From nobody Sat Feb 3 10:56:22 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A331129C5D for ; Sat, 3 Feb 2018 10:56:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jwZReKzJkrL2 for ; Sat, 3 Feb 2018 10:56:18 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on071a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe48::71a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1BDA12D96B for ; Sat, 3 Feb 2018 10:56:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=T11NPZMXI76x2LFezzGQIM5yFIyhLftqYwV0tcW3V9U=; b=mwNv6SR7zaUPGw7Ka18EbHfNTjJ/9Q0KLG7H87T+gEO3VXQS3tpnbxgyP2fHqmDlqUwOD4tzQkYiT0o0J6GIC5TF6yhJfb8kya6cZeG3IJjwL/iXbo45Gd98iTYqhUzu3fzVD+34BOxvvKHeNkuS91s5uRYKGH7E5bfrEWaDUTU= Received: from CY4PR21MB0856.namprd21.prod.outlook.com (10.173.192.145) by CY4PR21MB0165.namprd21.prod.outlook.com (10.173.192.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.485.0; Sat, 3 Feb 2018 18:56:17 +0000 Received: from CY4PR21MB0856.namprd21.prod.outlook.com ([fe80::a5aa:5aa0:e32d:9321]) by CY4PR21MB0856.namprd21.prod.outlook.com ([fe80::a5aa:5aa0:e32d:9321%3]) with mapi id 15.20.0506.001; Sat, 3 Feb 2018 18:56:17 +0000 From: Dave Thaler To: "suit@ietf.org" CC: Kathleen Moriarty Thread-Topic: Scheduling an Interim meeting in February Thread-Index: AdOVUL7gFZjuhgPzT+GWoF7GSkwKSwHz3GIg Date: Sat, 3 Feb 2018 18:56:17 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-01-24T20:27:42.0425226Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [73.254.202.27] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR21MB0165; 6:JZDS3tGjS6GdUIIEbrl++ZYxIa+rIBJ3X2mWI3jAUSB/nzqYiPpXqkUwYkmcnl8Lf3Ns6bHMwC8pDfOI96INahjFt+Jwde9dE3Rmc+jeK+D2s0G8v+X3sHs3zYHOB2nx/OwEaMQUXTHxqDOUanM9BL9RyyCMqDsK8q7ckULCqBVoTZjrmjyyhxik41hPWfFtBjOxpFxBuk5aky/LD6KbyLK5LKzY0oqiHQr2WEy2EI8ZSEvuc4lq1VcO274f9gpwAEiPKH3bELUjQsUYG39BUdQJjPbNNnBEf+gcT20EI5RWChmGCaEhCAzRRgtKdauytjPCbpMaTMD1Fu0eBotg8G8lQaWrkHG8MaRHSBrRHf1FvyrCyG8Askpf8SGT7sYM; 5:ud3EZpZ47FMQ0WXQi6/Z47N5WsXmVJieios8rjg1PzFx44iAumYGVZCzDo0xSoDGkaVabqlindabAgnau989brgLn5HsZrat0KQqZwKfZOGJFAHzUd6ACFx6wpuBsNjbyq1zCRQsH0HIkd4WoYBvmjCcCpwCb/gLGnn3xiZxnUM=; 24:lhYHGEB+RjlbngpRzCfNRzoI3RkC+BD/r8bwNXWjgvE7Cn4Bo+KB4cTTf1clF40XLLAjQTaOChjXnRxCyMPsO/FewK4oNDw9wHHVTNgkzbw=; 7:zV9rUlOFSQnRB7Qwi3h41vo7LJA6X8BGJvGNMqynhFOyg+QVGdkasYPA+eJ/IA07q3dSxJMtCZ7Hp14YRd2Ql0DVMlQGgMKQzBphMDr4FWZDy4sPvXYLrLFkBmV1RE49YbENbcLRQavSchScuU/pv+BPw8cjAovgCR2cS0BFupYQRIy4KFujPvcwVpsQxo6OH8AM2tjBb4kZFrbGDV6QabU1DuwTCKIVJSKDzh3tTuPMsYme9KK3ngCy4Q/rSoMk x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 74e94510-1778-4461-cac2-08d56b37ce6e x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:CY4PR21MB0165; x-ms-traffictypediagnostic: CY4PR21MB0165: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(85827821059158)(60409825278598)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(6040501)(2401047)(8121501046)(5005006)(10201501046)(3231101)(2400082)(944501161)(93006095)(93001095)(3002001)(6055026)(61426038)(61427038)(6041288)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:CY4PR21MB0165; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0165; x-forefront-prvs: 05724A8921 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(376002)(346002)(366004)(396003)(39380400002)(199004)(189003)(186003)(9686003)(106356001)(26005)(236005)(19609705001)(8936002)(97736004)(14454004)(102836004)(74316002)(53546011)(478600001)(7736002)(6916009)(81166006)(2501003)(8990500004)(6506007)(10290500003)(5630700001)(39060400002)(68736007)(99286004)(1730700003)(2906002)(316002)(10090500001)(6246003)(8676002)(3846002)(966005)(790700001)(54896002)(606006)(3660700001)(2351001)(33656002)(4326008)(86362001)(66066001)(81156014)(5250100002)(86612001)(6436002)(7696005)(55016002)(22452003)(6116002)(6306002)(5640700003)(105586002)(25786009)(3280700002)(5660300001)(229853002)(2900100001)(53936002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0165; H:CY4PR21MB0856.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: RrTg0MlQAbNIW0jlcGFDNSF0W/vxxBTwndKheZi1adqjkt5+NoAG5gSzDW1T4zTTyOWgzSMZ1niRSL0DATfkRQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0856F8E0C20388F7E920BF5CA3F80CY4PR21MB0856namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 74e94510-1778-4461-cac2-08d56b37ce6e X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2018 18:56:17.2032 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0165 Archived-At: Subject: Re: [Suit] Scheduling an Interim meeting in February X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2018 18:56:21 -0000 --_000_CY4PR21MB0856F8E0C20388F7E920BF5CA3F80CY4PR21MB0856namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The poll has concluded and the date will be Monday February 26th at 7am Pac= ific / 15:00 UTC. From: Dave Thaler Sent: Wednesday, January 24, 2018 12:28 PM To: suit@ietf.org Cc: Kathleen Moriarty Subject: Scheduling an Interim meeting in February As we discussed at the last IETF meeting, we plan to hold a SUIT WG virtual= (i.e., WebEx) interim meeting in February. A doodle poll is now up at https://doodle.com/poll/7dbiatttc69q7acw for a s= election of days. The time is the same for all of them, chosen to hopefully accommodate parti= cipants from Europe, North America, and Asia. If you have agenda requests, please send them to suit-chairs@ietf.org Thanks, Dave Thaler WG Co-chair --_000_CY4PR21MB0856F8E0C20388F7E920BF5CA3F80CY4PR21MB0856namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The poll has concluded and the date w= ill be Monday February 26th at 7am Pacific / 15:00 UTC.

&nbs= p;

From: Dave Thaler
Sent: Wednesday, January 24, 2018 12:28 PM
To: suit@ietf.org
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Subject: Scheduling an Interim meeting in February=

 

As we discussed at the last IETF meeting, we plan t= o hold a SUIT WG virtual (i.e., WebEx)

interim meeting in February.

 

A doodle poll is now up at https://doodle.com/pol= l/7dbiatttc69q7acw for a selection of days.

The time is the same for all of them, chosen to hop= efully accommodate participants from

Europe, North America, and Asia.<= /p>

 

If you have agenda requests, please send them to suit-chairs@ietf.org

 

Thanks,

Dave Thaler

WG Co-chair

 

--_000_CY4PR21MB0856F8E0C20388F7E920BF5CA3F80CY4PR21MB0856namp_-- From nobody Mon Feb 5 06:51:17 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FDEA126D73; Mon, 5 Feb 2018 06:51:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IESG Secretary To: "IETF-Announce" Cc: suit@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.71.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151784227098.5703.615595241585099998@ietfa.amsl.com> Date: Mon, 05 Feb 2018 06:51:11 -0800 Archived-At: Subject: [Suit] Software Updates for Internet of Things (suit) WG Virtual Meeting: 2018-02-26 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Feb 2018 14:51:11 -0000 The Software Updates for Internet of Things (suit) Working Group will hold a virtual interim meeting on 2018-02-26 from 07:00 to 09:00 America/Los_Angeles. Agenda: * Architecture document(s) * Manifest format document(s) Information about remote participation: Webex From nobody Tue Feb 6 06:31:39 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C785712E053; Tue, 6 Feb 2018 06:31:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2uddct02S1mX; Tue, 6 Feb 2018 06:31:35 -0800 (PST) Received: from gcc01-dm2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0116.outbound.protection.outlook.com [23.103.201.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4ADCF12D7EA; Tue, 6 Feb 2018 06:31:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=aqm2AwUSmKKP1tez1Km2mk/rqZY/RdyG4OW6IylfP58=; b=iLJ5yH7QAH+DKazZ23/4tK5gpBYQGQslaKtGaP+7Hl635Ik4QnqBsXX0zmnEbi+/W7Fh4ZaC2OFVtKwpnLCteQ6ayWQv6s1kdbTFODW/WwtlJFYtU/uOv5aFNmyX5CSk0AGl5OgODmEeKTqiCevISvLrxXPeVChwKE2xBwLf/iw= Received: from CY4PR09MB1495.namprd09.prod.outlook.com (10.173.191.141) by CY4PR09MB1495.namprd09.prod.outlook.com (10.173.191.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.464.11; Tue, 6 Feb 2018 14:31:25 +0000 Received: from CY4PR09MB1495.namprd09.prod.outlook.com ([fe80::c41c:a808:662c:2069]) by CY4PR09MB1495.namprd09.prod.outlook.com ([fe80::c41c:a808:662c:2069%17]) with mapi id 15.20.0464.012; Tue, 6 Feb 2018 14:31:25 +0000 From: "Waltermire, David A. (Fed)" To: IESG Secretary , IETF-Announce CC: "suit@ietf.org" Thread-Topic: [Suit] Software Updates for Internet of Things (suit) WG Virtual Meeting: 2018-02-26 Thread-Index: AQHTnpDWrfyEfqnD30mMJV4WO4lHkqOXcLGQ Date: Tue, 6 Feb 2018 14:31:25 +0000 Message-ID: References: <151784227098.5703.615595241585099998@ietfa.amsl.com> In-Reply-To: <151784227098.5703.615595241585099998@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [129.6.224.58] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR09MB1495; 7:YGN/KKNtS4STBO9JUTmqdYnGvmAtdffVIsbDw9bkpqLY3DdymoOj+ok6v1NCADjeFbQbAJ9C48Xu12LcD5qEYj1YnWMsOJlAbtCHiwL7n7ZcDdOChwIqZrOmz2ays7Zm2BeazpX48f99uyNXs/pmgWR15M9xuiUUPIQ8e3XJtgyOql+tYD4cTTHlVG+c2aUfIZk3DHZIhztg3PaS+XuUASfkVlpHjIfMIdw8fE2nGaK37/S5TTsO+9JqoCDezzzB x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 670be533-07ff-401a-2939-08d56d6e4d97 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:CY4PR09MB1495; x-ms-traffictypediagnostic: CY4PR09MB1495: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(65766998875637)(118321135141591)(94707916325470)(219752817060721)(189930954265078); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231101)(2400082)(944501161)(3002001)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:CY4PR09MB1495; BCL:0; PCL:0; RULEID:; SRVR:CY4PR09MB1495; x-forefront-prvs: 0575F81B58 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(396003)(39860400002)(346002)(39380400002)(377424004)(5423002)(497574002)(13464003)(199004)(189003)(33656002)(6506007)(316002)(551544002)(966005)(15650500001)(8936002)(2950100002)(4326008)(450100002)(26005)(6306002)(9686003)(8676002)(3660700001)(97736004)(55016002)(68736007)(81166006)(25786009)(53936002)(6436002)(66066001)(110136005)(14454004)(81156014)(5660300001)(229853002)(45080400002)(2900100001)(3280700002)(53546011)(5250100002)(305945005)(6116002)(3846002)(106356001)(59450400001)(114624004)(102836004)(186003)(6246003)(99286004)(105586002)(76176011)(7736002)(86362001)(16799955002)(74316002)(2906002)(478600001)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR09MB1495; H:CY4PR09MB1495.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: UtH2GKNwLUqeE8ickdz4/0/Tdl/mE12dSYislWSy3N/se30iRMpIpAT04Df4WisvEi8g7SzszLnQ236w6oU8UQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 670be533-07ff-401a-2939-08d56d6e4d97 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Feb 2018 14:31:25.6969 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR09MB1495 Archived-At: Subject: Re: [Suit] Software Updates for Internet of Things (suit) WG Virtual Meeting: 2018-02-26 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2018 14:31:38 -0000 The original announcement was lacking in information. Here are some additio= nal details: Software Updates for Internet of Things (SUIT) WG Virtual Interim Meeting =3D=3D[ Date/Time ]=3D=3D Monday, February 26, 2018 15:00 - 17:00 UTC =3D=3D[ Agenda ]=3D=3D - Agenda bashing, Logistics -- Chairs (5 min) - WG status -- Chairs (5 min) - Discussion of proposed work (100 min) - Wrap up and next steps -- Chairs (10 min) =3D=3D[ WebEx Information ]=3D=3D Meeting URL: https://ietf.webex.com/ietf/j.php?MTID=3Dme919888cc5564d936970= 8bb7074e6c7f Meeting number (access code): 641 661 082 Meeting password: V3CjfQeH (to join on a mobile app) JOIN BY PHONE 1-877-668-4493 Call-in toll free number (US/Canada) 1-650-479-3208 Call-in toll number (US/Canada) Global call-in numbers: https://ietf.webex.com/ietf/globalcallin.php?serviceType=3DMC&ED=3D62634847= 7&tollFree=3D1 Toll-free dialing restrictions: https://www.webex.com/pdf/tollfree_restrictions.pdf Regards, Dave Waltermire > -----Original Message----- > From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of IESG Secretary > Sent: Monday, February 05, 2018 9:51 AM > To: IETF-Announce > Cc: suit@ietf.org > Subject: [Suit] Software Updates for Internet of Things (suit) WG Virtual > Meeting: 2018-02-26 >=20 > The Software Updates for Internet of Things (suit) Working Group will hol= d a > virtual interim meeting on 2018-02-26 from 07:00 to 09:00 > America/Los_Angeles. >=20 > Agenda: > * Architecture document(s) > * Manifest format document(s) >=20 > Information about remote participation: > Webex >=20 > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://na01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ie= t > f.org%2Fmailman%2Flistinfo%2Fsuit&data=3D02%7C01%7Cdavid.waltermire%40 > nist.gov%7C8fd1e1895135484b7f6b08d56ca7f212%7C2046e5e15ac543e384f > 33cedc35a5eb2%7C1%7C0%7C636534390929435722&sdata=3Dd1OnT1T3gr%2 > B4kweN%2B8oMFvoZOWykgYV8CKVhcxDHlDc%3D&reserved=3D0 From nobody Tue Feb 6 10:30:00 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB51612D87A for ; Tue, 6 Feb 2018 10:29:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tlRSnihZyFKs for ; Tue, 6 Feb 2018 10:29:57 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1A0412D868 for ; Tue, 6 Feb 2018 10:29:57 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id B1A2B300670 for ; Tue, 6 Feb 2018 13:29:55 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id epaa6Ut5wJvo for ; Tue, 6 Feb 2018 13:29:54 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id 73CD4300481 for ; Tue, 6 Feb 2018 13:29:54 -0500 (EST) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Tue, 6 Feb 2018 13:29:55 -0500 References: <15D12BC9-EDC0-42D0-BD90-BD0881100E0A@vigilsec.com> To: suit@ietf.org In-Reply-To: <15D12BC9-EDC0-42D0-BD90-BD0881100E0A@vigilsec.com> Message-Id: <07D29E76-053A-4C5F-8DD0-2920B7F9B4FA@vigilsec.com> X-Mailer: Apple Mail (2.3273) Archived-At: Subject: [Suit] ITU-T SG17 liaison statement (SG17-LS84) on IoT secure update procedure X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2018 18:30:00 -0000 Dear SUIT WG: A liaison statement from ITU-T SG17 can be found here: = https://datatracker.ietf.org/liaison/1558/ Russ > From: "Yang, Xiaoya" > Subject: ITU-T SG17 liaison statement (SG17-LS84) on IoT secure update = procedure to IETF SUIT WG > Date: February 6, 2018 at 12:05:00 PM EST > To: "housley@vigilsec.com" , = "dthaler@microsoft.com" , = "david.waltermire@nist.gov" , = "'Scott.Mansfield@Ericsson.com'" > Cc: 'Heung Youl Youm' , "TSB SG17 Secretariat, ITU" = , ??? , = "takeshi_takahashi@nict.go.jp" >=20 > Dear Mr Housley, Mr Thaler, Mr Wlatermire and Mr. Mansfield, >=20 > Please find attached a liaison statement approved by ITU-T SG17 Q6 = Rapporteur Group Meeting (Seoul, 25-26 January 2018) on IoT secure = update procedure to IETF SUIT WG. >=20 > Best regards, >=20 > Mrs. Xiaoya YANG > Counsellor of ITU-T Study Group 17: SecurityTelecommunication = Standardization Bureau > International Telecommunication Union > Tel : +41 22 730 6206 | Mobile : +41 79 249 4882 From nobody Tue Feb 13 12:56:15 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7046A1243FE for ; Tue, 13 Feb 2018 12:56:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OECvtOwiZ1Eq for ; Tue, 13 Feb 2018 12:55:59 -0800 (PST) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0112.outbound.protection.outlook.com [23.103.200.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52E7612D93F for ; Tue, 13 Feb 2018 12:55:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Qqw0Wv9pYLWAfQVrDrnJFJ6TjzX+UgSx1kzhYqpzxyI=; b=E4x+lPIUEZJ9L8PMbDxpjwuS3XCoM8vnbYfnMdmH6fQjLuQo4PPZ2gl6txPckrz95YYyrGayqlHjVdQ/OMf28m2vVG2t0aGfdg3fLmgF95DrCIzYvCNsW/XdCghILWQeYoPhCZlOoPLuG39Kpxxhu/I3uSovFfeuuOAGkVKV2i8= Received: from CY4PR09MB1495.namprd09.prod.outlook.com (10.173.191.141) by CY4PR09MB1496.namprd09.prod.outlook.com (10.173.191.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.485.10; Tue, 13 Feb 2018 20:55:57 +0000 Received: from CY4PR09MB1495.namprd09.prod.outlook.com ([fe80::71a0:1921:3768:d45]) by CY4PR09MB1495.namprd09.prod.outlook.com ([fe80::71a0:1921:3768:d45%17]) with mapi id 15.20.0485.015; Tue, 13 Feb 2018 20:55:57 +0000 From: "Waltermire, David A. (Fed)" To: "suit@ietf.org" Thread-Topic: SUIT Virtual Meeting Reminder and Call for Presentations Thread-Index: AdOlC21nuwOOfFRkSf+g88XWd8GXTg== Date: Tue, 13 Feb 2018 20:55:57 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [129.6.223.251] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR09MB1496; 7:XDZbV3QZBSm49Cu4s4p4N6W012N7gN2UgUPuUM4UaDDUnKr2wAYRnAcpxd0PiEcvA30kKB3VVKOcnbxxgCF2uOKCvTb6h6W3ublwSyrWn28qWc4PZSl2qBqvxZNsCItq/TygxcIfhRZvnOHIf794/j2uT7ZoF0NQjKwoszJIF0O77gHebKG6S9LxQV32XVmqxl2SBP8/KhJGddADPqHOzvQW7zi9OU5ZYSwV1NsMtBycEsPUKGSHCOxM2pYSCV9q x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 27f0eb83-1c8d-467c-120d-08d573242e09 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:CY4PR09MB1496; x-ms-traffictypediagnostic: CY4PR09MB1496: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231101)(944501161)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:CY4PR09MB1496; BCL:0; PCL:0; RULEID:; SRVR:CY4PR09MB1496; x-forefront-prvs: 0582641F53 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(346002)(39860400002)(396003)(376002)(39380400002)(189003)(12213003)(199004)(9686003)(5640700003)(66066001)(14454004)(6916009)(5250100002)(2501003)(99286004)(6306002)(68736007)(966005)(86362001)(59450400001)(53936002)(5660300001)(25786009)(316002)(55016002)(6436002)(7696005)(97736004)(8936002)(1730700003)(8676002)(2351001)(3660700001)(305945005)(3280700002)(478600001)(81166006)(81156014)(7736002)(6116002)(6506007)(105586002)(2906002)(74316002)(2900100001)(102836004)(33656002)(26005)(3846002)(186003)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR09MB1496; H:CY4PR09MB1495.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: Cu6TmlyuJCtHjSQWRZtsdSKM2SIx8Fg6/XPwXtzd3TlwDblWIxaEXU5KT0HMaSQvoyb4rjywYiFR+tFSQDIn5Q== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 27f0eb83-1c8d-467c-120d-08d573242e09 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Feb 2018 20:55:57.0687 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR09MB1496 Archived-At: Subject: [Suit] SUIT Virtual Meeting Reminder and Call for Presentations X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Feb 2018 20:56:13 -0000 This is a reminder that we are having a SUIT virtual interim on Monday, Feb= ruary 26, 2018 @ 15:00 - 17:00 UTC. For agenda and WebEx details, please visit: https://datatracker.ietf.org/do= c/agenda-interim-2018-suit-01-suit-01/. Please send any requests to present to suit-chairs@ietf.org by 2/16 @ 23:59= UTC indicating the related draft(s) and time needed. Also, if given a spea= king slot please send your slides to suit-chairs@ietf.org by 2/22 @ 23:59 U= TC to preserve your presentation slot. Thank you, SUIT Chairs From nobody Sat Feb 17 08:41:51 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED16E1273E2; Sat, 17 Feb 2018 08:41:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J9VhQA5_8kZ1; Sat, 17 Feb 2018 08:41:48 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3483D120725; Sat, 17 Feb 2018 08:41:48 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1HGfinD020748; Sat, 17 Feb 2018 17:41:44 +0100 (CET) Received: from client-0231.vpn.uni-bremen.de (client-0231.vpn.uni-bremen.de [134.102.107.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zkG4R55BYzDXjJ; Sat, 17 Feb 2018 17:41:43 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 540578494.380217-01e9fc382070975ea75f97790574d60f Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Date: Sat, 17 Feb 2018 08:41:35 -0800 Message-Id: To: suit@ietf.org, teep@ietf.org, dinrg@ietf.org X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [Suit] [Lwip] Constrained Node/Network Cluster @ IETF101: DRAFT AGENDA X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Feb 2018 16:41:50 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF101. Remember that there is still quite some potential for changes. The painful ones (not necessarily fixable) this time include: DINRG vs. ACE, CBOR vs. TEEP, ROLL vs. SUIT vs. OCF/WoT; also CORE vs. ANIMA, CORE vs. QUIC. All times are BST (UTC+0100). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) MONDAY, March 19, 2018 0930-1200 Morning Session I Bleinheim ART dispatch Dispatch WG - 0930-1100 Joint = with ARTAREA Sandringham INT ipwave IP Wireless Access in Vehicular = Environments WG Palace C IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Viscount OPS v6ops IPv6 Operations WG Balmoral SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Buckingham ART *** core Constrained RESTful Environments WG Viscount INT 6man IPv6 Maintenance WG Sandringham TSV quic QUIC WG 1550-1720 Afternoon Session II Sandringham INT intarea Internet Area Working Group WG Balmoral IRTF cfrg Crypto Forum Buckingham SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Balmoral SEC tls Transport Layer Security WG Sandringham TSV tsvarea Transport Area Open Meeting TUESDAY, March 20, 2018 0930-1200 Morning Session I Viscount ART *** core Constrained RESTful Environments WG Sandringham IRTF maprg Measurement and Analysis for Protocols Buckingham OPS anima Autonomic Networking Integrated Model = and Approach WG Bleinheim SEC secdispatch Security Dispatch WG 1330-1530 Afternoon Session I Park Suite ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Buckingham IRTF panrg Path Aware Networking Proposed RG Richm_Chl_Tow RTG rift Routing In Fat Trees WG Balmoral SEC *** teep Trusted Execution Environment = Provisioning BOF 1550-1820 Afternoon Session II Balmoral ART httpbis Hypertext Transfer Protocol WG Park Suite IRTF icnrg Information-Centric Networking WEDNESDAY, March 21, 2018 0930-1200 Morning Session I Viscount INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Sandringham IRTF irtfopen IRTF Open Meeting Bleinheim SEC tls Transport Layer Security WG Park Suite TSV taps Transport Services WG 1330-1500 Afternoon Session I Viscount INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Richm_Chl_Tow RTG bier Bit Indexed Explicit Replication WG Park Suite SEC oauth Web Authorization Protocol WG Palace C TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1520-1650 Afternoon Session II Park Suite INT *** lwig Light-Weight Implementation Guidance WG Buckingham SEC acme Automated Certificate Management = Environment WG Viscount SEC tokbind Token Binding WG 1710-1940 IETF Plenary - Sandringham THURSDAY, March 22, 2018 0930-1200 Morning Session I Buckingham INT dnssd Extensions for Scalable DNS Service = Discovery WG Park Suite RTG *** roll Routing Over Low power and Lossy = networks WG Sandringham TSV quic QUIC WG 1330-1530 Afternoon Session I Buckingham INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Sandringham SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Bleinheim IRTF*** t2trg Thing-to-Thing Sandringham RTG rtgarea Routing Area Open Meeting Buckingham SEC mls Messaging Layer Security BOF Balmoral TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Bleinheim ART uta Using TLS in Applications WG Park Suite RTG babel Babel routing protocol WG Balmoral TSV tsvwg Transport Area Working Group WG FRIDAY, March 23, 2018 0930-1130 Morning Session I Richm_Chl_Tow ART ice Interactive Connectivity Establishment = WG - 0930 - 1030 Sandringham INT homenet Home Networking WG Bleinheim RTG detnet Deterministic Networking WG Viscount RTG *** roll Routing Over Low power and Lossy = networks WG Balmoral SEC *** suit Software Updates for Internet of Things = WG 1150-1320 Afternoon Session I Bleinheim RTG detnet Deterministic Networking WG 1330-1730 @ OCF meeting venue (Prague, colocated with W3C WoT) -- Joint meeting of OCF, W3C WoT, and T2TRG _______________________________________________ CBOR mailing list CBOR@ietf.org https://www.ietf.org/mailman/listinfo/cbor _______________________________________________ Lwip mailing list Lwip@ietf.org https://www.ietf.org/mailman/listinfo/lwip From nobody Thu Feb 22 11:52:46 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAC72124BE8 for ; Thu, 22 Feb 2018 11:52:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=opensourcefoundries-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g1MYhbCg0klh for ; Thu, 22 Feb 2018 11:52:42 -0800 (PST) Received: from mail-wr0-x231.google.com (mail-wr0-x231.google.com [IPv6:2a00:1450:400c:c0c::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26C41127909 for ; Thu, 22 Feb 2018 11:52:42 -0800 (PST) Received: by mail-wr0-x231.google.com with SMTP id l43so11813007wrc.2 for ; Thu, 22 Feb 2018 11:52:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opensourcefoundries-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=TXI/dmxsKl2BTQD/6jNcpB9zBJmJmPTqPZb4AG8bUEc=; b=CeVo1bMOLfR9xgPi9CzyE6cr7yGJXkl78NhXBvTzEASAvpuo1r37dmWv/lVAcqpMcE i+djQ1rwgmYM/yqn6aiwHhzSnjcyns7JujVFqndV2LuT92Jjmu6J1C0igBkNm+CTwbAb n+fJaQ+1MywvJf7rrtXWO9xT9GjBqstjf7GoKI4XqG0srmOAdhmjU8ql44msVNmDEByd xQSmKpsZ30VTxN+hH4e1D+POKDO7rLszCeE2HaA8HoAjj3bwohLSs9BliMdnfE8a/U+c jjE2yEtzyo9wpzNIHT3QOrUMiZXFpzFiyIedUGAEunswbIArbeqF+K8mIN4Y9XqI5jwO bpCQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=TXI/dmxsKl2BTQD/6jNcpB9zBJmJmPTqPZb4AG8bUEc=; b=Ba1x2SQ2zR3s9M1KSaTCE14BerDdGS1slc/avnEBoBz/8wS5K+NvNm/iMMa6OUpikm CyG17EQLlUL2cB0gwooKS+7CoIRcgCosbUHX7mqJTlfgbjA5FXx12aLn7pAfKekpCShy JArW1nexE6SktP/yokt5aug+6S81Pm5e2/g9D4UdDs7pTZzHsLUxtHD7UVWP+ES82rDn 6yj0WE4I+SDavGkVuBYXpcjx1rUuJr3PP7jHVXSE9KpQAQncc8Z8OmhPWhtykyj9Xvv8 7vrbMp5yhaVmwwfcSFB5E3RKsBw3XQY1vXNcHO4BzzQhDk+/5UAYzTCCH38MOpiG/Ugv EESw== X-Gm-Message-State: APf1xPDzTegUejJJwVPATT9BZUgTdT6TLLa1UzJlpz/HrvLIXjNfoewP KzaQwG6LO6Kw0tOjgNTP6XYS8lAwR2cHX0KGr90GaA== X-Google-Smtp-Source: AH8x224IBFDAghkMwb8Y9fwkd6gEkQ/H5CxvhUipAXoftAE68V6z8acr04Mvo576Bj8d+Dj9+LAxAJ2WqsM8qAsxIu0= X-Received: by 10.223.144.163 with SMTP id i32mr7546712wri.73.1519329160353; Thu, 22 Feb 2018 11:52:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.169.131 with HTTP; Thu, 22 Feb 2018 11:52:39 -0800 (PST) In-Reply-To: References: From: Marti Bolivar Date: Thu, 22 Feb 2018 14:52:39 -0500 Message-ID: To: Hannes Tschofenig Cc: "suit@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c06926ae683130565d262b1" Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Feb 2018 19:52:45 -0000 --94eb2c06926ae683130565d262b1 Content-Type: text/plain; charset="UTF-8" Hi, On Mon, Jan 29, 2018 at 10:02 AM, Hannes Tschofenig < Hannes.Tschofenig@arm.com> wrote: > Hi all, > > > > we just submitted updates to the manifest and the architecture documents. > Here are the two drafts: > > https://tools.ietf.org/html/draft-moran-suit-manifest-01 > > https://tools.ietf.org/html/draft-moran-suit-architecture-01 > Thanks for the notice! I have some questions and other comments about draft-moran-suit-architecture-01. I hope this is an appropriate forum for public feedback on this draft. Please let me know if not. Page 8: in "it conveys it", the first "it" refers to a person (the Author), and should use a personal pronoun (so perhaps "they convey it"; "they" is used elsewhere in the document as a gender-neutral alternative to "he" or "she"). Page 13: "We would like the following persons" should be "we would like to thank the following persons". Page 18: In 11.3.3, are there any plans for requirements that devices MUST use the manifest with the most recent Best-before timestamp in case multiple are available? Page 18: MFSR4 (Signed Payload Descriptor) is described as mitigating threat MFT5 (The target device installs the payload to the wrong location), among other threats, presumably since in 11.3.4, the location to store the payload MUST be included in the signed information (and 11.6.7 specifies that Storage Location is a Manifest Field). If that reasoning is correct, then MFSR4 should also mitigate against MFT4 (The target device misinterprets the type of payload), since in 11.3.4, it's specified that the payload format MUST be included in the signed information, and in 11.6.6, the Payload Format is listed as a Manifest Field. However, MFSR4 is not specified to mitigate MFT4. In fact, none of the security requirements are listed as a mitigation for MFT4. This seems likely to be a simple oversight, which can be fixed by adding MFT4 to the list of threats MFSR4 mitigates against. Page 21: In 11.5.1 and 11.5.2, should each "it must be possible" be replaced with "it MUST be possible"? Page 21: Would it be helpful to add additional normative text describing what happens when 11.6.4 (Manifest Field: Dependencies), and 11.6.5 (Manifest Field: Best-Before timestamp) are combined? I'm assuming the idea is that if the Best-before timestamp has expired for the top-level or any dependent manifests, suitably equipped devices MUST reject the entire update; is that right? If so, an update making that more explicit might be in order. This relates to my earlier question about whether devices MUST prefer "fresher" manifests, since a hierarchy of dependencies seems to only induce a partial order on freshness. It also seems to relate to Michael's questions regarding firmware version ordering; I'm not sure it's clear in the document if Best-before contributes to that ordering. Thanks, Marti --94eb2c06926ae683130565d262b1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi,

On Mon, Jan 29, 2018 at 10:02 AM, Hannes Tschofenig<= span>=C2=A0<Hannes.Tschofeni= g@arm.com>=C2=A0wrote:

Hi= all,

= =C2=A0

we just submit= ted updates to the manifest and the architecture documents. Here are the tw= o drafts:

https://tools.ietf.org/html/dra= ft-moran-suit-manifest-01

https://tool= s.ietf.org/html/draft-moran-suit-architecture-01


Thanks for= the notice!

