From nobody Mon Oct 5 19:27:33 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 113531B35D3; Mon, 5 Oct 2015 19:27:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wo7myPOMO_xG; Mon, 5 Oct 2015 19:27:30 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DE8B1B35D6; Mon, 5 Oct 2015 19:27:27 -0700 (PDT) Received: from [10.0.1.9] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t962RQQJ037221 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Mon, 5 Oct 2015 21:27:27 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.9] From: "Ben Campbell" To: draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org, straw@ietf.org Date: Mon, 05 Oct 2015 21:27:26 -0500 Message-ID: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.2r5141) Archived-At: Subject: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2015 02:27:32 -0000 Hi, This is my AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07. I think at least some of this needs to be resolved prior to IETF last call. Thanks! Ben. ------------------- Comments and Questions ====================== - There's a marked lack of mention of B2BUAs that inspect or modify media content. I realize that this draft does not seek to enable that particular elephant-in-the-room. Is it worth mentioning them as out of scope? Does this draft intend to make them illegal for SRTP protected sessions with it's proscription about terminating dtls? - 1.2: "The following sections describe the behavior B2BUAs MUST follow in order to avoid any impact to end-to-end DTLS-SRTP sessions." Does that need the MUST, since the described behavior also uses normative language? Also, is this really a matter of things the b2bUA MUST do, or a set of other things it MUST NOT do? Also, this paragraph could use some elaboration. There are a number of use cases that violate this(e.g. 3GPP's e2ea security model). This doesn't seem to forbid those, since they don't purport to support e2e crypto--is that the intent? Can "impact" be more precise? -3.1.1, 3rd paragraph from end: "the B2BUA SHOULD be prepared to receive DTLS, STUN and media on the ports it advertised to Bob in the INVITE request. " What are the consequences if it's not prepared to do so? Also, this is a timing issue, right? So shouldn't is say something like "SHOULD be prepared immediately prepared" or "should be prepared to receive...before the it receives the SIP response"? -3.1.1, 2nd to last paragraph: Is the a general proscription, or is it limited to cases where 4474bis is in use? Also, I think the 4474bis reference needs to be normative, given that one needs to understand that draft to implement the normative bits about modifying anything protected by the signature. OTOH, does this need to reference 4474bis, or would 4474 suffice? -3.1.2: "The mechanism described in Security Considerations section MUST be used by endpoint to detect malicious B2BUA’s that MAY attempt to terminate the DTLS-SRTP session." I'm not sure it makes sense for this draft to put normative requirements on endpoints. Do you mean to say they "can" use the mechanism? Also, that MAY is a statement of fact, not a normative requirement. I'm confused by language about "inspect[ing] the RTP headers and RTCP packets" here and in the subsections. What do you mean about inspecting rtcp packets? Is this an attempt to dance around content inspection? Wont a good portion of the "rtcp packets" be encrypted? - 3.1.2.2: Is the point of this to say b2buas that modify things are out of scope? Not allowed? The paragraph takes the form of "To do A, you must do B, and B is not allowed". It might be easier to say that "You can't do A, because of the issue with B." Can you be more precise about what "break end-to-end security" means? e.g. the receiver would consider the packets invalid? Also, this paragraph might could use another mention of 4474/4474bis. - 4: "Since DTLS operates on the 5-tuple" What does that mean? It sounds something like "encrypts" or "authenticates" the 5, tuple--but I don't think that's what you mean. "unique transport addresses" Do you mean the b2bua must replace each answerers's address with a distinct address? Also do you mean distinct address, or distinct combination of address and port? -5: "This document does not introduce any specific security considerations beyond those detailed in [RFC5763]." It seems like the previous sentence qualified as a security consideration beyond those in 5763. Editorial and nits ================== - Section 1.1: "DTLS-SRTP is defined for point- to-point media sessions" I suggest "currently defined". That's starting to change with PERC. - 3.3, 3rd paragraph from end: s/"B2BUA cannot decrypt..."/"The B2BUA cannot decrypt..." - 3.3, 2nd to last paragraph: "the B2BUA MUST ensure that it does not modify..." I suggest "the B2BUA MUST NOT modify..." - 5:"A malicious B2BUA MAY try to break into the DTLS connection" That shouldn't be a 2119 MAY; it's a statement of fact. From nobody Thu Oct 8 01:41:22 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 949111A8AAA; Thu, 8 Oct 2015 01:41:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q_aTOBg2A4BH; Thu, 8 Oct 2015 01:41:19 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06BD61A8AA9; Thu, 8 Oct 2015 01:41:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8337; q=dns/txt; s=iport; t=1444293679; x=1445503279; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=lQJeZcTJ3KIAwEWxHYNOZgH2NTkzbwq7XfhfbbiQqks=; b=bGmNJBGANbd/90ZPHe6HvEZEQGPggQKuaqPC/DgBlDPNOtyjPs4pUqoJ x60sL1ySSZlHfHPcHJjfQCQ9osfGubPq93hz9fvQE9/Wmqb5fRLRMblr5 oPnh6LPMf3R+3jFpGQvkUgERiHq7aKqsyxmDp3BJIs4lWjMn0eE+n4lhK M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0DrAgDAKxZW/5NdJa1VCYMnVG4GvT8BDYFaFwqCcoIKfwKBQjgUAQEBAQEBAYEKhCYBAQEDAQEBAWsQBwQCAQgRAwECLycLHQgCBAESiCYIDcJBAQEBAQEBAQEBAQEBAQEBAQEBFgSGdIR9hDEDDlIGhCgFhziGC4UMgzkBiAaFEIFXhDmReYNuAR8BAUKEAnGGIwIeBxyBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,654,1437436800"; d="scan'208";a="35621657" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-6.cisco.com with ESMTP; 08 Oct 2015 08:41:18 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id t988fHvA031319 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 8 Oct 2015 08:41:18 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 8 Oct 2015 03:41:16 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Thu, 8 Oct 2015 03:41:16 -0500 From: "Ram Mohan R (rmohanr)" To: Ben Campbell , "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AQHRAaUYt8GvMhxwCEGEkRR1yZ1A5w== Date: Thu, 8 Oct 2015 08:41:16 +0000 Message-ID: References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> In-Reply-To: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.5.150821 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.127.22.20] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <4A093E8EA7093D48B0183F1BB7F5E081@emea.cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 08:41:21 -0000 Hi Ben, Thanks for your comments. Please see inline -----Original Message----- From: straw on behalf of Ben Campbell Date: Tuesday, 6 October 2015 7:57 am To: "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 >Hi, > >This is my AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07. I think >at least some of this needs to be resolved prior to IETF last call. > >Thanks! > >Ben. >------------------- > > >Comments and Questions >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > >- There's a marked lack of mention of B2BUAs that inspect or modify >media content. I realize that this draft does not seek to enable that >particular elephant-in-the-room. Is it worth mentioning them as out of >scope?=20 In section 1.2 (Goals) we can add this text. Is this ok ? EXISTING: The following sections describe the behavior B2BUAs MUST follow in order to avoid any impact to end-to-end DTLS-SRTP sessions. NEW: The following sections describe the behavior B2BUAs can follow to avoid breaking end-to-end DTLS-SRTP sessions. B2BUAs terminating DTLS-SRTP session are outside the scope of this document. >Does this draft intend to make them illegal for SRTP protected >sessions with it's proscription about terminating dtls? The behaviour for cases where B2BUA terminates DTLS-SRTP is not in the scope of this draft. > >- 1.2: "The following sections describe the behavior B2BUAs MUST follow >in > order to avoid any impact to end-to-end DTLS-SRTP sessions." >Does that need the MUST, since the described behavior also uses >normative language? I have re-worded this sentence as above. >Also, is this really a matter of things the b2bUA >MUST do, or a set of other things it MUST NOT do? The draft tries to describe the behaviour that a B2BUA should follow and this includes what it should do and what it should not do. > >Also, this paragraph could use some elaboration. There are a number of >use cases that violate this(e.g. 3GPP's e2ea security model). This >doesn't seem to forbid those, since they don't purport to support e2e >crypto--is that the intent? Can "impact" be more precise? The sentence is re-worded now. Please see NEW text above. The intent of this document is that B2BUA does not decrypt media. The motivation for this comes out of the earlier discussions we had with Stephen Farrell and in the WG where it was decided to reduce the scope of the draft to not include B2BUAs that terminate DTLS-SRTP sessions. > >-3.1.1, 3rd paragraph from end: "the B2BUA SHOULD be prepared > to receive DTLS, STUN and media on the ports it advertised to Bob in > the INVITE request. " > >What are the consequences if it's not prepared to do so? The consequences can be - the messages may get dropped which in turn may delay STUN/DTLS checks and would requires the endpoints to re-transmit the messages.=20 > Also, this is a=20 >timing issue, right? Yes. Its a timing issue. > So shouldn't is say something like "SHOULD be >prepared immediately prepared" or "should be prepared to >receive...before the it receives the SIP response"? I will re-word to: EXISTING: The B2BUA SHOULD be prepared to receive DTLS, STUN and media on the ports it advertised to Bob in the INVITE request. NEW: The B2BUA SHOULD be prepared to receive DTLS, STUN and media on the ports it advertised to Bob in the SIP offer before it receives a SIP answer from Bob. > >-3.1.1, 2nd to last paragraph: >Is the a general proscription, or is it limited to cases where 4474bis >is in use? It is for cases where 4474bis is in use. > >Also, I think the 4474bis reference needs to be normative, given that >one needs to understand that draft to implement the normative bits about >modifying anything protected by the signature. OTOH, does this need to >reference 4474bis, or would 4474 suffice? rfc4474bis is appropriate since it defines mechanisms to use SDP parameters (like a=3Dfingerprint) in the Identity header digest. We will use rfc4474bis and make the reference normative. > >-3.1.2: "The mechanism described in Security Considerations section MUST >be > used by endpoint to detect malicious B2BUA=B9s that MAY attempt to > terminate the DTLS-SRTP session." > >I'm not sure it makes sense for this draft to put normative requirements >on endpoints. Do you mean to say they "can" use >the mechanism?=20 This has to be fixed. The idea is to have either endpoint or the SIP proxy server in the endpoints network to generate Identity header on behalf of the endpoint and perform identity validation procedure. >Also, that MAY is a statement of fact, not a normative >requirement. Agree. Will re-word this para to NEW: The identity validation mechanism described in Security Considerations section MUST be used by the endpoint or the proxy server in the endpoints network to detect malicious B2BUAs that attempt to terminate the DTLS-SRTP session > >I'm confused by language about "inspect[ing] the RTP headers and RTCP >packets" here and in the subsections. What do you mean about inspecting >rtcp packets? Is this an attempt to dance around content inspection? >Wont a good portion of the "rtcp packets" be encrypted? Yes. A B2BUA can inspect the unencrypted portions of the RTCP packet. > >- 3.1.2.2: >Is the point of this to say b2buas that modify things are out of scope? Yes. Not in scope. >=20 >Not allowed? >The paragraph takes the form of "To do A, you must do B, and B is not >allowed". It might be easier to say that "You can't do A, because of the >issue with B." Ok. Will re-word this sentence to some thing like this: NEW: A B2BUA cannot modify RTP headers or RTCP packets, as to do so it needs to act as a DTLS endpoint, terminate the DTLS-SRTP session and decrypt/re-encrypt RTP packet. > >Can you be more precise about what "break end-to-end security" means? >e.g. the receiver would consider the packets invalid? Also, this >paragraph might could use another mention of 4474/4474bis. How about this: EXISTING: This would break end-to-end security and hence a B2BUA MUST NOT terminate DTLS-SRTP session. NEW: This would cause the identity verification procedure discussed in 4474bis to fail and hence a B2BUA MUST NOT terminate the DTLS-SRTP session. > >- 4: "Since DTLS operates on > the 5-tuple" > >What does that mean? It sounds something like "encrypts" or >"authenticates" the 5, tuple--but I don't think that's what you mean. How about this ? "Since each DTLS connection is setup on a unique 5-tuple.." > >"unique transport addresses" >Do you mean the b2bua must replace each answerers's address with a >distinct address? Also do you mean distinct address, or distinct >combination of address and port? Transport address means IP address and port > >-5: "This document does not > introduce any specific security considerations beyond those detailed > in [RFC5763]." > >It seems like the previous sentence qualified as a security >consideration beyond those in 5763. Will re-word to: "Security considerations discussed in [RFC5763] are also applicable to this document." > > >Editorial and nits >=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > >- Section 1.1: "DTLS-SRTP is defined for point- > to-point media sessions" >I suggest "currently defined". That's starting to change with PERC. > >- 3.3, 3rd paragraph from end: >s/"B2BUA cannot decrypt..."/"The B2BUA cannot decrypt..." > >- 3.3, 2nd to last paragraph: "the B2BUA MUST > ensure that it does not modify..." >I suggest "the B2BUA MUST NOT modify..." > >- 5:"A malicious B2BUA MAY try to > break into the DTLS connection" >That shouldn't be a 2119 MAY; it's a statement of fact. Will fix all the NITS above. Regards, Ram > > > > > > > > > > > >_______________________________________________ >straw mailing list >straw@ietf.org >https://www.ietf.org/mailman/listinfo/straw From nobody Thu Oct 8 06:19:30 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D76C41B33A4; Thu, 8 Oct 2015 06:19:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id urKU4cNgURP9; Thu, 8 Oct 2015 06:19:23 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE0EA1B33A0; Thu, 8 Oct 2015 06:19:23 -0700 (PDT) Received: from [10.10.1.3] ([162.216.46.87]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t98DJJQo001388 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Thu, 8 Oct 2015 08:19:20 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host [162.216.46.87] claimed to be [10.10.1.3] From: "Ben Campbell" To: "Ram Mohan R" Date: Thu, 08 Oct 2015 09:19:18 -0400 Message-ID: In-Reply-To: References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.2r5141) Archived-At: Cc: "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 13:19:29 -0000 Thanks for the response. Further comments inline. I removed sections that don't appear to need further discussion. Thanks! Ben. On 8 Oct 2015, at 4:41, Ram Mohan R (rmohanr) wrote: >> [...] >> >> >> Comments and Questions >> ====================== >> >> - There's a marked lack of mention of B2BUAs that inspect or modify >> media content. I realize that this draft does not seek to enable that >> particular elephant-in-the-room. Is it worth mentioning them as out >> of >> scope? > > In section 1.2 (Goals) we can add this text. Is this ok ? > EXISTING: > The following sections describe the behavior B2BUAs MUST follow in > order > to avoid any impact to end-to-end DTLS-SRTP sessions. > > > NEW: > The following sections describe the behavior B2BUAs can follow to > avoid > breaking end-to-end DTLS-SRTP sessions. B2BUAs terminating DTLS-SRTP > session are outside the scope of this document. I think that's moving in the right direction, but there's normative text elsewhere that says b2buas MUST NOT terminate dtls-srtp. Would it make sense to say something like "B2BUAs that inspect or modify media content are outside the scope of this document"? Or is it the intent to forbid such devices? >> Does this draft intend to make them illegal for SRTP protected >> sessions with it's proscription about terminating dtls? > > The behaviour for cases where B2BUA terminates DTLS-SRTP is not in the > scope of this draft. > See above comment about normative statements concerning the termination of dtls-srtp. [...] >> >> -3.1.1, 3rd paragraph from end: "the B2BUA SHOULD be prepared >> to receive DTLS, STUN and media on the ports it advertised to Bob in >> the INVITE request. " >> >> What are the consequences if it's not prepared to do so? > > The consequences can be - the messages may get dropped which in turn > may > delay STUN/DTLS checks and would requires the endpoints to re-transmit > the > messages. > Given that this is a SHOULD rather than a MUST, it would be useful to describe those consequences in the text. [...] >> >> Also, I think the 4474bis reference needs to be normative, given that >> one needs to understand that draft to implement the normative bits >> about >> modifying anything protected by the signature. OTOH, does this need >> to >> reference 4474bis, or would 4474 suffice? > > rfc4474bis is appropriate since it defines mechanisms to use SDP > parameters (like a=fingerprint) in the Identity header digest. > We will use rfc4474bis and make the reference normative. Your response is reasonable, but keep in mind that will block publication of this draft until 4474bis is published. > > >> >> -3.1.2: "The mechanism described in Security Considerations section >> MUST >> be >> used by endpoint to detect malicious B2BUA¹s that MAY attempt to >> terminate the DTLS-SRTP session." >> >> I'm not sure it makes sense for this draft to put normative >> requirements >> on endpoints. Do you mean to say they "can" use >> the mechanism? > > This has to be fixed. The idea is to have either endpoint or the SIP > proxy > server in the endpoints network to generate Identity header on behalf > of > the endpoint and perform identity validation procedure. I'm not sure I understand what you mean by "this has to be fixed". Do you mean fixed in the draft, or that endpoints need to fix behavior? [...] > >> >> I'm confused by language about "inspect[ing] the RTP headers and RTCP >> packets" here and in the subsections. What do you mean about >> inspecting >> rtcp packets? Is this an attempt to dance around content inspection? >> Wont a good portion of the "rtcp packets" be encrypted? > > Yes. A B2BUA can inspect the unencrypted portions of the RTCP packet. > The wording "and RTCP packets" may lead people to believe it can inspect the entire packet. It might be worth saying "unencrypted parts of the RTCP packet". It's probably not necessary to say that every time, since it complicates the sentence structure, but it would be helpful to do so at least the first time. [...] >> The paragraph takes the form of "To do A, you must do B, and B is not >> allowed". It might be easier to say that "You can't do A, because of >> the >> issue with B." > > Ok. Will re-word this sentence to some thing like this: > > NEW: > A B2BUA cannot modify RTP headers or RTCP packets, as to do so it > needs to > act as a DTLS endpoint, terminate the DTLS-SRTP session and > decrypt/re-encrypt RTP packet. I suggest "...it would need to...". Otherwise that looks good. >> >> Can you be more precise about what "break end-to-end security" means? >> e.g. the receiver would consider the packets invalid? Also, this >> paragraph might could use another mention of 4474/4474bis. > > How about this: > EXISTING: > This would break end-to-end security and hence a B2BUA MUST NOT > terminate DTLS-SRTP session. > > > NEW: > This would cause the identity verification procedure discussed in > 4474bis > to fail and hence a B2BUA MUST NOT terminate the DTLS-SRTP session. > I suggest "identity and integrity protection procedures". Otherwise it looks good. > >> >> - 4: "Since DTLS operates on >> the 5-tuple" >> >> What does that mean? It sounds something like "encrypts" or >> "authenticates" the 5, tuple--but I don't think that's what you mean. > > How about this ? > "Since each DTLS connection is setup on a unique 5-tuple.." Works for me. > > >> >> "unique transport addresses" >> Do you mean the b2bua must replace each answerers's address with a >> distinct address? Also do you mean distinct address, or distinct >> combination of address and port? > > Transport address means IP address and port > I'm not sure everyone will read it that way, unless you define that in the draft or reference a definition. [...] From nobody Thu Oct 8 07:27:25 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5C5B1A037F for ; Thu, 8 Oct 2015 07:27:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.235 X-Spam-Level: X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uBXP9Cu06Tim for ; Thu, 8 Oct 2015 07:27:22 -0700 (PDT) Received: from resqmta-ch2-11v.sys.comcast.net (resqmta-ch2-11v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:43]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C58B41A0372 for ; Thu, 8 Oct 2015 07:27:22 -0700 (PDT) Received: from resomta-ch2-09v.sys.comcast.net ([69.252.207.105]) by resqmta-ch2-11v.sys.comcast.net with comcast id SeRd1r0052GyhjZ01eTM0W; Thu, 08 Oct 2015 14:27:21 +0000 Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-09v.sys.comcast.net with comcast id SeTM1r00D3Ge9ey01eTM9z; Thu, 08 Oct 2015 14:27:21 +0000 To: straw@ietf.org References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> From: Paul Kyzivat Message-ID: <56167D48.9070409@alum.mit.edu> Date: Thu, 8 Oct 2015 10:27:20 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1444314441; bh=cwFSSskipZ2fxwqueWRxVbfUwNaNlV+EqfRryzsY7P0=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=S7jZGaZhCZC9VdjxoCWowU1rlQhfVT34pdSkOUEBfEmWapHKRJpI0sIarlgGISYZz OYAPgu99oyZmqDPj/bgvjmViOJyWSlUKu7wIrnVkeI/r+LdPLLlEryoXuPliuIhWXV Irq1Iz0FxGKxmhYe+RrRLqUWMHr7xTqmC1korCJs+hsqGNTXTc1sh8ltGKaw1PsHhp llUNTHZuDIPCHbJvL9eS2AgK2xjiAaE93a5oNN4IptnN63+Epl6uM7iKRd1gJ2FO1n Sj3BA18RejaGQbeg/jOiBntxLQW7Gw+kOekyrxsfwq6HhS42iZ0/Ly/Sxc5PMfvGR8 TDcGMwYC5VYQQ== Archived-At: Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 14:27:23 -0000 On 10/8/15 9:19 AM, Ben Campbell wrote: >>> I'm confused by language about "inspect[ing] the RTP headers and RTCP >>> packets" here and in the subsections. What do you mean about inspecting >>> rtcp packets? Is this an attempt to dance around content inspection? >>> Wont a good portion of the "rtcp packets" be encrypted? >> >> Yes. A B2BUA can inspect the unencrypted portions of the RTCP packet. >> > > The wording "and RTCP packets" may lead people to believe it can inspect > the entire packet. It might be worth saying "unencrypted parts of the > RTCP packet". It's probably not necessary to say that every time, since > it complicates the sentence structure, but it would be helpful to do so > at least the first time. There is no point in specifying that the B2BUA cannot (or MUST not) inspect encrypted parts. It *can* inspect the encrypted data. And that is not a problem as long as it doesn't have the keys to decrypt it. All you can meaningfully do is observe that the B2BUA does not have the ability to inspect the unencrypted form of encrypted data that flows through it. I think this applies to several points that discuss inspection. Thanks, Paul From nobody Thu Oct 8 07:45:44 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 365DE1A1A56; Thu, 8 Oct 2015 07:45:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uxuF5_iphkVA; Thu, 8 Oct 2015 07:45:36 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BE321A0162; Thu, 8 Oct 2015 07:45:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10198; q=dns/txt; s=iport; t=1444315536; x=1445525136; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=MrWyY5wpHH4/DkwGROQwDAAHRkf+Y/LPRuhA/52iZ2U=; b=YxVCxhfC3dQugnKAAtQe9KyRlCQWKiN9YtLfBBj4zHS+k+YEAOmEoO09 jmoX4dXiZkqIINRLpzkQK13O5DxctHNXRe20XrQnW/p5POPBfLlqBENoG iZHGCSX1b0c5vdUangI+gjBir8MfDq+gsoC9F3BYhFTEDsyHoIvUmqLat I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CQAgBTgBZW/4ENJK1VCYMnVG4GvUIBDYFaIYJyggp/AhyBLDgUAQEBAQEBAYEKhCYBAQEDASMRRQwEAgEIEQQBAQECAiMDAgICMBQBCAgCBAENBQiIHggNrmuUMQEBAQEBAQEBAQEBAQEBAQEBAQEBARMEgSKFUYR+hDERSwcGgmOBRQWWCgGFF4JvhQqBX4dejlWDbgEfAQFChAJxAYYkJRyBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,655,1437436800"; d="scan'208";a="195810892" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-8.cisco.com with ESMTP; 08 Oct 2015 14:45:35 +0000 Received: from XCH-ALN-020.cisco.com (xch-aln-020.cisco.com [173.36.7.30]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id t98EjZrB010740 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 8 Oct 2015 14:45:35 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-020.cisco.com (173.36.7.30) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 8 Oct 2015 09:45:34 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Thu, 8 Oct 2015 09:45:34 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Ben Campbell , "Ram Mohan R (rmohanr)" Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AQHQ/96QjtAidSsStk2GHp9/iZelw55hnkUAgABNrgD//7szsA== Date: Thu, 8 Oct 2015 14:45:34 +0000 Message-ID: References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.57.187] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 14:45:43 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW4gQ2FtcGJlbGwgW21haWx0 bzpiZW5Abm9zdHJ1bS5jb21dDQo+IFNlbnQ6IFRodXJzZGF5LCBPY3RvYmVyIDA4LCAyMDE1IDY6 NDkgUE0NCj4gVG86IFJhbSBNb2hhbiBSIChybW9oYW5yKQ0KPiBDYzogZHJhZnQtaWV0Zi1zdHJh dy1iMmJ1YS1kdGxzLXNydHAuYWxsQGlldGYub3JnOyBzdHJhd0BpZXRmLm9yZw0KPiBTdWJqZWN0 OiBSZTogW3N0cmF3XSBBRCBFdmFsdWF0aW9uIG9mIGRyYWZ0LWlldGYtc3RyYXctYjJidWEtZHRs cy1zcnRwLTA3DQo+IA0KPiBUaGFua3MgZm9yIHRoZSByZXNwb25zZS4gRnVydGhlciBjb21tZW50 cyBpbmxpbmUuIEkgcmVtb3ZlZCBzZWN0aW9ucyB0aGF0DQo+IGRvbid0IGFwcGVhciB0byBuZWVk IGZ1cnRoZXIgZGlzY3Vzc2lvbi4NCj4gDQo+IFRoYW5rcyENCj4gDQo+IEJlbi4NCj4gDQo+IE9u IDggT2N0IDIwMTUsIGF0IDQ6NDEsIFJhbSBNb2hhbiBSIChybW9oYW5yKSB3cm90ZToNCj4gPj4N Cj4gDQo+IFsuLi5dDQo+IA0KPiA+Pg0KPiA+Pg0KPiA+PiBDb21tZW50cyBhbmQgUXVlc3Rpb25z DQo+ID4+ID09PT09PT09PT09PT09PT09PT09PT0NCj4gPj4NCj4gPj4gLSBUaGVyZSdzIGEgbWFy a2VkIGxhY2sgb2YgbWVudGlvbiBvZiBCMkJVQXMgdGhhdCBpbnNwZWN0IG9yIG1vZGlmeQ0KPiA+ PiBtZWRpYSBjb250ZW50LiBJIHJlYWxpemUgdGhhdCB0aGlzIGRyYWZ0IGRvZXMgbm90IHNlZWsg dG8gZW5hYmxlIHRoYXQNCj4gPj4gcGFydGljdWxhciBlbGVwaGFudC1pbi10aGUtcm9vbS4gSXMg aXQgd29ydGggbWVudGlvbmluZyB0aGVtIGFzIG91dA0KPiA+PiBvZiBzY29wZT8NCj4gPg0KPiA+ IEluIHNlY3Rpb24gMS4yIChHb2Fscykgd2UgY2FuIGFkZCB0aGlzIHRleHQuIElzIHRoaXMgb2sg Pw0KPiA+IEVYSVNUSU5HOg0KPiA+IFRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgZGVzY3JpYmUgdGhl IGJlaGF2aW9yIEIyQlVBcyBNVVNUIGZvbGxvdyBpbg0KPiA+IG9yZGVyIHRvIGF2b2lkIGFueSBp bXBhY3QgdG8gZW5kLXRvLWVuZCBEVExTLVNSVFAgc2Vzc2lvbnMuDQo+ID4NCj4gPg0KPiA+IE5F VzoNCj4gPiBUaGUgZm9sbG93aW5nIHNlY3Rpb25zIGRlc2NyaWJlIHRoZSBiZWhhdmlvciBCMkJV QXMgY2FuIGZvbGxvdyB0bw0KPiA+IGF2b2lkDQo+ID4gYnJlYWtpbmcgZW5kLXRvLWVuZCBEVExT LVNSVFAgc2Vzc2lvbnMuIA0KPiBCMkJVQXMgdGVybWluYXRpbmcgRFRMUy1TUlRQDQo+ID4gc2Vz c2lvbiBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhpcyBkb2N1bWVudC4NCg0KSSB0aGluayB0 aGUgYWJvdmUgbGluZSBpcyBub3QgcmVxdWlyZWQuIFRoaXMgZG9jIGRpc2N1c3NlcyB0aGUgcHJv YmxlbSB3aXRoIEIyQlVBcyB0ZXJtaW5hdGluZyBEVExTLVNSVFAgc2Vzc2lvbiwgbWVjaGFuaXNt IHRvIGRldGVjdCBzdWNoIEIyQlVBIGFuZCBzYXlzIHRoYXQgQjJCVUEgbXVzdCBub3QgdG8gYmUg ZW5hYmxlZCBpbiB0aGlzIG1vZGUuDQoNCj4gDQo+IEkgdGhpbmsgdGhhdCdzIG1vdmluZyBpbiB0 aGUgcmlnaHQgZGlyZWN0aW9uLCBidXQgdGhlcmUncyBub3JtYXRpdmUgdGV4dA0KPiBlbHNld2hl cmUgdGhhdCBzYXlzIGIyYnVhcyBNVVNUIE5PVCB0ZXJtaW5hdGUgZHRscy1zcnRwLiBXb3VsZCBp dCBtYWtlDQo+IHNlbnNlIHRvIHNheSBzb21ldGhpbmcgbGlrZSAiQjJCVUFzIHRoYXQgaW5zcGVj dCBvciBtb2RpZnkgbWVkaWEgY29udGVudA0KPiBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhp cyBkb2N1bWVudCI/DQo+IA0KPiBPciBpcyBpdCB0aGUgaW50ZW50IHRvIGZvcmJpZCBzdWNoIGRl dmljZXMgPw0KDQpUaGUgaW50ZW50IGlzIHRvIHByb2hpYml0IHN1Y2ggZGV2aWNlcyBiZWNhdXNl IG9mIHRoZSBwcml2YWN5IGNvbmNlcm4uDQoNCj4gDQo+ID4+IERvZXMgdGhpcyBkcmFmdCBpbnRl bmQgdG8gbWFrZSB0aGVtIGlsbGVnYWwgZm9yIFNSVFAgcHJvdGVjdGVkDQo+ID4+IHNlc3Npb25z IHdpdGggaXQncyBwcm9zY3JpcHRpb24gYWJvdXQgdGVybWluYXRpbmcgZHRscz8NCj4gPg0KPiA+ IFRoZSBiZWhhdmlvdXIgZm9yIGNhc2VzIHdoZXJlIEIyQlVBIHRlcm1pbmF0ZXMgRFRMUy1TUlRQ IGlzIG5vdCBpbiB0aGUNCj4gPiBzY29wZSBvZiB0aGlzIGRyYWZ0Lg0KPiA+DQo+IA0KPiBTZWUg YWJvdmUgY29tbWVudCBhYm91dCBub3JtYXRpdmUgc3RhdGVtZW50cyBjb25jZXJuaW5nIHRoZSB0 ZXJtaW5hdGlvbg0KPiBvZiBkdGxzLXNydHAuDQo+IA0KPiBbLi4uXQ0KPiANCj4gPj4NCj4gPj4g LTMuMS4xLCAzcmQgcGFyYWdyYXBoIGZyb20gZW5kOiAidGhlIEIyQlVBIFNIT1VMRCBiZSBwcmVw YXJlZA0KPiA+PiAgdG8gcmVjZWl2ZSBEVExTLCBTVFVOIGFuZCBtZWRpYSBvbiB0aGUgcG9ydHMg aXQgYWR2ZXJ0aXNlZCB0byBCb2IgaW4NCj4gPj4gIHRoZSBJTlZJVEUgcmVxdWVzdC4gIg0KPiA+ Pg0KPiA+PiBXaGF0IGFyZSB0aGUgY29uc2VxdWVuY2VzIGlmIGl0J3Mgbm90IHByZXBhcmVkIHRv IGRvIHNvPw0KPiA+DQo+ID4gVGhlIGNvbnNlcXVlbmNlcyBjYW4gYmUgLSB0aGUgbWVzc2FnZXMg bWF5IGdldCBkcm9wcGVkIHdoaWNoIGluIHR1cm4NCj4gPiBtYXkNCj4gPiBkZWxheSBTVFVOL0RU TFMgY2hlY2tzIGFuZCB3b3VsZCByZXF1aXJlcyB0aGUgZW5kcG9pbnRzIHRvIHJlLXRyYW5zbWl0 DQo+ID4gdGhlDQo+ID4gbWVzc2FnZXMuDQo+ID4NCj4gDQo+IEdpdmVuIHRoYXQgdGhpcyBpcyBh IFNIT1VMRCByYXRoZXIgdGhhbiBhIE1VU1QsIGl0IHdvdWxkIGJlIHVzZWZ1bCB0bw0KPiBkZXNj cmliZSB0aG9zZSBjb25zZXF1ZW5jZXMgaW4gdGhlIHRleHQuDQoNClRoZSBvdGhlciBhbHRlcm5h dGl2ZSB3b3VsZCBiZSB0byBjaGFuZ2UgZnJvbSBTSE9VTEQgdG8gTVVTVCBhbmQgYXZvaWQgdGhl IGFib3ZlIHByb2JsZW1zLg0KDQo+IA0KPiBbLi4uXQ0KPiANCj4gPj4NCj4gPj4gQWxzbywgSSB0 aGluayB0aGUgNDQ3NGJpcyByZWZlcmVuY2UgbmVlZHMgdG8gYmUgbm9ybWF0aXZlLCBnaXZlbiB0 aGF0DQo+ID4+IG9uZSBuZWVkcyB0byB1bmRlcnN0YW5kIHRoYXQgZHJhZnQgdG8gaW1wbGVtZW50 IHRoZSBub3JtYXRpdmUgYml0cw0KPiA+PiBhYm91dA0KPiA+PiBtb2RpZnlpbmcgYW55dGhpbmcg cHJvdGVjdGVkIGJ5IHRoZSBzaWduYXR1cmUuIE9UT0gsIGRvZXMgdGhpcyBuZWVkDQo+ID4+IHRv DQo+ID4+IHJlZmVyZW5jZSA0NDc0YmlzLCBvciB3b3VsZCA0NDc0IHN1ZmZpY2U/DQo+ID4NCj4g PiByZmM0NDc0YmlzIGlzIGFwcHJvcHJpYXRlIHNpbmNlIGl0IGRlZmluZXMgbWVjaGFuaXNtcyB0 byB1c2UgU0RQDQo+ID4gcGFyYW1ldGVycyAobGlrZSBhPWZpbmdlcnByaW50KSBpbiB0aGUgSWRl bnRpdHkgaGVhZGVyIGRpZ2VzdC4NCj4gPiBXZSB3aWxsIHVzZSByZmM0NDc0YmlzIGFuZCBtYWtl IHRoZSByZWZlcmVuY2Ugbm9ybWF0aXZlLg0KPiANCj4gWW91ciByZXNwb25zZSBpcyByZWFzb25h YmxlLCBidXQga2VlcCBpbiBtaW5kIHRoYXQgd2lsbCBibG9jaw0KPiBwdWJsaWNhdGlvbiBvZiB0 aGlzIGRyYWZ0IHVudGlsIDQ0NzRiaXMgaXMgcHVibGlzaGVkLg0KDQpZZXMsIGh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9yZmM0NDc0I3NlY3Rpb24tMTMuMSBkaXNjdXNzZXMgc2lnbmF0dXJl IG92ZXIgdGhlIFNJUCBib2RpZXMgYnV0IGRvZXMgbm90IGdvIGludG8gZGV0YWlsIGxpa2UgcmZj NDQ3NGJpcyBleHBsYWlucyB1c2luZyBmaW5nZXJwcmludCBmb3IgZ2VuZXJhdGluZyBhc3NlcnRp b24uIFdvdWxkIGl0IGJlIG9rYXkgdG8gaGF2ZSBub3JtYXRpdmUgcmVmZXJlbmNlIG9mIHJmYzQ0 NzQgYW5kIGluZm9ybWF0aXZlIHJlZmVyZW5jZSBvZiByZmM0NDc0YmlzID8NCg0KDQo+IA0KPiA+ DQo+ID4NCj4gPj4NCj4gPj4gLTMuMS4yOiAiVGhlIG1lY2hhbmlzbSBkZXNjcmliZWQgaW4gU2Vj dXJpdHkgQ29uc2lkZXJhdGlvbnMgc2VjdGlvbg0KPiA+PiBNVVNUDQo+ID4+IGJlDQo+ID4+ICB1 c2VkIGJ5IGVuZHBvaW50IHRvIGRldGVjdCBtYWxpY2lvdXMgQjJCVUHCuXMgdGhhdCBNQVkgYXR0 ZW1wdCB0bw0KPiA+PiAgdGVybWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lvbi4iDQo+ID4+DQo+ ID4+IEknbSBub3Qgc3VyZSBpdCBtYWtlcyBzZW5zZSBmb3IgdGhpcyBkcmFmdCB0byBwdXQgbm9y bWF0aXZlDQo+ID4+IHJlcXVpcmVtZW50cw0KPiA+PiBvbiBlbmRwb2ludHMuIERvIHlvdSBtZWFu IHRvIHNheSB0aGV5ICJjYW4iIHVzZQ0KPiA+PiB0aGUgbWVjaGFuaXNtPw0KPiA+DQo+ID4gVGhp cyBoYXMgdG8gYmUgZml4ZWQuIFRoZSBpZGVhIGlzIHRvIGhhdmUgZWl0aGVyIGVuZHBvaW50IG9y IHRoZSBTSVANCj4gPiBwcm94eQ0KPiA+IHNlcnZlciBpbiB0aGUgZW5kcG9pbnRzIG5ldHdvcmsg dG8gZ2VuZXJhdGUgSWRlbnRpdHkgaGVhZGVyIG9uIGJlaGFsZg0KPiA+IG9mDQo+ID4gdGhlIGVu ZHBvaW50IGFuZCBwZXJmb3JtIGlkZW50aXR5IHZhbGlkYXRpb24gcHJvY2VkdXJlLg0KPiANCj4g SSdtIG5vdCBzdXJlIEkgdW5kZXJzdGFuZCB3aGF0IHlvdSBtZWFuIGJ5ICJ0aGlzIGhhcyB0byBi ZSBmaXhlZCIuIERvDQo+IHlvdSBtZWFuIGZpeGVkIGluIHRoZSBkcmFmdCwgb3IgdGhhdCBlbmRw b2ludHMgbmVlZCB0byBmaXggYmVoYXZpb3I/DQoNCkkgdGhpbmsgUmFtIG1lYW50IGZpeCB0aGUg ZHJhZnQuIA0KDQo+IA0KPiBbLi4uXQ0KPiANCj4gPg0KPiA+Pg0KPiA+PiBJJ20gY29uZnVzZWQg YnkgbGFuZ3VhZ2UgYWJvdXQgImluc3BlY3RbaW5nXSB0aGUgUlRQIGhlYWRlcnMgYW5kIFJUQ1AN Cj4gPj4gcGFja2V0cyIgaGVyZSBhbmQgaW4gdGhlIHN1YnNlY3Rpb25zLiBXaGF0IGRvIHlvdSBt ZWFuIGFib3V0DQo+ID4+IGluc3BlY3RpbmcNCj4gPj4gcnRjcCBwYWNrZXRzPyBJcyB0aGlzIGFu IGF0dGVtcHQgdG8gZGFuY2UgYXJvdW5kIGNvbnRlbnQgaW5zcGVjdGlvbj8NCj4gPj4gV29udCBh IGdvb2QgcG9ydGlvbiBvZiB0aGUgInJ0Y3AgcGFja2V0cyIgYmUgZW5jcnlwdGVkPw0KPiA+DQo+ ID4gWWVzLiBBIEIyQlVBIGNhbiBpbnNwZWN0IHRoZSB1bmVuY3J5cHRlZCBwb3J0aW9ucyBvZiB0 aGUgUlRDUCBwYWNrZXQuDQo+ID4NCj4gDQo+IFRoZSB3b3JkaW5nICJhbmQgUlRDUCBwYWNrZXRz IiBtYXkgbGVhZCBwZW9wbGUgdG8gYmVsaWV2ZSBpdCBjYW4gaW5zcGVjdA0KPiB0aGUgZW50aXJl IHBhY2tldC4gSXQgbWlnaHQgYmUgd29ydGggc2F5aW5nICJ1bmVuY3J5cHRlZCBwYXJ0cyBvZiB0 aGUNCj4gUlRDUCBwYWNrZXQiLiBJdCdzIHByb2JhYmx5IG5vdCBuZWNlc3NhcnkgdG8gc2F5IHRo YXQgZXZlcnkgdGltZSwgc2luY2UNCj4gaXQgY29tcGxpY2F0ZXMgdGhlIHNlbnRlbmNlIHN0cnVj dHVyZSwgYnV0IGl0IHdvdWxkIGJlIGhlbHBmdWwgdG8gZG8gc28NCj4gYXQgbGVhc3QgdGhlIGZp cnN0IHRpbWUuDQo+IA0KPiBbLi4uXQ0KPiANCj4gPj4gVGhlIHBhcmFncmFwaCB0YWtlcyB0aGUg Zm9ybSBvZiAiVG8gZG8gQSwgeW91IG11c3QgZG8gQiwgYW5kIEIgaXMgbm90DQo+ID4+IGFsbG93 ZWQiLiBJdCBtaWdodCBiZSBlYXNpZXIgdG8gc2F5IHRoYXQgIllvdSBjYW4ndCBkbyBBLCBiZWNh dXNlIG9mDQo+ID4+IHRoZQ0KPiA+PiBpc3N1ZSB3aXRoIEIuIg0KPiA+DQo+ID4gT2suIFdpbGwg cmUtd29yZCB0aGlzIHNlbnRlbmNlIHRvIHNvbWUgdGhpbmcgbGlrZSB0aGlzOg0KPiA+DQo+ID4g TkVXOg0KPiA+IEEgQjJCVUEgY2Fubm90IG1vZGlmeSBSVFAgaGVhZGVycyBvciBSVENQIHBhY2tl dHMsIGFzIHRvIGRvIHNvIGl0DQo+ID4gbmVlZHMgdG8NCj4gPiBhY3QgYXMgYSBEVExTIGVuZHBv aW50LCB0ZXJtaW5hdGUgdGhlIERUTFMtU1JUUCBzZXNzaW9uIGFuZA0KPiA+IGRlY3J5cHQvcmUt ZW5jcnlwdCBSVFAgcGFja2V0Lg0KPiANCj4gSSBzdWdnZXN0ICIuLi5pdCB3b3VsZCBuZWVkIHRv Li4uIi4gT3RoZXJ3aXNlIHRoYXQgbG9va3MgZ29vZC4NCg0KU3VyZSwgd2lsbCBjaGFuZ2UuDQoN Cj4gDQo+ID4+DQo+ID4+IENhbiB5b3UgYmUgbW9yZSBwcmVjaXNlIGFib3V0IHdoYXQgImJyZWFr IGVuZC10by1lbmQgc2VjdXJpdHkiIG1lYW5zPw0KPiA+PiBlLmcuIHRoZSByZWNlaXZlciB3b3Vs ZCBjb25zaWRlciB0aGUgcGFja2V0cyBpbnZhbGlkPyBBbHNvLCB0aGlzDQo+ID4+IHBhcmFncmFw aCBtaWdodCBjb3VsZCB1c2UgYW5vdGhlciBtZW50aW9uIG9mIDQ0NzQvNDQ3NGJpcy4NCj4gPg0K PiA+IEhvdyBhYm91dCB0aGlzOg0KPiA+IEVYSVNUSU5HOg0KPiA+IFRoaXMgd291bGQgYnJlYWsg ZW5kLXRvLWVuZCBzZWN1cml0eSBhbmQgaGVuY2UgYSBCMkJVQSBNVVNUIE5PVA0KPiA+IHRlcm1p bmF0ZSBEVExTLVNSVFAgc2Vzc2lvbi4NCj4gPg0KPiA+DQo+ID4gTkVXOg0KPiA+IFRoaXMgd291 bGQgY2F1c2UgdGhlIGlkZW50aXR5IHZlcmlmaWNhdGlvbiBwcm9jZWR1cmUgZGlzY3Vzc2VkIGlu DQo+ID4gNDQ3NGJpcw0KPiA+IHRvIGZhaWwgYW5kIGhlbmNlIGEgQjJCVUEgTVVTVCBOT1QgdGVy bWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lvbi4NCj4gPg0KPiANCj4gSSBzdWdnZXN0ICJpZGVu dGl0eSBhbmQgaW50ZWdyaXR5IHByb3RlY3Rpb24gcHJvY2VkdXJlcyIuIE90aGVyd2lzZSBpdA0K PiBsb29rcyBnb29kLg0KDQpPa2F5LCB3aWxsIGNoYW5nZS4NCg0KPiANCj4gPg0KPiA+Pg0KPiA+ PiAtIDQ6ICJTaW5jZSBEVExTIG9wZXJhdGVzIG9uDQo+ID4+ICB0aGUgNS10dXBsZSINCj4gPj4N Cj4gPj4gV2hhdCBkb2VzIHRoYXQgbWVhbj8gSXQgc291bmRzIHNvbWV0aGluZyBsaWtlICJlbmNy eXB0cyIgb3INCj4gPj4gImF1dGhlbnRpY2F0ZXMiIHRoZSA1LCB0dXBsZS0tYnV0IEkgZG9uJ3Qg dGhpbmsgdGhhdCdzIHdoYXQgeW91IG1lYW4uDQo+ID4NCj4gPiBIb3cgYWJvdXQgdGhpcyA/DQo+ ID4gIlNpbmNlIGVhY2ggRFRMUyBjb25uZWN0aW9uIGlzIHNldHVwIG9uIGEgdW5pcXVlIDUtdHVw bGUuLiINCj4gDQo+IFdvcmtzIGZvciBtZS4NCj4gDQo+ID4NCj4gPg0KPiA+Pg0KPiA+PiAidW5p cXVlIHRyYW5zcG9ydCBhZGRyZXNzZXMiDQo+ID4+IERvIHlvdSBtZWFuIHRoZSBiMmJ1YSBtdXN0 IHJlcGxhY2UgZWFjaCBhbnN3ZXJlcnMncyBhZGRyZXNzIHdpdGggYQ0KPiA+PiBkaXN0aW5jdCBh ZGRyZXNzPyBBbHNvIGRvIHlvdSBtZWFuIGRpc3RpbmN0IGFkZHJlc3MsIG9yIGRpc3RpbmN0DQo+ ID4+IGNvbWJpbmF0aW9uIG9mIGFkZHJlc3MgYW5kIHBvcnQ/DQo+ID4NCj4gPiBUcmFuc3BvcnQg YWRkcmVzcyBtZWFucyBJUCBhZGRyZXNzIGFuZCBwb3J0DQo+ID4NCj4gDQo+IEknbSBub3Qgc3Vy ZSBldmVyeW9uZSB3aWxsIHJlYWQgaXQgdGhhdCB3YXksIHVubGVzcyB5b3UgZGVmaW5lIHRoYXQg aW4NCj4gdGhlIGRyYWZ0IG9yIHJlZmVyZW5jZSBhIGRlZmluaXRpb24uDQoNClllcywgd2lsbCBh ZGQgcmVmZXJlbmNlLg0KDQotVGlydQ0KDQo+IA0KPiBbLi4uXQ0KDQo= From nobody Thu Oct 8 07:46:22 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 506BA1A1A54 for ; Thu, 8 Oct 2015 07:46:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IXRyIcei0sp9 for ; Thu, 8 Oct 2015 07:46:19 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 734F31A1A51 for ; Thu, 8 Oct 2015 07:46:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1703; q=dns/txt; s=iport; t=1444315579; x=1445525179; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=UeMDYTKEcHS+wYsimbQXS1tAN3RivP1j+rfBjJmWYA0=; b=cf04DwqlEGJxIL7mdGpBF95NZ2R30u4UoxqX680WXc9NXQ6CFD6hj4GS RinTJxrFnL1Sa2FwpZkeZHKH6Yr4V5KSi5KFnCw9fdehJpHsITwglvFb3 oToOhj8lNPcqz0NSeg1c9KTXy+0+aXYOBlnlQmkL0Fm1FgxypzMMiKJfA k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0CQAgDNgBZW/4cNJK1eDoMZVG4GvUIBDYFaFwqCcoIKfwKBSDgUAQEBAQEBAYEKhCYBAQEDAQEBATc0FwQCAQgOAwQBAQEeCQcnCxQJCAIEARIIiB4IDcMaAQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSGc4R+hRQGhCgFklCDOgGNEJwAAR8BAUKDRD5xhmaBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,655,1437436800"; d="scan'208";a="35614149" Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-4.cisco.com with ESMTP; 08 Oct 2015 14:46:18 +0000 Received: from XCH-RCD-019.cisco.com (xch-rcd-019.cisco.com [173.37.102.29]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t98EkI7t001637 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 8 Oct 2015 14:46:18 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-019.cisco.com (173.37.102.29) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Thu, 8 Oct 2015 09:46:17 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Thu, 8 Oct 2015 09:46:17 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Paul Kyzivat , "straw@ietf.org" Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AQHQ/96QjtAidSsStk2GHp9/iZelw55hnkUAgABNrgCAABMCAP//sV4A Date: Thu, 8 Oct 2015 14:46:17 +0000 Message-ID: References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> <56167D48.9070409@alum.mit.edu> In-Reply-To: <56167D48.9070409@alum.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.57.187] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 14:46:21 -0000 > -----Original Message----- > From: straw [mailto:straw-bounces@ietf.org] On Behalf Of Paul Kyzivat > Sent: Thursday, October 08, 2015 7:57 PM > To: straw@ietf.org > Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 >=20 > On 10/8/15 9:19 AM, Ben Campbell wrote: >=20 > >>> I'm confused by language about "inspect[ing] the RTP headers and > >>> RTCP packets" here and in the subsections. What do you mean about > >>> inspecting rtcp packets? Is this an attempt to dance around content > inspection? > >>> Wont a good portion of the "rtcp packets" be encrypted? > >> > >> Yes. A B2BUA can inspect the unencrypted portions of the RTCP packet. > >> > > > > The wording "and RTCP packets" may lead people to believe it can > > inspect the entire packet. It might be worth saying "unencrypted parts > > of the RTCP packet". It's probably not necessary to say that every > > time, since it complicates the sentence structure, but it would be > > helpful to do so at least the first time. >=20 > There is no point in specifying that the B2BUA cannot (or MUST not) inspe= ct > encrypted parts. It *can* inspect the encrypted data. And that is not a > problem as long as it doesn't have the keys to decrypt it. >=20 > All you can meaningfully do is observe that the B2BUA does not have the > ability to inspect the unencrypted form of encrypted data that flows thro= ugh > it. >=20 > I think this applies to several points that discuss inspection. Agreed. -Tiru >=20 > Thanks, > Paul >=20 >=20 >=20 > _______________________________________________ > straw mailing list > straw@ietf.org > https://www.ietf.org/mailman/listinfo/straw From nobody Thu Oct 8 09:48:22 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E4641A92F5; Thu, 8 Oct 2015 09:48:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JkxgQ-jkHyuq; Thu, 8 Oct 2015 09:48:13 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0CB11A92B8; Thu, 8 Oct 2015 09:48:13 -0700 (PDT) Received: from [192.168.156.46] ([12.150.171.2]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t98Gm9Oi021625 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Thu, 8 Oct 2015 11:48:09 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host [12.150.171.2] claimed to be [192.168.156.46] From: "Ben Campbell" To: "Tirumaleswar Reddy" Date: Thu, 08 Oct 2015 12:48:08 -0400 Message-ID: In-Reply-To: References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.2r5141) Archived-At: Cc: Ram Mohan R , "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 16:48:16 -0000 On 8 Oct 2015, at 10:45, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Ben Campbell [mailto:ben@nostrum.com] >> Sent: Thursday, October 08, 2015 6:49 PM >> To: Ram Mohan R (rmohanr) >> Cc: draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org; straw@ietf.org >> Subject: Re: [straw] AD Evaluation of >> draft-ietf-straw-b2bua-dtls-srtp-07 >> >> Thanks for the response. Further comments inline. I removed sections >> that >> don't appear to need further discussion. >> >> Thanks! >> >> Ben. >> >> On 8 Oct 2015, at 4:41, Ram Mohan R (rmohanr) wrote: >>>> >> >> [...] >> >>>> >>>> >>>> Comments and Questions >>>> ====================== >>>> >>>> - There's a marked lack of mention of B2BUAs that inspect or modify >>>> media content. I realize that this draft does not seek to enable >>>> that >>>> particular elephant-in-the-room. Is it worth mentioning them as out >>>> of scope? >>> >>> In section 1.2 (Goals) we can add this text. Is this ok ? >>> EXISTING: >>> The following sections describe the behavior B2BUAs MUST follow in >>> order to avoid any impact to end-to-end DTLS-SRTP sessions. >>> >>> >>> NEW: >>> The following sections describe the behavior B2BUAs can follow to >>> avoid >>> breaking end-to-end DTLS-SRTP sessions. >> B2BUAs terminating DTLS-SRTP >>> session are outside the scope of this document. > > I think the above line is not required. This doc discusses the problem > with B2BUAs terminating DTLS-SRTP session, mechanism to detect such > B2BUA and says that B2BUA must not to be enabled in this mode. > See next comment... >> >> I think that's moving in the right direction, but there's normative >> text >> elsewhere that says b2buas MUST NOT terminate dtls-srtp. Would it >> make >> sense to say something like "B2BUAs that inspect or modify media >> content >> are outside the scope of this document"? >> >> Or is it the intent to forbid such devices ? > > The intent is to prohibit such devices because of the privacy concern. That's a different answer than Ram gave. Content aware/modifying B2BUAs cannot both be forbidden and out-of-scope at the same time. I think the confusion here is around whether this draft should say b2buas MUST not terminate dtls-srtp, or to say that they cannot under most circumstances without breaking 4474/4474bis identity signatures. The former needs 2119 language, the latter is just a statement of fact. There are some exceptions to the "cannot" in the above paragraph. For example, a b2bua that is collocated with the offerer's identity service could modify fingerprints prior to applying the identity signature. Or since 5763 only says endpoints SHOULD use 4474, a b2bua might see unprotected fingerprints and attempt to modify them. Does this draft mean to forbid those behaviors? > >> >>>> Does this draft intend to make them illegal for SRTP protected >>>> sessions with it's proscription about terminating dtls? >>> >>> The behaviour for cases where B2BUA terminates DTLS-SRTP is not in >>> the >>> scope of this draft. >>> >> >> See above comment about normative statements concerning the >> termination >> of dtls-srtp. >> >> [...] >> >>>> >>>> -3.1.1, 3rd paragraph from end: "the B2BUA SHOULD be prepared >>>> to receive DTLS, STUN and media on the ports it advertised to Bob >>>> in >>>> the INVITE request. " >>>> >>>> What are the consequences if it's not prepared to do so? >>> >>> The consequences can be - the messages may get dropped which in turn >>> may >>> delay STUN/DTLS checks and would requires the endpoints to >>> re-transmit >>> the >>> messages. >>> >> >> Given that this is a SHOULD rather than a MUST, it would be useful to >> describe those consequences in the text. > > The other alternative would be to change from SHOULD to MUST and avoid > the above problems. I would not object to that--although on reflection, isn't this requirement true of all b2buas? That is, is it in any way specific to dtls-srtp? Is that documented elsewhere? > >> >> [...] >> >>>> >>>> Also, I think the 4474bis reference needs to be normative, given >>>> that >>>> one needs to understand that draft to implement the normative bits >>>> about >>>> modifying anything protected by the signature. OTOH, does this need >>>> to >>>> reference 4474bis, or would 4474 suffice? >>> >>> rfc4474bis is appropriate since it defines mechanisms to use SDP >>> parameters (like a=fingerprint) in the Identity header digest. >>> We will use rfc4474bis and make the reference normative. >> >> Your response is reasonable, but keep in mind that will block >> publication of this draft until 4474bis is published. > > Yes, https://tools.ietf.org/html/rfc4474#section-13.1 discusses > signature over the SIP bodies but does not go into detail like > rfc4474bis explains using fingerprint for generating assertion. Would > it be okay to have normative reference of rfc4474 and informative > reference of rfc4474bis ? Both protect the fingerprint. 4474 just does it by protecting the entire body. 4474bis has the may be more deployable. But it seems to me that either work for the purposes of this draft. And since 4474bis proposes to obsolete 4474, a reference to 4474 will effectively become a reference to 4474bis. > > >> >>> >>> >>>> >>>> -3.1.2: "The mechanism described in Security Considerations section >>>> MUST >>>> be >>>> used by endpoint to detect malicious B2BUA¹s that MAY attempt to >>>> terminate the DTLS-SRTP session." >>>> >>>> I'm not sure it makes sense for this draft to put normative >>>> requirements >>>> on endpoints. Do you mean to say they "can" use >>>> the mechanism? >>> >>> This has to be fixed. The idea is to have either endpoint or the SIP >>> proxy >>> server in the endpoints network to generate Identity header on >>> behalf >>> of >>> the endpoint and perform identity validation procedure. >> >> I'm not sure I understand what you mean by "this has to be fixed". Do >> you mean fixed in the draft, or that endpoints need to fix behavior? > > I think Ram meant fix the draft. In any case, if this draft places new normative requirements on dtsl-srtp endpoints or identity services, it would need to update 5763. [...] From nobody Thu Oct 8 14:01:04 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1048A1ACE24 for ; Thu, 8 Oct 2015 14:01:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.235 X-Spam-Level: X-Spam-Status: No, score=-1.235 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_SOFTFAIL=0.665] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sOISjw7_VIln for ; Thu, 8 Oct 2015 14:01:03 -0700 (PDT) Received: from resqmta-ch2-07v.sys.comcast.net (resqmta-ch2-07v.sys.comcast.net [IPv6:2001:558:fe21:29:69:252:207:39]) (using TLSv1.2 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 019E31ACE1F for ; Thu, 8 Oct 2015 14:01:02 -0700 (PDT) Received: from resomta-ch2-09v.sys.comcast.net ([69.252.207.105]) by resqmta-ch2-07v.sys.comcast.net with comcast id Skzv1r00A2GyhjZ01l12C6; Thu, 08 Oct 2015 21:01:02 +0000 Received: from Paul-Kyzivats-MacBook-Pro.local ([50.138.229.151]) by resomta-ch2-09v.sys.comcast.net with comcast id Sl111r00Z3Ge9ey01l12W2; Thu, 08 Oct 2015 21:01:02 +0000 To: straw@ietf.org References: <88387F56-0E5F-40AF-A0A7-B826D73F93D1@nostrum.com> From: Paul Kyzivat Message-ID: <5616D98D.4000303@alum.mit.edu> Date: Thu, 8 Oct 2015 17:01:01 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20140121; t=1444338062; bh=VyqPUkMDQ1H5Ev0WM2EXG/puShYSkz8q8DYEdcrDgpM=; h=Received:Received:Subject:To:From:Message-ID:Date:MIME-Version: Content-Type; b=deGqqnHkRb4h+2foPCuTI2mUCQp0gnqgW4Fv6GXhJ2MSU/ln3SCF/N84o8sa+BQCz LSiSTp2RkhYKx5A+EkjSq2isRCHNbnEKuL2F8JGs6cXmpof1GcVPexr4LIHtJpU8O8 hUxamNNf9usP/ifMj6qC94b3tUL6AaAE9jvAthucFSFER+83rH5ATVTKNCBMbAisx8 KKsb7LUWJ+Xg96ksP8cNoZNljN2FeekwgcPq/fTlvv3zjFwX74s9lH1bHiJfbPbc8I vIit3aWrqnHnQnxfNhPJwtkIszxv/UQpfJKaNDVZOCeAjQdVivfIkdDkfRs6ftAUTg XUm1DyR+RG+EA== Archived-At: Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2015 21:01:04 -0000 On 10/8/15 12:48 PM, Ben Campbell wrote: > There are some exceptions to the "cannot" in the above paragraph. For > example, a b2bua that is collocated with the offerer's identity service > could modify fingerprints prior to applying the identity signature. A similar situation (or maybe just another way of talking about the same one) is that a B2BUA that can sign for the user might just be considered to *be* the caller in the call. The leg from that B2BUA to the "actual" UA can be considered to just be the implementation of a deconstructed UA. I don't know whether to consider that a bug or a feature. I don't see any way to forbid this. Thanks, Paul From nobody Fri Oct 9 04:55:57 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D04801B38C1; Fri, 9 Oct 2015 04:55:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xsfJostsjuXE; Fri, 9 Oct 2015 04:55:53 -0700 (PDT) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ECC561B38C7; Fri, 9 Oct 2015 04:55:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10322; q=dns/txt; s=iport; t=1444391753; x=1445601353; h=from:to:cc:subject:date:message-id: content-transfer-encoding:mime-version; bh=5atF9FMmQqd15H7NZxooW+VHbIijVeLG1XKyLcSNFew=; b=P2Dbz8JvCBCZytkwXaX8dx7bdR3Ymh86jJjSlt4QmlUlPcQBA3E5tuWm POc6tRCuoMWte6ycJhGB/uikKehYRDTb8VeeU3Lo5NRLVGlmKb9ltRf7D C4uTXlIXLiuCVv/vCYdTVHFhLlgcWpoukcv+JASv/UVntFaoWqGj5FWZs M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AhAgBsqhdW/5RdJa1VCYMmVG4GvVsBDYFaIYJyggp/AhyBLTgUAQEBAQEBAYEKhCYBAQEDASMRRQwGAQgRBAEBAQICIwMCBDAUAQgJAQQOBQiIHggNrw6UFQEBAQEBAQEBAQEBAQEBAQEBAQEBARMEgSKFUYR+hDERMBsNgmOBRQWWEgGFGIJwhQqBX5FfhFmDbgEfAQFChAJxAYYiJRyBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,657,1437436800"; d="scan'208";a="36063710" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-6.cisco.com with ESMTP; 09 Oct 2015 11:55:44 +0000 Received: from XCH-ALN-016.cisco.com (xch-aln-016.cisco.com [173.36.7.26]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t99BtgAX012576 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 9 Oct 2015 11:55:42 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-016.cisco.com (173.36.7.26) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 9 Oct 2015 06:55:40 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Fri, 9 Oct 2015 06:55:40 -0500 From: "Tirumaleswar Reddy (tireddy)" To: Ben Campbell Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AdECiWWHGdabd7I7SBWzvs/h+mH/tQ== Date: Fri, 9 Oct 2015 11:55:40 +0000 Message-ID: <5e3c9e3e2f8c4bd8bb594a382a1f2d70@XCH-RCD-017.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [173.39.66.92] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "Ram Mohan R \(rmohanr\)" , "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2015 11:55:56 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBCZW4gQ2FtcGJlbGwgW21haWx0 bzpiZW5Abm9zdHJ1bS5jb21dDQo+IFNlbnQ6IFRodXJzZGF5LCBPY3RvYmVyIDA4LCAyMDE1IDEw OjE4IFBNDQo+IFRvOiBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpDQo+IENjOiBSYW0gTW9o YW4gUiAocm1vaGFucik7IGRyYWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1zcnRwLmFsbEBpZXRm Lm9yZzsNCj4gc3RyYXdAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtzdHJhd10gQUQgRXZhbHVh dGlvbiBvZiBkcmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0cC0wNw0KPiANCj4gDQo+IA0K PiBPbiA4IE9jdCAyMDE1LCBhdCAxMDo0NSwgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5KSB3 cm90ZToNCj4gDQo+ID4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+IEZyb206IEJl biBDYW1wYmVsbCBbbWFpbHRvOmJlbkBub3N0cnVtLmNvbV0NCj4gPj4gU2VudDogVGh1cnNkYXks IE9jdG9iZXIgMDgsIDIwMTUgNjo0OSBQTQ0KPiA+PiBUbzogUmFtIE1vaGFuIFIgKHJtb2hhbnIp DQo+ID4+IENjOiBkcmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0cC5hbGxAaWV0Zi5vcmc7 IHN0cmF3QGlldGYub3JnDQo+ID4+IFN1YmplY3Q6IFJlOiBbc3RyYXddIEFEIEV2YWx1YXRpb24g b2YNCj4gPj4gZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDcNCj4gPj4NCj4gPj4g VGhhbmtzIGZvciB0aGUgcmVzcG9uc2UuIEZ1cnRoZXIgY29tbWVudHMgaW5saW5lLiBJIHJlbW92 ZWQgc2VjdGlvbnMNCj4gPj4gdGhhdCBkb24ndCBhcHBlYXIgdG8gbmVlZCBmdXJ0aGVyIGRpc2N1 c3Npb24uDQo+ID4+DQo+ID4+IFRoYW5rcyENCj4gPj4NCj4gPj4gQmVuLg0KPiA+Pg0KPiA+PiBP biA4IE9jdCAyMDE1LCBhdCA0OjQxLCBSYW0gTW9oYW4gUiAocm1vaGFucikgd3JvdGU6DQo+ID4+ Pj4NCj4gPj4NCj4gPj4gWy4uLl0NCj4gPj4NCj4gPj4+Pg0KPiA+Pj4+DQo+ID4+Pj4gQ29tbWVu dHMgYW5kIFF1ZXN0aW9ucw0KPiA+Pj4+ID09PT09PT09PT09PT09PT09PT09PT0NCj4gPj4+Pg0K PiA+Pj4+IC0gVGhlcmUncyBhIG1hcmtlZCBsYWNrIG9mIG1lbnRpb24gb2YgQjJCVUFzIHRoYXQg aW5zcGVjdCBvciBtb2RpZnkNCj4gPj4+PiBtZWRpYSBjb250ZW50LiBJIHJlYWxpemUgdGhhdCB0 aGlzIGRyYWZ0IGRvZXMgbm90IHNlZWsgdG8gZW5hYmxlDQo+ID4+Pj4gdGhhdCBwYXJ0aWN1bGFy IGVsZXBoYW50LWluLXRoZS1yb29tLiBJcyBpdCB3b3J0aCBtZW50aW9uaW5nIHRoZW0NCj4gPj4+ PiBhcyBvdXQgb2Ygc2NvcGU/DQo+ID4+Pg0KPiA+Pj4gSW4gc2VjdGlvbiAxLjIgKEdvYWxzKSB3 ZSBjYW4gYWRkIHRoaXMgdGV4dC4gSXMgdGhpcyBvayA/DQo+ID4+PiBFWElTVElORzoNCj4gPj4+ IFRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgZGVzY3JpYmUgdGhlIGJlaGF2aW9yIEIyQlVBcyBNVVNU IGZvbGxvdyBpbg0KPiA+Pj4gb3JkZXIgdG8gYXZvaWQgYW55IGltcGFjdCB0byBlbmQtdG8tZW5k IERUTFMtU1JUUCBzZXNzaW9ucy4NCj4gPj4+DQo+ID4+Pg0KPiA+Pj4gTkVXOg0KPiA+Pj4gVGhl IGZvbGxvd2luZyBzZWN0aW9ucyBkZXNjcmliZSB0aGUgYmVoYXZpb3IgQjJCVUFzIGNhbiBmb2xs b3cgdG8NCj4gPj4+IGF2b2lkIGJyZWFraW5nIGVuZC10by1lbmQgRFRMUy1TUlRQIHNlc3Npb25z Lg0KPiA+PiBCMkJVQXMgdGVybWluYXRpbmcgRFRMUy1TUlRQDQo+ID4+PiBzZXNzaW9uIGFyZSBv dXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KPiA+DQo+ID4gSSB0aGluayB0aGUg YWJvdmUgbGluZSBpcyBub3QgcmVxdWlyZWQuIFRoaXMgZG9jIGRpc2N1c3NlcyB0aGUgcHJvYmxl bQ0KPiA+IHdpdGggQjJCVUFzIHRlcm1pbmF0aW5nIERUTFMtU1JUUCBzZXNzaW9uLCBtZWNoYW5p c20gdG8gZGV0ZWN0IHN1Y2gNCj4gPiBCMkJVQSBhbmQgc2F5cyB0aGF0IEIyQlVBIG11c3Qgbm90 IHRvIGJlIGVuYWJsZWQgaW4gdGhpcyBtb2RlLg0KPiA+DQo+IA0KPiBTZWUgbmV4dCBjb21tZW50 Li4uDQo+IA0KPiA+Pg0KPiA+PiBJIHRoaW5rIHRoYXQncyBtb3ZpbmcgaW4gdGhlIHJpZ2h0IGRp cmVjdGlvbiwgYnV0IHRoZXJlJ3Mgbm9ybWF0aXZlDQo+ID4+IHRleHQgZWxzZXdoZXJlIHRoYXQg c2F5cyBiMmJ1YXMgTVVTVCBOT1QgdGVybWluYXRlIGR0bHMtc3J0cC4gV291bGQNCj4gPj4gaXQg bWFrZSBzZW5zZSB0byBzYXkgc29tZXRoaW5nIGxpa2UgIkIyQlVBcyB0aGF0IGluc3BlY3Qgb3Ig bW9kaWZ5DQo+ID4+IG1lZGlhIGNvbnRlbnQgYXJlIG91dHNpZGUgdGhlIHNjb3BlIG9mIHRoaXMg ZG9jdW1lbnQiPw0KPiA+Pg0KPiA+PiBPciBpcyBpdCB0aGUgaW50ZW50IHRvIGZvcmJpZCBzdWNo IGRldmljZXMgPw0KPiA+DQo+ID4gVGhlIGludGVudCBpcyB0byBwcm9oaWJpdCBzdWNoIGRldmlj ZXMgYmVjYXVzZSBvZiB0aGUgcHJpdmFjeSBjb25jZXJuLg0KPiANCj4gVGhhdCdzIGEgZGlmZmVy ZW50IGFuc3dlciB0aGFuIFJhbSBnYXZlLiBDb250ZW50IGF3YXJlL21vZGlmeWluZyBCMkJVQXMN Cj4gY2Fubm90IGJvdGggYmUgZm9yYmlkZGVuIGFuZCBvdXQtb2Ytc2NvcGUgYXQgdGhlIHNhbWUg dGltZS4NCj4gDQo+IEkgdGhpbmsgdGhlIGNvbmZ1c2lvbiBoZXJlIGlzIGFyb3VuZCB3aGV0aGVy IHRoaXMgZHJhZnQgc2hvdWxkIHNheSBiMmJ1YXMNCj4gTVVTVCBub3QgdGVybWluYXRlIGR0bHMt c3J0cCwgb3IgdG8gc2F5IHRoYXQgdGhleSBjYW5ub3QgdW5kZXIgbW9zdA0KPiBjaXJjdW1zdGFu Y2VzIHdpdGhvdXQgYnJlYWtpbmcgNDQ3NC80NDc0YmlzIGlkZW50aXR5IHNpZ25hdHVyZXMuDQo+ IFRoZSBmb3JtZXIgbmVlZHMgMjExOSBsYW5ndWFnZSwgdGhlIGxhdHRlciBpcyBqdXN0IGEgc3Rh dGVtZW50IG9mIGZhY3QuDQoNCkkgdGhpbmsgd2Ugc2hvdWxkIGdvIHdpdGggdGhlIGZvcm1lciwg b3RoZXJ3aXNlIGl0IGNyZWF0ZXMgYSBwcml2YWN5IHByb2JsZW0uDQoNCj4gDQo+IFRoZXJlIGFy ZSBzb21lIGV4Y2VwdGlvbnMgdG8gdGhlICJjYW5ub3QiIGluIHRoZSBhYm92ZSBwYXJhZ3JhcGgu IEZvcg0KPiBleGFtcGxlLCBhIGIyYnVhIHRoYXQgaXMgY29sbG9jYXRlZCB3aXRoIHRoZSBvZmZl cmVyJ3MgaWRlbnRpdHkgc2VydmljZSBjb3VsZA0KPiBtb2RpZnkgZmluZ2VycHJpbnRzIHByaW9y IHRvIGFwcGx5aW5nIHRoZSBpZGVudGl0eSBzaWduYXR1cmUuIE9yIHNpbmNlIDU3NjMNCj4gb25s eSBzYXlzIGVuZHBvaW50cyBTSE9VTEQgdXNlIDQ0NzQsIGEgYjJidWEgbWlnaHQgc2VlIHVucHJv dGVjdGVkDQo+IGZpbmdlcnByaW50cyBhbmQgYXR0ZW1wdCB0byBtb2RpZnkgdGhlbS4gIERvZXMg dGhpcyBkcmFmdCBtZWFuIHRvIGZvcmJpZA0KPiB0aG9zZSBiZWhhdmlvcnM/DQoNCkVuZHBvaW50 IG9yIFNJUCBwcm94eSBpbiB0aGUgZW5kcG9pbnRzIG5ldHdvcmsgaGFzIHRvIGluc2VydCB0aGUg aWRlbnRpdHkgYXNzZXJ0aW9uIHRvIGF2b2lkIEIyQlVBIGluIHRoZSBzaWduYWxpbmcgcGF0aCBm cm9tIHRlcm1pbmF0aW5nIHRoZSBEVExTIGNvbm5lY3Rpb24gYW5kIGRlY3J5cHRpbmcgdGhlIG1l ZGlhLiBXZWJSVEMgYWxzbyBoYXMgdGhlIHNhbWUgcHJvYmxlbSB0aGF0IHdpdGhvdXQgSWRQIGFu ZCBpZGVudGl0eSBhc3NlcnRpb24sIG1hbGljaW91cyBzaWduYWxpbmcgc2VydmVyIGNhbiBkZWNy eXB0IHRoZSBtZWRpYS4gDQoNCj4gDQo+ID4NCj4gPj4NCj4gPj4+PiBEb2VzIHRoaXMgZHJhZnQg aW50ZW5kIHRvIG1ha2UgdGhlbSBpbGxlZ2FsIGZvciBTUlRQIHByb3RlY3RlZA0KPiA+Pj4+IHNl