgY2FwdHVy ZSB0aGUgInRoaXMgZXZlbnQgaGFzIGhhcHBlbmVkIiAoYmVmb3JlL2FmdGVyIGEgZGVmaW5lZCBl dmVudCkgYW5kIHJlcHJlc2VudHMgc3Ryb25nIHNlY3VyaXR5IGltcGxpY2F0aW9ucyB0aGF0IGFy ZSBub3QgaW5jbHVkZWQgaW4gdGhlIFJBVFMgYXJjaGl0ZWN0dXJlIHRvZGF5LiBXb3VsZCB0aGF0 IG1heWJlIGhlbHAgaW4geW91ciBjb250ZXh0Pw0KDQpWaWVsZSBHcsO8w59lLA0KDQpIZW5rDQoN Cg0KT24gMjkuMDcuMjAgMTA6MzcsIEhhbm5lcyBUc2Nob2ZlbmlnIHdyb3RlOg0KPiBIaSBMYXVy ZW5jZSwgSGkgYWxsLA0KPg0KPiBIb3cgZG9lcyB0aGUgYWdlIGNsYWltIHdvcms/DQo+DQo+IFRo ZSBzcGVjIHNheXMgInJlcHJlc2VudHMgdGhlIG51bWJlciBvZiBzZWNvbmRzIHRoYXQgaGF2ZSBl bGFwc2VkIHNpbmNlIHRoZSB0b2tlbiB3YXMgY3JlYXRlZCIuDQo+DQo+IEJ5IGNyZWF0aW5nIGEg dG9rZW4geW91IGFsc28gcHJvdGVjdCB0aGUgY2xhaW1zIHdpdGggYSBzaWduYXR1cmUgYW5kIGhl bmNlIHlvdSBjYW5ub3QgY2hhbmdlIHRoZSBjb250ZW50IG9mIHRoZSBjbGFpbXMgYW55bW9yZSAo d2l0aG91dCBicmVha2luZyB0aGUgc2lnbmF0dXJlKS4NCj4NCj4gSGVuY2UsIGhlcmUgImNyZWF0 aW5nIGEgdG9rZW4iIG11c3QgbWVhbiBzb21ldGhpbmcgZGlmZmVyZW50LiBJIHN1c3BlY3QgaXQg bWVhbnMgd2hlbiBjZXJ0YWluIHZhbHVlcyBoYXZlIGJlZW4gY29sbGVjdGVkIGZyb20gdGhlIGRl dmljZSBhbmQgYmVmb3JlIHRoZSB0b2tlbiB3aXRoIHRoZSBzaWduYXR1cmUgd2FzIHB1dCB0b2dl dGhlci4gQ29ycmVjdD8NCj4NCj4gSWYgdGhhdCdzIHRoZSBjYXNlLCBJIHdvbmRlciB3aGV0aGVy IGl0IHdvdWxkIGFsc28gbWFrZSBzZW5zZSB0byB0YWtlIGludG8gYWNjb3VudCB0aGF0IGRpZmZl cmVudCBpbmZvcm1hdGlvbiBtYXkgYmUgY29sbGVjdGVkIGF0IGEgZGlmZmVyZW50IHBvaW50IGlu IHRpbWUgYW5kIGhlbmNlIHRoZSBhZ2UgaW5kaWNhdGlvbiB3b3VsZCBiZXR0ZXIgZ28gKHNvbWVo b3cpIHdpdGggc3BlY2lmaWMgY2xhaW1zIHdoZXJlIHRoZSB0aW1lIGRpZmZlcmVuY2UgYmV0d2Vl biB0aGUgY29sbGVjdGlvbiBvZiB0aGUgZGF0YSBhbmQgdGhlIHNpZ25hdHVyZSBnZW5lcmF0aW9u IG1hdHRlcnMuIEkgYWxzbyB3b25kZXIgd2hldGhlciB0aGUgbnVtYmVyIG9mIHNlY29uZHMgbWF0 dGVyIGFuZCB3aGV0aGVyIHlvdSByZWFsbHkgd2FudCB0byBjb21tdW5pY2F0ZSBzb21ldGhpbmcg bW9yZSBhYnN0cmFjdCwgc3VjaCBhcyAiSSBjcmVhdGVkIGEgaGFzaCBvdmVyIHRoZSBmaXJtd2Fy ZSBkdXJpbmcgYm9vdCB0aW1lIiByYXRoZXIgdGhhbiAiSSBjcmVhdGVkIHRoZSBoYXNoIG92ZXIg dGhlIGZpcm13YXJlIGluIHJlYWwtdGltZSB3aGVuIEkgd2FzIGFza2VkIi4NCj4NCj4gQ2lhbw0K PiBIYW5uZXMNCj4NCj4gSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1h aWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBw cml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ug bm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29u dGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3Rv cmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPg0K PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBSQVRT IG1haWxpbmcgbGlzdA0KPiBSQVRTQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vcmF0cw0KPg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z ZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91Lg0K From nobody Thu Jul 30 02:00:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDEC43A0B93 for ; Thu, 30 Jul 2020 02:00:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sVIEomr9; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sVIEomr9 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kNOcwnBN7tsl for ; Thu, 30 Jul 2020 02:00:19 -0700 (PDT) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2054.outbound.protection.outlook.com [40.107.22.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA7C33A0FE0 for ; Thu, 30 Jul 2020 02:00:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EJYtBytV+5FfWfeWa6zL0DGHm52xWbmrtrfBAXXSnPg=; b=sVIEomr9Dw/7XDjo8zFzgVdpF72jGxoHJ7NrpJ+QhHpcKGaX/hofsux4BGflUuhAmCanKFzPeuUvwRucfdKlZNy3NbGmiznhATz2pq4kRYMYZDZqDpZ81hrtqNeLWedy2QvD6AfOrv9ZMpEDZU19TMATLT4Th5yE0/yB0bigGlU= Received: from AM6P195CA0064.EURP195.PROD.OUTLOOK.COM (2603:10a6:209:87::41) by VI1PR08MB3536.eurprd08.prod.outlook.com (2603:10a6:803:79::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.24; Thu, 30 Jul 2020 09:00:15 +0000 Received: from AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:87:cafe::e4) by AM6P195CA0064.outlook.office365.com (2603:10a6:209:87::41) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.17 via Frontend Transport; Thu, 30 Jul 2020 09:00:15 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT056.mail.protection.outlook.com (10.152.17.224) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.20 via Frontend Transport; Thu, 30 Jul 2020 09:00:15 +0000 Received: ("Tessian outbound 1c27ecaec3d6:v62"); Thu, 30 Jul 2020 09:00:15 +0000 X-CR-MTA-TID: 64aa7808 Received: from 10c5cd9f6480.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 8C28D851-D4DD-41C4-B8E0-C2B4129120C8.1; Thu, 30 Jul 2020 09:00:10 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 10c5cd9f6480.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 30 Jul 2020 09:00:10 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HwLI26JhrxOsK8hWPriAvb8g6+cJuJZFzOW884r7ilsNjEGJ2oklloE3cZTnvw7PR+FQRaFVplGeZAHHcJ5Qd/ml3wE0uZfNBLY1K7LfmhBxZBWrObsibvxY0htb5QXciiKOxCFh2hJWxPw5jSReZDg9kVQw8KjwiORZTEIx4yxVq+NQjyc+9KyRrsTDSTl604ANQagtNgbSRP3SG30yzSUD2uZGivsuymC5uDDivrJqQMn7U5eoqD3mXv7dTG+gGEE2n+IhuSoKuvkoCIyXZGDkYenayi7NoufDyrMR9kKFCGN6ZjYSI52Buwm176WsjxqPcX75fnf5gC42gYPsIA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EJYtBytV+5FfWfeWa6zL0DGHm52xWbmrtrfBAXXSnPg=; b=Um0mLql6LoNaB1pUmWRsVjxGU4gt7xl7w12WY5jEy4kY0xdosjxnfnWwGAIe7zPZ2+vt9xvBhk1ZU7VU3OyGhGvu8JfzzbRjokP/E6KjeZmtHO/sXde2OhsSlGqLQGbF4h5XsTrEvkP23DA520bd56WJG0tFGhvOSz/Kz80HF9N/RNdqAOPveeigzFWieDuM46Ozc2nGT++LtLfJN/P65Qz4nCuW6a6ZcKq6bb/jW1O2lUbDGyFl+5lOoKpdPqIkC/RCxWfsUMz3lLGCzPNhICFSFt4P90vh4twOifAb+ZIjUnCX1SEuzWvw7gb8JQdesu1S1YpcLT1OLooiIxdjgQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EJYtBytV+5FfWfeWa6zL0DGHm52xWbmrtrfBAXXSnPg=; b=sVIEomr9Dw/7XDjo8zFzgVdpF72jGxoHJ7NrpJ+QhHpcKGaX/hofsux4BGflUuhAmCanKFzPeuUvwRucfdKlZNy3NbGmiznhATz2pq4kRYMYZDZqDpZ81hrtqNeLWedy2QvD6AfOrv9ZMpEDZU19TMATLT4Th5yE0/yB0bigGlU= Received: from AM0PR08MB3716.eurprd08.prod.outlook.com (2603:10a6:208:106::13) by AM0PR08MB4980.eurprd08.prod.outlook.com (2603:10a6:208:15a::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16; Thu, 30 Jul 2020 09:00:08 +0000 Received: from AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3]) by AM0PR08MB3716.eurprd08.prod.outlook.com ([fe80::5d9e:7abf:79ac:95e3%5]) with mapi id 15.20.3216.034; Thu, 30 Jul 2020 09:00:08 +0000 From: Hannes Tschofenig To: "rats@ietf.org" Thread-Topic: Location Claim Thread-Index: AdZmTKbPfHrH5PUHQ0yjH4YD2zYD/Q== Date: Thu, 30 Jul 2020 09:00:08 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: 257ad2b2-a479-4aba-b733-e0846c0fe4a8.0 x-checkrecipientchecked: true Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [213.162.72.158] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 8f9c59fe-1945-4b41-c866-08d83466fa01 x-ms-traffictypediagnostic: AM0PR08MB4980:|VI1PR08MB3536: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:4303;OLM:8273; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: K2U1pqjhQas0atlcXSODB2Q2j9maaEtULt9WN37J88pj8UoHN83v5eCPOYbSeKYv/hmg9vK21h7xbW4HJWm2C+zDPzeaaqL+7+BrdVChuMpIDzqa6O89gxKxhEhGKlSd8sq8DanhwodwD0yBT0/rihqIMJpARg9SAZKoSBjwYrcdSjB47KuaIsIHmWozrU3Ry4365AZ9AB0X4qqq9TAN0YvyfnQ3aFrqDRwAmquYHX+pT4YHkqDozwlZLs8veyTzRvw2/sx9d9ypYoqcE0bmbH1XOCFcsZCwIWitoVv1IAWHowOSOwz9HxOctxBiFE1R0e+RyNkvVGml1E3onJJ3Cg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM0PR08MB3716.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(376002)(136003)(346002)(39860400002)(396003)(66946007)(8936002)(66556008)(64756008)(66476007)(55016002)(76116006)(66446008)(9686003)(26005)(8676002)(186003)(6506007)(7696005)(83380400001)(86362001)(478600001)(2906002)(316002)(71200400001)(7116003)(6916009)(3480700007)(4743002)(52536014)(33656002)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM0PR08MB3716DA44706969B86E1214DBFA710AM0PR08MB3716eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB4980 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 7ca2605f-3f22-4999-77c6-08d83466f595 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: LxX/HvEw6fvUkK0pBe6sg+Hl+ma+vwdO+hNl8HWa3PRJ+zZ8CRfjA0ziHaIZUbjujzijrXig0WzQ0FnfoMOIgcaTViK/lf0kKj1N2tozAdN2HC51jV24ngpXxpEakfggRbcmGPKVaKE+RQc760Pn+WlgLpVrRKFcSWAoBQbMWYYj1ULvku1aPNa/BnX+Kk8sf4Bxc44aG85IEg2JoZrUdHciSyCWm/Cf8OBOz8GltZ+9ICAPZVsnrgftXdbKvpacsV/7HxdrDRUZ+UX9eNu8h5l+aB4yKiKkF169/s14i4ENhXCfLUyfbbMqUvKLWGlLyfT4fYFIKartfC4tPxD7MOE4/T8opg1rGM9pDWjwIox9BAfv7kzhPj0wBVC4hyQErc3Da5AdN2pBnEJT44wZGQ== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(346002)(376002)(39860400002)(136003)(396003)(46966005)(5660300002)(186003)(52536014)(33656002)(478600001)(7116003)(8936002)(70206006)(26005)(70586007)(336012)(83380400001)(6506007)(2906002)(7696005)(6916009)(36906005)(356005)(3480700007)(8676002)(86362001)(316002)(9686003)(55016002)(82740400003)(81166007)(47076004)(4743002)(82310400002); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jul 2020 09:00:15.7944 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 8f9c59fe-1945-4b41-c866-08d83466fa01 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3536 Archived-At: Subject: [Rats] Location Claim X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 09:00:22 -0000 --_000_AM0PR08MB3716DA44706969B86E1214DBFA710AM0PR08MB3716eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Dear EAT draft authors, I believe the location claim defined in the EAT spec can benefit from furth= er clarification. I think you want to focus on systems that obtain location information via a= GPS receiver. Is this correct? >From the short text I understand that you want to support a 2d point, a 3d = point, a circle (i.e. the point with a radius) and a sphere (the 3d version= of the circle). (More about location shapes can be found in RFC 5491.) If you also want to express uncertainty and confidence then you may want to= look at RFC 7459. You are also interested to express dynamic location. You might want to look= at RFC 5962 and add orientation too. Dynamic location is obviously pretty = tricky in the context of an attestation based mechanism because dynamic loc= ation, as the name indicates, changes frequently. In location-based systems= there is often the desire to express some time series data or average the = measured data over a certain timeframe. I would recommend using the terms from the above-mentioned RFCs when it com= es to location because they have been again re-used from the OGC, the Open = Geospatial Consortium. This would produce something like: * 2d Point: Lat/long * 3d Point: lat/long/alt * Circle: lat/long/radius * Sphere: lat/long/alt/radius * For dynamic location add speed, orientation, and heading to the above= shapes. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM0PR08MB3716DA44706969B86E1214DBFA710AM0PR08MB3716eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Dear EAT draft authors,

 

I believe the location claim defined in the EAT spec= can benefit from further clarification.

 

I think you want to focus on systems that obtain loc= ation information via a GPS receiver. Is this correct?

 

From the short text I understand that you want to su= pport a 2d point, a 3d point, a circle (i.e. the point with a radius) and a= sphere (the 3d version of the circle).

(More about location shapes can be found in RFC 5491= .)

 

If you also want to express uncertainty and confiden= ce then you may want to look at RFC 7459.

 

You are also interested to express dynamic location.= You might want to look at RFC 5962 and add orientation too. Dynamic locati= on is obviously pretty tricky in the context of an attestation based mechan= ism because dynamic location, as the name indicates, changes frequently. In location-based systems there is oft= en the desire to express some time series data or average the measured data= over a certain timeframe.

 

I would recommend using the terms from the above-men= tioned RFCs when it comes to location because they have been again re-used = from the OGC, the Open Geospatial Consortium.

This would produce something like:

 

  • 2d Point: Lat/long
  • 3d Point: lat/long/alt
  • Circle: lat/long/radius
  • Sphere: lat/lon= g/alt/radius
  • For dynamic location add speed, orientation, and head= ing to the above shapes.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM0PR08MB3716DA44706969B86E1214DBFA710AM0PR08MB3716eurp_-- From nobody Thu Jul 30 02:24:03 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12B513A0FF2 for ; Thu, 30 Jul 2020 02:24:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fwbm2p1RkLAf for ; Thu, 30 Jul 2020 02:23:59 -0700 (PDT) Received: from mail-edgeKA27.fraunhofer.de (mail-edgeka27.fraunhofer.de [153.96.1.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D79F3A0AE6 for ; Thu, 30 Jul 2020 02:23:57 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2ESBgAbkSJf/xmnZsBgHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKAoF5gR6BMwqVQ5okgV4LCwEBAQEBAQEBAQYBARgLCgIEAQEChEo?= =?us-ascii?q?CgisBJDgTAhABAQYBAQEBAQYEAgKGRQxDARABgn6BAwEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEWAg02HjcSAQEdAQEBAQIBAQEwAQU2Ag4LCxguJzAGAQwGAgEBgyI?= =?us-ascii?q?BglwgBAuuHnSBNIVSg0CBOgaBOAGNDA+BTD+BEScPglo+glwBAYElBQESAU2?= =?us-ascii?q?FSgSPOYo4m20pB4FagQiBCAQLh0SLQoVWBQoegns2iRWEfwaOKZIfijOUbAI?= =?us-ascii?q?EAgkCFYFqgQtwTSRPgmlQFwINj0QBAoddhURyNwIGAQcBAQMJfIgYhmgBgRA?= =?us-ascii?q?BAQ?= X-IPAS-Result: =?us-ascii?q?A2ESBgAbkSJf/xmnZsBgHQEBAQEJARIBBQUBQIFKAoF5g?= =?us-ascii?q?R6BMwqVQ5okgV4LCwEBAQEBAQEBAQYBARgLCgIEAQEChEoCgisBJDgTAhABA?= =?us-ascii?q?QYBAQEBAQYEAgKGRQxDARABgn6BAwEBAQEBAQEBAQEBAQEBAQEBAQEWAg02H?= =?us-ascii?q?jcSAQEdAQEBAQIBAQEwAQU2Ag4LCxguJzAGAQwGAgEBgyIBglwgBAuuHnSBN?= =?us-ascii?q?IVSg0CBOgaBOAGNDA+BTD+BEScPglo+glwBAYElBQESAU2FSgSPOYo4m20pB?= =?us-ascii?q?4FagQiBCAQLh0SLQoVWBQoegns2iRWEfwaOKZIfijOUbAIEAgkCFYFqgQtwT?= =?us-ascii?q?SRPgmlQFwINj0QBAoddhURyNwIGAQcBAQMJfIgYhmgBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.75,413,1589234400"; d="scan'208";a="23392742" Received: from mail-mtadd25.fraunhofer.de ([192.102.167.25]) by mail-edgeKA27.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jul 2020 11:23:55 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0C+BwC6kCJf/1lIDI1gHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFKAoF5L28DVDAsCpVCmiSBaQsBAwEBAQEBBgEBGAsKAgQBAYRMAoI?= =?us-ascii?q?pAiQ4EwIQAQEFAQEBAgEGBG2FXAxDARABhRwBAQEDAQEBMAEFNgIOCwsYLic?= =?us-ascii?q?wBgEMBgIBAYMiAYJcJAuuJnSBNIVSg0CBOgaBOAGNDA+BTD+BEScPglo+glw?= =?us-ascii?q?BAYElBQESAU2FSgSPOYo4m20pB4FagQiBCAQLh0SLQoVWBQoegns2iRWEfwa?= =?us-ascii?q?OKZIfijOUbAIEAgkCFYFqI2dwTSRPgmlQFwINj0QBAoddhURBMTcCBgEHAQE?= =?us-ascii?q?DCXyIGIZoAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,413,1589234400"; d="scan'208";a="87271039" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaDD25.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jul 2020 11:23:52 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06U9NpCb009712 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 30 Jul 2020 11:23:51 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 30 Jul 2020 11:23:46 +0200 To: Hannes Tschofenig , "rats@ietf.org" References: From: Henk Birkholz Message-ID: Date: Thu, 30 Jul 2020 11:23:44 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Location Claim X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 09:24:02 -0000 Hi all, in general, you might also want to have a look at "The GeoJSON Format" (RFC7946) that is based on this work: > https://geojson.org/geojson-spec Viele Gre, Henk On 30.07.20 11:00, Hannes Tschofenig wrote: > Dear EAT draft authors, > > I believe the location claim defined in the EAT spec can benefit from > further clarification. > > I think you want to focus on systems that obtain location information > via a GPS receiver. Is this correct? > > From the short text I understand that you want to support a 2d point, a > 3d point, a circle (i.e. the point with a radius) and a sphere (the 3d > version of the circle). > > (More about location shapes can be found in RFC 5491..) > > If you also want to express uncertainty and confidence then you may want > to look at RFC 7459. > > You are also interested to express dynamic location. You might want to > look at RFC 5962 and add orientation too. Dynamic location is obviously > pretty tricky in the context of an attestation based mechanism because > dynamic location, as the name indicates, changes frequently. In > location-based systems there is often the desire to express some time > series data or average the measured data over a certain timeframe. > > I would recommend using the terms from the above-mentioned RFCs when it > comes to location because they have been again re-used from the OGC, the > Open Geospatial Consortium. > > This would produce something like: > > * 2d Point: Lat/long > * 3d Point: lat/long/alt > * Circle: lat/long/radius > * Sphere: lat/long/alt/radius > * For dynamic location add speed, orientation, and heading to the > above shapes. > > Ciao > > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy > the information in any medium. Thank you. > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Jul 30 03:01:15 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A8E93A0CD8 for ; Thu, 30 Jul 2020 03:01:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.891 X-Spam-Level: X-Spam-Status: No, score=-1.891 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_SPF_HELO_TEMPERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D7cPGnhjSp2h for ; Thu, 30 Jul 2020 03:01:05 -0700 (PDT) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30096.outbound.protection.outlook.com [40.107.3.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 769F93A0CDC for ; Thu, 30 Jul 2020 03:01:04 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kPbdXRuUSXsEnEcZscUvX8I3E64Mudx8xxtsOLBqfTjCttQrEhHzzJ7uUJka+G0rjCsjdAUze6hYo43c53bOUJnAYnW8TbRaaFTC1rN+3J0lksLDt9LCF0X6+iRB0FXTf561Z61lHh66TROKBDGk0OoZpVWTGk0XotNhTL3jQ/QlK6unf9DzJjW1u/J9IMlbx9hetrkdmfdP3TUX0xnWqrJ36S05En0JZbDc8EJezpvKJyqAiyRe8MlbM82QyLKDJ5Xdb2hsCFVGW1JI9t+qKgeDjx4exssZbzCcsh+2ZSsvqk9g/5JdwHHzuKRARhtmhbpGIUr+cgkk9oC5nJtMTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XbLE63OWpg29F+tJt0uNHagVnxofrT4AsGu5UP8utTg=; b=DpUkih35Cy5xHrhcq0OfxyLy20YvkhWwRPwtyONOgWAu14mVJeb9/DP1c8wKX69GOWdwR8LooS8Q0NV0rw30TUGtEzhszT3IwcMQ5Dp91hvDBvbAYwV8wyr2+IgeZTjo5hDSY/Lw321KO7kG4ewrXY8aWW0ba5LYmqGSjbK0BhkkEa0iPGHhk9qlAubd5G/uuGBBOifHarTwcuMSY0Mt8ydnsdz7EfpJHERhPhU619bjBzKT+fCaEQZgnz4bQwUueuVlCTEHY1n1aio+cOY5Ym9xHzra+mTmBkoz+a/GjONxg/zxir4iF9Bi7Dsa7KpeX6Hra8AJiUCPsoqIzOyY6A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia-bell-labs.com; dmarc=pass action=none header.from=nokia-bell-labs.com; dkim=pass header.d=nokia-bell-labs.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XbLE63OWpg29F+tJt0uNHagVnxofrT4AsGu5UP8utTg=; b=ia5OkeCO7ctdIMFOuyetSqBah6WIP0S/TojxxeuuLQ4C18A1nx0NyfpWQDdYQm/9iF/EHDni+XBlbvqnzYMHRh7fuM1LRcdoAgmD9Zin9hKwmQQgTnaId24u+kbB3cHdlbThCLViOMIR/A0WYeAwv4amwdSZwYGvm1wukDWfiL8= Received: from HE1PR07MB4252.eurprd07.prod.outlook.com (2603:10a6:7:9f::21) by HE1PR0701MB2185.eurprd07.prod.outlook.com (2603:10a6:3:2a::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.11; Thu, 30 Jul 2020 10:01:02 +0000 Received: from HE1PR07MB4252.eurprd07.prod.outlook.com ([fe80::59ef:f11b:78d5:77d6]) by HE1PR07MB4252.eurprd07.prod.outlook.com ([fe80::59ef:f11b:78d5:77d6%5]) with mapi id 15.20.3239.017; Thu, 30 Jul 2020 10:01:02 +0000 From: "Oliver, Ian (Nokia - FI/Espoo)" To: Hannes Tschofenig , Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Age Claim in EAT Thread-Index: AQHWZk/jukHpjIxh8ESWmp5mbhTWFakf4yH+ Date: Thu, 30 Jul 2020 10:01:02 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: arm.com; dkim=none (message not signed) header.d=none;arm.com; dmarc=none action=none header.from=nokia-bell-labs.com; x-originating-ip: [80.67.10.139] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d5511acc-2de4-4283-c314-08d8346f77ac x-ms-traffictypediagnostic: HE1PR0701MB2185: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: g79ZhuGv52XqZvwhWakfczJlmO7kft2JFeog8AI1RuLjR3c6PLfssSTbV5L0Af7YCpUGPpVCB0DgSNf2Jag/xXBYsvXurr+2YnIK/6ghmOfdrGWg0G3yQ64lt6OokLGtQKwavdYl9t1d2ILDjXk4azF5MSwahpGRpQUNectJeXEdm9K1EwX1VWEHGhrhYMAc/Lv9ylQBaHdWxKhLa59PjVUgcauZFB6851RdNVYBunZhi/xwDXsx8ZUpT9j925kCsoCI3n1THn94GKp8UWHuK/0SBf89KsOffZpFd6cSniehToKM0uyQUdwGQWUK2OdI33VEDgBR6eahHaVzVxvY8eX0iFmsoulFnzfAE8pJbd2fJX16KwDE2snE/jS1bgUSyqz5MV7CR2aJr+dWcNpdSA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR07MB4252.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(396003)(376002)(346002)(39860400002)(366004)(7696005)(55236004)(5660300002)(26005)(86362001)(478600001)(19627405001)(966005)(186003)(33656002)(6506007)(53546011)(83380400001)(2906002)(76116006)(71200400001)(8936002)(66556008)(66446008)(64756008)(166002)(8676002)(66946007)(316002)(55016002)(66476007)(110136005)(9686003)(52536014); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: UfFFpxjeDvnxTBOABWQCWNGx324uzuXdr3f7urRUv8PJ3TS7JO9dFJrz8ORciI1+urvQIKaRnknxekhln56IDqiy+jIapRGrl3LMbpoRI4Vgc8QutIUFMRu43oqId7awbu7f6ht8WVllq8KKhFIj87/qrAhjYPhmCgL5l6yrOLDNjPJep0YuRg2Qs9cKy74WSbvDOaRMC4FB50ZTHYv2D+wz1OXcp+ElX6OftBAxtkWsT5QzapCHzQevQq4E+geycnZVYRiJjPJZ+S7dLarDTMtcaD4JS+l4lmkTjKWXknn93jJofFUUAYjDY/f+sVrTczrIPxKhODo25A5bOFQXnN2M2dA0lxvP6pmqhaxGq0hoeZInS5NryS0qJTy2+ZZkwpjjAXE6pp419VsZt68lCxSllxaRP8zhdCKxRH/0ExNJ1Arng0mpGr5tINVqk0/dAcxEi+N604PFJC+3E26OCdI7zkh5GDdbaP3bh6hZxNjnqwTy2oc/qWDvOkHNCKblPgNgVqtL0Ubm0R/IjldOCiCh+pVMWaplfq3AogetUEbh2c1MMzk8bKG/QObjpjFJzunNRU5ClO2hDTBlQSV8DgjBSo4OAv4fwnXcEi0WZlA/IORomkEQaUJqWix7oUhs1S7l0rOQa3+e2agmq4OENg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR07MB42526CF2E3F40F73B4A7287E8F710HE1PR07MB4252eurp_" MIME-Version: 1.0 X-OriginatorOrg: nokia-bell-labs.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR07MB4252.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d5511acc-2de4-4283-c314-08d8346f77ac X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jul 2020 10:01:02.5151 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 5nkmHI0Khk9BH++ZpoSwm59U8XUiAHNlL7ljmEQ9ikxAokvD5pGUbc3GZ67+J3VCbO88tblQmJ6s5aPOgs/bT5JgPaK7diopenPR9jmIrzc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2185 Archived-At: Subject: Re: [Rats] Age Claim in EAT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 10:01:13 -0000 --_000_HE1PR07MB42526CF2E3F40F73B4A7287E8F710HE1PR07MB4252eurp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Interesting. We've implemented something similar (or at least tried to be compliant with= the spec as much as we can) For each claim we have at minimum the time of the claim request (R) by the = attestating authority, the time of claim creation (C) by the reporting auth= ority and the time of receipt (T) by the attesting authority. One of the attestation rules is thus: R < C < T Another would then deal with timliness of the obtaining of the claim, eg: = T -R < \epsilon I agree that some idea of the latches/stage-transitions would help. Ian -- Dr. Ian Oliver Cybersecurity Research Distinguished Member of Technical Staff Nokia Bell Labs +358 50 483 6237 ________________________________ From: Hannes Tschofenig Sent: 30 July 2020 11:28 To: Henk Birkholz ; rats@ietf.org Subject: Re: [Rats] Age Claim in EAT Thanks for the clarification, Henk. Since I don't know what information consumers of Entity Attestation Tokens = really need to make decisions I am not sure whether the current functionali= ty is sufficient already or not. To me as a reader it appears underspecifie= d. At a minimum a reference to Appendix A of the RATS architecture documen= t in the EAT spec would be useful. Ciao Hannes -----Original Message----- From: Henk Birkholz Sent: Wednesday, July 29, 2020 11:11 AM To: Hannes Tschofenig ; rats@ietf.org Subject: Re: [Rats] Age Claim in EAT Hi Hannes, in the scope of Evidence: Signing a CWT structure is creating an EAT. This event is defined as time(EG) here: https://tools.ietf.org/html/draft-ietf-rats-architecture-05#appendix-A "Creating a token" would mean "Evidence Generation", for example. Age also is a time interval based on a time unit (units that apply to Henk = are years, I claim that Henk's age is 21, of course. Trust in Henk's Claims= can be established via Endorsements). Age is a time interval expressed as = a duration. That means that the beginning of that time interval is set as z= ero (an epoch) and then counts the time units. The semantics of age in EAT are: the epoch is time(EG) and the unit is seconds. This only works, if time sources for relative time-counters are available, = of course. Collection of Claims - time(CC) was proposed to the architecture, but did n= ot find consensus yet (we are working on time(AA), though, the time at whic= h the Attester becomes aware of a changes value in the Target Environment r= ight now). But! there is time(VG), the Value Generation. This time can often only be i= nferred or approximated (in contrast to time(AA)), but it is the best we ha= ve defined right now in the context of: > If that's the case, I wonder whether it would also make sense to take int= o account that different information may be collected at a different point = in time and hence the age indication would better go (somehow) with specifi= c claims where the time difference between the collection of the data and t= he signature generation matters. As a note: We have not talked at all before about the common concept of "la= tches" or stage transitions... this is an important concept that does captu= re the "this event has happened" (before/after a defined event) and represe= nts strong security implications that are not included in the RATS architec= ture today. Would that maybe help in your context? Viele Gr=FC=DFe, Henk On 29.07.20 10:37, Hannes Tschofenig wrote: > Hi Laurence, Hi all, > > How does the age claim work? > > The spec says "represents the number of seconds that have elapsed since t= he token was created". > > By creating a token you also protect the claims with a signature and henc= e you cannot change the content of the claims anymore (without breaking the= signature). > > Hence, here "creating a token" must mean something different. I suspect i= t means when certain values have been collected from the device and before = the token with the signature was put together. Correct? > > If that's the case, I wonder whether it would also make sense to take int= o account that different information may be collected at a different point = in time and hence the age indication would better go (somehow) with specifi= c claims where the time difference between the collection of the data and t= he signature generation matters. I also wonder whether the number of second= s matter and whether you really want to communicate something more abstract= , such as "I created a hash over the firmware during boot time" rather than= "I created the hash over the firmware in real-time when I was asked". > > Ciao > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are conf= idential and may also be privileged. If you are not the intended recipient,= please notify the sender immediately and do not disclose the contents to a= ny other person, use it for any purpose, or store or copy the information i= n any medium. Thank you. > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_HE1PR07MB42526CF2E3F40F73B4A7287E8F710HE1PR07MB4252eurp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Interesting.

We've implemented something similar (or at least tried to be compliant with= the spec as much as we can)

For each claim we have at minimum the time of the claim request (R) by the = attestating authority, the time of claim creation (C) by the reporting auth= ority and the time of receipt (T) by the attesting authority.

One of the attestation rules is thus: R < C < T

Another would then deal with timliness of the obtaining of the claim, eg:&n= bsp;  T -R < \epsilon

I agree that some idea of the latches/stage-transitions would help.

Ian

--

Dr. Ian Oliver

Cybersecurity Research

Distinguished Member of Technical Staff

Nokia Bell Labs

+358 50 483 6237


From: Hann= es Tschofenig <Hannes.Tschofenig@arm.com>
Sent: 30 July 2020 11:28
To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf= .org <rats@ietf.org>
Subject: Re: [Rats] Age Claim in EAT
 
Thanks for the clarification, Henk.

Since I don't know what information consumers of Entity Attestation Tokens = really need to make decisions I am not sure whether the current functionali= ty is sufficient already or not. To me as a reader it appears underspecifie= d.  At a minimum a reference to Appendix A of the RATS architecture document in the EAT spec would be usef= ul.

Ciao
Hannes

-----Original Message-----
From: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Sent: Wednesday, July 29, 2020 11:11 AM
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; rats@ietf.org
Subject: Re: [Rats] Age Claim in EAT

Hi Hannes,

in the scope of Evidence:

Signing a CWT structure is creating an EAT. This event is defined as
time(EG) here:
https://tools.ietf.org/html/draft-ietf-rats-architecture-05#appendi= x-A

"Creating a token" would mean "Evidence Generation", fo= r example.

Age also is a time interval based on a time unit (units that apply to Henk = are years, I claim that Henk's age is 21, of course. Trust in Henk's Claims= can be established via Endorsements). Age is a time interval expressed as = a duration. That means that the beginning of that time interval is set as zero (an epoch) and then counts = the time units.

The semantics of age in EAT are:

the epoch is time(EG) and the unit is seconds.
This only works, if time sources for relative time-counters are available, = of course.

Collection of Claims - time(CC) was proposed to the architecture, but did n= ot find consensus yet (we are working on time(AA), though, the time at whic= h the Attester becomes aware of a changes value in the Target Environment r= ight now).

But! there is time(VG), the Value Generation. This time can often only be i= nferred or approximated (in contrast to time(AA)), but it is the best we ha= ve defined right now in the context of:

> If that's the case, I wonder whether it would also make sense to take = into account that different information may be collected at a different poi= nt in time and hence the age indication would better go (somehow) with spec= ific claims where the time difference between the collection of the data and the signature generation matters.
As a note: We have not talked at all before about the common concept of &qu= ot;latches" or stage transitions... this is an important concept that = does capture the "this event has happened" (before/after a define= d event) and represents strong security implications that are not included in the RATS architecture today. Would that maybe hel= p in your context?

Viele Gr=FC=DFe,

Henk


On 29.07.20 10:37, Hannes Tschofenig wrote:
> Hi Laurence, Hi all,
>
> How does the age claim work?
>
> The spec says "represents the number of seconds that have elapsed= since the token was created".
>
> By creating a token you also protect the claims with a signature and h= ence you cannot change the content of the claims anymore (without breaking = the signature).
>
> Hence, here "creating a token" must mean something different= . I suspect it means when certain values have been collected from the devic= e and before the token with the signature was put together. Correct?
>
> If that's the case, I wonder whether it would also make sense to take = into account that different information may be collected at a different poi= nt in time and hence the age indication would better go (somehow) with spec= ific claims where the time difference between the collection of the data and the signature generation matters. I= also wonder whether the number of seconds matter and whether you really wa= nt to communicate something more abstract, such as "I created a hash o= ver the firmware during boot time" rather than "I created the hash over the firmware in real-time when I was as= ked".
>
> Ciao
> Hannes
>
> IMPORTANT NOTICE: The contents of this email and any attachments are c= onfidential and may also be privileged. If you are not the intended recipie= nt, please notify the sender immediately and do not disclose the contents t= o any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
>
> _______________________________________________
> RATS mailing list
> RATS@ietf.org
> https://www.iet= f.org/mailman/listinfo/rats
>
IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you.
--_000_HE1PR07MB42526CF2E3F40F73B4A7287E8F710HE1PR07MB4252eurp_-- From nobody Thu Jul 30 03:31:28 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B9BA3A105E for ; Thu, 30 Jul 2020 03:31:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ii7tqlHpfAuA for ; Thu, 30 Jul 2020 03:31:23 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A3DB3A105C for ; Thu, 30 Jul 2020 03:31:22 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FbBwBNoCJf/xwBYJlggQmBTIMXgTM?= =?us-ascii?q?KhCuRGJtQMgsLAQEBAQEBAQEBBgEBGAsKAgQBAQKESgKCKwEkOBMCEAEBBgE?= =?us-ascii?q?BAQEBBgQCAoZFDEMBEAGCHWGBAwEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBEgI?= =?us-ascii?q?NNh43EgEeAQEBAQIBAQEhDwEFNhALCQIOBAYCAiYCAicgAg4GAQwGAgEBgyI?= =?us-ascii?q?BglwfBQuTB5sEdoEyhVKDO4E6BoEOKgGGTYR8gTQPD4FMP4ERJw+CLC4+glw?= =?us-ascii?q?BAYR1gj4iBJAFgmmicCkHgVqBCIEIBAuHRJEYBQoekUUGjimSH4ozlGwCBAI?= =?us-ascii?q?JAhWBaoF7TSRPgmlQFwINkhCFFIVEcjcCBgEHAQEDCXyIGIZoAYEQAQE?= X-IPAS-Result: =?us-ascii?q?A2FbBwBNoCJf/xwBYJlggQmBTIMXgTMKhCuRGJtQMgsLA?= =?us-ascii?q?QEBAQEBAQEBBgEBGAsKAgQBAQKESgKCKwEkOBMCEAEBBgEBAQEBBgQCAoZFD?= =?us-ascii?q?EMBEAGCHWGBAwEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBEgINNh43EgEeAQEBA?= =?us-ascii?q?QIBAQEhDwEFNhALCQIOBAYCAiYCAicgAg4GAQwGAgEBgyIBglwfBQuTB5sEd?= =?us-ascii?q?oEyhVKDO4E6BoEOKgGGTYR8gTQPD4FMP4ERJw+CLC4+glwBAYR1gj4iBJAFg?= =?us-ascii?q?mmicCkHgVqBCIEIBAuHRJEYBQoekUUGjimSH4ozlGwCBAIJAhWBaoF7TSRPg?= =?us-ascii?q?mlQFwINkhCFFIVEcjcCBgEHAQEDCXyIGIZoAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.75,414,1589234400"; d="scan'208";a="19372069" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jul 2020 12:31:19 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BaCQAVoCJf/1lIDI1ggQmBTIIobwN?= =?us-ascii?q?UMCwKhCuRGJwNCwEDAQEBAQEGAQEYCwoCBAEBhEwCgikCJDgTAhABAQUBAQE?= =?us-ascii?q?CAQYEbYVcDEMBEAGFHAEBAQMBAQEhDwEFNhALCQIOBAYCAiYCAicgAg4GAQw?= =?us-ascii?q?GAgEBgyIBglwkC5MSmwR2gTKFUoM7gToGgQ4qAYZNhHyBNA8PgUw/gREnD4I?= =?us-ascii?q?sLj6CXAEBhHWCPiIEkAWCaaJwKQeBWoEIgQgEC4dEkRgFCh6RRQaOKZIfijO?= =?us-ascii?q?UbAIEAgkCFYFqI4FXTSRPgmlQFwINkhCFFIVEQTE3AgYBBwEBAwl8iBiGaAG?= =?us-ascii?q?BEAEB?= X-IronPort-AV: E=Sophos;i="5.75,414,1589234400"; d="scan'208";a="31814978" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Jul 2020 12:31:17 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 06UAVHcD013326 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Thu, 30 Jul 2020 12:31:17 +0200 Received: from [192.168.16.50] (79.206.156.41) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Thu, 30 Jul 2020 12:31:12 +0200 To: Laurence Lundblade , References: <830EC75F-B44E-4F3A-9972-D2196E480DBC@island-resort.com> From: Henk Birkholz Message-ID: <8d1ee7d4-bba4-a15c-28da-d3c380d265be@sit.fraunhofer.de> Date: Thu, 30 Jul 2020 12:31:10 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <830EC75F-B44E-4F3A-9972-D2196E480DBC@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.206.156.41] Archived-At: Subject: Re: [Rats] Attestation key material in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 10:31:27 -0000 Hi Laurence, I updated issue #65 for you: > https://github.com/ietf-rats-wg/architecture/issues/65 This will make it easier for the editors to address your two alternative proposals. I think it would help, if you are present when we discuss this. MCR: do we plan for an editor's meeting next Tue? Viele Grüße, Henk On 29.07.20 22:14, Laurence Lundblade wrote: > I presented this slide below the IETF 108 RATS meeting today. I believe > it is critical that the RATS architecture allow for all uses case in the > slide. > > In particular RATS architecture must allow for symmetric keys. TPMs and > public-key based crypto is too expensive for low-cost, large-scale IoT. > There are real use cases supported my multiple companies using symmetric > keys. Symmetric keys can be made secure at the verifier — we secure keys > for TLS at servers all the time using HSMs and such. > > I do NOT want to put this taxonomy into the RATS architecture document. > I don’t think that is necessary. I created the taxonomy as background > information and as illustrative examples of real world designs. > > I think there are options for adjusting the architecture document to > accommodate this. > > Option 1) Expand the notion of an Endorsement quite a lot. > Endorsements are not longer just static documents like X.509 certs > and/or COSE/CMS signed blobs. They are anything that conveys the > attestation key material into the Verifier or allows Verification of > the attester. They must support confidentiality. > > Option 2) Replace the term “Endorsement” with something like > “Verifier Input” or “Attester Trust Criteria” in the architecture > document as the means by which key material goes into the Verifier. > Endorsements still exist, but are just one type of Verifier Input or > Attester Trust Criteria just like EAT is one kind of Attestation > Evidence. > > > I have a slight preference for Option 2). I’m interested in opinions of > which option to choose. > > This is issue #65 > , opened in > GitHub four months ago. It is not a last-minute/new issue. I believe it > is in scope with the RATS charter as the charter explicitly mentions > attestation key material in the Program of Work. > > LL > > My main point of this taxonomy was to affect the RATS architecture > document. There was discussion today of it being a separate document > perhaps outside of RATS. I’m happy for that to happen, but I don’t want > to write it because I have enough RATS/EAT work to do. I’m very happy if > other folks want to pick it up and use in other documents :-). > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Thu Jul 30 11:50:35 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72F763A08EC for ; Thu, 30 Jul 2020 11:50:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.916 X-Spam-Level: X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uq0XwuxSs5cZ for ; Thu, 30 Jul 2020 11:50:30 -0700 (PDT) Received: from p3plsmtpa08-02.prod.phx3.secureserver.net (p3plsmtpa08-02.prod.phx3.secureserver.net [173.201.193.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D3CF3A0898 for ; Thu, 30 Jul 2020 11:50:30 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id 1DdMkDlPeccZp1DdMkl3yp; Thu, 30 Jul 2020 11:50:28 -0700 X-CMAE-Analysis: v=2.3 cv=c/HVvi1l c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=0XtbOteLAAAA:20 a=48vgC7mUAAAA:8 a=W6KhWYqd5INMolrMDvwA:9 a=AfaGvO1MeL9y9aZ_:21 a=mfjsQ84ms7a-PWAa:21 a=QEXdDO2ut3YA:10 a=hnbapBadfA1NaKZJgBkA:9 a=Wb_aUdSB-Qzo9BCS:21 a=gNlvrNL0az7UbwyZ:21 a=PsVteSXnUuCul98o:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <41C4F477-5EE8-4904-AAEF-0F75DFC8A513@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_129FB8B8-6909-4C95-AB63-7EFF7CF1634A" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 30 Jul 2020 11:50:28 -0700 In-Reply-To: <8d1ee7d4-bba4-a15c-28da-d3c380d265be@sit.fraunhofer.de> Cc: rats@ietf.org To: Henk Birkholz References: <830EC75F-B44E-4F3A-9972-D2196E480DBC@island-resort.com> <8d1ee7d4-bba4-a15c-28da-d3c380d265be@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfLAKAodlp6d1HA9jdmOUCxee/zAICX7cHzlb5z17OPxw645V+lpNMjxwt/f5vk0ilkDTrXBIorUQc23PSnVOtViVU2NOBVDoH+fDtdxfjP26ZqNRitVj Hh8WBay5hGnxIiUB2puAZZiG5K1updCBYkSXOk9Y2qi+Vv6hLF9vW7UNc38ildxo+yyTttCuzvf46anDPWAo2Rgq5Vs7pT7b4Eo= Archived-At: Subject: Re: [Rats] Attestation key material in architecture document X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 18:50:33 -0000 --Apple-Mail=_129FB8B8-6909-4C95-AB63-7EFF7CF1634A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Thanks for updating the issue. I will attend the architecture meeting = when it is discussed. :-) A good first step would be to determine if there is consensus that the 7 = cases I described (TRUST_ANCHOR=E2=80=A6VERIFICATION_SERVICE) should be = allowed and supported by RATS. There were no fundamental objections in = the 108 RATS meeting, but it would be good to know explicitly there is = consensus on this so we=E2=80=99re working from a common base. Does anyone think RATS architecture should explicitly exclude any of = these 7? LL > On Jul 30, 2020, at 3:31 AM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > I updated issue #65 for you: >=20 >> https://github.com/ietf-rats-wg/architecture/issues/65 = >=20 > This will make it easier for the editors to address your two = alternative proposals. I think it would help, if you are present when we = discuss this. >=20 > MCR: do we plan for an editor's meeting next Tue? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 29.07.20 22:14, Laurence Lundblade wrote: >> I presented this slide below the IETF 108 RATS meeting today. I = believe it is critical that the RATS architecture allow for all uses = case in the slide. >> In particular RATS architecture must allow for symmetric keys. TPMs = and public-key based crypto is too expensive for low-cost, large-scale = IoT. There are real use cases supported my multiple companies using = symmetric keys. Symmetric keys can be made secure at the verifier =E2=80=94= we secure keys for TLS at servers all the time using HSMs and such. >> I do NOT want to put this taxonomy into the RATS architecture = document. I don=E2=80=99t think that is necessary. I created the = taxonomy as background information and as illustrative examples of real = world designs. >> I think there are options for adjusting the architecture document to = accommodate this. >> Option 1) Expand the notion of an Endorsement quite a lot. >> Endorsements are not longer just static documents like X.509 certs >> and/or COSE/CMS signed blobs. They are anything that conveys the >> attestation key material into the Verifier or allows Verification = of >> the attester. They must support confidentiality. >> Option 2) Replace the term =E2=80=9CEndorsement=E2=80=9D with = something like >> =E2=80=9CVerifier Input=E2=80=9D or =E2=80=9CAttester Trust = Criteria=E2=80=9D in the architecture >> document as the means by which key material goes into the = Verifier. >> Endorsements still exist, but are just one type of Verifier Input = or >> Attester Trust Criteria just like EAT is one kind of Attestation >> Evidence. >> I have a slight preference for Option 2). I=E2=80=99m interested in = opinions of which option to choose. >> This is issue #65 = >, opened in = GitHub four months ago. It is not a last-minute/new issue. I believe it = is in scope with the RATS charter as the charter explicitly mentions = attestation key material in the Program of Work. >> LL >> My main point of this taxonomy was to affect the RATS architecture = document. There was discussion today of it being a separate document = perhaps outside of RATS. I=E2=80=99m happy for that to happen, but I = don=E2=80=99t want to write it because I have enough RATS/EAT work to = do. I=E2=80=99m very happy if other folks want to pick it up and use in = other documents :-). >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_129FB8B8-6909-4C95-AB63-7EFF7CF1634A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Thanks for updating the issue. I will attend the architecture = meeting when it is discussed. :-)

A good first step would be to determine if there is = consensus that the 7 cases I described = (TRUST_ANCHOR=E2=80=A6VERIFICATION_SERVICE) should be allowed and = supported by RATS. There were no fundamental objections in the 108 RATS = meeting, but it would be good to know explicitly there is consensus on = this so we=E2=80=99re working from a common base.
Does anyone think RATS architecture = should explicitly exclude any of these 7?

LL


On Jul 30, 2020, at 3:31 AM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi Laurence,

I updated issue #65 for = you:

https://github.com/ietf-rats-wg/architecture/issues/65

This will make it easier for the editors to address your two = alternative proposals. I think it would help, if you are present when we = discuss this.

MCR: do we = plan for an editor's meeting next Tue?

Viele Gr=C3=BC=C3=9Fe,

Henk

On 29.07.20 22:14, Laurence Lundblade wrote:
I = presented this slide below the IETF 108 RATS meeting today. I believe it = is critical that the RATS architecture allow for all uses case in the = slide.
In particular RATS architecture must allow for = symmetric keys. TPMs and public-key based crypto is too expensive for = low-cost, large-scale IoT. There are real use cases supported my = multiple companies using symmetric keys. Symmetric keys can be made = secure at the verifier =E2=80=94 we secure keys for TLS at servers all = the time using HSMs and such.
I do NOT want to put this = taxonomy into the RATS architecture document. I don=E2=80=99t think that = is necessary. I created the taxonomy as background information and as = illustrative examples of real world designs.
I think there = are options for adjusting the architecture document to accommodate = this.
   Option 1) Expand the notion of an = Endorsement quite a lot.
   Endorsements = are not longer just static documents like X.509 certs
   and/or COSE/CMS signed blobs. They are = anything that conveys the
   attestation = key material into the Verifier or allows Verification of
   the attester. They must support = confidentiality.
   Option 2) Replace the = term =E2=80=9CEndorsement=E2=80=9D with something like
   =E2=80=9CVerifier Input=E2=80=9D or = =E2=80=9CAttester Trust Criteria=E2=80=9D in the architecture
   document as the means by which key material = goes into the Verifier.
   Endorsements = still exist, but are just one type of Verifier Input or
   Attester Trust Criteria just like EAT is = one kind of Attestation
   Evidence.
I have a slight preference for Option 2). I=E2=80=99m = interested in opinions of which option to choose.
This is = issue #65 <https://github.com/ietf-rats-wg/architecture/issues/65>,=  opened in GitHub four months ago. It is not a last-minute/new = issue. I believe it is in scope with the RATS charter as the charter = explicitly mentions attestation key material in the Program of Work.
LL
My main point of this taxonomy was to affect = the RATS architecture document. There was discussion today of it being a = separate document perhaps outside of RATS. I=E2=80=99m happy for that to = happen, but I don=E2=80=99t want to write it because I have enough = RATS/EAT work to do. I=E2=80=99m very happy if other folks want to pick = it up and use in other documents :-).
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_129FB8B8-6909-4C95-AB63-7EFF7CF1634A-- From nobody Thu Jul 30 12:29:37 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1A793A0BAB for ; Thu, 30 Jul 2020 12:29:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.916 X-Spam-Level: X-Spam-Status: No, score=-1.916 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Uv5Q1dqBK11L for ; Thu, 30 Jul 2020 12:29:33 -0700 (PDT) Received: from p3plsmtpa07-05.prod.phx3.secureserver.net (p3plsmtpa07-05.prod.phx3.secureserver.net [173.201.192.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCA393A0B98 for ; Thu, 30 Jul 2020 12:29:33 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id 1EFAkPgO5kxIh1EFAkOkjY; Thu, 30 Jul 2020 12:29:32 -0700 X-CMAE-Analysis: v=2.3 cv=SPU8q9nH c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=0XtbOteLAAAA:20 a=48vgC7mUAAAA:8 a=Gu6Bvr1FBC0pGGtCSaIA:9 a=Vl5KeozEUxxqEmUB:21 a=DDoqwnbPaTKbGcyp:21 a=QEXdDO2ut3YA:10 a=xD0DdyzbBirqtujzj54A:9 a=OYDYWUbVYQmT748B:21 a=yXhaxGT5ovurwyWv:21 a=CIpUWA5r0H2WPRer:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <80569015-E4A0-4F10-88D7-5A3305C01D10@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_37C70FCD-672A-4FEE-835B-1C39D4DB5D92" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 30 Jul 2020 12:29:31 -0700 In-Reply-To: Cc: Hannes Tschofenig , "rats@ietf.org" To: Henk Birkholz References: X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfB0QPGlICqIKvAkO8NU3szv551XVyNkTkx09n9XPsg4rAgNdUnOEwyy4Bfo5KgxfK45EsnxbUbLMb0s7SX53AOuTA0igrHavw5whw7uJx316fzUUx00P 9M8uLYbW5vOSp/wfGj8MwOWWjvALnXiOfW/q9fwatTVR4r6H45sAM4mE9rQrhtJCjnsXpan/ZxNXlCg6EyHsDGnELEoQXgJaUTdvjwQ3C/aLn+YUHLwqhbKn pOqUgk3PQ8hpaj5BGGGCFQ== Archived-At: Subject: Re: [Rats] Age Claim in EAT X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 19:29:36 -0000 --Apple-Mail=_37C70FCD-672A-4FEE-835B-1C39D4DB5D92 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 In concept, age is the difference between time(VG) and time(EG) as = described in RATS Architecture Appendix A. I think time(EG) is when the token is signed (or otherwise = cryptographically protected). I=E2=80=99m surprised that Appendix A = doesn=E2=80=99t define it as that important moment. Claims can change = after time(EG). After Eric created the timing diagrams for architecture I re-thought the = age claim. I don=E2=80=99t think it is a general independent claim, but = rather is an attribute of individual claims, for example the age of a = location or of a SW measurement. PR #59 = removes it as a = top-level claim and adds an age item to the location claim. There was some discussion between these two options: - Define a general way to add attributes like age (or time stamp) to = any claim =E2=80=94 A general claim decoration mechanism - Add an age (or time stamp) field to claims that need it I=E2=80=99ve tended away from general attributes to keep code size and = complexity down. But what I really want to know is which manufacturer Endorses Henk, what = is in his Endorsement and whether it is signed by a public key pair or a = symmetric key. :-) LL > On Jul 29, 2020, at 2:11 AM, Henk Birkholz = wrote: >=20 > Hi Hannes, >=20 > in the scope of Evidence: >=20 > Signing a CWT structure is creating an EAT. This event is defined as = time(EG) here: = https://tools.ietf.org/html/draft-ietf-rats-architecture-05#appendix-A >=20 > "Creating a token" would mean "Evidence Generation", for example. >=20 > Age also is a time interval based on a time unit (units that apply to = Henk are years, I claim that Henk's age is 21, of course. Trust in = Henk's Claims can be established via Endorsements). Age is a time = interval expressed as a duration. That means that the beginning of that = time interval is set as zero (an epoch) and then counts the time units. >=20 > The semantics of age in EAT are: >=20 > the epoch is time(EG) and the unit is seconds. > This only works, if time sources for relative time-counters are = available, of course. >=20 > Collection of Claims - time(CC) was proposed to the architecture, but = did not find consensus yet (we are working on time(AA), though, the time = at which the Attester becomes aware of a changes value in the Target = Environment right now). >=20 > But! there is time(VG), the Value Generation. This time can often only = be inferred or approximated (in contrast to time(AA)), but it is the = best we have defined right now in the context of: >=20 >> If that's the case, I wonder whether it would also make sense to take = into account that different information may be collected at a different = point in time and hence the age indication would better go (somehow) = with specific claims where the time difference between the collection of = the data and the signature generation matters. >=20 > As a note: We have not talked at all before about the common concept = of "latches" or stage transitions... this is an important concept that = does capture the "this event has happened" (before/after a defined = event) and represents strong security implications that are not included = in the RATS architecture today. Would that maybe help in your context? >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 > On 29.07.20 10:37, Hannes Tschofenig wrote: >> Hi Laurence, Hi all, >> How does the age claim work? >> The spec says "represents the number of seconds that have elapsed = since the token was created". >> By creating a token you also protect the claims with a signature and = hence you cannot change the content of the claims anymore (without = breaking the signature). >> Hence, here "creating a token" must mean something different. I = suspect it means when certain values have been collected from the device = and before the token with the signature was put together. Correct? >> If that's the case, I wonder whether it would also make sense to take = into account that different information may be collected at a different = point in time and hence the age indication would better go (somehow) = with specific claims where the time difference between the collection of = the data and the signature generation matters. I also wonder whether the = number of seconds matter and whether you really want to communicate = something more abstract, such as "I created a hash over the firmware = during boot time" rather than "I created the hash over the firmware in = real-time when I was asked". >> Ciao >> Hannes >> IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >> _______________________________________________ >> RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_37C70FCD-672A-4FEE-835B-1C39D4DB5D92 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
In concept, age is the difference between time(VG) and = time(EG) as described in RATS Architecture Appendix A.

I think time(EG) is when = the token is signed (or otherwise cryptographically protected). I=E2=80=99= m surprised that Appendix A doesn=E2=80=99t define it as that important = moment. Claims can change after time(EG).

After Eric created the timing diagrams = for architecture I re-thought the age claim. I don=E2=80=99t think it is = a general independent claim, but rather is an attribute of individual = claims, for example the age of a location or of a SW measurement. =  PR #59 removes it as a top-level claim and adds an = age item to the location claim.

There was some discussion between these = two options:
  - Define a general way to add = attributes like age (or time stamp) to any claim =E2=80=94 A general = claim decoration mechanism
  - Add an age (or = time stamp) field to claims that need it

I=E2=80=99ve tended away from general = attributes to keep code size and complexity down.
But what I really want to know is = which manufacturer Endorses Henk, what is in his Endorsement and whether = it is signed by a public key pair or a symmetric key. :-)

LL



On Jul 29, 2020, at 2:11 AM, Henk Birkholz = <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Hannes,

in the scope of Evidence:

Signing a CWT structure is creating an EAT. = This event is defined as time(EG) here: https://tools.ietf.org/html/draft-ietf-rats-architecture-05#app= endix-A

"Creating a token" would mean = "Evidence Generation", for example.

Age = also is a time interval based on a time unit (units that apply to Henk = are years, I claim that Henk's age is 21, of course. Trust in Henk's = Claims can be established via Endorsements). Age is a time interval = expressed as a duration. That means that the beginning of that time = interval is set as zero (an epoch) and then counts the time units.

The semantics of age in EAT are:

the epoch is time(EG) and the unit is = seconds.
This only works, if time sources for relative = time-counters are available, of course.

Collection of Claims - time(CC) was proposed to the = architecture, but did not find consensus yet (we are working on = time(AA), though, the time at which the Attester becomes aware of a = changes value in the Target Environment right now).

But! there is time(VG), the Value Generation. This time can = often only be inferred or approximated (in contrast to time(AA)), but it = is the best we have defined right now in the context of:
If that's the case, I = wonder whether it would also make sense to take into account that = different information may be collected at a different point in time and = hence the age indication would better go (somehow) with specific claims = where the time difference between the collection of the data and the = signature generation matters.

As= a note: We have not talked at all before about the common concept of = "latches" or stage transitions... this is an important concept that does = capture the "this event has happened" (before/after a defined event) and = represents strong security implications that are not included in the = RATS architecture today. Would that maybe help in your context?

Viele Gr=C3=BC=C3=9Fe,

Henk


On 29.07.20 = 10:37, Hannes Tschofenig wrote:
Hi Laurence, Hi all,
How does the age claim = work?
The spec says "represents the number of seconds that = have elapsed since the token was created".
By creating a = token you also protect the claims with a signature and hence you cannot = change the content of the claims anymore (without breaking the = signature).
Hence, here "creating a token" must mean = something different. I suspect it means when certain values have been = collected from the device and before the token with the signature was = put together. Correct?
If that's the case, I wonder = whether it would also make sense to take into account that different = information may be collected at a different point in time and hence the = age indication would better go (somehow) with specific claims where the = time difference between the collection of the data and the signature = generation matters. I also wonder whether the number of seconds matter = and whether you really want to communicate something more abstract, such = as "I created a hash over the firmware during boot time" rather than "I = created the hash over the firmware in real-time when I was asked".
Ciao
Hannes
IMPORTANT NOTICE: The = contents of this email and any attachments are confidential and may also = be privileged. If you are not the intended recipient, please notify the = sender immediately and do not disclose the contents to any other person, = use it for any purpose, or store or copy the information in any medium. = Thank you.
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_37C70FCD-672A-4FEE-835B-1C39D4DB5D92-- From nobody Thu Jul 30 13:46:00 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2278F3A0CB9 for ; Thu, 30 Jul 2020 13:45:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JS88Dwix3isa for ; Thu, 30 Jul 2020 13:45:56 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1E0D3A0D2F for ; Thu, 30 Jul 2020 13:45:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 312473004C0 for ; Thu, 30 Jul 2020 16:45:40 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id iCYnwEG1Hqrh for ; Thu, 30 Jul 2020 16:45:39 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-72-66-113-56.washdc.fios.verizon.net [72.66.113.56]) by mail.smeinc.net (Postfix) with ESMTPSA id E1B35300B6C for ; Thu, 30 Jul 2020 16:45:38 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.15\)) Date: Thu, 30 Jul 2020 16:45:40 -0400 References: <27435.1575305487@localhost> <19794.1575378270@localhost> <6a18b426-b11f-82e5-8758-93f79360b2a4@sit.fraunhofer.de> <40A05013-D12A-4D16-9FE9-2E97D5D8EF90@intel.com> <27974.1575407275@localhost> To: "rats@ietf.org" In-Reply-To: Message-Id: X-Mailer: Apple Mail (2.3445.104.15) Archived-At: Subject: [Rats] Review of draft-birkholz-rats-uccs-01 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jul 2020 20:45:58 -0000 # Major Concerns In Section 3.1, the re are two MUST requirements, but they are not = presented clearly. The are: 1) The secure channel MUST authenticate the Verifier to the = Attester. 2) The secure channel MUST protect the integrity of the = communications from the Verifier to the Attester. The way it is written also requires integrity protection in both = directions. Is that really needed? In Section 3.1, says: Further, the provider of the UCCS SHOULD be authenticated by the reciever to ensure the channel is truly secured and the sender is validated. I do not understand what this is trying to say beyond the MUST = requirement above. Maybe part of the problem is the mixing of the = discussion about authentication and integrity. In Section 3, when talking about confidentiality, I think that it would = be better to say: If confidentiality is also required, the secure channel SHOULD = mutually authenticate Verifier and the Attester. # Minor concerns In section 1, the phrase "Secure Channel provides the correct = properties" is a bit troublesome. The properties are not difficult to = explain in a sentence or two, so they should just be stated here. Also, = the sentences that follow can be omitted if you simply include in the = summary of the "correct properties" that the party sending the UCCS is = authenticated. In Section 1.1, please add Verifier and Attester the the terms that are = defined. # Nits General: Why are Claim and Secure Chanel capitalized? In section 1.1, please add a reference for the CWT Claims Registry. In section 2, please add a reference for a device's trusted execution = environment (probably the TEEP architecture draft). Russ= From nobody Thu Jul 30 18:05:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF9553A02F9 for ; Thu, 30 Jul 2020 18:05:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.513 X-Spam-Level: X-Spam-Status: No, score=-0.513 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T15J4qFM_eLQ for ; Thu, 30 Jul 2020 18:05:31 -0700 (PDT) Received: from p3plsmtpa07-04.prod.phx3.secureserver.net (p3plsmtpa07-04.prod.phx3.secureserver.net [173.201.192.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47CE33A02F7 for ; Thu, 30 Jul 2020 18:05:31 -0700 (PDT) Received: from [192.168.1.78] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id 1JUHkd5r2YsjC1JUHkaNgv; Thu, 30 Jul 2020 18:05:29 -0700 X-CMAE-Analysis: v=2.3 cv=A7YSwJeG c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=SeHIl_t-TDdhnmqP4ekA:9 a=uPeOTA0NQJCBQUlE:21 a=WfL2ITLW3AW6gX5S:21 a=QEXdDO2ut3YA:10 a=nMLCxLnFpPFCanOVVs8A:9 a=NgSAqW6IdS_949Lz:21 a=PYsnzAz18ta48HyL:21 a=_W_S_7VecoQA:10 a=UNufMw7wX1kDfnqieNMA:9 a=rJQfVcVWgbPaiqvO:18 a=HXjIzolwW10A:10 a=T6a71-JsGAwA:10 a=zqoWlk-6egBxjpx_U_4A:9 a=sXAURecWM_4HQ4Ta:18 a=pHzHmUro8NiASowvMSCR:22 a=nt3jZW36AmriUCFCBwmW:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_002D4070-A15C-414F-BB6C-73E7D7FA0A3D" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Message-Id: <27069F96-E572-46E5-A160-7E325F24C420@island-resort.com> Date: Thu, 30 Jul 2020 18:05:28 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfJ5A8XtmS/Vik1wCFz/yk1FTEZvrp2QbfWBPV+poLlhF3rz/CyTw3quKhm77jmK9HcTFfyUDV3ECP72EtEbeqzcpkTRWYQB6CdRNfzklheagnIMKhOzD 6wPaX6vueDwXBZ9Fr2y4FyMX7sZWZDmarHbHAxnGDRYuUX/SwE3iFtUA Archived-At: Subject: [Rats] Primary and secondary trust flows in RATS X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Jul 2020 01:05:33 -0000 --Apple-Mail=_002D4070-A15C-414F-BB6C-73E7D7FA0A3D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 In recently reviewing the RATS architecture, I think the trust flows = between the major entities can be classified as primary and secondary. The primary trust flow is how the RP comes trust to the = attester/device/manufacturer. It is the main purpose of attestation. The secondary trust flow is about privacy and confidentiality of = endorsements, policy, evidence and results. You can do attestation = without it if there is nothing to hide. Below are diagrams for both. =20 I went through the Trust Model (7) section of = draft-thaler-rats-architecture-05 and could easily classify each = paragraph as to whether it addresses the primary or secondary trust = flow, which I think validates the primary/secondary distinction. I=E2=80=99m sharing this here on the RATS list rather than just filing = issues and PRs against RATS architecture because I think it is a useful = general concept, but also think it would be helpful to incorporate it = into the document: Consider adding the diagrams below to the document and the transitive = nature of the primary trust flow The sections on the Attester (7.2) and Endorser (7.5) only discuss the = secondary trust flow. I think they really need to have text about there = role in the primary trust flow. 7.4 on the Verifier Trust is very confusing to me. I don=E2=80=99t think = Verifiers ever trust Attesters directly. It is only through the = Endorser/Manufacturer that they come to transitively trust an Attester LL --Apple-Mail=_002D4070-A15C-414F-BB6C-73E7D7FA0A3D Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_AEBCD08F-8D9F-4A83-B664-586F8E8732B4" --Apple-Mail=_AEBCD08F-8D9F-4A83-B664-586F8E8732B4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 In = recently reviewing the RATS architecture, I think the trust flows = between the major entities can be classified as primary and secondary.

The primary trust flow = is how the RP comes trust to the attester/device/manufacturer. It is the = main purpose of attestation.

The secondary trust flow is about = privacy and confidentiality of endorsements, policy, evidence and = results. You can do attestation without it if there is nothing to = hide.

Below = are diagrams for both.  

I went through the Trust Model (7) = section of  draft-thaler-rats-architecture-05 and could easily = classify each paragraph as to whether it addresses the primary or = secondary trust flow, which I think validates the primary/secondary = distinction.

I=E2=80=99m sharing this here on the RATS list rather than = just filing issues and PRs against RATS architecture because I think it = is a useful general concept, but also think it would be helpful to = incorporate it into the document:
  • Consider adding the diagrams below to the document and the = transitive nature of the primary trust flow
  • The = sections on the Attester (7.2) and Endorser (7.5) only discuss the = secondary trust flow. I think they really need to have text about there = role in the primary trust flow.
  • 7.4 on the Verifier = Trust is very confusing to me. I don=E2=80=99t think Verifiers ever = trust Attesters directly. It is only through the Endorser/Manufacturer = that they come to transitively trust an =  Attester
LL






