From nobody Thu Oct 1 16:41:59 2020 Return-Path: X-Original-To: teep@ietf.org Delivered-To: teep@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E735A3A0A04; Thu, 1 Oct 2020 16:41:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: teep-chairs@ietf.org, teep@ietf.org, ncamwing@cisco.com, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 7.17.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160159571687.11712.9709821542249200422@ietfa.amsl.com> Date: Thu, 01 Oct 2020 16:41:56 -0700 Archived-At: Subject: [Teep] teep - New Meeting Session Request for IETF 109 X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Oct 2020 23:41:57 -0000 A new meeting session request has just been submitted by Nancy Cam-Winget, a Chair of the teep working group. --------------------------------------------------------- Working Group Name: Trusted Execution Environment Provisioning Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 50 Conflicts to Avoid: Chair Conflict: 6man intarea rats mile v6ops tls add dprive Key Participant Conflict: oauth suit People who must be present: Nancy Cam-Winget Tirumaleswar Reddy.K Benjamin Kaduk Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 9 12:38:12 2020 Return-Path: X-Original-To: teep@ietf.org Delivered-To: teep@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A45963A0C46; Fri, 9 Oct 2020 12:38:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: teep@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.19.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: teep@ietf.org Message-ID: <160227228661.1567.12548791726546831159@ietfa.amsl.com> Date: Fri, 09 Oct 2020 12:38:06 -0700 Archived-At: Subject: [Teep] I-D Action: draft-ietf-teep-otrp-over-http-08.txt X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2020 19:38:07 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Trusted Execution Environment Provisioning WG of the IETF. Title : HTTP Transport for Trusted Execution Environment Provisioning: Agent-to- TAM Communication Author : Dave Thaler Filename : draft-ietf-teep-otrp-over-http-08.txt Pages : 13 Date : 2020-10-09 Abstract: The Trusted Execution Environment Provisioning (TEEP) Protocol is used to manage code and configuration data in a Trusted Execution Environment (TEE). This document specifies the HTTP transport for TEEP communication where a Trusted Application Manager (TAM) service is used to manage code and data in TEEs on devices that can initiate communication to the TAM. An implementation of this document can (if desired) run outside of any TEE, but interacts with a TEEP implementation that runs inside a TEE. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-teep-otrp-over-http/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-teep-otrp-over-http-08 https://datatracker.ietf.org/doc/html/draft-ietf-teep-otrp-over-http-08 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-teep-otrp-over-http-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Oct 16 14:37:27 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C29F3A0B5D for ; Fri, 16 Oct 2020 14:37:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.301 X-Spam-Level: X-Spam-Status: No, score=-3.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cE-gRqaqi1kG for ; Fri, 16 Oct 2020 14:37:23 -0700 (PDT) Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11on2130.outbound.protection.outlook.com [40.107.223.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C63D23A0B59 for ; Fri, 16 Oct 2020 14:37:23 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Sthpn1PXHiif30Lh6+DQG6kqbyTtM3yL8Lc+ziFHRSzNRGflY04tXePjPwPfTFoJ6xOdwA5FJKah/XFVfLo83cRgcPC6A+WcO2ZEJnWQv8HAA2y/zZEKvJQuLgrQ2RFfVysdviTnpn1ipvrk0wxfLLgF4lISHwAncdKnG58R+ZFwZq0CG+9Mtye4r0V75AoGo1sJ/+ElFXpnj2XOlIq4Ph+g4N6kQbPdkoVuNnfcpl2WN29haE9AMdppHwH2oTdoH9blXKK75pX/LAyahdLk3hWQtGtzQdDFOB7M83iZ0kEZlPqD4r0PlL0bm2jydfLnoVEjmVrQRmQzlmdTKTTzew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LCB6PrW0O4O1yfo1EMnpVZfdFqqNFibiyqFPiob96mg=; b=JaZSotcRghSNIfB3BgdECPj3iUjDTFbwMoxldg21pmkz0uONXIzxFckxyQ2rB4Zua55mWTnLrELCYeVMWzpuv6WB00TF6mJdbUfNJPVGGZ6CMBpmpN/cZYcMAmMnaUN9uQX3X8Y0Ce6Kehdw/BBsyUdGkVuw1aFT5LBz1kI1y3iYCjYBUIL0GYMyiirW1qnaHidC+iB4UAcjlrX9W/hedwY6+D904RCOvs2xU2TUTPwIqynBbyeuK9jylNmVapUsf7UtTd7apRymtofrvdDW3c3cwlDDFrc5AO14fjWNSQUI3TpE63+fhOuEXkh6XvuoLQAwhoO1XgpZn3i0ZsU+ag== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LCB6PrW0O4O1yfo1EMnpVZfdFqqNFibiyqFPiob96mg=; b=SZz3Sqo9NB1RW+oymQIaM/rGqZj0we4UJfeAcIY2kxTTa2GJ96mu00Rk+DkNX/xKEgcFahN0NPC3MGMjBK2SHRQ1pKad1ZoqvtTJWhvjjR1/Ko45T2/Xgy7bVXmyforiGSgSutYSAPReC2oI7/mVcqCz0nLKfdspQ38DP+FTF1g= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1346.namprd21.prod.outlook.com (2603:10b6:208:92::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Fri, 16 Oct 2020 21:37:21 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::8a3:4e58:a8ed:8193]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::8a3:4e58:a8ed:8193%6]) with mapi id 15.20.3477.014; Fri, 16 Oct 2020 21:37:21 +0000 From: Dave Thaler To: teep Thread-Topic: What goes in claims vs TEEP protocol fields Thread-Index: AdakBHDdce9UENQ+SbCc5deK37lj8g== Date: Fri, 16 Oct 2020 21:37:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-16T21:37:19Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5da4b9e2-a5df-4875-8f9d-0dc3ffe3b5d6; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:9127:b5fa:9b25:d08] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 8a46b3d7-5095-4086-2203-08d8721baa2b x-ms-traffictypediagnostic: BL0PR2101MB1346: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: B152HrpfTAlokc4nInUE0uWaaRwFcrvcVHuR4QjaUGeh9ZC7vsuK0J30PcgJvdD43szQ4AvxS5o8a7xAtVApO/HiLGBAQtmqULOluZ+32fv6Cp1JUoosdzoQUdXVLjhIhW6JqyJyQUu0z8X3s3QbWDBh3vlmq0qhZAFBpLMSDmdnal4/WePkal0UOQ1+UCG/YUHzbxVkaysJAVKF7eBAuMO7Ey2FjAfb5RrlwtUWowNz6lOb+075ozy5Y4QI0MLfY6+tCrdf+dBLqZrI8FJMbyETxlO+eeXiF6yJhtzDtSarp9w11/VSz3Okb6nAP4r5InoujBvKgem+CHGlEOqMqIUIyzfU8zz0GDXXYvo/PtOxjRuOPDhxXtMr0hEugH6Pci7TJSGT1yLNYGu4+tv8UA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(346002)(39860400002)(366004)(396003)(166002)(5660300002)(186003)(2906002)(55016002)(8936002)(83380400001)(6506007)(316002)(8676002)(6916009)(66476007)(66556008)(76116006)(478600001)(71200400001)(52536014)(10290500003)(66446008)(66946007)(64756008)(33656002)(86362001)(82950400001)(8990500004)(7696005)(9686003)(82960400001)(966005); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1027B60274595C0D7C63AA4EA3030BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8a46b3d7-5095-4086-2203-08d8721baa2b X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Oct 2020 21:37:21.6332 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ns7FZZJk3ih17GgBUnsDxEnnd7lX8jJ/m+cm3WKeqluYzapHHk543r+7MRm+wFyYLkxBXWySMFLQ8kbZ+QwTTBeJwjfC3MOAtnNrTKifgsA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1346 Archived-At: Subject: [Teep] What goes in claims vs TEEP protocol fields X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 21:37:26 -0000 --_000_BL0PR2101MB1027B60274595C0D7C63AA4EA3030BL0PR2101MB1027_ Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: quoted-printable At IETF 108 I led a discussion about these, for which the minutes summarize= : #5 ...when have TA binary but need metadata Issues with passing in information Options a) attestation claims (what the doc says now) b) separate QueryResponse field If no objections, Dave suggests (a), as it does not require any change to t= he current architecture doc. (No comments in the chat or queue) #16 List of no-longer needed TAs How to remove TA. Does a TAM know that there are no apps calling in to = a TA anymore. Should we support passing a list of TA that are no longer nee= ded since only the TAM is able to clean up no longer needed TAs. Dave propo= ses (a) which is a change to the arch document, doing it via an attestation= s claims. Options to support this scenario: a) attestation claims b) separate QueryResponse field c) do not support No one objected to moving forward with (a): Hannes Tschoefenig, Russ Housle= y, Akira Tsukamoto and =1B$BBg5o=1B(B =1B$B;J=1B(B (Tsukasa Oi) indicated s= upport. Since there were =1B$B!H=1B(Bno comments in the chat or queue=1B$B!I=1B(B a= s noted, the consensus was simply based on there being no objection to my own proposal, which in turn was simply based on minimizing = doc changes. That decision was not based on any real technical consideration. Now I believe there is a strong technical= reason to go with (b) for both, and so I am proposing changing to (b) in both the architecture and the protocol doc. In the arch= doc, this simply involves removal of text. The protocol doc doesn=1B$B!G=1B(Bt yet say (a) or (b) so needs changes either = way but https://github.com/ietf-teep/teep-protocol/pull/47 proposes (b). Rationale: A new technical concern with (a) was raised based on the following text in = section 8 of the arch draft: In addition to the use of cryptographic algorithms in TEEP, there is also the need to make use of different attestation technologies. A device must provide techniques to inform a TAM about the attestation technology it supports. For many deployment cases it is more likely for the TAM to support one or more attestation techniques whereas the device may only support one. The concern is that: 1) Requested components and Unneeded components are pieces of informati= on that must be consumed by the TAM (which is a Relying Party) rather than the Verifier, as= shown in the figure above the text we=1B$B!G=1B(Bre discussing. Claims in evidence go = to the Verifier not the TAM per se. 2) AThe format and content of claims can vary by attestation technique = (serialization format or protocol), and such agility would require the protocol to be capable of supporting mul= tiple techniques, so just supporting such info in EAT claims alone is insufficient. Thus, claims should be used for fields that are important to the Verifier, = whereas protocol fields should be used for information that is destined for the TAM= and not important to the Verifier. As such, I am generating text for both documents to change to (b) to adhere= to the principle above. Please speak up if you have any objections. Dave --_000_BL0PR2101MB1027B60274595C0D7C63AA4EA3030BL0PR2101MB1027_ Content-Type: text/html; charset="iso-2022-jp" Content-Transfer-Encoding: quoted-printable

At IETF 108 I led a discussion about these, for whic= h the minutes summarize:

 

#5 ...when have TA = binary but need metadata

    Issue= s with passing in information

    Optio= ns

     = ;   a) attestation claims (what the doc says now)

     = ;   b) separate QueryResponse field

If no objections, D= ave suggests (a), as it does not require any change to the current architec= ture doc. (No comments in the chat or queue)

 

#16 List of no-long= er needed TAs

    How t= o remove TA. Does a TAM know that there are no apps calling in to a TA anym= ore. Should we support passing a list of TA that are no longer needed since only the TAM is able to clean up no longer needed TAs. Dave p= roposes (a) which is a change to the arch document, doing it via an attesta= tions claims. 

 

Options to support = this scenario:

     = ;   a) attestation claims

     = ;   b) separate QueryResponse field

     = ;   c) do not support

 

No one objected to = moving forward with (a): Hannes Tschoefenig, Russ Housley, Akira Tsukamoto = and =1B$BBg5o=1B(B =1B$B;J=1B(B (Tsukasa Oi) indicated support.

 

Since= there were =1B$B!H=1B(Bno comments in the chat or queue=1B$B!I=1B(B as not= ed, the consensus was simply based on there being no

objec= tion to my own proposal, which in turn was simply based on minimizing doc c= hanges.  That decision was not based on

any r= eal technical consideration. Now I believe there is a strong technical reas= on to go with (b) for both, and so I am proposing

chang= ing to (b) in both the architecture and the protocol doc.  In the arch= doc, this simply involves removal of text.   The

proto= col doc doesn=1B$B!G=1B(Bt yet say (a) or (b) so needs changes either way b= ut https://gith= ub.com/ietf-teep/teep-protocol/pull/47 proposes (b).<= /p>

=  

Ratio= nale:

A new= technical concern with (a) was raised based on the following text in secti= on 8 of the arch draft:

In addition to = the use of cryptographic algorithms in TEEP, there is
also the need to make use of different att= estation technologies. A
device must provide techniques to inform a= TAM about the attestation
technology it supports. For many deploymen= t cases it is more likely
for the TAM to support one or more attesta= tion techniques whereas the
device may only support one.=

 

The concern is that:

1)     Requested components and Unneeded components are pi= eces of information that must be

consumed by the TAM (which is a Relying Party= ) rather than the Verifier, as shown in the

figure above the text we=1B$B!G=1B(Bre discus= sing.   Claims in evidence go to the Verifier not the TAM per se.=

2)     AThe format and content of claims can vary by attes= tation technique (serialization format or protocol),

and such agility would require the protocol t= o be capable of supporting multiple techniques,

so just supporting such info in EAT claims al= one is insufficient.

 

Thus, claims should be used for fields that are i= mportant to the Verifier, whereas

protocol fields should be used for information th= at is destined for the TAM and not important to the Verifier.

 

As such, I am generating text for both documents to = change to (b) to adhere to the principle above.

 

Please speak up if you have any objections.

 

Dave

--_000_BL0PR2101MB1027B60274595C0D7C63AA4EA3030BL0PR2101MB1027_-- From nobody Fri Oct 16 16:42:32 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0303A09CE; Fri, 16 Oct 2020 16:42:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g2GI9J59jFbj; Fri, 16 Oct 2020 16:42:15 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD3873A098D; Fri, 16 Oct 2020 16:42:13 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CCjBZ44FHzyXv; Sat, 17 Oct 2020 01:33:09 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 624583989.729948-003ea6e0b24c10f51d6ecd324391ac4e Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Message-Id: Date: Sat, 17 Oct 2020 01:33:09 +0200 To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Teep] Constrained Node/Network Cluster @ IETF109: DRAFT AGENDA X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 23:42:18 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF109. Remember that there is still quite some potential for changes. The conflicts that meet the eye this time seem to impact generalists = only. Great scheduling job! All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange = WG 0730-0830 Session II Rm 3 INT add Adaptive DNS Discovery WG Rm 4 IRTF maprg Measurement and Analysis for Protocols Rm 7 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 6 SEC secdispatch Security Dispatch WG Rm 7 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 7 SEC gnap Grant Negotiation and Authorization = Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data = and Interactions of Things WG Rm 2 IRTF irtfopen IRTF Open Meeting Rm 4 RTG apn Application-aware Networking BOF Rm 7 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for = Network and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for = Constrained Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment = Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management = Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy = networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model = and Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things = WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 4 IRTF cfrg Crypto Forum Rm 7 TSV masque Multiplexed Application Substrate over = QUIC Encryption WG From nobody Fri Oct 23 14:17:53 2020 Return-Path: X-Original-To: teep@ietf.org Delivered-To: teep@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E5B53A0B73; Fri, 23 Oct 2020 14:15:48 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: kaduk@mit.edu, teep@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.20.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <160348774863.5087.3543257943336857526@ietfa.amsl.com> Date: Fri, 23 Oct 2020 14:15:48 -0700 Archived-At: Subject: [Teep] teep - Requested session has been scheduled for IETF 109 X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 21:15:52 -0000 Dear Nancy Cam-Winget, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. teep Session 1 (1:00 requested) Wednesday, 18 November 2020, Session II 1430-1530 Room Name: Room 7 size: 507 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/109/sessions/teep.ics Request Information: --------------------------------------------------------- Working Group Name: Trusted Execution Environment Provisioning Area Name: Security Area Session Requester: Nancy Cam-Winget Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 50 Conflicts to Avoid: Chair Conflict: 6man intarea rats mile v6ops tls add dprive Key Participant Conflict: oauth suit People who must be present: Nancy Cam-Winget Tirumaleswar Reddy.K Benjamin Kaduk Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 23 15:12:35 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56ADC3A0990; Fri, 23 Oct 2020 15:12:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sJ-5RaQcXvNg; Fri, 23 Oct 2020 15:12:16 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C24D3A0994; Fri, 23 Oct 2020 15:12:15 -0700 (PDT) Received: from [192.168.217.118] (p548dcc60.dip0.t-ipconnect.de [84.141.204.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CHyk53LxqzyVg; Fri, 23 Oct 2020 23:56:45 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Mao-Original-Outgoing-Id: 625183005.290325-8d89a175b356a0a970232e46019678c9 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) Message-Id: Date: Fri, 23 Oct 2020 23:56:45 +0200 To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: [Teep] [Cbor] Constrained Node/Network Cluster @ IETF109: "FINAL" AGENDA X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Oct 2020 22:12:18 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF109. Remember that further agenda changes can still happen. Very little has changed with respect to the draft agenda. WEBTRANS does meet, and CFRG and IRTFOPEN have been moved around (CFRG now on top of CORE, unfortunately). All times *on my agenda* are in UTC (the default page is UTC+0700). https://datatracker.ietf.org/meeting/agenda-utc might be handy. Note that both EU and US are on winter time (standard time) then. Gr=C3=BC=C3=9Fe, Carsten MONDAY, November 9, 2020 0500-0700 Hackathon Kickoff Rm 1 GEN hackathon Hackathon FRIDAY, November 13, 2020 0500-0700 Hackathon Closing Rm 1 GEN hackathon Hackathon MONDAY, November 16, 2020 0500-0700 Session I Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA Rm 3 IRTF qirg Quantum Internet Research Group Rm 5 RTG raw Reliable and Available Wireless WG Rm 6 SEC *** lake Lightweight Authenticated Key Exchange WG 0730-0830 Session II Rm 2 INT add Adaptive DNS Discovery WG Rm 3 IRTF maprg Measurement and Analysis for Protocols Rm 6 SEC *** cose CBOR Object Signing and Encryption WG 0900-1100 Session III Rm 1 ART jsonpath JSON Path WG Rm 2 ART webtrans WebTransport WG Rm 7 SEC secdispatch Security Dispatch WG Rm 8 TSV tsvwg Transport Area Working Group WG TUESDAY, November 17, 2020 0500-0700 Session I Rm 1 ART *** core Constrained RESTful Environments WG Rm 2 INT 6man IPv6 Maintenance WG Rm 3 IRTF cfrg Crypto Forum Rm 7 SEC gnap Grant Negotiation and Authorization Protocol WG 0730-0830 Session II Rm 5 RTG babel Babel routing protocol WG Rm 6 SEC tls Transport Layer Security WG 0900-1100 Session III Rm 1 ART *** asdf A Semantic Definition Format for Data and = Interactions of Things WG Rm 5 RTG apn Application-aware Networking BOF Rm 8 SEC *** rats Remote ATtestation ProcedureS WG WEDNESDAY, November 18, 2020 0500-0700 Session I Rm 3 INT madinas MAC Address Device Identification for Network = and Application Services BOF Rm 5 RTG bier Bit Indexed Explicit Replication WG Rm 7 SEC *** ace Authentication and Authorization for Constrained = Environments WG Rm 8 TSV quic QUIC WG 0730-0830 Session II Rm 3 INT *** 6lo IPv6 over Networks of Resource-constrained Nodes = WG Rm 4 INT *** drip Drone Remote ID Protocol WG Rm 7 SEC *** teep Trusted Execution Environment Provisioning WG Rm 8 TSV tsvwg Transport Area Working Group WG THURSDAY, November 19, 2020 0500-0700 Session I Rm 3 IRTF coinrg Computing in the Network Research Group Rm 7 SEC saag Security Area Open Meeting 0730-0830 Session II Rm 1 ART *** cbor Concise Binary Object Representation Maintenance = and Extensions WG Rm 2 INT intarea Internet Area Working Group WG Rm 3 RTG detnet Deterministic Networking WG Rm 5 SEC acme Automated Certificate Management Environment WG 0900-1100 Session III Rm 4 OPS v6ops IPv6 Operations WG Rm 6 RTG *** roll Routing Over Low power and Lossy networks WG Rm 7 SEC mls Messaging Layer Security WG Rm 8 SEC *** rats Remote ATtestation ProcedureS WG FRIDAY, November 20, 2020 0500-0700 Session I Rm 2 INT add Adaptive DNS Discovery WG Rm 6 RTG rift Routing In Fat Trees WG Rm 7 SEC emu EAP Method Update WG 0730-0830 Session II Rm 1 ART httpapi Building Blocks for HTTP APIs WG Rm 2 INT *** lwig Light-Weight Implementation Guidance WG Rm 3 OPS anima Autonomic Networking Integrated Model and = Approach WG Rm 6 SEC *** suit Software Updates for Internet of Things WG Rm 7 TSV tsvarea Transport Area Open Meeting 0900-1100 Session III Rm 1 ART *** core Constrained RESTful Environments WG Rm 3 INT 6man IPv6 Maintenance WG Rm 5 IRTF irtfopen IRTF Open Meeting Rm 8 TSV masque Multiplexed Application Substrate over QUIC = Encryption WG _______________________________________________ CBOR mailing list CBOR@ietf.org https://www.ietf.org/mailman/listinfo/cbor From nobody Mon Oct 26 15:15:43 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7F33A100A; Mon, 26 Oct 2020 15:15:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8mWO_djYVufH; Mon, 26 Oct 2020 15:15:37 -0700 (PDT) Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam08on2105.outbound.protection.outlook.com [40.107.100.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C27773A0FFB; Mon, 26 Oct 2020 15:15:36 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ay93AXJ0zjDc8lE/uPhF5QsFdxzmk9vWVb7an0oj3oRTPizs0N1MMHlENfHbtL8gHs88owe7jKrxHb+97tO2+8ACPyzzQWusaBIRNbOwnstUy0d4lksX/ogkiQNZdC7dy+ygKV84oVrhXGvXzgaeWMsDx3wgB5iDEOS25cWEfhWBhLipLvmFsGHRecM2CKjVNNSJcaACbNyNEADAzhWLwSdQQ554jm4I3egIeQi5GHQYPKuPbaSThwU1Jd+e3SFqoxQnKESIa/37FGiN9gNzGmGM7UFmYVwAyVL7KbpuwikR2rUScA4Z54CSfIte/kbHArjrKTNmcSmJUzNfSsySMg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uuCGj0lGfgDF78dbRzdLCj21Wnj9qOTOBLJgMtTqVAU=; b=CjwlDeWNeWWZ5scsjsCbB1H3142x5cAtWHCsQKFJf3T0vd0nHcMyrEPmXGv49yphvs8jMjb77LcqI32GzYUHbVVBUHGpBaePp2xELgbQW8ReNQk6mOLdaUdvlEuK8IS8d1wy3LB41S4Ol1dMTjmYfmlVsoRKRyqWwsJngpzlQiKqiyoOCpL5QEeD4pMVPBISYfXVlmDnA+gzlwoDNlZODGf8MT9O74rHh2ERyBBTZbauh+r5o/0Q81pabuwI3+sdCO3GX1WGCB3eeJN/A7Lv3MPiCWd9nAdcZlf49nIyhzbTxVzNOlOopo0J7i6UcnTgdC/m6F0YgIot1mQMpDOeyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uuCGj0lGfgDF78dbRzdLCj21Wnj9qOTOBLJgMtTqVAU=; b=FP/81kFheLLKxM1wQNpnoNCU/vpPiIZ6TMeE9iFFvwxkQFgXFg+w4irroX1wblTeOO76W6EhS76jzK8DLMxdWea5ThDpxga8THfK8f5JvJg42tT4w6/AqPvsAw5dbEm4Xtr2d/eS7wGklldgZKx9Kz6jh8e1XuM3f6HxW/64hA8= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1747.namprd21.prod.outlook.com (2603:10b6:207:35::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.15; Mon, 26 Oct 2020 22:15:34 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Mon, 26 Oct 2020 22:15:34 +0000 From: Dave Thaler To: "rats@ietf.org" CC: teep Thread-Topic: EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2A== Date: Mon, 26 Oct 2020 22:15:34 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-26T22:15:32Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=320ab34c-2d91-46cf-8bca-ee695a1f0256; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:d1a1:21ff:2932:45f9] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: baac0156-972f-4ff1-1591-08d879fca902 x-ms-traffictypediagnostic: BL0PR2101MB1747: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8273; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: fYoh7+bh9NPKsU3g3PNeaK8dal9u3TkS0laUNrcHp5Ux64RRNF2HMGS7czPw12VMJMV+NhB5cDs+oipmhcqr8DL6Xqwsn6IerWmGTsV0yEEUfIzqwff5RgeIeJ/mL++zi4aHEZRwR4hEnxUAEkG4OjZU6P+sLifI2J5wUqRwFoB1nD3bKNZhOJAvMfdAIzrV7tv9utH2zVLgLMLH0GwLWE/IqVaW/Mk0nFwEcuKgaSBgeYOz8sD527SHVMgpwHlKdtcDX41eYTzRxRrfspOEpOYiw1EuixjNVHGzoWh7+oqJff84VzyH2QxJBYPQbnBHbz2rv2JLO3BWhxifLGwirg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(136003)(39860400002)(376002)(366004)(346002)(33656002)(66446008)(316002)(2906002)(66556008)(8936002)(8990500004)(6506007)(9686003)(186003)(8676002)(6916009)(66476007)(52536014)(4326008)(76116006)(64756008)(55016002)(82960400001)(86362001)(66946007)(450100002)(82950400001)(478600001)(10290500003)(5660300002)(83380400001)(7696005)(71200400001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: baac0156-972f-4ff1-1591-08d879fca902 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 22:15:34.5491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: IG9JzQYJ2FQ8NR08/ExsZU1BT5J7MAxwA28LsKaywA693uTW51QJ6zjiu/IgWR6bgoxhZD4Psc9nn3TcWpw5/5XgPU2sRtiV5w7CKoUA/AQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1747 Archived-At: Subject: [Teep] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 22:15:39 -0000 --_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable As discussed in previous IETF meetings, if there are claims beyond the base= set that other WGs need, they can be specified by the other WGs with review by RATS. The TEEP WG needs the following in EATs and I am not sure whether they can = be covered by existing claims or whether TEEP-specific claims are needed. Fro= m section 7.1 of draft-ietf-teep-architecture: =D8 - Device Identifying Information: TEEP attestations may need to =D8 uniquely identify a device to the TAM. Unique device =D8 identification allows the TAM to provide services to the device, =D8 such as managing installed TAs, and providing subscriptions to =D8 services, and locating device-specific keying material to =D8 communicate with or authenticate the device. I believe the Universal Entity ID Claim (ueid) is claim that meets the abov= e requirement. But the TEEP arch then goes on to say: =D8 In some use cases it =D8 may be sufficient to identify only the class of the device. The =D8 security and privacy requirements regarding device identificatio= n =D8 will vary with the type of TA provisioned to the TEE. Which EAT claim contains the device class? The closest thing I see is OEM I= dentification by IEEE (oemid) but I am not sure that is sufficient since it's only the OEM not the device= class from that OEM. This doesn't seem like something that should be TEEP specific though, so ca= n someone tell me how to represent device class using the claims in the EAT spec? =D8 - TEE Identifying Information: The type of TEE that generated this =D8 attestation must be identified, including version identification =D8 information such as the hardware, firmware, and software version =D8 of the TEE, as applicable by the TEE type. TEE manufacturer =D8 information for the TEE is required in order to disambiguate the =D8 same TEE type created by different manufacturers and address =D8 considerations around manufacturer provisioning, keying and =D8 support for the TEE. Similarly for this requirement, the closest thing I see is Origination Clai= m (origination) but I am not sure that is sufficient since it's just the manufacturer not the "version identi= fication information such as the hardware, firmware, and software version of the TEE" Should the TEEP WG define TEEP-specific claims for such information? Dave --_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

As discussed in previous IETF meetings, if there are= claims beyond the base set that
other WGs need, they can be specified by the other WGs with review by RATS.=

 

The TEEP WG needs the following in EATs and I am not= sure whether they can be

covered by existing claims or whether TEEP-specific = claims are needed.  From

section 7.1 of draft-ietf-teep-architecture:

 

=D8     -  Device Ident= ifying Information: TEEP attestations may need to

=D8        un= iquely identify a device to the TAM.  Unique device<= /p>

=D8        id= entification allows the TAM to provide services to the device,

=D8        su= ch as managing installed TAs, and providing subscriptions to

=D8        se= rvices, and locating device-specific keying material to

=D8        co= mmunicate with or authenticate the device.

 

I believe the Universal Entity ID Cl= aim (ueid) is claim that meets the above requirement.
But the TEEP arch then goes on to say:

 <= /span>

=D8        In= some use cases it

=D8        ma= y be sufficient to identify only the class of the device.  The

=D8        se= curity and privacy requirements regarding device identification<= /span>

=D8        wi= ll vary with the type of TA provisioned to the TEE.

Which EAT claim contains the device class? The closest thin= g I see is OEM Identification by IEEE (oemid)
but I am not sure that is sufficient since it's only the OEM not the device= class from that OEM.

This doesn’t seem like something that should be TEEP = specific though, so can someone tell me how to
represent device class using the claims in the EAT spec?<= /p> 

=
=D8     -  TEE Identifying Information: The type of TEE th=
at generated this
=
=D8        attestation must be identified, inclu=
ding version identification
=
=D8        information such as the hardware, fir=
mware, and software version
=
=D8        of the TEE, as applicable by the TEE =
type.  TEE manufacturer
=
=D8        information for the TEE is required i=
n order to disambiguate the
=
=D8        same TEE type created by different ma=
nufacturers and address
=
=D8        considerations around manufacturer pr=
ovisioning, keying and
=
=D8        support for the TEE.
 

Similarly for this requirement, the closest thing I see is = Origination Claim (origination) but I am not sure
that is sufficient since it's just the manufacturer not the "version i= dentification information such as the
hardware, firmware, and software version of the TEE"=

Should the TEEP WG define TEEP-specific claims for s= uch information?

 

Dave

--_000_BL0PR2101MB102770B8E03B95A44497004CA3190BL0PR2101MB1027_-- From nobody Mon Oct 26 16:29:59 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4BDE3A10D0 for ; Mon, 26 Oct 2020 16:29:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mzct1MAf7h55 for ; Mon, 26 Oct 2020 16:29:56 -0700 (PDT) Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2114.outbound.protection.outlook.com [40.107.92.114]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7BE13A10CE for ; Mon, 26 Oct 2020 16:29:56 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JagOT0aZzj1DfSxtFP+Y4o6N5F/ZkT6oNfP1glw3isW+UMsqG7V77iWbaCGTKOIvln85yqiIXUgzxgLtmqwqvfDtXCab5pORnevf+Id1hwr0wX37mprl0C3PNn6g3+hPxOMt7MCHNsdyXi5OSYNQ4HeaWvGBRcgGW8ZWMvwfbhfIVhKpvjgQJ7SwwrgjS/7onW4d3BMZbPnCbsh2unNBkH2+xjfvX/HFVepaAfdlGHXqHb88cVeLhzwm4CJ23JvWSxjeUHuXIHQCyvpqu005WnnAL2J/XiyEk2Nzt1fyKPQPClf4dkMqgLZxM065D8cYfdQN6+VpD/Oa87GBGZjiug== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aaJgHyUF9Xy3JACKfPLJtHghZ2a/HIsnOS4eqmJZiW8=; b=YcjlF+WeaQnqabM5Bcm8w1oh21ELbFiRUkA5BDCLrT7so1kZc/F6OmW9+LWyDDjj+CMEGDV6r2Q3O0bwiBNCJAL5Vlu21n5oDUlLyemJ4ZK9p3/8usnEJAr6+9MkjtXgMDvML9GHbl1Hn9m77au5+xk2EjqUBe8KFjPil4iVOfF2VcnxwF06Il9ToSTkMPNcfxVJaDQSZvkFeHzSq5Ch+HHrsv0DAz26aDqgRPSRiI+foNTwzeFks+c3DJViwWZYeyhVzncSOk9xUm//P/XBPOafaIVf2QPBr+fR4RHh+5uhxN/9fkf2qWasDdJJgJJctIuFcE5w4hA6DLBoJbpz+A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=aaJgHyUF9Xy3JACKfPLJtHghZ2a/HIsnOS4eqmJZiW8=; b=UmmR2SUPSuunnkS6iESjt1Eu/Q+cHpOwzgCiJNpDEJL0k/Gwzkp0DkNZy3rMwqUJ4gu2UFDX/tPYMJEKTn/Yc4+D78kkF0RErQxiPxNPRvEVG9EqslYP/EcMP2l1+Ld8Zf9mFnFe4TzeBiDnJiWHDKVr/SFkuhUv5IkI5h0RWjo= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB0994.namprd21.prod.outlook.com (2603:10b6:207:36::28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.16; Mon, 26 Oct 2020 23:29:52 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Mon, 26 Oct 2020 23:29:52 +0000 From: Dave Thaler To: teep Thread-Topic: Trusted Applications vs Trusted Components Thread-Index: Adar7Szxj4PlUMH7Se+s6nQUf2wT4Q== Date: Mon, 26 Oct 2020 23:29:52 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-26T23:29:50Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=25bedfaa-f26f-4533-b980-c9e3e5451dcc; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:d1a1:21ff:2932:45f9] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: a3f1f8a2-7cd5-499f-138e-08d87a0709f7 x-ms-traffictypediagnostic: BL0PR2101MB0994: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: SHv0LBY6mm9KkYu0iTfcwqav9cCCyQA7Vmuk5tzsl6hCQQ724PorWh0BrOw1/p4Z1wK9lol3RynzBW5VaA1XIk53dgxGzS9gCGUAcE/Egs2cs0MlvwmNgdAQ31y9UZSRIB/JSXizL460R5uZ02aZME+qNcpfNQ8RjWkXr7n8VwmJ9Lx1HClDukOaF+Fo2okrvU8KuEqATXduU86/jbIv2zLayakGIVONtwIphtO6XEBoRl6plAfgNrt5lIe9nAFf3nsaKVIxAC56ba+sjdZMIyS3TBCH5NSyLwjyHduKDAXBQseKV6ZRXuwxjnBzsw8dlR34pPcnuAVQeAGeInWmYbeGpD9I5eqcLQAQpZivfFEexl9KqOXWLNae2igue3i0tPr2Xuo5NvuSWdPwej6esA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(136003)(376002)(396003)(346002)(39860400002)(8676002)(966005)(2906002)(9686003)(66446008)(10290500003)(66946007)(5660300002)(52536014)(186003)(66556008)(66476007)(55016002)(64756008)(7696005)(6916009)(478600001)(8990500004)(6506007)(76116006)(8936002)(82960400001)(82950400001)(83380400001)(86362001)(71200400001)(166002)(33656002)(316002); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1027288E5BF7E970A65AF29CA3190BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: a3f1f8a2-7cd5-499f-138e-08d87a0709f7 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Oct 2020 23:29:52.1493 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: aHKCaqKEANXxqNlOeABlv7gq2gw7pgTAJNAqBuzs9jpCXGEyKswlUUxWLobv6Sk8MH6PdYQA7CPCZmj06m9W0mibWh6sS1Y6Ci3M80so7X8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB0994 Archived-At: Subject: [Teep] Trusted Applications vs Trusted Components X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2020 23:29:59 -0000 --_000_BL0PR2101MB1027288E5BF7E970A65AF29CA3190BL0PR2101MB1027_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Section 4 of draft-ietf-teep-architecture explains that personalization dat= a can be a separate package that a TA depends on (not bundled with the TA), and goes on to say: =D8 The TEEP protocol treats each TA, any dependencies the TA has, and =D8 personalization data as separate components with separate =D8 installation steps that are expressed in SUIT manifests, and a SUIT =D8 manifest might contain or reference multiple binaries (see =D8 [I-D.ietf-suit-manifest] for more details). Thus, the TEEP protocol can install anything representable by a SUIT manife= st, whether the binaries represent code or personalization data, or both. Recall that a TA is defined as: =D8 - Trusted Application (TA): An application (or, in some implementation= s, =D8 an application component) that runs in a TEE. Thus the "that runs" means a TA is specifically code, not something that mi= ght refer to a SUIT manifest containing only personalization data. Elsewhere in the arch doc it talked about the TAM installing "Trusted Appli= cations", such as =D8 A TA Signer selects one or more TAMs and communicates the TA(s) to the= TAM. for example (plenty of other places too), except that such statements shoul= d also apply to personalization data expressed via their own manifest, but the term "TA"= implies the relevant text is limited to things containing code. The term "trusted components" does appear in the doc in a way that refers t= o TAs and/or personalization data, such as in this sentence: =D8 When the TEEP Agent subsequently receives the TA to install and the TA= 's manifest =D8 indicates dependencies on any other trusted components, each dependenc= y can include =D8 a list of TAM URIs for the relevant dependency. As a document editor, I would like to make "Trusted Components" a term defi= ned in the terminology section as referring to TAs and/or Personalization Data, and fi= x text that says TA that should instead say Trusted Components more generally. In theory an alternative approach would be to redefined TAs to not just be = code but to also include only data. But that would seem to go against the normal human expectation = that "app" means something that has code (and maybe data too, but not data-only). https://github.com/ietf-teep/architecture/pull/212/files shows proposed dif= fs if we go ahead and make the change to use Trusted Components as a more formal term, just l= ike TA is. Please speak up if you have strong opinions on this editorial change. I wo= uld like to make a decision one way or the other before the I-D deadline. Dave --_000_BL0PR2101MB1027288E5BF7E970A65AF29CA3190BL0PR2101MB1027_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Section 4 of draft-ietf-teep-architecture explains t= hat personalization data can
be a separate package that a TA depends on (not bundled with the TA), and goes on to say:

=D8  The TEEP pr= otocol treats each TA, any dependencies the TA has, and

=D8  personaliza= tion data as separate components with separate

=D8  installatio= n steps that are expressed in SUIT manifests, and a SUIT<= /p>

=D8  manifest mi= ght contain or reference multiple binaries (see

=D8  [I-D.ietf-s= uit-manifest] for more details).