c3Npb25zIHdpdGggaXQncyBwcm9zY3JpcHRpb24gYWJvdXQgdGVybWluYXRpbmcgZHRscz8NCj4g Pj4+DQo+ID4+PiBUaGUgYmVoYXZpb3VyIGZvciBjYXNlcyB3aGVyZSBCMkJVQSB0ZXJtaW5hdGVz IERUTFMtU1JUUCBpcyBub3QgaW4NCj4gPj4+IHRoZSBzY29wZSBvZiB0aGlzIGRyYWZ0Lg0KPiA+ Pj4NCj4gPj4NCj4gPj4gU2VlIGFib3ZlIGNvbW1lbnQgYWJvdXQgbm9ybWF0aXZlIHN0YXRlbWVu dHMgY29uY2VybmluZyB0aGUNCj4gPj4gdGVybWluYXRpb24gb2YgZHRscy1zcnRwLg0KPiA+Pg0K PiA+PiBbLi4uXQ0KPiA+Pg0KPiA+Pj4+DQo+ID4+Pj4gLTMuMS4xLCAzcmQgcGFyYWdyYXBoIGZy b20gZW5kOiAidGhlIEIyQlVBIFNIT1VMRCBiZSBwcmVwYXJlZCB0bw0KPiA+Pj4+IHJlY2VpdmUg RFRMUywgU1RVTiBhbmQgbWVkaWEgb24gdGhlIHBvcnRzIGl0IGFkdmVydGlzZWQgdG8gQm9iIGlu DQo+ID4+Pj4gdGhlIElOVklURSByZXF1ZXN0LiAiDQo+ID4+Pj4NCj4gPj4+PiBXaGF0IGFyZSB0 aGUgY29uc2VxdWVuY2VzIGlmIGl0J3Mgbm90IHByZXBhcmVkIHRvIGRvIHNvPw0KPiA+Pj4NCj4g Pj4+IFRoZSBjb25zZXF1ZW5jZXMgY2FuIGJlIC0gdGhlIG1lc3NhZ2VzIG1heSBnZXQgZHJvcHBl ZCB3aGljaCBpbiB0dXJuDQo+ID4+PiBtYXkgZGVsYXkgU1RVTi9EVExTIGNoZWNrcyBhbmQgd291 bGQgcmVxdWlyZXMgdGhlIGVuZHBvaW50cyB0bw0KPiA+Pj4gcmUtdHJhbnNtaXQgdGhlIG1lc3Nh Z2VzLg0KPiA+Pj4NCj4gPj4NCj4gPj4gR2l2ZW4gdGhhdCB0aGlzIGlzIGEgU0hPVUxEIHJhdGhl ciB0aGFuIGEgTVVTVCwgaXQgd291bGQgYmUgdXNlZnVsIHRvDQo+ID4+IGRlc2NyaWJlIHRob3Nl IGNvbnNlcXVlbmNlcyBpbiB0aGUgdGV4dC4NCj4gPg0KPiA+IFRoZSBvdGhlciBhbHRlcm5hdGl2 ZSB3b3VsZCBiZSB0byBjaGFuZ2UgZnJvbSBTSE9VTEQgdG8gTVVTVCBhbmQgYXZvaWQNCj4gPiB0 aGUgYWJvdmUgcHJvYmxlbXMuDQo+IA0KPiBJIHdvdWxkIG5vdCBvYmplY3QgdG8gdGhhdC0tYWx0 aG91Z2ggb24gcmVmbGVjdGlvbiwgaXNuJ3QgdGhpcyByZXF1aXJlbWVudCB0cnVlDQo+IG9mIGFs bCBiMmJ1YXM/IFRoYXQgaXMsIGlzIGl0IGluIGFueSB3YXkgc3BlY2lmaWMgdG8gZHRscy1zcnRw PyAgSXMgdGhhdA0KPiBkb2N1bWVudGVkIGVsc2V3aGVyZT8NCg0KSSBkb24ndCB0aGluayBhbnkg b3RoZXIgZG9jIGlzIGRpc2N1c3NpbmcgdGhpcyBwb2ludC4NCg0KPiANCj4gPg0KPiA+Pg0KPiA+ PiBbLi4uXQ0KPiA+Pg0KPiA+Pj4+DQo+ID4+Pj4gQWxzbywgSSB0aGluayB0aGUgNDQ3NGJpcyBy ZWZlcmVuY2UgbmVlZHMgdG8gYmUgbm9ybWF0aXZlLCBnaXZlbg0KPiA+Pj4+IHRoYXQNCj4gPj4+ PiBvbmUgbmVlZHMgdG8gdW5kZXJzdGFuZCB0aGF0IGRyYWZ0IHRvIGltcGxlbWVudCB0aGUgbm9y bWF0aXZlIGJpdHMNCj4gPj4+PiBhYm91dA0KPiA+Pj4+IG1vZGlmeWluZyBhbnl0aGluZyBwcm90 ZWN0ZWQgYnkgdGhlIHNpZ25hdHVyZS4gT1RPSCwgZG9lcyB0aGlzIG5lZWQNCj4gPj4+PiB0bw0K PiA+Pj4+IHJlZmVyZW5jZSA0NDc0YmlzLCBvciB3b3VsZCA0NDc0IHN1ZmZpY2U/DQo+ID4+Pg0K PiA+Pj4gcmZjNDQ3NGJpcyBpcyBhcHByb3ByaWF0ZSBzaW5jZSBpdCBkZWZpbmVzIG1lY2hhbmlz bXMgdG8gdXNlIFNEUA0KPiA+Pj4gcGFyYW1ldGVycyAobGlrZSBhPWZpbmdlcnByaW50KSBpbiB0 aGUgSWRlbnRpdHkgaGVhZGVyIGRpZ2VzdC4NCj4gPj4+IFdlIHdpbGwgdXNlIHJmYzQ0NzRiaXMg YW5kIG1ha2UgdGhlIHJlZmVyZW5jZSBub3JtYXRpdmUuDQo+ID4+DQo+ID4+IFlvdXIgcmVzcG9u c2UgaXMgcmVhc29uYWJsZSwgYnV0IGtlZXAgaW4gbWluZCB0aGF0IHdpbGwgYmxvY2sNCj4gPj4g cHVibGljYXRpb24gb2YgdGhpcyBkcmFmdCB1bnRpbCA0NDc0YmlzIGlzIHB1Ymxpc2hlZC4NCj4g Pg0KPiA+IFllcywgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzQ0NzQjc2VjdGlvbi0x My4xIGRpc2N1c3Nlcw0KPiA+IHNpZ25hdHVyZSBvdmVyIHRoZSBTSVAgYm9kaWVzIGJ1dCBkb2Vz IG5vdCBnbyBpbnRvIGRldGFpbCBsaWtlDQo+ID4gcmZjNDQ3NGJpcyBleHBsYWlucyB1c2luZyBm aW5nZXJwcmludCBmb3IgZ2VuZXJhdGluZyBhc3NlcnRpb24uIFdvdWxkDQo+ID4gaXQgYmUgb2th eSB0byBoYXZlIG5vcm1hdGl2ZSByZWZlcmVuY2Ugb2YgcmZjNDQ3NCBhbmQgaW5mb3JtYXRpdmUN Cj4gPiByZWZlcmVuY2Ugb2YgcmZjNDQ3NGJpcyA/DQo+IA0KPiBCb3RoIHByb3RlY3QgdGhlIGZp bmdlcnByaW50LiA0NDc0IGp1c3QgZG9lcyBpdCBieSBwcm90ZWN0aW5nIHRoZSBlbnRpcmUNCj4g Ym9keS4gNDQ3NGJpcyBoYXMgdGhlIG1heSBiZSBtb3JlIGRlcGxveWFibGUuIEJ1dCBpdCBzZWVt cyB0byBtZSB0aGF0DQo+IGVpdGhlciB3b3JrIGZvciB0aGUgcHVycG9zZXMgb2YgdGhpcyBkcmFm dC4gQW5kIHNpbmNlIDQ0NzRiaXMgcHJvcG9zZXMNCj4gdG8gb2Jzb2xldGUgNDQ3NCwgYSByZWZl cmVuY2UgdG8gNDQ3NCB3aWxsIGVmZmVjdGl2ZWx5IGJlY29tZSBhDQo+IHJlZmVyZW5jZSB0byA0 NDc0YmlzLg0KDQpUaGFua3MsIHdpbGwgdXBkYXRlIGRyYWZ0Lg0KDQo+IA0KPiAgPg0KPiA+DQo+ ID4+DQo+ID4+Pg0KPiA+Pj4NCj4gPj4+Pg0KPiA+Pj4+IC0zLjEuMjogIlRoZSBtZWNoYW5pc20g ZGVzY3JpYmVkIGluIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zIHNlY3Rpb24NCj4gPj4+PiBNVVNU DQo+ID4+Pj4gYmUNCj4gPj4+PiB1c2VkIGJ5IGVuZHBvaW50IHRvIGRldGVjdCBtYWxpY2lvdXMg QjJCVUHCuXMgdGhhdCBNQVkgYXR0ZW1wdCB0bw0KPiA+Pj4+IHRlcm1pbmF0ZSB0aGUgRFRMUy1T UlRQIHNlc3Npb24uIg0KPiA+Pj4+DQo+ID4+Pj4gSSdtIG5vdCBzdXJlIGl0IG1ha2VzIHNlbnNl IGZvciB0aGlzIGRyYWZ0IHRvIHB1dCBub3JtYXRpdmUNCj4gPj4+PiByZXF1aXJlbWVudHMNCj4g Pj4+PiBvbiBlbmRwb2ludHMuIERvIHlvdSBtZWFuIHRvIHNheSB0aGV5ICJjYW4iIHVzZQ0KPiA+ Pj4+IHRoZSBtZWNoYW5pc20/DQo+ID4+Pg0KPiA+Pj4gVGhpcyBoYXMgdG8gYmUgZml4ZWQuIFRo ZSBpZGVhIGlzIHRvIGhhdmUgZWl0aGVyIGVuZHBvaW50IG9yIHRoZSBTSVANCj4gPj4+IHByb3h5 DQo+ID4+PiBzZXJ2ZXIgaW4gdGhlIGVuZHBvaW50cyBuZXR3b3JrIHRvIGdlbmVyYXRlIElkZW50 aXR5IGhlYWRlciBvbg0KPiA+Pj4gYmVoYWxmDQo+ID4+PiBvZg0KPiA+Pj4gdGhlIGVuZHBvaW50 IGFuZCBwZXJmb3JtIGlkZW50aXR5IHZhbGlkYXRpb24gcHJvY2VkdXJlLg0KPiA+Pg0KPiA+PiBJ J20gbm90IHN1cmUgSSB1bmRlcnN0YW5kIHdoYXQgeW91IG1lYW4gYnkgInRoaXMgaGFzIHRvIGJl IGZpeGVkIi4gRG8NCj4gPj4geW91IG1lYW4gZml4ZWQgaW4gdGhlIGRyYWZ0LCBvciB0aGF0IGVu ZHBvaW50cyBuZWVkIHRvIGZpeCBiZWhhdmlvcj8NCj4gPg0KPiA+IEkgdGhpbmsgUmFtIG1lYW50 IGZpeCB0aGUgZHJhZnQuDQo+IA0KPiBJbiBhbnkgY2FzZSwgaWYgdGhpcyBkcmFmdCBwbGFjZXMg bmV3IG5vcm1hdGl2ZSByZXF1aXJlbWVudHMgb24NCj4gZHRzbC1zcnRwIGVuZHBvaW50cyBvciBp ZGVudGl0eSBzZXJ2aWNlcywgaXQgd291bGQgbmVlZCB0byB1cGRhdGUgNTc2My4NCg0KWWVzLCB3 aWxsIHVwZGF0ZSB0aGF0IHRoaXMgZG9jIHVwZGF0ZXMgNTc2My4NCg0KQ2hlZXJzLA0KLVRpcnUN Cg0KPiANCj4gWy4uLl0NCg== From nobody Tue Oct 13 06:00:46 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44F351A854B; Tue, 13 Oct 2015 06:00:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qjot8G_CmZs1; Tue, 13 Oct 2015 06:00:42 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CFF71A87AC; Tue, 13 Oct 2015 06:00:41 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.5.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151013130041.29966.84803.idtracker@ietfa.amsl.com> Date: Tue, 13 Oct 2015 06:00:41 -0700 Archived-At: Cc: straw@ietf.org Subject: [straw] I-D Action: draft-ietf-straw-b2bua-rtcp-08.txt X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Oct 2015 13:00:43 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Sip Traversal Required for Applications to Work Working Group of the IETF. Title : Guidelines to support RTCP end-to-end in Back-to-Back User Agents (B2BUAs) Authors : Lorenzo Miniero Sergio Garcia Murillo Victor Pascual Filename : draft-ietf-straw-b2bua-rtcp-08.txt Pages : 18 Date : 2015-10-13 Abstract: SIP Back-to-Back User Agents (B2BUAs) are often envisaged to also be on the media path, rather than just intercepting signalling. This means that B2BUAs often implement an RTP/RTCP stack as well, whether to act as media transcoders or to just passthrough the media themselves, thus leading to separate multimedia sessions that the B2BUA correlates and bridges together. If not disciplined, though, this behaviour can severely impact the communication experience, especially when statistics and feedback information contained in RTCP packets get lost because of mismatches in the reported data. This document defines the proper behaviour B2BUAs should follow when also acting on the signalling/media plane in order to preserve the end-to-end functionality of RTCP. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-straw-b2bua-rtcp/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-straw-b2bua-rtcp-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-straw-b2bua-rtcp-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 16 15:41:16 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98A7B1A6FE9; Fri, 16 Oct 2015 15:41:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7IT5hD56KUmm; Fri, 16 Oct 2015 15:41:13 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F3FE1A6FD6; Fri, 16 Oct 2015 15:41:13 -0700 (PDT) Received: from [10.0.1.9] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t9GMf8Te012905 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Fri, 16 Oct 2015 17:41:09 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.9] From: "Ben Campbell" To: "Tirumaleswar Reddy" Date: Fri, 16 Oct 2015 17:41:08 -0500 Message-ID: <31791F35-F3B0-4BF8-8D4C-E95224E168C2@nostrum.com> In-Reply-To: <5e3c9e3e2f8c4bd8bb594a382a1f2d70@XCH-RCD-017.cisco.com> References: <5e3c9e3e2f8c4bd8bb594a382a1f2d70@XCH-RCD-017.cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.2r5141) Archived-At: Cc: Ram Mohan R , "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2015 22:41:15 -0000 Hi, What's the status of the update? Also, a few more comments inline: Thanks! Ben. On 9 Oct 2015, at 6:55, Tirumaleswar Reddy (tireddy) wrote: >> -----Original Message----- >> From: Ben Campbell [mailto:ben@nostrum.com] >> Sent: Thursday, October 08, 2015 10:18 PM >> To: Tirumaleswar Reddy (tireddy) >> Cc: Ram Mohan R (rmohanr); >> draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org; >> straw@ietf.org >> Subject: Re: [straw] AD Evaluation of >> draft-ietf-straw-b2bua-dtls-srtp-07 >> >> >> >> On 8 Oct 2015, at 10:45, Tirumaleswar Reddy (tireddy) wrote: >> >>>> -----Original Message----- >>>> From: Ben Campbell [mailto:ben@nostrum.com] >>>> Sent: Thursday, October 08, 2015 6:49 PM >>>> To: Ram Mohan R (rmohanr) >>>> Cc: draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org; straw@ietf.org >>>> Subject: Re: [straw] AD Evaluation of >>>> draft-ietf-straw-b2bua-dtls-srtp-07 >>>> >>>> Thanks for the response. Further comments inline. I removed >>>> sections >>>> that don't appear to need further discussion. >>>> >>>> Thanks! >>>> >>>> Ben. >>>> >>>> On 8 Oct 2015, at 4:41, Ram Mohan R (rmohanr) wrote: >>>>>> >>>> >>>> [...] >>>> >>>>>> >>>>>> >>>>>> Comments and Questions >>>>>> ====================== >>>>>> >>>>>> - There's a marked lack of mention of B2BUAs that inspect or >>>>>> modify >>>>>> media content. I realize that this draft does not seek to enable >>>>>> that particular elephant-in-the-room. Is it worth mentioning them >>>>>> as out of scope? >>>>> >>>>> In section 1.2 (Goals) we can add this text. Is this ok ? >>>>> EXISTING: >>>>> The following sections describe the behavior B2BUAs MUST follow in >>>>> order to avoid any impact to end-to-end DTLS-SRTP sessions. >>>>> >>>>> >>>>> NEW: >>>>> The following sections describe the behavior B2BUAs can follow to >>>>> avoid breaking end-to-end DTLS-SRTP sessions. >>>> B2BUAs terminating DTLS-SRTP >>>>> session are outside the scope of this document. >>> >>> I think the above line is not required. This doc discusses the >>> problem >>> with B2BUAs terminating DTLS-SRTP session, mechanism to detect such >>> B2BUA and says that B2BUA must not to be enabled in this mode. >>> >> >> See next comment... >> >>>> >>>> I think that's moving in the right direction, but there's normative >>>> text elsewhere that says b2buas MUST NOT terminate dtls-srtp. Would >>>> it make sense to say something like "B2BUAs that inspect or modify >>>> media content are outside the scope of this document"? >>>> >>>> Or is it the intent to forbid such devices ? >>> >>> The intent is to prohibit such devices because of the privacy >>> concern. >> >> That's a different answer than Ram gave. Content aware/modifying >> B2BUAs >> cannot both be forbidden and out-of-scope at the same time. >> >> I think the confusion here is around whether this draft should say >> b2buas >> MUST not terminate dtls-srtp, or to say that they cannot under most >> circumstances without breaking 4474/4474bis identity signatures. >> The former needs 2119 language, the latter is just a statement of >> fact. > > I think we should go with the former, otherwise it creates a privacy > problem. While I agree with the sentiment, there's a bit of a standing problem here. We can't really force B2BUA vendors to even read this spec, much less comply with it. So this seems to be an attempt to put requirements on devices that don't implement the spec containing the requirement. So it seems to me the best we can do is take the approach of saying something to the effect of "The dtls-srtp framework recommends that endpoints use RFC4474 to integrity protect the fingerprint attributes. Thus, under most circumstances, B2BUAs cannot terminate the dtls-srtp connection without invalidating the signature and causing the session to fail." Basically, that effectively makes the scope of the draft "How b2bua's that want to play nice with dtls-srtp" can avoid breaking things". > >> >> There are some exceptions to the "cannot" in the above paragraph. For >> example, a b2bua that is collocated with the offerer's identity >> service could >> modify fingerprints prior to applying the identity signature. Or >> since 5763 >> only says endpoints SHOULD use 4474, a b2bua might see unprotected >> fingerprints and attempt to modify them. Does this draft mean to >> forbid >> those behaviors? > > Endpoint or SIP proxy in the endpoints network has to insert the > identity assertion to avoid B2BUA in the signaling path from > terminating the DTLS connection and decrypting the media. WebRTC also > has the same problem that without IdP and identity assertion, > malicious signaling server can decrypt the media. Right. I don't think this draft can prevent that. But it can rule it out of scope. > >> >>> >>>> >>>>>> Does this draft intend to make them illegal for SRTP protected >>>>>> sessions with it's proscription about terminating dtls? >>>>> >>>>> The behaviour for cases where B2BUA terminates DTLS-SRTP is not in >>>>> the scope of this draft. >>>>> >>>> >>>> See above comment about normative statements concerning the >>>> termination of dtls-srtp. >>>> >>>> [...] >>>> >>>>>> >>>>>> -3.1.1, 3rd paragraph from end: "the B2BUA SHOULD be prepared to >>>>>> receive DTLS, STUN and media on the ports it advertised to Bob in >>>>>> the INVITE request. " >>>>>> >>>>>> What are the consequences if it's not prepared to do so? >>>>> >>>>> The consequences can be - the messages may get dropped which in >>>>> turn >>>>> may delay STUN/DTLS checks and would requires the endpoints to >>>>> re-transmit the messages. >>>>> >>>> >>>> Given that this is a SHOULD rather than a MUST, it would be useful >>>> to >>>> describe those consequences in the text. >>> >>> The other alternative would be to change from SHOULD to MUST and >>> avoid >>> the above problems. >> >> I would not object to that--although on reflection, isn't this >> requirement true >> of all b2buas? That is, is it in any way specific to dtls-srtp? Is >> that >> documented elsewhere? > > I don't think any other doc is discussing this point. Okay. It might have been better to have that in a more general spec than this, but it doesn't hurt to have it here as well. > >> >>> >>>> >>>> [...] >>>> >>>>>> >>>>>> Also, I think the 4474bis reference needs to be normative, given >>>>>> that >>>>>> one needs to understand that draft to implement the normative >>>>>> bits >>>>>> about >>>>>> modifying anything protected by the signature. OTOH, does this >>>>>> need >>>>>> to >>>>>> reference 4474bis, or would 4474 suffice? >>>>> >>>>> rfc4474bis is appropriate since it defines mechanisms to use SDP >>>>> parameters (like a=fingerprint) in the Identity header digest. >>>>> We will use rfc4474bis and make the reference normative. >>>> >>>> Your response is reasonable, but keep in mind that will block >>>> publication of this draft until 4474bis is published. >>> >>> Yes, https://tools.ietf.org/html/rfc4474#section-13.1 discusses >>> signature over the SIP bodies but does not go into detail like >>> rfc4474bis explains using fingerprint for generating assertion. >>> Would >>> it be okay to have normative reference of rfc4474 and informative >>> reference of rfc4474bis ? >> >> Both protect the fingerprint. 4474 just does it by protecting the >> entire >> body. 4474bis has the may be more deployable. But it seems to me that >> either work for the purposes of this draft. And since 4474bis >> proposes >> to obsolete 4474, a reference to 4474 will effectively become a >> reference to 4474bis. > > Thanks, will update draft. > >> >>> >>> >>>> >>>>> >>>>> >>>>>> >>>>>> -3.1.2: "The mechanism described in Security Considerations >>>>>> section >>>>>> MUST >>>>>> be >>>>>> used by endpoint to detect malicious B2BUA¹s that MAY attempt to >>>>>> terminate the DTLS-SRTP session." >>>>>> >>>>>> I'm not sure it makes sense for this draft to put normative >>>>>> requirements >>>>>> on endpoints. Do you mean to say they "can" use >>>>>> the mechanism? >>>>> >>>>> This has to be fixed. The idea is to have either endpoint or the >>>>> SIP >>>>> proxy >>>>> server in the endpoints network to generate Identity header on >>>>> behalf >>>>> of >>>>> the endpoint and perform identity validation procedure. >>>> >>>> I'm not sure I understand what you mean by "this has to be fixed". >>>> Do >>>> you mean fixed in the draft, or that endpoints need to fix >>>> behavior? >>> >>> I think Ram meant fix the draft. >> >> In any case, if this draft places new normative requirements on >> dtsl-srtp endpoints or identity services, it would need to update >> 5763. > > Yes, will update that this doc updates 5763. > > Cheers, > -Tiru > >> >> [...] > _______________________________________________ > straw mailing list > straw@ietf.org > https://www.ietf.org/mailman/listinfo/straw From nobody Fri Oct 16 21:37:45 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 466E91B2E57; Fri, 16 Oct 2015 21:37:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KxIS_paMpoab; Fri, 16 Oct 2015 21:37:42 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6CF4E1B2E4F; Fri, 16 Oct 2015 21:37:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=13676; q=dns/txt; s=iport; t=1445056663; x=1446266263; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=7jU6lXsY7qs2Z5Cpcx02FK7ORKLPQ95+4i8l7nTFC20=; b=Mvu6gNYssrxdl9qW1HyVYNpl1Ywb10zt270mbU0LIZ/x6NpXbd658nem 5MmoPHfqR/QlHbNtynIuGOA1rosJH0/lM7e9l3c15c0UyaZKc0Y31ma7I 8K0KD+kCYbmXEXIeF1wGzJrbf3Cqok1DJcRZTHXGySP0ZoUgcge4EE2yB c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AFAgA00CFW/5ldJa1VCYM1VG8GvW4BDYFaFwqFfQIcgRw4FAEBAQEBAQGBCoQoAQEBBAEBATE6CwwEAgEIEQMBAQEBBCMFAgIlCxQJCAIEAQ0FiDANkyKdLwaTIwEBAQEBAQEBAQEBAQEBAQEBAQEBARQEgRyFXIN3gQaEMREYGBsHBoJdgUsFliIBhRiCcIUUgViHYIoVhFqDbgEfAQFChANyAYQfJRyBBgEBAQ X-IronPort-AV: E=Sophos;i="5.17,691,1437436800"; d="scan'208";a="198884587" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-7.cisco.com with ESMTP; 17 Oct 2015 04:37:40 +0000 Received: from XCH-RCD-016.cisco.com (xch-rcd-016.cisco.com [173.37.102.26]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t9H4bdbQ022407 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sat, 17 Oct 2015 04:37:39 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-016.cisco.com (173.37.102.26) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 16 Oct 2015 23:37:23 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Fri, 16 Oct 2015 23:37:23 -0500 From: "Ram Mohan R (rmohanr)" To: Ben Campbell , "Tirumaleswar Reddy (tireddy)" Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AQHRCJWEQjW941BqI02uw6POjpmKrA== Date: Sat, 17 Oct 2015 04:37:23 +0000 Message-ID: References: <5e3c9e3e2f8c4bd8bb594a382a1f2d70@XCH-RCD-017.cisco.com> <31791F35-F3B0-4BF8-8D4C-E95224E168C2@nostrum.com> In-Reply-To: <31791F35-F3B0-4BF8-8D4C-E95224E168C2@nostrum.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.5.150821 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.34.148] Content-Type: text/plain; charset="euc-kr" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Oct 2015 04:37:45 -0000 SEkgQmVuLA0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW4gQ2FtcGJl bGwgPGJlbkBub3N0cnVtLmNvbT4NCkRhdGU6IFNhdHVyZGF5LCAxNyBPY3RvYmVyIDIwMTUgNDox MSBhbQ0KVG86ICJUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIiA8dGlyZWRkeUBjaXNjby5j b20+DQpDYzogQ2lzY28gRW1wbG95ZWUgPHJtb2hhbnJAY2lzY28uY29tPiwNCiJkcmFmdC1pZXRm LXN0cmF3LWIyYnVhLWR0bHMtc3J0cC5hbGxAaWV0Zi5vcmciDQo8ZHJhZnQtaWV0Zi1zdHJhdy1i MmJ1YS1kdGxzLXNydHAuYWxsQGlldGYub3JnPiwgInN0cmF3QGlldGYub3JnIg0KPHN0cmF3QGll dGYub3JnPg0KU3ViamVjdDogUmU6IFtzdHJhd10gQUQgRXZhbHVhdGlvbiBvZiBkcmFmdC1pZXRm LXN0cmF3LWIyYnVhLWR0bHMtc3J0cC0wNw0KDQo+SGksDQo+DQo+V2hhdCdzIHRoZSBzdGF0dXMg b2YgdGhlIHVwZGF0ZT8NCg0KSSB3aWxsIHNlbmQgdGhlIGRpZmZzIHNvb24uDQo+DQo+QWxzbywg YSBmZXcgbW9yZSBjb21tZW50cyBpbmxpbmU6DQo+DQo+VGhhbmtzIQ0KPg0KPkJlbi4NCj4NCj4N Cj5PbiA5IE9jdCAyMDE1LCBhdCA2OjU1LCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIHdy b3RlOg0KPg0KPj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+Pj4gRnJvbTogQmVuIENh bXBiZWxsIFttYWlsdG86YmVuQG5vc3RydW0uY29tXQ0KPj4+IFNlbnQ6IFRodXJzZGF5LCBPY3Rv YmVyIDA4LCAyMDE1IDEwOjE4IFBNDQo+Pj4gVG86IFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRk eSkNCj4+PiBDYzogUmFtIE1vaGFuIFIgKHJtb2hhbnIpOw0KPj4+IGRyYWZ0LWlldGYtc3RyYXct YjJidWEtZHRscy1zcnRwLmFsbEBpZXRmLm9yZzsNCj4+PiBzdHJhd0BpZXRmLm9yZw0KPj4+IFN1 YmplY3Q6IFJlOiBbc3RyYXddIEFEIEV2YWx1YXRpb24gb2YNCj4+PiBkcmFmdC1pZXRmLXN0cmF3 LWIyYnVhLWR0bHMtc3J0cC0wNw0KPj4+DQo+Pj4NCj4+Pg0KPj4+IE9uIDggT2N0IDIwMTUsIGF0 IDEwOjQ1LCBUaXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIHdyb3RlOg0KPj4+DQo+Pj4+PiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4+Pj4gRnJvbTogQmVuIENhbXBiZWxsIFttYWls dG86YmVuQG5vc3RydW0uY29tXQ0KPj4+Pj4gU2VudDogVGh1cnNkYXksIE9jdG9iZXIgMDgsIDIw MTUgNjo0OSBQTQ0KPj4+Pj4gVG86IFJhbSBNb2hhbiBSIChybW9oYW5yKQ0KPj4+Pj4gQ2M6IGRy YWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1zcnRwLmFsbEBpZXRmLm9yZzsgc3RyYXdAaWV0Zi5v cmcNCj4+Pj4+IFN1YmplY3Q6IFJlOiBbc3RyYXddIEFEIEV2YWx1YXRpb24gb2YNCj4+Pj4+IGRy YWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1zcnRwLTA3DQo+Pj4+Pg0KPj4+Pj4gVGhhbmtzIGZv ciB0aGUgcmVzcG9uc2UuIEZ1cnRoZXIgY29tbWVudHMgaW5saW5lLiBJIHJlbW92ZWQNCj4+Pj4+ IHNlY3Rpb25zDQo+Pj4+PiB0aGF0IGRvbid0IGFwcGVhciB0byBuZWVkIGZ1cnRoZXIgZGlzY3Vz c2lvbi4NCj4+Pj4+DQo+Pj4+PiBUaGFua3MhDQo+Pj4+Pg0KPj4+Pj4gQmVuLg0KPj4+Pj4NCj4+ Pj4+IE9uIDggT2N0IDIwMTUsIGF0IDQ6NDEsIFJhbSBNb2hhbiBSIChybW9oYW5yKSB3cm90ZToN Cj4+Pj4+Pj4NCj4+Pj4+DQo+Pj4+PiBbLi4uXQ0KPj4+Pj4NCj4+Pj4+Pj4NCj4+Pj4+Pj4NCj4+ Pj4+Pj4gQ29tbWVudHMgYW5kIFF1ZXN0aW9ucw0KPj4+Pj4+PiA9PT09PT09PT09PT09PT09PT09 PT09DQo+Pj4+Pj4+DQo+Pj4+Pj4+IC0gVGhlcmUncyBhIG1hcmtlZCBsYWNrIG9mIG1lbnRpb24g b2YgQjJCVUFzIHRoYXQgaW5zcGVjdCBvcg0KPj4+Pj4+PiBtb2RpZnkNCj4+Pj4+Pj4gbWVkaWEg Y29udGVudC4gSSByZWFsaXplIHRoYXQgdGhpcyBkcmFmdCBkb2VzIG5vdCBzZWVrIHRvIGVuYWJs ZQ0KPj4+Pj4+PiB0aGF0IHBhcnRpY3VsYXIgZWxlcGhhbnQtaW4tdGhlLXJvb20uIElzIGl0IHdv cnRoIG1lbnRpb25pbmcgdGhlbQ0KPj4+Pj4+PiBhcyBvdXQgb2Ygc2NvcGU/DQo+Pj4+Pj4NCj4+ Pj4+PiBJbiBzZWN0aW9uIDEuMiAoR29hbHMpIHdlIGNhbiBhZGQgdGhpcyB0ZXh0LiBJcyB0aGlz IG9rID8NCj4+Pj4+PiBFWElTVElORzoNCj4+Pj4+PiBUaGUgZm9sbG93aW5nIHNlY3Rpb25zIGRl c2NyaWJlIHRoZSBiZWhhdmlvciBCMkJVQXMgTVVTVCBmb2xsb3cgaW4NCj4+Pj4+PiBvcmRlciB0 byBhdm9pZCBhbnkgaW1wYWN0IHRvIGVuZC10by1lbmQgRFRMUy1TUlRQIHNlc3Npb25zLg0KPj4+ Pj4+DQo+Pj4+Pj4NCj4+Pj4+PiBORVc6DQo+Pj4+Pj4gVGhlIGZvbGxvd2luZyBzZWN0aW9ucyBk ZXNjcmliZSB0aGUgYmVoYXZpb3IgQjJCVUFzIGNhbiBmb2xsb3cgdG8NCj4+Pj4+PiBhdm9pZCBi cmVha2luZyBlbmQtdG8tZW5kIERUTFMtU1JUUCBzZXNzaW9ucy4NCj4+Pj4+IEIyQlVBcyB0ZXJt aW5hdGluZyBEVExTLVNSVFANCj4+Pj4+PiBzZXNzaW9uIGFyZSBvdXRzaWRlIHRoZSBzY29wZSBv ZiB0aGlzIGRvY3VtZW50Lg0KPj4+Pg0KPj4+PiBJIHRoaW5rIHRoZSBhYm92ZSBsaW5lIGlzIG5v dCByZXF1aXJlZC4gVGhpcyBkb2MgZGlzY3Vzc2VzIHRoZQ0KPj4+PiBwcm9ibGVtDQo+Pj4+IHdp dGggQjJCVUFzIHRlcm1pbmF0aW5nIERUTFMtU1JUUCBzZXNzaW9uLCBtZWNoYW5pc20gdG8gZGV0 ZWN0IHN1Y2gNCj4+Pj4gQjJCVUEgYW5kIHNheXMgdGhhdCBCMkJVQSBtdXN0IG5vdCB0byBiZSBl bmFibGVkIGluIHRoaXMgbW9kZS4NCj4+Pj4NCj4+Pg0KPj4+IFNlZSBuZXh0IGNvbW1lbnQuLi4N Cj4+Pg0KPj4+Pj4NCj4+Pj4+IEkgdGhpbmsgdGhhdCdzIG1vdmluZyBpbiB0aGUgcmlnaHQgZGly ZWN0aW9uLCBidXQgdGhlcmUncyBub3JtYXRpdmUNCj4+Pj4+IHRleHQgZWxzZXdoZXJlIHRoYXQg c2F5cyBiMmJ1YXMgTVVTVCBOT1QgdGVybWluYXRlIGR0bHMtc3J0cC4gV291bGQNCj4+Pj4+IGl0 IG1ha2Ugc2Vuc2UgdG8gc2F5IHNvbWV0aGluZyBsaWtlICJCMkJVQXMgdGhhdCBpbnNwZWN0IG9y IG1vZGlmeQ0KPj4+Pj4gbWVkaWEgY29udGVudCBhcmUgb3V0c2lkZSB0aGUgc2NvcGUgb2YgdGhp cyBkb2N1bWVudCI/DQo+Pj4+Pg0KPj4+Pj4gT3IgaXMgaXQgdGhlIGludGVudCB0byBmb3JiaWQg c3VjaCBkZXZpY2VzID8NCj4+Pj4NCj4+Pj4gVGhlIGludGVudCBpcyB0byBwcm9oaWJpdCBzdWNo IGRldmljZXMgYmVjYXVzZSBvZiB0aGUgcHJpdmFjeQ0KPj4+PiBjb25jZXJuLg0KPj4+DQo+Pj4g VGhhdCdzIGEgZGlmZmVyZW50IGFuc3dlciB0aGFuIFJhbSBnYXZlLiBDb250ZW50IGF3YXJlL21v ZGlmeWluZw0KPj4+IEIyQlVBcw0KPj4+IGNhbm5vdCBib3RoIGJlIGZvcmJpZGRlbiBhbmQgb3V0 LW9mLXNjb3BlIGF0IHRoZSBzYW1lIHRpbWUuDQo+Pj4NCj4+PiBJIHRoaW5rIHRoZSBjb25mdXNp b24gaGVyZSBpcyBhcm91bmQgd2hldGhlciB0aGlzIGRyYWZ0IHNob3VsZCBzYXkNCj4+PiBiMmJ1 YXMNCj4+PiBNVVNUIG5vdCB0ZXJtaW5hdGUgZHRscy1zcnRwLCBvciB0byBzYXkgdGhhdCB0aGV5 IGNhbm5vdCB1bmRlciBtb3N0DQo+Pj4gY2lyY3Vtc3RhbmNlcyB3aXRob3V0IGJyZWFraW5nIDQ0 NzQvNDQ3NGJpcyBpZGVudGl0eSBzaWduYXR1cmVzLg0KPj4+IFRoZSBmb3JtZXIgbmVlZHMgMjEx OSBsYW5ndWFnZSwgdGhlIGxhdHRlciBpcyBqdXN0IGEgc3RhdGVtZW50IG9mDQo+Pj4gZmFjdC4N Cj4+DQo+PiBJIHRoaW5rIHdlIHNob3VsZCBnbyB3aXRoIHRoZSBmb3JtZXIsIG90aGVyd2lzZSBp dCBjcmVhdGVzIGEgcHJpdmFjeQ0KPj4gcHJvYmxlbS4NCj4NCj5XaGlsZSBJIGFncmVlIHdpdGgg dGhlIHNlbnRpbWVudCwgdGhlcmUncyBhIGJpdCBvZiBhIHN0YW5kaW5nIHByb2JsZW0NCj5oZXJl LiBXZSBjYW4ndCByZWFsbHkgZm9yY2UgQjJCVUEgdmVuZG9ycyB0byBldmVuIHJlYWQgdGhpcyBz cGVjLCBtdWNoDQo+bGVzcyBjb21wbHkgd2l0aCBpdC4gU28gdGhpcyBzZWVtcyB0byBiZSBhbiBh dHRlbXB0IHRvIHB1dCByZXF1aXJlbWVudHMNCj5vbiBkZXZpY2VzIHRoYXQgZG9uJ3QgaW1wbGVt ZW50IHRoZSBzcGVjIGNvbnRhaW5pbmcgdGhlIHJlcXVpcmVtZW50Lg0KPg0KPlNvIGl0IHNlZW1z IHRvIG1lIHRoZSBiZXN0IHdlIGNhbiBkbyBpcyB0YWtlIHRoZSBhcHByb2FjaCBvZiBzYXlpbmcN Cj5zb21ldGhpbmcgdG8gdGhlIGVmZmVjdCBvZiAiVGhlIGR0bHMtc3J0cCBmcmFtZXdvcmsgcmVj b21tZW5kcyB0aGF0DQo+ZW5kcG9pbnRzIHVzZSBSRkM0NDc0IHRvIGludGVncml0eSBwcm90ZWN0 IHRoZSBmaW5nZXJwcmludCBhdHRyaWJ1dGVzLg0KPlRodXMsIHVuZGVyIG1vc3QgY2lyY3Vtc3Rh bmNlcywgQjJCVUFzIGNhbm5vdCB0ZXJtaW5hdGUgdGhlIGR0bHMtc3J0cA0KPmNvbm5lY3Rpb24g d2l0aG91dCBpbnZhbGlkYXRpbmcgdGhlIHNpZ25hdHVyZSBhbmQgY2F1c2luZyB0aGUgc2Vzc2lv biB0bw0KPmZhaWwuIg0KPg0KPkJhc2ljYWxseSwgdGhhdCBlZmZlY3RpdmVseSBtYWtlcyB0aGUg c2NvcGUgb2YgdGhlIGRyYWZ0ICJIb3cgYjJidWEncw0KPnRoYXQgd2FudCB0byBwbGF5IG5pY2Ug d2l0aCBkdGxzLXNydHAiIGNhbiBhdm9pZCBicmVha2luZyB0aGluZ3MiLg0KDQpBZ3JlZSB3aXRo IHlvdSBvbiB0aGUgcHJhY3RpY2FsIGFzcGVjdHMgb2YgdGhpcyBiZWluZyBpbXBsZW1lbnRlZC4g SSBhbQ0KZmluZSB3aXRoIA0KYWRkaW5nIGFib3ZlIHN1Z2dlc3RlZCB0ZXh0Lg0KDQo+DQo+Pg0K Pj4+DQo+Pj4gVGhlcmUgYXJlIHNvbWUgZXhjZXB0aW9ucyB0byB0aGUgImNhbm5vdCIgaW4gdGhl IGFib3ZlIHBhcmFncmFwaC4gRm9yDQo+Pj4gZXhhbXBsZSwgYSBiMmJ1YSB0aGF0IGlzIGNvbGxv Y2F0ZWQgd2l0aCB0aGUgb2ZmZXJlcidzIGlkZW50aXR5DQo+Pj4gc2VydmljZSBjb3VsZA0KPj4+ IG1vZGlmeSBmaW5nZXJwcmludHMgcHJpb3IgdG8gYXBwbHlpbmcgdGhlIGlkZW50aXR5IHNpZ25h dHVyZS4gT3INCj4+PiBzaW5jZSA1NzYzDQo+Pj4gb25seSBzYXlzIGVuZHBvaW50cyBTSE9VTEQg dXNlIDQ0NzQsIGEgYjJidWEgbWlnaHQgc2VlIHVucHJvdGVjdGVkDQo+Pj4gZmluZ2VycHJpbnRz IGFuZCBhdHRlbXB0IHRvIG1vZGlmeSB0aGVtLiAgRG9lcyB0aGlzIGRyYWZ0IG1lYW4gdG8NCj4+ PiBmb3JiaWQNCj4+PiB0aG9zZSBiZWhhdmlvcnM/DQo+Pg0KPj4gRW5kcG9pbnQgb3IgU0lQIHBy b3h5IGluIHRoZSBlbmRwb2ludHMgbmV0d29yayBoYXMgdG8gaW5zZXJ0IHRoZQ0KPj4gaWRlbnRp dHkgYXNzZXJ0aW9uIHRvIGF2b2lkIEIyQlVBIGluIHRoZSBzaWduYWxpbmcgcGF0aCBmcm9tDQo+ PiB0ZXJtaW5hdGluZyB0aGUgRFRMUyBjb25uZWN0aW9uIGFuZCBkZWNyeXB0aW5nIHRoZSBtZWRp YS4gV2ViUlRDIGFsc28NCj4+IGhhcyB0aGUgc2FtZSBwcm9ibGVtIHRoYXQgd2l0aG91dCBJZFAg YW5kIGlkZW50aXR5IGFzc2VydGlvbiwNCj4+IG1hbGljaW91cyBzaWduYWxpbmcgc2VydmVyIGNh biBkZWNyeXB0IHRoZSBtZWRpYS4NCj4NCj5SaWdodC4gSSBkb24ndCB0aGluayB0aGlzIGRyYWZ0 IGNhbiBwcmV2ZW50IHRoYXQuIEJ1dCBpdCBjYW4gcnVsZSBpdCBvdXQNCj5vZiBzY29wZS4NCg0K QWdyZWVkLiANCg0KPg0KPj4NCj4+Pg0KPj4+Pg0KPj4+Pj4NCj4+Pj4+Pj4gRG9lcyB0aGlzIGRy YWZ0IGludGVuZCB0byBtYWtlIHRoZW0gaWxsZWdhbCBmb3IgU1JUUCBwcm90ZWN0ZWQNCj4+Pj4+ Pj4gc2Vzc2lvbnMgd2l0aCBpdCdzIHByb3NjcmlwdGlvbiBhYm91dCB0ZXJtaW5hdGluZyBkdGxz Pw0KPj4+Pj4+DQo+Pj4+Pj4gVGhlIGJlaGF2aW91ciBmb3IgY2FzZXMgd2hlcmUgQjJCVUEgdGVy bWluYXRlcyBEVExTLVNSVFAgaXMgbm90IGluDQo+Pj4+Pj4gdGhlIHNjb3BlIG9mIHRoaXMgZHJh ZnQuDQo+Pj4+Pj4NCj4+Pj4+DQo+Pj4+PiBTZWUgYWJvdmUgY29tbWVudCBhYm91dCBub3JtYXRp dmUgc3RhdGVtZW50cyBjb25jZXJuaW5nIHRoZQ0KPj4+Pj4gdGVybWluYXRpb24gb2YgZHRscy1z cnRwLg0KPj4+Pj4NCj4+Pj4+IFsuLi5dDQo+Pj4+Pg0KPj4+Pj4+Pg0KPj4+Pj4+PiAtMy4xLjEs IDNyZCBwYXJhZ3JhcGggZnJvbSBlbmQ6ICJ0aGUgQjJCVUEgU0hPVUxEIGJlIHByZXBhcmVkIHRv DQo+Pj4+Pj4+IHJlY2VpdmUgRFRMUywgU1RVTiBhbmQgbWVkaWEgb24gdGhlIHBvcnRzIGl0IGFk dmVydGlzZWQgdG8gQm9iIGluDQo+Pj4+Pj4+IHRoZSBJTlZJVEUgcmVxdWVzdC4gIg0KPj4+Pj4+ Pg0KPj4+Pj4+PiBXaGF0IGFyZSB0aGUgY29uc2VxdWVuY2VzIGlmIGl0J3Mgbm90IHByZXBhcmVk IHRvIGRvIHNvPw0KPj4+Pj4+DQo+Pj4+Pj4gVGhlIGNvbnNlcXVlbmNlcyBjYW4gYmUgLSB0aGUg bWVzc2FnZXMgbWF5IGdldCBkcm9wcGVkIHdoaWNoIGluDQo+Pj4+Pj4gdHVybg0KPj4+Pj4+IG1h eSBkZWxheSBTVFVOL0RUTFMgY2hlY2tzIGFuZCB3b3VsZCByZXF1aXJlcyB0aGUgZW5kcG9pbnRz IHRvDQo+Pj4+Pj4gcmUtdHJhbnNtaXQgdGhlIG1lc3NhZ2VzLg0KPj4+Pj4+DQo+Pj4+Pg0KPj4+ Pj4gR2l2ZW4gdGhhdCB0aGlzIGlzIGEgU0hPVUxEIHJhdGhlciB0aGFuIGEgTVVTVCwgaXQgd291 bGQgYmUgdXNlZnVsDQo+Pj4+PiB0bw0KPj4+Pj4gZGVzY3JpYmUgdGhvc2UgY29uc2VxdWVuY2Vz IGluIHRoZSB0ZXh0Lg0KPj4+Pg0KPj4+PiBUaGUgb3RoZXIgYWx0ZXJuYXRpdmUgd291bGQgYmUg dG8gY2hhbmdlIGZyb20gU0hPVUxEIHRvIE1VU1QgYW5kDQo+Pj4+IGF2b2lkDQo+Pj4+IHRoZSBh Ym92ZSBwcm9ibGVtcy4NCj4+Pg0KPj4+IEkgd291bGQgbm90IG9iamVjdCB0byB0aGF0LS1hbHRo