I have some questions and other comments about draft-moran-suit-arch= itecture-01. I hope this is an appropriate forum for public feedback on thi= s draft. Please let me know if not.

Page 8: in "it conveys it", the fir= st "it" refers to a person (the Author), and should use a persona= l pronoun (so perhaps "they convey it"; "they" is used = elsewhere in the document as a gender-neutral alternative to "he"= or "she").

Page 13: "We would like the following persons" s= hould be "we would like to thank the following persons".

Page 18: In 11= .3.3, are there any plans for requirements that devices MUST use the manife= st with the most recent Best-before timestamp in case multiple are availabl= e?

Pag= e 18:

= MFSR4 (Signed Payload Descriptor) is described as mitigating threat MFT5 (T= he target device installs the payload to the wrong location), among other t= hreats, presumably since in 11.3.4, the location to store the payload MUST = be included in the signed information (and 11.6.7 specifies that Storage Lo= cation is a Manifest Field).

If that reasoning is correct, then MFSR4 should also= mitigate against MFT4 (The target device misinterprets the type of payload= ), since in 11.3.4, it's specified that the payload format MUST be incl= uded in the signed information, and in 11.6.6, the Payload Format is listed= as a Manifest Field.

However, MFSR4 is not specified to mitigate MFT4. In fact,= none of the security requirements are listed as a mitigation for MFT4. Thi= s seems likely to be a simple oversight, which can be fixed by adding MFT4 = to the list of threats MFSR4 mitigates against.

Page 21: In 11.5.1 and 11.5.2, sh= ould each "it must be possible" be replaced with "it MUST be= possible"?

Page 21: Would it be helpful to add additional normative text de= scribing what happens when 11.6.4 (Manifest Field: Dependencies), and 11.6.= 5 (Manifest Field: Best-Before timestamp) are combined?

I'm assuming the idea= is that if the Best-before timestamp has expired for the top-level or any = dependent manifests, suitably equipped devices MUST reject the entire updat= e; is that right? If so, an update making that more explicit might be in or= der.

T= his relates to my earlier question about whether devices MUST prefer "= fresher" manifests, since a hierarchy of dependencies seems to only in= duce a partial order on freshness. It also seems to relate to Michael's= questions regarding firmware version ordering; I'm not sure it's c= lear in the document if Best-before contributes to that ordering.

Thanks,
Marti --94eb2c06926ae683130565d262b1-- From nobody Sat Feb 24 01:05:42 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E2C54120227; Sat, 24 Feb 2018 01:05:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WaNChjbUXLfs; Sat, 24 Feb 2018 01:05:38 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50F9A1200C1; Sat, 24 Feb 2018 01:05:38 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w1O95XHU010487; Sat, 24 Feb 2018 10:05:33 +0100 (CET) Received: from client-0185.vpn.uni-bremen.de (client-0185.vpn.uni-bremen.de [134.102.107.185]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zpMcs3xrvzDXgF; Sat, 24 Feb 2018 10:05:33 +0100 (CET) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 541155931.069838-33a651eb90338a10603d5a7ee223ae9c Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\)) Message-Id: <09F7AC64-AA36-413D-B0BF-CEB1320E5DD8@tzi.org> Date: Sat, 24 Feb 2018 01:05:32 -0800 To: suit@ietf.org, teep@ietf.org, dinrg@irtf.org X-Mailer: Apple Mail (2.3445.5.20) Archived-At: Subject: [Suit] Constrained Node/Network Cluster @ IETF101: "FINAL" AGENDA X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Feb 2018 09:05:41 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF101. Remember that "FINAL" means this will be the basis for printed agenda sheets, there is still some potential for changes after that. SUIT is now on top of CORE (!??). (Also, ICE has moved.) The painful ones this time include: DINRG vs. ACE, CBOR vs. TEEP, ROLL vs. traveling to OCF/WoT; also CORE vs. ANIMA, CORE vs. QUIC, CORE vs. SECDISPATCH. All times are actually in GMT (UTC+0000, DST only starts in London on March 25). (You can always get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) MONDAY, March 19, 2018 0930-1200 Morning Session I Blenheim ART dispatch Dispatch WG - 0930-1100 Joint = with ARTAREA Sandringham INT ipwave IP Wireless Access in Vehicular = Environments WG Palace C IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Viscount OPS v6ops IPv6 Operations WG Balmoral SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Richm_Chl_Tow ART *** core Constrained RESTful Environments WG Viscount INT 6man IPv6 Maintenance WG Buckingham SEC *** suit Software Updates for Internet of Things = WG Sandringham TSV quic QUIC WG 1550-1720 Afternoon Session II Sandringham INT intarea Internet Area Working Group WG Balmoral IRTF cfrg Crypto Forum Viscount SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Balmoral SEC tls Transport Layer Security WG Sandringham TSV tsvarea Transport Area Open Meeting TUESDAY, March 20, 2018 0930-1200 Morning Session I Viscount ART *** core Constrained RESTful Environments WG Sandringham IRTF maprg Measurement and Analysis for Protocols Buckingham OPS anima Autonomic Networking Integrated Model = and Approach WG Blenheim SEC secdispatch Security Dispatch WG 1330-1530 Afternoon Session I Park Suite ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Palace C ART ice Interactive Connectivity Establishment = WG Buckingham IRTF panrg Path Aware Networking Proposed RG Richm_Chl_Tow RTG rift Routing In Fat Trees WG Balmoral SEC *** teep Trusted Execution Environment = Provisioning BOF 1550-1820 Afternoon Session II Balmoral ART httpbis Hypertext Transfer Protocol WG Park Suite IRTF icnrg Information-Centric Networking WEDNESDAY, March 21, 2018 0930-1200 Morning Session I Viscount INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Sandringham IRTF irtfopen IRTF Open Meeting Blenheim SEC tls Transport Layer Security WG Park Suite TSV taps Transport Services WG 1330-1500 Afternoon Session I Viscount INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Richm_Chl_Tow RTG bier Bit Indexed Explicit Replication WG Park Suite SEC oauth Web Authorization Protocol WG Palace C TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1520-1650 Afternoon Session II Park Suite INT *** lwig Light-Weight Implementation Guidance WG Buckingham SEC acme Automated Certificate Management = Environment WG Viscount SEC tokbind Token Binding WG 1710-1940 IETF Plenary - Sandringham THURSDAY, March 22, 2018 0930-1200 Morning Session I Buckingham INT dnssd Extensions for Scalable DNS Service = Discovery WG Park Suite RTG *** roll Routing Over Low power and Lossy = networks WG Sandringham TSV quic QUIC WG 1330-1530 Afternoon Session I Buckingham INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Sandringham SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Blenheim IRTF*** t2trg Thing-to-Thing Sandringham RTG rtgarea Routing Area Open Meeting Buckingham SEC mls Messaging Layer Security BOF Balmoral TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Blenheim ART uta Using TLS in Applications WG Park Suite RTG babel Babel routing protocol WG Balmoral TSV tsvwg Transport Area Working Group WG FRIDAY, March 23, 2018 0930-1130 Morning Session I Sandringham INT homenet Home Networking WG Blenheim RTG detnet Deterministic Networking WG Viscount RTG *** roll Routing Over Low power and Lossy = networks WG 1150-1320 Afternoon Session I Blenheim RTG detnet Deterministic Networking WG - 1150 - = 1430 1330-1730 @ OCF meeting venue (Prague, colocated with W3C WoT) -- Joint meeting of OCF, W3C WoT, and T2TRG (UTC+01:00 times) _______________________________________________ T2TRG mailing list T2TRG@irtf.org https://www.irtf.org/mailman/listinfo/t2trg From nobody Mon Feb 26 04:36:43 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70F9C124234 for ; Mon, 26 Feb 2018 04:36:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m2Of0hnwoj4t for ; Mon, 26 Feb 2018 04:36:39 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02on0612.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe05::612]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21C2D12D77C for ; Mon, 26 Feb 2018 04:36:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=gBUycQvTcP57Kd3Y5r2cVnOGqNFfu8ijUxyyEXCJKSY=; b=rj1qVVgjZz0cR5ZNr2dt73RPp5yZisb5BmQOUr27bxYsm1t3LazOsFpowKBP7PepASyJYAMZhDGgwY8MC0Bp2nkBZBzgTXZXR8jH8OhfoOle3x+ySydQ8juMyJYQQ3HGvDLAs3KOHmbZ7Jea8KTxPUFgoa9ra2367Bd5u5Ij1+w= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1476.eurprd08.prod.outlook.com (10.168.5.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Mon, 26 Feb 2018 12:36:35 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Mon, 26 Feb 2018 12:36:35 +0000 From: Hannes Tschofenig To: Marti Bolivar CC: "suit@ietf.org" Thread-Topic: [Suit] Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQTBOpuAALloiiA= Date: Mon, 26 Feb 2018 12:36:35 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1476; 7:IKTDyBuv6UuuFVbxG2OPFKTHYyRSFYMrTxYiuWeCtdSU83JqnZbrmmQ2xHA/vuIw7T25KAecRlTh9qJfQG7xWLxwcao099D+T/ljnneyHD87dj+LWIUx2+YolKeJ1y/wWmGiYayHC0a7Us5tHFHFoPuzaFMnr8KHYzOhTkvFE5i3vuSvMtd9RAyztc61bsp7w3qnYZcOUbedizOlVNy+guPd5gLZv6FwxEGFWzuIduZ+/mdNETTyWJKCiQqhRb8z x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 7aabcadc-ac8a-4753-a22b-08d57d159317 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1476; x-ms-traffictypediagnostic: AM4PR0801MB1476: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231220)(944501161)(52105095)(3002001)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:AM4PR0801MB1476; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1476; x-forefront-prvs: 05954A7C45 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(366004)(376002)(396003)(39860400002)(39380400002)(199004)(189003)(40434004)(53754006)(51914003)(966005)(4326008)(14454004)(72206003)(5660300001)(6116002)(790700001)(316002)(478600001)(59450400001)(6506007)(26005)(25786009)(7736002)(74316002)(53546011)(186003)(102836004)(236005)(606006)(7696005)(54896002)(6246003)(55016002)(6306002)(9686003)(53936002)(10710500007)(2906002)(2420400007)(76176011)(7110500001)(68736007)(97736004)(3660700001)(6436002)(3280700002)(3846002)(66066001)(33656002)(106356001)(105586002)(15650500001)(8676002)(81156014)(81166006)(99286004)(2900100001)(8936002)(9326002)(5890100001)(5250100002)(2950100002)(6916009)(86362001)(229853002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1476; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: bJa6uTxp81GoOhEWBslQjWN+aHJ0wqSsrOlYFuPENpdoZp7opecXbdUm5tArqed5rNzq4Mutgrer8eXfMZiQmVy1GhiyONzhQz750oX8cPxZ7HADq8BYwKHmYBJ3JzGD0/KaPaDpmg6WtKRRf0VDTYLh/Ly7Qm3tGZt03ytZSPo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706EAEE3D1695FB1443285CFAC10AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7aabcadc-ac8a-4753-a22b-08d57d159317 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Feb 2018 12:36:35.7596 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1476 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Feb 2018 12:36:42 -0000 --_000_AM4PR0801MB2706EAEE3D1695FB1443285CFAC10AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWFydGksDQoNClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLg0KDQpBIGZldyByZW1hcmtzIGJl bG93Og0KDQpGcm9tOiBNYXJ0aSBCb2xpdmFyIFttYWlsdG86bWFydGlAb3BlbnNvdXJjZWZvdW5k cmllcy5jb21dDQpTZW50OiAyMiBGZWJydWFyeSAyMDE4IDIwOjUzDQpUbzogSGFubmVzIFRzY2hv ZmVuaWcNCkNjOiBzdWl0QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW1N1aXRdIE1hbmlmZXN0IGFu ZCBhcmNoaXRlY3R1cmUgZHJhZnRzIHVwZGF0ZWQNCg0KSGksDQoNCk9uIE1vbiwgSmFuIDI5LCAy MDE4IGF0IDEwOjAyIEFNLCBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KSGkgYWxsLA0K DQp3ZSBqdXN0IHN1Ym1pdHRlZCB1cGRhdGVzIHRvIHRoZSBtYW5pZmVzdCBhbmQgdGhlIGFyY2hp dGVjdHVyZSBkb2N1bWVudHMuIEhlcmUgYXJlIHRoZSB0d28gZHJhZnRzOg0KaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QtMDENCmh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1tb3Jhbi1zdWl0LWFyY2hpdGVjdHVyZS0wMQ0KDQpUaGFu a3MgZm9yIHRoZSBub3RpY2UhDQoNCkkgaGF2ZSBzb21lIHF1ZXN0aW9ucyBhbmQgb3RoZXIgY29t bWVudHMgYWJvdXQgZHJhZnQtbW9yYW4tc3VpdC1hcmNoaXRlY3R1cmUtMDEuIEkgaG9wZSB0aGlz IGlzIGFuIGFwcHJvcHJpYXRlIGZvcnVtIGZvciBwdWJsaWMgZmVlZGJhY2sgb24gdGhpcyBkcmFm dC4gUGxlYXNlIGxldCBtZSBrbm93IGlmIG5vdC4NCg0KUGFnZSA4OiBpbiAiaXQgY29udmV5cyBp dCIsIHRoZSBmaXJzdCAiaXQiIHJlZmVycyB0byBhIHBlcnNvbiAodGhlIEF1dGhvciksIGFuZCBz aG91bGQgdXNlIGEgcGVyc29uYWwgcHJvbm91biAoc28gcGVyaGFwcyAidGhleSBjb252ZXkgaXQi OyAidGhleSIgaXMgdXNlZCBlbHNld2hlcmUgaW4gdGhlIGRvY3VtZW50IGFzIGEgZ2VuZGVyLW5l dXRyYWwgYWx0ZXJuYXRpdmUgdG8gImhlIiBvciAic2hlIikuDQoNClRoYW5rcy4gV2lsbCB1cGRh dGUgdGhlIHRleHQuDQoNClBhZ2UgMTM6ICJXZSB3b3VsZCBsaWtlIHRoZSBmb2xsb3dpbmcgcGVy c29ucyIgc2hvdWxkIGJlICJ3ZSB3b3VsZCBsaWtlIHRvIHRoYW5rIHRoZSBmb2xsb3dpbmcgcGVy c29ucyIuDQoNCldpbGwgZml4IGl0Lg0KDQpQYWdlIDE4OiBJbiAxMS4zLjMsIGFyZSB0aGVyZSBh bnkgcGxhbnMgZm9yIHJlcXVpcmVtZW50cyB0aGF0IGRldmljZXMgTVVTVCB1c2UgdGhlIG1hbmlm ZXN0IHdpdGggdGhlIG1vc3QgcmVjZW50IEJlc3QtYmVmb3JlIHRpbWVzdGFtcCBpbiBjYXNlIG11 bHRpcGxlIGFyZSBhdmFpbGFibGU/DQoNCldlIGhhdmVu4oCZdCBkaXNjdXNzZWQgdGhlIG1hbmRh dG9yeS10by1pbXBsZW1lbnQgb3IgdGhlIG1hbmRhdG9yeS10by11c2UgZmVhdHVyZXMgaW4gdGhl IGdyb3VwIHlldCBidXQgaXQgaXMgd29ydGh3aGlsZSB0byBicmluZyB0aGlzIHRvcGljIHVwIGlu IHRoZSBjb25mZXJlbmNlIGNhbGwgdG9kYXkuDQoNClBhZ2UgMTg6DQoNCk1GU1I0IChTaWduZWQg UGF5bG9hZCBEZXNjcmlwdG9yKSBpcyBkZXNjcmliZWQgYXMgbWl0aWdhdGluZyB0aHJlYXQgTUZU NSAoVGhlIHRhcmdldCBkZXZpY2UgaW5zdGFsbHMgdGhlIHBheWxvYWQgdG8gdGhlIHdyb25nIGxv Y2F0aW9uKSwgYW1vbmcgb3RoZXIgdGhyZWF0cywgcHJlc3VtYWJseSBzaW5jZSBpbiAxMS4zLjQs IHRoZSBsb2NhdGlvbiB0byBzdG9yZSB0aGUgcGF5bG9hZCBNVVNUIGJlIGluY2x1ZGVkIGluIHRo ZSBzaWduZWQgaW5mb3JtYXRpb24gKGFuZCAxMS42Ljcgc3BlY2lmaWVzIHRoYXQgU3RvcmFnZSBM b2NhdGlvbiBpcyBhIE1hbmlmZXN0IEZpZWxkKS4NCg0KWWVzOyBtYXliZSB3ZSBzaG91bGQgbWFr ZSB0aGlzIGV4cGxpY2l0Lg0KDQpJZiB0aGF0IHJlYXNvbmluZyBpcyBjb3JyZWN0LCB0aGVuIE1G U1I0IHNob3VsZCBhbHNvIG1pdGlnYXRlIGFnYWluc3QgTUZUNCAoVGhlIHRhcmdldCBkZXZpY2Ug bWlzaW50ZXJwcmV0cyB0aGUgdHlwZSBvZiBwYXlsb2FkKSwgc2luY2UgaW4gMTEuMy40LCBpdCdz IHNwZWNpZmllZCB0aGF0IHRoZSBwYXlsb2FkIGZvcm1hdCBNVVNUIGJlIGluY2x1ZGVkIGluIHRo ZSBzaWduZWQgaW5mb3JtYXRpb24sIGFuZCBpbiAxMS42LjYsIHRoZSBQYXlsb2FkIEZvcm1hdCBp cyBsaXN0ZWQgYXMgYSBNYW5pZmVzdCBGaWVsZC4NCg0KVHJ1ZS4NCg0KSG93ZXZlciwgTUZTUjQg aXMgbm90IHNwZWNpZmllZCB0byBtaXRpZ2F0ZSBNRlQ0LiBJbiBmYWN0LCBub25lIG9mIHRoZSBz ZWN1cml0eSByZXF1aXJlbWVudHMgYXJlIGxpc3RlZCBhcyBhIG1pdGlnYXRpb24gZm9yIE1GVDQu IFRoaXMgc2VlbXMgbGlrZWx5IHRvIGJlIGEgc2ltcGxlIG92ZXJzaWdodCwgd2hpY2ggY2FuIGJl IGZpeGVkIGJ5IGFkZGluZyBNRlQ0IHRvIHRoZSBsaXN0IG9mIHRocmVhdHMgTUZTUjQgbWl0aWdh dGVzIGFnYWluc3QuDQoNCkdvb2QgY2F0Y2guIFdlIGhhdmUgdG8gZml4IHRoaXMuDQoNCg0KUGFn ZSAyMTogSW4gMTEuNS4xIGFuZCAxMS41LjIsIHNob3VsZCBlYWNoICJpdCBtdXN0IGJlIHBvc3Np YmxlIiBiZSByZXBsYWNlZCB3aXRoICJpdCBNVVNUIGJlIHBvc3NpYmxlIj8NCg0KSXQgcmVhbGx5 IGRlcGVuZHMgb24gaG93IHlvdSB1c2UgUkZDIDIxMTkgbGFuZ3VhZ2UuIEl0IHdhcyBvcmlnaW5h bGx5IHNwZWNpZmllZCBhcyBub3JtYXRpdmUgbGFuZ3VhZ2UgZm9yIHNwZWNpZmljYXRpb25zIGJ1 dCBoZXJlIGl0IG9ubHkgcmVmZXJzIHRvIHJlcXVpcmVtZW50cy4gV2UgY291bGQsIGhvd2V2ZXIs IHVzZSBjYXBpdGFsaXplZCBNVVNUL1NIT1VMRC9NQVlzLg0KDQpQYWdlIDIxOiBXb3VsZCBpdCBi ZSBoZWxwZnVsIHRvIGFkZCBhZGRpdGlvbmFsIG5vcm1hdGl2ZSB0ZXh0IGRlc2NyaWJpbmcgd2hh dCBoYXBwZW5zIHdoZW4gMTEuNi40IChNYW5pZmVzdCBGaWVsZDogRGVwZW5kZW5jaWVzKSwgYW5k IDExLjYuNSAoTWFuaWZlc3QgRmllbGQ6IEJlc3QtQmVmb3JlIHRpbWVzdGFtcCkgYXJlIGNvbWJp bmVkPw0KDQpJJ20gYXNzdW1pbmcgdGhlIGlkZWEgaXMgdGhhdCBpZiB0aGUgQmVzdC1iZWZvcmUg dGltZXN0YW1wIGhhcyBleHBpcmVkIGZvciB0aGUgdG9wLWxldmVsIG9yIGFueSBkZXBlbmRlbnQg bWFuaWZlc3RzLCBzdWl0YWJseSBlcXVpcHBlZCBkZXZpY2VzIE1VU1QgcmVqZWN0IHRoZSBlbnRp cmUgdXBkYXRlOyBpcyB0aGF0IHJpZ2h0PyBJZiBzbywgYW4gdXBkYXRlIG1ha2luZyB0aGF0IG1v cmUgZXhwbGljaXQgbWlnaHQgYmUgaW4gb3JkZXIuDQoNClRoaXMgcmVsYXRlcyB0byBteSBlYXJs aWVyIHF1ZXN0aW9uIGFib3V0IHdoZXRoZXIgZGV2aWNlcyBNVVNUIHByZWZlciAiZnJlc2hlciIg bWFuaWZlc3RzLCBzaW5jZSBhIGhpZXJhcmNoeSBvZiBkZXBlbmRlbmNpZXMgc2VlbXMgdG8gb25s eSBpbmR1Y2UgYSBwYXJ0aWFsIG9yZGVyIG9uIGZyZXNobmVzcy4gSXQgYWxzbyBzZWVtcyB0byBy ZWxhdGUgdG8gTWljaGFlbCdzIHF1ZXN0aW9ucyByZWdhcmRpbmcgZmlybXdhcmUgdmVyc2lvbiBv cmRlcmluZzsgSSdtIG5vdCBzdXJlIGl0J3MgY2xlYXIgaW4gdGhlIGRvY3VtZW50IGlmIEJlc3Qt YmVmb3JlIGNvbnRyaWJ1dGVzIHRvIHRoYXQgb3JkZXJpbmcuDQoNCldlIGNsZWFybHkgaGF2ZW7i gJl0IHByb3ZpZGVkIGVub3VnaCB0ZXh0IGluIHRoZSBkb2N1bWVudCB5ZXQuIFRoZSBCZXN0LWJl Zm9yZSBjb25kaXRpb24gZXhwcmVzc2VzIHRoYXQgYW4gdXBkYXRlIG11c3Qgbm90IGJlIGFwcGxp ZWQgYWZ0ZXIgdGhlIGluZGljYXRlZCB0aW1lLiBJZiB0aGUgbWFuaWZlc3QgY29udGFpbnMgZGVw ZW5kZW5jaWVzIHRoZW4gYWxzbyB0aG9zZSB3b3VsZCBub3QgYmUgYXBwbGllZCBlaXRoZXIuIEF0 IGxlYXN0IHRoYXTigJlzIGhvdyBJIHRoaW5rIGl0IHNob3VsZCB3b3JrIGJ1dCB1bHRpbWF0ZWx5 IGl0IGlzIHRoZSBkZWNpc2lvbiBvZiB0aGUgZ3JvdXAgdG8gZGVjaWRlIGhvdyB0aGUgZnVuY3Rp b25hbGl0eSBoYXMgdG8gd29yay4NCg0KQ2lhbw0KSGFubmVzDQoNClRoYW5rcywNCk1hcnRpDQpJ TVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFj aG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRl ciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3Ro ZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBp bmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_AM4PR0801MB2706EAEE3D1695FB1443285CFAC10AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhpIE1hcnRpLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHRo ZSBmZWVkYmFjay4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QSBmZXcgcmVtYXJrcyBiZWxvdzoNCjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9z ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBNYXJ0aSBCb2xpdmFyIFttYWlsdG86bWFy dGlAb3BlbnNvdXJjZWZvdW5kcmllcy5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gMjIgRmVicnVh cnkgMjAxOCAyMDo1Mzxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWc8YnI+DQo8Yj5D Yzo8L2I+IHN1aXRAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtTdWl0XSBNYW5p ZmVzdCBhbmQgYXJjaGl0ZWN0dXJlIGRyYWZ0cyB1cGRhdGVkPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtB cmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMyMjIyMjI7YmFja2dyb3Vu ZDp3aGl0ZSI+SGksPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMyMjIyMjIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMjIyMjIyIj5P biBNb24sIEphbiAyOSwgMjAxOCBhdCAxMDowMiBBTSwgSGFubmVzIFRzY2hvZmVuaWcmbmJzcDsm bHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iIHRhcmdldD0iX2Js YW5rIj48c3BhbiBzdHlsZT0iY29sb3I6IzExNTVDQyI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNv bTwvc3Bhbj48L2E+Jmd0OyZuYnNwO3dyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjIyMjIi PkhpIGFsbCw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzIyMjIyMiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjIyMjIiPndlIGp1c3Qgc3Vi bWl0dGVkIHVwZGF0ZXMgdG8gdGhlIG1hbmlmZXN0IGFuZCB0aGUgYXJjaGl0ZWN0dXJlIGRvY3Vt ZW50cy4gSGVyZSBhcmUgdGhlIHR3byBkcmFmdHM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMyMjIyMjIiPjxhIGhyZWY9Imh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LTAxIiB0 YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxMTU1Q0MiPmh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LTAxPC9zcGFuPjwvYT48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzIyMjIyMiI+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1v cmFuLXN1aXQtYXJjaGl0ZWN0dXJlLTAxIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNv bG9yOiMxMTU1Q0MiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1tb3Jhbi1zdWl0 LWFyY2hpdGVjdHVyZS0wMTwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyBm b3IgdGhlIG5vdGljZSE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+SSBoYXZlIHNvbWUgcXVlc3Rpb25zIGFuZCBvdGhlciBjb21tZW50cyBhYm91 dCBkcmFmdC1tb3Jhbi1zdWl0LWFyY2hpdGVjdHVyZS0wMS4gSSBob3BlIHRoaXMgaXMgYW4gYXBw cm9wcmlhdGUgZm9ydW0gZm9yIHB1YmxpYyBmZWVkYmFjayBvbiB0aGlzIGRyYWZ0LiBQbGVhc2Ug bGV0IG1lIGtub3cgaWYgbm90LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5QYWdlIDg6IGluICZxdW90O2l0IGNvbnZleXMgaXQmcXVvdDssIHRo ZSBmaXJzdCAmcXVvdDtpdCZxdW90OyByZWZlcnMgdG8gYSBwZXJzb24gKHRoZSBBdXRob3IpLCBh bmQgc2hvdWxkIHVzZSBhIHBlcnNvbmFsIHByb25vdW4gKHNvIHBlcmhhcHMgJnF1b3Q7dGhleSBj b252ZXkgaXQmcXVvdDs7ICZxdW90O3RoZXkmcXVvdDsgaXMgdXNlZCBlbHNld2hlcmUgaW4gdGhl IGRvY3VtZW50IGFzIGEgZ2VuZGVyLW5ldXRyYWwgYWx0ZXJuYXRpdmUgdG8gJnF1b3Q7aGUmcXVv dDsgb3IgJnF1b3Q7c2hlJnF1b3Q7KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmtzLiBXaWxsIHVwZGF0ZSB0aGUgdGV4dC4N CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5QYWdlIDEzOiAmcXVvdDtX ZSB3b3VsZCBsaWtlIHRoZSBmb2xsb3dpbmcgcGVyc29ucyZxdW90OyBzaG91bGQgYmUgJnF1b3Q7 d2Ugd291bGQgbGlrZSB0byB0aGFuayB0aGUgZm9sbG93aW5nIHBlcnNvbnMmcXVvdDsuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldp bGwgZml4IGl0Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlBhZ2Ug MTg6IEluIDExLjMuMywgYXJlIHRoZXJlIGFueSBwbGFucyBmb3IgcmVxdWlyZW1lbnRzIHRoYXQg ZGV2aWNlcyBNVVNUIHVzZSB0aGUgbWFuaWZlc3Qgd2l0aCB0aGUgbW9zdCByZWNlbnQgQmVzdC1i ZWZvcmUgdGltZXN0YW1wIGluIGNhc2UgbXVsdGlwbGUgYXJlIGF2YWlsYWJsZT88bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+V2UgaGF2 ZW7igJl0IGRpc2N1c3NlZCB0aGUgbWFuZGF0b3J5LXRvLWltcGxlbWVudCBvciB0aGUgbWFuZGF0 b3J5LXRvLXVzZSBmZWF0dXJlcyBpbiB0aGUgZ3JvdXAgeWV0IGJ1dCBpdCBpcyB3b3J0aHdoaWxl IHRvIGJyaW5nIHRoaXMgdG9waWMgdXAgaW4gdGhlIGNvbmZlcmVuY2UNCiBjYWxsIHRvZGF5LiA8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGFnZSAxODo8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TUZTUjQgKFNpZ25l ZCBQYXlsb2FkIERlc2NyaXB0b3IpIGlzIGRlc2NyaWJlZCBhcyBtaXRpZ2F0aW5nIHRocmVhdCBN RlQ1IChUaGUgdGFyZ2V0IGRldmljZSBpbnN0YWxscyB0aGUgcGF5bG9hZCB0byB0aGUgd3Jvbmcg bG9jYXRpb24pLCBhbW9uZyBvdGhlciB0aHJlYXRzLCBwcmVzdW1hYmx5IHNpbmNlIGluIDExLjMu NCwgdGhlIGxvY2F0aW9uIHRvIHN0b3JlIHRoZSBwYXlsb2FkIE1VU1QgYmUgaW5jbHVkZWQNCiBp biB0aGUgc2lnbmVkIGluZm9ybWF0aW9uIChhbmQgMTEuNi43IHNwZWNpZmllcyB0aGF0IFN0b3Jh Z2UgTG9jYXRpb24gaXMgYSBNYW5pZmVzdCBGaWVsZCkuPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlllczsgbWF5YmUgd2Ugc2hvdWxk IG1ha2UgdGhpcyBleHBsaWNpdC4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SWYgdGhhdCByZWFzb25pbmcgaXMgY29ycmVjdCwg dGhlbiBNRlNSNCBzaG91bGQgYWxzbyBtaXRpZ2F0ZSBhZ2FpbnN0IE1GVDQgKFRoZSB0YXJnZXQg ZGV2aWNlIG1pc2ludGVycHJldHMgdGhlIHR5cGUgb2YgcGF5bG9hZCksIHNpbmNlIGluIDExLjMu NCwgaXQncyBzcGVjaWZpZWQgdGhhdCB0aGUgcGF5bG9hZCBmb3JtYXQgTVVTVCBiZSBpbmNsdWRl ZCBpbiB0aGUgc2lnbmVkIGluZm9ybWF0aW9uLCBhbmQgaW4NCiAxMS42LjYsIHRoZSBQYXlsb2Fk IEZvcm1hdCBpcyBsaXN0ZWQgYXMgYSBNYW5pZmVzdCBGaWVsZC48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VHJ1ZS4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Ib3dldmVyLCBNRlNSNCBpcyBub3Qgc3Bl Y2lmaWVkIHRvIG1pdGlnYXRlIE1GVDQuIEluIGZhY3QsIG5vbmUgb2YgdGhlIHNlY3VyaXR5IHJl cXVpcmVtZW50cyBhcmUgbGlzdGVkIGFzIGEgbWl0aWdhdGlvbiBmb3IgTUZUNC4gVGhpcyBzZWVt cyBsaWtlbHkgdG8gYmUgYSBzaW1wbGUgb3ZlcnNpZ2h0LCB3aGljaCBjYW4gYmUgZml4ZWQgYnkg YWRkaW5nIE1GVDQgdG8gdGhlIGxpc3Qgb2YgdGhyZWF0cyBNRlNSNA0KIG1pdGlnYXRlcyBhZ2Fp bnN0LjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5Hb29kIGNhdGNoLiBXZSBoYXZlIHRvIGZpeCB0aGlzLg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+UGFnZSAyMTogSW4gMTEuNS4xIGFuZCAxMS41LjIs IHNob3VsZCBlYWNoICZxdW90O2l0IG11c3QgYmUgcG9zc2libGUmcXVvdDsgYmUgcmVwbGFjZWQg d2l0aCAmcXVvdDtpdCBNVVNUIGJlIHBvc3NpYmxlJnF1b3Q7PzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JdCByZWFsbHkgZGVwZW5k cyBvbiBob3cgeW91IHVzZSBSRkMgMjExOSBsYW5ndWFnZS4gSXQgd2FzIG9yaWdpbmFsbHkgc3Bl Y2lmaWVkIGFzIG5vcm1hdGl2ZSBsYW5ndWFnZSBmb3Igc3BlY2lmaWNhdGlvbnMgYnV0IGhlcmUg aXQgb25seSByZWZlcnMgdG8gcmVxdWlyZW1lbnRzLg0KIFdlIGNvdWxkLCBob3dldmVyLCB1c2Ug Y2FwaXRhbGl6ZWQgTVVTVC9TSE9VTEQvTUFZcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+UGFnZSAyMTogV291bGQgaXQgYmUgaGVscGZ1bCB0byBhZGQgYWRkaXRpb25h bCBub3JtYXRpdmUgdGV4dCBkZXNjcmliaW5nIHdoYXQgaGFwcGVucyB3aGVuIDExLjYuNCAoTWFu aWZlc3QgRmllbGQ6IERlcGVuZGVuY2llcyksIGFuZCAxMS42LjUgKE1hbmlmZXN0IEZpZWxkOiBC ZXN0LUJlZm9yZSB0aW1lc3RhbXApIGFyZSBjb21iaW5lZD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSdtIGFzc3VtaW5nIHRoZSBpZGVhIGlz IHRoYXQgaWYgdGhlIEJlc3QtYmVmb3JlIHRpbWVzdGFtcCBoYXMgZXhwaXJlZCBmb3IgdGhlIHRv cC1sZXZlbCBvciBhbnkgZGVwZW5kZW50IG1hbmlmZXN0cywgc3VpdGFibHkgZXF1aXBwZWQgZGV2 aWNlcyBNVVNUIHJlamVjdCB0aGUgZW50aXJlIHVwZGF0ZTsgaXMgdGhhdCByaWdodD8gSWYgc28s IGFuIHVwZGF0ZSBtYWtpbmcgdGhhdCBtb3JlIGV4cGxpY2l0IG1pZ2h0DQogYmUgaW4gb3JkZXIu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo aXMgcmVsYXRlcyB0byBteSBlYXJsaWVyIHF1ZXN0aW9uIGFib3V0IHdoZXRoZXIgZGV2aWNlcyBN VVNUIHByZWZlciAmcXVvdDtmcmVzaGVyJnF1b3Q7IG1hbmlmZXN0cywgc2luY2UgYSBoaWVyYXJj aHkgb2YgZGVwZW5kZW5jaWVzIHNlZW1zIHRvIG9ubHkgaW5kdWNlIGEgcGFydGlhbCBvcmRlciBv biBmcmVzaG5lc3MuIEl0IGFsc28gc2VlbXMgdG8gcmVsYXRlIHRvIE1pY2hhZWwncyBxdWVzdGlv bnMgcmVnYXJkaW5nIGZpcm13YXJlDQogdmVyc2lvbiBvcmRlcmluZzsgSSdtIG5vdCBzdXJlIGl0 J3MgY2xlYXIgaW4gdGhlIGRvY3VtZW50IGlmIEJlc3QtYmVmb3JlIGNvbnRyaWJ1dGVzIHRvIHRo YXQgb3JkZXJpbmcuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldlIGNsZWFybHkgaGF2ZW7igJl0IHByb3Zp ZGVkIGVub3VnaCB0ZXh0IGluIHRoZSBkb2N1bWVudCB5ZXQuIFRoZSBCZXN0LWJlZm9yZSBjb25k aXRpb24gZXhwcmVzc2VzIHRoYXQgYW4gdXBkYXRlIG11c3Qgbm90IGJlIGFwcGxpZWQgYWZ0ZXIg dGhlIGluZGljYXRlZCB0aW1lLg0KIElmIHRoZSBtYW5pZmVzdCBjb250YWlucyBkZXBlbmRlbmNp ZXMgdGhlbiBhbHNvIHRob3NlIHdvdWxkIG5vdCBiZSBhcHBsaWVkIGVpdGhlci4gQXQgbGVhc3Qg dGhhdOKAmXMgaG93IEkgdGhpbmsgaXQgc2hvdWxkIHdvcmsgYnV0IHVsdGltYXRlbHkgaXQgaXMg dGhlIGRlY2lzaW9uIG9mIHRoZSBncm91cCB0byBkZWNpZGUgaG93IHRoZSBmdW5jdGlvbmFsaXR5 IGhhcyB0byB3b3JrLiAmbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkNpYW88YnI+DQpIYW5uZXM8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWFydGk8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2Ug dGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us DQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM4PR0801MB2706EAEE3D1695FB1443285CFAC10AM4PR0801MB2706_-- From nobody Tue Feb 27 02:01:18 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BC9C127863 for ; Tue, 27 Feb 2018 02:01:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z16P3fM8m5F2 for ; Tue, 27 Feb 2018 02:01:11 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0084.outbound.protection.outlook.com [104.47.0.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDD88126BF6 for ; Tue, 27 Feb 2018 02:01:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XozzdXJSNUVDdrNvo0lCMHbOFhZlpq4agDnI+gccafA=; b=qgHa2UuwOD2BAE4sUVjmgyIXtafMxgIBLlhipkx3zFFtYuexsXMBobvDbSFmnZ/71V/GGaQhs2Lck0pLxOPrzFTc0tS5xsOcR08kxs8AQbY7Y4QUnNyBiCeqL/HppvSbqSRSwhuyf2H+iEaUlgRfzFgdeUJopQzDd46ba6YLGcM= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1586.eurprd08.prod.outlook.com (10.168.6.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Tue, 27 Feb 2018 10:01:07 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Tue, 27 Feb 2018 10:01:07 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: Terminology - LwM2M and ITU-T Thread-Index: AdOvsaqaZBkdeE2PS8+RX/t0ShSOEQ== Date: Tue, 27 Feb 2018 10:01:06 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1586; 7:nXEoue/OSz8g2054Tp+FS1OSf78rPPmNTMSd088Qz0kPE5LqNmQZCEflED0OIrrksqq1sxDXIjVeaG8ij8eEBcIvxya+S59tHSNrAosSfNvVyDfb10QCHLTnA1J5O9JrLz8NDiZKE3DNYcUsSCkAoUzZzWBDWpuc4rT2h4sYVM5URRQsWeKKMe4OdMdmIJ/VPEY5XfiJQR2qhKwxYmjO+Fik2Gep3+L0jIuoE5pKwt7tNG6I7nx1icTOye1frHlO x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: fc80f20a-109b-4769-765e-08d57dc90516 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1586; x-ms-traffictypediagnostic: AM4PR0801MB1586: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(158342451672863)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(3231220)(944501198)(52105095)(93006095)(93001095)(10201501046)(6055026)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB1586; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1586; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39860400002)(396003)(376002)(39380400002)(346002)(40434004)(53754006)(189003)(199004)(86362001)(25786009)(9686003)(2900100001)(53936002)(5640700003)(54896002)(55016002)(6306002)(236005)(97736004)(6436002)(99286004)(33656002)(105586002)(7696005)(59450400001)(6506007)(102836004)(26005)(316002)(186003)(606006)(5890100001)(5250100002)(5630700001)(2501003)(3660700001)(6116002)(3846002)(3280700002)(106356001)(2351001)(790700001)(72206003)(6916009)(966005)(478600001)(7736002)(74316002)(14454004)(68736007)(2906002)(5660300001)(66066001)(81156014)(8936002)(81166006)(1730700003)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1586; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 6eLL+jvDj/lzxM2eaOUGOqLMDSKrvcx9MJhJa6fIoELChFQ6uy7Es8d7Z3Nflx1cwsH7z3G6zhPfSWe/iyketquRKcaiNlJc6evsKczzbso7lrGkiHb40de7+bqgvGyG6mBFwDqn1rLwDdwc2h1MXpR2M0xp7MioReoeVY/sz78= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB270624FA3112A195F109C6A8FAC00AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: fc80f20a-109b-4769-765e-08d57dc90516 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 10:01:06.9268 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1586 Archived-At: Subject: [Suit] Terminology - LwM2M and ITU-T X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 10:01:16 -0000 --_000_AM4PR0801MB270624FA3112A195F109C6A8FAC00AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, during the virtual interim meeting yesterday I promised to provide input on= the LwM2M terminology and functionality for firmware updates. This issue w= as raised in the context of the ITU-T liaison discussion. The relevant content about LwM2M can be found in the publically available s= pecs. The latest version - LwM2M v1.0.2 - can be downloaded from: http://www.openmobilealliance.org/release/LightweightM2M/V1_0_2-20180209-A/= OMA-TS-LightweightM2M-V1_0_2-20180209-A.pdf There are four entities relevant to this topic, namely * The LwM2M Bootstrap Server * The LwM2M Server * The LwM2M Client * The firmware repository (which may be a LwM2M server or not) LwM2M is concerned about the transport of the firmware image and about keep= ing track of the status. It does not define how the firmware package looks = like and the work in SUIT fits nicely into there. The firmware update functionality is integrated into the rest of the data m= odel and there is no special terminology for just tracking firmware update = status. The protocol interaction is accomplished with objects and resources that ca= n be read, written or executed. Appendix E describes the objects and resour= ces that have been created for use with firmware updates. Mapping the terminology used by ITU-T to LwM2M functionality I believe this= would be a close approximation: The ITU-T Device Core, which stores and uses software/firmware, would be pa= rt of the LwM2M client. The ITU-T Communicator checks the software/firmware of the device and initi= ates updates as needed. This functionality may be on the device or somewher= e else. If it is on the device then the LwM2M Client would play that role b= ut if it is on the server side then it would be the LwM2M Server taking thi= s role. The ITU-T Status Tracker tracks update status of devices under its administ= ration. This role would clearly be played by the LwM2M server and the objec= ts and resources previously mentioned fulfil that purpose. Figure 29 shows = the firmware update state machine used for that purpose. The ITU-T Firmware Server, which distributes software/firmware packages to = devices, could either be a LwM2M server or a firmware repository (depending= how the firmware images are distributed). The LwM2M Bootstrap Server is probably worth mentioning, which does not see= m to have an equivalent entity in the ITU-T architecture. It is responsible= for provisioning the LwM2M Client with information about which firmware se= rver to use and also to configure it with credentials and parameters. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB270624FA3112A195F109C6A8FAC00AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

