From nobody Sun Jul 1 10:49:24 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4280F130ECF; Sun, 1 Jul 2018 10:49:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vtyhPSoIMaAb; Sun, 1 Jul 2018 10:48:57 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13D72130E7B; Sun, 1 Jul 2018 10:48:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w61Hmqwp023279; Sun, 1 Jul 2018 19:48:52 +0200 (CEST) Received: from [192.168.217.114] (p5DC7FF04.dip0.t-ipconnect.de [93.199.255.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 41JdD42gxwzDXdT; Sun, 1 Jul 2018 19:48:52 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 552160130.262315-1c6e6210815636f22af02fa159785a11 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Message-Id: Date: Sun, 1 Jul 2018 19:48:51 +0200 To: suit , teep@ietf.org, din@irtf.org X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: [Suit] Constrained Node/Network Cluster @ IETF102: FINAL AGENDA X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jul 2018 17:49:08 -0000 I forgot to send the update of my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF102. Remember that "FINAL" means this will be the basis for printed agenda sheets, there is still some potential for changes after that. The only change from the previous draft agenda (apart from different room assignments) seems to be the move of SECDISPATCH on top of the first CORE slot and of SUIT into what previously was the SECDISPATCH slot. The conflicts ACE vs. DISPATCH as well as CBOR vs. 6LO vs. TEEP remain. All times are EDT (UTC-0400). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY -- Hackathon (including various interops) (Centre Ville) -- Sun 1800-2000: HotRFC (Viger) MONDAY, July 16, 2018 0930-1200 Morning Session I Duluth ART dispatch Dispatch WG - Joint with ARTAREA Laurier INT 6man IPv6 Maintenance WG Place du Canada RTG detnet Deterministic Networking WG Viger SEC *** ace Authentication and Authorization for = Constrained Environments WG 1330-1530 Afternoon Session I Laurier INT ipwave IP Wireless Access in Vehicular = Environments WG Place du Canada SEC tls Transport Layer Security WG 1550-1750 Afternoon Session II Duluth ART *** core Constrained RESTful Environments WG Laurier INT intarea Internet Area Working Group WG Viger SEC secdispatch Security Dispatch WG 1810-1940 Afternoon Session III Laurier GEN rfcplusplus The label "RFC" BOF TUESDAY, July 17, 2018 0930-1200 Morning Session I Place du Canada IRTF irtfopen IRTF Open Meeting St-Paul/St-Cath RTG babel Babel routing protocol WG Duluth RTG *** roll Routing Over Low power and Lossy = networks WG 1330-1530 Afternoon Session I Van Horne ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Duluth INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Laurier RTG rtgarea Routing Area Open Meeting Viger SEC *** teep Trusted Execution Environment = Provisioning WG 1550-1820 Afternoon Session II Place du Canada ART httpbis Hypertext Transfer Protocol WG Viger IRTF cfrg Crypto Forum - 1720 - 1820 Centre Ville IRTF icnrg Information-Centric Networking Van Horne SEC acme Automated Certificate Management = Environment WG - 1720 - 1820 Van Horne SEC oauth Web Authorization Protocol WG - 1550 - = 1720 Duluth TSV taps Transport Services WG WEDNESDAY, July 18, 2018 0930-1200 Morning Session I Van Horne OPS anima Autonomic Networking Integrated Model = and Approach WG St-Paul/St-Cath RTG bier Bit Indexed Explicit Replication WG Duluth SEC *** suit Software Updates for Internet of Things = WG Place du Canada TSV quic QUIC WG 1330-1500 Afternoon Session I Laurier ART httpbis Hypertext Transfer Protocol WG Duluth INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG 1520-1650 Afternoon Session II Centre Ville INT homenet Home Networking WG Viger TSV tsvarea Transport Area Open Meeting THURSDAY, July 19, 2018 0930-1200 Morning Session I Duluth INT dnssd Extensions for Scalable DNS Service = Discovery WG Centre Ville INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Place du Canada IRTF maprg Measurement and Analysis for Protocols Viger SEC mls Messaging Layer Security WG Van Horne SEC oauth Web Authorization Protocol WG - 0930 - = 1100 1330-1530 Afternoon Session I Laurier OPS v6ops IPv6 Operations WG Centre Ville RTG rift Routing In Fat Trees WG Place du Canada SEC saag Security Area Open Meeting 1550-1750 Afternoon Session II Laurier IRTF*** t2trg Thing-to-Thing Viger OPS driu DNS Resolver Identification and Use BOF Centre Ville TSV tsvwg Transport Area Working Group WG 1810-1910 Afternoon Session III Van Horne ART *** core Constrained RESTful Environments WG Laurier SEC tls Transport Layer Security WG Centre Ville TSV tsvwg Transport Area Working Group WG FRIDAY, July 20, 2018 0930-1130 Morning Session I Centre Ville IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Place du Canada OPS v6ops IPv6 Operations WG St-Paul/St-Cath TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1150-1320 Afternoon Session I Duluth INT *** lwig Light-Weight Implementation Guidance WG Laurier IRTF panrg Path Aware Networking Proposed RG Centre Ville SEC tokbind Token Binding WG From nobody Sun Jul 1 11:01:53 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBCFA130DD5 for ; Sun, 1 Jul 2018 11:01:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id leUamr65WK4p for ; Sun, 1 Jul 2018 11:01:48 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 906BC130DD2 for ; Sun, 1 Jul 2018 11:01:48 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 615F7300A2C for ; Sun, 1 Jul 2018 14:01:46 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 6AfFKBrsNrJ1 for ; Sun, 1 Jul 2018 14:01:44 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id E571C300541; Sun, 1 Jul 2018 14:01:43 -0400 (EDT) From: Russ Housley Message-Id: <79884F3D-C248-40F2-89BE-FA85A7018F2F@vigilsec.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_A00EB9E7-61D1-489D-B366-D7626C2B28BF" Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Date: Sun, 1 Jul 2018 14:01:44 -0400 In-Reply-To: <140080C241BAA1419B58F093108F9EDC1E0D18AA@UK-MAL-MBOX-01.dyson.global.corp> Cc: suit To: Tony Putman References: <31676.1528913351@localhost> <04f401d40349$33a58b10$9af0a130$@augustcellars.com> <0CDB8D05-0214-4749-9907-5A1B0B4A2191@arm.com> <697B1DC9-B1DE-48BA-ADC6-EF936208AFCE@vigilsec.com> <9906B2BC-BFC2-4F83-A0F6-FFCC81912237@arm.com> <140080C241BAA1419B58F093108F9EDC1E0D1690@UK-MAL-MBOX-01.dyson.global.corp> <18F16995-D6BF-4C68-9E93-B1CF93D4369D@vigilsec.com> <140080C241BAA1419B58F093108F9EDC1E0D18AA@UK-MAL-MBOX-01.dyson.global.corp> X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: Re: [Suit] draft-housley-suit-cose-hash-sig X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jul 2018 18:01:52 -0000 --Apple-Mail=_A00EB9E7-61D1-489D-B366-D7626C2B28BF Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Tony: Thanks for taking the time to do a review. Sorry it has taken me so = long to respond. > Some further comments on your draft suit-cose-hash-sig: > =20 > In a number of places, starting in section 3, you limit this = specification > to using SHA-256. As far as I can see, if a new RFC were issued = updating > [HASHSIG} and using a different hash function, this specification = would > not change due to the self-describing nature of the signature. So = while > the restriction applies to [HASHSIG}, which is defining actual = signatures, > I believe it does not apply to this draft, which is defining a way to > transport signatures. If [HASHSIG] were extended to use hash functions beyond SHA-256, then = additional values would need to be registered. IANA registries are set = up by [HASHSIG] to allow for those future registrations. I'll try to come up with some working that embraces this flexibility. > Section 3.1: "Each signed public key is represented by the hash value = at > the root of the tree": it also contains information about the tree > structure (type and otstype) and the identity I; but perhaps this = detail > is not needed. I suggest: Each signed public key is represented by the hash value at the root of the tree, and it also contains information about the tree structure. The signature over the public key is an LMS signature as described in Section 3.2. > End of section 3.1: I find the text "lms_signature_on_public_key[0]" > (and so on) misleading because the signature is actually on = public_key[1]. > I feel it would be better to be a bit more verbose, and define: > signature[k-1] =3D = lms_signature_on_public_key_k_using_private_key[k-1] > signed_public_key[k] =3D signature[k-1] || public_key[k] > Then the overall tree is just > u32str(Nspk) || > signed_public_key[1] || > signed_public_key[2] || > ... > signed_public_key[Nspk-1] || > signed_public_key[Nspk] || > lms_signature_on_message_using_private_key[Nspk] I see that I did not achieve the desired alignment with the format used = in Section 7 of [HASHSIG], which uses this structure: /* hierarchical signature system (hss) */ struct hss_public_key { unsigned int L; lms_public_key pub; }; struct signed_public_key { lms_signature sig; lms_public_key pub; } struct hss_signature { signed_public_key signed_keys<7>; lms_signature sig_of_message; }; How about the following? The elements of the HSS signature value for a tree with Nspk levels can be summarized as: u32str(Nspk) || signed_public_key[1] || signed_public_key[2] || ... signed_public_key[Nspk-1] || signed_public_key[Nspk] || lms_signature /* signature of message */ where, as defined in Section 7 of [HASHSIG], a signed_public_key is the lms_signature over the public key followed by the public key itself. > Section 3.2, third paragraph: I suggest putting the elements in the = same > order that they appear in the signature, namely: > "An LMS signature consists of four elements: the number of the leaf > associated with the LM-OTS signature, an LM-OTS signature as = described > in Section 3.3, a typecode indicating the particular LMS algorithm, > and an array of values that is associated with the path through the > tree from the leaf associated with the LM-OTS signature to the = root." > It is probably worth noting here that the LM-OTS signature starts with > an ots-typecode, so that the signature can be easily parsed. I agree. Fixed. > Section 3.3, last line: I suggest replacing the first element with > u32str(otstype) for clarity. It should be clear from context, but I = think > it's worth emphasising. I agree. Done. > Section 4, second paragraph: "The first four bytes of each LMS = signature > value contains type code" is not correct. I suggest being less = specific > and say something like "the LMS signature value is self-describing", = as > parsing is a little more difficult to explain. Alternatively, reverse = the > order of describing the parts, to that the self-parsing of the OTS > signature has already been explained before coming to the LMS = signature. This text was correct for a previous version of [HASHSIG]. As you say, = the previous sections cover this point already. Perhaps it would be = better to simply say: The signature value is a large byte string. The byte string is designed for easy parsing, and it includes a counter and type codes that indirectly provide all of the information that is needed to parse the byte string during signature validation. > Section 4: There is no mention of which kid to use. This may be a = matter > of convention between sender and receiver, but if public keys are used > as trust anchors then the identity I of the public key could be sent = in > the kid field. I think this should be mentioned at least as a MAY, to > facilitate interoperability. RFC 8152 says: kid: This parameter identifies one piece of data that can be used as input to find the needed cryptographic key. The value of this parameter can be matched against the 'kid' member in a COSE_Key structure. Other methods of key distribution can define an equivalent field to be matched. Applications MUST NOT assume that 'kid' values are unique. There may be more than one key with the same 'kid' value, so all of the keys associated with this 'kid' may need to be checked. The internal structure of 'kid' values is not defined and cannot be relied on by applications. Key identifier values are hints about which key to use. This is not a security-critical field. For this reason, it can be placed in the unprotected headers bucket. Since applications MUST NOT assume that the kid is unique, I am not sure = that the kid should be called out here. At most, I could say: o If the 'kid' field is present, and it MAY be used to identify = the intended public key. > Section 5.1, last paragraph: The generation of signatures also relies = on > random numbers. Their generation is much less sensitive than the = generation > of private keys, so don't lump them together in the same paragraph, = but > it is worth a mention. As an aside, is there any investigation into a > deterministic signature, e.g. by setting C to a hash of all the = private > keys? I am not aware of any investigation into deterministic hash-based = signatures. I suggest: The generation of hash-based signatures also depends on random numbers. While the consequences of an inadequate pseudo-random number generator (PRNGs) to generate these values is much less severe than the generation of private keys, the guidance in [RFC4086] remains important. > Section 6: Some more idle speculation on my part. In software update, > the signed bundle *should* have a unique version number. If there were > a way to map version number to LMS node, this would provide a = different > way to ensure that the same key was never reused. But I agree that = such > a discussion doesn't belong in this document. That would also make it difficult to roll from one trust anchor to = another. This needs more thought. > Section 7.1/7.2: Please update the "Description" to be more specific, > such as: > "Description: Hash-based digital signatures using HSS/LMS" and > "Description: Public key of HSS/LMS hash-based digital signature" Good idea. Done. Russ --Apple-Mail=_A00EB9E7-61D1-489D-B366-D7626C2B28BF Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Tony:

Thanks for taking the time to do a review.  Sorry it has = taken me so long to respond.

Some further comments on your draft = suit-cose-hash-sig:
 
In a number of = places, starting in section 3, you limit this specification
to using SHA-256. As far as I can see, if a new = RFC were issued updating
[HASHSIG} and using = a different hash function, this specification would
not change due to the self-describing nature of = the signature. So while
the restriction = applies to [HASHSIG}, which is defining actual signatures,
I believe it does not apply to this draft, which = is defining a way to
transport = signatures.

If [HASHSIG] were extended to use hash functions beyond = SHA-256, then additional values would need to be registered.  IANA = registries are set up by [HASHSIG] to allow for those future = registrations.

I'll try to come up = with some working that embraces this flexibility.

 Section 3.1: "Each signed = public key is represented by the hash value at
the root of the = tree": it also contains information about the tree
structure (type and otstype) and the identity I; = but perhaps this detail
is not = needed.

I = suggest:

   Each = signed public key is represented by the hash value at the = root
   of the tree, and it also contains = information about the tree
   structure.  The = signature over the public key is an LMS signature as
  =  described in Section 3.2.

 End of section 3.1: I find the text = "lms_signature_on_public_key[0]"
(and so on) misleading because the signature is = actually on public_key[1].
I feel it would be = better to be a bit more verbose, and define:
  signature[k-1] =3D = lms_signature_on_public_key_k_using_private_key[k-1]
  signed_public_key[k] =3D signature[k-1] = || public_key[k]
Then the overall tree is = just
  u32str(Nspk) ||
  signed_public_key[1] ||
  signed_public_key[2] ||
     ...
  signed_public_key[Nspk-1] ||
  signed_public_key[Nspk] ||
  = lms_signature_on_message_using_private_key[Nspk]

I see that I did not achieve the desired = alignment with the format used in Section 7 of [HASHSIG], which uses = this structure:

   /* = hierarchical signature system (hss)  */

   struct hss_public_key = {
     unsigned int L;
    =  lms_public_key pub;
   };

   struct signed_public_key = {
     lms_signature sig;
  =    lms_public_key pub;
   }

   struct hss_signature = {
     signed_public_key = signed_keys<7>;
     lms_signature = sig_of_message;
   };

How about the following?

  =  The elements of the HSS signature value for a tree with Nspk = levels
   can be summarized as:

      = u32str(Nspk) ||
      = signed_public_key[1] ||
      = signed_public_key[2] ||
        =  ...
      = signed_public_key[Nspk-1] ||
      = signed_public_key[Nspk] ||
      = lms_signature  /* signature of message */

   where, as defined in = Section 7 of [HASHSIG], a signed_public_key is
 =  the lms_signature over the public key followed by the public = key
   itself.

Section 3.2, third = paragraph: I suggest putting the elements in the same
order that they appear in the signature, = namely:
  "An LMS signature consists of four = elements: the number of the leaf
   associated with the LM-OTS signature, an = LM-OTS signature as described
   in = Section 3.3, a typecode indicating the particular LMS algorithm,
   and an array of values that is = associated with the path through the
   tree from the leaf associated with = the LM-OTS signature to the root."
It is probably worth = noting here that the LM-OTS signature starts with
an ots-typecode, so that the signature can be = easily parsed.

I = agree.  Fixed.

Section 3.3, last line: I suggest replacing the first = element with
u32str(otstype) for clarity. It should be clear = from context, but I think
it's worth = emphasising.

I = agree.  Done.

Section 4, second paragraph: "The first four bytes of = each LMS signature
value contains type code" is not correct. I = suggest being less specific
and say something = like "the LMS signature value is self-describing", as
parsing is a little more difficult to explain. = Alternatively, reverse the
order of describing = the parts, to that the self-parsing of the OTS
signature has already been explained before = coming to the LMS signature.

This text was correct for a previous version of = [HASHSIG].  As you say, the previous sections cover this point = already.  Perhaps it would be better to simply say:

   The signature value is a large = byte string.  The byte string is
   designed = for easy parsing, and it includes a counter and type = codes
   that indirectly provide all of the = information that is needed to
   parse the byte = string during signature validation.

Section 4: There is no mention of which kid to use. This may = be a matter
of convention between sender and receiver, but = if public keys are used
as trust anchors = then the identity I of the public key could be sent in
the kid field. I think this should be mentioned = at least as a MAY, to
facilitate = interoperability.

RFC 8152 says:

   kid:  This parameter identifies = one piece of data that can be used as
      = input to find the needed cryptographic key.  The value of = this
      parameter can be matched against the = 'kid' member in a COSE_Key
      structure. =  Other methods of key distribution can define an
  =     equivalent field to be matched.  Applications MUST = NOT assume that
      'kid' values are unique. =  There may be more than one key with the
    =   same 'kid' value, so all of the keys associated with this = 'kid'
      may need to be checked.  The = internal structure of 'kid' values is
      not = defined and cannot be relied on by applications. =  Key
      identifier values are hints = about which key to use.  This is not a
    =   security-critical field.  For this reason, it can be placed = in the
      unprotected headers = bucket.

Since applications MUST NOT = assume that the kid is unique, I am not sure that the kid should be = called out here.  At most, I could say:

      o  If the 'kid' = field is present, and it MAY be used to identify the intended public = key.

Section 5.1, last paragraph: The generation of = signatures also relies on
random numbers. = Their generation is much less sensitive than the generation
of private keys, so don't lump them together in = the same paragraph, but
it is worth a = mention. As an aside, is there any investigation into a
deterministic signature, e.g. by setting C to a = hash of all the private
keys?

I am not aware of any investigation into deterministic = hash-based signatures.

I = suggest:

   The = generation of hash-based signatures also depends on = random
   numbers.  While the consequences of = an inadequate pseudo-random
   number generator = (PRNGs) to generate these values is much less severe
  =  than the generation of private keys, the guidance in = [RFC4086]
   remains important.

Section 6: Some more idle speculation on my part. In software = update,
the signed bundle *should* have a unique version number. If = there were
a way to map version number to LMS node, this = would provide a different
way to ensure that = the same key was never reused. But I agree that such
a discussion doesn't belong in this = document.

That = would also make it difficult to roll from one trust anchor to another. =  This needs more thought.

Section 7.1/7.2: Please update the = "Description" to be more specific,
such as:
  = "Description:  Hash-based digital signatures using HSS/LMS" and
  "Description: Public key of HSS/LMS = hash-based digital signature"

Good idea.  Done.

Russ

= --Apple-Mail=_A00EB9E7-61D1-489D-B366-D7626C2B28BF-- From nobody Sun Jul 1 11:53:04 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54520130E80 for ; Sun, 1 Jul 2018 11:53:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iX-xQLzZaQYW for ; Sun, 1 Jul 2018 11:53:01 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB4C3130E78 for ; Sun, 1 Jul 2018 11:53:00 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id B474F300A2C for ; Sun, 1 Jul 2018 14:52:58 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id ik3S2pYltAHu for ; Sun, 1 Jul 2018 14:52:57 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id 77897300541 for ; Sun, 1 Jul 2018 14:52:57 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_2FB17631-F823-4ED9-A5A6-86F31D512321" Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Message-Id: References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> To: suit Date: Sun, 1 Jul 2018 14:52:38 -0400 X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jul 2018 18:53:03 -0000 --Apple-Mail=_2FB17631-F823-4ED9-A5A6-86F31D512321 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii FYI > From: internet-drafts@ietf.org > Subject: New Version Notification for = draft-housley-suit-cose-hash-sig-03.txt > Date: July 1, 2018 at 2:14:52 PM EDT > To: "Russ Housley" >=20 >=20 > A new version of I-D, draft-housley-suit-cose-hash-sig-03.txt > has been successfully submitted by Russ Housley and posted to the > IETF repository. >=20 > Name: draft-housley-suit-cose-hash-sig > Revision: 03 > Title: Use of the Hash-based Signature Algorithm with = CBOR Object Signing and Encryption (COSE) > Document date: 2018-07-01 > Group: Individual Submission > Pages: 11 > URL: = https://www.ietf.org/internet-drafts/draft-housley-suit-cose-hash-sig-03.t= xt > Status: = https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-sig/ > Htmlized: = https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-03 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-hash-sig > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-housley-suit-cose-hash-sig-03 >=20 > Abstract: > This document specifies the conventions for using the = Leighton-Micali > Signature (LMS) algorithm for digital signatures with the CBOR = Object > Signing and Encryption (COSE) syntax. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 --Apple-Mail=_2FB17631-F823-4ED9-A5A6-86F31D512321 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii FYI

From: internet-drafts@ietf.org
Subject: = New Version = Notification for draft-housley-suit-cose-hash-sig-03.txt
Date: = July 1, 2018 at 2:14:52 PM = EDT
To: = "Russ Housley" <housley@vigilsec.com>


A new version = of I-D, draft-housley-suit-cose-hash-sig-03.txt
has been = successfully submitted by Russ Housley and posted to the
IETF repository.

Name: = draft-housley-suit-cose-hash-sig
Revision: 03
Title:= = Use of the Hash-based Signature Algorithm with CBOR Object = Signing and Encryption (COSE)
Document date: = 2018-07-01
Group: Individual Submission
Pages:= = 11
URL: =            https://www.ietf.org/internet-drafts/draft-housley-suit-cose-ha= sh-sig-03.txt
Status: =         https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-s= ig/
Htmlized:       https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-03=
Htmlized:       https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-h= ash-sig
Diff: =           https://www.ietf.org/rfcdiff?url2=3Ddraft-housley-suit-cose-has= h-sig-03

Abstract:
=   This document specifies the conventions for using the = Leighton-Micali
  Signature (LMS) algorithm for = digital signatures with the CBOR Object
=   Signing and Encryption (COSE) syntax.




Please note that = it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat


= --Apple-Mail=_2FB17631-F823-4ED9-A5A6-86F31D512321-- From nobody Mon Jul 2 02:54:01 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3EEA130F6A for ; Mon, 2 Jul 2018 02:53:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uLtHsPhTjkbR for ; Mon, 2 Jul 2018 02:53:47 -0700 (PDT) Received: from esa1.dyson.c3s2.iphmx.com (esa1.dyson.c3s2.iphmx.com [68.232.133.31]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CE16130FE1 for ; Mon, 2 Jul 2018 02:53:47 -0700 (PDT) X-IronPort-SPF: SKIP X-IronPort-AV: E=McAfee;i="5900,7806,8941"; a="40736631" X-IronPort-AV: E=Sophos; i="5.51,298,1526338800"; d="scan'208,217"; a="40736631" Received: from unknown (HELO uk-dlp-smtp-02.dyson.global.corp) ([62.189.202.16]) by esa1.dyson.c3s2.iphmx.com with ESMTP; 02 Jul 2018 11:01:56 +0100 Received: from uk-dlp-smtp-02.dyson.global.corp (uk-dlp-smtp-02.dyson.global.corp [127.0.0.1]) by uk-dlp-smtp-02.dyson.global.corp (Service) with ESMTP id 71C7394711; Mon, 2 Jul 2018 08:31:34 +0000 (GMT) Received: from UK-MAL-CAS-01.dyson.global.corp (unknown [10.1.108.2]) by uk-dlp-smtp-02.dyson.global.corp (Service) with ESMTP id 59BA094702; Mon, 2 Jul 2018 08:31:34 +0000 (GMT) Received: from UK-MAL-OWA-02.dyson.global.corp (10.1.108.7) by UK-MAL-CAS-01.dyson.global.corp (10.1.108.2) with Microsoft SMTP Server (TLS) id 14.3.319.2; Mon, 2 Jul 2018 10:53:43 +0100 Received: from UK-MAL-MBOX-01.dyson.global.corp ([fe80::3975:cbc9:490b:523a]) by UK-MAL-OWA-02.dyson.global.corp ([fe80::f9b6:1719:a6d9:1eca%10]) with mapi id 14.03.0319.002; Mon, 2 Jul 2018 10:53:43 +0100 From: Tony Putman To: Russ Housley CC: suit Thread-Topic: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt Thread-Index: AQHUEWzL4YFl7eL2YE+FR60dtiJF9aR7p6wg Date: Mon, 2 Jul 2018 09:53:42 +0000 Message-ID: <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.1.108.27] Content-Type: multipart/alternative; boundary="_000_140080C241BAA1419B58F093108F9EDC1E3CD29BUKMALMBOX01dyso_" MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 09:53:58 -0000 --_000_140080C241BAA1419B58F093108F9EDC1E3CD29BUKMALMBOX01dyso_ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Russ, Thanks for the new version of the draft. It addresses all my comments fully= except for the question of 'kid'. The point that I was trying to make ther= e was the LMS public key (unlike other public keys) has a well-defined iden= tity, called 'I' in [HASHSIG]. I agree that you can't be prescriptive about= this, but I suggest strengthening your new bullet point at the end of sect= ion 4 to: "If the 'kid' field is present, then it MAY contain the identity of the pu= blic key (called 'I' in [HASHSIG])." The situation that I'm thinking of here is one where the IoT device has mor= e than one HSS/LMS public key as trust anchor. Because public key parameter= s 'I' and 'q' are integral parts of the verification steps, the device may = have to attempt verification multiple times and anything which can improve = the chances of picking the right public key first time saves computation (e= nergy). Tony Dyson Technology Limited, company number 01959090, Tetbury Hill, Malmesbury= , SN16 0RP, UK. This message is intended solely for the addressee and may contain confident= ial information. If you have received this message in error, please immedia= tely and permanently delete it, and do not use, copy or disclose the inform= ation contained in this message or in any attachment. Dyson may monitor email traffic data and content for security & training. --_000_140080C241BAA1419B58F093108F9EDC1E3CD29BUKMALMBOX01dyso_ Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable

Russ,

 

Thanks for the new version of the draft= . It addresses all my comments fully except for the question of 'kid'. The = point that I was trying to make there was the LMS public key (unlike other public keys) has a well-defined identity, called 'I' in = [HASHSIG]. I agree that you can't be prescriptive about this, but I suggest= strengthening your new bullet point at the end of section 4 to:=

 "If the 'kid' field is prese= nt, then it MAY contain the identity of the public key (called 'I' in [HASH= SIG])."

 

The situation that I'm thinking of here= is one where the IoT device has more than one HSS/LMS public key as trust = anchor. Because public key parameters 'I' and 'q' are integral parts of the verification steps, the device may have to attempt verificati= on multiple times and anything which can improve the chances of picking the= right public key first time saves computation (energy).

 

Tony

 


Dyson Technology Limited, company number 01959090, Tetbury Hill, Malmesbury= , SN16 0RP, UK.
This message is intended solely for the addressee and may contain confident= ial information. If you have received this message in error, please immedia= tely and permanently delete it, and do not use, copy or disclose the inform= ation contained in this message or in any attachment.
Dyson may monitor email traffic data and content for security & trainin= g. --_000_140080C241BAA1419B58F093108F9EDC1E3CD29BUKMALMBOX01dyso_-- From nobody Mon Jul 2 07:25:29 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE90A130EFF for ; Mon, 2 Jul 2018 07:25:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0t_oSclAVNRf for ; Mon, 2 Jul 2018 07:25:24 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1681E130EF0 for ; Mon, 2 Jul 2018 07:25:24 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 6EE75300A30 for ; Mon, 2 Jul 2018 10:25:21 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 4uH4s-2IrUy3 for ; Mon, 2 Jul 2018 10:25:20 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id 0FA8D3002C6; Mon, 2 Jul 2018 10:25:20 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_4063C809-0784-4113-A578-5B2B3C259288" Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Date: Mon, 2 Jul 2018 10:25:20 -0400 In-Reply-To: <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> Cc: suit To: Tony Putman References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 14:25:26 -0000 --Apple-Mail=_4063C809-0784-4113-A578-5B2B3C259288 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Tony: > =20 > Thanks for the new version of the draft.. It addresses all my comments = fully except for the question of 'kid'. The point that I was trying to = make there was the LMS public key (unlike other public keys) has a = well-defined identity, called 'I' in [HASHSIG]. I agree that you can't = be prescriptive about this, but I suggest strengthening your new bullet = point at the end of section 4 to: > "If the 'kid' field is present, then it MAY contain the identity of = the public key (called 'I' in [HASHSIG])." > =20 > The situation that I'm thinking of here is one where the IoT device = has more than one HSS/LMS public key as trust anchor. Because public key = parameters 'I' and 'q' are integral parts of the verification steps, the = device may have to attempt verification multiple times and anything = which can improve the chances of picking the right public key first time = saves computation (energy). I totally misunderstood your comment, and now that I do, I'm not sure = that I agree. That said, maybe I am still not fully understanding your = point. I think the kid would identify a tree, not a node in the tree. The = signature value itself contains the information necessary to locate the = node within the tree. Russ --Apple-Mail=_4063C809-0784-4113-A578-5B2B3C259288 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Tony:
 
Thanks for the new version of the draft.. It = addresses all my comments fully except for the question of 'kid'. The = point that I was trying to make there was the LMS public key (unlike = other public keys) has a well-defined identity, called 'I' in [HASHSIG]. = I agree that you can't be prescriptive about this, but I suggest = strengthening your new bullet point at the end of section 4 to:
 "If the 'kid' field is present, then it = MAY contain the identity of the public key (called 'I' in = [HASHSIG])."
 
The situation that = I'm thinking of here is one where the IoT device has more than one = HSS/LMS public key as trust anchor. Because public key parameters 'I' = and 'q' are integral parts of the verification steps, the device may = have to attempt verification multiple times and anything which can = improve the chances of picking the right public key first time saves = computation (energy).

I totally misunderstood your comment, and now that I = do, I'm not sure that I agree.  That said, maybe I am still not = fully understanding your point.

I = think the kid would identify a tree, not a node in the tree.  The = signature value itself contains the information necessary to locate the = node within the tree.

Russ

= --Apple-Mail=_4063C809-0784-4113-A578-5B2B3C259288-- From nobody Mon Jul 2 08:12:29 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86C661310FA for ; Mon, 2 Jul 2018 08:12:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lU0UdV1PCzSA for ; Mon, 2 Jul 2018 08:12:24 -0700 (PDT) Received: from NAM02-SN1-obe.outbound.protection.outlook.com (mail-sn1nam02on0118.outbound.protection.outlook.com [104.47.36.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0FC2130F01 for ; Mon, 2 Jul 2018 08:12:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mLMWtn2daK1gJj7JkMxbd78ru6369LZ/kqbTZ+wEWq8=; b=FCzssJt4SW5A9yEZgDIIk6mjc9JU1/z1XpfS9PeZ39gu3U+MZYXZ0ElS2BjFeNMOris0X0O9mQr6rJGmDrsXi9x9Uahq6loiqiRmLhaWWqUFhT8irKw0Y+OiISocLKLA+q7d+6/8wstaFv90BIt3vGEj9ADdGSXD95jyLS9N1+k= Received: from DM5PR2101MB0805.namprd21.prod.outlook.com (10.167.105.149) by DM5PR2101MB1029.namprd21.prod.outlook.com (52.132.128.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.4; Mon, 2 Jul 2018 15:12:22 +0000 Received: from DM5PR2101MB0805.namprd21.prod.outlook.com ([fe80::30ec:e30c:8f5c:b685]) by DM5PR2101MB0805.namprd21.prod.outlook.com ([fe80::30ec:e30c:8f5c:b685%2]) with mapi id 15.20.0952.003; Mon, 2 Jul 2018 15:12:22 +0000 From: Dave Thaler To: David Brown , Tamas Ban , suit CC: "dev-mcuboot@lists.runtime.co" Thread-Topic: [dev-mcuboot] Reference implementation of SUIT manifest parsing Thread-Index: AQHUCVdILAtbp539SU2FpE+nQsDeqaR8Gnww Date: Mon, 2 Jul 2018 15:12:21 +0000 Message-ID: References: <20180619214859.GA4341@davidb.org> <10617C16-B988-42D2-AFB3-BCAC52AABB15@linaro.org> In-Reply-To: <10617C16-B988-42D2-AFB3-BCAC52AABB15@linaro.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-07-02T15:12:23.6326460Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [73.59.106.235] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR2101MB1029; 7:IPilGek9bGSasQpYOPZ4GwP+PSiZUW4t4qvhY62tVjRK/Nzn8i+F+wV1KyuwCsJ7ZVfZ9uHlpjXXZkNapo7EMyYm6lwdoa/IyihNi1khnwVQypvbHuXytxa1MyzZm/TOgkQSN+zgbUXxTi9beTVZF7pBLjIk+R1ZCA8vpMx3hjDddCT4+JvxyH6tUnWPIdlLCX5p9BDwbndnkAW0d5/TslhUMyb9gzS9mGHWqKD25Kd/8Kf/mxn0O1YqYTMqf0EK x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 280b2965-f5be-4258-5665-08d5e02e35ee x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7193020); SRVR:DM5PR2101MB1029; x-ms-traffictypediagnostic: DM5PR2101MB1029: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(89211679590171)(166708455590820)(189930954265078)(223705240517415)(788757137089)(219752817060721); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(10201501046)(3231270)(2018427008)(944501410)(52105095)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123562045)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:DM5PR2101MB1029; BCL:0; PCL:0; RULEID:; SRVR:DM5PR2101MB1029; x-forefront-prvs: 07215D0470 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(396003)(346002)(366004)(136003)(376002)(13464003)(199004)(189003)(40434004)(486006)(476003)(305945005)(316002)(25786009)(81156014)(81166006)(6506007)(8936002)(10090500001)(6436002)(68736007)(102836004)(55016002)(6306002)(53936002)(99286004)(53546011)(186003)(33656002)(229853002)(6116002)(3846002)(74316002)(7736002)(106356001)(5250100002)(14454004)(105586002)(26005)(478600001)(22452003)(966005)(6246003)(76176011)(66066001)(86612001)(256004)(97736004)(14444005)(86362001)(8990500004)(5024004)(5660300001)(110136005)(10290500003)(8676002)(11346002)(446003)(2906002)(4326008)(9686003)(2900100001)(7696005); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR2101MB1029; H:DM5PR2101MB0805.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: Up26wxTqkt5ioIQLfrWhk9ZzAAmjumT6GRgGi3R2e+KqcrwNj9icE8spCGlHX+Dq2/ofes6CesRci50QVZd/jDeZBX20OmZ2bnf90mOjnvGHeFBYSLJe7d2QV5izAAlvwvH2UCekFQ8sd0U7ZvQDk30UrQxHt+NbMkdSbShTfniMERoNXfd2I0NVhnFltUoTV1fkvYwKSb6285yRRpYjx+XaQ0Sn7DnRRn5FCXkZP0PKpPJMQ+H6d1NuIAReXSNI38RcqJgx18PZYMDR5t7ZYD1ZozvwNY33qCoFF28eozd0UFiOfGpkzC47q0lo7UXxuuRMrrLUY5FmDMrC7wUxRqUtYmvR8Vofuc+Bx3XhGtg= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 280b2965-f5be-4258-5665-08d5e02e35ee X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2018 15:12:21.9672 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR2101MB1029 Archived-At: Subject: Re: [Suit] [dev-mcuboot] Reference implementation of SUIT manifest parsing X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 15:12:28 -0000 UmVnYXJkaW5nIHRoZSBsaWNlbnNpbmcgaXNzdWVzIHdpdGggbGliY29zZS4uLg0KSWYgeW91IGhh dmVuJ3Qgc2VlbiBpdCBhbHJlYWR5LCBKaW0gU2NoYWFkIGhhcyBhbm90aGVyIENPU0UgaW1wbGVt ZW50YXRpb24gd2l0aCBiZXR0ZXIgbGljZW5zaW5nIHN1cHBvcnQuDQpKaW0gd3JpdGVzOg0KDQog ICAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KICAgRnJvbTogSmltIFNjaGFhZCA8aWV0ZkBh dWd1c3RjZWxsYXJzLmNvbT4gDQogICBTZW50OiBNb25kYXksIEp1bHkgMiwgMjAxOCA4OjA4IEFN DQogICBUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbT4NCiAgIFN1YmplY3Q6 IENPU0UgQyBpbXBsZW1lbnRhdGlvbg0KDQogICBodHRwczovL2dpdGh1Yi5jb20vY29zZS13Zy9D T1NFLUMNCg0KICAgVGhpcyBpcyBteSBpbXBsZW1lbnRhdGlvbi4gIEl0IGlzIG5vdCBmdWxseSBj b21wbGV0ZSBidXQgSSBrbm93IHRoYXQgc29tZSBvZiB0aGUgcGVvcGxlIChpLmUuIEhhbm5lcyBh bmQNCiAgIG90aGVycykgd2VyZSBwbGF5aW5nIHdpdGggaXQgYXQgdGhlIGxhc3QgSUVURiBtZWV0 aW5nIGFuZCB0aGV5IGhhdmUgbWFkZSBzb21lIGZpeGVzIGZvciBzaXplIGNvbnNpZGVyYXRpb25z Lg0KDQogICBKaW0NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFN1aXQgPHN1 aXQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIERhdmlkIEJyb3duDQpTZW50OiBUaHVy c2RheSwgSnVuZSAyMSwgMjAxOCA0OjU5IEFNDQpUbzogVGFtYXMgQmFuIDxUYW1hcy5CYW5AYXJt LmNvbT47IHN1aXQgPHN1aXRAaWV0Zi5vcmc+DQpDYzogZGV2LW1jdWJvb3RAbGlzdHMucnVudGlt ZS5jbw0KU3ViamVjdDogUmU6IFtTdWl0XSBbZGV2LW1jdWJvb3RdIFJlZmVyZW5jZSBpbXBsZW1l bnRhdGlvbiBvZiBTVUlUIG1hbmlmZXN0IHBhcnNpbmcNCg0KSSBkb24ndCByZWFsbHkgaGF2ZSBh biBpZGVhIG9uIHRoZSBjb2RlIHNpemUgY2hhbmdlLg0KDQpIb3dldmVyLCBJIGRvbid0IHRoaW5r IHdlIHNob3VsZCB1c2UgYW4gZXhpc3RpbmcgbGlicmFyeSBmb3IgdGhlIHBhcnNpbmcsIGJ1dCB3 cml0ZSBjdXN0b20gcHJvY2Vzc2luZyBjb2RlIGZvciB0aGUgdGhpbmdzIHdlIHN1cHBvcnQsIHNp bWlsYXIgdG8gaG93IHdlIHByb2Nlc3MgdGhlIFRMViBkYXRhIGFuZCB0aGUgc2lnbmF0dXJlcyBu b3cuICBJdCB3aWxsIGJlIGJlc3QgdG8gbm90IGp1c3QgYWxsb3cgYW55IGFyYml0cmFyeSBzaWdu YXR1cmUgdHlwZSwgYnV0IHNwZWNpZmljYWxseSByZXF1aXJlIGNlcnRhaW4gc3BlY2lmaWMgc2ln bmF0dXJlIHR5cGVzLg0KDQpEYXZpZA0KDQrvu79PbiA2LzIwLzE4LCA5OjA1IEFNLCAiVGFtYXMg QmFuIiA8VGFtYXMuQmFuQGFybS5jb20+IHdyb3RlOg0KDQogICAgSGkgRGF2aWQsDQogICAgDQog ICAgRG8geW91IGhhdmUgYW55IHJvdWdoIGVzdGltYXRlIGhvdyBtdWNoIHdpbGwgYmUgdGhlIGNv ZGUgc2l6ZSBpbmNyZWFzZWQgZHVlIHRvIHRoZSBsaWJzIGZvciB0aGUgcGFyc2luZyBtYW5pZmVz dCBmaWxlcyBpbiBDQk9SL0NPU0UgZm9ybWF0Pw0KICAgIA0KICAgIERvZXMgaXQgbmVlZCBhIHNl cGFyYXRlIGxpYiBmb3IgcGFyc2luZyBDQk9SKGkuZTogdGlueWNib3IsIGNuLWNib3IpIGFuZCBh IGRpZmZlcmVudCBvbmUgdG8gdmVyaWZ5IENPU0Ugc2lnbmluZz8NCiAgICANCiAgICBUYW1hcw0K ICAgIA0KICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgRnJvbTogZGV2LW1jdWJv b3QgPGRldi1tY3Vib290LWJvdW5jZXNAbGlzdHMucnVudGltZS5jbz4gT24gQmVoYWxmIE9mIERh dmlkIEJyb3duDQogICAgU2VudDogMTkgSnVuZSAyMDE4IDIzOjQ5DQogICAgVG86IHN1aXQgPHN1 aXRAaWV0Zi5vcmc+DQogICAgQ2M6IGRldi1tY3Vib290QGxpc3RzLnJ1bnRpbWUuY28NCiAgICBT dWJqZWN0OiBbZGV2LW1jdWJvb3RdIFJlZmVyZW5jZSBpbXBsZW1lbnRhdGlvbiBvZiBTVUlUIG1h bmlmZXN0IHBhcnNpbmcNCiAgICANCiAgICBBdCB0aGUgbGFzdCBoYWNrYXRob24sIHdvcmsgd2Fz IGRvbmUgb24gaW1wbGVtZW50YXRpb25zIG9mIHRoZSBTVUlUIG1hbmlmZXN0IGZvcm1hdC4gIE9u ZSB3YXkgdG8gZGVzY3JpYmUgdGhpcyBraW5kIG9mIHdvcmsgd291bGQgYmUgYXMgYSByZWZlcmVu Y2UgaW1wbGVtZW50YXRpb246IHNvbWV0aGluZyB0aGF0IGNvdWxkIGJlIGEgc3RhcnRpbmcgcG9p bnQgZm9yIGFueW9uZSB3aXNoaW5nIHRvIHVzZSBTVUlUIHRvIGRldmVsb3Agc29tZXRoaW5nLg0K ICAgIA0KICAgIEhvd2V2ZXIsIEkgaGFkIHRvIGxpbWl0IG15IGludm9sdmVtZW50IGluIHRoaXMg ZWZmb3J0LCBiZWNhdXNlIHNvbWUgb2YgdGhlIGNvZGUgYmVpbmcgdXNlZCB3YXMgY292ZXJlZCB1 bmRlciB0aGUgTEdQTCAyLjAuDQogICAgDQogICAgSSdtIHdvbmRlcmluZyBpZiBpdCB3b3VsZCBi ZSB1c2VmdWwgdG8gZGV2ZWxvcCBlcXVpdmFsZW50cyBvZiB0aGlzIGNvZGUgdW5kZXIgYSBsaWNl bnNlIHRoYXQgd291bGQgYmUgdXNhYmxlIGJ5IGEgbGFyZ2VyIGF1ZGllbmNlLiAgSSdtIGFjdHVh bGx5IGhhdmluZyBhIHByZXR0eSBoYXJkIHRpbWUgdW5kZXJzdGFuZGluZyBob3cgdGhlcmUgaXMg YW55IGF1ZGllbmNlIGZvciBib290bG9hZGVyIGNvZGUgY292ZXJlZCB1bmRlciB0aGUgTEdQTC4N CiAgICANCiAgICBBIGZldyBvZiB0aGUgcmVhc29ucyB0aGF0IHRoZSBMR1BMIGRvZXNuJ3Qgd29y ayBmb3IgbWUgKGFuZCBJIGJlbGlldmUgZG9lc24ndCB3b3JrIGZvciBtYW55IG9mIHRoZSBjdXJy ZW50IHVzZXMpLg0KICAgIA0KICAgICAgLSBUaGUgRlNGIGNvbnNpZGVycyB0aGUgQXBhY2hlIDIu MCBsaWNlbnNlIHRvIGJlIGluY29tcGF0aWJsZSB3aXRoDQogICAgICAgIHRoZSBHUEx2MiAoaW5j bHVkaW5nIHRoZSBMR1BMKS4NCiAgICANCiAgICAgIC0gVGhlIEFwYWNoZSBTb2Z0d2FyZSBGb3Vu ZGF0aW9uIGNvbnNpZGVycyBHUEx2MyB0byBiZSBjb21wYXRpYmxlIGluDQogICAgICAgIG9ubHkg b25lIGRpcmVjdGlvbiAoQXBhY2hlIDIuMCBjb2RlIGNhbiBiZSBsaW5rZWQgaW50byBhbg0KICAg ICAgICBvdGhlcndpc2UgR1BMdjMgYXBwbGljYXRpb24sIGJ1dCBHUEx2MyBjb2RlIGNhbm5vdCBi ZSBicm91Z2h0IGludG8NCiAgICAgICAgYW4gQXBhY2hlIDIuMCBwcm9qZWN0KS4NCiAgICANCiAg ICAgIC0gVGhlIEFwYWNoZSBTb2Z0d2FyZSBGb3VuZGF0aW9uIGNvbnNpZGVycyB0aGUgR1BMdjIg KGluY2x1ZGluZw0KICAgICAgICBMR1BMKSB0byBiZSBpbmNvbXBhdGlibGUgd2l0aCB0aGUgQXBh Y2hlIDIuMCBsaWNlbnNlLg0KICAgIA0KICAgICAgLSBCeSBNeW5ld3QgYW5kIFplcGh5ciBhcmUg bGljZW5zZWQgdW5kZXIgdGhlIEFwYWNoZSAyLjAgbGljZW5zZS4NCiAgICAgICAgTXluZXd0IGlz IGFuIEFwYWNoZSBwcm9qZWN0IGFuZCB3b3VsZCBmYWxsIHVuZGVyIHRoZWlyIGNvbnN0cmFpbnRz DQogICAgICAgIG9mIGZvcmJpZGRpbmcgdGhlIGluY2x1ZGluZyBvZiBhbnkgY29kZSB1bmRlciBh IEdQTCBsaWNlbnNlLiAgVGhlDQogICAgICAgIFplcGh5ciBwcm9qZWN0IHJlcXVpcmVzIGluY2x1 ZGVkIGNvZGUgdG8gYmUgdW5kZXIgdGhlIEFwYWNoZSAyLjANCiAgICAgICAgbGljZW5zZSwgYW5k IG9jY2FzaW9uYWxseSB3aWxsIGFsbG93IG90aGVyIG1vcmUgbGliZXJhbCBsaWNlbnNlZA0KICAg ICAgICBjb2RlIHRvIGJlIGluY2x1ZGVkLg0KICAgIA0KICAgIFJlZ2FyZGxlc3Mgb2YgdGhlIGFi b3ZlLCBJIHNlZSBhIGNvbmZsaWN0IGJldHdlZW4gdGhlIExHUEx2MiByZXF1aXJlbWVudCB0aGF0 IHRoZSB1c2VyIGJlIGFibGUgdG8gbW9kaWZ5IHRoZSBMR1BMdjIgbGljZW5zZWQgY29kZSwgYW5k IHRoZSBnZW5lcmFsIHB1cnBvc2Ugb2YgU1VJVCB0byBlbmZvcmNlIHRoYXQgb25seSBhdXRob3Jp emVkIGltYWdlcyBydW4gb24gdGhlIGRldmljZS4gIE9uZSBvZiB0aGUgcHVycG9zZXMgb2YgYSBz aWduZWQgbWFuaWZlc3QgaXMgdG8gcmVzdHJpY3QgdGhlIHZlcnkgYWN0aW9uIHRoYXQgdGhlIExH UEx2MiByZXF1aXJlcy4NCiAgICANCiAgICBNeSBjb25jbHVzaW9uczoNCiAgICANCiAgICAgIC0g bGliY29zZSAoYW5kIGFueSBvdGhlciBMR1BMdjIgY29kZSkgY2Fubm90IGJlIHVzZWQgYnkgWmVw aHlyLA0KICAgICAgICBNeW5ld3QsIGR1ZSB0byBwb2xpY2llcyBieSB0aGVzZSBwcm9qZWN0cy4g IEF0IGJlc3QsIGl0IHdvdWxkIGVuZA0KICAgICAgICB1cCBiZWluZyBzb21ldGhpbmcgdGhhdCBl bmQgdXNlcnMgd291bGQgaGF2ZSB0byBpbmNvcnBvcmF0ZSwgYW5kDQogICAgICAgIFNVSVQgc3Vw cG9ydCB3b3VsZCBub3QgYmUgYWJsZSB0byBiZWNvbWUgc3RhbmRhcmQgc3VwcG9ydCBvbiB0aGVz ZQ0KICAgICAgICBwbGF0Zm9ybXMuDQogICAgDQogICAgICAtIGxpYmNvc2UgKGFuZCBhbnkgb3Ro ZXIgTEdQTHYyIGNvZGUpIGNhbm5vdCBiZSB1c2VkIGJ5IFplcGh5ciwNCiAgICAgICAgTXluZXd0 LCBtYmVkIE9TLCBhbmQgTUNVYm9vdCwgZHVlIHRvIGluY29tcGF0aWJpbGl0eSBiZXR3ZWVuIHRo ZQ0KICAgICAgICBMR1BMdjIgYW5kIHRoZSBBcGFjaGUgMi4wIGxpY2Vuc2UuICAoU3BlY2lmaWNh bGx5LCBJIGRvIG5vdA0KICAgICAgICBiZWxpZXZlIHRoZSBjdXJyZW50IG1iZWQgT1MgU1VJVCB3 b3JrIGlzIGFsbG93ZWQpLg0KICAgIA0KICAgICAgLSBWZXJ5IGZldyBvZiBvdXIgZW5kIHVzZXJz IHdvdWxkIHdhbnQgdG8gbWVldCB0aGUgTEdQTHYyDQogICAgICAgIHJlcXVpcmVtZW50IGFsbG93 aW5nIGVuZCB1c2VycyB0byByZXBsYWNlIHRoZSBmaXJtd2FyZS4NCiAgICAgICAgU3BlY2lmaWNh bGx5LCB0aG9zZSB1c2VycyBkZXNpcmluZyBzaWduZWQgbWFuaWZlc3RzIHRvIGVuc3VyZSBvbmx5 DQogICAgICAgIGF1dGhvcml6ZWQgaW1hZ2VzIGNhbiBiZSBydW4gYXJlIGxpa2VseSBpbnRlbmRp bmcgdG8gcHJvaGliaXQgZW5kDQogICAgICAgIHVzZXJzIGZyb20gcnVubmluZyB0aGVpciBvd24g dmVyc2lvbnMgb2YgdGhlIGNvZGUuDQogICAgDQogICAgSSd2ZSB0cmllZCB0byBhdm9pZCBldmVu IGxvb2tpbmcgYXQgdGhlIGxpYmNvc2UgY29kZSAoYW5kIG1ha2luZyBzdXJlIHRvIGxvb2sgYXQg bGljZW5zZXMgY2FyZWZ1bGx5KSBzaW5jZSBpdCBzZWVtcyBsaWtlbHkgdGhhdCBJLCBvciBzb21l b25lIHdvcmtpbmcgb24gWmVwaHlyIG9yIE1DVWJvb3QpIHdpbGwgbmVlZCB0byBpbXBsZW1lbnQg Q09TRSBzdXBwb3J0IGluIG9yZGVyIHRvIHN1cHBvcnQgU1VJVC4NCiAgICANCiAgICBEYXZpZA0K ICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQogICAgTUNVQm9vdDogYSBzZWN1cmUsIG9wZW4gc291cmNlIGJvb3Rsb2FkZXIgZm9yIDMyLWJp dCBNQ1VzIGh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHAlM0ElMkYlMkZsaXN0cy5ydW50aW1lLmNvJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGZGV2 LW1jdWJvb3RfbGlzdHMucnVudGltZS5jbyZkYXRhPTAyJTdDMDElN0NkdGhhbGVyJTQwbWljcm9z b2Z0LmNvbSU3Q2Y5NjJiNmRmY2Y4ODQ5MjM1MTA0MDhkNWQ3NmU2OTNmJTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMSU3QzYzNjY1MTc5MTU3MzIxNzY3NSZzZGF0YT1U RW5VSWphRXp0Mjk4OEQlMkZpSmhQMlo5R3glMkJWSXN0WFlyalNFNCUyQnNaQjVRJTNEJnJlc2Vy dmVkPTANCiAgICBJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBh bmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZp bGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3Rp ZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50 cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBv ciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQogICAgDQoN Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClN1aXQg bWFpbGluZyBsaXN0DQpTdWl0QGlldGYub3JnDQpodHRwczovL25hMDEuc2FmZWxpbmtzLnByb3Rl Y3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxt YW4lMkZsaXN0aW5mbyUyRnN1aXQmZGF0YT0wMiU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5j b20lN0NmOTYyYjZkZmNmODg0OTIzNTEwNDA4ZDVkNzZlNjkzZiU3QzcyZjk4OGJmODZmMTQxYWY5 MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzElN0M2MzY2NTE3OTE1NzMyMTc2NzUmc2RhdGE9QzgzYlJ6 dk9Jb01udVpPaXVISEp6NmtJZWh5OGhCVyUyRjloTWk1S0NmT1ZNJTNEJnJlc2VydmVkPTANCg== From nobody Mon Jul 2 09:00:33 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81C531310A8 for ; Mon, 2 Jul 2018 09:00:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zR3QbvDI_DSC for ; Mon, 2 Jul 2018 09:00:16 -0700 (PDT) Received: from esa1.dyson.c3s2.iphmx.com (esa1.dyson.c3s2.iphmx.com [68.232.133.31]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB00A1310ED for ; Mon, 2 Jul 2018 09:00:03 -0700 (PDT) X-IronPort-SPF: SKIP X-IronPort-AV: E=McAfee;i="5900,7806,8942"; a="40754642" X-IronPort-AV: E=Sophos;i="5.51,299,1526338800"; d="scan'208";a="40754642" Received: from unknown (HELO uk-dlp-smtp-02.dyson.global.corp) ([62.189.202.16]) by esa1.dyson.c3s2.iphmx.com with ESMTP; 02 Jul 2018 17:05:54 +0100 Received: from uk-dlp-smtp-02.dyson.global.corp (uk-dlp-smtp-02.dyson.global.corp [127.0.0.1]) by uk-dlp-smtp-02.dyson.global.corp (Service) with ESMTP id 613459471B; Mon, 2 Jul 2018 14:37:49 +0000 (GMT) Received: from UK-MAL-CAS-01.dyson.global.corp (unknown [10.1.108.2]) by uk-dlp-smtp-02.dyson.global.corp (Service) with ESMTP id 6450594716; Mon, 2 Jul 2018 14:37:48 +0000 (GMT) Received: from UK-MAL-CAS-04.dyson.global.corp (10.1.108.112) by UK-MAL-CAS-01.dyson.global.corp (10.1.108.2) with Microsoft SMTP Server (TLS) id 14.3.319.2; Mon, 2 Jul 2018 16:59:58 +0100 Received: from UK-MAL-MBOX-01.dyson.global.corp ([fe80::3975:cbc9:490b:523a]) by UK-MAL-CAS-04.dyson.global.corp ([10.1.108.112]) with mapi id 14.03.0319.002; Mon, 2 Jul 2018 16:59:59 +0100 From: Tony Putman To: Russ Housley CC: suit Thread-Topic: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt Thread-Index: AQHUEWzL4YFl7eL2YE+FR60dtiJF9aR7p6wggABFuQCAACLyoA== Date: Mon, 2 Jul 2018 15:59:57 +0000 Message-ID: <140080C241BAA1419B58F093108F9EDC1E3CD428@UK-MAL-MBOX-01.dyson.global.corp> References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.1.108.27] Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 16:00:29 -0000 Russ, You say: > I think the kid would identify a tree, not a node in the tree. =A0The sig= nature value itself contains the information necessary to locate the node w= ithin the tree. Which I fully agree with, so I guess my text was off. How about: "If the 'kid' field is present, then it MAY contain the identity of the t= op-level HSS tree. This is called 'I' in [HASHSIG] and is contained in the = public key which corresponds to this tree." Without this hint, the verifier would potentially have to try the verificat= ion step for each of the trust anchors that it knows of (though only as far= as verifying the next public key in the chain); there is no direct way to = obtain 'I' from the signature and it is a parameter in the verification pro= cess. 'I' is present in the public key, but you're right that it's not the = identity of the key, but rather the identity of the tree as a whole. = Tony Dyson Technology Limited, company number 01959090, Tetbury Hill, Malmesbury= , SN16 0RP, UK. This message is intended solely for the addressee and may contain confident= ial information. If you have received this message in error, please immedia= tely and permanently delete it, and do not use, copy or disclose the inform= ation contained in this message or in any attachment. Dyson may monitor email traffic data and content for security & training. From nobody Mon Jul 2 09:14:48 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23366130ECA for ; Mon, 2 Jul 2018 09:14:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rpv5r-T2UHE8 for ; Mon, 2 Jul 2018 09:14:44 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7BFCC130DFC for ; Mon, 2 Jul 2018 09:14:44 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 5D1FC300A2F for ; Mon, 2 Jul 2018 12:14:42 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 6wZoTnAfP-KH for ; Mon, 2 Jul 2018 12:14:41 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id 65C833002C6; Mon, 2 Jul 2018 12:14:41 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) From: Russ Housley In-Reply-To: <140080C241BAA1419B58F093108F9EDC1E3CD428@UK-MAL-MBOX-01.dyson.global.corp> Date: Mon, 2 Jul 2018 12:14:41 -0400 Cc: suit Content-Transfer-Encoding: quoted-printable Message-Id: <46953690-8BA5-476E-885F-8E8D850A0946@vigilsec.com> References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> <140080C241BAA1419B58F093108F9EDC1E3CD428@UK-MAL-MBOX-01.dyson.global.corp> To: Tony Putman X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 16:14:47 -0000 I think I understand now. How about: o If the 'kid' field is present, and it MAY be used to identify the top of the HSS tree. In [HASHSIG], this identifier is called 'I', and it is the 16-byte identifier of the LMS public key for the tree. Russ > On Jul 2, 2018, at 11:59 AM, Tony Putman = wrote: >=20 > Russ, >=20 > You say: >> I think the kid would identify a tree, not a node in the tree. The = signature value itself contains the information necessary to locate the = node within the tree. >=20 > Which I fully agree with, so I guess my text was off. How about: > "If the 'kid' field is present, then it MAY contain the identity of = the top-level HSS tree. This is called 'I' in [HASHSIG] and is contained = in the public key which corresponds to this tree." >=20 > Without this hint, the verifier would potentially have to try the = verification step for each of the trust anchors that it knows of (though = only as far as verifying the next public key in the chain); there is no = direct way to obtain 'I' from the signature and it is a parameter in the = verification process. 'I' is present in the public key, but you're right = that it's not the identity of the key, but rather the identity of the = tree as a whole.=20 >=20 > Tony >=20 > Dyson Technology Limited, company number 01959090, Tetbury Hill, = Malmesbury, SN16 0RP, UK. > This message is intended solely for the addressee and may contain = confidential information. If you have received this message in error, = please immediately and permanently delete it, and do not use, copy or = disclose the information contained in this message or in any attachment. > Dyson may monitor email traffic data and content for security & = training. >=20 From nobody Mon Jul 2 09:36:54 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3EE0130EDD for ; Mon, 2 Jul 2018 09:36:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NPHsRDZ5Gf_7 for ; Mon, 2 Jul 2018 09:36:51 -0700 (PDT) Received: from esa3.dyson.c3s2.iphmx.com (esa3.dyson.c3s2.iphmx.com [68.232.139.42]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6927C130ECA for ; Mon, 2 Jul 2018 09:36:50 -0700 (PDT) X-IronPort-SPF: SKIP X-IronPort-AV: E=McAfee;i="5900,7806,8942"; a="34096438" X-IronPort-AV: E=Sophos;i="5.51,299,1526338800"; d="scan'208";a="34096438" Received: from unknown (HELO uk-dlp-smtp-01.dyson.global.corp) ([62.189.202.16]) by esa3.dyson.c3s2.iphmx.com with ESMTP; 02 Jul 2018 17:55:51 +0100 Received: from uk-dlp-smtp-01.dyson.global.corp (uk-dlp-smtp-01.dyson.global.corp [127.0.0.1]) by uk-dlp-smtp-01.dyson.global.corp (Service) with ESMTP id 19201FA1A; Mon, 2 Jul 2018 14:43:17 +0000 (GMT) Received: from UK-MAL-CAS-01.dyson.global.corp (unknown [10.1.108.2]) by uk-dlp-smtp-01.dyson.global.corp (Service) with ESMTP id D19A4FA19; Mon, 2 Jul 2018 14:43:16 +0000 (GMT) Received: from UK-MAL-OWA-02.dyson.global.corp (10.1.108.7) by UK-MAL-CAS-01.dyson.global.corp (10.1.108.2) with Microsoft SMTP Server (TLS) id 14.3.319.2; Mon, 2 Jul 2018 17:36:46 +0100 Received: from UK-MAL-MBOX-01.dyson.global.corp ([fe80::3975:cbc9:490b:523a]) by UK-MAL-OWA-02.dyson.global.corp ([fe80::f9b6:1719:a6d9:1eca%10]) with mapi id 14.03.0319.002; Mon, 2 Jul 2018 17:36:46 +0100 From: Tony Putman To: Russ Housley CC: suit Thread-Topic: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt Thread-Index: AQHUEWzL4YFl7eL2YE+FR60dtiJF9aR7p6wggABFuQCAACLyoP//+5uAgAAWl9A= Date: Mon, 2 Jul 2018 16:36:46 +0000 Message-ID: <140080C241BAA1419B58F093108F9EDC1E3CD487@UK-MAL-MBOX-01.dyson.global.corp> References: <153046889224.27492.15820564704742618394.idtracker@ietfa.amsl.com> <140080C241BAA1419B58F093108F9EDC1E3CD29B@UK-MAL-MBOX-01.dyson.global.corp> <140080C241BAA1419B58F093108F9EDC1E3CD428@UK-MAL-MBOX-01.dyson.global.corp> <46953690-8BA5-476E-885F-8E8D850A0946@vigilsec.com> In-Reply-To: <46953690-8BA5-476E-885F-8E8D850A0946@vigilsec.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.1.108.27] Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-03.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 16:36:53 -0000 Sounds good to me. The "and" after the first comma seems odd to me, but tha= t's an editorial nit. -- Tony -----Original Message----- From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Russ Housley Sent: 02 July 2018 17:15 To: Tony Putman Cc: suit Subject: Re: [Suit] Fwd: New Version Notification for draft-housley-suit-co= se-hash-sig-03.txt I think I understand now. How about: o If the 'kid' field is present, and it MAY be used to identify the top of the HSS tree. In [HASHSIG], this identifier is called 'I', and it is the 16-byte identifier of the LMS public key for the tree. Russ > On Jul 2, 2018, at 11:59 AM, Tony Putman wrote: > = > Russ, > = > You say: >> I think the kid would identify a tree, not a node in the tree. The sign= ature value itself contains the information necessary to locate the node wi= thin the tree. > = > Which I fully agree with, so I guess my text was off. How about: > "If the 'kid' field is present, then it MAY contain the identity of the = top-level HSS tree. This is called 'I' in [HASHSIG] and is contained in the= public key which corresponds to this tree." > = > Without this hint, the verifier would potentially have to try the verific= ation step for each of the trust anchors that it knows of (though only as f= ar as verifying the next public key in the chain); there is no direct way t= o obtain 'I' from the signature and it is a parameter in the verification p= rocess. 'I' is present in the public key, but you're right that it's not th= e identity of the key, but rather the identity of the tree as a whole. = > = > Tony > = > Dyson Technology Limited, company number 01959090, Tetbury Hill, Malmesbu= ry, SN16 0RP, UK. > This message is intended solely for the addressee and may contain confide= ntial information. If you have received this message in error, please immed= iately and permanently delete it, and do not use, copy or disclose the info= rmation contained in this message or in any attachment. > Dyson may monitor email traffic data and content for security & training. > = _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit Dyson Technology Limited, company number 01959090, Tetbury Hill, Malmesbury= , SN16 0RP, UK. This message is intended solely for the addressee and may contain confident= ial information. If you have received this message in error, please immedia= tely and permanently delete it, and do not use, copy or disclose the inform= ation contained in this message or in any attachment. Dyson may monitor email traffic data and content for security & training. From nobody Mon Jul 2 11:02:08 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 106D6130DED for ; Mon, 2 Jul 2018 11:02:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IMCIW38oqYhS for ; Mon, 2 Jul 2018 11:02:03 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6FEA13127A for ; Mon, 2 Jul 2018 11:01:50 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 9F2F8300A2F for ; Mon, 2 Jul 2018 14:01:48 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id dYAKEP5pI7x2 for ; Mon, 2 Jul 2018 14:01:47 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id F1A0D3002C6 for ; Mon, 2 Jul 2018 14:01:46 -0400 (EDT) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_1A9BB4AC-B4A7-4189-AD4B-B25733434470" Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) Message-Id: References: <153055446177.16064.168518462278271513.idtracker@ietfa.amsl.com> To: suit Date: Mon, 2 Jul 2018 14:01:25 -0400 X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: [Suit] Fwd: New Version Notification for draft-housley-suit-cose-hash-sig-04.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 18:02:06 -0000 --Apple-Mail=_1A9BB4AC-B4A7-4189-AD4B-B25733434470 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii This version addresses Tony's comment about kid. Russ > From: internet-drafts@ietf.org > Subject: New Version Notification for = draft-housley-suit-cose-hash-sig-04.txt > Date: July 2, 2018 at 2:01:01 PM EDT > To: "Russ Housley" >=20 >=20 > A new version of I-D, draft-housley-suit-cose-hash-sig-04.txt > has been successfully submitted by Russ Housley and posted to the > IETF repository. >=20 > Name: draft-housley-suit-cose-hash-sig > Revision: 04 > Title: Use of the Hash-based Signature Algorithm with = CBOR Object Signing and Encryption (COSE) > Document date: 2018-07-02 > Group: Individual Submission > Pages: 11 > URL: = https://www.ietf.org/internet-drafts/draft-housley-suit-cose-hash-sig-04.t= xt > Status: = https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-sig/ > Htmlized: = https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-04 > Htmlized: = https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-hash-sig > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-housley-suit-cose-hash-sig-04 >=20 > Abstract: > This document specifies the conventions for using the = Leighton-Micali > Signature (LMS) algorithm for digital signatures with the CBOR = Object > Signing and Encryption (COSE) syntax. >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 --Apple-Mail=_1A9BB4AC-B4A7-4189-AD4B-B25733434470 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii This = version addresses Tony's comment about kid.

Russ


From: internet-drafts@ietf.org
Subject: = New Version = Notification for draft-housley-suit-cose-hash-sig-04.txt
Date: = July 2, 2018 at 2:01:01 PM = EDT
To: = "Russ Housley" <housley@vigilsec.com>


A new version = of I-D, draft-housley-suit-cose-hash-sig-04.txt
has been = successfully submitted by Russ Housley and posted to the
IETF repository.

Name: = draft-housley-suit-cose-hash-sig
Revision: 04
Title:= = Use of the Hash-based Signature Algorithm with CBOR Object = Signing and Encryption (COSE)
Document date: = 2018-07-02
Group: Individual Submission
Pages:= = 11
URL: =            https://www.ietf.org/internet-drafts/draft-housley-suit-cose-ha= sh-sig-04.txt
Status: =         https://datatracker.ietf.org/doc/draft-housley-suit-cose-hash-s= ig/
Htmlized:       https://tools.ietf.org/html/draft-housley-suit-cose-hash-sig-04=
Htmlized:       https://datatracker.ietf.org/doc/html/draft-housley-suit-cose-h= ash-sig
Diff: =           https://www.ietf.org/rfcdiff?url2=3Ddraft-housley-suit-cose-has= h-sig-04

Abstract:
=   This document specifies the conventions for using the = Leighton-Micali
  Signature (LMS) algorithm for = digital signatures with the CBOR Object
=   Signing and Encryption (COSE) syntax.

Please note that it may take a couple of minutes from the = time of submission
until the htmlized version and diff are = available at tools.ietf.org.

The IETF = Secretariat


= --Apple-Mail=_1A9BB4AC-B4A7-4189-AD4B-B25733434470-- From nobody Mon Jul 2 11:53:47 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E7DF9130F81; Mon, 2 Jul 2018 11:53:44 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: suit@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.81.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153055762490.16040.6350379121043861471@ietfa.amsl.com> Date: Mon, 02 Jul 2018 11:53:44 -0700 Archived-At: Subject: [Suit] I-D Action: draft-ietf-suit-architecture-01.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 18:53:46 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Software Updates for Internet of Things WG of the IETF. Title : A Firmware Update Architecture for Internet of Things Devices Authors : Brendan Moran Milosch Meriac Hannes Tschofenig David Brown Filename : draft-ietf-suit-architecture-01.txt Pages : 22 Date : 2018-07-02 Abstract: Vulnerabilities with Internet of Things (IoT) devices have raised the need for a solid and secure firmware update mechanism that is also suitable for constrained devices. Incorporating such update mechanism to fix vulnerabilities, to update configuration settings as well as adding new functionality is recommended by security experts. This document lists requirements and describes an architecture for a firmware update mechanism suitable for IoT devices. The architecture is agnostic to the transport of the firmware images and associated meta-data. This version of the document assumes asymmetric cryptography and a public key infrastructure. Future versions may also describe a symmetric key approach for very constrained devices. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-suit-architecture/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-suit-architecture-01 https://datatracker.ietf.org/doc/html/draft-ietf-suit-architecture-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Jul 2 12:08:02 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C9FD13113B for ; Mon, 2 Jul 2018 12:08:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ShbtNSYs840d for ; Mon, 2 Jul 2018 12:07:58 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0066.outbound.protection.outlook.com [104.47.2.66]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 058E212F295 for ; Mon, 2 Jul 2018 12:07:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ErBdwE5i4gK9t2iMSY/EtlnKClAhU6hlgjUyTKY9Scw=; b=lwnsR2xNoIhgSXbkUu9eKLZXeMmRJqLocaJ+hfIUcwvL8yREaLhmAEnFWwRtR8Zjo35TdtS+hulX1190EphYgmQSVBmG8p+W0a/K4deJcLl2a/OTFbQEDD5nUlFXqZitPHQ6oyFYwbc3rnKua97sRvQGPRPF4yRAIblaFTL8v1s= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2016.eurprd08.prod.outlook.com (10.173.74.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.906.20; Mon, 2 Jul 2018 19:07:53 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db%10]) with mapi id 15.20.0906.026; Mon, 2 Jul 2018 19:07:53 +0000 From: Hannes Tschofenig To: suit Thread-Topic: draft-ietf-suit-architecture-01 Thread-Index: AdQSN1i2C+DHj0ciRqGC4Jr4K4DFEw== Date: Mon, 2 Jul 2018 19:07:53 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.118.234] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2016; 7:wi95WZoThGHymn8aqF0J6Qx3z0tfCETTFk6Xv+5ix5dKUqLhI1pnmTug/inuO/bCvCSkX8F70sOItvo1ZzexV1fcgpTs5mgJbD50UpAUX/L28SgziAbbA//ZT10n+UwCL0B2KV2aX3VdVreJIRfo2zWVJc7/IQvyXWmDoGSd03XNbDtq+1ahkUE61UrWI6ek2hveHCwUsVm4ns+7zjEStqAT+5FCuLtICU0lvyxhFufD9F1uZn63KBID/ljUIwBN x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 99e86621-5275-476c-94b2-08d5e04f1d0b x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2016; x-ms-traffictypediagnostic: VI1PR0801MB2016: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(223705240517415)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231254)(944501410)(52105095)(10201501046)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB2016; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2016; x-forefront-prvs: 07215D0470 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(366004)(39860400002)(136003)(396003)(189003)(199004)(53754006)(40434004)(186003)(26005)(316002)(66066001)(86362001)(106356001)(2906002)(105586002)(5250100002)(68736007)(6436002)(2900100001)(966005)(97736004)(99286004)(478600001)(606006)(72206003)(7736002)(6306002)(33656002)(54896002)(55016002)(14444005)(5024004)(53936002)(236005)(256004)(9686003)(74316002)(8676002)(81166006)(81156014)(7696005)(486006)(6116002)(790700001)(3846002)(6916009)(8936002)(476003)(14454004)(5660300001)(102836004)(6506007)(25786009); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2016; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: e1Ap9VnNffCi+N5MNWwDe2JMSWNcvwimXHySICMfk3zGETblckvp2EkztSTP+vveDTNjXzyFMRL+xyNeSMyW8auw3YVj6IQ/1/Lyn28gZFKjHiRFI+GAe1oFiy6HcGqljhupGMUowJyxwCMu7B7wZQSEFn4+5Mi7tUhqYM1yD2dC/KJlIkiSxLz68EombPxWZ1tybiwCSeBBWv8E6cmHxuQaQUYtik1Kusi1qvLqZKaOCRyLEIwGFdUtsTY7Aw19gYTxwNatBtD/EFxkBUfpxYnOj2jgsz3pWWephZp2bPxqtg5q859OzwqaKLyTw88HjyEl1dkv3xG+UrxVpHV+75ZmNvw5gz71Btcr4W10EhY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112A08944328EE625D4DE5CFA430VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 99e86621-5275-476c-94b2-08d5e04f1d0b X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2018 19:07:53.6208 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2016 Archived-At: Subject: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 19:08:01 -0000 --_000_VI1PR0801MB2112A08944328EE625D4DE5CFA430VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, I have just submitted version -01 of the architecture document. I have inco= rporate feedback from the working group, such as * New terminology, * Updates on the operating modes * New architecture figures, * New use cases (by David Brown) Here is the new version: https://tools.ietf.org/html/draft-ietf-suit-architecture-01 Here is the diff: https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-suit-architecture-01.txt Feedback is appreciated. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112A08944328EE625D4DE5CFA430VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

I have just submitted version -01 of the architectur= e document. I have incorporate feedback from the working group, such as

·         New terminology,

·         Updates on the operating modes

·         New architecture figures,

·         New use cases (by David Brown)

 

Here is the new version:

https://tools.ietf.org/html/draft-ietf-suit-architectur= e-01

 

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=3Ddra= ft-ietf-suit-architecture-01.txt

 

Feedback is appreciated.

 

Ciao

Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112A08944328EE625D4DE5CFA430VI1PR0801MB2112_-- From nobody Mon Jul 2 14:31:39 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id DB709130DEE; Mon, 2 Jul 2018 14:31:30 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: suit@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.81.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153056709086.16179.2273161045709121871@ietfa.amsl.com> Date: Mon, 02 Jul 2018 14:31:30 -0700 Archived-At: Subject: [Suit] I-D Action: draft-ietf-suit-information-model-01.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jul 2018 21:31:32 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Software Updates for Internet of Things WG of the IETF. Title : Firmware Updates for Internet of Things Devices - An Information Model for Manifests Authors : Brendan Moran Hannes Tschofenig Henk Birkholz Filename : draft-ietf-suit-information-model-01.txt Pages : 29 Date : 2018-07-02 Abstract: Vulnerabilities with Internet of Things (IoT) devices have raised the need for a solid and secure firmware update mechanism that is also suitable for constrained devices. Incorporating such update mechanism to fix vulnerabilities, to update configuration settings as well as adding new functionality is recommended by security experts. One component of such a firmware update is the meta-data, or manifest, that describes the firmware image(s) and offers appropriate protection. This document describes all the information that must be present in the manifest. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-suit-information-model/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-suit-information-model-01 https://datatracker.ietf.org/doc/html/draft-ietf-suit-information-model-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-information-model-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Jul 3 02:58:54 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C3ECA129C6A for ; Tue, 3 Jul 2018 02:58:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HpFr1Rbv1Ifb for ; Tue, 3 Jul 2018 02:58:50 -0700 (PDT) Received: from smtp6-g21.free.fr (smtp6-g21.free.fr [IPv6:2a01:e0c:1:1599::15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6017C1277BB for ; Tue, 3 Jul 2018 02:58:50 -0700 (PDT) Received: from [192.168.0.13] (unknown [88.182.125.39]) by smtp6-g21.free.fr (Postfix) with ESMTP id A26A1780331 for ; Tue, 3 Jul 2018 11:58:47 +0200 (CEST) To: suit@ietf.org References: From: Denis Message-ID: Date: Tue, 3 Jul 2018 11:58:47 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------F54CA56939E60D09DF60BD63" Content-Language: en-US Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 09:58:53 -0000 This is a multi-part message in MIME format. --------------F54CA56939E60D09DF60BD63 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Hannes, It is well known that software updates are often done to address a security issue. The same applies to firmware updates. The current draft is lacking to address protections against the downloading of an old firmware version. The threat should be mentioned in the security considerations section. The main body of the document should mention mechanisms to prevent the replay of an old version of the firmware. Denis > Hi all, > > I have just submitted version -01 of the architecture document. I have > incorporate feedback from the working group, such as > > ·New terminology, > > ·Updates on the operating modes > > ·New architecture figures, > > ·New use cases (by David Brown) > > Here is the new version: > > https://tools.ietf.org/html/draft-ietf-suit-architecture-01 > > Here is the diff: > > https://tools.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-01.txt > > Feedback is appreciated. > > Ciao > > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose > the contents to any other person, use it for any purpose, or store or > copy the information in any medium. Thank you. > > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit --------------F54CA56939E60D09DF60BD63 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit
Hannes,

It is well known that software updates are often done to address a security issue. The same applies
to firmware updates. The current draft is lacking to address protections against the downloading of
an old firmware version. The threat should be mentioned in the security considerations section.