b3VnaCBvbiByZWZsZWN0aW9uLCBpc24ndCB0aGlzDQo+Pj4gcmVxdWlyZW1lbnQgdHJ1ZQ0KPj4+ IG9mIGFsbCBiMmJ1YXM/IFRoYXQgaXMsIGlzIGl0IGluIGFueSB3YXkgc3BlY2lmaWMgdG8gZHRs cy1zcnRwPyAgSXMNCj4+PiB0aGF0DQo+Pj4gZG9jdW1lbnRlZCBlbHNld2hlcmU/DQo+Pg0KPj4g SSBkb24ndCB0aGluayBhbnkgb3RoZXIgZG9jIGlzIGRpc2N1c3NpbmcgdGhpcyBwb2ludC4NCj4N Cj5Pa2F5LiBJdCBtaWdodCBoYXZlIGJlZW4gYmV0dGVyIHRvIGhhdmUgdGhhdCBpbiBhIG1vcmUg Z2VuZXJhbCBzcGVjIHRoYW4NCj50aGlzLCBidXQgaXQgZG9lc24ndCBodXJ0IHRvIGhhdmUgaXQg aGVyZSBhcyB3ZWxsLg0KDQpPSy4gU28gd2Ugd2lsbCBtYWtlIGl0IE1VU1QNCg0KUmVnYXJkcywN ClJhbQ0KDQo+DQo+Pg0KPj4+DQo+Pj4+DQo+Pj4+Pg0KPj4+Pj4gWy4uLl0NCj4+Pj4+DQo+Pj4+ Pj4+DQo+Pj4+Pj4+IEFsc28sIEkgdGhpbmsgdGhlIDQ0NzRiaXMgcmVmZXJlbmNlIG5lZWRzIHRv IGJlIG5vcm1hdGl2ZSwgZ2l2ZW4NCj4+Pj4+Pj4gdGhhdA0KPj4+Pj4+PiBvbmUgbmVlZHMgdG8g dW5kZXJzdGFuZCB0aGF0IGRyYWZ0IHRvIGltcGxlbWVudCB0aGUgbm9ybWF0aXZlDQo+Pj4+Pj4+ IGJpdHMNCj4+Pj4+Pj4gYWJvdXQNCj4+Pj4+Pj4gbW9kaWZ5aW5nIGFueXRoaW5nIHByb3RlY3Rl ZCBieSB0aGUgc2lnbmF0dXJlLiBPVE9ILCBkb2VzIHRoaXMNCj4+Pj4+Pj4gbmVlZA0KPj4+Pj4+ PiB0bw0KPj4+Pj4+PiByZWZlcmVuY2UgNDQ3NGJpcywgb3Igd291bGQgNDQ3NCBzdWZmaWNlPw0K Pj4+Pj4+DQo+Pj4+Pj4gcmZjNDQ3NGJpcyBpcyBhcHByb3ByaWF0ZSBzaW5jZSBpdCBkZWZpbmVz IG1lY2hhbmlzbXMgdG8gdXNlIFNEUA0KPj4+Pj4+IHBhcmFtZXRlcnMgKGxpa2UgYT1maW5nZXJw cmludCkgaW4gdGhlIElkZW50aXR5IGhlYWRlciBkaWdlc3QuDQo+Pj4+Pj4gV2Ugd2lsbCB1c2Ug cmZjNDQ3NGJpcyBhbmQgbWFrZSB0aGUgcmVmZXJlbmNlIG5vcm1hdGl2ZS4NCj4+Pj4+DQo+Pj4+ PiBZb3VyIHJlc3BvbnNlIGlzIHJlYXNvbmFibGUsIGJ1dCBrZWVwIGluIG1pbmQgdGhhdCB3aWxs IGJsb2NrDQo+Pj4+PiBwdWJsaWNhdGlvbiBvZiB0aGlzIGRyYWZ0IHVudGlsIDQ0NzRiaXMgaXMg cHVibGlzaGVkLg0KPj4+Pg0KPj4+PiBZZXMsIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9y ZmM0NDc0I3NlY3Rpb24tMTMuMSBkaXNjdXNzZXMNCj4+Pj4gc2lnbmF0dXJlIG92ZXIgdGhlIFNJ UCBib2RpZXMgYnV0IGRvZXMgbm90IGdvIGludG8gZGV0YWlsIGxpa2UNCj4+Pj4gcmZjNDQ3NGJp cyBleHBsYWlucyB1c2luZyBmaW5nZXJwcmludCBmb3IgZ2VuZXJhdGluZyBhc3NlcnRpb24uDQo+ Pj4+IFdvdWxkDQo+Pj4+IGl0IGJlIG9rYXkgdG8gaGF2ZSBub3JtYXRpdmUgcmVmZXJlbmNlIG9m IHJmYzQ0NzQgYW5kIGluZm9ybWF0aXZlDQo+Pj4+IHJlZmVyZW5jZSBvZiByZmM0NDc0YmlzID8N Cj4+Pg0KPj4+IEJvdGggcHJvdGVjdCB0aGUgZmluZ2VycHJpbnQuIDQ0NzQganVzdCBkb2VzIGl0 IGJ5IHByb3RlY3RpbmcgdGhlDQo+Pj4gZW50aXJlDQo+Pj4gYm9keS4gNDQ3NGJpcyBoYXMgdGhl IG1heSBiZSBtb3JlIGRlcGxveWFibGUuIEJ1dCBpdCBzZWVtcyB0byBtZSB0aGF0DQo+Pj4gZWl0 aGVyIHdvcmsgZm9yIHRoZSBwdXJwb3NlcyBvZiB0aGlzIGRyYWZ0LiBBbmQgc2luY2UgNDQ3NGJp cw0KPj4+IHByb3Bvc2VzDQo+Pj4gdG8gb2Jzb2xldGUgNDQ3NCwgYSByZWZlcmVuY2UgdG8gNDQ3 NCB3aWxsIGVmZmVjdGl2ZWx5IGJlY29tZSBhDQo+Pj4gcmVmZXJlbmNlIHRvIDQ0NzRiaXMuDQo+ Pg0KPj4gVGhhbmtzLCB3aWxsIHVwZGF0ZSBkcmFmdC4NCj4+DQo+Pj4NCj4+Pj4NCj4+Pj4NCj4+ Pj4+DQo+Pj4+Pj4NCj4+Pj4+Pg0KPj4+Pj4+Pg0KPj4+Pj4+PiAtMy4xLjI6ICJUaGUgbWVjaGFu aXNtIGRlc2NyaWJlZCBpbiBTZWN1cml0eSBDb25zaWRlcmF0aW9ucw0KPj4+Pj4+PiBzZWN0aW9u DQo+Pj4+Pj4+IE1VU1QNCj4+Pj4+Pj4gYmUNCj4+Pj4+Pj4gdXNlZCBieSBlbmRwb2ludCB0byBk ZXRlY3QgbWFsaWNpb3VzIEIyQlVBqfZzIHRoYXQgTUFZIGF0dGVtcHQgdG8NCj4+Pj4+Pj4gdGVy bWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lvbi4iDQo+Pj4+Pj4+DQo+Pj4+Pj4+IEknbSBub3Qg c3VyZSBpdCBtYWtlcyBzZW5zZSBmb3IgdGhpcyBkcmFmdCB0byBwdXQgbm9ybWF0aXZlDQo+Pj4+ Pj4+IHJlcXVpcmVtZW50cw0KPj4+Pj4+PiBvbiBlbmRwb2ludHMuIERvIHlvdSBtZWFuIHRvIHNh eSB0aGV5ICJjYW4iIHVzZQ0KPj4+Pj4+PiB0aGUgbWVjaGFuaXNtPw0KPj4+Pj4+DQo+Pj4+Pj4g VGhpcyBoYXMgdG8gYmUgZml4ZWQuIFRoZSBpZGVhIGlzIHRvIGhhdmUgZWl0aGVyIGVuZHBvaW50 IG9yIHRoZQ0KPj4+Pj4+IFNJUA0KPj4+Pj4+IHByb3h5DQo+Pj4+Pj4gc2VydmVyIGluIHRoZSBl bmRwb2ludHMgbmV0d29yayB0byBnZW5lcmF0ZSBJZGVudGl0eSBoZWFkZXIgb24NCj4+Pj4+PiBi ZWhhbGYNCj4+Pj4+PiBvZg0KPj4+Pj4+IHRoZSBlbmRwb2ludCBhbmQgcGVyZm9ybSBpZGVudGl0 eSB2YWxpZGF0aW9uIHByb2NlZHVyZS4NCj4+Pj4+DQo+Pj4+PiBJJ20gbm90IHN1cmUgSSB1bmRl cnN0YW5kIHdoYXQgeW91IG1lYW4gYnkgInRoaXMgaGFzIHRvIGJlIGZpeGVkIi4NCj4+Pj4+IERv DQo+Pj4+PiB5b3UgbWVhbiBmaXhlZCBpbiB0aGUgZHJhZnQsIG9yIHRoYXQgZW5kcG9pbnRzIG5l ZWQgdG8gZml4DQo+Pj4+PiBiZWhhdmlvcj8NCj4+Pj4NCj4+Pj4gSSB0aGluayBSYW0gbWVhbnQg Zml4IHRoZSBkcmFmdC4NCj4+Pg0KPj4+IEluIGFueSBjYXNlLCBpZiB0aGlzIGRyYWZ0IHBsYWNl cyBuZXcgbm9ybWF0aXZlIHJlcXVpcmVtZW50cyBvbg0KPj4+IGR0c2wtc3J0cCBlbmRwb2ludHMg b3IgaWRlbnRpdHkgc2VydmljZXMsIGl0IHdvdWxkIG5lZWQgdG8gdXBkYXRlDQo+Pj4gNTc2My4N Cj4+DQo+PiBZZXMsIHdpbGwgdXBkYXRlIHRoYXQgdGhpcyBkb2MgdXBkYXRlcyA1NzYzLg0KPj4N Cj4+IENoZWVycywNCj4+IC1UaXJ1DQo+Pg0KPj4+DQo+Pj4gWy4uLl0NCj4+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBzdHJhdyBtYWlsaW5nIGxp c3QNCj4+IHN0cmF3QGlldGYub3JnDQo+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3N0cmF3DQoNCg== From nobody Sat Oct 17 20:27:01 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 625DF1A8859; Sat, 17 Oct 2015 20:27:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_HTML_ATTACH=0.01, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ezWm8bGOmUeY; Sat, 17 Oct 2015 20:26:51 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A15E61A8855; Sat, 17 Oct 2015 20:26:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=165656; q=dns/txt; s=iport; t=1445138810; x=1446348410; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=/AESRUZjGojgFvRrbRV3p8nhx4iAMgUpp8lT2hOKVD8=; b=Ti4mK/KjNTDGOYlsjRv4trzkwCSCIi2o0TcAt8oNEmnHBmZRRWBwLSim iw2RuSx3rZc9Qfz94iOz5YNQp9kUAg+cNRvItpzaIsZ9l5bAQqQ3ewPgJ 7VBiDTuww05c3pLlPJiduoj3usZpBK/8ou4I74dsmxtlGhZRtuN7nXIXO 4=; X-Files: Diff_ draft-ietf-straw-b2bua-dtls-srtp-07.txt - draft-ietf-straw-b2bua-dtls-srtp-08.txt.html, draft-ietf-straw-b2bua-dtls-srtp-08.txt : 83008, 26018 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0ABCABwECNW/4MNJK0ZAjoJgzZUYQ4GhS+4Qg6BVwMXAQuEIYFVAwICHIEAOBQBAQEBAQEBgQqELQEBAQQBAQEXAQwGOgcLDAQCAQgRAwEBAQEgAQYFAgIfBgsUCQgCBAENBQ6IDQMSDYs4hxydLwaNcA2EfAEBAQEBAQEBAQEBAQEBAQEBAQEBAQ8JhniDd4EGglCBTwsHCgEGMAoMAQQHBoJdgUsBBIc+VowTgXwBgk2CS4JwglxDgXWBWBUzg3SDJIQPhgh/g1uDbgERDgFDgWCCI3IBhB8HFwccgQYBAQE X-IronPort-AV: E=Sophos;i="5.17,695,1437436800"; d="txt'?html'217?scan'217,208,217";a="197951011" Received: from alln-core-1.cisco.com ([173.36.13.131]) by alln-iport-2.cisco.com with ESMTP; 18 Oct 2015 03:26:47 +0000 Received: from XCH-RCD-018.cisco.com (xch-rcd-018.cisco.com [173.37.102.28]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t9I3QlWO020306 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 18 Oct 2015 03:26:47 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-RCD-018.cisco.com (173.37.102.28) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Sat, 17 Oct 2015 22:26:30 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.000; Sat, 17 Oct 2015 22:26:30 -0500 From: "Ram Mohan R (rmohanr)" To: "Ram Mohan R (rmohanr)" , Ben Campbell , "Tirumaleswar Reddy (tireddy)" Thread-Topic: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 Thread-Index: AQHRCVTHQCAS/Xc7NkmXzWtjiZxHmQ== Date: Sun, 18 Oct 2015 03:26:30 +0000 Message-ID: References: <5e3c9e3e2f8c4bd8bb594a382a1f2d70@XCH-RCD-017.cisco.com> <31791F35-F3B0-4BF8-8D4C-E95224E168C2@nostrum.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.5.150821 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.77.9] Content-Type: multipart/mixed; boundary="_003_D2490FA14642Brmohanrciscocom_" MIME-Version: 1.0 Archived-At: Cc: "draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org" , "straw@ietf.org" Subject: Re: [straw] AD Evaluation of draft-ietf-straw-b2bua-dtls-srtp-07 X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Oct 2015 03:27:00 -0000 --_003_D2490FA14642Brmohanrciscocom_ Content-Type: text/plain; charset="euc-kr" Content-ID: Content-Transfer-Encoding: base64 SGkgQmVuLA0KDQpBdHRhY2hlZCBhcmUgdGhlIGRpZmZzIHdpdGggdGhlIGNvbW1lbnRzIGluY29y cG9yYXRlZC4gUGxlYXNlIHJldmlldyBhbmQNCmxldCB1cyBrbm93IGlmIHdlIGhhdmUgbWlzc2Vk IHNvbWUgdGhpbmcuDQoNClJlZ2FyZHMsDQpSYW0NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS0NCkZyb206IHN0cmF3IDxzdHJhdy1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgQ2lz Y28gRW1wbG95ZWUNCjxybW9oYW5yQGNpc2NvLmNvbT4NCkRhdGU6IFNhdHVyZGF5LCAxNyBPY3Rv YmVyIDIwMTUgMTA6MDcgYW0NClRvOiBCZW4gQ2FtcGJlbGwgPGJlbkBub3N0cnVtLmNvbT4sICJU aXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIg0KPHRpcmVkZHlAY2lzY28uY29tPg0KQ2M6ICJk cmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0cC5hbGxAaWV0Zi5vcmciDQo8ZHJhZnQtaWV0 Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAuYWxsQGlldGYub3JnPiwgInN0cmF3QGlldGYub3JnIg0K PHN0cmF3QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtzdHJhd10gQUQgRXZhbHVhdGlvbiBvZiBk cmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0cC0wNw0KDQo+SEkgQmVuLA0KPg0KPg0KPi0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+RnJvbTogQmVuIENhbXBiZWxsIDxiZW5Abm9zdHJ1 bS5jb20+DQo+RGF0ZTogU2F0dXJkYXksIDE3IE9jdG9iZXIgMjAxNSA0OjExIGFtDQo+VG86ICJU aXJ1bWFsZXN3YXIgUmVkZHkgKHRpcmVkZHkpIiA8dGlyZWRkeUBjaXNjby5jb20+DQo+Q2M6IENp c2NvIEVtcGxveWVlIDxybW9oYW5yQGNpc2NvLmNvbT4sDQo+ImRyYWZ0LWlldGYtc3RyYXctYjJi dWEtZHRscy1zcnRwLmFsbEBpZXRmLm9yZyINCj48ZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxz LXNydHAuYWxsQGlldGYub3JnPiwgInN0cmF3QGlldGYub3JnIg0KPjxzdHJhd0BpZXRmLm9yZz4N Cj5TdWJqZWN0OiBSZTogW3N0cmF3XSBBRCBFdmFsdWF0aW9uIG9mIGRyYWZ0LWlldGYtc3RyYXct YjJidWEtZHRscy1zcnRwLTA3DQo+DQo+PkhpLA0KPj4NCj4+V2hhdCdzIHRoZSBzdGF0dXMgb2Yg dGhlIHVwZGF0ZT8NCj4NCj5JIHdpbGwgc2VuZCB0aGUgZGlmZnMgc29vbi4NCj4+DQo+PkFsc28s IGEgZmV3IG1vcmUgY29tbWVudHMgaW5saW5lOg0KPj4NCj4+VGhhbmtzIQ0KPj4NCj4+QmVuLg0K Pj4NCj4+DQo+Pk9uIDkgT2N0IDIwMTUsIGF0IDY6NTUsIFRpcnVtYWxlc3dhciBSZWRkeSAodGly ZWRkeSkgd3JvdGU6DQo+Pg0KPj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4+PiBG cm9tOiBCZW4gQ2FtcGJlbGwgW21haWx0bzpiZW5Abm9zdHJ1bS5jb21dDQo+Pj4+IFNlbnQ6IFRo dXJzZGF5LCBPY3RvYmVyIDA4LCAyMDE1IDEwOjE4IFBNDQo+Pj4+IFRvOiBUaXJ1bWFsZXN3YXIg UmVkZHkgKHRpcmVkZHkpDQo+Pj4+IENjOiBSYW0gTW9oYW4gUiAocm1vaGFucik7DQo+Pj4+IGRy YWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1zcnRwLmFsbEBpZXRmLm9yZzsNCj4+Pj4gc3RyYXdA aWV0Zi5vcmcNCj4+Pj4gU3ViamVjdDogUmU6IFtzdHJhd10gQUQgRXZhbHVhdGlvbiBvZg0KPj4+ PiBkcmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0cC0wNw0KPj4+Pg0KPj4+Pg0KPj4+Pg0K Pj4+PiBPbiA4IE9jdCAyMDE1LCBhdCAxMDo0NSwgVGlydW1hbGVzd2FyIFJlZGR5ICh0aXJlZGR5 KSB3cm90ZToNCj4+Pj4NCj4+Pj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4+Pj4+ IEZyb206IEJlbiBDYW1wYmVsbCBbbWFpbHRvOmJlbkBub3N0cnVtLmNvbV0NCj4+Pj4+PiBTZW50 OiBUaHVyc2RheSwgT2N0b2JlciAwOCwgMjAxNSA2OjQ5IFBNDQo+Pj4+Pj4gVG86IFJhbSBNb2hh biBSIChybW9oYW5yKQ0KPj4+Pj4+IENjOiBkcmFmdC1pZXRmLXN0cmF3LWIyYnVhLWR0bHMtc3J0 cC5hbGxAaWV0Zi5vcmc7IHN0cmF3QGlldGYub3JnDQo+Pj4+Pj4gU3ViamVjdDogUmU6IFtzdHJh d10gQUQgRXZhbHVhdGlvbiBvZg0KPj4+Pj4+IGRyYWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1z cnRwLTA3DQo+Pj4+Pj4NCj4+Pj4+PiBUaGFua3MgZm9yIHRoZSByZXNwb25zZS4gRnVydGhlciBj b21tZW50cyBpbmxpbmUuIEkgcmVtb3ZlZA0KPj4+Pj4+IHNlY3Rpb25zDQo+Pj4+Pj4gdGhhdCBk b24ndCBhcHBlYXIgdG8gbmVlZCBmdXJ0aGVyIGRpc2N1c3Npb24uDQo+Pj4+Pj4NCj4+Pj4+PiBU aGFua3MhDQo+Pj4+Pj4NCj4+Pj4+PiBCZW4uDQo+Pj4+Pj4NCj4+Pj4+PiBPbiA4IE9jdCAyMDE1 LCBhdCA0OjQxLCBSYW0gTW9oYW4gUiAocm1vaGFucikgd3JvdGU6DQo+Pj4+Pj4+Pg0KPj4+Pj4+ DQo+Pj4+Pj4gWy4uLl0NCj4+Pj4+Pg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+PiBDb21t ZW50cyBhbmQgUXVlc3Rpb25zDQo+Pj4+Pj4+PiA9PT09PT09PT09PT09PT09PT09PT09DQo+Pj4+ Pj4+Pg0KPj4+Pj4+Pj4gLSBUaGVyZSdzIGEgbWFya2VkIGxhY2sgb2YgbWVudGlvbiBvZiBCMkJV QXMgdGhhdCBpbnNwZWN0IG9yDQo+Pj4+Pj4+PiBtb2RpZnkNCj4+Pj4+Pj4+IG1lZGlhIGNvbnRl bnQuIEkgcmVhbGl6ZSB0aGF0IHRoaXMgZHJhZnQgZG9lcyBub3Qgc2VlayB0byBlbmFibGUNCj4+ Pj4+Pj4+IHRoYXQgcGFydGljdWxhciBlbGVwaGFudC1pbi10aGUtcm9vbS4gSXMgaXQgd29ydGgg bWVudGlvbmluZyB0aGVtDQo+Pj4+Pj4+PiBhcyBvdXQgb2Ygc2NvcGU/DQo+Pj4+Pj4+DQo+Pj4+ Pj4+IEluIHNlY3Rpb24gMS4yIChHb2Fscykgd2UgY2FuIGFkZCB0aGlzIHRleHQuIElzIHRoaXMg b2sgPw0KPj4+Pj4+PiBFWElTVElORzoNCj4+Pj4+Pj4gVGhlIGZvbGxvd2luZyBzZWN0aW9ucyBk ZXNjcmliZSB0aGUgYmVoYXZpb3IgQjJCVUFzIE1VU1QgZm9sbG93IGluDQo+Pj4+Pj4+IG9yZGVy IHRvIGF2b2lkIGFueSBpbXBhY3QgdG8gZW5kLXRvLWVuZCBEVExTLVNSVFAgc2Vzc2lvbnMuDQo+ Pj4+Pj4+DQo+Pj4+Pj4+DQo+Pj4+Pj4+IE5FVzoNCj4+Pj4+Pj4gVGhlIGZvbGxvd2luZyBzZWN0 aW9ucyBkZXNjcmliZSB0aGUgYmVoYXZpb3IgQjJCVUFzIGNhbiBmb2xsb3cgdG8NCj4+Pj4+Pj4g YXZvaWQgYnJlYWtpbmcgZW5kLXRvLWVuZCBEVExTLVNSVFAgc2Vzc2lvbnMuDQo+Pj4+Pj4gQjJC VUFzIHRlcm1pbmF0aW5nIERUTFMtU1JUUA0KPj4+Pj4+PiBzZXNzaW9uIGFyZSBvdXRzaWRlIHRo ZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Lg0KPj4+Pj4NCj4+Pj4+IEkgdGhpbmsgdGhlIGFib3Zl IGxpbmUgaXMgbm90IHJlcXVpcmVkLiBUaGlzIGRvYyBkaXNjdXNzZXMgdGhlDQo+Pj4+PiBwcm9i bGVtDQo+Pj4+PiB3aXRoIEIyQlVBcyB0ZXJtaW5hdGluZyBEVExTLVNSVFAgc2Vzc2lvbiwgbWVj aGFuaXNtIHRvIGRldGVjdCBzdWNoDQo+Pj4+PiBCMkJVQSBhbmQgc2F5cyB0aGF0IEIyQlVBIG11 c3Qgbm90IHRvIGJlIGVuYWJsZWQgaW4gdGhpcyBtb2RlLg0KPj4+Pj4NCj4+Pj4NCj4+Pj4gU2Vl IG5leHQgY29tbWVudC4uLg0KPj4+Pg0KPj4+Pj4+DQo+Pj4+Pj4gSSB0aGluayB0aGF0J3MgbW92 aW5nIGluIHRoZSByaWdodCBkaXJlY3Rpb24sIGJ1dCB0aGVyZSdzIG5vcm1hdGl2ZQ0KPj4+Pj4+ IHRleHQgZWxzZXdoZXJlIHRoYXQgc2F5cyBiMmJ1YXMgTVVTVCBOT1QgdGVybWluYXRlIGR0bHMt c3J0cC4gV291bGQNCj4+Pj4+PiBpdCBtYWtlIHNlbnNlIHRvIHNheSBzb21ldGhpbmcgbGlrZSAi QjJCVUFzIHRoYXQgaW5zcGVjdCBvciBtb2RpZnkNCj4+Pj4+PiBtZWRpYSBjb250ZW50IGFyZSBv dXRzaWRlIHRoZSBzY29wZSBvZiB0aGlzIGRvY3VtZW50Ij8NCj4+Pj4+Pg0KPj4+Pj4+IE9yIGlz IGl0IHRoZSBpbnRlbnQgdG8gZm9yYmlkIHN1Y2ggZGV2aWNlcyA/DQo+Pj4+Pg0KPj4+Pj4gVGhl IGludGVudCBpcyB0byBwcm9oaWJpdCBzdWNoIGRldmljZXMgYmVjYXVzZSBvZiB0aGUgcHJpdmFj eQ0KPj4+Pj4gY29uY2Vybi4NCj4+Pj4NCj4+Pj4gVGhhdCdzIGEgZGlmZmVyZW50IGFuc3dlciB0 aGFuIFJhbSBnYXZlLiBDb250ZW50IGF3YXJlL21vZGlmeWluZw0KPj4+PiBCMkJVQXMNCj4+Pj4g Y2Fubm90IGJvdGggYmUgZm9yYmlkZGVuIGFuZCBvdXQtb2Ytc2NvcGUgYXQgdGhlIHNhbWUgdGlt ZS4NCj4+Pj4NCj4+Pj4gSSB0aGluayB0aGUgY29uZnVzaW9uIGhlcmUgaXMgYXJvdW5kIHdoZXRo ZXIgdGhpcyBkcmFmdCBzaG91bGQgc2F5DQo+Pj4+IGIyYnVhcw0KPj4+PiBNVVNUIG5vdCB0ZXJt aW5hdGUgZHRscy1zcnRwLCBvciB0byBzYXkgdGhhdCB0aGV5IGNhbm5vdCB1bmRlciBtb3N0DQo+ Pj4+IGNpcmN1bXN0YW5jZXMgd2l0aG91dCBicmVha2luZyA0NDc0LzQ0NzRiaXMgaWRlbnRpdHkg c2lnbmF0dXJlcy4NCj4+Pj4gVGhlIGZvcm1lciBuZWVkcyAyMTE5IGxhbmd1YWdlLCB0aGUgbGF0 dGVyIGlzIGp1c3QgYSBzdGF0ZW1lbnQgb2YNCj4+Pj4gZmFjdC4NCj4+Pg0KPj4+IEkgdGhpbmsg d2Ugc2hvdWxkIGdvIHdpdGggdGhlIGZvcm1lciwgb3RoZXJ3aXNlIGl0IGNyZWF0ZXMgYSBwcml2 YWN5DQo+Pj4gcHJvYmxlbS4NCj4+DQo+PldoaWxlIEkgYWdyZWUgd2l0aCB0aGUgc2VudGltZW50 LCB0aGVyZSdzIGEgYml0IG9mIGEgc3RhbmRpbmcgcHJvYmxlbQ0KPj5oZXJlLiBXZSBjYW4ndCBy ZWFsbHkgZm9yY2UgQjJCVUEgdmVuZG9ycyB0byBldmVuIHJlYWQgdGhpcyBzcGVjLCBtdWNoDQo+ Pmxlc3MgY29tcGx5IHdpdGggaXQuIFNvIHRoaXMgc2VlbXMgdG8gYmUgYW4gYXR0ZW1wdCB0byBw dXQgcmVxdWlyZW1lbnRzDQo+Pm9uIGRldmljZXMgdGhhdCBkb24ndCBpbXBsZW1lbnQgdGhlIHNw ZWMgY29udGFpbmluZyB0aGUgcmVxdWlyZW1lbnQuDQo+Pg0KPj5TbyBpdCBzZWVtcyB0byBtZSB0 aGUgYmVzdCB3ZSBjYW4gZG8gaXMgdGFrZSB0aGUgYXBwcm9hY2ggb2Ygc2F5aW5nDQo+PnNvbWV0 aGluZyB0byB0aGUgZWZmZWN0IG9mICJUaGUgZHRscy1zcnRwIGZyYW1ld29yayByZWNvbW1lbmRz IHRoYXQNCj4+ZW5kcG9pbnRzIHVzZSBSRkM0NDc0IHRvIGludGVncml0eSBwcm90ZWN0IHRoZSBm aW5nZXJwcmludCBhdHRyaWJ1dGVzLg0KPj5UaHVzLCB1bmRlciBtb3N0IGNpcmN1bXN0YW5jZXMs IEIyQlVBcyBjYW5ub3QgdGVybWluYXRlIHRoZSBkdGxzLXNydHANCj4+Y29ubmVjdGlvbiB3aXRo b3V0IGludmFsaWRhdGluZyB0aGUgc2lnbmF0dXJlIGFuZCBjYXVzaW5nIHRoZSBzZXNzaW9uIHRv DQo+PmZhaWwuIg0KPj4NCj4+QmFzaWNhbGx5LCB0aGF0IGVmZmVjdGl2ZWx5IG1ha2VzIHRoZSBz Y29wZSBvZiB0aGUgZHJhZnQgIkhvdyBiMmJ1YSdzDQo+PnRoYXQgd2FudCB0byBwbGF5IG5pY2Ug d2l0aCBkdGxzLXNydHAiIGNhbiBhdm9pZCBicmVha2luZyB0aGluZ3MiLg0KPg0KPkFncmVlIHdp dGggeW91IG9uIHRoZSBwcmFjdGljYWwgYXNwZWN0cyBvZiB0aGlzIGJlaW5nIGltcGxlbWVudGVk LiBJIGFtDQo+ZmluZSB3aXRoIA0KPmFkZGluZyBhYm92ZSBzdWdnZXN0ZWQgdGV4dC4NCj4NCj4+ DQo+Pj4NCj4+Pj4NCj4+Pj4gVGhlcmUgYXJlIHNvbWUgZXhjZXB0aW9ucyB0byB0aGUgImNhbm5v dCIgaW4gdGhlIGFib3ZlIHBhcmFncmFwaC4gRm9yDQo+Pj4+IGV4YW1wbGUsIGEgYjJidWEgdGhh dCBpcyBjb2xsb2NhdGVkIHdpdGggdGhlIG9mZmVyZXIncyBpZGVudGl0eQ0KPj4+PiBzZXJ2aWNl IGNvdWxkDQo+Pj4+IG1vZGlmeSBmaW5nZXJwcmludHMgcHJpb3IgdG8gYXBwbHlpbmcgdGhlIGlk ZW50aXR5IHNpZ25hdHVyZS4gT3INCj4+Pj4gc2luY2UgNTc2Mw0KPj4+PiBvbmx5IHNheXMgZW5k cG9pbnRzIFNIT1VMRCB1c2UgNDQ3NCwgYSBiMmJ1YSBtaWdodCBzZWUgdW5wcm90ZWN0ZWQNCj4+ Pj4gZmluZ2VycHJpbnRzIGFuZCBhdHRlbXB0IHRvIG1vZGlmeSB0aGVtLiAgRG9lcyB0aGlzIGRy YWZ0IG1lYW4gdG8NCj4+Pj4gZm9yYmlkDQo+Pj4+IHRob3NlIGJlaGF2aW9ycz8NCj4+Pg0KPj4+ IEVuZHBvaW50IG9yIFNJUCBwcm94eSBpbiB0aGUgZW5kcG9pbnRzIG5ldHdvcmsgaGFzIHRvIGlu c2VydCB0aGUNCj4+PiBpZGVudGl0eSBhc3NlcnRpb24gdG8gYXZvaWQgQjJCVUEgaW4gdGhlIHNp Z25hbGluZyBwYXRoIGZyb20NCj4+PiB0ZXJtaW5hdGluZyB0aGUgRFRMUyBjb25uZWN0aW9uIGFu ZCBkZWNyeXB0aW5nIHRoZSBtZWRpYS4gV2ViUlRDIGFsc28NCj4+PiBoYXMgdGhlIHNhbWUgcHJv YmxlbSB0aGF0IHdpdGhvdXQgSWRQIGFuZCBpZGVudGl0eSBhc3NlcnRpb24sDQo+Pj4gbWFsaWNp b3VzIHNpZ25hbGluZyBzZXJ2ZXIgY2FuIGRlY3J5cHQgdGhlIG1lZGlhLg0KPj4NCj4+UmlnaHQu IEkgZG9uJ3QgdGhpbmsgdGhpcyBkcmFmdCBjYW4gcHJldmVudCB0aGF0LiBCdXQgaXQgY2FuIHJ1 bGUgaXQgb3V0DQo+Pm9mIHNjb3BlLg0KPg0KPkFncmVlZC4gDQo+DQo+Pg0KPj4+DQo+Pj4+DQo+ Pj4+Pg0KPj4+Pj4+DQo+Pj4+Pj4+PiBEb2VzIHRoaXMgZHJhZnQgaW50ZW5kIHRvIG1ha2UgdGhl bSBpbGxlZ2FsIGZvciBTUlRQIHByb3RlY3RlZA0KPj4+Pj4+Pj4gc2Vzc2lvbnMgd2l0aCBpdCdz IHByb3NjcmlwdGlvbiBhYm91dCB0ZXJtaW5hdGluZyBkdGxzPw0KPj4+Pj4+Pg0KPj4+Pj4+PiBU aGUgYmVoYXZpb3VyIGZvciBjYXNlcyB3aGVyZSBCMkJVQSB0ZXJtaW5hdGVzIERUTFMtU1JUUCBp cyBub3QgaW4NCj4+Pj4+Pj4gdGhlIHNjb3BlIG9mIHRoaXMgZHJhZnQuDQo+Pj4+Pj4+DQo+Pj4+ Pj4NCj4+Pj4+PiBTZWUgYWJvdmUgY29tbWVudCBhYm91dCBub3JtYXRpdmUgc3RhdGVtZW50cyBj b25jZXJuaW5nIHRoZQ0KPj4+Pj4+IHRlcm1pbmF0aW9uIG9mIGR0bHMtc3J0cC4NCj4+Pj4+Pg0K Pj4+Pj4+IFsuLi5dDQo+Pj4+Pj4NCj4+Pj4+Pj4+DQo+Pj4+Pj4+PiAtMy4xLjEsIDNyZCBwYXJh Z3JhcGggZnJvbSBlbmQ6ICJ0aGUgQjJCVUEgU0hPVUxEIGJlIHByZXBhcmVkIHRvDQo+Pj4+Pj4+ PiByZWNlaXZlIERUTFMsIFNUVU4gYW5kIG1lZGlhIG9uIHRoZSBwb3J0cyBpdCBhZHZlcnRpc2Vk IHRvIEJvYiBpbg0KPj4+Pj4+Pj4gdGhlIElOVklURSByZXF1ZXN0LiAiDQo+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4gV2hhdCBhcmUgdGhlIGNvbnNlcXVlbmNlcyBpZiBpdCdzIG5vdCBwcmVwYXJlZCB0byBk byBzbz8NCj4+Pj4+Pj4NCj4+Pj4+Pj4gVGhlIGNvbnNlcXVlbmNlcyBjYW4gYmUgLSB0aGUgbWVz c2FnZXMgbWF5IGdldCBkcm9wcGVkIHdoaWNoIGluDQo+Pj4+Pj4+IHR1cm4NCj4+Pj4+Pj4gbWF5 IGRlbGF5IFNUVU4vRFRMUyBjaGVja3MgYW5kIHdvdWxkIHJlcXVpcmVzIHRoZSBlbmRwb2ludHMg dG8NCj4+Pj4+Pj4gcmUtdHJhbnNtaXQgdGhlIG1lc3NhZ2VzLg0KPj4+Pj4+Pg0KPj4+Pj4+DQo+ Pj4+Pj4gR2l2ZW4gdGhhdCB0aGlzIGlzIGEgU0hPVUxEIHJhdGhlciB0aGFuIGEgTVVTVCwgaXQg d291bGQgYmUgdXNlZnVsDQo+Pj4+Pj4gdG8NCj4+Pj4+PiBkZXNjcmliZSB0aG9zZSBjb25zZXF1 ZW5jZXMgaW4gdGhlIHRleHQuDQo+Pj4+Pg0KPj4+Pj4gVGhlIG90aGVyIGFsdGVybmF0aXZlIHdv dWxkIGJlIHRvIGNoYW5nZSBmcm9tIFNIT1VMRCB0byBNVVNUIGFuZA0KPj4+Pj4gYXZvaWQNCj4+ Pj4+IHRoZSBhYm92ZSBwcm9ibGVtcy4NCj4+Pj4NCj4+Pj4gSSB3b3VsZCBub3Qgb2JqZWN0IHRv IHRoYXQtLWFsdGhvdWdoIG9uIHJlZmxlY3Rpb24sIGlzbid0IHRoaXMNCj4+Pj4gcmVxdWlyZW1l bnQgdHJ1ZQ0KPj4+PiBvZiBhbGwgYjJidWFzPyBUaGF0IGlzLCBpcyBpdCBpbiBhbnkgd2F5IHNw ZWNpZmljIHRvIGR0bHMtc3J0cD8gIElzDQo+Pj4+IHRoYXQNCj4+Pj4gZG9jdW1lbnRlZCBlbHNl d2hlcmU/DQo+Pj4NCj4+PiBJIGRvbid0IHRoaW5rIGFueSBvdGhlciBkb2MgaXMgZGlzY3Vzc2lu ZyB0aGlzIHBvaW50Lg0KPj4NCj4+T2theS4gSXQgbWlnaHQgaGF2ZSBiZWVuIGJldHRlciB0byBo YXZlIHRoYXQgaW4gYSBtb3JlIGdlbmVyYWwgc3BlYyB0aGFuDQo+PnRoaXMsIGJ1dCBpdCBkb2Vz bid0IGh1cnQgdG8gaGF2ZSBpdCBoZXJlIGFzIHdlbGwuDQo+DQo+T0suIFNvIHdlIHdpbGwgbWFr ZSBpdCBNVVNUDQo+DQo+UmVnYXJkcywNCj5SYW0NCj4NCj4+DQo+Pj4NCj4+Pj4NCj4+Pj4+DQo+ Pj4+Pj4NCj4+Pj4+PiBbLi4uXQ0KPj4+Pj4+DQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gQWxzbywgSSB0 aGluayB0aGUgNDQ3NGJpcyByZWZlcmVuY2UgbmVlZHMgdG8gYmUgbm9ybWF0aXZlLCBnaXZlbg0K Pj4+Pj4+Pj4gdGhhdA0KPj4+Pj4+Pj4gb25lIG5lZWRzIHRvIHVuZGVyc3RhbmQgdGhhdCBkcmFm dCB0byBpbXBsZW1lbnQgdGhlIG5vcm1hdGl2ZQ0KPj4+Pj4+Pj4gYml0cw0KPj4+Pj4+Pj4gYWJv dXQNCj4+Pj4+Pj4+IG1vZGlmeWluZyBhbnl0aGluZyBwcm90ZWN0ZWQgYnkgdGhlIHNpZ25hdHVy ZS4gT1RPSCwgZG9lcyB0aGlzDQo+Pj4+Pj4+PiBuZWVkDQo+Pj4+Pj4+PiB0bw0KPj4+Pj4+Pj4g cmVmZXJlbmNlIDQ0NzRiaXMsIG9yIHdvdWxkIDQ0NzQgc3VmZmljZT8NCj4+Pj4+Pj4NCj4+Pj4+ Pj4gcmZjNDQ3NGJpcyBpcyBhcHByb3ByaWF0ZSBzaW5jZSBpdCBkZWZpbmVzIG1lY2hhbmlzbXMg dG8gdXNlIFNEUA0KPj4+Pj4+PiBwYXJhbWV0ZXJzIChsaWtlIGE9ZmluZ2VycHJpbnQpIGluIHRo ZSBJZGVudGl0eSBoZWFkZXIgZGlnZXN0Lg0KPj4+Pj4+PiBXZSB3aWxsIHVzZSByZmM0NDc0Ymlz IGFuZCBtYWtlIHRoZSByZWZlcmVuY2Ugbm9ybWF0aXZlLg0KPj4+Pj4+DQo+Pj4+Pj4gWW91ciBy ZXNwb25zZSBpcyByZWFzb25hYmxlLCBidXQga2VlcCBpbiBtaW5kIHRoYXQgd2lsbCBibG9jaw0K Pj4+Pj4+IHB1YmxpY2F0aW9uIG9mIHRoaXMgZHJhZnQgdW50aWwgNDQ3NGJpcyBpcyBwdWJsaXNo ZWQuDQo+Pj4+Pg0KPj4+Pj4gWWVzLCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNDQ3 NCNzZWN0aW9uLTEzLjEgZGlzY3Vzc2VzDQo+Pj4+PiBzaWduYXR1cmUgb3ZlciB0aGUgU0lQIGJv ZGllcyBidXQgZG9lcyBub3QgZ28gaW50byBkZXRhaWwgbGlrZQ0KPj4+Pj4gcmZjNDQ3NGJpcyBl eHBsYWlucyB1c2luZyBmaW5nZXJwcmludCBmb3IgZ2VuZXJhdGluZyBhc3NlcnRpb24uDQo+Pj4+ PiBXb3VsZA0KPj4+Pj4gaXQgYmUgb2theSB0byBoYXZlIG5vcm1hdGl2ZSByZWZlcmVuY2Ugb2Yg cmZjNDQ3NCBhbmQgaW5mb3JtYXRpdmUNCj4+Pj4+IHJlZmVyZW5jZSBvZiByZmM0NDc0YmlzID8N Cj4+Pj4NCj4+Pj4gQm90aCBwcm90ZWN0IHRoZSBmaW5nZXJwcmludC4gNDQ3NCBqdXN0IGRvZXMg aXQgYnkgcHJvdGVjdGluZyB0aGUNCj4+Pj4gZW50aXJlDQo+Pj4+IGJvZHkuIDQ0NzRiaXMgaGFz IHRoZSBtYXkgYmUgbW9yZSBkZXBsb3lhYmxlLiBCdXQgaXQgc2VlbXMgdG8gbWUgdGhhdA0KPj4+ PiBlaXRoZXIgd29yayBmb3IgdGhlIHB1cnBvc2VzIG9mIHRoaXMgZHJhZnQuIEFuZCBzaW5jZSA0 NDc0YmlzDQo+Pj4+IHByb3Bvc2VzDQo+Pj4+IHRvIG9ic29sZXRlIDQ0NzQsIGEgcmVmZXJlbmNl IHRvIDQ0NzQgd2lsbCBlZmZlY3RpdmVseSBiZWNvbWUgYQ0KPj4+PiByZWZlcmVuY2UgdG8gNDQ3 NGJpcy4NCj4+Pg0KPj4+IFRoYW5rcywgd2lsbCB1cGRhdGUgZHJhZnQuDQo+Pj4NCj4+Pj4NCj4+ Pj4+DQo+Pj4+Pg0KPj4+Pj4+DQo+Pj4+Pj4+DQo+Pj4+Pj4+DQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4g LTMuMS4yOiAiVGhlIG1lY2hhbmlzbSBkZXNjcmliZWQgaW4gU2VjdXJpdHkgQ29uc2lkZXJhdGlv bnMNCj4+Pj4+Pj4+IHNlY3Rpb24NCj4+Pj4+Pj4+IE1VU1QNCj4+Pj4+Pj4+IGJlDQo+Pj4+Pj4+ PiB1c2VkIGJ5IGVuZHBvaW50IHRvIGRldGVjdCBtYWxpY2lvdXMgQjJCVUGp9nMgdGhhdCBNQVkg YXR0ZW1wdCB0bw0KPj4+Pj4+Pj4gdGVybWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lvbi4iDQo+ Pj4+Pj4+Pg0KPj4+Pj4+Pj4gSSdtIG5vdCBzdXJlIGl0IG1ha2VzIHNlbnNlIGZvciB0aGlzIGRy YWZ0IHRvIHB1dCBub3JtYXRpdmUNCj4+Pj4+Pj4+IHJlcXVpcmVtZW50cw0KPj4+Pj4+Pj4gb24g ZW5kcG9pbnRzLiBEbyB5b3UgbWVhbiB0byBzYXkgdGhleSAiY2FuIiB1c2UNCj4+Pj4+Pj4+IHRo ZSBtZWNoYW5pc20/DQo+Pj4+Pj4+DQo+Pj4+Pj4+IFRoaXMgaGFzIHRvIGJlIGZpeGVkLiBUaGUg aWRlYSBpcyB0byBoYXZlIGVpdGhlciBlbmRwb2ludCBvciB0aGUNCj4+Pj4+Pj4gU0lQDQo+Pj4+ Pj4+IHByb3h5DQo+Pj4+Pj4+IHNlcnZlciBpbiB0aGUgZW5kcG9pbnRzIG5ldHdvcmsgdG8gZ2Vu ZXJhdGUgSWRlbnRpdHkgaGVhZGVyIG9uDQo+Pj4+Pj4+IGJlaGFsZg0KPj4+Pj4+PiBvZg0KPj4+ Pj4+PiB0aGUgZW5kcG9pbnQgYW5kIHBlcmZvcm0gaWRlbnRpdHkgdmFsaWRhdGlvbiBwcm9jZWR1 cmUuDQo+Pj4+Pj4NCj4+Pj4+PiBJJ20gbm90IHN1cmUgSSB1bmRlcnN0YW5kIHdoYXQgeW91IG1l YW4gYnkgInRoaXMgaGFzIHRvIGJlIGZpeGVkIi4NCj4+Pj4+PiBEbw0KPj4+Pj4+IHlvdSBtZWFu IGZpeGVkIGluIHRoZSBkcmFmdCwgb3IgdGhhdCBlbmRwb2ludHMgbmVlZCB0byBmaXgNCj4+Pj4+ PiBiZWhhdmlvcj8NCj4+Pj4+DQo+Pj4+PiBJIHRoaW5rIFJhbSBtZWFudCBmaXggdGhlIGRyYWZ0 Lg0KPj4+Pg0KPj4+PiBJbiBhbnkgY2FzZSwgaWYgdGhpcyBkcmFmdCBwbGFjZXMgbmV3IG5vcm1h dGl2ZSByZXF1aXJlbWVudHMgb24NCj4+Pj4gZHRzbC1zcnRwIGVuZHBvaW50cyBvciBpZGVudGl0 eSBzZXJ2aWNlcywgaXQgd291bGQgbmVlZCB0byB1cGRhdGUNCj4+Pj4gNTc2My4NCj4+Pg0KPj4+ IFllcywgd2lsbCB1cGRhdGUgdGhhdCB0aGlzIGRvYyB1cGRhdGVzIDU3NjMuDQo+Pj4NCj4+PiBD aGVlcnMsDQo+Pj4gLVRpcnUNCj4+Pg0KPj4+Pg0KPj4+PiBbLi4uXQ0KPj4+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4gc3RyYXcgbWFpbGluZyBs aXN0DQo+Pj4gc3RyYXdAaWV0Zi5vcmcNCj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3N0cmF3DQo+DQo+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj5zdHJhdyBtYWlsaW5nIGxpc3QNCj5zdHJhd0BpZXRmLm9yZw0KPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3RyYXcNCg0K --_003_D2490FA14642Brmohanrciscocom_ Content-Type: text/html; name="Diff_ draft-ietf-straw-b2bua-dtls-srtp-07.txt - draft-ietf-straw-b2bua-dtls-srtp-08.txt.html" Content-Description: Diff_ draft-ietf-straw-b2bua-dtls-srtp-07.txt - draft-ietf-straw-b2bua-dtls-srtp-08.txt.html Content-Disposition: attachment; filename="Diff_ draft-ietf-straw-b2bua-dtls-srtp-07.txt - draft-ietf-straw-b2bua-dtls-srtp-08.txt.html"; size=83008; creation-date="Sun, 18 Oct 2015 03:26:30 GMT"; modification-date="Sun, 18 Oct 2015 03:26:30 GMT" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+CjxtZXRhIGh0dHAtZXF1aXY9ImNvbnRlbnQtdHlwZSIgY29udGVudD0idGV4 dC9odG1sOyBjaGFyc2V0PVVURi04Ij48L2hlYWQ+PGJvZHk+Q29udGVudC1UeXBlOiB0ZXh0L2h0 bWwKCgogCjwhLS0gR2VuZXJhdGVkIGJ5IHJmY2RpZmYgMS40MjogcmZjZGlmZiAgLS0+IAo8IS0t IDwhRE9DVFlQRSBodG1sIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxIFRyYW5zaXRpb25h bCIgPiAtLT4KPCEtLSBTeXN0ZW06IExpbnV4IGdhbWF5IDIuNi4zOS0yLTY4Ni1wYWUgIzEgU01Q IFR1ZSBKdWwgNSAwMzo0ODo0OSBVVEMgMjAxMSBpNjg2IEdOVS9MaW51eCAtLT4gCjwhLS0gVXNp bmcgYXdrOiAvdXNyL2Jpbi9nYXdrOiBHTlUgQXdrIDQuMC4xIC0tPiAKPCEtLSBVc2luZyBkaWZm OiAvdXNyL2Jpbi9kaWZmOiBkaWZmIChHTlUgZGlmZnV0aWxzKSAzLjMgLS0+IAo8IS0tIFVzaW5n IHdkaWZmOiAvdXNyL2Jpbi93ZGlmZjogd2RpZmYgKEdOVSB3ZGlmZikgMS4yLjEgLS0+IAogCiAK ICA8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD1VVEYtOCI+IAogIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtU3R5bGUtVHlwZSIgY29u dGVudD0idGV4dC9jc3MiPiAKICA8dGl0bGU+RGlmZjogZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1k dGxzLXNydHAtMDcudHh0IC0gZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDgudHh0 PC90aXRsZT4gCiAgPHN0eWxlIHR5cGU9InRleHQvY3NzIj4gCiAgICBib2R5ICAgIHsgbWFyZ2lu OiAwLjRleDsgbWFyZ2luLXJpZ2h0OiBhdXRvOyB9IAogICAgdHIgICAgICB7IH0gCiAgICB0ZCAg ICAgIHsgd2hpdGUtc3BhY2U6IHByZTsgZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgdmVydGljYWwt YWxpZ246IHRvcDsgZm9udC1zaXplOiAwLjg2ZW07fSAKICAgIHRoICAgICAgeyBmb250LXNpemU6 IDAuODZlbTsgfSAKICAgIC5zbWFsbCAgeyBmb250LXNpemU6IDAuNmVtOyBmb250LXN0eWxlOiBp dGFsaWM7IGZvbnQtZmFtaWx5OiBWZXJkYW5hLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IH0gCiAg ICAubGVmdCAgIHsgYmFja2dyb3VuZC1jb2xvcjogI0VFRTsgfSAKICAgIC5yaWdodCAgeyBiYWNr Z3JvdW5kLWNvbG9yOiAjRkZGOyB9IAogICAgLmRpZmYgICB7IGJhY2tncm91bmQtY29sb3I6ICND Q0Y7IH0gCiAgICAubGJsb2NrIHsgYmFja2dyb3VuZC1jb2xvcjogI0JGQjsgfSAKICAgIC5yYmxv Y2sgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkY4OyB9IAogICAgLmluc2VydCB7IGJhY2tncm91bmQt Y29sb3I6ICM4RkY7IH0gCiAgICAuZGVsZXRlIHsgYmFja2dyb3VuZC1jb2xvcjogI0FDRjsgfSAK ICAgIC52b2lkICAgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZCOyB9IAogICAgLmNvbnQgICB7IGJh Y2tncm91bmQtY29sb3I6ICNFRUU7IH0gCiAgICAubGluZWJyIHsgYmFja2dyb3VuZC1jb2xvcjog I0FBQTsgfSAKICAgIC5saW5lbm8geyBjb2xvcjogcmVkOyBiYWNrZ3JvdW5kLWNvbG9yOiAjRkZG OyBmb250LXNpemU6IDAuN2VtOyB0ZXh0LWFsaWduOiByaWdodDsgcGFkZGluZzogMCAycHg7IH0g CiAgICAuZWxpcHNpc3sgYmFja2dyb3VuZC1jb2xvcjogI0FBQTsgfSAKICAgIC5sZWZ0IC5jb250 IHsgYmFja2dyb3VuZC1jb2xvcjogI0RERDsgfSAKICAgIC5yaWdodCAuY29udCB7IGJhY2tncm91 bmQtY29sb3I6ICNFRUU7IH0gCiAgICAubGJsb2NrIC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjog IzlEOTsgfSAKICAgIC5yYmxvY2sgLmNvbnQgeyBiYWNrZ3JvdW5kLWNvbG9yOiAjREQ2OyB9IAog ICAgLmluc2VydCAuY29udCB7IGJhY2tncm91bmQtY29sb3I6ICMwREQ7IH0gCiAgICAuZGVsZXRl IC5jb250IHsgYmFja2dyb3VuZC1jb2xvcjogIzhBRDsgfSAKICAgIC5zdGF0cywgLnN0YXRzIHRk LCAuc3RhdHMgdGggeyBiYWNrZ3JvdW5kLWNvbG9yOiAjRUVFOyBwYWRkaW5nOiAycHggMDsgfSAK ICA8L3N0eWxlPiAKIAogCiAgPHRhYmxlIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxz cGFjaW5nPSIwIj4gCiAgPHRib2R5Pjx0ciBiZ2NvbG9yPSJvcmFuZ2UiPjx0aD48L3RoPjx0aD48 YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc3Ry YXctYjJidWEtZHRscy1zcnRwLTA3LnR4dCIgc3R5bGU9ImNvbG9yOiMwMDg7IHRleHQtZGVjb3Jh dGlvbjpub25lOyI+Jmx0OzwvYT4mbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDcudHh0IiBzdHlsZT0iY29s b3I6IzAwOCI+ZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDcudHh0PC9hPiZuYnNw OzwvdGg+PHRoPiA8L3RoPjx0aD4mbmJzcDs8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDgudHh0IiBzdHlsZT0iY29s b3I6IzAwOCI+ZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1kdGxzLXNydHAtMDgudHh0PC9hPiZuYnNw OzxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9yZmNkaWZmP3VybDE9ZHJhZnQtaWV0Zi1z dHJhdy1iMmJ1YS1kdGxzLXNydHAtMDgudHh0IiBzdHlsZT0iY29sb3I6IzAwODsgdGV4dC1kZWNv cmF0aW9uOm5vbmU7Ij4mZ3Q7PC9hPjwvdGg+PHRoPjwvdGg+PC90cj4gCiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+U1RSQVcgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+U1RSQVcgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgUi4gUmF2aW5kcmFuYXRoPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBULiBSZWRkeTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICBULiBSZWRkeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJk cyBUcmFjayAgICAgICAgICAgICAgICAgICAgICAgICAgICBHLiBTYWxndWVpcm88L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5JbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkcyBUcmFjayAg ICAgICAgICAgICAgICAgICAgICAgICAgICBHLiBTYWxndWVpcm88L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDAxIj48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj5FeHBpcmVzOiA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5NYXJjaCAxNzwvc3Bhbj4sIDIwMTYgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIENpc2NvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPkV4cGlyZXM6 IDxzcGFuIGNsYXNzPSJpbnNlcnQiPkFwcmlsIDE5PC9zcGFuPiwgMjAxNiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2lzY288L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWLiBQYXNjdWFsPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBWLiBQYXNjdWFsPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZm MDAwMiI+PC9hPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPHNwYW4gY2xhc3M9ImRlbGV0 