From nobody Thu Oct 1 11:05:58 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1757F3A11F1 for ; Thu, 1 Oct 2020 11:05:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=LOo+BmVt; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=o0CLwa1S Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pSq827U5_Jm4 for ; Thu, 1 Oct 2020 11:05:55 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA4163A11ED for ; Thu, 1 Oct 2020 11:05:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4237; q=dns/txt; s=iport; t=1601575554; x=1602785154; h=from:to:subject:date:message-id:mime-version; bh=gvJqXc5/bdW03X98ly0JZiHY8WRdzawrEmk1cOSSwZo=; b=LOo+BmVtpv0j6jH8TpBzUb9q00212jQK8U0xSqB4kiiloytPaDE6pH2H Rj/NGN5YnUta2FY5Nva32xrBgJE2ugtzLwYfw3Ei+94tDajB6WUp6KYw7 zl8fTbpsSPuUt+UTlXj5gzi8us33/ETifDL5KQ9khu0JkGDrHJF/tN+kH E=; IronPort-PHdr: =?us-ascii?q?9a23=3ARmRE8R/l2En1Mf9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+7ZRaN5PhxghnOR4qIo/5Hiu+DtafmVCRA5Juaq3kNfdRKUA?= =?us-ascii?q?NNksQZmQEsQavnQU32JfLndWo2ScJFUlI2/nynPw5SAsmtL1HXq2e5uDgVHB?= =?us-ascii?q?i3PAFpJ+PzT4jVicn/1+2795DJJQtSgz/oarJpJxLwpgLU5cQ=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BiFgDjGXZf/4QNJK1fHAEBATwBAQQ?= =?us-ascii?q?EAQECAQEHAQGBZAKBIS9RB3BZLywKhDODRgOiCoRugS6BJQNVCwEBAQ0BASM?= =?us-ascii?q?KAgQBAYRKGYIeAiU0CQ4CAwEBCwEBBQEBAQIBBgRthVwBC4YLER0BATgRAQw?= =?us-ascii?q?+AgQwJwQ1gwQBgX5NAy4BDqA4AoE5iGF2gTKDAQEBBYEzAYEXgksYghADBoE?= =?us-ascii?q?4AYJxg2mGUxuCAIERJxyHdYJqM4Itkz2HAZ0SCoJniH2RYQMfgw6KAZQMkgw?= =?us-ascii?q?MeopulSMCBAIEBQIOAQEFgVQ6gVdwFWUBgj5QFwINkhCKVnQ3AgYBCQEBAwl?= =?us-ascii?q?8jEcBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.77,324,1596499200"; d="scan'208,217";a="569129238" Received: from alln-core-10.cisco.com ([173.36.13.132]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 01 Oct 2020 18:05:53 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 091I5r66013371 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 1 Oct 2020 18:05:53 GMT Received: from xhs-rtp-003.cisco.com (64.101.210.230) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 1 Oct 2020 13:05:53 -0500 Received: from xhs-aln-001.cisco.com (173.37.135.118) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 1 Oct 2020 14:05:53 -0400 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 1 Oct 2020 13:05:52 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iSA9Ttz4KETAnoiXPl/Ry6H3rWadIsR2eaIkSLqtwr9hpFquVIXh3nuzwBr2j9em6q9j9qkRlZVPtjKRInGx+bqTEZ3tn2QqdvcXa63RSqgA0yUdwBoGdv01Q6ACpWbxyrdWgA1mjLrwRSYqRu+L6qpLlHSoz4s/e2vMePJ5pIYsxiSg6neWw9Poezskaz38QAbMEadjkg+JtahfNrfMs/ot/qIbp4+5Pr73VQI1TyKnbPbufqIdoWETUabvc2Vm+MojfDsNyzmB2Z0mEnpDsaP8uyi+kUsDNnIIDHc76mv4rJuLtTFKsfUrgV666e5F5v+f4GaxzSB7uSdJLmOpYQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gvJqXc5/bdW03X98ly0JZiHY8WRdzawrEmk1cOSSwZo=; b=GvJTzhcP6/BX8RS4sR5jAtmq7bDRzp8Mk45qCgU8E1t00TfSZyo0mS17zvVA1hAHmp1taEdK0wIYdBkYufMefv3kgPWFE4g49GwWW7c+CbzrNLxqF/5WeRUIKK/L2kJYME8VDkWQV1Vxjoeu4Gwp2/xpWSqxX77hTWxPC/7V7AJPg7ArRMDCI/4n1DZqhe+4DS8slwDV+ON7S7+oG306Lrik6K0IFR4CbKagGIh/eTZWi+fnegUB95lFLspKBgPn3XX4oC6HmgeQvxCeK5P8eU0/repI9j4qaRbbj2NNfJmb2joFRCvjRA8+nqncoYEGWajfAuESd8m9SN4TJVwfgA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gvJqXc5/bdW03X98ly0JZiHY8WRdzawrEmk1cOSSwZo=; b=o0CLwa1SCqYormGnRURl1Gu1MzJVp0uzW4cctHS0iP8Z14YpLq8iOYD7SBXKA+IwSgcnxgntsex6aIwHsPemsGJC0iPfJDKXaV2XcaiPq8wNhq4adGDNW2gf1XqMHz+ud7JdIGA7+/yMELzRp/7C8tMAmZkHd6ZBdM3L3QDE0Lw= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BY5PR11MB4193.namprd11.prod.outlook.com (2603:10b6:a03:1c8::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3412.25; Thu, 1 Oct 2020 18:05:52 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3433.032; Thu, 1 Oct 2020 18:05:52 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: RATS Virtual Interim doodle poll Thread-Index: AQHWmB1/CQRYa+U69UqFebdmagH6PA== Date: Thu, 1 Oct 2020 18:05:51 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1a.200914 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 39e927de-8b23-49ac-7335-08d86634a25e x-ms-traffictypediagnostic: BY5PR11MB4193: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: al+C27CV9bEkHldLMzbjwVUyVR1koVVkPgFhqKxBbb5DcORJrgFv7TFPhSFbr2tAYzQ2YwXzQDcBTkN+HyGxZtXdgU8B4TS9Tm8uWtN48Otpukrkbt1cTprzeHIm61oDm9mONQ9a33fkGsitAkvsimPQ62iDYWdqfu2YoPdnpoaCMFbK39vGWU4LIJXunIEE9mAIBtVNSIdXKCuI2m5iEEyPtZ5DdWWUh9NNvPKyiB+3cNZv25SFcHSrfCxpoQ6Pfth6P1rbWBVUn8V18kpyZqCQKtIgPI7+bGXk6WtVDA47IISG7ftOcYugQyGdomyLL/u5+vgYMm0rahTruFem6/8Gup/l15EKrCN84OnpWRFVXTqI8aA+MT/yHYZlgkZGi2xdUVH+LihBO6w1KypQC2ZCK2hkGdffdBzUfGGp0NkOaJ65RqUs3AYxCOgBYTu4kRQDx9IIUqkw2U+gkX9a+Q== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(396003)(366004)(346002)(136003)(376002)(39860400002)(66946007)(5660300002)(66446008)(64756008)(66476007)(66556008)(76116006)(166002)(6512007)(4744005)(2906002)(71200400001)(36756003)(33656002)(966005)(316002)(86362001)(6506007)(2616005)(478600001)(8676002)(26005)(186003)(8936002)(6916009)(6486002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_D82D84F47CC04B7BA357AF6E77CF6684ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 39e927de-8b23-49ac-7335-08d86634a25e X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Oct 2020 18:05:52.0077 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: YC1woUWKH0zr6XiQUrjCIjLbf3zJ+1oRSNFSs2gaBYUvELuQiqk6n4fSadVrGPNhKHpX84V1ZLBw18IiWqb+Ow== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4193 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: alln-core-10.cisco.com Archived-At: Subject: [Rats] RATS Virtual Interim doodle poll X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2020 18:05:57 -0000 --_000_D82D84F47CC04B7BA357AF6E77CF6684ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UkFUcyBwYXJ0aWNpcGFudHMsDQpXZSBzaG91bGQgaGF2ZSBhIHNlc3Npb24gcHJpb3IgdG8gSUVU RiAxMDkgYW5kIGdpdmVuIHRoZSBsYXRlIHRpbWUsIEnigJltIHRyeWluZyB0byBnaXZlIGEgbG9u ZyBlbm91Z2ggd2luZG93IGluIGhvcGVzIHRoYXQgd2UgY2FuIGdldCBxdW9ydW0gZm9yIG9uZSBv ZiB0aGUgdGltZSBzbG90cy4NCg0KSeKAmWxsIGdpdmUgdGhpcyBwb2xsIGEgd2Vlaywgc28gcGxl YXNlIHJlc3BvbmQgYnkgT2N0IDggRU9EIHNvIHRoYXQgd2UgYXJlIHdpdGhpbiB0aGUgYW5ub3Vu Y2VtZW50IHRpbWUgd2luZG93Lg0KUGxlYXNlIHByb3ZpZGUgeW91ciBmZWVkYmFjayBpbjoNCmh0 dHBzOi8vZG9vZGxlLmNvbS9wb2xsL2Z2MjJxYmE0emQ5NmU2ZmINCg0KVGhhbmtzLCBOYW5jeQ0K --_000_D82D84F47CC04B7BA357AF6E77CF6684ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <691162B93EA7BF43BDF938C3DCDEFB8E@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5SQVRzIHBhcnRpY2lwYW50cyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2Ugc2hvdWxk IGhhdmUgYSBzZXNzaW9uIHByaW9yIHRvIElFVEYgMTA5IGFuZCBnaXZlbiB0aGUgbGF0ZSB0aW1l LCBJ4oCZbSB0cnlpbmcgdG8gZ2l2ZSBhIGxvbmcgZW5vdWdoIHdpbmRvdyBpbiBob3BlcyB0aGF0 IHdlIGNhbiBnZXQgcXVvcnVtIGZvciBvbmUgb2YgdGhlIHRpbWUgc2xvdHMuPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5J4oCZbGwgZ2l2ZSB0aGlzIHBvbGwgYSB3 ZWVrLCBzbyBwbGVhc2UgcmVzcG9uZCBieSBPY3QgOCBFT0Qgc28gdGhhdCB3ZSBhcmUgd2l0aGlu IHRoZSBhbm5vdW5jZW1lbnQgdGltZSB3aW5kb3cuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlBsZWFzZSBw cm92aWRlIHlvdXIgZmVlZGJhY2sgaW46PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxhIGhyZWY9Imh0dHBz Oi8vZG9vZGxlLmNvbS9wb2xsL2Z2MjJxYmE0emQ5NmU2ZmIiPmh0dHBzOi8vZG9vZGxlLmNvbS9w b2xsL2Z2MjJxYmE0emQ5NmU2ZmI8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5UaGFua3MsIE5hbmN5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_D82D84F47CC04B7BA357AF6E77CF6684ciscocom_-- From nobody Thu Oct 1 16:38:06 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A29F3A09FC; Thu, 1 Oct 2020 16:38:04 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: rats-chairs@ietf.org, rats@ietf.org, ncamwing@cisco.com, rdd@cert.org X-Test-IDTracker: no X-IETF-IDTracker: 7.17.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160159548422.11712.2205387296232824340@ietfa.amsl.com> Date: Thu, 01 Oct 2020 16:38:04 -0700 Archived-At: Subject: [Rats] rats - New Meeting Session Request for IETF 109 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2020 23:38:04 -0000 A new meeting session request has just been submitted by Nancy Cam-Winget, a Chair of the rats working group. --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 2 Length of Session(s): 2 Hours, 1 Hour Number of Attendees: 75 Conflicts to Avoid: Chair Conflict: secdispatch saag mile acme tls sacm teep suit netconf opsec masque add Key Participant Conflict: anima cose dprive People who must be present: Ned Smith Kathleen Moriarty Nancy Cam-Winget Roman Danyliw Resources Requested: Special Requests: --------------------------------------------------------- From nobody Mon Oct 5 05:37:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C8FB3A09EB for ; Mon, 5 Oct 2020 05:37:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.597 X-Spam-Level: X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=N2aszJlB; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=ju65B3QV Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cMXeBkqfz3fZ for ; Mon, 5 Oct 2020 05:37:02 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6CE33A09E5 for ; Mon, 5 Oct 2020 05:37:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10199; q=dns/txt; s=iport; t=1601901421; x=1603111021; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=wlfShxwcotlkWQ43SvFPLOs/XozUUOY1KIakiVngJ0Q=; b=N2aszJlBo+KsQBTfSgrFKQ9v/bRRJYlBCZKpheLgPpb4/1XyRMp2mKJR Oddg2tYvhceFi2ICrI76ACJHAg/qSzQzBMduu8yHIr3UQLc4dyZaJkg+V eiKnIqmSqIs/F91QhZnoBi7p0cOGI3HMdWXJRAY9z60temHHMo4ykFkKp o=; IronPort-PHdr: =?us-ascii?q?9a23=3AHk+1LBKJrROo2PY4admcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeGvK8/jVLVU8Pc8f0Xw+bVsqW1X2sG7N7BtX0Za5VDWl?= =?us-ascii?q?cDjtlehA0vBsOJSCiZZP7nZiA3BoJOAVli+XzoMEVJFoD5fVKB6nG35CQZTx?= =?us-ascii?q?P4Mwc9L+/pG4nU2sKw0e36+5DabwhSwjSnZrYnJxStpgKXvc4T0oY=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AUCgA4Entf/5hdJa1dA4N7L1EHcFk?= =?us-ascii?q?vLAqEM4NGA41KJpQMhG+CUwNVCwEBAQ0BAS0CBAEBhEoCF4IhAiU4EwIDAQE?= =?us-ascii?q?LAQEFAQEBAgEGBG2FXAELhXIBAQEBAxIRHQEBOA8CAQgRAwECKAMCAgIwFAc?= =?us-ascii?q?BAQUDAgQTGgiDBAGBfk0DLgGcTAKBOYhhdoEygwEBAQWCTIJOGIIQCYE4gnK?= =?us-ascii?q?DaYZWG4IAgREnDBCCTT6EVAkBFRGCUDOCLZM9hwKMAJESCoJnmmEDH6Efjjm?= =?us-ascii?q?EW6AWAgQCBAUCDgEBBYFrI4FXcBU7KgGCPlAXAg2SEIpWdDcCBgEJAQEDCXy?= =?us-ascii?q?MOwGBEAEB?= X-IronPort-AV: E=Sophos;i="5.77,338,1596499200"; d="scan'208,217";a="567955762" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 05 Oct 2020 12:37:00 +0000 Received: from XCH-ALN-001.cisco.com (xch-aln-001.cisco.com [173.36.7.11]) by rcdn-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 095Cb0CM032702 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 5 Oct 2020 12:37:00 GMT Received: from xhs-aln-002.cisco.com (173.37.135.119) by XCH-ALN-001.cisco.com (173.36.7.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 5 Oct 2020 07:37:00 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 5 Oct 2020 07:37:00 -0500 Received: from NAM10-BN7-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 5 Oct 2020 08:36:59 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UUx1K24OnkcMPBp3buOxqSHrcfox34ynR0Set617nAiQUyxGTT8nsNs3ZOl+gdQAtG1vBnASgyMw3P9c2MNzvv86QGx0XaBmPkFCZhsl2uEUx0nNgAT8qoH8iGNWhcQxTBVYy1fkYCdsiNRAHOX4w19/zjdvgsZNkJgQKNfJOxtahdr/tzORL9bA1s9We21Avx5V5zS8NbLoB5zEE3XJtxrZkzR+yywXlSIL+Yb4yKrv7yK/Fy46wFVvugLeZ57rq8C19NrlunG3r4JgMNB9MzDh4lOt78RFPL26rYyiNnqNoeS7NFH5jjeJG4y73Jdjkx5h0QSu79TEdkLdygL4+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wlfShxwcotlkWQ43SvFPLOs/XozUUOY1KIakiVngJ0Q=; b=JgZX2yBg8KsaR5SvIFa52NDb4++TMGlMeLGqzYQdCI0j38s5tHqV8YVQ6iSzw9TBQdSvkyzGnhQQGhbncZzjagbdOrJlSkBRZyNNLNFReehrOR+qHNUhgWAr61ojqBskuYt+DzYXVy5GUnVmNNNO9Pd9kfEbEpKfhs9Oj+QzTYqiGabwgi4VOc24clgLyl/UwqRXryv+7/RpCLOW7Wcbpn0lJiGl/LvvJxbvhr5fP4NvdK0GC6dwQzbPwEG/CntmxjQ30qiTRs2+H2Bp1+2iX5sqx4KVLcBKMszeUS4bOcy/0CMI6EZ8vqd22rc16Ej8+nWBtzb9SFFggjUETfp2lA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wlfShxwcotlkWQ43SvFPLOs/XozUUOY1KIakiVngJ0Q=; b=ju65B3QVhbLPaRn4h1IUxbmidelSLUdwGZhw8DliCxOCeMe0xnnSfUTtCIB8Sc6nKh4gOygekdDgWrK2qlYpO37l41ijA+oHrghgwkvxhPnh8HpdR6taehvIUKPoZ9EIMmvdqcbNgUqeQzD123bMI4XbkAcYU8GEUmAsNLkFrdU= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB2693.namprd11.prod.outlook.com (2603:10b6:a02:cc::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.32; Mon, 5 Oct 2020 12:36:59 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3433.044; Mon, 5 Oct 2020 12:36:59 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Jim Schaad Thread-Index: AQHWmouh1s8PwIAj2kiJs/EoRNd2OKmIff4A Date: Mon, 5 Oct 2020 12:36:58 +0000 Message-ID: References: <019701d699be$9fb2f5f0$df18e1d0$@augustcellars.com> <8F00E4E0-29F4-4C5E-8293-D7AB5F16E2FA@ietf.org> In-Reply-To: <8F00E4E0-29F4-4C5E-8293-D7AB5F16E2FA@ietf.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1a.200914 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f43f1d0e-05c4-428b-c995-08d8692b5a34 x-ms-traffictypediagnostic: BYAPR11MB2693: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 0DohQu821TmoXhsPRnHhOecKpYmmNsvqk0/NgqTiu1dd2DCWMoaVbC0+S3KpC1FfEtB2Og3/gLZfKiMS3+ZGNd5m+DLOLiRGblTFYOquDzdlgKOySq0b6KwpQLQ0ScTbse0TqkdAKQE9C2M2X9Z+832fEcBcDFh6AoFYgem4q1e6Zh8OMwQgvTEyLerukXU65l7Q/15cbnWQQVILMDzQH2pFLngnYOzTdq+OMwyDB5abuy74JFCZz06d7+mEvNzXKrIDw+yOXEjJSlfSX/uw/x+6qhPqQAyG4jNR91X8N71HtKSHlppwkgCwcgFaJUMd x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(376002)(346002)(136003)(366004)(396003)(86362001)(83380400001)(6486002)(6506007)(478600001)(8676002)(33656002)(6512007)(8936002)(26005)(2616005)(53546011)(6916009)(186003)(71200400001)(66476007)(66556008)(66946007)(64756008)(66446008)(316002)(36756003)(5660300002)(2906002)(76116006)(7116003); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_F1674B5F2345427598D8C6DF60210DB7ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f43f1d0e-05c4-428b-c995-08d8692b5a34 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2020 12:36:58.9555 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KzOumhxOD8yljdba/4yvdG0WJ16s2jbZwBCI8QSpOEqftHyj8JoObL++u/zg0QQ1EGYYR/+Dr9zo2uEAfvl5Ig== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB2693 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.11, xch-aln-001.cisco.com X-Outbound-Node: rcdn-core-1.cisco.com Archived-At: Subject: [Rats] FW: Jim Schaad X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2020 12:37:04 -0000 --_000_F1674B5F2345427598D8C6DF60210DB7ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW4gY2FzZSB5b3UgaGF2ZSB0byBzZWVuIGl0IGluIHRoZSB3aWRlciBJRVRGIGludGVyZXN0IGxp c3QuDQoNCkppbSB3YXMgYW4gYWN0aXZlIHBhcnRpY2lwYW50IGluIG91ciBncm91cCBidXQgYWxz byBjaGFpciBhbmQgYW4gb3BlbiBhbmQgd2lsbGluZyBjb250cmlidXRvciBhbmQgY29sbGFib3Jh dG9yIHRvIG1hbnkgbWFueSBvdGhlcnMuICBIZSB3YXMgYWx3YXlzIGNvb3BlcmF0aXZlIGFuZCBn aXZpbmcgb2YgaGlzIHRpbWUgdG8gaGVscCBmdXJ0aGVyIG91ciB0ZWNobm9sb2dpZXMgYXMgS2F0 aGxlZW4gbm90ZWQsIOKAnHRoZSBpbXBhY3Qgb2YgaGlzIG9wZW4gc291cmNlIGNvZGUgZm9yIEpP U0UgYW5kIENPU0XigJ0gd2lsbCBsaXZlIG9uIGZvciBhIHZlcnkgbG9uZyB0aW1lLg0KDQpJIHBl cnNvbmFsbHkgd2lsbCwgYmV5b25kIHRoZSB0ZWNoeSBzdHVmZiwgbWlzcyBteSBzb2NpYWwgaW50 ZXJhY3Rpb25zIHdpdGggaGltIGFzIHdlbGwuDQoNCk1heSBoZSByZXN0IGluIHBlYWNlLg0KICAg ICAgICAgICAgICAgIE5hbmN5DQoNCkZyb206IFdHQ2hhaXJzIDx3Z2NoYWlycy1ib3VuY2VzQGll dGYub3JnPiBvbiBiZWhhbGYgb2YgSmF5IERhbGV5IDxqYXlAaWV0Zi5vcmc+DQpEYXRlOiBTdW5k YXksIE9jdG9iZXIgNCwgMjAyMCBhdCAxOjE5IFBNDQpUbzogSUVTRyA8aWVzZ0BpZXRmLm9yZz4s IElFVEYgV0cgQ2hhaXJzIDx3Z2NoYWlyc0BpZXRmLm9yZz4NClN1YmplY3Q6IEZ3ZDogSmltIFNj aGFhZA0KDQpJIGhhdmUgc29tZSBzYWQgbmV3cyB0byBwYXNzIG9uLiAgSSBoYXZlIGxldCBoaXMg Y28tY2hhaXJzIGluIGFjZSBhbmQgY2JvciBrbm93IGRpcmVjdGx5Lg0KDQoNCkJlZ2luIGZvcndh cmRlZCBtZXNzYWdlOg0KDQpGcm9tOiA8dG9tQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzp0b21A YXVndXN0Y2VsbGFycy5jb20+Pg0KU3ViamVjdDogSmltIFNjaGFhZA0KRGF0ZTogNCBPY3RvYmVy IDIwMjAgYXQgODo1MTo0MyBBTSBOWkRUDQpUbzogPGV4ZWMtZGlyZWN0b3JAaWV0Zi5vcmc8bWFp bHRvOmV4ZWMtZGlyZWN0b3JAaWV0Zi5vcmc+Pg0KDQpJIGFtIG5vdCBzdXJlIHdob20gdG8gY29u dGFjdC4gIE15IGJyb3RoZXIsIEppbSBTY2hhYWQsIHdhcyBhbiBhY3RpdmUgbWVtYmVyIG9mIHRo ZSBJRVRGLiAgSSBuZWVkIHRvIGxldCB0aGUgZ3JvdXBzIGhlIHdhcyB3b3JraW5nIHdpdGggdGhh dCBoZSBoYXMgZGllZC4NCg0KDQpUb20gU2NoYWFkDQpBdWd1c3QgQ2VsbGFycw0KTmV3YmVyZywg T1IsIFVTQQ0KdG9tQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzp0b21AYXVndXN0Y2VsbGFycy5j b20+DQo1MDMuNTU0LjY3NjYgeDEwMiBkZXNrDQo1MDMuNzg5Ljc0MDQgY2VsbA0KDQotLQ0KSmF5 IERhbGV5DQpJRVRGIEV4ZWN1dGl2ZSBEaXJlY3Rvcg0KamF5QGlldGYub3JnPG1haWx0bzpqYXlA aWV0Zi5vcmc+DQoNCg0K --_000_F1674B5F2345427598D8C6DF60210DB7ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJIZWx2ZXRp Y2EgTmV1ZSI7DQoJcGFub3NlLTE6MiAwIDUgMyAwIDAgMCAyIDAgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1h bDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDEx LjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9u MQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkluIGNhc2UgeW91IGhhdmUgdG8gc2VlbiBp dCBpbiB0aGUgd2lkZXIgSUVURiBpbnRlcmVzdCBsaXN0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5KaW0gd2FzIGFuIGFjdGl2ZSBwYXJ0aWNpcGFudCBpbiBvdXIgZ3JvdXAgYnV0IGFsc28gY2hh aXIgYW5kIGFuIG9wZW4gYW5kIHdpbGxpbmcgY29udHJpYnV0b3IgYW5kIGNvbGxhYm9yYXRvciB0 byBtYW55IG1hbnkgb3RoZXJzLiZuYnNwOyBIZSB3YXMgYWx3YXlzIGNvb3BlcmF0aXZlIGFuZCBn aXZpbmcgb2YgaGlzIHRpbWUgdG8gaGVscCBmdXJ0aGVyIG91ciB0ZWNobm9sb2dpZXMgYXMgS2F0 aGxlZW4gbm90ZWQsIOKAnHRoZQ0KIGltcGFjdCBvZiBoaXMgb3BlbiBzb3VyY2UgY29kZSBmb3Ig Sk9TRSBhbmQgQ09TReKAnSB3aWxsIGxpdmUgb24gZm9yIGEgdmVyeSBsb25nIHRpbWUuPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgcGVyc29uYWxseSB3aWxsLCBiZXlvbmQgdGhlIHRlY2h5IHN0 dWZmLCBtaXNzIG15IHNvY2lhbCBpbnRlcmFjdGlvbnMgd2l0aCBoaW0gYXMgd2VsbC48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+TWF5IGhlIHJlc3QgaW4gcGVhY2UuPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgTmFu Y3k8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206IDwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPldHQ2hhaXJzICZs dDt3Z2NoYWlycy1ib3VuY2VzQGlldGYub3JnJmd0OyBvbiBiZWhhbGYgb2YgSmF5IERhbGV5ICZs dDtqYXlAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlN1bmRheSwgT2N0b2JlciA0LCAy MDIwIGF0IDE6MTkgUE08YnI+DQo8Yj5UbzogPC9iPklFU0cgJmx0O2llc2dAaWV0Zi5vcmcmZ3Q7 LCBJRVRGIFdHIENoYWlycyAmbHQ7d2djaGFpcnNAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVj dDogPC9iPkZ3ZDogSmltIFNjaGFhZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIHNvbWUgc2FkIG5ld3MgdG8gcGFzcyBv bi4gJm5ic3A7SSBoYXZlIGxldCBoaXMgY28tY2hhaXJzIGluIGFjZSBhbmQgY2JvciBrbm93IGRp cmVjdGx5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5CZWdpbiBmb3J3YXJkZWQgbWVzc2FnZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSBO ZXVlJnF1b3Q7Ij5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtIZWx2ZXRpY2EgTmV1ZSZxdW90OyI+Jmx0OzxhIGhyZWY9Im1haWx0bzp0b21AYXVndXN0Y2Vs bGFycy5jb20iPnRvbUBhdWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSBOZXVlJnF1b3Q7Ij5TdWJqZWN0OiBKaW0gU2No YWFkPC9zcGFuPjwvYj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EgTmV1 ZSZxdW90OyI+RGF0ZTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhIE5ldWUmcXVvdDsiPjQgT2N0b2JlciAyMDIwIGF0IDg6NTE6NDMgQU0gTlpEVDwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EgTmV1ZSZxdW90OyI+ VG86IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSBO ZXVlJnF1b3Q7Ij4mbHQ7PGEgaHJlZj0ibWFpbHRvOmV4ZWMtZGlyZWN0b3JAaWV0Zi5vcmciPmV4 ZWMtZGlyZWN0b3JAaWV0Zi5vcmc8L2E+Jmd0Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYW0gbm90IHN1cmUgd2hvbSB0byBjb250YWN0LiZu YnNwOyBNeSBicm90aGVyLCBKaW0gU2NoYWFkLCB3YXMgYW4gYWN0aXZlIG1lbWJlciBvZiB0aGUg SUVURi4mbmJzcDsgSSBuZWVkIHRvIGxldCB0aGUgZ3JvdXBzIGhlIHdhcyB3b3JraW5nIHdpdGgg dGhhdCBoZSBoYXMgZGllZC4gJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VG9tIFNjaGFhZDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXVndXN0IENlbGxhcnM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5ld2JlcmcsIE9SLCBVU0E8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhy ZWY9Im1haWx0bzp0b21AYXVndXN0Y2VsbGFycy5jb20iPnRvbUBhdWd1c3RjZWxsYXJzLmNvbTwv YT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjUw My41NTQuNjc2NiB4MTAyIGRlc2s8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjUwMy43ODkuNzQwNCBjZWxsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4tLSZuYnNwOzxicj4N CkpheSBEYWxleTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+SUVURiBFeGVjdXRpdmUgRGly ZWN0b3I8YnI+DQo8YSBocmVmPSJtYWlsdG86amF5QGlldGYub3JnIj5qYXlAaWV0Zi5vcmc8L2E+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_F1674B5F2345427598D8C6DF60210DB7ciscocom_-- From nobody Tue Oct 6 08:22:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88E0A3A0E25 for ; Fri, 25 Sep 2020 07:02:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.349 X-Spam-Level: X-Spam-Status: No, score=-2.349 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.695, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, LH_URI_DOM_IN_PATH=1.446, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IY8HpNy10SaY for ; Fri, 25 Sep 2020 07:02:01 -0700 (PDT) Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-eopbgr760139.outbound.protection.outlook.com [40.107.76.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04BF33A0E23 for ; Fri, 25 Sep 2020 07:02:00 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nWJMWnLzxzo38aAIkp9CIUqo10S059ZrWnrUwaWBimj81kxc/G7wXqdu1F53tpQqlUiUjkNTfL2ozx2f9Xamkz6VjKKkjF5RaogX42+vpZY8D//2UHBqDjbF4a3iXOWAhyetIbfBoDHxTH8jcfBNZVfbZYf4OJ2i+XlDbzz7BNKC4+RyCiIH6/5ooFYLZBNVwoTT8EYfRjgi34c5qhs5Z3l7x4TPrulss+XGYy6Q5/VfLJJpNtmbS8gG9pxaeJKuTcJKYVKLjL1DT6CMBGWb0gvbG+2M9N2+7t9ciPvTtzSDyXNtmqEuB5e6gPBMNnvb2kObHLybgrkPBL9odb3o5Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2Un9NpVF1V6/M1rjnqgZ8ER2ILEM8G/OTnZ861YJ/kA=; b=bcYGSYEct1ZllkuEXm4jN842l92+X3yhUqQkRGYtnMYVTqSOOE3IBWZkQIEA+Ao0A+uC4ryooRuSAr2VyFQeSXAcPVuW7M11byAtZFs16SUtVKY/EGOZaANMLAndt/ZWYB/xnU4wuDiePIKKIwR5QTVCZUIWWb1r+xWPTraSp/klQm89IP67f8mreqvh169a4lgZblZe2dWF1TQ1CT9c+yKl8SAhaQA1fxanTGx9sN3CJZrT+dkX3LVFdeT08+C4Uc9v8lU0dkYIfqalN4IE4Vz3jvCFTTIUAG4eL0XFMabqwg03HX3wd1MVzk+ZbSujlPIupMU+PRS7PoUFdpTW4w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2Un9NpVF1V6/M1rjnqgZ8ER2ILEM8G/OTnZ861YJ/kA=; b=H7HGS6WIeE2Ium4I3YUcLg0Kdna3RsmadRMxG/Th73lxpxrS86eZG+fBL28rqATynZgbvACBatV8fwks3eX9XH5gP9AzfpO4l6urff1HfgrK9nya9IhwLM5rtqVL7uDN2hLSKTOog1OBozvG7b2suykREN2EysaFRXwgIndyGao= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1331.namprd21.prod.outlook.com (2603:10b6:208:92::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.13; Fri, 25 Sep 2020 14:01:58 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::d9a8:e8a5:1a56:ec0c]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::d9a8:e8a5:1a56:ec0c%9]) with mapi id 15.20.3433.020; Fri, 25 Sep 2020 14:01:58 +0000 From: Dave Thaler To: "mcharlesr@gmail.com" , "ncamwing@cisco.com" , "xinxin@iotex.io" , "blueroofmusic@gmail.com" , Thomas Fossati , Ned Smith , "Zhu, Bing" , "elear@cisco.com" , "mdb@juniper.net" , "jodonogh@qti.qualcomm.com" , "Joe Malcolm (jomalcol)" , pete.loscocco , "shwethab@cisco.com" , "lei.zhang@iex.ec" , "prowe@mitre.org" , Nicolae Paladi , "lgl@island-resort.com" , "mathias.brossard@arm.com" , Henk Birkholz , palosco , "Helble, Sarah C." , "rats@ietf.org" , Thomas Hardjono , Thomas Fossati , "Guinn, Andrew L." Thread-Topic: Updated invitation with note: RATS Architecture Design Team weekly meeting time @ Fri 2020-09-25 10:00 - 11:00 (EDT) (dthaler@microsoft.com) Thread-Index: AQHWk0RutVe0lzXYWkm5gb3OcMEWWQ== Date: Fri, 25 Sep 2020 14:01:57 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-09-25T14:01:55Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=02f8d741-a18c-4077-acd2-5096912da8a1; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:e554:5cab:7974:939b] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 256e47e9-6ca7-475c-59ed-08d8615b9162 x-ms-traffictypediagnostic: BL0PR2101MB1331: x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6430; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lKRbEGNjNuFoPQkpYdozwnS2k17AJNgkJReGdB2b95iXO3ZjNaGVNYjjhau3Y0MDVsXvTsIccgTeZeHbaH/eG6vD6GZjVRvIO6Nxpzp56bt+M7JLQOtV+Ngg2+kSe4wrCRFDspEmMhQB6tXSR/sm91vKJ/KoKS88zgFnt+QwqttzsHpVYg9mV+JCsmdEzgclZVg1/Y0NvOIfp1S2e/MTdBe02NLSglvwh+PDqH+kRJJbAqaPFSBeVmS6HknOM7nOJm4FUyDdnUYS0W8v/z8C1KXC65cHK30kRpuIxE0di0y/+tCrPR8VhqY0oW2xYxZRWE60Z6RK/l3+Mh/58TmwHdGGh+ur8hhJwGVaNjg9wlF0wTjjM2FeWjHrv+fIvcZvaM+VRpLgyJ8RZM+iIjQgf7HIk42jNR1Xuf9jZbrIplO4Bl/x/43mIqwLvoNq/IMhNlKBoQO0aYtfF8Ie1h3X3uUAGcmftl7976N3MjTz/sk= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(376002)(346002)(366004)(39860400002)(47530400004)(6506007)(76116006)(8936002)(186003)(53546011)(7696005)(15650500001)(316002)(7416002)(8676002)(166002)(966005)(83080400001)(10290500003)(110136005)(55016002)(82960400001)(33656002)(8990500004)(16799955002)(64756008)(66476007)(66556008)(66446008)(66946007)(86362001)(82950400001)(71200400001)(5660300002)(83380400001)(9686003)(2906002)(478600001)(52536014)(94303002)(921003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: //IXt2GTesn+CCbygsE6b/VATT3+hi9VZ8Pe2SexR+PQnJoG8zobmVEg0wxfcjP/eyjdbEOJQuHXR8Jv2ocC/Tn5ckzoiaQxEP3oJufJFliorMZNeHnDXUheb3tGyBBDHh+L8b+oHwcRVO2D9s6a7UO8pxWuIFfzykBm+qTLZskSnj3N3N500RtM9rTXjtNFtEPtTqoT9xj1YvLWcn9HQW4W2KdGI8mH8BiIcXpsZfvrOB++knsZ+P5wbEB7Srw4RU9rrAGaPjfHfPmhNBsXFAvTlb18ZrYb088ZjXljPWAucSaYffSatrnEtEz5WGSozVBJ1ZfVccsv1ufODAs2rbMOtkB259jLiiNLyr0cHOTHj8McGPxPU/RdbXGQeBVMQkaoAMVXCo/DPyFnPmla4/DNJIUFJiz8KfO0ZvnfcG13UxOo1xYYsaEzb+8q5ItDIeW1/0L4JvibpOdzLerIG/1r5vUqOss4fcdNeApRDIjSQ+0ZXpSVJHAZEEj2wdkUY0d1qLGfT+0xbX7zrq3TNbzV/VJLu+LLOX28gev+TjYeMcXWfvtKe5o3erQSGxJqrhaN08DBEgaJSlfGc2qsY0qLkeGRhQkX6YbRcmKReiT4ExtHkef/QdxjNPIMRtLCByx6Gq6RlVMAeAzBXj45PIX5PobVDL4Vr2hmPEOSTvMbZOkJmsRAMvDrJejtJ5jgPqEc8MHpjRAIWA8iC8F2pg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1027DBB2B2D488ECAC8684B2A3360BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 256e47e9-6ca7-475c-59ed-08d8615b9162 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Sep 2020 14:01:57.8137 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: E2CLIK9PAGNin73KuiSTcTxPVYpF9nTz+zYM6MtAvkz5225G7wmJDid8jFB1TubrhN+oX3ihf9OhMn93PXImVePKAA4vzmEA7pUotD0AtpA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1331 Archived-At: X-Mailman-Approved-At: Tue, 06 Oct 2020 08:22:37 -0700 Subject: Re: [Rats] Updated invitation with note: RATS Architecture Design Team weekly meeting time @ Fri 2020-09-25 10:00 - 11:00 (EDT) (dthaler@microsoft.com) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Sep 2020 14:02:04 -0000 --_000_BL0PR2101MB1027DBB2B2D488ECAC8684B2A3360BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBsaW5rIHdvbuKAmXQgbGV0IG1lIGluLCBpdCBzYXlzIGl04oCZcyBmb3IgbmV4dCBUdWVz ZGF5IGV2ZW4gdGhvdWdoIHRoZSBzdWJqZWN0IGFuZCB0b3Agb2YgdGhlIGludml0ZSBzYXlzIEZy aWRheS4NCg0KQW55b25lIGVsc2UgYWJsZSB0byBnZXQgaW4/DQoNCi0tLS0tT3JpZ2luYWwgQXBw b2ludG1lbnQtLS0tLQ0KRnJvbTogbWNoYXJsZXNyQGdtYWlsLmNvbSA8bWNoYXJsZXNyQGdtYWls LmNvbT4NClNlbnQ6IE1vbmRheSwgQXVndXN0IDEwLCAyMDIwIDEyOjE2IFBNDQpUbzogbWNoYXJs ZXNyQGdtYWlsLmNvbTsgbmNhbXdpbmdAY2lzY28uY29tOyB4aW54aW5AaW90ZXguaW87IGJsdWVy b29mbXVzaWNAZ21haWwuY29tOyBUaG9tYXMgRm9zc2F0aTsgTmVkIFNtaXRoOyBaaHUsIEJpbmc7 IGVsZWFyQGNpc2NvLmNvbTsgbWRiQGp1bmlwZXIubmV0OyBqb2Rvbm9naEBxdGkucXVhbGNvbW0u Y29tOyBKb2UgTWFsY29sbSAoam9tYWxjb2wpOyBwZXRlLmxvc2NvY2NvOyBzaHdldGhhYkBjaXNj by5jb207IGxlaS56aGFuZ0BpZXguZWM7IHByb3dlQG1pdHJlLm9yZzsgTmljb2xhZSBQYWxhZGk7 IGxnbEBpc2xhbmQtcmVzb3J0LmNvbTsgbWF0aGlhcy5icm9zc2FyZEBhcm0uY29tOyBIZW5rIEJp cmtob2x6OyBEYXZlIFRoYWxlcjsgcGFsb3NjbzsgSGVsYmxlLCBTYXJhaCBDLjsgcmF0c0BpZXRm Lm9yZzsgVGhvbWFzIEhhcmRqb25vOyBUaG9tYXMgRm9zc2F0aTsgR3Vpbm4sIEFuZHJldyBMLg0K U3ViamVjdDogVXBkYXRlZCBpbnZpdGF0aW9uIHdpdGggbm90ZTogUkFUUyBBcmNoaXRlY3R1cmUg RGVzaWduIFRlYW0gd2Vla2x5IG1lZXRpbmcgdGltZSBAIEZyaSAyMDIwLTA5LTI1IDEwOjAwIC0g MTE6MDAgKEVEVCkgKGR0aGFsZXJAbWljcm9zb2Z0LmNvbSkNCldoZW46IEZyaWRheSwgU2VwdGVt YmVyIDI1LCAyMDIwIDEwOjAwIEFNLTExOjAwIEFNIEFtZXJpY2EvVG9yb250by4NCldoZXJlOiBo dHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tNGMzZDczOTVhMTVkYWQxZWQ4 YzBmOTU0NTI3OTRjMjUNCg0KVGhpcyBldmVudCBoYXMgYmVlbiBjaGFuZ2VkIHdpdGggdGhpcyBu b3RlOg0KInZhY2F0aW9ucyBhbW9uZyBhIGZldyBhbmQgY29uZmxpY3RzIGFtb25nIG90aGVycy4i DQpSQVRTIEFyY2hpdGVjdHVyZSBEZXNpZ24gVGVhbSB3ZWVrbHkgbWVldGluZyB0aW1lDQpXaGVu DQpDaGFuZ2VkOiBGcmkgMjAyMC0wOS0yNSAxMDowMCDigJMgMTE6MDAgRWFzdGVybiBUaW1lIC0g VG9yb250bw0KV2hlcmUNCmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00 YzNkNzM5NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNSAobWFwPGh0dHBzOi8vbmFtMDYuc2FmZWxp bmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUu Y29tJTJGdXJsJTNGcSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGaWV0Zi53ZWJleC5jb20lMjUyRmll dGYlMjUyRmoucGhwJTI1M0ZNVElEJTI1M0RtNGMzZDczOTVhMTVkYWQxZWQ4YzBmOTU0NTI3OTRj MjUlMjZzYSUzREQlMjZ1c3QlM0QxNjAxMDExMTI4MTI0MDAwJTI2dXNnJTNEQU92VmF3MnRIRHpq TGZvMlNIekVlTlhLWUVmNyZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3 QzgxYjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIy ZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2MDA3NjQzNzY0OCZzZGF0YT1pbkgzSG1Ma0Ey N3VxJTJGNGJDdzF5MkpuNVBGRzNiUXBjRWZ6aUpuV2pXQlUlM0QmcmVzZXJ2ZWQ9MD4pDQpKb2lu aW5nIGluZm8NCkpvaW4gd2l0aCBHb29nbGUgTWVldA0KbWVldC5nb29nbGUuY29tL2lraS10cGFj LWhkaDxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9 aHR0cHMlM0ElMkYlMkZtZWV0Lmdvb2dsZS5jb20lMkZpa2ktdHBhYy1oZGgmZGF0YT0wMiU3QzAx JTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0 YTdiYiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3 NjAwNzY0NDc2Mzcmc2RhdGE9ZHpqJTJGNUFmbkV0UnQlMkZabnZQNFljZHZpZWRTd3ozZFNpVjZi ZThFWnRMVGslM0QmcmVzZXJ2ZWQ9MD4NCkNhbGVuZGFyDQpkdGhhbGVyQG1pY3Jvc29mdC5jb208 bWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4NCldobw0K4oCiDQptY2hhcmxlc3JAZ21haWwu Y29tPG1haWx0bzptY2hhcmxlc3JAZ21haWwuY29tPiAtIG9yZ2FuaXplcg0K4oCiDQpuY2Ftd2lu Z0BjaXNjby5jb208bWFpbHRvOm5jYW13aW5nQGNpc2NvLmNvbT4NCuKAog0KeGlueGluQGlvdGV4 LmlvPG1haWx0bzp4aW54aW5AaW90ZXguaW8+DQrigKINCmJsdWVyb29mbXVzaWNAZ21haWwuY29t PG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4NCuKAog0KVGhvbWFzIEZvc3NhdGkNCuKA og0KTmVkIFNtaXRoDQrigKINClpodSwgQmluZw0K4oCiDQplbGVhckBjaXNjby5jb208bWFpbHRv OmVsZWFyQGNpc2NvLmNvbT4NCuKAog0KbWRiQGp1bmlwZXIubmV0PG1haWx0bzptZGJAanVuaXBl ci5uZXQ+DQrigKINCmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb208bWFpbHRvOmpvZG9ub2doQHF0 aS5xdWFsY29tbS5jb20+DQrigKINCkpvZSBNYWxjb2xtIChqb21hbGNvbCkNCuKAog0KUGV0ZSBM b3Njb2Njbw0K4oCiDQpzaHdldGhhYkBjaXNjby5jb208bWFpbHRvOnNod2V0aGFiQGNpc2NvLmNv bT4NCuKAog0KbGVpLnpoYW5nQGlleC5lYzxtYWlsdG86bGVpLnpoYW5nQGlleC5lYz4NCuKAog0K cHJvd2VAbWl0cmUub3JnPG1haWx0bzpwcm93ZUBtaXRyZS5vcmc+DQrigKINCk5pY29sYWUgUGFs YWRpDQrigKINCmxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQu Y29tPg0K4oCiDQptYXRoaWFzLmJyb3NzYXJkQGFybS5jb208bWFpbHRvOm1hdGhpYXMuYnJvc3Nh cmRAYXJtLmNvbT4NCuKAog0KSGVuayBCaXJraG9seg0K4oCiDQpkdGhhbGVyQG1pY3Jvc29mdC5j b208bWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4NCuKAog0KUGV0ZXIgTG9zY29jY28NCuKA og0KSGVsYmxlLCBTYXJhaCBDLg0K4oCiDQpyYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYu b3JnPg0K4oCiDQpUaG9tYXMgSGFyZGpvbm8NCuKAog0KVGhvbWFzIEZvc3NhdGkNCuKAog0KR3Vp bm4sIEFuZHJldyBMLg0KbW9yZSBkZXRhaWxzIMK7PGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnBy b3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJG Y2FsZW5kYXIlMkZldmVudCUzRmFjdGlvbiUzRFZJRVclMjZlaWQlM0RhV3hzYm5BMVoyOTJiR3h6 TlhWeE1tMTFielF3WTJobmNHTmZNakF5TURBNU1qSlVNVFF3TURBd1dpQmtkR2hoYkdWeVFHMXBZ M0p2YzI5bWRDNWpiMjAlMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlXbHNMbU52YldFNFl6 YzVaVGcyWXpBNFltSm1aV1kxTm1KaFlqZGpNRGhsTXpCbE5qaGlaREJoTlRWbE4yVSUyNmN0eiUz REFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmRhdGE9MDIlN0MwMSU3Q2R0 aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4NWQyNGE3YmIl N0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MzYxNzYwMDc2 NDQ3NjM3JnNkYXRhPWpVdFlkTExPeEwlMkI1aWZJbDZ1akozU2d0MHI3Q2FaWUlZRDFaWHE4bGpJ WSUzRCZyZXNlcnZlZD0wPg0KTWVldGluZyBsaW5rOg0KaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9p ZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1PGh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy Rnd3dy5nb29nbGUuY29tJTJGdXJsJTNGcSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJGaWV0Zi53ZWJl eC5jb20lMjUyRmlldGYlMjUyRmoucGhwJTI1M0ZNVElEJTI1M0RtNGMzZDczOTVhMTVkYWQxZWQ4 YzBmOTU0NTI3OTRjMjUlMjZzYSUzREQlMjZ1c3QlM0QxNjAxMDExMTI4MTIzMDAwJTI2dXNnJTNE QU92VmF3MFItajNtVWdrVzVHeGVGN2tGdjhSXyZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWlj cm9zb2Z0LmNvbSU3QzgxYjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4 NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2MDA3NjQ1NzYzMiZzZGF0 YT1UZkx2WkJONm5OMm5WMnFzcm0wJTJCOGxpWnFDbFMwbTU4Y09Fem5PJTJGaG8ydyUzRCZyZXNl cnZlZD0wPg0KTWVldGluZyBudW1iZXI6DQo2MTAgMzY2IDc1MA0KUGFzc3dvcmQ6DQo0dlkyYVM2 WDhERg0KSG9zdCBrZXk6DQo4MjA4MjINCg0KTW9yZSB3YXlzIHRvIGpvaW4NCg0KR29pbmcgKGR0 aGFsZXJAbWljcm9zb2Z0LmNvbTxtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tPik/ICAgWWVz PGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRw cyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGY2FsZW5kYXIlMkZldmVudCUzRmFjdGlvbiUzRFJF U1BPTkQlMjZlaWQlM0RhV3hzYm5BMVoyOTJiR3h6TlhWeE1tMTFielF3WTJobmNHTmZNakF5TURB NU1qSlVNVFF3TURBd1dpQmtkR2hoYkdWeVFHMXBZM0p2YzI5bWRDNWpiMjAlMjZyc3QlM0QxJTI2 dG9rJTNETVRramJXTm9ZWEpzWlhOeVFHZHRZV2xzTG1OdmJXRTRZemM1WlRnMll6QTRZbUptWldZ MU5tSmhZamRqTURobE16QmxOamhpWkRCaE5UVmxOMlUlMjZjdHolM0RBbWVyaWNhJTI1MkZUb3Jv bnRvJTI2aGwlM0RlbiUyNmVzJTNEMCZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0 LmNvbSU3QzgxYjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4NmYxNDFh ZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2MDA3NjQ1NzYzMiZzZGF0YT1ZNE44 UkZsT0hOMjk2WFphdm53NTd3YUZhdE1hNm9xb21HQ1dNeE1qQWtFJTNEJnJlc2VydmVkPTA+IC0g TWF5YmU8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRhciUyRmV2ZW50JTNGYWN0aW9u JTNEUkVTUE9ORCUyNmVpZCUzRGFXeHNibkExWjI5MmJHeHpOWFZ4TW0xMWJ6UXdZMmhuY0dOZk1q QXlNREE1TWpKVU1UUXdNREF3V2lCa2RHaGhiR1Z5UUcxcFkzSnZjMjltZEM1amIyMCUyNnJzdCUz RDMlMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlXbHNMbU52YldFNFl6YzVaVGcyWXpBNFlt Sm1aV1kxTm1KaFlqZGpNRGhsTXpCbE5qaGlaREJoTlRWbE4yVSUyNmN0eiUzREFtZXJpY2ElMjUy RlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmRhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNy b3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4NWQyNGE3YmIlN0M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MzYxNzYwMDc2NDY3NjI3JnNkYXRh PWJoYm1kWkY1a3FjYnI1bG5RRVRrUnhDU1pjdTRYSE8yTWt0aXpoWldRQVUlM0QmcmVzZXJ2ZWQ9 MD4gLSBObzxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM0ElMkYlMkZ3d3cuZ29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGZXZlbnQlM0ZhY3Rp b24lM0RSRVNQT05EJTI2ZWlkJTNEYVd4c2JuQTFaMjkyYkd4ek5YVnhNbTExYnpRd1kyaG5jR05m TWpBeU1EQTVNakpVTVRRd01EQXdXaUJrZEdoaGJHVnlRRzFwWTNKdmMyOW1kQzVqYjIwJTI2cnN0 JTNEMiUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZiV0U0WXpjNVpUZzJZekE0 WW1KbVpXWTFObUpoWWpkak1EaGxNekJsTmpoaVpEQmhOVFZsTjJVJTI2Y3R6JTNEQW1lcmljYSUy NTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1p Y3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdiYiU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3NjAwNzY0Njc2Mjcmc2Rh dGE9VTJIVGZpSnFpSXl5T2UyVWR0bGlNV2h5dk45ZzkyWDB4MXY2TWc3bHQ2SSUzRCZyZXNlcnZl ZD0wPiAgICBtb3JlIG9wdGlvbnMgwrs8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlv bi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxlbmRh ciUyRmV2ZW50JTNGYWN0aW9uJTNEVklFVyUyNmVpZCUzRGFXeHNibkExWjI5MmJHeHpOWFZ4TW0x MWJ6UXdZMmhuY0dOZk1qQXlNREE1TWpKVU1UUXdNREF3V2lCa2RHaGhiR1Z5UUcxcFkzSnZjMjlt ZEM1amIyMCUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZiV0U0WXpjNVpUZzJZ ekE0WW1KbVpXWTFObUpoWWpkak1EaGxNekJsTmpoaVpEQmhOVFZsTjJVJTI2Y3R6JTNEQW1lcmlj YSUyNTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0 MG1pY3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdiYiU3QzcyZjk4 OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3NjAwNzY0Nzc2MjAm c2RhdGE9RnhYa3BmbTJ4WSUyRk1JS09NU0klMkZzV3ZlWnJZSWlIeXRNMjJ6QnFuV1NleTAlM0Qm cmVzZXJ2ZWQ9MD4NCg0KSW52aXRhdGlvbiBmcm9tIEdvb2dsZSBDYWxlbmRhcjxodHRwczovL25h bTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3 d3cuZ29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGJmRhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNy b3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4NWQyNGE3YmIlN0M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MzYxNzYwMDc2NDc3NjIwJnNkYXRh PXk1ODVyNHpnT1dCS0hMWXk3THZDdVJSeE91Z0FDVGpZSWhMJTJGZSUyQmhKYVJnJTNEJnJlc2Vy dmVkPTA+DQoNCllvdSBhcmUgcmVjZWl2aW5nIHRoaXMgY291cnRlc3kgZW1haWwgYXQgdGhlIGFj Y291bnQgZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20+ IGJlY2F1c2UgeW91IGFyZSBhbiBhdHRlbmRlZSBvZiB0aGlzIGV2ZW50Lg0KDQpUbyBzdG9wIHJl Y2VpdmluZyBmdXR1cmUgdXBkYXRlcyBmb3IgdGhpcyBldmVudCwgZGVjbGluZSB0aGlzIGV2ZW50 LiBBbHRlcm5hdGl2ZWx5IHlvdSBjYW4gc2lnbiB1cCBmb3IgYSBHb29nbGUgYWNjb3VudCBhdCBo dHRwczovL3d3dy5nb29nbGUuY29tL2NhbGVuZGFyLyBhbmQgY29udHJvbCB5b3VyIG5vdGlmaWNh dGlvbiBzZXR0aW5ncyBmb3IgeW91ciBlbnRpcmUgY2FsZW5kYXIuDQoNCkZvcndhcmRpbmcgdGhp cyBpbnZpdGF0aW9uIGNvdWxkIGFsbG93IGFueSByZWNpcGllbnQgdG8gc2VuZCBhIHJlc3BvbnNl IHRvIHRoZSBvcmdhbml6ZXIgYW5kIGJlIGFkZGVkIHRvIHRoZSBndWVzdCBsaXN0LCBvciBpbnZp dGUgb3RoZXJzIHJlZ2FyZGxlc3Mgb2YgdGhlaXIgb3duIGludml0YXRpb24gc3RhdHVzLCBvciB0 byBtb2RpZnkgeW91ciBSU1ZQLiBMZWFybiBNb3JlPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnBy b3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnN1cHBvcnQuZ29vZ2xlLmNv bSUyRmNhbGVuZGFyJTJGYW5zd2VyJTJGMzcxMzUlMjNmb3J3YXJkaW5nJmRhdGE9MDIlN0MwMSU3 Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4NWQyNGE3 YmIlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MzYxNzYw MDc2NDg3NjE1JnNkYXRhPXBuQ0FQOHdpSUplQnVXTWRWTUR0anB5ZEdNaEoydkVxeFBmMEFxTXJz Q2MlM0QmcmVzZXJ2ZWQ9MD4uDQoNCg== --_000_BL0PR2101MB1027DBB2B2D488ECAC8684B2A3360BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQpoMw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCgltc28tc3R5bGUtbGluazoiSGVhZGluZyAz IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJ bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6 ZToxMy41cHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7DQoJZm9udC13 ZWlnaHQ6Ym9sZDt9DQpoNA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCgltc28tc3R5bGUtbGlu azoiSGVhZGluZyA0IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2Vy aWY7DQoJZm9udC13ZWlnaHQ6Ym9sZDt9DQpoNQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTsNCglt c28tc3R5bGUtbGluazoiSGVhZGluZyA1IENoYXIiOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsc2VyaWY7DQoJZm9udC13ZWlnaHQ6Ym9sZDt9DQphOmxpbmssIHNwYW4uTXNvSHlw ZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2Vk DQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFs MCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJn aW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1m YW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0Kc3Bhbi5IZWFkaW5nNENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IkhlYWRpbmcgNCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTsNCglt c28tc3R5bGUtbGluazoiSGVhZGluZyA0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSBMaWdodCIs c2Fucy1zZXJpZjsNCgljb2xvcjojMkU3NEI1Ow0KCWZvbnQtc3R5bGU6aXRhbGljO30NCnNwYW4u SGVhZGluZzNDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDMgQ2hhciI7DQoJbXNvLXN0 eWxlLXByaW9yaXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgMyI7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNEQ3ODt9DQpzcGFuLm5v dHJhbnNsYXRlDQoJe21zby1zdHlsZS1uYW1lOm5vdHJhbnNsYXRlO30NCnNwYW4uSGVhZGluZzVD aGFyDQoJe21zby1zdHlsZS1uYW1lOiJIZWFkaW5nIDUgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9y aXR5Ojk7DQoJbXNvLXN0eWxlLWxpbms6IkhlYWRpbmcgNSI7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkgTGlnaHQiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzJFNzRCNTt9DQpzcGFuLkVtYWlsU3R5bGUy NA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQXJpYWwiLHNhbnMt c2VyaWY7DQoJY29sb3I6IzAwOTkwMDt9DQpzcGFuLkVtYWlsU3R5bGUyNQ0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9y dC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4g MS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0 eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRp dCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5 XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVk aXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hl YWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlRoaXMgbGluayB3b27igJl0IGxldCBtZSBpbiwgaXQgc2F5cyBp dOKAmXMgZm9yIG5leHQgVHVlc2RheSBldmVuIHRob3VnaCB0aGUgc3ViamVjdCBhbmQgdG9wIG9m IHRoZSBpbnZpdGUgc2F5cyBGcmlkYXkuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj5BbnlvbmUgZWxzZSBhYmxlIHRvIGdldCBpbj88bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj4tLS0tLU9yaWdpbmFsIEFwcG9pbnRtZW50LS0tLS08YnI+DQo8Yj5Gcm9tOjwv Yj4gbWNoYXJsZXNyQGdtYWlsLmNvbSAmbHQ7bWNoYXJsZXNyQGdtYWlsLmNvbSZndDsgPGJyPg0K PGI+U2VudDo8L2I+IE1vbmRheSwgQXVndXN0IDEwLCAyMDIwIDEyOjE2IFBNPGJyPg0KPGI+VG86 PC9iPiBtY2hhcmxlc3JAZ21haWwuY29tOyBuY2Ftd2luZ0BjaXNjby5jb207IHhpbnhpbkBpb3Rl eC5pbzsgYmx1ZXJvb2ZtdXNpY0BnbWFpbC5jb207IFRob21hcyBGb3NzYXRpOyBOZWQgU21pdGg7 IFpodSwgQmluZzsgZWxlYXJAY2lzY28uY29tOyBtZGJAanVuaXBlci5uZXQ7IGpvZG9ub2doQHF0 aS5xdWFsY29tbS5jb207IEpvZSBNYWxjb2xtIChqb21hbGNvbCk7IHBldGUubG9zY29jY287IHNo d2V0aGFiQGNpc2NvLmNvbTsgbGVpLnpoYW5nQGlleC5lYzsNCiBwcm93ZUBtaXRyZS5vcmc7IE5p Y29sYWUgUGFsYWRpOyBsZ2xAaXNsYW5kLXJlc29ydC5jb207IG1hdGhpYXMuYnJvc3NhcmRAYXJt LmNvbTsgSGVuayBCaXJraG9sejsgRGF2ZSBUaGFsZXI7IHBhbG9zY287IEhlbGJsZSwgU2FyYWgg Qy47IHJhdHNAaWV0Zi5vcmc7IFRob21hcyBIYXJkam9ubzsgVGhvbWFzIEZvc3NhdGk7IEd1aW5u LCBBbmRyZXcgTC48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gVXBkYXRlZCBpbnZpdGF0aW9uIHdpdGgg bm90ZTogUkFUUyBBcmNoaXRlY3R1cmUgRGVzaWduIFRlYW0gd2Vla2x5IG1lZXRpbmcgdGltZSBA IEZyaSAyMDIwLTA5LTI1IDEwOjAwIC0gMTE6MDAgKEVEVCkgKGR0aGFsZXJAbWljcm9zb2Z0LmNv bSk8YnI+DQo8Yj5XaGVuOjwvYj4gRnJpZGF5LCBTZXB0ZW1iZXIgMjUsIDIwMjAgMTA6MDAgQU0t MTE6MDAgQU0gQW1lcmljYS9Ub3JvbnRvLjxicj4NCjxiPldoZXJlOjwvYj4gaHR0cHM6Ly9pZXRm LndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0 YzI1PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVy PSIxIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiIHN1bW1hcnk9IiIgd2lkdGg9IjEw MCUiIHN0eWxlPSJ3aWR0aDoxMDAuMCU7YmFja2dyb3VuZDp3aGl0ZTtib3JkZXItdG9wOjEuMHB0 O2JvcmRlci1sZWZ0OjEuMHB0O2JvcmRlci1ib3R0b206MS41cHQ7Ym9yZGVyLXJpZ2h0OjEuNXB0 O2JvcmRlci1jb2xvcjojQ0NDQ0NDO2JvcmRlci1zdHlsZTpzb2xpZCI+DQo8dGJvZHk+DQo8dHI+ DQo8dGQgc3R5bGU9ImJvcmRlcjpub25lO3BhZGRpbmc6NC4wcHQgNC4wcHQgNC4wcHQgNC4wcHQi Pg0KPGRpdiBzdHlsZT0ibXNvLWVsZW1lbnQ6cGFyYS1ib3JkZXItZGl2O2JvcmRlcjpzb2xpZCB3 aGl0ZSAxLjBwdDtwYWRkaW5nOjUuMHB0IDBpbiA1LjBwdCAwaW47YmFja2dyb3VuZDp3aGl0ZSI+ DQo8aDQgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjMuMHB0O21hcmdpbi1sZWZ0OjBpbjtiYWNrZ3JvdW5kOndoaXRlO2JvcmRlcjpu b25lO3BhZGRpbmc6MGluIj4NCjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDA5OTAwIj5U aGlzIGV2ZW50IGhhcyBiZWVuIGNoYW5nZWQgd2l0aCB0aGlzIG5vdGU6PC9zcGFuPjwvc3Ryb25n PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzAwOTkwMDtmb250LXdlaWdodDpub3JtYWwiPjxicj4NCiZx dW90O3ZhY2F0aW9ucyBhbW9uZyBhIGZldyBhbmQgY29uZmxpY3RzIGFtb25nIG90aGVycy4mcXVv dDs8bzpwPjwvbzpwPjwvc3Bhbj48L2g0Pg0KPC9kaXY+DQo8ZGl2Pg0KPGgzIHN0eWxlPSJtYXJn aW46MGluO21hcmdpbi1ib3R0b206LjAwMDFwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIy Ij5SQVRTIEFyY2hpdGVjdHVyZSBEZXNpZ24gVGVhbSB3ZWVrbHkgbWVldGluZyB0aW1lPG86cD48 L286cD48L3NwYW4+PC9oMz4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFsVGFibGUiIGJvcmRlcj0i MCIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBzdW1tYXJ5PSJFdmVudCBkZXRhaWxz IiBzdHlsZT0iZGlzcGxheTppbmxpbmUtdGFibGUiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHdpZHRo PSI5MCIgbm93cmFwPSIiIHZhbGlnbj0idG9wIiBzdHlsZT0id2lkdGg6NjcuNXB0O3BhZGRpbmc6 MGluIDEyLjBwdCA3LjVwdCAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6Izg4ODg4OCI+V2hlbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC90ZD4NCjx0ZCB2YWxpZ249InRvcCIgc3R5bGU9InBhZGRpbmc6MGluIDBpbiA3LjVwdCAw aW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1 cHQiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDA4ODAwIj5DaGFuZ2VkOg0KPC9zcGFu Pjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+RnJpIDIwMjAtMDktMjUgMTA6 MDAg4oCTIDExOjAwDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5FYXN0ZXJu IFRpbWUgLSBUb3JvbnRvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0i OTAiIG5vd3JhcD0iIiB2YWxpZ249InRvcCIgc3R5bGU9IndpZHRoOjY3LjVwdDtwYWRkaW5nOjBp biAxMi4wcHQgNy41cHQgMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiM4ODg4ODgiPldoZXJlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L3RkPg0KPHRkIHZhbGlnbj0idG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGluIDcuNXB0IDBp biI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVw dCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIi PjxhIGhyZWY9Imh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00YzNkNzM5 NWExNWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNSI+aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2ou cGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1PC9hPjwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj4NCiAoPGEgaHJlZj0iaHR0cHM6Ly9uYW0w Ni5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3 Lmdvb2dsZS5jb20lMkZ1cmwlM0ZxJTNEaHR0cHMlMjUzQSUyNTJGJTI1MkZpZXRmLndlYmV4LmNv bSUyNTJGaWV0ZiUyNTJGai5waHAlMjUzRk1USUQlMjUzRG00YzNkNzM5NWExNWRhZDFlZDhjMGY5 NTQ1Mjc5NGMyNSUyNnNhJTNERCUyNnVzdCUzRDE2MDEwMTExMjgxMjQwMDAlMjZ1c2clM0RBT3ZW YXcydEhEempMZm8yU0h6RWVOWEtZRWY3JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWlj cm9zb2Z0LmNvbSU3QzgxYjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4 NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2MDA3NjQzNzY0OCZhbXA7 c2RhdGE9aW5IM0htTGtBMjd1cSUyRjRiQ3cxeTJKbjVQRkczYlFwY0VmemlKbldqV0JVJTNEJmFt cDtyZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjAwQ0Mi Pm1hcDwvc3Bhbj48L2E+KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjwv dHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIgdmFsaWduPSJ0b3AiIHN0eWxlPSJ3 aWR0aDo2Ny41cHQ7cGFkZGluZzowaW4gMTIuMHB0IDMuMHB0IDBpbiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5Kb2luaW5nIGluZm88 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgdmFsaWduPSJ0b3AiIHN0 eWxlPSJwYWRkaW5nOjBpbiAwaW4gMy4wcHQgMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIy MjIiPkpvaW4gd2l0aCBHb29nbGUgTWVldDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIgc3R5bGU9IndpZHRo OjY3LjVwdDtwYWRkaW5nOjBpbiAxMi4wcHQgNy41cHQgMGluIj48L3RkPg0KPHRkIHZhbGlnbj0i dG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGluIDcuNXB0IDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGbWVldC5nb29nbGUuY29tJTJGaWtp LXRwYWMtaGRoJmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Qzgx Yjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2MDA3NjQ0NzYzNyZhbXA7c2RhdGE9ZHpqJTJGNUFm bkV0UnQlMkZabnZQNFljZHZpZWRTd3ozZFNpVjZiZThFWnRMVGslM0QmYW1wO3Jlc2VydmVkPTAi IHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iY29sb3I6IzIyMDBDQyI+bWVldC5nb29nbGUu Y29tL2lraS10cGFjLWhkaDwvc3Bhbj48L2E+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIg dmFsaWduPSJ0b3AiIHN0eWxlPSJ3aWR0aDo2Ny41cHQ7cGFkZGluZzowaW4gMTIuMHB0IDcuNXB0 IDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj ODg4ODg4Ij5DYWxlbmRhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0 ZCB2YWxpZ249InRvcCIgc3R5bGU9InBhZGRpbmc6MGluIDBpbiA3LjVwdCAwaW4iPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNv bSI+ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjkwIiBub3dyYXA9IiIgdmFsaWduPSJ0 b3AiIHN0eWxlPSJ3aWR0aDo2Ny41cHQ7cGFkZGluZzowaW4gMTIuMHB0IDcuNXB0IDBpbiI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5X aG88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgdmFsaWduPSJ0b3Ai IHN0eWxlPSJwYWRkaW5nOjBpbiAwaW4gNy41cHQgMGluIj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9y bWFsVGFibGUiIGJvcmRlcj0iMCIgY2VsbHNwYWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIj4NCjx0 Ym9keT4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBp biA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv dGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJtYWlsdG86bWNoYXJsZXNyQGdtYWls LmNvbSI+bWNoYXJsZXNyQGdtYWlsLmNvbTwvYT48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojODg4ODg4Ij4NCiAtIG9yZ2FuaXplcjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMy MjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv dGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRp bmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Im1haWx0bzpuY2Ftd2luZ0Bj aXNjby5jb20iPm5jYW13aW5nQGNpc2NvLmNvbTwvYT48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6 Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+ 4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGlu Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0i bm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRv OnhpbnhpbkBpb3RleC5pbyI+eGlueGluQGlvdGV4LmlvPC9hPjwvc3Bhbj48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3 aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIy MjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBp biAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNs YXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJt YWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20iPmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9h Pjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0 ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9 InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWlu ZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMjIyMjIyIj5UaG9tYXMgRm9zc2F0aTwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtw YWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5z bGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5OZWQgU21pdGg8L3NwYW4+PC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBz dHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3 LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTou MDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48 c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+Wmh1 LCBCaW5nPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRy Pg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBp biAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDot Ljc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBz dHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRl eHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Im1haWx0bzplbGVhckBjaXNjby5jb20iPmVsZWFyQGNp c2NvLmNvbTwvYT48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+ DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41 cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5k ZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0K PHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRp diBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRvOm1kYkBqdW5pcGVyLm5ldCI+bWRi QGp1bmlwZXIubmV0PC9hPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIy Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0K PC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBp biA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv dGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48YSBocmVmPSJtYWlsdG86am9kb25vZ2hAcXRpLnF1 YWxjb21tLmNvbSI+am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbTwvYT48L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHls ZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVw dCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3Bh biBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+Sm9lIE1h bGNvbG0gKGpvbWFsY29sKTwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIy Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0K PC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBp biA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv dGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5QZXRlIExvc2NvY2NvPC9zcGFuPjwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9 IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMy MjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQg MGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4g Y2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9 Im1haWx0bzpzaHdldGhhYkBjaXNjby5jb20iPnNod2V0aGFiQGNpc2NvLmNvbTwvYT48L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9 IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5n OjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJv dHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43 NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIy MiI+PGEgaHJlZj0ibWFpbHRvOmxlaS56aGFuZ0BpZXguZWMiPmxlaS56aGFuZ0BpZXguZWM8L2E+ PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRk IHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4i Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMy MjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0i cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5k ZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMyMjIyMjIiPjxhIGhyZWY9Im1haWx0bzpwcm93ZUBtaXRyZS5vcmciPnByb3dlQG1pdHJlLm9y ZzwvYT48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+ DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGlu IDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0u NzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0 eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzIyMjIyMiI+Tmljb2xhZSBQYWxhZGk8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41 cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCi PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Fy aWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4N CjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90 cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFpbHRvOmxn bEBpc2xhbmQtcmVzb3J0LmNvbSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPjwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTci IHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGlu IDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9t Oi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48 YSBocmVmPSJtYWlsdG86bWF0aGlhcy5icm9zc2FyZEBhcm0uY29tIj5tYXRoaWFzLmJyb3NzYXJk QGFybS5jb208L2E+PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3Ry Pg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIgc3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcu NXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWlu ZGVudDotLjc1cHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4N Cjx0ZCBzdHlsZT0icGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1ib3R0b206LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMyMjIyMjIiPkhlbmsgQmlya2hvbHo8L3NwYW4+PC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lk dGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIy MiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4g MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFz cz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0ibWFp bHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPjwvc3Bh bj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0 aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIy Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRp bmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t Ym90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDot Ljc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIy MjIyIj5QZXRlciBMb3Njb2Njbzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIy MjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3Rk Pg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTciIHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5n OjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i dGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5IZWxibGUsIFNhcmFoIEMuPC9zcGFuPjwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvdGQ+DQo8L3RyPg0KPHRyPg0KPHRkIHdpZHRoPSIxNyIg c3R5bGU9IndpZHRoOjcuNXB0O3BhZGRpbmc6MGluIDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2Nv bG9yOiMyMjIyMjIiPuKAojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC90ZD4NCjx0ZCBzdHlsZT0icGFkZGluZzowaW4g Ny41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206 LjA1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+ PHNwYW4gY2xhc3M9Im5vdHJhbnNsYXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxh IGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPjwvc3Bhbj48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjx0cj4NCjx0ZCB3aWR0aD0iMTci IHN0eWxlPSJ3aWR0aDo3LjVwdDtwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjojMjIyMjIyIj7igKI8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvdGQ+DQo8dGQgc3R5bGU9InBhZGRpbmc6MGlu IDcuNXB0IDBpbiAwaW4iPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9t Oi4wNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjc1cHQi PjxzcGFuIGNsYXNzPSJub3RyYW5zbGF0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5U aG9tYXMgSGFyZGpvbm88L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwv dHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0id2lkdGg6Ny41cHQ7cGFkZGluZzowaW4g Ny41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQt aW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIyMjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3Rk Pg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBjbGFzcz0ibm90cmFuc2xhdGUiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+VGhvbWFzIEZvc3NhdGk8L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgd2lkdGg9IjE3IiBzdHlsZT0i d2lkdGg6Ny41cHQ7cGFkZGluZzowaW4gNy41cHQgMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uNzVwdCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzIy MjIyMiI+4oCiPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOjBpbiA3LjVwdCAw aW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTouMDVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS43NXB0Ij48c3BhbiBj bGFzcz0ibm90cmFuc2xhdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+R3Vpbm4sIEFu ZHJldyBMLjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjwv dGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmIj48YSBocmVmPSJodHRwczov L25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYl MkZ3d3cuZ29vZ2xlLmNvbSUyRmNhbGVuZGFyJTJGZXZlbnQlM0ZhY3Rpb24lM0RWSUVXJTI2ZWlk JTNEYVd4c2JuQTFaMjkyYkd4ek5YVnhNbTExYnpRd1kyaG5jR05mTWpBeU1EQTVNakpVTVRRd01E QXdXaUJrZEdoaGJHVnlRRzFwWTNKdmMyOW1kQzVqYjIwJTI2dG9rJTNETVRramJXTm9ZWEpzWlhO eVFHZHRZV2xzTG1OdmJXRTRZemM1WlRnMll6QTRZbUptWldZMU5tSmhZamRqTURobE16QmxOamhp WkRCaE5UVmxOMlUlMjZjdHolM0RBbWVyaWNhJTI1MkZUb3JvbnRvJTI2aGwlM0RlbiUyNmVzJTNE MCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5 ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdiYiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3 JTdDMSU3QzAlN0M2MzczNjE3NjAwNzY0NDc2MzcmYW1wO3NkYXRhPWpVdFlkTExPeEwlMkI1aWZJ bDZ1akozU2d0MHI3Q2FaWUlZRDFaWHE4bGpJWSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMyMjAwQ0MiPm1vcmUNCiBkZXRhaWxzIMK7PC9zcGFuPjwvYT48bzpwPjwvbzpw Pjwvc3Bhbj48L2I+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+TWVldGlu ZyBsaW5rOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9 Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRw cyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGdXJsJTNGcSUzRGh0dHBzJTI1M0ElMjUyRiUyNTJG aWV0Zi53ZWJleC5jb20lMjUyRmlldGYlMjUyRmoucGhwJTI1M0ZNVElEJTI1M0RtNGMzZDczOTVh MTVkYWQxZWQ4YzBmOTU0NTI3OTRjMjUlMjZzYSUzREQlMjZ1c3QlM0QxNjAxMDExMTI4MTIzMDAw JTI2dXNnJTNEQU92VmF3MFItajNtVWdrVzVHeGVGN2tGdjhSXyZhbXA7ZGF0YT0wMiU3QzAxJTdD ZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdi YiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3NjAw NzY0NTc2MzImYW1wO3NkYXRhPVRmTHZaQk42bk4yblYycXNybTAlMkI4bGlacUNsUzBtNThjT0V6 bk8lMkZobzJ3JTNEJmFtcDtyZXNlcnZlZD0wIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9pZXRm LndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0 YzI1PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPk1lZXRpbmcg bnVtYmVyOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjYxMCAzNjYg NzUwPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+UGFzc3dvcmQ6PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+NHZZMmFTNlg4REY8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj5Ib3N0IGtleTo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj44MjA4MjI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBpbjttYXJn aW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW4iPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 aDUgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPk1vcmUgd2F5cyB0byBqb2lu PG86cD48L286cD48L3NwYW4+PC9oNT4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBzdHlsZT0ibWFyZ2lu OjBpbjttYXJnaW4tYm90dG9tOi4wMDAxcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izg4ODg4OCI+ R29pbmcgKDxhIGhyZWY9Im1haWx0bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20iPmR0aGFsZXJAbWlj cm9zb2Z0LmNvbTwvYT4pPyZuYnNwOyZuYnNwOyZuYnNwOzwvc3Bhbj48c3Ryb25nPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzIyMjIyMiI+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZj YWxlbmRhciUyRmV2ZW50JTNGYWN0aW9uJTNEUkVTUE9ORCUyNmVpZCUzRGFXeHNibkExWjI5MmJH eHpOWFZ4TW0xMWJ6UXdZMmhuY0dOZk1qQXlNREE1TWpKVU1UUXdNREF3V2lCa2RHaGhiR1Z5UUcx cFkzSnZjMjltZEM1amIyMCUyNnJzdCUzRDElMjZ0b2slM0RNVGtqYldOb1lYSnNaWE55UUdkdFlX bHNMbU52YldFNFl6YzVaVGcyWXpBNFltSm1aV1kxTm1KaFlqZGpNRGhsTXpCbE5qaGlaREJoTlRW bE4yVSUyNmN0eiUzREFtZXJpY2ElMjUyRlRvcm9udG8lMjZobCUzRGVuJTI2ZXMlM0QwJmFtcDtk YXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzgxYjk0OGY2MjlmYzQyN2Rh YTZkMDhkODVkMjRhN2JiJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdD MCU3QzYzNzM2MTc2MDA3NjQ1NzYzMiZhbXA7c2RhdGE9WTROOFJGbE9ITjI5NlhaYXZudzU3d2FG YXRNYTZvcW9tR0NXTXhNakFrRSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMyMjAwQ0MiPlllczwvc3Bhbj48L2E+PC9zcGFuPjwvc3Ryb25nPjxzdHJvbmc+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMjIyMjIyO2ZvbnQtd2VpZ2h0Om5vcm1hbCI+DQogLSA8L3NwYW4+PC9zdHJv bmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Imh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy Rnd3dy5nb29nbGUuY29tJTJGY2FsZW5kYXIlMkZldmVudCUzRmFjdGlvbiUzRFJFU1BPTkQlMjZl aWQlM0RhV3hzYm5BMVoyOTJiR3h6TlhWeE1tMTFielF3WTJobmNHTmZNakF5TURBNU1qSlVNVFF3 TURBd1dpQmtkR2hoYkdWeVFHMXBZM0p2YzI5bWRDNWpiMjAlMjZyc3QlM0QzJTI2dG9rJTNETVRr amJXTm9ZWEpzWlhOeVFHZHRZV2xzTG1OdmJXRTRZemM1WlRnMll6QTRZbUptWldZMU5tSmhZamRq TURobE16QmxOamhpWkRCaE5UVmxOMlUlMjZjdHolM0RBbWVyaWNhJTI1MkZUb3JvbnRvJTI2aGwl M0RlbiUyNmVzJTNEMCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20l N0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdiYiU3QzcyZjk4OGJmODZmMTQxYWY5MWFi MmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3NjAwNzY0Njc2MjcmYW1wO3NkYXRhPWJoYm1k WkY1a3FjYnI1bG5RRVRrUnhDU1pjdTRYSE8yTWt0aXpoWldRQVUlM0QmYW1wO3Jlc2VydmVkPTAi PjxzcGFuIHN0eWxlPSJjb2xvcjojMjIwMENDIj5NYXliZTwvc3Bhbj48L2E+PC9zcGFuPjwvc3Ry b25nPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjIyMjIyO2ZvbnQtd2VpZ2h0Om5vcm1h bCI+DQogLSA8L3NwYW4+PC9zdHJvbmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyMjIy MjIiPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5j b20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGY2FsZW5kYXIlMkZldmVudCUz RmFjdGlvbiUzRFJFU1BPTkQlMjZlaWQlM0RhV3hzYm5BMVoyOTJiR3h6TlhWeE1tMTFielF3WTJo bmNHTmZNakF5TURBNU1qSlVNVFF3TURBd1dpQmtkR2hoYkdWeVFHMXBZM0p2YzI5bWRDNWpiMjAl MjZyc3QlM0QyJTI2dG9rJTNETVRramJXTm9ZWEpzWlhOeVFHZHRZV2xzTG1OdmJXRTRZemM1WlRn Mll6QTRZbUptWldZMU5tSmhZamRqTURobE16QmxOamhpWkRCaE5UVmxOMlUlMjZjdHolM0RBbWVy aWNhJTI1MkZUb3JvbnRvJTI2aGwlM0RlbiUyNmVzJTNEMCZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRo YWxlciU0MG1pY3Jvc29mdC5jb20lN0M4MWI5NDhmNjI5ZmM0MjdkYWE2ZDA4ZDg1ZDI0YTdiYiU3 QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczNjE3NjAwNzY0 Njc2MjcmYW1wO3NkYXRhPVUySFRmaUpxaUl5eU9lMlVkdGxpTVdoeXZOOWc5MlgweDF2Nk1nN2x0 NkklM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJjb2xvcjojMjIwMENDIj5Obzwvc3Bh bj48L2E+PC9zcGFuPjwvc3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzIyMjIyMiI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmdvb2dsZS5jb20lMkZjYWxl bmRhciUyRmV2ZW50JTNGYWN0aW9uJTNEVklFVyUyNmVpZCUzRGFXeHNibkExWjI5MmJHeHpOWFZ4 TW0xMWJ6UXdZMmhuY0dOZk1qQXlNREE1TWpKVU1UUXdNREF3V2lCa2RHaGhiR1Z5UUcxcFkzSnZj MjltZEM1amIyMCUyNnRvayUzRE1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZiV0U0WXpjNVpU ZzJZekE0WW1KbVpXWTFObUpoWWpkak1EaGxNekJsTmpoaVpEQmhOVFZsTjJVJTI2Y3R6JTNEQW1l cmljYSUyNTJGVG9yb250byUyNmhsJTNEZW4lMjZlcyUzRDAmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0 aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4NWQyNGE3YmIl N0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MzYxNzYwMDc2 NDc3NjIwJmFtcDtzZGF0YT1GeFhrcGZtMnhZJTJGTUlLT01TSSUyRnNXdmVacllJaUh5dE0yMnpC cW5XU2V5MCUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjAwQ0MiPm1v cmUNCiBvcHRpb25zIMK7PC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L3RkPg0K PC90cj4NCjx0cj4NCjx0ZCBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQ0ND Q0NDIDEuMHB0O2JhY2tncm91bmQ6I0Y2RjZGNjtwYWRkaW5nOjQuMHB0IDQuMHB0IDQuMHB0IDQu MHB0Ij4NCjxwPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4Ij5JbnZpdGF0aW9uIGZyb20NCjxh IGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy bD1odHRwcyUzQSUyRiUyRnd3dy5nb29nbGUuY29tJTJGY2FsZW5kYXIlMkYmYW1wO2RhdGE9MDIl N0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDODFiOTQ4ZjYyOWZjNDI3ZGFhNmQwOGQ4 NWQyNGE3YmIlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3 MzYxNzYwMDc2NDc3NjIwJmFtcDtzZGF0YT15NTg1cjR6Z09XQktITFl5N0x2Q3VSUnhPdWdBQ1Rq WUloTCUyRmUlMkJoSmFSZyUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPg0KR29v Z2xlIENhbGVuZGFyPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojODg4ODg4Ij5Zb3UgYXJlIHJlY2VpdmluZyB0aGlzIGNvdXJ0ZXN5IGVtYWlsIGF0IHRo ZSBhY2NvdW50DQo8YSBocmVmPSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj5kdGhhbGVy QG1pY3Jvc29mdC5jb208L2E+IGJlY2F1c2UgeW91IGFyZSBhbiBhdHRlbmRlZSBvZiB0aGlzIGV2 ZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojODg4ODg4 Ij5UbyBzdG9wIHJlY2VpdmluZyBmdXR1cmUgdXBkYXRlcyBmb3IgdGhpcyBldmVudCwgZGVjbGlu ZSB0aGlzIGV2ZW50LiBBbHRlcm5hdGl2ZWx5IHlvdSBjYW4gc2lnbiB1cCBmb3IgYSBHb29nbGUg YWNjb3VudCBhdA0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS9jYWxlbmRhci8iPmh0 dHBzOi8vd3d3Lmdvb2dsZS5jb20vY2FsZW5kYXIvPC9hPiBhbmQgY29udHJvbCB5b3VyIG5vdGlm aWNhdGlvbiBzZXR0aW5ncyBmb3IgeW91ciBlbnRpcmUgY2FsZW5kYXIuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM4ODg4ODgiPkZvcndhcmRpbmcgdGhpcyBp bnZpdGF0aW9uIGNvdWxkIGFsbG93IGFueSByZWNpcGllbnQgdG8gc2VuZCBhIHJlc3BvbnNlIHRv IHRoZSBvcmdhbml6ZXIgYW5kIGJlIGFkZGVkIHRvIHRoZSBndWVzdCBsaXN0LCBvciBpbnZpdGUg b3RoZXJzIHJlZ2FyZGxlc3Mgb2YgdGhlaXIgb3duIGludml0YXRpb24gc3RhdHVzLA0KIG9yIHRv IG1vZGlmeSB5b3VyIFJTVlAuIDxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3Rl Y3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnN1cHBvcnQuZ29vZ2xlLmNvbSUy RmNhbGVuZGFyJTJGYW5zd2VyJTJGMzcxMzUlMjNmb3J3YXJkaW5nJmFtcDtkYXRhPTAyJTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzgxYjk0OGY2MjlmYzQyN2RhYTZkMDhkODVkMjRh N2JiJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM2MTc2 MDA3NjQ4NzYxNSZhbXA7c2RhdGE9cG5DQVA4d2lJSmVCdVdNZFZNRHRqcHlkR01oSjJ2RXF4UGYw QXFNcnNDYyUzRCZhbXA7cmVzZXJ2ZWQ9MCI+DQpMZWFybiBNb3JlPC9hPi48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0K PC9odG1sPg0K --_000_BL0PR2101MB1027DBB2B2D488ECAC8684B2A3360BL0PR2101MB1027_-- From nobody Tue Oct 6 08:22:42 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00DCF3A0AF8 for ; Tue, 6 Oct 2020 08:18:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.996 X-Spam-Level: X-Spam-Status: No, score=-1.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com header.b=tE/KSnJh; dkim=pass (2048-bit key) header.d=gmail.com header.b=u0zkBlaY Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PCg9wLXlE0gp for ; Tue, 6 Oct 2020 08:18:18 -0700 (PDT) Received: from mail-ua1-x94a.google.com (mail-ua1-x94a.google.com [IPv6:2607:f8b0:4864:20::94a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCB7B3A0AF1 for ; Tue, 6 Oct 2020 08:18:17 -0700 (PDT) Received: by mail-ua1-x94a.google.com with SMTP id b12so748572uaj.2 for ; Tue, 06 Oct 2020 08:18:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=Sm9hkG/hx59n30c5IQRmQXcWP0w4cVaV40E4ELBhL/Y=; b=tE/KSnJhEOrcsIR8J6OCnhiMBpXGv2pNT1uGPYnbbkZM9nNDV+NX207fspzPIfjUlO 0qcjf9zQi1QXrV8tj6HkkxlzlZb6bFFVfIXHEQX9VNKXLGAEO64IMdr6YOkYGf74Yi/o 7oHSPGIfI83U6Bn5hoYTysS5m1sxfHq/Il0E/q0nAUU3grjdaT5oqzeSnOyOZYIHDtQq aQJWpje2vB1dIUi5YGIqM3L4u2ETJy9gIytE7fxDksTFsYVCxj7LZ4b5rUcTGkA8ysy1 DQuwDWR3pWJwz6ZG9FdKry6+awgYvRT8d0yYhhT4kBlKMqNcpoiYKk2uaqDsICFMpslM DXYw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:reply-to:sender:message-id:date:subject:from:to; bh=Sm9hkG/hx59n30c5IQRmQXcWP0w4cVaV40E4ELBhL/Y=; b=u0zkBlaY5bD/2ASZoxbe8z+UP6+bIZZgwHYpBXRax1g4p//i+nty/Zzt90kQtyRHuT vlAIq2eHmXfqME1uUB1gLf5H5FkYRd3cW1PTV7hCWnGKYH4rXtBm1ZHV6zTo4ZJzvkJn xsI/yxY7CRbKzXWhb4zSITDYUAjTCvAEh4L7KBCPcfBsBkjJQFbb8BG6Fets64XrOFtn oixtvn6N6E38yP1xUebzkc4qAROkyOA/6sq3HrT0mtNCm+PGYo1N9p4ulvt0QAx1aAyZ 3ctCdAoxuGUUgyk5Ux1/OkTeaWLTySw2b9tAzY3BWb6aVrqbnu61bMBcdsd5mq+Do/Ms cWvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:reply-to:sender:message-id:date :subject:from:to; bh=Sm9hkG/hx59n30c5IQRmQXcWP0w4cVaV40E4ELBhL/Y=; b=nLgRcL3v/H7ITzOIurPlPn8PO2JaLeaHYX9if0aO7I0ewntL+uAMqQCnTuwItk4l7n mg+nh8C5dD6PL67brbrolMXXXWrvqwszxrMMx3oZia5PQj6dkZwvCD9COpRN07sCy+Oj Nk8VBA74MG4M50sMtudRjVFpmMrYlPs2fkB5Ys7b89MR+mXQhJu4Zf9WdyQzvlRyRLSw ABDWIYOLDIJJXqH3LiBsn61mMAKCfG8WiAQY04GUiRVpaISTe80SB0AklTvSwsYzZ8J3 TnLd/FwPnnoG/uGM2T3KFc1CVQusRCwoRbW0OquvQYeNQOqhSHO9IABdJ9nHhg3OpyXK Pweg== X-Gm-Message-State: AOAM533N0g+l4DQFnzePbc0GrN3WWXtoYsDBSB29AbSAeMDk5+5wwPYB cbqGRrbA5uJ9Drs716lPEpPtQdY/QUTXxYBHYVQ= X-Google-Smtp-Source: ABdhPJyLHR5kRwR9QT8Ud0SpaLw7Ylcfbh4w+X5M48d9nbKCg3TGOpfXAEPzvR30wpOq1Gsyrgw+7JzJrKz70JgGJ2u1 MIME-Version: 1.0 X-Received: by 2002:a67:79d4:: with SMTP id u203mr3522604vsc.39.1601997496547; Tue, 06 Oct 2020 08:18:16 -0700 (PDT) Reply-To: mcharlesr@gmail.com Sender: Google Calendar Message-ID: <000000000000b6808605b1021b72@google.com> Date: Tue, 06 Oct 2020 15:18:16 +0000 From: mcharlesr@gmail.com To: rats@ietf.org, prowe@mitre.org, ncamwing@cisco.com, Nicolae Paladi , lgl@island-resort.com, xinxin@iotex.io, blueroofmusic@gmail.com, Thomas Fossati , mathias.brossard@arm.com, Ned Smith , Henk Birkholz , dthaler@microsoft.com, Peter Loscocco , "Zhu, Bing" , "Helble, Sarah C." , elear@cisco.com, mdb@juniper.net, lei.zhang@iex.ec, jodonogh@qti.qualcomm.com, Thomas Hardjono , "Joe Malcolm (jomalcol)" , Pete Loscocco , Thomas Fossati , "Guinn, Andrew L." , shwethab@cisco.com Content-Type: multipart/mixed; boundary="000000000000b6804505b1021b71" Archived-At: X-Mailman-Approved-At: Tue, 06 Oct 2020 08:22:37 -0700 Subject: [Rats] Invitation: RATS Architecture Design Team weekly meeting time @ Fri 2020-10-16 11:00 - 12:00 (EDT) (rats@ietf.org) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2020 15:18:22 -0000 --000000000000b6804505b1021b71 Content-Type: multipart/alternative; boundary="000000000000b6804205b1021b6f" --000000000000b6804205b1021b6f Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Content-Transfer-Encoding: base64 WW91IGhhdmUgYmVlbiBpbnZpdGVkIHRvIHRoZSBmb2xsb3dpbmcgZXZlbnQuDQoNClRpdGxlOiBS QVRTIEFyY2hpdGVjdHVyZSBEZXNpZ24gVGVhbSB3ZWVrbHkgbWVldGluZyB0aW1lDQpNZWV0aW5n ICANCmxpbms6aHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1 YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1TWVldGluZyAgDQpudW1iZXI6NjEwIDM2NiA3NTBQYXNz d29yZDo0dlkyYVM2WDhERkhvc3Qga2V5OjgyMDgyMk1vcmUgd2F5cyB0byBqb2luDQpXaGVuOiBG cmkgMjAyMC0xMC0xNiAxMTowMCDigJMgMTI6MDAgRWFzdGVybiBUaW1lIC0gVG9yb250bw0KV2hl cmU6ICANCmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElEPW00YzNkNzM5NWEx NWRhZDFlZDhjMGY5NTQ1Mjc5NGMyNQ0KDQpKb2luaW5nIGluZm86IEpvaW4gd2l0aCBHb29nbGUg TWVldA0KaHR0cHM6Ly9tZWV0Lmdvb2dsZS5jb20vaWtpLXRwYWMtaGRoDQoNCkNhbGVuZGFyOiBy YXRzQGlldGYub3JnDQpXaG86DQogICAgICogbWNoYXJsZXNyQGdtYWlsLmNvbSAtIG9yZ2FuaXpl cg0KICAgICAqIHByb3dlQG1pdHJlLm9yZw0KICAgICAqIG5jYW13aW5nQGNpc2NvLmNvbQ0KICAg ICAqIE5pY29sYWUgUGFsYWRpDQogICAgICogbGdsQGlzbGFuZC1yZXNvcnQuY29tDQogICAgICog eGlueGluQGlvdGV4LmlvDQogICAgICogYmx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20NCiAgICAgKiBU aG9tYXMgRm9zc2F0aQ0KICAgICAqIG1hdGhpYXMuYnJvc3NhcmRAYXJtLmNvbQ0KICAgICAqIE5l ZCBTbWl0aA0KICAgICAqIEhlbmsgQmlya2hvbHoNCiAgICAgKiBkdGhhbGVyQG1pY3Jvc29mdC5j b20NCiAgICAgKiBQZXRlciBMb3Njb2Njbw0KICAgICAqIFpodSwgQmluZw0KICAgICAqIEhlbGJs ZSwgU2FyYWggQy4NCiAgICAgKiBlbGVhckBjaXNjby5jb20NCiAgICAgKiBtZGJAanVuaXBlci5u ZXQNCiAgICAgKiBsZWkuemhhbmdAaWV4LmVjDQogICAgICogcmF0c0BpZXRmLm9yZw0KICAgICAq IGpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20NCiAgICAgKiBUaG9tYXMgSGFyZGpvbm8NCiAgICAg KiBKb2UgTWFsY29sbSAoam9tYWxjb2wpDQogICAgICogUGV0ZSBMb3Njb2Njbw0KICAgICAqIFRo b21hcyBGb3NzYXRpDQogICAgICogR3Vpbm4sIEFuZHJldyBMLg0KICAgICAqIHNod2V0aGFiQGNp c2NvLmNvbQ0KDQpFdmVudCBkZXRhaWxzOiAgDQpodHRwczovL3d3dy5nb29nbGUuY29tL2NhbGVu ZGFyL2V2ZW50P2FjdGlvbj1WSUVXJmVpZD1OVFJ0TTNGdU1YVXpZblZyTm0xaWNXSmpkR1JpTUdo dGREQWdjbUYwYzBCcFpYUm1MbTl5WncmdG9rPU1Ua2piV05vWVhKc1pYTnlRR2R0WVdsc0xtTnZi VGN4WmpBMU5HTTJNekl3Wm1ZNE9EWXhZVGxpTW1VeFl6WXlaR1ZpTURkaU16TTBaRGxrTnpBJmN0 ej1BbWVyaWNhJTJGVG9yb250byZobD1lbiZlcz0wDQoNCkludml0YXRpb24gZnJvbSBHb29nbGUg Q2FsZW5kYXI6IGh0dHBzOi8vd3d3Lmdvb2dsZS5jb20vY2FsZW5kYXIvDQoNCllvdSBhcmUgcmVj ZWl2aW5nIHRoaXMgY291cnRlc3kgZW1haWwgYXQgdGhlIGFjY291bnQgcmF0c0BpZXRmLm9yZyBi ZWNhdXNlICANCnlvdSBhcmUgYW4gYXR0ZW5kZWUgb2YgdGhpcyBldmVudC4NCg0KVG8gc3RvcCBy ZWNlaXZpbmcgZnV0dXJlIHVwZGF0ZXMgZm9yIHRoaXMgZXZlbnQsIGRlY2xpbmUgdGhpcyBldmVu dC4gIA0KQWx0ZXJuYXRpdmVseSB5b3UgY2FuIHNpZ24gdXAgZm9yIGEgR29vZ2xlIGFjY291bnQg YXQgIA0KaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS9jYWxlbmRhci8gYW5kIGNvbnRyb2wgeW91ciBu b3RpZmljYXRpb24gc2V0dGluZ3MgZm9yICANCnlvdXIgZW50aXJlIGNhbGVuZGFyLg0KDQpGb3J3 YXJkaW5nIHRoaXMgaW52aXRhdGlvbiBjb3VsZCBhbGxvdyBhbnkgcmVjaXBpZW50IHRvIHNlbmQg YSByZXNwb25zZSB0byAgDQp0aGUgb3JnYW5pemVyIGFuZCBiZSBhZGRlZCB0byB0aGUgZ3Vlc3Qg bGlzdCwgb3IgaW52aXRlIG90aGVycyByZWdhcmRsZXNzICANCm9mIHRoZWlyIG93biBpbnZpdGF0 aW9uIHN0YXR1cywgb3IgdG8gbW9kaWZ5IHlvdXIgUlNWUC4gTGVhcm4gbW9yZSBhdCAgDQpodHRw czovL3N1cHBvcnQuZ29vZ2xlLmNvbS9jYWxlbmRhci9hbnN3ZXIvMzcxMzUjZm9yd2FyZGluZw0K --000000000000b6804205b1021b6f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
=

You have been invited to the follo= wing event.