during the virtual interim meeting yesterday I promi= sed to provide input on the LwM2M terminology and functionality for firmwar= e updates. This issue was raised in the context of the ITU-T liaison discus= sion.

 

The relevant content about LwM2M can be found in the= publically available specs. The latest version - LwM2M v1.0.2 - can be dow= nloaded from:

http://www.openmobilealliance.org/release/LightweightM2M/V1_0_2-2018020= 9-A/OMA-TS-LightweightM2M-V1_0_2-20180209-A.pdf

 

There are four entities relevant to this topic, name= ly

·       The LwM2M Bootstrap Server

·       The LwM2M Server

·       The LwM2M Client

·       The firmware repository (which may be a LwM2= M server or not)

 

LwM2M is concerned about the transport of the firmwa= re image and about keeping track of the status. It does not define how the = firmware package looks like and the work in SUIT fits nicely into there.

 

The firmware update functionality is integrated into= the rest of the data model and there is no special terminology for just tr= acking firmware update status.

 

The protocol interaction is accomplished with object= s and resources that can be read, written or executed. Appendix E describes= the objects and resources that have been created for use with firmware upd= ates.

 

Mapping the terminology used by ITU-T to LwM2M funct= ionality I believe this would be a close approximation:

 

The ITU-T Device Core, which stores and uses softwar= e/firmware, would be part of the LwM2M client.

 

The ITU-T Communicator checks the software/firmware = of the device and initiates updates as needed. This functionality may be on= the device or somewhere else. If it is on the device then the LwM2M Client= would play that role but if it is on the server side then it would be the LwM2M Server taking this role.

 

The ITU-T Status Tracker tracks update status of dev= ices under its administration. This role would clearly be played by the LwM= 2M server and the objects and resources previously mentioned fulfil that pu= rpose. Figure 29 shows the firmware update state machine used for that purpose.

 

The ITU-T Firmware Server, which distributes softwar= e/firmware packages to devices, could either be a LwM2M server or a firmwar= e repository (depending how the firmware images are distributed).

 

The LwM2M Bootstrap Server is probably worth mention= ing, which does not seem to have an equivalent entity in the ITU-T architec= ture. It is responsible for provisioning the LwM2M Client with information = about which firmware server to use and also to configure it with credentials and parameters.

 

Ciao

Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB270624FA3112A195F109C6A8FAC00AM4PR0801MB2706_-- From nobody Tue Feb 27 05:32:39 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF519126DED for ; Tue, 27 Feb 2018 05:32:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dWaTnYOEYEye for ; Tue, 27 Feb 2018 05:32:35 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30086.outbound.protection.outlook.com [40.107.3.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48501126BF3 for ; Tue, 27 Feb 2018 05:32:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=fe0otRWOgvUynkQU15nzPdoPmHoIyugjXUbK4IAnUOo=; b=krStHrLKTE/Nuh0WUPkkO6kiVwqyCAuXgmKW6WoWnb/x7Natjxlp60IO++iLZPD6ArS/m4QXpxhbdJsMzuwDuxx4plsMQwMcpMKoYOPuYiIcbSewzvJeBT7qjCxC9htr/npwgphImDkUudp4p7t0CzKUTP5jh/FYZ5h6SB1YPaA= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.527.15; Tue, 27 Feb 2018 13:32:32 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Tue, 27 Feb 2018 13:32:31 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: Architecture Drawings Thread-Index: AdOvzo0tTf3mPSYzScaiOphlCE04AA== Date: Tue, 27 Feb 2018 13:32:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2706; 7:7vIPGa6gDVhsIv50rLqSkO1q1GdJwiFYiMtFsK0brRfbWljqgw0KwxPMy72ClEfrzn6Mn4QvoOpffAbXejTd3t9hQUrupUyolkQDYCYQPPkjJ16ze1EQr6kWel9Fvpay2Hg6P5TBkMkUFVEPCFUkFQP/trown2Ewhxj/su2NeVpl7zTn+tWnEGpikgEA/FHu4FgoxLR4Q3Ne2iTEnM6LJwKbulBhhrdBeoaFuXx7soI9/7Lzy8AJL8jEYv/UhtpW x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 08c2a96f-c82d-47a2-bcb8-08d57de68de9 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2706; x-ms-traffictypediagnostic: AM4PR0801MB2706: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3002001)(3231220)(944501161)(52105095)(10201501046)(6055026)(6041288)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB2706; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2706; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(39380400002)(366004)(396003)(376002)(346002)(39860400002)(76104003)(189003)(199004)(53754006)(40434004)(72206003)(478600001)(97736004)(7116003)(55016002)(6916009)(186003)(2906002)(53936002)(316002)(5660300001)(2900100001)(26005)(3280700002)(86362001)(81166006)(102836004)(6506007)(5640700003)(9686003)(6306002)(25786009)(54896002)(14454004)(5630700001)(59450400001)(68736007)(74316002)(7736002)(2501003)(5250100002)(3660700001)(8676002)(5890100001)(3846002)(106356001)(1730700003)(33656002)(7696005)(99286004)(105586002)(6436002)(3480700004)(6116002)(2351001)(66066001)(8936002)(790700001)(221733001)(81156014)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2706; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: GaXtgFuqyylreuIexGDfhIgiYqW3P4iRZcia85086/Wr5+xrIf8BwPD1nMIJV2e9Eu4uP1O1CdtZ4Ulvtd2dbUe5hvvBc+ApqFWAX/1xwVF/YGhkB/OlQAhZx7Mz9qVWPh4O54T4O9tuen7zPa2G4QcKeyc9CTXm2k66R/jtOHo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706098F8683E490A172A103FAC00AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 08c2a96f-c82d-47a2-bcb8-08d57de68de9 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 13:32:31.9180 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2706 Archived-At: Subject: [Suit] Architecture Drawings X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 13:32:38 -0000 --_000_AM4PR0801MB2706098F8683E490A172A103FAC00AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, at the virtual interim meeting yesterday we had a discussion about the arch= itectural drawings. Currently, there is one figure available that highlight= s the use of end-to-end security. The was, however, the desire expressed to have more figures that explain th= e different delivery methods currently offered. I have come up with two drawings that illustrate the difference between a m= anifest with attached firmware image (shown in Figure 1) and a case where t= he manifest is delivered separately and the devices fetches the firmware im= age from another source (shown in Figure 2). Figure 1 illustrates a case th= at is useful when the device does not have access to the Internet or when t= he update process happens via a USB stick. Figure 2 is the remote update wh= ere the device fetches the firmware image from some file server. /------------\ /------------\ /Manifest with \ /Manifest with \ |attached | |attached | \firmware image/ \firmware image/ \------------/ +-----------+ \------------/ +--------+ | | +--------+ | |<.................| Untrusted |<................| | | Device | | Storage | | Author | | | | | | | +--------+ +-----------+ +--------+ Figure 1: Manifest with attached firmware. /------------\ / \ | Manifest | \ / +--------+ \------------/ +--------+ | |<..............................................>| | | Device | -- | Author | | |<- --- | | +--------+ -- --- +--------+ -- --- --- --- -- +-----------+ -- -- | | -- /------------\ -- | Untrusted |<- /------------\ / \ -- | Storage | / \ | Firmware | | | | Firmware | \ / +-----------+ \ / \------------/ \------------/ Figure 2: Independent retrieval of the firmware image. What do you think? Are those the types of figures you had in mind? What ot= her figures would be useful to add? Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB2706098F8683E490A172A103FAC00AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

at the virtual interim meeting yesterday we had a di= scussion about the architectural drawings. Currently, there is one figure a= vailable that highlights the use of end-to-end security.

The was, however, the desire expressed to have more = figures that explain the different delivery methods currently offered.

 

I have come up with two drawings that illustrate the= difference between a manifest with attached firmware image (shown in Figur= e 1) and a case where the manifest is delivered separately and the devices = fetches the firmware image from another source (shown in Figure 2). Figure 1 illustrates a case that is useful whe= n the device does not have access to the Internet or when the update proces= s happens via a USB stick. Figure 2 is the remote update where the device f= etches the firmware image from some file server.

 

 

=             &nb= sp; /------------\         &nb= sp;       /------------\

=              /M= anifest with \          &= nbsp;    /Manifest with \

=              |a= ttached      |      =          |attached   = ;   |

=              \f= irmware image/          &= nbsp;    \firmware image/

=             &nb= sp; \------------/  +-----------+  \------------/

=   +--------+        &n= bsp;         |   &nb= sp;       |     &nbs= p;           +-------= -+

=   |        |<.................| = Untrusted |<................|        = |

=   | Device |         &nbs= p;        | Storage   | &= nbsp;           &nbs= p;   | Author |

=   |        |    = ;            &n= bsp; |           | &= nbsp;           &nbs= p;   |        |

=   +--------+        &n= bsp;         +-----------+&= nbsp;           &nbs= p;    +--------+

=  

= Figure 1: Manifest with attached firmware.

=  

=  

=             &nb= sp;            =      /------------\

=             &nb= sp;            =     /         &= nbsp;    \

=             &nb= sp;            =     |   Manifest   |

=             &nb= sp;            =     \         &= nbsp;    /

=   +--------+        &n= bsp;         \------------/ &n= bsp;            = ;  +--------+

=   |        |<...................= ...........................>|        = |

=   | Device |         &nbs= p;            &= nbsp;           &nbs= p;          -- | Author |=

=   |        |<-   =             &nb= sp;            =             --= -  |        |

=   +--------+  --       = ;            &n= bsp;            = ;     ---    +--------+

=             &nb= sp;   --         &nb= sp;            =            ---=

=             &nb= sp;     ---       &n= bsp;            = ;        ---

=             &nb= sp;        --    &nb= sp;  +-----------+    --

=             &nb= sp;          --  &nb= sp;  |           |&n= bsp; --

=         /------------\   --&nb= sp;  | Untrusted |<-    /------------\

=        /      &= nbsp;       \    -- | Storage&= nbsp;  |     /      =         \

=        |   Firmware   |&n= bsp;      |      &nb= sp;    |     |   Firmware = ;  |

=        \       =        /     &n= bsp; +-----------+     \    = ;          /=

=         \------------/   =             &nb= sp;           \----------= --/

=  

= Figure 2: Independent retrieval of the firmware image.

 

 

What do you think? Are those the types of figures&nb= sp; you had in mind? What other figures would be useful to add?

 

Ciao

Hannes

 

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB2706098F8683E490A172A103FAC00AM4PR0801MB2706_-- From nobody Tue Feb 27 05:44:08 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51AD6126DC2 for ; Tue, 27 Feb 2018 05:44:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kHol3n8d-kV5 for ; Tue, 27 Feb 2018 05:44:03 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0630.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::630]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 194FA129C6E for ; Tue, 27 Feb 2018 05:44:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=6yYmga4HksGP3QNQ4ZOvClABhOE8b0NdgQCxTF0qegs=; b=mBwH5R8YWwmb6voUkohAy9O3Gpw/KAYiLWm9kq6wZVO2VNTDUyKHM77ll7i6YVDOfOTv3vjoS1uriyR5qp7JBNaK6idx+pn+3mIqOy6seEkXs8KCLCAb+IqIumN+mUZz0NSmBszbP0pCgIdY9pTMydkgRyL5R+mORVFvkGVxxcw= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1474.eurprd08.prod.outlook.com (10.168.5.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Tue, 27 Feb 2018 13:44:00 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Tue, 27 Feb 2018 13:44:00 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: Approval of Firmware Update Thread-Index: AdOv0PAESicpWVavR5e4qF3taZhahA== Date: Tue, 27 Feb 2018 13:44:00 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1474; 7:9JIpld1NFxkFjWIPfBWstIsIc6fG6sib7hkt7GJ8TewsXmCyLUsFUMty4ZCt3b+N9f878t84mNOcGvYNZO1CFIAVSSbwTd4RXZZyw8CcViu5sNafN7cfbtO5RLM1vC8Hg4iEhuvgyda85gte4tYSBG6rbdXgbDvWiE8iMvo4m0CQRmZ7l0wRxRSfrHMKr6pO5WnI1gxNgeZmNizDXjobgwObb4l6SMt//h+kZriizawaNgPiApnlTLO33y0cu0mi x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 79e83143-4696-4afb-3421-08d57de82819 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1474; x-ms-traffictypediagnostic: AM4PR0801MB1474: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231220)(944501161)(52105095)(3002001)(6055026)(6041288)(20161123562045)(20161123560045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM4PR0801MB1474; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1474; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(376002)(346002)(366004)(39380400002)(396003)(189003)(199004)(53754006)(40434004)(105586002)(97736004)(2900100001)(5630700001)(86362001)(6116002)(7110500001)(3846002)(3280700002)(790700001)(7736002)(72206003)(1730700003)(81156014)(33656002)(14454004)(74316002)(99286004)(478600001)(8676002)(66066001)(6916009)(2906002)(81166006)(7696005)(10710500007)(316002)(5640700003)(55016002)(102836004)(68736007)(2351001)(6436002)(106356001)(26005)(5890100001)(3480700004)(54896002)(53936002)(9686003)(6506007)(3660700001)(6306002)(5250100002)(15650500001)(5660300001)(59450400001)(25786009)(186003)(2501003)(2420400007)(8936002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1474; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 9SAGHzeyNsBens6F1J9LqIpo+W+kb8apiX8mIXppDPeXN8mbHV8QoheSmCSNT/KEpOjGx1hEOoAnZ2p/meFqh+mdoIc0e7xbmeYcN4mrLzizpHDj7Z9VN+0c1jv6ytZZPWD7DDin3QfEfJWUI8ZXt2nO8kYvg4roazHcIFbqq8I= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB270693A232A65E0F560BF380FAC00AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 79e83143-4696-4afb-3421-08d57de82819 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 13:44:00.0949 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1474 Archived-At: Subject: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 13:44:06 -0000 --_000_AM4PR0801MB270693A232A65E0F560BF380FAC00AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, yesterday we also spoke about the co-signing / approving a firmware update = through a party other than the author producing the firmware. For this purpose I created another drawing and also introduced another role= , namely the "approver". (Suggestion for better terminology is welcome.) Whether the actual solution requires co-signing or some other form of appro= val is a separate question. /------------\ /------------\ //------------\\ //------------\\ // Co-Signed/ \\ // Co-Signed/ \\ || Approved || || Approved || \\ Manifest // \\ Manifest // \\------------//+-----------+ \\------------// +--------+ \------------/ | | \------------/ +--------+ | |<.................| Untrusted |<................| | | Device | | Storage | |Approver| | | | | | | +--------+ +-----------+ +--------+ ^ . . . /------------\ . / \ . | Manifest | . \ / . \------------/ . . . . . +--------+ | | | Author | | | +--------+ How does this look like? Does this address the feedback during the meeting = yesterday? Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB270693A232A65E0F560BF380FAC00AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

yesterday we also spoke about the co-signing / appro= ving a firmware update through a party other than the author producing the = firmware.