The main body of the document should mention mechanisms to prevent the replay of an old version
of the firmware.

Denis

Hi all,

 

I have just submitted version -01 of the architecture document. I have incorporate feedback from the working group, such as

·         New terminology,

·         Updates on the operating modes

·         New architecture figures,

·         New use cases (by David Brown)

 

Here is the new version:

https://tools.ietf.org/html/draft-ietf-suit-architecture-01

 

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-01.txt

 

Feedback is appreciated.

 

Ciao

Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. 

_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit


--------------F54CA56939E60D09DF60BD63-- From nobody Tue Jul 3 03:06:03 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A36B130DE4 for ; Tue, 3 Jul 2018 03:06:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b4E7pPWejFup for ; Tue, 3 Jul 2018 03:05:57 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on060a.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::60a]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4FAF0130E3B for ; Tue, 3 Jul 2018 03:05:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=08jIwAzJIMQ/L3F57ju/dtfkn48HEYMcDEz9tV2jDuc=; b=O9g2jspkO3Q/k6mOmvvlWWQxGwY+yOF2KjLp9VSED1II4I3EdsQI6ubCFchmlvAUAtyfnOnyioObS5UQoQ/n1eTB7v9vsZ3hyFPXdAyiC0acqq70F5AqV5zL6SKOp6ZaMCWxrrSq5RPiIZ5XM4xmkw+vvL/j/WCEpKRNSeNV/sw= Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com (10.172.217.150) by AM4PR0802MB2194.eurprd08.prod.outlook.com (10.172.217.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.863.19; Tue, 3 Jul 2018 10:05:53 +0000 Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad]) by AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad%4]) with mapi id 15.20.0906.026; Tue, 3 Jul 2018 10:05:53 +0000 From: Brendan Moran To: Denis CC: "suit@ietf.org" Thread-Topic: [Suit] draft-ietf-suit-architecture-01 Thread-Index: AQHUErR5GmKFWAWt3UWTuHjbKxqWO6R9RXAA Date: Tue, 3 Jul 2018 10:05:53 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.8.2) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; x-originating-ip: [217.140.96.140] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0802MB2194; 7:s132iIbxRHKhJjlka+VolC/tESxu1s/voGiPt93dXvmScKyENRYkhpJQWdTNRvPYwIYtxJzE6QsmxXIHnfZtfqMXEphzEHfUBkB5Lzh+8H8utIVrEYz0QkjEYIjJqraE/qV+yiOErNqDcRM2motamzWtUSE/tgkdbGxGcMDy2LiwD/2nR5C9ZqKdtZibX9uVlnTJR0AkgR8/ClnOi2E0JNhZEsdB4JGbNJkZ4W243+y29D74Aao5dcBykZ25/YLo x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d2b6387f-7001-4f38-0ee1-08d5e0cc8ff8 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:AM4PR0802MB2194; x-ms-traffictypediagnostic: AM4PR0802MB2194: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(191636701735510)(192374486261705)(189930954265078)(223705240517415)(238713787762100); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231254)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:AM4PR0802MB2194; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0802MB2194; x-forefront-prvs: 0722981D2A x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(346002)(366004)(39860400002)(376002)(53754006)(40434004)(189003)(199004)(446003)(2900100001)(3846002)(966005)(6436002)(54896002)(256004)(486006)(82746002)(6512007)(25786009)(106356001)(4326008)(76176011)(72206003)(236005)(6116002)(50226002)(2616005)(5250100002)(83716003)(26005)(6306002)(53546011)(6486002)(11346002)(4000630100001)(476003)(105586002)(86362001)(186003)(53936002)(6916009)(68736007)(33656002)(8676002)(2906002)(14454004)(81156014)(5024004)(66066001)(57306001)(8936002)(102836004)(5660300001)(99286004)(36756003)(606006)(316002)(6246003)(97736004)(478600001)(7736002)(81166006)(14444005)(6506007)(229853002)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2194; H:AM4PR0802MB2260.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: rvk8pzVjw31TbNEek13956gnvWF2iv1k1I1sWuoTYXSfI0LMLDwBrx6Wi/cu0qDfbaAbFbiAfh1oGEXBkaSmtulwRV3N63LEQqi9aSND/WgEGwQsVP+k5AJm9zUh+GssyXTSHW6DWC3Nrov4nsfVDS41M4IteL8ZHSyWCBkBYMNxgqb49lWA3RpGR8QBowaf9hETaUwRi3Cj02kyBR6PeFV9vip5ynuyi7TZu666ZY+t90p/cRRQpob/IT+7h3uxFoVk4UtmLYRFKxSxHICvme8qc4GDfeB9zhY+nF3A3vX0FtAFKf8ZCh0RORbDi0MDyxiIFiMpBDDObFw3UZ07zZgsld/8zA1BGQdHreRKJFo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_FB688460FC6E45EABB573C128D6F9D83armcom_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: d2b6387f-7001-4f38-0ee1-08d5e0cc8ff8 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2018 10:05:53.4540 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2194 Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 10:06:01 -0000 --_000_FB688460FC6E45EABB573C128D6F9D83armcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGVuaXMsDQoNCklzIHRoZSByb2xsYmFjayBxdWVzdGlvbiBhZGVxdWF0ZWx5IGNvdmVyZWQg aW4gdGhlIGluZm9ybWF0aW9uIG1vZGVsPw0KDQpUaGFua3MsDQpCcmVuZGFuDQoNCk9uIDMgSnVs IDIwMTgsIGF0IDEwOjU4LCBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyPG1haWx0bzpkZW5pcy5p ZXRmQGZyZWUuZnI+PiB3cm90ZToNCg0KSGFubmVzLA0KDQpJdCBpcyB3ZWxsIGtub3duIHRoYXQg c29mdHdhcmUgdXBkYXRlcyBhcmUgb2Z0ZW4gZG9uZSB0byBhZGRyZXNzIGEgc2VjdXJpdHkgaXNz dWUuIFRoZSBzYW1lIGFwcGxpZXMNCnRvIGZpcm13YXJlIHVwZGF0ZXMuIFRoZSBjdXJyZW50IGRy YWZ0IGlzIGxhY2tpbmcgdG8gYWRkcmVzcyBwcm90ZWN0aW9ucyBhZ2FpbnN0IHRoZSBkb3dubG9h ZGluZyBvZg0KYW4gb2xkIGZpcm13YXJlIHZlcnNpb24uIFRoZSB0aHJlYXQgc2hvdWxkIGJlIG1l bnRpb25lZCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbi4NCg0KVGhlIG1h aW4gYm9keSBvZiB0aGUgZG9jdW1lbnQgc2hvdWxkIG1lbnRpb24gbWVjaGFuaXNtcyB0byBwcmV2 ZW50IHRoZSByZXBsYXkgb2YgYW4gb2xkIHZlcnNpb24NCm9mIHRoZSBmaXJtd2FyZS4NCg0KRGVu aXMNCg0KSGkgYWxsLA0KDQpJIGhhdmUganVzdCBzdWJtaXR0ZWQgdmVyc2lvbiAtMDEgb2YgdGhl IGFyY2hpdGVjdHVyZSBkb2N1bWVudC4gSSBoYXZlIGluY29ycG9yYXRlIGZlZWRiYWNrIGZyb20g dGhlIHdvcmtpbmcgZ3JvdXAsIHN1Y2ggYXMNCuKAoiAgICAgICAgIE5ldyB0ZXJtaW5vbG9neSwN CuKAoiAgICAgICAgIFVwZGF0ZXMgb24gdGhlIG9wZXJhdGluZyBtb2Rlcw0K4oCiICAgICAgICAg TmV3IGFyY2hpdGVjdHVyZSBmaWd1cmVzLA0K4oCiICAgICAgICAgTmV3IHVzZSBjYXNlcyAoYnkg RGF2aWQgQnJvd24pDQoNCkhlcmUgaXMgdGhlIG5ldyB2ZXJzaW9uOg0KaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDENCg0KSGVyZSBpcyB0 aGUgZGlmZjoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYt c3VpdC1hcmNoaXRlY3R1cmUtMDEudHh0DQoNCkZlZWRiYWNrIGlzIGFwcHJlY2lhdGVkLg0KDQpD aWFvDQpIYW5uZXMNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KU3VpdCBtYWls aW5nIGxpc3QNClN1aXRAaWV0Zi5vcmc8bWFpbHRvOlN1aXRAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQNCg0KDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpTdWl0IG1haWxpbmcgbGlzdA0KU3VpdEBp ZXRmLm9yZzxtYWlsdG86U3VpdEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc3VpdA0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo ZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBv ciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3Uu DQo= --_000_FB688460FC6E45EABB573C128D6F9D83armcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkhpIERlbmlzLA0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SXMgdGhlIHJvbGxiYWNrIHF1ZXN0aW9u IGFkZXF1YXRlbHkgY292ZXJlZCBpbiB0aGUgaW5mb3JtYXRpb24gbW9kZWw/PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPkJyZW5kYW48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2Pjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5PbiAzIEp1bCAyMDE4LCBhdCAxMDo1OCwgRGVuaXMgJmx0OzxhIGhyZWY9Im1haWx0bzpk ZW5pcy5pZXRmQGZyZWUuZnIiIGNsYXNzPSIiPmRlbmlzLmlldGZAZnJlZS5mcjwvYT4mZ3Q7IHdy b3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJtb3otY2l0ZS1wcmVmaXgiIHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNr Z3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi Pg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNsYXNzPSIiPkhhbm5lcyw8L2ZvbnQ+PGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiBBcmlhbDsiIGNsYXNzPSIiPkl0IGlzIHdlbGwga25vd24gdGhhdCBz b2Z0d2FyZSB1cGRhdGVzIGFyZSBvZnRlbiBkb25lIHRvIGFkZHJlc3MgYSBzZWN1cml0eSBpc3N1 ZS4gVGhlIHNhbWUgYXBwbGllczxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQp0byBmaXJtd2FyZSB1cGRhdGVzLjxzcGFuIGNsYXNz PSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiBBcmlhbDsiIGNsYXNz PSIiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogQXJpYWw7IiBjbGFzcz0iIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6IEFyaWFsOyIgY2xhc3M9IiI+VGhlDQogY3VycmVudCBkcmFmdCBp cyBsYWNraW5nIHRvIGFkZHJlc3MgcHJvdGVjdGlvbnMgYWdhaW5zdCB0aGUgZG93bmxvYWRpbmcg b2Y8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyIGNs YXNzPSIiPg0KYW4gb2xkIGZpcm13YXJlIHZlcnNpb24uPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj5UaGUgdGhyZWF0IHNob3VsZCBiZSBtZW50 aW9uZWQgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb248L3NwYW4+LjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiBBcmlhbDsiIGNsYXNzPSIiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogQXJpYWw7IiBjbGFzcz0i Ij5tYWluIGJvZHkgb2YgdGhlIGRvY3VtZW50PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj5zaG91bGQNCiBtZW50aW9uIG1lY2hhbmlzbXMgdG8g cHJldmVudCB0aGUgcmVwbGF5IG9mIGFuIG9sZCB2ZXJzaW9uPHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCm9mIHRoZSBmaXJtd2Fy ZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpEZW5pczxiciBjbGFzcz0iIj4NCjwvc3Bh bj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNpdGU9Im1p ZDpWSTFQUjA4MDFNQjIxMTJBMDg5NDQzMjhFRTYyNUQ0REU1Q0ZBNDMwQFZJMVBSMDgwMU1CMjEx Mi5ldXJwcmQwOC5wcm9kLm91dGxvb2suY29tIiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNw YWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNt IDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KSGkgYWxsLDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwv bzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpJ IGhhdmUganVzdCBzdWJtaXR0ZWQgdmVyc2lvbiAtMDEgb2YgdGhlIGFyY2hpdGVjdHVyZSBkb2N1 bWVudC4gSSBoYXZlIGluY29ycG9yYXRlIGZlZWRiYWNrIGZyb20gdGhlIHdvcmtpbmcgZ3JvdXAs IHN1Y2ggYXM8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw Y20gMGNtIDAuMDAwMXB0IDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IHRleHQtaW5kZW50OiAtMThwdDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiBTeW1ib2w7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj7CtzxzcGFu IHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsg bGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PC9zcGFuPjwvc3Bhbj5OZXcNCiB0ZXJtaW5vbG9neSw8c3BhbiBjbGFzcz0iQXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7 IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogU3ltYm9sOyIgY2xhc3M9IiI+ PHNwYW4gY2xhc3M9IiI+wrc8c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5v cm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVk LXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+VXBkYXRlcw0KIG9uIHRo ZSBvcGVyYXRpbmcgbW9kZXM8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGNtIDBjbSAwLjAwMDFwdCAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyB0ZXh0LWluZGVudDogLTE4cHQ7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTogU3ltYm9sOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+wrc8c3Bh biBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7 IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDs7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48L3NwYW4+TmV3DQogYXJjaGl0ZWN0dXJlIGZpZ3VyZXMsPHNwYW4gY2xh c3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQgMzZwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1pbmRl bnQ6IC0xOHB0OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IFN5bWJvbDsi IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPsK3PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1h bDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1z dHJldGNoOiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250 LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPk5ldw0K IHVzZSBjYXNlcyAoYnkgRGF2aWQgQnJvd24pPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4m bmJzcDs8L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPg0KSGVyZSBpcyB0aGUgbmV3IHZlcnNpb246PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJlLTAxIiBtb3otZG8t bm90LXNlbmQ9InRydWUiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVu ZGVybGluZTsiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LXN1aXQtYXJjaGl0ZWN0dXJlLTAxPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5i c3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCkhlcmUgaXMgdGhlIGRpZmY6PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDEudHh0IiBtb3ot ZG8tbm90LXNlbmQ9InRydWUiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246 IHVuZGVybGluZTsiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwy PWRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDEudHh0PC9hPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAw Y20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCkZlZWRiYWNrIGlzIGFwcHJlY2lhdGVkLjxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNs YXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQpDaWFvPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KSGFubmVzPG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjwvZGl2Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMg ZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBi ZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVh c2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUg Y29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBv ciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3Uu PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFz cz0iIj4NCjxmaWVsZHNldCBjbGFzcz0ibWltZUF0dGFjaG1lbnRIZWFkZXIiPjwvZmllbGRzZXQ+ PGJyIGNsYXNzPSIiPg0KPHByZSB3cmFwPSIiIGNsYXNzPSIiPl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpTdWl0IG1haWxpbmcgbGlzdA0KPGEgY2xhc3M9 Im1vei10eHQtbGluay1hYmJyZXZpYXRlZCIgaHJlZj0ibWFpbHRvOlN1aXRAaWV0Zi5vcmciIHN0 eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPlN1aXRAaWV0 Zi5vcmc8L2E+DQo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0IiBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQiIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vc3VpdDwvYT4NCjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHAgc3R5bGU9ImNh cmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6 ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBz dGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNvcmF0aW9u OiBub25lOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L3A+DQo8c3BhbiBzdHlsZT0iY2Fy ZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0 YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6 IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246 IG5vbmU7IGZsb2F0OiBub25lOyBkaXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIi Pl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxi ciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRl eHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsg d2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjog cmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQt aW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3 b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNrZ3Jv dW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZmxv YXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9IiI+U3VpdA0KIG1h aWxpbmcgbGlzdDwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZv bnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXIt c3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4 dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4 OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigy NTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YSBocmVm PSJtYWlsdG86U3VpdEBpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1h bGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg YmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyIgY2xhc3M9IiI+U3VpdEBpZXRm Lm9yZzwvYT48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwg MjU1KTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQiIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6 IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tl LXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsiIGNsYXNz PSIiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3VpdDwvYT48YnIgc3R5 bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZv bnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0K PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2Yg dGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBh bHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3Nl IHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3Nl LA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_FB688460FC6E45EABB573C128D6F9D83armcom_-- From nobody Tue Jul 3 07:59:34 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A583130DE1 for ; Tue, 3 Jul 2018 07:59:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8T-FDYR7hdRu for ; Tue, 3 Jul 2018 07:59:27 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-am5eur02on0606.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe07::606]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 433CA130E68 for ; Tue, 3 Jul 2018 07:59:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Oos00yhTDKSbTGaTjefdqCb/aB5TN0F7W/yj3XtKezg=; b=Csxkwxy8sKTqgP/9rLNFVVzY1fruafFBGjKkBCee/XP+0ZA+ZFfSF31xUXf7DgYkd4inzR0mnx9Lb4ihEIWqWwLFHIYOIbtHhmmX3+4I4RU/LX15IFTqbFYBAVFw6FOkFoJpPq0RPVLRwKEuoZ3nabt6w8TBnnSwLcV1XxAgYAo= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1472.eurprd08.prod.outlook.com (10.167.210.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.906.25; Tue, 3 Jul 2018 14:59:24 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db%10]) with mapi id 15.20.0906.026; Tue, 3 Jul 2018 14:59:24 +0000 From: Hannes Tschofenig To: Denis , "suit@ietf.org" Thread-Topic: [Suit] draft-ietf-suit-architecture-01 Thread-Index: AdQSN1i2C+DHj0ciRqGC4Jr4K4DFEwAfRaCAAApbDoA= Date: Tue, 3 Jul 2018 14:59:24 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.118.234] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1472; 7:vt3iLuC14y/0BPG1toXOD9iz+XCccw3tvLJfLHgx7nykkd/oOGRHpLCoTMRd8KWb2vqfWKVRpLUbZEMB9X+MTGUxwIode5aEhr1b1cl8vvyrKXZM3vD2jbACiqv5hR6Txmnl/iaqfHfS3M9YWjjTARHvH2K+6HxaYjIVUXKH7P8HJ1rUXKlWGP48xPSUSUpAicXY8HYvsQtAk2AP7dEFERY5lQlpvBoghQfpTBlZnd3DGbDJLHWIBvT4Yx3Wemga x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 39afe09b-ceb8-4253-d3f1-08d5e0f590e8 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1472; x-ms-traffictypediagnostic: VI1PR0801MB1472: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(223705240517415)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231254)(944501410)(52105095)(3002001)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB1472; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1472; x-forefront-prvs: 0722981D2A x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(346002)(366004)(376002)(136003)(39860400002)(40434004)(189003)(53754006)(199004)(2906002)(186003)(2900100001)(4000630100001)(26005)(229853002)(6436002)(606006)(86362001)(7736002)(74316002)(55016002)(6306002)(106356001)(54896002)(76176011)(33656002)(6506007)(7696005)(105586002)(11346002)(476003)(446003)(102836004)(486006)(53546011)(25786009)(53936002)(6246003)(14454004)(5250100002)(8676002)(3846002)(6116002)(316002)(110136005)(790700001)(2501003)(256004)(14444005)(478600001)(5024004)(9326002)(81156014)(966005)(236005)(72206003)(9686003)(5660300001)(8936002)(81166006)(66066001)(99286004)(68736007)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1472; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: nyz0qJa9Xz5x6FNRQKPtcdUfnleTQOBRFRn4720JbTxJy69qKjpaV2kDuHNqYIagqzsZKB8V5GosEFYf7upwLYaut8Lj29w6LIb67yrA74Ic0MCesRJrtdH2TZLnpPjyvuw/Ggsphv9iCJPW1T0IQ6IPCzXd83hhcH/QP1YsGbU7plUdRf83w81j8kltvvZ/WXZPmNSCrtmp71siBehZAQfKjneoTRO+dMh1KyIUb5EsSGrYL2z6YcGg61WV2ccS+QZfea8NsTZcCVQfvziLFrQ5u1VzTfR8FRiKhNw3FtRFinA5lsP7yGK3z2l6EI5xhRZmY0Ik7a2kASWNFAQ4TpuUS1phlb8j1cw7G1I0tAA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21127B3F43736CA592FD52B5FA420VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 39afe09b-ceb8-4253-d3f1-08d5e0f590e8 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2018 14:59:24.3798 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1472 Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 14:59:32 -0000 --_000_VI1PR0801MB21127B3F43736CA592FD52B5FA420VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Denis, I think the risk of installing an old firmware version is covered in the in= formation model document, which goes into the details of what a manifest ha= s to contain. See Section 3.2.1 of https://tools.ietf.org/html/draft-ietf-s= uit-information-model-01 There are essentially three types of documents the working group is aiming = to produce: an architecture document, the information model for the manifes= t and one or multiple serialization formats. You have been looking at the a= rchitecture but the appropriate document to read is the information model s= pec. Ciao Hannes From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis Sent: 03 July 2018 11:59 To: suit@ietf.org Subject: Re: [Suit] draft-ietf-suit-architecture-01 Hannes, It is well known that software updates are often done to address a security= issue. The same applies to firmware updates. The current draft is lacking to address protections ag= ainst the downloading of an old firmware version. The threat should be mentioned in the security con= siderations section. The main body of the document should mention mechanisms to prevent the repl= ay of an old version of the firmware. Denis Hi all, I have just submitted version -01 of the architecture document. I have inco= rporate feedback from the working group, such as * New terminology, * Updates on the operating modes * New architecture figures, * New use cases (by David Brown) Here is the new version: https://tools.ietf.org/html/draft-ietf-suit-architecture-01 Here is the diff: https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-suit-architecture-01.txt Feedback is appreciated. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB21127B3F43736CA592FD52B5FA420VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Denis, <= /span>

 

I think the risk of in= stalling an old firmware version is covered in the information model docume= nt, which goes into the details of what a manifest has to contain. See Sect= ion 3.2.1 of https://tools.ietf.org/html/draft-ietf-suit-information-model-01=

 

There are essentially = three types of documents the working group is aiming to produce: an archite= cture document, the information model for the manifest and one or multiple = serialization formats. You have been looking at the architecture but the appropriate document to read is the in= formation model spec.

 

Ciao=

Hannes

 

From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis
Sent: 03 July 2018 11:59
To: suit@ietf.org
Subject: Re: [Suit] draft-ietf-suit-architecture-01

 

Hannes,

It is well known that software updates are often done to address a= security issue. The same applies
to firmware updates. The current draft is lacking to address protections ag= ainst the downloading of
an old firmware version. The threat should be mentioned in the security con= siderations section.

The main body of the document should mention mechanisms to prevent the repl= ay of an old version
of the firmware.

Denis

Hi all,

 

I have just submitted version -01 of the architectur= e document. I have incorporate feedback from the working group, such as

·         New terminology,

·         Updates on the operating modes

·         New architecture figures,

·         New use cases (by David Brown)

 

Here is the new version:

https://tools.ietf.org/html/draft-ietf-suit-architectur= e-01

 

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=3Ddra= ft-ietf-suit-architecture-01.txt

 

Feedback is appreciated.

 

Ciao

Hannes

IMPORTANT= NOTICE: The contents of this email and any attachments are confidential an= d may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to a= ny other person, use it for any purpose, or store or copy the information i= n any medium. Thank you. 


_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.iet=
f.org/mailman/listinfo/suit

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB21127B3F43736CA592FD52B5FA420VI1PR0801MB2112_-- From nobody Tue Jul 3 08:59:27 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19393130F17 for ; Tue, 3 Jul 2018 08:59:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.989 X-Spam-Level: X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pjVWmt00fh4d for ; Tue, 3 Jul 2018 08:59:20 -0700 (PDT) Received: from mail-io0-x232.google.com (mail-io0-x232.google.com [IPv6:2607:f8b0:4001:c06::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF875130F50 for ; Tue, 3 Jul 2018 08:59:12 -0700 (PDT) Received: by mail-io0-x232.google.com with SMTP id r24-v6so2180615ioh.9 for ; Tue, 03 Jul 2018 08:59:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version; bh=Pqw5fIyeUXibV3Dq3yRmvzEapmmLz2nYw64qe6xX9eQ=; b=IF2NF7TM/2Sh2HNdzmoa6PYpEBHqRxONALcj/Y6ZzhVXe9x7SG5xfh9ZOlA+/AQAES N62/FNquB0xLdnZfhuMPhcqurwIgfKAIIbUFiE9EFzSBwxqTvIoxW7Wa6ykvWWXRxYOo 0Y7IvFSmqgyYqlQDVx4epV9kh7rLXdDNroX8s= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:references:in-reply-to:mime-version; bh=Pqw5fIyeUXibV3Dq3yRmvzEapmmLz2nYw64qe6xX9eQ=; b=cL2qd0GTUbwFa2nnoyGOvrwCJAcjlBWycSDiKfuYVCEH+7Ik9IKyQTCl/7Od3vFfGu hCbv3T6naO0eWHvyC1lai586soMlyLuyAX/a0xBuq4WZJvh3+eNDyFA8QoNMecTEMsnS sS9RA94rrcyimFRd0zAbCuipV4BXRpUTQ5WDh4lp7DtVeMyOe4hYCOCkzCEE/hxNhboX 65WzwdUHV3bt7xTzED546rJkVqEO7dVV0aIk9LoguKcaMO0QkH0TanrDSf1N4ozAQtc5 2iH2DcKrVTJkSN6wDCPWrhU2xK7VgtJHEFSpE+pXe+qi5Aekv0ZycZh8uasQX+0veYDE 8zqg== X-Gm-Message-State: APt69E1KhBM+zDceARM55okbIGZn0E2pcvIexCQ7H2Ea4CuqLdnrMd5j zAdp0+14NgU/feR5OVElQOgMXlvjdEU= X-Google-Smtp-Source: AAOMgpeRwe5Q4zfL3bW+bNoNkTVMj74AD7VT7QBlCXpDwXUsYUknjFjQ0RzOamJFuhbnVlzfpKXbEw== X-Received: by 2002:a6b:5b0b:: with SMTP id v11-v6mr12115089ioh.39.1530633551868; Tue, 03 Jul 2018 08:59:11 -0700 (PDT) Received: from [10.0.1.3] ([2601:283:4300:987c:f101:524c:be51:e7ad]) by smtp.gmail.com with ESMTPSA id u132-v6sm908344itb.20.2018.07.03.08.59.11 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 03 Jul 2018 08:59:11 -0700 (PDT) User-Agent: Microsoft-MacOutlook/10.e.1.180613 Date: Tue, 03 Jul 2018 09:59:10 -0600 From: David Brown To: Hannes Tschofenig , Denis , "suit@ietf.org" Message-ID: Thread-Topic: [Suit] draft-ietf-suit-architecture-01 References: In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3613456751_1025036741" Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 15:59:26 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3613456751_1025036741 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable I had an interesting conversation with someone building a device (a battery= powered device, where network traffic is expensive). When they update the f= irmware, they keep the previous version around, and have an ability to roll = back to that version in case there are issues. =20 I presented the argument that the correct answer is to re-release the older= firmware, with a new higher monotonic value. Their counterargument was that= this was costly in terms of power, because it requires the image to be rese= nt. =20 I think the best answer here is to have them issue a new manifest that desc= ribes this old image (the one kept around), that has a new monotonic value. = That way, only the manifest has to be sent (something has to be sent to tell= the device to revert the image anyway). I think this model is covered in ou= r current docs, since we don=E2=80=99t really define how a =E2=80=9Cbuilt-in=E2=80=9D image is= referred to. =20 But, this does make me realize that there are times that things can be spel= led out clearly, usually for security reasons, that end up getting disabled = due to what someone thinks is a practical reason. I agree that preventing ro= llback is important for security, but I=E2=80=99ve found myself arguing against th= ese practical cases multiple times. =20 I wonder if it would be worth writing up a use case to capture this particu= lar revert case, and how that can be addressed with the model we currently h= ave. =20 David =20 From: Suit on behalf of Hannes Tschofenig Date: Tuesday, July 3, 2018 at 8:59 AM To: Denis , "suit@ietf.org" Subject: Re: [Suit] draft-ietf-suit-architecture-01 =20 Hi Denis,=20 =20 I think the risk of installing an old firmware version is covered in the in= formation model document, which goes into the details of what a manifest has= to contain. See Section 3.2.1 of https://tools.ietf.org/html/draft-ietf-sui= t-information-model-01 =20 There are essentially three types of documents the working group is aiming = to produce: an architecture document, the information model for the manifest= and one or multiple serialization formats. You have been looking at the arc= hitecture but the appropriate document to read is the information model spec= .=20 =20 Ciao Hannes =20 From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis Sent: 03 July 2018 11:59 To: suit@ietf.org Subject: Re: [Suit] draft-ietf-suit-architecture-01 =20 Hannes, It is well known that software updates are often done to address a security= issue. The same applies=20 to firmware updates. The current draft is lacking to address protections ag= ainst the downloading of=20 an old firmware version. The threat should be mentioned in the security con= siderations section. The main body of the document should mention mechanisms to prevent the repl= ay of an old version=20 of the firmware. Denis Hi all,=20 =20 I have just submitted version -01 of the architecture document. I have inco= rporate feedback from the working group, such as=20 New terminology,=20 Updates on the operating modes=20 New architecture figures,=20 New use cases (by David Brown) =20 Here is the new version:=20 https://tools.ietf.org/html/draft-ietf-suit-architecture-01 =20 Here is the diff:=20 https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-suit-architecture-01.txt =20 Feedback is appreciated.=20 =20 Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, pl= ease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you.=20 _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit =20 IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, pl= ease notify the sender immediately and do not disclose the contents to any o= ther person, use it for any purpose, or store or copy the information in any= medium. Thank you. _______________________________________________ Suit mai= ling list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit=20 --B_3613456751_1025036741 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable

I had an interesting conversation with someone building a device (a = battery powered device, where network traffic is expensive). When they updat= e the firmware, they keep the previous version around, and have an ability t= o roll back to that version in case there are issues.

<= p class=3DMsoNormal>=  

I presented the argument that the correct answe= r is to re-release the older firmware, with a new higher monotonic value. Th= eir counterargument was that this was costly in terms of power, because it r= equires the image to be resent.

 

I think the best answer here is to have them issue a new manifest tha= t describes this old image (the one kept around), that has a new monotonic v= alue. That way, only the manifest has to be sent (something has to be sent t= o tell the device to revert the image anyway). I think this model is covered= in our current docs, since we don=E2=80=99t really define how a =E2=80=9Cbuilt-in=E2=80=9D im= age is referred to.

 

But, = this does make me realize that there are times that things can be spelled ou= t clearly, usually for security reasons, that end up getting disabled due to= what someone thinks is a practical reason. I agree that preventing rollback= is important for security, but I=E2=80=99ve found myself arguing against these pr= actical cases multiple times.

 =

I wonder if it would be worth writing up a use case to capture this par= ticular revert case, and how that can be addressed with the model we current= ly have.

 

David=

 

From: Suit <suit-bounces@ietf.org> on behalf of Hannes Tschofenig <Hann= es.Tschofenig@arm.com>
Date: Tuesday, July 3, 2018 at 8:59 AMTo: Denis <denis.ietf@free.fr>, "suit@ietf.org" <= ;suit@ietf.org>
Subject: Re: [Suit] draft-ietf-suit-architectur= e-01

Hi Denis,

 

I think the risk of installing an old firmware version is covered i= n the information model document, which goes into the details of what a mani= fest has to contain. See Section 3.2.1 of https://tools.ietf.org/html/draft-i= etf-suit-information-model-01

 

There are essentially three types of documents the = working group is aiming to produce: an architecture document, the informatio= n model for the manifest and one or multiple serialization formats. You have= been looking at the architecture but the appropriate document to read is th= e information model spec.

 

Ciao

Hannes

 

<= span style=3D'font-size:10.0pt;font-family:"Tahoma",sans-serif;color:windowtex= t;mso-fareast-language:EN-GB'>From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis
Sent:<= /b> 03 July 2018 11:59
To: suit@ietf.org
Subject: Re: [S= uit] draft-ietf-suit-architecture-01

 

Hannes,

It is well known that software updates are often done to a= ddress a security issue. The same applies
to firmware updates. The curre= nt draft is lacking to address protections against the downloading of
an= old firmware version. The threat should be mentioned in the security consid= erations section.

The main body of the document should mention mechan= isms to prevent the replay of an old version
of the firmware.

Den= is


Hi all,

 

I have just submitted versio= n -01 of the architecture document. I have incorporate feedback from the wor= king group, such as

  • New t= erminology,
  • Updates on the operating modes
    • New= architecture figures,
  • New use cases (by David Brown)

 

Here= is the new version:

https://tools.ietf.org/html= /draft-ietf-suit-architecture-01

 =

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-suit-architec= ture-01.txt

 

Feedback is appreciated.

&nbs= p;

Ciao

Ha= nnes

IMPORTANT NOTICE: Th= e contents of this email and any attachments are confidential and may also b= e privileged. If you are not the intended recipient, please notify the sende= r immediately and do not disclose the contents to any other person, use it f= or any purpose, or store or copy the information in any medium. Thank you. <= br>


__________________________________=
_____________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/li=
stinfo/suit

 

IMPORTANT NOTICE: The content= s of this email and any attachments are confidential and may also be privile= ged. If you are not the intended recipient, please notify the sender immedia= tely and do not disclose the contents to any other person, use it for any pu= rpose, or store or copy the information in any medium. Thank you. __________= _____________________________________ Suit mailing list Suit@ietf.org https:= //www.ietf.org/mailman/listinfo/suit

--B_3613456751_1025036741-- From nobody Tue Jul 3 09:03:18 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1754513104D; Tue, 3 Jul 2018 09:00:17 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: ekr@rtfm.com, suit@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.81.3 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153063361708.4893.15169816357983629611.idtracker@ietfa.amsl.com> Date: Tue, 03 Jul 2018 09:00:17 -0700 Archived-At: Subject: [Suit] suit - Requested session has been scheduled for IETF 102 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 16:00:25 -0000 Dear Russ Housley, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. suit Session 1 (1:30 requested) Wednesday, 18 July 2018, Morning Session I 0930-1200 Room Name: Duluth size: 150 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/102/sessions/suit.ics Request Information: --------------------------------------------------------- Working Group Name: Software Updates for Internet of Things Area Name: Security Area Session Requester: Russ Housley Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: ipwave lamps stir ipsecme tls sipbrandy curdle sacm mile teep core ace saag Second Priority: t2trg lwig 6lo cfrg acme perc cbor Third Priority: tcpinc v6ops 6man intarea People who must be present: Russ Housley Eric Rescorla Dave Thaler Hannes Tschofenig David Waltermire Resources Requested: Special Requests: --------------------------------------------------------- From nobody Tue Jul 3 09:18:11 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C5F8130FF1 for ; Tue, 3 Jul 2018 09:17:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i2N4YggrC-S6 for ; Tue, 3 Jul 2018 09:17:50 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10061.outbound.protection.outlook.com [40.107.1.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4C3A130FF9 for ; Tue, 3 Jul 2018 09:14:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6TTtkZweA6tPY+uZ6uKGK4ejn8euwITqOaVmdQcKB9Y=; b=e615ndzNePy2o3WffWfpVYacz0t+lFAUaH0DLcY1XNwiKMqVmLQZFVFetFmyzHYfxu24vy7Z6txILlU2ceyBw9xeVGo8SLA58qtchJuFgkH7WEJ8xj18doa66w336Ot3P58gZkPNJ80Gpy/TjpjUpq80MjzPKfvJ0GNrBKrjXII= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1952.eurprd08.prod.outlook.com (10.173.74.9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.906.24; Tue, 3 Jul 2018 16:14:16 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db%10]) with mapi id 15.20.0906.026; Tue, 3 Jul 2018 16:14:16 +0000 From: Hannes Tschofenig To: David Brown , Denis , "suit@ietf.org" Thread-Topic: [Suit] draft-ietf-suit-architecture-01 Thread-Index: AdQSN1i2C+DHj0ciRqGC4Jr4K4DFEwAfRaCAAApbDoAAAjsGAAAAflpA Date: Tue, 3 Jul 2018 16:14:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.118.234] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1952; 7:94oy6luYRVYloUdawYyOhXS9y7fwq1w0mzDt8af4MbzvbwoKVSb8/Enrnpt6ceRioWGsOgeXNhiDvwlWpCB9P8sxs+Doe/ZNujQQAHs70gvI8g5bS9ATVjQSG/mYzVyI+KL1U8lZpXe4thd7oFqVAwKPl4Iq2VOHNaLvMoXSyooxkcYZ8AimMl7yiITkxwu9vs2nuA2Y2+EklDp6lAbCJmszcJZx78F6+lJQjzIc9pi/t+jkq9dCnQIfzT6nUQJs x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 1f2db5b4-810b-45d0-d724-08d5e1000618 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1952; x-ms-traffictypediagnostic: VI1PR0801MB1952: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(191636701735510)(180628864354917)(192374486261705)(223705240517415)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231254)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(20161123564045)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB1952; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1952; x-forefront-prvs: 0722981D2A x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(376002)(136003)(366004)(39860400002)(396003)(40434004)(54094003)(53754006)(199004)(189003)(476003)(76176011)(478600001)(7696005)(74316002)(186003)(102836004)(2900100001)(105586002)(93886005)(7736002)(72206003)(316002)(25786009)(486006)(53936002)(6246003)(9686003)(106356001)(99286004)(966005)(446003)(86362001)(6116002)(3846002)(790700001)(97736004)(55016002)(6306002)(6436002)(11346002)(5660300001)(2906002)(66066001)(8936002)(81166006)(5250100002)(33656002)(8676002)(110136005)(6506007)(229853002)(4000630100001)(54896002)(256004)(606006)(18074004)(14444005)(9326002)(5024004)(81156014)(26005)(236005)(2501003)(53546011)(68736007)(10750500005)(14454004)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1952; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: pTMaukuAh12LsYUvzBne8iEa2yex8GcZwTeBIruLShq+5RZFPjd2Rz4ICJDAtJ1f412fXtgjykg4YVe2FRCJ/i4XqaorF6sW6k6KjuAb5fUeSiaC8armWpjGRL+Lm8ups1N4z6sztuPRilWPNcV9JvDAdSFGqEyWXAfHEKdELS7b9uyVl08TspTtB8llRF0KDEqV0tkkBWt/1zERBWPvfFJk9kyZGghDQ9Yff8/ZJH2RDSNjR5PunLWHvO5+b4Xh8lq6Ck6KJIbOxQFtMicWwaIexbb/rKqHWZOA5o6McVT3M5DT9OCipfqbpChQyU7QeOgSHUzSfCkNAZnhSDD7vIe6b3BSMnMU2ERIEPCNGds= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112574FB6EB05C29D94B418FA420VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1f2db5b4-810b-45d0-d724-08d5e1000618 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2018 16:14:16.0403 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1952 Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 16:18:07 -0000 --_000_VI1PR0801MB2112574FB6EB05C29D94B418FA420VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGF2aWQsDQoNClRoYW5rcyBmb3Igc2hhcmluZyB0aGlzIHVzZSBjYXNlLiBJIGFncmVlIGl0 IHdvdWxkIGJlIHdvcnRod2hpbGUgdG8gZG9jdW1lbnQgaXQgYW5kIGEgdXNlciBzdG9yeSBpbiB0 aGUgaW5mb3JtYXRpb24gbW9kZWwgZG9jdW1lbnQgd291bGQgcHJvYmFibHkgdGhlIGJlc3QgcGxh Y2UgdG8gZG8gc28uDQoNCkNpYW8NCkhhbm5lcw0KDQpGcm9tOiBEYXZpZCBCcm93biBbbWFpbHRv OmRhdmlkLmJyb3duQGxpbmFyby5vcmddDQpTZW50OiAwMyBKdWx5IDIwMTggMTc6NTkNClRvOiBI YW5uZXMgVHNjaG9mZW5pZzsgRGVuaXM7IHN1aXRAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbU3Vp dF0gZHJhZnQtaWV0Zi1zdWl0LWFyY2hpdGVjdHVyZS0wMQ0KDQpJIGhhZCBhbiBpbnRlcmVzdGlu ZyBjb252ZXJzYXRpb24gd2l0aCBzb21lb25lIGJ1aWxkaW5nIGEgZGV2aWNlIChhIGJhdHRlcnkg cG93ZXJlZCBkZXZpY2UsIHdoZXJlIG5ldHdvcmsgdHJhZmZpYyBpcyBleHBlbnNpdmUpLiBXaGVu IHRoZXkgdXBkYXRlIHRoZSBmaXJtd2FyZSwgdGhleSBrZWVwIHRoZSBwcmV2aW91cyB2ZXJzaW9u IGFyb3VuZCwgYW5kIGhhdmUgYW4gYWJpbGl0eSB0byByb2xsIGJhY2sgdG8gdGhhdCB2ZXJzaW9u IGluIGNhc2UgdGhlcmUgYXJlIGlzc3Vlcy4NCg0KSSBwcmVzZW50ZWQgdGhlIGFyZ3VtZW50IHRo YXQgdGhlIGNvcnJlY3QgYW5zd2VyIGlzIHRvIHJlLXJlbGVhc2UgdGhlIG9sZGVyIGZpcm13YXJl LCB3aXRoIGEgbmV3IGhpZ2hlciBtb25vdG9uaWMgdmFsdWUuIFRoZWlyIGNvdW50ZXJhcmd1bWVu dCB3YXMgdGhhdCB0aGlzIHdhcyBjb3N0bHkgaW4gdGVybXMgb2YgcG93ZXIsIGJlY2F1c2UgaXQg cmVxdWlyZXMgdGhlIGltYWdlIHRvIGJlIHJlc2VudC4NCg0KSSB0aGluayB0aGUgYmVzdCBhbnN3 ZXIgaGVyZSBpcyB0byBoYXZlIHRoZW0gaXNzdWUgYSBuZXcgbWFuaWZlc3QgdGhhdCBkZXNjcmli ZXMgdGhpcyBvbGQgaW1hZ2UgKHRoZSBvbmUga2VwdCBhcm91bmQpLCB0aGF0IGhhcyBhIG5ldyBt b25vdG9uaWMgdmFsdWUuIFRoYXQgd2F5LCBvbmx5IHRoZSBtYW5pZmVzdCBoYXMgdG8gYmUgc2Vu dCAoc29tZXRoaW5nIGhhcyB0byBiZSBzZW50IHRvIHRlbGwgdGhlIGRldmljZSB0byByZXZlcnQg dGhlIGltYWdlIGFueXdheSkuIEkgdGhpbmsgdGhpcyBtb2RlbCBpcyBjb3ZlcmVkIGluIG91ciBj dXJyZW50IGRvY3MsIHNpbmNlIHdlIGRvbuKAmXQgcmVhbGx5IGRlZmluZSBob3cgYSDigJxidWls dC1pbuKAnSBpbWFnZSBpcyByZWZlcnJlZCB0by4NCg0KQnV0LCB0aGlzIGRvZXMgbWFrZSBtZSBy ZWFsaXplIHRoYXQgdGhlcmUgYXJlIHRpbWVzIHRoYXQgdGhpbmdzIGNhbiBiZSBzcGVsbGVkIG91 dCBjbGVhcmx5LCB1c3VhbGx5IGZvciBzZWN1cml0eSByZWFzb25zLCB0aGF0IGVuZCB1cCBnZXR0 aW5nIGRpc2FibGVkIGR1ZSB0byB3aGF0IHNvbWVvbmUgdGhpbmtzIGlzIGEgcHJhY3RpY2FsIHJl YXNvbi4gSSBhZ3JlZSB0aGF0IHByZXZlbnRpbmcgcm9sbGJhY2sgaXMgaW1wb3J0YW50IGZvciBz ZWN1cml0eSwgYnV0IEnigJl2ZSBmb3VuZCBteXNlbGYgYXJndWluZyBhZ2FpbnN0IHRoZXNlIHBy YWN0aWNhbCBjYXNlcyBtdWx0aXBsZSB0aW1lcy4NCg0KSSB3b25kZXIgaWYgaXQgd291bGQgYmUg d29ydGggd3JpdGluZyB1cCBhIHVzZSBjYXNlIHRvIGNhcHR1cmUgdGhpcyBwYXJ0aWN1bGFyIHJl dmVydCBjYXNlLCBhbmQgaG93IHRoYXQgY2FuIGJlIGFkZHJlc3NlZCB3aXRoIHRoZSBtb2RlbCB3 ZSBjdXJyZW50bHkgaGF2ZS4NCg0KRGF2aWQNCg0KRnJvbTogU3VpdCA8c3VpdC1ib3VuY2VzQGll dGYub3JnPiBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb20+DQpEYXRlOiBUdWVzZGF5LCBKdWx5IDMsIDIwMTggYXQgODo1OSBBTQ0KVG86IERl bmlzIDxkZW5pcy5pZXRmQGZyZWUuZnI+LCAic3VpdEBpZXRmLm9yZyIgPHN1aXRAaWV0Zi5vcmc+ DQpTdWJqZWN0OiBSZTogW1N1aXRdIGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDENCg0K SGkgRGVuaXMsDQoNCkkgdGhpbmsgdGhlIHJpc2sgb2YgaW5zdGFsbGluZyBhbiBvbGQgZmlybXdh cmUgdmVyc2lvbiBpcyBjb3ZlcmVkIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBkb2N1bWVudCwg d2hpY2ggZ29lcyBpbnRvIHRoZSBkZXRhaWxzIG9mIHdoYXQgYSBtYW5pZmVzdCBoYXMgdG8gY29u dGFpbi4gU2VlIFNlY3Rpb24gMy4yLjEgb2YgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbC0wMQ0KDQpUaGVyZSBhcmUgZXNzZW50aWFs bHkgdGhyZWUgdHlwZXMgb2YgZG9jdW1lbnRzIHRoZSB3b3JraW5nIGdyb3VwIGlzIGFpbWluZyB0 byBwcm9kdWNlOiBhbiBhcmNoaXRlY3R1cmUgZG9jdW1lbnQsIHRoZSBpbmZvcm1hdGlvbiBtb2Rl bCBmb3IgdGhlIG1hbmlmZXN0IGFuZCBvbmUgb3IgbXVsdGlwbGUgc2VyaWFsaXphdGlvbiBmb3Jt YXRzLiBZb3UgaGF2ZSBiZWVuIGxvb2tpbmcgYXQgdGhlIGFyY2hpdGVjdHVyZSBidXQgdGhlIGFw cHJvcHJpYXRlIGRvY3VtZW50IHRvIHJlYWQgaXMgdGhlIGluZm9ybWF0aW9uIG1vZGVsIHNwZWMu DQoNCkNpYW8NCkhhbm5lcw0KDQpGcm9tOiBTdWl0IFttYWlsdG86c3VpdC1ib3VuY2VzQGlldGYu b3JnXSBPbiBCZWhhbGYgT2YgRGVuaXMNClNlbnQ6IDAzIEp1bHkgMjAxOCAxMTo1OQ0KVG86IHN1 aXRAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbU3VpdF0gZHJhZnQtaWV0Zi1zdWl0LWFyY2hpdGVj dHVyZS0wMQ0KDQpIYW5uZXMsDQoNCkl0IGlzIHdlbGwga25vd24gdGhhdCBzb2Z0d2FyZSB1cGRh dGVzIGFyZSBvZnRlbiBkb25lIHRvIGFkZHJlc3MgYSBzZWN1cml0eSBpc3N1ZS4gVGhlIHNhbWUg YXBwbGllcw0KdG8gZmlybXdhcmUgdXBkYXRlcy4gVGhlIGN1cnJlbnQgZHJhZnQgaXMgbGFja2lu ZyB0byBhZGRyZXNzIHByb3RlY3Rpb25zIGFnYWluc3QgdGhlIGRvd25sb2FkaW5nIG9mDQphbiBv bGQgZmlybXdhcmUgdmVyc2lvbi4gVGhlIHRocmVhdCBzaG91bGQgYmUgbWVudGlvbmVkIGluIHRo ZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLg0KDQpUaGUgbWFpbiBib2R5IG9mIHRo ZSBkb2N1bWVudCBzaG91bGQgbWVudGlvbiBtZWNoYW5pc21zIHRvIHByZXZlbnQgdGhlIHJlcGxh eSBvZiBhbiBvbGQgdmVyc2lvbg0Kb2YgdGhlIGZpcm13YXJlLg0KDQpEZW5pcw0KDQpIaSBhbGws DQoNCkkgaGF2ZSBqdXN0IHN1Ym1pdHRlZCB2ZXJzaW9uIC0wMSBvZiB0aGUgYXJjaGl0ZWN0dXJl IGRvY3VtZW50LiBJIGhhdmUgaW5jb3Jwb3JhdGUgZmVlZGJhY2sgZnJvbSB0aGUgd29ya2luZyBn cm91cCwgc3VjaCBhcw0KDQogICogICBOZXcgdGVybWlub2xvZ3ksDQogICogICBVcGRhdGVzIG9u IHRoZSBvcGVyYXRpbmcgbW9kZXMNCiAgKiAgIE5ldyBhcmNoaXRlY3R1cmUgZmlndXJlcywNCiAg KiAgIE5ldyB1c2UgY2FzZXMgKGJ5IERhdmlkIEJyb3duKQ0KDQpIZXJlIGlzIHRoZSBuZXcgdmVy c2lvbjoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXN1aXQtYXJjaGl0 ZWN0dXJlLTAxDQoNCkhlcmUgaXMgdGhlIGRpZmY6DQpodHRwczovL3Rvb2xzLmlldGYub3JnL3Jm Y2RpZmY/dXJsMj1kcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJlLTAxLnR4dA0KDQpGZWVkYmFj ayBpcyBhcHByZWNpYXRlZC4NCg0KQ2lhbw0KSGFubmVzDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUg Y29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRp YWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRl ZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8g bm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9y IGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVk aXVtLiBUaGFuayB5b3UuDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KDQpTdWl0IG1haWxpbmcgbGlzdA0KDQpTdWl0QGlldGYub3JnPG1haWx0 bzpTdWl0QGlldGYub3JnPg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L3N1aXQNCg0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBh bmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZp bGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3Rp ZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50 cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBv ciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuIF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fIFN1aXQgbWFpbGluZyBsaXN0 IFN1aXRAaWV0Zi5vcmcgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdWl0 DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0 dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkg b3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_VI1PR0801MB2112574FB6EB05C29D94B418FA420VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIg MiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNv Tm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjsNCgljb2xvcjpibGFjazsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQphOmxp bmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpi bHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5 cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7 DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTIu MHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KcHJlDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQg Q2hhciI7DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciLCJzZXJpZiI7DQoJY29sb3I6Ymxh Y2s7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlz dFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowY207DQoJ bWFyZ2luLXJpZ2h0OjBjbTsNCgltYXJnaW4tYm90dG9tOjBjbTsNCgltYXJnaW4tbGVmdDozNi4w cHQ7DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjpibGFjazsNCgltc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUzt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHls ZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25z b2xhczsNCgljb2xvcjpibGFjazsNCgltc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUzt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsN CgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIiwic2VyaWYiOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTIx DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjMNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjp3 aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI1DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs LXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFG NDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglm b250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzky LjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxp c3QgbDANCgl7bXNvLWxpc3QtaWQ6ODk4NDQ0NDg0Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczox NDY4NjA0NzA7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjM2LjBwdDsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LTE4LjBwdDsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NzIuMHB0Ow0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMw0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDoxMDguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3Rv cDoxNDQuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3lt Ym9sO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxODAuMHB0Ow0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1z by1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGww OmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRl eHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoyMTYuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1s ZXZlbC10YWItc3RvcDoyNTIuMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9u dC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDoy ODguMHB0Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot MTguMHB0Ow0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDozMjQuMHB0Ow0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1h bnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCm9sDQoJe21hcmdp bi1ib3R0b206MGNtO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGNtO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkVOLUdCIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+SGkgRGF2aWQsIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+ VGhhbmtzIGZvciBzaGFyaW5nIHRoaXMgdXNlIGNhc2UuIEkgYWdyZWUgaXQgd291bGQgYmUgd29y dGh3aGlsZSB0byBkb2N1bWVudCBpdCBhbmQgYSB1c2VyIHN0b3J5IGluIHRoZSBpbmZvcm1hdGlv biBtb2RlbCBkb2N1bWVudCB3b3VsZCBwcm9iYWJseSB0aGUgYmVzdCBwbGFjZSB0byBkbyBzby4N CjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Q2lhbzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij5IYW5uZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBw dDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0ZXh0O21z by1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6RU4tR0IiPg0KIERhdmlkIEJyb3duIFttYWlsdG86ZGF2aWQuYnJvd25AbGluYXJvLm9y Z10gPGJyPg0KPGI+U2VudDo8L2I+IDAzIEp1bHkgMjAxOCAxNzo1OTxicj4NCjxiPlRvOjwvYj4g SGFubmVzIFRzY2hvZmVuaWc7IERlbmlzOyBzdWl0QGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbU3VpdF0gZHJhZnQtaWV0Zi1zdWl0LWFyY2hpdGVjdHVyZS0wMTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iY29sb3I6d2luZG93dGV4dDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SSBoYWQg YW4gaW50ZXJlc3RpbmcgY29udmVyc2F0aW9uIHdpdGggc29tZW9uZSBidWlsZGluZyBhIGRldmlj ZSAoYSBiYXR0ZXJ5IHBvd2VyZWQgZGV2aWNlLCB3aGVyZSBuZXR3b3JrIHRyYWZmaWMgaXMgZXhw ZW5zaXZlKS4gV2hlbiB0aGV5IHVwZGF0ZSB0aGUgZmlybXdhcmUsIHRoZXkNCiBrZWVwIHRoZSBw cmV2aW91cyB2ZXJzaW9uIGFyb3VuZCwgYW5kIGhhdmUgYW4gYWJpbGl0eSB0byByb2xsIGJhY2sg dG8gdGhhdCB2ZXJzaW9uIGluIGNhc2UgdGhlcmUgYXJlIGlzc3Vlcy48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNv bG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iY29sb3I6d2luZG93dGV4dDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+SSBwcmVz ZW50ZWQgdGhlIGFyZ3VtZW50IHRoYXQgdGhlIGNvcnJlY3QgYW5zd2VyIGlzIHRvIHJlLXJlbGVh c2UgdGhlIG9sZGVyIGZpcm13YXJlLCB3aXRoIGEgbmV3IGhpZ2hlciBtb25vdG9uaWMgdmFsdWUu IFRoZWlyIGNvdW50ZXJhcmd1bWVudCB3YXMgdGhhdCB0aGlzIHdhcyBjb3N0bHkNCiBpbiB0ZXJt cyBvZiBwb3dlciwgYmVjYXVzZSBpdCByZXF1aXJlcyB0aGUgaW1hZ2UgdG8gYmUgcmVzZW50Ljxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iY29sb3I6d2luZG93dGV4dDttc28tZmFyZWFzdC1sYW5ndWFnZTpaSC1DTiI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjp3aW5kb3d0ZXh0O21zby1mYXJlYXN0LWxhbmd1YWdl OlpILUNOIj5JIHRoaW5rIHRoZSBiZXN0IGFuc3dlciBoZXJlIGlzIHRvIGhhdmUgdGhlbSBpc3N1 ZSBhIG5ldyBtYW5pZmVzdCB0aGF0IGRlc2NyaWJlcyB0aGlzIG9sZCBpbWFnZSAodGhlIG9uZSBr ZXB0IGFyb3VuZCksIHRoYXQgaGFzIGEgbmV3IG1vbm90b25pYyB2YWx1ZS4gVGhhdCB3YXksIG9u bHkNCiB0aGUgbWFuaWZlc3QgaGFzIHRvIGJlIHNlbnQgKHNvbWV0aGluZyBoYXMgdG8gYmUgc2Vu dCB0byB0ZWxsIHRoZSBkZXZpY2UgdG8gcmV2ZXJ0IHRoZSBpbWFnZSBhbnl3YXkpLiBJIHRoaW5r IHRoaXMgbW9kZWwgaXMgY292ZXJlZCBpbiBvdXIgY3VycmVudCBkb2NzLCBzaW5jZSB3ZSBkb27i gJl0IHJlYWxseSBkZWZpbmUgaG93IGEg4oCcYnVpbHQtaW7igJ0gaW1hZ2UgaXMgcmVmZXJyZWQg dG8uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJjb2xvcjp3aW5kb3d0ZXh0O21zby1mYXJlYXN0LWxhbmd1YWdlOlpI LUNOIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPkJ1dCwgdGhpcyBkb2VzIG1ha2UgbWUgcmVhbGl6ZSB0aGF0IHRoZXJlIGFy ZSB0aW1lcyB0aGF0IHRoaW5ncyBjYW4gYmUgc3BlbGxlZCBvdXQgY2xlYXJseSwgdXN1YWxseSBm b3Igc2VjdXJpdHkgcmVhc29ucywgdGhhdCBlbmQgdXAgZ2V0dGluZyBkaXNhYmxlZCBkdWUgdG8g d2hhdCBzb21lb25lDQogdGhpbmtzIGlzIGEgcHJhY3RpY2FsIHJlYXNvbi4gSSBhZ3JlZSB0aGF0 IHByZXZlbnRpbmcgcm9sbGJhY2sgaXMgaW1wb3J0YW50IGZvciBzZWN1cml0eSwgYnV0IEnigJl2 ZSBmb3VuZCBteXNlbGYgYXJndWluZyBhZ2FpbnN0IHRoZXNlIHByYWN0aWNhbCBjYXNlcyBtdWx0 aXBsZSB0aW1lcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6d2luZG93dGV4dDttc28tZmFy ZWFzdC1sYW5ndWFnZTpaSC1DTiI+SSB3b25kZXIgaWYgaXQgd291bGQgYmUgd29ydGggd3JpdGlu ZyB1cCBhIHVzZSBjYXNlIHRvIGNhcHR1cmUgdGhpcyBwYXJ0aWN1bGFyIHJldmVydCBjYXNlLCBh bmQgaG93IHRoYXQgY2FuIGJlIGFkZHJlc3NlZCB3aXRoIHRoZSBtb2RlbCB3ZSBjdXJyZW50bHkg aGF2ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6d2luZG93dGV4dDttc28tZmFyZWFzdC1s YW5ndWFnZTpaSC1DTiI+RGF2aWQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOndpbmRvd3RleHQ7bXNvLWZh cmVhc3QtbGFuZ3VhZ2U6WkgtQ04iPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9 IkVOLVVTIj5Gcm9tOiA8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj5TdWl0ICZsdDtzdWl0 LWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IG9uIGJlaGFsZiBvZiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7 SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSZndDs8YnI+DQo8Yj5EYXRlOiA8L2I+VHVlc2RheSwg SnVseSAzLCAyMDE4IGF0IDg6NTkgQU08YnI+DQo8Yj5UbzogPC9iPkRlbmlzICZsdDtkZW5pcy5p ZXRmQGZyZWUuZnImZ3Q7LCAmcXVvdDtzdWl0QGlldGYub3JnJnF1b3Q7ICZsdDtzdWl0QGlldGYu b3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW1N1aXRdIGRyYWZ0LWlldGYtc3VpdC1h cmNoaXRlY3R1cmUtMDE8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0ZXh0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SGkgRGVuaXMsIDwvc3Bh bj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SSB0 aGluayB0aGUgcmlzayBvZiBpbnN0YWxsaW5nIGFuIG9sZCBmaXJtd2FyZSB2ZXJzaW9uIGlzIGNv dmVyZWQgaW4gdGhlIGluZm9ybWF0aW9uIG1vZGVsIGRvY3VtZW50LCB3aGljaCBnb2VzIGludG8g dGhlIGRldGFpbHMgb2Ygd2hhdCBhIG1hbmlmZXN0IGhhcyB0byBjb250YWluLiBTZWUgU2VjdGlv biAzLjIuMSBvZg0KPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbC0wMSI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbC0wMTwvYT48L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFu IGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPlRoZXJlIGFyZSBlc3Nl bnRpYWxseSB0aHJlZSB0eXBlcyBvZiBkb2N1bWVudHMgdGhlIHdvcmtpbmcgZ3JvdXAgaXMgYWlt aW5nIHRvIHByb2R1Y2U6IGFuIGFyY2hpdGVjdHVyZSBkb2N1bWVudCwgdGhlIGluZm9ybWF0aW9u IG1vZGVsIGZvciB0aGUgbWFuaWZlc3QgYW5kIG9uZSBvciBtdWx0aXBsZSBzZXJpYWxpemF0aW9u IGZvcm1hdHMuDQogWW91IGhhdmUgYmVlbiBsb29raW5nIGF0IHRoZSBhcmNoaXRlY3R1cmUgYnV0 IHRoZSBhcHByb3ByaWF0ZSBkb2N1bWVudCB0byByZWFkIGlzIHRoZSBpbmZvcm1hdGlvbiBtb2Rl bCBzcGVjLg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNvbG9yOiMx RjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJjb2xv cjojMUY0OTdEIj5DaWFvPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImNv bG9yOiMxRjQ5N0QiPkhhbm5lczwvc3Bhbj48c3BhbiBsYW5nPSJFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6d2luZG93dGV4dDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjp3aW5kb3d0 ZXh0O21zby1mYXJlYXN0LWxhbmd1YWdlOkVOLUdCIj4NCiBTdWl0IFttYWlsdG86c3VpdC1ib3Vu Y2VzQGlldGYub3JnXSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkRlbmlzPGJyPg0KPGI+U2VudDo8L2I+ IDAzIEp1bHkgMjAxOCAxMTo1OTxicj4NCjxiPlRvOjwvYj4gc3VpdEBpZXRmLm9yZzxicj4NCjxi PlN1YmplY3Q6PC9iPiBSZTogW1N1aXRdIGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDE8 L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86 cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5IYW5uZXMsPC9zcGFu PjxzcGFuIGxhbmc9IkVOLVVTIj48YnI+DQo8YnI+DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij5JdCBpcyB3ZWxsIGtub3duIHRoYXQgc29mdHdhcmUgdXBkYXRlcyBhcmUgb2Z0ZW4gZG9u ZSB0byBhZGRyZXNzIGEgc2VjdXJpdHkgaXNzdWUuIFRoZSBzYW1lIGFwcGxpZXMNCjxicj4NCnRv IGZpcm13YXJlIHVwZGF0ZXMuIFRoZSBjdXJyZW50IGRyYWZ0IGlzIGxhY2tpbmcgdG8gYWRkcmVz cyBwcm90ZWN0aW9ucyBhZ2FpbnN0IHRoZSBkb3dubG9hZGluZyBvZg0KPGJyPg0KYW4gb2xkIGZp cm13YXJlIHZlcnNpb24uIFRoZSB0aHJlYXQgc2hvdWxkIGJlIG1lbnRpb25lZCBpbiB0aGUgc2Vj dXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlvbi48YnI+DQo8YnI+DQpUaGUgbWFpbiBib2R5IG9m IHRoZSBkb2N1bWVudCBzaG91bGQgbWVudGlvbiBtZWNoYW5pc21zIHRvIHByZXZlbnQgdGhlIHJl cGxheSBvZiBhbiBvbGQgdmVyc2lvbg0KPGJyPg0Kb2YgdGhlIGZpcm13YXJlLjxicj4NCjxicj4N CkRlbmlzPGJyPg0KPGJyPg0KPC9zcGFuPjxzcGFuIGxhbmc9IkVOLVVTIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4t VVMiPkhpIGFsbCwgPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5JIGhhdmUganVzdCBzdWJtaXR0ZWQgdmVy c2lvbiAtMDEgb2YgdGhlIGFyY2hpdGVjdHVyZSBkb2N1bWVudC4gSSBoYXZlIGluY29ycG9yYXRl IGZlZWRiYWNrIGZyb20gdGhlIHdvcmtpbmcgZ3JvdXAsIHN1Y2ggYXMNCjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDowY20iIHR5cGU9ImRpc2MiPg0KPGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PHNwYW4gbGFu Zz0iRU4tVVMiPk5ldyB0ZXJtaW5vbG9neSwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PGxpIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PHNwYW4gbGFu Zz0iRU4tVVMiPlVwZGF0ZXMgb24gdGhlIG9wZXJhdGluZyBtb2Rlcw0KPG86cD48L286cD48L3Nw YW4+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0OmwwIGxldmVsMSBs Zm8xIj48c3BhbiBsYW5nPSJFTi1VUyI+TmV3IGFyY2hpdGVjdHVyZSBmaWd1cmVzLA0KPG86cD48 L286cD48L3NwYW4+PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1saXN0Omww IGxldmVsMSBsZm8xIj48c3BhbiBsYW5nPSJFTi1VUyI+TmV3IHVzZSBjYXNlcyAoYnkgRGF2aWQg QnJvd24pPG86cD48L286cD48L3NwYW4+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5IZXJlIGlzIHRoZSBuZXcgdmVyc2lvbjog PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXN1 aXQtYXJjaGl0ZWN0dXJlLTAxIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0 Zi1zdWl0LWFyY2hpdGVjdHVyZS0wMTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPkhlcmUgaXMgdGhl IGRpZmY6IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIj48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/dXJs Mj1kcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJlLTAxLnR4dCI+aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1zdWl0LWFyY2hpdGVjdHVyZS0wMS50eHQ8L2E+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIj5GZWVkYmFjayBpcyBhcHByZWNpYXRlZC4gPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9 IkVOLVVTIj5DaWFvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiPkhhbm5lczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OywmcXVvdDtzZXJpZiZxdW90Ozttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1HQiI+ SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRh Y2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZQ0KIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkg b3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8YnI+DQo8YnI+DQo8YnI+ DQo8L3NwYW4+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwcmU+ PHNwYW4gbGFuZz0iRU4tVVMiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fPG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVT Ij5TdWl0IG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZT48c3BhbiBs YW5nPSJFTi1VUyI+PGEgaHJlZj0ibWFpbHRvOlN1aXRAaWV0Zi5vcmciPlN1aXRAaWV0Zi5vcmc8 L2E+PG86cD48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlPjxzcGFuIGxhbmc9IkVOLVVTIj48YSBo cmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3VpdDwvYT48bzpwPjwvbzpwPjwvc3Bhbj48 L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwPjxzcGFuIGxhbmc9IkVOLVVTIj4mbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOndpbmRvd3RleHQ7bXNvLWZhcmVhc3QtbGFu Z3VhZ2U6WkgtQ04iPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4NCiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ug bm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29u dGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3Rv cmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91LiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KIFN1aXQgbWFpbGlu ZyBsaXN0IFN1aXRAaWV0Zi5vcmcgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9zdWl0IDxvOnA+DQo8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNF OiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25m aWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBp bnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBh bmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2Ug aXQgZm9yIGFueSBwdXJwb3NlLA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGlu IGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_VI1PR0801MB2112574FB6EB05C29D94B418FA420VI1PR0801MB2112_-- From nobody Tue Jul 3 14:08:11 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3926130E0F for ; Tue, 3 Jul 2018 14:08:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cpO8FW_gQE_4 for ; Tue, 3 Jul 2018 14:08:05 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20084.outbound.protection.outlook.com [40.107.2.84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 335BF130DF5 for ; Tue, 3 Jul 2018 14:08:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=x2luU4OI2enrzzJBXArFN7vOCMxMUuVatcxxeBpsoXE=; b=Kn5t/x7cuQToamzS2GJCp4Y/Ucl5uV/zBM4PN1gnNA4iHqUvNrGT1iQnHj7zzDoA8wU0b6EK6cP83uyb0C24H/7HL2tH059X1+nV3EzPQlHMKq7RNuB65Y4bj7j834EiNkXxGAkgsP/dJ6Q+0s7WtUGrXu0OpW2xdbhezLqqsnY= Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com (10.172.217.150) by AM4PR0802MB2339.eurprd08.prod.outlook.com (10.172.218.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.930.19; Tue, 3 Jul 2018 21:08:02 +0000 Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad]) by AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad%4]) with mapi id 15.20.0906.026; Tue, 3 Jul 2018 21:08:02 +0000 From: Brendan Moran To: suit CC: Hannes Tschofenig Thread-Topic: [suit]: draft-moran-suit-manifest-02 Thread-Index: AQHUExHtnaLT8k9ra0yYs7g0XR6lpQ== Date: Tue, 3 Jul 2018 21:08:02 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.8.2) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; x-originating-ip: [81.101.7.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0802MB2339; 7:1TCty/isQQZdzRoAdxNrPYqLDSFxFFvTyK/4gVbP4pjcDF/QUdnZMvKwVG4u4UTSJK0TGbXLZn0PFP5YEa0nfLwzafPHxlL+pH/ZkVPjCTKOUTVEdY6Uqc9PwUzePDPmWdPrDOh+i9H+5oOp0AgTrFxTMa7xHb32W76wkeyZnwdO/ufcc/IhMsUDQpfEl6Mek2wHaeTXJIkyBoUqGRGlr3e1EQNfvWxz2ATFp2jzxGAOmihkh246d/eC8Yb0M2N/ x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-ms-office365-filtering-correlation-id: 2241744a-cc4d-49b3-8b87-08d5e1291011 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(48565401081)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:AM4PR0802MB2339; x-ms-traffictypediagnostic: AM4PR0802MB2339: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(131327999870524)(223705240517415); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(10201501046)(3231254)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123562045)(20161123558120)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:AM4PR0802MB2339; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0802MB2339; x-forefront-prvs: 0722981D2A x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(136003)(396003)(366004)(39860400002)(189003)(199004)(40434004)(5250100002)(86362001)(102836004)(105586002)(14454004)(50226002)(106356001)(36756003)(6116002)(8936002)(6436002)(316002)(3846002)(606006)(68736007)(6506007)(53936002)(66066001)(7736002)(478600001)(6512007)(236005)(99286004)(486006)(6916009)(2906002)(72206003)(33656002)(6306002)(54896002)(5024004)(256004)(14444005)(25786009)(82746002)(81156014)(81166006)(186003)(2616005)(97736004)(2900100001)(4326008)(57306001)(6486002)(83716003)(1857600001)(966005)(476003)(5660300001)(26005)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2339; H:AM4PR0802MB2260.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: WRG+n4pJu6ycj7+G6OcLgeJouXMb2JqT+7ZQCIuc/MvpZVgHFLjR1iWKBgh3r8tmNnaYYJOT1jT14d3gZB8WisSXR8sE8RZZSf/bhx8KhzmwH4PGyVproOjNWGdUUsYd8on4WH62UcGFYW8ek2MzXKLR7sCg/QMANBbenmR+ccWKBMCnZgTKOT/ez7gfU1YU47O+9r7/eYK3anE3LWDO6QvmphBy2Ts/0EDC06DM0EpjVOwcy37bO7CnDL4C8iaoac07vbv+PitCiKwfc4+ap3+bnCaK9Fsib1r4eqKsBbeAHgHpY+3AgEeF/KqZF44juWQ8Np9PnWaq/m3qmx69SblMrhFXLZH/phcpZhDA4Ss= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_FDAB87B5A7CB4BBCB7CF763355B099D8armcom_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2241744a-cc4d-49b3-8b87-08d5e1291011 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2018 21:08:02.1066 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2339 Archived-At: Subject: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2018 21:08:10 -0000 --_000_FDAB87B5A7CB4BBCB7CF763355B099D8armcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBkcmFmdCBpcyBhIHNpZ25pZmljYW50IGRlcGFydHVyZSBmcm9tIHByZXZpb3VzIGRyYWZ0 cywgc28gSSB0aGluayBpdCBpcyBpbXBvcnRhbnQgdG8gaGlnaGxpZ2h0IHRoZSBjaGFuZ2VzLiBU aGUgZHJhZnQgcmVxdWlyZXMgYSBsb3Qgb2YgdGV4dCB0aGF0IGhhc27igJl0IGJlZW4gd3JpdHRl biB5ZXQsIHNvIEkgd2lsbCB0cnkgdG8gcHV0IHNvbWUgb2YgdGhhdCBoZXJlIGZvciBkaXNjdXNz aW9uLg0KDQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tb3Jhbi1zdWl0 LW1hbmlmZXN0Lw0KDQoNCiMgU3VtbWFyeSBvZiBjaGFuZ2VzDQpUaGVyZSBhcmUgYSBsYXJnZSBu dW1iZXIgb2YgY2hhbmdlcyBpbiB0aGlzIGRyYWZ0LiBJbiBhZGRpdGlvbiwgdGhlIHRleHQgZGVz Y3JpcHRpb24gb2YgdGhlIG1hbmlmZXN0IGlzIHlldCB0byBiZSBjb21wbGV0ZWQuIFRoZSB0b3Ag bGV2ZWwgbWFuaWZlc3QgZWxlbWVudCByZW1haW5zIGEgQ0JPUiBhcnJheS4gVGhlIHByaW1hcnkg cmVhc29uIGZvciB0aGlzIGlzIHRoYXQgbWFueSBvZiB0aGUgaW5pdGlhbCBlbGVtZW50cyBhcmUg bWFuZGF0b3J5IChzZWUgdGhlIGluZm9ybWF0aW9uIG1vZGVsIGZvciBtb3JlIGRldGFpbCkuIElu IGFkZGl0aW9uIHRvIHRoaXMsIHRoZSBvcmRlcmluZyBpcyBpbXBvcnRhbnQgYmVjYXVzZSB0aGUg bWFuaWZlc3QgaXMgYSBzaWduZWQgZG9jdW1lbnQuIENPU0UgdXNlcyB0aGUgc2FtZSBwYXJhZGln bTogd2hlcmUgZmllbGRzIGFyZSBtYW5kYXRvcnksIHRoZXkgYXJlIGVuY29kZWQgYXMgYW4gYXJy YXkuIFdoZXJlIHRoZXJlIGFyZSBvcHRpb25hbCBmaWVsZHMgKENPU0VfSGVhZGVycykgdGhleSBh cmUgZW5jb2RlZCBhcyBhIG1hcCAoaWYgdW5zaWduZWQpIG9yIGFzIGEgbWFwLCB3cmFwcGVkIGlu IGEgYnN0ciBpZiBzaWduZWQuDQoNClRoZSBwcmltYXJ5IGNoYW5nZXMgYXJlOg0KDQoxLiBTZXZl cmFibGUgdGV4dA0KMi4gRGlnZXN0IEluZm8gaXMgbW92ZWQgdG8gYSB0b3AtbGV2ZWwgZWxlbWVu dA0KMy4gU2VxdWVuY2UgbnVtYmVyIGlzIG5vdyBjYWxsZWQgc2VxdWVuY2UgbnVtYmVyIGluc3Rl YWQgb2YgdGltZXN0YW1wDQo0LiBDb25kaXRpb25zIGFyZSBkaXZpZGVkIGludG8gcHJlY29uZGl0 aW9ucyBhbmQgcG9zdGNvbmRpdGlvbnMNCjUuIERlcGVuZGVuY2llcywgQWxpYXNlcywgYW5kIHBh eWxvYWQgaW5mbyBhcmUgbm93IHJlc291cmNlcw0KNi4gUGF5bG9hZGluZm8gaXMgZGl2aWRlZCBp bnRvIHJlc291cmNlcywgcHJvY2Vzc29ycywgYW5kIHRhcmdldHMNCg0KIyBTZXZlcmFibGUgdGV4 dDoNClRleHQgaXMgZm9yIGh1bWFucy4gRGV2aWNlcyBzaG91bGRu4oCZdCBwYXJzZSBpdC4gVGhl cmVmb3JlLCB3ZSBoYXZlIG1vdmVkIHRleHQgaW5mb3JtYXRpb24gb3V0IG9mIHRoZSBtYW5pZmVz dC4gSG93ZXZlciwgaHVtYW5zIG5lZWQgdG8ga25vdyB0aGF0IHRoZSB0ZXh0IHRoZXkgYXJlIHJl YWRpbmcgY29ycmVjdGx5IGNvcnJlc3BvbmRzIHRvIHRoZSBtYW5pZmVzdCB0aGV5IGFyZSBsb29r aW5nIGF0LiBUaGVyZWZvcmUsIHdlIGhhdmUgbWFkZSBhIGNvbnRhaW5lciBmb3IgYSBDT1NFX1Np Z24gLyBDT1NFX01hYyBhbmQgYSBtYXAgb2YgdGV4dCB2YWx1ZXMuIEluIGFkZGl0aW9uIHRvIHRo aXMsIHRoZSB0ZXh0IHZhbHVlcyBhcmUgaGFzaGVkIGFuZCB0aGUgaGFzaCBpcyBpbmNsdWRlZCBp biB0aGUgbWFuaWZlc3QgdG8gZW5zdXJlIHRoYXQgdGhlIHRleHQgcG9ydGlvbiBpcyBub3QgbW9k aWZpZWQgb3IgY29ycnVwdGVkIGluIHRyYW5zaXQuDQoNClRoaXMgbWVhbnMgdGhhdCwgd2hpbGUg YSBtYW5pZmVzdCB3aXRoIHRleHQgbWF5IGJlIGRlbGl2ZXJlZCB0byBhbiB1cGRhdGUgc2VydmVy LCB0aGF0IHNlcnZlciBjYW4gc3RyaXAgb2ZmIHRoZSB0ZXh0IGFuZCBkZWxpdmVyIG9ubHkgdGhl IGF1dGhlbnRpY2F0ZWQsIG1hY2hpbmUtcmVhZGFibGUgcGFydCB0byBhIHRhcmdldCBkZXZpY2Uu IFRoaXMgcmVzdWx0cyBpbiByZWR1Y2VkIGJhbmR3aWR0aCwgcmVkdWNlZCBidWZmZXIgc2l6ZXMs IG1vcmUgZXhwcmVzc2l2ZSB0ZXh0IGluZm9ybWF0aW9uLCBhbmQgcmVkdWNlZCBvcHBvcnR1bml0 eSB0byBhYnVzZSB2YXJpYWJseSBzaXplZCBmaWVsZHMuDQoNCiMgRGlnZXN0IGluZm8gYXQgdGhl IHRvcCBsZXZlbA0KRGlnZXN0cyBhcmUgdXNlZCBpbiBtYW55IHBsYWNlcyBpbiB0aGUgbWFuaWZl c3QuIFRoZSBpbmZvcm1hdGlvbiByZXF1aXJlZCB0byBpbnRlcnByZXQgZGlnZXN0cywgdGhlcmVm b3JlLCBtdXN0IGJlIGEgdG9wLWxldmVsIGVsZW1lbnQuIEFsbCBkaWdlc3RzIGluIGFueSBnaXZl biBtYW5pZmVzdCBtdXN0IHVzZSB0aGUgc2FtZSBkaWdlc3QgYWxnb3JpdGhtLg0KDQojIFNlcXVl bmNlIE51bWJlcg0KVGhlIHVzZSBvZiB0aW1lc3RhbXAgYXMgc2VxdWVuY2UgbnVtYmVyIGhhcyBj YXVzZWQgY29uZnVzaW9uIHJlZ3VsYXJseSwgc28gd2UgaGF2ZSBjaGFuZ2VkIHRpbWVzdGFtcCB0 byBzZXF1ZW5jZSBudW1iZXIgaW4gdGhpcyBkcmFmdC4NCg0KIyBQcmVDb25kaXRpb25zIGFuZCBQ b3N0Q29uZGl0aW9ucw0KVGhlcmUgaGFzIGJlZW4gc2lnbmlmaWNhbnQgZGViYXRlIGFib3V0IHRo ZSB1c2Ugb2YgcHJlY29uZGl0aW9ucyBhbmQgcG9zdGNvbmRpdGlvbnMsIHdpdGggc2V2ZXJhbCBp bXBvcnRhbnQgdXNlIGNhc2VzLiBCZWNhdXNlIG9mIHRoaXMsIGNvbmRpdGlvbnMgaGFzIGJlZW4g ZGl2aWRlZCBpbnRvIHByZWNvbmRpdGlvbnMgYW5kIHBvc3Rjb25kaXRpb25zLg0KDQojIERlcGVu ZGVuY2llcywgQWxpYXNlcywgUGF5bG9hZEluZm8NCkVhY2ggb2YgdGhlc2UgaGFzIHZlcnkgc2lt aWxhciBpbmZvcm1hdGlvbi4gQmVjYXVzZSBvZiB0aGlzLCBpdCBzZWVtcyByZWFzb25hYmxlIHRv IGdyb3VwIHRoZW0gaW50byBhIGNvbW1vbiBzdHJ1Y3R1cmUgdGhhdCBqdXN0IGlkZW50aWZpZXMg dGhlIHR5cGUgb2YgcmVmZXJlbmNlLg0KDQojIFJlc291cmNlcywgUHJvY2Vzc29ycywgVGFyZ2V0 cw0KVG8gc2F0aXNmeSBjb21wbGV4IHJlcXVpcmVtZW50cywgd2UgY29uc2lkZXJlZCBzZXZlcmFs IHVzZS1jYXNlczoNCg0KRGlmZmVyZW50aWFsIHVwZGF0ZSBvZiBhIGR1YWwgWElQIE1DVS4gVG8g YWNjb21wbGlzaCB0aGlzIGFuZCBzdGlsbCBvYnRhaW4gZ29vZCBjb21wcmVzc2lvbiwgdGhlIGlu c3RhbGxlZCBpbWFnZSBtdXN0IGJlIHVuLXJlbG9jYXRlZCwgdGhlbiBhIGRpZmYgbXVzdCBiZSBh cHBsaWVkLCB0aGVuIHRoZSByZXN1bHRpbmcgaW1hZ2UgbXVzdCBiZSByZWxvY2F0ZWQsIHRoZW4g d3JpdHRlbiB0byBzdG9yYWdlLiBUaGlzIGlzIGV2ZW4gbW9yZSBjb21wbGljYXRlZCBpZiB0aGUg ZGlmZiBpcyBjb21wcmVzc2VkIGFuZCBlbmNyeXB0ZWQuIEZ1cnRoZXJtb3JlLCB0aGVyZSBhcmUg c29tZSBkaWZmZXJlbnRpYWwgYWxnb3JpdGhtcyB0aGF0IHdpbGwgbmVlZCB0byBiZSBhYmxlIHRv IHJlYWQgdGhlIGRhdGEgdGhleSBoYXZlIHdyaXR0ZW4sIHdoaWNoIG1lYW5zIHRoYXQgdGhlIHRh cmdldCBpbWFnZSBtdXN0IGFsc28gYmUgcG9zc2libGUgdG8gcmVhZCwgdW4tcmVsb2NhdGUsIGFu ZCBmZWVkIGludG8gdGhlIGRpZmZlcmVudGlhbCB1bnBhY2tpbmcgZW5naW5lLg0KDQpTaGFyZWQg Y29tcHJlc3Npb24gdGFibGUuIFNldmVyYWwgY29tcG9uZW50cyBvZiBhbiB1cGRhdGUgbWF5IGJl IGRlbGl2ZXJlZCB3aXRoIGEgc2luZ2xlIGNvbW1vbiBjb21wcmVzc2lvbiB0YWJsZS4gSWYgdGhp cyBpcyB0aGUgY2FzZSwgdGhlbiBlYWNoIHRhcmdldCBpbWFnZSBtdXN0IGJlIGRlY29tcHJlc3Nl ZCB1c2luZyB0d28gaW5wdXRzOiB0aGUgY29tcHJlc3NlZCBmaWxlIGFuZCB0aGUgY29tcHJlc3Np b24gdGFibGUNCg0KVGhlIHJlc3VsdCBvZiB0aGlzIGlzIHRoYXQgd2UgY29uY2x1ZGVkIHRoYXQg cmVzb3VyY2VzIGFuZCB0YXJnZXRzIGNhbm5vdCBjb25zaWRlcmVkIHRoZSBzYW1lLiBXaGlsZSB0 aGV5IGFyZSB0aGUgc2FtZSBpbiB0aGUg4oCccmF3IGJpbmFyeeKAnSBjYXNlLCBhbmQgdGhleSBz dGlsbCBhcHBlYXIgdG8gYmUgdGhlIHNhbWUgaW4gbGluZWFyLXByb2Nlc3NpbmcgY2FzZSAod2hl cmUgYWxsIHByb2Nlc3NvcnMgaGF2ZSBvbmx5IG9uZSBpbnB1dCBhbmQgb25lIG91dHB1dCksIG9u Y2UgZGlmZmVyZW50aWFsIGNvbXByZXNzaW9uLCB0YWJsZSBjb21wcmVzc2lvbiwgYW5kIHJlbG9j YXRpb24gYXJlIGNvbnNpZGVyZWQsIGl0IGlzIGNsZWFyIHRoYXQsIHNpbmNlIHByb2Nlc3NvcnMg Y2FuIHJlcXVpcmUgbXVsdGlwbGUgaW5wdXRzLCB0aGVyZSBtdXN0IGJlIGEgd2F5IHRvIGRlc2Ny aWJlIGVhY2ggb2YgdGhlc2UgaW5wdXRzLiBUaGlzIGNsYXJpZmllcyB0aGF0IHJlc291cmNlcyBh cmUgZGlzdGluY3QgZnJvbSB0aGUgZmluYWwgaW1hZ2UgdGhhdCBpcyBpbnN0YWxsZWQgdG8gYSBk ZXZpY2UuDQoNCkJlY2F1c2Ugb2YgdGhpcyBkaXN0aW5jdGlvbiBhbmQgaW4gb3JkZXIgdG8gZGVz Y3JpYmUgY29tcGxleCB1c2UtY2FzZXMsIHdlIGhhdmUgaW5jbHVkZWQgYSBtZWNoYW5pc20gb2Yg ZGVzY3JpYmluZyB0aGUgcmVzb3VyY2VzIGFzIGlucHV0IG5vZGVzIHRvIGEgZ3JhcGgsIHRoZSBp bnN0YWxsYXRpb24gdGFyZ2V0cyBhcyBvdXRwdXQgbm9kZXMgZnJvbSB0aGUgZ3JhcGgsIGFuZCB0 aGUgaW50ZXJtZWRpYXRlIHN0YXRlcyBhcyBpbnRlcm5hbCBub2RlcyBvZiB0aGUgZ3JhcGgsIHdo ZXJlIGVhY2ggcHJvY2Vzc29yIGZvcm1zIGFuIGVkZ2Ugb24gdGhlIGdyYXBoLg0KDQpGb3IgdGhl IGluc3RhbGxhdGlvbiBvZiBhbnkgZ2l2ZW4gdGFyZ2V0LCB3ZSBleHBlY3QgdGhhdCB0aGlzIGdy YXBoIGNvdWxkIGJlIHJlZHVjZWQgdG8gYSB0cmVlIHdpdGggYW4gaW5zdGFsbGF0aW9uIHRhcmdl dCBhdCB0aGUgcm9vdC4NCg0KSW4gdGhlIHNpbXBsZSBjYXNlLCBhIHJhdyBiaW5hcnkgcGF5bG9h ZCwgb25lIHJlc291cmNlIGlzIHJlcXVpcmVkLCBpZGVudGlmeWluZyBhbiBvdXRwdXQgbm9kZSwg YW5kIG9uZSBpbnN0YWxsYXRpb24gdGFyZ2V0IGlzIHJlcXVpcmVkLCBpZGVudGlmeWluZyB0aGUg c2FtZSBub2RlIGFzIGFuIGlucHV0IG5vZGUuDQoNCkRlc2NyaWJpbmcgdGhpcyBzdHJ1Y3R1cmUg YXMgYSBncmFwaCwgcmF0aGVyIHRoYW4gYSB0cmVlIGZvciBlYWNoIHRhcmdldCBpcyBhIGRlc2ln biB0cmFkZW9mZi4gV2UgYmVsaWV2ZSB0aGF0IHRoZSBncmFwaCBhcyBzZXZlcmFsIGFkdmFudGFn ZXMuIEZpcnN0LCBpdCByZWR1Y2VzIHRoZSBuZXN0aW5nIGRlcHRoIG9mIHRoZSBDQk9SIHBhcnNl ci4gVGhpcyBpcyBhbiBpbXBvcnRhbnQgY29uc2lkZXJhdGlvbiBmb3IgaG93IG11Y2ggbWVtb3J5 IGlzIGNvbnN1bWVkLiBTZWNvbmQsIGl0IGFsbG93cyBhIHZhbGlkYXRvciB0byBpdGVyYXRlIG92 ZXIgdGhlIGdyYXBoIGFuZCBpZGVudGlmeSB3aGV0aGVyIGl0IHN1cHBvcnRzIGVhY2ggc3BlY2lm aWVkIHByb2Nlc3NvciB3aXRob3V0IGFueSBjb21wcmVoZW5zaW9uIG9mIHRoZSB0cmVlIHN0cnVj dHVyZXMgb3IgZ3JhcGggY29ubmVjdGVkbmVzcy4gVGhpcmQsIGl0IGVsaW1pbmF0ZXMgcmVwZXRp dGl2ZSBkZXNjcmlwdGlvbiBvZiByZXNvdXJjZXMgYW5kIGludGVybWVkaWF0ZXMgdGhhdCBhcmUg dXNlZCBpbiBtdWx0aXBsZSB0cmVlcywgd2hpY2ggY291bGQgYmUgdXNlZCB0byBlbGltaW5hdGUg ZG93bmxvYWQgKHJlc291cmNlIGFjcXVpc2l0aW9uKSBhbmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4g V2UgZG9u4oCZdCB0aGluayB0aGF0IHRoZSByZWR1Y3Rpb24gaW4gbWFuaWZlc3Qgc2l6ZSB3b3Vs ZCBiZSBzaWduaWZpY2FudC4NCg0KQXMgYWx3YXlzLCB5b3VyIGlucHV0IGlzIG1vc3Qgd2VsY29t ZSENCg0KVGhhbmtzLA0KQnJlbmRhbg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z ZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91Lg0K --_000_FDAB87B5A7CB4BBCB7CF763355B099D8armcom_ Content-Type: text/html; charset="utf-8" Content-ID: <186BF2F53192064A888B15778A9DB3C5@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoaXMgZHJhZnQgaXMgYSBzaWduaWZpY2FudCBk ZXBhcnR1cmUgZnJvbSBwcmV2aW91cyBkcmFmdHMsIHNvIEkgdGhpbmsgaXQgaXMgaW1wb3J0YW50 IHRvIGhpZ2hsaWdodCB0aGUgY2hhbmdlcy4gVGhlIGRyYWZ0IHJlcXVpcmVzIGEgbG90IG9mIHRl eHQgdGhhdCBoYXNu4oCZdCBiZWVuIHdyaXR0ZW4geWV0LCBzbyBJIHdpbGwgdHJ5IHRvIHB1dCBz b21lIG9mIHRoYXQgaGVyZSBmb3IgZGlzY3Vzc2lvbi4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QvIiBjbGFzcz0iIj5odHRwczov L2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LzwvYT48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4jIFN1bW1hcnkgb2YgY2hhbmdl czwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGVyZSBhcmUgYSBsYXJnZSBudW1iZXIgb2YgY2hhbmdl cyBpbiB0aGlzIGRyYWZ0LiBJbiBhZGRpdGlvbiwgdGhlIHRleHQgZGVzY3JpcHRpb24gb2YgdGhl IG1hbmlmZXN0IGlzIHlldCB0byBiZSBjb21wbGV0ZWQuIFRoZSB0b3AgbGV2ZWwgbWFuaWZlc3Qg ZWxlbWVudCByZW1haW5zIGEgQ0JPUiBhcnJheS4gVGhlIHByaW1hcnkgcmVhc29uIGZvciB0aGlz IGlzIHRoYXQgbWFueSBvZiB0aGUgaW5pdGlhbCBlbGVtZW50cw0KIGFyZSBtYW5kYXRvcnkgKHNl ZSB0aGUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIG1vcmUgZGV0YWlsKS4gSW4gYWRkaXRpb24gdG8g dGhpcywgdGhlIG9yZGVyaW5nIGlzIGltcG9ydGFudCBiZWNhdXNlIHRoZSBtYW5pZmVzdCBpcyBh IHNpZ25lZCBkb2N1bWVudC4gQ09TRSB1c2VzIHRoZSBzYW1lIHBhcmFkaWdtOiB3aGVyZSBmaWVs ZHMgYXJlIG1hbmRhdG9yeSwgdGhleSBhcmUgZW5jb2RlZCBhcyBhbiBhcnJheS4gV2hlcmUgdGhl cmUgYXJlIG9wdGlvbmFsDQogZmllbGRzIChDT1NFX0hlYWRlcnMpIHRoZXkgYXJlIGVuY29kZWQg YXMgYSBtYXAgKGlmIHVuc2lnbmVkKSBvciBhcyBhIG1hcCwgd3JhcHBlZCBpbiBhIGJzdHIgaWYg c2lnbmVkLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+VGhlIHByaW1hcnkgY2hhbmdlcyBhcmU6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4xLiBTZXZlcmFibGUgdGV4dDwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4yLiBEaWdlc3QgSW5mbyBpcyBtb3ZlZCB0byBhIHRvcC1sZXZlbCBl bGVtZW50PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjMuIFNlcXVlbmNlIG51bWJlciBpcyBub3cgY2Fs bGVkIHNlcXVlbmNlIG51bWJlciBpbnN0ZWFkIG9mIHRpbWVzdGFtcDwvZGl2Pg0KPGRpdiBjbGFz cz0iIj40LiBDb25kaXRpb25zIGFyZSBkaXZpZGVkIGludG8gcHJlY29uZGl0aW9ucyBhbmQgcG9z dGNvbmRpdGlvbnM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+NS4gRGVwZW5kZW5jaWVzLCBBbGlhc2Vz LCBhbmQgcGF5bG9hZCBpbmZvIGFyZSBub3cgcmVzb3VyY2VzPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjYuIFBheWxvYWRpbmZvIGlzIGRpdmlkZWQgaW50byByZXNvdXJjZXMsIHByb2Nlc3NvcnMsIGFu ZCB0YXJnZXRzPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4jIFNldmVyYWJsZSB0ZXh0OjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UZXh0IGlz IGZvciBodW1hbnMuIERldmljZXMgc2hvdWxkbuKAmXQgcGFyc2UgaXQuIFRoZXJlZm9yZSwgd2Ug aGF2ZSBtb3ZlZCB0ZXh0IGluZm9ybWF0aW9uIG91dCBvZiB0aGUgbWFuaWZlc3QuIEhvd2V2ZXIs IGh1bWFucyBuZWVkIHRvIGtub3cgdGhhdCB0aGUgdGV4dCB0aGV5IGFyZSByZWFkaW5nIGNvcnJl Y3RseSBjb3JyZXNwb25kcyB0byB0aGUgbWFuaWZlc3QgdGhleSBhcmUgbG9va2luZyBhdC4gVGhl cmVmb3JlLCB3ZQ0KIGhhdmUgbWFkZSBhIGNvbnRhaW5lciBmb3IgYSBDT1NFX1NpZ24gLyBDT1NF X01hYyBhbmQgYSBtYXAgb2YgdGV4dCB2YWx1ZXMuIEluIGFkZGl0aW9uIHRvIHRoaXMsIHRoZSB0 ZXh0IHZhbHVlcyBhcmUgaGFzaGVkIGFuZCB0aGUgaGFzaCBpcyBpbmNsdWRlZCBpbiB0aGUgbWFu aWZlc3QgdG8gZW5zdXJlIHRoYXQgdGhlIHRleHQgcG9ydGlvbiBpcyBub3QgbW9kaWZpZWQgb3Ig Y29ycnVwdGVkIGluIHRyYW5zaXQuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGlzIG1lYW5zIHRoYXQsIHdoaWxlIGEgbWFuaWZlc3Qg d2l0aCB0ZXh0IG1heSBiZSBkZWxpdmVyZWQgdG8gYW4gdXBkYXRlIHNlcnZlciwgdGhhdCBzZXJ2 ZXIgY2FuIHN0cmlwIG9mZiB0aGUgdGV4dCBhbmQgZGVsaXZlciBvbmx5IHRoZSBhdXRoZW50aWNh dGVkLCBtYWNoaW5lLXJlYWRhYmxlIHBhcnQgdG8gYSB0YXJnZXQgZGV2aWNlLiBUaGlzIHJlc3Vs dHMgaW4gcmVkdWNlZCBiYW5kd2lkdGgsIHJlZHVjZWQgYnVmZmVyDQogc2l6ZXMsIG1vcmUgZXhw cmVzc2l2ZSB0ZXh0IGluZm9ybWF0aW9uLCBhbmQgcmVkdWNlZCBvcHBvcnR1bml0eSB0byBhYnVz ZSB2YXJpYWJseSBzaXplZCBmaWVsZHMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4jIERpZ2VzdCBpbmZvIGF0IHRoZSB0b3AgbGV2ZWw8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RGlnZXN0cyBhcmUgdXNlZCBpbiBtYW55IHBsYWNlcyBpbiB0 aGUgbWFuaWZlc3QuIFRoZSBpbmZvcm1hdGlvbiByZXF1aXJlZCB0byBpbnRlcnByZXQgZGlnZXN0 cywgdGhlcmVmb3JlLCBtdXN0IGJlIGEgdG9wLWxldmVsIGVsZW1lbnQuIEFsbCBkaWdlc3RzIGlu IGFueSBnaXZlbiBtYW5pZmVzdCBtdXN0IHVzZSB0aGUgc2FtZSBkaWdlc3QgYWxnb3JpdGhtLjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ IyBTZXF1ZW5jZSBOdW1iZXI8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhlIHVzZSBvZiB0aW1lc3Rh bXAgYXMgc2VxdWVuY2UgbnVtYmVyIGhhcyBjYXVzZWQgY29uZnVzaW9uIHJlZ3VsYXJseSwgc28g d2UgaGF2ZSBjaGFuZ2VkIHRpbWVzdGFtcCB0byBzZXF1ZW5jZSBudW1iZXIgaW4gdGhpcyBkcmFm dC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPiMgUHJlQ29uZGl0aW9ucyBhbmQgUG9zdENvbmRpdGlvbnM8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+VGhlcmUgaGFzIGJlZW4gc2lnbmlmaWNhbnQgZGViYXRlIGFib3V0IHRoZSB1c2Ugb2YgcHJl Y29uZGl0aW9ucyBhbmQgcG9zdGNvbmRpdGlvbnMsIHdpdGggc2V2ZXJhbCBpbXBvcnRhbnQgdXNl IGNhc2VzLiBCZWNhdXNlIG9mIHRoaXMsIGNvbmRpdGlvbnMgaGFzIGJlZW4gZGl2aWRlZCBpbnRv IHByZWNvbmRpdGlvbnMgYW5kIHBvc3Rjb25kaXRpb25zLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+IyBEZXBlbmRlbmNpZXMsIEFsaWFz ZXMsIFBheWxvYWRJbmZvPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkVhY2ggb2YgdGhlc2UgaGFzIHZl cnkgc2ltaWxhciBpbmZvcm1hdGlvbi4gQmVjYXVzZSBvZiB0aGlzLCBpdCBzZWVtcyByZWFzb25h YmxlIHRvIGdyb3VwIHRoZW0gaW50byBhIGNvbW1vbiBzdHJ1Y3R1cmUgdGhhdCBqdXN0IGlkZW50 aWZpZXMgdGhlIHR5cGUgb2YgcmVmZXJlbmNlLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+IyBSZXNvdXJjZXMsIFByb2Nlc3NvcnMsIFRh cmdldHM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VG8gc2F0aXNmeSBjb21wbGV4IHJlcXVpcmVtZW50 cywgd2UgY29uc2lkZXJlZCBzZXZlcmFsIHVzZS1jYXNlczo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkRpZmZlcmVudGlhbCB1cGRhdGUg b2YgYSBkdWFsIFhJUCBNQ1UuIFRvIGFjY29tcGxpc2ggdGhpcyBhbmQgc3RpbGwgb2J0YWluIGdv b2QgY29tcHJlc3Npb24sIHRoZSBpbnN0YWxsZWQgaW1hZ2UgbXVzdCBiZSB1bi1yZWxvY2F0ZWQs IHRoZW4gYSBkaWZmIG11c3QgYmUgYXBwbGllZCwgdGhlbiB0aGUgcmVzdWx0aW5nIGltYWdlIG11 c3QgYmUgcmVsb2NhdGVkLCB0aGVuIHdyaXR0ZW4gdG8gc3RvcmFnZS4gVGhpcyBpcyBldmVuDQog bW9yZSBjb21wbGljYXRlZCBpZiB0aGUgZGlmZiBpcyBjb21wcmVzc2VkIGFuZCBlbmNyeXB0ZWQu IEZ1cnRoZXJtb3JlLCB0aGVyZSBhcmUgc29tZSBkaWZmZXJlbnRpYWwgYWxnb3JpdGhtcyB0aGF0 IHdpbGwgbmVlZCB0byBiZSBhYmxlIHRvIHJlYWQgdGhlIGRhdGEgdGhleSBoYXZlIHdyaXR0ZW4s IHdoaWNoIG1lYW5zIHRoYXQgdGhlIHRhcmdldCBpbWFnZSBtdXN0IGFsc28gYmUgcG9zc2libGUg dG8gcmVhZCwgdW4tcmVsb2NhdGUsIGFuZCBmZWVkDQogaW50byB0aGUgZGlmZmVyZW50aWFsIHVu cGFja2luZyBlbmdpbmUuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5TaGFyZWQgY29tcHJlc3Npb24gdGFibGUuIFNldmVyYWwgY29tcG9u ZW50cyBvZiBhbiB1cGRhdGUgbWF5IGJlIGRlbGl2ZXJlZCB3aXRoIGEgc2luZ2xlIGNvbW1vbiBj b21wcmVzc2lvbiB0YWJsZS4gSWYgdGhpcyBpcyB0aGUgY2FzZSwgdGhlbiBlYWNoIHRhcmdldCBp bWFnZSBtdXN0IGJlIGRlY29tcHJlc3NlZCB1c2luZyB0d28gaW5wdXRzOiB0aGUgY29tcHJlc3Nl ZCBmaWxlIGFuZCB0aGUgY29tcHJlc3Npb24gdGFibGU8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoZSByZXN1bHQgb2YgdGhpcyBpcyB0 aGF0IHdlIGNvbmNsdWRlZCB0aGF0IHJlc291cmNlcyBhbmQgdGFyZ2V0cyBjYW5ub3QgY29uc2lk ZXJlZCB0aGUgc2FtZS4gV2hpbGUgdGhleSBhcmUgdGhlIHNhbWUgaW4gdGhlIOKAnHJhdyBiaW5h cnnigJ0gY2FzZSwgYW5kIHRoZXkgc3RpbGwgYXBwZWFyIHRvIGJlIHRoZSBzYW1lIGluIGxpbmVh ci1wcm9jZXNzaW5nIGNhc2UgKHdoZXJlIGFsbCBwcm9jZXNzb3JzIGhhdmUgb25seSBvbmUNCiBp bnB1dCBhbmQgb25lIG91dHB1dCksIG9uY2UgZGlmZmVyZW50aWFsIGNvbXByZXNzaW9uLCB0YWJs ZSBjb21wcmVzc2lvbiwgYW5kIHJlbG9jYXRpb24gYXJlIGNvbnNpZGVyZWQsIGl0IGlzIGNsZWFy IHRoYXQsIHNpbmNlIHByb2Nlc3NvcnMgY2FuIHJlcXVpcmUgbXVsdGlwbGUgaW5wdXRzLCB0aGVy ZSBtdXN0IGJlIGEgd2F5IHRvIGRlc2NyaWJlIGVhY2ggb2YgdGhlc2UgaW5wdXRzLiBUaGlzIGNs YXJpZmllcyB0aGF0IHJlc291cmNlcyBhcmUNCiBkaXN0aW5jdCBmcm9tIHRoZSBmaW5hbCBpbWFn ZSB0aGF0IGlzIGluc3RhbGxlZCB0byBhIGRldmljZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJlY2F1c2Ugb2YgdGhpcyBkaXN0aW5j dGlvbiBhbmQgaW4gb3JkZXIgdG8gZGVzY3JpYmUgY29tcGxleCB1c2UtY2FzZXMsIHdlIGhhdmUg aW5jbHVkZWQgYSBtZWNoYW5pc20gb2YgZGVzY3JpYmluZyB0aGUgcmVzb3VyY2VzIGFzIGlucHV0 IG5vZGVzIHRvIGEgZ3JhcGgsIHRoZSBpbnN0YWxsYXRpb24gdGFyZ2V0cyBhcyBvdXRwdXQgbm9k ZXMgZnJvbSB0aGUgZ3JhcGgsIGFuZCB0aGUgaW50ZXJtZWRpYXRlIHN0YXRlcyBhcw0KIGludGVy bmFsIG5vZGVzIG9mIHRoZSBncmFwaCwgd2hlcmUgZWFjaCBwcm9jZXNzb3IgZm9ybXMgYW4gZWRn ZSBvbiB0aGUgZ3JhcGguPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5Gb3IgdGhlIGluc3RhbGxhdGlvbiBvZiBhbnkgZ2l2ZW4gdGFyZ2V0 LCB3ZSBleHBlY3QgdGhhdCB0aGlzIGdyYXBoIGNvdWxkIGJlIHJlZHVjZWQgdG8gYSB0cmVlIHdp dGggYW4gaW5zdGFsbGF0aW9uIHRhcmdldCBhdCB0aGUgcm9vdC48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkluIHRoZSBzaW1wbGUgY2Fz ZSwgYSByYXcgYmluYXJ5IHBheWxvYWQsIG9uZSByZXNvdXJjZSBpcyByZXF1aXJlZCwgaWRlbnRp ZnlpbmcgYW4gb3V0cHV0IG5vZGUsIGFuZCBvbmUgaW5zdGFsbGF0aW9uIHRhcmdldCBpcyByZXF1 aXJlZCwgaWRlbnRpZnlpbmcgdGhlIHNhbWUgbm9kZSBhcyBhbiBpbnB1dCBub2RlLjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RGVzY3Jp YmluZyB0aGlzIHN0cnVjdHVyZSBhcyBhIGdyYXBoLCByYXRoZXIgdGhhbiBhIHRyZWUgZm9yIGVh Y2ggdGFyZ2V0IGlzIGEgZGVzaWduIHRyYWRlb2ZmLiBXZSBiZWxpZXZlIHRoYXQgdGhlIGdyYXBo IGFzIHNldmVyYWwgYWR2YW50YWdlcy4gRmlyc3QsIGl0IHJlZHVjZXMgdGhlIG5lc3RpbmcgZGVw dGggb2YgdGhlIENCT1IgcGFyc2VyLiBUaGlzIGlzIGFuIGltcG9ydGFudCBjb25zaWRlcmF0aW9u IGZvciBob3cNCiBtdWNoIG1lbW9yeSBpcyBjb25zdW1lZC4gU2Vjb25kLCBpdCBhbGxvd3MgYSB2 YWxpZGF0b3IgdG8gaXRlcmF0ZSBvdmVyIHRoZSBncmFwaCBhbmQgaWRlbnRpZnkgd2hldGhlciBp dCBzdXBwb3J0cyBlYWNoIHNwZWNpZmllZCBwcm9jZXNzb3Igd2l0aG91dCBhbnkgY29tcHJlaGVu c2lvbiBvZiB0aGUgdHJlZSBzdHJ1Y3R1cmVzIG9yIGdyYXBoIGNvbm5lY3RlZG5lc3MuIFRoaXJk LCBpdCBlbGltaW5hdGVzIHJlcGV0aXRpdmUgZGVzY3JpcHRpb24NCiBvZiByZXNvdXJjZXMgYW5k IGludGVybWVkaWF0ZXMgdGhhdCBhcmUgdXNlZCBpbiBtdWx0aXBsZSB0cmVlcywgd2hpY2ggY291 bGQgYmUgdXNlZCB0byBlbGltaW5hdGUgZG93bmxvYWQgKHJlc291cmNlIGFjcXVpc2l0aW9uKSBh bmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4gV2UgZG9u4oCZdCB0aGluayB0aGF0IHRoZSByZWR1Y3Rp b24gaW4gbWFuaWZlc3Qgc2l6ZSB3b3VsZCBiZSBzaWduaWZpY2FudC48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGFsd2F5cywgeW91 ciBpbnB1dCBpcyBtb3N0IHdlbGNvbWUhPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGFua3MsPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkJy ZW5kYW48L2Rpdj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3Rv cmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9i b2R5Pg0KPC9odG1sPg0K --_000_FDAB87B5A7CB4BBCB7CF763355B099D8armcom_-- From nobody Wed Jul 4 01:18:55 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B849130EB1 for ; Wed, 4 Jul 2018 01:18:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.587 X-Spam-Level: X-Spam-Status: No, score=-2.587 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GNlckT7LLaRk for ; Wed, 4 Jul 2018 01:18:38 -0700 (PDT) Received: from smtp6-g21.free.fr (smtp6-g21.free.fr [IPv6:2a01:e0c:1:1599::15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F2FF130E2F for ; Wed, 4 Jul 2018 01:18:38 -0700 (PDT) Received: from [192.168.0.13] (unknown [88.182.125.39]) by smtp6-g21.free.fr (Postfix) with ESMTP id 1BF2078031A; Wed, 4 Jul 2018 10:18:36 +0200 (CEST) To: Hannes Tschofenig , "suit@ietf.org" References: From: Denis Message-ID: Date: Wed, 4 Jul 2018 10:18:36 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------11A70F2A6E0906D0581F8B26" Content-Language: en-US Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jul 2018 08:18:53 -0000 This is a multi-part message in MIME format. --------------11A70F2A6E0906D0581F8B26 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Hannes, In the security considerations section, it would be worthwhile to indicate that the threats are addressed in details in section 3.2 (Threat Descriptions) from [I-D.ietf-suit-information-model]. Denis > Hi Denis, > > I think the risk of installing an old firmware version is covered in > the information model document, which goes into the details of what a > manifest has to contain. See Section 3.2.1 of > https://tools.ietf.org/html/draft-ietf-suit-information-model-01 > > There are essentially three types of documents the working group is > aiming to produce: an architecture document, the information model for > the manifest and one or multiple serialization formats. You have been > looking at the architecture but the appropriate document to read is > the information model spec. > > Ciao > > Hannes > > *From:*Suit [mailto:suit-bounces@ietf.org] *On Behalf Of *Denis > *Sent:* 03 July 2018 11:59 > *To:* suit@ietf.org > *Subject:* Re: [Suit] draft-ietf-suit-architecture-01 > > Hannes, > > It is well known that software updates are often done to address a > security issue. The same applies > to firmware updates. The current draft is lacking to address > protections against the downloading of > an old firmware version. The threat should be mentioned in the > security considerations section. > > The main body of the document should mention mechanisms to prevent the > replay of an old version > of the firmware. > > Denis > > Hi all, > > I have just submitted version -01 of the architecture document. I > have incorporate feedback from the working group, such as > > ·New terminology, > > ·Updates on the operating modes > > ·New architecture figures, > > ·New use cases (by David Brown) > > Here is the new version: > > https://tools.ietf.org/html/draft-ietf-suit-architecture-01 > > Here is the diff: > > https://tools.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-01.txt > > Feedback is appreciated. > > Ciao > > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments > are confidential and may also be privileged. If you are not the > intended recipient, please notify the sender immediately and do > not disclose the contents to any other person, use it for any > purpose, or store or copy the information in any medium. Thank you. > > > _______________________________________________ > > Suit mailing list > > Suit@ietf.org > > https://www.ietf.org/mailman/listinfo/suit > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose > the contents to any other person, use it for any purpose, or store or > copy the information in any medium. Thank you. --------------11A70F2A6E0906D0581F8B26 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit
Hannes,