= --Apple-Mail=_AEBCD08F-8D9F-4A83-B664-586F8E8732B4 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-4.png Content-Type: image/png; x-unix-mode=0666; name="PastedGraphic-4.png" Content-Id: iVBORw0KGgoAAAANSUhEUgAABMwAAAKtCAYAAADbzPKmAAABRmlDQ1BJQ0MgUHJvZmlsZQAAKJFj YGASSSwoyGFhYGDIzSspCnJ3UoiIjFJgf8LAwsDPwMagx8CTmFxc4BgQ4ANUwgCjUcG3awyMIPqy Lsgs0yQOZ95O1r7U/Hlec4L4/TDVowCulNTiZCD9B4jTkwuKShgYGFOAbOXykgIQuwPIFikCOgrI ngNip0PYG0DsJAj7CFhNSJAzkH0DyBZIzkgEmsH4AsjWSUIST0diQ+0FAV4fd4VQn5Agx3BPF1cC 7iUZlKRWlIBo5/yCyqLM9IwSBUdgKKUqeOYl6+koGBkYGTAwgMIcovrzDXBYMopxIMQKxBgYLGYA BR8ixOKBftgux8DA34cQUwP6V8CLgeHgvoLEokS4Axi/sRSnGRtB2NzbGRhYp/3//zmcgYFdk4Hh 7/X//39v////7zIGBuZbDAwHvgEAEapeFgimAZUAAAGeaVRYdFhNTDpjb20uYWRvYmUueG1wAAAA AAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA1 LjQuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8y Mi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAg ICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAg ICAgICAgPGV4aWY6UGl4ZWxYRGltZW5zaW9uPjEyMjg8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgog ICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+Njg1PC9leGlmOlBpeGVsWURpbWVuc2lvbj4K ICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CqFrgnUA AEAASURBVHgB7J0FnCTF9ccLgsPhgUsgcLh7cAgSXA6HC+4ED4dD/liA4C7BCe7uFtzdHUJwd4f9 97fu3lxNbfdM90zP7uzs730+u93TXV3yLenu169ejdSViJOIgAiIgAiIgAiIgAiIgAiIgAiIgAiI gAiIgAh4AiOLgwiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIwAgCUpiNYKE9ERABERABERABERAB ERABERABERABERABEXBSmKkRiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEBAQAqzAIZ2RUAEREAE REAEREAEREAEREAEREAEREAEREAKM7UBERABERABERABERABERABERABERABERABEQgISGEWwNCu CIiACIiACIiACIiACIiACIiACIiACIiACEhhpjYgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAgEB KcwCGNoVAREQAREQAREQAREQAREQAREQAREQAREQASnM1AZEQAREQAREQAREQAREQAREQAREQARE QAREICAghVkAQ7siIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIIWZ2oAIiIAIiIAIiIAIiIAIiIAI iIAIiIAIiIAIBASkMAtgaFcEREAEREAEREAEREAEREAEREAEREAEREAEpDBTGxABERABERABERAB ERABERABERABERABERCBgIAUZgEM7YqACIiACIiACIiACIiACIiACIiACIiACIiAFGZqAyIgAiIg AiIgAiIgAiIgAiIgAiIgAiIgAiIQEJDCLIChXREQAREQAREQAREQAREQAREQAREQAREQARGQwkxt QAREQAREQAREQAREQAREQAREQAREQAREQAQCAlKYBTC0KwIiIAIiIAIiIAIiIAIiIAIiIAIiIAIi IAJSmKkNiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEBAQAqzAIZ2RUAEREAEREAEREAEREAEREAE REAEREAEREAKM7UBERABERABERABERABERABERABERABERABEQgISGEWwNCuCIiACIiACIiACIiA CIiACIiACIiACIiACEhhpjYgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAgEBKcwCGNoVAREQAREQ AREQAREQAREQAREQAREQAREQASnM1AZEQAREQAREQAREQAREQAREQAREQAREQAREICAghVkAQ7si IAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIIWZ2oAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIBASk MAtgaFcEREAEREAEREAEREAEREAEREAEREAEREAEpDBTGxABERABERABERABERABERABERABERAB ERCBgIAUZgEM7YqACIiACIiACIiACIiACIiACIiACIiACIiAFGZqAyIgAiIgAiIgAiIgAiIgAiIg AiIgAiIgAiIQEBgl2NeuCIiACIiACIiACIiACIiACIiACPRJAj//8ou78ckH3S/JdtX5/tQny6BM i4AItA8BKczapy6UExEQAREQAREQAREQAREQAREQgYIEfvrlZ3fjEw+4C+691X34xWduyMJLFYxB wUVABESgOwEpzLoz0REREAEREAEREAEREAEREAEREIE2J/Djzz+5GxJF2YWJouyjLz+v5HYkN1Jl XzsiIAIi0CgBKcwaJafrREAEREAEREAEREAEREAEREAEepwAirLrH78/UZTd5j7+aoSirJIR6csq KLQjAiLQOAEpzBpnpytFQAREQAREQAREQAREQAREQAR6iMAPiaLsusfucxfdd5v75KsvMlOVhVkm Gp0QAREoQEAKswKwFFQEREAEREAEREAEREAERKAzCfzzn/90zz//fM3Crbbaam711VevGaa3T375 5Zdu2223dcsuu6xbf/31ezs7paT/w08/umuHK8o+/frLunGOJAuzuowUQAREoD4BKczqM1IIERAB ERABERABERABERCBDifw2GOPufvuu69Syvfff9+NPPLIbpJJJqkcm3322Sv7Ze989tln7pBDDnFL LLGEW2655RqO/rvvvnPnnXeem3jiifu8wuz7RFF2zaP3uosTi7LPvvkqNxNZmOVGpYAlEbjjjjvc WWedVTO2ySabzPfxmoFKPHnccce5J554om6+Skyy46KSwqzjqlQFEgEREAEREAEREAEREAERKErg sssuq7pk1FFHdUsuuaS7+eabq4636sfnn3/uDjvsMPeb3/ymKYVZq/LXk/F+9+MPwxRl99/uPi+g KOvJPCotEQgJvP322+62226rHKI/f//9915xPcoow9Qu0003XeV8K3aOP/54h8J8t91289Hffffd 7sorr5TCrAnYUpg1AU+XioAIiIAIiIAIiIAIiIAI9C8CL7zwgrvqqqvc4MGD3X/+8x/30EMPeauR c845x2GBtuKKK1aAYOmF5dj222/vj/FSfd1117kHHnjAv0ivuuqqbtFFF3WffvqpO/nkk32Y+++/ 35122mluiy228L+feuopd8UVV7g333zTTTvttG6ttdZyM844YyWNn3/+2Z155pnu4YcfduOPP75X 8lVO9rEdFGVXPXK3u/T+O9zn337deO41JbNxdrqyIQIbbrih489k3XXXdRdeeKF79dVX3XjjjWeH W7plDEJRZwqzE044wR1++OEtTbPTI5fCrNNrWOUTAREQAREQAREQAREQAREojcDTTz/t9tprL8fL 6Lvvvuvj3XXXXf2xjTfeuEphhuKLF2YUZjfccINbaaWV3AQTTOBmm202d9NNN7mjjjrKnXjiiW75 5Zd3F110kY/r0Ucf9VsUZkzx2mqrrVxXV5ebddZZ3bnnnusOPvhgP+VyjTXWcL/88otbZpllvOJu /vnnd1988YU78sgjSytrT0X0LYqyh+9ylz5wh/vi22+aTlZTMptGqAhaSAB/iTPPPLMbZ5xx3MUX X+yV71iGvfPOO+5vf/tbJWWmid9yyy1u0003dZNOOqn79ttvvRUbYwcy11xzuU022cRhwXbGGWe4 9957z1u1ET/HUcy/8sorFQUaxxl7mK59ySWXuDHGGMNP2yYvJrECng8DTFVnfMHitr+JFGb9rcZV XhEQAREQAREQAREQAREQgaYJjDXWWN4/EIqsn376qW58vNCi+HrkkUfc1FNP7ZVbvIA++OCDbptt tnF33XWXP77DDjt4pRg+1HbccUfvQw0l2sCBA91rr73mX5IJj6KMl16s3A466CCvsCMTp5xyivvr X/9aNz/tEODbH753VwxXlH313belZencu29y1ya+z1zi/R9js5GGb/mNcJRdf9a2PpwdG3HdsPDD Tlpcw475C6vjGh54WPyEHpb28MM+Hz6FKM3ux0Zcyx75NxlWlmH55zrEyjIsGOeGH/fnLIwdG3Gt XWdxDMsHuU9LMzw2LA5CWpoWx7BjcZo+whqsfMpEQSKV9H0sUVn82eTEsFA++LD94cfCsodx+aiJ uRJuRBx2bPyxB7ilZ5/X/SbxXdgqYQxA4U5//vDDD92vv/7qppxySq/cuvPOO6sUZii8CPunP/3J K9rnmWcePwbMPffcjsU9sErFig3/aVihfvTRR+7HH390p59+umOBkvPPP99PycTizNJFWYbV6xRT TOEVbCjRiGPIkCE1FfAo8qQwa1WrULwiIAIiIAIiIAIiIAIiIAIi0EEEeNGcc845fYnyKMx4yeWl Fmu0DTbYwDv3x4IkS26//Xb31VdfuY022sj7JXrjjTf8IgQrrLCCt0pB8XbNNdc4fK2hWDNhmme7 K8y++eE7d8VDd7nLHviP++r78hRlxoBtU1M6w4i0368IzDrF1G7ScSdwow73O9aqwn/yySd+KjWK KizEVllllZpJ4WPxxRdf9Mr0Pffc04dlNVyUZUzpvv766928887rp2RiVZYlX3/9tbdmXXPNNR15 +P3vf++VauTj7LPP7tMK+KwyN3O81yzM+MLCV5QiMvroozu+5GC6OO6447rpp5/ez99nLj83ilYJ ptZ77LFHVfTMT15qqaWqjulH3ySAmfwBBxzQ8szj02KXXXZpeTpKwHmT5KLjSx5uTJf4y1/+UhVU 40MVDv0QAREQAREQgX5DgBU0i8iWW27pbrzxRq80Q3HGSzKrYbIy5iyzzNItKqzJEKZ+8hcL51Gi MVVr7LHHjk+37e/3P//UDf33sY6tRATajkBiAYYSd8Jxxm1p1lBsowzPKyjcsZ7DTxnTurEwZTp3 UUExh7IMmWiiiRxWa1i2IX1VAe8z36J/vaYww3lluGxzM+UbMGCAd7DH3F4cXZYtaF7jvC688MJS mJUNupfiw9w9rt9WZAXzWEnPEChzfAlzjOlyLBofYiL6LQIiIAIiIAL9lwDTnrLkt7/9rbv33nvd yy+/7BVnOP/n75tvvvFWIvF19l4zdOhQt84668Sn/QIA+Ej74IMPvAXamGOO2S1MOx4YOP6E7pSt dvfWZViZYW0mEYF2IlCrH5eVT1bDLSIs9LHzzju74447zm299db+UhTtTNlkgYG8YlNWLTy6FHtP 7YsKeCtHq7bFPou0KhdNxoupMtpVVpgxJ5lNRqnLRUAEREAEREAEREAEREAERCAXAZxnoxBDGWbC OwpOvE1w/M8UKmbJMIXy1ltvdUsvvbSfAsUHXLNY++GHH/wl+EZD+BA433zzVf5438GxP36Ipptu Ou8/jemZJs8995zttu12wBhjuU2WWNFdsON+bv1Fl3VjjT5G2+ZVGetfBFB5DxhzrLYsNCteoiBn gRCs09566y3HQiO2+EizmWYcMwV8s3F1yvW9ZmHWCoCsGsFqMjSgGWaYoRVJKE4REIESCFx99dXu nnvuqcTElOoDDzzQFf3SUolAOyIgAiIgAiIgAiLQiwSw2lhxxRW9k+3DDjvMTTbZZF6pxbRJfAQh PO8cffTRbrzxxvNTMfEz9NBDD/nV55hWiRNvBN9lKNNwsL3YYot56zNejrEieemll7wPNKZnDRo0 yPsqu+CCC9xmm23m9ttvP+/zDAfffUVQTGy65EpuzQWXcJfcf4dfKZMVM5uV1eZbzG2w2HIu8XTu UIBgMeRt/4ZbAPKLXX/Utj6cHRsW3iyN7Fq2I475C30clbjI+PC0uqdp1wZpD0/Tp1qVD59iJd+W 5rDoyduwOLhu2DEfQyVvI8JZmsE2uDbMN/s+liD/HEGsLCPyMaIMdl1aOAs/LOoR+WbPS7LxR4dv hx0bdtbShCfC/2HHfGB/nT9u1w7fdk9z2HXD4hhxLdHG+Zggcfr/uwkmcqOMXMz6i7ibFWayYG2K kp3xA8FnmQn9nHcoFvjA4pS/RRZZxOs/Lr/8cr8SL+PQ999/b5cU3qKAR/nOHwsNIH1BAV+4oAUu aCuFGV9YmI+bJjR8vraw3CpToLj5sGxyLNxoMFHkJqOX75iOfqcRYFWStddeO+1Ut2O0K77mhYLv CXzq1RPMaCXDCLDiy5VXXlmFY5999nGtnEpQa3ypykiNH0zFloiACIiACIiACPQPAlh8mdVXWonj c6xu+b///c/hkJt3F/wE8QLLSngIzv5xzn3EEUc4FgzAL/Oyyy7r9t9/fx8ORdr666/vzjvvPO+f iGdOHH1vt912XhGH7yKeOVdaaSV36KGH+ncdZtjg34y4uRalHAYEJ510ko8zLd/teGzcMcd2m/95 ZbeWKc4eudt914TiDMXH+GON045FVZ5EIJXAyiuv7Fe9tCnY1157rTs7ccJvwsq6rIrLuMBYg5x1 1llutNFG8wp4fjONG2XXpZde6hp5b2GxkFgBH/tyJ53+JG2lMPv73//uJp988tz87777bq9hxWl7 KP/973/dLbfc4nDQXYag6OAGZdpq4pTyowyy7RHHH/7wB//Qkic3LNXL0t2hoOjhq6CkvQkUHV/a uzTKnQiIgAiIgAiIQKsJ2NTIOB2z7oiPzzXXXO62225z7733nmOxsgknnLAqyO9+9zv/Asx0SqY9 TTPNND5cGOjcc891xxxzjFeGmQ8zZs9gNcL0q6mmmqrbYmdM89xqq60c70R8COYDZCPOwMN89Nb+ eImSa4ulBru1FlrSXXzfbe7qR+5x3//UgB/gkXqrBEpXBIYRMIW6bUMuKNLj41iUYimKsgvFGAsb 8pvFEpEFFljAK8qPOuooh3KNODjGeSzDEJTl6EgwBjn11FN9GoQzSUuXfFhe0hTwLHZIGijm+qO0 lcKsaAVgJjjTTDP5rzdvv/121eVnnnlmaQozvtQ0oqGtypB+iIAIiIAIiIAIiIAIiIAIdDwBFGO1 hJXp+MuStHP4FsL3WZaw4mYnfdDHOmyrpVd16yz0Z3cRirNH73U/NKI4ywKm4yLQYgJYivIXC0qr X3/9NT7sleenn366txhF6Y5yHOGYCdOt8X+Ic/6JJ57Y/9k5tmuttZafGv7111/7MQYFmklWuqzc a/L000+7SSaZxCvnP/74Y6+Af/jhh73CDGV8f5Q+7/Qf55q77757t7rDOeYvv/zS7bgOiIAIiIAI iIAIiIAIiIAIiIAItD+B8ZOplX9dZjW/OMCaCyzhRh9l1FyZHsmNsKrJdYECiUCbEEA5bsqytCxh vYpyHIVZmow11lhe6dWIeyrcD2GdxjRxXGWxwMjee+/tUMgvs8wyacl1/LE+bWFmtcPcfxoMWlAT lGU4zMN5Xl7B5wC+0fCDhgk11mtpX3jyxpcV7vPPP3c4+WQ1HEymcQQ6aNAgR+OuJT///LN79tln vW8Epq7ylWnssceudUndc+SFfGAWjk84OgZfxfhrNu448Z7iG6fbl3+3GzO+htBWmBLAFt8bTEfl SwR9xcx5+zLz3so7X4JYWYstfY+FS+ArEQEREAEREAEREIH+TgCfZNssu7pbZ+Gl3EX33uqufew+ 9+PPP2ViCWahZYbRCREQgWoC+DBjSudpp53mLd04i4KOaeJMEe2P0hEKM7Sn+AAIFWZUJsoGU5jx gh+aJHJ+m222caussop78sknHavZsEpNKPvuu69jzm6ta8Pw7NcKi+kkc47R3P70U/UAj+KMvODU MzbjJjwO/bCaC1e9wKwSxdlee+1VSON77733+vhwvJ7lm4Gy4Ddh1VVX9UvV4uerltQqdxbfP//5 zw5/c6FssskmbsiQIeGhzH0UiDhTZSEIExQ2zPkeMGCAHWrbbSPMrE3SFuIVkND+22omtQp9ww03 uGOPPbYqCHPca5nZPvHEE36gpI/Ebdcioh+yktMGG2zgmP9O+wyF1VtIB6HssTAX376EoKxmYO50 YeEDzKBZ8QoFf+gnkbKzQg6KMxaWWGONNVJxmFNhFG2hnHLKKW5QoojPElYVpv+ElrjrrbeeH/Oy ruH4P/7xD8cYEgrjFvUnEQEREAEREAEREIFWEphonHHdtsut4YYkirMLEsXZ9Y/fn6o4k4VZK2tB cXcqAT7asxIn7wn33HOPN4aYffbZ+7W/7o5QmNFgUZ7EEjqmw3oqXhwAyypWnsEZeJYSgDizro3T qxX24osvdgcccECVwiu8HqUPDj3vvPNOh7NPVsEgTyhBUDSkCS/KKAVZFRQlE6aTmEtmCXOSWUEn 5pAVHuszVuZgwQOWyWY1n6xVDLMY1eLLKj9xXuCUV2HGS/szzzxTlX2UPn1BWUamG2FmhWWFpZid rcBkYbK2WIbF11LXaQozjtNm7rjjjqzoKsdRvBCOP75A0G7CxRCYix+nW7k42UGhbFKrHVuYvrxl pV8U3TgGriUo0fiDKYo1+iDT0ENBMQn7mO2DDz5YU2F2//33e0VdGBc3SD4S1BLyQRsKJWt14zCM 9kVABERABERABESgLAITDRjPbb/8mu4viySKs3uGKc5++iV4H6z+bltWsopHBPoFAWa+MYtP4lyf 92FmlchUyliwzKglWG6xTGotZVmt6/OeQ+nEy3FoHZZ1LUo8VrohT9tvv32msiy+HmVblmKNsCjW Nt98824v1XE8ab+Zhseytijmikg9vlgRxVPOUOqR1zxy/fXXdwuWZYXTLWCbHqjHrCezjRIGy6E8 yrI4XyhvWNXlm2++iU/1+9+33367txirpyyLQbE6K5ZmrAAcC9aaseBzoJbEq70SFstFlHlZgmVg rCzjS9T888+fdYmOi4AIiIAIiIAIiEDLCEw8YHy3wwpruXN32McN/uOibpRkxgMiC7OWIVfEItCv CHSEwgwlC5YwoeAXDAumWsI0s3gKVK3wjZ6LLX+Y6siysbzkhhY4Fj9+jBZZZBE/ddOOscX53/LL L++Xj8UZYCwnn3xyqqUdijqUF2kvwky1XHfddd1OO+3klXoo63gpZ65yLJhl8rKfV+rxZfXRlVZa qVt0TBmsJz/++GM3PkzHXH311etd2tbn6zHrycwfeuihjmm7sWC5Oc8883gF7M477+yYxpfWjl94 4QW/9LFdT3/E+i/LApAvGXY+Xobd4ujrW1bzRRGOhWAs9EX6A0pKtmnToBnndthhB/fmm29WXZ6m MGNFm1qSpjBjPMTKNUvS4mQaMH1ZIgIiIAIiIAIiIAK9RWCScSdwf1txbXfe9vu6ledZ2I06XHHW W/lRuiIgAp1BIHv+Xh8pHz64mDIWS9FllZmbiz8fXlJRMGFFsfjii8fRNvWbl0oUU/h4Mgf/TMXk GJZFoYT+2PBTtt9++7kllliiEgSlGv6+sEgzwTLr5ptv9tMn7RjbRx55xC9mEB5DIXbkkUd6U8s0 R+0sfEC+4pdn/IOlvZyHcaftZ/GdddZZ/VTU8JrrrrvObbXVVuGhbvs4I/zqq6+qji+00ELd/L9V BehjP7KY9VQx8K8VCv7FmFaMUjKc7kwYfKvhF+3EE08ML3FM+zNhqp9N98Oy89JLL7VTfosyJmvK b1XAPvyDKZWx30Cmn+6zzz5e8RgX7YILLvDMQytY9g866CDvjNPCzzzzzG7gwIFV4wFTOd99912/ qIiFs+3zzz/fzVLMzmFRmGWpyVgSSyPjQRyHfouACIiACIiACIhAGQQmGW8Ct9NKQ3rEKKKM/CoO ERCB9ibQpxVmTB86/PDDU6cZLrjggrnIo8RCGZXXb1auSFMC4eOH1SbmmmuuqrMoCFBC8JIaOt+2 QEx1Oumkk7wDfjvGlhUyWcWCvIeSNjUVX0ax8OKOtVqWYA10wgkneCfyoTUM07ywQokdumfFU48v Ckr8tb3++uuVKHiZZzGANJ9aFijNCg2FZydIPWY9UUam3oX1Tpr0kax+gjJt6NChDqVXqFTBLxnx tIPFGEshp1lO5uHJohtzzjlnnqCZYeiHN910U9V5FOf//ve/3dxzz1113H5g/cnU5Y022qhqeivj BUrjcJEHFFfnn3++Xeq31AWLicRSa5otlqQo5WiHscQWZijby/6wEKep3yIgAiIgAiIgAiJQlEDe d5Wi8Sq8CIhA/yLQVgozVlP86KOPMmuAF28sqvhDWXbfffelhkXJxAtmPWEgRSm01FJL1Qva1HmU YqeffnrmC/ckk0zi/vjHP3ZbpRPrK64za7Q4EzjijxVmWJXEEr/kojRYYYUV4mDdfpNvXsivuuqq yjmmhFEPE000UeVY1k5evlizoPgMBSszpoemCRY6sf8nFHwoRPq65GXW6nKyamMs8eqt8Xl+Mz2T Kceh4AOvHYR2E1t35c1XGb7YDjzwwG7JYXGXpSyzwCjZGc9QnIeClVk9hRl9P01hljYd0+KmrFy3 8MIL2yG/xeo2Xt2UvMnhfxUm/RABERABERABERABERABEegQAm2lMNtxxx2bxooly9FHH+2weKkn 66+/fsuVZeQB/2H1rFPSlBEokbKUZcRLWZkahz8vE6ZgxbLbbrtVTb/CT1Sa9Uh8Hb/xBRcLqzvm UZjl5bvaaqu5o446qsrCDof+WQozponGCgx8PjVqPRSXrzd/52XW6jzGKzGSHlMomY6Z5q/M8rPy yis7/iTVBL7++muHT7dQ6NssxJFHGEPOPvtsv8SzhWdhhc8++6yisFpggQX8eMEy0CahtZ8dw5ch HxxqCRZoscIsLS5Nx6xFUedEQAREQAREQAREQAREQAT6MoGOcPpvFTDxxBN7P0q1XugtLNs0JVV4 vqz9WkovSyNNAZXHn1M81S3Nsf+8887rnYijVOJvscUWs2TrbtPyHiursiLJy5f6il/OsXBKm15K Wp24OqYxzMvMwrdqy5Tf2JSdabIsVoGjf5SWoWKmVfnolHhhF8vgwYMryq74XPwbq700S7HQ+T8K 47gf0YfiqbXUXbjYCUp3FLWhpE3ZlMIsJKR9ERABERABERABERABERCBTifQVhZmjcJGUbblllv6 1R7zKJkaTaeV16WtepknvWbKy4p9vATz0s2CAUx1ZREC/lj4AOF4LK2YYof/MXwyhYJijBUBQyFv 8XSyaaedtq4FXxiH9usTQFHKwhmxVRTtgim6/GGlyHRClDQsSIHj+XYWVp/Mq0yPyzHLLLPEhwr9 DhVbduE000xju7m2aeGJN/SLiMVXvIAIfXzZZZetpBH3H6awM737vPPOq4Rh6iXKtjDNeGo3/gfp exIREAEREAEREAEREAEREAER6EQCfU5hhhXFZJNNVvnDITbKlkYVTp1YqbXKxOqb55xzjrvmmmtS lWG1rm3luaWXXtqNN954jumeJmkKM172Y8umTnH2b+Vul+0xxxzjp2BmWRTiGP6hhx7yf0ypZZVG LNCwYkQJ026y1lprOVac7Q1JU5ilTXeulTfGvVhYVCEUFJc44g+V2ii6TGH2888/O5z6h8I188wz T7f+h5WZKczwXfjKK6+ElzW0Wm5VBPohAiIgAiIgAiIgAiIgAiIgAm1MoK0UZhdccEHNF1qUYmlT F9uYb9tkjSlY//rXv9xxxx1X5fOsXTLItDCmqJ177rmVLOGj6eWXX/YrgtrBeDomvupWXXVVO61t iQSwHjrjjDMczuqfffbZujFjoUgf5g/Ls+23377KKX3dCDo4QKzYoqhFFWZp03XjqZ5Y284xxxzu iSeeqNAMLcPYx59aKCg56UeLLrqoY7ENE5TTW2yxhf9pq+PaObZcJxEBERABERABERABERABERCB TiXQVj7MQsuxtH0pyxprhijLUF4cccQRmcoyrFJY7Q6LElbsXHzxxf00O6Zd9ZSwWmYs4Qs8lmX4 XwqFVQLTHNSHYbTfOAH831199dV+tVYUJHkXVnj88cfdJpts4s4///zGE++gK7HsimWUUYp9r0hb yAQrv1hiRdaLL75YUZLF0zHp79bHsTQLBSXZl19+6Q/F/svGGWectrQiDPOvfREQAREQAREQAREQ AREQARFohkBbKcyaKYiuzSaAZdmNN97YLQAKsiFDhvjV9/BVxQvyLbfc4i6++GJvWXT66ae7jTba qNt1rTow22yzVVmTkc4NN9xQSe7222+v+Fazg5qOaSRau0WZctppp/k2QnuCex5/YPvvv7+fstna 3LV/7FNMMUW3TL733nvdjtU6gAVfLGnxxitXMj3zscce85fGzvxDJRmLgaA4N/nll18qfgVDKzXO o6guqvCzeLUVAREQAREQAREQAREQAREQgb5AYMTbUV/IrfJYmABO2k899dRu180555zutttucwcd dJCfitUuL7+xAoypbM8//7zPf2htxgFWDoyVA90KqgOlEmAxAPzNHXrooe7+++/3iti99trL+8BK Swily5VXXpl2ql8dm2qqqbqV95133ul2rNaBd999t9vpQYMGdTs2wwwzdJvajsILP2qxL7VQYYYC nXEhFBRsWHY+99xz4WFNx6yioR8iIAIiIAIiIAIiIAIiIAKdSEAKs06s1aBMrDxp06rsML6p8BWG wqndBH9k8dQz/JbhdyleRXOVVVbxKzW2Wxl6Kz8//PBDjyc9/fTTu80228xdcsklfvXSRRZZpFse mBLY3yVNsZW2Am0tTmnh0xRxxBFPy2RKZWxdxrRKpl+HEl931113eatCFJ8m9M9Q0WbHtRUBERAB ERABERABERABERCBTiIghVkn1WZKWWKn4ARZaqmlHJZC7Sj4qYtfxpmWeeutt3bzvxZbo7VjeVqV pzRl54cffpgruVD5kXXBVVdd5U488cTKXx5fZEwPZJEAHM+HEq+uGJ7rL/tpCjN8w3333Xe5EGAp Sp3EkhYvYWLLy6effrpqejNhcPIfW5bGfY/VMZmCG8pcc83Vlsr2MI/aFwEREAEREAEREAEREAER EIFmCRTzOt1sarq+xwl8+umn3dLE0XdeMd9HecOXEQ5FGNNFTd566y13yCGH2E+/nWmmmdzMM89c daw//TBH7WGZ80zxI8yZZ54ZXpa6f+GFF3rLIjs56qijurXXXruuRR8KGFZz/Pjjj+1Sx+q2scRW hJxn6t+YY44ZB+2I30x3ZFXMcFrlJ5984lcUxUKvnlAfIVPCs9jFJJNMknrp/PPP78Yee2z3zTff +PMsDhCunMnBWDnGsRlnnNHXX+hf7aGHHuJURWJlXOWEdkRABERABERABERABERABESggwjIwqyD KjOtKGmKlWeeeSYtaNUxVtY86qijUhcLqArYgh+8yE844YRVMcfKgv5sXQYYrLhi5RJWeExdzZK3 337bbbzxxu6DDz7IClI5zuqYoaBwiaf0hedt/6OPPnKxRdkcc8xhpyvb0UYbrbJvO2nKXTvXCdtd dtmlWzHwLxgq0boFSA5w/pRTTul2auedd3YjjTRSt+McQMGJY/4s4TpWwk2TNEVaGC6ethme074I iIAIiIAIiIAIiIAIiIAIdAoBKcw6pSYzyjH77LN3O3Peeef51TC7nRh+4NVXX3Xrrbeen46XFaaV x7FSwpdZlnAe/2X9XWL/VSjL9ttvv24riTIFk+l/K6+8snv99ddzYZtvvvm6hdt9993dk08+2e24 HcBiaquttuqWPlP4YsF/Viys0NrJMnjwYDf33HNXFRFFMMcfeOCBquP2g+OcRxEZCivK1lMa17IE Y1xg+nOa1FKYMe0WH4gSERABERABERABERABERABEeh0ApqS2eE1zBQrpm6FL9y//vqr23rrrd0C CyzglltuOT8FCwsinIqjtIinbvUGojXWWCNz6iAWLkxx6++y6aabuthqiRUpH3/8cbfwwgu7gQMH +nrHMizPdM2QJ87gsU4MHc1/9dVXjnphuh/KGOLHFx6+01hF8fLLL++mLMNSME2xM9lkk4XJ+X0s Gu+55x7viJ60Nthgg45SzmDVtc8++7jVVlvNYcFp8tlnn7mNNtrILbbYYg5rPNo2x5566imH0/00 n3PEk2VdZvFiQcbU17TraynFFlxwQT+NFr9psdRSwsVh9VsEREAEREAEREAEREAEREAE+jIBKcz6 cu3lyDvWWMcff7y3GItfnB988EHHXzsKir5ZZpnFK2Li/KUpYOIw/eE3Vnj4I3v++eeristCD2mL PVQFqvMDRdhpp53mFWTmB8suwadV7NfKzoVblDUnnHCCV8iGx9lPs2DjOKs58ofMOeecHaUwo0xY hmGpd/jhh1cpsuibKDbrTXuF6U477dTNUo24Y0HxhnXfo48+Gp9K9V9mgZjqizL9zjvvtEOVrRRm FRTaEQEREAEREAEREAEREAER6HACmpLZ4RVM8fBHxVQ9lGd5hRdzrF523HHHvJeUHi5NMYbvrizf S6VnoM0jxMLo4IMP9s7k82R15JFHdttuu63be++98wR30003nTv22GMbWhGR6X5HHnmkt0ZLS2zq qaf2U0TTznX6sS222MJdccUVhZWBTMG99NJLvXVoXkZpCi4sTlFG15I0P2UDBgzwY0mt63ROBERA BERABERABERABERABDqFQK8pzOKV83iZx1F1q2T00UfvFnXasW6BkgNp4dKOcW3a8bRjcTpxGHik OUavd10cj4Vfd911HU7hl19+eTuUuqVemJJ11VVX+eljKKhiieuO82npph2L46r1G59bsTCdDWVe b0lcdvKSp57S8pvGJ+1Y2rV2DIulm266yVG/tabo4TvrkksucUOHDk1dtTIul8XP1D2mSTIFcPLJ J7fDmVt8k2EBhXVSWv2FF2Jltfnmm/vVHMPjZezH5Wnl+JJWZ2nHwnLNOuus7pprrvHlZ/XMWsKq o5tssom79tpr/ZTNWmHjc2mKLxTOtdoKcRAmFhYRKKJ0j6/XbxEQAREQAREQAREQAREQARHoSwRG SnzpjHCm05dyrrw2TIBVEnHs/8Ybb3jfVviZwpE3f/iWQrnQDoLSZbPNNqvKCj7Wpplmmqpj+jGM wBdffOGd+uPY/8033/TKDZQtTH8cNGhQ05iYNohPs/fff9+99957/o+2whQ+nMHzh9+zogpEfGWx giftEl96tEcs1CaddNJ+o6DBZ9tLL73kXnzxRd8nUaIxLXmGGWZw4447btN1pwhEQAREQAREQARE QAREQAREQASKEZDCrBgvhe5BAljV3H333ZUUmVp60UUXVX5rRwREQAREQAREQAREQAREQAREQARE QARaQaA9TIlaUTLF2acJsDpgqCyjMEOGDOnTZVLmRUAEREAEREAEREAEREAEREAEREAE+gYBWZj1 jXrqV7n8+OOP3eDBg/0UPSs4vtTwpVV0up9dr60IiIAIiIAIiIAIiIAIiIAIiIAIiIAI5CUgC7O8 pBSuZQTwXfX55597/1VYla2yyipVyjIS3nDDDaUsa1kNKGIREAEREAEREAEREAEREAEREAEREIGQ gCzMQhra7xUCrMT41ltvZaaNI3lWCBwwYEBmGJ0QAREQAREQAREQAREQAREQAREQAREQgbIIyMKs LJKKp2ECtRZqZQrmSSedJGVZw3R1oQiIgAiIgAiIgAiIgAiIgAiIgAiIQFECUpgVJabwPUpg3333 dTPPPHOPpqnEREAEREAEREAEREAEREAEREAEREAE+jeBUfp38VX6diUw/vjju6FDh2plzHatIOVL BERABERABERABERABERABERABDqYgHyYdXDl9pWivfrqq96H2fvvv++Ynjn11FO72WabzY0zzjh9 pQjKpwiIgAiIgAiIgAiIgAiIgAiIgAiIQAcRkMKsgypTRREBERABERABERABERABERABERABERAB EWiegHyYNc9QMYiACIiACIiACIiACIiACIiACIiACIiACHQQASnMOqgyVRQREAEREAEREAEREAER EAEREAEREAEREIHmCUhh1jxDxSACIiACIiACIiACIiACIiACIiACIiACItBBBKQw66DKVFFEQARE QAREQAREQAREQAREQAREQAREQASaJyCFWfMMFYMIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEAHEZDC rIMqU0URAREQAREQAREQAREQAREQAREQAREQARFonoAUZs0zVAwiIAIiIAIiIAIiIAIiIAIiIAIi IAIiIAIdREAKsw6qTBVFBERABERABERABERABERABERABERABESgeQJSmDXPUDGIgAiIgAiIgAiI gAiIgAiIgAiIgAiIgAh0EAEpzDqoMlUUERABERABERABERABERABERABERABERCB5glIYdY8Q8Ug AiIgAiIgAiIgAiIgAiIgAiIgAiIgAiLQQQSkMOugylRRREAEREAEREAEREAEREAEREAEREAEREAE micghVnzDBWDCIiACIiACIiACIiACIiACIiACIiACIhABxGQwqyDKlNFEQEREAEREAEREAEREAER EAEREAEREAERaJ6AFGbNM1QMIiACIiACIiACIiACIiACIiACIiACIiACHURACrMOqkwVRQREQARE QAREQAREQAREQAREQAREQAREoHkCUpg1z1AxiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIdBABKcw6 qDJVFBEQAREQAREQAREQAREQAREQAREQAREQgeYJSGHWPEPFIAIiIAIiIAIiIAIiIAIiIAIiIAIi IAIi0EEEpDDroMpUUURABERABERABERABERABERABERABERABJonIIVZ8wwVgwiIgAiIgAiIgAiI gAiIgAiIgAiIgAiIQAcRkMKsgypTRREBERABERABERABERABERABERABERABEWiegBRmzTNUDCIg AiIgAiIgAiIgAiIgAiIgAiIgAiIgAh1EYJQOKktLivLyyy+7Dz74IHfcU001lZt88sndCy+84D7+ +GNnv3NH0AYBv/32W/fYY4+53/zmN26hhRZqgxz1vSz0BYZdXV3u9ttv92115JFHdssuu6ybdtpp c8F+8MEH3U8//eR+//vfu2mmmSbXNZ0aqF3qulX5aKadlF3nrSpjvXw+9NBD7scff0wNNtpoo7nx xx/f94NRRmnultps+drlvpPFC1bjjTeevy+OPvroqTx1sHMINNueyyKh+1Vxkk888YQf8+aff/7M i8N+PtNMM7mJJ544MyzPlLQHZLrppnMDBw7MDNvbJ9555x13xx13uA8//NDnc7311uvtLCl9ERAB ERCBXiQwUvIy1NWL6bd90jvssIO7/vrrc+dz6NChbtttt3VbbrmlV0bY79wRtEHA5557zg0ePNgr zFAYSooT6AsMd9llF3fllVdWCnfYYYe5NdZYo/I7a+eVV15xyy23nD+Ngu3mm2/OCtovjrdLXbcq H422k1ZUfqvKWC+vc845p/vqq69qBhtjjDHcPvvs49ZZZ52a4WqdbLZ87XLfqceLjzEbbrih22OP PVyzSsZaPHWudwk0257LyL3uV8Upfv/9926eeebxHwGuueaazAjCfr7FFlv4/pwW+IsvvnDzzTef +/nnn/1pxsmNNtooLWivH3v++efdkCFD3DfffOPzMtlkk7m777671/OlDIiACIiACPQeAU3JrMN+ +umnd3xhC/8GDBjgr+ILWXicfW6ufV1GGmmkvl6EXs9/GQxR1KKY4qWybHnjjTcqyrIll1zS7brr rm7WWWfNlcyll15aCffqq6+6hx9+uPI73skqw1/+8hdftmeffTa+pCW/s/JRNLG0fJdR10XzkRa+ Fflopp2k5bHIsTTWRa5vRVgsbtdcc82qvz//+c9ukkkmcbxk7rXXXu7YY49tRdK54mxFG8iVcEYg FOrhPRIrlAknnND98ssv7qyzzvLKRfZbIa1qP62KFwZljVNl8Cyal1ZyaaY8Re5XWWXIOt5Mvmpd 29PpxXnBcozxbPHFF49PZf6u9eEMS3ZTlmVG0CYnTjvtNK8sw1pum222cSgCWym9XdetLJviFgER EIFOIdDc/JFOoVCjHNttt53jLxS+jN17773eGgcLsk4TXmqefPJJxzQ9SWMEymD46aefOr6O84JZ trz22ms+yjHHHNOddNJJbtRRR82VBA+9ZpU211xzOaZtXHDBBf7rcVoEWWWgXJ999lnlK27atWUe y8pH0TTS8l1GXRfNR1r4VuSj0XaSlr+ix9JYF42j7PCbbbZZ6ksk05NRll1xxRXu4osvdjvuuGPZ SeeKD2UdecHarR1kzz337MYLo/Z//etf7ogjjvD3mUcffdQr1crOb6vaT6vipfxljVNlsCyal1Zy abQ8Re9XWWXIOt5ovupd19Ppxfm58847/aElllgiPpX5+6233nJYZ80888zdwtx4443djrXrAT4C IljAMluk1dLbdd3q8il+ERABEegEAlKY9VAt/u9//3PPPPOMm2iiifwDhVmpxckz7efFF1/0vhOm nnpq71MqrzIDBQQ+IvCngyKEGz83Y/yoYSkXTn3hq/7777/vlWK/+93v3Oeff+4thX7729+62Wef 3X355Zf+3Nhjj+2zGIf/+uuvHS86pIPiBN80CA+oWA3hAwLrghlmmMEfj/+RV/KGjwhe7vCFxQt/ bCERlmmsscZyTPF48803vTUUXOA47rjjxtH79DnIV8IsXzlh3PV4hQnAhjrihWLKKadMraNff/21 G8MwPbjWahOffPKJVyiR7nfffefLg++fccYZJ8xK6n69/FHvPNwiWElSB7DESqae4NeDcuO3bP/9 9/dTd2+66SZ/LFbspZWBOqSNmlUJab/77ru+/sO0i/QD2i6+mz766CPfvwYNGlRl6ZmWj5hlvfaI EoK8puU7ra7DstSrD8IWaRth3OF+rXzAhzpHWTHppJO6WWaZpdJnwzjC/TzthDTpj6+//rrvx/R3 xpBYwvKF/XixxRbzfTgMX4t1GI59rCCeeuopP37RJrN88JFPyv/SSy85+l5WPuP48/6m/zB1FYUZ Pi/hzXgWSpE2bdfhB/OHH37IPc4xVtC/+NhBnuJxOy8v0qf+uWcxfvISzDhLH8s7VlgZ4i1j/NZb b+2w/Pnvf//r7rrrriqFGW2UenrvvfccU7lIm/tXLHHZ7B42wQQT+PEk7qvce+GJpFmC00+pI8qb 5ospb7vM09/jsvA7a5zi3pR1r+bey3hMvVNu+lYo1n4oe6hELWPMtHTyciF8kfbXSH+xPNk27/0q qwyMZVnjvqXBtkhea43FWfng+SiUPOll9Q/KRLupJf/5z3/8c+Qcc8xRK1jlHH0UZRnPArHCjGdF PjDT72eccUY/NlYuDHby9vvwXlLvOYrnUcZjnn2574WCT8pwPGPcJG7+EPoTz7Fh38mbR0vH7o88 6/KMzP3pD3/4gz9dq66L5JvI8tZ1nnYT8q13r7ZyaisCIiACHU8guQFIChJIvjx1JcqsriOPPDLz ysSM24f5xz/+0WXhuYa/ueeeuysxUa+6Nrl5dx1yyCFdyQ3VhwnDXnvttVVhs35YmomlQ9dKK61U FU8ylajr6aefrlyaKLX8+cT5atdll13WxZY0iSM8ZxeEx5IXna7khbMSf/Ji2HXPPfd0JUqkruSL ZOU48W2//fZdyc3coulKHgS6yF94vZV16aWX7kosliph2bEyHXTQQV2rrLJKJe7Ex4Tf33zzzavC 8yN5yauEI99ZYnHn4UUcyUtJ1wEHHNCVvJhX4ifv1GdcRyEvS9/Sy9Mm1l577ao0SKdWeyuSv0RZ 0i3uP/3pT5bNmtvEwsZfe8IJJ/hwK6ywgv+dWIx0uy6tDH/729+6pU3ZaBdI0X5AuskDelWc1M/u u+/elTz4+TjT8mEs87bH++67ryoNa7Ncn1bXJFykvRRpG75QKf/S8pFYiHUl/gi75f2Pf/xjV6Lc SYllxKF67SRRmHclCq9ucSd+tLqSF/URESV7Vr64H6f1z7ys6XPJNOKq9Ekb7qEw7i211FJV4ai/ tHyG14X7yYujvz55kQwPV+0niotKGvfff3/lXJE2Hdehccs7zll4659hfHl5Jb57/LhtbZwt94fE v6EvH3VeT/Lw+utf/+rjox5MEufsXdwHwrTZX2SRRbr++c9/diUvoBa0qt+F97Bkymy364mDdmDx co+IBcach2Ga1GqXhC/S39PizxqnwjoMy2n5XH/99X2+zzjjjG7R2nNA2NebHTPjRGpxCfOet/0V 6S9xXuLfee9XWWXgucbaTLht5H6VZyzOykcj6YXs09pNzMp+k0/Kyr26nlg/T6zU/TXLLLNMt0uu vvpqf47xw8ans88+uypckX5vceR5jnrkkUd82slH4Kr0+HHrrbf6czaenXrqqf53WM/sX3755f7a Innkgqz741ZbbdWVfAjoqlXXRfJNWvXqukifMr557tWkLREBERCB/kBAFmYtVonip4Wv/QsuuKBf PTO5SXtriOSF3mH2bhZcycOJ/zpHdnCOypc9zNjffvttP72Hr1/JA3Wu3F500UX+K/mKK67ov8wT DxZRODLly2FoScSXKXxk8fWPr/jxV7g4QcKT9ymmmMKvoEkZ+PrNFCTKyRdk0uWr9wMPPOB9siQP US55cPdRHX744Y788bUN3z+Uky9a5IvpXyyyAKPYKix5GfDX83UU6yBWdMR3VvJA6y25Qiuz6667 zofFigRLmnqSlxfm+ZQXCwv8GLEaavJi7JIHn0J1lKdNJA9xnmXyIOSnZCYKrbplyZu/RPHoLTiY TomFHvWQZlERc+NLLc5vaSurrrqqPw2HAw880F144YV+oQvOmaSVAetF2gl1lLwE+DZEm7PrivQD 8k97SgZqlyjuPB98bt1www3eegVLS9p2Wj6sXeRtj/QZypyVbytzuM1bH+E1edpGGL7WPlySh19v AUZ/pc/Qr+gzWGXRj3HajAVqmtRqJ7BnPOELOhYF+NrDsgarodtuu82xWAg+bczy1OKP+3HczwmX hzXjEGMObYexBQs3LF5JO3kZc4kyxieJ1QMLWRCe9sBiJlguYXlSK5+W3yJbpmIiOLQPLaKKtOk4 PfKO/59mx7m8vEgfdoxpWFhQx7Qj8kCdlyWJcsklCiwf3aDEIhRhfEmUZw6LFNpkoiTz9YtFDn0a 30K043XXXdeHt3+ULbyHYTGd1lfp89wTsF6jH4c+G2m7MEZgnib12mUj/T1Mp9Y4Rbi4nPXu1WHc tl/GmGlx2bYeF8IVaX/N9BfLE9si96usMmQdL3q/yjsWl5VeyKFou+EZB1m8gP8yfDvyXMasBv5C S1+bjsk9mtVKY2m035d5ryRPjA2MG7fccou30p133nm9JSqzCIrmMb4/cu/FwplnW/5w88LCB2nj lLWtmFOe31l13UifynOvzpMnhREBERCBjiCQ3MglBQmYxZhZqaRdbl9psL5KXhwrQZKbZuUrVmKm 7o8nD+r+GNZloWUCX9OTG50/h0VI8lBfiSdtx9LE4sbiJlzyAtKVOHb38fBVDrEvUnxBS5yOVqxx wnNYFZiE4bEI4IsVkijLKuUhj8kLql1SsazD2scESwHSxFogFOIxS6Fk2mXllJUpeQHtSl5yKhYG pJ+s4uTj4utpKIsuuqg/fvrpp4eHu+1b3Hl4JS/YPk6slxJFYFVc++23nz8X1pHxChlaennaBAmc c845Pl7qp54Uzd9VV13l406Um/Wirpw/+eST/TVY95lgVUPdUKfJ1Co7XNlmlcHqjq+2JkX7gVmo xNY3Z555pm8bfNE2ycpH0faYlu+0ui5aH0XbhpUr3Mb5MEsB6ibsU1gQMR5QFvpULUlrJ4xLyYO+ r/PEn2NlLCCeZIpdF1/zSROrAxMrX9yP7XzathZr4mccZmwz2XnnnX26a621lh3qYp+wcT6TKTIV a94wn5ULox2zpEgWx+jCEsH+6BMHH3xwJR3SShTIlauLtum4DouOc8Y5tjDLy4s+TFjqCUYm5INx nHOJYscOZ26NVzJFy1teYX3FH+M8lhWMacTF3+OPP+7jwXKZ31gNJtMTq+JOpn/7c6E1mrHimvge xsVp7Yd7AuFji1pLG2thu7dVZSD4kRZv0f4eRFe1mzZO1StnEQuzMsbMqgwHP9K4hHnP01+L9pcg +W67jdyv0spAxGnHi+S16FjcbHrkOWSf1j8IkyYbbLCBHxvNQjstjB2zfs79xcaH448/3k53ca/h +YrnpsT1QqqFmfW9vP3exrg8z1FFLbXIuM2SSBRnlXIUyWOt+yPjIeMPf8lHHh9/Wl0XzXetui7S TsmQ8S1yr66A0o4IiIAIdCgBeXVvsdozufk4LKxM8F9g/ijwj4DwtRthtUIs0Uz40mSWElhsJTdR O1Vzi2PqhRdeuBIGK7bkgcn/jpfHxtoneYnw1heVC2rsED50Es9XbvNZtNtuu1X57Zltttl8TFh0 mCQvct4KJZmqaYf8NowHvzaxUCYs1+zrG1ZeWIsgxo99FiuAK1YefL3LI3l42VdS6miBBRaoipav d/iZyVtHedpEVQI5fpSZv6zkkodGfwrLIxOsULBQQ84//3w73NDW6jFvPzDrTPws4QcJnyDIJpts 4q2NEkVq3Xw02h7rRdxofZTZNugjJizMYOMNfkmwGMICtH3cAABAAElEQVQiiz5VVPA5Z9ZBrK4a poMFUPIC76PEn00scT+Oz+f9zTjEF3BrA1xn/dLKybjz2GOP+SgZm8J8YgFh43JaPrPykUzPccnU +cofFoqMn6SDhcVOO+3knf/b9UXbtF1n27LGuTy8SNPyi0VEaCVCPpJprZat3FtWmcOyy/6wREle yB2r8CFYCZo/JaxoGWNYVCT2h2j3krR7Q5F7GPcE7g1YbnOvMGFFSISxLWwndr7ettH+Xi/e8HyR cobXhfvWX5oZM8P48u4XbX957wG10m+n+1XYphodi61vFmVTpN0wkwHLfSz/scgtIliQIeF4irUa sw6wZMbyM00a7fdl3ivT8hUeK5LHWvdH7jksdnLooYdW+RQM02pmP62uG203Zd2rmymPrhUBERCB diGgKZktrol4ShLJoTDjppp8yfapM40M4SGWl4kseTNxrp1H0qY5YW6O8KKQKH8r0aCAih0FV06m 7BCeF45QUJiZ89T4OL9NkcE+D2I4HE78mfhpmJi6o2jCGSnTYhAesGKxB/3wONMB//3vf/vpQ8TJ A569+LC6E85a80geXvaiZi93Yby8KDOFiOlfeeooT5sI48+zX2b+0tJDWWtlo66Yxmpi5WFaLdNz WUigESnaD1D2JBZQvu1tuummXmnJdObFk6kkvBiH03Sz8tNoe8yKz443Wh/G0uJhG48X4bla+0wZ 5kUFxQBTZvmjnTL1iwf3+eefv9blmeesbOQ1sR7oFs76iLWXMEBaPw7P591nHAoXMeE6+xARj6uc S6zAKsp2fiMsuoGk5dOfSPnHuGJOm5mOyssl00+RxMLUKwtNqc+xom2aa2IpY5zLw4t0mTaEhNMV /YEm/vESZ0L943A/sV7w04XD9sN0NP6YzpT4ivRuBHCEz/2h1r2BsuW9h3FPoA6Zjsu9gv7BvYMp qAisGxHrE9b2wziK3h/Ca8P9IuUMrwv3yxgzw/jy7udtf2X0F/LUbvcr2lyzY3GjbIq0G1xM8LzG PbSooAznGcwWNeDjiSnPan2YabTfl3mvrFfWInm0sSDt/khdrLbaavWSa/h8Wl032m7Kulc3XBhd KAIiIAJtREAKszaoDFZhQlAe8ZclKCMaFVtdkRXX0hRSjcZb9DqsWlBuJKb6/lJePnkY4UU+mZrj fUfkjZOXLf5QVOEvCR9v+LpBkqlYeaNJDRfzsjrCoipNzCLCwqWFaeUxS7dV+bOv9ZQBC5s0wX8G ijQs7hoRK0PefsBLCFZt+DZiFS78ImFpxh+WP8liDhXLyqz8lNkewzSsLK2qjzCtrH0envHzwh9W OyiIeHjm7+yzz/YvcFhHZeUxK96wbKQRi/UFfFFRJ1hf9oZYPkkbf4pZQj4Zj/K8IGA9F79MMv6s t9563mrv73//u8Nq0cTykLdN23XhtpXjXJgO+3aPKWpdEsdjv7ECjHnZuXjL+IGFnn30YAzm/oBy DaUWfjjLEO4NKMy4VzBGcO8gbePcSBpWz1l9yfqEhWskjTKuKWPMLCMfWXEYn2b6C3G32/2qjLG4 LDZZ7DnORy8kb5/1gYf/4wMGH2IuueQSryhLpsH7+Cj78ssvHwat2u+pfl+VaMEfRfJo9cRYkHZ/ LJh008EtP832qaYzoghEQAREoA8TkMKsDSqPL+582Wf6ZS1lQ/ilvmi2+VKP8CLUWy+wOHnHzJuX Ux7cE99f3nG+lWXllVf2yi/7nWeLg2ZeWHnJYgoRL3y8nDTywBemF/NiOgF1lKz+Fwar7GNhh5iV S+VED+20Mn/Ul005SvzQeOVmXCwUVkzz42GZ6baxFWIcPu13I/0AKyn+yCNfx1GWkVdesHGqy/SV LOfYrWiPVq5W1oelkWeLlR3T3vjDEoop2TgdRlGI5dlRRx3lEr+GeaKqhLGpNfQRrKziccn6Qm+O NWSW9oTQFlHGp1mS+gDJv3DKlB3Lu0XRkqwo5ts9bQ8LKbM0aqRNp6XbqnEuTovFP1CsJqu4xada /hvlLeM41mJYBLKQhNULCq5kdblS8sC9AUsz7hW0C1PQZTn7z5NoO/T30HK8Vp6bGTNrxVvGuTL6 S7ver5odi8tgU6+OmELJjAFbFKde+Pg80zJNYZb46fIfQBMfXTWtznui3+ftG3F57HeRPNa7P1qc ebbN5ps0eqLd5CmLwoiACIhAXyYwYq5EXy5FH887DxYIfl14QQj/OJ44mHbJUvCFpg5xXSjmy2fQ 8BXJwnM9tY/fI6w5kKOPPrpKWcYxXr6LCj5n+LLJ6kuJw2R/OdPx4ulaReONeWEBh6CUiYUvd6zS h7SCb56HplbmDx8Y+DZhRU1Wo0NpFv/tsssuvvywQHEWS1YZwuNF+wGWZYmDYb+6KtZBSy+9tF+x Ex8xCO0pcVxelZUwvWbaYxhPVQLDf7SyPtLSSzvGSpjwYSomgqVOskCCYzVHfFQhrBhYVKyNo3BM 86to1lwWrmj8cfh6rOPw9tvaE9YBKLHCcZV98s64il+yZoUXRZvGGPryszw0O7a3apyLy800XsR8 1IXnUUK3UmxsXWeddRwfT6gjk0buDXZt3H64N5gfRqb0c+8Ij9l19bZhvGX39zDuevkYY4wxfBCb CmbhafeM26E0O2aGcWXtF8l7HEcZ/aUd71eNjsUhyzLYxLzD39wLUCLjr6tRyyiblkl5bZVF820W phXut6rfk4b1DZSo8cdOXEvklSJ5tPte2v2RPnniiSf6+3LsCiCs67LyTfla3W7yMlQ4ERABEejL BKQwa4PaYyohVhq81J2dTJUKJVnxz1uBoDTLaxmGlYP55yEu9vnqhzQ7VdFH0uA/HhZMklV9bNf7 VMMRaiNTbjB7x+k8cZtz06J+aPLwWn311X1+efG9+uqrK3nnoShZFc/7/eBls1G/UJUIgx2bFho/ 6AVBKrutzJ9Nb2FaRZaVDsoYc8wdKgyyypB2vGg/QKl5zDHHuGOPPbbCgZ3wxd782KWl10h7TIun KvHhP1pZH2nppR3D9xN8/u///q+b4tAYNWIRicVesrqoT5LpuaE1EmOYjTXNWOwQeV7WaWXnGHVv juqxojPLN86huGf6H3zSlEOEKSq2CAlT/ExRUbRNZ6VZxjiXFXd4HKsuJFkhrsraF0ss/Iq1Uqw/ hvcG0nv11Ve9xVnRtGu1H7tHYF1GutxDsqZTxummxVtWf0+LO04//m1KThTV5i8UP3477LBDt49s zY6Zcdrh70byHl7Pfhn9pR3vV0XH4jSWZbCJeYe/sS5DmrHOx5rXPsbg37HedEzSK7vfE6eJ9Q1+ J6tF2mGvJN93330rv+vtFMljrfsjrhGw6ua+Yz7Y0uq6rHxTrla3m3rsdF4EREAEOoGApmS2QS1i mbDxxhs7lGO82OFbBSf9TJnCgSqy55575p7uxzU4WbWvfVj88IKcLMPdqwozyom5OqvXMb2GFUF5 WGB6GIsRNCq8/PCSipCGLXCQN748vJhWgAIAa5ShQ4d6Z/OUhRcQXuhQeOK/KEuhlDcvYTgz7cd6 DR9J8847b+aU3Vblj7KhBEHqrTqKMpaFK3CgjbXDlFNOWVkZKy4DZUORu//++/uX8+22287XXZF+ gCUK0wt56U2WtXcw4As57QlBeUmbR9JY0gY5XqQ9puXbJxD9a1V9RMnU/En5qQPqghf6ueee20+N QekLe15ubPXcmhGlnEQJR3tA2YQFAavyoiRi6hwv7bPPPrujfpqRvKxrpcG0XCzJXnvtNT/Fj6ng +HCkjeJInmlS+FQsQ1ZaaSXv3w8OjEc4dy5zbG92nMtTRl52yTNKK9oGVpv4wKHN8HGglYL/I5Q+ 1BfKedor/vYYf2whhyLpp7UfFPsI9wgrJ79NgcZ+PUmLt6z+TtxIOF5SB7WEdod1NdewUiwLmfDs ECqy7fpmx8xaLiPSuFi6ebfN9pcy7lfxfYk2k1a2InllenqRsbjZ9PLyDsOhMOOesOiii4aHC+9z P8CKGaFfZLlEsIjL7vcWL1u483EHlxFYwfMxj7EENx6hRVd4Tdp+0TzG90eY4tLDnk3os/axKq2u aXNl5JuyFGmnaWXXMREQAREQAedkYdZAKzCfPbZNi8JM2m0bhrHrbMu5vffe2zsqx38EShimlXFT Z4UtLCHWXXfdMIqa+6wUyHUoE/jayoMzLyA4ZOeBCLF82TaM0I7ZtpHwaddgIYcvCPxjYCLPyzWr HPLiylS/GWec0Wcj5GJ5sG2YT9tn1T8ejJBGrFry8CJurGlQXKLkwxcUD4U8oE8zzTR+2lv4YmP5 tS3X275tOWZiZbYtx3n54aUb83ymDdlKbnZNvC2SP0snLS9hvNdcc43/ycMdnGoJ06hQGPIgatPc ssqw8847e4sOvryj8DLHtEX6AV/CTz75ZK+cYXoDacKIF/shQ4b4c5bftHw00h7T8m0MbWtpFqkP u9a2FgdbqyvbhufCfbvWtviCQgmPkgjn+7w0XHbZZV5ZxhQy2NWziLQ0LU5LD3+BWHSixGUaLuyx 1CQ803WZBmpjDdfY9ba1eGpti7AmHsurbTmG/xbyhaUZU3D4ws9vxhwU9uedd573fUjYWmJx1so/ L4bGk1WATYq0aYvfthYH2zzjnF2XtQ3jszLZlnNcBxN4ofiDF30KBRP3ISTP4ggWp+XDX1jnH+1m 22239WMI/va4X2GlguJst91281dbvPywuG0bR5/WfsIw9gGAey5s80pWvEX6e1ZaaeOUlc+28bUo JWhjjL18GMOPI4LVNi/LiHFrdsz0kWX8S+NiebZteKnlybZ2rkh/sWts2+z9Kq0MxJ11PG9ei47F zaZHno25bTmWJdwfeO6kLeF6Ia9Y3dmW6xhXzVozXh3T8mJbwpfZ7y0ftiV+ZgCYT0mU7zxXo8Ci vyJh2PB3M3mM7488h/PRgXsi5T3ssMN82vzLqusi+ba82rYS+fCdvO2U4BaHbeO49FsEREAE+iOB kZKX267+WPB2LjNTh9555x2vBMI0O68/ri233NL7j8ICauutt/ZxMJ2Plx0e2NpFaHLvvvuutwZC ETNw4MDKTbqRPKIs4QsgJu74msBqJI80yov8YxEH26kSxYMp6/Kk2UgYLHZQKLGYQZ5puT2dvzxl SisDii2su2ibPGDHD65F+gHWFSiGiYuV9bLae1o+irbHevmOebRDfaAggjUvRvQ3lDtlPRCjWEFx jCIF/y2hoixmUfR3Uda14qfuaSfEybhjL3W1rin7XJE2Hafd6DgXx1PrN1NVUbqgpKcPobjCAoL2 csopp/gXPZRp7LdKaE9YliH438kz5mXlpVb72XXXXd0VV1zhttlmG//SmhVH2vFa8ZbR39PGqbR8 hMewnIQb4+h0003XbTwNw7LfzJgZx2W/a3GxMEW2zfSXIumEYbPKkHXcrs2b17xjcVnpWf7afVtm v08rKx92eK7mAycflBuRRvJo13BfnGKKKVKfTWrVdRn5Dsuat52G12hfBERABPo7ASnMOqgFhAog vtT3B+HFglUZsabDqojV6vJKf+SVl43CiYAItA+BZsa5IqXAUTcrVGJlwscHUzzjwwdrERbRwDcW q672ZcHSBN8+KI2xyEIpKBEBERABERABERABERCBmIB8mMVE9LvPENhss828jze+wDEdpSxfRH0G gDIqAiLQ8QR6cpxjhbzDDz/cT1/dYIMN/FRFLM6YNo1FLda7Gyf+NvuqMMWU6VH4SWPlTabwS1nW V2tT+RYBERABERABERCB1hOQwqz1jJVCCwgw7cVWdWLKKoslYGovEQEREIFOIdDT4xxT+VjBjRUx cRzPnwnTI/G90+h0JounN7csgIEvIWTmmWd2++23n9/XPxEQAREQAREQAREQARFII6ApmWlU+ugx /ILhHwN/M73hn6ensbESHT6ZcGTciB+x/sarp+tH6YmACDRPoNlxrpEcsJLcU0895X3+4HuHjxEo 00YdddRGomuba/DbhXUZZcEReFl+/NqmgMqICIiACIiACIiACIhAqQSkMCsVpyITAREQAREQAREQ AREQAREQAREQAREQARHo6wRG7usFUP5FQAREQAREQAREQAREQAREQAREQAREQAREoEwCUpiVSVNx iYAIiIAIiIAIiIAIiIAIiIAIiIAIiIAI9HkCUpj1+SpUAURABERABERABERABERABERABERABERA BMokIIVZmTQVlwiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIQJ8nIIVZn69CFUAEREAEREAEREAEREAE REAEREAEREAERKBMAlKYlUlTcYmACIiACIiACIiACIiACIiACIiACIiACPR5AlKY9fkqVAFEQARE QAREQAREQAREQAREQAREQAREQATKJCCFWZk0FZcIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiECfJyCF WZ+vQhVABERABERABERABERABERABERABERABESgTAJSmJVJU3GJgAiIgAiIgAiIgAiIgAiIgAiI gAiIgAj0eQJSmPX5KlQBREAEREAEREAEREAEREAEREAEREAEREAEyiQghVmZNBWXCIiACIiACIiA CIiACIiACIiACIiACIhAnycghVmfr0IVQAREQAREQAREQAREQAREQAREQAREQAREoEwCUpiVSVNx iYAIiIAIiIAIiIAIiIAIiIAIiIAIiIAI9HkCUpj1+SpUAURABERABERABERABERABERABERABERA BMokIIVZmTQVlwiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIQJ8nIIVZn69CFUAEREAEREAEREAEREAE REAEREAEREAERKBMAlKYlUlTcYmACIiACIiACIiACIiACIiACIiACIiACPR5AlKY9fkqVAFEQARE QAREQAREQAREQAREQAREQAREQATKJCCFWZk0FZcIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiECfJyCF WZ+vQhVABERABERABERABERABERABERABERABESgTAKjlBlZp8b17bffuscee8wXb+GFF3YjjzxC z9jV1eVuv/1298ILL/jjyy67rJt22mk7FYXK1QSBd955x91xxx3uww8/dAMHDnTrrbdeodhoYx9/ /LGbaqqp3OSTT17o2nYLbH3qN7/5jVtooYV89potX1qcrS53K+q0WQ6tLnOnx99O/Ju9v6T1ibRj fbVOP//8c/fMM8+4scYay80zzzwNFaM36vu9995zr776amp+RxllFDfppJO63//+926MMcZIDVPk YDPla+baInmsFzaL16ijjuommWQSfz+lDXSaPPnkk+6rr75yM800k5t44on7bPE++eQT9/zzz/tn ZJ6h+6u009hbRl7aZXxop/bULkw6Zexop7pVXvo5geSBXFKHwHPPPdc19dRT+79vvvmmKvTOO+9c OUeYyy67rOq8fogABGhDs802W6WtLLroooXBbLHFFv76E044ofC17XbBs88+68sy3XTTVbLWbPnS 4qxE3oKdVtVpsxxaUNR+FWU78W/2/pLWJ9KO9dUKvvXWW/04sthiizVchN6o7zPPPLNyL7Bni7Tt kCFDupIPLA2XjQubKV8z1zaV6ejiPLyWXHLJrqeffjq6sm//XGmllXw7ueKKK/p0Qa677rpKe//1 11/7dFmayXw7jb1l5KVdxodm6qTsa9uFSaeMHWXXj+ITgUYJjDCV6ueKw0aK/8Ybb7grr7zSX5o8 rLldd93VzTrrrJlR/eUvf3HLLbecS25UmWF66kQ75aWnytyb6Zx22mkuUbb6r8TbbLONS26qmdm5 /vrrfTvZY489MsN04omRRhqpTxWrSJ1mFayvlTlr3Mg6nlXuZo+XkV5WP2uXOil6f0lj2i5lSctb Tx/Lqu+ezkeY3vjjj+/WXHPNqr/Bgwe7ueee21F3Dz/8sOM3Vsm9Ie3WfrAim3/++St/c801l5ti iikclmZvvvmmW2uttdxNN93UElTt2H5aUtAeirSdeLZTXprBX6QcWX27yL01K45mytDXrxWTvl6D yr8IpBPQlMx0LrmOvvbaaz7cmGOO6U466ST/0FbrwldeecV99tlnXnFSK1xPnGunvPREeXs7DZt+ s+GGG7ptt922ZnY+/fRTR/1MOOGENcN12sljjz3W/fTTT6VMQ+oJNkXqNCs/fa3MWeNG1vGscjd7 vIz0svpZu9RJ0ftLGlOmcjE1I3QjkBauPxzLqu/eLDvKnkMPPTQ1C3xY4+UVZRlT+RNrs9RwrTzY Ln3Byoi7iwsuuMB+Vrb//e9/3ZZbbumnuZ5zzjn+g1PlZEk77dh+Sipay6PhQ/HQoUPd+eef7xXB JNhOPNspL81URpFyZN0bitxb2218aIZdWdeKSVkkFY8ItBcBKcwarI/333/fvfXWW/5q/FHxUGv+ NOIoUQJw/pdffvGn2H/33Xe9jxKOERcvNL/73e8cPln4qvzb3/7WJVP43AcffODMp0kY748//ug+ +uij1DSZQ0/eErND7wtllllmcaONNpq/vFZewviz9r/88kv34osv+oedKaec0vtro9yhoBTEPwJf z8cee2z3v//9z/uZmWiiidzMM8/sBgwYEAavuU8ZXnrpJYcPky+++MJfP/3003e7Jm+aP/zwg/cD RgSTTTZZt3goHz5DRh999Fw+Q5LpBf7L9uuvv+4VPTPMMIOvO4sYDuSNP2SCCSZw+L2CRZp/Gnx9 WNjvvvvOhx1vvPHcOOOMY1FWtnm5kkfaAxypjziPlQiTHdof7Ye2RR4HDRqUyolrisQbppG1T3nh RV+wNpW3XrPi5Lj1MfZpe+OOOy67Xmr1FQsTb/PUad52m1bmOD37XaRu7Jo82zx5zRo3GKeyxrYw bfoU4wZhk6lnqeOGha9VJ1n5wN+TSZ7y1OpnteqkXn8nD9bebEz//vvv3VNPPeX71jTTTJPLx2We +wt9g5cbmDKWwICXoPALN/llTCMv9P16Uot9vWs5n4c94Rrt13DBZxnjM/eSvFKrvuM48o6rRdp0 nEae31irr7zyyu7iiy92d955ZzeFWSPjb9H7X1pfKKvuGIeznmHy8AnD8CyC5TZKGfzNYs0dtvc8 fYX4wrJhzZZMu/f3d57FOIfAhHs492X6Nkzj+4oPmPwjHIL/MdpsLeGZDj9fXIOfUu7TtSTPs1h4 fZH2Wm8cKDrG4Xv15ptvdvPNN5/PUpH+GJaB/XgMqNWO8vSRInmhXXEfTnsm5xmV9HgfwDerCfHT TsL2aOfy3hvyjKtFykH68b0hz73V8m3btPGBc808q4R9EGMEPkxyn6NP8OwPe5O4HZKuvT9hfWqS p6/EcX399dfu0UcfdeSBuOwd6ueff/azhOinKPDjfprFhLzU61eWX7ZF+mvRsSNMR/siIAI5CSQD saQOgTQfZokSquKTwXyP/OlPf0qN6b777usWlmuSgbcr9COA/zN8OnGOefCPPPKI35999tm7xZvm uyWxSOhKpm90S+uPf/xjl/nAqJWXbokEB5KbQNcBBxzQlbzwVcWfTB3puvbaa4OQI3ym/OMf/+hK LKq6hU8WSagKn/XjwQcf7Fp66aWrrofNIoss0vXPf/6zK7nhVy41vwH10jTexJO8eFWut53NN9/c p0d89SS5mXbhO4e4wr/kS3dX8oDoLz/11FOrzlm4yy+/PDX6tddeu1v4I4880ofNW8YwYny6LLXU Ut3iDPNo4f/1r391JS+hVWGp7913370reYixYH5bJN6qC4f/sHqo58OsSJnT4kwegrp22GEHXybK dv/99/sc5OkrafnmWL06baTdhn7prMzhsSJ1k5XvtON585o1btxzzz1V7cXaN2MbkjzIdR1yyCFd yYNlVbi0cSNPnWTlw9LLW548/SzkT1ny9HfChe2QsTFRfFSVnb7HeFpLat1fKOtee+3VlTyoV8UL e8bLJ554ohJ1mBc7mHYsD3u7Pmublz3XWxuvN15bWvgO3X777avKy9ixxhpr+GP1fJjlqe+8eSnS pi3/8dZ8cq266qrxqarf++yzjy/fOuusU3W8yPhrrGnPVve0lTz3v/Bay4Ady8ur2boj3Ty8kpfR SvtIXrB9dov0FS6wsh100EFdq6yySiU+8wdk4xtb7ssWnueGWOBr4eFeS+66664uxkQLzzZZQKor eVH3x+z5jTiKPIsRvkh7zTsOWDuiD+YZ42644Qb/3JZYu5Klrlr90QdI+Ve0HeXtI0XycuGFF/r6 SBQ3XcmHs0ouE2VZpe7uvffeynF28K1HfdKminLj+rzjapFyEG+YF37Xu7cSJhZr/+G9stlnFYuT e1zc75IFoqr8FIZliN+fyGuRvhLGdemll1bdX5MPUV086yQf/bqWWGKJSl1Tr9yXeM40sfyHTPL2 K+Io0l8JX2TsILxEBESgMQIjVPU5FWwKNoxA8jDlLXaSlxP/dfHPf/5zpkUSqzglD8YucXzqkgc4 vyogq2CFlgB83cBnFcf4isL5IpJUv/eL9Wbix4NpHqzWyRfNZJD31g2J0sPNOeecfkWpenlJS5dp hHzlxvIHnyus0pgoH1xyk3U77rijtwxKbthVl5511lnesmHBBRf04RMln//yRF6IK+2Lm0WAZR1T LPjKw5elREnmmfCFJnn4cviPopzrrruuXeK39dLE2o4vQlhbUR+hzzm+QsELSV7E/DbrH/XOFBm+ 0mHpwJQDrk9utO62225zL7/8sv+iSlrwvuWWWzyjeeed11ts8UU8TZIXP/81Mrl5+ymZiRLWkedQ 6pXRuPK1mnLQtrD2wxcOX0GZ3hPmkS9nlOfwww/3FiIrrLCCTxMfSrCmTFxvPtWKxBvmu5n9vGUO 06BP7Lnnnr6e+Up4+umnuwUWWMCXMXmo8ZYDtfoK7S5NatVpo+02LR07VqRu7Jo82yJ5zRrDso7b 2Pa3v/2t4lMI64I55pjD3Xjjje7tt9+uGjfKGL+KlCdPPwsZ5u3v9hWaa+l3jI2M5cmDv8MKlS/W 9L2zzz7b/fWvfw2TqNqvdX+hn1500UX+izf3HZjyVf4///mPSx7MXaIgdoy19SxaLMG87LP6A/EU YW/pss3br2HFvQYLXcZd8szq1NRLHslT33nzkrdN58lXrTDUKW0FwXLQpJnxt6z7H3nJy6vZurNy 19s+9NBDPggWKFhGI432lTPOOMNfjwUtlmT4TcNKM74vw5N2yHMD9//QepnnC4T7RXwP9yeG/8Mi ZrPNNvPPEosvvrjjGYHnB/xR8bwYS9FnsbzttZFxIO8Yt/zyyzv+TPL0Rwtr2yLtqEgfKZKXRFni s0O9MNWdZ1uEsdeE5ytbCRQLSp7JEbuW/bzcioyrRcpBHmKpdy+Pw6f9LvNZhXsc97AVV1zRvxPx 3ICVOuM/vMmvCTzT3p+K9hXiIy7eUXg2ZAV33lWwauRezhiAVSB5YvrrAw884PvpMsss4+/xlp9w W7Rf5e2vpFF07AjzpX0REIGCBJLOLKlDIM3CjEuuuuoq/6UhGTzrxDDsdLLsvQ/PFyMT+6rBl4rE X0mVJU8RCzO+YBAHf+TXhK9yfOEibVYqMknLi52Lt8kDgI8Xa6PkBlF1er/99vPnsGJLHhj9OfvC wleZxAy/Ej6ZFljJY/wVrhJo+A5feCgL1hmJqXnV6f3339+fw1LDpEiaieLEXx9bBFqafOnlK0+W YNmGZQD522ijjarCJr5UurAI5Fzi164ShX2VShRnlWNZO4kPFn897SGUImXkusQBcmoe+fpuFj+W x+Rh1IeNv5TzZZ+2giWHSZF47Zp4a+0+r4VZnrYUx7nvvvv6MtGGkpepShaK9pXKhdFOWp1aGyra bsOvkVbPdqxI3URZrPmzaF6JLGvcSDvOF1n6AW3NLPuIg/6TPBT6czZuFK2TtPSKlqdePzP+Rfu7 tUPKjoVtovSn2F5s1Uv6UD3Jur9gYUvcWNmGkjzUVyxE7R5geQn7WXysKPswTdsvyt7aeJ5+zRd0 yotVh1kOkS5jNNavnEteFi0rmdt69Z0nL0XadGZGkhNmMZW8cHuLVaxW7e/oo4/uShYQqlgXYWWU uHCoRFd0/DXW1p6L3P/ia8mEHcvDq6y6M17JFFVvNYLlCH88c9AmsGphzKUthPewIn0lLBttjecl +r5JWvuhDdpYFK+QzkrY5AfetcSsJJPppFXBsMYyqzOzMCv6LFakvRYZB2wMoXyNjnFpPKsABD+K tqOifaRIXmiDlDvxVVXJoc1M4Hii9KwcT5SePmzyUaMrmfJYserKy63ouFqkHFaH4b2BjFt7Dt9T KgWKdmwssLGljGcVi5MZAeF7AvdRs9bDuhWxMsAzfn8q2lfCuHi3sHcA7qvEzx/PK4kytkLBZtBw HzKx/BuTIv2qSH8lvSJjh+VPWxEQgcYIaJXMggrGVgXnywUWMFjyNCLm84lrcYprvjPww8EXUCwb +CrSiPBlB2ElUCx0QuFrCNY7fG1JFHzhKW/xxpcXkz/84Q/ezw6/LX92Lt5iWZU8LPhVSGPn9/gT QXD0G0tys3L10sTiCx8TWLnwldCEL7oI1h0hTztvW/zPJeb+/icro4Zh+Sq1/vrr+3OtWq0rTxmx JMOXC7LbbrtV5RG/C8bI8mhWafgHSh5OvfN9rt1kk01820leBvjpLdSKxOsvKuFfnjKHySTTAN25 557rrRix5jHfKYQJ66vsvtJouw3zHu/nrZv4unq/W5HXME2zsGDcsC/xnMf6DGsBxMaNMuqkVeVp tL8zpmOpYvVHeW38rDf+ETZLkgdxPzYmU0GqgmDJhkUMkjY2VgUOfvQm+zz92toRVtOMXSbkO5lu bj+b3hbJS542nSdDWJAwVoV/xx9/vEum7Hs/XBtvvLG3CMa/KVJ0XE/LQ7P3P4uzCK+y6i5RBHtr LSy2+MNqnrgPO+wwb8GNHz9YmjTaV7D44nnJLGUtvnhLG8RyG7F2yj7PFfRxnjPgnSWEMSvJrbfe uioYlqOhb0ZOFn0Wszzlaa+NjAOtGuOqQCQ/rBx52lEZfSROP/yNVS+CdQ+CxRGzLWDBszD+YrEm RuyZmHtT6HsrL7dW3dN85lrwz+519Z4j8yRNHzRLPcITN4ugIHfffbff2j94xu9PRftKGFe4iFt4 X+VZOvlQYEG9n2l+0OaypEi/snaep78WHTuy8qfjIiAC+QhoSmY+Ti0PxYMZyq1GhSmSPDzyoJb4 WfB/TKHBTBvlCFMKGhV7+QqdaFpcTFcgHUzgzfTczoXTk+wYD4C8gCZfb+xQ6hZza/54mEx8p3lT bJya8oLN1AeEB5VY8qSJM3vM45nugpIMbjgLZcoPwpTTWmI8SIvpmLEYp5hHHK7R33nKyHRKk4MP Prjbgz+OrRHLIy8HiUWLd8K86aab+gc/lEyLJ1NEeOC3qSZF47U8NLvNU2ZLA5N6puwi1HVieWCn /LaVfaXRdluVwehH3rqJLqv7sxV5DRO1tsLD8wYbbBCeqtqnDdIfmx2/WlWeRvs7Y3r4kkSh7QW4 3vhXBSj6wYs041XiO8hPTUHpwriIk+BaY2MUTeVnGf2hUfZ5+jUvoEjcjysFKGknT16KtOk82WKK KY79TZjCxQcLFhZhIYfEoqHqI5qlT/g847rFG26bvf9ZXHl4taLueDk2YZ8XWhbwSfz3eRcN4WI6 jfYVe/G3dGpteV7497//7Z8f6Jd89LSPb4xr8M4S40OeQ2VwVngbi+wZIwyX9ixm7aVVY3Crxriw XOwbpzxjgJWZ6xrtI1ybJSjpjzvuOP+szdTMxBLLP4sylZZFXZhKyLTMxCKpolQzJZvFmZdbo+Oq pdPT2zKfVdJcCjC9GeFjd2IjUile2vtT0b5ikRFXuGgDx/kQZQuUWDg7zpYFE7KkyP3V2m6e/opy Fsk7dmTlT8dFQATyEZDCLB+ntg/FII9PEf6uvPJKvzIlgy9/WNjwMsoXGB7QiwqrsCFZ15oFmIUr Gn9aeJQeO+20U+XBk1UisVDDvxsPpfgyaEYSk32vMMNHV+Jc1PsbI00UYGlKsDAtKyc84B6L8cD/ WjJtxCuf4jCt/m15JB38LGQJeUym7XqFBUu+o2hKzOB9vnlx4w8/MDDi617ReIu8eGTlsZHjpMsD FQ/ayRSniv814mplX2lFu+WlK0/dFOXUiryGebC2gkKHvyzBP0gZddKq8lg58vb3rHKWdRxrYZTa 9FuEcZEXKz5cPP74417ZUiStdmZPOWgfSKPW1/7ikv5ZW8jTpvMkSd0lU8ergvIhiBd9+jz+6FCM zjjjjD6Mpc+PPON61vjbzP2vKrN1fpRdd4m7A/98UyfZyumy+0ol4mDHnhn4aMhKkPhy5bkCgXMt KcrH6j/vs5iFz9NeyxgHapW1mXNFOFmZSa+ZPpKVX+obJS1MUWygHEO4T4cKM9oBvuhQvvDhuhFp 1T2tkbzkuaZVzyqWtq0Wz8q0aR/MLRxbawd5+0p4bZn7RfqV5TlPf7VytcN9sUxeiksE2pWAFGbt WjNBvsIvKcHhbrtYAeGYkj9u1Jgt4/yZh0Ysz4466iiXzP3vdl29A0wHQfHA0uBpwpcXxKwn0sIU PYZyj6+0WN3x8oBTfTNtxjJsq622KhplVXgsp/jyy4MYL5n2RRgn+fXEpsdg8Zb4OPGm+OE1xoMb mX0FCs/3xD5f3BEe1ihf2tc6y4dxxQqRP17EmWKAsgyzdhSUyWptfkpuI/FaOj215QEl8eXhF3ZA 0ce0OKZyhF/lW9VXWtVu89QND/FFpFV5tTzQVhg3mH7J1O0sMYuRZuukVeVpp/6ORQNTVUzJnfiQ 9AuqGFuslXhxLyrtyp5yTDzxxP4D0BdffFG0WKWHL9qmG8kAFgP/93//562rqctDDz3UfwgjrrLG 32buf0XK1Jt116q+klZ+nhuoK54jsBTjuYIPZ3CuJfBB8rbtos9iRdtrs+NArbI2c65IOyqrj2Tl l+cLpswxk4NpmebwH2UR1kRYXvLMjSKN50Ms9RtVarTqnpZVtjKOt+JZxfLFMzeS59m6aF+xNFqx zduvivRXntGRvGNHK8qlOEWgPxEYYdven0rdy2XNqwCzqQW8HMXKKqbfhPLUU085fJ9wE0ewxEoc kbqLL77YKws4xsqQseTJC5YLiA3QYRx8CTF/DYMGDQpPNbVvaa2zzjp+yoopdYiUh5BmhalS+CpD mE6BWX14rFb8Vk4eyM1HRRjevmpauPBckf08dZMVH9MBEL5QMq0VfuEf+U4cJXtfOYTDsoz2kzgo 9b4imN5y4IEHen94nId54lzZTzPgd954CdvTggIGi0q+8PLwRt5Z9YivkkijfSVPOVrRbvPWTZ78 hWGayWtW2wyPWxtk9bqw7VlfTpyc+zbIlMxG6yRMr9HyhHGEfGzf+nGr+7ulV2uL70SsQhEsJ3lB C6WRsbFR9mG6jbIP48jatzKa38gwHMr8olKvvmvFV6RN14qn3jn6CBbWCB++bEqapd/s+Bve64re /+rlPTxfdt2Fcdfbb0VfIc209sOzBEx5juBjDYIrA47VEuODJfqrr75aFZQ6jp/zij6LWXtp5Rhc lekGfqTxjKMxTnnGACtzI30kT17Im02xxE8qLkZQdPDMzQde/FSS9pFHHumLgXKtUWl0XM1bjlr5 aiSOVj2rWD7Nf67dk+142rZoX0mLo4xjRe6v1nbz9FfrE3nHjjLKojhEoD8TkMKsB2vfzIlj5VdW FmxA5HyyekolGA9l8TQOfNgcc8wx/ss0io1Q7KUitAArkpfVV1/dR8cgfvXVV1ei5gUSpQrz98kr yomyhAcOJFm5pipKHiqxOCtDzFcZX4VJj4cgM3OuFT+WPMnqWz4IDobDLzwopy655BJ/Lo+1Wlo6 Reom7XqOYT1nDrGxKjSrN87xws3LGO3FHkB5EOF3svITQSpibYcDxFk03kpEvbDDl2DaCtZ1KAIp H1K0rxTJeivabd66IZ+fffaZd5CM89hafjUI20hes9pm2nEUligv6RNMCw8lWfXOW7yiNLNFQ5od v4qWJy3PYR5tv9X93dLJs7UyEjYcG3m5OeKIIxqaql5Gf7B8hXkij2WM11gXI8kKw1XWc1jO4t8y r+St71rxFWnTteLJcw6H32aZgpsFpMzxt9H7X568W5iy6s7iK7K1Nsk1YbtstK/Uaj88N/D8QJrm uNv41sozL/423Ra/WKbwJh7u0eZr1OIo+ixWpL2WMQ5YPvNsa/GMry/SjhrpI0XyQt4WWmghf98y Z+9Yl5nYPoo0xJRrdr7I1tpw2H65PmtcLVqOtLw0E0eRZ5W0tMNjzG4I2z/79mxdb6oz8RTtK2Ha Ze4X6VdF+mvRsaPMMikuEeiPBGp//uqPRFpYZkyEGfT3339///C/3Xbb1UyNh2UUM/iU2mWXXbxP