RATS Architecture Design Team weekl= y meeting time

When
F= ri 2020-10-16 11:00 =E2=80=93 12:00 Eastern Time= - Toronto
Where
https://ietf.webex.com/ietf/j.php?MTID= =3Dm4c3d7395a15dad1ed8c0f95452794c25 (map)
Joining info
Join with Google Meet
Calendar
rats@ietf.org
=
Who
mathias.brossard@arm.= com
•
= <= /tr>=
•
mcharlesr@gmail.com - organizer
•
prowe@mitr= e.org
•
ncamwin= g@cisco.com=
&#x= 2022;
Nicolae Paladi
•
=
lgl@island-resort.com
•
xinxin@iotex.io
•
blueroofmusic@gmail.com
•
Thomas Fossati
•
•= ;
Ned Smith=
&#x= 2022;
Henk Birkholz
•
dthaler@microsoft.com
Peter Loscocco
•
= Zhu, Bing
•
= Helble, Sarah C.
•
elear@cisco.com<= /span>
•
mdb@juniper.n= et
•
lei.zhang@= iex.ec=
•
rats= @ietf.org=
•
jodo= nogh@qti.qualcomm.com
•
Thomas Hardjono
•
Joe Malcolm (jomalcol)
•
= Pete Loscocco
<= span style=3D"font-family:Courier New,monospace">•
Thomas Fossati
•
Guinn, And= rew L.=
&#x= 2022;
shwethab@cisco.com
more details »
Meeting link:
https://ietf.webex.com/i= etf/j.php?MTID=3Dm4c3d7395a15dad1ed8c0f95452794c25
Meeting numb= er:
610 366 750
Password:
4vY2aS6X8DF
Host = key:
820822


More ways to join
=

Goi= ng (rats@ietf.org)?   <= span itemprop=3D"handler" itemscope itemtype=3D"http://schema.org/HttpActio= nHandler">Yes - Maybe= - <= span itemprop=3D"potentialaction" itemscope itemtype=3D"http://schema.org/R= svpAction">= No    more options »

Invitation from Google Calendar

You a= re receiving this courtesy email at the account rats@ietf.org because you a= re an attendee of this event.

To stop receiving future updates for th= is event, decline this event. Alternatively you can sign up for a Google ac= count at https://www.google.com/calendar/ and control your notification set= tings for your entire calendar.

Forwarding this invitation could allo= w any recipient to send a response to the organizer and be added to the gue= st list, or invite others regardless of their own invitation status, or to = modify your RSVP. Learn More.

 --000000000000b6804205b1021b6f Content-Type: text/calendar; charset="UTF-8"; method=REQUEST Content-Transfer-Encoding: 7bit BEGIN:VCALENDAR PRODID:-//Google Inc//Google Calendar 70.9054//EN VERSION:2.0 CALSCALE:GREGORIAN METHOD:REQUEST BEGIN:VEVENT DTSTART:20201016T150000Z DTEND:20201016T160000Z DTSTAMP:20201006T151816Z ORGANIZER;CN=mcharlesr@gmail.com:mailto:mcharlesr@gmail.com UID:54m3qn1u3buk6mbqbctdb0hmt0@google.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=prowe@mitre.org;X-NUM-GUESTS=0:mailto:prowe@mitre.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=ncamwing@cisco.com;X-NUM-GUESTS=0:mailto:ncamwing@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Nicolae Paladi;X-NUM-GUESTS=0:mailto:nicolae.paladi@ri.se ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=lgl@island-resort.com;X-NUM-GUESTS=0:mailto:lgl@island-resort.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=xinxin@iotex.io;X-NUM-GUESTS=0:mailto:xinxin@iotex.io ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=blueroofmusic@gmail.com;X-NUM-GUESTS=0:mailto:blueroofmusic@gmail.c om ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:tho@koanlogic.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mathias.brossard@arm.com;X-NUM-GUESTS=0:mailto:mathias.brossard@arm .com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Ned Smith;X-NUM-GUESTS=0:mailto:ned.smith@intel.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Henk Birkholz;X-NUM-GUESTS=0:mailto:henk.birkholz@sit.fraunhofer.de ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=dthaler@microsoft.com;X-NUM-GUESTS=0:mailto:dthaler@microsoft.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Peter Loscocco;X-NUM-GUESTS=0:mailto:palosco@tycho.nsa.gov ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Zhu, Bing";X-NUM-GUESTS=0:mailto:bing.zhu@intel.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Helble, Sarah C.";X-NUM-GUESTS=0:mailto:sarah.helble@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=ACCEPTED;RSVP=TRUE ;CN=mcharlesr@gmail.com;X-NUM-GUESTS=0:mailto:mcharlesr@gmail.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=elear@cisco.com;X-NUM-GUESTS=0:mailto:elear@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=mdb@juniper.net;X-NUM-GUESTS=0:mailto:mdb@juniper.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=lei.zhang@iex.ec;X-NUM-GUESTS=0:mailto:lei.zhang@iex.ec ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=rats@ietf.org;X-NUM-GUESTS=0:mailto:rats@ietf.org ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=jodonogh@qti.qualcomm.com;X-NUM-GUESTS=0:mailto:jodonogh@qti.qualco mm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Hardjono;X-NUM-GUESTS=0:mailto:ietf-rats@hardjono.net ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Joe Malcolm (jomalcol);X-NUM-GUESTS=0:mailto:jomalcol@cisco.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Pete Loscocco;X-NUM-GUESTS=0:mailto:pete.loscocco@gmail.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=Thomas Fossati;X-NUM-GUESTS=0:mailto:thomas.fossati@arm.com ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN="Guinn, Andrew L.";X-NUM-GUESTS=0:mailto:andrew.guinn@jhuapl.edu ATTENDEE;CUTYPE=INDIVIDUAL;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP= TRUE;CN=shwethab@cisco.com;X-NUM-GUESTS=0:mailto:shwethab@cisco.com X-MICROSOFT-CDO-OWNERAPPTID:-196772150 CREATED:20201006T151813Z DESCRIPTION:
Meeting link:
h ttps://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452794c25
Meeting number:
610 366 750
Password:
4vY2 aS6X8DF
Host key:
820822


More ways to join
\n\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~ :~:~:~:~:~:~:~:~:~:~:~::~:~::-\nPlease do not edit this section of the desc ription.\n\nThis event has a video call.\nJoin: https://meet.google.com/iki -tpac-hdh\n\nView your event at https://www.google.com/calendar/event?actio n=VIEW&eid=NTRtM3FuMXUzYnVrNm1icWJjdGRiMGhtdDAgcmF0c0BpZXRmLm9yZw&tok=MTkjb WNoYXJsZXNyQGdtYWlsLmNvbTcxZjA1NGM2MzIwZmY4ODYxYTliMmUxYzYyZGViMDdiMzM0ZDlk NzA&ctz=America%2FToronto&hl=en&es=1.\n-::~:~::~:~:~:~:~:~:~:~:~:~:~:~:~:~: ~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~:~::~:~::- LAST-MODIFIED:20201006T151814Z LOCATION:https://ietf.webex.com/ietf/j.php?MTID=m4c3d7395a15dad1ed8c0f95452 794c25 SEQUENCE:0 STATUS:CONFIRMED SUMMARY:RATS Architecture Design Team weekly meeting time TRANSP:OPAQUE END:VEVENT END:VCALENDAR --000000000000b6804205b1021b6f-- --000000000000b6804505b1021b71 Content-Type: application/ics; name="invite.ics" Content-Disposition: attachment; filename="invite.ics" Content-Transfer-Encoding: base64 QkVHSU46VkNBTEVOREFSDQpQUk9ESUQ6LS8vR29vZ2xlIEluYy8vR29vZ2xlIENhbGVuZGFyIDcw LjkwNTQvL0VODQpWRVJTSU9OOjIuMA0KQ0FMU0NBTEU6R1JFR09SSUFODQpNRVRIT0Q6UkVRVUVT VA0KQkVHSU46VkVWRU5UDQpEVFNUQVJUOjIwMjAxMDE2VDE1MDAwMFoNCkRURU5EOjIwMjAxMDE2 VDE2MDAwMFoNCkRUU1RBTVA6MjAyMDEwMDZUMTUxODE2Wg0KT1JHQU5JWkVSO0NOPW1jaGFybGVz ckBnbWFpbC5jb206bWFpbHRvOm1jaGFybGVzckBnbWFpbC5jb20NClVJRDo1NG0zcW4xdTNidWs2 bWJxYmN0ZGIwaG10MEBnb29nbGUuY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xF PVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPXBy b3dlQG1pdHJlLm9yZztYLU5VTS1HVUVTVFM9MDptYWlsdG86cHJvd2VAbWl0cmUub3JnDQpBVFRF TkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVE Uy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPW5jYW13aW5nQGNpc2NvLmNvbTtYLU5VTS1HVUVTVFM9 MDptYWlsdG86bmNhbXdpbmdAY2lzY28uY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtS T0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NO PU5pY29sYWUgUGFsYWRpO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpuaWNvbGFlLnBhbGFkaUByaS5z ZQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNU QVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1sZ2xAaXNsYW5kLXJlc29ydC5jb207WC1O VU0tR1VFU1RTPTA6bWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNvbQ0KQVRURU5ERUU7Q1VUWVBF PUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JT VlA9DQogVFJVRTtDTj14aW54aW5AaW90ZXguaW87WC1OVU0tR1VFU1RTPTA6bWFpbHRvOnhpbnhp bkBpb3RleC5pbw0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBB TlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1ibHVlcm9vZm11c2ljQGdt YWlsLmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jDQogb20N CkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFU PU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049VGhvbWFzIEZvc3NhdGk7WC1OVU0tR1VFU1RT PTA6bWFpbHRvOnRob0Brb2FubG9naWMuY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtS T0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NO PW1hdGhpYXMuYnJvc3NhcmRAYXJtLmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86bWF0aGlhcy5i cm9zc2FyZEBhcm0NCiAuY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1Q QVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPU5lZCBTbWl0 aDtYLU5VTS1HVUVTVFM9MDptYWlsdG86bmVkLnNtaXRoQGludGVsLmNvbQ0KQVRURU5ERUU7Q1VU WVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9O O1JTVlA9DQogVFJVRTtDTj1IZW5rIEJpcmtob2x6O1gtTlVNLUdVRVNUUz0wOm1haWx0bzpoZW5r LmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtS T0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NO PWR0aGFsZXJAbWljcm9zb2Z0LmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86ZHRoYWxlckBtaWNy b3NvZnQuY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFO VDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPVBldGVyIExvc2NvY2NvO1gt TlVNLUdVRVNUUz0wOm1haWx0bzpwYWxvc2NvQHR5Y2hvLm5zYS5nb3YNCkFUVEVOREVFO0NVVFlQ RT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtS U1ZQPQ0KIFRSVUU7Q049IlpodSwgQmluZyI7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOmJpbmcuemh1 QGludGVsLmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBB TlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj0iSGVsYmxlLCBTYXJhaCBD LiI7WC1OVU0tR1VFU1RTPTA6bWFpbHRvOnNhcmFoLmhlbGJsZUBqaHVhcGwuZWR1DQpBVFRFTkRF RTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1BQ0NFUFRF RDtSU1ZQPVRSVUUNCiA7Q049bWNoYXJsZXNyQGdtYWlsLmNvbTtYLU5VTS1HVUVTVFM9MDptYWls dG86bWNoYXJsZXNyQGdtYWlsLmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1S RVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1lbGVh ckBjaXNjby5jb207WC1OVU0tR1VFU1RTPTA6bWFpbHRvOmVsZWFyQGNpc2NvLmNvbQ0KQVRURU5E RUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMt QUNUSU9OO1JTVlA9DQogVFJVRTtDTj1tZGJAanVuaXBlci5uZXQ7WC1OVU0tR1VFU1RTPTA6bWFp bHRvOm1kYkBqdW5pcGVyLm5ldA0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEt UEFSVElDSVBBTlQ7UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1sZWkuemhh bmdAaWV4LmVjO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpsZWkuemhhbmdAaWV4LmVjDQpBVFRFTkRF RTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1B Q1RJT047UlNWUD0NCiBUUlVFO0NOPXJhdHNAaWV0Zi5vcmc7WC1OVU0tR1VFU1RTPTA6bWFpbHRv OnJhdHNAaWV0Zi5vcmcNCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJ Q0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049am9kb25vZ2hAcXRp LnF1YWxjb21tLmNvbTtYLU5VTS1HVUVTVFM9MDptYWlsdG86am9kb25vZ2hAcXRpLnF1YWxjbw0K IG1tLmNvbQ0KQVRURU5ERUU7Q1VUWVBFPUlORElWSURVQUw7Uk9MRT1SRVEtUEFSVElDSVBBTlQ7 UEFSVFNUQVQ9TkVFRFMtQUNUSU9OO1JTVlA9DQogVFJVRTtDTj1UaG9tYXMgSGFyZGpvbm87WC1O VU0tR1VFU1RTPTA6bWFpbHRvOmlldGYtcmF0c0BoYXJkam9uby5uZXQNCkFUVEVOREVFO0NVVFlQ RT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQQU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtS U1ZQPQ0KIFRSVUU7Q049Sm9lIE1hbGNvbG0gKGpvbWFsY29sKTtYLU5VTS1HVUVTVFM9MDptYWls dG86am9tYWxjb2xAY2lzY28uY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJF US1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPVBldGUg TG9zY29jY287WC1OVU0tR1VFU1RTPTA6bWFpbHRvOnBldGUubG9zY29jY29AZ21haWwuY29tDQpB VFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVBTDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1O RUVEUy1BQ1RJT047UlNWUD0NCiBUUlVFO0NOPVRob21hcyBGb3NzYXRpO1gtTlVNLUdVRVNUUz0w Om1haWx0bzp0aG9tYXMuZm9zc2F0aUBhcm0uY29tDQpBVFRFTkRFRTtDVVRZUEU9SU5ESVZJRFVB TDtST0xFPVJFUS1QQVJUSUNJUEFOVDtQQVJUU1RBVD1ORUVEUy1BQ1RJT047UlNWUD0NCiBUUlVF O0NOPSJHdWlubiwgQW5kcmV3IEwuIjtYLU5VTS1HVUVTVFM9MDptYWlsdG86YW5kcmV3Lmd1aW5u QGpodWFwbC5lZHUNCkFUVEVOREVFO0NVVFlQRT1JTkRJVklEVUFMO1JPTEU9UkVRLVBBUlRJQ0lQ QU5UO1BBUlRTVEFUPU5FRURTLUFDVElPTjtSU1ZQPQ0KIFRSVUU7Q049c2h3ZXRoYWJAY2lzY28u Y29tO1gtTlVNLUdVRVNUUz0wOm1haWx0bzpzaHdldGhhYkBjaXNjby5jb20NClgtTUlDUk9TT0ZU LUNETy1PV05FUkFQUFRJRDotMTk2NzcyMTUwDQpDUkVBVEVEOjIwMjAxMDA2VDE1MTgxM1oNCkRF U0NSSVBUSU9OOjxkZD5NZWV0aW5nIGxpbms6PGJyPjwvZGQ+PGRkPjxkbD48ZGQ+PGEgaHJlZj0i aHR0cHM6Ly9pZXRmLndlYg0KIGV4LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFk MWVkOGMwZjk1NDUyNzk0YzI1IiB0YXJnZXQ9Il9ibGFuayI+aA0KIHR0cHM6Ly9pZXRmLndlYmV4 LmNvbS9pZXRmL2oucGhwP01USUQ9bTRjM2Q3Mzk1YTE1ZGFkMWVkOGMwZjk1NDUyNzk0YzI1PC9h Pg0KIDwvZGQ+PGR0Pk1lZXRpbmcgbnVtYmVyOjwvZHQ+PGRkPjYxMCAzNjYgNzUwPC9kZD48ZHQ+ UGFzc3dvcmQ6PC9kdD48ZGQ+NHZZMg0KIGFTNlg4REY8L2RkPjxkdD5Ib3N0IGtleTo8L2R0Pjxk ZD44MjA4MjI8L2RkPjwvZGw+PGJyPjxicj48aDU+TW9yZSB3YXlzIHRvIA0KIGpvaW48L2g1Pjwv ZGQ+XG5cbi06On46fjo6fjp+On46fjp+On46fjp+On46fjp+On46fjp+On46fjp+On46fjp+On46 fjp+On46fg0KIDp+On46fjp+On46fjp+On46fjp+On46On46fjo6LVxuUGxlYXNlIGRvIG5vdCBl ZGl0IHRoaXMgc2VjdGlvbiBvZiB0aGUgZGVzYw0KIHJpcHRpb24uXG5cblRoaXMgZXZlbnQgaGFz IGEgdmlkZW8gY2FsbC5cbkpvaW46IGh0dHBzOi8vbWVldC5nb29nbGUuY29tL2lraQ0KIC10cGFj LWhkaFxuXG5WaWV3IHlvdXIgZXZlbnQgYXQgaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS9jYWxlbmRh ci9ldmVudD9hY3Rpbw0KIG49VklFVyZlaWQ9TlRSdE0zRnVNWFV6WW5Wck5tMWljV0pqZEdSaU1H aHRkREFnY21GMGMwQnBaWFJtTG05eVp3JnRvaz1NVGtqYg0KIFdOb1lYSnNaWE55UUdkdFlXbHNM bU52YlRjeFpqQTFOR00yTXpJd1ptWTRPRFl4WVRsaU1tVXhZell5WkdWaU1EZGlNek0wWkRsaw0K IE56QSZjdHo9QW1lcmljYSUyRlRvcm9udG8maGw9ZW4mZXM9MS5cbi06On46fjo6fjp+On46fjp+ On46fjp+On46fjp+On46fjp+Og0KIH46fjp+On46fjp+On46fjp+On46fjp+On46fjp+On46fjp+ On46fjp+On46On46fjo6LQ0KTEFTVC1NT0RJRklFRDoyMDIwMTAwNlQxNTE4MTRaDQpMT0NBVElP TjpodHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tNGMzZDczOTVhMTVkYWQx ZWQ4YzBmOTU0NTINCiA3OTRjMjUNClNFUVVFTkNFOjANClNUQVRVUzpDT05GSVJNRUQNClNVTU1B Ulk6UkFUUyBBcmNoaXRlY3R1cmUgRGVzaWduIFRlYW0gd2Vla2x5IG1lZXRpbmcgdGltZQ0KVFJB TlNQOk9QQVFVRQ0KRU5EOlZFVkVOVA0KRU5EOlZDQUxFTkRBUg0K --000000000000b6804505b1021b71-- From nobody Wed Oct 7 13:36:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8F7F3A135D; Wed, 7 Oct 2020 13:36:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.601 X-Spam-Level: X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Qlsw9Opc; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=Gv/u3Cee Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e4lMcij0T82I; Wed, 7 Oct 2020 13:36:30 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D0C03A1357; Wed, 7 Oct 2020 13:36:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=23252; q=dns/txt; s=iport; t=1602102990; x=1603312590; h=from:to:cc:subject:date:message-id:mime-version; bh=0O2/vM0ssMTlVhga1/pZ72WfXHd3jMJTCfXhcpSFTMQ=; b=Qlsw9OpcC8XxynPJGomqhMoZa+IEvbXqWfw+iNH5mkO89yjb5SmxRasg /LbEl8Op9ooNTiY0KErPDFEgpBFW6QM1HpqH/juQWnximKuQvIiCD3vbV FI0tVAILVsANbudi4brLjShxzpK00scdfop3mhPEXPwreuBoa9pIwgA7+ w=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A5Vb2ihT4NgKdrIaOEXwx+ROwntpsv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBNuJ6+9NlOfX9avnXD9I7ZWAtSUEd5pBH1?= =?us-ascii?q?8AhN4NlgMtSMiCFQXgLfHsYiB7eaYKVFJs83yhd0QAHsH4ag7Sv3St4D9UER?= =?us-ascii?q?L6ZkJ5I+3vEdvUiMK6n+m555zUZVBOgzywKbN/JRm7t0PfrM4T1IBjMa02jB?= =?us-ascii?q?DOpyhF?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D2BwBxJn5f/5xdJa1gHQEBAQEJARI?= =?us-ascii?q?BBQUBQIFPgSMvIy4HcCwtLyyIAwOVW4wmggeCaIJTA1UEBwEBAQoDAQEnBgI?= =?us-ascii?q?EAQGESgKCBwIlOBMCAwEBCwEBBQEBAQIBBgRthVwMhXUCFBsTAQElEgERAVA?= =?us-ascii?q?wJgEEAQ0NBhSDBTiBRk0DHw8BDp4rAoE5iGF0gTQTgm4BAQWBNFEDgyAYggk?= =?us-ascii?q?HAwaBOIFTgR+GL4QSG4FBP4FUgh8ugjdjA4FgK4Mdgi2QIYpNgRmbVQqCaIR?= =?us-ascii?q?Lgl+BVpIJoS2TGopwlSsCBAIEBQIOAQEFgWsjgVdwFYMkUBcCDY4fCwEXg06?= =?us-ascii?q?FFIUJATh0AhIjAgYKAQEDCXyLCC2CFwEB?= X-IronPort-AV: E=Sophos;i="5.77,348,1596499200"; d="p7s'?scan'208,217";a="573911866" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 07 Oct 2020 20:36:28 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id 097KaSkN028708 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 7 Oct 2020 20:36:28 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 7 Oct 2020 15:36:28 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 7 Oct 2020 15:36:27 -0500 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Wed, 7 Oct 2020 15:36:27 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DwSwSaAosKznxHy36qk899X9ek2pWU2V2oNur2uQpRqUcyT1iDQJw31ox4/Mc32PikDitH1R9qzt726NHytZaY2kYBRQLDUzHJLPuHkevaOObs2WEnRB9Zex4kSpzxKLqLqP3I7A6/Cc6i6AnyasQ/p8ImdvThTLqkugcwfBtr5KBj+ftWlC0T0jjkstNLNUIGYTN6LPzUW+cR3DKA/XYwuhpCnMTZ2ywhxo+3yrH9EDBPfWy7BoDw3R9Ny3m4V1+iiDiWhuHntut3uQhm0cOagqsttUx6oCMr7V/wdeh212Gu8/ngrpDCPrrHa+ycJtszdev2dfZeGMmiQNKTfPxA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dfjsyRoQsBp9+ddMXYuGnu2Qt+79BLPjbgALMoTfxwA=; b=mIpz3STbfs8hC95UbuiF2ZadevV+DUs0eNl7WdBmoHHuEcwJHTW6IJett9Y7P3PT2GL5KgwIz7U5SjIDHtfsxQPCdAIkoZLb3tRw5MKg74AKN6k1/xOgZhZjU3+BzJTxS6m/mpn+t09plFfuaYqy2XqThWVAjSQlNaFaQVXpSbDoHm/2HAuuKyBs4GYGDkjSPqNHLuFHmUxtCIcFvq88g0Xu229f73G/jm69YTGJ/IhF0fAz6d0pk1ZMeQT7tHukHEN5zWw1mCb2Dxu98DC3VMUwAE7RV1C9y2NAuxG0DQuwaPB+t/KXrBzFfvqPliADllxw17UfZqG8Kk4NGv4pGw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dfjsyRoQsBp9+ddMXYuGnu2Qt+79BLPjbgALMoTfxwA=; b=Gv/u3CeeirY7aCGgxBc4FGwI2DwEPtrLkIsGXYlDSK+V847EwiojqXCapL6jDDMrvSEzD5fUMcdAuSmkg1G6S7hTO4ng+qTEedYMmTZEMrY75Qt7k6o0i849RWjCC5uUhnkQe4iuUV7JDTGOn1zTuKwmE92q53LrxDWG/vY/OJI= Received: from BYAPR11MB3125.namprd11.prod.outlook.com (2603:10b6:a03:8e::32) by BYAPR11MB3782.namprd11.prod.outlook.com (2603:10b6:a03:fd::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.32; Wed, 7 Oct 2020 20:36:26 +0000 Received: from BYAPR11MB3125.namprd11.prod.outlook.com ([fe80::9d04:596a:9d5a:ca5b]) by BYAPR11MB3125.namprd11.prod.outlook.com ([fe80::9d04:596a:9d5a:ca5b%6]) with mapi id 15.20.3433.044; Wed, 7 Oct 2020 20:36:26 +0000 From: "Eric Voit (evoit)" To: "Panwei (William)" , "Birkholz, Henk" , "Eckel, Michael" , Guy Fedorkow , "Laffey, Tom (HPE Aruba)" , "frank.xialiang@huawei.com" CC: "rats@ietf.org" , "draft-ietf-rats-yang-tpm-charra@ietf.org" Thread-Topic: Reducing YANG output objects with the tpm12-challenge-response-attestation RPC Thread-Index: Adac5ZonsmNnYPBmSvKhkjUhhfk9pg== Date: Wed, 7 Oct 2020 20:36:26 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [2001:420:c0c4:1003::51] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 72f9ebf2-3d59-487e-cbb5-08d86b00a99a x-ms-traffictypediagnostic: BYAPR11MB3782: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: lgljT4hsZM3+hUu1EtJGKsQB9u8aMe35jYmfbyc5KhVEM2PHoJA0fkWPlg2jNteTScPbCC7mSwr2FQ9nSitF/yh1rzZh4YxR17OzHskdymIXBGVyXDxP0WS81hW3sv756+pUsHdKA5+a58i3TRPbe6qxpMw+hlb4Eq48zr3RTwC39onSnzcw+gsq/yehLq0QWviz6msIUDoB+xa3otgBsquwQ05bcSNRxNyofdDb9Ew/Px7uZMuWDw/Km0og7HF8PTihf5fppbt9X6Zml/DMgw1ogk8t0qVf3vmzR2mnmj6rgegWSvR8H9+JTn87tnur/0KpdSxaDL4QAFn0AKfmwVz3MHv2lwF9K5mbwXE2SsmK6hUgi+y91YnE7VztZJmzaMlWq5wTRhOyo/pkk7ORPS0lzo6PJPkOZb3mWp/S+zV/df+4uxS9nLAh8Zq0XKaYORv0InR3LDDQZcVEOwrpTruTBmEfnWOI2F9Rnju5pvc= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BYAPR11MB3125.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(136003)(346002)(376002)(396003)(39860400002)(86362001)(55016002)(52536014)(316002)(99936003)(54906003)(110136005)(5660300002)(76116006)(2906002)(7696005)(6506007)(33656002)(478600001)(186003)(966005)(8936002)(4326008)(166002)(83080400001)(83380400001)(66446008)(71200400001)(64756008)(66476007)(66556008)(66616009)(9686003)(66946007)(8676002)(43620500001)(15398625002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; boundary="----=_NextPart_000_1144_01D69CC7.F713E730"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BYAPR11MB3125.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 72f9ebf2-3d59-487e-cbb5-08d86b00a99a X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2020 20:36:26.0812 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Cv5dDKSafHxa76m1r2mnZi3gpt6umKNiBKFI1QrUjS5xpBYe5SiLjEDoZpvBaQWX X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3782 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: [Rats] Reducing YANG output objects with the tpm12-challenge-response-attestation RPC X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2020 20:36:33 -0000 ------=_NextPart_000_1144_01D69CC7.F713E730 Content-Type: multipart/alternative; boundary="----=_NextPart_001_1145_01D69CC7.F7140E40" ------=_NextPart_001_1145_01D69CC7.F7140E40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I am hoping we can simplify what is in Charra's TPM1.2 quote into something similar to what is now in the TPM2.0 quote. Does anyone know who wrote the original TPM1.2 RPC for the Charra YANG module? If you did, can you chime in on the questions below? More specifics on the request: Right now in the tpm20-challenge-response-attestation RPC output are TPM protected objects enclosed within TPMS_QUOTE_INFO. Definition of TPMS_QUOTE_INFO Structure --------------------------------------------------------- typedef struct { TPML_PCR_SELECTION pcrSelect; TPM2B_DIGEST pcrDigest; } TPMS_QUOTE_INFO; See Table 115 - of https://trustedcomputinggroup.org/wp-content/uploads/TCG_TSS_Overview_Common _Structures_v0.9_r03_published.pdf The enclosed TPM2B_DIGEST is calculated across multiple PCRs. Having to verify across multiple PCRs does not necessarily make it easy for a Verifier to appraise just the minimum set of PCR information which has changed since the last received TPM2B_DIGEST. Put another way, why should a Verifier reconstruct the proper value of all PCR Quotes when only a single PCR has changed? To help this happen, if the Attester does know specific PCR values, the Attester can provide these individual values via "unsigned-pcr-values". By comparing this information to the what has previously been validated, it is possible for a Verifier to confirm the Attester's signature while eliminating significant processing. Additionally, processing where KGVs are exposed can be safely eliminated. This is a long way of asserting that there is not redundant TPM information carried in tpm20-challenge-response-attestation RPC response. This is a good thing. We should provide the same level of scrutiny to the TPM1.2 objects. We should eliminate redundant objects from the tpm12-challenge-response-attestation RPC. If we were to eliminate redundant objects from the TPM1.2 Quote Response, I am know that we can eliminate the following objects: * leaf major * leaf minor * leaf rev-Minor * leaf rev-Minor I also think we can eliminate the following: * fixed -- at this is a response to the RPC question * locality-at-release Looking beyond these obvious objects, I am wondering if there is anyone needing to differentiate between tpm12-quote1 and tpm12-quote2. As TPM1.2 is going to be phased out as equipment gets changed, it seems to make little sense to support both variants if both are not being actively championed by someone. In fact, I suspect that the YANG model can be updated so that it need not care about quote1 and quote2. Can whomever included both quote1 and quote2 articulate why the must be a market need to support both going forward? If we can eliminate either quote1 or quote2 specifics, I suspect we could use the exact same structure as part of the RPC response as was used for TPM2. It would look something like: + tpm12-challenge-response-attestation ... +--ro output +--ro tpm12-attestation-response* [] +--ro certificate-name? certificate-name-ref +--ro TPMS_QUOTE_INFO binary +--ro quote-signature? binary +--ro up-time? uint32 +--ro node-id? string +--ro node-physical-index? int32 {ietfhw:entity-mib}? +--ro unsigned-pcr-values* [] +--ro TPM20-hash-algo? identityref +--ro pcr-values* [pcr-index] +--ro pcr-index pcr +--ro pcr-value? binary I would love to get people's thoughts on what is above, and what might be mandatory to support in tpm12-challenge-response-attestation RPC output. Thanks, Eric Eric Voit Principal Engineer .:|:.:|:. Cisco Systems, Inc. ------=_NextPart_001_1145_01D69CC7.F7140E40 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I am hoping we can simplify what is in Charra's TPM1.2 = quote into something similar to what is now in the TPM2.0 quote.  =   Does anyone know who wrote the original TPM1.2 RPC for the = Charra YANG module?   If you did, can you chime in on the = questions below?

 

More = specifics on the request:

Right now = in the tpm20-challenge-response-attestation RPC output are TPM protected = objects enclosed within TPMS_QUOTE_INFO. 

 

Definition of = TPMS_QUOTE_INFO Structure

-------------------------------------------------= --------

typedef struct {

    TPML_PCR_SELECTION = pcrSelect;

    TPM2B_DIGEST pcrDigest; = }

TPMS_QUOTE_INFO;

 

See Table 115 – of

https://trustedcomputinggr= oup.org/wp-content/uploads/TCG_TSS_Overview_Common_Structures_v0.9_r03_pu= blished.pdf

 

The enclosed = TPM2B_DIGEST is calculated across multiple PCRs.  Having to verify = across multiple PCRs does not necessarily make it easy for a Verifier to = appraise just the minimum set of PCR information which has changed since = the last received TPM2B_DIGEST.  Put another way, why should a = Verifier reconstruct the proper value of all PCR Quotes when only a = single PCR has changed? 

 

To help this = happen, if the Attester does know specific PCR values, the Attester can = provide these individual values via = "unsigned-pcr-values".   By comparing this = information to the what has previously been validated, it is possible = for a Verifier to confirm the Attester's signature while eliminating = significant processing.  Additionally, processing where KGVs are = exposed can be safely eliminated.

 

This is a = long way of asserting that there is not redundant TPM information = carried in tpm20-challenge-response-attestation RPC = response.   This is a good thing.

 

We should = provide the same level of scrutiny to the TPM1.2 objects.  We = should eliminate redundant objects from the = tpm12-challenge-response-attestation RPC.

 

If we were = to eliminate redundant objects from the TPM1.2 Quote Response, I am know = that we can eliminate the following objects:

  • leaf = major
  • leaf = minor
  • leaf = rev-Minor
  • leaf = rev-Minor

 

I also think = we can eliminate the following:

  • fixed  -- at this = is a response to the RPC question
  • locality-at-release

 

Looking = beyond these obvious objects, I am wondering if there is anyone needing = to differentiate between tpm12-quote1 and tpm12-quote2.   As = TPM1.2 is going to be phased out as equipment gets changed, it seems to = make little sense to support both variants if both are not being = actively championed by someone.  In fact, I suspect that the YANG = model can be updated so that it need not care about quote1 and = quote2.   Can whomever included both quote1 and quote2 = articulate why the must be a market need to support both going = forward?  

 

If we can = eliminate either quote1 or quote2 specifics, I suspect we could use the = exact same structure as part of the RPC response as was used for = TPM2.   It would look something like:

 

  + = tpm12-challenge-response-attestation

    ...

         +--ro = output

      =       +--ro tpm12-attestation-response* = []

      =          +--ro = certificate-name?      = certificate-name-ref

      =          +--ro = TPMS_QUOTE_INFO        = binary

      =          +--ro = quote-signature?       = binary

      =          +--ro = up-time?           = ;    uint32

      =          +--ro = node-id?           = ;    string

      =          +--ro = node-physical-index?   int32 = {ietfhw:entity-mib}?

      =          +--ro = unsigned-pcr-values* []

      =             += --ro TPM20-hash-algo?   identityref

      =             += --ro pcr-values* [pcr-index]

      =             &= nbsp;  +--ro pcr-index    pcr

      =             &= nbsp;  +--ro pcr-value?   binary

 

I would love = to get people's thoughts on what is above, and what might be mandatory = to support in tpm12-challenge-response-attestation RPC = output.

 

Thanks,

Eric

 

 

Eric Voit =

Principal Engineer

.:|:.:|:. Cisco Systems, Inc.

 

------=_NextPart_001_1145_01D69CC7.F7140E40-- ------=_NextPart_000_1144_01D69CC7.F713E730 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAxMDA3MjAzNjExWjAjBgkqhkiG 9w0BCQQxFgQUBnP9hY1Me4bLbxgq5ZcB3aEWiAEwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQA6i8sGoiR5jnD2y00EeRqiCfay05CnVBies1GbgD7ZRcCulgr4nyl4UVRPsu4m80ka 6ICcJRDD+4WKnMbi7mokRQKH9g1bGx4528zk3RScpQwkcXgM8Fr96oi9UA3fRR59FeR/KkST+1ep PCWn3WSM7VmYDXeMi2X3ogvC8KpqnBgD5KDUf2CgPLW1TV6vmY50u00CI+99jHSP7+XzAWwrVD33 jstfBNI39dF7/zF58YKUmXJBfMFmV8MTpDOrZVEjtg4F/feu/94niUKWOID6rj/WQgVbEH6cqOro uHI8aN44rzJ03DdRK5rZbL5Uti/ds7a89ruf28u2ogOYpE3vAAAAAAAA ------=_NextPart_000_1144_01D69CC7.F713E730-- From nobody Wed Oct 7 21:44:39 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B364C3A1032 for ; Wed, 7 Oct 2020 21:44:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.597 X-Spam-Level: X-Spam-Status: No, score=-9.597 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=cb2ZWl85; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=LVJm8WsA Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 20vCjTJFaM_B for ; Wed, 7 Oct 2020 21:44:36 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23B8B3A1030 for ; Wed, 7 Oct 2020 21:44:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4275; q=dns/txt; s=iport; t=1602132276; x=1603341876; h=from:to:subject:date:message-id:mime-version; bh=3+3KcPwiVf/8GYN/Ro4WP9ghF1hvIPodlCYUr98baTM=; b=cb2ZWl85pju0mAaDjxJGz2Nz8UURYNR2CgT+3LA4aTuCcty+E4JcwppT dUFcWLb80UuH53oqUxPfvuRdzNZu3g+4FkSdvdV9teMQimVweUXnlte3k A0HaEa4UXNHZCmqUuE/GsjGQfqPyZf0jbKFk8hJmGgs1m9F81QEXVgX1j w=; IronPort-PHdr: =?us-ascii?q?9a23=3A5rXemhJtS8nAOHBN4NmcpTVXNCE6p7X5OBIU4Z?= =?us-ascii?q?M7irVIN76u5InmIFeGvK8/jVLVU8Pc8f0Xw+bVsqW1X2sG7N7BtX0Za5VDWl?= =?us-ascii?q?cDjtlehA0vBsOJSCiZZP7nZiA3BoJOAVli+XzoMEVJFoD5fVKB6nG35CQZTx?= =?us-ascii?q?P4Mwc9L+/pG4nU2sKw0e36+5DabwhSwjSnZrYnJxStpgKXvc4T0oY=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BsJAB6mH5f/4gNJK1gHAEBATwBAQQ?= =?us-ascii?q?EAQECAQEHAQGBZAKBIS9RB3BZLywKhDODRgONUJQyhG+CUwNVCwEBAQ0BASM?= =?us-ascii?q?KAgQBAYRKGYFwAiU3Bg4CAwEBCwEBBQEBAQIBBgRthVwBC4YLER0BATgRAQw?= =?us-ascii?q?+AgQwJwQ1gwQBgX5NAy4BDp1lAoE5iGF2gTKDAQEBBYEzAYEYglsYghADBoE?= =?us-ascii?q?4AYJxg2uCL4QnG4IAgREnDBCCHy4+hGqCajOCLZNDhwWdFAqCaIkAkWcDH4M?= =?us-ascii?q?TigSUFpMainCVKwIEAgQFAg4BAQWBaiSBV3AVZQGCPlAXAg2SEIpWdDcCBgE?= =?us-ascii?q?JAQEDCXyMOwGBEAEB?= X-IronPort-AV: E=Sophos;i="5.77,349,1596499200"; d="scan'208,217";a="823658580" Received: from alln-core-3.cisco.com ([173.36.13.136]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 08 Oct 2020 04:44:34 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 0984iY7c021290 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Thu, 8 Oct 2020 04:44:34 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Wed, 7 Oct 2020 23:44:34 -0500 Received: from xhs-rtp-002.cisco.com (64.101.210.229) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Thu, 8 Oct 2020 00:44:33 -0400 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Thu, 8 Oct 2020 00:44:33 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ID4zazgmFYOYJXVcTp5NgxtVxi6dnQtj30zaEM/jeyyIuG+ceVOFGf1z/7vFbSUdzR6qIeQ1lFQuipIdiKacV7bwMAp8DOL+jK7EO/zglZz8r31QOes3v8nurrN1J3aI8nfzCfUIAQUbOSjuhPfqLRacPqCZ+lsJUgB1YpyIlcgsQYV4GekfhZ44pMc5EiEgMv2Gb1wP08vx7chQX+AHC5GpzEAJmRiQPDGqXJB52toEt4R+GlnsqL88Hy7HBvrWpibasYa/6dZTvCxbvxMkmM2SApwQy9NgtmqRb8535Lwr6CEwD/ZiFU6rj33/1Gr748qtqdRSmbs96RKsw3If/Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3+3KcPwiVf/8GYN/Ro4WP9ghF1hvIPodlCYUr98baTM=; b=JhdQcY8QBKK/a+fcJGIBRtEyO4ZVTQowZZHmRKbAajNFqtMChmz/XGfDg/VtvynjJYvG/4QWwv6RxWesEuX5AxgxHaGUk3s4ifCcm6rHyE9SM3LcVYmZIH/AGxnhxpPRVf4OeJHXgax7AKWQcD/MAD/Qm7DkBLthqkvecfV704YxLyDLpZJk0i93slJAarXVKyV8YMCbpMwbN2X90p6IsraRoNf8vRPS2alLQcAdm6ts0hnvUm7st4ERJOc2TpiVoqWSsQ0UYRCQ9H1rVwFhyDQfQfyxLW08+9PMbvVtDZsdKpOPD6B/TUA8KWTag6H+PnTzgEUc+7NGFSW9F3FTcw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3+3KcPwiVf/8GYN/Ro4WP9ghF1hvIPodlCYUr98baTM=; b=LVJm8WsA4mts8l2jAiCAaDDlTqTSVcbehzxETPIzog2nh4GJV7sZ0TWXboEbiErDdNbfZ5icnGEdo49mLstTwCayMATyH12N+Jq0KseU+JK8rG1HBfDe2HSqXM25Kk5Yzx/PaRjWINOEK/P6MXA6eqILGE/+BeVtUEfGHZWZnp8= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB3576.namprd11.prod.outlook.com (2603:10b6:a03:b4::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.23; Thu, 8 Oct 2020 04:44:31 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3455.022; Thu, 8 Oct 2020 04:44:31 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: Reminder: RATS Virtual Interim doodle poll closes tomorrow Thread-Index: AQHWnS21IJtpW3bPyUeddWCdcvAt5g== Date: Thu, 8 Oct 2020 04:44:30 +0000 Message-ID: <9163463D-992E-4696-8900-FAD30CBEB3A0@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1a.200914 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: c1c9683d-2311-47fd-1c08-08d86b44d8b8 x-ms-traffictypediagnostic: BYAPR11MB3576: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: RBR6Pc5W2YHcJfH92mI/HbFgj4EjF+koO0ykVfv8OE/xS5qoH70FS6n5Exg/s9Q9/z3m+gHGHcOThC2SXk9RlFrIdxEZiQaY8pfaUUUqaw/a9sJu4MF4MVx1kxyjUQnO6ZZt9DbETeQmi2kCIstJ6OoXa/p0erPrA537a7ueaiJyQ0+sKObFEYoovBFzEKDkRwgYguSzfAZhi8xpdrwus3luRVJl5XRKyttxOWAnDAk56Z4J1xD3mwsiLY8gHwK9fzE6haX9JDIRIJS3G9D19y9Ot6S3cV89aZqTTm0h9ugsjtqz9ogEkn8+oyQYPCJ5Ep9MfdOKuweiPmKGpThldWVZEYU4MAaJuwOLjBLjssXx5Zy+c35/CcN1FmhfzxP9TnUJY7QLloi9l697B26pyQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(376002)(39860400002)(396003)(136003)(366004)(346002)(66446008)(66946007)(66556008)(6512007)(64756008)(8936002)(33656002)(66476007)(71200400001)(2906002)(6916009)(2616005)(316002)(6486002)(558084003)(36756003)(76116006)(166002)(966005)(5660300002)(83380400001)(8676002)(83080400001)(478600001)(6506007)(86362001)(186003)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_9163463D992E46968900FAD30CBEB3A0ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c1c9683d-2311-47fd-1c08-08d86b44d8b8 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2020 04:44:30.9138 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Dpz63KJug0NiTGQd4Rt7WsFJxTCYfUxuOQz+HyAQr5sJ5NjJRn5LA3gaAqkBVTgvlWvi99y/cj3iB14zRmo5YQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3576 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: alln-core-3.cisco.com Archived-At: Subject: [Rats] Reminder: RATS Virtual Interim doodle poll closes tomorrow X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2020 04:44:38 -0000 --_000_9163463D992E46968900FAD30CBEB3A0ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UkFUcyBwYXJ0aWNpcGFudHMsDQpKdXN0IGEgcmVtaW5kZXIgdGhhdCBJIHdpbGwgYmUgY2xvc2lu ZyB0aGUgZG9vZGxlIHBvbGwgdG9tb3Jyb3cgdG8gZ2l2ZSBlbm91Z2ggdGltZSBmb3IgdGhlIGFu bm91bmNlbWVudC4gIEnigJlkIGxpa2UgdG8gc2VlIG1vcmUgcGFydGljaXBhbnRzIHZvaWNlIHRo ZWlyIHByZWZlcmVuY2UgYnkgdGhlbi4NCg0KUGxlYXNlIHByb3ZpZGUgeW91ciBmZWVkYmFjayBp bjoNCmh0dHBzOi8vZG9vZGxlLmNvbS9wb2xsL2Z2MjJxYmE0emQ5NmU2ZmINCg0KVGhhbmtzLCBO YW5jeQ0K --_000_9163463D992E46968900FAD30CBEB3A0ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1u YW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6 MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglm b250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9IiMwNTYzQzEiIHZs aW5rPSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+UkFUcyBwYXJ0aWNpcGFudHMs PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPkp1c3QgYSByZW1pbmRlciB0aGF0IEkgd2lsbCBiZSBjbG9zaW5n IHRoZSBkb29kbGUgcG9sbCB0b21vcnJvdyB0byBnaXZlIGVub3VnaCB0aW1lIGZvciB0aGUgYW5u b3VuY2VtZW50LiZuYnNwOyBJ4oCZZCBsaWtlIHRvIHNlZSBtb3JlIHBhcnRpY2lwYW50cyB2b2lj ZSB0aGVpciBwcmVmZXJlbmNlIGJ5IHRoZW4uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij5QbGVhc2UgcHJvdmlkZSB5b3VyIGZlZWRiYWNrIGluOjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij48YSBocmVmPSJodHRwczovL2Rvb2RsZS5jb20vcG9sbC9mdjIycWJhNHpkOTZlNmZi Ij5odHRwczovL2Rvb2RsZS5jb20vcG9sbC9mdjIycWJhNHpkOTZlNmZiPC9hPjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhhbmtzLCBOYW5jeTwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_9163463D992E46968900FAD30CBEB3A0ciscocom_-- From nobody Fri Oct 9 05:37:41 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 155723A0EF2; Fri, 9 Oct 2020 05:34:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.296 X-Spam-Level: X-Spam-Status: No, score=-3.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=NHdEoa/L; dkim=pass (1024-bit key) header.d=juniper.net header.b=k9JfCdhQ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kw5erbJaHl3B; Fri, 9 Oct 2020 05:34:49 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A9A33A0EED; Fri, 9 Oct 2020 05:34:48 -0700 (PDT) Received: from pps.filterd (m0108157.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 099CXUYG008456; Fri, 9 Oct 2020 05:34:30 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=dJmxvUawnRZq7AYzA4wjbFPs7+R/qOUJZ0uqadpNI1o=; b=NHdEoa/LBD5+94hALb3BIZ7VPqX62evlwW6fr0Ak9A+TXtyagz1r7fbxqP+HFg5rCSC7 QzoAF/n0DLt7G9cgJewIJqm++wZZSVbInTd+PN7EAq+m/SnQplNCpdQxRbxx1FiWxbMZ epDqvjMmPLe8hk7caZm2+1SIf1Pl4VsucMFeA6ad3Z8j5tyaZxzGNTcsz+bYgu6aziDX kLjLpNoO4UPOW+CFdsPwunCkBJiLACbtDOnsEraoccxJOL/kp2s4RD473xqSqwG5gCOB ig6a0898MsigvArf0tv+VZL7B8gNFfnQG0ZJSqDr/vXiH0/CM2e80KwQ0JkykVNT2sz9 IA== Received: from nam10-dm6-obe.outbound.protection.outlook.com (mail-dm6nam10lp2105.outbound.protection.outlook.com [104.47.58.105]) by mx0a-00273201.pphosted.com with ESMTP id 3429mm17k8-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 09 Oct 2020 05:34:30 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lz9YYhJ3mktKIk6+yEcn/5LgFVjtv3izC+c3q6tP8MKwwLorVz5Fzz6f1kx7Pbn15u884IZ5CvA9MrLlBgZiqt75t7CJB0WbwRSEz5UQPVgQvqbCcxlYsftoCrDsGScbRAlXE9AMoB5/Gb0g/+QRtJ8m7yGEyraL7wgV3gLXJsBwyc3gG0pAjwFCyNauJQ9On1TLsFDWN1IdU6HLFetCSOQCeiusiGfv61U21b1UgpaxDqH48aHUMBpQsdOjDdOQdFFs0XZYYoOlwiIFjo/EjwQ1XBGHe0p7hxhtMIgCMRHEUPmnWIdQhBccjgp3IerKGl7gOTLZPulo8PrBUKeCww== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dJmxvUawnRZq7AYzA4wjbFPs7+R/qOUJZ0uqadpNI1o=; b=mqqu+RHvJ+51JBER44Fbro38mK5s2CuOhNLksLl3Gpjxdl1QYXBW6R7IESvqxWOZTrlKaqzjwNwh1IXSv1/hH7zv3YWq7jdLhM8imLjPmym4MeSj2/Ai2yjXskLLpwkqwE3hvE4q2/aSj6ujZ4/Z+kkUPficQF/C/XHSqyDR8EUYSfn/46ELi22aQeGdtasp5z21mzlbjfaGX1/VWjlBohg/xsKG5yp9Jmx1xz0gIaOLbPIQ3zFC5kOFX+RnFm8NhNbpZrBhcBd2Nxd0HL8IHovMWDpJxrNIg8gRxIYJx5C6tS8o/aRDUNdXb4P4qMEE7MTB6JA7a7u+bFipNw0zQQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dJmxvUawnRZq7AYzA4wjbFPs7+R/qOUJZ0uqadpNI1o=; b=k9JfCdhQwY7BafnsfwF7p3NedP/GZEvdYpmFadWsnvQYW+sPZu/WiajekA6p2sQdG/cGK5BOiBFaXZZX3G4nFJZXhg8+vw2mqnA72YvgztJpoMwm4mwT9J7FNgcjiri/RebCgjRgpuSOumsosA2+nsStpPKjNz4o5zfQNR3nWKA= Received: from BLAPR05MB7378.namprd05.prod.outlook.com (2603:10b6:208:298::10) by MN2PR05MB7165.namprd05.prod.outlook.com (2603:10b6:208:18b::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.13; Fri, 9 Oct 2020 12:34:27 +0000 Received: from BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600]) by BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600%4]) with mapi id 15.20.3477.011; Fri, 9 Oct 2020 12:34:27 +0000 From: Guy Fedorkow To: "Eric Voit (evoit)" CC: "rats@ietf.org" , "draft-ietf-rats-yang-tpm-charra@ietf.org" , Puru Kulkarni , William Bellingrath , "Panwei (William)" , "Birkholz, Henk" , "Eckel, Michael" , "Laffey, Tom (HPE Aruba)" , "frank.xialiang@huawei.com" Thread-Topic: Reducing YANG output objects with the tpm12-challenge-response-attestation RPC Thread-Index: Adac5ZonsmNnYPBmSvKhkjUhhfk9pgBUi8jw Date: Fri, 9 Oct 2020 12:34:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-09T12:34:25Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=e4e2e2a8-03b2-418e-9127-5aec8bf4cc1c; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none; dmarc.ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [24.61.11.4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d7c53622-edde-4ebe-bbab-08d86c4fa972 x-ms-traffictypediagnostic: MN2PR05MB7165: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 55MHPxd7Vkv/3S4O5pz9bzql5iRQRCxgMd4D0eIgIUACAI/eHQY851LmHnAmSd9G3E6RuhBuOGEOOIA0e3Up1hMcJC9d4knDi4brZc96F9DJ9ktB4v7v+qtqF1mPGfX8o4QFuNt8cUMcVcHbr0+SPrp+/YCJGrIc57Si6oGYY8Bl8bmhVeal6DXjGMTQauGTb7JRZnsRJep2CsRARG7uEzfxVM9l7mFRwXN3MiM1evkJTPvTkUuVPgpZ09oL1mxlHjEGcJNhLOoNogPcTnQ7oh8WITGIYlw/dE1jxYhq4hVYCca9z5uZuZOqUT4q2i0Far77jdwvvQqLFceGSFgZyleoX+z0Of067k5FujuGP9R4dh0yrh8Z6VIDJrSS8KeV8/Lr6GFG0gJfZb2ZRWAg+RzH4sMMvJnDJNVNevhb08i5bnwmhyafOvYlcTWaopXwz/0ScnEPmDzui1zLCcNFAvDamVvDvxSPLpNt0NQA5Qo= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BLAPR05MB7378.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(136003)(366004)(396003)(39860400002)(33656002)(6506007)(53546011)(55016002)(76116006)(8936002)(9686003)(71200400001)(2906002)(52536014)(83080400001)(83380400001)(54906003)(166002)(4326008)(7696005)(26005)(316002)(5660300002)(9326002)(8676002)(86362001)(186003)(66446008)(64756008)(966005)(478600001)(66946007)(66556008)(66476007)(15398625002)(43620500001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_BLAPR05MB7378320B18D303CAD8E41970BA080BLAPR05MB7378namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BLAPR05MB7378.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d7c53622-edde-4ebe-bbab-08d86c4fa972 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2020 12:34:27.2178 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: XeYK74xQItFnOP8cphy7qwj1yIUvx6u2n/H5U8RxSA35KU2sXS2hK54V2Yf9m9JmOm2dgqOUvMEud3tJsRnPng== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR05MB7165 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-09_06:2020-10-09, 2020-10-09 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 adultscore=0 malwarescore=0 suspectscore=0 phishscore=0 clxscore=1011 impostorscore=0 bulkscore=0 mlxscore=0 mlxlogscore=999 spamscore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010090089 Archived-At: X-Mailman-Approved-At: Fri, 09 Oct 2020 05:37:39 -0700 Subject: Re: [Rats] Reducing YANG output objects with the tpm12-challenge-response-attestation RPC X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 12:34:51 -0000 --_000_BLAPR05MB7378320B18D303CAD8E41970BA080BLAPR05MB7378namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eric, We have a lot of TPM1.2's out there - I'd be reluctant to obsolete them t= o save a paragraph in the YANG model... As to the structure of the model; Tom Laffey is probably the world's expert= (sorry Tom), but I'll find an internal reviewer for an informed opinion. Thanks /guy Juniper Business Use Only From: RATS On Behalf Of Eric Voit (evoit) Sent: Wednesday, October 7, 2020 4:36 PM To: Panwei (William) ; Birkholz, Henk ; Eckel, Michael ; = Guy Fedorkow ; Laffey, Tom (HPE Aruba) ; frank.xialiang@huawei.com Cc: rats@ietf.org; draft-ietf-rats-yang-tpm-charra@ietf.org Subject: [Rats] Reducing YANG output objects with the tpm12-challenge-respo= nse-attestation RPC [External Email. Be cautious of content] I am hoping we can simplify what is in Charra's TPM1.2 quote into something= similar to what is now in the TPM2.0 quote. Does anyone know who wrote = the original TPM1.2 RPC for the Charra YANG module? If you did, can you c= hime in on the questions below? More specifics on the request: Right now in the tpm20-challenge-response-attestation RPC output are TPM pr= otected objects enclosed within TPMS_QUOTE_INFO. Definition of TPMS_QUOTE_INFO Structure --------------------------------------------------------- typedef struct { TPML_PCR_SELECTION pcrSelect; TPM2B_DIGEST pcrDigest; } TPMS_QUOTE_INFO; See Table 115 - of https://trustedcomputinggroup.org/wp-content/uploads/TCG_TSS_Overview_Commo= n_Structures_v0.9_r03_published.pdf The enclosed TPM2B_DIGEST is calculated across multiple PCRs. Having to ve= rify across multiple PCRs does not necessarily make it easy for a Verifier = to appraise just the minimum set of PCR information which has changed since= the last received TPM2B_DIGEST. Put another way, why should a Verifier re= construct the proper value of all PCR Quotes when only a single PCR has cha= nged? To help this happen, if the Attester does know specific PCR values, the Att= ester can provide these individual values via "unsigned-pcr-values". By c= omparing this information to the what has previously been validated, it is = possible for a Verifier to confirm the Attester's signature while eliminati= ng significant processing. Additionally, processing where KGVs are exposed= can be safely eliminated. This is a long way of asserting that there is not redundant TPM information= carried in tpm20-challenge-response-attestation RPC response. This is a = good thing. We should provide the same level of scrutiny to the TPM1.2 objects. We sho= uld eliminate redundant objects from the tpm12-challenge-response-attestati= on RPC. If we were to eliminate redundant objects from the TPM1.2 Quote Response, I= am know that we can eliminate the following objects: * leaf major * leaf minor * leaf rev-Minor * leaf rev-Minor I also think we can eliminate the following: * fixed -- at this is a response to the RPC question * locality-at-release Looking beyond these obvious objects, I am wondering if there is anyone nee= ding to differentiate between tpm12-quote1 and tpm12-quote2. As TPM1.2 is= going to be phased out as equipment gets changed, it seems to make little = sense to support both variants if both are not being actively championed by= someone. In fact, I suspect that the YANG model can be updated so that it= need not care about quote1 and quote2. Can whomever included both quote1= and quote2 articulate why the must be a market need to support both going = forward? If we can eliminate either quote1 or quote2 specifics, I suspect we could u= se the exact same structure as part of the RPC response as was used for TPM= 2. It would look something like: + tpm12-challenge-response-attestation ... +--ro output +--ro tpm12-attestation-response* [] +--ro certificate-name? certificate-name-ref +--ro TPMS_QUOTE_INFO binary +--ro quote-signature? binary +--ro up-time? uint32 +--ro node-id? string +--ro node-physical-index? int32 {ietfhw:entity-mib}? +--ro unsigned-pcr-values* [] +--ro TPM20-hash-algo? identityref +--ro pcr-values* [pcr-index] +--ro pcr-index pcr +--ro pcr-value? binary I would love to get people's thoughts on what is above, and what might be m= andatory to support in tpm12-challenge-response-attestation RPC output. Thanks, Eric Eric Voit Principal Engineer .:|:.:|:. Cisco Systems, Inc. --_000_BLAPR05MB7378320B18D303CAD8E41970BA080BLAPR05MB7378namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Eric,

  We have a lot of TPM1.2’s out there = 211; I’d be reluctant to obsolete them to save a paragraph in the YAN= G model…

As to the structure of the model; Tom Laffey is prob= ably the world’s expert (sorry Tom), but I’ll find an internal = reviewer for an informed opinion.

Thanks

/guy

 

 

 

Juniper Business Use Only

From: RATS <rats-bounces@ietf.org> O= n Behalf Of Eric Voit (evoit)
Sent: Wednesday, October 7, 2020 4:36 PM
To: Panwei (William) <william.panwei@huawei.com>; Birkholz, He= nk <henk.birkholz@sit.fraunhofer.de>; Eckel, Michael <michael.ecke= l@sit.fraunhofer.de>; Guy Fedorkow <gfedorkow@juniper.net>; Laffey= , Tom (HPE Aruba) <tom.laffey@hpe.com>; frank.xialiang@huawei.com
Cc: rats@ietf.org; draft-ietf-rats-yang-tpm-charra@ietf.org
Subject: [Rats] Reducing YANG output objects with the tpm12-challeng= e-response-attestation RPC

 

<= span style=3D"font-size:10.5pt;font-family:"Lato",sans-serif;colo= r:black">[External Email. Be cautious of content]

 

I am hoping we can simplify what is in Charra's TPM1= .2 quote into something similar to what is now in the TPM2.0 quote.  &= nbsp; Does anyone know who wrote the original TPM1.2 RPC for the Charr= a YANG module?   If you did, can you chime in on the questions below?

 

More specifics on the request:

Right now in the tpm20-challenge-response-attestatio= n RPC output are TPM protected objects enclosed within TPMS_QUOTE_INFO.&nbs= p;

 

Definition of TPMS_QUO= TE_INFO Structure

----------------------= -----------------------------------

typedef struct { =

   &nbs= p;TPML_PCR_SELECTION pcrSelect;

   &nbs= p;TPM2B_DIGEST pcrDigest; }

TPMS_QUOTE_INFO;<= /o:p>

 

See Table 115 – = of

https://trustedcomputinggroup.org/wp-content/upload= s/TCG_TSS_Overview_Common_Structures_v0.9_r03_published.pdf=

 

The enclosed TPM2B_DIGEST is calculated across multi= ple PCRs.  Having to verify across multiple PCRs does not necessarily = make it easy for a Verifier to appraise just the minimum set of PCR informa= tion which has changed since the last received TPM2B_DIGEST.  Put another way, why should a Verifier reconstruct the= proper value of all PCR Quotes when only a single PCR has changed? 

 

To help this happen, if the Attester does know speci= fic PCR values, the Attester can provide these individual values via "= unsigned-pcr-values".   By comparing this information to the= what has previously been validated, it is possible for a Verifier to confirm the Attester's signature while eliminating significa= nt processing.  Additionally, processing where KGVs are exposed can be= safely eliminated.

 

This is a long way of asserting that there is not re= dundant TPM information carried in tpm20-challenge-response-attestation RPC= response.   This is a good thing.

 

We should provide the same level of scrutiny to the = TPM1.2 objects.  We should eliminate redundant objects from the tpm12-= challenge-response-attestation RPC.

 

If we were to eliminate redundant objects from the T= PM1.2 Quote Response, I am know that we can eliminate the following objects= :

  • leaf major
  • leaf minor
  • lea= f rev-Minor
  • leaf rev-Minor

 

I also think we can eliminate the following:

  • fixed  -- at this is a response to the RPC question
  • locality-at-release

 

Looking beyond these obvious objects, I am wondering= if there is anyone needing to differentiate between tpm12-quote1 and tpm12= -quote2.   As TPM1.2 is going to be phased out as equipment gets = changed, it seems to make little sense to support both variants if both are not being actively championed by someone.  = In fact, I suspect that the YANG model can be updated so that it need not c= are about quote1 and quote2.   Can whomever included both quote1 = and quote2 articulate why the must be a market need to support both going forward?  

 

If we can eliminate either quote1 or quote2 specific= s, I suspect we could use the exact same structure as part of the RPC respo= nse as was used for TPM2.   It would look something like:

 

  + tpm12-challenge-response-attestation

    ...

         +--= ro output

         &nb= sp;  +--ro tpm12-attestation-response* []

         &nb= sp;     +--ro certificate-name?   &= nbsp;  certificate-name-ref

         &nb= sp;     +--ro TPMS_QUOTE_INFO   &nb= sp;    binary

         &nb= sp;     +--ro quote-signature?   &n= bsp;   binary

         &nb= sp;     +--ro up-time?    &nbs= p;          uint32<= /p>

         &nb= sp;     +--ro node-id?    &nbs= p;          string<= /p>

         &nb= sp;     +--ro node-physical-index?   int= 32 {ietfhw:entity-mib}?

         &nb= sp;     +--ro unsigned-pcr-values* []

         &nb= sp;        +--ro TPM20-hash-algo?&n= bsp;  identityref

         &nb= sp;        +--ro pcr-values* [pcr-i= ndex]

         &nb= sp;           +--ro = pcr-index    pcr

         &nb= sp;           +--ro = pcr-value?   binary

 

I would love to get people's thoughts on what is abo= ve, and what might be mandatory to support in tpm12-challenge-response-atte= station RPC output.

 

Thanks,

Eric

 

 

Eric Voit

Principal Engineer

.:|:.:|:. Cisco = Systems, Inc.

 

--_000_BLAPR05MB7378320B18D303CAD8E41970BA080BLAPR05MB7378namp_-- From nobody Fri Oct 9 05:41:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F06233A0F00; Fri, 9 Oct 2020 05:39:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.601 X-Spam-Level: X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=UYr4Xtvh; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=hmMOAaMg Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id luGiwyZ6pjCz; Fri, 9 Oct 2020 05:39:57 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DAEED3A0EF6; Fri, 9 Oct 2020 05:39:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=31736; q=dns/txt; s=iport; t=1602247197; x=1603456797; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=H9+DAQZG9Kur2prupam1spzoiSlQqH+tG9lMIKe85ok=; b=UYr4Xtvhmih6Z9d3JLjhOouGq0gY/74Y+OX+tkzaQCfifDdy4MFvkAFp vUGV8gf1n3gug4vsWe8RyrtALU5Ofn6WTYjE7/F9O/pk+q8FrwVtY2XX6 /MTIVheI3/8haRg9UN1Q1/X0083b4oZC8Mn3DcZc9/ntZdzRCPVIW0nVW I=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A0zNU2xX1sBAVLnC1OkKgugS9xe/V8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSBN+Huf5BgvDd9aHtRWJG5oyO4zgOc51JAh?= =?us-ascii?q?kCj8he3wktG9WMBkCzKvn2Jzc7E8JPWB4AnTm7PEFZFdy4awjUpXu/vjIXEw?= =?us-ascii?q?/0cwt4OuqzHZTd3Iy70umo8MjVZANFzDO2fbJ1KkCwqgPc/skbiIdvMOA/0B?= =?us-ascii?q?zM93BJYO9Rg2hvIAGe?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CdBQDHWYBf/5hdJa1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgU+BIy8jLgdwDh4tLywKh3kDjVGHZo4tgmiBQoERA1UEBwE?= =?us-ascii?q?BAQoDAQEnBgIEAQGESgKCEwIlOBMCAwEBCwEBBQEBAQIBBgRthVwMhXIBAQE?= =?us-ascii?q?BAQISGxMBASUEDgEPAgEIEQQBASEHBwIwFAkIAQEEDgUIBhSDBTiBRk0DHw8?= =?us-ascii?q?BDp18AoE5iGF0gTQTgm4BAQWBNFEDgyQYggkHAwaBOIFTgR+GMYQSG4FBP4E?= =?us-ascii?q?RQ4IfLj6BeWMDgSkBEgEjKwmDFIItkCOCZodngRmbVQqCaIRLgl+BVpIJoTa?= =?us-ascii?q?THIpwlTECBAIEBQIOAQEFgWsjZ3BwFYMkUBcCDY4fCwEXFIM6hRSFQnQCEiM?= =?us-ascii?q?CBgoBAQMJfIsILYEGAYEQAQE?= X-IronPort-AV: E=Sophos;i="5.77,355,1596499200"; d="p7s'?scan'208,217";a="575359182" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 09 Oct 2020 12:39:54 +0000 Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by rcdn-core-1.cisco.com (8.15.2/8.15.2) with ESMTPS id 099CdswL027214 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 9 Oct 2020 12:39:54 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 9 Oct 2020 07:39:53 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 9 Oct 2020 07:39:53 -0500 Received: from NAM10-BN7-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Fri, 9 Oct 2020 07:39:53 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lk+jm0tt9XBKp+c9560YGbQtgqbX3BkjPJTsu5+ZFp1Qc2TrKPo32kYCLgl6qxdSswFZwqnsztbmhZeYWrYXvNvEHxKMxFKR/rg8lUS4AAovJP+ZrGksFjCYifjrectYtc+zZHfua9j3SDOJtPDcQ8XlPjnsOR2ELUlQnlIhBTW8+LEbTXzwSZp5wCkFkh9A953+08pm8oSBvVg4VrmMfn/UCQ8MgUdcLrRa4RIl7xwk1Kxs5E1BoM541X7Kc8yZ87mwZSXKTQjqKeYSBJC5HDk/m5iKP43aga/pRS3lQPD6kAkulLlRSjYaK8HoULStJvrYrwkCZvO+2x53lzqShw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vilBK7c7cxS/2un0zbV0cpbchM3HWmr9gmfRu1FRa48=; b=TKq3J5+neQVeVSqNW1+SP53BYopXrspXCk3w2lFCph9moS1+xc3r0bsptuxvAdSnuWXWO90rSOA/TC+YwJrjUrSSvgzDjcHZr7CM17BpCY9KxJDfM6Gr9xcinV9JP64cOxkUAFhdC94EnVGrexrSuXI6nULe1p3xKvrv8GvGgRKyQi5wS4Wc6KEzRWq45G83S74WhU2CplVpof93jBoAKk3GndjIYC3RoJiDaedBsSKtRycRwlEH+vRVVyLhQK7rOVJ0Tix8buI+KU32H03UrMPG9v+pUhqhj25J4e4J5dwe6k5zFPMVD8wXlV+h/n71NPGWrXDE+wzLIVpuMEimPA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vilBK7c7cxS/2un0zbV0cpbchM3HWmr9gmfRu1FRa48=; b=hmMOAaMgc6mIl19eYh+wT560TFGnKUx8gYfK8iFvU70Xsi54rSrpsJv4m5Wz66boyzHtRcoNhkxdrbx4F+QWd4ZITgbWl0h2G6ep/yLSEBiyiRulk5npT7Lx3BmkEbDyILJkMj+CnXBA2RqLHSemHiCqEnelUkrAsvmIm+D3N5A= Received: from SN6PR11MB3135.namprd11.prod.outlook.com (2603:10b6:805:d5::20) by SN6PR11MB2847.namprd11.prod.outlook.com (2603:10b6:805:55::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.23; Fri, 9 Oct 2020 12:39:52 +0000 Received: from SN6PR11MB3135.namprd11.prod.outlook.com ([fe80::b819:72bd:80b2:d2e0]) by SN6PR11MB3135.namprd11.prod.outlook.com ([fe80::b819:72bd:80b2:d2e0%4]) with mapi id 15.20.3455.027; Fri, 9 Oct 2020 12:39:52 +0000 From: "Eric Voit (evoit)" To: Guy Fedorkow , "Laffey, Tom (HPE Aruba)" CC: "rats@ietf.org" , "draft-ietf-rats-yang-tpm-charra@ietf.org" , Puru Kulkarni , William Bellingrath , "Panwei (William)" , "Birkholz, Henk" , "Eckel, Michael" , "frank.xialiang@huawei.com" Thread-Topic: Reducing YANG output objects with the tpm12-challenge-response-attestation RPC Thread-Index: Adac5ZonsmNnYPBmSvKhkjUhhfk9pgBUi8jwAABCQOA= Date: Fri, 9 Oct 2020 12:39:52 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-09T12:34:25Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=e4e2e2a8-03b2-418e-9127-5aec8bf4cc1c; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [108.18.114.139] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: d0a04e8b-f304-4641-04ef-08d86c506b25 x-ms-traffictypediagnostic: SN6PR11MB2847: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: AHKNYf5tXNoFFMa5lbJDGjgz07o4lDQIc8n/n35ajf2WTiap5QS/TpdXF6h3hQtES2/rj6jGyYM2aE3RfP72eA/hyvbqesHJMe6l/sYhF6AdNg5wUns3P055JrqLKZsTtNVaHsb3xudzfFUeWb4yllg/vYa9KJANbNBZ/eamQaGoBTnQrheqLqza/XVuN/9BJPEA5W6aBoQaWnPH9CdJ68fIruzYa110NZh/Tz98mRLp4EAg/4lVjzrmpHqKq3sqyInVJhC+AbJInvLA+JwOWLnuhmAHAgGEHqy3IyKF+k5zD8bjvQSswFFLQFdDrqFy1vAcriHIj6TnPtEgKMcOMNEjFfbrtkcmCI+6QcpAhWWZv4YpXTh19D4+EuxoFpo12RSvDUujuGonkhjS23XCL7RyVQWgM/sgVf0TMe9EqHU8vJ4j2n8QOFwu1YPcUjtt3yiCALaIotfZhydQcC+m6PWcrVA2jsN4hyZWxqL8QUo= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR11MB3135.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(136003)(396003)(366004)(376002)(346002)(316002)(52536014)(4326008)(66476007)(53546011)(110136005)(66616009)(5660300002)(86362001)(6506007)(76116006)(66946007)(33656002)(66446008)(55016002)(66556008)(83380400001)(966005)(64756008)(186003)(26005)(478600001)(166002)(7696005)(99936003)(83080400001)(7416002)(8936002)(54906003)(9686003)(71200400001)(2906002)(8676002)(15398625002)(43620500001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; boundary="----=_NextPart_000_1269_01D69E17.BF687A20"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB3135.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d0a04e8b-f304-4641-04ef-08d86c506b25 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2020 12:39:52.1668 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: taok/4zw2FXcSGTM8vBZ3RHnHExWz9a+dWYVDReBIxRstFcmtKtpVxAO0aZUdBwM X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB2847 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.14, xch-rcd-004.cisco.com X-Outbound-Node: rcdn-core-1.cisco.com Archived-At: X-Mailman-Approved-At: Fri, 09 Oct 2020 05:41:03 -0700 Subject: Re: [Rats] Reducing YANG output objects with the tpm12-challenge-response-attestation RPC X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 12:40:00 -0000 ------=_NextPart_000_1269_01D69E17.BF687A20 Content-Type: multipart/alternative; boundary="----=_NextPart_001_126A_01D69E17.BF687A20" ------=_NextPart_001_126A_01D69E17.BF687A20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I am very happy to keep the TPM1.2s. I am just trying to make sure our design drives minimized operations and development efforts. Eric From: Guy Fedorkow, October 9, 2020 8:34 AM Hi Eric, We have a lot of TPM1.2's out there - I'd be reluctant to obsolete them to save a paragraph in the YANG model. As to the structure of the model; Tom Laffey is probably the world's expert (sorry Tom), but I'll find an internal reviewer for an informed opinion. Thanks /guy Juniper Business Use Only From: RATS > On Behalf Of Eric Voit (evoit) Sent: Wednesday, October 7, 2020 4:36 PM To: Panwei (William) >; Birkholz, Henk >; Eckel, Michael >; Guy Fedorkow >; Laffey, Tom (HPE Aruba) >; frank.xialiang@huawei.com Cc: rats@ietf.org ; draft-ietf-rats-yang-tpm-charra@ietf.org Subject: [Rats] Reducing YANG output objects with the tpm12-challenge-response-attestation RPC [External Email. Be cautious of content] I am hoping we can simplify what is in Charra's TPM1.2 quote into something similar to what is now in the TPM2.0 quote. Does anyone know who wrote the original TPM1.2 RPC for the Charra YANG module? If you did, can you chime in on the questions below? More specifics on the request: Right now in the tpm20-challenge-response-attestation RPC output are TPM protected objects enclosed within TPMS_QUOTE_INFO. Definition of TPMS_QUOTE_INFO Structure --------------------------------------------------------- typedef struct { TPML_PCR_SELECTION pcrSelect; TPM2B_DIGEST pcrDigest; } TPMS_QUOTE_INFO; See Table 115 - of https://trustedcomputinggroup.org/wp-content/uploads/TCG_TSS_Overview_Common _Structures_v0.9_r03_published.pdf The enclosed TPM2B_DIGEST is calculated across multiple PCRs. Having to verify across multiple PCRs does not necessarily make it easy for a Verifier to appraise just the minimum set of PCR information which has changed since the last received TPM2B_DIGEST. Put another way, why should a Verifier reconstruct the proper value of all PCR Quotes when only a single PCR has changed? To help this happen, if the Attester does know specific PCR values, the Attester can provide these individual values via "unsigned-pcr-values". By comparing this information to the what has previously been validated, it is possible for a Verifier to confirm the Attester's signature while eliminating significant processing. Additionally, processing where KGVs are exposed can be safely eliminated. This is a long way of asserting that there is not redundant TPM information carried in tpm20-challenge-response-attestation RPC response. This is a good thing. We should provide the same level of scrutiny to the TPM1.2 objects. We should eliminate redundant objects from the tpm12-challenge-response-attestation RPC. If we were to eliminate redundant objects from the TPM1.2 Quote Response, I am know that we can eliminate the following objects: * leaf major * leaf minor * leaf rev-Minor * leaf rev-Minor I also think we can eliminate the following: * fixed -- at this is a response to the RPC question * locality-at-release Looking beyond these obvious objects, I am wondering if there is anyone needing to differentiate between tpm12-quote1 and tpm12-quote2. As TPM1.2 is going to be phased out as equipment gets changed, it seems to make little sense to support both variants if both are not being actively championed by someone. In fact, I suspect that the YANG model can be updated so that it need not care about quote1 and quote2. Can whomever included both quote1 and quote2 articulate why the must be a market need to support both going forward? If we can eliminate either quote1 or quote2 specifics, I suspect we could use the exact same structure as part of the RPC response as was used for TPM2. It would look something like: + tpm12-challenge-response-attestation ... +--ro output +--ro tpm12-attestation-response* [] +--ro certificate-name? certificate-name-ref +--ro TPMS_QUOTE_INFO binary +--ro quote-signature? binary +--ro up-time? uint32 +--ro node-id? string +--ro node-physical-index? int32 {ietfhw:entity-mib}? +--ro unsigned-pcr-values* [] +--ro TPM20-hash-algo? identityref +--ro pcr-values* [pcr-index] +--ro pcr-index pcr +--ro pcr-value? binary I would love to get people's thoughts on what is above, and what might be mandatory to support in tpm12-challenge-response-attestation RPC output. Thanks, Eric Eric Voit Principal Engineer .:|:.:|:. Cisco Systems, Inc. ------=_NextPart_001_126A_01D69E17.BF687A20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I am very happy to keep the TPM1.2s.   I am = just trying to make sure our design drives minimized operations and = development efforts.

 

Eric

 

From: Guy Fedorkow, October 9, 2020 = 8:34 AM

Hi Eric,

  We have a lot of TPM1.2’s out there = – I’d be reluctant to obsolete them to save a paragraph in = the YANG model…

As to the = structure of the model; Tom Laffey is probably the world’s expert = (sorry Tom), but I’ll find an internal reviewer for an informed = opinion.

Thanks

/guy

 

 

 

Juniper Business Use = Only

From: RATS <rats-bounces@ietf.org> = On Behalf Of Eric Voit (evoit)
Sent: Wednesday, October = 7, 2020 4:36 PM
To: Panwei (William) <william.panwei@huawei.com&g= t;; Birkholz, Henk <henk.birkholz@sit.fraunho= fer.de>; Eckel, Michael <michael.eckel@sit.fraunho= fer.de>; Guy Fedorkow <gfedorkow@juniper.net>; = Laffey, Tom (HPE Aruba) <tom.laffey@hpe.com>; frank.xialiang@huawei.comCc: rats@ietf.org; draft-ietf-rats-= yang-tpm-charra@ietf.org
Subject: [Rats] Reducing YANG = output objects with the tpm12-challenge-response-attestation = RPC

 

[External Email. = Be cautious of content]

 

I am = hoping we can simplify what is in Charra's TPM1.2 quote into something = similar to what is now in the TPM2.0 quote.    Does = anyone know who wrote the original TPM1.2 RPC for the Charra YANG = module?   If you did, can you chime in on the questions = below?

 

More specifics on the request:

Right now in the tpm20-challenge-response-attestation = RPC output are TPM protected objects enclosed within = TPMS_QUOTE_INFO. 

 

Definition of = TPMS_QUOTE_INFO Structure

-------------------------------------------------= --------

typedef struct {

    TPML_PCR_SELECTION = pcrSelect;

    TPM2B_DIGEST pcrDigest; = }

TPMS_QUOTE_INFO;

 

See Table 115 – of

https://trustedcomputinggr= oup.org/wp-content/uploads/TCG_TSS_Overview_Common_Structures_v0.9_r03_pu= blished.pdf

 

The enclosed = TPM2B_DIGEST is calculated across multiple PCRs.  Having to verify = across multiple PCRs does not necessarily make it easy for a Verifier to = appraise just the minimum set of PCR information which has changed since = the last received TPM2B_DIGEST.  Put another way, why should a = Verifier reconstruct the proper value of all PCR Quotes when only a = single PCR has changed? 

 

To help this = happen, if the Attester does know specific PCR values, the Attester can = provide these individual values via = "unsigned-pcr-values".   By comparing this = information to the what has previously been validated, it is possible = for a Verifier to confirm the Attester's signature while eliminating = significant processing.  Additionally, processing where KGVs are = exposed can be safely eliminated.

 

This is a = long way of asserting that there is not redundant TPM information = carried in tpm20-challenge-response-attestation RPC = response.   This is a good thing.

 

We should = provide the same level of scrutiny to the TPM1.2 objects.  We = should eliminate redundant objects from the = tpm12-challenge-response-attestation RPC.

 

If we were = to eliminate redundant objects from the TPM1.2 Quote Response, I am know = that we can eliminate the following objects:

  • leaf = major
  • leaf = minor
  • leaf = rev-Minor
  • leaf = rev-Minor

 

I also think = we can eliminate the following:

  • fixed  -- at this = is a response to the RPC question
  • locality-at-release

 

Looking = beyond these obvious objects, I am wondering if there is anyone needing = to differentiate between tpm12-quote1 and tpm12-quote2.   As = TPM1.2 is going to be phased out as equipment gets changed, it seems to = make little sense to support both variants if both are not being = actively championed by someone.  In fact, I suspect that the YANG = model can be updated so that it need not care about quote1 and = quote2.   Can whomever included both quote1 and quote2 = articulate why the must be a market need to support both going = forward?  

 

If we can = eliminate either quote1 or quote2 specifics, I suspect we could use the = exact same structure as part of the RPC response as was used for = TPM2.   It would look something like:

 

  + = tpm12-challenge-response-attestation

    ...

         +--ro = output

      =       +--ro tpm12-attestation-response* = []

      =          +--ro = certificate-name?      = certificate-name-ref

      =          +--ro = TPMS_QUOTE_INFO        = binary

      =          +--ro = quote-signature?       = binary

      =          +--ro = up-time?           = ;    uint32

      =          +--ro = node-id?           = ;    string

      =          +--ro = node-physical-index?   int32 = {ietfhw:entity-mib}?

      =          +--ro = unsigned-pcr-values* []

      =             += --ro TPM20-hash-algo?   identityref

      =             += --ro pcr-values* [pcr-index]

      =             &= nbsp;  +--ro pcr-index    pcr

      =             &= nbsp;  +--ro pcr-value?   binary

 

I would love = to get people's thoughts on what is above, and what might be mandatory = to support in tpm12-challenge-response-attestation RPC = output.

 

Thanks,

Eric

 

 

Eric Voit =

Principal Engineer

.:|:.:|:. Cisco Systems, Inc.

 

------=_NextPart_001_126A_01D69E17.BF687A20-- ------=_NextPart_000_1269_01D69E17.BF687A20 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAxMDA5MTIzOTQ4WjAjBgkqhkiG 9w0BCQQxFgQUMwU/5iIVRHEEJzZ7/8om/lylRZ0wSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAG9aoGoq5Il9Dy0+bXNGeK0/66M1/yKswAMGPdrZrgZm1CvRV5tmj92up6FhDi3uIP B2ZkN2mnObq1/8/5OSDZY/1q5BO1Ce08y+8iztkFlSne3WY5pOMuwbRmCOu/nPTtS+FUycFP5Mtg 7yMDY/hzoXilFXC4HUGiGIw8fOVV9tHJaLAZXxYX9TVKS1zaXtUrtahNPF4LJGnXzudbheSKIj9b SI8GeOBfglpEkvauP0jSOgAr0JxdxLYokL4ScWKGMHoJSHadii8uk8WBd4HcXvbwk0F6Y7Nuh/Z4 90qpgBU4wD90DLyisPTKS81tJLdrmhZY2xrrKyditWDUP235AAAAAAAA ------=_NextPart_000_1269_01D69E17.BF687A20-- From nobody Fri Oct 9 07:51:47 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E2623A0922 for ; Fri, 9 Oct 2020 07:51:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.296 X-Spam-Level: X-Spam-Status: No, score=-3.296 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=eiBgIOOG; dkim=pass (1024-bit key) header.d=juniper.net header.b=c6ZTWgRh Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a856nElWnPmd for ; Fri, 9 Oct 2020 07:51:43 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 397563A091B for ; Fri, 9 Oct 2020 07:51:43 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 099EmCbR012631; Fri, 9 Oct 2020 07:51:34 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=Y/8wYL+U2SOqPk3xWV0TvTeKSxswY11pTfFpHEOUvbI=; b=eiBgIOOGpfw+2MTVkvIAn/sSqrWTEw4wZYnnWU8jP8acyjRFhqsBM/m5nlq6gN1q11he 7aHpWeasABPDDHeF5FwQMU4ByryLbj9Co4tvHypOS8wCIYFLmiVdyNdmabS4bhN9Y9tU ReK50LfroJXCZWFuaibGLZNfMr1PrWUUlOE7zExqmlTa0PzPrrDFPat5DU7u+0lUx2fU H4O/Wlrkw6VdBtc5ZW9jutAI8I/xr8SHJpAEm/3pRlWfRso+jcYLaB8DOJ+cbI/9JsZz 7FasNj0mKMfHCYfWdopzNcT4xcJ6eBSEF2StNe5DbBrW91Psa7jU5QQpQhE2xg6vyqpA uw== Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2170.outbound.protection.outlook.com [104.47.58.170]) by mx0a-00273201.pphosted.com with ESMTP id 3429kx9eyx-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 09 Oct 2020 07:51:33 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=C9Atkf67OUNDA8TgiKQJQPjwLWt9yXJSAGQSFnqavTqkZwwxpTtK+wuuJk85gsmGP0sj8JP7Pd0oDDFuEYGW5RgM3h2rHBeRZQwZk/NcAmfA2Qvh46j14AADVjZGFP1ad4ldUWXb0JfdovyMd+JY7tbJTGP8cqeGV/0sVEsASPfzHugHUwH7TP+PMcHXhn9grzowNjUB9tiMGah9RBYxZ3gLI+uzylse7Trl6BeFo2F028h+OV7qf3Gw69btsxMD+G8tW593RRj6hgDEzCKJfrfJbf4pbsIMs1i4M5WccR3igAht9VChvWw/TJxLuEUZiZitR6T0nU1iCBZFyI2nUg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Y/8wYL+U2SOqPk3xWV0TvTeKSxswY11pTfFpHEOUvbI=; b=es/z+P1G0i49m0+xK6ZUeJ+q9iS0Sg0xK2CEJWpP1jtdfRsEaMXIpU10DWW/IpI7QAtF71hm551JDtPtahKozOJO6gXad4agG5+ynKtLx1TsDiW/ZraCz6VgeqsPS3Ym+6VPNhQVhGc+OIiUuGCBzHwx4w0CEaqkm0ryZPgcL3Td58Da5JWcyYsPx5iM1QvVDhgND4b6dvlXZa2xm8pCyAQZZ1GEWFayQ4UhuWRfMZgc/EXoKO4xKsKpv3iZdTb/Df4FKyUYPjQ+jyM5ieriPH+XWAmItunzDFb9gA6w01e3SNtQf61BSx35ZZn92/23MfvaqhNrsypjuqNl/mHrZg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Y/8wYL+U2SOqPk3xWV0TvTeKSxswY11pTfFpHEOUvbI=; b=c6ZTWgRhB3D+TVGBLc3FFxTElAMaXHbtJQRcMGyL4JEkv3GqC6Cpe5WiP74n2JfyEu0vozQGmzsWWHRxmgjizw2WZ2ES6EoZ54X7bV/X+IDWosJPxA//7DohT84JoXqINTpnHzRpxaWPfZuk29ifpdhVUk9ULQ6k+GgGyF3Byts= Received: from BLAPR05MB7378.namprd05.prod.outlook.com (2603:10b6:208:298::10) by MN2PR05MB6768.namprd05.prod.outlook.com (2603:10b6:208:1b7::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Fri, 9 Oct 2020 14:51:27 +0000 Received: from BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600]) by BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600%4]) with mapi id 15.20.3477.011; Fri, 9 Oct 2020 14:51:27 +0000 From: Guy Fedorkow To: "Panwei (William)" CC: "rats@ietf.org" , "Eric Voit (evoit)" Thread-Topic: Charra v03? -- Ready for YANG Doctor review? Thread-Index: AdaN+Mh0COkr7bssS32ju+PDTl/lwQB5ylgQAA28UhAAKB+9UAAUrTzAA1A1CXA= Date: Fri, 9 Oct 2020 14:51:27 +0000 Message-ID: References: <5c2c03297a834ca3b5bb3a4ed7d2b2b3@huawei.com> <31412534a97a4f90bbdfa8dafce945ef@huawei.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-09T14:51:25Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=b69867d4-0748-40d3-94c4-ce69855c5b15; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=juniper.net; x-originating-ip: [24.61.11.4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c5804588-c028-47bb-efc1-08d86c62cd3c x-ms-traffictypediagnostic: MN2PR05MB6768: x-ld-processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr,ExtFwd x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: +lUlF0QkA+DKo1a6pXoa4rTuG+7bOts+evM8YwGZdLtX0Kksuimc1hoGkp+Lehqjtc4WW03Et2GOHXegs7/SFfZJi10ULBDmuwHqUJH6Rg59P83WLmA+Tp0KLNm/UMbrlW+DI1Jz+V1oGp1EQoriLQc3JOux0ZqB+MjlzBWBEwAP3V3TKzoLcg484ujUYdUklQ4IRJN1M90uaqPbwaQPP6yX3glxUsMHtylyEzk0YzGoWyeoXtoofLjTQpoGF2PG9jreKUwHOc7Wf25CmsvIkPWsNK1dlQnYdPSvwAKdnnq74YJaS65KKH8MX0Tj3QvcVK/olp/zQyR5AhNlomgJBQaoZoFiuin3z5iZAr081TgKQxg0AK6eb4fN+dq0vNWxCNwPJKzdMBBORVD0rPpRsg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BLAPR05MB7378.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(396003)(39860400002)(136003)(346002)(366004)(2906002)(6506007)(66556008)(8936002)(66446008)(186003)(8676002)(5660300002)(64756008)(83080400001)(166002)(76116006)(33656002)(478600001)(26005)(7696005)(71200400001)(66476007)(83380400001)(55016002)(4326008)(53546011)(9686003)(66946007)(52536014)(66574015)(86362001)(54906003)(316002)(6916009)(966005); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: bKBWA2ZWzc2WkDl7mhxZPCg+HSa0FGXVVLPr+ZiEc9z6Lz7Pk6/ArVJJiV6/1gbuzWU+yVVps5jLyOAQtzKyZi/nhZywr7ykAyw7ReAcazP6z7oUsV3cdSrAJX9xIhthwsd2UTx34kqwYU8gjI19vPae1PQPezQkVXrYjDACt+9So8EZNGMquoVzq22OXYvYpfoh06GW/jdtPyTsXbbXZ+r1lQByUXXrPwpDtjZkEMR1lon6e80Ls+0kaXh9DVfv5yx6QtDJkxZxUZn3MqZv4q9uBGsERG5c5IWTzHEIuj3azoG0l+lJqTPOcc/JAQXF0SwKCFOm9E5I2NBeq5CWqUtsWU8bh8y0/P8/gTN3Scoze/Kv8YOx750YM3QMLGw7Uv/Vl2VUDXtuzlLsaW+xVJsG/GYajkLYDcyIixEe0R7nKMAJeagKqMJJQp44XjpX+kEfd0qJxruBdB8xQhtMailAGLeSO/8uX3DRNpjwMM4vbJKzECun+wzxcgnrO68ydPlwYtbnZS68DyCfCJf9dlFy+ujHH6ZZtlZxKNsudGAboRHzVE+ebbLNsSVkcwRjmHqtLAo5eR98mFhBHIzpfMeoVW3z2tNVKmeBxzNGbbWQbKGYBge/MbAn9c9dhNizrvslWdzmrQQonbHD/By3Ag== Content-Type: multipart/alternative; boundary="_000_BLAPR05MB73788B16210272DA322C6A31BA080BLAPR05MB7378namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BLAPR05MB7378.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c5804588-c028-47bb-efc1-08d86c62cd3c X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2020 14:51:27.7409 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: FpuLCoDdRlOhzT4K1Ffx0nL7bPMD5hHf9FDUxOqgOHPVJo+1eCU+2Ar+ynvwPvDRG34p5E8v5Wu8KMl+Iyz4kQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR05MB6768 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-09_06:2020-10-09, 2020-10-09 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 impostorscore=0 bulkscore=0 clxscore=1015 adultscore=0 suspectscore=0 mlxscore=0 spamscore=0 malwarescore=0 phishscore=0 mlxlogscore=999 priorityscore=1501 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010090108 Archived-At: Subject: Re: [Rats] Charra v03? -- Ready for YANG Doctor review? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 14:51:46 -0000 --_000_BLAPR05MB73788B16210272DA322C6A31BA080BLAPR05MB7378namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Wei Pan, As Eric says, the vTPM in isolation is not so hard, but it has a number o= f thorny questions relating the vTPM to underlying hardware. Although I kn= ow there are some restrictions in access, but the TCG has a Virtual Platfor= m Work Group dedicated to examining these issues and proposing solutions th= at balance security and flexibility. If it's possible, it might be good to= get involved with that work... Thanks /guy Juniper Business Use Only From: Eric Voit (evoit) Sent: Tuesday, September 29, 2020 8:16 AM To: Panwei (William) ; draft-ietf-rats-yang-tpm-= charra@ietf.org Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: RE: Charra v03? -- Ready for YANG Doctor review? Hi Wei Pan, One vTPM can be handled without a volume issue. But if we are talking lots= of vTPMs, then we should examine the business purpose here. One possibili= ty you mention below is VNF. A subset of the VNF is that you have vTPM ser= ving a logical router. Certainly many vTPMs like this can increase the volu= me. However other significant changes will be needed before we can do a mea= ningful attestation of a vTPM per logical routing. This will include: * Being able to prove that a vTPM is *currently* bound to a specific ph= ysical device (potentially an x86 server.) * Being able to get the attestation information about the physical devi= ce (this requires a business relationship with the hardware operator.) * Proving that there is no MITM software between a virtual router and a= physical device. The Charra model is not in a position to handle the full set of virtual dev= ice requirements yet. Nor is draft-ietf-rats-tpm-based-network-device-atte= st documenting these operating requirements. As a result what we can do right now is ensure that we don't preclude what = you say below. I.e., we don't preclude "compressing the log records into a= file and transferring the file by using some file transfer protocol". I don't see anything in the current Charra which should limit sending log m= essages in other transports, not anything which would preclude. Nor anythi= ng which would preclude "compressing the log records into a file and transf= erring the file by using some file transfer protocol". So I don't think w= e are limiting future solutions with the current Charra definition. So I think it is safe not to worry about the volume question right now. Pe= rhaps we should start with new drafts once the VNF topic becomes more press= ing? Thoughts? Eric From: Panwei, September 22, 2020 8:43 AM Hi Eric, For IMA and Network Equipment Boot, the log is essential for the appraisal.= Because the Known Good Values are for the files and not directly for the P= CRs, and the Verifier needs the log to simulate the extending processes and= compare the result with the PCR values received from the Attester. The logs have the possibility of being very large. For example, in the VNF = scenario, the Attester has the ability to launch many virtual machines that= have their vTPMs. If one Attester has 1024 virtual machines, each virtual = machine has 1024 files to be loaded and measured, and each file has a 100by= tes~ log record, then the whole log will exceed 100Mbytes. I know to address this issue there are other ways rather than NETCONF. One = simple choice I assume is that we can add an optional element 'log-file-nam= e' in the log output RPC, when the Attester uses this element it doesn't ne= ed to send the log entries in this RPC and indicates to the Verifier that t= he Verifier can retrieve the log file later by some other file transfer mea= ns. In my thinking, this method is quite simple and no big change, while al= so increases the interoperability. But I don't know how do you feel about i= t? Regards & Thanks! Wei Pan From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Monday, September 21, 2020 9:25 PM To: Panwei (William) >; draft-ietf-rats-yang-tpm-charra@ietf.org Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: RE: Charra v03? -- Ready for YANG Doctor review? Hello Wei Pan, I am hoping this is not an issue for the Charra model for several reasons: * The speed at which a TPM can do extend operations is hardware limited= . As a result I hope we don't see massively large logs. (I am hoping that= IMA logs are as large as we are ever going to get.) * Code on the Attester should be able to do some pre-filtering on the t= ypes of information which might make it into a PCR. Not everything needs = to be measured. * Where there does need to be *a lot* of record interpretation, there w= ill be more need for vendor specific Verifiers. (This is in contrast with = things like Known Good Values, which can be published to many Verifiers.) * There are many other ways to get large logs which are not NETCONF bas= ed. We can always standardize choices beyond NETCONF if there is a busine= ss need for such interoperability. Thanks, Eric From: Panwei (William), September 21, 2020 3:20 AM Hi Eric, authors, Thanks for your updating. I have one comment but not coming from your revis= ing of the YANG model. I have mentioned a potential scalability issue before (https://mailarchive.= ietf.org/arch/msg/rats/qFq91oujxykEqBGYIW3N8ljaN68/), but unfortunately the= re was no more discussion about it. The situation I'm concerned about is that when the number of log records is= too many, transferring them directly using the NETCONF RPCs may be a probl= em because it's not so efficient. The bandwidth would be heavily consumed, = and other management messages may be interfered. I know there may be some methods to address this issue, for example, compre= ssing the log records into a file and transferring the file by using some f= ile transfer protocols. But these methods also need interoperability betwee= n the Attester and Verifier. So I don't know whether CHARRA draft should gi= ve a standard way to address the issue. Regards & Thanks! Wei Pan From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Saturday, September 19, 2020 4:31 AM To: draft-ietf-rats-yang-tpm-charra@ietf.org; Panwei (William) > Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: Charra v03? -- Ready for YANG Doctor review? Hi Co-authors, I just did some minor scrubbing, and added text describing various element= s of the YANG model within the mainline Charra text. The compiled draft hasn't been merged from the pull requests in the main repository yet. Bu= t if/when the merging is done, it should look something like: https://github.com/ericvoit/basic-yang-module/blob/master/draft-ietf-rats-y= ang-tpm-charra.txt I believe the draft is ready for initial review by the YANG doctors. I als= o believe this version is ready for posting as v03. Any thoughts/comments/objections? Eric --_000_BLAPR05MB73788B16210272DA322C6A31BA080BLAPR05MB7378namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Wei Pan,

  As Eric says, the vTPM in isolation is not so= hard, but it has a number of thorny questions relating the vTPM to underly= ing hardware.  Although I know there are some restrictions in access, = but the TCG has a Virtual Platform Work Group dedicated to examining these issues and proposing solutions that balance s= ecurity and flexibility.  If it’s possible, it might be good to = get involved with that work…

  Thanks

/guy

 

 

 

Juniper Business Use Only

From: Eric Voit (evoit) <evoit@cisco.com&g= t;
Sent: Tuesday, September 29, 2020 8:16 AM
To: Panwei (William) <william.panwei@huawei.com>; draft-ietf-r= ats-yang-tpm-charra@ietf.org
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: RE: Charra v03? -- Ready for YANG Doctor review?=

 

Hi Wei Pan,

 

One vTPM can be handled without a volume issue. = ; But if we are talking lots of vTPMs, then we should examine the business = purpose here.  One possibility you mention below is VNF.  A subse= t of the VNF is that you have vTPM serving a logical router. Certainly many vTPMs like this can increase the volume. However ot= her significant changes will be needed before we can do a meaningful attest= ation of a vTPM per logical routing.  This will include:

  • Being able to prove that a vTPM is *currently* bound to a specific ph= ysical device (potentially an x86 server.)
  • Being able = to get the attestation information about the physical device (this requires= a business relationship with the hardware operator.)
  • = Proving that there is no MITM software between a virtual router and a physi= cal device.