In the security considerations section, it would be worthwhile to indicate that the threats are addressed in details
in section 3.2 (Threat Descriptions) from [I-D.ietf-suit-information-model].

Denis

Hi Denis,

 

I think the risk of installing an old firmware version is covered in the information model document, which goes into the details of what a manifest has to contain. See Section 3.2.1 of https://tools.ietf.org/html/draft-ietf-suit-information-model-01

 

There are essentially three types of documents the working group is aiming to produce: an architecture document, the information model for the manifest and one or multiple serialization formats. You have been looking at the architecture but the appropriate document to read is the information model spec.

 

Ciao

Hannes

 

From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis
Sent: 03 July 2018 11:59
To: suit@ietf.org
Subject: Re: [Suit] draft-ietf-suit-architecture-01

 

Hannes,

It is well known that software updates are often done to address a security issue. The same applies
to firmware updates. The current draft is lacking to address protections against the downloading of
an old firmware version. The threat should be mentioned in the security considerations section.

The main body of the document should mention mechanisms to prevent the replay of an old version
of the firmware.

Denis

Hi all,

 

I have just submitted version -01 of the architecture document. I have incorporate feedback from the working group, such as

·         New terminology,

·         Updates on the operating modes

·         New architecture figures,

·         New use cases (by David Brown)

 

Here is the new version:

https://tools.ietf.org/html/draft-ietf-suit-architecture-01

 

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-01.txt

 

Feedback is appreciated.

 

Ciao

Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. 


_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit

 

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.


--------------11A70F2A6E0906D0581F8B26-- From nobody Wed Jul 4 01:26:34 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00A2A130DF9 for ; Wed, 4 Jul 2018 01:26:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJzfnal7b_a4 for ; Wed, 4 Jul 2018 01:26:29 -0700 (PDT) Received: from ironport01.nordicsemi.no (mx01.nordicsemi.no [194.19.86.146]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A39B912426A for ; Wed, 4 Jul 2018 01:26:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=10407; s=default; t=1530692788; h=from:to:subject:date:message-id:mime-version; bh=/kb0sUNLKC4amhsjB4Mgxalp1xm8fmFsuPMk0BwON38=; b=cPE/YFYE8PTl939L8LtNurXUmBUSpdYuYeI1LcGBqNLEoWqkvout/45p /ub0DYrz6y8AWmi2iIN07ZP2kkmojEoy+lr8f4CALUni8nVoJVArM3Een lEMh2oBrnA8Sp2eYlUOPRUxuKUvQL2uQDds8YfVBbt5SKXE7D82WRwViE 8=; X-IronPort-AV: E=Sophos; i="5.51,306,1526335200"; d="scan'208,217"; a="11226791" From: =?iso-8859-1?Q?R=F8nningstad=2C_=D8yvind?= To: suit Thread-Topic: draft-moran-suit-manifest-02 Thread-Index: AdQTbk+t1KsTGeClRXioTvYSJXY/hw== Date: Wed, 4 Jul 2018 08:26:25 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: multipart/alternative; boundary="_000_edc46af214244a119950582014c8dbfenordicsemino_" MIME-Version: 1.0 Archived-At: Subject: [Suit] draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jul 2018 08:26:33 -0000 --_000_edc46af214244a119950582014c8dbfenordicsemino_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Thanks Brendan (and Hannes) for all your great work on the documents. I have some of questions and comments regarding the manifest format: * I'm still not 100% sure of the intended difference between extensions= and directives, can you put a sentence into the document? * No element has more than one inode or onode. How would "one resource = may be used by multiple processors" work? * If a processing step or target takes multiple input resources (I assu= me this happens when they all specify the same onode), how does the process= know which resource is which (which blob is the compression table, and whi= ch is the data)? I.e. how is the order of arguments decided? * What does it mean for a Target to be an alias (I'm referring to the c= omment on Target::encoding: "the format of the resource (nil when alias)")? * Can dependency resources serve as input to processors or targets? If = so, what data does the dependency resource provide as input to that process= or or target? If not, what should the onode value be? * CDDL nitpicking: * Some name inconsistencies: ProcessingStep vs Processor, TargetInfo= vs Target. * There's probably a typo in the definition of Directive. Should it = be an array of maps? * Target::storageIdentifier and Target::componentIdentifier don't us= e the custom types for StorageIdentifier and ComponentIdentifier. * I think digests should have a type, so the user can more easily re= strict its format after choosing a digest algorithm. * Suggestion: Add nint to textKeys group. * AuthenticatedManifest should probably contain an authenticatedMani= festVersion or similar. * "Processor" might be confusing ("does it mean CPU?"). =D8yvind --_000_edc46af214244a119950582014c8dbfenordicsemino_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Thank= s Brendan (and Hannes) for all your great work on the documents.=

=  

I hav= e some of questions and comments regarding the manifest format:<= /span>

=  

  • I'm still not 100% sure of the intended differen= ce between extensions and directives, can you put a sentence into the docum= ent?
  • No element has more t= han one inode or onode. How would "one resource may be used by multipl= e processors" work?
  • I= f a processing step or target takes multiple input resources (I assume this= happens when they all specify the same onode), how does the process know w= hich resource is which (which blob is the compression table, and which is the data)? I.e= . how is the order of arguments decided?
  • What does it mean for a Target to be an alias (I'm referring= to the comment on Target::encoding: "the format of the resource (nil = when alias)")?
  • Can de= pendency resources serve as input to processors or targets? If so, what dat= a does the dependency resource provide as input to that processor or target= ? If not, what should the onode value be?
  • CDDL nitpicking:
    • Some name inconsistencies: ProcessingStep vs Pro= cessor, TargetInfo vs Target.
    • There's probably a typo in the definition of Directive. Should it be an= array of maps?
    • Target::s= torageIdentifier and Target::componentIdentifier don't use the custom types= for StorageIdentifier and ComponentIdentifier.
    • I think digests should have a type, so the user can m= ore easily restrict its format after choosing a digest algorithm.
    • Suggestion: Add nint to textKeys gr= oup.
    • AuthenticatedManifest= should probably contain an authenticatedManifestVersion or similar.
    • "Processor" might be c= onfusing (“does it mean CPU?”).

 

=D8yvind

 