E5xFY/off/1BWTXllFP61dG4USTLkbuBAwc6lFykydQ8W2GGRNPywheyNEmWmXYof1i5K1n63DuH 53pujty4eSn++9//XnPaX1q8tY6xUAGWWlhCLb/88r48+GPj5bsZh9lhmjgQxYmsPYzkecC165ky wxdkFE4rrLCCX80HR81MF0VRga8VrOMaEdgiWO6tt956Dmeytaa0ZaXBNEr4oSzigZMHOfw+sLgB zsExE8cXEkJemb6L8pCVyKhzppUwtQChfdnqQEXi9Rf34j8eKvADhB82m5pZtK8UyX4r2m2RusGK lCnZCH3fpvyklaGRvGaNG2nH6Vsbb7yxQzmG0ha/PvQ5poe/8MILPkt77rmnn8rNWNfs+FW0PEX6 WSv7e1rdZB2DKfnmRY1p6aw+ygsO/RRHyI1IGf2hKPsi+WQ6tY3T3MOwfsXXC+2bjzZ5pUh9Z8VZ pE1nxZH3ONZJ3FtYyReFGeMYHwHKGn+buf/lLUNZdZc3vTBc2X2lXvvh+QEfZghpw7eeUJ8oxpi2 zr2Xle+Y0ollkSlcwjiKPosVaa9Fx+AwX43s1+MZxlm0HRXtI0XyQr74CMcKjjzvIaYks32e8RGe P8xqyB8o+K/ouFq0HGnZIY74PSXr3SC+vsizSnxt/JtnBBYRQDlJ27z99tu9exCeQ/MozIr2lTj9 sn4Xub8W6a/kr8jYUVZ5FI8I9FcCsjDLUfM81KSJ+d7JOh9fs/POO3sLJr448HDEQ79da9v4Giy4 zPcSyiKUZYsuumhl6XTLA6bgvJhy48ZEFyXbZZdd5m98mCaffPLJVRZgaXmJ0w5/Y0nFyy0vZ0wR YaonyjKcnDINlJcYEyuLbe04W8uvbcNz4f6GG27ott12W/9ggj82Vh7CXwSKQJZ2RsI4LC3bhnFZ ONuG52zJd1bBKeKYlYdaviSjzGJaKspEvoiRBnmHSbjSjqWdlr8wP+xj0r/aaqv51W+wJrTVO+1a 24bXWfy25RzTBMgTlmZM7eCli98oy3jRPu+88yorcy2++OK+jaDoY4oc5SFdXkiHDBniz1l6ReK1 a+KtlcG2nLd922Yds7isrLa162xr4bbYYguv7ONr7R577OGnTRTpKxZPvI3T5XwZ7dbyb9sidWPX xHlN+100r8SRNW5kHd977729spL+hYKdl3/GMFZ042Fv3XXX9VkrY/wqWp4i/axIf7c6sG3I3tqM bcNz8b6FCePBGg+/NrPMMov3Y8YLG6vb0qdp22atEl8bxmH7ti3KPs4nv4uyt7RtG8ZpebctYRir GMf4KME4xtiEQoIXY8TChvHE+0Xq2661eG3L8bxt2uJI21p8aeUPww8ePNj/5AXWrIGLjr+Whm3D +Ovd/+wa23Kt7ds2jM/KZVvCZNUd/R/JWpggLd60NMNw4X7RvsK1Fr9tw/iy2o+F4fmBF3ukiHU5 7frEE0/01/Ixgec2nhF5zuEFGjGe7Bd5FiN83vZaZBwwPrYlHRPLq23teLytxzMMTzpF2lHRPlIk L5YvsxzDdQrXm7CQB/cLxMLYOeNlWzvO1njZlmNFx9Ui5bA82Jb0kKx7+bCz1f/tWtsWeVapjqn7 L3y/8ZzAh9xLL73Uz+Tg4znvAvZsbenaNo6lSF+xOGwbxmXHbGvn7LdtOW77ti3Sr7g+b38lbNGx g2skIiACjREYKbFUGrE2b2Nx6KoCBFBAYB3AIIoZf3hzrBUNShm+PqKg4iZSS3h5Ig0UZ1iZMaXI Bu/wukbyQnPBkoFppVMlijh7QAzjLXOfFyRbapkvdWU70d91113dFVdc4bbZZhv/oNBI3skjykMe /AclXxTtZt5IXOE1WKqhVMV5cLPlJi4s1qhzpubWmnpKOKaZ0kZ5+GObJUXizYqjN4/n7StF89iq dpunblhVj8UOePnK0xaL5jVr3Mg6buyYFswYxpjBFO4s/z556yQrvaLlKdrPWtXfjVOeLeMwFihY gdKfGefTxvg8cYVh8rIPrwn3i7IPr82zT/x8QMEKougiFxZ/0fq269K2edt02rVlHGt2/C3j/ler HEz/Z1o/SgXuI2HdnXLKKe6www7zL33st0rK7itZ7YcPTVgE4fQdC7H/Z+8+4KOqsgeOH0iAUEIL vffepAuIFBEUFRXEvvq313Xdou667lp2Lavrrr2uvaLYEKVI77333nsNhBDa/54Lb5xMJuFNMpnM m/ldP8/JzLxy3/eFJHPeufdoBneoTeeq09+9mkWT3c9HZ5+5+VvM7fdrXn8OOH1085idp/+2efk+ CuXfiJu++PcrUl+H+nM1r+eR3e/WUM7Xzd8qwfZ3xx132GwyHc1y9913278Z9POG3iDJ6W/RYPty XsvNvxVn23A+hvrvyu2/V+1jKD87wnlO7AuBeBEgYBYvV5rzzCKgGXs6Z4B+0NSKkE46e5YVeQEB jwhoFSn9g1M/rL3//vse6TXdRACBSAtE4vefDoPXeSSTk5NtEMn5wKvZvjrcSudb1aGmzjDySBuE 63gaoLj//vttNoxmZP/zn/8M167ZjxGIl+8jLrbYv190+KUGzHSUCQ0BBBCIBgHmMIuGq0AfIiqg Q3o0xVvn99JJdnX4BMGyiF4CDpZPAprloHcxNcOMhgACCAQKRPL3nxYu0PkjdUqAG2+80U57oBln OiWFZo1oYF/nOfRyu/XWW+2cjDoKQOe2cuYF9fI5RVvf4+H7KNrM6Q8CCCCAwK8CBMx+teCrOBHY sGGDnTBaT7dZs2by+OOPx8mZc5qxLqAT3eqcHzQEEEAgmEAkf/81bNjQVifWaqY6RFwXp+kUCzok 82xTTDjrR+OjDvUaP3687ZoOodTiJjptBi28ArH+fRReLfaGAAIIIBBuAYZkhluU/UW9gM6toNll +keYFlQIx9w/UX/SdBABBBBAIO4FCuL3n1a2XrBggZ2PSOdV1KCS/v4tUqSI56+HVsbU+WJ1wvP8 ntPV81h5PIFY/j7KI03MbK5zc2qWvM5RmdNcuzFzwpwIAgh4QoCAmScuE51EAAEEEEAAAQQQQAAB BBBAAAEEEIiUQOFIHYjjIIAAAggggAACCCCAAAIIIIAAAggg4AUBAmZeuEr0EQEEEEAAAQQQQAAB BBBAAAEEEEAgYgIEzCJGzYEQQAABBBBAAAEEEEAAAQQQQAABBLwgQMDMC1eJPiKAAAIIIIAAAggg gAACCCCAAAIIREyAgFnEqDkQAggggAACCCCAAAIIIIAAAggggIAXBAiYeeEq0UcEEEAAAQQQQAAB BBBAAAEEEEAAgYgJEDCLGDUHQgABBBBAAAEEEEAAAQQQQAABBBDwggABMy9cJfqIAAIIIIAAAggg gAACCCCAAAIIIBAxAQJmEaPmQAgggAACCCCAAAIIIIAAAggggAACXhAgYOaFq0QfEUAAAQQQQAAB BBBAAAEEEEAAAQQiJkDALGLUHAgBBBBAAAEEEEAAAQQQQAABBBBAwAsCBMy8cJXoIwIIIIAAAggg gAACCCCAAAIIIIBAxAQImEWMmgMhgAACCCCAAAIIIIAAAggggAACCHhBgICZF64SfUQAAQQQQAAB BBBAAAEEEEAAAQQQiJgAAbOIUXMgBBBAAAEEEEAAAQQQQAABBBBAAAEvCBAw88JVoo8IIIAAAggg gAACCCCAAAIIIIAAAhETIGAWMWoOhAACCCCAAAIIIIAAAggggAACCCDgBQECZl64SvQRAQQQQAAB BBBAAAEEEEAAAQQQQCBiAgTMIkbNgRBAAAEEEEAAAQQQQAABBBBAAAEEvCBAwMwLV4k+IoAAAggg gAACCCCAAAIIIIAAAghETICAWcSoORACCCCAAAIIIIAAAggggAACCCCAgBcECJh54SrRRwQQQAAB BBBAAAEEEEAAAQQQQACBiAkQMIsYNQdCAAEEEEAAAQQQQAABBBBAAAEEEPCCAAEzL1wl+ogAAggg gAACCCCAAAIIIIAAAgggEDEBAmYRo+ZACCCAAAIIIIAAAggggAACCCCAAAJeECBg5oWrRB8RQAAB BBBAAAEEEEAAAQQQQAABBCImQMAsYtQcCAEEEEAAAQQQQAABBBBAAAEEEEDACwIEzLxwlegjAggg gAACCCCAAAIIIIAAAggggEDEBAiYRYyaAyGAAAIIIIAAAggggAACCCCAAAIIeEGAgJkXrhJ9RAAB BBBAAAEEEEAAAQQQQAABBBCImAABs4hRcyAEEEAAAQQQQAABBBBAAAEEEEAAAS8IEDDzwlWijwgg gAACCCCAAAIIIIAAAggggAACERMgYBYxag6EAAIIIIAAAggggAACCCCAAAIIIOAFAQJmXrhK9BEB BBBAAAEEEEAAAQQQQAABBBBAIGICBMwiRs2BEEAAAQQQQAABBBBAAAEEEEAAAQS8IEDAzAtXiT4i gAACCCCAAAIIIIAAAggggAACCERMgIBZxKg5EAIIIIAAAggggAACCCCAAAIIIICAFwQImHnhKtFH BBBAAAEEEEAAAQQQQAABBBBAAIGICRAwixg1B0IAAQQQQAABBBBAAAEEEEAAAQQQ8IIAATMvXCX6 iAACCCCAAAIIIIAAAggggAACCCAQMQECZhGj5kAIIIAAAggggAACCCCAAAIIIIAAAl4QIGDmhatE HxFAAAEEEEAAAQQQQAABBBBAAAEEIiZAwCxi1BwIAQQQQAABBBBAAAEEEEAAAQQQQMALAgTMvHCV 6CMCCCCAAAIIIIAAAggggAACCCCAQMQECJhFjJoDIYAAAggggAACCCCAAAIIIIAAAgh4QYCAmReu En1EAAEEEEAAAQQQQAABBBBAAAEEEIiYAAGziFFzIAQQQAABBBBAAAEEEEAAAQQQQAABLwgQMPPC VaKPCCCAAAIIIIAAAggggAACCCCAAAIREyBgFjFqDoQAAggggAACCCCAAAIIIIAAAggg4AUBAmZe uEr0EQEEEEAAAQQQQAABBBBAAAEEEEAgYgIEzCJGzYEQQAABBBBAAAEEEEAAAQQQQAABBLwgQMDM C1eJPiKAAAIIIIAAAggggAACCCCAAAIIREyAgFnEqDkQAggggAACCCCAAAIIIIAAAggggIAXBAiY eeEq0UcEEEAAAQQQQAABBBBAAAEEEEAAgYgJEDCLGDUHQgABBBBAAAEEEEAAAQQQQAABBBDwggAB My9cJfqIAAIIIIAAAggggAACCCCAAAIIIBAxAQJmEaPmQAgggAACCCCAAAIIIIAAAggggAACXhAg YOaFq0QfEUAAAQQQQAABBBBAAAEEEEAAAQQiJkDALGLUHAgBBBBAAAEEEEAAAQQQQAABBBBAwAsC BMy8cJXoIwIIIIAAAggggAACCCCAAAIIIIBAxAQImEWMmgMhgAACCCCAAAIIIIAAAggggAACCHhB gICZF64SfUQAAQQQQAABBBBAAAEEEEAAAQQQiJgAAbOIUXMgBBBAAAEEEEAAAQQQQAABBBBAAAEv CBAw88JVoo8IIIAA7TfTmAAAQABJREFUAggggAACCCCAAAIIIIAAAhETIGAWMWoOhAACCCCAAAII IIAAAggggAACCCDgBQECZl64SvQRAQQQQAABBBBAAAEEEEAAAQQQQCBiAgTMIkbNgRBAAAEEEEAA AQQQQAABBBBAAAEEvCBAwMwLV4k+IoAAAggggAACCCCAAAIIIIAAAghETICAWcSoORACCCCAAAII IIAAAggggAACCCCAgBcECJh54SrRRwQQQAABBBBAAAEEEEAAAQQQQACBiAkQMIsYNQdCAAEEEEAA AQQQQAABBBBAAAEEEPCCAAEzL1wl+ogAAggggAACCCCAAAIIIIAAAgggEDEBAmYRo+ZACCCAAAII IIAAAggggAACCCCAAAJeECBg5oWrRB8RQAABBBBAAAEEEEAAAQQQQAABBCImQMAsYtQcCAEEEEAA AQQQQAABBBBAAAEEEEDACwIEzLxwlegjAggggAACCCCAAAIIIIAAAggggEDEBAiYRYyaAyGAAAII IIAAAggggAACCCCAAAIIeEGAgJkXrhJ9RAABBBBAAAEEEEAAAQQQQAABBBCImAABs4hRcyAEEEAA AQQQQAABBBBAAAEEEEAAAS8IJHqhk/QRAQQQQAABBBBwBF7/8mN5Y8gnzlMeEUCggAXuufpGuXvw DQXcCw6PAAIIIIBAeAUKnTItvLtkbwgggAACCCCAQP4JtBzYN/92zp4RQCBXAouGjszVdmyEgFsB bpa4lWI9BCIjoDdK9IZJLDcCZrF8dTk3BBBAAAEEYlDACZh9//ZHMXh2nBIC3hIYcMdvbIcJmHnr unmxt87Pfi/2nT4jEKsCsf6znyGZsfqdy3khgAACCCCAAAIIIIAAAjEmwM2SGLugnI4nBZybJZ7s fAidZtL/ELBYFQEEEEAAAQQQQAABBBBAAAEEEEAg9gUImMX+NeYMEUAAAQQQQAABBBBAAAEEEEAA AQRCECBgFgIWqyKAAAIIIIAAAggggAACCCCAAAIIxL4Ac5jlcI21ZL1WY6EhgEB0CMRDJZbokKYX CCCAAAIIIIAAAggggEB8C5BhlsP1J1iWAw5vIVAAAhrEpiGAAAIIIIAAAggggAACCCCQ3wJkmLkQ phKLCyRWQSCfBeKlEks+M7J7BBBAAAEEEEAAAQQQQAABFwJkmLlAYhUEEEAAAQQQQAABBBBAAAEE EEAAgfgRIGAWP9eaM0UAAQQQQAABBBBAAAEEEEAAAQQQcCFAwMwFEqsggAACCCCAAAIIIIAAAggg gAACCMSPAAGz+LnWnCkCCCCAAAIIIIAAAggggAACCCCAgAsBAmYukFgFAQQQQAABBBBAAAEEEEAA AQQQQCB+BAiYxc+15kwRQAABBBBAAAEEEEAAAQQQQAABBFwIEDBzgcQqCCCAAAIIIIAAAggggAAC CCCAAALxI0DALH6uNWeKAAIIIIAAAggggAACCCCAAAIIIOBCgICZCyRWQQABBBBAAAEEEEAAAQQQ QAABBBCIHwECZvFzrTlTBBBAAAEEEEAAAQQQQAABBBBAAAEXAoku1mEVBBBAAAEEEEAgJgQ2rl8v G9atl6JFi0qnrl3Oek7TJ0+RY8eOSf2GDaVajepnXd/tCocPHZK5s2ZLkSJFpHO3rr7NTp06JWNG jpJlixbLSfN1/wGXSUbGUdmze0/Y++A7qIsvUg8elOVLl9l+HT58WBo0aihNW7SQGrVqutiaVRBA AAEEEEAAAe8JEDDz3jWjxwgggAACCCCQS4G1q9fIrddcb7cePX2K1GtQP9s9rVq+Qq6/fKB9/4Ov vghrwGz92nVy81XXSEJCgqzcscXXhz/d+1v5dshXvuc1ataUkT8Ot0G03//5Ybn3Dw/63ovEF8dN sPClf70gb738qpw4cSLLIdt16ij/fv0VqVm7dpb3eAEBBBCIJoFtW7bK6pUrg3YpMTFRKletan/O JyUlBV0nlBeXLVkiu3fukrr164d8YyHN3JSYM3OW/f3Qpft5oRw2rOtm56U3eipVqSJVqlWVEiVK hPWYBbUzbgoVlHz0H5eAWfRfI3qIAAIIIIAAAmESOK9nD/tH/vat2+TbL4fIHx79c7Z7/sa8r00z y7qe3z3b9fLyRqFChXybr1uzxhcs63VhH9FgVOu259iAmV3Jb13fRvn4xc4dO+S2a26QJYsW2aO0 OqeNtGnXVsqUK2czzaZOmixzZsyUi7v3khdee1n6XtI/H3vDrhFAAIG8CYwY9qP8469/O+tOOp7b WV7+39tSsVKls66b3Qr/efq5XN/oWLdmbdAbKtkdK79ed+NVp149+e/bb0jLNq3zqxv5ul9uCuUr b0zsnIBZTFxGTgIBBBBAAAEE3AhoRtfAa6+R1/79H/nuq6/l9395RPyDVs4+Tp48Kd9//Y19etX1 10nhwuGd9rVJ82Yyf+1Km0HgHHPNqtX2y+LFi8vrH7wnRYoWsc9fevct0T/qI30n/8k/P2qDZSVK lpQnnntGrrxmsNNV+7h+7Vr57W13yZKFC+Xh3z5oA3wVKlbMtA5PEEAAgWgTKFuurFxwUb9M3co4 miGbN22SeWao/Mxp0+Wynn3k+7GjpFLlypnWi8QT595IsN9NkTh+4DH0d49/QCzD/D7as2u3bNu6 VfT3wFUXXyr/fesN6Xdp+G+aDP/ue3nlhRftzZpnX/pPYNfy9JybQnnii5uNCZjFzaXmRBFAAAEE EEBABa667lp5/cX/ytbNW0TnKDv3vG5ZYKZOnCQ7tm2zgbJBJsAW2JzhGzu375B6DetLg4aNfAEu Z909u3dL+pF0KV2mtJRKTjaBpUX2w8X5vXtJUlJxOXjgoCQmJogGpLQvmzdstJtqRpv+Ia/v6RAh HZ6j+0kwQ4ZKmMW/aWBP52VbYeYXK1mqlDRu1jRLVsSxjGN2f7pd9Zo1ZP++/TJz6lS73jkd2vvv zvf1xLHj5OcffrTPn33pRel/+QDfe84Xmlnw2fdDpWf7zrJ3zx555m9PyL/feNWc1wFJPZjq67+z vj7qEB/tsw7l0eCl0xwrPQf9MOs8L5dS3gYKN23YIIvmL5SUCinSrGULSS5d2tk006Ob65Ibj0wH 4QkCCHhaoFadOvLcy/8Neg6LFyyUay+7wv7MHGvmk7zmNzcGXS8/X9T5IfWGSrhv1OS2zw0aN5LP fvg2y+Yb1q2TO264SVavWCkfv/u/fAmY7d2zV3R6hPLly2c5fl5f4KZQXgXjY/vw3i6NDzPOEgEE EEAAAQQ8LFCzdi1fkMwZdhl4Ot98cXo4Zrce52eau0yDLc898ZS0bdBErrlkgMmwukMuOb+3dG7e Un789rtMu/nzA7+X7ue0t3fHr+jTTwb0vlAeuP0uE+DaICuXL7fvndfmdMDqwnO7yVOPPma310wz 3W5w/8vsc2c/77/xVqb9L5q/QPp26S69O3aRe26+VW4adLV0btZK7rrxZhtwclZ2jtWzfScZ+vmX 0rFJc7n7plvkjf++7KyS5fGT/71vX2vbsUPQYJmzgQYCH3j4T/apZuxpwEozArT/3dt2lCNHjjir ig6D7da6rX1PA5X+bfDFl9nXX//P6Q+xzjm/+PSz9rx6tOsk9996u1w34Erp0a6jjB012n9zCeW6 5MYj08F4ggACMSvQonUrufTKy+35jf9lbNDz1J9zs6bPMD/rfhCdq0x//pyt7d61S7Zs2mxvKARb V9/T5ejRo3LSzBepN1R0cdq+vXvt+1owRpveRPjp+2EyY8pU+3PXWS/wMSMjQ+bPmWv7utQMrz9x /Lg4fUlPTw9cPaTntevWlXsefMBuM9vMueb0zdmJ9lmz9fR34y8jRsrSxYtFC9sENv9z0/c1aKnb aEBO39Omv0vU51Bqqq//enMmWPO3DPa+vhZ4Uygwg1rXcW4KlU9JscZ6U0ibnqceQ2+qBTa9KaTv Bc75qTeB9HW9YaXN/5z1udvr6eZ7z3/f/p66LS10gcy3KUPfni0QQAABBBBAAAHPCQy+4TrRLLIR w4bLE/96NtNwR/1jeNTwn+w56XBM//a7O+8225zOvNJ5blqbOb1+/mGYbN64yQbD0g6nie7bv/3v 9TftU50Pp0zZMlLMTCh9NOCDyqUDrxANlOmcYJpl1ccMF8pp/hz94DOoX385bj78lCtfznzAu8IM j9km40wgafTPI2TFsuUycupEWw3U6Yv+Af/IAw/aIaiNmjax2WvOe4GPq0zGgDY3Q2x0nb8/9Ihd X89B51/TpsNI58+e4wtOjhv9a5BLA17OvHC7du60mXe6Tc8+F+iDr73/5ts2y0KzALUi5+iffrYf OB6+/3cyfs4Ma6Ur5+a6hOLh6xBfIIBAzAsUKVLUnuP+vfsynasGxl585ll597U3bKas86Zmxerv kUuuOB1oc173f/zL7/5g5zTTn4/vfPax/1s2QKQ3VLT9MPb0z8nLevXJVBRGf+ZpBeX/u+sOm3E1 efwE3z70+M+/9orvZ6/zhgaFHjS/s5wgjb7esElj0czoA/v3ywumYMsVg69yVs/VY+OmTe12+vNe g0WajaZBub899GcZ+sWXJpiYkWm/9Rs2kH+9+rIdYum84ZzbrffcZbKfp5ls4gX2Lc0mXmoqRmtb OG++vamihW+WL17i2rJ5q5Z2+8D/hXpTSH/H6U2hx5972t4UevT3f5JEU/xAMwF1GgVtzk0h/fqj oUN8v+P0ud4U0uGreo5/efJxcc7Z7fUM5XvP2Xegp35vZeehfaQFFyDDLLhLWF7VKPKkcePtMtdE 3XNq+seis65G4qO5aaRa7xK88vy/beUsTcOlIYAAAggg4CUBnaBeP2TocEetQunfNIimd7N1OKAG rpymH1A0WKbDZD759mv5fNh38sjjfzOBm5ly2cAr7WrPP/XPLHf79Y/ql999W6YtWWCCWJOkQaOG zi59j8/890W5/v9uss9r1althzY+8kT2k1M//sijNlimRQymLV4of3/2aXnzo/dl+ISxtn86TNMJ 1PkOYr7o0LmTzFy+RH6eNF6eeuE5/7d8X2tGwuaNp4eHagbB2ZrOW6bDSrWtNQEzHUbavFUr+1yz MJw2dqRfwMzv61nTTq+jwyy1f/6tWLFi8tr771pvnb/mu19G2bd1CKhmTWjL7XXRbd146Ho0BBCI DwHNzvllxAh7ss1aNs900hqYf/uV12ywTG+Y3H7fPTaQrwEpzR4e8slnmdb3fzLw2qvt00nm90hg ZpSTnaxD6s8W0NCbCHqzR28iXHX9tfb3mB5fgyT+GV76eVIrQut7Pfr0lj899qgMGDRQtKCABsvC 1TTDTZv+nqtT7/Tvi+efelq++Ohjc3NGpHffC+1coRoY0owtvamimdmaSRfY9HeWBsv0ZpH+nuzU pYtoxp82zfK6/KpB0twE0cJhGepNIaev2n/nxo5zU8h5L/CmkPP62W4KubmeufneC/TUm3W00AUI mIVu5noLvTutJeN1udYMIQj84ei/o3dffcO3rg6liOamJe/vNOPV//vc8/KyKTW/YO68aO4ufUMA AQQQQCCLQNGiRe2HB33j2y+/yvS+M0xT77w7E+/rCs6HGv0A4D/vmU7MfNcD99t9aCDHP0ikL956 951mWONlQYsL2I1C/J/exddMNG0P/f2vmfqod/cv7H+xfc/JhLNPzP800PfuF5/aD1jOa8Ee9+7e 48ueSDEfUtw0nVtMm34w0Na73+lsCc0W0KZDf/RDgfZB78ZrQG/t6jX2vVnTTq/TvXdP+6HLvnjm f7fff6/vfPQlHU6rc7xp0xuT2nJ7Xdx62IPwPwQQiBmBHdu2yzuvvp5p0c81D93/gB3irplCZcqW NQGxe33nnJfAvO6k14UX2pswmnE1+qfTATln5z99/4P90gkEOa8He3RzE0G3+5eZOkDni9Qg0/8+ /9T+jnrxzddkyPAfzvo7IPC4J06ctD/D9ee4Ljq0b/XKVfLWy6/KC/942q7e3dy80aCZtuHff28f b7r9Nnn704/k3t//Tv76jyfNPGjfmPk7k+zP7jWrVtl1/P8XeHPpr/98UgaZOUe1NTS/23SOTL3Z lVfLeLkpFOgZ7Gadvz9fBxdgSGZwl7C/qhFoTaPNLu11xI+nh3eE/cBh3mF2Je/DfBjf7oZ98628 ZiZm1lL2/3rlJd/rfIEAAggggEBeBQbfcL18+M7/ZNqkyXYuEs2M0iCMc8d8cMBwTL0zr22huQN+ 45XZD2NZf2Y9p38lz2RfOc/z+qi/i5329GOPZwnEOdlh69euc1azjxrYc1Nps1KVyqIfyjQDYMvm zZJdYQBn5zq0UYeDatPJtLVd0K+vvammQzL1byCds0w/aHXo3FnqN2pgsg8+MfOQjZJ6De62c9zo NhqIDGxFz3wA83+9Wo0atkiCfujRltvr4tbD/9h8jQAC3hfYsX27PPv4k0FPRIMMN995u9z/h99L WTPc3WlnC8z/MPQbW/xEb5j0OjMs3dlWH/Xmi2Yif/j2u/KjmefRCY5ppqz+3klMTLTBLf9tgn2d 3U0ELRzj3ETQx3nmZ6+2u8/MMebsq3Xbc6R6jZqZhmk672X3qJWQm9eok93b9ibGsy//x/f+q++9 a4dlasacf6tcpYro7xedx3PD2vXSzBQ38G/OzSX/14J9nVfL3N4U0ox0/5tC6hLsppD+/nRuCtVr UF9yc1PI/3rm9nvPrWcwY177VYCA2a8W+f7VSDPEI1jATCc21LlPvNA0DVVbYMn7/Oq7phHnV2WU /Ooz+0UAAQQQ8IZAk+bNpGWb1nYIyHdfDZU7f3ufnaNEpx44p307O9eL/5novC/adKLfYJP9Ouvq hMr52XaaCppO02Bfdk3/uE9LS8vu7Wxf18yreg0byDIzT4yTBZbtyuaNLZs22aCYrlPfbKdN557R AKQ66RAbZzhmzwsvMAGzhjZgNm7kaNGg5Eoz35pWzDy/d2+7baj/i5brEmq/WR8BBApGQIfbX2bm fXSa/kydYCb415+XmgHVvlOnTMEyXS+3gXnnGPo46LprbMBs6oSJovOjaUBOi6Ro02F+KRUq2K9z +p+bmwgarNGm5xKurCL9veC0wubndWUT+Kpubl70ufgiuc5MJ6DHcpoG5fQz3DAzcb/+nNcApWZf a/VkZ8RVevqvBWGc7UK5uZQXy3i5KRSKp3MNeMwqQMAsq0nYX2naorn9o1MnXtQ/Xp15PpwD6WTB 2jTKrtVDsms6pl7HW+80P3R0H526nOub7NbZRicE1B/6Til6vZu7wNy52L9vn/kjtqGdiNFZVx/1 7uyuHTvtEImq1av5v2XvBO/Ztdu3r5xK3jsbuumjs64+6g/N5UuX2XPSH7rNzMSMGpXXphH8A6bf 2uxdbnO3JLl0spQuU8ZWRzmaftROnqwVuvybnr86OKXo9T2nPH3pMqVF11+ycJGdePH83r18pek1 bVl/waww/dEJl/WuSOCEy46v7rN6zRr2l8HMqVPteme7A6/b0BBAAAEEokvg6huvtwEdHYapATNn eKZmnwU2/bmvvyd0vQcfeTjwbd/zhMQE39f58UX1mjXtbvUDzLw1K8zvzV8/qPgfT+ePcYbI+L/u 5mvnbxfNBNN5epxJjYNt+8Fb79iXdZ269evbrzV7S7MsPv/wI5tB5sztoh8Ka5hhlUWLFZXZZlip Tv6vv391PiCdUy43LVquS276zjYIIBB5gZq1asnfnvlnpgPrZybN2P30/Q/sHFvDxv0ielPFaW4D 89vNTYLsmn7Wcz7vjTRT92iBGGc4pgaAwtWcPvhnyOVl3zrS59vRmYeR5rS/2dNnyC1m/jRnTjWd l7NS5cr294PO652bGzmBx8uLZazeFHKue6AVz/Mm8GuoOG/7YescBGqYP2w10q5Bn3Gjx2RZUycX 1naxmd8kWNNKI1qJ49wWbeTaSy+3k0reft2N0rZhU7nhikG+SW91W6dUupap1/TNDo2a2RLsWm6+ b9futtS8/kJw2kIz/5iWfu/X7XznJd+jjtXX964xx9SWU8n7UPqo+9I+PPXoY9K2QRPfOQ266BI5 /5wOvrlI7rvldvnPs//S1e05al/ePVNp7ME777F9Cza55m3X3GDf85/E2SlP/8oLL8oVffqJVqLR yTk1JVib3v3u26W7nbdArW4adLV0btbKemmwzWmOb8/2nWTo519KxybN5e6bbpE3/vuyswqPCCCA AAIeEtDqkhro0QI2H737nskiWGNvSl1yxYAsZ1GvwensKZ1MWYeE+C+68tuvviZvvvSyLQ+fZeMw vqBDPLRpoEmH3fj3Q7+eNX267cc3AXOzhdKF+//4e3sDSzPEtMhPdk1v9H36/of27fvMNnp8pznz mH38v/fsEEoNbGl1Th0W2rlbN1u04N//fMau3uvMnGfOtqE8Rst1CaXPrIsAAtEloBlSj/3zKTOp fEv7s/W5J57K1EH9+aVN56tcvnVTtsvDf38s03aBT5yhmJpZpsEjnS9NJ7TvcUHvwFVz/VwLsWg7 YLK8It10CP6t195gg2V6g2TC3FkybvYM+XrEcPnw6y99N1XC0a+8WOpNIW16U0iL/OTUcroppNvp 3wT+N4W6dD8vy02hdh075OmmkB4nr997ug9a6AIEzEI3y9UWTjBsZMBcZcuXLLWZTloS3n8CYf+D ZFdpRANxOhQjWKURnU9EA0JacUrvXrQ/U3VKS807/+j9j+Hmay15365TR7uqZmDpJJIXXXqpfR5q H+/9v1ttP/TO97U3/UYeePhPNqioWWW/v+temTF1mujkkXpHQ5uehx6vTbu29nlu/xesWsjSRYtk UL/+ZtjJatHr8JvbbrHpxTqXgHoN6neJzcTzP6ZTil5f0z/+ddgJDQEEEEDAewKadXzRgNO/y554 5C/2BDRYFpgNrm/o71Ob1TVrdpbfpe+9+Za8+PSzJmj2uhQpUjRfIXTYjlO986m//NU3p4oe9FBq quhNJZ3AevmSJbnuh85Fdvfvfmu314mddZ8H9h/w7U9/D3792Rdy9cWX2cCXDvu57Z67fO/rF/qh QYORWqRAW88+fezj6a8vsF9r9rq23n372sfc/C9arktu+s42CCAQPQIa8P/dnx+yHdKRQc7QRn3B CczrZ5TAmxT6vnPDJHDuSH3Pvw24aqDN/NV5HfUmjbbLBw/KdTaw/76dr2vUOp2FrIEgvRnk3zTJ ITX1oP9LYf164bz59veQ7vQ/b71uq4j6H+DEyRP+T11/rVMlBLa8WHrxplBev/cC/XjuToCAmTun PK+lgSUdnqAZZv5ldEecKWWvFa2KBJnYVg+c20oj3XqcL6OnTxYtVf/lj9/LFVcPtuehwx9y03Iq eR9KH8eN/kXGGwf1+GDI5/KPf/9LfvunP8jQkT/Z1Gf9I/zzD0xFlT88KFdec7oEczNzF0Aro+jw jry0YNVCHn/kUfvH/nkmQDdt8UL5+7NPy5sfvS/DJ4y1H4z0l6UG2gIbpegDRXiOAAIIeFMgcPhl 4GT/zllpeXudDFqbZkkP7n+ZPPbHh+Wynn3k+af+aV//8xN/81VxtC/k0/8ee/oftorbmlWrpZ/J IP+jqWB93y23iWaY6xxqGvD642OP5unoGjC77Z677e9CndC6XcMm0qdzN7ms14XSuk4Defi3v7ND a/Tm1luffJjlA59OsaB/izhN5y9zmmYeOK1OvXrmw2h952nIj9F0XULuPBsggEBUCegNe72Bru3b IV/7+uY2MJ/T8HXdWbny5W2BE/2840zmPuja8A3H1GPoz1RnOOnLz79gM+b0dT3mg3fdYwKBp0fY 6GvhbidM5rPTdJ5up2nASytqarJIKK2USdLQtttMExTY8mIZizeFzva9F+jHc3cCBMzcOeV5LU3j 1WGZOofZxDFjfftz5i+76LLTd7d9b/h98dLbb8pXPw0TjYT7N6fSiL62cV3mH3x6B/x/n3+SaY6z zl272M11ct5wt1D66JyzBr86d+vq64oG0F54/RV57uX/2jstvjfC+IVTLUSPpU3ves8xc6hoe+jv f800lKSBKV+sgUxtI4ZlrmKqvu9+8WmuU2vtTvkfAggggEBUCOgNECd7QH/25zQn5aNPPSHPv/qy nbtSf3989sGHssRkKpcpW8bMa/aQXHfzTb5zSjCZytqcR98b+pqZNFlbIb+JlDWzWZvznn2iz8+8 7r+u/l3x8+TxNtPsUOohM/faEPn5hx/t3KCasf7Gh+/5KmI6+wt1bjW9yfTnJ/8un3z7tbQ1w0n0 j3HNxtbKYHrzT+cr+53JEP/65x/tBzSnv/6Pvc5UvtThTv6/82uaeczUWpszdNN/O+ecncdM750x 0/lanRbSdTljH6qHcyweEUAgdgX0595Fl52eJue7IV+Jk9kUzsC8/3xlut/AapJ51dXPOfr7SB+H f/eDXGWmvdEbHD3adbTP87r/nLbX83Hmxb7zxpvt9DZ/uPs+e+zcTGHj7Et/91x/+UCbPe1//LxY clPIX5KvsxM4/ZdZdu/yelgFdFimlg7WOcu0osjqlatsmqxOTt/F/HGrk98Ha/pHanaVRnTohbYj R9Iybao/IPUHvn+rVqO6fZpxNMP/5bB8HUofN6xbb48Z7ANJ0+bNRZf8aoHVQnSuGqfpRJ9OIM15 bfPGjfbLwPRqXU/nYKEhgAACCMSGgGZku21XXjPYZEAPtkMht2zabG+e6DQJgb93NWiVXdO7/2t2 b8/0dv/LB4gugS27/eiNszc//sAWutEPE8fNUBv9Xa933f1bsGP5v3+2rzuZG256407nTNuwbp0J yh20FUTd/B7UrAxdgrWRUyYGe9m+lt0565uf/fBt0O3cXpe8egQ9OC8igEDUC+gNb22Bf+8Hdvyy QVfamyGaiaVDDDXpQZsG5vVzyr+e/Ie94e7cdNeCJf935x2Zbpj4juV3U8Q5zvm9etostn2mUubA INllhQqfvrHvf5Mkp/0VNp9LtBU+s51+fcFF/eS1998182D/0X7+1M+geuPiob/91c7bpSNozvYz 3HfMM/vX/Z6t6Y2Vdz/7RB66/3f25opOb6NNi7Y9YjKwvzNZe5pl5uxb33O+9j9ffV2b3mi5YvBV 5obQMNFhrFqwTm/UOO1sls56wR6dm0K9+vaRF8x8msttZejVdlXtk94UGmC+F+558AHfjavA/ehN IT3H7G4K6ZDYYDeFcjrnYNczXN97gf3n+dkFCJid3Shsa+iwzGf+9oSMGTnK/nE78kzWUl+TxRTs Dqpz4Jwqjehkv04FEmf9gngMpY9OlRkNFBZ004qaTtP54LJrmhkYjoou2e2f1xFAAAEEvCeglZQD qykXxFnofDrhzlAIdh7OB4hg70XTa9FyXaLJhL4ggIDITXfcZpezWWjWceANDWcbt4F5vZmRXdtk bsinHky1WbuXmznNAptWgAw8fk77+3zYd4G7sIVWmrdqJVMWzRct3qJzUDY1N2r0M6dTyEUzfXNq br0C96E3Jb4fM9L2YfvWreZGTg2pUq2qDVTefu89gavbGz9ZXvR7QUcg6dRA+rmtfIUUv3dEzmaZ aeVsnhTETaFQr6d2PRzfe9kQ8HIOAgTMcsAJ91t617dN+3Yyz0wWPHXiJJtppse4eEDw6pj6XmCl kcefeybT5Ik6b4oOBSnIFmofq1WvZifR3L1jZ0F22x67uskI0KYfAuatWWEqgiXZ54H/0xsrgZkD gevwHAEEEEAAAQQQQAABBGJfILeB+WMZx+TZx5+yGcE6nFAzr8LddBjpRef1OF0ExgzN1ArGTtN5 07QYgGaX6Vxn+dU0i0+nDtAlHE1vDAXuK9yW3BQKx5WKvX0QMIvwNb3YzFWmAbO3Xn5FtBS7Zln5 z+kR2J3ASiPJplqkfzt56qT/05C/TjJps9p0aKdOEuyUIdbXUg8e1IeztlD7WKd+PZk+Zaqt8On/ A1wPNMO8PtNUn6lSrZpcdf21vmM78wc4L2jaq7bAoZI6meVhkw3mtjmTDOswE83W04n//ZsGNjXd WqtgZjekxH99vkYAAQQQQAABBBBAAAEEAgVuvfZ6WbZoiezYvt3cpC8mt9ydubJw4Pq5fa7BKp0r Wou1vPPaG7J50yap37ChjP9ljP2cpfu99d67g1aDzu0xI71dpCwjfV4cL/oETg/kjr5+xWyPdHJ/ /SGmZWG19e3fP8vkvv4nf7ZKI8vMWOu8tBq1fk3FnTR2vG9XOkb87w/92fc8py9C7eOVZ6p1atDs +6+H+natZY4feeBBO5mj45NdZRQnhViHUerdBW06pv23t91pgmhrffs82xcpFSrYCZN1vaf+8lc7 H42zjQYRH7zzHtuf5Uvy5uzsk0cEEEAAAQQQQAABBBCILwG9+T9+9BgbLNNRK0+98C8TxGqQbwj/ fPF56XtJfzt1z1effm6y2p60c4DpAbX6sc7L5dUWaUuvOtHv8AiQYRYeR9d70UofOtn93Jmz7Db9 TSGAnJpTaUSrOWqlES0OUNKU1509Y4Zs3pj3apc6SaWWfJ88foIpSX+/fGqqfWlRgKVmmGdgVld2 /Qy1j+06dTQTXF4tQz//Un5/173y3VdDzRwwFWXyuAm+Oy7/d+ft9nCBlVE6nNvZTvSokyJ/+M7/ bLWuzs1bSut27WS+yRA7sH9/dt3M9vXHnv6HzJw2XdasWi39unaXnhdeKOmmiMKUCZNstTEtO/zH xx7NdnveQAABBBBAAAEEEEAAAQSyE9CEidc/+J8dDtmjd28pW75cdquG5fUSJUva423asFFWLl8u e3bttkVhGjVtIpUqVw7LMQpqJ5G2LKjz5LjRIUCGWT5eB2cif+fROVT/M3OWlU9JEZ1k0GlO2Xfz 89TXnEojOmmjTu6vVTi+++prW6FKK43opIraAkvRByuV7uzfWdc5yD/+/bwN4ulzHS6qwTIdmvjs S/+xqyQk/BpXdbZ19qUrhNpH3Ub3raXqSyUny8QxY23wTNOT9Xze+/Izad6qpa5mh6v2v2KAzcrT rLcpEyba1zXoptVCNJ1ZK4hOMCnG2l547RXRAJ42p6/6tXMNnEd9zWk6Hv7nyeNtptmh1EPy7ZdD TCWWH22w7FwToNRKXU4VGee8g/k6++MRAQQQQAABBBBAAAEEEPAX0Iyvy68alO/BMv9j6qic3qaS o04to0kSXg+WOedWEJbOsXmML4FCJovoVHydsvuzbTmwr135+7c/cr9RPq2pl2nr5i0SWGkknIfT CipbNm2W+o0aSZmyoU9AmZs+6jaaKbdn926pYuYJq1y1StBSz/v27jUBw8OSUrGCDdA5552eni7r 1qyRwoUK2xL3Tole5/1QH3V459rVq+1EnFqkoVz5gq/kGeo5xOr6A+74jT21RUNHxuopcl4IIOBS IJp+P7vsMqshELMC/H6O2UsbdSfGz/6ouyR0KI4F4uVn/6+pQ3F8sb1w6pp6qplQgdVBwtl3ndhe l9y23PRRt9E7H86cZNkdWwNXwYJXOvl/0+bNs9ss5Ne1AkvjZk1D3o4NEEAAAQQQQAABBBBAAAEE EEAgdgQYkhk715IzQQABBBBAAAEEEEAAAQQQQAABBBAIgwABszAgsgsEEEAAAQQQQAABBBBAAAEE EEAAgdgRIGAWO9eSM0EAAQQQQAABBBBAAAEEEEAAAQQQCIMAAbMwILILBBBAAAEEEEAAAQQQQAAB BBBAAIHYESBgFjvXkjNBAAEEEEAAAQQQQAABBBBAAAEEEAiDAAGzMCCyCwQQQAABBBBAAAEEEEAA AQQQQACB2BEgYBY715IzQQABBBBAAAEEEEAAAQQQQAABBBAIgwABszAgsgsEEEAAAQQQQAABBBBA AAEEEEAAgdgRIGAWO9eSM0EAAQQQQAABBBBAAAEEEEAAAQQQCIMAAbMwILILBBBAAAEEEEAAAQQQ QAABBBBAAIHYESBgFjvXkjNBAAEEEEAAAQQQQAABBBBAAAEEEAiDAAGzMCCyCwQQQAABBBBAAAEE EEAAAQQQQACB2BFIjJ1T4UwQQAABBBBAIJ4EBtzxm3g6Xc4VAQQQQAABBBBAIIICBMwiiM2hEEAA AQQQQCDvAncPvkHeGPJJ3nfEHhBAICwC91x9Y1j2w04QcCPAzRI3SqyDAALhECBgFg5F9oEAAggg gAACERPQD+d8QI8Yd74d6FD6EbnjrWfl7TsfkVJJxfPtOOwYAQRiQ0B/7r/+5cexcTKcBQIxIKA3 MGO9ETCL9SvM+eW7wMlTp2TH/j2yYed22bh7uxw9liE39rg434/LARBAAAEEEPCywNAZ42X7/r0y dPo4uYnfm16+lPQdgYgI6IfzePiAHhHMAjxI2tF0ue3NZ+StOx+W5KQSBdgTDo3A2QUImJ3diDUQ 8AkcP3FCtu7dZQNjG02AbIMJkG3evcMEyY751unduqPva75AAAEEEEAAgawCml2mgTJtGjgb2Lkn WWZZmXgFAQQQiDmBb2ZOsDdLvpo6Vm7pdUnMnR8nFFsCBMxi63pyNmEUyDh+zATDdtrgmM0e27VN tphgmQbNcmotatXL6W3eQwABBBBAIO4FNEimQTNtTvCMLLO4/7YAAAEEYlzgSMZR+Xra6Zsl39ib JT2kTIlSMX7WnJ6XBQiYefnq0fezCqQeOSzv/TJMNphgV5cmreQCk/1VtmRylu30h/fGXWZI5Zll g3ncvm+PnDx1Msu6Ob1QJCFRGlevndMqvIcAAggggEBcCzgBMn8Essz8NfgaAQQQiE2B72dNkoPm 85m2NPP568upY+SOCwbE5slyVjEhUOiUaTFxJvlwEi0H9s2HvbLLSAqUqVNNipb+9a7F8fSjcmDt ZkksnmSWYqeXpCRJKFYkLN3KOJRm9x+WnbGToAKLho4M+jovIoAAAgh4Q+DDCT/Lh+N/ytLZm86/ iLnMsqjwAgIIIBAbAjrP87UvPS77D6f6TiipSFH59IHHpVyQhAbfSnyBQAEKFC7AY0f9oZlUMuov 0Vk7qMEyjQkf2b1fTmQck8SkYpLSrL6UqVtdSlapIMXKJIctWKadyUg9fcfkrB1jhVwJ8G8yV2xs hAACCESNQLDsMqdz/sM0ndd4RAABBBCIDYFhc6ZkCpbpWaWbINrnk0fHxglyFjEpQIZZTF5WTsoR uP+9F2Xl1k3y3j1/kekrl8hrI4c6b+XL4//u/ovUrVQ1X/bNThFAAAEEEPC6QHbZZc55kWXmSPCI AAIIxI6Azg19vcku23PoYJaTKpZYRD757d8lJblMlvd4AYGCFiDDrKCvAMfPVwEdE6+T9L8x6ltT gauHXN6he74dr0JyWalTqUq+7Z8dI4AAAggg4GWBnLLLnPMiy8yR4BEBBBCIHYHhc6cGDZbpGR41 wbRPJ4+KnZPlTGJKgIBZTF1OTiZQoGWt+tKzRVuZumKRzF6zXO6/aJDUTKkUuFpYnndo0EQKmf9o CCCAAAIIIJBVwE0wzE1QLeueeQUBBBBAIFoFjp04Ll9M+SXH7g2fM1V2HtyX4zq8iUBBCBAwKwh1 jhlRgTv6DJBiZkJJHY550sxn9tCAG2xgq6hJ/w1nq5FPgbhw9pF9IYAAAgggUBACoQTC3ATWCuIc OCYCCCCAQOgCI+ZNl10H9+e4oQbVPp1EllmOSLxZIAIJj5tWIEfmoAhESKBkseJy8uRJmbB0npQp UUrOb9ZGtuzdKau2b5aKpctK2tH0sPRk7toVMmbxHLPvXbbQQAWz78SEhLDsm50ggAACCCDgZYHP TXbBrNXLXJ1CxvHjUjQxUdrUaehqfVZCAAEEEIhOgeMnT8iTX70vh48eOWsH1+7YIn1adZRSScXP ui4rIBApATLMIiXNcQpU4OquF0jlMuVtGfsDaYfkdjO3mZYx1qVxtdph69vmPTvlmxkT5M+fvSkD nntY/vTxqzJk6hhZu3OrnDL/0RBAAAEEEIg3gVCyyxwbsswcCR4RQAAB7wqMWjBTdhzY6+oEdN7p TyaOcLUuKyEQKQEyzCIlzXEKVCCxcIJUMJVXRi+cJUcyMqR3y3YmC0xs1tnAjudLQkJhkxm2O6x9 PHnqpGzbt0dmr10uP8yeLD/NnSbrdm6TDJNynJJc2g4TDesB2RkCCCCAAAJRKBBKdpnTfbLMHAke EUAAAW8KnDAjfJ76+n1JTU9zfQKaZHBBqw6SXLyE621YEYH8FCBglp+67DuqBGqbCpbz16+SycsX SrcmraRz4xYyZtEsmbNuhTx3w72y/3CqrN2xNd/6nJaRLqvNMNCJS+ebrLOxMmPVUjuev0hColQo XUYKFaJgQL7hs2MEEEAAgQIR0Oyyfwx9XzQAFmpbY4bnXNq+mxmeGd45R0PtB+sjgAACCIQu8ItJ VPh5/vSQNjxlMhr090a3Jq1D2o6VEcgvAQJm+SXLfqNOQCtY1q9SQ7QKy4bd26V/2y4mUFXOZJ3N lPSMo/LHAdfZxyWb14Xc98bVasm+Q6muh13q8MzdqftlwYbV8vO8afLtjImycttGSTP9KFOylOi8 azQEEEAAAQS8LpCb7DLnnMkycyR4RAABBLwloCNtnjTZZQePHA654zoip2eLdmbu6ZIhb8sGCIRb gIBZuEXZX1QLpJQqbbO6Ji1bIPUqV5fupgCABq2crLMLW3eU4sWSZM6aFa7P4/xm58jzN94nl3fs Lg2r1pQSRZNkn8lWO2KCX25bxvFjsmHXdpm6YpF8PX2cGSo6X7bu222reWr2WYIZUkpDAAEEEEDA SwJ5yS5zzpMsM0eCRwQQQMA7AmNNIbThc6fmqsOaWHAw7bD9nJarHbARAmEUIGAWRkx25Q2BZjXq yI8my2zRxjVmqEdXaVy9tnk+RTaarLO+bTpJ85p1pVr5CjJ95WI5qROdnaVddW4vGygrZgoI1K1U Vbqa4Z5XndvT/pCvVq6CzTrbffCA2dfJs+zp17f3m8IES02mm8659tW0sbJ40xrRYgUlTdWYsqbS Jw0BBBBAAIFoF8hLdplzbmSZORI8IoAAAt4Q0GGVTw39wH52yW2P15tEgvNNYkPZksm53QXbIRAW AQJmYWFkJ14SSCpaTIokJMi4JXPtxPuaIbYn9YBMXDZf6lSqJnUqVpH6JvuscfVaNvNMyyHn1B64 eLAZQpmUaRUd/lnO/IBvXrOeaNaaBtX069LFS9px+aGkJ+uEmVqQYNaaZfL9rEl2LgDNRtN+pZhC BsztkomeJwgggAACUSAQjuwy5zTIMnMkeEQAAQSiX0A/U+lnlry2/YcPSY/m5+R1N2yPQJ4ECJjl iY+NvSqgwbDxJmA2Y/VSk1XWUdrVb2LThhdtXC2XmAmGtapm9fIVpV29JiZotkCOHjsW9FTrVKwq 13XrE/Q9/xcTTYCuRkol6dSwmVxhqnJeaDLZaleoLPr6bhOsO2YqZ7pth4+my6ptm0z/58mQaWNk 9prldh9JRYpISimKB7h1ZD0EEEAAgfwTCEd2mdM7sswcCR4RQACB6BbQ4ZT/MNllOj1NXtvG3Tts obbyZkodGgIFJUDArKDkOW6BChQuVFh0uOSI+TNMdczD0seULy6amHg668xU42pVu4HtX4XSZe0Q Sx2eqXfLA5tmj7Wv3zTw5bM+T04qIVooQCe0HNyltwnMNbbZYkePZcjeEH7BaMrzzoP7bPVPnSfg +1kTbSXOI8eOSjnzy6WEyaajIYAAAgggEEmBcGaXOf0my8yR4BEBBBCIXoEpyxfJNzMmhK2D+w4d tJ+XwrZDdoRAiAIEzEIEY/XYEdCMr+VbN4oWAOjQoKkNjE00k+1PX7XYDKPs5BtmqRVaejRvK3PW Ls9yt+TmnhfbwFteVDR4V7lseWlbt7Fc0q6rDDAZblrNM6lIMVN586CkmyCa26aZcFpZZsryhfL1 tHE2O277/j2ixzhdPKCw212xHgIIIIAAArkSCGd2mdMBsswcCR4RQACB6BTQ7LKnv/lI9prPL+Fq m3bvlHMbt7CJBeHaJ/tBIBQBAmahaLFuzAloltew2ZNl9Y7Ncknbrnay/9NZZ6lyXtM2vvMtYeYo 69WivZ2If8eBvfZ1neRf5y8LdwVLnWOtXuVq5vitTfZZLxvIq2ICajqXmc615qYQgdNxTYdevGmt jFowU4ZOH2/7n3okTUoVL2HnU3PW4xEBBBBAAIFwCORHdpnTL7LMHAkeEUAAgegTmL5yiS1WFu6e 7T64X3q3bB/u3bI/BFwJEDBzxcRKsSqg2WOHjh4RzSyrWi7FVGM5R1aa+cE066y9mdesUplyvlPX yfV7mSGUG0w1TR1Tr8MotapmfjYtHpBihla2rFVf+rXpLANN9c2mNWpLclJJOWgCX4fS01wf/viJ E7J5z047b9u3MyfIKFOBU+/anDh1wmSflTWFEBJd74sVEUAAAQQQCCaQH9llznHIMnMkeEQAAQSi T+DZbz828yrvD3vHNu/dJR3NPNAVzecVGgKRFihk5kA6FemDcjwEokngsAmY3fjKU5JQqJB8eP/f ZK/J4rrljadtpczXb/ujFDKv+7eTp07KS8OHSC1TTXNgpx7+b0X8a/0FMnv1MltBc966lSEN3/Tv rBYfaGGqeHYw87G1N8NTG1SpbkJ1mc/bf32+RgABBBBAIJjA0OnjzI2o9GBvZXrtw/E/ZXquT27q cXGW1wJfKGUyvgd27hn4Ms8RQAABBApQYNaaZfLwJ6/nWw80keFfN9ybb/tnxwhkJ0DALDsZXo8r AZ0w/9/DPpdrTcXL23tfJm+O/k6GTB0jDw243mZ2BcPQucWSzLDMaGlaaXPxxrU2eDbLBNHW7thq ZhLIXTy8XMlkW8xA53ZrbzLpyprnNAQQQAABBMIl0OuJ+7PsauzfX8nyGi8ggAACCES/gH6WWr19 s000KGySDQqZ+ZNPPxbK9PjppFFZTkbnim5o5m/WJAX/bcwLmZ73NaNtipkRPzQEIilAwCyS2hwr agU0a+yut5+XDbu2y/v3PiplS5QyWWdP2h/cH933mOgcZl5re8yEm7PN3R4NnmnBggNph3N1CvrL S3+JafBMM9Ca1awriYUTcrUvNkIAAQQQQEAFCJjxfYAAAgjEn8Adbz1nA2v+Z/7WnQ/bzxr+r/E1 AtEiwBxm0XIl6EeBCmhQqE6lqvLT3Gmy00zqr1Uyk83E+GMWzbaT7Ler16RA+5ebg5cwxQMamEBX 92Zt5OouvaVzw+Z2Tjady2zPoQMSymhsDb4t2rhGtCDC0BnjZfmWDWb+tCNS2swBl5xUIjfdYxsE EEAAgTgW+HDCz1nO3s2QzCwb8QICCCCAgGcENBNNP1f4t0vadaUKpj8IX0eVALN8R9XloDMFKaAT 6/dofo6MWzLXZGStkItM2u8PsybZ6pL923aR6uUrFmT38nRsDQg2qV7bLjd272eDXXPXrbDZZzrn wM4D+1zvP83MTTN5+UK76EY1Uyr5ss9a12kYVcNUXZ8UKyKAAAIIIIAAAggggEC+CuhQzcB2yoz0 oSEQrQIEzKL1ytCvAhG4s8/lMnXFInl95FB5+85H5N5+A+V3778kb4z6Vv5xzR0F0qf8OGippOLS vWkbu+j+tfKnUzxgwfrVcvT4MdeH3WQqb+ryzYwJttJmq9r1fcUD6pqsPYoHuKZkRQQQQAABBBBA AAEEYlZA5ygLbCepQRhIwvMoEiBgFkUXg64UvEClMuXkmq4XiA4VGTZ7slzesbv0bNFWxi6eY+YD W24mwvfe0Ew3qrUrVBFdtPKYBssWbVhjiwfMXL3UzuvmZh+6jhYe0Ow8XcQUTqiQXNaa6fxn7Uzx gNLFS7rdFeshgAACCCCAAAIIIIBADAnoqJfAFso0MYHb8hyB/BYgYJbfwuzfcwIaMPt53nR5f/xw 6dWyndzRZ4BMMVlnr5mss3fv+rMkFM6aSuy5k8yhw1p9RgODutx94RWy8+A+O3RTCwjMXbtSUtPT ctg681u7U/ebec+m26WwScFuXK2Wb/hm0xq1TeWb2LbMrMEzBBBAAAEEEEAAAQTiV4AMs/i99l49 cyb99+qVo9/5JpCYkCDlk0vLLwtnSXpGhvRq0U5OnjwpE5bOkzKmembTGnXy7djRuOOSxYpLo6o1 zfxubWWwKR7QsUEzqVi6rGQcPy57zaSdp8x/bpqupwG0BRtWm4DkNPl2xkRZuW2TpGWkS5mSpUSP Q0MAAQQQiA8BJv2Pj+vMWSKAAAL+AlpALHDu5H5m3ujKZcr7r8bXCESNABlmUXMp6Eg0CegwzO/N hP/D5kyWS9t3k6vPZJ19OP4n6W2yzjRwFo9Ns+ua16xrl5t7XCwHjxy2wy9nrV5mh3DuST3gmkUz 1TQIqYu2OhWr+rLPdB60oibTjYYAAggggAACCCCAAAKxIUCGWWxcx3g6CzLM4ulqc66uBXSi+gZV qpuA2RTZtHunXHzOuWY+rjIy2mSdHTFZZ50bNXe9r1hesViRoqIT+3dt0kquOrendG/WRqqVq2Cz znYfPCAnQ6h6sz/tkCzdvM4afzVtrCzetEYOmNdKmgIFZeM0QBnL3zucGwIIxLcAGWbxff05ewQQ iE+BUQtmyvb9ezOdfN/WnaRK2ZRMr/EEgWgRIMMsWq4E/Yg6gYZmGOJFJkX4JzN8cPLyhXJ+83Ok lck6+9EE0QZ0OM8GiqKu0wXYIQ0y1qtUzS46dDP9WIbMX7/Kzn82y8x/ttlU0nTbtPDATJO1pouM FNFiDB3qN7UZaG3rNhat8klDAAEEEEAAAQQQQAAB7wgw6b93rhU9PS1AwIzvBARyELi196VmyOB8 eXPUt3JO3YamkmRlWWjm4JpohhFqZhUte4Ekk33WuWFzu+ha2/bvkdlnhm7OXbdS0o6mZ79xwDs6 18HwuVPtosNCm1avY+dS69CgiZlfrZYE++UbsAueIoAAAggggAACCCCAQAEKMCSzAPE5dK4ECJjl io2N4kWgXMlkubF7X3lz9Hdy9YuPmQnqj9pTr2qGHdJCE6hqUq11Pjhdjp88IUs3rbPznun8Z6u2 bxa3JaVPmAIMizettct7434088mVlHb1mtjss/YmCy2lVOnQOsbaCCCAAAIIIIAAAgggkO8CwW5y u/0MkO+d4wAIBBEgYBYEhZcQ8BcY2Lmn7Dy4T76ZMcG+3LVxKzPxf3v/Vfg6RIHEwgnSqnYDu9za 61LZfzhVZq9dYYdvzjbDN/eZ527bgbTDMnbxHLvYYaGVq/mKB7SsVV+06ikNAQQQQAABBBBAAAEE ClYgeIbZyYLtFEdHIAcBAmY54PAWAiqgQwDv6zdIruh4vp2XS+fpCnZ3BK3cC5Q1mXwXmCCkLqfM f6u3bfZlny0xmWiakeam6bZrdmyxyxdTfpHiRYtJmzoN7fxn7Rs0lRrlK7rZDesggAACCCCAAAII IIBAmAUKFSqcZY9kmGUh4YUoEiBgFkUXg65Et0B1gi0RuUCaJaYFF3S5rtuFdhjsvHWafbbcBtG2 7dvtuh9HzBDaaSsX20U30qG0HU3gTAsItKnbSEqYgBoNAQQQQAABBBBAAAEE8l8geIbZqfw/MEdA IJcCBMxyCcdmCCAQGQENaukwWF20bd67y1c8YJ4pHqDVON02DbZ9byqd6qJDNVvUrOfLPmtQpboJ 1RVyuyvWQwABBBBAAAEEEEAAgRAEgo3SIcMsBEBWjbgAAbOIk3NABBDIi4AOq6zRsaJc3rG7HDtx XBZvXOsbvrl2x1Y7pNPN/o+fOCHz16+yyztjfhAt8KBFAzqYDLT29RqLDhOlIYAAAggggAACCCCA QHgEyDALjyN7iZwAAbPIWXMkBBAIs0CRhEQ5xwyt1OWOCwbInkMHfYUD5qxdLloQwG3TQgOjF860 i979alilhq94QLOadUULFdAQQAABBBBAAAEEEEAgdwJkmOXOja0KToCAWcHZc2QEEHvKFXoAAEAA SURBVAizQEqp0tKvTSe7aHr3iq0bfdlny7aslxMn3VXh0W1Xbttkl08njZISxZKkrQnKdWjQzA7h rFK2fJh7zu4QQAABBBBAAAEEEIhtgWDTn2jRLhoC0SpAwCxarwz9QgCBPAnoHawm1Wvb5cbu/eRQ +hGZa4sHLLNBtJ0H9rnef9rRdJm8fKFddKOaKZV82WetTRXOpCJFXe+LFRFAAAEEEEAAAQQQiEcB Mszi8ap7+5wJmHn7+tF7BBBwKVAqqbh0b9rGLrrJht3bfcUDFqxfLUePH3O5J5FNe3ba5ZsZE0SH hbaqXd9XPKBupaoUD3AtyYoIIIAAAggggAAC8SLAHGbxcqVj5zwJmMXOteRMEEAgBIHaFaqILgM7 97TBskUb1sjM1Utt9tmGXdtd70kLD8xZu8IuMvo7qZBc1hQPaHKmeEATSS5ewvW+WBEBBBBAAAEE EEAAgVgVIMMsVq9s7J4XAbPYvbacGQIIuBQolljEBrk00KVt58F9vuIBc9eulNT0NJd7Etmdul9G zJ9ul8KFCkvjarVs8Kyjqb6pQ0T1NRoCCCCAAAIIIIAAAvEmQIZZvF1x758vATPvX0POAAEEwixQ qXQ56d+2i120UMDyLRt8xQO0kMDJU+6KB+h6WmxAl48m/CzJSSWkbb3Gp7PPTHBOj0NDAAEEEEAA AQQQQCAeBAoFuXF8yuXf1fHgwzlGnwABs+i7JvQIAQSiSCChcGFpXrOuXW7ucbEcPHLYDr+ctfp0 8YA9qQdc91Yz1SYsnWcX3ahOxaq+4gE6D1pRk+lGQwABBBBAAAEEEEAgFgXIMIvFqxrb50TALLav L2cXYYHjJ0/Ikk3r5NSpU9KyVn3RYAsttgRKFy8pPZu3tYuWwV63c5stHjDTBNAWbVwjOqeZ27Z+ 1zbR5atpY0WHhbau08BXPEDnV6MhgAACCCCAAAIIIBArAsxhFitXMn7Og4BZ/FxrzjSfBXTo3t++ eEemr1pij6RZSc9df4+UKJaUz0dm9wUlUMjUw6xXqZpdBnfpLenHMmT++lV2/rNZa5bJZlNN023T Kp0adNNFRopULlPeVzygbd3GolU+aQgggAACCCCAAAIIeFWADDOvXrn47TcBs/i99px5mAUmLZvv C5ZVLF3WZpq9O2aY/Pbiq8J8JHYXrQJJRYpK54bN7aJ93LZ/j80+0+DZ3HUrJe1ouuuu7ziwV4bP nWoXzVRsVqOuzT7r0KCJNKpaS4LdoXO9c1ZEAAEEEEAAAQQQQCDCAsH+ftWROTQEolWAgFm0Xhn6 5TmBA2mHbZ91svjf9b9afv/hyzJszmS5tH03qVupqufOhw7nXaBq2RR7/fV7QIfrLjXDdTV4pvOf rdq+2Q7ddXMUzV7U4Z66vDfuRylToqS0q9fkTPGAppJSqrSb3bAOAggggAACCCCAAAIFJkDArMDo OXAuBQiY5RKOzRAIFOjerI28M+YHOyRPqyPe12+g3PXO8/LaiKHywm/uC1yd53EmkFg4QVrVbmCX W3tdKvsPp8rstSts8Gy2CaLtM8/dNg3Ojl08xy52WGjlar7iATp3XmJCgttdsR4CCCCAAAIIIIAA AhERIGAWEWYOEkYBAmZhxGRX8S1QrmSy3HBeX3n7l+9l6PTxck3XC+SiNp3lp3nTZPLyhdKtSav4 BuLsMwmUNd8vF7RsbxctHrB622Zf9pkWjtCMNDdNt12zY4tdvpjyixQvWkza1GnoKx5Qo3xFN7th HQQQQAABBBBAAAEE8lWAOczylZed54MAAbN8QGWX8SswqHNPO+fUJxNHyIWtO8qtvS+VCUvnyxuj vpVODZtJkQT+ycXvd0f2Z65ZYg2r1rTLdd0ulLSMozJvnWafLbdBtG37dme/ccA7R8y201Yutou+ Va1cBV/2WZu6jaSECajREEAAAQQQQAABBBCItAAZZpEW53h5FUh43LS87oTtEUDgtEBhMzl71XIp MnLBDDl4JM1mDyWa18YvmSvFixQTHS5HQ+BsAhpYrVWhsnRu1FwGduohvVt1kJoplUS/v3Yf3O86 +0yPk5qeJiu2brTDN4dMG2MCcStl76GDkmQCZ+VLJZtQXaGzdYf3EUAAgbALfDjh5yz7vKnHxVle 4wUEEEAAgdgR0Ll8l23ZkOmEOjRoJk1r1Mn0Gk8QiBYB0l2i5UrQj5gROLdRC2lfv4kNmg3o0E2u NAGPH021w08njbRZZynJZWLmXDmRyAjosMoaHSvK5R27y7ETx2XxxrU282zm6qWybsc2MyjTXXWh 4ydO2Dn25q9fZefb02HE7es3PV08oF5j0WGiNAQQQAABBBBAAAEE8kOgUKHCWXZ7ysz9TEMgWgXI MIvWK0O/PC3QqGotWyFzzY6t0r9dFzssbsT8GXIg7ZCZy6y1p8+NzhesQMKZLEatknlZ+/PkkvZd TRXWalKsSBGbOXb02DHXHUw/liFrzfxnk5YtkCHTxsq0FYtkx4G9ogUKUkqXkcJB/qhxvXNWRAAB BHIQIMMsBxzeQgABBGJUYM7a5bJ087pMZ6eJBs1r1s30Gk8QiBYBMsyi5UrQj5gSqF2xigzocJ58 M2OCjFk0xw7N7NigqYxeMMu+3rR6nZg6X06m4ARSSpWWfm062eXUqVN2+KWmu89arSnv6+XESXd3 7XTblds22eXTSaOkRLEkaVu3sW/+syplyxfcSXJkBBBAAAEEEEAAAc8LMIeZ5y9h3J0AAbO4u+Sc cKQEdC6WMYtmyzumaqZWyLyn70C5be0z8tqIofLKrb9n7qhIXYg4Oo7+EdKkem273Ni9nxxKPyJz bfEAE0AzQbSdB/a51kg7mm6quy6wi26kc6h1MEHfDmYIp1bhLFakqOt9sSICCCCAAAIIIIAAAlTJ 5HvAawIEzLx2xeivZwSSk0rI//XsL/8dPkQ+mzxKbul5iQwwc1ANnT5Oflk4S/q06uiZc6Gj3hQo lVRcujdtYxc9gw27t8tsk3mmwbMF61fL0ePuh29u2rNTdNGsSS1K0Kp2fRs8a2+CaHUrVSUA7M1v EXqNAAIIIIAAAghETCBYsSkd5UBDIFoFCJhF65WhXzEhcEm7rvLD7Mny1dSxcvE5XeSm8y+SMSZY 9vYvP9i5zIqbSoU0BCIlULtCFdFlYOeeNli2cMNqO3RTA2gbdm133Q0tPDBn7Qq7yOjvpEJyWVvo QjPQ2pu51ZKLl3C9L1ZEAAEEEEAAAQQQiA+BoEMyXRavig8hzjLaBJj0P9quCP2JKQH9pVDLBCh+ mjdNdqfut1UyS5isn7GL54h5y84RFVMnzMl4RkAn9q9uqm9qkOvyDt3lorbnis69VzQxUfamHpSM ELLP0jLSZfX2zTJx6XwZYoLDM1Ytld0H99t9aVXYYH8ceQaKjiKAQL4IMOl/vrCyUwQQQCCqBbRS +8KNazL1sU3dRmbkQoNMr/EEgWgRIMMsWq4E/YhZAZ3vSYfFTTDBBP0l0d8EJoZp1tm0cSbr7Fyp Wq5CzJ47J+YdgUqly5nvzS520UIBy7dssEM3tXjAiq0b5aTLkt+6nhYb0EU/EOvQ5Lb1ThcP0CpI ehwaAggggAACCCCAQPwJBLuJypDM+Ps+8NIZEzDz0tWir54VuPPCy2X6qiV2wv+37nxI7u03UB78 4CV50wxne2LwbZ49LzoemwIJhQvb8t5a4vtmU7zi4JHDdvilBs90+Oae1AOuTzw1Pc0Ei+fZRTeq U7Gqr3iAzoNWNLGI632xIgIIIIAAAggggIB3BZj037vXLl57TsAsXq885x1RgaplU2Twub3kk0kj ZficqXJp+25yfrNzbBBh3rqVco5JRaYhEK0CpYuXlJ7N29rllJlnYt2OrSZwttzOf7bIpNXrnGZu 2/pd20SXr6aNlWImWNa6TgNf8QCdX42GAAIIIIAAAgggEJsCZJjF5nWN5bMiYBbLV5dziyqBa7v1 kRHzZ8h7436UHi3ayp19TNbZysU26+ztux6WwoUKR1V/6QwCwQS0ulG9ytXtcnWX3pJ+LMMONXay zzabSppum1bpnGmy1nSRkSKVy5S3xQM6NmhmhnE2kpLFirvdFeshgAACCCCAAAIIRLlAsM87bqf9 iPJTo3sxKkDALEYvLKcVfQJaEfP2Cy6TZ779SD4a/7MdljnYBBw+njjCzGk2RQZ0OC/6Ok2PEDiL QFKRotK5YXO76Krb9u+R2WeGbs412ZNpR9PPsodf395xYK8MnzvVLjostFmNujb7rEODJtKoai2K B/xKxVcIIIAAAggggIDnBMgw89wli/sOEzCL+28BACIpcEGr9vL9rEl2uaR9VzmddTZd3h83XHq1 aCfJxUtEsjscC4GwC+jwYx1yrMvxkydk6aZ1vuIBq0wlTbcTu2rhAR3uqYtmZZYpUVLa1Wti5z9r X7+ppJQqHfa+s0MEEEAAAQQQQACB/BNgDrP8s2XP+SOQ8Lhp+bNr9ooAAoECp4ezVZMfTRbNlj27 5KJzOkt588H/l0Wz5OixY9KpYbPATXiOgGcFNO2+ctny0rZuY7mkXVcZYIJoOpyzeNGisu9Qqh3O 6fbk9N/Hup3bZMryhfK1qTA7efkC2W6y2fQYFUuXlcImI42GAALeEdAquoHtJlNkhIYAAgggELsC izetlblrV2Q6wRY169mbople5AkCUSJAhlmUXAi6ET8CTarXlgtbdZSRC2bINDOHWa+W7eS7WRPl h9mTTFZOV1tFMH40ONN4EihbMln6tOpgFy0esHrbZl/22RKTiaYZaW6abrtmxxa7fDHlFxOAKyZt 6jQ8M3yzqVQvX9HNblgHAQQQQAABBBBAIIICweYwczv6IILd5FAI+AQImPko+AKByAncZuYym7Rs vrwx8hv7If++foPknndfMAUAvpHnb7w3ch3hSAgUkIBmWzasWtMu13W7UNIyjsq8dStM5U1TfXPN Mtm2b7frnh0x22rwWRdt1cpVsEM3O5ihm21MBdoSJqBGQwABBBBAAAEEEChYAeYwK1h/jh66AAGz 0M3YAoE8C+j8S9ef11feGfODfDNjvOjk/31bdzJVNKfL1BWLpEvjlnk+BjtAwEsCGtTq2riVXbTf m/fu8hUPmGeKB2g1Trdtqwm2OXMFJiYkiKb6a/CsfYOm0qBKdROqK+R2V6yHAAIIIIAAAgggECYB 5jALEyS7iZgAAbOIUXMgBDILDDq3p60G+JGpktmndUe5rfelMlGzzkZ9a7NjiiTwzzOzGM/iSaCG GVZZo2NFubxjdzl24rgs3rhWZq5earPP1u3YZgZlnnLFcfzECZm/fpVdNEBdzgwL1aIBHUzwrH39 JlK2RClX+2ElBBBAAAEEEEAAgbwJkGGWNz+2jrwAk/5H3pwjImAFEswk5Toh+qgFMyX1yGG5oGUH SSicIOOWzLVzMrWsVR8pBBAwAvpvpWq5FBvguqz9eaaAQBepW6maFCtSRPYeOmgLZriF0ky1tWb+ s0nLFsiQaWNlmsno3HFgrySaf3sppcvYIgJu98V6CCCQewEm/c+9HVsigAACXhVYsXWDvQHq33+d 35nCZ/4ifB1NAqSwRNPVoC9xJ6BD0NrVa2yGYs6QAR26y8BOPWT4nCny6cSRdoimVtCkIYBAZoGU 5DLSr00nu+hEsSu2bvQVD1i2Zb2cOHky8wbZPNNtV27bZJdPJ42SEsWSbEVPzT7TIZxVTECbhgAC CCCAAAIIIBAeATLMwuPIXiInQIZZ5Kw5EgJBBRpVqyk/miDZuh1b5eJ255pMmgq2guZBk3XWtUmr oNvwIgIInBbQP7wqlC4rrWs3kIvOOVeuNEHnxtVrSclixeVA2iE5fDTdNZUO/dy4e4dMN8UDhpq5 BccuniNbzFxqGliraI6h86HREEAgPAJkmIXHkb0ggAACXhJYuW2jTF+1JFOXG1WrJZ0bNc/0Gk8Q iBYBMsyi5UrQj7gVqFOxqlzavpt8N3OijFs8V3q1aGeHno00QzUHdDhPGlerHbc2nDgCoQqUSiou 3Zu2sYtuu2H3dls8YObqZbJww2o5evyY611u2rNTdPlmxgTROQVb1a7vKx5Qt1JVige4lmRFBBBA AAEEEEBApFChwlkYTp1yNzIgy4a8gEAEBAqZO+fuZk6OQGc4BALxKpB6JE1ufOVJSSpSVD6876+y ff9eue3NZ2yw7JVbH+SDebx+Y3DeYRXQYJkGzWaZ4NmsNctkw67tud5/heSyNrBtiwfUayLJxUvk el9sGLrAG0M+kde//Dj0DdkiagQqtmqUpS+7Fq7M8hoveEPg7sE3yD1X3+iNztJLBBAoMIHhc6fK v4d9nun4/dt2kT9cem2m13iCQLQIMCQzWq4E/YhrAZ28PKloUTsETCf+79H8HNEhmVo1s0ZKJalX uVpc+3DyCIRDQCf2r26qb2qQ63IzZ+BFbc+V2hWrSNHERNmbelAyQsg+S8tIl9XbN8vEpfNlyNSx dgLbXQf3233pHGvB5ugIxzmwj9MCt/ztT1B4XKBk5ZQsZ5C2Y0+W13jBGwKzlywkYOaNS0UvEShQ gVVm7thpZuoL/9aoak3p0ril/0t8jUDUCDAkM2ouBR2Jd4FL23WTYbMny5dTfjFzMXWWm3pcLGMW zZb3x/5ohmm2pXpfvH+DcP5hF6hUupzoXU1dtFDA8i0bfMUDtJDASZdDBHS9pZvX20XnZUpOKiFt TTEPp3iAzn9Gyx+B79/+KH92zF7zXeDpr963FWudA9WrXF3effuvzlMePSQw4I7feKi3dBUBBApS oLCZezawuf17K3A7niMQCQECZpFQ5hgIuBBIKFxY7u03UP740avy6s9DzeT/KXI4Pd1MXH5Y0jMy bAU/F7thFQQQyIWA/vtrXrOuXW42wWrN8JyzdoVv+Oae1AOu95qaniYTls6zi26k8xQ6wTOdB61o YhHX+2JFBGJV4IYeF8kH5obQRjM0upbJ9NTnNAQQQACB2BYIPocZM0TF9lX39tkRMPP29aP3MSbQ tm5j6dSwuUxZsdB3Zvq8RLEk33O+QACB/BcoXbyk9Gze1i6n5JStYjtrzXIbQFu0cY1oRU23bf2u baLLV9PGSjEzT2Frv+IBtStUcbsb1kMgpgQ0SPbY1bfJIROcLmX+vWXNOYip0+VkEEAAAQSMQPAM MwJmfHNErwABs+i9NvQsTgUevfImGTF/uowyVTK1Et89fa+MUwlOG4HoEChkPsrrcDFdru7SW9KP Zcj89at82WebTSVNt+2o2VYrduoiI0Uqlynvyz5rW6+RlCxW3O2uWA8BzwtokCzZBMtoCCCAAALx IRBsjldqEMbHtffqWRIw8+qVo98xK1AqqbgM6tzTLjF7kpwYAh4W0Gq2nU3mpy7atu3fI7PPVN6c u26lpB1Nd312Ow7slR/nTLGLDgttVqOudKjf1ATRmkijqrUoHuBakhURQAABBBBAINoFyDCL9itE /wIFCJgFivAcAQQQQACBEASqlk2RS9t3s8vxkydk6aZ1vuIBq0wlTbd3TrXwgA731OW9cT9KmRIl pV29JjYDrb0JoqWUKh1Cr1gVAQQQQAABBBCILgEyzKLretCbswsQMDu7EWsggAACCCDgSiCxcIK0 qt3ALrf2ulT2H041wbPlMnvNMrMsl33mudumBT/GLp5jl9PDQqv5hm+2rFVfEhMS3O6K9RBAAAEE EEAAgQIXIMOswC8BHQhRgIBZiGCsjgACCCCAgFuBsiWTpU+rDnbR4gGrt232ZZ8tMZlompHmpum2 a3ZsscsXU36R4kWLSZs6DX0BtOrlK7rZDesggAACCCCAAAIFJhC8SubJAusPB0bgbAIEzM4mxPsI IIAAAgiEQUCzxBpWrWmX67pdKGkZR2XeuhWmeICpvmky0Lbt2+36KEfMttNWLraLblStXAVf8KxN 3UZSwgTUaAgggAACCCCAQDQJkGEWTVeDvrgRIGDmRol1EEAAAQQQCLOABrW6Nm5lF9315r27fMUD 5pniAVqN023baoJt38+aZBcdqtmiZj1bPKB9g6bSoEp1E6rTeoQ0BBBAAAEEEECg4AQKBflz5NSp gusPR0bgbAIEzM4mxPsIIIAAAghEQKCGGVZZo2NFubxjdzl24rid/H/Wmeqb63ZsM4My3f1FefzE CZm/fpVd3hnzg5Qzw0K1aEAHEzxrX7+JlC1RKgJnwyEQQAABBBBAAIHMAkz6n9mDZ9EvQMAs+q8R PUQAAQQQiDOBIgmJ0rZuY7vc2edy2ZN6IFPxgINHDrsW0UIDoxfOtIv+odqwSg3p2KCZDaA1rVFH tFABDQEEEEAAAQQQyG+BwoUKZznEyVPMYZYFhReiRoCAWdRcCjqCAAIIIIBAcIGU5DLSr00nu5wy YxdWbN3oKx6wbMt6OXHS3R+buu3KbZvs8smkkVKiWJINymn2WQeThValbPngHeBVBBBAAAEEEEAg jwJkmOURkM0jLkDALOLkHBABBBBAAIHcC+gfm02q17bLjd37yaH0IzLXFg9YZoNoOw/sc73ztKPp Mnn5ArvoRjVTKv1aPMBU4SxWpKjrfbEiAggggAACCCCQkwCT/uekw3vRKEDALBqvCn1CAAEEEEDA pUCppOLSvWkbu+gmG3Zt92WfLdywWo4eP+ZyTyKb9uy0yzczJkjRxCLSstavxQPqVqpK8QDXkqyI AAIIIIAAAoECZJgFivA82gUImEX7FaJ/CCCAAAIIhCBQu2IV0WVQ5542WKZBM6d4gAbT3LYME2ib s3aFXWT0d1IhuawtGtDRDN9sV6+JJBcv4XZXrIcAAggggAACCAgZZnwTeE2AgJnXrhj9ReCMgE6Q +dW0cbLAVMPT+YcuaNVBkpP4AMs3CAII/CpQzGSJ6dxkumjbeXCfDZ7NXrPMBsJ0OKfbtjt1v4yY P90uOmlvk+q1Tu/b/PzRIaLBJvJ1u2/WQwABBBD4f/bOAk6q6ovjh9xedunuTuku6QYJaTCQVJC/ gkooIoqFgiCKSCmIdKeUgnSXdHftssXCwv7v7+IbZ2dm2V22Jn6HzzDv3Xffved+77DMnneCBEjA +QnQw8z599jZVkiDmbPtKNfjMgTmbF0v0zau0OvdceqorDu4W77v9T+GTLnMJ4ALJYG4E8js6y/N ylXTLxQK+OfKBVP4JgoJxLZSFfodu3xev2ZuWa2N9eXyFzHlP8vk6xd35XgHCZAACZAACZCAUxOw 9XAttt89nBoMF2e3BGgws9utoWIk8GwCy/ds1R1K5S4g6b19Zcux/bLpyD55sWT5Z9/IqyRAAiSg CKRKmVJK5MqnXz3rNJX7YSGy58w/6oXiAf/InaDAWHMKehCqfwbh5xAkb6ZsJuNZ6TwFdD60WA+W yB2vXLosZ0+flrRp00rl6tVinG3H1m3y6NEjKVCokGTPmSPG/rHtEBoSInt37ZZUqVJJtVo1Tbeh kumGtevk+OEjklJda9S8mZr/ody+eUvyFSggOXPnMvXlAQmQAAmQAAk4OgH8v0chAXslQIOZve4M 9SKBGAhk9csg94KDZNhLPcQjrZvsP3dSpqxfKtWLlGJluxjY8TIJkIA1AV8PL21wh9E9Uv05d+Oq Npwh/9nhi2fk0eMI65uiaTl/65rgNX/7Rv3zqIwymunQ0ILFJXfGLNHclTTNp06ckNc6dtGTrd+x TfIXLBDtxKf+OSFdWrfV12fMn5ugBrNzZ85Kz/YdtcHs5I0rJh3e7f+WLJ4333SeNVs2WbtipTai DX5/qPT/39umazwgARIgARIgAUciYCuHGc1ljrSDrqdrStdbMldMAs5BoHvtxhLx5LFM+WOpTr7d s25TnZ/ot21/OMcCuQoSIIFkI5BCBXfnz5JDXq5WT77qPkCWDv1cPu3cR9pUqi05M2SOk17hyjtq lzK6TVq7SHpO+kQ6ffuhjFsxV/46flBCwmOfQy1Okz6jc826dSRr9my6x+Lf5z2jp8iif6/Ds6x6 7VrP7BvXiylSPL3DPJ/LuTNnTMayFxs2kHdHDJOSZUqLqY9xU1wnY38SIAESIAESsAMCpv/PzHSh h5kZDB7aHQF6mNndllAhEogdAVSpmz/4Ewl7GC7hKlyodcVaUrVwSXkUESERjx9LahXKQyEBEiCB hCDgniatVClUQr8w3rWAO7JHGcF2q/DNfcq7NTT8QaynuRF4V1bs3aZfCAstnjPfv95nRaVwttz/ GYdiPWLcOiIEsm2njjLp629kyfwFMviD92zO+UTleFu6YJEevH2XzpJS6ZqQUqxkSTlw9mSUcc+c Oq2n8PDwkO9nTJM0adPo8/FTf5RHDx+Ku7tHQqrAsUiABEiABEggSQkwh1mS4uZkCUCABrMEgMgh SCC5CKTz8lYGs4cSEBIkWfzSSzpPb7l9P0ACVS6iDCqvGYUESIAEEoNANhUS3qJCDf2Cp+uxS+e0 FxkMaKevX5bYPi1G4QGEe+I1bdMK9TPMS/AwAJV/K6jKnon1c6x9507y/bhv5erlK4IcZVVr1rDC 9Peff8mNa9e0QaudMrBZStD9+/LPseNy8/oNyV+ogBQsVNhk4DL63rt7V0JDQsXP3088vbzk6KHD cv7sWald70Xx9PSU+4H39fhe3t5y/eo1uXjuvL41a/bscvPGDT1e5ixZJCw0VI8Do51hRDPmgGHv 4vnzckLpgnGKFC8mmTJH9QJ8rB6kXL92Xc+VLUd2CbgXILv+/lv3K1uxgjEU30mABEiABEggUQnQ wyxR8XLwRCBAg1kiQOWQJJBUBFKnTKXDMYOUgSzkQZh4Ke8Dd5XPLEx5e4SrY7fUT70TkkofzkMC JOB6BPBzqHSegvr1er0W2oCPogEoHoAiAveUQT+2EhgaIhuP7NWvp2Gh2U3FA1DgJKE8Z3Plya2N ZDCKIezSlsFs0dyn4Zo16tSOkrvs0cNHMu6zsTJ10mSBscoQGMVGfTFWmrdpbTTJ0DcH6dxjr/Xr owxU2+XwgYP62rKN6/V7yxcbmHKY1a9cTcLCnoaoIjSzVtkKOsH/ln27TeNY5jDDeIP79NdFDEyT qoMGTRrLmG++kgwZM+pmGPaMuT77dpy8P2iwPFaeyPUaNZQps2eZ38pjEiABEiABEkg0ArZymD1h 0v9E482B40+ABrP4M+QIJJCsBHw8PFU4VJjgF00PN3fxU15m1+F1pgoCwOuMQgIkQAJJScDPy0ca lK6oXygecPraZR26ieIBR5UnGjzSYiO494xKho/XXJWbEcVNXshbSBvQUqlQxcfKcBUf6dC1s8Bg tmb5Sm3ogseXISHBwbJu5Sp9inBMcxnUu6+6Z4VuqlS1ipQpX05WL1suly9ekoG9+mhPMIxtLj9/ /4M+hedXOr904ubuLuEPooaxtmrfVk4c/0f2794jPr6+2piVMVMm82GiHB87fFjaNW4mEcp7zD+9 v7R4qY1cU15qm9atl/Wr1+ix1v79p64GatwII9l7A9/WIaiFixWVLKqgAIUESIAESIAEkooAPcyS ijTnSSgCNJglFEmOQwLJRABPanyVkexe8H25r4xmfipM00flvwkKC9UJtb3cmPMmmbaG05KAyxOA l1ihbLn0q3ONhhKqci7uP3dCdp/+RxvRrt27HWtGyNe4/eQR/UpfNJ82mC3esUmaV6gpaVLH/etM o+bNdKgkwhNRhbJNh/YmXWBEg7eXf4b02lvLuLB18xZtLENo5KyF/3mmDf1whPb0WrZwkXw5eow0 adlcG72M+1KnSSPjJk+Spq1amPKlITzTXMaM+0rlTFuoDWY5c+eSrydPNL9sdfzRe8O0sQxFDH6a /YspVPP0iZPSpGYdHaYJQ13fQW9Fubdilcry/czpeu1RLvCEBEiABEiABBKZAD3MEhkwh09wAgmb wTbB1eOAJEACsSHgpTzL0qrwy2DlafbocYQymHkJkmkHhoQI3ZxjQ5B9SIAEkoKAp/ISq16ktAxq 1kFmv/WhzHpzpLzVpL0uJoDCAnEReJmt3LNNxquKmyh0EldJmzattGrXVt+2+Pf5UW43qmPCiGae M2zF4iW6H0IZzcM48cS8z8A39bW7d+7I7h07o4z3Wt/e0qx1S5OxLMrF5zi5duWq7N25S9855MPh UXQsWKSwNGzWVF8zPOGMKWDomzp3No1lBhC+kwAJkAAJJCkBepglKW5OlgAE4v5INgEm5RAkQAIJ TwCeZTcD7ykjWbBk9PX7z+tM5TdDmCaFBEiABOyNQM70mSRnpUzSulItbexH8n+EbqJ4wLkb11RQ ZmSMKv9z+bwcv3xOSqk8anGVDl27yMyffpbtf23VCf4Ronjl0mXZue1vPVQHi3DMc2fO6vZDKndY t5f+80iznPf8v/2Mdi+V8D8hBTnODPl0xEdWhrjLFy/qy+fPnjO66Xf8omIeehrlIk9IIB4EUrmn 