Thus, the TEEP protocol can install anything represe= ntable by a SUIT manifest,

whether the binaries represent code or personalizati= on data, or both. 

 

Recall that a TA is defined as:

=D8  - = Trusted Application (TA): An application (or, in some implementations,

=D8   an applica= tion component) that runs in a TEE.

Thus the “that runs” means a TA is speci= fically code, not something that might

refer to a SUIT manifest containing only personaliza= tion data.

 

Elsewhere in the arch doc it talked about the TAM in= stalling “Trusted Applications”, such as

=D8  A TA Signer selects one or more TAMs and com= municates the TA(s) to the TAM.

for example (plenty of other places too), except tha= t such statements should also apply

to personalization data expressed via their own mani= fest, but the term “TA” implies the

relevant text is limited to things containing code.<= o:p>

 

The term “trusted components” does appea= r in the doc in a way that refers to
TAs and/or personalization data, such as in this sentence:

=D8  When the TEEP Agent subsequently receives th= e TA to install and the TA's manifest

=D8  indicates dependencies on any other trusted = components, each dependency can include

=D8  a list of TAM URIs for the relevant dependen= cy.

 

As a document editor, I would like to make “Tr= usted Components” a term defined in the
terminology section as referring to TAs and/or Personalization Data, and fi= x text

that says TA that should instead say Trusted Compone= nts more generally.

 

In theory an alternative approach would be to redefi= ned TAs to not just be code but to also include

only data.  But that would seem to go against t= he normal human expectation that “app” means
something that has code (and maybe data too, but not data-only).=

 

https://github.com/ietf-teep/architecture/pull/212/files shows proposed diffs if we go ahead

and make the change to use Trusted Components as a m= ore formal term, just like TA is.

 

Please speak up if you have strong opinions on this = editorial change.  I would like to make

a decision one way or the other before the I-D deadl= ine.

 

Dave

 

--_000_BL0PR2101MB1027288E5BF7E970A65AF29CA3190BL0PR2101MB1027_-- From nobody Tue Oct 27 11:59:49 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2246A3A14E4 for ; Tue, 27 Oct 2020 11:59:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z59lf_XICdlj for ; Tue, 27 Oct 2020 11:59:45 -0700 (PDT) Received: from p3plsmtpa08-03.prod.phx3.secureserver.net (p3plsmtpa08-03.prod.phx3.secureserver.net [173.201.193.104]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4084C3A14E5 for ; Tue, 27 Oct 2020 11:59:45 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id XU9xkVV4PnXVXXU9xkayDa; Tue, 27 Oct 2020 11:57:30 -0700 X-CMAE-Analysis: v=2.4 cv=NO4QR22g c=1 sm=1 tr=0 ts=5f986d9a a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=48vgC7mUAAAA:8 a=0XtbOteLAAAA:20 a=4yAKxjYotTeE49IUHJkA:9 a=jYJq5EX27wIw55d-:21 a=pSlkukuaQ73D7JPG:21 a=QEXdDO2ut3YA:10 a=BBFS4BUNhsFNHM5XLKYA:9 a=km0EVC6CITI95vJ7:21 a=R4PnLxqbUAL_HJzJ:21 a=QwHWtzmgYTxBiXO4:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Tue, 27 Oct 2020 11:57:29 -0700 In-Reply-To: Cc: "rats@ietf.org" , teep To: Dave Thaler References: X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfC2yaRiBDXM9OjnOyIHQg3tM0kPfUUvwYW8d3L/x6Tiyqp6rmVebIO9H6ledQ6Swi5NFKtMDFM73EXoO49VLqBEXevpFpJkDWOSHwZozCqaZoGygaS++ gYCDYVMUUgw5RC72uZliOfbzXIMvRQ0aANNNtrcLXwmGSrkvmvQgZSQYxG7kpBSu1GFWMvfeLDLdwBdh3IKg2qtUV6znVveCEUpklcVv8LdIT3R0Z5NY1aUC ltRkyNv48QWEH7RW9HzFH6TfB36F2fUUMIw5prUgBxU= Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 18:59:47 -0000 --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Personally, I think attestation of TEE=E2=80=99s is pretty important and = should be handled well in EAT. So I=E2=80=99m interested in working on = and adding claims for this to EAT. After reading section 7.1 in TEEP architecture, it does seem like there = some work to do here to get to specific standardized interoperable = claims. More comments below. > On Oct 26, 2020, at 3:15 PM, Dave Thaler = wrote: >=20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. We can define a claim to be the device class and make it a byte string = like a UEID, but I think we have to go further to make it useful as an = interoperable standardize claim. There has to be some method for the = classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D Definitely not origination claim. The intent of it something like = Endorser identification and I think it should be replaced by an = Endorser/X.509 cert URL. I would say, this is a combination of claims I=E2=80=99ve just added a PR = for HW version claims. The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > Should the TEEP WG define TEEP-specific claims for such information? I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. LL > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Personally, I think attestation of TEE=E2=80=99s is pretty = important and should be handled well in EAT. So I=E2=80=99m interested = in working on and adding claims for this to EAT.

After reading section 7.1 in TEEP = architecture, it does seem like there some work to do here to get to = specific standardized interoperable claims.

More comments below.

On Oct 26, 2020, at 3:15 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org> = wrote:

As = discussed in previous IETF meetings, if there are claims beyond the base = set that
other WGs need, they can be specified by the = other WGs with review by RATS.
 
The TEEP WG needs the following in EATs = and I am not sure whether they can be
covered by existing claims or whether = TEEP-specific claims are needed.  From
section = 7.1 of draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the = Universal Entity ID Claim (ueid) is claim that meets the above = requirement.
But the TEEP arch then goes on to = say:
 
=C3=98        In some use cases it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains = the device class? The closest thing I see is OEM Identification by IEEE = (oemid)
but I am not sure that is sufficient since it's = only the OEM not the device class from that OEM.
This= doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to
represent device = class using the claims in the EAT = spec?

I don=E2=80=99t think the OEMID, UEID or other = should be (ab)used  to represent device class. That would result in = them being less reliable and useful in a generic sense. We should come = up with a new claim.

We can define a = claim to be  the device class and make it a byte string like a = UEID, but I think we have to go further to make it useful as an = interoperable standardize claim. There has to be some method for the = classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme.

I wonder if the intent is more about grouping, in = which case we can define a GEID (Group Entity ID) that looks a lot like = a UEID. That seems useful and sensible to me. It is not about = classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 = devices.


=C3=98     -  TEE Identifying Information: The =
type of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98        information such as the =
hardware, firmware, and software version
=C3=98        of the TEE, as applicable =
by the TEE type.  TEE manufacturer
=C3=98        information for the TEE =
is required in order to disambiguate the
=C3=98        same TEE type created by =
different manufacturers and address
=C3=98  =       considerations around = manufacturer provisioning, keying and
=C3=98        support for the TEE.
 

Similarly for this = requirement, the closest thing I see is Origination Claim (origination) = but I am not sure
that is sufficient since it's just the = manufacturer not the "version identification information such as the
hardware, firmware, and software version of the = TEE=E2=80=9D


Definitely not origination claim. The intent of it = something like Endorser identification and I think it should be replaced = by an Endorser/X.509 cert URL.

I = would say, this is a combination of claims

I=E2=80=99ve just added a PR for HW version claims.

The intent for SW version claims is to use CoSWID. = We should probably create some examples to see if it can represent what = TEEP wants to represent.

The = paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not sure = what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs.


Should the TEEP WG define TEEP-specific claims for such = information?

I=E2=80=99d like to see most of them go into EAT = unless they are super specific to TEEP (TEEP not TEEs). I think there is = value in broad standardize claims as it promotes interoperability of = RATS.

LL


 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats

= --Apple-Mail=_1E4D0CE5-BAC2-4EE6-9A4B-5A16320DE1FC-- From nobody Tue Oct 27 13:26:37 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C98FE3A1595; Tue, 27 Oct 2020 13:26:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.468 X-Spam-Level: X-Spam-Status: No, score=-0.468 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kBeSL9ztnrkO; Tue, 27 Oct 2020 13:26:33 -0700 (PDT) Received: from NAM10-BN7-obe.outbound.protection.outlook.com (mail-bn7nam10on2100.outbound.protection.outlook.com [40.107.92.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E0083A1593; Tue, 27 Oct 2020 13:26:33 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H4PVZ4frIUr8gCfSpgNMmIWZTTSW3DBe/9YSn9rziDbYe+VtPY5eaf579db3uKmD3TFz7YpUaDLDaMMUsYhoUOICsVPtGDaZQK9TxRM/LhouCF0BgTk+VDZrrNmETQUxrD77xdhtlFECWv6UhGgz2+z8nmHLKVCOev3ertx5MtEPWJcrfKf5RZjhii5vW00e6Lk+Yb4FuNg2ICmBepnOFYWY/ak5woRecE/LM6rswGe1sMCqOTzIWLEeYxq5E/GiJKegxdsOyiW7CGLj2ohAvKTW2AoW4Ew9ecC0HCqwTE6dDhUA3+FlVsPicKGGYyT3XuJWnHlJ3gBweAcACZMJQA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oIt2vOs7qSPQ7ePo6x0f53zxsRE7zviDTXda+X7ohJw=; b=NYZ7p6Y3hx45EAzQWJ35epUF/5OTwow42P4iq+z2Lc0vAoEcef0HOslP59QHOpWoD76IagK2DriEu2sSPVeCQq5chYqx/mY/CvotUPDYPJHJAv7YQL+YwEDDOmjugalK55pei3paM884owxgndMlUl626jo8Od74jv2ziKoFAuga326rS0Q/GMBAR90tTybcNCntWYm/NY7zSAd39gILtBJi+z2Sw1KKLxAc8kIp3kG/SHe6vIGFvYNVaKgDmpmYFfcWod3L/DIdNcxlQdw590vvYtAFGUQhp5ZHFJmV1dKsxn/pqVDNHtSaIgNwh/z4FDbltk8JiT8Q7FzQlgblyA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oIt2vOs7qSPQ7ePo6x0f53zxsRE7zviDTXda+X7ohJw=; b=XTzN9C2ef/s4UgKfB5pnuBgtdjSq9NYw+LL/yeHQB80wZJFqNarw2pARX9JZZfY0iVtKdCyy2tLV71ar3l6Oj2C/7daJsZGiEwaswJB+w//56BymZzQj+RRBzmBCBoM687GbzA344k3Yl78J018+41JMte1UiY9WnE780QXYdTA= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by MN2PR21MB1485.namprd21.prod.outlook.com (2603:10b6:208:205::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Tue, 27 Oct 2020 20:26:28 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Tue, 27 Oct 2020 20:26:27 +0000 From: Dave Thaler To: Laurence Lundblade CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15A= Date: Tue, 27 Oct 2020 20:26:27 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-27T20:26:26Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=4bdee0f3-772d-4f33-839c-2abfacd9215a; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:581c:556e:bbac:acfc] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9b647215-13cc-472f-a770-08d87ab69541 x-ms-traffictypediagnostic: MN2PR21MB1485: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: LJbiZRYfFD28SsbX9DBCj8UzcbsBzEUSWK8y4qYw1VNvXTx1C4RgvvMoTNyTbSWN0U/Um7PlTegetXrdRec7tKeeOumTJJXSErIR5TVghsHLx8PUjWyVKjO8eem2WV26GO32ZDZ0UX9iT0LHAex5vWKx0KX0jVdfVYBt68u0p3u4MRGgtrAYzt6tIa+RXiy3WpJ1awy2sHxmSy01xuXudxwRUydRqMXnguYUSKVd0Bg9PjuZGIw7lYw+vcS/xU5y56BFEIbnRf6EAaVEiyWrswDegPFZd9vZw4OuPH05aXYqHhUwYBYjc5WCY0fTUcQQeqgfyirPQNgiIOlHS8GJXP49/PTHMPZjfc5Ar+Lf2fhGF5Gldy65xmCEsbUvvHX9I6ZPxxTDEwskwTM+FY3NKg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(366004)(396003)(39860400002)(346002)(7696005)(54906003)(83380400001)(82950400001)(82960400001)(6916009)(52536014)(186003)(8936002)(316002)(53546011)(6506007)(66946007)(66556008)(86362001)(64756008)(66476007)(66446008)(5660300002)(76116006)(9686003)(478600001)(33656002)(55016002)(8676002)(966005)(2906002)(71200400001)(166002)(10290500003)(8990500004)(4326008); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: ELfrgl9DCAda4Q0OP98+KyAFWnUwUKA6iTzAweHgJ420ckxgY4ZFJNs0NwVN0/puD9tSrKi8Sm9HBAXaGzzwUy9ujhB3ovrgyPpHhYVDLgwsRFz0vMhDcYBprzJO8IUrfLwboTi6FU72NOqMo/l+MIFBrGkvCiIhbcn4r9ArSGBcJbjC/irhDaO2KinPdC9wO9lnMBR/UXvLXiqbtEyTxkdUgw5SvQQ/RHt+nUic5/6qmUEAL9fKKMaBeBoQx2zCYNCZTTn3W1/8KOjeF/znRBLe94eU/0P88Z8V6EBDf9Bo+unw/jdvKhSecwpSSc4pzwVTrkl+ugeRY3Wr5hk148QkYOU0z82pbZPDlq38rg8wHX4W6vsku4YNszfyrAV0WIo98w5gKnEQczTpRWvHh4WkR4c4a5+ycVw2468EVdIewhI3Ui6bxFN7QZkcs0tdcSJktVH3NZNSTe3Q/wFSdXUMH6VzDI1icZyC1OzamgdGWRR4rVlnrXbdj1aWokCTdVACJiBEOLfNdwO9GsSgTPjq1SCNgY3f6eR1zuszZMxAK82V7YY5K7Jsbyv8ZBufzMEqy6/H6apmZAYB26CaF9Hyd92N6EQDAbPmptzL/ArHroLRcEjapF9tfIGgi0+jdWIUy/Siu9qKHKNEplXyx/Z78kPViDhjCrTAtStaMfAHoLqj2MPMgW/GlMYSrQ14bNO9VUg/O0vWiS/wey3ncg== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9b647215-13cc-472f-a770-08d87ab69541 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2020 20:26:27.7840 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: YV1FBImzGfZadgeAbfGipBb5KeN4E05tPOV9MRy21qo7HhjQc4SpzbSe0Nd8nnRTpwEYm/dwTAId3NmPnVa5MI3XgBt1YbZwYBtwEPYkhwc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR21MB1485 Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 20:26:36 -0000 --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SW5saW5lIGJlbG934oCmDQoNCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1y ZXNvcnQuY29tPg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyNywgMjAyMCAxMTo1NyBBTQ0KVG86 IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+DQpDYzogcmF0c0BpZXRmLm9yZzsg dGVlcCA8dGVlcEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbUmF0c10gRUFUIGNsYWltcyBuZWVk ZWQgYnkgVEVFUA0KDQpQZXJzb25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKAmXMg aXMgcHJldHR5IGltcG9ydGFudCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQuIFNv IEnigJltIGludGVyZXN0ZWQgaW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3IgdGhp cyB0byBFQVQuDQoNCkFmdGVyIHJlYWRpbmcgc2VjdGlvbiA3LjEgaW4gVEVFUCBhcmNoaXRlY3R1 cmUsIGl0IGRvZXMgc2VlbSBsaWtlIHRoZXJlIHNvbWUgd29yayB0byBkbyBoZXJlIHRvIGdldCB0 byBzcGVjaWZpYyBzdGFuZGFyZGl6ZWQgaW50ZXJvcGVyYWJsZSBjbGFpbXMuDQoNCk1vcmUgY29t bWVudHMgYmVsb3cuDQoNCg0KT24gT2N0IDI2LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxl ciA8ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9 NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQoNCkFzIGRpc2N1c3NlZCBp biBwcmV2aW91cyBJRVRGIG1lZXRpbmdzLCBpZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUg YmFzZSBzZXQgdGhhdA0Kb3RoZXIgV0dzIG5lZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0 aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5IFJBVFMuDQoNClRoZSBURUVQIFdHIG5lZWRzIHRo ZSBmb2xsb3dpbmcgaW4gRUFUcyBhbmQgSSBhbSBub3Qgc3VyZSB3aGV0aGVyIHRoZXkgY2FuIGJl DQpjb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWltcyBvciB3aGV0aGVyIFRFRVAtc3BlY2lmaWMgY2xh aW1zIGFyZSBuZWVkZWQuICBGcm9tDQpzZWN0aW9uIDcuMSBvZiBkcmFmdC1pZXRmLXRlZXAtYXJj aGl0ZWN0dXJlOg0KDQo+ICAgICAtICBEZXZpY2UgSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246IFRF RVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRvDQo+ICAgICAgICB1bmlxdWVseSBpZGVudGlmeSBh IGRldmljZSB0byB0aGUgVEFNLiAgVW5pcXVlIGRldmljZQ0KPiAgICAgICAgaWRlbnRpZmljYXRp b24gYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlkZSBzZXJ2aWNlcyB0byB0aGUgZGV2aWNlLA0KPiAg ICAgICAgc3VjaCBhcyBtYW5hZ2luZyBpbnN0YWxsZWQgVEFzLCBhbmQgcHJvdmlkaW5nIHN1YnNj cmlwdGlvbnMgdG8NCj4gICAgICAgIHNlcnZpY2VzLCBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNp ZmljIGtleWluZyBtYXRlcmlhbCB0bw0KPiAgICAgICAgY29tbXVuaWNhdGUgd2l0aCBvciBhdXRo ZW50aWNhdGUgdGhlIGRldmljZS4NCg0KSSBiZWxpZXZlIHRoZSBVbml2ZXJzYWwgRW50aXR5IElE IENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0IG1lZXRzIHRoZSBhYm92ZSByZXF1aXJlbWVudC4N CkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29lcyBvbiB0byBzYXk6DQoNCj4gICAgICAgIEluIHNv bWUgdXNlIGNhc2VzIGl0DQo+ICAgICAgICBtYXkgYmUgc3VmZmljaWVudCB0byBpZGVudGlmeSBv bmx5IHRoZSBjbGFzcyBvZiB0aGUgZGV2aWNlLiAgVGhlDQo+ICAgICAgICBzZWN1cml0eSBhbmQg cHJpdmFjeSByZXF1aXJlbWVudHMgcmVnYXJkaW5nIGRldmljZSBpZGVudGlmaWNhdGlvbg0KPiAg ICAgICAgd2lsbCB2YXJ5IHdpdGggdGhlIHR5cGUgb2YgVEEgcHJvdmlzaW9uZWQgdG8gdGhlIFRF RS4NCldoaWNoIEVBVCBjbGFpbSBjb250YWlucyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2Vz dCB0aGluZyBJIHNlZSBpcyBPRU0gSWRlbnRpZmljYXRpb24gYnkgSUVFRSAob2VtaWQpDQpidXQg SSBhbSBub3Qgc3VyZSB0aGF0IGlzIHN1ZmZpY2llbnQgc2luY2UgaXQncyBvbmx5IHRoZSBPRU0g bm90IHRoZSBkZXZpY2UgY2xhc3MgZnJvbSB0aGF0IE9FTS4NClRoaXMgZG9lc27igJl0IHNlZW0g bGlrZSBzb21ldGhpbmcgdGhhdCBzaG91bGQgYmUgVEVFUCBzcGVjaWZpYyB0aG91Z2gsIHNvIGNh biBzb21lb25lIHRlbGwgbWUgaG93IHRvDQpyZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRo ZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPw0KDQpJIGRvbuKAmXQgdGhpbmsgdGhlIE9FTUlELCBV RUlEIG9yIG90aGVyIHNob3VsZCBiZSAoYWIpdXNlZCAgdG8gcmVwcmVzZW50IGRldmljZSBjbGFz cy4gVGhhdCB3b3VsZCByZXN1bHQgaW4gdGhlbSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2Vm dWwgaW4gYSBnZW5lcmljIHNlbnNlLiBXZSBzaG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWlt Lg0KDQorMQ0KDQpXZSBjYW4gZGVmaW5lIGEgY2xhaW0gdG8gYmUgIHRoZSBkZXZpY2UgY2xhc3Mg YW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2 ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3Rh bmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0byBiZSBzb21lIG1ldGhvZCBmb3IgdGhlIGNsYXNz aWZpY2F0aW9uLiBUcnVzdFpvbmUgdnMgaHlwZXJ2aXNvciBiYXNlZD8gRmFzdCB2cyBzbG93PyBI YXMgYSBwcm90ZWN0ZWQgbW9kZSBrZXJuZWwgYW5kIFRBcz8gVGhlIFRFRVAgZG9jdW1lbnQgZG9l c27igJl0IHNheS4gVGhpcyBzZWVtcyBwcm9ibGVtYXRpYyB3aXRob3V0IGEgY2xhc3NpZmljYXRp b24gc2NoZW1lLg0KDQpbRFRdIEnigJltIG5vdCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlv biBzY2hlbWUsIGF0IGxlYXN0IGZvciBURUVQLiAgQSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUg c3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxkIHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi4NCg0KSSB3 b25kZXIgaWYgdGhlIGludGVudCBpcyBtb3JlIGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNl IHdlIGNhbiBkZWZpbmUgYSBHRUlEIChHcm91cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3Qg bGlrZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNlZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMg bm90IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJhc2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0 IGxpbmVzIHVwIHdpdGggdGhlIHByaXZhY3kgcHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtl eSBwZXIgMTAwLDAwMCBkZXZpY2VzLg0KDQoNCj4gICAgIC0gIFRFRSBJZGVudGlmeWluZyBJbmZv cm1hdGlvbjogVGhlIHR5cGUgb2YgVEVFIHRoYXQgZ2VuZXJhdGVkIHRoaXMNCg0KPiAgICAgICAg YXR0ZXN0YXRpb24gbXVzdCBiZSBpZGVudGlmaWVkLCBpbmNsdWRpbmcgdmVyc2lvbiBpZGVudGlm aWNhdGlvbg0KDQo+ICAgICAgICBpbmZvcm1hdGlvbiBzdWNoIGFzIHRoZSBoYXJkd2FyZSwgZmly bXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uDQoNCj4gICAgICAgIG9mIHRoZSBURUUsIGFzIGFw cGxpY2FibGUgYnkgdGhlIFRFRSB0eXBlLiAgVEVFIG1hbnVmYWN0dXJlcg0KDQo+ICAgICAgICBp bmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyByZXF1aXJlZCBpbiBvcmRlciB0byBkaXNhbWJpZ3Vh dGUgdGhlDQoNCj4gICAgICAgIHNhbWUgVEVFIHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFu dWZhY3R1cmVycyBhbmQgYWRkcmVzcw0KDQo+ICAgICAgICBjb25zaWRlcmF0aW9ucyBhcm91bmQg bWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywga2V5aW5nIGFuZA0KDQo+ICAgICAgICBzdXBwb3J0 IGZvciB0aGUgVEVFLg0KDQoNClNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNs b3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQg SSBhbSBub3Qgc3VyZQ0KdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3MganVzdCB0aGUgbWFu dWZhY3R1cmVyIG5vdCB0aGUgInZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3Vj aCBhcyB0aGUNCmhhcmR3YXJlLCBmaXJtd2FyZSwgYW5kIHNvZnR3YXJlIHZlcnNpb24gb2YgdGhl IFRFReKAnQ0KDQpEZWZpbml0ZWx5IG5vdCBvcmlnaW5hdGlvbiBjbGFpbS4NCg0KKzENCg0KVGhl IGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlrZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQg SSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFjZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBV UkwuDQoNCkkgd291bGQgc2F5LCB0aGlzIGlzIGEgY29tYmluYXRpb24gb2YgY2xhaW1zDQoNCkl0 4oCZcyBqdXN0IHVzZWQ6DQoNCjEpICAgICBGb3IgYSBWZXJpZmllciBpbiBhcHByYWlzaW5nIHRo ZSBldmlkZW5jZSAobm90aGluZyBURUVQIHNwZWNpZmljIGhlcmUsIGFwcHJhaXNhbCBwb2xpY3kg Y2FuIGludm9sdmUgYW55IGNsYWltKSwgYW5kDQoNCjIpICAgICBUbyBiZSB1c2VkIGJ5IGEgVEFN IHRvIGRlY2lkZSB3aGljaCBUQeKAmXMgYXBwbHkgdG8gdGhlIFRFRS4gIEluIHRoYXQgc2Vuc2Ug aXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBh bnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9y IGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4g bXkgb3Bpbmlvbi4NCg0KS2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVzdGF0aW9u 4oCdIGNvbmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBjbGFpbXNl dCBwZXIgbGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0gYW5kIOKA nGNsYXNz4oCdIGNsYWltcyB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZpY2UgY291bGQgYmUg cmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2ggbGF5ZXIu ICBFLmcuLCBhIOKAnHZlcnNpb27igJ0gY2xhaW0gd291bGQgYXBwbHkgYXQgdGhlIGhhcmR3YXJl IGxheWVyIGFuZCBiZSB0aGUgaGFyZHdhcmUgdmVyc2lvbiwgYXQgdGhlIGZpcm13YXJlIGxheWVy IGFuZCBiZSBhIGZpcm13YXJlIHZlcnNpb24sIGF0IHRoZSBPUyBsYXllciBhbmQgYmUgYW4gT1Mg dmVyc2lvbiwgZXRjLg0KDQoNCknigJl2ZSBqdXN0IGFkZGVkIGEgUFI8aHR0cHM6Ly9uYW0wNi5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHVi LmNvbSUyRmlldGYtcmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZkYXRhPTA0JTdDMDElN0NkdGhh bGVyJTQwbWljcm9zb2Z0LmNvbSU3Q2FiMWVlNzc4OGYxZjRkNDQ5YzU1MDhkODdhYWEzMDA2JTdD NzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDIxODY1ODg5 NTY4NSU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9p VjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJnNkYXRhPUp5TkNU d1VKdmtDUGszSDl1WW1EMEJMZlVYUHU2dmhuUW9ta0lxaXFpVU0lM0QmcmVzZXJ2ZWQ9MD4gZm9y IEhXIHZlcnNpb24gY2xhaW1zLg0KDQpUaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9uIGNsYWltcyBp cyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUgZXhhbXBsZXMg dG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJlcHJlc2VudC4N Cg0KQWdyZWUgdGhpcyBzb3VuZHMgcHJvbWlzaW5nLg0KDQpUaGUgcGFyYWdyYXBoIG1lbnRpb25z IOKAnHR5cGUgb2YgVEVF4oCdLiBJ4oCZbSBub3Qgc3VyZSB3aGF0IGlzIGludGVuZGVkLiBJIGRv buKAmXQga25vdyBvZiBhbnkgY29tbW9uIHRheG9ub215IGZvciBjbGFzc2lmeWluZyBURUVzLg0K DQpBIHVuaXF1ZSBpZGVudGlmaWVyIGlzIHN1ZmZpY2llbnQgaW4gbXkgdmlldywgbm8g4oCcY2xh c3NpZmljYXRpb27igJ0gb3Ig4oCcdGF4b25vbXnigJ0gaXMgcmVxdWlyZWQgYnkgYW55dGhpbmcg dGhhdCB0aGUgVEVFUCBXRyBoYXMgZGlzY3Vzc2VkIHRvIGRhdGUsIGFzIGZhciBhcyBJIGtub3cu DQoNClNob3VsZCB0aGUgVEVFUCBXRyBkZWZpbmUgVEVFUC1zcGVjaWZpYyBjbGFpbXMgZm9yIHN1 Y2ggaW5mb3JtYXRpb24/DQoNCknigJlkIGxpa2UgdG8gc2VlIG1vc3Qgb2YgdGhlbSBnbyBpbnRv IEVBVCB1bmxlc3MgdGhleSBhcmUgc3VwZXIgc3BlY2lmaWMgdG8gVEVFUCAoVEVFUCBub3QgVEVF cykuIEkgdGhpbmsgdGhlcmUgaXMgdmFsdWUgaW4gYnJvYWQgc3RhbmRhcmRpemUgY2xhaW1zIGFz IGl0IHByb21vdGVzIGludGVyb3BlcmFiaWxpdHkgb2YgUkFUUy4NCg0KU291bmRzIGdvb2QgdG8g bWUuICAgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5IHRvIGV4cHJlc3Mg 4oCcdmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0gb3Igd2hhdGV2ZXIg eW91IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNsYWltcyB0aGF0IGNh biBiZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4gICBJIGdsYW5jZWQg YXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBzZWVtcyB0byBiZSBhIGNoaXAtc3BlY2lm aWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9uIGNsYWltIHRoYXQgY2FuIGJlIHVzZWQg YXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3VmZmljaWVudCB0byBtZWV0IHRoZSBURUVQ IGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywgd2Ugc3RpbGwgbmVlZCBvdGhlciBjbGFpbXMg YWRkZWQuDQoNClRoYW5rcyENCkRhdmUNCg0KTEwNCg0KDQoNCg0KRGF2ZQ0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpS QVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZs aXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0Nh YjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3 Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJH WnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3 aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0YT1PNUxKWkJ3JTJCNmh1WVU3QnJOU2dPVVFOdzJI NXVvREd3WmowOSUyRlBnaEtySSUzRCZyZXNlcnZlZD0wPg0KDQo= --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAy IDIgMzt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1h bCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlm O30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNw YW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0K CW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1z b0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0 eTozNDsNCgltYXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0 b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZv bnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252 ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFt ZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNv Q2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAu MHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46 MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRT ZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBsMA0KCXttc28tbGlzdC1p ZDoxODA2NTAyNzYxOw0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRl LWlkczoxOTcyODAwOTA0IDY3Njk4NzA1IDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4 NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0IGwwOmxldmVs MQ0KCXttc28tbGV2ZWwtdGV4dDoiJTFcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw1 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWIt c3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJv bWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwwOmxldmVsNw0K CXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0 Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0K CXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1s PjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpl eHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVs YXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPklubGluZSBi ZWxvd+KApjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+IExhdXJlbmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNv cnQuY29tJmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE9jdG9iZXIgMjcsIDIwMjAg MTE6NTcgQU08YnI+DQo8Yj5Ubzo8L2I+IERhdmUgVGhhbGVyICZsdDtkdGhhbGVyQG1pY3Jvc29m dC5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiByYXRzQGlldGYub3JnOyB0ZWVwICZsdDt0ZWVwQGll dGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVl ZGVkIGJ5IFRFRVA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlBlcnNv bmFsbHksIEkgdGhpbmsgYXR0ZXN0YXRpb24gb2YgVEVF4oCZcyBpcyBwcmV0dHkgaW1wb3J0YW50 IGFuZCBzaG91bGQgYmUgaGFuZGxlZCB3ZWxsIGluIEVBVC4gU28gSeKAmW0gaW50ZXJlc3RlZCBp biB3b3JraW5nIG9uIGFuZCBhZGRpbmcgY2xhaW1zIGZvciB0aGlzIHRvIEVBVC48bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+QWZ0ZXIgcmVhZGluZyBzZWN0aW9uIDcuMSBp biBURUVQIGFyY2hpdGVjdHVyZSwgaXQgZG9lcyBzZWVtIGxpa2UgdGhlcmUgc29tZSB3b3JrIHRv IGRvIGhlcmUgdG8gZ2V0IHRvIHNwZWNpZmljIHN0YW5kYXJkaXplZCBpbnRlcm9wZXJhYmxlIGNs YWltcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5Nb3Jl IGNvbW1lbnRzIGJlbG93LjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5P biBPY3QgMjYsIDIwMjAsIGF0IDM6MTUgUE0sIERhdmUgVGhhbGVyICZsdDs8YSBocmVmPSJtYWls dG86ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21AZG1hcmMuaWV0Zi5vcmciPmR0aGFsZXI9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+QXMgZGlzY3Vzc2VkIGluIHBy ZXZpb3VzIElFVEYgbWVldGluZ3MsIGlmIHRoZXJlIGFyZSBjbGFpbXMgYmV5b25kIHRoZSBiYXNl IHNldCB0aGF0PGJyPg0Kb3RoZXIgV0dzIG5lZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0 aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5IFJBVFMuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+VGhlIFRFRVAgV0cgbmVlZHMgdGhlIGZvbGxvd2luZyBpbiBFQVRzIGFu ZCBJIGFtIG5vdCBzdXJlIHdoZXRoZXIgdGhleSBjYW4gYmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj5jb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWltcyBvciB3aGV0 aGVyIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGFyZSBuZWVkZWQuJm5ic3A7IEZyb208bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5zZWN0aW9uIDcuMSBvZiBkcmFmdC1p ZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOw0KIERldmlj ZSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVEVFUCBhdHRlc3RhdGlvbnMgbWF5IG5lZWQgdG88 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO3VuaXF1ZWx5DQogaWRlbnRpZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4mbmJzcDsg VW5pcXVlIGRldmljZTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7aWRlbnRpZmljYXRpb24NCiBhbGxvd3MgdGhlIFRBTSB0 byBwcm92aWRlIHNlcnZpY2VzIHRvIHRoZSBkZXZpY2UsPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO3RleHQt aW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzdWNoDQogYXMgbWFu YWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3ZpZGluZyBzdWJzY3JpcHRpb25zIHRvPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDtzZXJ2aWNlcywNCiBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRl cmlhbCB0bzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Y29tbXVuaWNhdGUNCiB3aXRoIG9yIGF1dGhlbnRpY2F0ZSB0aGUg ZGV2aWNlLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+SSBiZWxpZXZlIHRo ZSBVbml2ZXJzYWwgRW50aXR5IElEIENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0IG1lZXRzIHRo ZSBhYm92ZSByZXF1aXJlbWVudC48YnI+DQpCdXQgdGhlIFRFRVAgYXJjaCB0aGVuIGdvZXMgb24g dG8gc2F5Ojwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjI1aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4w cHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0lu DQogc29tZSB1c2UgY2FzZXMgaXQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWlu Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOY PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRl bnRpZnkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcu MHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtz ZWN1cml0eQ0KIGFuZCBwcml2YWN5IHJlcXVpcmVtZW50cyByZWdhcmRpbmcgZGV2aWNlIGlkZW50 aWZpY2F0aW9uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDt3aWxsDQogdmFyeSB3aXRoIHRoZSB0eXBlIG9mIFRBIHByb3Zp c2lvbmVkIHRvIHRoZSBURUUuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW47YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQy OTJFIj5XaGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8gVGhlIGNsb3Nl c3QgdGhpbmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9lbWlkKTxicj4N CmJ1dCBJIGFtIG5vdCBzdXJlIHRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIG9ubHkgdGhl IE9FTSBub3QgdGhlIGRldmljZSBjbGFzcyBmcm9tIHRoYXQgT0VNLjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQ6d2hpdGUiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+VGhpcyBkb2VzbuKAmXQgc2VlbSBsaWtlIHNvbWV0 aGluZyB0aGF0IHNob3VsZCBiZSBURUVQIHNwZWNpZmljIHRob3VnaCwgc28gY2FuIHNvbWVvbmUg dGVsbCBtZSBob3cgdG88YnI+DQpyZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRoZSBjbGFp bXMgaW4gdGhlIEVBVCBzcGVjPzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPkkgZG9u4oCZdCB0aGluayB0aGUgT0VNSUQsIFVFSUQgb3Igb3RoZXIgc2hvdWxkIGJl IChhYil1c2VkICZuYnNwO3RvIHJlcHJlc2VudCBkZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVz dWx0IGluIHRoZW0gYmVpbmcgbGVzcyByZWxpYWJsZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBz ZW5zZS4gV2Ugc2hvdWxkIGNvbWUgdXAgd2l0aCBhIG5ldyBjbGFpbS48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+KzE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+V2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICZuYnNwO3Ro ZSBkZXZpY2UgY2xhc3MgYW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0 IEkgdGhpbmsgd2UgaGF2ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGlu dGVyb3BlcmFibGUgc3RhbmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0byBiZSBzb21lIG1ldGhv ZCBmb3IgdGhlDQogY2xhc3NpZmljYXRpb24uIFRydXN0Wm9uZSB2cyBoeXBlcnZpc29yIGJhc2Vk PyBGYXN0IHZzIHNsb3c/IEhhcyBhIHByb3RlY3RlZCBtb2RlIGtlcm5lbCBhbmQgVEFzPyBUaGUg VEVFUCBkb2N1bWVudCBkb2VzbuKAmXQgc2F5LiBUaGlzIHNlZW1zIHByb2JsZW1hdGljIHdpdGhv dXQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPltEVF0gSeKAmW0gbm90IHN1cmUgd2UgbmVlZCBhIGNsYXNzaWZpY2F0aW9uIHNjaGVt ZSwgYXQgbGVhc3QgZm9yIFRFRVAuICZuYnNwO0Egc2ltcGxlIGRldmljZSBjbGFzcyBieXRlIHN0 cmluZyBhcyB5b3Ugc3VnZ2VzdCB3b3VsZCBzdWZmaWNlIGluIG15IG9waW5pb24uPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgd29uZGVyIGlm IHRoZSBpbnRlbnQgaXMgbW9yZSBhYm91dCBncm91cGluZywgaW4gd2hpY2ggY2FzZSB3ZSBjYW4g ZGVmaW5lIGEgR0VJRCAoR3JvdXAgRW50aXR5IElEKSB0aGF0IGxvb2tzIGEgbG90IGxpa2UgYSBV RUlELiBUaGF0IHNlZW1zIHVzZWZ1bCBhbmQgc2Vuc2libGUgdG8gbWUuIEl0IGlzIG5vdCBhYm91 dCBjbGFzc2lmaWNhdGlvbiBiYXNlZCBvbiBhbnkNCiBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxpbmVz IHVwIHdpdGggdGhlIHByaXZhY3kgcHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtleSBwZXIg MTAwLDAwMCBkZXZpY2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWlu ZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZuYnNwOy0mbmJz cDsgVEVFIElkZW50aWZ5aW5nIEluZm9ybWF0aW9uOiBUaGUgdHlwZSBvZiBURUUgdGhhdCBnZW5l cmF0ZWQgdGhpczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBp bjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3Mi PsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwO2F0dGVzdGF0aW9uIG11c3QgYmUgaWRlbnRpZmllZCwgaW5j bHVkaW5nIHZlcnNpb24gaWRlbnRpZmljYXRpb248bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwv c3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBzdWNo IGFzIHRoZSBoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uPG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7b2YgdGhlIFRFRSwgYXMgYXBwbGljYWJsZSBieSB0aGUgVEVFIHR5cGUuJm5ic3A7IFRFRSBt YW51ZmFjdHVyZXI8bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4w aW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2Rpbmdz Ij7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyByZXF1aXJl ZCBpbiBvcmRlciB0byBkaXNhbWJpZ3VhdGUgdGhlPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8 L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c2FtZSBURUUgdHlwZSBj cmVhdGVkIGJ5IGRpZmZlcmVudCBtYW51ZmFjdHVyZXJzIGFuZCBhZGRyZXNzPG86cD48L286cD48 L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss c2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Y29uc2lkZXJhdGlvbnMgYXJvdW5kIG1hbnVmYWN0dXJlciBwcm92aXNpb25pbmcsIGtleWluZyBh bmQ8bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1p bmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDtzdXBwb3J0IGZvciB0aGUgVEVFLjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJl IHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+Jm5ic3A7PG86cD48L286cD48L3ByZT4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6My4wcHQ7bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjBpbjttYXJnaW4tbGVmdDouNWluO21hcmdpbi1ib3R0b206 LjAwMDFwdDtiYWNrZ3JvdW5kOndoaXRlO2JhY2tncm91bmQtcG9zaXRpb246aW5pdGlhbCBpbml0 aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlhbCI+DQo8c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nl c3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBh bSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhlIG1h bnVmYWN0dXJlciBub3QgdGhlICZxdW90O3ZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRp b24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJz aW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+RGVm aW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uIDxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+KzE8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBpbnRlbnQgb2YgaXQgc29tZXRoaW5n IGxpa2UgRW5kb3JzZXIgaWRlbnRpZmljYXRpb24gYW5kIEkgdGhpbmsgaXQgc2hvdWxkIGJlIHJl cGxhY2VkIGJ5IGFuIEVuZG9yc2VyL1guNTA5IGNlcnQgVVJMLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPkkgd291bGQgc2F5LCB0aGlzIGlzIGEgY29tYmlu YXRpb24gb2YgY2xhaW1zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkl04oCZ cyBqdXN0IHVzZWQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEi PjwhW2lmICFzdXBwb3J0TGlzdHNdPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48c3Bh biBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4xKTxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+ PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkZv ciBhIFZlcmlmaWVyIGluIGFwcHJhaXNpbmcgdGhlIGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3Bl Y2lmaWMgaGVyZSwgYXBwcmFpc2FsIHBvbGljeSBjYW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQ8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9 InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+PCFbaWYgIXN1cHBv cnRMaXN0c10+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28t bGlzdDpJZ25vcmUiPjIpPHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFu PjwhW2VuZGlmXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VG8gYmUgdXNlZCBieSBh IFRBTSB0byBkZWNpZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRvIHRoZSBURUUuJm5ic3A7IEluIHRo YXQgc2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNs YXNzIGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZQ0KIGlmIHRoZXJlIHdlcmUgYSBieXRl IHN0cmluZyBmb3IgZGV2aWNlIGNsYXNzIGFzIHlvdSBzdWdnZXN0IHRoYXQgd291bGQgYmUgc3Vm ZmljaWVudCBpbiBteSBvcGluaW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+S2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVzdGF0aW9u4oCdIGNv bmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBjbGFpbXNldCBwZXIg bGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0gYW5kIOKAnGNsYXNz 4oCdIGNsYWltcw0KIHRoYXQgd291bGQgYXBwbHkgdG8gYW55IGRldmljZSBjb3VsZCBiZSByZXVz ZWQgZm9yIHRoZSBURUUsIGFuZCByZXVzZWQgZm9yIGRlc2NyaWJpbmcgZWFjaCBsYXllci4mbmJz cDsgRS5nLiwgYSDigJx2ZXJzaW9u4oCdIGNsYWltIHdvdWxkIGFwcGx5IGF0IHRoZSBoYXJkd2Fy ZSBsYXllciBhbmQgYmUgdGhlIGhhcmR3YXJlIHZlcnNpb24sIGF0IHRoZSBmaXJtd2FyZSBsYXll ciBhbmQgYmUgYSBmaXJtd2FyZSB2ZXJzaW9uLCBhdCB0aGUgT1MgbGF5ZXIgYW5kIGJlDQogYW4g T1MgdmVyc2lvbiwgZXRjLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SeKAmXZlIGp1c3QgYWRkZWQg YSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9v ay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmdpdGh1Yi5jb20lMkZpZXRmLXJhdHMtd2clMkZlYXQl MkZwdWxsJTJGNjgmYW1wO2RhdGE9MDQlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdD YWIxZWU3Nzg4ZjFmNGQ0NDljNTUwOGQ4N2FhYTMwMDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mzk0MjE4NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBi R1pzYjNkOGV5SldJam9pTUM0d0xqQXdNREFpTENKUUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFX d2lMQ0pYVkNJNk1uMCUzRCU3QzEwMDAmYW1wO3NkYXRhPUp5TkNUd1VKdmtDUGszSDl1WW1EMEJM ZlVYUHU2dmhuUW9ta0lxaXFpVU0lM0QmYW1wO3Jlc2VydmVkPTAiPlBSPC9hPiZuYnNwO2Zvcg0K IEhXIHZlcnNpb24gY2xhaW1zLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPlRoZSBpbnRlbnQgZm9yIFNXIHZlcnNpb24gY2xhaW1zIGlzIHRvIHVzZSBDb1NX SUQuIFdlIHNob3VsZCBwcm9iYWJseSBjcmVhdGUgc29tZSBleGFtcGxlcyB0byBzZWUgaWYgaXQg Y2FuIHJlcHJlc2VudCB3aGF0IFRFRVAgd2FudHMgdG8gcmVwcmVzZW50LjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj5BZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPlRoZSBwYXJh Z3JhcGggbWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBzdXJlIHdoYXQgaXMg aW50ZW5kZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25vbXkgZm9yIGNsYXNz aWZ5aW5nIFRFRXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5B IHVuaXF1ZSBpZGVudGlmaWVyIGlzIHN1ZmZpY2llbnQgaW4gbXkgdmlldywgbm8g4oCcY2xhc3Np ZmljYXRpb27igJ0gb3Ig4oCcdGF4b25vbXnigJ0gaXMgcmVxdWlyZWQgYnkgYW55dGhpbmcgdGhh dCB0aGUgVEVFUCBXRyBoYXMgZGlzY3Vzc2VkIHRvIGRhdGUsIGFzIGZhciBhcyBJIGtub3cuPC9z cGFuPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluO2JhY2tncm91bmQtcG9zaXRpb246 aW5pdGlhbCBpbml0aWFsO2JhY2tncm91bmQtcmVwZWF0OmluaXRpYWwgaW5pdGlhbCI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWYiPlNob3VsZCB0aGUgVEVFUCBXRyBkZWZpbmUgVEVFUC1zcGVjaWZpYyBjbGFp bXMgZm9yIHN1Y2ggaW5mb3JtYXRpb24/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+SeKAmWQgbGlrZSB0 byBzZWUgbW9zdCBvZiB0aGVtIGdvIGludG8gRUFUIHVubGVzcyB0aGV5IGFyZSBzdXBlciBzcGVj aWZpYyB0byBURUVQIChURUVQIG5vdCBURUVzKS4gSSB0aGluayB0aGVyZSBpcyB2YWx1ZSBpbiBi cm9hZCBzdGFuZGFyZGl6ZSBjbGFpbXMgYXMgaXQgcHJvbW90ZXMgaW50ZXJvcGVyYWJpbGl0eSBv ZiBSQVRTLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5Tb3VuZHMgZ29vZCB0 byBtZS4mbmJzcDsmbmJzcDsgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5 IHRvIGV4cHJlc3Mg4oCcdmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0g b3Igd2hhdGV2ZXIgeW91IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNs YWltcw0KIHRoYXQgY2FuIGJlIGFwcGxpZWQgaW4gY2xhaW1zZXRzIGF0IHZhcmlvdXMgbGF5ZXJz LiZuYnNwOyZuYnNwOyBJIGdsYW5jZWQgYXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBz ZWVtcyB0byBiZSBhIGNoaXAtc3BlY2lmaWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9u IGNsYWltIHRoYXQgY2FuIGJlIHVzZWQgYXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3Vm ZmljaWVudCB0byBtZWV0IHRoZSBURUVQIGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywNCiB3 ZSBzdGlsbCBuZWVkIG90aGVyIGNsYWltcyBhZGRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+RGF2ZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5MTDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJyPg0KPGJyPg0KPG86cD48L286cD48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+RGF2ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJy Pg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOlJBVFNAaWV0 Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3MiI+UkFUU0BpZXRmLm9yZzwvc3Bh bj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2 ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFt MDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3 dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmYW1wO2RhdGE9MDQlN0MwMSU3 Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDYWIxZWU3Nzg4ZjFmNGQ0NDljNTUwOGQ4N2FhYTMw MDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3Mzk0MjE4 NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBiR1pzYjNkOGV5SldJam9pTUM0d0xqQXdNREFpTENK UUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFXd2lMQ0pYVkNJNk1uMCUzRCU3QzEwMDAmYW1wO3Nk YXRhPU81TEpaQnclMkI2aHVZVTdCck5TZ09VUU53Mkg1dW9ER3daajA5JTJGUGdoS3JJJTNEJmFt cDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5NTRGNzIiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0czwvc3Bhbj48L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BL0PR2101MB1027EA205417DAF375BA7085A3160BL0PR2101MB1027_-- From nobody Tue Oct 27 13:45:22 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A2363A0EE1 for ; Tue, 27 Oct 2020 13:45:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.261 X-Spam-Level: X-Spam-Status: No, score=-0.261 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQDbhDmMZrtu for ; Tue, 27 Oct 2020 13:45:10 -0700 (PDT) Received: from p3plsmtpa06-04.prod.phx3.secureserver.net (p3plsmtpa06-04.prod.phx3.secureserver.net [173.201.192.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1BFB3A11EB for ; Tue, 27 Oct 2020 13:45:09 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id XVq8kNvDACxjbXVq9knBDS; Tue, 27 Oct 2020 13:45:09 -0700 X-CMAE-Analysis: v=2.4 cv=MYepB7zf c=1 sm=1 tr=0 ts=5f9886d5 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=yMhMjlubAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=yj6dSO1jGMNs0pzK1ZEA:9 a=ZaHD-_rrhb3_OlZV:21 a=_FpwxEm8Vo6fSCVZ:21 a=QEXdDO2ut3YA:10 a=VYg6gOQCZo0zsz-dFs4A:9 a=XMRbwrl2xdCQ6TV1:21 a=BP4yVtUgfEJ8JaCq:21 a=w7rmA34bbtZsaBuO:21 a=_W_S_7VecoQA:10 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Tue, 27 Oct 2020 13:45:08 -0700 In-Reply-To: Cc: "rats@ietf.org" , teep To: Dave Thaler References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfAWqfDgD7QZgcfXxvW0P7APYznLunv78kMvSSgpVpQNPk6p7a+pYbgTL0+X3WCE+yK2eeT5cZxUtIm+DUDzBmd8h8lH+k41sm+hFslIVQXKOtakvI0aF sBooYiFS6xAU3VbPXsPSyIcGplRQ1Chm3Yz5YBxWCGpKGxx0gjtbqhQGNwxJbQ152qwVDMOZsoV7a5M+a8kgoyuTojNaNmex9oy+qy979eBjTi2zev8pcOtm LlShGlPRDqYRUY9Roz8BGw== Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Oct 2020 20:45:12 -0000 --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 CoSWID should cover all the identification of vendors, models, versions = and stuff for SW. If it doesn=E2=80=99t talk to Henk about fixes to = CoSWID. :-) For HW, there is OEMID and recently proposed chip version, board version = and device version. It seems like we need a model number claim for HW. I = will work on that. Seems like submodules would be used to organize claims for layered = attestation and all of the above claims can occur in any submodule they = need to. Does this mostly cover it?=20 I worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that. LL > On Oct 27, 2020, at 1:26 PM, Dave Thaler = wrote: >=20 > Inline below=E2=80=A6 > =20 > From: Laurence Lundblade >=20 > Sent: Tuesday, October 27, 2020 11:57 AM > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > Personally, I think attestation of TEE=E2=80=99s is pretty important = and should be handled well in EAT. So I=E2=80=99m interested in working = on and adding claims for this to EAT. > =20 > After reading section 7.1 in TEEP architecture, it does seem like = there some work to do here to get to specific standardized interoperable = claims. > =20 > More comments below. >=20 >=20 > On Oct 26, 2020, at 3:15 PM, Dave Thaler = > wrote: > =20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? > =20 > I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. > =20 > +1 > =20 > We can define a claim to be the device class and make it a byte = string like a UEID, but I think we have to go further to make it useful = as an interoperable standardize claim. There has to be some method for = the classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. > =20 > [DT] I=E2=80=99m not sure we need a classification scheme, at least = for TEEP. A simple device class byte string as you suggest would = suffice in my opinion. > =20 > I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =20 > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D > =20 > Definitely not origination claim.=20 > =20 > +1 > =20 > The intent of it something like Endorser identification and I think it = should be replaced by an Endorser/X.509 cert URL. > =20 > I would say, this is a combination of claims > =20 > It=E2=80=99s just used: > 1) For a Verifier in appraising the evidence (nothing TEEP = specific here, appraisal policy can involve any claim), and > 2) To be used by a TAM to decide which TA=E2=80=99s apply to the = TEE. In that sense it=E2=80=99s just like any other vendor id + device = class for any non TEE, and I believe if there were a byte string for = device class as you suggest that would be sufficient in my opinion. > =20 > Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D concept in = the arch doc, as long as we have a claimset per layer, then I think the = same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D claims that = would apply to any device could be reused for the TEE, and reused for = describing each layer. E.g., a =E2=80=9Cversion=E2=80=9D claim would = apply at the hardware layer and be the hardware version, at the firmware = layer and be a firmware version, at the OS layer and be an OS version, = etc. > =20 > =20 > I=E2=80=99ve just added a PR = for HW version claims. > =20 > The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. > =20 > Agree this sounds promising. > =20 > The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > =20 > A unique identifier is sufficient in my view, no =E2=80=9Cclassification= =E2=80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know. >=20 > Should the TEEP WG define TEEP-specific claims for such information? > =20 > I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. > =20 > Sounds good to me. Consider this a request to add some way to = express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or = =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers. I glanced at the PR you referenced and it seems to be = a chip-specific version, not a generic version claim that can be used at = multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80=99= s requirements, we still need other claims added. > =20 > Thanks! > Dave > =20 > LL > =20 >=20 >=20 > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = > =20 --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
CoSWID should cover all the identification of vendors, = models, versions and stuff for SW. If it doesn=E2=80=99t talk to Henk = about fixes to CoSWID. :-)