--_000_edc46af214244a119950582014c8dbfenordicsemino_-- From nobody Wed Jul 4 02:05:04 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CC65130E24 for ; Wed, 4 Jul 2018 02:05:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.02 X-Spam-Level: X-Spam-Status: No, score=-1.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9R0EEAR__k9p for ; Wed, 4 Jul 2018 02:05:00 -0700 (PDT) Received: from ironport02.nordicsemi.no (mx02.nordicsemi.no [194.19.86.151]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C7F1130DC1 for ; Wed, 4 Jul 2018 02:04:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=37799; s=default; t=1530695099; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=LmRZ4dqtmjLEK18uoPXXSmb+UHs2RT/X95wjN+TzXSI=; b=zon3rcsdxjZvgJOrL2C/tQZwTkVDXDuCKNL8S+i/oPs6fhITM6WmjnbE sP0zg21Z6XXRKO6vOM567O1xVUN2ttBpejZaaw2rWDrumQC/CjondbmS7 m9ML+wb3sMIIDObdOenD2df75A+VSQ12mXbL/JX+dugRc7NvIxS2AOjVJ I=; X-IronPort-AV: E=Sophos;i="5.51,306,1526335200"; d="scan'208,217";a="4587417" From: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= To: Brendan Moran , suit CC: Hannes Tschofenig Thread-Topic: [suit]: draft-moran-suit-manifest-02 Thread-Index: AQHUExHtnaLT8k9ra0yYs7g0XR6lpaR+wyGA Date: Wed, 4 Jul 2018 09:04:56 +0000 Message-ID: <1715454122bf49d4810b3b68eb1f3a58@nordicsemi.no> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: multipart/alternative; boundary="_000_1715454122bf49d4810b3b68eb1f3a58nordicsemino_" MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jul 2018 09:05:03 -0000 --_000_1715454122bf49d4810b3b68eb1f3a58nordicsemino_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGF2aW5nIGEgc2luZ2xlIGRpZ2VzdCBpbiBtYW5pZmVzdCByZXF1aXJlbWVudCBtYXkgYmUgYSBi aXQgcmVzdHJpY3RpdmUuIFRoZXJlDQphcmUgbmV3IHN0YW5kYXJkcyBpbiBkcmFmdCBsaWtlIHRo ZSBDTlNBDQooaHR0cHM6Ly90b29scy5pZXRmLm9yZy9pZC9kcmFmdC1qZW5raW5zLWNuc2EtY2Vy dC1jcmwtcHJvZmlsZS0wMi5odG1sKSB0aGF0DQpyZXF1aXJlcyBTSEEtMzg0IGluc3RlYWQgb2Yg dGhlIFNIQS0yNTYgdGhhdCBpcyBjb21tb25seSB1c2VkLiBJIHdvbmRlciBpZiB0aGVyZQ0Kd2ls bCBiZSByZXF1aXJlbWVudHMgdG8gc3VwcG9ydCBtdWx0aXBsZSBkaWdlc3QgdHlwZXMgYXQgdGhl IHNhbWUgdGltZS4NCg0KVGhlIERpZ2VzdEluZm8gaW4gYSBtYW5pZmVzdCBjb3VsZCBiZSB1c2Vk IGFzIGEgc291cmNlIGZvciBwcmUtdmFsaWRhdGlvbiBvZiB0aGUNCnN1cHBvcnRlZCBmZWF0dXJl IHNldCwgYW5kIGluIHRoaXMgbWluZHNldCBJIHRoaW5rIGl0IHdvdWxkbid0IGJlIGRpZmZpY3Vs dCB0bw0KYWRkIHN1cHBvcnQgZm9yIG11bHRpcGxlIGRpZ2VzdCB0eXBlcyB3aXRoIHNvbWUgc21h bGwgY2hhbmdlLiBJZiB0aGUgRGlnZXN0SW5mbw0KaXMgYW4gYXJyYXkgb2YgdHlwZXMgc3VwcG9y dGVkIGluc3RlYWQgb2YgYSBzaW5nbGUgZW50cnksIHRoZW4gdGhlIHJlc3RyaWN0aW9uDQpnb2Vz IGF3YXkuDQoNCkkgYWxzbyB3b25kZXIgaWYgdGhlIGRpZ2VzdHMgc2hvdWxkIGFsc28gY29udGFp biB0aGUgZGlnZXN0IHR5cGUgKGkuZS4gYW4NCmVudW1lcmF0ZWQgdmFsdWUpLiBJdCBzaG91bGRu J3QgYmUgdG9vIGNvc3RseSBpbiBzaXplLCBhbmQgaXQgd291bGQgaGF2ZSBzb21lDQppbW1lZGlh dGUgYmVuZWZpdHM6DQoNCiAgICAxLiBTaW1wbGUgYm9vdGxvYWRlcnMgY2FuIHVzZSBwb3N0LWNv bmRpdGlvbnMgd2l0aG91dCBleHByZXNzaXZlDQogICAgICAgcmVxdWlyZW1lbnRzIHRvIHVuZGVy c3RhbmQgYWRkaXRpb25hbCBkYXRhIGZyb20gdGhlIG1hbmlmZXN0IGZvcm1hdHMuDQogICAgICAg VGhpcyBjb3VsZCBiZSB1c2VkIGZvciBiYXNpYyB2YWxpZGF0aW9uIG9mIGNvcHkgcm91dGluZXMN CiAgICAyLiBUaGUgUG9zdC1jb25kaXRpb25zIGNhbiBiZSBzdG9yZWQgYWZ0ZXIgdGhlIHVwZGF0 ZSB0byBzaWduaWZ5IHRoZQ0KICAgICAgICJjdXJyZW50IHN0YXRlIiBvZiB0aGUgZmlybXdhcmUs IHdpdGggbGl0dGxlIHRvIG5vIGV4dHJhIGluZm9ybWF0aW9uDQogICAgICAgdG8gZGVzY3JpYmUg aG93IHRvIHByb2Nlc3MgdGhlbQ0KICAgIDMuIFBvc3QtY29uZGl0aW9ucyBjYW4gYmUgY29uY2F0 ZW5hdGVkIGZyb20gbXVsdGlwbGUgbWFuaWZlc3RzLCBhcyB0aGV5DQogICAgICAgYXJlIG1vcmUt b3ItbGVzcyBzZWxmLWNvbnRhaW5lZC4NCg0KUmVnYXJkcw0KRnJhbmsgQXVkdW4gS3ZhbXRyw7gN Cg0KRnJvbTogU3VpdCBbbWFpbHRvOnN1aXQtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9m IEJyZW5kYW4gTW9yYW4NClNlbnQ6IDMuIGp1bGkgMjAxOCAyMzowOA0KVG86IHN1aXQgPHN1aXRA aWV0Zi5vcmc+DQpDYzogSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5j b20+DQpTdWJqZWN0OiBbU3VpdF0gW3N1aXRdOiBkcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LTAy DQoNClRoaXMgZHJhZnQgaXMgYSBzaWduaWZpY2FudCBkZXBhcnR1cmUgZnJvbSBwcmV2aW91cyBk cmFmdHMsIHNvIEkgdGhpbmsgaXQgaXMgaW1wb3J0YW50IHRvIGhpZ2hsaWdodCB0aGUgY2hhbmdl cy4gVGhlIGRyYWZ0IHJlcXVpcmVzIGEgbG90IG9mIHRleHQgdGhhdCBoYXNu4oCZdCBiZWVuIHdy aXR0ZW4geWV0LCBzbyBJIHdpbGwgdHJ5IHRvIHB1dCBzb21lIG9mIHRoYXQgaGVyZSBmb3IgZGlz Y3Vzc2lvbi4NCg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbW9yYW4t c3VpdC1tYW5pZmVzdC8NCg0KDQojIFN1bW1hcnkgb2YgY2hhbmdlcw0KVGhlcmUgYXJlIGEgbGFy Z2UgbnVtYmVyIG9mIGNoYW5nZXMgaW4gdGhpcyBkcmFmdC4gSW4gYWRkaXRpb24sIHRoZSB0ZXh0 IGRlc2NyaXB0aW9uIG9mIHRoZSBtYW5pZmVzdCBpcyB5ZXQgdG8gYmUgY29tcGxldGVkLiBUaGUg dG9wIGxldmVsIG1hbmlmZXN0IGVsZW1lbnQgcmVtYWlucyBhIENCT1IgYXJyYXkuIFRoZSBwcmlt YXJ5IHJlYXNvbiBmb3IgdGhpcyBpcyB0aGF0IG1hbnkgb2YgdGhlIGluaXRpYWwgZWxlbWVudHMg YXJlIG1hbmRhdG9yeSAoc2VlIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBmb3IgbW9yZSBkZXRhaWwp LiBJbiBhZGRpdGlvbiB0byB0aGlzLCB0aGUgb3JkZXJpbmcgaXMgaW1wb3J0YW50IGJlY2F1c2Ug dGhlIG1hbmlmZXN0IGlzIGEgc2lnbmVkIGRvY3VtZW50LiBDT1NFIHVzZXMgdGhlIHNhbWUgcGFy YWRpZ206IHdoZXJlIGZpZWxkcyBhcmUgbWFuZGF0b3J5LCB0aGV5IGFyZSBlbmNvZGVkIGFzIGFu IGFycmF5LiBXaGVyZSB0aGVyZSBhcmUgb3B0aW9uYWwgZmllbGRzIChDT1NFX0hlYWRlcnMpIHRo ZXkgYXJlIGVuY29kZWQgYXMgYSBtYXAgKGlmIHVuc2lnbmVkKSBvciBhcyBhIG1hcCwgd3JhcHBl ZCBpbiBhIGJzdHIgaWYgc2lnbmVkLg0KDQpUaGUgcHJpbWFyeSBjaGFuZ2VzIGFyZToNCg0KMS4g U2V2ZXJhYmxlIHRleHQNCjIuIERpZ2VzdCBJbmZvIGlzIG1vdmVkIHRvIGEgdG9wLWxldmVsIGVs ZW1lbnQNCjMuIFNlcXVlbmNlIG51bWJlciBpcyBub3cgY2FsbGVkIHNlcXVlbmNlIG51bWJlciBp bnN0ZWFkIG9mIHRpbWVzdGFtcA0KNC4gQ29uZGl0aW9ucyBhcmUgZGl2aWRlZCBpbnRvIHByZWNv bmRpdGlvbnMgYW5kIHBvc3Rjb25kaXRpb25zDQo1LiBEZXBlbmRlbmNpZXMsIEFsaWFzZXMsIGFu ZCBwYXlsb2FkIGluZm8gYXJlIG5vdyByZXNvdXJjZXMNCjYuIFBheWxvYWRpbmZvIGlzIGRpdmlk ZWQgaW50byByZXNvdXJjZXMsIHByb2Nlc3NvcnMsIGFuZCB0YXJnZXRzDQoNCiMgU2V2ZXJhYmxl IHRleHQ6DQpUZXh0IGlzIGZvciBodW1hbnMuIERldmljZXMgc2hvdWxkbuKAmXQgcGFyc2UgaXQu IFRoZXJlZm9yZSwgd2UgaGF2ZSBtb3ZlZCB0ZXh0IGluZm9ybWF0aW9uIG91dCBvZiB0aGUgbWFu aWZlc3QuIEhvd2V2ZXIsIGh1bWFucyBuZWVkIHRvIGtub3cgdGhhdCB0aGUgdGV4dCB0aGV5IGFy ZSByZWFkaW5nIGNvcnJlY3RseSBjb3JyZXNwb25kcyB0byB0aGUgbWFuaWZlc3QgdGhleSBhcmUg bG9va2luZyBhdC4gVGhlcmVmb3JlLCB3ZSBoYXZlIG1hZGUgYSBjb250YWluZXIgZm9yIGEgQ09T RV9TaWduIC8gQ09TRV9NYWMgYW5kIGEgbWFwIG9mIHRleHQgdmFsdWVzLiBJbiBhZGRpdGlvbiB0 byB0aGlzLCB0aGUgdGV4dCB2YWx1ZXMgYXJlIGhhc2hlZCBhbmQgdGhlIGhhc2ggaXMgaW5jbHVk ZWQgaW4gdGhlIG1hbmlmZXN0IHRvIGVuc3VyZSB0aGF0IHRoZSB0ZXh0IHBvcnRpb24gaXMgbm90 IG1vZGlmaWVkIG9yIGNvcnJ1cHRlZCBpbiB0cmFuc2l0Lg0KDQpUaGlzIG1lYW5zIHRoYXQsIHdo aWxlIGEgbWFuaWZlc3Qgd2l0aCB0ZXh0IG1heSBiZSBkZWxpdmVyZWQgdG8gYW4gdXBkYXRlIHNl cnZlciwgdGhhdCBzZXJ2ZXIgY2FuIHN0cmlwIG9mZiB0aGUgdGV4dCBhbmQgZGVsaXZlciBvbmx5 IHRoZSBhdXRoZW50aWNhdGVkLCBtYWNoaW5lLXJlYWRhYmxlIHBhcnQgdG8gYSB0YXJnZXQgZGV2 aWNlLiBUaGlzIHJlc3VsdHMgaW4gcmVkdWNlZCBiYW5kd2lkdGgsIHJlZHVjZWQgYnVmZmVyIHNp emVzLCBtb3JlIGV4cHJlc3NpdmUgdGV4dCBpbmZvcm1hdGlvbiwgYW5kIHJlZHVjZWQgb3Bwb3J0 dW5pdHkgdG8gYWJ1c2UgdmFyaWFibHkgc2l6ZWQgZmllbGRzLg0KDQojIERpZ2VzdCBpbmZvIGF0 IHRoZSB0b3AgbGV2ZWwNCkRpZ2VzdHMgYXJlIHVzZWQgaW4gbWFueSBwbGFjZXMgaW4gdGhlIG1h bmlmZXN0LiBUaGUgaW5mb3JtYXRpb24gcmVxdWlyZWQgdG8gaW50ZXJwcmV0IGRpZ2VzdHMsIHRo ZXJlZm9yZSwgbXVzdCBiZSBhIHRvcC1sZXZlbCBlbGVtZW50LiBBbGwgZGlnZXN0cyBpbiBhbnkg Z2l2ZW4gbWFuaWZlc3QgbXVzdCB1c2UgdGhlIHNhbWUgZGlnZXN0IGFsZ29yaXRobS4NCg0KIyBT ZXF1ZW5jZSBOdW1iZXINClRoZSB1c2Ugb2YgdGltZXN0YW1wIGFzIHNlcXVlbmNlIG51bWJlciBo YXMgY2F1c2VkIGNvbmZ1c2lvbiByZWd1bGFybHksIHNvIHdlIGhhdmUgY2hhbmdlZCB0aW1lc3Rh bXAgdG8gc2VxdWVuY2UgbnVtYmVyIGluIHRoaXMgZHJhZnQuDQoNCiMgUHJlQ29uZGl0aW9ucyBh bmQgUG9zdENvbmRpdGlvbnMNClRoZXJlIGhhcyBiZWVuIHNpZ25pZmljYW50IGRlYmF0ZSBhYm91 dCB0aGUgdXNlIG9mIHByZWNvbmRpdGlvbnMgYW5kIHBvc3Rjb25kaXRpb25zLCB3aXRoIHNldmVy YWwgaW1wb3J0YW50IHVzZSBjYXNlcy4gQmVjYXVzZSBvZiB0aGlzLCBjb25kaXRpb25zIGhhcyBi ZWVuIGRpdmlkZWQgaW50byBwcmVjb25kaXRpb25zIGFuZCBwb3N0Y29uZGl0aW9ucy4NCg0KIyBE ZXBlbmRlbmNpZXMsIEFsaWFzZXMsIFBheWxvYWRJbmZvDQpFYWNoIG9mIHRoZXNlIGhhcyB2ZXJ5 IHNpbWlsYXIgaW5mb3JtYXRpb24uIEJlY2F1c2Ugb2YgdGhpcywgaXQgc2VlbXMgcmVhc29uYWJs ZSB0byBncm91cCB0aGVtIGludG8gYSBjb21tb24gc3RydWN0dXJlIHRoYXQganVzdCBpZGVudGlm aWVzIHRoZSB0eXBlIG9mIHJlZmVyZW5jZS4NCg0KIyBSZXNvdXJjZXMsIFByb2Nlc3NvcnMsIFRh cmdldHMNClRvIHNhdGlzZnkgY29tcGxleCByZXF1aXJlbWVudHMsIHdlIGNvbnNpZGVyZWQgc2V2 ZXJhbCB1c2UtY2FzZXM6DQoNCkRpZmZlcmVudGlhbCB1cGRhdGUgb2YgYSBkdWFsIFhJUCBNQ1Uu IFRvIGFjY29tcGxpc2ggdGhpcyBhbmQgc3RpbGwgb2J0YWluIGdvb2QgY29tcHJlc3Npb24sIHRo ZSBpbnN0YWxsZWQgaW1hZ2UgbXVzdCBiZSB1bi1yZWxvY2F0ZWQsIHRoZW4gYSBkaWZmIG11c3Qg YmUgYXBwbGllZCwgdGhlbiB0aGUgcmVzdWx0aW5nIGltYWdlIG11c3QgYmUgcmVsb2NhdGVkLCB0 aGVuIHdyaXR0ZW4gdG8gc3RvcmFnZS4gVGhpcyBpcyBldmVuIG1vcmUgY29tcGxpY2F0ZWQgaWYg dGhlIGRpZmYgaXMgY29tcHJlc3NlZCBhbmQgZW5jcnlwdGVkLiBGdXJ0aGVybW9yZSwgdGhlcmUg YXJlIHNvbWUgZGlmZmVyZW50aWFsIGFsZ29yaXRobXMgdGhhdCB3aWxsIG5lZWQgdG8gYmUgYWJs ZSB0byByZWFkIHRoZSBkYXRhIHRoZXkgaGF2ZSB3cml0dGVuLCB3aGljaCBtZWFucyB0aGF0IHRo ZSB0YXJnZXQgaW1hZ2UgbXVzdCBhbHNvIGJlIHBvc3NpYmxlIHRvIHJlYWQsIHVuLXJlbG9jYXRl LCBhbmQgZmVlZCBpbnRvIHRoZSBkaWZmZXJlbnRpYWwgdW5wYWNraW5nIGVuZ2luZS4NCg0KU2hh cmVkIGNvbXByZXNzaW9uIHRhYmxlLiBTZXZlcmFsIGNvbXBvbmVudHMgb2YgYW4gdXBkYXRlIG1h eSBiZSBkZWxpdmVyZWQgd2l0aCBhIHNpbmdsZSBjb21tb24gY29tcHJlc3Npb24gdGFibGUuIElm IHRoaXMgaXMgdGhlIGNhc2UsIHRoZW4gZWFjaCB0YXJnZXQgaW1hZ2UgbXVzdCBiZSBkZWNvbXBy ZXNzZWQgdXNpbmcgdHdvIGlucHV0czogdGhlIGNvbXByZXNzZWQgZmlsZSBhbmQgdGhlIGNvbXBy ZXNzaW9uIHRhYmxlDQoNClRoZSByZXN1bHQgb2YgdGhpcyBpcyB0aGF0IHdlIGNvbmNsdWRlZCB0 aGF0IHJlc291cmNlcyBhbmQgdGFyZ2V0cyBjYW5ub3QgY29uc2lkZXJlZCB0aGUgc2FtZS4gV2hp bGUgdGhleSBhcmUgdGhlIHNhbWUgaW4gdGhlIOKAnHJhdyBiaW5hcnnigJ0gY2FzZSwgYW5kIHRo ZXkgc3RpbGwgYXBwZWFyIHRvIGJlIHRoZSBzYW1lIGluIGxpbmVhci1wcm9jZXNzaW5nIGNhc2Ug KHdoZXJlIGFsbCBwcm9jZXNzb3JzIGhhdmUgb25seSBvbmUgaW5wdXQgYW5kIG9uZSBvdXRwdXQp LCBvbmNlIGRpZmZlcmVudGlhbCBjb21wcmVzc2lvbiwgdGFibGUgY29tcHJlc3Npb24sIGFuZCBy ZWxvY2F0aW9uIGFyZSBjb25zaWRlcmVkLCBpdCBpcyBjbGVhciB0aGF0LCBzaW5jZSBwcm9jZXNz b3JzIGNhbiByZXF1aXJlIG11bHRpcGxlIGlucHV0cywgdGhlcmUgbXVzdCBiZSBhIHdheSB0byBk ZXNjcmliZSBlYWNoIG9mIHRoZXNlIGlucHV0cy4gVGhpcyBjbGFyaWZpZXMgdGhhdCByZXNvdXJj ZXMgYXJlIGRpc3RpbmN0IGZyb20gdGhlIGZpbmFsIGltYWdlIHRoYXQgaXMgaW5zdGFsbGVkIHRv IGEgZGV2aWNlLg0KDQpCZWNhdXNlIG9mIHRoaXMgZGlzdGluY3Rpb24gYW5kIGluIG9yZGVyIHRv IGRlc2NyaWJlIGNvbXBsZXggdXNlLWNhc2VzLCB3ZSBoYXZlIGluY2x1ZGVkIGEgbWVjaGFuaXNt IG9mIGRlc2NyaWJpbmcgdGhlIHJlc291cmNlcyBhcyBpbnB1dCBub2RlcyB0byBhIGdyYXBoLCB0 aGUgaW5zdGFsbGF0aW9uIHRhcmdldHMgYXMgb3V0cHV0IG5vZGVzIGZyb20gdGhlIGdyYXBoLCBh bmQgdGhlIGludGVybWVkaWF0ZSBzdGF0ZXMgYXMgaW50ZXJuYWwgbm9kZXMgb2YgdGhlIGdyYXBo LCB3aGVyZSBlYWNoIHByb2Nlc3NvciBmb3JtcyBhbiBlZGdlIG9uIHRoZSBncmFwaC4NCg0KRm9y IHRoZSBpbnN0YWxsYXRpb24gb2YgYW55IGdpdmVuIHRhcmdldCwgd2UgZXhwZWN0IHRoYXQgdGhp cyBncmFwaCBjb3VsZCBiZSByZWR1Y2VkIHRvIGEgdHJlZSB3aXRoIGFuIGluc3RhbGxhdGlvbiB0 YXJnZXQgYXQgdGhlIHJvb3QuDQoNCkluIHRoZSBzaW1wbGUgY2FzZSwgYSByYXcgYmluYXJ5IHBh eWxvYWQsIG9uZSByZXNvdXJjZSBpcyByZXF1aXJlZCwgaWRlbnRpZnlpbmcgYW4gb3V0cHV0IG5v ZGUsIGFuZCBvbmUgaW5zdGFsbGF0aW9uIHRhcmdldCBpcyByZXF1aXJlZCwgaWRlbnRpZnlpbmcg dGhlIHNhbWUgbm9kZSBhcyBhbiBpbnB1dCBub2RlLg0KDQpEZXNjcmliaW5nIHRoaXMgc3RydWN0 dXJlIGFzIGEgZ3JhcGgsIHJhdGhlciB0aGFuIGEgdHJlZSBmb3IgZWFjaCB0YXJnZXQgaXMgYSBk ZXNpZ24gdHJhZGVvZmYuIFdlIGJlbGlldmUgdGhhdCB0aGUgZ3JhcGggYXMgc2V2ZXJhbCBhZHZh bnRhZ2VzLiBGaXJzdCwgaXQgcmVkdWNlcyB0aGUgbmVzdGluZyBkZXB0aCBvZiB0aGUgQ0JPUiBw YXJzZXIuIFRoaXMgaXMgYW4gaW1wb3J0YW50IGNvbnNpZGVyYXRpb24gZm9yIGhvdyBtdWNoIG1l bW9yeSBpcyBjb25zdW1lZC4gU2Vjb25kLCBpdCBhbGxvd3MgYSB2YWxpZGF0b3IgdG8gaXRlcmF0 ZSBvdmVyIHRoZSBncmFwaCBhbmQgaWRlbnRpZnkgd2hldGhlciBpdCBzdXBwb3J0cyBlYWNoIHNw ZWNpZmllZCBwcm9jZXNzb3Igd2l0aG91dCBhbnkgY29tcHJlaGVuc2lvbiBvZiB0aGUgdHJlZSBz dHJ1Y3R1cmVzIG9yIGdyYXBoIGNvbm5lY3RlZG5lc3MuIFRoaXJkLCBpdCBlbGltaW5hdGVzIHJl cGV0aXRpdmUgZGVzY3JpcHRpb24gb2YgcmVzb3VyY2VzIGFuZCBpbnRlcm1lZGlhdGVzIHRoYXQg YXJlIHVzZWQgaW4gbXVsdGlwbGUgdHJlZXMsIHdoaWNoIGNvdWxkIGJlIHVzZWQgdG8gZWxpbWlu YXRlIGRvd25sb2FkIChyZXNvdXJjZSBhY3F1aXNpdGlvbikgYW5kIHByb2Nlc3Npbmcgb3Zlcmhl YWQuIFdlIGRvbuKAmXQgdGhpbmsgdGhhdCB0aGUgcmVkdWN0aW9uIGluIG1hbmlmZXN0IHNpemUg d291bGQgYmUgc2lnbmlmaWNhbnQuDQoNCkFzIGFsd2F5cywgeW91ciBpbnB1dCBpcyBtb3N0IHdl bGNvbWUhDQoNClRoYW5rcywNCkJyZW5kYW4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50 cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQg bWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lw aWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlz Y2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1 cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRo YW5rIHlvdS4NCg== --_000_1715454122bf49d4810b3b68eb1f3a58nordicsemino_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkiOw0KCXBhbm9zZS0xOjIg MTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29u b3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTpt c29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsN Cgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3MC44 NXB0IDcwLjg1cHQgNzAuODVwdCA3MC44NXB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpX b3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxp c3QtaWQ6NDc1Nzk4ODI7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi00MTExMTk1MDt9DQpAbGlz dCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MzYuMHB0Ow0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotMTguMHB0Ow0KCW1zby1hbnNpLWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1z by1sZXZlbC10YWItc3RvcDo3Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjEwOC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjE0NC4wcHQ7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6 bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjE4MC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjIxNi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjI1 Mi4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0x OC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjI4OC4wcHQ7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMyNC4wcHQ7DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0xOC4wcHQ7DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0K dWwNCgl7bWFyZ2luLWJvdHRvbTowY207fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+ PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8 L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0 IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNo YXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iTk8tQk9L IiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMTcyQjREIj5IYXZpbmcgYSBzaW5nbGUgZGlnZXN0IGluIG1hbmlmZXN0IHJlcXVpcmVtZW50 IG1heSBiZSBhIGJpdCByZXN0cmljdGl2ZS4gVGhlcmUNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxNzJCNEQiPmFyZSBuZXcgc3RhbmRhcmRzIGluIGRyYWZ0IGxpa2UgdGhlIENOU0ENCjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPihodHRwczovL3Rvb2xzLmlldGYub3JnL2lkL2Ry YWZ0LWplbmtpbnMtY25zYS1jZXJ0LWNybC1wcm9maWxlLTAyLmh0bWwpIHRoYXQNCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPnJlcXVpcmVzIFNIQS0zODQgaW5zdGVhZCBvZiB0aGUg U0hBLTI1NiB0aGF0IGlzIGNvbW1vbmx5IHVzZWQuIEkgd29uZGVyIGlmIHRoZXJlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0 eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzE3MkI0RCI+d2lsbCBiZSByZXF1aXJlbWVudHMgdG8gc3VwcG9ydCBt dWx0aXBsZSBkaWdlc3QgdHlwZXMgYXQgdGhlIHNhbWUgdGltZS4NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxNzJCNEQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250 LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPlRo ZSBEaWdlc3RJbmZvIGluIGEgbWFuaWZlc3QgY291bGQgYmUgdXNlZCBhcyBhIHNvdXJjZSBmb3Ig cHJlLXZhbGlkYXRpb24gb2YgdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzE3MkI0RCI+c3Vw cG9ydGVkIGZlYXR1cmUgc2V0LCBhbmQgaW4gdGhpcyBtaW5kc2V0IEkgdGhpbmsgaXQgd291bGRu J3QgYmUgZGlmZmljdWx0IHRvDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMTcyQjREIj5hZGQg c3VwcG9ydCBmb3IgbXVsdGlwbGUgZGlnZXN0IHR5cGVzIHdpdGggc29tZSBzbWFsbCBjaGFuZ2Uu IElmIHRoZSBEaWdlc3RJbmZvDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMTcyQjREIj5pcyBh biBhcnJheSBvZiB0eXBlcyBzdXBwb3J0ZWQgaW5zdGVhZCBvZiBhIHNpbmdsZSBlbnRyeSwgdGhl biB0aGUgcmVzdHJpY3Rpb24NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPmdvZXMg YXdheS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtT ZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxNzJCNEQiPkkgYWxzbyB3b25kZXIgaWYgdGhlIGRpZ2VzdHMgc2hvdWxk IGFsc28gY29udGFpbiB0aGUgZGlnZXN0IHR5cGUgKGkuZS4gYW4NCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxNzJCNEQiPmVudW1lcmF0ZWQgdmFsdWUpLiBJdCBzaG91bGRuJ3QgYmUgdG9vIGNv c3RseSBpbiBzaXplLCBhbmQgaXQgd291bGQgaGF2ZSBzb21lDQo8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMTcyQjREIj5pbW1lZGlhdGUgYmVuZWZpdHM6PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzE3MkI0RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5 OiZxdW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzE3MkI0RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7IDEuIFNpbXBsZSBib290bG9hZGVycyBjYW4gdXNlIHBvc3QtY29uZGl0aW9ucyB3 aXRob3V0IGV4cHJlc3NpdmUNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3JlcXVpcmVtZW50cyB0byB1bmRl cnN0YW5kIGFkZGl0aW9uYWwgZGF0YSBmcm9tIHRoZSBtYW5pZmVzdCBmb3JtYXRzLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBUaGlzIGNvdWxkIGJlIHVzZWQgZm9yIGJhc2ljIHZhbGlkYXRpb24gb2YgY29weSByb3V0 aW5lczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdv ZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxNzJCNEQiPiZuYnNwOyZuYnNwOyZuYnNwOyAy LiBUaGUgUG9zdC1jb25kaXRpb25zIGNhbiBiZSBzdG9yZWQgYWZ0ZXIgdGhlIHVwZGF0ZSB0byBz aWduaWZ5IHRoZQ0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzE3MkI0RCI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7JnF1b3Q7Y3VycmVudCBzdGF0ZSZxdW90OyBv ZiB0aGUgZmlybXdhcmUsIHdpdGggbGl0dGxlIHRvIG5vIGV4dHJhIGluZm9ybWF0aW9uDQo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMTcyQjREIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDt0byBkZXNjcmliZSBob3cgdG8gcHJvY2VzcyB0aGVtPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzE3MkI0RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7IDMuIFBvc3QtY29uZGl0aW9u cyBjYW4gYmUgY29uY2F0ZW5hdGVkIGZyb20gbXVsdGlwbGUgbWFuaWZlc3RzLCBhcyB0aGV5DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJF Ti1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMTcyQjREIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDthcmUgbW9yZS1vci1sZXNzIHNlbGYtY29udGFpbmVkLjwvc3Bhbj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9 Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5SZWdhcmRzPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+RnJhbmsgQXVkdW4gS3ZhbXRyw7g8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1z by1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRp bmc6MGNtIDBjbSAwY20gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBTdWl0IFttYWlsdG86c3VpdC1ib3VuY2VzQGlldGYub3Jn XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5CcmVuZGFuIE1vcmFuPGJyPg0KPGI+U2VudDo8L2I+IDMu IGp1bGkgMjAxOCAyMzowODxicj4NCjxiPlRvOjwvYj4gc3VpdCAmbHQ7c3VpdEBpZXRmLm9yZyZn dDs8YnI+DQo8Yj5DYzo8L2I+IEhhbm5lcyBUc2Nob2ZlbmlnICZsdDtIYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBbU3VpdF0gW3N1aXRdOiBkcmFmdC1t b3Jhbi1zdWl0LW1hbmlmZXN0LTAyPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+VGhpcyBkcmFmdCBpcyBhIHNpZ25pZmljYW50IGRlcGFydHVyZSBmcm9tIHBy ZXZpb3VzIGRyYWZ0cywgc28gSSB0aGluayBpdCBpcyBpbXBvcnRhbnQgdG8gaGlnaGxpZ2h0IHRo ZSBjaGFuZ2VzLiBUaGUgZHJhZnQgcmVxdWlyZXMgYSBsb3Qgb2YgdGV4dCB0aGF0IGhhc27igJl0 IGJlZW4gd3JpdHRlbiB5ZXQsIHNvIEkgd2lsbCB0cnkgdG8gcHV0IHNvbWUgb2YgdGhhdCBoZXJl IGZvciBkaXNjdXNzaW9uLg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1t b3Jhbi1zdWl0LW1hbmlmZXN0LyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtbW9yYW4tc3VpdC1tYW5pZmVzdC88L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+IyBTdW1tYXJ5IG9mIGNoYW5nZXM8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZXJlIGFyZSBhIGxh cmdlIG51bWJlciBvZiBjaGFuZ2VzIGluIHRoaXMgZHJhZnQuIEluIGFkZGl0aW9uLCB0aGUgdGV4 dCBkZXNjcmlwdGlvbiBvZiB0aGUgbWFuaWZlc3QgaXMgeWV0IHRvIGJlIGNvbXBsZXRlZC4gVGhl IHRvcCBsZXZlbCBtYW5pZmVzdCBlbGVtZW50IHJlbWFpbnMgYSBDQk9SIGFycmF5LiBUaGUgcHJp bWFyeSByZWFzb24gZm9yIHRoaXMgaXMgdGhhdCBtYW55IG9mIHRoZSBpbml0aWFsIGVsZW1lbnRz DQogYXJlIG1hbmRhdG9yeSAoc2VlIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBmb3IgbW9yZSBkZXRh aWwpLiBJbiBhZGRpdGlvbiB0byB0aGlzLCB0aGUgb3JkZXJpbmcgaXMgaW1wb3J0YW50IGJlY2F1 c2UgdGhlIG1hbmlmZXN0IGlzIGEgc2lnbmVkIGRvY3VtZW50LiBDT1NFIHVzZXMgdGhlIHNhbWUg cGFyYWRpZ206IHdoZXJlIGZpZWxkcyBhcmUgbWFuZGF0b3J5LCB0aGV5IGFyZSBlbmNvZGVkIGFz IGFuIGFycmF5LiBXaGVyZSB0aGVyZSBhcmUgb3B0aW9uYWwNCiBmaWVsZHMgKENPU0VfSGVhZGVy cykgdGhleSBhcmUgZW5jb2RlZCBhcyBhIG1hcCAoaWYgdW5zaWduZWQpIG9yIGFzIGEgbWFwLCB3 cmFwcGVkIGluIGEgYnN0ciBpZiBzaWduZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBwcmltYXJ5IGNoYW5nZXMgYXJlOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4xLiBTZXZlcmFi bGUgdGV4dDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Mi4gRGlnZXN0IEluZm8gaXMgbW92ZWQgdG8gYSB0b3AtbGV2ZWwgZWxlbWVudDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+My4gU2VxdWVuY2Ug bnVtYmVyIGlzIG5vdyBjYWxsZWQgc2VxdWVuY2UgbnVtYmVyIGluc3RlYWQgb2YgdGltZXN0YW1w PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj40LiBD b25kaXRpb25zIGFyZSBkaXZpZGVkIGludG8gcHJlY29uZGl0aW9ucyBhbmQgcG9zdGNvbmRpdGlv bnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjUu IERlcGVuZGVuY2llcywgQWxpYXNlcywgYW5kIHBheWxvYWQgaW5mbyBhcmUgbm93IHJlc291cmNl czxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Ni4g UGF5bG9hZGluZm8gaXMgZGl2aWRlZCBpbnRvIHJlc291cmNlcywgcHJvY2Vzc29ycywgYW5kIHRh cmdldHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+IyBTZXZlcmFibGUgdGV4dDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlRleHQgaXMgZm9yIGh1bWFucy4gRGV2aWNlcyBzaG91bGRu4oCZdCBw YXJzZSBpdC4gVGhlcmVmb3JlLCB3ZSBoYXZlIG1vdmVkIHRleHQgaW5mb3JtYXRpb24gb3V0IG9m IHRoZSBtYW5pZmVzdC4gSG93ZXZlciwgaHVtYW5zIG5lZWQgdG8ga25vdyB0aGF0IHRoZSB0ZXh0 IHRoZXkgYXJlIHJlYWRpbmcgY29ycmVjdGx5IGNvcnJlc3BvbmRzIHRvIHRoZSBtYW5pZmVzdCB0 aGV5IGFyZSBsb29raW5nIGF0LiBUaGVyZWZvcmUsDQogd2UgaGF2ZSBtYWRlIGEgY29udGFpbmVy IGZvciBhIENPU0VfU2lnbiAvIENPU0VfTWFjIGFuZCBhIG1hcCBvZiB0ZXh0IHZhbHVlcy4gSW4g YWRkaXRpb24gdG8gdGhpcywgdGhlIHRleHQgdmFsdWVzIGFyZSBoYXNoZWQgYW5kIHRoZSBoYXNo IGlzIGluY2x1ZGVkIGluIHRoZSBtYW5pZmVzdCB0byBlbnN1cmUgdGhhdCB0aGUgdGV4dCBwb3J0 aW9uIGlzIG5vdCBtb2RpZmllZCBvciBjb3JydXB0ZWQgaW4gdHJhbnNpdC48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBtZWFucyB0aGF0 LCB3aGlsZSBhIG1hbmlmZXN0IHdpdGggdGV4dCBtYXkgYmUgZGVsaXZlcmVkIHRvIGFuIHVwZGF0 ZSBzZXJ2ZXIsIHRoYXQgc2VydmVyIGNhbiBzdHJpcCBvZmYgdGhlIHRleHQgYW5kIGRlbGl2ZXIg b25seSB0aGUgYXV0aGVudGljYXRlZCwgbWFjaGluZS1yZWFkYWJsZSBwYXJ0IHRvIGEgdGFyZ2V0 IGRldmljZS4gVGhpcyByZXN1bHRzIGluIHJlZHVjZWQgYmFuZHdpZHRoLCByZWR1Y2VkDQogYnVm ZmVyIHNpemVzLCBtb3JlIGV4cHJlc3NpdmUgdGV4dCBpbmZvcm1hdGlvbiwgYW5kIHJlZHVjZWQg b3Bwb3J0dW5pdHkgdG8gYWJ1c2UgdmFyaWFibHkgc2l6ZWQgZmllbGRzLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4jIERpZ2VzdCBpbmZvIGF0 IHRoZSB0b3AgbGV2ZWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkRpZ2VzdHMgYXJlIHVzZWQgaW4gbWFueSBwbGFjZXMgaW4gdGhlIG1hbmlmZXN0 LiBUaGUgaW5mb3JtYXRpb24gcmVxdWlyZWQgdG8gaW50ZXJwcmV0IGRpZ2VzdHMsIHRoZXJlZm9y ZSwgbXVzdCBiZSBhIHRvcC1sZXZlbCBlbGVtZW50LiBBbGwgZGlnZXN0cyBpbiBhbnkgZ2l2ZW4g bWFuaWZlc3QgbXVzdCB1c2UgdGhlIHNhbWUgZGlnZXN0IGFsZ29yaXRobS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+IyBTZXF1ZW5jZSBOdW1i ZXI8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo ZSB1c2Ugb2YgdGltZXN0YW1wIGFzIHNlcXVlbmNlIG51bWJlciBoYXMgY2F1c2VkIGNvbmZ1c2lv biByZWd1bGFybHksIHNvIHdlIGhhdmUgY2hhbmdlZCB0aW1lc3RhbXAgdG8gc2VxdWVuY2UgbnVt YmVyIGluIHRoaXMgZHJhZnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiMgUHJlQ29uZGl0aW9ucyBhbmQgUG9zdENvbmRpdGlvbnM8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZXJlIGhhcyBi ZWVuIHNpZ25pZmljYW50IGRlYmF0ZSBhYm91dCB0aGUgdXNlIG9mIHByZWNvbmRpdGlvbnMgYW5k IHBvc3Rjb25kaXRpb25zLCB3aXRoIHNldmVyYWwgaW1wb3J0YW50IHVzZSBjYXNlcy4gQmVjYXVz ZSBvZiB0aGlzLCBjb25kaXRpb25zIGhhcyBiZWVuIGRpdmlkZWQgaW50byBwcmVjb25kaXRpb25z IGFuZCBwb3N0Y29uZGl0aW9ucy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+IyBEZXBlbmRlbmNpZXMsIEFsaWFzZXMsIFBheWxvYWRJbmZvPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5FYWNoIG9m IHRoZXNlIGhhcyB2ZXJ5IHNpbWlsYXIgaW5mb3JtYXRpb24uIEJlY2F1c2Ugb2YgdGhpcywgaXQg c2VlbXMgcmVhc29uYWJsZSB0byBncm91cCB0aGVtIGludG8gYSBjb21tb24gc3RydWN0dXJlIHRo YXQganVzdCBpZGVudGlmaWVzIHRoZSB0eXBlIG9mIHJlZmVyZW5jZS48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+IyBSZXNvdXJjZXMsIFByb2Nl c3NvcnMsIFRhcmdldHM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlRvIHNhdGlzZnkgY29tcGxleCByZXF1aXJlbWVudHMsIHdlIGNvbnNpZGVyZWQg c2V2ZXJhbCB1c2UtY2FzZXM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkRpZmZlcmVudGlhbCB1cGRhdGUgb2YgYSBkdWFsIFhJUCBNQ1UuIFRv IGFjY29tcGxpc2ggdGhpcyBhbmQgc3RpbGwgb2J0YWluIGdvb2QgY29tcHJlc3Npb24sIHRoZSBp bnN0YWxsZWQgaW1hZ2UgbXVzdCBiZSB1bi1yZWxvY2F0ZWQsIHRoZW4gYSBkaWZmIG11c3QgYmUg YXBwbGllZCwgdGhlbiB0aGUgcmVzdWx0aW5nIGltYWdlIG11c3QgYmUgcmVsb2NhdGVkLCB0aGVu IHdyaXR0ZW4gdG8gc3RvcmFnZS4gVGhpcw0KIGlzIGV2ZW4gbW9yZSBjb21wbGljYXRlZCBpZiB0 aGUgZGlmZiBpcyBjb21wcmVzc2VkIGFuZCBlbmNyeXB0ZWQuIEZ1cnRoZXJtb3JlLCB0aGVyZSBh cmUgc29tZSBkaWZmZXJlbnRpYWwgYWxnb3JpdGhtcyB0aGF0IHdpbGwgbmVlZCB0byBiZSBhYmxl IHRvIHJlYWQgdGhlIGRhdGEgdGhleSBoYXZlIHdyaXR0ZW4sIHdoaWNoIG1lYW5zIHRoYXQgdGhl IHRhcmdldCBpbWFnZSBtdXN0IGFsc28gYmUgcG9zc2libGUgdG8gcmVhZCwgdW4tcmVsb2NhdGUs DQogYW5kIGZlZWQgaW50byB0aGUgZGlmZmVyZW50aWFsIHVucGFja2luZyBlbmdpbmUuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlNoYXJlZCBj b21wcmVzc2lvbiB0YWJsZS4gU2V2ZXJhbCBjb21wb25lbnRzIG9mIGFuIHVwZGF0ZSBtYXkgYmUg ZGVsaXZlcmVkIHdpdGggYSBzaW5nbGUgY29tbW9uIGNvbXByZXNzaW9uIHRhYmxlLiBJZiB0aGlz IGlzIHRoZSBjYXNlLCB0aGVuIGVhY2ggdGFyZ2V0IGltYWdlIG11c3QgYmUgZGVjb21wcmVzc2Vk IHVzaW5nIHR3byBpbnB1dHM6IHRoZSBjb21wcmVzc2VkIGZpbGUgYW5kIHRoZSBjb21wcmVzc2lv bg0KIHRhYmxlPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPlRoZSByZXN1bHQgb2YgdGhpcyBpcyB0aGF0IHdlIGNvbmNsdWRlZCB0aGF0IHJlc291 cmNlcyBhbmQgdGFyZ2V0cyBjYW5ub3QgY29uc2lkZXJlZCB0aGUgc2FtZS4gV2hpbGUgdGhleSBh cmUgdGhlIHNhbWUgaW4gdGhlIOKAnHJhdyBiaW5hcnnigJ0gY2FzZSwgYW5kIHRoZXkgc3RpbGwg YXBwZWFyIHRvIGJlIHRoZSBzYW1lIGluIGxpbmVhci1wcm9jZXNzaW5nIGNhc2UgKHdoZXJlIGFs bCBwcm9jZXNzb3JzIGhhdmUgb25seQ0KIG9uZSBpbnB1dCBhbmQgb25lIG91dHB1dCksIG9uY2Ug ZGlmZmVyZW50aWFsIGNvbXByZXNzaW9uLCB0YWJsZSBjb21wcmVzc2lvbiwgYW5kIHJlbG9jYXRp b24gYXJlIGNvbnNpZGVyZWQsIGl0IGlzIGNsZWFyIHRoYXQsIHNpbmNlIHByb2Nlc3NvcnMgY2Fu IHJlcXVpcmUgbXVsdGlwbGUgaW5wdXRzLCB0aGVyZSBtdXN0IGJlIGEgd2F5IHRvIGRlc2NyaWJl IGVhY2ggb2YgdGhlc2UgaW5wdXRzLiBUaGlzIGNsYXJpZmllcyB0aGF0IHJlc291cmNlcw0KIGFy ZSBkaXN0aW5jdCBmcm9tIHRoZSBmaW5hbCBpbWFnZSB0aGF0IGlzIGluc3RhbGxlZCB0byBhIGRl dmljZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QmVjYXVzZSBvZiB0aGlzIGRpc3RpbmN0aW9uIGFuZCBpbiBvcmRlciB0byBkZXNjcmliZSBj b21wbGV4IHVzZS1jYXNlcywgd2UgaGF2ZSBpbmNsdWRlZCBhIG1lY2hhbmlzbSBvZiBkZXNjcmli aW5nIHRoZSByZXNvdXJjZXMgYXMgaW5wdXQgbm9kZXMgdG8gYSBncmFwaCwgdGhlIGluc3RhbGxh dGlvbiB0YXJnZXRzIGFzIG91dHB1dCBub2RlcyBmcm9tIHRoZSBncmFwaCwgYW5kIHRoZSBpbnRl cm1lZGlhdGUgc3RhdGVzDQogYXMgaW50ZXJuYWwgbm9kZXMgb2YgdGhlIGdyYXBoLCB3aGVyZSBl YWNoIHByb2Nlc3NvciBmb3JtcyBhbiBlZGdlIG9uIHRoZSBncmFwaC48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIHRoZSBpbnN0YWxsYXRp b24gb2YgYW55IGdpdmVuIHRhcmdldCwgd2UgZXhwZWN0IHRoYXQgdGhpcyBncmFwaCBjb3VsZCBi ZSByZWR1Y2VkIHRvIGEgdHJlZSB3aXRoIGFuIGluc3RhbGxhdGlvbiB0YXJnZXQgYXQgdGhlIHJv b3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkluIHRoZSBzaW1wbGUgY2FzZSwgYSByYXcgYmluYXJ5IHBheWxvYWQsIG9uZSByZXNvdXJjZSBp cyByZXF1aXJlZCwgaWRlbnRpZnlpbmcgYW4gb3V0cHV0IG5vZGUsIGFuZCBvbmUgaW5zdGFsbGF0 aW9uIHRhcmdldCBpcyByZXF1aXJlZCwgaWRlbnRpZnlpbmcgdGhlIHNhbWUgbm9kZSBhcyBhbiBp bnB1dCBub2RlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5EZXNjcmliaW5nIHRoaXMgc3RydWN0dXJlIGFzIGEgZ3JhcGgsIHJhdGhlciB0aGFu IGEgdHJlZSBmb3IgZWFjaCB0YXJnZXQgaXMgYSBkZXNpZ24gdHJhZGVvZmYuIFdlIGJlbGlldmUg dGhhdCB0aGUgZ3JhcGggYXMgc2V2ZXJhbCBhZHZhbnRhZ2VzLiBGaXJzdCwgaXQgcmVkdWNlcyB0 aGUgbmVzdGluZyBkZXB0aCBvZiB0aGUgQ0JPUiBwYXJzZXIuIFRoaXMgaXMgYW4gaW1wb3J0YW50 IGNvbnNpZGVyYXRpb24gZm9yDQogaG93IG11Y2ggbWVtb3J5IGlzIGNvbnN1bWVkLiBTZWNvbmQs IGl0IGFsbG93cyBhIHZhbGlkYXRvciB0byBpdGVyYXRlIG92ZXIgdGhlIGdyYXBoIGFuZCBpZGVu dGlmeSB3aGV0aGVyIGl0IHN1cHBvcnRzIGVhY2ggc3BlY2lmaWVkIHByb2Nlc3NvciB3aXRob3V0 IGFueSBjb21wcmVoZW5zaW9uIG9mIHRoZSB0cmVlIHN0cnVjdHVyZXMgb3IgZ3JhcGggY29ubmVj dGVkbmVzcy4gVGhpcmQsIGl0IGVsaW1pbmF0ZXMgcmVwZXRpdGl2ZSBkZXNjcmlwdGlvbg0KIG9m IHJlc291cmNlcyBhbmQgaW50ZXJtZWRpYXRlcyB0aGF0IGFyZSB1c2VkIGluIG11bHRpcGxlIHRy ZWVzLCB3aGljaCBjb3VsZCBiZSB1c2VkIHRvIGVsaW1pbmF0ZSBkb3dubG9hZCAocmVzb3VyY2Ug YWNxdWlzaXRpb24pIGFuZCBwcm9jZXNzaW5nIG92ZXJoZWFkLiBXZSBkb27igJl0IHRoaW5rIHRo YXQgdGhlIHJlZHVjdGlvbiBpbiBtYW5pZmVzdCBzaXplIHdvdWxkIGJlIHNpZ25pZmljYW50Ljxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BcyBh bHdheXMsIHlvdXIgaW5wdXQgaXMgbW9zdCB3ZWxjb21lITxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MsPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CcmVuZGFuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250 ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBh bmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3Qg ZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sDQogdXNlIGl0IGZvciBh bnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1 bS4gVGhhbmsgeW91Lg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0K PC9odG1sPg0K --_000_1715454122bf49d4810b3b68eb1f3a58nordicsemino_-- From nobody Wed Jul 4 13:38:33 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60DB5127148; Wed, 4 Jul 2018 13:38:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m7Fr9x2lQaGB; Wed, 4 Jul 2018 13:38:30 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1B8F12F295; Wed, 4 Jul 2018 13:38:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w64KcOEo020926; Wed, 4 Jul 2018 22:38:24 +0200 (CEST) Received: from [192.168.217.114] (p5DC7FF04.dip0.t-ipconnect.de [93.199.255.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 41LXrH2gv7zDWnV; Wed, 4 Jul 2018 22:38:23 +0200 (CEST) Content-Type: multipart/mixed; boundary="Apple-Mail=_5C896E86-7EED-48AA-90F2-A78D22C86E90" Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) From: Carsten Bormann In-Reply-To: Date: Wed, 4 Jul 2018 22:38:21 +0200 Cc: suit , cbor@ietf.org X-Mao-Original-Outgoing-Id: 552429499.581403-d32a5fa4b61def7196ff26dd6f4c8a26 Message-Id: References: To: Brendan Moran , =?utf-8?Q?=C3=98yvind_R=C3=B8nningstad?= X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: Re: [Suit] draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Jul 2018 20:38:33 -0000 --Apple-Mail=_5C896E86-7EED-48AA-90F2-A78D22C86E90 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 On Jul 4, 2018, at 10:26, R=C3=B8nningstad, =C3=98yvind = wrote: >=20 > =E2=80=A2 CDDL nitpicking: > =E2=80=A2 Some name inconsistencies: ProcessingStep vs = Processor, TargetInfo vs Target. > =E2=80=A2 There's probably a typo in the definition of = Directive. Should it be an array of maps? > =E2=80=A2 Target::storageIdentifier and = Target::componentIdentifier don't use the custom types for = StorageIdentifier and ComponentIdentifier. > =E2=80=A2 I think digests should have a type, so the = user can more easily restrict its format after choosing a digest = algorithm. > =E2=80=A2 Suggestion: Add nint to textKeys group. > =E2=80=A2 AuthenticatedManifest should probably contain = an authenticatedManifestVersion or similar. > =E2=80=A2 "Processor" might be confusing (=E2=80=9Cdoes = it mean CPU?=E2=80=9D). It also helps to occasionally run instances of formal languages through = some tool to check them=E2=80=A6 Apart from inconsistent use of names, most of the syntax errors stem = from the arcane syntax that CDDL is using for its workaround for not = having true enumerations (Section 2.2.2.2 of = draft-ietf-cbor-cddl-03.txt); this requires commas (or nothing) instead = of slashes, and an enclosing &, so with =C3=98yvind=E2=80=99s = suggestion, textKeys becomes, e.g.: textKeys =3D &( uninitialised: 0 manifestDescription: 1 payloadDescription: 2 vendorName: 3 modelName: 4 payloadVersion: 5 ) / nint And Processor starts off as: Processor =3D [ &(decrypt: 1, decompress: 2, undiff: 3, relocate: 4, unrelocate: = 5), (Of course, the same thing can be expressed as: Processor =3D [ &(decrypt: 1, decompress: 2, undiff: 3, relocate: 4, unrelocate: = 5), decrypt: 1 // decompress: 2 // undiff: 3 // relocate: 4 // = unrelocate: 5, Not sure what the intent is here; in the first case, I=E2=80=99d = probably also add a label, as in Processor =3D [ process: &(decrypt: 1, decompress: 2, undiff: 3, relocate: 4, = unrelocate: 5), I have attached a version that parses (I don=E2=80=99t think an = attachment will make it to the lists) but does not address any other of = =C3=98yvind=E2=80=99s suggestions. The other problem that should probably be addressed is that most rules = are unused =E2=80=94 there would need to be one cddl file for the = manifest, and maybe one for the COSE envelope. We simply don=E2=80=99t = have a good way in CDDL yet to say =E2=80=9CManifest goes through an = algorithm and turns up in COSE_Sign=E2=80=9D =E2=80=94 actually, in this = case this could be solved in part as the manifest turns up in cleartezt. I have included a dirty hack in the attached which I intend to fix. I=E2=80=99m CCing the CBOR WG to give an example for CDDL being used in = another WG. If you want to discuss a CDDL feature, please strike SUIT = from the list (and if you want to discuss a SUIT feature, maybe strike = CBOR from the list). Gr=C3=BC=C3=9Fe, Carsten --Apple-Mail=_5C896E86-7EED-48AA-90F2-A78D22C86E90 Content-Disposition: attachment; filename=suit.cddl Content-Type: application/octet-stream; x-unix-mode=0644; name="suit.cddl" Content-Transfer-Encoding: 7bit AuthenticatedManifest = [ authenticatedManifest: COSE_Mac / COSE_Sign, text: bstr .cbor textMap ] COSE_Mac = bstr .cbor what ; these are lies; FIXME COSE_Sign = bstr .cbor what ; these are lies; FIXME textKeys = &( uninitialised: 0 manifestDescription: 1 payloadDescription: 2 vendorName: 3 modelName: 4 payloadVersion: 5 ) / nint textMap = { * textKeys => tstr } Manifest = [ manifestVersion : 1, digestInfo : DigestInfo, ; textReference is the digest of the associated ; text map in AuthenticatedManifest textReference : bstr, nonce : bstr, sequence : SequenceNumber, preConditions : [ * PreCondition ], postConditions : [ * PostCondition ], directives : [ * Directive ], resources : [ * ResourceInfo ], processors : [ * ProcessingStep ], targets : [ * TargetInfo ], extensions : { * int => bstr} ] ResourceInfo = [ type: &(payload:1, dependency:2, key:3, alias:4) indicator: UriList, ; where to find the resource size: uint / nil, ; size of the resource ; (nil when alias) digest: bstr, ; digest of the resource onode: bstr ; Node of the processing ; graph that the resource feeds ] ProcessingStep = [ process: &(decrypt: 1, decompress: 2, undiff: 3, relocate: 4, unrelocate: 5), ; decrypt: 1 // decompress: 2 // undiff: 3 // relocate: 4 // unrelocate: 5, parameters: bstr ; TBD: more detail needed inode: bstr, ; Node of the processing graph ; that this processor consumes onode: bstr ; Node of the processing graph ; that this processor feeds ] TargetInfo = [ componentIdentifier: [ * bstr], storageIdentifier: tstr, ; where to store the resource encoding: bstr / nil, ; the format of the resource ; (nil when alias) inode: bstr ; Node of the processing graph ; that this target consumes ] PreCondition = IdCondition / TimeCondition / ImageCondition / CustomCondition PostCondition = ImageCondition / CustomCondition IdCondition = [&(vendor: 1, class: 2, device: 3), id: Uuid] TimeCondition = [&(installAfter: 4, bestBefore: 5), time: Timestamp] ImageCondition = [&(currentContent: 6, notCurrentContent: 7), digest: bstr / nil, location: StorageIdentifier] CustomCondition = [nint, parameters: bstr] Directive = [ int => bstr ] SequenceNumber = uint Timestamp = uint .size 8 Uuid = bstr .size 16 StorageIdentifier = bstr ComponentIdentifier = bstr ;;; XXX unused -- what is this for? UriList = { + int => tstr } DigestInfo = [ digestAlgorithm : uint, ? digestParameters : bstr ] --Apple-Mail=_5C896E86-7EED-48AA-90F2-A78D22C86E90 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_5C896E86-7EED-48AA-90F2-A78D22C86E90-- From nobody Fri Jul 6 06:50:49 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51127130EEE for ; Fri, 6 Jul 2018 06:50:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.02 X-Spam-Level: X-Spam-Status: No, score=-1.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AtoB6lvyBkoZ for ; Fri, 6 Jul 2018 06:50:43 -0700 (PDT) Received: from ironport02.nordicsemi.no (mx02.nordicsemi.no [194.19.86.151]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64510130E55 for ; Fri, 6 Jul 2018 06:50:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=35277; s=default; t=1530885042; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=CN2LyTDx5OCYjkB+lsexzWCeIsy17U24qsibJeq/G3s=; b=aQuc1cZbO66JuFy9dgf5XiiD1fNDFy5GPF5hTp322ASyDo5dGVnmF51D d1q5sHXfoy+pGWogOobFo2sZKeEcwVMPo6VZxmbJ7CCR+5OdJeUURQ4Lg JXMi+LpIYkvQLl3CvOotskdSqrhlKzfTMNl/AT8xHLmO/oWcYil+6Wmcw g=; X-IronPort-AV: E=Sophos;i="5.51,316,1526335200"; d="scan'208,217";a="4594376" From: =?utf-8?B?UsO4bm5pbmdzdGFkLCDDmHl2aW5k?= To: Brendan Moran , suit CC: Hannes Tschofenig Thread-Topic: [suit]: draft-moran-suit-manifest-02 Thread-Index: AQHUExHtnaLT8k9ra0yYs7g0XR6lpaSCOX4g Date: Fri, 6 Jul 2018 13:50:38 +0000 Message-ID: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: multipart/alternative; boundary="_000_790d40b227034bd784185bd9bdd52f4fnordicsemino_" MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Jul 2018 13:50:49 -0000 --_000_790d40b227034bd784185bd9bdd52f4fnordicsemino_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SG93IGFib3V0IG1ha2luZyBtb3JlIGluZm9ybWF0aW9uIHNldmVyYWJsZSAobGlrZSB3aXRoIHRl eHQpPyBTb21lIGluZm9ybWF0aW9uIGlzIHNob3J0LWxpdmVkLCBsaWtlIHRoZSBwcm9jZXNzaW5n IHN0ZXBzLCB3aGlsZSBvdGhlciBpbmZvcm1hdGlvbiBjb3VsZCBiZSBvZiBpbnRlcmVzdCBhZnRl ciB0aGUgdXBkYXRlIGlzIGNvbXBsZXRlLCBsaWtlIHRoZSBwb3N0Q29uZGl0aW9ucyBhbmQgc2Vx dWVuY2UgbnVtYmVyLiBJJ20gd29uZGVyaW5nIGlmIHdlIGNhbiBtYWtlIGEgc3BsaXQsIHNvIHRo ZSByZWxldmFudCBwYXJ0cyBvZiB0aGUgbWFuaWZlc3QgY2FuIGJlIHN0b3JlZCBmb3IgbGF0ZXIg cmVmZXJlbmNlLiBTb21ldGhpbmcgbGlrZSB0aGUgZm9sbG93aW5nOg0KDQpBdXRoZW50aWNhdGVk TWFuaWZlc3QgPSBbDQogIGF1dGhlbnRpY2F0ZWRNYW5pZmVzdDogQ09TRV9NYWMgLyBDT1NFX1Np Z24sDQogIHVwZGF0ZVByb2Nlc3M6ICAgICAgICAgYnN0ciAuY2JvciBVcGRhdGVQcm9jZXNzLA0K ICB0ZXh0OiAgICAgICAgICAgICAgICAgIGJzdHIgLmNib3IgVGV4dE1hcCwNCl0NCg0KVXBkYXRl UHJvY2VzcyA9IFsNCiAgbm9uY2UgOiAgICAgICAgICAgICAgYnN0ciwNCiAgdGV4dFJlZmVyZW5j ZSA6ICAgICAgYnN0ciwNCiAgcHJlQ29uZGl0aW9ucyA6ICAgICAgWyAqIFByZUNvbmRpdGlvbiBd LA0KICBkaXJlY3RpdmVzIDogICAgICAgICBbICogRGlyZWN0aXZlIF0sDQogIHJlc291cmNlcyA6 ICAgICAgICAgIFsgKiBSZXNvdXJjZUluZm8gXSwNCiAgcHJvY2Vzc29ycyA6ICAgICAgICAgWyAq IFByb2Nlc3NpbmdTdGVwIF0sDQogIHRhcmdldHMgOiAgICAgICAgICAgIFsgKiBUYXJnZXRJbmZv IF0sDQogIGV4dGVuc2lvbnMgOiAgICAgICAgIHsgKiBpbnQgPT4gYnN0cn0NCl0NCg0KTWFuaWZl c3QgPSBbDQogIG1hbmlmZXN0VmVyc2lvbiA6ICAgIDEsDQogIGRpZ2VzdEluZm8gOiAgICAgICAg IERpZ2VzdEluZm8sDQogIHNlcXVlbmNlIDogICAgICAgICAgIFNlcXVlbmNlTnVtYmVyLA0KICBw b3N0Q29uZGl0aW9ucyA6ICAgICBbICogUG9zdENvbmRpdGlvbiBdLA0KICBwcm9jZXNzUmVmZXJl bmNlIDogICBic3RyIDsgRGlnZXN0IG9mIHRoZSB1cGRhdGUgcHJvY2Vzcywgc28gaXQgY2FuIGxh dGVyIGJlIGRpc2NhcmRlZC4NCl0NCg0Kw5h5dmluZA0KDQpGcm9tOiBTdWl0IFttYWlsdG86c3Vp dC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQnJlbmRhbiBNb3Jhbg0KU2VudDogMy4g anVsaSAyMDE4IDIzOjA4DQpUbzogc3VpdCA8c3VpdEBpZXRmLm9yZz4NCkNjOiBIYW5uZXMgVHNj aG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4NClN1YmplY3Q6IFtTdWl0XSBbc3Vp dF06IGRyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QtMDINCg0KVGhpcyBkcmFmdCBpcyBhIHNpZ25p ZmljYW50IGRlcGFydHVyZSBmcm9tIHByZXZpb3VzIGRyYWZ0cywgc28gSSB0aGluayBpdCBpcyBp bXBvcnRhbnQgdG8gaGlnaGxpZ2h0IHRoZSBjaGFuZ2VzLiBUaGUgZHJhZnQgcmVxdWlyZXMgYSBs b3Qgb2YgdGV4dCB0aGF0IGhhc27igJl0IGJlZW4gd3JpdHRlbiB5ZXQsIHNvIEkgd2lsbCB0cnkg dG8gcHV0IHNvbWUgb2YgdGhhdCBoZXJlIGZvciBkaXNjdXNzaW9uLg0KDQpodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0Lw0KDQoNCiMgU3Vt bWFyeSBvZiBjaGFuZ2VzDQpUaGVyZSBhcmUgYSBsYXJnZSBudW1iZXIgb2YgY2hhbmdlcyBpbiB0 aGlzIGRyYWZ0LiBJbiBhZGRpdGlvbiwgdGhlIHRleHQgZGVzY3JpcHRpb24gb2YgdGhlIG1hbmlm ZXN0IGlzIHlldCB0byBiZSBjb21wbGV0ZWQuIFRoZSB0b3AgbGV2ZWwgbWFuaWZlc3QgZWxlbWVu dCByZW1haW5zIGEgQ0JPUiBhcnJheS4gVGhlIHByaW1hcnkgcmVhc29uIGZvciB0aGlzIGlzIHRo YXQgbWFueSBvZiB0aGUgaW5pdGlhbCBlbGVtZW50cyBhcmUgbWFuZGF0b3J5IChzZWUgdGhlIGlu Zm9ybWF0aW9uIG1vZGVsIGZvciBtb3JlIGRldGFpbCkuIEluIGFkZGl0aW9uIHRvIHRoaXMsIHRo ZSBvcmRlcmluZyBpcyBpbXBvcnRhbnQgYmVjYXVzZSB0aGUgbWFuaWZlc3QgaXMgYSBzaWduZWQg ZG9jdW1lbnQuIENPU0UgdXNlcyB0aGUgc2FtZSBwYXJhZGlnbTogd2hlcmUgZmllbGRzIGFyZSBt YW5kYXRvcnksIHRoZXkgYXJlIGVuY29kZWQgYXMgYW4gYXJyYXkuIFdoZXJlIHRoZXJlIGFyZSBv cHRpb25hbCBmaWVsZHMgKENPU0VfSGVhZGVycykgdGhleSBhcmUgZW5jb2RlZCBhcyBhIG1hcCAo aWYgdW5zaWduZWQpIG9yIGFzIGEgbWFwLCB3cmFwcGVkIGluIGEgYnN0ciBpZiBzaWduZWQuDQoN ClRoZSBwcmltYXJ5IGNoYW5nZXMgYXJlOg0KDQoxLiBTZXZlcmFibGUgdGV4dA0KMi4gRGlnZXN0 IEluZm8gaXMgbW92ZWQgdG8gYSB0b3AtbGV2ZWwgZWxlbWVudA0KMy4gU2VxdWVuY2UgbnVtYmVy IGlzIG5vdyBjYWxsZWQgc2VxdWVuY2UgbnVtYmVyIGluc3RlYWQgb2YgdGltZXN0YW1wDQo0LiBD b25kaXRpb25zIGFyZSBkaXZpZGVkIGludG8gcHJlY29uZGl0aW9ucyBhbmQgcG9zdGNvbmRpdGlv bnMNCjUuIERlcGVuZGVuY2llcywgQWxpYXNlcywgYW5kIHBheWxvYWQgaW5mbyBhcmUgbm93IHJl c291cmNlcw0KNi4gUGF5bG9hZGluZm8gaXMgZGl2aWRlZCBpbnRvIHJlc291cmNlcywgcHJvY2Vz c29ycywgYW5kIHRhcmdldHMNCg0KIyBTZXZlcmFibGUgdGV4dDoNClRleHQgaXMgZm9yIGh1bWFu cy4gRGV2aWNlcyBzaG91bGRu4oCZdCBwYXJzZSBpdC4gVGhlcmVmb3JlLCB3ZSBoYXZlIG1vdmVk IHRleHQgaW5mb3JtYXRpb24gb3V0IG9mIHRoZSBtYW5pZmVzdC4gSG93ZXZlciwgaHVtYW5zIG5l ZWQgdG8ga25vdyB0aGF0IHRoZSB0ZXh0IHRoZXkgYXJlIHJlYWRpbmcgY29ycmVjdGx5IGNvcnJl c3BvbmRzIHRvIHRoZSBtYW5pZmVzdCB0aGV5IGFyZSBsb29raW5nIGF0LiBUaGVyZWZvcmUsIHdl IGhhdmUgbWFkZSBhIGNvbnRhaW5lciBmb3IgYSBDT1NFX1NpZ24gLyBDT1NFX01hYyBhbmQgYSBt YXAgb2YgdGV4dCB2YWx1ZXMuIEluIGFkZGl0aW9uIHRvIHRoaXMsIHRoZSB0ZXh0IHZhbHVlcyBh cmUgaGFzaGVkIGFuZCB0aGUgaGFzaCBpcyBpbmNsdWRlZCBpbiB0aGUgbWFuaWZlc3QgdG8gZW5z dXJlIHRoYXQgdGhlIHRleHQgcG9ydGlvbiBpcyBub3QgbW9kaWZpZWQgb3IgY29ycnVwdGVkIGlu IHRyYW5zaXQuDQoNClRoaXMgbWVhbnMgdGhhdCwgd2hpbGUgYSBtYW5pZmVzdCB3aXRoIHRleHQg bWF5IGJlIGRlbGl2ZXJlZCB0byBhbiB1cGRhdGUgc2VydmVyLCB0aGF0IHNlcnZlciBjYW4gc3Ry aXAgb2ZmIHRoZSB0ZXh0IGFuZCBkZWxpdmVyIG9ubHkgdGhlIGF1dGhlbnRpY2F0ZWQsIG1hY2hp bmUtcmVhZGFibGUgcGFydCB0byBhIHRhcmdldCBkZXZpY2UuIFRoaXMgcmVzdWx0cyBpbiByZWR1 Y2VkIGJhbmR3aWR0aCwgcmVkdWNlZCBidWZmZXIgc2l6ZXMsIG1vcmUgZXhwcmVzc2l2ZSB0ZXh0 IGluZm9ybWF0aW9uLCBhbmQgcmVkdWNlZCBvcHBvcnR1bml0eSB0byBhYnVzZSB2YXJpYWJseSBz aXplZCBmaWVsZHMuDQoNCiMgRGlnZXN0IGluZm8gYXQgdGhlIHRvcCBsZXZlbA0KRGlnZXN0cyBh cmUgdXNlZCBpbiBtYW55IHBsYWNlcyBpbiB0aGUgbWFuaWZlc3QuIFRoZSBpbmZvcm1hdGlvbiBy ZXF1aXJlZCB0byBpbnRlcnByZXQgZGlnZXN0cywgdGhlcmVmb3JlLCBtdXN0IGJlIGEgdG9wLWxl dmVsIGVsZW1lbnQuIEFsbCBkaWdlc3RzIGluIGFueSBnaXZlbiBtYW5pZmVzdCBtdXN0IHVzZSB0 aGUgc2FtZSBkaWdlc3QgYWxnb3JpdGhtLg0KDQojIFNlcXVlbmNlIE51bWJlcg0KVGhlIHVzZSBv ZiB0aW1lc3RhbXAgYXMgc2VxdWVuY2UgbnVtYmVyIGhhcyBjYXVzZWQgY29uZnVzaW9uIHJlZ3Vs YXJseSwgc28gd2UgaGF2ZSBjaGFuZ2VkIHRpbWVzdGFtcCB0byBzZXF1ZW5jZSBudW1iZXIgaW4g dGhpcyBkcmFmdC4NCg0KIyBQcmVDb25kaXRpb25zIGFuZCBQb3N0Q29uZGl0aW9ucw0KVGhlcmUg aGFzIGJlZW4gc2lnbmlmaWNhbnQgZGViYXRlIGFib3V0IHRoZSB1c2Ugb2YgcHJlY29uZGl0aW9u cyBhbmQgcG9zdGNvbmRpdGlvbnMsIHdpdGggc2V2ZXJhbCBpbXBvcnRhbnQgdXNlIGNhc2VzLiBC ZWNhdXNlIG9mIHRoaXMsIGNvbmRpdGlvbnMgaGFzIGJlZW4gZGl2aWRlZCBpbnRvIHByZWNvbmRp dGlvbnMgYW5kIHBvc3Rjb25kaXRpb25zLg0KDQojIERlcGVuZGVuY2llcywgQWxpYXNlcywgUGF5 bG9hZEluZm8NCkVhY2ggb2YgdGhlc2UgaGFzIHZlcnkgc2ltaWxhciBpbmZvcm1hdGlvbi4gQmVj YXVzZSBvZiB0aGlzLCBpdCBzZWVtcyByZWFzb25hYmxlIHRvIGdyb3VwIHRoZW0gaW50byBhIGNv bW1vbiBzdHJ1Y3R1cmUgdGhhdCBqdXN0IGlkZW50aWZpZXMgdGhlIHR5cGUgb2YgcmVmZXJlbmNl Lg0KDQojIFJlc291cmNlcywgUHJvY2Vzc29ycywgVGFyZ2V0cw0KVG8gc2F0aXNmeSBjb21wbGV4 IHJlcXVpcmVtZW50cywgd2UgY29uc2lkZXJlZCBzZXZlcmFsIHVzZS1jYXNlczoNCg0KRGlmZmVy ZW50aWFsIHVwZGF0ZSBvZiBhIGR1YWwgWElQIE1DVS4gVG8gYWNjb21wbGlzaCB0aGlzIGFuZCBz dGlsbCBvYnRhaW4gZ29vZCBjb21wcmVzc2lvbiwgdGhlIGluc3RhbGxlZCBpbWFnZSBtdXN0IGJl IHVuLXJlbG9jYXRlZCwgdGhlbiBhIGRpZmYgbXVzdCBiZSBhcHBsaWVkLCB0aGVuIHRoZSByZXN1 bHRpbmcgaW1hZ2UgbXVzdCBiZSByZWxvY2F0ZWQsIHRoZW4gd3JpdHRlbiB0byBzdG9yYWdlLiBU aGlzIGlzIGV2ZW4gbW9yZSBjb21wbGljYXRlZCBpZiB0aGUgZGlmZiBpcyBjb21wcmVzc2VkIGFu ZCBlbmNyeXB0ZWQuIEZ1cnRoZXJtb3JlLCB0aGVyZSBhcmUgc29tZSBkaWZmZXJlbnRpYWwgYWxn b3JpdGhtcyB0aGF0IHdpbGwgbmVlZCB0byBiZSBhYmxlIHRvIHJlYWQgdGhlIGRhdGEgdGhleSBo YXZlIHdyaXR0ZW4sIHdoaWNoIG1lYW5zIHRoYXQgdGhlIHRhcmdldCBpbWFnZSBtdXN0IGFsc28g YmUgcG9zc2libGUgdG8gcmVhZCwgdW4tcmVsb2NhdGUsIGFuZCBmZWVkIGludG8gdGhlIGRpZmZl cmVudGlhbCB1bnBhY2tpbmcgZW5naW5lLg0KDQpTaGFyZWQgY29tcHJlc3Npb24gdGFibGUuIFNl dmVyYWwgY29tcG9uZW50cyBvZiBhbiB1cGRhdGUgbWF5IGJlIGRlbGl2ZXJlZCB3aXRoIGEgc2lu Z2xlIGNvbW1vbiBjb21wcmVzc2lvbiB0YWJsZS4gSWYgdGhpcyBpcyB0aGUgY2FzZSwgdGhlbiBl YWNoIHRhcmdldCBpbWFnZSBtdXN0IGJlIGRlY29tcHJlc3NlZCB1c2luZyB0d28gaW5wdXRzOiB0 aGUgY29tcHJlc3NlZCBmaWxlIGFuZCB0aGUgY29tcHJlc3Npb24gdGFibGUNCg0KVGhlIHJlc3Vs dCBvZiB0aGlzIGlzIHRoYXQgd2UgY29uY2x1ZGVkIHRoYXQgcmVzb3VyY2VzIGFuZCB0YXJnZXRz IGNhbm5vdCBjb25zaWRlcmVkIHRoZSBzYW1lLiBXaGlsZSB0aGV5IGFyZSB0aGUgc2FtZSBpbiB0 aGUg4oCccmF3IGJpbmFyeeKAnSBjYXNlLCBhbmQgdGhleSBzdGlsbCBhcHBlYXIgdG8gYmUgdGhl IHNhbWUgaW4gbGluZWFyLXByb2Nlc3NpbmcgY2FzZSAod2hlcmUgYWxsIHByb2Nlc3NvcnMgaGF2 ZSBvbmx5IG9uZSBpbnB1dCBhbmQgb25lIG91dHB1dCksIG9uY2UgZGlmZmVyZW50aWFsIGNvbXBy ZXNzaW9uLCB0YWJsZSBjb21wcmVzc2lvbiwgYW5kIHJlbG9jYXRpb24gYXJlIGNvbnNpZGVyZWQs IGl0IGlzIGNsZWFyIHRoYXQsIHNpbmNlIHByb2Nlc3NvcnMgY2FuIHJlcXVpcmUgbXVsdGlwbGUg aW5wdXRzLCB0aGVyZSBtdXN0IGJlIGEgd2F5IHRvIGRlc2NyaWJlIGVhY2ggb2YgdGhlc2UgaW5w dXRzLiBUaGlzIGNsYXJpZmllcyB0aGF0IHJlc291cmNlcyBhcmUgZGlzdGluY3QgZnJvbSB0aGUg ZmluYWwgaW1hZ2UgdGhhdCBpcyBpbnN0YWxsZWQgdG8gYSBkZXZpY2UuDQoNCkJlY2F1c2Ugb2Yg dGhpcyBkaXN0aW5jdGlvbiBhbmQgaW4gb3JkZXIgdG8gZGVzY3JpYmUgY29tcGxleCB1c2UtY2Fz ZXMsIHdlIGhhdmUgaW5jbHVkZWQgYSBtZWNoYW5pc20gb2YgZGVzY3JpYmluZyB0aGUgcmVzb3Vy Y2VzIGFzIGlucHV0IG5vZGVzIHRvIGEgZ3JhcGgsIHRoZSBpbnN0YWxsYXRpb24gdGFyZ2V0cyBh cyBvdXRwdXQgbm9kZXMgZnJvbSB0aGUgZ3JhcGgsIGFuZCB0aGUgaW50ZXJtZWRpYXRlIHN0YXRl cyBhcyBpbnRlcm5hbCBub2RlcyBvZiB0aGUgZ3JhcGgsIHdoZXJlIGVhY2ggcHJvY2Vzc29yIGZv cm1zIGFuIGVkZ2Ugb24gdGhlIGdyYXBoLg0KDQpGb3IgdGhlIGluc3RhbGxhdGlvbiBvZiBhbnkg Z2l2ZW4gdGFyZ2V0LCB3ZSBleHBlY3QgdGhhdCB0aGlzIGdyYXBoIGNvdWxkIGJlIHJlZHVjZWQg dG8gYSB0cmVlIHdpdGggYW4gaW5zdGFsbGF0aW9uIHRhcmdldCBhdCB0aGUgcm9vdC4NCg0KSW4g dGhlIHNpbXBsZSBjYXNlLCBhIHJhdyBiaW5hcnkgcGF5bG9hZCwgb25lIHJlc291cmNlIGlzIHJl cXVpcmVkLCBpZGVudGlmeWluZyBhbiBvdXRwdXQgbm9kZSwgYW5kIG9uZSBpbnN0YWxsYXRpb24g dGFyZ2V0IGlzIHJlcXVpcmVkLCBpZGVudGlmeWluZyB0aGUgc2FtZSBub2RlIGFzIGFuIGlucHV0 IG5vZGUuDQoNCkRlc2NyaWJpbmcgdGhpcyBzdHJ1Y3R1cmUgYXMgYSBncmFwaCwgcmF0aGVyIHRo YW4gYSB0cmVlIGZvciBlYWNoIHRhcmdldCBpcyBhIGRlc2lnbiB0cmFkZW9mZi4gV2UgYmVsaWV2 ZSB0aGF0IHRoZSBncmFwaCBhcyBzZXZlcmFsIGFkdmFudGFnZXMuIEZpcnN0LCBpdCByZWR1Y2Vz IHRoZSBuZXN0aW5nIGRlcHRoIG9mIHRoZSBDQk9SIHBhcnNlci4gVGhpcyBpcyBhbiBpbXBvcnRh bnQgY29uc2lkZXJhdGlvbiBmb3IgaG93IG11Y2ggbWVtb3J5IGlzIGNvbnN1bWVkLiBTZWNvbmQs IGl0IGFsbG93cyBhIHZhbGlkYXRvciB0byBpdGVyYXRlIG92ZXIgdGhlIGdyYXBoIGFuZCBpZGVu dGlmeSB3aGV0aGVyIGl0IHN1cHBvcnRzIGVhY2ggc3BlY2lmaWVkIHByb2Nlc3NvciB3aXRob3V0 IGFueSBjb21wcmVoZW5zaW9uIG9mIHRoZSB0cmVlIHN0cnVjdHVyZXMgb3IgZ3JhcGggY29ubmVj dGVkbmVzcy4gVGhpcmQsIGl0IGVsaW1pbmF0ZXMgcmVwZXRpdGl2ZSBkZXNjcmlwdGlvbiBvZiBy ZXNvdXJjZXMgYW5kIGludGVybWVkaWF0ZXMgdGhhdCBhcmUgdXNlZCBpbiBtdWx0aXBsZSB0cmVl cywgd2hpY2ggY291bGQgYmUgdXNlZCB0byBlbGltaW5hdGUgZG93bmxvYWQgKHJlc291cmNlIGFj cXVpc2l0aW9uKSBhbmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4gV2UgZG9u4oCZdCB0aGluayB0aGF0 IHRoZSByZWR1Y3Rpb24gaW4gbWFuaWZlc3Qgc2l6ZSB3b3VsZCBiZSBzaWduaWZpY2FudC4NCg0K QXMgYWx3YXlzLCB5b3VyIGlucHV0IGlzIG1vc3Qgd2VsY29tZSENCg0KVGhhbmtzLA0KQnJlbmRh bg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBh dHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJ ZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBz ZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0 aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_790d40b227034bd784185bd9bdd52f4fnordicsemino_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQph OmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1z b0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJw bGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJn aW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBk aXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBjbTsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0bzsNCgltYXJnaW4tbGVmdDowY207DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0 eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9u bHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIu MHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcwLjg1cHQgNzAuODVwdCA3MC44NXB0IDcwLjg1cHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJOTy1CT0siIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBz dHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPkhvdyBhYm91dCBtYWtpbmcgbW9yZSBp bmZvcm1hdGlvbiBzZXZlcmFibGUgKGxpa2Ugd2l0aCB0ZXh0KT8gU29tZSBpbmZvcm1hdGlvbiBp cyBzaG9ydC1saXZlZCwgbGlrZSB0aGUgcHJvY2Vzc2luZyBzdGVwcywgd2hpbGUgb3RoZXIgaW5m b3JtYXRpb24gY291bGQgYmUgb2YgaW50ZXJlc3QgYWZ0ZXIgdGhlIHVwZGF0ZQ0KIGlzIGNvbXBs ZXRlLCBsaWtlIHRoZSBwb3N0Q29uZGl0aW9ucyBhbmQgc2VxdWVuY2UgbnVtYmVyLiBJJ20gd29u ZGVyaW5nIGlmIHdlIGNhbiBtYWtlIGEgc3BsaXQsIHNvIHRoZSByZWxldmFudCBwYXJ0cyBvZiB0 aGUgbWFuaWZlc3QgY2FuIGJlIHN0b3JlZCBmb3IgbGF0ZXIgcmVmZXJlbmNlLiBTb21ldGhpbmcg bGlrZSB0aGUgZm9sbG93aW5nOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDs7Y29sb3I6IzE3MkI0RCI+QXV0aGVudGljYXRlZE1hbmlmZXN0ID0gWzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMTcyQjREIj4mbmJzcDsgYXV0aGVudGljYXRlZE1hbmlmZXN0OiBDT1NFX01hYyAvIENPU0Vf U2lnbiw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBs YW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDs7Y29sb3I6IzE3MkI0RCI+Jm5ic3A7DQo8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6IzE3MkI0RCI+dXBkYXRlUHJvY2VzczombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgYnN0ciAuY2JvciBVcGRhdGVQcm9jZXNzLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMTcyQjREIj4mbmJzcDsgdGV4dDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgYnN0ciAuY2JvciBUZXh0TWFwLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj5d PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0i RU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7O2NvbG9yOiMxNzJCNEQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj5V cGRhdGVQcm9jZXNzID0gWzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj4mbmJzcDsgbm9uY2UgOiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBic3RyLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj4mbmJzcDsg dGV4dFJlZmVyZW5jZSA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGJzdHIsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7O2NvbG9yOiMxNzJCNEQiPiZuYnNwOyBwcmVDb25kaXRpb25zIDombmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgWyAqIFByZUNvbmRpdGlvbiBdLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjRE Ij4mbmJzcDsgZGlyZWN0aXZlcyA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFsgKiBEaXJlY3RpdmUgXSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzE3MkI0RCI+Jm5i c3A7IHJlc291cmNlcyA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFsgKiBSZXNvdXJjZUluZm8gXSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzE3MkI0RCI+ Jm5ic3A7IHByb2Nlc3NvcnMgOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBbICogUHJvY2Vzc2luZ1N0ZXAgXSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6IzE3MkI0RCI+ Jm5ic3A7IHRhcmdldHMgOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbICogVGFyZ2V0SW5mbyBdLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMTcyQjREIj4mbmJzcDsgZXh0ZW5zaW9ucyA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHsgKiBpbnQgPSZndDsgYnN0cn08bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 IzE3MkI0RCI+XTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6 IzE3MkI0RCI+TWFuaWZlc3QgPSBbPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxNzJCNEQiPiZuYnNwOyBtYW5p ZmVzdFZlcnNpb24gOiZuYnNwOyZuYnNwOyZuYnNwOyAxLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjRE Ij4mbmJzcDsgZGlnZXN0SW5mbyA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IERpZ2VzdEluZm8sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxNzJCNEQiPiZuYnNwOyBz ZXF1ZW5jZSA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFNlcXVlbmNlTnVtYmVyLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj4mbmJz cDsgcG9zdENvbmRpdGlvbnMgOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbICogUG9zdENvbmRp dGlvbiBdLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90Oztjb2xvcjojMTcyQjREIj4mbmJzcDsgcHJvY2Vzc1JlZmVyZW5jZSA6 Jm5ic3A7Jm5ic3A7IGJzdHIgOyBEaWdlc3Qgb2YgdGhlIHVwZGF0ZSBwcm9jZXNzLCBzbyBpdCBj YW4gbGF0ZXIgYmUgZGlzY2FyZGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMxNzJCNEQiPl08L3NwYW4+PHNwYW4gbGFuZz0iRU4t VVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28t ZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1s YW5ndWFnZTpFTi1VUyI+w5h5dmluZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA0LjBw dCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFF MUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiPkZyb206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1V UyI+IFN1aXQgW21haWx0bzpzdWl0LWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2Yg PC9iPkJyZW5kYW4gTW9yYW48YnI+DQo8Yj5TZW50OjwvYj4gMy4ganVsaSAyMDE4IDIzOjA4PGJy Pg0KPGI+VG86PC9iPiBzdWl0ICZsdDtzdWl0QGlldGYub3JnJmd0Ozxicj4NCjxiPkNjOjwvYj4g SGFubmVzIFRzY2hvZmVuaWcgJmx0O0hhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20mZ3Q7PGJyPg0K PGI+U3ViamVjdDo8L2I+IFtTdWl0XSBbc3VpdF06IGRyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3Qt MDI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgZHJhZnQgaXMgYSBzaWduaWZpY2FudCBkZXBhcnR1cmUg ZnJvbSBwcmV2aW91cyBkcmFmdHMsIHNvIEkgdGhpbmsgaXQgaXMgaW1wb3J0YW50IHRvIGhpZ2hs aWdodCB0aGUgY2hhbmdlcy4gVGhlIGRyYWZ0IHJlcXVpcmVzIGEgbG90IG9mIHRleHQgdGhhdCBo YXNu4oCZdCBiZWVuIHdyaXR0ZW4geWV0LCBzbyBJIHdpbGwgdHJ5IHRvIHB1dCBzb21lIG9mIHRo YXQgaGVyZSBmb3IgZGlzY3Vzc2lvbi4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mv ZHJhZnQtbW9yYW4tc3VpdC1tYW5pZmVzdC8iPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2RyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QvPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiMgU3VtbWFyeSBvZiBjaGFuZ2VzPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGVyZSBh cmUgYSBsYXJnZSBudW1iZXIgb2YgY2hhbmdlcyBpbiB0aGlzIGRyYWZ0LiBJbiBhZGRpdGlvbiwg dGhlIHRleHQgZGVzY3JpcHRpb24gb2YgdGhlIG1hbmlmZXN0IGlzIHlldCB0byBiZSBjb21wbGV0 ZWQuIFRoZSB0b3AgbGV2ZWwgbWFuaWZlc3QgZWxlbWVudCByZW1haW5zIGEgQ0JPUiBhcnJheS4g VGhlIHByaW1hcnkgcmVhc29uIGZvciB0aGlzIGlzIHRoYXQgbWFueSBvZiB0aGUgaW5pdGlhbCBl bGVtZW50cw0KIGFyZSBtYW5kYXRvcnkgKHNlZSB0aGUgaW5mb3JtYXRpb24gbW9kZWwgZm9yIG1v cmUgZGV0YWlsKS4gSW4gYWRkaXRpb24gdG8gdGhpcywgdGhlIG9yZGVyaW5nIGlzIGltcG9ydGFu dCBiZWNhdXNlIHRoZSBtYW5pZmVzdCBpcyBhIHNpZ25lZCBkb2N1bWVudC4gQ09TRSB1c2VzIHRo ZSBzYW1lIHBhcmFkaWdtOiB3aGVyZSBmaWVsZHMgYXJlIG1hbmRhdG9yeSwgdGhleSBhcmUgZW5j b2RlZCBhcyBhbiBhcnJheS4gV2hlcmUgdGhlcmUgYXJlIG9wdGlvbmFsDQogZmllbGRzIChDT1NF X0hlYWRlcnMpIHRoZXkgYXJlIGVuY29kZWQgYXMgYSBtYXAgKGlmIHVuc2lnbmVkKSBvciBhcyBh IG1hcCwgd3JhcHBlZCBpbiBhIGJzdHIgaWYgc2lnbmVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgcHJpbWFyeSBjaGFuZ2VzIGFyZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MS4g U2V2ZXJhYmxlIHRleHQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjIuIERpZ2VzdCBJbmZvIGlzIG1vdmVkIHRvIGEgdG9wLWxldmVsIGVsZW1lbnQ8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjMuIFNl cXVlbmNlIG51bWJlciBpcyBub3cgY2FsbGVkIHNlcXVlbmNlIG51bWJlciBpbnN0ZWFkIG9mIHRp bWVzdGFtcDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+NC4gQ29uZGl0aW9ucyBhcmUgZGl2aWRlZCBpbnRvIHByZWNvbmRpdGlvbnMgYW5kIHBvc3Rj b25kaXRpb25zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj41LiBEZXBlbmRlbmNpZXMsIEFsaWFzZXMsIGFuZCBwYXlsb2FkIGluZm8gYXJlIG5vdyBy ZXNvdXJjZXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjYuIFBheWxvYWRpbmZvIGlzIGRpdmlkZWQgaW50byByZXNvdXJjZXMsIHByb2Nlc3NvcnMs IGFuZCB0YXJnZXRzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiMgU2V2ZXJhYmxlIHRleHQ6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UZXh0IGlzIGZvciBodW1hbnMuIERldmljZXMgc2hvdWxk buKAmXQgcGFyc2UgaXQuIFRoZXJlZm9yZSwgd2UgaGF2ZSBtb3ZlZCB0ZXh0IGluZm9ybWF0aW9u IG91dCBvZiB0aGUgbWFuaWZlc3QuIEhvd2V2ZXIsIGh1bWFucyBuZWVkIHRvIGtub3cgdGhhdCB0 aGUgdGV4dCB0aGV5IGFyZSByZWFkaW5nIGNvcnJlY3RseSBjb3JyZXNwb25kcyB0byB0aGUgbWFu aWZlc3QgdGhleSBhcmUgbG9va2luZyBhdC4gVGhlcmVmb3JlLA0KIHdlIGhhdmUgbWFkZSBhIGNv bnRhaW5lciBmb3IgYSBDT1NFX1NpZ24gLyBDT1NFX01hYyBhbmQgYSBtYXAgb2YgdGV4dCB2YWx1 ZXMuIEluIGFkZGl0aW9uIHRvIHRoaXMsIHRoZSB0ZXh0IHZhbHVlcyBhcmUgaGFzaGVkIGFuZCB0 aGUgaGFzaCBpcyBpbmNsdWRlZCBpbiB0aGUgbWFuaWZlc3QgdG8gZW5zdXJlIHRoYXQgdGhlIHRl eHQgcG9ydGlvbiBpcyBub3QgbW9kaWZpZWQgb3IgY29ycnVwdGVkIGluIHRyYW5zaXQuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgbWVh bnMgdGhhdCwgd2hpbGUgYSBtYW5pZmVzdCB3aXRoIHRleHQgbWF5IGJlIGRlbGl2ZXJlZCB0byBh biB1cGRhdGUgc2VydmVyLCB0aGF0IHNlcnZlciBjYW4gc3RyaXAgb2ZmIHRoZSB0ZXh0IGFuZCBk ZWxpdmVyIG9ubHkgdGhlIGF1dGhlbnRpY2F0ZWQsIG1hY2hpbmUtcmVhZGFibGUgcGFydCB0byBh IHRhcmdldCBkZXZpY2UuIFRoaXMgcmVzdWx0cyBpbiByZWR1Y2VkIGJhbmR3aWR0aCwgcmVkdWNl ZA0KIGJ1ZmZlciBzaXplcywgbW9yZSBleHByZXNzaXZlIHRleHQgaW5mb3JtYXRpb24sIGFuZCBy ZWR1Y2VkIG9wcG9ydHVuaXR5IHRvIGFidXNlIHZhcmlhYmx5IHNpemVkIGZpZWxkcy48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+IyBEaWdlc3Qg aW5mbyBhdCB0aGUgdG9wIGxldmVsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5EaWdlc3RzIGFyZSB1c2VkIGluIG1hbnkgcGxhY2VzIGluIHRoZSBt YW5pZmVzdC4gVGhlIGluZm9ybWF0aW9uIHJlcXVpcmVkIHRvIGludGVycHJldCBkaWdlc3RzLCB0 aGVyZWZvcmUsIG11c3QgYmUgYSB0b3AtbGV2ZWwgZWxlbWVudC4gQWxsIGRpZ2VzdHMgaW4gYW55 IGdpdmVuIG1hbmlmZXN0IG11c3QgdXNlIHRoZSBzYW1lIGRpZ2VzdCBhbGdvcml0aG0uPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiMgU2VxdWVu Y2UgTnVtYmVyPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5UaGUgdXNlIG9mIHRpbWVzdGFtcCBhcyBzZXF1ZW5jZSBudW1iZXIgaGFzIGNhdXNlZCBj b25mdXNpb24gcmVndWxhcmx5LCBzbyB3ZSBoYXZlIGNoYW5nZWQgdGltZXN0YW1wIHRvIHNlcXVl bmNlIG51bWJlciBpbiB0aGlzIGRyYWZ0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4jIFByZUNvbmRpdGlvbnMgYW5kIFBvc3RDb25kaXRpb25z PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGVy ZSBoYXMgYmVlbiBzaWduaWZpY2FudCBkZWJhdGUgYWJvdXQgdGhlIHVzZSBvZiBwcmVjb25kaXRp b25zIGFuZCBwb3N0Y29uZGl0aW9ucywgd2l0aCBzZXZlcmFsIGltcG9ydGFudCB1c2UgY2FzZXMu IEJlY2F1c2Ugb2YgdGhpcywgY29uZGl0aW9ucyBoYXMgYmVlbiBkaXZpZGVkIGludG8gcHJlY29u ZGl0aW9ucyBhbmQgcG9zdGNvbmRpdGlvbnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiMgRGVwZW5kZW5jaWVzLCBBbGlhc2VzLCBQYXlsb2Fk SW5mbzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ RWFjaCBvZiB0aGVzZSBoYXMgdmVyeSBzaW1pbGFyIGluZm9ybWF0aW9uLiBCZWNhdXNlIG9mIHRo aXMsIGl0IHNlZW1zIHJlYXNvbmFibGUgdG8gZ3JvdXAgdGhlbSBpbnRvIGEgY29tbW9uIHN0cnVj dHVyZSB0aGF0IGp1c3QgaWRlbnRpZmllcyB0aGUgdHlwZSBvZiByZWZlcmVuY2UuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiMgUmVzb3VyY2Vz LCBQcm9jZXNzb3JzLCBUYXJnZXRzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UbyBzYXRpc2Z5IGNvbXBsZXggcmVxdWlyZW1lbnRzLCB3ZSBjb25z aWRlcmVkIHNldmVyYWwgdXNlLWNhc2VzOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5EaWZmZXJlbnRpYWwgdXBkYXRlIG9mIGEgZHVhbCBYSVAg TUNVLiBUbyBhY2NvbXBsaXNoIHRoaXMgYW5kIHN0aWxsIG9idGFpbiBnb29kIGNvbXByZXNzaW9u LCB0aGUgaW5zdGFsbGVkIGltYWdlIG11c3QgYmUgdW4tcmVsb2NhdGVkLCB0aGVuIGEgZGlmZiBt dXN0IGJlIGFwcGxpZWQsIHRoZW4gdGhlIHJlc3VsdGluZyBpbWFnZSBtdXN0IGJlIHJlbG9jYXRl ZCwgdGhlbiB3cml0dGVuIHRvIHN0b3JhZ2UuIFRoaXMNCiBpcyBldmVuIG1vcmUgY29tcGxpY2F0 ZWQgaWYgdGhlIGRpZmYgaXMgY29tcHJlc3NlZCBhbmQgZW5jcnlwdGVkLiBGdXJ0aGVybW9yZSwg dGhlcmUgYXJlIHNvbWUgZGlmZmVyZW50aWFsIGFsZ29yaXRobXMgdGhhdCB3aWxsIG5lZWQgdG8g YmUgYWJsZSB0byByZWFkIHRoZSBkYXRhIHRoZXkgaGF2ZSB3cml0dGVuLCB3aGljaCBtZWFucyB0 aGF0IHRoZSB0YXJnZXQgaW1hZ2UgbXVzdCBhbHNvIGJlIHBvc3NpYmxlIHRvIHJlYWQsIHVuLXJl bG9jYXRlLA0KIGFuZCBmZWVkIGludG8gdGhlIGRpZmZlcmVudGlhbCB1bnBhY2tpbmcgZW5naW5l LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5T aGFyZWQgY29tcHJlc3Npb24gdGFibGUuIFNldmVyYWwgY29tcG9uZW50cyBvZiBhbiB1cGRhdGUg bWF5IGJlIGRlbGl2ZXJlZCB3aXRoIGEgc2luZ2xlIGNvbW1vbiBjb21wcmVzc2lvbiB0YWJsZS4g SWYgdGhpcyBpcyB0aGUgY2FzZSwgdGhlbiBlYWNoIHRhcmdldCBpbWFnZSBtdXN0IGJlIGRlY29t cHJlc3NlZCB1c2luZyB0d28gaW5wdXRzOiB0aGUgY29tcHJlc3NlZCBmaWxlIGFuZCB0aGUgY29t cHJlc3Npb24NCiB0YWJsZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5UaGUgcmVzdWx0IG9mIHRoaXMgaXMgdGhhdCB3ZSBjb25jbHVkZWQgdGhh dCByZXNvdXJjZXMgYW5kIHRhcmdldHMgY2Fubm90IGNvbnNpZGVyZWQgdGhlIHNhbWUuIFdoaWxl IHRoZXkgYXJlIHRoZSBzYW1lIGluIHRoZSDigJxyYXcgYmluYXJ54oCdIGNhc2UsIGFuZCB0aGV5 IHN0aWxsIGFwcGVhciB0byBiZSB0aGUgc2FtZSBpbiBsaW5lYXItcHJvY2Vzc2luZyBjYXNlICh3 aGVyZSBhbGwgcHJvY2Vzc29ycyBoYXZlIG9ubHkNCiBvbmUgaW5wdXQgYW5kIG9uZSBvdXRwdXQp LCBvbmNlIGRpZmZlcmVudGlhbCBjb21wcmVzc2lvbiwgdGFibGUgY29tcHJlc3Npb24sIGFuZCBy ZWxvY2F0aW9uIGFyZSBjb25zaWRlcmVkLCBpdCBpcyBjbGVhciB0aGF0LCBzaW5jZSBwcm9jZXNz b3JzIGNhbiByZXF1aXJlIG11bHRpcGxlIGlucHV0cywgdGhlcmUgbXVzdCBiZSBhIHdheSB0byBk ZXNjcmliZSBlYWNoIG9mIHRoZXNlIGlucHV0cy4gVGhpcyBjbGFyaWZpZXMgdGhhdCByZXNvdXJj ZXMNCiBhcmUgZGlzdGluY3QgZnJvbSB0aGUgZmluYWwgaW1hZ2UgdGhhdCBpcyBpbnN0YWxsZWQg dG8gYSBkZXZpY2UuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkJlY2F1c2Ugb2YgdGhpcyBkaXN0aW5jdGlvbiBhbmQgaW4gb3JkZXIgdG8gZGVz Y3JpYmUgY29tcGxleCB1c2UtY2FzZXMsIHdlIGhhdmUgaW5jbHVkZWQgYSBtZWNoYW5pc20gb2Yg ZGVzY3JpYmluZyB0aGUgcmVzb3VyY2VzIGFzIGlucHV0IG5vZGVzIHRvIGEgZ3JhcGgsIHRoZSBp bnN0YWxsYXRpb24gdGFyZ2V0cyBhcyBvdXRwdXQgbm9kZXMgZnJvbSB0aGUgZ3JhcGgsIGFuZCB0 aGUgaW50ZXJtZWRpYXRlIHN0YXRlcw0KIGFzIGludGVybmFsIG5vZGVzIG9mIHRoZSBncmFwaCwg d2hlcmUgZWFjaCBwcm9jZXNzb3IgZm9ybXMgYW4gZWRnZSBvbiB0aGUgZ3JhcGguPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvciB0aGUgaW5z dGFsbGF0aW9uIG9mIGFueSBnaXZlbiB0YXJnZXQsIHdlIGV4cGVjdCB0aGF0IHRoaXMgZ3JhcGgg Y291bGQgYmUgcmVkdWNlZCB0byBhIHRyZWUgd2l0aCBhbiBpbnN0YWxsYXRpb24gdGFyZ2V0IGF0 IHRoZSByb290LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5JbiB0aGUgc2ltcGxlIGNhc2UsIGEgcmF3IGJpbmFyeSBwYXlsb2FkLCBvbmUgcmVz b3VyY2UgaXMgcmVxdWlyZWQsIGlkZW50aWZ5aW5nIGFuIG91dHB1dCBub2RlLCBhbmQgb25lIGlu c3RhbGxhdGlvbiB0YXJnZXQgaXMgcmVxdWlyZWQsIGlkZW50aWZ5aW5nIHRoZSBzYW1lIG5vZGUg YXMgYW4gaW5wdXQgbm9kZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+RGVzY3JpYmluZyB0aGlzIHN0cnVjdHVyZSBhcyBhIGdyYXBoLCByYXRo ZXIgdGhhbiBhIHRyZWUgZm9yIGVhY2ggdGFyZ2V0IGlzIGEgZGVzaWduIHRyYWRlb2ZmLiBXZSBi ZWxpZXZlIHRoYXQgdGhlIGdyYXBoIGFzIHNldmVyYWwgYWR2YW50YWdlcy4gRmlyc3QsIGl0IHJl ZHVjZXMgdGhlIG5lc3RpbmcgZGVwdGggb2YgdGhlIENCT1IgcGFyc2VyLiBUaGlzIGlzIGFuIGlt cG9ydGFudCBjb25zaWRlcmF0aW9uIGZvcg0KIGhvdyBtdWNoIG1lbW9yeSBpcyBjb25zdW1lZC4g U2Vjb25kLCBpdCBhbGxvd3MgYSB2YWxpZGF0b3IgdG8gaXRlcmF0ZSBvdmVyIHRoZSBncmFwaCBh bmQgaWRlbnRpZnkgd2hldGhlciBpdCBzdXBwb3J0cyBlYWNoIHNwZWNpZmllZCBwcm9jZXNzb3Ig d2l0aG91dCBhbnkgY29tcHJlaGVuc2lvbiBvZiB0aGUgdHJlZSBzdHJ1Y3R1cmVzIG9yIGdyYXBo IGNvbm5lY3RlZG5lc3MuIFRoaXJkLCBpdCBlbGltaW5hdGVzIHJlcGV0aXRpdmUgZGVzY3JpcHRp b24NCiBvZiByZXNvdXJjZXMgYW5kIGludGVybWVkaWF0ZXMgdGhhdCBhcmUgdXNlZCBpbiBtdWx0 aXBsZSB0cmVlcywgd2hpY2ggY291bGQgYmUgdXNlZCB0byBlbGltaW5hdGUgZG93bmxvYWQgKHJl c291cmNlIGFjcXVpc2l0aW9uKSBhbmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4gV2UgZG9u4oCZdCB0 aGluayB0aGF0IHRoZSByZWR1Y3Rpb24gaW4gbWFuaWZlc3Qgc2l6ZSB3b3VsZCBiZSBzaWduaWZp Y2FudC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QXMgYWx3YXlzLCB5b3VyIGlucHV0IGlzIG1vc3Qgd2VsY29tZSE8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QnJlbmRhbjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JTVBPUlRBTlQgTk9USUNFOiBU aGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRl bnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl bmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQg ZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLA0KIHVzZSBp dCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFu eSBtZWRpdW0uIFRoYW5rIHlvdS4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_790d40b227034bd784185bd9bdd52f4fnordicsemino_-- From nobody Mon Jul 9 12:16:58 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2807C130E7F for ; Mon, 9 Jul 2018 12:16:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SReA7UHVEIJE for ; Mon, 9 Jul 2018 12:16:54 -0700 (PDT) Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1220130E73 for ; Mon, 9 Jul 2018 12:16:54 -0700 (PDT) Received: by mail-io0-x229.google.com with SMTP id q9-v6so18071252ioj.8 for ; Mon, 09 Jul 2018 12:16:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=P1wY8VtdkhIROsMSWTBa6tCd7fr9NacZxiXqSTmKXkw=; b=V9x+NwrwiMbCBKdOwtlhFKAF+LaPQpr2Z9+hXVcyJ8JlpxIVGq27A97O+GqyKw4M+p WSKUvbb5U3G/TY7KOV8NsR+vDsDIY7VM+1s+UYduJ0BqdshirErM0iDSrtShVD9FyqRu /Mdy2dqL097IqJroy5UeufZD6BCXdf37QxPc4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=P1wY8VtdkhIROsMSWTBa6tCd7fr9NacZxiXqSTmKXkw=; b=enjlFEfyku5l6y/sKZlbUXgkOgXunldepDTnS0Ze1LwfjTWDHDL8JJ9Ym/AdzGOOff Iz+5EofgHkP6LDYCF1w32LE1hOb9nRXaAguNTz/no/xzYYAIkXuidEUA1ZGZloxJh9By aVxKx5s/0xY9Psb9qnK3AKat0LP6nTvrYEqsEmZLKXS2sjmIlcRqA/Lf5QNfscgB6nXg RcxOgOn6yqbyTQKNKpb8jocS6r+V9bYyp3rvlJE4j0Luh/TTGb0TBOrGpphjeQ9ylMmU JzDFIeYrKTPihk4pQU7v2hLe8Z+uCnFIQzQl98a2uvUeNkgQFGeT2aA5Ltixh8c8xRG+ BfpA== X-Gm-Message-State: AOUpUlGt7LLwuDnsW8rs8YS1bvvEZOIUHac1Ci0j77COamVvfjpIFZ62 UlltQdteA/m1y1Lp6u09HYIcz2hIO6I= X-Google-Smtp-Source: AAOMgpcSLQaGzx+cEg9kzV17RgOxxVnydYw20uH631vqadB4BSjTlNswVqr+nRnS6o59UCmoN1aCzw== X-Received: by 2002:a6b:3809:: with SMTP id f9-v6mr18803667ioa.105.1531163813784; Mon, 09 Jul 2018 12:16:53 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id m203-v6sm7713302ioa.2.2018.07.09.12.16.52 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 09 Jul 2018 12:16:53 -0700 (PDT) Date: Mon, 9 Jul 2018 13:16:51 -0600 From: David Brown To: Brendan Moran Cc: suit , Hannes Tschofenig Message-ID: <20180709191651.GA27024@davidb.