ZSI+UXVvYmlzPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PcmFjbGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIFBhcnRoYXNhcmF0aGkuIFJhdmluZHJhbjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFBhcnRoYXNhcmF0aGkuIFJhdmluZHJhbjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm9raWEgTmV0d29ya3M8L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm9raWEgTmV0d29ya3M8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9 ImRpZmYwMDAzIj48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5TZXB0 ZW1iZXIgMTQ8L3NwYW4+LCAyMDE1PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgT2N0b2JlciAxNzwvc3Bhbj4sIDIwMTU8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgRFRMUy1TUlRQIEhhbmRsaW5nIGluIFNlc3Npb24gSW5pdGlhdGlvbiBQ cm90b2NvbCAoU0lQKSBCYWNrLXRvLUJhY2s8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gIERUTFMtU1JUUCBIYW5kbGluZyBpbiBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wgKFNJ UCkgQmFjay10by1CYWNrPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgVXNlciBBZ2VudHMgKEIyQlVB cyk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgICAgICAgICAg ICAgIFVzZXIgQWdlbnRzIChCMkJVQXMpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNCI+PC9hPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1zdHJhdy1iMmJ1YS1k dGxzLXNydHAtMDxzcGFuIGNsYXNzPSJkZWxldGUiPjc8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgIGRyYWZ0LWlldGYtc3RyYXctYjJidWEt ZHRscy1zcnRwLTA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij44PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+QWJzdHJhY3Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5BYnN0 cmFjdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2Vzc2lvbiBJbml0aWF0aW9uIFBy b3RvY29sIChTSVApIEJhY2stdG8tQmFjayBVc2VyIEFnZW50cyAoQjJCVUFzKTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNlc3Npb24gSW5pdGlhdGlvbiBQcm90b2NvbCAoU0lQ KSBCYWNrLXRvLUJhY2sgVXNlciBBZ2VudHMgKEIyQlVBcyk8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgb2Z0ZW4gYWN0IG9uIHRoZSBtZWRp YSBwbGFuZSwgcmF0aGVyIHRoYW4ganVzdCBvbiB0aGUgc2lnbmFsaW5nIHBhdGguPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgb2Z0ZW4gYWN0IG9uIHRoZSBtZWRpYSBwbGFuZSwg cmF0aGVyIHRoYW4ganVzdCBvbiB0aGUgc2lnbmFsaW5nIHBhdGguPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQgZGVz Y3JpYmVzIHRoZSBiZWhhdmlvciBzdWNoIEIyQlVBcyBjYW4gYWRoZXJlIHRvIHdoZW48L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUg YmVoYXZpb3Igc3VjaCBCMkJVQXMgY2FuIGFkaGVyZSB0byB3aGVuPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGFjdGluZyBvbiB0aGUgbWVk aWEgcGxhbmUgdGhhdCB1c2VzIGFuIFNlY3VyZSBSZWFsLXRpbWUgVHJhbnNwb3J0PC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYWN0aW5nIG9uIHRoZSBtZWRpYSBwbGFuZSB0aGF0 IHVzZXMgYW4gU2VjdXJlIFJlYWwtdGltZSBUcmFuc3BvcnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgKFNSVFApIHNlY3VyaXR5IGNvbnRl eHQgc2V0IHVwIHdpdGggdGhlIERhdGFncmFtIFRyYW5zcG9ydCBMYXllcjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIChTUlRQKSBzZWN1cml0eSBjb250ZXh0IHNldCB1cCB3aXRo IHRoZSBEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXI8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgU2VjdXJpdHkgKERUTFMpIHByb3RvY29sLjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFNlY3VyaXR5IChEVExTKSBwcm90b2Nv bC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRk PjwvdGQ+PHRoPjxhIG5hbWU9InBhcnQtbDIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8 L3NtYWxsPjxlbT4gcGFnZSAxLCBsaW5lIDQxPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxh IG5hbWU9InBhcnQtcjIiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g cGFnZSAxLCBsaW5lIDQxPC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW50 ZXJuZXQtRHJhZnRzIGFyZSB3b3JraW5nIGRvY3VtZW50cyBvZiB0aGUgSW50ZXJuZXQgRW5naW5l ZXJpbmc8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFmdHMg YXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUYXNrIEZv cmNlIChJRVRGKS4gIE5vdGUgdGhhdCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRhc2sgRm9yY2UgKElFVEYpLiAgTm90 ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHdvcmtpbmcgZG9jdW1lbnRz IGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQtPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJu ZXQtRHJhZnRzLiAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC08L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgRHJhZnRzIGlzIGF0IGh0 dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgRHJhZnRzIGlzIGF0IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kcmFmdHMvY3VycmVudC8uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJbnRl cm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNp eCBtb250aHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJbnRlcm5ldC1EcmFm dHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHM8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg YW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5IG90aGVyIGRvY3Vt ZW50cyBhdCBhbnk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhbmQgbWF5IGJl IHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFu eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJl ZmVyZW5jZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRpbWUuICBJdCBpcyBp bmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG1hdGVyaWFs IG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiI8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBtYXRlcmlhbCBvciB0byBjaXRlIHRoZW0gb3Ro ZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDUiPjwvYT48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TWFy Y2ggMTc8L3NwYW4+LCAyMDE2LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBU aGlzIEludGVybmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkFw cmlsIDE5PC9zcGFuPiwgMjAxNi48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPkNvcHlyaWdo dCBOb3RpY2U8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij5Db3B5cmlnaHQgTm90aWNl PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVURiBU cnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVURiBUcnVzdCBhbmQgdGhlIHBl cnNvbnMgaWRlbnRpZmllZCBhcyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVz ZXJ2ZWQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgZG9jdW1lbnQgYXV0aG9y cy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBU aGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExl Z2FsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBpcyBz dWJqZWN0IHRvIEJDUCA3OCBhbmQgdGhlIElFVEYgVHJ1c3QncyBMZWdhbDwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBQcm92aXNpb25zIFJl bGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50czwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAoaHR0cDovL3RydXN0ZWUu aWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoaHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5z ZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRhdGUgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1 bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZp ZXcgdGhlc2UgZG9jdW1lbnRzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVu byI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxhIG5h bWU9InBhcnQtbDMiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFn ZSAyLCBsaW5lIDQzPC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjMi PjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAyLCBsaW5lIDQz PC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+MS4gIEludHJvZHVjdGlvbjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjEuICBJbnRyb2R1Y3Rpb248L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjEuMS4gIE92ZXJ2aWV3PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+MS4xLiAgT3ZlcnZpZXc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFtSRkM1 NzYzXSBkZXNjcmliZXMgaG93IFNlc3Npb24gSW5pdGlhdGlvbiBQcm90b2NvbCAoU0lQKSBbUkZD MzI2MV08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDNTc2M10gZGVzY3Jp YmVzIGhvdyBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wgKFNJUCkgW1JGQzMyNjFdPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNhbiBi ZSB1c2VkIHRvIGVzdGFibGlzaCBhIFNlY3VyZSBSZWFsLXRpbWUgVHJhbnNwb3J0IFByb3RvY29s IChTUlRQKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGNhbiBiZSB1c2VkIHRv IGVzdGFibGlzaCBhIFNlY3VyZSBSZWFsLXRpbWUgVHJhbnNwb3J0IFByb3RvY29sIChTUlRQKTwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBb UkZDMzcxMV0gc2VjdXJpdHkgY29udGV4dCB3aXRoIHRoZSBEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5 ZXIgU2VjdXJpdHk8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBbUkZDMzcxMV0g c2VjdXJpdHkgY29udGV4dCB3aXRoIHRoZSBEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJp dHk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgKERUTFMpIFtSRkM2MzQ3XSBwcm90b2NvbC4gIEl0IGRlc2NyaWJlcyBhIG1lY2hhbmlzbSBm b3IgdHJhbnNwb3J0aW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgKERUTFMp IFtSRkM2MzQ3XSBwcm90b2NvbC4gIEl0IGRlc2NyaWJlcyBhIG1lY2hhbmlzbSBmb3IgdHJhbnNw b3J0aW5nPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIGEgY2VydGlmaWNhdGUgZmluZ2VycHJpbnQgdXNpbmcgU2Vzc2lvbiBEZXNjcmlwdGlv biBQcm90b2NvbCAoU0RQKTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGEgY2Vy dGlmaWNhdGUgZmluZ2VycHJpbnQgdXNpbmcgU2Vzc2lvbiBEZXNjcmlwdGlvbiBQcm90b2NvbCAo U0RQKTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICBbUkZDNDU2Nl0uICBUaGUgZmluZ2VycHJpbnQsIGlkZW50aWZpZXMgdGhlIGNlcnRpZmlj YXRlIHRoYXQgd2lsbCBiZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFtSRkM0 NTY2XS4gIFRoZSBmaW5nZXJwcmludCwgaWRlbnRpZmllcyB0aGUgY2VydGlmaWNhdGUgdGhhdCB3 aWxsIGJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwNiI+PC9hPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg cHJlc2VudGVkIGR1cmluZyB0aGUgRFRMUyBoYW5kc2hha2UuICBEVExTLVNSVFAgaXMgZGVmaW5l ZCBmb3IgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cG9pbnQtPC9zcGFuPjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmJsb2NrIj4gICBwcmVzZW50ZWQgZHVyaW5nIHRoZSBEVExTIGhhbmRzaGFrZS4g IERUTFMtU1JUUCBpcyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jdXJyZW50bHk8L3NwYW4+IGRlZmlu ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICB0by1wb2ludDwvc3Bhbj4gbWVkaWEgc2Vzc2lvbnMs IGluIHdoaWNoIHRoZXJlIGFyZSBleGFjdGx5IHR3byBwYXJ0aWNpcGFudHMuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGZvciA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5wb2ludC10 by1wb2ludDwvc3Bhbj4gbWVkaWEgc2Vzc2lvbnMsIGluIHdoaWNoIHRoZXJlIGFyZSBleGFjdGx5 IHR3bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPiAgIEVhY2ggRFRMUy1TUlRQIHNlc3Npb24gKGRlc2NyaWJlZCBpbiBTZWN0aW9uIDMgb2Yg W1JGQzU3NjRdKSBjb250YWluczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBw YXJ0aWNpcGFudHMuICBFYWNoIERUTFMtU1JUUCBzZXNzaW9uIChkZXNjcmliZWQgaW4gU2VjdGlv biAzIG9mPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgYSBzaW5nbGUgRFRMUyBjb25uZWN0aW9uIChpZiBSVFAgYW5kIFJUQ1AgYXJlIG11 bHRpcGxleGVkKSBvciB0d288L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgW1JG QzU3NjRdKSBjb250YWlucyBhIHNpbmdsZSBEVExTIGNvbm5lY3Rpb24gKGlmIFJUUCBhbmQgUlRD UCBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICBEVExTIGNvbm5lY3Rpb25zIChpZiBSVFAgYW5kIFJUQ1AgYXJlIG5vdCBtdWx0aXBs ZXhlZCksIGFuZCBlaXRoZXI8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbXVs dGlwbGV4ZWQpIG9yIHR3byBEVExTIGNvbm5lY3Rpb25zIChpZiBSVFAgYW5kIFJUQ1AgYXJlIG5v dDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHR3byBTUlRQIGNvbnRleHRzIChpZiBtZWRpYSB0cmFmZmljIGlzIGZsb3dpbmcgaW4gYm90 aCBkaXJlY3Rpb25zIG9uPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG11bHRp cGxleGVkKSwgYW5kIGVpdGhlciB0d28gU1JUUCBjb250ZXh0cyAoaWYgbWVkaWEgdHJhZmZpYyBp czwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHRoZSBzYW1lIDUtdHVwbGUpIG9yIG9uZSBTUlRQIGNvbnRleHQgKGlmIG1lZGlhIHRyYWZm aWMgaXMgb25seTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBmbG93aW5nIGlu IGJvdGggZGlyZWN0aW9ucyBvbiB0aGUgc2FtZSA1LXR1cGxlKSBvciBvbmUgU1JUUCBjb250ZXh0 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ ICAgZmxvd2luZyBpbiBvbmUgZGlyZWN0aW9uKS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgKGlmIG1lZGlhIHRyYWZmaWMgaXMgb25seSBmbG93aW5nIGluIG9uZSBkaXJlY3Rp b24pLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgSW4gbWFueSBTSVAgZGVwbG95bWVu dHMsIFNJUCBCYWNrLXRvLUJhY2sgVXNlciBBZ2VudHMgKEIyQlVBKTwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIEluIG1hbnkgU0lQIGRlcGxveW1lbnRzLCBTSVAgQmFjay10by1C YWNrIFVzZXIgQWdlbnRzIChCMkJVQSk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW50aXRpZXMgZXhpc3Qgb24gdGhlIFNJUCBzaWduYWxp bmcgcGF0aCBiZXR3ZWVuIHRoZSBlbmRwb2ludHMuICBBczwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgIGVudGl0aWVzIGV4aXN0IG9uIHRoZSBTSVAgc2lnbmFsaW5nIHBhdGggYmV0 d2VlbiB0aGUgZW5kcG9pbnRzLiAgQXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZGVzY3JpYmVkIGluIFtSRkM3MDkyXSwgdGhlc2UgQjJC VUFzIGNhbiBtb2RpZnkgU0lQIGFuZCBTRFA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICBkZXNjcmliZWQgaW4gW1JGQzcwOTJdLCB0aGVzZSBCMkJVQXMgY2FuIG1vZGlmeSBTSVAg YW5kIFNEUDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBpbmZvcm1hdGlvbi4gIFRoZXkgY2FuIGFsc28gYmUgcHJlc2VudCBvbiB0aGUgbWVk aWEgcGF0aCwgaW4gd2hpY2g8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpbmZv cm1hdGlvbi4gIFRoZXkgY2FuIGFsc28gYmUgcHJlc2VudCBvbiB0aGUgbWVkaWEgcGF0aCwgaW4g d2hpY2g8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgY2FzZSB0aGV5IG1vZGlmeSBwYXJ0cyBvZiB0aGUgU0RQIGluZm9ybWF0aW9uIChsaWtl IElQIGFkZHJlc3MsIHBvcnQpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgY2Fz ZSB0aGV5IG1vZGlmeSBwYXJ0cyBvZiB0aGUgU0RQIGluZm9ybWF0aW9uIChsaWtlIElQIGFkZHJl c3MsIHBvcnQpPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIGFuZCBzdWJzZXF1ZW50bHkgbW9kaWZ5IHRoZSBSVFAgaGVhZGVycyBhcyB3ZWxs LiAgU3VjaCBCMkJVQXMgYXJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5k IHN1YnNlcXVlbnRseSBtb2RpZnkgdGhlIFJUUCBoZWFkZXJzIGFzIHdlbGwuICBTdWNoIEIyQlVB cyBhcmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgcmVmZXJyZWQgdG8gYXMgbWVkaWEgcGxhbmUgQjJCVUFzLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIHJlZmVycmVkIHRvIGFzIG1lZGlhIHBsYW5lIEIyQlVBcy48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjEuMi4gIEdvYWxzPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+MS4yLiAgR29hbHM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNz PSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+ PGEgbmFtZT0icGFydC1sNCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVt PiBwYWdlIDMsIGxpbmUgMjc8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFy dC1yNCI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDMsIGxp bmUgMjc8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgQSBCMkJVQSB0aGF0IGFjdHMgYXMgYSBzaW1wbGUgbWVkaWEg cmVsYXkgZWZmZWN0aXZlbHkgdW5hd2FyZSBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgIEEgQjJCVUEgdGhhdCBhY3RzIGFzIGEgc2ltcGxlIG1lZGlhIHJlbGF5IGVmZmVj dGl2ZWx5IHVuYXdhcmUgb2Y8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgYW55dGhpbmcgdGhhdCBpcyB0cmFuc3BvcnRlZCBhbmQgb25s eSB0ZXJtaW5hdGVzIHRoZSBtZWRpYSBwbGFuZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgICAgIGFueXRoaW5nIHRoYXQgaXMgdHJhbnNwb3J0ZWQgYW5kIG9ubHkgdGVybWluYXRl cyB0aGUgbWVkaWEgcGxhbmU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgYXQgdGhlIElQIGFuZCB0cmFuc3BvcnQgKFVEUC9UQ1ApIGxh eWVycy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICBhdCB0aGUgSVAgYW5k IHRyYW5zcG9ydCAoVURQL1RDUCkgbGF5ZXJzLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ ICAgICAgQSBCMkJVQSB0aGF0IHBlcmZvcm1zIGEgbWVkaWEtYXdhcmUgcm9sZS4gIEl0IGluc3Bl Y3RzIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICAgIEEgQjJCVUEgdGhh dCBwZXJmb3JtcyBhIG1lZGlhLWF3YXJlIHJvbGUuICBJdCBpbnNwZWN0cyBhbmQ8L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgcG90ZW50 aWFsbHkgbW9kaWZpZXMgUlRQIGhlYWRlcnMgb3IgUlRQIENvbnRyb2wgUHJvdG9jb2wgKFJUQ1Ap PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcG90ZW50aWFsbHkgbW9kaWZp ZXMgUlRQIGhlYWRlcnMgb3IgUlRQIENvbnRyb2wgUHJvdG9jb2wgKFJUQ1ApPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIHBhY2tldHMu PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgcGFja2V0cy48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgZGVzY3JpYmUgdGhl IGJlaGF2aW9yIEIyQlVBcyBNVVNUIGZvbGxvdyBpbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIFRoZSBmb2xsb3dpbmcgc2VjdGlvbnMgZGVzY3JpYmUgdGhlIGJlaGF2aW9yIEIy QlVBcyBNVVNUIGZvbGxvdyBpbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMDciPjwvYT48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIG9yZGVyIHRvIGF2b2lkIGFueSBpbXBhY3QgdG8gZW5kLXRvLWVuZCBEVExT LVNSVFAgc2Vzc2lvbnMuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIG9yZGVy IHRvIGF2b2lkIGFueSBpbXBhY3QgdG8gZW5kLXRvLWVuZCBEVExTLVNSVFAgc2Vzc2lvbnMuICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5UaGU8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIERUTFMtU1JUUCBmcmFtZXdvcmsgW1JGQzU3 NjNdIHJlY29tbWVuZHMgdGhhdCBlbmRwb2ludHMgb3IgcHJveHk8L3NwYW4+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHNlcnZlciBpbiB0 aGUgZW5kcG9pbnQgZG9tYWluIHVzZSBbUkZDNDQ3NF0gdG8gaW50ZWdyaXR5IHByb3RlY3QgdGhl PC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs YmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5z ZXJ0Ij4gICBmaW5nZXJwcmludCBhdHRyaWJ1dGVzLiAgVGh1cywgdW5kZXIgbW9zdCBjaXJjdW1z dGFuY2VzLCBCMkJVQXM8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxz cGFuIGNsYXNzPSJpbnNlcnQiPiAgIGNhbm5vdCB0ZXJtaW5hdGUgdGhlIERUTFMtU1JUUCBzZXNz aW9uIHdpdGhvdXQgaW52YWxpZGF0aW5nIHRoZTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgc2lnbmF0dXJlIGFuZCBjYXVzaW5n IHRoZSBzZXNzaW9uIHRvIGZhaWwuPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ Mi4gIFRlcm1pbm9sb2d5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+Mi4gIFRlcm1p bm9sb2d5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBUaGUga2V5IHdvcmRzICJNVVNU IiwgIk1VU1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5P VCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAiU0hPVUxEIiwgIlNIT1VMRCBO T1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpczwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgICJTSE9VTEQiLCAiU0hPVUxEIE5PVCIsICJSRUNP TU1FTkRFRCIsICJNQVkiLCBhbmQgIk9QVElPTkFMIiBpbiB0aGlzPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGRvY3VtZW50IGFyZSB0byBi ZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLjwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPiAgIGRvY3VtZW50IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNj cmliZWQgaW4gW1JGQzIxMTldLjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDA4Ij48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgPHNwYW4gY2xhc3M9Imluc2VydCI+VHJhbnNwb3J0IEFkZHJl c3M6IFRoZSBjb21iaW5hdGlvbiBvZiBhbiBJUCBhZGRyZXNzIGFuZCBwb3J0IG51bWJlci48L3Nw YW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9j ayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGhl IGZvbGxvd2luZyBnZW5lcmFsaXplZCB0ZXJtcyBhcmUgZGVmaW5lZCBpbiBbUkZDMzI2MV0sIFNl Y3Rpb24gNi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGUgZm9sbG93aW5n IGdlbmVyYWxpemVkIHRlcm1zIGFyZSBkZWZpbmVkIGluIFtSRkMzMjYxXSwgU2VjdGlvbiA2Ljwv dGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgQjJCVUE6IGEgU0lQIEJhY2stdG8tQmFj ayBVc2VyIEFnZW50LCB3aGljaCBpcyB0aGUgbG9naWNhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmlnaHQiPiAgICAgIEIyQlVBOiBhIFNJUCBCYWNrLXRvLUJhY2sgVXNlciBBZ2VudCwgd2hp Y2ggaXMgdGhlIGxvZ2ljYWw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgY29tYmluYXRpb24gb2YgYSBVc2VyIEFnZW50IFNlcnZlciAo VUFTKSBhbmQgVXNlciBBZ2VudCBDbGllbnQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0 Ij4gICAgICBjb21iaW5hdGlvbiBvZiBhIFVzZXIgQWdlbnQgU2VydmVyIChVQVMpIGFuZCBVc2Vy IEFnZW50IENsaWVudDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICAgICAoVUFDKS48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICAgICAoVUFDKS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgIFVBUzogYSBTSVAg VXNlciBBZ2VudCBTZXJ2ZXIuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAg VUFTOiBhIFNJUCBVc2VyIEFnZW50IFNlcnZlci48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PiAgICAgIFVBQzogYSBTSVAgVXNlciBBZ2VudCBDbGllbnQuPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgICAgVUFDOiBhIFNJUCBVc2VyIEFnZW50IENsaWVudC48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxh IG5hbWU9InBhcnQtbDUiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g cGFnZSA2LCBsaW5lIDc8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEgbmFtZT0icGFydC1y NSI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDYsIGxpbmUg NzwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBzYWtlIG9mIHNpbXBs aWNpdHkuICBJbiByZWFsaXR5IGRlcGVuZGluZyBvbiB3aGV0aGVyIHRoZSBSVFAgYW5kPC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhlIHNha2Ugb2Ygc2ltcGxpY2l0eS4gIElu IHJlYWxpdHkgZGVwZW5kaW5nIG9uIHdoZXRoZXIgdGhlIFJUUCBhbmQ8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgUlRDUCBmbG93cyBhcmUg bXVsdGlwbGV4ZWQgb3IgZGVtdWx0aXBsZXhlZCB0aGVyZSB3aWxsIGJlIG9uZSBvciB0d288L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBSVENQIGZsb3dzIGFyZSBtdWx0aXBsZXhl ZCBvciBkZW11bHRpcGxleGVkIHRoZXJlIHdpbGwgYmUgb25lIG9yIHR3bzwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBEVExTIGNvbm5lY3Rp b25zLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIERUTFMgY29ubmVjdGlvbnMu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBJZiBSVFAgYW5kIFJUQ1AgdHJhZmZpYyBp cyBtdWx0aXBsZXhlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzU3NjFdIG9uIGE8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBJZiBSVFAgYW5kIFJUQ1AgdHJhZmZpYyBpcyBtdWx0aXBs ZXhlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzU3NjFdIG9uIGE8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgc2luZ2xlIHBvcnQgdGhlbiBvbmx5 IGEgc2luZ2xlIERUTFMgY29ubmVjdGlvbiBpcyByZXF1aXJlZCBiZXR3ZWVuPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgc2luZ2xlIHBvcnQgdGhlbiBvbmx5IGEgc2luZ2xlIERU TFMgY29ubmVjdGlvbiBpcyByZXF1aXJlZCBiZXR3ZWVuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHRoZSBwZWVycy4gIElmIFJUUCBhbmQg UlRDUCBhcmUgbm90IG11bHRpcGxleGVkLCB0aGVuIHRoZSBwZWVycyB3b3VsZDwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRoZSBwZWVycy4gIElmIFJUUCBhbmQgUlRDUCBhcmUg bm90IG11bHRpcGxleGVkLCB0aGVuIHRoZSBwZWVycyB3b3VsZDwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBoYXZlIHRvIGVzdGFibGlzaCB0 d28gRFRMUyBjb25uZWN0aW9ucy4gIEluIHRoaXMgY2FzZSwgQm9iLCBhZnRlciBoZTwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGhhdmUgdG8gZXN0YWJsaXNoIHR3byBEVExTIGNv bm5lY3Rpb25zLiAgSW4gdGhpcyBjYXNlLCBCb2IsIGFmdGVyIGhlPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHJlY2VpdmVzIGFuIElOVklU RSByZXF1ZXN0LCB0cmlnZ2VycyB0aGUgZXN0YWJsaXNobWVudCBvZiBhIERUTFM8L3RkPjx0ZD4g PC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICByZWNlaXZlcyBhbiBJTlZJVEUgcmVxdWVzdCwgdHJp Z2dlcnMgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBEVExTPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGNvbm5lY3Rpb24uICBOb3RlIHRoYXQg dGhlIERUTFMgaGFuZHNoYWtlIGFuZCB0aGUgc2VuZGluZyBvZiBJTlZJVEU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBjb25uZWN0aW9uLiAgTm90ZSB0aGF0IHRoZSBEVExTIGhh bmRzaGFrZSBhbmQgdGhlIHNlbmRpbmcgb2YgSU5WSVRFPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAwOSI+ PC9hPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcmVzcG9uc2UgY2FuIGhhcHBlbiBpbiBwYXJhbGxl bDsgdGh1cywgdGhlIEIyQlVBIDxzcGFuIGNsYXNzPSJkZWxldGUiPlNIT1VMRDwvc3Bhbj4gYmUg cHJlcGFyZWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcmVzcG9uc2UgY2Fu IGhhcHBlbiBpbiBwYXJhbGxlbDsgdGh1cywgdGhlIEIyQlVBIDxzcGFuIGNsYXNzPSJpbnNlcnQi Pk1VU1Q8L3NwYW4+IGJlIHByZXBhcmVkIHRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdG8gcmVjZWl2ZSBEVExTLCBTVFVOIGFuZCBt ZWRpYSBvbiB0aGUgcG9ydHMgaXQgYWR2ZXJ0aXNlZCB0byBCb2IgaW48L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJibG9jayI+ICAgcmVjZWl2ZSBEVExTLCBTVFVOIGFuZCBtZWRpYSBvbiB0aGUg cG9ydHMgaXQgYWR2ZXJ0aXNlZCB0byBCb2IgaW4gdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgdGhlIDxzcGFuIGNsYXNzPSJkZWxl dGUiPklOVklURSByZXF1ZXN0Ljwvc3Bhbj4gIFNpbmNlIGEgbWVkaWEgcmVsYXkgQjJCVUEgZG9l cyBub3QgZGlmZmVyZW50aWF0ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8 c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TSVAgb2ZmZXIgYmVmb3JlIGl0IHJlY2VpdmVzIGEgU0lQIGFu c3dlciBmcm9tIEJvYi48L3NwYW4+IFNpbmNlIGEgbWVkaWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBiZXR3ZWVuIGEgRFRMUyBtZXNz YWdlLCBSVFAgb3IgYW55IHBhY2tldCBpdCByZWNlaXZlcywgaXQgb25seTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmJsb2NrIj4gICByZWxheSBCMkJVQSBkb2VzIG5vdCBkaWZmZXJlbnRpYXRl IGJldHdlZW4gYSBEVExTIG1lc3NhZ2UsIFJUUCBvciBhbnk8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBjaGFuZ2VzIHRoZSB0cmFuc3Bv cnQgbGF5ZXIgKFVEUC9UQ1ApIGFuZCBJUCBoZWFkZXJzIGFuZCBmb3J3YXJkcyB0aGU8L3RkPjx0 ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgcGFja2V0IGl0IHJlY2VpdmVzLCBpdCBvbmx5 IGNoYW5nZXMgdGhlIHRyYW5zcG9ydCBsYXllciAoVURQL1RDUCkgYW5kPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgcGFja2V0IHRvd2Fy ZHMgdGhlIG90aGVyIGVuZHBvaW50LiAgQjJCVUEgY2Fubm90IGRlY3J5cHQgdGhlIFJUUDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBJUCBoZWFkZXJzIGFuZCBmb3J3YXJkcyB0 aGUgcGFja2V0IHRvd2FyZHMgdGhlIG90aGVyIGVuZHBvaW50LiAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+VGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIHBheWxvYWQgYXMgdGhlIHBheWxvYWQgaXMgZW5jcnlwdGVkIHVzaW5n IHRoZSBTUlRQIGtleXMgZGVyaXZlZCBmcm9tPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIEIyQlVBIGNhbm5vdCBkZWNyeXB0IHRoZSBSVFAgcGF5bG9hZCBhcyB0aGUgcGF5bG9h ZCBpcyBlbmNyeXB0ZWQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICB0aGUgRFRMUyBjb25uZWN0aW9uIHNldHVwIGJldHdlZW4gQWxpY2Ug YW5kIEJvYi48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdXNpbmcgdGhlIFNS VFAga2V5cyBkZXJpdmVkIGZyb20gdGhlIERUTFMgY29ubmVjdGlvbiBzZXR1cCBiZXR3ZWVuPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIEFsaWNlIGFuZCBCb2IuPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTAiPjwvYT48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJkZWxldGUiPltJLUQuaWV0Zi1zdGlyLXJmYzQ0 NzRiaXNdPC9zcGFuPiBwcm92aWRlcyBhIG1lYW5zIGZvciBzaWduaW5nIHBvcnRpb25zIG9mPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPltS RkM0NDc0XTwvc3Bhbj4gcHJvdmlkZXMgYSBtZWFucyBmb3Igc2lnbmluZyBwb3J0aW9ucyBvZiBT SVAgcmVxdWVzdHMgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGJsb2NrIj4gICBTSVAgcmVxdWVzdHMgaW4gb3JkZXIgdG8gcHJvdmlkZSBpZGVudGl0 eSBhc3N1cmFuY2UgYW5kIGNlcnRpZmljYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPiAgIG9yZGVyIHRvIHByb3ZpZGUgaWRlbnRpdHkgYXNzdXJhbmNlIGFuZCBjZXJ0aWZpY2F0 ZSBwaW5uaW5nIGJ5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgcGlubmluZyBieSBwcm92aWRpbmcgYSBzaWduYXR1cmUgb3ZlciB0aGUg ZmluZ2VycHJpbnQgb2Yga2V5aW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IHByb3ZpZGluZyBhIHNpZ25hdHVyZSBvdmVyIHRoZSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5TRFAg dGhhdCBjYXJyaWVzIHRoZTwvc3Bhbj4gZmluZ2VycHJpbnQgb2Y8L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVs ZXRlIj5tYXRlcmlhbCBpbiBTRFA8L3NwYW4+IGZvciBEVExTLVNSVFAgW1JGQzU3NjNdLiAgQSBt ZWRpYSByZWxheSBCMkJVQSBNVVNUPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAg IGtleWluZyBmb3IgRFRMUy1TUlRQIFtSRkM1NzYzXS4gIEEgbWVkaWEgcmVsYXkgQjJCVUEgTVVT VCBlbnN1cmUgdGhhdDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsYmxvY2siPiAgIGVuc3VyZSB0aGF0IGl0IGRvZXMgbm90IG1vZGlmeSBhbnkgb2YgdGhl IGluZm9ybWF0aW9uIHVzZWQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAg aXQgZG9lcyBub3QgbW9kaWZ5IGFueSBvZiB0aGUgaW5mb3JtYXRpb24gdXNlZCB0byBjb25zdHJ1 Y3QgdGhlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+ICAgY29uc3RydWN0IHRoZSBzaWduYXR1cmUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIHNpZ25hdHVyZS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIElu IHRoZSBhYm92ZSBleGFtcGxlLCBBbGljZSBjYW4gYmUgYXV0aG9yaXplZCBieSB0aGUgYXV0aG9y aXphdGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEluIHRoZSBhYm92ZSBl eGFtcGxlLCBBbGljZSBjYW4gYmUgYXV0aG9yaXplZCBieSB0aGUgYXV0aG9yaXphdGlvbjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBzZXJ2 ZXIgKFNJUCBwcm94eSkgaW4gaXRzIGRvbWFpbiB1c2luZyB0aGUgcHJvY2VkdXJlcyBpbiBTZWN0 aW9uIDUgb2Y8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBzZXJ2ZXIgKFNJUCBw cm94eSkgaW4gaXRzIGRvbWFpbiB1c2luZyB0aGUgcHJvY2VkdXJlcyBpbiBTZWN0aW9uIDUgb2Y8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkPjxhIG5hbWU9ImRpZmYwMDExIj48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBj bGFzcz0iZGVsZXRlIj5bSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXS48L3NwYW4+ICBJbiBzdWNo IGEgY2FzZSwgaWYgdGhlIEIyQlVBIG1vZGlmaWVzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPltSRkM0NDc0XS48L3NwYW4+ICBJbiBzdWNo IGEgY2FzZSwgaWYgdGhlIEIyQlVBIG1vZGlmaWVzIHNvbWUgb2YgdGhlIFNJUDwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHNvbWUgb2Yg dGhlIFNJUCBoZWFkZXJzIG9yIFNEUCBjb250ZW50IHRoYXQgd2FzIHVzZWQgYnkgQWxpY2Unczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBoZWFkZXJzIG9yIFNEUCBjb250ZW50 IHRoYXQgd2FzIHVzZWQgYnkgQWxpY2UncyBhdXRob3JpemF0aW9uIHNlcnZlcjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGF1dGhvcml6 YXRpb24gc2VydmVyIHRvIGdlbmVyYXRlIHRoZSBpZGVudGl0eSwgaXQgd291bGQgYnJlYWsgdGhl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRvIGdlbmVyYXRlIHRoZSBpZGVu dGl0eSwgaXQgd291bGQgYnJlYWsgdGhlIGlkZW50aXR5IHZlcmlmaWNhdGlvbjwvdGQ+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGlkZW50aXR5 IHZlcmlmaWNhdGlvbiBwcm9jZWR1cmUgZXhwbGFpbmVkIGluIFNlY3Rpb24gPHNwYW4gY2xhc3M9 