1dVzURCEQgIkQALREbDtYfZfPtDo7mM7CSQXARrMkos85yWBBCYADzNP5WkWqhL+P1A5zOB1hkIA wSgGoI7TpOI/9wRGzuFIgAQSkAB+RpXLV0S/ejdoLXeCApXh7L/iAfeV8T86Se+dLrpLz2wvWqK4 lHqhjE7Gv2T+Qun91gBZMn+BrvJZtkJ5KVS0SJT7URETguqZeEUn159xLbp74tKOCpqGwNgXnQQH BQnysVFIILEJpFDei13Hj5IyeQtKoxcqS+3iZSWuXqOJrSPHJwESsAMC6sGNpcS2srblfTwngaQg wN+gk4Iy5yCBJCKQTnmSIc9PQKhK+J8mvc5nZu51lkRqcBoSIAESiDeBDD7ppLH6xRsvfJk+cfWi qXjAEeWJptyq9ByNy1WVHBmiT44fkyIvd+uiDWYIw4TBzAjPhPeZpeTIlVPnBkP45aChQywvm85T pkrcjBc5cuXSc6VKlUr2qXxwbuqhSHRiHlIaXR+2k0B8CUSEPtDfOQ6cPyV4fbdqvtRSRjP8+y2V p4DKZmj9S3J85+T9JEACjkfAlocZi2Q63j66ksaJ+43OlUhyrSRgBwSQt8xX5S9DPh94lhleZw8e PRS8KCRAAiTgiAQQSlg0Rx7pVquxTHj1bbl97IwEnL0sn3XrL+2q1YvXklBd0kMVSkGy/FlTpwnC HT1VCGXzNq2sxs1fsKBu2/n3dp03DMYo44ULUyZOkh/GTxDLUEirgeLZkL9gAT0Cql7u37PXpIOh y+4dO7QeC+fOjedMvJ0EYk+gcqHips4o8LHmwA4ZNGO8dJvwsfzy5xq5EXjXdJ0HJEACrkmAOcxc c98dedU0mDny7lF3ErBBwNvdQ+B1gPClJ5FPBF5n+M8pICRIe2nYuIVNJEACJOBQBCIfP5FHwaGS KZ1/vPX29vGRJqp6JWTUex/odxjLYDSzlA5dOwsS5+/fvUdm/PhTlMvTfvhRxn06VhnNvtcGuCgX E/gkQ8aMpuqdoz8YLrdu3jTNgDDMt3v3k28//1IO7T9gaucBCSQ2gcqFStic4qqqhjt900rpPP4j eWfWRFl/aLeE8yGeTVZsJAFnJ5AyhbX5Ab+vUEjAXgkwJNNed4Z6kcBzEoBxDEn+kf8HVTL9vX20 11lgaLCuounj7vmcI/M2EiABEnBOAgi/XDR3nmlxlsn+jQsly5SWnr17ybTJP8roYSNk1bLlUqRY MTm4d58cO3JEd3t/1EjJnjOHcUuivY/49BPZtX2HnDl1WhpXryV1GzaUB2Ghsm3LX3I/MFB806WT V/v0TrT5OTAJWBKoUKCopE6ZSiKe2K5ai9DqfedO6Nf4Ve5St0Q5aVimkpTMnZ8hm5YweU4CTkqA HmZOurFOvCxrE68TL5ZLIwFXIeCR1k3c0qTVBrJHERGivc7Ul9j7oU+9zlyFQ2zWGaS8MU6fPi0R ihOFBEjANQlUrFJZjHDLgkUKS9mKFaIFMWz0KPly4gTJlDmz7N25S+bMmClHDx+WdH7p5O33hkjn nj1M98IbDYKE6JaSIuXTnE7m14z+lk/gjXbzvsintnrrZu1pFhwUrHKvzZPVy1ZoY1nVmjXk18UL BGuB2JrLUh+ek0B8CXi5eWjjV2zGQYGilfv+loHTv5Ue342WX/9aKzfv34vNrexDAiTgwARs5TB7 wiRmDryjzq96CvW0J+aa7c7PgStMIAI//fST9OnT55mjFS1aVI4ePfrMPol5ccGCBfLyyy/LwoUL pXXr1ok5VbKODUPZdZUvxE1Vz8yswpZQDABeZ14qZNPfy8ekG34EpEmTRjOZPXu2qT2+B2fPnpVC hQrpYT799FMZOnSo1ZDly5eXAwcOSLly5WT37t1W1xO74Y033pA5c+ZIiPLE27dvn5QtWzaxp+T4 JEACCUCgVNtGepSlU2YlwGjPPwRCIa9cuix+/n6SUyXiT61+liaHPHr4SM7+a/iHd5t/+vTJoQbn dFECrd7orld+eOFa+f3vDfLj+iXPRQKeJ6iUi0IBNYqV0d9fnmsg3kQCJGC3BK4F3JEuKjzbXLL5 ZZDZA6O2mV/nMQkkJwGGZCYnfSecu1SpUjJ48GDTypYtWyYnT56U/v37m3K6ZFZP5RNTmjZtKvfv 35etW7fanAZJkp88eaJfNjs4SWOa1KnFRxnHkPwfT3I9VRU1eJ2dPndWWjZsIgPfekvee+89vVqD SUIu3XzMxYsXWxnMzp8/r41UmBN9k1rOqMTeMPA2aNBAXn/9dSn4bzLv+Ojx/fffyyeffCIbNmyQ YipMi0ICJODcBOBlhldyC5L9FynOnznJvQ+cXwSJ/5/XYIYHeHvP/qNf8FarW7KcNp4Vz5mPaEmA BJyEAD3MnGQjXWgZNJi50GYnxVKrVKkieBly5coVbTAbM2aMpFP5VJJCbt26JQEBAUkxld3PgYqZ qFQVqAoAeLi56dxmEY+U59m1a9qomBQLQCjRrl275OrVq5I9e3bTlEuWPH0CbYQamS4k0cHmzZv1 TIMGDRIYWRNCgoOD5Zpi++DBg4QYjmOQAAmQAAmQgEMRyJspm2T1Sy/XA+JXETMkPExW7N2mX7ky ZFaGsyrSoExFyejj51A8qCwJkEBUAsxhFpUHz+yfgHVSDfvXmRo6AQE8RUQ4HsL03nzzTfHz85Mv vvhCBg4cKDVr1oyywt9//12H7B1WOWIgf/75p/To0UMyZMggCO/s3bu3HDp0SF/r2LGjHFGJly9c uKDv+eeff3S7rb/g+fbiiy+Kt7e3lChRQqZNmxal28aNG6V69er6eu7cueWVV16Ru3ejfgFcs2aN VK1aVffBemAYNIx1GL9t27aSNWtW8fT0lHr16slnn30moaGhep7w8HCt46hRo6LM26tXL2nSpIlu gyccvJbq168v7u7ukkuF/Lz99tuCvFuGXL9+XbDubNmyaaNknTp1ZMeOHfoyjFEwmsGDK0jNe1UZ MHt26qKv/fzzz9KqVStjGN1n2LBheg7sR7t27eTOnTum68+ax9TJxgEYYL+XLl0a5Sq8zgoXLiwl S5aM0h4Ttz/++ENz+/XXX6Vly5bioyrcgcvYsWNN48T0ORoxYoR89NFHuv9bytOuU6dO+hhhupUq VRJfX1+9p+Azb95/icDRKbo9x+dn/Pjxehzsx4QJE2TVqlVaV3NvR3w+EIL61Vdf6b7vvvuunnP+ /Pnay61ixYq6PSbeBofp06cL9txNGUSRi41CAiRAAiRAAslJILpqmc+r06U7N+WnDcuk4zcfyq7T x553GN5HAiRgBwToYWYHm0AV4kSABrM44WLnhCSAnFEwkiEsDkYTGJYQJrd///4o08BjDG0Is7yp 8sW0aNFCNm3aJP369ZNGjRoJ8m7B6AFBSKiXl5c2LsHwgOPo5P333xcYrWC0S5Uqlbz22muC/GYQ GEUQqnfixAndjvC6mTNnagPao0ePdB+Em8IzCYaNIUOG6Hxdw4cP10YzGKgaN24sK1as0O8w0KRN m1Y++OAD+fDDD/X9MIZhXQhNNBcYjAwD4Lhx43Q4K/qOHDlS59j69ttvTWPAownrhKEHhjsYasAV RsedO3fqYb1UKGZqtb6gB6Hipoxu5f7N05UxU6YoxioYbH744QdtrIMBEWPCgAaJzTy6o42/Xnjh BcmfP78YHmXogj3dtm2bvPTSS1HuiA03GPHArVu3bppd9+7dtUEO+4lQSEhMnyOEX8LIBsFaS5cu Ldu3b5cOHTrozxiMsDBMHjt2TDM1WD5rz/H5NTzo8DnMkyePXqfx2dWTqb/wmUMbvC8h586d0/nb unTpog2ruDc2vA0Or776qhw/flx7dsKoSiEBEiABEiCB5CSQ0AYzrAVeKQOatJVKBYsn59I4NwmQ QDwJpFA1cS0lUphS3ZIJz+2HAEMy7WcvXFKTTMpoA48xeIpBLL15LKGsXr1aG87gHQSDBgTGDnjw 3Lt3Txt4YJiBF8+PP/5oeXuU8zZt2giMRDCWweiQM2dObcCDZxUMYPCK+vvvv7UXFG6EJ9zEiRO1 JxoMKsj/Bc8xGFpgLIHAqDd58mRteME5PJ1gFITAMAfD0ZYtW/R5bP7666+/dDd4U8EYA4MSxjTC W7/55hu5fPmyzptlGLdgeKldu7ZmAS8kfMn08/SW2yrhfxpPd0EC/rlz58qLDerL0GEfmNTIkSOH wKsOXl8w0Pn7+2vDJDrEZh7TQDYOYBiD91VgYKDWffny5Xot8D6DF5YhKBQAiQ03FGyA9yEMkc2b N9fGSxhS4ckXk8BDEYn+sXfvvPOONjBCPxi54CkGjy1Is2bNtCESn9HKlSs/c8/xeWjfvr3s2bNH s0cBARhZYyvfffed9pZE/9GjR8e4r8a48EbEZx4cKCRAAiRAAiSQ3ATK5iusE/aHRzx9wBhffVKr Kt9DW3eVeqWir14b3zl4PwmQQNIQYEhm0nDmLAlHgAazhGPJkZ6DAIwbhrEsNrfDoyy1Smb/8ccf y6lTp7T3FsLp4B0WV+natas2luE+GIvy5cunPbtg9EL4J4xb8PbCCwJjCgTeRpgTXj2otmkYy3DN 0viDXFbr1q3T+btu374t8E5DLq/YCrzU4NUEbzfMBeMIDCvGfzYw6EEQjglvNkPSqwpphlcU2tzT uomHeqFS5sN/PeRSpkwh91VuMxQDgMArDcYyCEI5YfA5ePCgPo/tPLqzjb9gGEMI4sqVK6Vz586C cEzwrFAh6pdfVNWE0Sw23OBhZhiJjHHgufa8AiMdXtgf6Hfjxg2tC8ZDGz4XMe35884N3jDCGhIX 3ihYYHAw7uc7CZAACZAACSQXAVTnfkEZzXaein9FdBQr+qj9q6qYQInkWg7nJQESSEACDMlMQJgc KkkI0GCWJJg5SUIRgHEKIYkwmMGTCy/ksEI4Hl7xEeSVQnickSsNhhuEf1oKQigvXryom+GVFp1M mjRJexrBqwo5sWDEQhgdcq/FVmAUQk42eJghlBOvIkWKyJQpU6RWrVo6VxvGis5giJxrmBeSzstb wh491KGZOHdL/dQjKSAkGKdWgpxYhiAnHCQ28xj3mL/DOwtGSXhCIe8YPN/69u1r3sV0/DzcDIMR vAKfV2CkQ3gnQlEh2CcPDw/TcLHZc1PneB7Ehnc8p+DtJEACJEACJJBoBFAtM74GM29V6XtMp95S KneBRNOTA5MACSQtAeOhv/mskZFPzE95TAJ2RYA5zOxqO6gMCCAc8FnSv39/7fGD0EaETiJvE3KH wdgVH0EyfhheChR4+sUMyd+RZ8ryhbBRhJJCjAT/lvPu3r1bBgwYIMWLF9deSTCaQT8YjizlWUYe FCSAAQkeTgijhGcbPOuQKB6SOXNm/X7gwAErPaG3YSxDJ4Q0eKsy7Y8iIvQ9yGv21Oss5oqOcZlH D27xF/5zRFgmQmphNINxyjJ/GW6JCzeLKaxOY/ocWd6AHHEI0QVbeAMiXx6qexoS054b/Wy9P2uP bfWPL29bY7KNBEiABEiABJKKQJVCUQv6xHVefy8f+abnQBrL4gqO/UnAzgmkTGFtfngSjwfedr5c qucEBKw/sU6wKC7BcQnAEyssLMzkwYWVGB5fOJ41a5bOVQWjETysPv/8c/2CcQShixCEt2GMmOTh w4emLuiPfFbw3oIXGwwWe/fu1WMhdxhely5dEoS/IVwvS5Ys2gMJ4ZZGEQAMBn1QCABFAyCDBg0y hZyiHwwxhsCDCwY6hPkZAgMc5jEEFTORbwvFCxCSOWfOHF3oAIYcGNGMCpNIoG/omTFjRj0vcmpZ iq+nlw5pRXuYMlrB60yl0rXsZnUe13msBlANMJAhmf3gwYM142rVqll1wx5AnsXN6iYbDTF9jmzc ovPVIdwX+cOQvw0CxobEtOfoi88eBAZBCPSAmFdrNf8864s2/koI3jaGZRMJkAAJkAAJJAmBrH7p JU+mrM81V0YfP5nw6ttSIEuO57qfN5EACdgvAdseZs8fIWK/K6VmzkKABjNn2UknWQfyZkGQiH3R okXaWITwQ0OQ7wxeSvDeQs4uvKZOnaoNT0j8DvHz89PeVvAWMjd4GGMY7xgDFTphbIJRCsYqw3ML RQWQYB9jwkiH6pkwXm3evFkn1McYMEjBuIXKikgKDz1xH7yJkPwd/yEg3xiMajCyIf8aqi4aAuMK ChYY1UIRdlmnTp0onnJYC+bHXPCo+/nnn3WBA1TEhIEMHnYwphnhmgh1hJ5YO6pTWgryBuTMmk03 r1+/XjZt2CieKrcZJEKtNzqJ6zy2xkGONHhpIc8YCi4YxiXzvg0bNoyRm3n/6I5j+hzZug/54SKU 9x1Yo4gEikZgz8zlWXuO/cB+QVC5FV5/ZcqU0evE5wxtKABhK8zXfA4cJwRvyzF5TgIkQAIkQAJJ SeB5845lT59RsvtnTEpVORcJkEASEWAOsyQCzWkSjAANZgmGkgPZImAYRYx38z4wKFk+ZUBeK3hx wciERPFIfm6eNwthkjA6IK8XDA/IhwUDFQxJRigl7of3FgxZSDIfnSDpfJ8+faRGjRqydOlSXWkS hQAgSMA+btw4Hf4IY1rHjh11rjRUPTQS48MLCgYyeJOhKiXO69evr6tBwrCHED94wsHogrUgHxbu NV8zwi3r1q2r868hfxauI5ea0ed///ufNuZBFxjTMAeMSjDAQHLnzq1ZwSMOed1QHACVNeHFhb62 JFvmLNLu5Q5yVDHEWMpSpueLePJYzF2isWfGvj3PPMbcxhioRorKlhDwMATtxnpjyw33GuMa45i3 xfQ5Mu9r3I978JnCnsC4hyqsqJgKMfR71p6jHz6PYIUxYHxF4QhUVsVnFJ8t7JFhlDXGtLWOuPC2 dT90oZAACZAACZBAchKo8pyJ+g9dOC3jV81PTtU5NwmQQCIRML7/mg8f19Ql5vfymAQSm0AK9QGl D2RiU+b4cSaAkLZr167pypW2bg4PD9eeWAg/xMtSkI8M4X9I3A6DTHSCPvASg7HNSBxv3hf/PJDs HYUFzPOBmfeBJxryk8HDyNPT0/ySzseGKpu5cuXSnmBRLpqdXL9+Xc8f3RwoFoCqjdDTPBm/2RC6 oEBQUJDkzZvXvNnmcbgKDz15/qx4KSNe/py5JST8gdwLvi/e7p7ip8M0bd6mG6FLbOeJfpRnX0GI bWy4PXuUp6GRz/oc2bof1TCRvwxVU6P77Dxrz3ENXnTp0qWLUjTg9OnTujJomjRpbE0bbVtS8I52 cl4gATslUKrtU+/PpVNm2amGVIsEXIdAqze668UeXrg2yqLxIK7NF++r7xgxp8mIcuO/J11rNZJX 6z6NHrB1nW0kQAKORyBcFSBr8un/oiiOarirP/g6ShtPSMBeCNBgZi87QT1IIIkJ3AkKlLCH4ZLR J524q7DMm4H35OHjCMmSzl/SpGIB3STeDk5HAiQQBwI0mMUBFruSQCITiM5ghmlHzf9Zthw78Nwa 9Gv0krSrUve57+eNJEAC9kXgYcQjaTxmcBSl0qZOI2uGjYvSxhMSsBcCDMm0l52gHiSQxAT8VAUq uEUHhAbrkEFPFcaqDiTk34T1SawOpyMBEiABEiABEnAyApVjqJbZrFw1+WPkeOnbsI3NlU9eu1jW Htxp8xobSYAEHI8AQzIdb89cXWMazFz9E8D1uyyBVCpHmY8KwUSy/1v3AyQgJFizUDY0CgmQAAmQ AAmQAAnEm0DlQsVNeUAtB+tYvb4MbtFRUqZIKe2rvihdaqq8qhYSKZHy1bI5su3EIYsrPCUBEnBE AjSYOeKuubbONJi59v5z9S5OwEflXEP4JdyjIUgg7+MRNQ+biyPi8kmABEiABEiABJ6TgL/yZi+c LVeUu1XJJ3mjfiv9wrEhr73YQlpUqGGcmt4fq7ymoxfMkAPnT5naeEACJOCYBFgl0zH3zZW1psHM lXefa3d5AviimlnlLMug8pj5e/uo/GXp9ZNelwdDACRAAiRAAiRAAglCwLxaJrzJ4FUG7zJbMqhp B6lbopzVJTzYGz53ipy8dsnqGhtIgAQchwA9zBxnr6jpUwI0mPGT4NAEJk2apCsZ7tixI8HW0aFD h2grUSbYJP8OlND6L1iwQPNYsmRJrFXFf1weKum/l5uHIEyTQgIkQAIkQAIkQAIJRaByoRJ6KHi0 j2j3iiBvWXSC7yTvt+kulQoWs+oSqip6v/fr93Lx9g2ra2wgARJwDAJ4WG/uWQqtEXqNPxQSsEcC /O3YHneFOsWaQKRKUv9Eueo/Vnm4nleaNm0qNWr8FwKA8SIiIp53uDjdlxD6m0/o7+8vlSpVErxT SIAESIAESIAESCC5CRTJnluy+WeUTzv3ltrFX4hRndSpUslHHV6XErnyWfVFoaIhv0zSlb2tLrKB BEjAIQjQy8whtolK/kuABjN+FFyewK1bt+TGDed4WlmvXj3Zvn271K5d2+X3lQBIgARIgATsl8AT 9cBr85G9MmruTzJyzo+y7fhBXYTGfjWmZs9LAL8cT+71jpTPXzTWQ7inSasMbH0kf+bsVvfcvH9P 3v1loq7ybXWRDSRAAnZPgHnM7H6LqKAZgdRmxzwkgQQh8O6778qWLVtk6NChMmLECLl27Zo0aNBA Zs6cKb/88ot88skncv/+fWnXrp0gJNHNzU0ePnwoH374ocybN08uX74smTJlkubNm8uAAQOkZMmS Jr3mzp0rn376qZw6dUqKFi0qefPmNV3DAbzDPvvsM5k9e7acPXtWChcuLK+++qoMHDjQZpWmjh07 ypEjR7SHWrly5WTOnDmm8VauXKn1P378uJ7ru+++i+KJtnHjRn394MGDkj59eoGx6uuvv9bHpkEs DuKjP4x68IaDMeybb74xjbxq1SoZPny4vP3225ItWzYZMmSI1qNu3bq6z5o1a2TUqFFy+PBhKVKk iLz00kvSv39/8fPz09efZx2myXlAAiRAAslIoNUb3ZNxdk79vATSeLqLd47MktrDXSLV/9spVDqA 6RuWy3e/TpOwW/eed1jeZ8cEfD284qwdKnl/3q2/DJz2jVy9dzvK/Zfu3NThmeN6vCWebu5RrvGE BEjAvgnQw8y+94faRSVAD7OoPHiWAATOnTsnu3fvlk6dOkmZMmWkbNmyMn/+fKlSpYoMHjxY6tev L/nz55eff/5Zpk+frmf84IMPZOzYsZIzZ04ZOXKktG7dWmbMmCGtWrUyhVsuXrxYj5k6tcqBoQxx 6GuZq6t3797aeJQmTRptJAsLC9OGpPfff9/mykqVKiVeXl7i7u4uFStW1MfoCMMb5s6VK5e0bdtW YDRDbrPw8HA9DoxQMAKeOHFCXnvtNSlWrJg2CFavXl0ePXpacdJywvjqnzVrVkEI59SpU+XBgwem 4WGE3L9/v+Z7584dfXzv3tNfOJYtW6aNbNevX9eGtEKFCmk+Y8aMee51mCbmAQmQAAkkE4G+Hbom 08ycNj4EUqpQO5+cWcSvYG5J7e4mobfuyp3jZyVU4ETfAABAAElEQVTiwdP/W9MoAxrFMQkk1r/J DN6+8qUymuHdUlAAAIUAjErfltd5TgIkYJ8E6GFmn/tCraIhoH4Bp5BAghJQBiZkbYxU3lp6XOU9 Fqm8yCKVUSpSeZ7pNuX9pft069ZNnzds2DBSeXhFKkOQSRflMaX7KAOcbitRokSk8oqKDAwMtOqz devWyKNHj0amTJkyUhnpTNeV8SoyR44cen7l6WZqNz+oUKFCZMGCBU1Nhv7Tpk0ztb3yyitaF+VN ptuUoS1SPR2JVAYzUx/lDaf7/PDDD6Y284OE0F95sOk5lKFQDw1ePj4+kcoYqc+VB5u+vnDhQn2u DHmRyiAYab72Jk2a6Lbbt29HPs86zNfEYxIgARIgARKIiYB6CBW5Yu+2yFafD42s+9GAyP/N/C7y /K2n/ydfun0jsv/Ur3X72gM7YxqK112UwJkbVyJbjh2iPyf4DJm/hv82JTLi8WMXJcNlk4DjEWg8 ZnCUf8P49/zgYbjjLYQauwQBephFY0hkc/wIKMOV9gbDKPD2Qmhk7ty5pVatWnrgfPnyiYeHhyij jT5fu3at7N27V4dH/vbbbzJ+/Hjt1YWLCOkMCgoSZRCTZs2aia/vf08Z4almCCplwjOsdOnSsmLF Cv2CJxg83OAZBi+s2Ar0V0YyU3dlVNPHN2/e1LogvBFrOHnypGmuPHny6D47d+403WccJJT+nTt3 1lUwFy1apIdev3691kcZHo2pTO8Ie4VnHEJb4Z1mCEI4g4ODJW3atDpMMy7rMMbgOwmQAAmQAAnE hgC8gAb8PE6+Xv6bpFEe4sPb9pSvug+QrOnSy88bl8trkz+T45fPS7sqdaVBmYqxGZJ9XJAAcpl9 1qWPILeZpWw7cUi+WjaHVfYswfCcBOyUAD3M7HRjqJZNAsxhZhMLGxOaAMIojXBGY2y0KbO0PoUB qn379jrEETnNkMMsNDRUX4MR7OLFi/o4S5Ysxu1W7xcuXNBtCFHEy1KM65btsTmHcQkCfQ1dkCOt RYsWVrefP3/eqs24J776K+8wHQqKUEuEfipPMm2QfPnll6OdE6GrtsTQKS7rsDUO20iABEiABEjA FoGV+/6Wb1b8LvjlqH3VF6VHnabimdZNtv5zSCatWSg3Au9Kwaw5ZVCzDlI8Zz5bQ7CNBEwE8BkZ 9fLrMuy3H60KRKw9uFO8PTylf6OXTP15QAIkYJ8EmMPMPveFWtkmQIOZbS5sTWICLVu2lLt37+qc ZPCISqXynEycOFHefPNNrUm6dOn0Ozy6opPMmTPrSygqYO4dZvQ3ktwb58/7DmMepFKlSoK8ZJZi GNfM2xNS/65duwo859atWydGjrIMGTKYT6ePDT0DAgKsrqHBuB6XddgciI0kQAIkQAIkYEHgTvB9 Gb9qnrgpL/PvXhusqx0icfvoBdNl56mj4u3uIW82aSetKtZUBjUGPFjg42k0BCoWKCYftOkuoxfO MD10Nbou3LFJ0qniAl1rNTKa+E4CJGCHBOhhZoebQpWiJcBvKNGi4YWkIoCQS3hlNWrUSCfah7EM gkT1hmTPnl0n5LcMd0SFSkOQwB+CMEX0N16ofPn666/L1atXja5R3hF+ieIAsRUY5vBCCCnuNea5 dOmSnseWES0h9W/Tpo14e3vLW2+9pY2MtsIxsRZ4s8GQBsOaeSGCzz//XBcCiIiIiPM6YsuI/UiA BEiABFybgMpNpr2Awh6Gy4krF2Tm5lXy6vefyq5Tx6RB6Uoyc8AIaVOpNo1lrv0xea7V1ylRTnkl viwp1B9LmbZphSzd/ZdlM89JgATsiAA9zOxoM6hKjARoMIsRETskNoFs2bLpvGPwmpo9e7Zs3rxZ 3nnnHfn0009NU8Mw1atXL7l165autKmKB0i/fv10xUijE/Kj1a1bV/78808xvLAmTJggw4YNk0OH DknevHmNrlHe4Xl25coVXckzOqNalBvUyUcffaSrd8IbbtasWbJgwQKtH3SvXbu2ZXdtWEso/T09 PXXlToRSpk+fXucos5rw34b33ntPYMhDhU9wmTJlitYdoaUw4sV1HdHNw3YSIAESIAESMCdQNEce 8VEhcpAvVX6pmVtWS870meTbVwbK+226ib+Xj3l3HpNAnAi0KF9dXqvX3OY9E1bPl41H9tq8xkYS IIHkJ2Dbw+xJ8itGDUjABgGGZNqAwqb4EYBxy1LQZniOmV8znjB89dVXMnToUG3ownUkokeY5tKl S03dR48erY0/3377rXzzzTc6kT3yns2fP9/UZ968eaKqVYqqFqmNbygQAKPWqFGjBDnTbAm8z2CA g1EJBqXo9De/t3fv3qIqVGqDU48ePfTaKleuLDNnztQFDsz7GscJqT+8yjBXu3btBDnfLMXgOmjQ IAkJCZGxY8fqcFcUWqhfv76oapv6lriuA/nkILYY6Qv8iwRIgARIwKUI4AGM8X+O+cKRnH1K76Gy ev8OOaUS/1ctXFKalK0qqWx8RzC/j8ckEFsCnWs0lPuhITJv+8Yot+AzOXbxLzrst1LB4lGu8YQE SCD5CaSwEYaPf7cUErBHAinUh5OfTnvcGRfVCYnoYQB6VnL8wMBAuXHjhhQqVMjml3SggzELY8Hw hiqdMQkKDKByJEIYbRn2orsf/3wwj4+Pj/b2iq6feXti6G8+vq3jx48fy7lz57RXGTzULCU26wh6 ECqBIcGioIuPyj3jq/KE2PolyXJsnpMACZAACTgfgfO3rslPfyyTvWdPSLUipaRbrcaSL3M251so V2TXBCJVbcwvl86RNQd2WOnppoy2X3brLyVz5be6xgYSIIHkI9Du62FyV+W5NJcF/xsj6b19zZt4 TAJ2QYAGM7vYBipBAvZNIEIZ3K4H3NFKwsKOrCHe7p7i5+Vt34pTOxIgARIggQQlEKpyks1S+cgW 7dwiT9RDI0/1kCv4QZh+iPL74NHiljrmh1QJqhAHc3kCTyKfyEfzpqnqq//ltTWgoLjENz0HSoEs OYwmvpMACSQzgfbjhsudoMAoWswf/Ilk8Hla5C3KBZ6QQDITsI6dS2aFOD0JkID9EXj4OEIrlVb9 IpTNP4PgPTg8TCKePLY/ZakRCZAACZBAohDYdHSf9Jz4iQ6BK5gtp3zf6x0Z2rqrnut+WIjcDLyX KPNyUBJ4FgFUWR3RrqeUzVfYqhuMuUN//V6u3L1ldY0NJEACyUPAdg4zBr0lz25w1pgI0GAWEyFe JwESMHkM4Clu6pSpJJ2n8ixTngU6RJN8SIAESIAEnJrARVXx8p1ZE2X0gunyMOKRDG7eUSa99j/J nzm74BoMFgjHzO6f0ak5cHH2SyBNqtQyuuMbUiR7HislEfo15JdJVh4tVh3ZQAIkkCQEbFW4RXg1 hQTskYDtLOj2qCl1IgESSDYCSNKMnGXwIMDTWoQ4eKR1kzAVmvNAvdzVMYUESIAESMC5CDx49FB+ +XONzFdJ1R+roi/NylWT1+u10A9N9p87KRNWzZcLt69LzgyZ5cP2rzGhv3Ntv8OtxlN9FxnbpY8M mj5efy7NF3BNpZUY8usk+bbnIFP1VvPrPCYBEkg6ArZyIDOtetLx50xxI0CDWdx4sTcJuCwBH1Us AGGYMJrhS6mfl4/gl6mA0GDJohLr2vrPz2VhceEkQAIk4OAEDl88I2MWzdRhloWy5ZJBzTpIsRx5 tZfOJwtnyMYjewVJ1V99sbm8XK2ewMOHQgLJTQAe8F+oRP9vTftGbgTejaLOuZvX5P05k1UhgAH6 oV+UizwhARJIMgIMyUwy1JwoAQgwJDMBIHIIEnAFAnCf9lNfRJ8oLwMYzeB15qMS/6MgQEj4A1dA wDWSAAmQgEsQCAgJkuG/TZEQVXF6YNMOMlnlKiucLbf2NOsxcbQ2llUvUlqm9xsmXWs2orHMJT4V jrPITL5+ujomHuxZyrHL52Xk71P1dxfLazwnARJIGgK2HrLTwyxp2HOWuBOgwSzuzHgHCbgsAU83 938T/j+QRxERAq+zVKlSaQMaDGkUEiABEiABxyew49QxCXoQqjyHRWoVf0GOXDwrb/w4ViavW6y9 iz/t3Efli+olWf3SO/5iuQKnJIAw4c+79hMvNw+r9e09+4/ynpyhqrzye4sVHDaQQBIQoIdZEkDm FAlGgAazBEPJgUjANQj4e/uofP+ROhQTXmfpVG4zw+vMNQhwlSRAAiTg3ATyZsqqF4iclQOmfi1v z5igqgzelh51msq0fh9IlUIlnBsAV+cUBAplzSljOr1hKlxkvqgtxw7INyt+V2nGmWjcnAuPSSAp CNDDLCkoc46EIkCDWUKR5Dgk4CIEkKcGSf/DVf4yJP03vM6C1C9W8DqjkAAJkAAJODaBojnyqCT+ r0pmX3+5HnBXqhYpqQ1lPWo30V7Gjr06au9KBErnKSgj1WcZaSQsZeW+v2XqH8stm3lOAiSQyARQ WdlS6PFpSYTn9kKAGVrtZSeoBwk4EIF0nl4SqvKWBYQEi7tK+uyv8oRcV8l1UQAAuUMoJEACJEAC 9kvgYcQjWXtwlxy/fE4qFCgm1YuWtvLCqV28rG5/8PChfkhiv6uhZiTwbAJVC5eUIa26ytglv2gP efPev21bL77qOw0KV1BIgASShgA9zJKGM2dJGAI0mCUMR45CAi5FAE+G8AUzUBnMELLj4+Ep3ipP SIiqogmvMw9VRZNCAiRAAiRgfwR2nT4m361eoEIsb2nl1hzYKTWUwezjl3tZKZs6ZSoay6yosMER CTQoXVGCwkJl4poFVupPWb9Uf49pWraq1TU2kAAJJDwB5jBLeKYcMfEI0GCWeGw5Mgk4NQFtIFPG MlTMRFhmOi/ldfZQeZ0pLzN4ndl6euTUQLg4EiABErBjAjeUF/CkNYtk6z8HxVM91OjToLWcun5Z NhzeI3+fOKKrBqZWRVwoJOCsBF6qXFsZzUJk5pbVUZaIPGbjls/VxuFaxV6Ico0nJEACiUBAFZSx FFbJtCTCc3shYB1AbC+aUQ8SIAG7JgCD2Plb16Xbdx/Ll8tmC7zOtp88Il3GfySzt66za92pHAmQ AAm4CoGIx49ljvqZ/MqkMdpYVqdEOZkxYLh0UCFoL5YsrzFkTudnM8eTqzDiOl2HAApXtK5Uy2rB yJ80ZuFM2Xv2hNU1NpAACSQsAVs5zGgwS1jGHC3hCNBglnAsORIJuBwBVEqrVLC4rD+4W45fOa+/ hObOmEXm/LVObgcFuBwPLpgESIAE7IkAfvl/bfKnMnXDcsmczl++7DZARrZ7RSfuH7dirgyfO0VQ yOXdll3oFWxPG0ddEpXAm43bSf1SFazmePQ4Qkb+/pP+PmN1kQ0kQAIJRsBWFAoNZgmGlwMlMAEa zBIYKIcjAVcj0K/RS9ozYeLqhfod5w9UBU3kBKGQAAmQAAkkPYE7QYHy8YLp8u4vE+XW/QDpVa+l TO3zvpTLV1hQGbDHxNGyYu82eSFvIZnSZ6iUVe0UEnAVAvhlfUjrroKHfpaCPKzvz/5BedBfs7zE cxIggQQiwBxmCQSSwyQJARrMkgQzJyEB5yUAjzKEN8DDDJ5m8DjDl9ANh/fKMVWBjUICJEACJJB0 BFB8ZfDMCbL56D6pWayMzOg/XDrVaCDnbl6VN6eNk6+X/yaplVfZ8LY95evub0qejFmTTjnORAJ2 QgAFLT7s8JqUyl3ASiPkZh3yy/dyPeCu1TU2kAAJxJ8APcziz5AjJB0BGsySjjVnIgGnJdC9dhPx 8/SWnzYs01UytddZqpSqEttCqxLuTguBCyMBEiABOyCAqpeX7tyUErnyyagOr+uiLBNWzZe+P30l J65elPZVX5SZA0aY8pfZgcpUgQSShYBb6jTyaefeUjBrTqv5kVZiiPLQvBcSZHWNDSRAAvEjQA+z +PHj3UlLgAazpOXN2UjAKQl4u3vIqy82F4QBzVb5y3JmyCwvVaqtfjm7IGsP7nLKNXNRJEACJGCX BCIjtVpHL52TiWsWSHcVfrlk959SMnd++bH3UOnbsI2ukmmXulMpEkhiAl5uHvJ5136SM30mq5kv 370lQ3/9XoJVRXAKCZBAwhGgh1nCseRIiU+ABrPEZ8wZSMAlCDQtV1U/pV2wY5Ncu3dbutVuLH5e PvKz8joLVTlBKCRAAiRAAolPoEGZSpJLPbSALNq5RVKo9/fbdJNver4l+TNn1+38iwRI4D8C/uq7 yheqIEZGH7//Gv89On39sgz77UcJV7lZKSRAAglDwFaVTFSqpZCAPRJI9ZESe1SMOpEACTgWATwt ypMpq04ofTMwQBqVqSzwPNtwZK8Oyyyfv4hjLYjakgAJkICdErh5/54cvnhWP5RIq8LKzMUtTVpp Wq6aFM2RW+oULycDmrSTItnzKMMZTGcUEiABWwTwfQU5WDcd2SfhEY+idLkZeE/OXL8itUuUFVu/ 6EfpzBMSIIEYCaw9uFNuBEbNEdj4hcqSxS99jPeyAwkkNQF6mCU1cc5HAk5MoHSeglKnRDnZ+s9B 2XfuhDQtW1UKZcsl8Dq7okIbKCRAAiRAAs9PIEDlU/p8ya/S6ZsP5YM5P0inbz+UQxdOWw2I3EzV i5TWSf890rpZXWcDCZCANQE89Bvbpa/Y+jez49RR/W8v8t+QZ+u72UICJBBbAsxhFltS7GcPBGgw s4ddoA4k4EQEejdoJfhlbdKahfJEfbEc0LitRDx+LD+sW+JEq+RSSIAESCDpCCBUBXnIkI8MT+Yr FiwqGbx9BRUxJ6yen3SKcCYScHICRXPkkdEde0kaVUnWUjYc3qOKGS2wbOY5CZAACZCAExOgwcyJ N5dLI4HkIJAlXXp5uXp9OXfzmizfu1WXbK9bspxsO3FI9p79JzlU4pwkQAIk4LAEjl0+rytcotKl p5u7fPzy68oLpp8utIJFhT1kbiWH3VwqbpcEyuUrIsPb9rQZfgnD9YzNq+xSbypFAo5CwFZoM3OY OcruuZ6eNJi53p5zxSSQ6AQ6KYNZZl9/mbFplQSFhcob9ZXXmcqrM2nNInn8hEk9E30DOAEJkIDD EwgMDZavl/8mb04bpx5AXJXONRrKjP7DpUbRMrL56D7TL+1dazZ0+LVyASRgbwRqFisjg1t0tJn7 b9aW1bJw52Z7U5n6kIDDEGCVTIfZKiqqCDDpPz8GJEACCU4gdapUkt7HV9Yf2i0PVGWpF0uW14ay Lcf2qyTV3lIsR94En5MDkgAJkIAzEECOpJX7/paRv0+VI5fOCgqmfNq5j9RV+SGvBdyRTxZOl7nb /pDUKVPJm03b61yRzrBuroEE7I0AcrB6pE0re2x4x+85/Y9kT59BCmTJYW9qUx8SsHsCCG++eu92 FD3rl64oOdJnitLGExKwBwLWAfr2oBV1IAEScHgCCMNcsutPWb5nq7SsUEM6Vqsnq/dv114R9UpV EF8PL4dfIxdAAiRAAglJAPkeh8+dIrtOH5OMPn4yst0rupAKHjxM3bBc5m3foB8+NFNVMF+v10LS eXon5PQciwRIwIJAB/XdJTAsRH7buj7KlUiJlC+WzlbVwD2lauGSUa7xhARI4NkE6GH2bD68al8E GJJpX/tBbUjAaQikUIEMA5q004n/UQAAIZm9G7TWIZrTN610mnVyISRAAiSQUASWqvxIMJZVKlhM ZgwYbqo63HPSJzJn6zrJlzm7fPfqYPlfi040liUUdI5DAjEQgHG6efnqVr2QYuLj+dPkoI1KtVad 2UACJGAiwCqZJhQ8cAACNJg5wCZRRRJwVAKFVThD4xcqq2T/J3TS/zolyuoiACv2bpOzKicPhQRI gARI4D8CZ248/bl48tpluXT7urw3e7IOzQwNfyBvqfDLyb3ekeI58/53A49IgAQSnQAeAA5q1kFq Fy9rNVd4xCMZ9tuPcuraJatrbCABErBNgB5mtrmw1T4J0GBmn/tCrUjAaQi8Xq+lruw2ee1iQbiR udeZ0yySCyEBEiCBBCBQUXmWQQJCgnRlzN2nj0ujMpVl1oAR0rpiLZtV+xJgWg5BAiQQAwFU9Rv2 Ug+pUKCoVU8YtIcq4/alOzetrrGBBEjAmgCrZFozYYv9EmDSf/vdG2pGAk5BwCOtm6RSyalR1Q3H eEJ7+36A/Hn8gBTImkNyZ8zqFOvkIkiABEggtgSQ/wheK5aSN3NWKZOnoH64UCR7bu1V9lLl2uKu fnZSSIAEkpdAypQppWaxF2T/uZNyS32PMRfkGfz7xGGpVfwF8XLzML/EYxIgAQsCm4/ul4u3b0Rp RWEb/k4QBQlP7IQAPczsZCOoBgk4M4G2letITlX5Zvafa+VO8H157cXm+gvlD+uW6ATWzrx2ro0E SIAEQABGsvWHdsnrkz+Ttl9+oJOIhz4MjwIHRrSy+QrL8LY9ZUirrlIyV/4o13lCAiSQvATcVT7W zzr3VfkEs1kpcjPwngz95XsJDA22usYGEiCB/wgwh9l/LHhk/wRoMLP/PaKGJODwBFKnSiV9G70k +OVw6h/L5PiVC8pjIq0uKX0t4I7Dr48LIAESIIFnEUDOxrdnTJDPFv+iPVMC1C/UP21YJj+uX/Ks 23iNBEjADgn4eHjKF137Sza/DFbaXfg396ClMdyqIxtIwIUJpLB2sJbISBcGwqXbNQEazOx6e6gc CTgPAZRdL5+/qKw9uFMnyL0TFCiZff0lSzp/51kkV0ICJEACZgTwS/PkdYul94+fy5GLZ3Uesl8H fig1ipbRvZgo3AwWD0nAgQhk8EknX3YfIOm9fa20PnH1ooyYO0UeqoIAFBIgAWsCKVROQEuJjHxi 2cRzErALAtafVrtQi0qQAAk4I4FhbXtIywo1VU6zlOLn6S0j2r0iaVKldsalck0kQAIuTmDjkb3S Y+Jomb99oyAfGSpcotJlWHi4+kX6oaZTrUgpF6fE5ZOA4xLI7p9ReZr1Ex93T6tFIM/ZJwtnMO2E FRk2kICoAjbWLmZP6GLGj4adEkgRqcROdaNaJEACTkoAFaUQkmmrSo6TLpnLIgEScBECCMmasGq+ TgyeztNLUCm4admq+hdnGM9++XONIEF4wzKV5J2WnSW1KopCIQEScFwCRy6dlXd/mSTh6t+1pTR+ obK826qLzSIfln15TgKuQmDMopmy4fCeKMtFFdp6pSpEaeMJCdgDAbp22MMuUAcScDECnm7uLrZi LpcESMAVCNwPDdFVgQc1e1m8VaU8GMxQWQ8GsoCQIFVhr4zULVlO/L18xE0lD6eQAAk4PgEU5xjV 4TUZ/tsUiXjyOMqC1hzYKT4eXtK3YZso7TwhAVcmQA8zV959x1s7QzIdb8+oMQmQAAmQAAmQgJ0R gOfs/bAQSaM8xpCb0d/bR9XFFLkTdF9u3w+QiMePlQHNW11LT2OZne0d1SGB+BKoVLC4vNemm6Sw EWoGz9LZf62L7xS8nwSchoCtfycMenOa7XW6hdDDzOm2lAsiARIgARIgARJIagIhymAGSa3yMiI3 Y9CDUIHHGX4JcE/rpvM2omIwhQRIwDkJvFiyvASrf/ffrpxntcCfNy4XX1Vds0WFGlbX2EACrkaA HmautuOOvV4azBx7/6g9CZAACZAACZCAHRBIo4xh4aooXtjDB3I94JHKWfZYh2fC0ww5GykkQALO TwCFje6Hhcq0jSusFvvtqnnirYxmdUuUs7rGBhJwJQK2PcxYJdOVPgOOtFaGZDrSblFXEiABEiAB EiABuyTgq8It8cuwismSJ5FPlDeJl2T1S09jmV3uFpUigcQj0LVmI2lXpa7VBPA2/WzxLNl1+pjV NTaQgCsRsFX0i1UyXekT4FhrpcHMsfaL2pIACZAACZAACSQDAeQgQ46ygNBgeRihXMksBCEmfspo lt0/o375qoT/tp6iW9zGUxIgASck0LdRG2lUprLVyvBz5KN5P8vRS+esrrGBBFyZAHOYufLu2/fa aTCz7/2hdiRAAiRAAiRAAslIAF/ikYvsesBd/R6swq1uBt5ToZfhNrWC4YyGMpto2EgCLkNA/RSQ d1p2lupFSlutGVVzP5jzg5y9ccXqGhtIwBUI2MphhiI5FBKwRwI0mNnjrlAnEiABEiABEiCBZCfw 4OHDp4YyVL9MnUoy+KSTlCmffnVCVUwKCZAACURHIJX6WTGiXU95IW8hqy4oCjL01+/l6r3bVtfY QALOTiBFCmsTRKRKZUAhAXskYP1ptUctqRMJkAAJkAAJkAAJJBEBhE3dCQqU20EBOh9ZOhVqmSVd evFQ1S7dUj9N4M+Kl0m0GZyGBByYQNrUaeSTjm9Ikey5rVZxJ/i+vPvLJME7hQRciYAtDzPmMHOl T4BjrZUGM8faL2pLAiRAAiRAAiSQSAQQfhmkQi6vB9zRIZcead1V4v4M4qOS+SNv2Q0VlokqmGlS pVZtXomkBYclARJwJgKebu7yWZe+kjtjFqtlXVMeZkOV0QweZxQScBUCttIWMIeZq+y+462TBjPH 2zNqTAIkQAIkQAIkkMAEkFfohspNFqiS+sN7LKOvnwrB9FWZiETuBQfpa4+ePNbGs0zp/MXWE/IE VonDkQAJOAkBFAT5olt/yax+dljK2ZtX5f3ZPwh+BlFIwBUI2Pr/kx5mrrDzjrlGGswcc9+oNQk4 PYHjV87LrC2rZeepoxKhfkmlkAAJkEBiEQhXv6jeuh8gj9XPGlS3RPile5q0EhIeJtcD7+p3nGdR v+wiPNPWl/3E0o3jkgAJOAeBzL7+8mW3AbqaruWKjl0+Jx/+PlUQDk4hAWcnQA8zZ99h51ofDWbO tZ9cDQk4BYH9507KW9O+kRmbV8n7qpIUvkRSSIAESCCxCASqKpjwJPPz8hZfFWr56HGEroQJzzK0 p/f2lUzK4wyhmBQSIAESeF4CuTJklrFd+wnCNC1l95nj8uniWTpvouU1npOAMxGw9dCJHmbOtMPO tRYazJxrP7kaEnAKAjCUPX7yRLzdPaR4zryy/eQR2XbikFOsjYsggYQm8NNPP0kqFUL4rFeJEiUS etp4j3f79m2t89tvvx2vsTp06CBubm7xGsPInXJfGc4CQp6GXz5URjNvd0/JonKYhQYFJ4iu8VIy ljdjLalTp5YuXbrYvCOm6zZviqExIfYghil4mQSchkDhbLl0IQAUBLCUzUf3yfiV8yRS/aGQgLMS oIeZs+6sc66LBjPn3FeuigQcmgBKsadQf759ZZCMVtWl8CR28trF2uvDoRdG5UkgEQiUKlVKBg8e bHoVLFhQniiDc9++fU1tPXv2TISZ/xuyadOmUqNGjf8aYnH0WIUeQc/4SuHChaVixYrxGgZhmPj1 FIb64AdhqhJmGsmqwjLhcYYn4THpeuXKFcmePbuMHTs2Xnok1M2VKlUSfA4gtnQzv54Qc2IfIyIi EmIojkECLkHghbyFZGS7VwTfdyxl+d5t8vOGFZbNPCcBpyGQMoX15/5JZPy/DzgNIC7ErggwtsCu toPKkAAJgEDbKnXkwPlTsmD7JhnSqot0r9VYfli/RJ93qtGAkEiABMwIVKlSRfAyBAaSkydPypgx YyRdunRGc6K+37p1SwICAhJ1jugG/+STT6K7FKUdVS4htrw6PNK6SXb/jPLgYbikUd5ZtvpEGczi 5OHDh3Lt2jW5f/++xZWkP8WT+7///ts0saVultdNHXlAAiSQpASqFSkl77bsIp8v+dXKo2zO1nU6 n2KHqi8mqU6cjASShAByHVgKnSotifDcTghYm3ftRDGqQQIk4LoEqhcpLeXzF5W1B3fKiasX5aXK dSRn+kwy+6+1cic4+X8hdd2d4codmQBC8cqXLy9Dhw6VN998U/z8/OSLL76QgQMHSs2aNaMs7fff f5dy5crJ4cOHdfuff/4pPXr0kAwZMkjRokWld+/ecujQ0zDpjh07ypEjR+TChQv6nn/++SfKWMbJ mTNnpGHDhuLt7S25c+eWkSNHGpdM7xs3bpTq1aub+rzyyity9+5d0/V3331X4B01f/587UEFzzK0 GR5m3bt319dDQ0NN99y7Hyhl1Vo6qxDFm6oK5o2Au/KJMiYWL15c3N3dpXTp0vLtt99qTzIvFQYO Y1lsdDUmwLrhYQeZNm2atGrVSh/b0hUXFi5cqHX09fXV60T/efPm6Xvwl7GelStXap4eHh5StmxZ 2bp1q6nPs/bD2OcPPvhA74mlbubXr1+/ruewDItdtWqVbv/ll1/0nOiHfc6WLZs2wtapU0d27Nhh 0sf8wNYeYD+wb7hGIQES+I9AwzKVpF+jNv81mB39uG6JrN6/3ayFhyTgHASYw8w59tFVVkGDmavs NNdJAg5GoH/jl/QvsBPXLFC5g1JK30YvSajy/pj6xzIHWwnVJQH7IbBv3z5tJEPes5IlS0rWrFm1 cWj//v1RlITHGNrgMXXz5k1p0aKFbNq0Sfr16yeNGjWS2bNny1tvvaXvQUiol5eXNj7BcIVjS4H3 WdWqVWXnzp06TLR169Z6DPN+a9askQYNGsiJEyfktddek2LFisnMmTO1Ae3Ro6feYefOnZPdu3fr /Fyenp6CudGGdUFwD66vXbtWJ86+qwzsCxYvkgNqLcWKFdd93lZ6jxg+XNKkSaONhWFhYQKD0fvv v6+vx0ZX3fHfv6AHDFqQLFmyaK44tqXr9u3bBfm+wBRGR8x77NgxbYwCG+O+PXv2aMNbrly5pG3b tnL8+HF9X3h4eIz7gTHAA/NHp5txHfsPA9rUqVPlwYMHen78BUMZ9h+ei8HBwdogCUMf9hCGM9wP I6uhs+lGdWC+B0Y79hb7gmsUEiCBqATaVqkr3ZQnvaUgj9nXy+fK1n8OWl7iOQk4NAHmMHPo7XM5 5Wkwc7kt54JJwDEI5M2UTVpWqClHL52TjYf3StXCJaVigWKy7tAu+efKBcdYBLUkATskkClTJjlw 4ID2WIqNx8/q1au14QzGndGjR8v48eP1K1++fHLv3j0ZNmyY4BjGoh9//FFg5LGUCRMmCIxw8MD6 +OOPBed//PFHlG5DhgzRxhuEE2IOGL369+8v8FjDfeby3XffaQ83y3YkuscX8d+Vx9a1e3ckNPyB rFu1Wrf1evVVOX/mrPw++zcppbzKDh48KJ9//rk2RuXIkUN7mcGTKja6musCngh/hTRr1sx0bPQx 13XXrl2SJ08emTFjhnz55ZeaJ4xTMFrBa8xcYNRcunSp/Prrr9K5c2cd8gljYkz7YT5GTLqhb7du 3bRRDLwhMMrBuw3GskKFCsk333wjly9flo8++kgWLVqk93jFihU6Zxn23lKMPYCBzRDch32JrhCB 0Y/vJOCqBF6p20xaVYzq6QsWyOs0esEM2XfuhKui4bqdkABzmDnhpjrxkmgwc+LN5dJIwNEJ9KzT VHw9vGTKH0vlwaOH0k95naVSiULhdcYKUo6+u9Q/uQjUq1dPh1XGdn54lKHqIgxd8DBbtmyZdOrU SaZPny7+/v6xGgaeVQgthGeZITCyGRIUFKTDP9GG/GswyOAF4xLE3JMppUqSDe8sW5I1ezappkI6 EVKIRP0+bh6yfu06qV27tvhmSK/HQYL6MspgZswB7yd4iMFQBK+qmHS1NW90bZa6Ivz17NmzgkIF ixcvlh9++EEboXD/1atXTcPgPoSjGlKhQgV9CM+0hNgPY1y8wxiHCqswakHWr18v2A8Y0iBGPjSE YxrM4HmYPv1TnrqT2V8It0XIJvoifxpeOEYbrlFIgARsE3irSXt5sWR5q4uPVMXekXN/Uikq+LDQ Cg4bHJIAPcwccttcVmkm/XfZrefCScD+Cfh4eAqeuo5fNU9+27peH+MJ7MKdm+WPQ3ukQen4Vcaz fwLUkASSnwDC9pDjCwazyZMn65ePj48OYTTCGGPSEnm+MmbMqA0ztvpevHhRN8OYhPBPSzl//rxl k9X5vZAgCVEVLtt0aCfbVL6vI3v2CartBgYGSouXWqvql6Fy7cpToxS8tvCyFOgZk66W98TlHGGP 8OozvK+QEw6GxJgkbdq0ugs80RJiP8znw3gIhYUhFKGv0A3hqi+//LLuBh4QhMnaEvMcc8b1rl27 6hDeDRs26CbsAdooJEAC0ROAEeG9Nt0kRHnG7jx1NEpHpKR4b/ZkXT08T8asUa7xhAQcjQBzmDna jrm2vvQwc+395+pJwO4JtKhQXfJnzi7z/t4g11Wy7u51mkg6Ty/5SeUyC1NfICkkQALxJwCvq2cJ QiPhAbVlyxZB6CSS5Q9XecCQJys2gmqduB/5sGwJQgchSAyPKp+WL/Ok+Jb3P1FGJAiMZW5p0krP rt20fgsWLJDZc38TNzc3ad6qpfh7+0i+XE89nFBZ03IOnMOYFZOulvPH5RyFDlCwAIn9b9++rfOR IUwzrhLf/bCcD8Ys5G5bt26dNpyhUACMeZDMmTPrd4Tx2mIGTzNLadeund4DGN/wwucFbRQSIIFn E0idMpV81P5VKZW7gFXHwNAQGfLLJLkR+F8hFKtObCABByBADzMH2CSqaCJAg5kJBQ9IgATskQDy HPRv3FbCIx7Jj+uXiI+7p7xat7ncDgrQXmf2qDN1IgFHIoBqjUh8b3h5QXejOiaOZ82apatAnjp1 SmrVqqXzfiH3F4xs8EqCIIQQY0QnyIWFEEkkszfEvNAAjDJ47d27V4+VPXt2wevSpUvy+uuv6/BF 4z7Ld4QrQWAQy+TrJ/5+/tJU5RJbtGixrFi2XJo2byYFc+YRLxWeiSIBEIQdGnPgfc6cOXoeGPVi 0lUPYPEX1g8xT5xv0UWfIrwR4a3IBWeEs5qHYtq6x7ItNvthfk9sdGvTpo2u2IlCDvAYM8IxMQ6K Q0C2bdtmYgZvwUGDBsl7772nr1n+hc8Uqn8i7BQvHKONQgIkEDMBGP7HdOotBbLksOp8636AvKuM ZgHKo5ZCAo5KgB5mjrpzrqk3DWauue9cNQk4FIGy+QpLzWJlZMux/XLwwmlpVr6a/iI5b/tGuRZw x6HWQmVJwN4IGBUe33nnHZ3HqkePHjJlyhSTmkWLFtWJ5gcMGGDKYYWqiggTbN68ue7n5+envY/g PWXLAGTkHIOBZfPmzTqs09LjCEnlYVTDmDAKwUOsV69euj9ykEUnhnfcw4gI7XV6Q/1MaNnuJQlU HlN4vfbKq9oIh/th8Ktbt65OsA+vKuQvQ5J/JK8/dOiQ5M2b15Qf7Vm6WuqC9UMQgghjHNZhS5o0 aaKT5WPsrSpsFEUSkJMsLhKb/TAfLza6oZomqnEiJBYeY8a+Yhx4FKLy6YcffqhfKNaAfcFev/DC C+ZTRTmG0Q3GN0sDXJROPCEBErBJwNvdQz7v2k9ypH/qfWve6fKdmzLk1+9V6Gb0DynM+/OYBOyN AD3M7G1HqM+zCNBg9iw6vEYCJGA3BPo0aC1pU6eRSWueVl6D19lDeJ2tW2I3OlIRErAHAoZHkfFu rhO+pFp+Ue3bt6/2rkI4Howm8IIyz1eFMMkvvvhCjhw5ovOLtWzZUld1/Pnnn6VAgadhQ/ACQ+hj hw4ddIVF8zlxXF0l4p84caI2SsFgheT3MMxBDH1gVBs3bpzAkw3XOnbsKMiVNnPmTJ0kH31trSmN 8tjCGAjJvBMUqAqCiLRu3kJ7rMFrzdIghfBO6Dl37lyBAWvEiBHaQATjGby/YqMrdDEXhHHCAAej W8OGDXXSfFu6gjVytE2aNElq1qwpqDxqGA4NDrbuM2+LzX5gLGM8W7qZXzfWYXiVQR/spSFI1I/P Blgijx3ynf31118yePBg7WWGftDPmM+4D9wR1mlrD4w+fCcBEoieQHpvX/miW3/J6PPUIG/e8/T1 yzLstyna+968ncck4AgEkF/UUlARlkIC9kgghUog+zT5hz1qR51IgARIwIzAzxuXy+y/1snbzTtK i/LVZdT8n5XX2QEZ1+MteSFvIbOePCQBEogrAYQTXrt2TcyrV5qPgSqSyFmGcDy8LCU0NFTnKIOR BFUXbUmE8gI7ffq0rn4ZXbJ7fC1BeCiMZbbyY1mOixxmocrTIkxVY0yrDF4oFmKrZL3lfVgv5sF6 keTeUmKjq+U9d+7c0Ws3vLosrxvnqDKJipeYOzpWRt/o3mPaD8v7Yqub5X3m5xgDFTTzKk+8mATe avCGg1EQIbwUEiCB5yNw/tY1GTj9WwkKC7UaoGrhkjLq5dcFuc8oJOAoBJCX+AeVZsVcOlSrJ3g4 TiEBeyNAg5m97Qj1IQESiJYAkvx3nzhahzvNenOkqnoXJq9M+kRyZMgkU3oPjdUvydEOzgskQAJ2 RwDGsPthIRKqjFupU6cSX3cvcVehoBT7JYDiAch3hsIKu3fv1gbS2BjY7HdF1IwEkp/A8Svn5Z1Z E20WO0LF8Pdad7Py8kx+rakBCdgmMF+lVJm8bnGUi+2rvih9G7aJ0sYTErAHAgzJtIddoA4kQAKx IuCR1k3eqN9SAkKDZeaW1ZLVL720r/ainL1xVVbs3RarMdiJBEjAMQiEhD+Q6/fuSLDyqohUfx4+ eqSLfSAUm2K/BFAwAjnQduzYIZ9++mmsvNHsdzXUjATsg0CxHHnlY+VJliZVaiuF1h/aLRP/TVdh dZENJGCHBJj03w43hSpFS4AGs2jR8AIJkIA9EqivnqQWz5lXlu76Uy7eviGdazTUlfGmb1opQQ+s wxXscQ3UiQRIIHoCj1TY5s379+Re8H3dyV/l8cnql8HkPYHk/hT7JYBKpL///rucPHlSFwywX02p GQk4FoHy+YvKBy/1sOlNv3jXFv0g0bFWRG1dlUCKFNYmiEjmMHPVj4Pdr9v602r3KlNBEiABVyaA RKEDGreTx0+eyPdrF4q7Kr/eq34rCQwNkZmbV7kyGq6dBByaAMIv4T16QxnLwpU3mZeqEpfVP4N4 ubkLjGj6iXSKFAzJtPNdRv42FFUoVIh5Je18q6ieAxKoXfwFlcf1ZfVNyDppOr4DwXBGIQF7J0AP M3vfIepnToAGM3MaPCYBEnAIAkVz5JEGZSrKrtPHZcepo1KvVHkpkSufLN39l1y4dd0h1kAlSYAE /iMQqvIT3gh4Gn6JxP0It/b38pEnyjCOype3gwIEBrX0qs3ek1sjKT4KG6BoAIUESIAEEppAs3LV 1IPCljaHRWjmH4f32LzGRhKwFwKWVZWhF+sQ2svuUA9LAjSYWRLhOQmQgEMQ6FWvpXiqnGbfr12k igA8UV5nbfUv1JOU1xmFBFydwIIFC3T1xSVLolahshcu+GKcWhnGOnfuLLfuB8hdZRRTTdpIltnX XxvFUBHuujKiodiHR1p3HZZZq3oNva6KFSvaXMrYsWP1dVSeRJXGpJY33nhDsmXLpr2rkMuLQgIk QAKJQaBj9fqCl6XgZ+sXS36V7SePWF7iOQnYDQF6mNnNVlCRWBCgwSwWkNiFBEjA/ghk8EknXWo2 kst3bsqinZulSPY80qhMZdlz5h/5+wR/UbW/HaNGiUng+++/l+zZs8vx48f1NI8fP9beWfDQsleB jjCGhT96KN4Iv1ReZQjDxPmNwLsqzDpYUivDV0ZfP8ng4yupUqbUFXKxpj179sjFixetlrZo0SLT upP6afWZM2fkp59+kmrVqukcXgULFrTSL64NV65c0fsKQyCFBEiABMwJwMsM3maWEvHksXw8f5oc unDa8hLPScAuCNDDzC62gUrEkgANZrEExW4kQAL2R6Bd1bqSzT+j/PLnWrkXEiSv12uhvc5QqvrR Y4ZD2d+OUaPEIhAcHCzXrl2TBw8eJNYUiTKuYdBzT+Om6mCK3FGJ/uFxhhyF6Ty9JUu69DpPofnk KZXhDGLpPXf58mVtSDOum9+TFMebN2/W0wwaNEjn8PLx8Yn3tA8fPtT7ev/+0wII8R6QA5AACTgN AeQxQz6zWsVesFpTuKomPOy3KXLq+mWra2wggeQmQINZcu8A548LARrM4kKLfUmABOyKAMqr923Y RkLCw+TnDcslvaqm17VWY7ly95Ys3LHZrnSlMiSQWASmTZsm48eP18N37NhRJkyYYJoKHkotW7YU GG9y5col5p5K7777rlSqVEnmz58v8IYywhxheELSdoQW+vv7S506dWTHjh2mMVetWiXlypWTrVu3 mtoCAgJ021dffWVqmzt3rpQuXVo8PDykbNmygnBF3Hfo0CFTH3iZfTHmM8mfL6+eq3vnLhIaHKLD L308PE2VMU03qAOMCX0tDWZLly7VOVDatm1r3l1gdHr//felQIEC4ubmJjlz5pQ+ffrIkSNPQ5bg iVa+fHkZOnSoDBs2THNC4vp27drJnTt39FgxrXnEiBHy0Ucf6b5vvfWWdOrUSR+jUiT0yZo1q3h6 ekq9evXks88+k9DQ/yr6mvOGl2C/fv1k//79cuHCBWnatKkeB3vcqlUrCQ8P1wxHjRql242/evXq JU2aNNGnf/zxh+4zffp0vXdYM3KqwTg5ZswYKV68uLi7u2uO3377rSlvTHT3GXPwnQRIwP4IpFTV Boe17SHl8xexUg7fjd779Xu5rL4TUUjAngjQYGZPu0FdYiJAg1lMhHidBEjArgnUKFpayuUrIqsP 7JBT1y5J2yp1JEf6TPLrX2vlrvJWoZCAsxOAMQaGFkipUqUkT548piXDeHP+/Hnp3r27NozAcLRh wwZ9/dy5c7J7927p0qWLNubg3sDAQKlQoYI2RsFohvuPHTsmNWvWlJ07d+r7bt26pQ065l5PMOTA yAMDHWTx4sXaaIQ8ZTAmwUiFcEX0QVJ8Q1YuWy6/zJghdevXkyJFi8iq5Stk3Gef6/BLo4+tdxih /vrrL7l7967pMuaEUaxMmTKmNhx88MEH2lAIHUaOHCmtW7eWGWpOGKBgsIPs27dPvvjiC/nhhx+0 4alEiRKycOFCbUDD9ZjWDAMeDJIQ3AujHsZu3LixrFixQr+DQ9q0abU+H374oe5ryRuGNhgw27dv r/vC0AjJkiWLlCxZUhu9wBB7ai4wzBmGSBj50OfVV1/VIbpVqlTRBrLevXvL8OHDJU2aNDJw4EAJ CwuTt99+WxsTMVZ095nPw2MSIAH7I4CHhx+/3EuK5chrpRy879+dNVF77lpdZAMJJBMB5jBLJvCc 9rkI0GD2XNh4EwmQgD0R6K8S/uM/X1SHQs4jeJ2Fhj+QqcrrjEICzk4AXkgwsEDgIQVDkCEwDiHf 16RJk7TBCu2bNm0yLuv37777Thtb4MU0btw4uXHjhkyePFl7rcGTaePGjdpQg7FjKzAOwUtr7fp1 0m/gm/Lb/HnaOGN5f44cOWTnjp3KaDZTdm7fIb6+vlb6Wd6DcxjMUIVy+fKn/8ZhONuyZYtut+yP 5PvwbFu3bp3mM3HiRO3FhaIAly5dMnWHLtu3b5cpU6ZoY1xsdcEAPXr0kK5du+qx3nnnHW2EMooO wDgFAx2MlStXrtQGTegKseT99ddfa8MdjJnQFx5hkGbNmpmOdUMs/oLHGdaHuWDcxP7CmHjw4EH5 /PPPtTENa4aX2fXr/1UXNr8PRkYKCZCA/RPwUEWQPuvSR/JmymalLHJCDvl1ktwPC7G6xgYSSA4C 9DBLDuqc83kJ0GD2vOR4HwmQgN0QyJc5m7QoX0MOXzwjm47sk2pFSqnwhKKy9uBOOXH1ot3oSUVI IKkJdOvWTXsqYV54jkHgLWUI8n3B88iQXbt26bBFGIAMgWdT1apVTR5mRnt07/AgO3r0qNRv2EDC 5YkEPwiTAOXlkCFrZqtb4LlWuHBhZfBOKdAFHlU3b9606mfZgPBReHQZYZnw4oIBzTIcE/etXbtW 9u7dq0Mwf/vtN20INIojIO+bIYYuOI+LLsb9lu+FChXSlTo//vhjbfyC0QwGskePHsnVq1d1d1u8 X3nlFe2dZr4HlmPH5vz111837T1CahGSCc83sMJrzZo1mrfhHWiMaX6f0cZ3EiAB+yfg6+ElX3Tr pwuoWGp74dZ1eW/2ZAlVhVYoJJDcBOhhltw7wPnjQoAGs7jQYl8SIAG7JdCzblNBzqMp65fqKnv9 G7/0r9fZApVMPNJu9aZiJJBUBBAOCHlW9UjkzUL4H0IpzQWeRigsYB4CaX7dOMbYx0+d0KfpM2YQ Tzd3Seflrc+fNa9x///bOws4Kco3jj90d0g3giAhISBdgkiXgPQfkFJAkTIACQVUkAbpRrq7BQmR UJAU6e7u//t7j3ed292727vb2927+z2fz93Ozswb852529nfPIF8W64axLF169bpfGAIx8QcTR42 ax/wMMuZM6cWDCFGIc8ahCqYKTpg3d8sB2cupo39Kzz7EDJbqVIlHQaJ9wh9NCwC4m3fT2jfYxzY 9OnTpVq1arYfCGcws12/4S8SIIFwSyB5gsQypElHSRLPsejIkfOn5es5P7MoUrg9uxFn4lHUQzJ7 e/nSd6t628+V7yMXAcerNXIdP4+WBEggghDAk9UWZd6XK3duypzt63VYQvVCJeXQ2VOy8c+9EeQo eRgkELYEkidPLjdv3nQYBLm2kPsqUaJEtm1G9LGtUAv3VZXOKDH8xLZzp8/qQhzxlGgWFpUra9eu Lffv39deZhDO8N5ZmAeKHsCTDN5o2B9hivZJ863HENiys2MOaH/kh+vYsaNOsg+PNjBEqGWRIkVs TQLibdshgIXgzANdpEzp593Xv39/nWcOueasP8hxRyMBEogYBJDHdVDj9hI/dhyHA/rj1FHpv2CK vKA44cCGKzxHgB5mnmPNkUJPgIJZ6BmyBxIgAR8hUK1QCUF45pwdG+TK7ZvSvEwVgZA2fv0SefT0 iY/MktMgAfcTMILUIyVYhcZQQREhlUiobwwCGipiwksrmsoRiNxesCNHjujXZyq5/fbdflU04c35 epZsEi9ePNmjvLgQjnnx5nXtyXX8iJ/nmW7khl/FixfX3nCdO3fWQpizcEwIZUiQDw8v5HbD/GHW nF2uTMX+mNEGnmuBGfKhwTA/sIMhHPPatWt6Gb+c8d6xY4eujjl37lyb0GjOK7ze4CloQkrRByqU WnOxYZ29oaADDMIiCkSYn1mzZglCME2IqH07vicBEgifBLKlSicDGn4ksWL4eRZbj2Lb3wfkh2Wz 6X1vhcJljxJw9nAruA+CPDphDhapCVAwi9SnnwdPAhGLQDSVA6l9pTo6JHPcusU6RLNF2fd1dajZ v66LWAfLoyEBCwEk2IfNnDlT9u/fb9kSvEUkrIcnGXKfwSMLFTVROADhmD169NCdIXE8BDpUvZw4 ebL07veNNKr3gd4GbzKEYLZQFRqRK+3TT7voZP7f9PpKpqnE/u40zAFzwzjwoCpRooRD96lTp9Z5 u5CvC2w2b94sOMaBAwc67BvYCusxox9U1ERoY2D27rvvao83FFVAAn+EjUK4Q9VRY/a8ESL58ccf a8GyVKlSunAC9sV5gNiFLxTIQ2aqes6YMUPKlCmjPddMn85e0VfZsmVl69atujgBeAwfPlwXQUB1 zUyZMjlrxnUkQALhmECeDFmlT72WEj2q34MC66Gs2rdTxqkUFjQS8AYBeph5gzrHDCkBCmYhJcd2 JEACPkmgYJYcUiJnXtl8aJ8uAlCtUHHJkjKN/KK8zi7duuGTc+akSCC0BBB2mCFDBl0N8/PPP7d1 ZzzPbCvUgllnXq3bsmXLpis5Yl2tWrWkQoUKsm/fPi2uNGrUSO+aJUsWQaVJeJa1UsLY0MFD5NOu n+lt8OC6qRL8d+jaRapUqyoTxo6XOlWry7KlS20Ck8kNhifM9k+ZMSdn89Kdq1/2bYxXGYQz0870 aV6RswzHhSqWEI0WLlwo4GU1+36xzToXc8wQrNAPEvkbzmYcM77pF15lX3/9tRw/flwLZZhrnDhx dJED08aetxHhUKkTYh9CYDEeRC0IcPD+Qx40HAeqbiKUEkUTUAXU9GnGt5/PL7/8IvXr15c5c+YI KmGikmnVqlV1DNSFbAAAQABJREFU8n9rzjr7dqY/vpIACYQ/AkWy55buNRs7/H/AkeC+iA8Tw985 jQgztv+8wjHRwywinNmIeQxR1MXJbNgR89zyqEgg0hK4cPOatBg1QDKmSCXj2nSTnccPyRezx0md ImWkQ+U6kZYLDzxiE3iuBCx4W0FkgTATWkOY3sOHDyVz5sw2Mcr0CbHs0q3r8q/KyVU4T35dWfP+ 44dy+8F9HX65ZcMmSRQ/vpQsXkIuX74sqBgJzymIPaiCmSJFCtOVx17PnDmj54miBqGxEydOSMaM GbUnniv9oLDAsWPHdFVPhKoGZOANsQpFAuwNhQIgRhpPQmxHWCnCM5MmTWq/e6DvEd4JFjiv8Cak kQAJRHwCi/dsleEr5zkcqHpsIV2qfiBVCxZ32MYVJBBWBH49ckC+njvBX/clcuaTbz5o5W8d35CA LxDwXwbLF2bEOZAACZBAKAmkSZJc6hYrq5+cDl4yU34/+bfu8ca9O6Hsmc1JwHcJQFBxJraEdMbI cxWQmWdtmZTocu/pY7n96IE8efZUEBadNH5CGf7Dj4Kk90uVZ1mxYsUEubIQPogqlt4Qy3Ac8MBz h8ErLDgGEczkMAusXWC8kyVL5tA0pOc6duzY2ivNoUOuIAESiLAEahYuJXcfPpDJm1b4O0bknRy2 4hedwqJ0rrf8beMbEgg7AlGcdE0fHidQuMoHCDAk0wdOAqdAAiTgfgIflqwkiVVZ9TUHdsl1JZRF VSWsaxUp7f6B2CMJREICMaJHlzgqXxns4eNH8uT5M1WRLa68ljiZxFXrkR/rzTff1GGYqASJsEKI Pgg1pJEACZAACXieQJNSlbWnvf3IqJg5YOFU9XDRr5CL/Xa+JwF3E2AOM3cTZX9hSYAhmWFJl32T AAl4lQCEsvUH98i/Vy5KuTwFpXDWN7w6Hw5OAuGJwAuVseGp8hqLHi269hxzNvfHavuzZ88kdsxY TvdBmOHOnTt1Vcb8+fMLvJtoJEACJEAC3iEAj7JBi2fI2gO7HSYQW1XU/L5pR8mVLrPDNq4gAXcS +O3YXzpVirXPYq+/qSu7WtdxmQR8gQAFM184C5wDCZAACZAACfgIAYRb3lP5yO6ofGRYRpBEEuWt GT926POi+cghchokQAIkEGkJPFd5FXv/MkF2HP3TgUGCOHFlWPPOkjllaodtXEEC7iKwS+UW7jlr rL/uUKDi20Zt/a3jGxLwBQIMyfSFs8A5kAAJkAAJkIAPEIDH2JU7N+X2/Xs6jDmmSgqPTCOofImw HRoJkAAJkED4JoBck1/XbSH5MjrmY0Ses24zRslFVTyJRgJhRcB5lUzeY4QVb/YbOgIUzELHj61J gARIgARIINwTgBiGohhXb99UYZjPJGGceJIqcVKdwF+ioI6aKMGMCXnD/YnmAZAACZCAIhAzegwd /pY9dXoHHtfv3pbPp4/SnwkOG7mCBNxAAHmF7Y33GPZE+N5XCDherb4yM86DBEiABEiABEggzAnc e/RQeRNclwcqeT9y2KRSifsTxo0nz54/lxt3VWVZJZQhwX/0qNHCfC4cgARIgARIwDMEUKBlUOP2 kj5ZSocBLygPM3ia3VUVkGkk4G4Czj3M+FDO3ZzZn3sIUDBzD0f2QgIkEIEInL52SR4+eRyBjoiH QgKOBB4/fSqXb92QWyrcMqoK0UmWIJEkT5hYL996cE8uq9BMhGgid1nS+AkcO+AaEiABEiCBcE0g cdz4MqRJR0mZMInDcfxz+YL0UnmmHj994rCNK0ggNARYJTM09NjW0wQomHmaOMcjARLwWQJ4kjpq 9QJpPeY7QYVNGglEVAJ3Ht6Xq0oQe6q8yOBNhvDLOKrS5QMlFF++dV3uqTw2MaNF0+sTq4T/fkGZ EZUGj4sESIAEIi+BlImSyOAmHSSR+iywt0NnT+kCAfA4ppGAuwjQw8xdJNmPJwhQMPMEZY5BAiTg 0wSQv2nZ779K0xHfyIJdm+XZi+dyX4Wp0UggIhLAFx9UwETi51RJkup8Zc+fv1AC2i0VgnnbVhUz ZaKkEiNa9IiIgMdEAiRAAiRgIZAh+Wvy3YftJa56cGJvu0/8Ld8tnq6rJttv43sSCAkBZ4IZc5iF hCTbeIIA74Q9QZljkAAJ+CyB/f8e115lJy+f9zdH5HWikUBEJPDk+TN9WM9fvJBnz5Q4/OyRzlPz UuUqi69y2iRSIToI0aSRAAmQAAlEHgI50mSQ/g0/kh4zx8gTFY5vtY1/7VXh+XGl8/v1rau5TAIh IuAsJBP3IDQS8EUCFMx88axwTiRAAmFO4JLK3TRu3SLZcni/07HuP6Zg5hQMV4Z7ArFUdTRUvkQy /2t3b+njQcW0xPHi68pp4f4AeQAkQAIkQAIhIpA/U3b5sk5z6TtvouChitWW/r5NeSTHlZblqlpX c5kEgk3AmYcZBbNgY2QDDxHgI2QPgeYwJEACvkHgkUpeO2nTcmk+qn+AYhlmSg8z3zhfnIX7CSAU 87kKy1yiwpBHr1kof539R1KoZP8QzWgkQAIkQAKRm0CJnHnls2qNnOaunLFtjczfuSlyA+LRh5qA Mw8zhmSGGis7CCMC9DALI7DslgRIwLcIvFSZmTb8uVfGr1ti86oJbIbMYRYYHW7zZQLHLp6VyZtW yCElhJXPU0g+eKeCTt5vnXPGFKmkQ6Xa1lVcJgESIAESIAFNoHL+InJXFYcZs3aRA5Exaxbp8Ezs QyOBkBCgh1lIqLGNtwhQMPMWeY5LAiTgMQJHL5yWEasWyOFzp1wekx5mLqPijj5CAFVeJ21crgpY bBc8vY2uqlwu2bNN9v5zVKZ2/NKpt4CPTJ3TIAESIAES8DEC9YqVU6LZA4FXmdXwAPKHZbOUaBZH 4I1GI4HgEqCHWXCJcX9vEmBIpjfpc2wSIAGPELh5/55cuX0zWGMxh1mwcHFnLxLAl5fV+3dJs5H9 tUD2ZoYsMu6j7tKmQg09q3PXr8jDx4+9OEMOTQIkQAIkEB4JIF9ZtUIlHKaO/Gb9F0wRFE6ikUBw CUSJ4ihBvFQV62kk4IsEHK9WX5wl50QCJEACoSBQNHtumdyhl1R5q5jLXjb0MAsFcDb1GAFUd+00 aZgMXjJDe5X1rNVUhjb/RNImTS437t/R88ibMZvEVdUvaSRAAiRAAiQQXAKdq9SXcm8WdGiGSppf zh4nRy+ccdjGFSQQGAFnIZnMYRYYMW7zJgGGZHqTPscmARLwGIF4seJI1+qNpEzuAiqUYLZcvn0j 0LHvP3oU6HZuJAFvEoAH5JRNK2Xxnq16GrWLlJYWZd8XXOc7jx9SIcjz5eLNa5LltTTSq3ZTb06V Y5MACZAACYRjAhA3etRsooohPZDdJ/72dyQPnjyWHjNHy08tukiG5K/528Y3JBAQAWchmaySGRAt rvc2AXqYefsMcHwSIAGPEiiUNadMbN9LqhcqGai3GW4MaSTgiwR2nziswy8X7NosOdNmlDGtP5eO leuqXDMP5as5P0uvWWPl9oN70l4l9R/XprukTJjEFw+DcyIBEiABEggnBJATs2/9VpI7fWaHGd9+ cF+6TR8V7NQXDh1xRaQh4MzDjIJZpDn94e5AKZiFu1PGCZMACYSWQNyYsaTz+/Xlh2YfS5okyZ12 x5BMp1i40ssELiivsd5zJ8jzF8+lW40PZXjLLoKKl0jK3GL0ANl+9KAOnZna4UupW7SsRIvKj3kv nzIOTwIkQAIRgkCsGDFlYKO22nPZ/oCu3Lkpn08fKbfUwxoaCQRFIIp6ZG1vDMm0J8L3vkKAd9K+ ciY4DxIgAY8TyJ8pu0xo11PqFCkj9k+7mPTf46eDA7pAYMuhffJY5Y2Jo0Tfsiq8+PeTR+R/Y77V 1TFTJUoqPzT9WL6s01ySJUjkQm/chQRIgARIgARcJ5AgdlwZ1LiD04eNZ1WBme4zRsuDx0xp4TrR yLmn05BMVcCIRgK+SICCmS+eFc6JBEjAYwRiqyemHSrXUfk3Oku6ZClt49LDzIaCCz5EIH1yv2v0 0q0b0nrcIP3l5Prd27oi5s/teshbmV/3odlyKiRAAiRAAhGNQLL4CWVIkw5OH8wcv3hWvlCFAFAQ gEYCARGwf0iN/RiSGRAtrvc2AQpm3j4DHJ8ESMAnCLyZPov83LaHfPBOeVVtMKrcV09I+eHtE6eG k7AQKJ4jr3R5/wOJHzuOnL9+VUrnektVgP1CGhSvINGjRrPsyUUSIAESIAESCBsCqVU6i0GN20uC OHEdBjhw+oR8M3+ySh3wwmEbV5AACDjzMGNIJq8NXyUQRX0hpP+jr54dzitcEhg9d7qM+WVGuJw7 J+1HIEbc2BI/XSq5dfKMvHzOG77wfl20/6CJtKvfOFwcxqOnT2TN/l3yz+XzUixHHimc9Q2neciw 39PnzwThMTQSIAESIAES8AaBw+dOSddpIwWfSfb2br63pXvNxoEWWLJv4+p73mu7Sso394sWM4Yk zem/gMTzx0/lxtFTvjlhzipIArjPxv12RDQKZhHxrPKYvEogT51KXh2fg7uHANzF9dMEPlNwD1Av 9/LngjVenkHQw2/7+4CMWrPAX6WxWm+Xlo/fqxt0Y+5BAiRAAiRAAl4ggFyavWaPlWfPnzuMjhyx SHvhbuO9truJera/qNGjSbJcWf0N+uzRY7l57LS/dXwTvgiEh3vtkBCNHpJGbEMCJBA0gSXjpwW9 E/cgARIIUwI12jQN0/7d0fm5G1dl5Kp5svvE39pjrFOV+rLl8D7Z/+9x2XToDwpm7oDMPkiABEiA BMKEQKGsOaVXrabSf8FUefHSv1f+gl2bJWHceNKkVOUwGZv32mGC1SOdDl8+Vw6q+xxjH1asJhW7 vm3e8jUcEQgP99qhwUnBLDT02JYESIAESIAEQkgA1S5nbVsrc7av10/mK+cvopP3J46XQGJEj64F s9cSJQlh72xGAiRAAiRAAp4hUEZVbUaxpKFKBHlpV+1w8qYVOtdZzcKlPDMZjhIuCLR7r478fvyw HDl/Woq8/qa8kd5/iGa4OAhOMlIQoGAWKU4zD5IESIAESMCXCOw4+qeMWr1ALt66LllfSyud3q8v KDxx494d+XbRdFl/cI/EjRlLulRt4EvT5lxIgARIgARIwCmBqgWLy92HD+TnDUsdto9YNV97UJfP U8hhG1dETgIxokWXYjnz6p/ISYBHHV4IUDALL2eK8yQBEiABEgj3BC7duiEjVPjlb8f+knix4ujc LnjqrlLmyaLdW2TSxhWqQutDKZo9t3RUucvSqEpkNBIgARIgARIIDwQalqgotx/el192bPA3XdSY G7R4hq7wXER9vtFIgARIILwQoGAWXs4U50kCJEACJOBxAntO/q0rVbpjYHiPdZo8VK7duS0V1FP2 j96tJcniJ5RDZ0/JTyt/kROXzkmqxEmlR63GUjxHXncMyT5IgARIgARIwKMEPqpYQ3ma3ZdV+3b6 G/fZi+fSZ94kGdy4veTJ4D/hu78d+YYESIAEfIhAVB+aC6dCAiRAAiRAAj5DAF5gX8waJ/9eveiW OSH58dU7t6TkG/mkV+1mEi1qVBm8ZKZ8MmmonL56SRqXrCST239BscwttNkJCZAACZCANwhEkSjy WbWG+rPOfvzHT5/IF7PHycnL5+038T0JkAAJ+CQBCmY+eVo4KRIgARIgAW8SePjksfb6whPx4Svn OSQxDsncnr/wqx627cgBmbhxmTQb0U9W798pBbPmkIntekrLclUlVoyYIemabUiABEiABEjAZwhE jRJVvqzTXApkzuEwJxQH6DZ9lJxXFaJpJEACJODrBCiY+foZ4vxIgARIgAQ8TmCSqup15fZNPe5+ VfZ8w597Qz2HGoVLSuK48QW5XGaq6phxVFL/3vX+p8JTOki6ZClD3T87IAESIAESIAFfIYCk7t80 aC0502Z0mNLN+3fl8+kj5drdWw7buIIESIAEfIkAc5j50tngXEiABEiABLxO4OiF07Jo1xZ/8xi3 dpG8o8qex40V2996+zdI6n/h5lXJrSpexooew9/m1ImTybSPv5adxw9J7BgxdG40epT5Q8Q3rwjc u3dP2rVrFySP7777TtKmTRvkfp7cYcCAAXL58mUZPnx4iIeFqNy0aVN55513XOIQ0oHcMdeQjh3c duC5b98+mTx5stOmQW132iiQlbt27ZKRI0dKly5dpECBAoHs6domT51T12bjfC93M3Q+SuRai2rP 333YTuXvHKZTD1iPHp+X3aaPlmEtOknCOPGsm7hMAiRAAj5DgB5mPnMqOBESIAESIAFvE0DY5A/L 5siLl37hk2Y+11XC/snK6ywgQ26yb+ZPlkY/9Zau00ZKs5H9HL4coG382HF0wv8SOfMx/DIgmFwv T58+lfXr19t+li9fLjNmzJClS5fa1mE7hLWwsi1btkj37t3lypUrwRpi7dq1smDBgmC1cbYzjnfr 1q3ONrltXVBzDSkDt03Q0hFYTJs2zbZmxIgRMnjwYNt7++22DSFc+Pfff/U1h9eQ2M2bN/X1s3r1 altzT5xT22AhWHA3wxBMIUI2gRgGT+rXEiV1OD7kCO05c6wgDQKNBEiABHyRAAUzXzwrnBMJkAAJ kIBXCMzfuUlXq3Q2+OI9W+Ufu0TFyHH2y44N0nxUf9l86A+dsD+2ykOGcM4xyiuNRgIhIZAkSRK5 ePGi7WfSpEm6mx9++MG2Dttz5HDMDxSS8Zy1gYcRBJnz5z2fnDtKlChy4sSJUHmpOTum4K7zJgP7 ucLbC0yMQTz7+eefzVvtDWbdbtvgpYVbt27p6yesRU8vHR6HDSaBFAkTy5AmHSRxvAQOLf8+/698 PXeCPH3+zGEbV5AACZCAtwkwJNPbZ4DjkwAJkAAJ+ASBizevyZTNKwOcC7zPflIFABA+gipgyG2G ggB4Qp42aQr5+L268na2XDJj6xqZtGm53H/8MMC+uIEE3EVg0aJF8s8//0jdunVl7NixElVVX23Q oIHAK61+/fqSNWtWPdT9+/e1AFW4cGGpUKGCzqW3d+9eWbZsmZw+fVoyZcokbdu2lVSpUsn27dtl 06ZNuh1EmXr16knZsmWdTnnz5s2yZMkSQf+lS5eWF6+KW1h3PnDggCxcuFDgrZQtWzbdX86cOfUu f//9tyxevFiqV6+ux4RI9f3338svv/wiefLkkYQJE+r54PiyZ89u6xbedocOHZI2bdpIsmTJ5Pbt 2zpc8eDBgwLBEfOtWrWqbX8suDJX08AZA7BxNtekSZPKvHnzZOfOnXLt2jXJnz+/vPfee3r+6M8c Y506deS3336Tbdu2SaFChfT5QVsYQhYDOh/YjnbHjx+Xbt26ycSJE7Vw+ujRI/n222+lRYsW/raP GzdO7ty5I127dhWIjzD0D65g06pVK70usPOid3j1C6IXeAR0DnDdoF9jN27ckDFjxui3O3bs0MKe GRMrwQnnN3bs2NK4cWPJlSuX3tdwsr8WXnvtNc0G19nZs2clS5Ys/q6hP//8M8jrHQOg7ZQpU7Tw CLEZfwu///67NG/eXFKnTq3ngF/wqpwwYYL+u6hZs6a8++67Ei1aNNt2LoSMAHJ1DmrcXj6dMtzh 83HvP0dk4MKp8lXdFoKCATQSIAES8BUCUdQH6EtfmQznQQIRgUCeOpX0YSwZ/1/oREQ4Lh4DCYRH AjXaNNXT/nPBmiCn323GKPn95JEg92tVvpqcunJRNqpCADGjR5dGJd+VBsUrSHT1hWrtgd0ybt0S uX3/nvRTyY7fyZEnyP64AwkERQCiWO3atR2EB7SDiIEQyPTp02tBIF++fDrvFESAFStWSJUqVXT3 yCsGwadz584ydOhQ6dmzpyAHGgSslClTyh9//CExVG49iCgrV66Ur7/+WiB8IEfap59+qn/s54mc T+gvY8aMWnCA4PPkyRNJkyaNzTMNObc++ugjLdi8+eabuv9YsWLpcD8ISHPnztUCH9pcuHBBD3Hk yBGBoAbhD20hfpl5YwfcumbIkEGeP3+ujxmCIUTAM2fOyBtvvKHHhmAEBibnlytztR7fqFGjHBiA BeZknevRo0fls88+04INtr/++usCAQfCGTwDIWaZYwT/q1evahHz2LFjEi9ePC18JUiQINDzkTlz Zn2ecR3gmN9//30dmgvWEI9wnr/88ksx2zt06CCjR4/WIhfywMEgXBUvXlzat28vODZXzwuuLYh6 QZ0Dq6B06tQpLZ5CoMIxQhyEAAsxN3ny5IJwTZw/eElC9Js9e7bmajjZ8924caN07NhRi3IQUXGt Pn782HYNTZ06VZ/rwK73v/76S8qVKycPHz6UggULarEV5wj266+/ajbmbyldunQ63DlOnDh6jvjb c0eYsR6Mv+Tg6RPSfcZoefzsqQON9wu8I59Wa6AfSjlstKzgvbYFBhdJwMsEgnOv7eWphmh4Svgh