For this purpose I created another drawing and also = introduced another role, namely the “approver”. (Suggestion for= better terminology is welcome.)

 

Whether the actual solution requires co-signing or s= ome other form of approval is a separate question.

 

 

=             &nb= sp; /------------\         &nb= sp;      /------------\

=              //= ------------\\          &= nbsp;   //------------\\

=             // = Co-Signed/  \\         &= nbsp;  //  Co-Signed/  \\

=             ||  = ;Approved    ||       &nb= sp;    ||  Approved    ||

=             \\ = Manifest    //       &nb= sp;    \\  Manifest    //

=              \\= ------------//+-----------+ \\------------//

= +--------+   \------------/ |    &nbs= p;      |  \------------/ +--------+<= o:p>

= |        |<.................| Untrust= ed |<................|        |<= /o:p>

= | Device |           = ;       | Storage   |  &n= bsp;            = ;  |Approver|

= |        |     =              |&= nbsp;          |  &n= bsp;            = ;  |        |

= +--------+         &nb= sp;        +-----------+ &n= bsp;            &nbs= p;  +--------+

=             &nb= sp;            =             &nb= sp;            =              ^<= o:p>

=             &nb= sp;            =             &nb= sp;            =              .<= o:p>

=             &nb= sp;            =             &nb= sp;            =              .<= o:p>

=             &nb= sp;            =              &n= bsp;            = ;            .<= o:p>

=             &nb= sp;            =             &nb= sp;        /------------\   .<= o:p>

=             &nb= sp;            =             &nb= sp;       /     &nbs= p;        \  .

=             &nb= sp;            =             &nb= sp;       |   Manifest   = |  .

=             &nb= sp;            =              &n= bsp;      \     &nbs= p;        /  .

=             &nb= sp;            =             &nb= sp;        \------------/   .<= o:p>

=             &nb= sp;            =             &nb= sp;            =              .<= o:p>

=             &nb= sp;            =             &nb= sp;            =              .<= o:p>

=             &nb= sp;            =              &n= bsp;            = ;            .<= o:p>

=             &nb= sp;            =             &nb= sp;            =              .<= o:p>

=             &nb= sp;            =             &nb= sp;            =          +--------+

=             &nb= sp;            =             &nb= sp;            =          |    &= nbsp;   |

=             &nb= sp;             = ;            &n= bsp;            = ;        | Author |

=             &nb= sp;            =             &nb= sp;            =          |    &= nbsp;   |

=             &nb= sp;            =             &nb= sp;            =          +--------+

 

How does this look like? Does this address the feedb= ack during the meeting yesterday?

 

Ciao
Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB270693A232A65E0F560BF380FAC00AM4PR0801MB2706_-- From nobody Tue Feb 27 06:45:56 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96E1912D94D for ; Tue, 27 Feb 2018 06:45:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zfRLsqQKUhP0 for ; Tue, 27 Feb 2018 06:45:52 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B3C7D12D94E for ; Tue, 27 Feb 2018 06:45:52 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 648D020091; Tue, 27 Feb 2018 09:53:34 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 0743780BE3; Tue, 27 Feb 2018 09:45:50 -0500 (EST) From: Michael Richardson To: Hannes Tschofenig cc: "suit\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Suit] Terminology - LwM2M and ITU-T X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 14:45:55 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > during the virtual interim meeting yesterday I promised to provide > input on the LwM2M terminology and functionality for firmware updates. > This issue was raised in the context of the ITU-T liaison discussion. Thank you for the summary. ... > The firmware update functionality is integrated into the rest of the > data model and there is no special terminology for just tracking > firmware update status. My understanding from reading your email is that the Status Tracker always knows the firmware update status of every device. Is that correct? I think that in the LwM2M case, that the updates are pushed and that the devices are essentially passive in regards their choice about updating or not. I'm not sure that SUIT contemplates the same model. > The LwM2M Bootstrap Server is probably worth mentioning, which does > not seem to have an equivalent entity in the ITU-T architecture. It is > responsible for provisioning the LwM2M Client with information about > which firmware server to use and also to configure it with credentials > and parameters. Interesting. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqVbx4ACgkQgItw+93Q 3WWixggAvaV+IFJoXTW39jjpdckOatiAJeASWhL5LcUI2asb4up2dPjaMSHv855Y BbJY6O2fRtEq4li9HexUzl6eOBPMghkHPKMWrn+tWnexziOP6I8LLiSYnRS+aso5 +Trnwi3I0SzqiAB07cUotVqEAUql13gSZ99lB6fr9uVR9XQOQgjnvjM9svD/XZbF /vtOmGcFjZiD6oNUTfFs7bhVBLDR1J47qCEpkLISNMpmHJRp9GAwLtwqld433XVb frqPdQRGcS8qGOoE4qqQ6te4Vd13yGjJqjtDj/06RvsH1x1ok/GWPOg9wqxvawRW AgQ1oojS/UheTXGHQ0mQPZnFrNNZ6g== =wqmA -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Feb 27 08:55:01 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 593B2126BF7 for ; Tue, 27 Feb 2018 08:54:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3d8cpzlsL1v2 for ; Tue, 27 Feb 2018 08:54:47 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0621.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::621]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C601B12D889 for ; Tue, 27 Feb 2018 08:54:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=84VekxV4b6ptikAYDo78y1hmVWJJrWtpB6JIiBXf948=; b=iXyIP0mKnbMej9AI/Ouwp4/bd9OwDRrapXrdHn/rfkVV0B0s1mrEhFVSlkXobgxcAqHqA+l1w1uvtrTOmY4kYZZI6kWR1he6eXw06sl69j9TDFnBCVbVD2V+WveGkNLaA75aptu/oSijhv7ErLqBAz6ZRZZi+6NiYAatToNucac= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1524.eurprd08.prod.outlook.com (10.168.5.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Tue, 27 Feb 2018 16:54:40 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Tue, 27 Feb 2018 16:54:40 +0000 From: Hannes Tschofenig To: Michael Richardson CC: "suit@ietf.org" Thread-Topic: [Suit] Terminology - LwM2M and ITU-T Thread-Index: AdOvsaqaZBkdeE2PS8+RX/t0ShSOEQAJ/5EAAAIECWA= Date: Tue, 27 Feb 2018 16:54:40 +0000 Message-ID: References: <3446.1519742750@obiwan.sandelman.ca> In-Reply-To: <3446.1519742750@obiwan.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1524; 7:dlYfsun89YqqiaM3DXjfoalMRs6ntGxJZxkBnr3fviNFfvYCO0UXqkq7LlOZkKWWkUQQXCJSTwUscqay3eSNuqhd8D8f1EgUYfI56lCVnMsFxDWP6ZBYGhsyGVljAgElQMR+AEu5+c/4Wez2EGQ/vMrXn4jG0HLFksOuU7ahSveTBUWTGqESPOOJoxk8sXiCFiE9YPz/h0Rloh4+x0juLLCzlhFiaweesKBLr5a1Qz1hBLbmOaNPLi8OwaJ3jfCj x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ea3d3e84-e272-4968-0782-08d57e02caeb x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1524; x-ms-traffictypediagnostic: AM4PR0801MB1524: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(3231220)(944501161)(52105095)(93006095)(93001095)(10201501046)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB1524; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1524; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39860400002)(366004)(376002)(396003)(39380400002)(199004)(189003)(40434004)(51444003)(2950100002)(186003)(55016002)(2900100001)(8936002)(6246003)(66066001)(26005)(33656002)(97736004)(81156014)(81166006)(8676002)(9686003)(6436002)(74316002)(3280700002)(2906002)(316002)(305945005)(6116002)(3846002)(7736002)(5890100001)(3660700001)(5250100002)(106356001)(25786009)(105586002)(7696005)(102836004)(68736007)(5660300001)(59450400001)(53936002)(14454004)(72206003)(99286004)(6506007)(4326008)(229853002)(76176011)(478600001)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1524; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: CZUq4DHhWwI1/QvyWf2wIYrrd1XNSEAr9wcIdD1xiB+eYAmZr/FDAL7oYAtr6/dTNsCPvkZe1w0IXo7c4eRTRFA2yF/HEM+eVot/JsjNTpqy4WDWa28piNFgkg0ygwUZF6iWARmkYgN4emlbV+N1E5EGS4/3QSO1hX6cdokwfWo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: ea3d3e84-e272-4968-0782-08d57e02caeb X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 16:54:40.1446 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1524 Archived-At: Subject: Re: [Suit] Terminology - LwM2M and ITU-T X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 16:54:53 -0000 Hi Michael, Comments below. ~snip~ > The firmware update functionality is integrated into the rest of the > data model and there is no special terminology for just tracking > firmware update status. My understanding from reading your email is that the Status Tracker always = knows the firmware update status of every device. Is that correct? [Hannes] This is how I understood it from the description Dave Thaler provi= ded it during the conference call. In LwM2M, which does not have the notion= of a Status Tracker, the ability to monitor a device and also to monitor t= he progress of a firmware update is provided. So, if you want you could kee= p track of every device, which is what you would expect from a device manag= ement solution. I think that in the LwM2M case, that the updates are pushed and that the de= vices are essentially passive in regards their choice about updating or not. I'm not sure that SUIT contemplates the same model. [Hannes] LwM2M supports the LwM2M server to send a new firmware image. Howe= ver, it also allows the client to fetch the firmware images from a reposito= ry. Ciao Hannes -- Michael Richardson , Sandelman Software Works -=3D = IPv6 IoT consulting =3D- IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Feb 27 10:37:52 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB50F127369 for ; Tue, 27 Feb 2018 10:37:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BeGDbb8dyUul for ; Tue, 27 Feb 2018 10:37:49 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0246126D0C for ; Tue, 27 Feb 2018 10:37:49 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 2761820091; Tue, 27 Feb 2018 13:45:32 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 2E6F180D06; Tue, 27 Feb 2018 13:37:48 -0500 (EST) From: Michael Richardson To: Hannes Tschofenig cc: "suit\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 18:37:51 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hannes Tschofenig wrote: > yesterday we also spoke about the co-signing / approving a firmware > update through a party other than the author producing the firmware. Good. > For this purpose I created another drawing and also introduced another > role, namely the =E2=80=9Capprover=E2=80=9D. (Suggestion for better t= erminology is > welcome.) In my mind, the should really only be the approver, and there should probably only be one signature that the end device looks for. I think that all the complex situations we want (author signs firmware, reviewer signs it, plant operation signs it, operator signs it for odd-numbered devices...) should really about how the device goes from the built-in trust anchors to the authoritative entity. It could be that we can use SAML or SPKI or ??? for this. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqVpXsACgkQgItw+93Q 3WUVQwgAv5GnMOiwIruofGKMueiLsgN+ffpF0w4Xv9qWb73ZJfwNM7ZFEqQhJGGG vIBGhoVUkddDll+1MmjDehIOKimYDAgko8MR6aHNvIfyV4YXw1scoiKV4E0JwMAB mbFOKE6ggi1mYKboeny+ORy0yGejXHvZejfSctkTaf+lNZXfB9/EPO0VL/vy7orY Q/p0lfthRYpxPAEZzzhoz/VY9J8rNGqWmsfV0EwfrkGqsT9+HwfwGE5gAMnbxCdR n5PDjggS4q2SoMxi5iSHb+2zqiaqdqNGN2H+9QBypLD+az28mPQ1ZeOhO9QcCbZu Og2WDk1i0TusvEzVYaS+ol+dQ0RiJw== =ks/w -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Feb 27 13:32:36 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3E4012DA1A for ; Tue, 27 Feb 2018 13:32:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rLhvGbAMXSs0 for ; Tue, 27 Feb 2018 13:32:33 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 698DF12D7F9 for ; Tue, 27 Feb 2018 13:32:33 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 5D6993004BD for ; Tue, 27 Feb 2018 16:32:31 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id OaYjydrxl4xA for ; Tue, 27 Feb 2018 16:32:29 -0500 (EST) Received: from a860b60074bd.home (pool-108-45-101-150.washdc.fios.verizon.net [108.45.101.150]) by mail.smeinc.net (Postfix) with ESMTPSA id A64AF300435; Tue, 27 Feb 2018 16:32:29 -0500 (EST) From: Russ Housley Message-Id: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_E2B0F52B-D57F-4508-851E-B11CC5FAF7D7" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Date: Tue, 27 Feb 2018 16:32:30 -0500 In-Reply-To: Cc: "suit@ietf.org" To: Hannes Tschofenig References: X-Mailer: Apple Mail (2.3273) Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 21:32:36 -0000 --Apple-Mail=_E2B0F52B-D57F-4508-851E-B11CC5FAF7D7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hannes: Why not signer? The quality control / release process will be different = in many situations, but signing the firmware should be the final step. Before the group was chartered, we talked on the list about the possible = signature algorithms. I advocated a hash-based signature because the = validation code is small and the validation time is short. Did this = come up? Russ > On Feb 27, 2018, at 8:44 AM, Hannes Tschofenig = wrote: >=20 > Hi all,=20 > =20 > yesterday we also spoke about the co-signing / approving a firmware = update through a party other than the author producing the firmware. > For this purpose I created another drawing and also introduced another = role, namely the =E2=80=9Capprover=E2=80=9D. (Suggestion for better = terminology is welcome.) > =20 > Whether the actual solution requires co-signing or some other form of = approval is a separate question. > =20 > =20 > /------------\ /------------\ > //------------\\ //------------\\ > // Co-Signed/ \\ // Co-Signed/ \\ > || Approved || || Approved || > \\ Manifest // \\ Manifest // > \\------------//+-----------+ \\------------// > +--------+ \------------/ | | \------------/ +--------+ > | |<.................| Untrusted |<................| | > | Device | | Storage | |Approver| > | | | | | | > +--------+ +-----------+ +--------+ > ^ > . > . > . > /------------\ . > / \ . > | Manifest | . > \ / . > \------------/ . > . > . > . > . > +--------+ > | | > | Author | > | | > +--------+ > =20 > How does this look like? Does this address the feedback during the = meeting yesterday? > =20 > Ciao > Hannes > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. = _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit = --Apple-Mail=_E2B0F52B-D57F-4508-851E-B11CC5FAF7D7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hannes:

Why= not signer?  The quality control / release process will be = different in many situations, but signing the firmware should be the = final step.

Before the group was chartered, we talked on the list about = the possible signature algorithms.  I advocated a hash-based = signature because the validation code is small and the validation time = is short.  Did this come up?

Russ


On Feb 27, 2018, at 8:44 AM, = Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:

Hi all, 
 
yesterday = we also spoke about the co-signing / approving a firmware update through = a party other than the author producing the firmware.
For this = purpose I created another drawing and also introduced another role, = namely the =E2=80=9Capprover=E2=80=9D. (Suggestion for better = terminology is welcome.)
 
Whether the actual solution requires co-signing or some other = form of approval is a separate question.
 
 
          &nb= sp;   = /------------\          =       /------------\
          &nb= sp;  = //------------\\         &nbs= p;    //------------\\
          &nb= sp; //  Co-Signed/  = \\            = //  Co-Signed/  \\
          &nb= sp; ||  Approved    = ||            = ||  Approved    ||
          &nb= sp; \\  Manifest    = //            = \\  Manifest    //
          &nb= sp;  \\------------//+-----------+ \\------------//
+--------+   = \------------/ = |           |  = \------------/ +--------+
|        = |<.................| Untrusted = |<................|        |
| Device = |            &= nbsp;     | Storage   = |            &= nbsp;    |Approver|
|        = |            &= nbsp;     = |           = |            &= nbsp;    |        = |
+--------+         = ;         = +-----------+    =             &n= bsp;+--------+
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   ^
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   .
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   .
          &nb= sp;            = ;            &= nbsp; =             &n= bsp;           &nbs= p; .
          &nb= sp;            = ;            &= nbsp;          = /------------\   .
          &nb= sp;            = ;            &= nbsp;         = /            &= nbsp; \  .
          &nb= sp;            = ;            &= nbsp;         |   = Manifest   |  .
          &nb= sp;            = ;          =             \&= nbsp;           &nb= sp; /  .
          &nb= sp;            = ;            &= nbsp;          = \------------/   .
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   .
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   .
          &nb= sp;            = ;      =             &n= bsp;           &nbs= p;         .
          &nb= sp;            = ;            &= nbsp;           &nb= sp;            = ;   .
          &nb= sp;            = ;            &= nbsp;           &nb= sp;           = +--------+
          &nb= sp;            = ;            &= nbsp;           &nb= sp;           = |        |
          &nb= sp;    =             &n= bsp;           &nbs= p;            =        | Author |
          &nb= sp;            = ;            &= nbsp;           &nb= sp;           = |        |
          &nb= sp;            = ;            &= nbsp;           &nb= sp;           = +--------+
 
How does this look like? Does this address the feedback = during the meeting yesterday?
 
Ciao
Hannes
 
IMPORTANT NOTICE: The contents of this = email and any attachments are confidential and may also be privileged. = If you are not the intended recipient, please notify the sender = immediately and do not disclose the contents to any other person, use it = for any purpose, or store or copy the information in any medium. Thank = you. _______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit

= --Apple-Mail=_E2B0F52B-D57F-4508-851E-B11CC5FAF7D7-- From nobody Tue Feb 27 13:46:06 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E3F312DA73 for ; Tue, 27 Feb 2018 13:46:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ZY1ZpGLx59F for ; Tue, 27 Feb 2018 13:46:01 -0800 (PST) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0109.outbound.protection.outlook.com [104.47.40.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD56312DA53 for ; Tue, 27 Feb 2018 13:46:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=FCtFNPWjYMLVlB7msrD4Fovvxt5kmTmLey3vI6C8ecQ=; b=Y+nlcw/Fsp2UUfdASeTCdVwNwWrvnwLKYH711Up74oHYKoeA/R1dptg1PpCv1KpSq0ffpZP9YjrhCsktgcaCW+Qjpj9oVYHd1QvGDpM7h/01qYY3uV7Wf1k4tZUkEDJXgqTToFWgyDErN2HPN0ip80gondtKyGUnNDxKBi9kEGw= Received: from CY4PR21MB0856.namprd21.prod.outlook.com (10.173.192.145) by CY4PR21MB0758.namprd21.prod.outlook.com (10.173.192.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.567.2; Tue, 27 Feb 2018 21:46:00 +0000 Received: from CY4PR21MB0856.namprd21.prod.outlook.com ([fe80::146e:7c9c:97ff:fa06]) by CY4PR21MB0856.namprd21.prod.outlook.com ([fe80::146e:7c9c:97ff:fa06%5]) with mapi id 15.20.0567.002; Tue, 27 Feb 2018 21:45:59 +0000 From: Dave Thaler To: Hannes Tschofenig CC: "suit@ietf.org" Thread-Topic: [Suit] Approval of Firmware Update Thread-Index: AdOv0PAESicpWVavR5e4qF3taZhahAAQYhkAAABn7QA= Date: Tue, 27 Feb 2018 21:45:59 +0000 Message-ID: References: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> In-Reply-To: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-02-27T21:45:59.1286757Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:e::238] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR21MB0758; 7:LMK1O1Iw1dpL1fB1ndscTViZPJQjnc3mgerYfYT2LeNij5yQTC/SGjPuHi4fL6RIor2eP40JH2VAuFtdrkRZXzNVhVOFtg6b42H8SxXvWwl5Orq6jzSryoZJwUynu26cNZWZHJUx4kAGUKE/ucFQFjQQyXB/rFZrOkv1kWqumYBro0JNW1CCK4tiYuO8eKfeOjgsmCWOxmU7hhVrTYl7fLXJ0XyQVLwzpYUoOxdj8+EvC+9xfqPSRPjZV2fM60g2 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4388945b-33b4-41ac-e086-08d57e2b7da5 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7193020); SRVR:CY4PR21MB0758; x-ms-traffictypediagnostic: CY4PR21MB0758: x-ld-processed: 72f988bf-86f1-41af-91ab-2d7cd011db47,ExtAddr x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(189930954265078)(219752817060721)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040501)(2401047)(8121501046)(5005006)(3231220)(944501205)(52105095)(93006095)(93001095)(10201501046)(3002001)(6055026)(61426038)(61427038)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:CY4PR21MB0758; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0758; x-forefront-prvs: 05961EBAFC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(39860400002)(396003)(346002)(39380400002)(366004)(199004)(189003)(53754006)(40434004)(55016002)(7110500001)(6246003)(4326008)(99286004)(2906002)(14454004)(2950100002)(10090500001)(8990500004)(7696005)(5660300001)(966005)(606006)(6916009)(86612001)(6436002)(6306002)(33656002)(9686003)(478600001)(97736004)(19609705001)(53936002)(5890100001)(5250100002)(10710500007)(8936002)(10290500003)(76176011)(74316002)(236005)(106356001)(6506007)(25786009)(53546011)(186003)(59450400001)(8676002)(3280700002)(2420400007)(54896002)(6346003)(3660700001)(86362001)(22452003)(68736007)(7736002)(102836004)(6116002)(81166006)(81156014)(790700001)(105586002)(229853002)(2900100001)(316002)(15650500001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0758; H:CY4PR21MB0856.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-message-info: ve4KIGV47F9mgV8vCenoAZRItvoXtGmsXBON7FacTRlCoE8t00y91VAtPiemtPq5EjqGvxNG1JhSCjXYSRIkv+iAWmHYM5NKrAbZ7H1HfMroIhKbsjQ+HzfV23P+t2GCJrCShryM8qAqp4YuWpZe2GGLExFDe0yxsyx0GLEEt58= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY4PR21MB08569B2FEF89630A87F8D832A3C00CY4PR21MB0856namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4388945b-33b4-41ac-e086-08d57e2b7da5 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Feb 2018 21:45:59.7878 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0758 Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 21:46:04 -0000 --_000_CY4PR21MB08569B2FEF89630A87F8D832A3C00CY4PR21MB0856namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW4gbXkgdmlldywg4oCcU2lnbmVy4oCdIGlzIHRvbyBnZW5lcmljIGEgdGVybSBmb3IgdGhlIGVu dGl0eSB3aG8gc2F5cyBpdOKAmXMgYXBwcm9wcmlhdGUgZm9yIGEgc3BlY2lmaWMgc2V0IG9mIGRl dmljZXMgb24gYSBzcGVjaWZpYyBuZXR3b3JrLCBzaW5jZSB0aGUgYXV0aG9yIGlzIGFsc28gYSDi gJxzaWduZXLigJ0uDQoNCuKAnEFkbWluaXN0cmF0b3LigJ0gaXMgYW5vdGhlciBwb3NzaWJsZSB0 ZXJtLiAg4oCcQXBwcm92ZXLigJ0gaXMgb2ssIHRob3VnaCBJIGZpbmQgaXQgbW9yZSBjb25mdXNp bmcgdGhhbiBBZG1pbiwgYnV0IG1heWJlIHRoYXTigJlzIGp1c3QgbWUuDQoNCkRhdmUNCg0KRnJv bTogU3VpdCBbbWFpbHRvOnN1aXQtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFJ1c3Mg SG91c2xleQ0KU2VudDogVHVlc2RheSwgRmVicnVhcnkgMjcsIDIwMTggMTozMyBQTQ0KVG86IEhh bm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPg0KQ2M6IHN1aXRAaWV0 Zi5vcmcNClN1YmplY3Q6IFJlOiBbU3VpdF0gQXBwcm92YWwgb2YgRmlybXdhcmUgVXBkYXRlDQoN Ckhhbm5lczoNCg0KV2h5IG5vdCBzaWduZXI/ICBUaGUgcXVhbGl0eSBjb250cm9sIC8gcmVsZWFz ZSBwcm9jZXNzIHdpbGwgYmUgZGlmZmVyZW50IGluIG1hbnkgc2l0dWF0aW9ucywgYnV0IHNpZ25p bmcgdGhlIGZpcm13YXJlIHNob3VsZCBiZSB0aGUgZmluYWwgc3RlcC4NCg0KQmVmb3JlIHRoZSBn cm91cCB3YXMgY2hhcnRlcmVkLCB3ZSB0YWxrZWQgb24gdGhlIGxpc3QgYWJvdXQgdGhlIHBvc3Np YmxlIHNpZ25hdHVyZSBhbGdvcml0aG1zLiAgSSBhZHZvY2F0ZWQgYSBoYXNoLWJhc2VkIHNpZ25h dHVyZSBiZWNhdXNlIHRoZSB2YWxpZGF0aW9uIGNvZGUgaXMgc21hbGwgYW5kIHRoZSB2YWxpZGF0 aW9uIHRpbWUgaXMgc2hvcnQuICBEaWQgdGhpcyBjb21lIHVwPw0KDQpSdXNzDQoNCg0KT24gRmVi IDI3LCAyMDE4LCBhdCA4OjQ0IEFNLCBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVu aWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KDQpI aSBhbGwsDQoNCnllc3RlcmRheSB3ZSBhbHNvIHNwb2tlIGFib3V0IHRoZSBjby1zaWduaW5nIC8g YXBwcm92aW5nIGEgZmlybXdhcmUgdXBkYXRlIHRocm91Z2ggYSBwYXJ0eSBvdGhlciB0aGFuIHRo ZSBhdXRob3IgcHJvZHVjaW5nIHRoZSBmaXJtd2FyZS4NCkZvciB0aGlzIHB1cnBvc2UgSSBjcmVh dGVkIGFub3RoZXIgZHJhd2luZyBhbmQgYWxzbyBpbnRyb2R1Y2VkIGFub3RoZXIgcm9sZSwgbmFt ZWx5IHRoZSDigJxhcHByb3ZlcuKAnS4gKFN1Z2dlc3Rpb24gZm9yIGJldHRlciB0ZXJtaW5vbG9n eSBpcyB3ZWxjb21lLikNCg0KV2hldGhlciB0aGUgYWN0dWFsIHNvbHV0aW9uIHJlcXVpcmVzIGNv LXNpZ25pbmcgb3Igc29tZSBvdGhlciBmb3JtIG9mIGFwcHJvdmFsIGlzIGEgc2VwYXJhdGUgcXVl c3Rpb24uDQoNCg0KICAgICAgICAgICAgICAvLS0tLS0tLS0tLS0tXCAgICAgICAgICAgICAgICAv LS0tLS0tLS0tLS0tXA0KICAgICAgICAgICAgIC8vLS0tLS0tLS0tLS0tXFwgICAgICAgICAgICAg IC8vLS0tLS0tLS0tLS0tXFwNCiAgICAgICAgICAgIC8vICBDby1TaWduZWQvICBcXCAgICAgICAg ICAgIC8vICBDby1TaWduZWQvICBcXA0KICAgICAgICAgICAgfHwgIEFwcHJvdmVkICAgIHx8ICAg ICAgICAgICAgfHwgIEFwcHJvdmVkICAgIHx8DQogICAgICAgICAgICBcXCAgTWFuaWZlc3QgICAg Ly8gICAgICAgICAgICBcXCAgTWFuaWZlc3QgICAgLy8NCiAgICAgICAgICAgICBcXC0tLS0tLS0t LS0tLS8vKy0tLS0tLS0tLS0tKyBcXC0tLS0tLS0tLS0tLS8vDQorLS0tLS0tLS0rICAgXC0tLS0t LS0tLS0tLS8gfCAgICAgICAgICAgfCAgXC0tLS0tLS0tLS0tLS8gKy0tLS0tLS0tKw0KfCAgICAg ICAgfDwuLi4uLi4uLi4uLi4uLi4uLnwgVW50cnVzdGVkIHw8Li4uLi4uLi4uLi4uLi4uLnwgICAg ICAgIHwNCnwgRGV2aWNlIHwgICAgICAgICAgICAgICAgICB8IFN0b3JhZ2UgICB8ICAgICAgICAg ICAgICAgICB8QXBwcm92ZXJ8DQp8ICAgICAgICB8ICAgICAgICAgICAgICAgICAgfCAgICAgICAg ICAgfCAgICAgICAgICAgICAgICAgfCAgICAgICAgfA0KKy0tLS0tLS0tKyAgICAgICAgICAgICAg ICAgICstLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICstLS0tLS0tLSsNCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIF4NCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAvLS0tLS0tLS0tLS0tXCAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIC8gICAgICAgICAgICAgIFwgIC4NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICBNYW5pZmVzdCAgIHwgIC4NCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwgICAgICAgICAgICAgIC8g IC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBcLS0tLS0t LS0tLS0tLyAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4NCiAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4NCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0t LS0tKw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgICB8DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwgQXV0aG9yIHwNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgfA0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0t LS0rDQoNCkhvdyBkb2VzIHRoaXMgbG9vayBsaWtlPyBEb2VzIHRoaXMgYWRkcmVzcyB0aGUgZmVl ZGJhY2sgZHVyaW5nIHRoZSBtZWV0aW5nIHllc3RlcmRheT8NCg0KQ2lhbw0KSGFubmVzDQoNCklN UE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNo bWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91 IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhl ciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGlu Zm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4gX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NClN1aXQgbWFpbGluZyBsaXN0DQpTdWl0QGlldGYu b3JnPG1haWx0bzpTdWl0QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zdWl0PGh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv bS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJG c3VpdCZkYXRhPTA0JTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3QzVkOGI1MmRiMDgz YTQyZmE2MGVhMDhkNTdlMjlhMDNmJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDcl N0MxJTdDMCU3QzYzNjU1MzYzOTYwNTM0NTg0MiU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpX SWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpZlElM0QlM0Ql N0MtMSZzZGF0YT15JTJGOExoa243S01VekRqenk2Tnp4eUNZMzNqRUNpT1V0Y0ltd2NQd3ZzZjQl M0QmcmVzZXJ2ZWQ9MD4NCg0K --_000_CY4PR21MB08569B2FEF89630A87F8D832A3C00CY4PR21MB0856namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNw YW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRl ZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdE O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SW4gbXkgdmlldywg 4oCcU2lnbmVy4oCdIGlzIHRvbyBnZW5lcmljIGEgdGVybSBmb3IgdGhlIGVudGl0eSB3aG8gc2F5 cyBpdOKAmXMgYXBwcm9wcmlhdGUgZm9yIGEgc3BlY2lmaWMgc2V0IG9mIGRldmljZXMgb24gYSBz cGVjaWZpYyBuZXR3b3JrLCBzaW5jZSB0aGUgYXV0aG9yIGlzIGFsc28NCiBhIOKAnHNpZ25lcuKA nS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPuKAnEFkbWluaXN0 cmF0b3LigJ0gaXMgYW5vdGhlciBwb3NzaWJsZSB0ZXJtLiZuYnNwOyDigJxBcHByb3ZlcuKAnSBp cyBvaywgdGhvdWdoIEkgZmluZCBpdCBtb3JlIGNvbmZ1c2luZyB0aGFuIEFkbWluLCBidXQgbWF5 YmUgdGhhdOKAmXMganVzdCBtZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPkRhdmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YSBuYW1lPSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2E+PC9wPg0KPHNwYW4gc3R5bGU9Im1zby1ib29rbWFy azpfTWFpbEVuZENvbXBvc2UiPjwvc3Bhbj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBTdWl0IFttYWlsdG86c3VpdC1ib3VuY2VzQGlldGYub3Jn XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5SdXNzIEhvdXNsZXk8YnI+DQo8Yj5TZW50OjwvYj4gVHVl c2RheSwgRmVicnVhcnkgMjcsIDIwMTggMTozMyBQTTxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRz Y2hvZmVuaWcgJmx0O0hhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9i PiBzdWl0QGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbU3VpdF0gQXBwcm92YWwg b2YgRmlybXdhcmUgVXBkYXRlPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SGFubmVzOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+V2h5IG5vdCBzaWduZXI/ICZuYnNwO1RoZSBxdWFsaXR5IGNvbnRyb2wgLyByZWxlYXNl IHByb2Nlc3Mgd2lsbCBiZSBkaWZmZXJlbnQgaW4gbWFueSBzaXR1YXRpb25zLCBidXQgc2lnbmlu ZyB0aGUgZmlybXdhcmUgc2hvdWxkIGJlIHRoZSBmaW5hbCBzdGVwLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZWZvcmUgdGhlIGdyb3VwIHdh cyBjaGFydGVyZWQsIHdlIHRhbGtlZCBvbiB0aGUgbGlzdCBhYm91dCB0aGUgcG9zc2libGUgc2ln bmF0dXJlIGFsZ29yaXRobXMuICZuYnNwO0kgYWR2b2NhdGVkIGEgaGFzaC1iYXNlZCBzaWduYXR1 cmUgYmVjYXVzZSB0aGUgdmFsaWRhdGlvbiBjb2RlIGlzIHNtYWxsIGFuZCB0aGUgdmFsaWRhdGlv biB0aW1lIGlzIHNob3J0LiAmbmJzcDtEaWQgdGhpcyBjb21lIHVwPzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SdXNzPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1i b3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZlYiAyNywgMjAx OCwgYXQgODo0NCBBTSwgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5u ZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPkhpIGFsbCw8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi Pnllc3RlcmRheSB3ZSBhbHNvIHNwb2tlIGFib3V0IHRoZSBjby1zaWduaW5nIC8gYXBwcm92aW5n IGEgZmlybXdhcmUgdXBkYXRlIHRocm91Z2ggYSBwYXJ0eSBvdGhlciB0aGFuIHRoZSBhdXRob3Ig cHJvZHVjaW5nIHRoZSBmaXJtd2FyZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZvciB0aGlzIHB1cnBv c2UgSSBjcmVhdGVkIGFub3RoZXIgZHJhd2luZyBhbmQgYWxzbyBpbnRyb2R1Y2VkIGFub3RoZXIg cm9sZSwgbmFtZWx5IHRoZSDigJxhcHByb3ZlcuKAnS4gKFN1Z2dlc3Rpb24gZm9yIGJldHRlciB0 ZXJtaW5vbG9neSBpcyB3ZWxjb21lLik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+V2hldGhlciB0aGUgYWN0dWFsIHNvbHV0aW9uIHJlcXVpcmVzIGNvLXNpZ25p bmcgb3Igc29tZSBvdGhlciBmb3JtIG9mIGFwcHJvdmFsIGlzIGEgc2VwYXJhdGUgcXVlc3Rpb24u PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLy0tLS0tLS0tLS0tLVwmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgLy0tLS0tLS0tLS0tLVw8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC8vLS0tLS0tLS0tLS0tXFwmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgLy8tLS0tLS0tLS0tLS1cXDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgLy8mbmJzcDsgQ28tU2lnbmVkLyZuYnNwOyBcXCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAv LyZuYnNwOyBDby1TaWduZWQvJm5ic3A7IFxcPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyB8fCAmbmJzcDtBcHByb3ZlZCZuYnNwOyZuYnNwOyZuYnNwOyB8fCZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyB8fCZuYnNwOyBBcHByb3ZlZCZuYnNwOyZuYnNwOyZuYnNwOyB8fDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgXFwmbmJzcDsgTWFuaWZlc3QmbmJz cDsmbmJzcDsmbmJzcDsgLy8mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgXFwmbmJzcDsgTWFuaWZlc3QmbmJzcDsmbmJzcDsm bmJzcDsgLy88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IFxcLS0tLS0tLS0tLS0tLy8mIzQzOy0tLS0tLS0tLS0tJiM0MzsgXFwtLS0tLS0tLS0tLS0v Lzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mIzQzOy0tLS0tLS0tJiM0Mzsm bmJzcDsmbmJzcDsgXC0tLS0tLS0tLS0tLS8gfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7IFwtLS0tLS0tLS0tLS0vICYj NDM7LS0tLS0tLS0mIzQzOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij58Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbHQ7Li4uLi4uLi4uLi4u Li4uLi58IFVudHJ1c3RlZCB8Jmx0Oy4uLi4uLi4uLi4uLi4uLi58Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+fCBEZXZpY2UgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8IFN0b3JhZ2UmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8QXBwcm92ZXJ8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PnwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyB8PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiYjNDM7LS0t LS0tLS0mIzQzOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAm IzQzOy0tLS0tLS0tLS0tJiM0MzsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7JiM0MzstLS0tLS0tLSYjNDM7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBePC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAuPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAu PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAvLS0tLS0tLS0tLS0tXCZuYnNwOyZu YnNwOyAuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAvJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFwmbmJzcDsgLjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyBNYW5pZmVzdCZuYnNwOyZuYnNwOyB8Jm5ic3A7 IC48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwO1wmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLyZuYnNwOyAuPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBcLS0tLS0tLS0tLS0tLyZuYnNwOyZuYnNwOyAuPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAu PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAuPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tJiM0Mzs8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgfDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7fCBBdXRob3IgfDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg fCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOy0tLS0tLS0tJiM0Mzs8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+SG93IGRvZXMgdGhpcyBsb29rIGxpa2U/IERvZXMgdGhpcyBhZGRyZXNzIHRoZSBmZWVk YmFjayBkdXJpbmcgdGhlIG1lZXRpbmcgeWVzdGVyZGF5PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DaWFvPGJyPg0KSGFubmVzPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0 aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyDQogaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z ZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91LiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4N ClN1aXQgbWFpbGluZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpTdWl0QGlldGYu b3JnIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnB1cnBsZSI+U3VpdEBpZXRmLm9yZzwvc3Bhbj48 L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmEwMS5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lmll dGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGc3VpdCZhbXA7ZGF0YT0wNCU3QzAxJTdDZHRo YWxlciU0MG1pY3Jvc29mdC5jb20lN0M1ZDhiNTJkYjA4M2E0MmZhNjBlYTA4ZDU3ZTI5YTAzZiU3 QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzY1NTM2Mzk2MDUz NDU4NDIlN0NVbmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpv aVYybHVNeklpTENKQlRpSTZJazFoYVd3aWZRJTNEJTNEJTdDLTEmYW1wO3NkYXRhPXklMkY4TGhr bjdLTVV6RGp6eTZOenh5Q1kzM2pFQ2lPVXRjSW13Y1B3dnNmNCUzRCZhbXA7cmVzZXJ2ZWQ9MCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZjtjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc3VpdDwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_CY4PR21MB08569B2FEF89630A87F8D832A3C00CY4PR21MB0856namp_-- From nobody Tue Feb 27 15:14:52 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BBAF112E9A1; Tue, 27 Feb 2018 15:11:13 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: Kathleen.Moriarty.ietf@gmail.com, suit@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.73.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151977307376.5200.17495888350653537222.idtracker@ietfa.amsl.com> Date: Tue, 27 Feb 2018 15:11:13 -0800 Archived-At: Subject: [Suit] suit - Requested session has been scheduled for IETF 101 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Feb 2018 23:11:14 -0000 Dear Russ Housley, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. suit Session 1 (2:00:00) Monday, Afternoon Session I 1330-1530 Room Name: Buckingham size: 175 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Software Updates for Internet of Things Area Name: Security Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: ipwave lamps stir ipsecme tls sipbrandy curdle dispatch sacm mile teep core ace Second Priority: t2trg lwig 6lo cfrg saag acme perc cbor Third Priority: tcpinc v6ops 6man intarea People who must be present: Russ Housley Dave Thaler Kathleen Moriarty David Waltermire Resources Requested: Special Requests: --------------------------------------------------------- From nobody Wed Feb 28 01:58:59 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AB5712EAF2 for ; Wed, 28 Feb 2018 01:58:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LUM4MFxVlzfA for ; Wed, 28 Feb 2018 01:58:54 -0800 (PST) Received: from ironport01.nordicsemi.no (mx01.nordicsemi.no [194.19.86.146]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05CAF12EAED for ; Wed, 28 Feb 2018 01:58:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=18852; s=default; t=1519811893; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=iq74hlng5FZgg659xn6xdixgrfU/Fbv/Zv7zsM5iN5I=; b=ZgcGwMwxXpEZHQvvh3ehganjy0DvyEIIw7DafVu6nGcUCVyHC7u01MDd OFSniFsPcmowLVjMYDh27OH0rcltuLQtx+Xxl09YpOj2vChcmEy5UsbZD V0Qgb8bL6h1CJJOH6iC1WYa+voCtiZUZzBEzot65lapIxsTMaVGUJT+DQ c=; X-IronPort-AV: E=Sophos;i="5.47,405,1515452400"; d="scan'208,217";a="9805468" From: "Puzdrowski, Andrzej" To: "suit@ietf.org" Thread-Topic: Architecture Drawings Thread-Index: AdOvzo0tTf3mPSYzScaiOphlCE04AAAqNYGA Date: Wed, 28 Feb 2018 09:58:09 +0000 Message-ID: <96d0ec4d8eca4345bc3b5251658ba287@nordicsemi.no> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: multipart/alternative; boundary="_000_96d0ec4d8eca4345bc3b5251658ba287nordicsemino_" MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Architecture Drawings X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 09:58:58 -0000 --_000_96d0ec4d8eca4345bc3b5251658ba287nordicsemino_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi. I Think the first image is also good for P2P solution. For instance small B= luetooth smart device can be updated using smartphone which roles are simul= taneously: untrusted storage: DFU controller (mean that pushes the manifest= with firmware image to the device), initiator, status tracker. From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Tuesday, February 27, 2018 2:33 PM To: suit@ietf.org Subject: [Suit] Architecture Drawings Hi all, at the virtual interim meeting yesterday we had a discussion about the arch= itectural drawings. Currently, there is one figure available that highlight= s the use of end-to-end security. The was, however, the desire expressed to have more figures that explain th= e different delivery methods currently offered. I have come up with two drawings that illustrate the difference between a m= anifest with attached firmware image (shown in Figure 1) and a case where t= he manifest is delivered separately and the devices fetches the firmware im= age from another source (shown in Figure 2). Figure 1 illustrates a case th= at is useful when the device does not have access to the Internet or when t= he update process happens via a USB stick. Figure 2 is the remote update wh= ere the device fetches the firmware image from some file server. /------------\ /------------\ /Manifest with \ /Manifest with \ |attached | |attached | \firmware image/ \firmware image/ \------------/ +-----------+ \------------/ +--------+ | | +--------+ | |<.................| Untrusted |<................| | | Device | | Storage | | Author | | | | | | | +--------+ +-----------+ +--------+ Figure 1: Manifest with attached firmware. /------------\ / \ | Manifest | \ / +--------+ \------------/ +--------+ | |<..............................................>| | | Device | -- | Author | | |<- --- | | +--------+ -- --- +--------+ -- --- --- --- -- +-----------+ -- -- | | -- /------------\ -- | Untrusted |<- /------------\ / \ -- | Storage | / \ | Firmware | | | | Firmware | \ / +-----------+ \ / \------------/ \------------/ Figure 2: Independent retrieval of the firmware image. What do you think? Are those the types of figures you had in mind? What ot= her figures would be useful to add? Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_96d0ec4d8eca4345bc3b5251658ba287nordicsemino_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi.

 

I Think the first image is also= good for P2P solution. For instance small Bluetooth smart device can be up= dated using smartphone which roles are simultaneously: untrusted storage: D= FU controller (mean that pushes the manifest with firmware image to the device), initiator, status tracker.

 

From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig
Sent: Tuesday, February 27, 2018 2:33 PM
To: suit@ietf.org
Subject: [Suit] Architecture Drawings

 

Hi all,

 

at the virtual interim meeting yesterday we had a di= scussion about the architectural drawings. Currently, there is one figure a= vailable that highlights the use of end-to-end security.

The was, however, the desire expressed to have more = figures that explain the different delivery methods currently offered.

 

I have come up with two drawings that illustrate the= difference between a manifest with attached firmware image (shown in Figur= e 1) and a case where the manifest is delivered separately and the devices = fetches the firmware image from another source (shown in Figure 2). Figure 1 illustrates a case that is useful whe= n the device does not have access to the Internet or when the update proces= s happens via a USB stick. Figure 2 is the remote update where the device f= etches the firmware image from some file server.

 

 

=             &nb= sp; /------------\         &nb= sp;       /------------\

=              /M= anifest with \          &= nbsp;    /Manifest with \

=              |a= ttached      |      =          |attached   = ;   |

=              \f= irmware image/          &= nbsp;    \firmware image/

=             &nb= sp; \------------/  +-----------+  \------------/

=   +--------+        &n= bsp;         |   &nb= sp;       |     &nbs= p;           +-------= -+

=   |        |<.................| = Untrusted |<................|        = |

=   | Device |         &nbs= p;        | Storage   | &= nbsp;           &nbs= p;   | Author |

=   |        |    = ;            &n= bsp; |           | &= nbsp;           &nbs= p;   |        |

=   +--------+        &n= bsp;         +-----------+&= nbsp;           &nbs= p;    +--------+

=  

= Figure 1: Manifest with attached firmware.

=  

=  

=             &nb= sp;            =      /------------\

=             &nb= sp;            =     /         &= nbsp;    \

=             &nb= sp;            =     |   Manifest   |

=             &nb= sp;            =     \         &= nbsp;    /

=   +--------+        &n= bsp;         \------------/ &n= bsp;            = ;  +--------+

=   |        |<...................= ...........................>|        = |

=   | Device |         &nbs= p;            &= nbsp;           &nbs= p;          -- | Author |=

=   |        |<-   =             &nb= sp;            =             --= -  |        |

=   +--------+  --       = ;            &n= bsp;            = ;     ---    +--------+

=             &nb= sp;   --         &nb= sp;            =            ---=

=             &nb= sp;     ---       &n= bsp;            = ;        ---

=             &nb= sp;        --    &nb= sp;  +-----------+    --

=             &nb= sp;          --  &nb= sp;  |           |&n= bsp; --

=         /------------\   --&nb= sp;  | Untrusted |<-    /------------\

=        /      &= nbsp;       \    -- | Storage&= nbsp;  |     /      =         \

=        |   Firmware   |&n= bsp;      |      &nb= sp;    |     |   Firmware = ;  |

=        \       =        /     &n= bsp; +-----------+     \    = ;          /=

=         \------------/   =             &nb= sp;           \----------= --/

=  

= Figure 2: Independent retrieval of the firmware image.

 

 

What do you think? Are those the types of figures&nb= sp; you had in mind? What other figures would be useful to add?

 

Ciao

Hannes

 

 

IMPORTANT= NOTICE: The contents of this email and any attachments are confidential an= d may also be privileged. If you are not the intended recipient, please not= ify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or stor= e or copy the information in any medium. Thank you.

--_000_96d0ec4d8eca4345bc3b5251658ba287nordicsemino_-- From nobody Wed Feb 28 02:54:47 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C120E12EAF1 for ; Wed, 28 Feb 2018 02:54:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pYG8xAHY5l8B for ; Wed, 28 Feb 2018 02:54:44 -0800 (PST) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0616.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::616]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87D11127909 for ; Wed, 28 Feb 2018 02:54:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5DbmNj6eiLlMB6LgfuG6LPT9nD6mj0UQSAzfT5feECM=; b=ZJUBHsfFOqUVTYBTKemwk3g0W5HkVf+m1yb/zON7wIWQljXM7FSJlfT8hHfI3OJKUbMdQ2W8n5JgwuTF8umRjPQNPyvtaHcZc5I65jH55Zi2rFD82s6U4uHM5J1PEodnqR5cQ8TWBd0jAqXKXphia7rowqZVXEZWp8lLa3DXA7g= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1554.eurprd08.prod.outlook.com (10.168.5.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Wed, 28 Feb 2018 10:54:41 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Wed, 28 Feb 2018 10:54:40 +0000 From: Hannes Tschofenig To: "Puzdrowski, Andrzej" , "suit@ietf.org" Thread-Topic: Architecture Drawings Thread-Index: AdOvzo0tTf3mPSYzScaiOphlCE04AAAqNYGAAAK+YsA= Date: Wed, 28 Feb 2018 10:54:40 +0000 Message-ID: References: <96d0ec4d8eca4345bc3b5251658ba287@nordicsemi.no> In-Reply-To: <96d0ec4d8eca4345bc3b5251658ba287@nordicsemi.no> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.116.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1554; 7:X8E4XafCpYtGUHeUx1h0U6UWbzmnANfBGoF7+uR0PYuwMey+1SSz90mX3jqwv6SZHtB0lZQzKmmwFWJPr9s7GAQRKvZMO7R7bdo7PxFSeV8AU+E3r3qFw1qYhxa2AUqGpmEs/FNeYxwT5oRxqFR+bNt8Rb6AirWRFqbiNZPbXC0uwZqC03Z/BcVMe1kY6ZTl5Wd/C041l8iAcxgb0vj1B3ZY0Q0beWMCv7bOW71jlCVX6gii+Sm72kWzYU99jZes x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 38dbb3bb-2795-498a-aa1b-08d57e99aaf1 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1554; x-ms-traffictypediagnostic: AM4PR0801MB1554: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231220)(944501217)(52105095)(3002001)(6055026)(6041288)(20161123558120)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(6072148)(201708071742011); SRVR:AM4PR0801MB1554; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1554; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(346002)(366004)(396003)(376002)(40434004)(53754006)(199004)(76104003)(189003)(6506007)(316002)(102836004)(7116003)(26005)(66066001)(9326002)(72206003)(33656002)(106356001)(110136005)(7696005)(59450400001)(81156014)(81166006)(8936002)(8676002)(221733001)(68736007)(3480700004)(2906002)(478600001)(53546011)(6116002)(3280700002)(186003)(790700001)(86362001)(54896002)(9686003)(2900100001)(5660300001)(7736002)(236005)(55016002)(53936002)(6306002)(14454004)(6436002)(229853002)(3846002)(25786009)(6246003)(97736004)(3660700001)(74316002)(99286004)(2950100002)(105586002)(5890100001)(5250100002)(76176011)(2501003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1554; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: CHT4IsUUjR1NkLR+LtEVljQ0KaXjMSw3sPPg4erbwA4tZ+41AwYdYx1ojl2zRYDtdQkPcT+PFg1T0SREP7zIl4PsxNR0EbLKDrHca43Z6DNiv8XuqlXR4Z8I8tgq1qJ9D2HFva+BfHoINKTWDo7LBNGWQgxnVebSmoiKezYvMqw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB27063B1F1797DBBAC30A5650FAC70AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 38dbb3bb-2795-498a-aa1b-08d57e99aaf1 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 10:54:40.4916 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1554 Archived-At: Subject: Re: [Suit] Architecture Drawings X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 10:54:47 -0000 --_000_AM4PR0801MB27063B1F1797DBBAC30A5650FAC70AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Andrzej, I agree with your observation. I guess I should also add Bluetooth Smart as= an example in addition to the USB stick since the Bluetooth case may actua= lly more common in the future. Ciao Hannes From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Puzdrowski, Andrzej Sent: 28 February 2018 10:58 To: suit@ietf.org Subject: Re: [Suit] Architecture Drawings Hi. I Think the first image is also good for P2P solution. For instance small B= luetooth smart device can be updated using smartphone which roles are simul= taneously: untrusted storage: DFU controller (mean that pushes the manifest= with firmware image to the device), initiator, status tracker. From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Tuesday, February 27, 2018 2:33 PM To: suit@ietf.org Subject: [Suit] Architecture Drawings Hi all, at the virtual interim meeting yesterday we had a discussion about the arch= itectural drawings. Currently, there is one figure available that highlight= s the use of end-to-end security. The was, however, the desire expressed to have more figures that explain th= e different delivery methods currently offered. I have come up with two drawings that illustrate the difference between a m= anifest with attached firmware image (shown in Figure 1) and a case where t= he manifest is delivered separately and the devices fetches the firmware im= age from another source (shown in Figure 2). Figure 1 illustrates a case th= at is useful when the device does not have access to the Internet or when t= he update process happens via a USB stick. Figure 2 is the remote update wh= ere the device fetches the firmware image from some file server. /------------\ /------------\ /Manifest with \ /Manifest with \ |attached | |attached | \firmware image/ \firmware image/ \------------/ +-----------+ \------------/ +--------+ | | +--------+ | |<.................| Untrusted |<................| | | Device | | Storage | | Author | | | | | | | +--------+ +-----------+ +--------+ Figure 1: Manifest with attached firmware. /------------\ / \ | Manifest | \ / +--------+ \------------/ +--------+ | |<..............................................>| | | Device | -- | Author | | |<- --- | | +--------+ -- --- +--------+ -- --- --- --- -- +-----------+ -- -- | | -- /------------\ -- | Untrusted |<- /------------\ / \ -- | Storage | / \ | Firmware | | | | Firmware | \ / +-----------+ \ / \------------/ \------------/ Figure 2: Independent retrieval of the firmware image. What do you think? Are those the types of figures you had in mind? What ot= her figures would be useful to add? Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB27063B1F1797DBBAC30A5650FAC70AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Andrzej,

 

I agree with your obse= rvation. I guess I should also add Bluetooth Smart as an example in additio= n to the USB stick since the Bluetooth case may actually more common in the= future.

 

Ciao=

Hannes

 

From:= Suit [mailto:suit-bounces@ietf.org] On Behalf Of Puzdrowski, Andrzej
Sent: 28 February 2018 10:58
To: suit@ietf.org
Subject: Re: [Suit] Architecture Drawings

 

Hi.

 

I Think the first image is also= good for P2P solution. For instance small Bluetooth smart device can be up= dated using smartphone which roles are simultaneously: untrusted storage: D= FU controller (mean that pushes the manifest with firmware image to the device), initiator, status tracker.

 

From: Suit [mailto:suit-bounces= @ietf.org] On Behalf Of Hannes Tschofenig
Sent: Tuesday, February 27, 2018 2:33 PM
To: suit@ietf.org
Subject: [Suit] Architecture Drawings

 

Hi all,

 

at the virtual interim meeting yesterday we had a di= scussion about the architectural drawings. Currently, there is one figure a= vailable that highlights the use of end-to-end security.

The was, however, the desire expressed to have more = figures that explain the different delivery methods currently offered.

 

I have come up with two drawings that illustrate the= difference between a manifest with attached firmware image (shown in Figur= e 1) and a case where the manifest is delivered separately and the devices = fetches the firmware image from another source (shown in Figure 2). Figure 1 illustrates a case that is useful whe= n the device does not have access to the Internet or when the update proces= s happens via a USB stick. Figure 2 is the remote update where the device f= etches the firmware image from some file server.

 

 

=             &nb= sp; /------------\         &nb= sp;       /------------\

=              /M= anifest with \          &= nbsp;    /Manifest with \

=              |a= ttached      |      =          |attached   = ;   |

=              \f= irmware image/          &= nbsp;    \firmware image/

=             &nb= sp; \------------/  +-----------+  \------------/

=   +--------+        &n= bsp;         |   &nb= sp;       |     &nbs= p;           +-------= -+

=   |        |<.................| = Untrusted |<................|        = |

=   | Device |         &nbs= p;        | Storage   | &= nbsp;           &nbs= p;   | Author |

=   |        |    = ;            &n= bsp; |           | &= nbsp;           &nbs= p;   |        |

=   +--------+        &n= bsp;         +-----------+&= nbsp;           &nbs= p;    +--------+

=  

= Figure 1: Manifest with attached firmware.

=  

=  

=             &nb= sp;            =      /------------\

=             &nb= sp;            =     /         &= nbsp;    \

=             &nb= sp;            =     |   Manifest   |

=             &nb= sp;            =     \         &= nbsp;    /

=   +--------+        &n= bsp;         \------------/ &n= bsp;            = ;  +--------+

=   |        |<...................= ...........................>|        = |

=   | Device |         &nbs= p;            &= nbsp;           &nbs= p;          -- | Author |=

=   |        |<-   =             &nb= sp;            =             --= -  |        |

=   +--------+  --       = ;            &n= bsp;            = ;     ---    +--------+

=             &nb= sp;   --         &nb= sp;            =            ---=

=             &nb= sp;     ---       &n= bsp;            = ;        ---

=             &nb= sp;        --    &nb= sp;  +-----------+    --

=             &nb= sp;          --  &nb= sp;  |           |&n= bsp; --

=         /------------\   --&nb= sp;  | Untrusted |<-    /------------\

=        /      &= nbsp;       \    -- | Storage&= nbsp;  |     /      =         \

=        |   Firmware   |&n= bsp;      |      &nb= sp;    |     |   Firmware = ;  |

=        \       =        /     &n= bsp; +-----------+     \    = ;          /=

=         \------------/   =             &nb= sp;           \----------= --/

=  

= Figure 2: Independent retrieval of the firmware image.

 

 

What do you think? Are those the types of figures&nb= sp; you had in mind? What other figures would be useful to add?

 

Ciao

Hannes

 

 

IMPORTANT= NOTICE: The contents of this email and any attachments are confidential an= d may also be privileged. If you are not the intended recipient, please not= ify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or stor= e or copy the information in any medium. Thank you.