 

The Charra model is not in a position to handle the = full set of virtual device requirements yet.  Nor is draft-ietf-rats-t= pm-based-network-device-attest documenting these operating requirements.&nb= sp; 

 

As a result what we can do right now is ensure that = we don't preclude what you say below.  I.e., we don't preclude "c= ompressing the log records into a file and transferring the file by using s= ome file transfer protocol". 

 

I don't see anything in the current Charra which sho= uld limit sending log messages in other transports, not anything which woul= d preclude.  Nor anything which would preclude "compressing the l= og records into a file and transferring the file by using some file transfer protocol".   So I don't th= ink we are limiting future solutions with the current Charra definition.&nb= sp;

 

So I think it is safe not to worry about the volume = question right now.  Perhaps we should start with new drafts once the = VNF topic becomes more pressing?

 

Thoughts?

Eric

 

 

From: Panwei, = September 22, 2020 8:43 AM

Hi Eric,

 

For IMA and Network Equipment = Boot, the log is essential for the appraisal. Because the Known Good Values= are for the files and not directly for the PCRs, and the Verifier needs the log to simulate the extending processes and com= pare the result with the PCR values received from the Attester.<= /span>

The logs have the possibility = of being very large. For example, in the VNF scenario, the Attester has the= ability to launch many virtual machines that have their vTPMs. If one Attester has 1024 virtual machines, each virtual = machine has 1024 files to be loaded and measured, and each file has a 100by= tes~ log record, then the whole log will exceed 100Mbytes.

I know to address this issue t= here are other ways rather than NETCONF. One simple choice I assume is that= we can add an optional element ‘log-file-name’ in the log output RPC, when the Attester uses this element it doesn’= t need to send the log entries in this RPC and indicates to the Verifier th= at the Verifier can retrieve the log file later by some other file transfer= means. In my thinking, this method is quite simple and no big change, while also increases the interoperability.= But I don’t know how do you feel about it?

 

Reg= ards & Thanks!

Wei= Pan

 

From:<= /span> Eric Voit (evoit) [mailto:evoit@cisco.com]
Sent: Monday, September 21, 2020 9:25 PM
To: Panwei (William) <william.panwei@huawei.com>; draft-ietf-rats= -yang-tpm-charra@ietf.org
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: RE: Charra v03? -- Ready for YANG Doctor review?=

&nbs= p;

Hello Wei= Pan,

&nbs= p;

I am hopi= ng this is not an issue for the Charra model for several reasons:

&nbs= p;

  • The speed at which a TPM can do extend operations= is hardware limited.  As a result I hope we don't see massively large= logs.  (I am hoping that IMA logs are as large as we are ever going to get.)
  • Code on the Attester should be able to do some pre-filtering on the typ= es of information which might make it into a PCR.   Not everythin= g needs to be measured.
  • Whe= re there does need to be *a lot* of record interpretation, there will be mo= re need for vendor specific Verifiers.  (This is in contrast with thin= gs like Known Good Values, which can be published to many Verifiers.)<= /li>
  • There are many other ways to get large logs= which are not NETCONF based.   We can always standardize choices= beyond NETCONF if there is a business need for such interoperability.=

&nbs= p;

Thanks,

Eric=

&nbs= p;

From: Panwei (William), September 21, 2020 3:20 AM

Hi Eric, authors,

 

Thanks for your updating. I ha= ve one comment but not coming from your revising of the YANG model.

 

I have mentioned a potential s= calability issue before (https://mailarchive.ietf.org/arch/msg/rat= s/qFq91oujxykEqBGYIW3N8ljaN68/), but unfortunately there was no more discussion about it.=

The situation I’m concer= ned about is that when the number of log records is too many, transferring = them directly using the NETCONF RPCs may be a problem because it’s not so efficient. The bandwidth would be heavily consum= ed, and other management messages may be interfered.

I know there may be some metho= ds to address this issue, for example, compressing the log records into a f= ile and transferring the file by using some file transfer protocols. But these methods also need interoperability between t= he Attester and Verifier. So I don’t know whether CHARRA draft should= give a standard way to address the issue.

 

Reg= ards & Thanks!

Wei= Pan

 

From:<= /span> Eric Voit (evoit) [mailto:evoit@cisco.com]
Sent: Saturday, September 19, 2020 4:31 AM
To: draf= t-ietf-rats-yang-tpm-charra@ietf.org; Panwei (William) <william.panwei@huawei.com>
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: Charra v03? -- Ready for YANG Doctor review?

&nbs= p;

Hi Co-aut= hors,

&nbs= p;

I just di= d some minor scrubbing, and added text describing  various elements of= the YANG model within the mainline Charra text. 

&nbs= p;

The compi= led draft hasn't been merged from the pull re= quests in the main repository yet.   But if/when the merging = is done, it should look something like:

https://github.com/ericvoit/basic-yang-module/blob/= master/draft-ietf-rats-yang-tpm-charra.txt

&nbs= p;

I believe= the draft is ready for initial review by the YANG doctors.  I also be= lieve this version is ready for posting as v03.

&nbs= p;

Any thoug= hts/comments/objections? 

&nbs= p;

Eric=

--_000_BLAPR05MB73788B16210272DA322C6A31BA080BLAPR05MB7378namp_-- From nobody Fri Oct 9 11:15:12 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CE5B3A0D95 for ; Fri, 9 Oct 2020 11:15:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.897 X-Spam-Level: X-Spam-Status: No, score=-11.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=TyPzu6nS; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=gbacXAT+ Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5ji9zpBOUz_c for ; Fri, 9 Oct 2020 11:15:09 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C4783A0D93 for ; Fri, 9 Oct 2020 11:15:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=11147; q=dns/txt; s=iport; t=1602267309; x=1603476909; h=from:to:subject:date:message-id:mime-version; bh=WbwAnpZKHEYCsymnDy63w7BuvmT2U/m4EdT44RQQFEQ=; b=TyPzu6nS31Ie+//GwduCtB/rCkRcnRfaOaK/g3lvtklyDrN9Gmyzmd2W +MonPHBmFbAe+O/31oei/GO5AYrHjBQWtcduOXMLXqsgJPGEgdZH3b0bp kciHGT+GUsrZ1IImpEXj5P9Y+J1Ll5Ldtc6VzAw26Gj/AptmmGEEnJxd0 c=; X-IPAS-Result: =?us-ascii?q?A0BNAABUp4Bf/5pdJa1GFwMdAQE8AQUFAQIBCQGBZAKBI?= =?us-ascii?q?S9RB3BZLywKhDODRgOhXoRvgS4UgQgFBANVCwEBAQ0BASUIAgQBAYRKGYF8A?= =?us-ascii?q?iU0CQ4CAwEBAQMCAwEBAQEFAQEBAgEGBG2FXAELhgsRHQEBJBQNBAE0BAwDA?= =?us-ascii?q?wIEGRcUEAMEEyKDBAGBfk0DLgEOP513AoE5iCw1dl9TgwEBAQVGggaCVxiCE?= =?us-ascii?q?AMGBYEzAYJxgl9MMw+GVhuCAIERJxyBOIFTgQSBWAQXgQcuKAoMGgiCHSszg?= =?us-ascii?q?hIbkCqDG4FthRidFAqCaIkAgheJWoV2Ax+DEzmJT5QbkxyKcJEBhDACBAIEB?= =?us-ascii?q?QIOAQEFgVQ6gVdwFWUBgj4TPRcCDVaNVQwLgS6CIIpWdAI1AgYKAQEDCXyLC?= =?us-ascii?q?CSBDwGBEAEB?= IronPort-PHdr: =?us-ascii?q?9a23=3AxFi4AhNej/OCuRM9PxAl6mtXPHoupqn0MwgJ65?= =?us-ascii?q?Eul7NJdOG58o//OFDEvKw33l7EQYud7OhL2KLasKHlDGoH55vJ8HUPa4dFWB?= =?us-ascii?q?JNj8IK1xchD8iIBQyeTrbqYiU2Ed4EWApj+He2YklYBMi4YEfd8TW+6DcIEU?= =?us-ascii?q?D5Mgx4bu3+Bo/ViZGx0Oa/s53eaglFnnyze7R3eR63tg7W8MIRhNhv?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-AV: E=Sophos;i="5.77,355,1596499200"; d="scan'208,217";a="550980877" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 09 Oct 2020 18:15:07 +0000 Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id 099IF7kq004026 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Fri, 9 Oct 2020 18:15:07 GMT Received: from xhs-rcd-002.cisco.com (173.37.227.247) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 9 Oct 2020 13:15:07 -0500 Received: from xhs-rcd-001.cisco.com (173.37.227.246) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 9 Oct 2020 13:15:06 -0500 Received: from NAM12-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-001.cisco.com (173.37.227.246) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Fri, 9 Oct 2020 13:15:06 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iA/N7NmSgbIv+O3wPaF08F6sW4aSUYwQnG8//pJ8IXrIisR6kTpHHmSzqJwWSJMAj74N208O6mYbJBt4r7tVyGsQ38g2NEC/JLkWa3yn9rMMBa+0w4bfmOzXc6ybjP1/wZek4hmPuBMz6JDbUaAAuL1B363WysDbbIocn8DkuC97TlLVurNPqZnI7++6b5Iz8lEvhE6erH3BAE/hg7IT0hhtBn0c3PDvmK5ZD0LeAJ+IZaf4bGnqxgpvIybWl0/Tya3DxNTDEn8nAh3EWQxhw3ObOwn9rAvoccSgBGJ/HGc53ABaMtcLkdZCcYxV5QqEnUSDJ3Bg3lS0wVSS24vjfw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WbwAnpZKHEYCsymnDy63w7BuvmT2U/m4EdT44RQQFEQ=; b=LodJOrINe4/XybgKAN46wvy8jmNgj1MxuIVq6KrnveA2edSfgH+ueLbna3TuapYNpxDS825nLndPbL2N8rLL/PwJvVP2Q2HKbKMcTLz31uYEEhPh1WKi1diRcbKlTVeiRpSJkS/620IuwBL7ZIDUIvVmpHS8iHIot80kAK5TdmRXKwxLnn8h/V8zfxlAQu7yPQU0PwIn2CimKYDESRyiMrIhi9kk9wC2yAgfkgnEW7stH0+PIH/fex27Znc/ynO+LtWSDjw2Xaa7WGUJfUED/5sBOfJZtadVDP4z++Jfv4pIUJGnVv5/9B9uDAPSxdmDSWyeIzkj+UgfDEolOZMLYw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WbwAnpZKHEYCsymnDy63w7BuvmT2U/m4EdT44RQQFEQ=; b=gbacXAT+jOJIRMIr1IiX5m8jV3I/iopyK00YTYgzOjqmWBraj4av2GnsNpkjxDlmyPAXb3q5L1S1WuxeEcbYJPJ+nMKjQiw4XDfe9t/uX3/+LYztaAbMfsxJIm658xmGeces7LJKbEFzKlaRiXDOOWe2KlmVBBd2bygNrlE8q0c= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BY5PR11MB4337.namprd11.prod.outlook.com (2603:10b6:a03:1c1::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3433.39; Fri, 9 Oct 2020 18:15:03 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3455.025; Fri, 9 Oct 2020 18:15:03 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: RATs Virtual Interim Oct 23rd 2:30pmUTC, 10:30am EST Thread-Index: AQHWnmgbD6qRebSKRkK8cInLnUfH7Q== Date: Fri, 9 Oct 2020 18:15:03 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1a.200914 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: cc077a2f-ca47-4318-d1a5-08d86c7f3e78 x-ms-traffictypediagnostic: BY5PR11MB4337: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: D4geNt4ZR8tJDcWK78IeCxAoMU4KzUqgiAZjNUd/f5Z/4DWodZbh7WPnjCATnMMr26KEQAgHohid8/ppChOQ3GzbbKCvOeKhtU8QdDZyBSTfwPrKrFFzdIDDsYuGhKJdLbrMdO9vF4ZmaGWCAV/T0VBZ6JE84HOb79reRB7naFK4LObNllSVUMJaoJGTfbTsGS9LPPERmxEZYFPULzqeGWb99K8z3wecVYoETJP5HUUq8mv9N9wtZu+Y50uuKnw4uToAdlT1nR7p4w3ALHK9Wxc4LP9OCVyvI9nW84W0uKt73mOX5MgY8xz3rTXcPxUjlgJe/9XyRcX4/cdT7rtFkmSu2BQ4kqI9SghjuhZFEd0dka/i1WYbJqGAno+8ZesmFCUmb4CWUFLj3kZs7LuE7w== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(396003)(39860400002)(376002)(346002)(136003)(66446008)(316002)(66476007)(33656002)(2906002)(66556008)(86362001)(5660300002)(26005)(966005)(76116006)(64756008)(71200400001)(83080400001)(8676002)(8936002)(6506007)(6916009)(478600001)(166002)(6512007)(2616005)(36756003)(83380400001)(45080400002)(16799955002)(66946007)(186003)(6486002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_B0D927E10EE94C8491A086F3BDFA7E70ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cc077a2f-ca47-4318-d1a5-08d86c7f3e78 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Oct 2020 18:15:03.6377 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 2HgB/7imF2dFObFEwEHJ2KfyZcGMhQHF+zYqNZhjzb1Zx7qXGkqEweVWQrtLkSv4TMpSrmkcT5JNj6O0NDcYBw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR11MB4337 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: [Rats] RATs Virtual Interim Oct 23rd 2:30pmUTC, 10:30am EST X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 18:15:11 -0000 --_000_B0D927E10EE94C8491A086F3BDFA7E70ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8gUkFUcyBwYXJ0aWNpcGFudHMsDQoNCkZyb20gdGhlIGRvb2RsZSBwb2xsLCB0aGUgbWFq b3JpdHkgY2hvc2UgYW5kIHRodXMgd2Ugd2lsbCBoYXZlIG91ciB2aXJ0dWFsIGludGVyaW0gb246 DQoNCjEwOjMwIEFNIC0gMTI6MDAgUE0gRnJpZGF5LCBPY3QgMjMgMjAyMCAoVVRDLTA0OjAwKSBF YXN0ZXJuIFRpbWUgKFVTICYgQ2FuYWRhKQ0KDQpUaGFuayB5b3UgdG8gdGhvc2Ugd2hvIHBhcnRp Y2lwYXRlZCBpbiB0aGUgcG9sbC4gIFRoZSB3ZWJleCBsaW5rIGlzIGF0IHRoZSBlbmQgb2YgdGhp cyBtZXNzYWdlLg0KDQpCZXlvbmQgZ2V0dGluZyB1cGRhdGVzIGZvciB0aGUgYWRvcHRlZCBkcmFm dHMsIHBsZWFzZSBsZXQgdGhlIGNoYWlycyBrbm93IGlmIHlvdSB3YW50IHRvIHByZXNlbnQvZGlz Y3VzcyBvdGhlciB0b3BpY3MvZHJhZnRzIGFuZCB0aW1lIG5lZWRlZC4NCg0KVGhhbmtzLA0KICAg TmFuY3kNCg0KV2ViZXggSW5mbzoNCkpPSU4gV0VCRVggTUVFVElORw0KaHR0cHM6Ly9pZXRmLndl YmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWQ3YThmNGU1ZWRmYzRjMDFhN2Y0NDVkODAxNWVjMzlh DQpNZWV0aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAxNzEgNTkwIDAyMzQNCk1lZXRpbmcgcGFz c3dvcmQ6IHRWMm5LRTlIUUI3DQoNClRBUCBUTyBKT0lOIEZST00gQSBNT0JJTEUgREVWSUNFIChB VFRFTkRFRVMgT05MWSkNCisxLTY1MC00NzktMzIwOCwsMTcxNTkwMDIzNCMjIHRlbDolMkIxLTY1 MC00NzktMzIwOCwsKjAxKjE3MTU5MDAyMzQlMjMlMjMqMDEqIENhbGwtaW4gdG9sbCBudW1iZXIg KFVTL0NhbmFkYSkNCg0KSk9JTiBCWSBQSE9ORQ0KMS02NTAtNDc5LTMyMDggQ2FsbC1pbiB0b2xs IG51bWJlciAoVVMvQ2FuYWRhKQ0KDQpHbG9iYWwgY2FsbC1pbiBudW1iZXJzOg0KaHR0cHM6Ly9p ZXRmLndlYmV4LmNvbS9pZXRmL2dsb2JhbGNhbGxpbi5waHA/TVRJRD1tNzIwNmUxYWRmNzljZjgw NDIxNzJiNTY4OTNhYjMwMDMNCkpPSU4gRlJPTSBBIFZJREVPIFNZU1RFTSBPUiBBUFBMSUNBVElP Tg0KRGlhbCBzaXA6MTcxNTkwMDIzNEBpZXRmLndlYmV4LmNvbTxtYWlsdG86MTcxNTkwMDIzNEBp ZXRmLndlYmV4LmNvbT4NCllvdSBjYW4gYWxzbyBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIg eW91ciBtZWV0aW5nIG51bWJlci4NCg0KSm9pbiB1c2luZyBNaWNyb3NvZnQgTHluYyBvciBNaWNy b3NvZnQgU2t5cGUgZm9yIEJ1c2luZXNzDQpEaWFsIHNpcDoxNzE1OTAwMjM0LmlldGZAbHluYy53 ZWJleC5jb208bWFpbHRvOjE3MTU5MDAyMzQuaWV0ZkBseW5jLndlYmV4LmNvbT4NCg0KSWYgeW91 IGFyZSBhIGhvc3QsIGNsaWNrIGhlcmUgdG8gdmlldyBob3N0IGluZm9ybWF0aW9uOg0KaHR0cHM6 Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWE5MjA0NWNkYzZmNjgwYzFiMjhiMDUx NTQzMzFmNjNjDQoNCkNhbid0IGpvaW4gdGhlIG1lZXRpbmc/IENvbnRhY3Qgc3VwcG9ydCBoZXJl Og0KaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL21jDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFBs ZWFzZSBub3RlIHRoYXQgdGhpcyBXZWJleCBzZXJ2aWNlIGFsbG93cyBhdWRpbyBhbmQgb3RoZXIg aW5mb3JtYXRpb24gc2VudCBkdXJpbmcgdGhlIHNlc3Npb24gdG8gYmUgcmVjb3JkZWQsIHdoaWNo IG1heSBiZSBkaXNjb3ZlcmFibGUgaW4gYSBsZWdhbCBtYXR0ZXIuIFlvdSBzaG91bGQgaW5mb3Jt IGFsbCBtZWV0aW5nIGF0dGVuZGVlcyBwcmlvciB0byByZWNvcmRpbmcgaWYgeW91IGludGVuZCB0 byByZWNvcmQgdGhlIG1lZXRpbmcuDQoNCg0K --_000_B0D927E10EE94C8491A086F3BDFA7E70ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJIZWx2ZXRp Y2EgTmV1ZSI7DQoJcGFub3NlLTE6MiAwIDUgMyAwIDAgMCAyIDAgNDt9DQovKiBTdHlsZSBEZWZp bml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXtt YXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBl cmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1k ZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93 ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbC1jb21wb3NlOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5kYXRlaXRlbQ0KCXttc28tc3R5bGUtbmFtZTpkYXRlaXRl bTt9DQpzcGFuLmxhc3RkYXRlaXRlbQ0KCXttc28tc3R5bGUtbmFtZTpsYXN0ZGF0ZWl0ZW07fQ0K Lk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1p bHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41 aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNl Y3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFz cz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij5IZWxsbyBSQVRzIHBhcnRpY2lwYW50cyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkZyb20gdGhlIGRvb2RsZSBwb2xsLCB0aGUgbWFqb3Jp dHkgY2hvc2UgYW5kIHRodXMgd2Ugd2lsbCBoYXZlIG91ciB2aXJ0dWFsIGludGVyaW0gb246PG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSBOZXVlJnF1b3Q7O2NvbG9yOiMxMjEyMTI7YmFja2dyb3VuZDp3aGl0ZSI+MTA6 MzAgQU0gLSAxMjowMCBQTSZuYnNwO0ZyaWRheSwgT2N0IDIzIDIwMjAmbmJzcDsoVVRDLTA0OjAw KSBFYXN0ZXJuIFRpbWUgKFVTICZhbXA7IENhbmFkYSk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rIHlvdSB0byB0aG9zZSB3aG8gcGFydGljaXBhdGVkIGlu IHRoZSBwb2xsLiZuYnNwOyBUaGUgd2ViZXggbGluayBpcyBhdCB0aGUgZW5kIG9mIHRoaXMgbWVz c2FnZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkJleW9uZCBn ZXR0aW5nIHVwZGF0ZXMgZm9yIHRoZSBhZG9wdGVkIGRyYWZ0cywgcGxlYXNlIGxldCB0aGUgY2hh aXJzIGtub3cgaWYgeW91IHdhbnQgdG8gcHJlc2VudC9kaXNjdXNzIG90aGVyIHRvcGljcy9kcmFm dHMgYW5kIHRpbWUgbmVlZGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDsmbmJzcDsgTmFuY3kgPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5XZWJleCBJbmZvOjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpPSU4gV0VCRVggTUVFVElORzxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9pZXRm LndlYmV4LmNvbS9pZXRmL2oucGhwP01USUQ9bWQ3YThmNGU1ZWRmYzRjMDFhN2Y0NDVkODAxNWVj MzlhIj5odHRwczovL2lldGYud2ViZXguY29tL2lldGYvai5waHA/TVRJRD1tZDdhOGY0ZTVlZGZj NGMwMWE3ZjQ0NWQ4MDE1ZWMzOWE8L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5NZWV0aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAxNzEgNTkwIDAyMzQ8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk1lZXRpbmcgcGFzc3dvcmQ6IHRWMm5LRTlIUUI3 PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRBUCBUTyBKT0lOIEZST00gQSBNT0JJTEUgREVWSUNF IChBVFRFTkRFRVMgT05MWSk8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPisx LTY1MC00NzktMzIwOCwsMTcxNTkwMDIzNCMjIHRlbDolMkIxLTY1MC00NzktMzIwOCwsKjAxKjE3 MTU5MDAyMzQlMjMlMjMqMDEqIENhbGwtaW4gdG9sbCBudW1iZXIgKFVTL0NhbmFkYSk8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Sk9JTiBCWSBQSE9ORTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+MS02NTAtNDc5LTMyMDggQ2FsbC1pbiB0b2xsIG51bWJlciAoVVMvQ2FuYWRh KTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5HbG9iYWwgY2FsbC1pbiBudW1iZXJzOjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4 LmNvbS9pZXRmL2dsb2JhbGNhbGxpbi5waHA/TVRJRD1tNzIwNmUxYWRmNzljZjgwNDIxNzJiNTY4 OTNhYjMwMDMiPmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9nbG9iYWxjYWxsaW4ucGhwP01U SUQ9bTcyMDZlMWFkZjc5Y2Y4MDQyMTcyYjU2ODkzYWIzMDAzPC9hPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Sk9JTiBGUk9NIEEgVklERU8gU1lTVEVNIE9SIEFQUExJQ0FU SU9OPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5EaWFsIHNpcDo8YSBocmVm PSJtYWlsdG86MTcxNTkwMDIzNEBpZXRmLndlYmV4LmNvbSI+MTcxNTkwMDIzNEBpZXRmLndlYmV4 LmNvbTwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPllvdSBjYW4gYWxz byBkaWFsIDE3My4yNDMuMi42OCBhbmQgZW50ZXIgeW91ciBtZWV0aW5nIG51bWJlci48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Sm9pbiB1c2luZyBNaWNyb3NvZnQgTHluYyBvciBNaWNyb3NvZnQg U2t5cGUgZm9yIEJ1c2luZXNzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFUyI+RGlhbCBzaXA6PC9zcGFuPjxhIGhyZWY9Im1haWx0bzoxNzE1OTAwMjM0 LmlldGZAbHluYy53ZWJleC5jb20iPjxzcGFuIGxhbmc9IkVTIj4xNzE1OTAwMjM0LmlldGZAbHlu Yy53ZWJleC5jb208L3NwYW4+PC9hPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SWYgeW91IGFyZSBhIGhvc3QsIGNs aWNrIGhlcmUgdG8gdmlldyBob3N0IGluZm9ybWF0aW9uOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL2oucGhw P01USUQ9bWE5MjA0NWNkYzZmNjgwYzFiMjhiMDUxNTQzMzFmNjNjIj5odHRwczovL2lldGYud2Vi ZXguY29tL2lldGYvai5waHA/TVRJRD1tYTkyMDQ1Y2RjNmY2ODBjMWIyOGIwNTE1NDMzMWY2M2M8 L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNhbid0IGpvaW4gdGhlIG1lZXRpbmc/IENvbnRh Y3Qgc3VwcG9ydCBoZXJlOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEg aHJlZj0iaHR0cHM6Ly9pZXRmLndlYmV4LmNvbS9pZXRmL21jIj5odHRwczovL2lldGYud2ViZXgu Y29tL2lldGYvbWM8L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklNUE9SVEFOVCBOT1RJQ0U6 IFBsZWFzZSBub3RlIHRoYXQgdGhpcyBXZWJleCBzZXJ2aWNlIGFsbG93cyBhdWRpbyBhbmQgb3Ro ZXIgaW5mb3JtYXRpb24gc2VudCBkdXJpbmcgdGhlIHNlc3Npb24gdG8gYmUgcmVjb3JkZWQsIHdo aWNoIG1heSBiZSBkaXNjb3ZlcmFibGUgaW4gYSBsZWdhbCBtYXR0ZXIuIFlvdSBzaG91bGQgaW5m b3JtIGFsbCBtZWV0aW5nIGF0dGVuZGVlcyBwcmlvciB0byByZWNvcmRpbmcgaWYNCiB5b3UgaW50 ZW5kIHRvIHJlY29yZCB0aGUgbWVldGluZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_B0D927E10EE94C8491A086F3BDFA7E70ciscocom_-- From nobody Fri Oct 9 11:35:16 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D5D773A10C5 for ; Fri, 9 Oct 2020 11:35:13 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 7.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160226851385.6860.8340214531234660633@ietfa.amsl.com> Date: Fri, 09 Oct 2020 11:35:13 -0700 From: IETF Secretariat Archived-At: Subject: [Rats] Milestones changed for rats WG X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 18:35:14 -0000 Deleted milestone "Call for adoption on Tokbind draft". Changed milestone "Call for adoption on architecture draft", resolved as "Done". Changed milestone "Call for adoption on Yang Module draft", resolved as "Done". Deleted milestone "Submit Tokkbind draft to IESG for publication". Deleted milestone "Submit Claim format draft to IESG for publication". Changed milestone "Submit YANG Module draft to IESG for publication", set due date to December 2020 from March 2020. Changed milestone "Submit TUDA draft to IESG for publication", set due date to December 2020 from March 2020. Changed milestone "Submit EAT draft to IESG for publication", set due date to March 2021 from March 2020. URL: https://datatracker.ietf.org/wg/rats/about/ From nobody Fri Oct 9 11:48:57 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EAE233A0C62; Fri, 9 Oct 2020 11:48:54 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF-Announce" Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160226933486.7895.9954391654814081854@ietfa.amsl.com> Date: Fri, 09 Oct 2020 11:48:54 -0700 Archived-At: Subject: [Rats] Remote ATtestation ProcedureS (rats) WG Virtual Meeting: 2020-10-23 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 18:48:56 -0000 The Remote ATtestation ProcedureS (rats) WG will hold a virtual interim meeting on 2020-10-23 from 07:30 to 09:00 America/Los_Angeles (14:30 to 16:00 UTC). Agenda: Status of adopted drafts Information about remote participation: https://ietf.webex.com/ietf/j.php?MTID=md7a8f4e5edfc4c01a7f445d8015ec39a Webex info: https://ietf.webex.com/ietf/j.php?MTID=md7a8f4e5edfc4c01a7f445d8015ec39a Meeting number (access code): 171 590 0234 Meeting password: tV2nKE9HQB7 From nobody Fri Oct 9 11:54:15 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B8F193A12D4 for ; Fri, 9 Oct 2020 11:54:12 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 7.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160226965274.13838.7423265932501970294@ietfa.amsl.com> Date: Fri, 09 Oct 2020 11:54:12 -0700 From: IETF Secretariat Archived-At: Subject: [Rats] Milestones changed for rats WG X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 18:54:13 -0000 Changed milestone "Begin work on use case documentation (may not be published as an RFC)", resolved as "Done". Changed milestone "Submit YANG Module draft to IESG for publication", added draft-ietf-rats-yang-tpm-charra to milestone. Changed milestone "Submit EAT draft to IESG for publication", added draft-ietf-rats-eat to milestone. Changed milestone "Submit Interaction Models draft to IESG for publication", set due date to July 2021 from March 2020, added draft-ietf-rats-reference-interaction-models to milestone. Changed milestone "Submit Architecture draft to IESG for publication", added draft-ietf-rats-architecture to milestone. URL: https://datatracker.ietf.org/wg/rats/about/ From nobody Fri Oct 9 20:35:21 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F8D23A00E3 for ; Fri, 9 Oct 2020 20:35:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vHeT30_hPsOP for ; Fri, 9 Oct 2020 20:35:17 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA8783A00E0 for ; Fri, 9 Oct 2020 20:35:16 -0700 (PDT) Received: from lhreml743-chm.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 4D445DCCC805C732F5FD for ; Sat, 10 Oct 2020 04:35:15 +0100 (IST) Received: from nkgeml704-chm.china.huawei.com (10.98.57.158) by lhreml743-chm.china.huawei.com (10.201.108.193) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Sat, 10 Oct 2020 04:35:14 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml704-chm.china.huawei.com (10.98.57.158) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Sat, 10 Oct 2020 11:35:12 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Sat, 10 Oct 2020 11:35:12 +0800 From: "Panwei (William)" To: Guy Fedorkow CC: "rats@ietf.org" , "Eric Voit (evoit)" Thread-Topic: Charra v03? -- Ready for YANG Doctor review? Thread-Index: AdaN+Mh0COkr7bssS32ju+PDTl/lwQB5ylgQAA28UhAAKB+9UAAUrTzAA1A1CXAAGlnmoA== Date: Sat, 10 Oct 2020 03:35:11 +0000 Message-ID: <2af5a135f708428eb15dc3fea34ccadd@huawei.com> References: <5c2c03297a834ca3b5bb3a4ed7d2b2b3@huawei.com> <31412534a97a4f90bbdfa8dafce945ef@huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.99.125] Content-Type: multipart/alternative; boundary="_000_2af5a135f708428eb15dc3fea34ccaddhuaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] Charra v03? -- Ready for YANG Doctor review? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Oct 2020 03:35:20 -0000 --_000_2af5a135f708428eb15dc3fea34ccaddhuaweicom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Guy, I didn't intent to bring the details of vTPM into CHARRA, and I just wanted= to use it as an example to illustrate the potential log volume issue. But = anyway, thanks for pointing out that to me. Regards & Thanks! Wei Pan From: Guy Fedorkow [mailto:gfedorkow@juniper.net] Sent: Friday, October 9, 2020 10:51 PM To: Panwei (William) Cc: rats@ietf.org; Eric Voit (evoit) Subject: RE: Charra v03? -- Ready for YANG Doctor review? Hi Wei Pan, As Eric says, the vTPM in isolation is not so hard, but it has a number o= f thorny questions relating the vTPM to underlying hardware. Although I kn= ow there are some restrictions in access, but the TCG has a Virtual Platfor= m Work Group dedicated to examining these issues and proposing solutions th= at balance security and flexibility. If it's possible, it might be good to= get involved with that work... Thanks /guy Juniper Business Use Only From: Eric Voit (evoit) > Sent: Tuesday, September 29, 2020 8:16 AM To: Panwei (William) >; draft-ietf-rats-yang-tpm-charra@ietf.org Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: RE: Charra v03? -- Ready for YANG Doctor review? Hi Wei Pan, One vTPM can be handled without a volume issue. But if we are talking lots= of vTPMs, then we should examine the business purpose here. One possibili= ty you mention below is VNF. A subset of the VNF is that you have vTPM ser= ving a logical router. Certainly many vTPMs like this can increase the volu= me. However other significant changes will be needed before we can do a mea= ningful attestation of a vTPM per logical routing. This will include: * Being able to prove that a vTPM is *currently* bound to a specific ph= ysical device (potentially an x86 server.) * Being able to get the attestation information about the physical devi= ce (this requires a business relationship with the hardware operator.) * Proving that there is no MITM software between a virtual router and a= physical device. The Charra model is not in a position to handle the full set of virtual dev= ice requirements yet. Nor is draft-ietf-rats-tpm-based-network-device-atte= st documenting these operating requirements. As a result what we can do right now is ensure that we don't preclude what = you say below. I.e., we don't preclude "compressing the log records into a= file and transferring the file by using some file transfer protocol". I don't see anything in the current Charra which should limit sending log m= essages in other transports, not anything which would preclude. Nor anythi= ng which would preclude "compressing the log records into a file and transf= erring the file by using some file transfer protocol". So I don't think w= e are limiting future solutions with the current Charra definition. So I think it is safe not to worry about the volume question right now. Pe= rhaps we should start with new drafts once the VNF topic becomes more press= ing? Thoughts? Eric From: Panwei, September 22, 2020 8:43 AM Hi Eric, For IMA and Network Equipment Boot, the log is essential for the appraisal.= Because the Known Good Values are for the files and not directly for the P= CRs, and the Verifier needs the log to simulate the extending processes and= compare the result with the PCR values received from the Attester. The logs have the possibility of being very large. For example, in the VNF = scenario, the Attester has the ability to launch many virtual machines that= have their vTPMs. If one Attester has 1024 virtual machines, each virtual = machine has 1024 files to be loaded and measured, and each file has a 100by= tes~ log record, then the whole log will exceed 100Mbytes. I know to address this issue there are other ways rather than NETCONF. One = simple choice I assume is that we can add an optional element 'log-file-nam= e' in the log output RPC, when the Attester uses this element it doesn't ne= ed to send the log entries in this RPC and indicates to the Verifier that t= he Verifier can retrieve the log file later by some other file transfer mea= ns. In my thinking, this method is quite simple and no big change, while al= so increases the interoperability. But I don't know how do you feel about i= t? Regards & Thanks! Wei Pan From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Monday, September 21, 2020 9:25 PM To: Panwei (William) >; draft-ietf-rats-yang-tpm-charra@ietf.org Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: RE: Charra v03? -- Ready for YANG Doctor review? Hello Wei Pan, I am hoping this is not an issue for the Charra model for several reasons: * The speed at which a TPM can do extend operations is hardware limited= . As a result I hope we don't see massively large logs. (I am hoping that= IMA logs are as large as we are ever going to get.) * Code on the Attester should be able to do some pre-filtering on the t= ypes of information which might make it into a PCR. Not everything needs = to be measured. * Where there does need to be *a lot* of record interpretation, there w= ill be more need for vendor specific Verifiers. (This is in contrast with = things like Known Good Values, which can be published to many Verifiers.) * There are many other ways to get large logs which are not NETCONF bas= ed. We can always standardize choices beyond NETCONF if there is a busine= ss need for such interoperability. Thanks, Eric From: Panwei (William), September 21, 2020 3:20 AM Hi Eric, authors, Thanks for your updating. I have one comment but not coming from your revis= ing of the YANG model. I have mentioned a potential scalability issue before (https://mailarchive.= ietf.org/arch/msg/rats/qFq91oujxykEqBGYIW3N8ljaN68/), but unfortunately the= re was no more discussion about it. The situation I'm concerned about is that when the number of log records is= too many, transferring them directly using the NETCONF RPCs may be a probl= em because it's not so efficient. The bandwidth would be heavily consumed, = and other management messages may be interfered. I know there may be some methods to address this issue, for example, compre= ssing the log records into a file and transferring the file by using some f= ile transfer protocols. But these methods also need interoperability betwee= n the Attester and Verifier. So I don't know whether CHARRA draft should gi= ve a standard way to address the issue. Regards & Thanks! Wei Pan From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Saturday, September 19, 2020 4:31 AM To: draft-ietf-rats-yang-tpm-charra@ietf.org; Panwei (William) > Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org Subject: Charra v03? -- Ready for YANG Doctor review? Hi Co-authors, I just did some minor scrubbing, and added text describing various element= s of the YANG model within the mainline Charra text. The compiled draft hasn't been merged from the pull requests in the main repository yet. Bu= t if/when the merging is done, it should look something like: https://github.com/ericvoit/basic-yang-module/blob/master/draft-ietf-rats-y= ang-tpm-charra.txt I believe the draft is ready for initial review by the YANG doctors. I als= o believe this version is ready for posting as v03. Any thoughts/comments/objections? Eric --_000_2af5a135f708428eb15dc3fea34ccaddhuaweicom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Guy,

 

I didn’t intent to bring the details= of vTPM into CHARRA, and I just wanted to use it as an example to illustra= te the potential log volume issue. But anyway, thanks for pointing out that to me.

 

Regards & T= hanks!

Wei Pan

 

From: Guy Fedorkow [mailto:gfedorkow@juniper.net]
Sent: Friday, October 9, 2020 10:51 PM
To: Panwei (William) <william.panwei@huawei.com>
Cc: rats@ietf.org; Eric Voit (evoit) <evoit@cisco.com>
Subject: RE: Charra v03? -- Ready for YANG Doctor review?=

 

Hi Wei Pan,

  As Eric says, the vTPM i= n isolation is not so hard, but it has a number of thorny questions relatin= g the vTPM to underlying hardware.  Although I know there are some res= trictions in access, but the TCG has a Virtual Platform Work Group dedicated to examining these issues and proposing solu= tions that balance security and flexibility.  If it’s possible, = it might be good to get involved with that work…

  Thanks=

/guy

 

 

 

Juniper Business= Use Only

From: Eric Voit (evoit) <evoit@= cisco.com>
Sent: Tuesday, September 29, 2020 8:16 AM
To: Panwei (William) <william.panwei@huawei.com>; draft-ietf-rats= -yang-tpm-charra@ietf.org
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: RE: Charra v03? -- Ready for YANG Doctor review?=

 

Hi Wei Pan,

 

One vTPM can be handled without= a volume issue.  But if we are talking lots of vTPMs, then we should = examine the business purpose here.  One possibility you mention below = is VNF.  A subset of the VNF is that you have vTPM serving a logical router. Certainly many vTPMs like this can increase= the volume. However other significant changes will be needed before we can= do a meaningful attestation of a vTPM per logical routing.  This will= include:

  • Being able to prove that a vTPM is *currently* bound to a specific phys= ical device (potentially an x86 server.)
  • Being ab= le to get the attestation information about the physical device (this requi= res a business relationship with the hardware operator.)<= /li>
  • Proving that there is no MITM software between a virtual router and= a physical device.

 

The Charra model is not in a po= sition to handle the full set of virtual device requirements yet.  Nor= is draft-ietf-rats-tpm-based-network-device-attest documenting these opera= ting requirements.  

 

As a result what we can do righ= t now is ensure that we don't preclude what you say below.  I.e., we d= on't preclude "compressing the log records into a file and transferrin= g the file by using some file transfer protocol". 

 

I don't see anything in the cur= rent Charra which should limit sending log messages in other transports, no= t anything which would preclude.  Nor anything which would preclude &q= uot;compressing the log records into a file and transferring the file by using some file transfer protocol".  &n= bsp;So I don't think we are limiting future solutions with the current Char= ra definition. 

 

So I think it is safe not to wo= rry about the volume question right now.  Perhaps we should start with= new drafts once the VNF topic becomes more pressing?

 

Thoughts?

Eric

 

 

From: Panwei, September 22, 2020 8:43 AM=

Hi Eric,

 

For IMA and Network Equipment Boot, the lo= g is essential for the appraisal. Because the Known Good Values are for the= files and not directly for the PCRs, and the Verifier needs the log to simulate the extending processes and compare the result w= ith the PCR values received from the Attester.

The logs have the possibility of being ver= y large. For example, in the VNF scenario, the Attester has the ability to = launch many virtual machines that have their vTPMs. If one Attester has 1024 virtual machines, each virtual machine has 1024 f= iles to be loaded and measured, and each file has a 100bytes~ log record, t= hen the whole log will exceed 100Mbytes.

I know to address this issue there are oth= er ways rather than NETCONF. One simple choice I assume is that we can add = an optional element ‘log-file-name’ in the log output RPC, when the Attester uses this element it doesn’t need to send the= log entries in this RPC and indicates to the Verifier that the Verifier ca= n retrieve the log file later by some other file transfer means. In my thin= king, this method is quite simple and no big change, while also increases the interoperability. But I don’= t know how do you feel about it?

 

Regards & T= hanks!

Wei Pan

 

From: Eric Voit (evoit) [mailto:ev= oit@cisco.com]
Sent: Monday, September 21, 2020 9:25 PM
To: Panwei (William) <william.panwei@huawei.com>; draft-ietf-rats= -yang-tpm-charra@ietf.org
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: RE: Charra v03? -- Ready for YANG Doctor review?=

 

Hello Wei Pan,

 

I am hoping this is not an issu= e for the Charra model for several reasons:

 

  • The speed at which a TPM can do extend operations is hardware limited.&= nbsp; As a result I hope we don't see massively large logs.  (I am hop= ing that IMA logs are as large as we are ever going to get.)
  • Code on the Attester should be able to = do some pre-filtering on the types of information which might make it into = a PCR.   Not everything needs to be measured.
  • Where there does need to be *a lot* of record interpretation, there = will be more need for vendor specific Verifiers.  (This is in contrast= with things like Known Good Values, which can be published to many Verifiers.)
  • There are many = other ways to get large logs which are not NETCONF based.   We ca= n always standardize choices beyond NETCONF if there is a business need for= such interoperability.

 

Thanks,

Eric

 

From: Panwei (William), September 21, 20= 20 3:20 AM

Hi Eric, authors,

 

Thanks for your updating. I have one comme= nt but not coming from your revising of the YANG model.

 

I have mentioned a potential scalability i= ssue before (https://mailarchive.ietf.org/arch/msg/rats/qFq91oujxy= kEqBGYIW3N8ljaN68/), but unfortunately there was no more discussion about it.=

The situation I’m concerned about is= that when the number of log records is too many, transferring them directl= y using the NETCONF RPCs may be a problem because it’s not so efficient. The bandwidth would be heavily consumed, and other manag= ement messages may be interfered.

I know there may be some methods to addres= s this issue, for example, compressing the log records into a file and tran= sferring the file by using some file transfer protocols. But these methods also need interoperability between the Attester and Veri= fier. So I don’t know whether CHARRA draft should give a standard way= to address the issue.

 

Regards & T= hanks!

Wei Pan

 

From: Eric Voit (evoit) [mailto:ev= oit@cisco.com]
Sent: Saturday, September 19, 2020 4:31 AM
To: draf= t-ietf-rats-yang-tpm-charra@ietf.org; Panwei (William) <william.panwei@huawei.com>
Cc: draft-ietf-rats-yang-tpm-charra.chairs@ietf.org
Subject: Charra v03? -- Ready for YANG Doctor review?

 

Hi Co-authors,

 

I just did some minor scrubbing= , and added text describing  various elements of the YANG model within= the mainline Charra text. 

 

The compiled draft hasn't been = merged from the pull re= quests in the main repository yet.   But if/when the merging = is done, it should look something like:

= https://github.com/ericvoit/basic-yang-module/blob/master/draft-ietf-rats-y= ang-tpm-charra.txt

 

I believe the draft is ready fo= r initial review by the YANG doctors.  I also believe this version is = ready for posting as v03.

 

Any thoughts/comments/objection= s? 

 

Eric

--_000_2af5a135f708428eb15dc3fea34ccaddhuaweicom_-- From nobody Sun Oct 11 08:15:37 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C311D3A0E67 for ; Sun, 11 Oct 2020 08:15:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.087 X-Spam-Level: X-Spam-Status: No, score=-2.087 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CYHttwCkuEog for ; Sun, 11 Oct 2020 08:15:34 -0700 (PDT) Received: from mail-yb1-xb2e.google.com (mail-yb1-xb2e.google.com [IPv6:2607:f8b0:4864:20::b2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6A9E13A0E66 for ; Sun, 11 Oct 2020 08:15:34 -0700 (PDT) Received: by mail-yb1-xb2e.google.com with SMTP id 67so11362517ybt.6 for ; Sun, 11 Oct 2020 08:15:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=gS+9wR4jfkF8p8Ahl69QQaS1XPYz2USPB+rj4BmF4Go=; b=IFVXqUUGwuEEjc4tTZhj77xNJYy90qBwXagEsQsbG+oHYM6vkFidoc6/Naidxr7gX0 LBJ/X3g5R7vRblvBDWCbIFDtBFAwUBCX6Qylo60OMsvcTY9LYfxClsaNBEJhmHhxzW3j 96D239xiBYpzLKVKZ5XZ8PbsZrPo62pahx/9hgY6hsXGvyjD7A3GERfedkb5ltd8qCOY ja6an+XLgnIXbRMb0J1wdjEZ7mnoxe+QMpkgetY3gzvTzkl1d4obdDcdQ4ushc1HN86B 93TU7JrBQahC4zXsHhyaoIx9rY1iwqOVqqvBZCvDAIfxd/F5xD4D4UmnyLGfMBJPCTs1 QdhA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=gS+9wR4jfkF8p8Ahl69QQaS1XPYz2USPB+rj4BmF4Go=; b=rVDxn/UYgySe6sY1vXFuJS3fFQYK1704botLE8Yv269wMfKFrwNMEnAsa6C3S0yyTV 4x8MPaqjIihDmcDqhSRuLyFRy3XNQ/NPwNlmrBJtD8D/btSRmUPKPWrinFR9+dTMBEOR tsrQzHvQDrG6/PfTx0avddSuMYRrNAhdrDcui2fukOfpeOZ3IDBX5s5MhfZ4IWbuSabc KdM7CUx/xYfRGehc47niGspH8+7MYeE+4c9Fo6zIEMZAeZS6j5O7b7BKx38XHetUw6El ZITP5FC/fqvs80BLJ//VMQOM9yy6Di5KWbT9EwoRqplelQnLP+NjULcjMpczwJj7Kv3N KgaQ== X-Gm-Message-State: AOAM530J7Z9hIE/a5fOOPMJ9Ox1waifeHXlDRf6Tusf/WiiK51ccmc48 hDdKZBOdzgp6RrbLhB8dXPERNPFercbz6+JQAzeOLo5/jns= X-Google-Smtp-Source: ABdhPJyQew466iyg6wGJ8lwCXAuGImS1pBlqyQvsEkI0dS4zTHi51oxqUnwZQ1/8UbQRCate+uKHQ/gUXoyvJVraOWc= X-Received: by 2002:a25:fd4:: with SMTP id 203mr29475475ybp.100.1602429333115; Sun, 11 Oct 2020 08:15:33 -0700 (PDT) MIME-Version: 1.0 From: Shwetha Date: Sun, 11 Oct 2020 20:45:19 +0530 Message-ID: To: rats@ietf.org Content-Type: multipart/alternative; boundary="0000000000002d94f305b166a7e6" Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Oct 2020 15:15:36 -0000 --0000000000002d94f305b166a7e6 Content-Type: text/plain; charset="UTF-8" I have reviewed -04 of the document and support progressing it IESG. Some nits: 1. Relook: It's an informational draft - section 2.3/2.4 and section 3 have RFC 2119 MUST/SHOULD 2. Section 2.4.2 Attestation logs : charra model represents the other event log formats listed for export, it does not define a event log format. Hence charra can be removed from the list. Run time integrity is mentioned as deferred / out of scope but then there is a reference to IMA event logs here, is it needed? Thanks Shwetha "Nancy Cam-Winget (ncamwing)" Mon, 21 September 2020 02:06 UTC RATs participants, This is a WGLC for draft-ietf-rats-tpm-based-network-device-attest, please provide comments and feedback by October 12, 2020. The draft can be found in:https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ Best, Nancy (on behalf of the RATs chairs) --0000000000002d94f305b166a7e6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

I have reviewed -04 of the document and support = progressing it IESG. Some nits:


1. Relook: It's an informational draft - section 2.3/= 2.4 and section 3 have RFC 2119 MUST/SHOULD=C2=A0
2. Section 2.4.2 Attestation logs = : charra model represents the other event log formats listed for export, it= does not define a event log format. Hence charra can be removed from the l= ist. Run time integrity is mentioned as deferred / out of scope but then th= ere is a reference to IMA event logs here, is it needed?

Thanks
Shwetha

=

"Nancy Cam-Winget (ncamwing)" <ncamwing@cis= co.com>=C2=A0Mon, 21 September 2020 02:06 UTC

RATs participants=
,

This is a WGLC for draft-ietf-rats-tpm-based-network-device-attest, please =
provide comments and feedback by October 12, 2020.
The draft can be found in:
https://datatracker.ietf.org/doc/draft-ietf-rats-tp=
m-based-network-device-attest/

Best, Nancy (on behalf of the RATs chairs)

--0000000000002d94f305b166a7e6-- From nobody Sun Oct 11 11:08:02 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1585A3A0CF4 for ; Sun, 11 Oct 2020 11:08:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ps1gijgfh0kg for ; Sun, 11 Oct 2020 11:07:58 -0700 (PDT) Received: from outgoing.mit.edu (outgoing-auth-1.mit.edu [18.9.28.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5DD83A0CEE for ; Sun, 11 Oct 2020 11:07:57 -0700 (PDT) Received: from kduck.mit.edu ([24.16.140.251]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id 09BI7oTn001640 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sun, 11 Oct 2020 14:07:55 -0400 Date: Sun, 11 Oct 2020 11:07:50 -0700 From: Benjamin Kaduk To: Shwetha Cc: rats@ietf.org Message-ID: <20201011180750.GA83747@kduck.mit.edu> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Oct 2020 18:08:00 -0000 On Sun, Oct 11, 2020 at 08:45:19PM +0530, Shwetha wrote: > I have reviewed -04 of the document and support progressing it IESG. Some > nits: > > 1. Relook: It's an informational draft - section 2.3/2.4 and section 3 have > RFC 2119 MUST/SHOULD There is no requirement that BCP 14 keywords are only used in standards-track documents; it is perfectly fine for them to appear in an informational document. -Ben From nobody Mon Oct 12 07:43:41 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2A373A1538; Mon, 12 Oct 2020 07:43:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.297 X-Spam-Level: X-Spam-Status: No, score=-3.297 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=Pg5r8NT0; dkim=pass (1024-bit key) header.d=juniper.net header.b=KlLXt31E Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9L7bnkCyzZa0; Mon, 12 Oct 2020 07:43:35 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9419F3A1532; Mon, 12 Oct 2020 07:43:32 -0700 (PDT) Received: from pps.filterd (m0108156.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 09CEgt5L016036; Mon, 12 Oct 2020 07:43:32 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=to : cc : from : subject : mime-version : content-type : content-id : date : message-id; s=PPS1017; bh=S1qb1cQZIr7Iuuq4WmbskxZzORATWsWs3L2EUXeqD00=; b=Pg5r8NT0ER5WoT2kZdGHfOV2Iv18hw/Mnms9vXIbQhgfXlgWqYLNuDCG5dtelvAvY1iY RGlKxfd+SSl4rEIz/Ebf7ZfnqR+LzGujG15bnjAeSCA3Vg8AibbmW7hzkejJBEfKL2/t aafSnU1GnPXzAHtHK8AqRuncyc3OjkLZa/Gy+PCJL0uU1ro4HGdyr9cT+yjcl1FbPy3P s17EonF9bMj1HDjed1SYrTEtdvyFtIiJYgYmUoKqlRpKphslQpXKT5gPctBygF/uAMhA YOH3hI63iowEBDhdQpqrPmhf/ccuX7i9JD0sxIaw5f8uDZN87zplokBX00AzJMYXBLJI JA== Received: from nam11-bn8-obe.outbound.protection.outlook.com (mail-bn8nam11lp2177.outbound.protection.outlook.com [104.47.58.177]) by mx0a-00273201.pphosted.com with ESMTP id 343bymthht-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 12 Oct 2020 07:43:32 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cs4N4jKs9aJ6/w/efVVvNjaaV9/mCYYsxgeR5RQHsiynWDaMGy9ZJ9bIhe3Ib9iD8TneWzrJYbOTb+fFl1rBSUGsk5lnQQP0Vr++ye2t6DRfFU8lQpL/9SK6tgtaDz87BkVVH1FcRwEIYcTJSjIgsYla5SVYjHDB8mEzhbak66L2Eu6uYWEA3odUXaTWepJIfpq0iwXyU0gSphSJT/z0izVHG/a3CIMBJ15pIFNr1eWJhI1LgE1zbIq/I2olWyUYZLI5AtCaEIrmzsq7y6Nva/eNJgP7iL3Fjk4MW5LMKiajz02jmJw2XQInqhc9B8lyfH+RIZDtQXJN4a9ml9xwbw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S1qb1cQZIr7Iuuq4WmbskxZzORATWsWs3L2EUXeqD00=; b=Hyhl4rMGTcRIcdsJ0RQTX/WubTdhdK6fy2YYY4LkiRT8d558F+PY++1mFd54a8iOsG5k8fK+/UpI/p16Zdb5jNLblCFGkX4ukjtsaS4vCiAPyasj+1KlHxRcm2J+JrGgUzDoYkyOeNV8agXtZPYaoihIN26RiXn5YPsCtyvTg4e6dv0u6ElM+cEGLQrid1wUPW5PPNSWbM4M5D70FjpR3j8HSw/uNywwO4Y5b0O7FiDr87fdbWN0TR0igZCQzTT4JqRmS45FB3HMd90iZJnlpP2rkZk6a3uUDBeY/EtW8AYf/GwFO0yAb+hceBQamvm7KkahOZbLxqkpNtiVhIj5vg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip is 66.129.242.12) smtp.rcpttodomain=ietf.org smtp.mailfrom=juniper.net; dmarc=fail (p=reject sp=reject pct=100) action=oreject header.from=juniper.net; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S1qb1cQZIr7Iuuq4WmbskxZzORATWsWs3L2EUXeqD00=; b=KlLXt31EEHzY4Sbze7ON05ItuVPzSOUfTv3qXlPv4+hG+vX7ARzTx9ByE2kStBEzrpB+yqMEthWOh6jFxqPrFQh1rALNrWx5BaRLklRGNAjPylDGu4v6lqxyioTPSdnsd3fJFg6aj3C1jCUQFIWUzdSJbRfS/1YBTu6DOtPPVVw= Received: from DM5PR10CA0015.namprd10.prod.outlook.com (2603:10b6:4:2::25) by SN6PR05MB3983.namprd05.prod.outlook.com (2603:10b6:805:1b::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Mon, 12 Oct 2020 14:43:29 +0000 Received: from DM3NAM05FT016.eop-nam05.prod.protection.outlook.com (2603:10b6:4:2:cafe::9e) by DM5PR10CA0015.outlook.office365.com (2603:10b6:4:2::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.23 via Frontend Transport; Mon, 12 Oct 2020 14:43:29 +0000 X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 66.129.242.12) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=fail action=oreject header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.242.12 as permitted sender) Received: from P-EXFEND-EQX-01.jnpr.net (66.129.242.12) by DM3NAM05FT016.mail.protection.outlook.com (10.152.98.125) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.3477.11 via Frontend Transport; Mon, 12 Oct 2020 14:43:28 +0000 Received: from P-EXBEND-EQX-01.jnpr.net (10.104.8.52) by P-EXFEND-EQX-01.jnpr.net (10.104.8.54) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 12 Oct 2020 07:43:28 -0700 Received: from p-mailhub01.juniper.net (10.104.20.6) by P-EXBEND-EQX-01.jnpr.net (10.104.8.52) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 12 Oct 2020 07:43:28 -0700 Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [10.160.0.88]) by p-mailhub01.juniper.net (8.14.4/8.11.3) with ESMTP id 09CEhR7j022950; Mon, 12 Oct 2020 07:43:27 -0700 (envelope-from mdb@juniper.net) To: , CC: From: "Mark D. Baushke" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <67931.1602513806.1@eng-mail01.juniper.net> Date: Mon, 12 Oct 2020 07:43:27 -0700 Message-ID: <67932.1602513807@eng-mail01.juniper.net> X-EXCLAIMER-MD-CONFIG: e3cb0ff2-54e7-4646-8a04-0dae4ac7b136 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-HT: Tenant X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: bf629d4a-c9c1-4872-97e3-08d86ebd2f11 X-MS-TrafficTypeDiagnostic: SN6PR05MB3983: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: l7HTHmONjwIjk7o6bDV64lqTgElK6L+81zgRbh4PN1rAMcETtSkCPDkob05ERxsckSVK3RjdLGeOYCzZcHyQSmPQNQHKcIdjUehAnru+5w+YEXUJMrax6G2rjl4MiAUKbtxzPuoViMNCBs0/6UtdTokDMSLj/Yf1zuscvsDXEkiqy5oDbWCtgsxUVRxFhMqAtITUIaAfX/psReyoW2IOU99gItiHwiBNWYCnqWlylwwEFbzcoWiKWD6tLEWjM3OYGz2mVnLpEVmZHdPYN/zXMdvpxexdrqVT1DroQbDukpeIeXkQKKk/zZyKwdcrpUryCYviZErzSKLd3qeRHYE65kqCjIxiDnCxfT9998QUjd5e7SnWMRedCXNiAfhI7LsyW/t9+49XuDurL1jFlwrW7q8gAZsOoj5RHlwckVaNHQKVC7q6+OtLFJpY2uumhS03KtCEnDQwtoub6fa4VGYE+tNRGnh7jUyTaCQzhSIC6UfFXAkM+fZ6Nj4+B4fFN/jp X-Forefront-Antispam-Report: CIP:66.129.242.12; CTRY:US; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:P-EXFEND-EQX-01.jnpr.net; PTR:InfoDomainNonexistent; CAT:NONE; SFS:(4636009)(376002)(396003)(39860400002)(136003)(346002)(46966005)(5660300002)(478600001)(966005)(186003)(70206006)(47076004)(426003)(336012)(15974865002)(82740400003)(70586007)(7696005)(110136005)(82310400003)(316002)(81166007)(86362001)(450100002)(4326008)(8676002)(8936002)(83080400001)(2906002)(26005)(356005)(18886075002); DIR:OUT; SFP:1102; X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Oct 2020 14:43:28.9368 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: bf629d4a-c9c1-4872-97e3-08d86ebd2f11 X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.242.12]; Helo=[P-EXFEND-EQX-01.jnpr.net] X-MS-Exchange-CrossTenant-AuthSource: DM3NAM05FT016.eop-nam05.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR05MB3983 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-12_12:2020-10-12, 2020-10-12 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 phishscore=0 bulkscore=0 adultscore=0 impostorscore=0 mlxlogscore=999 mlxscore=0 spamscore=0 suspectscore=0 clxscore=1011 malwarescore=0 lowpriorityscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010120118 Archived-At: Subject: [Rats] Mail regarding draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 14:43:40 -0000 Greetings fellow members of the IETF Rats Workinggroup. https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest-04 I would like to vote in favor of moving to the next step of publshing this draft as an RFC. The following is mostly editorial feedback on the current -04 draft: * Section 1.4 has [IEEE-802-1AR] and Section 3 has [IEEE-802.1ae]. I have been under the possibly mistaken impression that 802.1AR and 802-1AR should be consistent. and is it 'AR' or 'ar' and is it 'ae' or 'AE' ? I respectfully suggest use of IEEE-802-1AE and IEEE-802.1AR be used consistently throughout the document. * Figure 7: RIV Protcol Stacks This figure explicitly lists UDP, but does not mention TCP even though TLS and SSH are noted. It is not a big deal, just a small omission that may make the picture too busy. * Figure 8: Component status 'TCG TPM DevID' used twice in the table as the controlling Specification should probably be something that ties you back to either [IEEE-802-1AR] or [Platform-DevID-TPM-2.0] or some other reference as 'TCG TPM DevID' is not otherwise identified as a specifiction in the document itself. Gets a bit messy with entries like draft-birkholz-yan-swid in the figure. I expect it will be better when that one is an [RFC nnnnn]. The 'ISO/IEC 19770-2' entry could have been [SWID] to be able to find it in the references. There are likely a few other controlling specificaiton that are hard to correlate from the table to the informative references. Editorial remark: Note that [IMA] has a spurious space before the comma ('and ,') the IETF Editor would likely have fixed it anyway. -- Mark D. Baushke mdb@juniper.net Distinguished Engineer Juniper Networks, Inc. www.juniper.net From nobody Mon Oct 12 08:58:40 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC4F53A0E71; Mon, 12 Oct 2020 08:58:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y9XEZ_zkRBc3; Mon, 12 Oct 2020 08:58:36 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61C923A0E6D; Mon, 12 Oct 2020 08:58:36 -0700 (PDT) Received: from lhreml728-chm.china.huawei.com (unknown [172.18.7.108]) by Forcepoint Email with ESMTP id 2245EF4F6A8F2E88DBF4; Mon, 12 Oct 2020 16:58:32 +0100 (IST) Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by lhreml728-chm.china.huawei.com (10.201.108.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Mon, 12 Oct 2020 16:58:31 +0100 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml705-chm.china.huawei.com (10.98.57.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Mon, 12 Oct 2020 23:58:29 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Mon, 12 Oct 2020 23:58:29 +0800 From: "Panwei (William)" To: "draft-ietf-rats-tpm-based-network-device-attest@ietf.org" CC: "rats@ietf.org" Thread-Topic: WGLC for draft-ietf-rats-tpm-based-network-device-attest Thread-Index: AQHWj7vQmCquGJdJ8UCU7FSWkWcz36mULaRQ Date: Mon, 12 Oct 2020 15:58:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.52.226.85] Content-Type: multipart/alternative; boundary="_000_bbacd6e97a74452a9d3e08b7b834a078huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 15:58:39 -0000 --_000_bbacd6e97a74452a9d3e08b7b834a078huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgYXV0aG9ycywNCg0KSeKAmXZlIHJldmlld2VkIHRoZSAtMDQgZG9jIGFuZCBJIGhhdmUgc29t ZSBjb21tZW50cyB3aGljaCBJIHdpc2ggdG8gYmUgcmVzb2x2ZWQgYmVmb3JlIGZvcndhcmRpbmcg dGhlIGRvYyB0byBJRVNHLg0KDQoNCjEuICAgICAgQWJvdXQgdGhlIHRlcm1pbm9sb2d5LCBzb21l IG5ldyB0ZXJtcyBhcmUgaW50cm9kdWNlZCBpbnRvIHRoZSBhcmNoaXRlY3R1cmUgZG9jIHJlY2Vu dGx5IChwbGVhc2Ugc2VlIGdpdGh1YiksIGluY2x1ZGluZyBSZWZlcmVuY2UgVmFsdWVzIGFuZCBS ZWZlcmVuY2UgVmFsdWVzIFByb3ZpZGVyLiBBbmQgdGhlIHRlcm0gRW5kb3JzZXIgb3IgRW5kb3Jz ZW1lbnQgZG9lc27igJl0IGNvdmVyIHRoZSBjb25jZXB0IG9mIHJlZmVyZW5jZSBtZWFzdXJlbWVu dHMgYW55IG1vcmUuIFNvIHRoaXMgUklWIGRvYyBtYXkgYWxzbyBuZWVkIHRvIHVwZGF0ZSB0aGUg dXNlIG9mIHRlcm1zIGNvcnJlc3BvbmRlbnRseS4NCg0KMi4gICAgICBJbiBzZWN0aW9uIDEuNCwg aXQgc2F5czoNCg0KICAgNS4gIEZpbmFsbHksIEFwcHJhaXNhbCBvZiBFdmlkZW5jZSBvY2N1cnMu ICBBcyB0aGUgVmVyaWZpZXIgYW5kDQoNCiAgICAgICBSZWx5aW5nIFBhcnR5IHJvbGVzIGFyZSBv ZnRlbiBjb21iaW5lZCB3aXRoaW4gUklWLCB0aGlzIGlzIHRoZQ0KDQogICAgICAgcHJvY2VzcyBv ZiB2ZXJpZnlpbmcgdGhlIEV2aWRlbmNlIHJlY2VpdmVkIGJ5IGEgVmVyaWZpZXIgZnJvbSB0aGUN Cg0KICAgICAgIEF0dGVzdGluZyBkZXZpY2UsIGFuZCB1c2luZyBhbiBBcHByYWlzYWwgUG9saWN5 IHRvIGRldmVsb3AgYW4NCg0KICAgICAgIEF0dGVzdGF0aW9uIFJlc3VsdCwgdXNlZCB0byBpbmZv cm0gZGVjaXNpb24gbWFraW5nLiAgSW4gcHJhY3RpY2UsDQoNCiAgICAgICB0aGlzIG1lYW5zIGNv bXBhcmluZyB0aGUgZGV2aWNlIG1lYXN1cmVtZW50cyByZXBvcnRlZCBhcyBFdmlkZW5jZQ0KDQog ICAgICAgd2l0aCB0aGUgQXR0ZXN0ZXIgY29uZmlndXJhdGlvbiBleHBlY3RlZCBieSB0aGUgVmVy aWZpZXIuDQoNCiAgICAgICBTdWJzZXF1ZW50bHkgdGhlIEFwcHJhaXNhbCBQb2xpY3kgZm9yIEF0 dGVzdGF0aW9uIFJlc3VsdHMgbWlnaHQNCg0KICAgICAgIG1hdGNoIHdoYXQgd2FzIGZvdW5kIGFn YWluc3QgUmVmZXJlbmNlIEludGVncml0eSBNZWFzdXJlbWVudHMNCg0KICAgICAgIChha2EgR29s ZGVuIE1lYXN1cmVtZW50cykgd2hpY2ggcmVwcmVzZW50IHRoZSBpbnRlbmRlZCBjb25maWd1cmVk DQoNCiAgICAgICBzdGF0ZSBvZiB0aGUgY29ubmVjdGVkIGRldmljZS4NCg0KSW4gdGhlIHNlbnRl bmNlIOKAnFN1YnNlcXVlbnRseSB0aGUgQXBwcmFpc2FsIFBvbGljeSBmb3IgQXR0ZXN0YXRpb24g UmVzdWx0cyBtaWdodCBtYXRjaCB3aGF0IHdhcyBmb3VuZCBhZ2FpbnN0IFJlZmVyZW5jZSBJbnRl Z3JpdHkgTWVhc3VyZW1lbnRz4oCdLCBJIHRoaW5rIOKAnHRoZSBBcHByYWlzYWwgUG9saWN5IGZv ciBBdHRlc3RhdGlvbiBSZXN1bHRz4oCdIHNob3VsZCBiZSDigJx0aGUgQXBwcmFpc2FsIFBvbGlj eSBmb3IgRXZpZGVuY2XigJ0uDQoNCjMuICAgICAgQWJvdXQgdGhlIFBDUiBhc3NpZ25tZW50IGZp Z3VyZSBpbiBTZWN0aW9uIDIuMS4xLCBpcyB0aGlzIGFzc2lnbm1lbnQgYSByZWZlcmVuY2UgZm9y IHRoZSBpbXBsZW1lbnRlcnM/IE9yIGlzIHRoaXMgYSBub3JtYXRpdmUgcnVsZSB0aGF0IGFsbCBp bXBsZW1lbnRlcnMgbmVlZCB0byBmb2xsb3c/IElmIGxhdHRlciwgSSB0aGluayBpdOKAmXMgbW9y ZSBhcHByb3ByaWF0ZSB0byBzdGFuZGFyZGl6ZSB0aGlzIGFzc2lnbm1lbnQgaW4gVENHLg0KDQo0 LiAgICAgIEluIHNlY3Rpb24gMi4xLjIsIGl0IHNheXMg4oCcSXQgaXMgaW1wb3J0YW50IHRvIHJl Y29nbml6ZSB0aGF0IFBDUlswXSBpcyBjcml0aWNhbOKAnS4gQnkgc2F5aW5nIHNvLCB3aGF04oCZ cyB0aGUgcmVhbCByZWFzb24gb2Ygd2h5IFBDUlswXSBpcyBjcml0aWNhbD8gSXMgaXQgY3JpdGlj YWwgYmVjYXVzZSB0aGUgcG9zaXRpb24gb2YgdGhlIFBDUiAoaS5lLiwgdGhlIFBDUlswXSBpcyBj cml0aWNhbCByZWdhcmRsZXNzIG9mIGl0cyB1c2FnZSksIG9yIGJlY2F1c2UgaXQgaXMgdXNlZCB0 byBzdG9yZSB0aGUgbWVhc3VyZW1lbnQgb2YgdGhlIFJvb3Qgb2YgVHJ1c3QgZm9yIE1lYXN1cmVt ZW50Pw0KDQo1LiAgICAgIEluIHNlY3Rpb24gMi4yLCBpdCBzYXlzIOKAnEluIFRQTSBhcHBsaWNh dGlvbiwgdGhlIEF0dGVzdGF0aW9uIGtleSBNVVNUIGJlIHByb3RlY3RlZCBieSB0aGUgVFBNLCBh bmQgdGhlIERldklEIFNIT1VMRCBiZSBhcyB3ZWxsLuKAnSBIZXJlIHNheXMgdGhlIERldklEIOKA nFNIT1VMROKAnSBiZSBwcm90ZWN0ZWQgYnkgdGhlIFRQTSwgd2hpbGUgb3RoZXIgcGxhY2VzIHVz ZSDigJxNVVNU4oCdLCBsaWtlIHNlY3Rpb24gMi4zIGFuZCBzZWN0aW9uIDMuMS4xLg0KDQo2LiAg ICAgIFRoZXJlIGFyZSB0d28gdGVybXMg4oCcQXR0ZXN0YXRpb24gS2V5IChBSynigJ0gYW5kIOKA nEF0dGVzdGF0aW9uIElkZW50aXR5IEtleSAoQUlLKeKAnSB1c2VkIGluIGRpZmZlcmVudCBwbGFj ZXMsIGJ1dCBJIHRoaW5rIHRoZXkgYXJlIHRoZSBzYW1lIHRoaW5nLiBTbyBJIHN1Z2dlc3Qgb25s eSB1c2luZyBvbmUgdGVybS4NCg0KNy4gICAgICBUaGVyZSBhcmUgc29tZSBhc3ltbWV0cmljYWwg YnJhY2tldHMgaW4gdGhlIGRvYywgZS5nLiwgdGhlIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24g Mi4yLCB0aGUgYnJhY2tldHMgYWZ0ZXIg4oCcW0VGSS1UUE1d4oCdIGluIHNlY3Rpb24gMi4zIGFu ZCAyLjQuMi4NCg0KOC4gICAgICBUaGUgcmVmZXJlbmNlIG9mIFtQbGF0Zm9ybS1EZXZJRC1UUE0t Mi4wXSBjYW4gYmUgdXBkYXRlZCwgSSB0aGluayBpdHMgY3VycmVudCBuYW1lIGlzIOKAnFRQTSAy LjAgS2V5cyBmb3IgRGV2aWNlIElkZW50aXR5IGFuZCBBdHRlc3RhdGlvbuKAnSBhbmQgaXRzIGxp bmsgaXMgaHR0cHM6Ly90cnVzdGVkY29tcHV0aW5nZ3JvdXAub3JnL3Jlc291cmNlL3RwbS0yLTAt a2V5cy1mb3ItZGV2aWNlLWlkZW50aXR5LWFuZC1hdHRlc3RhdGlvbi8uIFBsZWFzZSBjb3JyZWN0 IG1lIGlmIEnigJltIHdyb25nLg0KDQpSZWdhcmRzICYgVGhhbmtzIQ0KV2VpIFBhbg0KDQpGcm9t OiBSQVRTIFttYWlsdG86cmF0cy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTmFuY3kg Q2FtLVdpbmdldCAobmNhbXdpbmcpDQpTZW50OiBNb25kYXksIFNlcHRlbWJlciAyMSwgMjAyMCAx MDowNiBBTQ0KVG86IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFtSYXRzXSBXR0xDIGZvciBkcmFm dC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5ldHdvcmstZGV2aWNlLWF0dGVzdA0KDQpSQVRzIHBhcnRp Y2lwYW50cywNCg0KVGhpcyBpcyBhIFdHTEMgZm9yIGRyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQt bmV0d29yay1kZXZpY2UtYXR0ZXN0LCBwbGVhc2UgcHJvdmlkZSBjb21tZW50cyBhbmQgZmVlZGJh Y2sgYnkgT2N0b2JlciAxMiwgMjAyMC4NClRoZSBkcmFmdCBjYW4gYmUgZm91bmQgaW46DQpodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5l dHdvcmstZGV2aWNlLWF0dGVzdC8NCg0KQmVzdCwgTmFuY3kgKG9uIGJlaGFsZiBvZiB0aGUgUkFU cyBjaGFpcnMpDQoNCg0KDQo= --_000_bbacd6e97a74452a9d3e08b7b834a078huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQOWui+S9kyI7DQoJ cGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5 OkdhZHVnaTsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30N Ci8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYu TXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1 NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3 MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGku TXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9y aXR5OjM0Ow0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCXRleHQtaW5k ZW50OjIxLjBwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixz YW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkdhZHVnaSIsc2Fucy1zZXJpZjsNCgljb2xvcjpibGFjazt9DQouTXNvQ2hw RGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0 O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46 NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxp c3QtaWQ6NzI5MzAzMTk4Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBs YXRlLWlkczotODkyNzk3MzEwIC0xMzUzNzExMDEyIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAz IDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGww OmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6MTguMHB0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7 fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2Vy Ow0KCW1zby1sZXZlbC10ZXh0OiIlMlwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJbWFyZ2luLWxlZnQ6NDIuMHB0Ow0KCXRl eHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2luLWxlZnQ6NjMuMHB0Ow0KCXRleHQtaW5k ZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgltYXJnaW4tbGVmdDo4NC4wcHQ7 DQoJdGV4dC1pbmRlbnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRleHQ6IiU1XCkiOw0KCW1zby1s ZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCglt YXJnaW4tbGVmdDoxMDUuMHB0Ow0KCXRleHQtaW5kZW50Oi0yMS4wcHQ7fQ0KQGxpc3QgbDA6bGV2 ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJbWFyZ2lu LWxlZnQ6MTI2LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0IGwwOmxldmVsNw0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJbWFyZ2luLWxlZnQ6MTQ3LjBwdDsNCgl0ZXh0LWluZGVudDotMjEuMHB0O30NCkBsaXN0 IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28t bGV2ZWwtdGV4dDoiJThcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCW1hcmdpbi1sZWZ0OjE2OC4wcHQ7DQoJdGV4dC1pbmRl bnQ6LTIxLjBwdDt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpyaWdodDsNCgltYXJnaW4tbGVmdDoxODkuMHB0Ow0KCXRleHQtaW5kZW50Oi0y MS4wcHQ7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTow Y207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iWkgtQ04iIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTozLjZwdDttc28tcGFyYS1tYXJnaW4tYm90dG9tOi4z Z2Q7bGluZS1oZWlnaHQ6MTIwJSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjpibGFjayI+SGkgYXV0aG9ycyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbTozLjZwdDttc28tcGFy YS1tYXJnaW4tYm90dG9tOi4zZ2Q7bGluZS1oZWlnaHQ6MTIwJSI+DQo8c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250LWZhbWlseTom cXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206 My42cHQ7bXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouM2dkO2xpbmUtaGVpZ2h0OjEyMCUiPg0KPHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7 Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkni gJl2ZSByZXZpZXdlZCB0aGUgLTA0IGRvYyBhbmQgSSBoYXZlIHNvbWUgY29tbWVudHMgd2hpY2gg SSB3aXNoIHRvIGJlIHJlc29sdmVkIGJlZm9yZSBmb3J3YXJkaW5nIHRoZSBkb2MgdG8gSUVTRy48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWJvdHRvbTozLjZwdDttc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7bGluZS1oZWlnaHQ6MTIw JSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWln aHQ6MTIwJTtmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpi bGFjayI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207bWFy Z2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxOC4wcHQ7bXNvLW1hcmdpbi10b3AtYWx0OjBj bTttc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtO21zby1wYXJhLW1hcmdpbi1ib3R0b206LjNnZDtt c28tcGFyYS1tYXJnaW4tbGVmdDoxOC4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdDtsaW5lLWhlaWdo dDoxMjAlO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtsaW5lLWhlaWdodDoxMjAl O2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj48 c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4xLjxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7Zm9udC1mYW1pbHk6JnF1b3Q7R2Fk dWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkFib3V0IHRoZSB0ZXJtaW5vbG9neSwg c29tZSBuZXcgdGVybXMgYXJlIGludHJvZHVjZWQgaW50byB0aGUgYXJjaGl0ZWN0dXJlIGRvYyBy ZWNlbnRseSAocGxlYXNlIHNlZSBnaXRodWIpLCBpbmNsdWRpbmcgUmVmZXJlbmNlDQogVmFsdWVz IGFuZCBSZWZlcmVuY2UgVmFsdWVzIFByb3ZpZGVyLiBBbmQgdGhlIHRlcm0gRW5kb3JzZXIgb3Ig RW5kb3JzZW1lbnQgZG9lc27igJl0IGNvdmVyIHRoZSBjb25jZXB0IG9mIHJlZmVyZW5jZSBtZWFz dXJlbWVudHMgYW55IG1vcmUuIFNvIHRoaXMgUklWIGRvYyBtYXkgYWxzbyBuZWVkIHRvIHVwZGF0 ZSB0aGUgdXNlIG9mIHRlcm1zIGNvcnJlc3BvbmRlbnRseS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDow Y207bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjE4LjBw dDttc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21zby1wYXJhLW1hcmdpbi1yaWdodDowY207bXNvLXBh cmEtbWFyZ2luLWJvdHRvbTouM2dkO21zby1wYXJhLW1hcmdpbi1sZWZ0OjE4LjBwdDt0ZXh0LWlu ZGVudDotMTguMHB0O2xpbmUtaGVpZ2h0OjEyMCU7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0K PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6YmxhY2siPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjIuPHNw YW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIw JTtmb250LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+ SW4gc2VjdGlvbiAxLjQsIGl0IHNheXM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDoxNy44NXB0O3RleHQtaW5kZW50 OjIwLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgNS4mbmJzcDsgRmluYWxs eSwgQXBwcmFpc2FsIG9mIEV2aWRlbmNlIG9jY3Vycy4mbmJzcDsgQXMgdGhlIFZlcmlmaWVyIGFu ZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MTcuODVwdDt0ZXh0LWluZGVudDoyMC4wcHQiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpi bGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFJlbHlpbmcgUGFydHkg cm9sZXMgYXJlIG9mdGVuIGNvbWJpbmVkIHdpdGhpbiBSSVYsIHRoaXMgaXMgdGhlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4t bGVmdDoxNy44NXB0O3RleHQtaW5kZW50OjIwLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcHJvY2VzcyBvZiB2ZXJpZnlpbmcgdGhl IEV2aWRlbmNlIHJlY2VpdmVkIGJ5IGEgVmVyaWZpZXIgZnJvbSB0aGU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjE3 Ljg1cHQ7dGV4dC1pbmRlbnQ6MjAuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNw OyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDtBdHRlc3RpbmcgZGV2aWNlLCBhbmQgdXNpbmcgYW4g QXBwcmFpc2FsIFBvbGljeSB0byBkZXZlbG9wIGFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDoxNy44NXB0O3RleHQt aW5kZW50OjIwLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgQXR0ZXN0YXRpb24gUmVzdWx0LCB1c2VkIHRvIGluZm9ybSBkZWNpc2lv biBtYWtpbmcuJm5ic3A7IEluIHByYWN0aWNlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MTcuODVwdDt0ZXh0LWlu ZGVudDoyMC4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHRoaXMgbWVhbnMgY29tcGFyaW5nIHRoZSBkZXZpY2UgbWVhc3VyZW1lbnRz IHJlcG9ydGVkIGFzIEV2aWRlbmNlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDoxNy44NXB0O3RleHQtaW5kZW50OjIw LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgd2l0aCB0aGUgQXR0ZXN0ZXIgY29uZmlndXJhdGlvbiBleHBlY3RlZCBieSB0aGUgVmVy aWZpZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgi IHN0eWxlPSJtYXJnaW4tbGVmdDoxNy44NXB0O3RleHQtaW5kZW50OjIwLjBwdCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2Nv bG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgU3Vic2VxdWVu dGx5IHRoZQ0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjpyZWQiPkFwcHJhaXNhbCBQb2xpY3kgZm9yIEF0 dGVzdGF0aW9uIFJlc3VsdHM8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4gbWlnaHQ8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjE3Ljg1cHQ7dGV4dC1pbmRlbnQ6MjAuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBtYXRjaCB3aGF0IHdhcyBmb3VuZCBh Z2FpbnN0IFJlZmVyZW5jZSBJbnRlZ3JpdHkgTWVhc3VyZW1lbnRzPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDoxNy44 NXB0O3RleHQtaW5kZW50OjIwLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgKGFrYSBHb2xkZW4gTWVhc3VyZW1lbnRzKSB3aGljaCBy ZXByZXNlbnQgdGhlIGludGVuZGVkIGNvbmZpZ3VyZWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowY207 bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjE3Ljg1cHQ7 bXNvLW1hcmdpbi10b3AtYWx0OjBjbTttc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtO21zby1wYXJh LW1hcmdpbi1ib3R0b206LjNnZDttc28tcGFyYS1tYXJnaW4tbGVmdDoxNy44NXB0O3RleHQtaW5k ZW50OjIwLjBwdCI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBzdGF0ZSBvZiB0aGUgY29ubmVjdGVkIGRldmljZS48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTttYXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1s ZWZ0OjE4LjBwdDttc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21zby1wYXJhLW1hcmdpbi1yaWdodDow Y207bXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouM2dkO21zby1wYXJhLW1hcmdpbi1sZWZ0OjE4LjBw dDt0ZXh0LWluZGVudDowY207bGluZS1oZWlnaHQ6MTIwJSI+DQo8c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250LWZhbWlseTomcXVv dDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+SW4gdGhlIHNlbnRlbmNlIOKA nFN1YnNlcXVlbnRseSB0aGUgQXBwcmFpc2FsIFBvbGljeSBmb3IgQXR0ZXN0YXRpb24gUmVzdWx0 cyBtaWdodCBtYXRjaCB3aGF0IHdhcyBmb3VuZCBhZ2FpbnN0IFJlZmVyZW5jZSBJbnRlZ3JpdHkg TWVhc3VyZW1lbnRz4oCdLCBJIHRoaW5rDQog4oCcdGhlIEFwcHJhaXNhbCBQb2xpY3kgZm9yIEF0 dGVzdGF0aW9uIFJlc3VsdHPigJ0gc2hvdWxkIGJlIOKAnHRoZSBBcHByYWlzYWwgUG9saWN5IGZv ciBFdmlkZW5jZeKAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDowY207bWFyZ2luLXJpZ2h0OjBjbTtt YXJnaW4tYm90dG9tOjMuNnB0O21hcmdpbi1sZWZ0OjE4LjBwdDttc28tbWFyZ2luLXRvcC1hbHQ6 MGNtO21zby1wYXJhLW1hcmdpbi1yaWdodDowY207bXNvLXBhcmEtbWFyZ2luLWJvdHRvbTouM2dk O21zby1wYXJhLW1hcmdpbi1sZWZ0OjE4LjBwdDt0ZXh0LWluZGVudDotMTguMHB0O2xpbmUtaGVp Z2h0OjEyMCU7bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEy MCU7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2si PjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjMuPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQg JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250LWZhbWlseTomcXVvdDtH YWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+QWJvdXQgdGhlIFBDUiBhc3NpZ25t ZW50IGZpZ3VyZSBpbiBTZWN0aW9uIDIuMS4xLCBpcyB0aGlzIGFzc2lnbm1lbnQgYSByZWZlcmVu Y2UgZm9yIHRoZSBpbXBsZW1lbnRlcnM/IE9yIGlzIHRoaXMgYSBub3JtYXRpdmUNCiBydWxlIHRo YXQgYWxsIGltcGxlbWVudGVycyBuZWVkIHRvIGZvbGxvdz8gSWYgbGF0dGVyLCBJIHRoaW5rIGl0 4oCZcyBtb3JlIGFwcHJvcHJpYXRlIHRvIHN0YW5kYXJkaXplIHRoaXMgYXNzaWdubWVudCBpbiBU Q0cuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRv bTozLjZwdDttYXJnaW4tbGVmdDoxOC4wcHQ7bXNvLW1hcmdpbi10b3AtYWx0OjBjbTttc28tcGFy YS1tYXJnaW4tcmlnaHQ6MGNtO21zby1wYXJhLW1hcmdpbi1ib3R0b206LjNnZDttc28tcGFyYS1t YXJnaW4tbGVmdDoxOC4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdDtsaW5lLWhlaWdodDoxMjAlO21z by1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtsaW5lLWhlaWdodDoxMjAlO2ZvbnQtZmFt aWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj40LjxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkluIHNlY3Rpb24gMi4xLjIsIGl0IHNheXMg4oCcSXQg aXMgaW1wb3J0YW50IHRvIHJlY29nbml6ZSB0aGF0IFBDUlswXSBpcyBjcml0aWNhbOKAnS4gQnkg c2F5aW5nIHNvLCB3aGF04oCZcyB0aGUgcmVhbCByZWFzb24gb2YNCiB3aHkgUENSWzBdIGlzIGNy aXRpY2FsPyBJcyBpdCBjcml0aWNhbCBiZWNhdXNlIHRoZSBwb3NpdGlvbiBvZiB0aGUgUENSIChp LmUuLCB0aGUgUENSWzBdIGlzIGNyaXRpY2FsIHJlZ2FyZGxlc3Mgb2YgaXRzIHVzYWdlKSwgb3Ig YmVjYXVzZSBpdCBpcyB1c2VkIHRvIHN0b3JlIHRoZSBtZWFzdXJlbWVudCBvZiB0aGUgUm9vdCBv ZiBUcnVzdCBmb3IgTWVhc3VyZW1lbnQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1y aWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxOC4wcHQ7bXNvLW1hcmdp bi10b3AtYWx0OjBjbTttc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtO21zby1wYXJhLW1hcmdpbi1i b3R0b206LjNnZDttc28tcGFyYS1tYXJnaW4tbGVmdDoxOC4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBw dDtsaW5lLWhlaWdodDoxMjAlO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBw b3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtsaW5l LWhlaWdodDoxMjAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj41LjxzcGFuIHN0eWxlPSJm b250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7Zm9udC1mYW1p bHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPkluIHNlY3Rpb24g Mi4yLCBpdCBzYXlzIOKAnEluIFRQTSBhcHBsaWNhdGlvbiwgdGhlIEF0dGVzdGF0aW9uIGtleSBN VVNUIGJlIHByb3RlY3RlZCBieSB0aGUgVFBNLCBhbmQgdGhlIERldklEIFNIT1VMRCBiZSBhcw0K IHdlbGwu4oCdIEhlcmUgc2F5cyB0aGUgRGV2SUQg4oCcU0hPVUxE4oCdIGJlIHByb3RlY3RlZCBi eSB0aGUgVFBNLCB3aGlsZSBvdGhlciBwbGFjZXMgdXNlIOKAnE1VU1TigJ0sIGxpa2Ugc2VjdGlv biAyLjMgYW5kIHNlY3Rpb24gMy4xLjEuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1y aWdodDowY207bWFyZ2luLWJvdHRvbTozLjZwdDttYXJnaW4tbGVmdDoxOC4wcHQ7bXNvLW1hcmdp bi10b3AtYWx0OjBjbTttc28tcGFyYS1tYXJnaW4tcmlnaHQ6MGNtO21zby1wYXJhLW1hcmdpbi1i b3R0b206LjNnZDttc28tcGFyYS1tYXJnaW4tbGVmdDoxOC4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBw dDtsaW5lLWhlaWdodDoxMjAlO21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjwhW2lmICFzdXBw b3J0TGlzdHNdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtsaW5l LWhlaWdodDoxMjAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj42LjxzcGFuIHN0eWxlPSJm b250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2xpbmUtaGVpZ2h0OjEyMCU7Zm9udC1mYW1p bHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlRoZXJlIGFyZSB0 d28gdGVybXMg4oCcQXR0ZXN0YXRpb24gS2V5IChBSynigJ0gYW5kIOKAnEF0dGVzdGF0aW9uIElk ZW50aXR5IEtleSAoQUlLKeKAnSB1c2VkIGluIGRpZmZlcmVudCBwbGFjZXMsIGJ1dCBJIHRoaW5r IHRoZXkNCiBhcmUgdGhlIHNhbWUgdGhpbmcuIFNvIEkgc3VnZ2VzdCBvbmx5IHVzaW5nIG9uZSB0 ZXJtLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0 b206My42cHQ7bWFyZ2luLWxlZnQ6MTguMHB0O21zby1tYXJnaW4tdG9wLWFsdDowY207bXNvLXBh cmEtbWFyZ2luLXJpZ2h0OjBjbTttc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7bXNvLXBhcmEt bWFyZ2luLWxlZnQ6MTguMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtt c28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250LWZh bWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PHNwYW4gc3R5 bGU9Im1zby1saXN0Oklnbm9yZSI+Ny48c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFu Pjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtsaW5lLWhlaWdodDoxMjAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5UaGVyZSBhcmUgc29tZSBhc3ltbWV0cmljYWwgYnJh Y2tldHMgaW4gdGhlIGRvYywgZS5nLiwgdGhlIGxhc3QgcGFyYWdyYXBoIG9mIHNlY3Rpb24gMi4y LCB0aGUgYnJhY2tldHMgYWZ0ZXIg4oCcW0VGSS1UUE1d4oCdDQogaW4gc2VjdGlvbiAyLjMgYW5k IDIuNC4yLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBjbTttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1i b3R0b206My42cHQ7bWFyZ2luLWxlZnQ6MTguMHB0O21zby1tYXJnaW4tdG9wLWFsdDowY207bXNv LXBhcmEtbWFyZ2luLXJpZ2h0OjBjbTttc28tcGFyYS1tYXJnaW4tYm90dG9tOi4zZ2Q7bXNvLXBh cmEtbWFyZ2luLWxlZnQ6MTguMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQ7bGluZS1oZWlnaHQ6MTIw JTttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7bGluZS1oZWlnaHQ6MTIwJTtmb250 LWZhbWlseTomcXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+PHNwYW4g c3R5bGU9Im1zby1saXN0Oklnbm9yZSI+OC48c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjwvc3Bhbj48L3NwYW4+PCFbZW5kaWZdPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtsaW5lLWhlaWdodDoxMjAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5UaGUgcmVmZXJlbmNlIG9mIFtQbGF0Zm9ybS1E ZXZJRC1UUE0tMi4wXSBjYW4gYmUgdXBkYXRlZCwgSSB0aGluayBpdHMgY3VycmVudCBuYW1lIGlz IOKAnFRQTSAyLjAgS2V5cyBmb3IgRGV2aWNlIElkZW50aXR5IGFuZA0KIEF0dGVzdGF0aW9u4oCd IGFuZCBpdHMgbGluayBpcyA8YSBocmVmPSJodHRwczovL3RydXN0ZWRjb21wdXRpbmdncm91cC5v cmcvcmVzb3VyY2UvdHBtLTItMC1rZXlzLWZvci1kZXZpY2UtaWRlbnRpdHktYW5kLWF0dGVzdGF0 aW9uLyI+DQpodHRwczovL3RydXN0ZWRjb21wdXRpbmdncm91cC5vcmcvcmVzb3VyY2UvdHBtLTIt MC1rZXlzLWZvci1kZXZpY2UtaWRlbnRpdHktYW5kLWF0dGVzdGF0aW9uLzwvYT4uIFBsZWFzZSBj b3JyZWN0IG1lIGlmIEnigJltIHdyb25nLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjMuNnB0O21zby1wYXJhLW1hcmdpbi1i b3R0b206LjNnZDtsaW5lLWhlaWdodDoxMjAlIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtsaW5lLWhlaWdodDoxMjAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVn aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206My42 cHQ7bGluZS1oZWlnaHQ6MTEwJSI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2xpbmUtaGVpZ2h0OjExMCU7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6YmxhY2siPlJlZ2FyZHMgJmFtcDsgVGhhbmtzITxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjMuNnB0 O2xpbmUtaGVpZ2h0OjExMCUiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtsaW5lLWhlaWdodDoxMTAlO2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj5XZWkgUGFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBw dCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFF MUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4gUkFU UyBbbWFpbHRvOnJhdHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+TmFu Y3kgQ2FtLVdpbmdldCAobmNhbXdpbmcpPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgU2VwdGVt YmVyIDIxLCAyMDIwIDEwOjA2IEFNPGJyPg0KPGI+VG86PC9iPiByYXRzQGlldGYub3JnPGJyPg0K PGI+U3ViamVjdDo8L2I+IFtSYXRzXSBXR0xDIGZvciBkcmFmdC1pZXRmLXJhdHMtdHBtLWJhc2Vk LW5ldHdvcmstZGV2aWNlLWF0dGVzdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5SQVRzIHBhcnRpY2lwYW50cyw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+ VGhpcyBpcyBhIFdHTEMgZm9yIGRyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQtbmV0d29yay1kZXZp Y2UtYXR0ZXN0LCBwbGVhc2UgcHJvdmlkZSBjb21tZW50cyBhbmQgZmVlZGJhY2sgYnkgT2N0b2Jl ciAxMiwgMjAyMC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZSBkcmFmdCBjYW4g YmUgZm91bmQgaW46PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQtbmV0d29yay1kZXZpY2UtYXR0ZXN0LyI+aHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLXRwbS1iYXNlZC1u ZXR3b3JrLWRldmljZS1hdHRlc3QvPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+QmVzdCwgTmFuY3kg KG9uIGJlaGFsZiBvZiB0aGUgUkFUcyBjaGFpcnMpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_bbacd6e97a74452a9d3e08b7b834a078huaweicom_-- From nobody Mon Oct 12 09:19:36 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 923B53A159B; Mon, 12 Oct 2020 09:19:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.196 X-Spam-Level: X-Spam-Status: No, score=-3.196 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=rFnY6+Mk; dkim=pass (1024-bit key) header.d=juniper.net header.b=cjstm9ii Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X7zItCxbRLYn; Mon, 12 Oct 2020 09:19:32 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A20F3A0EC5; Mon, 12 Oct 2020 09:19:32 -0700 (PDT) Received: from pps.filterd (m0108163.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 09CGHLkp012858; Mon, 12 Oct 2020 09:19:20 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=kqQPHxCNAuav+tgaVwO7W5xLmQx07snZEkiV5GMxYMU=; b=rFnY6+MkIyh+aOtKIEzuvMswY1d11CGWHbfkdZeT96WqI/3/9kXh8PeXc/8LNmB86CbJ 3t7yMzGJJChddIitzCGUXUGtes5EGjVo1c3/GennXMPXJtaXGhpf+ZkfKNgdpFn/aqcK 5WxXFSzWm9WwlpB8m9gKeG5wtoSw7/hGO/wy7lVCdhc8EDBQ6dC6mCpnzz/37O9ShT4y 7QLY7TeU+iSV0CGPvVMTERBsTXA2aLOSmhTijS7P9T4EdEOPn0smY1hOYl2V8O/xUkPm LQeUbJZokQeHA6VPcWwpmnykuRFG5BIp1HFVWce6Nw+E92s7KcNwcswFcO4VFIKDiFCP Sg== Received: from nam02-cy1-obe.outbound.protection.outlook.com (mail-cys01nam02lp2050.outbound.protection.outlook.com [104.47.37.50]) by mx0b-00273201.pphosted.com with ESMTP id 34386pjuwr-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 12 Oct 2020 09:19:20 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=K0ytRnwVem14b2WQufBIn251Z7pgyQ48TLiiMDA2o3/ZEfmN7MATrExG81EHi8zIzPN6cSJcROV3MZ12z5jPENf5nbRVe8R8CarfluqDKZNLD8N9sP+tdPMpwZBUZ6J1BHVZFpNDd+bguFpFUHO1TOFruaM3rz0RyZ+T41zhFu17e9V8hPI6EBjzdBoreNLBf9d1OiMkMRJm7cjXY803nKbg+Apn5EMETPHW3/nYruFk9YdGTR0KU/iqFgFNt8A6MHeM3EAvBoUslhFTIzcB7oDIM+bPMWh00sZcJjgeIItQ8fgcaDuXF5LbVClg6o9Gnsi0ODY46N/Tk3k7JCBMXg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kqQPHxCNAuav+tgaVwO7W5xLmQx07snZEkiV5GMxYMU=; b=Q/Uv5V8tb8FkTLjUypV7betVK4RgKU5X6OVXm4CDPX59QCwUUhFG7pvw9CjsfFzYlob1pFMC7YSAcEL8RnaYh69GFaHYmZzJNnKAtEMDItmZxY8GsF2+/kHGCV35gahPXE7i4no6n7TcU3CFuIFtootIzm0nwf2DY/1Z3UlEoMZEBLknvzGkjo8dyn5DkpOQtSUMeNoCnl4F1zOEJRoQl8N5w6mTHqtXYcFLxTHwNkAsAUS0/5p3UjxKEgit+WlLcczekBy31aFdUnpYbgA9EfnKNSxVFxnBixhKXjs41BdJB6GxDio/KGTVCo6bSOlyo/aZdn8lOBt6fagqx3Y+Bw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kqQPHxCNAuav+tgaVwO7W5xLmQx07snZEkiV5GMxYMU=; b=cjstm9ii5lQ87TjqvR/xRlRhLAHers5vk70oKGz7iICn4FOklYfzgz4bb7Io7mNXjSVuXbmn1LkU/S9ae8yFM3+bZJdjHyhUfWDTEO4LsZIN4vt7wP48ioSEJamQ+UVYSMUdbVw+Vi+RqoHrTgvx1c92VFdrcGFPCCZ5SwkxjxQ= Received: from SJ0PR05MB7389.namprd05.prod.outlook.com (2603:10b6:a03:287::16) by BYAPR05MB5591.namprd05.prod.outlook.com (2603:10b6:a03:1c::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Mon, 12 Oct 2020 16:19:18 +0000 Received: from SJ0PR05MB7389.namprd05.prod.outlook.com ([fe80::f45e:8652:c1aa:c980]) by SJ0PR05MB7389.namprd05.prod.outlook.com ([fe80::f45e:8652:c1aa:c980%8]) with mapi id 15.20.3477.018; Mon, 12 Oct 2020 16:19:18 +0000 From: Guy Fedorkow To: "Panwei (William)" , "draft-ietf-rats-tpm-based-network-device-attest@ietf.org" CC: "rats@ietf.org" Thread-Topic: WGLC for draft-ietf-rats-tpm-based-network-device-attest Thread-Index: AQHWj7vQmCquGJdJ8UCU7FSWkWcz36mULaRQgAAZZKA= Date: Mon, 12 Oct 2020 16:19:18 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-12T16:19:15Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=436ee4ea-47b4-4736-addc-4f534811fbdf; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=juniper.net; x-originating-ip: [24.61.11.4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d8b09cf2-2cd3-4de5-010c-08d86eca91ed x-ms-traffictypediagnostic: BYAPR05MB5591: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: PvrHbxSv29sLLOqNJzpqXV5GKtu5GywvdD2aB4U2SGEme/VCpnv00Y6C3unTm61RMJGz2QDZi+KJnYrZ/OwVnalzQygox1mjWUmFVIWf1DsLjAi9d4q8gx/PmCr84mumTPtJd2qgjEjTvruyUcJc3zhPrhhxyqAIhliZnSyVbxYsa9e98rSQyOCFr+nEIUiH3XTkfT3P6lXwFnOzKd7PVFnQawTnBvnzAj7OhnLXCp7XBSyPyvXkTHkNoboLkVe7iCJl8JCzVoqx/t8tH2Q1Y22gUJHaRgnrMA1ZKaFVix4aBlk/m/rYrx9iTFiTajkRbCoJ9I5oyG1TQVo+yWptVmKYHFVQlmLnqFSmd3hnQ3k= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR05MB7389.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(39860400002)(366004)(136003)(346002)(376002)(26005)(66476007)(66946007)(66446008)(186003)(64756008)(66556008)(4326008)(316002)(55016002)(9686003)(86362001)(52536014)(5660300002)(110136005)(33656002)(966005)(71200400001)(8676002)(83380400001)(166002)(8936002)(7696005)(2906002)(76116006)(53546011)(6506007)(478600001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_SJ0PR05MB73894514F4D3D9F777437012BA070SJ0PR05MB7389namp_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SJ0PR05MB7389.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d8b09cf2-2cd3-4de5-010c-08d86eca91ed X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2020 16:19:18.2099 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 9LXFT2jjYMGHM9oP0HUmXsKwjuL2nHa/gjpgbiMkUX1BfNO7Coc3sgU1FoNBum96N900wvADwGvr3hytDTBosA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR05MB5591 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-12_12:2020-10-12, 2020-10-12 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 adultscore=0 impostorscore=0 lowpriorityscore=0 mlxscore=0 mlxlogscore=999 bulkscore=0 phishscore=0 spamscore=0 priorityscore=1501 clxscore=1011 suspectscore=0 malwarescore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010120127 Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 16:19:35 -0000 --_000_SJ0PR05MB73894514F4D3D9F777437012BA070SJ0PR05MB7389namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Wei Pan, I'll collect all the comments and start on a -05 draft, thanks /guy Juniper Business Use Only From: Panwei (William) Sent: Monday, October 12, 2020 11:58 AM To: draft-ietf-rats-tpm-based-network-device-attest@ietf.org Cc: rats@ietf.org Subject: RE: WGLC for draft-ietf-rats-tpm-based-network-device-attest [External Email. Be cautious of content] Hi authors, I've reviewed the -04 doc and I have some comments which I wish to be resol= ved before forwarding the doc to IESG. 1. About the terminology, some new terms are introduced into the archi= tecture doc recently (please see github), including Reference Values and Re= ference Values Provider. And the term Endorser or Endorsement doesn't cover= the concept of reference measurements any more. So this RIV doc may also n= eed to update the use of terms correspondently. 2. In section 1.4, it says: 5. Finally, Appraisal of Evidence occurs. As the Verifier and Relying Party roles are often combined within RIV, this is the process of verifying the Evidence received by a Verifier from the Attesting device, and using an Appraisal Policy to develop an Attestation Result, used to inform decision making. In practice, this means comparing the device measurements reported as Evidence with the Attester configuration expected by the Verifier. Subsequently the Appraisal Policy for Attestation Results might match what was found against Reference Integrity Measurements (aka Golden Measurements) which represent the intended configured state of the connected device. In the sentence "Subsequently the Appraisal Policy for Attestation Results = might match what was found against Reference Integrity Measurements", I thi= nk "the Appraisal Policy for Attestation Results" should be "the Appraisal = Policy for Evidence". 3. About the PCR assignment figure in Section 2.1.1, is this assignmen= t a reference for the implementers? Or is this a normative rule that all im= plementers need to follow? If latter, I think it's more appropriate to stan= dardize this assignment in TCG. 4. In section 2.1.2, it says "It is important to recognize that PCR[0]= is critical". By saying so, what's the real reason of why PCR[0] is critic= al? Is it critical because the position of the PCR (i.e., the PCR[0] is cri= tical regardless of its usage), or because it is used to store the measurem= ent of the Root of Trust for Measurement? 5. In section 2.2, it says "In TPM application, the Attestation key MU= ST be protected by the TPM, and the DevID SHOULD be as well." Here says the= DevID "SHOULD" be protected by the TPM, while other places use "MUST", lik= e section 2.3 and section 3.1.1. 6. There are two terms "Attestation Key (AK)" and "Attestation Identit= y Key (AIK)" used in different places, but I think they are the same thing.= So I suggest only using one term. 7. There are some asymmetrical brackets in the doc, e.g., the last par= agraph of section 2.2, the brackets after "[EFI-TPM]" in section 2.3 and 2.= 4.2. 8. The reference of [Platform-DevID-TPM-2.0] can be updated, I think i= ts current name is "TPM 2.0 Keys for Device Identity and Attestation" and i= ts link is https://trustedcomputinggroup.org/resource/tpm-2-0-keys-for-devi= ce-identity-and-attestation/. Please correct me if I'm wrong. Regards & Thanks! Wei Pan From: RATS [mailto:rats-bounces@ietf.org] On Behalf Of Nancy Cam-Winget (nc= amwing) Sent: Monday, September 21, 2020 10:06 AM To: rats@ietf.org Subject: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest RATs participants, This is a WGLC for draft-ietf-rats-tpm-based-network-device-attest, please = provide comments and feedback by October 12, 2020. The draft can be found in: https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-a= ttest/ Best, Nancy (on behalf of the RATs chairs) --_000_SJ0PR05MB73894514F4D3D9F777437012BA070SJ0PR05MB7389namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Wei Pan,=

  I’ll c= ollect all the comments and start on a -05 draft, thanks<= /p>

/guy

 

 

 

Juniper Business Use Only

From:= Panwei (William) <william.panwei@huawe= i.com>
Sent: Monday, October 12, 2020 11:58 AM
To: draft-ietf-rats-tpm-based-network-device-attest@ietf.org
Cc: rats@ietf.org
Subject: RE: WGLC for draft-ietf-rats-tpm-based-network-device-attes= t

 

<= span style=3D"font-size:10.5pt;font-family:"Lato",sans-serif;colo= r:black;mso-fareast-language:ZH-CN">[External Email. Be cautious of content= ]

 

Hi authors,

 

I’ve reviewed= the -04 doc and I have some comments which I wish to be resolved before fo= rwarding the doc to IESG.