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2018 19:16:57 -0000 On Tue, Jul 03, 2018 at 09:08:02PM +0000, Brendan Moran wrote: >This draft is a significant departure from previous drafts, so I think it is >important to highlight the changes. The draft requires a lot of text that >hasn’t been written yet, so I will try to put some of that here for discussion. > >[1]https://datatracker.ietf.org/doc/draft-moran-suit-manifest/ ># Digest info at the top level >Digests are used in many places in the manifest. The information required to >interpret digests, therefore, must be a top-level element. All digests in any >given manifest must use the same digest algorithm. Is this possibly overly constraining? For very resource-constrained devices, it is reasonable to expect the device to only have a single digest algorithm available in it. Would we want another digest algorithm available to allow higher-processing systems to perhaps use a stronger check. I think if we want require a single digest format per manifest, there should at least be motivating text for doing it this way, as well as why there is only a single digest allowed per entity. David From nobody Wed Jul 11 10:44:29 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67223130E40 for ; Wed, 11 Jul 2018 10:44:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0XFuETGo1pyM for ; Wed, 11 Jul 2018 10:44:26 -0700 (PDT) Received: from mail-io0-x229.google.com (mail-io0-x229.google.com [IPv6:2607:f8b0:4001:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F9BA130E31 for ; Wed, 11 Jul 2018 10:44:26 -0700 (PDT) Received: by mail-io0-x229.google.com with SMTP id z20-v6so24769302iol.0 for ; Wed, 11 Jul 2018 10:44:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=MUJobptmD3q9x66iS9BbKyH4x/FTdeqDs2FX03EpfNk=; b=L2zUti6JxEhP8F4qNxBQLpvC5V7mNLLfCnOQoegWW7Ncg76e3sB4VpolxNb63BIIGL j2ZVJ6VvZ6AcyNBAPD+fgDY4Dl1oxFd8CuxbXGqRLk6/2Qj+mHrOK9q3qOaLrxwgbEXQ QQChUxdkHqI5Tt+7eNnOQB+o1Iq2F93YLlERo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=MUJobptmD3q9x66iS9BbKyH4x/FTdeqDs2FX03EpfNk=; b=QUqH+NJCnK+R5pYF7uh1k9V2DTxz/LAsWWoke7oPj1IRS6KOMCEEbdLeECSJcFKujR DvURzhn8ygAH1y1s0TKL0q0gjqubIlSnwX8HCyCGotN0lGgbFEo2uicBepNeycXTyETa BuY1kGeIHgewZQIdXpZmlwdNT0LzG9nQRLr5C5ZfqdPQe5nh4+FP/ICP5KCa3k2bVkZe zFPagKiIpklM3oW+OPe8gFOnkscvVeHSnbws8rBF80mYu8gD8c/5W/9xEUPPKusH287K zBbEFG/1LOFm3uem2hFNbBdep7ryd5W5K0f4R9J8WVwYA0oBYSCwlYJrQnxPdP/MaknP 3T8A== X-Gm-Message-State: AOUpUlEVjeykzBNvqqKcGRwaj9j1kCUJ108lZai0ygnwyCt2Cj9Fl0AK y56hNi2/ndWx4LjkNYdTm+970g== X-Google-Smtp-Source: AAOMgpff+tyajdj2CMmvq+GAfpAusHEJUWM+0sqLuXziWrhfjCziSXJoSxKkMoWoAYw/Ij32oqs3Mg== X-Received: by 2002:a6b:90d4:: with SMTP id s203-v6mr23747337iod.249.1531331065716; Wed, 11 Jul 2018 10:44:25 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id h14-v6sm8440607ioj.21.2018.07.11.10.44.24 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jul 2018 10:44:25 -0700 (PDT) Date: Wed, 11 Jul 2018 11:44:23 -0600 From: David Brown To: =?iso-8859-1?Q?R=F8nningstad=2C_=D8yvind?= Cc: Brendan Moran , suit , Hannes Tschofenig Message-ID: <20180711174423.GA8918@davidb.org> References: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 17:44:29 -0000 On Fri, Jul 06, 2018 at 01:50:38PM +0000, Rønningstad, Øyvind wrote: >How about making more information severable (like with text)? Some information >is short-lived, like the processing steps, while other information could be of >interest after the update is complete, like the postConditions and sequence >number. I'm wondering if we can make a split, so the relevant parts of the >manifest can be stored for later reference. Something like the following: I have another proposal for this. Motivation: The manifest will be processed by different entities that will differ in processing capability. We want to make it easy to include potentially complex information in the manifest, without having to burden lower-resource entities that don't need to process this information. The goal is to make the manifest format more generally processable. Proposal: Assocate with each entity in the manifest additional information describing the audience for that information. One way to do this would be to change the top-level of the manifest to something like: Manifest = [ manifestVersion: 1, digestInfo: DigestInfo, sequence: SequenceNumber, info: { * int => bstr } ] This would be similar to how extensions are handled, except that all of the existing instructions would be formatted in the same way. A given entity would know the fields that it is able to process, and any other fields it can simply skip (as it is just a bstr). This adds some complexity to the normal processing, and it would be important to require, for example that the entries in 'info' are in order by key in order to have a canonical representation. David From nobody Wed Jul 11 10:47:33 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5C93130E40 for ; Wed, 11 Jul 2018 10:47:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lNGKzsihr6RT for ; Wed, 11 Jul 2018 10:47:29 -0700 (PDT) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 442A0130E31 for ; Wed, 11 Jul 2018 10:47:29 -0700 (PDT) Received: by mail-io0-x22a.google.com with SMTP id q4-v6so24791316iob.2 for ; Wed, 11 Jul 2018 10:47:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=Xg4Rc91URwLHaa/AP5/Pewg47g0+pfEXOYnuYGn6zHA=; b=AjhZrefwk6VpSyEj/uGzWC3TyRb34VzE7gb8n75oAh3icg6O9gN6hTN4A8qByPzwmq CJXwlMcWTppscaL5fMI35wzsmJ3Wk3v1uFHUJPdJwjXp9g93S/QL+AlpJ8SWETJle8pc GHNMA+8n5K2G3G27ZVnPHmWvBEEchLnihWsy0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=Xg4Rc91URwLHaa/AP5/Pewg47g0+pfEXOYnuYGn6zHA=; b=gv8vRsv8Vcal6HH/ldeKv0ZpV9JWLdw3vdF6NzQV9nJNWe0o8ACOhC/C7nSNFqeUfY Cbiu0HnnB4VQQMGN7N9p1h51SMLg+hQMGqVABmeHCeQSlhHvpVvGrwUAQuo3dnt22gYB HzGlGgg9JRnvqIGA7Z3Y/dZIna4pgo8p6uPC49nrcUJHi+oLhc8QMCoQcnyfJ+YIgIHn Q9hjQdwx7SfE5ME1CJTFvt0AeX9QruB9KGbroi0s/0aiCehW9/8eAF2PEyITGSCjnQuF 5UIzKhNNZnE/vfjvt7rfYBEi1sXCjLUPTzpvyR6Pkml6lFK9Ur80Q7xoYEzpfg1Eps38 3UcA== X-Gm-Message-State: AOUpUlE9rdBTy5Pg4ZYdLveGPl180SdA5a8OqDxzraxJpShBD8oCY8hi mhfNkiFn4Fmi6h3r7jHAZzE0+g== X-Google-Smtp-Source: AAOMgpebH7fXs1VKnUsyB6XFj1RlDrH58EILMdD0M/CjwVB0QvNaEIYut9OWAeYjO7yAYkXTZCiPJA== X-Received: by 2002:a6b:3a42:: with SMTP id h63-v6mr236601ioa.400.1531331248562; Wed, 11 Jul 2018 10:47:28 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id w79-v6sm11148930iod.43.2018.07.11.10.47.27 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jul 2018 10:47:28 -0700 (PDT) Date: Wed, 11 Jul 2018 11:47:26 -0600 From: David Brown To: =?iso-8859-1?Q?R=F8nningstad=2C_=D8yvind?= Cc: Brendan Moran , suit , Hannes Tschofenig Message-ID: <20180711174726.GB8918@davidb.org> References: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 17:47:31 -0000 On Fri, Jul 06, 2018 at 01:50:38PM +0000, Rønningstad, Øyvind wrote: >AuthenticatedManifest = [ > authenticatedManifest: COSE_Mac / COSE_Sign, > updateProcess: bstr .cbor UpdateProcess, > text: bstr .cbor TextMap, >] >UpdateProcess = [ > nonce : bstr, > textReference : bstr, > preConditions : [ * PreCondition ], > directives : [ * Directive ], > resources : [ * ResourceInfo ], > processors : [ * ProcessingStep ], > targets : [ * TargetInfo ], > extensions : { * int => bstr} >] The textReference has to be in the Manifest that is covered by the signature. As stated here, none of the updateProcess or text information is covered by a signature. This could be done by moving textReference above into the Manifest, as well as adding an updateProcessReference that would contain a digest of the updateProcess. This adds complexity to verifying this additional information, but would indeed then allow them to be severed, while still being covered by the signature. David From nobody Wed Jul 11 10:48:53 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D9E70130E40 for ; Wed, 11 Jul 2018 10:48:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z6lvcBaIdnfZ for ; Wed, 11 Jul 2018 10:48:50 -0700 (PDT) Received: from mail-io0-x22d.google.com (mail-io0-x22d.google.com [IPv6:2607:f8b0:4001:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80854130E31 for ; Wed, 11 Jul 2018 10:48:50 -0700 (PDT) Received: by mail-io0-x22d.google.com with SMTP id y10-v6so9968189ioa.10 for ; Wed, 11 Jul 2018 10:48:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=FjazkFz0V9rf/kp20LnMNWOIHq9T86rai/w7wMLYGDA=; b=GRmeaQ3sfZVO32jkADD/GH84EE+CSvFcA20gKfaJuPRmbxM9Xkx/jZbDGGcQ8CFQCj stOhUS1LBfmdEmxbm8I7nHypEneiqnyKMjCdPB0zduNMnpDf56N4EdFq3Bg2Wcclk7fW wLBncmzmVHcGBUWUTW3bIuV0UokY7EI7VYfvc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=FjazkFz0V9rf/kp20LnMNWOIHq9T86rai/w7wMLYGDA=; b=gop/KjNBTrgJNVzF7GTdzP0X89O6ZuQCtqQbhORMmbORAC6jnHl7tgVjPBwxIBaOUS Zm0MS/oUQdVEp4i2+wi9T0CPr1JeRWTL1jZHYOmHLwbha36S1sEgKPNb03WHhqzfnYcT RrKkUHgXDnvKSNIu012A9boKi4jRHTKNccrpkE9jzKrviL7bZ35lZxF7RWvruVR3/e0M tw1Mo9bRdp4aKN9/uPMIcj+uOysDI0R0qSsVJ7UwYgiNAnZ5HS08bUQfa+GYNwA4xkE8 BZltkyeNdvPMCufd4ilTiYHhd8Eg8JpztKnJ7ot1xScd26ApRsva9EnaCPiCh6BnN+os ZHWg== X-Gm-Message-State: AOUpUlHXLzSRIkoJg31MxkHYPSScodgqfdPZnlMvEyHBYjXMczA4WLHZ 21+iCwXTrPbg+/JwAfCxJXUuCg== X-Google-Smtp-Source: AAOMgpd1aHX0WLxeiRlz7Aj/HvBGW9gfA1cqrKYEUfmIO/gtE+lyCc4UFX4rEjl8kY/LUze6+kttYQ== X-Received: by 2002:a6b:30c9:: with SMTP id w192-v6mr27003258iow.291.1531331329790; Wed, 11 Jul 2018 10:48:49 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id u15-v6sm8191509iog.62.2018.07.11.10.48.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jul 2018 10:48:49 -0700 (PDT) Date: Wed, 11 Jul 2018 11:48:47 -0600 From: David Brown To: =?iso-8859-1?Q?R=F8nningstad=2C_=D8yvind?= Cc: Brendan Moran , suit , Hannes Tschofenig Message-ID: <20180711174847.GA30365@davidb.org> References: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> <20180711174726.GB8918@davidb.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20180711174726.GB8918@davidb.org> User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 17:48:52 -0000 Sorry, most of this can be ignored, as I missed the processReference field in the Manifest. I would still suggest putting the textReference in the Manifest as well so that it doesn't require as deep of nesting to verify the text. David On Wed, Jul 11, 2018 at 11:47:26AM -0600, David Brown wrote: >On Fri, Jul 06, 2018 at 01:50:38PM +0000, Rønningstad, Øyvind wrote: > >>AuthenticatedManifest = [ >> authenticatedManifest: COSE_Mac / COSE_Sign, >> updateProcess: bstr .cbor UpdateProcess, >> text: bstr .cbor TextMap, >>] > >>UpdateProcess = [ >> nonce : bstr, >> textReference : bstr, >> preConditions : [ * PreCondition ], >> directives : [ * Directive ], >> resources : [ * ResourceInfo ], >> processors : [ * ProcessingStep ], >> targets : [ * TargetInfo ], >> extensions : { * int => bstr} >>] > >The textReference has to be in the Manifest that is covered by the >signature. As stated here, none of the updateProcess or text >information is covered by a signature. > >This could be done by moving textReference above into the Manifest, as >well as adding an updateProcessReference that would contain a digest >of the updateProcess. This adds complexity to verifying this >additional information, but would indeed then allow them to be >severed, while still being covered by the signature. > >David From nobody Wed Jul 11 14:30:59 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 800A4130E73; Wed, 11 Jul 2018 14:30:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rx5IINMxvDFY; Wed, 11 Jul 2018 14:30:54 -0700 (PDT) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1340130DDD; Wed, 11 Jul 2018 14:30:53 -0700 (PDT) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1fdMhH-0002Aq-44; Wed, 11 Jul 2018 23:30:52 +0200 To: suit@ietf.org, hrpc@irtf.org Cc: Sandeep Jha From: Gurshabad Grover Openpgp: preference=signencrypt Autocrypt: addr=gurshabad@cis-india.org; keydata= xsFNBFriroIBEADfyDpCD8eborMUMXKtZzjo4t2KzrAlUVYgE/TFtrwUP+4Xw4dzakDIzST8 sVYmlXIWhM5NBBTZSQ190vsxrkbi0xxLcXYM2olZEtqkJ8zONZeZLBeGvcfMymtHqD4jHwYb Zm7OXnS45fWDL+HOoMP/VCwEn098rYfnllIkYQD1Gc28Ig+ywjGg8y5p0qMmmmhm2ckgLjnG MJX8t273MSc8wsn/UYH922yif3MQXmrzqgnRl9hRzf90SKqAw38bw7wccb55pIItloKYsi0r zYBKJSOPXn91Z21TpOSTy21M0MZYEAlDn1zeea+q8TggfHNWxOXoKrIm1pqZFRz0k+8i2siJ AHf8bRm/fhukA6szZ6b2nNPxjkAmOv9zvGu6RZGbmeLvQYVBSSnZ67ayZrkKwn7KIyAV6hQM /bVnD8eEZ2tZ0S8lxoZFYSNeMGt2b6WelFZO97/LbjxaJUHd9K8g5H0MwqN1NXoBxRwllVRC 3sVHVoWTBqnKo8qplzvQEAto69PpvuxxKTOFEJeQqmn1b/fo3sLRb4YiIg8Ax+Np7Huzzjk6 vKKgpIwIN7yEUj/ReWi/UA/W4wSg3XkcqTf7h73crnN/1At0PdgozbDV2UbcApaldStP4DfG UiQl0/7MiYLKapDDuSahmoeH3xrNnrzS9BAfuGHezzDbMyPLXQARAQABzSpHdXJzaGFiYWQg R3JvdmVyIDxndXJzaGFiYWRAY2lzLWluZGlhLm9yZz7CwX0EEwEIACcFAlriroICGyMFCQlm AYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQrbl/X+ubfC7/bQ//YQv7zqQE433xxsN/ 3GYKoOFccBy3WvV4DxrTskJ3n3k5lfcZolbc8TQksQOTzyerNt2ZA7fsGZa7eFSW+xR4Yq3/ C9o+5FOoHGhyZhb+x17MILhmyvyUNSj7SdKrRISgurMbV2Vv8LxmTcdrK6CdFF6JLH+opzU1 NlRKwZqROPgbYZEB2QFIUbGfgh2I5AXNyV2XbT7fagfkHk+v9AUV7POP2H1+AZ1xq6iFTm2o 9ufNZsp2bInsDohcVBKC3aH2cnFMjvIXpNoUOx8vb5A2xW0aBUTTJDB/uZw53WOg3kehrCNb ZkML3FnDZLRuu1e8DSWmwk5YIoDzt5bMCgfUwb0C6Q+JuM8lC+8CEEa9qamLc+fhvFAzcrWp VWuSaVeLdhe5NxmtlRYNZdGuKy6sRHjwsEWlwzRylhm74fiDR3aA1eIFsfmYLd4z+i1Fp23Y dHJf7/Gor2CmOxphog9DEA9WCuORXfx4De7hoMKwW4gWKw1A8B12Cv4EOkXmCsWsOnfDEarr 2Yl6elxkhQRfKjAesXb0cezRzZgwsWIsbeYsuWFF7Xi6IzUJ27lxU3p5PcyY8O8aDYOn+pu0 YFJ7s3u2VRRgptVZJmkcN3WTApXSHY8fGl5xAakM/bqFJj9uj5zlMnFN2EplC6/mQkfYfy2f siaGTP/GQV4OSuOeuMLOwU0EWuKuggEQAJ4lAzB72gHw4+rbyxmQNNVmvgYVZPjFtO/MQdYi x1QwRP/gxxqPqTd/ZwQvmPGzXRKw10B7uKSRk6YP12+IG0mXJwHGp9q5CWJE0XNGqX3UWbAc KIzxqPNpsf8e6Bv7jdW0YwLBxJ+RW0NNL6uAxz0sr2frbnS+EZB3cU+zOZzp/9YfTUZO2lxF NzgJoErKe/HLp7aBeJXBBcwO0LQlIT80rTZx2KihBa/Ww/y9E9gV/HacJu/Ncb6E/G3e4xGj 9w9L+UW43q01wy+FSUKy9FLc7D40WqQsj8SXZEpl84SyLcJRoX3mtj59bX2SAN2VB2BAksTu qCh00IcIUGfyHziu5PwUWYM96gOhDSocP4wSeiQ8TwLzaffllz2qhdI296a9lCIYIeWVytEd NU9jJ3RbzXAgE0pnDauNXDaQv1FS5jYi8rlslJUxKnrS69BFNjM5RqQ16Cm0C4rKL7/a8wHC r4VjcjSCM8Lzv8YOOitJ9Yt4Y8SVfO5s3YvxcdSr56nX0W3B1kGbG1GpqWTzOgXzGF5bIsbV 7SPecwUs9ShvmLmZzDUxIQ68n4zj3lMZn5I+pP+Ew6nAAiuSmKdr5cygnCH/NVJzil07t+X4 uR6oKHBhuMFYF1c6Wxk36m+EZz5ZHFaT4rN0WDIJdAEqRzD0Z56V6ansDF8y+ksh0SHlABEB AAHCwWUEGAEIAA8FAlriroICGwwFCQlmAYAACgkQrbl/X+ubfC50rhAAloTaq/fZC1gtiVtU wOB+00gEkjgmzt+rLkW+l2EySTST7tje57W83UZwzCX746B2O//Bqardxz9R1Vr0VFiwHA8g 3qeBqPqiv1WoQch/iZ5d/1MxK4A9xDag1uyqLR8RuGlZ8lATmcP3IabKiuiBV4MlFZ7V2Ib6 5ToPf28xxSyjMzTjQObIG0e009uHlu2z+iQVshLyoyVVAOWWa88D6iuBDC/EtBRjlpjLAjuR YhWVYX6KHdVUijKMHN2RqjpX5O2wPL7NcMY/wsTq7EteUeI75hxFvargRXkEt1XR8t52LC0u IE2OjpzY5re/ROUbfsqL8trjAOrSJ+Fx5H8AYl9JaoVxohhxDZgNtgNtPbh/8Nnlf9daj/bh lZcTBO98XLQwMnyHGPdyhIodpWPq2C09Ys3TkQsbcdMMB1pqnEK5Vz1zIKkEEX7QVsLdrz7C 2CFsauc/9PHj+4njCHslXtzBOiVu5FXTnbCwPrLJs5iEUkUCb6qtE/2mSCTrAanzOTTOmqiM cnNTI1Tj0ht462S9VypppQnKCv8shGxXG7BadZTv+pNCA/WfB2kk1sS3ZwB0wBWX4p41fxs+ ArM9ew2SzQ/vBrEfO7ljPfZZmBqH4t/vgAZBnOtTxCGlPEIJqiMqtGHRqIqpiR20QfxEUuXI MfMfa9QJpisdNmqoUyc= Message-ID: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Date: Thu, 12 Jul 2018 03:00:48 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Gbpss3sAxMHeB20MlvRrDOH6ylt8kxaGV" X-Virus-Scanned: by clamav at smarthost1.samage.net X-Scan-Signature: 028245575ea82c532dbb94a201c00fd0 Archived-At: Subject: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 21:30:58 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Gbpss3sAxMHeB20MlvRrDOH6ylt8kxaGV Content-Type: multipart/mixed; boundary="iOPxMym9Hm3Q9D5hwBfkjmF0wQWPLzqnl"; protected-headers="v1" From: Gurshabad Grover To: suit@ietf.org, hrpc@irtf.org Cc: Sandeep Jha Message-ID: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Subject: HR Review: Firmware Update Architecture for IoT Devices --iOPxMym9Hm3Q9D5hwBfkjmF0wQWPLzqnl Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi, Thanks to the authors and the working group for developing the comprehensive drafts. As part of efforts in the Human Rights Protocol Considerations (HRPC) group, Sandeep and I have reviewed the human rights considerations (RFC 8280) in the three drafts. Following the updates to the drafts on July 2nd, we reached out to some of you. We are aware that some of the concerns we raise may no longer apply since the updates; we are sharing our review hoping to engage you on our other observations (and their solutions) in next week's HRPC sessions at IETF102. Review: A Firmware Update Architecture for Internet of Things Devices =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An assessment of human rights considerations in * draft-ietf-suit-architecture-01 * draft-moran-suit-manifest-02 * draft-ietf-suit-information-model-01 Introduction ------------ =E2=80=98A Firmware Update Architecture for Internet of Things Devices=E2= =80=99 (draft-ietf-suit-architecture-01) proposes an architecture for firmware update mechanism suitable for IoT devices, and lists various requirements associated with the same. [SUIT-ARCH] =E2=80=98A CBOR-based Manifest Serialisation Format=E2=80=99 (draft-moran-suit-manifest-02) describes the format of the manifest which contains firmware update metadata for a device. The draft defines components of the manifest and specifies their functions in firmware-update process. [SUIT-MF] =E2=80=98Firmware Updates for Internet of Things Devices - An Information= Model for Manifests=E2=80=99 (draft-ietf-suit-information-model-01) describes t= he information in the manifest, a threat model for the architecture, and provides security requirements for the mitigation of these threats. [SUIT-IM] This is a review of the human rights considerations in the three drafts. (See [RFC8280], =E2=80=98Research Into Human Rights Protocol Consideratio= ns=E2=80=99). Human Rights Considerations --------------------------- # Privacy ([RFC8280], section 6.2.2) Privacy considerations are with regards to maintaining the confidentiality of firmware image and manifest. Both the firmware image and manifest contain information about the device. As mentioned in the older version of the drafts, Class ID and Vendor ID are typically compiled as strings into the firmware image. If an untrusted intermediary storage is assumed, as in [SUIT-ARCH], this device information will be available to all intermediary and snooping parties, which may violate the device operator=E2=80=99s privacy. Additionally, de= vice information can be used by an attacker to design and mount targeted attacks on the device. Concern: The drafts are inconsistent in its recommendation of encryption of firmware images. Section 3.3.13 of [SUIT-IM] says that the information model must enable encrypted payloads to prevent the attackers from reading the content of the firmware images whereas Section 3.3 of [SUIT-ARCH] leaves the choice of encryption to the authors/OEMs. Recommendation: We recommend removing these inconsistencies, and that the drafts mandate the encryption of the firmware image. Accordingly, we recommend the relevant text of section 3.3 of [SUIT-ARCH] be updated. Concern: The manifest also contains information of the device (such as device-manufacturer=E2=80=99s name, model name, and model number) which a= n end-user operates, but the drafts have not recommended the encryption of the manifest. Recommendation: We recommend that the drafts ([SUIT-ARCH], [SUIT-MF]) recommend encryption of the manifest as well. # Security=C2=A0 ([RFC8280], section 6.2.4) Security concerns have been emphasised in the draft [SUIT-IM]; various threats have been covered in the thread model (section 3.1 of [SUIT-IM]) and possible mitigations have been discussed. # Internationalization ([RFC8280], section 6.2.5) and Localization ([RFC8280], section 6.2.12) Concern: For the specific question, =E2=80=9CDoes your protocol have text= strings that have to be understood or entered by humans?=E2=80=9D [RFC828= 0]: An email highlighting the recent updates to the drafts [MF-MAIL] notes that a container in the manifest will have =E2=80=9Cseverable=E2=80=9D text me= ant for humans. However, it is not clear from the draft what this text will contain. Since the update server may choose to send the text to the device (if the device supports it), human readability of these text strings is a concern from a human rights perspective. Recommendation: Support of multiple languages for text meant to be read by humans advances access to information and non-discrimination. OEMs must have the ability to internationalise and localise any text meant to be read by humans. CBOR does support UTF-8; we recommend that the draft make the internationalisation ability explicit for all text meant for humans. # Open standards ([RFC8280], section 6.2.7) =C2=A0 Pertaining to the question in [RFC8280], =E2=80=9Cis your protocol fully documented in such a way that it could be easily implemented, improved, built upon, and/or further developed?=E2=80=9D, we found some statements = in the drafts that might impede further improvement and development: * The use of the =E2=80=98extensions=E2=80=99 field of the manifest, defi= ned in Section 2.1 of [SUIT-MF], has not been defined. * Section 4.18 of [SUIT-IM] says that linked manifests must be installed simultaneously. For clarity, we recommend that the draft specify that each linked manifest must be validated separately. # Reliability ([RFC8280], section 6.2.14) Reliability concerns have been addressed in Section 3.5 and 3.6 of [SUIT-ARCH]. Concern: With regard to the question, =E2=80=9C[d]o you have a documented= way to announce degradation?=E2=80=9D [RFC8280], [SUIT-ARCH] does not provide an= y mechanism to convey the degradation to either the author or the device operator. Recommendation: We recommend that [SUIT-ARCH] recommend that degradation is made apparent to the operator. Concern: With regard to the question, =E2=80=9C[d]o you have measures in = place for recovery or partial healing from failure?=E2=80=9D, Section 3.6 of [SUIT-ARCH] says that a recovery mechanism is optional. The lack of a recovery mechanism will render the device inoperational in case an update fails; this aspect is especially important in the case of constrained devices where communication about the failure of the update may not always be apparent to the operator. Recommendation: Instead of making the recovery mechanism optional, we suggest that the firmware architecture recommend or mandate the inclusion of a recovery mechanism to ensure high reliability of the devices in case the update fails. # Integrity ([RFC8280], section 6.2.16) Integrity concerns mentioned have been adequately addressed in the Section 3.3 of the [SUIT-IM]. # Authenticity ([RFC8280], section 6.2.17) Authenticity concerns have been adequately addressed in the Section 3.3, in particular, the subsections 3.3.5, 3.3.6 of [SUIT-IM]. # Outcome Transparency ([RFC8280], section 6.2.12) Whenever possible, the fact whether a update has been successful or unsuccessful should be conveyed to the device operator. In case of update failure, an error description should be provided. The status tracker, described in Section 2 of [SUIT-ARCH] as offering device management functionalities and update progress tracking, can serve this function. However, its mechanism is not sufficiently clear in the drafts. The coordination between status tracker and communicator has been mentioned in Section 3.10 of [SUIT-ARCH], but the mechanism has not been elaborated on. # Others After going through the drafts, we found no concerns for Heterogeneity Support ([RFC8280], section 6.2.8) since the architecture makes little or no assumptions about the devices or transport of the firmware image and manifest. Concerns in the following sections are out of scope: Connectivity ([RFC8280], section 6.2.1), Anonymity ([RFC8280], section 6.2.9), Pseudonymity ([RFC8280], section 6.2.10), Decentralization ([RFC 8280], section 6.2.13), Accessibility ([RFC8280], section 6.2.11), Content Agnosticism ([RFC8280], section 6.2.3), and Censorship Resistance ([RFC8280], section 6.2.6). #Additional suggestions Section 3.9 of [SUIT-ARCH] talks about multiple authorizations wherein an unnecessary distinction has been made between critical infrastructure and non-critical infrastructure. Even in non-critical infrastructure, operators would want to the ability to install updates according to their own preferences. In such scenarios, forced installations may violate user=E2=80=99s control of the device. Accordingly, we propose tha= t the device operator SHOULD have the authority to accept or reject firmware updates. References ---------- [RFC8280] ten Oever, N., Cath, C., =E2=80=9CResearch into Human Rights Pr= otocol Considerations=E2=80=9D, RFC 8280, October 2017, . [SUIT-ARCH] Moran, B., Meriac, M., Tschofenig, H., =E2=80=9CA Firmware Up= date Architecture for Internet of Things Devices=E2=80=9D, draft-ietf-suit-architecture-01, June 2018, . [SUIT-MF] Moran, B., Meriac, M., Tschofenig, H., =E2=80=9CA CBOR-based Ma= nifest Serialisation Format=E2=80=9D, draft-moran-suit-manifest-02, January 2018= , . [SUIT-IM] Moran, B., Tschofenig, H., Birkholz, H., Jimenez, J., =E2=80=9CFirmware Updates for Internet of Things Devices - An Information= Model for Manifests=E2=80=9D, draft-ietf-suit-information-model-01, June 2018, . [MF-MAIL] Moran, B., =E2=80=9C[Suit] [suit]: draft-moran-suit-manifest-02= =E2=80=9D, IETF Mail Archive, July 2018, Thanks to Mallory K., Amelia A., Niels t. and Sunil A. for their inputs. Regards, Gurshabad --iOPxMym9Hm3Q9D5hwBfkjmF0wQWPLzqnl-- --Gbpss3sAxMHeB20MlvRrDOH6ylt8kxaGV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJbRncIAAoJEK25f1/rm3wuwUIP/3d78rzmWCCUBqyn/mgasJlE iPR6KtsK6KKe+PfedQJKzeRxcycbHAK7xiqWQH9t5FOUQk8SHwy52OiYajiU/ooa 0z7ZcgRcBJ9wIk8/0y+uZDp0qtdh7XzHaXAZckWzP8uo/IottKyOPgPofdJ/sBY4 2+feIjHIOfCPuKPR5IfhnGMMTHxEiWPAA2UzNEIFK8fAGjvMlWTXcxuxvY1qWvqp SMx9ZnWXpAPRAYIQ1sqYJ1aIjKojKcEaUBHjM4v5UliDDzxW8mpICXhuZgvJaCkK dqK9O0kE8ZRaG23FhnTqQjQOdI28Q++Q/fkswlxyqjFxAPtTRxl4//Iuw3vQ0aug QR0DtzLkDQS6BmMKi2ev/zYc/3wTN6p+wMoLSuA8lUaVHZvvi4Yl+ZCfBy9Rg7UB qUdZd9HK6TPhnOJPoj3uXIPww4s9acB5/w3lkto7CQHvSnJoChpznO8xTlwf1CKb lJN0kRxbI8/bllYUPbIW9MsjTCNQGzacbTBT2wpDTdZp0TiikvP1Sh80fy72qH4L Y+D0ipkiR7GkK0YEpig2j7XtxoOQ3LqbViF1CGNAKoL1IoCouAUUvDYBqVCpMpss niTWhzSq7sBcZH5S0pEkP3RRTnBu6IP26N2hBRxQmRjQ2wG9M3XpbN8yMO8irAGu PqbiYDSb9vY2sfbikp05 =YSWB -----END PGP SIGNATURE----- --Gbpss3sAxMHeB20MlvRrDOH6ylt8kxaGV-- From nobody Wed Jul 11 15:07:54 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A18A130EAA for ; Wed, 11 Jul 2018 15:07:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.011 X-Spam-Level: X-Spam-Status: No, score=-2.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSfVZycWbTp3 for ; Wed, 11 Jul 2018 15:07:50 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0127.outbound.protection.outlook.com [104.47.34.127]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0ABC3130E73 for ; Wed, 11 Jul 2018 15:07:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PV1YKnJPNADYW1YOKVZcn3XnK5oCoZ+wqckOeHdckwc=; b=hLUkGfHS0KM9BNbGXeSmMd/frbVVA0du54bJksFMzhiREezCW/cqBqIPXU80+HDDZYZzUFKmwhFBcMN7IrtltsklwqTACvNLVU6FSCsYPhyvO0yUtWUCXlp+ztlbAvIa7Z2m+VY9S4EzDhU4fA81+go2amtwlQTN3qaAENrQQ/M= Received: from SN4PR2101MB0816.namprd21.prod.outlook.com (10.167.151.158) by SN4PR2101MB0880.namprd21.prod.outlook.com (10.167.151.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.6; Wed, 11 Jul 2018 22:07:39 +0000 Received: from SN4PR2101MB0816.namprd21.prod.outlook.com ([fe80::11f4:8db2:7397:4dc0]) by SN4PR2101MB0816.namprd21.prod.outlook.com ([fe80::11f4:8db2:7397:4dc0%9]) with mapi id 15.20.0952.017; Wed, 11 Jul 2018 22:07:39 +0000 From: Dave Thaler To: Gurshabad Grover , "suit@ietf.org" , "hrpc@irtf.org" CC: Sandeep Jha Thread-Topic: [Suit] HR Review: Firmware Update Architecture for IoT Devices Thread-Index: AQHUGV58Ovm/h+XLhU+7R6QhQ2qfPaSKi2iw Date: Wed, 11 Jul 2018 22:07:39 +0000 Message-ID: References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> In-Reply-To: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-07-11T22:07:05.5868444Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:9:cc7d:4400:7c36:a059] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN4PR2101MB0880; 7:wVvpNEHrzBcR4A0S93JF18sZeaRFt7wzQDAXD5DAIIPF3yqz/uTsnmZHdtyA2loZzYQGacP+Xe/oqj+1QntEaRfHXu1r1CbHxYby0ZES3v3iVfqZdSAbLM/8Rrn1kREaH/lCObHokk1iRW3xr9x63oXBje8LkSNtM2kHp17/KfmG3zKwNlgyU3zSm+e9+7N4d9itGmIXZ8Jt8rWkE0ixkx3QCrs9fMtU0DyD94RqXzZBru0Z/u6ZNCMMhJSy23x+ x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: f09316d9-4bba-4b11-7439-08d5e77ab76d x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7193020); SRVR:SN4PR2101MB0880; x-ms-traffictypediagnostic: SN4PR2101MB0880: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231311)(944501410)(52105095)(2018427008)(10201501046)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(6072148)(201708071742011)(7699016); SRVR:SN4PR2101MB0880; BCL:0; PCL:0; RULEID:; SRVR:SN4PR2101MB0880; x-forefront-prvs: 0730093765 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(366004)(396003)(39860400002)(136003)(189003)(199004)(99286004)(25786009)(14454004)(10090500001)(478600001)(2906002)(8990500004)(229853002)(15650500001)(33656002)(10290500003)(6116002)(68736007)(105586002)(97736004)(106356001)(53936002)(4326008)(6246003)(9686003)(5660300001)(6436002)(55016002)(7736002)(7696005)(305945005)(2501003)(2900100001)(11346002)(256004)(74316002)(5250100002)(8936002)(86612001)(2201001)(39060400002)(14444005)(102836004)(6506007)(76176011)(486006)(316002)(8676002)(110136005)(476003)(446003)(81166006)(46003)(186003)(22452003)(81156014)(86362001); DIR:OUT; SFP:1102; SCL:1; SRVR:SN4PR2101MB0880; H:SN4PR2101MB0816.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 80/dwGA67YJ51ee8lvlKB3kq6UfSDzWCYscRzuBP/PoTPBILwTJQUUlE+iU4z20Y3PAJA05RNWkrZ99IoQRTHBnLAqMlurNgWMIAh0u4x/48dKDI73UnrbL6/HpBR7jJB/9ewefbG/Rehqz2SBCgkTvwDHFAJmXh6coByN2JykXR0gJVYxwkREDU8fH7bP2rV4gArxL5CGnkK1vM7phSF+c0I823tB8sob3pfNc2xf1QrgKpWaS0U6IhZQ4hLgFlndSn6cGQXXkS4FC9GmDas2oLFtfg8+3jt034nteLpnw5XUvW+ldW8FnyGwPjbDVVNh/uMUWG87jHsq77yq1wHGogtg/Q4ZMcqAN24JDJfyg= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f09316d9-4bba-4b11-7439-08d5e77ab76d X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2018 22:07:39.0341 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN4PR2101MB0880 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 22:07:53 -0000 VGhhbmtzIEd1cnNoYWJhZC4NCg0KQSBjbGFyaWZ5aW5nIHF1ZXN0aW9uIGJlbG93Li4uDQoNCj4g IyBQcml2YWN5IChbUkZDODI4MF0sIHNlY3Rpb24gNi4yLjIpDQo+IFByaXZhY3kgY29uc2lkZXJh dGlvbnMgYXJlIHdpdGggcmVnYXJkcyB0byBtYWludGFpbmluZyB0aGUgY29uZmlkZW50aWFsaXR5 IG9mIGZpcm13YXJlIGltYWdlIGFuZCANCj4gbWFuaWZlc3QuIEJvdGggdGhlIGZpcm13YXJlIGlt YWdlIGFuZCBtYW5pZmVzdCBjb250YWluIGluZm9ybWF0aW9uIGFib3V0IHRoZSBkZXZpY2UuIEFz IG1lbnRpb25lZA0KPiBpbiB0aGUgb2xkZXIgdmVyc2lvbiBvZiB0aGUgZHJhZnRzLCBDbGFzcyBJ RCBhbmQgVmVuZG9yIElEIGFyZSB0eXBpY2FsbHkgY29tcGlsZWQgYXMgc3RyaW5ncyBpbnRvIHRo ZQ0KPiBmaXJtd2FyZSBpbWFnZS4gSWYgYW4gdW50cnVzdGVkIGludGVybWVkaWFyeSBzdG9yYWdl IGlzIGFzc3VtZWQsIGFzIGluIFtTVUlULUFSQ0hdLCB0aGlzIGRldmljZQ0KPiBpbmZvcm1hdGlv biB3aWxsIGJlIGF2YWlsYWJsZSB0byBhbGwgaW50ZXJtZWRpYXJ5IGFuZCBzbm9vcGluZyBwYXJ0 aWVzLCB3aGljaCBtYXkgdmlvbGF0ZSB0aGUgZGV2aWNlDQo+IG9wZXJhdG9y4oCZcyBwcml2YWN5 LiBBZGRpdGlvbmFsbHksIGRldmljZSBpbmZvcm1hdGlvbiBjYW4gYmUgdXNlZCBieSBhbiBhdHRh Y2tlciB0byBkZXNpZ24gYW5kIG1vdW50DQo+IHRhcmdldGVkIGF0dGFja3Mgb24gdGhlIGRldmlj ZS4NCj4NCj4gQ29uY2VybjogVGhlIGRyYWZ0cyBhcmUgaW5jb25zaXN0ZW50IGluIGl0cyByZWNv bW1lbmRhdGlvbiBvZiBlbmNyeXB0aW9uIG9mIGZpcm13YXJlIGltYWdlcy4NCj4gU2VjdGlvbiAz LjMuMTMgb2YgW1NVSVQtSU1dIHNheXMgdGhhdCB0aGUgaW5mb3JtYXRpb24gbW9kZWwgbXVzdCBl bmFibGUgZW5jcnlwdGVkIHBheWxvYWRzIHRvDQo+IHByZXZlbnQgdGhlIGF0dGFja2VycyBmcm9t IHJlYWRpbmcgdGhlIGNvbnRlbnQgb2YgdGhlIGZpcm13YXJlIGltYWdlcyB3aGVyZWFzIFNlY3Rp b24gMy4zIG9mDQo+IFtTVUlULUFSQ0hdIGxlYXZlcyB0aGUgY2hvaWNlIG9mIGVuY3J5cHRpb24g dG8gdGhlIGF1dGhvcnMvT0VNcy4NCj4NCj4gUmVjb21tZW5kYXRpb246IFdlIHJlY29tbWVuZCBy ZW1vdmluZyB0aGVzZSBpbmNvbnNpc3RlbmNpZXMsIGFuZCB0aGF0IHRoZSBkcmFmdHMgbWFuZGF0 ZQ0KPiB0aGUgZW5jcnlwdGlvbiBvZiB0aGUgZmlybXdhcmUgaW1hZ2UuIEFjY29yZGluZ2x5LCB3 ZSByZWNvbW1lbmQgdGhlIHJlbGV2YW50IHRleHQgb2Ygc2VjdGlvbg0KPiAzLjMgb2YgW1NVSVQt QVJDSF0gYmUgdXBkYXRlZC4NCg0KSSBiZWxpZXZlIHRoZSBhcmd1bWVudCBmb3IgaXQgbm90IGJl aW5nIG1hbmRhdG9yeSBpcyB0aGF0IG1hbnkgSW9UIGRldmljZXMgYXJlIG5vdCBhc3NvY2lhdGVk IHdpdGgNCmh1bWFucy4gIEZvciBleGFtcGxlLCBmYWN0b3J5IGRldmljZXMgYXJlIG93bmVkIGJ5 IHRoZSBmYWN0b3J5IG5vdCBhIGh1bWFuLiAgIENhbiB5b3UgZWxhYm9yYXRlDQpvbiB3aGF0IHRo ZSBjb25jZXJuIGlzIGZvciBzdWNoIGRldmljZXMgdGhhdCB3b3VsZCB3YXJyYW50IG1hbmRhdG9y eSBlbmNyeXB0aW9uPyAgIFlvdXIgY29tbWVudA0Kc2VlbXMgZm9jdXNlZCBvbiBkZXZpY2VzIGFz c29jaWF0ZWQgd2l0aCBodW1hbnMsIGFuZCBzbyBJIGNhbm5vdCB0ZWxsIHdoZXRoZXIgeW91ciBj b21tZW50DQphcHBsaWVzIG1vcmUgZ2VuZXJhbGx5IHRvIGFsbCB1c2UgY2FzZXMgdGhhdCBhcmUg aW4gc2NvcGUgZm9yIHRoZSBkcmFmdHMuDQoNCkRhdmUNCg== From nobody Wed Jul 11 16:50:52 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAF1B130E73 for ; Wed, 11 Jul 2018 16:50:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vBbrKScuf9LA for ; Wed, 11 Jul 2018 16:50:42 -0700 (PDT) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72A1A130E86 for ; Wed, 11 Jul 2018 16:50:42 -0700 (PDT) Received: by mail-io0-x233.google.com with SMTP id r24-v6so26128328ioh.9 for ; Wed, 11 Jul 2018 16:50:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=O3tcfoKoXG5faoMn07WbC/KYi1g9qyD04TGcXEU9I5w=; b=gktfBQDxHT4/DMC70WLdb7ugRSca7fiy3+fhpkgcNLw7/LIEbUN/o0b6AKGnSn92Cs +Qpkv7yuuaW//22rjQQOticxzf1LIbO5yLmkqH3aZzdP8JcSA7PDEgrkuG7HiQH4WUyq Sgs7Y6yuihz8oLiLCZV1q2EmBDSbzI/wIbvxw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=O3tcfoKoXG5faoMn07WbC/KYi1g9qyD04TGcXEU9I5w=; b=c4HT5GcMtgDz2u19XEf0W/czScIiOQoQcrH8O9nzViAFR2s/d3+SBgRWuC1LiUd/GE avttSb0uHylRUpu44c+NE2+pLtKGKVe2Q+z+f6eHYK5db3/y7gbNoqpBD7iyRg05sXc9 v5NP1juPTmsMiRlg055gndeCdWPBUiLhIDUM9Pcj3cLFE0MT+YIpOC/R3MQ8b6Gd+izT 98G+P1T8sZdBfFU+DwYcR1liaUvC45QhBtktc7klcByF4HWaYSBuz3yhqmSDSINbGJxj l5z1JFLhAX1XpNM1uPJLqaFnsmCZSAnKHigdbCCayhiLnteH2Ai6GPlFDcsVTYNTrbwR mMYQ== X-Gm-Message-State: AOUpUlEB9T2849yHPKwW3oEu1aO7PWCJGI6L2WXdGgYqatSQXvnhMC1V zzrNXtJ2G6rGixX4OCPkr4vNb/FO67w= X-Google-Smtp-Source: AAOMgpepwT5Fx1HMHeLaI2Cp/LVNxIio31lZs0DifNz8RtQsKaVEpwRIpHuTWcm5OHzEXDoGwiTgwQ== X-Received: by 2002:a6b:e52:: with SMTP id 79-v6mr844025ioo.658.1531353041525; Wed, 11 Jul 2018 16:50:41 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id e11-v6sm3567874iog.56.2018.07.11.16.50.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jul 2018 16:50:40 -0700 (PDT) Date: Wed, 11 Jul 2018 17:50:39 -0600 From: David Brown To: Dave Thaler Cc: Gurshabad Grover , "suit@ietf.org" , "hrpc@irtf.org" , Sandeep Jha Message-ID: <20180711235039.GA20649@davidb.org> References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 23:50:46 -0000 On Wed, Jul 11, 2018 at 10:07:39PM +0000, Dave Thaler wrote: >Thanks Gurshabad. > >A clarifying question below... > >> # Privacy ([RFC8280], section 6.2.2) >> Privacy considerations are with regards to maintaining the confidentiality of firmware image and >> manifest. Both the firmware image and manifest contain information about the device. As mentioned >> in the older version of the drafts, Class ID and Vendor ID are typically compiled as strings into the >> firmware image. If an untrusted intermediary storage is assumed, as in [SUIT-ARCH], this device >> information will be available to all intermediary and snooping parties, which may violate the device >> operator’s privacy. Additionally, device information can be used by an attacker to design and mount >> targeted attacks on the device. >> >> Concern: The drafts are inconsistent in its recommendation of encryption of firmware images. >> Section 3.3.13 of [SUIT-IM] says that the information model must enable encrypted payloads to >> prevent the attackers from reading the content of the firmware images whereas Section 3.3 of >> [SUIT-ARCH] leaves the choice of encryption to the authors/OEMs. >> >> Recommendation: We recommend removing these inconsistencies, and that the drafts mandate >> the encryption of the firmware image. Accordingly, we recommend the relevant text of section >> 3.3 of [SUIT-ARCH] be updated. > >I believe the argument for it not being mandatory is that many IoT devices are not associated with >humans. For example, factory devices are owned by the factory not a human. Can you elaborate >on what the concern is for such devices that would warrant mandatory encryption? Your comment >seems focused on devices associated with humans, and so I cannot tell whether your comment >applies more generally to all use cases that are in scope for the drafts. In addition, the range of devices covered by these drafts include those with insufficient capabilities to support encryption. It is also unclear how it would be possible to not present class and vendor information in plain text somewhere. The systems involved in the software upgrade process need to be able to know what firmware image to look at, presumably this will be indexed by these values, or something equivalent. Even if the image were encrypted, it would be clear from where the image is coming from what device it applies to. The intention of encrypting the information is to protect the firmware author, and I'm not sure that it addresses privacy concerns about the image. David From nobody Wed Jul 11 16:58:19 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E1C1130E73 for ; Wed, 11 Jul 2018 16:58:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WUusfg7BPXAK for ; Wed, 11 Jul 2018 16:58:15 -0700 (PDT) Received: from mail-io0-x234.google.com (mail-io0-x234.google.com [IPv6:2607:f8b0:4001:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 585F5124BE5 for ; Wed, 11 Jul 2018 16:58:15 -0700 (PDT) Received: by mail-io0-x234.google.com with SMTP id q9-v6so26158647ioj.8 for ; Wed, 11 Jul 2018 16:58:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=drRegDy4OFUpsNmKYxmVMCQ3m5/kPTjocdXhM6i5v70=; b=Ol6MO9O6l1Vz8gTD6Mde3QuBM+rR1+jEsb20ehGIStx9O38KHeDI8/FxmkUc1DHSi/ 7DZBO8EPtPDuU8n3wUbLkKzHyWFJuJ+gJZ47uJhXtW1yoRxw2A/Ji4+GBorBDWtBK/Es jO3G3Apvoa57uykM832HqcRHtbc+kPxWKeedc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=drRegDy4OFUpsNmKYxmVMCQ3m5/kPTjocdXhM6i5v70=; b=IOIy8snE2th7hwGPW7vn/FHG766sKbNrNBL2q0nW54gj0sqcNUx7GH3LNKCY9ctDfc fwxlD6cmx6vZ/tmYRUQDRy5Zmdx8wI6B+uK1YbRLobv2tigpn1Qw3iya/A1/tRrc+TTQ Xnzt4ef0Gi0PcHpaiFNdS/3tHT1FRN+MuAKsROgwyOLmu1XKC3hJh/q66YLKO+szq/Jh FLLCPIHtUL/fbfYnDt38xSZzf/r7no4Ay9KP7AQ8mnm+VwdvNBkfqNmA8ZjS/boqkL2L S/aAbHRx4nYiOleaixBRZdeujDlEi6kvVWpnCi7I8ib8Cs9aEyzDQ2LpvFBJH3vrtmxE lWRg== X-Gm-Message-State: AOUpUlEF2zPd53vp/tRLdE6Dl9U6vJsHSXBSB5b+FcoYlrmyhfpm4EVu 0AUm8NcrXSN08l8XEF3c/6vwPiVvU+I= X-Google-Smtp-Source: AAOMgpcYb8Nv8NxmwI6IBFgxRp2MuzK9Vaax4YdvPq6n1pgTl6T/Twan2YAtrFSl2Mg4mO1+wk9RWA== X-Received: by 2002:a5e:df42:: with SMTP id g2-v6mr903555ioq.327.1531353494599; Wed, 11 Jul 2018 16:58:14 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id r20-v6sm5642213iog.85.2018.07.11.16.58.13 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 11 Jul 2018 16:58:14 -0700 (PDT) Date: Wed, 11 Jul 2018 17:58:12 -0600 From: David Brown To: Gurshabad Grover Cc: suit@ietf.org, hrpc@irtf.org, Sandeep Jha Message-ID: <20180711235812.GB20649@davidb.org> References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Jul 2018 23:58:18 -0000 On Thu, Jul 12, 2018 at 03:00:48AM +0530, Gurshabad Grover wrote: >#Additional suggestions > >Section 3.9 of [SUIT-ARCH] talks about multiple authorizations wherein >an unnecessary distinction has been made between critical infrastructure >and non-critical infrastructure. Even in non-critical infrastructure, >operators would want to the ability to install updates according to >their own preferences. In such scenarios, forced installations may >violate user’s control of the device. Accordingly, we propose that the >device operator SHOULD have the authority to accept or reject firmware >updates. This depends a lot on who the device operator is referring to. From a security perspective, the vendor may wish to make certain types of security updates mandatory. As stated earlier, for devices say in a factory, or installed on a water meter, it is unclear who the device operator is. An organization installing water meeting IoT devices is unlikely to allow the individual consumers of water to have any authority as to whether firmware is installed. Realistically, calling this mandatory in the spec would mostly just result in that criteria of the spec being ignored. One challenge with SUIT, in general, is that those producing these end-use devices have little motivation to comply with the spec. The benefits gained to them are resources (such as reference code) and infrastructure that wouldn't have to be implemented. They have little reason to not modify any behavior of the code that doesn't suit their own requirements. Although there may be good reasons to desire that decisions like this be granted to certain parties, the SUIT documents have little authority for enforce them. David From nobody Wed Jul 11 22:57:40 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A432B130E54; Wed, 11 Jul 2018 22:57:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 972jmA4QmSju; Wed, 11 Jul 2018 22:57:28 -0700 (PDT) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E76E7130E0F; Wed, 11 Jul 2018 22:57:27 -0700 (PDT) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1fdUbV-0006s6-QC; Thu, 12 Jul 2018 07:57:26 +0200 To: David Brown , Dave Thaler Cc: "suit@ietf.org" , "hrpc@irtf.org" , Sandeep Jha References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> <20180711235039.GA20649@davidb.org> From: Gurshabad Grover Openpgp: preference=signencrypt Autocrypt: addr=gurshabad@cis-india.org; keydata= xsFNBFriroIBEADfyDpCD8eborMUMXKtZzjo4t2KzrAlUVYgE/TFtrwUP+4Xw4dzakDIzST8 sVYmlXIWhM5NBBTZSQ190vsxrkbi0xxLcXYM2olZEtqkJ8zONZeZLBeGvcfMymtHqD4jHwYb Zm7OXnS45fWDL+HOoMP/VCwEn098rYfnllIkYQD1Gc28Ig+ywjGg8y5p0qMmmmhm2ckgLjnG MJX8t273MSc8wsn/UYH922yif3MQXmrzqgnRl9hRzf90SKqAw38bw7wccb55pIItloKYsi0r zYBKJSOPXn91Z21TpOSTy21M0MZYEAlDn1zeea+q8TggfHNWxOXoKrIm1pqZFRz0k+8i2siJ AHf8bRm/fhukA6szZ6b2nNPxjkAmOv9zvGu6RZGbmeLvQYVBSSnZ67ayZrkKwn7KIyAV6hQM /bVnD8eEZ2tZ0S8lxoZFYSNeMGt2b6WelFZO97/LbjxaJUHd9K8g5H0MwqN1NXoBxRwllVRC 3sVHVoWTBqnKo8qplzvQEAto69PpvuxxKTOFEJeQqmn1b/fo3sLRb4YiIg8Ax+Np7Huzzjk6 vKKgpIwIN7yEUj/ReWi/UA/W4wSg3XkcqTf7h73crnN/1At0PdgozbDV2UbcApaldStP4DfG UiQl0/7MiYLKapDDuSahmoeH3xrNnrzS9BAfuGHezzDbMyPLXQARAQABzSpHdXJzaGFiYWQg R3JvdmVyIDxndXJzaGFiYWRAY2lzLWluZGlhLm9yZz7CwX0EEwEIACcFAlriroICGyMFCQlm AYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQrbl/X+ubfC7/bQ//YQv7zqQE433xxsN/ 3GYKoOFccBy3WvV4DxrTskJ3n3k5lfcZolbc8TQksQOTzyerNt2ZA7fsGZa7eFSW+xR4Yq3/ C9o+5FOoHGhyZhb+x17MILhmyvyUNSj7SdKrRISgurMbV2Vv8LxmTcdrK6CdFF6JLH+opzU1 NlRKwZqROPgbYZEB2QFIUbGfgh2I5AXNyV2XbT7fagfkHk+v9AUV7POP2H1+AZ1xq6iFTm2o 9ufNZsp2bInsDohcVBKC3aH2cnFMjvIXpNoUOx8vb5A2xW0aBUTTJDB/uZw53WOg3kehrCNb ZkML3FnDZLRuu1e8DSWmwk5YIoDzt5bMCgfUwb0C6Q+JuM8lC+8CEEa9qamLc+fhvFAzcrWp VWuSaVeLdhe5NxmtlRYNZdGuKy6sRHjwsEWlwzRylhm74fiDR3aA1eIFsfmYLd4z+i1Fp23Y dHJf7/Gor2CmOxphog9DEA9WCuORXfx4De7hoMKwW4gWKw1A8B12Cv4EOkXmCsWsOnfDEarr 2Yl6elxkhQRfKjAesXb0cezRzZgwsWIsbeYsuWFF7Xi6IzUJ27lxU3p5PcyY8O8aDYOn+pu0 YFJ7s3u2VRRgptVZJmkcN3WTApXSHY8fGl5xAakM/bqFJj9uj5zlMnFN2EplC6/mQkfYfy2f siaGTP/GQV4OSuOeuMLOwU0EWuKuggEQAJ4lAzB72gHw4+rbyxmQNNVmvgYVZPjFtO/MQdYi x1QwRP/gxxqPqTd/ZwQvmPGzXRKw10B7uKSRk6YP12+IG0mXJwHGp9q5CWJE0XNGqX3UWbAc KIzxqPNpsf8e6Bv7jdW0YwLBxJ+RW0NNL6uAxz0sr2frbnS+EZB3cU+zOZzp/9YfTUZO2lxF NzgJoErKe/HLp7aBeJXBBcwO0LQlIT80rTZx2KihBa/Ww/y9E9gV/HacJu/Ncb6E/G3e4xGj 9w9L+UW43q01wy+FSUKy9FLc7D40WqQsj8SXZEpl84SyLcJRoX3mtj59bX2SAN2VB2BAksTu qCh00IcIUGfyHziu5PwUWYM96gOhDSocP4wSeiQ8TwLzaffllz2qhdI296a9lCIYIeWVytEd NU9jJ3RbzXAgE0pnDauNXDaQv1FS5jYi8rlslJUxKnrS69BFNjM5RqQ16Cm0C4rKL7/a8wHC r4VjcjSCM8Lzv8YOOitJ9Yt4Y8SVfO5s3YvxcdSr56nX0W3B1kGbG1GpqWTzOgXzGF5bIsbV 7SPecwUs9ShvmLmZzDUxIQ68n4zj3lMZn5I+pP+Ew6nAAiuSmKdr5cygnCH/NVJzil07t+X4 uR6oKHBhuMFYF1c6Wxk36m+EZz5ZHFaT4rN0WDIJdAEqRzD0Z56V6ansDF8y+ksh0SHlABEB AAHCwWUEGAEIAA8FAlriroICGwwFCQlmAYAACgkQrbl/X+ubfC50rhAAloTaq/fZC1gtiVtU wOB+00gEkjgmzt+rLkW+l2EySTST7tje57W83UZwzCX746B2O//Bqardxz9R1Vr0VFiwHA8g 3qeBqPqiv1WoQch/iZ5d/1MxK4A9xDag1uyqLR8RuGlZ8lATmcP3IabKiuiBV4MlFZ7V2Ib6 5ToPf28xxSyjMzTjQObIG0e009uHlu2z+iQVshLyoyVVAOWWa88D6iuBDC/EtBRjlpjLAjuR YhWVYX6KHdVUijKMHN2RqjpX5O2wPL7NcMY/wsTq7EteUeI75hxFvargRXkEt1XR8t52LC0u IE2OjpzY5re/ROUbfsqL8trjAOrSJ+Fx5H8AYl9JaoVxohhxDZgNtgNtPbh/8Nnlf9daj/bh lZcTBO98XLQwMnyHGPdyhIodpWPq2C09Ys3TkQsbcdMMB1pqnEK5Vz1zIKkEEX7QVsLdrz7C 2CFsauc/9PHj+4njCHslXtzBOiVu5FXTnbCwPrLJs5iEUkUCb6qtE/2mSCTrAanzOTTOmqiM cnNTI1Tj0ht462S9VypppQnKCv8shGxXG7BadZTv+pNCA/WfB2kk1sS3ZwB0wBWX4p41fxs+ ArM9ew2SzQ/vBrEfO7ljPfZZmBqH4t/vgAZBnOtTxCGlPEIJqiMqtGHRqIqpiR20QfxEUuXI MfMfa9QJpisdNmqoUyc= Message-ID: Date: Thu, 12 Jul 2018 11:27:23 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <20180711235039.GA20649@davidb.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="5kIwHbsoyG4SPmgE7x8ftcOPUeVL2Za39" X-Virus-Scanned: by clamav at smarthost1.samage.net X-Scan-Signature: 9484ae446d4f83cee8bf28db5146d16c Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 05:57:32 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --5kIwHbsoyG4SPmgE7x8ftcOPUeVL2Za39 Content-Type: multipart/mixed; boundary="KqBvltYsfTLPLXKHLJhYcIyAb8fimHECm"; protected-headers="v1" From: Gurshabad Grover To: David Brown , Dave Thaler Cc: "suit@ietf.org" , "hrpc@irtf.org" , Sandeep Jha Message-ID: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> <20180711235039.GA20649@davidb.org> In-Reply-To: <20180711235039.GA20649@davidb.org> --KqBvltYsfTLPLXKHLJhYcIyAb8fimHECm Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi, Thank you both for your responses and the examples. In light of those, my thoughts on the encryption recommendation are given below. Also some comments in-line. Overall, I think the requirement level of encryption of firmware image is not sufficiently clear in the drafts. The ambiguity makes it seem like it is truly OPTIONAL, i.e. it expresses no preference for encryption. In my opinion, there is a privacy and security advantage in encrypting the firmware image. Accordingly, the drafts should use the word "SHOULD" or "RECOMMENDED" for it, which would imply that "there may exist valid reasons in particular circumstances to ignore [it], but the full implications must be understood and carefully weighed before choosing a different course." [RFC2119] An alternative may be to demarcate the requirement level based on whether the target device supports decryption. But, my suspicion is that this may lead to tricky grounds elsewhere. On Thursday 12 July 2018 03:37 AM, Dave Thaler wrote: > I believe the argument for it not being mandatory is that many IoT devi= ces are not associated with > humans. For example, factory devices are owned by the factory not a hu= man. Can you elaborate > on what the concern is for such devices that would warrant mandatory en= cryption? Your comment > seems focused on devices associated with humans, and so I cannot tell w= hether your comment > applies more generally to all use cases that are in scope for the draft= s. Thanks, Dave. I completely agree with you in that the privacy concern is more pertinent for devices directly associated with humans (which I understand are also in the scope of the drafts). The concern is less pressing for devices in (say) a factory, where only the security concern may be applicable, i.e. unintentional exposure of device information (including version) to observers and eavesdroppersmay increase the facility's susceptibility to attacks. On Thursday 12 July 2018 05:20 AM, David Brown wrote: > In addition, the range of devices covered by these drafts include > those with insufficient capabilities to support encryption. Thanks, David. I agree.Hope the clarification suffices. I'm thinking about the other questions you posed, and will try to get back soon. Gurshabad --KqBvltYsfTLPLXKHLJhYcIyAb8fimHECm-- --5kIwHbsoyG4SPmgE7x8ftcOPUeVL2Za39 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJbRu3DAAoJEK25f1/rm3wuMuYP/RnZDBUViQo9+o1gAifJ2nxN t6t7ZmdkmuQqSj1K8XLN8KmcIcE6fOGw+56owq3Fwy5S5tfrw9uhKsUuHJQFxU11 zj2Vxbgd4Id3s/SlNt6iGeQRqmKRiJiNg8w3/akcMf8LygRJ04Q5ClnDn19zpY+n hm0Z7rANGf4EJAx0Rtv5GBKeow9uSaOCVlNPymXmzLXiGYV2QTGIBZ4ea4CUKWOH ycoHSpIIBbEDgF7l848pW8CByPtuEcd3xuSkYY4in5+s24abD2zImA7lXi/N/1Xq +lcVBvHeU+Qbm1SS4oGIqrRLrfZ+RbzLAyKz4tnN59Yx5VkYQ0ZKpCFzm0pDwCIu UDMmeTXM99LJqKGQPyRzUNd7F5lVcqUWjB/8aA99vwoGdkPRjw7oN2Gv+KQefbhc h/b1cVTRUdHiPkCuJJYBF3PHpEvFCs0KoSqj2eK9M525KRgSv8yf96WoKhDhopJx nWz4LqFK59qe2+FlqQpBd8UbOl3sB3Yy5OdUCMwanuJ70rwhpuxwggGBoxnsyPEf bFdJGfygBkGBb6J/TiXbo9rOSVyxwRSv/HNRRZswAyP3g5R0ZWcZInzo+PD49ptl Z5EWwxF2TQBGd5Zyn6zt146vnO4b+2cwxtdS8I+AqwNvhdKBtm7J2vUh3gWpRIpF vpMydfV3/1Gnxey9/Zrm =xC8u -----END PGP SIGNATURE----- --5kIwHbsoyG4SPmgE7x8ftcOPUeVL2Za39-- From nobody Thu Jul 12 01:35:37 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA2BE130ED0 for ; Thu, 12 Jul 2018 01:35:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.021 X-Spam-Level: X-Spam-Status: No, score=-1.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z-xx-M0YNc9z for ; Thu, 12 Jul 2018 01:35:33 -0700 (PDT) Received: from ironport01.nordicsemi.no (mx01.nordicsemi.no [194.19.86.146]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 830C612F1A2 for ; Thu, 12 Jul 2018 01:35:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=5990; s=default; t=1531384532; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=5K4fPZ6FVW4utBA3CXncl7giKlTrQavJAVxuZnBh+DQ=; b=bFSw6pSmgV56NCY5sRMTEUXiNHU9aItufNgdjeaKh5p4a5PgGEI8LfyM 1bdMIm20PumDH2TDHs9O5nDdLhgSybdQLBvraVsu5IBxceugzfsJxN5tJ SJdHTrBhE6f8euunVMqQ+FSgSuAYNALqeRN9EjtKypmm8+HedHC/6+NaX o=; X-IronPort-AV: E=Sophos;i="5.51,342,1526335200"; d="scan'208";a="11311932" From: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= To: David Brown , =?utf-8?B?UsO4bm5pbmdzdGFkLCDDmHl2aW5k?= CC: Hannes Tschofenig , suit , Brendan Moran Thread-Topic: [Suit] [suit]: draft-moran-suit-manifest-02 Thread-Index: AQHUExHtnaLT8k9ra0yYs7g0XR6lpaSKWGZX///exYCAAQNVoA== Date: Thu, 12 Jul 2018 08:35:29 +0000 Message-ID: References: <790d40b227034bd784185bd9bdd52f4f@nordicsemi.no> <20180711174726.GB8918@davidb.org> <20180711174847.GA30365@davidb.org> In-Reply-To: <20180711174847.GA30365@davidb.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 08:35:36 -0000 R2xhZCB0aGUgbWVhbmluZyBzdW5rIGluLiBJIHRoaW5rIHdlIGdldCBpbnRvIHNvbWUgc21hbGwg cHJvYmxlbXMgYnkgY3JlYXRpbmcNCm5hbWVzIHRoYXQgYXJlbid0IHNlbGYtZXhwbGFuYXRvcnku IEVzcGVjaWFsbHkgaWYgdGhleSBhcmUgZHVwbGljYXRlZCBhbmQvb3INCnJlcHJlc2VudGVkIGlu IGEgZmV3IGRpZmZlcmVudCB3YXlzIGluIHRoZSBmb3JtYXQuDQoNCldlIGFncmVlIHRoYXQgd2Ug Y291bGQgcGxhY2UgdGhlIHRleHRSZWZlcmVuY2UgaW4gdGhlIG1hbmlmZXN0IHNvIHRoYXQgd2Ug a25vdyANCndoYXQgdG8gZGlzY2FyZCBhdCBhIGxhdGVyIHN0YWdlLiBJdCB3aWxsIG1ha2UgaXQg ZWFzeSBmb3IgYSBzaW1wbGUgYm9vdGxvYWRlciANCnRvIGRvIHRoZSBpbmZvcm1hdGlvbiBzZXZl cmluZywgaWYgaXQgb25seSBuZWVkcyB0byBrZWVwIHRoZSBzaWduYXR1cmUgYW5kL29yIA0KbWFu aWZlc3QgYWZ0ZXIgdGhlIHVwZGF0ZS4uLg0KDQpJJ3ZlIHJld3JpdHRlbiB0aGUgaW5pdGlhbCBp ZGVhIGJ5IMOYeXZpbmQgZm9yIHNldmVyYWJpbGl0eSB3aXRoIHRoZSANCnRleHRSZWZlcmVuY2Ug IChub3cgbmFtZWQgdGV4dERpZ2VzdCkgaW4gdGhlIG1haW4gbWFuaWZlc3QuIEkndmUgYWxzbyBy ZW5hbWVkIA0KdGhlIHByb2Nlc3NSZWZlcmVuY2UgdG8gYmUgdXBkYXRlUHJvY2Vzc0RpZ2VzdC4g U3RhdGluZyBkaWdlc3QgaW4gdGhlIGluc3RhbmNlIA0KbmFtZSBtYWtlcyBpdCBlYXNpZXIgZm9y IGh1bWFucyB0byBwYXJzZSBJTUhPLg0KDQoNCjsgRXhhbXBsZSBvZiBleHRyYWN0aW5nIGxvbmct bGl2ZWQgaW5mb3JtYXRpb24gc28gaXQgY2FuIGJlIHN0b3JlZCB3aGlsZSANCjsgc2hvcnQtbGl2 ZWQgcHJvY2Vzc2luZyBpbmZvIGlzIGRpc2NhcmRlZC4NCiANCkF1dGhlbnRpY2F0ZWRNYW5pZmVz dCA9IFsNCiAgYXV0aGVudGljYXRlZE1hbmlmZXN0OiBDT1NFX01hYyAvIENPU0VfU2lnbiwNCiAg dXBkYXRlUHJvY2VzczogICAgICAgICBic3RyIC5jYm9yIFVwZGF0ZVByb2Nlc3MsDQogIHRleHQ6 ICAgICAgICAgICAgICAgICAgYnN0ciAuY2JvciBUZXh0TWFwLA0KXQ0KIA0KVXBkYXRlUHJvY2Vz cyA9IFsNCiAgbm9uY2UgOiAgICAgICAgICAgICAgYnN0ciwNCiAgcHJlQ29uZGl0aW9ucyA6ICAg ICAgWyAqIFByZUNvbmRpdGlvbiBdLA0KICBkaXJlY3RpdmVzIDogICAgICAgICBbICogRGlyZWN0 aXZlIF0sDQogIHJlc291cmNlcyA6ICAgICAgICAgIFsgKiBSZXNvdXJjZUluZm8gXSwNCiAgcHJv Y2Vzc29ycyA6ICAgICAgICAgWyAqIFByb2Nlc3NpbmdTdGVwIF0sDQogIHRhcmdldHMgOiAgICAg ICAgICAgIFsgKiBUYXJnZXRJbmZvIF0sDQogIGV4dGVuc2lvbnMgOiAgICAgICAgIHsgKiBpbnQg PT4gYnN0cn0NCl0NCiANCk1hbmlmZXN0ID0gWw0KICBtYW5pZmVzdFZlcnNpb24gOiAgICAgMSwN CiAgZGlnZXN0SW5mbyA6ICAgICAgICAgIERpZ2VzdEluZm8sDQogIHNlcXVlbmNlIDogICAgICAg ICAgICBTZXF1ZW5jZU51bWJlciwNCiAgcG9zdENvbmRpdGlvbnMgOiAgICAgIFsgKiBQb3N0Q29u ZGl0aW9uIF0sDQogIHVwZGF0ZVByb2Nlc3NEaWdlc3QgOiBic3RyLA0KICB0ZXh0RGlnZXN0IDog ICAgICAgICAgYnN0cg0KXQ0KDQoNCkknbSBzdGlsbCBhIGJpdCBjdXJpb3VzIHdoeSBEaWdlc3RJ bmZvIG5lZWRzIHRvIGJlIHNwbGl0IGF3YXkgZnJvbSB0aGUgZGlnZXN0cy4NCkkgd291bGQgbGlr ZSB0byBzdXBwb3J0IG11bHRpcGxlIGRpZ2VzdC10eXBlcyB0aHJvdWdoIGEgbWFuaWZlc3QgYW5k IEkgd291bGQNCm5hdHVyYWxseSBhc3N1bWUgdGhlIHNhbWUgbWV0aG9kb2xvZ3kgYXMgdGhlIFRM UyBzdGFuZGFyZCAtIGkuZS4gcHJlcGVuZGluZyB0aGUgDQpkaWdlc3QgdHlwZSB3aXRoIHRoZSBk aWdlc3QgKGVudW0gKyBkaWdlc3QgY29udGVudCkuIEl0IGV2ZW4gYWxsb3dzIGZvciBhIFRWIA0K ZW5jb2Rpbmcgb2YgdGhlIGRhdGEgaW5zdGVhZCBvZiBUTFYgKGlmIG5lZWQgYmUpLiBJJ20gbm90 IGFyZ3VpbmcgYWdhaW5zdA0KcmVtb3ZpbmcgdGhlIERpZ2VzdEluZm8gc3RydWN0dXJlLCBpbiBj YXNlIHRoZXJlIGlzIGEgbmVlZCBmb3IgcGFyYW1ldGVyIGRhdGEuIA0KQnV0IEkgdGhpbmsgdGhl cmUgc2hvdWxkIGJlIGxpdHRsZSBwZW5hbHR5IGNoYW5naW5nIHRoZSBkaWdlc3RJbmZvICBpbiB0 aGUgDQptYW5pZmVzdCB0byBhbiBhcnJheSBvZiBEaWdlc3RJbmZvcywgYW5kIHVzaW5nIGFuIGVu dW0vaW50IGlkZW50aWZpZXIgdG8gDQpyZWZlcmVuY2UgYmV0d2VlbiB0aGUgZGlnZXN0cyBhbmQg dGhlIERpZ2VzdEluZm8uLi4NCg0KDQpSZWdhcmRzDQpGcmFuayBBdWR1biBLdmFtdHLDuA0KDQoN Cj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogU3VpdCBbbWFpbHRvOnN1aXQt Ym91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIERhdmlkIEJyb3duDQo+IFNlbnQ6IDExLiBq dWxpIDIwMTggMTk6NDkNCj4gVG86IFLDuG5uaW5nc3RhZCwgw5h5dmluZCA8T3l2aW5kLlJvbm5p bmdzdGFkQG5vcmRpY3NlbWkubm8+DQo+IENjOiBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbT47IHN1aXQgPHN1aXRAaWV0Zi5vcmc+Ow0KPiBCcmVuZGFuIE1vcmFu IDxCcmVuZGFuLk1vcmFuQGFybS5jb20+DQo+IFN1YmplY3Q6IFJlOiBbU3VpdF0gW3N1aXRdOiBk cmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LTAyDQo+IA0KPiBTb3JyeSwgbW9zdCBvZiB0aGlzIGNh biBiZSBpZ25vcmVkLCBhcyBJIG1pc3NlZCB0aGUgcHJvY2Vzc1JlZmVyZW5jZSBmaWVsZCBpbiB0 aGUNCj4gTWFuaWZlc3QuICBJIHdvdWxkIHN0aWxsIHN1Z2dlc3QgcHV0dGluZyB0aGUgdGV4dFJl ZmVyZW5jZSBpbiB0aGUgTWFuaWZlc3QgYXMgd2VsbA0KPiBzbyB0aGF0IGl0IGRvZXNuJ3QgcmVx dWlyZSBhcyBkZWVwIG9mIG5lc3RpbmcgdG8gdmVyaWZ5IHRoZSB0ZXh0Lg0KPiANCj4gRGF2aWQN Cj4gDQo+IE9uIFdlZCwgSnVsIDExLCAyMDE4IGF0IDExOjQ3OjI2QU0gLTA2MDAsIERhdmlkIEJy b3duIHdyb3RlOg0KPiA+T24gRnJpLCBKdWwgMDYsIDIwMTggYXQgMDE6NTA6MzhQTSArMDAwMCwg UsO4bm5pbmdzdGFkLCDDmHl2aW5kIHdyb3RlOg0KPiA+DQo+ID4+QXV0aGVudGljYXRlZE1hbmlm ZXN0ID0gWw0KPiA+PiAgYXV0aGVudGljYXRlZE1hbmlmZXN0OiBDT1NFX01hYyAvIENPU0VfU2ln biwNCj4gPj4gIHVwZGF0ZVByb2Nlc3M6ICAgICAgICAgYnN0ciAuY2JvciBVcGRhdGVQcm9jZXNz LA0KPiA+PiAgdGV4dDogICAgICAgICAgICAgICAgICBic3RyIC5jYm9yIFRleHRNYXAsDQo+ID4+ XQ0KPiA+DQo+ID4+VXBkYXRlUHJvY2VzcyA9IFsNCj4gPj4gIG5vbmNlIDogICAgICAgICAgICAg IGJzdHIsDQo+ID4+ICB0ZXh0UmVmZXJlbmNlIDogICAgICBic3RyLA0KPiA+PiAgcHJlQ29uZGl0 aW9ucyA6ICAgICAgWyAqIFByZUNvbmRpdGlvbiBdLA0KPiA+PiAgZGlyZWN0aXZlcyA6ICAgICAg ICAgWyAqIERpcmVjdGl2ZSBdLA0KPiA+PiAgcmVzb3VyY2VzIDogICAgICAgICAgWyAqIFJlc291 cmNlSW5mbyBdLA0KPiA+PiAgcHJvY2Vzc29ycyA6ICAgICAgICAgWyAqIFByb2Nlc3NpbmdTdGVw IF0sDQo+ID4+ICB0YXJnZXRzIDogICAgICAgICAgICBbICogVGFyZ2V0SW5mbyBdLA0KPiA+PiAg ZXh0ZW5zaW9ucyA6ICAgICAgICAgeyAqIGludCA9PiBic3RyfQ0KPiA+Pl0NCj4gPg0KPiA+VGhl IHRleHRSZWZlcmVuY2UgaGFzIHRvIGJlIGluIHRoZSBNYW5pZmVzdCB0aGF0IGlzIGNvdmVyZWQg YnkgdGhlDQo+ID5zaWduYXR1cmUuICBBcyBzdGF0ZWQgaGVyZSwgbm9uZSBvZiB0aGUgdXBkYXRl UHJvY2VzcyBvciB0ZXh0DQo+ID5pbmZvcm1hdGlvbiBpcyBjb3ZlcmVkIGJ5IGEgc2lnbmF0dXJl Lg0KPiA+DQo+ID5UaGlzIGNvdWxkIGJlIGRvbmUgYnkgbW92aW5nIHRleHRSZWZlcmVuY2UgYWJv dmUgaW50byB0aGUgTWFuaWZlc3QsIGFzDQo+ID53ZWxsIGFzIGFkZGluZyBhbiB1cGRhdGVQcm9j ZXNzUmVmZXJlbmNlIHRoYXQgd291bGQgY29udGFpbiBhIGRpZ2VzdCBvZg0KPiA+dGhlIHVwZGF0 ZVByb2Nlc3MuICBUaGlzIGFkZHMgY29tcGxleGl0eSB0byB2ZXJpZnlpbmcgdGhpcyBhZGRpdGlv bmFsDQo+ID5pbmZvcm1hdGlvbiwgYnV0IHdvdWxkIGluZGVlZCB0aGVuIGFsbG93IHRoZW0gdG8g YmUgc2V2ZXJlZCwgd2hpbGUNCj4gPnN0aWxsIGJlaW5nIGNvdmVyZWQgYnkgdGhlIHNpZ25hdHVy ZS4NCj4gPg0KPiA+RGF2aWQNCj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+IFN1aXQgbWFpbGluZyBsaXN0DQo+IFN1aXRAaWV0Zi5vcmcNCj4g aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdWl0DQo= From nobody Thu Jul 12 02:41:40 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76D52130DC0; Thu, 12 Jul 2018 02:41:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id laPjb_uL5liO; Thu, 12 Jul 2018 02:41:36 -0700 (PDT) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 466D2131092; Thu, 12 Jul 2018 02:41:35 -0700 (PDT) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1fdY6P-0000v8-Hc; Thu, 12 Jul 2018 11:41:33 +0200 To: David Brown Cc: suit@ietf.org, hrpc@irtf.org, Sandeep Jha References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> <20180711235812.GB20649@davidb.org> From: Gurshabad Grover Openpgp: preference=signencrypt Autocrypt: addr=gurshabad@cis-india.org; keydata= xsFNBFriroIBEADfyDpCD8eborMUMXKtZzjo4t2KzrAlUVYgE/TFtrwUP+4Xw4dzakDIzST8 sVYmlXIWhM5NBBTZSQ190vsxrkbi0xxLcXYM2olZEtqkJ8zONZeZLBeGvcfMymtHqD4jHwYb Zm7OXnS45fWDL+HOoMP/VCwEn098rYfnllIkYQD1Gc28Ig+ywjGg8y5p0qMmmmhm2ckgLjnG MJX8t273MSc8wsn/UYH922yif3MQXmrzqgnRl9hRzf90SKqAw38bw7wccb55pIItloKYsi0r zYBKJSOPXn91Z21TpOSTy21M0MZYEAlDn1zeea+q8TggfHNWxOXoKrIm1pqZFRz0k+8i2siJ AHf8bRm/fhukA6szZ6b2nNPxjkAmOv9zvGu6RZGbmeLvQYVBSSnZ67ayZrkKwn7KIyAV6hQM /bVnD8eEZ2tZ0S8lxoZFYSNeMGt2b6WelFZO97/LbjxaJUHd9K8g5H0MwqN1NXoBxRwllVRC 3sVHVoWTBqnKo8qplzvQEAto69PpvuxxKTOFEJeQqmn1b/fo3sLRb4YiIg8Ax+Np7Huzzjk6 vKKgpIwIN7yEUj/ReWi/UA/W4wSg3XkcqTf7h73crnN/1At0PdgozbDV2UbcApaldStP4DfG UiQl0/7MiYLKapDDuSahmoeH3xrNnrzS9BAfuGHezzDbMyPLXQARAQABzSpHdXJzaGFiYWQg R3JvdmVyIDxndXJzaGFiYWRAY2lzLWluZGlhLm9yZz7CwX0EEwEIACcFAlriroICGyMFCQlm AYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQrbl/X+ubfC7/bQ//YQv7zqQE433xxsN/ 3GYKoOFccBy3WvV4DxrTskJ3n3k5lfcZolbc8TQksQOTzyerNt2ZA7fsGZa7eFSW+xR4Yq3/ C9o+5FOoHGhyZhb+x17MILhmyvyUNSj7SdKrRISgurMbV2Vv8LxmTcdrK6CdFF6JLH+opzU1 NlRKwZqROPgbYZEB2QFIUbGfgh2I5AXNyV2XbT7fagfkHk+v9AUV7POP2H1+AZ1xq6iFTm2o 9ufNZsp2bInsDohcVBKC3aH2cnFMjvIXpNoUOx8vb5A2xW0aBUTTJDB/uZw53WOg3kehrCNb ZkML3FnDZLRuu1e8DSWmwk5YIoDzt5bMCgfUwb0C6Q+JuM8lC+8CEEa9qamLc+fhvFAzcrWp VWuSaVeLdhe5NxmtlRYNZdGuKy6sRHjwsEWlwzRylhm74fiDR3aA1eIFsfmYLd4z+i1Fp23Y dHJf7/Gor2CmOxphog9DEA9WCuORXfx4De7hoMKwW4gWKw1A8B12Cv4EOkXmCsWsOnfDEarr 2Yl6elxkhQRfKjAesXb0cezRzZgwsWIsbeYsuWFF7Xi6IzUJ27lxU3p5PcyY8O8aDYOn+pu0 YFJ7s3u2VRRgptVZJmkcN3WTApXSHY8fGl5xAakM/bqFJj9uj5zlMnFN2EplC6/mQkfYfy2f siaGTP/GQV4OSuOeuMLOwU0EWuKuggEQAJ4lAzB72gHw4+rbyxmQNNVmvgYVZPjFtO/MQdYi x1QwRP/gxxqPqTd/ZwQvmPGzXRKw10B7uKSRk6YP12+IG0mXJwHGp9q5CWJE0XNGqX3UWbAc KIzxqPNpsf8e6Bv7jdW0YwLBxJ+RW0NNL6uAxz0sr2frbnS+EZB3cU+zOZzp/9YfTUZO2lxF NzgJoErKe/HLp7aBeJXBBcwO0LQlIT80rTZx2KihBa/Ww/y9E9gV/HacJu/Ncb6E/G3e4xGj 9w9L+UW43q01wy+FSUKy9FLc7D40WqQsj8SXZEpl84SyLcJRoX3mtj59bX2SAN2VB2BAksTu qCh00IcIUGfyHziu5PwUWYM96gOhDSocP4wSeiQ8TwLzaffllz2qhdI296a9lCIYIeWVytEd NU9jJ3RbzXAgE0pnDauNXDaQv1FS5jYi8rlslJUxKnrS69BFNjM5RqQ16Cm0C4rKL7/a8wHC r4VjcjSCM8Lzv8YOOitJ9Yt4Y8SVfO5s3YvxcdSr56nX0W3B1kGbG1GpqWTzOgXzGF5bIsbV 7SPecwUs9ShvmLmZzDUxIQ68n4zj3lMZn5I+pP+Ew6nAAiuSmKdr5cygnCH/NVJzil07t+X4 uR6oKHBhuMFYF1c6Wxk36m+EZz5ZHFaT4rN0WDIJdAEqRzD0Z56V6ansDF8y+ksh0SHlABEB AAHCwWUEGAEIAA8FAlriroICGwwFCQlmAYAACgkQrbl/X+ubfC50rhAAloTaq/fZC1gtiVtU wOB+00gEkjgmzt+rLkW+l2EySTST7tje57W83UZwzCX746B2O//Bqardxz9R1Vr0VFiwHA8g 3qeBqPqiv1WoQch/iZ5d/1MxK4A9xDag1uyqLR8RuGlZ8lATmcP3IabKiuiBV4MlFZ7V2Ib6 5ToPf28xxSyjMzTjQObIG0e009uHlu2z+iQVshLyoyVVAOWWa88D6iuBDC/EtBRjlpjLAjuR YhWVYX6KHdVUijKMHN2RqjpX5O2wPL7NcMY/wsTq7EteUeI75hxFvargRXkEt1XR8t52LC0u IE2OjpzY5re/ROUbfsqL8trjAOrSJ+Fx5H8AYl9JaoVxohhxDZgNtgNtPbh/8Nnlf9daj/bh lZcTBO98XLQwMnyHGPdyhIodpWPq2C09Ys3TkQsbcdMMB1pqnEK5Vz1zIKkEEX7QVsLdrz7C 2CFsauc/9PHj+4njCHslXtzBOiVu5FXTnbCwPrLJs5iEUkUCb6qtE/2mSCTrAanzOTTOmqiM cnNTI1Tj0ht462S9VypppQnKCv8shGxXG7BadZTv+pNCA/WfB2kk1sS3ZwB0wBWX4p41fxs+ ArM9ew2SzQ/vBrEfO7ljPfZZmBqH4t/vgAZBnOtTxCGlPEIJqiMqtGHRqIqpiR20QfxEUuXI MfMfa9QJpisdNmqoUyc= Message-ID: <25657feb-b2fe-d39c-e599-f13c87186236@cis-india.org> Date: Thu, 12 Jul 2018 15:11:30 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <20180711235812.GB20649@davidb.