wsZGJEACJEACEYnA+j9/d0kswzFP2LBMVc38XYq+nlsmdfhCmpSqLGevXZbOk3+SQYtnqBt9kS/q NKNYFpEukHBwLBAD4BkDj5mg7MGDB4Lwzrfeekt7LcF7CB5SECrgyQTBBfnLYPBAg2BmbxA7evXq JUWKFNEeVBBkIGRYPXUuXboknTp10oIcxBMkrYeXFIQ5CDd37961dRs3bly9HfnbIDoZg9caBCPM zzzjxVjnzp2TJk2aaM8fjAGxDKLG4cOHtcgBoRDeRBBRXJmrGc+8BsbAOlcIRfDmw3iYE8QdiGEQ hoxYZ/qEFxbCJiGyQUyDV96aNWskqPNh2ptXHFPevHm12Hny5EktLppteIVIBwMzYxCjYNgWnPOC Nq6cA+xnDOcL+d9gn3zyifbsM9uQd2/OnDnaKxK8YsaMqYU+sx2vVr4Q3OAphz7BDXwhfmEf+2vI 2of9MkRNeCHCuw2ehvB2hCebM6tcubL+W8L8IE7iHEFoo7mHQN6M2eTrei0lelRHr70VfyiPxPVL 3TMQeyEBEiABNxCgYOYGiOyCBEiABEgg/BK48/C+jF4dvCTlKRMlkQENP5JEKpnxKNX2o/GD5dDZ U1Lr7dKqEuZXUu7NguEXCGce7gjAcwcCTIoUKSS68noMyiA2wBMLIXBfffWVFskQQgjPrkaNGgXV XG/fsGGDFnw+/vhjHVqHlblz5/YXNol9IIrVqlVLCw7wPMJcIS5B3NuzZ49tLIQWIpTRfv4IKYSn GHKpQdiDGfEH6+GhBEEDnlYQADEGvOnMcUBccmWutom4sGCdK7zr4KkEsQ4ecvCyw3ElTpxYh/RZ u+vXr58OfcW6ihUr6k0Qb9xxPqzjwKMLnlgIe0SILH7mz5+v12FbcM4L+g3qHFjHDmq5Ro0a2lsO +yGUFt5eYGA1K194pkFYRGikCV+FBxjCJO2vIWsf1mVcI+vWrdPXHa5RGIQ4cw6s++L6RBgyRF0s ly9fXo+/e/du625cDiWBYqrq9Oc1PrSFDFu7m7N9veCHRgIkQAK+QICCmS+cBc6BBEiABEjAawTG quT8tx4Er9ogqmIiqX+TEd/Igl2bBQLa2Daf6zxm8WLF8dqxcODISwBf7oNjCMeEANG/f39B2B7C MuHJA28nVwxhkDAIVQEZvJ9gSFiP/cyPEbzMduwT2PybNWumv1ijnRF/4NkG0Q8CGdZhPqZ/vCI3 FgweXa7MVe/s4i/rXCHwwSuvaNGiOnwVghTER4z77Jn/JOYmnxiGQRgmDGGVsNCeD92J5ReYQcBD uCF+sIx1MMPdlfNiugzsHJh9XHm1MsD+4GAYmPZWvmau8KC0mnlvtlu32S/DmwzeifBSC67Zn6fg tuf+AROomLewdKxcx+kO8DKDtxmNBEiABLxNIOjHkN6eIccnARIgARIggTAisO/UMVmzP/ieA/jy Ne+3jYLwS9i7+YpItlTp/N7wNwmEAwIQdZDsH15bq1ev1h5ICNOE2IRQt6AM+Z1gECMgFjkzeFnB ENL5wQcfOOyC/Gnw/AnK4MWFHFrwkoK3GkIse/furZuZMZC7bfz48Q5dQfBAyCQssLk6NHRxBfKV YU4Q79avX68TyaNQAcIYg1O1MrTnw366EAx79OihvcywDcKeERENs+Ccl8DOgf3Y7nyfKFEi3R1C eq1m3mN7UOGS1mvV2geXvU8AXtl3Hj6QqXYFd17KSxm6fK7Ejx1XSufK7/2JcgYkQAKRlkDwHkdG Wkw8cBIgARIggYhG4IlKODx0+Rx1Wx7y2jchbxnRaPJ4fIkAEqrDkPPJGMItjcHjCgIWcklB2EEI HKpTIh8XErDDjJcPkqs7M5NnzIRJYh+EXyLvkzEk+YehkMDbb79t+0GeNYhzSP7uqpncW0j+juqK SL4PQ840hPahYmamTJlsY0AgwhgY25W5OptHUAzQBuGE8CRD0n2E70Esw/vgHJsr58N+fvDUQqhh QIbKkgh9hVcefrCMdbCQnpeAzoGzObjCzlk7+3UmhHLt2rX+Npn32B7U9Y4QTohmyH1nNYQk07xP oFnp93Q6A/uZvHj5QlfORAVNGgmQAAl4iwA9zLxFnuOSgIsELpw7LydVkmRYsRLFJbrKq0EjARII PYHpW1fLuRtXQ98ReyABHyNQsmRJnUMLHlcItYRHFqpeGoOwhOTnSMyOJPtZs2bVObhQgRE5pmDG C2nGjBlaoEJ+MavBIwpCBRLbY9/ChQvLwIEDdfgjigfAEDYHQQ6J2hHSh7xiEPE+//xzKVCggBa4 XClSgL5QqRCJ+CFyNGzYUIznEbb16dNHkEutatWq+hXiCPKFwfurXbt2OuQ0qLmiH3uzZ2C/He8h kkG8GjFihOaAfFsIdcTYhoOzdtZ1rpwP6/5YxtyQKw2J/VH90plB4Fq61C+BOpaNhfS8BHYOTN/m 1bBDvjR4EcJDMCSG6qe4tnAcgwcPlhIlSuhCFMgphqT9EMxy5MiheQR0vUMIbtWqlT5HuL7btm2r i0GgkijNNwggNPPeowey7uB/eQ0xs6fPn8nXcyfI9007yhtpM7ltsufPnpN/VNi0M4PYi7yC6TJm kBTq/2do7bD6X3D92nXJmj27pEmXNljdhaZtsAYKYueAeIEV/t+mTZ9OXlMPL2gkEBEJUDCLiGeV xxShCAz8uresWuoXTjJi4s9SpUa1CHV8PBgS8AaBf65ckLnbN3hjaI5JAm4lYDx5rJ3Cuwriwvff f6/D8EylQYhIEHfQBhUke/bsKS1bttRNEXLXuXNnXdUSKyBGYP9Ro0Zpkcs+dBLVDZcsWaITuCMP GgziEQQMVCM0hjBKeIXNnDlTpk2bpj2wIGwNGjRIe7SZ/eyPA/PEjzF8gYVXHBKyW8UfbEcIKYQ/ CGdNmzbV/SLHGY6xTJkyugtX5qp3tPyyZwDRBWada65cuXThhHHjxkmlSpX0nCEmwqvNPh+ctZ0Z BuvwE9T5wD5WHq1bt5atW7dK/fr1dSiq/Xb0jwqPKARhlvXCq1+unhfrmDgH9erVk4kTJzqcA2vf WIagiRBQCK5I0H/jxg3btWfd1xy//TrzHuMvWrRIC14IMUU4PNrgWjCCV1DXO/qCmIs8bgsXLtTi W6pUqaRatWpafIsVK5YeDv3am7N19vvwfegJ4DyjCMC9Rw/lt2N/+evw4ZPH0mPmGPmpRWfJlMI9 oszaFSul/5f/PUTwN6DlTWEVbj5i0vhQCWfDvhsiG9aslU97dpcOn3Wx9B70YmjaBt2763u4wiuD ehAzfMI4yZM/n+sdc08SCAcEoqgPHkaUhIMTxSmGHwJ56lTSk10yflqoJ31T3WAWezO/PH2VFLio 8jCbudh5Nb8Vi5fIiO9/lPwFC8h3Pw21jR3QetsObl7w9Hhunj67i2AEarRpqo/ozwVrbEeGj72P Jw2Vw+dO2daFduH9Au/IZ9UahrYbticBtxNAHi2IYaj658yQ1wshhMgnZm/wOLt69aoWP0weKPt9 8P7MmTMCAQ0iRECG8EHsh8TrAc0loLaursffNsZA3jJTUdG+rStztbZxlQEKDxw7dkzSp0+vKzBa +wjOcmDnw74fCHL37t3TIanwogqJBfe8FCtWTFenPK48310Rk65fv64FTONxFpI5mjY4VnMNBXQ9 BnS9r1y5Us8X80cV1ezK2wdeiRCEUW3TCItmLL56h8BjlSqh+4zRcvC0o/dX8gSJ5aeWnSV14mQS 2nvtyWPHa8EsoRJ2333/PX8H++TxEzmncubt2/O7FmhTqlDmJRvXCl5DYm0+bBpiwczWtlcP6fBp 55AM75Y2hhfC4fMVeMvW5xP1oOL61WtyUYnR+K4SQ30ODBs3RipXe9+2j7sWli1cJKN+HCZ538ov g0f85K5u2Y8bCDi713ZDtz7TRXSfmQknQgIk4EBgybwF+gPozXx55cihw7Lz1+3KhfykZMmW1WHf G9dvyPEjRx2+JAS03qEDN63w9Hhumja7iUQElvy+za1iGdDtPH5IkG8lahRHD4VIhJaH6oMEnAlh 1mlmUl4BARlEmMBEMNPO5JAy75294ouWySXmbLs71sFLBeJgYObKXK3tXWUA8ShnzpzWpiFaDux8 2HcIjy/8hMZcPS/btm3TRRcQyovccK6IZZgX8su5y+LHjy/w6AvMArre+/btq0NYEdoJ0WzWrFna +w3hnhTLAiPq2W2xoseQAQ3bSJcpw+XEpXP+Br9295Z0mz5Ke5r52xCKN5myZJZBw4c57eGvAwel YfVackUJrBuVh1iDpk2c7heWK39SHlvPlCgV2r9zd83x9Tdyyqylixy6O62qFbdp3ExOHD0m0ydM DBPB7NbNW06/5zhMhitIwM0EeGfvZqDsjgTcSWDeLL/ky20+7iCly5fTXc+e6ui5dv3aNYE3GgzV opBr4J5KvhzQer3jq19379yRPTt3yYrFS+VvlTT56ZOn1s3+lm/duCm/bftVli5YKNu3bNXjWHdw ZTw8hf9XJZxes3yF/Lp5i1xVT3bt7bnydsAxXDx/QW/ChyTcwfG0j0YCoSGAG+4JG5aFpgunba/f vS3L9253uo0rSYAESCC8E0Ao5vDhw7XYBM+s8GaYO4odIAwzefLkOlwUYp6zyqrh7dgi2nzjxYoj gxu3l3TJHPOHnVd5R+GBFiVa2H+FxcPqarVraryb1290wOzK/ax9I3OPjntcZ3ZHhbNjm7mnf6By It65fUcev4o0QRvca2MfE/J9VlU7XrlkmezavkNwTx+QXbpwUdatXCVbN26Sa8pzGN6l6AfLobWM ynO4fZdOupvfd++R+8ob1Go4nt2/7ZTlixbLxrXrHLabfc2x4TjgMQzREm1OnfxHbr8qEoNCNJg3 WF2+dMm2bPqwvmI//EB0pJFASAnQwyyk5NiOBMKYwJ/7D2ivsvgqtKR85Uo6hAU5EBbMniuffdFT J2E2U2jf/H/yuxK9YAf37ZdSbxXSeRLw4elsPfIoQBj78dvvZMKoMYIPfWOJkySWvoO/k6q1/G4S zPpxw0fK8MHf+6vKhaf5dRs1kB69v5bESZNIQPPAeDAc06dtOzgkWq34XmUZMPR7SaZuYmFHDv8t 1ctV1GEc3w77UXp2/lQQFlO+0rsyfqajYKgb8RcJuEBg+Mr58uBxwJXlXOgiwF0mblgupXK9JYnj xg9wH24gARIggfBIAMUd4I2GIg6uepf50nEip93Bgwd1HjN4yaEgAwpZ4JhovkcgcbwEMqRJB/lE pU+4eueWvwmevHxeEmVKK7dPORed/O0cyjcxYsTUPeCBsdVcvZ+1tsHyP8dP6PtbLC/ZsFYgylnt s3YdtaBUQd33j5sxVXp2+tQhnNOsa9G2jfa4wsNnY7iHHzJqhJR7t6JZpYW1Hp901g/GzUrk/cun Urjs3bVbMmTKKJt+9/sOYbaH5DXHG2/oZhCn4HGWK08ewQPwr7v1lAVz5uqIGdMvCpgVLlpEun7Z S6eSMevNsf2vfVvZveM3/b0B23LleVMO/+mX227/3j9s33OO/HVI88Hx/jxruulGv0Jsq1H+Xb28 bNM6PR9/O/ANCbhIgIKZi6C4Gwl4msC8mX7eZcgDgBs6fBgkVU9Db6h8ICuVN1jtBvVtU4L32SPl WYYPB+xTqlxZya0+XNDO2Xo07PxRO1m9bLnu4+1iRfUH56qly+TcmbPSqXVbeXD/gdRv3Ehvh2fX kH4D9NMeFB3InTevetpzUj/RwjwTJ0kiPfp8rb3gAhoPlX7qVn5f58pJosS1arVrqZwHF2WTetK0 btVqOfr3EVmzY6vOg6MHVb8gkvXo1EUnCoYbOCvwGDJ8DQmBX48cEPyEld1VFb7Gr1si3VTiYhoJ kAAJRCQCKGQQEQxCGap90nyfwGuJkipPsw7Secowuf3gvr8Jx4gXRxJmTCPP1QPfaE6KNfjbOYRv 4BW1fvVq3TpXnty2XkJyP2sa586bR3LkekOOqgfD8JyyCmbwmNr2Svyy3uObtvavyCsG8bpYyRKS LkN67T2GiIzuH3eWzXt3STwVwgxr26S5jgpJkiypNGjSWN/L4wE8xDJ3Gh7SwyDGpVMVlGFD+g2U OdOmS8xYMfVDb4h04Lpp7XodsfJJqzaybud2MYU3dCP1a+LosXoRVUoTJU4khdX3FPQLp4AECRPq vpCzGd91cCzgBn7ISWcMfGHgDfGORgIhJUDBLKTk2I4EwpAA3KSR3BJWq349/YqnMTXq1RF8QM6c PMWfYAY3aHyAQDDLnuN1+WHMSN0Gv5ytx9MoiGX4oJ224Bf9YYt9u/f+SnuAIeQSAtl71avq9uNH jtYfsBDtUKnTWE6VS2TU0GHy+6sP3cDm0afHF1osK1m2jPw8c7pKDOqXgBr5Dt4rWUbOqMTT+IBs 1/kT071+xROo0VMnK1Eusb/1fEMCwSEArzJ4l4W1rd6/U/BjbznSZJQ6RctIhTyF7Dfp9+v//F0W 7NwsRy+cdrrdfiX780/E1/k9UFXe7j18IE9UQmtXLGb0GBI/jspPFTOW093Zn1MstpXkZ0OhF3i9 +Odh/86XrpemI/vZT0/Cw//7uurzrbwbP99MfxlTpJLvPmwnn00dIbiOrRYzQTzpOW2ktH2vrmR5 LY11k8vLSP3xs7rHtdp9FQZ54dw5Wb9qjdy+dUsQ6dG6YwfbLiG9nzUd1Gn4gQz8qo/gITUeNhtb u2KV9sLCQ+VyqrJsUAaRadj4MapoQRW9a4dPu0iZgm/rB+vwwipeupQOv0QKFXyHmLNsiWR7Pbve t3P3bvLV593EPJwPaiyz/fmz5/4iTZDo//Kly7Jh9RoZqQqPwd4pVdImXK1QlZRhzVq38nesrTu2 l3KFiupwyZOqgEguFS5tNcz3xzGjBA/pEc0Cmz5xshbMcr2Z2/Y9B9EyEAJvqjzO61auFrA1tnLJ Ur1oXWe28ZUEgkOAgllwaHFfEvAQAeT3wpOSVGlSy9vvFLONWq9RQy2Y4YPw8F9/OXzA2HYMYsE8 dUGII55MGcOHUttOH+scZfBkQ24ziGTx4sXTu8AFfYvK44APQwhecAfHT1CGGxLzJKtb7y9tYhna ZVMCHz7sIeDhxyqYQdCbMGemzyQ7Deo4ud13CYxZs0iQvywsrbQKxwzIthzeJwMXTpU0SZJJrnSZ /e2Gap3YBgusD2sj9vcfDV/nB5HshspxB4sTy7Xwr/3798vo4SOkSuXK8r+W//vvYNWS6W/uzFmy S+WE+fTzrpL99df97WP/5qESjDGH6ImSCMQBY8jrtHfvXhnw4xC/VS9eyvQpU2WxemiSImUKKV6y pPypwthGjPH/hTKg/tCJmR+WXT3ewPp7rMJ7XOWHvDfdPusqJdQXxdr16jocL6ojdvn0U3n89InU bfCBvOvkS+mPQ76X48eOScZMmaTHF71wGOKu+enOguhv6fLlMmbsGDl7+oxMnjFNsmTNapoF+OrJ +QXnfJgJc36GhKhrL/Dr2dlnwH//75Orz49M/3Wmlg6dDc3nh/v6G6A+w1InCZv+IBh+06C19Jw5 Vp4+f+bv+G/cuyPDls6SH1p0lhjKAym4hjy63/X5JsBmBYu8LQOH/iCp0/oJciG9n7UOUFP9bxrc t7+O6MD9PDylYCteCTzV69bxd59sbWtdbq3yGxuxDOvTZ8wgadKlVWLfeS1EYZ2536+kKoEasQzr cQ9fQaVDCa5gdkhFi+S2uwbRnzFwQioVYz+N9/MUg5eX1V5TFZVTpnpNPSw/LWdOnXb4PvO/dh/J +zWrW5s4XcZxVK9TW6aOnyDLFy+xCWbgitxl8EoDbxoJhIZA8P+zhGY0tiUBEnCJgPkAwwfKL+pL kdXiKvEKSUBnTZ4m/X8YbN3k8jKSZ8IOKgGsSW0/DzZnjf99td/7tWrI4nnzdYL+lg0aCcq5v138 HSlTobz6IKpje5LkrA+sQ/imMTxVM0+LzLpzZ87oxX//OWVW6Vfs5yuVgfxNjG/CFYGYCePJ6gOO Xl/uPIhmZapIs9IBhyyV6+uXJPuPU8ccBDOsM9a7XkuzGOhrWPW375R60msn6IVmfuzP7wuyOZnJ 4ic0i4G+onLbhnXrZbfKtdSyRUt//zPxhRt5J7//brD2RpihCsHEjBkz0P7Ovcrbh7ZWwWzr1q2y aNEim2C2UXlU9OrWXXLnzi0FC/jlt8H2WdNn+Os/oP6wE8Yw5urxBtaf1SsvqP6e3X8o81SunISJ EmrBzP547yhBbbaqjgiDF0nD2v6/SN1VxXJ+GDRYkFT6rbfekiEqzyfMXfPTnQXSH+ZXR4ULxo8f TwoVfltSJk4qQR1zUPPbuGmjLFMiXJsO7SR/jlxmCoG+eup4MYngnF8z6Yg8P/vPgJfyUsr33acP fZ/+/MhkMPit+9fv8yOKRBH7tv52fPUmvPZXIHMO+bJOc+kzb6KOeLAeGzzIUQwgU8rU1tUuLSMK o/YH/90HoyImHgwjoT7uP1t81Maf0BTS+1nrZJCvt2zFCjodyQol8kAwQ460HcoTDIbcwK5YTOWF ZW9p0qXTgtmTV0UCIEbB3syXz37XEL+35jCMqiopv6aEr7Rq3IpV3pNGLZr5ywtY4O3CgjDRZSo8 ctOadTpJPx7I371zVxcnwyQeKu9rezMP6u3XO3sPXhDMwA8ckVMZXGHgbPIjO2vLdSTgCgEKZq5Q 4j4k4EECeKq889ftesQDf+wT/DizJfMXSM++X9tyFDjbJ6B1V5T7NOzyxYv6J6D9LqntMHzgzFyy UH4eMUp+VR9IqPKzZf0G/YPQzV7f9JaGzZoG1I0uyW02ospmQIbKnvaVdQLal+tJwFUCT+7cl0Wf fycLdm1WYY+b5N6jh642dXm/qZtXyr9X/P5eAmtUILOjJxDWTXrVqO88sxRYL/9tc3d/b2X2C9f4 bwSR0MyP/YnEsnypua68IVwxhNrAQ2ryzxNk06ZNUq5cOVsz9Ldd/R/F/+e2HdrL3SePlOqgflww 61yw+8iRI2Xgt9/aWi5S4TN4Ir9y/Vr92XLl8hXppUKGApq3fX/oyLouoHa2Ae0WrG3NJqvAF1R/ N+/fNc30q7P+zA5bVKW4M5cv2jyosX7B/HlaLMMyciPZj+esv+DMD/1azb6/9evX62pufQcO0Ocf Hnr2c7C2t1+27w/b96t7iDEjRkp1Ve3vetp09k0Cfe+sP3ceLwZnf/5PwchVAacOeMvJ58dbmfw+ UyCEBffzI7z1V/KNfNKweAWZ9es6f9Diqb+TtElT+Fvn6pvMWbPI198O8Lc70qLg4S7SnyDH1rJN 6yVnbj+xGYKascDuZ/Fg24huZn/rK0Qe5O9F2GCvb/rImhUrddoShCbahyda2wV3+fIlv/sS5Bp2 h+V9K78sWrfa5a5QeKxlgw9t9/YoMJDytdcks/Kc3ff7Xtt6lzt0sqNhhsgbcET+ZROO6ar46KRb riIBGwEKZjYUXCAB3yCASjIopZxBhYO0+Ki1w6TgWfBd337ay2zxvAXyoXqaE1xLmz6dzhmG8Evk MQjIolrKdhdRoaH4gaC1Y+s22bJhk8q/sFQ/Ofr68x5SToV3wiPOmaVNn16vjqaeRP1x4ohK7hlw WBLcq2kk4G4C8WPH0R5gdYqUCTPhDGEzAZnJQWPvvYX9sa5X7WY6h1lgfVj7Zn//0fB1fhAEkiZI pHOYITTNFUObNm3aaMFs2rRp/gQzbEOeSRjCCk2fCEecO2uO/H34sCRWSZKLFi8uFdX/ZRjajFWi Sb48eZX3UnyZO3euVK9eXZ4qb7DjKn9Mx86dZNCg71R45u86+fLoUaOkmGqPcKVT//wj7T7uqPvB r8OHDslalSvm4vnzkvP1HFKvXj3JmTOn3v7333/L4sWL5V0V6rNOiT97du+Wr9SXweQpHL/MQshZ pdIPXL50SYUdZpGKFSpKyhIlbeN8q4S8PCpRc3LljTFr9myJGj2a1FChN8jTaeyZqsA2d9Zs2afC bxKpZM/FS/mlGIgaJapmjuN2ZsXeeUd+27FDVq5YIVVr/Bf2s1jlDk2UOLGkVImm8Vlr2EZ9KbJm 5Sr9Be/atWu6uiKS4GN+EJWunr8o8xcsEIQ97VVFcnarL4l58+eTajVq2PJvLldfjC9dvCStVBoD zAs56v5UeUfXrl0rLVu2lD179sjUqX6h2Xt37paXz19IHVXc59rVq9prDucB+YOKlSguZZV3dzJV 4MfY/bv3tBc4iue8rsJzq1VTxXmUl+D27dtl65Yterc502eqVA93JGnSpLJejVmtZg0ddoqN+GI/ afzPkk951ZVU4aynlbc3EmnXqVVbC7a7du2S77//Xl5TX3SXKVF105bNcltdbzlVmNUHH/p5naOf 48eOK04r5V0VSrzj11/1ecH5T5M6jT5eZ+cD/ELy9wF+EbE/Z58B//2/zwTM/ix3evP5sUmctfW3 86s3nu6vZ62mslA9sHLH/FqVx99rFJm5ZbVEUfeo8Cr7UHl3hyQc0xkbrEPBrK8G9JP9StBBCOIg dc89+ZfZendzPwsvq30njwZ4P4u0W8jDFZAhQgOeT5dU8as/du+xeUS5O99WMvW/F2GPyMXmaUO1 zP81bKy/N+DBe59B3+riBGYe1ctW1HzN+9C8gtvhL/7SHBF6Cq4oggbONBIILQEKZqElyPYk4EYC uEFfMHuO7hFPSJq29p+7xgyF3GLI9zVL5ZqxF8wgtjkz6/os2bLp6jS7dvzmkCcBCTTHjxwlL1SF yirqhjpr9mzy86jR8ujBQ9t7uF3jp8n/WkiVUmX1F4vjR476E8z8j+eXgwVVL/FECYn/rQYBDjnO UryWUho0bWLdxGUScCuBsBLOggrJDOogUAwgoIIAQbV1tp39OaPi+jp380Py/oAS+Ac0q5SFCkuh QoVkgRJiRikBy4So3FMPLZYp8aVIkSJSvkQp3RyiV+UKFeSMCm9/44035LwSs8arIirNmzeXyZMn 64cwvb/6WlKphxpXlAiGz5qMGTPKvn37dEhmt24q+fPsuXJVeZTBu2KeEt4yp8sg69at8wvZfJXj B3199NFHur83lSfE7JmzZODAgTJjxgypU6eOHDx4UHr16qU91y5cuKDn9m3/AZIuWUp/hwkRsFmz ZvqYCqjQT+THHPLtIIEItVIJLvj8QD8Qy27evCkZMmSQi8qj7qcfh8psJZ41aNBAV1GuWLGiFnTA 4rbK+zl+9Bg9TjwlkAfG+13V7uiRI7JZVWpr27KVboMQzc0bNkqjRo20eIUHPGbeEKCWq7DGtGnT akFqyJAh0r17d5k0aZK0aNFCjimhauA3/bTodFUJXFmV98ScGTNlQO++et4JVNLw5QsXy+bNm6XP F1/aWPz222/6OEuVKqW3QeCCrVOC1i113LWqVZd31WfsdRXCBN74Ir9EiXpIiwDW6dXDKIiUFdS5 x7hvv/22rFAiYM+ePWX8+PGCsKzdSrSErVcCWN7cb8rDW3dkUP+BUqpYcUmnEoTDLj+7rNd17txZ h6luX79JcL2MGzNWzHn88ssvpW3btloQxXmBQDlTVb+bOmGSILQ3derUsv3MJt3P9ElTbO1w/lOq 3HmBWUj+PiJqfxt7jwjs0Jxuc/f/K3f3VzFvYcGPu6xV+Wry02i/4lYTxv/39+Su/tEPHt527tlN WjdqohPnozAVHmRnyeZ3P4v/oYHdz6Kqu6k072xeENNQyGvSmHHqb2iijiwx65ztH9J16dT/CFS6 P6j+19vbbRUqGZaGipaIHIENHTdaFxGzjvfi5QvrW5eXrd8vTCOw/FZ9TiFCJ4l6KACrWV/lsQxE tDRt+UoCQRGIGtQO3E4CJOA5Aqhkg2SdyN1VQyX9DMiMi/GRQ4f1kynsB68B2LWr1/Sr+eVsPT7E 9dMx9SE6ZdzPZlf9OmnsOPlx4HdKNButb8qxcu+uPTJs0BD5SeV2sdotyxOrZCmS603OxsNTtIrK 4wDWr9eX2mtBv1G/8GHa5aP2un98uNJIwBMEjHA2q1NfgdiF9zQS8DUC//vf/wQC2cKFfh5lmB8E NIg72GasU6dOWizDtsPKwwziUpUqVWTKlClaQDH7QXiByANRrEePHma1fkW7YsWKaVHtpMo7CWHM apeUJxjGgffV2bNntdgGoS6G+kLSvr0KDX31xQhtkPsHYhw82ODxZG/Dhg3TYtk/ymsKYsvRo0e1 CLZq1SpBYn5jOPY5c+YI9junqtYhVxtyqsFwbAhXHTBggOxUud4gHI0dO9Y0DfQV/dRQ3l8Ql8AC hrGRbqBuXf95zcACYhl4Yg4bN26UY6ooAEQjCIhWS6LCnk6cOKGPB5xxntasWWPdJcBleHB98803 ejs8AJcoT66ZM2dqIWzixIly4MABgafXLJWDDZ+98OSDffLJJ1qcwvx/VV5dOPfwfOvdu7cW8yDs wZYtWyafqoIHwTHreYS4hzGbNm2qBVkcJ4RcvNpfS9Z2zs5/cObAfUnAWwRKqYe7qFgJW/SLX6is q/ezR5QnblBWt2EDvcuKRUv0AwAU4jJiT1BtXd1euVpVvSu8ghGyaAxebX17fmHehskrwtqN/aW8 aY1B8PpeifZ//xU0I9MGr86+X5jt4AZ+eDBvCh0YvmYfvpJASAlQMAspObYjgTAgME+FlsAQ+ohK NwFZqXJlbd5cs6ZM07uZCj7/qJvXD2vW0QIUNjhb/2a+vNL8o9a6Xb8vvpL671eXr7p2F7hHIycZ DPnRzBw+aPKhXrdi8VIp//Y70u3jTtK0Tn1pUc/vwx7zfUOFf8CcjYf1Xw3sr0NdTh4/IZWLl5Ku HT6RjurJfsn8hXTISUL1tLplW/9f0NCORgJhSYDCWVjSZd+hJQBvJ3iWwSPLGJaxDl5WMAg+EGWy ZMmiE9WfOnVKi05oC4MoZKxmzZrasws50uBBFRzbsGGDFsVq1aqlhSWMgwcvEJLgtYaQQmMIp8yf P7/Oh2bWWV+RqwtecPCY+kt9iYPwBa8p2L/Kk8MYRC0jYCEEsWDBgtoTC9uXqpQAEOsg4hnD8blq CCWFIIeQSNj8+fN1uCK8tawGTzyEYUKMhLcVqoriWBOr0M3Tp09bd5V+/fpJJuWFAoP3G2yz8ioL qUEMw9g4lxAnd+zYISgMAMPYOPc4L5hj+fLl9Xqck9WrV2uRD/noQmPW82gEug8//FCfO5x/HCNC PCEoWs3azrqeyyQQngjAO+k9FboOW/zLPO35iuWg7mfhidb1q6DFKFSOxP24MfMw3Lx3x2ulqlX0 GAiPbFitlr73xv17wxq13ZI/LLA54tjMd4KPmjSXturns3YdpYzybB0zbHhgTZ1uM33Zf88xO1v5 YWz7ypxmP76SQHAJUDALLjHuTwJhRAA5RNapHCmwmvXrBToKvujU+sBvHyS2RHLRoiWKSy3VDl9A 4JIMbzVYQOu/6NdXhowcLimUtwDCIRHeiVwNiVTumy49ukmj5v/lRkMOgDFTJz1V2isAABeCSURB VAmSff6rnvQvUKE76B9Pcho0bSxjpk3RYwU2HvKmrfp1s/Y0u3f3niya+4vKgbZc5VS5LcVKlpAZ i+ZLthx+nghRokbR/UVRN/40EvAEAQpnnqDMMYJLIGHChDrUEV5NEJgQcglxqX79+oIwPxiEC4QH wQsLopn5ady4sd4ODyBjwRXJTDu8wtMKhkIBZgy8whsKZrZjGaJNYIbPuyZNmmgvLXhDQewx+buQ l8yYfUVlHLOp/objRk4tE6pq2rj6CmEMYg+EMghPEBYhBtqLTHgP76qiRYvqkEyEySJ0FFytc8W4 1vma82Pm6+q8rPtBRPzhhx8knapAB0+t4iqvXKtWfiGk+PwFA3hrWItCoH2aNGkEoa5BVU+1juVs 2XoezXVUqVIl2/nHnG7cuKF/rB7n1nbO+uU6EvA2gWivxOSg/idWr1tbTxV5wEwURFD3s7hfhpel MTOWs3vamqq4Cwz34qXVw3B7c9bWrDOv1jbRXv3vja5yPsLwPwn31xUqV9LfFXDvjfv3HCp0H/f6 sLjqAUxQZv6mg+Jl7Qf/vybMmiG58+bV4hyKHCyeN1/nUuyhHsqbQgrW/7nmmMyrtT98n3m/Vg19 TNbvOWYf8DMegXVeee+ZbXwlgdAQCN2jp9CMzLYkQAL+CODD9e/zZ/ytC+zN5+rpFX6s9v3oEfLt sB91Vcqkyf9LCBzQ+toqoTB+kNj5/NlzOjkx8h3Yx/zjA/fd96von39OnJTbKrcKPmDTq2o31psC M5eAxkNRgLHTpwjypOEJEb5swIvN3gUdFW9OXrtkuuMrCXiMgBHO6hQJu+IAHjsYDhQhCEAggVcZ 8oRBJIFAYkQTHCA8nWD58uXTeav0G8svI9xYVoVo0YyDsL4PPvjAoY9sKjcmcp65YvBKgwAzfPhw gVdYCpWYesyYMfLxxx+70lzvg4dDCN9EGKXxTnO5sdoR3mkQyOA5Bg8peJtBiLS3P9WDJOyH3HDw jCtcuLBAyCxdurQ+Bvv93fm+f//+Am8thN+CO3KjQZhCLjoY8ojBECIb1mbOP7wZzbIZE/cIZi5m HV9JwJcJNG3VUvATlBUuWsTp/air97PoHwJaQGbCJOt92FCciUTO2jpbZ/qftdQvZN28x8OJ27du y4Ch3+v79WMq3zA8tTD/ccNH6t1w3x+UNWvTSvATXIMotmTDGp1u5pLy0E2jxP9UaVJr0at1h/YO 3QV2bNh5+M/jpK8qHnD/3n0xqWBMJ2fVA6W7d+7qz4OaKqcZjQTcRYCCmbtIsh8S8BECSFSKp1/2 FtB67IcnW/hxxUzC06D2DWw8bKOrdFAEud2bBCiceZM+x7YSKFmypPYuggcWPMkg3LyjqjwaQ7J1 hCseUjlzMqlQIOQYg/3xxx+q8uUgLfaYKpamTUhekXQehlxa8HoyNnr0aNmiKjEi+b8rhlxoEKEQ Eokk8saQtD44lj17dh0aifBIJM2HgUFwDHNAfjCEPoKhvacW+kJIJR7uIOm9CXvEexQjCI6hcAFy msFTEMUDYEdU4YHADAIdvC8gJkLggyH81Rg8ySBebdu2zZ9wCCESBQTwajxDHj9+rJthHjDkjYNw CQtqHtgnr/ISQZ8ImUUFVxhy1LVr1057tkNIpJFAZCMQmvtZJONfrHKjwWvLGtXhToZzpk6XAV/1 1gn3d/y5T/IXLKC7f67+hy1SYaawXHnz6New+gVBHd9LnH03CcmYeMhu/6AdD+K/69NP/69GaCbS vNBIwF0EAveZd9co7IcESIAESIAEwiEBI5yxOEA4PHkRaMrwMEJSe4gc1mT/5hD79OmjvyhUrVpV pk+frsMMUb1x3rx5Nm8ks29IXyEmwasK4aGocAlPIwgyXbp00aGiEOtcMYRRIgwTebaQ1B6C1Oef fy7wpgqOGbENPNAPEv4HJ4cZxsIxISwTifKdhWNiH4hk+MI3YsQIne8MRQcQlgjRLziGSpsweIqh iAPOD5LmB2YIG4U4h6qXSOg/btw4W2400w7bIIYhBBfCGapjItE/BD2wNt5g8FDcv3+/QIDFOuwH big2gBDToAyVVOHJB+Gwb9++2tuudevWWnBEDjUaCZCAawTmqyrEjarX0vmD8RAE1RxNfi7XenB9 L1SljxEzpvK8uiNNateT4UN+kG9U8a138rwlqG4PYal5G7+cxq736lt7Nlf5lEsXKKzT2iA/Z8t2 /z2I8a2ZcjbhlQAFs/B65jhvEiABEiABjxGgcOYx1BzICQEIVPA0gpcRqhTaG6pU/vjjj1pQw3YU BEBFsSlTpkiZMmX07hB9jLeRaY/3WG/Mfh/77cj3hbBFCC2VK1eWr776SoxIZ81tYz+O6R+vGAMe agjhhMhTtmxZHRZpBCWzr/1csB79mr4h/CCfGjy20A+8xJAXDWY9Jr3C7pfpw4RlYrM1HBPHYvrI lSuXPk4k3YdQVqdOHe1Rhfxdph/Tvf17rDfrIM5B3INQiD4ggNmLn2Zf01+HDh0EXHCcOF6Ik7Vr ++VUMvODAAfBdOXKldrTrnPnzgKhDW1g1VXScniVQZyDMInraPDgwdpbEdzQtmvXrnpf06d+o35Z 55NJCaLweEP4LNog4T8qnGL8zz77zDTRr9Z2/jbwDQmQgJxTIdS7dvym/waRgqTPd65554YEXfac OWTYuDE6BHP/3j9UtfshMnX8BF1sK4v6Hzxp7iyduzgkfftCG6Qo2LZps1xWnstIJ9Pv+8GSNXs2 X5ga5xCBCERRF9rLCHQ8PBQS8DqBPHUq6TksGT/N63PhBEggshOo0cZPXPhzwRq3orj36KEs2LVZ FuzcJFhuVqaKNCsdtJeGWyfBzkjAjgBu6VAYAHnL4DkVVoYk+Rgnc+bMtlDBkIyFPuARAE+okBo8 sJAPDV5OIcll5uq48AQ5duyYpFf5fkJaaABjgR082sDOVUNlTIRioo1VmLS2N0UAEKZpn1sU2xDy ijxjVkaGmwn3tPYX2PL169d1xVSIaDQS8AaB8HyvjVzAe37bKdlzvC5vFS5kE+fDkiOKjxz4Y5/K V3xW/w+BqJQ9R07lfeYX6h2WY4d13ysWL9Hh4WWUN3DipEnCejj274RAWN1rOxnKK6somHkFOweN yATC84d4RD4vPLbISSCsP8S1cKZEM3ig1SlaNnJC5lGTAAmQAAmQgAcJ8F7bg7A5FAkEQSCs77WD GD7MN0cP8xE4AAmQAAmQAAlEUAI6VFN5l9FIgARIgARIgARIgARIgAQiFgHmMItY55NHQwIkQAIk QAIkQAIkQAIkQAIkQAIkQAIkEEoCFMxCCZDNSYAESIAESIAESIAESIAESIAESIAESIAEIhYBCmYR 63zyaEiABEiABEiABEiABEiABEiABEiABEiABEJJgIJZKAGyOQmQAAmQAAmQAAmQAAmQAAmQAAmQ AAmQQMQiQMEsYp1PHg0JkAAJkAAJkAAJkAAJkAAJkAAJkAAJkEAoCVAwCyVANicBEiABEiABEiAB EiABEiABEiABEiABEohYBCiYRazzyaMhARIgARIgARIgARIgARIgARIgARIgARIIJQEKZqEEyOYk QAIkQAIkQAIkQAIkQAIkQAIkQAIkQAIRiwAFs4h1Pnk0JEACJEACJEACJEACJEACJEACJEACJEAC oSRAwSyUANmcBEiABEiABEiABEiABEiABEiABEiABEggYhGgYBaxziePhgRIgARIgARIgARIgARI gARIgARIgARIIJQEKJiFEiCbkwAJkAAJkAAJkAAJkAAJkAAJkAAJkAAJRCwCFMwi1vnk0ZAACZAA CZAACZAACZAACZAACZAACZAACYSSAAWzUAJkcxIgARIgARIgARIgARIgARIgARIgARIggYhFIHrE OhweDQn4DoEabZr6zmQ4ExIgARIgARIgARIgARKIQAR4rx2BTiYPhQR8lAA9zHz0xHBa4ZdAu/qN w+/kOXMSiIAE2n/QJAIeFQ+JBEiABEiABCInAd5rR87zzqP2XQIR+V47yktlvoueMyMBEiABEiAB EiABEiABEiABEiABEiABEiABzxKgh5lneXM0EiABEiABEiABEiABEiABEiABEiABEiABHydAwczH TxCnRwIkQAIkQAIkQAIkQAIkQAIkQAIkQAIk4FkCFMw8y5ujkQAJkAAJkAAJkAAJkAAJkAAJkAAJ kAAJ+DgBCmY+foI4PRIgARIgARIgARIgARIgARIgARIgARIgAc8SoGDmWd4cjQRIgARIgARIgARI gARIgARIgARIgARIwMcJUDDz8RPE6ZEACZAACZAACZAACZAACZAACZAACZAACXiWAAUzz/LmaCRA AiRAAiRAAiRAAiRAAiRAAiRAAiRAAj5OgIKZj58gTo8ESIAESIAESIAESIAESIAESIAESIAESMCz BCiYeZY3RyMBEiABEiABEiABEiABEiABEiABEiABEvBxAhTMfPwEcXokQAIkQAIkQAIkQAIkQAIk QAIkQAIkQAKeJUDBzLO8ORoJkAAJkAAJkAAJkAAJkAAJkAAJkAAJkICPE6Bg5uMniNMjARIgARIg ARIgARIgARIgARIgARIgARLwLAEKZp7lzdFIgARIgARIgARIgARIgARIgARIgARIgAR8nAAFMx8/ QZweCZAACZAACZAACZAACZAACZAACZAACZCAZwlQMPMsb45GAiRAAiRAAiRAAiRAAiRAAiRAAiRA AiTg4wQomPn4CeL0SIAESIAESIAESIAESIAESIAESIAESIAEPEuAgplneXM0EiABEiABEiABEiAB EiABEiABEiABEiABHydAwczHTxCnRwIkQAIkQAIkQAIkQAIkQAIkQAIkQAIk4FkCFMw8y5ujkQAJ kAAJkAAJkAAJkAAJkAAJkAAJkAAJ+DgBCmY+foI4PRIgARIgARIgARIgARIgARIgARIgARIgAc8S oGDmWd4cjQRIgARIgARIgARIgARIgARIgARIgARIwMcJUDDz8RPE6ZEACZAACZAACZAACZAACZAA CZAACZAACXiWAAUzz/LmaCRAAiRAAiRAAiRAAiRAAiRAAiRAAiRAAj5OgIKZj58gTo8ESIAESIAE SIAESIAESIAESIAESIAESMCzBCiYeZY3RyMBEiABEiABEiABEiABEiABEiABEiABEvBxAhTMfPwE cXokQAIkQAIkQAIkQAIkQAIkQAIkQAIkQAKeJUDBzLO8ORoJkAAJkAAJkAAJkAAJkAAJkAAJkAAJ kICPE6Bg5uMniNMjARIgARIgARIgARIgARIgARIgARIgARLwLAEKZp7lzdFIgARIgARIgARIgARI gARIgARIgARIgAR8nAAFMx8/QZweCZAACZAACZAACZAACZAACZAACZAACZCAZwlQMPMsb45GAiRA AiRAAiRAAiRAAiRAAiRAAiRAAiTg4wQomPn4CeL0SIAESIAESIAESIAESIAESIAESIAESIAEPEvA K4JZnz59pG/fvvpIuUwOvAZ4DfAa4DXAa4DXAK8BXgO8BngN8BrgNcBrgNeAt64Bz8owHC28EIjy UpmnJwuxrHfv3p4eluORAAmQAAmQAAmQAAmQAAmQAAmQAAmQAAmQQJAEvOJh5gWNLkgQ3IEESIAE SIAESIAESIAESIAESIAESCDyEIBHG40EAiLgFcGMF2VAp4PrSYAESIAESIAESIAESIAESIAESIAE PEEgSpQonhiGY4RTAl4RzEz+snDKjNMmARIgARIgARIgARIgARIgARIgARII5wSYKiqcn8Awnr5X BDOGZIbxWWX3JEACJEACJEACJEACJEACJEACJEACgRJg9FugeCL9Rq8IZrwoI/11RwAkQAIkQAIk QAIkQAIkQAIkQAIk4FUCDMn0Kn6fH9wrghlDMn3+uuAESYAESIAESIAESIAESIAESIAESCBCE2BI ZoQ+vaE+OK8IZgzJDPV5YwckQAIkQAIkQAIkQAIkQAIkQAIkQAKhIMDot1DAiwRNvSKY8aKMBFcW D5EESIAESIAESIAESIAESIAESIAEfJgAQzK9e3KePXsmjx8/9u4kAhk9ivL2ehnI9jDZhJDMJ0+e 6B/rAGXLlpUqVapYVwW5fPnyZYkVK5YkTpw4yH25AwmQAAmQAAmQAAmQAAmQAAmQAAmQAAmQgHcJ LFq0SPbv3y8vXryQ7NmzS4MGDSRmzJjenZTd6NHt3nvkLTQ6/DRq1EgyZ85sGzN27Ni2ZVcXVqxY IenTp5eKFSu62oT7kQAJkAAJkAAJkAAJkAAJkAAJkAAJRHICiH5jBJznL4KjR4/K3r17pWvXrgId aOjQofLHH39I0aJFPT+ZQEb0imCGC7JXr14SP358B8+whw8fytatW2XPnj2SLFkyeeeddyRfvnxy 5coV2bJli/z1119afSxdurRcv35djh8/LqdOndL7pk6dWubPny+XLl2SN954Q7APxLTx48dLjBgx 9H4Q6XLmzBkIEm4iARIgARIgARIgARIgARIgARIgARKI6AQYkumdMwytp23btjY9KEGCBHLjxg3v TCaQUb2Sw8xUyVy7dq1MmzZN/8yaNUtPc+fOnXL48GFp1aqVFClSRGbOnCl3796VpUuX6hDOTp06 CWDOnTtXcufOLZkyZdL75cmTR1atWiUpUqSQ7t27S5IkSfQ+6PTWrVty//59ad68ud4/EB7cRAIk QAIkQAIkQAIkQAIkQAIkQAIkEAkIsEqmd05y8uTJJV26dHrwI0eOyJkzZyRv3rzemUwgo3pFMDNp 0+ARhpBM/ED4gh08eFAKFCggqVKl0q8QwOCad+LECe0xljRpUilXrpwgdxkUSHiOIYcZksUdO3ZM Hj16JBs3bpR79+7pfbAfrHjx4pIlSxbt7qdX8BcJkAAJkAAJkAAJkAAJkAAJkAAJkECkJcBwTO+e +gMHDsiUKVOkWrVqNgHNuzPyP7pXQzLhFYbkblZDMQCIYMawjKoJSARn1kePHl3gOvn06VOzmxbM sA8ENqiVMIhwvpY0zjZhLpAACZAACZAACZAACZAACZAACZAACXiNAEMyvYZeO0bNmzdP6tevr52l vDeTgEf2ioeZCcl0Ni244aFSwoMHD+Tff/+VCxcuSKFChbT4hXBNeJLt2rVLx7rChS9atGiCvGcI 08yaNasW1woWLKhzmsHTDNtpJEACJEACJEACJEACJEACJEACJEACJGAlwJBMKw3PLSMX/ezZs6V6 9eo6EhBptKAB+Zp5xcMMIZlQcp2puaiKgGT+AwYMkLhx40qVKlUEYZjvvfeerFmzRr744gtJmzat 1KxZU7OEFxkqZaKyAvZFXjS4VcIbrWzZspIwYUKn4/jaieB8SIAESIAESIAESIAESIAESIAESIAE PEcA2gF+aJ4lgAqZsIULF9oGRmquhg0b2t77wkIUJV699IWJ2M8BuciQm8xeVIM3WZw4cfztjpBN hGkabzLsAwHNvq2/RnxDAiRAAiRAAiRAAiRAAiRAAiRAAiQQaQkg+o1eZpH29Ad54F4RzHhRBnle uAMJkAAJkAAJkAAJkAAJkAAJkAAJkAAJkICXCHglh5mPOrV56RRwWBIgARIgARIgARIgARIgARIg ARIgAU8TYDimp4mHr/G8IpjhooSXmbk4udxHXzXkQA68BngN8BrgNcBrgNcArwFeA7wGeA1EhGsA xwDDK5fJwVevAaZx0n+m/BUAAa+EZAYwF64mARIgARIgARIgARIgARIgARIgARIgARIgAa8T8IqH mdePmhMgARIgARIgARIgARIgARIgARIgARIgARIggQAIUDALAAxXkwAJkAAJkAAJkAAJkAAJkAAJ kAAJkAAJRE4CFMwi53nnUZMACZAACZAACZAACZAACZAACZAACZAACQRAgIJZAGC4mgRIgARIgARI gARIgARIgARIgARIgARIIHISoGAWOc87j5oESIAESIAESIAESIAESIAESIAESIAESCAAAhTMAgDD 1SRAAiRAAiRAAiRAAiRAAiRAAiRAAiRAApGTwP8Br+TwsINvT54AAAAASUVORK5CYII= --Apple-Mail=_AEBCD08F-8D9F-4A83-B664-586F8E8732B4 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-6.png Content-Type: image/png; x-unix-mode=0666; name="PastedGraphic-6.png" Content-Id: iVBORw0KGgoAAAANSUhEUgAABMwAAAKtCAYAAADbzPKmAAABRmlDQ1BJQ0MgUHJvZmlsZQAAKJFj YGASSSwoyGFhYGDIzSspCnJ3UoiIjFJgf8LAwsDPwMagx8CTmFxc4BgQ4ANUwgCjUcG3awyMIPqy Lsgs0yQOZ95O1r7U/Hlec4L4/TDVowCulNTiZCD9B4jTkwuKShgYGFOAbOXykgIQuwPIFikCOgrI ngNip0PYG0DsJAj7CFhNSJAzkH0DyBZIzkgEmsH4AsjWSUIST0diQ+0FAV4fd4VQn5Agx3BPF1cC 7iUZlKRWlIBo5/yCyqLM9IwSBUdgKKUqeOYl6+koGBkYGTAwgMIcovrzDXBYMopxIMQKxBgYLGYA BR8ixOKBftgux8DA34cQUwP6V8CLgeHgvoLEokS4Axi/sRSnGRtB2NzbGRhYp/3//zmcgYFdk4Hh 7/X//39v////7zIGBuZbDAwHvgEAEapeFgimAZUAAAGeaVRYdFhNTDpjb20uYWRvYmUueG1wAAAA AAA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJYTVAgQ29yZSA1 LjQuMCI+CiAgIDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5OS8wMi8y Mi1yZGYtc3ludGF4LW5zIyI+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAg ICAgICAgICAgIHhtbG5zOmV4aWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20vZXhpZi8xLjAvIj4KICAg ICAgICAgPGV4aWY6UGl4ZWxYRGltZW5zaW9uPjEyMjg8L2V4aWY6UGl4ZWxYRGltZW5zaW9uPgog ICAgICAgICA8ZXhpZjpQaXhlbFlEaW1lbnNpb24+Njg1PC9leGlmOlBpeGVsWURpbWVuc2lvbj4K ICAgICAgPC9yZGY6RGVzY3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CqFrgnUA AEAASURBVHgB7J0HmBTF1oZLzDkjRoIiKub0mzGAWTGLqBgwXoyoV1Cuioo5J8wZDOg1YMbsNeec MQvmnMX9+y2ooaa3uqd7dmZ2dvc7PEun6gpvVfd0nz7n1BQNkRiJCIiACIiACIiACIiACIiACIiA CIiACIiACIiAJdBOHERABERABERABERABERABERABERABERABERABCYTkMJsMgutiYAIiIAIiIAI iIAIiIAIiIAIiIAIiIAIiICRwkyDQAREQAREQAREQAREQAREQAREQAREQAREQAQ8AlKYeTC0KgIi IAIiIAIiIAIiIAIiIAIiIAIiIAIiIAJSmGkMiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIBHQAoz D4ZWRUAEREAEREAEREAEREAEREAEREAEREAEREAKM40BERABERABERABERABERABERABERABERAB EfAISGHmwdCqCIiACIiACIiACIiACIiACIiACIiACIiACEhhpjEgAiIgAiIgAiIgAiIgAiIgAiIg AiIgAiIgAh4BKcw8GFoVAREQAREQAREQAREQAREQAREQAREQAREQASnMNAZEQAREQAREQAREQARE QAREQAREQAREQAREwCMghZkHQ6siIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIIWZxoAIiIAIiIAI iIAIiIAIiIAIiIAIiIAIiIAIeASkMPNgaFUEREAEREAEREAEREAEREAEREAEREAEREAEpDDTGBAB ERABERABERABERABERABERABERABERABj4AUZh4MrYqACIiACIiACIiACIiACIiACIiACIiACIiA FGYaAyIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiLgEZDCzIOhVREQAREQAREQAREQAREQAREQAREQ AREQARGQwkxjQAREQAREQAREQAREQAREQAREQAREQAREQAQ8AlKYeTC0KgIiIAIiIAIiIAIiIAIi IAIiIAIiIAIiIAJSmGkMiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIBHQAozD4ZWRUAEREAEREAE REAEREAEREAEREAEREAEREAKM40BERABERABERABERABERABERABERABERABEfAISGHmwdCqCIiA CIiACIiACIiACIiACIiACIiACIiACEhhpjEgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAh4BKcw8 GFoVAREQAREQAREQAREQAREQAREQAREQAREQASnMNAZEQAREQAREQAREQAREQAREQAREQAREQARE wCMghZkHQ6siIAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiIIWZxoAIiIAIiIAIiIAIiIAIiIAIiIAI iIAIiIAIeASkMPNgaFUEREAEREAEREAEREAEREAEREAEREAEREAEphICERABERABERABERABERAB ERABEWjpBP756y/z2aibTMPff5uF+u3c0puj+ouACDQzASnMmrkDVLwIiIAIiIAIiIAIiIAIiIAI iED5BP75889IUTbKjB1+kfn9889N5733Kj8znSkCIiACkwhIYaahIAIiIAIiIAIiIAIiIAIiIAIi 0OII/PPHH+bTG0eZD4ZfaH4fP35y/aeYYvK61kRABESgTAJSmJUJTqeJgAiIgAiIgAiIgAiIgAiI gAjUnoBVlF1/gxl74UXmjy++CFRACrMAFO0SARHISUAKs5zAlFwEREAEREAEREAEREAEREAERKD2 BCb8/rv59LrrzQcXXxwpyr5MrIAMzBLR6IAIiEAOApolMwcsJRUBERABERABERABERABEWidBNZf f30z5ZRTpv4dffTRdd/4r7/+2rbh4IMPrvu6Zq3ghN9+Mx9efoV5rMc65q3jjk9Vltk8pTHLilbp REAEUgjIwiwFjg6JgAiIgAiIgAiIgAiIgAi0DQLbbLONWWaZZQqNPe2008xCCy1ktttuu8K+1Vdf vbBe6ZXPPvvMrLTSSuaAAw4wgwYNKjv7CRMmmH/++afs8+vpxAm//mY+GTkysii7xPwZKQIzixRm mVEpYWUJXHLJJWafffZJzXSxxRYzr7/+emqaSh7kHnbbbbeZP6KYf5J8BKQwy8dLqUVABERABERA BERABERABFohgb32Kp5Z8ayzzjK82J566qk1ae2f0UyP48aNMz/++GNNyqvnQib8+qv5+NoR5sNL LjV/fvNNPVdVdROBIgJLLbWUGThwYGHf7bffbt555x0zYMAAM/3009v97du3LxyvxsrGG29s7yP/ +9//bPaLLrqoVcZXo6zWnqcUZq29h9U+ERABERABERABERABERCBihG4//77zb///W+z//77m6uu uso8+eST5sUXXzQ77bST6d27t/HdNvfcc0/z6aefmrvvvttafV144YXmv//9r+FFdu655zZYtR17 7LHm22+/NbzkIpdffrm1PsEiBEuxE0880YwYMcKMHTvW8OK7++67mwMPPNBMMcmK6v333zf77ruv eeKJJ8wcc8xhNtpoo4q1tdYZWUXZ1deYDy+9zPwZMSlXHJtyz9d5IlAugVVWWcXw5wTLURRmw4YN M7POOqvbXdXlV199Zb7//vtCGccff3xhXSv5CCiGWT5eSi0CIiACIiACIiACIiACItCGCXwTWTyh IENx9eabb9qX42mmmcbu+/DDD4vI8KL8yiuv2H1nnHGGtTJBCXbUUUeZ5ZZbzmDFhoJthhlmsNsk nGeeecySSy5pz9l7773NkCFDzNRTT22VZL9FsbyITTZ48GB7nJfiVVdd1Tz99NPWqmWLLbawyjV7 sAX99/cvv5ixwy80j6zZw7xzyqlNUpbZZsslswX1ftusakNDg1lhhRXM4YcfbpXvs802mznllFPs db7mmmsWQbnhhhvM8ssvb1599VW7/9FHHzW77LKLmXPOOa0VLPcJd5/p06ePee2118xHH31kz3nr rbfMYYcdVrAw88s98sgjzYILLmgoG+U99zYnKOKJ6zjTTDNZ13RcxZdddllz+umnuyRtYikLszbR zWqkCIiACIiACIiACIiACIhAJQlgyXXrrbcalGUoskrJY489ZpNce+21Zr755jPEGsNSDKsTrM2w QLnuuuvMJptsYtffeOMNa21GXLWXXnrJnkuaTp06WUXbQQcdZC6OZovEmuSmm24yW2+9tU3Tt29f q0QrVZ96OP73zz+bj6+62nx42eXmL88ipql1e//c88wnI0aayAzP/lmLM7vucp5iooWef5xDLk20 5J/dnrR/ch7RfruPw6xPSmfXJ+2blE/hnMkneOXanZO3XT7kaM8nX7sxqZyJ6+ycfJwE7PfPsSdN 3O3lM7GupLWJJ+U5cX1i4lgepCP5xMzteZN2FfIgr4n5Tkw7cZuTJuXr8nDbNi8OT04/8ZxJ6W2B E4/F21i8TbkkjmRS3sXHJ+63SQplT9rntqMlqxMlWok2pokUUHOttaaZtsouk67UF154wfA37bTT mhVXXNF06NDBoAxDIe8L1zj7cNf+8ssvzWabbWbvG//617/svssuu8y8/fbb5uGHHza4hGIFi4s3 MRFnnHFG88EHH9hyXJ6uXCxSuW8QT+3mm282c801l8EK1iniiXmGeynbWL7+Eim211lnHZdNm1jW tcKMH55PPvnEfPHFF2b22Wc3CyywgNV+tomeUSNFQAREQAREQAREQAREQATqlsAee+xhlWVZK7jh hhsa4hn16tXLbL/99tZ18txzz43e0wtv7UVZPfXUU9Ylc+mllzZ33HFH4RiWaWzzAo07KHGRsCxz 0rlzZ7dat8u/f/rJfHTlVeajaObLv374oSr1bIpLZ1UqpExbBIF2kTXnKrf818y8xOI1qS/KcpRk xEtEbrzxxtRyce9GcXbMMcdYa1MSc4/Azfu7774zWI2hyEfJddFFFyXmNf/885sHH3zQunlj9Yq+ 5aGHHrLpzznnnBatiE9sdBkH6kphhrb00ksvtTd/FGVoUuOCSSBmg8xYs+2227Y5DWecR1vaRmOO ZtsXYjpwsUuyE3jvvfdsrIzsZ5SXkhv3oYceWt7JOisXAb4qPfLII7nOyZKYL+c77LBDIennn3/e aNaufv36mZ49exbSaEUEREAEREAERCBMYOedd7auUliY4YbJX7du3ayV2FprrdXoJFyqkGuuucb+ xRNwnD+sQqaccsr44brd/i2K6fZs350MS4kI1BuBf/76K1LmXmmWPOXkmlRtvfXWKyjLshS4wQYb mKmmmsq+z7377rsGRTzP6/37989yeiENbp/ERETatWtnXcJffvllu91SFfG28hX+ry4UZmhC0X7y Y/D777+nNvHnyGyXWAH83XvvvaZ79+7W55cXtqSvM6kZ6mCLIYAp6eOPP15U36+j6aWlMCtCUnJj /PjxjTiWPKmMBJgBS2pDgB+3+LVRiZL5MOELcQ3i5ay++upSmPmQtC4CIiACItCmCRAfKEn48H/+ +efbOEVYiBHUn9hExBciBllc3Ex6BOzebbfd4oet5w2TDhAnjXck8m8JMn3kNbTq6NusdRlWZlib SUSgngj88+df9VSdorrgtknsQyYLGT58uP2beeaZbVxDF9uw6ISMG7iFOmmJinhX90ovmz3o/7PP Pmv4onLJJZeUVJaFGo+/7T777GOtzX6Nph+WiIAIiIAIiIAIiIAIiIAIiEAtCfCySSwzPuo7wSUK rxknzJhJoG5iCuGSOXLkSIO1yDPPPGOw4sbKA3EGBMQiQsaMGWNjnhH3jD/Owx2Uc7p27WpjoT33 3HM2Lf/F4x8VDtTRytRR3LZFDj7IrPXIQ6bLgH+ZqVqIsq+OEKoqVSIwRXQdLtRv5yrlni1bXCTT ZMCAAfb6x8OEGXunm246OzkIBiaVEOIqcn9BEd/WpVktzJhilUB1lVB08cNAQDq0rLI0a+vDWu0X gfohwNdjF+SXWjHLFV+KW5LrRP3QVE1EQAREQAREoD4JoOwiHAXBtJnpDsXWaaedZoNts44wEx37 5p13Xhu/jDAZxB1ilkvS/DApltcDDzxglWTrrruuDT9DWJKddtrJ/mFNRowi4h516tTJMDseXjqD Bg0yJ510klXYYbHWUmTqiEnXQwaaTtGMox9GoXk+vvoaw4yZTZWFdulnFt5/P2Ow+Iv+rOWfXZ+Y 80RLwInHCsc55NJwTvTPbk/aPzmPaL/dx2HWJ6abuM7mpPPsYtL65BMmnuPKscldGreclO+kNIVy yWNSeYV9dtvtnnS+2+fq7+fj8oj2+XVn98Tkk/MotMfLZ1LWEwu0+Xr5TMrbppl0bGJ9Se7aRnrK 4r9Jy2h98vGJ++xRd86ktIU0dntSPqE8JqWnjKJ8JqX183FJJzXeTBO5N7fv1dPMEPOy4NRaySyz zGInEfn4449tGCrKdbNjsn711Veb66+/3jDrLoZH/BH/jFl7iZHIRCLcj7JMREJ+IUERTwxFFPFr r722TdISFPGhtjR1X7MpzFCScYP/9ttvG7WBQcK0pkydiskhfvl0+Lhx4wxKNgYClmlx4esLP0It 6Uci3gZti0C1CXTs2NFst912mYrhmsJl2hf85LlGS4kLXFkqXWs/TgyAW265paiZTCVPgN5qCgGF Cd7ZFMHdUiICIiACIiACbZUAH+Gd1VeIQfwY7pZDhgyxrlG8lPM+wwcyJjBDDjnkEBujmRfdk08+ 2bpQYmE2dOhQexyrDhRjxDhbf/317TMYAcD3228/+4I8YsQI+wy26aab2nOIY8Rv9XnnnWfff5i9 jg9zWLJdcMEFLcqIYOrZI8XZYYeajnv0Nx9eMlFxNqEJ3kPMdjhNNAOgRARaGgEm9WC2XGJB9+nT x7puoyRzwjsWgf8Jf8NMuQhx4LFw5d6AoJzHcnXUqFH2HmF35vgvpIg//PDDc+TQepI2m8KMqY99 k2WH9OCDD7ba0RlmmMHtKixdUDqmSiZmDz9ITLfsC9OgEs+MgSYRARFoTIBJM5gsIYsw8YabLcWl R9kzzzzzuE0t65QA90dmFpaIgAiIgAiIgAiURyApHivulPzFZeWVVzb33XefIV4sL69zxBQ2GAJc GQUTP/30060SbeGFFzZ+3CDyw1qM+EQo2njpRbAmwU0TixNmwEQp5gvuWbzgYrHGh1E+yqG8a4ky TfSxb9F/H2Y6oTi7+BLzcaQ8nPDrb7mbIo+j3Mh0QpUIOMW6W/rFME7jY3Xfffe1cQlRdvG3yCKL 2ID+TPKFcJ/BipX7yGabbWbPX2WVVQzHuacguGzjromRxMUXX2wV/345oXKpn6tjSBHPRF+Uwb2t LUmzKcwwV44LLpXc8LPIMsssY2dM3Hrrra3VmX/OE088IYWZD0TrIiACIiACIiACIiACIiACNSGA YixN5oysn/hLktAxYhQ544HQeVibtSbrfqzDFh10uOm05x7mg4suNp+MGGkmRB5HEhFoaQSwGOUv LiitQrHKmLyD+O7nnnuu9bBDSY5gReYEj7oDDjjAunzjjcefL9tuu63ZZJNNbAwy7idYnTpJKher NScvvfSSYdIRlPRMsociHos1FGastyVptqD/dIIvdGRWZZk7D999vsDEJeSuGU+jbREQAREQAREQ AREQAREQAREQgfolgGtltyMG28kBOu6+m2kXKQ4zSaSMkIhASyaAktwpy0LtwDoVJXlcWebS4rGH 0qucuMnEUcQ6DXdxQrwQy4zYiSjmcRdvS9IsFmbxGWMATpDMcgTXSwbCl19+WTj9+eeft7PFZB0c zP4wduxYqz1lff755zfdunWr+NTM5E2gzk8//dQG6lwoCiZI0E9n+lhoQBkrLm+WzLxTjfpTrb/+ +su2gVkzMFPvFAUb5UIOudDmacaECRPM22+/bc3Tf4qmlsaVjGCDTJFbKWHcYSJPHAmCqnLxw58/ mFVSmBHp/fffNz/++KM1x1988cVTvyRWsuyWmle9MeOLD2OFLyss+dqDKyr3GxT8lbhuW2pfNbXe tbpfNbWeOl8EREAEREAERKA+CBCMfbEhR5rOe+050eJs5HXmnz/+SK6cFGbJbHREBEoQ2Geffcyj jz5qLd2IkYigoMNYCRfRtiTNojBDM4kpoJ2hYhLtb775pizu5LPRRhuZO++8s3A+L7IoKtICXvMy zOx1+AWjYPv7778L57sVpzgjyDmun+UIwb4xb0QZxIQFfpvJjxgETG6w//772xly8pRRKu+89Ucx 4JtrUhdmMe3du7ehf7hYmHABxZMv9AFKJ87deeedG/lh+2nj6yg6MTe96667GuVLWhQUaLGJbVeO MPPQFVdcYQi8/kfKjyoxIrbYYguz6667GmJ8pUkaJywn8Sl/+umni7JYb731zEcffVS0b7fddrOB HIt2JmwwPgkc6892wjgnEGwllYoJxTd5dznMjj76aIOvPPEKmS7ZF75wMCNMKWFcnX322UXJ8ONP MyVmBhh+DOhDFMQhQRnfo0cPO97XXHPNRmP+5ptvtvECOJe2x4V4A06hjzI1ZCkbP6elb1fifuUC KKNw8+Wiiy4ynSLlfZIwyQzXD4p5JzvuuKMdX247tDzuuOPs7GX+MQIv038SERABERABERCB2hOY Nvpwudh/hkSKs73M2Ch29afX3xBUnEWvJxIREIEyCWBMgq6EZ+jHHnvMGgpg4NQW41g3i8IMSw2U Ev6L5Ouvv25fUP/v//4vd7cShJy/rMJkA8w68dZbb6WegoKLvwcffNAqvQiUjhtoFkHBdMQRR5j7 778/NTkv5LyY80cAP8pIe/Ejs6x5560/VlcEC/UFiywUfgQQjyvKXDpeYrE4w2QTxSUBCLMEG+ci pN/iL78uX5ZY9hD8lHyzsue8V155xc4WFG8Px0JC266MgrAyAwn+3vRD0iyGSZyYyAJOISULs0rG 63LDDTdkVpih+POnE6YNKH1agrKMupbDjPMQZtKNs/MtSiemCv/P+ImfS1+HFGbsJx4A13spQfFC Ov74ysK48X9AmNE3Xq6f5wcffFDY5ANCa5ZK3q9QzsM+zpZpr9Pum8S15KOFL9x/UMimCfc+xpAv aR9i/HRaFwEREAEREAERqB6BaedpbxY/+ijTOZrs4IPhw82nN9xo/om8XyaLNGaTWWhNBMojgBcZ M/m2ZWm2GGbdu3cv4s5LEBZKWCGErL2KEjdhA8UDs9qUUpbFi2CmQCzNmPmmlODzS9pSyrJ4PgTS w8IJBUGSlJt3nvr7ZTOlLQEFk5RlflrW8W/OMuUs+TK1dpqyzM8bJvEXXv+4v45rHzODxF+q/TRJ 61gejh492jA7SR4ZM2aMGTRoUFBZRj5YEaEo9gWlHnXNIr4FpUtfrtWjO7+5l6WY1bJ+3H+wHMqi LIvXi3HWv39/88svv8QPtfntatyvsNaMC/edNInP9EpaLBdR5iUJH3TiyjK+tpXzUSepDO0XAREQ AREQARFoGoHpOsxjFh96jFnzoQfMgpH1eLvIe8dK9JFNIgIiIAJNJdBsCjPcKOPCCyeWX7g4nXHG GVb5UknlGUoXXopDL7ZYiTCbxEEHHWSXoVloUBqhPPrwww/jVS9sE58M98qQ0guruk033dS6F+6y yy7BmW5QoOwVmRiH3Aez5E37KCPkVpil/oWGTFqhPv7sHbiRrbjiirYMLOJCscuw9gi9oLq8ieOG ZVncPRWLrtVWW81Oi40yiGlxsSjJI0y5jfIi9CIMk759+1r+WP8xyQSKzfh03pSH6Skv+1kFN754 e/xzcb2lX+KCy2ApIVYcyiVfcMfcaqut/F0tbr0Us1o26OSTT7Zuu/EymTZ5hRVWsApYFLy48fmW ZC49Vqvk4QSLQqz/kiwAuW7c8fiU8y6Plr6s1v0qpDDjY0OahO5HXK8PP/xw4mmhPHED5lqWiIAI iIAIiIAI1BeB6aLwMEscN3Si4qzvDpMVZ/VVTdVGBESghRFoNl8g3N5QShBDLC64W51//vn2jxdL vuivuuqq1mVxiSWWKMT+iZ9XavvUU081BJT3Basf4iOhSIkrZ4gPhWse8dCc4G43bNgwGwDP7fOX pI8ru3C5QkHEy7YvvLChMMENzD8HRcK9995rNt98cz+5rYufjoNJeXNs5MiR5thjjy2yeipVf85L EhSKKOR8d0ssMAYOHGhQkvlCXLJ11lnH31VYP+2004qUcBzAnQq3NuKu+cI0tii3siqvmCGVYPu+ oBDDTRRz0lCgdvqXGGnxl2f6P/Ry7ucdWse/m3hJKOhQ4MFo7bXXNksuuaS5/vrri0654447rIKw aGdsg4CL8XGLYpG4ca1FkpjVqn1YtvqCYphrB6UkSjNfiK1GXDTuUb7g9ucEVz/n7oflYfw+hzIm yeXX5dHSl3nuhbQ16/2K34AOHTrYCTwcI9zPcQufb7753K7C8o033mhkKeYOYlGYZKkZmm25nPuB K0tLERABERABERCB6hOYLnoWWOL440xD5DUiEQEREIGmEmg2hRkV58UT18h4bCa/UQSawzrAWQjg EoPFB8qYnj17Bl+Q/PPdOmUQY8oXXoqvvfZas9RSS/m7C+tMpbrMMsvYYPBY+TjhJQslRjzoOEqj e+65xyWzSxR+V111lQ3sX3Qg2kBBh+IQxdmBBx5YdBh3Tl9hljdvMkMJiCsg1my+VV1S/Ysq4G0w pS3Kxo033tjbO3EVaxuUB7DwlXlYkYUE16m48gtLMlw0mXkwLkyTS5B2AvdjwROKD+afE1fccYwX 95BFozsPayAmNKANvmUgdaVv4opUd158ieXJMccckxiXDAValy5d7Iys7lxe5pkMIBRTy6UJWaGh kGsNUopZLdqI653f75TZp0+fxH7kvoGSGKWXr1QhLhn51IvFGJNlhKwnszDlelt22WWzJA2mqfb9 CsXViBEjisqmL5igJC5pbrZ8tOGeErIai1uYoWxH8S0RAREQAREQARGofwJTRL/bEhEQARFoKoFm vZNgYcFscijOZp111kxtQfGDsooA87hu8oJ06623Fs1+FsqI2c5810LS4F6ZpCxzeXTr1s2+HLtt t8TKLC7HH398fJe1MmEWzDTBVS/u5vXII48UKYfKzXu55ZazCrN4+aH6x9OwjXUNM9CFlGUuPUqt eDBAZnP86quvXJLCkhkk44JrZEhZ5qdjRsm4UtE/7tbjL7koDNLq7s5jLMYVoLiwxhUpLn18iVIN pRuKljQJWbNgZZYkKCHjsfBQ8KEMaemSlVm12xmKjZfFeg+L0V69ehX9xe8x1a57Wv6MHawny/nz FexpZSQdq/b9KmTpFb/2Xd3cxxa37S9pZ+g8rEL9SWk4h3upAv779LQuAiIgAiIgAiIgAiIgAq2b QLMqzECLtQauS1gdEXsq5FKT1gWvvfaaDR5PLKqQdRHnorx54YUXirJB6ZA1sDv1is/QSKDv7777 rpAnweuJY+QL1mUEn88iMKAN7g/ljbOmamre1J+6+BKvv3/MX2cihjXWWMPfFVzHpTIuxDDyhRf3 559/3t9lFWVZFFqchKVbKcG9Fos39zc8mjUnZD0Syic09pjdMYvstNNO1uKxVNott9yykUtxKKC/ ywc30bjyAgVruZZDLt96WGZlVu26xq9tysOFMh7wPV6PzTbbzFwYTWfu/6E8butSi/vVKqus0uie 5lv7uT4gliHB/dMkZIEWyiukpEvLV8dEQAREQAREQAREQAREQARaNoFmV5g5fHy5J1YVLjK4oBH8 H9dLFGpZZOzYsdaSirhTcSFIP651vhADKmveuOKElEZ+8H/c6uKCS2VWi4R99tmnELeN2EjEAHNK rqbmPdtsswVdlfz6x+vutnGBzSJxCznOiVuYhWaExEIwq0IrSz1WWmklG1wfpRJ/PXr0yHKaTeN4 +yfElVX+MX89i0US6eG0+uqr+6fa2T/jcddcgpAyLWSl5tK3pGVWZtVuExN8xN1uuebWXXddq4xH aYlruCQbgVrcr1AYx68jrqG4RSh959/7sZhFUeuLFGY+Da2LgAiIgAiIgAiIgAiIgAg4AlO5lXpa 4gbJHxZgWCsQBJ94UgTVxlpgwoQJweoyo+bgwYMNSh5igzkhtlBcCBJNbLGsElL2oHDCTQcJKZ+I zVUJqUTeobr49W9qPUPKJv9FlfxDL9KdO3duatGZzsfaDasR2kxfjh8/3loeYn1IYH4k1MfVcLEj /hhuxb6gGMNF2BfqFncnYzbXpsSW8vPX+kQCjN3FFluskYUo4wJ3b/5Q6uJajZKG+IkEnq93YYKO kCI7S727d++eJVkwTa3uV1h8xWeP5Rr33cPj1w8TyPDbQOxKJ7heomzz75FxN03iD3LtSURABERA BERABERABERABNoOgbpUmPn4mcWSWGX8MZMhswXivjl69GirdAgpNIjPxUutU+KEFGZMApA22YBf h6R1P9/QS2LIxS8pr7T9lcg7Pvsk5fn1Tyu/UsfiMYHIt3379pXKvlE+zLDJzJu33357UBnW6IQa 7SDuFTH7fHfPkMKMl/24ZVNrCfZfI9SZiznrrLPsjJhJFoW4Rz/99NP274wzzrCzNGKBhhUjSph6 FGa19We0rVUda3W/4h6P9a//G4CiyynM+ICCxbIvnIPlcvz6w8rMKcyIXfjuu+/6p5U1W25RBtoQ AREQAREQAREQAREQARFocQTqxiUzK7mZZ57Zzlp52WWXWesCZ+Hln0/sId+CIPQC56cvd923mAop nyqlMKtE3iH3N7/+5TLIc16tFGZYthG7DCUr7q0hy7E89a50WtzC/BlQyZ+YcvGZRePumLgQb7HF FpWujvKLCGA9xD1lySWXzMQDC8WRI0famWhRTMUtBjNl0koT1ep+Rbw4ZjH2xbcMYx0LZV9QcnId cW/wxbdEc7Pj+sc5TyICIiACIiACIiACIiACItC2CLQ4hZnfPQSax4Io/vJDGiYDcIKlQTXEt0YJ lTHVVJUx4KtE3qF4bW5SgWqwCeWJdWBcmJ2ykoKybP/99zennXaa+fPPP4NZY5VCbDksSlZccUWz 9tprW4tE3K5qJaE4ZP5smViWEX/JFyaCCAWo99NovXwCxL+77bbbzKWXXmrjl2WdWIEJRZjFdcSI EeUX3orOrOX9Kq7IeuuttwpKMl8JBl6ud3eNY2nmC0oyJiVB4gH/sXKuVytCvw1aFwEREAEREAER EAEREAERqCyBymh0ctSJWFIEXfbjW+28886ZZ5OMF4Xb5VFHHWVwc/PFt3Lo2LGjf8iuo7DIExC+ UQbRDvfyxbGFFlqoUZJx48ZVJNZRJfLGIiYuoXzjaSq53aFDh0bZMYtd165dG+0vdwczFt59992N TkdBhqsWs5CuuuqqJqTMvOKKK8zxxx/f6Nxq7FhqqaUMweZ9qzImuxg4cKAtDrdjF1vNlS93TEei ukuUKfyhtHz88cfN/fffb137Ss2aOXToUGup1taVK6H7St57Ydb7FXHMTj/99MKAwD2TmXi5t8eD +ftKMo777pzExcRKEBdb30qNjFFUh+4XhUK1IgIiIAIiIAIiIAIiIAIi0CoJ1FxhRuwYAu77cWdw Pdtjjz3KBtylSxczxxxzFM2QhmLOCcfjgnWaPzFA/Hje7VDwetpZCalE3p9//nmjqsCglhKKp/Tl l19WrAoomC6++OJG+REkH3c7ZgutJ0EBdsIJJxSqhJL3jTfesEpW39qMBNQd5YCkdgRQxqOId8p4 lJvExLr33nutUiZeE5Qut9xyS5u3Rqrl/YrJYbiv+Pd7FF58JIm74vsKMxTo3BewDnSCgg2Ltddf f93tssu4FVvRQW2IgAiIgAiIgAiIgAiIgAi0WgI1d8kkBll8tjGC7xOgvSniK+DIh5kynYQUZvGX Ipe23GVI+VSp2FmVyDtUl9CLbbntz3JeSGFWymonS74uDRYizq3K7WOsXXPNNXWnLKN+xCOLu8qi PCbuUjwmVu/eve1Mja5dbX35xx9/1BwBFoH9+/c3N954o529dI011mhUB1wC27rU+n4VV2jhUhm3 LsOtEvdrX+LnPfLII3Y2Zn8WZq5PX9Hmn691ERABERABERABERABERCB1k2g5hZm4Fx++eWLXNFw z8Qy6IgjjiiLNgHTmdnMF9/9L6QY4qUKlys3k6Z/bmideDhY//jSr18/gwIQCb0kEg8JF7sscbpw Ixw7dmwh+ymmmMLstdde1hWoqXljeXXrrbcW8nYroXzdsWosQwqz++67z+y5556ZiovPGBk/KTSJ Qc+ePTP3cTy/am/POeec9mUclz8nuGWi5IvHX2vL7pghy8Cslom+8sMxji+5NnxrUMrbcccd48mK tnE7xGpx9dVXL1L2x2dXLDqpjWyE7it57oV571dYXhLL0skrr7xSZMHMfuJcxt0qUYQR69AJvyG4 dPvCpDKh8een0boIiIAIiIAIiIAIiIAIiEDrJNBsCrPrr7++iCgvn7hrDhgwoGh/qQ0sTY455phG yVZeeeXCPqzNUEKgWHNC7KwzzjjDDBkyxO1KXRIn58033yykQaG11VZbFRRmuPgwK6bv+kgZzKSH VUop4cXNdyGaeuqpzS677GJf8pqa93XXXVf0Uk9dCB7fvn37UtWq6HFivqE8/O233wr54hKFVc5i iy1W2BdaweXq8ssvDx0q7Pv2228L626FQN9ZhdhHtRYUYb7CjJlETzrppKJqLL744hWJhVeUaQva 8GMFumr7Ci63L74kTakxwzlcHwR9d8K1t91225W06EMBw+yzvnXsdNNN57IpLONWhBxA+ZtFkV7I pAWt1Pp+Rcw47vFuEhYmM3nxxReLiIWsxLjn0H/EV3Py9NNPu1W7lBt0EQ5tiIAIiIAIiIAIiIAI iECbIlBzl0zobrTRRiZk9YUCC2UBiqYsgkXAfvvtZ5588slGyTfffPOifUceeWTRNhtYJWCNUErI P+5qRfwbXrZ8OfTQQ/1Nu47lnK9Ea5Qg2oHSyFeWkYbA9L5babl5U/ZFF13UqNhDDjnEoPSrpWDN 17dv30ZFXnDBBUWTQMQTfPXVV9YKLW5FGE8XUqzg7ltKsHBk7IUmCyh1blOP8yJP/D1ffAUM+9uy dRntn2uuuRopl8aMGVOYDZE0cUHBuuuuu5osLr/MjukLCpe4S59/3K0zLuMWZcsss4w7XFhOM800 hXW3ElLuumOtYVnL+xUKTgLzJwn3OWbCDUlIkeani7tt+se0LgIiIAIiIAIiIAIiIAIi0LoJNIvC DMXJOeecY0IvkpdccokhNtCgQYMMX/t54fXjk/3www/m5ZdfNijAcIcKvdiiYIhbLPFChaLOF9y1 UOBcddVViQob5zLoz+pJHsy2GBeUdLib+oLyg/0hpR7psFrbZ599/FPsOq6EvpSTN2VyHi/2vjBD Y3MpYXC/jFvhELfr8MMPNyH3OZSJxPryZ5P02+KvL7300v6mXb/22msNfZgkWB3ifnf++ecnJanq fqyUaF+ScJz4ZW1d4gp24rwdE1mWxmcSZQzh/rfZZpsVuTin8fOtUV06xuNLL73kNhstUervvffe jcrHhS8uxM+KS9qYjKdtidu1vl+lWYJxX8D9OSRpCjPcbuPxNkN5aJ8IiIAIiIAIiIAIiIAIiEDr JNAsLpmgXGKJJczgwYPN0KFDG5ElftOoUaPsHwexIOCFh4DupeJY8YKTFAsN90sCO/t54B547LHH mv/+97/WqotZ11Dk4Rp3++23BxU1vEhtvfXWjeqNJcNRRx1lttxyyyIF3HfffWfdK3v06GGwQKGO 7HviiSesVVNcGTf//PM3msEza964Q5E3SkXaGlJCUcdaW5c5WLiCbr/99lZJ6faxvPnmm60VH4pN XBBRjN5zzz3m8ccf95OlrqMkJX9fQYiydd999zWrrLKKVXJiFYgFEZMgoLSIu26lFlClg4ylJNdB LFzo07Yuu+++u4lbLTEjJQpVFOfELKTfUaBncdf0eRIMHutEf2KMn376yV7juPuhjCF/FP3ETmPC EMZrXFmHpWBIEc31HBcsGplxk7Ipa+edd25Vypla36+wIMP1NXS/S1OKYcmLAj/el/RXmhIu3p/a FgEREAEREAEREAEREAERaH0Emk1hBkqC5r/99tsmHs8sjhkFx/jx4+O7G20zix1ulsRCCwkvvSec cII57LDDrNLET/Paa68Z/krJPPPMY2ddTFJiYL2Fdcqpp55a9PLGixwv8yGLOL9MJhEgnlso0HRT 8+aF8uCDD25kBeeXX4t14tTBwVdQUC6KiKbMXoo11rnnnmstxuIvzk899ZThrx4FRV/37t2DbQ8p YOqxDdWuE1Z4KBXjE28w0UNosoc89UERhmUriksXB8udj5VrPK6VO+YvubbOO++8Rm7apAlZsLGf iUf4Q3Dxbm3WTLW8X3E/xrrPj0VnwUb/pSnMiCOHMv3hhx92yQtLKcwKKLQiAiIgAiIgAiIgAiIg Am2SQLO4ZPqkhw0bZpUc8ThOfppS61if4Z41evRoa2GUlh5XrWuuucag+MorTiEXmu3Rzwu3QyzW 8r4AYx01fPhw07VrVz+7ovVy88alDas9rK2aW+ivESNGmI4dO2auCrPcMeNoKSEeFWMB5VlWQdnB BAsHHnhg1lMqni6kGCN2V1LspYpXoM4zxGIJZTcTa2SRdu3a2QlEQrELQ+dzzZ199tlBRXUovb+P 8cykIFijhaRLly7WRTR0rLXvq+X9KqTg4p6KMjpNQnHK+HARj22XloeOiYAIiIAIiIAIiIAIiIAI tD4Cza4wA+nGG29sXe/cS+e0006biTQvQwcccIC1DsClKauShBchLJxwCQ0Fio8XjvUHgfPvuuuu zEqwJZdc0rp07rHHHiVf8lGM4EaKlQMuQqUkT964IO62225WmRgKSO6XFeIe2uef49bjccnYH9rn 0uOmBk+szULWdC4dis3jjjvOXHHFFUHXxFAZxKUjKHw8Zp3L0y05F9633nqrdaWlH+ISyj/EJLQv nlfaNorcuODaizKvOSXefuoTij1Yqo4hPqF9aflgsYSbLv2b5lJMHMEbb7zRKljj9Sf/0D72Y4mE myQuy6WU4qQnNhkWm1y3of4jjRMsTrkX+BN5uGOVWMbbhMIQV/ZKS6jPQvv8cqt1v/LLYD2k+ELh nDZWOI80ccE1POvvSfxcbYuACIiACIiACIiACIiACLQOAlNE8bMa6q0puNPhqskfccuI8cOLOlXF KglrKZaVevkkXhmxkAjQ/8cff1gcKGpQphGvLD4bZjm8aAPtYbZNApbzMksbyL9Tp05lKSFcPfy8 id+EFQ5ufsRjm2WWWVyyul3S388884x5//33bRyqv//+21oAYtGHOxsv/+UKk0YQ2P+DDz6wsa2w ZMTyjz+Udk3Ju9w6hc5D6dK/f/+iQ8RYW3jhhYv2aWMiAWLcjR071v4xwyzKDa5TxgvXU1OFMYnL MK7g48aNs3+MFVz4uGb54/6QV3lIrCxm8GRc4mrOeMRCjftNW1HQtPT7VVPHls4XAREQAREQAREQ AREQARFoGQTqUmHWMtCpliJQOQJYAT766KOFDLGCLBXbr5BYKyIgAiIgAiIgAiIgAiIgAiIgAiIg AhUlUL7pTkWrocxEoO0SYDZTX1kGiT59+rRdIGq5CIiACIiACIiACIiACIiACIiACDQzAVmYNXMH qPi2TQA34M0339y66DkSxFIjllZedz93vpYiIAIiIAIiIAIiIAIiIAIiIAIiIAJNIyALs6bx09ki kIsAsau+//57G78Kq7LevXsXKcvIrF+/flKW5aKqxCIgAiIgAiIgAiIgAiIgAiIgAiJQWQKyMKss