For HW, there is OEMID and recently proposed chip version, = board version and device version. It seems like we need a model number = claim for HW. I will work on that.

Seems like submodules would be used to = organize claims for layered attestation and all of the above claims can = occur in any submodule they need to.

Does this mostly cover = it? 

I = worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that.

LL


On Oct = 27, 2020, at 1:26 PM, Dave Thaler <dthaler@microsoft.com> wrote:

Inline below=E2=80=A6
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: Tuesday, October 27, 2020 = 11:57 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
Personally, I think attestation of TEE=E2=80=99s is = pretty important and should be handled well in EAT. So I=E2=80=99m = interested in working on and adding claims for this to EAT.
 
After reading section 7.1 in TEEP = architecture, it does seem like there some work to do here to get to = specific standardized interoperable claims.
 
More comments below.


On Oct 26, 2020, at 3:15 PM, Dave Thaler = <dthaler=3D40microsoft.com@dmarc.ietf.org> wrote:
 
As= discussed in previous IETF meetings, if there are claims beyond the = base set that
other WGs need, they can be specified by the = other WGs with review by RATS.
 
The TEEP WG needs the = following in EATs and I am not sure whether they can be
covered by existing claims = or whether TEEP-specific claims are needed.  From
section 7.1 of = draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the Universal Entity ID Claim (ueid) is = claim that meets the above requirement.
But the TEEP arch = then goes on to say:
 
=C3=98        In some use cases = it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains = the device class? The closest thing I see is OEM Identification by IEEE = (oemid)
but I am not sure that is sufficient since it's = only the OEM not the device class from that OEM.
This doesn=E2=80= =99t seem like something that should be TEEP specific though, so can = someone tell me how to
represent device class using the = claims in the EAT spec?
 
I don=E2=80=99t think the OEMID, UEID or = other should be (ab)used  to represent device class. That would = result in them being less reliable and useful in a generic sense. We = should come up with a new claim.
 
+1
 
We can define a claim to be  the = device class and make it a byte string like a UEID, but I think we have = to go further to make it useful as an interoperable standardize claim. = There has to be some method for the classification. TrustZone vs = hypervisor based? Fast vs slow? Has a protected mode kernel and TAs? The = TEEP document doesn=E2=80=99t say. This seems problematic without a = classification scheme.
 
[DT] I=E2=80=99m not sure we need a classification scheme, at = least for TEEP.  A simple device class byte string as you suggest = would suffice in my opinion.
 
I wonder if the intent is more about = grouping, in which case we can define a GEID (Group Entity ID) that = looks a lot like a UEID. That seems useful and sensible to me. It is not = about classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 devices.
 
=C3=98  =
   -  TEE Identifying Information: The type =
of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98  =
      information such as the =
hardware, firmware, and software version
=C3=98        of =
the TEE, as applicable by the TEE type.  TEE manufacturer
=C3=98  =
      information for the TEE is =
required in order to disambiguate the
=C3=98  =
      same TEE type created by =
different manufacturers and address
=C3=98  =
      considerations around =
manufacturer provisioning, keying and
=C3=98  =
      support for the TEE.
 
Similarly for this = requirement, the closest thing I see is Origination Claim (origination) = but I am not sure
that is sufficient since it's just the = manufacturer not the "version identification information such as the
hardware, firmware, and software version of the = TEE=E2=80=9D
 
Definitely not origination claim. 
 
+1
 
The intent of it something like Endorser = identification and I think it should be replaced by an Endorser/X.509 = cert URL.
 
I would say, this is a combination of = claims
 
It=E2=80=99s just = used:
1)     For a Verifier in appraising the evidence = (nothing TEEP specific here, appraisal policy can involve any claim), = and
2)     To be used by a TAM to decide which TA=E2=80= =99s apply to the TEE.  In that sense it=E2=80=99s just like any = other vendor id + device class for any non TEE, and I believe if there = were a byte string for device class as you suggest that would be = sufficient in my opinion.
 
Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D = concept in the arch doc, as long as we have a claimset per layer, then I = think the same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D = claims that would apply to any device could be reused for the TEE, and = reused for describing each layer.  E.g., a =E2=80=9Cversion=E2=80=9D = claim would apply at the hardware layer and be the hardware version, at = the firmware layer and be a firmware version, at the OS layer and be an = OS version, etc.
 
 
I=E2=80=99ve just added a PR for HW version claims.
 
The intent for SW version claims is to = use CoSWID. We should probably create some examples to see if it can = represent what TEEP wants to represent.
 
Agree this sounds promising.
 
The paragraph mentions =E2=80=9Ctype of = TEE=E2=80=9D. I=E2=80=99m not sure what is intended. I don=E2=80=99t = know of any common taxonomy for classifying TEEs.
 
A = unique identifier is sufficient in my view, no =E2=80=9Cclassification=E2=80= =9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the TEEP = WG has discussed to date, as far as I know.

Should the TEEP WG = define TEEP-specific claims for such information?
 
I=E2=80=99d like to see most of them go = into EAT unless they are super specific to TEEP (TEEP not TEEs). I think = there is value in broad standardize claims as it promotes = interoperability of RATS.
 
Sounds good to me.   Consider this a request to add = some way to express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D = (or =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers.   I glanced at the PR you referenced and it = seems to be a chip-specific version, not a generic version claim that = can be used at multiple layers, so is not sufficient to meet the TEEP = arch draft=E2=80=99s requirements, we still need other claims added.
 