 

1.      About the terminology, some new terms are introduced into the a= rchitecture doc recently (please see github), including Reference Values and Reference Values Provider. And the term End= orser or Endorsement doesn’t cover the concept of reference measureme= nts any more. So this RIV doc may also need to update the use of terms corr= espondently.

2.      In section 1.4, it says:

   5.  Finally, Appraisal of Evidence = occurs.  As the Verifier and

       Relying Party ro= les are often combined within RIV, this is the

       process of verif= ying the Evidence received by a Verifier from the

       Attesting device= , and using an Appraisal Policy to develop an

       Attestation Resu= lt, used to inform decision making.  In practice,

       this means compa= ring the device measurements reported as Evidence

       with the Atteste= r configuration expected by the Verifier.

       Subsequently the Appraisal Policy for Attestation Results might

       match what was f= ound against Reference Integrity Measurements

       (aka Golden Meas= urements) which represent the intended configured

       state of the connect= ed device.

In the sentence = 220;Subsequently the Appraisal Policy for Attestation Results might match w= hat was found against Reference Integrity Measurements”, I think “the Appraisal Policy for Attestation Results” should = be “the Appraisal Policy for Evidence”.

3.      About the PCR assignment figure in Section 2.1.1, is this assig= nment a reference for the implementers? Or is this a normative rule that all implementers need to follow? If latter, I t= hink it’s more appropriate to standardize this assignment in TCG.

4.      In section 2.1.2, it says “It is important to recognize t= hat PCR[0] is critical”. By saying so, what’s the real reason of why PCR[0] is critical? Is it critical because the position= of the PCR (i.e., the PCR[0] is critical regardless of its usage), or beca= use it is used to store the measurement of the Root of Trust for Measuremen= t?

5.      In section 2.2, it says “In TPM application, the Attestat= ion key MUST be protected by the TPM, and the DevID SHOULD be as well.” Here says the DevID “SHOULD” be prot= ected by the TPM, while other places use “MUST”, like section 2= .3 and section 3.1.1.

6.      There are two terms “Attestation Key (AK)” and R= 20;Attestation Identity Key (AIK)” used in different places, but I think they are the same thing. So I suggest only using one term.

7.      There are some asymmetrical brackets in the doc, e.g., the last= paragraph of section 2.2, the brackets after “[EFI-TPM]” in section 2.3 and 2.4.2.

8.      The reference of [Platform-DevID-TPM-2.0] can be updated, I thi= nk its current name is “TPM 2.0 Keys for Device Identity and Attestation” and its link is https://trustedcomputinggroup.org/resource/tpm-2-0-keys-for-device-identity= -and-attestation/. Please correct me if I’m wrong.

 

Regards & Thanks!

Wei Pan

 

From: RATS [mailto:rats-bou= nces@ietf.org] On Behalf Of Nancy Cam-Winget (ncamwing)
Sent: Monday, September 21, 2020 10:06 AM
To: rats@ietf.org
Subject: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-at= test

&nbs= p;

RATs participants,

 

This is a WGLC for draft-ietf-rats-tpm-based-network-device-attest,= please provide comments and feedback by October 12, 2020.

The draft can be found in:

https://datatracker.ietf.o= rg/doc/draft-ietf-rats-tpm-based-network-device-attest/

&nbs= p;

Best, Nan= cy (on behalf of the RATs chairs)

 

 

 

--_000_SJ0PR05MB73894514F4D3D9F777437012BA070SJ0PR05MB7389namp_-- From nobody Mon Oct 12 09:25:19 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81D003A15EF for ; Mon, 12 Oct 2020 09:25:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.112 X-Spam-Level: X-Spam-Status: No, score=-2.112 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, NICE_REPLY_A=-0.213, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bIF6227ifban for ; Mon, 12 Oct 2020 09:25:06 -0700 (PDT) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 249A63A15C2 for ; Mon, 12 Oct 2020 09:25:03 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GTHQCtgoRf/xwBYJlXCYEJg0qBH1F?= =?us-ascii?q?jCoQzkGsugQKZO4FcDQsBAQEBAQEBAQEHAQEYDQgCBAEBAoFTgnUCghgBJTg?= =?us-ascii?q?TAhABAQYBAQEBAQYEAgKGRQyDVIEDAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1U?= =?us-ascii?q?SAR8BAQEDAQEhDwEFNgQCFQkCEgYCAhEVAgInIAIOBgEJAwYCAQEXgkBLAYJ?= =?us-ascii?q?7BQuLW5t7gTKET0FEgyuBPAaBDiqGYIUDgUQPD4FNP4ERJw+BXEk1PoJcAQE?= =?us-ascii?q?DAYEUG2uCWIJgBJAAWYJthyybZF8rB4FggQuBDgQLh2SRXAUKH4MVigiFEwY?= =?us-ascii?q?pjluFf40jinGVNAIEAgkCFYFrgXtNJE+CaVAXAg2OJgUXiGKFRHI3AgYBCQE?= =?us-ascii?q?BAwl8jDsBgRABAQ?= X-IPAS-Result: =?us-ascii?q?A2GTHQCtgoRf/xwBYJlXCYEJg0qBH1FjCoQzkGsugQKZO?= =?us-ascii?q?4FcDQsBAQEBAQEBAQEHAQEYDQgCBAEBAoFTgnUCghgBJTgTAhABAQYBAQEBA?= =?us-ascii?q?QYEAgKGRQyDVIEDAQEBAQEBAQEBAQEBAQEBAQEBARYCQ1USAR8BAQEDAQEhD?= =?us-ascii?q?wEFNgQCFQkCEgYCAhEVAgInIAIOBgEJAwYCAQEXgkBLAYJ7BQuLW5t7gTKET?= =?us-ascii?q?0FEgyuBPAaBDiqGYIUDgUQPD4FNP4ERJw+BXEk1PoJcAQEDAYEUG2uCWIJgB?= =?us-ascii?q?JAAWYJthyybZF8rB4FggQuBDgQLh2SRXAUKH4MVigiFEwYpjluFf40jinGVN?= =?us-ascii?q?AIEAgkCFYFrgXtNJE+CaVAXAg2OJgUXiGKFRHI3AgYBCQEBAwl8jDsBgRABA?= =?us-ascii?q?Q?= X-IronPort-AV: E=Sophos;i="5.77,367,1596492000"; d="scan'208";a="20917902" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Oct 2020 18:25:01 +0200 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DrHQAogoRf/1lIDI1XCYEJg0ovcFE?= =?us-ascii?q?HMCwKhDOQay6BApk7gWkLAQMBAQEBAQcBARgNCAIEAQGBVYJ1AoIWAiU4EwI?= =?us-ascii?q?QAQEFAQEBAgEGBG2FXAyFcwEBBAEBIQ8BBTYEAhUJAhIGAgIRFQICJyACDgY?= =?us-ascii?q?BCQMGAgEBF4JASwGDAAuLWZt7gTKET0FEgyuBPAaBDiqGYIUDgUQPD4FNP4E?= =?us-ascii?q?RJw+BXEk1PoJcAQEDAYEUG2uCWIJgBJAAWYJthyybZF8rB4FggQuBDgQLh2S?= =?us-ascii?q?RXAUKH4MVigiFEwYpjluFf40jinGVNAIEAgkCFYFrI4FXTSRPgmlQFwINjiY?= =?us-ascii?q?FF4hihURBMTcCBgEJAQEDCXyMOwGBEAEB?= X-IronPort-AV: E=Sophos;i="5.77,367,1596492000"; d="scan'208";a="37230806" Received: from mailext.sit.fraunhofer.de ([141.12.72.89]) by mail-mtaKA28.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 12 Oct 2020 18:24:58 +0200 Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.15.2/8.15.2/Debian-10) with ESMTPS id 09CGOwW0015567 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA256 bits=128 verify=NOT); Mon, 12 Oct 2020 18:24:58 +0200 Received: from [192.168.16.50] (79.234.118.28) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.487.0; Mon, 12 Oct 2020 18:24:53 +0200 To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" References: From: Henk Birkholz Message-ID: Date: Mon, 12 Oct 2020 18:24:52 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [79.234.118.28] Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 16:25:17 -0000 Hi all, please find below a review of I-D.ietf-rats-tpm-based-network-device-attest-04. There are no fundamental issues with this I-D. If the nits and comments are taken into account and addressed where applicable or feasible (next to other WGLC reviews, of course), I support moving this I-D forward. In general, the I-D evolved quite nicely. It is well written and provides an appropriate framing / basis for multiple other documents in the working group. First comment is the "biggest issue" (but a dependency to the architecture I-D that is still TBD, actually, so it is a comment). Viele Grüße, Henk COMMENT "A number of terms are reused from [I-D.ietf-rats-architecture]." If the recent introduction of the term Reference Value Provider and corresponding elevation of Reference Value find consensus in the group, that will have an effect on the usage of Endorser and reference values/measurements in this document. This could result in quite a few precise incisions wrt rewording - but nothing invasive to structure or content. -- COMMENT Definition of Remote Attestation: While in itself correct that might not be complete? Are you sure you want to use "claims" only as the basis of this definition and not "Evidence"? The definition does not refer to any kind of measures to ensure trustworthiness associated with the Claims created (I'd use generated for consistency), conveyed and appraised. -- COMMENT "The goal of attestation" seems to imply boot-time integrity, yet it does not introduce the term. The rest of the document is more open on the exact scope and sometime seems to lean on the side of run-time integrity even - until Section 1.6.1. The "in-scope" must be made more clear at the very beginning. -- NIT "Network(ing) Equipment" is capitalized quite often, but not defined as a specific term? -- COMMENT Section 1.4 speaks of services, but Platform Identity and Software Measurement are not services per-se. Maybe "services providing..." or something similar? -- NIT OLD: "Creation of Evidence is the process whereby" NEW: "Generation of Evidence is the process whereby" -- COMMENT "Software used to boot a device can be described as a chain of measurements, anchored at the start by a Root of Trust for Measurement, that normally ends when the system software is loaded." The description of this 3rd major process deviates from the other ones as it does not start with its "name". -- NIT All devices here are Attesters, right? Maybe add a sentence about that and: OLD: "of the identity of devices that make up their network" NEW: "of the identity of Attesters that make up their network" -- NIT OLD: "attesting device's TPM" NEW: "Attester's TPM" -- NiT "Root of Trust for Measurement" Capitalized but not introduces or defined? A forward reference to an Appendix might be okay here. -- COMMENT "As the Verifier and Relaying Party roles are often combined within RIV," comes a little bit a as a surprise for the reader. If this is vital here, it should be elaborated on in the text above. -- NIT "(for example, TCG Platform Certificates [Platform-Certificates])" First use of acronym and not introduced. -- NIT "to the system in which verification will take place" Why not simply say Verifier as that term is pulled in in Section 1.1? -- COMMENT "as network equipment is often required to "self-configure" Inconsistent capitalization (sometimes also, e.g., "Networking Equipment" or "Network equipment") throughout the text. Maybe use "network intermediate systems" or define Network Equipment at the top of the text, too? Includes the NIT: very long sentence -- NIT "Remote Attestation is a very general problem" I really hope that remote attestation is not a problem :-) -- NIT "This solution is for use in non-privacy-preserving applications" This item misses a period at the end. -- NIT OLD: "but are not considered in this revision of the document." NEW: "but are not considered in this document." -- COMMENT "The measurement process generally follows the Chain of Trust model used in Measured Boot, where each stage of the system measures the next one" This item should refer to the Layered Attestation concept defined in the architecture I-D. If you stick with the term Chain of Trust (and Measured Boot, analogously) that again needs at minimum a reference and should be elaborated on beforehand in the text above. Also, as the next item refers to a Verifier, why does this item not refer to Attester? -- COMMENT "retrieve the logs and a copy of the digests collected by hashing each software object" Is there a suitable reference for this procedure? -- COMMENT "TPM's attestation public key" Maybe refer to the Authentication Secret ID in the reference interaction models I-D? -- COMMENT "comparing digests in the log with known-good values" First use and not set into context. Maybe use RIM or golden measurements as these were already introduced? We already established that there are too many synonyms here. At the very least: reference values, nominal values, golden measurements, known good values Resolving this mess should not be hidden in this document, though :-) Here we only need consistent usage of one selected term or put the terms used in this document in relation. -- COMMENT Figure 1 basically is a specialized view of Layered Attestation (as indicated in a comment above). Capturing that helps, I think. -- NIT "These settings may have vendor defaults, but often can be changed by administrators, who may want to verify via attestation that the settings they intend are still in place." Colloquial; better: operational state vs. intended state -- COMMENT In Figure 2: This table indicated that boot-time integrity goes beyond PCR 7 and requries IMA - as is elaborated on in upcoming text that follows. Maybe highlight the demarcation line when "boot-time" ends ad "run-time" begins with respect to PCR 9 & 10?? -- COMMENT "Designers must recognize that some PCRs may cover log entries that a particular Verifier considers critical and other log entries that are not considered important, so differing PCR values may not on their own constitute a check for authenticity." For me that is hard to grasp by its own. Maybe an example could be quite beneficial here? -- COMMENT Section 2.2.: It's actually four keys as both are asymmetric key-pairs, isn't it? At the moment the identity key refers to the pub-key of the first pair (embedded in a cert) and the attestation key refers to the priv-key of the second pair (which a cert also exists for containing the corresponding pub-key), I think. If a certificate is mentioned in the same context as a key: is the key then always referring to the priv-key and the certificate implicitly referring to the pub-key? Also, why should the DevID be protected? Do you mean the corresponding priv-key or actually the certificate with pub-key that is intended to be presented to other RATS roles? If so, the reader probably needs to understand why. -- COMMENT "Attestation Key (AK) and its x.509 certificate should parallel the DevID" This seems to be a vital part here and is captured in only one sentence. Maybe elaborate a bit on what "parallel" means and provide an exhaustive well-defined list of elements/extensions that must be aligned? "i.e." implies some wriggle room, but this is already an exhaustive list, correct? -- NIT OLD: "mechanism whereby an Administrator" NEW: "mechanism whereby an administrator" -- COMMNENT "1. The Attesting Device" Why not use Attester here (applies also to other places, this is the 3rd, actually)? -- COMMENT "that will retrieve the information" Why not "evidence and measurement logs"? -- NIT Figure 3 / Section 2.3.: "Device under attestation" reads a bit funny. Maybe a "reference" to target of evaluation or something similar in the leading text would iron that out a little bit? -- COMMENT "The IAK cert contains the same identity information as the DevID [...], but it's a type of key that can be used to sign a TPM Quote." I cannot parse this sentence. What is it trying to say? You are not trying to say that the pub-key in the IAK cert is used to sign a TPM Quote, I think. -- COMMENT Section 2.4.1.: There are two types of "RIM" referenced and described in this I-D, I think. Reference Integrity Measurements and Reference Integrity Manifests Both can be easily confused as their meaning is very similar. I think it would help to disambiguate them earlier in the text or in this section at the latest. -- COMMENT "The log must contain enough information to demonstrate its integrity by allowing exact reconstruction of the digest conveyed in the signed quote (i.e., PCR values)." This is an essential piece of the puzzle and in the light of that is relatively hard to read. Maybe elaborate more on this characteristic - especially how a log exactly can "demonstrate its integrity" without being signed.". A forward reference to the Appendix could be a minimal, but not pretty, fix. -- NIT "The Reference Interaction Model for Challenge-Response-based Remote Attestation is based on the standard roles defined in [I-D.ietf-rats-architecture]." Reference for "Reference Interaction Model for Challenge-Response-based Remote Attestation" is missing. -- COMMENT "The Attestation Identity Key (AIK)" As it was assumed the an Initial Attestation Key is provisioned, would this make it the.... Initial Attestation Identity Key, analogously (IAIK)? AIK and IAK could be a bit confusing to the reader, I think. -- COMMENT "On the Attester, measured values are retrieved from the Attester's TPM." and "Quotes are retrieved according to TCG TAP Information Model [TAP]." somehow reads as two separate steps in sequence, but they actually describe the same step (a quote operation on the TPM), right? In general, the "time(eg)" item is quite difficult to read and I recommend a re-write with better structure. -- NIT OLD: "and makes a request attestation data or one or more PCRs from an Attester." NEW: "and issues a request for evidence about one or more PCR values to the Attester including that nonce." -- NIT "While the TAP IM gives[...]" starts a very long sentence. -- NIT "If the AIK signature is not correct, or freshness such as that provided by the nonce is not included in the response, the device SHOULD NOT be trusted." I am having a hard time parsing this sentence and assume it is broken. -- NIT OLD: "If time(RG)-time(NS) is greater than the threshold in the Appraisal Policy for Evidence," NEW: "If time(RG)-time(NS) is greater than the threshold in the Appraisal Policy for Evidence that assess its freshness," -- COMMENT "Implementations that use NETCONF MUST do so over a TLS or SSH secure tunnel. Implementations that use RESTCONF transport MAY do so over a TLS or SSH secure tunnel." MUST and MAY are in relatively stark contrast. Is that intentional here? -- NIT OLD: "Retrieval of Log Evidence SHOULD be via log interfaces on the network device." NEW: "Retrieval of Log Evidence SHOULD conducted via log interfaces provided by the Attester." -- COMMENT OLD: "Figure 5 above assumes that the Verifier is implicitly trusted, while the Attesting device is not." NEW: "Figure 5 above assumes that the Verifier is trusted, while the Attesting device is not." Let's avoid bringing the "implicit" discussion here. -- NIT OLD: "Devices may also have to carry Appraisal Policy for Evidence for each possible peer device so that each device has everything needed for attestation, without having to resort to a central authority." NEW: "Devices may also have to carry Appraisal Policy for Evidence for each possible peer device so that each device has everything needed for remote attestation, without having to resort to a central authority." -- NIT OLD: "to the Equipment's Administrator" NEW: "to the equipment's Administrator" -- COMMENT "Keys may be compromised." Which keys? All of them? Basically every key used in this document is Attester-located. An Attester does not generate Attestation Results, but Evidence. The leading sentence in this Security Consideration section scopes it to Attestation Results and not Evidence. That is rather surprising. Is it intentional? I think "Attestation Results from the RIV procedure are subject to a number of attacks:" does not really defines the scope that was intended to be define here :-) -- COMMENT "Two sets of keys are relevant to RIV attestation" Again I am rather sure I think what keys are actually referred to here, but I would like it better, if it is spelled out that it's priv-keys of asym key-pairs, explicitly (and if that's a misconception of mine, that's an even better reason!). -- COMMENT "Keeping keys safe is just part of attestation security" It's also the critical enabler of trustworthiness (which is why we require Endorsements about the capabilities to keep these keys safe). -- NIT OLD: "An unbroken chain of trust is essential to ensuring that blocks of code that are taking measurements have been verified before execution (see Figure 1." NEW: "An unbroken chain of trust is essential to ensuring that blocks of code that are taking measurements have been verified before execution (see Figure 1.)" COMMENT "Requiring results of attestation of the operating software to be signed by a key known only to the TPM also removes the need to trust" Is that different to Attestation Results? It's about... the successful use of remote attestation to improve trust in the trustworthiness of Attesters, right? If so, I do not think the text expresses that well. If not, I don't understand this paragraph, obviously. -- NIT OLD: "The entire device could be spoofed, that is, when the Verifier goes to verify a specific device, it might be redirected to a different device." NEW: "The entire Attester could be spoofed. If the Verifier goes to appraise a specific Attester, it might be redirected to a different Attester." -- COMMENT OLD: "A compromised device could respond with a spoofed Attestation Result, that is, a compromised OS could return a fabricated quote." NEW: "A compromised Attester could respond with a spoofed Evidence, that is, a compromised OS could return a fabricated Quote." Maybe this is about the Verifier instead? Then Attestation Result would make sense, but Quote would not. In general, spoofed Evidence is probably a separate problem to fabricated Quote. Why is Quote here used without capitalization? -- COMMENT "To block a spoofed Attestation Result, the quote generated inside the TPM must be signed by a key that's different from the DevID, called an Attestation Key (AK)." This starts to cement my confusion. I start to think Attestation Result should be Evidence here. The document never elaborates on how a Quote could be included in an Attestation Result or why, I think. While that is feasible in some solutions, it seems not in scope of RIV? Maybe I am missing something very obvious here. -- NIT "[Editor's Note: does this require an OID that says the key is known by the CA to be an Attestation key?]" This question should probably get answered before IESG review. -- COMMENT "These two keys and certificates are used together:" And finally, this seems to talk about pub-key and priv-key again. I think this "two keys" alliteration in the overall text should be more clear and definitely consistent in intend and wording. Just highlighting that to me it reads confusing. -- COMMENT "Device owners, however, can use any other mechanism they want to assure themselves that Local identity certificates are inserted into the intended device" Why is local capitalized till the end of the section? -- COMMENT "In addition to trustworthy provisioning of keys, RIV depends on other trust anchors. (See [SP800-155] for definitions of Roots of Trust.)" Why is the heading and text talking about trust anchors, but the reference and following lost about roots of trusts? -- COMMENT Sectio 8.2. should probably highight that an RTM is typically not part of the TPM and has to be endorsed independently. -- COMMENT Section 8.3.1.: and there I though OS start-up is in scope. Maybe it is not? To me, this section conveys the impression that PCR 8-10 as well as IMA, as well as log transfer elaborated on in the body of this document are illustrating un-specified methods. Is that the intend of 8.3.1.? Or does this Section just elaborates on "and with OS entropy kicks in and Quotes can only be appraised using Event-Logs and not with PCR KGV anymore"? -- On 21.09.20 04:06, Nancy Cam-Winget (ncamwing) wrote: > RATs participants, > > This is a WGLC for draft-ietf-rats-tpm-based-network-device-attest, > please provide comments and feedback by October 12, 2020. > > The draft can be found in: > > https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ > > Best, Nancy (on behalf of the RATs chairs) > > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Oct 12 10:45:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBABF3A15D7; Mon, 12 Oct 2020 10:45:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.196 X-Spam-Level: X-Spam-Status: No, score=-3.196 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=srVkfbz0; dkim=pass (1024-bit key) header.d=juniper.net header.b=aIc2ZvgV Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q6qS9CIKqIIW; Mon, 12 Oct 2020 10:45:21 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EF6E3A15D6; Mon, 12 Oct 2020 10:45:20 -0700 (PDT) Received: from pps.filterd (m0108158.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 09CHb1nm030606; Mon, 12 Oct 2020 10:45:20 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=PPS1017; bh=D+0IU3H7ofmTJBvfIDWlJtjLcYsrOkNo5hCLkUvRGOU=; b=srVkfbz05YgmJR9vu7dItQ4G9XtGAKCWZsezOgTdXOnug3b15QEaEOoClFz/XzOmyIU+ Srk5W4BJ+ymHhxqPJZeSr0nTXcnKCi9BcUNLzjR9Dl4ZAlDSI0adNqNxRc567Mj3UBle B1bmsPBiHE04PneXINusXLWdvIWZYt4MjNubmF4rnVy3Y4v+TM82OQmywhQ/m7pSLBS2 kwC9Gb7mQ4ApbDtA0R5Hyg+YxZz29DJgqA3dcsU3v+PCGWN+N9i2MYL9OUTCvdQdaY9y hk3h1Qrss50b4QaKd8n7UzXxwdPUn4kgN+vwrbaDIYd3EHkKlALMuBzwWek5Bdq6gtkk ig== Received: from nam10-bn7-obe.outbound.protection.outlook.com (mail-bn7nam10lp2104.outbound.protection.outlook.com [104.47.70.104]) by mx0a-00273201.pphosted.com with ESMTP id 3438npk0e9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 12 Oct 2020 10:45:20 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BXyT3/KremhQJSMC6tFg5PrSFngln3P2SQHSXf1R66YGSwYiYKxfdwG04So5WqtUJ6tN9sVGrlaRY/mux3m4UGU8rtPDU/Qlm3oM0nObTBJ1KdPDjaW0z9+sb7UCnir8pEkk7RC5kskYLj9adpC/jUMbQaQV3x1vAyFabYSirwaWASkE2JgwsI9kmIhmoN8YwjOqmUlFIhWmlAJtSv4TSLb8rbw6Fz0PX5exdWE3YbApcM+6kYJTVySeeqK5KWFvjILUcgVtiYzhe3lCYFNsPZtdOdAeMDVNxlE0LYkJ46R+tR/mJYcgvQ6uvlTcKoYqr+BZLedESX7Es4FcZDE5rA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D+0IU3H7ofmTJBvfIDWlJtjLcYsrOkNo5hCLkUvRGOU=; b=NZ/U8mTGQOqLC3xc5mJd16BKjPw7x0uXuq6ygI5Lou/+t7Terc67Gi+FasSOrf0LJJNLq/7xWRZ60waicyPbyUUFExYwJ+Zf38WfodEAU3Y1VO781ockwtl3Rh09QuZEDpfuryvDkt97V5tWZMAYVSSGuhn3uFVo4MK/9i3RtAJZ2+HGmLq0TKCQZK16TaJDKyw1JWF/NwZAPT+UbONTpMlC59kOdXNDAD5UvMVurVPXFCvnSXVfRQ1wwjoEFlHKtS+xIaNFbSbr3ZA5Arst43WZXka3eVa+AU9UYYvwBw7aheLL/1hhehddw7vffH/JWijhSVDbnI0uJa+w0WbmpQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=D+0IU3H7ofmTJBvfIDWlJtjLcYsrOkNo5hCLkUvRGOU=; b=aIc2ZvgVARywJcVnIK7JFXK9efdd7uNCq+8jXMnRVtS3Qpvl7xctPY8wbnVBSHBIpE6TOvqDciz5BzofnqeLRiKc/fyix5ybvdpydoxti0V3ysZmUxE8kw7QlK3ajUawBfSY52ciAfW3YDBpliLbwL15khG+Lw3A32G/yZUMWhc= Received: from BN7PR05MB4131.namprd05.prod.outlook.com (2603:10b6:406:8b::18) by BN7PR05MB4129.namprd05.prod.outlook.com (2603:10b6:406:8d::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.11; Mon, 12 Oct 2020 17:45:17 +0000 Received: from BN7PR05MB4131.namprd05.prod.outlook.com ([fe80::9839:1d5b:8704:c4d3]) by BN7PR05MB4131.namprd05.prod.outlook.com ([fe80::9839:1d5b:8704:c4d3%7]) with mapi id 15.20.3477.018; Mon, 12 Oct 2020 17:45:17 +0000 From: William Bellingrath To: "rats-chairs@ietf.org" , "draft-ietf-rats-tpm-based-network-device-attest@ietf.org" CC: "rats@ietf.org" Thread-Topic: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest Thread-Index: AQHWoL9yx85xA9VIU0ySwapqN3GTjQ== Date: Mon, 12 Oct 2020 17:45:17 +0000 Message-ID: <2B2E5DC0-EB44-41BC-8766-5A1BD773E693@juniper.net> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=0; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=6ff4d0ec-2f0c-4ef8-ad95-fd04e5014060; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-12T17:43:59Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=Juniper Business Use Only;MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; user-agent: Microsoft-MacOutlook/16.41.20091302 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [66.129.242.15] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b6b4c511-a997-4411-020f-08d86ed694fa x-ms-traffictypediagnostic: BN7PR05MB4129: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: X6E2uAarVvE3i8GKlgwnFDoRvCY+ilI27IHlUNowHeWmxgv2Z/KGU4zetnSXQ4rf1iPJsY+acI+MuhcvdtzCx6IlHhHkgszzcOko5EjZhUwxbMZCQu/iR9AOe5Lz/184xUIFYIvXOk9X1/zDjLsABCvXcOZEHy5FOl5sDC9w5P0uCkFjlRvY0kSm63n4h+B/Yh+v+9tfWeVoZxS+W1mNmfLpiIPTp8lZJ/SQWBHysoYf5YdjPYJ+60xJeHrmwvo52SfZ1KWxHqg+5DWlrZlwomxSWPKM0oh2PIUX33+nqOrfgvRq24TOrNzpF2kMkcp0b6nquIgphRUnPkFuW7UZMGxwW8w4spQdn6F+3bEfoLw= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BN7PR05MB4131.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(39860400002)(376002)(346002)(136003)(366004)(8936002)(66446008)(66556008)(66946007)(64756008)(66476007)(86362001)(33656002)(91956017)(76116006)(8676002)(4744005)(6512007)(71200400001)(110136005)(36756003)(966005)(450100002)(478600001)(186003)(53546011)(6506007)(166002)(2906002)(9326002)(5660300002)(4326008)(6486002)(26005)(2616005)(316002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_2B2E5DC0EB4441BC87665A1BD773E693junipernet_" MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BN7PR05MB4131.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: b6b4c511-a997-4411-020f-08d86ed694fa X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Oct 2020 17:45:17.2905 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: BGXbHEPB8W8ZjM/6N04jFdcNwzDrT7uDV4+VC+n/GRt0eUaNraw+vHTcOQaSZ061aW3VKAKAatCl88dv05MHIWRgijPXS7huxhd9jYGQ+Dk= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB4129 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-10-12_14:2020-10-12, 2020-10-12 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 malwarescore=0 clxscore=1011 mlxscore=0 mlxlogscore=999 lowpriorityscore=0 adultscore=0 bulkscore=0 priorityscore=1501 phishscore=0 impostorscore=0 spamscore=0 suspectscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010120135 Archived-At: Subject: Re: [Rats] WGLC for draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 17:45:23 -0000 --_000_2B2E5DC0EB4441BC87665A1BD773E693junipernet_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNCg0KDQpJIGhhdmUgbm8gYWRkaXRpb25hbCBjb21tZW50cyB0byBzdWJtaXQgdG8g dGhlIHdvcmtpbmcgZ3JvdXAuIEkgd291bGQgbGlrZSB0byBhbHNvIHZvdGUgaW4gZmF2b3Igb2Yg bW92aW5nIHRvIHRoZSBuZXh0IHN0YWdlIG9mIHB1Ymxpc2hpbmcgdGhpcyBkcmFmdC4NCg0KDQoN ClRoYW5rcywNCg0KV2lsbGlhbSBCZWxsaW5ncmF0aA0KDQpKdW5pcGVyIE5ldHdvcmtzDQoNCg0K RnJvbTogIk5hbmN5IENhbS1XaW5nZXQgKG5jYW13aW5nKSIgPG5jYW13aW5nQGNpc2NvLmNvbT4N CkRhdGU6IFN1bmRheSwgU2VwdGVtYmVyIDIwLCAyMDIwIGF0IDc6MDYgUE0NClRvOiAicmF0c0Bp ZXRmLm9yZyIgPHJhdHNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBbUmF0c10gV0dMQyBmb3IgZHJhZnQt aWV0Zi1yYXRzLXRwbS1iYXNlZC1uZXR3b3JrLWRldmljZS1hdHRlc3QNCg0KUkFUcyBwYXJ0aWNp cGFudHMsDQoNClRoaXMgaXMgYSBXR0xDIGZvciBkcmFmdC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5l dHdvcmstZGV2aWNlLWF0dGVzdCwgcGxlYXNlIHByb3ZpZGUgY29tbWVudHMgYW5kIGZlZWRiYWNr IGJ5IE9jdG9iZXIgMTIsIDIwMjAuDQpUaGUgZHJhZnQgY2FuIGJlIGZvdW5kIGluOg0KaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLXRwbS1iYXNlZC1uZXR3 b3JrLWRldmljZS1hdHRlc3QvPGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQtbmV0d29yay1k ZXZpY2UtYXR0ZXN0L19fOyEhTkV0NnlNYU8tZ2shUnJ1VVNtZGtvaFEwelMzekhsTHRKQk9HbDMy ZF9fbEY5Njk1c3lOUm1RTFpzSmFUMlJzcXRnSlctR1ExLXZSYzlXTHYkPg0KDQpCZXN0LCBOYW5j eSAob24gYmVoYWxmIG9mIHRoZSBSQVRzIGNoYWlycykNCg0KDQoNCg0KSnVuaXBlciBCdXNpbmVz cyBVc2UgT25seQ0K --_000_2B2E5DC0EB4441BC87665A1BD773E693junipernet_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47DQoJcGFub3NlLTE6 MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBT dHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05v cm1hbA0KCXttYXJnaW46MGluOw0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFpblRleHQN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IENo YXIiOw0KCW1hcmdpbjowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xv cjp3aW5kb3d0ZXh0O30NCnNwYW4uUGxhaW5UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiUGxh aW4gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IlBsYWluIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4w cHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZCI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+SGVsbG8s PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPkkgaGF2ZSBubyBhZGRpdGlvbmFsIGNvbW1l bnRzIHRvIHN1Ym1pdCB0byB0aGUgd29ya2luZyBncm91cC4gSSB3b3VsZCBsaWtlIHRvIGFsc28g dm90ZSBpbiBmYXZvciBvZiBtb3ZpbmcgdG8gdGhlIG5leHQgc3RhZ2Ugb2YgcHVibGlzaGluZyB0 aGlzIGRyYWZ0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5UaGFua3MsPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5XaWxsaWFtIEJlbGxpbmdyYXRoPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij5KdW5pcGVyIE5ldHdvcmtzPG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48Yj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPkZyb206IDwv c3Bhbj4NCjwvYj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPiZxdW90O05hbmN5IENhbS1XaW5n ZXQgKG5jYW13aW5nKSZxdW90OyAmbHQ7bmNhbXdpbmdAY2lzY28uY29tJmd0Ozxicj4NCjxiPkRh dGU6IDwvYj5TdW5kYXksIFNlcHRlbWJlciAyMCwgMjAyMCBhdCA3OjA2IFBNPGJyPg0KPGI+VG86 IDwvYj4mcXVvdDtyYXRzQGlldGYub3JnJnF1b3Q7ICZsdDtyYXRzQGlldGYub3JnJmd0Ozxicj4N CjxiPlN1YmplY3Q6IDwvYj5bUmF0c10gV0dMQyBmb3IgZHJhZnQtaWV0Zi1yYXRzLXRwbS1iYXNl ZC1uZXR3b3JrLWRldmljZS1hdHRlc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5SQVRzIHBhcnRpY2lwYW50cyw8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhpcyBpcyBhIFdHTEMgZm9yIGRyYWZ0LWlldGYtcmF0 cy10cG0tYmFzZWQtbmV0d29yay1kZXZpY2UtYXR0ZXN0LCBwbGVhc2UgcHJvdmlkZSBjb21tZW50 cyBhbmQgZmVlZGJhY2sgYnkgT2N0b2JlciAxMiwgMjAyMC48L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoZSBkcmFmdCBjYW4gYmUgZm91bmQgaW46PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQtbmV0d29yay1kZXZpY2Ut YXR0ZXN0L19fOyEhTkV0NnlNYU8tZ2shUnJ1VVNtZGtvaFEwelMzekhsTHRKQk9HbDMyZF9fbEY5 Njk1c3lOUm1RTFpzSmFUMlJzcXRnSlctR1ExLXZSYzlXTHYkIj5odHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5ldHdvcmstZGV2aWNlLWF0 dGVzdC88L2E+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QmVzdCwgTmFuY3kgKG9uIGJlaGFsZiBvZiB0aGUg UkFUcyBjaGFpcnMpPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOzwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YnI+DQo8cCBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJy aTtmb250LXNpemU6N3B0O2NvbG9yOiMwMDAwMDA7bWFyZ2luOjE1cHQ7IiBhbGlnbj0iQ2VudGVy Ij4NCkp1bmlwZXIgQnVzaW5lc3MgVXNlIE9ubHk8YnI+DQo8L3A+DQo8L2JvZHk+DQo8L2h0bWw+ DQo= --_000_2B2E5DC0EB4441BC87665A1BD773E693junipernet_-- From nobody Mon Oct 12 14:41:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95BEB3A0A25 for ; Mon, 12 Oct 2020 14:41:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RQ3-EvYjAC-6 for ; Mon, 12 Oct 2020 14:41:36 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2D26C3A09FD for ; Mon, 12 Oct 2020 14:41:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 0DDA438994; Mon, 12 Oct 2020 17:47:18 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id mRTN6rRjpmtI; Mon, 12 Oct 2020 17:47:17 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 5284638992; Mon, 12 Oct 2020 17:47:17 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 375A3490; Mon, 12 Oct 2020 17:41:34 -0400 (EDT) From: Michael Richardson To: "Mark D. Baushke" , rats@ietf.org In-Reply-To: <67932.1602513807@eng-mail01.juniper.net> References: <67932.1602513807@eng-mail01.juniper.net> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Mail regarding draft-ietf-rats-tpm-based-network-device-attest X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Oct 2020 21:41:38 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mark D. Baushke wrote: > * Section 1.4 has [IEEE-802-1AR] and Section 3 has [IEEE-802.1ae]. I > have been under the possibly mistaken impression that 802.1AR and > 802-1AR should be consistent. and is it 'AR' or 'ar' and is it 'ae' > or 'AE' ? I respectfully suggest use of IEEE-802-1AE and IEEE-802.1AR > be used consistently throughout the document. 802.1AR is _IEEE Standard for Local and Metropolitan Area Networks: Secure Device Identity. ("IDevID") 802.1ae is MACsec, which an L2 equivalent for IPsec. It is appropriately referenced at the end of section 3.3, I think. Both references are appropriate, I think. The IEEE names standards in a case sensitive way, as "ae" and "AE" are different. I'm not fond of the title. It feels like an article is missing, or just too many qualifiers in a row. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl+EzY0ACgkQgItw+93Q 3WWgRwf+INet5USnIlLPlc/YoRJ4A3zMLR4ol970v4mP12QrtniBG+E95uu+jCu4 v3+HPxX1BME92cGDteS8fTskbpKYzyBP1Jh+sbRGwuoqUzHXPCCFiVvKeOhaG2hv k3a4/ReoxICe5bl41krhtEOhDHBDCOspK4vH6dilTtcrqE+D0CpM5y+F2lyO2gPZ 8AT7IbmSzoFPwQuOkPxB0jdTrqeTTHnF7qh2PA2EPpoTWBXBJjWpW/4cmKtu/KZv iNNgKnYy2mqkfYsj8thqPSEkml0eDHuCiNPiVL26c0qL5z1qWEHr9NtVCRxqvhxv z+IkrdwzFzhjqb7YoxHYB+l+KZ3m6g== =c9qH -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Oct 15 06:35:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38DB63A09E4 for ; Thu, 15 Oct 2020 06:35:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rEF44jlTncS7 for ; Thu, 15 Oct 2020 06:35:16 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 096FA3A09DE for ; Thu, 15 Oct 2020 06:35:16 -0700 (PDT) Received: from lhreml737-chm.china.huawei.com (unknown [172.18.7.106]) by Forcepoint Email with ESMTP id 0EB9DA2E67630FC7C7F9 for ; Thu, 15 Oct 2020 14:35:14 +0100 (IST) Received: from lhreml737-chm.china.huawei.com (10.201.108.187) by lhreml737-chm.china.huawei.com (10.201.108.187) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Thu, 15 Oct 2020 14:35:13 +0100 Received: from DGGEML422-HUB.china.huawei.com (10.1.199.39) by lhreml737-chm.china.huawei.com (10.201.108.187) with Microsoft SMTP Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.1.1913.5 via Frontend Transport; Thu, 15 Oct 2020 14:35:13 +0100 Received: from DGGEML509-MBX.china.huawei.com ([169.254.1.154]) by dggeml422-hub.china.huawei.com ([10.1.199.39]) with mapi id 14.03.0487.000; Thu, 15 Oct 2020 21:35:07 +0800 From: "caobin (A)" To: "Eric Voit (evoit)" CC: "rats@ietf.org" Thread-Topic: Questions about latest PRs Thread-Index: AdaOaksiGF1CuGPiRouIEBaLBIr2nABzXWSgAbG2wXA= Date: Thu, 15 Oct 2020 13:35:08 +0000 Message-ID: References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.85.169] Content-Type: multipart/alternative; boundary="_000_F0C5D68C1C185E479EEED366166A9E1909E4960Bdggeml509mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] Questions about latest PRs X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Oct 2020 13:35:19 -0000 --_000_F0C5D68C1C185E479EEED366166A9E1909E4960Bdggeml509mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello Eric, Sorry for the late response, please see inline. 2. I see in the output there are node-id and node-physical-index, which mak= es me wonder whether containing TPM's name and location info in the input a= nd output can make the implementation simpler. I want to discuss my thought= s more. I think a better method is containing 'tpm-name' and 'node-id' in the input= part and containing 'tpm-name', 'node-id', and 'certificate-name' in the o= utput part. As certificate-name always uniquely identifies tpm-name and node-id,= including these two items introduces both redundancy in the message, and e= rror conditions which would need to be checked. [Bin] Without the requirement of making the certificate-name unique to iden= tify tpm-name and node-id, there will be no such redundancy and less error = conditions. The reasons are below: a) By making the 'tpm-name' and 'node-id' optional or visible only when two= and more TPMs exist, this method doesn't bring complexity to the devices w= hich only have one TPM. IMHO there are the drawbacks of redundancy in the message, extra fi= elds and error checks. So you get a more complex API with little benefit. [Bin] By requiring a unique certificate-name, I don't feel that the error c= hecks will be much less. And without this uniqueness requirement, there is = no redundancy in the message. b) For the devices which have two and more TPMs, by making the TPM's locati= on info explicit in the challenge input, the Attester's control plane can d= irectly find the TPM being challenged and it doesn't need to store and main= tain the relationship among tpm-name, compute-node, and certificate-name. Having the Verifier know the relationship between the compute node a= nd the certificates, but the Attester doesn't need to know/enforce relation= ship within its own box seems backwards. [Bin] The Attester definitely can know the relationship, but it can have le= ss processes by knowing the compute-node directly from the message. If it c= an be simpler why not? c) This method has less exception scenarios to consider. In this method, if= the Verifier doesn't recognize the certificate-name in the output, it just= needs to retrieve this certificate again. In current method, if the TPM's = certificate changed, the exception scenarios include the Attester's control= plane may can't recognize the certificate-name, the Verifier may can't rec= ognize the certificate-name, etc. Implementers may not be able to think thr= ough all of these exception scenarios. YANG was designed around maintaining the consistency of the managed = device. I believe it easier/simpler for an Attester to maintain its own in= ternal consistency rather for (many?) external verifiers to do this. [Bin] The Attester can maintain the consistency. But if it can do less proc= esses by the way of having the tpm-name and node-id in the input, why don't= do that and choose a way which has more processes. 3. For the log-retrieve RPC, it uses tpm-name in its input and output and i= s different from the TPM1.2 and TPM2.0 challenge-response-attestation RPCs.= This also makes me feel a little weird that the TPM being challenged in th= e attestation RPCs is not identified by TPM's name. It does initially seem strange, but there is a some logic here. * The logs entries don't need to be tied to a TPM certificate. (PCRs= are not the same as they are signed.) * Looking at the Charra datastore nodes, if you have the certificate-na= me, you know the TPM-name. * Plus the logs can continuously be stored even during a certificate ch= ange. And on why the tpm-name can appear in input and output for log-retrieval: * If no tpm-name appears in the RPC input, all TPMs are assumed * For the output, you need to understand which set of logs belongs to e= ach TPM. [Bin] The tpm-name can be used in the log-retrieve RPC to identify the inpu= t and output, so the attestation RPCs can also include the tpm-name (and no= de-id). Thanks! Bin Cao From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Tuesday, September 22, 2020 4:42 AM To: caobin (A) Cc: rats@ietf.org Subject: RE: Questions about latest PRs Hello Bin Cao, Thanks for the comments, some thoughts in-line... From: caobin (A), September 19, 2020 5:53 AM Hi authors, I've noticed the changes of CHARRA YANG module on the GitHub. Here I have s= ome comments: 1. The 'TPM_PCR_COMPOSITE' in the output of RPC tpm12-challenge-response-at= testation and the 'TPMS_QUOTE_INFO' in the output of RPC tpm20-challenge-re= sponse-attestation are capitalized while other elements are not. Is there a= special reason? The capitalization of TPMS_QUOTE_INFO emphasizes that this objects a= re identical to objects from the corresponding TCG specs. I.e.: https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2= -Structures-01.38.pdf Section 10.12.1 "TPMS_QUOTE_INFO". The capitalization of TPM_PCR_COMPOSITE is not so straight-forward however.= It is true that is includes the objects from TPM_PCR_COMPOSITE. See Sect= ion 8.2 of: https://trustedcomputinggroup.org/wp-content/uploads/mainP2Structrev103.pdf However there is not a binary equivalency between the two. For that reaso= n, the object should not be capitalized. Stepping back, I think that the TPM1.2 response (and TPM2.0 response) could= be simplified even more. Initially the PCR indexes and values were brok= en out for a variety of reasons on the mailing list such as on-change (RFC-= 8641) YANG subscription (even those these nodes are associated with RPC...)= . However draft-birkholz-rats-network-device-subscription now suggests = that RFC-8639 Event subscription is a better match than RFC-8641 YANG subsc= ription. As a result, I believe that parsing YANG objects from TPM_PCR_COMPOSITE. L= et me start a thread on that. 2. I see in the output there are node-id and node-physical-index, which mak= es me wonder whether containing TPM's name and location info in the input a= nd output can make the implementation simpler. I want to discuss my thought= s more. I think a better method is containing 'tpm-name' and 'node-id' in the input= part and containing 'tpm-name', 'node-id', and 'certificate-name' in the o= utput part. As certificate-name always uniquely identifies tpm-name and node-id,= including these two items introduces both redundancy in the message, and e= rror conditions which would need to be checked. The reasons are below: a) By making the 'tpm-name' and 'node-id' optional or visible only when two= and more TPMs exist, this method doesn't bring complexity to the devices w= hich only have one TPM. IMHO there are the drawbacks of redundancy in the message, extra fi= elds and error checks. So you get a more complex API with little benefit. b) For the devices which have two and more TPMs, by making the TPM's locati= on info explicit in the challenge input, the Attester's control plane can d= irectly find the TPM being challenged and it doesn't need to store and main= tain the relationship among tpm-name, compute-node, and certificate-name. Having the Verifier know the relationship between the compute node a= nd the certificates, but the Attester doesn't need to know/enforce relation= ship within its own box seems backwards. c) This method has less exception scenarios to consider. In this method, if= the Verifier doesn't recognize the certificate-name in the output, it just= needs to retrieve this certificate again. In current method, if the TPM's = certificate changed, the exception scenarios include the Attester's control= plane may can't recognize the certificate-name, the Verifier may can't rec= ognize the certificate-name, etc. Implementers may not be able to think thr= ough all of these exception scenarios. YANG was designed around maintaining the consistency of the managed = device. I believe it easier/simpler for an Attester to maintain its own in= ternal consistency rather for (many?) external verifiers to do this. 3. For the log-retrieve RPC, it uses tpm-name in its input and output and i= s different from the TPM1.2 and TPM2.0 challenge-response-attestation RPCs.= This also makes me feel a little weird that the TPM being challenged in th= e attestation RPCs is not identified by TPM's name. It does initially seem strange, but there is a some logic here. * The logs entries don't need to be tied to a TPM certificate. (PCRs= are not the same as they are signed.) * Looking at the Charra datastore nodes, if you have the certificate-na= me, you know the TPM-name. * Plus the logs can continuously be stored even during a certificate ch= ange. And on why the tpm-name can appear in input and output for log-retrieval: * If no tpm-name appears in the RPC input, all TPMs are assumed * For the output, you need to understand which set of logs belongs to e= ach TPM. Eric Bin Cao caobin8@huawei.com +8613347737317 --_000_F0C5D68C1C185E479EEED366166A9E1909E4960Bdggeml509mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello Eric,

 

Sorry for the late response,= please see inline.

 

2. I see in the output there= are node-id and node-physical-index, which makes me wonder whether contain= ing TPM’s name and location info in the input and output can make the implementation simpler. I want t= o discuss my thoughts more.

I think a better method is c= ontaining ‘<= /span>tpm-name’ and &= #8216;node-id’ in the input part and containing &= #8216;tpm-name’, &= #8216;node-id’, and &= #8216;certificate-name’ in the output part.

<= o:p> 

<eric> As certificate-name always uniquely identifies tp= m-name and node-id, including these two items introduces both redundancy in= the message, and error conditions which would need to be checked.   

[Bin] Without the requirement of making the certificate-name = unique to identify tpm-name and node-id, there will be no such redundancy a= nd less error conditions.

 

The reasons are below:<= /o:p>

a) By making the ‘tpm-name’ and &= #8216;node-id’ optional or visible only when two and more TPMs exist, this method doesn<= /span>&#= 8217;t bring complexity to the devices which only have one TPM.=

 

<eric>  IMHO there are the drawbacks of redundancy = in the message, extra fields and error checks.  So you get a more comp= lex API with little benefit.

[Bin] By requiring a unique certificate-name, I don't feel th= at the error checks will be much less. And without this uniqueness requirem= ent, there is no redundancy in the message.

 

b) For the devices which hav= e two and more TPMs, by making the TPM's location info explicit in the chal= lenge input, the Attester's control plane can directly find the TPM being c= hallenged and it doesn't need to store and maintain the relationship among tpm-name, compute-node, and certificat= e-name.

<= o:p> 

<eric> Having the Verifier know the relationship between= the compute node and the certificates, but the Attester doesn't need to kn= ow/enforce relationship within its own box seems backwards.  

[Bin] The Attester definitely can know the relationship, but = it can have less processes by knowing the compute-node directly from the me= ssage. If it can be simpler why not?

 

c) This method has less exce= ption scenarios to consider. In this method, if the Verifier doesn't recogn= ize the certificate-name in the output, it just needs to retrieve this cert= ificate again. In current method, if the TPM's certificate changed, the exception scenarios include the Atteste= r's control plane may can't recognize the certificate-name, the Verifier ma= y can't recognize the certificate-name, etc. Implementers may not be able t= o think through all of these exception scenarios.

<= o:p> 

<eric> YANG was designed around maintaining the consiste= ncy of the managed device.  I believe it easier/simpler for an Atteste= r to maintain its own internal consistency rather for (many?) external verifiers to do this.

[Bin] The Attester can maintain the consistency. But if it ca= n do less processes by the way of having the tpm-name and node-id in the in= put, why don’t do that and choose a way which has more processes.

 

3. For the log-retrieve RPC,= it uses tpm-name in its input and output and is different from the TPM1.2 = and TPM2.0 challenge-response-attestation RPCs. This also makes me feel a l= ittle weird that the TPM being challenged in the attestation RPCs is not identified by TPM's name.=

<= o:p> 

<eric> It does initially seem strange, but there is a so= me logic here. 

  • The logs entries don't need= to be tied to a TPM certificate.    (PCRs are not the same = as they are signed.)
  • Looking at the Charra datas= tore nodes, if you have the certificate-name, you know the TPM-name. 
  • Plus the logs can continuou= sly be stored even during a certificate change.

 

And on why the tpm-name can appear in input and output for log= -retrieval:

  • If no tpm-name appears in t= he RPC input, all TPMs are assumed
  • For the output, you need to= understand which set of logs belongs to each TPM.

    • [Bin] The tpm-name can be used in the log-retrieve RPC to ide= ntify the input and output, so the attestation RPCs can also include the tp= m-name (and node-id).

     

    Thanks!

    Bin Cao=

    &n= bsp;

    From: Eric Voit (evoit) [mailto:evoit@cisco.com]
    Sent: Tuesday, September 22, 2020 4:42 AM
    To: caobin (A) <caobin8@huawei.com>
    Cc: rats@ietf.org
    Subject: RE: Questions about latest PRs

     

    Hello Bin Cao,

     

    Thanks for the comments, some thoughts in-line...

     

    From: caobin (A), September 19= , 2020 5:53 AM

    Hi authors,

     

    I’ve noticed the changes of CHARRA YANG module on the GitHub. Here I h= ave some comments:

     

    1. The ‘TPM_PCR_COMPOSITE’ in the out= put of RPC tpm12-challenge-response-attestation and the ‘TPMS_QUOTE_INFO’ in the output = of RPC tpm20-challenge-response-attestation are capitalized while other eleme= nts are not. Is there a special reason?

     

    <eric> The capitalization of TPMS_QUOTE_INFO = emphasizes th= at this objects are identical to objects from the corresponding TCG specs.&= nbsp; I.e.:

    https://www.trustedcomputinggroup.or= g/wp-content/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf

    Section 10.12.1  "TPMS_QUOTE_= INFO&q= uot;.

     

    The capitalization of TPM_PCR_COMPOSITE is no= t so straight-forward however.   It is true that is includes the object= s from TPM_PCR_COMPOSITE. See Section 8.2 of:

    https://trustedcomputinggroup.org/wp-content/uploads/main= P2Structrev103.pdf

    However there is not a binary equivalency between the two.&nbs= p;  For that reason, the object should not be capitalized.<= /span>

     

    Stepping back, I think that the TPM1.2 response (and TPM2.0 re= sponse) could be simplified even more.    Initially the PCR = indexes and values were broken out for a variety of reasons on the mailing list such as on-change (RFC-8641) YANG subscription (even t= hose these nodes are associated with RPC...).     Howev= er draft-birkholz-rats-network-device-subscription now suggests that RFC-86= 39 Event subscription is a better match than RFC-8641 YANG subscription.

     

    As a result, I believe that parsing YANG objects from TPM_PCR_= COMPOSITE.  Let me start a thread on that.

    <= o:p> 

     

    2. I see in the output there= are node-id and node-physical-index, which makes me wonder whether contain= ing TPM’s name and location info in the input and output can make the implementation simpler. I want t= o discuss my thoughts more.

    I think a better method is c= ontaining ‘<= /span>tpm-name’ and &= #8216;node-id’ in the input part and containing &= #8216;tpm-name’, &= #8216;node-id’, and &= #8216;certificate-name’ in the output part.

    <= o:p> 

    <eric> As certificate-name always uniquely identifies tp= m-name and node-id, including these two items introduces both redundancy in= the message, and error conditions which would need to be checked.   

    <= o:p> 

    The reasons are below:<= /o:p>

    a) By making the ‘tpm-name’ and &= #8216;node-id’ optional or visible only when two and more TPMs exist, this method doesn<= /span>&#= 8217;t bring complexity to the devices which only have one TPM.=

     

    <eric>  IMHO there are the drawbacks of redundancy = in the message, extra fields and error checks.  So you get a more comp= lex API with little benefit.

    <= o:p> 

    b) For the devices which hav= e two and more TPMs, by making the TPM's location info explicit in the chal= lenge input, the Attester's control plane can directly find the TPM being c= hallenged and it doesn't need to store and maintain the relationship among tpm-name, compute-node, and certificat= e-name.

    <= o:p> 

    <eric> Having the Verifier know the relationship between= the compute node and the certificates, but the Attester doesn't need to kn= ow/enforce relationship within its own box seems backwards.  

    <= o:p> 

    c) This method has less exce= ption scenarios to consider. In this method, if the Verifier doesn't recogn= ize the certificate-name in the output, it just needs to retrieve this cert= ificate again. In current method, if the TPM's certificate changed, the exception scenarios include the Atteste= r's control plane may can't recognize the certificate-name, the Verifier ma= y can't recognize the certificate-name, etc. Implementers may not be able t= o think through all of these exception scenarios.

    <= o:p> 

    <eric> YANG was designed around maintaining the consiste= ncy of the managed device.  I believe it easier/simpler for an Atteste= r to maintain its own internal consistency rather for (many?) external verifiers to do this.

     

    3. For the log-retrieve RPC,= it uses tpm-name in its input and output and is different from the TPM1.2 = and TPM2.0 challenge-response-attestation RPCs. This also makes me feel a l= ittle weird that the TPM being challenged in the attestation RPCs is not identified by TPM's name.=

    <= o:p> 

    <eric> It does initially seem strange, but there is a so= me logic here. 

    • The logs entries don't need= to be tied to a TPM certificate.    (PCRs are not the same = as they are signed.)
    • Looking at the Charra datas= tore nodes, if you have the certificate-name, you know the TPM-name. 
    • Plus the logs can continuou= sly be stored even during a certificate change.

     

    And on why the tpm-name can appear in input and output for log= -retrieval:

    • If no tpm-name appears in t= he RPC input, all TPMs are assumed
    • For the output, you need to= understand which set of logs belongs to each TPM.

      •  

      Eric

       

      Bin Cao<= /span>

      caobin8@huawei.co= m

      +8613347737317

       

--_000_F0C5D68C1C185E479EEED366166A9E1909E4960Bdggeml509mbxchi_-- From nobody Fri Oct 16 10:28:09 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C27073A0930; Fri, 16 Oct 2020 10:28:07 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <160286928773.21695.1325712919373470942@ietfa.amsl.com> Date: Fri, 16 Oct 2020 10:28:07 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-architecture-07.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 17:28:08 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : Remote Attestation Procedures Architecture Authors : Henk Birkholz Dave Thaler Michael Richardson Ned Smith Wei Pan Filename : draft-ietf-rats-architecture-07.txt Pages : 43 Date : 2020-10-16 Abstract: In network protocol exchanges, it is often the case that one entity (a Relying Party) requires evidence about a remote peer to assess the peer's trustworthiness, and a way to appraise such evidence. The evidence is typically a set of claims about its software and hardware platform. This document describes an architecture for such remote attestation procedures (RATS). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-architecture/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-rats-architecture-07.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-architecture-07 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 16 11:49:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54DDF3A07AE for ; Fri, 16 Oct 2020 11:49:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.598 X-Spam-Level: X-Spam-Status: No, score=-9.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=V5tDSwKm; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=s7LMrHvP Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FTYdYJCN21Ea for ; Fri, 16 Oct 2020 11:49:32 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AABF83A0799 for ; Fri, 16 Oct 2020 11:49:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=71415; q=dns/txt; s=iport; t=1602874172; x=1604083772; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=EWsp65li2xG3F0ECvqIf2ArcYVqEu5+QYr+XKdVdahA=; b=V5tDSwKmjqJPkHsrX/n+Lc6ZfYAUqS7EKDPRp5XYHG8BW7cncXqCnw6G aCR9Vt8eD/lzVRa9+8/C1fAklrm/UhFho4Pmw/4dL25epRe3KVjajUQed ymKc5fKv15jGLoZyX/mbWwfh3GMHk8pfWKWBLZjtabZyLQ1hNOlPMOhPZ M=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3A+dmR3RUSDoadkAPbOf9e4YXGRijV8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSBNyFufJZgvXbsubrXmlTqZqCsXVXdptKWl?= =?us-ascii?q?dFjMgNhAUvDYaDDlGzN//laSE2XaEgHF9o9n22Kw5ZTcD5YVCBomC78jMTXB?= =?us-ascii?q?74MFk9KuH8AIWHicOx2qi78IHSZAMdgj27bPtyIRy6oB+XuNMRhN5pK706zV?= =?us-ascii?q?3CpX4bdg=3D=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DICgAL6olf/5ldJa1WCh4BAQsSDEC?= =?us-ascii?q?Cci8pKAdwLC0vLAqHfAONS4dlji2CaIJTA1UEBwEBAQoDAQElCAIEAQGESgK?= =?us-ascii?q?CCwIlOBMCAwEBCwEBBQEBAQIBBgRthWEMhXIBAQEBAQISCBMTAQEsBAcBDwI?= =?us-ascii?q?BCBEEAQEOEwEGBwIwFAkIAQEEDgUIBg0HgjlMOIFGTQMfDwEOo0MCgTmIaHS?= =?us-ascii?q?BNIMEAQEFgTRRA4MaGIIJBwMGgTiBU4EfgmBMhxgbgUE/gRFDgk0+gXljA4E?= =?us-ascii?q?oCS8FBwkWCQSDEIIskGOKJIEZikWRGQqCaoRNgl+BWJIOgxaKCIVHjmmeIpE?= =?us-ascii?q?LhC4CBAIEBQIOAQEFgWsjgVdwFTuCaVAXAg2OH4NxhRSFQnQCAQEQJAIGCgE?= =?us-ascii?q?BAwl8jDsBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.77,383,1596499200"; d="p7s'?scan'208,217";a="564604139" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 16 Oct 2020 18:49:31 +0000 Received: from XCH-ALN-004.cisco.com (xch-aln-004.cisco.com [173.36.7.14]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id 09GInVFI025791 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 16 Oct 2020 18:49:31 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-004.cisco.com (173.36.7.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 16 Oct 2020 13:49:31 -0500 Received: from xhs-rtp-003.cisco.com (64.101.210.230) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Fri, 16 Oct 2020 13:49:30 -0500 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-003.cisco.com (64.101.210.230) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Fri, 16 Oct 2020 14:49:30 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=le9fLZaHu44xXZNjN3nBcNj8rOBpDBKPwwMOvxh0A9voF1dcuk0CC6brGWrH+oSE9VQRGK8AohhwzXTEfKkcjns46H+TBV3D5J7g6Nf2SbHuZUCu8Mdl7g0d1oHlPw0FFLZtS7XqBfULLYvvsd6btuNp5pAgQDTYxFv8mXAVVkDJKjBGpeFDHevxhYbwtvo/UOPrD+Pgr6oeY8TImWqKKiwpypXu40hZ1aq9d+LnEW12aio3H8eHTSyGO8iLkttXjFvljXYnyc90FPMXsZReYyx8DY2f37ld1t/3nYS6uGCb1PbJaQsCRezvhjtTpt0dNDMd/h6HWQdrqagdLbaW0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OWjvRdfaGsWcvJrH1g4GfPeHvRg/ehYDJ61dtnk1Njs=; b=QYvJPJFwKxwvWnd/T4L8KR/Oqp+6Cdr1qDAeEZfoCD5rwyycFqkBNwJTOJW8QVOF/OuUAui4mtIcclPn4Yhhv2HmxkypSfwGhjUdwgFNh9ojUZKi1rDb+6DORZO76qTXWDlR8DeLIqdv8EneZusSl159GEbMVu1TiUn/n9Og57luEVUpheb991D+aJZfTREuj/VYviXokEC5cjsuMUefMWmUZSNVPmutqxtBrX1/419jNxpFHkt9cJFrRB3S1+FBmK5ZtMeC3ITBY6Fui6JCuEqZ24rsEhy0wR5D5ELEzmAWBwNXqerDhe8FCI5GFEpfTVSYvMYtveVDIwObnCJsGQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OWjvRdfaGsWcvJrH1g4GfPeHvRg/ehYDJ61dtnk1Njs=; b=s7LMrHvPAFZauiX3Wit2FiRDDyW4hUT0/8cQEHkubCXtZw7JLSB7xu9fvD7T/nguHoLhLPcrNy8cW77F7HTQoTiFKaMjS5ZhvaTRBXEWxB4hWPJbLQSrDHNoUQKcD5hAX1aLh+es+xxJjH+PcYmAdiMg+3H6RRe+ZWRMKsmUdUE= Received: from SN6PR11MB3135.namprd11.prod.outlook.com (2603:10b6:805:d5::20) by SN6PR11MB2800.namprd11.prod.outlook.com (2603:10b6:805:5b::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3455.21; Fri, 16 Oct 2020 18:49:28 +0000 Received: from SN6PR11MB3135.namprd11.prod.outlook.com ([fe80::b819:72bd:80b2:d2e0]) by SN6PR11MB3135.namprd11.prod.outlook.com ([fe80::b819:72bd:80b2:d2e0%4]) with mapi id 15.20.3477.021; Fri, 16 Oct 2020 18:49:28 +0000 From: "Eric Voit (evoit)" To: "caobin (A)" CC: "rats@ietf.org" Thread-Topic: Questions about latest PRs Thread-Index: AdaOaksiGF1CuGPiRouIEBaLBIr2nABzXWSgAbG2wXADAVVYYA== Date: Fri, 16 Oct 2020 18:49:28 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: huawei.com; dkim=none (message not signed) header.d=none;huawei.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [108.18.114.139] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 23903a1d-b72f-4e6c-73d8-08d8720435f0 x-ms-traffictypediagnostic: SN6PR11MB2800: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: HUFRUfeStvC9kmVOruB3uxRRoQO8VrZrCERZYZWZcVWDzb3nBZIxegOZA14bNPjWAvokaS8UiI3/vQ21ajVkGex6fXdXr3t7YFARNsK6LRuqk3D+pCuvKUp7id0cQEVIfwh9yJA6wOcZhH/fDU44Q16QEjoDcYEWprxjriZQUKGaaB1g1gjSkYLmaMoebJTZzLel9u/NbUOJKqVQTkJNC/AgvMZsnNB6oR1Qv/UHw67epLPV/Ok1pw/+bOvco1ulZMrepn5ThCEd6gIU9UhG9oRLb1LkXZO/64TeKPv8SGMCN1up+le/4yXg0QzVuZfwbvP3AR+taWEuic6m9JMtFqGQz64qnLm6q6gCzA+5aX0ZVtjOLAmW1/pNrLVR746QozRiUf1oN9BPyp1zYOIub0SOCGZM5HT0JzOKY1XJT+LhUnmKzFnlFgJ1rkYRknNee1C2hx/9ei96Jgveogh272oM4rZNqC7f+Pt81YiCiNY= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR11MB3135.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(396003)(346002)(39860400002)(366004)(376002)(136003)(316002)(478600001)(2906002)(6916009)(86362001)(99936003)(26005)(8936002)(33656002)(166002)(30864003)(9686003)(5660300002)(66476007)(8676002)(66556008)(66616009)(53546011)(52536014)(55016002)(966005)(66446008)(76116006)(83380400001)(66946007)(186003)(4326008)(7696005)(71200400001)(64756008)(6506007)(3480700007)(66574015)(43620500001)(15398625002)(579004)(559001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/signed; boundary="----=_NextPart_000_1C2A_01D6A3CB.86106BC0"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB3135.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 23903a1d-b72f-4e6c-73d8-08d8720435f0 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Oct 2020 18:49:28.1642 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KU/qo/CJRBiHRRmYSn22JNr6PVY6CiTFeIlqRm/MirvJnR/cIklvNmzmMFkziej4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB2800 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.14, xch-aln-004.cisco.com X-Outbound-Node: rcdn-core-2.cisco.com Archived-At: Subject: Re: [Rats] Questions about latest PRs X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 18:49:36 -0000 ------=_NextPart_000_1C2A_01D6A3CB.86106BC0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_1C2B_01D6A3CB.86106BC0" ------=_NextPart_001_1C2B_01D6A3CB.86106BC0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Bin Cao, I appreciate the thoughts. More at From: RATS On Behalf Of caobin (A) Sent: Thursday, October 15, 2020 9:35 AM To: Eric Voit (evoit) Cc: rats@ietf.org Subject: Re: [Rats] Questions about latest PRs Hello Eric, Sorry for the late response, please see inline. 2. I see in the output there are node-id and node-physical-index, which makes me wonder whether containing TPM's name and location info in the input and output can make the implementation simpler. I want to discuss my thoughts more. I think a better method is containing 'tpm-name' and 'node-id' in the input part and containing 'tpm-name', 'node-id', and 'certificate-name' in the output part. As certificate-name always uniquely identifies tpm-name and node-id, including these two items introduces both redundancy in the message, and error conditions which would need to be checked. [Bin] Without the requirement of making the certificate-name unique to identify tpm-name and node-id, there will be no such redundancy and less error conditions. Do you really want to allow a duplicate on a single platform? This could be read as we allow a common attestation key repeated on different line cards on a single platform. I don't think this is a good idea, a hacker could easily swap the quote output of one TPM on one line card as associate it with another line card. In previous threads, we have talked about the downsides of requiring a compound key to reference a specific TPM: * Most routers/switches don't have multiple line cards. So forcing the RPC to be more complex for the minority of devices should be avoided. * Forcing the to be exposed means that it naturally act as a compound key. Note 1: your internal implementation can certainly use a compound key, if you prefer. There is nothing in the model which precludes this as the underlying implementation. Note 2: It is possible to define a YANG model XPATH constraint to eliminate the error condition you reference by ensuring that no duplicate exists within the /rats-support-structures/tpms/tpm/certificates/certificate/certificate-name. If this is acceptable, I can propose such an XPATH for the model. The reasons are below: a) By making the 'tpm-name' and 'node-id' optional or visible only when two and more TPMs exist, this method doesn't bring complexity to the devices which only have one TPM. IMHO there are the drawbacks of redundancy in the message, extra fields and error checks. So you get a more complex API with little benefit. [Bin] By requiring a unique certificate-name, I don't feel that the error checks will be much less. And without this uniqueness requirement, there is no redundancy in the message. The RPC is more complex if the types of objects populated change based on whether multiple line cards exist. Also in the current solution, the only error-check needed would be ensuring that no duplicate exists on write. And this error check can be skipped when there is only one TPM (versus when there is a TPM per line card.) b) For the devices which have two and more TPMs, by making the TPM's location info explicit in the challenge input, the Attester's control plane can directly find the TPM being challenged and it doesn't need to store and maintain the relationship among tpm-name, compute-node, and certificate-name. Having the Verifier know the relationship between the compute node and the certificates, but the Attester doesn't need to know/enforce relationship within its own box seems backwards. [Bin] The Attester definitely can know the relationship, but it can have less processes by knowing the compute-node directly from the message. If it can be simpler why not? Yes the Attester must know these relationships. But the Verifier shouldn't necessarily trust the non-signed parts of Attester messages. E.g., It would be a security risk to depend on the Attesting Router to be the undisputed source of which TPMs are on which line card. c) This method has less exception scenarios to consider. In this method, if the Verifier doesn't recognize the certificate-name in the output, it just needs to retrieve this certificate again. In current method, if the TPM's certificate changed, the exception scenarios include the Attester's control plane may can't recognize the certificate-name, the Verifier may can't recognize the certificate-name, etc. Implementers may not be able to think through all of these exception scenarios. YANG was designed around maintaining the consistency of the managed device. I believe it easier/simpler for an Attester to maintain its own internal consistency rather for (many?) external verifiers to do this. [Bin] The Attester can maintain the consistency. But if it can do less processes by the way of having the tpm-name and node-id in the input, why don't do that and choose a way which has more processes. Hopefully the answer to this is address in the other responses above (i.e., single TPM devices and minimized RPC complexity.) 3. For the log-retrieve RPC, it uses tpm-name in its input and output and is different from the TPM1.2 and TPM2.0 challenge-response-attestation RPCs. This also makes me feel a little weird that the TPM being challenged in the attestation RPCs is not identified by TPM's name. It does initially seem strange, but there is a some logic here. * The logs entries don't need to be tied to a TPM certificate. (PCRs are not the same as they are signed.) * Looking at the Charra datastore nodes, if you have the certificate-name, you know the TPM-name. * Plus the logs can continuously be stored even during a certificate change. And on why the tpm-name can appear in input and output for log-retrieval: * If no tpm-name appears in the RPC input, all TPMs are assumed * For the output, you need to understand which set of logs belongs to each TPM. [Bin] The tpm-name can be used in the log-retrieve RPC to identify the input and output, so the attestation RPCs can also include the tpm-name (and node-id). The tpm-name is in the log-retrieval RPC. This is the only option to identify specific TPMs, so there is no redundancy. Right now there is only certificate-name for the attestation RPCs, there is no redundancy. If we allowed certificate-name or tpm-name or node-id, there are redundant choices which make the RPC far more expensive to implement. Additionally, are combinations of each of these objects allowed? And which combinations? BTW: I see no problem in having vendor specific augmentations allowing tpm-name or node-id in the attestation RPC. I just am trying to make the standard implementation as simple as possible while maintaining coverage for both single TPM and multiple TPM platforms. Thanks, Eric Thanks! Bin Cao From: Eric Voit (evoit) [mailto:evoit@cisco.com] Sent: Tuesday, September 22, 2020 4:42 AM To: caobin (A) > Cc: rats@ietf.org Subject: RE: Questions about latest PRs Hello Bin Cao, Thanks for the comments, some thoughts in-line... From: caobin (A), September 19, 2020 5:53 AM Hi authors, I've noticed the changes of CHARRA YANG module on the GitHub. Here I have some comments: 1. The 'TPM_PCR_COMPOSITE' in the output of RPC tpm12-challenge-response-attestation and the 'TPMS_QUOTE_INFO' in the output of RPC tpm20-challenge-response-attestation are capitalized while other elements are not. Is there a special reason? The capitalization of TPMS_QUOTE_INFO emphasizes that this objects are identical to objects from the corresponding TCG specs. I.e.: https://www.trustedcomputinggroup.org/wp-content/uploads/TPM-Rev-2.0-Part-2- Structures-01.38.pdf Section 10.12.1 "TPMS_QUOTE_INFO". The capitalization of TPM_PCR_COMPOSITE is not so straight-forward however. It is true that is includes the objects from TPM_PCR_COMPOSITE. See Section 8.2 of: https://trustedcomputinggroup.org/wp-content/uploads/mainP2Structrev103.pdf However there is not a binary equivalency between the two. For that reason, the object should not be capitalized. Stepping back, I think that the TPM1.2 response (and TPM2.0 response) could be simplified even more. Initially the PCR indexes and values were broken out for a variety of reasons on the mailing list such as on-change (RFC-8641) YANG subscription (even those these nodes are associated with RPC...). However draft-birkholz-rats-network-device-subscription now suggests that RFC-8639 Event subscription is a better match than RFC-8641 YANG subscription. As a result, I believe that parsing YANG objects from TPM_PCR_COMPOSITE. Let me start a thread on that. 2. I see in the output there are node-id and node-physical-index, which makes me wonder whether containing TPM's name and location info in the input and output can make the implementation simpler. I want to discuss my thoughts more. I think a better method is containing 'tpm-name' and 'node-id' in the input part and containing 'tpm-name', 'node-id', and 'certificate-name' in the output part. As certificate-name always uniquely identifies tpm-name and node-id, including these two items introduces both redundancy in the message, and error conditions which would need to be checked. The reasons are below: a) By making the 'tpm-name' and 'node-id' optional or visible only when two and more TPMs exist, this method doesn't bring complexity to the devices which only have one TPM. IMHO there are the drawbacks of redundancy in the message, extra fields and error checks. So you get a more complex API with little benefit. b) For the devices which have two and more TPMs, by making the TPM's location info explicit in the challenge input, the Attester's control plane can directly find the TPM being challenged and it doesn't need to store and maintain the relationship among tpm-name, compute-node, and certificate-name. Having the Verifier know the relationship between the compute node and the certificates, but the Attester doesn't need to know/enforce relationship within its own box seems backwards. c) This method has less exception scenarios to consider. In this method, if the Verifier doesn't recognize the certificate-name in the output, it just needs to retrieve this certificate again. In current method, if the TPM's certificate changed, the exception scenarios include the Attester's control plane may can't recognize the certificate-name, the Verifier may can't recognize the certificate-name, etc. Implementers may not be able to think through all of these exception scenarios. YANG was designed around maintaining the consistency of the managed device. I believe it easier/simpler for an Attester to maintain its own internal consistency rather for (many?) external verifiers to do this. 3. For the log-retrieve RPC, it uses tpm-name in its input and output and is different from the TPM1.2 and TPM2.0 challenge-response-attestation RPCs. This also makes me feel a little weird that the TPM being challenged in the attestation RPCs is not identified by TPM's name. It does initially seem strange, but there is a some logic here. * The logs entries don't need to be tied to a TPM certificate. (PCRs are not the same as they are signed.) * Looking at the Charra datastore nodes, if you have the certificate-name, you know the TPM-name. * Plus the logs can continuously be stored even during a certificate change. And on why the tpm-name can appear in input and output for log-retrieval: * If no tpm-name appears in the RPC input, all TPMs are assumed * For the output, you need to understand which set of logs belongs to each TPM. Eric Bin Cao caobin8@huawei.com +8613347737317 ------=_NextPart_001_1C2B_01D6A3CB.86106BC0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi = Bin Cao,

=  

I = appreciate the thoughts.  More at <Eric2>

=

 

From: RATS <rats-bounces@ietf.org> On = Behalf Of caobin (A)
Sent: Thursday, October 15, 2020 9:35 = AM
To: Eric Voit (evoit) <evoit@cisco.com>
Cc: = rats@ietf.org
Subject: Re: [Rats] Questions about latest = PRs

 

Hello = Eric,

 

Sorry = for the late response, please see inline.

 

2. I see = in the output there are node-id and node-physical-index, which makes me = wonder whether containing TPM’s name and location info in the = input and output can make the implementation simpler. I want to discuss = my thoughts more.

I think a better method is = containing ‘tpm-name’ and ‘node-id’ in the input part and containing = ‘tpm-name’, ‘node-id’, and ‘certificate-name’ in the output part. =

 

<e= ric> As certificate-name always uniquely identifies tpm-name and = node-id, including these two items introduces both redundancy in the = message, and error conditions which would need to be checked.  =  

[Bin] = Without the requirement of making the certificate-name unique to = identify tpm-name and node-id, there will be no such redundancy and less = error conditions.

<E= ric2> Do you really want to allow a duplicate = <certificate-name> on a single platform?   This could be = read as we allow a common attestation key repeated on different line = cards on a single platform.   I don't think this is a good = idea, a hacker could easily swap the quote output of one TPM on one line = card as associate it with another line card.

=  

In = previous threads, we have talked about the downsides of requiring a = compound key to reference a specific TPM:

  • Most = routers/switches don't have multiple line cards.  So forcing the = RPC to be more complex for the minority of devices should be = avoided.
  • Forcing the = <node-id> to be exposed means that it naturally act as a compound = key.

=  

Note = 1: your internal implementation can certainly use a compound key, if you = prefer.  There is nothing in the model which precludes this as the = underlying implementation.

=  

Note = 2: It is possible to define a YANG model XPATH constraint to eliminate = the error condition you reference by ensuring that no duplicate = <certificate-name> exists within the = /rats-support-structures/tpms/tpm/certificates/certificate/certificate-na= me.   If this is acceptable, I can propose such an XPATH for = the model.<= /p>

 

The = reasons are below:

a) By making the ‘tpm-name’ and ‘node-id’ optional or visible only when two = and more TPMs exist, this method doesn’t bring complexity to the devices = which only have one TPM.

 

<e= ric>  IMHO there are the drawbacks of redundancy in the message, = extra fields and error checks.  So you get a more complex API with = little benefit. <= /p>

[Bin] = By requiring a unique certificate-name, I don't feel that the error = checks will be much less. And without this uniqueness requirement, there = is no redundancy in the message.

<E= ric2> The RPC is more complex if the types of objects populated = change based on whether multiple line cards exist.  Also in the = current solution, the only error-check needed would be ensuring that no = duplicate <certificate-name> exists on write.  And this error = check can be skipped when there is only one TPM (versus when there is a = TPM per line card.)

 

b) For = the devices which have two and more TPMs, by making the TPM's location = info explicit in the challenge input, the Attester's control plane can = directly find the TPM being challenged and it doesn't need to store and = maintain the relationship among tpm-name, compute-node, and = certificate-name.

 

<e= ric> Having the Verifier know the relationship between the compute = node and the certificates, but the Attester doesn't need to know/enforce = relationship within its own box seems backwards.   =

[Bin] = The Attester definitely can know the relationship, but it can have less = processes by knowing the compute-node directly from the message. If it = can be simpler why not?

<E= ric2> Yes the Attester must know these relationships.  But the = Verifier shouldn't necessarily trust the non-signed parts of Attester = messages.  E.g., It would be a security risk to depend on the = Attesting Router to be the undisputed source of which TPMs are on which = line card.

 

c) This = method has less exception scenarios to consider. In this method, if the = Verifier doesn't recognize the certificate-name in the output, it just = needs to retrieve this certificate again. In current method, if the = TPM's certificate changed, the exception scenarios include the = Attester's control plane may can't recognize the certificate-name, the = Verifier may can't recognize the certificate-name, etc. Implementers may = not be able to think through all of these exception = scenarios.

 

<e= ric> YANG was designed around maintaining the consistency of the = managed device.  I believe it easier/simpler for an Attester to = maintain its own internal consistency rather for (many?) external = verifiers to do this.

[Bin] = The Attester can maintain the consistency. But if it can do less = processes by the way of having the tpm-name and node-id in the input, = why don’t do that and choose a way which has more = processes.<= /b>

<E= ric2> Hopefully the answer to this is address in the other responses = above (i.e., single TPM devices and minimized RPC = complexity.)

=

 

3. For = the log-retrieve RPC, it uses tpm-name in its input and output and is = different from the TPM1.2 and TPM2.0 challenge-response-attestation = RPCs. This also makes me feel a little weird that the TPM being = challenged in the attestation RPCs is not identified by TPM's = name.

 

<e= ric> It does initially seem strange, but there is a some logic = here. 

  • The logs entries = don't need to be tied to a TPM certificate.    (PCRs are = not the same as they are signed.)
  • Looking at the = Charra datastore nodes, if you have the certificate-name, you know the = TPM-name. 
  • Plus the logs can = continuously be stored even during a certificate = change.

=  

And = on why the tpm-name can appear in input and output for = log-retrieval:

  • If no tpm-name = appears in the RPC input, all TPMs are assumed
  • For the output, = you need to understand which set of logs belongs to each = TPM.

[Bin] = The tpm-name can be used in the log-retrieve RPC to identify the input = and output, so the attestation RPCs can also include the tpm-name (and = node-id).

<E= ric2> The tpm-name is in the log-retrieval RPC.  This is the = only option to identify specific TPMs, so there is no redundancy.  = Right now there is only certificate-name for the attestation RPCs, there = is no redundancy.    If we allowed certificate-name or = tpm-name or node-id, there are redundant choices which make the RPC far = more expensive to implement.  Additionally, are combinations of = each of these objects allowed?  And which combinations?   = BTW: I see no problem in having vendor specific augmentations allowing = tpm-name or node-id in the attestation RPC.  I just am trying to = make the standard implementation as simple as possible while maintaining = coverage for both single TPM and multiple TPM = platforms.

=  

Thank= s,

Eric<= o:p>

&n= bsp;

Thanks!=

Bin = Cao

 

From: Eric Voit = (evoit) [mailto:evoit@cisco.com] =
Sent: Tuesday, September 22, 2020 4:42 AM
To: = caobin (A) <caobin8@huawei.com>
Cc: rats@ietf.org
Subject: = RE: Questions about latest PRs

 

Hello= Bin Cao,

=  

Thank= s for the comments, some thoughts in-line...

 

From: caobin (A), = September 19, 2020 5:53 AM

Hi = authors,

 

I’ve noticed the changes of CHARRA = YANG module on the GitHub. Here I have some = comments:

 

1. The = ‘TPM_PCR_COMPOSITE’ in the output of RPC = tpm12-challenge-response-attestation and the ‘TPMS_QUOTE_INFO’ in the output of RPC = tpm20-challenge-response-attestation are capitalized while other = elements are not. Is there a special reason?

 

<e= ric> The capitalization of TPMS_QUOTE_INFO = empha= sizes that this objects are identical to objects from the corresponding = TCG specs.  I.e.:

https://www.trustedcomputinggroup.org/wp-conte= nt/uploads/TPM-Rev-2.0-Part-2-Structures-01.38.pdf<= /p>

Secti= on 10.12.1  "TPMS_QUOTE= _INFO"= ;.

=  

The = capitalization of TPM_PCR_COMPOSITE is = not so straight-forward however.&nbs= p;  It is true that is includes the objects from TPM_PCR_COMPOSITE. = See Section 8.2 of:

https://trustedcomputinggroup.org/wp-content/u= ploads/mainP2Structrev103.pdf<= /p>

Howev= er there is not a binary equivalency between the two.   For = that reason, the object should not be = capitalized.

=  

Stepp= ing back, I think that the TPM1.2 response (and TPM2.0 response) could = be simplified even more.    Initially the PCR indexes and = values were broken out for a variety of reasons on the mailing list such = as on-change (RFC-8641) YANG subscription (even those these nodes are = associated with RPC...).     However = draft-birkholz-rats-network-device-subscription now suggests that = RFC-8639 Event subscription is a better match than RFC-8641 YANG = subscription.

=  

As a = result, I believe that parsing YANG objects from = TPM_PCR_COMPOSITE.  Let me start a thread on = that.

 

 

2. I see = in the output there are node-id and node-physical-index, which makes me = wonder whether containing TPM’s name and location info in the = input and output can make the implementation simpler. I want to discuss = my thoughts more.

I think a better method is = containing ‘tpm-name’ and ‘node-id’ in the input part and containing = ‘tpm-name’, ‘node-id’, and ‘certificate-name’ in the output part. =

 

<e= ric> As certificate-name always uniquely identifies tpm-name and = node-id, including these two items introduces both redundancy in the = message, and error conditions which would need to be checked.  =  

 

The reasons are = below:

a) By making the ‘tpm-name’ and ‘node-id’ optional or visible only when two = and more TPMs exist, this method doesn’t bring complexity to the devices = which only have one TPM.

 

<e= ric>  IMHO there are the drawbacks of redundancy in the message, = extra fields and error checks.  So you get a more complex API with = little benefit. <= /p>

 

b) For the devices which have two = and more TPMs, by making the TPM's location info explicit in the = challenge input, the Attester's control plane can directly find the TPM = being challenged and it doesn't need to store and maintain the = relationship among tpm-name, compute-node, and = certificate-name.

 

<e= ric> Having the Verifier know the relationship between the compute = node and the certificates, but the Attester doesn't need to know/enforce = relationship within its own box seems backwards.   =

 

c) This method has less exception = scenarios to consider. In this method, if the Verifier doesn't recognize = the certificate-name in the output, it just needs to retrieve this = certificate again. In current method, if the TPM's certificate changed, = the exception scenarios include the Attester's control plane may can't = recognize the certificate-name, the Verifier may can't recognize the = certificate-name, etc. Implementers may not be able to think through all = of these exception scenarios.

 

<e= ric> YANG was designed around maintaining the consistency of the = managed device.  I believe it easier/simpler for an Attester to = maintain its own internal consistency rather for (many?) external = verifiers to do this.

 

3. For = the log-retrieve RPC, it uses tpm-name in its input and output and is = different from the TPM1.2 and TPM2.0 challenge-response-attestation = RPCs. This also makes me feel a little weird that the TPM being = challenged in the attestation RPCs is not identified by TPM's = name.

 

<e= ric> It does initially seem strange, but there is a some logic = here. 

  • The logs entries = don't need to be tied to a TPM certificate.    (PCRs are = not the same as they are signed.)
  • Looking at the = Charra datastore nodes, if you have the certificate-name, you know the = TPM-name. 
  • Plus the logs can = continuously be stored even during a certificate = change.

=  

And = on why the tpm-name can appear in input and output for = log-retrieval:

  • If no tpm-name = appears in the RPC input, all TPMs are assumed
  • For the output, = you need to understand which set of logs belongs to each = TPM.