T+UmAqkEmImRSSaShEDyo0ePNjPPPHNSEu0XAREQAREQAREQAREQAREQAREQARGoMgFZmFUZsLIX AZ9A2qS0uGBecMEFUpb5wLQuAiIgAiIgAiIgAiIgAiIgAiIgAs1AQAqzZoCuIkUgRODoo482Syyx ROiQ9omACIiACIiACIiACIiACIiACIiACNSQwFQ1LEtFiYAIBAjMNttsZuDAgZoZM8BGu0RABERA BERABERABERABERABESgOQgohllzUFeZbZbAe++9Z2OYjR8/3uCe2aVLF7PUUkuZmWaaqc0yUcNF QAREQAREQAREQAREQAREQAREoN4ISGFWbz2i+oiACIiACIiACIiACIiACIiACIiACIiACDQrAcUw a1b8KlwEREAEREAEREAEREAEREAEREAEREAERKDeCEhhVm89ovqIgAiIgAiIgAiIgAiIgAiIgAiI gAiIgAg0KwEpzJoVvwoXAREQAREQAREQAREQAREQAREQAREQARGoNwJSmNVbj6g+IiACIiACIiAC IiACIiACIiACIiACIiACzUpACrNmxa/CRUAEREAEREAEREAEREAEREAEREAEREAE6o2AFGb11iOq jwiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIQLMSkMKsWfGrcBEQAREQAREQAREQAREQAREQAREQAREQ gXojIIVZvfWI6iMCIiACIiACIiACIiACIiACIiACIiACItCsBKQwa1b8KlwEREAEREAEREAEREAE REAEREAEREAERKDeCEhhVm89ovqIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAg0K4GpmrX0Oiz8zTff NF9//bVZaKGFTMeOHZulhr/++qt5/vnnzZRTTmlWW221ZqlDayi0oaHBPPDAA4Y+bdeundlggw3M X3/9Zfu3c+fOZoEFFkht5vfff29effVVM8MMM5gVVlghNW21D7pxmaXeobqExlRT8wyVU2/78vTh 008/bf78889GTZhmmmnMrLPOamA/7bTTNjruOMbvGUn7G2WgHSIgAiIgAiIgAiIgAiIgAiIgAnVH QAqzWJecddZZ5v777zd77LGHGTx4cOxobTY/+OADs+uuu1qF2TvvvFObQlthKYcddpi55ZZbCi3r 0KGDuffee60SbeDAgWbAgAGFY6GV5557zuy9995mwQUXNA8//HAoSc32nXnmmZnrHapUaEw1Nc9Q OfW2L08f0tc//fRTYhNQYPfr188MGjTITDXV5Ftn0j0jaX9iATogAiIgAiIgAiIgAiIgAiIgAiJQ NwTkklk3XVG/Fdlhhx3MhhtuaF577bX6rWSsZiiInLJs3XXXNSjPllxySTPFFFPEUtbX5p133mlZ o5TxpRr1DuWZVL5fl9a+vsgii5j/+7//K/wtvvjiZo455jATJkwwV1xxhdl+++3temvnoPaJgAiI gAiIgAiIgAiIgAiIQFsmMNlMoi1TUNtTCbz77rvmu+++M7/88ktquno6+P7779vqTD/99OaCCy4w U089td0+++yzrVvmdNNNV0/VLdTl22+/NfBGQeNLNeodyjOpfL8urX0dy9K11167qJm491544YXm tNNOMy+99JLBcg2lmkQEREAEREAEREAEREAEREAERKB1EpDCLEe/Eg+JuERfffWVmXPOOU2nTp3M /PPPnzkHXrrffvttM27cOPPDDz+YJZZYwiy66KIlz//xxx/Niy++aNNhJUXZIfnnn3/Mhx9+aMaO HWtQCHXr1s3MPffcjZKiFPntt9/M7LPPbuNz+QmI3/bHH3/YMnBB+/LLLwvWNKx//vnnZr755vNP Ca67uqD8IQYUVju4NoaE9r311luGehE3jrROweXSY90zfvx4G4ts3nnnNb///rt5+eWXDX2y8MIL 23NcWtJ9/PHHdhM3TOpNfu3bt7ftJp4XMc3iZXAeMcuIU0XflBLc96g3+Xfp0iVYbxSNlDfbbLOZ GWec0XzyySe2DPqQMmaeeeZCMd98841VTLKD/vnss89s7KyZZpopsd7ljilXhs8iqXxYMyao6yyz zFKor1uhnshcc80VjPHl0rGEB2MCZoxRxhIWXL61W56+9vNmPW8fxs9P2qZ+++67rxk1apT56KOP zCOPPCKFWRIs7RcBERABERABERABERABERCBVkBACrOMnXjRRReZc845xypq3Cm8RG+zzTY2phEK kTQhoPh//vMf4yyfXFoUBptssok5/PDDi5QG7jguYCeeeGJBacV+4igNGTLExjhz6Zgk4JBDDrEK GbePZc+ePc0JJ5xQpGQ78MADzRNPPGGOPPJIs/vuu/vJzW677WbeeOMNa0kzzzzzmJ133rlw/KCD DrLrxFVDmZYkSXXp1auXOeWUUwpKFxQxp556qrnqqqsMih8nsBw6dKjZdNNN3S6rmNp8881tuWec cYaNL4eyxwntxGIKJQzrKJwQXDPXWmstG+AfJQecmQjAj2FGPrhA4o7ohPYtvfTSbrNoycQB1OHS Sy81KAadhOrtyoMriqL//e9/LrlVotF+XEaRf/3rX9ZyifVXXnnF1ps4a9TV5ePXu9wxRf5IPM+k 8lEKwox6XnLJJRNPnvQ/brq9e/e2W7fffrvp3r170XG3gRLsqKOOMjfffLO18HP7WaLwZFwsu+yy djflZe1rl0/ePnTn5V2ihEZhFr+O8+aj9CIgAiIgAiIgAiIgAiIgAiIgAvVNQAqzDP2DdReKDZQ6 G2+8sVUKoIi56667rMUJipJ4zCk/2y+++MLstdde5ueff7Yz7a2xxhoGZRTWauSBEoIZ9vr27euf ZpVkxx9/vLVcWn/99a011Q033GCuvvpqqzhCaYZQvz59+ljlDVZLxBvDagtrGCYwQMFFsHssvfII FllbbLGFueOOO8zff/9tZ+yk3r41UDy/eF2YmRJrrzFjxti//fbbz9af81AGEUwfSy8Uj8xaiSLv 8ccfNyj1UIJst912RUWgeOEY9UChhjUd7nG088orrzT77LOPVeBgyUddsIpab731rPVTUUbeBudQ JhZ3cKSfURBxfkhQHN5zzz320Morr2yWWWYZc/fdd5tPP/00sd4oPrFqW3XVVW074YF1HEorGGB9 1qNHD6uQRQmFSyaKviQFVLljKtQety+pfOoAj8cee8yOK9/KjLGBoEhKqivHuX6uv/56OwbpD5hh bfbQQw9Z5dMBBxxgx4c/C2WWviZvJG8fTjwr3/8oYVFkIliXSkRABERABERABERABERABERABFov ASnMMvTtxRdfbJUoWNice+65hTMWW2wxc/755xesggoHYisoGlCWzTDDDObGG28sik+FGxsWVlg/ xRVmZLPOOuuY4cOHF9wHUYihKBs5cqSdwZHzjz32WKssW3PNNa3yzbka7rjjjmazzTazCqvLLrvM upTFqpa6iWvk6aefbuuGcgNlV1rcJhRNSXVBYYcFE4oplI24jqIoQvmGomuVVVaxdUHxgXUZSkGU LBtttFGR2yKJUDgSlwwlE3LooYfaAP8PPvigVZwMGzbM3HbbbVbhhRKONiTJo48+auvErIcodGgz glIMi0CUjr5gIYayDOUXdUQBhqD4wvoLK6tQvVEEMWsiik8EZeHaUZws3FCJibX66qtbPij4UJh1 7do1td5NGVO2AoH/6J9Q+VjUoUxkDKDo23rrrQtno/BF/H2Fg96Ks97bZZddipTLe+65p7Vcw60T q624K2ypvqaIvH3oVSu4ivsp1o9OcJ+mbuedd551+WQ/SmmJCIiACIiACIiACIiACIiACIhA6yXQ rvU2rXItc4oZ4luh2EKBgOBmh3XTTTfdlFoYlkIoXpi1MR7MfamllrLn4uYVF5QyvrKM41hiYdHG S/0zzzxjY4o5qxdmgnTKMtJitbbTTjuxWrCIshtV+o/4Zkl1QVFEwPSTTz7Zuk1ikYWghHTKMlct lFUE60eZ9Oyzz7rddgkTlH+uT9jpznextIpOKLHhLKSwhHPKMk6BI66dcXHpqbdTlpEGxR/KPiRU bxRDTllGGuK5uVhw5dS73DFF2XkFFrhIIq79rKPoo+64r2KJmCYom7gG9t9//6JkWAq6OHvxayBr X7s6Ze3DogoENlAcYi3n/lZbbTXrmowLLIKF43LLLRc4U7tEQAREQAREQAREQAREQAREQARaCwFZ mGXoSWKM3XrrrTbYPzG/UObgioeFEIoC30UtlB2ujfzh4ocFFjGaCLCOYgXXScS3aHF5oITxFWDs Z7tz5842LwLIY/mD4G4Zt85hv3uxx6Kr2uIUHqG60JYtt9yyUAWX1tWvcCBamXXWWW0biaUWrzf5 YA3mi1M8/fnnn/7uTOtucgAmU8giWMchKE/9+G7xc+P1DrnDUm+UjOXUu9wxFa9n1m0UtVhCYiGI KylKW2c1hhVk0kQULn9cMDlv9OjR1g0Tl1LGPxMnJF0DWfs6bx+6OqUtUdY5QTnL5B5M0IHiM3Sd ubRaioAIiIAIiIAIiIAIiIAIiIAItA4CxZqH1tGmircChcCIESOsuyMuecQywtKMP9zvjjjiCLPD DjsklksspoMPPrigYGDWQyyMeAFHiYACLY/gNodwLrMNIijOUDDExVm04RJKvVH2VUtK1cUv10/r 73frrt4undtf6SWzKiIogLKIqw8KH/6SxOWbdLyp+ys9pkrVByURfygxca8ltpxzx9x2221LnW4t MVE2//LLLzYt4x+lH8rfF154wcarK5lJQgLHOmsfJmRT2I0FI8pwiQiIgAiIgAiIgAiIgAiIgAiI QNslIIVZxr4ndhd/vPATmB5lGW6FKK2Y/Q8XPdzLQsJsiljjEMOMGSuJf+QsxwhWv/fee4dOS9z3 9ddf22NYKM0777x2HYs1Zmz0LWM48NVXX9njKBPiyjJ/ZkqbqIn/laqLnz1psQxybfGPse7q7azH 4scrtU0MOCz1iFOVRbA0ot64X7pZQ0PnxfshlKYp+yo9prLUhThlKMwYy7ivoqhCsVlKucSEEf37 97fXDsrnY445xk584Mokzh75lit5+7DccnSeCIiACIgTZJD9AABAAElEQVSACIiACIiACIiACIhA 2yEw2e+o7bQ5d0uZxZJg/wT+xj2rV69ehtkrCbyPoKh69913E/NFwYZsv/32Ngi/U5axj3PzCAo6 6oF0imbq4w9BKRGP98X+J598kkUhHevTTTcdC+PcIu1G9B9WS8xMmSSlFGxpdSFvJkiAI+6KWBYh jo1fJpZbzH6JuDz945VcZ1IAxMVe8/OGdVy6dOlidxHPin70/zjABBEXXnihbWP83DzbpVg7bpUY U6F6hcrv3bu3dYd96qmnCjOd4pIcd5GN5wdbLByRM888s0hZxr681wDn+JK3D/1ztS4CIiACIiAC IiACIiACIiACIiACIQJSmIWoxPY9//zzdobDs88+u+iIr1BJi+GEsghh9kNf3nvvPWtx5u/z1znv 8ssv93fZmfoI+I+SgKDzWLUxkyBy0kknFVlKETONWTkRfxZDp2BAmeYmMCCO1gEHHBBU9OBCiiRZ g9mD0X9pdWHCgzPOOMNyJJ7XVlttZU9D8cSMlk5Q/KGMpF7UM21WTndOU5ZutsP77ruvyMoJN0Hi zcUFV0Ssx2B7ZTS7py/0FW1EaRa35vPTpa1nZV3umEorm2Np5eP2u95661nFqgu0T2yzUuLqSjr/ GkApx0QQeV2S4+Xl7cP4+doWAREQAREQAREQAREQAREQAREQgTgBuWTGiQS2seIZM2aMdUV7/fXX zQorrGDd0ZghE0Gps/jiiwfOnLiL2RFRTmEBttFGG5nll1/eEDwepUupgO/Dhg0zN998s1l22WXt OSiYiFX273//u+DW+Z///MdOPoAlz8Ybb2xWX311aymGuyeKp6WXXtpat7kKbrrpptZCCCsuZpgk IDszHia5JeI+idvi0KFDDYql/fbbz8Zfc/n5y3hd1lxzTevC6FhRNm6W/KHEo20DBw60kypQDspJ FIkopYYMGWKmnXZaP/uKrzOzIgH/UeQQhw7rQeKUwRnlXVxIu+uuu1pF5nHHHWfjeHXr1s3ye/PN N23ywYMHF2bAjJ9fatu5tdI3O+64o1lppZWCrp9NGVNpdShVPgoyYpghsKDtpYR05Dtu3Djrfoyi F8UcY+LTTz8tdXrJ43n7sGSGSiACIiACIiACIiACIiACIiACItDmCcjCLDYEXOB8t+QwMZqGDx9u FU+4E6LkYbZAFCp9+vSxx2LZFG3269fPDBgwwCp/3nnnHXP99debZ555xirOUHwhfswrv2yUSm+/ /bY9ByUOlmwXXXSRYeZOJ8STwuIH5QrujNSP+GrkSdnXXXedmXLKKV1yq/A78sgjbX2wkiMeG4K1 D8oNxK/PIYccYicVYFZD4le5wPc2Yey/eF1GjRpllU+UT11OOeWUwhlYxKFcQnny6KOPmhtuuMEq yxZeeGFbZ5RXThwTt3T7Wbq6uqW/L57ebfvLa6+91vTs2dMqGbGEo29RBBGbzs/LbkT/wY7JHuae e26r4MM1lxhczO7J5A59+/Z1SQsTMbjyCgeiFVdft+QYCkxmE8VtFtdH6oK4892y3DHlzg/lyb6k 8jmG9OjRozBBgm+1OPFo+H+s7Yi51r17dxvHDEUus84yO+agQYPMYostZk90HFwd3dLP1aVxS46R Lm8f+nm6dZdnqFyXJrR06d3SpXHbbun2aykCIiACIiACIiACIiACIiACIlD/BKaI3KIa6r+a9VND LH+wxCKAPzP9scwqxAfDsgwhFlZWtz0mGsDqisD9HTt2TC2OMkhLrDXif/mKsviJv//+u60PioKu XbsWFDjxdGyjHMRCiPbimueUC6G0bp9rL3VYaKGFElkxBLE0wuWT2GaVmu3Q1SPrkvqi0MQaKmkC h3heTE7w2Wef2TrjQloqnlf8/KRtLANRTBJUP22cOMbkk2dMJZXr9ieVj8IY6zbcaomjNssss7hT Si7p588//9xaZ2Jh2KFDh4IisOTJGROU04cZs1YyERABERABERABERABERABERCBNkRACrM21Nlq qgg0hQBKtP3339+6J2NZibuwRAREQAREQAREQAREQAREQAREQARaIwHFMGuNvao2iUCFCfTv398Q ow2XX+LK7b777hUuQdmJgAiIgAiIgAiIgAiIgAiIgAiIQP0QkMKsfvpCNRGBuiSAK+XDDz9s64bL KZMdEGdOIgIiIAIiIAIiIAIiIAIiIAIiIAKtlYBcMltrz6pdIlBBAsyM+dtvv9kJMJorxlwFm6Os REAEREAEREAEREAEREAEREAERCCVgBRmqXh0UAREQAREQAREQAREQAREQAREQAREQAREoK0RaNfW Gqz2ioAIiIAIiIAIiIAIiIAIiIAIiIAIiIAIiEAaASnM0ujomAiIgAiIgAiIgAiIgAiIgAiIgAiI gAiIQJsjIIVZm+tyNVgEREAEREAEREAEREAEREAEREAEREAERCCNgBRmaXR0TAREQAREQAREQARE QAREQAREQAREQAREoM0RkMKszXW5GiwCIiACIiACIiACIiACIiACIiACIiACIpBGQAqzNDo6JgIi IAIiIAIiIAIiIAIiIAIiIAIiIAIi0OYISGHW5rpcDRYBERABERABERABERABERABERABERABEUgj IIVZGh0dEwEREAEREAEREAEREAEREAEREAEREAERaHMEpDBrc12uBouACIiACIiACIiACIiACIiA CIiACIiACKQRkMIsjY6OiYAIiIAIiIAIiIAIiIAIiIAIiIAIiIAItDkCUpi1uS5Xg0VABERABERA BERABERABERABERABERABNIISGGWRkfHREAEREAEREAEREAEREAEREAEREAEREAE2hwBKczaXJer wSIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAmkEpDBLo6NjIiACIiACIiACIiACIiACIiACIiACIiAC bY6AFGZtrsvVYBEQAREQAREQAREQAREQAREQAREQAREQgTQCUpil0dExERABERABERABERABERAB ERABERABERCBNkdACrM21+VqsAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIQBoBKczS6OiYCIiACIiA CIiACIiACIiACIiACIiACIhAmyMghVmb63I1WAREQAREQAREQAREQAREQAREQAREQAREII2AFGZp dHRMBERABERABERABERABERABERABERABESgzRGQwqzNdbkaLAIiIAIiIAIiIAIiIAIiIAIiIAIi IAIikEZgqrSDbfHYm2++ab7++muz0EILmY4dOxYh+Oyzz8yDDz5ovvzyS9OhQwez4447Fh0vteHy 7ty5s1lggQVKJa/r47/++qt5/vnnzZRTTmlWW201W9emti+UZ7UhVLpPq9mGpvKtNst6yl+smt4b Tz/9tPnzzz8bZTTNNNOYWWed1XAfm3baaRsdd+zj99Ck/Y0yyLmjmtdczqpULLlj1Rp+KyoGpRkz qtQYa2hoMA888IChf9u1a2c22GADs8giizRjy6pXtMZwY7aVft5oXIL2JBGo1DUcyr/exvpLL71k fvrpJ7P44oubueaaK1Tliu2rt7ZXrGHKSAREQAR8AtEDnMQjsNdeezV06dKl4YQTTvD2NjS8/vrr DUsttZQ9xvE111yz6HiWjT333NOef95552VJXtdpXnvtNduWrl27FurZ1PaF8ixkXoWVavRpNdvQ VL5VQFi3WYpV07tmmWWWKdzvuOfF/7j2jzvuuIa//vqrqLCke2jS/qKTy9io5jVXRnUqcorGb0Uw ViyTSo2xQw45pOg6uummmypWx3rLSGO4uEeq8bxRXIK20ghU6hoOlVFvY33TTTe195n//ve/oepW dF+9tb2ijVNmIiACIjCJgFwyfe1hyvoll1xifvnlF/u15l//+peJfiQSU995551mww03NIMGDUpM 0xoPTDHFFC2qWXn6NKlh1WhzSx4/O+ywgx370cNpEbKk/UWJtJGbQC3GChYw//d//1f446v1HHPM YSZMmGCuuOIKs/3229v13JVvpSfkGeu16L9WirmmzarEff6DDz4wt9xyi633uuuuaw477DCz5JJL 1rQd1SgsaQxXglk16ttceVbieSNP3fPch/LkW07apLok7S+njFqckzTWa1F2vZah67xee0b1EgER qCQBuWRmpPnee+/ZlP369TMDBgxIPevbb7817777rn2pTE3Yyg6effbZJrI2MdNNN12LaFmePk1q UDXa3JLHD+P+u+++s8pln1nSfj+N1vMTqMVYGTx4sFl77bWLKhd9cDEXXnihOe200wzuH88995xV qBUlaqMbecZ6LfqvjXZDRZuNkphxjhtlufL+++/bU6effnpzwQUXmKmnnrrcrOrqvKQxXI3fxrpq eM7KVOJ5I0+Ree5DefItJ21SXZL2l1NGLc5JGuu1KLtey9B1Xq89o3qJgAhUkoAUZiVoEvcABQB/ yOyzz26IQzHnnHMGFUPffPNNIe1vv/1m0xLvZ6aZZmpU0ieffGJeffVVm9cSSyxhZp555kZp2EEs grfeesvGTovcomzMk6SH7e+//97GR/nqq69svp06dTLzzz9/MN9//vnHfPzxx+btt982M844o+nW rZuZe+65g2mz7KS98OKlwtUPbuybbbbZbBlZ2+yXhyXL+PHj7S4YzTLLLIXDxE+gDbzAzzPPPKZ7 9+6GGEtpkqVPqTcPc8SrQwE433zz2XgQ8a9poTanlV3qWHOPn6T6leKBohRW9BXC+ueff27HU2g/ PJ3Qd4zBcePGmR9++MFwLSy66KLucHD5448/Fq4JxjfnhOJpxU/m+sBSFIlfF1muM388zzDDDCZy szEffvih6dGjR+L16+pAPLA33njD3hOITcX1Rn5//PFH8H5Sqj5Zxko514erb9qS62Dfffc1o0aN Mh999JF55JFHqqIwKzXuQnVkbLz44ov2EBY83KuTxI0jXoSIWYk1nbt3uXM4xnXOvZ8+94V4l67/ iOdYaqz752bpP5c+632zKff0rO2MfxDJM8ZKjWna25RrjPZzPY4dO9bet0O/ae73hN+peeed13BP eOaZZ+y9arnllnPIi5bky1jhHH4rEb+e7EvrI36/+J1CiH/KOGGctW/f3u7jvyxjMa3uSy+9tP2d dO36+eefrSIbBR3tcr+Lf//9t8ECmOcYxjuMQpLl2ksbw2m/jeW09ffffzcvv/yy7a+FF144U+w3 2vrFF1+Yqaaayj4f+O3kfsxzUrwfSFPJ56i05w3qVU79/HbE15N+i/3fXM7J0gfxvOPbpcZIUl14 zix1r8z7XOCufZ7bGOuM7QUXXDBe5Ubb7priQPz50k+cNtb9dKyn3Qv8tFnuh3760HrouSKUzu0r VSa/Z/yuIfFnJPYxbsiD5y3io2W5zunrtOe0pvxuUSeJCIiACFSdQPSjJPEIxOPsXHzxxUUxR1wc n5tvvtk7a/Lqdttt1yj96aefbhM4X3/i/kSWakXpll9++YYoGPDkjKK16Iew4aSTTmqIfvgbpR09 enRRWjYii4+GSHFQlDZ6sGw4/PDDG6IHm6L0r7zySkPPnj2L0tI22h/9WBalDW2E4kG49vkx2ty+ LG0O5Rk9zDQccMABtp607YknnrDVib7WN2y++eaN6r/iiis2lIrbkNan0QN2wxFHHNEQvUQ0yrtX r14N0Yt4EQ7XPtfmUBuKTiix0ZzjJ1S1rDwef/zxRrwYT4899lhwP/kiTz31VANc3XXllmussUbD iSee2BA9SBVVK3o4azj22GMbGNcuLcvIZbDBvybi/UIm9J2LQ9i/f/8GV4c815nLd9iwYQ29e/cu 1IF+T5NIodTANe7XOQr43RC9yNp9/pjNWp+0sdKU68O1w8Uwe+ihh9yuRst99tnH1p/7hpP4PbTU fnfcX2Ydd5zjX3OXX355A7HVfM7HHHNMoa9dGUnjiD7yxxHpd9ppJ5vfZZdd5k4vLP1YMUnXgBtn hZMmraT1nxtnWe6bLt+m3tOzttOVl2eMZR3T5O3anvcai6wcGyLFdVHfMw7iv2n+eCGGmBsvlJsk /jkujatnlj6KPuQ0qtdaa61ls8ozFv16xOvuH4sU2UW/YZGFnL0XRx/eGtZZZ52iuuy///4N/M46 yXPtZRnD7reR/MttK9dkpPwuqjf9Sn5p8uyzz9pzImVio2RjxoyxxxgzvlT6OSrteSNv/dyY85n6 dWe91H0oTx/E83bbWcdIUl0q/VyQdO3vvffeDdFHOFtt//pw7Uh6vnTH/WWWsZ7lXkCeee6Hfh3i 69V4rnCcuHdGH/TjRTbsscce9rpx98vQmEwaY/HnNDJv6u9WowpqhwiIgAhUgYAszEqoJPn6usUW W5j77rvPWkqttNJK9ktJfAZNlw2WJnwJjX50rEtm9FBsrZ7ccZbE/eEr8Kqrrmpny4we3OwXzUix ZR5++OHCF+yDDjrI3HPPPfbUlVde2UQvsObuu+82n376qTnwwANtfaIfcXsci4pTTz3VWlptvPHG tkxiptx1113WCgQLLxdTDSuXrbfe2loDsT9SPFnrHmYAvf/++80777xj7r333sIXaVtAE//L2ma/ mGi8G9zB7rjjDsNX8ksvvdSsssoqto3Rj7S1JGAmPmYa42tX9BBmv0DDcdlll7Wz+Pn5ufW0PoXh 9ddfb9u+3nrrWeZ8RY2UBgaXmkh5Z+ivLNZMrrw8y+YaP0l1zMoDSwmuE/oqepi2M6di8Ze0Hwsl vqxHLz0GSwgsriIlmbUCwGKFcUvMF/q3b9++herhDs01glXANttsY/NnG8uDgQMHWisR4m3FhTG/ 2267WeuySFFsohcOO8Mr6fJcZy7fSHliV/lSjgVp2njAeiVS0Bm+oq4duTZyD+EaIx4KrOKStT5J Y4XrpinXR7w+SdvRQ7GJHnbtYSxZKylZx53PHUuB448/3loWrL/++vaeesMNN5irr77a9vWQIUMK VYyPI2YtjpTxJnrBa3RvLZxUYiVtrIdOTeo/P23W+2at7+l5x1jWMe23Pc81xu9fnz597DWGtSkx RLGEwAIy6TeN8cJvIvciLFq5X5UjWfooUq5bK1rqiRULvy1u9rpyxmJa3TnGbyD3Tmaw5v6IhRvP DDx38HyyySabGCwKn3zySXsf4nqJlL+2+XmuvSxj2GdablupO/1DHbEexAWcfr3yyitNpLT3i2jS ejWeo9KeN7iOKi2l7kPl9EG8jlnHSFJdkvaX81wQv/Z5HsSak+c0/vbbbz/7GxBvQ9LzZTyd284y 1rPcC8ivnPuhq4dbVuu5Ai8NxixW/zzP+XEWuafynI3wDpEk8TFGf4ee02r9u5VUX+0XAREQgZIE oh8NiUcgyTrCfZWNFGde6vBq9IJmv8BEAU2LErgvMXztjRRShWPRj7tNzxed//3vf3a/+wKHdZmz quIAFjfRj61NjzVV9ANm0ztLD77++ILFxQorrNAQ/bgVdm+77bb2/F122cV+6XIHIlP2gjVbFGPF 7Q4u3VeoUrNk5mlzPM+jjz7a1pMvy08//XShHlg2OAsSZp5yErnaNUTBlG17ox96tztxGepTLJvI G+smX6IXjoL1nl+ma5/74htvg59H1vXmGD9JdcvLg7EGPyzHfAntxwqCtPRv5O7gJ28YOnSoPcb1 6CRS6Np9WJdFL3put70mIiWxPRa9WNn9fr8wrrlWKCtyIyya1THvdebyjV6wGxhjcQu4QqW8Fa49 yo4Uet7ehoYoJlLB6sxZmOWtT2isVOr6cBZmkdLeWnLw1Zg/rgUsB7i/0S7+XnjhhULbku6hSfsL J3orecadu+aoB5aDfL13MnLkSFs/7rmRW4jdnTSOOIg1Gvn499a8llehse7qE1+G+o80bpxl+a0g fSXu6XnamWeM5R3Tru1ZrzGuwUhZb/st/psWuQs3YF1En7rfNH+8MIbj1tfwjIs7J/R7l7WPbr31 VluPSFlVyD7vWHT1oD3xuvvHuNbcdcD1Sno3rqOX1EL5ztIdK3Qnea49zik1ht1vY1PaSj2jDyuu ig1utlHGfZrkteCq5nNU6Hkjb/3cteGYprU9dB/K2wdJ+ecdI6G6kHdof57ngrRrn98tN+4jJWuR JTJlJz1fcixJSo31LPeCvPfDpLpU87ki+jht2TkrWFcH1zdYYrv7S3xMJo0x+ir+nFaJ3y1XNy1F QAREoJoEyo9gW1IVpwRJBKIfGMMXXSfEWXDxJYgrgvBlB2E2LSzRnPAFzn1R5Qtx9MBlD7m4KsRE I54QsSMQrGr4Ghu5b9ht4kQ9//zzdv3f//53UbweYj64ejnLNpuwAv9labNfTOSKaq655hprbcdX ZCzsnPgxhqIXYhuLhWPEF4rcWm17+YJejmB5hFVC5KZSdDpft118N2I2NadkYZl3/CS1p5o8sL6E NTPHMeuiL5HrpN30WWNdiXBNYGnohGuC4PMnn3xywUrCHSOe0c4772ytKbC8PPfcc208G3e8XE5Y jDHGKDtNuJ75Ao4Q88sXLEbdde/2l1sfdz7LSl8fzArMV2f3h9UKTCMlti0W64+k2E9+vfKslzPu sJ4ZPnx4UfuxQsSKlrgsfJFHksYRx/jyjzWrf29lf3NJlmu9Oe7pecZYuWM66zVGrERn6cjMk37d sLKKFIG2++K/aYwXrJYZH02RLH2UlH+5YzGt7hzzJxXwf7v4zY9e6gvVcfdZxpCTcq49d27asilt xdrQPeNQhrv/u+eltHLzHHNl1OtzVJ62hNKW2wfxvKo1Rignz3NB2rXPs6x7LojHXUx7voy3Nc92 lntBufdDvx7Vfq7AW4CYnHizMNmJE6ziESxm/fusO84yaYzFn9Oa43fLr6fWRUAERCAPAblk5qFV obQu+K6fHS/O/PhHX23sbtwpER7ceDlNEhQCCC/v0RdsG8R29913ty99KJnWjlzA+PFzgfJdvpxz wgknNHrhJ1gp4vK1GxX4L0ubXTG4lOCOhxCw2zcJZx/uU7hc8kN+3XXX2T9c+jCZ5yEp5JLHeVkE JQYBf6OYKdYNE7dBXp4Jcoo5OoJLS3NKFpaun7OOn6T2VJMHZvr8oVCK4pLZIP4E1oV3iLVTnoWU M7wE+i+Crj2R5ZZbtS6fPAT6Ui4n92Ll5xVad4G+eWBHIV1Kyq2Pn281rg9ewp3QdgL44sbGCwIu cJWWcsYdD+Txh3i2uTcwxty9LW0c4V5LelxFKn0PLIdRnmud/Gt1T88zxsod01mvMdefsAqNRXe/ iPcn4yU+iUO1+igpX1d3V0c/XdpYTKs7x+L3OT72uAD3fhnuI5D7wMaxcq49P8+k9aa0leD4vrgP De55yT/WlPV6f45qSts4t9w+iJdbrTFCOXmeC1x7Qtc+18GWW25ZqDrPFUip58vCCWWs5LlfN+XZ rNrPFTx3RxaR1u0ZJRnP2zwXE7IA4UNUkrg+Cd3T/Oc0QiA4qdXvlitPSxEQARHIS6D4KSTv2Upf NQLMKoOgsOEvSYhNgvDjNmLECKtoitw67cw1WJrxR7yJKJC9iVw47MxELi/ilyQJcaWYTTDrS0tS PuXup9zItNLGojjzzDML8dfIjwchYkXwh3USL8K8lPGHNRo/7lgOMKtdXsEaD4Wjm0kR6z8e4HiJ jtzObNy4vHk2R/q84yepjtXkwYPrwQcfbGPoUD4zycIbRQwPZ8wM64trU95+pf84l6/KKJD9WEUu z6zXmV+fLOvu+sxqxVKJ+lT6+sC6A261lEqOOzf7MGMKcYyTxpGzdnTpatnucsry61mre3qeMebq V61rzOVPf1KvuLj+5DeNuHv1JH7dQ/VydXfpQmkqva+S155fN9eGer7uWttzlM+f9Ur1QbXGCHXM 81zgtyd07ZNfSNKeL0PpK7nP1bkp98NaPFdE7pJWYUY8Wd4fiGtM3/BRIvRhwjFy7Uu6zuPp2K7V 75YrW0sREAERyEtACrO8xGqUHgsOviLhfombUJL4lh9YVvGHsoevNyjLMI/mRfGoo46yrmxummi+ QKMA8oNmx8uIW2vEj1drmwefKFaEDTrKDzUv7ARy9b9YYTGHKxh/BFB/9NFHbYBXHuSwPDvjjDNM NGNRrioSgB03IPjx4BzFM7LWbC6TzTbbzFqeuO16XpYzfuLtqTYPlJp8vcTKgy+MBOp2Y46AztEM V0VVmnfeee014aY8LzqYsIH75tlnn21dNfny6caTS14JTi6v0NIF9o5m6godbrSvUvWpxvXRqLJV 2lHpcefGi7NKKTWOsMRBXHrXTBT49SiVvqdnbWfWMVapMZ3Env5EsE6N4uTYwPZ+WtefKK1xt60n KXcsVqsNlb72/Ho2Z1uzjmnq2xzPUXnq5zPNu16JPqjmGKE9eZ4LSl37IT5Zni9D51VqXyXuh7V4 ruAjGZZmKOd4V3DumGnB/mFUaow5jpX+3XL5aikCIiAC1SAw2c+mGrm38Tyb8hAUBSu19IgThBLB /+NANFW5iaY/L7gN4cJIfCZmcuTrWa9eveyMccT4QniRiIKfG5cvX4pwU/LzZZ2YaOR788032/Oa 4z+UgFiJMQMoD6/UnVm/iEOEMCMibcUdE8EiKZrswDAjHoo1hBl+8gpxcLBCQLBqw+3IF+pRS6nl +Am1qyk8kuru73cm+dtvv71BGcn4cxJijZUf4s5zaVlynTAmmOHUF8aRU8ixn5mafDdNdz1kvc78 vLOsuzGEZct7771XdArXIK6+vpRbH59rta4Pv57VXG/KuIvXi48F3BORTp062WXaOOKrP7PwIS69 i3/jXE3sweg/+u/XX391m42Wfp80OhjbkSdt7NSK3dPztDPPGCt3TMfbmbTt+okXeRfT00/rrBdc Ov9Yc6/nHYvVrm9Trr1SY7g52urGNB/BnOLcMYzfe9lf6+eovPVzdc+z9PulEn1QjTHi19H9vmd5 LnDXdOja5/58/vnn2+cC3x271PNlFrZ+fbOk99NU4n5Yi+cK3KCJVYZcddVVJprIycZ/dfv8Nvnr aWPMf05zHOr5XcRvl9ZFQATaNgEpzKrQ/7iWIfEHtDxFoSzihx2l1pWRm6Ev0cyX1oIKpZn7Yk4g /7POOsta0/hpnRsS+/haxF/Pnj1tEiyw3Nd3dqAswkWOfHgoam7hSyCWR1jB8dJLvRBiUbD+n//8 xyoB/Xq69satQ/w0Sev8cDuJZhxzq9Y1lOCxcRfBQoIMKzxsEOw1mmGzZOrmGD+hSpXDI6nuof0u f5819UCxRL/HZauttrK7eOi67bbbCofJB4UqYwILw5AQJJprCmHcoxhB8l5n9qQc//FAv9hii9kz zjnnHKv8ZYM6c625uFouy7z1CXGt1vXh6ljtpRsXlOOPDV5S0q5DzuPe6AvBqVG084LhJk9JGke8 dB1//PF2whTSo6xH3MsJihcX64nYSQcccEDhg4VfZqhP/OP+ep60/nn+eqXu6XnamWeM5R3Tftuy rONiHc3aZ5Pidu1bc/L7eeONN9pjpSwjspRV6TR5x2Kly4/nV861l3UMN0db3ZimndHshIXm8nsc zZJY2HYrtX6Oyls/V88sy1C/VKIPKjlGQnV0+fv3ftobei5Iu/YJ14GnAc8FodhiSc+XaWxD9U1L HzpWifthtZ8rXL1drDKsy+iX9dZbr2Sok6Qxxvn+c1qlfrdcXbUUAREQgWoSkEtmFeg6M3EsFXbc cUez0korpbpVhqpAoPtdd93VvgDygk8cgW7dull3wzfffNOeMnjw4ILbEF/jxowZY82mUcpE03Vb U2qnQODlzwVFxz2TL/EooXCDw/2QQPYE9CTYOq42xPGqB+HBgBdT4rA510za0rFjRxvAlh/naIpr 06FDB2tlhAICd1PiteUVmNN3zN6DOyAv2DwgwZDZgpoiuAUyS1/fvn1Luoo2x/gJta0cHtSdPhg6 dKi57777zH777WctAEP7maABJQRjcaONNrL9SBw6XnJDwZwZ07z0Yv04cOBAO8kFQauJ2YcCDMUq s8ImyaBBg+xEDiiJhwwZYq0J8l5nSXkn7eehHMUYrtU8dDK7FcH/+YrOJB9xyVuf0FjZa6+9qnJ9 xOtare1yxp2ry7Bhw+z4wLKQsYRylT7wZwQOjSM48rLMSxkfKhgfzl190003tS7i3M9RvBLwGrdv XzHjymcZGutYwYYk1H9pLvihPNhXiXt6nnbmuQfnHdNJbUzbz8cTJrfhQw+z4a6++urW+g/XbpSc Sy+9tOE3st4k71isdv3LufayjuHmaCtuuChT+Y049NBDbZxXfluY1CNkJVTr56i89cvT/6H7UCX6 oNwxUq3ngvi1v+aaa9rQDe7Zl/saH1C/++67RvhCz5f8diRJ1rGedD77K3E/rPZzhas/7xzU1ykv nQLNHQ8tQ2Ms6TmtEr9boTponwiIgAhUmoAszGJE+SFC3NId5iUqtN8d95e8VDE7D+b2fMl0M8u4 PN3SP8fl75YcO/LII62iiB8bXuZwr+RBj9mzeAlH+eJk7bXXNsOHD7cvBpifo1SgXKwm+vTpY4+5 tMQOILYZlma4JfAljm2UZSiJrr322pIz+rk2uCV5u3W3TNrn6uHa6pbuPLd06ZiJD2UfX6hQeuBi hyUJij5c3XgYvummm6yiBnNwODjrEJdHaBkvF2s94md0797dxjHjZYuZR+FCuc5SyJ1Hnq6uSUtX rjvuttOWzTF+QvUph8chhxxiv0BigYKCyAWADe3v16+fGTBggFVMEIcOd0qUiihAUXAgPmu2sSBB UYwik7h1jHOUZfQNY4K+Qxxvt2Qf142zKnjwwQetEpr9ea4zl59bcn4p4TrDNYSXIxQtjFX40MaF FlrInu7P1penPqGxUq3ro1Q73XHHxi1L7XfH3TLvuPPLQaGKOzZjCWUZX7EvuugiO4uwy59lfBzh zo2ybOGFF7au3ri0O+EFgD5BgYYFK7EhEazdeJlA/HEaGus2UeC/UP+RzLXJLf1TXVluybFK3NPz tDPvGMszpl2b3dJve9I6SmgsePk4xf2A+wK/aTDiPoP7vps50uXrlkl5+vtdWrfkmFt3Sz+96xu3 5Jhbj6fPMxbduW7pl+n2uWWWYy6tW+a99igjzxiuVFsdS7f02xpfx2rUxT/lYwzPUChVqAvi51HN 5yhXjmPt6pmnfu5ct3R5hJZJ96E8fRDKt5wxklSX0P68zwXxa3/UqFH23s/1Tl6nnHKKbYZj5pau bfHnS7c/tMwz1t35rt/dkv157ocun/gy7bki9LtUbpnOMpf3EGaij4vj6ZYcj4+xpOe0Svxuxeuj bREQARGoBoEpoq9s9RnJuBqtrXGefNlGYcBMVzxkNEWwisE6hZduzPjj06z7eWMJgfUDLzXMOui/ jPvpWKeOpEexxle4UjPbxM9v7m2UWViEoTjDygwTff+Hu5z6cUlg/UOwU5iQb1PzpB484DDzUDyY fVIdm2v8xOuTlwdjiT5h3DGe3INi0n7iQGENhBDXIsu1Qp2w+iPQd6X6nfLzXGekzyKMJWKy8cDJ yzzXJgpgHuiXWmopO3ZHjx4dnHkqa32Sxko1ro8sba5EmrzjzpVJvCKUX9wrsURNEzeOcJ/vHCnb OSdJsMJlnDKeu3btWhjXofRJYz2Uln1J/ZeUPm1/U+/pedpJPfKOsaxjOq2Nace4n9D/xPLEgsQp ytLOqYdjecZitetbzrWXZww3R1u59/IMhVKcjyelpNbPUXnrV6r+HE+7DzW1D/KOkaS6JO0v57nA ncM1z8eotGffLPyS0uQZ60l5uP2VuB8yQZh7rkh7N6hkmS6vtKUbY1me05r6u5VWDx0TAREQgaYS kMKsqQR1vghkIIBVEZZRxNNxX7sznKYkLZwAD4y4eLj4gLioOsEihlleeajHGqpaD/euPC1FQARE QAREQAREQAREQAREQASyE1AMs+yslFIEyiaAeyfxH4ilI2k7BLBMXHfddc3tt99uY6ZhFYeFA7N1 4n6K9O/fX8qytjMk1FIREAEREAEREAEREAEREIEWQkAWZi2ko1RNERCBlkkANxECTjMJAhZnTnDt Y3IN4riEZvFy6bQUAREQAREQAREQAREQAREQARGoPQEpzGrPXCWKgAi0QQLMEsbkBsTzIDYeMye2 b9++DZJQk0VABERABERABERABERABESg/glIYVb/faQaioAIiIAIiIAIiIAIiIAIiIAIiIAIiIAI 1JBAuxqWpaJEQAREQAREQAREQAREQAREQAREQAREQAREoO4JSGFW912kCoqACIiACIiACIiACIiA CIiACIiACIiACNSSgBRmtaStskRABERABERABERABERABERABERABERABOqegBRmdd9FqqAIiIAI iIAIiIAIiIAIiIAIiIAIiIAIiEAtCUhhVkvaKksEREAEREAEREAEREAEREAEREAEREAERKDuCUhh VvddpAqKgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAjUkoAUZrWkrbJEQAREQAREQAREQAREQAREQARE QAREQATqnoAUZnXfRaqgCIiACIiACIiACIiACIiACIiACIiACIhALQlIYVZL2ipLBERABERABERA BERABERABERABERABESg7glIYVb3XaQKioAIiIAIiIAIiIAIiIAIiIAIiIAIiIAI1JKAFGa1pK2y REAEREAEREAEREAEREAEREAEREAEREAE6p6AFGZ130WqoAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiI QC0JSGFWS9oqSwREQAREQAREQAREQAREQAREQAREQAREoO4JSGFW912kCoqACIiACIiACIiACIiA CIiACIiACIiACNSSgBRmtaStskRABERABERABERABERABERABERABERABOqegBRmdd9FqqAIiIAI iIAIiIAIiIAIiIAIiIAIiIAIiEAtCUhhVkvaKksEREAEREAEREAEREAEREAEREAEREAERKDuCUhh VvddpAqKgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAjUkoAUZrWkrbJEQAREQAREQAREQAREQAREQARE QAREQATqnoAUZnXfRaqgCIiACIiACIiACIiACIiACIiACIiACIhALQlIYVZL2ipLBERABERABERA BERABERABERABERABESg7glMVfc1bOYKPvXUU+avv/4y8803n1l44YWrWps333zTfP3116Zz585m gQUWqGpZ5Wb+66+/mueff95MOeWUZrXVVis3G53XAgg0NDSYBx54wDAu27VrZzbYYAOzyCKLZK65 xkpmVC0q4ffff29effVVM8MMM5gVVlihRdVdlRUBERABERABERABERABERCBrASkMEsh9e6775od d9zRpkBRcO+996akbvqhM8880yooBg4caAYMGND0DKuQwwcffGB23XVXqzB75513qlCCsqwXAocd dpi55ZZbCtXp0KFDLoWZxkoBXataee6558zee+9tFlxwQfPwww+3qrapMSIgAiIgAiIgAiIgAiIg AiLgCMgl05EILEeNGlXY+95775lnnnmmsN3UlR122MFsuOGG5rXXXmtqVlU7P1THKaaYomrlhTIO 1SGUrpx91cy7nPrkPefOO++0Y2jQoEF5Ty2ZHmWXU5atu+66BuXZkksumXheS2eZ2DAdEIEyCVTz +iyzSjpNBERABERABERABERABEQgBwFZmCXA+vvvvwsKg+WWW868+OKLZuTIkWbllVdOOCPfbqzX vvvuO/PLL7/kO7GGqUN1XHzxxc1LL71kXfRqUZVQHSpVbjXzrlQd0/L59ttvDW2YY4450pKVdez9 99+3500//fTmggsuMFNPPXVqPi2dZWrjdFAEyiBQzeuzjOroFBEQAREQAREQAREQAREQgZwEpDBL APbggw8aXniIWzZ06FCz+eabm3vuucfuiysoUK598cUXZqqppjLzzDNPUY5//vmn+eqrr6zCoX37 9jYe2pdffmkmTJhg07H++eef2xhpRSdGG5988omNFTTnnHOaJZZYwsw888zxJHb7n3/+MR9//LF5 ++23zYwzzmi6detm5p577qK0lDd+/Hir6Jp33nnN77//bl5++WVDPCLa6MemImZbUh0p68cff7T5 UJYvHPvwww+tEmeaaaaxeeK2FRdiY1HXcePGmR9++MG2bdFFFy1KllYHP+FPP/1k3nrrLVvfLl26 2DJLKXey5J2ljtQDpSexumabbTYb0+n111+3DHr06FHUX7An7tO0005r2zvLLLMUjQu/TVn685tv vrFlc95vv/1mPvvsMzPrrLOamWaayc8quE7/wYzx3bFjx0bMqCvjCcENk7EAU8ZvXLKwdOekjTmX hmWW9vvpQ+uV6D9idPnXDNcKVqZcWyjRnZTiyTinTbPPPrsdI+68n3/+2Y5/riPGjxPHlG2uVeLH pQljEIUl/TTddNPZewmKbd8aNM/1Hy8rPnbjx7NsZ7lOy61jqftOPF/XjzCff/75bfXd0m8L/Uq9 uWbnmmsue8/2xwPH+ZCCYH3JfdpJU65Pl4eWIiACIiACIiACIiACIiACzUwgerGUBAj079+/IVLA NJx33nn26MYbb2y3L7zwwkapn332WXts6aWXbnRszJgx9likQLHHHn/8cbtN3v5fpHRr2HPPPe2+ 4447rqFfv35Fx5dffvmGKAB7o/xfeeWVhp49exalJd+99tqrIZpAoJA+cv20abp27dowevTohugF r+gc0keKl5J19PMpZB6tRHGNGmij3ybWo1hHDZFSrJA0mkShoVevXo3SrbHGGg0nnnhiQ/TyW7IO JIgUkQ0nnXRSQ6ToK8oLTrQvTdL6gPOy1pG0rs+GDRvW0Lt370Jd4IREFoQN+++/f2E/TOiDrbfe 2u5z48Imjv7L2p/bbbddUZ7ke/rpp7tsgkv699hjj22IFKRF58aZde/eveg4ea+11lrBPNNY+mOl 1JhzmWdtv0sfWlaq//z633TTTbbfYEGfI1l5rrrqqpZnvH8iV1q7f9ttty1qxm233Wb3M04i5U7R MX+De8YRRxzRECnIG/UX11ikzCkk99uStS/yjt1CYd5Knuu0nDpmue/4+fr92KdPnwK3SJnt1Xri 6h577GGPu/7287n88ssL44Exwd8xxxzTQJ8g5VyfE0vV/yIgAiIgAiIgAiIgAiIgAvVCIN10oZmV ec1VPNZijz76qLXQ2GKLLWw1ttlmG7u87rrrTNR5ZVcNKx3yxBoNYabJLbfcssga5Ior/p+98wCT omjCcBFFkSBgQFGQJEEBQRQREERERAETKJgzoijoryJmxQTmnHNOYMZMFhAQFQQJoqAokhEkyf39 9V2ts3MzezO7s3e7d18/z+7M9PR0V789sbq6+hmZOHGimA9tMR/T1voEVhFXXnll3BDO2bNni1G8 yMKFC20ao2QT86FsHfJ/9tlnAplh4eYMsLa45JJLrPWT+aiTAw44wO5G+meffdauB5HRmSesLMzH p7WIgyXcoEGDrFywojIKQ7noootscnA1ijnBcD/MBHrqqafK5ZdfLt27d7fWZk888YSAL0JBMlx6 6aXy+OOPW8sdDJM1H7V2ZlFwQv1ef/11m4/XX6K8w8jozPupp56yFmSwPoK1HqxSEC644AKBLyNY F/Xv399um4/rmGWKM48w7WkUbTGfYrB4xDllFF3O7PKtYyIJtDHOPfgcg1+yQw45xFoZOpkZxV/M ggpWjcgb/va8QiKWmj7IOYe0YeqvebuXUbcf8of86icOlpBqRRqUZ6dOnayYTh+IuIeow3wMccZ5 q8Eo4O2qUWRaq0GNdy+HDx8ur776qr13dO7cWTBZyJlnnil16tSx19jAgQNl06ZNcYcFbQscFObc jSvEsZHMdRpUxqD3HRXH3Y64TmGNi/D+++9rMruE9di4cePsOu6xzoB8brnlFnsPu/DCC6Vv3772 nvv888+LUfrbpMlcn84yuE4CJEACJEACJEACJEACJJABBDJFc5dJcjzyyCPWYgAWCBrM8LUc87Fs 48eMGaPRdhnGwkwPbNWqlc0L1jAa1FrJDKfKMTNyanSOGR5n08KKYfz48bF4WKYg7vTTT7cWV7rD DM+KWV4Z/1M2Wq0jkB7Wa2Y4mCbPueyyy2w+bksXLxk1H1i/IMAizChUPOUwQ1hjchulXo6ZRMFu w7rNDFmKlY8VM+zV7oOlmzN4yWA+ZG1aWJcZxWIsOWQxH+h2n1EE5piP3tg+rxWvvMPKqG2Gc8N8 dMcs5FAezhPwxj60iQZY3Rjlp93ntDAL057Iy3yg2zyM8kuz9l2aIcY2LazLJk2aFJcOljGQ08ls 5MiRNs4oM+PS+m14sdRzJeg5F7b+XrJE2X5O+cHYDH2MFRmGp1FGW5aNGjXKMQosmwcsmsBFf2aC hVjeRxxxhI03CuFYnNcKrDJxPCwzncEMG8wximu7zwwRtrucdQly/Yc9d53l63rY6zSMjGHuO858 3e345JNPWk5uC0o9j2B9iesVwZkPLJA1HvuMf0ubD+7dZmgsokJdn/YA/pEACZAACZAACZAACZAA CWQUAVqYeSgtzceSjYWljQZYCMGKA+Gll17S6LQsYS1lPppjecMP2O6772634asKAX6Rpk2bZtev uOKKOKfssJzQ4+F3zRngDwnWUE7/Y23atLFJNG9n+oLW4X/NDKOzyWCx5PQfBhlGjBghd9xxh/Wt ZD5KBWwx+6LbD9x+++1n8/jll18KKjJmDYLZG2GFpwE+m2AVgwD/XGqpo/uDLJOV0XxAW0s5p98o tVrp2rWrtTrT8sHIDKPVTbtMtj3jMkmw8dFHH9m9YKbtrclhBQTn/sky03z8lkHOuajqH2X7aX0g v1GsxPkZC8MTVnzwLQZrT/gNRICPRAT4SUP48ssv7RL+yHTCBbRVomCGi9vryQz5jUsGCzj1Yei+ noK0BTILc+7GFe7Y0DzCXqdBZAxz31GRvNoR1pNlypSRJUuW2MlMNC2sQhHwDHDe0xCHfEynSlw8 rHnhEw0WfU5LQqRnIAESIAESIAESIAESIAESyE4CdPrvajcoWRYtWmRj4fAZQ540wJE9Aj5u4fwZ DtHTEbQcZ95QmOEjER/dCD///HNs96233ho3pBM7MGEAgtbFbpg/KHR0OKjGqTJO89b4IEv9IIfM GI7pDCgLw02dAUP4MJTK+NKyjufhHBuKGgyBQoBj+IKC1h1O9DGs0y+46+6XzhkP+ZKR0amA1PzU cT4cghcUtE5IF6Y9C8pX92s7OZ3V6z5MFoAhshgSmQwzzcdvGeSci6r+Ubaf1gfyq2JL48LwhMII SjPjg9AqU1q3bh1TkOE6wLBkDAHHUD/cf0yXip2MAZNxJArNmze3QzmNTzKbH4aj4lrCfcvvegrS FigzzLnrJ6O2adjrNIiMyj/IfQdMELzaEY76MWQWQ9KhJGvRooVlanzz2WN0KL7dyPtDPm4lGrZx DeHepvde5zFcJwESIAESIAESIAESIAESyD4CVJi52kytyxBtnMq79uZu4sMWijRY5hRVwIx4GswQ O13Nt8RMfMZ5d774qCJUDljg4UMyUQA3+DdT6w3M6AjrOfiFgg8nzNwYJGiZUBDg5xeg1AwbopIR 5Wr5zhkQ/eTROmF/kPb0UtD55Y14zR/t5BXU4k/TeaVJZ5yz3FTqH2X7JaqvyhuUJ5RmUJhBIYZZ c6FEwvl/zDHHiHEgb5WVxoF9zCpSrVkTyYD0Z511Vuz6xrUEhSEUN9OnT7eztyY6PtG+MOeuXz7K KB3XqeYd5L7jJ5/Gm6HAVmH24YcfiplEQcxweKu8RAeAuxNAj/Fa6izGTn90XukYRwIkQAIkQAIk QAIkQAIkkB0EqDBztBMUSzrUCg708eHpDsaHmP3whVN5DIXCcB4NsAwprLDHHnvYolA+Po7VybxX +W5rCK80ycbVrFnTHgpLMeNXyA5X8ssLw9qgLIO1Dqyo4EheZYOFh5lR0+/QuHjUHRYwGH6ZSGmJ oVNhQ1QyotwaNWpYaxMzS2iBYqS7PdFOYGZmTvWUBUocBLU29EyUxsio6h9l+yWqblieUJhBoYxr FYoz3CuMDzJr7QkLJ1j3wXJVh/MVpDAzszEKhgHjnoXjjR86O+mFygxFHPJMNoQ5d/3KSOd1Gua+ 4yefxnfs2FFgaQYlIdpHFfpuZ/+a3m+p11ZRXUN+cjGeBEiABEiABEiABEiABEggOQLhNQrJlZMV R8HnzoYNG+wMkpgVD0oz9w/DpxBgNYEPXwT4J0LAx6t+NNkI84fhUYlCsko24+zbZguLGgwDguLJ +YMly6OPPipvvfVWouID7UskYx0zIx8CPuBRpjNAtoceekgeeOABO9QPM38i9OnTx1rWqLIMcVC2 JQpOGbTukydPjquz5ofZM1H3oMMLnXmnIqNb/lq1atko9fHm3O+2QtE6JdOeTvmdZTjXVfmr9XPu w7mMmVYRtD2d+8OsB5HFK79U6u/MT+uXzDnmzKeg9bA8YfmFobm4R8D3GILOngllGsK7774rP/74 o2B2WQzbTBRwTsF6FOGee+6JU5YhrqDrCWkShTDnrl8+2qZRXafOcvQ8DXLfcR7ntY4h6uqv8rnn nhMzEYtVZGqc1zHuOFzP6ntOZdM0yV4TejyXJEACJEACJEACJEACJEACRUOACjMHdx2O2a1bN1+L LQwfVAf16vxfPy6RlZkZLpYjPryuv/762LZzBcOxENwKNmeaROuwiFDH8TfffLMd5qXp8SGNoY/3 3ntvzCG/7guzDCIjHIzDUgYBQ1id1lRw7n/33XdbOeBrCMogBDPbnF3q3/z5863FmW47l14y9O7d 21qyQVH47LPPOpPb4W0oE0ozOLJPFLzyTkZGvzJgQYfwySefxFn7wIoFvqucIZn29JLfmadz/bjj jrObUF6MGjUqtgsKh1tuuUW2bNlilS4HHXRQbF+YlTCyeOWbTP298omy/bzy17hkeKrVGCY4gLUZ LJsQmjVrZifBgOIS8mPiAqflqk3k+tN6Itp5PUE5g4k2gg5vdmUb2wxz7sYOcq1EdZ26srWbYe47 Xse749RXGazLwBZt5TfcFvsxjNYZoASFw388C3QiklSvCWf+XCcBEiABEiABEiABEiABEih8AhyS mcccShsoYBAwc1qiAJ838EEEx9BwPl27dm2rNMJwTVigQZEGB/oYEuVnXYAhRXAOfeONN1qFykUX XZSoSM991113nbXqgmUDPnBhsQKn+ZALTr9hqQIfR8mGoDJee+21lhmsXo466ihp3769Hf4HH0sI Rx99tB3qh1kz4Z8KlmhQSrZs2dJOXgDufhMOeMkAS50zzjjDfrRCWQjfQ/vss4+d5Q4WOghDhgwp cHihV97JyGgL9PjD7JiQFQqNk08+Wbp06WJ9iUFpBUWVO4RtT8iPAOuwfv36WaskvyGqrVq1Egwx g8Xh4MGDZeTIkYLjMdMqzn0MX73mmmt8FcVuWd3bXizdaQraDlt/r/yibD+v/DUuGZ5QwkCJjQCl O4Y9IoB9R6M8e/vtt+22Ktbshs8fziswh/INQ5mhpIGCBtccZnxMNYQ9d73Ki+o69cobcUHvO5h5 tKCA+4deq0irCjS/44YNG2avJUwSgMkNcE1DCeqcsTjM9elXDuNJgARIgARIgARIgARIgASKjkDp ois6s0rGcCgE+J858MADEwoH/0DwGQZlmA55hJWOzkAIBRCUZVAc6cQBbn9al112mbVgwAxusGqA E2t1mq9LpxB6vC6xDz6C4HMNlmYY+gmLLmxDWYYP6BdffFHq169vs9E8dVlQ3tgfVEaUgeGsGEYG KxlY6uEDElYyGNJ655132uKwPmDAAMvup59+shMnwGcTFGf40ERw1g/bXjIgfujQoTJ8+HDZeeed rdLn5Zdftswx4yOsvANjEQAAQABJREFU6/r27YtkCYNX3mFlVJ66dBaIOLQB2gdDfdE+UGbi4xwy Ijid94dpTxzbpk0bOwsphgTDmlFn9sM+r4BzEYpEKFYwK+Nrr71mlWWYjfGVV16xCj09TtvBq16a xrn0YqnH6tKZXvPXJfaFrb8zP12Puv2Qr5f8iA/DE+nhQF6VKDocE/EIuo1r5tBDD82NTPAP60n4 a2vatKkd5gkfgFCC4trHcPJGjRrZo5Wv1kGXzqw1jS6xD+n8zl0oNhGc6W2Ex1+Y61Rl06UzOy1L l9gX9L6j+enSma9zXTtKcE8pqA2gfJ47d669h+FeBwvJxx57TLp37x7LMuz1GTuQKyRAAiRAAiRA AiRAAiRAAhlBoJRR+hSep/qMqHJ6hYDC6LfffhMoIaC8SRRgZQQLETjBx/Af58dgouO89mFIHSyN kCeUfn7DibyOTRQXVkYohmBxgQ//vfbay9bNnb+mQTz8HBU0dLIgGeCwHswxGyWGRMEnUdDgl3dY Gb3Kw9BY+DaCQgttDCUhFCYYToaPaygSoUzDujuEaU+khcIVM10WxBLl4JKHFRKGA8MXV5BZPN3y eW37sfRKW1BcmPp75RVF+3nl6xWXLp5eZbnjUPbvv/9uHdbjut9tt918FXzuY4Nug6Xz3A16nDtd KtepOy/3trZ3ovuO+xj39v/+9z9r5XfhhRdaRb17/6xZs6RHjx723gYe8EcH60xcP7Ay9gthr0+/ fBhPAiRAAiRAAiRAAiRAAiRQuASoMCtc3iytBBF46qmnrG+2SpUqCZzRQ2mGAB9IsESZN2+eDBw4 UC655JISRIVVJYHMIwCrYPhcgxXamDFjYpaATkndCjPnPq6TAAmQAAmQAAmQAAmQAAkUPwLBTXGK X91ZIxJIKwE4b8ewUQyXPfXUU+0wL1icYQgurLvgY+4M44uNgQRIoGgIYJg0hpDDryJmFsVQSx02 WzQSsVQSIAESIAESIAESIAESIIFMIUCFWaa0BOUodgQaNGhgnbxjRsxvv/3W/rSSGIqKIZkFDdvV 9FySAAlETwCTtsAHGQJ8zN1www12nX8kQAIkQAIkQAIkQAIkQAIkwCGZPAdIIM0EMAPozJkzrZ81 +FiCfzso08qVK5fmkpk9CZBAIgLw+wjrMlyPmLQl0cQAuI6RHr4mGzZsmChb7iMBEiABEiABEiAB EiABEigGBKgwKwaNyCqQAAmQAAmQAAmQAAmQAAmQAAmQAAmQAAlER6B0dFkxJxIgARIgARIgARIg ARIgARIgARIgARIgARLIfgJUmGV/G7IGJEACJEACJEACJEACJEACJEACJEACJEACERKgwixCmMyK BEiABEiABEiABEiABEiABEiABEiABEgg+wlQYZb9bcgakAAJkAAJkAAJkAAJkAAJkAAJkAAJkAAJ REiACrMIYTIrEiABEiABEiABEiABEiABEiABEiABEiCB7CdAhVn2tyFrQAIkQAIkQAIkQAIkQAIk QAIkQAIkQAIkECEBKswihMmsSIAESIAESIAESIAESIAESIAESIAESIAEsp8AFWbZ34asAQmQAAmQ AAmQAAmQAAmQAAmQAAmQAAmQQIQEqDCLECazIgESIAESIAESIAESIAESIAESIAESIAESyH4CVJhl fxuyBiRAAiRAAiRAAiRAAiRAAiRAAiRAAiRAAhESoMIsQpjMigRIgARIgARIgARIgARIgARIgARI gARIIPsJUGGW/W3IGpAACZAACZAACZAACZAACZAACZAACZAACURIgAqzCGEyKxIgARIgARIgARIg ARIgARIgARIgARIggewnQIVZ9rcha0ACJEACJEACJEACJEACJEACJEACJEACJBAhASrMIoTJrEiA BEiABEiABEiABEiABEiABEiABEiABLKfABVm2d+GrAEJkAAJkAAJkAAJkAAJkAAJkAAJkAAJkECE BKgwixAmsyIBEiABEiABEiABEiABEiABEiABEiABEsh+AlSYZX8bsgYkQAIkQAIkQAIkQAIkQAIk QAIkQAIkQAIREqDCLEKYzIoESIAESIAESIAESIAESIAESIAESIAESCD7CVBhlv1tyBqQAAmQAAmQ AAmQAAmQAAmQAAmQAAmQAAlESIAKswhhMisSIAESIAESIAESIAESIAESIAESIAESIIHsJ1A2+6sQ bQ1+/PFHWb58uey1115Su3btaDMPmNuGDRtk2rRpUqZMGWnbtm3Ao6JPlilyRF+zos1Rz7G9995b atWqVbTCJFF6tsvvVeVsP9ezXX5nm0yePFk2b97sjLLr5cuXlypVqgium+222y7ffj0v3fduv/h8 GRRhxOrVq+X777+XHXbYQVq1alWEkuQvOqpzKycnRz7//HNBe5QuXVq6du0q9evXz19gMYjRcy5b 7/HpaIJU2z/seZhqeelgkKl5Fvb5Gra8sOmDcE5HnkHKjTpNptcj0+WLuj2YHwmQQDElYF4qGBwE zjvvvJy6devm3HrrrY7Ywl394YcfrAwNGjQo3IJdpWWKHC6xsn7z3HPPte374IMPZmVdsl1+L+jZ fq5nu/zONmnevLm9PnAf9vrhvnjzzTfnbNmyxXlYjt+92y8+7uAi3vj0009tXQ899NAiliR/8VGd W5dddllce7755pv5CysmMcXxHplq06Ta/mHPw1TLS7W+2XR8YZ+vYcsLmz4I+3TkGaTcqNNkej0y Xb6o24P5kQAJFE8CHJKZgYrQUqVKZaBUFCkqAmzfqEgml8/JJ58sRx55pJgPsOQyyMCjiuM5Beuj gw46KPZr3LixVKtWTf7991955plnpE+fPnY9A5ujWIkUxbn1888/yzvvvGO5HHbYYfK///1P9t13 36zn9MEHH9h7yVVXXRVXlyiYxWWY5RuF3f6FXV6yzeN3/vjFJ1tOUR4XxfM2HddTOvJMJ2e/cyLb 6pFORsybBEiABNJFgEMy00U2hXzxYfjtt9/aYSspZMNDM5TAfffdJ8Y6RipUqJChEhZvsebNmyer Vq2S9evXF5uKFsd7xpAhQ6Rjx45xbWT6reTRRx+VESNG2HvkN998YxVqcYm4ESmBKM6tBQsWWJm2 3357efjhh6VcuXKRylhUma1cuVJwP4Ei1xl4j3fSECns9i/s8uJrG3zL7/zxiw+ec+akjOJ5m47r KR15ppO63zmRbfVIJyPmTQIkQALpIkCFWQCysGj4448/rAKrZs2asnHjRpk5c6bA70y9evVC+2HB mP5ff/1V8PG36667StOmTQX+eTRs27ZN1q5da8urWLGijcYHPnx4VK1aVRCHl5D58+fLfvvtF+cH a9myZfZDEmmwr3Llypptvnzw8YI8kBd8rTRs2FDKlg1+Sqxbt07mzJkjKNMMnbIcwnwIgR9Y/PXX X1K9enWpU6eO7LHHHnHy6gaYLFq0yMoKVrA+2XPPPXV33DKIXMm2KdoBvFBnKLx23313wQelu5fP 2V7wSzRr1iwrvxlyJVu3brVtCT8+bl5odzDFyxF86KGe7jRa2TD89BgoiXAc2hnnnjMsXbpUwHm3 3Xaz/vN034oVK+w5j3MK5587LF682PpfQhs2adJEKlWq5E5it4O0SyJuznyD5OUWAkpKtBvaHgHr v//+u21Dd9ow13gQWYLUC+xxX5g7d669xvfZZx/Zeeed3aJ5bnvdMzRhQfcbTedeJnuN6LW6cOFC e42EqYdbBvc2rrP+/fvLG2+8Ib/88ouMGTMmLQqzINd5snxQJzxP4LMMvthwzQQNqZQZ5t7ilMfr 3AojB+qK8xoB9xZcd7in7bLLLrFigp4zia4jva+m+oyEUHg24zrEPXHNmjW2jfB8dAbcFyEPwj// /CO//fab9bG344472m08r73u8UHqGoavUyb3Op4jkG2nnXay/vGc++GrddOmTfbZ6+y8CfNcQV0K umclav9k5HPWwWs9UXmaPpk2AJcpU6bYe/L++++vWXkuUzl/0CZ+55UWFuT+pGmx1Gsf1x7esXDP 8fID6TwG66izdiz5vZu5j9HtMM/bgt4hcA57XU9hzlWVS5fpyFPzTub8QhvNmDHDZgHrW7xPacjE e02Qc1zl55IESIAEsp6AuekxOAh4+btx+s547733cszDLM4XC44xD19HLt6rptczp0ePHnHHwkfP AQcckPP222/HDnKWp5HqB+CGG27IOeGEE+LyOO2003LMx0LObbfdlmMUeLF9LVu2zPn66681C7vU fK6++uqco48+OpYWcpgJBnK+++67WHovObDTOOTOuf3223OMMifueJQHPkGCsRLJMS9tccdD9iuv vDLHvAzGZWGsSHLg28ftz+j888/PMR8zsbRh5HLWLUibgi+YmY//fHJ06dIlx7zoxOTAinIeNmxY Ts+ePWPHoFzd5/RhhvPnpptuims/1NePaRh+TsFeeeUVK4v5+MsxL6CxXebDMCbj+PHjY/FYMUOo 7D7UBUHlhx8pnHvOdoG8xrG3Tad/YdpF8/bihvzC5KXl63LChAlxsqrcaNuw50NYWQqqF667ww8/ PJ98uLeYD1utgu/SKb8mCnq/0fTupTPPINcIjve7VoPWA3moD7Mvv/wSm57hggsusKyQrwaso03d /if94vU45zLMdZ4MH/PxmXPxxRfHtTN8sh1//PE2riAfZsmUGfbe4uSBdWeZus8ZV9C5YTqE4uqL NurQoYNmFeqcSXQd6b5Un5F4ZuKervcHXbZr184+Y83HsJW9d+/e+dLcdddddp/K4rzHY0fQ6yMM X1ugz98pp5xiZXzqqafypdDnv/PdI8xzJeg9K1H7h5HPySRfZRwRicpDsmTaAP72cJ3iXEDbJgqp nj+Jzqsw9yfI6Hftm6Huce9qXucr3mlMp6ut89lnn23fMRPV270v0fNWywv6DqHpnddTmHPVLRu2 05En8k3m/Hr66adj55feb3AfQ3sjJDonvOqBY5KRo6B7OfJFCHqOI62ffNjHQAIkQALZQiC4OVHW qwZTrwB6fS+55BJrmWNeNgUWFOahJJ999pk8++yzYj7ifAsxJ4SYB4e1MsIsbpghDD1848aNs9Zq RlEkLVq0sJZevpmYHc8//7ztnTcf17YX3HxUilFwSLdu3eywB/SCI59PPvnE9g5ed9118vHHH+ez gHr11Vdt+d27d7eWZR999JG1bDrppJMEeTp7/93yXHrppTZPxB944IFiPnAFxy9ZssTyQU+gecC7 D4ttoxdt+PDhVv6jjjrKWtjB58iHH35oLUdgIaA+YZAWMqHHDr2i4IYebeMk2/4uuugiywSZJyNX 0DaFvGAG67bOnTvbOqOXF6ww/GPgwIFWHnevrflQsfWGpRBm+HPvVygDBgyQr776yratUYhaq8GJ EyeKeenMxzQMP81fl506dbKr5kXMWiIefPDBdhv10PDFF1/IIYccYjdh/bfIWPYh6LF2w/w9Y/xI wYICeWC2T7QJenxxLqMuah2ZTLv4cUsmL5UX53SvXr3k/ffft1Z+mIEWVnZO68Cg5wPyTEYWr3rN nj1bjMLEWr7h3DdKdWvZgnbAveWnn36S0aNHx1mhap38llHdb5B/UCbuaxV+4tBrDmuwZOvhVT/z ESjmY93uglVqlCGZ6zwoH8iJZwSuaVj84L6GdsLMkWAXJoQpM8y9JYwMSBtEDtNhYK21UEdYieL+ WaNGDVtUsueM13WksqfyjPzzzz/FKFjl77//ts9ioySz9whYaeL59MQTT9gZtPv27SuwFoYlqlHk 2CGZRglon2Uqh3uZTF2D8HWXk+w25Av6XA5zz0rU/snKmui4ROUl2wZ4H8FzAu9XbstspyxRnD+w 9vM7r8Len9zXPp6BeDZjhMTgwYOttRz8RLoD2vfMM8+01mV41zSKqjirc3d6r+0gz9ug7xDu/MOc q+5j/bajyDPZ8+uWW26xowmOOOII+w712muv2ffaMmXKyDXXXJNR95ow57gfa8aTAAmQQNYRyBbN XmHJ6WWNoD2b6PmBRY15mY6JozMxnXjiibE4rxVYe2jPkRmeF0sCiwNY8LRq1SrHfMjbeC3POUum 9tLAug09dxqMn59YvkOHDs3R3u9p06bF4s2wM00e6+2BdZfTkgh1Uksi9PoheMlhFHw2X1iXGYVO LF+UaxQIdh8s5syHcmyfe0WtQ84555y4XehlAwdYWyAgT6PgsHmefvrp1rpIDzBKwFj9jOIyJ6xc WregbQrrAqSFFZ8zmOEfMUs5Z7tqe8GSC+2q7YJjdZ/2lhrFiM0bFnaTJk1yZp+DXkaU62QalF9c Ro6NY445xuZpfF/EYtEWen4av1GxeONo1sbD6kdnJVT5zVDUHKPIiaU1isxYHnpuhW0XzduLW9i8 YoK5VnCOoa5O68uw50NYWRLVC/cOyOM+x83Q35gVp/H75KpF/KbKr/eMMPeb+Jz+29I8IVtB971E 16oZOpnTrFkzW8eC6oHS1cIM1zgsJPSHaw33PuNEOnaeTZ8+PSaw170bO/3iYwc6VsJc52H4oAgz fNTKjXMbbasBVpOwrAXnoBZmQdoE+Ye9t6hMzqXWU88t7NO4oHKMHDnS1s900MSyTuacSXQd6b5U npFGuWvlRB5mGFRMVqzceOONdh/OJw1GOWfjcE46g8qi9/iwdQ3L11m2cz2MBVeY50rYe5ZX+0PO MPIpE+d56Kyrc92rvFTaAO3rtnx3lqfrUZ0/fudVmPuT37UPDqaj0p63pgPYiu48X3FvwvsGrm0z /D323Nc6hl16PW+1vCDvEChP0+v1FOZc9ZM36jxTOb9gwYfngIaXX37Z8gcfM4zWRvudE+56pCJH Qc95CBL2HHfLp3XkkgRIgASyiQBnyQyh4oQ1DXq21XIGh7Zp08bmAP8liYLTD5V5GFp/J0gP/1aw MIClGqy9CgrmwSqwjNEAP2UI8KWFXiq1loFfLfROIcAPizsgH7Uiwj7UCbMZIYwdO9Yuvf5gnYOA mc7UOgnbKNe8xGDV+t+aOnWqXff6U37w4QMfRPB1gYAeTXAwwx/sNvxLqSUJZlVzMkRPHBx/33HH HdZPUrJyBW1T9LDCUsYMp7Ky6R96m9XPFHwquQM4o121Xdz7sQ3rPAQw1fPJRpg/WDHB1xx8vSjT oPw0D/cSFh4I8MeCgN5sWLOBBcqCBR+sJxG0TFhPuP3bmRchQTtogE85nIcIej0k2y5e3JLNS+UL sgx6PiQri7teuDaNctuKdsUVV8Sd4/Bfp3xhJRomOK+VVO43KDMIk0TXKixqzYexFT9MPS688EJr sQMfj/jhvnfqqafK5MmTbV6w9i3Il5BNGOIvmes8CB+IoOcMrGTRthrQVrDiCBOClhn23hJGBqQN KodXvqmcM+7ryJk/9iX7jMR9Dvd5zOjpduSvz1qv+7yzfK/1ZOuaCl8vORLFBX2upOuelUi2KPal 0gZPPvmkp/9Ot1zpOn+0nDD3J79rH+8i+u6EkRLOAGty3GPxvgHr/wceeCDfc9+ZPtX1IO8QXmUE PVe9jvWLSzXPVM6vRx55JO7Zj1EGsDaHPzt9T/OT2x2fihxBvm/SfY6768NtEiABEsgEAhySGaIV 8KLhVhqogsD0DiXMCUPWMFQSs18aP1L2B0f7GNaBj2Ivs3ivDJ0fwtivyhq3XFB8wPkwHBarQsqZ n9fQQDjnRsDQSqP1dSaPrWPoJAKUXXix8gs6jM9rPxRIpgfYOvs/66yzrJIGQzuNZZMdMqcTFeiH CYZBYjimM6Atjj322FhUsnIFbVMMO8VwQ+PjwQ7DhFk6Xirh8B3DzhCgeHIHfQlzxzu3tZ5eH/8Y xonzBEMklGlQfs4ynOv4OL///vvtuYihmcbSysreunVrO4kFhp5iOKDpYY69rKmSzZmPc6IKjcf1 gBc2vR6SbRcvbsnmpbIFWQY9H5KVxV0vzQeyGd9b+RSrcIaMoG1vNwL8RXW/QVFBmOg57HWtIg89 t8PWAwoDDWAHx9MYFoUPLfc9QdOlskzmOg/CBzJBEY1grJfsMpW/oGVquyh/Z5le9xbn/iDrQeXw yktlS+accV9HzvxTeUZiGBl+GFplfEpaNwVwuI17faL7vLN8r/Vk65oKXy85EsUFfa6k656VSLYo 9qXSBujYDBLSdf5o2WHuT1pfr2sfHar4uYPxZxeLwnBk7XSNRUa8EuQdwqvIoOeq17F+canmqbzD 3s9wjbvvWdjGex/uQ/oO4Ce3Oz4VOdzfEV7fN+k+x9314TYJkAAJZAIBKswKqRXwUIS/BvzQe42H IF488YP/MyjT0IsJ3zZFFaBgQ0CvlpfyB/swyxICFEb4+QXMVOUX4AvrpZdesv5g4H8NPolgaYYf fHQY5/rW2k3LAhPwSxQ0bSpyJcoflm9Q7umMUbCmwosDXmrMsDA7g1Oi4xPtU9n92l4tHTRdUH5+ ZULRAMs4sILiE8oxBOSLWV9VYQY/dPCfhZdmKHaTCSpzFO0SZV7J1MV5TFSyaD7I2wzHdRYRtw6f Sjj3EikKnAcU9v1G6+F3reo5jHrgeodCv6CA3m4o0QszpPM613siLAcKKzjbxatMbRdN55UmXXFa ZpTnTKqywmfYoEGDxAxFt1nhmYh7PZS06DDBDMbJhLB1TaaMVI8J+lzRuqC8KO9Zqcpf0PEqd9Dz raD8vPan6/zRssLcn5z11eODLPFeg2PNxE72/pvIZ1uQ/NKRJui5GqbsVPN08vZ6X9V7rT4DC5JN ZwXHfSdMiFoOd9npPsfd5XGbBEiABDKBABVmhdgKsJzCMCL8oIjA0Ec4SsdLECzP7r77bjH+wwpR ovii0JOOgA86vw9aWHjAUgLDLzFc0C84LUO80sCiDj8oATAcEMoyDCHAywEmKsDwxJo1a9pDIZfx y2CH/3jlhbio5PLKH1ZYGOYDWfFSZfyKWSf3mtb4BLMWYLoddol6gqmZDdHzUDjeR9DePqwH4ef3 oouXOfCFpSPM/dXhP+oGyyT0kOKchCIN3GH9l+xHfpTtEmVeYJhKiEoW5IMApSQUr16Wnyqnuxda 4/2WhXm/Keha1XM40b3Frx6FFZ/u6xyO7tFRAqvfwgrJ3FsKUzaU5Xd/L4pzBp1WUJbBoggWn5i4 Qq87TFxhZmZOCk9RXx9+FuPuygR5rqTjnhVUPre8YbYLow3Sdf6gnmHvTwVd+17s8F5gfJsKhmrC UgmdlzrBhlf6oowLcq76vQP5yZ1KnlGfX/o+6Hzv85PbGR+1HM68sZ7Oc9xdFrdJgARIIFMI/Dfe JVMkKqZyYFYi+IOAkgIBPdbG0bpgNhz4tEGYO3euXRbVn/pSqpNg5jkM00OAHyF8SDh/iH/88cfF TPedcAgZZhoDC8wuCYuZLl26WP9r8LWEACWNcTwrKgdeFNWXlk1g/tDL9dBDD9l8MMwrCrk0b/cS ftTQK4hwzz33xCnLEAd5UwmwUkOA4tAdYJml/sSUR1B+7ryc2zrE8oUXXrBDKPERhHMSH4rwowa+ d911lz0EL9HJhijbJcq8UJ9UPtKikkXzAW8Mv3BeT1jHeY/r6a233grVBIV9v9Fz0+taheBqiaLp QlWmkBKn+zqHMhpB/TI6qxXWisB5bKL1sPeWRHlFvU/PhUw6Z/Qe3KdPH0FHCK5BDYnu8wXdS4qq rphxEUGHaWldcL/BbNbOEPS5EuU9K4x8TlmTWS+MNoj6/HGeV2HvT4mufby/4R0M1uTOgJEOqixG PGbUdA7TdKYNu+6sS9hj3emDnqvu4xJtp5pnlOcXngd4P0bQfFX2gjhq+nTdV5M9x1V+LkmABEgg GwlQYVZIrQYfKPfee69ce+21VhnkLFY/lsL2JDnzCLsOay6nbwSsv/766zYbMwOWb3YYpgfrMXzc P2uGkjqDmeXSWslBaeZnoYb0UMyBBXoynUE5IK569ep22CD8aCBgeIDTMgPDWmGRh3xgERWFXLYg jz98XGgwM3XpqlW4wHlussN0NKPjjjvOruIldtSoURpte5QxkQN80OFjG72fCEH5xTLyWIFTbLSR TggB6zINug5fZAiqXNP9YZZRtktUeenQY+3BDVMfTRuVLDjP1eE7rEvVqgblQEmL4WE4x72ULCqL 17Kw7zfoyfe7VnGv0HuLmQHXS9yMiEv3dQ5rJYRPPvkkziIVloXwl5WOEPbekg4Z/PLMxHNGzwHn fR7yz58/31qcuesS9F5SVHVVJS0U1urLFP4lBw4cmK9TK+hzJcp7Vhj53OzDbhdGG0R1/nidV5o3 6u08P6FA8XoP8bv2kY+Zldc+V2BJ7hXQaYZnHAKeS+i40wCfp5jAxMwKrlEJl151SXhAgJ1Bz9UA WcWSpJpnsucX2gPvzs6AyR3gGgXXh06uFZRjsnI4y0+0rueh8xxEer97ZKK8uI8ESIAEsoUAh2QW UktB2VG7dm3b04sXmZYtW8puu+1mLbWgrMKQLJ2lsjBE+vHHH+3sjVCcYJgUZuqEwgqOYBMpzOCw +owzzrAPeLxIffjhh4LJAjCkFHkiDBkyJG74oLs+6L3HUFQMfcFLl5l2XODfR1/ewEod0kLB2KtX L6swwKxN7du3t8MXNS2GDkDRiF+qcrnl1G3UGWbuUC5hSA5eYPDyAhkwQUKqAfWHIgFWRIMHD7YT IqA8vMDhJQQKymuuuSY2XC8MPz/ZMPQPs6RimBGCKsl0/cYbb7Tx6K1UiwIbEfIvivNFi4wqL7DF NYc6Qnlx0UUXaRGBl1HJggIxBBmWZOhRhlIFbQEfghMmTLCOxjG0Ev7zwoSiuN+4r1WcX7BiwTmG j/VmzZoJzt1MDem+zmFJjDLwoYF7PSxr4W8GinJYA6QjhL23pEOGRHlm2jmDCXigXML12K1bN/uc hp9RKH11IhNnfXT4E6yA+/XrJ5g4xc9VQVHUFc/H559/3lopQwkCp/F4Vjs7n7Q+YZ4rUd2zwsin cqayTHcbRHX+eJ1XePdAfND3EK9rH5NEwW8sFGB4B8DM5H7hqquusu4a0ImD9w9YYCGgoxOuHPr2 7RvIhUgUz1u3jGHOVfexfttR5Jns+TVs2DD7/gcLP9xv8EyA6wznzNle50RR3GvCnuN+vBlPAiRA AtlEgBZmrtZSZ526xG5d16XzEPXVpUvnPuc6zNzRi4SPYTi9xkvLm2++aT/cYTqPaaXVgkjL0SXy 0XVdat66rUuNT3QM9sEvFWZJg+LqjTfesC/Q+ECAib7OjKR56lLzHjp0qHXOj5cvKHUwlBKzOCI/ WMTgRSpRgCNv1Bcf0IvMcEooiqAcwEfjSSedZPfp8fXr17e9mfgQwUseZMXLBGQ87bTT5M4779Sk EkYurZMuY5mYFW1LXcISC34bmjZtav2YQQGAWT4xaxpeKhs1amQP1/TY0Hx1aRPk/WmcLhENCzoo GqGIg287DNWFsgxO+DGMFx/XGsLw02O8lmo5hmEx+JjSACfX4I6gaXQfliq3Lp37lIEusS+qdgmb l1Mu5/pll11mJ9eAFRaUtlBaaF106UyvddGl7ouqXhgOC4tPWJph1lVYT2Ib5xeUsy+++GKsPbRs 91Ll1mWY+407L93WvHSp8VgqC10izn2t4rpGPZAG1yrOY723IL1f0Dy9yvU7BvGaXpeaVrd1qfHu ZdjrXPPTpTM/rYMusQ/p0JZoZygS0c6476HDAQoIBGd6G+H607J06dytx+pS94W5t+gxzqWWpUvs 03VdOtNr+brEPl13pw97zujxunSWq3G61H26rUuNx1LjdInzdMCAAVaZAD+jeB5COYAOLny8Imhd sI77JmZrxj0UljdoTwTNT5eIC1NXPU6XOF6Dlq9LjfdaQmmC+xSUI+gQg69QBFgkQXmLoPmEea6E vWdpGe76hJFPj9WlFd7nz6+8qNrAp1h7n4vi/PE6r8LenyCj+9rHPRnvUXhnwfso3mkQlKkuEYf3 ueuvvx6r1p8pOkcRnGlsRAF/UTxvtUxdhjlX/cTTvHQZRZ5hzi+nXOgwhUsW3G/wfgsrzscee8x2 ams6r3MC+1R+XSIujBx6nC5xvAa9jnSJ+LD3SM1Xl5o3lyRAAiSQTQRKGXPunGwSuDjIig9h9BJC cQYrM5hQF9bD5LzzzrPWZLBk6t+/v/z222/W2Tw+2vCRHTag9xF5wEoN5uPuaakLyg898+jtRtlQ 1CSSAR+Z6H3DR/dee+2VMG2qcnnJjUsFwxRhDQeLNrRd1O2GMmC1huGCextFakHO9sPw86pTYcdF 2S6p5AXlLK5BnG+YNc35QpgMk1RkcZYHSyy0KeTDOQbZUg1Fcb/BtQqFL3wUwkoxiKIs1XpGdXxh XOfgA4UMrAZw/y+MEPbeUhgyOcvIpHNGnzWQDxa2UFYkCrhuoXjHTHgFpUU+hV1XWKzi2Yn7XIMG DQq834V5rkRxzworX6K2CLovnW0Q1fnjdV4lc3/Sax8TbETxzgmlP0YiBJ0EI+rnrbONw5yrzuMS rUeRZ0HnF0ZX9OjRwz4b8SzApFJ4ZuKdD6NR/ILXOeGXFvEFyZHo2ET7wp7jifLiPhIgARLIdAJU mGV6C0Usn1Nhhp5QBhIgARIgARIgARIgARIoiABGRsAaHn4p999//4KSc78PAbfCzCcZo0mABEiA BDKAAIdkZkAjUAQSIAESIAESIAESIAESyGQCcElxwgknWJcamSwnZSMBEiABEiCBqAjQ6X9UJJkP