Thanks!
Dave
 
LL
 


 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 

= --Apple-Mail=_E37BC342-409F-4A3C-9684-BCF326C16DCC-- From nobody Tue Oct 27 17:05:23 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CE793A098B; Tue, 27 Oct 2020 17:05:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.468 X-Spam-Level: X-Spam-Status: No, score=-0.468 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fi_fiRT5BwXW; Tue, 27 Oct 2020 17:05:16 -0700 (PDT) Received: from NAM12-MW2-obe.outbound.protection.outlook.com (mail-mw2nam12on2131.outbound.protection.outlook.com [40.107.244.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF36A3A0978; Tue, 27 Oct 2020 17:05:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HN8iQ5F5rHKKVBRh0nICTZKQgCQ9IaC9AdK2S3SvqcjLqjsn2kVrrzPk+IekYOlYOVs5Jr/tMp1K8FRX1LmNYwflHLzhRWiaevAtg0Tmyck0pRldhv9vIe75SdfxZLRWM2bx4OExl+NS4CZuYhmL98Z1g71jPm0ZhjnZ43wv2+hXvrxlsKRI6l9nZMmxYmjiaKp2seQHqfL563nOrsYBTR9ZR83pwZFTKfnqbBCHfaW66udOXYWvkk1ixTG2oN6f2/Sb8aXD8LjRalwDLJz8Q0MEGNLjbMrxUYWpiZGTNn414el1c6w004GU3d1mHVvEWv3b7ZbPOX1osPYeYy4WpA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5rGDXxePd+mxO3dqDR2SGXxbUwcKX2J+xC8sFcoQ6yk=; b=YWWMUXfXX4vt4WTt3EP/CqFqiIx+Ff04e1KewHKC7l9CZYwuoeOVCLw8hrErnhITHp5HRdoKBi3BNmcq8ww20mCGg9vr9j1fJVT6QtuA/q4z4pMQkix0obfxbDUjnRb+ktq2m4B7fF2c/8+q3h1ynv0+IIoIIo2pSNnjBe5eIKew0Bzs7uRQoShMWT5JcdKBeiQLreOWvjEhi5UWRwn+ZpCTxoasNQGLyHURJjaK5e9Me544GvbZjCuRt8LEvjK1qn8GzOZZa44DWrNTHhbpYMEyBzAivNxA07/HDbJlGfZErX2P1sIjF40Z0R3JEiwIBEOeG6WFjRoo17cOMZhguw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5rGDXxePd+mxO3dqDR2SGXxbUwcKX2J+xC8sFcoQ6yk=; b=Dmupwj8zgVxW+T6AB1dkaklVaw6eGAU6t/4qen9wMbgQeI6zdgGZTYLqksxWZYF7AFqGa9lXgiwQy0mIfyLUO7eXDK3cql8bJzeM7hW4Cto5g1o9aiK7d+VF6nckvim1Ti+eKT1A5omKpGwz3yBFZJli83y3N7JST9QXrVtKSl8= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by MN2PR21MB1390.namprd21.prod.outlook.com (2603:10b6:208:205::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Wed, 28 Oct 2020 00:05:13 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.017; Wed, 28 Oct 2020 00:05:13 +0000 From: Dave Thaler To: Laurence Lundblade CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAG8sNQ Date: Wed, 28 Oct 2020 00:05:13 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-28T00:05:13Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=ad008481-2a2f-4120-9938-4b8e2b9e62ce; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:b89c:f5df:23f4:3466] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c2810baa-c3c4-4616-d614-08d87ad524d2 x-ms-traffictypediagnostic: MN2PR21MB1390: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: EXlUM58gfwobFVFu+z6z4AngDzoH3xWjbY6yRWOqi+c5DKfKZc+kNHhHJ4+/j9Pr9iENcaxbql3sp9B/C4jjWA/B+qH+l5iAxdHFSGWLbuR0N8dYRCWtioYIkPOk0lHNLqtJOLkPckteuqGng7IKGkfT42fbaOSYbQpykkJ6wZjNx9psQOesGa9b5a3lojfqRsZ960yW25I6JeGgO6BC/gC2A1waMKUoUuX4+ayGwhev8fek9SWlkRf30buIX0eAFMM5K0WRHBGDpchof2jj4J55bG5bF5Gnu+6darP/MBKFZdRLAb2G8pNiFt21Nv5gPq6Nb60YygOg0CUP0NFLNn56JoRs7qKIWw8Uwv4ofE5ywAw/zMzl97m2ckmSOHc5DoTdKSms5qjVIXFer0oSaQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(136003)(396003)(366004)(39860400002)(7696005)(2906002)(33656002)(8676002)(8936002)(166002)(71200400001)(76116006)(66476007)(66556008)(66446008)(10290500003)(52536014)(54906003)(64756008)(316002)(478600001)(966005)(82960400001)(55016002)(66946007)(186003)(82950400001)(6506007)(83380400001)(5660300002)(4326008)(53546011)(86362001)(6916009)(8990500004)(9686003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: c2810baa-c3c4-4616-d614-08d87ad524d2 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Oct 2020 00:05:13.6005 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gcusJawQTA+OSIELbZHi49FimRZr8T5iVrUlqb+FdMhT9KuPR+Wpw7ADfNGYHi8706TRIQ4gdMV8AL/2jr6+IHnEfU47eNXRNzUQYYxqTDI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR21MB1390 Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Oct 2020 00:05:19 -0000 --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TG9va2luZyBhdCBkcmFmdC1pZXRmLXNhY20tY29zd2lkLCBJIGFncmVlIHRoYXQgQ29TV0lEIHNo b3VsZCBjb3ZlciBpdCBpZiB0aGVyZSBpcyBhIGNsYWltIHNwZWNpZmllZCB0byBob2xkIGEgQ29T V0lELg0KDQpTbyB5ZXMsIHlvdXIgc3VtbWFyeSBvZiB3aGF0IGlzIG5lZWRlZCBzb3VuZHMgcmln aHQgdG8gbWUuDQoNCkRhdmUNCg0KRnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5k LXJlc29ydC5jb20+DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDI3LCAyMDIwIDE6NDUgUE0NClRv OiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPg0KQ2M6IHJhdHNAaWV0Zi5vcmc7 IHRlZXAgPHRlZXBAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVl ZGVkIGJ5IFRFRVANCg0KQ29TV0lEIHNob3VsZCBjb3ZlciBhbGwgdGhlIGlkZW50aWZpY2F0aW9u IG9mIHZlbmRvcnMsIG1vZGVscywgdmVyc2lvbnMgYW5kIHN0dWZmIGZvciBTVy4gSWYgaXQgZG9l c27igJl0IHRhbGsgdG8gSGVuayBhYm91dCBmaXhlcyB0byBDb1NXSUQuIDotKQ0KDQpGb3IgSFcs IHRoZXJlIGlzIE9FTUlEIGFuZCByZWNlbnRseSBwcm9wb3NlZCBjaGlwIHZlcnNpb24sIGJvYXJk IHZlcnNpb24gYW5kIGRldmljZSB2ZXJzaW9uLiBJdCBzZWVtcyBsaWtlIHdlIG5lZWQgYSBtb2Rl bCBudW1iZXIgY2xhaW0gZm9yIEhXLiBJIHdpbGwgd29yayBvbiB0aGF0Lg0KDQpTZWVtcyBsaWtl IHN1Ym1vZHVsZXMgd291bGQgYmUgdXNlZCB0byBvcmdhbml6ZSBjbGFpbXMgZm9yIGxheWVyZWQg YXR0ZXN0YXRpb24gYW5kIGFsbCBvZiB0aGUgYWJvdmUgY2xhaW1zIGNhbiBvY2N1ciBpbiBhbnkg c3VibW9kdWxlIHRoZXkgbmVlZCB0by4NCg0KRG9lcyB0aGlzIG1vc3RseSBjb3ZlciBpdD8NCg0K SSB3b3JyeSB0aGF0IHRoZSBIVyBjbGFpbXMgYXJlIGJpdCB0b28gcmlnaWQgaW4gdGhlaXIgdXNl IG9mIEVBTi0xMyBhbmQgSUVFRSByZWdpc3RyaWVzLiBNaWdodCBuZWVkIHRvIGRvIHNvbWV0aGlu ZyBhYm91dCB0aGF0Lg0KDQpMTA0KDQoNCg0KT24gT2N0IDI3LCAyMDIwLCBhdCAxOjI2IFBNLCBE YXZlIFRoYWxlciA8ZHRoYWxlckBtaWNyb3NvZnQuY29tPG1haWx0bzpkdGhhbGVyQG1pY3Jvc29m dC5jb20+PiB3cm90ZToNCg0KSW5saW5lIGJlbG934oCmDQoNCkZyb206IExhdXJlbmNlIEx1bmRi bGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+ Pg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyNywgMjAyMCAxMTo1NyBBTQ0KVG86IERhdmUgVGhh bGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb208bWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4+ DQpDYzogcmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz47IHRlZXAgPHRlZXBAaWV0 Zi5vcmc8bWFpbHRvOnRlZXBAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtSYXRzXSBFQVQgY2xh aW1zIG5lZWRlZCBieSBURUVQDQoNClBlcnNvbmFsbHksIEkgdGhpbmsgYXR0ZXN0YXRpb24gb2Yg VEVF4oCZcyBpcyBwcmV0dHkgaW1wb3J0YW50IGFuZCBzaG91bGQgYmUgaGFuZGxlZCB3ZWxsIGlu IEVBVC4gU28gSeKAmW0gaW50ZXJlc3RlZCBpbiB3b3JraW5nIG9uIGFuZCBhZGRpbmcgY2xhaW1z IGZvciB0aGlzIHRvIEVBVC4NCg0KQWZ0ZXIgcmVhZGluZyBzZWN0aW9uIDcuMSBpbiBURUVQIGFy Y2hpdGVjdHVyZSwgaXQgZG9lcyBzZWVtIGxpa2UgdGhlcmUgc29tZSB3b3JrIHRvIGRvIGhlcmUg dG8gZ2V0IHRvIHNwZWNpZmljIHN0YW5kYXJkaXplZCBpbnRlcm9wZXJhYmxlIGNsYWltcy4NCg0K TW9yZSBjb21tZW50cyBiZWxvdy4NCg0KDQoNCk9uIE9jdCAyNiwgMjAyMCwgYXQgMzoxNSBQTSwg RGF2ZSBUaGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnPG1haWx0 bzpkdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KDQpBcyBk aXNjdXNzZWQgaW4gcHJldmlvdXMgSUVURiBtZWV0aW5ncywgaWYgdGhlcmUgYXJlIGNsYWltcyBi ZXlvbmQgdGhlIGJhc2Ugc2V0IHRoYXQNCm90aGVyIFdHcyBuZWVkLCB0aGV5IGNhbiBiZSBzcGVj aWZpZWQgYnkgdGhlIG90aGVyIFdHcyB3aXRoIHJldmlldyBieSBSQVRTLg0KDQpUaGUgVEVFUCBX RyBuZWVkcyB0aGUgZm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0 aGV5IGNhbiBiZQ0KY292ZXJlZCBieSBleGlzdGluZyBjbGFpbXMgb3Igd2hldGhlciBURUVQLXNw ZWNpZmljIGNsYWltcyBhcmUgbmVlZGVkLiAgRnJvbQ0Kc2VjdGlvbiA3LjEgb2YgZHJhZnQtaWV0 Zi10ZWVwLWFyY2hpdGVjdHVyZToNCg0KPiAgICAgLSAgRGV2aWNlIElkZW50aWZ5aW5nIEluZm9y bWF0aW9uOiBURUVQIGF0dGVzdGF0aW9ucyBtYXkgbmVlZCB0bw0KPiAgICAgICAgdW5pcXVlbHkg aWRlbnRpZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4gIFVuaXF1ZSBkZXZpY2UNCj4gICAgICAgIGlk ZW50aWZpY2F0aW9uIGFsbG93cyB0aGUgVEFNIHRvIHByb3ZpZGUgc2VydmljZXMgdG8gdGhlIGRl dmljZSwNCj4gICAgICAgIHN1Y2ggYXMgbWFuYWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3Zp ZGluZyBzdWJzY3JpcHRpb25zIHRvDQo+ICAgICAgICBzZXJ2aWNlcywgYW5kIGxvY2F0aW5nIGRl dmljZS1zcGVjaWZpYyBrZXlpbmcgbWF0ZXJpYWwgdG8NCj4gICAgICAgIGNvbW11bmljYXRlIHdp dGggb3IgYXV0aGVudGljYXRlIHRoZSBkZXZpY2UuDQoNCkkgYmVsaWV2ZSB0aGUgVW5pdmVyc2Fs IEVudGl0eSBJRCBDbGFpbSAodWVpZCkgaXMgY2xhaW0gdGhhdCBtZWV0cyB0aGUgYWJvdmUgcmVx dWlyZW1lbnQuDQpCdXQgdGhlIFRFRVAgYXJjaCB0aGVuIGdvZXMgb24gdG8gc2F5Og0KDQo+ICAg ICAgICBJbiBzb21lIHVzZSBjYXNlcyBpdA0KPiAgICAgICAgbWF5IGJlIHN1ZmZpY2llbnQgdG8g aWRlbnRpZnkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4gIFRoZQ0KPiAgICAgICAgc2Vj dXJpdHkgYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb24NCj4gICAgICAgIHdpbGwgdmFyeSB3aXRoIHRoZSB0eXBlIG9mIFRBIHByb3Zpc2lvbmVk IHRvIHRoZSBURUUuDQpXaGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8g VGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9l bWlkKQ0KYnV0IEkgYW0gbm90IHN1cmUgdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3Mgb25s eSB0aGUgT0VNIG5vdCB0aGUgZGV2aWNlIGNsYXNzIGZyb20gdGhhdCBPRU0uDQpUaGlzIGRvZXNu 4oCZdCBzZWVtIGxpa2Ugc29tZXRoaW5nIHRoYXQgc2hvdWxkIGJlIFRFRVAgc3BlY2lmaWMgdGhv dWdoLCBzbyBjYW4gc29tZW9uZSB0ZWxsIG1lIGhvdyB0bw0KcmVwcmVzZW50IGRldmljZSBjbGFz cyB1c2luZyB0aGUgY2xhaW1zIGluIHRoZSBFQVQgc3BlYz8NCg0KSSBkb27igJl0IHRoaW5rIHRo ZSBPRU1JRCwgVUVJRCBvciBvdGhlciBzaG91bGQgYmUgKGFiKXVzZWQgIHRvIHJlcHJlc2VudCBk ZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVzdWx0IGluIHRoZW0gYmVpbmcgbGVzcyByZWxpYWJs ZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBzZW5zZS4gV2Ugc2hvdWxkIGNvbWUgdXAgd2l0aCBh IG5ldyBjbGFpbS4NCg0KKzENCg0KV2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICB0aGUgZGV2 aWNlIGNsYXNzIGFuZCBtYWtlIGl0IGEgYnl0ZSBzdHJpbmcgbGlrZSBhIFVFSUQsIGJ1dCBJIHRo aW5rIHdlIGhhdmUgdG8gZ28gZnVydGhlciB0byBtYWtlIGl0IHVzZWZ1bCBhcyBhbiBpbnRlcm9w ZXJhYmxlIHN0YW5kYXJkaXplIGNsYWltLiBUaGVyZSBoYXMgdG8gYmUgc29tZSBtZXRob2QgZm9y IHRoZSBjbGFzc2lmaWNhdGlvbi4gVHJ1c3Rab25lIHZzIGh5cGVydmlzb3IgYmFzZWQ/IEZhc3Qg dnMgc2xvdz8gSGFzIGEgcHJvdGVjdGVkIG1vZGUga2VybmVsIGFuZCBUQXM/IFRoZSBURUVQIGRv Y3VtZW50IGRvZXNu4oCZdCBzYXkuIFRoaXMgc2VlbXMgcHJvYmxlbWF0aWMgd2l0aG91dCBhIGNs YXNzaWZpY2F0aW9uIHNjaGVtZS4NCg0KW0RUXSBJ4oCZbSBub3Qgc3VyZSB3ZSBuZWVkIGEgY2xh c3NpZmljYXRpb24gc2NoZW1lLCBhdCBsZWFzdCBmb3IgVEVFUC4gIEEgc2ltcGxlIGRldmljZSBj bGFzcyBieXRlIHN0cmluZyBhcyB5b3Ugc3VnZ2VzdCB3b3VsZCBzdWZmaWNlIGluIG15IG9waW5p b24uDQoNCkkgd29uZGVyIGlmIHRoZSBpbnRlbnQgaXMgbW9yZSBhYm91dCBncm91cGluZywgaW4g d2hpY2ggY2FzZSB3ZSBjYW4gZGVmaW5lIGEgR0VJRCAoR3JvdXAgRW50aXR5IElEKSB0aGF0IGxv b2tzIGEgbG90IGxpa2UgYSBVRUlELiBUaGF0IHNlZW1zIHVzZWZ1bCBhbmQgc2Vuc2libGUgdG8g bWUuIEl0IGlzIG5vdCBhYm91dCBjbGFzc2lmaWNhdGlvbiBiYXNlZCBvbiBhbnkgY2hhcmFjdGVy aXN0aWNzLiBJdCBsaW5lcyB1cCB3aXRoIHRoZSBwcml2YWN5IHByZXNlcnZpbmcgdGVjaG5pcXVl IG9mIG9uZSBrZXkgcGVyIDEwMCwwMDAgZGV2aWNlcy4NCg0KDQo+ICAgICAtICBURUUgSWRlbnRp ZnlpbmcgSW5mb3JtYXRpb246IFRoZSB0eXBlIG9mIFRFRSB0aGF0IGdlbmVyYXRlZCB0aGlzDQoN Cj4gICAgICAgIGF0dGVzdGF0aW9uIG11c3QgYmUgaWRlbnRpZmllZCwgaW5jbHVkaW5nIHZlcnNp b24gaWRlbnRpZmljYXRpb24NCg0KPiAgICAgICAgaW5mb3JtYXRpb24gc3VjaCBhcyB0aGUgaGFy ZHdhcmUsIGZpcm13YXJlLCBhbmQgc29mdHdhcmUgdmVyc2lvbg0KDQo+ICAgICAgICBvZiB0aGUg VEVFLCBhcyBhcHBsaWNhYmxlIGJ5IHRoZSBURUUgdHlwZS4gIFRFRSBtYW51ZmFjdHVyZXINCg0K PiAgICAgICAgaW5mb3JtYXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIgdG8g ZGlzYW1iaWd1YXRlIHRoZQ0KDQo+ICAgICAgICBzYW1lIFRFRSB0eXBlIGNyZWF0ZWQgYnkgZGlm ZmVyZW50IG1hbnVmYWN0dXJlcnMgYW5kIGFkZHJlc3MNCg0KPiAgICAgICAgY29uc2lkZXJhdGlv bnMgYXJvdW5kIG1hbnVmYWN0dXJlciBwcm92aXNpb25pbmcsIGtleWluZyBhbmQNCg0KPiAgICAg ICAgc3VwcG9ydCBmb3IgdGhlIFRFRS4NCg0KDQpTaW1pbGFybHkgZm9yIHRoaXMgcmVxdWlyZW1l bnQsIHRoZSBjbG9zZXN0IHRoaW5nIEkgc2VlIGlzIE9yaWdpbmF0aW9uIENsYWltIChvcmlnaW5h dGlvbikgYnV0IEkgYW0gbm90IHN1cmUNCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1 c3QgdGhlIG1hbnVmYWN0dXJlciBub3QgdGhlICJ2ZXJzaW9uIGlkZW50aWZpY2F0aW9uIGluZm9y bWF0aW9uIHN1Y2ggYXMgdGhlDQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJz aW9uIG9mIHRoZSBURUXigJ0NCg0KRGVmaW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uDQoN CisxDQoNClRoZSBpbnRlbnQgb2YgaXQgc29tZXRoaW5nIGxpa2UgRW5kb3JzZXIgaWRlbnRpZmlj YXRpb24gYW5kIEkgdGhpbmsgaXQgc2hvdWxkIGJlIHJlcGxhY2VkIGJ5IGFuIEVuZG9yc2VyL1gu NTA5IGNlcnQgVVJMLg0KDQpJIHdvdWxkIHNheSwgdGhpcyBpcyBhIGNvbWJpbmF0aW9uIG9mIGNs YWltcw0KDQpJdOKAmXMganVzdCB1c2VkOg0KMSkgICAgIEZvciBhIFZlcmlmaWVyIGluIGFwcHJh aXNpbmcgdGhlIGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3BlY2lmaWMgaGVyZSwgYXBwcmFpc2Fs IHBvbGljeSBjYW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQNCjIpICAgICBUbyBiZSB1c2VkIGJ5 IGEgVEFNIHRvIGRlY2lkZSB3aGljaCBUQeKAmXMgYXBwbHkgdG8gdGhlIFRFRS4gIEluIHRoYXQg c2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNz IGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJp bmcgZm9yIGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2ll bnQgaW4gbXkgb3Bpbmlvbi4NCg0KS2VlcGluZyBpbiBtaW5kIHRoZSDigJxsYXllcmVkIGF0dGVz dGF0aW9u4oCdIGNvbmNlcHQgaW4gdGhlIGFyY2ggZG9jLCBhcyBsb25nIGFzIHdlIGhhdmUgYSBj bGFpbXNldCBwZXIgbGF5ZXIsIHRoZW4gSSB0aGluayB0aGUgc2FtZSDigJx2ZW5kb3IgaWTigJ0g YW5kIOKAnGNsYXNz4oCdIGNsYWltcyB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZpY2UgY291 bGQgYmUgcmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2gg bGF5ZXIuICBFLmcuLCBhIOKAnHZlcnNpb27igJ0gY2xhaW0gd291bGQgYXBwbHkgYXQgdGhlIGhh cmR3YXJlIGxheWVyIGFuZCBiZSB0aGUgaGFyZHdhcmUgdmVyc2lvbiwgYXQgdGhlIGZpcm13YXJl IGxheWVyIGFuZCBiZSBhIGZpcm13YXJlIHZlcnNpb24sIGF0IHRoZSBPUyBsYXllciBhbmQgYmUg YW4gT1MgdmVyc2lvbiwgZXRjLg0KDQoNCknigJl2ZSBqdXN0IGFkZGVkIGEgUFI8aHR0cHM6Ly9u YW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJG Z2l0aHViLmNvbSUyRmlldGYtcmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZkYXRhPTA0JTdDMDEl N0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNvbSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkz MmEyJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4 MzEyOTU1MTEyMiU3Q1Vua25vd24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxD SlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJnNkYXRh PVNBem5FWnpYYzFzR0cyRGdIR3pWemhHJTJGRVhEcURVTkpHYnE4VlVVN3Z5VSUzRCZyZXNlcnZl ZD0wPiBmb3IgSFcgdmVyc2lvbiBjbGFpbXMuDQoNClRoZSBpbnRlbnQgZm9yIFNXIHZlcnNpb24g Y2xhaW1zIGlzIHRvIHVzZSBDb1NXSUQuIFdlIHNob3VsZCBwcm9iYWJseSBjcmVhdGUgc29tZSBl eGFtcGxlcyB0byBzZWUgaWYgaXQgY2FuIHJlcHJlc2VudCB3aGF0IFRFRVAgd2FudHMgdG8gcmVw cmVzZW50Lg0KDQpBZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcuDQoNClRoZSBwYXJhZ3JhcGgg bWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBzdXJlIHdoYXQgaXMgaW50ZW5k ZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25vbXkgZm9yIGNsYXNzaWZ5aW5n IFRFRXMuDQoNCkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3VmZmljaWVudCBpbiBteSB2aWV3LCBu byDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9teeKAnSBpcyByZXF1aXJlZCBieSBh bnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNzZWQgdG8gZGF0ZSwgYXMgZmFyIGFz IEkga25vdy4NCg0KDQpTaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xh aW1zIGZvciBzdWNoIGluZm9ybWF0aW9uPw0KDQpJ4oCZZCBsaWtlIHRvIHNlZSBtb3N0IG9mIHRo ZW0gZ28gaW50byBFQVQgdW5sZXNzIHRoZXkgYXJlIHN1cGVyIHNwZWNpZmljIHRvIFRFRVAgKFRF RVAgbm90IFRFRXMpLiBJIHRoaW5rIHRoZXJlIGlzIHZhbHVlIGluIGJyb2FkIHN0YW5kYXJkaXpl IGNsYWltcyBhcyBpdCBwcm9tb3RlcyBpbnRlcm9wZXJhYmlsaXR5IG9mIFJBVFMuDQoNClNvdW5k cyBnb29kIHRvIG1lLiAgIENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0IHRvIGFkZCBzb21lIHdheSB0 byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0gKG9yIOKAnGNsYXNz4oCdIG9y IHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCcdmVyc2lvbuKAnSBhcyBjbGFp bXMgdGhhdCBjYW4gYmUgYXBwbGllZCBpbiBjbGFpbXNldHMgYXQgdmFyaW91cyBsYXllcnMuICAg SSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQgaXQgc2VlbXMgdG8gYmUgYSBj aGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVyc2lvbiBjbGFpbSB0aGF0IGNh biBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90IHN1ZmZpY2llbnQgdG8gbWVl dCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMsIHdlIHN0aWxsIG5lZWQgb3Ro ZXIgY2xhaW1zIGFkZGVkLg0KDQpUaGFua3MhDQpEYXZlDQoNCkxMDQoNCg0KDQoNCg0KRGF2ZQ0K X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NClJBVFMgbWFp bGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtz LnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUy Rm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jv c29mdC5jb20lN0M4NmFkYzUxOGNkNDg0NmY1ZDA0YzA4ZDg3YWI5MzJhMiU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyODMxMjk1NjExMTklN0NVbmtu b3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENK QlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0YT1qaE5lWmpPcExTQTR5d1Bs bFBwOWpTVEdub293TFc1TlhxMG8lMkJTc2o1S3MlM0QmcmVzZXJ2ZWQ9MD4NCg0KDQo= --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAy IDIgMzt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1h bCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsN Cglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlm O30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0K CWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNw YW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9y OnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0K CW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1h bDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQt ZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNw YWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkhUTUxQ cmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFy IjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9y bWF0dGVkIjsNCglmb250LWZhbWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXtt c28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24x DQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9 DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlk bWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0 YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxi b2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+TG9va2luZyBhdCBkcmFmdC1pZXRmLXNhY20tY29zd2lkLCBJIGFncmVlIHRo YXQgQ29TV0lEIHNob3VsZCBjb3ZlciBpdCBpZiB0aGVyZSBpcyBhIGNsYWltIHNwZWNpZmllZCB0 byBob2xkIGEgQ29TV0lELjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+U28geWVzLCB5b3VyIHN1bW1hcnkgb2Ygd2hhdCBpcyBuZWVkZWQgc291bmRzIHJpZ2h0IHRv IG1lLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+RGF2ZTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6 My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gTGF1cmVuY2UgTHVuZGJsYWRl ICZsdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2Rh eSwgT2N0b2JlciAyNywgMjAyMCAxOjQ1IFBNPGJyPg0KPGI+VG86PC9iPiBEYXZlIFRoYWxlciAm bHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gcmF0c0BpZXRmLm9y ZzsgdGVlcCAmbHQ7dGVlcEBpZXRmLm9yZyZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtS YXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNvU1dJRCBzaG91bGQgY292ZXIgYWxsIHRoZSBp ZGVudGlmaWNhdGlvbiBvZiB2ZW5kb3JzLCBtb2RlbHMsIHZlcnNpb25zIGFuZCBzdHVmZiBmb3Ig U1cuIElmIGl0IGRvZXNu4oCZdCB0YWxrIHRvIEhlbmsgYWJvdXQgZml4ZXMgdG8gQ29TV0lELiA6 LSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Rm9yIEhXLCB0aGVyZSBpcyBPRU1JRCBhbmQgcmVjZW50bHkgcHJvcG9zZWQgY2hpcCB2ZXJzaW9u LCBib2FyZCB2ZXJzaW9uIGFuZCBkZXZpY2UgdmVyc2lvbi4gSXQgc2VlbXMgbGlrZSB3ZSBuZWVk IGEgbW9kZWwgbnVtYmVyIGNsYWltIGZvciBIVy4gSSB3aWxsIHdvcmsgb24gdGhhdC48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2VlbXMgbGlr ZSBzdWJtb2R1bGVzIHdvdWxkIGJlIHVzZWQgdG8gb3JnYW5pemUgY2xhaW1zIGZvciBsYXllcmVk IGF0dGVzdGF0aW9uIGFuZCBhbGwgb2YgdGhlIGFib3ZlIGNsYWltcyBjYW4gb2NjdXIgaW4gYW55 IHN1Ym1vZHVsZSB0aGV5IG5lZWQgdG8uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvZXMgdGhpcyBtb3N0bHkgY292ZXIgaXQ/Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd29y cnkgdGhhdCB0aGUgSFcgY2xhaW1zIGFyZSBiaXQgdG9vIHJpZ2lkIGluIHRoZWlyIHVzZSBvZiBF QU4tMTMgYW5kIElFRUUgcmVnaXN0cmllcy4gTWlnaHQgbmVlZCB0byBkbyBzb21ldGhpbmcgYWJv dXQgdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5M TDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+ PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJv dHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gT2N0IDI3LCAyMDIw LCBhdCAxOjI2IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXJAbWlj cm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+SW5saW5lIGJlbG934oCmPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+TGF1cmVuY2UNCiBMdW5kYmxhZGUgJmx0OzxhIGhy ZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VHVlc2RheSwgT2N0b2Jl ciAyNywgMjAyMCAxMTo1NyBBTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+RGF2ZSBUaGFsZXIgJmx0OzxhIGhyZWY9Im1haWx0 bzpkdGhhbGVyQG1pY3Jvc29mdC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmR0aGFs ZXJAbWljcm9zb2Z0LmNvbTwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOnJh dHNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPnJhdHNAaWV0Zi5vcmc8L3Nw YW4+PC9hPjsgdGVlcCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRlZXBAaWV0Zi5vcmciPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPnRlZXBAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+UmU6IFtSYXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5QZXJz b25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKAmXMgaXMgcHJldHR5IGltcG9ydGFu dCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQuIFNvIEnigJltIGludGVyZXN0ZWQg aW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3IgdGhpcyB0byBFQVQuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkFmdGVyIHJlYWRpbmcgc2VjdGlvbiA3LjEgaW4gVEVFUCBhcmNoaXRlY3R1cmUsIGl0IGRv ZXMgc2VlbSBsaWtlIHRoZXJlIHNvbWUgd29yayB0byBkbyBoZXJlIHRvIGdldCB0byBzcGVjaWZp YyBzdGFuZGFyZGl6ZWQgaW50ZXJvcGVyYWJsZSBjbGFpbXMuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ TW9yZSBjb21tZW50cyBiZWxvdy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGJy Pg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gT2N0IDI2LCAyMDIwLCBh dCAzOjE1IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNy b3NvZnQuY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5kdGhh bGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9yZzwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5BcyBkaXNjdXNzZWQgaW4gcHJldmlvdXMgSUVU RiBtZWV0aW5ncywgaWYgdGhlcmUgYXJlIGNsYWltcyBiZXlvbmQgdGhlIGJhc2Ugc2V0IHRoYXQ8 YnI+DQpvdGhlciBXR3MgbmVlZCwgdGhleSBjYW4gYmUgc3BlY2lmaWVkIGJ5IHRoZSBvdGhlciBX R3Mgd2l0aCByZXZpZXcgYnkgUkFUUy48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5UaGUgVEVFUCBXRyBuZWVkcyB0aGUg Zm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0aGV5IGNhbiBiZTwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYi PmNvdmVyZWQgYnkgZXhpc3RpbmcgY2xhaW1zIG9yIHdoZXRoZXIgVEVFUC1zcGVjaWZpYyBjbGFp bXMgYXJlIG5lZWRlZC4mbmJzcDsgRnJvbTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPnNlY3Rpb24gNy4xIG9mIGRyYWZ0LWlldGYtdGVl cC1hcmNoaXRlY3R1cmU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4y NWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3Mi PsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyZuYnNwOy0mbmJzcDsgRGV2aWNlDQogSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246 IFRFRVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRl bnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5n ZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3VuaXF1ZWx5DQogaWRlbnRp ZnkgYSBkZXZpY2UgdG8gdGhlIFRBTS4mbmJzcDsgVW5pcXVlIGRldmljZTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpZGVu dGlmaWNhdGlvbg0KIGFsbG93cyB0aGUgVEFNIHRvIHByb3ZpZGUgc2VydmljZXMgdG8gdGhlIGRl dmljZSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7c3VjaA0KIGFzIG1hbmFnaW5nIGluc3RhbGxlZCBUQXMsIGFuZCBwcm92 aWRpbmcgc3Vic2NyaXB0aW9ucyB0bzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVp biI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7D mDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzZXJ2aWNlcywNCiBhbmQgbG9jYXRpbmcg ZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRlcmlhbCB0bzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQt aW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0Ij4mbmJzcDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb21tdW5pY2F0ZQ0K IHdpdGggb3IgYXV0aGVudGljYXRlIHRoZSBkZXZpY2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQyOTJFIj5JIGJl bGlldmUgdGhlIFVuaXZlcnNhbCBFbnRpdHkgSUQgQ2xhaW0gKHVlaWQpIGlzIGNsYWltIHRoYXQg bWVldHMgdGhlIGFib3ZlIHJlcXVpcmVtZW50Ljxicj4NCkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4g Z29lcyBvbiB0byBzYXk6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi4yNWluIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 Ij4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtJbg0K IHNvbWUgdXNlIGNhc2VzIGl0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4yNWluIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRlbnRp Znkgb25seSB0aGUgY2xhc3Mgb2YgdGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0idGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQi PiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlY3Vy aXR5DQogYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb248L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjBwdCI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7d2lsbA0KIHZhcnkgd2l0aCB0aGUgdHlwZSBvZiBUQSBwcm92aXNpb25l ZCB0byB0aGUgVEVFLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMjQyOTJFIj5X aGljaCBFQVQgY2xhaW0gY29udGFpbnMgdGhlIGRldmljZSBjbGFzcz8gVGhlIGNsb3Nlc3QgdGhp bmcgSSBzZWUgaXMgT0VNIElkZW50aWZpY2F0aW9uIGJ5IElFRUUgKG9lbWlkKTxicj4NCmJ1dCBJ IGFtIG5vdCBzdXJlIHRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIG9ubHkgdGhlIE9FTSBu b3QgdGhlIGRldmljZSBjbGFzcyBmcm9tIHRoYXQgT0VNLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMjQyOTJFIj5UaGlzIGRvZXNu4oCZdCBzZWVtIGxpa2Ugc29tZXRoaW5nIHRo YXQgc2hvdWxkIGJlIFRFRVAgc3BlY2lmaWMgdGhvdWdoLCBzbyBjYW4gc29tZW9uZSB0ZWxsIG1l IGhvdyB0bzxicj4NCnJlcHJlc2VudCBkZXZpY2UgY2xhc3MgdXNpbmcgdGhlIGNsYWltcyBpbiB0 aGUgRUFUIHNwZWM/PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBkb27igJl0IHRoaW5rIHRoZSBPRU1JRCwgVUVJRCBvciBvdGhlciBzaG91bGQgYmUg KGFiKXVzZWQgJm5ic3A7dG8gcmVwcmVzZW50IGRldmljZSBjbGFzcy4gVGhhdCB3b3VsZCByZXN1 bHQgaW4gdGhlbSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2VmdWwgaW4gYSBnZW5lcmljIHNl bnNlLiBXZSBzaG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4rMTwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XZSBjYW4gZGVmaW5lIGEgY2xhaW0gdG8gYmUgJm5ic3A7 dGhlIGRldmljZSBjbGFzcyBhbmQgbWFrZSBpdCBhIGJ5dGUgc3RyaW5nIGxpa2UgYSBVRUlELCBi dXQgSSB0aGluayB3ZSBoYXZlIHRvIGdvIGZ1cnRoZXIgdG8gbWFrZSBpdCB1c2VmdWwgYXMgYW4g aW50ZXJvcGVyYWJsZSBzdGFuZGFyZGl6ZSBjbGFpbS4gVGhlcmUgaGFzIHRvIGJlIHNvbWUgbWV0 aG9kIGZvciB0aGUgY2xhc3NpZmljYXRpb24uIFRydXN0Wm9uZQ0KIHZzIGh5cGVydmlzb3IgYmFz ZWQ/IEZhc3QgdnMgc2xvdz8gSGFzIGEgcHJvdGVjdGVkIG1vZGUga2VybmVsIGFuZCBUQXM/IFRo ZSBURUVQIGRvY3VtZW50IGRvZXNu4oCZdCBzYXkuIFRoaXMgc2VlbXMgcHJvYmxlbWF0aWMgd2l0 aG91dCBhIGNsYXNzaWZpY2F0aW9uIHNjaGVtZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W0RUXSBJ4oCZbSBub3Qgc3Vy ZSB3ZSBuZWVkIGEgY2xhc3NpZmljYXRpb24gc2NoZW1lLCBhdCBsZWFzdCBmb3IgVEVFUC4gJm5i c3A7QSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUgc3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxk IHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3b25k ZXIgaWYgdGhlIGludGVudCBpcyBtb3JlIGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNlIHdl IGNhbiBkZWZpbmUgYSBHRUlEIChHcm91cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3QgbGlr ZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNlZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMgbm90 IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJhc2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxp bmVzDQogdXAgd2l0aCB0aGUgcHJpdmFjeSBwcmVzZXJ2aW5nIHRlY2huaXF1ZSBvZiBvbmUga2V5 IHBlciAxMDAsMDAwIGRldmljZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9 Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwv c3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDstJm5ic3A7IFRFRSBJZGVudGlmeWluZyBJbmZvcm1hdGlv bjogVGhlIHR5cGUgb2YgVEVFIHRoYXQgZ2VuZXJhdGVkIHRoaXM8bzpwPjwvbzpwPjwvcHJlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW47dGV4dC1pbmRlbnQ6LS4yNWluIj48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDthdHRlc3Rh dGlvbiBtdXN0IGJlIGlkZW50aWZpZWQsIGluY2x1ZGluZyB2ZXJzaW9uIGlkZW50aWZpY2F0aW9u PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5k ZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7aW5mb3JtYXRpb24gc3VjaCBhcyB0aGUgaGFyZHdhcmUsIGZpcm13YXJlLCBh bmQgc29mdHdhcmUgdmVyc2lvbjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4t bGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpX aW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO29mIHRoZSBURUUsIGFzIGFwcGxpY2FibGUg YnkgdGhlIFRFRSB0eXBlLiZuYnNwOyBURUUgbWFudWZhY3R1cmVyPG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7aW5mb3Jt YXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIgdG8gZGlzYW1iaWd1YXRlIHRo ZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWlu ZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFu PjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwO3NhbWUgVEVFIHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFudWZhY3R1 cmVycyBhbmQgYWRkcmVzczxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVm dDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW4iPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpXaW5n ZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDsgPC9zcGFuPiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO2NvbnNpZGVyYXRpb25zIGFyb3VuZCBtYW51ZmFj dHVyZXIgcHJvdmlzaW9uaW5nLCBrZXlpbmcgYW5kPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8 L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c3VwcG9ydCBmb3IgdGhl IFRFRS48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPiZu YnNwOzxvOnA+PC9vOnA+PC9wcmU+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNs b3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQg SSBhbSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3VmZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhl IG1hbnVmYWN0dXJlciBub3QgdGhlICZxdW90O3ZlcnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3Jt YXRpb24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2 ZXJzaW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+RGVmaW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uPHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4rMTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl IGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlrZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQg SSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFjZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBV UkwuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSB3b3VsZCBzYXksIHRoaXMgaXMgYSBjb21iaW5hdGlv biBvZiBjbGFpbXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+SXTigJlzIGp1c3QgdXNlZDo8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjEpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6IzFG NDk3RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3 RCI+Rm9yDQogYSBWZXJpZmllciBpbiBhcHByYWlzaW5nIHRoZSBldmlkZW5jZSAobm90aGluZyBU RUVQIHNwZWNpZmljIGhlcmUsIGFwcHJhaXNhbCBwb2xpY3kgY2FuIGludm9sdmUgYW55IGNsYWlt KSwgYW5kPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t bGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1 aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4yKTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjcuMHB0O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRvDQogYmUgdXNlZCBieSBhIFRBTSB0byBkZWNp ZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRvIHRoZSBURUUuJm5ic3A7IEluIHRoYXQgc2Vuc2UgaXTi gJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIgdmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBhbnkg bm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBpZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9yIGRl dmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2VzdCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4gbXkg b3Bpbmlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPktlZXBpbmcgaW4gbWluZCB0aGUg4oCcbGF5ZXJlZCBh dHRlc3RhdGlvbuKAnSBjb25jZXB0IGluIHRoZSBhcmNoIGRvYywgYXMgbG9uZyBhcyB3ZSBoYXZl IGEgY2xhaW1zZXQgcGVyIGxheWVyLCB0aGVuIEkgdGhpbmsgdGhlIHNhbWUg4oCcdmVuZG9yIGlk 4oCdIGFuZCDigJxjbGFzc+KAnSBjbGFpbXMNCiB0aGF0IHdvdWxkIGFwcGx5IHRvIGFueSBkZXZp Y2UgY291bGQgYmUgcmV1c2VkIGZvciB0aGUgVEVFLCBhbmQgcmV1c2VkIGZvciBkZXNjcmliaW5n IGVhY2ggbGF5ZXIuJm5ic3A7IEUuZy4sIGEg4oCcdmVyc2lvbuKAnSBjbGFpbSB3b3VsZCBhcHBs eSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRoZSBoYXJkd2FyZSB2ZXJzaW9uLCBhdCB0 aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdhcmUgdmVyc2lvbiwgYXQgdGhlIE9TIGxh eWVyIGFuZCBiZQ0KIGFuIE9TIHZlcnNpb24sIGV0Yy48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPknigJl2ZSBqdXN0IGFk ZGVkIGEmbmJzcDs8YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91 dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJG ZWF0JTJGcHVsbCUyRjY4JmFtcDtkYXRhPTA0JTdDMDElN0NkdGhhbGVyJTQwbWljcm9zb2Z0LmNv bSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkzMmEyJTdDNzJmOTg4YmY4NmYxNDFhZjkx YWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4MzEyOTU1MTEyMiU3Q1Vua25vd24lN0NU V0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklr MWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJmFtcDtzZGF0YT1TQXpuRVp6WGMxc0dHMkRnSEd6 VnpoRyUyRkVYRHFEVU5KR2JxOFZVVTd2eVUlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPlBSPC9zcGFuPjwvYT4mbmJzcDtmb3INCiBIVyB2ZXJzaW9uIGNsYWlt cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9uIGNsYWltcyBp cyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUgZXhhbXBsZXMg dG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJlcHJlc2VudC48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+QWdyZWUgdGhpcyBzb3VuZHMgcHJvbWlzaW5nLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5UaGUgcGFyYWdyYXBoIG1lbnRpb25zIOKAnHR5cGUgb2YgVEVF4oCdLiBJ4oCZbSBu b3Qgc3VyZSB3aGF0IGlzIGludGVuZGVkLiBJIGRvbuKAmXQga25vdyBvZiBhbnkgY29tbW9uIHRh eG9ub215IGZvciBjbGFzc2lmeWluZyBURUVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+QSB1bmlxdWUgaWRl bnRpZmllciBpcyBzdWZmaWNpZW50IGluIG15IHZpZXcsIG5vIOKAnGNsYXNzaWZpY2F0aW9u4oCd IG9yIOKAnHRheG9ub2154oCdIGlzIHJlcXVpcmVkIGJ5IGFueXRoaW5nIHRoYXQgdGhlIFRFRVAg V0cgaGFzIGRpc2N1c3NlZCB0byBkYXRlLCBhcyBmYXIgYXMgSSBrbm93Ljwvc3Bhbj48YnI+DQo8 YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5TaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZv ciBzdWNoIGluZm9ybWF0aW9uPzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPknigJlkIGxpa2UgdG8gc2VlIG1vc3Qgb2YgdGhlbSBnbyBpbnRvIEVBVCB1 bmxlc3MgdGhleSBhcmUgc3VwZXIgc3BlY2lmaWMgdG8gVEVFUCAoVEVFUCBub3QgVEVFcykuIEkg dGhpbmsgdGhlcmUgaXMgdmFsdWUgaW4gYnJvYWQgc3RhbmRhcmRpemUgY2xhaW1zIGFzIGl0IHBy b21vdGVzIGludGVyb3BlcmFiaWxpdHkgb2YgUkFUUy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+U291bmRzIGdvb2QgdG8g bWUuJm5ic3A7Jm5ic3A7IENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0IHRvIGFkZCBzb21lIHdheSB0 byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0gKG9yIOKAnGNsYXNz4oCdIG9y IHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCcdmVyc2lvbuKAnSBhcyBjbGFp bXMNCiB0aGF0IGNhbiBiZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4m bmJzcDsmbmJzcDsgSSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQgaXQgc2Vl bXMgdG8gYmUgYSBjaGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVyc2lvbiBj bGFpbSB0aGF0IGNhbiBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90IHN1ZmZp Y2llbnQgdG8gbWVldCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMsDQogd2Ug c3RpbGwgbmVlZCBvdGhlciBjbGFpbXMgYWRkZWQuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMx RjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGFua3MhPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkRhdmU8L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NClJBVFMgbWFpbGluZyBs aXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiM5NTRGNzIiPlJBVFNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90 ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWls bWFuJTJGbGlzdGluZm8lMkZyYXRzJmFtcDtkYXRhPTA0JTdDMDElN0NkdGhhbGVyJTQwbWljcm9z b2Z0LmNvbSU3Qzg2YWRjNTE4Y2Q0ODQ2ZjVkMDRjMDhkODdhYjkzMmEyJTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzM5NDI4MzEyOTU2MTExOSU3Q1Vua25v d24lN0NUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pC VGlJNklrMWhhV3dpTENKWFZDSTZNbjAlM0QlN0MxMDAwJmFtcDtzZGF0YT1qaE5lWmpPcExTQTR5 d1BsbFBwOWpTVEdub293TFc1TlhxMG8lMkJTc2o1S3MlM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3MiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9yYXRzPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BL0PR2101MB10272A5EA44C8E4D92D149CAA3170BL0PR2101MB1027_-- From nobody Wed Oct 28 11:14:27 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 189F63A011B; Wed, 28 Oct 2020 11:14:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.266 X-Spam-Level: X-Spam-Status: No, score=-0.266 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sx2KhL0B; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=sx2KhL0B Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C1saqwp6qZlC; Wed, 28 Oct 2020 11:14:19 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-eopbgr150082.outbound.protection.outlook.com [40.107.15.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 902CB3A00E3; Wed, 28 Oct 2020 11:14:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=sx2KhL0BQ3CMSsaz4mhMC51KgY13kwAHFM//J8G57HWMQkPKzOKRJEsqSmtLZZ+7sQAmI6SGrzJrskNZoHBNzjVMUS6qUBtTqvVq28bbQL64+3ssZEFbetYPi+hnWEnIsgrgwAxJtUh4TYEnbJH+lJcTc8Owp0BnheS+5+DOvgc= Received: from AM0PR04CA0062.eurprd04.prod.outlook.com (2603:10a6:208:1::39) by DBAPR08MB5621.eurprd08.prod.outlook.com (2603:10a6:10:1a3::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Wed, 28 Oct 2020 18:14:15 +0000 Received: from AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com (2603:10a6:208:1:cafe::cb) by AM0PR04CA0062.outlook.office365.com (2603:10a6:208:1::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18 via Frontend Transport; Wed, 28 Oct 2020 18:14:15 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT042.mail.protection.outlook.com (10.152.17.168) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Wed, 28 Oct 2020 18:14:15 +0000 Received: ("Tessian outbound e6c55a0b9ba9:v64"); Wed, 28 Oct 2020 18:14:15 +0000 X-CR-MTA-TID: 64aa7808 Received: from 4b6e4b607713.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 698E68BE-74CE-409A-975B-7BFFF59C08C5.1; Wed, 28 Oct 2020 18:14:10 +0000 Received: from EUR01-DB5-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 4b6e4b607713.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 28 Oct 2020 18:14:10 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=N4IR/qP2XA1X0B3It3/UxBwmpG7wU5RIhZiE2ZRv2uoX4Jj806d1WDIgZRvdowLxxCoHocsq6AVHMkY0+RwMFaTwT9FPWz431zBmyzPDrRZbfFPGGz3E3vuTmnwAtqmvoU9/k/CO9pu3jY7kzCre4N8qy5rYebTlu5VFUGipMmDNKkjM9uvXzs60owzsTj3p6R3iVwgCRykEypX6a0PzviKsH2lv9Y/QgjBIsn1EldyyjSqFHwy8iiw37Fsc48hBxFeSVlsrTlv4k4Si04K9Cj7y87INXWbedE3UFueUDW1Z2QiW2Q33DsZNQ5tFnHJ0SfSsVXEtGZlpggdIthzxuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=AVgyNH8WFGN++GgeAJ3dk9F7JAL+T7qKc5ffoCZyaHEx2L9uGcP1gEJbgNIeVWwsN6DwHOuMfgIptv/bUQ2R2li7DOBoluCSoMzPGes23JHHJLfVj5e7VILMWm6QMawJLlCWXw9Tv6Tc8biBjoBVxd63z+Qx7aVUrOqUzijiSQgAbpB40L4D6wNrbPX2/qYGoBR5MHn2ausJ/n3fHpbNIZkDdefG8f+RoRPdAHRggQmcZwFSiQSqMK13jBbVlFsMALLl1QWm8H+P6tiVfgO0drs/UWL3RTM8mzsN99qbUS/PCkhfmLUIdMwgGlqjC0yoDHhlcLlb1FHUeABBeVKitQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LUg4ZHLEcgj1qYIW8WStl4CDTJ/t4TiOKvy5TImZNC4=; b=sx2KhL0BQ3CMSsaz4mhMC51KgY13kwAHFM//J8G57HWMQkPKzOKRJEsqSmtLZZ+7sQAmI6SGrzJrskNZoHBNzjVMUS6qUBtTqvVq28bbQL64+3ssZEFbetYPi+hnWEnIsgrgwAxJtUh4TYEnbJH+lJcTc8Owp0BnheS+5+DOvgc= Received: from AM6PR08MB3429.eurprd08.prod.outlook.com (2603:10a6:20b:49::19) by AS8PR08MB5880.eurprd08.prod.outlook.com (2603:10a6:20b:29f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.18; Wed, 28 Oct 2020 18:14:08 +0000 Received: from AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a]) by AM6PR08MB3429.eurprd08.prod.outlook.com ([fe80::8172:b5dd:6ef:651a%7]) with mapi id 15.20.3499.019; Wed, 28 Oct 2020 18:14:08 +0000 From: Simon Frost To: Laurence Lundblade , Dave Thaler CC: "rats@ietf.org" , teep Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: AQHWrKIiv/EmefyVEkmgXFAWEI4pIqmtTcSQ Date: Wed, 28 Oct 2020 18:14:08 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: DF99B57E8F92104EB7C1D4971A0A86DA.0 x-checkrecipientchecked: true Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [212.69.61.73] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 30c830eb-9063-4e87-1b1f-08d87b6d478d x-ms-traffictypediagnostic: AS8PR08MB5880:|DBAPR08MB5621: X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:8882;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: YqVF2w2PS/aIfRvcMZdFpDNKpoa/W01SwJOsuGkJ5QqsEG6Aw93oLja74u/BvAVii0DTdrYlYxBKqN5woTMi4zscaBY5LtKDWnWgoJPASWPxFvjYTW7JNQUx9m1aaH4STStGWTuJlLmd1pg1wzAbMeO9+x5p1/zs8ycZqLnvNi8DSS7lifHW3KnLY5erw3JJSMDYwFwGcKCxQWFYeuMHoBMCe5TGX6aHhBsZAEPUa4QLgD6Yscv3e8KuYjDQpAcVuxj5BdzGsLTIiLhBCBEdVKjAfZjLs3z8l3sHRBd7RfoLiHiDhYgMdwIINOBFmvx1RFfC9Z0320fbOxQLdo9fJuRqAMAFo+ztTqpsedsH3rQxIF14waer32w2UViq0ZAB7Y2JkYpcUwdy0lljAkKDCA== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3429.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(346002)(39860400002)(366004)(376002)(136003)(76116006)(9686003)(6506007)(8676002)(64756008)(7696005)(66946007)(5660300002)(54906003)(186003)(53546011)(66556008)(66446008)(8936002)(110136005)(4326008)(66476007)(316002)(52536014)(83380400001)(55016002)(166002)(86362001)(26005)(71200400001)(478600001)(45080400002)(33656002)(2906002)(966005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB5880 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 09f65f92-eaec-4699-b978-08d87b6d4370 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: xhI8jGSGpNWAI94LJn1L6rMSz2BYTKwo+C2+6XdrLL0/DVi9khOLUYBnFuvBXAjMEsR71iTi4UmIcY0+e0z9r34QH/kVpPg4Q+H+8hZ0pYzF1WaVssnpAQIGZozYtz7+H6jYve9HQafteuIJnev7hip5fSssBVy4x/fA1/PPpL2raPZQwpAlu3sMr9K2miPrQlfjHZxFYQFtT2hqURdEZSNzp44YRXKZ/8hQz+t650p4Fk9syW6hLfSey18gN4F1X588o/1pmlVZs243DkuDu6PPdeNGBT6BfUZaiJm7716R4W9K+gBXbwopsX8b933zTcX/MXwOdHJRjvx4+vQgvBoCEemIbZLVxR9PlZwKKP93Lnq3Fi3ItZbIjW+altTjWuLBHMgvMbHfChzkHCCTJPE8mTt+KPUJvBfMms3hXDei0xmHaqEOgCfdnebl0lpayUE5xpp33PijAOnR5z+MNe+ZwKCFd/m7TWH9D7N2T3o= X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(136003)(376002)(39860400002)(346002)(396003)(46966005)(966005)(5660300002)(186003)(86362001)(54906003)(166002)(8936002)(33656002)(478600001)(8676002)(336012)(26005)(45080400002)(6506007)(9686003)(2906002)(55016002)(36906005)(110136005)(450100002)(7696005)(4326008)(33964004)(53546011)(356005)(30864003)(70586007)(81166007)(316002)(52536014)(83380400001)(70206006)(82310400003)(47076004)(82740400003)(579004); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Oct 2020 18:14:15.3867 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 30c830eb-9063-4e87-1b1f-08d87b6d478d X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT042.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR08MB5621 Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Oct 2020 18:14:22 -0000 --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Tm90ZSB0aGF0IHNvbWUgb2YgdGhlIEFybSB0ZWFtIHdpbGwgYmUgYXR0ZW5kaW5nIHRoZSB1cGNv bWluZyBoYWNrYXRob24gYW5kIGhhZCBiZWVuIGRpc2N1c3NpbmcgZG9pbmcgc29tZSB3b3JrIHRo ZXJlIG9uIGRlc2NyaWJpbmcgY29tcG9uZW50cyB3aXRoIENvU1dJRCB2aWEgRUFULiBUaGlzIGJ1 aWxkcyBvbiBzb21lIGltcGxlbWVudGF0aW9uIHdvcmsgYWxyZWFkeSBjb21wbGV0ZWQgYXMgcGFy dCBvZiBhbiBBcm0gcHJvamVjdCB0aGF0IHdpbGwgc2hvcnRseSBiZSB1cHN0cmVhbWVkLg0KDQpU aGUgUFNBIEVBVCBwcm9maWxlIG9yaWdpbmFsbHkgaW50cm9kdWNlZCBhIGhhcmR3YXJlIHZlcnNp b24gYmFzZWQgb24gYW4gRUFOLTEzLiBUaGlzIHdhcyB1c2VkIGFzIGEgcmVmZXJlbmNlIHRvIGEg Z2VuZXJhbCBzZXQgb2YgaGFyZHdhcmUgaW4gYSBjZXJ0aWZpY2F0aW9uIHNjaGVtZS4gRnVydGhl ciB3b3JrIGhhcyBzaG93biB0aGlzIGZvcm1hdCBpcyBub3Qgc3VpdGFibGUgYW5kIGl0IGhhcyB3 aWxsIGJlIGRlcHJlY2F0ZWQgaW4gYSBmdXR1cmUgcmVsZWFzZXMgb2YgdGhlIHByb2ZpbGUuIFRo ZSBQU0EgcHJvZmlsZSBhbHNvIGNvbnRhaW5zIGFuIOKAmEltcGxlbWVudGF0aW9uSUTigJkgY2xh aW0gKGJ5dGUgc3RyaW5nIG9mIHN1ZmZpY2llbnQgc2l6ZSB0byBob2xkIGEgU0hBMiBoYXNoKSB3 aGljaCBpcyBpbnRlbmRlZCB0byBiZSB1c2VkIGFzIGEgbXVjaCBtb3JlIHNwZWNpZmljIGlkZW50 aWZpZXIgb2YgYSBoYXJkd2FyZSBncm91cC4gVGhlIGludGVudCBoZXJlIGlzIHRoYXQgcmVmZXJl bmNlIHZhbHVlcyBmb3IgYW4gSW1wbGVtZW50YXRpb25JRCBjYW4gYmUga25vd24gYnkgYSB2ZXJp ZmllciB0byBhc3Npc3QgYXBwcmFpc2FsIHBvbGljeS4NCg0KVGhhbmtzDQpTaW1vbg0KDQpGcm9t OiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NClNlbnQ6IDI3IE9j dG9iZXIgMjAyMCAyMDo0NQ0KVG86IERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb20+ DQpDYzogcmF0c0BpZXRmLm9yZzsgdGVlcCA8dGVlcEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBb UmF0c10gRUFUIGNsYWltcyBuZWVkZWQgYnkgVEVFUA0KDQpDb1NXSUQgc2hvdWxkIGNvdmVyIGFs bCB0aGUgaWRlbnRpZmljYXRpb24gb2YgdmVuZG9ycywgbW9kZWxzLCB2ZXJzaW9ucyBhbmQgc3R1 ZmYgZm9yIFNXLiBJZiBpdCBkb2VzbuKAmXQgdGFsayB0byBIZW5rIGFib3V0IGZpeGVzIHRvIENv U1dJRC4gOi0pDQoNCkZvciBIVywgdGhlcmUgaXMgT0VNSUQgYW5kIHJlY2VudGx5IHByb3Bvc2Vk IGNoaXAgdmVyc2lvbiwgYm9hcmQgdmVyc2lvbiBhbmQgZGV2aWNlIHZlcnNpb24uIEl0IHNlZW1z IGxpa2Ugd2UgbmVlZCBhIG1vZGVsIG51bWJlciBjbGFpbSBmb3IgSFcuIEkgd2lsbCB3b3JrIG9u IHRoYXQuDQoNClNlZW1zIGxpa2Ugc3VibW9kdWxlcyB3b3VsZCBiZSB1c2VkIHRvIG9yZ2FuaXpl IGNsYWltcyBmb3IgbGF5ZXJlZCBhdHRlc3RhdGlvbiBhbmQgYWxsIG9mIHRoZSBhYm92ZSBjbGFp bXMgY2FuIG9jY3VyIGluIGFueSBzdWJtb2R1bGUgdGhleSBuZWVkIHRvLg0KDQpEb2VzIHRoaXMg bW9zdGx5IGNvdmVyIGl0Pw0KDQpJIHdvcnJ5IHRoYXQgdGhlIEhXIGNsYWltcyBhcmUgYml0IHRv byByaWdpZCBpbiB0aGVpciB1c2Ugb2YgRUFOLTEzIGFuZCBJRUVFIHJlZ2lzdHJpZXMuIE1pZ2h0 IG5lZWQgdG8gZG8gc29tZXRoaW5nIGFib3V0IHRoYXQuDQoNCkxMDQoNCg0KDQpPbiBPY3QgMjcs IDIwMjAsIGF0IDE6MjYgUE0sIERhdmUgVGhhbGVyIDxkdGhhbGVyQG1pY3Jvc29mdC5jb208bWFp bHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbT4+IHdyb3RlOg0KDQpJbmxpbmUgYmVsb3figKYNCg0K RnJvbTogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb208bWFpbHRvOmxn bEBpc2xhbmQtcmVzb3J0LmNvbT4+DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDI3LCAyMDIwIDEx OjU3IEFNDQpUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbTxtYWlsdG86ZHRo YWxlckBtaWNyb3NvZnQuY29tPj4NCkNjOiByYXRzQGlldGYub3JnPG1haWx0bzpyYXRzQGlldGYu b3JnPjsgdGVlcCA8dGVlcEBpZXRmLm9yZzxtYWlsdG86dGVlcEBpZXRmLm9yZz4+DQpTdWJqZWN0 OiBSZTogW1JhdHNdIEVBVCBjbGFpbXMgbmVlZGVkIGJ5IFRFRVANCg0KUGVyc29uYWxseSwgSSB0 aGluayBhdHRlc3RhdGlvbiBvZiBURUXigJlzIGlzIHByZXR0eSBpbXBvcnRhbnQgYW5kIHNob3Vs ZCBiZSBoYW5kbGVkIHdlbGwgaW4gRUFULiBTbyBJ4oCZbSBpbnRlcmVzdGVkIGluIHdvcmtpbmcg b24gYW5kIGFkZGluZyBjbGFpbXMgZm9yIHRoaXMgdG8gRUFULg0KDQpBZnRlciByZWFkaW5nIHNl Y3Rpb24gNy4xIGluIFRFRVAgYXJjaGl0ZWN0dXJlLCBpdCBkb2VzIHNlZW0gbGlrZSB0aGVyZSBz b21lIHdvcmsgdG8gZG8gaGVyZSB0byBnZXQgdG8gc3BlY2lmaWMgc3RhbmRhcmRpemVkIGludGVy b3BlcmFibGUgY2xhaW1zLg0KDQpNb3JlIGNvbW1lbnRzIGJlbG93Lg0KDQoNCg0KT24gT2N0IDI2 LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxlciA8ZHRoYWxlcj00MG1pY3Jvc29mdC5jb21A ZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYu b3JnPj4gd3JvdGU6DQoNCkFzIGRpc2N1c3NlZCBpbiBwcmV2aW91cyBJRVRGIG1lZXRpbmdzLCBp ZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUgYmFzZSBzZXQgdGhhdA0Kb3RoZXIgV0dzIG5l ZWQsIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBieSB0aGUgb3RoZXIgV0dzIHdpdGggcmV2aWV3IGJ5 IFJBVFMuDQoNClRoZSBURUVQIFdHIG5lZWRzIHRoZSBmb2xsb3dpbmcgaW4gRUFUcyBhbmQgSSBh bSBub3Qgc3VyZSB3aGV0aGVyIHRoZXkgY2FuIGJlDQpjb3ZlcmVkIGJ5IGV4aXN0aW5nIGNsYWlt cyBvciB3aGV0aGVyIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGFyZSBuZWVkZWQuICBGcm9tDQpzZWN0 aW9uIDcuMSBvZiBkcmFmdC1pZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOg0KDQo+ICAgICAtICBEZXZp Y2UgSWRlbnRpZnlpbmcgSW5mb3JtYXRpb246IFRFRVAgYXR0ZXN0YXRpb25zIG1heSBuZWVkIHRv DQo+ICAgICAgICB1bmlxdWVseSBpZGVudGlmeSBhIGRldmljZSB0byB0aGUgVEFNLiAgVW5pcXVl IGRldmljZQ0KPiAgICAgICAgaWRlbnRpZmljYXRpb24gYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlk ZSBzZXJ2aWNlcyB0byB0aGUgZGV2aWNlLA0KPiAgICAgICAgc3VjaCBhcyBtYW5hZ2luZyBpbnN0 YWxsZWQgVEFzLCBhbmQgcHJvdmlkaW5nIHN1YnNjcmlwdGlvbnMgdG8NCj4gICAgICAgIHNlcnZp Y2VzLCBhbmQgbG9jYXRpbmcgZGV2aWNlLXNwZWNpZmljIGtleWluZyBtYXRlcmlhbCB0bw0KPiAg ICAgICAgY29tbXVuaWNhdGUgd2l0aCBvciBhdXRoZW50aWNhdGUgdGhlIGRldmljZS4NCg0KSSBi ZWxpZXZlIHRoZSBVbml2ZXJzYWwgRW50aXR5IElEIENsYWltICh1ZWlkKSBpcyBjbGFpbSB0aGF0 IG1lZXRzIHRoZSBhYm92ZSByZXF1aXJlbWVudC4NCkJ1dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29l cyBvbiB0byBzYXk6DQoNCj4gICAgICAgIEluIHNvbWUgdXNlIGNhc2VzIGl0DQo+ICAgICAgICBt YXkgYmUgc3VmZmljaWVudCB0byBpZGVudGlmeSBvbmx5IHRoZSBjbGFzcyBvZiB0aGUgZGV2aWNl LiAgVGhlDQo+ICAgICAgICBzZWN1cml0eSBhbmQgcHJpdmFjeSByZXF1aXJlbWVudHMgcmVnYXJk aW5nIGRldmljZSBpZGVudGlmaWNhdGlvbg0KPiAgICAgICAgd2lsbCB2YXJ5IHdpdGggdGhlIHR5 cGUgb2YgVEEgcHJvdmlzaW9uZWQgdG8gdGhlIFRFRS4NCldoaWNoIEVBVCBjbGFpbSBjb250YWlu cyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2VzdCB0aGluZyBJIHNlZSBpcyBPRU0gSWRlbnRp ZmljYXRpb24gYnkgSUVFRSAob2VtaWQpDQpidXQgSSBhbSBub3Qgc3VyZSB0aGF0IGlzIHN1ZmZp Y2llbnQgc2luY2UgaXQncyBvbmx5IHRoZSBPRU0gbm90IHRoZSBkZXZpY2UgY2xhc3MgZnJvbSB0 aGF0IE9FTS4NClRoaXMgZG9lc27igJl0IHNlZW0gbGlrZSBzb21ldGhpbmcgdGhhdCBzaG91bGQg YmUgVEVFUCBzcGVjaWZpYyB0aG91Z2gsIHNvIGNhbiBzb21lb25lIHRlbGwgbWUgaG93IHRvDQpy ZXByZXNlbnQgZGV2aWNlIGNsYXNzIHVzaW5nIHRoZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPw0K DQpJIGRvbuKAmXQgdGhpbmsgdGhlIE9FTUlELCBVRUlEIG9yIG90aGVyIHNob3VsZCBiZSAoYWIp dXNlZCAgdG8gcmVwcmVzZW50IGRldmljZSBjbGFzcy4gVGhhdCB3b3VsZCByZXN1bHQgaW4gdGhl bSBiZWluZyBsZXNzIHJlbGlhYmxlIGFuZCB1c2VmdWwgaW4gYSBnZW5lcmljIHNlbnNlLiBXZSBz aG91bGQgY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLg0KDQorMQ0KDQpXZSBjYW4gZGVmaW5lIGEg Y2xhaW0gdG8gYmUgIHRoZSBkZXZpY2UgY2xhc3MgYW5kIG1ha2UgaXQgYSBieXRlIHN0cmluZyBs aWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2ZSB0byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQg dXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3RhbmRhcmRpemUgY2xhaW0uIFRoZXJlIGhhcyB0 byBiZSBzb21lIG1ldGhvZCBmb3IgdGhlIGNsYXNzaWZpY2F0aW9uLiBUcnVzdFpvbmUgdnMgaHlw ZXJ2aXNvciBiYXNlZD8gRmFzdCB2cyBzbG93PyBIYXMgYSBwcm90ZWN0ZWQgbW9kZSBrZXJuZWwg YW5kIFRBcz8gVGhlIFRFRVAgZG9jdW1lbnQgZG9lc27igJl0IHNheS4gVGhpcyBzZWVtcyBwcm9i bGVtYXRpYyB3aXRob3V0IGEgY2xhc3NpZmljYXRpb24gc2NoZW1lLg0KDQpbRFRdIEnigJltIG5v dCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUsIGF0IGxlYXN0IGZvciBURUVQ LiAgQSBzaW1wbGUgZGV2aWNlIGNsYXNzIGJ5dGUgc3RyaW5nIGFzIHlvdSBzdWdnZXN0IHdvdWxk IHN1ZmZpY2UgaW4gbXkgb3Bpbmlvbi4NCg0KSSB3b25kZXIgaWYgdGhlIGludGVudCBpcyBtb3Jl IGFib3V0IGdyb3VwaW5nLCBpbiB3aGljaCBjYXNlIHdlIGNhbiBkZWZpbmUgYSBHRUlEIChHcm91 cCBFbnRpdHkgSUQpIHRoYXQgbG9va3MgYSBsb3QgbGlrZSBhIFVFSUQuIFRoYXQgc2VlbXMgdXNl ZnVsIGFuZCBzZW5zaWJsZSB0byBtZS4gSXQgaXMgbm90IGFib3V0IGNsYXNzaWZpY2F0aW9uIGJh c2VkIG9uIGFueSBjaGFyYWN0ZXJpc3RpY3MuIEl0IGxpbmVzIHVwIHdpdGggdGhlIHByaXZhY3kg cHJlc2VydmluZyB0ZWNobmlxdWUgb2Ygb25lIGtleSBwZXIgMTAwLDAwMCBkZXZpY2VzLg0KDQoN Cj4gICAgIC0gIFRFRSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVGhlIHR5cGUgb2YgVEVFIHRo YXQgZ2VuZXJhdGVkIHRoaXMNCg0KPiAgICAgICAgYXR0ZXN0YXRpb24gbXVzdCBiZSBpZGVudGlm aWVkLCBpbmNsdWRpbmcgdmVyc2lvbiBpZGVudGlmaWNhdGlvbg0KDQo+ICAgICAgICBpbmZvcm1h dGlvbiBzdWNoIGFzIHRoZSBoYXJkd2FyZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9u DQoNCj4gICAgICAgIG9mIHRoZSBURUUsIGFzIGFwcGxpY2FibGUgYnkgdGhlIFRFRSB0eXBlLiAg VEVFIG1hbnVmYWN0dXJlcg0KDQo+ICAgICAgICBpbmZvcm1hdGlvbiBmb3IgdGhlIFRFRSBpcyBy ZXF1aXJlZCBpbiBvcmRlciB0byBkaXNhbWJpZ3VhdGUgdGhlDQoNCj4gICAgICAgIHNhbWUgVEVF IHR5cGUgY3JlYXRlZCBieSBkaWZmZXJlbnQgbWFudWZhY3R1cmVycyBhbmQgYWRkcmVzcw0KDQo+ ICAgICAgICBjb25zaWRlcmF0aW9ucyBhcm91bmQgbWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywg a2V5aW5nIGFuZA0KDQo+ICAgICAgICBzdXBwb3J0IGZvciB0aGUgVEVFLg0KDQoNClNpbWlsYXJs eSBmb3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2lu YXRpb24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBhbSBub3Qgc3VyZQ0KdGhhdCBpcyBzdWZm aWNpZW50IHNpbmNlIGl0J3MganVzdCB0aGUgbWFudWZhY3R1cmVyIG5vdCB0aGUgInZlcnNpb24g aWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3VjaCBhcyB0aGUNCmhhcmR3YXJlLCBmaXJtd2Fy ZSwgYW5kIHNvZnR3YXJlIHZlcnNpb24gb2YgdGhlIFRFReKAnQ0KDQpEZWZpbml0ZWx5IG5vdCBv cmlnaW5hdGlvbiBjbGFpbS4NCg0KKzENCg0KVGhlIGludGVudCBvZiBpdCBzb21ldGhpbmcgbGlr ZSBFbmRvcnNlciBpZGVudGlmaWNhdGlvbiBhbmQgSSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFj ZWQgYnkgYW4gRW5kb3JzZXIvWC41MDkgY2VydCBVUkwuDQoNCkkgd291bGQgc2F5LCB0aGlzIGlz IGEgY29tYmluYXRpb24gb2YgY2xhaW1zDQoNCkl04oCZcyBqdXN0IHVzZWQ6DQoxKSAgICAgRm9y IGEgVmVyaWZpZXIgaW4gYXBwcmFpc2luZyB0aGUgZXZpZGVuY2UgKG5vdGhpbmcgVEVFUCBzcGVj aWZpYyBoZXJlLCBhcHByYWlzYWwgcG9saWN5IGNhbiBpbnZvbHZlIGFueSBjbGFpbSksIGFuZA0K MikgICAgIFRvIGJlIHVzZWQgYnkgYSBUQU0gdG8gZGVjaWRlIHdoaWNoIFRB4oCZcyBhcHBseSB0 byB0aGUgVEVFLiAgSW4gdGhhdCBzZW5zZSBpdOKAmXMganVzdCBsaWtlIGFueSBvdGhlciB2ZW5k b3IgaWQgKyBkZXZpY2UgY2xhc3MgZm9yIGFueSBub24gVEVFLCBhbmQgSSBiZWxpZXZlIGlmIHRo ZXJlIHdlcmUgYSBieXRlIHN0cmluZyBmb3IgZGV2aWNlIGNsYXNzIGFzIHlvdSBzdWdnZXN0IHRo YXQgd291bGQgYmUgc3VmZmljaWVudCBpbiBteSBvcGluaW9uLg0KDQpLZWVwaW5nIGluIG1pbmQg dGhlIOKAnGxheWVyZWQgYXR0ZXN0YXRpb27igJ0gY29uY2VwdCBpbiB0aGUgYXJjaCBkb2MsIGFz IGxvbmcgYXMgd2UgaGF2ZSBhIGNsYWltc2V0IHBlciBsYXllciwgdGhlbiBJIHRoaW5rIHRoZSBz YW1lIOKAnHZlbmRvciBpZOKAnSBhbmQg4oCcY2xhc3PigJ0gY2xhaW1zIHRoYXQgd291bGQgYXBw bHkgdG8gYW55IGRldmljZSBjb3VsZCBiZSByZXVzZWQgZm9yIHRoZSBURUUsIGFuZCByZXVzZWQg Zm9yIGRlc2NyaWJpbmcgZWFjaCBsYXllci4gIEUuZy4sIGEg4oCcdmVyc2lvbuKAnSBjbGFpbSB3 b3VsZCBhcHBseSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRoZSBoYXJkd2FyZSB2ZXJz aW9uLCBhdCB0aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdhcmUgdmVyc2lvbiwgYXQg dGhlIE9TIGxheWVyIGFuZCBiZSBhbiBPUyB2ZXJzaW9uLCBldGMuDQoNCg0KSeKAmXZlIGp1c3Qg YWRkZWQgYSBQUjxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29t Lz91cmw9aHR0cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaWV0Zi1yYXRzLXdnJTJGZWF0JTJGcHVs bCUyRjY4JmRhdGE9MDQlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyb3NvZnQuY29tJTdDYWIxZWU3Nzg4 ZjFmNGQ0NDljNTUwOGQ4N2FhYTMwMDYlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0 NyU3QzElN0MwJTdDNjM3Mzk0MjE4NjU4ODk1Njg1JTdDVW5rbm93biU3Q1RXRnBiR1pzYjNkOGV5 SldJam9pTUM0d0xqQXdNREFpTENKUUlqb2lWMmx1TXpJaUxDSkJUaUk2SWsxaGFXd2lMQ0pYVkNJ Nk1uMCUzRCU3QzEwMDAmc2RhdGE9SnlOQ1R3VUp2a0NQazNIOXVZbUQwQkxmVVhQdTZ2aG5Rb21r SXFpcWlVTSUzRCZyZXNlcnZlZD0wPiBmb3IgSFcgdmVyc2lvbiBjbGFpbXMuDQoNClRoZSBpbnRl bnQgZm9yIFNXIHZlcnNpb24gY2xhaW1zIGlzIHRvIHVzZSBDb1NXSUQuIFdlIHNob3VsZCBwcm9i YWJseSBjcmVhdGUgc29tZSBleGFtcGxlcyB0byBzZWUgaWYgaXQgY2FuIHJlcHJlc2VudCB3aGF0 IFRFRVAgd2FudHMgdG8gcmVwcmVzZW50Lg0KDQpBZ3JlZSB0aGlzIHNvdW5kcyBwcm9taXNpbmcu DQoNClRoZSBwYXJhZ3JhcGggbWVudGlvbnMg4oCcdHlwZSBvZiBURUXigJ0uIEnigJltIG5vdCBz dXJlIHdoYXQgaXMgaW50ZW5kZWQuIEkgZG9u4oCZdCBrbm93IG9mIGFueSBjb21tb24gdGF4b25v bXkgZm9yIGNsYXNzaWZ5aW5nIFRFRXMuDQoNCkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3VmZmlj aWVudCBpbiBteSB2aWV3LCBubyDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9teeKA nSBpcyByZXF1aXJlZCBieSBhbnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNzZWQg dG8gZGF0ZSwgYXMgZmFyIGFzIEkga25vdy4NCg0KDQpTaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5l IFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZvciBzdWNoIGluZm9ybWF0aW9uPw0KDQpJ4oCZZCBsaWtl IHRvIHNlZSBtb3N0IG9mIHRoZW0gZ28gaW50byBFQVQgdW5sZXNzIHRoZXkgYXJlIHN1cGVyIHNw ZWNpZmljIHRvIFRFRVAgKFRFRVAgbm90IFRFRXMpLiBJIHRoaW5rIHRoZXJlIGlzIHZhbHVlIGlu IGJyb2FkIHN0YW5kYXJkaXplIGNsYWltcyBhcyBpdCBwcm9tb3RlcyBpbnRlcm9wZXJhYmlsaXR5 IG9mIFJBVFMuDQoNClNvdW5kcyBnb29kIHRvIG1lLiAgIENvbnNpZGVyIHRoaXMgYSByZXF1ZXN0 IHRvIGFkZCBzb21lIHdheSB0byBleHByZXNzIOKAnHZlbmRvciBpZOKAnSwg4oCcbW9kZWzigJ0g KG9yIOKAnGNsYXNz4oCdIG9yIHdoYXRldmVyIHlvdSB3YW50IHRvIGNhbGwgaXQpLCBhbmQg4oCc dmVyc2lvbuKAnSBhcyBjbGFpbXMgdGhhdCBjYW4gYmUgYXBwbGllZCBpbiBjbGFpbXNldHMgYXQg dmFyaW91cyBsYXllcnMuICAgSSBnbGFuY2VkIGF0IHRoZSBQUiB5b3UgcmVmZXJlbmNlZCBhbmQg aXQgc2VlbXMgdG8gYmUgYSBjaGlwLXNwZWNpZmljIHZlcnNpb24sIG5vdCBhIGdlbmVyaWMgdmVy c2lvbiBjbGFpbSB0aGF0IGNhbiBiZSB1c2VkIGF0IG11bHRpcGxlIGxheWVycywgc28gaXMgbm90 IHN1ZmZpY2llbnQgdG8gbWVldCB0aGUgVEVFUCBhcmNoIGRyYWZ04oCZcyByZXF1aXJlbWVudHMs IHdlIHN0aWxsIG5lZWQgb3RoZXIgY2xhaW1zIGFkZGVkLg0KDQpUaGFua3MhDQpEYXZlDQoNCkxM DQoNCg0KDQoNCg0KRGF2ZQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NClJBVFMgbWFpbGluZyBsaXN0DQpSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGll dGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPGh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnd3dy5pZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5mbyUyRnJhdHMmZGF0YT0wNCU3QzAx JTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFh MzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQy MTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlM Q0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZzZGF0 YT1PNUxKWkJ3JTJCNmh1WVU3QnJOU2dPVVFOdzJINXVvREd3WmowOSUyRlBnaEtySSUzRCZyZXNl cnZlZD0wPg0KDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47 DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAx IDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJTZWdvZSBVSSI7DQoJcGFub3NlLTE6 MiAxMSA1IDIgNCAyIDQgMiAyIDM7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xh czsNCglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9u cyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46 MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENo YXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLmFwcGxlLWNvbnZlcnRl ZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5I VE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQg Q2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFBy ZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjEN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28t c3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3 Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0K