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB27063B1F1797DBBAC30A5650FAC70AM4PR0801MB2706_-- From nobody Wed Feb 28 02:55:41 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FA6612EAFA for ; Wed, 28 Feb 2018 02:55:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.311 X-Spam-Level: X-Spam-Status: No, score=-4.311 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=infineon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yBqPByCXY60z for ; Wed, 28 Feb 2018 02:55:36 -0800 (PST) Received: from smtp2.infineon.com (smtp2.infineon.com [IPv6:2a00:18f0:1e00:4::4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81E5D12EAF1 for ; Wed, 28 Feb 2018 02:55:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL; t=1519815335; x=1551351335; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=xPyWhvtDZoeqmnOCD5axg981ti/s4tTbYeGRUzvwyG0=; b=VHs8GlGnQQhHpWNXPeJ2PYnI6VYggT1lJkOeR68Lwd/k4M1CBw2LCPw0 U7DXAOxTVq1eAQGuxIC33ptmpuiuNkvqlmve/PKZ/8GacX2cBTdAjvTLc 7wkpMGJWemK9gwQNQgflrVNIVFe2PqdNneXvqatDACukAwsNyWZLbBtzg w=; X-SBRS: None Received: from unknown (HELO mucxv001.muc.infineon.com) ([172.23.11.16]) by smtp2.infineon.com with ESMTP/TLS/AES256-GCM-SHA384; 28 Feb 2018 11:55:33 +0100 Received: from MUCSE707.infineon.com (MUCSE707.infineon.com [172.23.7.81]) by mucxv001.muc.infineon.com (Postfix) with ESMTPS; Wed, 28 Feb 2018 11:55:33 +0100 (CET) Received: from MUCSE703.infineon.com (172.23.7.73) by MUCSE707.infineon.com (172.23.7.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Wed, 28 Feb 2018 11:55:32 +0100 Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE703.infineon.com (172.23.7.73) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Wed, 28 Feb 2018 11:55:32 +0100 Received: from MUCSE702.infineon.com ([172.23.106.22]) by MUCSE702.infineon.com ([172.23.106.22]) with mapi id 15.01.1415.003; Wed, 28 Feb 2018 11:55:32 +0100 From: To: , , Thread-Topic: Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQXZlIcw Date: Wed, 28 Feb 2018 10:55:32 +0000 Message-ID: <116e2b54ce094fc1922422b239ae3da6@infineon.com> References: In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.23.8.247] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 10:55:39 -0000 Hannes, Brendan, All >>we just submitted updates to the manifest and the architecture documents. >>Here are the two drafts: https://tools.ietf.org/html/draft-moran-suit-architecture-01 Thanks for the update. Adding section 11 is really valuable when it comes t= o understanding where the fields of the manifest are derived.=20 Please find my comments and questions below after a first review of the Arc= hitecture Document. I hope this is the right form to address this. Any comments, feedback, clar= ification, corrections are appreciated. *Page 6, Section 3.3 Uses state-of-the-art security mechanisms: State-of the-art security can mean a lot of things and is really very high = level. Would it make sense to specify this a bit more. E.g.: -There has been discussion on Resistance against Quantum Cryptography on th= e mailing list. Is it worth mentioning? -Does it make sense to specify the minimum Security Strength of Algorithms = required for the IETF SUIT? E.g. The Security Strength (Bits of Security) of Cryptographic Algorithms u= sed to provide firmware image authentication and confidentiality protection= must be 128 Bits of Security or greater .... (Security Strength Definitions can be found in NIST SP 800-57 Part1, Sectio= n 5.6.1. Note I am not suggesting only to allow algorithms listed in SP 800= -57) * Page 6, Section 3.4 Rollback attacks must be prevented=20 -I am not sure how the last paragraphs (manifest parsing) relates to rollba= ck protection? I would have rather expected some text as described in section 11.2.1 *Page 6, Section 3.5 High Reliability Reading on page 12, Section 8 its states the following is _out of scope_: 'installing firmware updates in a robust fashion so that the update does no= t break the device functionality of the environment this device operates in= ' -This seems to be in conflict what is stated in Section 3.5 as Requirement? -In addition shall the IoT Firmware Update Architecture really limit the up= date to a Dual Image Approach ? Of course it is the most robust approach, but due to NVM Constraints of Dev= ices a Single Image Update should not be excluded. *Page 6, Minimal bootloader -What does 'validate the received _firmware_' mean? I would assume it means to validate the manifest including verification of = manifest signature, validation of manifest claims and Check of Hash over Fi= rmware Image and optionally decryption of the received firmware image...? In general it is unclear what is the meaning of '_firmware_' in this sectio= n (manifest and firmware image OR firmware image only) , since the term 'fi= rmware' by itself in not defined/mentioned in Section 2 and some parts of t= he architecture explicitly use 'firmware image' and other sections talk abo= ut 'firmware' (e.g. Section 6 Example Flow, where I would interpret that fi= rmware means firmware image) *Page 9, Section 4 Architecture It states: " For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key of a device." There are also Symmetric Key Options (Recipient Algorithms) for Content Enc= ryption Key (CEK) Distribution, which is actually already stated in the man= ifest draft . -Therefore the above sentence should be updated to reflect, clarify also us= age of symmetric keys as an additional option for confidentiality protectio= n!? *Page 19, Section 11.3.5 & Page 24, Section 11.6.11=20 With the update of the Threat Model for the first time symmetric signatures= come into the picture as a requirement. In 11.6.11 states: " .. If Message Authentication Codes (MAC) are used for= authenticity, then devices MUST have unique pre-hared keys." In the previous Architecture Version 00 it stated " Future versions may als= o describe a symmetric key approach for very constrained devices" Some comments for discussion: While the benefit of symmetric device individual signatures is to support v= ery constrained devices with non-public key cryptography support, it comes = with some drawbacks: 1) cost of complexity for symmetric device individual key management ; 2) Device Individual Manifests are non broadcast friendly requiring some fo= rm of online environment versus e.g. utilizing an store and forward archite= cture; 3) Impact to some already defined requirements: E.g. how to comply to MSFR6= =20 (Handling Authorship right and a Qualification right with symmetric device = individual signatures seems to be very hard in practice in my opinion) If there is a requirement to support symmetric signatures (which is my inte= rpretation from 11.3.5 and 11.6.11) then: 1) To be consistent it should also be stated in Section 4 Architecture, whe= re currently only public key cryptography is stated (..We use public key cr= yptography to accomplish this..) ?=20 2) The drawbacks and potential conflicts to part of the architecture should= be documented=20 3) Potentially it should be stated that Public Key Cryptography is the pref= erred choice... ? -The other alternative would be to focus on asymmetric signatures only in t= he first version... * Section 11. Threat Description, General Comment Although Confidentiality Protection is optional I currently don't see this = topic addressed in section 11 (and hence no requirements for key managemen= t fields for payload protection in section 11.6 Manifest Fields ). Therefore I see two possible topics where it might make sense to add: 1) Add a Threat in Section 11.2, Reverse Engineering Of Firmware Image for = Vulnerability Analysis:=20 An Attacker wants to mount an attack on an IoT Device. To prepare the atta= ck he retrieves the provided Firmware Image and performs reverse engineerin= g of the Firmware Image to analyze it for specific vulnerabilities. 2) Add a Use Case in Section 11.4, IP Protection: As an OEM or Developer for IoT devices, I want to protect the IP contained= in the Firmware Image. -Would the above or similar text make sense to add to be consistent how the= Manifest Fields are derived in section 11.6? Thanks, Markus This e-mail and any attachments are confidential. They are intended solely = for the attention and use of the named addressee(s). If you are not the nam= ed addressee(s) you must not use, disclose, retain or reproduce all or any = part of the information contained in this e-mail or any attachments. Any un= authorized use or disclosure may be unlawful. If you have received this e-m= ail by mistake, please inform the sender immediately and delete it and all = copies from your system and destroy any hard copies of it. From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Monday, January 29, 2018 4:03 PM To: suit@ietf.org Subject: [Suit] Manifest and architecture drafts updated Hi all,=20 we just submitted updates to the manifest and the architecture documents. H= ere are the two drafts:=20 https://tools.ietf.org/html/draft-moran-suit-manifest-01 https://tools.ietf.org/html/draft-moran-suit-architecture-01 The architecture document got enhanced to now include a threat analysis, se= curity requirements, user stories, etc. This additional text has been motiv= ated by mailing list discussions late last year. The text explains the pres= ence of attributes in the manifest and the security mechanisms needed to pr= otect them.=20 Here is the diff:=20 https://www.ietf.org/rfcdiff?url2=3Ddraft-moran-suit-architecture-01 The manifest document has only seen editorial updates, see https://www.ietf= .org/rfcdiff?url2=3Ddraft-moran-suit-manifest-01 Thanks for the feedback so far.=20 Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you.=20 From nobody Wed Feb 28 08:34:44 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D1C912D871 for ; Wed, 28 Feb 2018 08:34:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8v1q61tQL1-I for ; Wed, 28 Feb 2018 08:34:41 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on060f.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::60f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F1DC124B17 for ; Wed, 28 Feb 2018 08:34:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=YwQLMDFjZ/uuRa/geMQEn4+Imkpm7jxed0GuzOL17TQ=; b=BBurBbnwN4oEo+YAUYjxX3xdNqfs80ufJvPcnuVSWPr03RePftrHlDRIgOtfdRbjpF8nbBqXmRpJdd0wK/ep2oP4VOju0yizLsUD/u9hFKcnxdvzc66P0I13ZJrFIjfgET5rWLoDfN5VMVJFZTVOAoM/loPMNd9iKUw8hbgeP1E= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2737.eurprd08.prod.outlook.com (10.167.90.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.527.15; Wed, 28 Feb 2018 16:34:37 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Wed, 28 Feb 2018 16:34:37 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: London IETF Hackathon: Firmware Update Coding Thread-Index: AdOwsfviL/u2jrWxTxuRlzXDudz7TQ== Date: Wed, 28 Feb 2018 16:34:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2737; 7:UDbED1ph/fk0JWyJ3W//3rdycq9V6xssEMrflh2apsqZtXNDLqtkJ8Qckq4q9Y0Rfa+nBcSiK4keCV1pCVPfOvK2xCuG/YceSTu9N+6a+T1wOtWNr5G8j66jbGYHMCiI0ICIiUqJP99+WGym9TwX9y/8vyEZxMLap+lofrD1bBsDre0wowIscGt1Pp8c9jzNVo1oYHRDkRsBndL+jmf3XxJLUpeuz11cjk/rNBwhLidPugZ1VRJSp6FEM1zg4Ry5 x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8c713fa6-cfa2-40a3-2eac-08d57ec92878 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2737; x-ms-traffictypediagnostic: AM4PR0801MB2737: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3231220)(944501161)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041288)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(6072148)(201708071742011); SRVR:AM4PR0801MB2737; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2737; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(376002)(39380400002)(396003)(346002)(53754006)(40434004)(199004)(189003)(81166006)(26005)(7696005)(6506007)(7110500001)(5640700003)(55016002)(2900100001)(9686003)(99286004)(6116002)(2351001)(3846002)(97736004)(6916009)(790700001)(86362001)(66066001)(102836004)(8936002)(5890100001)(81156014)(5250100002)(106356001)(6306002)(2501003)(8676002)(6436002)(186003)(54896002)(33656002)(4743002)(3280700002)(72206003)(68736007)(3660700001)(25786009)(14454004)(1730700003)(5630700001)(15650500001)(5660300001)(2906002)(10710500007)(478600001)(59450400001)(53936002)(74316002)(105586002)(7736002)(316002)(2420400007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2737; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: I1bPQ8ZPtiwqnNWea3EK52Dn+SDwI5nODEKr6Wl9mZWft4Swm63bFgH+/WownA6R1K5MT5NVGGIaK2jQOBSR0FXXxhAIF6eBDlzX4KpGpjEJBzNB3jvnJEWWcLfwFobFdCClSP0cWQWruhWPw7Qvl2G+HeGsXwmStlRvFYSyBNA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB27068DFE9FE372A267F85C23FAC70AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8c713fa6-cfa2-40a3-2eac-08d57ec92878 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 16:34:37.4034 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2737 Archived-At: Subject: [Suit] London IETF Hackathon: Firmware Update Coding X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 16:34:43 -0000 --_000_AM4PR0801MB27068DFE9FE372A267F85C23FAC70AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, at the conference call on Monday Dave Thaler and Dave Waltermire suggested = to do some firmware update work at the London IETF Hackathon, which will ta= ke place on Saturday March 17 and 18. I volunteered to help with the organization. I had been thinking about bringing a few developer boards running Arm-based= microcontrollers with me so that we have some real stuff to work with. Needless to say that it would be good for me to know who is interested in s= uch a hackathon. Please drop me a private message, if you would like to par= ticipate. This would also help me to understand who is interested in what. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB27068DFE9FE372A267F85C23FAC70AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

at the conference call on Monday Dave Thaler and Dav= e Waltermire suggested to do some firmware update work at the London IETF H= ackathon, which will take place on  Saturday March 17 and 18.

 

I volunteered to help with the organization.

 

I had been thinking about bringing a few developer b= oards running Arm-based microcontrollers with me so that we have some real = stuff to work with.

 

Needless to say that it would be good for me to know= who is interested in such a hackathon. Please drop me a private message, i= f you would like to participate. This would also help me to understand who = is interested in what.

 

Ciao
Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB27068DFE9FE372A267F85C23FAC70AM4PR0801MB2706_-- From nobody Wed Feb 28 08:38:20 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB7D7124B17 for ; Wed, 28 Feb 2018 08:38:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id niLGP9XKNKlT for ; Wed, 28 Feb 2018 08:38:07 -0800 (PST) Received: from mail-ua0-x229.google.com (mail-ua0-x229.google.com [IPv6:2607:f8b0:400c:c08::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BBC812D960 for ; Wed, 28 Feb 2018 08:37:33 -0800 (PST) Received: by mail-ua0-x229.google.com with SMTP id f5so1937733uam.5 for ; Wed, 28 Feb 2018 08:37:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to; bh=ac4OhPJfQZ8PhVA4J0aY4XVSZ4yhw6/mVBLvL/xyK8c=; b=D0tBF1did6gRXm1wGsvkY9uV+0v0cdhDel+yBit+/IQjG0bS8iZOi/9xZQCujCTNbu zxX4v4qQ26INU40GqrMUDgm9ok/YY0LSOcnA6Ik9Qh3kMcWkSDEHUxDNDg95qAJuxTy6 xTlxhgFpkOp8rK0IE0xSvs03kTPbDWqQZPh2Kg/cdYpgTVus+Quk0Y0kSqe04W5i+9/C UbRE+ecxr1UM2YjNKCO3c7+hVwHMuK/P7lgFezMdpReA6Sq5SwY9TfsJ0XK8ykAWAISH q7hNW+KB8qb/SzQ6lMOIYcjOtaURBrm+w7hOMjFueG+BxlWrHVqyHSvx/tbPGEggiQqv WOgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to; bh=ac4OhPJfQZ8PhVA4J0aY4XVSZ4yhw6/mVBLvL/xyK8c=; b=dbLUJJV/j/yvazb5hriBoSl/L9ifx4jlVywQbJNFwjpDrOBK0dAJIibHd1Av5dEfGE Hyb+fiG2mOuCkGLV0v5es7ZBIxfwaMsuupmNdZWgK0rztGty5QubQbZTXMYNu9CuvKFK h+kQo7q2eCOH0fwF7aGnvT1ALeA3B5mk88Re/H5zYSvx1zNCfFL5j+XOJNmAj61HL8Uf GOP5RVsFNQmJq+UPuJH6DACkei+B6s3QysFaGpyqBDvB7JkCOspA6XX4k0ArQi+Li+NP Sx6vYhd83CjP+cLNb9BBBj8L910V8P/bYxwTyufm9x97NvoYp9p15qMpSilWPDG7/lBF 50kQ== X-Gm-Message-State: APf1xPBJ0RjEu5HhALhNoDnKLVuYrDMGAhQCLPY/Yk8BbG6R+9ymBt7N Pp2GAsGh0J0iBZdVtV80ix4jCe7Ha6rKyobqcuo= X-Google-Smtp-Source: AG47ELv9kthfUFzMtdbCJJWEPkx7eUI/zFtpNw0km/vmKJBvPO6USAHsv/f+BxyPBJO4X0VsbnK5ALML9HY2F94jF5I= X-Received: by 10.159.54.38 with SMTP id r35mr14021681uad.133.1519835852037; Wed, 28 Feb 2018 08:37:32 -0800 (PST) MIME-Version: 1.0 Sender: emmanuel.baccelli@gmail.com Received: by 10.176.3.146 with HTTP; Wed, 28 Feb 2018 08:37:11 -0800 (PST) In-Reply-To: References: From: Emmanuel Baccelli Date: Wed, 28 Feb 2018 17:37:11 +0100 X-Google-Sender-Auth: sCAMacHSNbD7TyJu38xpdoZ0p_8 Message-ID: To: suit@ietf.org Content-Type: multipart/alternative; boundary="001a11454a0813e2c10566485c51" Archived-At: Subject: Re: [Suit] London IETF Hackathon: Firmware Update Coding X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 16:38:09 -0000 --001a11454a0813e2c10566485c51 Content-Type: text/plain; charset="UTF-8" Hi Hannes, what boards are you thinking about, more precisely? Best Emmanuel On Wed, Feb 28, 2018 at 5:34 PM, Hannes Tschofenig < Hannes.Tschofenig@arm.com> wrote: > Hi all, > > > > at the conference call on Monday Dave Thaler and Dave Waltermire suggested > to do some firmware update work at the London IETF Hackathon, which will > take place on Saturday March 17 and 18. > > > > I volunteered to help with the organization. > > > > I had been thinking about bringing a few developer boards running > Arm-based microcontrollers with me so that we have some real stuff to work > with. > > > > Needless to say that it would be good for me to know who is interested in > such a hackathon. Please drop me a private message, if you would like to > participate. This would also help me to understand who is interested in > what. > > > > Ciao > Hannes > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > > --001a11454a0813e2c10566485c51 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hannes,

what boards are you thinking= about, more precisely?

Best

<= div>Emmanuel

On Wed, Feb 28, 2018 at 5:34 PM, Hannes Tschofenig <Hannes.= Tschofenig@arm.com> wrote:

Hi all,

=C2=A0

at the conference call on Monday Dave Thaler and Dav= e Waltermire suggested to do some firmware update work at the London IETF H= ackathon, which will take place on =C2=A0Saturday March 17 and 18.

=C2=A0

I volunteered to help with the organization. =

=C2=A0

I had been thinking about bringing a few developer b= oards running Arm-based microcontrollers with me so that we have some real = stuff to work with.

=C2=A0

Needless to say that it would be good for me to know= who is interested in such a hackathon. Please drop me a private message, i= f you would like to participate. This would also help me to understand who = is interested in what.