=  

Eric<= o:p>

 

Bin Cao =

caobin8@huawei.com<= /p>

+8613347737317 =

 

------=_NextPart_001_1C2B_01D6A3CB.86106BC0-- ------=_NextPart_000_1C2A_01D6A3CB.86106BC0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAxMDE2MTg0OTE3WjAjBgkqhkiG 9w0BCQQxFgQU6iO0bZ9lZP76AtmZCgry5h2ADHwwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQBwH+B2sCrqP3M7vkAU8eHhGatWSoz2KFgeLwzpsGGqx2RcCplJ3wr8VybdVkz2u7RX YtbaC3ItUeVScaL19QS9UUwSsimfrQoXPJ5NnFQSHJ6Dp0ZbwJfR2OvBr5LfBLmk9KkytAYan4xu 8++esyT6+lZre8yEmzSMrj+5YvwNIKUsBDvTRIvbAjgwdH6zzPsD7l8jMqrgzugmaU37ShNFU6Qt nptiz0aDzcqDGGTDNu74WCKNeYvmlNKTA2f/3vQ5Tjnc6dMpRpa6cDELbsYVklwPkKMajkyYlOCu e0evH0ws6/2r1tBJKbkasf4VXqmZzPrhrGeD1CWm1djPlNYKAAAAAAAA ------=_NextPart_000_1C2A_01D6A3CB.86106BC0-- From nobody Fri Oct 16 16:42:29 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0303A09CE; Fri, 16 Oct 2020 16:42:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g2GI9J59jFbj; Fri, 16 Oct 2020 16:42:15 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD3873A098D; Fri, 16 Oct 2020 16:42:13 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CCjBZ44FHzyXv; Sat, 17 Oct 2020 01:33:09 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 624583989.729948-003ea6e0b24c10f51d6ecd324391ac4e Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Message-Id: Date: Sat, 17 Oct 2020 01:33:09 +0200 To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF109: DRAFT AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 23:42:18 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF109. Remember that there is still quite some potential for changes. The conflicts that meet the eye this time seem to impact generalists = only. Great scheduling job! All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange = WG 0730-0830 Session II Rm 3 INT add Adaptive DNS Discovery WG Rm 4 IRTF maprg Measurement and Analysis for Protocols Rm 7 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 6 SEC secdispatch Security Dispatch WG Rm 7 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 7 SEC gnap Grant Negotiation and Authorization = Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data = and Interactions of Things WG Rm 2 IRTF irtfopen IRTF Open Meeting Rm 4 RTG apn Application-aware Networking BOF Rm 7 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for = Network and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for = Constrained Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment = Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management = Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy = networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model = and Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things = WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 4 IRTF cfrg Crypto Forum Rm 7 TSV masque Multiplexed Application Substrate over = QUIC Encryption WG From nobody Mon Oct 19 12:19:05 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AD6E3A1065 for ; Mon, 19 Oct 2020 12:19:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.697 X-Spam-Level: X-Spam-Status: No, score=-7.697 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=gFaHiDsI; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=xwYCOpXt Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l4liPGQoKhrx for ; Mon, 19 Oct 2020 12:19:01 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFB9C3A1008 for ; Mon, 19 Oct 2020 12:19:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8523; q=dns/txt; s=iport; t=1603135140; x=1604344740; h=from:to:subject:date:message-id:mime-version; bh=HX88YFJB1O4tiO0f1rNWC3VGI3AMQpXLy/K9bzGhiCY=; b=gFaHiDsIZ2EV4LB2eTOGzbAN6WAE7XsvsI+ZtKI7S0ukos3og6XVnUrD ITfO1Z9hjku5or6fCo33se4V4TDU5Yw6nJChGMv6ErSNKWkLYQKx3Z8Du BgKSQCq2n/R610fENHmGH1zvGt1vxETIQ2vrT/lja6uXfYT6XPjvTMtEH o=; IronPort-PHdr: =?us-ascii?q?9a23=3AdHhwthTxO6YhqmpxQ5hCKp1B39psv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBN+J6v9YhazRqa+zEWAD4JPUtncEfdQMUh?= =?us-ascii?q?IekswZkkQmB9LNEkz0KvPmLklYVMRPXVNo5Te3ZE5SHsutZlDOrDu19zFBUh?= =?us-ascii?q?n6PBB+c+LyHIOahs+r1ue0rpvUZQgAhDe0bb5oahusqgCEvcgNiowkIaE0mR?= =?us-ascii?q?Y=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CJBgDM5Y1f/4UNJK1GFwOCWIEjL1E?= =?us-ascii?q?HcFkvLAqEM4NJA6FYhG+BLoElA1ULAQEBDQEBJQgCBAEBhGOBdgIlNAkOAgM?= =?us-ascii?q?BAQsBAQUBAQECAQYEbYVhAQuGCxEdAQE4EQEaHgwGAgQwFxAEEyKDBAGBfk0?= =?us-ascii?q?DLgEOP6N2AoE5iGh2gTKDBAEBBUZxAg5BRIJXGIIQAwaBOIJyg26GVhuCAIE?= =?us-ascii?q?RJxyED4FYAQECAQEVgg0Igh0rM4IRG5NShw+dHQqCaokEkW0DH4MWigmUMZM?= =?us-ascii?q?xgXuIeJU6AgQCBAUCDgEBBYFUOoFXcBVIFAkBgj5QFwINjisMC4NOhRSFQnQ?= =?us-ascii?q?CNgIGAQkBAQMJfIssgQ8BgRABAQ?= X-IronPort-AV: E=Sophos;i="5.77,395,1596499200"; d="scan'208,217";a="566682524" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 19 Oct 2020 19:18:59 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id 09JJIx87018203 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 19 Oct 2020 19:18:59 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 19 Oct 2020 14:18:59 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 19 Oct 2020 14:18:59 -0500 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 19 Oct 2020 14:18:59 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=oVeIjWSSv7ZbPP5B7ujFH/U5oe6CCK4xpRO0zkwrqAxznaFsJizQdVby7nGdYbqNGrSYV0r/qZ9t0YB69WJ17r3w5eye44TiWnqU4w8jH8sL1V0+IJy8XMf/aroN4+PjgQZ6c4g2PMc2GRdufdIkEvGLBjR77sggOL/oRl/zCOB/9TC/VVjPKjBLlYanVAxxjal1ARJL8RTfHnYUx5bIQX8I5D/c1o2N/njb5KJaw/Qamyup5fkk95K5zE+SAGyZl8/3k7KIhBDRlUSSJUcPj653n8m9PaUlLCg29DpNoksK/8x2G8r941+OtejTyBHLwPRj38F9i9PxSpd8GWYuEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HX88YFJB1O4tiO0f1rNWC3VGI3AMQpXLy/K9bzGhiCY=; b=F6qU1pzvhKyz9FjnYxqnWQvrSJSN8nWx7TyJGhWEf5w239n0lFkzZNWofxEu/q3V/sg9f+6Ce5Wg6jfhTPcKbBtGl05DxH+1J9aaMM+jxBIMdt1qx43lyFrZz2Lc1ZJCNbCAusXlZSuliqorN+dyrKT/Ryq/LGZH0RY526/xqMH20nci1rcGeGu3LaGotAeoBM862lzHb1n74WHlKi3fYFJUz0ao7NUw66QfeY62WBcS/G1rFXzZKcCT0hek5IvGO6/kBQ97TEX2dH+kLQKGJt48ODR7qN7tKB33dnjl3OWWoZlcv7Njquwd6Y+/Vycp24WcH99HfACEbRmkxFQLgg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HX88YFJB1O4tiO0f1rNWC3VGI3AMQpXLy/K9bzGhiCY=; b=xwYCOpXtRuGScOgcDblhADL9I32AWUPzIuT+vkeYume3ZLvVu3WKHsANLKkCeafjKYO/WzjSKtdvFyMAUetCbquklw1BrBu7r63boGeFJMAosOA8bKgB9WB3+ogncmxGeq0K0/FhDLIhzzJV3ncv5uccZcfIc2jYEz2r5qIpOMk= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by SJ0PR11MB4863.namprd11.prod.outlook.com (2603:10b6:a03:2ae::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.21; Mon, 19 Oct 2020 19:18:58 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3477.028; Mon, 19 Oct 2020 19:18:58 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: RATs Oct 23rd Virtual Interim reminder Thread-Index: AQHWpkyx/utFqTIlQ0O8Mr6sY9xGfQ== Date: Mon, 19 Oct 2020 19:18:58 +0000 Message-ID: <2CFE9308-E724-4A02-A0A1-85D4C11E2417@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1b.201012 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ab0dd59e-0a72-47cc-9a2d-08d87463d432 x-ms-traffictypediagnostic: SJ0PR11MB4863: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:826; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 0/oC1bhIUthclqOEC0FyOPdsTZpHXfrDsIJUBBdiwzziqoURJgnjSTQopqz1nzOguTgipJhGXp1KWxKSA7VzeUP946yHDCX1KltwE4poH5Zln++wFOh9TYN9SEWw9QoPOkDFfWT8GSahze7EjiIfY8iwAtZIcyOMisDPcSEeyGAg6ML7TnxtFTECc1c2k9RlWJ+B3pFNcWr6mrDBOq6xBOdUidf2YT2X1imbaMM0/15nIruIXyu/QqKdak8CrvcQ0ColSCjFlxj8V9bWQtGB68yK22NlF9NAmF1s2Wg78s3wU2sO2B1fEHbiWjuXSfihqGYWwXb3L8Nn0YQHubKJTEcZ5/YQKLyIeYCu6fyxoAee1ZmZVkziWUSY44FlY5fUCRO59XNCz0LHPOEUID7dgw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(366004)(136003)(346002)(39860400002)(396003)(376002)(966005)(86362001)(6916009)(6512007)(478600001)(16799955002)(2906002)(5660300002)(316002)(4744005)(36756003)(83380400001)(186003)(8936002)(2616005)(8676002)(66946007)(26005)(66446008)(64756008)(76116006)(66556008)(71200400001)(6506007)(6486002)(66476007)(33656002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_2CFE9308E7244A02A0A185D4C11E2417ciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: ab0dd59e-0a72-47cc-9a2d-08d87463d432 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Oct 2020 19:18:58.2306 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jsV+448zpgkK8XtGxRLEXnSvsYo6xyYvyKWNyi5OaUrrz2XQAo025132wHK/wetRImfQNTpDtoxSQAEOKxAWDA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB4863 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.36.7.13, xch-aln-003.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: [Rats] RATs Oct 23rd Virtual Interim reminder X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2020 19:19:03 -0000 --_000_2CFE9308E7244A02A0A185D4C11E2417ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWxsLA0KVGhpcyBpcyBhIHJlbWluZGVyIHRoYXQgd2XigJlsbCBoYXZlIGEgc2Vzc2lvbiB0aGlz IEZyaWRheSBPY3QgMjNyZCBhdCA3OjMwYW0gUFNULzE0OjMwIFVUQy4NCg0KUHJlc2VudGVyczog cGxlYXNlIHVwbG9hZCB0aGVpciBzbGlkZXMgYnkgRU9EIFdlZCwgdG8gZ2l2ZSBwYXJ0aWNpcGFu dHMgdGltZSB0byBwcmV2aWV3Lg0KDQpIZXJl4oCZcyB0aGUgYWdlbmRhOg0KKiBBZ2VuZGEgQmFz aCAoNW1pbikNCg0KKiBBcmNoaXRlY3R1cmUg4oCTIE1pY2hhZWwgKDE1bWluKQ0KaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUtMDINCg0KKiBF QVQg4oCTIExhdXJlbmNlICgyMG1pbikNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LWlldGYtcmF0cy1lYXQvDQoNCiogTmV0d29yayBEZXZpY2UgQXR0ZXN0YXRpb24gLSBH dXkgKDE1IG1pbikNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWZlZG9y a293LXJhdHMtbmV0d29yay1kZXZpY2UtYXR0ZXN0YXRpb24vDQoNCiogSW50ZXJhY3Rpb24gTW9k ZWwg4oCTIEhlbmsgKDEwbWluKQ0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtYmlya2hvbHotcmF0cy1yZWZlcmVuY2UtaW50ZXJhY3Rpb24tbW9kZWwvDQoNCiogQ0hBUlJB IFVwZGF0ZSDigJMgRXJpYyAoMTBtaW4pDQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2Rv Yy9kcmFmdC1pZXRmLXJhdHMteWFuZy10cG0tY2hhcnJhLw0KDQpFdGhlcnBhZDogaHR0cHM6Ly9j b2RpbWQuaWV0Zi5vcmcvbm90ZXMtb2N0LTIwMjAtdmlydHVhbC1yYXRzDQpKYWJiZXI6ICByYXRz QGphYmJlci5pZXRmLm9yZw0KDQpXZWJleDoNCmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9q LnBocD9NVElEPW0xOGNiNmIzMjczYTgxYWQ3YWZiNzZlMzAwNzY5MjJiOA0KTWVldGluZyBudW1i ZXIgKGFjY2VzcyBjb2RlKTogMTcxIDU5MCAwMjM0DQoNCk1lZXRpbmcgcGFzc3dvcmQ6IHRWMm5L RTlIUUI3DQoNCkJlc3QsIE5hbmN5DQo= --_000_2CFE9308E7244A02A0A185D4C11E2417ciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: <22C3E6D989F1CB45B9284AE50228BA5D@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7fQ0KQHBhZ2UgV29yZFNl Y3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAx LjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5 bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5 NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5BbGwsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRo aXMgaXMgYSByZW1pbmRlciB0aGF0IHdl4oCZbGwgaGF2ZSBhIHNlc3Npb24gdGhpcyBGcmlkYXkg T2N0IDIzPHN1cD5yZDwvc3VwPiBhdCA3OjMwYW0gUFNULzE0OjMwIFVUQy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlByZXNlbnRlcnM6IHBsZWFzZSB1cGxvYWQg dGhlaXIgc2xpZGVzIGJ5IEVPRCBXZWQsIHRvIGdpdmUgcGFydGljaXBhbnRzIHRpbWUgdG8gcHJl dmlldy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkhlcmXigJlz IHRoZSBhZ2VuZGE6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPiogQWdlbmRhIEJhc2ggKDVtaW4pPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4qIEFyY2hpdGVjdHVyZSDigJMg TWljaGFlbCAoMTVtaW4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9kcmFmdC1pZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLTAyPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij4qIEVBVCDigJMgTGF1cmVuY2UgKDIwbWluKTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXJh dHMtZWF0LzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+KiBOZXR3 b3JrIERldmljZSBBdHRlc3RhdGlvbiAtIEd1eSAoMTUgbWluKTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5o dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1mZWRvcmtvdy1yYXRzLW5ldHdv cmstZGV2aWNlLWF0dGVzdGF0aW9uLzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+KiBJbnRlcmFjdGlvbiBNb2RlbCDigJMgSGVuayAoMTBtaW4pPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWJpcmtob2x6LXJh dHMtcmVmZXJlbmNlLWludGVyYWN0aW9uLW1vZGVsLzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+KiBDSEFSUkEgVXBkYXRlIOKAkyBFcmljICgxMG1pbik8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdCI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1y YXRzLXlhbmctdHBtLWNoYXJyYS88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPkV0aGVycGFkOiBodHRwczovL2NvZGltZC5pZXRmLm9yZy9ub3Rlcy1vY3QtMjAyMC12 aXJ0dWFsLXJhdHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+SmFiYmVyOiZuYnNwOyByYXRzQGphYmJlci5p ZXRmLm9yZzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2ViZXg6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPmh0dHBzOi8vaWV0Zi53ZWJleC5jb20vaWV0Zi9qLnBocD9NVElE PW0xOGNiNmIzMjczYTgxYWQ3YWZiNzZlMzAwNzY5MjJiODxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5NZWV0 aW5nIG51bWJlciAoYWNjZXNzIGNvZGUpOiAxNzEgNTkwIDAyMzQNCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+TWVldGluZyBwYXNzd29yZDogdFYybktFOUhRQjc8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPkJlc3QsIE5hbmN5PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_2CFE9308E7244A02A0A185D4C11E2417ciscocom_-- From nobody Tue Oct 20 10:41:55 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D94CA3A11EA for ; Tue, 20 Oct 2020 10:41:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcvIlNW213kb for ; Tue, 20 Oct 2020 10:41:53 -0700 (PDT) Received: from p3plsmtpa09-10.prod.phx3.secureserver.net (p3plsmtpa09-10.prod.phx3.secureserver.net [173.201.193.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEC4E3A11FC for ; Tue, 20 Oct 2020 10:41:53 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id UvdwkGnbrXVKvUvdxk0FKS; Tue, 20 Oct 2020 10:41:53 -0700 X-CMAE-Analysis: v=2.3 cv=fPlHIqSe c=1 sm=1 tr=0 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=0XtbOteLAAAA:20 a=-W4SJTgYQpgGgjqte4sA:9 a=QEXdDO2ut3YA:10 a=wQz6RpIX6Kf567UU_j8A:9 a=_W_S_7VecoQA:10 a=WQnItmPV2fbdzLaCP6-h:22 a=Z5ABNNGmrOfJ6cZ5bIyy:22 a=bWyr8ysk75zN3GCy5bjg:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_D62C314D-3BF1-424A-A6AE-03CD5BF4C5A0" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Message-Id: <6E60011F-780B-47F4-8ADD-56FD7E9C247A@island-resort.com> Date: Tue, 20 Oct 2020 10:41:52 -0700 To: rats@ietf.org X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4wfPfOwauopDgGGfLb3CiIHn8IPmS8ng8qRQ6W3XEgg/wgUPlZZh4qqNkIfaLTG0Xd/0dYQxRY/KDOZi4UOvyP2EiSMtHxjy9MUwETwqvdJs62yVeiu71K GAYkDNSCKdc3C1yyXMsVNNJf1u3uawA7F4qxpzmHNsWCnU7SOkKgkoh6 Archived-At: Subject: [Rats] EAT token-in-token submod CBOR implementation issue X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Oct 2020 17:41:55 -0000 --Apple-Mail=_D62C314D-3BF1-424A-A6AE-03CD5BF4C5A0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I=E2=80=99m planning to say that EAT submods that are whole = independently signed tokens must be CBOR byte-string wrapped because of = implementation issues with CBOR/COSE/CWT/EAT SW stacks. See GitHub issue = here . There is no = semantic change, just encoding format change. LL --Apple-Mail=_D62C314D-3BF1-424A-A6AE-03CD5BF4C5A0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I=E2=80= =99m planning to say that EAT submods that are whole independently = signed tokens must be CBOR byte-string wrapped because of implementation = issues with CBOR/COSE/CWT/EAT SW stacks. See GitHub = issue here. There is no semantic change, just encoding format = change.

LL

= --Apple-Mail=_D62C314D-3BF1-424A-A6AE-03CD5BF4C5A0-- From nobody Fri Oct 23 06:28:02 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 042DC3A0CA1; Fri, 23 Oct 2020 06:28:01 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <160345968086.26813.7433121800016244690@ietfa.amsl.com> Date: Fri, 23 Oct 2020 06:28:00 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-reference-interaction-models-01.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 13:28:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : Reference Interaction Models for Remote Attestation Procedures Authors : Henk Birkholz Michael Eckel Christopher Newton Liqun Chen Filename : draft-ietf-rats-reference-interaction-models-01.txt Pages : 22 Date : 2020-10-23 Abstract: This document describes interaction models for remote attestation procedures (RATS). Three conveying mechanisms - Challenge/Response, Uni-Directional, and Streaming Remote Attestation - are illustrated and defined. Analogously, a general overview about the information elements typically used by corresponding conveyance protocols are highlighted. Privacy preserving conveyance of Evidence via Direct Anonymous Attestation is elaborated on in the context of the Attester, Endorser, and Verifier role. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-reference-interaction-models/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-reference-interaction-models-01 https://datatracker.ietf.org/doc/html/draft-ietf-rats-reference-interaction-models-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-reference-interaction-models-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 23 14:18:28 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 42CD03A1139; Fri, 23 Oct 2020 14:15:50 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: rats@ietf.org, rdd@cert.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160348775026.5087.6157211463422826525@ietfa.amsl.com> Date: Fri, 23 Oct 2020 14:15:50 -0700 Archived-At: Subject: [Rats] rats - Requested sessions have been scheduled for IETF 109 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 21:15:54 -0000 Dear Nancy Cam-Winget, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. rats Session 1 (1:00 requested) Tuesday, 17 November 2020, Session III 1600-1800 Room Name: Room 8 size: 508 --------------------------------------------- rats Session 2 (2:00 requested) Thursday, 19 November 2020, Session III 1600-1800 Room Name: Room 8 size: 508 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/109/sessions/rats.ics Request Information: --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 2 Length of Session(s): 2 Hours, 1 Hour Number of Attendees: 75 Conflicts to Avoid: Chair Conflict: secdispatch saag mile acme tls sacm teep suit netconf opsec masque add Key Participant Conflict: anima cose dprive People who must be present: Ned Smith Kathleen Moriarty Nancy Cam-Winget Roman Danyliw Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 23 15:12:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56ADC3A0990; Fri, 23 Oct 2020 15:12:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sJ-5RaQcXvNg; Fri, 23 Oct 2020 15:12:16 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C24D3A0994; Fri, 23 Oct 2020 15:12:15 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CHyk53LxqzyVg; Fri, 23 Oct 2020 23:56:45 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 625183005.290325-8d89a175b356a0a970232e46019678c9 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Message-Id: Date: Fri, 23 Oct 2020 23:56:45 +0200 To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Rats] [Cbor] Constrained Node/Network Cluster @ IETF109: "FINAL" AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 22:12:18 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF109. Remember that further agenda changes can still happen. Very little has changed with respect to the draft agenda. WEBTRANS does meet, and CFRG and IRTFOPEN have been moved around (CFRG now on top of CORE, unfortunately). All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange WG 0730-0830 Session II Rm 2 INT add Adaptive DNS Discovery WG Rm 3 IRTF maprg Measurement and Analysis for Protocols Rm 6 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 2 ART webtrans WebTransport WG Rm 7 SEC secdispatch Security Dispatch WG Rm 8 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 3 IRTF cfrg Crypto Forum Rm 7 SEC gnap Grant Negotiation and Authorization Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data and = Interactions of Things WG Rm 5 RTG apn Application-aware Networking BOF Rm 8 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for Network = and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for Constrained = Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of Resource-constrained Nodes = WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation Maintenance = and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model and = Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 3 INT 6man IPv6 Maintenance WG Rm 5 IRTF irtfopen IRTF Open Meeting Rm 8 TSV masque Multiplexed Application Substrate over QUIC = Encryption WG _______________________________________________ CBOR mailing list CBOR@ietf.org https://www.ietf.org/mailman/listinfo/cbor From nobody Mon Oct 26 10:51:33 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 207F83A0DFE for ; Mon, 26 Oct 2020 10:51:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.1 X-Spam-Level: X-Spam-Status: No, score=-2.1 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5FGtgfPhT4mv for ; Mon, 26 Oct 2020 10:51:31 -0700 (PDT) Received: from out-28.smtp.github.com (out-28.smtp.github.com [192.30.252.211]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3D3D3A0DF8 for ; Mon, 26 Oct 2020 10:51:30 -0700 (PDT) Received: from github.com (hubbernetes-node-818a524.ash1-iad.github.net [10.56.113.62]) by smtp.github.com (Postfix) with ESMTPA id 1F205902653 for ; Mon, 26 Oct 2020 10:51:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603734690; bh=g9DptwmUqpeXm8/hiHVmfGrTjaO5Q8U2cWfiS77Z4m0=; h=Date:From:To:Subject:From; b=K9jc3PcaM0J+dvd8rUsgBtn8wDbAiiOAs05N/26Mklh8nXh5BKCHFh6HlVzPtJ23r uLhj1MD7uWejF7csI5bTPs2eNPf/WoeTxXK3PT+qQvoZhABvHTa4uCPz5Q8cAwPb1P 0RmlAPxaUCCsGvh20Zwbg9B3d0g1wgUTD0dypILg= Date: Mon, 26 Oct 2020 10:51:30 -0700 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 1adb74: change the way IMEI are encoded X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 17:51:32 -0000 Branch: refs/heads/IMEI_Encoding Home: https://github.com/ietf-rats-wg/eat Commit: 1adb748b82decdb95e88cc9201a383fca93997d8 https://github.com/ietf-rats-wg/eat/commit/1adb748b82decdb95e88cc9201a383fca93997d8 Author: Laurence Lundblade Date: 2020-10-26 (Mon, 26 Oct 2020) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- change the way IMEI are encoded From nobody Mon Oct 26 10:52:12 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AA873A0E00 for ; Mon, 26 Oct 2020 10:52:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GffdA7CPerwj for ; Mon, 26 Oct 2020 10:52:08 -0700 (PDT) Received: from out-24.smtp.github.com (out-24.smtp.github.com [192.30.252.207]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 330A23A0DFE for ; Mon, 26 Oct 2020 10:52:08 -0700 (PDT) Received: from github.com (hubbernetes-node-d85249f.ac4-iad.github.net [10.52.24.66]) by smtp.github.com (Postfix) with ESMTPA id 6DB62600F2F for ; Mon, 26 Oct 2020 10:52:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603734727; bh=vnDA4PKrK0mzpPt6yftk59kNI2scLm5jgX0/nFB0MeQ=; h=Date:From:To:Subject:From; b=vgk6hBtIJrMH9h65MESJEdYv1Qf8yIeUOuc3GmWdBm4SpD+7ZjFXHP9DJo+Och0U+ dCumg6V2EVkecuN0QDklTH5w3ngbm1lNn4map9pj9jBr5QLEJ7w846Ry+0iMcst5Uy RB+Lmkkvxw2kBp+XLce82mw6TdhZamKRly/9jz0o= Date: Mon, 26 Oct 2020 10:52:07 -0700 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] eeda91: Script updating archive at 2020-09-18T17:43:29Z. [... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 17:52:09 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: eeda9111cca3020a5f49ee6eeed163c66dbd3b54 https://github.com/ietf-rats-wg/eat/commit/eeda9111cca3020a5f49ee6eeed163c66dbd3b54 Author: ID Bot Date: 2020-09-18 (Fri, 18 Sep 2020) Changed paths: A .gitignore A archive.json A cddl-fixes/draft-ietf-rats-eat.html A cddl-fixes/draft-ietf-rats-eat.txt A cddl-fixes/index.html A claim-characteristics/draft-ietf-rats-eat.html A claim-characteristics/draft-ietf-rats-eat.txt A claim-characteristics/index.html A draft-ietf-rats-eat.html A draft-ietf-rats-eat.txt A index.html A issues.html A issues.js A ll_cddl_fixes/draft-ietf-rats-eat.html A ll_cddl_fixes/draft-ietf-rats-eat.txt A ll_cddl_fixes/index.html A no-float/draft-ietf-rats-eat.html A no-float/draft-ietf-rats-eat.txt A no-float/index.html A nonce/draft-ietf-rats-eat.html A nonce/draft-ietf-rats-eat.txt A nonce/index.html A submods_revamp/draft-ietf-rats-eat.html A submods_revamp/draft-ietf-rats-eat.txt A submods_revamp/index.html A timestamp/draft-ietf-rats-eat.html A timestamp/draft-ietf-rats-eat.txt A timestamp/index.html Log Message: ----------- Script updating archive at 2020-09-18T17:43:29Z. [ci skip] Commit: 784b14f5a1230a59777ea47dcb4bec075cc28b12 https://github.com/ietf-rats-wg/eat/commit/784b14f5a1230a59777ea47dcb4bec075cc28b12 Author: ID Bot Date: 2020-10-26 (Mon, 26 Oct 2020) Changed paths: A IMEI_Encoding/draft-ietf-rats-eat.html A IMEI_Encoding/draft-ietf-rats-eat.txt A IMEI_Encoding/index.html M index.html Log Message: ----------- Script updating gh-pages from 1adb748. [ci skip] Compare: https://github.com/ietf-rats-wg/eat/compare/c77f4c9b05dd...784b14f5a123 From nobody Mon Oct 26 10:52:17 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0E9C3A0E3C for ; Mon, 26 Oct 2020 10:52:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5sYAeqSF-WOt for ; Mon, 26 Oct 2020 10:52:14 -0700 (PDT) Received: from out-24.smtp.github.com (out-24.smtp.github.com [192.30.252.207]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 467E43A0E28 for ; Mon, 26 Oct 2020 10:52:14 -0700 (PDT) Received: from github.com (hubbernetes-node-f828b88.ac4-iad.github.net [10.52.110.68]) by smtp.github.com (Postfix) with ESMTPA id 934D960006E for ; Mon, 26 Oct 2020 10:52:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603734733; bh=WCChYHw6uEWXUrqPv+HlnIhVOAr/1MO8PTbSpdL91Gs=; h=Date:From:To:Subject:From; b=YyqaY7UNbF4RkIP6sc55sbya0xVBO7YXMkwmdaUb7uSLRpMi4R6jfq2YDyk9HA2XK AYzr4okq+q+LNXOpxM4NabrTnhzJNptZTOUMAqp5ly8xrfDZ46c9h+Y8b++ADWCdSJ irbA1lMfSJv0KRw2q87A7mc8NnccU6CMafjJIsgQ= Date: Mon, 26 Oct 2020 10:52:13 -0700 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] b06d73: Script updating archive at 2020-10-26T17:51:54Z. [... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 17:52:16 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: b06d730625df1f28b2519fad301ec9da5b9558e1 https://github.com/ietf-rats-wg/eat/commit/b06d730625df1f28b2519fad301ec9da5b9558e1 Author: ID Bot Date: 2020-10-26 (Mon, 26 Oct 2020) Changed paths: M archive.json Log Message: ----------- Script updating archive at 2020-10-26T17:51:54Z. [ci skip] From nobody Mon Oct 26 10:57:23 2020 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BB93E3A1E03; Mon, 26 Oct 2020 10:57:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: rats@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: rats@ietf.org Message-ID: <160373503765.26087.6796865607217511838@ietfa.amsl.com> Date: Mon, 26 Oct 2020 10:57:17 -0700 Archived-At: Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 17:57:18 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Remote ATtestation ProcedureS WG of the IETF. Title : TPM-based Network Device Remote Integrity Verification Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-05.txt Pages : 43 Date : 2020-10-26 Abstract: This document describes a workflow for remote attestation of the integrity of firmware and software installed on network devices that contain Trusted Platform Modules [TPM1.2], [TPM2.0], as defined by the Trusted Computing Group (TCG). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-rats-tpm-based-network-device-attest/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-rats-tpm-based-network-device-attest-05 https://datatracker.ietf.org/doc/html/draft-ietf-rats-tpm-based-network-device-attest-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-rats-tpm-based-network-device-attest-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 26 13:55:52 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD3663A0F0C for ; Mon, 26 Oct 2020 13:55:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.6 X-Spam-Level: X-Spam-Status: No, score=-9.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=Udvgtvo8; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=W3NxLLWY Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V2cV3zWhKejS for ; Mon, 26 Oct 2020 13:55:49 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE6DE3A0F0F for ; Mon, 26 Oct 2020 13:55:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5031; q=dns/txt; s=iport; t=1603745749; x=1604955349; h=from:to:subject:date:message-id:mime-version; bh=FCSG/OdZHS3yjotc8+Up0jIUXpHcglLGUxLkrSmSjz4=; b=Udvgtvo8jTxuutq7YkjqDraRa9d6nx5QpxT6tdmzlmpZs5iOyWcCmx4e Jhbf0iOokmPbkTIRVjnmUgcr1CkvR2HCrcOdLQBfGeIlk0RsMNv2TFfSW O3u2/rlsfJ9QlKz1LzwxsqS8GpWmJr7YEvZFLVM4Fl9Ns6pWngEIJ5lyV 8=; IronPort-PHdr: =?us-ascii?q?9a23=3A784CQRVFn1EWkqNbf4AQatbKp0PV8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSBNyBufNJl+SQtLrvCiQM4peE5XYFdpEEFx?= =?us-ascii?q?oIkt4fkAFoBsmZQVb6I/jnY21ffoxCWVZp8mv9PR1TH8DzNFzfvnP06iQdSV?= =?us-ascii?q?3zMANvLbHzHYjfx828y+G1/cjVZANFzDqwaL9/NlO4twLU48IXmoBlbK02z0?= =?us-ascii?q?jE?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DvCADNNpdf/4ENJK1gHgE8DAILgWS?= =?us-ascii?q?BIy9RB3BZLywKhDKDSQOhUYRvgUKBEQNVCwEBAQ0BASMKAgQBAYRKGYF0AiU?= =?us-ascii?q?3Bg4CAwEBCwEBBQEBAQIBBgRthWEBC4YLCwYdAQE4EQEMDjACBDAXEAQ1gwQ?= =?us-ascii?q?BgX5NAy4BDplVAoE7iGh2gTKDBAEBBYEzARNBRIJPGIIQAwaBOIJygmASPEK?= =?us-ascii?q?GVxuCAIERJxyFZwIDAYEmARIBToJqM4IskD2DGYcUnSAKgmqIAoECi3mFfAM?= =?us-ascii?q?fg1CeDpM9inaRE4QvAgQCBAUCDgEBBYFqJGdwcBVlAYI+UBcCDZIQhRSFQnQ?= =?us-ascii?q?4AgYKAQEDCXyMOwGBEAEB?= X-IronPort-AV: E=Sophos;i="5.77,421,1596499200"; d="scan'208,217";a="608648575" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 26 Oct 2020 20:55:46 +0000 Received: from XCH-RCD-004.cisco.com (xch-rcd-004.cisco.com [173.37.102.14]) by alln-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id 09QKtktR020678 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 26 Oct 2020 20:55:46 GMT Received: from xhs-aln-003.cisco.com (173.37.135.120) by XCH-RCD-004.cisco.com (173.37.102.14) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 15:55:46 -0500 Received: from xhs-rcd-003.cisco.com (173.37.227.248) by xhs-aln-003.cisco.com (173.37.135.120) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 15:55:46 -0500 Received: from NAM12-MW2-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 26 Oct 2020 15:55:46 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ROL997z+aQEbdVnqu9tP6fBDvXBse2eQzqQf1HtQH/OZHAWLPByj2eK9CBRsSfJJC9jeGPR2t0taZsaegkPAcz7CmdV6eYRQGkuP7d9EDHVvFP4WbvfpM4bUKWiZmvD+Nq93LUV+ydJdZ+QAEtcAm5tJaW19yxdlGhLUcR6u8KDQTITKZfQH8cXF+TIpJ/8tLtU++O0cEDtoBwhLXLilze8uus5EFnCPRV+BC0kLbTQGWbm0nCF1clzHuGargjiMqWyEpCpv70XIbtiCqJUObPRRYceuYyA4DXytL2sEKx0IDJGAVkPdY+o6ZClKgPPje+BOErx07FdWkBdELDCiQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FCSG/OdZHS3yjotc8+Up0jIUXpHcglLGUxLkrSmSjz4=; b=nu1M86/aK46wwRitd0hJ/RWlElbOMPEIojj2KvgvVjPQp5D2kjecaVGQ7h1hxu+UvZ2ULx/hqKPiZn0yzlKMgx2jk3oo2dSRvLl+ArnhiyRxc3hSchty/Egqgkw/VjpyEFqcohSAbCl4XyEj9D/Vu25gScViYabrz4vvv0dEG12x0c7fm2Vk6lVDJQ+Cs1V9jArgTD07VvWQGFSgCFFdSkjGYgjDA0E03htGfuAKwNNSl98s6z/SD7u2LUMZht8NbSBCG/i8dXiGKYXFeAPuj77ga/+eNnGH6A/AsYOGCPKSPVktK7lFlmn9dr5GHg9S3TpfQDANScysCiUSz89U/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=FCSG/OdZHS3yjotc8+Up0jIUXpHcglLGUxLkrSmSjz4=; b=W3NxLLWYtbD2yUJWv8pEPF1I1hI9enxeuWsVqKXSInwL+LePUAsAjWPHHidyX6W+GWmD6vRI+pM6L4AveqQjZaxDL0XMmD5qqsy7CkazgOxFh4AtK97OsBimjRNz/BMQz/YtE0VtJflQlrGRoL4TFAe+iJnJI8HCMV1tTf9cpNY= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB2774.namprd11.prod.outlook.com (2603:10b6:a02:c1::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.22; Mon, 26 Oct 2020 20:55:45 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3477.028; Mon, 26 Oct 2020 20:55:45 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: WGLC and IPR updates for RATs Architecture draft Thread-Index: AQHWq9pf92tAUCaehEKQNe9DfVEk0w== Date: Mon, 26 Oct 2020 20:55:44 +0000 Message-ID: <48C10361-A1A6-460F-8BBF-BD4429DCCC2A@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1b.201012 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7dfbb74a-24ab-493e-14f8-08d879f18226 x-ms-traffictypediagnostic: BYAPR11MB2774: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 2EjWjaLIqkbW/zxXSTkulUMrDEoU/gAkhHnhfNu3iDY21HW4SCzOt/shdRsAvg0T+Uz32fjhvZEJ9Jxe7wDqqcSBIf+GXb0vZbu86gAHEdESGHHh1gsoGXeF28pgRgqaHONaGsljDMpQwqOIc4VrkakGn724PHH41PM/VZGhfDp7mE6NJU/sm6gGoH2u2vYtUETkLVyTNOVSjQ2BkGtMXS663dsvHzTTiXUm+Jw9g4zG70Bin9tH0H5sgapEcg+VblSEv9iyU4DYWKrhKY0y+tiQUOHWmfpprK0Ox6sNLmFyz7xHLQ9XnVoVSwqs+277kTZi29rwgeVEKXAnBtVGuY789RidR+GnZ9NIEStqiTvfqktZ4dgeAgggMM9fYHRwQAt6MK2odV6V1aFp1qqs9Q== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(376002)(396003)(346002)(366004)(136003)(39860400002)(91956017)(5660300002)(2616005)(71200400001)(76116006)(166002)(478600001)(83380400001)(66446008)(9326002)(66556008)(8936002)(4744005)(64756008)(66476007)(66946007)(6506007)(6486002)(36756003)(316002)(8676002)(2906002)(15650500001)(33656002)(966005)(26005)(86362001)(6916009)(186003)(6512007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: Conv5pMJYTX/+ppA+2MWgnKQa0YcyqnVCV9ZVzzU8+Ha+P+BR8gW6LLUFj4t5j9z92sfX4eUragQZClqZ3ZvXnQ3VcKPM/1GbPJmE/RS42L1rYbNNdqikylSBE7o6qTxkU9Ud4gilfo9+q3JwF852jNsPNauFlWYiTsQPrua1xaxkbge5WX8XboqmtH5fkAxqHVy0GNSB51V/yj47AnHSb4HUVkCuYeWZsOQMx1aatUZ3WxY3wjGDSi70l9jhpfrYLPI9Rg567LxelznrgJxg5C99H1mIRYtfJq/7Nz1N2OKyPtn2AKy8Aw0wKuLgPVuhVWFNIq8mWU2r8KIK4vQo4x254OGpUoakBEQvbOzZnvDPNaN01TyrKgmTuaZ6w5ExhC61T4NkLFq43EGpOgVH145l7EX8KUYvw9pdbPg+b90L9ymKsxwx6SF9ESZ5SzvZw/0skl2jDH8rugAJqOdkeZf2qIBHuN6bNon/7Ha4j1PsZsGmt8qsE6qZXVbLCYl/FFPnN+sV9Zy2/6OEdOZiVmbNHvOCGSuotRAwTPeBaXl/3b+ap03+/eEGW0Pz7UnKS0e5mCn7vusu/wf+RGS9bnD1bZK/LHaoVo3LwnEL8B2RglS5i3F5PSsFT1BYpxyGRmDuYIRSK7bd6BXYtDRGQ== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_48C10361A1A6460F8BBFBD4429DCCC2Aciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7dfbb74a-24ab-493e-14f8-08d879f18226 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 20:55:44.9298 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6wetH+YWJdfpzq9DT8dYepOwoX85/dhbjlymcZ9xD/sltOXeV2l5CgmQbJJysmptKT/p+J/gBt1SCCQqe/M1aA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB2774 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.14, xch-rcd-004.cisco.com X-Outbound-Node: alln-core-9.cisco.com Archived-At: Subject: [Rats] WGLC and IPR updates for RATs Architecture draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 20:55:51 -0000 --_000_48C10361A1A6460F8BBFBD4429DCCC2Aciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNClRoaXMgZW1haWwgaXMgdGhlIHN0YXJ0IG9mIGEgMyB3ZWVrIFdvcmtpbmcgR3Jv dXAgTGFzdCBDYWxsIGZvciB0aGUgUkFUcyBhcmNoaXRlY3R1cmUgZHJhZnQ6DQpodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLw0KDQpU aGUgV0dMQyB3aWxsIHJ1biB1bnRpbCBOb3YgMTYsIDIwMjAuDQoNClRoaXMgbm90aWNlIGlzIGFs c28gYSByZXF1ZXN0IGZvciBhbnkgZnVydGhlciB1bmRpc2Nsb3NlZCBJUFIgdGhhdCBhcHBsaWVz IHRvIHRoaXMgZHJhZnQgYmV5b25kIChodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci80 MTA2Lyk7IGFuZCBmb3IgdGhlIGF1dGhvcnMgdG8gY29uZmlybSB3aGV0aGVyIG9yIG5vdCB5b3Ug YXJlIGF3YXJlIG9mIGFueSByZWxldmFudCB1bmRpc2Nsb3NlZCBJUFIuDQoNClRoYW5rcywgTmFu Y3kNCg0KDQo= --_000_48C10361A1A6460F8BBFBD4429DCCC2Aciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5IZWxsbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPlRoaXMgZW1haWwgaXMgdGhlIHN0YXJ0IG9mIGEgMyB3ZWVrIFdvcmtpbmcgR3JvdXAgTGFz dCBDYWxsIGZvciB0aGUgUkFUcyBhcmNoaXRlY3R1cmUgZHJhZnQ6PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0 cy1hcmNoaXRlY3R1cmUvIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1p ZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLzwvYT4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdCI+VGhlIFdHTEMgd2lsbCBydW4gdW50aWwgTm92IDE2LCAyMDIwLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhpcyBub3RpY2UgaXMgYWxz byBhIHJlcXVlc3QgZm9yIGFueSBmdXJ0aGVyIHVuZGlzY2xvc2VkIElQUiB0aGF0IGFwcGxpZXMg dG8gdGhpcyBkcmFmdCBiZXlvbmQgKDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvaXByLzQxMDYvIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci80MTA2LzwvYT4p OyBhbmQgZm9yIHRoZSBhdXRob3JzDQogdG8gY29uZmlybSB3aGV0aGVyIG9yIG5vdCB5b3UgYXJl IGF3YXJlIG9mIGFueSByZWxldmFudCB1bmRpc2Nsb3NlZCBJUFIuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGFua3MsIE5hbmN5PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi41aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LjVpbiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_48C10361A1A6460F8BBFBD4429DCCC2Aciscocom_-- From nobody Mon Oct 26 14:05:37 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CA1C3A0F0E for ; Mon, 26 Oct 2020 14:05:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.101 X-Spam-Level: X-Spam-Status: No, score=-7.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UM6i6PPfAc8v for ; Mon, 26 Oct 2020 14:05:35 -0700 (PDT) Received: from out-21.smtp.github.com (out-21.smtp.github.com [192.30.252.204]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 452433A0E59 for ; Mon, 26 Oct 2020 14:05:35 -0700 (PDT) Received: from github.com (hubbernetes-node-1da13dc.ac4-iad.github.net [10.52.24.94]) by smtp.github.com (Postfix) with ESMTPA id 8A5DA52059D for ; Mon, 26 Oct 2020 14:05:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603746334; bh=EOiCirz6cN2oOUrCppOsRPw6crP/0mHJsG8ZjidOZtc=; h=Date:From:To:Subject:From; b=RT9V42tUKIBJyDo8wwUNPlrcQX/bZnwsMICdnF6uLyAp5ZbvFBxkKhAx6eWY7JSsC BiCcEnqY3RJPJE0wVABJ0WBdtksnS3RIGlBYkZ9kPN7xqIpnoYFSVqYwnfnlgDCtGm hP5BR9F2B7hD9TZg2GqUuF5C9nTCU7TDC9faUEDU= Date: Mon, 26 Oct 2020 14:05:34 -0700 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 638398: submods: UCCS, bstr wrapping, tagging rules X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 21:05:36 -0000 Branch: refs/heads/submod_update Home: https://github.com/ietf-rats-wg/eat Commit: 6383980515623282017a21bf0460d45288765e40 https://github.com/ietf-rats-wg/eat/commit/6383980515623282017a21bf0460d45288765e40 Author: Laurence Lundblade Date: 2020-10-26 (Mon, 26 Oct 2020) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- submods: UCCS, bstr wrapping, tagging rules From nobody Mon Oct 26 14:10:04 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F95B3A08FF; Fri, 16 Oct 2020 16:52:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bL4EC0q6YM2f; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) Received: from mail-qt1-x831.google.com (mail-qt1-x831.google.com [IPv6:2607:f8b0:4864:20::831]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C38A3A083A; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) Received: by mail-qt1-x831.google.com with SMTP id q26so2645305qtb.5; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CQCzTZesK0cV+tX0/ix+i3hCBdfcQ+R7buY2KfK0+vs=; b=cXG5HZnSpsuHsbx7UqRBuVTpaTP5L6cZm7DvwQEtcJUFZZ85DEdaZJdPbW+kEWD1oA iFpYIxCBskov4vFyMx0JihC5hcll/HxJ/op4UEexqHAlPk0jXPZiDvPw3j0IGAlqnQDM CDfEnFDHuO+lH0K04sMEz7q7YRrVhPrk5MprXwmdahpAIbGyeBifKhs6htdR2MsCXOCs FyLY3sbJ1OFXE2HfBbacIC/27NgKUoSl8YX330f8eLIdm7FlYLJA1SuN97ixon8ro+NI 8dt4pzU6yAu3PVXr593XRyjPhljiALNVe+aYoC/Ic2MqnJL+PscNUDRevvvaMLQM1WMm OZHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CQCzTZesK0cV+tX0/ix+i3hCBdfcQ+R7buY2KfK0+vs=; b=qolg7DfrnMGBqd2z2dk4YPjSFhWju9f6EWp1gdeKbOM9bMsTZx2MBWTnuh3+13FJg2 BNOiTvA67MDIwIEpqtMo0ycVmheZNlZz0O/Joc+dPrXRIIOC/WAT6ZYRdfF5qwsen+pz jidiQQkDjTe3TZZXq75LN4KCIOV4Hzkad11Fz0Zbbl+S8OI0lA+l/dRELZzJATFIl2bQ yLrncSV4ri7/8s5jTnKsLDNwJ2FdmKCzV7K/Y/6ZmJU7yMvQNrUimP351W7MTCtblEqe L9H1mUxMXBppZRRyzo/pbDFkira/35Y/fZjSc6V0fgTF3QMmr7OkvEAAwobVVKQJ6EEr xKnw== X-Gm-Message-State: AOAM5336XCt3YQLwds6bXEt5cUU2adlPPk+9TOuA/gOe5QdTut0W1pX7 7wAt6eW8Vj/yyPtnw6t1xkzIn0KySVbBSNqcPBR5eoFS X-Google-Smtp-Source: ABdhPJzej2ay3HGm0BdC3NkHspTRYwIWY1BwPKlaH/h5/wePuC8FaiOrC7y8LltV/KEK92BNh55UZ3GOJT2IVrCy1YY= X-Received: by 2002:ac8:3ac4:: with SMTP id x62mr5700471qte.347.1602892345337; Fri, 16 Oct 2020 16:52:25 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Raymond Mamattah Date: Fri, 16 Oct 2020 23:52:11 +0000 Message-ID: To: Carsten Bormann Cc: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org Content-Type: multipart/alternative; boundary="000000000000db6be205b1d27483" Archived-At: X-Mailman-Approved-At: Mon, 26 Oct 2020 14:10:03 -0700 Subject: Re: [Rats] [Din] Constrained Node/Network Cluster @ IETF109: DRAFT AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 23:52:29 -0000 --000000000000db6be205b1d27483 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Carsten, >From the draft agenda, I can see there are various exciting WG I would love to join. What is the process of joining the WG please. Regards, Raymond Mamattah Accra, Ghana https://www.linkedin.com/in/raymond-selorm-mamattah-02637610 On Fri, Oct 16, 2020, 11:42 PM Carsten Bormann wrote: > Here is my usual eclectic condensed agenda based on the DRAFT AGENDA > for IETF109. Remember that there is still quite some potential for > changes. > > The conflicts that meet the eye this time seem to impact generalists only= . > Great scheduling job! > > All times *on my agenda* are in UTC (the default page is UTC+0700). > https://datatracker.ietf.org/meeting/agenda-utc might be handy. > Note that both EU and US are on winter time (standard time) then. > > Gr=C3=BC=C3=9Fe, Carsten > > MONDAY, November 9, 2020 > > 0500-0700 Hackathon Kickoff > Rm 1 GEN hackathon Hackathon > > FRIDAY, November 13, 2020 > > 0500-0700 Hackathon Closing > Rm 1 GEN hackathon Hackathon > > MONDAY, November 16, 2020 > > 0500-0700 Session I > Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA > Rm 3 IRTF qirg Quantum Internet Research Group > Rm 5 RTG raw Reliable and Available Wireless WG > Rm 6 SEC *** lake Lightweight Authenticated Key Exchange WG > > 0730-0830 Session II > Rm 3 INT add Adaptive DNS Discovery WG > Rm 4 IRTF maprg Measurement and Analysis for Protocols > Rm 7 SEC *** cose CBOR Object Signing and Encryption WG > > 0900-1100 Session III > Rm 1 ART jsonpath JSON Path WG > Rm 6 SEC secdispatch Security Dispatch WG > Rm 7 TSV tsvwg Transport Area Working Group WG > > TUESDAY, November 17, 2020 > > 0500-0700 Session I > Rm 1 ART *** core Constrained RESTful Environments WG > Rm 2 INT 6man IPv6 Maintenance WG > Rm 7 SEC gnap Grant Negotiation and Authorization > Protocol WG > > 0730-0830 Session II > Rm 5 RTG babel Babel routing protocol WG > Rm 6 SEC tls Transport Layer Security WG > > 0900-1100 Session III > Rm 1 ART *** asdf A Semantic Definition Format for Data and > Interactions of Things WG > Rm 2 IRTF irtfopen IRTF Open Meeting > Rm 4 RTG apn Application-aware Networking BOF > Rm 7 SEC *** rats Remote ATtestation ProcedureS WG > > WEDNESDAY, November 18, 2020 > > 0500-0700 Session I > Rm 3 INT madinas MAC Address Device Identification for > Network and Application Services BOF > Rm 5 RTG bier Bit Indexed Explicit Replication WG > Rm 7 SEC *** ace Authentication and Authorization for > Constrained Environments WG > Rm 8 TSV quic QUIC WG > > 0730-0830 Session II > Rm 3 INT *** 6lo IPv6 over Networks of Resource-constraine= d > Nodes WG > Rm 4 INT *** drip Drone Remote ID Protocol WG > Rm 7 SEC *** teep Trusted Execution Environment Provisionin= g > WG > Rm 8 TSV tsvwg Transport Area Working Group WG > > THURSDAY, November 19, 2020 > > 0500-0700 Session I > Rm 3 IRTF coinrg Computing in the Network Research Group > Rm 7 SEC saag Security Area Open Meeting > > 0730-0830 Session II > Rm 1 ART *** cbor Concise Binary Object Representation > Maintenance and Extensions WG > Rm 2 INT intarea Internet Area Working Group WG > Rm 3 RTG detnet Deterministic Networking WG > Rm 5 SEC acme Automated Certificate Management > Environment WG > > 0900-1100 Session III > Rm 4 OPS v6ops IPv6 Operations WG > Rm 6 RTG *** roll Routing Over Low power and Lossy networks > WG > Rm 7 SEC mls Messaging Layer Security WG > Rm 8 SEC *** rats Remote ATtestation ProcedureS WG > > FRIDAY, November 20, 2020 > > 0500-0700 Session I > Rm 2 INT add Adaptive DNS Discovery WG > Rm 6 RTG rift Routing In Fat Trees WG > Rm 7 SEC emu EAP Method Update WG > > 0730-0830 Session II > Rm 1 ART httpapi Building Blocks for HTTP APIs WG > Rm 2 INT *** lwig Light-Weight Implementation Guidance WG > Rm 3 OPS anima Autonomic Networking Integrated Model and > Approach WG > Rm 6 SEC *** suit Software Updates for Internet of Things W= G > Rm 7 TSV tsvarea Transport Area Open Meeting > > 0900-1100 Session III > Rm 1 ART *** core Constrained RESTful Environments WG > Rm 2 INT 6man IPv6 Maintenance WG > Rm 4 IRTF cfrg Crypto Forum > Rm 7 TSV masque Multiplexed Application Substrate over > QUIC Encryption WG > > > _______________________________________________ > Din mailing list > Din@irtf.org > https://www.irtf.org/mailman/listinfo/din > --000000000000db6be205b1d27483 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi=C2=A0Carsten,

From the draft agenda, I can see there are various exciting WG I would= love to join.

What is t= he process of joining the WG please.

On Fri, O= ct 16, 2020, 11:42 PM Carsten Bormann <c= abo@tzi.org> wrote:
Here is = my usual eclectic condensed agenda based on the DRAFT AGENDA
for IETF109.=C2=A0 Remember that there is still quite some potential for changes.

The conflicts that meet the eye this time seem to impact generalists only.<= br> Great scheduling job!

All times *on my agenda* are in UTC (the default page is UTC+0700).
https://datatracker.ietf.org/meeting/agend= a-utc might be handy.
Note that both EU and US are on winter time (standard time) then.

Gr=C3=BC=C3=9Fe, Carsten

MONDAY, November 9, 2020

0500-0700=C2=A0 Hackathon Kickoff
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 GEN=C2=A0 =C2=A0 =C2=A0hackat= hon=C2=A0 =C2=A0 =C2=A0 =C2=A0Hackathon

FRIDAY, November 13, 2020

0500-0700=C2=A0 Hackathon Closing
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 GEN=C2=A0 =C2=A0 =C2=A0hackat= hon=C2=A0 =C2=A0 =C2=A0 =C2=A0Hackathon

MONDAY, November 16, 2020

0500-0700=C2=A0 Session I
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0dispat= ch=C2=A0 =C2=A0 =C2=A0 =C2=A0 Dispatch WG - Joint with ARTAREA
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 qirg=C2=A0 = =C2=A0 Quantum Internet Research Group
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0raw=C2= =A0 =C2=A0 =C2=A0Reliable and Available Wireless WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** lake=C2=A0 =C2=A0 Lig= htweight Authenticated Key Exchange WG

0730-0830=C2=A0 Session II
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0add=C2= =A0 =C2=A0 =C2=A0Adaptive DNS Discovery WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 maprg=C2=A0= =C2=A0Measurement and Analysis for Protocols
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** cose=C2=A0 =C2=A0 CBO= R Object Signing and Encryption WG

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0jsonpa= th=C2=A0 =C2=A0 =C2=A0 =C2=A0 JSON Path WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0secdis= patch=C2=A0 =C2=A0 =C2=A0Security Dispatch WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvwg= =C2=A0 =C2=A0Transport Area Working Group WG

TUESDAY, November 17, 2020

0500-0700=C2=A0 Session I
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** core=C2=A0 =C2=A0 Con= strained RESTful Environments WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A06man= =C2=A0 =C2=A0 IPv6 Maintenance WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0gnap= =C2=A0 =C2=A0 Grant Negotiation and Authorization Protocol WG

0730-0830=C2=A0 Session II
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0babel= =C2=A0 =C2=A0Babel routing protocol WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0tls=C2= =A0 =C2=A0 =C2=A0Transport Layer Security WG

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** asdf=C2=A0 =C2=A0 A S= emantic Definition Format for Data and Interactions of Things WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 irtfopen=C2= =A0 =C2=A0 =C2=A0 =C2=A0 IRTF Open Meeting
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0apn=C2= =A0 =C2=A0 =C2=A0Application-aware Networking BOF
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** rats=C2=A0 =C2=A0 Rem= ote ATtestation ProcedureS WG

WEDNESDAY, November 18, 2020

0500-0700=C2=A0 Session I
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0madina= s MAC Address Device Identification for Network and Application Services BO= F
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0bier= =C2=A0 =C2=A0 Bit Indexed Explicit Replication WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** ace=C2=A0 =C2=A0 =C2= =A0Authentication and Authorization for Constrained Environments WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0quic= =C2=A0 =C2=A0 QUIC WG

0730-0830=C2=A0 Session II
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** 6lo=C2=A0 =C2=A0 =C2= =A0IPv6 over Networks of Resource-constrained Nodes WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** drip=C2=A0 =C2=A0 Dro= ne Remote ID Protocol WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** teep=C2=A0 =C2=A0 Tru= sted Execution Environment Provisioning WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvwg= =C2=A0 =C2=A0Transport Area Working Group WG

THURSDAY, November 19, 2020

0500-0700=C2=A0 Session I
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 coinrg=C2= =A0 Computing in the Network Research Group
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0saag= =C2=A0 =C2=A0 Security Area Open Meeting

0730-0830=C2=A0 Session II
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** cbor=C2=A0 =C2=A0 Con= cise Binary Object Representation Maintenance and Extensions WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0intare= a Internet Area Working Group WG
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0detnet= =C2=A0 Deterministic Networking WG
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0acme= =C2=A0 =C2=A0 Automated Certificate Management Environment WG

0900-1100=C2=A0 Session III
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 OPS=C2=A0 =C2=A0 =C2=A0v6ops= =C2=A0 =C2=A0IPv6 Operations WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG *** roll=C2=A0 =C2=A0 Rou= ting Over Low power and Lossy networks WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0mls=C2= =A0 =C2=A0 =C2=A0Messaging Layer Security WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** rats=C2=A0 =C2=A0 Rem= ote ATtestation ProcedureS WG

FRIDAY, November 20, 2020

0500-0700=C2=A0 Session I
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0add=C2= =A0 =C2=A0 =C2=A0Adaptive DNS Discovery WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0rift= =C2=A0 =C2=A0 Routing In Fat Trees WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0emu=C2= =A0 =C2=A0 =C2=A0EAP Method Update WG

0730-0830=C2=A0 Session II
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0httpap= i Building Blocks for HTTP APIs WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** lwig=C2=A0 =C2=A0 Lig= ht-Weight Implementation Guidance WG
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 OPS=C2=A0 =C2=A0 =C2=A0anima= =C2=A0 =C2=A0Autonomic Networking Integrated Model and Approach WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** suit=C2=A0 =C2=A0 Sof= tware Updates for Internet of Things WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvare= a Transport Area Open Meeting

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** core=C2=A0 =C2=A0 Con= strained RESTful Environments WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A06man= =C2=A0 =C2=A0 IPv6 Maintenance WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 cfrg=C2=A0 = =C2=A0 Crypto Forum
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0masque= =C2=A0 Multiplexed Application Substrate over QUIC Encryption WG


_______________________________________________
Din mailing list
Din@ir= tf.org
https://www.irtf.org/mailman/listinfo/din
--000000000000db6be205b1d27483-- From nobody Mon Oct 26 14:10:08 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DDBD3A0E7F for ; Mon, 26 Oct 2020 12:55:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H5=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=tlZerWhd; dkim=pass (1024-bit key) header.d=juniper.net header.b=Je1zx4c5 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U59WNMrQMO34 for ; Mon, 26 Oct 2020 12:55:28 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 827403A0E83 for ; Mon, 26 Oct 2020 12:55:28 -0700 (PDT) Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 09QJrQ8Q000690; Mon, 26 Oct 2020 12:55:21 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=k77AiB2qylRHwLAj7VMaYmJExYML9L4GfMUDHdrHS74=; b=tlZerWhdWo73Swl4vCp127wd8y6wt081YkvhVWLGwTFmos/YASMHA4R/4E22bFlLu6ic OtNBw1wEFQzhkirncmm+reklqGq1mZcyAAWvAv7L2bxgsqfoIO2GSbPTyghfIKZB9yGx brf3Gzy8WJwaslm/u4kSaY6dNd7oDQtYwUVg+wqeHDjNdKVWqj23u40GRMrH+osWzEf+ voBdsbuNObQ8p4v1AGxW2+OKgGry8lJbDNy4BO+ycs8wWX8FEfbqdmBKqUNSa5DUlmb5 lTGWN0G0/qV/ElUO9kC5VgFZ7aX1M1eQAdLjCfi2/dROyPB+xErvDj/0fyCaY81BKGa1 9g== Received: from nam11-dm6-obe.outbound.protection.outlook.com (mail-dm6nam11lp2174.outbound.protection.outlook.com [104.47.57.174]) by mx0b-00273201.pphosted.com with ESMTP id 34ckcxb1y7-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 26 Oct 2020 12:55:21 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Bs5A7FRxdngmkExYKaDEsClUUTfoMVcZWDxu4YB2YIv5qvi/A4aBWccg5BJegvwOEMEpnqtw7DNJevglru7c0DoTeDRbgi7sWlSdtM+Zy9m1zTVWZ8/TlQi40TxxyREtFGy95Obif555uPlWokKrqxQP/A/mSfGbmIOajgLkSPxSwheV0CnoBy2V+ocVPNCGc5r9vfIpw5/60us1QailYWy0z24oAW0D/sOpbwCdwBEakYAYTq0zzfwQeC9dQ6VLBnIaneWFuoVzFCTALXx9TxwGdjmH8CzLszgBCs2EPW1dy4Sz7eNT4W93Lg+sRD++ozfmGpsY1YL3Xpqe0FP4LA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=k77AiB2qylRHwLAj7VMaYmJExYML9L4GfMUDHdrHS74=; b=lYzdRXEWFLE6oJ0aSqE4ARsatmQmvOjJD/nJxmIdIzSPpb4LCL0S3wbR5lFAvM+JQNBIY2xf9ToQU31Fwp7KOxEjL6yURDzq6V3XcYO9gmKfIjpCaKDhHjxrl/PYRjDcc+/DYTjknKmL0MLrZyy7Flx8pzWcjIRw0di993UUzvrZOcWaByqZu8s+lJ42+nz8szEz6dtzAwcLYrT2dEGb4rOlMG/fZnwnxV1b0Ac7p5ZBBVEXyXdFnsFv6ftxaTvkiqg5OVaw7SeWcCAMC0PV00Ourz5btMWWch40JqHZLPUqPR0N19M1HVixjlBogUHfmL/9I7+VLto3V8o4xFHkAA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=k77AiB2qylRHwLAj7VMaYmJExYML9L4GfMUDHdrHS74=; b=Je1zx4c5mSvCe/TKI8PsFP1XQo7EwkUBXd+koex972s8W+w8i/9qKFP1Ob2S+qog5Qc8+YiD1PtoAzNcYA0JCrs4N72lUDbI7fT0kCu3sAyB7vX4L9ABcy6PwWOupVNBlEM4LFhP2oz0U8k5TBpKebgjGkaaaW5Z8QZ0ZAsQXeM= Received: from BLAPR05MB7378.namprd05.prod.outlook.com (2603:10b6:208:298::10) by BLAPR05MB7489.namprd05.prod.outlook.com (2603:10b6:208:287::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.4; Mon, 26 Oct 2020 19:55:17 +0000 Received: from BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600]) by BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600%3]) with mapi id 15.20.3499.017; Mon, 26 Oct 2020 19:55:17 +0000 From: Guy Fedorkow To: Henk Birkholz , Dave Thaler , "Smith, Ned" , "Panwei (William)" , Mark Baushke , Ira McDonald , "Bill Sulzen (bsulzen)" CC: Jessica Fitzgerald-McKay , "Eric Voit (evoit)" , "rats@ietf.org" , "Nancy Cam-Winget (ncamwing)" Thread-Topic: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt Thread-Index: AQHWq8F7YsqzDldsd0e0zdGQRheW7amqSnEA Date: Mon, 26 Oct 2020 19:55:17 +0000 Message-ID: References: <160373503765.26087.6796865607217511838@ietfa.amsl.com> In-Reply-To: <160373503765.26087.6796865607217511838@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-26T19:55:15Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c713eb96-e3c5-4c69-ab86-9c25b19547e7; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: sit.fraunhofer.de; dkim=none (message not signed) header.d=none;sit.fraunhofer.de; dmarc=none action=none header.from=juniper.net; x-originating-ip: [24.61.11.4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 73fcd53f-b5ec-4424-ed40-08d879e91009 x-ms-traffictypediagnostic: BLAPR05MB7489: x-ld-processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr,ExtFwd x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: sIru0i6dBejnHnoP+f0bBUrH8QadEbnbTbgr9fa/suF0iaIlXxP/Gf+L0WbLtJkIDGoYylQZ7IwWwE8aDvs92b9PYZPGABw6/ymmuicWnMgwD7GdbvlnRSekZItK5/tIoCKJT7RX6RESmmtVnO473ZGyT9JEaHZL9BbYceD9ht+NKj8asVXQx13BRe2v+U0NY3geAzPveRdDhVvs0OuKfC4wv8bSRkGjyo1a60C4M0CKZfUdpKhfTIluEZvSMBwM/hfHyzVKJofNzYpNrFUNk3zkWgt/ehxPz8DNMwNaNhluqcO/Mivs7C5RZ37QfFVmpi/4r3H/ua79BA1vfJv881weiuHX8fr3DNBoKo1T0blmQL8/d2tR/vKB32XsOMt9XIlsFv4/n4GslXp+L6Svhw== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BLAPR05MB7378.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(396003)(39860400002)(346002)(366004)(376002)(52536014)(5660300002)(186003)(55016002)(26005)(53546011)(9686003)(4001150100001)(7696005)(76116006)(6506007)(71200400001)(66574015)(7416002)(66556008)(83380400001)(66946007)(4326008)(64756008)(86362001)(66476007)(66446008)(8676002)(110136005)(33656002)(2906002)(8936002)(316002)(478600001)(966005)(54906003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: a02DgJx6YSSpFKJRKhnudT0CjvnsGBbIurx2wtWUSsodyhT4xfUD1ietyExhHOrVvbwH6NiD85hOpHQZdRVXuHtpDLOMHrHl4QrDSo69u/DWwBMdCZRGUtriWyHoDPi5IQIhpD0195CGHbs74d+JdA/p02B2W/IDn/GXCccDUnAfDbk0bmx8uikoCi2vFfZL9VC/X9J9dCJOtThb7ov5W9kTHCwV8hcD5RE5HePP57fmcP6Im3JVZQGfl0xekyvlHnVsKvfCV7wKcOzcbnoDyFqa0nXaFkUvq5sKJdmzdlO2JZNg7HauOw1qmNeZ3owELpFStuYqBuW1QdL167qSukNK8QPFeEyGwQDvFbkTz3/v64mVADS38/XSl42sR7+AZJGtCHXIVfhqvI37S3unl+pJRCpQZ6T8xShWIDRhOQUNfaJEx5yzPCl0pYZ/O2ripR9+1rDI9GB70dEWKGmh7vj2VFaf63YLsaUyu8sYBC9BhfIHQP0rLqGQSAUlA8vU5pFYnYWhmj1l0K2x356XkLhNB0G1D7bmCTW2TwyDPVagvgmUYg9p77wMQukL9O7Pz9o3SxbLGKEVVEOwVvfdj+gb1+KpsrnfbtDV6KSY8f/sah0+3SCon1Urfj0R//VOsKXK4gcMyQJij+c2WXbjJw== Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BLAPR05MB7378.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 73fcd53f-b5ec-4424-ed40-08d879e91009 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 19:55:17.4052 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: VzTrkD5v1TooECnqSY9E/HJDKbCRTec5BHnjKFPFMq3ZmZaZ8BHeTocolk75OOAjkTjDJ7u57VGB8y2F22witw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR05MB7489 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.737 definitions=2020-10-26_14:2020-10-26, 2020-10-26 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 lowpriorityscore=0 adultscore=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 spamscore=0 mlxscore=0 clxscore=1011 mlxlogscore=999 bulkscore=0 impostorscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010260131 Archived-At: X-Mailman-Approved-At: Mon, 26 Oct 2020 14:10:03 -0700 Subject: [Rats] FW: I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 19:55:30 -0000 Greetings colleagues, I've checked in the -05 version of the RATS RIV speci= fication. As far as I know, this version addresses all the comments from W= G Last Call, plus others from earlier reviewers. Please take a look, and if your remark wasn't addressed properly, let me = know and I'll correct the corrections. And of course if anyone spots colla= teral damage, please point it out! Thanks all /guy Juniper Business Use Only -----Original Message----- From: RATS On Behalf Of internet-drafts@ietf.org Sent: Monday, October 26, 2020 1:57 PM To: i-d-announce@ietf.org Cc: rats@ietf.org Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest= -05.txt [External Email. Be cautious of content] A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Remote ATtestation ProcedureS WG of the IE= TF. Title : TPM-based Network Device Remote Integrity Verific= ation Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-0= 5.txt Pages : 43 Date : 2020-10-26 Abstract: This document describes a workflow for remote attestation of the integrity of firmware and software installed on network devices that contain Trusted Platform Modules [TPM1.2], [TPM2.0], as defined by the Trusted Computing Group (TCG). The IETF datatracker status page for this draft is: https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-rat= s-tpm-based-network-device-attest/__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmW= RtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7HIYHiPg$ There are also htmlized versions available at: https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-rats-tpm= -based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmWRtP= HcbBhAin0NFydKucXTTIvEY_o6fkG1_i74K3PRzY$ https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-iet= f-rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57Kkg= R_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7EVVqwYo$ A diff from the previous version is available at: https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-= rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_= -lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7CSmkfSE$ Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!!NEt6yMa= O-gk!TB2y-zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i71-Q1Ydk$ _______________________________________________ RATS mailing list RATS@ietf.org https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/rats__;!!= NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7w-w= SnkI$ From nobody Mon Oct 26 14:10:11 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C91083A0F0E for ; Mon, 26 Oct 2020 14:04:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.601 X-Spam-Level: X-Spam-Status: No, score=-9.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=kHpIQ/lP; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=0cSiLnjR Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y_kUAEHBVesZ for ; Mon, 26 Oct 2020 14:04:34 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0876C3A0E59 for ; Mon, 26 Oct 2020 14:04:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5014; q=dns/txt; s=iport; t=1603746274; x=1604955874; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7ka08uxvXUdMm2PyHSzHS88zbIPMAAh6ONplFW7njug=; b=kHpIQ/lPpblD8l1X0zFeQgccTjFWqJ2DZJIu9CZo9fb0wN7oZEbo9j3V INacj70Ojhuqj2gcM1tp9P8pdTdhp2pRfId7kT5F2nVbVZc+BmQrVNA7p LVFmQzcK1gRzx3OXeGjy6FtNMpfG9MAcB5w5qqrv344oa2kt+W7wenq3Y w=; IronPort-PHdr: =?us-ascii?q?9a23=3AzZ67LhbIiSaxWw5RWheTrOX/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el21QaZD4fG7fNchvCQta38CiQM4peE5XYFdpEEFx?= =?us-ascii?q?oIkt4fkAFoBsmZQVb6I/jnY21ffoxCWVZp8mv9PR1TH8DzNF/PpHyq4CRUHB?= =?us-ascii?q?jjZkJ5I+3vEdvUiMK6n+m555zUZVBOgzywKbN/JRm7t0PfrM4T1IBjMa02jB?= =?us-ascii?q?DOpyhF?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CpBQDLOJdf/4YNJK1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQFAgU+BUlEHcFkvLAqEMoNJA40gJph6gUKBEQNVCwEBAQ0BARg?= =?us-ascii?q?IDQIEAQGBVYJ1AheBdAIlOBMCAwEBCwEBBQEBAQIBBgRthWEMhXIBAQEEAQE?= =?us-ascii?q?QEREMAQEsCwELBAIBCA4DBAEBAwImAgICJQsVCAgCBAENBSKDBAGCSwMuAQ6?= =?us-ascii?q?ZXwKBO4hodoEygwQBAQWBR0GDEhiBdhoJgQ4qgnKDcIJEhBMbggCBEScMEIJ?= =?us-ascii?q?NPoJcAQECAQEVgREBEgEhF4MAM4Iskxg+pDQKgmqJBJF1Ax+DF4EqiGMFlDW?= =?us-ascii?q?GBY04inaVQgIEAgQFAg4BAQWBayNncHAVGiEqAYI+CUcXAg2OH4NxhRSFCQE?= =?us-ascii?q?4dAI2AgYBCQEBAwl8jDsBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.77,421,1596499200"; d="scan'208";a="590780433" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 26 Oct 2020 21:04:32 +0000 Received: from XCH-RCD-002.cisco.com (xch-rcd-002.cisco.com [173.37.102.12]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id 09QL4Wgl032135 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 26 Oct 2020 21:04:32 GMT Received: from xhs-rcd-003.cisco.com (173.37.227.248) by XCH-RCD-002.cisco.com (173.37.102.12) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 16:04:32 -0500 Received: from xhs-aln-002.cisco.com (173.37.135.119) by xhs-rcd-003.cisco.com (173.37.227.248) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 16:04:32 -0500 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (173.37.151.57) by xhs-aln-002.cisco.com (173.37.135.119) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 26 Oct 2020 16:04:32 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WGSfKp6LzNIm3mXYaYhYxxuoYfPX1TVAVUpUvbXMTqfx4aQnp52+CCZsh/I2t1sKcOvi5tQ6kKmhpM77TbgS+lMhi3duSY2ue0cgtfyEvAQ1sqA9yigTNKKOchKSE7VSx/XWY5o8zVo0g81GwNxHz8abJMDs/gP1W1BHAvyqR0GXlltLynabPt4cxk6kshCzYZsI2xsQW+RkUSb+pfe40BoBPS0MJL+acgSuWiLHUDPS7zc/hSY6FRCX/OlCR23XWNxY2ppRBk9NpyDnxzBd5Va3iipqEoMosWnwSoVM0lUynAxKb+BeVBJqYWXptncm8ZPQt+MWXqX0vlDpqtUnzw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7ka08uxvXUdMm2PyHSzHS88zbIPMAAh6ONplFW7njug=; b=Q2mjJorZjvVXlu8P2CHpDcTy3zx5qm1tDw+SbJCbcP9U4FXDxqt3mhncNVsvOWSjILmvnR8hv2/w30InJ2Qkxj4204Vj99sIYYG1cvxCtPM6ZMQSl5K01Q4wWl+O/WJYYW7frC7JyxKXHRshM1K8JQPS7V97vkeOIU/v45QM16Fv8YyuyR5+dfkihaVWYEZ+tl1kstg7MO3p567wz32rahmc2zF889JXyjJzE2oNDt4pYG2eYsJDlD59V7aV8mVxFDI81Esa2WtF7wlK9FD7hH3ZxToQJD71N3PIVKehWsJfBX34NG5zfyUTWw1mpTqblnQQOC0ubYlVIOExF0YjUg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7ka08uxvXUdMm2PyHSzHS88zbIPMAAh6ONplFW7njug=; b=0cSiLnjRt+T/aDH0h/EYEEEgdc7Hr/3Ix6xTaX83+gW7aOBHN+XuMNML0mN320HiZphUlILl+FNFG0fzfIcl5ATHjWeDSDguZzKQiOlj7K870QyYDp+jUyQVnPeh4aBIeoQwhFmk6nPcWNolCSeVHqFylF0sQc4j/3SzNvhgjO8= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB3365.namprd11.prod.outlook.com (2603:10b6:a03:7e::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.27; Mon, 26 Oct 2020 21:04:27 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3477.028; Mon, 26 Oct 2020 21:04:27 +0000 From: "Nancy Cam-Winget (ncamwing)" To: Guy Fedorkow , Henk Birkholz , Dave Thaler , "Smith, Ned" , "Panwei (William)" , Mark Baushke , Ira McDonald , "Bill Sulzen (bsulzen)" CC: Jessica Fitzgerald-McKay , "Eric Voit (evoit)" , "rats@ietf.org" Thread-Topic: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt Thread-Index: AQHWq8GQITkCsaDsh0mSLCIxDC6kxamqTFeA//+cJgA= Date: Mon, 26 Oct 2020 21:04:27 +0000 Message-ID: <25ABB469-D112-4592-BF13-C56F4725D6AB@cisco.com> References: <160373503765.26087.6796865607217511838@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1b.201012 authentication-results: juniper.net; dkim=none (message not signed) header.d=none;juniper.net; dmarc=none action=none header.from=cisco.com; x-originating-ip: [72.163.2.231] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: bab1a581-a453-4841-9069-08d879f2b965 x-ms-traffictypediagnostic: BYAPR11MB3365: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: XR/+VHg00486sFcw3MUKzoBRDMC2CcWhCf5zRS0HFyC0UWEO0jJ1RRLQKy9B+ZaividZpfYMFY4+4hVxq6jYt5Fuy+NhzVkcR1uc71hk6ApItBqO91iiyZ0VwMrp/Fk21JDB5l6jRsVdI6ObrqmTC3jImPDSYIMNma7oOSFJd6w3I/netfCCZZomYL3XFt5AoxG8VR2UTC3L1ObNtQgyAg+lrvC5jVz/kzsKnmh3h8GV7m3kW/inBveLYjvAsKGJRg88xS5PoHOctioLO4pAPx89lI5LpM6G2rTiouO3eYyfDn+Cro6664WnwauZOUkdFPff+Sp1Q73uOBhPH5r803p2M761OL08r50EKD/AuwwBMtCpgENi17JPJlopZF49DzxF7Jv1s53h+8nUCvcpQA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(136003)(346002)(376002)(366004)(396003)(6512007)(26005)(86362001)(36756003)(4326008)(66946007)(2616005)(478600001)(110136005)(8936002)(6486002)(54906003)(316002)(76116006)(53546011)(66476007)(186003)(2906002)(91956017)(6506007)(5660300002)(66574015)(71200400001)(66446008)(64756008)(66556008)(6636002)(8676002)(4001150100001)(83380400001)(966005)(33656002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: text/plain; charset="utf-8" Content-ID: <4254C7D1CF658C4488B53A1650555531@namprd11.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: bab1a581-a453-4841-9069-08d879f2b965 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 21:04:27.1553 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: AVpyRqbwYmF885hyLtwbjLd8ndiCkjoY46O8FsiRNeCevu+QpKp29w5m7vB2aKW4ml8+sFmfQY8NuKLEJCAfVA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB3365 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.12, xch-rcd-002.cisco.com X-Outbound-Node: alln-core-12.cisco.com Archived-At: X-Mailman-Approved-At: Mon, 26 Oct 2020 14:10:02 -0700 Subject: Re: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 21:04:36 -0000 SGkgUkFUcyBwYXJ0aWNpcGFudHMgYW5kIGF1dGhvcnMgb2YgdGhlIGRyYWZ0LWlldGYtcmF0cy10 cG0tYmFzZWQtbmV0d29yay1kZXZpY2UtYXR0ZXN0ICBkb2N1bWVudCwNCg0KQ2FuIHlvdSBhbHNv IHBsZWFzZSBjb25maXJtIHdoZXRoZXIgb3Igbm90IHlvdSBhcmUgYXdhcmUgb2YgYW55IHJlbGV2 YW50IHVuZGlzY2xvc2VkIElQUiB0aGF0IG1heSBhcHBseSB0byB0aGlzIGRyYWZ0Pw0KDQpUaGFu a3MsIE5hbmN5DQoNCu+7v09uIDEwLzI2LzIwLCAxMjo1NiBQTSwgIkd1eSBGZWRvcmtvdyIgPGdm ZWRvcmtvd0BqdW5pcGVyLm5ldD4gd3JvdGU6DQoNCiAgICBHcmVldGluZ3MgY29sbGVhZ3Vlcywg SSd2ZSBjaGVja2VkIGluIHRoZSAtMDUgdmVyc2lvbiBvZiB0aGUgUkFUUyBSSVYgc3BlY2lmaWNh dGlvbi4gIEFzIGZhciBhcyBJIGtub3csIHRoaXMgdmVyc2lvbiBhZGRyZXNzZXMgYWxsIHRoZSBj b21tZW50cyBmcm9tIFdHIExhc3QgQ2FsbCwgcGx1cyBvdGhlcnMgZnJvbSBlYXJsaWVyIHJldmll d2Vycy4NCiAgICAgIFBsZWFzZSB0YWtlIGEgbG9vaywgYW5kIGlmIHlvdXIgcmVtYXJrIHdhc24n dCBhZGRyZXNzZWQgcHJvcGVybHksIGxldCBtZSBrbm93IGFuZCBJJ2xsIGNvcnJlY3QgdGhlIGNv cnJlY3Rpb25zLiAgQW5kIG9mIGNvdXJzZSBpZiBhbnlvbmUgc3BvdHMgY29sbGF0ZXJhbCBkYW1h Z2UsIHBsZWFzZSBwb2ludCBpdCBvdXQhDQogICAgICBUaGFua3MgYWxsDQogICAgL2d1eQ0KICAg IA0KICAgIA0KICAgIA0KICAgIEp1bmlwZXIgQnVzaW5lc3MgVXNlIE9ubHkNCiAgICANCiAgICAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KICAgIEZyb206IFJBVFMgPHJhdHMtYm91bmNlc0Bp ZXRmLm9yZz4gT24gQmVoYWxmIE9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZw0KICAgIFNlbnQ6 IE1vbmRheSwgT2N0b2JlciAyNiwgMjAyMCAxOjU3IFBNDQogICAgVG86IGktZC1hbm5vdW5jZUBp ZXRmLm9yZw0KICAgIENjOiByYXRzQGlldGYub3JnDQogICAgU3ViamVjdDogW1JhdHNdIEktRCBB Y3Rpb246IGRyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQtbmV0d29yay1kZXZpY2UtYXR0ZXN0LTA1 LnR4dA0KICAgIA0KICAgIFtFeHRlcm5hbCBFbWFpbC4gQmUgY2F1dGlvdXMgb2YgY29udGVudF0N CiAgICANCiAgICANCiAgICBBIE5ldyBJbnRlcm5ldC1EcmFmdCBpcyBhdmFpbGFibGUgZnJvbSB0 aGUgb24tbGluZSBJbnRlcm5ldC1EcmFmdHMgZGlyZWN0b3JpZXMuDQogICAgVGhpcyBkcmFmdCBp cyBhIHdvcmsgaXRlbSBvZiB0aGUgUmVtb3RlIEFUdGVzdGF0aW9uIFByb2NlZHVyZVMgV0cgb2Yg dGhlIElFVEYuDQogICAgDQogICAgICAgICAgICBUaXRsZSAgICAgICAgICAgOiBUUE0tYmFzZWQg TmV0d29yayBEZXZpY2UgUmVtb3RlIEludGVncml0eSBWZXJpZmljYXRpb24NCiAgICAgICAgICAg IEF1dGhvcnMgICAgICAgICA6IEd1eSBGZWRvcmtvdw0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgRXJpYyBWb2l0DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKZXNzaWNhIEZp dHpnZXJhbGQtTWNLYXkNCiAgICAgICAgICAgIEZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYt cmF0cy10cG0tYmFzZWQtbmV0d29yay1kZXZpY2UtYXR0ZXN0LTA1LnR4dA0KICAgICAgICAgICAg UGFnZXMgICAgICAgICAgIDogNDMNCiAgICAgICAgICAgIERhdGUgICAgICAgICAgICA6IDIwMjAt MTAtMjYNCiAgICANCiAgICBBYnN0cmFjdDoNCiAgICAgICBUaGlzIGRvY3VtZW50IGRlc2NyaWJl cyBhIHdvcmtmbG93IGZvciByZW1vdGUgYXR0ZXN0YXRpb24gb2YgdGhlDQogICAgICAgaW50ZWdy aXR5IG9mIGZpcm13YXJlIGFuZCBzb2Z0d2FyZSBpbnN0YWxsZWQgb24gbmV0d29yayBkZXZpY2Vz IHRoYXQNCiAgICAgICBjb250YWluIFRydXN0ZWQgUGxhdGZvcm0gTW9kdWxlcyBbVFBNMS4yXSwg W1RQTTIuMF0sIGFzIGRlZmluZWQgYnkNCiAgICAgICB0aGUgVHJ1c3RlZCBDb21wdXRpbmcgR3Jv dXAgKFRDRykuDQogICAgDQogICAgDQogICAgVGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBh Z2UgZm9yIHRoaXMgZHJhZnQgaXM6DQogICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy10cG0tYmFzZWQt bmV0d29yay1kZXZpY2UtYXR0ZXN0L19fOyEhTkV0NnlNYU8tZ2shVEIyeS16bjZsNmNBNTdLa2dS Xy1sZ21XUnRQSGNiQmhBaW4wTkZ5ZEt1Y1hUVEl2RVlfbzZma0cxX2k3SElZSGlQZyQNCiAgICAN CiAgICBUaGVyZSBhcmUgYWxzbyBodG1saXplZCB2ZXJzaW9ucyBhdmFpbGFibGUgYXQ6DQogICAg aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5ldHdvcmstZGV2aWNlLWF0dGVzdC0wNV9fOyEhTkV0 NnlNYU8tZ2shVEIyeS16bjZsNmNBNTdLa2dSXy1sZ21XUnRQSGNiQmhBaW4wTkZ5ZEt1Y1hUVEl2 RVlfbzZma0cxX2k3NEszUFJ6WSQNCiAgICBodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1pZXRmLXJhdHMtdHBtLWJh c2VkLW5ldHdvcmstZGV2aWNlLWF0dGVzdC0wNV9fOyEhTkV0NnlNYU8tZ2shVEIyeS16bjZsNmNB NTdLa2dSXy1sZ21XUnRQSGNiQmhBaW4wTkZ5ZEt1Y1hUVEl2RVlfbzZma0cxX2k3RVZWcXdZbyQN CiAgICANCiAgICBBIGRpZmYgZnJvbSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUg YXQ6DQogICAgaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi8vd3d3LmlldGYub3Jn L3JmY2RpZmY/dXJsMj1kcmFmdC1pZXRmLXJhdHMtdHBtLWJhc2VkLW5ldHdvcmstZGV2aWNlLWF0 dGVzdC0wNV9fOyEhTkV0NnlNYU8tZ2shVEIyeS16bjZsNmNBNTdLa2dSXy1sZ21XUnRQSGNiQmhB aW4wTkZ5ZEt1Y1hUVEl2RVlfbzZma0cxX2k3Q1Nta2ZTRSQNCiAgICANCiAgICANCiAgICBQbGVh c2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGlt ZSBvZiBzdWJtaXNzaW9uIHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBh dmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQogICAgDQogICAgSW50ZXJuZXQtRHJhZnRzIGFy ZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KICAgIGh0dHBzOi8vdXJsZGVm ZW5zZS5jb20vdjMvX19mdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzL19fOyEhTkV0 NnlNYU8tZ2shVEIyeS16bjZsNmNBNTdLa2dSXy1sZ21XUnRQSGNiQmhBaW4wTkZ5ZEt1Y1hUVEl2 RVlfbzZma0cxX2k3MS1RMVlkayQNCiAgICANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIFJBVFMgbWFpbGluZyBsaXN0DQogICAg UkFUU0BpZXRmLm9yZw0KICAgIGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHNfXzshIU5FdDZ5TWFPLWdrIVRCMnktem42 bDZjQTU3S2tnUl8tbGdtV1J0UEhjYkJoQWluME5GeWRLdWNYVFRJdkVZX282ZmtHMV9pN3ctd1Nu a0kkDQogICAgDQoNCg== From nobody Mon Oct 26 14:41:24 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 493513A0FBF for ; Mon, 26 Oct 2020 14:41:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.599 X-Spam-Level: X-Spam-Status: No, score=-9.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=F200qoTi; dkim=pass (1024-bit key) header.d=cisco.onmicrosoft.com header.b=SW8Q+96v Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j_vEOJOdx7sB for ; Mon, 26 Oct 2020 14:41:22 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D23F23A0FC1 for ; Mon, 26 Oct 2020 14:41:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4127; q=dns/txt; s=iport; t=1603748481; x=1604958081; h=from:to:subject:date:message-id:mime-version; bh=l9bcSNHJN2FBSweniOX29X/Ec/4MEi6QFXjK4jwyhUU=; b=F200qoTiIkUOXsQv05eYurpHqWVP5XWxX73OU+7UT9b0o+3SyZXtrbp3 Mcvijc48nHNTcxhvPueinG6rZ+r3LMrIhyfgjY2k5J7zMTKRqKCs21aJa ujyqthws39ENiRCza483cxFMFH5NvVQrMGYBwhtcn0K8iM2W//7Gg7mFS Q=; IronPort-PHdr: =?us-ascii?q?9a23=3AbtgfwRQtvQrtxtDBpMiCG2nMM9psv++ubAcI9p?= =?us-ascii?q?oqja5Pea2//pPkeVbS/uhpkESQBN+J6v9YhazRqa+zEWAD4JPUtncEfdQMUh?= =?us-ascii?q?IekswZkkQmB9LNEkz0KvPmLklYVMRPXVNo5Te3ZE5SHsutZlDOrDu19zFBUh?= =?us-ascii?q?n6PBB+c+LyHIOahs+r1ue0rpvUZQgAhDe0bb5oahusqgCEvcgNiowkIaE0mR?= =?us-ascii?q?Y=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D4CABfQJdf/4QNJK1ggliBIy9RB3B?= =?us-ascii?q?ZLywKhDKDSQONIJQxhG+CUwNVCwEBAQ0BAS0CBAEBhGOBdAIlNwYOAgMBAQs?= =?us-ascii?q?BAQUBAQECAQYEbYVhAQuGCwsGHQEBOBEBDDsDAgQwFBMEEyKDBAGBfk0DLgG?= =?us-ascii?q?ZcwKBO4hodoEygwQBAQWCTIJEGIIQCYE4gnKCYE5ChlcbggCBOAwQhA+GUDO?= =?us-ascii?q?CLJNWhxSdIAqCapp5Ax+DF4oNlDqTPZwJhC8CBAIEBQIOAQEFgWokgVdwFWU?= =?us-ascii?q?Bgj5QFwINjjeDWYpVAXQ4AgYBCQEBAwl8jDsBgRABAQ?= X-IronPort-AV: E=Sophos;i="5.77,421,1596499200"; d="scan'208,217";a="608684460" Received: from alln-core-10.cisco.com ([173.36.13.132]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 26 Oct 2020 21:41:21 +0000 Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by alln-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id 09QLfKoY012939 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Mon, 26 Oct 2020 21:41:21 GMT Received: from xhs-rtp-001.cisco.com (64.101.210.228) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 16:41:20 -0500 Received: from xhs-rtp-001.cisco.com (64.101.210.228) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 26 Oct 2020 17:41:19 -0400 Received: from NAM04-BN8-obe.outbound.protection.outlook.com (64.101.32.56) by xhs-rtp-001.cisco.com (64.101.210.228) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Mon, 26 Oct 2020 17:41:19 -0400 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=j4qXkZiMDt/Kg7+Ds2p4jUNvLUvgCo6OCIOfaDH24UtGJc54LS4NsstgeKs0a/eAgIdFuke2yXooijjJ0+Oe4iIz1AxHZG+VBcNTR1QzD/cyKIjSj+3gllZM/O1085E0TR+4ljzKHDGgcPiCFto9Hq4SLc3GB/Aq2aH39psjqREPaJwpEI3GPfvBRTdmiSDzWce4JivHRa4pXH+Fc1OUKjoAsJghEfYaFNzYJCnaVGYkmgub/vXYIhrp16JBlwaUKZIOnKDJqpq/ZVV+UskCRgL1ZeDPhoWabEEwf4dtHU73hNbkv733RkLCshCYa0vcgU7xXJVmMGPrMz6OYDMBHg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l9bcSNHJN2FBSweniOX29X/Ec/4MEi6QFXjK4jwyhUU=; b=dsVV1hRNOY4lC9xwpIgbmDaK33ElMjE3uywgLnrKvRL8b0R6jOvTtYflkeZGA48eyVjbOoCePyQyA5tTZfm9Ha395aie5Nk6y2wDB2EmhzmuFyBWtSPrkibSsbcD5w2W5c1Qe+MVUAcFK2CAzI0dIrHHruA7O0efv/6LXpQo60xSxTd9152ye8fcnbB65eBo+/9ikeflp22EeXSXfLVy9daqqtIp8BTuMPKGUsr3gPqkYIB0dT7pqwd1TU1Anyc/lTDMG4gbYRLCrG8BPIZLNvESm0MUGMO0a0vFqrZNXABTu/wGTq8vNzrWyRj2nGpdr7h9ui/MHiL+xeGVohcrKA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=l9bcSNHJN2FBSweniOX29X/Ec/4MEi6QFXjK4jwyhUU=; b=SW8Q+96vMzEEIaaY3Mkbs7ydt5NAsVbNrt0UT8hGW3PVxrCSifbby7MAXV6z92i9XcrcN48ILi0LdhdIOB57DZIaDH3Ep7H8iW4eRffwElMzTvruVijOkI+EN6OoMKigvZsGMx1ZzpK1LLdoPoQAy4th25iLfaVJxMDWs24zkTc= Received: from BY5PR11MB4070.namprd11.prod.outlook.com (2603:10b6:a03:181::16) by BYAPR11MB2981.namprd11.prod.outlook.com (2603:10b6:a03:83::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.27; Mon, 26 Oct 2020 21:41:16 +0000 Received: from BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1]) by BY5PR11MB4070.namprd11.prod.outlook.com ([fe80::8842:3f1e:4ffc:32c1%3]) with mapi id 15.20.3477.028; Mon, 26 Oct 2020 21:41:16 +0000 From: "Nancy Cam-Winget (ncamwing)" To: "rats@ietf.org" Thread-Topic: IETF 109 RATs sessions call for agenda Thread-Index: AQHWq+C74CZCgECQXUmYzBG5y/xC/Q== Date: Mon, 26 Oct 2020 21:41:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.1b.201012 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=cisco.com; x-originating-ip: [73.162.233.180] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 2945af31-3ca0-4af8-18ea-08d879f7ddff x-ms-traffictypediagnostic: BYAPR11MB2981: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:7691; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: RlNnuwALXumCqwx7ZSqGRsOhEh184m89G/xwvChATq1SP7WqAEtaaoYcd2te8C+8aTNTgG1bMBXJqFvIzzJ+sn1JvwJX3lRfeb7m6JMxHwS1TCnJOA69jhu1UBGpu1reV06FLDQQAvseUVg7NRAWUa0N1hgbmNdsZxQOuQ9+YasVBzZcss8C2YFeB1HDtxe7SBCT65CPmTCLIXHYVZhQhtUpJ+CqQrh9+rU46M2enWGdbA6RZFix0ApudFkqEPXBqc0m7XyTGQAB25ih3QPw2RCr+IKV7YGGIOehu0ZhcH+hKZAecouLxRp01LNQjHmPWznVDzxXvY67nY/JxFZ1gA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BY5PR11MB4070.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(39860400002)(346002)(136003)(396003)(366004)(376002)(478600001)(8936002)(36756003)(2616005)(6916009)(186003)(26005)(2906002)(6506007)(83380400001)(6486002)(86362001)(6512007)(8676002)(71200400001)(33656002)(66946007)(4744005)(66556008)(66446008)(76116006)(316002)(64756008)(66476007)(91956017)(5660300002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DF70E8ECED424186AAC65D41E9BCE1CBciscocom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BY5PR11MB4070.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2945af31-3ca0-4af8-18ea-08d879f7ddff X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 21:41:16.0491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: K+xPvvfzLm6yVe1hKqDrNRy1pfKr3Pd7fSeaJWNNoqfTiorGnKVVqXvxNT+Zo3mS/KWVr7DhRG2yXopnmFEdYw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR11MB2981 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com X-Outbound-Node: alln-core-10.cisco.com Archived-At: Subject: [Rats] IETF 109 RATs sessions call for agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 21:41:23 -0000 --_000_DF70E8ECED424186AAC65D41E9BCE1CBciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8gUkFUcyBwYXJ0aWNpcGFudHMsDQpXZSBoYXZlIHR3byB0aW1lIHNsb3RzIChJQ1Qgb3Ig VVRDKzcpc2NoZWR1bGVkIGZvciBJRVRGIDEwOToNCiAgIFR1ZXNkYXkgTm92IDE3IDE2OjAwLTE4 OjAwDQogICBUaHVyc2RheSBOb3YgMTkgMTY6MDAtMTg6MDANCg0KSW4gcHJlcGFyYXRpb24gZm9y IHRoZXNlIHNlc3Npb25zIHBsZWFzZSBzZW5kIHlvdXIgcmVxdWVzdHMgaWYgeW914oCZZCBsaWtl IHRvIHByZXNlbnQgYSBkcmFmdCBvciByZWxldmFudCB0b3BpYyB0byByYXRzLWNoYWlyc0BpZXRm Lm9yZzxtYWlsdG86cmF0cy1jaGFpcnNAaWV0Zi5vcmc+DQoNClRoYW5rcywgTmFuY3kgKG9uIGJl aGFsZiBvZiB0aGUgUkFUcyBjaGFpcnMpDQo= --_000_DF70E8ECED424186AAC65D41E9BCE1CBciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1jb21wb3NlOw0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBs YW5nPSJFTi1VUyIgbGluaz0iIzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0Ij5IZWxsbyBSQVRzIHBhcnRpY2lwYW50cyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+V2Ug aGF2ZSB0d28gdGltZSBzbG90cyAoSUNUIG9yIFVUQys3KXNjaGVkdWxlZCBmb3IgSUVURiAxMDk6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPiZuYnNwOyZuYnNwOyBUdWVzZGF5IE5vdiAxNyAxNjowMC0xODow MDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0Ij4mbmJzcDsmbmJzcDsgVGh1cnNkYXkgTm92IDE5IDE2OjAwLTE4 OjAwPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5JbiBwcmVwYXJh dGlvbiBmb3IgdGhlc2Ugc2Vzc2lvbnMgcGxlYXNlIHNlbmQgeW91ciByZXF1ZXN0cyBpZiB5b3Xi gJlkIGxpa2UgdG8gcHJlc2VudCBhIGRyYWZ0IG9yIHJlbGV2YW50IHRvcGljIHRvDQo8YSBocmVm PSJtYWlsdG86cmF0cy1jaGFpcnNAaWV0Zi5vcmciPnJhdHMtY2hhaXJzQGlldGYub3JnPC9hPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+VGhhbmtzLCBOYW5jeSAo b24gYmVoYWxmIG9mIHRoZSBSQVRzIGNoYWlycyk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_DF70E8ECED424186AAC65D41E9BCE1CBciscocom_-- From nobody Mon Oct 26 15:15:39 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7F33A100A; Mon, 26 Oct 2020 15:15:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8mWO_djYVufH; Mon, 26 Oct 2020 15:15:37 -0700 (PDT) Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam08on2105.outbound.protection.outlook.com [40.107.100.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C27773A0FFB; Mon, 26 Oct 2020 15:15:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ay93AXJ0zjDc8lE/uPhF5QsFdxzmk9vWVb7an0oj3oRTPizs0N1MMHlENfHbtL8gHs88owe7jKrxHb+97tO2+8ACPyzzQWusaBIRNbOwnstUy0d4lksX/ogkiQNZdC7dy+ygKV84oVrhXGvXzgaeWMsDx3wgB5iDEOS25cWEfhWBhLipLvmFsGHRecM2CKjVNNSJcaACbNyNEADAzhWLwSdQQ554jm4I3egIeQi5GHQYPKuPbaSThwU1Jd+e3SFqoxQnKESIa/37FGiN9gNzGmGM7UFmYVwAyVL7KbpuwikR2rUScA4Z54CSfIte/kbHArjrKTNmcSmJUzNfSsySMg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uuCGj0lGfgDF78dbRzdLCj21Wnj9qOTOBLJgMtTqVAU=; b=CjwlDeWNeWWZ5scsjsCbB1H3142x5cAtWHCsQKFJf3T0vd0nHcMyrEPmXGv49yphvs8jMjb77LcqI32GzYUHbVVBUHGpBaePp2xELgbQW8ReNQk6mOLdaUdvlEuK8IS8d1wy3LB41S4Ol1dMTjmYfmlVsoRKRyqWwsJngpzlQiKqiyoOCpL5QEeD4pMVPBISYfXVlmDnA+gzlwoDNlZODGf8MT9O74rHh2ERyBBTZbauh+r5o/0Q81pabuwI3+sdCO3GX1WGCB3eeJN/A7Lv3MPiCWd9nAdcZlf49nIyhzbTxVzNOlOopo0J7i6UcnTgdC/m6F0YgIot1mQMpDOeyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uuCGj0lGfgDF78dbRzdLCj21Wnj9qOTOBLJgMtTqVAU=; b=FP/81kFheLLKxM1wQNpnoNCU/vpPiIZ6TMeE9iFFvwxkQFgXFg+w4irroX1wblTeOO76W6EhS76jzK8DLMxdWea5ThDpxga8THfK8f5JvJg42tT4w6/AqPvsAw5dbEm4Xtr2d/eS7wGklldgZKx9Kz6jh8e1XuM3f6HxW/64hA8= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1747.namprd21.prod.outlook.com (2603:10b6:207:35::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.15; Mon, 26 Oct 2020 22:15:34 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Mon, 26 Oct 2020 22:15:34 +0000 From: Dave Thaler To: "rats@ietf.org" CC: teep Thread-Topic: EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2A== Date: Mon, 26 Oct 2020 22:15:34 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-26T22:15:32Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=320ab34c-2d91-46cf-8bca-ee695a1f0256; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:d1a1:21ff:2932:45f9] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: baac0156-972f-4ff1-1591-08d879fca902 x-ms-traffictypediagnostic: BL0PR2101MB1747: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: fYoh7+bh9NPKsU3g3PNeaK8dal9u3TkS0laUNrcHp5Ux64RRNF2HMGS7czPw12VMJMV+NhB5cDs+oipmhcqr8DL6Xqwsn6IerWmGTsV0yEEUfIzqwff5RgeIeJ/mL++zi4aHEZRwR4hEnxUAEkG4OjZU6P+sLifI2J5wUqRwFoB1nD3bKNZhOJAvMfdAIzrV7tv9utH2zVLgLMLH0GwLWE/IqVaW/Mk0nFwEcuKgaSBgeYOz8sD527SHVMgpwHlKdtcDX41eYTzRxRrfspOEpOYiw1EuixjNVHGzoWh7+oqJff84VzyH2QxJBYPQbnBHbz2rv2JLO3BWhxifLGwirg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(136003)(39860400002)(376002)(366004)(346002)(33656002)(66446008)(316002)(2906002)(66556008)(8936002)(8990500004)(6506007)(9686003)(186003)(8676002)(6916009)(66476007)(52536014)(4326008)(76116006)(64756008)(55016002)(82960400001)(86362001)(66946007)(450100002)(82950400001)(478600001)(10290500003)(5660300002)(83380400001)(7696005)(71200400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: baac0156-972f-4ff1-1591-08d879fca902 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 22:15:34.5491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IG9JzQYJ2FQ8NR08/ExsZU1BT5J7MAxwA28LsKaywA693uTW51QJ6zjiu/IgWR6bgoxhZD4Psc9nn3TcWpw5/5XgPU2sRtiV5w7CKoUA/AQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1747 Archived-At: Subject: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 22:15:39 -0000 --_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable As discussed in previous IETF meetings, if there are claims beyond the base= set that other WGs need, they can be specified by the other WGs with review by RATS. The TEEP WG needs the following in EATs and I am not sure whether they can = be covered by existing claims or whether TEEP-specific claims are needed. Fro= m section 7.1 of draft-ietf-teep-architecture: =D8 - Device Identifying Information: TEEP attestations may need to =D8 uniquely identify a device to the TAM. Unique device =D8 identification allows the TAM to provide services to the device, =D8 such as managing installed TAs, and providing subscriptions to =D8 services, and locating device-specific keying material to =D8 communicate with or authenticate the device. I believe the Universal Entity ID Claim (ueid) is claim that meets the abov= e requirement. But the TEEP arch then goes on to say: =D8 In some use cases it =D8 may be sufficient to identify only the class of the device. The =D8 security and privacy requirements regarding device identificatio= n =D8 will vary with the type of TA provisioned to the TEE. Which EAT claim contains the device class? The closest thing I see is OEM I= dentification by IEEE (oemid) but I am not sure that is sufficient since it's only the OEM not the device= class from that OEM. This doesn't seem like something that should be TEEP specific though, so ca= n someone tell me how to represent device class using the claims in the EAT spec? =D8 - TEE Identifying Information: The type of TEE that generated this =D8 attestation must be identified, including version identification =D8 information such as the hardware, firmware, and software version =D8 of the TEE, as applicable by the TEE type. TEE manufacturer =D8 information for the TEE is required in order to disambiguate the =D8 same TEE type created by different manufacturers and address =D8 considerations around manufacturer provisioning, keying and =D8 support for the TEE. Similarly for this requirement, the closest thing I see is Origination Clai= m (origination) but I am not sure that is sufficient since it's just the manufacturer not the "version identi= fication information such as the hardware, firmware, and software version of the TEE" Should the TEEP WG define TEEP-specific claims for such information? Dave --_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

As discussed in previous IETF meetings, if there are= claims beyond the base set that
other WGs need, they can be specified by the other WGs with review by RATS.=

 

The TEEP WG needs the following in EATs and I am not= sure whether they can be

covered by existing claims or whether TEEP-specific = claims are needed.  From

section 7.1 of draft-ietf-teep-architecture:

 

=D8     -  Device Ident= ifying Information: TEEP attestations may need to

=D8        un= iquely identify a device to the TAM.  Unique device<= /p>

=D8        id= entification allows the TAM to provide services to the device,

=D8        su= ch as managing installed TAs, and providing subscriptions to

=D8        se= rvices, and locating device-specific keying material to

=D8        co= mmunicate with or authenticate the device.