LS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpl eHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6 ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0t Pg0KPC9oZWFkPg0KPGJvZHkgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgc3R5bGU9IndvcmQt d3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiI+Tm90ZSB0aGF0IHNvbWUgb2YgdGhlIEFybSB0 ZWFtIHdpbGwgYmUgYXR0ZW5kaW5nIHRoZSB1cGNvbWluZyBoYWNrYXRob24gYW5kIGhhZCBiZWVu IGRpc2N1c3NpbmcgZG9pbmcgc29tZSB3b3JrIHRoZXJlIG9uIGRlc2NyaWJpbmcgY29tcG9uZW50 cyB3aXRoIENvU1dJRCB2aWEgRUFULiBUaGlzIGJ1aWxkcyBvbiBzb21lIGltcGxlbWVudGF0aW9u IHdvcmsgYWxyZWFkeSBjb21wbGV0ZWQNCiBhcyBwYXJ0IG9mIGFuIEFybSBwcm9qZWN0IHRoYXQg d2lsbCBzaG9ydGx5IGJlIHVwc3RyZWFtZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGUgUFNBIEVB VCBwcm9maWxlIG9yaWdpbmFsbHkgaW50cm9kdWNlZCBhIGhhcmR3YXJlIHZlcnNpb24gYmFzZWQg b24gYW4gRUFOLTEzLiBUaGlzIHdhcyB1c2VkIGFzIGEgcmVmZXJlbmNlIHRvIGEgZ2VuZXJhbCBz ZXQgb2YgaGFyZHdhcmUgaW4gYSBjZXJ0aWZpY2F0aW9uIHNjaGVtZS4gRnVydGhlciB3b3JrIGhh cyBzaG93biB0aGlzIGZvcm1hdCBpcyBub3Qgc3VpdGFibGUNCiBhbmQgaXQgaGFzIHdpbGwgYmUg ZGVwcmVjYXRlZCBpbiBhIGZ1dHVyZSByZWxlYXNlcyBvZiB0aGUgcHJvZmlsZS4gVGhlIFBTQSBw cm9maWxlIGFsc28gY29udGFpbnMgYW4g4oCYSW1wbGVtZW50YXRpb25JROKAmSBjbGFpbSAoYnl0 ZSBzdHJpbmcgb2Ygc3VmZmljaWVudCBzaXplIHRvIGhvbGQgYSBTSEEyIGhhc2gpIHdoaWNoIGlz IGludGVuZGVkIHRvIGJlIHVzZWQgYXMgYSBtdWNoIG1vcmUgc3BlY2lmaWMgaWRlbnRpZmllciBv ZiBhIGhhcmR3YXJlDQogZ3JvdXAuIFRoZSBpbnRlbnQgaGVyZSBpcyB0aGF0IHJlZmVyZW5jZSB2 YWx1ZXMgZm9yIGFuIEltcGxlbWVudGF0aW9uSUQgY2FuIGJlIGtub3duIGJ5IGEgdmVyaWZpZXIg dG8gYXNzaXN0IGFwcHJhaXNhbCBwb2xpY3kuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIj5UaGFua3M8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiI+U2ltb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt dG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJFTi1VUyI+RnJvbTo8L3NwYW4+PC9iPjxz cGFuIGxhbmc9IkVOLVVTIj4gTGF1cmVuY2UgTHVuZGJsYWRlICZsdDtsZ2xAaXNsYW5kLXJlc29y dC5jb20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gMjcgT2N0b2JlciAyMDIwIDIwOjQ1PGJyPg0K PGI+VG86PC9iPiBEYXZlIFRoYWxlciAmbHQ7ZHRoYWxlckBtaWNyb3NvZnQuY29tJmd0Ozxicj4N CjxiPkNjOjwvYj4gcmF0c0BpZXRmLm9yZzsgdGVlcCAmbHQ7dGVlcEBpZXRmLm9yZyZndDs8YnI+ DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtSYXRzXSBFQVQgY2xhaW1zIG5lZWRlZCBieSBURUVQPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNvU1dJ RCBzaG91bGQgY292ZXIgYWxsIHRoZSBpZGVudGlmaWNhdGlvbiBvZiB2ZW5kb3JzLCBtb2RlbHMs IHZlcnNpb25zIGFuZCBzdHVmZiBmb3IgU1cuIElmIGl0IGRvZXNu4oCZdCB0YWxrIHRvIEhlbmsg YWJvdXQgZml4ZXMgdG8gQ29TV0lELiA6LSk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Rm9yIEhXLCB0aGVyZSBpcyBPRU1JRCBhbmQgcmVjZW50 bHkgcHJvcG9zZWQgY2hpcCB2ZXJzaW9uLCBib2FyZCB2ZXJzaW9uIGFuZCBkZXZpY2UgdmVyc2lv bi4gSXQgc2VlbXMgbGlrZSB3ZSBuZWVkIGEgbW9kZWwgbnVtYmVyIGNsYWltIGZvciBIVy4gSSB3 aWxsIHdvcmsgb24gdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+U2VlbXMgbGlrZSBzdWJtb2R1bGVzIHdvdWxkIGJlIHVzZWQgdG8gb3Jn YW5pemUgY2xhaW1zIGZvciBsYXllcmVkIGF0dGVzdGF0aW9uIGFuZCBhbGwgb2YgdGhlIGFib3Zl IGNsYWltcyBjYW4gb2NjdXIgaW4gYW55IHN1Ym1vZHVsZSB0aGV5IG5lZWQgdG8uPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRvZXMgdGhpcyBt b3N0bHkgY292ZXIgaXQ/Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkkgd29ycnkgdGhhdCB0aGUgSFcgY2xhaW1zIGFyZSBiaXQgdG9v IHJpZ2lkIGluIHRoZWlyIHVzZSBvZiBFQU4tMTMgYW5kIElFRUUgcmVnaXN0cmllcy4gTWlnaHQg bmVlZCB0byBkbyBzb21ldGhpbmcgYWJvdXQgdGhhdC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MTDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+T24gT2N0IDI3LCAyMDIwLCBhdCAxOjI2IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEg aHJlZj0ibWFpbHRvOmR0aGFsZXJAbWljcm9zb2Z0LmNvbSI+ZHRoYWxlckBtaWNyb3NvZnQuY29t PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+SW5saW5lIGJlbG934oCmPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TGF1cmVuY2UgTHVuZGJsYWRlICZs dDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj48c3BhbiBzdHlsZT0iY29s b3I6cHVycGxlIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPlR1ZXNkYXks IE9jdG9iZXIgMjcsIDIwMjAgMTE6NTcgQU08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFw cGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkRhdmUgVGhhbGVyICZsdDs8YSBocmVm PSJtYWlsdG86ZHRoYWxlckBtaWNyb3NvZnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxl Ij5kdGhhbGVyQG1pY3Jvc29mdC5jb208L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+PHNw YW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Im1h aWx0bzpyYXRzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5yYXRzQGlldGYu b3JnPC9zcGFuPjwvYT47IHRlZXAgJmx0OzxhIGhyZWY9Im1haWx0bzp0ZWVwQGlldGYub3JnIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj50ZWVwQGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7PGJy Pg0KPGI+U3ViamVjdDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPlJlOiBbUmF0c10gRUFUIGNsYWltcyBuZWVkZWQgYnkgVEVFUDxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj5QZXJzb25hbGx5LCBJIHRoaW5rIGF0dGVzdGF0aW9uIG9mIFRFReKA mXMgaXMgcHJldHR5IGltcG9ydGFudCBhbmQgc2hvdWxkIGJlIGhhbmRsZWQgd2VsbCBpbiBFQVQu IFNvIEnigJltIGludGVyZXN0ZWQgaW4gd29ya2luZyBvbiBhbmQgYWRkaW5nIGNsYWltcyBmb3Ig dGhpcyB0byBFQVQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5BZnRlciByZWFkaW5nIHNlY3Rpb24gNy4xIGluIFRF RVAgYXJjaGl0ZWN0dXJlLCBpdCBkb2VzIHNlZW0gbGlrZSB0aGVyZSBzb21lIHdvcmsgdG8gZG8g aGVyZSB0byBnZXQgdG8gc3BlY2lmaWMgc3RhbmRhcmRpemVkIGludGVyb3BlcmFibGUgY2xhaW1z LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5Nb3JlIGNvbW1lbnRzIGJlbG93LjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250 LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxicj4NCjxicj4NCjxi cj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+T24gT2N0IDI2LCAyMDIwLCBhdCAzOjE1IFBNLCBEYXZlIFRoYWxlciAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmR0aGFsZXI9NDBtaWNyb3NvZnQuY29tQGRtYXJjLmlldGYub3JnIj48c3BhbiBz dHlsZT0iY29sb3I6cHVycGxlIj5kdGhhbGVyPTQwbWljcm9zb2Z0LmNvbUBkbWFyYy5pZXRmLm9y Zzwvc3Bhbj48L2E+Jmd0Ow0KIHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkFzIGRpc2N1c3NlZCBpbiBwcmV2aW91cyBJRVRGIG1lZXRpbmdz LCBpZiB0aGVyZSBhcmUgY2xhaW1zIGJleW9uZCB0aGUgYmFzZSBzZXQgdGhhdDxicj4NCm90aGVy IFdHcyBuZWVkLCB0aGV5IGNhbiBiZSBzcGVjaWZpZWQgYnkgdGhlIG90aGVyIFdHcyB3aXRoIHJl dmlldyBieSBSQVRTLjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgVEVFUCBXRyBuZWVkcyB0aGUg Zm9sbG93aW5nIGluIEVBVHMgYW5kIEkgYW0gbm90IHN1cmUgd2hldGhlciB0aGV5IGNhbiBiZTxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Y292ZXJlZCBieSBleGlzdGluZyBjbGFpbXMgb3Igd2hldGhlciBURUVQLXNwZWNpZmlj IGNsYWltcyBhcmUgbmVlZGVkLiZuYnNwOyBGcm9tPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5zZWN0aW9uIDcuMSBvZiBkcmFm dC1pZXRmLXRlZXAtYXJjaGl0ZWN0dXJlOjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOw0KIERl dmljZSBJZGVudGlmeWluZyBJbmZvcm1hdGlvbjogVEVFUCBhdHRlc3RhdGlvbnMgbWF5IG5lZWQg dG88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1p bmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xhc3M9 ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7dW5pcXVlbHkNCiBpZGVudGlmeSBhIGRl dmljZSB0byB0aGUgVEFNLiZuYnNwOyBVbmlxdWUgZGV2aWNlPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO2lkZW50aWZpY2F0aW9uDQogYWxsb3dzIHRoZSBUQU0gdG8gcHJvdmlkZSBzZXJ2 aWNlcyB0byB0aGUgZGV2aWNlLDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4m bmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtzdWNoDQog YXMgbWFuYWdpbmcgaW5zdGFsbGVkIFRBcywgYW5kIHByb3ZpZGluZyBzdWJzY3JpcHRpb25zIHRv PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5k ZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5Oldp bmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJh cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlcnZpY2VzLA0KIGFuZCBsb2NhdGluZyBk ZXZpY2Utc3BlY2lmaWMga2V5aW5nIG1hdGVyaWFsIHRvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO2NvbW11bmljYXRlDQogd2l0aCBvciBhdXRoZW50aWNhdGUgdGhlIGRldmljZS48L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMjQyOTJFIj5JIGJlbGlldmUgdGhlIFVuaXZlcnNhbCBFbnRpdHkgSUQgQ2xhaW0g KHVlaWQpIGlzIGNsYWltIHRoYXQgbWVldHMgdGhlIGFib3ZlIHJlcXVpcmVtZW50Ljxicj4NCkJ1 dCB0aGUgVEVFUCBhcmNoIHRoZW4gZ29lcyBvbiB0byBzYXk6PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oyxz ZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjE4LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss c2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpXaW5nZGluZ3MiPsOYPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDtJbg0KIHNvbWUgdXNlIGNhc2VzIGl0PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwO21heQ0KIGJlIHN1ZmZpY2llbnQgdG8gaWRlbnRpZnkgb25seSB0aGUgY2xhc3Mgb2Yg dGhlIGRldmljZS4mbmJzcDsgVGhlPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9InRleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO3NlY3Vy aXR5DQogYW5kIHByaXZhY3kgcmVxdWlyZW1lbnRzIHJlZ2FyZGluZyBkZXZpY2UgaWRlbnRpZmlj YXRpb248L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4 dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7d2lsbA0KIHZhcnkgd2l0aCB0aGUg dHlwZSBvZiBUQSBwcm92aXNpb25lZCB0byB0aGUgVEVFLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJi YWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyNDI5MkUiPldoaWNoIEVB VCBjbGFpbSBjb250YWlucyB0aGUgZGV2aWNlIGNsYXNzPyBUaGUgY2xvc2VzdCB0aGluZyBJIHNl ZSBpcyBPRU0gSWRlbnRpZmljYXRpb24gYnkgSUVFRSAob2VtaWQpPGJyPg0KYnV0IEkgYW0gbm90 IHN1cmUgdGhhdCBpcyBzdWZmaWNpZW50IHNpbmNlIGl0J3Mgb25seSB0aGUgT0VNIG5vdCB0aGUg ZGV2aWNlIGNsYXNzIGZyb20gdGhhdCBPRU0uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91 bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O1NlZ29lIFVJJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzI0MjkyRSI+VGhpcyBkb2VzbuKAmXQg c2VlbSBsaWtlIHNvbWV0aGluZyB0aGF0IHNob3VsZCBiZSBURUVQIHNwZWNpZmljIHRob3VnaCwg c28gY2FuIHNvbWVvbmUgdGVsbCBtZSBob3cgdG88YnI+DQpyZXByZXNlbnQgZGV2aWNlIGNsYXNz IHVzaW5nIHRoZSBjbGFpbXMgaW4gdGhlIEVBVCBzcGVjPzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPkkgZG9u4oCZ dCB0aGluayB0aGUgT0VNSUQsIFVFSUQgb3Igb3RoZXIgc2hvdWxkIGJlIChhYil1c2VkICZuYnNw O3RvIHJlcHJlc2VudCBkZXZpY2UgY2xhc3MuIFRoYXQgd291bGQgcmVzdWx0IGluIHRoZW0gYmVp bmcgbGVzcyByZWxpYWJsZSBhbmQgdXNlZnVsIGluIGEgZ2VuZXJpYyBzZW5zZS4gV2Ugc2hvdWxk DQogY29tZSB1cCB3aXRoIGEgbmV3IGNsYWltLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdE Ij4mbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzFGNDk3RCI+KzE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+V2UgY2FuIGRlZmluZSBhIGNsYWltIHRvIGJlICZuYnNwO3RoZSBkZXZpY2UgY2xhc3MgYW5k IG1ha2UgaXQgYSBieXRlIHN0cmluZyBsaWtlIGEgVUVJRCwgYnV0IEkgdGhpbmsgd2UgaGF2ZSB0 byBnbyBmdXJ0aGVyIHRvIG1ha2UgaXQgdXNlZnVsIGFzIGFuIGludGVyb3BlcmFibGUgc3RhbmRh cmRpemUNCiBjbGFpbS4gVGhlcmUgaGFzIHRvIGJlIHNvbWUgbWV0aG9kIGZvciB0aGUgY2xhc3Np ZmljYXRpb24uIFRydXN0Wm9uZSB2cyBoeXBlcnZpc29yIGJhc2VkPyBGYXN0IHZzIHNsb3c/IEhh cyBhIHByb3RlY3RlZCBtb2RlIGtlcm5lbCBhbmQgVEFzPyBUaGUgVEVFUCBkb2N1bWVudCBkb2Vz buKAmXQgc2F5LiBUaGlzIHNlZW1zIHByb2JsZW1hdGljIHdpdGhvdXQgYSBjbGFzc2lmaWNhdGlv biBzY2hlbWUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5bRFRdIEnigJlt IG5vdCBzdXJlIHdlIG5lZWQgYSBjbGFzc2lmaWNhdGlvbiBzY2hlbWUsIGF0IGxlYXN0IGZvciBU RUVQLiAmbmJzcDtBIHNpbXBsZSBkZXZpY2UgY2xhc3MgYnl0ZSBzdHJpbmcgYXMgeW91IHN1Z2dl c3Qgd291bGQgc3VmZmljZSBpbiBteSBvcGluaW9uLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5JIHdvbmRlciBpZiB0aGUgaW50ZW50IGlzIG1vcmUgYWJv dXQgZ3JvdXBpbmcsIGluIHdoaWNoIGNhc2Ugd2UgY2FuIGRlZmluZSBhIEdFSUQgKEdyb3VwIEVu dGl0eSBJRCkgdGhhdCBsb29rcyBhIGxvdCBsaWtlIGEgVUVJRC4gVGhhdCBzZWVtcyB1c2VmdWwg YW5kIHNlbnNpYmxlIHRvIG1lLiBJdA0KIGlzIG5vdCBhYm91dCBjbGFzc2lmaWNhdGlvbiBiYXNl ZCBvbiBhbnkgY2hhcmFjdGVyaXN0aWNzLiBJdCBsaW5lcyB1cCB3aXRoIHRoZSBwcml2YWN5IHBy ZXNlcnZpbmcgdGVjaG5pcXVlIG9mIG9uZSBrZXkgcGVyIDEwMCwwMDAgZGV2aWNlcy48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8 cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi PiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7LSZuYnNwOyBURUUgSWRlbnRpZnlpbmcg SW5mb3JtYXRpb246IFRoZSB0eXBlIG9mIFRFRSB0aGF0IGdlbmVyYXRlZCB0aGlzPG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTgu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDthdHRlc3RhdGlvbiBtdXN0IGJlIGlkZW50aWZpZWQsIGluY2x1ZGluZyB2ZXJzaW9uIGlk ZW50aWZpY2F0aW9uPG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy LjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6V2luZ2Rp bmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtpbmZvcm1hdGlvbiBzdWNoIGFzIHRoZSBoYXJkd2Fy ZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uPG86cD48L286cD48L3ByZT4NCjxwcmUg c3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5i c3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtvZiB0aGUgVEVF LCBhcyBhcHBsaWNhYmxlIGJ5IHRoZSBURUUgdHlwZS4mbmJzcDsgVEVFIG1hbnVmYWN0dXJlcjxv OnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRl bnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7aW5mb3JtYXRpb24gZm9yIHRoZSBURUUgaXMgcmVxdWlyZWQgaW4gb3JkZXIg dG8gZGlzYW1iaWd1YXRlIHRoZTxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4t bGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7c2FtZSBURUUgdHlwZSBjcmVhdGVkIGJ5 IGRpZmZlcmVudCBtYW51ZmFjdHVyZXJzIGFuZCBhZGRyZXNzPG86cD48L286cD48L3ByZT4NCjxw cmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdDt0ZXh0LWluZGVudDotMTguMHB0Ij48c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6V2luZ2RpbmdzIj7DmDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ Jm5ic3A7IDwvc3Bhbj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtjb25zaWRl cmF0aW9ucyBhcm91bmQgbWFudWZhY3R1cmVyIHByb3Zpc2lvbmluZywga2V5aW5nIGFuZDxvOnA+ PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQ7dGV4dC1pbmRlbnQ6 LTE4LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OldpbmdkaW5ncyI+w5g8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssc2VyaWYiPiZuYnNwOyA8L3NwYW4+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7c3VwcG9ydCBmb3IgdGhlIFRFRS48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcHJlPg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTom cXVvdDtTZWdvZSBVSSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyNDI5MkUiPlNpbWlsYXJseSBm b3IgdGhpcyByZXF1aXJlbWVudCwgdGhlIGNsb3Nlc3QgdGhpbmcgSSBzZWUgaXMgT3JpZ2luYXRp b24gQ2xhaW0gKG9yaWdpbmF0aW9uKSBidXQgSSBhbSBub3Qgc3VyZTxicj4NCnRoYXQgaXMgc3Vm ZmljaWVudCBzaW5jZSBpdCdzIGp1c3QgdGhlIG1hbnVmYWN0dXJlciBub3QgdGhlICZxdW90O3Zl cnNpb24gaWRlbnRpZmljYXRpb24gaW5mb3JtYXRpb24gc3VjaCBhcyB0aGU8YnI+DQpoYXJkd2Fy ZSwgZmlybXdhcmUsIGFuZCBzb2Z0d2FyZSB2ZXJzaW9uIG9mIHRoZSBURUXigJ08L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZh bWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+RGVm aW5pdGVseSBub3Qgb3JpZ2luYXRpb24gY2xhaW0uPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3 RCI+KzE8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFG NDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaGUgaW50ZW50IG9mIGl0IHNvbWV0aGlu ZyBsaWtlIEVuZG9yc2VyIGlkZW50aWZpY2F0aW9uIGFuZCBJIHRoaW5rIGl0IHNob3VsZCBiZSBy ZXBsYWNlZCBieSBhbiBFbmRvcnNlci9YLjUwOSBjZXJ0IFVSTC48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtm b250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJp ZiI+SSB3b3VsZCBzYXksIHRoaXMgaXMgYSBjb21iaW5hdGlvbiBvZiBjbGFpbXM8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkl04oCZcyBqdXN0IHVzZWQ6PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9InRleHQt aW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj4xKTwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Gb3IgYSBWZXJpZmllcg0KIGluIGFwcHJhaXNpbmcgdGhl IGV2aWRlbmNlIChub3RoaW5nIFRFRVAgc3BlY2lmaWMgaGVyZSwgYXBwcmFpc2FsIHBvbGljeSBj YW4gaW52b2x2ZSBhbnkgY2xhaW0pLCBhbmQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPjIpPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 Ny4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmO2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5 N0QiPlRvIGJlIHVzZWQNCiBieSBhIFRBTSB0byBkZWNpZGUgd2hpY2ggVEHigJlzIGFwcGx5IHRv IHRoZSBURUUuJm5ic3A7IEluIHRoYXQgc2Vuc2UgaXTigJlzIGp1c3QgbGlrZSBhbnkgb3RoZXIg dmVuZG9yIGlkICsgZGV2aWNlIGNsYXNzIGZvciBhbnkgbm9uIFRFRSwgYW5kIEkgYmVsaWV2ZSBp ZiB0aGVyZSB3ZXJlIGEgYnl0ZSBzdHJpbmcgZm9yIGRldmljZSBjbGFzcyBhcyB5b3Ugc3VnZ2Vz dCB0aGF0IHdvdWxkIGJlIHN1ZmZpY2llbnQgaW4gbXkgb3Bpbmlvbi48L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPktlZXBpbmcg aW4gbWluZCB0aGUg4oCcbGF5ZXJlZCBhdHRlc3RhdGlvbuKAnSBjb25jZXB0IGluIHRoZSBhcmNo IGRvYywgYXMgbG9uZyBhcyB3ZSBoYXZlIGEgY2xhaW1zZXQgcGVyIGxheWVyLCB0aGVuIEkgdGhp bmsgdGhlIHNhbWUg4oCcdmVuZG9yIGlk4oCdIGFuZCDigJxjbGFzc+KAnSBjbGFpbXMgdGhhdCB3 b3VsZCBhcHBseSB0byBhbnkgZGV2aWNlIGNvdWxkIGJlIHJldXNlZA0KIGZvciB0aGUgVEVFLCBh bmQgcmV1c2VkIGZvciBkZXNjcmliaW5nIGVhY2ggbGF5ZXIuJm5ic3A7IEUuZy4sIGEg4oCcdmVy c2lvbuKAnSBjbGFpbSB3b3VsZCBhcHBseSBhdCB0aGUgaGFyZHdhcmUgbGF5ZXIgYW5kIGJlIHRo ZSBoYXJkd2FyZSB2ZXJzaW9uLCBhdCB0aGUgZmlybXdhcmUgbGF5ZXIgYW5kIGJlIGEgZmlybXdh cmUgdmVyc2lvbiwgYXQgdGhlIE9TIGxheWVyIGFuZCBiZSBhbiBPUyB2ZXJzaW9uLCBldGMuPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVz IE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox Mi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5J4oCZ dmUganVzdCBhZGRlZCBhJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZ2l0aHViLmNvbSUyRmlldGYt cmF0cy13ZyUyRmVhdCUyRnB1bGwlMkY2OCZhbXA7ZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1p Y3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NV bmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lNQzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklp TENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNEJTdDMTAwMCZhbXA7c2RhdGE9SnlOQ1R3VUp2 a0NQazNIOXVZbUQwQkxmVVhQdTZ2aG5Rb21rSXFpcWlVTSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+UFI8L3NwYW4+PC9hPiZuYnNwO2Zvcg0KIEhXIHZlcnNp b24gY2xhaW1zLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyxzZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj5UaGUgaW50ZW50IGZvciBTVyB2ZXJzaW9u IGNsYWltcyBpcyB0byB1c2UgQ29TV0lELiBXZSBzaG91bGQgcHJvYmFibHkgY3JlYXRlIHNvbWUg ZXhhbXBsZXMgdG8gc2VlIGlmIGl0IGNhbiByZXByZXNlbnQgd2hhdCBURUVQIHdhbnRzIHRvIHJl cHJlc2VudC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkFncmVlIHRoaXMg c291bmRzIHByb21pc2luZy48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEy LjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyxzZXJpZiI+VGhlIHBhcmFncmFwaCBtZW50aW9ucyDigJx0eXBlIG9mIFRFReKAnS4gSeKAmW0g bm90IHN1cmUgd2hhdCBpcyBpbnRlbmRlZC4gSSBkb27igJl0IGtub3cgb2YgYW55IGNvbW1vbiB0 YXhvbm9teSBmb3IgY2xhc3NpZnlpbmcgVEVFcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LHNlcmlmO2NvbG9yOiMxRjQ5N0QiPkEgdW5pcXVlIGlkZW50aWZpZXIgaXMgc3Vm ZmljaWVudCBpbiBteSB2aWV3LCBubyDigJxjbGFzc2lmaWNhdGlvbuKAnSBvciDigJx0YXhvbm9t eeKAnSBpcyByZXF1aXJlZCBieSBhbnl0aGluZyB0aGF0IHRoZSBURUVQIFdHIGhhcyBkaXNjdXNz ZWQgdG8gZGF0ZSwgYXMgZmFyIGFzIEkNCiBrbm93Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYi Pjxicj4NCjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2Nr cXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5TaG91bGQgdGhlIFRFRVAgV0cgZGVmaW5lIFRFRVAtc3BlY2lmaWMgY2xhaW1zIGZv ciBzdWNoIGluZm9ybWF0aW9uPzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+SeKAmWQgbGlrZSB0byBzZWUgbW9zdCBvZiB0aGVt IGdvIGludG8gRUFUIHVubGVzcyB0aGV5IGFyZSBzdXBlciBzcGVjaWZpYyB0byBURUVQIChURUVQ IG5vdCBURUVzKS4gSSB0aGluayB0aGVyZSBpcyB2YWx1ZSBpbiBicm9hZCBzdGFuZGFyZGl6ZSBj bGFpbXMgYXMgaXQgcHJvbW90ZXMgaW50ZXJvcGVyYWJpbGl0eQ0KIG9mIFJBVFMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj5Tb3VuZHMgZ29vZCB0byBtZS4mbmJzcDsmbmJz cDsgQ29uc2lkZXIgdGhpcyBhIHJlcXVlc3QgdG8gYWRkIHNvbWUgd2F5IHRvIGV4cHJlc3Mg4oCc dmVuZG9yIGlk4oCdLCDigJxtb2RlbOKAnSAob3Ig4oCcY2xhc3PigJ0gb3Igd2hhdGV2ZXIgeW91 IHdhbnQgdG8gY2FsbCBpdCksIGFuZCDigJx2ZXJzaW9u4oCdIGFzIGNsYWltcyB0aGF0IGNhbiBi ZSBhcHBsaWVkIGluIGNsYWltc2V0cyBhdCB2YXJpb3VzIGxheWVycy4mbmJzcDsmbmJzcDsNCiBJ IGdsYW5jZWQgYXQgdGhlIFBSIHlvdSByZWZlcmVuY2VkIGFuZCBpdCBzZWVtcyB0byBiZSBhIGNo aXAtc3BlY2lmaWMgdmVyc2lvbiwgbm90IGEgZ2VuZXJpYyB2ZXJzaW9uIGNsYWltIHRoYXQgY2Fu IGJlIHVzZWQgYXQgbXVsdGlwbGUgbGF5ZXJzLCBzbyBpcyBub3Qgc3VmZmljaWVudCB0byBtZWV0 IHRoZSBURUVQIGFyY2ggZHJhZnTigJlzIHJlcXVpcmVtZW50cywgd2Ugc3RpbGwgbmVlZCBvdGhl ciBjbGFpbXMgYWRkZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMUY0OTdEIj5UaGFua3MhPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+ PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPkRhdmU8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNl cmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+TEw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48YnI+DQo8YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5EYXZlPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyPg0KUkFUUyBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LHNlcmlmIj48YSBocmVmPSJtYWlsdG86UkFUU0BpZXRmLm9yZyI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojOTU0RjcyIj5SQVRTQGlldGYub3JnPC9zcGFuPjwvYT48L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PGEgaHJl Zj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJGbWFpbG1hbiUyRmxpc3RpbmZvJTJGcmF0cyZhbXA7 ZGF0YT0wNCU3QzAxJTdDZHRoYWxlciU0MG1pY3Jvc29mdC5jb20lN0NhYjFlZTc3ODhmMWY0ZDQ0 OWM1NTA4ZDg3YWFhMzAwNiU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzczOTQyMTg2NTg4OTU2ODUlN0NVbmtub3duJTdDVFdGcGJHWnNiM2Q4ZXlKV0lqb2lN QzR3TGpBd01EQWlMQ0pRSWpvaVYybHVNeklpTENKQlRpSTZJazFoYVd3aUxDSlhWQ0k2TW4wJTNE JTdDMTAwMCZhbXA7c2RhdGE9TzVMSlpCdyUyQjZodVlVN0JyTlNnT1VRTncySDV1b0RHd1pqMDkl MkZQZ2hLckklM0QmYW1wO3Jlc2VydmVkPTAiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Izk1NEY3 MiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9zcGFuPjwvYT48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCklNUE9SVEFOVCBO T1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJl IGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3Qg dGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0 ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24s IHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRp b24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM6PR08MB342916CCDD01E8698BB3C883EF170AM6PR08MB3429eurp_-- From nobody Wed Oct 28 17:51:03 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F95B3A08FF; Fri, 16 Oct 2020 16:52:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.097 X-Spam-Level: X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bL4EC0q6YM2f; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) Received: from mail-qt1-x831.google.com (mail-qt1-x831.google.com [IPv6:2607:f8b0:4864:20::831]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C38A3A083A; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) Received: by mail-qt1-x831.google.com with SMTP id q26so2645305qtb.5; Fri, 16 Oct 2020 16:52:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=CQCzTZesK0cV+tX0/ix+i3hCBdfcQ+R7buY2KfK0+vs=; b=cXG5HZnSpsuHsbx7UqRBuVTpaTP5L6cZm7DvwQEtcJUFZZ85DEdaZJdPbW+kEWD1oA iFpYIxCBskov4vFyMx0JihC5hcll/HxJ/op4UEexqHAlPk0jXPZiDvPw3j0IGAlqnQDM CDfEnFDHuO+lH0K04sMEz7q7YRrVhPrk5MprXwmdahpAIbGyeBifKhs6htdR2MsCXOCs FyLY3sbJ1OFXE2HfBbacIC/27NgKUoSl8YX330f8eLIdm7FlYLJA1SuN97ixon8ro+NI 8dt4pzU6yAu3PVXr593XRyjPhljiALNVe+aYoC/Ic2MqnJL+PscNUDRevvvaMLQM1WMm OZHA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=CQCzTZesK0cV+tX0/ix+i3hCBdfcQ+R7buY2KfK0+vs=; b=qolg7DfrnMGBqd2z2dk4YPjSFhWju9f6EWp1gdeKbOM9bMsTZx2MBWTnuh3+13FJg2 BNOiTvA67MDIwIEpqtMo0ycVmheZNlZz0O/Joc+dPrXRIIOC/WAT6ZYRdfF5qwsen+pz jidiQQkDjTe3TZZXq75LN4KCIOV4Hzkad11Fz0Zbbl+S8OI0lA+l/dRELZzJATFIl2bQ yLrncSV4ri7/8s5jTnKsLDNwJ2FdmKCzV7K/Y/6ZmJU7yMvQNrUimP351W7MTCtblEqe L9H1mUxMXBppZRRyzo/pbDFkira/35Y/fZjSc6V0fgTF3QMmr7OkvEAAwobVVKQJ6EEr xKnw== X-Gm-Message-State: AOAM5336XCt3YQLwds6bXEt5cUU2adlPPk+9TOuA/gOe5QdTut0W1pX7 7wAt6eW8Vj/yyPtnw6t1xkzIn0KySVbBSNqcPBR5eoFS X-Google-Smtp-Source: ABdhPJzej2ay3HGm0BdC3NkHspTRYwIWY1BwPKlaH/h5/wePuC8FaiOrC7y8LltV/KEK92BNh55UZ3GOJT2IVrCy1YY= X-Received: by 2002:ac8:3ac4:: with SMTP id x62mr5700471qte.347.1602892345337; Fri, 16 Oct 2020 16:52:25 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Raymond Mamattah Date: Fri, 16 Oct 2020 23:52:11 +0000 Message-ID: To: Carsten Bormann Cc: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, lake@ietf.org Content-Type: multipart/alternative; boundary="000000000000db6be205b1d27483" Archived-At: X-Mailman-Approved-At: Wed, 28 Oct 2020 17:51:02 -0700 Subject: Re: [Teep] [Din] Constrained Node/Network Cluster @ IETF109: DRAFT AGENDA X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Oct 2020 23:52:29 -0000 --000000000000db6be205b1d27483 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Carsten, >From the draft agenda, I can see there are various exciting WG I would love to join. What is the process of joining the WG please. Regards, Raymond Mamattah Accra, Ghana https://www.linkedin.com/in/raymond-selorm-mamattah-02637610 On Fri, Oct 16, 2020, 11:42 PM Carsten Bormann wrote: > Here is my usual eclectic condensed agenda based on the DRAFT AGENDA > for IETF109. Remember that there is still quite some potential for > changes. > > The conflicts that meet the eye this time seem to impact generalists only= . > Great scheduling job! > > All times *on my agenda* are in UTC (the default page is UTC+0700). > https://datatracker.ietf.org/meeting/agenda-utc might be handy. > Note that both EU and US are on winter time (standard time) then. > > Gr=C3=BC=C3=9Fe, Carsten > > MONDAY, November 9, 2020 > > 0500-0700 Hackathon Kickoff > Rm 1 GEN hackathon Hackathon > > FRIDAY, November 13, 2020 > > 0500-0700 Hackathon Closing > Rm 1 GEN hackathon Hackathon > > MONDAY, November 16, 2020 > > 0500-0700 Session I > Rm 1 ART dispatch Dispatch WG - Joint with ARTAREA > Rm 3 IRTF qirg Quantum Internet Research Group > Rm 5 RTG raw Reliable and Available Wireless WG > Rm 6 SEC *** lake Lightweight Authenticated Key Exchange WG > > 0730-0830 Session II > Rm 3 INT add Adaptive DNS Discovery WG > Rm 4 IRTF maprg Measurement and Analysis for Protocols > Rm 7 SEC *** cose CBOR Object Signing and Encryption WG > > 0900-1100 Session III > Rm 1 ART jsonpath JSON Path WG > Rm 6 SEC secdispatch Security Dispatch WG > Rm 7 TSV tsvwg Transport Area Working Group WG > > TUESDAY, November 17, 2020 > > 0500-0700 Session I > Rm 1 ART *** core Constrained RESTful Environments WG > Rm 2 INT 6man IPv6 Maintenance WG > Rm 7 SEC gnap Grant Negotiation and Authorization > Protocol WG > > 0730-0830 Session II > Rm 5 RTG babel Babel routing protocol WG > Rm 6 SEC tls Transport Layer Security WG > > 0900-1100 Session III > Rm 1 ART *** asdf A Semantic Definition Format for Data and > Interactions of Things WG > Rm 2 IRTF irtfopen IRTF Open Meeting > Rm 4 RTG apn Application-aware Networking BOF > Rm 7 SEC *** rats Remote ATtestation ProcedureS WG > > WEDNESDAY, November 18, 2020 > > 0500-0700 Session I > Rm 3 INT madinas MAC Address Device Identification for > Network and Application Services BOF > Rm 5 RTG bier Bit Indexed Explicit Replication WG > Rm 7 SEC *** ace Authentication and Authorization for > Constrained Environments WG > Rm 8 TSV quic QUIC WG > > 0730-0830 Session II > Rm 3 INT *** 6lo IPv6 over Networks of Resource-constraine= d > Nodes WG > Rm 4 INT *** drip Drone Remote ID Protocol WG > Rm 7 SEC *** teep Trusted Execution Environment Provisionin= g > WG > Rm 8 TSV tsvwg Transport Area Working Group WG > > THURSDAY, November 19, 2020 > > 0500-0700 Session I > Rm 3 IRTF coinrg Computing in the Network Research Group > Rm 7 SEC saag Security Area Open Meeting > > 0730-0830 Session II > Rm 1 ART *** cbor Concise Binary Object Representation > Maintenance and Extensions WG > Rm 2 INT intarea Internet Area Working Group WG > Rm 3 RTG detnet Deterministic Networking WG > Rm 5 SEC acme Automated Certificate Management > Environment WG > > 0900-1100 Session III > Rm 4 OPS v6ops IPv6 Operations WG > Rm 6 RTG *** roll Routing Over Low power and Lossy networks > WG > Rm 7 SEC mls Messaging Layer Security WG > Rm 8 SEC *** rats Remote ATtestation ProcedureS WG > > FRIDAY, November 20, 2020 > > 0500-0700 Session I > Rm 2 INT add Adaptive DNS Discovery WG > Rm 6 RTG rift Routing In Fat Trees WG > Rm 7 SEC emu EAP Method Update WG > > 0730-0830 Session II > Rm 1 ART httpapi Building Blocks for HTTP APIs WG > Rm 2 INT *** lwig Light-Weight Implementation Guidance WG > Rm 3 OPS anima Autonomic Networking Integrated Model and > Approach WG > Rm 6 SEC *** suit Software Updates for Internet of Things W= G > Rm 7 TSV tsvarea Transport Area Open Meeting > > 0900-1100 Session III > Rm 1 ART *** core Constrained RESTful Environments WG > Rm 2 INT 6man IPv6 Maintenance WG > Rm 4 IRTF cfrg Crypto Forum > Rm 7 TSV masque Multiplexed Application Substrate over > QUIC Encryption WG > > > _______________________________________________ > Din mailing list > Din@irtf.org > https://www.irtf.org/mailman/listinfo/din > --000000000000db6be205b1d27483 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi=C2=A0Carsten,