=C2=A0

Ciao
Hannes

=C2=A0

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit


--001a11454a0813e2c10566485c51-- From nobody Wed Feb 28 08:50:16 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1403112D960 for ; Wed, 28 Feb 2018 08:50:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.911 X-Spam-Level: X-Spam-Status: No, score=-2.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Svi503miFsdY for ; Wed, 28 Feb 2018 08:50:08 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0044.outbound.protection.outlook.com [104.47.1.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 402D712D871 for ; Wed, 28 Feb 2018 08:50:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=LdVAFfFbUGs7GUufcOsICVEY/hHaqlgZ/uVklqoN430=; b=rk8RoB4LvCZC9whLgLPbpaSg4KXcZtNSanLfF36sEeD3uhlF9uvpx7pmOxi3shBIt7lrZu1XJRPEQRrgKM43UzaGq6s/lVGNpmpV6MRln9DkcPzD7V7+Vw0l0frUzUCiX3oFzN/PUzQXPrhIqdjgQkmFujMmy9ddncePaaPruLU= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2707.eurprd08.prod.outlook.com (10.167.90.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Wed, 28 Feb 2018 16:49:58 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Wed, 28 Feb 2018 16:49:57 +0000 From: Hannes Tschofenig To: Michael Richardson CC: "suit@ietf.org" Thread-Topic: [Suit] Approval of Firmware Update Thread-Index: AdOv0PAESicpWVavR5e4qF3taZhahAAKSCgAAC5mo8A= Date: Wed, 28 Feb 2018 16:49:57 +0000 Message-ID: References: <24389.1519756668@obiwan.sandelman.ca> In-Reply-To: <24389.1519756668@obiwan.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2707; 7:BFTwPXJjtbLswcO3/Y81QFEIzj1S30u3P+4GaJMXHKLJKBbECoxeSePY5YLqGdDzE4Q8WB6ynM5cUeS2QpZYsKdFqxTuIoOGca5Jr6Qn/eRP6EUyXpt1KBmYvzRrgRx8qjP8Av7fwwbE/NhI1QRMzPpZyJCsn9kEAfKhe1W47Nzaqev/0/o9/LiuXXmxnqjzIjg7XTsDSi68FfaworledxEcUbEOf2DqNft997J2BmoRVagvEswycdxstJ2/qFKt x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 3d5ab53d-7de5-4cd9-f7d0-08d57ecb4d17 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2707; x-ms-traffictypediagnostic: AM4PR0801MB2707: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(180628864354917)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231220)(944501217)(52105095)(3002001)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123564045)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB2707; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2707; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(346002)(39860400002)(366004)(396003)(189003)(199004)(40434004)(51444003)(13464003)(26005)(2950100002)(8676002)(72206003)(7736002)(68736007)(86362001)(3846002)(6116002)(99286004)(3660700001)(106356001)(2906002)(8936002)(76176011)(105586002)(74316002)(15650500001)(7696005)(478600001)(81156014)(305945005)(316002)(3280700002)(81166006)(55016002)(5890100001)(9686003)(102836004)(59450400001)(53936002)(66066001)(53546011)(6506007)(6246003)(5250100002)(229853002)(33656002)(25786009)(6346003)(6436002)(2900100001)(97736004)(14454004)(186003)(4326008)(5660300001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2707; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-microsoft-antispam-message-info: R4Nny6OwGAZrqlM4QJ9Z/NqkHGN8++c0L6nkORALW5HTCgwUEMIVoKLEMGp3DE2Ab+zz61GojSU7Jcv87Zmhidfh/jM5+XlTCZnFLwN1SSL3sVbiXelBQ0zdfTKQDxa5kq/LAi0JyNRtAXH94Pw0mt3q6h1elgvBQYLK2FLNn3M= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3d5ab53d-7de5-4cd9-f7d0-08d57ecb4d17 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 16:49:57.8732 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2707 Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 16:50:15 -0000 SGkgTWljaGFlbCwNCg0KSSBiZWxpZXZlIHRoZSBjb25zZW5zdXMgc28gZmFyIHdhcyB0aGF0IHdl IHdhbnQgdG8gb2ZmZXIgdGhlIHBvc3NpYmlsaXR5IGZvciBvbmUgb3IgbW9yZSB0aGFuIG9uZSBz aWduYXR1cmUuIEkgcGVyc29uYWxseSBiZWxpZXZlIHRoYXQgdGhlIHNpbmdsZSBzaWduYXR1cmUg Y2FzZSB3aWxsIGJlIHZlcnkgY29tbW9uIGluIHByYWN0aWNlIChldmVuIGlmIHRoZSBhcHByb3Zh bCBwcm9jZXNzIGlzIG1vcmUgY29tcGxleCkuDQoNCkNpYW8NCkhhbm5lcw0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogTWljaGFlbCBSaWNoYXJkc29uIFttYWlsdG86bWNyK2ll dGZAc2FuZGVsbWFuLmNhXQ0KU2VudDogMjcgRmVicnVhcnkgMjAxOCAxOTozOA0KVG86IEhhbm5l cyBUc2Nob2ZlbmlnDQpDYzogc3VpdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtTdWl0XSBBcHBy b3ZhbCBvZiBGaXJtd2FyZSBVcGRhdGUNCg0KDQpIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbT4gd3JvdGU6DQogICAgPiB5ZXN0ZXJkYXkgd2UgYWxzbyBzcG9rZSBh Ym91dCB0aGUgY28tc2lnbmluZyAvIGFwcHJvdmluZyBhIGZpcm13YXJlDQogICAgPiB1cGRhdGUg dGhyb3VnaCBhIHBhcnR5IG90aGVyIHRoYW4gdGhlIGF1dGhvciBwcm9kdWNpbmcgdGhlIGZpcm13 YXJlLg0KDQpHb29kLg0KDQogICAgPiBGb3IgdGhpcyBwdXJwb3NlIEkgY3JlYXRlZCBhbm90aGVy IGRyYXdpbmcgYW5kIGFsc28gaW50cm9kdWNlZCBhbm90aGVyDQogICAgPiByb2xlLCBuYW1lbHkg dGhlIOKAnGFwcHJvdmVy4oCdLiAoU3VnZ2VzdGlvbiBmb3IgYmV0dGVyIHRlcm1pbm9sb2d5IGlz DQogICAgPiB3ZWxjb21lLikNCg0KSW4gbXkgbWluZCwgdGhlIHNob3VsZCByZWFsbHkgb25seSBi ZSB0aGUgYXBwcm92ZXIsIGFuZCB0aGVyZSBzaG91bGQgcHJvYmFibHkgb25seSBiZSBvbmUgc2ln bmF0dXJlIHRoYXQgdGhlIGVuZCBkZXZpY2UgbG9va3MgZm9yLg0KDQpJIHRoaW5rIHRoYXQgYWxs IHRoZSBjb21wbGV4IHNpdHVhdGlvbnMgd2Ugd2FudCAoYXV0aG9yIHNpZ25zIGZpcm13YXJlLCBy ZXZpZXdlciBzaWducyBpdCwgcGxhbnQgb3BlcmF0aW9uIHNpZ25zIGl0LCBvcGVyYXRvciBzaWdu cyBpdCBmb3Igb2RkLW51bWJlcmVkIGRldmljZXMuLi4pIHNob3VsZCByZWFsbHkgYWJvdXQgaG93 IHRoZSBkZXZpY2UgZ29lcyBmcm9tIHRoZSBidWlsdC1pbiB0cnVzdCBhbmNob3JzIHRvIHRoZSBh dXRob3JpdGF0aXZlIGVudGl0eS4gIEl0IGNvdWxkIGJlIHRoYXQgd2UgY2FuIHVzZSBTQU1MIG9y IFNQS0kgb3IgPz8/IGZvciB0aGlzLg0KDQotLQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVU RkBzYW5kZWxtYW4uY2E+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgIC09IElQdjYgSW9UIGNv bnN1bHRpbmcgPS0NCg0KDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlz IGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28g YmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxl YXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhl IGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9y IHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4N Cg== From nobody Wed Feb 28 08:57:56 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83A4612D960 for ; Wed, 28 Feb 2018 08:57:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f4RilNdmq3sD for ; Wed, 28 Feb 2018 08:57:49 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0043.outbound.protection.outlook.com [104.47.1.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 727B7120047 for ; Wed, 28 Feb 2018 08:57:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VISxpWlF6fJLbFYNhNnDL6SNZW76YcSmnTPZxKd1XYM=; b=hg7Zr+1UqDFhAGW8VijIIGIEGw1xSWSSF6Xo5vvgMkwxFV36kgykak12UE6OqgG0P6xzYKv5zvZbGVmyoW599TVusUsNxSfgCr5M1IK/D3AXCEHTJMuctA1TZe0LTZ9t4oxPYlnQleqnKZ0WRAReuWE8I6HU/BDpIsQfGYtfAao= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1554.eurprd08.prod.outlook.com (10.168.5.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.506.18; Wed, 28 Feb 2018 16:57:45 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Wed, 28 Feb 2018 16:57:45 +0000 From: Hannes Tschofenig To: Russ Housley CC: "suit@ietf.org" Thread-Topic: [Suit] Approval of Firmware Update Thread-Index: AdOv0PAESicpWVavR5e4qF3taZhahAAQYhkAAChheyA= Date: Wed, 28 Feb 2018 16:57:45 +0000 Message-ID: References: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> In-Reply-To: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1554; 7:je3xeUNagKSLrPMPlr2BySseIWebrRrGbP0/adYwQArcXN53mQcMunSAB2ZIHtBn2icyWlDEse6hINiL18M8brrfY29WmPdVg70NlUK7OssI7GRYAqXjqGRpY9tZAqsCoeZyhqQaeI8dR3qQk0d3WwD2lO2TcaEN8CYIz/CrEqqhQSq7tvFiABuKXImPR1V/efpfRljhxOcfEB5Z8TfBaKE7uCMaZ2sNNmg3P4pKT8ObyWhPXWW8Je4yFHoN/9JD x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b35dc706-7f52-431e-1266-08d57ecc6392 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1554; x-ms-traffictypediagnostic: AM4PR0801MB1554: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(3231220)(944501217)(52105095)(93006095)(93001095)(10201501046)(6055026)(6041288)(20161123564045)(20161123562045)(20161123560045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:AM4PR0801MB1554; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1554; x-forefront-prvs: 0597911EE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(39860400002)(346002)(366004)(396003)(376002)(40434004)(76104003)(199004)(189003)(6506007)(316002)(102836004)(26005)(66066001)(9326002)(72206003)(33656002)(106356001)(7696005)(7110500001)(59450400001)(10710500007)(8676002)(2420400007)(8936002)(81156014)(81166006)(68736007)(478600001)(2906002)(6116002)(3280700002)(186003)(15650500001)(86362001)(790700001)(54896002)(7736002)(9686003)(2900100001)(5660300001)(4326008)(55016002)(53936002)(14454004)(6306002)(3846002)(6436002)(229853002)(25786009)(6246003)(3660700001)(74316002)(97736004)(6916009)(2950100002)(105586002)(99286004)(5250100002)(5890100001)(76176011); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1554; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: zQj46AA9KVhjwDb2P7WLBf2rhHXKITghzjjQHeDW9/2PtNZSxGDSe4Fo8MiUKXN59uUqEflzUxjTA9/APUJBeNI40tCNhrd/IyPD7XNxvlKCI5Nhqy2fsvCFFpZ6RVwCINNLPcONZY8C9KMPiJZvYEirHaQZe7SWrJs/7//WHMQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706156D8B74F7D64338980FFAC70AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: b35dc706-7f52-431e-1266-08d57ecc6392 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2018 16:57:45.0957 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1554 Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 16:57:52 -0000 --_000_AM4PR0801MB2706156D8B74F7D64338980FFAC70AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUnVzcywNCg0KDQrDmCAgV2h5IG5vdCBzaWduZXI/ICBUaGUgcXVhbGl0eSBjb250cm9sIC8g cmVsZWFzZSBwcm9jZXNzIHdpbGwgYmUgZGlmZmVyZW50IGluIG1hbnkgc2l0dWF0aW9ucywgYnV0 IHNpZ25pbmcgdGhlIGZpcm13YXJlIHNob3VsZCBiZSB0aGUgZmluYWwgc3RlcC4NCg0KQ3VycmVu dGx5IHRoZSBkZWZpbml0aW9uIG9mIHRoZSBhdXRob3Igc2F5czoNCg0KICAgLSAgQXV0aG9yOiBU aGUgYXV0aG9yIGlzIHRoZSBlbnRpdHkgdGhhdCBjcmVhdGVzIHRoZSBmaXJtd2FyZSBpbWFnZSwN CiAgICAgIHNpZ25zIGFuZC9vciBlbmNyeXB0cyBpdCBhbmQgYXR0YWNoZXMgYSBtYW5pZmVzdCB0 byBpdC4gIFRoZQ0KICAgICAgYXV0aG9yIGlzIG1vc3QgbGlrZWx5IGEgZGV2ZWxvcGVyIHVzaW5n IGEgc2V0IG9mIHRvb2xzLg0KDQpJbiB0aGF0IHNlbnNlIGhlIGlzIGFsc28gYSBzaWduZXIuIE9m IGNvdXJzZSwgd2UgY2FuIGNoYW5nZSB0aGUgYXV0aG9yIHRvIGRldmVsb3BlciBhbmQganVzdCBk ZWZpbmUgaXQgYXMNCg0KICAgLSAgRGV2ZWxvcGVyOiBUaGUgZGV2ZWxvcGVyIGlzIHRoZSBlbnRp dHkgdGhhdCBjcmVhdGVzIHRoZSBmaXJtd2FyZSBpbWFnZS4NCg0KQW5kIHRoZW4gd2Ugd291bGQg aGF2ZSB0byBhZGQgdGhlIHNpZ25lcjoNCg0KICAgLSAgU2lnbmVyOiBUaGUgc2lnbmVyIGlzIHRo ZSBlbnRpdHkgdGhhdCBhcHByb3ZlcyB0aGUgZGlzdHJpYnV0aW9uIG9mIHRoZQ0KICAgICAgZmly bXdhcmUgYW5kIHNpZ25zIHRoZSBtYW5pZmVzdCBhbmQgb3B0aW9uYWxseSBlbmNyeXB0cyB0aGUg ZmlybXdhcmUuDQogICAgICBUaGVyZSBtYXkgYmUgbXVsdGlwbGUgc2lnbmVycyBpbnZvbHZlZCBp biB0aGUgZGlzdHJpYnV0aW9uIG9yIG11bHRpcGxlDQogICAgICBhcHByb3ZhbCBzdGVwcyBpbnZv bHZpbmcgb25seSBhIHNpbmdsZSBzaWduYXR1cmUgY29tcHV0YXRpb24uDQoNCldoaWxlIGl0IGRv ZXMgbm90IHByb3Blcmx5IGFkZHJlc3MgdGhlIG11bHRpLXN0YWdlIGFwcHJvdmFsIHByb2Nlc3Mg bmljZWx5IEkgdGhpbmsgaXQgaXMgYmV0dGVyIHRoYW4gdGhlIGVhcmxpZXIgdmVyc2lvbi4NCg0K V2hhdCBkbyB5b3UgdGhpbms/DQoNCg0Kw5ggIEJlZm9yZSB0aGUgZ3JvdXAgd2FzIGNoYXJ0ZXJl ZCwgd2UgdGFsa2VkIG9uIHRoZSBsaXN0IGFib3V0IHRoZSBwb3NzaWJsZSBzaWduYXR1cmUgYWxn b3JpdGhtcy4gIEkgYWR2b2NhdGVkIGEgaGFzaC1iYXNlZCBzaWduYXR1cmUgYmVjYXVzZSB0aGUg dmFsaWRhdGlvbiBjb2RlIGlzIHNtYWxsIGFuZCB0aGUgdmFsaWRhdGlvbiB0aW1lIGlzIHNob3J0 LiAgRGlkIHRoaXMgY29tZSB1cD8NCg0KVGhpcyB0b3BpYyBkaWQgbm90IGNvbWUgdXAgaW4gdGhl IGNvbmZlcmVuY2UgY2FsbCBvbiBNb25kYXkgYnV0IEkgaGFkIHRoZSBpbXByZXNzaW9uIGZyb20g ZWFybGllciBkaXNjdXNzaW9ucyB0aGF0IHRoaXMgaXMgYSBkaXJlY3Rpb24gd2Ugc2hvdWxkIGV4 cGxvcmUgcGFydGljdWxhcmx5IHNpbmNlIHRoZSBsYXJnZXIgc2lnbmF0dXJlIHNpemUgd2lsbCBp biB0aGlzIGFwcGxpY2F0aW9uIGJlIGxlc3Mgb2YgYSBwcm9ibGVtIGdpdmVuIHRoZSBzaXplIG9m IHRoZSBmaXJtd2FyZSBpbWFnZSBpbiByZWxhdGlvbnNoaXAgdG8gaXQuIElNSE8gdGhpcyBjb3Vs ZCBldmVuIGJlIGEgSGFja2F0aG9uIHByb2plY3QuDQoNCkNpYW8NCkhhbm5lcw0KDQpJTVBPUlRB TlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRz IGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1l ZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_AM4PR0801MB2706156D8B74F7D64338980FFAC70AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVk IENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0xpc3RQYXJhZ3Jh cGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHls ZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1h cmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1l OmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5 bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25s eTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4w cHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAq Lw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MTg0MzAxMTIxODsNCgltc28tbGlzdC10eXBlOmh5 YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTE2MDc4NTcwMDQgNjE5NzMxMzY2IDEzNDgw NzU1NSAxMzQ4MDc1NTcgMTM0ODA3NTUzIDEzNDgwNzU1NSAxMzQ4MDc1NTcgMTM0ODA3NTUzIDEz NDgwNzU1NSAxMzQ4MDc1NTc7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1h dDowOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv g5g7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzOw0K CW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCW1zby1iaWRpLWZv bnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KQGxpc3QgbDA6 bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1m YW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTgu MHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZl bDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C pzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K QGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6 U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxs ZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250 LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9t OjBjbTt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBjbTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAy NiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+ DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5n PSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkhpIFJ1c3MsDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29MaXN0UGFy YWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZv MSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5n cztjb2xvcjojMUY0OTdEIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7DmDxzcGFuIHN0 eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8L3Nw YW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+V2h5IG5vdCBzaWduZXI/ICZuYnNwO1RoZSBxdWFs aXR5IGNvbnRyb2wgLyByZWxlYXNlIHByb2Nlc3Mgd2lsbCBiZSBkaWZmZXJlbnQgaW4gbWFueSBz aXR1YXRpb25zLCBidXQgc2lnbmluZyB0aGUgZmlybXdhcmUgc2hvdWxkIGJlIHRoZSBmaW5hbCBz dGVwLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5DdXJyZW50bHkgdGhlIGRlZmluaXRpb24gb2YgdGhlIGF1dGhvciBzYXlzOg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsg LSZuYnNwOyBBdXRob3I6IFRoZSBhdXRob3IgaXMgdGhlIGVudGl0eSB0aGF0IGNyZWF0ZXMgdGhl IGZpcm13YXJlIGltYWdlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg c2lnbnMgYW5kL29yIGVuY3J5cHRzIGl0IGFuZCBhdHRhY2hlcyBhIG1hbmlmZXN0IHRvIGl0LiZu YnNwOyBUaGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGF1dGhvciBp cyBtb3N0IGxpa2VseSBhIGRldmVsb3BlciB1c2luZyBhIHNldCBvZiB0b29scy48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkluIHRoYXQgc2Vuc2UgaGUgaXMgYWxzbyBhIHNpZ25lci4gT2YgY291cnNlLCB3ZSBjYW4gY2hh bmdlIHRoZSBhdXRob3IgdG8gZGV2ZWxvcGVyIGFuZCBqdXN0IGRlZmluZSBpdCBhcw0KPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgLSZu YnNwOyBEZXZlbG9wZXI6IFRoZSBkZXZlbG9wZXIgaXMgdGhlIGVudGl0eSB0aGF0IGNyZWF0ZXMg dGhlIGZpcm13YXJlIGltYWdlLg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5BbmQgdGhlbiB3ZSB3b3VsZCBoYXZlIHRvIGFkZCB0aGUgc2lnbmVyOg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsgLSZuYnNwOyBTaWduZXI6IFRoZSBz aWduZXIgaXMgdGhlIGVudGl0eSB0aGF0IGFwcHJvdmVzIHRoZSBkaXN0cmlidXRpb24gb2YgdGhl DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ZmlybXdhcmUg YW5kIHNpZ25zIHRoZSBtYW5pZmVzdCBhbmQgb3B0aW9uYWxseSBlbmNyeXB0cyB0aGUgZmlybXdh cmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7 Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBUaGVyZSBtYXkgYmUg bXVsdGlwbGUgc2lnbmVycyBpbnZvbHZlZCBpbiB0aGUgZGlzdHJpYnV0aW9uIG9yIG11bHRpcGxl DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7YXBwcm92YWwg c3RlcHMgaW52b2x2aW5nIG9ubHkgYSBzaW5nbGUgc2lnbmF0dXJlIGNvbXB1dGF0aW9uLg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5XaGlsZSBpdCBkb2VzIG5vdCBwcm9wZXJseSBhZGRyZXNzIHRoZSBtdWx0aS1zdGFn ZSBhcHByb3ZhbCBwcm9jZXNzIG5pY2VseSBJIHRoaW5rIGl0IGlzIGJldHRlciB0aGFuIHRoZSBl YXJsaWVyIHZlcnNpb24uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldoYXQgZG8geW91IHRoaW5rPw0KPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6 LTE4LjBwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBvcnRMaXN0c10+PHNw YW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncztjb2xvcjojMUY0OTdEIj48c3BhbiBzdHls ZT0ibXNvLWxpc3Q6SWdub3JlIj7DmDxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+ QmVmb3JlIHRoZSBncm91cCB3YXMgY2hhcnRlcmVkLCB3ZSB0YWxrZWQgb24gdGhlIGxpc3QgYWJv dXQgdGhlIHBvc3NpYmxlIHNpZ25hdHVyZSBhbGdvcml0aG1zLiAmbmJzcDtJIGFkdm9jYXRlZCBh IGhhc2gtYmFzZWQgc2lnbmF0dXJlIGJlY2F1c2UgdGhlIHZhbGlkYXRpb24gY29kZSBpcyBzbWFs bCBhbmQgdGhlIHZhbGlkYXRpb24gdGltZSBpcyBzaG9ydC4gJm5ic3A7RGlkIHRoaXMgY29tZSB1 cD88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+VGhpcyB0b3BpYyBkaWQgbm90IGNvbWUgdXAgaW4gdGhlIGNvbmZlcmVuY2UgY2FsbCBv biBNb25kYXkgYnV0IEkgaGFkIHRoZSBpbXByZXNzaW9uIGZyb20gZWFybGllciBkaXNjdXNzaW9u cyB0aGF0IHRoaXMgaXMgYSBkaXJlY3Rpb24gd2Ugc2hvdWxkIGV4cGxvcmUgcGFydGljdWxhcmx5 DQogc2luY2UgdGhlIGxhcmdlciBzaWduYXR1cmUgc2l6ZSB3aWxsIGluIHRoaXMgYXBwbGljYXRp b24gYmUgbGVzcyBvZiBhIHByb2JsZW0gZ2l2ZW4gdGhlIHNpemUgb2YgdGhlIGZpcm13YXJlIGlt YWdlIGluIHJlbGF0aW9uc2hpcCB0byBpdC4gSU1ITyB0aGlzIGNvdWxkIGV2ZW4gYmUgYSBIYWNr YXRob24gcHJvamVjdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkNpYW88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+SGFubmVzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVu dHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5k IG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNp cGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRp c2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBw dXJwb3NlLA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0u IFRoYW5rIHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_AM4PR0801MB2706156D8B74F7D64338980FFAC70AM4PR0801MB2706_-- From nobody Wed Feb 28 14:39:36 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6844126FDC for ; Wed, 28 Feb 2018 14:39:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vSGf68yG2vyV for ; Wed, 28 Feb 2018 14:39:32 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 41C74126FB3 for ; Wed, 28 Feb 2018 14:39:32 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 18A1220091; Wed, 28 Feb 2018 17:47:19 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 4CF2A80AE3; Wed, 28 Feb 2018 17:39:31 -0500 (EST) From: Michael Richardson To: "suit\@ietf.org" cc: Hannes Tschofenig In-Reply-To: References: <24389.1519756668@obiwan.sandelman.ca> X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Feb 2018 22:39:36 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hannes Tschofenig wrote: > I believe the consensus so far was that we want to offer the > possibility for one or more than one signature. I personally believe > that the single signature case will be very common in practice (even = if > the approval process is more complex). I actually insist that our format support more than one signature! So we are in violent agreement there. It's critical for an audit trail and the like that the format support multiple signatures. And the Cose Signature construct does exactly that. (As does CMS) However, what I'm suggesting is that rather than have the end-device evalua= te some (possibly complex) series of assertions supported by multiple signatures, that instead it could outsource that to the Approver, the result being an additional signature from the "Approver" Now, instead of trying to determine how all the various (signed) statements go together, the problem is reduced to determining if this is the right App= rover. That problem is really no more difficult than classic Certificate Authority (or AA) processing. Or it can be done with an artifact like the voucher that ANIMA has just created. > -----Original Message----- From: Michael Richardson > [mailto:mcr+ietf@sandelman.ca] Sent: 27 February 2018 19:38 To: Hannes > Tschofenig Cc: suit@ietf.org Subject: Re: [Suit] Approval of Firmware > Update > Hannes Tschofenig wrote: >> yesterday we also spoke about the co-signing / approving a firmware >> update through a party other than the author producing the firmware. > Good. >> For this purpose I created another drawing and also introduced anoth= er >> role, namely the =E2=80=9Capprover=E2=80=9D. (Suggestion for better = terminology is >> welcome.) > In my mind, the should really only be the approver, and there should > probably only be one signature that the end device looks for. > I think that all the complex situations we want (author signs firmwar= e, > reviewer signs it, plant operation signs it, operator signs it for > odd-numbered devices...) should really about how the device goes from > the built-in trust anchors to the authoritative entity. It could be > that we can use SAML or SPKI or ??? for this. > -- > Michael Richardson , Sandelman Software Works = -=3D > IPv6 IoT consulting =3D- > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose t= he > contents to any other person, use it for any purpose, or store or copy > the information in any medium. Thank you. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqXL6AACgkQgItw+93Q 3WXuhQf/a8pAL26zNhVbCSNENsL6zWK/T4zShEASoYIoAm5nFV2+8Lx2n1usREj+ iWb+j0FMs1B/MmfmV+FyV1f6MTyxUxa5Si+1WB9DAVRKmuOFbVSDqwL3x9oIJvcu BPen+HRCExi+KV4HIlqPmSlz9jikPwzi4Q71mZfUy59IP//aVkOFKL5FCLq+cxNV iXGm0MCZJ/dzyDCP4rlNjKRuFmnKDjzm3pBKzE10/CA8D+8w3MTtB/DeocULE3Jb az/t9aNSqOkCS3OvPaiPle0EpnqUj2ENUSM+zh8iVw2fVCtjfGx74K0OjgQF5b6u WW4orT4QI1DN3A60hchBeqiUDfVARw== =8yJ6 -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Feb 28 20:54:16 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36C1B12E88A for ; Wed, 28 Feb 2018 20:54:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.197 X-Spam-Level: X-Spam-Status: No, score=-4.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t1OTa_ie5hFl for ; Wed, 28 Feb 2018 20:54:13 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F55412E884 for ; Wed, 28 Feb 2018 20:54:13 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w214s6G9016380; Thu, 1 Mar 2018 05:54:06 +0100 (CET) Received: from [172.21.121.189] (unknown [2.50.35.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3zsKpP67thzDXBj; Thu, 1 Mar 2018 05:54:05 +0100 (CET) Content-Type: multipart/alternative; boundary=Apple-Mail-E3D16B06-FE03-4853-AA79-F38C57A9AC7C Mime-Version: 1.0 (1.0) From: Carsten Bormann X-Mailer: iPhone Mail (15D100) In-Reply-To: Date: Thu, 1 Mar 2018 08:54:03 +0400 Cc: Russ Housley , "suit@ietf.org" Content-Transfer-Encoding: 7bit Message-Id: <1B463958-E983-4D87-8EE9-ED854C43DD32@tzi.org> References: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> To: Hannes Tschofenig Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 04:54:15 -0000 --Apple-Mail-E3D16B06-FE03-4853-AA79-F38C57A9AC7C Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable "Signers" don't sign firmware, they sign a claim of fitness for a specific p= urpose/usage situation. The author may have no idea what that purpose is.=20= Sent from mobile > On 28. Feb 2018, at 20:57, Hannes Tschofenig w= rote: >=20 > Hi Russ, > =20 > =C3=98 Why not signer? The quality control / release process will be dif= ferent in many situations, but signing the firmware should be the final step= . > =20 > Currently the definition of the author says: > =20 > - Author: The author is the entity that creates the firmware image, > signs and/or encrypts it and attaches a manifest to it. The > author is most likely a developer using a set of tools. > =20 > In that sense he is also a signer. Of course, we can change the author to d= eveloper and just define it as > =20 > - Developer: The developer is the entity that creates the firmware ima= ge. > =20 > And then we would have to add the signer: > =20 > - Signer: The signer is the entity that approves the distribution of t= he > firmware and signs the manifest and optionally encrypts the firmware= . > There may be multiple signers involved in the distribution or multip= le > approval steps involving only a single signature computation. > =20 > While it does not properly address the multi-stage approval process nicely= I think it is better than the earlier version. > =20 > What do you think? > =20 > =C3=98 Before the group was chartered, we talked on the list about the po= ssible signature algorithms. I advocated a hash-based signature because the= validation code is small and the validation time is short. Did this come u= p? > =20 > This topic did not come up in the conference call on Monday but I had the i= mpression from earlier discussions that this is a direction we should explor= e particularly since the larger signature size will in this application be l= ess of a problem given the size of the firmware image in relationship to it.= IMHO this could even be a Hackathon project. > =20 > Ciao > Hannes > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are confi= dential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you. > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit --Apple-Mail-E3D16B06-FE03-4853-AA79-F38C57A9AC7C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable "Signers" don't sign firmware, they sign a c= laim of fitness for a specific purpose/usage situation. The author may have n= o idea what that purpose is. 

Sen= t from mobile

On 2= 8. Feb 2018, at 20:57, Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:

Hi Russ,

 

=C3=98  Why not signer?  The quality control= / release process will be different in many situations, but signing the fir= mware should be the final step.

 

Currently the definition of= the author says:

 

   -  Author: The author is the e= ntity that creates the firmware image,

      signs and/or encr= ypts it and attaches a manifest to it.  The

      author is most li= kely a developer using a set of tools.

 

In that sense he is also a s= igner. Of course, we can change the author to developer and just define it a= s

 

   -  Developer: The developer is= the entity that creates the firmware image.

 

And then we would have to a= dd the signer:

 

   -  Signer: The signer is the e= ntity that approves the distribution of the

      firmware and= signs the manifest and optionally encrypts the firmware.<= /p>

      There may be mult= iple signers involved in the distribution or multiple

      approval ste= ps involving only a single signature computation.

 

While it does not properly a= ddress the multi-stage approval process nicely I think it is better than the= earlier version.

 

What do you think?

 

=C3=98  Before the group was chartered, we talked= on the list about the possible signature algorithms.  I advocated a ha= sh-based signature because the validation code is small and the validation t= ime is short.  Did this come up?

 

This topic did not come up i= n the conference call on Monday but I had the impression from earlier discus= sions that this is a direction we should explore particularly since the larger signature size will in this application be less of a probl= em given the size of the firmware image in relationship to it. IMHO this cou= ld even be a Hackathon project.