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="yZwJufJBVd6sv12V5UYATFbCwyQAPSzKQ" X-Virus-Scanned: by clamav at smarthost1.samage.net X-Scan-Signature: 246115766b56dba7f675551df821dbd2 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 09:41:39 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --yZwJufJBVd6sv12V5UYATFbCwyQAPSzKQ Content-Type: multipart/mixed; boundary="ABf7TcQyQBrceczmUYVg2LRd84wjI8Mq5"; protected-headers="v1" From: Gurshabad Grover To: David Brown Cc: suit@ietf.org, hrpc@irtf.org, Sandeep Jha Message-ID: <25657feb-b2fe-d39c-e599-f13c87186236@cis-india.org> Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> <20180711235812.GB20649@davidb.org> In-Reply-To: <20180711235812.GB20649@davidb.org> --ABf7TcQyQBrceczmUYVg2LRd84wjI8Mq5 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi David, Thanks. Just to clarify that particular suggestion: we suggested that the draft mention that the device operator SHOULD have the ability to accept or reject updates, not "MUST". In any case, I re-read draft-ietf-suit-architecture, and found the updated Section 3.10 useful. Because of the great diversity in the devices in scope of the architecture, I understand that it is hard to take a call on whether client authorisation is desirable in the general case. We can leave this suggestion out. Thank you. Gurshabad On Thursday 12 July 2018 05:28 AM, David Brown wrote: > This depends a lot on who the device operator is referring to.=C2=A0 Fr= om a > security perspective, the vendor may wish to make certain types of > security updates mandatory.=C2=A0 As stated earlier, for devices say in= a > factory, or installed on a water meter, it is unclear who the device > operator is.=C2=A0 An organization installing water meeting IoT devices= is > unlikely to allow the individual consumers of water to have any > authority as to whether firmware is installed. > > Realistically, calling this mandatory in the spec would mostly just > result in that criteria of the spec being ignored. > > One challenge with SUIT, in general, is that those producing these > end-use devices have little motivation to comply with the spec.=C2=A0 T= he > benefits gained to them are resources (such as reference code) and > infrastructure that wouldn't have to be implemented.=C2=A0 They have li= ttle > reason to not modify any behavior of the code that doesn't suit their > own requirements. > > Although there may be good reasons to desire that decisions like this > be granted to certain parties, the SUIT documents have little > authority for enforce them. > > David --ABf7TcQyQBrceczmUYVg2LRd84wjI8Mq5-- --yZwJufJBVd6sv12V5UYATFbCwyQAPSzKQ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJbRyJKAAoJEK25f1/rm3wuNFgP/RJhcUokpaQ0msxikCCi+luu 0cLMW1Xh4f9jMdjTJDTFERS0QO7cfVOcVXOSsJyXwhqYqX6ljRcwqFM7haQ/OCTx cDExERVA421nAQCSV87hxmGJUj2Wts+dOSijANDc4asI/OWUecIo5o/tD0X2BFF0 sEAzg8f1m7uVs3Al3gCOWkj9Mo9o295PVl4RVkJcnRgN/r0WzCJDStoigMWaOQ0B cK6htBqEK/nSbABEEC1UxgTFHpcTeRskXKd1tlUw8qX7Obuxhv7ykKgIuKG3zpf5 3msM7QrMknqDTSgOko/KAx2jMCqRQLXej7ymDCwPq+p2pP3vUPqM7ZD1zTsLs8WD /Sd6tMKF0euTQFaDf+4TxN54nGJSrXQXTkZfRL2aEFXx3O3qL4KQDhDt+jOgNLWH qwRFwdRJZQ23/kOislJfpSjEFTkKhros8QguvRsjcJNepyj0DNUtiD3ETjWzoNly YHhPAmh2NJqhZjpsJj2SvhMFKjjONgdRGE0hThKE+I76mO5lp9AurGjEmd7h6qxp 6q8uPxxWZjbIqREswoiYMOjKFaTNvM0o680UX1A7QmsbtcLFgHNiAtUiJ38D3DyV dVEd/+zymSpe5Kf3b3lN1HzSzxLXEYrQoHD0jAf6IfOECvUgEF/bOt41y8CeGCZH ZgqSkTej91oFBAyoMyc2 =wWsZ -----END PGP SIGNATURE----- --yZwJufJBVd6sv12V5UYATFbCwyQAPSzKQ-- From nobody Thu Jul 12 05:38:59 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1E53C130E4B for ; Thu, 12 Jul 2018 05:38:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.021 X-Spam-Level: X-Spam-Status: No, score=-1.021 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wvn4nj9zJcgG for ; Thu, 12 Jul 2018 05:38:47 -0700 (PDT) Received: from ironport02.nordicsemi.no (mx02.nordicsemi.no [194.19.86.151]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78386130EDF for ; Thu, 12 Jul 2018 05:38:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=20354; s=default; t=1531399126; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=6wea90iQAJbLP5F4IWjylGGbVilhacLdl01l49R14oo=; b=mFnzn7PsWHot1StiXH3MlpBmKWAVVmz4d2CXuEBq0sn4crU6GOQJMroo hrvQ58CZnej/zOacSGqlGddY1A4EDnY4nqAkBnmo8ZJg2RgusjE3HwoTE PgEU3rrvpl/J2fFJgkJtmQHJXM+Ls+DgkNKkOpwN9YfUCgoK066sjgm7g 4=; X-IronPort-AV: E=Sophos;i="5.51,342,1526335200"; d="scan'208";a="4623419" From: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= To: Gurshabad Grover , David Brown CC: Sandeep Jha , "suit@ietf.org" , "hrpc@irtf.org" , Brendan Moran Thread-Topic: [Suit] HR Review: Firmware Update Architecture for IoT Devices Thread-Index: AQHUGV6Ayxe7vXY2cEq/EuSkeCEHIKSKkcgAgACi+QCAAEVBYA== Date: Thu, 12 Jul 2018 12:38:34 +0000 Message-ID: References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> <20180711235812.GB20649@davidb.org> <25657feb-b2fe-d39c-e599-f13c87186236@cis-india.org> In-Reply-To: <25657feb-b2fe-d39c-e599-f13c87186236@cis-india.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 12:38:52 -0000 SW5pdGlhbGx5OiBJIGRvbid0IHNlZSBmb3JjZWQgdXBkYXRlcyBzdGF0ZWQgYW55d2hlcmUgaW4g My45LiBJdCBvbmx5IHRhbGtzDQphYm91dCBhdXRob3JpemF0aW9uLiBJIGRvIHNoYXJlIHlvdXIg c2VudGltZW50IHRoYXQgdGhlcmUgaXMgYSBwb3NzaWJsZSANCmNvbXBsZXhpdHkgaW4gcmVmZXJy aW5nIHRoZSB0ZXJtIGNyaXRpY2FsIGluZnJhc3RydWN0dXJlLCBidXQgSSBkbyBzZWUNCndoZXJl IHRoZSB0ZXJtcyBjb21lIGZyb20uIFBvc3NpYmx5IHRoZSB3b3JkaW5nIG9mIHRoaXMgY291bGQg YmUgc2ltcGxpZmllZA0KYnkgYWRkaW5nIGFub3RoZXIgdHlwZSBvZiBhY3RvciBvciBvcGVyYXRv ciAobWVudGlvbmVkIGxhdGVyIGluIHRoaXMgZS1tYWlsKS4NCiANCkkgZG9uJ3QgYXJndWUgdGhh dCB0aGUgZGV2aWNlIG9wZXJhdG9yIGhhcyB0aGUgZmluYWwgc2F5IG9uIHRoZSBzeW5jaHJvbml6 YXRpb24NCm9mIHdoZW4gYSBmaXJtd2FyZSB1cGdyYWRlIGlzIHRvIGJlIGFwcGxpZWQsIGJ1dCBJ IGRvbid0IHRoaW5rIHRoYXQgdGhlIGRldmljZQ0Kb3BlcmF0b3Igc2hvdWxkIGludm9rZSBhbiBh Y2NlcHRhbmNlIG9uIGJlaGFsZiBvZiBzb21ldGhpbmcgdGhhdCBpdCBkb2Vzbid0IA0KaGF2ZSBz aWduaW5nIHJpZ2h0cyBvdmVyLiBJIGZlZWwgdGhlIHN0YW5kYXJkIHRyaWVzIHRvIGRvIHRoaXMg YnkgZGVzY3JpYmluZyANCmNyaXRpY2FsIGluZnJhc3RydWN0dXJlIGFuZCB0YWxrIGFib3V0IHRo ZSBkZXZpY2Ugb3BlcmF0b3IgYXMgc29tZXRoaW5nIHRoYXQNCnBvdGVudGlhbGx5IGhhcyBtb3Jl IHBvd2VyIHRoYW4gaXQgc2hvdWxkIGJ5IGJlaW5nIGEgYml0IHZhZ3VlIGluIHRoZSANCmRlc2Ny aXB0aW9uLi4uDQoNCkNDJ2luZyBpbiBCcmVuZGFuIGFzIHRoaXMgaXMgYSB3aWRlciBwb2ludCB0 aGFuIHRoZSBjaGFuZ2Ugb2Ygd29yZGluZyBpbiANCmNoYXB0ZXIgMy45Lg0KDQpJIGhhdmUgYSBw cm9ibGVtIGRpc3Rpbmd1aXNoaW5nIGJldHdlZW4gYW4gYXV0aG9yIGFuZCBhIGRldmljZSBvcGVy YXRvciBhbmQgSQ0KdGhpbmsgdGhlIHJlYXNvbiBmb3IgdGhpcyBpcyB0aGF0IHRoZXJlIG1heSBi ZSBhIG1pc3NpbmcgdHlwZSBvZiBvcGVyYXRvciANCmRlc2NyaWJlZCBpbiB0aGUgc3RhbmRhcmQu IEkgc3VnZ2VzdCB3ZSBhZGQgYSB0aGlyZCB0eXBlLCBhbiBPRU0gb3BlcmF0b3I6DQoNCihsaXN0 aW5nIGFsbCBoZXJlIGZvciByZWZlcmVuY2U6KQ0KDQogLSBEZXZpY2UgT3BlcmF0b3I6IFRoZSBh Y3RvciByZXNwb25zaWJsZSBmb3IgdGhlIGRheS10by1kYXkNCiBvcGVyYXRpb24gb2YgYSBmbGVl dCBvZiBJb1QgZGV2aWNlcy4NCg0KIC0gT0VNIE9wZXJhdG9yOiBBY3RvciByZXNwb25zaWJsZSBm b3IgdGhlIGRheS10by1kYXkgb3BlcmF0aW9uIG9mDQogT0VNIHVuaXRzIGluIElvVCBkZXZpY2Vz IGNvbm5lY3RlZCB0byBhbiBJb1QgbmV0d29yaw0KDQogLSBOZXR3b3JrIE9wZXJhdG9yOiBUaGUg YWN0b3IgcmVzcG9uc2libGUgZm9yIHRoZSBvcGVyYXRpb24gb2YgYQ0KIG5ldHdvcmsgdG8gd2hp Y2ggSW9UIGRldmljZXMgY29ubmVjdC4NCg0KDQpJZiB0aGUgT0VNIG9wZXJhdG9yIHR5cGUgaXMg YWRkZWQsIEkgZG9uJ3QgdGhpbmsgd2UgbmVlZCB0byBkaXN0aW5ndWlzaCBiZXR3ZWVuDQphbiBh dXRob3IgYW5kIGEgZGV2aWNlIG9wZXJhdG9yIGluIGNoYXB0ZXIgMy45IGFib3V0IHJvYnVzdCBw ZXJtaXNzaW9ucy4gRm9yIA0Kb25lIHRoZSBkZXZpY2Ugb3BlcmF0b3IgYW5kIGF1dGhvciBkb2Vz IG5vdCBuZWVkIHRvIGJlIG11bHRpcGxlIHNpZ25lcnMuIEkgDQp3b3VsZCBhc3N1bWUgdGhhdCB0 aGUgZGV2aWNlIG9wZXJhdG9yIGFuZCB0aGUgZmlybXdhcmUgYXV0aG9yIGlzIHRoZSBzYW1lIA0K ZW50aXR5IGluIHRoaXMgY2FzZS4gVGhlbiB0aGUgZGV2aWNlIGNvZGUgY2FuIGhhdmUgYW4gYXV0 aG9yLCB0aGUgT0VNIGNvZGUgY2FuDQpoYXZlIGFuIGF1dGhvci4uLg0KIA0KVGhlIGRpc3RpbmN0 aW9uIEkgd2FudCB0byBtYWtlIHdpdGggYW4gT0VNIG9wZXJhdG9yIGFuZCBhIERldmljZSBvcGVy YXRvciBpcw0KdGhhdCB0aGUgT0VNIGRldmljZSBpcyBqdXN0IGEgc3ViLXN5c3RlbSBvZiB0aGUg ZGV2aWNlLCBidXQgYXV0aG9yaXRpZXMgYXJvdW5kIA0KdGhlIE9FTSBkZXZpY2UgbWF5IGJlIGRp Y3RhdGVkIGJldHdlZW4gdGhlIE9FTSBPcGVyYXRvciBhbmQgdGhlIE5ldHdvcmsgDQpPcGVyYXRv ci4gVGhpcyBpcyBkaWZmZXJlbnQgdGhhbiB0aGUgcmVsYXRpb25zaGlwIGJldHdlZW4gdGhlIE9F TSBhbmQgdGhlIA0KZGV2aWNlIG9wZXJhdG9yLiBPbmUgd291bGQgYXNzdW1lIHRoYXQgdGhlIGRl dmljZSBvcGVyYXRvciB3YW50cyB0byBoYXZlIA0KY29udHJvbCBvZiB0aGUgYXV0aG9yaXR5IHRv IGFjY2VwdCBvciByZWplY3QgYSBmaXJtd2FyZSB1cGdyYWRlIHRvIGJlIGFibGUgdG8NCnN5bmNo cm9uaXplIHdoZW4gYW5kIGhvdyBmaXJtd2FyZSB1cGRhdGVzIGFyZSBhY2NlcHRlZCB0byBiZSBh cHBsaWVkLCBidXQgDQpoZS9zaGUgZG9lcyBub3QgbmVlZCB0byBoYXZlIGZ1bGwgY29udHJvbCBv dmVyIHdoYXQgYW4gT0VNIGRldmljZSB3aWxsIGFjY2VwdCANCm9yIHJlamVjdC4NCg0KVGhlIE9F TSBtYXkgYmUgZGljdGF0ZWQgYnkgcnVsZXMgb2Ygc3luY2hyb25pemF0aW9uIG9mIHVwZGF0ZXMg YmFzZWQgb24gDQpyZXF1aXJlbWVudHMgZnJvbSB0aGUgbmV0d29yayBvcGVyYXRvci4gSXQgYmVj b21lcyB0aGUgbWlkZGxlbWFuIGJldHdlZW4gdGhlIA0KRGV2aWNlIG9wZXJhdG9yIGFuZCB0aGUg TmV0d29yayBvcGVyYXRvciBhbmQgaXQgc2hvdWxkIGhhdmUgaXRzIG93biBzaWduaW5nDQphdXRo b3JpdHkuIFRoZSBjb2RlIHJ1bm5pbmcgdGhlIE9FTSBkZXZpY2UgbWF5IGJlIGNlcnRpZmllZCBv ciBxdWFsaWZpZWQgDQpiZXR3ZWVuIHRoZSBPRU0gb3BlcmF0b3IgYW5kIHRoZSBOZXR3b3JrIG9w ZXJhdG9yLCB0b3RhbGx5IG91dHNpZGUgb2Ygd2hhdCB0aGUgDQpkZXZpY2Ugb3BlcmF0b3IgaGFz IGFueSBpbmZsdWVuY2Ugb3Zlci4gU29tZSBuZXR3b3JrIG9wZXJhdG9ycyBtYXkgZXZlbiBkZW1h bmQgDQp0aGF0IHRoZSBmaXJtd2FyZSBpcyB1cGdyYWRlZCBhdCBhIHNwZWNpZmljIHRpbWVsaW5l LiBOb3QgY29uZm9ybWluZyB0byB0aG9zZSANCnRpbWVsaW5lcyBtYXkgbGVhZCB0byB0aGUgTmV0 d29yayBvcGVyYXRvciBvdXRyaWdodCByZWplY3RpbmcgZGV2aWNlcyBmcm9tIA0KYWNjZXNzaW5n IHBhcnRzIG9mIHRoZSBuZXR3b3JrIGZ1bmN0aW9uYWxpdHkuDQoNClNvbWUgZXhhbXBsZSBzY2Vu YXJpb3MgZm9yIGV4cGxhbmF0aW9uDQoNClNjZW5hcmlvIDE6IE11bHRpcGxlIGNoaXAgdXBkYXRl LCBPRU0gcmFkaW8gY2hpcA0KLS0tLS0tLS0tDQoNClRoaW5rIG9mIGEgZGV2aWNlIHdpdGggYW4g ZXh0ZXJuYWwgT0VNIHJhZGlvIGNoaXAgdGhhdCBpcyBvbmx5IHZhbGlkIGluIHRoZSANCm5ldHdv cmsgaWYgaXQgcnVubmluZyBjZXJ0YWluIGZpcm13YXJlIHZlcnNpb25zLiBUaGlzIGRlbWFuZCBj b21lcyBmcm9tIHRoZSANCm5ldHdvcmsgb3BlcmF0b3IsIGFuZCBpcyB0byBiZSBlbmZvcmNlZCBi eSB0aGUgZGV2aWNlIG9wZXJhdG9ycyB0aGF0IHVzZSB0aGUNCk9FTSByYWRpbyB3aXRob3V0IHN1 YmplY3QgYWNjZXNzIHRvIHRoZSBPRU0gZmlybXdhcmUgZXhjZXB0IGFjY2VwdGluZyBhIG5ldw0K c2lnbmVkIHZlcnNpb24gZnJvbSB0aGUgT0VNIGFuZCBhZGp1c3RpbmcgdGhlIGFwcGxpY2F0aW9u IHRvIGNvbmZvcm0gdG8gYW55DQpjaGFuZ2VzIGluIEFQSSB0byBpbnRlcmZhY2UgdG8gaXQuDQoN CkJvdGggdGhlIE9FTSB1cGRhdGUgYW5kIHRoZSBtYWluIGFwcGxpY2F0aW9uIG1heSBuZWVkIHRv IGJlIHVwZGF0ZWQgYXRvbWljYWxseQ0KZm9yIHRoZSBmaXJtd2FyZSB0byBiZSBhcHBsaWVkLg0K DQpIYXZpbmcgbXVsdGlwbGUgc2lnbmVycyBwcmV2ZW50cyBzb21lb25lIGZyb20gYXBwbHlpbmcg YSBuZXcgZmlybXdhcmUgdmVyc2lvbiANCm9uIHRoZSBPRU0gZGV2aWNlIG91dC1vZi10aW1lIHRo YXQgbWF5IGhhdmUgYSBjYXRhc3Ryb3BoaWMgZWZmZWN0IChsaWtlIGFuIA0KaW5jb21wYXRpYmxl IEFQSSBjaGFuZ2UpLiBUaGUgT0VNIGRldmljZSBmaXJtd2FyZSBpcyBwcm9wZXJseSBzaWduZWQg YnkgdGhlDQpPRU0gc28gaXQgaXMgYSB2YWxpZCBmaXJtd2FyZSB1cGRhdGUsIGJ1dCB0aGUgYWRk aXRpb24gb2YgdGhlIGV4dHJhIGF1dGhvcml0eQ0KZnJvbSB0aGUgZGV2aWNlIG9wZXJhdG9yIHBy ZXZlbnRzIHRoaXMgZnJvbSBiZWluZyBmYWxzZWx5IGFwcGxpZWQgb3V0LW9mLXRpbWUuDQoNClRo ZSBkZXZpY2Ugb3BlcmF0b3IgaXMgdGhlIGxhc3QgaW4gdGhlIGNoYWluIHdpdGggcmVnYXJkcyB0 byBzaWduaW5nIGFuZCB3aWxsDQoobW9zdCBsaWtlbHkpIGhhdmUgY29udHJvbCBvdmVyIHdoZW4g dGhlIGZpcm13YXJlIHVwZGF0ZSBwcm9jZXNzIHRha2VzIHBsYWNlLiANCkl0IGNhbiBvbmx5IGFj Y2VwdCBvciByZWplY3QgYmFzZWQgb24gaXRzIG93biBhdXRob3JpdHksIG5vdCB0aGUgYXV0aG9y aXR5IG9mDQphbnkgb3RoZXIgc2lnbmVyICh3aGljaCBtYXkgYmUgYWNjZXB0ZWQvcmVqZWN0ZWQg YXQgYSBsYXRlciBzdGFnZSBpbiB0aGUgDQpmaXJtd2FyZSB1cGdyYWRlIHByb2Nlc3MpLg0KDQoN ClNjZW5hcmlvOiBTaW5nbGUgY2hpcCB1cGRhdGUsIE9FTSBwZXJpcGhlcmFsDQotLS0tLS0tLS0N Cg0KSWYgdGhlIE9FTSBkZXZpY2UgaXMgYSBnZW5lcmljIHBlcmlwaGVyYWwgdGhhdCBzaGFyZXMg Q1BVIHJlc291cmNlcyB3aXRoIGRldmljZQ0Kd2hlcmVpbiBpdCBpcyB1c2VkIChlLmcuIGZvciBk cml2ZXJzIGFuZC1vciBjb250cm9sIG9mIHRoZSBwZXJpcGhlcmFsKSBpdCBpcyANCnBvc3NpYmxl IHRoYXQgdGhlIE9FTSB2ZW5kb3IgZm9yIHRoZSBwZXJpcGhlcmFsIGRldmljZSB3YW50cyB0byBo YXZlIHRoZSBzYW1lDQpsZXZlbCBvZiBjb250cm9sIGFzIGluIHRoZSBjYXNlIG9mIGFuIGV4dGVy bmFsIGNoaXAuIElmIHRoZSBzeXN0ZW0gaXMgY29tcGxleA0KZW5vdWdoIHRoZXkgbWF5IHdhbnQg dG8gZ2l2ZSBvdXQgdGhlIGZpcm13YXJlIHRvIHVzZSBkZXZpY2UgdW5kZXIgdGhlaXIgb3duDQpj b250cm9sLiBBbiBleGFtcGxlIG9mIHRoaXMgY291bGQgYmUgYSBjb21wbGV4IGNvbW11bmljYXRp b24gc3RhY2sgdGhhdCBpcyANCmNlcnRpZmllZCBhcyBhIHdob2xlLg0KDQpUaGUgZmlybXdhcmUg dG8gcnVuIHRoZSBwZXJpcGhlcmFsIG1heSBoYXZlIHRoZSBzYW1lIHNhbWUga2luZCBvZiBBUEkg DQpjb21wYXRpYmlsaXR5IHNjaGVtZSB5b3Ugd291bGQgbmVlZCBhcyBpbiBhbiBJUEMgdG8gYW4g ZXh0ZXJuYWwgY2hpcC4gVGhlIE9FTQ0KbWF5IHdhbnQgdG8gb3duIGFsbCBjb2RlIHRoYXQgaXMg cnVuIHRvIGludGVyZmFjZSB3aXRoIHRoZSBwZXJpcGhlcmFsLCBlLmcuDQpieSBzaWduaW5nIHRo ZSBmaXJtd2FyZSBkZWxpdmVyZWQgdG8gdGhlaXIgY3VzdG9tZXJzIHRoYXQgdXNlIHRoZSBwZXJp cGhlcmFscy4NCg0KSGF2aW5nIGEgcmVxdWlyZW1lbnQgb24gYXV0aG9yaXR5IHRvIGNvbnRyb2wg d2hlbiBhIG5ldyBmaXJtd2FyZSBpcyBhcHBsaWVkIGJ5DQp1c2luZyBtdWx0aXBsZSBzaWduZXJz IGdpdmVzIHRoZSBPRU0gYW5kIHRoZSBkZXZpY2Ugb3BlcmF0b3IgdGhlIHNhbWUgbGV2ZWwgb2YN CnNlY3VyaXR5IHdpdGggcmVnYXJkcyB0byBub3QgYXBwbHlpbmcgaXNvbGF0ZWQgcGFydHMgb2Yg dGhlIGZpcm13YXJlIA0Kb3V0LW9mLXRpbWUuIFRoZSBkZXZpY2Ugb3BlcmF0b3Igd2lsbCBiZSB0 aGUgbGFzdCBzaWduZXIgaW4gdGhlIGNoYWlucyBoZS9zaGUNCndpbGwgYmUgYWJsZSB0byBjb250 cm9sIHRoZSB0aW1lbGluZSBvZiB3aGVuIHRoZSB1cGRhdGVzIGFyZSBmaW5hbGx5IGFwcGxpZWQg DQooYW5kIGFueSBmaXJtd2FyZSB0aGF0IG5lZWRzIHRvIGJlIGFwcGxpZWQgaW4gYSBzeW5jaHJv bml6ZWQgbWFubmVyKS4NCg0KDQpSZWdhcmRzDQpGcmFuayBBdWR1biBLdmFtdHLDuA0KDQo+I0Fk ZGl0aW9uYWwgc3VnZ2VzdGlvbnMNCj4NCj5TZWN0aW9uIDMuOSBvZiBbU1VJVC1BUkNIXSB0YWxr cyBhYm91dCBtdWx0aXBsZSBhdXRob3JpemF0aW9ucyB3aGVyZWluIA0KPmFuIHVubmVjZXNzYXJ5 IGRpc3RpbmN0aW9uIGhhcyBiZWVuIG1hZGUgYmV0d2VlbiBjcml0aWNhbCANCj5pbmZyYXN0cnVj dHVyZSBhbmQgbm9uLWNyaXRpY2FsIGluZnJhc3RydWN0dXJlLiBFdmVuIGluIG5vbi1jcml0aWNh bCANCj5pbmZyYXN0cnVjdHVyZSwgb3BlcmF0b3JzIHdvdWxkIHdhbnQgdG8gdGhlIGFiaWxpdHkg dG8gaW5zdGFsbCB1cGRhdGVzIA0KPmFjY29yZGluZyB0byB0aGVpciBvd24gcHJlZmVyZW5jZXMu IEluIHN1Y2ggc2NlbmFyaW9zLCBmb3JjZWQgDQo+aW5zdGFsbGF0aW9ucyBtYXkgdmlvbGF0ZSB1 c2Vy4oCZcyBjb250cm9sIG9mIHRoZSBkZXZpY2UuIEFjY29yZGluZ2x5LCB3ZSANCj5wcm9wb3Nl IHRoYXQgdGhlIGRldmljZSBvcGVyYXRvciBTSE9VTEQgaGF2ZSB0aGUgYXV0aG9yaXR5IHRvIGFj Y2VwdCBvciANCj5yZWplY3QgZmlybXdhcmUgdXBkYXRlcy4NCg0KSW5pdGlhbGx5OiBJIGRvbid0 IHNlZSBmb3JjZWQgdXBkYXRlcyBzdGF0ZWQgYW55d2hlcmUgaW4gMy45LiBJdCBvbmx5IHRhbGtz DQphYm91dCBhdXRob3JpemF0aW9uLiBJIGRvIHNoYXJlIHlvdXIgc2VudGltZW50IHRoYXQgdGhl cmUgaXMgYSBwb3NzaWJsZSANCmNvbXBsZXhpdHkgaW4gcmVmZXJyaW5nIHRoZSB0ZXJtIGNyaXRp Y2FsIGluZnJhc3RydWN0dXJlLCBidXQgSSBkbyBzZWUNCndoZXJlIHRoZSB0ZXJtcyBjb21lIGZy b20uIFBvc3NpYmx5IHRoZSB3b3JkaW5nIG9mIHRoaXMgY291bGQgYmUgc2ltcGxpZmllZA0KYnkg YWRkaW5nIGFub3RoZXIgdHlwZSBvZiBhY3RvciAobWVudGlvbmVkIGxhdGVyIGluIHRoaXMgZS1t YWlsKQ0KIA0KSSB0aGluayB0aGUgcmVhc29uIHRoZSB0ZXh0IHN0YXRlcyBNQVkgYW5kIG5vdCBT SE9VTEQgbGlrZSB5b3UgcHJvcG9zZSBpcyB0byANCnN1cHBvcnQgYm90aCBjYXNlcywgc2ltcGxl IHNpbmdsZSBzaWduZXIgb3IgYSBtdWx0aXBsZSBvZiBzaWduZXJzDQoNCkkgZG9uJ3QgYXJndWUg dGhhdCB0aGUgZGV2aWNlIG9wZXJhdG9yIGhhcyB0aGUgZmluYWwgc2F5IG9uDQp0aGUgc3luY2hy b25pemF0aW9uIG9mIHdoZW4gYSBmaXJtd2FyZSB1cGdyYWRlIGlzIHRvIGJlIGFwcGxpZWQsIGJ1 dCBJIGRvbid0IA0KdGhpbmsgdGhhdCB0aGUgZGV2aWNlIG9wZXJhdG9yIHNob3VsZCBpbnZva2Ug YW4gYWNjZXB0YW5jZSBvbiBiZWhhbGYgb2YNCnNvbWV0aGluZyB0aGF0IGl0IGRvZXNuJ3QgaGF2 ZSBzaWduaW5nIHJpZ2h0cyBvdmVyLiBUaGUgZGV2aWNlIG9wZXJhdG9yIGlzIHRoZQ0KbGFzdCBz aWduZXIgc28gaGUvc2hlIGhhcyBhIGJhc2UgYWNjZXB0YW5jZSBjcml0ZXJpYSBmb3Igc3RhcnRp bmcgYSBmaXJtd2FyZSANCnVwZ3JhZGUsIGJ1dCBJIGFyZ3VlIHRoYXQgaXQgbWF5IG5vdCBoYXZl IHJpZ2h0cyB0byBhY2NlcHQgb24gYmVoYWxmIG9mIGFsbCANCnN1Yi1zeXN0ZW1zIGRlc2NyaWJl ZCBpbiB0aGUgZmlybXdhcmUgdXBncmFkZS4gSSBmZWVsIHRoZSBzdGFuZGFyZCB0cmllcw0KdG8g ZG8gdGhpcyBieSBkZXNjcmliaW5nIGNyaXRpY2FsIGluZnJhc3RydWN0dXJlIGFuZCB0YWxrIGFi b3V0IHRoZSANCg0KSSB3aWxsIHRyeSB0byBleHBsYWluIG15IHRoaW5raW5nDQoNCkNDJ2luZyBp biBCcmVuZGFuIGFzIHRoaXMgaXMgYSB3aWRlciBwb2ludCB0aGFuIHRoZSBjaGFuZ2Ugb2Ygd29y ZGluZy4NCg0KVGhlcmUgaXMgcHJvYmFibHkgYW4gb3BlcmF0b3IgdHlwZSB0aGF0IGlzbid0IGV4 cHJlc3NlZCBpbiB0aGUgYXJjaGl0ZWN0dXJlIA0Kc3BlY2lmaWNhdGlvbiB0aGF0IG1pZ2h0IG1h a2UgY2hhcHRlciAzLjkgYW5kIG11bHRpcGxlIHNpZ25pbmcgYXV0aG9yaXRpZXMgYSBiaXQNCmNs ZWFyZXIuIEF0IGxlYXN0IGl0IGNsZWFycyB1cCB0aGUgdXNlLWNhc2VzIGEgYml0IG1vcmUgaW4g bXkgbWluZC4gSXQgYWxzbw0KaGFzIHNvbWUgaW1wYWN0IG9uIHRoZSBkaWZmZXJlbmNlIGJldHdl ZW4gYSBmaXJtd2FyZSBhdXRob3IgYW5kIGEgZGV2aWNlIG9wZXJhdG9yLg0KSSBoYXZlIHByb2Js ZW0gZGlzdGluZ3Vpc2hpbmcgdGhlIHR3byBpbiB0aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50IGFu ZCBJIHRoaW5rIA0KdGhlIHJvbGUgbWF5IGJlY29tZSBjbGVhcmVyIGlmIHRoZSB0b3AgbGV2ZWwg YWN0b3IgaXMgdGhlIGRldmljZSBvcGVyYXRvcg0KDQpJIHN1Z2dlc3Qgd2UgYWRkIHRoZSB0aGly ZCB0eXBlIG9mIG9wZXJhdG9yLCBhbiBPRU0gb3BlcmF0b3INCg0KLSBPRU0gT3BlcmF0b3I6IEFj dG9yIHJlc3BvbnNpYmxlIGZvciB0aGUgZGF5LXRvLWRheSBvcGVyYXRpb24gb2YNCiBPRU0gdW5p dHMgaW4gZGV2aWNlcyBjb25uZWN0ZWQgdG8gYW4gSW9UIG5ldHdvcmsNCg0KVGhlIGRpc3RpbmN0 aW9uIEkgd2FudCB0byBtYWtlIHdpdGggYW4gT0VNIG9wZXJhdG9yIGFuZCBhIGRldmljZSBvcGVy YXRvciBpcw0KdGhhdCB0aGUgT0VNIGRldmljZSBpcyBqdXN0IGEgc3ViLXN5c3RlbSBvZiB0aGUg ZGV2aWNlLCBidXQgYXV0aG9yaXRpZXMgYXJvdW5kIA0KdGhlIE9FTSBkZXZpY2UgbWF5IGJlIGRp Y3RhdGVkIGJldHdlZW4gdGhlIE9FTSBhbmQgdGhlIE5ldHdvcmsgT3BlcmF0b3IuIFRoaXMNCmlz ICBkaWZmZXJlbnQgdGhhbiB0aGUgcmVsYXRpb25zaGlwIGJldHdlZW4gdGhlIE9FTSBhbmQgdGhl IGRldmljZSBvcGVyYXRvci4gT25lDQp3b3VsZCBhc3N1bWUgdGhhdCB0aGUgZGV2aWNlIG9wZXJh dG9yIHdhbnRzIHRvIGhhdmUgY29udHJvbCBvZiB0aGUgYXV0aG9yaXR5IHRvIA0KYWNjZXB0IG9y IHJlamVjdCBhIGZpcm13YXJlIHVwZ3JhZGUgdG8gYmUgYWJsZSB0byBzeW5jaHJvbml6ZSB3aGVu IGFuZCBob3cNCmZpcm13YXJlIHVwZGF0ZXMgYXJlIGFjY2VwdGVkIHRvIGJlIGFwcGxpZWQsIGJ1 dCBoZS9zaGUgZG9lcyBub3QgbmVlZCB0byBoYXZlIGZ1bGwNCmNvbnRyb2wgb2Ygd2hhdCBhbiBP RU0gZGV2aWNlIHdpbGwgYWNjZXB0IG9yIHJlamVjdC4NCg0KVGhlIE9FTSBtYXkgYmUgZGljdGF0 ZWQgYnkgcnVsZXMgb2YgZnVuY3Rpb25hbGl0eSBhbmQgc3luY2hyb25pemF0aW9uIG9mIHVwZGF0 ZXMNCmJhc2VkIG9uIHJlcXVpcmVtZW50cyBmcm9tIHRoZSBuZXR3b3JrIG9wZXJhdG9yLiBJdCBi ZWNvbWVzIHRoZSBtaWRkbGVtYW4NCmJldHdlZW4gdGhlIERldmljZSBvcGVyYXRvciBhbmQgdGhl IE5ldHdvcmsgb3BlcmF0b3IgYW5kIGl0IHNob3VsZCBoYXZlIGl0cw0Kb3duIHNpZ25pbmcgYXV0 aG9yaXR5LiBUaGUgY29kZSBydW5uaW5nIHRoZSBPRU0gZGV2aWNlIG1heSBiZSBjZXJ0aWZpZWQg b3INCnF1YWxpZmllZCBiZXR3ZWVuIHRoZSBPRU0gb3BlcmF0b3IgYW5kIHRoZSBOZXR3b3JrIG9w ZXJhdG9yLCB0b3RhbGx5IG91dHNpZGUgb2YgDQp3aGF0IHRoZSBkZXZpY2Ugb3BlcmF0b3IgaGFz IGFueSBpbmZsdWVuY2Ugb3Zlci4gU29tZSBuZXR3b3JrIG9wZXJhdG9ycyBtYXkgDQpldmVuIGRl bWFuZCB0aGF0IHRoZSBmaXJtd2FyZSBpcyB1cGdyYWRlZCBhdCBhIHNwZWNpZmljIHRpbWVsaW5l LiBOb3QgY29uZm9ybWluZw0KdG8gdGhvc2UgdGltZWxpbmVzIG1heSBsZWFkIHRvIHRoZSBOZXR3 b3JrIG9wZXJhdG9yIG91dHJpZ2h0IHJlamVjdGluZyBkZXZpY2VzIA0KZnJvbSBhY2Nlc3Npbmcg cGFydHMgb2YgdGhlIG5ldHdvcmsgZnVuY3Rpb25hbGl0eS4NCg0KU29tZSBleGFtcGxlIHNjZW5h cmlvcyB0byBqdXN0aWZ5IHRoaXMgdGhvdWdodHMNCg0KU2NlbmFyaW86IEp1c3RpZnlpbmcgcmVx dWlyZW1lbnQgb2YgbXVsdGlwbGUgc2lnbmVyczogTXVsdGlwbGUgY2hpcCB1cGRhdGUNCi0tLS0t LS0tLQ0KDQpUaGluayBvZiBhIGRldmljZSB3aXRoIGFuIGV4dGVybmFsIE9FTSByYWRpbyBjaGlw IHRoYXQgaXMgb25seSB2YWxpZCBpbiB0aGUgDQpuZXR3b3JrIGlmIGl0IHJ1bm5pbmcgY2VydGFp biBmaXJtd2FyZSB2ZXJzaW9ucy4gVGhpcyBkZW1hbmQgY29tZXMgZnJvbSB0aGUgDQpuZXR3b3Jr IG9wZXJhdG9yLCBhbmQgaXMgdG8gYmUgZW5mb3JjZWQgYnkgdGhlIGRldmljZSBvcGVyYXRvcnMg dGhhdCB1c2UgdGhlDQpPRU0gcmFkaW8gd2l0aG91dCBzdWJqZWN0IGFjY2VzcyB0byB0aGUgT0VN IGZpcm13YXJlIGV4Y2VwdCBhY2NlcHRpbmcgYSBuZXcNCnNpZ25lZCB2ZXJzaW9uIGZyb20gdGhl IE9FTSBhbmQgYWRqdXN0aW5nIHRoZSBhcHBsaWNhdGlvbiB0byBjb25mb3JtIHRvIGFueQ0KY2hh bmdlcyBpbiBBUEkgdG8gaW50ZXJmYWNlIHRvIGl0Lg0KDQpCb3RoIHRoZSBPRU0gdXBkYXRlIGFu ZCB0aGUgbWFpbiBhcHBsaWNhdGlvbiBtYXkgbmVlZCB0byBiZSB1cGRhdGVkIGF0b21pY2FsbHku DQoNCkhhdmluZyBtdWx0aXBsZSBzaWduZXJzIHByZXZlbnRzIHNvbWVvbmUgZnJvbSBhcHBseWlu ZyBhIG5ldyBmaXJtd2FyZSB2ZXJzaW9uIA0Kb24gdGhlIE9FTSBkZXZpY2Ugb3V0LW9mLXRpbWUg dGhhdCBtYXkgaGF2ZSBhIGNhdGFzdHJvcGhpYyBlZmZlY3QgKGxpa2UgYW4gDQppbmNvbXBhdGli bGUgQVBJIGNoYW5nZSkuIFRoZSBPRU0gZGV2aWNlIGZpcm13YXJlIGlzIHByb3Blcmx5IHNpZ25l ZCBieSB0aGUNCk9FTSBzbyBpdCBpcyBhIHZhbGlkIGZpcm13YXJlIHVwZGF0ZSwgYnV0IHRoZSBh ZGRpdGlvbiBvZiB0aGUgZXh0cmEgYXV0aG9yaXR5DQpmcm9tIHRoZSBkZXZpY2Ugb3BlcmF0b3Ig cHJldmVudHMgdGhpcyBmcm9tIGJlaW5nIGZhbHNlbHkgYXBwbGllZCBvdXQtb2YtdGltZQ0KDQpU aGUgZGV2aWNlIG9wZXJhdG9yIGlzIHRoZSBsYXN0IGluIHRoZSBjaGFpbiB3aXRoIHJlZ2FyZHMg dG8gc2luZ2luZyBhbmQgd2lsbA0KbW9zdCBsaWtlbHkgaGF2ZSBjb250cm9sIG92ZXIgd2hlbiB0 aGUgZmlybXdhcmUgdXBkYXRlIHByb2Nlc3MgdGFrZXMgcGxhY2UuIEl0IA0KY2FuIG9ubHkgYWNj ZXB0IG9yIHJlamVjdCBiYXNlZCBvbiBpdHMgb3duIGF1dGhvcml0eSwgbm90IHRoZSBhdXRob3Jp dHkgb2YgYW55DQpvdGhlciBzaWduZXIgKHdoaWNoIG1heSBiZSBhY2NlcHRlZC9yZWplY3RlZCBh dCBhIGxhdGVyIHN0YWdlIGluIHRoZSBmaXJtd2FyZSANCnVwZ3JhZGUgcHJvY2VzcykuDQoNCg0K U2NlbmFyaW86IEp1c3RpZnlpbmcgcmVxdWlyZW1lbnQgb2YgbXVsdGlwbGUgc2lnbmVyczogU2lu Z2xlIGNoaXAgdXBkYXRlDQotLS0tLS0tLS0NCg0KSWYgdGhlIE9FTSBkZXZpY2UgaXMgYSBnZW5l cmljIHBlcmlwaGVyYWwgdGhhdCBzaGFyZXMgQ1BVIHJlc291cmNlcyB3aXRoIGRldmljZQ0Kd2hl cmVpbiBpdCBpcyB1c2VkIChlLmcuIGZvciBkcml2ZXJzIGFuZC1vciBjb250cm9sIG9mIHRoZSBw ZXJpcGhlcmFsKSBpdCBpcyANCnBvc3NpYmxlIHRoYXQgdGhlIE9FTSB2ZW5kb3IgZm9yIHRoZSBw ZXJpcGhlcmFsIGRldmljZSB3YW50cyB0byBoYXZlIHRoZSBzYW1lDQpsZXZlbCBvZiBjb250cm9s IGFzIGluIHRoZSBjYXNlIG9mIGFuIGV4dGVybmFsIGNoaXAuIElmIHRoZSBzeXN0ZW0gaXMgY29t cGxleA0KZW5vdWdoIHRoZXkgbWF5IHdhbnQgdG8gZ2l2ZSBvdXQgdGhlIGZpcm13YXJlIHRvIHVz ZSBkZXZpY2UgdW5kZXIgdGhlaXIgb3duDQpjb250cm9sLiBBbiBleGFtcGxlIG9mIHRoaXMgIGNv dWxkIGJlIGEgY29tcGxleCBjb21tdW5pY2F0aW9uIHN0YWNrIHRoYXQgaXMgDQpjZXJ0aWZpZWQg YXMgYSB3aG9sZS4NCg0KVGhlIGZpcm13YXJlIHRvIHJ1biB0aGUgcGVyaXBoZXJhbCBtYXkgaGF2 ZSB0aGUgc2FtZSBzYW1lIGtpbmQgb2YgQVBJIA0KY29tcGF0aWJpbGl0eSBzY2hlbWUgeW91IHdv dWxkIG5lZWQgYXMgaW4gYW4gSVBDIHRvIGFuIGV4dGVybmFsIGNoaXAuIFRoZSBPRU0NCm1heSB3 YW50IHRvIG93biBhbGwgY29kZSB0aGF0IGlzIHJ1biB0byBpbnRlcmZhY2Ugd2l0aCB0aGUgcGVy aXBoZXJhbCwgZS5nLg0KYnkgc2lnbmluZyB0aGUgZmlybXdhcmUgZGVsaXZlcmVkIHRvIHRoZWly IGN1c3RvbWVycyB0aGF0IHVzZSB0aGUgcGVyaXBoZXJhbHMuDQoNCkhhdmluZyBhIHJlcXVpcmVt ZW50IG9uIGF1dGhvcml0eSB0byBjb250cm9sIHRoZSBhcHBsaWNhdGlvbiBvZiBhIG5ldyB2ZXJz aW9ucw0KZ2l2ZXMgdGhlIE9FTSBhbmQgdGhlIGRldmljZSBvcGVyYXRvciB0aGUgc2FtZSBsZXZl bCBvZiBzZWN1cml0eSB3aXRoIHJlZ2FyZHMNCnRvIG5vdCBhcHBseWluZyBpc29sYXRlZCBwYXJ0 cyBvZiB0aGUgZmlybXdhcmUgb3V0LW9mLXRpbWUuIFRoZSBkZXZpY2Ugb3BlcmF0b3IgDQp3aWxs IGJlIHRoZSBsYXN0IHNpZ25lciBpbiB0aGUgY2hhaW5zIGhlL3NoZSB3aWxsIGJlIGFibGUgdG8g Y29udHJvbCB0aGUgDQp0aW1lbGluZSBvZiB3aGVuIHRoZSB1cGRhdGVzIGFyZSBmaW5hbGx5IGFw cGxpZWQgKGFuZCBhbnkgZmlybXdhcmUgdGhhdCBuZWVkcw0KdG8gYmUgYXBwbGllZCBpbiBhIHN5 bmNocm9uaXplZCBtYW5uZXIpDQoNCg0KQ2hhcHRlciAzLjkgc2hvdWxkIHByb2JhYmx5IGhhdmUg c29tZSByZWZyZXNoaW5nIG9mIHRoZSBsYW5ndWFnZSBhbmQgSSB0aGluayANCnRoYXQgaXQgaXMg cG9zc2libGUgdG8gY2xlYXIgdXAgc29tZSBtaXN1bmRlcnN0YW5kaW5ncy4NCg0KDQpSZWdhcmRz DQpGcmFuayBBdWR1biBLdmFtdHLDuA0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ IEZyb206IFN1aXQgW21haWx0bzpzdWl0LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBH dXJzaGFiYWQgR3JvdmVyDQo+IFNlbnQ6IDEyLiBqdWxpIDIwMTggMTE6NDINCj4gVG86IERhdmlk IEJyb3duIDxkYXZpZC5icm93bkBsaW5hcm8ub3JnPg0KPiBDYzogU2FuZGVlcCBKaGEgPHNhbmRl ZXBramhhMThAZ21haWwuY29tPjsgc3VpdEBpZXRmLm9yZzsgaHJwY0BpcnRmLm9yZw0KPiBTdWJq ZWN0OiBSZTogW1N1aXRdIEhSIFJldmlldzogRmlybXdhcmUgVXBkYXRlIEFyY2hpdGVjdHVyZSBm b3IgSW9UIERldmljZXMNCj4gDQo+IEhpIERhdmlkLA0KPiANCj4gVGhhbmtzLiBKdXN0IHRvIGNs YXJpZnkgdGhhdCBwYXJ0aWN1bGFyIHN1Z2dlc3Rpb246IHdlIHN1Z2dlc3RlZCB0aGF0IHRoZQ0K PiBkcmFmdCBtZW50aW9uIHRoYXQgdGhlIGRldmljZSBvcGVyYXRvciBTSE9VTEQgaGF2ZSB0aGUg YWJpbGl0eSB0byBhY2NlcHQgb3INCj4gcmVqZWN0IHVwZGF0ZXMsIG5vdCAiTVVTVCIuDQo+IA0K PiBJbiBhbnkgY2FzZSwgSSByZS1yZWFkIGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUsIGFu ZCBmb3VuZCB0aGUgdXBkYXRlZA0KPiBTZWN0aW9uIDMuMTAgdXNlZnVsLiBCZWNhdXNlIG9mIHRo ZSBncmVhdCBkaXZlcnNpdHkgaW4gdGhlIGRldmljZXMgaW4gc2NvcGUNCj4gb2YgdGhlIGFyY2hp dGVjdHVyZSwgSSB1bmRlcnN0YW5kIHRoYXQgaXQgaXMgaGFyZCB0byB0YWtlIGEgY2FsbCBvbiB3 aGV0aGVyDQo+IGNsaWVudCBhdXRob3Jpc2F0aW9uIGlzIGRlc2lyYWJsZSBpbiB0aGUgZ2VuZXJh bCBjYXNlLiBXZSBjYW4gbGVhdmUgdGhpcw0KPiBzdWdnZXN0aW9uIG91dC4NCj4gDQo+IFRoYW5r IHlvdS4NCj4gR3Vyc2hhYmFkDQo+IA0KPiBPbiBUaHVyc2RheSAxMiBKdWx5IDIwMTggMDU6Mjgg QU0sIERhdmlkIEJyb3duIHdyb3RlOg0KPiA+IFRoaXMgZGVwZW5kcyBhIGxvdCBvbiB3aG8gdGhl IGRldmljZSBvcGVyYXRvciBpcyByZWZlcnJpbmcgdG8uwqAgRnJvbSBhDQo+ID4gc2VjdXJpdHkg cGVyc3BlY3RpdmUsIHRoZSB2ZW5kb3IgbWF5IHdpc2ggdG8gbWFrZSBjZXJ0YWluIHR5cGVzIG9m DQo+ID4gc2VjdXJpdHkgdXBkYXRlcyBtYW5kYXRvcnkuwqAgQXMgc3RhdGVkIGVhcmxpZXIsIGZv ciBkZXZpY2VzIHNheSBpbiBhDQo+ID4gZmFjdG9yeSwgb3IgaW5zdGFsbGVkIG9uIGEgd2F0ZXIg bWV0ZXIsIGl0IGlzIHVuY2xlYXIgd2hvIHRoZSBkZXZpY2UNCj4gPiBvcGVyYXRvciBpcy7CoCBB biBvcmdhbml6YXRpb24gaW5zdGFsbGluZyB3YXRlciBtZWV0aW5nIElvVCBkZXZpY2VzIGlzDQo+ ID4gdW5saWtlbHkgdG8gYWxsb3cgdGhlIGluZGl2aWR1YWwgY29uc3VtZXJzIG9mIHdhdGVyIHRv IGhhdmUgYW55DQo+ID4gYXV0aG9yaXR5IGFzIHRvIHdoZXRoZXIgZmlybXdhcmUgaXMgaW5zdGFs bGVkLg0KPiA+DQo+ID4gUmVhbGlzdGljYWxseSwgY2FsbGluZyB0aGlzIG1hbmRhdG9yeSBpbiB0 aGUgc3BlYyB3b3VsZCBtb3N0bHkganVzdA0KPiA+IHJlc3VsdCBpbiB0aGF0IGNyaXRlcmlhIG9m IHRoZSBzcGVjIGJlaW5nIGlnbm9yZWQuDQo+ID4NCj4gPiBPbmUgY2hhbGxlbmdlIHdpdGggU1VJ VCwgaW4gZ2VuZXJhbCwgaXMgdGhhdCB0aG9zZSBwcm9kdWNpbmcgdGhlc2UNCj4gPiBlbmQtdXNl IGRldmljZXMgaGF2ZSBsaXR0bGUgbW90aXZhdGlvbiB0byBjb21wbHkgd2l0aCB0aGUgc3BlYy7C oCBUaGUNCj4gPiBiZW5lZml0cyBnYWluZWQgdG8gdGhlbSBhcmUgcmVzb3VyY2VzIChzdWNoIGFz IHJlZmVyZW5jZSBjb2RlKSBhbmQNCj4gPiBpbmZyYXN0cnVjdHVyZSB0aGF0IHdvdWxkbid0IGhh dmUgdG8gYmUgaW1wbGVtZW50ZWQuwqAgVGhleSBoYXZlIGxpdHRsZQ0KPiA+IHJlYXNvbiB0byBu b3QgbW9kaWZ5IGFueSBiZWhhdmlvciBvZiB0aGUgY29kZSB0aGF0IGRvZXNuJ3Qgc3VpdCB0aGVp cg0KPiA+IG93biByZXF1aXJlbWVudHMuDQo+ID4NCj4gPiBBbHRob3VnaCB0aGVyZSBtYXkgYmUg Z29vZCByZWFzb25zIHRvIGRlc2lyZSB0aGF0IGRlY2lzaW9ucyBsaWtlIHRoaXMNCj4gPiBiZSBn cmFudGVkIHRvIGNlcnRhaW4gcGFydGllcywgdGhlIFNVSVQgZG9jdW1lbnRzIGhhdmUgbGl0dGxl DQo+ID4gYXV0aG9yaXR5IGZvciBlbmZvcmNlIHRoZW0uDQo+ID4NCj4gPiBEYXZpZA0KDQo= From nobody Thu Jul 12 07:04:35 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D007E130F08 for ; Thu, 12 Jul 2018 07:04:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o3wxk7PAERpg for ; Thu, 12 Jul 2018 07:04:30 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27116130F07 for ; Thu, 12 Jul 2018 07:04:30 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id EE25A300A44 for ; Thu, 12 Jul 2018 10:04:27 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id sq4JxNlpDUSJ for ; Thu, 12 Jul 2018 10:04:25 -0400 (EDT) Received: from a860b60074bd.home (pool-71-127-50-4.washdc.fios.verizon.net [71.127.50.4]) by mail.smeinc.net (Postfix) with ESMTPSA id AD3C6300541; Thu, 12 Jul 2018 10:04:24 -0400 (EDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.4 \(3445.8.2\)) From: Russ Housley In-Reply-To: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Date: Thu, 12 Jul 2018 10:04:24 -0400 Cc: suit , hrpc@irtf.org, Sandeep Jha Content-Transfer-Encoding: quoted-printable Message-Id: References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> To: Gurshabad Grover X-Mailer: Apple Mail (2.3445.8.2) Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 14:04:33 -0000 Gurshabad: It is clear that we have not come to consensus yet, but I thing some = qualifications on the RECOMMENDED or SHOULD statement will be necessary = to get there. Perhaps this is a starting point: =20 When a device is expected to be deployed in a manner that it is = directly associated with a human, the firmware SHOULD be encrypted to = help preserve the privacy of that human. Russ > On Jul 11, 2018, at 5:30 PM, Gurshabad Grover = wrote: >=20 > Signed PGP part > Hi, >=20 > Thanks to the authors and the working group for developing the > comprehensive drafts. >=20 > As part of efforts in the Human Rights Protocol Considerations (HRPC) > group, Sandeep and I have reviewed the human rights considerations = (RFC > 8280) in the three drafts. >=20 > Following the updates to the drafts on July 2nd, we reached out to = some > of you. We are aware that some of the concerns we raise may no longer > apply since the updates; we are sharing our review hoping to engage = you > on our other observations (and their solutions) in next week's HRPC > sessions at IETF102. >=20 > Review: A Firmware Update Architecture for Internet of Things Devices > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 > An assessment of human rights considerations in > * draft-ietf-suit-architecture-01 > * draft-moran-suit-manifest-02 > * draft-ietf-suit-information-model-01 >=20 > Introduction > ------------ > =E2=80=98A Firmware Update Architecture for Internet of Things = Devices=E2=80=99 > (draft-ietf-suit-architecture-01) proposes an architecture for = firmware > update mechanism suitable for IoT devices, and lists various > requirements associated with the same. [SUIT-ARCH] >=20 > =E2=80=98A CBOR-based Manifest Serialisation Format=E2=80=99 > (draft-moran-suit-manifest-02) describes the format of the manifest > which contains firmware update metadata for a device. The draft = defines > components of the manifest and specifies their functions in > firmware-update process. [SUIT-MF] >=20 > =E2=80=98Firmware Updates for Internet of Things Devices - An = Information Model > for Manifests=E2=80=99 (draft-ietf-suit-information-model-01) = describes the > information in the manifest, a threat model for the architecture, and > provides security requirements for the mitigation of these threats. > [SUIT-IM] >=20 > This is a review of the human rights considerations in the three = drafts. > (See [RFC8280], =E2=80=98Research Into Human Rights Protocol = Considerations=E2=80=99). >=20 > Human Rights Considerations > --------------------------- >=20 > # Privacy ([RFC8280], section 6.2.2) >=20 > Privacy considerations are with regards to maintaining the > confidentiality of firmware image and manifest. Both the firmware = image > and manifest contain information about the device. As mentioned in the > older version of the drafts, Class ID and Vendor ID are typically > compiled as strings into the firmware image. If an untrusted > intermediary storage is assumed, as in [SUIT-ARCH], this device > information will be available to all intermediary and snooping = parties, > which may violate the device operator=E2=80=99s privacy. Additionally, = device > information can be used by an attacker to design and mount targeted > attacks on the device. >=20 > Concern: The drafts are inconsistent in its recommendation of = encryption > of firmware images. Section 3.3.13 of [SUIT-IM] says that the > information model must enable encrypted payloads to prevent the > attackers from reading the content of the firmware images whereas > Section 3.3 of [SUIT-ARCH] leaves the choice of encryption to the > authors/OEMs. >=20 > Recommendation: We recommend removing these inconsistencies, and that > the drafts mandate the encryption of the firmware image. Accordingly, = we > recommend the relevant text of section 3.3 of [SUIT-ARCH] be updated. >=20 >=20 > Concern: The manifest also contains information of the device (such as > device-manufacturer=E2=80=99s name, model name, and model number) = which an > end-user operates, but the drafts have not recommended the encryption = of > the manifest. >=20 > Recommendation: We recommend that the drafts ([SUIT-ARCH], [SUIT-MF]) > recommend encryption of the manifest as well. >=20 > # Security ([RFC8280], section 6.2.4) >=20 > Security concerns have been emphasised in the draft [SUIT-IM]; various > threats have been covered in the thread model (section 3.1 of = [SUIT-IM]) > and possible mitigations have been discussed. >=20 > # Internationalization ([RFC8280], section 6.2.5) and Localization > ([RFC8280], section 6.2.12) >=20 > Concern: For the specific question, =E2=80=9CDoes your protocol have = text > strings that have to be understood or entered by humans?=E2=80=9D = [RFC8280]: An > email highlighting the recent updates to the drafts [MF-MAIL] notes = that > a container in the manifest will have =E2=80=9Cseverable=E2=80=9D text = meant for humans. > However, it is not clear from the draft what this text will contain. > Since the update server may choose to send the text to the device (if > the device supports it), human readability of these text strings is a > concern from a human rights perspective. >=20 > Recommendation: Support of multiple languages for text meant to be = read > by humans advances access to information and non-discrimination. OEMs > must have the ability to internationalise and localise any text meant = to > be read by humans. CBOR does support UTF-8; we recommend that the = draft > make the internationalisation ability explicit for all text meant for > humans. >=20 > # Open standards ([RFC8280], section 6.2.7) > =20 > Pertaining to the question in [RFC8280], =E2=80=9Cis your protocol = fully > documented in such a way that it could be easily implemented, = improved, > built upon, and/or further developed?=E2=80=9D, we found some = statements in the > drafts that might impede further improvement and development: > * The use of the =E2=80=98extensions=E2=80=99 field of the manifest, = defined in Section > 2.1 of [SUIT-MF], has not been defined. > * Section 4.18 of [SUIT-IM] says that linked manifests must be = installed > simultaneously. For clarity, we recommend that the draft specify that > each linked manifest must be validated separately. >=20 >=20 > # Reliability ([RFC8280], section 6.2.14) >=20 > Reliability concerns have been addressed in Section 3.5 and 3.6 of > [SUIT-ARCH]. >=20 > Concern: With regard to the question, =E2=80=9C[d]o you have a = documented way to > announce degradation?=E2=80=9D [RFC8280], [SUIT-ARCH] does not provide = any > mechanism to convey the degradation to either the author or the device > operator. >=20 > Recommendation: We recommend that [SUIT-ARCH] recommend that = degradation > is made apparent to the operator. >=20 >=20 > Concern: With regard to the question, =E2=80=9C[d]o you have measures = in place > for recovery or partial healing from failure?=E2=80=9D, Section 3.6 of > [SUIT-ARCH] says that a recovery mechanism is optional. The lack of a > recovery mechanism will render the device inoperational in case an > update fails; this aspect is especially important in the case of > constrained devices where communication about the failure of the = update > may not always be apparent to the operator. >=20 > Recommendation: Instead of making the recovery mechanism optional, we > suggest that the firmware architecture recommend or mandate the > inclusion of a recovery mechanism to ensure high reliability of the > devices in case the update fails. >=20 > # Integrity ([RFC8280], section 6.2.16) > Integrity concerns mentioned have been adequately addressed in the > Section 3.3 of the [SUIT-IM]. >=20 > # Authenticity ([RFC8280], section 6.2.17) > Authenticity concerns have been adequately addressed in the Section = 3.3, > in particular, the subsections 3.3.5, 3.3.6 of [SUIT-IM]. >=20 > # Outcome Transparency ([RFC8280], section 6.2.12) > Whenever possible, the fact whether a update has been successful or > unsuccessful should be conveyed to the device operator. In case of > update failure, an error description should be provided. The status > tracker, described in Section 2 of [SUIT-ARCH] as offering device > management functionalities and update progress tracking, can serve = this > function. However, its mechanism is not sufficiently clear in the > drafts. The coordination between status tracker and communicator has > been mentioned in Section 3.10 of [SUIT-ARCH], but the mechanism has = not > been elaborated on. >=20 > # Others > After going through the drafts, we found no concerns for Heterogeneity > Support ([RFC8280], section 6.2.8) since the architecture makes little > or no assumptions about the devices or transport of the firmware image > and manifest. Concerns in the following sections are out of scope: > Connectivity ([RFC8280], section 6.2.1), Anonymity ([RFC8280], section > 6.2.9), Pseudonymity ([RFC8280], section 6.2.10), Decentralization = ([RFC > 8280], section 6.2.13), Accessibility ([RFC8280], section 6.2.11), > Content Agnosticism ([RFC8280], section 6.2.3), and Censorship > Resistance ([RFC8280], section 6.2.6). >=20 > #Additional suggestions >=20 > Section 3.9 of [SUIT-ARCH] talks about multiple authorizations wherein > an unnecessary distinction has been made between critical = infrastructure > and non-critical infrastructure. Even in non-critical infrastructure, > operators would want to the ability to install updates according to > their own preferences. In such scenarios, forced installations may > violate user=E2=80=99s control of the device. Accordingly, we propose = that the > device operator SHOULD have the authority to accept or reject firmware > updates. >=20 > References > ---------- > [RFC8280] ten Oever, N., Cath, C., =E2=80=9CResearch into Human Rights = Protocol > Considerations=E2=80=9D, RFC 8280, October 2017, > . > [SUIT-ARCH] Moran, B., Meriac, M., Tschofenig, H., =E2=80=9CA Firmware = Update > Architecture for Internet of Things Devices=E2=80=9D, > draft-ietf-suit-architecture-01, June 2018, > . > [SUIT-MF] Moran, B., Meriac, M., Tschofenig, H., =E2=80=9CA CBOR-based = Manifest > Serialisation Format=E2=80=9D, draft-moran-suit-manifest-02, January = 2018, > . > [SUIT-IM] Moran, B., Tschofenig, H., Birkholz, H., Jimenez, J., > =E2=80=9CFirmware Updates for Internet of Things Devices - An = Information Model > for Manifests=E2=80=9D, draft-ietf-suit-information-model-01, June = 2018, > . > [MF-MAIL] Moran, B., =E2=80=9C[Suit] [suit]: = draft-moran-suit-manifest-02=E2=80=9D, IETF > Mail Archive, July 2018, > = >=20 > Thanks to Mallory K., Amelia A., Niels t. and Sunil A. for their = inputs. >=20 > Regards, > Gurshabad >=20 >=20 >=20 From nobody Thu Jul 12 07:20:08 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80109130E55 for ; Thu, 12 Jul 2018 07:20:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VY1WqoQWEEj3 for ; Thu, 12 Jul 2018 07:20:02 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-db3eur04on0606.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0c::606]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A3CC1310F8 for ; Thu, 12 Jul 2018 07:20:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1CEFDjOe112wePRhngwQOe/ldaZVwoaeMyeaTyMr1w4=; b=S9WD42/zmahfTG8Ch+JBymUbPnXLIRbqtkmkx+e4cVJb2MlIpfkmaOW2hbGPZiFR65E5r5I6aGMZpJ8haWAmuSGxut2MZFL8DRKaRMLoN8eLuyttso68IqYAmh1B6vN0qXloVQInC1qbks8FDbrNneXDFKBdCQ7J+qZhdOuxBJs= Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com (10.172.217.150) by AM4PR0802MB2129.eurprd08.prod.outlook.com (10.172.216.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.17; Thu, 12 Jul 2018 14:19:58 +0000 Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad]) by AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad%4]) with mapi id 15.20.0952.017; Thu, 12 Jul 2018 14:19:58 +0000 From: Brendan Moran To: David Brown CC: Hannes Tschofenig , Denis , "suit@ietf.org" Thread-Topic: [Suit] draft-ietf-suit-architecture-01 Thread-Index: AQHUErR5GmKFWAWt3UWTuHjbKxqWO6R9qEJWgA4JJ4A= Date: Thu, 12 Jul 2018 14:19:58 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.8.2) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; x-originating-ip: [217.140.96.140] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0802MB2129; 7:pIUSZU8/aUVkwkqxE83eQJDt2EsDC3GxJGUmZ7Q8/1kHd6xkTJIuye4U2A798I7H6tv3a+9fw+CrBlzzRF+8TTDhCD6VDSz7qKB1EygkrWbifawtmoAIx87Z+R1WcBoUe/BpGQksQNNp8owFDUSG1tNKRFH4PHYNNIwfPm7+jFToAhYjiFPWNQbJxXooQYvBNqKSVSBV35QM1iAlMHkSy1fyvyhLEG7cJ9W6OEXV/jfc9llatsbIUTJ/P5ltwrRi x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-ms-office365-filtering-correlation-id: 55192e68-5c79-4abd-9e49-08d5e8028c6f x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:AM4PR0802MB2129; x-ms-traffictypediagnostic: AM4PR0802MB2129: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(191636701735510)(180628864354917)(192374486261705)(223705240517415); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231311)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:AM4PR0802MB2129; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0802MB2129; x-forefront-prvs: 0731AA2DE6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(39860400002)(366004)(396003)(136003)(40434004)(189003)(53754006)(199004)(54094003)(106356001)(7736002)(186003)(4326008)(57306001)(966005)(316002)(54906003)(2900100001)(3846002)(6116002)(33656002)(8936002)(53546011)(6506007)(93886005)(8676002)(102836004)(26005)(76176011)(81156014)(83716003)(50226002)(68736007)(446003)(81166006)(99286004)(82746002)(6486002)(2616005)(6512007)(86362001)(10750500005)(54896002)(6306002)(53936002)(486006)(6436002)(478600001)(5660300001)(2906002)(236005)(36756003)(476003)(11346002)(256004)(5024004)(18074004)(14444005)(6246003)(229853002)(5250100002)(25786009)(6916009)(72206003)(14454004)(66066001)(606006)(97736004)(105586002)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2129; H:AM4PR0802MB2260.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 1pgJL+IYQvVDKMCkEZv9D20zNl3ANRHeAdn3l4ZtecbA4RhRDPWtmscc0IvnuMr5O+6JdL4s/pYtTQnXlFAnlUQYNRCLjB4QMgI2JuNghqpPv47P5SllOgm/ZYROYz8c21QZsT07GtJj9vGe+gHbfzAUAewvVnwO7YBp8YauoIzXdpaHT8NSejKNPN2GtZvWzEwsuBOZgatTXfVL3xaxgFDrrDEjpJlhPee41oFXUzuL2V/9gHtRmDdzWqd1YRUYyzHJgDNaPNoW047t3VWSjrehEU5r9Ml+mIfCvnv35u87Bdf1shLbKfdb4VpDUITiOwyodCnBvvfWnowy5oCYDrPibik0vUf6FBfiWnTURX4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_ABA348F9735F41DAA57FD43093455C00armcom_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 55192e68-5c79-4abd-9e49-08d5e8028c6f X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2018 14:19:58.5426 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2129 Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 14:20:07 -0000 --_000_ABA348F9735F41DAA57FD43093455C00armcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGF2aWQsDQoNCkkgdGhpbmsgdGhlcmXigJlzIGluc3VmZmljaWVudGx5IHByZWNpc2UgbGFu Z3VhZ2Ugc29tZXdoZXJlIGluIHRoZSBhcmNoaXRlY3R1cmUgZG9jdW1lbnQuIFRoaXMgaXMgYWJz b2x1dGVseSBub3QgdGhlIGludGVudCBvZiB0aGUgYXJjaGl0ZWN0dXJlLiBMb2NhbGx5LWluaXRp YXRlZCByb2xsYmFjayBpcyBhIG5lY2Vzc2FyeSBmZWF0dXJlIGZvciBndWFyYW50ZWVpbmcgdGhl IHJlbGlhYmlsaXR5IG9mIGEgZGV2aWNlLg0KDQpUaGUgc3BlY2lmaWMgdGhyZWF0IHdl4oCZcmUg dHJ5aW5nIHRvIGRlZmVuZCBhZ2FpbnN0IGlzOg0KDQogIDEuICBEZXZpY2UgWCBoYXMgZmlybXdh cmUgQS4NCiAgMi4gIEZpcm13YXJlIEF1dGhvcml0eSByZWxlYXNlcyBmaXJtd2FyZSBCDQogIDMu ICBEZXZpY2UgWCBpcyB1cGRhdGVkIHRvIGZpcm13YXJlIEINCiAgNC4gIE1hbGljaW91cyBhY3Rv ciBmaW5kcyB2dWxuZXJhYmlsaXR5IGluIGZpcm13YXJlIEEgdGhhdCBpcyBubyBsb25nZXIgcHJl c2VudCBpbiBmaXJtd2FyZSBCLg0KICA1LiAgTWFsaWNpb3VzIGFjdG9yIHJlaXNzdWVzIGZpcm13 YXJlIEEgdG8gZGV2aWNlIFgNCiAgNi4gIERldmljZSBYIHJldmVydHMgdG8gZmlybXdhcmUgQQ0K ICA3LiAgTWFsaWNpb3VzIGFjdG9yIGV4cGxvaXRzIGRldmljZSB1c2luZyBmaXJtd2FyZSBBLg0K DQpUaGlzIG1lYW5zIHRoYXQgaXQgaXMgZGFuZ2Vyb3VzIHRvIGhhdmUgYW55IHJlbW90ZSB0cmln Z2VycyBmb3Igcm9sbGJhY2tzIHdpdGhvdXQgc3Ryb25nIGd1YXJhbnRlZXMgb2YgYXV0aGVudGlj aXR5Lg0KDQpTbywgaG93IGRvIHdlIHByZXZlbnQgdGhpcyBzY2VuYXJpbyB3aGlsZSBwcm92aWRp bmcgYSBsaWdodHdlaWdodCB3YXkgdG8gdHJpZ2dlciBhbiBhdXRoZW50aWMgcm9sbGJhY2s/DQoN CkkgdGhpbmsgdGhpcyBpcyBhY3R1YWxseSBhbiBvcHRpbWlzYXRpb24gcHJvYmxlbS4gSXMgdGhl IGNsaWVudCBzbWFydCBlbm91Z2ggdG8gbG9vayBmb3IgYSBsb2NhbCBjb3B5IG9mIGEgcmVzb3Vy Y2UgYmVmb3JlIGZldGNoaW5nIGl0IHJlbW90ZWx5PyBEb2VzIHRoaXMgbmVlZCB0byBiZSBhZGRy ZXNzZWQgaW4gdGhlIG1hbmlmZXN0IGRpcmVjdGx5PyBJIGhhdmVu4oCZdCBzZWVuIGEgY29tcGVs bGluZyBhcmd1bWVudCBmb3IgdGhhdCB5ZXQuDQoNCk5vdHdpdGhzdGFuZGluZyB0aGUgYWJvdmUs IHRoZSB3YXkgdG8gcmVmZXIgdG8gYSDigJxidWlsdC1pbuKAnSBpbWFnZSBpcyB0byByZWZlciB0 byBpdCBieSB1cmk6IGZpbGU6Ly8vLCBmb3IgZXhhbXBsZS4gSSBkb27igJl0IHRoaW5rIHRoZXJl 4oCZcyBhIHVyaSBuYW1lc3BhY2UgZm9yIG51bWVyaWNhbGx5IGFkZHJlc3NlZCBzdG9yYWdlIChy YXcgZmxhc2gpLiBJIHNob3VsZCBub3RlIHRoYXQgVVJJcyBhcmUgb3B0aW9uYWwuIFRoYXQgaXMg aW50ZW5kZWQgZm9yIHVzZSB3aGVuIGEgZGV2aWNlIGtub3dzIHdoZXJlIHRvIGxvb2sgZm9yIHVw ZGF0ZXMgd2l0aG91dCBiZWluZyB0b2xkLCBhbmQgYmVoYXZpb3VyIGlzIGltcGxlbWVudGF0aW9u LWRlZmluZWQuIEFuIGFwcHJvcHJpYXRlIGFwcHJvYWNoIHRvIGEgbWFuaWZlc3QgdGhhdCBoYXMg bm8gVVJJIGlzIHRvIHdhbGsgdGhyb3VnaCBhdmFpbGFibGUgc291cmNlcyBvZiByZXNvdXJjZXMg YnkgY29zdCwgY2hlY2tpbmcgaWYgdGhleSBoYXZlIHRoZSBzcGVjaWZpZWQgcGF5bG9hZCAoYnkg aGFzaCkuIFRoZSBsb3dlc3QgY29zdCBpcyB0aGUgbG9jYWwgc3RvcmFnZSwgd2hpY2ggd291bGQg c29sdmUgdGhpcyBwcm9ibGVtLCBJIHRoaW5rLg0KDQpEb2VzIHRoYXQgYWRkcmVzcyB0aGUgcHJv YmxlbT8NCg0KVGhhbmtzLA0KQnJlbmRhbg0KDQoNCk9uIDMgSnVsIDIwMTgsIGF0IDE2OjU5LCBE YXZpZCBCcm93biA8ZGF2aWQuYnJvd25AbGluYXJvLm9yZzxtYWlsdG86ZGF2aWQuYnJvd25AbGlu YXJvLm9yZz4+IHdyb3RlOg0KDQpJIGhhZCBhbiBpbnRlcmVzdGluZyBjb252ZXJzYXRpb24gd2l0 aCBzb21lb25lIGJ1aWxkaW5nIGEgZGV2aWNlIChhIGJhdHRlcnkgcG93ZXJlZCBkZXZpY2UsIHdo ZXJlIG5ldHdvcmsgdHJhZmZpYyBpcyBleHBlbnNpdmUpLiBXaGVuIHRoZXkgdXBkYXRlIHRoZSBm aXJtd2FyZSwgdGhleSBrZWVwIHRoZSBwcmV2aW91cyB2ZXJzaW9uIGFyb3VuZCwgYW5kIGhhdmUg YW4gYWJpbGl0eSB0byByb2xsIGJhY2sgdG8gdGhhdCB2ZXJzaW9uIGluIGNhc2UgdGhlcmUgYXJl IGlzc3Vlcy4NCg0KSSBwcmVzZW50ZWQgdGhlIGFyZ3VtZW50IHRoYXQgdGhlIGNvcnJlY3QgYW5z d2VyIGlzIHRvIHJlLXJlbGVhc2UgdGhlIG9sZGVyIGZpcm13YXJlLCB3aXRoIGEgbmV3IGhpZ2hl ciBtb25vdG9uaWMgdmFsdWUuIFRoZWlyIGNvdW50ZXJhcmd1bWVudCB3YXMgdGhhdCB0aGlzIHdh cyBjb3N0bHkgaW4gdGVybXMgb2YgcG93ZXIsIGJlY2F1c2UgaXQgcmVxdWlyZXMgdGhlIGltYWdl IHRvIGJlIHJlc2VudC4NCg0KSSB0aGluayB0aGUgYmVzdCBhbnN3ZXIgaGVyZSBpcyB0byBoYXZl IHRoZW0gaXNzdWUgYSBuZXcgbWFuaWZlc3QgdGhhdCBkZXNjcmliZXMgdGhpcyBvbGQgaW1hZ2Ug KHRoZSBvbmUga2VwdCBhcm91bmQpLCB0aGF0IGhhcyBhIG5ldyBtb25vdG9uaWMgdmFsdWUuIFRo YXQgd2F5LCBvbmx5IHRoZSBtYW5pZmVzdCBoYXMgdG8gYmUgc2VudCAoc29tZXRoaW5nIGhhcyB0 byBiZSBzZW50IHRvIHRlbGwgdGhlIGRldmljZSB0byByZXZlcnQgdGhlIGltYWdlIGFueXdheSku IEkgdGhpbmsgdGhpcyBtb2RlbCBpcyBjb3ZlcmVkIGluIG91ciBjdXJyZW50IGRvY3MsIHNpbmNl IHdlIGRvbuKAmXQgcmVhbGx5IGRlZmluZSBob3cgYSDigJxidWlsdC1pbuKAnSBpbWFnZSBpcyBy ZWZlcnJlZCB0by4NCg0KQnV0LCB0aGlzIGRvZXMgbWFrZSBtZSByZWFsaXplIHRoYXQgdGhlcmUg YXJlIHRpbWVzIHRoYXQgdGhpbmdzIGNhbiBiZSBzcGVsbGVkIG91dCBjbGVhcmx5LCB1c3VhbGx5 IGZvciBzZWN1cml0eSByZWFzb25zLCB0aGF0IGVuZCB1cCBnZXR0aW5nIGRpc2FibGVkIGR1ZSB0 byB3aGF0IHNvbWVvbmUgdGhpbmtzIGlzIGEgcHJhY3RpY2FsIHJlYXNvbi4gSSBhZ3JlZSB0aGF0 IHByZXZlbnRpbmcgcm9sbGJhY2sgaXMgaW1wb3J0YW50IGZvciBzZWN1cml0eSwgYnV0IEnigJl2 ZSBmb3VuZCBteXNlbGYgYXJndWluZyBhZ2FpbnN0IHRoZXNlIHByYWN0aWNhbCBjYXNlcyBtdWx0 aXBsZSB0aW1lcy4NCg0KSSB3b25kZXIgaWYgaXQgd291bGQgYmUgd29ydGggd3JpdGluZyB1cCBh IHVzZSBjYXNlIHRvIGNhcHR1cmUgdGhpcyBwYXJ0aWN1bGFyIHJldmVydCBjYXNlLCBhbmQgaG93 IHRoYXQgY2FuIGJlIGFkZHJlc3NlZCB3aXRoIHRoZSBtb2RlbCB3ZSBjdXJyZW50bHkgaGF2ZS4N Cg0KRGF2aWQNCg0KRnJvbTogU3VpdCA8c3VpdC1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpzdWl0 LWJvdW5jZXNAaWV0Zi5vcmc+PiBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5l cy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+Pg0K RGF0ZTogVHVlc2RheSwgSnVseSAzLCAyMDE4IGF0IDg6NTkgQU0NClRvOiBEZW5pcyA8ZGVuaXMu aWV0ZkBmcmVlLmZyPG1haWx0bzpkZW5pcy5pZXRmQGZyZWUuZnI+PiwgInN1aXRAaWV0Zi5vcmc8 bWFpbHRvOnN1aXRAaWV0Zi5vcmc+IiA8c3VpdEBpZXRmLm9yZzxtYWlsdG86c3VpdEBpZXRmLm9y Zz4+DQpTdWJqZWN0OiBSZTogW1N1aXRdIGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDEN Cg0KSGkgRGVuaXMsDQoNCkkgdGhpbmsgdGhlIHJpc2sgb2YgaW5zdGFsbGluZyBhbiBvbGQgZmly bXdhcmUgdmVyc2lvbiBpcyBjb3ZlcmVkIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBkb2N1bWVu dCwgd2hpY2ggZ29lcyBpbnRvIHRoZSBkZXRhaWxzIG9mIHdoYXQgYSBtYW5pZmVzdCBoYXMgdG8g Y29udGFpbi4gU2VlIFNlY3Rpb24gMy4yLjEgb2YgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbC0wMQ0KDQpUaGVyZSBhcmUgZXNzZW50 aWFsbHkgdGhyZWUgdHlwZXMgb2YgZG9jdW1lbnRzIHRoZSB3b3JraW5nIGdyb3VwIGlzIGFpbWlu ZyB0byBwcm9kdWNlOiBhbiBhcmNoaXRlY3R1cmUgZG9jdW1lbnQsIHRoZSBpbmZvcm1hdGlvbiBt b2RlbCBmb3IgdGhlIG1hbmlmZXN0IGFuZCBvbmUgb3IgbXVsdGlwbGUgc2VyaWFsaXphdGlvbiBm b3JtYXRzLiBZb3UgaGF2ZSBiZWVuIGxvb2tpbmcgYXQgdGhlIGFyY2hpdGVjdHVyZSBidXQgdGhl IGFwcHJvcHJpYXRlIGRvY3VtZW50IHRvIHJlYWQgaXMgdGhlIGluZm9ybWF0aW9uIG1vZGVsIHNw ZWMuDQoNCkNpYW8NCkhhbm5lcw0KDQpGcm9tOiBTdWl0IFttYWlsdG86c3VpdC1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgRGVuaXMNClNlbnQ6IDAzIEp1bHkgMjAxOCAxMTo1OQ0KVG86 IHN1aXRAaWV0Zi5vcmc8bWFpbHRvOnN1aXRAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1N1aXRd IGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDENCg0KSGFubmVzLA0KDQpJdCBpcyB3ZWxs IGtub3duIHRoYXQgc29mdHdhcmUgdXBkYXRlcyBhcmUgb2Z0ZW4gZG9uZSB0byBhZGRyZXNzIGEg c2VjdXJpdHkgaXNzdWUuIFRoZSBzYW1lIGFwcGxpZXMNCnRvIGZpcm13YXJlIHVwZGF0ZXMuIFRo ZSBjdXJyZW50IGRyYWZ0IGlzIGxhY2tpbmcgdG8gYWRkcmVzcyBwcm90ZWN0aW9ucyBhZ2FpbnN0 IHRoZSBkb3dubG9hZGluZyBvZg0KYW4gb2xkIGZpcm13YXJlIHZlcnNpb24uIFRoZSB0aHJlYXQg c2hvdWxkIGJlIG1lbnRpb25lZCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgc2VjdGlv bi4NCg0KVGhlIG1haW4gYm9keSBvZiB0aGUgZG9jdW1lbnQgc2hvdWxkIG1lbnRpb24gbWVjaGFu aXNtcyB0byBwcmV2ZW50IHRoZSByZXBsYXkgb2YgYW4gb2xkIHZlcnNpb24NCm9mIHRoZSBmaXJt d2FyZS4NCg0KRGVuaXMNCg0KDQpIaSBhbGwsDQoNCkkgaGF2ZSBqdXN0IHN1Ym1pdHRlZCB2ZXJz aW9uIC0wMSBvZiB0aGUgYXJjaGl0ZWN0dXJlIGRvY3VtZW50LiBJIGhhdmUgaW5jb3Jwb3JhdGUg ZmVlZGJhY2sgZnJvbSB0aGUgd29ya2luZyBncm91cCwgc3VjaCBhcw0KDQogICogICBOZXcgdGVy bWlub2xvZ3ksDQogICogICBVcGRhdGVzIG9uIHRoZSBvcGVyYXRpbmcgbW9kZXMNCiAgKiAgIE5l dyBhcmNoaXRlY3R1cmUgZmlndXJlcywNCiAgKiAgIE5ldyB1c2UgY2FzZXMgKGJ5IERhdmlkIEJy b3duKQ0KDQoNCkhlcmUgaXMgdGhlIG5ldyB2ZXJzaW9uOg0KaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1cmUtMDENCg0KSGVyZSBpcyB0aGUgZGlm ZjoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtc3VpdC1h cmNoaXRlY3R1cmUtMDEudHh0DQoNCkZlZWRiYWNrIGlzIGFwcHJlY2lhdGVkLg0KDQpDaWFvDQpI YW5uZXMNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBh bnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdl ZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0 aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRv IGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNv cHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg0KDQoNCg0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KU3VpdCBtYWls aW5nIGxpc3QNCg0KU3VpdEBpZXRmLm9yZzxtYWlsdG86U3VpdEBpZXRmLm9yZz4NCg0KaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdWl0DQoNCg0KSU1QT1JUQU5UIE5PVElD RTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29u ZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUg aW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkg YW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNl IGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4g YW55IG1lZGl1bS4gVGhhbmsgeW91LiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXyBTdWl0IG1haWxpbmcgbGlzdCBTdWl0QGlldGYub3JnPG1haWx0bzpTdWl0 QGlldGYub3JnPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3VpdA0KX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClN1aXQgbWFpbGlu ZyBsaXN0DQpTdWl0QGlldGYub3JnPG1haWx0bzpTdWl0QGlldGYub3JnPg0KaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdWl0DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBj b250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlh bCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVk IHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBu b3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3Ig YW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRp dW0uIFRoYW5rIHlvdS4NCg== --_000_ABA348F9735F41DAA57FD43093455C00armcom_ Content-Type: text/html; charset="utf-8" Content-ID: <9C048C5E6A37D24A85EF10016568AD2F@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkhpIERhdmlkLA0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSB0aGluayB0aGVyZeKAmXMgaW5zdWZm aWNpZW50bHkgcHJlY2lzZSBsYW5ndWFnZSBzb21ld2hlcmUgaW4gdGhlIGFyY2hpdGVjdHVyZSBk b2N1bWVudC4gVGhpcyBpcyBhYnNvbHV0ZWx5IG5vdCB0aGUgaW50ZW50IG9mIHRoZSBhcmNoaXRl Y3R1cmUuIExvY2FsbHktaW5pdGlhdGVkIHJvbGxiYWNrIGlzIGEgbmVjZXNzYXJ5IGZlYXR1cmUg Zm9yIGd1YXJhbnRlZWluZyB0aGUgcmVsaWFiaWxpdHkgb2YgYSBkZXZpY2UuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgc3BlY2lm aWMgdGhyZWF0IHdl4oCZcmUgdHJ5aW5nIHRvIGRlZmVuZCBhZ2FpbnN0IGlzOjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxvbCBjbGFzcz0iTWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPkRldmlj ZSBYIGhhcyBmaXJtd2FyZSBBLjwvbGk+PGxpIGNsYXNzPSIiPkZpcm13YXJlIEF1dGhvcml0eSBy ZWxlYXNlcyBmaXJtd2FyZSBCPC9saT48bGkgY2xhc3M9IiI+RGV2aWNlIFggaXMgdXBkYXRlZCB0 byBmaXJtd2FyZSBCPC9saT48bGkgY2xhc3M9IiI+TWFsaWNpb3VzIGFjdG9yIGZpbmRzIHZ1bG5l cmFiaWxpdHkgaW4gZmlybXdhcmUgQSB0aGF0IGlzIG5vIGxvbmdlciBwcmVzZW50IGluIGZpcm13 YXJlIEIuPC9saT48bGkgY2xhc3M9IiI+TWFsaWNpb3VzIGFjdG9yIHJlaXNzdWVzIGZpcm13YXJl IEEgdG8gZGV2aWNlIFg8L2xpPjxsaSBjbGFzcz0iIj5EZXZpY2UgWCByZXZlcnRzIHRvIGZpcm13 YXJlIEE8L2xpPjxsaSBjbGFzcz0iIj5NYWxpY2lvdXMgYWN0b3IgZXhwbG9pdHMgZGV2aWNlIHVz aW5nIGZpcm13YXJlIEEuPC9saT48L29sPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhpcyBtZWFucyB0aGF0IGl0IGlzIGRhbmdlcm91cyB0byBo YXZlIGFueSByZW1vdGUgdHJpZ2dlcnMgZm9yIHJvbGxiYWNrcyB3aXRob3V0IHN0cm9uZyBndWFy YW50ZWVzIG9mIGF1dGhlbnRpY2l0eS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlNvLCBob3cgZG8gd2UgcHJldmVudCB0aGlzIHNjZW5h cmlvIHdoaWxlIHByb3ZpZGluZyBhIGxpZ2h0d2VpZ2h0IHdheSB0byB0cmlnZ2VyIGFuIGF1dGhl bnRpYyByb2xsYmFjaz88L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPkkgdGhpbmsgdGhpcyBpcyBhY3R1YWxseSBhbiBvcHRpbWlzYXRpb24g cHJvYmxlbS4gSXMgdGhlIGNsaWVudCBzbWFydCBlbm91Z2ggdG8gbG9vayBmb3IgYSBsb2NhbCBj b3B5IG9mIGEgcmVzb3VyY2UgYmVmb3JlIGZldGNoaW5nIGl0IHJlbW90ZWx5PyBEb2VzIHRoaXMg bmVlZCB0byBiZSBhZGRyZXNzZWQgaW4gdGhlIG1hbmlmZXN0IGRpcmVjdGx5PyBJIGhhdmVu4oCZ dCBzZWVuIGEgY29tcGVsbGluZyBhcmd1bWVudCBmb3INCiB0aGF0IHlldC48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk5vdHdpdGhzdGFu ZGluZyB0aGUgYWJvdmUsIHRoZSB3YXkgdG8gcmVmZXIgdG8gYSDigJxidWlsdC1pbuKAnSBpbWFn ZSBpcyB0byByZWZlciB0byBpdCBieSB1cmk6DQo8YSBocmVmPSJmaWxlOi8vLyIgY2xhc3M9IiI+ ZmlsZTovLy88L2E+LCBmb3IgZXhhbXBsZS4gSSBkb27igJl0IHRoaW5rIHRoZXJl4oCZcyBhIHVy aSBuYW1lc3BhY2UgZm9yIG51bWVyaWNhbGx5IGFkZHJlc3NlZCBzdG9yYWdlIChyYXcgZmxhc2gp LiBJIHNob3VsZCBub3RlIHRoYXQgVVJJcyBhcmUgb3B0aW9uYWwuIFRoYXQgaXMgaW50ZW5kZWQg Zm9yIHVzZSB3aGVuIGEgZGV2aWNlIGtub3dzIHdoZXJlIHRvIGxvb2sgZm9yIHVwZGF0ZXMgd2l0 aG91dA0KIGJlaW5nIHRvbGQsIGFuZCBiZWhhdmlvdXIgaXMgaW1wbGVtZW50YXRpb24tZGVmaW5l ZC4gQW4gYXBwcm9wcmlhdGUgYXBwcm9hY2ggdG8gYSBtYW5pZmVzdCB0aGF0IGhhcyBubyBVUkkg aXMgdG8gd2FsayB0aHJvdWdoIGF2YWlsYWJsZSBzb3VyY2VzIG9mIHJlc291cmNlcyBieSBjb3N0 LCBjaGVja2luZyBpZiB0aGV5IGhhdmUgdGhlIHNwZWNpZmllZCBwYXlsb2FkIChieSBoYXNoKS4g VGhlIGxvd2VzdCBjb3N0IGlzIHRoZSBsb2NhbCBzdG9yYWdlLA0KIHdoaWNoIHdvdWxkIHNvbHZl IHRoaXMgcHJvYmxlbSwgSSB0aGluay48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkRvZXMgdGhhdCBhZGRyZXNzIHRoZSBwcm9ibGVtPzwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ VGhhbmtzLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5CcmVuZGFuPC9kaXY+DQo8ZGl2IGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMyBKdWwgMjAxOCwgYXQgMTY6 NTksIERhdmlkIEJyb3duICZsdDs8YSBocmVmPSJtYWlsdG86ZGF2aWQuYnJvd25AbGluYXJvLm9y ZyIgY2xhc3M9IiI+ZGF2aWQuYnJvd25AbGluYXJvLm9yZzwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0K PGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7IGNhcmV0 LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTog MTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7 IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHdpbmRvd3RleHQ7IiBjbGFzcz0iIj5J IGhhZCBhbiBpbnRlcmVzdGluZyBjb252ZXJzYXRpb24gd2l0aCBzb21lb25lIGJ1aWxkaW5nIGEg ZGV2aWNlIChhIGJhdHRlcnkgcG93ZXJlZCBkZXZpY2UsIHdoZXJlIG5ldHdvcmsgdHJhZmZpYyBp cyBleHBlbnNpdmUpLiBXaGVuIHRoZXkgdXBkYXRlIHRoZSBmaXJtd2FyZSwgdGhleSBrZWVwIHRo ZSBwcmV2aW91cyB2ZXJzaW9uIGFyb3VuZCwgYW5kIGhhdmUgYW4gYWJpbGl0eQ0KIHRvIHJvbGwg YmFjayB0byB0aGF0IHZlcnNpb24gaW4gY2FzZSB0aGVyZSBhcmUgaXNzdWVzLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHdpbmRvd3RleHQ7IiBjbGFzcz0iIj48bzpw IGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiB3aW5kb3d0ZXh0OyIg Y2xhc3M9IiI+SSBwcmVzZW50ZWQgdGhlIGFyZ3VtZW50IHRoYXQgdGhlIGNvcnJlY3QgYW5zd2Vy IGlzIHRvIHJlLXJlbGVhc2UgdGhlIG9sZGVyIGZpcm13YXJlLCB3aXRoIGEgbmV3IGhpZ2hlciBt b25vdG9uaWMgdmFsdWUuIFRoZWlyIGNvdW50ZXJhcmd1bWVudCB3YXMgdGhhdCB0aGlzIHdhcyBj b3N0bHkgaW4gdGVybXMgb2YgcG93ZXIsIGJlY2F1c2UgaXQgcmVxdWlyZXMgdGhlIGltYWdlDQog dG8gYmUgcmVzZW50LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHdp bmRvd3RleHQ7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImNvbG9yOiB3aW5kb3d0ZXh0OyIgY2xhc3M9IiI+SSB0aGluayB0aGUgYmVzdCBhbnN3ZXIg aGVyZSBpcyB0byBoYXZlIHRoZW0gaXNzdWUgYSBuZXcgbWFuaWZlc3QgdGhhdCBkZXNjcmliZXMg dGhpcyBvbGQgaW1hZ2UgKHRoZSBvbmUga2VwdCBhcm91bmQpLCB0aGF0IGhhcyBhIG5ldyBtb25v dG9uaWMgdmFsdWUuIFRoYXQgd2F5LCBvbmx5IHRoZSBtYW5pZmVzdCBoYXMgdG8gYmUgc2VudCAo c29tZXRoaW5nIGhhcyB0byBiZQ0KIHNlbnQgdG8gdGVsbCB0aGUgZGV2aWNlIHRvIHJldmVydCB0 aGUgaW1hZ2UgYW55d2F5KS4gSSB0aGluayB0aGlzIG1vZGVsIGlzIGNvdmVyZWQgaW4gb3VyIGN1 cnJlbnQgZG9jcywgc2luY2Ugd2UgZG9u4oCZdCByZWFsbHkgZGVmaW5lIGhvdyBhIOKAnGJ1aWx0 LWlu4oCdIGltYWdlIGlzIHJlZmVycmVkIHRvLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBz dHlsZT0iY29sb3I6IHdpbmRvd3RleHQ7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwv bzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiB3aW5kb3d0ZXh0OyIgY2xhc3M9IiI+QnV0LCB0aGlz IGRvZXMgbWFrZSBtZSByZWFsaXplIHRoYXQgdGhlcmUgYXJlIHRpbWVzIHRoYXQgdGhpbmdzIGNh biBiZSBzcGVsbGVkIG91dCBjbGVhcmx5LCB1c3VhbGx5IGZvciBzZWN1cml0eSByZWFzb25zLCB0 aGF0IGVuZCB1cCBnZXR0aW5nIGRpc2FibGVkIGR1ZSB0byB3aGF0IHNvbWVvbmUgdGhpbmtzIGlz IGEgcHJhY3RpY2FsIHJlYXNvbi4gSSBhZ3JlZSB0aGF0IHByZXZlbnRpbmcNCiByb2xsYmFjayBp cyBpbXBvcnRhbnQgZm9yIHNlY3VyaXR5LCBidXQgSeKAmXZlIGZvdW5kIG15c2VsZiBhcmd1aW5n IGFnYWluc3QgdGhlc2UgcHJhY3RpY2FsIGNhc2VzIG11bHRpcGxlIHRpbWVzLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IHdpbmRvd3RleHQ7IiBjbGFzcz0iIj48bzpw IGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiB3aW5kb3d0ZXh0OyIg Y2xhc3M9IiI+SSB3b25kZXIgaWYgaXQgd291bGQgYmUgd29ydGggd3JpdGluZyB1cCBhIHVzZSBj YXNlIHRvIGNhcHR1cmUgdGhpcyBwYXJ0aWN1bGFyIHJldmVydCBjYXNlLCBhbmQgaG93IHRoYXQg Y2FuIGJlIGFkZHJlc3NlZCB3aXRoIHRoZSBtb2RlbCB3ZSBjdXJyZW50bHkgaGF2ZS48bzpwIGNs YXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiB3aW5kb3d0ZXh0OyIgY2xhc3M9IiI+ PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjogd2luZG93dGV4 dDsiIGNsYXNzPSIiPkRhdmlkPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xv cjogd2luZG93dGV4dDsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyLXN0eWxlOiBzb2xpZCBub25lIG5vbmU7IGJvcmRl ci10b3Atd2lkdGg6IDFwdDsgYm9yZGVyLXRvcC1jb2xvcjogcmdiKDE4MSwgMTk2LCAyMjMpOyBw YWRkaW5nOiAzcHQgMGluIDBpbjsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5Gcm9tOjxzcGFuIGNsYXNzPSJBcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+U3VpdCAmbHQ7PGEgaHJlZj0ibWFpbHRv OnN1aXQtYm91bmNlc0BpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+c3VpdC1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsg b24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVmPSJtYWlsdG86SGFubmVz LlRzY2hvZmVuaWdAYXJtLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4mZ3Q7 PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+RGF0ZTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlR1ZXNkYXksIEp1bHkgMywgMjAxOCBhdCA4OjU5 IEFNPGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+VG86PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5EZW5pcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRl bmlzLmlldGZAZnJlZS5mciIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjog dW5kZXJsaW5lOyIgY2xhc3M9IiI+ZGVuaXMuaWV0ZkBmcmVlLmZyPC9hPiZndDssICZxdW90Ozxh IGhyZWY9Im1haWx0bzpzdWl0QGlldGYub3JnIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1k ZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5zdWl0QGlldGYub3JnPC9hPiZxdW90Ow0K ICZsdDs8YSBocmVmPSJtYWlsdG86c3VpdEBpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+c3VpdEBpZXRmLm9yZzwvYT4m Z3Q7PGJyIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+U3ViamVjdDo8c3BhbiBjbGFzcz0iQXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPlJlOiBbU3VpdF0gZHJhZnQtaWV0Zi1z dWl0LWFyY2hpdGVjdHVyZS0wMTxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IiBjbGFzcz0i Ij48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBjb2xv cjogd2luZG93dGV4dDsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkhpIERl bmlzLDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3Nw YW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIg Y2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjog cmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkkgdGhpbmsgdGhlIHJpc2sgb2YgaW5zdGFsbGlu ZyBhbiBvbGQgZmlybXdhcmUgdmVyc2lvbiBpcyBjb3ZlcmVkIGluIHRoZSBpbmZvcm1hdGlvbiBt b2RlbCBkb2N1bWVudCwgd2hpY2ggZ29lcyBpbnRvIHRoZSBkZXRhaWxzIG9mIHdoYXQgYSBtYW5p ZmVzdCBoYXMgdG8gY29udGFpbi4gU2VlIFNlY3Rpb24gMy4yLjEgb2Y8c3BhbiBjbGFzcz0iQXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbC0wMSIgc3R5bGU9 ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2Rl bC0wMTwvYT48L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzEs IDczLCAxMjUpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlRoZXJlIGFyZSBlc3NlbnRp YWxseSB0aHJlZSB0eXBlcyBvZiBkb2N1bWVudHMgdGhlIHdvcmtpbmcgZ3JvdXAgaXMgYWltaW5n IHRvIHByb2R1Y2U6IGFuIGFyY2hpdGVjdHVyZSBkb2N1bWVudCwgdGhlIGluZm9ybWF0aW9uIG1v ZGVsIGZvciB0aGUgbWFuaWZlc3QgYW5kIG9uZSBvciBtdWx0aXBsZSBzZXJpYWxpemF0aW9uIGZv cm1hdHMuIFlvdSBoYXZlIGJlZW4NCiBsb29raW5nIGF0IHRoZSBhcmNoaXRlY3R1cmUgYnV0IHRo ZSBhcHByb3ByaWF0ZSBkb2N1bWVudCB0byByZWFkIGlzIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCBz cGVjLjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3Nw YW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIg Y2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjog cmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkNpYW88L3NwYW4+PG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+SGFubmVzPC9zcGFu PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNs YXNzPSIiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9ImJvcmRlci1zdHlsZTogc29saWQgbm9uZSBub25lOyBib3JkZXIt dG9wLXdpZHRoOiAxcHQ7IGJvcmRlci10b3AtY29sb3I6IHJnYigxODEsIDE5NiwgMjIzKTsgcGFk ZGluZzogM3B0IDBpbiAwaW47IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTBw dDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsgY29sb3I6IHdpbmRvd3RleHQ7IiBj bGFzcz0iIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1zZXJpZjsgY29sb3I6IHdpbmRvd3RleHQ7IiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+U3VpdA0K IFs8YSBocmVmPSJtYWlsdG86c3VpdC1ib3VuY2VzQGlldGYub3JnIiBzdHlsZT0iY29sb3I6IHB1 cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5tYWlsdG86c3VpdC1i b3VuY2VzQGlldGYub3JnPC9hPl08c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGIgY2xhc3M9IiI+T24gQmVoYWxmIE9mPHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5EZW5pczxiciBjbGFzcz0iIj4NCjxiIGNs YXNzPSIiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj4wMyBKdWx5IDIwMTggMTE6NTk8YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5Ubzo8 L2I+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhy ZWY9Im1haWx0bzpzdWl0QGlldGYub3JnIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNv cmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5zdWl0QGlldGYub3JnPC9hPjxiciBjbGFzcz0i Ij4NCjxiIGNsYXNzPSIiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW1N1aXRdIGRyYWZ0LWlldGYtc3VpdC1hcmNoaXRlY3R1 cmUtMDE8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+SGFubmVzLDwvc3Bhbj48YnIgY2xhc3M9IiI+DQo8YnIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+SXQgaXMgd2VsbCBrbm93biB0aGF0IHNvZnR3YXJlIHVwZGF0ZXMgYXJlIG9mdGVuIGRv bmUgdG8gYWRkcmVzcyBhIHNlY3VyaXR5IGlzc3VlLiBUaGUgc2FtZSBhcHBsaWVzPHNwYW4gY2xh c3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCnRv IGZpcm13YXJlIHVwZGF0ZXMuIFRoZSBjdXJyZW50IGRyYWZ0IGlzIGxhY2tpbmcgdG8gYWRkcmVz cyBwcm90ZWN0aW9ucyBhZ2FpbnN0IHRoZSBkb3dubG9hZGluZyBvZjxzcGFuIGNsYXNzPSJBcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQphbiBvbGQgZmly bXdhcmUgdmVyc2lvbi4gVGhlIHRocmVhdCBzaG91bGQgYmUgbWVudGlvbmVkIGluIHRoZSBzZWN1 cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N ClRoZSBtYWluIGJvZHkgb2YgdGhlIGRvY3VtZW50IHNob3VsZCBtZW50aW9uIG1lY2hhbmlzbXMg dG8gcHJldmVudCB0aGUgcmVwbGF5IG9mIGFuIG9sZCB2ZXJzaW9uPHNwYW4gY2xhc3M9IkFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiciBjbGFzcz0iIj4NCm9mIHRoZSBmaXJt d2FyZS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpEZW5pczxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4t Ym90dG9tOiA1cHQ7IiBjbGFzcz0iIiB0eXBlPSJjaXRlIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KSGkgYWxsLDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ DQpJIGhhdmUganVzdCBzdWJtaXR0ZWQgdmVyc2lvbiAtMDEgb2YgdGhlIGFyY2hpdGVjdHVyZSBk b2N1bWVudC4gSSBoYXZlIGluY29ycG9yYXRlIGZlZWRiYWNrIGZyb20gdGhlIHdvcmtpbmcgZ3Jv dXAsIHN1Y2ggYXM8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjx1bCB0eXBlPSJkaXNjIiBzdHlsZT0ibWFy Z2luLWJvdHRvbTogMGluOyBtYXJnaW4tdG9wOiAwaW47IiBjbGFzcz0iIj4NCjxsaSBjbGFzcz0i TXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KTmV3IHRlcm1p bm9sb2d5LDxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 bzpwIGNsYXNzPSIiPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQpVcGRhdGVzIG9uIHRoZSBvcGVyYXRpbmcgbW9kZXM8 c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFz cz0iIj48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsiPg0KTmV3IGFyY2hpdGVjdHVyZSBmaWd1cmVzLDxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv bGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyI+DQpOZXcgdXNlIGNhc2VzIChieSBEYXZpZCBCcm93bik8bzpwIGNsYXNzPSIiPjwvbzpwPjwv bGk+PC91bD4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJm5i c3A7PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KSGVyZSBpcyB0aGUgbmV3IHZlcnNpb246PHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxhIGhyZWY9 Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJl LTAxIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBj bGFzcz0iIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1zdWl0LWFyY2hp dGVjdHVyZS0wMTwvYT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQombmJzcDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpIZXJlIGlz IHRoZSBkaWZmOjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGlu IDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL3JmY2RpZmY/ dXJsMj1kcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJlLTAxLnR4dCIgc3R5bGU9ImNvbG9yOiBw dXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6Ly90b29s cy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtaWV0Zi1zdWl0LWFyY2hpdGVjdHVyZS0wMS50 eHQ8L2E+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KJm5ic3A7PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KRmVlZGJhY2sgaXMgYXBw cmVjaWF0ZWQuPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkNpYW88bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpI YW5uZXM8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZh bWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPklNUE9S VEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVu dHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFy ZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGlt bWVkaWF0ZWx5DQogYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5m b3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91LjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48 L2Rpdj4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj5fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9 IiI+U3VpdCBtYWlsaW5nIGxpc3Q8bzpwIGNsYXNzPSIiPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5 OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxhIGhyZWY9Im1haWx0bzpTdWl0 QGlldGYub3JnIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxp bmU7IiBjbGFzcz0iIj5TdWl0QGlldGYub3JnPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsg Zm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+PGEgaHJlZj0i aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zdWl0IiBzdHlsZT0iY29sb3I6 IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQ8L2E+PG86cCBjbGFzcz0iIj48L286cD48 L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7IGNvbG9yOiB3aW5kb3d0ZXh0OyIgY2xhc3M9IiI+SU1QT1JU QU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50 cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJl IG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5DQogdGhlIHNlbmRlciBp bW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIg cGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZv cm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuIF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fIFN1aXQgbWFpbGluZyBsaXN0PHNwYW4gY2xhc3M9IkFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpTdWl0QGll dGYub3JnIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7 IiBjbGFzcz0iIj5TdWl0QGlldGYub3JnPC9hPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc3VpdCIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3Jh dGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zdWl0PC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPC9kaXY+ DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsg ZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIg Y2xhc3M9IiI+U3VpdA0KIG1haWxpbmcgbGlzdDwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdo dDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOlN1aXRAaWV0Zi5v cmciIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9u dC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1z cGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lk b3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBh dXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5TdWl0QGlldGYu b3JnPC9hPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9y bTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQt dGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+ DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQiIHN0 eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDog MHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBh dXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAt d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQ8L2E+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdi KDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQt c3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5v cm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3Jk LXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29y YXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2Ug dGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us DQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg eW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_ABA348F9735F41DAA57FD43093455C00armcom_-- From nobody Thu Jul 12 07:23:27 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E71D8131116; Thu, 12 Jul 2018 07:23:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.909 X-Spam-Level: X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iynl8gB6id9B; Thu, 12 Jul 2018 07:23:16 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10044.outbound.protection.outlook.com [40.107.1.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 242AD13110C; Thu, 12 Jul 2018 07:23:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7Q6hENR525cQyqhs/qPhFvp7aiI1byAK4Ls5j6ps/Lw=; b=bJZo26RtomKO+2VmIhUoomtdaV5he4RC1/ZrinUVmtF3Sph8+LsnQdCqVqMM+J4J/Y50zDk0EWBrjW9Yay+aW9Wn9y+ZaSEP0OffsiXwmpVKGXfJyoYYKGarV4WJMo5ECRqJM5sZi3i7M6L939KSvd13Vprz4gg4oKgvQO2os2c= Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com (10.172.217.150) by AM4PR0802MB2306.eurprd08.prod.outlook.com (10.172.218.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.18; Thu, 12 Jul 2018 14:23:13 +0000 Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad]) by AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad%4]) with mapi id 15.20.0952.017; Thu, 12 Jul 2018 14:23:13 +0000 From: Brendan Moran To: Carsten Bormann CC: =?utf-8?B?w5h5dmluZCBSw7hubmluZ3N0YWQ=?= , suit , "cbor@ietf.org" Thread-Topic: [Suit] draft-moran-suit-manifest-02 Thread-Index: AdQTbk+t1KsTGeClRXioTvYSJXY/hwAaKKmAAYU6uQA= Date: Thu, 12 Jul 2018 14:23:13 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.8.2) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; x-originating-ip: [217.140.96.140] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0802MB2306; 7:jIyWXU4Q101rkNxvG71dGWUtaB18kmSIzGTzTgRWb1lgJPKZ4z72KKAxK4sipdwHobK7W+zx0GZCr6KRR1O48cu4+THWZe1fzYU1E7yLo36WaHcjNrg7RuIq95TGxBwQDZcJ9yK8Dzd4kZ9mvezZd/Y2wVkRTnz58GoAKmcvQVc4k7Bcyc7h9JNO4CTO9TE6BPtx8Cicu+QtOxVdGc+4i+MRnYEIboMY+yb9mLPSBtSH17NzRig5oxlNPTOiO7oX x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 55b364b9-ef43-4e9b-579b-08d5e8030064 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:AM4PR0802MB2306; x-ms-traffictypediagnostic: AM4PR0802MB2306: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(278428928389397)(189930954265078)(223705240517415)(238713787762100); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231311)(944501410)(52105095)(93006095)(93001095)(6055026)(149027)(150027)(6041310)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123560045)(6072148)(201708071742011)(7699016); SRVR:AM4PR0802MB2306; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0802MB2306; x-forefront-prvs: 0731AA2DE6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(39860400002)(376002)(366004)(346002)(396003)(40434004)(51444003)(189003)(199004)(6916009)(36756003)(2906002)(50226002)(82746002)(6486002)(106356001)(6436002)(14454004)(6512007)(54896002)(14444005)(345774005)(5024004)(236005)(256004)(6506007)(102836004)(478600001)(53546011)(316002)(6246003)(3846002)(6116002)(26005)(186003)(83716003)(72206003)(54906003)(33656002)(105586002)(76176011)(57306001)(81156014)(486006)(68736007)(11346002)(446003)(81166006)(5250100002)(97736004)(476003)(53936002)(229853002)(86362001)(7736002)(25786009)(99286004)(66066001)(2900100001)(8676002)(8936002)(2616005)(4326008)(5660300001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2306; H:AM4PR0802MB2260.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: vMx3vfMULoUQoGYFb9f/5ozFU8s5cIpcWMnd23IveiV4S7Flyx1fSIb+ecAShHmSnWy5ZR0uXPC/FLZeaLjuCdLkQNErG1VC5bzxjJJgmPP6FU5mo93U5U06Gy+Bie5qw77foxJhyw4/rnVbuFUnAAyTPAoLpmKdrlaN/yDk66vN8pE1D0CKpNZqPBvZ+PXAAHoS+PNX5IzEYDdWteLqY7eflLhK0F1I2DbIwSp8S4Eq5vXuuUr1eYm6mE0tsON0E1I/WBbWF5RfqfnqZWghytLKKZYxTde/BcUrrDXxVm+ncyDHg7cITD4dLmqmjjgWzCDVv+zRnDQmb2sLNWT3etF63G2piRC6glqx/RzRS24= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_F4C61E4F4FCD431B8423F65038F6F476armcom_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 55b364b9-ef43-4e9b-579b-08d5e8030064 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2018 14:23:13.1114 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2306 Archived-At: Subject: Re: [Suit] draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Jul 2018 14:23:21 -0000 --_000_F4C61E4F4FCD431B8423F65038F6F476armcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmsgeW91IGZvciB0aGUgY29tbWVudHMgQ2Fyc3RlbiBhbmQgw5h5dmluZC4gSSB0aGluayBJ IHN1Ym1pdHRlZCB0aGF0IGRyYWZ0IGluIHRvbyBtdWNoIG9mIGEgaHVycnkhDQoNCkRpcmVjdGl2 ZXMgYXJlIGludGVuZGVkIHRvIGhhbmRsZSBhIHNldCBvZiBwcm9ibGVtcyB0aGF0IGFyZSBlbnRp cmVseSBjb25zdHJhaW5lZCB0byB0aGUgYXBwbGljYXRpb24gb2YgdGhlIG1hbmlmZXN0LiBGb3Ig ZXhhbXBsZToNCg0KICAqICAgV2FpdCB1bnRpbCBiYXR0ZXJ5IGxldmVsIGlzIGFib3ZlIDUwJSBi ZWZvcmUgYXBwbHlpbmcgbWFuaWZlc3QgKG5vdGUgdGhhdCB0aGVyZSBpcyBhIHNpbWlsYXIgY29u ZGl0aW9uIGZvciBub24tZW5lcmd5IGhhcnZlc3RpbmcgYXBwbGljYXRpb25zKQ0KICAqICAgUmVi b290IGFmdGVyIGFwcGxpY2F0aW9uDQogICogICBSZXN0YXJ0IGRlc2lnbmF0ZWQgY29tcG9uZW50 IHdoZW4gaW5zdGFsbGF0aW9uIGlzIGNvbXBsZXRlDQogICogICBBcHBseSBvbmx5IGF0IDIzOjU5 IG9uIGEgU2F0dXJkYXkuDQogICogICBEaXNjb25uZWN0IGZyb20gdGhlIG5ldHdvcmsgcHJpb3Ig dG8gaW5zdGFsbGF0aW9uDQoNCk1lYW53aGlsZSwgZXh0ZW5zaW9ucyBhcmUgYSBwbGFjZWhvbGRl ciBmb3IgYWxsIHRob3NlIGNvbmNlcHRzIHRoYXQgd2UgaGF2ZW7igJl0IHJlYWxpc2VkIHdl4oCZ cmUgbWlzc2luZyB5ZXQuDQoNClRoZSBQcm9jZXNzaW5nU3RlcHMgbmVlZCB0byBoYXZlIG11bHRp cGxlIGlucHV0cy4gSSB0aGluayB0aGF0IGlub2RlIHNob3VsZCBiZSBhIGxpc3QgYW5kIG9ub2Rl IHNob3VsZCBiZSBzaW5nbGUuIFRoZW4sIGEgcHJvY2Vzc29yIGlzIHRoZSBhZ2dyZWdhdGUgb2Yg YSBtYXAgb2YgaW5wdXRzIGFuZCBhIHNpbmdsZSBvdXRwdXQuIEl0IG1heSBiZSB0aGF0IHRoaXMg aXMgbm90IGNvcnJlY3QgYW5kIHRoYXQgbXVsdGlwbGUgb25vZGVzIGFyZSBuZWVkZWQuDQoNCklm IGEgdGFyZ2V0IGlzIGFuIGFsaWFzLCB0aGF0IGltcGxpZXMgc2V2ZXJhbCB0aGluZ3M6DQoNCiAg KiAgIFRoZXJlIG11c3QgYmUgYW5vdGhlciB0YXJnZXQgd2l0aCB0aGUgc2FtZSBkaWdlc3QgaW4g YSBkZXBlbmRlbmN5IG1hbmlmZXN0DQogICogICBUaGUgdGFyZ2V0IGlzIG1pc3Npbmcgc2V2ZXJh bCBrZXkgcGllY2VzIG9mIGluZm9ybWF0aW9uOg0KICAgICAqICAgU2l6ZQ0KICAgICAqICAgQ29t cG9uZW50IElEDQogICAgICogICBTdG9yYWdlIGxvY2F0aW9uDQogICAgICogICBFbmNvZGluZw0K ICAqICAgVGhlIGNvbnRhaW5pbmcgbWFuaWZlc3QgZG9lc27igJl0IG5lZWQgdG8gaGF2ZSByaWdo dHMgdG8gaW5zdGFsbCB0aGUgdGFyZ2V0DQoNClRoZSBwb2ludCBvZiB0aGUgYWxpYXMgaXMgdG8g cmVkaXJlY3QgYSBjbGllbnQgdG8gZGlmZmVyZW50IGhvc3RpbmcgaW5mcmFzdHJ1Y3R1cmUgZm9y IGEgZ2l2ZW4gcGF5bG9hZC4NCg0KVGhlcmUgbXVzdCBiZSBhIHdheSB0byByZWZlcmVuY2UgdGhl IHJlc291cmNlcyBkZWNsYXJlZCBieSBkZXBlbmRlbmN5IG1hbmlmZXN0cy4gVGhlcmUgYXJlIHR3 byB3YXlzIHRoYXQgSSBjYW4gc2VlIHRvIGhhbmRsZSB0aGlzOg0KDQogIDEuICBVc2UgYXJiaXRy YXJ5IG5hbWVzICh0aGlzIGlzIHZ1bG5lcmFibGUgdG8gbm9kZS1uYW1lIGNvbGxpc2lvbnMpDQog IDIuICBVc2Ugbm9kZSBwYXRocyAodGhpcyBtYWtlcyBjcm9zcy1icmFuY2ggcmVmZXJlbmNlcyBt b3JlIGRpZmZpY3VsdCwgYnV0IEnigJltIG5vdCBjZXJ0YWluIHRoYXQgdGhvc2UgYXJlIGxlZ2l0 aW1hdGU6IGVhY2ggbWFuaWZlc3Qgc2hvdWxkIGRlY2xhcmUgaXRzIGRlcGVuZGVuY2llcyBleHBs aWNpdGx5OyBpZiB0aGF0IG1lYW5zIHRoZXJlIGFyZSBkdXBsaWNhdGUgbWFuaWZlc3RzIGluIGEg dHJlZSwgdGhhdCBpcyBhY2NlcHRhYmxlLikNCg0KSWYgbm9kZSBwYXRocyBhcmUgdXNlZCwgdGhl biBob3cgYXJlIHRoZXkgZW5jb2RlZD8gSSB3b3VsZCBzdXNwZWN0IHRoZXkgc2hvdWxkIGJlIENC T1IgYXJyYXlzLg0KDQpJ4oCZbGwgc2VlIHdoYXQgSSBjYW4gZG8gYWJvdXQgdGhvc2UgQ0RETCBw cm9ibGVtcyEgT25jZSBJIGhhdmUgYSBjaGFuY2UgdG8gdGFrZSBpbiBzb21lIG1vcmUgb2YgdGhl IGZlZWRiYWNrLCBJ4oCZbGwgc2VuZCBhIENEREwgZmlsZSB0aGF0IGVuY29tcGFzc2VzIHRoZXNl IGFuZCBtb3JlIHJlY29tbWVuZGF0aW9ucyBvdXQuDQoNClRoYW5rcywNCkJyZW5kYW4NCg0KT24g NCBKdWwgMjAxOCwgYXQgMjE6MzgsIENhcnN0ZW4gQm9ybWFubiA8Y2Fib0B0emkub3JnPG1haWx0 bzpjYWJvQHR6aS5vcmc+PiB3cm90ZToNCg0KT24gSnVsIDQsIDIwMTgsIGF0IDEwOjI2LCBSw7hu bmluZ3N0YWQsIMOYeXZpbmQgPE95dmluZC5Sb25uaW5nc3RhZEBub3JkaWNzZW1pLm5vPG1haWx0 bzpPeXZpbmQuUm9ubmluZ3N0YWRAbm9yZGljc2VtaS5ubz4+IHdyb3RlOg0KPg0KPiAgICAgICAg 4oCiIENEREwgbml0cGlja2luZzoNCj4gICAgICAgICAgICAgICAg4oCiIFNvbWUgbmFtZSBpbmNv bnNpc3RlbmNpZXM6IFByb2Nlc3NpbmdTdGVwIHZzIFByb2Nlc3NvciwgVGFyZ2V0SW5mbyB2cyBU YXJnZXQuDQo+ICAgICAgICAgICAgICAgIOKAoiBUaGVyZSdzIHByb2JhYmx5IGEgdHlwbyBpbiB0 aGUgZGVmaW5pdGlvbiBvZiBEaXJlY3RpdmUuIFNob3VsZCBpdCBiZSBhbiBhcnJheSBvZiBtYXBz Pw0KPiAgICAgICAgICAgICAgICDigKIgVGFyZ2V0OjpzdG9yYWdlSWRlbnRpZmllciBhbmQgVGFy Z2V0Ojpjb21wb25lbnRJZGVudGlmaWVyIGRvbid0IHVzZSB0aGUgY3VzdG9tIHR5cGVzIGZvciBT dG9yYWdlSWRlbnRpZmllciBhbmQgQ29tcG9uZW50SWRlbnRpZmllci4NCj4gICAgICAgICAgICAg ICAg4oCiIEkgdGhpbmsgZGlnZXN0cyBzaG91bGQgaGF2ZSBhIHR5cGUsIHNvIHRoZSB1c2VyIGNh biBtb3JlIGVhc2lseSByZXN0cmljdCBpdHMgZm9ybWF0IGFmdGVyIGNob29zaW5nIGEgZGlnZXN0 IGFsZ29yaXRobS4NCj4gICAgICAgICAgICAgICAg4oCiIFN1Z2dlc3Rpb246IEFkZCBuaW50IHRv IHRleHRLZXlzIGdyb3VwLg0KPiAgICAgICAgICAgICAgICDigKIgQXV0aGVudGljYXRlZE1hbmlm ZXN0IHNob3VsZCBwcm9iYWJseSBjb250YWluIGFuIGF1dGhlbnRpY2F0ZWRNYW5pZmVzdFZlcnNp b24gb3Igc2ltaWxhci4NCj4gICAgICAgICAgICAgICAg4oCiICJQcm9jZXNzb3IiIG1pZ2h0IGJl IGNvbmZ1c2luZyAo4oCcZG9lcyBpdCBtZWFuIENQVT/igJ0pLg0KDQpJdCBhbHNvIGhlbHBzIHRv IG9jY2FzaW9uYWxseSBydW4gaW5zdGFuY2VzIG9mIGZvcm1hbCBsYW5ndWFnZXMgdGhyb3VnaCBz b21lIHRvb2wgdG8gY2hlY2sgdGhlbeKApg0KDQpBcGFydCBmcm9tIGluY29uc2lzdGVudCB1c2Ug b2YgbmFtZXMsIG1vc3Qgb2YgdGhlIHN5bnRheCBlcnJvcnMgc3RlbSBmcm9tIHRoZSBhcmNhbmUg c3ludGF4IHRoYXQgQ0RETCBpcyB1c2luZyBmb3IgaXRzIHdvcmthcm91bmQgZm9yIG5vdCBoYXZp bmcgdHJ1ZSBlbnVtZXJhdGlvbnMgKFNlY3Rpb24gMi4yLjIuMiBvZiBkcmFmdC1pZXRmLWNib3It Y2RkbC0wMy50eHQpOyB0aGlzIHJlcXVpcmVzIGNvbW1hcyAob3Igbm90aGluZykgaW5zdGVhZCBv ZiBzbGFzaGVzLCBhbmQgYW4gZW5jbG9zaW5nICYsIHNvIHdpdGggw5h5dmluZOKAmXMgc3VnZ2Vz dGlvbiwgdGV4dEtleXMgYmVjb21lcywgZS5nLjoNCg0KICB0ZXh0S2V5cyA9ICYoDQogICAgICB1 bmluaXRpYWxpc2VkOiAwDQogICAgICBtYW5pZmVzdERlc2NyaXB0aW9uOiAxDQogICAgICBwYXls b2FkRGVzY3JpcHRpb246IDINCiAgICAgIHZlbmRvck5hbWU6IDMNCiAgICAgIG1vZGVsTmFtZTog NA0KICAgICAgcGF5bG9hZFZlcnNpb246IDUNCiAgKSAvIG5pbnQNCg0KQW5kIFByb2Nlc3NvciBz dGFydHMgb2ZmIGFzOg0KDQogIFByb2Nlc3NvciAgICAgICA9IFsNCiAgICAgICYoZGVjcnlwdDog MSwgZGVjb21wcmVzczogMiwgdW5kaWZmOiAzLCByZWxvY2F0ZTogNCwgdW5yZWxvY2F0ZTogNSks DQoNCg0KKE9mIGNvdXJzZSwgdGhlIHNhbWUgdGhpbmcgY2FuIGJlIGV4cHJlc3NlZCBhczoNCg0K ICBQcm9jZXNzb3IgICAgICAgPSBbDQogICAgICAmKGRlY3J5cHQ6IDEsIGRlY29tcHJlc3M6IDIs IHVuZGlmZjogMywgcmVsb2NhdGU6IDQsIHVucmVsb2NhdGU6IDUpLA0KICAgICAgZGVjcnlwdDog MSAvLyBkZWNvbXByZXNzOiAyIC8vIHVuZGlmZjogMyAvLyByZWxvY2F0ZTogNCAvLyB1bnJlbG9j YXRlOiA1LA0KDQpOb3Qgc3VyZSB3aGF0IHRoZSBpbnRlbnQgaXMgaGVyZTsgaW4gdGhlIGZpcnN0 IGNhc2UsIEnigJlkIHByb2JhYmx5IGFsc28gYWRkIGEgbGFiZWwsIGFzIGluDQoNCiAgUHJvY2Vz c29yICAgICAgID0gWw0KICAgICAgcHJvY2VzczogJihkZWNyeXB0OiAxLCBkZWNvbXByZXNzOiAy LCB1bmRpZmY6IDMsIHJlbG9jYXRlOiA0LCB1bnJlbG9jYXRlOiA1KSwNCg0KSSBoYXZlIGF0dGFj aGVkIGEgdmVyc2lvbiB0aGF0IHBhcnNlcyAoSSBkb27igJl0IHRoaW5rIGFuIGF0dGFjaG1lbnQg d2lsbCBtYWtlIGl0IHRvIHRoZSBsaXN0cykgYnV0IGRvZXMgbm90IGFkZHJlc3MgYW55IG90aGVy IG9mIMOYeXZpbmTigJlzIHN1Z2dlc3Rpb25zLg0KDQpUaGUgb3RoZXIgcHJvYmxlbSB0aGF0IHNo b3VsZCBwcm9iYWJseSBiZSBhZGRyZXNzZWQgaXMgdGhhdCBtb3N0IHJ1bGVzIGFyZSB1bnVzZWQg 4oCUIHRoZXJlIHdvdWxkIG5lZWQgdG8gYmUgb25lIGNkZGwgZmlsZSBmb3IgdGhlIG1hbmlmZXN0 LCBhbmQgbWF5YmUgb25lIGZvciB0aGUgQ09TRSBlbnZlbG9wZS4gIFdlIHNpbXBseSBkb27igJl0 IGhhdmUgYSBnb29kIHdheSBpbiBDRERMIHlldCB0byBzYXkg4oCcTWFuaWZlc3QgZ29lcyB0aHJv dWdoIGFuIGFsZ29yaXRobSBhbmQgdHVybnMgdXAgaW4gQ09TRV9TaWdu4oCdIOKAlCBhY3R1YWxs eSwgaW4gdGhpcyBjYXNlIHRoaXMgY291bGQgYmUgc29sdmVkIGluIHBhcnQgYXMgdGhlIG1hbmlm ZXN0IHR1cm5zIHVwIGluIGNsZWFydGV6dC4NCkkgaGF2ZSBpbmNsdWRlZCBhIGRpcnR5IGhhY2sg aW4gdGhlIGF0dGFjaGVkIHdoaWNoIEkgaW50ZW5kIHRvIGZpeC4NCg0KSeKAmW0gQ0NpbmcgdGhl IENCT1IgV0cgdG8gZ2l2ZSBhbiBleGFtcGxlIGZvciBDRERMIGJlaW5nIHVzZWQgaW4gYW5vdGhl ciBXRy4gIElmIHlvdSB3YW50IHRvIGRpc2N1c3MgYSBDRERMIGZlYXR1cmUsIHBsZWFzZSBzdHJp a2UgU1VJVCBmcm9tIHRoZSBsaXN0IChhbmQgaWYgeW91IHdhbnQgdG8gZGlzY3VzcyBhIFNVSVQg ZmVhdHVyZSwgbWF5YmUgc3RyaWtlIENCT1IgZnJvbSB0aGUgbGlzdCkuDQoNCkdyw7zDn2UsIENh cnN0ZW4NCg0KDQoNCjxzdWl0LmNkZGw+DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50 cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQg bWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lw aWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlz Y2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1 cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRo YW5rIHlvdS4NCg== --_000_F4C61E4F4FCD431B8423F65038F6F476armcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoYW5rIHlvdSBmb3IgdGhlIGNvbW1lbnRzIENh cnN0ZW4gYW5kJm5ic3A7w5h5dmluZC4gSSB0aGluayBJIHN1Ym1pdHRlZCB0aGF0IGRyYWZ0IGlu IHRvbyBtdWNoIG9mIGEgaHVycnkhDQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+RGlyZWN0aXZlcyBhcmUgaW50ZW5kZWQg dG8gaGFuZGxlIGEgc2V0IG9mIHByb2JsZW1zIHRoYXQgYXJlIGVudGlyZWx5IGNvbnN0cmFpbmVk IHRvIHRoZSBhcHBsaWNhdGlvbiBvZiB0aGUgbWFuaWZlc3QuIEZvciBleGFtcGxlOjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjx1bCBjbGFzcz0iTWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPldh aXQgdW50aWwgYmF0dGVyeSBsZXZlbCBpcyBhYm92ZSA1MCUgYmVmb3JlIGFwcGx5aW5nIG1hbmlm ZXN0IChub3RlIHRoYXQgdGhlcmUgaXMgYSBzaW1pbGFyIGNvbmRpdGlvbiBmb3Igbm9uLWVuZXJn eSBoYXJ2ZXN0aW5nIGFwcGxpY2F0aW9ucyk8L2xpPjxsaSBjbGFzcz0iIj5SZWJvb3QgYWZ0ZXIg YXBwbGljYXRpb248L2xpPjxsaSBjbGFzcz0iIj5SZXN0YXJ0IGRlc2lnbmF0ZWQgY29tcG9uZW50 IHdoZW4gaW5zdGFsbGF0aW9uIGlzIGNvbXBsZXRlPC9saT48bGkgY2xhc3M9IiI+QXBwbHkgb25s eSBhdCAyMzo1OSBvbiBhIFNhdHVyZGF5LjwvbGk+PGxpIGNsYXNzPSIiPkRpc2Nvbm5lY3QgZnJv bSB0aGUgbmV0d29yayBwcmlvciB0byBpbnN0YWxsYXRpb248L2xpPjwvdWw+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPk1lYW53aGls ZSwgZXh0ZW5zaW9ucyBhcmUgYSBwbGFjZWhvbGRlciBmb3IgYWxsIHRob3NlIGNvbmNlcHRzIHRo YXQgd2UgaGF2ZW7igJl0IHJlYWxpc2VkIHdl4oCZcmUgbWlzc2luZyB5ZXQuPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgUHJvY2Vz c2luZ1N0ZXBzIG5lZWQgdG8gaGF2ZSBtdWx0aXBsZSBpbnB1dHMuIEkgdGhpbmsgdGhhdCBpbm9k ZSBzaG91bGQgYmUgYSBsaXN0IGFuZCBvbm9kZSBzaG91bGQgYmUgc2luZ2xlLiBUaGVuLCBhIHBy b2Nlc3NvciBpcyB0aGUgYWdncmVnYXRlIG9mIGEgbWFwIG9mIGlucHV0cyBhbmQgYSBzaW5nbGUg b3V0cHV0LiBJdCBtYXkgYmUgdGhhdCB0aGlzIGlzIG5vdCBjb3JyZWN0IGFuZCB0aGF0IG11bHRp cGxlIG9ub2Rlcw0KIGFyZSBuZWVkZWQuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JZiBhIHRhcmdldCBpcyBhbiBhbGlhcywgdGhhdCBp bXBsaWVzIHNldmVyYWwgdGhpbmdzOjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjx1bCBjbGFzcz0i TWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPlRoZXJlIG11c3QgYmUgYW5vdGhlciB0YXJnZXQg d2l0aCB0aGUgc2FtZSBkaWdlc3QgaW4gYSBkZXBlbmRlbmN5IG1hbmlmZXN0PC9saT48bGkgY2xh c3M9IiI+VGhlIHRhcmdldCBpcyBtaXNzaW5nIHNldmVyYWwga2V5IHBpZWNlcyBvZiBpbmZvcm1h dGlvbjoNCjx1bCBjbGFzcz0iIj4NCjxsaSBjbGFzcz0iIj5TaXplPC9saT48bGkgY2xhc3M9IiI+ Q29tcG9uZW50IElEPC9saT48bGkgY2xhc3M9IiI+U3RvcmFnZSBsb2NhdGlvbjwvbGk+PGxpIGNs YXNzPSIiPkVuY29kaW5nPC9saT48L3VsPg0KPC9saT48bGkgY2xhc3M9IiI+VGhlIGNvbnRhaW5p bmcgbWFuaWZlc3QgZG9lc27igJl0IG5lZWQgdG8gaGF2ZSByaWdodHMgdG8gaW5zdGFsbCB0aGUg dGFyZ2V0PC9saT48L3VsPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+VGhlIHBvaW50IG9mIHRoZSBhbGlhcyBpcyB0byByZWRpcmVjdCBhIGNsaWVu dCB0byBkaWZmZXJlbnQgaG9zdGluZyBpbmZyYXN0cnVjdHVyZSBmb3IgYSBnaXZlbiBwYXlsb2Fk LjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj5UaGVyZSBtdXN0IGJlIGEgd2F5IHRvIHJlZmVyZW5jZSB0aGUgcmVzb3VyY2Vz IGRlY2xhcmVkIGJ5IGRlcGVuZGVuY3kgbWFuaWZlc3RzLiBUaGVyZSBhcmUgdHdvIHdheXMgdGhh dCBJIGNhbiBzZWUgdG8gaGFuZGxlIHRoaXM6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPG9sIGNs YXNzPSJNYWlsT3V0bGluZSI+DQo8bGkgY2xhc3M9IiI+VXNlIGFyYml0cmFyeSBuYW1lcyAodGhp cyBpcyB2dWxuZXJhYmxlIHRvIG5vZGUtbmFtZSBjb2xsaXNpb25zKTwvbGk+PGxpIGNsYXNzPSIi PlVzZSBub2RlIHBhdGhzICh0aGlzIG1ha2VzIGNyb3NzLWJyYW5jaCByZWZlcmVuY2VzIG1vcmUg ZGlmZmljdWx0LCBidXQgSeKAmW0gbm90IGNlcnRhaW4gdGhhdCB0aG9zZSBhcmUgbGVnaXRpbWF0 ZTogZWFjaCBtYW5pZmVzdCBzaG91bGQgZGVjbGFyZSBpdHMgZGVwZW5kZW5jaWVzIGV4cGxpY2l0 bHk7IGlmIHRoYXQgbWVhbnMgdGhlcmUgYXJlIGR1cGxpY2F0ZSBtYW5pZmVzdHMgaW4gYSB0cmVl LCB0aGF0IGlzIGFjY2VwdGFibGUuKTwvbGk+PC9vbD4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SWYgbm9kZSBwYXRocyBhcmUgdXNl ZCwgdGhlbiBob3cgYXJlIHRoZXkgZW5jb2RlZD8gSSB3b3VsZCBzdXNwZWN0IHRoZXkgc2hvdWxk IGJlIENCT1IgYXJyYXlzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+SeKAmWxsIHNlZSB3aGF0IEkgY2FuIGRvIGFib3V0IHRob3NlIENE REwgcHJvYmxlbXMhIE9uY2UgSSBoYXZlIGEgY2hhbmNlIHRvIHRha2UgaW4gc29tZSBtb3JlIG9m IHRoZSBmZWVkYmFjaywgSeKAmWxsIHNlbmQgYSBDRERMIGZpbGUgdGhhdCBlbmNvbXBhc3NlcyB0 aGVzZSBhbmQgbW9yZSByZWNvbW1lbmRhdGlvbnMgb3V0LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzLDwvZGl2Pg0KPGRpdiBj bGFzcz0iIj5CcmVuZGFuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiA0IEp1bCAyMDE4LCBhdCAyMToz OCwgQ2Fyc3RlbiBCb3JtYW5uICZsdDs8YSBocmVmPSJtYWlsdG86Y2Fib0B0emkub3JnIiBjbGFz cz0iIj5jYWJvQHR6aS5vcmc8L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUt aW50ZXJjaGFuZ2UtbmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgY2xhc3M9IkJvZHlGcmFnbWVudCI+PGZvbnQgc2l6ZT0iMiIgY2xhc3M9IiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMXB0OyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJQbGFpblRleHQiPk9u IEp1bCA0LCAyMDE4LCBhdCAxMDoyNiwgUsO4bm5pbmdzdGFkLCDDmHl2aW5kICZsdDs8YSBocmVm PSJtYWlsdG86T3l2aW5kLlJvbm5pbmdzdGFkQG5vcmRpY3NlbWkubm8iIGNsYXNzPSIiPk95dmlu ZC5Sb25uaW5nc3RhZEBub3JkaWNzZW1pLm5vPC9hPiZndDsgd3JvdGU6PGJyIGNsYXNzPSIiPg0K Jmd0OyA8YnIgY2xhc3M9IiI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IOKAoiBDRERMIG5pdHBpY2tpbmc6PGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyDigKIgU29tZSBuYW1lIGluY29uc2lzdGVuY2llczog UHJvY2Vzc2luZ1N0ZXAgdnMgUHJvY2Vzc29yLCBUYXJnZXRJbmZvIHZzIFRhcmdldC48YnIgY2xh c3M9IiI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IOKAoiBUaGVyZSdz IHByb2JhYmx5IGEgdHlwbyBpbiB0aGUgZGVmaW5pdGlvbiBvZiBEaXJlY3RpdmUuIFNob3VsZCBp dCBiZSBhbiBhcnJheSBvZiBtYXBzPzxiciBjbGFzcz0iIj4NCiZndDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsg4oCiIFRhcmdldDo6c3RvcmFnZUlkZW50aWZpZXIgYW5kIFRhcmdl dDo6Y29tcG9uZW50SWRlbnRpZmllciBkb24ndCB1c2UgdGhlIGN1c3RvbSB0eXBlcyBmb3IgU3Rv cmFnZUlkZW50aWZpZXIgYW5kIENvbXBvbmVudElkZW50aWZpZXIuPGJyIGNsYXNzPSIiPg0KJmd0 OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyDigKIgSSB0aGluayBkaWdlc3RzIHNo b3VsZCBoYXZlIGEgdHlwZSwgc28gdGhlIHVzZXIgY2FuIG1vcmUgZWFzaWx5IHJlc3RyaWN0IGl0 cyBmb3JtYXQgYWZ0ZXIgY2hvb3NpbmcgYSBkaWdlc3QgYWxnb3JpdGhtLjxiciBjbGFzcz0iIj4N CiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg4oCiIFN1Z2dlc3Rpb246IEFk ZCBuaW50IHRvIHRleHRLZXlzIGdyb3VwLjxiciBjbGFzcz0iIj4NCiZndDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsg4oCiIEF1dGhlbnRpY2F0ZWRNYW5pZmVzdCBzaG91bGQgcHJv YmFibHkgY29udGFpbiBhbiBhdXRoZW50aWNhdGVkTWFuaWZlc3RWZXJzaW9uIG9yIHNpbWlsYXIu PGJyIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyDigKIg JnF1b3Q7UHJvY2Vzc29yJnF1b3Q7IG1pZ2h0IGJlIGNvbmZ1c2luZyAo4oCcZG9lcyBpdCBtZWFu IENQVT/igJ0pLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkl0IGFsc28gaGVscHMgdG8g b2NjYXNpb25hbGx5IHJ1biBpbnN0YW5jZXMgb2YgZm9ybWFsIGxhbmd1YWdlcyB0aHJvdWdoIHNv bWUgdG9vbCB0byBjaGVjayB0aGVt4oCmPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KQXBh cnQgZnJvbSBpbmNvbnNpc3RlbnQgdXNlIG9mIG5hbWVzLCBtb3N0IG9mIHRoZSBzeW50YXggZXJy b3JzIHN0ZW0gZnJvbSB0aGUgYXJjYW5lIHN5bnRheCB0aGF0IENEREwgaXMgdXNpbmcgZm9yIGl0 cyB3b3JrYXJvdW5kIGZvciBub3QgaGF2aW5nIHRydWUgZW51bWVyYXRpb25zIChTZWN0aW9uIDIu Mi4yLjIgb2YgZHJhZnQtaWV0Zi1jYm9yLWNkZGwtMDMudHh0KTsgdGhpcyByZXF1aXJlcyBjb21t YXMgKG9yIG5vdGhpbmcpIGluc3RlYWQgb2YNCiBzbGFzaGVzLCBhbmQgYW4gZW5jbG9zaW5nICZh bXA7LCBzbyB3aXRoIMOYeXZpbmTigJlzIHN1Z2dlc3Rpb24sIHRleHRLZXlzIGJlY29tZXMsIGUu Zy46PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7IHRleHRLZXlzID0gJmFtcDso PGJyIGNsYXNzPSIiPg0KJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHVuaW5pdGlhbGlz ZWQ6IDA8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgbWFuaWZl c3REZXNjcmlwdGlvbjogMTxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBwYXlsb2FkRGVzY3JpcHRpb246IDI8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgdmVuZG9yTmFtZTogMzxiciBjbGFzcz0iIj4NCiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyBtb2RlbE5hbWU6IDQ8YnIgY2xhc3M9IiI+DQombmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgcGF5bG9hZFZlcnNpb246IDU8YnIgY2xhc3M9IiI+DQombmJzcDsg KSAvIG5pbnQ8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpBbmQgUHJvY2Vzc29yIHN0YXJ0 cyBvZmYgYXM6PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7IFByb2Nlc3NvciZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA9IFs8YnIgY2xhc3M9IiI+DQombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmFtcDsoZGVjcnlwdDogMSwgZGVjb21wcmVzczog MiwgdW5kaWZmOiAzLCByZWxvY2F0ZTogNCwgdW5yZWxvY2F0ZTogNSksPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KKE9mIGNvdXJzZSwgdGhlIHNhbWUgdGhpbmcg Y2FuIGJlIGV4cHJlc3NlZCBhczo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsg UHJvY2Vzc29yJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ID0gWzxiciBjbGFz cz0iIj4NCiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmYW1wOyhkZWNyeXB0OiAxLCBk ZWNvbXByZXNzOiAyLCB1bmRpZmY6IDMsIHJlbG9jYXRlOiA0LCB1bnJlbG9jYXRlOiA1KSw8YnIg Y2xhc3M9IiI+DQombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZGVjcnlwdDogMSAvLyBk ZWNvbXByZXNzOiAyIC8vIHVuZGlmZjogMyAvLyByZWxvY2F0ZTogNCAvLyB1bnJlbG9jYXRlOiA1 LDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCk5vdCBzdXJlIHdoYXQgdGhlIGludGVudCBp cyBoZXJlOyBpbiB0aGUgZmlyc3QgY2FzZSwgSeKAmWQgcHJvYmFibHkgYWxzbyBhZGQgYSBsYWJl bCwgYXMgaW48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQombmJzcDsgUHJvY2Vzc29yJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ID0gWzxiciBjbGFzcz0iIj4NCiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBwcm9jZXNzOiAmYW1wOyhkZWNyeXB0OiAxLCBkZWNv bXByZXNzOiAyLCB1bmRpZmY6IDMsIHJlbG9jYXRlOiA0LCB1bnJlbG9jYXRlOiA1KSw8YnIgY2xh c3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJIGhhdmUgYXR0YWNoZWQgYSB2ZXJzaW9uIHRoYXQgcGFy c2VzIChJIGRvbuKAmXQgdGhpbmsgYW4gYXR0YWNobWVudCB3aWxsIG1ha2UgaXQgdG8gdGhlIGxp c3RzKSBidXQgZG9lcyBub3QgYWRkcmVzcyBhbnkgb3RoZXIgb2Ygw5h5dmluZOKAmXMgc3VnZ2Vz dGlvbnMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlIG90aGVyIHByb2JsZW0gdGhh dCBzaG91bGQgcHJvYmFibHkgYmUgYWRkcmVzc2VkIGlzIHRoYXQgbW9zdCBydWxlcyBhcmUgdW51 c2VkIOKAlCB0aGVyZSB3b3VsZCBuZWVkIHRvIGJlIG9uZSBjZGRsIGZpbGUgZm9yIHRoZSBtYW5p ZmVzdCwgYW5kIG1heWJlIG9uZSBmb3IgdGhlIENPU0UgZW52ZWxvcGUuJm5ic3A7IFdlIHNpbXBs eSBkb27igJl0IGhhdmUgYSBnb29kIHdheSBpbiBDRERMIHlldCB0byBzYXkg4oCcTWFuaWZlc3Qg Z29lcyB0aHJvdWdoIGFuIGFsZ29yaXRobQ0KIGFuZCB0dXJucyB1cCBpbiBDT1NFX1NpZ27igJ0g 4oCUIGFjdHVhbGx5LCBpbiB0aGlzIGNhc2UgdGhpcyBjb3VsZCBiZSBzb2x2ZWQgaW4gcGFydCBh cyB0aGUgbWFuaWZlc3QgdHVybnMgdXAgaW4gY2xlYXJ0ZXp0LjxiciBjbGFzcz0iIj4NCkkgaGF2 ZSBpbmNsdWRlZCBhIGRpcnR5IGhhY2sgaW4gdGhlIGF0dGFjaGVkIHdoaWNoIEkgaW50ZW5kIHRv IGZpeC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJ4oCZbSBDQ2luZyB0aGUgQ0JPUiBX RyB0byBnaXZlIGFuIGV4YW1wbGUgZm9yIENEREwgYmVpbmcgdXNlZCBpbiBhbm90aGVyIFdHLiZu YnNwOyBJZiB5b3Ugd2FudCB0byBkaXNjdXNzIGEgQ0RETCBmZWF0dXJlLCBwbGVhc2Ugc3RyaWtl IFNVSVQgZnJvbSB0aGUgbGlzdCAoYW5kIGlmIHlvdSB3YW50IHRvIGRpc2N1c3MgYSBTVUlUIGZl YXR1cmUsIG1heWJlIHN0cmlrZSBDQk9SIGZyb20gdGhlIGxpc3QpLjxiciBjbGFzcz0iIj4NCjxi ciBjbGFzcz0iIj4NCkdyw7zDn2UsIENhcnN0ZW48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSJCb2R5RnJhZ21lbnQi Pjxmb250IHNpemU9IjIiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTFwdDsiIGNs YXNzPSIiPg0KPGRpdiBjbGFzcz0iUGxhaW5UZXh0Ij48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvc3Bhbj48L2ZvbnQ+PC9kaXY+DQo8L2Rpdj4NCjxzcGFuIGlkPSJjaWQ6 NzEzMkNFNzcxNENFNzI0RTlDNDAyQ0RDRTY5NEQ1OTBAZXVycHJkMDgucHJvZC5vdXRsb29rLmNv bSI+Jmx0O3N1aXQuY2RkbCZndDs8L3NwYW4+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z ZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFu ayB5b3UuDQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_F4C61E4F4FCD431B8423F65038F6F476armcom_-- From nobody Fri Jul 13 08:47:05 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8009C130E5B for ; Fri, 13 Jul 2018 08:46:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2YzvMA9jgF3W for ; Fri, 13 Jul 2018 08:46:54 -0700 (PDT) Received: from mail-it0-x22e.google.com (mail-it0-x22e.google.com [IPv6:2607:f8b0:4001:c0b::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8821D130F07 for ; Fri, 13 Jul 2018 08:46:54 -0700 (PDT) Received: by mail-it0-x22e.google.com with SMTP id 16-v6so12073896itl.5 for ; Fri, 13 Jul 2018 08:46:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=OVGM64VGNwqLF2w5/SnQaCqtVMK/3SS2A8sfF7xJpQc=; b=gHBeViQUVhT3vxcSF43f3HA9EGcPLZCtly8+ydowB6dkRZPe67cEzWlNGZOYyNMuWo 0XaOFax7VMlUxD2Gxa6OzIhDXiOVCa8wEH+1ELz8X2g90vfRetCoJcJx9qlZOjGSUcva jEP+3jNH6ugflxRiCeAcyAs5guXHqpb0STB+c= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=OVGM64VGNwqLF2w5/SnQaCqtVMK/3SS2A8sfF7xJpQc=; b=gs/cxjeAik9QnXYKoD/JMPA1MpTZYYPXlQYnPucT+Io9u9Y5iGz13avPLo0EsCe/Ef JK1e7QIJYQOm4oUf8VoTJJYj55vrxPbs3xWHnYN7yroopQqE713jbC+TbtM7yI7sAWJr P8FHpp2fo7Nbo28/+i9TgKIwUeZ2OTCId4IDCk3GxYRjo/e+K9kG69u+Mmwk+Xjs/8V7 clJiDbhQuwl9jYzfUtqX4E0sC6D753u/ynE7YF7yX0GhuQHOKquO/Kx/vfKTh7QsnDSZ ZgMtXM24DlfaWMtfZEOyIPZ3e48Atg7pqxbCkl6oZkUpydqHJWRi/yCR24bXe58i4wnD BC+g== X-Gm-Message-State: AOUpUlGJbofZdknkgIII3hmHphQGeNbPoRPJpYkAHqBqQOxBWZ040Ejc O6FHmN1M9xGSNEzWgw5NDjx0kg== X-Google-Smtp-Source: AAOMgpeZ4+V82h6WKfM4PHdzDYs2to8g+Rhb2z7Bu7CuJJWlaTQuRtPcDJTh4+oRFHacV2aPw52fFQ== X-Received: by 2002:a24:2745:: with SMTP id g66-v6mr5212976ita.77.1531496813557; Fri, 13 Jul 2018 08:46:53 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id x94-v6sm4146633ita.18.2018.07.13.08.46.52 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Jul 2018 08:46:52 -0700 (PDT) Date: Fri, 13 Jul 2018 09:46:50 -0600 From: David Brown To: Brendan Moran Cc: Hannes Tschofenig , Denis , "suit@ietf.org" Message-ID: <20180713154650.GA27373@davidb.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2018 15:47:03 -0000 On Thu, Jul 12, 2018 at 02:19:58PM +0000, Brendan Moran wrote: >I think there’s insufficiently precise language somewhere in the architecture >document. This is absolutely not the intent of the architecture. >Locally-initiated rollback is a necessary feature for guaranteeing the >reliability of a device. > >The specific threat we’re trying to defend against is: > > 1. Device X has firmware A. > 2. Firmware Authority releases firmware B > 3. Device X is updated to firmware B > 4. Malicious actor finds vulnerability in firmware A that is no longer present > in firmware B. > 5. Malicious actor reissues firmware A to device X > 6. Device X reverts to firmware A > 7. Malicious actor exploits device using firmware A. > >This means that it is dangerous to have any remote triggers for rollbacks >without strong guarantees of authenticity. I agree here. The problem I've encountered is when it comes to people implementing actual devices in the field, they ignore this security requirement, favoring the ability to easily trigger a revert. >I think this is actually an optimisation problem. Is the client smart enough to >look for a local copy of a resource before fetching it remotely? Does this need >to be addressed in the manifest directly? I haven’t seen a compelling argument >for that yet. Unfortunately, I think we're giving too much ability to the "client". At least originally, our charter was intended to include very resource-constrained devices. I'm going to write up a few more emails about some specifics, but I think we need to at least make it possible for the client to not be very smart. I think it would be better for the instructions to be more explicit, and maybe explicitly state something like "move firmware in slot 1 into slot 0". More likely, something like: 1. Verify slot one contains hash XXX. 2. Swap slot 1 and 0. But, let me write this up in a separate email. >Notwithstanding the above, the way to refer to a “built-in†image is to refer >to it by uri: [1]file:///, for example. I don’t think there’s a uri namespace >for numerically addressed storage (raw flash). I should note that URIs are >optional. That is intended for use when a device knows where to look for >updates without being told, and behaviour is implementation-defined. An >appropriate approach to a manifest that has no URI is to walk through available >sources of resources by cost, checking if they have the specified payload (by >hash). The lowest cost is the local storage, which would solve this problem, I >think. > >Does that address the problem? Remember, some of this decision has to be made on every boot, based on one or more manifests. Having to hash multiple firmware slots would not be ideal. David From nobody Fri Jul 13 09:18:56 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99305130E52 for ; Fri, 13 Jul 2018 09:18:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J9O7MQG3iKWt for ; Fri, 13 Jul 2018 09:18:52 -0700 (PDT) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04EF9130E59 for ; Fri, 13 Jul 2018 09:18:52 -0700 (PDT) Received: by mail-io0-x22a.google.com with SMTP id e13-v6so31785113iof.6 for ; Fri, 13 Jul 2018 09:18:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=IEH9/dR5E/dX5cUjprnhwCvUDowKwL+d2jVcIB/ppTQ=; b=HbeMrCckhij/hR9x7S8I9p0LovnX55iXTMgmGWfkbVgX9EBazE+MmxYWH9yk6CtIpe Ye9iNY+4G36zS5HUPMX1pU+t+nzVCsgrTYKmnx5rE7jyie6cTAmNFXwDSZiQN9+iEWxy QHyENnQG0AAlD4wgUQkuWnPsu6UyZ+dZLbayU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=IEH9/dR5E/dX5cUjprnhwCvUDowKwL+d2jVcIB/ppTQ=; b=OJW3LD2p6fw6lSw2+epQ8vDP6snVfPi3ep0PI6u8kedDURzJosGT7pRWXHRd6XH4Fb 1QS6w5NNtbaT287s2ohOXLbGaND4SgiGhjSiIBi1/V6mAsJfkRm7bQbgQFjzJ5nQ9zHA 0X2IlZ3d6IZZgXU6DtszGApDEXh3S5wCRPDzKf4OEzZKiprK7FTTXOwPU//8HDAgjxJe opIWY0ZiqNo5O5oDAGxRWa0vxEC7bN4Tzvw7wAzKPFYWTD1uq6HAQYGXpi4fj5F+lnie tg6eAWgUhc3CXKqJEEXIl2c5cxm9Q0JjIRI5q8luNdUGBpP+d6BsE5EXcBcsgQopBhvu Jb9g== X-Gm-Message-State: AOUpUlGd57QIgFSDMm8OxaCnRdymwTQyPP5m3OiOBgWeZelSRB8s6tzF CUkDApGRkrLJCKscrJerkJ1hSw== X-Google-Smtp-Source: AAOMgpfgXIslAszTYVNx1ZRxqwhdGgKzYl64Ed9gC5rxYFFkVQvcNwiUfkOwLsbpBylqoghZm4vJgA== X-Received: by 2002:a6b:a313:: with SMTP id m19-v6mr31582283ioe.98.1531498731072; Fri, 13 Jul 2018 09:18:51 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id k200-v6sm3692402ite.39.2018.07.13.09.18.49 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Jul 2018 09:18:50 -0700 (PDT) Date: Fri, 13 Jul 2018 10:18:48 -0600 From: David Brown To: Brendan Moran Cc: suit , Hannes Tschofenig Message-ID: <20180713161848.GB27373@davidb.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2018 16:18:55 -0000 On Tue, Jul 03, 2018 at 09:08:02PM +0000, Brendan Moran wrote: >This draft is a significant departure from previous drafts, so I think it is >important to highlight the changes. The draft requires a lot of text that >hasn’t been written yet, so I will try to put some of that here for discussion. > >[1]https://datatracker.ietf.org/doc/draft-moran-suit-manifest/ Yesterday, I spent some time going through this draft to try and create an example manifest based on how MCUboot currently behaves. I found many things that I wasn't clear on the meaning of, and wasn't quite certain how to structure the manifest for my, what I believe, is a fairly simple case. In addition, I feel there is an assumption in the manifest that the processing will be done in two parts: 1. Parse the CBOR into some kind of in-memory data structure. 2. Traverse this structure in various ways, making decisions and performing processing. This is a lot to ask of code on a resource-constrained device, where we likely are going to only have tens of kB of code space available. I would like to consider making the manifest in such a manner that it is possible to construct at least a simple version that can be processed linearly (in CBOR order). ## What MCUboot does Targets using MCUboot currently use a manifest format that is combined directly with the image. It is formatted something like: ----------------------- | Header | ... | Image length | ... ----------------------- | Padding ----------------------- | Execute in place | firmware image | ... ----------------------- | Manifest header ----------------------- | TLV encoded manifest +---------------------- The flash memory is divided as follows: +------------------------- | Bootloader +------------------------- | Slot 0 | XIP Application Code +------------------------- | Slot 1 | Update image +------------------------- | Scratch +------------------------- The two actors involve that are running on the MCU are: 1. The update application, and 2. MCUboot itself. The update application is code combined with the normal application running on the target. It is responsible for downloading this image, possibly verifying it, and writing it into flash in Slot 1. This code is part of the image running in slot 0. Once this is written, it reboots. MCUboot, upon boot, checks slot 1 for a manifest, and if there is a valid update present, performs either a "swap", exchanging the data in slot 0 and slot 1 (using scratch to be robust against power loss), or overwrites slot 1 onto slot 0 (depends on how it is configured). It then verifies the image in slot 0, and if valid transfers control into the XIP image in slot 0. The TLV manifest is currently quite simple, an essentialy consists of a series of steps that MCUboot walks through. These steps can consist of: - Compute a hash of the image and compare with XXXXX - Verify a signature of the hash using a built-in public key. There can be multiple signatures, generally to support either multiple algorithms, or to support multiple signers. When it completes the processing, it checks that it did indeed verify a hash, and at least one signature, at which point it will boot. ## Encoding this in a SUIT manifest. My initial assumption was that we could place the SUIT manifest in the above images where the current Manifest header and TLV manifest live. It would not be difficult to distinguish between a COSE_Sign block and the existing header, although it is unlikely that the code could be compiled to include processing for both formats. I envision the processing something along the lines of: 1. MCUboot decodes the COSE_Sign data. Although COSE seems to also assume that it will be decoded into RAM and processed there, it isn't too difficult to simply record decoded offsets, and construct the Sig_structure virtually, invoking the hash algorithm incrementally. My initial guess is that the code to process this would take perhaps 2-3 times as much code to process as the current TLV processing. The result will be a pointer and length to the payload, which is the SUIT manifest. 2. MCUboot then decodes the SUIT manifest. The goal is for it to determine: 1. Does this manifest describe the attached image, 2. Is the manifest applicable, and 3. Should it do an image swap (for example if the newer image is in slot 1). In light of this, I tried to come up with a sample manifest, but it wasn't clear to me where and what things should be conveyed in it. Keep in mind that ideally, the manifest could be processed in a single pass, possibly with a small amount of RAM used to point back to key information gained. I came up with the following: - The preconditions would be one or more IdConditions to associated the image with a particular device. This adds functionality to what MCUboot currently does. - Possibly a 'dependency' resource (functionality needed for future multiple image work). - A payload resource that describes the payload this manifest is attached to. Perhaps this is sufficient for this use case. Given that I don't understand what the 'inode' and 'onode' fields represent, I'm not sure how processors and targets would be configured to describe this. Maybe they are intended for a more complex use case. I will send another email about my confusion in this regard. Given the above, in the manifest, the 'digestInfo', 'textReference', 'nonce', and 'sequence' would have meaningful values. There would probably be some 'preConditions', and 'resources', but the rest of the arrays would be blank. Does my interpretation seem reasonable? Or would it also be expected that the processing and/or directives be involved in this case. For our use case, the two actors perform different steps, and it may not even be meaningful to encode that information in the manifest. If we do want to encode the steps to perform, something would need to be added to indicate which actor is supposed to perform which steps. David From nobody Fri Jul 13 09:39:50 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7672130E9F for ; Fri, 13 Jul 2018 09:39:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EOj-dOmVPCfR for ; Fri, 13 Jul 2018 09:39:45 -0700 (PDT) Received: from mail-it0-x235.google.com (mail-it0-x235.google.com [IPv6:2607:f8b0:4001:c0b::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC2F7130E88 for ; Fri, 13 Jul 2018 09:39:44 -0700 (PDT) Received: by mail-it0-x235.google.com with SMTP id p17-v6so12360073itc.2 for ; Fri, 13 Jul 2018 09:39:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=c3zaE/STABbRQ7P5rnaVwsjlFdm8U+vbAiTsT/mih50=; b=MVVXqqb8H3SCP4FHfMwiR/wLiHGgX11UlC+TVWF2v15jnWEczS5eWVVhw0thRywaWI dT5ingf3iHR1vfeRAPGqSwGyw0uEkFtuNHugvSS1HuErP3s2w6LbqomUm/JPZt3GYIu7 /LllCZjb6Ba/VhthBU/nCtnu0q/lPSIRN+mSA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=c3zaE/STABbRQ7P5rnaVwsjlFdm8U+vbAiTsT/mih50=; b=rKVIRCgj9Zob1uF6cQJsID3rBqheYSck01oy1iy7D735828L7gzqFdwRi2hNL4My0n mOZcpVMgxExQzAcAU+gu4ENj8ZqaZnmoh8ZulyeXZtFLry9ejD7rghf3kVDLbT2VkS26 B2FeN5Es22Yjyra+i8nlLFASrPaXNoWrQocZnu+DLfhUwLtIRPJnfDMGu7+jp5eZyAHC rGVoij90w/HUX97jkd5DQPM0RoUY/KuBL8l56cFXfkpUpB5LZg5vBqrHMmXC6FT9xHVX wByt2LZ8Fm6gkcYp752lfg2GFTl3SP0LNAJP3vu0ODGB/ahPhLUeobXisOZk0oXDYPnN ZiRw== X-Gm-Message-State: AOUpUlHWsP6K2h6u/223WR9jYUrdixnM9tvq6VbK4uckGOu1Dd2iGwTC oG6MPnRtVkqAQpAagfCtU51/zQ== X-Google-Smtp-Source: AAOMgpfvtMbSlCfvlP5GlRwV6OzH7wHjC9qDsclbi22ztaESaOPbRVaPDid65SOUWQqG7U1qNGECGw== X-Received: by 2002:a02:4442:: with SMTP id o63-v6mr6189139jaa.75.1531499984209; Fri, 13 Jul 2018 09:39:44 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c:6245:cbff:fe6d:5400]) by smtp.gmail.com with ESMTPSA id q204-v6sm2251147itb.27.2018.07.13.09.39.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 13 Jul 2018 09:39:43 -0700 (PDT) Date: Fri, 13 Jul 2018 10:39:41 -0600 From: David Brown To: Brendan Moran Cc: suit , Hannes Tschofenig Message-ID: <20180713163941.GC27373@davidb.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.9.4 (2018-02-28) Archived-At: Subject: Re: [Suit] [suit]: draft-moran-suit-manifest-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Jul 2018 16:39:49 -0000 On Tue, Jul 03, 2018 at 09:08:02PM +0000, Brendan Moran wrote: >This draft is a significant departure from previous drafts, so I think it is >important to highlight the changes. The draft requires a lot of text that >hasn’t been written yet, so I will try to put some of that here for discussion. > >[1]https://datatracker.ietf.org/doc/draft-moran-suit-manifest/ In this email, I wanted to enumerate the parts of the current manifest draft that are either unclear to me (possibly just needing more explanation) and/or should be reworked. 1. Signature contents. A few things need to be spelled out about the COSE_Mac and COSE_Sign blocks: - The payload should be a "Manifest". - What is the content type used for this. Presumably, we will register one for a SUIT manifest, when the RFC is finalized, but it does need to be stated. Just stating it is CBOR could also work, but then a processor would have to look into the payload to determine if it is a manifest. - Is the CBOR for the manifest tagged? If so, we should register a tag for our manifest format. 2. DigestInfo We need to define the values for digestAlgorithm, and what is contained in digestParameters. Are these related to the values defined in COSE, or at least do they come from the same number space? 3. Encoding of ProcessingStep, Pre and Post conditions. Using different arrays with the first element of the array is a number indicating the meaning of the remainder of the array is different than how I've seen other data represented in CBOR. I'm presuming that this is so that order can preserved, where as a map would require a specific order for a canonical encoding. I don't know the ramifications of this on processing code. It is certainly legal from CBOR's point of view. Other possibilities would be to have the fields be an array of pairs, similar to how a map would be encoded, but described as an array so that order could be preserved. I don't know if this can be represented in CDDL. It could also be an array of maps. The grouping simply used to allow ordering to be enforced when that is needed. 4. The Directive encoding The CDDL grammar allows the "=>" to be used inside of an array (so this parses), but there are no example or explanation of what this would mean. Do we intend for the Directive to be a map, or are we hoping to have something of an ordered map, similar to what I described above as an array of pairs. 5. Use of numbers. We have numerous fields that make use of small integers. Is the intent that these be fixed, and any additional values only be allowed in the 'extensions' field? 6. Extensions. The extensions are described as maps. Do we envision a case where ordering needs to be preserved in extensions? In addition, do we need to have something similar to the criticality header in COSE where a manifest can say certain extensions are mandatory, and that an actor that doesn't understand that extension should reject the manifest? Thanks, David From nobody Sat Jul 14 01:30:45 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AD41130EF2; Sat, 14 Jul 2018 01:30:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2dN3zROmbCtw; Sat, 14 Jul 2018 01:30:34 -0700 (PDT) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B3E2130DD3; Sat, 14 Jul 2018 01:30:33 -0700 (PDT) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1feFwl-0003xw-RP; Sat, 14 Jul 2018 10:30:32 +0200 From: Gurshabad Grover To: suit@ietf.org References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Cc: hrpc@irtf.org Openpgp: preference=signencrypt Autocrypt: addr=gurshabad@cis-india.org; keydata= xsFNBFriroIBEADfyDpCD8eborMUMXKtZzjo4t2KzrAlUVYgE/TFtrwUP+4Xw4dzakDIzST8 sVYmlXIWhM5NBBTZSQ190vsxrkbi0xxLcXYM2olZEtqkJ8zONZeZLBeGvcfMymtHqD4jHwYb Zm7OXnS45fWDL+HOoMP/VCwEn098rYfnllIkYQD1Gc28Ig+ywjGg8y5p0qMmmmhm2ckgLjnG MJX8t273MSc8wsn/UYH922yif3MQXmrzqgnRl9hRzf90SKqAw38bw7wccb55pIItloKYsi0r zYBKJSOPXn91Z21TpOSTy21M0MZYEAlDn1zeea+q8TggfHNWxOXoKrIm1pqZFRz0k+8i2siJ AHf8bRm/fhukA6szZ6b2nNPxjkAmOv9zvGu6RZGbmeLvQYVBSSnZ67ayZrkKwn7KIyAV6hQM /bVnD8eEZ2tZ0S8lxoZFYSNeMGt2b6WelFZO97/LbjxaJUHd9K8g5H0MwqN1NXoBxRwllVRC 3sVHVoWTBqnKo8qplzvQEAto69PpvuxxKTOFEJeQqmn1b/fo3sLRb4YiIg8Ax+Np7Huzzjk6 vKKgpIwIN7yEUj/ReWi/UA/W4wSg3XkcqTf7h73crnN/1At0PdgozbDV2UbcApaldStP4DfG UiQl0/7MiYLKapDDuSahmoeH3xrNnrzS9BAfuGHezzDbMyPLXQARAQABzSpHdXJzaGFiYWQg R3JvdmVyIDxndXJzaGFiYWRAY2lzLWluZGlhLm9yZz7CwX0EEwEIACcFAlriroICGyMFCQlm AYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQrbl/X+ubfC7/bQ//YQv7zqQE433xxsN/ 3GYKoOFccBy3WvV4DxrTskJ3n3k5lfcZolbc8TQksQOTzyerNt2ZA7fsGZa7eFSW+xR4Yq3/ C9o+5FOoHGhyZhb+x17MILhmyvyUNSj7SdKrRISgurMbV2Vv8LxmTcdrK6CdFF6JLH+opzU1 NlRKwZqROPgbYZEB2QFIUbGfgh2I5AXNyV2XbT7fagfkHk+v9AUV7POP2H1+AZ1xq6iFTm2o 9ufNZsp2bInsDohcVBKC3aH2cnFMjvIXpNoUOx8vb5A2xW0aBUTTJDB/uZw53WOg3kehrCNb ZkML3FnDZLRuu1e8DSWmwk5YIoDzt5bMCgfUwb0C6Q+JuM8lC+8CEEa9qamLc+fhvFAzcrWp VWuSaVeLdhe5NxmtlRYNZdGuKy6sRHjwsEWlwzRylhm74fiDR3aA1eIFsfmYLd4z+i1Fp23Y dHJf7/Gor2CmOxphog9DEA9WCuORXfx4De7hoMKwW4gWKw1A8B12Cv4EOkXmCsWsOnfDEarr 2Yl6elxkhQRfKjAesXb0cezRzZgwsWIsbeYsuWFF7Xi6IzUJ27lxU3p5PcyY8O8aDYOn+pu0 YFJ7s3u2VRRgptVZJmkcN3WTApXSHY8fGl5xAakM/bqFJj9uj5zlMnFN2EplC6/mQkfYfy2f siaGTP/GQV4OSuOeuMLOwU0EWuKuggEQAJ4lAzB72gHw4+rbyxmQNNVmvgYVZPjFtO/MQdYi x1QwRP/gxxqPqTd/ZwQvmPGzXRKw10B7uKSRk6YP12+IG0mXJwHGp9q5CWJE0XNGqX3UWbAc KIzxqPNpsf8e6Bv7jdW0YwLBxJ+RW0NNL6uAxz0sr2frbnS+EZB3cU+zOZzp/9YfTUZO2lxF NzgJoErKe/HLp7aBeJXBBcwO0LQlIT80rTZx2KihBa/Ww/y9E9gV/HacJu/Ncb6E/G3e4xGj 9w9L+UW43q01wy+FSUKy9FLc7D40WqQsj8SXZEpl84SyLcJRoX3mtj59bX2SAN2VB2BAksTu qCh00IcIUGfyHziu5PwUWYM96gOhDSocP4wSeiQ8TwLzaffllz2qhdI296a9lCIYIeWVytEd NU9jJ3RbzXAgE0pnDauNXDaQv1FS5jYi8rlslJUxKnrS69BFNjM5RqQ16Cm0C4rKL7/a8wHC r4VjcjSCM8Lzv8YOOitJ9Yt4Y8SVfO5s3YvxcdSr56nX0W3B1kGbG1GpqWTzOgXzGF5bIsbV 7SPecwUs9ShvmLmZzDUxIQ68n4zj3lMZn5I+pP+Ew6nAAiuSmKdr5cygnCH/NVJzil07t+X4 uR6oKHBhuMFYF1c6Wxk36m+EZz5ZHFaT4rN0WDIJdAEqRzD0Z56V6ansDF8y+ksh0SHlABEB AAHCwWUEGAEIAA8FAlriroICGwwFCQlmAYAACgkQrbl/X+ubfC50rhAAloTaq/fZC1gtiVtU wOB+00gEkjgmzt+rLkW+l2EySTST7tje57W83UZwzCX746B2O//Bqardxz9R1Vr0VFiwHA8g 3qeBqPqiv1WoQch/iZ5d/1MxK4A9xDag1uyqLR8RuGlZ8lATmcP3IabKiuiBV4MlFZ7V2Ib6 5ToPf28xxSyjMzTjQObIG0e009uHlu2z+iQVshLyoyVVAOWWa88D6iuBDC/EtBRjlpjLAjuR YhWVYX6KHdVUijKMHN2RqjpX5O2wPL7NcMY/wsTq7EteUeI75hxFvargRXkEt1XR8t52LC0u IE2OjpzY5re/ROUbfsqL8trjAOrSJ+Fx5H8AYl9JaoVxohhxDZgNtgNtPbh/8Nnlf9daj/bh lZcTBO98XLQwMnyHGPdyhIodpWPq2C09Ys3TkQsbcdMMB1pqnEK5Vz1zIKkEEX7QVsLdrz7C 2CFsauc/9PHj+4njCHslXtzBOiVu5FXTnbCwPrLJs5iEUkUCb6qtE/2mSCTrAanzOTTOmqiM cnNTI1Tj0ht462S9VypppQnKCv8shGxXG7BadZTv+pNCA/WfB2kk1sS3ZwB0wBWX4p41fxs+ ArM9ew2SzQ/vBrEfO7ljPfZZmBqH4t/vgAZBnOtTxCGlPEIJqiMqtGHRqIqpiR20QfxEUuXI MfMfa9QJpisdNmqoUyc= Message-ID: Date: Sat, 14 Jul 2018 14:00:29 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Rv6hPt0figjwdfmZeLAsQmNUAdAnlHmxa" X-Virus-Scanned: by clamav at smarthost1.samage.net X-Scan-Signature: b76837ecbba1170f708de966edddc2d0 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices (Invite for HRPC session) X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Jul 2018 08:30:37 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Rv6hPt0figjwdfmZeLAsQmNUAdAnlHmxa Content-Type: multipart/mixed; boundary="scIRKj5JsZdJSXGR9Cn2IBkBrL8k5pHiX"; protected-headers="v1" From: Gurshabad Grover To: suit@ietf.org Cc: hrpc@irtf.org Message-ID: Subject: Re: HR Review: Firmware Update Architecture for IoT Devices (Invite for HRPC session) References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> In-Reply-To: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> --scIRKj5JsZdJSXGR9Cn2IBkBrL8k5pHiX Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Hi, Thank you for engaging with the recommendations. As I mentioned earlier, the review is a part of the efforts of the Human Rights Protocol Considerations (HRPC) group. We invite you to the HRPC session at IETF102, wherein we will have a short discussion of the review= =2E HRPC Session at IETF102 Date: July 19 (Thursday) Time: 15:50-17:50 EDT (Afternoon session II) Room: Duluth (https://datatracker.ietf.org/meeting/102/floor-plan?room=3Dduluth#2nd-fl= oor-convention-floor-2) Agenda: https://datatracker.ietf.org/meeting/102/materials/agenda-102-hrpc-03 Looking forward to hearing your thoughts at the session. Gurshabad On Thursday 12 July 2018 03:00 AM, Gurshabad Grover wrote: > Review: A Firmware Update Architecture for Internet of Things Devices > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > An assessment of human rights considerations in > * draft-ietf-suit-architecture-01 > * draft-moran-suit-manifest-02 > * draft-ietf-suit-information-model-01 [...] --scIRKj5JsZdJSXGR9Cn2IBkBrL8k5pHiX-- --Rv6hPt0figjwdfmZeLAsQmNUAdAnlHmxa Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJbSbSlAAoJEK25f1/rm3wu3ysP/RT45BFcuHzWO1C7mf0nEDk9 SJCbK96zbQpHtn1TJYs1+oS3Ddf4Ok9667VsypdawO3e7BIB5KufVSucwFfw8x8z EKZgA/jZdgghgpLhVNOXrfHZtRfqG/q+lmY4eda/kpUQvRqFKThtCStZtz1LvUm6 TVxyWtr1CFiZSXNRBf2/nYOBEqj7OwtuB6E2y2LeEd8s8vCcvnn3xlkVoa+recMM g99sMZQ9zU9ZBCQiRrSyhrRZcovvmtfNk48sKMKbQylCmR5hR62R4JnJHuTe75AB Xtp2Uh03y++YRxf1D0Ohe72KsklDlZNuxMvdwRNPESyBi9LHzp/NWeMG/5D5BBAg grS70WcoqG4WyjuOmHnAsTiC6ed8++0vjo2yHeYMjv6H7Ct+NjxnyCc+ny5fyOPQ ZJFa+j5M/hV/VTf4NYSFgkSXVwT9+makuFxvmptowbiBOpqa9tLg8Mkb5N5x7Dpd YymScNnlpyFL58IGWztTghSHzUTNOeix348SYAPBLgg/ft2jrNlI0fIwA4DgbdB5 9NdMx5sxzhZ4N4sKZzx3rHSdgUEma2eIp/XuMx5M7Zhf+arBkPblcmdVAHUAy4I3 jmj6Rm0AtJpE1dgrI7Xr2QkL0e/whb+0arRRQKgjxg7rt4yvNEpfOcPPLLLuEUwx 5PvutF8h05Y8VTWtLP4p =q/TU -----END PGP SIGNATURE----- --Rv6hPt0figjwdfmZeLAsQmNUAdAnlHmxa-- From nobody Mon Jul 16 15:45:24 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 988F7128BAC for ; Mon, 16 Jul 2018 15:45:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.009 X-Spam-Level: X-Spam-Status: No, score=-2.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_DKIMWL_WL_HIGH=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m6-zQAcVk8hI for ; Mon, 16 Jul 2018 15:45:19 -0700 (PDT) Received: from GCC01-DM2-obe.outbound.protection.outlook.com (mail-dm2gcc01on070f.outbound.protection.outlook.com [IPv6:2a01:111:f400:fd01::70f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E561712DD85 for ; Mon, 16 Jul 2018 15:45:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=2xmq0ObdNqDk5zfUIG8h/eNjKfcxyUFK0OtwPZbx4+Y=; b=m/eW56ctz4VTpux89bHx2X5YN4ANrGy5FENRVpUUeIIWsxYXAs9fNQxvsjRzEmrPYdv471JCLh1TY/MetZAuR9O2xkaSUILmNahAKh+BPyfDgDfsa5RGKqvx1bulMwLy3uemPI0q64BydwadFdM9B+e+wqpTnOqDZl2gmvor00U= Received: from BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) by BL0PR0901MB2305.namprd09.prod.outlook.com (52.132.18.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.17; Mon, 16 Jul 2018 22:45:16 +0000 Received: from BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::90d9:a6c1:597f:189f]) by BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::90d9:a6c1:597f:189f%4]) with mapi id 15.20.0952.021; Mon, 16 Jul 2018 22:45:16 +0000 From: "Waltermire, David A. (Fed)" To: "suit@ietf.org" Thread-Topic: Please send presentations for the SUIT WG meeting Thread-Index: AQHUHVWGUHrTlZNSWUC/wOLT4ZfNJQ== Date: Mon, 16 Jul 2018 22:45:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [132.163.218.194] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL0PR0901MB2305; 7:f3pja/kRfAXkCQluqkNg5C0mqtwGkMXUUejo3pxprn+/JppjcuhUYsHzzDXg8vg7MnHQ4nIGn8NpTNeg+vX0WWsqW1SyQSDFafaoDEXsscyWK80x6YjzcM+x2TqgHY6gEYUlcqTbBN1UxjXaYxff2fMDAVdPu9Yb8HblUo+heKESgVTdB6oGy/Il2mNnoIqcJCQ6lrMJKiz7faQS2UHfxwXMdZO+hJE0BONW9m+vhIVSCvhLqCAOgNWq7enGJujq x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 5de73021-4c46-4783-ddbb-08d5eb6dcd0e x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:BL0PR0901MB2305; x-ms-traffictypediagnostic: BL0PR0901MB2305: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(10201501046)(93006095)(93001095)(3002001)(3231311)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123560045)(20161123562045)(6072148)(201708071742011)(7699016); SRVR:BL0PR0901MB2305; BCL:0; PCL:0; RULEID:; SRVR:BL0PR0901MB2305; x-forefront-prvs: 073515755F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(136003)(39860400002)(376002)(396003)(366004)(189003)(199004)(6506007)(7696005)(5250100002)(53936002)(9686003)(606006)(14454004)(102836004)(478600001)(966005)(486006)(236005)(26005)(186003)(2501003)(7736002)(5660300001)(86362001)(6116002)(8676002)(68736007)(2906002)(2351001)(55016002)(5640700003)(54896002)(6916009)(74316002)(6436002)(6606003)(6306002)(81166006)(81156014)(1730700003)(3846002)(25786009)(97736004)(2900100001)(106356001)(105586002)(19627405001)(256004)(99286004)(476003)(33656002)(8936002)(316002)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB2305; H:BL0PR0901MB2306.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: S+7XHrd08B73iJ6qY4DjFRNSpQlQrNk5NPCGTjftECeeCUpqZPwupbTP67OoTgFq4qyqi9PGPlT0rx38ZqW//nB4IVF/yubYXQec6iZ6wMrmZSVeWcYCA75REKLgpWoaup4AEI0yuCkal+ZZa1ijkXjGtr9IGlIWrXp0vl2TinO2lJurE3Z5YXJv3W0bJI9w0exLPI0tN6cvIPUX7QsaBv30aI64ETS6Spy04790+gX5m49+4RVKTldpadLmqL2cZr2pkE37AXi3gxb8z9EviCbtSpbmf1/lrpSoHBCOCH35qfTeoZx9aw+DzZVR4LCAGNw2vrvkQvAec1vEoPQmi/i1a22gBeoSGXwrM/AEYuM= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BL0PR0901MB23060AD72223C5F717F562BEF05D0BL0PR0901MB2306_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 5de73021-4c46-4783-ddbb-08d5eb6dcd0e X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jul 2018 22:45:16.5888 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB2305 Archived-At: Subject: [Suit] Please send presentations for the SUIT WG meeting X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Jul 2018 22:45:23 -0000 --_000_BL0PR0901MB23060AD72223C5F717F562BEF05D0BL0PR0901MB2306_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Based on the current agenda [1] we still need slides for the following topi= cs: - IETF 102 Hackathon Report - draft-ietf-suit-architecture - draft-ietf-suit-information-model - draft-moran-suit-manifest Please send your slides to the chairs as soon as possible. We have the morn= ing session 1 slot on Wednesday, so it would be good to have all slides pos= ted by mid-day tomorrow (Tuesday) to give time for some review of slides by= attendees before the meeting. Thanks, SUIT Chairs [1] https://datatracker.ietf.org/meeting/102/materials/agenda-102-suit-01.t= xt We need slides for the architecture, information model, and manifest drafts= . --_000_BL0PR0901MB23060AD72223C5F717F562BEF05D0BL0PR0901MB2306_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Based on the current agen= da [1] we still need slides for the following topics:


- IETF 102 Hackathon Repo= rt

- draft-ietf-suit-a= rchitecture

- draft-ietf-suit-i= nformation-model

- draft-moran-suit-= manifest


Please send your slides t= o the chairs as soon as possible. We have the morning session 1 slot on Wed= nesday, so it would be good to have all slides posted by mid-day tomorrow (= Tuesday) to give time for some review of slides by attendees before the meeting.


Thanks,

SUIT Chairs



[1] https://datatracker.ietf.org/meeting/102/materials/agenda-102-suit-01.txt


We need slides for the ar= chitecture, information model, and manifest drafts.

--_000_BL0PR0901MB23060AD72223C5F717F562BEF05D0BL0PR0901MB2306_-- From nobody Tue Jul 17 10:13:04 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20B15130EC9 for ; Tue, 17 Jul 2018 10:13:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rUVq0_n0IBOd for ; Tue, 17 Jul 2018 10:12:59 -0700 (PDT) Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04on062d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0e::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2F444130DDE for ; Tue, 17 Jul 2018 10:12:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=d7mmoZXvkUpR6RImeSLH3PEXhx9ubSrNTW1RBESQ57k=; b=lVyzSxHQIyJALDlgsJVRSNrnIZWbGbQ7XSL7dHQgL97eLWuZvF+jNGmcvjYQhaMuwFndWVONdqTVVsRRnpr/lJepm57FaRTlyqywmZ8YoKmDVd+53X/MQYzuP2rrK60OiL8gjt1IUPtcFKFDqqht6pUIOmetmxJYOHjmeVAPwU4= Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com (10.172.217.150) by AM4PR0802MB2321.eurprd08.prod.outlook.com (10.172.218.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.973.16; Tue, 17 Jul 2018 17:12:55 +0000 Received: from AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad]) by AM4PR0802MB2260.eurprd08.prod.outlook.com ([fe80::3c9f:d4ca:23a0:2aad%4]) with mapi id 15.20.0952.021; Tue, 17 Jul 2018 17:12:55 +0000 From: Brendan Moran To: Gurshabad Grover CC: suit , "hrpc@irtf.org" Thread-Topic: [Suit] HR Review: Firmware Update Architecture for IoT Devices (Invite for HRPC session) Thread-Index: AQHUG00BI/KiUia5QUWR7vKM0IJN8qSTrDIA Date: Tue, 17 Jul 2018 17:12:55 +0000 Message-ID: References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.8.2) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; x-originating-ip: [81.101.7.188] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0802MB2321; 6:MDJoj7eCPI0G++7eD6Dm/xDZJ/jvyQnjCs9SbLz64+myaJZ59148ZbslpKjYRqZg5MOLMI4oljs0/vWdM4JEfJPzLZ5S7Kc5fHX0ToAshsPEs6ZfLC3k4LI5+ildkkLKxSmjNFY1HJvIuPf7FajChTT/phhrRHomms2iR5ETOI8Ctj6KAjLzQWi7fy3YjBHm2KnXS3yLuBLo0ncyDPlyQFyQFD9pdmZXM3WM78RUzaeZWuLk2hSCzF7p84qty1jCExcKpbF+OsWWPb4gncQT83EglvBBJXVzXJZw73nP7WgKjcL/k2rOs4e1Y8naKxBS58+vQWpFWA71O90DXheR7ZmhcTzrwvBX5rw8q8426H2oo5TuaK8C8Q2jfIQsgW7veDuYjbGb5jXyR1N4MU/T8VUlGBSkHxiil0y6k1rmNUtyNFEe+Iwrmidzc1l5eGjYViYTbSIdzQ87PkCPhn8RRw==; 5:04z4+YswNfTaoz79kw0HPC3Jml69clhabO9NglKwf0xJvd0DVqAnVhVLN+zejQTSN7Qsrr4ExQDnfoXGrTQPnWftp3RWPe5DrGPgFBhj9FODQu5ccLDQWZdAVPqYar3cs+qtcTRvbnwhLwxC6dMcv7TZnsDUkvciP1I8lI06Wrs=; 7:9L0zYbuYM0gf8P8YHAV4yI7DcX7BT9/6xb3JzTaTFr3/kqXm2CsADmyah2VHXQnLUOO71ScoTU1n/qN2CtTrhx/tjGGsobGcnCw3U0CrYNtqQbV8wj5YKMqXVBBVyCovfVMAt8WyUoETR3/QYxduMvxbKdJVjbeK9krXinXu1Zzs5lAKM2WTNzD5mpkCCUZGb89Evlz8bK7RLmntayPu5tmkSIzg+5Hb7cWTodITp/UjJEt1TJ5PXafzMjr6teAu x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 18b3ad0f-efb7-4dc3-b76b-08d5ec088990 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:AM4PR0802MB2321; x-ms-traffictypediagnostic: AM4PR0802MB2321: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(223705240517415); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(3231311)(944501410)(52105095)(10201501046)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(6072148)(201708071742011)(7699016); SRVR:AM4PR0802MB2321; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0802MB2321; x-forefront-prvs: 073631BD3D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(136003)(366004)(376002)(396003)(497574002)(199004)(189003)(40434004)(51444003)(54906003)(15650500001)(81166006)(81156014)(6916009)(6246003)(8676002)(83716003)(68736007)(97736004)(53936002)(305945005)(7736002)(6506007)(82746002)(33656002)(53546011)(26005)(72206003)(186003)(25786009)(102836004)(478600001)(106356001)(105586002)(57306001)(966005)(4326008)(76176011)(6306002)(6512007)(5660300001)(14454004)(256004)(14444005)(5024004)(11346002)(2906002)(36756003)(6116002)(3846002)(316002)(5250100002)(86362001)(99286004)(6486002)(66066001)(345774005)(229853002)(8936002)(486006)(2616005)(50226002)(476003)(2900100001)(446003)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0802MB2321; H:AM4PR0802MB2260.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: EISLCnGd/FDFiF4yZG1zFzlnUeLUy3CZusYUxcGitIVYF3Tkr/lnB5uSQGUXIxZXPKkCKpsWFY4uhsFnttkalTMZ2+CfoCzVjUfPMTztrzf6RpehVeIKRSDrhhqY3qinsdAz1PpaRcIKqwCG5NaPFUPDC2JAWaxxAgicXsy7yg7CdWxrErSrqSG85ss0l7O2IsZPEPGkrfSQ4Bm/MiLC7GmHlsRZY+RIU5Zla5knIrygtclEsP4JOkBWlVwcT/7heyML86L93kMpxdACGzbZpyhKjd3cxlSPMlGcP+3OcXURR530hoaIpwyQrO+z6T5j87CagNpSBRAE32ZqARdirFMHXF8v/Vlp/iLIYeVI+XE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <4E08379C8636FF419AD3D6FC3839B9C2@eurprd08.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 18b3ad0f-efb7-4dc3-b76b-08d5ec088990 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jul 2018 17:12:55.3288 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0802MB2321 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices (Invite for HRPC session) X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Jul 2018 17:13:02 -0000 SSBsb29rIGZvcndhcmQgdG8gdGhlIG91dHB1dCBvZiB0aGlzIGRpc2N1c3Npb24uIEkgd2lzaCBJ IGhhZCBiZWVuIGFibGUgdG8gY292ZXIgdGhlc2UgcXVlc3Rpb25zIGVhcmxpZXIgaW4gdGhlIHBy b2Nlc3MuIEkgdGhpbmsgdGhhdCB0aGVyZSBpcyBzaWduaWZpY2FudCByb29tIGZvciBhZGRyZXNz aW5nIHRoZSBjb25jZXJucyB5b3XigJl2ZSByYWlzZWQsIG5vdCBsZWFzdCBvZiB3aGljaCBpcyB0 aGUgcG9zc2liaWxpdHkgcmFpc2VkIGJ5IHNldmVyaW5nIOKAnHNlbnNpdGl2ZeKAnSBpbmZvcm1h dGlvbiBmcm9tIGEgbWFuaWZlc3QgYW5kIGVuY3J5cHRpbmcgaXQsIHdoaWxlIGxlYXZpbmcgdGhl IGJ1bGsgb2YgdGhlIG1hbmlmZXN0IGluIHBsYWludGV4dC4NCg0KSSBkbyBoYXZlIG9uZSBjb25j ZXJuIGFib3V0IGVuc3VyaW5nIHByaXZhY3kgd2hlcmUgZmlybXdhcmUgdXBkYXRlcyBhcmUgY29u Y2VybmVkOiBldmVuIHRoZSBudW1iZXIgb2YgbWFuaWZlc3RzIG9yIG51bWJlciBvZiB1bmlxdWUg bWFuaWZlc3RzIGRlbGl2ZXJlZCB0byBhIHBhcnRpY3VsYXIgYnVpbGRpbmcgY291bGQgbGVhayBz ZW5zaXRpdmUgaW5mb3JtYXRpb24uIEV2ZW4gY29ycmVsYXRpbmcgZGF0YSBjb25zdW1wdGlvbiB3 aXRoIHJlbGVhc2VzIG9mIGZpcm13YXJlIHVwZGF0ZXMgY291bGQgbGVhayBzZW5zaXRpdmUgaW5m b3JtYXRpb24uIFRoZXNlIHByb2JsZW1zIGNhbm5vdCBiZSBzb2x2ZWQgd2l0aCBlbmNyeXB0aW9u IGFsb25lLg0KDQpJ4oCZbSBob3BpbmcgdG8gcHJvdmlkZSBhIG1vcmUgZGV0YWlsZWQgcmV2aWV3 IHNvb24uDQoNCkJlc3QgUmVnYXJkcywNCkJyZW5kYW4NCg0KDQo+IE9uIDE0IEp1bCAyMDE4LCBh dCAwOTozMCwgR3Vyc2hhYmFkIEdyb3ZlciA8Z3Vyc2hhYmFkQGNpcy1pbmRpYS5vcmc+IHdyb3Rl Og0KPg0KPiBIaSwNCj4NCj4gVGhhbmsgeW91IGZvciBlbmdhZ2luZyB3aXRoIHRoZSByZWNvbW1l bmRhdGlvbnMuDQo+DQo+IEFzIEkgbWVudGlvbmVkIGVhcmxpZXIsIHRoZSByZXZpZXcgaXMgYSBw YXJ0IG9mIHRoZSBlZmZvcnRzIG9mIHRoZSBIdW1hbg0KPiBSaWdodHMgUHJvdG9jb2wgQ29uc2lk ZXJhdGlvbnMgKEhSUEMpIGdyb3VwLiBXZSBpbnZpdGUgeW91IHRvIHRoZSBIUlBDDQo+IHNlc3Np b24gYXQgSUVURjEwMiwgd2hlcmVpbiB3ZSB3aWxsIGhhdmUgYSBzaG9ydCBkaXNjdXNzaW9uIG9m IHRoZSByZXZpZXcuDQo+DQo+IEhSUEMgU2Vzc2lvbiBhdCBJRVRGMTAyDQo+IERhdGU6IEp1bHkg MTkgKFRodXJzZGF5KQ0KPiBUaW1lOiAxNTo1MC0xNzo1MCBFRFQgKEFmdGVybm9vbiBzZXNzaW9u IElJKQ0KPiBSb29tOiBEdWx1dGgNCj4gKGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvbWVl dGluZy8xMDIvZmxvb3ItcGxhbj9yb29tPWR1bHV0aCMybmQtZmxvb3ItY29udmVudGlvbi1mbG9v ci0yKQ0KPiBBZ2VuZGE6DQo+IGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvbWVldGluZy8x MDIvbWF0ZXJpYWxzL2FnZW5kYS0xMDItaHJwYy0wMw0KPg0KPiBMb29raW5nIGZvcndhcmQgdG8g aGVhcmluZyB5b3VyIHRob3VnaHRzIGF0IHRoZSBzZXNzaW9uLg0KPg0KPiBHdXJzaGFiYWQNCj4N Cj4gT24gVGh1cnNkYXkgMTIgSnVseSAyMDE4IDAzOjAwIEFNLCBHdXJzaGFiYWQgR3JvdmVyIHdy b3RlOg0KPg0KPj4gUmV2aWV3OiBBIEZpcm13YXJlIFVwZGF0ZSBBcmNoaXRlY3R1cmUgZm9yIElu dGVybmV0IG9mIFRoaW5ncyBEZXZpY2VzDQo+PiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCj4+DQo+PiBBbiBhc3Nl c3NtZW50IG9mIGh1bWFuIHJpZ2h0cyBjb25zaWRlcmF0aW9ucyBpbg0KPj4gKiBkcmFmdC1pZXRm LXN1aXQtYXJjaGl0ZWN0dXJlLTAxDQo+PiAqIGRyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QtMDIN Cj4+ICogZHJhZnQtaWV0Zi1zdWl0LWluZm9ybWF0aW9uLW1vZGVsLTAxIFsuLi5dDQo+DQo+DQo+ IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFN1aXQg bWFpbGluZyBsaXN0DQo+IFN1aXRAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9zdWl0DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2Ug dGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv dS4NCg== From nobody Tue Jul 17 22:51:25 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AB5B130EFF; Tue, 17 Jul 2018 22:51:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uAeM25MocAQG; Tue, 17 Jul 2018 22:51:15 -0700 (PDT) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CD75130EF6; Tue, 17 Jul 2018 22:51:14 -0700 (PDT) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1fffMm-0005Jt-Fr; Wed, 18 Jul 2018 07:51:12 +0200 From: Gurshabad Grover To: Russ Housley , suit Cc: hrpc@irtf.org, Sandeep Jha References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> Openpgp: preference=signencrypt Autocrypt: addr=gurshabad@cis-india.org; keydata= xsFNBFriroIBEADfyDpCD8eborMUMXKtZzjo4t2KzrAlUVYgE/TFtrwUP+4Xw4dzakDIzST8 sVYmlXIWhM5NBBTZSQ190vsxrkbi0xxLcXYM2olZEtqkJ8zONZeZLBeGvcfMymtHqD4jHwYb Zm7OXnS45fWDL+HOoMP/VCwEn098rYfnllIkYQD1Gc28Ig+ywjGg8y5p0qMmmmhm2ckgLjnG MJX8t273MSc8wsn/UYH922yif3MQXmrzqgnRl9hRzf90SKqAw38bw7wccb55pIItloKYsi0r zYBKJSOPXn91Z21TpOSTy21M0MZYEAlDn1zeea+q8TggfHNWxOXoKrIm1pqZFRz0k+8i2siJ AHf8bRm/fhukA6szZ6b2nNPxjkAmOv9zvGu6RZGbmeLvQYVBSSnZ67ayZrkKwn7KIyAV6hQM /bVnD8eEZ2tZ0S8lxoZFYSNeMGt2b6WelFZO97/LbjxaJUHd9K8g5H0MwqN1NXoBxRwllVRC 3sVHVoWTBqnKo8qplzvQEAto69PpvuxxKTOFEJeQqmn1b/fo3sLRb4YiIg8Ax+Np7Huzzjk6 vKKgpIwIN7yEUj/ReWi/UA/W4wSg3XkcqTf7h73crnN/1At0PdgozbDV2UbcApaldStP4DfG UiQl0/7MiYLKapDDuSahmoeH3xrNnrzS9BAfuGHezzDbMyPLXQARAQABzSpHdXJzaGFiYWQg R3JvdmVyIDxndXJzaGFiYWRAY2lzLWluZGlhLm9yZz7CwX0EEwEIACcFAlriroICGyMFCQlm AYAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQrbl/X+ubfC7/bQ//YQv7zqQE433xxsN/ 3GYKoOFccBy3WvV4DxrTskJ3n3k5lfcZolbc8TQksQOTzyerNt2ZA7fsGZa7eFSW+xR4Yq3/ C9o+5FOoHGhyZhb+x17MILhmyvyUNSj7SdKrRISgurMbV2Vv8LxmTcdrK6CdFF6JLH+opzU1 NlRKwZqROPgbYZEB2QFIUbGfgh2I5AXNyV2XbT7fagfkHk+v9AUV7POP2H1+AZ1xq6iFTm2o 9ufNZsp2bInsDohcVBKC3aH2cnFMjvIXpNoUOx8vb5A2xW0aBUTTJDB/uZw53WOg3kehrCNb ZkML3FnDZLRuu1e8DSWmwk5YIoDzt5bMCgfUwb0C6Q+JuM8lC+8CEEa9qamLc+fhvFAzcrWp VWuSaVeLdhe5NxmtlRYNZdGuKy6sRHjwsEWlwzRylhm74fiDR3aA1eIFsfmYLd4z+i1Fp23Y dHJf7/Gor2CmOxphog9DEA9WCuORXfx4De7hoMKwW4gWKw1A8B12Cv4EOkXmCsWsOnfDEarr 2Yl6elxkhQRfKjAesXb0cezRzZgwsWIsbeYsuWFF7Xi6IzUJ27lxU3p5PcyY8O8aDYOn+pu0 YFJ7s3u2VRRgptVZJmkcN3WTApXSHY8fGl5xAakM/bqFJj9uj5zlMnFN2EplC6/mQkfYfy2f siaGTP/GQV4OSuOeuMLOwU0EWuKuggEQAJ4lAzB72gHw4+rbyxmQNNVmvgYVZPjFtO/MQdYi x1QwRP/gxxqPqTd/ZwQvmPGzXRKw10B7uKSRk6YP12+IG0mXJwHGp9q5CWJE0XNGqX3UWbAc KIzxqPNpsf8e6Bv7jdW0YwLBxJ+RW0NNL6uAxz0sr2frbnS+EZB3cU+zOZzp/9YfTUZO2lxF NzgJoErKe/HLp7aBeJXBBcwO0LQlIT80rTZx2KihBa/Ww/y9E9gV/HacJu/Ncb6E/G3e4xGj 9w9L+UW43q01wy+FSUKy9FLc7D40WqQsj8SXZEpl84SyLcJRoX3mtj59bX2SAN2VB2BAksTu qCh00IcIUGfyHziu5PwUWYM96gOhDSocP4wSeiQ8TwLzaffllz2qhdI296a9lCIYIeWVytEd NU9jJ3RbzXAgE0pnDauNXDaQv1FS5jYi8rlslJUxKnrS69BFNjM5RqQ16Cm0C4rKL7/a8wHC r4VjcjSCM8Lzv8YOOitJ9Yt4Y8SVfO5s3YvxcdSr56nX0W3B1kGbG1GpqWTzOgXzGF5bIsbV 7SPecwUs9ShvmLmZzDUxIQ68n4zj3lMZn5I+pP+Ew6nAAiuSmKdr5cygnCH/NVJzil07t+X4 uR6oKHBhuMFYF1c6Wxk36m+EZz5ZHFaT4rN0WDIJdAEqRzD0Z56V6ansDF8y+ksh0SHlABEB AAHCwWUEGAEIAA8FAlriroICGwwFCQlmAYAACgkQrbl/X+ubfC50rhAAloTaq/fZC1gtiVtU wOB+00gEkjgmzt+rLkW+l2EySTST7tje57W83UZwzCX746B2O//Bqardxz9R1Vr0VFiwHA8g 3qeBqPqiv1WoQch/iZ5d/1MxK4A9xDag1uyqLR8RuGlZ8lATmcP3IabKiuiBV4MlFZ7V2Ib6 5ToPf28xxSyjMzTjQObIG0e009uHlu2z+iQVshLyoyVVAOWWa88D6iuBDC/EtBRjlpjLAjuR YhWVYX6KHdVUijKMHN2RqjpX5O2wPL7NcMY/wsTq7EteUeI75hxFvargRXkEt1XR8t52LC0u IE2OjpzY5re/ROUbfsqL8trjAOrSJ+Fx5H8AYl9JaoVxohhxDZgNtgNtPbh/8Nnlf9daj/bh lZcTBO98XLQwMnyHGPdyhIodpWPq2C09Ys3TkQsbcdMMB1pqnEK5Vz1zIKkEEX7QVsLdrz7C 2CFsauc/9PHj+4njCHslXtzBOiVu5FXTnbCwPrLJs5iEUkUCb6qtE/2mSCTrAanzOTTOmqiM cnNTI1Tj0ht462S9VypppQnKCv8shGxXG7BadZTv+pNCA/WfB2kk1sS3ZwB0wBWX4p41fxs+ ArM9ew2SzQ/vBrEfO7ljPfZZmBqH4t/vgAZBnOtTxCGlPEIJqiMqtGHRqIqpiR20QfxEUuXI MfMfa9QJpisdNmqoUyc= Message-ID: Date: Wed, 18 Jul 2018 11:21:08 +0530 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="T9Qkq9YsfG158rQeS1hfp1K6xS7wCx9jh" X-Virus-Scanned: by clamav at smarthost1.samage.net X-Scan-Signature: cf96151651da5a5ace2e908a4273e1b9 Archived-At: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jul 2018 05:51:18 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --T9Qkq9YsfG158rQeS1hfp1K6xS7wCx9jh Content-Type: multipart/mixed; boundary="kzM60froagGryxNINR2rNaibs3aG5Z5wL"; protected-headers="v1" From: Gurshabad Grover To: Russ Housley , suit Cc: hrpc@irtf.org, Sandeep Jha Message-ID: Subject: Re: [Suit] HR Review: Firmware Update Architecture for IoT Devices References: <11993b06-5da6-e397-3457-de6ecec87bb4@cis-india.org> In-Reply-To: --kzM60froagGryxNINR2rNaibs3aG5Z5wL Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Language: en-US Russ, Thank you for suggesting a starting point. Most of the advantages of encrypting the firmware image are already highlighted in Section 3.3.13 of draft-ietf-suit-information-model-01. If the advantages (those + the privacy concern) aren't enough to warrant a recommendation of firmware encryption in the general case, I am in favour of adding the sentence you proposed. Also wanted to flag off that the phrase "must enable" in the section is potentially confusing: maybe we can replace it with a clear indication of the requirement level. Thank you. Gurshabad On Thursday 12 July 2018 07:34 PM, Russ Housley wrote: > Gurshabad: > > It is clear that we have not come to consensus yet, but I thing some qu= alifications on the RECOMMENDED or SHOULD statement will be necessary to = get there. > > Perhaps this is a starting point: =20 > > When a device is expected to be deployed in a manner that it is direct= ly > associated with a human, the firmware SHOULD be encrypted to help > preserve the privacy of that human. > > Russ --kzM60froagGryxNINR2rNaibs3aG5Z5wL-- --T9Qkq9YsfG158rQeS1hfp1K6xS7wCx9jh Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJbTtVMAAoJEK25f1/rm3wuUa4QAIhwo0EYu5IyAYv4Fpz/T2W5 f4kKFx5GvTftaSVmY7fFGCkIAq7JgswEk1KipT6jy+NW1TXxkHdfnuk/ik9fUXvQ eOLSgubEy+30QHzATAwfDKH6xog6y0esDp0ITsjTpNFt+Mh5AB41oeVKEoI3Tjkb a5DZYiIFiklIl8rMkZ5S3cRaS/6K0wYrxMs1bHxMG4asQWGNN5PbmmkXSrUpvGJK HI5WC7Zdq/xRc6mSO09EnyqIGUbBRkluUmX1VudIn/M8jG4VUNqm7OAYjP4erZhj yRhf6o8QaajES55sHogT2p1wxv5vepLv3oN005qC6CA1C51I5AR76eBnr+bjXUVB PSdWe1mVh4INZQCNxF8okqO238OfP5M2r64+yAjgVgPdVUvWQuQK7X1yuBMdobv3 3jbIaxUUWwyXTwTEkbYZ9VHqhGBTrhcO14J79kGO6QmkM9OFIljD+d96AECoPQrr ECdNoMBb2thf3Yot+ECH9taULO6OnrFdiN30JafThM1vuIuJsbsFT/cJfYClYGva rDb77kKS3AeiennN61DBX2zYsOTaVDGfcv8Bf7cmvaDwzXkdh9q13J4bLKN9AN/B McFxn7HOomS3aD5L/WWEtItFFzElHkqEcoJicDIAKErlPTgRMqL1aXJThgGzTbh0 hJ5831ujzTBNylO0nyUZ =z4kE -----END PGP SIGNATURE----- --T9Qkq9YsfG158rQeS1hfp1K6xS7wCx9jh-- From nobody Wed Jul 18 04:37:59 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CC98130E0F for ; Wed, 18 Jul 2018 04:37:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4qnvKu_I_2PZ for ; Wed, 18 Jul 2018 04:37:53 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0630.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::630]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD102130E15 for ; Wed, 18 Jul 2018 04:37:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tx8dl6D7hUcsr2z5aASAfUJF1/qhhSJokBqg7zsey/8=; b=FYvPJTS39UELmJ1WW9KU14ph6IG+f/PX8Vvn6P1B5wYY4clfEowxC+1DiOCRLs3j15zMzVpz44mqpKel1T/3Fu/fBf4L0wl0yLyj4QP/YhyiKXYipkmC/aqqfD8XOZm+snX8y5bpr5o4i8lvTSvMHZmTsZD8tSFclovzuMrIOEk= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1565.eurprd08.prod.outlook.com (10.167.210.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.952.18; Wed, 18 Jul 2018 11:37:49 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::3549:bcde:85fc:e3db%10]) with mapi id 15.20.0952.021; Wed, 18 Jul 2018 11:37:49 +0000 From: Hannes Tschofenig To: Denis , "suit@ietf.org" Thread-Topic: [Suit] draft-ietf-suit-architecture-01 Thread-Index: AdQSN1i2C+DHj0ciRqGC4Jr4K4DFEwAfRaCAAApbDoAAJG/XAALGnTgQ Date: Wed, 18 Jul 2018 11:37:48 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.157.45] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1565; 7:yDnloARzh0BNgiMDhhy2kDoUtQ5HMmVIN9+aBzYz5viFonWxcTKTzBFLMyFoPBWWVunDgQ5XGPTkpv41hGNBk6Y7vRYd84INnDjAItAEeyJ8P6imcvJPHHVaJcZ+GOllqxUWWAph3HPsUrJap5/uyeFhDGWWub+llY8PiOjK0026IkiKAZcAfrTY3nwdmb69UqgTnu3ElOYQHufdoSGUj/dQI8o4JVhp7QOU6EkLZ0E+MlX+0mvdmnjSjgjDcd+2 x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 7ddae194-c597-4109-db5a-08d5eca2e3af x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:(223705240517415); BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600053)(711020)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(48565401081)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1565; x-ms-traffictypediagnostic: VI1PR0801MB1565: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(191636701735510)(192374486261705)(223705240517415)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231311)(944501410)(52105095)(10201501046)(93006095)(93001095)(3002001)(6055026)(149027)(150027)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB1565; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1565; x-forefront-prvs: 0737B96801 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(39860400002)(346002)(366004)(376002)(53754006)(189003)(199004)(40434004)(476003)(5660300001)(966005)(4000630100001)(25786009)(106356001)(72206003)(66066001)(86362001)(53936002)(105586002)(6246003)(256004)(55016002)(6306002)(9686003)(14444005)(6436002)(236005)(54896002)(99286004)(229853002)(5250100002)(14454004)(11346002)(478600001)(2501003)(5024004)(486006)(790700001)(110136005)(93886005)(74316002)(3846002)(6116002)(7736002)(33656002)(8936002)(102836004)(316002)(81166006)(8676002)(81156014)(2900100001)(68736007)(2906002)(26005)(7696005)(6506007)(186003)(53546011)(76176011)(606006)(446003)(97736004)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1565; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: jc32tQyEBs0N+LYBh2Qlkq5Z8YTDp88UYkkJmfzm4AG/bCNG4VykUiQXBdcGixUvAGiCnb5pYBa1kzEPdpMrzpE8mkZnjEp+ojiLsFNn9aeTm3d6y58xQxJs2o3FEFKtqUA6zCbUaFZ7JTMF/RAsy0cBLHl3jmggreqr1vU0mkf194wjAa+0zdQ+8DvVgIEsFOUCIOgyWHnUWej/EXIbmx4NluSYPTv57pMxz6YV5DIrgIU6bSwgJM8X44ljoaoskkRqmWGnpiHzNjdv7PCZIY8h6K84n/p2ZQBIXFrxqHUJqCXqeVLBlELgqIHAehSKnJbPtJA6PDnS/FelrVN7GRRrYQjrJthc0t9qlEqquBo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112BEE239B0BCAF93978C70FA530VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7ddae194-c597-4109-db5a-08d5eca2e3af X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2018 11:37:49.0462 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1565 Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Jul 2018 11:37:59 -0000 --_000_VI1PR0801MB2112BEE239B0BCAF93978C70FA530VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Good idea. I will do that. From: Denis [mailto:denis.ietf@free.fr] Sent: 04 July 2018 04:19 To: Hannes Tschofenig; suit@ietf.org Subject: Re: [Suit] draft-ietf-suit-architecture-01 Hannes, In the security considerations section, it would be worthwhile to indicate = that the threats are addressed in details in section 3.2 (Threat Descriptions) from [I-D.ietf-suit-information-model]= . Denis Hi Denis, I think the risk of installing an old firmware version is covered in the in= formation model document, which goes into the details of what a manifest ha= s to contain. See Section 3.2.1 of https://tools.ietf.org/html/draft-ietf-s= uit-information-model-01 There are essentially three types of documents the working group is aiming = to produce: an architecture document, the information model for the manifes= t and one or multiple serialization formats. You have been looking at the a= rchitecture but the appropriate document to read is the information model s= pec. Ciao Hannes From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Denis Sent: 03 July 2018 11:59 To: suit@ietf.org Subject: Re: [Suit] draft-ietf-suit-architecture-01 Hannes, It is well known that software updates are often done to address a security= issue. The same applies to firmware updates. The current draft is lacking to address protections ag= ainst the downloading of an old firmware version. The threat should be mentioned in the security con= siderations section. The main body of the document should mention mechanisms to prevent the repl= ay of an old version of the firmware. Denis Hi all, I have just submitted version -01 of the architecture document. I have inco= rporate feedback from the working group, such as * New terminology, * Updates on the operating modes * New architecture figures, * New use cases (by David Brown) Here is the new version: https://tools.ietf.org/html/draft-ietf-suit-architecture-01 Here is the diff: https://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-suit-architecture-01.txt Feedback is appreciated. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112BEE239B0BCAF93978C70FA530VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Good idea. I will do t= hat.

 

From: Denis [mailto:denis.ietf@free.fr]
Sent: 04 July 2018 04:19
To: Hannes Tschofenig; suit@ietf.org
Subject: Re: [Suit] draft-ietf-suit-architecture-01

 

Hannes,

In the security considerations section, it would be worthwhile to indicate = that the threats are addressed in details
in section 3.2 (Threat Descriptions) from [I-D.ietf-= suit-information-model].

Denis

Hi Denis, =

 

I think the risk of in= stalling an old firmware version is covered in the information model docume= nt, which goes into the details of what a manifest has to contain. See Sect= ion 3.2.1 of https://tools.ietf.org/html/draft-ietf-suit-information-model-01

 

There are essentially = three types of documents the working group is aiming to produce: an archite= cture document, the information model for the manifest and one or multiple = serialization formats. You have been looking at the architecture but the appropriate document to read is the in= formation model spec.

 

Ciao=

Hannes

 

From: Suit [mailto:suit-bounces@ietf.or= g] On Behalf Of Denis
Sent: 03 July 2018 11:59
To: suit@ietf.org
Subject: Re: [Suit] draft-ietf-suit-architecture-01

 

Hannes,

It is well known that software updates are often done to address a= security issue. The same applies
to firmware updates. The current draft is lacking to address protections ag= ainst the downloading of
an old firmware version. The threat should be mentioned in the security con= siderations section.

The main body of the document should mention mechanisms to prevent the repl= ay of an old version
of the firmware.

Denis


Hi all,

 

I have just submitted version -01 of the architectur= e document. I have incorporate feedback from the working group, such as

·       New terminology,

·       Updates on the operating modes

·       New architecture figures,

·       New use cases (by David Brown)

 

Here is the new version:

https://tools.ietf.org/html/draft-ietf-suit-architectur= e-01

 

Here is the diff:

https://tools.ietf.org/rfcdiff?url2=3Ddra= ft-ietf-suit-architecture-01.txt

 

Feedback is appreciated.

 

Ciao

Hannes

IMPORTANT NOTICE: T= he contents of this email and any attachments are confidential and may also= be privileged. If you are not the intended recipient, please notify the se= nder immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy= the information in any medium. Thank you. 



_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.iet=
f.org/mailman/listinfo/suit

 

IMPORTANT= NOTICE: The contents of this email and any attachments are confidential an= d may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to a= ny other person, use it for any purpose, or store or copy the information i= n any medium. Thank you.

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112BEE239B0BCAF93978C70FA530VI1PR0801MB2112_-- From nobody Sat Jul 21 09:10:46 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73DF0130E25 for ; Sat, 21 Jul 2018 09:10:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kJMNn91ayQXv for ; Sat, 21 Jul 2018 09:10:42 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4A7401277C8 for ; Sat, 21 Jul 2018 09:10:42 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 89F0F20008; Sat, 21 Jul 2018 12:26:40 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id E7F441B76; Sat, 21 Jul 2018 12:10:40 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id E59992C; Sat, 21 Jul 2018 12:10:40 -0400 (EDT) From: Michael Richardson To: Brendan Moran cc: David Brown , Denis , Hannes Tschofenig , "suit\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Suit] draft-ietf-suit-architecture-01 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2018 16:10:45 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Brendan Moran wrote: > Notwithstanding the above, the way to refer to a =E2=80=9Cbuilt-in=E2= =80=9D image is > to refer to it by uri: file:///, for example. I don=E2=80=99t think t= here=E2=80=99s a > uri namespace for numerically addressed storage (raw flash). I should There is also the ni: URL type, see: rfc6920. That let's one name things with hashes, and that might make more sense than using file:// But, the manifest already has a hash of the firmware in it, so I think that the manifest should continue to say where to get it, if a device does not already have it. I think it's reasonable for a device with storage for more than one copy of the firmware to keep track of the hashes of what it has stored. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBW1Na/YCLcPvd0N1lAQLV5QgAhkEcOKhcUSEx8sFZcWiGo/vh8M7IsVQQ WKrYw7Pq+3No8Uv66FztAsWheu0ZDMmHvhhhfldWe+vVMfecFZCaxcsyKvvtMsvy N1SaEAgrY2NArDWM6SrADM3xqS/YwZdZcEC8RhS2F7WjI+J6ELnJighPDCgBfZSS V3b60o2hQ7z83qunmSlREt1ou2kIrrXAMlr5scRsmgms6E7lV38EcimNA3URZWMy RU09nnRBD4RLZ7rQAC+N3519dJssyaVwY0z9OdAtp49cgQwi/19RMPc+P9+Ygs75 YCztJuHcf9WXRMP3um+o3kR43rukJJAlhMIT8aDkcKOSWpT7fCqCAQ== =QZ78 -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Jul 24 02:02:58 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D6CD131056 for ; Tue, 24 Jul 2018 02:02:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 45XDVzR9mDOF for ; Tue, 24 Jul 2018 02:02:54 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40042.outbound.protection.outlook.com [40.107.4.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD8BF131051 for ; Tue, 24 Jul 2018 02:02:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=G/85OWuqT4jsUxsrY7SXYJxYMGbZNhQ/wWD5mB9OAJI=; b=JA3eqx8ENbL1CDkWPPeQ6OJ724OGG2R8iL9Z+Nk/k6BvgjM94m/oTeVVr8d7+Lx4SfAIQJ3eROjKmOe/4sS7ivTfCdHbB7iic0uuMS60sAnBRozV60HZGBk91wwW+lLK2Uiu4OtvWAbmNNEBTzWA2ZcnGS02d7/f5TcNDUE/95k= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1725.eurprd08.prod.outlook.com (10.168.67.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.973.21; Tue, 24 Jul 2018 09:02:50 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::adfc:4f29:e0df:9e9f]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::adfc:4f29:e0df:9e9f%8]) with mapi id 15.20.0973.018; Tue, 24 Jul 2018 09:02:50 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: New COSE Implementation Thread-Index: AdQjLHPMc02p46XCQKGD/efkv8VM9A== Date: Tue, 24 Jul 2018 09:02:50 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.119.168] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1725; 6:JSZiYu7+Cmr40brhyd8EoOGj00grD1fmXHQxmdu0sectO3gHVqT1fTBZAeqiIwZBXe4YN5L7z6mfnzF2s6BR3KMTOTbkr3lSJnlE6oiF7l3PWm4gXgYLQwOGJnZnXUCCB2vq063VrFlKcLxx0qlv82cOuYfWrHAiwNgaZj/OdO997amhWo1KtSrPwAT1aYBQ28D8nt0iX7oqNtkkzZNzUfwC0Sax2pRfRZPtedpKe4rgv+YpKiZaaiGZ6ierpja6S/dRJt3TyvyLn04kXJlErTMY35fd6jUetnLMaOfkgjdb053HmrLm6oeNJ3krCLcb2unsNHBzxG2wegsgVMuhl3yehC/vb2vFlOgcNginD/Qpl4Yst9NjmVY2opN4g6PQsWStnnKHtd1UgznSWzO3MbKnTfxyHDlSnaR7AIMkjocB5tvYRjjaVL2XUEVgLCQh9LK19IbOqLvryJrS0m73oQ==; 5:H4SEmJx8zneaogGTNiO64FWdiPtzsyULqfHIv5D1xc1RcTLqQtCJBV5lWi+mZNz7l4/TMagjtpFf9BwauvcjKiOawSjpaFC9J3kW/VVN2CGb/wvkx5icXIabJqngsV+EOG8nMlotqNCMCLbc5kmFXO7wbXvD4P1ev8cyWfI+zsY=; 7:NStTNkFNghOzgEr50pEqKUCPlOyMDgsowgSpTVR1t0PpbJ51MVXcjFGcujZ94K1r5oc++74ydWB3ECeyvVUOUwoQAplv7RPMwnd20msCfdrtNZDGyzhcpNrdq1pncdYwO2kLDrnebHHxIYAnWrZu14M4KPnra+/NTQnZ+NuNaxtPt98sjb0j9R85kS5BitvWWwuLaj/hHxeUp/VmIIZ7aaTP+W9IsbdZyfBwmp4Db8UN/HRtXxClAQEKEGsrTZ6X x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 122bd878-8187-473d-79d9-08d5f1443bc9 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600073)(711020)(4618075)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1725; x-ms-traffictypediagnostic: VI1PR0801MB1725: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(223705240517415); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231311)(944501410)(52105095)(3002001)(6055026)(149027)(150027)(6041310)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB1725; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1725; x-forefront-prvs: 0743E8D0A6 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(376002)(366004)(136003)(39860400002)(396003)(40434004)(53754006)(189003)(199004)(2501003)(33656002)(81166006)(8676002)(1730700003)(105586002)(106356001)(81156014)(8936002)(2351001)(5250100002)(2900100001)(5024004)(14444005)(256004)(66066001)(97736004)(6916009)(53936002)(6116002)(3846002)(25786009)(5660300001)(7116003)(2906002)(102836004)(72206003)(5640700003)(14454004)(476003)(6306002)(966005)(9686003)(55016002)(6506007)(68736007)(6436002)(486006)(7736002)(478600001)(26005)(186003)(3480700004)(99286004)(305945005)(86362001)(316002)(74316002)(7696005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1725; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: O2tZRdNcWDxLzk8+RdHeTd7i7vR49panvAO1QvMMlGYaOG1pO0EfJqxNRlNr3Ccu7vO+n0tmlfzeACYiqP1/ElDkniUanWpLxqZhbFFWK1FQUTfIvKeu8U/AjczYYDnfsnSu85S34gxpP4/az6ljYta3cBAs+L2wmkYyFNNT+vXfS8Yg8C5HlITM2YzNL+YmPL2fMXF30XXQy8QX35XW9fOIQeez4rLXVCLPbDK5MTy7p9+o3058+BmWwQbwVBt6Ic5juwIc2lDzKd1pvQKlhk1Xw0cHuCm+YkuGuySRirDGJAiWIL0Mm+6GWkMLhjIxwRQRUxg1/qoULpWztr7S7mHY+qYQOBjwlIdzsjXQDP4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 122bd878-8187-473d-79d9-08d5f1443bc9 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jul 2018 09:02:50.4985 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1725 Archived-At: Subject: [Suit] New COSE Implementation X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 24 Jul 2018 09:02:56 -0000 Hi all, We just released a COSE implementation that uses TinyCbor https://github.com/ARMmbed/cose-c It currently only offers the Sign0 functionality with mbed TLS. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Jul 31 16:01:25 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DC28130DD1 for ; Tue, 31 Jul 2018 16:01:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.101 X-Spam-Level: X-Spam-Status: No, score=-0.101 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z6_2LyLUevmj for ; Tue, 31 Jul 2018 16:01:21 -0700 (PDT) Received: from mail-it0-x22c.google.com (mail-it0-x22c.google.com [IPv6:2607:f8b0:4001:c0b::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C18D130E40 for ; Tue, 31 Jul 2018 16:01:21 -0700 (PDT) Received: by mail-it0-x22c.google.com with SMTP id p7-v6so6970146itf.5 for ; Tue, 31 Jul 2018 16:01:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:subject:message-id:mime-version:content-disposition :user-agent; bh=3uXHUMcdg0rG5+K6PWIKvWMsWows8WLVTtX94sKR6oc=; b=EL4Gl0djwc387NTEGE8MOI7U3kjUyeWWO6IAa8OwVJqtRn1B/wa3k+GeudPn4nnh4t d8k/AOFHpVgM5r7E+QYuzid+lT9pdpTEoZfyFMJQwQ4HQgsP+hUWSo/X8ZFnT3d048TA ZkJJsKs1n9bAEBCQ9Wq4nfSydESjB00S1Bov0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:subject:message-id:mime-version :content-disposition:user-agent; bh=3uXHUMcdg0rG5+K6PWIKvWMsWows8WLVTtX94sKR6oc=; b=tqw7elbWlKsSKhadenwCU/vNcdzLYawlCcFE5bYtZAef38ntCNUzG24DfCqVQFHg3S Sueb7t/F30OiyfBtlzDWCSGIxhLi4B7iOeVjd/GnJNI6tsONuFPFjx695xFHGdfLZ5v2 qQM57g8zxj3NH4y0k02lA0bFtpOKUVv82E9dX6Mg+3mMd8zwLwHWwLICFxanQ8hNFDjx 3KBPyGZCiHOwaeqiq7wCZJdFqOgrbz/GafraUlydk7Gh627PUDpsAzfTGU3Ii9QE2rDl V+pyTKSU81Wwk7SYY95QKCJWrMIBREEm3dxql9y2QU9ifd7beVS6lCzKaHISyNRNSLoM YYDQ== X-Gm-Message-State: AOUpUlHDvXf1kLK9X4igrD4Mwl/6boLwC02n4vIhR0z3fHYM570c9wmp EihQ8R8OOV3BnjcJS+6zcEGhX9+tWmFQcg== X-Google-Smtp-Source: AAOMgpcf0r99LI3uIwpZIL78IAl7/K9wllTYEJSMlegyCvLwYeZtgLEvvnymoeOfwKbyuSrg637Ucg== X-Received: by 2002:a24:9cc7:: with SMTP id b190-v6mr1523462ite.118.1533078080256; Tue, 31 Jul 2018 16:01:20 -0700 (PDT) Received: from davidb.org ([2601:283:4300:987c::9]) by smtp.gmail.com with ESMTPSA id g185-v6sm2028794ita.17.2018.07.31.16.01.19 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 31 Jul 2018 16:01:19 -0700 (PDT) Date: Tue, 31 Jul 2018 17:01:18 -0600 From: David Brown To: suit@ietf.org Message-ID: <20180731230118.GB18176@davidb.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: [Suit] Parsing CDDL X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Jul 2018 23:01:24 -0000 (I posted this to the IETF CBOR mailing list, and replies related to CBOR/CDDL should be there. I am posting this to the SUIT mailing list because of our interest in CDDL, and that we discovered one of the ambiguities in the CDDL draft) ----- Forwarded message from David Brown ----- Date: Tue, 31 Jul 2018 16:58:54 -0600 From: David Brown To: cbor@ietf.org Subject: Parsing CDDL I have written up a small (220 line) parser based on the draft-ietf-cbor-cddl-03 document. The code can be found at https://github.com/d3zd3z/suit-play/blob/master/cddl.rkt. I used the Racket lexer and parser tools to make this easier. I believe this parser parses (nearly) the same language described in the ABNF grammar in the draft (see below about spaces). However, a couple of observations: - in the rule for 'rule', since a 'type' by itself is a valid 'grpent', this rule is ambiguous. I made the parser work by simply commenting out the first alternate. I would gather that a tool using the output of this parser would have to store all entities, and check that a name used elsewhere as a type must be restricted to the 'type' form. - Spaces are a little complicated, and I'm not sure quite as intended. One production (for #6(...)) has a comment "note no space", however there are a few other places that are missing spaces (such as the space after the open paren on the "(" type ")" alternate. I found this much easier to handle by consuming spaces in the lexer and not making them part of the grammar at all. In order to do this, three things: "#" "6" ["." uint] "(" S type S ")" "#" DIGIT ["." uint] [uint] "*" [uint] must be captured by the lexer, since these production would make the grammar ambiguous unless the space is not allowed. I assume the intent is to interpret these with "maximal munch" (mostly thanks to the comma being optional). I also capture the repetition operation with numbers at lex time to avoid additional ambiguity. - The ABNF grammar references code points such as %x5D-10FFFD. Is it intentional to include the invalid range D800-DFFF, which are reserved for surrogate pairs in UTF-16? They are not considered valid codepoints for UTF-8, and depending on the tools/language used, may be rejected before codepoints are given to the parser. - The text of the draft states that hexidecimal numbers "... are case insensitive", however the ABNF grammar only accepts hexidecimal digits in uppercase. - There are productions allowed by the grammar whose meaning is not described by the text of the draft. For example: item = [ int => bstr ] is valid with the grammar, but it is unclear what this means. Perhaps this could describe an ordered map, or an array of pairs of items. Related are arrays that contain more than a single item: item = [ int, bstr, 5 ] - What is the intended interpretation of: groupname = (a b // c d) My parser interprets this as ((a b) // (c d)), however (a (b // c) d) is also a valid interpretation, an probably what is intended, especially if commas are used (a, b // c, d). - Related to the above, the grammar allows things like like grp = (// //) is this intentional? With some work, I believe it would be possible to transform this grammar into something LALR(1) (my grammar is part way there), but it would make some of the productions difficult to read. However, it may be a useful exercise because it would force any other ambiguities in the grammar. I wrote this starting with a LALR(1) parser, and wrote as much as I could without any shift/reduce conflicts, and reverted to a general backtracking parser near the end. The LALR(1) parser is significantly easier to debug, and tends to produce better error messages. David Brown ----- End forwarded message -----