From the draft agenda, I can see there are various exciting WG I would= love to join.

What is t= he process of joining the WG please.

On Fri, O= ct 16, 2020, 11:42 PM Carsten Bormann <c= abo@tzi.org> wrote:
Here is = my usual eclectic condensed agenda based on the DRAFT AGENDA
for IETF109.=C2=A0 Remember that there is still quite some potential for changes.

The conflicts that meet the eye this time seem to impact generalists only.<= br> Great scheduling job!

All times *on my agenda* are in UTC (the default page is UTC+0700).
https://datatracker.ietf.org/meeting/agend= a-utc might be handy.
Note that both EU and US are on winter time (standard time) then.

Gr=C3=BC=C3=9Fe, Carsten

MONDAY, November 9, 2020

0500-0700=C2=A0 Hackathon Kickoff
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 GEN=C2=A0 =C2=A0 =C2=A0hackat= hon=C2=A0 =C2=A0 =C2=A0 =C2=A0Hackathon

FRIDAY, November 13, 2020

0500-0700=C2=A0 Hackathon Closing
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 GEN=C2=A0 =C2=A0 =C2=A0hackat= hon=C2=A0 =C2=A0 =C2=A0 =C2=A0Hackathon

MONDAY, November 16, 2020

0500-0700=C2=A0 Session I
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0dispat= ch=C2=A0 =C2=A0 =C2=A0 =C2=A0 Dispatch WG - Joint with ARTAREA
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 qirg=C2=A0 = =C2=A0 Quantum Internet Research Group
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0raw=C2= =A0 =C2=A0 =C2=A0Reliable and Available Wireless WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** lake=C2=A0 =C2=A0 Lig= htweight Authenticated Key Exchange WG

0730-0830=C2=A0 Session II
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0add=C2= =A0 =C2=A0 =C2=A0Adaptive DNS Discovery WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 maprg=C2=A0= =C2=A0Measurement and Analysis for Protocols
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** cose=C2=A0 =C2=A0 CBO= R Object Signing and Encryption WG

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0jsonpa= th=C2=A0 =C2=A0 =C2=A0 =C2=A0 JSON Path WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0secdis= patch=C2=A0 =C2=A0 =C2=A0Security Dispatch WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvwg= =C2=A0 =C2=A0Transport Area Working Group WG

TUESDAY, November 17, 2020

0500-0700=C2=A0 Session I
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** core=C2=A0 =C2=A0 Con= strained RESTful Environments WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A06man= =C2=A0 =C2=A0 IPv6 Maintenance WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0gnap= =C2=A0 =C2=A0 Grant Negotiation and Authorization Protocol WG

0730-0830=C2=A0 Session II
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0babel= =C2=A0 =C2=A0Babel routing protocol WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0tls=C2= =A0 =C2=A0 =C2=A0Transport Layer Security WG

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** asdf=C2=A0 =C2=A0 A S= emantic Definition Format for Data and Interactions of Things WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 irtfopen=C2= =A0 =C2=A0 =C2=A0 =C2=A0 IRTF Open Meeting
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0apn=C2= =A0 =C2=A0 =C2=A0Application-aware Networking BOF
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** rats=C2=A0 =C2=A0 Rem= ote ATtestation ProcedureS WG

WEDNESDAY, November 18, 2020

0500-0700=C2=A0 Session I
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0madina= s MAC Address Device Identification for Network and Application Services BO= F
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0bier= =C2=A0 =C2=A0 Bit Indexed Explicit Replication WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** ace=C2=A0 =C2=A0 =C2= =A0Authentication and Authorization for Constrained Environments WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0quic= =C2=A0 =C2=A0 QUIC WG

0730-0830=C2=A0 Session II
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** 6lo=C2=A0 =C2=A0 =C2= =A0IPv6 over Networks of Resource-constrained Nodes WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** drip=C2=A0 =C2=A0 Dro= ne Remote ID Protocol WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** teep=C2=A0 =C2=A0 Tru= sted Execution Environment Provisioning WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvwg= =C2=A0 =C2=A0Transport Area Working Group WG

THURSDAY, November 19, 2020

0500-0700=C2=A0 Session I
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 coinrg=C2= =A0 Computing in the Network Research Group
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0saag= =C2=A0 =C2=A0 Security Area Open Meeting

0730-0830=C2=A0 Session II
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** cbor=C2=A0 =C2=A0 Con= cise Binary Object Representation Maintenance and Extensions WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0intare= a Internet Area Working Group WG
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0detnet= =C2=A0 Deterministic Networking WG
Rm 5=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0acme= =C2=A0 =C2=A0 Automated Certificate Management Environment WG

0900-1100=C2=A0 Session III
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 OPS=C2=A0 =C2=A0 =C2=A0v6ops= =C2=A0 =C2=A0IPv6 Operations WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG *** roll=C2=A0 =C2=A0 Rou= ting Over Low power and Lossy networks WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0mls=C2= =A0 =C2=A0 =C2=A0Messaging Layer Security WG
Rm 8=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** rats=C2=A0 =C2=A0 Rem= ote ATtestation ProcedureS WG

FRIDAY, November 20, 2020

0500-0700=C2=A0 Session I
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A0add=C2= =A0 =C2=A0 =C2=A0Adaptive DNS Discovery WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 RTG=C2=A0 =C2=A0 =C2=A0rift= =C2=A0 =C2=A0 Routing In Fat Trees WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC=C2=A0 =C2=A0 =C2=A0emu=C2= =A0 =C2=A0 =C2=A0EAP Method Update WG

0730-0830=C2=A0 Session II
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART=C2=A0 =C2=A0 =C2=A0httpap= i Building Blocks for HTTP APIs WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT *** lwig=C2=A0 =C2=A0 Lig= ht-Weight Implementation Guidance WG
Rm 3=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 OPS=C2=A0 =C2=A0 =C2=A0anima= =C2=A0 =C2=A0Autonomic Networking Integrated Model and Approach WG
Rm 6=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 SEC *** suit=C2=A0 =C2=A0 Sof= tware Updates for Internet of Things WG
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0tsvare= a Transport Area Open Meeting

0900-1100=C2=A0 Session III
Rm 1=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ART *** core=C2=A0 =C2=A0 Con= strained RESTful Environments WG
Rm 2=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 INT=C2=A0 =C2=A0 =C2=A06man= =C2=A0 =C2=A0 IPv6 Maintenance WG
Rm 4=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 IRTF=C2=A0 =C2=A0 cfrg=C2=A0 = =C2=A0 Crypto Forum
Rm 7=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 TSV=C2=A0 =C2=A0 =C2=A0masque= =C2=A0 Multiplexed Application Substrate over QUIC Encryption WG


_______________________________________________
Din mailing list
Din@ir= tf.org
https://www.irtf.org/mailman/listinfo/din
--000000000000db6be205b1d27483-- From nobody Thu Oct 29 13:02:50 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 690723A0A69 for ; Thu, 29 Oct 2020 13:02:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.261 X-Spam-Level: X-Spam-Status: No, score=-0.261 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, LH_URI_DOM_IN_PATH=1.533, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qIfz46JiqdRy for ; Thu, 29 Oct 2020 13:02:44 -0700 (PDT) Received: from p3plsmtpa07-01.prod.phx3.secureserver.net (p3plsmtpa07-01.prod.phx3.secureserver.net [173.201.192.230]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E0B5C3A09DB for ; Thu, 29 Oct 2020 13:02:43 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YE8AkgjHCt9NIYE8BkjmHZ; Thu, 29 Oct 2020 13:02:43 -0700 X-CMAE-Analysis: v=2.4 cv=Gd/SISbL c=1 sm=1 tr=0 ts=5f9b1fe3 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=7CQSdrXTAAAA:8 a=48vgC7mUAAAA:8 a=K6EGIJCdAAAA:8 a=yMhMjlubAAAA:8 a=UqCG9HQmAAAA:8 a=0XtbOteLAAAA:20 a=4XpDxwsG_RfU1CSojpIA:9 a=1X7SEse2vR9V7PBw:21 a=GcDnrxg9NVd9-G67:21 a=QEXdDO2ut3YA:10 a=xBUbfIdvo0FSlxAXXXAA:9 a=VZS-tT9bwXdszHz7:21 a=-0RGd8Tt2vlzolef:21 a=ZUW6dXMnZq9r3_3c:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 a=w1C3t2QeGrPiZgrLijVG:22 a=L6pVIi0Kn1GYQfi8-iRI:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 29 Oct 2020 13:02:42 -0700 In-Reply-To: Cc: Dave Thaler , "rats@ietf.org" , teep To: Simon Frost References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfEQeJpYx64k9cCTY1qPeln9tf8eQTw3GxTj9TAcWpTbSqRjE+UDLWlDxTGGFa7fFmkVfVeyTinHAiih28mRQaQZtKMcYJMyLx4tl6FPHy1huIRifbAz1 +pG1jFEOvRi9Ez7rvT9n8c/6bDRsCbkh9m6JCvn4KJfDVQPpEv/OviIVFHI2a1qLVNS647crELtqNf6OqVp/2sk5XXiEthU9ASOgOW+3vsimI6+yH+r7Efse dFYPSyrdeH/GuViqbdA2AFRmHiTUgofgROR06g1VYQA= Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 20:02:48 -0000 --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 28, 2020, at 11:14 AM, Simon Frost wrote: >=20 > Note that some of the Arm team will be attending the upcoming = hackathon and had been discussing doing some work there on describing = components with CoSWID via EAT. This builds on some implementation work = already completed as part of an Arm project that will shortly be = upstreamed. > =20 > The PSA EAT profile originally introduced a hardware version based on = an EAN-13. This was used as a reference to a general set of hardware in = a certification scheme. Further work has shown this format is not = suitable and it has will be deprecated in a future releases of the = profile. The PSA profile also contains an =E2=80=98ImplementationID=E2=80=99= claim (byte string of sufficient size to hold a SHA2 hash) which is = intended to be used as a much more specific identifier of a hardware = group. The intent here is that reference values for an ImplementationID = can be known by a verifier to assist appraisal policy. I think we want to have a claim that is clearly and explicitly a HW = version. There can be additional claims to look up reference values or = other stuff Verifiers need. All claims are optional so, implementations = that only use something like ImplementID can leave out HW version. I think we should keep EAN-13 as an option, even though it won=E2=80=99t = work for everyone. In addition to EAN-13 versions, we can just define byte string, or we = can go a lot further by reusing the version scheme from CoSWID. Here=E2=80= =99s some of the types. +-------+-------------------------+--------------------------------+ | Index | Version Scheme Name | Definition | +=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+ | 1 | multipartnumeric | Numbers separated by dots, | | | | where the numbers are | | | | interpreted as integers (e.g., | | | | 1.2.3, 1.4.5, 1.2.3.4.5.6.7) | +-------+-------------------------+--------------------------------+ | 2 | multipartnumeric+suffix | Numbers separated by dots, | | | | where the numbers are | | | | interpreted as integers with | | | | an additional textual suffix | | | | (e.g., 1.2.3a) | +-------+-------------------------+--------------------------------+ | 3 | alphanumeric | Strictly a string, sorting is | | | | done alphanumerically | +-------+-------------------------+--------------------------------+ | 4 | decimal | A floating point number (e.g., | | | | 1.25 is less than 1.3) | +-------+-------------------------+--------------------------------+ | 16384 | semver | Follows the [SEMVER = ] = | | | | specification | +-------+-------------------------+--------------------------------+ My understanding is that they are always encoded as CBOR text strings, = so floating-point doesn=E2=80=99t mean #7.25 or such. LL > =20 > Thanks > Simon > =20 > From: Laurence Lundblade >=20 > Sent: 27 October 2020 20:45 > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > CoSWID should cover all the identification of vendors, models, = versions and stuff for SW. If it doesn=E2=80=99t talk to Henk about = fixes to CoSWID. :-) > =20 > For HW, there is OEMID and recently proposed chip version, board = version and device version. It seems like we need a model number claim = for HW. I will work on that. > =20 > Seems like submodules would be used to organize claims for layered = attestation and all of the above claims can occur in any submodule they = need to. > =20 > Does this mostly cover it?=20 > =20 > I worry that the HW claims are bit too rigid in their use of EAN-13 = and IEEE registries. Might need to do something about that. > =20 > LL > =20 >=20 >=20 > On Oct 27, 2020, at 1:26 PM, Dave Thaler > wrote: > =20 > Inline below=E2=80=A6 > =20 > From: Laurence Lundblade >=20 > Sent: Tuesday, October 27, 2020 11:57 AM > To: Dave Thaler > > Cc: rats@ietf.org ; teep > > Subject: Re: [Rats] EAT claims needed by TEEP > =20 > Personally, I think attestation of TEE=E2=80=99s is pretty important = and should be handled well in EAT. So I=E2=80=99m interested in working = on and adding claims for this to EAT. > =20 > After reading section 7.1 in TEEP architecture, it does seem like = there some work to do here to get to specific standardized interoperable = claims. > =20 > More comments below. >=20 >=20 >=20 > On Oct 26, 2020, at 3:15 PM, Dave Thaler = > wrote: > =20 > As discussed in previous IETF meetings, if there are claims beyond the = base set that > other WGs need, they can be specified by the other WGs with review by = RATS. > =20 > The TEEP WG needs the following in EATs and I am not sure whether they = can be > covered by existing claims or whether TEEP-specific claims are needed. = From > section 7.1 of draft-ietf-teep-architecture: > =20 > =C3=98 - Device Identifying Information: TEEP attestations may = need to > =C3=98 uniquely identify a device to the TAM. Unique device > =C3=98 identification allows the TAM to provide services to the = device, > =C3=98 such as managing installed TAs, and providing = subscriptions to > =C3=98 services, and locating device-specific keying material = to > =C3=98 communicate with or authenticate the device. > =20 > I believe the Universal Entity ID Claim (ueid) is claim that meets the = above requirement. > But the TEEP arch then goes on to say: > =20 > =C3=98 In some use cases it > =C3=98 may be sufficient to identify only the class of the = device. The > =C3=98 security and privacy requirements regarding device = identification > =C3=98 will vary with the type of TA provisioned to the TEE. > Which EAT claim contains the device class? The closest thing I see is = OEM Identification by IEEE (oemid) > but I am not sure that is sufficient since it's only the OEM not the = device class from that OEM. > This doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to > represent device class using the claims in the EAT spec? > =20 > I don=E2=80=99t think the OEMID, UEID or other should be (ab)used to = represent device class. That would result in them being less reliable = and useful in a generic sense. We should come up with a new claim. > =20 > +1 > =20 > We can define a claim to be the device class and make it a byte = string like a UEID, but I think we have to go further to make it useful = as an interoperable standardize claim. There has to be some method for = the classification. TrustZone vs hypervisor based? Fast vs slow? Has a = protected mode kernel and TAs? The TEEP document doesn=E2=80=99t say. = This seems problematic without a classification scheme. > =20 > [DT] I=E2=80=99m not sure we need a classification scheme, at least = for TEEP. A simple device class byte string as you suggest would = suffice in my opinion. > =20 > I wonder if the intent is more about grouping, in which case we can = define a GEID (Group Entity ID) that looks a lot like a UEID. That seems = useful and sensible to me. It is not about classification based on any = characteristics. It lines up with the privacy preserving technique of = one key per 100,000 devices. > =20 > =C3=98 - TEE Identifying Information: The type of TEE that = generated this > =C3=98 attestation must be identified, including version = identification > =C3=98 information such as the hardware, firmware, and software = version > =C3=98 of the TEE, as applicable by the TEE type. TEE = manufacturer > =C3=98 information for the TEE is required in order to = disambiguate the > =C3=98 same TEE type created by different manufacturers and = address > =C3=98 considerations around manufacturer provisioning, keying = and > =C3=98 support for the TEE. > =20 > Similarly for this requirement, the closest thing I see is Origination = Claim (origination) but I am not sure > that is sufficient since it's just the manufacturer not the "version = identification information such as the > hardware, firmware, and software version of the TEE=E2=80=9D > =20 > Definitely not origination claim.=20 > =20 > +1 > =20 > The intent of it something like Endorser identification and I think it = should be replaced by an Endorser/X.509 cert URL. > =20 > I would say, this is a combination of claims > =20 > It=E2=80=99s just used: > 1) For a Verifier in appraising the evidence (nothing TEEP = specific here, appraisal policy can involve any claim), and > 2) To be used by a TAM to decide which TA=E2=80=99s apply to the = TEE. In that sense it=E2=80=99s just like any other vendor id + device = class for any non TEE, and I believe if there were a byte string for = device class as you suggest that would be sufficient in my opinion. > =20 > Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D concept in = the arch doc, as long as we have a claimset per layer, then I think the = same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D claims that = would apply to any device could be reused for the TEE, and reused for = describing each layer. E.g., a =E2=80=9Cversion=E2=80=9D claim would = apply at the hardware layer and be the hardware version, at the firmware = layer and be a firmware version, at the OS layer and be an OS version, = etc. > =20 > =20 > I=E2=80=99ve just added a PR = for HW version claims. > =20 > The intent for SW version claims is to use CoSWID. We should probably = create some examples to see if it can represent what TEEP wants to = represent. > =20 > Agree this sounds promising. > =20 > The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. I=E2=80=99m not = sure what is intended. I don=E2=80=99t know of any common taxonomy for = classifying TEEs. > =20 > A unique identifier is sufficient in my view, no =E2=80=9Cclassification= =E2=80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know. >=20 >=20 > Should the TEEP WG define TEEP-specific claims for such information? > =20 > I=E2=80=99d like to see most of them go into EAT unless they are super = specific to TEEP (TEEP not TEEs). I think there is value in broad = standardize claims as it promotes interoperability of RATS. > =20 > Sounds good to me. Consider this a request to add some way to = express =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or = =E2=80=9Cclass=E2=80=9D or whatever you want to call it), and = =E2=80=9Cversion=E2=80=9D as claims that can be applied in claimsets at = various layers. I glanced at the PR you referenced and it seems to be = a chip-specific version, not a generic version claim that can be used at = multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80=99= s requirements, we still need other claims added. > =20 > Thanks! > Dave > =20 > LL > =20 >=20 >=20 >=20 > =20 > Dave > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats = > =20 > =20 > IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 28, 2020, at 11:14 AM, Simon Frost <Simon.Frost@arm.com>= wrote:

Note that some of the Arm team will be attending the upcoming = hackathon and had been discussing doing some work there on describing = components with CoSWID via EAT. This builds on some implementation work = already completed as part of an Arm project that will shortly be = upstreamed.
 
The PSA EAT = profile originally introduced a hardware version based on an EAN-13. = This was used as a reference to a general set of hardware in a = certification scheme. Further work has shown this format is not suitable = and it has will be deprecated in a future releases of the profile. The = PSA profile also contains an =E2=80=98ImplementationID=E2=80=99 claim = (byte string of sufficient size to hold a SHA2 hash) which is intended = to be used as a much more specific identifier of a hardware group. The = intent here is that reference values for an ImplementationID can be = known by a verifier to assist appraisal = policy.

I think we want to have a claim that is clearly = and explicitly a HW version. There can be additional claims to look up = reference values or other stuff Verifiers need. All claims are optional = so, implementations that only use something like ImplementID can leave = out HW version.

I think we should = keep EAN-13 as an option, even though it won=E2=80=99t work for = everyone.

In addition to EAN-13 = versions, we can just define byte string, or we can go a lot further by = reusing the version scheme from CoSWID. Here=E2=80=99s some of the = types.

   =
+-------+-------------------------+--------------------------------+
   | Index | Version Scheme Name     | Definition                     |
   +=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D+=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D+
   | 1     | multipartnumeric        | Numbers separated by dots,     |
   |       |                         | where the numbers are          |
   |       |                         | interpreted as integers (e.g., |
   |       |                         | 1.2.3, 1.4.5, 1.2.3.4.5.6.7)   |
   +-------+-------------------------+--------------------------------+
   | 2     | multipartnumeric+suffix | Numbers separated by dots,     |
   |       |                         | where the numbers are          |
   |       |                         | interpreted as integers with   |
   |       |                         | an additional textual suffix   |
   |       |                         | (e.g., 1.2.3a)                 |
   +-------+-------------------------+--------------------------------+
   | 3     | alphanumeric            | Strictly a string, sorting is  |
   |       |                         | done alphanumerically          |
   +-------+-------------------------+--------------------------------+
   | 4     | decimal                 | A floating point number (e.g., |
   |       |                         | 1.25 is less than 1.3)         |
   +-------+-------------------------+--------------------------------+
   | 16384 | semver                  | Follows the [SEMVER]   =
        |
   |       |                         | specification                  |
   =
+-------+-------------------------+--------------------------------+
=

My understanding is that = they are always encoded as CBOR text strings, so floating-point = doesn=E2=80=99t mean #7.25 or such.

LL



 
Thanks
Simon
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: 27 = October 2020 20:45
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
CoSWID should cover all the = identification of vendors, models, versions and stuff for SW. If it = doesn=E2=80=99t talk to Henk about fixes to CoSWID. :-)
 
For = HW, there is OEMID and recently proposed chip version, board version and = device version. It seems like we need a model number claim for HW. I = will work on that.
 
Seems like submodules would be used to = organize claims for layered attestation and all of the above claims can = occur in any submodule they need to.
 
Does = this mostly cover it? 
 
I = worry that the HW claims are bit too rigid in their use of EAN-13 and = IEEE registries. Might need to do something about that.
 
LL
 


On Oct 27, 2020, at 1:26 PM, Dave = Thaler <dthaler@microsoft.com> wrote:
 
Inline below=E2=80=A6
 
From: Laurence Lundblade <lgl@island-resort.com> 
Sent: Tuesday, October 27, 2020 = 11:57 AM
To: Dave Thaler <dthaler@microsoft.com>
Cc: rats@ietf.org; teep <teep@ietf.org>
Subject: Re: [Rats] EAT claims = needed by TEEP
 
Personally, I think attestation of TEE=E2=80=99s is = pretty important and should be handled well in EAT. So I=E2=80=99m = interested in working on and adding claims for this to EAT.
 
After reading section 7.1 in TEEP architecture, it = does seem like there some work to do here to get to specific = standardized interoperable claims.
 
More comments below.



On Oct 26, 2020, at 3:15 PM, Dave Thaler <dthaler=3D40microsoft.com@dmarc.ietf.org>= ; wrote:
 
As discussed in previous IETF meetings, = if there are claims beyond the base set that
other WGs = need, they can be specified by the other WGs with review by RATS.
 
The TEEP = WG needs the following in EATs and I am not sure whether they can = be
covered = by existing claims or whether TEEP-specific claims are needed.  = From
section = 7.1 of draft-ietf-teep-architecture:
 
=C3=98     -  Device Identifying Information: = TEEP attestations may need to
=C3=98        uniquely identify a = device to the TAM.  Unique device
=C3=98        identification allows the = TAM to provide services to the device,
=C3=98        such as managing = installed TAs, and providing subscriptions to
=C3=98        services, and locating = device-specific keying material to
=C3=98        communicate with or = authenticate the device.
 
I believe the Universal = Entity ID Claim (ueid) is claim that meets the above requirement.
But the TEEP arch then goes on to say:
 
=C3=98        In some use cases = it
=C3=98        may be sufficient to = identify only the class of the device.  The
=C3=98        security and privacy = requirements regarding device identification
=C3=98        will vary with the type = of TA provisioned to the TEE.
Which EAT claim contains the device class? The closest thing = I see is OEM Identification by IEEE (oemid)
but I am not = sure that is sufficient since it's only the OEM not the device class = from that OEM.
This= doesn=E2=80=99t seem like something that should be TEEP specific = though, so can someone tell me how to
represent device = class using the claims in the EAT spec?
 
I don=E2=80=99t think the OEMID, UEID or other should = be (ab)used  to represent device class. That would result in them = being less reliable and useful in a generic sense. We should come up = with a new claim.
 
+1
 
We can define a claim to be  the device class = and make it a byte string like a UEID, but I think we have to go further = to make it useful as an interoperable standardize claim. There has to be = some method for the classification. TrustZone vs hypervisor based? Fast = vs slow? Has a protected mode kernel and TAs? The TEEP document = doesn=E2=80=99t say. This seems problematic without a classification = scheme.
 
[DT] I=E2=80=99m not sure = we need a classification scheme, at least for TEEP.  A simple = device class byte string as you suggest would suffice in my = opinion.
 
I wonder if the intent is more about grouping, in = which case we can define a GEID (Group Entity ID) that looks a lot like = a UEID. That seems useful and sensible to me. It is not about = classification based on any characteristics. It lines up with the = privacy preserving technique of one key per 100,000 devices.
 
=C3=98     -  TEE =
Identifying Information: The type of TEE that generated this
=C3=98  =
      attestation must be =
identified, including version identification
=C3=98  =
      information such as the =
hardware, firmware, and software version
=C3=98        of =
the TEE, as applicable by the TEE type.  TEE manufacturer
=C3=98  =
      information for the TEE is =
required in order to disambiguate the
=C3=98  =
      same TEE type created by =
different manufacturers and address
=C3=98  =
      considerations around =
manufacturer provisioning, keying and
=C3=98  =
      support for the TEE.
 
Similarly for = this requirement, the closest thing I see is Origination Claim = (origination) but I am not sure
that is sufficient since = it's just the manufacturer not the "version identification information = such as the
hardware, firmware, and software version of = the TEE=E2=80=9D
 
Definitely not origination claim. 
 
+1
 
The intent of it something like Endorser = identification and I think it should be replaced by an Endorser/X.509 = cert URL.
 
I would say, this is a combination of claims
 
It=E2=80=99s just used:
1)     For a Verifier in appraising the evidence = (nothing TEEP specific here, appraisal policy can involve any claim), = and
2)     To be used by a TAM to decide which TA=E2=80= =99s apply to the TEE.  In that sense it=E2=80=99s just like any = other vendor id + device class for any non TEE, and I believe if there = were a byte string for device class as you suggest that would be = sufficient in my opinion.
 
Keeping in mind the =E2=80=9Clayered attestation=E2=80=9D= concept in the arch doc, as long as we have a claimset per layer, then = I think the same =E2=80=9Cvendor id=E2=80=9D and =E2=80=9Cclass=E2=80=9D = claims that would apply to any device could be reused for the TEE, and = reused for describing each layer.  E.g., a =E2=80=9Cversion=E2=80=9D = claim would apply at the hardware layer and be the hardware version, at = the firmware layer and be a firmware version, at the OS layer and be an = OS version, etc.
 
 
I=E2=80=99ve just added a PR for HW version = claims.
 
The intent for SW version claims is to use CoSWID. We = should probably create some examples to see if it can represent what = TEEP wants to represent.
 
Agree this sounds = promising.
 
The paragraph mentions =E2=80=9Ctype of TEE=E2=80=9D. = I=E2=80=99m not sure what is intended. I don=E2=80=99t know of any = common taxonomy for classifying TEEs.
 
A= unique identifier is sufficient in my view, no =E2=80=9Cclassification=E2= =80=9D or =E2=80=9Ctaxonomy=E2=80=9D is required by anything that the = TEEP WG has discussed to date, as far as I know.


Should = the TEEP WG define TEEP-specific claims for such information?
 
I=E2=80=99d like to see most of them go into EAT = unless they are super specific to TEEP (TEEP not TEEs). I think there is = value in broad standardize claims as it promotes interoperability of = RATS.
 