CZAACZAACZAACZAACRRTAo8++mgxrRmrRQIkQAIkQALeBDgk05tLsY2FDy74NILfnCj8IxVbUKwY CZAACZAACZAACZAACURMALPuwlca/Ao2bNgw4tyZHQmQAAmQQJQEqDCLkibzIgESIAESIAESIAES IAESIAESIAESIAESyHoC9GGW9U3ICpAACZAACZAACZAACZAACZAACZAACZAACURJgAqzKGkyLxIg ARIgARIgARIgARIgARIgARIgARIggawnQIVZ1jchK0ACJEACJEACJEACJEACJEACJEACJEACJBAl ASrMoqTJvEiABEiABEiABEiABEiABEiABEiABEiABLKeABVmWd+ErAAJkAAJkAAJkAAJkAAJkAAJ kAAJkAAJkECUBKgwi5Im8yIBEiABEiABEiABEiABEiABEiABEiABEsh6AmWzvgasAAmQAAmQAAmQ QLEl8PBrL8gjr79YbOvHipFAthG4sM+p0r/3KdkmNuUlARIgARIggdAESuWYEPooHkACJEACJEAC JEAChUBgv+O7FkIpLIIESCAMge/fGh0mOdOSQGgC7CwJjYwHkEBaCaCjBB0mJS1QYVbSWpz1JQES IAESIIEsIqAKs1GPP59FUlNUEiieBHqed5qtGBVmxbN9M6lWeu/PJJkoCwmUdAIl8d7PIZkl/axn /UmABEiABEiABEiABEiABEggAwmwsyQDG4UilTgC2llS4ipuKkyn/yWx1VlnEiABEiABEiABEiAB EiABEiABEiABEiABXwJUmPmi4Q4SIAESIAESIAESIAESIAESIAESIAESIIGSSIAKs5LY6qwzCZAA CZAACZAACZAACZAACZAACZAACZCALwH6MMtDgynrMRsLAwmQQGYQKKkzsWQGfUpBAiRAAiRAAiRA AiRAAiRAAiWbAC3M8tqfyrKSfSGw9plHAEpsBhIgARIgARIgARIgARIgARIgARIoCgK0MHNR50ws LiDcJIEiIFCSZ2IpAtwskgRIgARIgARIgARIgARIgARIwEWAFmYuINwkARIgARIgARIgARIgARIg ARIgARIgARIo2QSoMCvZ7c/akwAJkAAJkAAJkAAJkAAJkAAJkAAJkAAJuAhQYeYCwk0SIAESIAES IAESIAESIAESIAESIAESIIGSTYAKs5Ld/qw9CZAACZAACZAACZAACZAACZAACZAACZCAiwAVZi4g 3CQBEiABEiABEiABEiABEiABEiABEiABEijZBKgwK9ntz9qTAAmQAAmQAAmQAAmQAAmQAAmQAAmQ AAm4CFBh5gLCTRIgARIgARIgARIgARIgARIgARIgARIggZJNgAqzkt3+rD0JkAAJkAAJkAAJkAAJ kAAJkAAJkAAJkICLABVmLiDcJAESIAESIAESIAESIAESIAESIAESIAESKNkEqDAr2e3P2pMACZAA CZAACZAACZAACZAACZAACZAACbgIUGHmAsJNEiABEiABEiABEiABEiABEiABEiABEiCBkk2gbMmu PmtPAiRAAiRAAiRQXAmM+/IrW7X6DRtKzT12T1jN35f8JgvmzZNy5cpJm3aHJEwbdufs77+XFctX SL0GDWT3WnvEDv9t8RL54pNPZdkff8huu+8uvU48XqZP/SYtMsQKDbCybu1amTP7R/nx+x9k/fr1 Ur9hA2m8775Sa689AxzNJCRAAiRAAiRAAiRQPAhQYVY82pG1IAESIAESIAEScBG4+9bb5bsZ38rR x/aS+5541LU3fvPW666Xj959X/ZvfYC8+dH78TtT3Lr39uHy+ehPZPCQK2XAZYNsbrN/+EFOOrqX rP/7b7u9x561pEWrlnLGiSdJmTJl5Kc/f0ux1PCHb92yRe67c4Q8dv+D8u+//+bLoNVBB8pdDz8g e9aunW8fI0iABEgg0whMnjBRNm/e7ClW+e22k6pVq5qOjPpS1nSUpBJ+nDVLli/7S/auVy90x8IG 0ykxbcpUe99v26F9KmKkfKwfr/Lly0sVw2rv+vVkO8Mt28O2bdvkl59/lh9/mC0/L1gg1apXk0ZN m8o+TRrLDjvskO3Vo/wRE6DCLGKgzI4ESIAESIAESCAzCPQ+pa9VmH320cfy97p1smOlSp6CrVm9 xiq0sLN3v76eaSKJLFUqls0TDzxslWU1dt5ZIKfT8qyUI13sgDSvLPvzTznnpFNklrGGQ2i2fwur wKuy007W0mziuPEybfIUOarDYTLioful69Hd0ywRsycBEiCB1Aicf+oZAovZRKFChQpy3W3DpM+p /RIlS7jvnlvvyNcpkvAAx86fFyws0o4ShyhSEC905px27tly1fXXpqxkdJZbmOuzvvteBvcfIPPn /pSvWCgDrzR1Qx2L4jmcTyBGZAQBKswyohkoBAmQAAmQAAmQQNQEjjnuWBl2zfXyzz//yAcj3/X9 IPpw1CjZvGmz7FCxorFG6xm1GHLfk48JrLecPdcLfppny8GL+YDBl9p1WHV9u/Ana2kQuRAFZHjT kKFWWQYGN95xmxx3Uu+4IxYtXCgDz7lAZn33nVw5cJDA2gzKPgYSIAESyHQCsNxydkpA3lUrVsr3 384UdBZcPegy+WPpUrnkissLvSraP5JJCpr6+zSU6tWrx1isNUrHP5f+IStXrJBnHn1cZhjXAa9/ 8K6UKRutKuGDkaPkgRF3286a2++7J1Z+VCvPP/GUDLvuBvs8rrpTVeN+oZ21Kvvrz2XGym+KzDWu CG66+hqr/Hzsxedk++23j6po5pPFBKI9y7MYBEUnARIgARIgARIoXgRgUdat5zHy9quvyzuvveGr MHvb7EOAsgwKI2fA0I1fFy2yL9IVd9zRvlzvvMsuziR2fcXy5bLxn41SuUpla8mGXmwomQ7tfJgd EoR9+LjYZpR3sGhbvXqVPQ7DXODLbCczJKRc2XKyds1aKVu2TD45kFh9iy3740+p26Ce1G/QUMqV jx9KlEiOSpUr2zLdf2O/+NIOR0X87ffdLd175Vca1qlbV14e9ZZ0OqCN/Wi67bob5a5HHjTyrjFy rbMy71qzZlzWS3/7XcBvt91rxikBVUbwrGh444MVdcbxGzdulJnTpsvqVauszzd8uHmFKNrFj4dX eYwjARLIXgJnX3iBdDy8c74KbNm8Ra4efJl9Rrz2/ItFojCDf0h0lJQunTlz8Q258fp8vHJycuTR +x6QEbfcKt+ae/Q3ZhjpQW0Pzsc0lYiVRok5b85cqVatWirZeB6LYbO3XHOddTfQruOhMsK4F3A+ y1G/Jx58WO4yrhwmjBkrDxrF3f+uHeqZFyNLFgEqzEpWe7O2JEACJEACJFCiCPQ5pZ/9GPpm8mRZ /Muvxv/WXnH1hx+T6ebFH6G3SesMsD4YfMEAWTh/vjNaunQ7UobdM0Kq16gRix9yyWDbK40PsykT J1nLBex894tP5b47/vNhBr85t99wU+y466+4Sq43W8MfvN8q43oc1iWfDzN81N192+3y5EOPWAWU Howe8hvvvN36aNO4RHI0bbafJotbvvjUM3a75YGtPZVlmhgKyEuu/J9A5pFvvCk33HGrsdwbJddc doUdnoOPPu2R/+P3pdKueUt76PNvvS6HHNpBs5HeR/WwykSw6nnC8aJ1vvvRhwTyb9iwIZYWrO81 /ucwbEpDVO3ix0PL4ZIESKB4E0CHw+VDh9hnxJ9m8hUoVRobX1bOEKSjwpke68v/+ks2bdwklSpX Mp0oVdy7bScJImvssrOUNcMc0VEChRk6ERD+3brVWLz9YeMwYU3QjgT4a5ttJmtBJ8ze9faWfRo3 llWm8wGyVN+5Rtx91BYU4g8WcP0vHShvvPSK9f815rPP4xRmUDjBQmvp77+bTqHV0sQoAhs2bpSv hFUrV8qG9RsEzy90UGnn0n4tmgv2IcAqHHWoUrWKrXtQln7+1SDbtZdfaZVlkOnp116O68RBmajf eRcPsGmgFHzy4Ufl2D697aQ32vmzU7Wd4jqz4OoBHWBoN9RHA57Z6AhCQPuBh9YZaRf/8ot5R/jO vENUlyb77WvOE+/OrCDnnvtcWb1qtXkHmWiVgfDJypA6ASrMUmfIHEiABEiABEiABDKUwAFtDpK6 9etbpdfI19+Qi/93WZykal0GS6b9D2gV24eZLU84srtsNR8ueEnG8M6lRgn0pZnV8lPjE23uj3Nk 9MSxAmfIzvCUeclGQM81Xva3cyh6EN+g0T5mNswTbB5w+N+6TRuBw/+969XFbs9w6fn95eP33rf7 Djy4jTQ3kwN89O57suTXxXLJuRfYF3H4QXOGguRwpp2X58vlyGO6O6M915EGCjOEBfPmy2FHdLHr GHL67TfT5OD27ez2l59+apf4w0ygqjD7a9kyqyxDfKcuh2NhA4ajoi677rabHH1cL9NeC+Sbrydb Ts8+9oRccMnFNl262iVPDC5IgARKGAF0YmhYvTLX8hfbYToq9HhdXn3pZbYDBffHJ15+QaPt8oeZ 30nPzkfYdXSoIGingU72glmKNS5oRwIshQeZZwUUJhrwvIFFMhQ2sKg6tveJuivpJRzjo6NJ3Qog I0wWcO3lV9hngjNjDIPt3rOnXHnDtTGfYFdefKln5xIUR1D2IWCyng77H2AnyZnzw6zALP06QZAv hpEiXH3TDfmUZXZH3t9Z/c+Xl599TjBz9msvvChDb75Rju96lEChCvcJg6/Off4h+bBrr5fXX3zZ uijAEFUNH733nmmLC205U+fOFq3zmRecZy3oxn81RpNaRdvwhx6IPUuxI8y55zxXbrv3bhly6WCr 9Ovc9Qh5/KXnY+VwJXkCmWP7mXwdMuJIaMExfT1+2lPtJxheFjXtlElf+yXLiHjU6wXT83zXsNvk pWeeywiZKAQJkAAJkAAJhCGgyiRVjumx6HWGEg0BlmjOcMNVQ62yrH2njjLph+/k+ttvlUeff0Y+ GPOF7fXHME1VSjmPw2xr9z/5uEyaNdMo1MbZ3mnnfgwLwlBG9f919oXn222/nmC8WENZBuuDF995 U155b6RcdcN18tW0KdLj+ONs1sNvHpbPsXVBcqhMsEhY8uuvdrP23ntrtO8Scuuw1YVGYYZhlE2b NbPppxoFl4YvRjsUZo71qZNy06BHvbVRZjoDhsl8+vV4wUv/a++Psr372A+Fm4Z0tYvmzyUJkEDJ IvDaCy/ZCpctWzbOIgodFY8/8JC16kVHxbkXXWhnwIRCCsp9KEr8wvEn97G7xpn7N4atO8P774y0 m1A8+Sl4NL12JOB+iecYOoAQ0GmDjgQN+J48+6R+VlnWsUtnO5QQ1ruYUADKsqgCLL++mzHDZodh +ghQJJ13yulWWYZZQk89+0y5/JqrjbVyD4Fl1hMPPSyvPJdfcYPnJ6yF0blUv2EDY63WVvZtnvss qWb8p6FjqalRokXBct7cuVZWWHfhmZ4owEqt4+G5nTnzf5pnk3Y6Ind7ysT/vtvx/vDVp5/b/egs cipb9TnXsnVr23Gm5cH/28Sx42zH0on9TrbKMpxPUKjpjNlIm8y5h3PlqktyZ+GGFZ3bRYLKwGV4 ArQwC8/M84hPPvjQjovGTrykTp3zg6cJLvY/+eAjxszzEazaKXqnz59j1zPtz2vK+35nnp5pYlIe EiABEiABEkhI4Ng+J8oI0/EDJRdmeoTDegQoeGClVc5YiSGNBrzkIx3CFddfE+cnDJZoR3Q/yiqx oMjCEBVnONv0TuNDIaqgH1foLVbrLeSN4SOwunr3rbetTzHURa29sD+oHCuXr4gN83Q6eUYefgHD SDasXy/oAETofOQRdjIADEVFwPAhfBRAyYePD3CHxVjd+vVk6qTcNB06d7LvS/YA84e0T73yYlxc m0PaGt9zr5uhOYttskxqF5WbSxIggcwn8OGod61lj0oK5QKc/s+YNi12r8cELDrM3tlRgSHleu/F DIoYpo/7LjoquvU42nM43WFHHGH9UqKMTz/8OKb0QfmQBUEVQXYjwR86Eh5+9qnYcM3LBwy090V0 JKjl7Z033mzv41AyoUNGw+nnnSNn9Tk5zupM9yVabjL3cNzHNawxwzphUQy/Xhhuj6AWyeO++MrO Qo1JbV7/8F2BsktDjV2ukecef1LGfv6l9D0j/hsS38t3P/KQHGX8jOqEBzDSgAVeA/Oc1XrA2go+ PlNhic4dhDoBOoWQrnbdOljIwnm5CrPDzPP3VePjbuaM6dYnKSzLMZRUh13ifPrq88+tkg/HTcl7 zuHZ6Ax4Ht77+CP2HQLxAwYPko6tDrTPcPiFgyV2KuceOqEefu6ZuOGhzvK5nhwBKsyS45bwKAxL +Hz0J75mrx+/nzusImEmGbAz0ZT36RDvvbffkYfuvtdOZX/nA/elowjmSQIkQAIkUAIJwCoKyiR0 bsHKTBVmb7/6mqXRpVtXM+yyWozMzwsWxNZvvfaG2Mu8RqpF1qKFP2tUbAkn9lEGWAggfGd64k89 7j+lnruMRXnpND6oHLvstqtVam3atEl+W7JE/CzdNF98GGBoKsJederY5eFHdpX77xxhh2TiHejr 8RPsxxaGm9ZrWN9+aHzxySdGYdbffEjk9tBDAegM+GDCB5Qz6Kx2mMEUIZPaxSkn10mABDKbwFuv 5N7rvaTExCtnmaFyAy7Ltc5BmmQ7KjR/+EaDBTCURe8bP4+qHINSBKN3YM0G5VZBIUhHAvKbYSyc EPoPuiQuy+Yt95c9au0ZWmF24Rlnx+Xj3oAvS31WoPPjjQ/fs4YiTmUZjoFfMoRFZginOwTt1ImC pXbuVDOdPUFC9eo1bDLMnokARRb8aFpfctNnWOtotXyGxTU6kL785DPbpvDDpsNVoWhzhnONjzR0 uGmAT1U85zD8E+2IkOy5h3PlyVdfipuNW8vhMjUCVJilxs/36NHvfeCpMIPWHL3Z2RD0YndOeZ9O uWGSmq6ZUdIpN/MmARIgARLIfAIYzgKFGXr3r7vtFsFwio/eze3AOrFfvP8v7TVGrSaNG+9bObwk w0E9etbTFeB/BuHPpUvtz68cOJlOJuAlu26D+vKj8RMDK7CCAqy9oBRDqGeOQ4DvGQz/gIwYYvPF 6E9tPIax1DNDbdAz/6WJ6204/2R8v5UxTq4P7dzZpgnzl0ntEkZupiUBEihaAvCXuFed2laIf//d Zi2AcC9COMBYHJ9y1plxHSPJdlTYDPP+Tuh7klWYTTQzLmK4XlXjCxOTpCBAHrVmy0vuuQjSkQAL XgQodDC0MaqAZ4MGDGWEr82GjRqZoan9zT3/vwlkdtl1V8EPSrubrr5G4HNsxYoVAuvltWvX2ixg seYOQTt1cFyqLLVzR5VSblnc22rVvNfedewusIXSDAYxsKSGJRf8mSLcNPx2ufzCiwU+5OCAf6rp FML7BVwc6DPSJjR/5V2dQojfvVYtqzCDewSEZM89nCvpfBexwpXQPyrMIm74xvs2tS+duGjwIq1+ PrQYOOlFwMwhGPLoFXCRBZllRKdlh5kqLpCCZtzAyzRmGYETYsx05Qx4CVWT122m99hvynu9EIPK qGVg+nf0xM+bM0fgXLN+w4ZxM5VB8w9zXwTby2207JhZpsL22wu0+7hpY5YRZ4CWf8Vfy2NT0WMf 6qAv1LixQwnnNVNIkFlHlG/lKpUtL5jeLlq40LzkH+Zpfu2UjeskQAIkQAKZRaDDYZ1iSp3PPhpt hq/8a4eRoHcXQ16cYY8997SbePbMWDDXWGBVcO6OrZv303xWUbGdEa3gWYYPovMHXiSDrrrSN9cy Zcv47itoh767QLEFPz0606XXceo3B2ngrwYBL+qw4IOfGliQqcN/fBTWMj3o5bcrL9+YIa7okcf7 APwBOWcU8yrHKy6T2sVLPsaRAAlkJoFTzj7T+KWKV9LjO6xfz+OtEuSay/8nDz79ZEz4oB0Vf5hO Ar+Abz393httOmvQaaPDMaEAiiqoDFDIRRWeMpZKbl5+eUNJNOiCC40yMHeoKb4xYTkFP1qrzbfd nFmz/Q4NHJ8qS1UkLjb+OtHh47ZmdguiSqt6Df5TQB5mhldCYQaFGL5b0TmEuh5zbC955pHHZZaZ KOibKVOtqwfk5x6O6S7DbzuKc88vb8YnR4AKs+S4+R5Vy7xkY1zzTGOu+aVxBOj2Y/KxsTxDOMr4 N/FSmIWZZUSnjg864wZm64BPEcz2gRlAnOGck06xFzpmUFm+7C/fKe+PO6l3qJlQUAb8wFw+4GLz wv+Ls0jpclQ3ufOBe60J70VnnWtnw0ICmCvrzCgdOnWUPkf3tDekmT/njiPXTDDG+3zjZBI9Rl9+ k+tE+CejkNNZZbxmCgkz64jyxbT36E3AjREBM9oU5KRTZeSSBEiABEggMwjAqukE44gZQ//hF+tf o7hBOKHvybZTxiklfG0hQLmDXnO3k2A8S/Fsg1WVTijgPD7KdczwCSs3KKIwNMUZ8Ex7/EHjlNp0 dPU44Tjbo+3cH3T94ssHywfvjLIWYg8Mv0uuuO4az0Px3qITAF1kjnHKg48DKMxeeOpp6+jZWiOY DyaENu3aGR82X9gJhLCND49kQia1SzLy8xgSIIHMIQAlzLC7R8jFZ59rrY0xi6IOM9SOCvgIu/TK K3yFLl3mPyssr0QYijl76A/WsgxKG/j/wrDFoMoorzzdcTqBzBpjJFAU4UnjvB/KMhhV3HrvXXLk 0UfHng2ffTzafqtFIVcqLBs1bWo7drYYKy48w+DbzS+gjUa/n/u93sQYwmhApxA6h6ab8wSKMxiP oLMNyreOxpoaCjNYUqsvT7fbAc2noGVU515B5XB/cAKJr/Lg+TClgwCUYQijXb7KoGGHhRKmp1fn kY7Dkp5lJOiMG86yEq3rlPcwv0WADxKMs9+7Xt3QMuJD46RjelllWVNjvjvoqivsOP7KVaoYJ5gf CRRlCFCMNdu/hV3HTDAor0WrlnY7mT+/mUKSmXXEPYvLdsYsl4EESIAESCD7CGBWKrzwfvnpZ1aB AwuyE07O39OPoTJduh1pK3izGWKi/k8Q8fe6dXa6+HvvGG56zmelHQIUctbSzbykq3WXFvr0o4/J 3bfebpRmD0u5cuU1OvQSw1V08oLH7n/Q1g+W5hrwTH3z5Velz1E97Myh+PA7x3QmOUPbDu2tZRoc 8yN06tIlthuWZgjw04LQuWtXuwz7l0ntElZ2picBEsg8AnA4rzMzamcApERHBcJk00iD8h8AAEAA SURBVGGOjgHnD/HoqHj0vvvt6Bls+4WeJx5vFSrw6/j8k0/bZL16n1CghZNffl7xtfbKtYjGDJbz 5/4UlwTWX+vW5Q6LjNsR4QY6kBD6nHaKHHPcsTFlGeLQmZNMgDLKHVJhCYs37dy6f/gI+z3rzh/b 6CS79fobBCyhiIRbIg0YdopzBbNZYvIDBH22QZmGgMkg4N4A37nuWaBtggB/UZ17AYpikoAEqDAL CCpMsm7H5M72AQszDC/U8HGethrO/sp5jGF2zzJywx232RdYTE+vFyxmGXEHzLjx0DNP2unmb7/v Hhn52Sc2yUozfhzWWmFDoinvw8iIm91NQ4bamw96598a/aGgRxoO/W+/L/dGM8GM64cTXzjaPO6k 3CmYoc3HzCh68wkrv6bHjWrKnFny0biv5OYRd8TNOvLiO2/KK++NlKtuuE6+mjbFOubEcZjxBsM1 nQE9B2iDSbNmyuiJ4yL1D+Ash+skQAIkQALpJbBn7drG2umQWCHwSYLeXK9w7a232JmsF8ybL0ce 0sFYSg80nTznSPsWBwhcHEDJdPm1Q70OjTQOL+hnnH+uzfPmoddK7+495NrLr5QenbrYZxZ2DLnx Ous4OJWCoTA758L+VjmHl/5WDRpJlzbtjNX2EdK8Tn25cuCl1l8bOrcee/G5fB98eBdxDm2F/zIN +lGB7Tp169rZMnVf2GWmtEtYuZmeBEggMwnAOhcBVkVwp4MQtKMi0fB15IPJZGBphE4Hdebu1UmD tMkG3FMbNW1iD4cyCEofBJSJoZLuET52Z4R/KAfhh2+/i8sVyrtbr7shLq6gjR3zjDWWG5c77pAq yyuuvcbOtgl3Pcd0PNx2nDkVc+jsOf2EPtbaGmUPuen6fC541GoMadH51rFLZysmnouwHPzzjz8s d7iAKFO2rLsKgbajOvcCFcZEgQhQYRYIU7hEePnGrCS46WIIggb1X9atxzEaFbfEiztmGXnn04/j puRFIp1l5Bfjx8Qd/GbcQLqgzg3defpth5ERPcnfzfjWZvU/81HhHLoBpeGIhx6QO+6/NzZNsl+Z ycSjNx4zhTh9pOiDCjc7p4Ufbng6LTOUjFO/zh3eqeXqLC5Ix0ACJEACJJDdBPqc2i9Wgd6n/Lce i8xbwbP8o/FfWUuzv9f9bYdxYpKAtWvW2GfII889HedgV1+OdenMT+NKmWeTBjynEJxxGDbqjsM2 XCkMf/B+2XmXXexQ0Jeffc4O/4BPUlhu9z3jdHsc/rQsXcZ2FLCCziF8IKBDqeWBra212ML582XW d9/Zzj/4K7vUzIz25kfvW6WXV3aH5c0IBgfJTsUkevfr79PQHuL266J19vLBpvswo5yGKNtF8+SS BEig5BI42vigwv0YE7iMfv9DCyLKjgqnvzLku0+TxpHCxvcJngNYYmjkid2Oth0cHVsdGPMrFmmB rsx01sepX38t3dp3lKGDL5e+PY6VYw473PjX/tWVOvGm+qvGs6dfr+MFltzOkApL+Hh7+tWX7fML fqrPOfkU2b/ePnLcEd3k0JatpV3zltZ1UTnjWgkGFRjt5A6dzYzaGvBtrsNhcf6o8gz73c85PSbI MspzL0h5TFMwgf/eQApOyxQhCGBYJqy74LMMvrrm/zTPmsnCQX/b9u1kzuwf8+WGmwR+GMbonmVE ezw2GhNRdwgy44b7mGS3w8j4S94UwnD2ixm0nAE39WP7nOiMinQd+esEBZqxOnD8zvgiO/U4/7IX LVioh9hlmFlc4g7kBgmQAAmQQMYRwJAR/IKEXXfbTR594Vk7oQxe4Lea4S2YJAA93e4ABZpf8Nr3 2eQJ+ZLDSmDB8j/yxSMCPkTxw/BQdIahQwh+U93Oi73K8szQJ/KgQ9razjtYKeA5vnbNWoGrBvcz 1etw9IzrsBf3/tETxrqj7HaiOkMWLx5RtYunQIwkARIoNgRiHRPi3+mN+wnuNfAV+d47I2PfJ+io aGx8X9150y22owJ+KxFw7z3z/PPiOipi5eR1hDgBHmqsjeCOZ5WZKfN4DxcApUrnyubsPPGK0zy1 LF0i/nDjQgCjjaCswvcnfui4gD9KTOaCiWOC3MM1z1IJeKkcujztnLOs1fWTxjUAZh7FD99hYApL K/ArVSpxZ5HmhY6WY3ufaHzKvScYxoqZI9FRo6EglprObwlLsPfHfC4jbrlVPvvoY1ny62Lrdxzp KxmXQNh/9U03xCz23PnA7x2+hWFh1ilvGKamgRuCt1993XMW6BhXj/OjtGGFUDrvPMB6mHMv0bmC vBhSJ0CFWeoMPXPAsMzbrrvROgWEU97R7+VOXd/VWFb59fommmVkzerVdky0Z2GFGBlGRp2tcqed qtkbZyGK6VlU0FlHMNSGgQRIgARIgASUACyko7YK0LzDLmFlhl+6A17wYVWWySGT2iWTOVE2Eiip BKbPnxOo6rCs9QpBOyrQseIXMDPjurXrrNVuL+PTzB2ghHF3DHjF6XFQKrnTY1RP02bNZML339rJ W+CDsrHpgME3JyZyQYClb0EhKC93PoOHXCkXDLzIuNnJNTqo26B+bLZlzPDsDIlYIR0moMPEbfiO rFajuvNQKYhlXGKfDQyjvXbYzfYHNzwYOlrDPFOD8EGW42d6uzuCP7yjenp3eCWqM1wEeYWg516i c8UrX8aFJ0CFWXhmgY5AD3SLA1oJZlyBM8TY7Jg9e/geX1izjPgKEGBHGBlr7rGHzXGFGeaInmrV rgcoJi1JMIwDPSy4cQ+66krfMryGhfgm5g4SIAESIAESIAESIAESIIFiSyDZjgoYTdx+w83WOhnD CeEMPuoAP1wYCmknpDFDM+EvWgPc0cCBPazL4OssnWGHihWN0m6/SIpAZwi+25whHSxhVaYzozrL yqT1ZM+9TKpDtstChVkaW/Ao46sMCrPH7n9AMBU7hmM6fXq4i3bPMuLcn5PnwNEZF3YdprkIixb+ HHconDWuz3NyGbfDYyOMjHXq7m1z2Lpli/ULdlDbg2M5wlLtUTMTF2ZPwWwxcMSswemAsYLpBUDA QwCWXzpWHHFu5/yISxQw6wjMradM+jrOnxqOwU0YM95AHjj/rL13ruyJ8uM+EiABEiABEiABEiAB EiABEnATOPvkfvLj97OsI3hMinJW//iZhd3pk93G8EdMlIbJWp546BFZsnix1GvQQL767HOZYmb5 RDh7QH+BQitbQ2GxzFY+lDu9BP4bUJzeckpk7nDuj5sYpiRG6Nq9ux3X7AcjyllGvMpQU1MojaAg QsDY8IHnnG+UaPF+u7yOR1wYGeETQGfMuv36G8U5Rf07r78pd996e5wzR6+ZUWrt9Z/5MGbo1IBx 7ddfMUQ3Ay2DzjpSrlz5QPkxEQmQAAmQAAmQAAmQAAmQAAk4CaDz/6tPP7fKMviZvHnEnUaJVd+Z JNL1YXcPl65Hd5f1f/8tb7z0irFqu8n6AEMhmP34wkGXRFpeYWZW2CwLs24sKzsI0MIsje0Ep4Aw 85w+ZaotpbuZCCBRwCwjUGbpLCMtzbE/z18gM6ZNk82bNic6NNC+7r16ynNPPCVwXNym6X7SvFUr +dZMMAD/aEFDWBkxRrzX4V3tbJlHdego7Tt1lMWLfpFv8hxngolal4EXgs6M0vrgNtbRI5Ru478a I5cPuFheMjODgcXs778XpyVaEPl11pGnH3lMbh56rXxoHEru07ixzDSOMWEBiDDkxuusQ+cg+TEN CZAACZAACZAACZAACZAACTgJwGDi4WefssMhO3buLJihMZ0B1mMoD7NS/jRnjqz4a7n9nmnYuJHs suuu6Sw67XkXNsu0V4gFZB0BWphF1GTqyF+Xmm33PJ9l1apXt7OFaLxOlZ43MYaNxiwjAy4bJDDb xQwjmNUEwwdbtm5tZzlBojJl/tNxalm61LxturxZOMqWzZ2iHnGtDjrQzrqB/FevWi1jjKkuwoiH HhAokxCcU7erzzHnrC1hZcQ08piNpHWbNsYJ5R+21+PrCROldJnScvq5Z8udD95vy8Ufhqt2P7an tcqDBdmEMWPtvlvuGh4bX44hrlCWQfF2+3332P1xTMrk1tfPDxlmHRluysR4cMx287JRwM0y+VWp WsVOydz3jNNtnvhTrrqM7eAKCZAACZAACZAACZAACZAACfgQgMVXrxNPSLuyzFk8RhN17nqEna0Y BgfZrizTuhUFSy2bSxIoZax0cohBZL/ju1oMox5/vshxbDD+xLxmGYlKsI0bN5r8F0hpM8UvpopX xViY/JORccOGDdZiDsrCvfau4zu98aqVK41J8XqpvnON2AwrkO3PpUvlt8VLpF7DhlbBFUZer7R/ LVtm88P00LX23FNgMs2QGQR6nneaFeT7t0ZnhkCUggRIoMgIZNLzucggsGASyBACfD5nSEOUADF4 7y8BjcwqZg2Bknzv/89cKWuaq/gLGuUsI1604Py/cdOmXrsCxyUjI2ZoCTJ7yk7Vqgl+7rBrzZqC X1SBs45ERZL5kAAJkAAJkAAJkAAJkAAJkAAJkEDxIsAhmcWrPVkbEiABEiABEiABEiABEiABEiAB EiABEiCBFAlQYZYiQB5OAiRAAiRAAiRAAiRAAiRAAiRAAiRAAiRQvAhQYVa82pO1IQESIAESIAES IAESIAESIAESIAESIAESSJEAFWYpAuThJEACJEACJEACJEACJEACJEACJEACJEACxYsAFWbFqz1Z GxIgARIgARIgARIgARIgARIgARIgARIggRQJUGGWIkAeTgIkQAIkQAIkQAIkQAIkQAIkQAIkQAIk ULwIUGFWvNqTtSEBEiABEiABEiABEiABEiABEiABEiABEkiRABVmKQLk4SRAAiRAAiRAAiRAAiRA AiRAAiRAAiRAAsWLABVmxas9WRsSIAESIAESIAESIAESIAESIAESIAESIIEUCVBhliJAHk4CJEAC JEACJEACJEACJEACJEACJEACJFC8CFBhVrzak7UhARIgARIgARIgARIgARIgARIgARIgARJIkUDZ FI/n4SRAAiRAAiRAAiSQdgI9zzst7WWwABIgARIgARIgARIgARJQAlSYKQkuSYAESIAESIAEMo5A /96nyCOvv5hxclEgEiipBC7sc2pJrTrrXQQE2FlSBNBZJAmQQIwAFWYxFFwhARIgARIgARLINAL4 OOcHeqa1Sjh5Rtetn++Argvn54tjBAmQAAkoAdz3H37tBd3kkgRIoIgJoAOzJAYqzEpiq7POJEAC JEACJEACJEACJEACJJChBPBxXlI/0DO0SUKLNbpeA5GcnLjjui6YJ1KqVFwcN0ggkwnQ6X8mtw5l IwESIAESIAESIAESIAESIAESIIEsI1CqdH5VQ862bVlWC4pb0gnkP4tLOhHWnwRIgARIgARIgARI gARIgARIgARIgARIoEQT4JDMEt38xavym+bMkd8HXSFbV6yUMlWryo6dO8mOh3WU7Zs3k1LlyxWv yrI2JEACJEACJEACJEACJEACJJCpBLyGXrqGaGaq6JSLBJQAFWZKIm/JmVhcQLJo88bvF0nFrf9a if9dtUrWvPm2/W0y5sALKlWQuZV2kLmVd5Dl21F5lkXNSlFJgARIgARIgARIgARIgASyjACGZMZ7 MDMuzcyQTHowy7KGLOHiUmGWdwJw2vrsvhLKbsuJKcvcNdnO3JibrNlgf9i3wijM5lba3irP5u+4 vWwqw5HJbmaZsM1Z8TKhFSgDCZAACZAACZAACZAACSRBgBZmSUDjIZlGoFSOCZkmFOUhgdAEzGn8 eYuWsnXdulCHli5XTqq2aik1OrSX6u07SOUmjTlzSyiCTEwCJEACJEACiQmMrls/X4KuC+fni2ME CZAACZBA8SHwaZN9ZdvGjXEVOnz2D1KmQoW4OG6QQCYToIVZJrcOZQtOwPRgNH/gPpl2xlnBjzEp t23ZIiu/nmx/cucIKV+jhtRo3y5XgdaunZSvXj1UfkxMAiRAAiRAAiRAAiRAAiRAAiWdQKnSHoMv zaggBhLIJgJUmGVTa1HWhARqdOggNY85Rpa+957UOfcc2bj0D/nzo48k599cv2YJD87buXn5cvn9 nZH2h3H3lZo0scoz5F215f5SqiwvmSAcmYYESIAESIAESIAESIAESKAkE/BQmOXzalaS+bDu2UCA QzKzoZUoY2ACG5culfGHHyHb19pD2n74gayeMUOm9DlZKu69t5TbaSdZ8+23oRRozoLL7rijVGt7 sLFAa2+UaB1k+z1rOXdznQRIgARIgARIwIMAh2R6QGEUCZAACRRzAp/v11y2rl8fV8vO38+UshUr xsVxgwQymQDNZTK5dShbaAIVataUvc8/T+bfe5/8+sKLUvuM06Vmjx6ydNQoafXM01J1/xayYuJE WT52nP1t/P33wGVs/ftvWfbJp/aHg6CEq3FoB6lu/J9VO/AgKbPD9oHzYkISIAESIAESIAESIAES IAESKLYE6PS/2DZtSaoYLcxKUmuXkLr+a5xLTujSVaDgavfFZ7Jt0yZjddZFKuy+uxxirM6cwyrX z19gFGdjZfm4cbJy8pR8jimDIitdvrzs1Lp1ru8zo0Cr1LAhJw8ICo/pSIAESIAEijUBWpgV6+Zl 5UiABEjAk4CdkG3t2rh9nb+dLmUrV46L4wYJZDIBKswyuXUoW9IE/vjgQ5l58UDZs18/aXLzjbLg wYdk/t33SKNrhkrts870zBeKtZVTpsoKKNCMBdrf8+Z5pgsSud2uu+YN3TSzbx5yiBkOWjXIYUxD AiRAAiRAAsWOABVmxa5JWSESIAESKJDAF/u3ki1r1sSlO2zGNClXpUpcHDdIIJMJUGGWya1D2ZIn kJMjU07uK6unTZeD3xslO9SpIxOOOFK2mF6O9sbqrHy1agXmDX9ouUM3x8rKiZPy3fALzCAvQaky ZaTyfvtav2c1jPVZlebNBXEMJEACJEACJFASCFBhVhJamXUkARIggXgCX7Q8QLasXh0Xedj0b6Rc VRoSxEHhRkYToMIso5uHwqVCYO2s2fJ1r2NlpwNbS+uXXjQzZn4s3w64SPbse7I0ueXmUFljps01 M2fGFGhrv/8h6ckD0KtiJw849FBjhdZO4HeNgQRIgARIgASKKwEqzIpry7JeJEACJOBP4ItWrWXL qlVxCTpNmyrlzURsDCSQLQSoMMuWlqKcSRGYdfVQWfLqa9LikYdk165dZWrffrJq6jdy8LsjpVLj xknliYO2rFotKyZMyFWgGf9nm/78M+m8dmzQIM/3WQczeUBrKb3ddknnxQNJgARIgARIINMIUGGW aS1CeUiABEgg/QS+POBA2bxyZVxBnb6ZEmikT9xB3CCBIiRAhVkRwmfR6SewecUKGXfY4cb0t4q0 +2S0rF+4UCb16GUc9B8grV9+KRoBzPDPdT/9ZHyf5c68uWrqVNm2eXNSeZeuUEGqHXRgnv+zDlKx fr2k8uFBJEACJEACJJApBKgwy5SWoBwkQAIkUHgEvmx9kOBbzBk6TZ0s5atXd0ZxnQQymkDZjJaO wpFAigRwQ6438GKZO+xWWfTU01L3wv5Sq09vWfzyK/LXV1/Jzh07pliCOdxMmVxpn33sr86558i/ G/4xkwdMluVjxlol2vqffw5cxjYzwyeOw09kmJ3ZE37P8Kveti1nlQlMkglJgARIgARIgARIgARI gASKikCp0qXzFZ2zbVu+OEaQQCYToMIsk1uHskVCoPbpp8mSV16VhQ8/IhXr1ZM1xv8YwpqZ30Wj MHNJWWaH7W2+qoz7Z/ESM3TTKMHM0E1MHrD1779dR/hvbvz9dzukFMNKMVFAlRYtrPKsxqEdpPK+ +4rXg8g/N+4hARIgARIgARIgARIgARIggUIgYIwK8gUzMoeBBLKJAIdkZlNrUdakCSz79DOZcf4F seOhaDro7TelSrNmsbjCWMnZulVWT5+Rq0AzQzjXzZ4tyfa0lDMOM2u0a5drfWYmD9hul10Kowos gwRIgARIgARCEeCQzFC4mJgESIAEigWBrw5ua/w8L4urS8dJE2W7XfnNEgeFGxlNgAqzjG4eChcZ AdObgSGYi554Ujb+8afsff55dmhmZPknmRHG9a8YPz5v8oDxsnn58uRywrDQRo1yrc/M8M2qrVpJ 6fLlk8uLR5EACZAACZBAhASoMIsQJrMiARIggSwhMKZtO/Pd9UectIdOHC8VdtstLo4bJJDJBKgw y+TWoWwli4BR6q2d/WOe9dlYWT1tusAiLZlQZocdpFqbNjEF2g516iSTDY8hARIgARIggZQJUGGW MkJmQAIkQAJZR2DMIe1l49KlcXIfOmGcVKhZMy6OGySQyQSoMMvk1qFsJZrA1vXrrc+z5Zh9c9xY +efXxUnz2H6vPc3Mmx2sAq1a24OlbMWKSefFA0mABEiABEggDAEqzMLQYloSIAESKB4ExrTrIPDH 7AyHjh9rJzVzxnGdBDKZABVmmdw6lI0EHAQ2LFqUO3TTKNBWfj3Jzsbp2B14tXS5cmbIZss832dm 8oAmje1Mn4EzYEISIAESIAESCEGACrMQsJiUBEiABIoJgbEdOso/S5bE1abD2K9k+1q14uK4QQKZ TIAKs0xuHcpGAj4Etm3ebIZsTosp0NbNmSOS5Kwz5WvUMNZneZMHmEkEylev7lMqo0mABEiABEgg PAEqzMIz4xEkQAIkkO0Exh5qFGaLXQqzMUZhticVZtnetiVJfirMSlJrs67FlsCmZctkxbjx8tfY sWYSgQmyZdWqpOqK2UMrNWmS5/usg1Rtub+UKls2qbx4EAmQAAmQAAmAABVmPA9IgARIoOQRGNux Uz6XMh2++lLgKoaBBLKFABVm2dJSlJMEAhLI2bZN1n7/fcz6bM2330rOv/8GPDo+WdkddxT4PKvR vr1RonVgj1A8Hm6RAAmQAAkEIECFWQBITEICJEACxYzAuE6dZcMvv8TVqv2Xn8sOtWvHxXGDBDKZ ABVmmdw6lI0EIiCwde1aWTFxYkyB5na+GaaIinXr5vo+69Beqh14kJTZYfswhzMtCZAACZBACSRA hVkJbHRWmQRIoMQTGHfY4QIfzM7Q/ovPZIc6dZxRXCeBjCbAsVYZ3TwUjgRSJ1C2cmXZ9cgj7Q+5 rZ+/wCjPxpqZN83kAZOnyLaNGwMXsn7hQsHvl2efk9Lly8tOrVvHFGiVGjbk5AGBSTIhCZAACZAA CZAACZAACRRfAqVKlcpXuZwkfS7ny4gRJFBIBGhhVkigWQwJZCKBf42ybNXUb2QFFGjm9/e8+UmL ud2uu+YN3Wwv1Q85RMrtVDXpvHggCZAACZBA8SFAC7Pi05asCQmQAAkEJTC+S1dZv2BBXPJ2n46W ivXqxcVxgwQymQAVZpncOpSNBAqZwMalS/OGbo6VlRMnyZY1a5KSoFSZMlJ5v32t37MaZvhmlebN BXEMJEACJEACJY8AFWYlr81ZYxIgARIYf4RRmJmRLc7Q7hOjMKtPhZmTCdczmwAVZpndPpSOBIqM ACYKWDNzZkyBtvb7H5KePKBclSrG6qytVDcTB9Ro304q1KxZZPViwSRAAiRAAoVLgAqzwuXN0kiA BEggEwhM6HpkvtErh4z+WHZsUD8TxKMMJBCIABVmgTAxEQmQwJZVq2XFhAm5CrRxY2XTn8uShrJj gwZ5vs86mMkDWkvp7bZLOi8eSAIkQAIkkNkEqDDL7PahdCRAAiSQDgITunYzCrN5cVkfMvojozBr EBfHDRLIZAJ0+p/JrUPZioQA/HgtefVVo8SpIHscfyzH2ee1AnyS7XZ0d/sT47Bz3U8/Gd9n46wC bdXUqbJt8+bA7YWHJ36LnnpaSleoINUOOjDP/1kHmmkHpsiEJEACJEACJEACJEACJJChBEqXzidY zrZt+eIYQQKZTIAWZpncOpSt0AlsXrlSJh51tGxalms9Vcrc6A9+b5RUaty40GXJpgL/3fCPmXHz a6s8gxJt/c8/Jy1+hd13t9Zn8H1WvW1bwSyfDCRAAiRAAtlLgBZm2dt2lJwESIAEkiWAb6p1c+bE Hd72w/elUqNGcXHcIIFMJkALs0xuHcpW6ASWjnrXKsswRHCP44+TJa+9LnNuGSatX3qx0GXJpgLL 7LC97Nypk/1B7n8WLzHKMzPz5rhxdvKArX//Hbg6G3//3Vj4vWZ/mCigSosWUuNQ4/vMKNAq77uv QInJQAIkQAIkQAIkQAIkQAIkkMEESpXKL5wZpcJAAtlEgAqzbGotypp2AuVr1LBl1DnrTGnwv8sF ZsNQ3vw5erTs2rVr2ssvLgVsv2ct2bNfX/vL2bpVVk+fkatAM9Zn62bPtlyD1BUTD6yeNs3+5t99 j5TbaSep0a5drv8zM3nAdrvsEiQbpiEBEiABEiABEiABEiABEihEAqVK51eY5WyjwqwQm4BFRUCA QzIjgMgsig+BbVu2yMQjj7JWZu0+/1Rg4TSucxcpV6WyYBpkOqdPva03r1ghK8aPt8M3l48bL5uX L08uU9NrBZNuWJ7hV/WAA6R0uXLJ5cWjSIAESIAE0kaAQzLThpYZkwAJkEDGEpjUo6es/WFWnHwH vzvKjBhpGhfHDRLIZAIc25TJrUPZCp0AFC77DB0iW9evl5+Gj5Dy1atLvYsvskMM4aCeIXUCYFqz Z0/Z764R0mnyJMGDE9Z8OxnH/6XKhjB6xcQDP/4oPz/2uEztd6p8sX8rmX7OefLr8y/IhkWLUheU OZAACZAACZAACZAACZAACSRJIL+FmQgtzJKEycOKiAAtzIoIPIvNbALTzjzLWkC1eftNqdy0qUww Vmcb//hD2n32qVTYbdfMFj6LpYOicuXESXnWZ2Pln18XJ12b7ffa01iewfdZB6l2cBspW7Fi0nnx QBIgARIggeQJ0MIseXY8kgRIgASylcDXvY6TNd99Fyd+m5FvS5VmzeLiuEECmUyACrNMbh3KVmQE 1i9YIBO6dZcq++0rB735hiwfM1amnXW27N7LWEbdfVeRyVXSCoal2HLj9wy/lV9PEszGmUyA5WDV Vi3t0M3q7TtI5SZm1lMvR6TJZM5jSIAESIAEEhKgwiwhHu4kARIggWJJ4Otjj5c1M2fG1a3NO29J lebN4+K4QQKZTCDE+KdMrgZlI4FoCVSsV0/2Ou1U+eXpZ+T3kaNk92N7SY2OHeV3M4vmnqeeKlX3 bxFtgczNk8AOderIXviZtti2ebN1/q8KNDtNdcCZduCbbuXXk+1P7jRDbc3kDjXMpAHwfVbdTCKA YaIMJEACJEACJEACJEACJEACERHgiMyIQDKboiRAC7OipM+yM5rA1rVrZdxhh0upcmWl/eef2SGZ E43VWaUmTeSgt96QUqXpArAoG3DTsmV5QzfHmUkEJsiWVauSEgftiDbNnTygg1RtuX84X2pJlcqD SIAESKDkEKCFWclpa9aUBEiABJTA5BNOlNXTZ+imXWLkDt61GUggWwjwiz9bWopyFjqBspUrS/3B g2TTn8tk4cOPSMW6da2lE0yLl74zstDlYYHxBLbbZRfZ44Tjpfl990qnqZMFJt71B11qhl62srOb xqf238rZts3M4PODbeMpJ50sX7Q8QGZc0F8Wv/yK/J+984CPovji+EtPgEBC6CX03qT3CCJNVCz0 LoiACiioIChFAQEV/iBY6CBKESw0pUrvoUiN9F5TCenJ/edN2PNqsgmXZO/u9z6fTXZnZ2fefOcC d+9eib150/qDuAMCIAACIAACIAACIAACIGCFAFzMrIBBsx0RgIeZHW0WVM1+ArrkZDrQ8RV6fOky NduymTz88qV6nbm5UbPtW5FIPvu3RNWM7B0Yun+/Pv9Z3O3bqp6z1IkNpTJ0U4Rv5m/QkNxy+Vjq hjYQAAEQAAErBOBhZgUMmkEABEDAgQkc6txVplMxXGLDX1bJL7cN23AOAlomAA8zLe8OdMtxAi7C MFb5008pJT6eQqZ8Qe6+vlRh5AjicMDLc7/Lcf2ggGUC7B1YuF07qjZlMj27d7c0dlb+ZCwVeDaI XL29LT9kpfXx5ct0bclSOtb/TeF9VpeO9u5LV+cvoEchIaIyNkpjW8GGZhAAARAAARAAARAAAScm YCl9DUd2QEDAngjAw8yedgu65hiBk+8Opbub/qT6P/1I/g0b0kHhdRZ94SI13fIX5QoMzDG9MHHG CSTHxVH4kaOi8ukuCt2zR+5jxkdJfcKrcGFRPKD5k+IBTYUHol9mh8JzIAACIOCwBOBh5rBbi4WB AAiAgFUCnOok/PARo/sNVq4g/wb1jdpwAQJaJgCDmZZ3B7pphgDnstrbph3lKlWKmmxYJxJYHqPD 3XpQ4Tat6ZnvvtWMnlAk4wTi7tx5Erq5m8L2H6DEyMiMDyKeYG/EvDWqC+NZkDzy1aqZoVxqmZoU D4EACICAHRCAwcwONgkqggAIgICNCRzu3oPCDx02GrX+ip8pf8MGRm24AAEtE3DXsnLQDQS0QsCn RAkqM/BNuvTNHLqxYiXlq1lD5jO7v3UbpSQmkquHh1ZUhR4ZJOBdtCiV6NpFHpyzjos6PNy9Rxy7 KerUaeI2NSKfPXGSIsVxafY35JEvHwU0bUIBbEBr3ox4HggIgAAIgAAIgAAIgAAIOAMBSyGZhJBM Z9h6h1ojPMwcajuxmKwkkBwTS3ufb00JERGkS0ggjsH3CSxJzXdsJ4v/IWSlMhg7WwgkhkdQ6L59 qQa0PbtlxdTMTpynQoUnxQOCRPGA+uTq5ZXZofAcCIAACNgVAXiY2dV2QVkQAAEQsAmBIz17U9iB A0ZjcXqb/I0bG7XhAgS0TAAeZlreHeimKQJcHbHO4oV0YtAQirl+XSaPr/HldBjLNLVLtlXGw9+P irzYQR6c4P/Rv/9SKHuf7dpN4UePUoownKqV6AsXRL60C3R14SL52mF39NT8Z0GUu3w5tcOgHwiA AAiAAAiAAAiAAAhonoCLi4uZjjoUzDJjggZtE4CHmbb3B9ppkACHYD46e5ZylS4tw+40qCJUygYC 7HEYduig9D5jI9rjK1cyPatP8eIUIMI2CwQ1p4AmTYirfEJAAARAwFEIwMPMUXYS6wABEAAB9QSO 9ulHoXv3Gj1Qb9kSCmjWzKgNFyCgZQLwMNPy7kA3TRLgfGX5atXSpG5QKvsIsMdhwZYt5cGzxt64 KfOePRSVN7l4QFJ0tGplYm/dopsrV8mDiwf41a4tcp+lVt/MW706vBhVk0RHEAABEAABEAABEAAB TRAwdzDjgA0ICNgVARjM7Gq7oCwIgIBWCfiULEEle/aQhy4pSVRSPZ5qQBPeZ+yRyDnv1AgXD+Bw Tz4uzphJHv7+VEB8Eye9z4QXmlehQmqGQR8QAAEQAAEQAAEQAAEQyDEClkIyYTHLse3AxJkkAINZ JsHhMRAAARCwRsDF3Z38RWJ/Pip8MJISQkOlS7qsvrlnLyU8fGjtUbP2xPBwurN+vTxI5ILwrVxZ Gs/YgOZXrx4qtJoRQwMIgAAIgAAIgAAIgECOE7CQwwwGsxzfFSiQQQIwmGUQGLqDAAiAQEYJeAYE UNGOHeXBbxSizpwlDt18uHs3RQQfI/ZIUyVceODcOXlc+WEeueXKRfkbNdIb0DivHgQEQAAEQAAE QAAEQAAEcpyAi6uZCjqduogLswfRAAI5RAAGsxwCj2lBAASclID4ti1v9WryKDtkMCU9fixznqV6 n+2m2Os3VINJjomhBzt2yIMfyhUY+CT3WZAo2d2I3HPnVj0WOoIACIAACIAACIAACICArQggJNNW JDFOThKAwSwn6WNuEAABpyfARq1CrZ+XB8OIuXpVVt5kA1rYwQPE1TjVSsz16xSz/Ce6IQ4uTuFX t86T3GdBlLdqFeKQTggIgAAIgAAIgAAIgAAIZDkBS+87kfU/y7FjAtsSgMHMtjwxGgiAAAg8FQEO qwzko09vSklIECGbwXoD2qPz50lt7oeUxERhcDskD5r+FXkWKEAFRNEAWTxAFBHgMFEICIAACIAA CIAACIAACGQFARdX8y9qdSkok5kVrDFm1hGAwSzr2GJkEAABEHgqAq6eniK0srE8Ko76iOLv3081 non8Z6F79xEXBFArXGjg9m+/y8PF1ZV8q1Z9kvssiPzq1CYuVAABARAAARAAARAAARAAAZsQgIeZ TTBikJwlgE9IOcsfs4MACICAagJehQpR8U6vy0OXkkJRp07pvc8iT5wgXXKyqrHks6dPU5Q4Ln/7 HbnnyUMBTZtQQPPm0ojmU6KEqnHQCQRAAARAAARAAARAAAQsEoDBzCIWNNoXARjM7Gu/oC0IgAAI SALsJZavVi15lBv6LiVFRVHo/v16A1rc7duqSSVFR9O9zVvkwQ/lLls2NXQzqDnlb9iQ3Hx8VI+F jiAAAiAAAiAAAiAAAiDggiqZeBE4AAEYzBxgE7EEEAABEHDPm5cKt2snD6bx+OIlYTzbTQ9F+GbY ocOUEhenGtLjy5eJj2tLlhKHhfrXr683oPlWrIjiAapJoiMIgAAIgAAIgAAIOCkBeJg56cY71rJh MHOs/cRqNEQg9tYtijxxkvxqP0PexYppSDOo4gwEcpcvR3yU6v8GJQtjWfjhI9KAFioMaNEXLqpG wIUHQvftkwd9MZW8ChcWxQNSQzcDmjUlDz8/1WOhIwiAAAiAAAiAAAiAgJMQMM/5L4pXOcnasUyH IQCDmcNsJRaiJQLs0RPct5+scsihc9WmfiHzTmlJR+jiPATcvL2fJPhvLhcdd+fOk9DN3RS2/wAl RkaqhhF/7x7dWrNGHi5ubpS3RnUq8Oyz0oiWr1ZN4jYICIAACIAACIAACICAcxPgz0Cmwnl0ISBg TwRgMLOn3YKudkPg3Ljx0ljm6uFBHv7+dPbTcZS/QQPyCSxpN2uAoo5LwLtoUSrRtYs8uFBA5MmT egNa1KnT6osH8LPCi5KPS7Nmk0e+fKnFA4KChAGtGfE8EBAAARAAARAAARAAASckgJBMJ9x0x1sy DGaOt6dYkQYIsMeOq5cXNdmwjuIfhtKR7j0oRISzPfPdXA1oBxVA4D8C7BHmV6eOPMq/N5wSwyNk +OXD3XtE/rPdFH/v/n+d0znj1/3dTX/Kg7vmqVDhSe6zIGEwri//JtIZArdBAATsnMC9v/4SYeDx 6a7i9u9/GPVx8/bS52A0uoELEAABEAAB+yRgwWCm0yEm0z4303m1hsHMefceK89CAsU7d6LLc7+l sIOHqGTPHlTkhfbSiBB24ADlb9w4C2fG0CDwdAQ8/P2oyIsd5EHiTc2jkBDpfRYqDGjhR49Kz0m1 M0RfuCDypV2gqwsXkasIC83fsMGT/GdBMr+a2nHQDwRAwH4IcL5ELhiSnpwaMdKoS6l+fWEwMyKC CxAAARCwbwKWqmSSDiGZ9r2rzqe9i7DywszrfPuOFWcxgeSYGNrTqrU0LjTfsY2SHj2ivW3aUa5S paTXGfI8ZfEGYPgsIZAcEysqbh7UG9AeX7mS6Xl8ihenABG2WeDZIApo0oTcfX0zPRYeBAEQ0A4B 9krd3aIlpcSn72WmaM0e2UE7/xZFRQopTfgNAiAAAiBg5wT+eX8k3fnD2Ju45syvqWjHjna+Mqjv TATcJghxpgVjrSCQHQQ4d5lngQLyPwmuMlj0pRdJJ37fE+FqngULUr6aNbNDDcwBAjYlwK/r3GXK UMEWz1Jg3z5U/LXXKHe5suTi4S5DN/m1rlbYiBx1+gzd3biJrs5fQKF791GcKCjABQq8xN+IiwU3 frVjox8IgEDOEXDPk5sSw8JkbkO1WgT27kVFOrygtjv6gQAIgAAI2AGB+1u20KPzIUaaFmrblnwr VzZqwwUIaJkAPMy0vDvQzb4JCOfNQ527UOQ/p6jppo3kXawY7X2+NSXHx1Hz7dvIw8/PvtcH7UHA gIAuKYkijh0X3me7pQfao7Nnhdd95tzuuVBGgWbC+yyoufRC8yoErxMD1DgFAc0TyIiXGbzLNL+d UBAEQAAEMkXg1Acf0u1ffzN6tsZXX1Kx1141asMFCGiZADzMtLw70M2+CQgPGd9KlejWqtUUc/Uq cV4zr4LC60wkOk6Oi5NeOva9QGgPAv8R4NLhMsxShFeW7N5N5u7zrVKF3H18ZOELDlNWKyni7yP6 33/p/tatMv/Z/S1bKfbmTXJxcyWvIkXEbze1Q6EfCIBADhDIiJcZvMtyYIMwJQiAAAhkA4H7W7fR o3PnjGYq3Lo1+VatYtSGCxDQMgF4mGl5d6CbQxA49eFHdHvtr1RnwTwq2LKl8DrrSpEnT1KTTRtk FUGHWCQWAQJpERDellFnzoqqm6LypvBAiwg+RuyRlhlxy5WL8jdqJL3POP8Z5wWEgAAIaI+AGi8z eJdpb9+gEQiAAAjYisDpj0bRrTVrjYarPn0aFe/0ulEbLkBAywRgMNPy7kA3hyAQf/8+7RUFADh3 WdPNf1L0+fN08NXXKb/wxKm3bIlDrBGLAIGMEEh6/JjC9h+QoZsP9+ym2Os3MvK4Ud9cgYEUIEI3 CwQFiQq0jcg9d26j+7gAARDIOQLnP/s8zYqZXBmz8rhPc05BzAwCIAACIJBlBE5/NFoYzNYYjV99 +lRhMOtk1IYLENAyAYRkanl3oJtDEOAP8ByuxsnNPUQlwMLt21Psrdt076+/KG+1apS7bFmHWCcW AQJqCbh6espiAQWfa0ml+vWjYh1flsUEXFzdRPGAu6RLVO99lhgZSVEiT+Dd9Rvo2oKFFHbgACU8 eEBuPrlkCLSoHqBWLfQDARCwMQHfylXo+vLlpEtONhuZvcuemfMNcfgmBARAAARAwPEIPNi+XUYY GK6sYKtW8vOPYRvOQUDLBOBhpuXdgW4OQ4CrB+5r044SROWw5ju2kU6EqEmvs4AA6XXGBgQICIAA Ef+tRAQH08NdT4oHhIjqSuLvJTPClWoLNFeKBzQnz/z5MzMMngEBEHgKAta8zOBd9hRQ8SgIgAAI 2AGBMx+PoZsil7OhVPtiCpXo2sWwCecgoGkC8DDT9PZAOUchwEnKOSH67V9/pcSISOlRw213N24k d5GTyb9ePUdZKtYBAk9FQP6tlCxJAaJKZsmePWQBgTwVK5KrtzfFC88xLgigVrjQwCMRAn1v8xbp fXZ/23aKu3WLXN09yLtwYen5qXYs9AMBEMgcAUteZvAuyxxLPAUCIAAC9kTgwY4dFHX6jJHKhVo9 R3mrVzdqwwUIaJkAPMy0vDvQzeEIHO3dV4aMNfr9V8ojKmjua9teho81276VvAoVcrj1YkEgYEsC upQUijp1KjX32e49FHnihMVQLzVzuufJQwFNm1BAc85/1px8SpRQ8xj6gAAIZIKAqZcZvMsyARGP gAAIgICdETj7yad04+cVRlpXnfQ5lezR3agNFyCgZQKuWlYOuoGAoxGoPO4T4pxK5yZ+Lrxc3Cmw V0/iBOimFWQcbd1YDwjYggDnAsxXqxaVG/ouNfxlFT0XfISe+XYOlejWlbyLFcvQFEnR0dLzjN/M 7Q5qQXufb0P8of7Bzp2UHBubobHQGQRAIG0CZQYNIvYqY+HffA0BARAAARBwcAKW8shmMs2Gg5PC 8jRMwF3DukE1EHA4AnkqVJBhZteX/UhH+/SjsIMH5Rp1iYkOt1YsCASymoB73rxUuF07efBcjy9e Et5nnPtsN4UdPpKh8M3Hly8TH9eWLCXOKehfv770POMKnL4iJBTFA7J6NzG+IxPwKlxIhlfz31fJ 7t2IryEgAAIgAAKOTsBS4aXM5aV1dFJYn3YJICRTu3sDzRyUQGJEBO1r30FUA7wnV+hdpAg1Xv8H eYoCABAQAAHbEEgWuc7ChdGMjWehe/ZQ9IWLmR7YS+Q7K/AkdDOgWVPy8PPL9Fh4MOMEvlu9nL5d 9WPGH8QTmiKQV1S//fDcDfqySkmK8sD3tZranAwqM6RLL3q7a+8MPoXuIAACzkbg3PgJdP3H5UbL rjJxAgX27mXUhgsQ0DIBGMy0vDvQzWEJJEVF0b0tWygxPIIKv9BeFgRw2MViYSCgAQJxd+48yX0m vM/2H6DEyMhMacVFCfLVrEEBQUHSiJavVk3iNkjWEajxetusGxwjZyuBkjHxdCNXamhmtk6MyWxO 4NTazTYfEwOCAAg4FoFzEyYSR9UYSpUJ4ymwDwzuhkxwrm0C+IpP2/sD7RyUAIeSFe/UyUFXh2WB gPYIeBctKsuYcylzXXIyRZ48qTegRZ06rbp4AD8bcfyEPC7Nmk0e+fKlFg9gA5oI32SPUUjWEPhj 3rKsGRijggAIqCbQ8a0+qvuiIwiAgJMTQA4zJ38BOMbyYTBzjH3EKkAABEAABFQSYI8wvzp15FH+ veHS0zN0375UA9qe3SJc+r7KkUh6qt3d9CfxwcJ5Ctlwxh5o+RvU1yc6Vz0gOoIACIAACIAACICA AxDgYk2mwhXPISBgTwRgMLOn3YKuIAACIAACNifg4e9HRV7sIA8S1ZsehYRI41no7j0UfvQopSQk qJ4z+sIFkS/tAl1duIjcfHzIXxjNUvOfBVHu8uVUj4OOIAACIAACIAACIGDXBOBhZtfbB+VTCcBg hlcCCIAACIAACCgExJs738qV5VHmrYGUHBNLYYcO6g1oj69cUXqm+zs5NpYe7hJVO8VBNFnmKuSq m9IDrUkTcvf1TXcMdAABEAABEAABEAABRyGAGpmOspPOsw4YzJxnr7FSEAABEACBDBJwy+VDBVu2 lAc/GnvjpjCeCSOYqLzJxQOSoqNVjxh76xbdXLFSHjIstHZtEbqZakDLW706WQpdUD04OoIACIAA CIAACICAhghYfF+DkEwN7RBUUUMABjM1lNAHBEAABEAABAQBn5IlqGTPHvLQJSVRxLHjqQY0Eb75 6OxZUpubg4sHcLgnHxdnzCQPf38q0KxZqvdZ82bkVagQeIMACIAACIAACICA/RJASKb97h001xOA wUyPAicgAAIgAAIgoJ6Ai7u7zFHGecoqfDCSEkJDhefZXgplD7S9+yjh4UPVgyWGh9Od9evlQU/C Qjl0kw+/evXI1cND9VjoCAIgAAIgAAIgAAI5TcDFgsFMJ3LFQkDAngjAYGZPuwVdQQAEQAAENEvA MyCAir3SUR5cPCDqzFkZuskhnBHBx4g90lQJFx44d04eV36YR265clH+xo2E8SxIGtBylSqlahh0 AgEQAAEQAAEQAIEcI2ChSiYhJDPHtgMTZ44ADGaZ44anQAAEQAAEQMA6AfGtat7q1eRRdshgSnr8 WOY8eyhCNx/u2U2x129Yf9bkTnJMDD3YvkMefCtXYOCT3GdB0pDmnju3yRO4BAEQAAEQAAEQAIGc JuBiQQF4mFmAgiYNE4DBTMObA9VAAARAAAQcgwAbtQq1fl4evKKYq1dl5U02oIUdPCCrcapdacz1 6xSz/Ce6IQ4O1fSrW+dJ7rMgylu1CnFIJwQEQAAEQAAEQAAEcpKApbcjiMjMyR3B3JkhAINZZqjh GRAAARAAARB4CgK5SpemQD769KaUhASZ/D+Uvc+4eEBICHFIpxpJSUwUBrdD8qDpX5FngQJUQBQN 4NxnAc2bk2f+/GqGQR8QAAEQAAEQAAEQsC0BhGTalidGyxECMJjlCHZMCgLqCaTEx4vPzjpy8/ZW /xB6ggAI2A0BV09PCmjSRB4VR4+i+Hv3U3Of7dlDoXv3UmJ4hOq1cKGB27/9Lg8u5+5btSoVeDY1 95lf7drEhQogIAACIAACIAACIJDVBJD0P6sJY/zsIIB3ztlBGXOAQCYJXFu8hP6dNl0m/S737jvS GwUfeDMJE4+BgJ0Q8CpciIp3el0eOpEcN+rUKX34ZuSJE6RLTla1Evns6dMUJY7Lc78l9zx5KKCp MMwJzzP2QPMpUULVOOgEAiAAAiAAAiAAAhkmgJjMDCPDA9ojAIOZ9vYEGoGAJMBV8s5PmixDszhk i885/KrMoLdACARAwEkIsJdYvlq15FFu6LuUFBVFofv36w1ocbdvqyaRFB1N9zZvkQc/lLts2dTQ TWE8y9+wIbn5+KgeCx1BAARAAARAAARAIE0CMJiliQc37YMADGb2sU/Q0gkJRBw7Lo1l/vXqUZUJ 4+nE2+9IL5Hir78m8xQ5IRIsGQScnoB73rxUuF07eTCM6AsXZfhm6O7dFHb4CKXExalm9PjyZeLj 2pKl5OrlRfxvjcx9JgxovhUroniAapLoCAIgAAIgAAIgYEoAIZmmRHBtjwRgMLPHXYPOTkEgf6OG 5OLmJj+0+lapTJXGjqHjgwbTv19+TdWnfeEUDLBIEACBtAnkqVCe+Cjd/w1KFsaycGE0eyiMZ6Ei /xkb09QK50oM3bdPHvTFVPIqXFgUDxChmyL/GYdxevj5qR0K/UAABEAABEAABEDA8hdvKosaAR8I aIUADGZa2QnoAQImBHKXK0clunejG8t/orsbN1GRFzuID65N6fbatRTYuyflrV7d5AlcggAIODMB LgzCHmJ8sMTdufMkdFMY0Pbtl+GcavnE37tHt9askQcb7vPVrEEBQaJ4gDCi5atVM9WYr3YwC/1i rl+nXIGBFu6gCQRAAARAAARAwCEIICTTIbbR2Rfh6uwAsH4Q0DKBCu+/Lz07QqZOo+TYWKo87hP5 bc25iZ/LcE0t6w7dQAAEcpaAd9GiVKJrF3pm7hx6LvgINVyzmsoNG0r5nqmVIYMXFxmIOH6CLs2a TYc6daa/6zWgk+8OpZurf6G4u3czvEguRnC4c1e6uWp1hp/FAyAAAiAAAiAAAvZBgPOwmgq/B4CA gD0RMH8V25P20BUEHJyAh78flR8+jDix99V580XoVQUq2bMHRQQH050NGxx89VgeCICArQiwl5hf nTpU/r3h1OjXtdTy8CGqOet/shInV+XMiCRGRtLdTX/SmdEf064mzWhf2/YUMnmKyKW2lzi0Mz3h qp3xDx7QmTFj6dKcuel1x30QAAEQAAEQAAF7JAAPM3vcNehsQgAhmSZAcAkCWiNQsldPuvHzCroi DGbFO3eSH3jvrF9P/06dToWefx6V7bS2YdAHBOyAABvji770ojxI5BN5FBIiwzdDd++h8KNHiSvz qpXoCxdEvrQLdHXhIvnvkX+D+vr8ZxxabioPxRxSxLwXZ8ykBGE8qzx+HFn6Jtr02YxeHxBGvKSk JCovihgULV4szcdv37xFl8Q6PDw8qFGzpmn2zejNc2fO0MP7D6gMh9oHltQ/fuvGTdqxZSvdF556 RYoVo1e7dKJgkYfOTRg4mzwJrdV3xgkIgAAIgAAI2BMBGMzsabegqxUCMJhZAYNmENAKAfYMqfzp WDrapx+FTJtOtYRXSPn33qNz4yfQlR/mSQOaVnSFHiAAAnZIQLyh9a1cWR5l3hpIyTGxFHbooN6A 9vjKFdWL4tDxh7t2y4MmTSaf4sVF7rPUvGoBTZqQu68vsVHOUK7/uJwSQkOpxoyvydXT0/DWU59P /2wS/SPCSV989RWaNf/7NMebMm48/bluA9WuX4/W/GlbD96ZU6bR9s1baMTHo+idke9LPc4KT7tu L75Cj6Oj5XXxkiXombp1qF/nbtJg9u+9W2nqi5sgAAIgAAIgoGUCqJKp5d2BbmoJwGCmlhT6gUAO Egho1oxaHNhHSTExshJeYO9eVPC5lpSSmCgPV+ERAQEBEAABWxBwy+VDBVu2lAePFyu8oLjy5kNR eTNs/wFKemLgUTNX7K1bdHPFSnmw8T93+fIULbzZTIVDPBPCw6n2D9+Te548prczfd2lVw9pMNv2 518U/egR5REGO0sSGREpDVp8r4sIe7e16D80GHzbPv+bb6WxrEDBgsR6FipShJTb+v62VgTjgQAI gAAIgEB2EVD+UzOcD1UyDWng3A4IwGBmB5sEFUGAxW23AABAAElEQVSACXgGBMjE/+yJwV4bnvnz y4TbieJDplehjOUgAlEQAAEQUEvAR3g+ce5EPnQivDHi2HHhQbZLGtAenT1HahP4cvEAS8YyRY+w AwfpcLfuVHfxIvISRiRbyEuvvUqTPxlPscLzbePv66irqDBsSTb98QclxCdQrty5hTdaR0tdnqpt 1oIfKFGEuXp7++jHufTvBXneZ+AAemfEe/JcJz5InLj8L7laSJSsfxAnIAACIAACIGAPBGAws4dd go7pEEDS/3QA4TYIaIWAi7s7eeTLJ3MLJQlPCTcfH3LPlYuSHj+mlLg4ragJPUAABByYAP87xDnK Knz4ATVe9we1OHRAhlIWe6UjeRYo8NQrZwPcoc5dKObq1aceiwdgj7L2HV+SY/226herY/765B4b y9hoZigpoqLX1cuXafOGjbR35y56cP++4W39eXhYGHFOMg6xZMPX6ZP/0IbffqdHUVEUK7yDoyKj KCEhnmLEv9ncLywsVD7rn99fXseJf8dThFGR+/FhSXisIwcPSeMf50VLTEg065aWHmad0QACIAAC IAACWUTAUm5StV+yZZFKGBYEMkwAHmYZRoYHQCDnCLgLg1nSo2hKCAsnd/GhzjN/ACUJz4n4J15n OacZZgYBEHBGAuz5ysYyPrh4QNSZs9LzjEM4I4KPSY+0jHKJvX5DGM26Ut1FCyhvjRoZfdysf1dR OOXXlavp6KFDdOPadSpZKtCozzWRo+2YSLTP0kX0NZRTJ07SiMHv0OWLFw2bqXX7djR55lcUYGAk HDX0PRnWOeDtwXRYhK7ysyzrdmylWdO+1Ocw8/TyoqkTPtOP9+kHo+T5l3NmU6WqVejl51qb5TBj w9iML6bSgrnfERvwFPETxRsmTp8qc7QpbWnpUa3m0/NU5sFvEAABEAABEEiTADzM0sSDm/ZBAAYz +9gnaAkCkgB/U+MhvBHiHzyghIgIGZbpkTcfJUZGCEPaI5lQG6hAAARAIEcIiDfGeatXk0fZIYOl 9yvnPOOqmA/37CY2hKkVDj0/0qMXPfPdXLWPWO1Xr1FDKityp7HR6/fVv9DQD0ca9VW8y8pXqki1 69XV3zt76hR1atdBVtlkLzAO77xz+w79LapabhU50ULOnafN+3eTp0mhgoXfphYXKChC5fP55SMv b2/9mHxSqUoVekVUPN6ycRPFCM+z+o0aESf8L1WmNN+2KO8NGkJ/rU8tRNCgcSOqJYoD/LluPd0U TIcPHCy81mJkHjTDh9PTw7AvzkEABEAABEDA5gQsGMzYAxsCAvZEACGZ9rRb0BUEBAFOiO0mPBSS RGgOJ/33EB/IXN3cRcLsCBkGBEggAAIgoAUC7AVbqPXzVPXziRS0828qaeK9lZ6OHG5+bMBAqh2e WkUyvf5p3eek+iyKcUzpy2/c2YjGwp5ohjJh9FhpLGvesgUdOP0PjZ86hb5ftpg27tohc4xdF2Gj ilHK8Dl3UYRl9oJ5dODMSWFQ20PlK1YwvE1BrVrS19/NoYKFC8v2AW8Pktd1GzYw6qdccBgoG8s4 r9ny39bQivW/0+gJ42hn8GF6+fXXZLcvP58sQz+VZ/h3enoY9sU5CKghkHTnLnW+/oDGnb5G5z+f JPOoqnkOfUAABJyTgMUCNjCYOeeLwY5XDYOZHW8eVHdeAhwGxR/0Eh6GEif916Ukky45iUSsjvNC wcpBAAQ0TSD25s0M68dfCnS/do9qRjzO8LOGD7zatbM0ILGRK/jQYf0tzgfGXloewkuM+yhy59Zt fb+Pxn8i7v9XiZg90dp0eEF2Vby+lOf494Ahg6jDKy+Lipcuhs2ZPuc8aCyt2rahxs2b6cfh8QcP Hyqvw9gjT6zFUGyth+HYOHdOAve++JIahkZR3sQkurZ4CR3u0k0Yze45JwysGgRAIH0Clv4fhMEs fW7ooSkCCMnU1HZAGRBQR8BVeJix9wZ7YCTHxcqH3HxykYubm7oB0AsEQAAEspFASnw8hRsYqqxN zf+G5S5bVoZ1+lYT4Z3iaPvFWIpze7rv9wqIqpvPtWktwyDZy0zx5vp15SqpSuv2bclfVB5W5Mql S8opTfl0gpnx6+b16/L+1ctX9P2Uk9zi32ZbypVLl+Vw/4icaL1f+8+oZzrH1Sf9lHZb66GMi9/O SyBWVMg1FDaCB/ftSw1WriQPkU8PAgIgAAKGBCx9cYSQTENCOLcHAjCY2cMuQUcQsECAK9K5itw4 ycJo5ipCgDz8/S30QhMIgAAI5DyB8CNHKFkUKDEUV+HVlUeEK7JRTDGO+VauJCsAG/Z7WmOZMhaH ZXLesE1/rKNxX0ySXrp/rkvNC9a5Z2rIptL3/r3/vGYO7NmrNJv9jha5I7kqZm4RKp9Vcv+JB8+9 O3eID2tyN4171p5BOwhkhIDPMzUp5lBqgQzluegLFym4/wCq/9OP5CYqd0NAAARAQE9ApBIwE0TD mCFBg7YJwGCm7f2BdiBglYAsAJA3L3mIAwICIAACWiYQfjSY/OrUEcaxqqneY1WrSWMZG/uzS4Ke a0mFixaVRqdtf24WEezJxAavYiWKU7MWzxqpUbxkSXntJjzejl08T15exon7DTsbhmsattvqnAsC cCgph1++N+ojq8O6PqUXntWBcQMEnhAoNOoDOtWlB/kmJRsxiTx5ko6LwhR1Fs4nNoRDQAAEQEAS sBCSCQ8zvDbsjYAFs6+9LQH6ggAIgAAIgAAIaJlA+feGU8M1q6nKxAlUvHNnaTjLTmMZs2HjV6fu XSWm31at1hcA6NSju0yob8ivbPly8jI5OZmOC2MfG8UMjyMHD9L3s2bTWhGKltXCFT5ZDomKo4Y6 KIa6eXPmSl0shYdmtW4Y37kIeAjj7fzyRS2GSIfu20f/vDdC5FM1NqY5FyGsFgRAwJCABXsZEYpk GiLCuR0QgMHMDjYJKoIACIAACIAACDw9gc49u8t8ZH9v3Ua7t6dWu+zUvZvZwAEi5L11+3ay/fMx n9CD+/f1fdgr7f1Bb9P/pn1J/xw/oW/PqhMOJeUKmcePHKUlP8w3mmbR9z/QjClTad6cb8nHx8fo Hi5AICsI3PbxooVli8qUEKbj3/vrLzo79hPxgRifiE3Z4BoEnJOApeI3+PfBOV8L9rtqhGTa795B cxAAARAAARAAgQwQKFmqFDVq1pSUvGRNnw0iDnm0JJ9OmUSHDxykSyJHU7umQdSyTRuKi42hfbv2 UFRkJOXNl4/6Dx5k6VGbtlWvVZP6DRpIi777gT4f+yltWreeKlWpQieDj9HZ06flXB9PHCdDS206 MQYDASsEruTxpmfmfiPDMHVJokK3gdxc/Qt5+PlRxdGjDFpxCgIg4IwEOH2MqeiQw8wUCa41TsD8 VaxxhaGe9glMnTpVhr5w+ItyeIvk9KXEB5V33nmHYk0SPxuuiOPa3d3dqWfPnobNmj3v0qWLyG3j laX6rVmzRnL8/fffs3QerQ3+3HPPUWBgoEW17O11YnERaAQBEMgRAl17//f/S5de/52bKsOGtD/3 7pSeZtGPoonDOLlIABvLGjdvRst/W0PlK1XUP8ZeYCyWPiBYumepzcU19dt40zHGfj6RvpwzmwoW KkTBotroz0uW0plTpyifXz56f/RH1KNfX1V66DvhBASekkDBli2pxpfTLL7er8ybT1eE9yMEBEDA yQlYismEB6qTvyjsb/nwMLO/PdO8xinimwM+unfvTsWLF5f6RkVF0bFjx+jbb7+lo0eP0qFDh6yu o0GDBlT+Sc4Wq500cqNixYpUv379LNWGc+goTLN0IhsMfuvWLclj2LBhNHr06KcakdfNhzVRuFi7 j3YQAAEQsETgpddeJT7USOEiRej7H5dQYkIiXb54kZKENw0XCfDPn9/sce5nTSzd23Zon1n3qtWr 06WHd83aueG1bl3kweGht27cJD9/PyohihO4mxROsDSXxQHRCAJPSaBox46UGBlF5yZMNBvp3y+/ kp5mJbql5g0064AGEAABxycAg5nj77ETrBAGMyfY5Jxa4tChQ6lx48b66dnA8cILL9CWLVvo33// JTY2mYqL+Id1//79ps2avZ40aZJmdcsJxRISEujOnTvEBlIICIAACDgKAU6wX6lqFU0sh73M+ICA gBYIBPbpTYkREXTxf7OM1RFeJGc/HUfuopJ3kRfaG9/DFQiAgFMQULymDRerS0EOM0MeONc+AYRk an+PHEZDDs9s0aKFXM9BUWGMw+rq1q1Lo0aNIjau+YmcF9OnT5dtY8aMkf22bdtGderUoUWLFlEb kT8mT5481KRJEzp8+DCdOXNGejNxomM2zJ0/f17Pig1yr7/+OhUR3gG5cuWiVq1a0RdffEExMTFG 4y5evFjqxGGVr776KrF3m9KHO/I5t/Xp00c/tuHJhx9+qPcwy4yuCoORI0fS22+/TYXEh6CiRYvS W2+9lWbo6o4dO6hp06aSB4ctvvHGGxQWFiZVU8b86KOPaMSIEVSwYEEqV64czZw5k+Li4uRa8oo3 sBwiu2zZMsPlkJpxeb/Gjh1LJYVnA+9Zp06dKDQ0lK5duyYNojwg71dH8c2zImmNy33Y0DZ8+HDp kchj8l7cvn1bedzqb16PJW53796Vr5v333/f6NlNmzbJ9h9//NGoHRcgAAIgAAIgAAKZI1Bu2FAq ZRAWrIzCFTNPvT+CHu7ZqzThNwiAgDMRgIeZM+22w64VBjOH3VptLowNFixVq1aVvzlMk41k8+fP p+oiFKVw4cIydPPKlSvyPhtijh8/TgMGDKAI8Q1m586d5TUbw4KCgqTB5uWXX5YGNM6PxsKebO3a taMNGzbI359++il5enoSG+HGjx9vNG7//v3p3Llz1KhRI6pUqRIdOXKENm/eLPvwj79ExSduqyIS LFsS1pPXwJIZXfk5fn7GjBn0xx9/yHXyuphHv379+LaZsE6tW7emkJAQ2Z91W7p0qTSgJSYmyv48 5pdffkk///yzNBxyGBEb5dj4t0+Ufu/Rowc9fvyYBg4cKD3C+CG14/J+ff/999S+fXuqVq0arV27 VhrQ2DBZu3ZtOT/vI++n2nF5rbNnzybOW/bee+9J4+dFEf6UnnBeN0vc2FDKhsMFCxZII6EyDhvK +PXE+w0BARAAARAAARCwDYFKn4ylYq++YjZYinhfcmLIEIrIhoqyZpOjAQRAIIcJoEpmDm8AprcB AYRk2gAihrBMYOvWrXT9+nV5Mzw8nHbt2kV79+6VhpZ69epJgwbfZA+o3bt3U+XKlWWbJUMRG8pW rFghk99z0YBVq1YRe3ex8YaFx1NCOS9fvizb2GNJuc9eUWXLlpU6yJtPfrDRh40ubFBjXbk/G4DY w4nl119/JQ4TzUgRgozo+kQNKlasmGRTpkwZ2XTz5k3iZP+K4VDpx7/Zc4yNQbxeJayVPfTmzJkj PbvYO42lRIkStGfPHipdurRcE3uCsZdfcHCwNDTyXJxnjK9ffPFF1eNyXjr2GOO5Obeav78//f33 33IfJ0+eLPepQ4cOxOcs6enbrFkzWrlyJXXt2pUUzy/eW/Y+fPTokRzD2o+0uPXu3VsaCdkAyt5u 8fHxtHHjRmksq1ChgrUh0Q4CIAACIAACIJBBAlyoovr0aZQoUjI82L7D6OnkmFg6NuBNarDyZ8pj IR2HUWdcgAAIOAwB0wI2vDBUyXSY7XWahcBg5jRbnf0LVby5DGd+9tln6X//+59hkwyXZGNZWtKt Wzdp7OE+indar1699I9wGxt+oqOjiY0hbDTjcD3Ol8ahfQ8fPiT2vjIN83vzzTelsYwH4tBGDhll zzQOEWThc26zVq1RdjL5kRFdc+fOLZ9mrzLFWMYNzZs3lwaxf/75x2h0NiCdEpXR2PjHYad8sHB4 JQsXU1AMZmyIYmMZi8KMDWMc8sjC3mEsDx48kIYpteOyboqhjqu8sVfZyZMn5VimP9To6yESVrMB kItEKMJc2EstPYNZWtzYi46NdWz0ZIMZG3B5PDakQUAABEAABEAABGxLwEV8KVfrm9kU/EZ/ChfV XA2F85wd7duPGq5eTT6iAi0EBEDACQi4WPAwE+/5ISBgTwRgMLOn3bIzXTlnlmKo8fX1lcYbzs/1 tMIGFlNhDzFDmTt3rgwTjIyMJM7XlV9UNOOQyYCAAMNuZudshGNvqe3bt8t7/LyhYc7sgXQa1Ohq aQgltJET6LMHlyKKxx4bBF966SWlWf/76tWr+nPDE1M+fM9Qt8yOy+Nw/jdromZczoXGwgaypxVD bhyWyaGr69atk8ZS9hzkNbMnGwQEQAAEQAAEQMD2BNy8vanOvB/oSM9eFHX6jNEE8ffu09E+fanB 6pXkJaILICAAAg5OAAYzB99g51geDGbOsc85ssqGDRsaVcnMLiU459i7774r5+bk84r3Gnu3pZcX i8MWORcaG1dYvMUbP27LbuGwUxY2IinebnzN4assnIvst99+k+eGPywZxvg+h0iwJIuwRE7Cy98C G0pmxzUcw9K5mnGVwgPsLfe0ucUMubE+bOzk3GzsaciGM67Smp7R1NI60AYCIAACIAACIKCOgLv4 krTu4kV0uEs3evwkJ63yZIwoEBTcrz81WPGTrKCptOM3CICA4xFAlUzH21NnXBGS/jvjrjv4mg8c OCBXyMnjFWMZh2NyWGZ6wt5oHL7Hxig++JzbsloMjWI8l+LhpnjoKfNzFU0+OPyUwyE5hxcfN27c IA4vtWRE4zCIpCcGsxRhiIsTXmumkplxTcfga9aJhcNhWdSMq4R3cuVURbjAgzVvOaUP/06PG+ei 48qqw4YNk1VEEY5pSA/nIAACIAACIJA1BDyFR3/dZUvIW3h7m8ojUWwpeMBASn7y5aDpfVyDAAg4 CAF4mDnIRjr3MmAwc+79d8jVt2nTRibq/+abb6RnERuR2rZtS2fPnlW1XjaqhIWFZauBhXV8//33 ZeJ/DmXlAgcccsmVO01lwoQJshIo5yNj7ywuDsDVLnfu3EnsRWcqSQaJ811F6CpXrDJsU/pndFzl OcPfSn40NvhxzjCuWJreuLw3nINt+fLlsqon543jPVTCOQ3HNz1PjxtX7uSKqhzCymG5zAwCAiAA AiAAAiCQ9QR8RJGgesuWkodBagll1gjxxd+Jd94lnajiDQEBEHBUAuY5zHSEHGaOutuOui4YzBx1 Z3NwXVxVUq1wX9P+ltoUzyXDcQ3blHN+lr3Kxo0bRxcuXJCGMjaY+Pj4yET1pnMpzxmOywYcDttj 7yg+T0v4eTVjGs6jnBs+xwajn376SSb7HzFihMy9xeGkhqL0HzRoEM2YMUOur2/fvsRFBjhH3NKl S/XJ+Lmv0t/F3UN/7i4MSK5u7pQQFk4uT5JuKv0yOq6iG69HWVO+fPlkGCQXK2CjFyfZT29czivG lUqZN1cjZUMhe/VxUQJFN2Uuw998r7QoapAeN07+z8KhtWnlWzMcG+cgAAIgAAIgAAJPTyB3+XIi PHMhuT8pcmQ44sOdu+jUyA9RNc8QCs5BwIEIWKqSSSkpDrRCLMUZCIjPzChV4Qwb7YxrTBH/IHNe LE4qr1SjVMOBvZHY6MYeX9OmTVPzSKb78J8fG5vY6MUeVpcuXZLGOjV5tvhZ9sJiYxl7T1mTZBEe yWGYbCzzEjnRkkQl0XhRGdNDGLc8LTyndlxr83E7F1hwE3nSFI8zblMzLq+H87Bxwn61wl5saXFj 4+LIkSOJc9vVq1dP7bDoBwIgoBECNV5P/eLij3nLNKIR1AAB5yXQ8a0+cvGn1m7OEIQwkS4juP+b lCJyqZpKSfFlWdXPJ5o24xoEQMDOCdzd9CedfHeo0SqKvNCeas35xqgNFyCgZQJI+q/l3YFuT0WA DVFKDjM1A3HerH379tGkSZPElx8pNGTIEDWP2awPG5iUfF5qBmUPK/ZMS0+4YhV/s5v0+DG5x8SQ u8jpxTnN+ODEvK4mVUfVjpvWvJYMfmrGDQwMTGtYi/esceMCD7t27aLJkycTF6CAscwiPjSCAAiA AAiAQJYTyN+4MdX830z54ZmLDxnKDeFh7+nvR+VHvG/YjHMQAAE7J8Dv/U2Fv0CHgIA9EUBIpj3t FnTNUgKnTp2SOa44+fyUKVNkuF+WTpiNg7MnGbtFJ4jcbPwfFSfj5d8JoWHZqEX2TjVr1ixZCCFe fJu9YMGC7J0cs4EACIAACIAACBgRKNy2DVX7YjKJfAtG7Xxxac5curposVk7GkAABOyYgKv53zql wGBmxzvqlKrDw8wptx2LtkSgRo0atGrVKqpduzZVqFDBUhebt/E3LydPnjQKXbT5JGJAF3d3Wb6d K2Ymi7xi7iJHmIfwNEsU4ZnJwuvMTYRrOpoMHjyYWrZsSa1atSLOrQYBARAAARAAARDIWQLFRT7R xIhICpnyhZkiIZOnkKf4/7rY66+Z3UMDCICAPRKwYDBD0n973Ein1hkGM6fefizekADn2+rSpYth U7ac16xZM1vm8RTrS45+LN6oRpCbCNHkqlVJwljGXmfeoiiCJbfpbFEsiybhogF8QEAABEAABEAA BLRDoPSbA+R7kcvffmeslPB8Pz36Y/mlXqHWzxvfwxUIgIDdEbD02QIhmXa3jU6vMEIynf4lAAA5 