ImRlbGV0ZSI+NC4yPC9zcGFuPiBvZjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4g ICBwcm9jZWR1cmUgZXhwbGFpbmVkIGluIFNlY3Rpb24gPHNwYW4gY2xhc3M9Imluc2VydCI+Njwv c3Bhbj4gb2YgPHNwYW4gY2xhc3M9Imluc2VydCI+W1JGQzQ0NzRdPC9zcGFuPiByZXN1bHRpbmcg aW4gYSA0Mzg8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5bSS1ELmlldGYtc3Rpci1yZmM0NDc0Ymlz XTwvc3Bhbj4gcmVzdWx0aW5nIGluIGEgNDM4IGVycm9yIHJlc3BvbnNlIGJlaW5nPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGVycm9yIHJlc3BvbnNlIGJlaW5nIHJldHVybmVk LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2si PiAgIHJldHVybmVkLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPjMuMS4yLiAgUlRQL1JUQ1AtYXdhcmUgTWVkaWEgQXdhcmUgQjJC VUE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLjEuMi4gIFJUUC9SVENQLWF3YXJl IE1lZGlhIEF3YXJlIEIyQlVBPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBVbmxpa2Ug dGhlIG1lZGlhIHJlbGF5IGRpc2N1c3NlZCBpbiBTZWN0aW9uIDMuMS4xLCBhIG1lZGlhLWF3YXJl PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVW5saWtlIHRoZSBtZWRpYSByZWxh eSBkaXNjdXNzZWQgaW4gU2VjdGlvbiAzLjEuMSwgYSBtZWRpYS1hd2FyZTwvdGQ+PHRkIGNsYXNz PSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICByZWxheSBhcyBkZWZp bmVkIGluIFNlY3Rpb24gMy4yLjIgb2YgW1JGQzcwOTJdLCBpcyBhd2FyZSBvZiB0aGUgdHlwZTwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHJlbGF5IGFzIGRlZmluZWQgaW4gU2Vj dGlvbiAzLjIuMiBvZiBbUkZDNzA5Ml0sIGlzIGF3YXJlIG9mIHRoZSB0eXBlPC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIG9mIG1lZGlhIHRy YWZmaWMgaXQgaXMgcmVjZWl2aW5nLiAgVGhlcmUgYXJlIHR3byB0eXBlcyBvZiBtZWRpYS1hd2Fy ZTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIG9mIG1lZGlhIHRyYWZmaWMgaXQg aXMgcmVjZWl2aW5nLiAgVGhlcmUgYXJlIHR3byB0eXBlcyBvZiBtZWRpYS1hd2FyZTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEg bmFtZT0iZGlmZjAwMTIiPjwvYT48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIHJlbGF5LCB0aG9zZSB0 aGF0IG1lcmVseSBpbnNwZWN0IHRoZSBSVFAgaGVhZGVycyBhbmQgUlRDUCBwYWNrZXRzLDwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICByZWxheSwgdGhvc2UgdGhhdCBtZXJlbHkg aW5zcGVjdCB0aGUgUlRQIGhlYWRlcnMgYW5kIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnVuZW5jcnlw dGVkPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+ CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNz PSJsYmxvY2siPiAgIGFuZCB0aG9zZSB0aGF0IGluc3BlY3QgYW5kIG1vZGlmeSB0aGUgUlRQIGhl YWRlcnMgYW5kIFJUQ1AgcGFja2V0cy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ PHNwYW4gY2xhc3M9Imluc2VydCI+ICAgcG9ydGlvbnMgb2Y8L3NwYW4+IFJUQ1AgcGFja2V0cywg YW5kIHRob3NlIHRoYXQgaW5zcGVjdCBhbmQgbW9kaWZ5IHRoZSBSVFA8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBUaGUgPHNwYW4gY2xh c3M9ImRlbGV0ZSI+bWVjaGFuaXNtPC9zcGFuPiBkZXNjcmliZWQgaW4gU2VjdXJpdHkgQ29uc2lk ZXJhdGlvbnMgc2VjdGlvbiBNVVNUIGJlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2si PiAgIGhlYWRlcnMgYW5kIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnVuZW5jcnlwdGVkIHBvcnRpb25z IG9mPC9zcGFuPiBSVENQIHBhY2tldHMuICBUaGUgPHNwYW4gY2xhc3M9Imluc2VydCI+aWRlbnRp dHk8L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxibG9jayI+ICAgdXNlZCBieSBlbmRwb2ludCB0byBkZXRlY3QgbWFsaWNpb3VzIDxzcGFuIGNs YXNzPSJkZWxldGUiPkIyQlVBJ3M8L3NwYW4+IHRoYXQgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TUFZ PC9zcGFuPiBhdHRlbXB0IHRvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPjxzcGFu IGNsYXNzPSJpbnNlcnQiPiAgIGludGVncml0eSBwcm90ZWN0aW9uIHByb2NlZHVyZXM8L3NwYW4+ IGRlc2NyaWJlZCBpbiBTZWN1cml0eSBDb25zaWRlcmF0aW9uczwvdGQ+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBzZWN0aW9uIE1VU1QgYmUgdXNlZCBieSA8c3BhbiBjbGFzcz0iaW5z ZXJ0Ij50aGU8L3NwYW4+IGVuZHBvaW50IDxzcGFuIGNsYXNzPSJpbnNlcnQiPm9yIHRoZSBwcm94 eSBzZXJ2ZXIgaW4gdGhlPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48 c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBlbmRwb2ludHMgbmV0d29yazwvc3Bhbj4gdG8gZGV0ZWN0 IG1hbGljaW91cyA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5CMkJVQXM8L3NwYW4+IHRoYXQgYXR0ZW1w dCB0bzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0 Ij4gICB0ZXJtaW5hdGUgdGhlIERUTFMtU1JUUCBzZXNzaW9uLjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPiAgIHRlcm1pbmF0ZSB0aGUgRFRMUy1TUlRQIHNlc3Npb24uPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij4zLjEuMi4xLiAgUlRQIGhlYWRlciBhbmQgUlRDUCBwYWNrZXRz IEluc3BlY3Rpb248L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4zLjEuMi4xLiAgUlRQ IGhlYWRlciBhbmQgUlRDUCBwYWNrZXRzIEluc3BlY3Rpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIFRoaXMga2luZCBvZiBtZWRpYSBhd2FyZSByZWxheSBkb2VzIG5vdCBtb2RpZnkg dGhlIFJUUCBoZWFkZXJzIGFuZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFRo aXMga2luZCBvZiBtZWRpYSBhd2FyZSByZWxheSBkb2VzIG5vdCBtb2RpZnkgdGhlIFJUUCBoZWFk ZXJzIGFuZDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij4gICBSVENQIHBhY2tldHMgYnV0IG9ubHkgaW5zcGVjdHMgdGhlIHBhY2tldHMuICBJdCBN VVNUIE5PVCB0ZXJtaW5hdGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBSVENQ IHBhY2tldHMgYnV0IG9ubHkgaW5zcGVjdHMgdGhlIHBhY2tldHMuICBJdCBNVVNUIE5PVCB0ZXJt aW5hdGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgdGhlIERUTFMtU1JUUCBzZXNzaW9uIG9uIHdoaWNoIHRoZSBwYWNrZXRzIGFyZSByZWNl aXZlZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICB0aGUgRFRMUy1TUlRQIHNl c3Npb24gb24gd2hpY2ggdGhlIHBhY2tldHMgYXJlIHJlY2VpdmVkLjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+My4xLjIuMi4gIFJUUCBoZWFkZXIgYW5kIFJUQ1AgcGFja2V0IE1vZGlmaWNh dGlvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjMuMS4yLjIuICBSVFAgaGVhZGVy IGFuZCBSVENQIHBhY2tldCBNb2RpZmljYXRpb248L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxMyI+PC9hPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+SW4gb3JkZXIgdG88L3NwYW4+IG1vZGlmeSBoZWFkZXJzIDxzcGFu IGNsYXNzPSJkZWxldGUiPmEgQjJCVUEgbmVlZHM8L3NwYW4+IHRvIGFjdCBhcyBhIERUTFMgPHNw YW4gY2xhc3M9ImRlbGV0ZSI+ZW5kcG9pbnQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNz PSJyYmxvY2siPiAgIDxzcGFuIGNsYXNzPSJpbnNlcnQiPkEgQjJCVUEgY2Fubm90PC9zcGFuPiBt b2RpZnkgPHNwYW4gY2xhc3M9Imluc2VydCI+UlRQPC9zcGFuPiBoZWFkZXJzIDxzcGFuIGNsYXNz PSJpbnNlcnQiPm9yIFJUQ1AgcGFja2V0cywgYXMgdG8gZG8gc28gaXQ8L3NwYW4+PC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xh c3M9ImRlbGV0ZSI+ICAgYW5kPC9zcGFuPiB0ZXJtaW5hdGUgdGhlIERUTFMtU1JUUCBzZXNzaW9u IGFuZCBkZWNyeXB0L3JlLWVuY3J5cHQgUlRQPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxv Y2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIHdvdWxkIG5lZWQ8L3NwYW4+IHRvIGFjdCBhcyBh IERUTFMgPHNwYW4gY2xhc3M9Imluc2VydCI+ZW5kcG9pbnQsPC9zcGFuPiB0ZXJtaW5hdGUgdGhl IERUTFMtU1JUUCBzZXNzaW9uPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+cGF5bG9hZC48L3NwYW4+ ICBUaGlzIHdvdWxkIDxzcGFuIGNsYXNzPSJkZWxldGUiPmJyZWFrIGVuZC10by1lbmQgc2VjdXJp dHk8L3NwYW4+IGFuZCBoZW5jZSBhIEIyQlVBIE1VU1Q8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9 InJibG9jayI+ICAgYW5kIGRlY3J5cHQvcmUtZW5jcnlwdCBSVFAgPHNwYW4gY2xhc3M9Imluc2Vy dCI+cGFja2V0Ljwvc3Bhbj4gIFRoaXMgd291bGQgPHNwYW4gY2xhc3M9Imluc2VydCI+Y2F1c2Ug dGhlIGlkZW50aXR5IGFuZDwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBOT1QgdGVybWluYXRlIERUTFMtU1JUUCBzZXNzaW9u LiAgVGhpcyBzZWN1cml0eSBhbmQgcHJpdmFjeSBwcm9ibGVtPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjxzcGFuIGNsYXNzPSJpbnNlcnQiPiAgIGludGVncml0eSBwcm90ZWN0aW9u IHByb2NlZHVyZXMgZGlzY3Vzc2VkIGluIFtSRkM0NDc0XSB0byBmYWlsPC9zcGFuPiBhbmQ8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBj YW4gYmUgbWl0aWdhdGVkIGJ5IGhhdmluZyBkaWZmZXJlbnQga2V5cyBmb3IgcHJvdGVjdGluZyBS VFAgaGVhZGVyPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGhlbmNlIGEgQjJC VUEgTVVTVCBOT1QgdGVybWluYXRlIDxzcGFuIGNsYXNzPSJpbnNlcnQiPnRoZTwvc3Bhbj4gRFRM Uy1TUlRQIHNlc3Npb24uICBUaGlzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgaW50ZWdyaXR5IGFuZCBlbmNyeXB0aW5nIHRoZSBSVFAg cGF5bG9hZC4gIEZvciBleGFtcGxlLCB0aGUgYXBwcm9hY2g8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+ICAgc2VjdXJpdHkgYW5kIHByaXZhY3kgcHJvYmxlbSBjYW4gYmUgbWl0aWdh dGVkIGJ5IGhhdmluZyBkaWZmZXJlbnQ8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBkaXNjdXNzZWQgaW4gW0ktRC5qb25lcy1wZXJjLXBy aXZhdGUtbWVkaWEtcmVxdHNdIGNhbiBiZSB1c2VkLiAgV2l0aDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBrZXlzIGZvciBwcm90ZWN0aW5nIFJUUCBoZWFkZXIgaW50ZWdyaXR5 IGFuZCBlbmNyeXB0aW5nIHRoZSBSVFA8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBzdWNoIGFuIGFwcHJvYWNoLCB0aGUgQjJCVUEgaXMg bm90IGF3YXJlIG9mIHRoZSBrZXlzIHVzZWQgdG8gZGVjcnlwdDwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmJsb2NrIj4gICBwYXlsb2FkLiAgRm9yIGV4YW1wbGUsIHRoZSBhcHByb2FjaCBkaXNj dXNzZWQgaW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICB0aGUgbWVkaWEgcGF5bG9hZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+ICAgW0ktRC5qb25lcy1wZXJjLXByaXZhdGUtbWVkaWEtcmVxdHNdIGNhbiBiZSB1c2Vk LiAgV2l0aCBzdWNoIGFuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxibG9jayI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGFwcHJv YWNoLCB0aGUgQjJCVUEgaXMgbm90IGF3YXJlIG9mIHRoZSBrZXlzIHVzZWQgdG8gZGVjcnlwdCB0 aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2Nr Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgbWVkaWEgcGF5bG9hZC48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48 dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjMuMi4gIE1lZGlhIFBsYW5lIEIyQlVBIHdpdGggTkFU IEhhbmRsaW5nPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+My4yLiAgTWVkaWEgUGxh bmUgQjJCVUEgd2l0aCBOQVQgSGFuZGxpbmc8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IERUTFMtU1JUUCBoYW5kc2hha2VzIGFuZCBTRFAgb2ZmZXIvYW5zd2VyIGV4Y2hhbmdlcyBbUkZD MzI2NF0gbWF5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRFRMUy1TUlRQIGhh bmRzaGFrZXMgYW5kIFNEUCBvZmZlci9hbnN3ZXIgZXhjaGFuZ2VzIFtSRkMzMjY0XSBtYXk8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgaGFw cGVuIGluIHBhcmFsbGVsLiAgSWYgYW4gZW5kcG9pbnQgaXMgYmVoaW5kIGEgTkFULCBhbmQgdGhl IGVuZHBvaW50PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgaGFwcGVuIGluIHBh cmFsbGVsLiAgSWYgYW4gZW5kcG9pbnQgaXMgYmVoaW5kIGEgTkFULCBhbmQgdGhlIGVuZHBvaW50 PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IGlzIGFjdGluZyBhcyBhIERUTFMgc2VydmVyLCB0aGUgQ2xpZW50SGVsbG8gbWVzc2FnZSBmcm9t IGEgQjJCVUE8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBpcyBhY3RpbmcgYXMg YSBEVExTIHNlcnZlciwgdGhlIENsaWVudEhlbGxvIG1lc3NhZ2UgZnJvbSBhIEIyQlVBPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIChhY3Rp bmcgYXMgRFRMUyBjbGllbnQpIGlzIGxpa2VseSB0byBiZSBsb3N0LCBhcyBkZXNjcmliZWQgaW48 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAoYWN0aW5nIGFzIERUTFMgY2xpZW50 KSBpcyBsaWtlbHkgdG8gYmUgbG9zdCwgYXMgZGVzY3JpYmVkIGluPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFNlY3Rpb24gNy4zIG9mIFtS RkM1NzYzXS4gIEluIG9yZGVyIHRvIG92ZXJjb21lIHRoaXMgcHJvYmxlbSwgdGhlPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgU2VjdGlvbiA3LjMgb2YgW1JGQzU3NjNdLiAgSW4g b3JkZXIgdG8gb3ZlcmNvbWUgdGhpcyBwcm9ibGVtLCB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgZW5kcG9pbnQgYW5kIEIyQlVBIGNh biBzdXBwb3J0IHRoZSBJbnRlcmFjdGl2ZSBDb25uZWN0aXZpdHk8L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICBlbmRwb2ludCBhbmQgQjJCVUEgY2FuIHN1cHBvcnQgdGhlIEludGVy YWN0aXZlIENvbm5lY3Rpdml0eTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBFc3RhYmxpc2htZW50IChJQ0UpIG1lY2hhbmlzbSBbUkZDNTI0 NV0sIGFzIGRpc2N1c3NlZCBpbiBTZWN0aW9uIDcuMzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgIEVzdGFibGlzaG1lbnQgKElDRSkgbWVjaGFuaXNtIFtSRkM1MjQ1XSwgYXMgZGlz Y3Vzc2VkIGluIFNlY3Rpb24gNy4zPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBjbGFzcz0i bGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+PHRoPjxh IG5hbWU9InBhcnQtbDYiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4g cGFnZSA3LCBsaW5lIDM4PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQt cjYiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSA3LCBsaW5l IDQwPC9lbT48L2E+PC90aD48dGQ+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPjQuICBGb3JraW5nIENvbnNpZGVyYXRpb25zPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+NC4gIEZvcmtpbmcgQ29uc2lkZXJhdGlvbnM8L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIER1ZSB0byBmb3JraW5nIFtSRkMzMjYxXSwgYSBTSVAgcmVxdWVzdCBj YXJyeWluZyBhbiBTRFAgb2ZmZXIgc2VudCBieTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIER1ZSB0byBmb3JraW5nIFtSRkMzMjYxXSwgYSBTSVAgcmVxdWVzdCBjYXJyeWluZyBh biBTRFAgb2ZmZXIgc2VudCBieTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij4gICBhbiBlbmRwb2ludCAob2ZmZXJlcikgY2FuIHJlYWNoIG11bHRp cGxlIHJlbW90ZSBlbmRwb2ludHMuICBBcyBhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgYW4gZW5kcG9pbnQgKG9mZmVyZXIpIGNhbiByZWFjaCBtdWx0aXBsZSByZW1vdGUgZW5k cG9pbnRzLiAgQXMgYTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICByZXN1bHQsIG11bHRpcGxlIERUTFMtU1JUUCBzZXNzaW9ucyBjYW4gYmUg ZXN0YWJsaXNoZWQsIG9uZSBiZXR3ZWVuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ ICAgcmVzdWx0LCBtdWx0aXBsZSBEVExTLVNSVFAgc2Vzc2lvbnMgY2FuIGJlIGVzdGFibGlzaGVk LCBvbmUgYmV0d2VlbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICB0aGUgZW5kcG9pbnQgdGhhdCBzZW50IHRoZSBTSVAgcmVxdWVzdCBhbmQg ZWFjaCBvZiB0aGUgcmVtb3RlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdGhl IGVuZHBvaW50IHRoYXQgc2VudCB0aGUgU0lQIHJlcXVlc3QgYW5kIGVhY2ggb2YgdGhlIHJlbW90 ZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBlbmRwb2ludHMgdGhhdCByZWNlaXZlZCB0aGUgcmVxdWVzdC4gIEJvdGggbWVkaWEgcmVsYXlz IGFuZCBtZWRpYS08L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBlbmRwb2ludHMg dGhhdCByZWNlaXZlZCB0aGUgcmVxdWVzdC4gIEJvdGggbWVkaWEgcmVsYXlzIGFuZCBtZWRpYS08 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg YXdhcmUgcmVsYXlzIE1VU1QgZm9yd2FyZCB0aGUgY2VydGlmaWNhdGUgZmluZ2VycHJpbnRzIGFu ZCBTRFAgc2V0dXA8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBhd2FyZSByZWxh eXMgTVVTVCBmb3J3YXJkIHRoZSBjZXJ0aWZpY2F0ZSBmaW5nZXJwcmludHMgYW5kIFNEUCBzZXR1 cDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4g ICBhdHRyaWJ1dGVzIGl0IHJlY2VpdmVkIGluIHRoZSBTRFAgYW5zd2VyIGZyb20gZWFjaCBlbmRw b2ludDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIGF0dHJpYnV0ZXMgaXQgcmVj ZWl2ZWQgaW4gdGhlIFNEUCBhbnN3ZXIgZnJvbSBlYWNoIGVuZHBvaW50PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJk aWZmMDAxNCI+PC9hPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgKGFuc3dlcmVyKSB1bm1vZGlmaWVk IHRvd2FyZHMgdGhlIG9mZmVyZXIuICBTaW5jZSBEVExTIDxzcGFuIGNsYXNzPSJkZWxldGUiPm9w ZXJhdGVzPC9zcGFuPiBvbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICAoYW5z d2VyZXIpIHVubW9kaWZpZWQgdG93YXJkcyB0aGUgb2ZmZXJlci4gIFNpbmNlIDxzcGFuIGNsYXNz PSJpbnNlcnQiPmVhY2g8L3NwYW4+IERUTFM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj50aGU8L3Nw YW4+IDUtdHVwbGUsIEIyQlVBIE1VU1QgcmVwbGFjZSB0aGUgYW5zd2VyZXIncyB0cmFuc3BvcnQg YWRkcmVzc2VzIGluPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIDxzcGFuIGNs YXNzPSJpbnNlcnQiPmNvbm5lY3Rpb24gaXMgc2V0dXA8L3NwYW4+IG9uIDxzcGFuIGNsYXNzPSJp bnNlcnQiPmEgdW5pcXVlPC9zcGFuPiA1LXR1cGxlLCBCMkJVQSBNVVNUIHJlcGxhY2UgdGhlPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAg ZWFjaCBhbnN3ZXIgd2l0aCBpdHMgdW5pcXVlIHRyYW5zcG9ydCBhZGRyZXNzZXMgc28gdGhhdCB0 aGUgb2ZmZXJlcjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBhbnN3ZXJlcidz IHRyYW5zcG9ydCBhZGRyZXNzZXMgaW4gZWFjaCBhbnN3ZXIgd2l0aCBpdHMgdW5pcXVlPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgY2Fu IGVzdGFibGlzaCBhIERUTFMgY29ubmVjdGlvbiB3aXRoIGVhY2ggYW5zd2VyZXIuPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHRyYW5zcG9ydCBhZGRyZXNzZXMgc28gdGhhdCB0 aGUgb2ZmZXJlciBjYW4gZXN0YWJsaXNoIGEgRFRMUzwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmJsb2NrIj4gICBjb25uZWN0aW9uIHdpdGggZWFjaCBhbnN3ZXJlci48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEJvYiAoMTkyLjAuMi4xOjY2NjYpPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQm9iICgxOTIuMC4yLjE6 NjY2Nik8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIC88L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LyBEVExTLVNSVFA9WFhYPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLyBEVExTLVNSVFA9WFhYPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0i cmlnaHQiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAvPC90ZD48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAg ICAgICAgICAgICAgICBEVExTLVNSVFA9WFhYIHY8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij4gICAgICAgICAgICAgICAgICAgICAgICAgRFRMUy1TUlRQPVhYWCB2PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAg ICAgICAgICAgICAmbHQ7LS0tLS0tLS0tLS0mZ3Q7ICAoMTkyLjAuMi4zOjc3NzcpPC90ZD48dGQ+ IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICAgICAgICAgICAgICZsdDstLS0t LS0tLS0tLSZndDsgICgxOTIuMC4yLjM6Nzc3Nyk8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQWxpY2UgKDE5Mi4wLjIuMDo1NTU1KSAgICAg ICAgICAgICBCMkJVQTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEFsaWNlICgx OTIuMC4yLjA6NTU1NSkgICAgICAgICAgICAgQjJCVUE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0ciBiZ2NvbG9yPSJncmF5Ij48dGQ+ PC90ZD48dGg+PGEgbmFtZT0icGFydC1sNyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwv c21hbGw+PGVtPiBwYWdlIDgsIGxpbmUgNDU8L2VtPjwvYT48L3RoPjx0aD4gPC90aD48dGg+PGEg bmFtZT0icGFydC1yNyI+PHNtYWxsPnNraXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBw YWdlIDgsIGxpbmUgNDU8L2VtPjwvYT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBwYWNr ZXRzIHRvIEFsaWNlLjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHBhY2tldHMg dG8gQWxpY2UuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVu byIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij41LiAgU2VjdXJpdHkgQ29uc2lk ZXJhdGlvbnM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij41LiAgU2VjdXJpdHkgQ29u c2lkZXJhdGlvbnM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFRoaXMgZG9jdW1lbnQg ZGVzY3JpYmVzIHRoZSBiZWhhdmlvciBtZWRpYSBwbGFuZSBCMkJVQXMgKG1lZGlhLWF3YXJlPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMg dGhlIGJlaGF2aW9yIG1lZGlhIHBsYW5lIEIyQlVBcyAobWVkaWEtYXdhcmU8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgYW5kIG1lZGlhLXVu YXdhcmUpIE1VU1QgZm9sbG93IHdoZW4gYWN0aW5nIG9uIHRoZSBtZWRpYSBwbGFuZSB0aGF0PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgYW5kIG1lZGlhLXVuYXdhcmUpIE1VU1Qg Zm9sbG93IHdoZW4gYWN0aW5nIG9uIHRoZSBtZWRpYSBwbGFuZSB0aGF0PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIHVzZXMgU1JUUCBzZWN1 cml0eSBjb250ZXh0IHNldHVwIHdpdGggdGhlIERUTFMgcHJvdG9jb2wuICBBdHRlbXB0aW5nPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgdXNlcyBTUlRQIHNlY3VyaXR5IGNvbnRl eHQgc2V0dXAgd2l0aCB0aGUgRFRMUyBwcm90b2NvbC4gIEF0dGVtcHRpbmc8L3RkPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJs aW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdG8gY292ZXIgbWVk aWEtYXdhcmUgcmVsYXkgbW9kaWZ5aW5nIFJUUCBoZWFkZXJzIGFuZCBtZWRpYTwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIHRvIGNvdmVyIG1lZGlhLWF3YXJlIHJlbGF5IG1vZGlm eWluZyBSVFAgaGVhZGVycyBhbmQgbWVkaWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgdGVybWluYXRpb24gc2NlbmFyaW9zIGludm9sdmlu ZyBzZWN1cmUgc2Vzc2lvbnMgKGxpa2UgRFRMUy1TUlRQKSB3aWxsPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgdGVybWluYXRpb24gc2NlbmFyaW9zIGludm9sdmluZyBzZWN1cmUg c2Vzc2lvbnMgKGxpa2UgRFRMUy1TUlRQKSB3aWxsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIGluZXZpdGFibHkgbGVhZCB0byB0aGUgQjJC VUEgYWN0aW5nIGFzIGEgbWFuLWluLXRoZS1taWRkbGUsIGFuZCBoZW5jZTwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIGluZXZpdGFibHkgbGVhZCB0byB0aGUgQjJCVUEgYWN0aW5n IGFzIGEgbWFuLWluLXRoZS1taWRkbGUsIGFuZCBoZW5jZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTUi PjwvYT48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGEgQjJCVUEgTVVTVCBOT1QgdGVybWluYXRlIERU TFMtU1JUUCBzZXNzaW9uLiAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+VGhpcyBkb2N1bWVudCBkb2Vz IG5vdDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYSBCMkJVQSBN VVNUIE5PVCB0ZXJtaW5hdGUgRFRMUy1TUlRQIHNlc3Npb24uICA8c3BhbiBjbGFzcz0iaW5zZXJ0 Ij5TZWN1cml0eTwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICBpbnRyb2R1Y2UgYW55IHNw ZWNpZmljIHNlY3VyaXR5PC9zcGFuPiBjb25zaWRlcmF0aW9ucyA8c3BhbiBjbGFzcz0iZGVsZXRl Ij5iZXlvbmQgdGhvc2UgZGV0YWlsZWQ8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy YmxvY2siPiAgIGNvbnNpZGVyYXRpb25zIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmRpc2N1c3NlZDwv c3Bhbj4gaW4gPHNwYW4gY2xhc3M9Imluc2VydCI+W1JGQzU3NjNdIGFyZSBhbHNvIGFwcGxpY2Fi bGUgdG8gdGhpczwvc3Bhbj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBpbiA8c3BhbiBjbGFzcz0iZGVsZXRlIj5bUkZDNTc2M10uPC9z cGFuPiAgSW4gYWRkaXRpb24sIHRoZSBCMkJVQSBiZWhhdmlvcnMgb3V0bGluZWQgaW4gdGhpczwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0Ij4gICBk b2N1bWVudC48L3NwYW4+ICBJbiBhZGRpdGlvbiwgdGhlIEIyQlVBIGJlaGF2aW9ycyBvdXRsaW5l ZCBpbiB0aGlzIGRvY3VtZW50PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxibG9jayI+ICAgZG9jdW1lbnQgZG8gbm90IGltcGFjdCB0aGUgc2VjdXJpdHkg YW5kIGludGVncml0eSBvZiBhIERUTFMtU1JUUDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJs b2NrIj4gICBkbyBub3QgaW1wYWN0IHRoZSBzZWN1cml0eSBhbmQgaW50ZWdyaXR5IG9mIGEgRFRM Uy1TUlRQIHNlc3Npb24gb3I8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0 ZCBjbGFzcz0ibGJsb2NrIj4gICBzZXNzaW9uIG9yIHRoZSBkYXRhIGV4Y2hhbmdlZCBvdmVyIGl0 LiAgQSBtYWxpY2lvdXMgQjJCVUEgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+TUFZPC9zcGFuPiB0cnkg dG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdGhlIGRhdGEgZXhjaGFuZ2Vk IG92ZXIgaXQuICBBIG1hbGljaW91cyBCMkJVQSA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5jYW48L3Nw YW4+IHRyeSB0byBicmVhayBpbnRvPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgYnJlYWsgaW50byB0aGUgRFRMUyBjb25uZWN0aW9uLCBi dXQgc3VjaCBhbiBhdHRhY2sgY2FuIGJlIHByZXZlbnRlZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFz cz0icmJsb2NrIj4gICB0aGUgRFRMUyBjb25uZWN0aW9uLCBidXQgc3VjaCBhbiBhdHRhY2sgY2Fu IGJlIHByZXZlbnRlZCB1c2luZyB0aGU8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICB1c2luZyB0aGUgaWRlbnRpdHkgdmFsaWRhdGlvbiBt ZWNoYW5pc20gZGlzY3Vzc2VkIGluIDxzcGFuIGNsYXNzPSJkZWxldGUiPltSRkM0NDc0XSBhbmQ8 L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIGlkZW50aXR5IHZhbGlk YXRpb24gbWVjaGFuaXNtIGRpc2N1c3NlZCBpbiA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5bUkZDNDQ3 NF0uPC9zcGFuPiAgRWl0aGVyIHRoZTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNsYXNzPSJkZWxldGUiPiAgIGdldHRpbmcgdXBk YXRlZCBpbiBbSS1ELmlldGYtc3Rpci1yZmM0NDc0YmlzXS48L3NwYW4+ICBFaXRoZXIgdGhlIGVu ZHBvaW50czwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBlbmRwb2ludHMgb3Ig YXV0aGVudGljYXRpb24gc2VydmljZSBwcm94aWVzIGludm9sdmVkIGluIHRoZSBjYWxsIE1VU1Q8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBvciBhdXRoZW50aWNhdGlvbiBzZXJ2aWNlIHByb3hpZXMgaW52b2x2ZWQgaW4gdGhlIGNhbGwg TVVTVCB1c2UgdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyYmxvY2siPiAgIHVzZSB0aGUg aWRlbnRpdHkgdmFsaWRhdGlvbiBtZWNoYW5pc21zIGRpc2N1c3NlZCBpbiBbUkZDNDQ3NF0gdG88 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4g ICBpZGVudGl0eSB2YWxpZGF0aW9uIG1lY2hhbmlzbXMgZGlzY3Vzc2VkIGluIFtSRkM0NDc0XSB0 byB2YWxpZGF0ZSB0aGU8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgdmFsaWRh dGUgdGhlIGlkZW50aXR5IG9mIHBlZXJzIGFuZCBkZXRlY3QgbWFsaWNpb3VzIEIyQlVBJ3MgdGhh dCBjYW48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJs b2NrIj4gICBpZGVudGl0eSBvZiBwZWVycyBhbmQgZGV0ZWN0IG1hbGljaW91cyBCMkJVQSdzIHRo YXQgY2FuIGF0dGVtcHQgdG88L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgYXR0 ZW1wdCB0byB0ZXJtaW5hdGUgdGhlIERUTFMgY29ubmVjdGlvbiB0byBkZWNyeXB0IHRoZSBSVFAg cGF5bG9hZC48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgog ICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0i bGJsb2NrIj4gICB0ZXJtaW5hdGUgdGhlIERUTFMgY29ubmVjdGlvbiB0byBkZWNyeXB0IHRoZSBS VFAgcGF5bG9hZC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij42LiAgSUFOQSBDb25zaWRlcmF0aW9uczwvdGQ+PHRkPiA8L3RkPjx0 ZCBjbGFzcz0icmlnaHQiPjYuICBJQU5BIENvbnNpZGVyYXRpb25zPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBj bGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBUaGlzIGRvY3VtZW50IG1ha2VzIG5vIHJlcXVlc3Qgb2YgSUFOQS48L3Rk Pjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBUaGlzIGRvY3VtZW50IG1ha2VzIG5vIHJl cXVlc3Qgb2YgSUFOQS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjcuICBBY2tub3dsZWRn bWVudHM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij43LiAgQWNrbm93bGVkZ21lbnRz PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTcGVjaWFsIHRoYW5rcyB0byBMb3Jlbnpv IE1pbmllcm8sIFJhbmppdCBBdmFyc2FsYSwgSGFkcmllbCBLYXBsYW4sPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+ICAgU3BlY2lhbCB0aGFua3MgdG8gTG9yZW56byBNaW5pZXJvLCBS YW5qaXQgQXZhcnNhbGEsIEhhZHJpZWwgS2FwbGFuLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBNdXRodSBBcnVsIE1vemhpLCBQYXVsIEt5 eml2YXQsIFBldGVyIERhd2VzLCBCcmV0dCBUYXRlLCBEYW4gV2luZyw8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICBNdXRodSBBcnVsIE1vemhpLCBQYXVsIEt5eml2YXQsIFBldGVy IERhd2VzLCBCcmV0dCBUYXRlLCBEYW4gV2luZyw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgQ2hhcmxlcyBFY2tlbCwgU2ltb24gUGVycmVh dWx0LCBBbGJyZWNodCBTY2h3YXJ6LCBKZW5zIEd1YmFsbGEsPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgQ2hhcmxlcyBFY2tlbCwgU2ltb24gUGVycmVhdWx0LCBBbGJyZWNodCBT Y2h3YXJ6LCBKZW5zIEd1YmFsbGEsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAxNiI+PC9hPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgQ2hyaXN0ZXIgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+SG9sbWJlcmcgYW5k PC9zcGFuPiBDb2xpbiBQZXJraW5zIGZvciB0aGVpciBjb25zdHJ1Y3RpdmU8L3RkPjx0ZD4gPC90 ZD48dGQgY2xhc3M9InJibG9jayI+ICAgQ2hyaXN0ZXIgPHNwYW4gY2xhc3M9Imluc2VydCI+SG9s bWJlcmcsPC9zcGFuPiBDb2xpbiBQZXJraW5zIDxzcGFuIGNsYXNzPSJpbnNlcnQiPmFuZCBCZW4g Q2FtcGJlbGw8L3NwYW4+IGZvciB0aGVpcjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPiAgIGNvbW1lbnRzLHN1Z2dlc3Rpb25zLCBhbmQgZWFy bHkgcmV2aWV3cyB0aGF0IHdlcmUgY3JpdGljYWwgdG8gdGhlPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPiAgIGNvbnN0cnVjdGl2ZSBjb21tZW50cyxzdWdnZXN0aW9ucywgYW5kIGVh cmx5IHJldmlld3MgdGhhdCB3ZXJlPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgZm9ybXVsYXRpb24gYW5kIHJlZmluZW1lbnQgb2YgdGhp cyBkb2N1bWVudC48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+ICAgY3JpdGljYWwg dG8gdGhlIGZvcm11bGF0aW9uIGFuZCByZWZpbmVtZW50IG9mIHRoaXMgZG9jdW1lbnQuPC90ZD48 dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBj bGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij44LiAgQ29udHJpYnV0b3JzPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+OC4gIENvbnRyaWJ1dG9yczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJp Z2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAg ICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVm dCI+ICAgUmFqZWV2IFNldGggcHJvdmlkZWQgc3Vic3RhbnRpYWwgY29udHJpYnV0aW9ucyB0byB0 aGlzIGRvY3VtZW50LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJhamVldiBT ZXRoIHByb3ZpZGVkIHN1YnN0YW50aWFsIGNvbnRyaWJ1dGlvbnMgdG8gdGhpcyBkb2N1bWVudC48 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249 InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjkuICBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyaWdodCI+OS4gIFJlZmVyZW5jZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPjkuMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+OS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXM8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxl ZnQiPiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNz IHRvIEluZGljYXRlPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzIxMTld ICBCcmFkbmVyLCBTLiwgIktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGU8L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjwvdHI+CiAgICAgIDx0 ciBiZ2NvbG9yPSJncmF5Ij48dGQ+PC90ZD48dGg+PGEgbmFtZT0icGFydC1sOCI+PHNtYWxsPnNr aXBwaW5nIHRvIGNoYW5nZSBhdDwvc21hbGw+PGVtPiBwYWdlIDEwLCBsaW5lIDMwPC9lbT48L2E+ PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9InBhcnQtcjgiPjxzbWFsbD5za2lwcGluZyB0byBj aGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAxMCwgbGluZSAzMDwvZW0+PC9hPjwvdGg+PHRkPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij45LjIuICBJbmZv cm1hdGl2ZSBSZWZlcmVuY2VzPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+OS4yLiAg SW5mb3JtYXRpdmUgUmVmZXJlbmNlczwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3Rk Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0kt RC5pZXRmLWF2dGV4dC1ydHAtZ3JvdXBpbmctdGF4b25vbXldPC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyaWdodCI+ICAgW0ktRC5pZXRmLWF2dGV4dC1ydHAtZ3JvdXBpbmctdGF4b25vbXldPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAg ICAgICAgICAgTGVubm94LCBKLiwgR3Jvc3MsIEsuLCBOYW5kYWt1bWFyLCBTLiwgU2FsZ3VlaXJv LCBHLiwgYW5kPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBM ZW5ub3gsIEouLCBHcm9zcywgSy4sIE5hbmRha3VtYXIsIFMuLCBTYWxndWVpcm8sIEcuLCBhbmQ8 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg ICAgICAgICAgICBCLiBCdXJtYW4sICJBIFRheG9ub215IG9mIFNlbWFudGljcyBhbmQgTWVjaGFu aXNtcyBmb3I8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEIu IEJ1cm1hbiwgIkEgVGF4b25vbXkgb2YgU2VtYW50aWNzIGFuZCBNZWNoYW5pc21zIGZvcjwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICAgICAgIFJlYWwtVGltZSBUcmFuc3BvcnQgUHJvdG9jb2wgKFJUUCkgU291cmNlcyIsIGRyYWZ0 LWlldGYtPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBSZWFs LVRpbWUgVHJhbnNwb3J0IFByb3RvY29sIChSVFApIFNvdXJjZXMiLCBkcmFmdC1pZXRmLTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICAgICAgIGF2dGV4dC1ydHAtZ3JvdXBpbmctdGF4b25vbXktMDggKHdvcmsgaW4gcHJvZ3Jlc3Mp LCBKdWx5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBhdnRl eHQtcnRwLWdyb3VwaW5nLXRheG9ub215LTA4ICh3b3JrIGluIHByb2dyZXNzKSwgSnVseTwvdGQ+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQg Y2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAg ICAgICAgIDIwMTUuPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAg ICAyMDE1LjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAg ICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJs ZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxhIG5hbWU9ImRpZmYw MDE3Ij48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICA8c3BhbiBjbGFzcz0iZGVsZXRlIj5bSS1E LmlldGYtc3Rpci1yZmM0NDc0YmlzXTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJi bG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICBQZXRlcnNvbiwgSi4sIEpl bm5pbmdzLCBDLiwgYW5kIEUuIFJlc2NvcmxhLDwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgICAgICAgICAgICAiQXV0aGVudGlj YXRlZCBJZGVudGl0eSBNYW5hZ2VtZW50IGluIHRoZSBTZXNzaW9uPC9zcGFuPjwvdGQ+PHRkPiA8 L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj48c3BhbiBjbGFzcz0iZGVsZXRlIj4gICAgICAgICAgICAg IEluaXRpYXRpb24gUHJvdG9jb2wgKFNJUCkiLCBkcmFmdC1pZXRmLXN0aXItcmZjNDQ3NGJpcy0w NTwvc3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+PHNwYW4gY2xhc3M9ImRl bGV0ZSI+ICAgICAgICAgICAgICAod29yayBpbiBwcm9ncmVzcyksIFNlcHRlbWJlciAyMDE1Ljwv c3Bhbj48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJibG9jayI+PC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxibG9jayI+ICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwv dGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2 YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgW0ktRC5qb25lcy1wZXJjLXByaXZhdGUt bWVkaWEtcmVxdHNdPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW0ktRC5qb25l cy1wZXJjLXByaXZhdGUtbWVkaWEtcmVxdHNdPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRv cCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgSm9uZXMsIFAuLCBJc21haWws IE4uLCBCZW5oYW0sIEQuLCBCdWNrbGVzLCBOLiwgTWF0dHNzb24sPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBKb25lcywgUC4sIElzbWFpbCwgTi4sIEJlbmhh bSwgRC4sIEJ1Y2tsZXMsIE4uLCBNYXR0c3Nvbiw8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBKLiwgYW5kIFIuIEJhcm5l cywgIlByaXZhdGUgTWVkaWEgUmVxdWlyZW1lbnRzIGluIFByaXZhY3k8L3RkPjx0ZD4gPC90ZD48 dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEouLCBhbmQgUi4gQmFybmVzLCAiUHJpdmF0 ZSBNZWRpYSBSZXF1aXJlbWVudHMgaW4gUHJpdmFjeTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZh bGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEVuaGFuY2VkIFJUUCBD b25mZXJlbmNpbmciLCBkcmFmdC1qb25lcy1wZXJjLXByaXZhdGUtPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgICAgICAgICAgICBFbmhhbmNlZCBSVFAgQ29uZmVyZW5jaW5nIiwg ZHJhZnQtam9uZXMtcGVyYy1wcml2YXRlLTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIG1lZGlhLXJlcXRzLTAwICh3b3Jr IGluIHByb2dyZXNzKSwgSnVseSAyMDE1LjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQi PiAgICAgICAgICAgICAgbWVkaWEtcmVxdHMtMDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKdWx5IDIw MTUuPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAg PHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQi PjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBbUkZDMzI2MV0gIFJvc2VuYmVyZywg Si4sIFNjaHVsenJpbm5lLCBILiwgQ2FtYXJpbGxvLCBHLiwgSm9obnN0b24sPC90ZD48dGQ+IDwv dGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgW1JGQzMyNjFdICBSb3NlbmJlcmcsIEouLCBTY2h1bHpy aW5uZSwgSC4sIENhbWFyaWxsbywgRy4sIEpvaG5zdG9uLDwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8i IHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFs aWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICAgICAgICAgICAgIEEuLCBQZXRlcnNv biwgSi4sIFNwYXJrcywgUi4sIEhhbmRsZXksIE0uLCBhbmQgRS48L3RkPjx0ZD4gPC90ZD48dGQg Y2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIEEuLCBQZXRlcnNvbiwgSi4sIFNwYXJrcywgUi4s IEhhbmRsZXksIE0uLCBhbmQgRS48L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3Rk Pjx0ZCBjbGFzcz0ibGVmdCI+ICAgICAgICAgICAgICBTY2hvb2xlciwgIlNJUDogU2Vzc2lvbiBJ bml0aWF0aW9uIFByb3RvY29sIiwgUkZDIDMyNjEsPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJy aWdodCI+ICAgICAgICAgICAgICBTY2hvb2xlciwgIlNJUDogU2Vzc2lvbiBJbml0aWF0aW9uIFBy b3RvY29sIiwgUkZDIDMyNjEsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwv dGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48 dGQgY2xhc3M9ImxlZnQiPiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzMyNjEsIEp1bmUg MjAwMiw8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICAgICAgICAgICAgIERPSSAx MC4xNzQ4Ny9SRkMzMjYxLCBKdW5lIDIwMDIsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWdu PSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIj48L3RkPjx0ZCBj bGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xh c3M9ImxpbmVubyI+PC90ZD48L3RyPgogICAgICA8dHIgYmdjb2xvcj0iZ3JheSI+PHRkPjwvdGQ+ PHRoPjxhIG5hbWU9InBhcnQtbDkiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxs PjxlbT4gcGFnZSAxMiwgbGluZSA0PC9lbT48L2E+PC90aD48dGg+IDwvdGg+PHRoPjxhIG5hbWU9 InBhcnQtcjkiPjxzbWFsbD5za2lwcGluZyB0byBjaGFuZ2UgYXQ8L3NtYWxsPjxlbT4gcGFnZSAx MSwgbGluZSA0MDwvZW0+PC9hPjwvdGg+PHRkPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFz cz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVtYWlsOiBy bW9oYW5yQGNpc2NvLmNvbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWls OiBybW9oYW5yQGNpc2NvLmNvbTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNs YXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgVGlydW1h bGVzd2FyIFJlZGR5PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgVGlydW1hbGVz d2FyIFJlZGR5PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4K ICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9 ImxlZnQiPiAgIENpc2NvPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgQ2lzY288 L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+ PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAg Q2Vzc25hIEJ1c2luZXNzIFBhcmssIFZhcnRodXIgSG9ibGk8L3RkPjx0ZD4gPC90ZD48dGQgY2xh c3M9InJpZ2h0Ij4gICBDZXNzbmEgQnVzaW5lc3MgUGFyaywgVmFydGh1ciBIb2JsaTwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBTYXJqYXB1 ciBNYXJhdGhhbGxpIE91dGVyIFJpbmcgUm9hZDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFNhcmphcHVyIE1hcmF0aGFsbGkgT3V0ZXIgUmluZyBSb2FkPC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEJhbmdhbG9yZSwgS2Fy bmF0YWthICA1NjAxMDM8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBCYW5nYWxv cmUsIEthcm5hdGFrYSAgNTYwMTAzPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90 ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEluZGlhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdo dCI+ICAgSW5kaWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3Ry PgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFz cz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9 ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGlu ZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVtYWlsOiB0aXJlZGR5 QGNpc2NvLmNvbTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWlsOiB0aXJl ZGR5QGNpc2NvLmNvbTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTgiPjwvYT48L3RkPjwvdHI+CiAgICAg IDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxv Y2siPjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj48c3BhbiBjbGFzcz0iaW5zZXJ0 Ij4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgPC9zcGFuPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0i dG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBHb256YWxvIFNhbGd1ZWlybzwvdGQ+PHRkPiA8L3Rk Pjx0ZCBjbGFzcz0icmlnaHQiPiAgIEdvbnphbG8gU2FsZ3VlaXJvPC90ZD48dGQgY2xhc3M9Imxp bmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5v IiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIENpc2NvIFN5c3RlbXMsIElu Yy48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBDaXNjbyBTeXN0ZW1zLCBJbmMu PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRy Pjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAg IDcyMDAtMTIgS2l0IENyZWVrIFJvYWQ8L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4g ICA3MjAwLTEyIEtpdCBDcmVlayBSb2FkPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+ PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIFJlc2VhcmNoIFRyaWFuZ2xlIFBhcmssIE5DICAyNzcw OTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFJlc2VhcmNoIFRyaWFuZ2xlIFBh cmssIE5DICAyNzcwOTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBVUzwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIFVTPC90 ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGln bj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0 b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBFbWFpbDogZ3NhbGd1ZWlAY2lzY28uY29tPC90 ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgRW1haWw6IGdzYWxndWVpQGNpc2NvLmNv bTwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0 cj48dGQ+PGEgbmFtZT0iZGlmZjAwMTkiPjwvYT48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsYmxvY2siPjxzcGFuIGNs YXNzPSJkZWxldGUiPiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICA8L3NwYW4+PC90ZD48dGQ+IDwvdGQ+PHRkIGNs YXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwv dHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNs YXNzPSJsZWZ0Ij4gICBWaWN0b3IgUGFzY3VhbDwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmln aHQiPiAgIFZpY3RvciBQYXNjdWFsPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3Ai PjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZD48YSBuYW1lPSJkaWZmMDAyMCI+PC9hPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxibG9jayI+ICAgPHNwYW4gY2xhc3M9ImRlbGV0ZSI+UXVvYmlzPC9zcGFuPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICA8c3BhbiBjbGFzcz0iaW5zZXJ0Ij5PcmFjbGU8 L3NwYW4+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAg ICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xhc3M9Imxi bG9jayI+PHNwYW4gY2xhc3M9ImRlbGV0ZSI+ICAgU3BhaW48L3NwYW4+PC90ZD48dGQ+IDwvdGQ+ PHRkIGNsYXNzPSJyYmxvY2siPjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48 L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PHRkIGNsYXNzPSJsZWZ0Ij48L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij48L3RkPjx0 ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkPjxh IG5hbWU9ImRpZmYwMDIxIj48L2E+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGJsb2NrIj4gICBFbWFpbDogdmljdG9y LnBhc2N1YWwuYXZpbGFAPHNwYW4gY2xhc3M9ImRlbGV0ZSI+Z21haWw8L3NwYW4+LmNvbTwvdGQ+ PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmJsb2NrIj4gICBFbWFpbDogdmljdG9yLnBhc2N1YWwuYXZp bGFAPHNwYW4gY2xhc3M9Imluc2VydCI+b3JhY2xlPC9zcGFuPi5jb208L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+PC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+ PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQg Y2xhc3M9ImxlZnQiPiAgIFBhcnRoYXNhcmF0aGkgUmF2aW5kcmFuPC90ZD48dGQ+IDwvdGQ+PHRk IGNsYXNzPSJyaWdodCI+ICAgUGFydGhhc2FyYXRoaSBSYXZpbmRyYW48L3RkPjx0ZCBjbGFzcz0i bGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8dHI+PHRkIGNsYXNzPSJsaW5l bm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ICAgTm9raWEgTmV0d29ya3M8 L3RkPjx0ZD4gPC90ZD48dGQgY2xhc3M9InJpZ2h0Ij4gICBOb2tpYSBOZXR3b3JrczwvdGQ+PHRk IGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjwvdHI+CiAgICAgIDx0cj48dGQgY2xh c3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PHRkIGNsYXNzPSJsZWZ0Ij4gICBCYW5nYWxv cmUsIEthcm5hdGFrYTwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEJhbmdhbG9y ZSwgS2FybmF0YWthPC90ZD48dGQgY2xhc3M9ImxpbmVubyIgdmFsaWduPSJ0b3AiPjwvdGQ+PC90 cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48dGQgY2xh c3M9ImxlZnQiPiAgIEluZGlhPC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+ICAgSW5k aWE8L3RkPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxpZ249InRvcCI+PC90ZD48L3RyPgogICAgICA8 dHI+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9wIj48L3RkPjx0ZCBjbGFzcz0ibGVmdCI+ PC90ZD48dGQ+IDwvdGQ+PHRkIGNsYXNzPSJyaWdodCI+PC90ZD48dGQgY2xhc3M9ImxpbmVubyIg dmFsaWduPSJ0b3AiPjwvdGQ+PC90cj4KICAgICAgPHRyPjx0ZCBjbGFzcz0ibGluZW5vIiB2YWxp Z249InRvcCI+PC90ZD48dGQgY2xhc3M9ImxlZnQiPiAgIEVtYWlsOiBwYXJ0aGFAcGFydGhhc2Fy YXRoaS5jby5pbjwvdGQ+PHRkPiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPiAgIEVtYWlsOiBwYXJ0 aGFAcGFydGhhc2FyYXRoaS5jby5pbjwvdGQ+PHRkIGNsYXNzPSJsaW5lbm8iIHZhbGlnbj0idG9w Ij48L3RkPjwvdHI+CgogICAgIDx0cj48dGQ+PC90ZD48dGQgY2xhc3M9ImxlZnQiPjwvdGQ+PHRk PiA8L3RkPjx0ZCBjbGFzcz0icmlnaHQiPjwvdGQ+PHRkPjwvdGQ+PC90cj4KICAgICA8dHIgYmdj b2xvcj0iZ3JheSI+PHRoIGNvbHNwYW49IjUiIGFsaWduPSJjZW50ZXIiPjxhIG5hbWU9ImVuZCI+ Jm5ic3A7RW5kIG9mIGNoYW5nZXMuIDIxIGNoYW5nZSBibG9ja3MuJm5ic3A7PC9hPjwvdGg+PC90 cj4KICAgICA8dHIgY2xhc3M9InN0YXRzIj48dGQ+PC90ZD48dGg+PGk+NzYgbGluZXMgY2hhbmdl ZCBvciBkZWxldGVkPC9pPjwvdGg+PHRoPjxpPiA8L2k+PC90aD48dGg+PGk+ODAgbGluZXMgY2hh bmdlZCBvciBhZGRlZDwvaT48L3RoPjx0ZD48L3RkPjwvdHI+CiAgICAgPHRyPjx0ZCBjb2xzcGFu PSI1IiBjbGFzcz0ic21hbGwiIGFsaWduPSJjZW50ZXIiPjxicj5UaGlzIGh0bWwgZGlmZiB3YXMg cHJvZHVjZWQgYnkgcmZjZGlmZiAxLjQyLiBUaGUgbGF0ZXN0IHZlcnNpb24gaXMgYXZhaWxhYmxl IGZyb20gPGEgaHJlZj0iaHR0cDovL3d3dy50b29scy5pZXRmLm9yZy90b29scy9yZmNkaWZmLyI+ aHR0cDovL3Rvb2xzLmlldGYub3JnL3Rvb2xzL3JmY2RpZmYvPC9hPiA8L3RkPjwvdHI+CiAgIDwv dGJvZHk+PC90YWJsZT4KICAgCiAgIAo8L2JvZHk+PC9odG1sPgo8IS0tIGFyZ3M6IHsnLS1vbGRj b2xvdXInOiAncmVkJywgJy0td2lkdGgnOiAnJywgJ2RpZmZ0eXBlJzogJy0taHRtbCcsICd1cmwx JzogJycsICdzdWJtaXQnOiAnR2VuZXJhdGUgZGlmZicsICd1cmwyJzogJycsICctLW5ld2NvbG91 cic6ICdncmVlbid9IC0tPg== --_003_D2490FA14642Brmohanrciscocom_ Content-Type: text/plain; name="draft-ietf-straw-b2bua-dtls-srtp-08.txt" Content-Description: draft-ietf-straw-b2bua-dtls-srtp-08.txt Content-Disposition: attachment; filename="draft-ietf-straw-b2bua-dtls-srtp-08.txt"; size=26018; creation-date="Sun, 18 Oct 2015 03:26:30 GMT"; modification-date="Sun, 18 Oct 2015 03:26:30 GMT" Content-ID: Content-Transfer-Encoding: base64 CgoKClNUUkFXICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFIuIFJhdmluZHJhbmF0aApJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgVC4gUmVkZHkKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgICAgRy4gU2FsZ3VlaXJvCkV4cGly ZXM6IEFwcmlsIDE5LCAyMDE2ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBDaXNjbwogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFYuIFBhc2N1YWwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgT3JhY2xlCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBhcnRoYXNhcmF0aGkuIFJhdmluZHJh bgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgTm9raWEgTmV0d29ya3MKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBPY3RvYmVyIDE3LCAyMDE1CgoKICBEVExTLVNSVFAgSGFuZGxpbmcg aW4gU2Vzc2lvbiBJbml0aWF0aW9uIFByb3RvY29sIChTSVApIEJhY2stdG8tQmFjawogICAgICAg ICAgICAgICAgICAgICAgICAgIFVzZXIgQWdlbnRzIChCMkJVQXMpCiAgICAgICAgICAgICAgICAg IGRyYWZ0LWlldGYtc3RyYXctYjJidWEtZHRscy1zcnRwLTA4CgpBYnN0cmFjdAoKICAgU2Vzc2lv biBJbml0aWF0aW9uIFByb3RvY29sIChTSVApIEJhY2stdG8tQmFjayBVc2VyIEFnZW50cyAoQjJC VUFzKQogICBvZnRlbiBhY3Qgb24gdGhlIG1lZGlhIHBsYW5lLCByYXRoZXIgdGhhbiBqdXN0IG9u IHRoZSBzaWduYWxpbmcgcGF0aC4KICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIGJlaGF2 aW9yIHN1Y2ggQjJCVUFzIGNhbiBhZGhlcmUgdG8gd2hlbgogICBhY3Rpbmcgb24gdGhlIG1lZGlh IHBsYW5lIHRoYXQgdXNlcyBhbiBTZWN1cmUgUmVhbC10aW1lIFRyYW5zcG9ydAogICAoU1JUUCkg c2VjdXJpdHkgY29udGV4dCBzZXQgdXAgd2l0aCB0aGUgRGF0YWdyYW0gVHJhbnNwb3J0IExheWVy CiAgIFNlY3VyaXR5IChEVExTKSBwcm90b2NvbC4KClN0YXR1cyBvZiBUaGlzIE1lbW8KCiAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgaXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0 aGUKICAgcHJvdmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OS4KCiAgIEludGVybmV0LURyYWZ0 cyBhcmUgd29ya2luZyBkb2N1bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nCiAgIFRh c2sgRm9yY2UgKElFVEYpLiAgTm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmli dXRlCiAgIHdvcmtpbmcgZG9jdW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9m IGN1cnJlbnQgSW50ZXJuZXQtCiAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZHJhZnRzL2N1cnJlbnQvLgoKICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1 bWVudHMgdmFsaWQgZm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzCiAgIGFuZCBtYXkgYmUgdXBk YXRlZCwgcmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55CiAg IHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVm ZXJlbmNlCiAgIG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGlu IHByb2dyZXNzLiIKCiAgIFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gQXByaWwg MTksIDIwMTYuCgpDb3B5cmlnaHQgTm90aWNlCgogICBDb3B5cmlnaHQgKGMpIDIwMTUgSUVURiBU cnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBhcyB0aGUKICAgZG9jdW1lbnQgYXV0aG9y cy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuCgogICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8g QkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2FsCiAgIFByb3Zpc2lvbnMgUmVsYXRpbmcg dG8gSUVURiBEb2N1bWVudHMKCgoKUmF2aW5kcmFuYXRoLCBldCBhbC4gICAgIEV4cGlyZXMgQXBy aWwgMTksIDIwMTYgICAgICAgICAgICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAg ICAgRFRMUy1TUlRQIEhhbmRsaW5nIGluIFNJUCBCMkJVQSAgICAgICAgT2N0b2JlciAyMDE1CgoK ICAgKGh0dHA6Ly90cnVzdGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRo ZSBkYXRlIG9mCiAgIHB1YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3 IHRoZXNlIGRvY3VtZW50cwogICBjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdo dHMgYW5kIHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QKICAgdG8gdGhpcyBkb2N1bWVudC4gIENv ZGUgQ29tcG9uZW50cyBleHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QKICAgaW5jbHVk ZSBTaW1wbGlmaWVkIEJTRCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5l IG9mCiAgIHRoZSBUcnVzdCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91 dCB3YXJyYW50eSBhcwogICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2Uu CgpUYWJsZSBvZiBDb250ZW50cwoKICAgMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAyCiAgICAgMS4xLiAgT3ZlcnZpZXcg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgMgogICAg IDEuMi4gIEdvYWxzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgIDMKICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzCiAgIDMuICBNZWRpYSBQbGFuZSBCMkJVQSBIYW5k bGluZyBvZiBEVExTLVNSVFAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNAogICAgIDMuMS4gIEdl bmVyYWwgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg IDQKICAgICAgIDMuMS4xLiAgTWVkaWEgUmVsYXkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gICA0CiAgICAgICAzLjEuMi4gIFJUUC9SVENQLWF3YXJlIE1lZGlhIEF3 YXJlIEIyQlVBICAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNgogICAgIDMuMi4gIE1lZGlhIFBsYW5l IEIyQlVBIHdpdGggTkFUIEhhbmRsaW5nIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDcKICAgNC4g IEZvcmtpbmcgQ29uc2lkZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gICA3CiAgIDUuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOAogICA2LiAgSUFOQSBDb25zaWRlcmF0aW9ucyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKICAgNy4gIEFja25vd2xl ZGdtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5 CiAgIDguICBDb250cmlidXRvcnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAgOQogICA5LiAgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKICAgICA5LjEuICBOb3JtYXRpdmUgUmVm ZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICA5CiAgICAgOS4y LiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICAxMAogICBBdXRob3JzJyBBZGRyZXNzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgMTEKCjEuICBJbnRyb2R1Y3Rpb24KCjEuMS4gIE92ZXJ2aWV3 CgogICBbUkZDNTc2M10gZGVzY3JpYmVzIGhvdyBTZXNzaW9uIEluaXRpYXRpb24gUHJvdG9jb2wg KFNJUCkgW1JGQzMyNjFdCiAgIGNhbiBiZSB1c2VkIHRvIGVzdGFibGlzaCBhIFNlY3VyZSBSZWFs LXRpbWUgVHJhbnNwb3J0IFByb3RvY29sIChTUlRQKQogICBbUkZDMzcxMV0gc2VjdXJpdHkgY29u dGV4dCB3aXRoIHRoZSBEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkKICAgKERUTFMp IFtSRkM2MzQ3XSBwcm90b2NvbC4gIEl0IGRlc2NyaWJlcyBhIG1lY2hhbmlzbSBmb3IgdHJhbnNw b3J0aW5nCiAgIGEgY2VydGlmaWNhdGUgZmluZ2VycHJpbnQgdXNpbmcgU2Vzc2lvbiBEZXNjcmlw dGlvbiBQcm90b2NvbCAoU0RQKQogICBbUkZDNDU2Nl0uICBUaGUgZmluZ2VycHJpbnQsIGlkZW50 aWZpZXMgdGhlIGNlcnRpZmljYXRlIHRoYXQgd2lsbCBiZQogICBwcmVzZW50ZWQgZHVyaW5nIHRo ZSBEVExTIGhhbmRzaGFrZS4gIERUTFMtU1JUUCBpcyBjdXJyZW50bHkgZGVmaW5lZAogICBmb3Ig cG9pbnQtdG8tcG9pbnQgbWVkaWEgc2Vzc2lvbnMsIGluIHdoaWNoIHRoZXJlIGFyZSBleGFjdGx5 IHR3bwogICBwYXJ0aWNpcGFudHMuICBFYWNoIERUTFMtU1JUUCBzZXNzaW9uIChkZXNjcmliZWQg aW4gU2VjdGlvbiAzIG9mCiAgIFtSRkM1NzY0XSkgY29udGFpbnMgYSBzaW5nbGUgRFRMUyBjb25u ZWN0aW9uIChpZiBSVFAgYW5kIFJUQ1AgYXJlCiAgIG11bHRpcGxleGVkKSBvciB0d28gRFRMUyBj b25uZWN0aW9ucyAoaWYgUlRQIGFuZCBSVENQIGFyZSBub3QKICAgbXVsdGlwbGV4ZWQpLCBhbmQg ZWl0aGVyIHR3byBTUlRQIGNvbnRleHRzIChpZiBtZWRpYSB0cmFmZmljIGlzCiAgIGZsb3dpbmcg aW4gYm90aCBkaXJlY3Rpb25zIG9uIHRoZSBzYW1lIDUtdHVwbGUpIG9yIG9uZSBTUlRQIGNvbnRl eHQKICAgKGlmIG1lZGlhIHRyYWZmaWMgaXMgb25seSBmbG93aW5nIGluIG9uZSBkaXJlY3Rpb24p LgoKCgoKUmF2aW5kcmFuYXRoLCBldCBhbC4gICAgIEV4cGlyZXMgQXByaWwgMTksIDIwMTYgICAg ICAgICAgICAgICAgIFtQYWdlIDJdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgRFRMUy1TUlRQIEhh bmRsaW5nIGluIFNJUCBCMkJVQSAgICAgICAgT2N0b2JlciAyMDE1CgoKICAgSW4gbWFueSBTSVAg ZGVwbG95bWVudHMsIFNJUCBCYWNrLXRvLUJhY2sgVXNlciBBZ2VudHMgKEIyQlVBKQogICBlbnRp dGllcyBleGlzdCBvbiB0aGUgU0lQIHNpZ25hbGluZyBwYXRoIGJldHdlZW4gdGhlIGVuZHBvaW50 cy4gIEFzCiAgIGRlc2NyaWJlZCBpbiBbUkZDNzA5Ml0sIHRoZXNlIEIyQlVBcyBjYW4gbW9kaWZ5 IFNJUCBhbmQgU0RQCiAgIGluZm9ybWF0aW9uLiAgVGhleSBjYW4gYWxzbyBiZSBwcmVzZW50IG9u IHRoZSBtZWRpYSBwYXRoLCBpbiB3aGljaAogICBjYXNlIHRoZXkgbW9kaWZ5IHBhcnRzIG9mIHRo ZSBTRFAgaW5mb3JtYXRpb24gKGxpa2UgSVAgYWRkcmVzcywgcG9ydCkKICAgYW5kIHN1YnNlcXVl bnRseSBtb2RpZnkgdGhlIFJUUCBoZWFkZXJzIGFzIHdlbGwuICBTdWNoIEIyQlVBcyBhcmUKICAg cmVmZXJyZWQgdG8gYXMgbWVkaWEgcGxhbmUgQjJCVUFzLgoKMS4yLiAgR29hbHMKCiAgIFtSRkM3 MDkyXSBkZXNjcmliZXMgdHdvIGRpZmZlcmVudCBjYXRlZ29yaWVzIG9mIG1lZGlhIHBsYW5lIEIy QlVBcywKICAgYWNjb3JkaW5nIHRvIHRoZSBsZXZlbCBvZiBhY3Rpdml0aWVzIHBlcmZvcm1lZCBv biB0aGUgbWVkaWEgcGxhbmU6CgogICAgICBBIEIyQlVBIHRoYXQgYWN0cyBhcyBhIHNpbXBsZSBt ZWRpYSByZWxheSBlZmZlY3RpdmVseSB1bmF3YXJlIG9mCiAgICAgIGFueXRoaW5nIHRoYXQgaXMg dHJhbnNwb3J0ZWQgYW5kIG9ubHkgdGVybWluYXRlcyB0aGUgbWVkaWEgcGxhbmUKICAgICAgYXQg dGhlIElQIGFuZCB0cmFuc3BvcnQgKFVEUC9UQ1ApIGxheWVycy4KCiAgICAgIEEgQjJCVUEgdGhh dCBwZXJmb3JtcyBhIG1lZGlhLWF3YXJlIHJvbGUuICBJdCBpbnNwZWN0cyBhbmQKICAgICAgcG90 ZW50aWFsbHkgbW9kaWZpZXMgUlRQIGhlYWRlcnMgb3IgUlRQIENvbnRyb2wgUHJvdG9jb2wgKFJU Q1ApCiAgICAgIHBhY2tldHMuCgogICBUaGUgZm9sbG93aW5nIHNlY3Rpb25zIGRlc2NyaWJlIHRo ZSBiZWhhdmlvciBCMkJVQXMgTVVTVCBmb2xsb3cgaW4KICAgb3JkZXIgdG8gYXZvaWQgYW55IGlt cGFjdCB0byBlbmQtdG8tZW5kIERUTFMtU1JUUCBzZXNzaW9ucy4gIFRoZQogICBEVExTLVNSVFAg ZnJhbWV3b3JrIFtSRkM1NzYzXSByZWNvbW1lbmRzIHRoYXQgZW5kcG9pbnRzIG9yIHByb3h5CiAg IHNlcnZlciBpbiB0aGUgZW5kcG9pbnQgZG9tYWluIHVzZSBbUkZDNDQ3NF0gdG8gaW50ZWdyaXR5 IHByb3RlY3QgdGhlCiAgIGZpbmdlcnByaW50IGF0dHJpYnV0ZXMuICBUaHVzLCB1bmRlciBtb3N0 IGNpcmN1bXN0YW5jZXMsIEIyQlVBcwogICBjYW5ub3QgdGVybWluYXRlIHRoZSBEVExTLVNSVFAg c2Vzc2lvbiB3aXRob3V0IGludmFsaWRhdGluZyB0aGUKICAgc2lnbmF0dXJlIGFuZCBjYXVzaW5n IHRoZSBzZXNzaW9uIHRvIGZhaWwuCgoyLiAgVGVybWlub2xvZ3kKCiAgIFRoZSBrZXkgd29yZHMg Ik1VU1QiLCAiTVVTVCBOT1QiLCAiUkVRVUlSRUQiLCAiU0hBTEwiLCAiU0hBTEwgTk9UIiwKICAg IlNIT1VMRCIsICJTSE9VTEQgTk9UIiwgIlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9O QUwiIGluIHRoaXMKICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJl ZCBpbiBbUkZDMjExOV0uCgogICBUcmFuc3BvcnQgQWRkcmVzczogVGhlIGNvbWJpbmF0aW9uIG9m IGFuIElQIGFkZHJlc3MgYW5kIHBvcnQgbnVtYmVyLgoKICAgVGhlIGZvbGxvd2luZyBnZW5lcmFs aXplZCB0ZXJtcyBhcmUgZGVmaW5lZCBpbiBbUkZDMzI2MV0sIFNlY3Rpb24gNi4KCiAgICAgIEIy QlVBOiBhIFNJUCBCYWNrLXRvLUJhY2sgVXNlciBBZ2VudCwgd2hpY2ggaXMgdGhlIGxvZ2ljYWwK ICAgICAgY29tYmluYXRpb24gb2YgYSBVc2VyIEFnZW50IFNlcnZlciAoVUFTKSBhbmQgVXNlciBB Z2VudCBDbGllbnQKICAgICAgKFVBQykuCgogICAgICBVQVM6IGEgU0lQIFVzZXIgQWdlbnQgU2Vy dmVyLgoKICAgICAgVUFDOiBhIFNJUCBVc2VyIEFnZW50IENsaWVudC4KCgoKCgpSYXZpbmRyYW5h dGgsIGV0IGFsLiAgICAgRXhwaXJlcyBBcHJpbCAxOSwgMjAxNiAgICAgICAgICAgICAgICAgW1Bh Z2UgM10KDApJbnRlcm5ldC1EcmFmdCAgICAgICBEVExTLVNSVFAgSGFuZGxpbmcgaW4gU0lQIEIy QlVBICAgICAgICBPY3RvYmVyIDIwMTUKCgogICBBbGwgb2YgdGhlIHBlcnRpbmVudCBCMkJVQSB0 ZXJtaW5vbG9neSBhbmQgdGF4b25vbXkgdXNlZCBpbiB0aGlzCiAgIGRvY3VtZW50IGlzIGJhc2Vk IG9uIFtSRkM3MDkyXS4KCiAgIEl0IGlzIGFzc3VtZWQgdGhlIHJlYWRlciBpcyBhbHJlYWR5IGZh bWlsaWFyIHdpdGggdGhlIGZ1bmRhbWVudGFsCiAgIGNvbmNlcHRzIG9mIHRoZSBSVFAgcHJvdG9j b2wgW1JGQzM1NTBdIGFuZCBpdHMgdGF4b25vbXkKICAgW0ktRC5pZXRmLWF2dGV4dC1ydHAtZ3Jv dXBpbmctdGF4b25vbXldLCBhcyB3ZWxsIGFzIHRob3NlIG9mIFNSVFAKICAgW1JGQzM3MTFdLCBh bmQgRFRMUyBbUkZDNjM0N10uCgozLiAgTWVkaWEgUGxhbmUgQjJCVUEgSGFuZGxpbmcgb2YgRFRM Uy1TUlRQCgozLjEuICBHZW5lcmFsCgogICBUaGlzIHNlY3Rpb24gZGVzY3JpYmVzIHRoZSBEVExT LVNSVFAgaGFuZGxpbmcgYnkgdGhlIGRpZmZlcmVudCB0eXBlcwogICBvZiBtZWRpYSBwbGFuZSBC MkJVQXMgZGVmaW5lZCBpbiBbUkZDNzA5Ml0uCgozLjEuMS4gIE1lZGlhIFJlbGF5CgogICBBIG1l ZGlhIHJlbGF5LCBhcyBkZWZpbmVkIGluIHNlY3Rpb24gMy4yLjEgb2YgW1JGQzcwOTJdLCBmcm9t IGFuCiAgIGFwcGxpY2F0aW9uIGxheWVyIHBvaW50LW9mLXZpZXcsIGZvcndhcmRzIGFsbCBwYWNr ZXRzIGl0IHJlY2VpdmVzIG9uCiAgIGEgbmVnb3RpYXRlZCBjb25uZWN0aW9uLCB3aXRob3V0IGlu c3BlY3Rpbmcgb3IgbW9kaWZ5aW5nIHRoZSBwYWNrZXQKICAgY29udGVudHMuICBBIG1lZGlhIHJl bGF5IG9ubHkgbW9kaWZpZXMgdGhlIHRyYW5zcG9ydCBsYXllciAoVURQL1RDUCkKICAgYW5kIElQ IGhlYWRlcnMuCgogICBBIG1lZGlhIHJlbGF5IEIyQlVBIE1VU1QgZm9yd2FyZCB0aGUgY2VydGlm aWNhdGUgZmluZ2VycHJpbnQgYW5kIFNEUAogICBzZXR1cCBhdHRyaWJ1dGUgaXQgcmVjZWl2ZXMg ZnJvbSBvbmUgZW5kcG9pbnQgdW5tb2RpZmllZCB0b3dhcmRzIHRoZQogICBvdGhlciBlbmRwb2lu dCBhbmQgdmljZS12ZXJzYS4gIFRoZSBleGFtcGxlIGJlbG93IHNob3dzIGEgU0lQIGNhbGwKICAg ZXN0YWJsaXNobWVudCBmbG93LCB3aXRoIGJvdGggU0lQIGVuZHBvaW50cyAodXNlciBhZ2VudHMp IHVzaW5nIERUTFMtCiAgIFNSVFAsIGFuZCBhIG1lZGlhIHJlbGF5IEIyQlVBLgoKCgoKCgoKCgoK CgoKCgoKCgoKCgoKClJhdmluZHJhbmF0aCwgZXQgYWwuICAgICBFeHBpcmVzIEFwcmlsIDE5LCAy MDE2ICAgICAgICAgICAgICAgICBbUGFnZSA0XQoMCkludGVybmV0LURyYWZ0ICAgICAgIERUTFMt U1JUUCBIYW5kbGluZyBpbiBTSVAgQjJCVUEgICAgICAgIE9jdG9iZXIgMjAxNQoKCiAgICAgICAr LS0tLS0tLSsgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgKy0t LS0tKwogICAgICAgfCBBbGljZSB8ICAgICAgICAgICAgfCBNZWRpYVJlbGF5IEIyQlVBIHwgICAg ICAgICAgICAgIHwgQm9iIHwKICAgICAgICstLS0tLS0tKyAgICAgICAgICAgICstLS0tLS0tLS0t LS0tLS0tLS0rICAgICAgICAgICAgICArLS0tLS0rCiAgICAgICAgICAgfCgxKSBJTlZJVEUgICAg ICAgICAgICAgICB8ICAoMylJTlZJVEUgICAgICAgICAgICAgICAgfAogICAgICAgICAgIHwgICBh PXNldHVwOmFjdHBhc3MgICAgICAgfCAgIGE9c2V0dXA6YWN0cGFzcyAgICAgICAgIHwKICAgICAg ICAgICB8ICAgYT1maW5nZXJwcmludDEgICAgICAgIHwgICBhPSBmaW5nZXJwcmludDEgICAgICAg ICB8CiAgICAgICAgICAgfCAgIChhbGljZSdzIElQL3BvcnQpICAgICB8ICAgKEIyQlVBcyBJUC9w b3J0KSAgICAgICAgfAogICAgICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tPnwKICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAg ICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgfCAgICAoMikgIDEw MCB0cnlpbmcgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAgIHw8 LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAg ICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwgKDQpIDEwMCB0cnlpbmcgICAgICAg ICAgICB8CiAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICB8PC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tfAogICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAg ICAgICAgIHwgICg1KTIwMCBPSyAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICB8ICAgYT1zZXR1cDphY3RpdmUgICAgICAgICAgfAogICAgICAgICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICBhPWZpbmdlcnByaW50MiAgICAgICAgIHwK ICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgIHwgIChCb2IncyBJUC9wb3J0KSAg ICAgICAgICB8CiAgICAgICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18PC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICAgICAgIHwgICAgKDYpIDIwMCBPSyAgICAgICAgICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgICB8ICAgIGE9c2V0dXA6YWN0 aXZlICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgfCAgICBh PWZpbmdlcnByaW50MiAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAogICAgICAg ICAgIHwgICAgQjJCVUFzIElQL3BvcnQgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg IHwKICAgICAgICAgICB8ICAgICAgICAgICAgICAgKDcsIDgpQ2xpZW50SGVsbG8gKyB1c2Vfc3J0 cCAgICAgICAgICB8CiAgICAgICAgICAgfDwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS18PC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgICAgfCAg ICAgICAgICAgKDksMTApU2VydmVySGVsbG8gKyB1c2Vfc3J0cCAgICAgICAgICAgICAgfAogICAg ICAgICAgIHwtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+fC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tPnwKICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAoMTEpICAgIHwgICAgICAgICAgICAg ICAgICAgICAgICAgICB8CiAgICAgICAgICAgfCAgW0NlcnRpZmljYXRlIGV4Y2hhbmdlIGJldHdl ZW4gQWxpY2UgYW5kIEJvYiBvdmVyICAgfAogICAgICAgICAgIHwgICBEVExTIF0gICAgICAgICAg ICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgIHwKICAgICAgICAgICB8ICAgICAgICAg ICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgICAg fCAgICAgICAgICgxMikgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgfAog ICAgICAgICAgIHw8LS0tLS0tLS0tU1JUUC9TUlRDUC0tLS0+fDwtLS0tU1JUUC9TUlRDUC0tLS0t LS0tLS0tPnwKICAgICAgICAgICB8IFtCMkJVQSBjaGFuZ2VzIHRyYW5zcG9ydChVRFAvVENQKSBh bmQgSVAgaGVhZGVyc10gICB8CgogICAgICAgICBGaWd1cmUgMTogSU5WSVRFIHdpdGggU0RQIGNh bGwtZmxvdyBmb3IgTWVkaWEgUmVsYXkgQjJCVUEKCiAgIE5PVEU6IEZvciBicmV2aXR5IHRoZSBl