 

I believe the Universal Entity ID Cl= aim (ueid) is claim that meets the above requirement.
But the TEEP arch then goes on to say:

 <= /span>

=D8        In= some use cases it

=D8        ma= y be sufficient to identify only the class of the device.  The

=D8        se= curity and privacy requirements regarding device identification<= /span>

=D8        wi= ll vary with the type of TA provisioned to the TEE.

Which EAT claim contains the device class? The closest thin= g I see is OEM Identification by IEEE (oemid)
but I am not sure that is sufficient since it's only the OEM not the device= class from that OEM.

This doesn’t seem like something that should be TEEP = specific though, so can someone tell me how to
represent device class using the claims in the EAT spec?<= /p> 

=
=D8     -  TEE Identifying Information: The type of TEE th=
at generated this
=
=D8        attestation must be identified, inclu=
ding version identification
=
=D8        information such as the hardware, fir=
mware, and software version
=
=D8        of the TEE, as applicable by the TEE =
type.  TEE manufacturer
=
=D8        information for the TEE is required i=
n order to disambiguate the
=
=D8        same TEE type created by different ma=
nufacturers and address
=
=D8        considerations around manufacturer pr=
ovisioning, keying and
=
=D8        support for the TEE.
 

Similarly for this requirement, the closest thing I see is = Origination Claim (origination) but I am not sure
that is sufficient since it's just the manufacturer not the "version i= dentification information such as the
hardware, firmware, and software version of the TEE"=

Should the TEEP WG define TEEP-specific claims for s= uch information?

 

Dave

--_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_-- From nobody Tue Oct 27 05:02:22 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E54143A00E0 for ; Tue, 27 Oct 2020 05:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.602 X-Spam-Level: X-Spam-Status: No, score=-9.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=LwN5o364; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=Wfmp/khz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5QvdiM9_9pLe for ; Tue, 27 Oct 2020 05:02:19 -0700 (PDT) Received: from alln-iport-6.cisco.com (alln-iport-6.cisco.com [173.37.142.93]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F12AB3A00D2 for ; Tue, 27 Oct 2020 05:02:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10490; q=dns/txt; s=iport; t=1603800139; x=1605009739; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=8R9QdO+ZeT1Nop4e0qg6WNFhfNYz7XfdkqD/v3tLVPE=; b=LwN5o364ZIbcP7ggCWQUizfl/kUnfrfZ83+lOy0fXa81AwVoTBu61Fhv 1epPDXa2c51cRW+CwO5d3fs2fBbtsv853RZ7en0XpIerGh0IW/1Ozgnrq c/TEZIeggEM2zmFTI0XB8cLX38MQHj7h+m6h+g1ndIWo9WzvOSi5r5IIF Q=; X-Files: smime.p7s : 3975 IronPort-PHdr: =?us-ascii?q?9a23=3AhejoEBDZNNuQSUMgrCQGUyQJPHJ1sqjoPgMT9p?= =?us-ascii?q?ssgq5PdaLm5Zn5IUjD/qw00A3CXJ7Q7LRPjO+F+6zjWGlV55GHvThCdZFXTB?= =?us-ascii?q?YKhI0QmBBoG8+KD0D3bZuIJyw3FchPThlpqne8N0UGE8flbFqUqXq3vnYeHx?= =?us-ascii?q?zlPl9zIeL4UofZk8Ww0bW0/JveKwVFjTawe/V8NhKz+A7QrcIRx4BlL/U8?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CjBQBMC5hf/4YNJK1gHAEBAQEBAQc?= =?us-ascii?q?BARIBAQQEAQGCD4FSUQdwLC0vFxUKhDKDSQONRooQjmqBQoERA1UEBwEBAQo?= =?us-ascii?q?DAQEYDQgCBAEBgVWCdQKCAwIlOBMCAwEBCwEBBQEBAQIBBgRthWEMhXIBAQE?= =?us-ascii?q?BAwEBEBEdAQEsCwELBAIBCBEEAQEBKgICAh8GCxsBAQUDAgQOBQgGFIMFgX5?= =?us-ascii?q?NAx8PAQ6bdQKBO4hodoEygwQBAQWBR0GDDA0LgXYTBwmBOIFTgR+KRxuBQT+?= =?us-ascii?q?BEUOCTT6CGkIBAQIBARWBEQESASMVJ4JZM4IstzZUCoJrhE6CYIFYjGmFL4M?= =?us-ascii?q?XgSqIYwWUNYYHmC6CbZJWAgQCBAUCDgEBBYFrI2dwcBUaIYJpCUcXAg2OH4N?= =?us-ascii?q?xhRSFQnQCNgIGAQkBAQMJfIw7AYEQAQE?= X-IronPort-AV: E=Sophos;i="5.77,423,1596499200"; d="p7s'?scan'208";a="609278132" Received: from alln-core-12.cisco.com ([173.36.13.134]) by alln-iport-6.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 27 Oct 2020 12:02:10 +0000 Received: from XCH-RCD-001.cisco.com (xch-rcd-001.cisco.com [173.37.102.11]) by alln-core-12.cisco.com (8.15.2/8.15.2) with ESMTPS id 09RC296m026461 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL) for ; Tue, 27 Oct 2020 12:02:09 GMT Received: from xhs-aln-001.cisco.com (173.37.135.118) by XCH-RCD-001.cisco.com (173.37.102.11) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 27 Oct 2020 07:02:08 -0500 Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-aln-001.cisco.com (173.37.135.118) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Tue, 27 Oct 2020 07:02:08 -0500 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1497.2 via Frontend Transport; Tue, 27 Oct 2020 07:02:08 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jODlwZ2qCzEABTC/MJA9N03zT5iB7nqLkgek0esLuWYqHxsgm9LyK8gsHp0YWuMai4zSN/mLaHkfbU4wsKJpyGlI5jTQXKE6d8Wr+ZXJccX3hspApWu3K8RVCvWtiXlhn3G+8pPzeXWejNntQY6sJN8th77xhrZLDcGhjYW3HIMxKcho/ofdo8pMF3CekuGI3zs7d/ZMjrVQd5L0diof5VsvrGF/Ma7aPet0rL/ppeP3Cl286UeY1GsQuOJzSMDixcAW9DYf3grBZFAZwpqUdil0bCJslKWsUiPLjA1XOjeDBZBdzlfAta3CNh87U2QXTnZq/1W3q6LpVgcdzPrHJA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PWfIyXybzy6SYy07CT/3mLEKu5mbdwxSG6C6vZDdWo0=; b=IJiF2O9nec02o0WxEZpqJJe94QLqyfxs4VGXimVjvVRqywtEKFy2LA+9XpcdVFxve4BMdvJO3NnmuNZOcV1Z78xke3hdyVOisZXDURbhTlB7Zc+mCscj6eptf3kIC5y1V6C2iAI5R9sfUbcZK88dzuF4BdorE4+DmlcwWjLd1L8pRT3hMUxE096uKX+nRJmY1BzaFA/aQkQ4jCZJcBcH1kvNWoAcA/H+BXV4/UfAZ4btWd19VzQVhAL8C+avnVGCvR2pTFGnaJcE11XaTcEI8SBXMHkMkOk707XJCHZ5vpzjDV9/0hVooeROQh3iCbhVZWto2x44Kfp6UIdqjdHsJA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PWfIyXybzy6SYy07CT/3mLEKu5mbdwxSG6C6vZDdWo0=; b=Wfmp/khzs5S4zvKF11TfYDMybFd/vhrXKluGs6CSZXL5xa+YiQKnylp82+uPDW5NPyJ8DV3qvllzjhMIgV13X+ukxEpylNFUj0FljhkIv4EaGpXUnMSG6p66gl7yZmbA87/Sn+q3yIvnX1jFwS3WQZkO24zhheKNo7tnBn7UeVU= Received: from BL0PR11MB3122.namprd11.prod.outlook.com (2603:10b6:208:75::32) by MN2PR11MB4173.namprd11.prod.outlook.com (2603:10b6:208:137::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.20; Tue, 27 Oct 2020 12:02:08 +0000 Received: from BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::1d48:9682:b349:ce7a]) by BL0PR11MB3122.namprd11.prod.outlook.com ([fe80::1d48:9682:b349:ce7a%6]) with mapi id 15.20.3499.018; Tue, 27 Oct 2020 12:02:08 +0000 From: "Eric Voit (evoit)" To: "Nancy Cam-Winget (ncamwing)" CC: "rats@ietf.org" Thread-Topic: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt Thread-Index: AQHWq8F7YsqzDldsd0e0zdGQRheW7amqSnEAgAAVOYCAAAd2cIAA8ytw Date: Tue, 27 Oct 2020 12:02:08 +0000 Message-ID: References: <160373503765.26087.6796865607217511838@ietfa.amsl.com> <25ABB469-D112-4592-BF13-C56F4725D6AB@cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: cisco.com; dkim=none (message not signed) header.d=none;cisco.com; dmarc=none action=none header.from=cisco.com; x-originating-ip: [108.18.114.139] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 44d1968a-ab42-4a07-031e-08d87a702106 x-ms-traffictypediagnostic: MN2PR11MB4173: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: VjdqM/nmiJwbpVEDeKZmAutiw42mAEcELW59oo1dwUwBF4UR9EPJrTzhz0bgVpIr6wWoE+D9VqwtDqzSva3fnqq4Py7tuoKvGYEu2tGpfbvam4Lnxd2b2WElGuF3mbydprHfzQdi8tzJVpOVzNviSNFAnxXSTFTa29bDlwQtSVBZRQQGqxtjlAXcyYN14PsD7Igz+3LfVv1clAYnHgMaNC5EMx26oogrE6cEsnYdRXYhHGdiyyT+qlt8f6x4kwKjg+mhMHI4bpOAx7QuT16rTqOEjSXs3IGHIfy7O546gI7VbaKEBYH+63I1GOS6WJX6g2MveqeLxUTnQp60xk7IDdvBgaxX+/3pF8ewkpvHxmhCLnZhKsU9c987S5hj6cHjAQFiFVgyRP1IMm6rTyuCtA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR11MB3122.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(346002)(396003)(136003)(39860400002)(376002)(366004)(66476007)(8936002)(6636002)(186003)(55016002)(26005)(52536014)(8676002)(86362001)(4001150100001)(99936003)(478600001)(9686003)(66574015)(83380400001)(316002)(71200400001)(53546011)(64756008)(66616009)(2906002)(66446008)(33656002)(966005)(6506007)(6862004)(4326008)(66556008)(76116006)(66946007)(5660300002)(7696005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: o1aLnPETtN0OZe116DdTdVufWVk3x2vYEB7Hut5UVGDuLbCdePCA3UTMo1A27jYM2tf6dEhw3z1jGm6Z4AXR0Ha9BhCIUVdus7ahf3qnPbYF6dGX9st3XmOv1tk5YerEjzURmnYcD3ayptj1T/BqeYelgOWXJdmQHECt+4K535BJM44L8HJgv3bewclaIBMm6vBxLSOeFMAjiejgXEY8ukrVWID55ukwdiaAupuxZ7BmjfjdjCmbxBcQYAhNybHLXsXIa1QNtLy3EIfl2yKIBDL95SJFwKMgmGdk77Njt2IZO0tvp15e58zB9WZW8DT2BsDEiRwCyB8zdBsit48kuG5kW1gBxqqYxjDsS6oWhPWFuWulBT2zoOJfk5Ixs0LiYPPqydHipdjZQXRr50Mt4mA+eycvZ5zW2OrB52gluEp6TKZ7AmCBcdwizt0YBFuEOSaoDlN6bHCStmle7UhUa7/x1eFlnK7FEC8XXJ04dfp7qHjVxqY1nTpeJyO1pohCaayvxCZwlSOrn7rBA6MXJWvrI0Z2NAvULCaiJXyVMC3yOYgA4Z6hc2qVUGzu0pmVgsb1JnznTC30vepM3y+26C1nXLy2T5DEsxWAFD1fudZxrzQtWzrWkFvhU8EbNsyK7vMDVjVEraf6GBizmMg2UA== Content-Type: multipart/signed; boundary="----=_NextPart_000_0305_01D6AC37.758E7F20"; protocol="application/x-pkcs7-signature"; micalg=SHA1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR11MB3122.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 44d1968a-ab42-4a07-031e-08d87a702106 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2020 12:02:08.1233 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: Mc5KU1cvQak6G+gZ7jyCRVHoMqxOEJh2EUksP99h3dOHRZUddhD92XCPZp8SpPHS X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4173 X-OriginatorOrg: cisco.com X-Outbound-SMTP-Client: 173.37.102.11, xch-rcd-001.cisco.com X-Outbound-Node: alln-core-12.cisco.com Archived-At: Subject: [Rats] FW: I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 12:02:21 -0000 ------=_NextPart_000_0305_01D6AC37.758E7F20 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I am not aware of IPR on this draft. Eric > -----Original Message----- > From: Nancy Cam-Winget (ncamwing) > Sent: Monday, October 26, 2020 5:04 PM > To: Guy Fedorkow ; Henk Birkholz > ; Dave Thaler = ; > Smith, Ned ; Panwei (William) > ; Mark Baushke ; Ira > McDonald ; Bill Sulzen (bsulzen) > > Cc: Jessica Fitzgerald-McKay ; Eric Voit (evoit) > ; rats@ietf.org > Subject: Re: [Rats] I-D Action: = draft-ietf-rats-tpm-based-network-device-attest- > 05.txt >=20 > Hi RATs participants and authors of the = draft-ietf-rats-tpm-based-network- > device-attest document, >=20 > Can you also please confirm whether or not you are aware of any = relevant > undisclosed IPR that may apply to this draft? >=20 > Thanks, Nancy >=20 > =EF=BB=BFOn 10/26/20, 12:56 PM, "Guy Fedorkow" = wrote: >=20 > Greetings colleagues, I've checked in the -05 version of the RATS = RIV > specification. As far as I know, this version addresses all the = comments from > WG Last Call, plus others from earlier reviewers. > Please take a look, and if your remark wasn't addressed = properly, let me > know and I'll correct the corrections. And of course if anyone spots = collateral > damage, please point it out! > Thanks all > /guy >=20 >=20 >=20 > Juniper Business Use Only >=20 > -----Original Message----- > From: RATS On Behalf Of = internet-drafts@ietf.org > Sent: Monday, October 26, 2020 1:57 PM > To: i-d-announce@ietf.org > Cc: rats@ietf.org > Subject: [Rats] I-D Action: = draft-ietf-rats-tpm-based-network-device-attest- > 05.txt >=20 > [External Email. Be cautious of content] >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the Remote ATtestation ProcedureS WG = of the > IETF. >=20 > Title : TPM-based Network Device Remote = Integrity Verification > Authors : Guy Fedorkow > Eric Voit > Jessica Fitzgerald-McKay > Filename : = draft-ietf-rats-tpm-based-network-device-attest-05.txt > Pages : 43 > Date : 2020-10-26 >=20 > Abstract: > This document describes a workflow for remote attestation of = the > integrity of firmware and software installed on network devices = that > contain Trusted Platform Modules [TPM1.2], [TPM2.0], as defined = by > the Trusted Computing Group (TCG). >=20 >=20 > The IETF datatracker status page for this draft is: > = https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-r= ats- > tpm-based-network-device-attest/__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_- > lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7HIYHiPg$ >=20 > There are also htmlized versions available at: > = https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-rats-t= pm- > based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_- > lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i74K3PRzY$ > = https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft- > ietf-rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y- > zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7EVVqwYo$ >=20 > A diff from the previous version is available at: > = https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-iet= f- > rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y- > zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7CSmkfSE$ >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > https://urldefense.com/v3/__ftp://ftp.ietf.org/internet- > drafts/__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_- > lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i71-Q1Ydk$ >=20 >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org >=20 > = https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/rats__;= !!N > Et6yMaO-gk!TB2y-zn6l6cA57KkgR_- > lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7w-wSnkI$ >=20 ------=_NextPart_000_0305_01D6AC37.758E7F20 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMWTCCA0Mw ggIroAMCAQICEF/4eygrVNyNQqMVtWjJrf8wDQYJKoZIhvcNAQEFBQAwNTEWMBQGA1UEChMNQ2lz Y28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28gUm9vdCBDQSAyMDQ4MB4XDTA0MDUxNDIwMTcxMloX DTI5MDUxNDIwMjU0MlowNTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEbMBkGA1UEAxMSQ2lzY28g Um9vdCBDQSAyMDQ4MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAsJq5q6evCnen4nG2 tGZilHiIR8ZiVYRAMr/Aqy6lHHHWvG57qKq6btIViEhFnaL8g9DMuYzgJmhwSnjfIRee9GEFyRXI zxbaNWGJlEOohKgxmHibuU5vLFMSbM0drSskuzHEK/+DRG+2PSR3Ceq/Kqgfalb2IA8RVJeBdacl zllqgmXvt+rn4o11i27y3U+mXmKczxAKZNBObc4rzFv1YKUnR41p9H/OG3DecBsg1m7NpgGoPBLS qT+ga167jiCLepHjtWjuoOfEAXSoUwsrSpoPZRIOgk2OY/3v65sa21OmE2Cvwn3Xx2wXJdRz+0dk UIGAlEzhv65LHN+S7S4F3wIBA6NRME8wCwYDVR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYD VR0OBBYEFCfzyBUebpoCCRatK6CJYF/aey+qMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEB BQUAA4IBAQCdnYSEo0GpfHcMt1PKTkRQYu9UfNN1Fxzo4MZIS7b+TDoZgVawVu4ZlmKqWqNkwfZO VDPGd/7FHLrlXSXK9fCTmoMRLubL+HRF/ucFuKvn38tL4TeE2rmLl3Ae8OKL17DYDp2xadYqkXup SU9+5o6V2IMnPNVoSQ7UnfYu66e+6zCkrB9E/JWrMwb7fWAK3rSKY7CcqfKkuVMBh9BopCd/q//p +slAOIhntDnGhG9XyVPbuo7uwEOy+AmDbv9mzz7vF7NYGCUJNF7jy9YUtuzykm905C+BKtWSkeDg lzwyaAWFS9H3V+JSHZMaVJ8FcMBKcWAeQwtgHv6jzoEZ4Qs1MIIEbjCCA1agAwIBAgIKYRCAbQAA AAAADjANBgkqhkiG9w0BAQUFADA1MRYwFAYDVQQKEw1DaXNjbyBTeXN0ZW1zMRswGQYDVQQDExJD aXNjbyBSb290IENBIDIwNDgwHhcNMTQwNDA0MjAyNDE4WhcNMjkwNTE0MjAyNTQyWjAsMQ4wDAYD VQQKEwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0EwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK334WTFMV+yNWzca5ZQoEleXeTEVnjAzHBuCrH21fNyp75+2jrYB/Ecjz guvun1DZyb89oS+7PBEHNe+4pdlRTtmw91OglIAsLJJlrRBvoYZrX0AKmaVQRBqQTc/mTPtGBo1I 4wfX4a1j19XoJwAVv24HskO7ZQYvffZZXZsSxSx9vetEsFLhwvwe7Z1Z9x2Tp6sxpkJCOSfTgWLG VCwmjNs9FNCojhXqKKQb/r2sPJ5N1tVMr4zL/0ufBWwPcYEyJGHtGau+6nG0aIy7yPTkiz93U6J+ FZ5zC+NXdF6D0uiTxsw0kQwCl53XB5N1VLRfgywCF6iwkGV32VLk7iJ3AgMBAAGjggGHMIIBgzAQ BgkrBgEEAYI3FQEEAwIBADAdBgNVHQ4EFgQUn5U2tI5d1UvDCsGnKZNDUQb9iVEwGQYJKwYBBAGC NxQCBAweCgBTAHUAYgBDAEEwCwYDVR0PBAQDAgGGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHwYDVR0j BBgwFoAUJ/PIFR5umgIJFq0roIlgX9p7L6owQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3d3dy5j aXNjby5jb20vc2VjdXJpdHkvcGtpL2NybC9jcmNhMjA0OC5jcmwwUAYIKwYBBQUHAQEERDBCMEAG CCsGAQUFBzAChjRodHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY2VydHMvY3JjYTIw NDguY2VyMFwGA1UdIARVMFMwUQYKKwYBBAEJFQEVADBDMEEGCCsGAQUFBwIBFjVodHRwOi8vd3d3 LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvcG9saWNpZXMvaW5kZXguaHRtbDANBgkqhkiG9w0BAQUF AAOCAQEAPk6+IxpGAo1ea9uKAjQLY5vlATwmXYxwsiTrYF7sioRkLhtZFaNnGuEW4/3gTX1EmiMo 0u2296If50TN7W3qhiFUKKxsYbz7yGVQBECKKov8n24YnvXFPqWiqRwArnGmF7tJMktKWBOTTDbp 9y8N6IDrOF1UecqFUqSk4lZ30w0HIU6cJDIM4r6lw3EtTog31PAvVmhGR0VrXVCIJfc6KaTxiEGt U35XMYYq1uBnh9hTq4GjdXe+2yHIOke0aSfV7t/39NZxjbp60XMvfd3NpniUKGXDiXdeQuroB8IQ MXl2OkF2IJGPCkFQghsJKbIRIG8D6wviPyLW+j+4Rqu2sDCCBJwwggOEoAMCAQICCgGGHkPWlB04 96IwDQYJKoZIhvcNAQELBQAwLDEOMAwGA1UEChMFQ2lzY28xGjAYBgNVBAMTEUNpc2NvIEVtcGxv eWVlIENBMB4XDTE5MDYxNDEyMTIzNFoXDTIxMDYxMzEyMjIzNFowgZIxGjAYBgNVBAMTEUVyaWMg Vm9pdCAoZXZvaXQpMRQwEgYDVQQLEwtDaXNjbyBVc2VyczESMBAGA1UECxMJRW1wbG95ZWVzMRMw EQYKCZImiZPyLGQBGRMDY29tMRUwEwYKCZImiZPyLGQBGRMFY2lzY28xHjAcBgkqhkiG9w0BCQEM D2V2b2l0QGNpc2NvLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIAZHOvN3UgE S1WSqNst+IZ44ptBZ+BHmyDmrLdjDiSuB5huzYxbcUFiN8ocvyAUFPS0s495oI/wnNvfUlomi5KO yJMvOdComHEquPtofQIIMn2FhYOlMZEJj4eC1nWI7DpnTChuIVoRj6bTcZNlOjX/Gxk8wcFJh64M mV58sSvHftNDUKDBYOQUmGmCiieGKI+MrIuhpxdNJQuljC18Jj+hq3Y+E1tI9Z0MqdaBEAUF97+v Z/iRZE1YFAOv78XSYFRzb+/g42/GzWBUCKSQDfwACXh89JsSNoXoVvvM3rZvYzEuQhZvTyHqi9pp W+70bkbEF9M7cX1yTPDc1Yr6PfkCAwEAAaOCAVcwggFTMA4GA1UdDwEB/wQEAwIE8DAMBgNVHRMB Af8EAjAAMHoGCCsGAQUFBwEBBG4wbDA8BggrBgEFBQcwAoYwaHR0cDovL3d3dy5jaXNjby5jb20v c2VjdXJpdHkvcGtpL2NlcnRzL2NlY2EuY2VyMCwGCCsGAQUFBzABhiBodHRwOi8vcGtpY3ZzLmNp c2NvLmNvbS9wa2kvb2NzcDAfBgNVHSMEGDAWgBSflTa0jl3VS8MKwacpk0NRBv2JUTA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2lzY29jZXJ0cy5jaXNjby5jb20vZmlsZS9jZWNhLmNybDAaBgNV HREEEzARgQ9ldm9pdEBjaXNjby5jb20wHQYDVR0OBBYEFIDTgXbBj6x3IEXvxtrJTbJFjKDbMB8G A1UdJQQYMBYGCisGAQQBgjcKAwwGCCsGAQUFBwMEMA0GCSqGSIb3DQEBCwUAA4IBAQAowdP8izTr +GtcksOcgtT7KFPnW2Pcz7vMei6CMnGC4pAU4LUtHKBHKBJdr05RkV5wSDSeXsCmUQcj7PgeXwzQ KbDA6D3/6gRGBkMLZJQvqRiAXi+1CfXpg7mUr2B7IFC4mnm0V7MpCg8TU3jLKMB4Gidqh4Tmure0 JEOD1AgOsAtxW+x2+hPm+HpGOv/wuxoEXK0uB8snFLRRyTQYGR5AtqLDJGvk6Ref3uHseaZYGD2f 1XK05BfTdsNnjBjPeVI6vmRSdTCLr/kTO2dQG6q+LisAl4rA+4iHEgky3LeWj4T+pLa1g9Gj02qG +gKA5g05T5NUsRlPSx6+YGbSxA+bMYIC8DCCAuwCAQEwOjAsMQ4wDAYDVQQKEwVDaXNjbzEaMBgG A1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwCQYFKw4DAhoFAKCCAYswGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjAxMDI3MTIwMjA0WjAjBgkqhkiG 9w0BCQQxFgQUw7SKXuoKLgvvBF5JhRGEwSwFXiYwSQYJKwYBBAGCNxAEMTwwOjAsMQ4wDAYDVQQK EwVDaXNjbzEaMBgGA1UEAxMRQ2lzY28gRW1wbG95ZWUgQ0ECCgGGHkPWlB0496IwSwYLKoZIhvcN AQkQAgsxPKA6MCwxDjAMBgNVBAoTBUNpc2NvMRowGAYDVQQDExFDaXNjbyBFbXBsb3llZSBDQQIK AYYeQ9aUHTj3ojCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYw CgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAH BgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG9w0B AQEFAASCAQAcPto8GSrxqI7Vlba/bWuAjBuy+Dfzszoo8P6wRC8ykSF8sQJboTTzeqxWzURNPRKK X/nerl7B0HztcTBJh02q9u2JZUXfJtC+eCcPRLvsG8sfh5hgM60dnDEMpBHcGEvd+eJdT+irZOu4 CcuYpxoIKAk+yHaqYcL0YNJNAzlnAfzx8fnbccVrHKu0WkHzbEcAY35yD38bil7yRhx/Yjn6sfNR HnsAaWk+VzY38jFdc8u+kTuuShUlCgaiE1dlZ5QHFfPOayaH3+gJqm6qKwNvZmQPbULClc+Pi+Wn Wd8n4/+6euj7dW71fqPT9P1HYxJD5efMHDBmUQ44tGqhN6iWAAAAAAAA ------=_NextPart_000_0305_01D6AC37.758E7F20-- From nobody Tue Oct 27 06:36:17 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 838973A0CDF for ; Tue, 27 Oct 2020 06:36:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IvugaELElpKl for ; Tue, 27 Oct 2020 06:36:13 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8184E3A0CE4 for ; Tue, 27 Oct 2020 06:36:13 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 77FE9389B5; Tue, 27 Oct 2020 09:42:50 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id HIeRZ4C-xLgP; Tue, 27 Oct 2020 09:42:50 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id F18A4389B2; Tue, 27 Oct 2020 09:42:49 -0400 (EDT) Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 9F8C318B; Tue, 27 Oct 2020 09:36:11 -0400 (EDT) From: Michael Richardson To: "Nancy Cam-Winget \(ncamwing\)" cc: "rats\@ietf.org" In-Reply-To: <48C10361-A1A6-460F-8BBF-BD4429DCCC2A@cisco.com> References: <48C10361-A1A6-460F-8BBF-BD4429DCCC2A@cisco.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] WGLC and IPR updates for RATs Architecture draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 13:36:16 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I'm unaware of any undisclosed IPR. Nancy Cam-Winget \(ncamwing\) wrote: > This notice is also a request for any further undisclosed IPR that > applies to this draft beyond (https://datatracker.ietf.org/ipr/4106/); > and for the authors to confirm whether or not you are aware of any > relevant undisclosed IPR. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAl+YIksACgkQgItw+93Q 3WWXjAf/X4uTDz5HHVDAtUnmqTBeGsA3ptoiCRJYJj7BkBjWsIUGXuPF+SP1h0CJ HseiG7OdAZVn5qJlfJoeFGADY5iEAI304KJhepZhiC42NKcE9BLM+dMTspflhVRx FrSHCdAKoc2dx7NNOVdzJl/DhaukXZliZEf0O2UIdELa/O1XBUDtAQlMWFfRNj+e YLCVOEcldUYeLUn1ZxhiUXGVjzNe+yDA66v+lLqlFhe0YPcfJs557lBIfuWgRe1Z 9irP6DA9LiY4MCMl5PH/TO5QiIJbpZGE/enQ0dXAjDdbNrO/MYwtWVsGkIk2y9p2 W7/v5j9h04vxAojIHsF4eZVmQlAROA== =EflH -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Oct 27 11:37:11 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 822593A145B for ; Tue, 27 Oct 2020 11:37:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PFyTAzAeQYSb for ; Tue, 27 Oct 2020 11:37:04 -0700 (PDT) Received: from out-25.smtp.github.com (out-25.smtp.github.com [192.30.252.208]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 621A63A145E for ; Tue, 27 Oct 2020 11:37:04 -0700 (PDT) Received: from github.com (hubbernetes-node-8dd155d.ash1-iad.github.net [10.56.109.57]) by smtp.github.com (Postfix) with ESMTPA id 8698F840EEE for ; Tue, 27 Oct 2020 11:37:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603823823; bh=/Du4sgXmsJBt3bt/q8aftpMaMYs2PX1OvvPNkXuJ1AQ=; h=Date:From:To:Subject:From; b=QeUAZruP6dvuavE8HXlpW2HoHDfDn58o5JTa22BBkAOVydpbKm0inq/O3S+BkVLIt ZhPXhWnDGLW9OS60in6qw54Z1Z1blWULc8L4JwfTbk734SRKNpb2TpHZQAD7HMSiRK EqOwMybjbwTO7QANCJX3QAKd/Sv10PteZzfBVbA4= Date: Tue, 27 Oct 2020 11:37:03 -0700 From: Laurence Lundblade To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] a9236a: Add chip, board and device versions based on EAN X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 18:37:06 -0000 Branch: refs/heads/ean_version Home: https://github.com/ietf-rats-wg/eat Commit: a9236a188a3773b8a35d90b8838eae22d9bd595f https://github.com/ietf-rats-wg/eat/commit/a9236a188a3773b8a35d90b8838eae22d9bd595f Author: Laurence Lundblade Date: 2020-10-27 (Tue, 27 Oct 2020) Changed paths: M draft-ietf-rats-eat.md Log Message: ----------- Add chip, board and device versions based on EAN From nobody Tue Oct 27 11:37:34 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 502693A1462 for ; Tue, 27 Oct 2020 11:37:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id azl9s7VhvMSD for ; Tue, 27 Oct 2020 11:37:32 -0700 (PDT) Received: from out-26.smtp.github.com (out-26.smtp.github.com [192.30.252.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FA4B3A1460 for ; Tue, 27 Oct 2020 11:37:32 -0700 (PDT) Received: from github.com (hubbernetes-node-7e4070c.ash1-iad.github.net [10.56.120.37]) by smtp.github.com (Postfix) with ESMTPA id 4F7495E0908 for ; Tue, 27 Oct 2020 11:37:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603823851; bh=2qyK7rYFxBI1FfuxMeSf+S6cQGV/+0fPg/oPWhh2uMM=; h=Date:From:To:Subject:From; b=O7p4fRw5EHZSdHLw4XR1M9GBIHvyNE4DBcnzJzmxjtvhf7mOSaJLhp7fU7xpjaoUS OIZD7ePLrdWBNpKFRKQQ9veX/6OCXqZcizGPo26LLJD1R3pju3pGjlPq+W52Sw0F53 pwF2FqmTKWO2Xj70k/c1p1fOATIkM9Eoe5UyNF40= Date: Tue, 27 Oct 2020 11:37:31 -0700 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] a9db4d: Script updating gh-pages from a9236a1. [ci skip] X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 18:37:33 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: a9db4d20b4db336236349dac00f334cc1f71c6b4 https://github.com/ietf-rats-wg/eat/commit/a9db4d20b4db336236349dac00f334cc1f71c6b4 Author: ID Bot Date: 2020-10-27 (Tue, 27 Oct 2020) Changed paths: A ean_version/draft-ietf-rats-eat.html A ean_version/draft-ietf-rats-eat.txt A ean_version/index.html M index.html Log Message: ----------- Script updating gh-pages from a9236a1. [ci skip] From nobody Tue Oct 27 11:37:46 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 814AE3A145F for ; Tue, 27 Oct 2020 11:37:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z3zrfC2tkONz for ; Tue, 27 Oct 2020 11:37:43 -0700 (PDT) Received: from out-26.smtp.github.com (out-26.smtp.github.com [192.30.252.209]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 773E83A1460 for ; Tue, 27 Oct 2020 11:37:43 -0700 (PDT) Received: from github.com (hubbernetes-node-a54a6e8.ash1-iad.github.net [10.56.112.87]) by smtp.github.com (Postfix) with ESMTPA id B7FB45E0FA7 for ; Tue, 27 Oct 2020 11:37:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1603823862; bh=v6F9pEqYKPCsfO9wLY3NzXn7uu8z4AvtIAAUC9i5YV0=; h=Date:From:To:Subject:From; b=HhOh6TrR96cbvm5qfuvNSUHWrqTxImgua/M4XE+j1afok4PkGCWtCLZ2mz5P07So8 2N4OHMpwYEyLeaOpSKzy+mCkCDOlyFRTlzn14DfsfVuBiaHAWVtXCpQ3oZEjq7E8HL moCwwTa6VUu/xZyFpb94SNXvt/5hLqEocN++3YPU= Date: Tue, 27 Oct 2020 11:37:42 -0700 From: Henk Birkholz To: rats@ietf.org Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-GitHub-Recipient-Address: rats@ietf.org X-Auto-Response-Suppress: All Archived-At: Subject: [Rats] [ietf-rats-wg/eat] 9fddba: Script updating archive at 2020-10-27T18:37:19Z. [... X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 18:37:45 -0000 Branch: refs/heads/gh-pages Home: https://github.com/ietf-rats-wg/eat Commit: 9fddbacc1c7c430a76f1ee07f307d1de4ef22181 https://github.com/ietf-rats-wg/eat/commit/9fddbacc1c7c430a76f1ee07f307d1de4ef22181 Author: ID Bot Date: 2020-10-27 (Tue, 27 Oct 2020) Changed paths: M archive.json Log Message: ----------- Script updating archive at 2020-10-27T18:37:19Z. [ci skip] From nobody Tue Oct 27 11:57:46 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EBE53A1495 for ; Tue, 27 Oct 2020 11:57:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PNwoKDkj6n0d for ; Tue, 27 Oct 2020 11:57:40 -0700 (PDT) Received: from p3plsmtpa08-03.prod.phx3.secureserver.net (p3plsmtpa08-03.prod.phx3.secureserver.net [173.201.193.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E2073A12D6 for ; Tue, 27 Oct 2020 11:57:30 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id XU9xkVV4PnXVXXU9xkayDa; Tue, 27 Oct 2020 11:57:30 -0700 X-CMAE-Analysis: v=2.4 cv=NO4QR22g c=1 sm=1 tr=0 ts=5f986d9a a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=48vgC7mUAAAA:8 a=0XtbOteLAAAA:20 a=4yAKxjYotTeE49IUHJkA:9 a=jYJq5EX27wIw55d-:21 a=pSlkukuaQ73D7JPG:21 a=QEXdDO2ut3YA:10 a=BBFS4BUNhsFNHM5XLKYA:9 a=km0EVC6CITI95vJ7:21 a=R4PnLxqbUAL_HJzJ:21 a=QwHWtzmgYTxBiXO4:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Tue, 27 Oct 2020 11:57:29 -0700 In-Reply-To: Cc: "rats@ietf.org" , teep To: Dave Thaler References: X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfC2yaRiBDXM9OjnOyIHQg3tM0kPfUUvwYW8d3L/x6Tiyqp6rmVebIO9H6ledQ6Swi5NFKtMDFM73EXoO49VLqBEXevpFpJkDWOSHwZozCqaZoGygaS++ gYCDYVMUUgw5RC72uZliOfbzXIMvRQ0aANNNtrcLXwmGSrkvmvQgZSQYxG7kpBSu1GFWMvfeLDLdwBdh3IKg2qtUV6znVveCEUpklcVv8LdIT3R0Z5NY1aUC ltRkyNv48QWEH7RW9HzFH6TfB36F2fUUMIw5prUgBxU= Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 18:57:44 -0000 --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Personally, I think attestation of TEE=E2=80=99s is pretty important and = should be handled well in EAT. So I=E2=80=99m interested in working on = and adding claims for this to EAT. After reading section 7.1 in TEEP architecture, it does seem like there = some work to do here to get to specific standardized interoperable = claims. More comments below. > On Oct 26, 2020, at 3:15 PM, Dave Thaler = wrote: >=20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. We can define a claim to be the device class and make it a byte string = like a UEID, but I think we have to go further to make it useful as an = interoperable standardize claim. There has to be some method for the = classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D Definitely not origination claim. The intent of it something like = Endorser identification and I think it should be replaced by an = Endorser/X.509 cert URL. I would say, this is a combination of claims I=E2=80=99ve just added a PR = for HW version claims. The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > Should the TEEP WG define TEEP-specific claims for such information? I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. LL > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Personally, I think attestation of TEE=E2=80=99s is pretty = important and should be handled well in EAT. So I=E2=80=99m interested = in working on and adding claims for this to EAT.

After reading section 7.1 in TEEP = architecture, it does seem like there some work to do here to get to = specific standardized interoperable claims.

More comments below.

On Oct 26, 2020, at 3:15 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

As = discussed in previous IETF meetings, if there are claims beyond the base = set that
other WGs need, they can be specified by the = other WGs with review by RATS.
 
The TEEP WG needs the following in EATs = and I am not sure whether they can be
covered by existing claims or whether = TEEP-specific claims are needed.  From
section = 7.1 of draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the = Universal Entity ID Claim (ueid) is claim that meets the above = requirement.
But the TEEP arch then goes on to = say:
 
=C3=98        In some use cases it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains = the device class? The closest thing I see is OEM Identification by IEEE = (oemid)
but I am not sure that is sufficient since it's = only the OEM not the device class from that OEM.
This= doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to
represent device = class using the claims in the EAT = spec?

I don=E2=80=99t think the OEMID, UEID or other = should be (ab)used  to represent device class. That would result in = them being less reliable and useful in a generic sense. We should come = up with a new claim.

We can define a = claim to be  the device class and make it a byte string like a = UEID, but I think we have to go further to make it useful as an = interoperable standardize claim. There has to be some method for the = classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme.

I wonder if the intent is more about grouping, in = which case we can define a GEID (Group Entity ID) that looks a lot like = a UEID. That seems useful and sensible to me. It is not about = classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 = devices.


=C3=98     -  TEE Identifying Information: The =
type of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98        information such as the =
hardware, firmware, and software version
=C3=98        of the TEE, as applicable =
by the TEE type.  TEE manufacturer
=C3=98        information for the TEE =
is required in order to disambiguate the
=C3=98        same TEE type created by =
different manufacturers and address
=C3=98  =       considerations around = manufacturer provisioning, keying and
=C3=98        support for the TEE.
 

Similarly for this = requirement, the closest thing I see is Origination Claim (origination) = but I am not sure
that is sufficient since it's just the = manufacturer not the "version identification information such as the
hardware, firmware, and software version of the = TEE=E2=80=9D


Definitely not origination claim. The intent of it = something like Endorser identification and I think it should be replaced = by an Endorser/X.509 cert URL.

I = would say, this is a combination of claims

I=E2=80=99ve just added a PR for HW version claims.

The intent for SW version claims is to use CoSWID. = We should probably create some examples to see if it can represent what = TEEP wants to represent.

The = paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not sure = what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs.


Should the TEEP WG define TEEP-specific claims for such = information?

I=E2=80=99d like to see most of them go into EAT = unless they are super specific to TEEP (TEEP not TEEs). I think there is = value in broad standardize claims as it promotes interoperability of = RATS.

LL


 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC-- From nobody Tue Oct 27 13:26:40 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C98FE3A1595; Tue, 27 Oct 2020 13:26:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.468 X-Spam-Level: X-Spam-Status: No, score=-0.468 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kBeSL9ztnrkO; Tue, 27 Oct 2020 13:26:33 -0700 (PDT) Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2100.outbound.protection.outlook.com [40.107.92.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E0083A1593; Tue, 27 Oct 2020 13:26:33 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H4PVZ4frIUr8gCfSpgNMmIWZTTSW3DBe/9YSn9rziDbYe+VtPY5eaf579db3uKmD3TFz7YpUaDLDaMMUsYhoUOICsVPtGDaZQK9TxRM/LhouCF0BgTk+VDZrrNmETQUxrD77xdhtlFECWv6UhGgz2+z8nmHLKVCOev3ertx5MtEPWJcrfKf5RZjhii5vW00e6Lk+Yb4FuNg2ICmBepnOFYWY/ak5woRecE/LM6rswGe1sMCqOTzIWLEeYxq5E/GiJKegxdsOyiW7CGLj2ohAvKTW2AoW4Ew9ecC0HCqwTE6dDhUA3+FlVsPicKGGYyT3XuJWnHlJ3gBweAcACZMJQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oIt2vOs7qSPQ7ePo6x0f53zxsRE7zviDTXda+X7ohJw=; b=NYZ7p6Y3hx45EAzQWJ35epUF/5OTwow42P4iq+z2Lc0vAoEcef0HOslP59QHOpWoD76IagK2DriEu2sSPVeCQq5chYqx/mY/CvotUPDYPJHJAv7YQL+YwEDDOmjugalK55pei3paM884owxgndMlUl626jo8Od74jv2ziKoFAuga326rS0Q/GMBAR90tTybcNCntWYm/NY7zSAd39gILtBJi+z2Sw1KKLxAc8kIp3kG/SHe6vIGFvYNVaKgDmpmYFfcWod3L/DIdNcxlQdw590vvYtAFGUQhp5ZHFJmV1dKsxn/pqVDNHtSaIgNwh/z4FDbltk8JiT8Q7FzQlgblyA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oIt2vOs7qSPQ7ePo6x0f53zxsRE7zviDTXda+X7ohJw=; b=XTzN9C2ef/s4UgKfB5pnuBgtdjSq9NYw+LL/yeHQB80wZJFqNarw2pARX9JZZfY0iVtKdCyy2tLV71ar3l6Oj2C/7daJsZGiEwaswJB+w//56BymZzQj+RRBzmBCBoM687GbzA344k3Yl78J018+41JMte1UiY9WnE780QXYdTA= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by MN2PR21MB1485.namprd21.prod.outlook.com (2603:10b6:208:205::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Tue, 27 Oct 2020 20:26:28 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Tue, 27 Oct 2020 20:26:27 +0000 From: Dave Thaler To: Laurence Lundblade CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15A= Date: Tue, 27 Oct 2020 20:26:27 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-27T20:26:26Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=4bdee0f3-772d-4f33-839c-2abfacd9215a; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:581c:556e:bbac:acfc] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9b647215-13cc-472f-a770-08d87ab69541 x-ms-traffictypediagnostic: MN2PR21MB1485: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: LJbiZRYfFD28SsbX9DBCj8UzcbsBzEUSWK8y4qYw1VNvXTx1C4RgvvMoTNyTbSWN0U/Um7PlTegetXrdRec7tKeeOumTJJXSErIR5TVghsHLx8PUjWyVKjO8eem2WV26GO32ZDZ0UX9iT0LHAex5vWKx0KX0jVdfVYBt68u0p3u4MRGgtrAYzt6tIa+RXiy3WpJ1awy2sHxmSy01xuXudxwRUydRqMXnguYUSKVd0Bg9PjuZGIw7lYw+vcS/xU5y56BFEIbnRf6EAaVEiyWrswDegPFZd9vZw4OuPH05aXYqHhUwYBYjc5WCY0fTUcQQeqgfyirPQNgiIOlHS8GJXP49/PTHMPZjfc5Ar+Lf2fhGF5Gldy65xmCEsbUvvHX9I6ZPxxTDEwskwTM+FY3NKg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(366004)(396003)(39860400002)(346002)(7696005)(54906003)(83380400001)(82950400001)(82960400001)(6916009)(52536014)(186003)(8936002)(316002)(53546011)(6506007)(66946007)(66556008)(86362001)(64756008)(66476007)(66446008)(5660300002)(76116006)(9686003)(478600001)(33656002)(55016002)(8676002)(966005)(2906002)(71200400001)(166002)(10290500003)(8990500004)(4326008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: ELfrgl9DCAda4Q0OP98+KyAFWnUwUKA6iTzAweHgJ420ckxgY4ZFJNs0NwVN0/puD9tSrKi8Sm9HBAXaGzzwUy9ujhB3ovrgyPpHhYVDLgwsRFz0vMhDcYBprzJO8IUrfLwboTi6FU72NOqMo/l+MIFBrGkvCiIhbcn4r9ArSGBcJbjC/irhDaO2KinPdC9wO9lnMBR/UXvLXiqbtEyTxkdUgw5SvQQ/RHt+nUic5/6qmUEAL9fKKMaBeBoQx2zCYNCZTTn3W1/8KOjeF/znRBLe94eU/0P88Z8V6EBDf9Bo+unw/jdvKhSecwpSSc4pzwVTrkl+ugeRY3Wr5hk148QkYOU0z82pbZPDlq38rg8wHX4W6vsku4YNszfyrAV0WIo98w5gKnEQczTpRWvHh4WkR4c4a5+ycVw2468EVdIewhI3Ui6bxFN7QZkcs0tdcSJktVH3NZNSTe3Q/wFSdXUMH6VzDI1icZyC1OzamgdGWRR4rVlnrXbdj1aWokCTdVACJiBEOLfNdwO9GsSgTPjq1SCNgY3f6eR1zuszZMxAK82V7YY5K7Jsbyv8ZBufzMEqy6/H6apmZAYB26CaF9Hyd92N6EQDAbPmptzL/ArHroLRcEjapF9tfIGgi0+jdWIUy/Siu9qKHKNEplXyx/Z78kPViDhjCrTAtStaMfAHoLqj2MPMgW/GlMYSrQ14bNO9VUg/O0vWiS/wey3ncg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9b647215-13cc-472f-a770-08d87ab69541 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2020 20:26:27.7840 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: YV1FBImzGfZadgeAbfGipBb5KeN4E05tPOV9MRy21qo7HhjQc4SpzbSe0Nd8nnRTpwEYm/dwTAId3NmPnVa5MI3XgBt1YbZwYBtwEPYkhwc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR21MB1485 Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 20:26:36 -0000 --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5saW5lIGJlbG934oCmDQoNCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyNywgMjAyMCAxMTo1NyBBTQ0KVG86 IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+DQpDYzogcmF0c0BpZXRmLm9yZzsg dGVlcCA8dGVlcEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0c10gRUFUIGNsYWltcyBuZWVk ZWQgYnkgVEVFUA0KDQpQZXJzb25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKAmXMg aXMgcHJldHR5IGltcG9ydGFudCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQuIFNv IEnigJltIGludGVyZXN0ZWQgaW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3IgdGhp cyB0byBFQVQuDQoNCkFmdGVyIHJlYWRpbmcgc2VjdGlvbiA3LjEgaW4gVEVFUCBhcmNoaXRlY3R1 cmUsIGl0IGRvZXMgc2VlbSBsaWtlIHRoZXJlIHNvbWUgd29yayB0byBkbyBoZXJlIHRvIGdldCB0 byBzcGVjaWZpYyBzdGFuZGFyZGl6ZWQgaW50ZXJvcGVyYWJsZSBjbGFpbXMuDQoNCk1vcmUgY29t bWVudHMgYmVsb3cuDQoNCg0KT24gT2N0IDI2LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxl ciA8ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9 NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQoNCkFzIGRpc2N1c3NlZCBp biBwcmV2aW91cyBJRVRGIG1lZXRpbmdzLCBpZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUg YmFzZSBzZXQgdGhhdA0Kb3RoZXIgV0dzIG5lZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0 aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5IFJBVFMuDQoNClRoZSBURUVQIFdHIG5lZWRzIHRo ZSBmb2xsb3dpbmcgaW4gRUFUcyBhbmQgSSBhbSBub3Qgc3VyZSB3aGV0aGVyIHRoZXkgY2FuIGJl DQpjb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWltcyBvciB3aGV0aGVyIFRFRVAtc3BlY2lmaWMgY2xh aW1zIGFyZSBuZWVkZWQuICBGcm9tDQpzZWN0aW9uIDcuMSBvZiBkcmFmdC1pZXRmLXRlZXAtYXJj aGl0ZWN0dXJlOg0KDQo+ICAgICAtICBEZXZpY2UgSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246IFRF RVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRvDQo+ICAgICAgICB1bmlxdWVseSBpZGVudGlmeSBh IGRldmljZSB0byB0aGUgVEFNLiAgVW5pcXVlIGRldmljZQ0KPiAgICAgICAgaWRlbnRpZmljYXRp b24gYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlkZSBzZXJ2aWNlcyB0byB0aGUgZGV2aWNlLA0KPiAg ICAgICAgc3VjaCBhcyBtYW5hZ2luZyBpbnN0YWxsZWQgVEFzLCBhbmQgcHJvdmlkaW5nIHN1YnNj cmlwdGlvbnMgdG8NCj4gICAgICAgIHNlcnZpY2VzLCBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNp ZmljIGtleWluZyBtYXRlcmlhbCB0bw0KPiAgICAgICAgY29tbXVuaWNhdGUgd2l0aCBvciBhdXRo ZW50aWNhdGUgdGhlIGRldmljZS4NCg0KSSBiZWxpZXZlIHRoZSBVbml2ZXJzYWwgRW50aXR5IElE IENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0IG1lZXRzIHRoZSBhYm92ZSByZXF1aXJlbWVudC4N CkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29lcyBvbiB0byBzYXk6DQoNCj4gICAgICAgIEluIHNv bWUgdXNlIGNhc2VzIGl0DQo+ICAgICAgICBtYXkgYmUgc3VmZmljaWVudCB0byBpZGVudGlmeSBv bmx5IHRoZSBjbGFzcyBvZiB0aGUgZGV2aWNlLiAgVGhlDQo+ICAgICAgICBzZWN1cml0eSBhbmQg cHJpdmFjeSByZXF1aXJlbWVudHMgcmVnYXJkaW5nIGRldmljZSBpZGVudGlmaWNhdGlvbg0KPiAg ICAgICAgd2lsbCB2YXJ5IHdpdGggdGhlIHR5cGUgb2YgVEEgcHJvdmlzaW9uZWQgdG8gdGhlIFRF RS4NCldoaWNoIEVBVCBjbGFpbSBjb250YWlucyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2Vz dCB0aGluZyBJIHNlZSBpcyBPRU0gSWRlbnRpZmljYXRpb24gYnkgSUVFRSAob2VtaWQpDQpidXQg SSBhbSBub3Qgc3VyZSB0aGF0IGlzIHN1ZmZpY2llbnQgc2luY2UgaXQncyBvbmx5IHRoZSBPRU0g bm90IHRoZSBkZXZpY2UgY2xhc3MgZnJvbSB0aGF0IE9FTS4NClRoaXMgZG9lc27igJl0IHNlZW0g bGlrZSBzb21ldGhpbmcgdGhhdCBzaG91bGQgYmUgVEVFUCBzcGVjaWZpYyB0aG91Z2gsIHNvIGNh biBzb21lb25lIHRlbGwgbWUgaG93IHRvDQpyZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRo ZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPw0KDQpJIGRvbuKAmXQgdGhpbmsgdGhlIE9FTUlELCBV RUlEIG9yIG90aGVyIHNob3VsZCBiZSAoYWIpdXNlZCAgdG8gcmVwcmVzZW50IGRldmljZSBjbGFz cy4gVGhhdCB3b3VsZCByZXN1bHQgaW4gdGhlbSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2Vm dWwgaW4gYSBnZW5lcmljIHNlbnNlLiBXZSBzaG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWlt Lg0KDQorMQ0KDQpXZSBjYW4gZGVmaW5lIGEgY2xhaW0gdG8gYmUgIHRoZSBkZXZpY2UgY2xhc3Mg YW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2 ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3Rh bmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0byBiZSBzb21lIG1ldGhvZCBmb3IgdGhlIGNsYXNz aWZpY2F0aW9uLiBUcnVzdFpvbmUgdnMgaHlwZXJ2aXNvciBiYXNlZD8gRmFzdCB2cyBzbG93PyBI YXMgYSBwcm90ZWN0ZWQgbW9kZSBrZXJuZWwgYW5kIFRBcz8gVGhlIFRFRVAgZG9jdW1lbnQgZG9l c27igJl0IHNheS4gVGhpcyBzZWVtcyBwcm9ibGVtYXRpYyB3aXRob3V0IGEgY2xhc3NpZmljYXRp b24gc2NoZW1lLg0KDQpbRFRdIEnigJltIG5vdCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlv biBzY2hlbWUsIGF0IGxlYXN0IGZvciBURUVQLiAgQSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUg c3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxkIHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi4NCg0KSSB3 b25kZXIgaWYgdGhlIGludGVudCBpcyBtb3JlIGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNl IHdlIGNhbiBkZWZpbmUgYSBHRUlEIChHcm91cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3Qg bGlrZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNlZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMg bm90IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJhc2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0 IGxpbmVzIHVwIHdpdGggdGhlIHByaXZhY3kgcHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtl eSBwZXIgMTAwLDAwMCBkZXZpY2VzLg0KDQoNCj4gICAgIC0gIFRFRSBJZGVudGlmeWluZyBJbmZv cm1hdGlvbjogVGhlIHR5cGUgb2YgVEVFIHRoYXQgZ2VuZXJhdGVkIHRoaXMNCg0KPiAgICAgICAg YXR0ZXN0YXRpb24gbXVzdCBiZSBpZGVudGlmaWVkLCBpbmNsdWRpbmcgdmVyc2lvbiBpZGVudGlm aWNhdGlvbg0KDQo+ICAgICAgICBpbmZvcm1hdGlvbiBzdWNoIGFzIHRoZSBoYXJkd2FyZSwgZmly bXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uDQoNCj4gICAgICAgIG9mIHRoZSBURUUsIGFzIGFw cGxpY2FibGUgYnkgdGhlIFRFRSB0eXBlLiAgVEVFIG1hbnVmYWN0dXJlcg0KDQo+ICAgICAgICBp bmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyByZXF1aXJlZCBpbiBvcmRlciB0byBkaXNhbWJpZ3Vh dGUgdGhlDQoNCj4gICAgICAgIHNhbWUgVEVFIHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFu dWZhY3R1cmVycyBhbmQgYWRkcmVzcw0KDQo+ICAgICAgICBjb25zaWRlcmF0aW9ucyBhcm91bmQg bWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywga2V5aW5nIGFuZA0KDQo+ICAgICAgICBzdXBwb3J0 IGZvciB0aGUgVEVFLg0KDQoNClNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNs b3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQg SSBhbSBub3Qgc3VyZQ0KdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3MganVzdCB0aGUgbWFu dWZhY3R1cmVyIG5vdCB0aGUgInZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3Vj aCBhcyB0aGUNCmhhcmR3YXJlLCBmaXJtd2FyZSwgYW5kIHNvZnR3YXJlIHZlcnNpb24gb2YgdGhl IFRFReKAnQ0KDQpEZWZpbml0ZWx5IG5vdCBvcmlnaW5hdGlvbiBjbGFpbS4NCg0KKzENCg0KVGhl IGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlrZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQg SSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFjZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBV UkwuDQoNCkkgd291bGQgc2F5LCB0aGlzIGlzIGEgY29tYmluYXRpb24gb2YgY2xhaW1zDQoNCkl0 4oCZcyBqdXN0IHVzZWQ6DQoNCjEpICAgICBGb3IgYSBWZXJpZmllciBpbiBhcHByYWlzaW5nIHRo ZSBldmlkZW5jZSAobm90aGluZyBURUVQIHNwZWNpZmljIGhlcmUsIGFwcHJhaXNhbCBwb2xpY3kg Y2FuIGludm9sdmUgYW55IGNsYWltKSwgYW5kDQoNCjIpICAgICBUbyBiZSB1c2VkIGJ5IGEgVEFN IHRvIGRlY2lkZSB3aGljaCBUQeKAmXMgYXBwbHkgdG8gdGhlIFRFRS4gIEluIHRoYXQgc2Vuc2Ug aXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBh bnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9y IGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4g bXkgb3Bpbmlvbi4NCg0KS2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVzdGF0aW9u 4oCdIGNvbmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBjbGFpbXNl dCBwZXIgbGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0gYW5kIOKA nGNsYXNz4oCdIGNsYWltcyB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZpY2UgY291bGQgYmUg cmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2ggbGF5ZXIu ICBFLmcuLCBhIOKAnHZlcnNpb27igJ0gY2xhaW0gd291bGQgYXBwbHkgYXQgdGhlIGhhcmR3YXJl IGxheWVyIGFuZCBiZSB0aGUgaGFyZHdhcmUgdmVyc2lvbiwgYXQgdGhlIGZpcm13YXJlIGxheWVy IGFuZCBiZSBhIGZpcm13YXJlIHZlcnNpb24sIGF0IHRoZSBPUyBsYXllciBhbmQgYmUgYW4gT1Mg dmVyc2lvbiwgZXRjLg0KDQoNCknigJl2ZSBqdXN0IGFkZGVkIGEgUFI8aHR0cHM6Ly9uYW0wNi5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHVi LmNvbSUyRmlldGYtcmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZkYXRhPTA0JTdDMDElN0NkdGhh bGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2FiMWVlNzc4OGYxZjRkNDQ5YzU1MDhkODdhYWEzMDA2JTdD NzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDIxODY1ODg5 NTY4NSU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9p VjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJnNkYXRhPUp5TkNU d1VKdmtDUGszSDl1WW1EMEJMZlVYUHU2dmhuUW9ta0lxaXFpVU0lM0QmcmVzZXJ2ZWQ9MD4gZm9y IEhXIHZlcnNpb24gY2xhaW1zLg0KDQpUaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9uIGNsYWltcyBp cyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUgZXhhbXBsZXMg dG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJlcHJlc2VudC4N Cg0KQWdyZWUgdGhpcyBzb3VuZHMgcHJvbWlzaW5nLg0KDQpUaGUgcGFyYWdyYXBoIG1lbnRpb25z IOKAnHR5cGUgb2YgVEVF4oCdLiBJ4oCZbSBub3Qgc3VyZSB3aGF0IGlzIGludGVuZGVkLiBJIGRv buKAmXQga25vdyBvZiBhbnkgY29tbW9uIHRheG9ub215IGZvciBjbGFzc2lmeWluZyBURUVzLg0K DQpBIHVuaXF1ZSBpZGVudGlmaWVyIGlzIHN1ZmZpY2llbnQgaW4gbXkgdmlldywgbm8g4oCcY2xh c3NpZmljYXRpb27igJ0gb3Ig4oCcdGF4b25vbXnigJ0gaXMgcmVxdWlyZWQgYnkgYW55dGhpbmcg dGhhdCB0aGUgVEVFUCBXRyBoYXMgZGlzY3Vzc2VkIHRvIGRhdGUsIGFzIGZhciBhcyBJIGtub3cu DQoNClNob3VsZCB0aGUgVEVFUCBXRyBkZWZpbmUgVEVFUC1zcGVjaWZpYyBjbGFpbXMgZm9yIHN1 Y2ggaW5mb3JtYXRpb24/DQoNCknigJlkIGxpa2UgdG8gc2VlIG1vc3Qgb2YgdGhlbSBnbyBpbnRv IEVBVCB1bmxlc3MgdGhleSBhcmUgc3VwZXIgc3BlY2lmaWMgdG8gVEVFUCAoVEVFUCBub3QgVEVF cykuIEkgdGhpbmsgdGhlcmUgaXMgdmFsdWUgaW4gYnJvYWQgc3RhbmRhcmRpemUgY2xhaW1zIGFz IGl0IHByb21vdGVzIGludGVyb3BlcmFiaWxpdHkgb2YgUkFUUy4NCg0KU291bmRzIGdvb2QgdG8g bWUuICAgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5IHRvIGV4cHJlc3Mg 4oCcdmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0gb3Igd2hhdGV2ZXIg eW91IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNsYWltcyB0aGF0IGNh biBiZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4gICBJIGdsYW5jZWQg YXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBzZWVtcyB0byBiZSBhIGNoaXAtc3BlY2lm aWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9uIGNsYWltIHRoYXQgY2FuIGJlIHVzZWQg YXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3VmZmljaWVudCB0byBtZWV0IHRoZSBURUVQ IGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywgd2Ugc3RpbGwgbmVlZCBvdGhlciBjbGFpbXMg YWRkZWQuDQoNClRoYW5rcyENCkRhdmUNCg0KTEwNCg0KDQoNCg0KRGF2ZQ0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpS QVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZs aXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0Nh YjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3 Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJH WnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3 aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0YT1PNUxKWkJ3JTJCNmh1WVU3QnJOU2dPVVFOdzJI NXVvREd3WmowOSUyRlBnaEtySSUzRCZyZXNlcnZlZD0wPg0KDQo= --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAy IDIgMzt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1h bCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlm O30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNw YW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0K CW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1z b0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0 eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0 b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZv bnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252 ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFt ZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNv Q2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAu MHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46 MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRT ZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1p ZDoxODA2NTAyNzYxOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRl LWlkczoxOTcyODAwOTA0IDY3Njk4NzA1IDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4 NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwwOmxldmVs MQ0KCXttc28tbGV2ZWwtdGV4dDoiJTFcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw1 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJv bWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNw0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0 Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0K CXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1s PjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpl eHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVs YXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPklubGluZSBi ZWxvd+KApjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNv cnQuY29tJmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE9jdG9iZXIgMjcsIDIwMjAg MTE6NTcgQU08YnI+DQo8Yj5Ubzo8L2I+IERhdmUgVGhhbGVyICZsdDtkdGhhbGVyQG1pY3Jvc29m dC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiByYXRzQGlldGYub3JnOyB0ZWVwICZsdDt0ZWVwQGll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVl ZGVkIGJ5IFRFRVA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlBlcnNv bmFsbHksIEkgdGhpbmsgYXR0ZXN0YXRpb24gb2YgVEVF4oCZcyBpcyBwcmV0dHkgaW1wb3J0YW50 IGFuZCBzaG91bGQgYmUgaGFuZGxlZCB3ZWxsIGluIEVBVC4gU28gSeKAmW0gaW50ZXJlc3RlZCBp biB3b3JraW5nIG9uIGFuZCBhZGRpbmcgY2xhaW1zIGZvciB0aGlzIHRvIEVBVC48bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QWZ0ZXIgcmVhZGluZyBzZWN0aW9uIDcuMSBp biBURUVQIGFyY2hpdGVjdHVyZSwgaXQgZG9lcyBzZWVtIGxpa2UgdGhlcmUgc29tZSB3b3JrIHRv IGRvIGhlcmUgdG8gZ2V0IHRvIHNwZWNpZmljIHN0YW5kYXJkaXplZCBpbnRlcm9wZXJhYmxlIGNs YWltcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5Nb3Jl IGNvbW1lbnRzIGJlbG93LjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5P biBPY3QgMjYsIDIwMjAsIGF0IDM6MTUgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWls dG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPmR0aGFsZXI9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+QXMgZGlzY3Vzc2VkIGluIHBy ZXZpb3VzIElFVEYgbWVldGluZ3MsIGlmIHRoZXJlIGFyZSBjbGFpbXMgYmV5b25kIHRoZSBiYXNl IHNldCB0aGF0PGJyPg0Kb3RoZXIgV0dzIG5lZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0 aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5IFJBVFMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+VGhlIFRFRVAgV0cgbmVlZHMgdGhlIGZvbGxvd2luZyBpbiBFQVRzIGFu ZCBJIGFtIG5vdCBzdXJlIHdoZXRoZXIgdGhleSBjYW4gYmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5jb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWltcyBvciB3aGV0 aGVyIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGFyZSBuZWVkZWQuJm5ic3A7IEZyb208bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5zZWN0aW9uIDcuMSBvZiBkcmFmdC1p ZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOw0KIERldmlj ZSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVEVFUCBhdHRlc3RhdGlvbnMgbWF5IG5lZWQgdG88 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO3VuaXF1ZWx5DQogaWRlbnRpZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4mbmJzcDsg VW5pcXVlIGRldmljZTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7aWRlbnRpZmljYXRpb24NCiBhbGxvd3MgdGhlIFRBTSB0 byBwcm92aWRlIHNlcnZpY2VzIHRvIHRoZSBkZXZpY2UsPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO3RleHQt aW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzdWNoDQogYXMgbWFu YWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3ZpZGluZyBzdWJzY3JpcHRpb25zIHRvPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDtzZXJ2aWNlcywNCiBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRl cmlhbCB0bzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Y29tbXVuaWNhdGUNCiB3aXRoIG9yIGF1dGhlbnRpY2F0ZSB0aGUg ZGV2aWNlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+SSBiZWxpZXZlIHRo ZSBVbml2ZXJzYWwgRW50aXR5IElEIENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0IG1lZXRzIHRo ZSBhYm92ZSByZXF1aXJlbWVudC48YnI+DQpCdXQgdGhlIFRFRVAgYXJjaCB0aGVuIGdvZXMgb24g dG8gc2F5Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjI1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4w cHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0lu DQogc29tZSB1c2UgY2FzZXMgaXQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOY PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRl bnRpZnkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcu MHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtz ZWN1cml0eQ0KIGFuZCBwcml2YWN5IHJlcXVpcmVtZW50cyByZWdhcmRpbmcgZGV2aWNlIGlkZW50 aWZpY2F0aW9uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDt3aWxsDQogdmFyeSB3aXRoIHRoZSB0eXBlIG9mIFRBIHByb3Zp c2lvbmVkIHRvIHRoZSBURUUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQy OTJFIj5XaGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8gVGhlIGNsb3Nl c3QgdGhpbmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9lbWlkKTxicj4N CmJ1dCBJIGFtIG5vdCBzdXJlIHRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIG9ubHkgdGhl IE9FTSBub3QgdGhlIGRldmljZSBjbGFzcyBmcm9tIHRoYXQgT0VNLjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+VGhpcyBkb2VzbuKAmXQgc2VlbSBsaWtlIHNvbWV0 aGluZyB0aGF0IHNob3VsZCBiZSBURUVQIHNwZWNpZmljIHRob3VnaCwgc28gY2FuIHNvbWVvbmUg dGVsbCBtZSBob3cgdG88YnI+DQpyZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRoZSBjbGFp bXMgaW4gdGhlIEVBVCBzcGVjPzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkkgZG9u4oCZdCB0aGluayB0aGUgT0VNSUQsIFVFSUQgb3Igb3RoZXIgc2hvdWxkIGJl IChhYil1c2VkICZuYnNwO3RvIHJlcHJlc2VudCBkZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVz dWx0IGluIHRoZW0gYmVpbmcgbGVzcyByZWxpYWJsZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBz ZW5zZS4gV2Ugc2hvdWxkIGNvbWUgdXAgd2l0aCBhIG5ldyBjbGFpbS48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+KzE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+V2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICZuYnNwO3Ro ZSBkZXZpY2UgY2xhc3MgYW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0 IEkgdGhpbmsgd2UgaGF2ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGlu dGVyb3BlcmFibGUgc3RhbmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0byBiZSBzb21lIG1ldGhv ZCBmb3IgdGhlDQogY2xhc3NpZmljYXRpb24uIFRydXN0Wm9uZSB2cyBoeXBlcnZpc29yIGJhc2Vk PyBGYXN0IHZzIHNsb3c/IEhhcyBhIHByb3RlY3RlZCBtb2RlIGtlcm5lbCBhbmQgVEFzPyBUaGUg VEVFUCBkb2N1bWVudCBkb2VzbuKAmXQgc2F5LiBUaGlzIHNlZW1zIHByb2JsZW1hdGljIHdpdGhv dXQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPltEVF0gSeKAmW0gbm90IHN1cmUgd2UgbmVlZCBhIGNsYXNzaWZpY2F0aW9uIHNjaGVt ZSwgYXQgbGVhc3QgZm9yIFRFRVAuICZuYnNwO0Egc2ltcGxlIGRldmljZSBjbGFzcyBieXRlIHN0 cmluZyBhcyB5b3Ugc3VnZ2VzdCB3b3VsZCBzdWZmaWNlIGluIG15IG9waW5pb24uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgd29uZGVyIGlm IHRoZSBpbnRlbnQgaXMgbW9yZSBhYm91dCBncm91cGluZywgaW4gd2hpY2ggY2FzZSB3ZSBjYW4g ZGVmaW5lIGEgR0VJRCAoR3JvdXAgRW50aXR5IElEKSB0aGF0IGxvb2tzIGEgbG90IGxpa2UgYSBV RUlELiBUaGF0IHNlZW1zIHVzZWZ1bCBhbmQgc2Vuc2libGUgdG8gbWUuIEl0IGlzIG5vdCBhYm91 dCBjbGFzc2lmaWNhdGlvbiBiYXNlZCBvbiBhbnkNCiBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxpbmVz IHVwIHdpdGggdGhlIHByaXZhY3kgcHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtleSBwZXIg MTAwLDAwMCBkZXZpY2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWlu ZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZuYnNwOy0mbmJz cDsgVEVFIElkZW50aWZ5aW5nIEluZm9ybWF0aW9uOiBUaGUgdHlwZSBvZiBURUUgdGhhdCBnZW5l cmF0ZWQgdGhpczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBp bjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3Mi PsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwO2F0dGVzdGF0aW9uIG11c3QgYmUgaWRlbnRpZmllZCwgaW5j bHVkaW5nIHZlcnNpb24gaWRlbnRpZmljYXRpb248bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwv c3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBzdWNo IGFzIHRoZSBoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uPG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7b2YgdGhlIFRFRSwgYXMgYXBwbGljYWJsZSBieSB0aGUgVEVFIHR5cGUuJm5ic3A7IFRFRSBt YW51ZmFjdHVyZXI8bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2Rpbmdz Ij7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyByZXF1aXJl ZCBpbiBvcmRlciB0byBkaXNhbWJpZ3VhdGUgdGhlPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8 L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c2FtZSBURUUgdHlwZSBj cmVhdGVkIGJ5IGRpZmZlcmVudCBtYW51ZmFjdHVyZXJzIGFuZCBhZGRyZXNzPG86cD48L286cD48 L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss c2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Y29uc2lkZXJhdGlvbnMgYXJvdW5kIG1hbnVmYWN0dXJlciBwcm92aXNpb25pbmcsIGtleWluZyBh bmQ8bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1p bmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDtzdXBwb3J0IGZvciB0aGUgVEVFLjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3ByZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My4wcHQ7bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206 LjAwMDFwdDtiYWNrZ3JvdW5kOndoaXRlO2JhY2tncm91bmQtcG9zaXRpb246aW5pdGlhbCBpbml0 aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlhbCI+DQo8c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nl c3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBh bSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhlIG1h bnVmYWN0dXJlciBub3QgdGhlICZxdW90O3ZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRp b24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJz aW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+RGVm aW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uIDxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+KzE8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBpbnRlbnQgb2YgaXQgc29tZXRoaW5n IGxpa2UgRW5kb3JzZXIgaWRlbnRpZmljYXRpb24gYW5kIEkgdGhpbmsgaXQgc2hvdWxkIGJlIHJl cGxhY2VkIGJ5IGFuIEVuZG9yc2VyL1guNTA5IGNlcnQgVVJMLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgd291bGQgc2F5LCB0aGlzIGlzIGEgY29tYmlu YXRpb24gb2YgY2xhaW1zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkl04oCZ cyBqdXN0IHVzZWQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEi PjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48c3Bh biBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4xKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkZv ciBhIFZlcmlmaWVyIGluIGFwcHJhaXNpbmcgdGhlIGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3Bl Y2lmaWMgaGVyZSwgYXBwcmFpc2FsIHBvbGljeSBjYW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9 InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBv cnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPjIpPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFu PjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VG8gYmUgdXNlZCBieSBh IFRBTSB0byBkZWNpZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRvIHRoZSBURUUuJm5ic3A7IEluIHRo YXQgc2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNs YXNzIGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZQ0KIGlmIHRoZXJlIHdlcmUgYSBieXRl IHN0cmluZyBmb3IgZGV2aWNlIGNsYXNzIGFzIHlvdSBzdWdnZXN0IHRoYXQgd291bGQgYmUgc3Vm ZmljaWVudCBpbiBteSBvcGluaW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+S2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVzdGF0aW9u4oCdIGNv bmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBjbGFpbXNldCBwZXIg bGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0gYW5kIOKAnGNsYXNz 4oCdIGNsYWltcw0KIHRoYXQgd291bGQgYXBwbHkgdG8gYW55IGRldmljZSBjb3VsZCBiZSByZXVz ZWQgZm9yIHRoZSBURUUsIGFuZCByZXVzZWQgZm9yIGRlc2NyaWJpbmcgZWFjaCBsYXllci4mbmJz cDsgRS5nLiwgYSDigJx2ZXJzaW9u4oCdIGNsYWltIHdvdWxkIGFwcGx5IGF0IHRoZSBoYXJkd2Fy ZSBsYXllciBhbmQgYmUgdGhlIGhhcmR3YXJlIHZlcnNpb24sIGF0IHRoZSBmaXJtd2FyZSBsYXll ciBhbmQgYmUgYSBmaXJtd2FyZSB2ZXJzaW9uLCBhdCB0aGUgT1MgbGF5ZXIgYW5kIGJlDQogYW4g T1MgdmVyc2lvbiwgZXRjLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SeKAmXZlIGp1c3QgYWRkZWQg YSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZlYXQl MkZwdWxsJTJGNjgmYW1wO2RhdGE9MDQlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdD YWIxZWU3Nzg4ZjFmNGQ0NDljNTUwOGQ4N2FhYTMwMDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mzk0MjE4NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBi R1pzYjNkOGV5SldJam9pTUM0d0xqQXdNREFpTENKUUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFX d2lMQ0pYVkNJNk1uMCUzRCU3QzEwMDAmYW1wO3NkYXRhPUp5TkNUd1VKdmtDUGszSDl1WW1EMEJM ZlVYUHU2dmhuUW9ta0lxaXFpVU0lM0QmYW1wO3Jlc2VydmVkPTAiPlBSPC9hPiZuYnNwO2Zvcg0K IEhXIHZlcnNpb24gY2xhaW1zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPlRoZSBpbnRlbnQgZm9yIFNXIHZlcnNpb24gY2xhaW1zIGlzIHRvIHVzZSBDb1NX SUQuIFdlIHNob3VsZCBwcm9iYWJseSBjcmVhdGUgc29tZSBleGFtcGxlcyB0byBzZWUgaWYgaXQg Y2FuIHJlcHJlc2VudCB3aGF0IFRFRVAgd2FudHMgdG8gcmVwcmVzZW50LjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5BZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBwYXJh Z3JhcGggbWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBzdXJlIHdoYXQgaXMg aW50ZW5kZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25vbXkgZm9yIGNsYXNz aWZ5aW5nIFRFRXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5B IHVuaXF1ZSBpZGVudGlmaWVyIGlzIHN1ZmZpY2llbnQgaW4gbXkgdmlldywgbm8g4oCcY2xhc3Np ZmljYXRpb27igJ0gb3Ig4oCcdGF4b25vbXnigJ0gaXMgcmVxdWlyZWQgYnkgYW55dGhpbmcgdGhh dCB0aGUgVEVFUCBXRyBoYXMgZGlzY3Vzc2VkIHRvIGRhdGUsIGFzIGZhciBhcyBJIGtub3cuPC9z cGFuPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQtcG9zaXRpb246 aW5pdGlhbCBpbml0aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlhbCI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPlNob3VsZCB0aGUgVEVFUCBXRyBkZWZpbmUgVEVFUC1zcGVjaWZpYyBjbGFp bXMgZm9yIHN1Y2ggaW5mb3JtYXRpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SeKAmWQgbGlrZSB0 byBzZWUgbW9zdCBvZiB0aGVtIGdvIGludG8gRUFUIHVubGVzcyB0aGV5IGFyZSBzdXBlciBzcGVj aWZpYyB0byBURUVQIChURUVQIG5vdCBURUVzKS4gSSB0aGluayB0aGVyZSBpcyB2YWx1ZSBpbiBi cm9hZCBzdGFuZGFyZGl6ZSBjbGFpbXMgYXMgaXQgcHJvbW90ZXMgaW50ZXJvcGVyYWJpbGl0eSBv ZiBSQVRTLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5Tb3VuZHMgZ29vZCB0 byBtZS4mbmJzcDsmbmJzcDsgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5 IHRvIGV4cHJlc3Mg4oCcdmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0g b3Igd2hhdGV2ZXIgeW91IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNs YWltcw0KIHRoYXQgY2FuIGJlIGFwcGxpZWQgaW4gY2xhaW1zZXRzIGF0IHZhcmlvdXMgbGF5ZXJz LiZuYnNwOyZuYnNwOyBJIGdsYW5jZWQgYXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBz ZWVtcyB0byBiZSBhIGNoaXAtc3BlY2lmaWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9u IGNsYWltIHRoYXQgY2FuIGJlIHVzZWQgYXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3Vm ZmljaWVudCB0byBtZWV0IHRoZSBURUVQIGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywNCiB3 ZSBzdGlsbCBuZWVkIG90aGVyIGNsYWltcyBhZGRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+RGF2ZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5MTDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJyPg0KPGJyPg0KPG86cD48L286cD48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+RGF2ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJy Pg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0 Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3MiI+UkFUU0BpZXRmLm9yZzwvc3Bh bj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFt MDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3 dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmYW1wO2RhdGE9MDQlN0MwMSU3 Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDYWIxZWU3Nzg4ZjFmNGQ0NDljNTUwOGQ4N2FhYTMw MDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mzk0MjE4 NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBiR1pzYjNkOGV5SldJam9pTUM0d0xqQXdNREFpTENK UUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFXd2lMQ0pYVkNJNk1uMCUzRCU3QzEwMDAmYW1wO3Nk YXRhPU81TEpaQnclMkI2aHVZVTdCck5TZ09VUU53Mkg1dW9ER3daajA5JTJGUGdoS3JJJTNEJmFt cDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5NTRGNzIiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvc3Bhbj48L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_-- From nobody Tue Oct 27 13:33:28 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A85CA3A159A; Tue, 27 Oct 2020 13:33:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net header.b=bJm07vyq; dkim=pass (1024-bit key) header.d=juniper.net header.b=BPi7PDP0 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ywIrv_TSM8FC; Tue, 27 Oct 2020 13:33:24 -0700 (PDT) Received: from mx0a-00273201.pphosted.com (mx0a-00273201.pphosted.com [208.84.65.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 942353A159C; Tue, 27 Oct 2020 13:33:24 -0700 (PDT) Received: from pps.filterd (m0108159.ppops.net [127.0.0.1]) by mx0a-00273201.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 09RKQnf2018739; Tue, 27 Oct 2020 13:33:24 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=jLE0OI9kD+fLGhd39jkX+ygIyUU0OWObdwy0iRygzAc=; b=bJm07vyqI24/YFiPrdF6aXhyImh6VNTvzCKaO97zuT5B6IgqZ3wPdYhlrKfe/ouNYTIP zxKv8kaBtQsySYkjrU5PRgFgXBgCUUTAbJYiGbUmXL9mgA3P7QFB/j0EncUJH7idOt41 WFWga1awLIebO2t3h8D5dZ3gbiXHmikU0RLN2vDwlB9KpuwjFAAS+0H9KsEorOJbNo5I 5OYkwXEAiH+lQDyKJVS3395BuvM3olNpHVBkzpQ7ndsjs+WhBf5Mgy0oCH6C5PMdI0JM RPj8gGBDOGFpvcrqrkIki9oBF19Wm2rOzjEUzf73hPI2Wr05oPZdzmoVOK9cxfe/7s6r gQ== Received: from nam12-bn8-obe.outbound.protection.outlook.com (mail-bn8nam12lp2171.outbound.protection.outlook.com [104.47.55.171]) by mx0a-00273201.pphosted.com with ESMTP id 34cj7vwagk-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 27 Oct 2020 13:33:24 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=aEvBJiJzHvFi9izSOfcJzLYI4LRFupQ4UTHsVeXDA2yWgRqAmAZ1cZYgw2tppl4tc2KScdk+MbCGh67bGKN3VUdvRiKq7VOYx+K78oQf+yuSlxnk1DSDismdidLQHYuqPlPbHddpXU1HAdN2DIacKJY36ewXPCeH9X1L00KW+/Inb5cmMnSrFIPpXhbIrP+6ZRrJI2UjBlDCoYyGoaLOEbU5T28skXfCjYAU47haverLmxpob/k227KTfOJJ3XaiBiYe3Bnw+A3oqVJ4Yw63SuWDYQ8nLfUEk0Ba0f8BnUQpNz+JiiycP7qf24C1Bw72rM4zJFR9wdph6wlMSflvmw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jLE0OI9kD+fLGhd39jkX+ygIyUU0OWObdwy0iRygzAc=; b=dK3XP6atgwXGDbqDbtarVde/8sOir1s1JPrDpb7g5iJu8r3vkihC8fdga7+3EQF4ecRTidyNLB/ZJgbdf8VGC8UAo/J9LQHoH44uVG0RLi+7X8OZDdYQpNlkz5U9wP4eW6/wfnhiJLW8CHj5m4H08ThIHVlgE8fFWz/r430+4cOtb0FzFTfrmOjjDin9vEvJM+c7TUptdtdYsNkL5WBxQsXB8p3DoRRHIVTOuRqMR9CEZglRUVNrsLZZzgg8AamfH5ZeZefYrLrIDvkviCRfQvdd9fNJ/m+FD5cAWkn9dHUk/Zvrdw8znT7s2tKeHMEJ72aCX3QryK24bVj9sfWAHA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=juniper.net; dmarc=pass action=none header.from=juniper.net; dkim=pass header.d=juniper.net; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jLE0OI9kD+fLGhd39jkX+ygIyUU0OWObdwy0iRygzAc=; b=BPi7PDP0DA997pGxu4+0z0RISJaO71If0hFuMZ5CYvIFa92u2WOivuS0niFKVbxQNvORN5GaZjpnbE2NvYWdL5ah4VoQoQB6bIiKAH79JB2LxHt5rw+dpo3UtSdmdnBfmUbFlPd2S1sgVFOd/Y2dXOWkrm/E+Ylo9onamft6lYE= Received: from BLAPR05MB7378.namprd05.prod.outlook.com (2603:10b6:208:298::10) by BL0PR05MB5508.namprd05.prod.outlook.com (2603:10b6:208:6c::30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.4; Tue, 27 Oct 2020 20:33:22 +0000 Received: from BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600]) by BLAPR05MB7378.namprd05.prod.outlook.com ([fe80::ed9a:1675:208f:4600%3]) with mapi id 15.20.3499.017; Tue, 27 Oct 2020 20:33:22 +0000 From: Guy Fedorkow To: "rats@ietf.org" CC: "rats-chairs@ietf.org" Thread-Topic: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt Thread-Index: AQHWq8F7YsqzDldsd0e0zdGQRheW7amqSnEAgAGec9A= Date: Tue, 27 Oct 2020 20:33:21 +0000 Message-ID: References: <160373503765.26087.6796865607217511838@ietfa.amsl.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.5.0.60 dlp-reaction: no-action msip_labels: MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled=true; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate=2020-10-27T20:33:20Z; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method=Standard; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name=0633b888-ae0d-4341-a75f-06e04137d755; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId=bea78b3c-4cdb-4130-854a-1d193232e5f4; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId=c713eb96-e3c5-4c69-ab86-9c25b19547e7; MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits=2 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; x-originating-ip: [24.61.11.4] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 33bec7bc-ce4c-4763-c79d-08d87ab78c11 x-ms-traffictypediagnostic: BL0PR05MB5508: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: grEUrU8k07a9bXa9OQ1z/YvLR+ON324zmROUDpQRMwVEdLj2WjQuHhAQFpIaken3q+6jHxAWitZv+yhsz7ze03NT7MQNp0sec6EM+vPzilOcmgJpKEjfGCud7kSqFDX6VCTA6KgLhN8pxeDV4qXhZZLlFPwDFoLZOvUuZckuS6YDBoOZ9IJr8HYV3fuvoBsDbcH9H3kn5XTUPFIydL25FxAr8VdpnlzEnJjMpfuuo4G/016fOoP0KuqQ8TU7+u+8KaKzXkjVfr4gdcbhvIPgiM1bcKEM+Gyzqljg3xDCaWIFZ/Jh1gHoIFNFzfAgjNL8ceBc342RvmwqQx+e94TM0JgUG53S7HUJ1Vnm9R/kRlXt+WfLXsDIyZwlntfdwk2rjqTnPBN/XCVPNigRzyemRA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BLAPR05MB7378.namprd05.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(136003)(366004)(346002)(39860400002)(376002)(26005)(64756008)(66446008)(83380400001)(478600001)(316002)(71200400001)(7696005)(66574015)(450100002)(5660300002)(4326008)(2906002)(52536014)(53546011)(6506007)(186003)(55016002)(76116006)(33656002)(6916009)(66476007)(66556008)(8676002)(9686003)(8936002)(66946007)(966005)(86362001)(4001150100001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: ORUIUcyAFvTvWYVzFKcGwqi5H2f08sT0gUH/mj25w1eawrvI/StdNABuV4poRkUpoOb5HbChRmMTEoqARG9GDUBqwWRz18fMsX/T2FJLA3blJNR8dms2xJv87TTT6birnJ5wN3iuTugx5cWwDrp4RIZDuiIYZ++sCSWSNkyVisPgMMQ42w7bj4NnsP3xYgv1vicR47gAwwsjfO99MSx3PNUnRm6yZlOH4ubw+XhXtfJpukFxhUvDZGBiuy1UEV2uUmVUXaj0EIIejQXTEObUWZ0hex5z3FO2GNBgWgov4ey0QeYGRRXS5jDF5ZfWXUwP9WYUKjfSw1svsO9sfPXrACrlZDBFLKjYNsvhKgIWkzP8SYsV0nLwxxaayU4hpJCcCZgtqLvo8Ts3W4pQ5kX82zQ9ZHldIZRvVG0jQWSGfO6wrGdNbsmJrMKHbB8WfDVl87AUE3H1C5rf7ELJh2HQzndf4c+Ym0xT4RF+xmAoikp/epuIchHWiwC6kexuGdflMreIlRLNWGHeAbX22/v6IVEDEKmod2w7mMXheSuAAO1a/41+6rhGH8uIVZW/QkPPstw8IY3l9y/5o8iFHh965xk3jvAxhrrqU6QEr6QABYE3gxfy6nAjOIzsSyO/Hk1Ua8jZnkCX7sKe76jo5WoK9A== x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BLAPR05MB7378.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 33bec7bc-ce4c-4763-c79d-08d87ab78c11 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2020 20:33:21.8304 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HOjlkpR4RGpTU7RLJjM0k5xfkSQOlqbdD7aU8tiYKdPAvP4tTqi6v8ziYcCYZC1xW0csGTkyEXsMfg5IU+eZqA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR05MB5508 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.312, 18.0.737 definitions=2020-10-27_15:2020-10-26, 2020-10-27 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 spamscore=0 impostorscore=0 clxscore=1015 priorityscore=1501 adultscore=0 malwarescore=0 mlxlogscore=999 mlxscore=0 suspectscore=0 lowpriorityscore=0 bulkscore=0 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2010270118 Archived-At: Subject: Re: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest-05.txt X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 20:33:28 -0000 Henk Birkholz ; Dave Thaler ; Smith, Ned ; Panwei (William) ; Mark Baushke ; Ira McDonald ; Bill Sulzen (bsulzen) Greetings colleagues, I've checked in the -05 version of the RATS RIV speci= fication. As far as I know, this version addresses all the comments from W= G Last Call, plus others from earlier reviewers. Please take a look, and if your remark wasn't addressed properly, let me = know and I'll correct the corrections. And of course if anyone spots colla= teral damage, please point it out! Thanks all /guy Juniper Business Use Only -----Original Message----- From: RATS On Behalf Of internet-drafts@ietf.org Sent: Monday, October 26, 2020 1:57 PM To: i-d-announce@ietf.org Cc: rats@ietf.org Subject: [Rats] I-D Action: draft-ietf-rats-tpm-based-network-device-attest= -05.txt [External Email. Be cautious of content] A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Remote ATtestation ProcedureS WG of the IE= TF. Title : TPM-based Network Device Remote Integrity Verific= ation Authors : Guy Fedorkow Eric Voit Jessica Fitzgerald-McKay Filename : draft-ietf-rats-tpm-based-network-device-attest-0= 5.txt Pages : 43 Date : 2020-10-26 Abstract: This document describes a workflow for remote attestation of the integrity of firmware and software installed on network devices that contain Trusted Platform Modules [TPM1.2], [TPM2.0], as defined by the Trusted Computing Group (TCG). The IETF datatracker status page for this draft is: https://urldefense.com/v3/__https://datatracker.ietf.org/doc/draft-ietf-rat= s-tpm-based-network-device-attest/__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmW= RtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7HIYHiPg$ There are also htmlized versions available at: https://urldefense.com/v3/__https://tools.ietf.org/html/draft-ietf-rats-tpm= -based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmWRtP= HcbBhAin0NFydKucXTTIvEY_o6fkG1_i74K3PRzY$ https://urldefense.com/v3/__https://datatracker.ietf.org/doc/html/draft-iet= f-rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57Kkg= R_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7EVVqwYo$ A diff from the previous version is available at: https://urldefense.com/v3/__https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-= rats-tpm-based-network-device-attest-05__;!!NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_= -lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7CSmkfSE$ Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: https://urldefense.com/v3/__ftp://ftp.ietf.org/internet-drafts/__;!!NEt6yMa= O-gk!TB2y-zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i71-Q1Ydk$ _______________________________________________ RATS mailing list RATS@ietf.org https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/rats__;!!= NEt6yMaO-gk!TB2y-zn6l6cA57KkgR_-lgmWRtPHcbBhAin0NFydKucXTTIvEY_o6fkG1_i7w-w= SnkI$ From nobody Tue Oct 27 13:45:13 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E109E3A0E9E for ; Tue, 27 Oct 2020 13:45:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.261 X-Spam-Level: X-Spam-Status: No, score=-0.261 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sk1sRJeLAK8f for ; Tue, 27 Oct 2020 13:45:09 -0700 (PDT) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D48E33A0EE1 for ; Tue, 27 Oct 2020 13:45:09 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id XVq8kNvDACxjbXVq9knBDS; Tue, 27 Oct 2020 13:45:09 -0700 X-CMAE-Analysis: v=2.4 cv=MYepB7zf c=1 sm=1 tr=0 ts=5f9886d5 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=yMhMjlubAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=yj6dSO1jGMNs0pzK1ZEA:9 a=ZaHD-_rrhb3_OlZV:21 a=_FpwxEm8Vo6fSCVZ:21 a=QEXdDO2ut3YA:10 a=VYg6gOQCZo0zsz-dFs4A:9 a=XMRbwrl2xdCQ6TV1:21 a=BP4yVtUgfEJ8JaCq:21 a=w7rmA34bbtZsaBuO:21 a=_W_S_7VecoQA:10 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Tue, 27 Oct 2020 13:45:08 -0700 In-Reply-To: Cc: "rats@ietf.org" , teep To: Dave Thaler References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfAWqfDgD7QZgcfXxvW0P7APYznLunv78kMvSSgpVpQNPk6p7a+pYbgTL0+X3WCE+yK2eeT5cZxUtIm+DUDzBmd8h8lH+k41sm+hFslIVQXKOtakvI0aF sBooYiFS6xAU3VbPXsPSyIcGplRQ1Chm3Yz5YBxWCGpKGxx0gjtbqhQGNwxJbQ152qwVDMOZsoV7a5M+a8kgoyuTojNaNmex9oy+qy979eBjTi2zev8pcOtm LlShGlPRDqYRUY9Roz8BGw== Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 20:45:12 -0000 --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 CoSWID should cover all the identification of vendors, models, versions = and stuff for SW. If it doesn=E2=80=99t talk to Henk about fixes to = CoSWID. :-) For HW, there is OEMID and recently proposed chip version, board version = and device version. It seems like we need a model number claim for HW. I = will work on that. Seems like submodules would be used to organize claims for layered = attestation and all of the above claims can occur in any submodule they = need to. Does this mostly cover it?=20 I worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that. LL > On Oct 27, 2020, at 1:26 PM, Dave Thaler = wrote: >=20 > Inline below=E2=80=A6 > =20 > From: Laurence Lundblade >=20 > Sent: Tuesday, October 27, 2020 11:57 AM > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > Personally, I think attestation of TEE=E2=80=99s is pretty important = and should be handled well in EAT. So I=E2=80=99m interested in working = on and adding claims for this to EAT. > =20 > After reading section 7.1 in TEEP architecture, it does seem like = there some work to do here to get to specific standardized interoperable = claims. > =20 > More comments below. >=20 >=20 > On Oct 26, 2020, at 3:15 PM, Dave Thaler = > wrote: > =20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? > =20 > I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. > =20 > +1 > =20 > We can define a claim to be the device class and make it a byte = string like a UEID, but I think we have to go further to make it useful = as an interoperable standardize claim. There has to be some method for = the classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. > =20 > [DT] I=E2=80=99m not sure we need a classification scheme, at least = for TEEP. A simple device class byte string as you suggest would = suffice in my opinion. > =20 > I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =20 > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D > =20 > Definitely not origination claim.=20 > =20 > +1 > =20 > The intent of it something like Endorser identification and I think it = should be replaced by an Endorser/X.509 cert URL. > =20 > I would say, this is a combination of claims > =20 > It=E2=80=99s just used: > 1) For a Verifier in appraising the evidence (nothing TEEP = specific here, appraisal policy can involve any claim), and > 2) To be used by a TAM to decide which TA=E2=80=99s apply to the = TEE. In that sense it=E2=80=99s just like any other vendor id + device = class for any non TEE, and I believe if there were a byte string for = device class as you suggest that would be sufficient in my opinion. > =20 > Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D concept in = the arch doc, as long as we have a claimset per layer, then I think the = same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D claims that = would apply to any device could be reused for the TEE, and reused for = describing each layer. E.g., a =E2=80=9Cversion=E2=80=9D claim would = apply at the hardware layer and be the hardware version, at the firmware = layer and be a firmware version, at the OS layer and be an OS version, = etc. > =20 > =20 > I=E2=80=99ve just added a PR = for HW version claims. > =20 > The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. > =20 > Agree this sounds promising. > =20 > The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > =20 > A unique identifier is sufficient in my view, no =E2=80=9Cclassification= =E2=80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know. >=20 > Should the TEEP WG define TEEP-specific claims for such information? > =20 > I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. > =20 > Sounds good to me. Consider this a request to add some way to = express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or = =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers. I glanced at the PR you referenced and it seems to be = a chip-specific version, not a generic version claim that can be used at = multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80=99= s requirements, we still need other claims added. > =20 > Thanks! > Dave > =20 > LL > =20 >=20 >=20 > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = > =20 --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
CoSWID should cover all the identification of vendors, = models, versions and stuff for SW. If it doesn=E2=80=99t talk to Henk = about fixes to CoSWID. :-)

For HW, there is OEMID and recently proposed chip version, = board version and device version. It seems like we need a model number = claim for HW. I will work on that.