Sounds good to = me.   Consider this a request to add some way to express = =E2=80=9Cvendor id=E2=80=9D, =E2=80=9Cmodel=E2=80=9D (or =E2=80=9Cclass=E2= =80=9D or whatever you want to call it), and =E2=80=9Cversion=E2=80=9D = as claims that can be applied in claimsets at various = layers.   I glanced at the PR you referenced and it seems to = be a chip-specific version, not a generic version claim that can be used = at multiple layers, so is not sufficient to meet the TEEP arch draft=E2=80= =99s requirements, we still need other claims added.
 
Thanks!
Dave
 
LL
 



 
Dave
_______________________________________________
RATS mailing list
RATS@ietf.org
https://www.ietf.org/mailman/listinfo/rats
 
 
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank = you.
= --Apple-Mail=_177CD464-4436-4B17-A712-A2657F621E93-- From nobody Thu Oct 29 13:45:51 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E89EF3A0948; Thu, 29 Oct 2020 13:45:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=R4oq5+Vv; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=R4oq5+Vv Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8GpRTUlF46R8; Thu, 29 Oct 2020 13:45:34 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20062.outbound.protection.outlook.com [40.107.2.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DEC93A0930; Thu, 29 Oct 2020 13:45:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=R4oq5+VvPU2VJSFuTNJj8uJqTtvWEUNelzdLCXlMnwYKd4gwvM/pLY2luPQAEKiaMKuG7FZpE3eMZxbObpkNED/m5T6Ui8H8T/gZTOMfsTKSWR9GC3HmZPQaEPX1jDL3PW+t6ckD+PBotEgYBCkJDDsz0rPYaLmnBGs0KriowSo= Received: from AM5PR1001CA0011.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:206:2::24) by VE1PR08MB5629.eurprd08.prod.outlook.com (2603:10a6:800:1a6::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.21; Thu, 29 Oct 2020 20:45:28 +0000 Received: from AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:2:cafe::26) by AM5PR1001CA0011.outlook.office365.com (2603:10a6:206:2::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.27 via Frontend Transport; Thu, 29 Oct 2020 20:45:28 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT032.mail.protection.outlook.com (10.152.16.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Thu, 29 Oct 2020 20:45:28 +0000 Received: ("Tessian outbound c579d876a324:v64"); Thu, 29 Oct 2020 20:45:28 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 80978b74e18b063d X-CR-MTA-TID: 64aa7808 Received: from 50e157519231.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 5B651D42-1C88-411E-970E-7BF3372F0BFB.1; Thu, 29 Oct 2020 20:45:22 +0000 Received: from EUR04-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 50e157519231.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 29 Oct 2020 20:45:22 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=PVjkEWzxy5aomxqsVmswFfrMNBnY750lG/IjXPugbYRBFiy4b+qsfmEon/VWkJDAHJ3PHtkgMYxe99cP7oKeY1gGNfmqX/d4T+NZI2N3Ji3in9PVE4YKLyJsnhvbbfW1Lbn1bZwefBoEBel942lZy24+YLSkICrWSKMYio1RmeUIHGxU6H2F2W9z7tuYWUzA0DLAF+MKDqqqCPj5zsnyhCqKZ/gB5psrBPdj90ETWiykUvWJhrFsWnLB/qU49861Hsy7d0SkWwoLriN2nUO5JlsT8BJnrEAm1Q6yuRuck/nRxtmLgmiNA7JK1ngujk4woDg0JACgmG1B1YsgWsFZuw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=BM/scDWM2tc0jACoYDJffjlN7sVLn9C+hVgd5secUnV5EztSttbTd+zvsz71aIMabynkO9+nKmqcy7pkCSUQI/c+Lt3yMo8T3+r1bDEsGEzK+1X4uv2N6b6JP8LS15C594uguQ6TzbPlSDxvaLaXhvbmtlX7YE5Z00++r2oU+gWf+4iP2lLdCOTEjl0ePPLlgy6o4Nr8MjOFmwu3t0zl2L3E9rpPs9T/n3D83wJj1v6yk9nPO3AdM34jcwbAOvuzHgGJbjKL2WvQQLOVRdhh3Ef9G8dY58BCWNPleBCmW6jXcisOdgyWiYbYc+HloC68SuxNvKqhddHi+2ppgRQp0A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B1xt4PO3ZnHmiU2PInjFTjoub062JEEXF7KTNDzs47E=; b=R4oq5+VvPU2VJSFuTNJj8uJqTtvWEUNelzdLCXlMnwYKd4gwvM/pLY2luPQAEKiaMKuG7FZpE3eMZxbObpkNED/m5T6Ui8H8T/gZTOMfsTKSWR9GC3HmZPQaEPX1jDL3PW+t6ckD+PBotEgYBCkJDDsz0rPYaLmnBGs0KriowSo= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB3974.eurprd08.prod.outlook.com (2603:10a6:20b:a3::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Thu, 29 Oct 2020 20:45:20 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0%7]) with mapi id 15.20.3499.027; Thu, 29 Oct 2020 20:45:20 +0000 From: Thomas Fossati To: Laurence Lundblade , Simon Frost CC: "rats@ietf.org" , teep , Dave Thaler , Thomas Fossati Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAtBI8AADYVQwAAAL1cOA== Date: Thu, 29 Oct 2020 20:45:20 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> , <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> In-Reply-To: <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [82.11.185.80] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 668e3019-4061-45e8-c619-08d87c4b9203 x-ms-traffictypediagnostic: AM6PR08MB3974:|VE1PR08MB5629: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:6108;OLM:10000; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: WwQc8JvYv++rjQqZcF145IwtXuGkKj1l3Ok7Gt3Vj5NpA4lT9YveEqaQqrIShlnQUYRfjIacu9IDAgQ9KDNQJMqsXnwu2paMFCKR97rnD9udPYkTBjqXphlcsyIHhm75OmG9ZvJzaOxfGuJVhNIMEEvsRTKqUv7Hycy2KSq/skLu2MYiHrAEwfInWrupJacWwSeiXCj7/dzfbVeJMJzq2pTW50hcfbyxmVFJcfcyGJuYkLB7nHmh4KYnwXfeqYl+22Dg3xaXY2tL9aC3WlF2zaBhiwbW+N6XsbB8bcEGLh6IZHiy6aU9y1ILIbHarp6t X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(346002)(39850400004)(366004)(136003)(396003)(110136005)(7696005)(316002)(4326008)(2906002)(54906003)(52536014)(71200400001)(9686003)(186003)(64756008)(6506007)(8676002)(55016002)(66446008)(8936002)(66556008)(91956017)(76116006)(66476007)(66946007)(9326002)(6636002)(83380400001)(33656002)(26005)(86362001)(4744005)(5660300002)(478600001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 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 Content-Type: multipart/alternative; boundary="_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3974 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: d0668116-570f-4342-6c89-08d87c4b8d2a X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: u+08IUqxYmZPH8goRXyGbT5vqZBac4lrxhocZ/99jkiX8KNQfpDQm9vH4aT93yd1ItMzn7i8KjuxYxuZg9QbiojBlXbJlqyOwBvErMu7N3fj4RiiyDH+JX3v3JYAz4Qqz+buk7oaLhqJSrafGlbpjuR1+VJ6xQQaKC6Dnh0XMaa/aCPySpzXTsokVr3xv5SPjcwOXetEZwoPaVWptzXG3M5cpTgoXwKhKHZnBL0dJjbHFnxtitC9yumVTHbjbc4I/JA74wKucCFLNy6s5HHwOZZ4bOq0YBZ2qb5MiDkv65oOWtb9rVia+EsKrINOo1XTQ3yBR/ZOgvdyShwv6RngTN5wKZQGfX8fdjDKor3suOYKTUr1IraNILQ7GkFJghaz+2HJMFDfPWG9kTRxhTreSQ== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(39850400004)(136003)(376002)(396003)(346002)(46966005)(47076004)(186003)(70586007)(9686003)(70206006)(82310400003)(55016002)(7696005)(81166007)(54906003)(33656002)(36906005)(316002)(110136005)(26005)(9326002)(8936002)(82740400003)(4326008)(478600001)(450100002)(6506007)(83380400001)(6636002)(5660300002)(86362001)(52536014)(336012)(2906002)(8676002)(356005); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Oct 2020 20:45:28.6218 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 668e3019-4061-45e8-c619-08d87c4b9203 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1PR08MB5629 Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 20:45:36 -0000 --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Laurence, > My understanding is that they are always encoded as CBOR text strings, > so floating-point doesn=92t mean #7.25 or such. Correct. In (Co)SWID software-version is just a text string and version-sc= heme is there to do some semantic polishing. But the underlying type is always = #3. Maybe I=92m misunderstanding your proposal here, but I would be circumspect in mixing SWIDs attributes, which are scoped to software artifacts, with HW identifiers. Cheers! IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

Hi Laurence,

 

> My understanding is that they are always encode= d as CBOR text strings,

> so floating-point doesn=92t mean #7.25 or such.=

 

Correct.  In (Co)SWID software-version is just = a text string and version-scheme

is there to do some semantic polishing.  But th= e underlying type is always #3.

 

Maybe I=92m misunderstanding your proposal here, but= I would be circumspect

in mixing SWIDs attributes, which are scoped to soft= ware artifacts, with HW

identifiers.

 

Cheers!

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM6PR08MB423141370A5CE9DEF6C732C69C140AM6PR08MB4231eurp_-- From nobody Thu Oct 29 14:06:58 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E70CB3A0114 for ; Thu, 29 Oct 2020 14:06:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZN--Q50PV2P6 for ; Thu, 29 Oct 2020 14:06:55 -0700 (PDT) Received: from p3plsmtpa09-10.prod.phx3.secureserver.net (p3plsmtpa09-10.prod.phx3.secureserver.net [173.201.193.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2DCB3A02C1 for ; Thu, 29 Oct 2020 14:06:55 -0700 (PDT) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id YF8IktZh2hxTPYF8IkLBZE; Thu, 29 Oct 2020 14:06:54 -0700 X-CMAE-Analysis: v=2.4 cv=PLjKRdmC c=1 sm=1 tr=0 ts=5f9b2eee a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=7CQSdrXTAAAA:8 a=CRrk88pQzB9dKn-9xysA:9 a=QEXdDO2ut3YA:10 a=6qy36IhDiBWzmJzcoZMA:9 a=C7YeEDshcqagmwDt:21 a=_W_S_7VecoQA:10 a=a-qgeE7W1pNrGK8U0ZQC:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Thu, 29 Oct 2020 14:06:53 -0700 In-Reply-To: Cc: Simon Frost , "rats@ietf.org" , teep , Dave Thaler To: Thomas Fossati References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfJsxIRhglPYq6QUVgUDUSvnRkoiuELx6gHlslFltCHqyyzdwXoZSb0uPmhsiMmyx6tNwk251U6CfUno/r0kmlVYYzES09jeuJ7TQTezOkpkV8+k7BRhb omUoSe8ILaj5tfJod7i+Btz2xKrRLFsTwJ5tKk+qgu9zC5U/hqSWVX63A1HrIKrSYSSfbbVxqxtWzcyjYJrgX8q8NY9DfbfSkDDa7fyxsRuZAbGigsrdZ3F/ K2D07aiHiSfEXYFz5rwEKvgzs/KYWt09Qvq8ockoYk9NaRHGJrRy94xBxXq+kZaIgJCM5oTzYYOQvzIqoOuvbw== Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 21:06:57 -0000 --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 29, 2020, at 1:45 PM, Thomas Fossati = wrote: >=20 > Hi Laurence, > =20 > > My understanding is that they are always encoded as CBOR text = strings, > > so floating-point doesn=E2=80=99t mean #7.25 or such. > =20 > Correct. In (Co)SWID software-version is just a text string and = version-scheme > is there to do some semantic polishing. But the underlying type is = always #3. > =20 > Maybe I=E2=80=99m misunderstanding your proposal here, but I would be = circumspect > in mixing SWIDs attributes, which are scoped to software artifacts, = with HW > identifiers. Hi Thomas, All the SW Version stuff would fall under a single EAT claims that = contains a full CoSWID. For HW Version, I was thinking of two EAT claims, one for the version = text, another for the version scheme (or we could go off and define a = full CoHWID). LL --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 29, 2020, at 1:45 PM, Thomas Fossati <Thomas.Fossati@arm.com> wrote:

Hi Laurence,
 
> My understanding is = that they are always encoded as CBOR text strings,
> so floating-point = doesn=E2=80=99t mean #7.25 or such.
 
Correct.  In (Co)SWID software-version is = just a text string and version-scheme
is there to do some semantic polishing.  = But the underlying type is always #3.
 
Maybe I=E2=80=99m misunderstanding your proposal = here, but I would be circumspect
in mixing SWIDs attributes, which are scoped to = software artifacts, with HW
identifiers.

Hi Thomas,

All the SW Version stuff would fall under a single = EAT claims that contains a full CoSWID.

For HW Version, I was thinking of two EAT claims, = one for the version text, another for the version scheme (or we could go = off and define a full CoHWID).

LL



= --Apple-Mail=_64EE1195-F5A7-4DFC-A62E-8A27ABFCCF32-- From nobody Thu Oct 29 14:21:42 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 923E73A0773; Thu, 29 Oct 2020 14:21:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tAnuIEML; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=tAnuIEML Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sF484SinxEir; Thu, 29 Oct 2020 14:21:35 -0700 (PDT) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on2044.outbound.protection.outlook.com [40.107.20.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5719F3A0115; Thu, 29 Oct 2020 14:21:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=tAnuIEMLM6wSsJZygTBZyHRePWzUL+v/zwv9lYutgY4lcrnGnXN8oAC4OeZnJw3NGzbzN3fbu4lkeoyjNs9ZPG8wrvdLGlgg2G+ruYfo0jpRSLKkXf39uLYV6ghXLAeKPrtY48g5ud+9XVS+ncZ8DkueFUXbX9FE0x9XyT8ZNkQ= Received: from AM6PR10CA0071.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:209:80::48) by AM6PR08MB3333.eurprd08.prod.outlook.com (2603:10a6:209:45::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18; Thu, 29 Oct 2020 21:21:32 +0000 Received: from AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:80:cafe::69) by AM6PR10CA0071.outlook.office365.com (2603:10a6:209:80::48) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.18 via Frontend Transport; Thu, 29 Oct 2020 21:21:32 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT019.mail.protection.outlook.com (10.152.16.104) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3520.15 via Frontend Transport; Thu, 29 Oct 2020 21:21:32 +0000 Received: ("Tessian outbound c189680f801b:v64"); Thu, 29 Oct 2020 21:21:31 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: d86d41fd507f3b23 X-CR-MTA-TID: 64aa7808 Received: from 70b5d8c94539.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 2F2F9019-3D83-45FF-ACD2-E0D3B4406FE5.1; Thu, 29 Oct 2020 21:21:16 +0000 Received: from EUR05-AM6-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 70b5d8c94539.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 29 Oct 2020 21:21:16 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FXAuYJQxI+XHkZOJHl2i52jqyc9SbfEIw1FRLglbtios5vkJh6cUccYlRNObNvG+ezuUe4CBR1XPLAzSC/EOHQlg7GXrfjSx5rbusttEEmY5bmOc5QgJAHGq71oNK7229AJu0ZwCxORbyA5LdwR7fWCs4zzQfcJcOeZOz/hpPcNwHe7E89PK1jd/Q4FxvgB8LoJ5XvwX6Mi4sYGS7XO4h/2p5hT6PjTTckukemusqFz0l+IkVheWhMO7oLRuv6xOQCzAt2QxT5eyYELP/RlYV1VzgEkAmlBnWx8NbSDCf52h8rLMWhvUFCOyDEne2hpiYd3TJ9GgeepKo8g9DUbP5w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=LQgmUwfGX2YbpNinDXvneT1LWXjOECc/Kl6wsArCoJG3ajT+2fPFLD4dyG6ZvfFfJzwmX8qSJgnXAEn0U3Q0RIwwoQZZH+Bx2usbdrozOMwAhWsFTszx7PVuGA0LlQyhT+1amBpUPL3l+BJA68sCpfI+qiP+KAfc75LUW6qUGfcBd5tXRWe4lRj75I8ISa4E9PLAMnIqBYC/B78CmEZ4QzJAMRKWI5ytd1Jg1wchC3xr/tL1auOmFcCbnU6I1SD9terQQtUFGLuDlw6qqrHaZTyqq8E2APuRpJMPi54V1dcR2BcjQ7ZXkQ1WdrvEgTSr4MJ6LZbOPOC6ZMn/wouE2w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w+RIueMWNEjA+RlI5iIEh1nOMJbYSqKwNcjdFfVoHX4=; b=tAnuIEMLM6wSsJZygTBZyHRePWzUL+v/zwv9lYutgY4lcrnGnXN8oAC4OeZnJw3NGzbzN3fbu4lkeoyjNs9ZPG8wrvdLGlgg2G+ruYfo0jpRSLKkXf39uLYV6ghXLAeKPrtY48g5ud+9XVS+ncZ8DkueFUXbX9FE0x9XyT8ZNkQ= Received: from AM6PR08MB4231.eurprd08.prod.outlook.com (2603:10a6:20b:73::23) by AM6PR08MB4658.eurprd08.prod.outlook.com (2603:10a6:20b:c4::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3477.21; Thu, 29 Oct 2020 21:21:14 +0000 Received: from AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0]) by AM6PR08MB4231.eurprd08.prod.outlook.com ([fe80::84c3:67dd:3633:4ac0%7]) with mapi id 15.20.3499.027; Thu, 29 Oct 2020 21:21:14 +0000 From: Thomas Fossati To: Laurence Lundblade CC: "rats@ietf.org" , teep , Dave Thaler , Simon Frost , Thomas Fossati Thread-Topic: [Rats] EAT claims needed by TEEP Thread-Index: Adar5IMluvH5Xfk/TjCNoR5RTUTf2AAroFeAAAKv15AAARKhAAAtBI8AADYVQwAAAL1cOAABgHyAAABiwm4= Date: Thu, 29 Oct 2020 21:21:14 +0000 Message-ID: References: <7607E6BF-459C-4A32-AAE2-08117A97E06B@island-resort.com> <2D53BD60-4FA8-4153-B28B-585E902845AE@island-resort.com> , <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> In-Reply-To: <3370D92E-23C2-41C3-B86F-A65C168E9082@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: Authentication-Results-Original: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; x-originating-ip: [217.140.99.251] x-ms-publictraffictype: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 7d29962f-a9e5-4ad2-eb2a-08d87c509bdb x-ms-traffictypediagnostic: AM6PR08MB4658:|AM6PR08MB3333: x-ms-exchange-transport-forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true x-ms-oob-tlc-oobclassifiers: OLM:7691;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: kMeYY4Ei3y/TU0xzShwvlYzJtpnvxNuU95FXwf3U4lj1ybqFzGoKZXvunjkspa7MSVTjMKZbOltL2Vh0XK0NDa40VnVgQd1wunAUzxZUcVvb4fohlfVz6BUFOJsEltWzzO3KXIbBBn+5jynpeDd/pr0IavukeVd5nT2C4HS8Z/17zkfgwiI7q0yqUraHJzEWmyhiPqDIDn+2B/R3JbpfNJB9Cumq5rQnUmOZRvcAgb1oaBliVZSNpXP4WfOGqj1FxTyUioy27lhQS3EpkFrUs4dmeEY2+lA81vsMId6/drstjcKSqNr1qJB2u6POSqh5 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4231.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(39860400002)(346002)(376002)(366004)(396003)(6916009)(9686003)(2906002)(5660300002)(86362001)(4326008)(54906003)(66946007)(66476007)(76116006)(91956017)(66556008)(64756008)(66446008)(478600001)(52536014)(33656002)(71200400001)(53546011)(7696005)(6506007)(8936002)(316002)(186003)(55016002)(8676002)(83380400001)(26005); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: 02odFCmzO8zxinT5GuxWSkDI3PFhqH0nojf1pncapgiD32QykD2VM1wXL84qyE8C3hgD0s0+jn+vG38GNdnD3vEvZ+erbsL2x95UmATC7oc7vCdSEvUwPiaJYN8ZHf56A4W1fy3GtuDWFPE3IwWLWm8lp2kXKrrr92vOFwCqJaFeTv/GrW2+XrYPb7QWRjs46Qs+6PSKuNQmGVSrjd/I6as+RbasRvlcEYsUnP9nyIMqqWGxAInezzCy9s3BU9YL/J8R9CDPfj04RpYZHks6yg2cIBOXlxxpac2uW4TNHHMbLKhQ8DsGpwM+9udPUoQ5vGK8WpY7dh1qXJE8582AdKCcDSMfuiJlSipMxavc+Sz4wawiPNupW4rm2162STEJXGub3dLYzNrVSZIs8pwM8GiBCfgoG5ab4Dums1URpiWlwvYs7WugFj9gh9GqLkahZkQPBWROsUwa8J2EhZYNbdLhy45suapYRhoZ92W7M0YtwJmBf96Cb36iiYgCDx0mCDikNHW4TnsvX/0EliTv8Nr/VWcJI27Z5qjrflsvSUJcEFON28bXNHAp/FcwNAIgTlHofnW4Sz1+WQ0nXb+rtFt0QolAPJEpdW19koSqeVJIQZky7+D5dFQYXL3Fj2TUBstQqep69aNcXYGquaYFJQ== Content-Type: multipart/alternative; boundary="_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4658 Original-Authentication-Results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 4d0fa688-23fc-430c-0687-08d87c50910c X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: GIqe+Me7XDTe5nl+H6VBPXdeFUPSX1aATEzCZaU2ifelGRCgUNU4XhfkmGs5j9hYcRgqDAqjx7L5uqWCHMp9LGbjgUfq8ehWYzLq2XlUHXocISwUZsnVsE6dtK3f+xdmphgT+t7+FdtuUEM8KKL/+REuZCBx4mrbLl7cFyugy42aiOH7EADP/DApuTISlXIiEFCDSDJjSmAhjKa422MCxoGyUsSRBPNDkZcJZ4ydqBT0mBILTbCjEX87b4vj2bQf/GuU06Rm9EDvguVQZ6wIV1twPSr6h31h7H/0JJ0J63Uy0dTfJDxdmGXhUQgfN6A0UFVglNt0k4ZdS0Nz9qU0i76mFYiPy47zqH79LPgIkxdaAuxJZl0xZY7YWDTEEpfrg5Osk5gOlmdUmFGyMKC8Hg== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(376002)(396003)(346002)(39860400002)(136003)(46966005)(55016002)(186003)(8676002)(6862004)(5660300002)(478600001)(70206006)(4326008)(6506007)(7696005)(54906003)(26005)(36906005)(33656002)(86362001)(53546011)(70586007)(82310400003)(2906002)(316002)(52536014)(450100002)(8936002)(82740400003)(356005)(9686003)(336012)(81166007)(47076004)(83380400001); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Oct 2020 21:21:32.6095 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 7d29962f-a9e5-4ad2-eb2a-08d87c509bdb X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT019.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3333 Archived-At: Subject: Re: [Teep] [Rats] EAT claims needed by TEEP X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2020 21:21:38 -0000 --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable On 29/10/2020, 21:07, "RATS" wrote: > On Oct 29, 2020, at 1:45 PM, Thomas Fossati wrot= e: > > Hi Laurence, > > > My understanding is that they are always encoded as CBOR text strings, > > so floating-point doesn=92t mean #7.25 or such. > > Correct. In (Co)SWID software-version is just a text string and version-= scheme > is there to do some semantic polishing. But the underlying type is alway= s #3. > > Maybe I'm misunderstanding your proposal here, but I would be circumspect > in mixing SWIDs attributes, which are scoped to software artifacts, with = HW > identifiers. > > > Hi Thomas, > > All the SW Version stuff would fall under a single EAT claims that > contains a full CoSWID. > > For HW Version, I was thinking of two EAT claims, one for the version > text, another for the version scheme (or we could go off and define a > full CoHWID). OK, looks like I had misunderstood your plan :-) thanks for the clarification! IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable

On 29/10/2020, 21:07, "RATS" <rats-bounces@i= etf.org> wrote:

> On Oct 29, 2020, at 1:45 PM, Thomas Fossati <Thom= as.Fossati@arm.com> wrote:

> 

> Hi Laurence,

> 

> > My understanding is that they are always encode= d as CBOR text strings,

> > so floating-point doesn=92t mean #7.25 or such.=

> 

> Correct.  In (Co)SWID software-version is just = a text string and version-scheme

> is there to do some semantic polishing.  But th= e underlying type is always #3.

> 

> Maybe I'm misunderstanding your proposal here, but I= would be circumspect

> in mixing SWIDs attributes, which are scoped to soft= ware artifacts, with HW

> identifiers.

> 

> 

> Hi Thomas,

> 

> All the SW Version stuff would fall under a single E= AT claims that

> contains a full CoSWID.

> 

> For HW Version, I was thinking of two EAT claims, on= e for the version

> text, another for the version scheme (or we could go= off and define a

> full CoHWID).

 

OK, looks like I had misunderstood your plan :-) thanks f= or the

clarification!

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM6PR08MB42311D76B24E866812171BDC9C140AM6PR08MB4231eurp_-- From nobody Fri Oct 30 15:20:20 2020 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B43183A1288; Fri, 30 Oct 2020 15:20:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92vefWkKZQm5; Fri, 30 Oct 2020 15:20:18 -0700 (PDT) Received: from NAM10-DM6-obe.outbound.protection.outlook.com (mail-dm6nam10on2135.outbound.protection.outlook.com [40.107.93.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B0D73A1285; Fri, 30 Oct 2020 15:20:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nCjB9P2Bhux9qX0PJVZi6DZIvVzPnOZP1BiOmSlRRV29dj2ql8ERDo3CSm2WwhEpt932Z/sRcwfTXmmcXMztoUvtusJJKMAvLma4+PT96CdeI4Yf4OLMi6xng9vhX6eV6q7IbzxeTuTykaqcrMdl8eiNmgrgStJu1u6fqUjdHyZvch2M0Voml9MYSona1B11bQGRJLRxAtALsCwO01daQSIhRwVlW0aRqBMMtafzBqsj7K3cUWhEwbrYXBpYQRCCw8UTBl+TDFAcyR4Ds5tgHACfF7n7NyTT1B0AGANlOoRuF6uVF1gKQbGfl9NJetRruhh0ubOXlKzHmP2uAa9nCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t4jq6BXBscW7RQucPTFQ1Xok31jdbTsEfJ5kuVFFs6w=; b=MLA6tZy45FvDfAv7XTR1+4nUvZv21lC+o9lGRFf00jq5EGvF2PveRm6XfKrxlUygCTCE3bD8IUI6nsXSA/hG1x8aYjYtYKhF8nQGbSV9PjAOF5uw6C/Np4LIbwtBKJEPfTm6iUTorxCpEmxLdb/I8LAc20Q5xYtTMhwJf4sQx7nhcVSOxYiP50hAbhZ6ED/MBzd8DAZV6L04CEn4rynK/hOuXA9wn9b6p6syFQzVBinOXAFzN532IL5SX+p3yaIQ+wHPEW+lcscuYRApk5XAK+5d3P8CxEIR7prnICVQT5SsCleRcjWJnIGNpKDOlBmErHYVoKOQeZHuokc0J/qZ1g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=t4jq6BXBscW7RQucPTFQ1Xok31jdbTsEfJ5kuVFFs6w=; b=XVv+NhUx+iPWr3P7UdiLu63NG/+/miqVWtV04YZTj2U1BZs7ZCm9SiogfKvxLfsR4ZO5PJzQbH+SxGAHpiSWsYced28XOebFJo4+ICB+WeYJw+7kELNhfSDmp1kcMbU1AWLaKFut0RxMDm3C/V41pXcTimDJJvQQRL4Y46WtMNk= Received: from BL0PR2101MB1027.namprd21.prod.outlook.com (2603:10b6:207:30::33) by BL0PR2101MB1105.namprd21.prod.outlook.com (2603:10b6:207:37::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3499.3; Fri, 30 Oct 2020 22:20:16 +0000 Received: from BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f]) by BL0PR2101MB1027.namprd21.prod.outlook.com ([fe80::4da:87a4:8d47:889f%6]) with mapi id 15.20.3499.027; Fri, 30 Oct 2020 22:20:16 +0000 From: Dave Thaler To: teep CC: "rats@ietf.org" Thread-Topic: FYI: Confidential Computing webinar Nov 10 Thread-Index: AdavCsPRUAoVuBZfQu65AVlg+B2XXQ== Date: Fri, 30 Oct 2020 22:20:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-10-30T22:20:13Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=bcc40692-6fff-47ed-99ee-7f4268c443cc; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2601:600:9780:8d0:3d03:c139:8d7:e672] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 1bf0e08c-77ae-4de8-e42d-08d87d21fa6f x-ms-traffictypediagnostic: BL0PR2101MB1105: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: JjlAU/ftg8IBftRxz/X2r7Umjx1JDlkQeBMYJnocMNDMKMi39S2KpHf6/oMHt3uDKjBlOjX6QH5GIkboAftFTTg5q6aRVEvyFMK2uHWRqzKnViBNYetpGXIMTf5rLjTjOGB0+gVuhDYLbuYB1k3ntskZuYJD7QB/aJhZ1I+MBnc0vPHfDeAR+z1I8jCmSS1VOOCmLdES/d9aOh0W95MAohXYf5pbSFLJpAlK0Plto/RMFC/2gmpQPjAxXoDYf9EgPAalltPLAg1WumTlrhh/chpxcRj+tZvuYJB5O5gouMYk9enpf/+6fbtp1oyT37BVM8LCpQzf+RvpQ/CTxdfyUz+bTNnF5sOH6jlMgMi31a0O8auVIUGUFhrBRAHoQyAmZJGY7iDnKVBr5l3VYR9PrQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BL0PR2101MB1027.namprd21.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(366004)(136003)(346002)(396003)(376002)(186003)(8936002)(82950400001)(6506007)(82960400001)(6916009)(7696005)(450100002)(166002)(8676002)(10290500003)(86362001)(4326008)(83380400001)(52536014)(76116006)(9686003)(2906002)(66946007)(316002)(966005)(478600001)(64756008)(33656002)(55016002)(66476007)(66446008)(5660300002)(71200400001)(66556008)(8990500004); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: 0lLmui2OIK7mZpVw4BiePAyILe3PwPtR/4PK0IbjRtzZm2WW0YbK6igaxoSVwJdKJGF4uXyRoeU6iML03z5qszHFVbciqdJJb3riYpPDex7Yh3dPCBzREs6rkhJfmuGcAMNiIQf44sM231ZvW8rtGncwOW0RUFEmv7eUs2rpyyx1YAdfAP521DbanfHI8zkkF/gLVsRAdJnF0/61qDGb3cfEP9U7JOEqIahNbRMWwPJA1vwzVo0WGrfvArcLnpk//H8tqiePI+8dOqjfVTkTwEgBMrQXGeXqj3C9YcoMbKAxtNurJrVeeddmvpyE+e4jqmJnKajuc3cDTf7VeTvt/oggJHDP7r/0R4ypdBI/kj+OBEyn/DWO1bkspKSJYVkolNt6pB/hKCz96TJNOF2P2fwGVOaQV/U2Fg9yTr8/2xNOQk0CNt9cMzo3VX+1OyYccHN5NxDsAj1ALtJ/wzWfhR11XWcuUNO5Nyfr9yUPwG652EcDz4SqVv4Lu3vsegzZTyokBYfxRrITk0b0MHpbHRxBqmF76rYZuh6qfVYkOsNk3iOQdWubPBl9mau6kj/YV3W7swNdBnEKflnZDFyHF7bNZMwqWgcj6by9i2VOapXF2U31X8A+7PPBh1uk0GP9eBVUsGDKlnwJCSQ9z7B8LA2O6nlejAZeO7mXfNUeIAey7BGxQTF6NPnBb/IPtjB886Ug8yUNjZu1L95Wl8gF+g== x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: BL0PR2101MB1027.namprd21.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1bf0e08c-77ae-4de8-e42d-08d87d21fa6f X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Oct 2020 22:20:16.0115 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: v0XjiNUPtoEB2JryjNZN6KciVzw/ymy5sS+qwcqGtNQxjeqlVlgeqd07LGoXh9qXNecGCpBUofoiMvHMH+DSMr7eW6BQ7BM5o3kLVQCyUjU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR2101MB1105 Archived-At: Subject: [Teep] FYI: Confidential Computing webinar Nov 10 X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Oct 2020 22:20:20 -0000 --_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable In past TEEP WG meetings I have given a 1 slide summary of the Confidential Computing Consortium, which is an org under the Linux Foundati= on, focused on open source projects for on trusted execution environments. And the CCC provided feedback on the TEEP arch doc about the definition of a TEE which was incorporated and now CCC and TEEP use the same definition. Similarly Mike Bursell was going to present a TEEP use case from Enarx (an = open source project under the CCC) at IETF last year but couldn't make it so I e= nded up presenting his slides for him. Anyway, the CCC is doing an open webinar on confidential computing next wee= k and I'm one of the co-presenters. Because of the synergy between TEEP and= the CCC (and the TEE use case in RATS), I'm sharing the information here since we w= ant to continue to encourage collaboration between CCC (for open source) and TEEP/RATS folks (for standards). Tuesday November 10, 2020 at 8:30AM PT https://confidentialcomputing.io/webinar/ CCC meetings are also open to the public and a couple of you have attended = them, this webinar is more an intro but potentially of interest to anyone working= on TEEs. Dave --_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

In past TEEP WG meetings I have given a 1 slide summ= ary of the

Confidential Computing Consortium, which is an org u= nder the Linux Foundation,

focused on open source projects for on trusted execu= tion environments.

And the CCC provided feedback on the TEEP arch doc a= bout the definition of

a TEE which was incorporated and now CCC and TEEP us= e the same definition.

Similarly Mike Bursell was going to present a TEEP u= se case from Enarx (an open

source project under the CCC) at IETF last year but = couldn’t make it so I ended up

presenting his slides for him.

 

Anyway, the CCC is doing an open webinar on confiden= tial computing next week

and I’m one of the co-presenters.   = Because of the synergy between TEEP and the CCC
(and the TEE use case in RATS), I’m sharing the information here sinc= e we want to

continue to encourage collaboration between CCC (for= open source)

and TEEP/RATS folks (for standards).

 

Tuesday November 10, 2020 at 8:30AM PT

https://confidentialcomputing.io/webinar/

 

CCC meetings are also open to the public and a coupl= e of you have attended them,

this webinar is more an intro but potentially of int= erest to anyone working on TEEs.

 

Dave

--_000_BL0PR2101MB102766F6A407C7DF9468CBE5A3150BL0PR2101MB1027_--