bnRpcmUgdmFsdWUgb2YgdGhlIFNEUCBmaW5nZXJwcmludCBhdHRyaWJ1dGUKICAgaXMgbm90IHNo b3duLiAgVGhlIGV4YW1wbGUgaGVyZSBzaG93cyBvbmx5IG9uZSBEVExTIGNvbm5lY3Rpb24gZm9y CiAgIHRoZSBzYWtlIG9mIHNpbXBsaWNpdHkuICBJbiByZWFsaXR5IGRlcGVuZGluZyBvbiB3aGV0 aGVyIHRoZSBSVFAgYW5kCiAgIFJUQ1AgZmxvd3MgYXJlIG11bHRpcGxleGVkIG9yIGRlbXVsdGlw bGV4ZWQgdGhlcmUgd2lsbCBiZSBvbmUgb3IgdHdvCiAgIERUTFMgY29ubmVjdGlvbnMuCgogICBJ ZiBSVFAgYW5kIFJUQ1AgdHJhZmZpYyBpcyBtdWx0aXBsZXhlZCBhcyBkZXNjcmliZWQgaW4gW1JG QzU3NjFdIG9uIGEKICAgc2luZ2xlIHBvcnQgdGhlbiBvbmx5IGEgc2luZ2xlIERUTFMgY29ubmVj dGlvbiBpcyByZXF1aXJlZCBiZXR3ZWVuCiAgIHRoZSBwZWVycy4gIElmIFJUUCBhbmQgUlRDUCBh cmUgbm90IG11bHRpcGxleGVkLCB0aGVuIHRoZSBwZWVycyB3b3VsZAoKCgpSYXZpbmRyYW5hdGgs IGV0IGFsLiAgICAgRXhwaXJlcyBBcHJpbCAxOSwgMjAxNiAgICAgICAgICAgICAgICAgW1BhZ2Ug NV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICBEVExTLVNSVFAgSGFuZGxpbmcgaW4gU0lQIEIyQlVB ICAgICAgICBPY3RvYmVyIDIwMTUKCgogICBoYXZlIHRvIGVzdGFibGlzaCB0d28gRFRMUyBjb25u ZWN0aW9ucy4gIEluIHRoaXMgY2FzZSwgQm9iLCBhZnRlciBoZQogICByZWNlaXZlcyBhbiBJTlZJ VEUgcmVxdWVzdCwgdHJpZ2dlcnMgdGhlIGVzdGFibGlzaG1lbnQgb2YgYSBEVExTCiAgIGNvbm5l Y3Rpb24uICBOb3RlIHRoYXQgdGhlIERUTFMgaGFuZHNoYWtlIGFuZCB0aGUgc2VuZGluZyBvZiBJ TlZJVEUKICAgcmVzcG9uc2UgY2FuIGhhcHBlbiBpbiBwYXJhbGxlbDsgdGh1cywgdGhlIEIyQlVB IE1VU1QgYmUgcHJlcGFyZWQgdG8KICAgcmVjZWl2ZSBEVExTLCBTVFVOIGFuZCBtZWRpYSBvbiB0 aGUgcG9ydHMgaXQgYWR2ZXJ0aXNlZCB0byBCb2IgaW4gdGhlCiAgIFNJUCBvZmZlciBiZWZvcmUg aXQgcmVjZWl2ZXMgYSBTSVAgYW5zd2VyIGZyb20gQm9iLiBTaW5jZSBhIG1lZGlhCiAgIHJlbGF5 IEIyQlVBIGRvZXMgbm90IGRpZmZlcmVudGlhdGUgYmV0d2VlbiBhIERUTFMgbWVzc2FnZSwgUlRQ IG9yIGFueQogICBwYWNrZXQgaXQgcmVjZWl2ZXMsIGl0IG9ubHkgY2hhbmdlcyB0aGUgdHJhbnNw b3J0IGxheWVyIChVRFAvVENQKSBhbmQKICAgSVAgaGVhZGVycyBhbmQgZm9yd2FyZHMgdGhlIHBh Y2tldCB0b3dhcmRzIHRoZSBvdGhlciBlbmRwb2ludC4gIFRoZQogICBCMkJVQSBjYW5ub3QgZGVj cnlwdCB0aGUgUlRQIHBheWxvYWQgYXMgdGhlIHBheWxvYWQgaXMgZW5jcnlwdGVkCiAgIHVzaW5n IHRoZSBTUlRQIGtleXMgZGVyaXZlZCBmcm9tIHRoZSBEVExTIGNvbm5lY3Rpb24gc2V0dXAgYmV0 d2VlbgogICBBbGljZSBhbmQgQm9iLgoKICAgW1JGQzQ0NzRdIHByb3ZpZGVzIGEgbWVhbnMgZm9y IHNpZ25pbmcgcG9ydGlvbnMgb2YgU0lQIHJlcXVlc3RzIGluCiAgIG9yZGVyIHRvIHByb3ZpZGUg aWRlbnRpdHkgYXNzdXJhbmNlIGFuZCBjZXJ0aWZpY2F0ZSBwaW5uaW5nIGJ5CiAgIHByb3ZpZGlu ZyBhIHNpZ25hdHVyZSBvdmVyIHRoZSBTRFAgdGhhdCBjYXJyaWVzIHRoZSBmaW5nZXJwcmludCBv ZgogICBrZXlpbmcgZm9yIERUTFMtU1JUUCBbUkZDNTc2M10uICBBIG1lZGlhIHJlbGF5IEIyQlVB IE1VU1QgZW5zdXJlIHRoYXQKICAgaXQgZG9lcyBub3QgbW9kaWZ5IGFueSBvZiB0aGUgaW5mb3Jt YXRpb24gdXNlZCB0byBjb25zdHJ1Y3QgdGhlCiAgIHNpZ25hdHVyZS4KCiAgIEluIHRoZSBhYm92 ZSBleGFtcGxlLCBBbGljZSBjYW4gYmUgYXV0aG9yaXplZCBieSB0aGUgYXV0aG9yaXphdGlvbgog ICBzZXJ2ZXIgKFNJUCBwcm94eSkgaW4gaXRzIGRvbWFpbiB1c2luZyB0aGUgcHJvY2VkdXJlcyBp biBTZWN0aW9uIDUgb2YKICAgW1JGQzQ0NzRdLiAgSW4gc3VjaCBhIGNhc2UsIGlmIHRoZSBCMkJV QSBtb2RpZmllcyBzb21lIG9mIHRoZSBTSVAKICAgaGVhZGVycyBvciBTRFAgY29udGVudCB0aGF0 IHdhcyB1c2VkIGJ5IEFsaWNlJ3MgYXV0aG9yaXphdGlvbiBzZXJ2ZXIKICAgdG8gZ2VuZXJhdGUg dGhlIGlkZW50aXR5LCBpdCB3b3VsZCBicmVhayB0aGUgaWRlbnRpdHkgdmVyaWZpY2F0aW9uCiAg IHByb2NlZHVyZSBleHBsYWluZWQgaW4gU2VjdGlvbiA2IG9mIFtSRkM0NDc0XSByZXN1bHRpbmcg aW4gYSA0MzgKICAgZXJyb3IgcmVzcG9uc2UgYmVpbmcgcmV0dXJuZWQuCgozLjEuMi4gIFJUUC9S VENQLWF3YXJlIE1lZGlhIEF3YXJlIEIyQlVBCgogICBVbmxpa2UgdGhlIG1lZGlhIHJlbGF5IGRp c2N1c3NlZCBpbiBTZWN0aW9uIDMuMS4xLCBhIG1lZGlhLWF3YXJlCiAgIHJlbGF5IGFzIGRlZmlu ZWQgaW4gU2VjdGlvbiAzLjIuMiBvZiBbUkZDNzA5Ml0sIGlzIGF3YXJlIG9mIHRoZSB0eXBlCiAg IG9mIG1lZGlhIHRyYWZmaWMgaXQgaXMgcmVjZWl2aW5nLiAgVGhlcmUgYXJlIHR3byB0eXBlcyBv ZiBtZWRpYS1hd2FyZQogICByZWxheSwgdGhvc2UgdGhhdCBtZXJlbHkgaW5zcGVjdCB0aGUgUlRQ IGhlYWRlcnMgYW5kIHVuZW5jcnlwdGVkCiAgIHBvcnRpb25zIG9mIFJUQ1AgcGFja2V0cywgYW5k IHRob3NlIHRoYXQgaW5zcGVjdCBhbmQgbW9kaWZ5IHRoZSBSVFAKICAgaGVhZGVycyBhbmQgdW5l bmNyeXB0ZWQgcG9ydGlvbnMgb2YgUlRDUCBwYWNrZXRzLiAgVGhlIGlkZW50aXR5CiAgIGludGVn cml0eSBwcm90ZWN0aW9uIHByb2NlZHVyZXMgZGVzY3JpYmVkIGluIFNlY3VyaXR5IENvbnNpZGVy YXRpb25zCiAgIHNlY3Rpb24gTVVTVCBiZSB1c2VkIGJ5IHRoZSBlbmRwb2ludCBvciB0aGUgcHJv eHkgc2VydmVyIGluIHRoZQogICBlbmRwb2ludHMgbmV0d29yayB0byBkZXRlY3QgbWFsaWNpb3Vz IEIyQlVBcyB0aGF0IGF0dGVtcHQgdG8KICAgdGVybWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lv bi4KCjMuMS4yLjEuICBSVFAgaGVhZGVyIGFuZCBSVENQIHBhY2tldHMgSW5zcGVjdGlvbgoKICAg VGhpcyBraW5kIG9mIG1lZGlhIGF3YXJlIHJlbGF5IGRvZXMgbm90IG1vZGlmeSB0aGUgUlRQIGhl YWRlcnMgYW5kCiAgIFJUQ1AgcGFja2V0cyBidXQgb25seSBpbnNwZWN0cyB0aGUgcGFja2V0cy4g IEl0IE1VU1QgTk9UIHRlcm1pbmF0ZQogICB0aGUgRFRMUy1TUlRQIHNlc3Npb24gb24gd2hpY2gg dGhlIHBhY2tldHMgYXJlIHJlY2VpdmVkLgoKCgoKClJhdmluZHJhbmF0aCwgZXQgYWwuICAgICBF eHBpcmVzIEFwcmlsIDE5LCAyMDE2ICAgICAgICAgICAgICAgICBbUGFnZSA2XQoMCkludGVybmV0 LURyYWZ0ICAgICAgIERUTFMtU1JUUCBIYW5kbGluZyBpbiBTSVAgQjJCVUEgICAgICAgIE9jdG9i ZXIgMjAxNQoKCjMuMS4yLjIuICBSVFAgaGVhZGVyIGFuZCBSVENQIHBhY2tldCBNb2RpZmljYXRp b24KCiAgIEEgQjJCVUEgY2Fubm90IG1vZGlmeSBSVFAgaGVhZGVycyBvciBSVENQIHBhY2tldHMs IGFzIHRvIGRvIHNvIGl0CiAgIHdvdWxkIG5lZWQgdG8gYWN0IGFzIGEgRFRMUyBlbmRwb2ludCwg dGVybWluYXRlIHRoZSBEVExTLVNSVFAgc2Vzc2lvbgogICBhbmQgZGVjcnlwdC9yZS1lbmNyeXB0 IFJUUCBwYWNrZXQuICBUaGlzIHdvdWxkIGNhdXNlIHRoZSBpZGVudGl0eSBhbmQKICAgaW50ZWdy aXR5IHByb3RlY3Rpb24gcHJvY2VkdXJlcyBkaXNjdXNzZWQgaW4gW1JGQzQ0NzRdIHRvIGZhaWwg YW5kCiAgIGhlbmNlIGEgQjJCVUEgTVVTVCBOT1QgdGVybWluYXRlIHRoZSBEVExTLVNSVFAgc2Vz c2lvbi4gIFRoaXMKICAgc2VjdXJpdHkgYW5kIHByaXZhY3kgcHJvYmxlbSBjYW4gYmUgbWl0aWdh dGVkIGJ5IGhhdmluZyBkaWZmZXJlbnQKICAga2V5cyBmb3IgcHJvdGVjdGluZyBSVFAgaGVhZGVy IGludGVncml0eSBhbmQgZW5jcnlwdGluZyB0aGUgUlRQCiAgIHBheWxvYWQuICBGb3IgZXhhbXBs ZSwgdGhlIGFwcHJvYWNoIGRpc2N1c3NlZCBpbgogICBbSS1ELmpvbmVzLXBlcmMtcHJpdmF0ZS1t ZWRpYS1yZXF0c10gY2FuIGJlIHVzZWQuICBXaXRoIHN1Y2ggYW4KICAgYXBwcm9hY2gsIHRoZSBC MkJVQSBpcyBub3QgYXdhcmUgb2YgdGhlIGtleXMgdXNlZCB0byBkZWNyeXB0IHRoZQogICBtZWRp YSBwYXlsb2FkLgoKMy4yLiAgTWVkaWEgUGxhbmUgQjJCVUEgd2l0aCBOQVQgSGFuZGxpbmcKCiAg IERUTFMtU1JUUCBoYW5kc2hha2VzIGFuZCBTRFAgb2ZmZXIvYW5zd2VyIGV4Y2hhbmdlcyBbUkZD MzI2NF0gbWF5CiAgIGhhcHBlbiBpbiBwYXJhbGxlbC4gIElmIGFuIGVuZHBvaW50IGlzIGJlaGlu ZCBhIE5BVCwgYW5kIHRoZSBlbmRwb2ludAogICBpcyBhY3RpbmcgYXMgYSBEVExTIHNlcnZlciwg dGhlIENsaWVudEhlbGxvIG1lc3NhZ2UgZnJvbSBhIEIyQlVBCiAgIChhY3RpbmcgYXMgRFRMUyBj bGllbnQpIGlzIGxpa2VseSB0byBiZSBsb3N0LCBhcyBkZXNjcmliZWQgaW4KICAgU2VjdGlvbiA3 LjMgb2YgW1JGQzU3NjNdLiAgSW4gb3JkZXIgdG8gb3ZlcmNvbWUgdGhpcyBwcm9ibGVtLCB0aGUK ICAgZW5kcG9pbnQgYW5kIEIyQlVBIGNhbiBzdXBwb3J0IHRoZSBJbnRlcmFjdGl2ZSBDb25uZWN0 aXZpdHkKICAgRXN0YWJsaXNobWVudCAoSUNFKSBtZWNoYW5pc20gW1JGQzUyNDVdLCBhcyBkaXNj dXNzZWQgaW4gU2VjdGlvbiA3LjMKICAgb2YgW1JGQzU3NjNdLiAgSWYgdGhlIElDRSBjaGVjayBp cyBzdWNjZXNzZnVsIHRoZW4gdGhlIGVuZHBvaW50IHdpbGwKICAgcmVjZWl2ZSB0aGUgQ2xpZW50 SGVsbG8gbWVzc2FnZSBmcm9tIHRoZSBCMkJVQS4KCjQuICBGb3JraW5nIENvbnNpZGVyYXRpb25z CgogICBEdWUgdG8gZm9ya2luZyBbUkZDMzI2MV0sIGEgU0lQIHJlcXVlc3QgY2FycnlpbmcgYW4g U0RQIG9mZmVyIHNlbnQgYnkKICAgYW4gZW5kcG9pbnQgKG9mZmVyZXIpIGNhbiByZWFjaCBtdWx0 aXBsZSByZW1vdGUgZW5kcG9pbnRzLiAgQXMgYQogICByZXN1bHQsIG11bHRpcGxlIERUTFMtU1JU UCBzZXNzaW9ucyBjYW4gYmUgZXN0YWJsaXNoZWQsIG9uZSBiZXR3ZWVuCiAgIHRoZSBlbmRwb2lu dCB0aGF0IHNlbnQgdGhlIFNJUCByZXF1ZXN0IGFuZCBlYWNoIG9mIHRoZSByZW1vdGUKICAgZW5k cG9pbnRzIHRoYXQgcmVjZWl2ZWQgdGhlIHJlcXVlc3QuICBCb3RoIG1lZGlhIHJlbGF5cyBhbmQg bWVkaWEtCiAgIGF3YXJlIHJlbGF5cyBNVVNUIGZvcndhcmQgdGhlIGNlcnRpZmljYXRlIGZpbmdl cnByaW50cyBhbmQgU0RQIHNldHVwCiAgIGF0dHJpYnV0ZXMgaXQgcmVjZWl2ZWQgaW4gdGhlIFNE UCBhbnN3ZXIgZnJvbSBlYWNoIGVuZHBvaW50CiAgIChhbnN3ZXJlcikgdW5tb2RpZmllZCB0b3dh cmRzIHRoZSBvZmZlcmVyLiAgU2luY2UgZWFjaCBEVExTCiAgIGNvbm5lY3Rpb24gaXMgc2V0dXAg b24gYSB1bmlxdWUgNS10dXBsZSwgQjJCVUEgTVVTVCByZXBsYWNlIHRoZQogICBhbnN3ZXJlcidz IHRyYW5zcG9ydCBhZGRyZXNzZXMgaW4gZWFjaCBhbnN3ZXIgd2l0aCBpdHMgdW5pcXVlCiAgIHRy YW5zcG9ydCBhZGRyZXNzZXMgc28gdGhhdCB0aGUgb2ZmZXJlciBjYW4gZXN0YWJsaXNoIGEgRFRM UwogICBjb25uZWN0aW9uIHdpdGggZWFjaCBhbnN3ZXJlci4KCgoKCgoKCgoKCgpSYXZpbmRyYW5h dGgsIGV0IGFsLiAgICAgRXhwaXJlcyBBcHJpbCAxOSwgMjAxNiAgICAgICAgICAgICAgICAgW1Bh Z2UgN10KDApJbnRlcm5ldC1EcmFmdCAgICAgICBEVExTLVNSVFAgSGFuZGxpbmcgaW4gU0lQIEIy QlVBICAgICAgICBPY3RvYmVyIDIwMTUKCgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBCb2IgKDE5Mi4wLjIuMTo2NjY2KQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC8KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIC8KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLyBE VExTLVNSVFA9WFhYCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLwog ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLwogICAgICAgICAgICAgICAg ICAgICAgICAgRFRMUy1TUlRQPVhYWCB2CiAgICAgICAgICAgICAgICAgICAgICAgICA8LS0tLS0t LS0tLS0+ICAoMTkyLjAuMi4zOjc3NzcpCiAgIEFsaWNlICgxOTIuMC4yLjA6NTU1NSkgICAgICAg ICAgICAgQjJCVUEKICAgICAgICAgICAgICAgICAgICAgICAgIDwtLS0tLS0tLS0tLT4gICgxOTIu MC4yLjM6ODg4OCkKICAgICAgICAgICAgICAgICAgICAgICAgIERUTFMtU1JUUD1ZWVkgXgogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFwgIERUTFMtU1JUUD1ZWVkKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgXAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQ2hhcmxpZSAo MTkyLjAuMi4yOjY2NjYpCgogICAgICAgICAgICAgICAgIEZpZ3VyZSAyOiBCMkJVQSBoYW5kbGlu ZyBtdWx0aXBsZSBhbnN3ZXJzCgogICBGb3IgaW5zdGFuY2UsIGFzIHNob3duIGluIEZpZ3VyZSAy IEFsaWNlIHNlbmRzIGEgcmVxdWVzdCB3aXRoIGFuCiAgIG9mZmVyLCBhbmQgdGhlIHJlcXVlc3Qg aXMgZm9ya2VkLiAgQWxpY2UgcmVjZWl2ZXMgYW5zd2VycyBmcm9tIGJvdGgKICAgQm9iIGFuZCBD aGFybGllLiAgQjJCVUEgTVVTVCBhZHZlcnRpc2UgZGlmZmVyZW50IEIyQlVBIHRyYW5zcG9ydAog ICBhZGRyZXNzIGluIGVhY2ggYW5zd2VyLCBhcyBzaG93biBpbiBGaWd1cmUyLCB3aGVyZSBYWFgg YW5kIFlZWQogICByZXByZXNlbnQgZGlmZmVyZW50IERUTFMtU1JUUCBzZXNzaW9ucy4gIEIyQlVB IHJlcGxhY2VzIHRoZSBCb2IncwogICB0cmFuc3BvcnQgYWRkcmVzcyAoMTkyLjAuMi4xOjY2NjYp IGluIHRoZSBhbnN3ZXIgd2l0aCBpdHMgdHJhbnNwb3J0CiAgIGFkZHJlc3MgKDE5Mi4wLjIuMzo3 Nzc3KSBhbmQgQ2hhcmxpZSdzIHRyYW5zcG9ydCBhZGRyZXNzCiAgICgxOTIuMC4yLjI6NjY2Nikg aW4gdGhlIGFuc3dlciB3aXRoIGl0cyB0cmFuc3BvcnQgYWRkcmVzcwogICAoMTkyLjAuMi4zOjg4 ODgpLiAgQjJCVUEgdHJhY2tzIHRoZSByZW1vdGUgc291cmNlcyAoQm9iIGFuZCBDaGFybGllKQog ICBhbmQgYXNzb2NpYXRlcyB0aGVtIHRvIHRoZSBsb2NhbCBzb3VyY2VzIHRoYXQgYXJlIHVzZWQg dG8gc2VuZAogICBwYWNrZXRzIHRvIEFsaWNlLgoKNS4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25z CgogICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgYmVoYXZpb3IgbWVkaWEgcGxhbmUgQjJC VUFzIChtZWRpYS1hd2FyZQogICBhbmQgbWVkaWEtdW5hd2FyZSkgTVVTVCBmb2xsb3cgd2hlbiBh Y3Rpbmcgb24gdGhlIG1lZGlhIHBsYW5lIHRoYXQKICAgdXNlcyBTUlRQIHNlY3VyaXR5IGNvbnRl eHQgc2V0dXAgd2l0aCB0aGUgRFRMUyBwcm90b2NvbC4gIEF0dGVtcHRpbmcKICAgdG8gY292ZXIg bWVkaWEtYXdhcmUgcmVsYXkgbW9kaWZ5aW5nIFJUUCBoZWFkZXJzIGFuZCBtZWRpYQogICB0ZXJt aW5hdGlvbiBzY2VuYXJpb3MgaW52b2x2aW5nIHNlY3VyZSBzZXNzaW9ucyAobGlrZSBEVExTLVNS VFApIHdpbGwKICAgaW5ldml0YWJseSBsZWFkIHRvIHRoZSBCMkJVQSBhY3RpbmcgYXMgYSBtYW4t aW4tdGhlLW1pZGRsZSwgYW5kIGhlbmNlCiAgIGEgQjJCVUEgTVVTVCBOT1QgdGVybWluYXRlIERU TFMtU1JUUCBzZXNzaW9uLiAgU2VjdXJpdHkKICAgY29uc2lkZXJhdGlvbnMgZGlzY3Vzc2VkIGlu IFtSRkM1NzYzXSBhcmUgYWxzbyBhcHBsaWNhYmxlIHRvIHRoaXMKICAgZG9jdW1lbnQuICBJbiBh ZGRpdGlvbiwgdGhlIEIyQlVBIGJlaGF2aW9ycyBvdXRsaW5lZCBpbiB0aGlzIGRvY3VtZW50CiAg IGRvIG5vdCBpbXBhY3QgdGhlIHNlY3VyaXR5IGFuZCBpbnRlZ3JpdHkgb2YgYSBEVExTLVNSVFAg c2Vzc2lvbiBvcgogICB0aGUgZGF0YSBleGNoYW5nZWQgb3ZlciBpdC4gIEEgbWFsaWNpb3VzIEIy QlVBIGNhbiB0cnkgdG8gYnJlYWsgaW50bwogICB0aGUgRFRMUyBjb25uZWN0aW9uLCBidXQgc3Vj aCBhbiBhdHRhY2sgY2FuIGJlIHByZXZlbnRlZCB1c2luZyB0aGUKICAgaWRlbnRpdHkgdmFsaWRh dGlvbiBtZWNoYW5pc20gZGlzY3Vzc2VkIGluIFtSRkM0NDc0XS4gIEVpdGhlciB0aGUKICAgZW5k cG9pbnRzIG9yIGF1dGhlbnRpY2F0aW9uIHNlcnZpY2UgcHJveGllcyBpbnZvbHZlZCBpbiB0aGUg Y2FsbCBNVVNUCgoKClJhdmluZHJhbmF0aCwgZXQgYWwuICAgICBFeHBpcmVzIEFwcmlsIDE5LCAy MDE2ICAgICAgICAgICAgICAgICBbUGFnZSA4XQoMCkludGVybmV0LURyYWZ0ICAgICAgIERUTFMt U1JUUCBIYW5kbGluZyBpbiBTSVAgQjJCVUEgICAgICAgIE9jdG9iZXIgMjAxNQoKCiAgIHVzZSB0 aGUgaWRlbnRpdHkgdmFsaWRhdGlvbiBtZWNoYW5pc21zIGRpc2N1c3NlZCBpbiBbUkZDNDQ3NF0g dG8KICAgdmFsaWRhdGUgdGhlIGlkZW50aXR5IG9mIHBlZXJzIGFuZCBkZXRlY3QgbWFsaWNpb3Vz IEIyQlVBJ3MgdGhhdCBjYW4KICAgYXR0ZW1wdCB0byB0ZXJtaW5hdGUgdGhlIERUTFMgY29ubmVj dGlvbiB0byBkZWNyeXB0IHRoZSBSVFAgcGF5bG9hZC4KCjYuICBJQU5BIENvbnNpZGVyYXRpb25z CgogICBUaGlzIGRvY3VtZW50IG1ha2VzIG5vIHJlcXVlc3Qgb2YgSUFOQS4KCjcuICBBY2tub3ds ZWRnbWVudHMKCiAgIFNwZWNpYWwgdGhhbmtzIHRvIExvcmVuem8gTWluaWVybywgUmFuaml0IEF2 YXJzYWxhLCBIYWRyaWVsIEthcGxhbiwKICAgTXV0aHUgQXJ1bCBNb3poaSwgUGF1bCBLeXppdmF0 LCBQZXRlciBEYXdlcywgQnJldHQgVGF0ZSwgRGFuIFdpbmcsCiAgIENoYXJsZXMgRWNrZWwsIFNp bW9uIFBlcnJlYXVsdCwgQWxicmVjaHQgU2Nod2FyeiwgSmVucyBHdWJhbGxhLAogICBDaHJpc3Rl ciBIb2xtYmVyZywgQ29saW4gUGVya2lucyBhbmQgQmVuIENhbXBiZWxsIGZvciB0aGVpcgogICBj b25zdHJ1Y3RpdmUgY29tbWVudHMsc3VnZ2VzdGlvbnMsIGFuZCBlYXJseSByZXZpZXdzIHRoYXQg d2VyZQogICBjcml0aWNhbCB0byB0aGUgZm9ybXVsYXRpb24gYW5kIHJlZmluZW1lbnQgb2YgdGhp cyBkb2N1bWVudC4KCjguICBDb250cmlidXRvcnMKCiAgIFJhamVldiBTZXRoIHByb3ZpZGVkIHN1 YnN0YW50aWFsIGNvbnRyaWJ1dGlvbnMgdG8gdGhpcyBkb2N1bWVudC4KCjkuICBSZWZlcmVuY2Vz Cgo5LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNlcwoKICAgW1JGQzIxMTldICBCcmFkbmVyLCBTLiwg IktleSB3b3JkcyBmb3IgdXNlIGluIFJGQ3MgdG8gSW5kaWNhdGUKICAgICAgICAgICAgICBSZXF1 aXJlbWVudCBMZXZlbHMiLCBCQ1AgMTQsIFJGQyAyMTE5LAogICAgICAgICAgICAgIERPSSAxMC4x NzQ4Ny9SRkMyMTE5LCBNYXJjaCAxOTk3LAogICAgICAgICAgICAgIDxodHRwOi8vd3d3LnJmYy1l ZGl0b3Iub3JnL2luZm8vcmZjMjExOT4uCgogICBbUkZDMzU1MF0gIFNjaHVsenJpbm5lLCBILiwg Q2FzbmVyLCBTLiwgRnJlZGVyaWNrLCBSLiwgYW5kIFYuCiAgICAgICAgICAgICAgSmFjb2Jzb24s ICJSVFA6IEEgVHJhbnNwb3J0IFByb3RvY29sIGZvciBSZWFsLVRpbWUKICAgICAgICAgICAgICBB cHBsaWNhdGlvbnMiLCBTVEQgNjQsIFJGQyAzNTUwLCBET0kgMTAuMTc0ODcvUkZDMzU1MCwKICAg ICAgICAgICAgICBKdWx5IDIwMDMsIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZj MzU1MD4uCgogICBbUkZDMzcxMV0gIEJhdWdoZXIsIE0uLCBNY0dyZXcsIEQuLCBOYXNsdW5kLCBN LiwgQ2FycmFyYSwgRS4sIGFuZCBLLgogICAgICAgICAgICAgIE5vcnJtYW4sICJUaGUgU2VjdXJl IFJlYWwtdGltZSBUcmFuc3BvcnQgUHJvdG9jb2wgKFNSVFApIiwKICAgICAgICAgICAgICBSRkMg MzcxMSwgRE9JIDEwLjE3NDg3L1JGQzM3MTEsIE1hcmNoIDIwMDQsCiAgICAgICAgICAgICAgPGh0 dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMzNzExPi4KCiAgIFtSRkM0NDc0XSAgUGV0 ZXJzb24sIEouIGFuZCBDLiBKZW5uaW5ncywgIkVuaGFuY2VtZW50cyBmb3IKICAgICAgICAgICAg ICBBdXRoZW50aWNhdGVkIElkZW50aXR5IE1hbmFnZW1lbnQgaW4gdGhlIFNlc3Npb24KICAgICAg ICAgICAgICBJbml0aWF0aW9uIFByb3RvY29sIChTSVApIiwgUkZDIDQ0NzQsCiAgICAgICAgICAg ICAgRE9JIDEwLjE3NDg3L1JGQzQ0NzQsIEF1Z3VzdCAyMDA2LAogICAgICAgICAgICAgIDxodHRw Oi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNDQ3ND4uCgoKCgoKClJhdmluZHJhbmF0aCwg ZXQgYWwuICAgICBFeHBpcmVzIEFwcmlsIDE5LCAyMDE2ICAgICAgICAgICAgICAgICBbUGFnZSA5 XQoMCkludGVybmV0LURyYWZ0ICAgICAgIERUTFMtU1JUUCBIYW5kbGluZyBpbiBTSVAgQjJCVUEg ICAgICAgIE9jdG9iZXIgMjAxNQoKCiAgIFtSRkM1NzYzXSAgRmlzY2hsLCBKLiwgVHNjaG9mZW5p ZywgSC4sIGFuZCBFLiBSZXNjb3JsYSwgIkZyYW1ld29yawogICAgICAgICAgICAgIGZvciBFc3Rh Ymxpc2hpbmcgYSBTZWN1cmUgUmVhbC10aW1lIFRyYW5zcG9ydCBQcm90b2NvbAogICAgICAgICAg ICAgIChTUlRQKSBTZWN1cml0eSBDb250ZXh0IFVzaW5nIERhdGFncmFtIFRyYW5zcG9ydCBMYXll cgogICAgICAgICAgICAgIFNlY3VyaXR5IChEVExTKSIsIFJGQyA1NzYzLCBET0kgMTAuMTc0ODcv UkZDNTc2MywgTWF5CiAgICAgICAgICAgICAgMjAxMCwgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5v cmcvaW5mby9yZmM1NzYzPi4KCiAgIFtSRkM1NzY0XSAgTWNHcmV3LCBELiBhbmQgRS4gUmVzY29y bGEsICJEYXRhZ3JhbSBUcmFuc3BvcnQgTGF5ZXIKICAgICAgICAgICAgICBTZWN1cml0eSAoRFRM UykgRXh0ZW5zaW9uIHRvIEVzdGFibGlzaCBLZXlzIGZvciB0aGUgU2VjdXJlCiAgICAgICAgICAg ICAgUmVhbC10aW1lIFRyYW5zcG9ydCBQcm90b2NvbCAoU1JUUCkiLCBSRkMgNTc2NCwKICAgICAg ICAgICAgICBET0kgMTAuMTc0ODcvUkZDNTc2NCwgTWF5IDIwMTAsCiAgICAgICAgICAgICAgPGh0 dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1NzY0Pi4KCiAgIFtSRkM2MzQ3XSAgUmVz Y29ybGEsIEUuIGFuZCBOLiBNb2RhZHVndSwgIkRhdGFncmFtIFRyYW5zcG9ydCBMYXllcgogICAg ICAgICAgICAgIFNlY3VyaXR5IFZlcnNpb24gMS4yIiwgUkZDIDYzNDcsIERPSSAxMC4xNzQ4Ny9S RkM2MzQ3LAogICAgICAgICAgICAgIEphbnVhcnkgMjAxMiwgPGh0dHA6Ly93d3cucmZjLWVkaXRv ci5vcmcvaW5mby9yZmM2MzQ3Pi4KCjkuMi4gIEluZm9ybWF0aXZlIFJlZmVyZW5jZXMKCiAgIFtJ LUQuaWV0Zi1hdnRleHQtcnRwLWdyb3VwaW5nLXRheG9ub215XQogICAgICAgICAgICAgIExlbm5v eCwgSi4sIEdyb3NzLCBLLiwgTmFuZGFrdW1hciwgUy4sIFNhbGd1ZWlybywgRy4sIGFuZAogICAg ICAgICAgICAgIEIuIEJ1cm1hbiwgIkEgVGF4b25vbXkgb2YgU2VtYW50aWNzIGFuZCBNZWNoYW5p c21zIGZvcgogICAgICAgICAgICAgIFJlYWwtVGltZSBUcmFuc3BvcnQgUHJvdG9jb2wgKFJUUCkg U291cmNlcyIsIGRyYWZ0LWlldGYtCiAgICAgICAgICAgICAgYXZ0ZXh0LXJ0cC1ncm91cGluZy10 YXhvbm9teS0wOCAod29yayBpbiBwcm9ncmVzcyksIEp1bHkKICAgICAgICAgICAgICAyMDE1LgoK ICAgW0ktRC5qb25lcy1wZXJjLXByaXZhdGUtbWVkaWEtcmVxdHNdCiAgICAgICAgICAgICAgSm9u ZXMsIFAuLCBJc21haWwsIE4uLCBCZW5oYW0sIEQuLCBCdWNrbGVzLCBOLiwgTWF0dHNzb24sCiAg ICAgICAgICAgICAgSi4sIGFuZCBSLiBCYXJuZXMsICJQcml2YXRlIE1lZGlhIFJlcXVpcmVtZW50 cyBpbiBQcml2YWN5CiAgICAgICAgICAgICAgRW5oYW5jZWQgUlRQIENvbmZlcmVuY2luZyIsIGRy YWZ0LWpvbmVzLXBlcmMtcHJpdmF0ZS0KICAgICAgICAgICAgICBtZWRpYS1yZXF0cy0wMCAod29y ayBpbiBwcm9ncmVzcyksIEp1bHkgMjAxNS4KCiAgIFtSRkMzMjYxXSAgUm9zZW5iZXJnLCBKLiwg U2NodWx6cmlubmUsIEguLCBDYW1hcmlsbG8sIEcuLCBKb2huc3RvbiwKICAgICAgICAgICAgICBB LiwgUGV0ZXJzb24sIEouLCBTcGFya3MsIFIuLCBIYW5kbGV5LCBNLiwgYW5kIEUuCiAgICAgICAg ICAgICAgU2Nob29sZXIsICJTSVA6IFNlc3Npb24gSW5pdGlhdGlvbiBQcm90b2NvbCIsIFJGQyAz MjYxLAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkMzMjYxLCBKdW5lIDIwMDIsCiAgICAg ICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmMzMjYxPi4KCiAgIFtS RkMzMjY0XSAgUm9zZW5iZXJnLCBKLiBhbmQgSC4gU2NodWx6cmlubmUsICJBbiBPZmZlci9BbnN3 ZXIgTW9kZWwKICAgICAgICAgICAgICB3aXRoIFNlc3Npb24gRGVzY3JpcHRpb24gUHJvdG9jb2wg KFNEUCkiLCBSRkMgMzI2NCwKICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDMzI2NCwgSnVu ZSAyMDAyLAogICAgICAgICAgICAgIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZj MzI2ND4uCgogICBbUkZDNDU2Nl0gIEhhbmRsZXksIE0uLCBKYWNvYnNvbiwgVi4sIGFuZCBDLiBQ ZXJraW5zLCAiU0RQOiBTZXNzaW9uCiAgICAgICAgICAgICAgRGVzY3JpcHRpb24gUHJvdG9jb2wi LCBSRkMgNDU2NiwgRE9JIDEwLjE3NDg3L1JGQzQ1NjYsCiAgICAgICAgICAgICAgSnVseSAyMDA2 LCA8aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzQ1NjY+LgoKCgoKCgpSYXZpbmRy YW5hdGgsIGV0IGFsLiAgICAgRXhwaXJlcyBBcHJpbCAxOSwgMjAxNiAgICAgICAgICAgICAgICBb UGFnZSAxMF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICBEVExTLVNSVFAgSGFuZGxpbmcgaW4gU0lQ IEIyQlVBICAgICAgICBPY3RvYmVyIDIwMTUKCgogICBbUkZDNTI0NV0gIFJvc2VuYmVyZywgSi4s ICJJbnRlcmFjdGl2ZSBDb25uZWN0aXZpdHkgRXN0YWJsaXNobWVudAogICAgICAgICAgICAgIChJ Q0UpOiBBIFByb3RvY29sIGZvciBOZXR3b3JrIEFkZHJlc3MgVHJhbnNsYXRvciAoTkFUKQogICAg ICAgICAgICAgIFRyYXZlcnNhbCBmb3IgT2ZmZXIvQW5zd2VyIFByb3RvY29scyIsIFJGQyA1MjQ1 LAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM1MjQ1LCBBcHJpbCAyMDEwLAogICAgICAg ICAgICAgIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNTI0NT4uCgogICBbUkZD NTc2MV0gIFBlcmtpbnMsIEMuIGFuZCBNLiBXZXN0ZXJsdW5kLCAiTXVsdGlwbGV4aW5nIFJUUCBE YXRhIGFuZAogICAgICAgICAgICAgIENvbnRyb2wgUGFja2V0cyBvbiBhIFNpbmdsZSBQb3J0Iiwg UkZDIDU3NjEsCiAgICAgICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzU3NjEsIEFwcmlsIDIwMTAs CiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM1NzYxPi4K CiAgIFtSRkM3MDkyXSAgS2FwbGFuLCBILiBhbmQgVi4gUGFzY3VhbCwgIkEgVGF4b25vbXkgb2Yg U2Vzc2lvbgogICAgICAgICAgICAgIEluaXRpYXRpb24gUHJvdG9jb2wgKFNJUCkgQmFjay10by1C YWNrIFVzZXIgQWdlbnRzIiwKICAgICAgICAgICAgICBSRkMgNzA5MiwgRE9JIDEwLjE3NDg3L1JG QzcwOTIsIERlY2VtYmVyIDIwMTMsCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRv ci5vcmcvaW5mby9yZmM3MDkyPi4KCkF1dGhvcnMnIEFkZHJlc3NlcwoKICAgUmFtIE1vaGFuIFJh dmluZHJhbmF0aAogICBDaXNjbwogICBDZXNzbmEgQnVzaW5lc3MgUGFyawogICBTYXJqYXB1ci1N YXJhdGhhaGFsbGkgT3V0ZXIgUmluZyBSb2FkCiAgIEJhbmdhbG9yZSwgS2FybmF0YWthICA1NjAx MDMKICAgSW5kaWEKCiAgIEVtYWlsOiBybW9oYW5yQGNpc2NvLmNvbQoKCiAgIFRpcnVtYWxlc3dh ciBSZWRkeQogICBDaXNjbwogICBDZXNzbmEgQnVzaW5lc3MgUGFyaywgVmFydGh1ciBIb2JsaQog ICBTYXJqYXB1ciBNYXJhdGhhbGxpIE91dGVyIFJpbmcgUm9hZAogICBCYW5nYWxvcmUsIEthcm5h dGFrYSAgNTYwMTAzCiAgIEluZGlhCgogICBFbWFpbDogdGlyZWRkeUBjaXNjby5jb20KCgogICBH b256YWxvIFNhbGd1ZWlybwogICBDaXNjbyBTeXN0ZW1zLCBJbmMuCiAgIDcyMDAtMTIgS2l0IENy ZWVrIFJvYWQKICAgUmVzZWFyY2ggVHJpYW5nbGUgUGFyaywgTkMgIDI3NzA5CiAgIFVTCgogICBF bWFpbDogZ3NhbGd1ZWlAY2lzY28uY29tCgoKCgoKClJhdmluZHJhbmF0aCwgZXQgYWwuICAgICBF eHBpcmVzIEFwcmlsIDE5LCAyMDE2ICAgICAgICAgICAgICAgIFtQYWdlIDExXQoMCkludGVybmV0 LURyYWZ0ICAgICAgIERUTFMtU1JUUCBIYW5kbGluZyBpbiBTSVAgQjJCVUEgICAgICAgIE9jdG9i ZXIgMjAxNQoKCiAgIFZpY3RvciBQYXNjdWFsCiAgIE9yYWNsZQoKICAgRW1haWw6IHZpY3Rvci5w YXNjdWFsLmF2aWxhQG9yYWNsZS5jb20KCgogICBQYXJ0aGFzYXJhdGhpIFJhdmluZHJhbgogICBO b2tpYSBOZXR3b3JrcwogICBCYW5nYWxvcmUsIEthcm5hdGFrYQogICBJbmRpYQoKICAgRW1haWw6 IHBhcnRoYUBwYXJ0aGFzYXJhdGhpLmNvLmluCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK CgoKCgoKCgoKClJhdmluZHJhbmF0aCwgZXQgYWwuICAgICBFeHBpcmVzIEFwcmlsIDE5LCAyMDE2 ICAgICAgICAgICAgICAgIFtQYWdlIDEyXQo= --_003_D2490FA14642Brmohanrciscocom_-- From nobody Mon Oct 19 09:09:27 2015 Return-Path: X-Original-To: straw@ietf.org Delivered-To: straw@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 175351A8765; Mon, 19 Oct 2015 09:09:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.6.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20151019160926.18399.54737.idtracker@ietfa.amsl.com> Date: Mon, 19 Oct 2015 09:09:26 -0700 Archived-At: Cc: straw@ietf.org Subject: [straw] I-D Action: draft-ietf-straw-b2bua-dtls-srtp-08.txt X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Oct 2015 16:09:26 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Sip Traversal Required for Applications to Work Working Group of the IETF. Title : DTLS-SRTP Handling in Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs) Authors : Ram Mohan Ravindranath Tirumaleswar Reddy Gonzalo Salgueiro Victor Pascual Parthasarathi Ravindran Filename : draft-ietf-straw-b2bua-dtls-srtp-08.txt Pages : 12 Date : 2015-10-19 Abstract: Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs) often act on the media plane, rather than just on the signaling path. This document describes the behavior such B2BUAs can adhere to when acting on the media plane that uses an Secure Real-time Transport (SRTP) security context set up with the Datagram Transport Layer Security (DTLS) protocol. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-straw-b2bua-dtls-srtp/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-straw-b2bua-dtls-srtp-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-straw-b2bua-dtls-srtp-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 26 19:49:05 2015 Return-Path: X-Original-To: straw@ietfa.amsl.com Delivered-To: straw@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CB571B338E; Mon, 26 Oct 2015 19:49:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N4e2vmNaHUPo; Mon, 26 Oct 2015 19:49:01 -0700 (PDT) Received: from nostrum.com (raven-v6.nostrum.com [IPv6:2001:470:d:1130::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CFF91B338F; Mon, 26 Oct 2015 19:49:01 -0700 (PDT) Received: from [10.0.1.10] (cpe-70-119-203-4.tx.res.rr.com [70.119.203.4]) (authenticated bits=0) by nostrum.com (8.15.2/8.14.9) with ESMTPSA id t9R2n0cd032282 (version=TLSv1 cipher=DHE-RSA-AES128-SHA bits=128 verify=NO); Mon, 26 Oct 2015 21:49:00 -0500 (CDT) (envelope-from ben@nostrum.com) X-Authentication-Warning: raven.nostrum.com: Host cpe-70-119-203-4.tx.res.rr.com [70.119.203.4] claimed to be [10.0.1.10] From: "Ben Campbell" To: straw@ietf.org, draft-ietf-straw-b2bua-dtls-srtp.all@ietf.org Date: Mon, 26 Oct 2015 21:49:13 -0500 Message-ID: In-Reply-To: <20151019160926.18399.54737.idtracker@ietfa.amsl.com> References: <20151019160926.18399.54737.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.2r5141) Archived-At: Subject: Re: [straw] I-D Action: draft-ietf-straw-b2bua-dtls-srtp-08.txt X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2015 02:49:04 -0000 Hi, This version addresses many of my comments. I'm going to go ahead and send start the IETF last call process. I do have a few new or remaining comments, but these can be handled with along with other IETF last call comments. Thanks! Ben. - 1.2, last paragraph: The first sentence still contains a MUST that I thought was going to go away. Ram proposed the following, that did not seem to make it into the draft: "The following sections describe the behavior B2BUAs can follow to avoid breaking end-to-end DTLS-SRTP sessions. B2BUAs terminating DTLS-SRTP session are outside the scope of this document." I like non-normative explanation of why you normally can't terminate DTLS-SRTP. But I note several other places where the draft still says that a b2bua MUST NOT terminate dtls-srtp. I don't think the normative MUST is necessary, or appropriate, as it basically tries to put normative requirements on b2buas that do not implement this draft. - 3.1.1, 2nd paragraph under figure 1: "... advertised to Bob in the SIP offer before it receives a SIP answer from Bob ... " Should SIP offer and SIP answer be SDP offer and SDP answer? - 3.1.1, last paragraph: Section 5 of RFC4474 and 4474bis are not the same. I _think_ section 5 is correct for 4474, but the section number seems to be the same as from before when the reference was 4474bis. Please confirm the reference points to the right section. - 3.1.2: "The identity integrity protection procedures described in Security Considerations section MUST be used by the endpoint or the proxy server in the endpoints network to detect malicious B2BUAs that attempt to terminate the DTLS-SRTP session." I think this is still not quite right. This draft is not about endpoints, and therefore can't really introduce normative requirements on the endpoints (except for the case the endpoint is a B2BUA.). To do so would require updating 3261 and a bunch of other specs. This needs to be stated non-normatively, and the security considerations already do that. "...generate the identity..." I think this should say "generate the signature in the Identity header field" - 3.1.2.1 and 3.1.2.2 These sections seem to say the same thing with different levels of detail, including repetition of the "MUST NOT terminate dtls-srtp" bit. Can they be combined? On 19 Oct 2015, at 11:09, internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the Sip Traversal Required for > Applications to Work Working Group of the IETF. > > Title : DTLS-SRTP Handling in Session Initiation > Protocol (SIP) Back-to-Back User Agents (B2BUAs) > Authors : Ram Mohan Ravindranath > Tirumaleswar Reddy > Gonzalo Salgueiro > Victor Pascual > Parthasarathi Ravindran > Filename : draft-ietf-straw-b2bua-dtls-srtp-08.txt > Pages : 12 > Date : 2015-10-19 > > Abstract: > Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs) > often act on the media plane, rather than just on the signaling path. > This document describes the behavior such B2BUAs can adhere to when > acting on the media plane that uses an Secure Real-time Transport > (SRTP) security context set up with the Datagram Transport Layer > Security (DTLS) protocol. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-straw-b2bua-dtls-srtp/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-straw-b2bua-dtls-srtp-08 > > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=draft-ietf-straw-b2bua-dtls-srtp-08 > > > Please note that it may take a couple of minutes from the time of > submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > straw mailing list > straw@ietf.org > https://www.ietf.org/mailman/listinfo/straw From nobody Tue Oct 27 05:10:55 2015 Return-Path: X-Original-To: straw@ietf.org Delivered-To: straw@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EB85C1A87AA; Tue, 27 Oct 2015 05:10:53 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.7.1 Auto-Submitted: auto-generated Precedence: bulk Sender: Message-ID: <20151027121053.27034.34372.idtracker@ietfa.amsl.com> Date: Tue, 27 Oct 2015 05:10:53 -0700 Archived-At: Cc: draft-ietf-straw-b2bua-dtls-srtp@ietf.org, ben@nostrum.com, straw@ietf.org, straw-chairs@ietf.org, christer.holmberg@ericsson.com Subject: [straw] Last Call: (DTLS-SRTP Handling in Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs)) to Proposed Standard X-BeenThere: straw@ietf.org X-Mailman-Version: 2.1.15 Reply-To: ietf@ietf.org List-Id: "Sip Traversal Required for Applications to Work \(STRAW\) working group discussion list" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2015 12:10:54 -0000 The IESG has received a request from the Sip Traversal Required for Applications to Work WG (straw) to consider the following document: - 'DTLS-SRTP Handling in Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs)' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2015-11-10. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract Session Initiation Protocol (SIP) Back-to-Back User Agents (B2BUAs) often act on the media plane, rather than just on the signaling path. This document describes the behavior such B2BUAs can adhere to when acting on the media plane that uses an Secure Real-time Transport (SRTP) security context set up with the Datagram Transport Layer Security (DTLS) protocol. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-straw-b2bua-dtls-srtp/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-straw-b2bua-dtls-srtp/ballot/ No IPR declarations have been submitted directly on this I-D.