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confide= ntial and may also be privileged. If you are not the intended recipient, ple= ase notify the sender immediately and do not disclose the contents to any ot= her person, use it for any purpose, or store or copy the information in any medium. Thank you.
____________________= ___________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman= /listinfo/suit
= --Apple-Mail-E3D16B06-FE03-4853-AA79-F38C57A9AC7C-- From nobody Wed Feb 28 23:38:33 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B602F12E04A for ; Wed, 28 Feb 2018 23:38:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bNtWN19laEOu for ; Wed, 28 Feb 2018 23:38:28 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-am5eur03on0617.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe08::617]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FDCE1205D3 for ; Wed, 28 Feb 2018 23:38:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+1PIxNUkCbHLXTm9/RBkxR9D/dBTvS07Ty5qLVn8Pyc=; b=Y6aWOQspc5R94IfjAxoDN2DqasoRsX17qVwOBTMSJS+D0Lg1bQw63hHT9A8ODB0t0tlnZxw06k9CTv/+tVrDzQbyRbQT7PsdnhdCoEVxUYUOY1M/OqOpKc5NPB8SC3Ylv/FdmDu2hSpgCGtn0VX/2S7Zwbr0759BU9FTHc6CiQM= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1426.eurprd08.prod.outlook.com (10.168.5.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Thu, 1 Mar 2018 07:38:24 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Thu, 1 Mar 2018 07:38:24 +0000 From: Hannes Tschofenig To: "Markus.Gueller@infineon.com" , Brendan Moran , "suit@ietf.org" Thread-Topic: Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQXZlIcwACuImsA= Date: Thu, 1 Mar 2018 07:38:23 +0000 Message-ID: References: <116e2b54ce094fc1922422b239ae3da6@infineon.com> In-Reply-To: <116e2b54ce094fc1922422b239ae3da6@infineon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1426; 7:t24gnbu/2644F5qJE3xKp0iPlIbv8jm8eNzis4p81zVEwewnLj2Qqf4lEflfiEUgsunSEdBT1GZ6+llc/boPRmc1tPSG8aqhWtGQR6iNqoQ4G08QSn/aLltIg51HSFRc25vBaq6fZ1jlc90g6ULJi8fmhK5dXjjxsiqM7n3HJ8kLRcJe7lXpa2dGedd1y9RkQEG8HcgaFRtHZWmmfsf44BouPMYT5aDbD3SLMkKGOYqUL7yVU7WsOAA53LSrco7j x-ms-exchange-antispam-srfa-diagnostics: SSOS;SSOR; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 43f93f44-c7ab-4f85-d508-08d57f476a12 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1426; x-ms-traffictypediagnostic: AM4PR0801MB1426: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(209352067349851)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(3231220)(944501224)(52105095)(3002001)(10201501046)(6055026)(6041288)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(6072148)(201708071742011); SRVR:AM4PR0801MB1426; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1426; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(396003)(366004)(39380400002)(376002)(39860400002)(53754006)(13464003)(51914003)(40434004)(189003)(199004)(55016002)(186003)(2950100002)(68736007)(81156014)(2501003)(76176011)(81166006)(25786009)(97736004)(6436002)(59450400001)(9686003)(53546011)(105586002)(102836004)(6306002)(26005)(6506007)(478600001)(86362001)(72206003)(14454004)(7696005)(66066001)(5250100002)(15650500001)(8936002)(8676002)(966005)(5890100001)(110136005)(6116002)(3280700002)(3846002)(99286004)(74316002)(106356001)(316002)(229853002)(3660700001)(6246003)(2906002)(5660300001)(305945005)(2900100001)(33656002)(7736002)(53936002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1426; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 1lP5Ljwmk6Wter/wQY2ONnYQV5SeJMBVFaCXyEfXcZuDBol2Pfoet3Prwn3N5tV5WlfDuJAZuHPOnx/FiEqrMoPx6VX/qII72tkTd+9J65qlUKJM3c5yq63At3/EpjGemeRF+C7oy0QSuVt/HUlAGAASkwNU53JvzkmeNBHnzwk= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 43f93f44-c7ab-4f85-d508-08d57f476a12 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 07:38:24.0880 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1426 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 07:38:31 -0000 Hi Markus, Thanks for the detailed review. -----Original Message----- From: Markus.Gueller@infineon.com [mailto:Markus.Gueller@infineon.com] Sent: 28 February 2018 11:56 To: Hannes Tschofenig; Brendan Moran; suit@ietf.org Subject: RE: Manifest and architecture drafts updated Hannes, Brendan, All >>we just submitted updates to the manifest and the architecture documents. >>Here are the two drafts: https://tools.ietf.org/html/draft-moran-suit-architecture-01 Thanks for the update. Adding section 11 is really valuable when it comes t= o understanding where the fields of the manifest are derived. Please find my comments and questions below after a first review of the Arc= hitecture Document. I hope this is the right form to address this. Any comments, feedback, clar= ification, corrections are appreciated. *Page 6, Section 3.3 Uses state-of-the-art security mechanisms: State-of the-art security can mean a lot of things and is really very high = level. Would it make sense to specify this a bit more. E.g.: -There has been discussion on Resistance against Quantum Cryptography on th= e mailing list. Is it worth mentioning? -Does it make sense to specify the minimum Security Strength of Algorithms = required for the IETF SUIT? E.g. The Security Strength (Bits of Security) of Cryptographic Algorithms u= sed to provide firmware image authentication and confidentiality protection= must be 128 Bits of Security or greater .... (Security Strength Definitions can be found in NIST SP 800-57 Part1, Sectio= n 5.6.1. Note I am not suggesting only to allow algorithms listed in SP 800= -57) [hannes] Good points. What about adding this paragraph to Section 3.3: " The use of post-quantum secure signature mechanisms, such as hash-based sig= natures, should be explored. A mandatory-to-implement set of algorithms has= to be defined offering a key length of 112-bit symmetric key or security o= r more, as outlined in Section 20 of RFC 7925. This corresponds to a 233 bi= t ECC key or a 2048 bit RSA key. " I am open for suggestions on better wording of the post quantum secure algo= rithms support. I would add specific mandatory-to-implement algorithms in the manifest form= at itself. I would say something like MUST implement ECC with NIST P-256r1,= AES-128-CCM, and SHA256. As an SHOULD implement I would use Ed25519, CHACH= A20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is recomme= nding). Does this sound reasonable to you? * Page 6, Section 3.4 Rollback attacks must be prevented -I am not sure how the last paragraphs (manifest parsing) relates to rollba= ck protection? I would have rather expected some text as described in section 11.2.1 [hannes] I have re-arranged the text. Here is the new text for Section 3.4: " ## Rollback attacks must be prevented A device presented with an old, but valid manifest and firmware must not be= tricked into installing such firmware since a vulnerability in the old fir= mware image may allow an attacker gain control of the device. " *Page 6, Section 3.5 High Reliability Reading on page 12, Section 8 its states the following is _out of scope_: 'installing firmware updates in a robust fashion so that the update does no= t break the device functionality of the environment this device operates in= ' -This seems to be in conflict what is stated in Section 3.5 as Requirement? -In addition shall the IoT Firmware Update Architecture really limit the up= date to a Dual Image Approach ? Of course it is the most robust approach, but due to NVM Constraints of Dev= ices a Single Image Update should not be excluded. [hannes] In some sense it is desirable to provide functionality that does n= ot break the device but on the other hand there is nothing in the manifest = and consequently nothing in the specification that will really enable it si= nce this is a system implementation design aspect. I understand that some p= eople do not want to use a dual image approach and prefer to take the risk = of going for a single image update. Would you prefer to have this paragraph re-written or even dropped? *Page 6, Minimal bootloader -What does 'validate the received _firmware_' mean? I would assume it means to validate the manifest including verification of = manifest signature, validation of manifest claims and Check of Hash over Fi= rmware Image and optionally decryption of the received firmware image...? In general it is unclear what is the meaning of '_firmware_' in this sectio= n (manifest and firmware image OR firmware image only) , since the term 'fi= rmware' by itself in not defined/mentioned in Section 2 and some parts of t= he architecture explicitly use 'firmware image' and other sections talk abo= ut 'firmware' (e.g. Section 6 Example Flow, where I would interpret that fi= rmware means firmware image) [hannes] I used firmware and firmware image interchangeable. I re-wrote the= sentence: " The bootloader must be minimal, containing only the flash and cryptographic= primitives. It needs to verify the received manifest and to install the bo= otable firmware image. The bootloader should not require updating, since a = failed update poses a risk in reliability. If more functionality is require= d in the bootloader, it must use a two-stage bootloader, with the first sta= ge comprising the functionality defined above. " Is this better? *Page 9, Section 4 Architecture It states: " For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key of a device." There are also Symmetric Key Options (Recipient Algorithms) for Content Enc= ryption Key (CEK) Distribution, which is actually already stated in the man= ifest draft . -Therefore the above sentence should be updated to reflect, clarify also us= age of symmetric keys as an additional option for confidentiality protectio= n!? [Hannes] I believe this is correct since the use of a key transport mechani= sm would require the use of public key encryption of the content encryption= key. The CEK would then be used to encrypt the firmware image itself. This= would still require the author to know the public keys of all the device. The pure use of symmetric keys has only been envisioned but not described s= o far. *Page 19, Section 11.3.5 & Page 24, Section 11.6.11 With the update of the Threat Model for the first time symmetric signatures= come into the picture as a requirement. In 11.6.11 states: " .. If Message Authentication Codes (MAC) are used for= authenticity, then devices MUST have unique pre-hared keys." In the previous Architecture Version 00 it stated " Future versions may als= o describe a symmetric key approach for very constrained devices" Some comments for discussion: While the benefit of symmetric device individual signatures is to support v= ery constrained devices with non-public key cryptography support, it comes = with some drawbacks: 1) cost of complexity for symmetric device individual key management ; 2) Device Individual Manifests are non broadcast friendly requiring some fo= rm of online environment versus e.g. utilizing an store and forward archite= cture; 3) Impact to some already defined requirements: E.g. how to comply to MSFR6= (Handling Authorship right and a Qualification right with symmetric device= individual signatures seems to be very hard in practice in my opinion) If there is a requirement to support symmetric signatures (which is my inte= rpretation from 11.3.5 and 11.6.11) then: 1) To be consistent it should also be stated in Section 4 Architecture, whe= re currently only public key cryptography is stated (..We use public key cr= yptography to accomplish this..) ? 2) The drawbacks and potential conflicts to part of the architecture should= be documented 3) Potentially it should be stated that Public Key Cryptography is the pref= erred choice... ? -The other alternative would be to focus on asymmetric signatures only in t= he first version... [Hannes] I agree with your assessment. Currently the document really focuse= d on public key crypto and that's what we have implemented so far. We have = repeatedly been told that a symmetric key version is necessary as well to d= eal with the low end IoT devices with all the pros & cons it has. Right now= the symmetric key version has not been described throughout the document a= nd hence I prefer to remove these sentences from the current version of the= document since, as you stated, the story in the document isn't consistent.= We could use the next IETF meeting to discuss the symmetric key mechanism = and to make a decision about how to best incorporate it. Hence, I agree wit= h you that we should focus on the asymmetric crypto version for the current= version. * Section 11. Threat Description, General Comment Although Confidentiality Protection is optional I currently don't see this = topic addressed in section 11 (and hence no requirements for key managemen= t fields for payload protection in section 11.6 Manifest Fields ). Therefore I see two possible topics where it might make sense to add: 1) Add a Threat in Section 11.2, Reverse Engineering Of Firmware Image for = Vulnerability Analysis: An Attacker wants to mount an attack on an IoT Device. To prepare the atta= ck he retrieves the provided Firmware Image and performs reverse engineerin= g of the Firmware Image to analyze it for specific vulnerabilities. 2) Add a Use Case in Section 11.4, IP Protection: As an OEM or Developer for IoT devices, I want to protect the IP contained= in the Firmware Image. -Would the above or similar text make sense to add to be consistent how the= Manifest Fields are derived in section 11.6? [Hannes] This is a good idea. I added the following text: A.2.11. Threat MFT11: Reverse Engineering Of Firmware Image for Vulnerability Analysis Classification: All Types An attacker wants to mount an attack on an IoT device. To prepare the attack he or she retrieves the provided firmware image and performs reverse engineering of the firmware image to analyze it for specific vulnerabilities. A.3.7. Security Requirement MFSR7: Firmware encryption Firmware images must be encrypted to prevent third parties, including attackers, from reading the content of the firmware image and to reverse engineer the code. Mitigates: MFT11 A.4.6. Use Case MFUC6: IP Protection As an OEM or developer for IoT devices, I want to protect the IP contained in the firmware image, such as the utilized algorithms. The need for protecting IP may have also been imposed on my due to the use of some third party code libraries. A.6.15. Manifest Field: Key Table Encrypting firmware images requires symmetric content encryption keys to be provided in the manifest, which themselves have to be encrypted using the public keys of devices. Implements: Security Requirement MFSR7. Thanks again for the detailed review, Markus. Ciao Hannes Thanks, Markus This e-mail and any attachments are confidential. They are intended solely = for the attention and use of the named addressee(s). If you are not the nam= ed addressee(s) you must not use, disclose, retain or reproduce all or any = part of the information contained in this e-mail or any attachments. Any un= authorized use or disclosure may be unlawful. If you have received this e-m= ail by mistake, please inform the sender immediately and delete it and all = copies from your system and destroy any hard copies of it. From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Monday, January 29, 2018 4:03 PM To: suit@ietf.org Subject: [Suit] Manifest and architecture drafts updated Hi all, we just submitted updates to the manifest and the architecture documents. H= ere are the two drafts: https://tools.ietf.org/html/draft-moran-suit-manifest-01 https://tools.ietf.org/html/draft-moran-suit-architecture-01 The architecture document got enhanced to now include a threat analysis, se= curity requirements, user stories, etc. This additional text has been motiv= ated by mailing list discussions late last year. The text explains the pres= ence of attributes in the manifest and the security mechanisms needed to pr= otect them. Here is the diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-moran-suit-architecture-01 The manifest document has only seen editorial updates, see https://www.ietf= .org/rfcdiff?url2=3Ddraft-moran-suit-manifest-01 Thanks for the feedback so far. Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Wed Feb 28 23:48:35 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED7261205D3 for ; Wed, 28 Feb 2018 23:48:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.919 X-Spam-Level: X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z6k_khIDXzRL for ; Wed, 28 Feb 2018 23:48:31 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10061.outbound.protection.outlook.com [40.107.1.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BB2212D7F5 for ; Wed, 28 Feb 2018 23:48:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=EAsmQxgTRGhspbASE02XADt9Z5P8FXSUreS85arksXw=; b=N6EZSKfLDn5b6bttxd34gG0BdyYCf59l+NiDYWzrDXtROYrEywQAcVc8cs0imz+Ai+llcIxKbyZPyNZ83vb+sGyMiW5mz6ckq9JB5xUCPFmPfA557S3DZKZ0qNrmRD7LUUHYDUtoqDyst/RgWCU8rOc3RkWxqEBR+4lRhSKFHfk= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2739.eurprd08.prod.outlook.com (10.167.92.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.527.15; Thu, 1 Mar 2018 07:48:27 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Thu, 1 Mar 2018 07:48:26 +0000 From: Hannes Tschofenig To: Carsten Bormann CC: Russ Housley , "suit@ietf.org" Thread-Topic: [Suit] Approval of Firmware Update Thread-Index: AdOv0PAESicpWVavR5e4qF3taZhahAAQYhkAAChheyAAGVTjgAAFxooQ Date: Thu, 1 Mar 2018 07:48:26 +0000 Message-ID: References: <96AB7935-BA7F-417D-875F-CFDC07A60BFD@vigilsec.com> <1B463958-E983-4D87-8EE9-ED854C43DD32@tzi.org> In-Reply-To: <1B463958-E983-4D87-8EE9-ED854C43DD32@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2739; 7:OvfsHpcG0LKftPC/nIDIu+tZetgRKOo8pCnQkvpNY6VAEHAGgoMkkcKfDQcm0XSHq2uCUjLVaWybjklba/pQ1J4ShkqrR7BqZJmiyyyhU2tneuvQBzPRgybMtAOZhI4C39V/JfoNSo6h0HBn6pH80BZBQ32GfsOXwAPfMi55uuWa/RSfmqoseWD44095wnOveC5CquS2ndpC+bxXHyP2dzOx6hzg+LNfMvkANmsN21sGVal72ATil4SdDsPgKJbo x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 17bc927f-1a48-4037-f18e-08d57f48d13a x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2739; x-ms-traffictypediagnostic: AM4PR0801MB2739: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231220)(944501161)(52105095)(6055026)(6041288)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB2739; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2739; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(366004)(396003)(346002)(376002)(39860400002)(76104003)(189003)(199004)(40434004)(5660300001)(66066001)(3280700002)(7736002)(74316002)(10710500007)(26005)(102836004)(316002)(53546011)(2906002)(6506007)(59450400001)(76176011)(7696005)(2900100001)(105586002)(186003)(33656002)(99286004)(6246003)(86362001)(4326008)(15650500001)(25786009)(54906003)(106356001)(5250100002)(2420400007)(8676002)(81166006)(5890100001)(14454004)(81156014)(606006)(2950100002)(6916009)(68736007)(229853002)(54896002)(9686003)(6306002)(236005)(9326002)(55016002)(53936002)(790700001)(6436002)(8936002)(97736004)(966005)(72206003)(6116002)(3660700001)(3846002)(478600001)(7110500001)(93886005); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2739; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: IRnItV9kSHlcyaSatmGv4m1VhogpX1YQV/SzWXRgeCuLOlEMkxHnyXTII4jaZtlYxFB6rNXf3j/mqbI2ZqfNXkAqxI27Ri3usk3rGhM+u9dUicKIWa4TRR3y2IpWNBBCwdwK5U1TGaRl2cKVkS6Y4pOBMmRI8Tlq68bxXp/Grs0= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706EB624E22C4BD2EAF13DBFAC60AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 17bc927f-1a48-4037-f18e-08d57f48d13a X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 07:48:26.6998 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2739 Archived-At: Subject: Re: [Suit] Approval of Firmware Update X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 07:48:34 -0000 --_000_AM4PR0801MB2706EB624E22C4BD2EAF13DBFAC60AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQ2Fyc3RlbiwNCg0KSW4gYW4gSW9UIGNvbnRleHQgSSB3b3VsZCBhcmd1ZSB0aGF0IGFuIGF1 dGhvciBvZnRlbiBoYXMgYSBmYWlybHkgZ29vZCBpZGVhIHdoZXJlIGhpcyBjb2RlIHdpbGwgYmUg dXNlZCBzaW5jZSBJb1QgZGV2aWNlcyBhcmUgb2Z0ZW4gcHVycG9zZSBidWlsdC4NClN0cmljdGx5 IHNwZWFraW5nIHlvdSBhcmUgcmlnaHQgdGhhdCB0aGUgc2lnbmF0dXJlIGlzbuKAmXQgcmVhbGx5 IG92ZXIgdGhlIGZpcm13YXJlIGl0c2VsZiBidXQgcmF0aGVyIG92ZXIgdGhlIG1hbmlmZXN0LCB3 aGljaCBpbmNsdWRlcyB0aGUgaGFzaCBvZiB0aGUgZmlybXdhcmUuIFNvLCB0aGVyZSBoYXMgdG8g YmUgYSByZWxhdGlvbnNoaXAgYmV0d2VlbiB0aGUgc2lnbmF0dXJlIGNvdmVyaW5nIHRoZSBtYW5p ZmVzdCBpbmNsdWRpbmcgdGhlIGNsYWltcyBhbmQgdGhlIGZpcm13YXJlIGl0IHJlbGF0ZXMgdG8u DQoNCkkgZG8sIGhvd2V2ZXIsIGFncmVlIHRoYXQgdGhlIHRlcm1pbm9sb2d5IEkgcHJvcG9zZWQg YmVsb3cgaXMgbm90IGlkZWFsLiBJIGFtIG9wZW4gdG8gb3RoZXIgc3VnZ2VzdGlvbnMuDQoNCkNp YW8NCkhhbm5lcw0KDQoNCg0KRnJvbTogQ2Fyc3RlbiBCb3JtYW5uIFttYWlsdG86Y2Fib0B0emku b3JnXQ0KU2VudDogMDEgTWFyY2ggMjAxOCAwNTo1NA0KVG86IEhhbm5lcyBUc2Nob2ZlbmlnDQpD YzogUnVzcyBIb3VzbGV5OyBzdWl0QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW1N1aXRdIEFwcHJv dmFsIG9mIEZpcm13YXJlIFVwZGF0ZQ0KDQoiU2lnbmVycyIgZG9uJ3Qgc2lnbiBmaXJtd2FyZSwg dGhleSBzaWduIGEgY2xhaW0gb2YgZml0bmVzcyBmb3IgYSBzcGVjaWZpYyBwdXJwb3NlL3VzYWdl IHNpdHVhdGlvbi4gVGhlIGF1dGhvciBtYXkgaGF2ZSBubyBpZGVhIHdoYXQgdGhhdCBwdXJwb3Nl IGlzLg0KU2VudCBmcm9tIG1vYmlsZQ0KDQpPbiAyOC4gRmViIDIwMTgsIGF0IDIwOjU3LCBIYW5u ZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KSGkgUnVzcywNCg0KDQrDmCAgV2h5IG5vdCBzaWdu ZXI/ICBUaGUgcXVhbGl0eSBjb250cm9sIC8gcmVsZWFzZSBwcm9jZXNzIHdpbGwgYmUgZGlmZmVy ZW50IGluIG1hbnkgc2l0dWF0aW9ucywgYnV0IHNpZ25pbmcgdGhlIGZpcm13YXJlIHNob3VsZCBi ZSB0aGUgZmluYWwgc3RlcC4NCg0KQ3VycmVudGx5IHRoZSBkZWZpbml0aW9uIG9mIHRoZSBhdXRo b3Igc2F5czoNCg0KICAgLSAgQXV0aG9yOiBUaGUgYXV0aG9yIGlzIHRoZSBlbnRpdHkgdGhhdCBj cmVhdGVzIHRoZSBmaXJtd2FyZSBpbWFnZSwNCiAgICAgIHNpZ25zIGFuZC9vciBlbmNyeXB0cyBp dCBhbmQgYXR0YWNoZXMgYSBtYW5pZmVzdCB0byBpdC4gIFRoZQ0KICAgICAgYXV0aG9yIGlzIG1v c3QgbGlrZWx5IGEgZGV2ZWxvcGVyIHVzaW5nIGEgc2V0IG9mIHRvb2xzLg0KDQpJbiB0aGF0IHNl bnNlIGhlIGlzIGFsc28gYSBzaWduZXIuIE9mIGNvdXJzZSwgd2UgY2FuIGNoYW5nZSB0aGUgYXV0 aG9yIHRvIGRldmVsb3BlciBhbmQganVzdCBkZWZpbmUgaXQgYXMNCg0KICAgLSAgRGV2ZWxvcGVy OiBUaGUgZGV2ZWxvcGVyIGlzIHRoZSBlbnRpdHkgdGhhdCBjcmVhdGVzIHRoZSBmaXJtd2FyZSBp bWFnZS4NCg0KQW5kIHRoZW4gd2Ugd291bGQgaGF2ZSB0byBhZGQgdGhlIHNpZ25lcjoNCg0KICAg LSAgU2lnbmVyOiBUaGUgc2lnbmVyIGlzIHRoZSBlbnRpdHkgdGhhdCBhcHByb3ZlcyB0aGUgZGlz dHJpYnV0aW9uIG9mIHRoZQ0KICAgICAgZmlybXdhcmUgYW5kIHNpZ25zIHRoZSBtYW5pZmVzdCBh bmQgb3B0aW9uYWxseSBlbmNyeXB0cyB0aGUgZmlybXdhcmUuDQogICAgICBUaGVyZSBtYXkgYmUg bXVsdGlwbGUgc2lnbmVycyBpbnZvbHZlZCBpbiB0aGUgZGlzdHJpYnV0aW9uIG9yIG11bHRpcGxl DQogICAgICBhcHByb3ZhbCBzdGVwcyBpbnZvbHZpbmcgb25seSBhIHNpbmdsZSBzaWduYXR1cmUg Y29tcHV0YXRpb24uDQoNCldoaWxlIGl0IGRvZXMgbm90IHByb3Blcmx5IGFkZHJlc3MgdGhlIG11 bHRpLXN0YWdlIGFwcHJvdmFsIHByb2Nlc3MgbmljZWx5IEkgdGhpbmsgaXQgaXMgYmV0dGVyIHRo YW4gdGhlIGVhcmxpZXIgdmVyc2lvbi4NCg0KV2hhdCBkbyB5b3UgdGhpbms/DQoNCg0Kw5ggIEJl Zm9yZSB0aGUgZ3JvdXAgd2FzIGNoYXJ0ZXJlZCwgd2UgdGFsa2VkIG9uIHRoZSBsaXN0IGFib3V0 IHRoZSBwb3NzaWJsZSBzaWduYXR1cmUgYWxnb3JpdGhtcy4gIEkgYWR2b2NhdGVkIGEgaGFzaC1i YXNlZCBzaWduYXR1cmUgYmVjYXVzZSB0aGUgdmFsaWRhdGlvbiBjb2RlIGlzIHNtYWxsIGFuZCB0 aGUgdmFsaWRhdGlvbiB0aW1lIGlzIHNob3J0LiAgRGlkIHRoaXMgY29tZSB1cD8NCg0KVGhpcyB0 b3BpYyBkaWQgbm90IGNvbWUgdXAgaW4gdGhlIGNvbmZlcmVuY2UgY2FsbCBvbiBNb25kYXkgYnV0 IEkgaGFkIHRoZSBpbXByZXNzaW9uIGZyb20gZWFybGllciBkaXNjdXNzaW9ucyB0aGF0IHRoaXMg aXMgYSBkaXJlY3Rpb24gd2Ugc2hvdWxkIGV4cGxvcmUgcGFydGljdWxhcmx5IHNpbmNlIHRoZSBs YXJnZXIgc2lnbmF0dXJlIHNpemUgd2lsbCBpbiB0aGlzIGFwcGxpY2F0aW9uIGJlIGxlc3Mgb2Yg YSBwcm9ibGVtIGdpdmVuIHRoZSBzaXplIG9mIHRoZSBmaXJtd2FyZSBpbWFnZSBpbiByZWxhdGlv bnNoaXAgdG8gaXQuIElNSE8gdGhpcyBjb3VsZCBldmVuIGJlIGEgSGFja2F0aG9uIHByb2plY3Qu DQoNCkNpYW8NCkhhbm5lcw0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo ZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBv ciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3Uu DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KU3VpdCBt YWlsaW5nIGxpc3QNClN1aXRAaWV0Zi5vcmc8bWFpbHRvOlN1aXRAaWV0Zi5vcmc+DQpodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQNCklNUE9SVEFOVCBOT1RJQ0U6IFRo ZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVu dGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVu ZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBk byBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBm b3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBt ZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_AM4PR0801MB2706EB624E22C4BD2EAF13DBFAC60AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAgMDt9 DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIg MiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3Nl LTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNv Tm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwg UHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0 Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1z b0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBo DQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4tcmln aHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCgltYXJn aW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5hcHBsZS1jb252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxl LW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNv bG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIu MHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYu V29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMg Ki8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjE4NDMwMTEyMTg7DQoJbXNvLWxpc3QtdHlwZTpo eWJyaWQ7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xNjA3ODU3MDA0IDYxOTczMTM2NiAxMzQ4 MDc1NTUgMTM0ODA3NTU3IDEzNDgwNzU1MyAxMzQ4MDc1NTUgMTM0ODA3NTU3IDEzNDgwNzU1MyAx MzQ4MDc1NTUgMTM0ODA3NTU3O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQt YXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6 74OYOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczsN Cgltc28tZmFyZWFzdC1mb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgltc28tYmlkaS1m b250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjsNCgljb2xvcjojMUY0OTdEO30NCkBsaXN0IGww OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBO ZXciO30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4 LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2 ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30N CkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNv LWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCWZvbnQtZmFtaWx5 OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LTE4LjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRv bTowY207fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEw MjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAv Pg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tR0IiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5IaSBDYXJzdGVuLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JbiBhbiBJb1QgY29udGV4 dCBJIHdvdWxkIGFyZ3VlIHRoYXQgYW4gYXV0aG9yIG9mdGVuIGhhcyBhIGZhaXJseSBnb29kIGlk ZWEgd2hlcmUgaGlzIGNvZGUgd2lsbCBiZSB1c2VkIHNpbmNlIElvVCBkZXZpY2VzIGFyZSBvZnRl biBwdXJwb3NlIGJ1aWx0Lg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlN0cmljdGx5 IHNwZWFraW5nIHlvdSBhcmUgcmlnaHQgdGhhdCB0aGUgc2lnbmF0dXJlIGlzbuKAmXQgcmVhbGx5 IG92ZXIgdGhlIGZpcm13YXJlIGl0c2VsZiBidXQgcmF0aGVyIG92ZXIgdGhlIG1hbmlmZXN0LCB3 aGljaCBpbmNsdWRlcyB0aGUgaGFzaCBvZiB0aGUgZmlybXdhcmUuDQogU28sIHRoZXJlIGhhcyB0 byBiZSBhIHJlbGF0aW9uc2hpcCBiZXR3ZWVuIHRoZSBzaWduYXR1cmUgY292ZXJpbmcgdGhlIG1h bmlmZXN0IGluY2x1ZGluZyB0aGUgY2xhaW1zIGFuZCB0aGUgZmlybXdhcmUgaXQgcmVsYXRlcyB0 by4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SSBkbywgaG93ZXZlciwgYWdyZWUgdGhhdCB0aGUgdGVybWlub2xvZ3kg SSBwcm9wb3NlZCBiZWxvdyBpcyBub3QgaWRlYWwuIEkgYW0gb3BlbiB0byBvdGhlciBzdWdnZXN0 aW9ucy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+Q2lhbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IYW5u ZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0 O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gQ2Fyc3RlbiBCb3JtYW5uIFtt YWlsdG86Y2Fib0B0emkub3JnXQ0KPGJyPg0KPGI+U2VudDo8L2I+IDAxIE1hcmNoIDIwMTggMDU6 NTQ8YnI+DQo8Yj5Ubzo8L2I+IEhhbm5lcyBUc2Nob2ZlbmlnPGJyPg0KPGI+Q2M6PC9iPiBSdXNz IEhvdXNsZXk7IHN1aXRAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtTdWl0XSBB cHByb3ZhbCBvZiBGaXJtd2FyZSBVcGRhdGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZxdW90O1NpZ25l cnMmcXVvdDsgZG9uJ3Qgc2lnbiBmaXJtd2FyZSwgdGhleSBzaWduIGEgY2xhaW0gb2YgZml0bmVz cyBmb3IgYSBzcGVjaWZpYyBwdXJwb3NlL3VzYWdlIHNpdHVhdGlvbi4gVGhlIGF1dGhvciBtYXkg aGF2ZSBubyBpZGVhIHdoYXQgdGhhdCBwdXJwb3NlIGlzLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PGRpdiBpZD0iQXBwbGVNYWlsU2lnbmF0dXJlIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNlbnQg ZnJvbSZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuMHB0Ij5tb2JpbGU8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCk9uIDI4LiBGZWIgMjAxOCwgYXQgMjA6NTcsIEhh bm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVmPSJtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbSI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgUnVzcywNCjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0 OmwwIGxldmVsMSBsZm8yIj48IVtpZiAhc3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6V2luZ2RpbmdzO2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25v cmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7 Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT5XaHkgbm90IHNpZ25lcj8g Jm5ic3A7VGhlIHF1YWxpdHkgY29udHJvbCAvIHJlbGVhc2UgcHJvY2VzcyB3aWxsIGJlIGRpZmZl cmVudCBpbiBtYW55IHNpdHVhdGlvbnMsIGJ1dCBzaWduaW5nIHRoZSBmaXJtd2FyZSBzaG91bGQg YmUgdGhlIGZpbmFsIHN0ZXAuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkN1cnJlbnRseSB0aGUgZGVmaW5pdGlvbiBvZiB0aGUgYXV0 aG9yIHNheXM6DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2si PiZuYnNwOyZuYnNwOyAtJm5ic3A7IEF1dGhvcjogVGhlIGF1dGhvciBpcyB0aGUgZW50aXR5IHRo YXQgY3JlYXRlcyB0aGUgZmlybXdhcmUgaW1hZ2UsPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBzaWducyBhbmQvb3IgZW5jcnlwdHMgaXQgYW5kIGF0dGFjaGVzIGEgbWFu aWZlc3QgdG8gaXQuJm5ic3A7IFRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgYXV0aG9yIGlzIG1vc3QgbGlrZWx5IGEgZGV2ZWxvcGVyIHVzaW5nIGEgc2V0IG9mIHRv b2xzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+SW4gdGhhdCBzZW5zZSBoZSBpcyBhbHNvIGEgc2lnbmVyLiBPZiBjb3Vy c2UsIHdlIGNhbiBjaGFuZ2UgdGhlIGF1dGhvciB0byBkZXZlbG9wZXIgYW5kIGp1c3QgZGVmaW5l IGl0IGFzDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZu YnNwOyZuYnNwOyAtJm5ic3A7IERldmVsb3BlcjogVGhlIGRldmVsb3BlciBpcyB0aGUgZW50aXR5 IHRoYXQgY3JlYXRlcyB0aGUgZmlybXdhcmUgaW1hZ2UuDQo8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFuZCB0aGVuIHdlIHdvdWxkIGhhdmUgdG8gYWRkIHRo ZSBzaWduZXI6DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5l dyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPiZuYnNwOyZuYnNwOyAtJm5ic3A7 IFNpZ25lcjogVGhlIHNpZ25lciBpcyB0aGUgZW50aXR5IHRoYXQgYXBwcm92ZXMgdGhlIGRpc3Ry aWJ1dGlvbiBvZiB0aGUNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDtmaXJtd2FyZSBhbmQgc2lnbnMgdGhlIG1hbmlmZXN0IGFuZCBvcHRpb25hbGx5IGVuY3J5 cHRzIHRoZSBmaXJtd2FyZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjpibGFjayI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IFRoZXJlIG1heSBiZSBtdWx0aXBsZSBzaWduZXJzIGludm9sdmVkIGluIHRoZSBkaXN0cmlidXRp b24gb3IgbXVsdGlwbGUNCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7O2NvbG9yOmJsYWNrIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDthcHByb3ZhbCBzdGVwcyBpbnZvbHZpbmcgb25seSBhIHNpbmdsZSBzaWduYXR1cmUgY29t cHV0YXRpb24uDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPldoaWxlIGl0IGRvZXMgbm90IHByb3Blcmx5IGFkZHJlc3Mg dGhlIG11bHRpLXN0YWdlIGFwcHJvdmFsIHByb2Nlc3MgbmljZWx5IEkgdGhpbmsgaXQgaXMgYmV0 dGVyIHRoYW4gdGhlIGVhcmxpZXIgdmVyc2lvbi4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+V2hhdCBkbyB5b3UgdGhp bms/DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxl PSJ0ZXh0LWluZGVudDotMTguMHB0O21zby1saXN0OmwwIGxldmVsMSBsZm8yIj48IVtpZiAhc3Vw cG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzO2NvbG9yOiMxRjQ5 N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsOYPHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9z cGFuPjwhW2VuZGlmXT5CZWZvcmUgdGhlIGdyb3VwIHdhcyBjaGFydGVyZWQsIHdlIHRhbGtlZCBv biB0aGUgbGlzdCBhYm91dCB0aGUgcG9zc2libGUgc2lnbmF0dXJlIGFsZ29yaXRobXMuICZuYnNw O0kgYWR2b2NhdGVkIGEgaGFzaC1iYXNlZCBzaWduYXR1cmUgYmVjYXVzZSB0aGUgdmFsaWRhdGlv biBjb2RlIGlzIHNtYWxsIGFuZCB0aGUgdmFsaWRhdGlvbiB0aW1lIGlzIHNob3J0LiAmbmJzcDtE aWQgdGhpcyBjb21lIHVwPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5UaGlzIHRvcGljIGRpZCBub3QgY29tZSB1cCBpbiB0aGUgY29u ZmVyZW5jZSBjYWxsIG9uIE1vbmRheSBidXQgSSBoYWQgdGhlIGltcHJlc3Npb24gZnJvbSBlYXJs aWVyIGRpc2N1c3Npb25zIHRoYXQgdGhpcyBpcyBhIGRpcmVjdGlvbiB3ZSBzaG91bGQgZXhwbG9y ZSBwYXJ0aWN1bGFybHkNCiBzaW5jZSB0aGUgbGFyZ2VyIHNpZ25hdHVyZSBzaXplIHdpbGwgaW4g dGhpcyBhcHBsaWNhdGlvbiBiZSBsZXNzIG9mIGEgcHJvYmxlbSBnaXZlbiB0aGUgc2l6ZSBvZiB0 aGUgZmlybXdhcmUgaW1hZ2UgaW4gcmVsYXRpb25zaGlwIHRvIGl0LiBJTUhPIHRoaXMgY291bGQg ZXZlbiBiZSBhIEhhY2thdGhvbiBwcm9qZWN0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Q2lhbzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5IYW5uZXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J TVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFj aG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRl ciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3Ro ZXIgcGVyc29uLA0KIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhl IGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBw dDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NClN1aXQgbWFp bGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOlN1aXRAaWV0Zi5vcmciPlN1aXRAaWV0Zi5v cmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9zdWl0Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQ8L2E+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KSU1QT1JUQU5UIE5P VElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUg Y29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0 aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRl bHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwg dXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlv biBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_AM4PR0801MB2706EB624E22C4BD2EAF13DBFAC60AM4PR0801MB2706_--