RYArSHKeraTsKqkuvNk88vtTisgdwkYz9jrjxP8piYkyn1lOccC8IAACIAACIAACzkWgwgcjqWTP 1CrWhivn/GYnhw2nsIOHDJtxDgIgYI8ERDoYM0GVTDMkaNA2AQuvYm0rDO1AILME+BsNd2Ek6imq MeW0vPXWW1S0aFEZ+sm507JLOPk/FwFIFAn/UxISpMHMVTBhAxq/SV2zZo2sbvn7779nmUrsxefl 5WWz8W2l83PPPUeZKTpguBBb6WI4Js5BAARAAARAwBEJVJk4gYq82MFsaVxJ8/hbgyjq9Gmze2gA ARCwHwLwMLOfvYKm1gnAYGadDe44IIEGDRpQ+fLl5cpu3bpFxYoVo6lTp2brSi9dukTz58+nJk2a yJxpuUT+sOzUgxP+s3AoJifelQUAxLc9CeHhlCyMZlwhlI+sEq4EWr9+fZsNbyudeRw+nkb8RZgr v8b4NwQEQAAEQAAEQMA6AS5GVOPrr6jAs0FmnZJEjtXgfv3psXjPBAEBELBTAkhhZqcbB7UNCSCH mSENnDs0Af6WY//+/fo1JggPqzt37lCU8LbKTtm5c6ec7r333qMXXniBrly5kq16uHp6kruvLyWJ kFAl4b+byGHG1ynZEB46adKk7MSdrXNxgQE+ICAAAiAAAiAAAukTcPXwoGfmzqWjffpSxLFjRg/w F3tH+/Sjhr+sIm/xBScEBEDAzgiIz15mIiJ+ICBgTwRgMLOn3bITXW/fvk1z5syh3377ja5du0Zl ypShMWPGGIVC7tixgz799FNZITJ//vzSyPD1118Tn7NwXi82rHDVyhs3bhCHy3Xr1o169OhB8cJV v3HjxtSxY0caP368nsrAgQPp5s2b9Oeff9K2bdvoo48+oqFDh9LSpUvpwIEDdFq49vMYbdu2pUGD BkljFT+8aNEiOnPmjKykeP78eWKDFnt9scSIpPgtWrSgypUr07Jly2Rbej9YhxEjRtCePXsoLi6O atWqJb3YGjVqJNe8ZMkSOcSwYcPo+++/pwsXLshrRY8//vhDXqfFiMNL69WrR88//7wMM2XdOCca X//www8U8MSLTA705IfyDK8n5vFjWvPLLzL88uVXXqGZX35JFBsrigJEy97sfffyyy/T33//LSt4 vvPOOzR69Gi6e/eu5Pbss8/SzJkz9cNv2rSJPvnkE3r//fflXqa1/x9++KFkfOTIEfl8WnvNHf79 91/6+OOPad++fdK4yXvP6xw+fLh+n/SKqDxhYynrwSGUjwULrqbJr1tFlPXMnj2bmjVrJpsjRNgq vw75NfjBBx9YfI3NmzePZs2aRfxa5jGVtU6YMEHu/blz5+Rr6ZtvvtGPa0kXbmMvP34tQ0AABFIJ dHyrD1CAAAg4IAG3XD5UZ+F8OtytB0WHhBitME58sXm07xvUYNUK8nzyHtGoAy5AAAQ0S8DFxTyY TafLuigWzYKAYnZNwPxVbNfLgfJaIDB48GCaNm2aNBiMGjVKfvDv1auXNFqxfn/99Re1bt2aQsSb ogEDBlCVKlWkUatp06aUKBLQs/Tv358mTpxIpUuXloYvNkJx7rHDhw/L8Y4fP05Xr16VfZUfbFj5 559/5GVoaChxHx6HjRRsrPIWubuOiW8v2aOLDWK1a9eWfQsXLkzVq1eXerARZ/PmzcqQUlduYx3V SGRkpDRkcQ4wztXFRrGzZ89S8+bN6dChQzIctGTJknIoruDIFTJN9eCbahjxWqZPny6Nbu3bt5cV IdeuXUtjx461qio/M2PGDFq3fj3179uXmorwQQ4P7S9yqnnkzSvzmvHDrDfz7dOnD7GhjQ1W27dv pyJFisjrBQsWSGOgMtGPP/4oeTPn9Paf+bMeiqS11xwi2a5dO9qwYYP8zUZWT+EhxwZYQ2OpMpba 3/369SM2hrEBjD392FDKBRgUefDggVyPofchG2r5NcXGRBZLrzE2vnGfcBHeysJrPXr0qDTu8r6/ /vrr8vXIrw0ej8WSLmywU17LshN+gIATExjSpZcTr94+l+4lDP75ExKpZEw8VY6KoXphj6jZg0hy g2eBfW6oidZZ8TfJRYjqLV1MuQIDTWYjGZbJ4ZkcpgkBARCwIwLwMLOjzYKqVgmID8MQELAZgejo aPaz1QkvIP2YJ0+e1AmjgG7jxo2yrUaNGjoRHqkTBjN9n3fffVc+JzyudMJQIO8LQ4lOeNnIPvfu 3dPlzp1b9+KLL+qE15fsy2MaSlBQkE7kApNNK1eulH2EIUknDBOyjcdi3YSXmby+fPmyvBbGIHkt vOHkvMIwJ6/5B5+zrnxPjYwbN06OKQxK+u4iqb/O1dVVJ0L1ZNvcuXNln927d8trUz24MT1GylqK Fy+u5yiMS7q8efPqRI4wOa7pD+UZZsRz8nXMjRu6hnXrSv1CgoN1S2fPlrq98sorem7CeCPbhCFO Dim8p+S1MArKa+FFp/P19dUJY5lOzf4Lo5Gcjx9Ob6+FEVQnPBR1wlNLzsU/eJ2lSpXSiTxosk3Z a2Es1PdJ60R4Gso97dq1q74b612pUiX960d4Aco1Kq9Z7ii862SbMLDJ55R5DV9jSpuiC6+VX3PC e1A/1xtvvCHb+O9CjS76B3ECAiAAAjlIIE78Pxx64KDuzsZNuuvLl+suzv5Gd3bCRN3JYe/pjvTu q9vX4UXdzsZNdVsqV9X9Vaac2REybXoOao+p7YVAzLXrur8bNjZ7/fBr6nD3Hrpk8Z4DAgIgYB8E Huzabfa3fLSv8ec3+1gJtHRmAgjJtGpKxI3MEBBGLelZxmGNwrglw/o4T9fixYvlcBw2yFUhy5Yt K0Pt2CuMRRhA5G/2wuJKluKPkt58802Rkz419r1QoUIkjBqyT6wIHVQrPAZ7JKkRrpDI4YrszcQh cSx8zm1qqyeyBxxXgOwrvLcUYe81DiPktakRNYy4yiYLe65xEn0WYZST3mrCECOvrf0QhkUZJsv3 ObyhqUjAfyg4mI4LTyhFevfurefGoZ8s7HXFwiGJHO7666+/Ss+prVu3ynBQfia9/ZcDGPxgXmnt NXcVxj3pzbZlyxYZNvnw4UPpiWgYQmkwZLqnvA88Z/fu3fV9WW/2NGT2GZX0XmO8L8JIph+WefLf w/379+n69es21UU/CU5AAARAwMYEEiOjZJ4pXSZyXbLXULmh79pYIwzniAR8AktSXeFpdkSEZyYK r31DCTt4iE4OG07PfDuXXNzcDG/hHARAQIMEXFzNc5jppP+CBpWFSiBghQAMZlbAoDnzBDgc8+23 3ybhnSMPNnq99NJLxLm7FCMHG0G4zVQ4DFAJWVR+m/bJymsOHeW8XRx+yMIhltymVjhnGxte2Ohn KCVKlJA5uMK4MmU6wkYUlrQYWRuCjXUZETcRmlpPhFGKuE66Jww4AUJ3U1EMjmxkYuGwTA6pXbdu nTRccRioh4cHCY8teT+t/TetHqmsNa29Fh55MsyU90J40Mk8dxwOaSlPm1QgnR+8Ryy8Tzkhhjxz WpecWD/mBAEQsE8CeSqUp9L936Ar8+ZneAFVJ31GXFwGAgJqCPhWqiRymi0QBto+ojiR8Zek97du o9OjP6Ya06fJSt9qxkMfEACBHCKAkMwcAo9pbUkAOcxsSRNjSQIiVI447xcns//f//5HderUkcaV hQsXUsGCBWWfBiJ3FueCMj1Wr16t76PkgbKGVTHgWLufmfZOnTrJXGdsBOKD855xm1opUKCAPn+V 4TNs7GGjUj6RoyM9UcMovTEycl8ErMruJUSeNndhkFIjbETkJPjs9cWGM/YiVAxYae2/6djKWq3t Nb+ORLguVa1aVeb+Yo6cF6xhw4amQ6m+VvZA8W5M68GseI0ZzpcRXQyfwzkIgAAI5ASBcsOGkrf4 0iQjUuzVVyjgSfGUjDyHvs5NwK9ObeFJ9i1xFU1Tub32Vzo/eYppM65BAAS0RgAGM63tCPTJBAEY zDIBDY9YJ8DGDDaecCL58uXLy0qG7K3lJlznORE+h1byESxCADlUTeTTkgdXwuTQNq6sycYRFg6H VIRDJF977TVpPGEvKvbS4WT+irDxhsfIiPD8LFzJUhH2YOLqm6wHH3zObWqFdeewPq6QqQgbg/bu 3SurIzIHUzHVQw0j0zEycq2EmyrPKN501UToqFp59dVXKU+ePLI4AHvNcTgmS3r7bzp+envN1U1Z ODE/Vypl4cIQHJaZWVFCWA8ePKgfgl8/7N2oiLLnXAxAEQ4ltrWo0cXWc2I8EAABEMgsAfZKrjR2 jOrHPfz9M9Rf9cDo6BQECgQ1pxozviaXJ+/XDBd9bdFiujRnrmETzkEABDRGAFUyNbYhUCdTBGAw yxQ2PGSNQOnSpaUh65NPPiH2KBOJ7UkkwieudsgVAlkmTJggrznH2bJly2jNmjU0cOBA4rxnzz77 rMyBxh5EogAATZ06VRqf2MuIDVjsrcYGJq4uqVSJXL58ObVo0UIaa6zpZandz89PNrPBiPNwsY4s bPxhI5ChIUjeED+4WiTnoOL8U5bkgw8+kJ5kPAYbCHlskUBf5l8bPXq0pUfIkh7pMbI4kMpG5vj+ ++9LI97MmTNpxYoVMjxWJL1XOQLJKqO8nxw2ml/kQeO9ZFGz/4aTtGzZUnqLWdvrNm3ayDx233zz jfRmY93btm0rK48ajmN4vm3bNrlHP//8s2Gz/pyf55x5/LrhPmyY5XmU8FDuWKtWLfk6Y8PvTz/9 JKuRWgoh1g+ayRM1umRyaDwGAiAAAjYnkCS+EIoQX3iplcpjPpa5MtX2Rz8QMCVQpMMLVOWziRbD Ly/OmEnXl/9k+giuQQAEtEIAHmZa2Qno8RQEYDB7Cnh41JwA5yvjhOaisqH0GGMD2B9//CE9hNjo xTJo0CCaMWOGDNnk5PiiaiWJKou0dOlSmcCex+BwyOeff57GjBlDnKSejRr8fL9+/eQYnNeKjS1s wOojclywpw4b05QiAbKT+KF4bynXfF/pw+FwHFooKjVKg4mS8J2NGBxeyJ5efG4oly5dkt5xovKm YbP+nL3qOHcbC3th8RqOHz9Os2fPlsnyud1UJ0t6pMeIxzFcC1+z8Nim46fe+e8nG4vYCMQFA0aM GCHzkYkqjv91eDKOUYOFNk7+z8Ihq0ruNNYpvf1n/ZQ94N9p7TV7lbHBlcN7eS/YSOcj8uDwfitj SCXED+WavcXYg/HOnTvKLaPfHBqreDuKKqjSWMgeZdWqVdOPwUUp5syZIxPy82vks88+I1GpU46j zKMMaom30sfSPcM2a7rw/EquM2Ue/AYBEACBHCMgQvdv//4H7X2+DV1bslSVGgFNmlCx115V1Red QCAtAiV7dKcKH4y02OX8hIl0Z/16i/fQCAIgkMMExPt8U8nqdCem8+EaBJ6WgIt40aYmMHrakfA8 CJgQ4BC3JFFNi41IloRfeuzVw8Yy9lKyJFwZ8+7du1SuXDm9McOwH99jw4K15w37WjvnBPIcKql4 erHXFBtq2AuLE9gbCoczct4trhiZnkGDCxxwRU82HhoaSQzHMzw31YPvqWFkOEZa5zwW68EGSvau YuMfGwaV3GNpPWvpHhs9R44cKfPVKZU0Dfult/+Gffk8rb1OSUmRVVW5OABXtExPunTpIosQKF6N 1vrz64/3kQsZWJOLFy9KjzQ2btlaeM937NhBVUT+ODbasS5sqOVQZX4N7hRelxAQAAEQyEkC0eIL i7PjxlP4ocOq1XAV+T+b/rmRcj2pgK36QXQEgTQIhEz5gq4uWGjWw8XdnerM+4EKtHjW7B4aQAAE co5AuMhFfLjrf1XpWRN/keu6waoVOacUZgaBDBIwLuWXwYfRHQTSIlBahGemJeyFw95OaQnnybJm cOPn0jJ0pDWu4T3FYMSeSfv27aNJkyYRG2iGDBli2E2esxGN85qlZyzjzmz0yIgoehg+o4aRYX+1 52wgVPJnqX1G6ccGpF27dtHkyZNlOKUlYxn3TW//lfGU32ntNRv6lBxmSn9rvzkM9tChQ/StSBac ngQGBqbXJc3XX7oPp9Ph8ePHxMa9GjVq0MqVK6X3HHuy3bt3Txoj03kct0EABEAgywgkiX+fLs2a LT3KdOLLr4xIuaHvwliWEWDoq4pApY9HU2JEJN0SqTwMhV+fJ955l+otW0J+desa3sI5CIBAThIQ n/XMBL46ZkjQoG0CMJhpe3+gXTYS4KTuSi4u9iyzZPAZO3Zshg1h2biEbJlq1qxZMlyRPb0WLFiQ LXNmZJK64s0yV8BUwkQz8mx292WD3fTp0+mrr76SIaHK/GyUHTp0qHKJ3yAAAiCQrQTubtgoqxDG C+O9NeECAL6VKlLE8RNGXfKIfJhlBr5p1IYLELAJAfHhu9oXkynpURTd27zFaMhk4dEfPGAgNVjx E/kKr20ICIBAzhNQUpQYaoLgNkMaOLcHAgjJtIddgo7ZQoA9zLZs2UK1a9emChUqZMuc2T0J52vj 0FM1nlXWdDtz5gyFhIRQq1atiPOvQZ6eAL95OHHiBHEYK3vScYgmBARAAASym8BjEap/bvxECt2/ P82pC7dvR5U/GUveRYtScP8B9HDnLtmfqxk2+GU1+dV+Js3ncRMEnoZAikiPEfzGAAp7UknbcCwv kTajweqV8HA0hIJzEMghAhHHjtOhTp2NZverU5sarvnFqA0XIKBlAjCYaXl3oBsIgAAIgAAIgAAI ZDGB5JhYujRnLl0T1a1TEhOtzpZb5OSsPGE8FWjeTN8n5to12tfuBUoRxXAC+/SmKuI+BASymgCH DB/t2ZsixReBpuJTsgQ1XL2avAoXMr2FaxAAgWwkwB7Ih17vZDQjf6HScK1xWLVRB1yAgMYIoEqm xjYE6mQPAc5RxpUXIyMjs2dCzAICIAACIAACGiRwb/Nm2tumLV35/nurxjI3UZ24wsgR1EQk8jc0 lvFyOLF/mUFvkbconmKtkqEGlw2V7JyAu0gLUWfxQspdvpzZSmJv3KSjffuJfGcRZvfQAAIgkH0E EJKZfawxU9YRgMEs69hiZI0SWLFihcxPxknvTatg5rTKnADeHnJv5TQnzA8CIAACIPB0BGJECHjw G/3pxJB3KE5UdbYmhVo/T003/0ll33mbXEUlX0tSZvAgqjFzBrmLQj0QEMguAp7+/iLR/1LyKV7c bMpokcv02IA3KTkmxuweGkAABLKJgKuFpP8pumyaHNOAgG0IwGBmG44YxY4IcIL1RBFysnjxYura tatNNH/hhReoWbP/QlQyOygb8eqLcssQEAABEAABEMgKAslxcXRx5v9kGOXDXbutTpFLFCWps3A+ 1f7he/IpUcJqP77h5u1N+Rs2SLMPboJAVhBgz8a6ojqmZ0CA2fAcDnZ88NtWPSfNHkADCICATQnA w8ymODFYDhFADrMcAo9pc4ZAVFSUTHrft29faTCzlRZs5OKiARzm6aiiE2GsKaIKFf/m6mgubm6O ulSsCwRAAAQcksD9bdvp/OefE4esWRNXLy8qKzzG2GuMzyEgYA8Eos6cpSM9eooKmo/M1OUiFbVm z8L7FjMyaACBrCUQdfo0HXj5FaNJ8lavTo3X/W7UhgsQ0DIBeJhpeXfsVLcPP/yQGjRoQGvXrqWq VauSv3CZ51DDWGFsmTdvnqzQyJUa33zzTYoXSYJZEkTFo48//pjKlSsnQxJLiG+zBw8eTKfFP7SK 8LhsmNq4cSPVqVOHfEROFa5ouXfvXtmFx+L2iRMnKo/I3wMHDqT27dvT7t27pRcYVyRUxrh165aq uZOSkmjChAmyemEeEXLy8ssv088//yzH79atm9Tzmkh8zPOfP3+ehg8fTs2bNzfSY9WqVfL+qVOn iHWoW7cujRo1ioYOHSqNeNOnTydljfygYZ+xY8dSyZIlZb9OnTpRaGiofuxLoqpZmzZtiPXi6pfD hg2jZ555hr7++mt9H1ucxN+7T3H371P8w4cUe/MmvrG1BVSMAQIgAALZQCD2+g069uZbdPytQWka ywq2bCnDL8sNHwZjWTbsC6awHYG81apSnfnzyFV4O5rKvT//orOfjuM3Vqa3cA0CIJCVBFwsmBp0 KVk5I8YGAZsTcLf5iBjQ6QlcuXKFjhw5Qt27d6fXX3+digh3+V9++YVCQkKIjTtsPDtx4gQtFNW4 6tWrJw1jY8aMkQaeoKAg6t+/P925c4cWLFhAW7dupX9FHgo34c3E4x49epQ6duxIHTp0kMa4NWvW yPH4HifyP378ONWqVctoD/j5ixcvUoBw169ZsyaxwapAgQLS+OYp8rGomZt1+vHHH6ldu3ZyXb// /jv17NmTypcvTzVq1KBt27ZJwxsb9HKLRLS8TtbFUB48eCDb2MuN5dixY/LgnGXMgTkdPnxYtinP KX3y588vWZ45c0YaIln/70WCZvZqa9y4sTQ8jhgxQl4vWrSIHovqUS3FBx9bCecASY6LlcOxxwFX Q0sURjsvoTMEBEAABEBAmwT43+orP8yjy9//QCkiFNOacMhl5U8/Ic5XBgEBeyXg36A+PfPNbBGG OYR0yclGy7i5chV5iC9rK370oVE7LkAABLKOAEIys44tRs4+AjCYZR9rp5tp6dKl0rjE+cJ8fX2l 4WuzqMbFRjE2cJUtW5b2798vDWZsxGLvrC1btuiT3rMxa+bMmXTjxg2ZpF8BOH/+fHrjjTfkJffh XGRsjKtQoYLSxeLvatWqyfF++uknev7552n27NmyX3pzPxLu/cuXL5fGsk2bNhH/48/eb6z/5yK0 Zf369cQGNDZe/fDDDxbnttZYsGBB6flWuXJl2WXdunVmXYuLZLY7duwgzm/GRkH22Pv7779lP14D G+LYcMjGSZYePXpII5q8sPEPrkrlVaiQ9DLjsAd3YUjj8EwICIAACICAtgg83LmLzk38jGKE97M1 4ST+pQe+SWXfHkJcCRMCAvZOoGCr56j6l9Pp9AcfyhQShuu5IgzHbDQr89ZAw2acgwAIZBUBFwsD w9HTAhQ0aZkADGZa3h071s3V1VUay3gJHh4e0tjDIZNsLGMpU6aMDKl8KML7WNiQxhIcHCwNa/dF 6N+5c+dkG3ublS5dWp7zuIqxjBvYM4sNZtw/PYOZHMDCj/TmPnv2rAyP5BBS5ZuSQsJoFB0dbWG0 jDW1atWKFGOZtSc5tJONZSy8fg5DPXnypLw+cOCA5PjKK//lB2C2thZX8UHKVexjMucwE+GpXJkq WXixJYSGyfkFGFtPifFAAARAAAQyQSBWpBoImTSZ7m3ekubTAc2bUZUJ4yl3FvyfkebEuAkCWUyg 2CsdKVF8iXn+s8/NZvp32nRpNCvRpbPZPTSAAAjYmIClzwcIjbYxZAyX1QRgMMtqwhhfEnB3d9fn K1OQcBvn6WJhL6/OnTtLTzEOUWTPq5gnpcDZq8qasIcZizKOtX5ptac39/Xr1+XjnENMC8J8FOG8 aRyeySGrWSlsKPQUYaFx9+5RQng4eYn94W9pE8LCKDEyUp5n5fwYGwRAAARAIG0CKcKb++qChXR5 7lxKjkkNobf0hHfRolT5k7HEidAhIOCoBEr16yvfn1yalRpNoF+neN95duwn5JHXlwqLNBsQEACB rCPgIr7oNxUuHgYBAXsiYP4qtiftoavDEOAk+uxJxqGNnH+LwzBNk/erXWxGjWfpzc3GO5ZwYSjK iKRl6MvIOGn1zZcvH92+fdsm3m5pzcP3OPTSzScXJQnPOs6L4543r/Q6Y4MZe51BQAAEQAAEcoZA 6L59tL99B7rw5VdWjWXsJVxm0FvUbOtmGMtyZpswazYTKC+KVwT26W02K+c3++e9EcR/NxAQAIEs JAAPsyyEi6GziwAMZtlFGvNYJcCGsqtXr1Lbtm1lQn/FW+ru3btWn7F0gz2v2ONMCeXkPpxXjI1v 1kTN3Fzpk2XDhg36Ybiq52uvvUbvvvuubONQSa4CqkheYUzia8U7jdvZk83WwmGoyeKNHxdDUMS0 2IDSbovfngH5ZVhqvEj4r3id8TdFiRk0JtpCF4wBAiAAAs5OIE78P3ly6DA62rsvPb582SqO/KI4 TJONG6jiqI+Qd9IqJdxwRAKVx31KRUWxKFNJEe/jjg8aQpEnUlNcmN7HNQiAgC0IWErZgiRmtiCL MbKPAAxm2ccaM1khUFSEh3D1yr/++os4If/OnTvpgw8+oClTplh5wnIzG614HK4sOX36dJmov0WL FrLAgOUniNTMzdUmGzZsKKtSTp06lfbs2SMNZb/99pssVMBj+4nwxFsibwxXA2WPL84zxsLr+PXX X6lv3740b9482WbLH4MGDZLDjR49WnL77rvvZNVQwzm4gifnevv5558NmzN1zh4K7FnGHmbsaaZ4 nSU+8TrL1KB4CARAAARAIEME2Kv36vwFtPf5NnR34yarz3oVLkQ1Z82k+j/9SLnLl7PaDzdAwFEJ cEhYjS+nUUELlcO5AnjwgAEUfeGCoy4f6wKBHCXg4mpuMNOlwGCWo5uCyTNMAAazDCPDA+kRYMOV qXCb4jlmeE9Jov/VV19R+fLlqVevXsQGKjYycaikoVgb17DPXJG7hZ//+OOPqU+fPjJZPlffVOZR dFB+87Ppzc3Prl27VlbWHDNmjCxcwN5m7F3Wr18/OT0XBGAPty5dutDGjRtpyJAhxG1c9ZOrV3I1 0AHiTZmh8LiKXko7r9GwzVofhUXTpk1pzpw59M8//8h1Dx8+XG8wU/K7sZcdF1PIqMeeopPpb09h HHRxdaPEsHBZgUrxOksQXmcQEAABEACBrCUQdvAQ7e/wEoV8MVWEX8ZYnMxF5LUsPaC/CL/cQkVf esliHzSCgLMQcBE5c2vN/Yb869c3W3JieAQd7dOPYm/eNLuHBhAAgackgJDMpwSIx7VAwEXke4KZ Vws7AR0kAQ5hZMNT4cKFn4oIG4fYYJRfJKpXK2rm5sqYPHa5cuWMDFs8Bxcp4PsBAQF642BcXJzM zZYVlSt5zhMnTtAF8c0oGwm54mipUqXo8OHD1EJ41rHx8O233+ZuNpekR48oXsznkc9PFAPw1yf/ 52IA7nny2Hw+DAgCIAACzk4gXlSDDpkyle6sX8+Vbqzi8G9Qn6pMnEC+lSpZ7YMbIOCMBPi9y+Hu PejR2dQq7IYMcpUuTQ1XryRPUUgJAgIgYBsCj69cob2tWhsNxpWZm23fatSGCxDQMgFzVyAtawvd HJ5AYGDgUxvLGFKRIkUyZCzjZ9TMnUcYg9gTztALjJ9lySWS4hcqVEhvLOM2b29vyipjGY+/fft2 6VHGBRL8/f1lLrOxY8cSVyBt06YNd8kScff1JVdhkEyMEgn/E5PI1OssSybFoCAAAiDghAQ4Qfm1 RYtl+OWddeusGsv4g36Nr7+iBit+hrHMCV8nWHL6BPi9S70li4mNY6YSI3LpHu33BiVFRZnewjUI gEAmCaBKZibB4TFNEYCHmaa2A8qAQMYIcEXRHj160ObNmyle5BVjYQ+9r7/+mt55552MDZbB3inC ey5WFGxwF4ZCL+ERqHidsfHMQxjvICAAAiAAAk9HIFwUdDk3bgI9On/e6kAcflmyV0+q8P57Msek 1Y64AQIgIAlw+OWhzl0p/t49MyIctll3ySJRFdzH7B4aQAAEMkYgRkQO7WnxnNFDuYRzRPOdO4za cAECWiYAg5mWdwe6gYBKAhwOysUIOLcZFz542pBWldMShwglCaOdt/Do4zeXsaLwgS4xkXxKlCDO GQIBARAAARDIOAHOCRkydRrd/vU3qx5lPKpfndpU9bPPyLdqlYxPgidAwIkJRF+4SIe7dRNVviPM KHCBgNo/fIf3MWZk0AACGSMQe/0G7W7R0ughn8CSFLTzb6M2XICAlgnAYKbl3YFuIKBxAinCOMZG MjdRPdO7eHFKFl5ncQZeZxpXH+qBAAiAgKYIcPjljZ9X0IWvZ6QZGuYp8nNWHPUhFe/UiUSOAE2t AcqAgL0QiDx5ko707G2xeEZRUXiqxoyvRJEjZK+xl/2EntojwN6cu4NaGCnGX6oH7d5p1IYLENAy AfwvoOXdgW4goHECrsJQ5ikS/ycnJIh8ZlEyrxm3JQmPN/7gBwEBEAABEFBHIOL4CTr46mt0bvwE q8Yy/vBesmcParZtCxXv3BnGMnVo0QsELBLIV6sW1Z73vXzvYtqB8wWen/iZaTOuQQAEMkLA0hc6 aRStycjQ6AsC2UUABrPsIo15QMBBCXj45SMXN3dKioiguJu3iL3OuCiCpcIIDooAywIBEACBTBNI CA+nMx+PocOdu1DU6TNWx+EP941+W0tVP/+MPESuSAgIgMDTEwho0oRqzpop3se4mQ12/cfldPF/ s8za0QACIKCOgKXPAjoYzNTBQy/NEIDBTDNbAUVAwE4JCOOYV8ECpEtJoZTkJLkI+WEOYQx2uqFQ GwRAIDsI8L+ZN1esFNUvW9PNVavlv6GW5vXw96Oqkz6nhmt/obw1aljqgjYQAIGnIFC4bVuqOnmS RY/NS7O/oWuLlzzF6HgUBJyYgKXPAuL/PggI2BMBZOW2p92CriCgUQKc8J9zEnAOM0727+btrVFN oRYIgAAI5DyBqFOn6Kyofsk5lKwJh18W79yJKnz0IXmi8rA1TGgHAZsQKNGlMyVFRlLIF1PNxjs/ abL06iz26itm99AAAiCQFgHzHJvwMEuLF+5pkQAMZlrcFegEAnZIgA1l7nny2KHmUBkEQAAEsodA oghd54T+7FnGHmbWJG/1alRl4kTyq/2MtS5oBwEQsDGB0gPfpARRNfPK998bjyxCyE5/NIo88ual gq2eM76HKxAAAasELIVkitLPVvvjBghokQBCMrW4K9AJBEAABEAABEDAcQiID9y3fvlFhF+2oRs/ /WzVWOYuPpBXmThB5Cr7FcYyx9l9rMSOCFT8cCSV6N7NTGMuZHRi6DAKO3TY7B4aQAAErBBwNfcw oxQYzKzQQrNGCcBgptGNgVogAAIgAAIgAAL2T+DR2XN0qHNXOj3qY0oIC7O8IJELstjrr1Hz7Vsp sHcviwnILT+IVhAAAZsSEH+LVT+bSEVeaG82bIpIO3F84FtpFucwewgNIODEBCx5mCEk04lfEHa6 dIRk2unGQW0QAAEQAAEQAAHtEkh69IguzJhJN5b/ROydYk18K1emKp9NIP969ax1QTsIgEA2EuCK mTVmzqBE8Tccumev0cxJ0dEU/EZ/arBqBeUuW9boHi5AAARMCAgDtJmgSqYZEjRomwA8zLS9P9AO BEAABEAABEDAQIktZQAAQABJREFUngiIDwO3f/ud9rRqTdeXLrNqLOOcj5U/GUuN1/8BY5k97S90 dQoCrh4eVPu77yyGRieEhtLRPv0o7s4dp2CBRYJApgnAYJZpdHhQOwRgMNPOXkATEAABEAABEAAB OybwKCSEDnfvQadGfkAJDx9aXon4AFH05Zep2bYtVKr/Gwi/tEwJrSCQ4wTccvlQnYULKE/Fima6 xN2+TUf79hNFAsLN7qEBBEAglYCLi7mpQaezXvAG3EBAiwTMX8Va1BI6gQAIgAAIgAAIgIBGCSQ9 fkwhk6fQgRdfpvDDR6xqmadCear/03Kq+b8Z5FWokNV+uAECIKANAh5+flRv6RLyKVnCTKHHFy9R cL/+xH//EBAAAQsELERkokimBU5o0jQBGMw0vT1QDgRAAARAAARAQMsE7qzfIKpftqarCxdZDb90 y5WLKo4eRU02bqD8jRpqeTnQDQRAwISAV+FCVO/HZeRVsKDJHaKoU6fo+FuDKSU+3uweGkDA6Qkg JNPpXwKOAAAGM0fYRawBBEAABEAABEAgWwmwd8mRnr3pn+HvUfy9+1bnLtLhBRl+WeatgeTijlpL VkHhBghomECuwECqu3QxuefNa6Zl2IEDdFL8O5BWcQ+zh9AAAk5AwMXV3NSgS0FIphNsvUMt0fxV 7FDLw2JAAARAAARAAARAwHYEkmNi6N9p02l/hxeJPyhbE66gV2/ZEqr1zWzyLlLEWje0gwAI2AkB rmhbd+F8cvPxMdP4/patdObjMUSoAGjGBg1OTAAeZk68+Y6zdBjMHGcvsRIQAAEQAAEQAIEsJHDv z79ob+u2dOWHeZSSmGhxJv4wXeHDD6jJnxspoFkzi33QCAIgYJ8E/OrWpWfmzrHoLXprzVoKmfKF fS4MWoNAVhCAwSwrqGLMbCYAg1k2A8d0IODsBPhDZvSFC8j34ewvBKwfBOyIwOMrV2RFvBPvvEtx d+5Y1bxw2zbUdMtfVHbIYHL18LDaDzdAAATsl0CBFs9Sja+/IkvhZpzL8PK339nv4qA5CNiQAKpk 2hAmhsoxAkimkWPoMTEIOB+B+Pv36XCXbhRz/TpxEt2aM2ZQ/saNnA8EVgwCIGAXBJJjY+WH36vz F1BKQoJVnXOVKkVVxo8j/iANAQEQcHwCRV96kZKiIunsp+PNFnvhq6/JI18+Ktmzh9k9NICAUxFA lUyn2m5HXSw8zBx1Z7EuENAggZDJX0hjGauWGBZOwW/0p9jrNzSoKVQCARBwdgL3t26jfW3b0+W5 31o1lrl6e1P594ZT0782wVjm7C8YrN/pCJTs2ZMqjBxhcd3nxk+guxs2WryHRhBwGgIWQjJ1yPPn NNvvKAuFwcxRdhLrAAE7IMChmCT+86w+fRrVXbZUfgj9f3v3AR9F8TZw/AkpkNB7R3pvAooUC0gv gggWUEFUlCJdUBCpdkVUFEGlKc0uggKWvwUQpApKr9J7qAESknee5b2Y5G5DQi7X8pvPJ97d7OzO 7HdPsnl2ytaXmO/DDy4dTUQgwwhoD9i1jz4u6554UqL277c97/yNG0vDRd9Lmb5PSabMmW3LsQEB BAJXoHTvXnJD90ecTlBXAtw4aLAc//U3p21kIJBRBFwNWxZWycwolz9gzpOAWcBcSk4EAd8XKNCs qbWCVOyli5Kn7s1SqHUrObJ4iZxYvtz3G08LEUAgoAViL12SnW+9bfUqO/a//9mea3jxYnLjlMlS 68MpEl6iuG05NiCAQMYQqDh8mBS5p4PTyeqcret795bItWudtpGBQIYQcNHDjJVkM8SVD6iTDDLd IuMC6ow4GQQQ8FmBKxeiZGmTpnLF/GF6688/Ssy5c9aKcxElSkj9hd9KUHCwz7adhiGAQOAKHPvl F9kyakz8kHFXZ5opLExK9XhcSvXqKcFmKCYJAQQQcAjEXbki63v1Fh3KnTTpfGY3zZkl2StWTLqJ zwgEtEBcTIwsKZ/4ex8UEiLNtm0J6PPm5AJLgB5mgXU9ORsEfFogOCJcyg99WqJPnbJ6coQXLWr9 AXpu2zbZN3uOT7edxiGAQOAJ6JBLHXq5tvtjyQbL8t1+mzVPWdmBAwiWBd7XgDNCIM0C+sCvxttv uVzIKPr0aVnTrXuy/8akuQEcAAFfFKCHmS9eFdqUSgF6mKUSjOIIIJBGAdOpdWWne+X0Xxuk/ncL JbxYUdPrrJlcuRglt/70o4TmypXGCtgdAQQQSF5AV7zUlS93vTdJdCVMu5SlSBGpOGK4FGze3K4I +QgggEC8gPacX9XlITmzcWN8nuONDuGu++k8yVyggCOLVwQCWkDn8ltStnyic9R5zZrt2JYojw8I +LIAPcx8+erQNgQCUcA8bar4/AhrLrMt48ZJcLjpdfbMENPrLFJ2THgrEM+Yc0IAAR8SOP77Ulne srVsf2O8bbAsU2iolHrySWm4ZDHBMh+6djQFAV8XCMmWTWpP+0iylinj1FRdFXx110dEe5yREMgI AkEuepgxG1RGuPKBdY4EzALrenI2CPiFQM7q1aVIh7vlhPnD9dhPP0vhNm0kV+3asm/WbLFW0vSL s6CRCCDgTwIXDx0yE3D3kTVdu8n53bttm563fn3T+3WBlB8yWHQYOQkBBBBIjUBYnjxSZ+Z00R6q SdO5rVvNKryPic7pSkIg4AU0YJY0aKbTpzOFesBf+kA6QQJmgXQ1ORcE/Eig3NODJSRrVtnywosS ayYFrTTy/3udjRnnR2dBUxFAwNcFdNLh3ZOnWAuMHPl+kW1zMxcsaM1BVOeTmS57h9juyAYEEEAg iUCWwoWtoJkGz5KmyLXrzAIBvURX0SQhEOgC9DIL9Csc+OdHwCzwrzFniIBPCmTOn19K9+ktF/bs kb1Tp0mOqlWlaMd75MSyZXJ0yQ8+2WYahQAC/iVw8o8/ZFmr1rLtlVdNj44LLhuvK3aVfOxRafjj EinUprXLMmQigAACqRXIWrq01J4+VXSYZtJ0/LffZePAQaKra5IQCGiBpD3M9GTpYRbQlzzQTo5J /wPtinI+CPiRgE68vax5S7l84oQ0/OkH02s7SH5v3ET0iWyDJYskU1iYH50NTUUAAV8RuHTkqGx9 8SU59O23yTYpd92bpfLoUZKtfOJJiZPdiY0IIIBAKgROrlgpax7pLrGXLjntVbzzA1J57BjnYWtO JclAwD8FlpSvKNrTO2Fqtm2L6MMqEgL+IEAPM3+4SrQRgQAV0IBYheHDRFeV2v7aGxKWL5+UeaqP tfT63qlTA/SsOS0EEEgvAe2tscf0WF3atFmywTLt4Vpt/Bty8+xZBMvS62JwXAQQsATy3FJXarzz tgQFBzuJ7Js9R7a//oZTPhkIBIoAQzID5Upm3PMgYJZxrz1njoBPCBRocqfkbdhQDn75pbUMe4lu XSWiZEnZ9e4kuXT0qE+0kUYggIDvC5xatUqWt7lLto57wQrCu2qx/sF6g/k3RodfFmnfjl4drpDI QwABtwvovU7VV152+W/Orknvy54PP3J7nRwQAZ8QYEimT1wGGnH9AgTMrt+OPRFAwE0CFUcMt24i N48eK5lMF+3yZkGAmPPnZe/0mW6qgcMggECgClw+flw2Dhosf97fWXQFOrukK/HWm/+1VHx+hIRk z25XjHwEEEAgXQR0dfCKple9q7T1pZflwGefudpEHgL+LUDAzL+vH60XBg/zJUAAAa8LZCtXToo/ 2EX+nTFTNj0/So799JPVpouHDnm9bTQAAQR8U0CHX+77ZJZsf3OCxJw5Y9vIsLx5pfzQIVL0ng4u e3fY7sgGBBBAwM0CN3R/RKJPn5ad70xMfGQzCfo/w56TkBw5pWDzZom38QkBPxYIyuTcPycuNtaP z4imZzQBJv3PaFec80XARwWiIyPlt9vuiB9KpUOnbp47W7RXCAkBBBBIKBC5dp1sHjlSzvyzKWF2 ovf6b0ixB+6XcoMGSmjOnIm28QEBBBDwpsCm50daAf+kbdC5XWtN/VDy1q+fdBOfEfBLgR+rVjOr VEclanuTvzdKcER4ojw+IOCrAgTMfPXK0C4EMqDAxYMH5cDnX8i5nTut+YXyN2qUARU4ZQQQsBO4 fPKkbHvlNfPvxOfJLkufs2YNqTxmtOSoWtXuUOQjgAACXhPQHjYbBwxyuThJSNasUmfWx5KzenWv tY+KEXCXwI9Vq5uA2YVEh2vy9wYTMItIlMcHBHxVgICZr14Z2oUAAggggAACloD+cbl/zlzZ/sZ4 0d6odik0dy4zB+LTUvTeTuJqGIjdfuQjgAACnhaIi4mRtT2elOO//OJUdWju3FJ33lzJWraM0zYy EPAngZ+q14wfPeJo950b1ktItmyOj7wi4NMCzoOKfbq5NA4BBBBAAAEEMpLA6Q0bZMXd98imEc/b Bss0OFbs/vvk1h9/tF4JlmWkbwjnioB/CgSZRY5qvvuO5K5Tx+kEok+dktUPd5WoAwectpGBgF8J MOm/X10uGussQMDM2YQcBBBAAAEEEPCygPYk2/TcCFnZoaOc2bjRtjU67LLu559JlRdfEO1hRkIA AQT8RSA4PFxqfThFsleq5NTki4cPy5qHu8nlEyectpGBgN8IEDDzm0tFQ10LEDBz7UIuAggggAAC CHhBwBp++eln8vudTWXf7Dlit5qWTuRfycxTdstXX4jOWUZCAAEE/FEgJEcOqT19qkTccINT88/v 3i1ruj0iMWfPOm0jAwF/EHDV49vu97o/nA9tzHgCBMwy3jXnjBFAAAEEEPBJAV318s9O98o/zzwr OiTJZTJPq4t27CgNf1wiJR7sIroaJgkBBBDwZ4HM+fNLnZkzJHPBgk6nof8urn28h1y5eNFpGxkI +LxAkIsWxrnIIwsBHxUgYOajF4ZmIYAAAgggkFEEYs6ckc0jR8mK9ndL5Lr1tqetw5bqfjpXqr76 soTlzWtbjg0IIICAvwmEFy9mgmbTJTSX89DyU3+ukr/69BVdKICEgH8JOEfM4oSImX9dw4zdWgJm Gfv6c/YIIIAAAgh4TyAuTg5+8aX83qSZ/PvxJxJ35YrLtoRkzy4Vnx8h9eZ/Lblq13ZZhkwEEEDA 3wWylSsntad+JMEREU6ncuznn+XvIUNth6k77UAGAj4g4GpIppiVr0kI+IsAATN/uVK0EwEEEEAA gQASOLtli/x53wOy8ekhcvn4cddnZoZfFmnfzhp+eUO3rgy/dK1ELgIIBJCAzsl44/vvSaawMKez Ovj1N7Jl7DinfDIQ8FkBJv332UtDw1ImQMAsZU6UQgABBBBAAAE3CMScOydbxr0gf7RtJ6dWr7Y9 Yrby5eWm2bOk2vg3ROf3ISGAAAIZRSBvw4ZS/c3xLh8S/Dtjpux86+2MQsF5+rlAkIuAWZzpXU5C wF8ECJj5y5WinQgggAACCPizgLlBPjR/viw1wy/3Tp1mP/wya1apMOxZqb9gvuSpe7M/nzFtRwAB BK5boGDLFlJ53FgRFwGHHSZgpoEzEgI+L5DJeQ4ziSVg5vPXjQbGC4TEv+MNAggggAACCCCQDgLn tu8wk/qPlJMrViZ79EJtWptg2TDJUsh5pbhkd2QjAgggEIACxe67V6IjI2XbK686nZ0OzQzNlVMK t2vntI0MBHxHwDlgRg8z37k6tOTaAgTMrm1ECQQQQAABBBC4DoErFy7IzrffkT3aoyyZ1d2ylikj lUaPlLz1619HLeyCAAIIBK5AqSd6WEGz3ZOnJDrJODNx+sanh4ouipK/ceNE2/iAgK8IuBqSKayS 6SuXh3akQIAhmSlAoggCCPiWQOTadbKqcxdZ0eEe0QlwY6OjfauBtAYBBOTwd99bwy93T/nANlgW HBEu5YcMlvrfLSBYxncGAQQQsBEoP+Rp0d5mSZM+iFjfp6+cWrUq6SY+I+AbAplchBtYJdM3rg2t SJEAPcxSxEQhBBDwFYGYM2dk3ZM941fV27h+kETt3y9l+vT2lSbSDgQytMD5Xbtk86gxcmLp0mQd CrZoIRWfM8MvixRJthwbEUAAgQwvYOYx0/nMok+fkSOLFiXiiL14UdY+1sNaJCVHlcqJtvEBAW8L uOphxpBMb18V6k+NgIuQb2p2pywCCCDgWQFdVe/y8eMSli+fVHnxBYm44QbZY3qwXDp2zLMNoTYE EEgkcCUqSra/9rosb9k62WBZRMmSUnvaVKn53kSCZYkE+YAAAgjYCwQFB0v1CeMlb4MGToVizp6V NY90lwt79jhtIwMBrwq4WLRCWCXTq5eEylMnQMAsdV6URgABLwtkK1/eWmY9q/mjW4cnVBg+TGLO nTN/qL/h5ZZRPQIZV+DI4iWyrFkL2TXpfdsh0pmyZJGyAwdIg0XfSb7bb8u4WJw5AgggcJ0CmcLC 5MbJkyRnzRpOR9CHiasf6ioXDx922kYGAl4TYJVMr9FTsXsECJi5x5GjIICAhwTCixWT4p0fEO1p dmjBQinQ5E7J27ChHPzySzmzcaOHWkE1CCCgAhf27pU13R+V9T17SdSBA7Yo+v9pw8WLrKHT+gcf CQEEEEDg+gSCIyKk9kcfSbZy5ZwOoP8Or+naTaJPRTptIwMBbwgEiYtVMpn03xuXgjqvU4CA2XXC sRsCCHhPoGz//mYp9Vyy7eVXRIeBVRwxXMR0+d48eqxZeCfOew2jZgQyiMAVM2fOjglvybIWreT4 L7/annV4ieJS68MpcuOUyRJevJhtOTYggAACCKRcIDR3Lqk9Y7roQ8Sk6dz2HdaDjJjz55Nu4jMC nhdgSKbnzanRrQIEzNzKycEQQMATAnqjWLZ/P7l46JDoCnz6lLX4g10kcu1aOfTtt55oAnUgkGEF jv38swmUtZSdb78jsZcuuXTIlDmzlOn7lBl++b3kb9zYZRkyEUAAAQSuXyBLoYJS5+MZ1pyuSY9y +q+/ZP0TPSX28uWkm/iMgGcFCJh51pva3C5AwMztpBwQAQQ8IVC8S2fR+cx0wv+LBw9K2X59RQNp 215+Va5ciPJEE6gDgQwlELVvv6zr8YS1GlvUv/tszz3fHbdb85RpUDvYzFtGQgABBBBIHwFd+KjO 9GkSkiOHUwUnli+XDf0GSNyVK07byEDAUwJBmZzDDXGxsZ6qnnoQSLOA8zc4zYfkAAgggED6C+hq UToUU4dkbjVDM3WIZtkBA6zJbndPnpz+DaAGBDKIgPZQ2DnxXVnavIUc/fEn27MOL1pUak56T2pP /chavda2IBsQQAABBNwmkL1yJWvoe3B4uNMxjyxeLP8Me47pKpxkyPCYAD3MPEZNRekjQMAsfVw5 KgIIeEBAl1Yv0KypHF74nZxatUqKP3C/ZKtQQXZ/8KFE7d/vgRZQBQKBLXD8t9+tecp2jH9TYs28 Za5SptBQKd3zSWmwZJEUbN7MVRHyEEAAAQTSUSB3nTpS4913JCgkxKmWA599Zj1YdNpABgKeEHCe 898EcD1RMXUg4B4BAmbuceQoCCDgJYEKw54V/YN9yxgz4b95ilXp+eesP+x1QQASAghcn4AOc17f q4+s6faIXNizx/YgukJt/e8XSrmnB4ur3g22O7IBAQQQQMCtAvnvuEOqvf6quBoCt8c8SNz9/vtu rY+DIZASgaAg53BDXBxDMlNiRxnfEHD+BvtGu2gFAgggkCKBiBIl5Ibu3eXMP5vkwKefSZ569Uwv l+Zy+Lvv5eTKP1N0DAohgMBVgdjoaOuPqqXNmsuRRYtsWbIUKiQ1Jr4jdWZOl6ylS9uWYwMCCCCA gOcECt91l1Qc+bzLCre99obsnzPX5TYyEUg3AYZkphstB/aMAAEzzzhTCwIIpKNA6d49JXOBArL9 jfESc/asWL3OzCp92uuMyW7TEZ5DB5SAThC9vFUb2fbq67YLZ+hwn1I9HpeGPy6RQq1aBtT5czII IIBAIAiUeOhBM6drf+dTiYuTTc+PtB4oOm8kB4F0EnARMIsz30USAv4iQMDMX64U7UQAAVuBkKxZ pbwZEnb5xAnZ+fY7El68mJR8tLuc3bxZ9s/71HY/NiCAgJiFMo7IX337yeoHH5bzO3fakuS5pa7U X7hAyj8zVIIjImzLsQEBBBBAwLsCZZ7qIzc80s2pEfoQceOAgXL896VO28hAID0EXA0RFlbJTA9q jplOAgTM0gmWwyKAgGcFCt/dXnLWqCF7Z8yU87t2SeleptdZwQKy480J1kqanm0NtSHg+wJxMTGy 58OPZFnTZnJ4wULbBmvvzeoTxstNsz6RbOXK2pZjAwIIIICA7whUfG64FOlwt1ODdOj9+p49JXLt OqdtZCDgdgEm/Xc7KQf0rAABM896UxsCCKSTgD7Bqvj8CGsI5pZxL8qx//1i1aS9zs7v2p1OtXJY BPxTQOf3W97mLtn64ksSc/68y5MICg428wM+Yg2/1HlxdFENEgIIIICAnwiYf7OrvvKyFGhyp1OD r1yIkrWPPS7ntm1z2kYGAu4UCHJx78CQTHcKc6z0FiBglt7CHB8BBDwmkOvGmlK4TRs5/ssv8tdT feXSkaOik5NnLVPaY22gIgR8WeDSsWOyceAgWdW5S7J/KOWuU0fqffuNaA+FkGzZfPmUaBsCCCCA gI2APvio8c7bkrvuzU4loiMjZXXXbhL17z6nbWQg4DYBF6tkCqtkuo2XA6W/AAGz9DemBgQQ8KBA 5XFjrMluQ3PmlIiSJaXGuxMlOEsWD7aAqhDwPQGdt2bv9BmytEkzOfj1NyI2E+6G5csn1V57VW6e N0eyV6zoeydCixBAAAEEUiWQySyCVOuDKZKjahWn/fTB4uqHu4o+TCEhkC4CLnqY2d2DpEv9HBSB NAoEmS6RLFORRkR2RwAB3xPQAIE+Wb1WOr9jp2QpUphJzK8FxXa/FYhcs8asjDbKWgTD7iT0/5Xi nR+QcoMGSkiOHHbFyEcAAQQQ8FOByydPyp/33m/N85r0FPQByU1zZok+bCQh4E6BFe07yOkNGxId 8pavv5Sc1asnyuMDAr4qQA8zX70ytAsBBNIkcK1gWfTp07Jl7DhZ1qq1XDp6NE11sTMCviig8/f9 PeQZWWn+QNIVY+2SDmW+5asvpdLoUQTL7JDIRwABBPxcICxPHqkzc7pkKVzY6UzObtkiax99nEWS nGTISLNAJhfzn8bSXyfNrhzAYwL0MPMYNRUhgIAvCGjPs/1z58n28W9K9KlTVpPqffOV5KhWzRea RxsQSLOAfsf3zZkrO94YLxoYtkuhuXNL+aFDpGjHe8Tlsu92O5KPAAIIIOC3Aud37rQepDjugRKe SL7bb5Mbp0yWTKGhCbN5j0CKBHRBoYuHDl2d9sEMYouLjTUP7oY67Vvkng6Sq2aNqyMzTRl9U7RT R0Z7OEmR4QsCBMx84SrQBgQQ8IjAyRUrrV5lSXvb1Pl4huRt0MAjbaASBNJT4PT6v8zwy5Fy5u+/ bavR4Fix+++TcoMHSWiuXLbl2IAAAgggEJgCZzZuNIu/POhyleRCbdtI9TfH8yAlMC99up7VoW+/ lQ39BqS6jtw33WTNnZrqHdkBAQ8IMCTTA8hUgQAC3hWI2r9f1vfuY60MmDRYpi2LOXvWuw2kdgTS KBB9KlL+GTZcVnbslGywTHtS1v3yc6k8bizBsjSaszsCCCDgrwL6u8DqSWYWBEiaDn+7QDaPHJ00 m88IXFOgUOvWkq1cuWuWS1qgTN8+SbP4jIDPCBAw85lLQUMQQMDdAlcuRMkOM/RyadPmcuT7RbaH jz5DwMwWhw0+LaDDHXSI8e9Nmliv+tlV0p5klceOMXOVfcFEu66AyEMAAQQymECeerdIjbcmuFwg ad+sWbLdDOsnIZAaAe3BXqZf39TsIrlq1WKUR6rEKOxpAQJmnhanPgQQSH8BMxfCoW++kd/vbCI7 J74rsZcuJVsnPcyS5WGjjwrosEvtUaY9y7SHmctklnMv2qmTNPxxiRTv0pkhNi6RyEQAAQQypkCB Zk2lyksvipjfFUnTrnffkz1TpyXN5jMCyQoUbNFcslWokGyZhBvL9H0q4UfeI+BzAiE+1yIahAAC CKRBQJeu3jJmrESuXZfio8ScOZPishREwNsCOpG/Pvnfbyb21wn+7VL2ypWk8pgx5untjXZFyEcA AQQQyOACuvCL/l7Z+oIJnCVJmheaI4e1OEySTXxEwKWA9jIr27+vrO/Z2+X2hJk5zcT/+W67NWEW 7xHwOQECZj53SWgQAgikReDyiRMSdeBgqg5BD7NUcVHYWwKm5+SBL76Uba+8Kvo9t0sh5o+bcgP6 S/EHu7gcamO3H/kIIIAAAhlToOSj3SU6MlK0V1miZH7v/PPsMCtopr3RSAikRKBgs2aiD+3Obtqc bPEyTzF3WbJAbPQJAYZk+sRloBEIIOAugfyNGknDJYuk2L2dXA4xcFVPND3MXLGQ50MCuljFynvv t5Zntw2WmSE1Re5uL7ea4Zcluj5MsMyHrh9NQQABBHxdoNyggdbQ/aTt1J7Mf/XrLyf/WJF0E58R cC1g7kfK9uvnetv/5+rCE/nvuCPZMmxEwBcECJj5wlWgDQgg4FaBkOzZpcrLL0nt6dMkvGjRax6b HmbXJKKAlwT0u7ll7Dj54672ErlmjW0rdL6Qm+fOlmpvvC5h+fLZlmMDAggggAACdgKVRo+SQm3b OG3WuWDX9XhCzmzc6LSNDARcCRRocqfkqFrV1SYrz+pd5mLuPNsd2ICAlwQImHkJnmoRQCD9BfLd 2lDqL/rOPDHtkmxvM3qYpf+1oIZUCphhMAe//kaWNmkme6dNt52rLCRbNqnw3HCpv2C+5L7pplRW QnEEEEAAAQT+E9D5p6q9/prku/22/zL//13M+fOyult3Ob9zp9M2MhBwEtBeZgNc9zLLUaWyFLiz sdMuZCDgiwIEzHzxqtAmBBBwm0BI1qxSeexouWnWJxJRooTL48acOesyn0wEvCFwbvt2+bNzF9k4 cJBcOnbMtgmF27aVhj8skZLdH2H4pa0SGxBAAAEEUiOQKTRUar73rlkwppbTbtGnTsnqh7vJxYOp myvW6UBkZAgBnSYlZ40aTudauo+Zu4zeZU4uZPimAAEz37wutAoBBNwskOeWulL/u4VywyPdRJ+g JkwMyUyowXtvCejT+60vviTLW7eVUyv/tG1G1rJlTAD4Y6n+1puSuWAB23JsQAABBBBA4HoEgsPD pdZHH0j2ihWddr946JAVNLt88qTTNjIQSCpQtn/iXmb6nSrIAhJJmfjswwKJ/2r04YbSNAQQQCCt AsER4VJxxHNy87w5krVUqfjDMSQznoI3XhI4vGChNfxyz4cfSVxMjMtWBEdESPmhQ6SBCfzmqVfP ZRkyEUAAAQQQcIdAaM6cZi7YqS5755/ftUvWdHtEYs6dc0dVHCOABXR4b65aN8afIXOXxVPwxk8E CJj5yYWimQgg4D6BXLVrS72F30qpHo9bQ9mumBu+uNhY91XAkRBIoYDOBbP6wYflr7795NKRI7Z7 FWzZwgy/XCylnughQSEhtuXYgAACCCCAgLsEMhcoIHVmznDZm/nM3//I2sd7iC4IQEIgOQFHL7Ns 5cpJgebNkivKNgR8TiAoziSfaxUNQsAPBN6b97FM+vQTP2gpTUxOoMT5i3Lvv8dkYvmicjGYZwjJ Wfn6tl73PSQ9733Q15tpte/KhSjZOfFd2fvRRxIbHW3bZu0JWXHUSNEFLEgIIIAAAgh4Q+Ds1q2y 6oEuEh0Z6VS9roZYc9J76TaXJvfbTuR+mdF7+wFZli+nrM+dzS/bT6P/E9B7bb3nziiJgFlGudKc p9sFqt3T3O3H5IDeEQgxzw30ycEVJiD1zgVwY60bv1jsxqOlz6GOLF4sW8a+kOykyTp/TOlePaXk 449JprCw9GkIR0UAAQQQQCCFApFr15m5yx4WfeCTNBXpcLdUe+3VdJnInfvtpNr++blw1GU5HB5m 3W/75xnQ6oQC/nC/nbC9aXnPuI606LEvAkbgmykzcUAAAS8LtOvxsJdbcO3qL+zZI5tHj5Hjv/6W bOECTZtYc+2FFyuWbDk2IoAAAggg4CkBnYeq5qRJsu6xx516Rh/88ivROc90ntj0Stxvp5csx0Ug 5QL+cL+d8rNJWUnGH6XMiVIIIIAAAghcl8CVixdlx5sTZFmLVskGyyJKlLBWJbtx8vtCsOy6qNkJ AQQQQCAdBXR6gGrj33A5/HLvtOmy852J6Vg7h0YAAQQ8L0APM8+bUyMCCCCAQAYROPrjT2b45ViJ 2rff9owzZc4spZ98QkqZH31PQgABBBBAwFcFCrVuJTFnzsg/z40QSTIVtj4cCs2VS0o85B/zifqq Me1CAAHfESBg5jvXgpYggAACCASIQNS/+2TzmLFy7Oefkz2j/I0aScWRI0R7l5EQQAABBBDwB4Fi D9wv0acjZdurrzs1d4uZeiA0Zw4pfNddTtvIQAABBPxNgICZv10x2osAAggg4LMCsZcuye7JU2TX +5Ml1gzFtEs65FLnetH5ykgIIIAAAgj4m0CpJ5+Uy6ciZc8HHyZqelxsrGwcPERCcuSQ/HfckWgb HxBAAAF/E2AOM3+7YrQXAQQQQMAnBY7/8qs1T9mOCW/ZBst0xcvSvXtJg8XfEyzzyatIoxBAAAEE UipQ4ZmhUrRTJ6ficTEx8lfvp+TU6tVO28hAAAEE/EmAgJk/XS3aigACCCDgcwJRBw7I+p69ZE33 R+XC3r227ctrJkuu//1CKTdooASHh9uWYwMCCCCAAAJ+IRAUJFVeHCcFmzd3au6VqChZ+1gPObt5 s9M2MhBAAAF/ESBg5i9XinYigAACCPiUQGx0tOya9L4sa95CjixeYtu2LIULS813J0qdGdMla6lS tuXYgAACCCCAgL8JBAUHS/W33pS89es7NV0XB1jd9ZFkHyY57UQGAggg4EMCBMx86GLQFAQQQAAB /xA4sXSpLG/ZWra/9rpcuRDlstGZQkOl1BM9pOEPi6VgyxYuy5CJAAIIIICAvwvodAM1J0+SnDVq OJ3K5ePHZfXDXeXi4SNO28hAAAEEfF2AgJmvXyHahwACCCDgMwIXDx+Wv57qa27+u8n5Xbts25Wn Xj2pv3CBlB86RIIjImzLsQEBBBBAAIFAEAjJmlVqT/1IspUr63Q6Ufv2y5qu3STaLBJAQgABBPxJ gICZP10t2ooAAggg4BUBncBYVwJb2qSZHF74nW0bMhcsYIamTJCbZn0sWcuWsS3HBgQQQAABBAJN IDR3Lqltph8IL1rU6dTObd8uax591PTKvuC0jQwEEEDAVwUImPnqlaFdCCCAAAI+IXByxUpZ3rqt bH3pZdsbfZ3DpeSj3aXhjz9I4bZtfKLdNAIBBBBAAAFPC2QpVEhqz5wuYXnzOlV9ev1fsu7JXhJ7 +bLTNjIQQAABXxQgYOaLV4U2IYAAAgh4XeDS0aOyof9AWdXlQdEn43Yp9803Sb0F86XC8GGiQ1JI CCCAAAIIZGQBXeCm9vRpEpI9uxODzgG6YcBAibtyxWlbzPnzcmr1aqd8MhBAAAFvCRAw85Y89SKA AAII+KSA3sTvnTrNGn55aP58kbg4l+0My5dPqr3xutw8Z7Zkr1DBZRkyEUAAAQQQyIgCOapUllof TJFMWbI4nf6R7xfJpudGJPr9evnkSVnV+UHZPXmKU3kyEEAAAW8JhHirYupFAAEEEEDA1wT0yfbm 50fJ2S1bbJumwy+LP9hFyg0c4PLpue2ObEAAAQQQQCADCWgP7JoT37aGYepcoAnT/nmfSmiuXNbi OBcPHbq6mM7OnWahnHCJvXRJMmXOnLA47xFAAAGvCBAw8wo7lSKAAAII+JLA5RMnZOvLr8jBL79K 9MQ7aRtz1aollceMluyVKyXdxGcEEEAAAQQQSCKQv3FjqfrqK/L34KclLjY20VbtTXb55Ck5sWyZ XDx40Np25UKU6Nyh+W6/LVFZPiCAAALeECBg5g116kQAAQQQ8AkBHX65b/Yc2f7GeIk5c8a2TWF5 8pin4E9L0Y4dRYKCbMuxAQEEEEAAAQQSCxRp305iTp+WzaPHJN5gPh347DOnvGO//ELAzEmFDAQQ 8IYAc5h5Q506EUAAAQS8LhC5br2suLuDbB45yjZYFpQpkxTv0tmsfrlEinbqRLDM61eNBiCAAAII +KNAia4PS9l+fVPU9OP/+yVF5SiEAAIIpLcAPczSW5jjI4AAAgj4lMDlU6dk+6uvmafanzsND0nY 0Jw1apjhl6MkR7VqCbN5jwACCCCAAALXIVDGBMwuR0bKvzNmJrv3hX//lfNmPrOsZcokW46NCCCA QHoLEDBLb2GOj0AqBFYsXSbR0dFSpFgxKVOubCr2pCgCCFxLQOdO2T93nhl++YZEn4q0LR6a20xC PHiwFL3vXtEeZiQEEEAAAQQQcI9AjipVUnSgY7/86paA2R+/L5WYJAsOOBoQZhYWyGUWHtB77pDQ UEf2db2eP3dO1q5aLaHmOLc0bJDqY2zauFFOHD9h2lLO/B1QNNX7u2sHO6+wsDDJaaxKlS0jmVmQ wV3cHMcPBAiY+cFFookZQ2D7lq3Spf091smWrVBeFi/7LWOcOGeJgAcEzpgb0U1m9cvTf/1lW5sG x4p26ijlhjwtYblz25ZjAwIIIIAAAgikXmDvtOmyZdwLKdpRh2WWfLR7isomV6hn1+5yNpk5SnXf LFmyyPMvvSD3PdQluUMlu23Prt3SrdP9EmxW0t525ECyZV1tnPDya/LT4iUy8Nmh0nvQAFdFPJJ3 LS89v4cff1SeGTkizUFGj5wQlSCQRgECZmkEZHcE3CXwmZl43JF2bN0mf/6xQm6ud4sjK9HrA23b yykzrOz1d9+RqjWqx2+zy48v4OY3nq7Pzc3ncBlAINoM/dAJ/ffPmZvs8MscVatIpdGjJdeNNTOA CqeIAAIIIICAZwV2vDlBdr4zMcWVnlq1SmLOn09x+WsV1F5fxUoUT1Ts1ImTsnH9X3L0yBEZNmCQ HD50SPoNGZyojMc/+MjCQmXLl5O8+fLFn/4ZE3Q8cuiwnDSrik97f4qsM73pPl04X4JD3B9OuK9N Ozlt7t/GT5oolZkWI/4a8MY7Au7/hnvnPKgVAb8WiDHDML+ad3WVoBvr1JZ1q9fI7GkzbANm27dt E/0lr92/Eya7/IRl3Pne0/W5s+0cK8AF4uLkwOefy7ZXXjNL1p+0PdmQHDmk3KCBUrzzAxJknpqS EEAAAQQQQMC9AieWLZO902ek6qCx5t74xNKlqdonucKP9+kldzS506lI9OVoGTZwkHw591OZN/MT rwXM3vpwsujfAxEREU5t9EbGs2YO16Recebe6v233pHXx70o69esldV/rpK69eu5vXk7t2+3/s45 e+as24/NARFIrQABs9SKUR6BdBD4eckP1hMbnUNh9Ksvy12Nm8qiBQutvDx588bXqL/U9SnYlZgr Vp6+P7j/gOQvUMBlftI5ELRL+pZNm+Xo4SNSulwZKVuuvISGuZ6zYfM//8i/u/eI+d0oBQsVlCqm J5vOX6DJrh3XU98pE8y4cP6C5DLzRkVkzSr/bNgoe3btktvvbCzZTTCDhEBqBc6a7/im50dK5Nq1 9ruaJ7hFOtwtFZ4ZKmEJ/h+z34EtCCCAAAIIIHA9AnkbNJA7Vv4hR5cskQNffCknly1Ptte3ow5P rJap98GDhz9rBcyOHD4sev9bKck8a7FmDtR/9+yRreb+Imu2bFKhciXr3tvRTlevUVFRctLMSaap aPFiTkXOnD5thoqeNfe+EZI7Tx5zL3xeLkZdtHpsRZheW4577ZCQYClYuLBcvHhR/jJBqkgzwkTn OdPpW+zS4YOHTM+59ZLZDDWtXK2qZMueXU4cO24+Z5Z8+fPb7XbN/CBz79Szf1/5bNYc2bt7t/z6 40+JAmYaUFOjQwcPWj3EKletKuUrVXQ6ruPcdIPaRJp5Zf9cvtyaT65oiRISeyXW2kd7/B3Yt1/y 5MubKkunCslAIA0CBMzSgMeuCLhL4NNPZluHamfmT6pSvZpUrFJZtvyzyfqF9ETfPvHVrFqxQh7q 0Cn+c/8ePa33Mz6fJ1073ueUr3Mo6FwD+otp/Esvy4fvThL9pe9IGqTSAF2bu9s7smTXjp0y4Ime 8vdfG+Lz9I0G7oaNHSV339tJ7NpxPfUNfaq/NWfDo72eNL8s/7C6xmt983/+wbLQ9yQEUiIQbm6w No8eI/s+mSVxV64GlV3tl71iRalknpzmrlPH1WbyEEAAAQQQQMDNAsEmeFP4rrusn4smEHLwq69N T/Av5IIJRNklnfg/qGh2Mc9u0zXp5P+OFHnylOOt9apDNgc+2dvcH+9IlN+0ZQt54c3XEw1bTFhg 1/Yd1gNwzfvmpyWJplDRvEE9+4g+MG/SorlM/mSGPNtvYKI5zLZt2WLtr/fx499/19p+4cIF3dVK Wv+ED9635l9z5On2Z/r2l4Vfz3dkSYgJvtWoXUvWrPxTSpS8Qf63emX8tut9owFDDZjt3LY9/hAr TRB0xOAhstOcd8KkD9Nbt2snQ0eNEA24aUp4bi9NGC/P9h8oV8x9243mvmzd6tXxu6u7pq9+WCR3 N21hvU+JpVWQ/yDgJgGW/3ITJIdB4HoF9GnWbz//z/ol0t4EzDR1fOB+63XuzI9ND6//bhMKFCok Wsaxkk/9226Vu81KfgVt8h2/mPqbANiUd961gmU6L5p2S9d5HPSJTr/HnxRHwE7rerzzQ1awrETJ kvJ4717SZ/BAqVHrRqu3mwa3dptlvu3akdr6rJP8//989N77VrBMe8vpvAn6VIyEQEoFap08K0M2 /WstVW8XLAsxT4UrPjdc6n37DcGylMJSDgEEEEAAATcLZDE9pkr36im3/vSD1P1snhQz97L6Ozpp unT0qBS5cClptts/z/t4lnVMDS4l7BGlK1d2bNHaCpblzpNbHn6suzRt1dIKQv3w/SKzrY1cvnzZ ZXv0AbgGljQtMMHBhEl7l/1ugoGaOtx/b8JNTu81kKT36jrq4t4HO0udW+paZbT+6ZM/SFT+yYe6 WcGy3HnzWD3Bnuz3lLWqpQbL3JW059yGdeusw5UsXdp61b9lejzY1QqWlSpTRh569BEZ/Nwwad3+ Ljl04KB88O57MmfGTKcm6Lk90+/qAgfqrsE1/TsnLPPVES0675yec7WaNdxi6dQAMhBIgQA9zFKA RBEE0lNA5y7TXxgayHJ02W5/b0d5efRY0/17r/z+8y9y252NrCZoIOkNMwHmrz//bI3t72NW0anb oL61zS5/qfmFvOjbBZLJrAA484tPpd6tDa3yQ83qNvrkZr7pGv/a2Bek5V1t5NjRY9ZwSC3w7rQP 4ifafOKp3tK2UVM5fTpSNm38x/oF6I76Eg651CDg+EnvSqt2beOfQFkN5T8IXEPgtHmS2nnvUftS 5olm4bZtpcKwZySzCciSEEAAAQQQQMAHBMzv51y1a1s/FZ8fIUfMKpEHTa+zk2ZERdz/j4iodOaC HIj4rwfY9bZ6wVffiK5I70h6763zAa9bs8bqfaX5uvpjwonuRz0zXGJiYuTWRnfIB7M+jp/GRBfn annrHeY+fY/oA18dpugq3fPAffLiiFHy/fxv5ZlRz8cXWbLwezP647IZiplbGjdrFp9v96bhHbfL e9M/soaDapnBvfuauY8/tXqoaVBMkz58X/brb9ZD9bnmwaD+zaCp/9AhMuLpIdaoFSsjhf/R4aE6 DNSRTpuhoNp7bOLr40WHfGpq0ba19ap/q5w7a4aXmvnXPv1uvjUqxdpg/pOvwHMyY8qH8ttP/5PO 3bo6suNfbzIBwPdmTLOmZnFk6t85ly+dlL5PD4r/O8ddlo46eEUgpQIEzFIqRTkE0klA5wHQ1M4E yRxJ5zK4s3kzWWzmMZttJkl1BMwc21Pz6niqpcdzBMt0f+0Npr9kNWCmK96sWrFSyiWYD2H29I+t GwAN4uncYj/9uTxF1aamvsbNmsYf89GeT1iBuPgM3iCQEgHTK/LEe5NtS2Yz83xUGj1K8vz/E1nb gmxAAAEEEEAAAa8JBIeHS5H27ayfqAMH5OCXX8lBc49a6cRR+bFQ7jS3SwNMdilnrlzS/cke0ts8 iHYk7Rnl6Jk1ZORz8cEy3a7zhzVr3cp6IK0Ppe0CZtpb6tXR42T/v/usSfJrmqGRmhZ+c3XI5F0d 70l0XGtjkv/oA++P5nwSP7pEN99iHpbr+RzYty++tOP+u3nrlvHBMt2oc7Q1McM3HX9vxO9wjTe9 H3k02RL9hj4tN950dWqLBrffJp99963kyJkzUbBMD6C9wzTtNcHFpEnP7cO5s1K00IE7LJPWz2cE UiJAwCwlSpRBIJ0ENEilE9xrOnv6jMz9+JP4mhwT7Ov8Bvokp1CRwvHbUvNm986rx99g5mBIOP9Z 0mPsMeUaNW0i+stcV77RrtP6o12rb2/S2LoxSMlKOKmpL2EbspqgHAmB6xIwwd+kKdg85Szbr6/c 8Eg3CTJDLEgIIIAAAggg4B8C4UWLSpmn+kiZPr3l1ZZ3iPNv+dSfx+1mhcySpUpaO14xc57++ccf sm3zFutznbo3y4PdH0k0wkGnIHEk7SXmmHbEkbf/33+tt3t27XZkOb1qbzW9t9bhkwu//sa6x9Y5 0pabnmCaOna+32mfpBlar2MqFsc2xyJbly/9Nxz03917rc1Va1wNUDnKpuVVA1qOpIsd6EP08mYe 2Mf79IwfhaLbCxctYv2sW71Gxgx7Trb8/Y+cMA/jddEDXcxA00UzlDNp0nNL6aqg7rBMWj+fEUiJ AH9FpESJMgikk8Bns2bHH/nlUWPi3yd8o13GNZDW3zzJuZ6kK2JqOmImWNUfu6Qr0egvrmmfzpFp Zk4EfXK1b++/1pxletOg8yRoMO1D85RLe8DZpdTUZ3cM8hFIsYD5zuYzC0YcHvdS/A11IfPUt8Lw YZLFzO1HQgABBBBAAAE/FTC/4/dkdc+ctjr/2B0maJYwbfr7b+nS7h5rsv3nBj8tE6d+GL9ZV6J3 pD9+X+p46/SqAaGEk/EnLaBBMQ2YfWd6lQ0bM0oWL/zOGuapK0jqj7vSkcNX7/Fz5U57bzxt00em 51dSL7u2XjHDVgc82St+sQFdlbP4DSWs+eBOR0bKZhNAc0fylKU72soxAkeAgFngXEvOxM8Ezp87 J99/863Vav0lrj25kiadf+wnM5/Dp2Yy0qdMN/Hg6+gpo0+DdI4FHX6p8xjYpUzBV58iaXfqfkMG Wz/65O23//1Pfvhukaw2veG059n4F1+Rsa+/YncY6+lTauqzPRAbEEihQI52baT/l7Ok9PmL8vaU GaLDMEkIIIAAAggggEByAhqwemH86/LUo4+becYWyLpVq+OHGRYtXtzaVXtZrdu5VTJndh24MzE9 px5gCevUoJP2jtLRImv/XGX1NNPtOieXO1Pe/PnN/f5e0QCVp9OHZh43XZlTe4u9OOENadGmTfxQ 0x8XLZYnzIIA7kiesnRHWzlG4AgQMAuca8mZ+JmATj6qT6R04vtnRo80v4gzO52Brg6jATNdfUZf db6EhCnhCpp2+aXLlhV9MrZy+R/xv7wcZaMvR8uUiWb1TNOLrZWZN0In7Pztp5/NBJ355YGuD1tP hnTVmsfMSka9uj1qzam2dfNmx+7xrwnbkZr6ypQrG38M3iCQFoETmUNFfwiWpUWRfRFAAAEEEMhY ArrY1OS3q1srxM+aNiM+YFa67NUH2bFm8QEdaqgT/ydMy3/73ZrjrKBZ8VNXcrRLOpyyXad7ZOqk yTLjw49kxdJlVoBN89yZipkAnwb8HCtYJjz26VPpG0RTC033PfygtO1wd8Kq4xdvSJSZwg8J/77Q XTxlmcLmUSyDCPw3MDmDnDCniYCvCHw2e47VFF2d0lWwTDdqsMoxWab+EnekbP+/9PbxY8ccWdar q3z9JW49HTO/RJMuPz31/cmmx9jLJmj2noSbyVZ18v8Jr7wmIwYPTbSSkB5cV8fRVMTMK+FIaa3P cRxeEUAAAQQQQAABBBDwhsBdHTtY1epiW445t7RXWFMzWb6msWZermNH/1uNWx8wD3iil3XPvOWf aw837PjA1bnKFpqH5TrVii7Eldz0JlalqfxPi7ZtrD2WmFEhOtTUkbRX2+hnhzs+psurnpOmv9dv SHR8XU30xedHJcpLyQdXf1849vOEpaMuXhFQAQJmfA8Q8ILAjm3bradAWnX7ezsl24JOXa4+tdKl ovfuvjqxaOEiRax9Rpvlrvs+1iN+0lJX+VVrVJduTzxulR87fITc2/ouKyB2V6Om8trYF6z8Z0c/ LzqBqE7qf0OpUqJPdDo0ayldO94nQ/v2l0Z16sqKZcslxAwJfaDbw/HtTWt98QfiDQIIIIAAAggg gAACXhBoc3d76+GyjvxYvOC7+BaMeHGc6AqaO7fvkBYNbpPBvftKn+6Pya0164g+tC5RsqQMHnHt YFSFypVE78cdKSWT/TvKpvS1eZtWVh0x0dHyQNu7rbY+fM+98kC7DqLTwKRncoyAWbVihbS89Q4Z PnCwdL7rbmnbuIk1TDS1dbv6+8JxDE9YOuriFQEVIGDG9wABLwjM//wLq1YNUt1c75ZkW9C2Q3ur B5oGsb6YM88qO2j4s5I7bx6rR5jOGeCYmNQuf/jY0fLaxLclf4ECVvfx2dNnyD8bN5qbgJwy4Jkh 0rnb1bkFIsxKlVPnzbJW9Ikyq9noHGqfz55r/bLTOdbemzHVCqo5GpzW+vQ4jhV4ghKsxOM4Pq8I IIAAAggggAACCFyvQPx9ZvzSQM5HKmgWCarboL614duvvo4voPMAf7/0F6un2bmz56wFsXSuszOn T0u9WxvKJHNf7FjlMTg42NrP7n62faeO1na9F7+9caP4OhxvHPMUO/Z3HC845OpxHeX01bFNH2Q7 ki7c9clXn0uTFs2tXnK6eJc+bK9QqZJ1r6/l9D7/WiklXkmPoXMx9zZzLeuIGZ3/eO7MT8wqpCuk 1k03yZDnn7OKBwf/11ZH+12dmxa2+/vCUe+1LB3leEXAHQJB5o/wOHcciGMgkNEEqt3T3Drlb6bM 9Mqp6xOkQ2YC0YisEVa3bscvOLt8RyO1S/mBffslV+5covMdJF2q2lFObwYOHTgoGjgrZOZnKFi4 kNOS2lrWXfU56uUVgesRaNfjas/HjV8svp7d2QcBBBBAAAEEfFDA2/fbDhKd93fXjh3WCpf6wDu1 Qyqf7tNXvpz7qfQa0M8KCDmO665X7R138vgJyRKexQribduyVQoXLSIaDJz89kR5dcw4K5g2+ZP/ pnhxV92O4+hw1t07d1kfS5t5inW6l+tNyf19kd6W19vmjLBfRrzf/i/UmxGuMOeIQAAJaKBLl2xO muzyHeX0yZb+XCvpapn6c63krvquVQ/bEUAAAQQQQAABBBDwhkBoWKjocMDrSToZ/9effm71DHOM 6rie4yS3z9wZH8sLI0Zai4kt37hOatauZRW/EhMjX336mfW+cvVqyR0izdu0B1sVN9Vh9/eFJyzT DMEBAkqAgFlAXU5OBgEEEEAAAQQQQAABBBBAwNsCOq3Jl3PnyaoVK0VX27zngfusXl/p0S5dxTM0 LEzOnjkjD3XoJLc3uVMizYJdutCAzremD8G79bg6p3F61J/ex/SkZXqfC8f3LwECZv51vWgtAggg gAACCCCAAAIIIICAjwvs37dPVi7/w2pl5apVZdTLL6Zbi8tVrCATJk+SMWZFzPVr1lo/jspKly0r r058y5q72JHnb6+etPQ3G9qbvgIEzNLXl6MjgAACCCCAAAIIIIAAAghkMIG77ukguuJjuQrl5cab 6ricC9idJC3atpbGzZvKX2vXmfmK91lDQMuYucTKVahoep+FurMqjx/L05YeP3wn7zYAAA1LSURB VEEq9FkBAmY+e2loGAIIIIAAAggggAACCCCAgD8KlC5bRvTHkynMDMu86Za61o8n603vurxhmd7n xPH9QyCTfzSTViKAAAIIIIAAAggggAACCCCAAAIIIOAZAQJmnnGmFgQQQAABBBBAAAEEEEAAAQQQ QAABPxEgYOYnF4pmIoAAAggggAACCCCAAAIIIIAAAgh4RoCAmWecqQUBBBBAAAEEEEAAAQQQQAAB BBBAwE8ECJj5yYWimQgggAACCCCAAAIIIIAAAggggAACnhEgYOYZZ2pBAAEEEEAAAQQQQAABBBBA AAEEEPATAQJmfnKhaCYCCCCAAAIIIIAAAggggAACCCCAgGcECJh5xplaEEAAAQQQQAABBBBAAAEE EEAAAQT8RICAmZ9cKJqJAAIIIIAAAggggAACCCCAAAIIIOAZAQJmnnGmFgQQQAABBBBAAAEEEEAA AQQQQAABPxEgYOYnF4pmIoAAAggggAACCCCAAAIIIIAAAgh4RoCAmWecqQUBBBBAAAEEEEAAAQQQ QAABBBBAwE8ECJj5yYWimQgggAACCCCAAAIIIIAAAggggAACnhEgYOYZZ2pBAAEEEEAAAQQQQAAB BBBAAAEEEPATgRA/aSfNRMBnBdr1eNhn20bDEEAAAQQQQAABBBDwdwHut/39CtJ+BPxTgB5m/nnd aLUPCPS890EfaAVNQAABh0Cv+x5yvOUVAQQQQAABBAJAgPvtALiInEJACWS0/yeD4kwKqCvIySCA AAIIIIAAAggggAACCCCAAAIIIJAGAXqYpQGPXRFAAAEEEEAAAQQQQAABBBBAAAEEAk+AgFngXVPO CAEEEEAAAQQQQAABBBBAAAEEEEAgDQIEzNKAx64IIIAAAggggAACCCCAAAIIIIAAAoEnQMAs8K4p Z4QAAggggAACCCCAAAIIIIAAAgggkAYBAmZpwGNXBBBAAAEEEEAAAQQQQAABBBBAAIHAEyBgFnjX lDNCAAEEEEAAAQQQQAABBBBAAAEEEEiDAAGzNOCxKwIIIIAAAggggAACCCCAAAIIIIBA4AkQMAu8 a8oZIYAAAggggAACCCCAAAIIIIAAAgikQYCAWRrw2BUBBBBAAAEEEEAAAQQQQAABBBBAIPAECJgF 3jXljBBAAAEEEEAAAQQQQAABBBBAAAEE0iBAwCwNeOyKAAIIIIAAAggggAACCCCAAAIIIBB4AgTM Au+ackYIIIAAAggggAACCCCAAAIIIIAAAmkQIGCWBjx2RQABBBBAAAEEEEAAAQQQQAABBBAIPAEC ZoF3TTkjBBBAAAEEEEAAAQQQQAABBBBAAIE0CBAwSwMeuyKAAAIIIIAAAggggAACCCCAAAIIBJ4A AbPAu6acEQIIIIAAAggggAACCCCAAAIIIIBAGgQImKUBj10RQAABBBBAAAEEEEAAAQQQQAABBAJP gIBZ4F1TzggBBBBAAAEEEEAAAQQQQAABBBBAIA0CBMzSgMeuCCCAAAIIIIAAAggggAACCCCAAAKB J0DALPCuKWeEAAIIIIAAAggggAACCCCAAAIIIJAGAQJmacBjVwQQQAABBBBAAAEEEEAAAQQQQACB wBMgYBZ415QzQgABBBBAAAEEEEAAAQQQQAABBBBIgwABszTgsSsCCCCAAAIIIIAAAggggAACCCCA QOAJEDALvGvKGSGAAAIIIIAAAggggAACCCCAAAIIpEGAgFka8NgVAQQQQAABBBBAAAEEEEAAAQQQ QCDwBAiYBd415YwQQAABBBBAAAEEEEAAAQQQQAABBNIgQMAsDXjsigACCCCAAAIIIIAAAggggAAC CCAQeAIEzALvmnJGCCCAAAIIIIAAAggggAACCCCAAAJpECBglgY8dkUAAQQQQAABBBBAAAEEEEAA AQQQCDwBAmaBd005IwQQQAABBBBAAAEEEEAAAQQQQACBNAgQMEsDHrsigAACCCCAAAIIIIAAAggg gAACCASeAAGzwLumnBECCCCAAAIIIIAAAggggAACCCCAQBoEvBIwGzVqlIwePdpqNu9x4DvAd4Dv AN8BvgN8B/gO8B3gO8B3gO8A3wG+A3wHvPUdSENMhV0DWCAoziRPn58Gy0aOHOnpaqkPAQQQQAAB BBBAAAEEEEAAAQQQQACBawp4pYeZF2J014SgAAIIIIAAAggggAACCCCAAAIIZBwB7dFGQsBOwCsB M76UdpeDfAQQQAABBBBAAAEEEEAAAQQQ8IRAUFCQJ6qhDj8V8ErAzDF/mZ+a0WwEEEAAAQQQQAAB BBBAAAEEEPBzAaaK8vMLmM7N90rAjCGZ6XxVOTwCCCCAAAIIIIAAAggggAACCCQrwOi3ZHky/Eav BMz4Umb47x0ACCCAAAIIIIAAAggggAACCHhVgCGZXuX3+cq9EjBjSKbPfy9oIAIIIIAAAggggAAC CCCAAAIBLcCQzIC+vGk+Oa8EzBiSmebrxgEQQAABBBBAAAEEEEAAAQQQQCANAox+SwNeBtjVKwEz vpQZ4JvFKSKAAAIIIIAAAggggAACCCDgwwIMyfTcxTl9+rRcuXIlUYWXLl2SixcvJsrzpQ9BprdX nKcbpEMyL1++bP0krLtRo0bSqlWrhFnXfH/kyBHJnDmz5MqV65plKYAAAggggAACCCCAAAIIIIAA Aggg4DmBw4cPy4QJE6RXr15SokQJq+IFCxbI77//br2vWbOm3HfffZIpk1f6dNlChNhuSccNGqPT n86dO0upUqXia8qSJUv8+5S+WbhwoRQvXlyaNm2a0l0ohwACCCCAAAIIIIAAAggggAACGVxAR78x Ai59vwRTp06VXbt2JepdduDAAVm6dKn06NFDNA40ZcoU2bx5s1SpUiV9G5PKo3slYKZfyGHDhkm2 bNmceoZFRUXJb7/9JqtWrZK8efNK/fr1pUaNGnL06FH59ddf5e+//5Zy5crJ7bffLidOnJDt27fL 7t27rbKFCxeWzz//XDR6WalSJauMBtMUPzQ01CqnQbqKFSumkoniCCCAAAIIIIAAAggggAACCCAQ SAIMyUz/q9muXTvJnTu3FQNy1LZt2zarp1mZMmWsrAoVKojm+VrAzCv93RyrZC5ZskRmzpxp/cye PduCWrFihWzatEkee+wxqVu3rsyaNUvOnj0r8+fPt4Zw9uvXT7Jnzy7z5s2zMEuWLGmVq1atmnz/ /feSP39+GTp0qHVBtIymyMhIOX/+vHTr1k20PAkBBBBAAAEEEEAAAQQQQAABBDK2AKtkpv/1145Q SYdaaoxH4zqOpO81z9eSVwJmjmnTtEeYDsnUH0cga8OGDVKrVi0pVKiQ9aoBsLVr18qOHTusHmN5 8uSRxo0bi85ddvLkSavnmM5hFhMTY0UkdcK4n3/+Wc6dO2eV0XKaGjRoIKVLl7a6+/naRaA9CCCA AAIIIIAAAggggAACCCDgWQGGY3rW299q8+qQTO0VpsMrEyZdDECHTzqSvteVE2JjY+PzQ0JCRLtO RkdHO4pZATMtowG2fPnyWfkahAsLC4svwxsEEEAAAQQQQAABBBBAAAEEEEBABRiS6Z3vgfYo27dv X3zlZ86cSdTjLH6Dl994pYeZY0imq3OvXr26rF+/Xi5cuCB79uyRgwcPSp06daweaDpcU3uSrVy5 0pr7rFixYhIcHCw675mC6/hXDa7Vrl3bmtNMe5rpdhICCCCAAAIIIIAAAggggAACCCCQUIAhmQk1 PPe+fPnyVsBMRxLqAgA6f5nm+VrySg8zHZKpkVxX0dxbbrnFmsz/hRdekIiICGnVqpXoMMyWLVvK 4sWLZfjw4VK0aFFp3769Zam9yHSlTF1ZQcvqvGjarVJ7pjVq1Ehy5Mjhsh5fuxC0BwEEEEAAAQQQ QAABBBBAAAEEPCegsQP9IaW/QMIYkMZ0GjZsKB988IE1mlCn5dKFG30tBZngVZyvNUrbo3OR6dxk SYNq2pssPDw8UZO1V5kO03T0JtMyGkBLum+infiAAAIIIIAAAggggAACCCCAAAIZVkBHv9HLzHuX X6fk0qm1NH7ji8krATO+lL74VaBNCCCAAAIIIIAAAggggAACCCCAAAIq4JU5zHy0UxvfCAQQQAAB BBBAAAEEEEAAAQQQyCACDMfMIBf6Ok/TKwEz/VJqLzPHl5P3o6zLhwMOfAf4DvAd4DvAd4DvAN8B vgN8B/gOBMJ3QM9Bk77yHgdf/Q4wjZP1vyn/sRHwypBMm7aQjQACCCCAAAIIIIAAAggggAACCCCA gNcFvNLDzOtnTQMQQAABBBBAAAEEEEAAAQQQQAABBBCwESBgZgNDNgIIIIAAAggggAACCCCAAAII IIBAxhQgYJYxrztnjQACCCCAAAIIIIAAAggggAACCCBgI0DAzAaGbAQQQAABBBBAAAEEEEAAAQQQ QACBjClAwCxjXnfOGgEEEEAAAQQQQAABBBBAAAEEEEDARoCAmQ0M2QgggAACCCCAAAIIIIAAAggg gAACGVOAgFnGvO6cNQIIIIAAAggggAACCCCAAAIIIICAjcD/AfSrSNgZW/lmAAAAAElFTkSuQmCC --Apple-Mail=_AEBCD08F-8D9F-4A83-B664-586F8E8732B4-- --Apple-Mail=_002D4070-A15C-414F-BB6C-73E7D7FA0A3D--