Seems like submodules would be used to = organize claims for layered attestation and all of the above claims can = occur in any submodule they need to.

Does this mostly cover = it? 

I = worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that.

LL


On Oct = 27, 2020, at 1:26 PM, Dave Thaler <dthaler@microsoft.com> wrote:

Inline below=E2=80=A6
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: Tuesday, October 27, 2020 = 11:57 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
Personally, I think attestation of TEE=E2=80=99s is = pretty important and should be handled well in EAT. So I=E2=80=99m = interested in working on and adding claims for this to EAT.
 
After reading section 7.1 in TEEP = architecture, it does seem like there some work to do here to get to = specific standardized interoperable claims.
 
More comments below.


On Oct 26, 2020, at 3:15 PM, Dave Thaler = <dthaler=3D40microsoft.com@dmarc.ietf.org> wrote:
 
As= discussed in previous IETF meetings, if there are claims beyond the = base set that
other WGs need, they can be specified by the = other WGs with review by RATS.
 
The TEEP WG needs the = following in EATs and I am not sure whether they can be
covered by existing claims = or whether TEEP-specific claims are needed.  From
section 7.1 of = draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the Universal Entity ID Claim (ueid) is = claim that meets the above requirement.
But the TEEP arch = then goes on to say:
 
=C3=98        In some use cases = it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains = the device class? The closest thing I see is OEM Identification by IEEE = (oemid)
but I am not sure that is sufficient since it's = only the OEM not the device class from that OEM.
This doesn=E2=80= =99t seem like something that should be TEEP specific though, so can = someone tell me how to
represent device class using the = claims in the EAT spec?
 
I don=E2=80=99t think the OEMID, UEID or = other should be (ab)used  to represent device class. That would = result in them being less reliable and useful in a generic sense. We = should come up with a new claim.
 
+1
 
We can define a claim to be  the = device class and make it a byte string like a UEID, but I think we have = to go further to make it useful as an interoperable standardize claim. = There has to be some method for the classification. TrustZone vs = hypervisor based? Fast vs slow? Has a protected mode kernel and TAs? The = TEEP document doesn=E2=80=99t say. This seems problematic without a = classification scheme.
 
[DT] I=E2=80=99m not sure we need a classification scheme, at = least for TEEP.  A simple device class byte string as you suggest = would suffice in my opinion.
 
I wonder if the intent is more about = grouping, in which case we can define a GEID (Group Entity ID) that = looks a lot like a UEID. That seems useful and sensible to me. It is not = about classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 devices.
 
=C3=98  =
   -  TEE Identifying Information: The type =
of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98  =
      information such as the =
hardware, firmware, and software version
=C3=98        of =
the TEE, as applicable by the TEE type.  TEE manufacturer
=C3=98  =
      information for the TEE is =
required in order to disambiguate the
=C3=98  =
      same TEE type created by =
different manufacturers and address
=C3=98  =
      considerations around =
manufacturer provisioning, keying and
=C3=98  =
      support for the TEE.
 
Similarly for this = requirement, the closest thing I see is Origination Claim (origination) = but I am not sure
that is sufficient since it's just the = manufacturer not the "version identification information such as the
hardware, firmware, and software version of the = TEE=E2=80=9D
 
Definitely not origination claim. 
 
+1
 
The intent of it something like Endorser = identification and I think it should be replaced by an Endorser/X.509 = cert URL.
 
I would say, this is a combination of = claims
 
It=E2=80=99s just = used:
1)     For a Verifier in appraising the evidence = (nothing TEEP specific here, appraisal policy can involve any claim), = and
2)     To be used by a TAM to decide which TA=E2=80= =99s apply to the TEE.  In that sense it=E2=80=99s just like any = other vendor id + device class for any non TEE, and I believe if there = were a byte string for device class as you suggest that would be = sufficient in my opinion.
 
Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D = concept in the arch doc, as long as we have a claimset per layer, then I = think the same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D = claims that would apply to any device could be reused for the TEE, and = reused for describing each layer.  E.g., a =E2=80=9Cversion=E2=80=9D = claim would apply at the hardware layer and be the hardware version, at = the firmware layer and be a firmware version, at the OS layer and be an = OS version, etc.
 
 
I=E2=80=99ve just added a PR for HW version claims.
 
The intent for SW version claims is to = use CoSWID. We should probably create some examples to see if it can = represent what TEEP wants to represent.
 
Agree this sounds promising.
 
The paragraph mentions =E2=80=9Ctype of = TEE=E2=80=9D. I=E2=80=99m not sure what is intended. I don=E2=80=99t = know of any common taxonomy for classifying TEEs.
 
A = unique identifier is sufficient in my view, no =E2=80=9Cclassification=E2=80= =9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the TEEP = WG has discussed to date, as far as I know.

Should the TEEP WG = define TEEP-specific claims for such information?
 
I=E2=80=99d like to see most of them go = into EAT unless they are super specific to TEEP (TEEP not TEEs). I think = there is value in broad standardize claims as it promotes = interoperability of RATS.
 
Sounds good to me.   Consider this a request to add = some way to express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D = (or =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers.   I glanced at the PR you referenced and it = seems to be a chip-specific version, not a generic version claim that = can be used at multiple layers, so is not sufficient to meet the TEEP = arch draft=E2=80=99s requirements, we still need other claims added.
 
Thanks!
Dave
 
LL
 


 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 

= --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC-- From nobody Tue Oct 27 17:05:20 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CE793A098B; Tue, 27 Oct 2020 17:05:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.468 X-Spam-Level: X-Spam-Status: No, score=-0.468 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fi_fiRT5BwXW; Tue, 27 Oct 2020 17:05:16 -0700 (PDT) Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12on2131.outbound.protection.outlook.com [40.107.244.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF36A3A0978; Tue, 27 Oct 2020 17:05:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HN8iQ5F5rHKKVBRh0nICTZKQgCQ9IaC9AdK2S3SvqcjLqjsn2kVrrzPk+IekYOlYOVs5Jr/tMp1K8FRX1LmNYwflHLzhRWiaevAtg0Tmyck0pRldhv9vIe75SdfxZLRWM2bx4OExl+NS4CZuYhmL98Z1g71jPm0ZhjnZ43wv2+hXvrxlsKRI6l9nZMmxYmjiaKp2seQHqfL563nOrsYBTR9ZR83pwZFTKfnqbBCHfaW66udOXYWvkk1ixTG2oN6f2/Sb8aXD8LjRalwDLJz8Q0MEGNLjbMrxUYWpiZGTNn414el1c6w004GU3d1mHVvEWv3b7ZbPOX1osPYeYy4WpA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5rGDXxePd+mxO3dqDR2SGXxbUwcKX2J+xC8sFcoQ6yk=; b=YWWMUXfXX4vt4WTt3EP/CqFqiIx+Ff04e1KewHKC7l9CZYwuoeOVCLw8hrErnhITHp5HRdoKBi3BNmcq8ww20mCGg9vr9j1fJVT6QtuA/q4z4pMQkix0obfxbDUjnRb+ktq2m4B7fF2c/8+q3h1ynv0+IIoIIo2pSNnjBe5eIKew0Bzs7uRQoShMWT5JcdKBeiQLreOWvjEhi5UWRwn+ZpCTxoasNQGLyHURJjaK5e9Me544GvbZjCuRt8LEvjK1qn8GzOZZa44DWrNTHhbpYMEyBzAivNxA07/HDbJlGfZErX2P1sIjF40Z0R3JEiwIBEOeG6WFjRoo17cOMZhguw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5rGDXxePd+mxO3dqDR2SGXxbUwcKX2J+xC8sFcoQ6yk=; b=Dmupwj8zgVxW+T6AB1dkaklVaw6eGAU6t/4qen9wMbgQeI6zdgGZTYLqksxWZYF7AFqGa9lXgiwQy0mIfyLUO7eXDK3cql8bJzeM7hW4Cto5g1o9aiK7d+VF6nckvim1Ti+eKT1A5omKpGwz3yBFZJli83y3N7JST9QXrVtKSl8= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by MN2PR21MB1390.namprd21.prod.outlook.com (2603:10b6:208:205::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Wed, 28 Oct 2020 00:05:13 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Wed, 28 Oct 2020 00:05:13 +0000 From: Dave Thaler To: Laurence Lundblade CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAG8sNQ Date: Wed, 28 Oct 2020 00:05:13 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-28T00:05:13Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=ad008481-2a2f-4120-9938-4b8e2b9e62ce; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:b89c:f5df:23f4:3466] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c2810baa-c3c4-4616-d614-08d87ad524d2 x-ms-traffictypediagnostic: MN2PR21MB1390: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: EXlUM58gfwobFVFu+z6z4AngDzoH3xWjbY6yRWOqi+c5DKfKZc+kNHhHJ4+/j9Pr9iENcaxbql3sp9B/C4jjWA/B+qH+l5iAxdHFSGWLbuR0N8dYRCWtioYIkPOk0lHNLqtJOLkPckteuqGng7IKGkfT42fbaOSYbQpykkJ6wZjNx9psQOesGa9b5a3lojfqRsZ960yW25I6JeGgO6BC/gC2A1waMKUoUuX4+ayGwhev8fek9SWlkRf30buIX0eAFMM5K0WRHBGDpchof2jj4J55bG5bF5Gnu+6darP/MBKFZdRLAb2G8pNiFt21Nv5gPq6Nb60YygOg0CUP0NFLNn56JoRs7qKIWw8Uwv4ofE5ywAw/zMzl97m2ckmSOHc5DoTdKSms5qjVIXFer0oSaQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(136003)(396003)(366004)(39860400002)(7696005)(2906002)(33656002)(8676002)(8936002)(166002)(71200400001)(76116006)(66476007)(66556008)(66446008)(10290500003)(52536014)(54906003)(64756008)(316002)(478600001)(966005)(82960400001)(55016002)(66946007)(186003)(82950400001)(6506007)(83380400001)(5660300002)(4326008)(53546011)(86362001)(6916009)(8990500004)(9686003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c2810baa-c3c4-4616-d614-08d87ad524d2 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Oct 2020 00:05:13.6005 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gcusJawQTA+OSIELbZHi49FimRZr8T5iVrUlqb+FdMhT9KuPR+Wpw7ADfNGYHi8706TRIQ4gdMV8AL/2jr6+IHnEfU47eNXRNzUQYYxqTDI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR21MB1390 Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Oct 2020 00:05:19 -0000 --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TG9va2luZyBhdCBkcmFmdC1pZXRmLXNhY20tY29zd2lkLCBJIGFncmVlIHRoYXQgQ29TV0lEIHNo b3VsZCBjb3ZlciBpdCBpZiB0aGVyZSBpcyBhIGNsYWltIHNwZWNpZmllZCB0byBob2xkIGEgQ29T V0lELg0KDQpTbyB5ZXMsIHlvdXIgc3VtbWFyeSBvZiB3aGF0IGlzIG5lZWRlZCBzb3VuZHMgcmln aHQgdG8gbWUuDQoNCkRhdmUNCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5k LXJlc29ydC5jb20+DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDI3LCAyMDIwIDE6NDUgUE0NClRv OiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPg0KQ2M6IHJhdHNAaWV0Zi5vcmc7 IHRlZXAgPHRlZXBAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVl ZGVkIGJ5IFRFRVANCg0KQ29TV0lEIHNob3VsZCBjb3ZlciBhbGwgdGhlIGlkZW50aWZpY2F0aW9u IG9mIHZlbmRvcnMsIG1vZGVscywgdmVyc2lvbnMgYW5kIHN0dWZmIGZvciBTVy4gSWYgaXQgZG9l c27igJl0IHRhbGsgdG8gSGVuayBhYm91dCBmaXhlcyB0byBDb1NXSUQuIDotKQ0KDQpGb3IgSFcs IHRoZXJlIGlzIE9FTUlEIGFuZCByZWNlbnRseSBwcm9wb3NlZCBjaGlwIHZlcnNpb24sIGJvYXJk IHZlcnNpb24gYW5kIGRldmljZSB2ZXJzaW9uLiBJdCBzZWVtcyBsaWtlIHdlIG5lZWQgYSBtb2Rl bCBudW1iZXIgY2xhaW0gZm9yIEhXLiBJIHdpbGwgd29yayBvbiB0aGF0Lg0KDQpTZWVtcyBsaWtl IHN1Ym1vZHVsZXMgd291bGQgYmUgdXNlZCB0byBvcmdhbml6ZSBjbGFpbXMgZm9yIGxheWVyZWQg YXR0ZXN0YXRpb24gYW5kIGFsbCBvZiB0aGUgYWJvdmUgY2xhaW1zIGNhbiBvY2N1ciBpbiBhbnkg c3VibW9kdWxlIHRoZXkgbmVlZCB0by4NCg0KRG9lcyB0aGlzIG1vc3RseSBjb3ZlciBpdD8NCg0K SSB3b3JyeSB0aGF0IHRoZSBIVyBjbGFpbXMgYXJlIGJpdCB0b28gcmlnaWQgaW4gdGhlaXIgdXNl IG9mIEVBTi0xMyBhbmQgSUVFRSByZWdpc3RyaWVzLiBNaWdodCBuZWVkIHRvIGRvIHNvbWV0aGlu ZyBhYm91dCB0aGF0Lg0KDQpMTA0KDQoNCg0KT24gT2N0IDI3LCAyMDIwLCBhdCAxOjI2IFBNLCBE YXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29m dC5jb20+PiB3cm90ZToNCg0KSW5saW5lIGJlbG934oCmDQoNCkZyb206IExhdXJlbmNlIEx1bmRi bGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+ Pg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyNywgMjAyMCAxMTo1NyBBTQ0KVG86IERhdmUgVGhh bGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb208bWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4+ DQpDYzogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz47IHRlZXAgPHRlZXBAaWV0 Zi5vcmc8bWFpbHRvOnRlZXBAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtSYXRzXSBFQVQgY2xh aW1zIG5lZWRlZCBieSBURUVQDQoNClBlcnNvbmFsbHksIEkgdGhpbmsgYXR0ZXN0YXRpb24gb2Yg VEVF4oCZcyBpcyBwcmV0dHkgaW1wb3J0YW50IGFuZCBzaG91bGQgYmUgaGFuZGxlZCB3ZWxsIGlu IEVBVC4gU28gSeKAmW0gaW50ZXJlc3RlZCBpbiB3b3JraW5nIG9uIGFuZCBhZGRpbmcgY2xhaW1z IGZvciB0aGlzIHRvIEVBVC4NCg0KQWZ0ZXIgcmVhZGluZyBzZWN0aW9uIDcuMSBpbiBURUVQIGFy Y2hpdGVjdHVyZSwgaXQgZG9lcyBzZWVtIGxpa2UgdGhlcmUgc29tZSB3b3JrIHRvIGRvIGhlcmUg dG8gZ2V0IHRvIHNwZWNpZmljIHN0YW5kYXJkaXplZCBpbnRlcm9wZXJhYmxlIGNsYWltcy4NCg0K TW9yZSBjb21tZW50cyBiZWxvdy4NCg0KDQoNCk9uIE9jdCAyNiwgMjAyMCwgYXQgMzoxNSBQTSwg RGF2ZSBUaGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0 bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KDQpBcyBk aXNjdXNzZWQgaW4gcHJldmlvdXMgSUVURiBtZWV0aW5ncywgaWYgdGhlcmUgYXJlIGNsYWltcyBi ZXlvbmQgdGhlIGJhc2Ugc2V0IHRoYXQNCm90aGVyIFdHcyBuZWVkLCB0aGV5IGNhbiBiZSBzcGVj aWZpZWQgYnkgdGhlIG90aGVyIFdHcyB3aXRoIHJldmlldyBieSBSQVRTLg0KDQpUaGUgVEVFUCBX RyBuZWVkcyB0aGUgZm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0 aGV5IGNhbiBiZQ0KY292ZXJlZCBieSBleGlzdGluZyBjbGFpbXMgb3Igd2hldGhlciBURUVQLXNw ZWNpZmljIGNsYWltcyBhcmUgbmVlZGVkLiAgRnJvbQ0Kc2VjdGlvbiA3LjEgb2YgZHJhZnQtaWV0 Zi10ZWVwLWFyY2hpdGVjdHVyZToNCg0KPiAgICAgLSAgRGV2aWNlIElkZW50aWZ5aW5nIEluZm9y bWF0aW9uOiBURUVQIGF0dGVzdGF0aW9ucyBtYXkgbmVlZCB0bw0KPiAgICAgICAgdW5pcXVlbHkg aWRlbnRpZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4gIFVuaXF1ZSBkZXZpY2UNCj4gICAgICAgIGlk ZW50aWZpY2F0aW9uIGFsbG93cyB0aGUgVEFNIHRvIHByb3ZpZGUgc2VydmljZXMgdG8gdGhlIGRl dmljZSwNCj4gICAgICAgIHN1Y2ggYXMgbWFuYWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3Zp ZGluZyBzdWJzY3JpcHRpb25zIHRvDQo+ICAgICAgICBzZXJ2aWNlcywgYW5kIGxvY2F0aW5nIGRl dmljZS1zcGVjaWZpYyBrZXlpbmcgbWF0ZXJpYWwgdG8NCj4gICAgICAgIGNvbW11bmljYXRlIHdp dGggb3IgYXV0aGVudGljYXRlIHRoZSBkZXZpY2UuDQoNCkkgYmVsaWV2ZSB0aGUgVW5pdmVyc2Fs IEVudGl0eSBJRCBDbGFpbSAodWVpZCkgaXMgY2xhaW0gdGhhdCBtZWV0cyB0aGUgYWJvdmUgcmVx dWlyZW1lbnQuDQpCdXQgdGhlIFRFRVAgYXJjaCB0aGVuIGdvZXMgb24gdG8gc2F5Og0KDQo+ICAg ICAgICBJbiBzb21lIHVzZSBjYXNlcyBpdA0KPiAgICAgICAgbWF5IGJlIHN1ZmZpY2llbnQgdG8g aWRlbnRpZnkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4gIFRoZQ0KPiAgICAgICAgc2Vj dXJpdHkgYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb24NCj4gICAgICAgIHdpbGwgdmFyeSB3aXRoIHRoZSB0eXBlIG9mIFRBIHByb3Zpc2lvbmVk IHRvIHRoZSBURUUuDQpXaGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8g VGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9l bWlkKQ0KYnV0IEkgYW0gbm90IHN1cmUgdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3Mgb25s eSB0aGUgT0VNIG5vdCB0aGUgZGV2aWNlIGNsYXNzIGZyb20gdGhhdCBPRU0uDQpUaGlzIGRvZXNu 4oCZdCBzZWVtIGxpa2Ugc29tZXRoaW5nIHRoYXQgc2hvdWxkIGJlIFRFRVAgc3BlY2lmaWMgdGhv dWdoLCBzbyBjYW4gc29tZW9uZSB0ZWxsIG1lIGhvdyB0bw0KcmVwcmVzZW50IGRldmljZSBjbGFz cyB1c2luZyB0aGUgY2xhaW1zIGluIHRoZSBFQVQgc3BlYz8NCg0KSSBkb27igJl0IHRoaW5rIHRo ZSBPRU1JRCwgVUVJRCBvciBvdGhlciBzaG91bGQgYmUgKGFiKXVzZWQgIHRvIHJlcHJlc2VudCBk ZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVzdWx0IGluIHRoZW0gYmVpbmcgbGVzcyByZWxpYWJs ZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBzZW5zZS4gV2Ugc2hvdWxkIGNvbWUgdXAgd2l0aCBh IG5ldyBjbGFpbS4NCg0KKzENCg0KV2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICB0aGUgZGV2 aWNlIGNsYXNzIGFuZCBtYWtlIGl0IGEgYnl0ZSBzdHJpbmcgbGlrZSBhIFVFSUQsIGJ1dCBJIHRo aW5rIHdlIGhhdmUgdG8gZ28gZnVydGhlciB0byBtYWtlIGl0IHVzZWZ1bCBhcyBhbiBpbnRlcm9w ZXJhYmxlIHN0YW5kYXJkaXplIGNsYWltLiBUaGVyZSBoYXMgdG8gYmUgc29tZSBtZXRob2QgZm9y IHRoZSBjbGFzc2lmaWNhdGlvbi4gVHJ1c3Rab25lIHZzIGh5cGVydmlzb3IgYmFzZWQ/IEZhc3Qg dnMgc2xvdz8gSGFzIGEgcHJvdGVjdGVkIG1vZGUga2VybmVsIGFuZCBUQXM/IFRoZSBURUVQIGRv Y3VtZW50IGRvZXNu4oCZdCBzYXkuIFRoaXMgc2VlbXMgcHJvYmxlbWF0aWMgd2l0aG91dCBhIGNs YXNzaWZpY2F0aW9uIHNjaGVtZS4NCg0KW0RUXSBJ4oCZbSBub3Qgc3VyZSB3ZSBuZWVkIGEgY2xh c3NpZmljYXRpb24gc2NoZW1lLCBhdCBsZWFzdCBmb3IgVEVFUC4gIEEgc2ltcGxlIGRldmljZSBj bGFzcyBieXRlIHN0cmluZyBhcyB5b3Ugc3VnZ2VzdCB3b3VsZCBzdWZmaWNlIGluIG15IG9waW5p b24uDQoNCkkgd29uZGVyIGlmIHRoZSBpbnRlbnQgaXMgbW9yZSBhYm91dCBncm91cGluZywgaW4g d2hpY2ggY2FzZSB3ZSBjYW4gZGVmaW5lIGEgR0VJRCAoR3JvdXAgRW50aXR5IElEKSB0aGF0IGxv b2tzIGEgbG90IGxpa2UgYSBVRUlELiBUaGF0IHNlZW1zIHVzZWZ1bCBhbmQgc2Vuc2libGUgdG8g bWUuIEl0IGlzIG5vdCBhYm91dCBjbGFzc2lmaWNhdGlvbiBiYXNlZCBvbiBhbnkgY2hhcmFjdGVy aXN0aWNzLiBJdCBsaW5lcyB1cCB3aXRoIHRoZSBwcml2YWN5IHByZXNlcnZpbmcgdGVjaG5pcXVl IG9mIG9uZSBrZXkgcGVyIDEwMCwwMDAgZGV2aWNlcy4NCg0KDQo+ICAgICAtICBURUUgSWRlbnRp ZnlpbmcgSW5mb3JtYXRpb246IFRoZSB0eXBlIG9mIFRFRSB0aGF0IGdlbmVyYXRlZCB0aGlzDQoN Cj4gICAgICAgIGF0dGVzdGF0aW9uIG11c3QgYmUgaWRlbnRpZmllZCwgaW5jbHVkaW5nIHZlcnNp b24gaWRlbnRpZmljYXRpb24NCg0KPiAgICAgICAgaW5mb3JtYXRpb24gc3VjaCBhcyB0aGUgaGFy ZHdhcmUsIGZpcm13YXJlLCBhbmQgc29mdHdhcmUgdmVyc2lvbg0KDQo+ICAgICAgICBvZiB0aGUg VEVFLCBhcyBhcHBsaWNhYmxlIGJ5IHRoZSBURUUgdHlwZS4gIFRFRSBtYW51ZmFjdHVyZXINCg0K PiAgICAgICAgaW5mb3JtYXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIgdG8g ZGlzYW1iaWd1YXRlIHRoZQ0KDQo+ICAgICAgICBzYW1lIFRFRSB0eXBlIGNyZWF0ZWQgYnkgZGlm ZmVyZW50IG1hbnVmYWN0dXJlcnMgYW5kIGFkZHJlc3MNCg0KPiAgICAgICAgY29uc2lkZXJhdGlv bnMgYXJvdW5kIG1hbnVmYWN0dXJlciBwcm92aXNpb25pbmcsIGtleWluZyBhbmQNCg0KPiAgICAg ICAgc3VwcG9ydCBmb3IgdGhlIFRFRS4NCg0KDQpTaW1pbGFybHkgZm9yIHRoaXMgcmVxdWlyZW1l bnQsIHRoZSBjbG9zZXN0IHRoaW5nIEkgc2VlIGlzIE9yaWdpbmF0aW9uIENsYWltIChvcmlnaW5h dGlvbikgYnV0IEkgYW0gbm90IHN1cmUNCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1 c3QgdGhlIG1hbnVmYWN0dXJlciBub3QgdGhlICJ2ZXJzaW9uIGlkZW50aWZpY2F0aW9uIGluZm9y bWF0aW9uIHN1Y2ggYXMgdGhlDQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJz aW9uIG9mIHRoZSBURUXigJ0NCg0KRGVmaW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uDQoN CisxDQoNClRoZSBpbnRlbnQgb2YgaXQgc29tZXRoaW5nIGxpa2UgRW5kb3JzZXIgaWRlbnRpZmlj YXRpb24gYW5kIEkgdGhpbmsgaXQgc2hvdWxkIGJlIHJlcGxhY2VkIGJ5IGFuIEVuZG9yc2VyL1gu NTA5IGNlcnQgVVJMLg0KDQpJIHdvdWxkIHNheSwgdGhpcyBpcyBhIGNvbWJpbmF0aW9uIG9mIGNs YWltcw0KDQpJdOKAmXMganVzdCB1c2VkOg0KMSkgICAgIEZvciBhIFZlcmlmaWVyIGluIGFwcHJh aXNpbmcgdGhlIGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3BlY2lmaWMgaGVyZSwgYXBwcmFpc2Fs IHBvbGljeSBjYW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQNCjIpICAgICBUbyBiZSB1c2VkIGJ5 IGEgVEFNIHRvIGRlY2lkZSB3aGljaCBUQeKAmXMgYXBwbHkgdG8gdGhlIFRFRS4gIEluIHRoYXQg c2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNz IGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJp bmcgZm9yIGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2ll bnQgaW4gbXkgb3Bpbmlvbi4NCg0KS2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVz dGF0aW9u4oCdIGNvbmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBj bGFpbXNldCBwZXIgbGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0g YW5kIOKAnGNsYXNz4oCdIGNsYWltcyB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZpY2UgY291 bGQgYmUgcmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2gg bGF5ZXIuICBFLmcuLCBhIOKAnHZlcnNpb27igJ0gY2xhaW0gd291bGQgYXBwbHkgYXQgdGhlIGhh cmR3YXJlIGxheWVyIGFuZCBiZSB0aGUgaGFyZHdhcmUgdmVyc2lvbiwgYXQgdGhlIGZpcm13YXJl IGxheWVyIGFuZCBiZSBhIGZpcm13YXJlIHZlcnNpb24sIGF0IHRoZSBPUyBsYXllciBhbmQgYmUg YW4gT1MgdmVyc2lvbiwgZXRjLg0KDQoNCknigJl2ZSBqdXN0IGFkZGVkIGEgUFI8aHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG Z2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZkYXRhPTA0JTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkz MmEyJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4 MzEyOTU1MTEyMiU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxD SlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJnNkYXRh PVNBem5FWnpYYzFzR0cyRGdIR3pWemhHJTJGRVhEcURVTkpHYnE4VlVVN3Z5VSUzRCZyZXNlcnZl ZD0wPiBmb3IgSFcgdmVyc2lvbiBjbGFpbXMuDQoNClRoZSBpbnRlbnQgZm9yIFNXIHZlcnNpb24g Y2xhaW1zIGlzIHRvIHVzZSBDb1NXSUQuIFdlIHNob3VsZCBwcm9iYWJseSBjcmVhdGUgc29tZSBl eGFtcGxlcyB0byBzZWUgaWYgaXQgY2FuIHJlcHJlc2VudCB3aGF0IFRFRVAgd2FudHMgdG8gcmVw cmVzZW50Lg0KDQpBZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcuDQoNClRoZSBwYXJhZ3JhcGgg bWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBzdXJlIHdoYXQgaXMgaW50ZW5k ZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25vbXkgZm9yIGNsYXNzaWZ5aW5n IFRFRXMuDQoNCkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3VmZmljaWVudCBpbiBteSB2aWV3LCBu byDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9teeKAnSBpcyByZXF1aXJlZCBieSBh bnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNzZWQgdG8gZGF0ZSwgYXMgZmFyIGFz IEkga25vdy4NCg0KDQpTaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xh aW1zIGZvciBzdWNoIGluZm9ybWF0aW9uPw0KDQpJ4oCZZCBsaWtlIHRvIHNlZSBtb3N0IG9mIHRo ZW0gZ28gaW50byBFQVQgdW5sZXNzIHRoZXkgYXJlIHN1cGVyIHNwZWNpZmljIHRvIFRFRVAgKFRF RVAgbm90IFRFRXMpLiBJIHRoaW5rIHRoZXJlIGlzIHZhbHVlIGluIGJyb2FkIHN0YW5kYXJkaXpl IGNsYWltcyBhcyBpdCBwcm9tb3RlcyBpbnRlcm9wZXJhYmlsaXR5IG9mIFJBVFMuDQoNClNvdW5k cyBnb29kIHRvIG1lLiAgIENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0IHRvIGFkZCBzb21lIHdheSB0 byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0gKG9yIOKAnGNsYXNz4oCdIG9y IHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCcdmVyc2lvbuKAnSBhcyBjbGFp bXMgdGhhdCBjYW4gYmUgYXBwbGllZCBpbiBjbGFpbXNldHMgYXQgdmFyaW91cyBsYXllcnMuICAg SSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQgaXQgc2VlbXMgdG8gYmUgYSBj aGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVyc2lvbiBjbGFpbSB0aGF0IGNh biBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90IHN1ZmZpY2llbnQgdG8gbWVl dCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMsIHdlIHN0aWxsIG5lZWQgb3Ro ZXIgY2xhaW1zIGFkZGVkLg0KDQpUaGFua3MhDQpEYXZlDQoNCkxMDQoNCg0KDQoNCg0KRGF2ZQ0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFp bGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtz LnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUy Rm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jv c29mdC5jb20lN0M4NmFkYzUxOGNkNDg0NmY1ZDA0YzA4ZDg3YWI5MzJhMiU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyODMxMjk1NjExMTklN0NVbmtu b3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENK QlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0YT1qaE5lWmpPcExTQTR5d1Bs bFBwOWpTVEdub293TFc1TlhxMG8lMkJTc2o1S3MlM0QmcmVzZXJ2ZWQ9MD4NCg0KDQo= --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAy IDIgMzt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1h bCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlm O30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNw YW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0K CW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1h bDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNw YWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkhUTUxQ cmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFy IjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9y bWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9 DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+TG9va2luZyBhdCBkcmFmdC1pZXRmLXNhY20tY29zd2lkLCBJIGFncmVlIHRo YXQgQ29TV0lEIHNob3VsZCBjb3ZlciBpdCBpZiB0aGVyZSBpcyBhIGNsYWltIHNwZWNpZmllZCB0 byBob2xkIGEgQ29TV0lELjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+U28geWVzLCB5b3VyIHN1bW1hcnkgb2Ygd2hhdCBpcyBuZWVkZWQgc291bmRzIHJpZ2h0IHRv IG1lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+RGF2ZTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gTGF1cmVuY2UgTHVuZGJsYWRl ICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2Rh eSwgT2N0b2JlciAyNywgMjAyMCAxOjQ1IFBNPGJyPg0KPGI+VG86PC9iPiBEYXZlIFRoYWxlciAm bHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gcmF0c0BpZXRmLm9y ZzsgdGVlcCAmbHQ7dGVlcEBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtS YXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNvU1dJRCBzaG91bGQgY292ZXIgYWxsIHRoZSBp ZGVudGlmaWNhdGlvbiBvZiB2ZW5kb3JzLCBtb2RlbHMsIHZlcnNpb25zIGFuZCBzdHVmZiBmb3Ig U1cuIElmIGl0IGRvZXNu4oCZdCB0YWxrIHRvIEhlbmsgYWJvdXQgZml4ZXMgdG8gQ29TV0lELiA6 LSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Rm9yIEhXLCB0aGVyZSBpcyBPRU1JRCBhbmQgcmVjZW50bHkgcHJvcG9zZWQgY2hpcCB2ZXJzaW9u LCBib2FyZCB2ZXJzaW9uIGFuZCBkZXZpY2UgdmVyc2lvbi4gSXQgc2VlbXMgbGlrZSB3ZSBuZWVk IGEgbW9kZWwgbnVtYmVyIGNsYWltIGZvciBIVy4gSSB3aWxsIHdvcmsgb24gdGhhdC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2VlbXMgbGlr ZSBzdWJtb2R1bGVzIHdvdWxkIGJlIHVzZWQgdG8gb3JnYW5pemUgY2xhaW1zIGZvciBsYXllcmVk IGF0dGVzdGF0aW9uIGFuZCBhbGwgb2YgdGhlIGFib3ZlIGNsYWltcyBjYW4gb2NjdXIgaW4gYW55 IHN1Ym1vZHVsZSB0aGV5IG5lZWQgdG8uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvZXMgdGhpcyBtb3N0bHkgY292ZXIgaXQ/Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd29y cnkgdGhhdCB0aGUgSFcgY2xhaW1zIGFyZSBiaXQgdG9vIHJpZ2lkIGluIHRoZWlyIHVzZSBvZiBF QU4tMTMgYW5kIElFRUUgcmVnaXN0cmllcy4gTWlnaHQgbmVlZCB0byBkbyBzb21ldGhpbmcgYWJv dXQgdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5M TDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gT2N0IDI3LCAyMDIw LCBhdCAxOjI2IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXJAbWlj cm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+SW5saW5lIGJlbG934oCmPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+TGF1cmVuY2UNCiBMdW5kYmxhZGUgJmx0OzxhIGhy ZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VHVlc2RheSwgT2N0b2Jl ciAyNywgMjAyMCAxMTo1NyBBTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+RGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0 bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmR0aGFs ZXJAbWljcm9zb2Z0LmNvbTwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnJh dHNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJhdHNAaWV0Zi5vcmc8L3Nw YW4+PC9hPjsgdGVlcCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRlZXBAaWV0Zi5vcmciPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPnRlZXBAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+UmU6IFtSYXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5QZXJz b25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKAmXMgaXMgcHJldHR5IGltcG9ydGFu dCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQuIFNvIEnigJltIGludGVyZXN0ZWQg aW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3IgdGhpcyB0byBFQVQuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkFmdGVyIHJlYWRpbmcgc2VjdGlvbiA3LjEgaW4gVEVFUCBhcmNoaXRlY3R1cmUsIGl0IGRv ZXMgc2VlbSBsaWtlIHRoZXJlIHNvbWUgd29yayB0byBkbyBoZXJlIHRvIGdldCB0byBzcGVjaWZp YyBzdGFuZGFyZGl6ZWQgaW50ZXJvcGVyYWJsZSBjbGFpbXMuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ TW9yZSBjb21tZW50cyBiZWxvdy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gT2N0IDI2LCAyMDIwLCBh dCAzOjE1IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5kdGhh bGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5BcyBkaXNjdXNzZWQgaW4gcHJldmlvdXMgSUVU RiBtZWV0aW5ncywgaWYgdGhlcmUgYXJlIGNsYWltcyBiZXlvbmQgdGhlIGJhc2Ugc2V0IHRoYXQ8 YnI+DQpvdGhlciBXR3MgbmVlZCwgdGhleSBjYW4gYmUgc3BlY2lmaWVkIGJ5IHRoZSBvdGhlciBX R3Mgd2l0aCByZXZpZXcgYnkgUkFUUy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5UaGUgVEVFUCBXRyBuZWVkcyB0aGUg Zm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0aGV5IGNhbiBiZTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PmNvdmVyZWQgYnkgZXhpc3RpbmcgY2xhaW1zIG9yIHdoZXRoZXIgVEVFUC1zcGVjaWZpYyBjbGFp bXMgYXJlIG5lZWRlZC4mbmJzcDsgRnJvbTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnNlY3Rpb24gNy4xIG9mIGRyYWZ0LWlldGYtdGVl cC1hcmNoaXRlY3R1cmU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4y NWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3Mi PsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOy0mbmJzcDsgRGV2aWNlDQogSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246 IFRFRVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRl bnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5n ZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3VuaXF1ZWx5DQogaWRlbnRp ZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4mbmJzcDsgVW5pcXVlIGRldmljZTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpZGVu dGlmaWNhdGlvbg0KIGFsbG93cyB0aGUgVEFNIHRvIHByb3ZpZGUgc2VydmljZXMgdG8gdGhlIGRl dmljZSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7c3VjaA0KIGFzIG1hbmFnaW5nIGluc3RhbGxlZCBUQXMsIGFuZCBwcm92 aWRpbmcgc3Vic2NyaXB0aW9ucyB0bzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7D mDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzZXJ2aWNlcywNCiBhbmQgbG9jYXRpbmcg ZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRlcmlhbCB0bzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQt aW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb21tdW5pY2F0ZQ0K IHdpdGggb3IgYXV0aGVudGljYXRlIHRoZSBkZXZpY2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQyOTJFIj5JIGJl bGlldmUgdGhlIFVuaXZlcnNhbCBFbnRpdHkgSUQgQ2xhaW0gKHVlaWQpIGlzIGNsYWltIHRoYXQg bWVldHMgdGhlIGFib3ZlIHJlcXVpcmVtZW50Ljxicj4NCkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4g Z29lcyBvbiB0byBzYXk6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi4yNWluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtJbg0K IHNvbWUgdXNlIGNhc2VzIGl0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4yNWluIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRlbnRp Znkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0idGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQi PiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlY3Vy aXR5DQogYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb248L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7d2lsbA0KIHZhcnkgd2l0aCB0aGUgdHlwZSBvZiBUQSBwcm92aXNpb25l ZCB0byB0aGUgVEVFLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQyOTJFIj5X aGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8gVGhlIGNsb3Nlc3QgdGhp bmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9lbWlkKTxicj4NCmJ1dCBJ IGFtIG5vdCBzdXJlIHRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIG9ubHkgdGhlIE9FTSBu b3QgdGhlIGRldmljZSBjbGFzcyBmcm9tIHRoYXQgT0VNLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMjQyOTJFIj5UaGlzIGRvZXNu4oCZdCBzZWVtIGxpa2Ugc29tZXRoaW5nIHRo YXQgc2hvdWxkIGJlIFRFRVAgc3BlY2lmaWMgdGhvdWdoLCBzbyBjYW4gc29tZW9uZSB0ZWxsIG1l IGhvdyB0bzxicj4NCnJlcHJlc2VudCBkZXZpY2UgY2xhc3MgdXNpbmcgdGhlIGNsYWltcyBpbiB0 aGUgRUFUIHNwZWM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBkb27igJl0IHRoaW5rIHRoZSBPRU1JRCwgVUVJRCBvciBvdGhlciBzaG91bGQgYmUg KGFiKXVzZWQgJm5ic3A7dG8gcmVwcmVzZW50IGRldmljZSBjbGFzcy4gVGhhdCB3b3VsZCByZXN1 bHQgaW4gdGhlbSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2VmdWwgaW4gYSBnZW5lcmljIHNl bnNlLiBXZSBzaG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4rMTwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XZSBjYW4gZGVmaW5lIGEgY2xhaW0gdG8gYmUgJm5ic3A7 dGhlIGRldmljZSBjbGFzcyBhbmQgbWFrZSBpdCBhIGJ5dGUgc3RyaW5nIGxpa2UgYSBVRUlELCBi dXQgSSB0aGluayB3ZSBoYXZlIHRvIGdvIGZ1cnRoZXIgdG8gbWFrZSBpdCB1c2VmdWwgYXMgYW4g aW50ZXJvcGVyYWJsZSBzdGFuZGFyZGl6ZSBjbGFpbS4gVGhlcmUgaGFzIHRvIGJlIHNvbWUgbWV0 aG9kIGZvciB0aGUgY2xhc3NpZmljYXRpb24uIFRydXN0Wm9uZQ0KIHZzIGh5cGVydmlzb3IgYmFz ZWQ/IEZhc3QgdnMgc2xvdz8gSGFzIGEgcHJvdGVjdGVkIG1vZGUga2VybmVsIGFuZCBUQXM/IFRo ZSBURUVQIGRvY3VtZW50IGRvZXNu4oCZdCBzYXkuIFRoaXMgc2VlbXMgcHJvYmxlbWF0aWMgd2l0 aG91dCBhIGNsYXNzaWZpY2F0aW9uIHNjaGVtZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W0RUXSBJ4oCZbSBub3Qgc3Vy ZSB3ZSBuZWVkIGEgY2xhc3NpZmljYXRpb24gc2NoZW1lLCBhdCBsZWFzdCBmb3IgVEVFUC4gJm5i c3A7QSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUgc3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxk IHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3b25k ZXIgaWYgdGhlIGludGVudCBpcyBtb3JlIGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNlIHdl IGNhbiBkZWZpbmUgYSBHRUlEIChHcm91cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3QgbGlr ZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNlZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMgbm90 IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJhc2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxp bmVzDQogdXAgd2l0aCB0aGUgcHJpdmFjeSBwcmVzZXJ2aW5nIHRlY2huaXF1ZSBvZiBvbmUga2V5 IHBlciAxMDAsMDAwIGRldmljZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwv c3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDstJm5ic3A7IFRFRSBJZGVudGlmeWluZyBJbmZvcm1hdGlv bjogVGhlIHR5cGUgb2YgVEVFIHRoYXQgZ2VuZXJhdGVkIHRoaXM8bzpwPjwvbzpwPjwvcHJlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDthdHRlc3Rh dGlvbiBtdXN0IGJlIGlkZW50aWZpZWQsIGluY2x1ZGluZyB2ZXJzaW9uIGlkZW50aWZpY2F0aW9u PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5k ZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7aW5mb3JtYXRpb24gc3VjaCBhcyB0aGUgaGFyZHdhcmUsIGZpcm13YXJlLCBh bmQgc29mdHdhcmUgdmVyc2lvbjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4t bGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpX aW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO29mIHRoZSBURUUsIGFzIGFwcGxpY2FibGUg YnkgdGhlIFRFRSB0eXBlLiZuYnNwOyBURUUgbWFudWZhY3R1cmVyPG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7aW5mb3Jt YXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIgdG8gZGlzYW1iaWd1YXRlIHRo ZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWlu ZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO3NhbWUgVEVFIHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFudWZhY3R1 cmVycyBhbmQgYWRkcmVzczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5n ZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2NvbnNpZGVyYXRpb25zIGFyb3VuZCBtYW51ZmFj dHVyZXIgcHJvdmlzaW9uaW5nLCBrZXlpbmcgYW5kPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8 L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c3VwcG9ydCBmb3IgdGhl IFRFRS48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZu YnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNs b3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQg SSBhbSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhl IG1hbnVmYWN0dXJlciBub3QgdGhlICZxdW90O3ZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3Jt YXRpb24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2 ZXJzaW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+RGVmaW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uPHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4rMTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl IGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlrZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQg SSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFjZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBV UkwuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3b3VsZCBzYXksIHRoaXMgaXMgYSBjb21iaW5hdGlv biBvZiBjbGFpbXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+SXTigJlzIGp1c3QgdXNlZDo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjEpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+Rm9yDQogYSBWZXJpZmllciBpbiBhcHByYWlzaW5nIHRoZSBldmlkZW5jZSAobm90aGluZyBU RUVQIHNwZWNpZmljIGhlcmUsIGFwcHJhaXNhbCBwb2xpY3kgY2FuIGludm9sdmUgYW55IGNsYWlt KSwgYW5kPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4yKTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjcuMHB0O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRvDQogYmUgdXNlZCBieSBhIFRBTSB0byBkZWNp ZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRvIHRoZSBURUUuJm5ic3A7IEluIHRoYXQgc2Vuc2UgaXTi gJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBhbnkg bm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9yIGRl dmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4gbXkg b3Bpbmlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPktlZXBpbmcgaW4gbWluZCB0aGUg4oCcbGF5ZXJlZCBh dHRlc3RhdGlvbuKAnSBjb25jZXB0IGluIHRoZSBhcmNoIGRvYywgYXMgbG9uZyBhcyB3ZSBoYXZl IGEgY2xhaW1zZXQgcGVyIGxheWVyLCB0aGVuIEkgdGhpbmsgdGhlIHNhbWUg4oCcdmVuZG9yIGlk 4oCdIGFuZCDigJxjbGFzc+KAnSBjbGFpbXMNCiB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZp Y2UgY291bGQgYmUgcmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5n IGVhY2ggbGF5ZXIuJm5ic3A7IEUuZy4sIGEg4oCcdmVyc2lvbuKAnSBjbGFpbSB3b3VsZCBhcHBs eSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRoZSBoYXJkd2FyZSB2ZXJzaW9uLCBhdCB0 aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdhcmUgdmVyc2lvbiwgYXQgdGhlIE9TIGxh eWVyIGFuZCBiZQ0KIGFuIE9TIHZlcnNpb24sIGV0Yy48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJl2ZSBqdXN0IGFk ZGVkIGEmbmJzcDs8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91 dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJG ZWF0JTJGcHVsbCUyRjY4JmFtcDtkYXRhPTA0JTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNv bSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkzMmEyJTdDNzJmOTg4YmY4NmYxNDFhZjkx YWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4MzEyOTU1MTEyMiU3Q1Vua25vd24lN0NU V0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklr MWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJmFtcDtzZGF0YT1TQXpuRVp6WGMxc0dHMkRnSEd6 VnpoRyUyRkVYRHFEVU5KR2JxOFZVVTd2eVUlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPlBSPC9zcGFuPjwvYT4mbmJzcDtmb3INCiBIVyB2ZXJzaW9uIGNsYWlt cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9uIGNsYWltcyBp cyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUgZXhhbXBsZXMg dG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJlcHJlc2VudC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+QWdyZWUgdGhpcyBzb3VuZHMgcHJvbWlzaW5nLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UaGUgcGFyYWdyYXBoIG1lbnRpb25zIOKAnHR5cGUgb2YgVEVF4oCdLiBJ4oCZbSBu b3Qgc3VyZSB3aGF0IGlzIGludGVuZGVkLiBJIGRvbuKAmXQga25vdyBvZiBhbnkgY29tbW9uIHRh eG9ub215IGZvciBjbGFzc2lmeWluZyBURUVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+QSB1bmlxdWUgaWRl bnRpZmllciBpcyBzdWZmaWNpZW50IGluIG15IHZpZXcsIG5vIOKAnGNsYXNzaWZpY2F0aW9u4oCd IG9yIOKAnHRheG9ub2154oCdIGlzIHJlcXVpcmVkIGJ5IGFueXRoaW5nIHRoYXQgdGhlIFRFRVAg V0cgaGFzIGRpc2N1c3NlZCB0byBkYXRlLCBhcyBmYXIgYXMgSSBrbm93Ljwvc3Bhbj48YnI+DQo8 YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5TaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZv ciBzdWNoIGluZm9ybWF0aW9uPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPknigJlkIGxpa2UgdG8gc2VlIG1vc3Qgb2YgdGhlbSBnbyBpbnRvIEVBVCB1 bmxlc3MgdGhleSBhcmUgc3VwZXIgc3BlY2lmaWMgdG8gVEVFUCAoVEVFUCBub3QgVEVFcykuIEkg dGhpbmsgdGhlcmUgaXMgdmFsdWUgaW4gYnJvYWQgc3RhbmRhcmRpemUgY2xhaW1zIGFzIGl0IHBy b21vdGVzIGludGVyb3BlcmFiaWxpdHkgb2YgUkFUUy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+U291bmRzIGdvb2QgdG8g bWUuJm5ic3A7Jm5ic3A7IENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0IHRvIGFkZCBzb21lIHdheSB0 byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0gKG9yIOKAnGNsYXNz4oCdIG9y IHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCcdmVyc2lvbuKAnSBhcyBjbGFp bXMNCiB0aGF0IGNhbiBiZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4m bmJzcDsmbmJzcDsgSSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQgaXQgc2Vl bXMgdG8gYmUgYSBjaGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVyc2lvbiBj bGFpbSB0aGF0IGNhbiBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90IHN1ZmZp Y2llbnQgdG8gbWVldCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMsDQogd2Ug c3RpbGwgbmVlZCBvdGhlciBjbGFpbXMgYWRkZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGFua3MhPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRhdmU8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NClJBVFMgbWFpbGluZyBs aXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiM5NTRGNzIiPlJBVFNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90 ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWls bWFuJTJGbGlzdGluZm8lMkZyYXRzJmFtcDtkYXRhPTA0JTdDMDElN0NkdGhhbGVyJTQwbWljcm9z b2Z0LmNvbSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkzMmEyJTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4MzEyOTU2MTExOSU3Q1Vua25v d24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pC VGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJmFtcDtzZGF0YT1qaE5lWmpPcExTQTR5 d1BsbFBwOWpTVEdub293TFc1TlhxMG8lMkJTc2o1S3MlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3MiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9yYXRzPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_-- From nobody Tue Oct 27 19:18:07 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 648C03A0A82 for ; Tue, 27 Oct 2020 19:18:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r_abACiCiHAS for ; Tue, 27 Oct 2020 19:18:04 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [185.176.76.210]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 902533A0A87 for ; Tue, 27 Oct 2020 19:18:04 -0700 (PDT) Received: from lhreml748-chm.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id A46D86549025B8738525 for ; Wed, 28 Oct 2020 02:18:01 +0000 (GMT) Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by lhreml748-chm.china.huawei.com (10.201.108.198) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 28 Oct 2020 02:18:01 +0000 Received: from nkgeml705-chm.china.huawei.com (10.98.57.154) by nkgeml705-chm.china.huawei.com (10.98.57.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.1913.5; Wed, 28 Oct 2020 10:17:59 +0800 Received: from nkgeml705-chm.china.huawei.com ([10.98.57.154]) by nkgeml705-chm.china.huawei.com ([10.98.57.154]) with mapi id 15.01.1913.007; Wed, 28 Oct 2020 10:17:59 +0800 From: "Panwei (William)" To: "Nancy Cam-Winget (ncamwing)" , "rats@ietf.org" Thread-Topic: WGLC and IPR updates for RATs Architecture draft Thread-Index: AQHWq9pf92tAUCaehEKQNe9DfVEk06msQW4g Date: Wed, 28 Oct 2020 02:17:58 +0000 Message-ID: <4d1ff230fd704388a404e2c72336d207@huawei.com> References: <48C10361-A1A6-460F-8BBF-BD4429DCCC2A@cisco.com> In-Reply-To: <48C10361-A1A6-460F-8BBF-BD4429DCCC2A@cisco.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.136.99.125] Content-Type: multipart/alternative; boundary="_000_4d1ff230fd704388a404e2c72336d207huaweicom_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: Re: [Rats] WGLC and IPR updates for RATs Architecture draft X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Oct 2020 02:18:06 -0000 --_000_4d1ff230fd704388a404e2c72336d207huaweicom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SeKAmW0gbm90IGF3YXJlIG9mIGFueSBvdGhlciBJUFIgYmV5b25kIChodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2lwci80MTA2LykuDQoNClJlZ2FyZHMgJiBUaGFua3MhDQpXZWkgUGFuDQoN CkZyb206IFJBVFMgW21haWx0bzpyYXRzLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBO YW5jeSBDYW0tV2luZ2V0IChuY2Ftd2luZykNClNlbnQ6IFR1ZXNkYXksIE9jdG9iZXIgMjcsIDIw MjAgNDo1NiBBTQ0KVG86IHJhdHNAaWV0Zi5vcmcNClN1YmplY3Q6IFtSYXRzXSBXR0xDIGFuZCBJ UFIgdXBkYXRlcyBmb3IgUkFUcyBBcmNoaXRlY3R1cmUgZHJhZnQNCg0KSGVsbG8sDQoNClRoaXMg ZW1haWwgaXMgdGhlIHN0YXJ0IG9mIGEgMyB3ZWVrIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIGZv ciB0aGUgUkFUcyBhcmNoaXRlY3R1cmUgZHJhZnQ6DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9kcmFmdC1pZXRmLXJhdHMtYXJjaGl0ZWN0dXJlLw0KDQpUaGUgV0dMQyB3aWxsIHJ1 biB1bnRpbCBOb3YgMTYsIDIwMjAuDQoNClRoaXMgbm90aWNlIGlzIGFsc28gYSByZXF1ZXN0IGZv ciBhbnkgZnVydGhlciB1bmRpc2Nsb3NlZCBJUFIgdGhhdCBhcHBsaWVzIHRvIHRoaXMgZHJhZnQg YmV5b25kIChodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci80MTA2Lyk7IGFuZCBmb3Ig dGhlIGF1dGhvcnMgdG8gY29uZmlybSB3aGV0aGVyIG9yIG5vdCB5b3UgYXJlIGF3YXJlIG9mIGFu eSByZWxldmFudCB1bmRpc2Nsb3NlZCBJUFIuDQoNClRoYW5rcywgTmFuY3kNCg0KDQo= --_000_4d1ff230fd704388a404e2c72336d207huaweicom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 5a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMgMiA0 O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUg MiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkdhZHVnaTsNCglwYW5v c2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJc QOWui+S9kyI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OuWNjuaWh+e7hum7kTsNCglwYW5vc2UtMToyIDEgNiAwIDQgMSAxIDEgMSAx O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxA5Y2O5paH57uG6buRIjsNCglwYW5vc2Ut MToyIDEgNiAwIDQgMSAxIDEgMSAxO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05v cm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGli cmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CnNwYW4uRW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFp bFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6 IkdhZHVnaSIsc2Fucy1zZXJpZjsNCgljb2xvcjpibGFjazsNCglmb250LXdlaWdodDpub3JtYWw7 DQoJZm9udC1zdHlsZTpub3JtYWw7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6 ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7 c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBw dDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBz cGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIg ZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4N Cjxib2R5IGxhbmc9IlpILUNOIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2 IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj5J4oCZbSBub3QgYXdhcmUgb2YgYW55IG90aGVy IElQUiBiZXlvbmQNCjwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQiPig8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2lwci80MTA2LyI+ aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9pcHIvNDEwNi88L2E+KS48L3NwYW4+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0dh ZHVnaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7R2FkdWdpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6YmxhY2siPlJlZ2FyZHMg JmFtcDsgVGhhbmtzITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtHYWR1Z2kmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpibGFjayI+V2VpIFBhbjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0dhZHVnaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij4gUkFUUyBbbWFpbHRvOnJh dHMtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+TmFuY3kgQ2FtLVdpbmdl dCAobmNhbXdpbmcpPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE9jdG9iZXIgMjcsIDIwMjAg NDo1NiBBTTxicj4NCjxiPlRvOjwvYj4gcmF0c0BpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9i PiBbUmF0c10gV0dMQyBhbmQgSVBSIHVwZGF0ZXMgZm9yIFJBVHMgQXJjaGl0ZWN0dXJlIGRyYWZ0 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQiPkhlbGxvLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0Ij5UaGlzIGVtYWlsIGlzIHRoZSBzdGFydCBvZiBhIDMgd2Vl ayBXb3JraW5nIEdyb3VwIExhc3QgQ2FsbCBmb3IgdGhlIFJBVHMgYXJjaGl0ZWN0dXJlIGRyYWZ0 OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1yYXRzLWFyY2hpdGVjdHVyZS8iPmh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtcmF0cy1hcmNoaXRlY3R1cmUvPC9h Pg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQiPlRoZSBXR0xDIHdpbGwgcnVuIHVudGlsIE5vdiAxNiwgMjAyMC48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdCI+VGhpcyBub3RpY2UgaXMgYWxzbyBhIHJlcXVlc3QgZm9yIGFueSBmdXJ0aGVyIHVu ZGlzY2xvc2VkIElQUiB0aGF0IGFwcGxpZXMgdG8gdGhpcyBkcmFmdCBiZXlvbmQgKDxhIGhyZWY9 Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvaXByLzQxMDYvIj5odHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2lwci80MTA2LzwvYT4pOyBhbmQNCiBmb3IgdGhlIGF1dGhvcnMgdG8gY29u ZmlybSB3aGV0aGVyIG9yIG5vdCB5b3UgYXJlIGF3YXJlIG9mIGFueSByZWxldmFudCB1bmRpc2Ns b3NlZCBJUFIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQiPlRoYW5rcywgTmFuY3k8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6MzYuMHB0Ij48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDozNi4wcHQi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_4d1ff230fd704388a404e2c72336d207huaweicom_-- From nobody Wed Oct 28 11:14:23 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 189F63A011B; Wed, 28 Oct 2020 11:14:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.266 X-Spam-Level: X-Spam-Status: No, score=-0.266 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sx2KhL0B; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sx2KhL0B Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C1saqwp6qZlC; Wed, 28 Oct 2020 11:14:19 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150082.outbound.protection.outlook.com [40.107.15.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 902CB3A00E3; Wed, 28 Oct 2020 11:14:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=sx2KhL0BQ3CMSsaz4mhMC51KgY13kwAHFM//J8G57HWMQkPKzOKRJEsqSmtLZZ+7sQAmI6SGrzJrskNZoHBNzjVMUS6qUBtTqvVq28bbQL64+3ssZEFbetYPi+hnWEnIsgrgwAxJtUh4TYEnbJH+lJcTc8Owp0BnheS+5+DOvgc= Received: from AM0PR04CA0062.eurprd04.prod.outlook.com (2603:10a6:208:1::39) by DBAPR08MB5621.eurprd08.prod.outlook.com (2603:10a6:10:1a3::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Wed, 28 Oct 2020 18:14:15 +0000 Received: from AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com (2603:10a6:208:1:cafe::cb) by AM0PR04CA0062.outlook.office365.com (2603:10a6:208:1::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18 via Frontend Transport; Wed, 28 Oct 2020 18:14:15 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT042.mail.protection.outlook.com (10.152.17.168) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Wed, 28 Oct 2020 18:14:15 +0000 Received: ("Tessian outbound e6c55a0b9ba9:v64"); Wed, 28 Oct 2020 18:14:15 +0000 X-CR-MTA-TID: 64aa7808 Received: from 4b6e4b607713.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 698E68BE-74CE-409A-975B-7BFFF59C08C5.1; Wed, 28 Oct 2020 18:14:10 +0000 Received: from EUR01-DB5-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 4b6e4b607713.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 28 Oct 2020 18:14:10 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N4IR/qP2XA1X0B3It3/UxBwmpG7wU5RIhZiE2ZRv2uoX4Jj806d1WDIgZRvdowLxxCoHocsq6AVHMkY0+RwMFaTwT9FPWz431zBmyzPDrRZbfFPGGz3E3vuTmnwAtqmvoU9/k/CO9pu3jY7kzCre4N8qy5rYebTlu5VFUGipMmDNKkjM9uvXzs60owzsTj3p6R3iVwgCRykEypX6a0PzviKsH2lv9Y/QgjBIsn1EldyyjSqFHwy8iiw37Fsc48hBxFeSVlsrTlv4k4Si04K9Cj7y87INXWbedE3UFueUDW1Z2QiW2Q33DsZNQ5tFnHJ0SfSsVXEtGZlpggdIthzxuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=AVgyNH8WFGN++GgeAJ3dk9F7JAL+T7qKc5ffoCZyaHEx2L9uGcP1gEJbgNIeVWwsN6DwHOuMfgIptv/bUQ2R2li7DOBoluCSoMzPGes23JHHJLfVj5e7VILMWm6QMawJLlCWXw9Tv6Tc8biBjoBVxd63z+Qx7aVUrOqUzijiSQgAbpB40L4D6wNrbPX2/qYGoBR5MHn2ausJ/n3fHpbNIZkDdefG8f+RoRPdAHRggQmcZwFSiQSqMK13jBbVlFsMALLl1QWm8H+P6tiVfgO0drs/UWL3RTM8mzsN99qbUS/PCkhfmLUIdMwgGlqjC0yoDHhlcLlb1FHUeABBeVKitQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=sx2KhL0BQ3CMSsaz4mhMC51KgY13kwAHFM//J8G57HWMQkPKzOKRJEsqSmtLZZ+7sQAmI6SGrzJrskNZoHBNzjVMUS6qUBtTqvVq28bbQL64+3ssZEFbetYPi+hnWEnIsgrgwAxJtUh4TYEnbJH+lJcTc8Owp0BnheS+5+DOvgc= Received: from AM6PR08MB3429.eurprd08.prod.outlook.com (2603:10a6:20b:49::19) by AS8PR08MB5880.eurprd08.prod.outlook.com (2603:10a6:20b:29f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.18; Wed, 28 Oct 2020 18:14:08 +0000 Received: from AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a]) by AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a%7]) with mapi id 15.20.3499.019; Wed, 28 Oct 2020 18:14:08 +0000 From: Simon Frost To: Laurence Lundblade , Dave Thaler CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: AQHWrKIiv/EmefyVEkmgXFAWEI4pIqmtTcSQ Date: Wed, 28 Oct 2020 18:14:08 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: DF99B57E8F92104EB7C1D4971A0A86DA.0 x-checkrecipientchecked: true Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [212.69.61.73] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 30c830eb-9063-4e87-1b1f-08d87b6d478d x-ms-traffictypediagnostic: AS8PR08MB5880:|DBAPR08MB5621: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:8882;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: YqVF2w2PS/aIfRvcMZdFpDNKpoa/W01SwJOsuGkJ5QqsEG6Aw93oLja74u/BvAVii0DTdrYlYxBKqN5woTMi4zscaBY5LtKDWnWgoJPASWPxFvjYTW7JNQUx9m1aaH4STStGWTuJlLmd1pg1wzAbMeO9+x5p1/zs8ycZqLnvNi8DSS7lifHW3KnLY5erw3JJSMDYwFwGcKCxQWFYeuMHoBMCe5TGX6aHhBsZAEPUa4QLgD6Yscv3e8KuYjDQpAcVuxj5BdzGsLTIiLhBCBEdVKjAfZjLs3z8l3sHRBd7RfoLiHiDhYgMdwIINOBFmvx1RFfC9Z0320fbOxQLdo9fJuRqAMAFo+ztTqpsedsH3rQxIF14waer32w2UViq0ZAB7Y2JkYpcUwdy0lljAkKDCA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3429.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(346002)(39860400002)(366004)(376002)(136003)(76116006)(9686003)(6506007)(8676002)(64756008)(7696005)(66946007)(5660300002)(54906003)(186003)(53546011)(66556008)(66446008)(8936002)(110136005)(4326008)(66476007)(316002)(52536014)(83380400001)(55016002)(166002)(86362001)(26005)(71200400001)(478600001)(45080400002)(33656002)(2906002)(966005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB5880 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 09f65f92-eaec-4699-b978-08d87b6d4370 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: xhI8jGSGpNWAI94LJn1L6rMSz2BYTKwo+C2+6XdrLL0/DVi9khOLUYBnFuvBXAjMEsR71iTi4UmIcY0+e0z9r34QH/kVpPg4Q+H+8hZ0pYzF1WaVssnpAQIGZozYtz7+H6jYve9HQafteuIJnev7hip5fSssBVy4x/fA1/PPpL2raPZQwpAlu3sMr9K2miPrQlfjHZxFYQFtT2hqURdEZSNzp44YRXKZ/8hQz+t650p4Fk9syW6hLfSey18gN4F1X588o/1pmlVZs243DkuDu6PPdeNGBT6BfUZaiJm7716R4W9K+gBXbwopsX8b933zTcX/MXwOdHJRjvx4+vQgvBoCEemIbZLVxR9PlZwKKP93Lnq3Fi3ItZbIjW+altTjWuLBHMgvMbHfChzkHCCTJPE8mTt+KPUJvBfMms3hXDei0xmHaqEOgCfdnebl0lpayUE5xpp33PijAOnR5z+MNe+ZwKCFd/m7TWH9D7N2T3o= X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(136003)(376002)(39860400002)(346002)(396003)(46966005)(966005)(5660300002)(186003)(86362001)(54906003)(166002)(8936002)(33656002)(478600001)(8676002)(336012)(26005)(45080400002)(6506007)(9686003)(2906002)(55016002)(36906005)(110136005)(450100002)(7696005)(4326008)(33964004)(53546011)(356005)(30864003)(70586007)(81166007)(316002)(52536014)(83380400001)(70206006)(82310400003)(47076004)(82740400003)(579004); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Oct 2020 18:14:15.3867 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 30c830eb-9063-4e87-1b1f-08d87b6d478d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR08MB5621 Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Oct 2020 18:14:22 -0000 --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Tm90ZSB0aGF0IHNvbWUgb2YgdGhlIEFybSB0ZWFtIHdpbGwgYmUgYXR0ZW5kaW5nIHRoZSB1cGNv bWluZyBoYWNrYXRob24gYW5kIGhhZCBiZWVuIGRpc2N1c3NpbmcgZG9pbmcgc29tZSB3b3JrIHRo ZXJlIG9uIGRlc2NyaWJpbmcgY29tcG9uZW50cyB3aXRoIENvU1dJRCB2aWEgRUFULiBUaGlzIGJ1 aWxkcyBvbiBzb21lIGltcGxlbWVudGF0aW9uIHdvcmsgYWxyZWFkeSBjb21wbGV0ZWQgYXMgcGFy dCBvZiBhbiBBcm0gcHJvamVjdCB0aGF0IHdpbGwgc2hvcnRseSBiZSB1cHN0cmVhbWVkLg0KDQpU aGUgUFNBIEVBVCBwcm9maWxlIG9yaWdpbmFsbHkgaW50cm9kdWNlZCBhIGhhcmR3YXJlIHZlcnNp b24gYmFzZWQgb24gYW4gRUFOLTEzLiBUaGlzIHdhcyB1c2VkIGFzIGEgcmVmZXJlbmNlIHRvIGEg Z2VuZXJhbCBzZXQgb2YgaGFyZHdhcmUgaW4gYSBjZXJ0aWZpY2F0aW9uIHNjaGVtZS4gRnVydGhl ciB3b3JrIGhhcyBzaG93biB0aGlzIGZvcm1hdCBpcyBub3Qgc3VpdGFibGUgYW5kIGl0IGhhcyB3 aWxsIGJlIGRlcHJlY2F0ZWQgaW4gYSBmdXR1cmUgcmVsZWFzZXMgb2YgdGhlIHByb2ZpbGUuIFRo ZSBQU0EgcHJvZmlsZSBhbHNvIGNvbnRhaW5zIGFuIOKAmEltcGxlbWVudGF0aW9uSUTigJkgY2xh aW0gKGJ5dGUgc3RyaW5nIG9mIHN1ZmZpY2llbnQgc2l6ZSB0byBob2xkIGEgU0hBMiBoYXNoKSB3 aGljaCBpcyBpbnRlbmRlZCB0byBiZSB1c2VkIGFzIGEgbXVjaCBtb3JlIHNwZWNpZmljIGlkZW50 aWZpZXIgb2YgYSBoYXJkd2FyZSBncm91cC4gVGhlIGludGVudCBoZXJlIGlzIHRoYXQgcmVmZXJl bmNlIHZhbHVlcyBmb3IgYW4gSW1wbGVtZW50YXRpb25JRCBjYW4gYmUga25vd24gYnkgYSB2ZXJp ZmllciB0byBhc3Npc3QgYXBwcmFpc2FsIHBvbGljeS4NCg0KVGhhbmtzDQpTaW1vbg0KDQpGcm9t OiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClNlbnQ6IDI3IE9j dG9iZXIgMjAyMCAyMDo0NQ0KVG86IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+ DQpDYzogcmF0c0BpZXRmLm9yZzsgdGVlcCA8dGVlcEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBb UmF0c10gRUFUIGNsYWltcyBuZWVkZWQgYnkgVEVFUA0KDQpDb1NXSUQgc2hvdWxkIGNvdmVyIGFs bCB0aGUgaWRlbnRpZmljYXRpb24gb2YgdmVuZG9ycywgbW9kZWxzLCB2ZXJzaW9ucyBhbmQgc3R1 ZmYgZm9yIFNXLiBJZiBpdCBkb2VzbuKAmXQgdGFsayB0byBIZW5rIGFib3V0IGZpeGVzIHRvIENv U1dJRC4gOi0pDQoNCkZvciBIVywgdGhlcmUgaXMgT0VNSUQgYW5kIHJlY2VudGx5IHByb3Bvc2Vk IGNoaXAgdmVyc2lvbiwgYm9hcmQgdmVyc2lvbiBhbmQgZGV2aWNlIHZlcnNpb24uIEl0IHNlZW1z IGxpa2Ugd2UgbmVlZCBhIG1vZGVsIG51bWJlciBjbGFpbSBmb3IgSFcuIEkgd2lsbCB3b3JrIG9u IHRoYXQuDQoNClNlZW1zIGxpa2Ugc3VibW9kdWxlcyB3b3VsZCBiZSB1c2VkIHRvIG9yZ2FuaXpl IGNsYWltcyBmb3IgbGF5ZXJlZCBhdHRlc3RhdGlvbiBhbmQgYWxsIG9mIHRoZSBhYm92ZSBjbGFp bXMgY2FuIG9jY3VyIGluIGFueSBzdWJtb2R1bGUgdGhleSBuZWVkIHRvLg0KDQpEb2VzIHRoaXMg bW9zdGx5IGNvdmVyIGl0Pw0KDQpJIHdvcnJ5IHRoYXQgdGhlIEhXIGNsYWltcyBhcmUgYml0IHRv byByaWdpZCBpbiB0aGVpciB1c2Ugb2YgRUFOLTEzIGFuZCBJRUVFIHJlZ2lzdHJpZXMuIE1pZ2h0 IG5lZWQgdG8gZG8gc29tZXRoaW5nIGFib3V0IHRoYXQuDQoNCkxMDQoNCg0KDQpPbiBPY3QgMjcs IDIwMjAsIGF0IDE6MjYgUE0sIERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb208bWFp bHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4+IHdyb3RlOg0KDQpJbmxpbmUgYmVsb3figKYNCg0K RnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxn bEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDI3LCAyMDIwIDEx OjU3IEFNDQpUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbTxtYWlsdG86ZHRo YWxlckBtaWNyb3NvZnQuY29tPj4NCkNjOiByYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYu b3JnPjsgdGVlcCA8dGVlcEBpZXRmLm9yZzxtYWlsdG86dGVlcEBpZXRmLm9yZz4+DQpTdWJqZWN0 OiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVlZGVkIGJ5IFRFRVANCg0KUGVyc29uYWxseSwgSSB0 aGluayBhdHRlc3RhdGlvbiBvZiBURUXigJlzIGlzIHByZXR0eSBpbXBvcnRhbnQgYW5kIHNob3Vs ZCBiZSBoYW5kbGVkIHdlbGwgaW4gRUFULiBTbyBJ4oCZbSBpbnRlcmVzdGVkIGluIHdvcmtpbmcg b24gYW5kIGFkZGluZyBjbGFpbXMgZm9yIHRoaXMgdG8gRUFULg0KDQpBZnRlciByZWFkaW5nIHNl Y3Rpb24gNy4xIGluIFRFRVAgYXJjaGl0ZWN0dXJlLCBpdCBkb2VzIHNlZW0gbGlrZSB0aGVyZSBz b21lIHdvcmsgdG8gZG8gaGVyZSB0byBnZXQgdG8gc3BlY2lmaWMgc3RhbmRhcmRpemVkIGludGVy b3BlcmFibGUgY2xhaW1zLg0KDQpNb3JlIGNvbW1lbnRzIGJlbG93Lg0KDQoNCg0KT24gT2N0IDI2 LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxlciA8ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21A ZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYu b3JnPj4gd3JvdGU6DQoNCkFzIGRpc2N1c3NlZCBpbiBwcmV2aW91cyBJRVRGIG1lZXRpbmdzLCBp ZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUgYmFzZSBzZXQgdGhhdA0Kb3RoZXIgV0dzIG5l ZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5 IFJBVFMuDQoNClRoZSBURUVQIFdHIG5lZWRzIHRoZSBmb2xsb3dpbmcgaW4gRUFUcyBhbmQgSSBh bSBub3Qgc3VyZSB3aGV0aGVyIHRoZXkgY2FuIGJlDQpjb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWlt cyBvciB3aGV0aGVyIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGFyZSBuZWVkZWQuICBGcm9tDQpzZWN0 aW9uIDcuMSBvZiBkcmFmdC1pZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOg0KDQo+ICAgICAtICBEZXZp Y2UgSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246IFRFRVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRv DQo+ICAgICAgICB1bmlxdWVseSBpZGVudGlmeSBhIGRldmljZSB0byB0aGUgVEFNLiAgVW5pcXVl IGRldmljZQ0KPiAgICAgICAgaWRlbnRpZmljYXRpb24gYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlk ZSBzZXJ2aWNlcyB0byB0aGUgZGV2aWNlLA0KPiAgICAgICAgc3VjaCBhcyBtYW5hZ2luZyBpbnN0 YWxsZWQgVEFzLCBhbmQgcHJvdmlkaW5nIHN1YnNjcmlwdGlvbnMgdG8NCj4gICAgICAgIHNlcnZp Y2VzLCBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRlcmlhbCB0bw0KPiAg ICAgICAgY29tbXVuaWNhdGUgd2l0aCBvciBhdXRoZW50aWNhdGUgdGhlIGRldmljZS4NCg0KSSBi ZWxpZXZlIHRoZSBVbml2ZXJzYWwgRW50aXR5IElEIENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0 IG1lZXRzIHRoZSBhYm92ZSByZXF1aXJlbWVudC4NCkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29l cyBvbiB0byBzYXk6DQoNCj4gICAgICAgIEluIHNvbWUgdXNlIGNhc2VzIGl0DQo+ICAgICAgICBt YXkgYmUgc3VmZmljaWVudCB0byBpZGVudGlmeSBvbmx5IHRoZSBjbGFzcyBvZiB0aGUgZGV2aWNl LiAgVGhlDQo+ICAgICAgICBzZWN1cml0eSBhbmQgcHJpdmFjeSByZXF1aXJlbWVudHMgcmVnYXJk aW5nIGRldmljZSBpZGVudGlmaWNhdGlvbg0KPiAgICAgICAgd2lsbCB2YXJ5IHdpdGggdGhlIHR5 cGUgb2YgVEEgcHJvdmlzaW9uZWQgdG8gdGhlIFRFRS4NCldoaWNoIEVBVCBjbGFpbSBjb250YWlu cyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2VzdCB0aGluZyBJIHNlZSBpcyBPRU0gSWRlbnRp ZmljYXRpb24gYnkgSUVFRSAob2VtaWQpDQpidXQgSSBhbSBub3Qgc3VyZSB0aGF0IGlzIHN1ZmZp Y2llbnQgc2luY2UgaXQncyBvbmx5IHRoZSBPRU0gbm90IHRoZSBkZXZpY2UgY2xhc3MgZnJvbSB0 aGF0IE9FTS4NClRoaXMgZG9lc27igJl0IHNlZW0gbGlrZSBzb21ldGhpbmcgdGhhdCBzaG91bGQg YmUgVEVFUCBzcGVjaWZpYyB0aG91Z2gsIHNvIGNhbiBzb21lb25lIHRlbGwgbWUgaG93IHRvDQpy ZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRoZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPw0K DQpJIGRvbuKAmXQgdGhpbmsgdGhlIE9FTUlELCBVRUlEIG9yIG90aGVyIHNob3VsZCBiZSAoYWIp dXNlZCAgdG8gcmVwcmVzZW50IGRldmljZSBjbGFzcy4gVGhhdCB3b3VsZCByZXN1bHQgaW4gdGhl bSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2VmdWwgaW4gYSBnZW5lcmljIHNlbnNlLiBXZSBz aG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLg0KDQorMQ0KDQpXZSBjYW4gZGVmaW5lIGEg Y2xhaW0gdG8gYmUgIHRoZSBkZXZpY2UgY2xhc3MgYW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBs aWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQg dXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3RhbmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0 byBiZSBzb21lIG1ldGhvZCBmb3IgdGhlIGNsYXNzaWZpY2F0aW9uLiBUcnVzdFpvbmUgdnMgaHlw ZXJ2aXNvciBiYXNlZD8gRmFzdCB2cyBzbG93PyBIYXMgYSBwcm90ZWN0ZWQgbW9kZSBrZXJuZWwg YW5kIFRBcz8gVGhlIFRFRVAgZG9jdW1lbnQgZG9lc27igJl0IHNheS4gVGhpcyBzZWVtcyBwcm9i bGVtYXRpYyB3aXRob3V0IGEgY2xhc3NpZmljYXRpb24gc2NoZW1lLg0KDQpbRFRdIEnigJltIG5v dCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUsIGF0IGxlYXN0IGZvciBURUVQ LiAgQSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUgc3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxk IHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi4NCg0KSSB3b25kZXIgaWYgdGhlIGludGVudCBpcyBtb3Jl IGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNlIHdlIGNhbiBkZWZpbmUgYSBHRUlEIChHcm91 cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3QgbGlrZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNl ZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMgbm90IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJh c2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxpbmVzIHVwIHdpdGggdGhlIHByaXZhY3kg cHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtleSBwZXIgMTAwLDAwMCBkZXZpY2VzLg0KDQoN Cj4gICAgIC0gIFRFRSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVGhlIHR5cGUgb2YgVEVFIHRo YXQgZ2VuZXJhdGVkIHRoaXMNCg0KPiAgICAgICAgYXR0ZXN0YXRpb24gbXVzdCBiZSBpZGVudGlm aWVkLCBpbmNsdWRpbmcgdmVyc2lvbiBpZGVudGlmaWNhdGlvbg0KDQo+ICAgICAgICBpbmZvcm1h dGlvbiBzdWNoIGFzIHRoZSBoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9u DQoNCj4gICAgICAgIG9mIHRoZSBURUUsIGFzIGFwcGxpY2FibGUgYnkgdGhlIFRFRSB0eXBlLiAg VEVFIG1hbnVmYWN0dXJlcg0KDQo+ICAgICAgICBpbmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyBy ZXF1aXJlZCBpbiBvcmRlciB0byBkaXNhbWJpZ3VhdGUgdGhlDQoNCj4gICAgICAgIHNhbWUgVEVF IHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFudWZhY3R1cmVycyBhbmQgYWRkcmVzcw0KDQo+ ICAgICAgICBjb25zaWRlcmF0aW9ucyBhcm91bmQgbWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywg a2V5aW5nIGFuZA0KDQo+ICAgICAgICBzdXBwb3J0IGZvciB0aGUgVEVFLg0KDQoNClNpbWlsYXJs eSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2lu YXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBhbSBub3Qgc3VyZQ0KdGhhdCBpcyBzdWZm aWNpZW50IHNpbmNlIGl0J3MganVzdCB0aGUgbWFudWZhY3R1cmVyIG5vdCB0aGUgInZlcnNpb24g aWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3VjaCBhcyB0aGUNCmhhcmR3YXJlLCBmaXJtd2Fy ZSwgYW5kIHNvZnR3YXJlIHZlcnNpb24gb2YgdGhlIFRFReKAnQ0KDQpEZWZpbml0ZWx5IG5vdCBv cmlnaW5hdGlvbiBjbGFpbS4NCg0KKzENCg0KVGhlIGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlr ZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQgSSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFj ZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBVUkwuDQoNCkkgd291bGQgc2F5LCB0aGlzIGlz IGEgY29tYmluYXRpb24gb2YgY2xhaW1zDQoNCkl04oCZcyBqdXN0IHVzZWQ6DQoxKSAgICAgRm9y IGEgVmVyaWZpZXIgaW4gYXBwcmFpc2luZyB0aGUgZXZpZGVuY2UgKG5vdGhpbmcgVEVFUCBzcGVj aWZpYyBoZXJlLCBhcHByYWlzYWwgcG9saWN5IGNhbiBpbnZvbHZlIGFueSBjbGFpbSksIGFuZA0K MikgICAgIFRvIGJlIHVzZWQgYnkgYSBUQU0gdG8gZGVjaWRlIHdoaWNoIFRB4oCZcyBhcHBseSB0 byB0aGUgVEVFLiAgSW4gdGhhdCBzZW5zZSBpdOKAmXMganVzdCBsaWtlIGFueSBvdGhlciB2ZW5k b3IgaWQgKyBkZXZpY2UgY2xhc3MgZm9yIGFueSBub24gVEVFLCBhbmQgSSBiZWxpZXZlIGlmIHRo ZXJlIHdlcmUgYSBieXRlIHN0cmluZyBmb3IgZGV2aWNlIGNsYXNzIGFzIHlvdSBzdWdnZXN0IHRo YXQgd291bGQgYmUgc3VmZmljaWVudCBpbiBteSBvcGluaW9uLg0KDQpLZWVwaW5nIGluIG1pbmQg dGhlIOKAnGxheWVyZWQgYXR0ZXN0YXRpb27igJ0gY29uY2VwdCBpbiB0aGUgYXJjaCBkb2MsIGFz IGxvbmcgYXMgd2UgaGF2ZSBhIGNsYWltc2V0IHBlciBsYXllciwgdGhlbiBJIHRoaW5rIHRoZSBz YW1lIOKAnHZlbmRvciBpZOKAnSBhbmQg4oCcY2xhc3PigJ0gY2xhaW1zIHRoYXQgd291bGQgYXBw bHkgdG8gYW55IGRldmljZSBjb3VsZCBiZSByZXVzZWQgZm9yIHRoZSBURUUsIGFuZCByZXVzZWQg Zm9yIGRlc2NyaWJpbmcgZWFjaCBsYXllci4gIEUuZy4sIGEg4oCcdmVyc2lvbuKAnSBjbGFpbSB3 b3VsZCBhcHBseSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRoZSBoYXJkd2FyZSB2ZXJz aW9uLCBhdCB0aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdhcmUgdmVyc2lvbiwgYXQg dGhlIE9TIGxheWVyIGFuZCBiZSBhbiBPUyB2ZXJzaW9uLCBldGMuDQoNCg0KSeKAmXZlIGp1c3Qg YWRkZWQgYSBQUjxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGZWF0JTJGcHVs bCUyRjY4JmRhdGE9MDQlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDYWIxZWU3Nzg4 ZjFmNGQ0NDljNTUwOGQ4N2FhYTMwMDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0 NyU3QzElN0MwJTdDNjM3Mzk0MjE4NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBiR1pzYjNkOGV5 SldJam9pTUM0d0xqQXdNREFpTENKUUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFXd2lMQ0pYVkNJ Nk1uMCUzRCU3QzEwMDAmc2RhdGE9SnlOQ1R3VUp2a0NQazNIOXVZbUQwQkxmVVhQdTZ2aG5Rb21r SXFpcWlVTSUzRCZyZXNlcnZlZD0wPiBmb3IgSFcgdmVyc2lvbiBjbGFpbXMuDQoNClRoZSBpbnRl bnQgZm9yIFNXIHZlcnNpb24gY2xhaW1zIGlzIHRvIHVzZSBDb1NXSUQuIFdlIHNob3VsZCBwcm9i YWJseSBjcmVhdGUgc29tZSBleGFtcGxlcyB0byBzZWUgaWYgaXQgY2FuIHJlcHJlc2VudCB3aGF0 IFRFRVAgd2FudHMgdG8gcmVwcmVzZW50Lg0KDQpBZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcu DQoNClRoZSBwYXJhZ3JhcGggbWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBz dXJlIHdoYXQgaXMgaW50ZW5kZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25v bXkgZm9yIGNsYXNzaWZ5aW5nIFRFRXMuDQoNCkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3VmZmlj aWVudCBpbiBteSB2aWV3LCBubyDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9teeKA nSBpcyByZXF1aXJlZCBieSBhbnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNzZWQg dG8gZGF0ZSwgYXMgZmFyIGFzIEkga25vdy4NCg0KDQpTaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5l IFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZvciBzdWNoIGluZm9ybWF0aW9uPw0KDQpJ4oCZZCBsaWtl IHRvIHNlZSBtb3N0IG9mIHRoZW0gZ28gaW50byBFQVQgdW5sZXNzIHRoZXkgYXJlIHN1cGVyIHNw ZWNpZmljIHRvIFRFRVAgKFRFRVAgbm90IFRFRXMpLiBJIHRoaW5rIHRoZXJlIGlzIHZhbHVlIGlu IGJyb2FkIHN0YW5kYXJkaXplIGNsYWltcyBhcyBpdCBwcm9tb3RlcyBpbnRlcm9wZXJhYmlsaXR5 IG9mIFJBVFMuDQoNClNvdW5kcyBnb29kIHRvIG1lLiAgIENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0 IHRvIGFkZCBzb21lIHdheSB0byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0g KG9yIOKAnGNsYXNz4oCdIG9yIHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCc dmVyc2lvbuKAnSBhcyBjbGFpbXMgdGhhdCBjYW4gYmUgYXBwbGllZCBpbiBjbGFpbXNldHMgYXQg dmFyaW91cyBsYXllcnMuICAgSSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQg aXQgc2VlbXMgdG8gYmUgYSBjaGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVy c2lvbiBjbGFpbSB0aGF0IGNhbiBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90 IHN1ZmZpY2llbnQgdG8gbWVldCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMs IHdlIHN0aWxsIG5lZWQgb3RoZXIgY2xhaW1zIGFkZGVkLg0KDQpUaGFua3MhDQpEYXZlDQoNCkxM DQoNCg0KDQoNCg0KRGF2ZQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGll dGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAx JTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFh MzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQy MTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlM Q0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0 YT1PNUxKWkJ3JTJCNmh1WVU3QnJOU2dPVVFOdzJINXVvREd3WmowOSUyRlBnaEtySSUzRCZyZXNl cnZlZD0wPg0KDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47 DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAx IDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSI7DQoJcGFub3NlLTE6 MiAxMSA1IDIgNCAyIDQgMiAyIDM7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xh czsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9u cyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46 MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENo YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLmFwcGxlLWNvbnZlcnRl ZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5I VE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQg Q2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFBy ZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjEN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3 Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0K LS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpl eHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6 ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0t Pg0KPC9oZWFkPg0KPGJvZHkgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgc3R5bGU9IndvcmQt d3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Tm90ZSB0aGF0IHNvbWUgb2YgdGhlIEFybSB0 ZWFtIHdpbGwgYmUgYXR0ZW5kaW5nIHRoZSB1cGNvbWluZyBoYWNrYXRob24gYW5kIGhhZCBiZWVu IGRpc2N1c3NpbmcgZG9pbmcgc29tZSB3b3JrIHRoZXJlIG9uIGRlc2NyaWJpbmcgY29tcG9uZW50 cyB3aXRoIENvU1dJRCB2aWEgRUFULiBUaGlzIGJ1aWxkcyBvbiBzb21lIGltcGxlbWVudGF0aW9u IHdvcmsgYWxyZWFkeSBjb21wbGV0ZWQNCiBhcyBwYXJ0IG9mIGFuIEFybSBwcm9qZWN0IHRoYXQg d2lsbCBzaG9ydGx5IGJlIHVwc3RyZWFtZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGUgUFNBIEVB VCBwcm9maWxlIG9yaWdpbmFsbHkgaW50cm9kdWNlZCBhIGhhcmR3YXJlIHZlcnNpb24gYmFzZWQg b24gYW4gRUFOLTEzLiBUaGlzIHdhcyB1c2VkIGFzIGEgcmVmZXJlbmNlIHRvIGEgZ2VuZXJhbCBz ZXQgb2YgaGFyZHdhcmUgaW4gYSBjZXJ0aWZpY2F0aW9uIHNjaGVtZS4gRnVydGhlciB3b3JrIGhh cyBzaG93biB0aGlzIGZvcm1hdCBpcyBub3Qgc3VpdGFibGUNCiBhbmQgaXQgaGFzIHdpbGwgYmUg ZGVwcmVjYXRlZCBpbiBhIGZ1dHVyZSByZWxlYXNlcyBvZiB0aGUgcHJvZmlsZS4gVGhlIFBTQSBw cm9maWxlIGFsc28gY29udGFpbnMgYW4g4oCYSW1wbGVtZW50YXRpb25JROKAmSBjbGFpbSAoYnl0 ZSBzdHJpbmcgb2Ygc3VmZmljaWVudCBzaXplIHRvIGhvbGQgYSBTSEEyIGhhc2gpIHdoaWNoIGlz IGludGVuZGVkIHRvIGJlIHVzZWQgYXMgYSBtdWNoIG1vcmUgc3BlY2lmaWMgaWRlbnRpZmllciBv ZiBhIGhhcmR3YXJlDQogZ3JvdXAuIFRoZSBpbnRlbnQgaGVyZSBpcyB0aGF0IHJlZmVyZW5jZSB2 YWx1ZXMgZm9yIGFuIEltcGxlbWVudGF0aW9uSUQgY2FuIGJlIGtub3duIGJ5IGEgdmVyaWZpZXIg dG8gYXNzaXN0IGFwcHJhaXNhbCBwb2xpY3kuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGFua3M8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiI+U2ltb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt dG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxz cGFuIGxhbmc9IkVOLVVTIj4gTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29y dC5jb20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gMjcgT2N0b2JlciAyMDIwIDIwOjQ1PGJyPg0K PGI+VG86PC9iPiBEYXZlIFRoYWxlciAmbHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gcmF0c0BpZXRmLm9yZzsgdGVlcCAmbHQ7dGVlcEBpZXRmLm9yZyZndDs8YnI+ DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNvU1dJ RCBzaG91bGQgY292ZXIgYWxsIHRoZSBpZGVudGlmaWNhdGlvbiBvZiB2ZW5kb3JzLCBtb2RlbHMs IHZlcnNpb25zIGFuZCBzdHVmZiBmb3IgU1cuIElmIGl0IGRvZXNu4oCZdCB0YWxrIHRvIEhlbmsg YWJvdXQgZml4ZXMgdG8gQ29TV0lELiA6LSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIEhXLCB0aGVyZSBpcyBPRU1JRCBhbmQgcmVjZW50 bHkgcHJvcG9zZWQgY2hpcCB2ZXJzaW9uLCBib2FyZCB2ZXJzaW9uIGFuZCBkZXZpY2UgdmVyc2lv bi4gSXQgc2VlbXMgbGlrZSB3ZSBuZWVkIGEgbW9kZWwgbnVtYmVyIGNsYWltIGZvciBIVy4gSSB3 aWxsIHdvcmsgb24gdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+U2VlbXMgbGlrZSBzdWJtb2R1bGVzIHdvdWxkIGJlIHVzZWQgdG8gb3Jn YW5pemUgY2xhaW1zIGZvciBsYXllcmVkIGF0dGVzdGF0aW9uIGFuZCBhbGwgb2YgdGhlIGFib3Zl IGNsYWltcyBjYW4gb2NjdXIgaW4gYW55IHN1Ym1vZHVsZSB0aGV5IG5lZWQgdG8uPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvZXMgdGhpcyBt b3N0bHkgY292ZXIgaXQ/Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgd29ycnkgdGhhdCB0aGUgSFcgY2xhaW1zIGFyZSBiaXQgdG9v IHJpZ2lkIGluIHRoZWlyIHVzZSBvZiBFQU4tMTMgYW5kIElFRUUgcmVnaXN0cmllcy4gTWlnaHQg bmVlZCB0byBkbyBzb21ldGhpbmcgYWJvdXQgdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MTDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+T24gT2N0IDI3LCAyMDIwLCBhdCAxOjI2IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEg aHJlZj0ibWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SW5saW5lIGJlbG934oCmPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TGF1cmVuY2UgTHVuZGJsYWRlICZs dDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj48c3BhbiBzdHlsZT0iY29s b3I6cHVycGxlIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlR1ZXNkYXks IE9jdG9iZXIgMjcsIDIwMjAgMTE6NTcgQU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkRhdmUgVGhhbGVyICZsdDs8YSBocmVm PSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxl Ij5kdGhhbGVyQG1pY3Jvc29mdC5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1h aWx0bzpyYXRzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5yYXRzQGlldGYu b3JnPC9zcGFuPjwvYT47IHRlZXAgJmx0OzxhIGhyZWY9Im1haWx0bzp0ZWVwQGlldGYub3JnIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj50ZWVwQGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7PGJy Pg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPlJlOiBbUmF0c10gRUFUIGNsYWltcyBuZWVkZWQgYnkgVEVFUDxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj5QZXJzb25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKA mXMgaXMgcHJldHR5IGltcG9ydGFudCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQu IFNvIEnigJltIGludGVyZXN0ZWQgaW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3Ig dGhpcyB0byBFQVQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5BZnRlciByZWFkaW5nIHNlY3Rpb24gNy4xIGluIFRF RVAgYXJjaGl0ZWN0dXJlLCBpdCBkb2VzIHNlZW0gbGlrZSB0aGVyZSBzb21lIHdvcmsgdG8gZG8g aGVyZSB0byBnZXQgdG8gc3BlY2lmaWMgc3RhbmRhcmRpemVkIGludGVyb3BlcmFibGUgY2xhaW1z LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5Nb3JlIGNvbW1lbnRzIGJlbG93LjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxicj4NCjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+T24gT2N0IDI2LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBz dHlsZT0iY29sb3I6cHVycGxlIj5kdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9y Zzwvc3Bhbj48L2E+Jmd0Ow0KIHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkFzIGRpc2N1c3NlZCBpbiBwcmV2aW91cyBJRVRGIG1lZXRpbmdz LCBpZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUgYmFzZSBzZXQgdGhhdDxicj4NCm90aGVy IFdHcyBuZWVkLCB0aGV5IGNhbiBiZSBzcGVjaWZpZWQgYnkgdGhlIG90aGVyIFdHcyB3aXRoIHJl dmlldyBieSBSQVRTLjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgVEVFUCBXRyBuZWVkcyB0aGUg Zm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0aGV5IGNhbiBiZTxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Y292ZXJlZCBieSBleGlzdGluZyBjbGFpbXMgb3Igd2hldGhlciBURUVQLXNwZWNpZmlj IGNsYWltcyBhcmUgbmVlZGVkLiZuYnNwOyBGcm9tPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zZWN0aW9uIDcuMSBvZiBkcmFm dC1pZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOw0KIERl dmljZSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVEVFUCBhdHRlc3RhdGlvbnMgbWF5IG5lZWQg dG88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1p bmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7dW5pcXVlbHkNCiBpZGVudGlmeSBhIGRl dmljZSB0byB0aGUgVEFNLiZuYnNwOyBVbmlxdWUgZGV2aWNlPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO2lkZW50aWZpY2F0aW9uDQogYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlkZSBzZXJ2 aWNlcyB0byB0aGUgZGV2aWNlLDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4m bmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzdWNoDQog YXMgbWFuYWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3ZpZGluZyBzdWJzY3JpcHRpb25zIHRv PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5k ZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5Oldp bmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlcnZpY2VzLA0KIGFuZCBsb2NhdGluZyBk ZXZpY2Utc3BlY2lmaWMga2V5aW5nIG1hdGVyaWFsIHRvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO2NvbW11bmljYXRlDQogd2l0aCBvciBhdXRoZW50aWNhdGUgdGhlIGRldmljZS48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMjQyOTJFIj5JIGJlbGlldmUgdGhlIFVuaXZlcnNhbCBFbnRpdHkgSUQgQ2xhaW0g KHVlaWQpIGlzIGNsYWltIHRoYXQgbWVldHMgdGhlIGFib3ZlIHJlcXVpcmVtZW50Ljxicj4NCkJ1 dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29lcyBvbiB0byBzYXk6PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjE4LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDtJbg0KIHNvbWUgdXNlIGNhc2VzIGl0PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRlbnRpZnkgb25seSB0aGUgY2xhc3Mgb2Yg dGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlY3Vy aXR5DQogYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb248L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7d2lsbA0KIHZhcnkgd2l0aCB0aGUg dHlwZSBvZiBUQSBwcm92aXNpb25lZCB0byB0aGUgVEVFLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJi YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyNDI5MkUiPldoaWNoIEVB VCBjbGFpbSBjb250YWlucyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2VzdCB0aGluZyBJIHNl ZSBpcyBPRU0gSWRlbnRpZmljYXRpb24gYnkgSUVFRSAob2VtaWQpPGJyPg0KYnV0IEkgYW0gbm90 IHN1cmUgdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3Mgb25seSB0aGUgT0VNIG5vdCB0aGUg ZGV2aWNlIGNsYXNzIGZyb20gdGhhdCBPRU0uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91 bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+VGhpcyBkb2VzbuKAmXQg c2VlbSBsaWtlIHNvbWV0aGluZyB0aGF0IHNob3VsZCBiZSBURUVQIHNwZWNpZmljIHRob3VnaCwg c28gY2FuIHNvbWVvbmUgdGVsbCBtZSBob3cgdG88YnI+DQpyZXByZXNlbnQgZGV2aWNlIGNsYXNz IHVzaW5nIHRoZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkkgZG9u4oCZ dCB0aGluayB0aGUgT0VNSUQsIFVFSUQgb3Igb3RoZXIgc2hvdWxkIGJlIChhYil1c2VkICZuYnNw O3RvIHJlcHJlc2VudCBkZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVzdWx0IGluIHRoZW0gYmVp bmcgbGVzcyByZWxpYWJsZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBzZW5zZS4gV2Ugc2hvdWxk DQogY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+KzE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+V2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICZuYnNwO3RoZSBkZXZpY2UgY2xhc3MgYW5k IG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2ZSB0 byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3RhbmRh cmRpemUNCiBjbGFpbS4gVGhlcmUgaGFzIHRvIGJlIHNvbWUgbWV0aG9kIGZvciB0aGUgY2xhc3Np ZmljYXRpb24uIFRydXN0Wm9uZSB2cyBoeXBlcnZpc29yIGJhc2VkPyBGYXN0IHZzIHNsb3c/IEhh cyBhIHByb3RlY3RlZCBtb2RlIGtlcm5lbCBhbmQgVEFzPyBUaGUgVEVFUCBkb2N1bWVudCBkb2Vz buKAmXQgc2F5LiBUaGlzIHNlZW1zIHByb2JsZW1hdGljIHdpdGhvdXQgYSBjbGFzc2lmaWNhdGlv biBzY2hlbWUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bRFRdIEnigJlt IG5vdCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUsIGF0IGxlYXN0IGZvciBU RUVQLiAmbmJzcDtBIHNpbXBsZSBkZXZpY2UgY2xhc3MgYnl0ZSBzdHJpbmcgYXMgeW91IHN1Z2dl c3Qgd291bGQgc3VmZmljZSBpbiBteSBvcGluaW9uLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5JIHdvbmRlciBpZiB0aGUgaW50ZW50IGlzIG1vcmUgYWJv dXQgZ3JvdXBpbmcsIGluIHdoaWNoIGNhc2Ugd2UgY2FuIGRlZmluZSBhIEdFSUQgKEdyb3VwIEVu dGl0eSBJRCkgdGhhdCBsb29rcyBhIGxvdCBsaWtlIGEgVUVJRC4gVGhhdCBzZWVtcyB1c2VmdWwg YW5kIHNlbnNpYmxlIHRvIG1lLiBJdA0KIGlzIG5vdCBhYm91dCBjbGFzc2lmaWNhdGlvbiBiYXNl ZCBvbiBhbnkgY2hhcmFjdGVyaXN0aWNzLiBJdCBsaW5lcyB1cCB3aXRoIHRoZSBwcml2YWN5IHBy ZXNlcnZpbmcgdGVjaG5pcXVlIG9mIG9uZSBrZXkgcGVyIDEwMCwwMDAgZGV2aWNlcy48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOyBURUUgSWRlbnRpZnlpbmcg SW5mb3JtYXRpb246IFRoZSB0eXBlIG9mIFRFRSB0aGF0IGdlbmVyYXRlZCB0aGlzPG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTgu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDthdHRlc3RhdGlvbiBtdXN0IGJlIGlkZW50aWZpZWQsIGluY2x1ZGluZyB2ZXJzaW9uIGlk ZW50aWZpY2F0aW9uPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy LjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2Rp bmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBzdWNoIGFzIHRoZSBoYXJkd2Fy ZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uPG86cD48L286cD48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5i c3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtvZiB0aGUgVEVF LCBhcyBhcHBsaWNhYmxlIGJ5IHRoZSBURUUgdHlwZS4mbmJzcDsgVEVFIG1hbnVmYWN0dXJlcjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRl bnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7aW5mb3JtYXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIg dG8gZGlzYW1iaWd1YXRlIHRoZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4t bGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c2FtZSBURUUgdHlwZSBjcmVhdGVkIGJ5 IGRpZmZlcmVudCBtYW51ZmFjdHVyZXJzIGFuZCBhZGRyZXNzPG86cD48L286cD48L3ByZT4NCjxw cmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb25zaWRl cmF0aW9ucyBhcm91bmQgbWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywga2V5aW5nIGFuZDxvOnA+ PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6 LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7c3VwcG9ydCBmb3IgdGhlIFRFRS48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcHJlPg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBm b3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRp b24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBhbSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3Vm ZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhlIG1hbnVmYWN0dXJlciBub3QgdGhlICZxdW90O3Zl cnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2Fy ZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+RGVm aW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+KzE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaGUgaW50ZW50IG9mIGl0IHNvbWV0aGlu ZyBsaWtlIEVuZG9yc2VyIGlkZW50aWZpY2F0aW9uIGFuZCBJIHRoaW5rIGl0IHNob3VsZCBiZSBy ZXBsYWNlZCBieSBhbiBFbmRvcnNlci9YLjUwOSBjZXJ0IFVSTC48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+SSB3b3VsZCBzYXksIHRoaXMgaXMgYSBjb21iaW5hdGlvbiBvZiBjbGFpbXM8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl04oCZcyBqdXN0IHVzZWQ6PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQt aW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4xKTwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Gb3IgYSBWZXJpZmllcg0KIGluIGFwcHJhaXNpbmcgdGhl IGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3BlY2lmaWMgaGVyZSwgYXBwcmFpc2FsIHBvbGljeSBj YW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjIpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPlRvIGJlIHVzZWQNCiBieSBhIFRBTSB0byBkZWNpZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRv IHRoZSBURUUuJm5ic3A7IEluIHRoYXQgc2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIg dmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBp ZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9yIGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2Vz dCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4gbXkgb3Bpbmlvbi48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPktlZXBpbmcg aW4gbWluZCB0aGUg4oCcbGF5ZXJlZCBhdHRlc3RhdGlvbuKAnSBjb25jZXB0IGluIHRoZSBhcmNo IGRvYywgYXMgbG9uZyBhcyB3ZSBoYXZlIGEgY2xhaW1zZXQgcGVyIGxheWVyLCB0aGVuIEkgdGhp bmsgdGhlIHNhbWUg4oCcdmVuZG9yIGlk4oCdIGFuZCDigJxjbGFzc+KAnSBjbGFpbXMgdGhhdCB3 b3VsZCBhcHBseSB0byBhbnkgZGV2aWNlIGNvdWxkIGJlIHJldXNlZA0KIGZvciB0aGUgVEVFLCBh bmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2ggbGF5ZXIuJm5ic3A7IEUuZy4sIGEg4oCcdmVy c2lvbuKAnSBjbGFpbSB3b3VsZCBhcHBseSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRo ZSBoYXJkd2FyZSB2ZXJzaW9uLCBhdCB0aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdh cmUgdmVyc2lvbiwgYXQgdGhlIE9TIGxheWVyIGFuZCBiZSBhbiBPUyB2ZXJzaW9uLCBldGMuPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5J4oCZ dmUganVzdCBhZGRlZCBhJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYt cmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZhbXA7ZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1p Y3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NV bmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklp TENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZhbXA7c2RhdGE9SnlOQ1R3VUp2 a0NQazNIOXVZbUQwQkxmVVhQdTZ2aG5Rb21rSXFpcWlVTSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+UFI8L3NwYW4+PC9hPiZuYnNwO2Zvcg0KIEhXIHZlcnNp b24gY2xhaW1zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9u IGNsYWltcyBpcyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUg ZXhhbXBsZXMgdG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJl cHJlc2VudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFncmVlIHRoaXMg c291bmRzIHByb21pc2luZy48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+VGhlIHBhcmFncmFwaCBtZW50aW9ucyDigJx0eXBlIG9mIFRFReKAnS4gSeKAmW0g bm90IHN1cmUgd2hhdCBpcyBpbnRlbmRlZC4gSSBkb27igJl0IGtub3cgb2YgYW55IGNvbW1vbiB0 YXhvbm9teSBmb3IgY2xhc3NpZnlpbmcgVEVFcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmO2NvbG9yOiMxRjQ5N0QiPkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3Vm ZmljaWVudCBpbiBteSB2aWV3LCBubyDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9t eeKAnSBpcyByZXF1aXJlZCBieSBhbnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNz ZWQgdG8gZGF0ZSwgYXMgZmFyIGFzIEkNCiBrbm93Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi Pjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5TaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZv ciBzdWNoIGluZm9ybWF0aW9uPzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+SeKAmWQgbGlrZSB0byBzZWUgbW9zdCBvZiB0aGVt IGdvIGludG8gRUFUIHVubGVzcyB0aGV5IGFyZSBzdXBlciBzcGVjaWZpYyB0byBURUVQIChURUVQ IG5vdCBURUVzKS4gSSB0aGluayB0aGVyZSBpcyB2YWx1ZSBpbiBicm9hZCBzdGFuZGFyZGl6ZSBj bGFpbXMgYXMgaXQgcHJvbW90ZXMgaW50ZXJvcGVyYWJpbGl0eQ0KIG9mIFJBVFMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Tb3VuZHMgZ29vZCB0byBtZS4mbmJzcDsmbmJz cDsgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5IHRvIGV4cHJlc3Mg4oCc dmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0gb3Igd2hhdGV2ZXIgeW91 IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNsYWltcyB0aGF0IGNhbiBi ZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4mbmJzcDsmbmJzcDsNCiBJ IGdsYW5jZWQgYXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBzZWVtcyB0byBiZSBhIGNo aXAtc3BlY2lmaWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9uIGNsYWltIHRoYXQgY2Fu IGJlIHVzZWQgYXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3VmZmljaWVudCB0byBtZWV0 IHRoZSBURUVQIGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywgd2Ugc3RpbGwgbmVlZCBvdGhl ciBjbGFpbXMgYWRkZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5UaGFua3MhPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+TEw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48YnI+DQo8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5EYXZlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj48YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojOTU0RjcyIj5SQVRTQGlldGYub3JnPC9zcGFuPjwvYT48L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PGEgaHJl Zj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGcmF0cyZhbXA7 ZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0 OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lN QzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNE JTdDMTAwMCZhbXA7c2RhdGE9TzVMSlpCdyUyQjZodVlVN0JyTlNnT1VRTncySDV1b0RHd1pqMDkl MkZQZ2hLckklM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3 MiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9zcGFuPjwvYT48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCklNUE9SVEFOVCBO T1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJl IGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3Qg dGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0 ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24s IHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRp b24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_-- From nobody Thu Oct 29 03:44:50 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C57673A0BB1; Thu, 29 Oct 2020 03:44:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mWQKx21MKmTv; Thu, 29 Oct 2020 03:44:41 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2068.outbound.protection.outlook.com [40.107.20.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1FC93A0BAD; Thu, 29 Oct 2020 03:44:40 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=cx8iHLAO//raz2hV1NuFPU5JCNtGdfRn2sj7J6YCizwRSwRcym6rh4r0a7NgUDCu36EuzcDmu6q4e833VDNtuQO/mnksTATbc/AAMsw2cOSNPE87gx5Na5NpNcVlBtgW2CqoB8Z/MOxGbJnmdG9ktbMPcT15CaNwmFyruWnsNHG0ltavY8QKFps80Zo1qSLNlbLaxgH79zFVd8dR8I0RtVp27kDZPk8jW8+/bmpk0XIxrgh7TKQkiOgZ+RbderD5R729Largl2zKPvLD7kGWLYy+/pparO4pFROZKGZKmRvYEizaA4gFZ5Oeyo+Ni6EOamvIFPvP9o4cYWymWe33lQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EeisfFevp6VbF5HxdciGDg30CFBWYj6aKWm9CXWWxRg=; b=AV/ZLp3bgk9r0XhgTIr9SXEjLYd5WeLr7TMPCzqq56AFX7i0m+nBXOkTOsaU0L7g3jG+A2O4DBGVCyU+YHmlOJ4/nAolxx5OtVYCpeyg/9Z3rJMYYGyyHEgzsm7bmv8Rj6+a1tEXQ7r7yaf9S68lyrHhUZdP/4hWfNHdbvuRJZOeKg2WEoN7qwBlQ/u+tdcgeGzKxMui5PHkQVH6I3JSG3+h/kRx1e5RWtMhkKXdj9j3Pt3AaNDP8aO0aWA97yB5imy1ji3RVAUqxX2aqj78K2kg+ZE79wMkii5wCtWiGmkkE0ih6+94FVEZ7r5Bffsqo8zTBxVCTgNXJr49SD9H9A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EeisfFevp6VbF5HxdciGDg30CFBWYj6aKWm9CXWWxRg=; b=c5VI0vtotJwAfwhMO8V4xfECaqd/9/esqeTWNrlbCvdLVvLQ9MfrejN1cZlr7QTVNfsh5GU2ydRZySAzOpUTyaK3uuLGHi5fDNWJfaNT2A1Hbbc3YW7Ec5JIEOQAV7G1Pycyo9GgNFgcQp3rCKSCDfY1O0rjgZBXuhWE52CZcoc= Received: from VI1PR07MB4477.eurprd07.prod.outlook.com (2603:10a6:803:74::33) by VI1PR0701MB2590.eurprd07.prod.outlook.com (2603:10a6:801:11::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.9; Thu, 29 Oct 2020 10:44:38 +0000 Received: from VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef]) by VI1PR07MB4477.eurprd07.prod.outlook.com ([fe80::d9ad:72f6:f14b:40ef%7]) with mapi id 15.20.3499.018; Thu, 29 Oct 2020 10:44:38 +0000 From: Francesca Palombini To: "sacm@ietf.org" , "rats@ietf.org" CC: "draft-ietf-cbor-tags-oid@ietf.org" Thread-Topic: =?utf-8?B?W0Nib3JdIPCflJQgV0dMQyBvbiBkcmFmdC1pZXRmLWNib3ItdGFncy1vaWQt?= =?utf-8?Q?02?= Thread-Index: AQHWreB/oiZoG09evEeG/vQkZA9r/g== Date: Thu, 29 Oct 2020 10:44:38 +0000 Message-ID: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [158.174.219.143] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: fff10c08-a61d-42dd-6623-08d87bf7a26f x-ms-traffictypediagnostic: VI1PR0701MB2590: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: t5Kyx2n2Vh41jZ4isWAYfd3kKsb2dcxLTdiREE1bdXNLxdjpNy3JvJfC4Av4a1HKXPHHDF0g2tN7Oa9p8uCdv1WoacUjwghdtwzewJXBkVpURPRmvuOMvFURbLFLb9vicsTi8G2B3vIO0OoDqd0KMOF5svbkS9dlGZsKFave3i7OdgUNcf6i7sfjO+y0zaZ8lFqOWgEhki/K4y044xgQnFJIbPCUmNpAjkG2HC59IUyiErXB3/g04T16K+C9zBU/8QHNC4ZTuF43VO1YMq9Gt37QlXtkl85iKptZ9B7TCz4LNxi2xK+0YIv3KrXMCraF9bfRJCmJ/DuD3MajxiEKAfyOhxX8HUQSHDpf1/s/u60k/mlv7BFAf4MjdgP2ODNCpeyX2y71NdTdoYgEVnjZSA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:VI1PR07MB4477.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(39860400002)(346002)(366004)(376002)(396003)(5660300002)(36756003)(4001150100001)(186003)(6512007)(44832011)(66446008)(64756008)(33656002)(86362001)(4326008)(450100002)(66556008)(66476007)(66946007)(76116006)(91956017)(6486002)(6506007)(53546011)(2616005)(71200400001)(316002)(110136005)(478600001)(83380400001)(966005)(66574015)(26005)(8936002)(2906002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <9037716199C8714FA269A85363F87D66@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: VI1PR07MB4477.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: fff10c08-a61d-42dd-6623-08d87bf7a26f X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2020 10:44:38.4604 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: dXeXahyK0O/NfAHMtuby1jagw4rDUlRAU2vsR5ROrsmVWWeKjbpCsrtuprbd8CrSucdv/nSl2kwN6sVPo0jabPytLow3uUJ+FoS2KdLOqFz2cQ+Spv6EBA7Y1t2sLITY X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0701MB2590 Archived-At: Subject: [Rats] =?utf-8?b?Rlc6IFtDYm9yXSDwn5SUIFdHTEMgb24gZHJhZnQtaWV0?= =?utf-8?q?f-cbor-tags-oid-02?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 10:44:43 -0000 SGkgU0FDTSBhbmQgUkFUUyB3ZywNCg0KRllJLCBDQk9SIGhhcyBqdXN0IHN0YXJ0ZWQgYSAyIHdl ZWtzIFdHTEMgb24gdGhlIENCT1IgVGFncyBmb3IgT0lEcywgd2hpY2ggbWlnaHQgYmUgb2YgaW50 ZXJlc3QgdG8geW91Lg0KDQpBbnkgZmVlZGJhY2sgYW5kIHJldmlldyBpcyB3ZWxjb21lIQ0KRnJh bmNlc2NhIChDQk9SIGNoYWlyKQ0KDQrvu79PbiAyOS8xMC8yMDIwLCAxMDo1NywgIkNCT1Igb24g YmVoYWxmIG9mIEZyYW5jZXNjYSBQYWxvbWJpbmkiIDxjYm9yLWJvdW5jZXNAaWV0Zi5vcmcgb24g YmVoYWxmIG9mIGZyYW5jZXNjYS5wYWxvbWJpbmk9NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5v cmc+IHdyb3RlOg0KDQogICAgQ0JPUiB3ZywNCg0KICAgIFRoaXMgc3RhcnRzIGEgdHdvIHdlZWtz IFdHIGxhc3QgY2FsbCBvbiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1j Ym9yLXRhZ3Mtb2lkLTAyICwgZW5kaW5nIG9uICpUaHVyc2RheSwgMTJ0aCBOb3ZlbWJlciouIA0K DQogICAgUGxlYXNlIHNlbmQgaW5wdXRzIHRvIHRoZSBtYWlsaW5nIGxpc3QgdGhhdCB5b3UgaGF2 ZSByZWFkIHRoZSBkb2N1bWVudCBhbmQgZG8gb3IgZG8gbm90IGZlZWwgaXQgaXMgcmVhZHkgdG8g cHJvZ3Jlc3MsIGFsb25nIHdpdGggYW55IGlzc3VlcyB0aGF0IHlvdSBiZWxpZXZlIG5lZWQgdG8g YmUgZGVhbHQgd2l0aC4NCg0KICAgIFdlIHdpbGwgZGlzY3VzcyBhbnkgb3BlbiBpc3N1ZXMgd2Xi gJl2ZSBnb3R0ZW4gZHVyaW5nIG91ciBXRyBtZWV0aW5nIGF0IElFVEYxMDkgc2NoZWR1bGVkIGZv ciBUaHVyc2RheSwgMTkgTm92ZW1iZXIuDQoNCiAgICBDQk9SIENoYWlyDQogICAgRnJhbmNlc2Nh DQoNCiAgICBPbiAyOC8xMC8yMDIwLCAxODo0NCwgIkNCT1Igb24gYmVoYWxmIG9mIGludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZyIgPGNib3ItYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaW50 ZXJuZXQtZHJhZnRzQGlldGYub3JnPiB3cm90ZToNCg0KDQogICAgICAgIEEgTmV3IEludGVybmV0 LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0LURyYWZ0cyBkaXJl Y3Rvcmllcy4NCiAgICAgICAgVGhpcyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgQ29uY2lz ZSBCaW5hcnkgT2JqZWN0IFJlcHJlc2VudGF0aW9uIE1haW50ZW5hbmNlIGFuZCBFeHRlbnNpb25z IFdHIG9mIHRoZSBJRVRGLg0KDQogICAgICAgICAgICAgICAgVGl0bGUgICAgICAgICAgIDogQ29u Y2lzZSBCaW5hcnkgT2JqZWN0IFJlcHJlc2VudGF0aW9uIChDQk9SKSBUYWdzIGZvciBPYmplY3Qg SWRlbnRpZmllcnMNCiAgICAgICAgICAgICAgICBBdXRob3JzICAgICAgICAgOiBDYXJzdGVuIEJv cm1hbm4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTZWFuIExlb25hcmQNCiAg ICAgICAgCUZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY2Jvci10YWdzLW9pZC0wMi50eHQN CiAgICAgICAgCVBhZ2VzICAgICAgICAgICA6IDE0DQogICAgICAgIAlEYXRlICAgICAgICAgICAg OiAyMDIwLTEwLTI4DQoNCiAgICAgICAgQWJzdHJhY3Q6DQogICAgICAgICAgIFRoZSBDb25jaXNl IEJpbmFyeSBPYmplY3QgUmVwcmVzZW50YXRpb24gKENCT1IsIGRyYWZ0LWlldGYtY2Jvci0NCiAg ICAgICAgICAgNzA0OWJpcykgaXMgYSBkYXRhIGZvcm1hdCB3aG9zZSBkZXNpZ24gZ29hbHMgaW5j bHVkZSB0aGUgcG9zc2liaWxpdHkNCiAgICAgICAgICAgb2YgZXh0cmVtZWx5IHNtYWxsIGNvZGUg c2l6ZSwgZmFpcmx5IHNtYWxsIG1lc3NhZ2Ugc2l6ZSwgYW5kDQogICAgICAgICAgIGV4dGVuc2li aWxpdHkgd2l0aG91dCB0aGUgbmVlZCBmb3IgdmVyc2lvbiBuZWdvdGlhdGlvbi4NCg0KICAgICAg ICAgICBUaGUgcHJlc2VudCBkb2N1bWVudCBkZWZpbmVzIENCT1IgdGFncyBmb3Igb2JqZWN0IGlk ZW50aWZpZXJzIChPSURzKS4NCiAgICAgICAgICAgSXQgaXMgaW50ZW5kZWQgYXMgdGhlIHJlZmVy ZW5jZSBkb2N1bWVudCBmb3IgdGhlIElBTkEgcmVnaXN0cmF0aW9uIG9mDQogICAgICAgICAgIHRo ZSBDQk9SIHRhZ3Mgc28gZGVmaW5lZC4NCg0KDQogICAgICAgIFRoZSBJRVRGIGRhdGF0cmFja2Vy IHN0YXR1cyBwYWdlIGZvciB0aGlzIGRyYWZ0IGlzOg0KICAgICAgICBodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNib3ItdGFncy1vaWQvDQoNCiAgICAgICAgVGhl cmUgaXMgYWxzbyBhbiBIVE1MIHZlcnNpb24gYXZhaWxhYmxlIGF0Og0KICAgICAgICBodHRwczov L3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RyYWZ0LWlldGYtY2Jvci10YWdzLW9pZC0wMi5odG1s DQoNCiAgICAgICAgQSBkaWZmIGZyb20gdGhlIHByZXZpb3VzIHZlcnNpb24gaXMgYXZhaWxhYmxl IGF0Og0KICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0 Zi1jYm9yLXRhZ3Mtb2lkLTAyDQoNCg0KICAgICAgICBQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0 YWtlIGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQogICAg ICAgIHVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQg dG9vbHMuaWV0Zi5vcmcuDQoNCiAgICAgICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWls YWJsZSBieSBhbm9ueW1vdXMgRlRQIGF0Og0KICAgICAgICBmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50 ZXJuZXQtZHJhZnRzLw0KDQoNCiAgICAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCiAgICAgICAgQ0JPUiBtYWlsaW5nIGxpc3QNCiAgICAgICAgQ0JP UkBpZXRmLm9yZw0KICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2Nib3INCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQogICAgQ0JPUiBtYWlsaW5nIGxpc3QNCiAgICBDQk9SQGlldGYub3JnDQogICAgaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jYm9yDQoNCg== From nobody Thu Oct 29 12:46:36 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 838213A0317 for ; Thu, 29 Oct 2020 12:46:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Ei7Id5cSU_y for ; Thu, 29 Oct 2020 12:46:33 -0700 (PDT) Received: from p3plsmtpa12-01.prod.phx3.secureserver.net (p3plsmtpa12-01.prod.phx3.secureserver.net [68.178.252.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3205F3A02C1 for ; Thu, 29 Oct 2020 12:46:33 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YDqLk1qbhZkNsYDqMkIPGm; Thu, 29 Oct 2020 12:44:18 -0700 X-CMAE-Analysis: v=2.4 cv=WNW64lgR c=1 sm=1 tr=0 ts=5f9b1b92 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=5KLPUuaC_9wA:10 a=48vgC7mUAAAA:8 a=YpF0y9STXbhQHljeBh4A:9 a=QEXdDO2ut3YA:10 a=WiFMg2hEW7gA:10 a=JRYF3h_zhQEA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) From: Laurence Lundblade In-Reply-To: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> Date: Thu, 29 Oct 2020 12:44:17 -0700 Cc: "sacm@ietf.org" , "rats@ietf.org" , "draft-ietf-cbor-tags-oid@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> To: Francesca Palombini X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfO+kjQApJqEjMO/q200QrJi/UElLb/Mwel895FIx4xPL2mMyzxVJUePVaBv+7gWG7OXvmDPhSWwMWrURLq/SVo/5MGkCGiRF0RZgmzXrrAzpHfvx6DrD M1B633w5wo8Zbu4pILuRVffHga4WkFBGBw2+vRicyFhHhbU2cswJy/2e+1enZ2Ji6nq7onD1UAfcB9Fg/cGdGLOHVnJWRquse6EXUuh1vqq3fJS/panf3DxQ mX2ZS2GgAPtwOlgly3TJ94XiN4/wY7X33kWTYtQw2Qp1NMO0eoUxpIelEq3rdOL0r0aCdp90wEaxyegpx2rT5hcH/hvqQy/qw2yfM0oTPVU= Archived-At: Subject: Re: [Rats] =?utf-8?b?Rlc6IFtDYm9yXSDwn5SUIFdHTEMgb24gZHJhZnQtaWV0?= =?utf-8?q?f-cbor-tags-oid-02?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 19:46:35 -0000 The question I have is whether there is any intent for these OIDs to be = keys or labels in CBOR maps. In X.509/PKIX extensions are labeled by = OIDs. Would there be similar use in CBOR? Typically, CBOR map labels are integers and sometimes text strings. = Having to pay attention to tags in map keys might be very inconvenient = for some CBOR decoders, though that could be avoided in a given protocol = by saying the map keys are byte strings that borrow tag 111 content = eliminating the need for the tag. LL > On Oct 29, 2020, at 3:44 AM, Francesca Palombini = wrote: >=20 > Hi SACM and RATS wg, >=20 > FYI, CBOR has just started a 2 weeks WGLC on the CBOR Tags for OIDs, = which might be of interest to you. >=20 > Any feedback and review is welcome! > Francesca (CBOR chair) >=20 > =EF=BB=BFOn 29/10/2020, 10:57, "CBOR on behalf of Francesca Palombini" = wrote: >=20 > CBOR wg, >=20 > This starts a two weeks WG last call on = https://tools.ietf.org/html/draft-ietf-cbor-tags-oid-02 , ending on = *Thursday, 12th November*.=20 >=20 > Please send inputs to the mailing list that you have read the = document and do or do not feel it is ready to progress, along with any = issues that you believe need to be dealt with. >=20 > We will discuss any open issues we=E2=80=99ve gotten during our WG = meeting at IETF109 scheduled for Thursday, 19 November. >=20 > CBOR Chair > Francesca >=20 > On 28/10/2020, 18:44, "CBOR on behalf of internet-drafts@ietf.org" = wrote: >=20 >=20 > A New Internet-Draft is available from the on-line = Internet-Drafts directories. > This draft is a work item of the Concise Binary Object = Representation Maintenance and Extensions WG of the IETF. >=20 > Title : Concise Binary Object Representation = (CBOR) Tags for Object Identifiers > Authors : Carsten Bormann > Sean Leonard > Filename : draft-ietf-cbor-tags-oid-02.txt > Pages : 14 > Date : 2020-10-28 >=20 > Abstract: > The Concise Binary Object Representation (CBOR, = draft-ietf-cbor- > 7049bis) is a data format whose design goals include the = possibility > of extremely small code size, fairly small message size, and > extensibility without the need for version negotiation. >=20 > The present document defines CBOR tags for object = identifiers (OIDs). > It is intended as the reference document for the IANA = registration of > the CBOR tags so defined. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cbor-tags-oid/ >=20 > There is also an HTML version available at: > = https://www.ietf.org/archive/id/draft-ietf-cbor-tags-oid-02.html >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cbor-tags-oid-02 >=20 >=20 > Please note that it may take a couple of minutes from the time = of submission > until the htmlized version and diff are available at = tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 >=20 > _______________________________________________ > CBOR mailing list > CBOR@ietf.org > https://www.ietf.org/mailman/listinfo/cbor >=20 > _______________________________________________ > CBOR mailing list > CBOR@ietf.org > https://www.ietf.org/mailman/listinfo/cbor >=20 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats From nobody Thu Oct 29 13:02:54 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC8FF3A0A9F for ; Thu, 29 Oct 2020 13:02:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.261 X-Spam-Level: X-Spam-Status: No, score=-0.261 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAstI7ZviMxD for ; Thu, 29 Oct 2020 13:02:44 -0700 (PDT) Received: from p3plsmtpa07-01.prod.phx3.secureserver.net (p3plsmtpa07-01.prod.phx3.secureserver.net [173.201.192.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1B0E3A0A06 for ; Thu, 29 Oct 2020 13:02:43 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YE8AkgjHCt9NIYE8BkjmHZ; Thu, 29 Oct 2020 13:02:43 -0700 X-CMAE-Analysis: v=2.4 cv=Gd/SISbL c=1 sm=1 tr=0 ts=5f9b1fe3 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=7CQSdrXTAAAA:8 a=48vgC7mUAAAA:8 a=K6EGIJCdAAAA:8 a=yMhMjlubAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=4XpDxwsG_RfU1CSojpIA:9 a=1X7SEse2vR9V7PBw:21 a=GcDnrxg9NVd9-G67:21 a=QEXdDO2ut3YA:10 a=xBUbfIdvo0FSlxAXXXAA:9 a=VZS-tT9bwXdszHz7:21 a=-0RGd8Tt2vlzolef:21 a=ZUW6dXMnZq9r3_3c:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 a=w1C3t2QeGrPiZgrLijVG:22 a=L6pVIi0Kn1GYQfi8-iRI:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 29 Oct 2020 13:02:42 -0700 In-Reply-To: Cc: Dave Thaler , "rats@ietf.org" , teep To: Simon Frost References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfEQeJpYx64k9cCTY1qPeln9tf8eQTw3GxTj9TAcWpTbSqRjE+UDLWlDxTGGFa7fFmkVfVeyTinHAiih28mRQaQZtKMcYJMyLx4tl6FPHy1huIRifbAz1 +pG1jFEOvRi9Ez7rvT9n8c/6bDRsCbkh9m6JCvn4KJfDVQPpEv/OviIVFHI2a1qLVNS647crELtqNf6OqVp/2sk5XXiEthU9ASOgOW+3vsimI6+yH+r7Efse dFYPSyrdeH/GuViqbdA2AFRmHiTUgofgROR06g1VYQA= Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 20:02:50 -0000 --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 28, 2020, at 11:14 AM, Simon Frost wrote: >=20 > Note that some of the Arm team will be attending the upcoming = hackathon and had been discussing doing some work there on describing = components with CoSWID via EAT. This builds on some implementation work = already completed as part of an Arm project that will shortly be = upstreamed. > =20 > The PSA EAT profile originally introduced a hardware version based on = an EAN-13. This was used as a reference to a general set of hardware in = a certification scheme. Further work has shown this format is not = suitable and it has will be deprecated in a future releases of the = profile. The PSA profile also contains an =E2=80=98ImplementationID=E2=80=99= claim (byte string of sufficient size to hold a SHA2 hash) which is = intended to be used as a much more specific identifier of a hardware = group. The intent here is that reference values for an ImplementationID = can be known by a verifier to assist appraisal policy. I think we want to have a claim that is clearly and explicitly a HW = version. There can be additional claims to look up reference values or = other stuff Verifiers need. All claims are optional so, implementations = that only use something like ImplementID can leave out HW version. I think we should keep EAN-13 as an option, even though it won=E2=80=99t = work for everyone. In addition to EAN-13 versions, we can just define byte string, or we = can go a lot further by reusing the version scheme from CoSWID. Here=E2=80= =99s some of the types. +-------+-------------------------+--------------------------------+ | Index | Version Scheme Name | Definition | +=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ | 1 | multipartnumeric | Numbers separated by dots, | | | | where the numbers are | | | | interpreted as integers (e.g., | | | | 1.2.3, 1.4.5, 1.2.3.4.5.6.7) | +-------+-------------------------+--------------------------------+ | 2 | multipartnumeric+suffix | Numbers separated by dots, | | | | where the numbers are | | | | interpreted as integers with | | | | an additional textual suffix | | | | (e.g., 1.2.3a) | +-------+-------------------------+--------------------------------+ | 3 | alphanumeric | Strictly a string, sorting is | | | | done alphanumerically | +-------+-------------------------+--------------------------------+ | 4 | decimal | A floating point number (e.g., | | | | 1.25 is less than 1.3) | +-------+-------------------------+--------------------------------+ | 16384 | semver | Follows the [SEMVER = ] = | | | | specification | +-------+-------------------------+--------------------------------+ My understanding is that they are always encoded as CBOR text strings, = so floating-point doesn=E2=80=99t mean #7.25 or such. LL > =20 > Thanks > Simon > =20 > From: Laurence Lundblade >=20 > Sent: 27 October 2020 20:45 > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > CoSWID should cover all the identification of vendors, models, = versions and stuff for SW. If it doesn=E2=80=99t talk to Henk about = fixes to CoSWID. :-) > =20 > For HW, there is OEMID and recently proposed chip version, board = version and device version. It seems like we need a model number claim = for HW. I will work on that. > =20 > Seems like submodules would be used to organize claims for layered = attestation and all of the above claims can occur in any submodule they = need to. > =20 > Does this mostly cover it?=20 > =20 > I worry that the HW claims are bit too rigid in their use of EAN-13 = and IEEE registries. Might need to do something about that. > =20 > LL > =20 >=20 >=20 > On Oct 27, 2020, at 1:26 PM, Dave Thaler > wrote: > =20 > Inline below=E2=80=A6 > =20 > From: Laurence Lundblade >=20 > Sent: Tuesday, October 27, 2020 11:57 AM > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > Personally, I think attestation of TEE=E2=80=99s is pretty important = and should be handled well in EAT. So I=E2=80=99m interested in working = on and adding claims for this to EAT. > =20 > After reading section 7.1 in TEEP architecture, it does seem like = there some work to do here to get to specific standardized interoperable = claims. > =20 > More comments below. >=20 >=20 >=20 > On Oct 26, 2020, at 3:15 PM, Dave Thaler = > wrote: > =20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? > =20 > I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. > =20 > +1 > =20 > We can define a claim to be the device class and make it a byte = string like a UEID, but I think we have to go further to make it useful = as an interoperable standardize claim. There has to be some method for = the classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. > =20 > [DT] I=E2=80=99m not sure we need a classification scheme, at least = for TEEP. A simple device class byte string as you suggest would = suffice in my opinion. > =20 > I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =20 > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D > =20 > Definitely not origination claim.=20 > =20 > +1 > =20 > The intent of it something like Endorser identification and I think it = should be replaced by an Endorser/X.509 cert URL. > =20 > I would say, this is a combination of claims > =20 > It=E2=80=99s just used: > 1) For a Verifier in appraising the evidence (nothing TEEP = specific here, appraisal policy can involve any claim), and > 2) To be used by a TAM to decide which TA=E2=80=99s apply to the = TEE. In that sense it=E2=80=99s just like any other vendor id + device = class for any non TEE, and I believe if there were a byte string for = device class as you suggest that would be sufficient in my opinion. > =20 > Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D concept in = the arch doc, as long as we have a claimset per layer, then I think the = same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D claims that = would apply to any device could be reused for the TEE, and reused for = describing each layer. E.g., a =E2=80=9Cversion=E2=80=9D claim would = apply at the hardware layer and be the hardware version, at the firmware = layer and be a firmware version, at the OS layer and be an OS version, = etc. > =20 > =20 > I=E2=80=99ve just added a PR = for HW version claims. > =20 > The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. > =20 > Agree this sounds promising. > =20 > The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > =20 > A unique identifier is sufficient in my view, no =E2=80=9Cclassification= =E2=80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know. >=20 >=20 > Should the TEEP WG define TEEP-specific claims for such information? > =20 > I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. > =20 > Sounds good to me. Consider this a request to add some way to = express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or = =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers. I glanced at the PR you referenced and it seems to be = a chip-specific version, not a generic version claim that can be used at = multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80=99= s requirements, we still need other claims added. > =20 > Thanks! > Dave > =20 > LL > =20 >=20 >=20 >=20 > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = > =20 > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 28, 2020, at 11:14 AM, Simon Frost <Simon.Frost@arm.com>= wrote:

Note that some of the Arm team will be attending the upcoming = hackathon and had been discussing doing some work there on describing = components with CoSWID via EAT. This builds on some implementation work = already completed as part of an Arm project that will shortly be = upstreamed.
 
The PSA EAT = profile originally introduced a hardware version based on an EAN-13. = This was used as a reference to a general set of hardware in a = certification scheme. Further work has shown this format is not suitable = and it has will be deprecated in a future releases of the profile. The = PSA profile also contains an =E2=80=98ImplementationID=E2=80=99 claim = (byte string of sufficient size to hold a SHA2 hash) which is intended = to be used as a much more specific identifier of a hardware group. The = intent here is that reference values for an ImplementationID can be = known by a verifier to assist appraisal = policy.

I think we want to have a claim that is clearly = and explicitly a HW version. There can be additional claims to look up = reference values or other stuff Verifiers need. All claims are optional = so, implementations that only use something like ImplementID can leave = out HW version.

I think we should = keep EAN-13 as an option, even though it won=E2=80=99t work for = everyone.

In addition to EAN-13 = versions, we can just define byte string, or we can go a lot further by = reusing the version scheme from CoSWID. Here=E2=80=99s some of the = types.

   =
+-------+-------------------------+--------------------------------+
   | Index | Version Scheme Name     | Definition                     |
   +=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+
   | 1     | multipartnumeric        | Numbers separated by dots,     |
   |       |                         | where the numbers are          |
   |       |                         | interpreted as integers (e.g., |
   |       |                         | 1.2.3, 1.4.5, 1.2.3.4.5.6.7)   |
   +-------+-------------------------+--------------------------------+
   | 2     | multipartnumeric+suffix | Numbers separated by dots,     |
   |       |                         | where the numbers are          |
   |       |                         | interpreted as integers with   |
   |       |                         | an additional textual suffix   |
   |       |                         | (e.g., 1.2.3a)                 |
   +-------+-------------------------+--------------------------------+
   | 3     | alphanumeric            | Strictly a string, sorting is  |
   |       |                         | done alphanumerically          |
   +-------+-------------------------+--------------------------------+
   | 4     | decimal                 | A floating point number (e.g., |
   |       |                         | 1.25 is less than 1.3)         |
   +-------+-------------------------+--------------------------------+
   | 16384 | semver                  | Follows the [SEMVER]   =
        |
   |       |                         | specification                  |
   =
+-------+-------------------------+--------------------------------+
=

My understanding is that = they are always encoded as CBOR text strings, so floating-point = doesn=E2=80=99t mean #7.25 or such.

LL



 
Thanks
Simon
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: 27 = October 2020 20:45
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
CoSWID should cover all the = identification of vendors, models, versions and stuff for SW. If it = doesn=E2=80=99t talk to Henk about fixes to CoSWID. :-)
 
For = HW, there is OEMID and recently proposed chip version, board version and = device version. It seems like we need a model number claim for HW. I = will work on that.
 
Seems like submodules would be used to = organize claims for layered attestation and all of the above claims can = occur in any submodule they need to.
 
Does = this mostly cover it? 
 
I = worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that.
 
LL
 


On Oct 27, 2020, at 1:26 PM, Dave = Thaler <dthaler@microsoft.com> wrote:
 
Inline below=E2=80=A6
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: Tuesday, October 27, 2020 = 11:57 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
Personally, I think attestation of TEE=E2=80=99s is = pretty important and should be handled well in EAT. So I=E2=80=99m = interested in working on and adding claims for this to EAT.
 
After reading section 7.1 in TEEP architecture, it = does seem like there some work to do here to get to specific = standardized interoperable claims.
 
More comments below.



On Oct 26, 2020, at 3:15 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>= ; wrote:
 
As discussed in previous IETF meetings, = if there are claims beyond the base set that
other WGs = need, they can be specified by the other WGs with review by RATS.
 
The TEEP = WG needs the following in EATs and I am not sure whether they can = be
covered = by existing claims or whether TEEP-specific claims are needed.  = From
section = 7.1 of draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the Universal = Entity ID Claim (ueid) is claim that meets the above requirement.
But the TEEP arch then goes on to say:
 
=C3=98        In some use cases = it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains the device class? The closest thing = I see is OEM Identification by IEEE (oemid)
but I am not = sure that is sufficient since it's only the OEM not the device class = from that OEM.
This= doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to
represent device = class using the claims in the EAT spec?
 
I don=E2=80=99t think the OEMID, UEID or other should = be (ab)used  to represent device class. That would result in them = being less reliable and useful in a generic sense. We should come up = with a new claim.
 
+1
 
We can define a claim to be  the device class = and make it a byte string like a UEID, but I think we have to go further = to make it useful as an interoperable standardize claim. There has to be = some method for the classification. TrustZone vs hypervisor based? Fast = vs slow? Has a protected mode kernel and TAs? The TEEP document = doesn=E2=80=99t say. This seems problematic without a classification = scheme.
 
[DT] I=E2=80=99m not sure = we need a classification scheme, at least for TEEP.  A simple = device class byte string as you suggest would suffice in my = opinion.
 
I wonder if the intent is more about grouping, in = which case we can define a GEID (Group Entity ID) that looks a lot like = a UEID. That seems useful and sensible to me. It is not about = classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 devices.
 
=C3=98     -  TEE =
Identifying Information: The type of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98  =
      information such as the =
hardware, firmware, and software version
=C3=98        of =
the TEE, as applicable by the TEE type.  TEE manufacturer
=C3=98  =
      information for the TEE is =
required in order to disambiguate the
=C3=98  =
      same TEE type created by =
different manufacturers and address
=C3=98  =
      considerations around =
manufacturer provisioning, keying and
=C3=98  =
      support for the TEE.
 
Similarly for = this requirement, the closest thing I see is Origination Claim = (origination) but I am not sure
that is sufficient since = it's just the manufacturer not the "version identification information = such as the
hardware, firmware, and software version of = the TEE=E2=80=9D
 
Definitely not origination claim. 
 
+1
 
The intent of it something like Endorser = identification and I think it should be replaced by an Endorser/X.509 = cert URL.
 
I would say, this is a combination of claims
 
It=E2=80=99s just used:
1)     For a Verifier in appraising the evidence = (nothing TEEP specific here, appraisal policy can involve any claim), = and
2)     To be used by a TAM to decide which TA=E2=80= =99s apply to the TEE.  In that sense it=E2=80=99s just like any = other vendor id + device class for any non TEE, and I believe if there = were a byte string for device class as you suggest that would be = sufficient in my opinion.
 
Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D= concept in the arch doc, as long as we have a claimset per layer, then = I think the same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D = claims that would apply to any device could be reused for the TEE, and = reused for describing each layer.  E.g., a =E2=80=9Cversion=E2=80=9D = claim would apply at the hardware layer and be the hardware version, at = the firmware layer and be a firmware version, at the OS layer and be an = OS version, etc.
 
 
I=E2=80=99ve just added a PR for HW version = claims.
 
The intent for SW version claims is to use CoSWID. We = should probably create some examples to see if it can represent what = TEEP wants to represent.
 
Agree this sounds = promising.
 
The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. = I=E2=80=99m not sure what is intended. I don=E2=80=99t know of any = common taxonomy for classifying TEEs.
 
A= unique identifier is sufficient in my view, no =E2=80=9Cclassification=E2= =80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know.


Should = the TEEP WG define TEEP-specific claims for such information?
 
I=E2=80=99d like to see most of them go into EAT = unless they are super specific to TEEP (TEEP not TEEs). I think there is = value in broad standardize claims as it promotes interoperability of = RATS.
 
Sounds good to = me.   Consider this a request to add some way to express = =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or =E2=80=9Cclass=E2= =80=9D or whatever you want to call it), and =E2=80=9Cversion=E2=80=9D = as claims that can be applied in claimsets at various = layers.   I glanced at the PR you referenced and it seems to = be a chip-specific version, not a generic version claim that can be used = at multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80= =99s requirements, we still need other claims added.
 
Thanks!
Dave
 
LL
 



 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 
 
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank = you.
= --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93-- From nobody Thu Oct 29 13:25:53 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A73423A084D; Thu, 29 Oct 2020 13:25:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k9kHXfU4bjUk; Thu, 29 Oct 2020 13:25:48 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CC883A0829; Thu, 29 Oct 2020 13:25:47 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CMcQK3y9TzygC; Thu, 29 Oct 2020 21:25:45 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) From: Carsten Bormann In-Reply-To: Date: Thu, 29 Oct 2020 21:25:45 +0100 Cc: Francesca Palombini , "sacm@ietf.org" , "rats@ietf.org" , "draft-ietf-cbor-tags-oid@ietf.org" X-Mao-Original-Outgoing-Id: 625695945.082491-b37391a99c74ed336d37b36f3136858b Content-Transfer-Encoding: quoted-printable Message-Id: <3BBDCDD5-BEAC-4826-8D84-13814CF210C8@tzi.org> References: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> To: Laurence Lundblade X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [Rats] =?utf-8?q?=5BCbor=5D_=F0=9F=94=94_WGLC_on_draft-ietf-cbor?= =?utf-8?q?-tags-oid-02?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 20:25:51 -0000 Hi Laurence, On 2020-10-29, at 20:44, Laurence Lundblade = wrote: >=20 > The question I have is whether there is any intent for these OIDs to = be keys or labels in CBOR maps. The way tag factoring (Section 5 [1]) works for maps was specifically = meant to support this. > In X.509/PKIX extensions are labeled by OIDs. Would there be similar = use in CBOR? Please see the example on page 8 [2] for such usage. > Typically, CBOR map labels are integers and sometimes text strings. = Having to pay attention to tags in map keys might be very inconvenient = for some CBOR decoders, though that could be avoided in a given protocol = by saying the map keys are byte strings that borrow tag 111 content = eliminating the need for the tag. That is of course also possible. Which reminds me that we specify CDDL control operators, but not = prelude-like conventional names for the types created by these tags = (e.g., cf. [3]). Now Issue 6 [4]. Gr=C3=BC=C3=9Fe, Carsten [1]: = https://www.ietf.org/archive/id/draft-ietf-cbor-tags-oid-02.html#name-tag-= factoring-with-oid-arra [2]: https://tools.ietf.org/html/draft-ietf-cbor-tags-oid-02#page-8 [Yessss=E2=80=A6 :-)] [3]: https://www.rfc-editor.org/rfc/rfc8746.html#section-5 [4]: https://github.com/cbor-wg/cbor-oid/issues/6= From nobody Thu Oct 29 13:45:37 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E89EF3A0948; Thu, 29 Oct 2020 13:45:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=R4oq5+Vv; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=R4oq5+Vv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8GpRTUlF46R8; Thu, 29 Oct 2020 13:45:34 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20062.outbound.protection.outlook.com [40.107.2.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DEC93A0930; Thu, 29 Oct 2020 13:45:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=R4oq5+VvPU2VJSFuTNJj8uJqTtvWEUNelzdLCXlMnwYKd4gwvM/pLY2luPQAEKiaMKuG7FZpE3eMZxbObpkNED/m5T6Ui8H8T/gZTOMfsTKSWR9GC3HmZPQaEPX1jDL3PW+t6ckD+PBotEgYBCkJDDsz0rPYaLmnBGs0KriowSo= Received: from AM5PR1001CA0011.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:206:2::24) by VE1PR08MB5629.eurprd08.prod.outlook.com (2603:10a6:800:1a6::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.21; Thu, 29 Oct 2020 20:45:28 +0000 Received: from AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:2:cafe::26) by AM5PR1001CA0011.outlook.office365.com (2603:10a6:206:2::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.27 via Frontend Transport; Thu, 29 Oct 2020 20:45:28 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT032.mail.protection.outlook.com (10.152.16.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Thu, 29 Oct 2020 20:45:28 +0000 Received: ("Tessian outbound c579d876a324:v64"); Thu, 29 Oct 2020 20:45:28 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 80978b74e18b063d X-CR-MTA-TID: 64aa7808 Received: from 50e157519231.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 5B651D42-1C88-411E-970E-7BF3372F0BFB.1; Thu, 29 Oct 2020 20:45:22 +0000 Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 50e157519231.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 29 Oct 2020 20:45:22 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PVjkEWzxy5aomxqsVmswFfrMNBnY750lG/IjXPugbYRBFiy4b+qsfmEon/VWkJDAHJ3PHtkgMYxe99cP7oKeY1gGNfmqX/d4T+NZI2N3Ji3in9PVE4YKLyJsnhvbbfW1Lbn1bZwefBoEBel942lZy24+YLSkICrWSKMYio1RmeUIHGxU6H2F2W9z7tuYWUzA0DLAF+MKDqqqCPj5zsnyhCqKZ/gB5psrBPdj90ETWiykUvWJhrFsWnLB/qU49861Hsy7d0SkWwoLriN2nUO5JlsT8BJnrEAm1Q6yuRuck/nRxtmLgmiNA7JK1ngujk4woDg0JACgmG1B1YsgWsFZuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=BM/scDWM2tc0jACoYDJffjlN7sVLn9C+hVgd5secUnV5EztSttbTd+zvsz71aIMabynkO9+nKmqcy7pkCSUQI/c+Lt3yMo8T3+r1bDEsGEzK+1X4uv2N6b6JP8LS15C594uguQ6TzbPlSDxvaLaXhvbmtlX7YE5Z00++r2oU+gWf+4iP2lLdCOTEjl0ePPLlgy6o4Nr8MjOFmwu3t0zl2L3E9rpPs9T/n3D83wJj1v6yk9nPO3AdM34jcwbAOvuzHgGJbjKL2WvQQLOVRdhh3Ef9G8dY58BCWNPleBCmW6jXcisOdgyWiYbYc+HloC68SuxNvKqhddHi+2ppgRQp0A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=R4oq5+VvPU2VJSFuTNJj8uJqTtvWEUNelzdLCXlMnwYKd4gwvM/pLY2luPQAEKiaMKuG7FZpE3eMZxbObpkNED/m5T6Ui8H8T/gZTOMfsTKSWR9GC3HmZPQaEPX1jDL3PW+t6ckD+PBotEgYBCkJDDsz0rPYaLmnBGs0KriowSo= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3974.eurprd08.prod.outlook.com (2603:10a6:20b:a3::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Thu, 29 Oct 2020 20:45:20 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0%7]) with mapi id 15.20.3499.027; Thu, 29 Oct 2020 20:45:20 +0000 From: Thomas Fossati To: Laurence Lundblade , Simon Frost CC: "rats@ietf.org" , teep , Dave Thaler , Thomas Fossati Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAtBI8AADYVQwAAAL1cOA== Date: Thu, 29 Oct 2020 20:45:20 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> , <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> In-Reply-To: <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 668e3019-4061-45e8-c619-08d87c4b9203 x-ms-traffictypediagnostic: AM6PR08MB3974:|VE1PR08MB5629: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:6108;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: WwQc8JvYv++rjQqZcF145IwtXuGkKj1l3Ok7Gt3Vj5NpA4lT9YveEqaQqrIShlnQUYRfjIacu9IDAgQ9KDNQJMqsXnwu2paMFCKR97rnD9udPYkTBjqXphlcsyIHhm75OmG9ZvJzaOxfGuJVhNIMEEvsRTKqUv7Hycy2KSq/skLu2MYiHrAEwfInWrupJacWwSeiXCj7/dzfbVeJMJzq2pTW50hcfbyxmVFJcfcyGJuYkLB7nHmh4KYnwXfeqYl+22Dg3xaXY2tL9aC3WlF2zaBhiwbW+N6XsbB8bcEGLh6IZHiy6aU9y1ILIbHarp6t X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(39850400004)(366004)(136003)(396003)(110136005)(7696005)(316002)(4326008)(2906002)(54906003)(52536014)(71200400001)(9686003)(186003)(64756008)(6506007)(8676002)(55016002)(66446008)(8936002)(66556008)(91956017)(76116006)(66476007)(66946007)(9326002)(6636002)(83380400001)(33656002)(26005)(86362001)(4744005)(5660300002)(478600001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3974 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: d0668116-570f-4342-6c89-08d87c4b8d2a X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: u+08IUqxYmZPH8goRXyGbT5vqZBac4lrxhocZ/99jkiX8KNQfpDQm9vH4aT93yd1ItMzn7i8KjuxYxuZg9QbiojBlXbJlqyOwBvErMu7N3fj4RiiyDH+JX3v3JYAz4Qqz+buk7oaLhqJSrafGlbpjuR1+VJ6xQQaKC6Dnh0XMaa/aCPySpzXTsokVr3xv5SPjcwOXetEZwoPaVWptzXG3M5cpTgoXwKhKHZnBL0dJjbHFnxtitC9yumVTHbjbc4I/JA74wKucCFLNy6s5HHwOZZ4bOq0YBZ2qb5MiDkv65oOWtb9rVia+EsKrINOo1XTQ3yBR/ZOgvdyShwv6RngTN5wKZQGfX8fdjDKor3suOYKTUr1IraNILQ7GkFJghaz+2HJMFDfPWG9kTRxhTreSQ== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(39850400004)(136003)(376002)(396003)(346002)(46966005)(47076004)(186003)(70586007)(9686003)(70206006)(82310400003)(55016002)(7696005)(81166007)(54906003)(33656002)(36906005)(316002)(110136005)(26005)(9326002)(8936002)(82740400003)(4326008)(478600001)(450100002)(6506007)(83380400001)(6636002)(5660300002)(86362001)(52536014)(336012)(2906002)(8676002)(356005); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Oct 2020 20:45:28.6218 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 668e3019-4061-45e8-c619-08d87c4b9203 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1PR08MB5629 Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 20:45:36 -0000 --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Laurence, > My understanding is that they are always encoded as CBOR text strings, > so floating-point doesn=92t mean #7.25 or such. Correct. In (Co)SWID software-version is just a text string and version-sc= heme is there to do some semantic polishing. But the underlying type is always = #3. Maybe I=92m misunderstanding your proposal here, but I would be circumspect in mixing SWIDs attributes, which are scoped to software artifacts, with HW identifiers. Cheers! IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Hi Laurence,

 

> My understanding is that they are always encode= d as CBOR text strings,

> so floating-point doesn=92t mean #7.25 or such.=

 

Correct.  In (Co)SWID software-version is just = a text string and version-scheme

is there to do some semantic polishing.  But th= e underlying type is always #3.

 

Maybe I=92m misunderstanding your proposal here, but= I would be circumspect

in mixing SWIDs attributes, which are scoped to soft= ware artifacts, with HW

identifiers.

 

Cheers!

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_-- From nobody Thu Oct 29 14:03:02 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 072313A0A6C for ; Thu, 29 Oct 2020 14:02:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rquDu-nf6jj5 for ; Thu, 29 Oct 2020 14:02:53 -0700 (PDT) Received: from p3plsmtpa07-02.prod.phx3.secureserver.net (p3plsmtpa07-02.prod.phx3.secureserver.net [173.201.192.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 582BD3A0062 for ; Thu, 29 Oct 2020 14:02:53 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YF4OkcqrkpwZiYF4OkUuri; Thu, 29 Oct 2020 14:02:52 -0700 X-CMAE-Analysis: v=2.4 cv=aop3tQVV c=1 sm=1 tr=0 ts=5f9b2dfc a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=5KLPUuaC_9wA:10 a=gKmFwSsBAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=BqEg4_3jAAAA:8 a=oGbIuagOAAAA:20 a=_sZlvxqxrPdw6Mc8mOQA:9 a=QEXdDO2ut3YA:10 a=WiFMg2hEW7gA:10 a=vBlvbjMb_ccA:10 a=JRYF3h_zhQEA:10 a=KFiGMKbQCqYA:10 a=ZrmZBiZdXJyb1JsyJGgA:9 a=w13D9S53jcP-wUdM:21 a=_W_S_7VecoQA:10 a=nnPW6aIcBuj1ljLj_o6Q:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 a=0mFWnFbQd5xWBqmg7tTt:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <008CBA60-62C3-4B06-BC48-8BC159CD7A5D@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_B87D7106-8CE7-4880-8FAE-F3AA4F8DC56F" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 29 Oct 2020 14:02:51 -0700 In-Reply-To: <3BBDCDD5-BEAC-4826-8D84-13814CF210C8@tzi.org> Cc: "rats@ietf.org" , "draft-ietf-cbor-tags-oid@ietf.org" , "sacm@ietf.org" , Francesca Palombini To: Carsten Bormann References: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> <3BBDCDD5-BEAC-4826-8D84-13814CF210C8@tzi.org> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfH4abk+Lkigiu7Rm1BfmfgQolbkhYq0JUjpmt2EzrmijVyAK4dYFJAjrmHlMQ1gQwjmkDSi9WPWnDSbGqxMLjSAticsG08elYtYJQyXaMWx4k/HsNEyD mtxzm30R9jkgkPV6QRAT7PDm51AobH3YvZoll5DhXF7wZDWSrDAs/1C0JTvl2HQyhXFa6OpQWOkaao6eMV3TQy0dKrZQ5Y9BiCwcWdUB10Cj4GxoIvjBtqDk AOdjbWzQL5ZxOWSh/fDu9J1+ef8WPu4D8hv4VPvqWtYP1ZjaIklk9w0xTu7sfPMAYWZ+Uuz5y3nGwJJtLRr3+NZUxGeecuySdMqNB0hCVd8CVZviOIZ8yLOM iQiMVlC0 Archived-At: Subject: Re: [Rats] =?utf-8?q?=5BCbor=5D_=F0=9F=94=94_WGLC_on_draft-ietf-cbor?= =?utf-8?q?-tags-oid-02?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 21:03:00 -0000 --Apple-Mail=_B87D7106-8CE7-4880-8FAE-F3AA4F8DC56F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I see. So if you are doing DN=E2=80=99s in CBOR this way, it=E2=80=99s kind = =E2=80=9Cin for a penny, in for a pound=E2=80=9D and you want to handle = the mentioned example using what is described in section 5. CWT seems a little ambiguous as to whether thusly encoded OIDs are = allowed as a label/key. Section 3 says: To keep CWTs as small as possible, the Claim Keys are represented using integers or text strings. This seems more of a statement of design intent rather than a = prohibition against other types of Claim Keys, but one could interpret = it as a prohibition. Thanks LL > On Oct 29, 2020, at 1:25 PM, Carsten Bormann wrote: >=20 > Hi Laurence, >=20 > On 2020-10-29, at 20:44, Laurence Lundblade = wrote: >>=20 >> The question I have is whether there is any intent for these OIDs to = be keys or labels in CBOR maps. >=20 > The way tag factoring (Section 5 [1]) works for maps was specifically = meant to support this. >=20 >> In X.509/PKIX extensions are labeled by OIDs. Would there be similar = use in CBOR? >=20 > Please see the example on page 8 [2] for such usage. >=20 >> Typically, CBOR map labels are integers and sometimes text strings. = Having to pay attention to tags in map keys might be very inconvenient = for some CBOR decoders, though that could be avoided in a given protocol = by saying the map keys are byte strings that borrow tag 111 content = eliminating the need for the tag. >=20 > That is of course also possible. >=20 > Which reminds me that we specify CDDL control operators, but not = prelude-like conventional names for the types created by these tags = (e.g., cf. [3]). Now Issue 6 [4]. >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 > [1]: = https://www.ietf.org/archive/id/draft-ietf-cbor-tags-oid-02.html#name-tag-= factoring-with-oid-arra > [2]: https://tools.ietf.org/html/draft-ietf-cbor-tags-oid-02#page-8 > [Yessss=E2=80=A6 :-)] > [3]: https://www.rfc-editor.org/rfc/rfc8746.html#section-5 > [4]: https://github.com/cbor-wg/cbor-oid/issues/6 > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats --Apple-Mail=_B87D7106-8CE7-4880-8FAE-F3AA4F8DC56F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = see.

So if you are = doing DN=E2=80=99s in CBOR this way, it=E2=80=99s kind =E2=80=9Cin for a = penny, in for a pound=E2=80=9D and you want to handle the mentioned = example using what is described in section 5.

CWT seems a little ambiguous as to = whether thusly encoded OIDs are allowed as a label/key. Section 3 = says:

   To keep CWTs as small =
as possible, the Claim Keys are represented
   using integers or text strings.

This seems more of a statement of = design intent rather than a prohibition against other types of Claim = Keys, but one could interpret it as a prohibition.

Thanks

LL


On Oct 29, 2020, at 1:25 PM, = Carsten Bormann <cabo@tzi.org> wrote:

Hi = Laurence,

On 2020-10-29, at 20:44, Laurence = Lundblade <lgl@island-resort.com> wrote:

The question I have is whether = there is any intent for these OIDs to be keys or labels in CBOR maps.

The way tag factoring (Section 5 = [1]) works for maps was specifically meant to support this.

In = X.509/PKIX extensions are labeled by OIDs. Would there be similar use in = CBOR?

Please see the example = on page 8 [2] for such usage.

Typically, CBOR map labels are integers and = sometimes text strings. Having to pay attention to tags in map keys = might be very inconvenient for some CBOR decoders, though that could be = avoided in a given protocol by saying the map keys are byte strings that = borrow tag 111 content eliminating the need for the tag.

That is of course also = possible.

Which reminds me that we specify = CDDL control operators, but not prelude-like conventional names for the = types created by these tags (e.g., cf. [3]).  Now Issue 6 [4].

Gr=C3=BC=C3=9Fe, Carsten

[1]: https://www.ietf.org/archive/id/draft-ietf-cbor-tags-oid-02.htm= l#name-tag-factoring-with-oid-arra
[2]: https://tools.ietf.org/html/draft-ietf-cbor-tags-oid-02#page-8<= /a>
[Yessss=E2=80=A6 :-)]
[3]: https://www.rfc-editor.org/rfc/rfc8746.html#section-5
[4]: https://github.com/cbor-wg/cbor-oid/issues/6
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_B87D7106-8CE7-4880-8FAE-F3AA4F8DC56F-- From nobody Thu Oct 29 14:07:01 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 949FD3A0114 for ; Thu, 29 Oct 2020 14:06:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bB5QJMCSEeV5 for ; Thu, 29 Oct 2020 14:06:55 -0700 (PDT) Received: from p3plsmtpa09-10.prod.phx3.secureserver.net (p3plsmtpa09-10.prod.phx3.secureserver.net [173.201.193.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E02B53A0147 for ; Thu, 29 Oct 2020 14:06:55 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YF8IktZh2hxTPYF8IkLBZE; Thu, 29 Oct 2020 14:06:54 -0700 X-CMAE-Analysis: v=2.4 cv=PLjKRdmC c=1 sm=1 tr=0 ts=5f9b2eee a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=7CQSdrXTAAAA:8 a=CRrk88pQzB9dKn-9xysA:9 a=QEXdDO2ut3YA:10 a=6qy36IhDiBWzmJzcoZMA:9 a=C7YeEDshcqagmwDt:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 29 Oct 2020 14:06:53 -0700 In-Reply-To: Cc: Simon Frost , "rats@ietf.org" , teep , Dave Thaler To: Thomas Fossati References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfJsxIRhglPYq6QUVgUDUSvnRkoiuELx6gHlslFltCHqyyzdwXoZSb0uPmhsiMmyx6tNwk251U6CfUno/r0kmlVYYzES09jeuJ7TQTezOkpkV8+k7BRhb omUoSe8ILaj5tfJod7i+Btz2xKrRLFsTwJ5tKk+qgu9zC5U/hqSWVX63A1HrIKrSYSSfbbVxqxtWzcyjYJrgX8q8NY9DfbfSkDDa7fyxsRuZAbGigsrdZ3F/ K2D07aiHiSfEXYFz5rwEKvgzs/KYWt09Qvq8ockoYk9NaRHGJrRy94xBxXq+kZaIgJCM5oTzYYOQvzIqoOuvbw== Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 21:06:58 -0000 --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 29, 2020, at 1:45 PM, Thomas Fossati = wrote: >=20 > Hi Laurence, > =20 > > My understanding is that they are always encoded as CBOR text = strings, > > so floating-point doesn=E2=80=99t mean #7.25 or such. > =20 > Correct. In (Co)SWID software-version is just a text string and = version-scheme > is there to do some semantic polishing. But the underlying type is = always #3. > =20 > Maybe I=E2=80=99m misunderstanding your proposal here, but I would be = circumspect > in mixing SWIDs attributes, which are scoped to software artifacts, = with HW > identifiers. Hi Thomas, All the SW Version stuff would fall under a single EAT claims that = contains a full CoSWID. For HW Version, I was thinking of two EAT claims, one for the version = text, another for the version scheme (or we could go off and define a = full CoHWID). LL --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 29, 2020, at 1:45 PM, Thomas Fossati <Thomas.Fossati@arm.com> wrote:

Hi Laurence,
 
> My understanding is = that they are always encoded as CBOR text strings,
> so floating-point = doesn=E2=80=99t mean #7.25 or such.
 
Correct.  In (Co)SWID software-version is = just a text string and version-scheme
is there to do some semantic polishing.  = But the underlying type is always #3.
 
Maybe I=E2=80=99m misunderstanding your proposal = here, but I would be circumspect
in mixing SWIDs attributes, which are scoped to = software artifacts, with HW
identifiers.

Hi Thomas,

All the SW Version stuff would fall under a single = EAT claims that contains a full CoSWID.

For HW Version, I was thinking of two EAT claims, = one for the version text, another for the version scheme (or we could go = off and define a full CoHWID).

LL



= --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32-- From nobody Thu Oct 29 14:21:38 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 923E73A0773; Thu, 29 Oct 2020 14:21:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tAnuIEML; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tAnuIEML Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sF484SinxEir; Thu, 29 Oct 2020 14:21:35 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2044.outbound.protection.outlook.com [40.107.20.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5719F3A0115; Thu, 29 Oct 2020 14:21:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=tAnuIEMLM6wSsJZygTBZyHRePWzUL+v/zwv9lYutgY4lcrnGnXN8oAC4OeZnJw3NGzbzN3fbu4lkeoyjNs9ZPG8wrvdLGlgg2G+ruYfo0jpRSLKkXf39uLYV6ghXLAeKPrtY48g5ud+9XVS+ncZ8DkueFUXbX9FE0x9XyT8ZNkQ= Received: from AM6PR10CA0071.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:209:80::48) by AM6PR08MB3333.eurprd08.prod.outlook.com (2603:10a6:209:45::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Thu, 29 Oct 2020 21:21:32 +0000 Received: from AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:80:cafe::69) by AM6PR10CA0071.outlook.office365.com (2603:10a6:209:80::48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18 via Frontend Transport; Thu, 29 Oct 2020 21:21:32 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT019.mail.protection.outlook.com (10.152.16.104) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Thu, 29 Oct 2020 21:21:32 +0000 Received: ("Tessian outbound c189680f801b:v64"); Thu, 29 Oct 2020 21:21:31 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: d86d41fd507f3b23 X-CR-MTA-TID: 64aa7808 Received: from 70b5d8c94539.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 2F2F9019-3D83-45FF-ACD2-E0D3B4406FE5.1; Thu, 29 Oct 2020 21:21:16 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 70b5d8c94539.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 29 Oct 2020 21:21:16 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FXAuYJQxI+XHkZOJHl2i52jqyc9SbfEIw1FRLglbtios5vkJh6cUccYlRNObNvG+ezuUe4CBR1XPLAzSC/EOHQlg7GXrfjSx5rbusttEEmY5bmOc5QgJAHGq71oNK7229AJu0ZwCxORbyA5LdwR7fWCs4zzQfcJcOeZOz/hpPcNwHe7E89PK1jd/Q4FxvgB8LoJ5XvwX6Mi4sYGS7XO4h/2p5hT6PjTTckukemusqFz0l+IkVheWhMO7oLRuv6xOQCzAt2QxT5eyYELP/RlYV1VzgEkAmlBnWx8NbSDCf52h8rLMWhvUFCOyDEne2hpiYd3TJ9GgeepKo8g9DUbP5w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=LQgmUwfGX2YbpNinDXvneT1LWXjOECc/Kl6wsArCoJG3ajT+2fPFLD4dyG6ZvfFfJzwmX8qSJgnXAEn0U3Q0RIwwoQZZH+Bx2usbdrozOMwAhWsFTszx7PVuGA0LlQyhT+1amBpUPL3l+BJA68sCpfI+qiP+KAfc75LUW6qUGfcBd5tXRWe4lRj75I8ISa4E9PLAMnIqBYC/B78CmEZ4QzJAMRKWI5ytd1Jg1wchC3xr/tL1auOmFcCbnU6I1SD9terQQtUFGLuDlw6qqrHaZTyqq8E2APuRpJMPi54V1dcR2BcjQ7ZXkQ1WdrvEgTSr4MJ6LZbOPOC6ZMn/wouE2w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=tAnuIEMLM6wSsJZygTBZyHRePWzUL+v/zwv9lYutgY4lcrnGnXN8oAC4OeZnJw3NGzbzN3fbu4lkeoyjNs9ZPG8wrvdLGlgg2G+ruYfo0jpRSLKkXf39uLYV6ghXLAeKPrtY48g5ud+9XVS+ncZ8DkueFUXbX9FE0x9XyT8ZNkQ= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB4658.eurprd08.prod.outlook.com (2603:10a6:20b:c4::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.21; Thu, 29 Oct 2020 21:21:14 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0%7]) with mapi id 15.20.3499.027; Thu, 29 Oct 2020 21:21:14 +0000 From: Thomas Fossati To: Laurence Lundblade CC: "rats@ietf.org" , teep , Dave Thaler , Simon Frost , Thomas Fossati Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAtBI8AADYVQwAAAL1cOAABgHyAAABiwm4= Date: Thu, 29 Oct 2020 21:21:14 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> , <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> In-Reply-To: <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [217.140.99.251] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 7d29962f-a9e5-4ad2-eb2a-08d87c509bdb x-ms-traffictypediagnostic: AM6PR08MB4658:|AM6PR08MB3333: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7691;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: kMeYY4Ei3y/TU0xzShwvlYzJtpnvxNuU95FXwf3U4lj1ybqFzGoKZXvunjkspa7MSVTjMKZbOltL2Vh0XK0NDa40VnVgQd1wunAUzxZUcVvb4fohlfVz6BUFOJsEltWzzO3KXIbBBn+5jynpeDd/pr0IavukeVd5nT2C4HS8Z/17zkfgwiI7q0yqUraHJzEWmyhiPqDIDn+2B/R3JbpfNJB9Cumq5rQnUmOZRvcAgb1oaBliVZSNpXP4WfOGqj1FxTyUioy27lhQS3EpkFrUs4dmeEY2+lA81vsMId6/drstjcKSqNr1qJB2u6POSqh5 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(39860400002)(346002)(376002)(366004)(396003)(6916009)(9686003)(2906002)(5660300002)(86362001)(4326008)(54906003)(66946007)(66476007)(76116006)(91956017)(66556008)(64756008)(66446008)(478600001)(52536014)(33656002)(71200400001)(53546011)(7696005)(6506007)(8936002)(316002)(186003)(55016002)(8676002)(83380400001)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4658 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 4d0fa688-23fc-430c-0687-08d87c50910c X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: GIqe+Me7XDTe5nl+H6VBPXdeFUPSX1aATEzCZaU2ifelGRCgUNU4XhfkmGs5j9hYcRgqDAqjx7L5uqWCHMp9LGbjgUfq8ehWYzLq2XlUHXocISwUZsnVsE6dtK3f+xdmphgT+t7+FdtuUEM8KKL/+REuZCBx4mrbLl7cFyugy42aiOH7EADP/DApuTISlXIiEFCDSDJjSmAhjKa422MCxoGyUsSRBPNDkZcJZ4ydqBT0mBILTbCjEX87b4vj2bQf/GuU06Rm9EDvguVQZ6wIV1twPSr6h31h7H/0JJ0J63Uy0dTfJDxdmGXhUQgfN6A0UFVglNt0k4ZdS0Nz9qU0i76mFYiPy47zqH79LPgIkxdaAuxJZl0xZY7YWDTEEpfrg5Osk5gOlmdUmFGyMKC8Hg== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(376002)(396003)(346002)(39860400002)(136003)(46966005)(55016002)(186003)(8676002)(6862004)(5660300002)(478600001)(70206006)(4326008)(6506007)(7696005)(54906003)(26005)(36906005)(33656002)(86362001)(53546011)(70586007)(82310400003)(2906002)(316002)(52536014)(450100002)(8936002)(82740400003)(356005)(9686003)(336012)(81166007)(47076004)(83380400001); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Oct 2020 21:21:32.6095 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 7d29962f-a9e5-4ad2-eb2a-08d87c509bdb X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3333 Archived-At: Subject: Re: [Rats] EAT claims needed by TEEP X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 21:21:38 -0000 --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable On 29/10/2020, 21:07, "RATS" wrote: > On Oct 29, 2020, at 1:45 PM, Thomas Fossati wrot= e: > > Hi Laurence, > > > My understanding is that they are always encoded as CBOR text strings, > > so floating-point doesn=92t mean #7.25 or such. > > Correct. In (Co)SWID software-version is just a text string and version-= scheme > is there to do some semantic polishing. But the underlying type is alway= s #3. > > Maybe I'm misunderstanding your proposal here, but I would be circumspect > in mixing SWIDs attributes, which are scoped to software artifacts, with = HW > identifiers. > > > Hi Thomas, > > All the SW Version stuff would fall under a single EAT claims that > contains a full CoSWID. > > For HW Version, I was thinking of two EAT claims, one for the version > text, another for the version scheme (or we could go off and define a > full CoHWID). OK, looks like I had misunderstood your plan :-) thanks for the clarification! IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

On 29/10/2020, 21:07, "RATS" <rats-bounces@i= etf.org> wrote:

> On Oct 29, 2020, at 1:45 PM, Thomas Fossati <Thom= as.Fossati@arm.com> wrote:

> 

> Hi Laurence,

> 

> > My understanding is that they are always encode= d as CBOR text strings,

> > so floating-point doesn=92t mean #7.25 or such.=

> 

> Correct.  In (Co)SWID software-version is just = a text string and version-scheme

> is there to do some semantic polishing.  But th= e underlying type is always #3.

> 

> Maybe I'm misunderstanding your proposal here, but I= would be circumspect

> in mixing SWIDs attributes, which are scoped to soft= ware artifacts, with HW

> identifiers.

> 

> 

> Hi Thomas,

> 

> All the SW Version stuff would fall under a single E= AT claims that

> contains a full CoSWID.

> 

> For HW Version, I was thinking of two EAT claims, on= e for the version

> text, another for the version scheme (or we could go= off and define a

> full CoHWID).

 

OK, looks like I had misunderstood your plan :-) thanks f= or the

clarification!

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_-- From nobody Fri Oct 30 05:26:28 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74CE63A0E39 for ; Fri, 30 Oct 2020 05:26:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=b7YLtsal; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=b7YLtsal Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hnjsZC5mtO4l for ; Fri, 30 Oct 2020 05:26:23 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80077.outbound.protection.outlook.com [40.107.8.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 665D33A0C8F for ; Fri, 30 Oct 2020 05:26:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n+tnlV0741pCyYkc04oNH1th72YbTie6mC3yJTalLpk=; b=b7YLtsalv9ZL1p3b9kBTeAMFIAWPsNsVrB0B8tQGQGDp/ymZQHPk4++64ufaX7LM0IHVUGq3sNrZn10paZ3o3ksUkStxeM1JvpnabjlrQQLLYaXJzii+uGr3/tDZviBEmXvS1YtjTIedu9kkVszYvG5Ca4fGrXFG55nWzlIp44Q= Received: from AM4PR0302CA0029.eurprd03.prod.outlook.com (2603:10a6:205:2::42) by VI1PR08MB4576.eurprd08.prod.outlook.com (2603:10a6:803:e4::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Fri, 30 Oct 2020 12:26:18 +0000 Received: from AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com (2603:10a6:205:2:cafe::79) by AM4PR0302CA0029.outlook.office365.com (2603:10a6:205:2::42) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.19 via Frontend Transport; Fri, 30 Oct 2020 12:26:18 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT014.mail.protection.outlook.com (10.152.16.130) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Fri, 30 Oct 2020 12:26:18 +0000 Received: ("Tessian outbound 7c188528bfe0:v64"); Fri, 30 Oct 2020 12:26:18 +0000 X-CR-MTA-TID: 64aa7808 Received: from 39105b7cb7d3.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 68354A88-0F78-40BE-9EBD-5673F4C98F96.1; Fri, 30 Oct 2020 12:26:13 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 39105b7cb7d3.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 30 Oct 2020 12:26:12 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HpTFVm7tciMF2U95pJNN4OgRn+9FbWAXf/dZc8qoRJW0WSZ0h7E4LdYagxaUWSir42veP7cnMbDL2FfIH/rmaIBWKBOVJAGTX6G+OLgBqAsEfXAfkI3o6erg3L68uqTDACtfB/rBhmuAF6TcsSP0kIeokYOWBNMc3lWV67FEp6nHUoHo0Hw2ylK7QcmkyaxKzo1bDYW5y8l7NoG6CIqQ2maa+GyVZpvoyK5vLEbzXieQwhi3WFS9Wjx1AeuZwmTkJyf5+7neafMo320IU1cjj6tsBNm4TvOj34GZSNA6mu4EmBhM5+FTyG7QsPDwrr5yVR9gqw9U3K/hxZvCWPJkBQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n+tnlV0741pCyYkc04oNH1th72YbTie6mC3yJTalLpk=; b=bL0JLp+Kr5nE127E6Br/UQCEmT6HIMszIauqgyf0Wbda5FGa1cAHqzBVNAGSmO/iVDylhbw9Y6B2EtP2RDIVhhLBpmO9FfhSdSd4/YMCKZQ32XUMXx3oZiEDDPvk8h4v+39lczcTPqwq8cm/frMxFgOkBBoiSvvhaqMjF45kjuESjWj51by/zlilPQ7695pEGOPSIkRNPJZVku3VXt6Spx+pAsrCxirMz0GUw3q8flapOjCmV+I9y/NZ1RANMHU6WMtiNTGbjJgrCDPVmXPdkPVk7im3Zx5ubl6AWWU9rbNEhcEQDkiBC6WaZSc4hwA2J4RymNnjkmAbXmX2MalISw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n+tnlV0741pCyYkc04oNH1th72YbTie6mC3yJTalLpk=; b=b7YLtsalv9ZL1p3b9kBTeAMFIAWPsNsVrB0B8tQGQGDp/ymZQHPk4++64ufaX7LM0IHVUGq3sNrZn10paZ3o3ksUkStxeM1JvpnabjlrQQLLYaXJzii+uGr3/tDZviBEmXvS1YtjTIedu9kkVszYvG5Ca4fGrXFG55nWzlIp44Q= Received: from AM6PR08MB3429.eurprd08.prod.outlook.com (2603:10a6:20b:49::19) by AS8PR08MB6279.eurprd08.prod.outlook.com (2603:10a6:20b:294::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Fri, 30 Oct 2020 12:26:11 +0000 Received: from AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a]) by AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a%7]) with mapi id 15.20.3499.029; Fri, 30 Oct 2020 12:26:11 +0000 From: Simon Frost To: "rats@ietf.org" CC: Thomas Fossati Thread-Topic: FAO Architecture sub-group, new issue added Thread-Index: AdauqbzsVNM7mBbtScSKl37P9m77UQ== Date: Fri, 30 Oct 2020 12:26:11 +0000 Message-ID: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: EABE488BBA0573468C785F943476E5CB.0 x-checkrecipientchecked: true Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; x-originating-ip: [212.69.61.73] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: e9ba1699-4147-46c7-423c-08d87ccf00c4 x-ms-traffictypediagnostic: AS8PR08MB6279:|VI1PR08MB4576: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:9508;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 2K2s+pZj6bYPfeYr6ycEA44aJXspdMEGjhhUCQk5ErN47cAz1DbC1bzI11lRy/22PkHiICeis5mbBYmS0CxD0P/zjYM1Fl02c0TsSSoVTTtKD95qFc3IqVkmbL/aN3hTWCXh8cyGNQaCg4BE+RNhwsb2X9ShHhPvqQrlPYioCIATiASh7t2uLMqQ/TssX4Z2c3twre0jCGSC91aMkkb6T2hQhR3Oc/eX0/R8pYpiWb02vsNHa9MnUtyblY9QZvmujD6nVmhPe7Xic0emWnrlUvj2tFvD9qkpLuWptd+JA7Usz5X4dP9EKpylizn3yQbDNDMOBqIGYyB1SXru8zDrbgOxYa8cE2V8/+QhTRJSuA0r3P329Bh/F3kPvuZltcrWVRn7eQsm6rsYJ3pKZQCQzA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3429.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(366004)(346002)(396003)(376002)(39850400004)(4326008)(316002)(55016002)(186003)(86362001)(166002)(966005)(26005)(33656002)(83380400001)(52536014)(8936002)(5660300002)(6506007)(478600001)(7696005)(66446008)(66556008)(64756008)(71200400001)(9686003)(6916009)(2906002)(76116006)(8676002)(66476007)(66946007); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM6PR08MB3429A51D4D84A2AE834819BEEF150AM6PR08MB3429eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB6279 Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 3816b788-6d8d-4ccb-4bb0-08d87ccefc7e X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: sAL8Jx+sSvXPH5ArUIFpoTJiQ2WwOJP3m0nQdXnAgltgvTyfkHSCO7mn5j7TMpBOzFPMsZSmkpCqkgN57E+eODFM9EmbYj0hB6vc8i2hZaH8p0xIuaKy2JAdwkJo10Dpc2UApKNnF5o+NBNMV1EMF9WKT/5SOcJfG2ieFaO9zJzK6WWOXRCv3VNFytzVYVhIkrESvkt3cId84izuMcKub4tN+CRP62uSEO6N3WWD8oVL9Y5R9si5YCsVmnNoRjMxfDp9nrVdK29k0tTirehPJ9yDRkIYepRZoUcfgbQuwmBWxD0oe5+hkoro+0zzkssoSBy0GafmEj0XZMuiEqC/uScPKXKYe4wSIIAr4sjDKUoiHCcptTMf+bhThkd5JnZdmyU4LMW83JGfR6sO1KFYHJAD+dtoq3A2RBN00KPwZLqaaaOjj1r1iKWrh3QYlicJNVBD+c4xwgKh6dcse4bDcR94oJ3qDYQOyeAVfrkFMx0= X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(346002)(396003)(136003)(39860400002)(376002)(46966005)(82740400003)(7696005)(6916009)(336012)(83380400001)(478600001)(70586007)(82310400003)(8936002)(47076004)(166002)(8676002)(186003)(33656002)(316002)(966005)(4326008)(81166007)(356005)(86362001)(2906002)(6506007)(5660300002)(55016002)(36906005)(70206006)(9686003)(26005)(52536014); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Oct 2020 12:26:18.5122 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e9ba1699-4147-46c7-423c-08d87ccf00c4 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT014.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB4576 Archived-At: Subject: [Rats] FAO Architecture sub-group, new issue added X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Oct 2020 12:26:27 -0000 --_000_AM6PR08MB3429A51D4D84A2AE834819BEEF150AM6PR08MB3429eurp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable FAO the architecture sub-group I've opened a new Issue on the doc to query the readability flow of the doc= ument: https://github.com/ietf-rats-wg/architecture/issues/163 As part of a review of the document by the Arm team, the document was shown= to someone less familiar with the area. Their feedback was that they found= the flow of the document hard to follow, with the comments that the termin= ology section was too remote from the core architecture discussion. Further= , within the Terminology section itself the alphabetic layout was not helpf= ul as they had to go back and forth as they tried to understand the terms. = The suggestion was to use a more hierarchical layout for the terminology. I've also created a PR (https://github.com/ietf-rats-wg/architecture/pull/1= 64) with a proposed change to the flow to address this. The changes are bas= ed on some experimental reworks of the doc that tested well in review local= ly. The core definitions / descriptions within Use Case / Terminology have= not been changed from the current -07 state. Summary of changes: + Moved the 'scene setting' Use Cases section to follow the Introduction (= the text here is general, without really needing use of the specific termin= ology) + Remove specific terminology (Attester / RP) from the Use Cases section by= generalising the language used, while keeping the clarification of those p= arties. This allows the Terminology section to move... + Terminology section now follows Use Case section, which puts it next to t= he Architecture section, and in particular Fig1, where understanding of the= terminology is most needed. + Change alphabetic layout of Terminology section to be more hierarchical o= n use/importance of terms (split into Roles & Artifacts and ordered so that= the more important term lead) + Added relationship descriptions between terminology entries. Thanks Simon Simon Frost Senior Principal Systems Solution Architect, ATG, Arm Mob: +44 7855 265691 IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM6PR08MB3429A51D4D84A2AE834819BEEF150AM6PR08MB3429eurp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

FAO the architecture sub-group<= o:p>

 

I’ve opened a new Issue o= n the doc to query the readability flow of the document:<= /p>

https://github.com/ietf-rats-wg/architecture/issues/163=

As part of a review of the document by the Arm team,= the document was shown to someone less familiar with the area. Their feedb= ack was that they found the flow of the document hard to follow, with the c= omments that the terminology section was too remote from the core architecture discussion. Further, within the = Terminology section itself the alphabetic layout was not helpful as they ha= d to go back and forth as they tried to understand the terms. The suggestio= n was to use a more hierarchical layout for the terminology.

 

I’ve also created a PR (<= /span>htt= ps://github.com/ietf-rats-wg/architecture/pull/164= ) with a proposed change to the flow to address this. The changes are based on some experimental reworks of the doc that t= ested well in review locally. The core definitions / descriptions within Us= e Case / Terminology  have not been changed from the current -07 state= .

Summary of changes:

+ Moved the 'sce= ne setting' Use Cases section to follow the Introduction  (the text here is general, without really needing use of the speci= fic terminology)
+ Remove specific terminology (Attester / RP) f= rom the Use Cases section by generalising the language used, while keeping = the clarification of those parties. This allows the Te= rminology section to move…
+ Terminology section now follows Use Case sect= ion, which puts it next to the Architecture section, and in particular Fig1= , where understanding of the terminology is most needed.
+ Change alphabetic layout of Terminology secti= on to be more hierarchical on use/importance of terms = (split into Roles & Artifacts and ordered so that the more important te= rm lead)
+ Added relationshi= p descriptions between terminology entries.

Thanks

Simon

 

Simon Frost

Senior Principal Systems Solution= Architect, ATG, Arm

Mob: +44 7855 265691

 

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM6PR08MB3429A51D4D84A2AE834819BEEF150AM6PR08MB3429eurp_-- From nobody Fri Oct 30 15:20:25 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B43183A1288; Fri, 30 Oct 2020 15:20:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92vefWkKZQm5; Fri, 30 Oct 2020 15:20:18 -0700 (PDT) Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10on2135.outbound.protection.outlook.com [40.107.93.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B0D73A1285; Fri, 30 Oct 2020 15:20:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nCjB9P2Bhux9qX0PJVZi6DZIvVzPnOZP1BiOmSlRRV29dj2ql8ERDo3CSm2WwhEpt932Z/sRcwfTXmmcXMztoUvtusJJKMAvLma4+PT96CdeI4Yf4OLMi6xng9vhX6eV6q7IbzxeTuTykaqcrMdl8eiNmgrgStJu1u6fqUjdHyZvch2M0Voml9MYSona1B11bQGRJLRxAtALsCwO01daQSIhRwVlW0aRqBMMtafzBqsj7K3cUWhEwbrYXBpYQRCCw8UTBl+TDFAcyR4Ds5tgHACfF7n7NyTT1B0AGANlOoRuF6uVF1gKQbGfl9NJetRruhh0ubOXlKzHmP2uAa9nCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t4jq6BXBscW7RQucPTFQ1Xok31jdbTsEfJ5kuVFFs6w=; b=MLA6tZy45FvDfAv7XTR1+4nUvZv21lC+o9lGRFf00jq5EGvF2PveRm6XfKrxlUygCTCE3bD8IUI6nsXSA/hG1x8aYjYtYKhF8nQGbSV9PjAOF5uw6C/Np4LIbwtBKJEPfTm6iUTorxCpEmxLdb/I8LAc20Q5xYtTMhwJf4sQx7nhcVSOxYiP50hAbhZ6ED/MBzd8DAZV6L04CEn4rynK/hOuXA9wn9b6p6syFQzVBinOXAFzN532IL5SX+p3yaIQ+wHPEW+lcscuYRApk5XAK+5d3P8CxEIR7prnICVQT5SsCleRcjWJnIGNpKDOlBmErHYVoKOQeZHuokc0J/qZ1g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t4jq6BXBscW7RQucPTFQ1Xok31jdbTsEfJ5kuVFFs6w=; b=XVv+NhUx+iPWr3P7UdiLu63NG/+/miqVWtV04YZTj2U1BZs7ZCm9SiogfKvxLfsR4ZO5PJzQbH+SxGAHpiSWsYced28XOebFJo4+ICB+WeYJw+7kELNhfSDmp1kcMbU1AWLaKFut0RxMDm3C/V41pXcTimDJJvQQRL4Y46WtMNk= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1105.namprd21.prod.outlook.com (2603:10b6:207:37::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Fri, 30 Oct 2020 22:20:16 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.027; Fri, 30 Oct 2020 22:20:16 +0000 From: Dave Thaler To: teep CC: "rats@ietf.org" Thread-Topic: FYI: Confidential Computing webinar Nov 10 Thread-Index: AdavCsPRUAoVuBZfQu65AVlg+B2XXQ== Date: Fri, 30 Oct 2020 22:20:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-30T22:20:13Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=bcc40692-6fff-47ed-99ee-7f4268c443cc; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:3d03:c139:8d7:e672] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 1bf0e08c-77ae-4de8-e42d-08d87d21fa6f x-ms-traffictypediagnostic: BL0PR2101MB1105: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: JjlAU/ftg8IBftRxz/X2r7Umjx1JDlkQeBMYJnocMNDMKMi39S2KpHf6/oMHt3uDKjBlOjX6QH5GIkboAftFTTg5q6aRVEvyFMK2uHWRqzKnViBNYetpGXIMTf5rLjTjOGB0+gVuhDYLbuYB1k3ntskZuYJD7QB/aJhZ1I+MBnc0vPHfDeAR+z1I8jCmSS1VOOCmLdES/d9aOh0W95MAohXYf5pbSFLJpAlK0Plto/RMFC/2gmpQPjAxXoDYf9EgPAalltPLAg1WumTlrhh/chpxcRj+tZvuYJB5O5gouMYk9enpf/+6fbtp1oyT37BVM8LCpQzf+RvpQ/CTxdfyUz+bTNnF5sOH6jlMgMi31a0O8auVIUGUFhrBRAHoQyAmZJGY7iDnKVBr5l3VYR9PrQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(366004)(136003)(346002)(396003)(376002)(186003)(8936002)(82950400001)(6506007)(82960400001)(6916009)(7696005)(450100002)(166002)(8676002)(10290500003)(86362001)(4326008)(83380400001)(52536014)(76116006)(9686003)(2906002)(66946007)(316002)(966005)(478600001)(64756008)(33656002)(55016002)(66476007)(66446008)(5660300002)(71200400001)(66556008)(8990500004); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1bf0e08c-77ae-4de8-e42d-08d87d21fa6f X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2020 22:20:16.0115 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: v0XjiNUPtoEB2JryjNZN6KciVzw/ymy5sS+qwcqGtNQxjeqlVlgeqd07LGoXh9qXNecGCpBUofoiMvHMH+DSMr7eW6BQ7BM5o3kLVQCyUjU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1105 Archived-At: Subject: [Rats] FYI: Confidential Computing webinar Nov 10 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Oct 2020 22:20:20 -0000 --_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable In past TEEP WG meetings I have given a 1 slide summary of the Confidential Computing Consortium, which is an org under the Linux Foundati= on, focused on open source projects for on trusted execution environments. And the CCC provided feedback on the TEEP arch doc about the definition of a TEE which was incorporated and now CCC and TEEP use the same definition. Similarly Mike Bursell was going to present a TEEP use case from Enarx (an = open source project under the CCC) at IETF last year but couldn't make it so I e= nded up presenting his slides for him. Anyway, the CCC is doing an open webinar on confidential computing next wee= k and I'm one of the co-presenters. Because of the synergy between TEEP and= the CCC (and the TEE use case in RATS), I'm sharing the information here since we w= ant to continue to encourage collaboration between CCC (for open source) and TEEP/RATS folks (for standards). Tuesday November 10, 2020 at 8:30AM PT https://confidentialcomputing.io/webinar/ CCC meetings are also open to the public and a couple of you have attended = them, this webinar is more an intro but potentially of interest to anyone working= on TEEs. Dave --_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

In past TEEP WG meetings I have given a 1 slide summ= ary of the

Confidential Computing Consortium, which is an org u= nder the Linux Foundation,

focused on open source projects for on trusted execu= tion environments.

And the CCC provided feedback on the TEEP arch doc a= bout the definition of

a TEE which was incorporated and now CCC and TEEP us= e the same definition.

Similarly Mike Bursell was going to present a TEEP u= se case from Enarx (an open

source project under the CCC) at IETF last year but = couldn’t make it so I ended up

presenting his slides for him.

 

Anyway, the CCC is doing an open webinar on confiden= tial computing next week

and I’m one of the co-presenters.   = Because of the synergy between TEEP and the CCC
(and the TEE use case in RATS), I’m sharing the information here sinc= e we want to

continue to encourage collaboration between CCC (for= open source)

and TEEP/RATS folks (for standards).

 

Tuesday November 10, 2020 at 8:30AM PT

https://confidentialcomputing.io/webinar/

 

CCC meetings are also open to the public and a coupl= e of you have attended them,

this webinar is more an intro but potentially of int= erest to anyone working on TEEs.

 

Dave

--_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_-- From nobody Sat Oct 31 13:37:03 2020 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E5C23A0EA7; Sat, 31 Oct 2020 13:36:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3BWZcE36uVWf; Sat, 31 Oct 2020 13:36:55 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E430D3A0EA8; Sat, 31 Oct 2020 13:36:53 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CNrZC4zmFzyX3; Sat, 31 Oct 2020 21:36:51 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) From: Carsten Bormann In-Reply-To: <008CBA60-62C3-4B06-BC48-8BC159CD7A5D@island-resort.com> Date: Sat, 31 Oct 2020 21:36:51 +0100 Cc: "rats@ietf.org" , "draft-ietf-cbor-tags-oid@ietf.org" , "sacm@ietf.org" , Francesca Palombini X-Mao-Original-Outgoing-Id: 625869411.257035-2f37acb6e1109856a215b83fad5b1ed6 Content-Transfer-Encoding: quoted-printable Message-Id: <12FDAD94-4378-42C4-8054-B5A135043636@tzi.org> References: <12027D40-562D-4859-8A3B-25551C5CBAC8@ericsson.com> <3BBDCDD5-BEAC-4826-8D84-13814CF210C8@tzi.org> <008CBA60-62C3-4B06-BC48-8BC159CD7A5D@island-resort.com> To: Laurence Lundblade X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [Rats] =?utf-8?q?=5BCbor=5D_=F0=9F=94=94_WGLC_on_draft-ietf-cbor?= =?utf-8?q?-tags-oid-02?= X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote ATtestation procedureS List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 31 Oct 2020 20:36:58 -0000 >=20 > CWT seems a little ambiguous as to whether thusly encoded OIDs are = allowed as a label/key. Section 3 says: >=20 > To keep CWTs as small as possible, the Claim Keys are represented > using integers or text strings. >=20 >=20 > This seems more of a statement of design intent rather than a = prohibition against other types of Claim Keys, but one could interpret = it as a prohibition. It is neither: It is a statement of fact. The dual of this statement is: If the label (map key) is not an integer or a text string, this label is = not a Claim Key. (And, since Claims use Claim Keys, the key/value pair is not a Claim, = and ... the whole thing is not a CWT.) [We had an interesting discussion over at JSONpath about normative = statements. The upshot was that this is a normal way to phrase a normative = statement, even without RFC 2119 language. RFC 2119 language would not = be wrong here, but it is not needed. Just like an ABNF rule =E2=80=9Cid = =3D 1*ALPHA=E2=80=9D would not need an RFC 2119 statement with it that = dollar signs MUST NOT occur in ids, unless that is for some reason a = misunderstanding that suggests itself.] Gr=C3=BC=C3=9Fe, Carsten